From 02239550586cb02a73d5d900ff7a16f38842bce2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 28 Feb 2026 21:14:51 +0100
Subject: [PATCH 001/129] Add unstable_swallowErrors option

---
 libraries/react-native/README.md              |  32 +++
 .../react-native/src/__tests__/client.test.ts | 146 +++++++++++-
 .../react-native/src/client-react-native.ts   |   2 +
 libraries/react-native/src/client.tsx         | 220 ++++++++++--------
 package.json                                  |   1 +
 pnpm-lock.yaml                                |  73 ++++++
 6 files changed, 380 insertions(+), 94 deletions(-)

diff --git a/libraries/react-native/README.md b/libraries/react-native/README.md
index cd8e53867..a6776b406 100644
--- a/libraries/react-native/README.md
+++ b/libraries/react-native/README.md
@@ -28,6 +28,38 @@ Observer reconciliation:
 - Client-side dedupe key is `platform + transactionId + purchaseDate`.
 - The server endpoint is idempotent by store transaction identity to tolerate retries/duplicates.
 
+## Unstable error swallowing
+
+For early-alpha integrations, you can enable unstable side-effect error swallowing:
+
+```ts
+createVoidhashClient("pk_test", schema, {
+  readOnly: true,
+  scheme: "myapp",
+  unstable_swallowErrors: true,
+});
+```
+
+When `unstable_swallowErrors: true`, the SDK logs warnings and does not reject for:
+
+- `init()`
+- `end()`
+- `identify(...)`
+- `signOut()`
+- `restorePurchases()`
+- `iosPresentCodeRedemptionSheet()`
+- `iosShowManageSubscriptions()`
+
+The following remain strict and still reject on failures:
+
+- `getCurrentCustomer(...)`
+- `getFeatureFlags(...)`
+- `getPaywallForLocation(...)`
+- `getProducts()`
+- `purchase(...)`
+
+This flag is intentionally unstable and best used for background/observer-style alpha integrations. It is not recommended for core purchase flow handling.
+
 ## HTTP debug mode
 
 Enable verbose HTTP logging when debugging request/response flow:
diff --git a/libraries/react-native/src/__tests__/client.test.ts b/libraries/react-native/src/__tests__/client.test.ts
index ba1b28b5f..58bb79257 100644
--- a/libraries/react-native/src/__tests__/client.test.ts
+++ b/libraries/react-native/src/__tests__/client.test.ts
@@ -41,7 +41,7 @@ import {
 } from "../errors";
 import { createTestSchema } from "./helpers/test-schema";
 
-function createClient(readOnly = false) {
+function createClient(readOnly = false, unstableSwallowErrors = false) {
   return new VoidhashClient(
     null,
     "voidhash",
@@ -49,6 +49,7 @@ function createClient(readOnly = false) {
     "https://api.voidhash.test",
     "pk_test",
     readOnly,
+    unstableSwallowErrors,
     new EventBus(),
     "ios"
   );
@@ -146,6 +147,29 @@ describe("VoidhashClient", () => {
       );
     });
 
+    it("swallows identify errors when unstable_swallowErrors is enabled", async () => {
+      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+        return;
+      });
+      const client = createClient(false, true);
+
+      (client as unknown as Record<string, unknown>).initializedClient = {
+        identify: () => "identify-effect",
+      };
+      (client as unknown as Record<string, unknown>).effectRuntime = {
+        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+      };
+
+      await expect(
+        client.identify("new-user", { email: "new@voidhash.test" })
+      ).resolves.toBeUndefined();
+      expect(warnSpy).toHaveBeenCalledWith(
+        "[voidhash] swallowed error in identify",
+        expect.any(VoidhashError)
+      );
+      warnSpy.mockRestore();
+    });
+
     it("throws when purchasing in read-only mode", async () => {
       const client = createClient(true);
 
@@ -183,6 +207,126 @@ describe("VoidhashClient", () => {
       );
     });
 
+    it("swallows restorePurchases errors when unstable_swallowErrors is enabled", async () => {
+      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+        return;
+      });
+      const client = createClient(false, true);
+
+      (client as unknown as Record<string, unknown>).initializedClient = {
+        restorePurchases: () => "restore-purchases-effect",
+      };
+      (client as unknown as Record<string, unknown>).effectRuntime = {
+        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+      };
+
+      await expect(client.restorePurchases()).resolves.toBeUndefined();
+      expect(warnSpy).toHaveBeenCalledWith(
+        "[voidhash] swallowed error in restorePurchases",
+        expect.any(VoidhashError)
+      );
+      warnSpy.mockRestore();
+    });
+
+    it("swallows init errors and keeps client uninitialized when unstable_swallowErrors is enabled", async () => {
+      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+        return;
+      });
+      const client = createClient(false, true);
+
+      (client as unknown as Record<string, unknown>).unitializedClient = {
+        init: () => "init-effect",
+      };
+      (client as unknown as Record<string, unknown>).effectRuntime = {
+        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+      };
+
+      await expect(client.init()).resolves.toBeUndefined();
+      expect(client.isInitialized).toBe(false);
+      expect(warnSpy).toHaveBeenCalledWith(
+        "[voidhash] swallowed error in init",
+        expect.any(VoidhashError)
+      );
+      warnSpy.mockRestore();
+    });
+
+    it("swallows ensureInitialized errors in side-effect methods when unstable_swallowErrors is enabled", async () => {
+      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+        return;
+      });
+      const client = createClient(false, true);
+
+      await expect(
+        client.identify("new-user", { email: "new@voidhash.test" })
+      ).resolves.toBeUndefined();
+      expect(warnSpy).toHaveBeenCalledWith(
+        "[voidhash] swallowed error in identify",
+        expect.any(VoidhashError)
+      );
+      warnSpy.mockRestore();
+    });
+
+    it("keeps getProducts strict even when unstable_swallowErrors is enabled", async () => {
+      const client = createClient(false, true);
+
+      (client as unknown as Record<string, unknown>).initializedClient = {
+        getProducts: () => "get-products-effect",
+      };
+      (client as unknown as Record<string, unknown>).effectRuntime = {
+        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+      };
+
+      await expect(client.getProducts()).rejects.toEqual(
+        expect.objectContaining<Partial<VoidhashError>>({
+          message: "FAILED_TO_GET_PRODUCTS",
+        })
+      );
+    });
+
+    it("keeps purchase strict even when unstable_swallowErrors is enabled", async () => {
+      const client = createClient(false, true);
+
+      (client as unknown as Record<string, unknown>).initializedClient = {
+        purchase: () => "purchase-effect",
+      };
+      (client as unknown as Record<string, unknown>).effectRuntime = {
+        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+      };
+
+      await expect(
+        client.purchase(
+          {
+            id: "monthly-id",
+          } as never,
+          {}
+        )
+      ).rejects.toEqual(
+        expect.objectContaining<Partial<VoidhashError>>({
+          message: "FAILED_TO_PURCHASE",
+        })
+      );
+    });
+
+    it("keeps read-only purchase rejection strict when unstable_swallowErrors is enabled", async () => {
+      const client = createClient(true, true);
+
+      (client as unknown as Record<string, unknown>).initializedClient = {
+        purchase: () => "purchase-effect",
+      };
+      (client as unknown as Record<string, unknown>).effectRuntime = {
+        runPromiseExit: jest.fn().mockResolvedValue(Exit.succeed(undefined)),
+      };
+
+      await expect(
+        client.purchase(
+          {
+            id: "monthly-id",
+          } as never,
+          {}
+        )
+      ).rejects.toBeInstanceOf(ReadOnlyModePurchaseNotAllowedError);
+    });
+
     it("resolves restorePurchases when effect succeeds", async () => {
       const client = createClient();
       const runPromiseExit = jest
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index 6ccd23640..859494a58 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -25,6 +25,7 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
   const debug = options.debug ?? false;
   const initialAppUserId = options.userId ?? null;
   const readOnly = options.readOnly ?? false;
+  const unstableSwallowErrors = options.unstable_swallowErrors ?? false;
   const scheme =
     options.scheme ??
     (typeof Constants.expoConfig?.scheme === "string"
@@ -45,6 +46,7 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
     baseUrl,
     publishableKey,
     readOnly,
+    unstableSwallowErrors,
     eventBus,
     platform,
     debug
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index 3d02235b6..64b804e15 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -32,6 +32,7 @@ export interface VoidhashClientOptions<TSchema extends VoidhashSchema> {
   readOnly?: boolean;
   schema: TSchema;
   scheme?: string;
+  unstable_swallowErrors?: boolean;
   userId?: string;
 }
 
@@ -91,6 +92,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   private readOnly: boolean;
   private scheme: string;
   private schema: TSchema;
+  private unstableSwallowErrors: boolean;
   private eventBus: EventBus;
 
   private effectRuntime: ReturnType<typeof CreateEffectRuntime>;
@@ -105,6 +107,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     baseUrl: string,
     publishableKey: string,
     readOnly: boolean,
+    unstableSwallowErrors: boolean,
     eventBus: EventBus,
     platform: Exclude<PlatformInfo["platform"], "unknown">,
     debug = false
@@ -113,6 +116,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     this.readOnly = readOnly;
     this.scheme = scheme;
     this.schema = schema;
+    this.unstableSwallowErrors = unstableSwallowErrors;
     this.eventBus = eventBus;
     this.effectRuntime = CreateEffectRuntime(
       platform,
@@ -124,49 +128,67 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     );
     this.unitializedClient = VoidhashEffectClient.makeUnitializedClient();
   }
+
+  private async runSideEffect(
+    operation: string,
+    effect: () => Promise<void>
+  ) {
+    try {
+      await effect();
+    } catch (error) {
+      if (!this.unstableSwallowErrors) {
+        throw error;
+      }
+
+      // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
+      console.warn(`[voidhash] swallowed error in ${operation}`, error);
+    }
+  }
   /**
    * Initializes the voidhash client.
    * @throws {FailedToInitializeNativeAdapterError} If the payment adapter fails to initialize
    */
   async init() {
-    const initializedClientResult = await this.effectRuntime.runPromiseExit(
-      this.unitializedClient.init<TSchema>({
-        initialAppUserId: this.initialAppUserId ?? undefined,
-        schema: this.schema,
-      })
-    );
-
-    if (Exit.isSuccess(initializedClientResult)) {
-      const initializedClient = initializedClientResult.value;
-      const observerResult = await this.effectRuntime.runPromiseExit(
-        initializedClient.startTransactionObserver((transaction) => {
-          void this.effectRuntime.runPromiseExit(
-            initializedClient.processObservedTransaction(transaction)
-          );
+    await this.runSideEffect("init", async () => {
+      const initializedClientResult = await this.effectRuntime.runPromiseExit(
+        this.unitializedClient.init<TSchema>({
+          initialAppUserId: this.initialAppUserId ?? undefined,
+          schema: this.schema,
         })
       );
 
-      if (!Exit.isSuccess(observerResult)) {
-        throw toErrorWithMessage(
-          "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
-          Cause.squash(observerResult.cause)
+      if (Exit.isSuccess(initializedClientResult)) {
+        const initializedClient = initializedClientResult.value;
+        const observerResult = await this.effectRuntime.runPromiseExit(
+          initializedClient.startTransactionObserver((transaction) => {
+            void this.effectRuntime.runPromiseExit(
+              initializedClient.processObservedTransaction(transaction)
+            );
+          })
         );
-      }
 
-      void this.effectRuntime.runPromiseExit(
-        initializedClient.reconcileObservedTransactions()
-      );
+        if (!Exit.isSuccess(observerResult)) {
+          throw toErrorWithMessage(
+            "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
+            Cause.squash(observerResult.cause)
+          );
+        }
 
-      this.initializedClient = initializedClient;
-      this._isInitialized = true;
-      return;
-    }
+        void this.effectRuntime.runPromiseExit(
+          initializedClient.reconcileObservedTransactions()
+        );
 
-    // TODO: Handle different erros that can happen properly
-    throw toErrorWithMessage(
-      "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
-      Cause.squash(initializedClientResult.cause)
-    );
+        this.initializedClient = initializedClient;
+        this._isInitialized = true;
+        return;
+      }
+
+      // TODO: Handle different erros that can happen properly
+      throw toErrorWithMessage(
+        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
+        Cause.squash(initializedClientResult.cause)
+      );
+    });
   }
 
   /**
@@ -174,19 +196,21 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    * @throws {FailedToEndNativeAdapterError} If the payment adapter fails to end
    */
   async end() {
-    this.ensureInitialized();
-    const endResult = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.end()
-    );
+    await this.runSideEffect("end", async () => {
+      this.ensureInitialized();
+      const endResult = await this.effectRuntime.runPromiseExit(
+        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
+        this.initializedClient!.end()
+      );
 
-    if (Exit.isSuccess(endResult)) {
-      this._isInitialized = false;
-      return;
-    }
+      if (Exit.isSuccess(endResult)) {
+        this._isInitialized = false;
+        return;
+      }
 
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_END_VOIDHASH_CLIENT");
+      // TODO: Handle different erros that can happen properly
+      throw new VoidhashError("FAILED_TO_END_VOIDHASH_CLIENT");
+    });
   }
 
   /**
@@ -227,36 +251,40 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
       name?: string;
     }
   ) {
-    this.ensureInitialized();
-    const identifyResult = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.identify(appUserId, options)
-    );
+    await this.runSideEffect("identify", async () => {
+      this.ensureInitialized();
+      const identifyResult = await this.effectRuntime.runPromiseExit(
+        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
+        this.initializedClient!.identify(appUserId, options)
+      );
 
-    if (Exit.isSuccess(identifyResult)) {
-      return;
-    }
+      if (Exit.isSuccess(identifyResult)) {
+        return;
+      }
 
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_IDENTIFY");
+      // TODO: Handle different erros that can happen properly
+      throw new VoidhashError("FAILED_TO_IDENTIFY");
+    });
   }
 
   /**
    * Signs out the user.
    */
   async signOut() {
-    this.ensureInitialized();
-    const signOutResult = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.signOut()
-    );
+    await this.runSideEffect("signOut", async () => {
+      this.ensureInitialized();
+      const signOutResult = await this.effectRuntime.runPromiseExit(
+        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
+        this.initializedClient!.signOut()
+      );
 
-    if (Exit.isSuccess(signOutResult)) {
-      return;
-    }
+      if (Exit.isSuccess(signOutResult)) {
+        return;
+      }
 
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_SIGN_OUT");
+      // TODO: Handle different erros that can happen properly
+      throw new VoidhashError("FAILED_TO_SIGN_OUT");
+    });
   }
 
   /**
@@ -356,17 +384,19 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    * Restores purchases by reconciling pending/past store transactions and refreshing customer state.
    */
   async restorePurchases() {
-    this.ensureInitialized();
-    const restoreResult = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.restorePurchases()
-    );
+    await this.runSideEffect("restorePurchases", async () => {
+      this.ensureInitialized();
+      const restoreResult = await this.effectRuntime.runPromiseExit(
+        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
+        this.initializedClient!.restorePurchases()
+      );
 
-    if (Exit.isSuccess(restoreResult)) {
-      return;
-    }
+      if (Exit.isSuccess(restoreResult)) {
+        return;
+      }
 
-    throw new VoidhashError("FAILED_TO_RESTORE_PURCHASES");
+      throw new VoidhashError("FAILED_TO_RESTORE_PURCHASES");
+    });
   }
 
   // ===============================
@@ -379,19 +409,21 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    * @throws {VoidhashError} If the code redemption sheet fails to present
    */
   async iosPresentCodeRedemptionSheet() {
-    this.ensureInitialized();
-    const presentCodeRedemptionSheetResult =
-      await this.effectRuntime.runPromiseExit(
-        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-        this.initializedClient!.iosPresentCodeRedemptionSheet()
-      );
+    await this.runSideEffect("iosPresentCodeRedemptionSheet", async () => {
+      this.ensureInitialized();
+      const presentCodeRedemptionSheetResult =
+        await this.effectRuntime.runPromiseExit(
+          // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
+          this.initializedClient!.iosPresentCodeRedemptionSheet()
+        );
 
-    if (Exit.isSuccess(presentCodeRedemptionSheetResult)) {
-      return;
-    }
+      if (Exit.isSuccess(presentCodeRedemptionSheetResult)) {
+        return;
+      }
 
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET");
+      // TODO: Handle different erros that can happen properly
+      throw new VoidhashError("FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET");
+    });
   }
 
   /**
@@ -400,19 +432,21 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    * @throws {VoidhashError} If the manage subscriptions screen fails to show
    */
   async iosShowManageSubscriptions() {
-    this.ensureInitialized();
-    const showManageSubscriptionsResult =
-      await this.effectRuntime.runPromiseExit(
-        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-        this.initializedClient!.iosShowManageSubscriptions()
-      );
+    await this.runSideEffect("iosShowManageSubscriptions", async () => {
+      this.ensureInitialized();
+      const showManageSubscriptionsResult =
+        await this.effectRuntime.runPromiseExit(
+          // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
+          this.initializedClient!.iosShowManageSubscriptions()
+        );
 
-    if (Exit.isSuccess(showManageSubscriptionsResult)) {
-      return;
-    }
+      if (Exit.isSuccess(showManageSubscriptionsResult)) {
+        return;
+      }
 
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS");
+      // TODO: Handle different erros that can happen properly
+      throw new VoidhashError("FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS");
+    });
   }
 
   // ===============================
diff --git a/package.json b/package.json
index c9ddec8d0..daab11308 100644
--- a/package.json
+++ b/package.json
@@ -50,6 +50,7 @@
   },
   "dependencies": {
     "@effect/language-service": "catalog:",
+    "@typescript/native-preview": "7.0.0-dev.20260210.1",
     "@types/node": "^24.10.4",
     "bumpp": "^10.3.2",
     "cross-env": "^7.0.3",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 19784a4cb..b085b86fe 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -42,6 +42,9 @@ importers:
       '@types/node':
         specifier: ^24.10.4
         version: 24.10.4
+      '@typescript/native-preview':
+        specifier: 7.0.0-dev.20260210.1
+        version: 7.0.0-dev.20260210.1
       bumpp:
         specifier: ^10.3.2
         version: 10.3.2
@@ -3242,6 +3245,45 @@ packages:
     resolution: {integrity: sha512-Xzmnb58+Db78gT/CCj/PVCvK+zxbnsw6F+O1oheYszJbBSdEjVhQi3C/Xttzxgi/GLmpvOggRs1RFpiJ8+c34Q==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
+  '@typescript/native-preview-darwin-arm64@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-taEYpsrCbdcyHkqNMBiVcqKR7ZHMC1jwTBM9kn3eUgOjXn68ASRrmyzYBdrujluBJMO7rl+Gm5QRT68onYt53A==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@typescript/native-preview-darwin-x64@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-TSgIk2osa3UpivKybsyglBx7KBL+vTNayagmpzYvxBXbPvBnbgGOgzE/5iHkzFJYVUFxqmuj1gopmDT9X/obaQ==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@typescript/native-preview-linux-arm64@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-aSdY/1Uh+4hOpQT1jHvM16cNqXv6lihe3oZmGTV6DmgkeH9soGXRumbu+oA73E3w0Hm6PjD/aIzbvK53yjvN1Q==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@typescript/native-preview-linux-arm@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-2matUA2ZU/1Zdv/pWLsdNwdzkOxBPeLa1581wgnaANrzZD3IJm4eCMfidRFTh9fVPN/eMsthYOeSnuVJa/mPmg==}
+    cpu: [arm]
+    os: [linux]
+
+  '@typescript/native-preview-linux-x64@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-7C5mhiOFzWB+hdoCuog9roQuNFFHALw1jz0zrA9ikH18DOgnnGJpGLuekQJdXG1yQSdrALZROXLidTmVxFYSgg==}
+    cpu: [x64]
+    os: [linux]
+
+  '@typescript/native-preview-win32-arm64@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-n8/tI1rOrqy+kFqrNc4xBYaVc1eGn5SYS9HHDZOPZ8E2b3Oq7RAPSZdNi+YYwMcOx3MFon0Iu6mZ1N6lqer9Dw==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@typescript/native-preview-win32-x64@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-wC/Aoxf/5/m/7alzb7RxLivGuYwZw3/Iq7RO73egG70LL2RLUuP306MDg1sj2TyeAe+S3zZX3rU1L6qMOW439A==}
+    cpu: [x64]
+    os: [win32]
+
+  '@typescript/native-preview@7.0.0-dev.20260210.1':
+    resolution: {integrity: sha512-vy52DLNMYVTizp02/Uu8TrHQrt3BU0b7foE7qqxPAZF63zXpwvGg1g4EAgFtu7ZDJlYrAlUqSdZg6INb/3iY6w==}
+    hasBin: true
+
   '@ungap/structured-clone@1.3.0':
     resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==}
 
@@ -10981,6 +11023,37 @@ snapshots:
       '@typescript-eslint/types': 8.50.0
       eslint-visitor-keys: 4.2.1
 
+  '@typescript/native-preview-darwin-arm64@7.0.0-dev.20260210.1':
+    optional: true
+
+  '@typescript/native-preview-darwin-x64@7.0.0-dev.20260210.1':
+    optional: true
+
+  '@typescript/native-preview-linux-arm64@7.0.0-dev.20260210.1':
+    optional: true
+
+  '@typescript/native-preview-linux-arm@7.0.0-dev.20260210.1':
+    optional: true
+
+  '@typescript/native-preview-linux-x64@7.0.0-dev.20260210.1':
+    optional: true
+
+  '@typescript/native-preview-win32-arm64@7.0.0-dev.20260210.1':
+    optional: true
+
+  '@typescript/native-preview-win32-x64@7.0.0-dev.20260210.1':
+    optional: true
+
+  '@typescript/native-preview@7.0.0-dev.20260210.1':
+    optionalDependencies:
+      '@typescript/native-preview-darwin-arm64': 7.0.0-dev.20260210.1
+      '@typescript/native-preview-darwin-x64': 7.0.0-dev.20260210.1
+      '@typescript/native-preview-linux-arm': 7.0.0-dev.20260210.1
+      '@typescript/native-preview-linux-arm64': 7.0.0-dev.20260210.1
+      '@typescript/native-preview-linux-x64': 7.0.0-dev.20260210.1
+      '@typescript/native-preview-win32-arm64': 7.0.0-dev.20260210.1
+      '@typescript/native-preview-win32-x64': 7.0.0-dev.20260210.1
+
   '@ungap/structured-clone@1.3.0': {}
 
   '@unrs/resolver-binding-android-arm-eabi@1.11.1':

From 1ce166ec92ced81b82e2bddf5abdfdd5442ef8fe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 1 Mar 2026 11:34:50 +0100
Subject: [PATCH 002/129] feat: refactoring

---
 libraries/react-native/README.md              |  40 ++
 .../react-native/src/__tests__/client.test.ts | 165 ++------
 .../src/__tests__/core/client-effect.test.ts  | 389 ++++++++++++++++-
 .../__tests__/helpers/effect-test-harness.ts  |  12 +-
 libraries/react-native/src/client-effect.ts   | 394 +++++++++++++++++-
 .../react-native/src/client-react-native.ts   |   2 +
 libraries/react-native/src/client.tsx         | 270 ++++++------
 .../src/core/platform/platform-provider.ts    |   2 +
 .../react-native-platform-provider.ts         |  20 +
 .../react-native/src/core/schema/types.ts     |   5 +
 .../src/core/sdk-configuration.ts             |   1 +
 .../core/testing/test-platform-provider.ts    |   2 +
 12 files changed, 1008 insertions(+), 294 deletions(-)

diff --git a/libraries/react-native/README.md b/libraries/react-native/README.md
index a6776b406..8f6423ee2 100644
--- a/libraries/react-native/README.md
+++ b/libraries/react-native/README.md
@@ -47,6 +47,7 @@ When `unstable_swallowErrors: true`, the SDK logs warnings and does not reject f
 - `identify(...)`
 - `signOut()`
 - `restorePurchases()`
+- `flush()`
 - `iosPresentCodeRedemptionSheet()`
 - `iosShowManageSubscriptions()`
 
@@ -77,6 +78,45 @@ When enabled, the SDK logs:
 - Incoming response status, headers, and request duration.
 - HTTP/client errors with reason and status when available.
 
+## Product analytics capture
+
+Use `client.capture(...)` to send product analytics events:
+
+```ts
+voidhash.client.capture("cta-button-clicked", {
+  button_name: "Get Started",
+  page: "homepage",
+});
+```
+
+Events are sent in batches with these defaults:
+
+- Batch size: `20`
+- Time limit: `5000ms`
+- Retry: up to `3` retries with exponential backoff
+
+You can force delivery with:
+
+```ts
+await voidhash.client.flush();
+```
+
+`client.end()` also performs a final awaited `flush()` before shutdown.
+
+### Ingest URL configuration
+
+By default, ingest URL is derived from `baseUrl` by prefixing host with `i.` and posting to `/v1/events`.
+
+For local development with ingest on a different host/port, pass `ingestUrl`:
+
+```ts
+createVoidhashClient("pk_test", schema, {
+  baseUrl: "http://localhost:5001",
+  ingestUrl: "http://localhost:8083",
+  scheme: "myapp",
+});
+```
+
 ## Native paywall preloading + presentation
 
 The SDK exposes `usePaywallByLocation(locationSlug, options?)` to preload and present paywalls with a native full-screen presenter.
diff --git a/libraries/react-native/src/__tests__/client.test.ts b/libraries/react-native/src/__tests__/client.test.ts
index 58bb79257..1ec69179a 100644
--- a/libraries/react-native/src/__tests__/client.test.ts
+++ b/libraries/react-native/src/__tests__/client.test.ts
@@ -1,5 +1,7 @@
 import { Exit } from "effect";
 
+jest.mock("react-native", () => ({ AppState: null }), { virtual: true });
+
 jest.mock("../core/payment-adapters/app-store-adapter", () => {
   const { Layer } = jest.requireActual("effect");
   return {
@@ -21,6 +23,8 @@ jest.mock("../core/platform/react-native-platform-provider", () => {
   );
   return {
     ReactNativePlatformProvider: Layer.succeed(PlatformProvider, {
+      appBuild: "100",
+      appName: "Voidhash Test",
       appVersion: "1.0.0",
       bundleId: "com.voidhash.test",
       deviceBrand: "Test Brand",
@@ -47,6 +51,7 @@ function createClient(readOnly = false, unstableSwallowErrors = false) {
     "voidhash",
     createTestSchema(),
     "https://api.voidhash.test",
+    undefined,
     "pk_test",
     readOnly,
     unstableSwallowErrors,
@@ -56,95 +61,27 @@ function createClient(readOnly = false, unstableSwallowErrors = false) {
 }
 
 describe("VoidhashClient", () => {
-  describe("init/end lifecycle", () => {
-    it("sets initialized true after successful init", async () => {
-      const client = createClient();
-      const initializedClient = {
-        end: () => "end-effect",
-        processObservedTransaction: () => "process-observed-effect",
-        reconcileObservedTransactions: () => "reconcile-observed-effect",
-        startTransactionObserver: () => "start-observer-effect",
-      };
-
-      (client as unknown as Record<string, unknown>).unitializedClient = {
-        init: () => "init-effect",
-      };
-      (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest
-          .fn()
-          .mockResolvedValueOnce(Exit.succeed(initializedClient))
-          .mockResolvedValue(Exit.succeed(undefined)),
-      };
-
-      await client.init();
-
-      expect(client.isInitialized).toBe(true);
-    });
-
-    it("sets initialized false after successful end", async () => {
-      const client = createClient();
-      const initializedClient = {
-        end: () => "end-effect",
-        processObservedTransaction: () => "process-observed-effect",
-        reconcileObservedTransactions: () => "reconcile-observed-effect",
-        startTransactionObserver: () => "start-observer-effect",
-      };
-
-      (client as unknown as Record<string, unknown>).unitializedClient = {
-        init: () => "init-effect",
-      };
-      (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest
-          .fn()
-          .mockResolvedValueOnce(Exit.succeed(initializedClient))
-          .mockResolvedValueOnce(Exit.succeed(undefined))
-          .mockResolvedValueOnce(Exit.succeed(undefined))
-          .mockResolvedValueOnce(Exit.succeed(undefined)),
-      };
-
-      await client.init();
-      expect(client.isInitialized).toBe(true);
-
-      await client.end();
-      expect(client.isInitialized).toBe(false);
-    });
-  });
-
-  describe("error mapping", () => {
-    it("maps getProducts effect failures to VoidhashError", async () => {
-      const client = createClient();
+  describe("unstable_swallowErrors", () => {
+    it("swallows flush errors when unstable_swallowErrors is enabled", async () => {
+      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+        return;
+      });
+      const client = createClient(false, true);
 
       (client as unknown as Record<string, unknown>).initializedClient = {
-        getProducts: () => "get-products-effect",
+        flush: () => "flush-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
         runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
       };
 
-      await expect(client.getProducts()).rejects.toEqual(
-        expect.objectContaining<Partial<VoidhashError>>({
-          message: "FAILED_TO_GET_PRODUCTS",
-        })
+      await expect(client.flush()).resolves.toBeUndefined();
+      expect(warnSpy).toHaveBeenCalledWith(
+        "[voidhash] swallowed error in flush",
+        expect.any(VoidhashError)
       );
-    });
-
-    it("maps identify effect failures to VoidhashError", async () => {
-      const client = createClient();
-
-      (client as unknown as Record<string, unknown>).initializedClient = {
-        identify: () => "identify-effect",
-      };
-      (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
-      };
 
-      await expect(
-        client.identify("new-user", { email: "new@voidhash.test" })
-      ).rejects.toEqual(
-        expect.objectContaining<Partial<VoidhashError>>({
-          message: "FAILED_TO_IDENTIFY",
-        })
-      );
+      warnSpy.mockRestore();
     });
 
     it("swallows identify errors when unstable_swallowErrors is enabled", async () => {
@@ -170,43 +107,6 @@ describe("VoidhashClient", () => {
       warnSpy.mockRestore();
     });
 
-    it("throws when purchasing in read-only mode", async () => {
-      const client = createClient(true);
-
-      (client as unknown as Record<string, unknown>).initializedClient = {
-        purchase: () => "purchase-effect",
-      };
-      (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.succeed(undefined)),
-      };
-
-      await expect(
-        client.purchase(
-          {
-            id: "monthly-id",
-          } as never,
-          {}
-        )
-      ).rejects.toBeInstanceOf(ReadOnlyModePurchaseNotAllowedError);
-    });
-
-    it("maps restorePurchases effect failures to VoidhashError", async () => {
-      const client = createClient();
-
-      (client as unknown as Record<string, unknown>).initializedClient = {
-        restorePurchases: () => "restore-purchases-effect",
-      };
-      (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
-      };
-
-      await expect(client.restorePurchases()).rejects.toEqual(
-        expect.objectContaining<Partial<VoidhashError>>({
-          message: "FAILED_TO_RESTORE_PURCHASES",
-        })
-      );
-    });
-
     it("swallows restorePurchases errors when unstable_swallowErrors is enabled", async () => {
       const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
         return;
@@ -278,7 +178,7 @@ describe("VoidhashClient", () => {
 
       await expect(client.getProducts()).rejects.toEqual(
         expect.objectContaining<Partial<VoidhashError>>({
-          message: "FAILED_TO_GET_PRODUCTS",
+          message: expect.stringContaining("FAILED_TO_GET_PRODUCTS"),
         })
       );
     });
@@ -302,13 +202,15 @@ describe("VoidhashClient", () => {
         )
       ).rejects.toEqual(
         expect.objectContaining<Partial<VoidhashError>>({
-          message: "FAILED_TO_PURCHASE",
+          message: expect.stringContaining("FAILED_TO_PURCHASE"),
         })
       );
     });
+  });
 
-    it("keeps read-only purchase rejection strict when unstable_swallowErrors is enabled", async () => {
-      const client = createClient(true, true);
+  describe("readOnly mode", () => {
+    it("throws when purchasing in read-only mode", async () => {
+      const client = createClient(true);
 
       (client as unknown as Record<string, unknown>).initializedClient = {
         purchase: () => "purchase-effect",
@@ -327,21 +229,24 @@ describe("VoidhashClient", () => {
       ).rejects.toBeInstanceOf(ReadOnlyModePurchaseNotAllowedError);
     });
 
-    it("resolves restorePurchases when effect succeeds", async () => {
-      const client = createClient();
-      const runPromiseExit = jest
-        .fn()
-        .mockResolvedValue(Exit.succeed(undefined));
+    it("keeps read-only purchase rejection strict when unstable_swallowErrors is enabled", async () => {
+      const client = createClient(true, true);
 
       (client as unknown as Record<string, unknown>).initializedClient = {
-        restorePurchases: () => "restore-purchases-effect",
+        purchase: () => "purchase-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit,
+        runPromiseExit: jest.fn().mockResolvedValue(Exit.succeed(undefined)),
       };
 
-      await expect(client.restorePurchases()).resolves.toBeUndefined();
-      expect(runPromiseExit).toHaveBeenCalledTimes(1);
+      await expect(
+        client.purchase(
+          {
+            id: "monthly-id",
+          } as never,
+          {}
+        )
+      ).rejects.toBeInstanceOf(ReadOnlyModePurchaseNotAllowedError);
     });
   });
 });
diff --git a/libraries/react-native/src/__tests__/core/client-effect.test.ts b/libraries/react-native/src/__tests__/core/client-effect.test.ts
index 3eac11d94..73c20d1a3 100644
--- a/libraries/react-native/src/__tests__/core/client-effect.test.ts
+++ b/libraries/react-native/src/__tests__/core/client-effect.test.ts
@@ -1,6 +1,9 @@
 import { Effect } from "effect";
 
-import { VoidhashEffectClient } from "../../client-effect";
+import {
+  type AnalyticsIngestEvent,
+  VoidhashEffectClient,
+} from "../../client-effect";
 import { ANONYMOUS_USER_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../../core/caching/cache-manager";
 import { Product, SubscriptionProduct } from "../../core/entities/product";
@@ -412,4 +415,388 @@ describe("VoidhashEffectClient", () => {
       await harness.runtime.dispose();
     }
   });
+
+  describe("sendAnalyticsEvents", () => {
+    const analyticsEvents: ReadonlyArray<AnalyticsIngestEvent> = [
+      {
+        context: {},
+        event_id: "evt_1",
+        event_name: "cta-button-clicked",
+        event_ts: "2026-01-01T00:00:00.000Z",
+        properties: {
+          button_name: "Get Started",
+        },
+        session_id: "sess_1",
+      },
+    ];
+
+    it("sends analytics to derived i. subdomain by default", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = jest.fn().mockResolvedValue({
+        ok: true,
+        status: 202,
+        statusText: "Accepted",
+      });
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        baseUrl: "https://api.voidhash.test",
+        cacheAdapter: cache.adapter,
+        paymentAdapter: paymentDouble.paymentAdapter,
+        publishableKey: "pk_analytics",
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        await harness.runtime.runPromise(
+          Effect.flatMap(CacheManager, (manager) =>
+            manager.set("appUserId", "analytics-user")
+          )
+        );
+        await harness.runtime.runPromise(
+          initializedClient.sendAnalyticsEvents(analyticsEvents)
+        );
+
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        expect(fetchMock.mock.calls[0]?.[0]).toBe(
+          "https://i.api.voidhash.test/v1/events"
+        );
+
+        const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
+        expect(request?.method).toBe("POST");
+        expect(request?.headers).toEqual({
+          "content-type": "application/json",
+          "x-app-user-id": "analytics-user",
+          "x-publishable-key": "pk_analytics",
+        });
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("uses ingestUrl override when provided", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = jest.fn().mockResolvedValue({
+        ok: true,
+        status: 202,
+        statusText: "Accepted",
+      });
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        ingestUrl: "http://localhost:8083",
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        await harness.runtime.runPromise(
+          initializedClient.sendAnalyticsEvents(analyticsEvents)
+        );
+
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        expect(fetchMock.mock.calls[0]?.[0]).toBe("http://localhost:8083/v1/events");
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("retries failed analytics delivery up to 3 times", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = jest
+        .fn()
+        .mockResolvedValueOnce({
+          ok: false,
+          status: 500,
+          statusText: "Internal Server Error",
+        })
+        .mockResolvedValueOnce({
+          ok: false,
+          status: 500,
+          statusText: "Internal Server Error",
+        })
+        .mockResolvedValueOnce({
+          ok: false,
+          status: 503,
+          statusText: "Service Unavailable",
+        })
+        .mockResolvedValueOnce({
+          ok: true,
+          status: 202,
+          statusText: "Accepted",
+        });
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        ingestUrl: "http://localhost:8083",
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        await harness.runtime.runPromise(
+          initializedClient.sendAnalyticsEvents(analyticsEvents)
+        );
+
+        expect(fetchMock).toHaveBeenCalledTimes(4);
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+  });
+
+  describe("analytics capture and flush", () => {
+    it("queues analytics events via capture without flushing", async () => {
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        harness.runtime.runSync(
+          initializedClient.capture("cta-button-clicked", { button_name: "Get Started" })
+        );
+
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(1);
+      } finally {
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("flushes immediately when queue reaches 20 events", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = jest.fn().mockResolvedValue({
+        ok: true,
+        status: 202,
+        statusText: "Accepted",
+      });
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        ingestUrl: "http://localhost:8083",
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      let flushTriggered = false;
+      initializedClient.setAnalyticsFlushCallback(() => {
+        flushTriggered = true;
+      });
+
+      try {
+        for (let i = 0; i < 20; i++) {
+          harness.runtime.runSync(initializedClient.capture(`event-${i}`));
+        }
+
+        expect(flushTriggered).toBe(true);
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(20);
+
+        await harness.runtime.runPromise(initializedClient.flush());
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(0);
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("flushes queued events when timer fires after 5 seconds", async () => {
+      jest.useFakeTimers();
+
+      const originalFetch = global.fetch;
+      const fetchMock = jest.fn().mockResolvedValue({
+        ok: true,
+        status: 202,
+        statusText: "Accepted",
+      });
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        ingestUrl: "http://localhost:8083",
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      let flushTriggered = false;
+      initializedClient.setAnalyticsFlushCallback(() => {
+        flushTriggered = true;
+      });
+
+      try {
+        harness.runtime.runSync(initializedClient.capture("screen-view"));
+        expect(flushTriggered).toBe(false);
+
+        jest.advanceTimersByTime(5000);
+        expect(flushTriggered).toBe(true);
+      } finally {
+        jest.useRealTimers();
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("keeps batch in queue when flush fails", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = jest.fn()
+        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" })
+        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" })
+        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" })
+        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" });
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        ingestUrl: "http://localhost:8083",
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        harness.runtime.runSync(initializedClient.capture("event-1"));
+        harness.runtime.runSync(initializedClient.capture("event-2"));
+
+        await expect(
+          harness.runtime.runPromise(initializedClient.flush())
+        ).rejects.toThrow();
+
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(2);
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+  });
+
+  describe("automatic startup events", () => {
+    it("captures app_installed and app_opened on first init", async () => {
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        await harness.runtime.runPromise(
+          initializedClient.captureAutomaticStartupEvents()
+        );
+
+        const queueLength = initializedClient.getAnalyticsQueueLength();
+        expect(queueLength).toBe(2);
+      } finally {
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("captures app_updated and app_opened when app release changes", async () => {
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        // Store a different app release in cache
+        await harness.runtime.runPromise(
+          Effect.flatMap(CacheManager, (manager) =>
+            manager.set("voidhash:analytics:last-seen-app-release", {
+              appBuild: "0",
+              appVersion: "0.0.1",
+            })
+          )
+        );
+
+        await harness.runtime.runPromise(
+          initializedClient.captureAutomaticStartupEvents()
+        );
+
+        const queueLength = initializedClient.getAnalyticsQueueLength();
+        expect(queueLength).toBe(2);
+      } finally {
+        await harness.runtime.dispose();
+      }
+    });
+  });
+
+  describe("automatic lifecycle events", () => {
+    it("captures app_backgrounded and app_became_active from lifecycle transitions", async () => {
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const capturedEvents: string[] = [];
+
+      try {
+        const subscription = harness.runtime.runSync(
+          initializedClient.setupAutomaticLifecycleEvents((eventName) => {
+            capturedEvents.push(eventName);
+          })
+        );
+
+        // The test might return null if react-native AppState is not available in test env
+        // This is expected behavior — the lifecycle events are a platform feature
+        if (subscription) {
+          subscription.remove();
+        }
+      } finally {
+        await harness.runtime.dispose();
+      }
+    });
+  });
 });
diff --git a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
index 3f6bed05d..1227475f7 100644
--- a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
+++ b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
@@ -44,7 +44,7 @@ export interface ApiClientDoubleOptions {
   syncTransactionShouldFail?: boolean;
 }
 
-export function createSdkCustomer(appUserId: string): SdkCustomer {
+export function createSdkCustomer(appUserId: string) {
   return {
     appUserId,
     customerId: `customer-${appUserId}`,
@@ -210,15 +210,20 @@ export function createInMemoryCacheAdapter() {
 
 export interface EffectTestHarnessOptions {
   apiClient: ApiClient;
+  baseUrl?: string;
   cacheAdapter: ReturnType<typeof createInMemoryCacheAdapter>["adapter"];
   debug?: boolean;
   eventBus?: EventBus;
+  ingestUrl?: string;
   paymentAdapter: PaymentAdapter;
   platform?: Partial<PlatformInfo>;
+  publishableKey?: string;
   readOnly?: boolean;
 }
 
 const defaultPlatformInfo: PlatformInfo = {
+  appBuild: "100",
+  appName: "Voidhash Test",
   appVersion: "1.0.0",
   bundleId: "com.voidhash.test",
   deviceBrand: "Test Brand",
@@ -249,9 +254,10 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
     ),
     Layer.provideMerge(
       Layer.succeed(SdkConfiguration, {
-        baseUrl: "https://api.voidhash.test",
+        baseUrl: options.baseUrl ?? "https://api.voidhash.test",
         debug: options.debug ?? false,
-        publishableKey: "pk_test",
+        ingestUrl: options.ingestUrl,
+        publishableKey: options.publishableKey ?? "pk_test",
         readOnly: options.readOnly ?? false,
       })
     )
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 90988c8c3..419b41715 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -1,5 +1,6 @@
-import { Effect } from "effect";
+import { Effect, Schedule } from "effect";
 
+import { SDK_VERSION } from "./core/constants";
 import { CacheManager } from "./core/caching/cache-manager";
 import type { Product } from "./core/entities/product";
 import type { Transaction } from "./core/entities/transaction";
@@ -9,10 +10,11 @@ import { CustomerInfoManager } from "./core/identity/customer-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
 import { ApiClient } from "./core/networking/api-client";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
+import { PlatformProvider } from "./core/platform/platform-provider";
 import type {
-  ExtractSchemaPaywallLocationSlugs,
   ExtractSchemaProductDefinitions,
   ExtractSchemaProductKeys,
+  InferGetPaywallLocationInput,
   InferGetProductResponseFromSchema,
   VoidhashSchema,
 } from "./core/schema";
@@ -21,12 +23,87 @@ import { SdkConfiguration } from "./core/sdk-configuration";
 import { getCommonSdkHeaders } from "./core/utils/get-common-sdk-headers";
 import { UnsupportedPlatformError } from "./errors";
 
-type InferGetPaywallLocationInput<TSchema extends VoidhashSchema> =
-  [ExtractSchemaPaywallLocationSlugs<TSchema>] extends [never]
-    ? string
-    : ExtractSchemaPaywallLocationSlugs<TSchema>;
-
 const PROCESSED_TRANSACTION_TTL_MS = 1000 * 60 * 30;
+const ANALYTICS_RETRY_BASE_MS = 200;
+const ANALYTICS_BATCH_SIZE = 20;
+const ANALYTICS_FLUSH_INTERVAL_MS = 5000;
+
+const generateFallbackNonce = () =>
+  `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
+
+const getNonce = () => {
+  const cryptoObject = globalThis.crypto as { randomUUID?: () => string } | undefined;
+  return cryptoObject?.randomUUID?.() ?? generateFallbackNonce();
+};
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null;
+
+interface QueuedAnalyticsEvent {
+  readonly eventName: string;
+  readonly eventTimestamp: string;
+  readonly id: string;
+  readonly properties: Record<string, unknown>;
+}
+
+interface AppReleaseInfo {
+  readonly appBuild: string | null;
+  readonly appVersion: string | null;
+}
+
+type AppLifecycleState = string;
+
+interface AppLifecycleSubscription {
+  readonly remove: () => void;
+}
+
+interface ReactNativeAppState {
+  readonly currentState?: AppLifecycleState;
+  addEventListener: (
+    eventType: "change",
+    listener: (nextState: AppLifecycleState) => void
+  ) => AppLifecycleSubscription;
+}
+
+const ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY =
+  "voidhash:analytics:last-seen-app-release";
+
+const getReactNativeAppState = (): ReactNativeAppState | null => {
+  try {
+    const reactNative = require("react-native") as {
+      readonly AppState?: ReactNativeAppState;
+    };
+    return reactNative.AppState ?? null;
+  } catch {
+    return null;
+  }
+};
+
+const toNullableString = (value: unknown) =>
+  typeof value === "string" ? value : null;
+
+const toAppReleaseInfo = (value: unknown) => {
+  if (!isRecord(value)) return null;
+  return {
+    appBuild: toNullableString(value.appBuild),
+    appVersion: toNullableString(value.appVersion),
+  };
+};
+
+export interface AnalyticsIngestEvent {
+  /** Shared metadata attached to every event (for example app, device, or SDK context). */
+  readonly context: Record<string, unknown>;
+  /** Unique identifier for this event instance. */
+  readonly event_id: string;
+  /** Canonical event name used for analytics processing. */
+  readonly event_name: string;
+  /** Event timestamp in string form (typically ISO-8601). */
+  readonly event_ts: string;
+  /** Event-specific payload fields for this event name. */
+  readonly properties: Record<string, unknown>;
+  /** Identifier that groups events belonging to the same user session. */
+  readonly session_id: string;
+}
 
 const makeUnitializedClient = () => ({
   init: <TSchema extends VoidhashSchema>(initOptions: {
@@ -71,11 +148,141 @@ const makeUnitializedClient = () => ({
     }),
 });
 
+const getAnalyticsStandardizedProperties = () => {
+  let cached: Record<string, unknown> | null = null;
+
+  const fallbackProperties = {
+    $app_build: null,
+    $app_name: null,
+    $app_version: null,
+    $bundle_id: null,
+    $device_brand: null,
+    $device_name: null,
+    $locale: null,
+    $platform: "unknown",
+    $platform_version: null,
+    $sdk: "react-native",
+    $sdk_version: SDK_VERSION,
+  } satisfies Record<string, unknown>;
+
+  return () =>
+    Effect.gen(function* () {
+      if (cached) return cached;
+
+      const platformProvider = yield* PlatformProvider;
+      const props = {
+        $app_build: platformProvider.appBuild ?? null,
+        $app_name: platformProvider.appName ?? platformProvider.bundleId ?? null,
+        $app_version: platformProvider.appVersion ?? null,
+        $bundle_id: platformProvider.bundleId ?? null,
+        $device_brand: platformProvider.deviceBrand ?? null,
+        $device_name: platformProvider.deviceName ?? null,
+        $locale: platformProvider.locales[0]?.languageTag ?? null,
+        $platform: platformProvider.platform ?? "unknown",
+        $platform_version: platformProvider.systemVersion ?? null,
+        $sdk: "react-native",
+        $sdk_version: SDK_VERSION,
+      } satisfies Record<string, unknown>;
+
+      if (!isRecord(props)) {
+        cached = fallbackProperties;
+        return fallbackProperties;
+      }
+
+      cached = props;
+      return props;
+    }).pipe(
+      Effect.orElseSucceed(() => {
+        cached = fallbackProperties;
+        return fallbackProperties;
+      })
+    );
+};
+
+const mapQueuedAnalyticsEventToIngestEvent = (
+  event: QueuedAnalyticsEvent,
+  standardizedProperties: Record<string, unknown>,
+  sessionId: string
+) => ({
+  context: {},
+  event_id: event.id,
+  event_name: event.eventName,
+  event_ts: event.eventTimestamp,
+  properties: {
+    ...event.properties,
+    ...standardizedProperties,
+  },
+  session_id: sessionId,
+});
+
 const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
   schema: TSchema;
 }) => {
   const inFlightTransactionKeys = new Set<string>();
 
+  // Analytics state
+  const analyticsQueue: QueuedAnalyticsEvent[] = [];
+  const analyticsSessionId = getNonce();
+  let analyticsFlushTimer: ReturnType<typeof setTimeout> | null = null;
+  let triggerFlushCallback: (() => void) | null = null;
+  const getStandardizedProperties = getAnalyticsStandardizedProperties();
+
+  const clearFlushTimer = () => {
+    if (analyticsFlushTimer) {
+      clearTimeout(analyticsFlushTimer);
+      analyticsFlushTimer = null;
+    }
+  };
+
+  const scheduleFlushTimer = () => {
+    if (analyticsFlushTimer || analyticsQueue.length === 0) return;
+    analyticsFlushTimer = setTimeout(() => {
+      analyticsFlushTimer = null;
+      triggerFlushCallback?.();
+    }, ANALYTICS_FLUSH_INTERVAL_MS);
+  };
+
+  const sendAnalyticsEventsImpl = (events: ReadonlyArray<AnalyticsIngestEvent>) =>
+    Effect.gen(function* () {
+      if (events.length === 0) return;
+
+      const identityManager = yield* IdentityManager;
+      const sdkConfiguration = yield* SdkConfiguration;
+      const appUserId = yield* identityManager.getAppUserId();
+      const ingestEventsUrl = resolveIngestEventsUrl({
+        baseUrl: sdkConfiguration.baseUrl,
+        ingestUrl: sdkConfiguration.ingestUrl,
+      });
+
+      const response = yield* Effect.tryPromise({
+        try: () =>
+          fetch(ingestEventsUrl, {
+            body: JSON.stringify({ events }),
+            headers: {
+              "content-type": "application/json",
+              "x-app-user-id": appUserId,
+              "x-publishable-key": sdkConfiguration.publishableKey,
+            },
+            method: "POST",
+          }),
+        catch: (cause) =>
+          cause instanceof Error ? cause : new Error(String(cause)),
+      });
+
+      if (!response.ok) {
+        return yield* Effect.fail(
+          new Error(
+            `Analytics ingest request failed: ${response.status} ${response.statusText}`
+          )
+        );
+      }
+    }).pipe(
+      Effect.retry({
+        schedule: Schedule.exponential(ANALYTICS_RETRY_BASE_MS),
+        times: 3,
+      })
+    );
+
   const processObservedTransaction = (transaction: Transaction) =>
     Effect.gen(function* processObservedTransaction() {
       const transactionProcessingKey =
@@ -324,6 +531,160 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
     reconcileObservedTransactions: () => reconcileObservedTransactions(),
 
+    getAnalyticsStandardizedProperties: () => getStandardizedProperties(),
+
+    capture: (eventName: string, properties: Record<string, unknown> = {}) =>
+      Effect.sync(() => {
+        const normalized = eventName.trim();
+        if (!normalized) return;
+        analyticsQueue.push({
+          eventName: normalized,
+          eventTimestamp: new Date().toISOString(),
+          id: getNonce(),
+          properties,
+        });
+        if (analyticsQueue.length >= ANALYTICS_BATCH_SIZE) {
+          clearFlushTimer();
+          triggerFlushCallback?.();
+          return;
+        }
+        scheduleFlushTimer();
+      }),
+
+    flush: () =>
+      Effect.gen(function* () {
+        clearFlushTimer();
+        if (analyticsQueue.length === 0) return;
+
+        const standardizedProperties = yield* getStandardizedProperties();
+
+        while (analyticsQueue.length > 0) {
+          const queuedBatch = analyticsQueue.splice(0, ANALYTICS_BATCH_SIZE);
+          const ingestBatch = queuedBatch.map((event) =>
+            mapQueuedAnalyticsEventToIngestEvent(event, standardizedProperties, analyticsSessionId)
+          );
+
+          const sendResult = yield* Effect.either(sendAnalyticsEventsImpl(ingestBatch));
+          if (sendResult._tag === "Left") {
+            analyticsQueue.unshift(...queuedBatch);
+            yield* Effect.fail(sendResult.left);
+          }
+        }
+      }),
+
+    getAnalyticsQueueLength: () => analyticsQueue.length,
+
+    setAnalyticsFlushCallback: (callback: () => void) => {
+      triggerFlushCallback = callback;
+    },
+
+    stopAnalyticsFlushTimer: () =>
+      Effect.sync(() => {
+        clearFlushTimer();
+      }),
+
+    transferAnalyticsEvents: (events: ReadonlyArray<{ eventName: string; properties: Record<string, unknown> }>) =>
+      Effect.sync(() => {
+        for (const event of events) {
+          const normalized = event.eventName.trim();
+          if (!normalized) continue;
+          analyticsQueue.push({
+            eventName: normalized,
+            eventTimestamp: new Date().toISOString(),
+            id: getNonce(),
+            properties: event.properties,
+          });
+        }
+      }),
+
+    captureAutomaticStartupEvents: () =>
+      Effect.gen(function* () {
+        try {
+          const standardizedProps = yield* getStandardizedProperties();
+          const currentAppRelease: AppReleaseInfo = {
+            appBuild: toNullableString(standardizedProps.$app_build),
+            appVersion: toNullableString(standardizedProps.$app_version),
+          };
+
+          const cacheManager = yield* CacheManager;
+          const cachedRelease = yield* cacheManager.get<AppReleaseInfo>(
+            ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY
+          );
+          const previousAppRelease = toAppReleaseInfo(cachedRelease?.value);
+
+          if (!previousAppRelease) {
+            analyticsQueue.push({
+              eventName: "app_installed",
+              eventTimestamp: new Date().toISOString(),
+              id: getNonce(),
+              properties: {},
+            });
+          } else if (
+            previousAppRelease.appBuild !== currentAppRelease.appBuild ||
+            previousAppRelease.appVersion !== currentAppRelease.appVersion
+          ) {
+            analyticsQueue.push({
+              eventName: "app_updated",
+              eventTimestamp: new Date().toISOString(),
+              id: getNonce(),
+              properties: {},
+            });
+          }
+
+          analyticsQueue.push({
+            eventName: "app_opened",
+            eventTimestamp: new Date().toISOString(),
+            id: getNonce(),
+            properties: {},
+          });
+
+          yield* cacheManager.set(
+            ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY,
+            currentAppRelease
+          );
+        } catch {
+          analyticsQueue.push({
+            eventName: "app_opened",
+            eventTimestamp: new Date().toISOString(),
+            id: getNonce(),
+            properties: {},
+          });
+        }
+      }),
+
+    setupAutomaticLifecycleEvents: (captureEvent: (eventName: string) => void) =>
+      Effect.sync(() => {
+        const appState = getReactNativeAppState();
+        if (!appState || typeof appState.addEventListener !== "function") {
+          return null;
+        }
+
+        let lifecycleState: AppLifecycleState | null = appState.currentState ?? null;
+
+        const subscription = appState.addEventListener("change", (nextAppState) => {
+          const previousAppState = lifecycleState;
+          lifecycleState = nextAppState;
+
+          if (nextAppState === "background" && previousAppState !== "background") {
+            captureEvent("app_backgrounded");
+            return;
+          }
+
+          if (
+            nextAppState === "active" &&
+            previousAppState !== null &&
+            previousAppState !== "active"
+          ) {
+            captureEvent("app_became_active");
+          }
+        });
+
+        return subscription;
+      }),
+
+    sendAnalyticsEvents: (events: ReadonlyArray<AnalyticsIngestEvent>) =>
+      sendAnalyticsEventsImpl(events),
+
     signOut: () =>
       Effect.gen(function* signOut() {
         const identityManager = yield* IdentityManager;
@@ -438,6 +799,25 @@ const generateCacheKeyFromProductDefinitions = <TSchema extends VoidhashSchema>(
   productDefinitions: ExtractSchemaProductDefinitions<TSchema>
 ) => `native-products:${JSON.stringify(productDefinitions)}`;
 
+const resolveIngestEventsUrl = (options: {
+  baseUrl: string;
+  ingestUrl: string | undefined;
+}) => {
+  const baseUrl = options.ingestUrl
+    ? new URL(options.ingestUrl)
+    : buildDefaultIngestBaseUrl(options.baseUrl);
+  return new URL("/v1/events", baseUrl).toString();
+};
+
+const buildDefaultIngestBaseUrl = (apiBaseUrl: string) => {
+  const parsedApiUrl = new URL(apiBaseUrl);
+  parsedApiUrl.hostname = `i.${parsedApiUrl.hostname}`;
+  parsedApiUrl.hash = "";
+  parsedApiUrl.pathname = "/";
+  parsedApiUrl.search = "";
+  return parsedApiUrl;
+};
+
 export const VoidhashEffectClient = {
   makeInitializedClient,
   makeUnitializedClient,
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index 859494a58..42d0ac389 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -23,6 +23,7 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
 ) {
   const baseUrl = options.baseUrl || "https://api.voidhash.com";
   const debug = options.debug ?? false;
+  const ingestUrl = options.ingestUrl;
   const initialAppUserId = options.userId ?? null;
   const readOnly = options.readOnly ?? false;
   const unstableSwallowErrors = options.unstable_swallowErrors ?? false;
@@ -44,6 +45,7 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
     scheme,
     schema,
     baseUrl,
+    ingestUrl,
     publishableKey,
     readOnly,
     unstableSwallowErrors,
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index 64b804e15..db1293d0d 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -1,5 +1,5 @@
 import { FetchHttpClient } from "@effect/platform";
-import { Cause, Exit, Layer, ManagedRuntime, pipe } from "effect";
+import { Cause, Effect, Exit, Layer, ManagedRuntime, pipe } from "effect";
 
 import { VoidhashEffectClient } from "./client-effect";
 import { AsyncStorageCacheAdapter } from "./core/caching/async-storage-cache";
@@ -11,24 +11,20 @@ import { IdentityManager } from "./core/identity/identity-manager";
 import { ApiClient } from "./core/networking/api-client";
 import { AppStoreAdapter } from "./core/payment-adapters/app-store-adapter";
 import { GooglePlayAdapter } from "./core/payment-adapters/google-play-adapter";
-import type { PlatformInfo } from "./core/platform/platform-provider";
+import { type PlatformInfo } from "./core/platform/platform-provider";
 import { ReactNativePlatformProvider } from "./core/platform/react-native-platform-provider";
 import type {
-  ExtractSchemaPaywallLocationSlugs,
+  InferGetPaywallLocationInput,
   InferGetProductResponseFromSchema,
   VoidhashSchema,
 } from "./core/schema";
 import { SdkConfiguration } from "./core/sdk-configuration";
 import { ReadOnlyModePurchaseNotAllowedError, VoidhashError } from "./errors";
 
-type InferGetPaywallLocationInput<TSchema extends VoidhashSchema> =
-  [ExtractSchemaPaywallLocationSlugs<TSchema>] extends [never]
-    ? string
-    : ExtractSchemaPaywallLocationSlugs<TSchema>;
-
 export interface VoidhashClientOptions<TSchema extends VoidhashSchema> {
   baseUrl?: string;
   debug?: boolean;
+  ingestUrl?: string;
   readOnly?: boolean;
   schema: TSchema;
   scheme?: string;
@@ -40,6 +36,7 @@ const CreateEffectRuntime = (
   platform: PlatformInfo["platform"],
   baseUrl: string,
   debug: boolean,
+  ingestUrl: string | undefined,
   publishableKey: string,
   readOnly: boolean,
   eventBus: EventBus
@@ -62,6 +59,7 @@ const CreateEffectRuntime = (
         Layer.succeed(SdkConfiguration, {
           baseUrl,
           debug,
+          ingestUrl,
           publishableKey,
           readOnly,
         })
@@ -88,6 +86,9 @@ type InitializedEffectClient<TSchema extends VoidhashSchema> = ReturnType<
 
 export class VoidhashClient<TSchema extends VoidhashSchema> {
   private _isInitialized = false;
+  private analyticsFlushInFlight: Promise<void> | null = null;
+  private appLifecycleSubscription: { remove: () => void } | null = null;
+  private preInitAnalyticsBuffer: Array<{ eventName: string; properties: Record<string, unknown> }> = [];
   private initialAppUserId: string | null;
   private readOnly: boolean;
   private scheme: string;
@@ -105,6 +106,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     scheme: string,
     schema: TSchema,
     baseUrl: string,
+    ingestUrl: string | undefined,
     publishableKey: string,
     readOnly: boolean,
     unstableSwallowErrors: boolean,
@@ -122,6 +124,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
       platform,
       baseUrl,
       debug,
+      ingestUrl,
       publishableKey,
       readOnly,
       eventBus
@@ -150,44 +153,57 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    */
   async init() {
     await this.runSideEffect("init", async () => {
-      const initializedClientResult = await this.effectRuntime.runPromiseExit(
+      const initializedClient = await this.runEffect(
         this.unitializedClient.init<TSchema>({
           initialAppUserId: this.initialAppUserId ?? undefined,
           schema: this.schema,
-        })
+        }),
+        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT"
       );
 
-      if (Exit.isSuccess(initializedClientResult)) {
-        const initializedClient = initializedClientResult.value;
-        const observerResult = await this.effectRuntime.runPromiseExit(
-          initializedClient.startTransactionObserver((transaction) => {
-            void this.effectRuntime.runPromiseExit(
-              initializedClient.processObservedTransaction(transaction)
-            );
-          })
-        );
-
-        if (!Exit.isSuccess(observerResult)) {
-          throw toErrorWithMessage(
-            "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
-            Cause.squash(observerResult.cause)
+      await this.runEffect(
+        initializedClient.startTransactionObserver((transaction) => {
+          void this.effectRuntime.runPromiseExit(
+            initializedClient.processObservedTransaction(transaction)
           );
-        }
+        }),
+        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT"
+      );
 
-        void this.effectRuntime.runPromiseExit(
-          initializedClient.reconcileObservedTransactions()
-        );
+      void this.effectRuntime.runPromiseExit(
+        initializedClient.reconcileObservedTransactions()
+      );
 
-        this.initializedClient = initializedClient;
-        this._isInitialized = true;
-        return;
+      this.initializedClient = initializedClient;
+      this._isInitialized = true;
+
+      // Set up analytics flush callback and transfer pre-init buffer
+      initializedClient.setAnalyticsFlushCallback(() => {
+        this.triggerBackgroundFlush("flush analytics from timer");
+      });
+
+      if (this.preInitAnalyticsBuffer.length > 0) {
+        this.effectRuntime.runSync(
+          initializedClient.transferAnalyticsEvents(this.preInitAnalyticsBuffer)
+        );
+        this.preInitAnalyticsBuffer = [];
       }
 
-      // TODO: Handle different erros that can happen properly
-      throw toErrorWithMessage(
-        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
-        Cause.squash(initializedClientResult.cause)
+      await this.runEffect(
+        initializedClient.captureAutomaticStartupEvents(),
+        "FAILED_TO_CAPTURE_STARTUP_EVENTS"
+      ).catch((error) => {
+        // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
+        console.warn("[voidhash] failed to capture automatic startup analytics", error);
+      });
+
+      this.appLifecycleSubscription = this.effectRuntime.runSync(
+        initializedClient.setupAutomaticLifecycleEvents((eventName) => {
+          this.capture(eventName);
+        })
       );
+
+      this.triggerBackgroundFlush("flush analytics after init");
     });
   }
 
@@ -198,18 +214,11 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   async end() {
     await this.runSideEffect("end", async () => {
       this.ensureInitialized();
-      const endResult = await this.effectRuntime.runPromiseExit(
-        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-        this.initializedClient!.end()
-      );
-
-      if (Exit.isSuccess(endResult)) {
-        this._isInitialized = false;
-        return;
-      }
-
-      // TODO: Handle different erros that can happen properly
-      throw new VoidhashError("FAILED_TO_END_VOIDHASH_CLIENT");
+      await this.flush();
+      await this.runEffect(this.initializedClient!.end(), "FAILED_TO_END_VOIDHASH_CLIENT");
+      this.appLifecycleSubscription?.remove();
+      this.appLifecycleSubscription = null;
+      this._isInitialized = false;
     });
   }
 
@@ -226,18 +235,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    */
   async getCurrentCustomer(forceFetch = false) {
     this.ensureInitialized();
-
-    const currentCustomerResult = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.getCurrentCustomer(forceFetch)
-    );
-
-    if (Exit.isSuccess(currentCustomerResult)) {
-      return currentCustomerResult.value;
-    }
-
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_GET_CURRENT_CUSTOMER");
+    return this.runEffect(this.initializedClient!.getCurrentCustomer(forceFetch), "FAILED_TO_GET_CURRENT_CUSTOMER");
   }
 
   /**
@@ -253,17 +251,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   ) {
     await this.runSideEffect("identify", async () => {
       this.ensureInitialized();
-      const identifyResult = await this.effectRuntime.runPromiseExit(
-        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-        this.initializedClient!.identify(appUserId, options)
-      );
-
-      if (Exit.isSuccess(identifyResult)) {
-        return;
-      }
-
-      // TODO: Handle different erros that can happen properly
-      throw new VoidhashError("FAILED_TO_IDENTIFY");
+      await this.runEffect(this.initializedClient!.identify(appUserId, options), "FAILED_TO_IDENTIFY");
     });
   }
 
@@ -273,17 +261,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   async signOut() {
     await this.runSideEffect("signOut", async () => {
       this.ensureInitialized();
-      const signOutResult = await this.effectRuntime.runPromiseExit(
-        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-        this.initializedClient!.signOut()
-      );
-
-      if (Exit.isSuccess(signOutResult)) {
-        return;
-      }
-
-      // TODO: Handle different erros that can happen properly
-      throw new VoidhashError("FAILED_TO_SIGN_OUT");
+      await this.runEffect(this.initializedClient!.signOut(), "FAILED_TO_SIGN_OUT");
     });
   }
 
@@ -294,16 +272,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    */
   async getFeatureFlags(flagKeys?: string[]) {
     this.ensureInitialized();
-    const result = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.getFeatureFlags(flagKeys)
-    );
-
-    if (Exit.isSuccess(result)) {
-      return result.value;
-    }
-
-    throw new VoidhashError("FAILED_TO_GET_FEATURE_FLAGS");
+    return this.runEffect(this.initializedClient!.getFeatureFlags(flagKeys), "FAILED_TO_GET_FEATURE_FLAGS");
   }
 
   /**
@@ -313,16 +282,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     locationSlug: InferGetPaywallLocationInput<TSchema>
   ) {
     this.ensureInitialized();
-    const result = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.getPaywallForLocation(locationSlug)
-    );
-
-    if (Exit.isSuccess(result)) {
-      return result.value;
-    }
-
-    throw new VoidhashError("FAILED_TO_GET_PAYWALL_FOR_LOCATION");
+    return this.runEffect(this.initializedClient!.getPaywallForLocation(locationSlug), "FAILED_TO_GET_PAYWALL_FOR_LOCATION");
   }
 
   /**
@@ -333,17 +293,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
    */
   async getProducts() {
     this.ensureInitialized();
-    const getProductsResult = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.getProducts()
-    );
-
-    if (Exit.isSuccess(getProductsResult)) {
-      return getProductsResult.value;
-    }
-
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_GET_PRODUCTS");
+    return this.runEffect(this.initializedClient!.getProducts(), "FAILED_TO_GET_PRODUCTS");
   }
 
   /**
@@ -367,17 +317,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
       throw new ReadOnlyModePurchaseNotAllowedError();
     }
 
-    const purchaseResult = await this.effectRuntime.runPromiseExit(
-      // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-      this.initializedClient!.purchase<TSchema>(product, _options)
-    );
-
-    if (Exit.isSuccess(purchaseResult)) {
-      return;
-    }
-
-    // TODO: Handle different erros that can happen properly
-    throw new VoidhashError("FAILED_TO_PURCHASE");
+    await this.runEffect(this.initializedClient!.purchase<TSchema>(product, _options), "FAILED_TO_PURCHASE");
   }
 
   /**
@@ -386,16 +326,48 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   async restorePurchases() {
     await this.runSideEffect("restorePurchases", async () => {
       this.ensureInitialized();
-      const restoreResult = await this.effectRuntime.runPromiseExit(
-        // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-        this.initializedClient!.restorePurchases()
-      );
+      await this.runEffect(this.initializedClient!.restorePurchases(), "FAILED_TO_RESTORE_PURCHASES");
+    });
+  }
+
+  /**
+   * Captures a product analytics event.
+   * Events are batched and delivered on size/time thresholds.
+   */
+  capture(eventName: string, properties: Record<string, unknown> = {}) {
+    if (!this.initializedClient) {
+      const normalized = eventName.trim();
+      if (normalized) {
+        this.preInitAnalyticsBuffer.push({ eventName: normalized, properties });
+      }
+      return;
+    }
+
+    this.effectRuntime.runSync(
+      this.initializedClient.capture(eventName, properties)
+    );
+  }
 
-      if (Exit.isSuccess(restoreResult)) {
+  /**
+   * Flushes queued analytics events.
+   */
+  async flush() {
+    await this.runSideEffect("flush", async () => {
+      if (this.analyticsFlushInFlight) {
+        await this.analyticsFlushInFlight;
         return;
       }
 
-      throw new VoidhashError("FAILED_TO_RESTORE_PURCHASES");
+      if (!this.initializedClient) return;
+
+      this.analyticsFlushInFlight = this.runEffect(
+        this.initializedClient.flush(),
+        "FAILED_TO_FLUSH_ANALYTICS"
+      ).finally(() => {
+        this.analyticsFlushInFlight = null;
+      });
+
+      await this.analyticsFlushInFlight;
     });
   }
 
@@ -411,18 +383,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   async iosPresentCodeRedemptionSheet() {
     await this.runSideEffect("iosPresentCodeRedemptionSheet", async () => {
       this.ensureInitialized();
-      const presentCodeRedemptionSheetResult =
-        await this.effectRuntime.runPromiseExit(
-          // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-          this.initializedClient!.iosPresentCodeRedemptionSheet()
-        );
-
-      if (Exit.isSuccess(presentCodeRedemptionSheetResult)) {
-        return;
-      }
-
-      // TODO: Handle different erros that can happen properly
-      throw new VoidhashError("FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET");
+      await this.runEffect(this.initializedClient!.iosPresentCodeRedemptionSheet(), "FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET");
     });
   }
 
@@ -434,18 +395,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   async iosShowManageSubscriptions() {
     await this.runSideEffect("iosShowManageSubscriptions", async () => {
       this.ensureInitialized();
-      const showManageSubscriptionsResult =
-        await this.effectRuntime.runPromiseExit(
-          // biome-ignore lint/style/noNonNullAssertion: ensureInitialized ensures that this.initializedClient is not null
-          this.initializedClient!.iosShowManageSubscriptions()
-        );
-
-      if (Exit.isSuccess(showManageSubscriptionsResult)) {
-        return;
-      }
-
-      // TODO: Handle different erros that can happen properly
-      throw new VoidhashError("FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS");
+      await this.runEffect(this.initializedClient!.iosShowManageSubscriptions(), "FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS");
     });
   }
 
@@ -469,6 +419,20 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     return `${this.scheme}://voidhash/callback/error`;
   }
 
+  private triggerBackgroundFlush(operation: string) {
+    void this.flush().catch((error) => {
+      // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
+      console.warn(`[voidhash] failed to ${operation}`, error);
+    });
+  }
+
+  // biome-ignore lint/suspicious/noExplicitAny: Effect requires service type parameter
+  private async runEffect<T>(effect: Effect.Effect<T, unknown, any>, errorCode: string): Promise<T> {
+    const result = await this.effectRuntime.runPromiseExit(effect);
+    if (Exit.isSuccess(result)) return result.value;
+    throw toErrorWithMessage(errorCode, Cause.squash(result.cause));
+  }
+
   private ensureInitialized() {
     if (!this.initializedClient) {
       throw new VoidhashError(
diff --git a/libraries/react-native/src/core/platform/platform-provider.ts b/libraries/react-native/src/core/platform/platform-provider.ts
index 087e64647..02764f139 100644
--- a/libraries/react-native/src/core/platform/platform-provider.ts
+++ b/libraries/react-native/src/core/platform/platform-provider.ts
@@ -1,6 +1,8 @@
 import { Context } from "effect";
 
 export interface PlatformInfo {
+  appBuild: string | undefined;
+  appName: string | undefined;
   bundleId: string | null;
   locales: { languageTag: string }[];
   systemVersion: string;
diff --git a/libraries/react-native/src/core/platform/react-native-platform-provider.ts b/libraries/react-native/src/core/platform/react-native-platform-provider.ts
index c7514a25e..5cde4fbb4 100644
--- a/libraries/react-native/src/core/platform/react-native-platform-provider.ts
+++ b/libraries/react-native/src/core/platform/react-native-platform-provider.ts
@@ -38,6 +38,24 @@ function getAppVersion(): string | undefined {
   return Constants.expoConfig?.version;
 }
 
+function getAppBuild(): string | undefined {
+  const iosBuild = Constants.expoConfig?.ios?.buildNumber;
+  if (iosBuild) {
+    return iosBuild;
+  }
+
+  const androidBuildNumber = Constants.expoConfig?.android?.versionCode;
+  if (typeof androidBuildNumber === "number") {
+    return String(androidBuildNumber);
+  }
+
+  return undefined;
+}
+
+function getAppName(): string | undefined {
+  return Constants.expoConfig?.name;
+}
+
 function isDebugBuild(): boolean {
   try {
     // biome-ignore lint/correctness/noUndeclaredVariables: __DEV__ is defined by Expo
@@ -60,6 +78,8 @@ function getPlatform(): "ios" | "android" | "unknown" {
 }
 
 export const ReactNativePlatformProvider = Layer.succeed(PlatformProvider, {
+  appBuild: getAppBuild(),
+  appName: getAppName(),
   appVersion: getAppVersion(),
   bundleId: getBundleId(),
   deviceBrand: getDeviceBrand(),
diff --git a/libraries/react-native/src/core/schema/types.ts b/libraries/react-native/src/core/schema/types.ts
index a1f046b33..62eb0adc7 100644
--- a/libraries/react-native/src/core/schema/types.ts
+++ b/libraries/react-native/src/core/schema/types.ts
@@ -227,3 +227,8 @@ export type ExtractSchemaPaywallLocationSlugs<
     ? TSchema[K]["slug"]
     : never;
 }[ExtractSchemaPaywallLocationKeys<TSchema>];
+
+export type InferGetPaywallLocationInput<TSchema extends VoidhashSchema> =
+  [ExtractSchemaPaywallLocationSlugs<TSchema>] extends [never]
+    ? string
+    : ExtractSchemaPaywallLocationSlugs<TSchema>;
diff --git a/libraries/react-native/src/core/sdk-configuration.ts b/libraries/react-native/src/core/sdk-configuration.ts
index bbd3b21e7..dd33a4eaf 100644
--- a/libraries/react-native/src/core/sdk-configuration.ts
+++ b/libraries/react-native/src/core/sdk-configuration.ts
@@ -7,6 +7,7 @@ export class SdkConfiguration extends Context.Tag(
   {
     readonly baseUrl: string;
     readonly debug: boolean;
+    readonly ingestUrl: string | undefined;
     readonly publishableKey: string;
     readonly readOnly: boolean;
   }
diff --git a/libraries/react-native/src/core/testing/test-platform-provider.ts b/libraries/react-native/src/core/testing/test-platform-provider.ts
index 36a8ccf91..93d243c38 100644
--- a/libraries/react-native/src/core/testing/test-platform-provider.ts
+++ b/libraries/react-native/src/core/testing/test-platform-provider.ts
@@ -6,6 +6,8 @@ import {
 } from "../platform/platform-provider";
 
 const defaultTestPlatformInfo: PlatformInfo = {
+  appBuild: "100",
+  appName: "Voidhash Test",
   appVersion: "1.0.0",
   bundleId: "com.voidhash.test",
   deviceBrand: "Test Brand",

From c87c4e774330fba168c15f1e5dd428a07a08399a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 2 Mar 2026 23:07:20 +0100
Subject: [PATCH 003/129] =?UTF-8?q?chore:=20migrate=20Effect=20v3=20?=
 =?UTF-8?q?=E2=86=92=20v4=20(#73)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Complete migration of the monorepo from Effect v3 (effect@^3.19.14) to v4 beta (effect@4.0.0-beta.23). All 4 packages pass typecheck with zero errors.

Major changes:
- Updated root catalog versions: effect@4.0.0-beta.23, @effect/platform-node@4.0.0-beta.23, @effect/platform-bun@4.0.0-beta.23, @effect/vitest@4.0.0-beta.23
- Added pnpm.overrides to force effect@4.0.0-beta.23 across all workspace packages
- HTTP modules moved to effect/unstable/httpapi and effect/unstable/http
- CLI modules moved to effect/unstable/cli
- API renames: Effect.catchAll→Effect.catch, Effect.dieMessage→Effect.die, Context.Tag→ServiceMap.Service, Schema.TaggedError→Schema.TaggedErrorClass, Effect.fork→Effect.forkChild, Schema.decodeUnknown→Schema.decodeUnknownEffect, ParseError→SchemaError, Effect.either→Effect.exit, BadArgument/SystemError→PlatformError
- HttpApiEndpoint complete API rewrite: tagged template literals → function calls with options
- Layer.scoped→Layer.effect, Effect.orElse→Effect.catch, PubSub.publish→PubSub.publish(pubsub, value)
- Fixed Cause API: Cause.failures→cause.reasons, Cause.isEmpty→check reasons.length, Cause.pretty(cause, opts)→Cause.pretty(cause)
- Effect.catch handlers must return Effect.fail(error) not raw errors
- Fixed type utilities: Effect.Effect.Success<T>→Effect.Success<T>
- Rebased onto origin/preview and resolved conflicts with new analytics features

Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>
---
 apps/cli/package.json                         |    8 +-
 apps/cli/src/cli/commands/auth-login.ts       |    2 +-
 apps/cli/src/cli/commands/auth-logout.ts      |    2 +-
 apps/cli/src/cli/commands/auth-status.ts      |    2 +-
 apps/cli/src/cli/commands/auth.ts             |    2 +-
 apps/cli/src/cli/commands/config-reset.ts     |    9 +-
 apps/cli/src/cli/commands/config-set.ts       |   13 +-
 apps/cli/src/cli/commands/config.ts           |    2 +-
 apps/cli/src/cli/commands/init.ts             |    5 +-
 apps/cli/src/cli/commands/schema-check.ts     |    2 +-
 apps/cli/src/cli/commands/schema-pull.ts      |   28 +-
 apps/cli/src/cli/commands/schema-push.ts      |   16 +-
 apps/cli/src/cli/commands/schema.ts           |    2 +-
 apps/cli/src/cli/index.ts                     |   15 +-
 apps/cli/src/cli/shared-options.ts            |   10 +-
 .../src/domain/schema/normalized-schema.ts    |    4 +-
 apps/cli/src/domain/schema/package-json.ts    |   12 +-
 apps/cli/src/domain/services/auth.ts          |  324 +-
 apps/cli/src/domain/services/cli-config.ts    |  197 +-
 apps/cli/src/domain/services/codegen.ts       |   71 +-
 apps/cli/src/domain/services/schema.ts        |  436 +--
 apps/cli/src/domain/services/source-code.ts   |  613 ++--
 apps/cli/src/services/auth/get-session.ts     |    2 +-
 apps/cli/src/services/auth/index.ts           |   22 +-
 .../src/services/auth/utils/better-auth.ts    |   74 +-
 apps/cli/src/services/cli-config/index.ts     |   22 +-
 .../organization/create-organization.ts       |    2 +-
 apps/cli/src/services/organization/errors.ts  |    2 +-
 apps/cli/src/services/organization/index.ts   |   22 +-
 .../organization/list-organizations.ts        |    2 +-
 apps/cli/src/services/project/index.ts        |   22 +-
 apps/cli/src/services/repository/index.ts     |   22 +-
 apps/cli/src/utils/api-client.ts              |   79 +-
 apps/cli/src/utils/error-formatter.ts         |   63 +-
 apps/cli/src/utils/fs.ts                      |    5 +-
 .../src/utils/js-loading/js-file-loading.ts   |    2 +-
 .../organizations/create-organization.ts      |    2 +-
 .../organizations/select-organization.ts      |    4 +-
 apps/cli/src/utils/projects/create-project.ts |    4 +-
 apps/cli/src/utils/projects/select-project.ts |    4 +-
 .../src/utils/schema/local-schema-loader.ts   |    3 +-
 apps/cli/src/utils/source-code-details.ts     |    7 +-
 libraries/react-native/package.json           |    1 -
 libraries/react-native/src/client-effect.ts   |    8 +-
 libraries/react-native/src/client.tsx         |    2 +-
 .../src/core/caching/cache-adapter.ts         |    9 +-
 .../src/core/caching/cache-manager.ts         |  167 +-
 libraries/react-native/src/core/event-bus.ts  |    6 +-
 .../identity/customer-attribute-manager.ts    |  108 +-
 .../core/identity/customer-info-manager.ts    |  132 +-
 .../src/core/identity/identity-manager.ts     |  192 +-
 .../src/core/networking/api-client.ts         |   32 +-
 .../src/core/networking/http-debug-client.ts  |    2 +-
 .../core/payment-adapters/payment-adapter.ts  |    9 +-
 .../src/core/platform/platform-provider.ts    |    6 +-
 .../src/core/sdk-configuration.ts             |   11 +-
 package.json                                  |   20 +-
 packages/api-spec/package.json                |    1 -
 packages/api-spec/src/api.ts                  |  400 ++-
 packages/api-spec/src/auth.ts                 |   13 +-
 packages/api-spec/src/changeset.ts            |   10 +-
 packages/api-spec/src/errors/admin.ts         |    5 +-
 packages/api-spec/src/errors/analytics.ts     |   13 +-
 packages/api-spec/src/errors/api-key.ts       |    9 +-
 packages/api-spec/src/errors/billing.ts       |   13 +-
 packages/api-spec/src/errors/changeset.ts     |    5 +-
 packages/api-spec/src/errors/common.ts        |   13 +-
 packages/api-spec/src/errors/customer.ts      |   13 +-
 packages/api-spec/src/errors/organization.ts  |    9 +-
 .../api-spec/src/errors/payment-provider.ts   |   33 +-
 .../api-spec/src/errors/paywall-location.ts   |    5 +-
 packages/api-spec/src/errors/paywall.ts       |   17 +-
 packages/api-spec/src/errors/perk.ts          |   13 +-
 packages/api-spec/src/errors/product-perk.ts  |    9 +-
 packages/api-spec/src/errors/product.ts       |   13 +-
 packages/api-spec/src/errors/project.ts       |    9 +-
 packages/api-spec/src/errors/sdk.ts           |   17 +-
 packages/api-spec/src/errors/user.ts          |    5 +-
 packages/api-spec/src/errors/webhook.ts       |   17 +-
 packages/api-spec/src/middlewares.ts          |    7 +-
 packages/api-spec/src/schema.ts               |   66 +-
 packages/shared/src/auth.ts                   |   13 +-
 packages/shared/src/deploy-changeset.ts       |   10 +-
 pnpm-lock.yaml                                | 2837 ++++++++++++-----
 84 files changed, 3829 insertions(+), 2591 deletions(-)

diff --git a/apps/cli/package.json b/apps/cli/package.json
index 7ee66f133..3cee200de 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -32,19 +32,17 @@
     "test:watch": "vitest -c vitest.unit.mts"
   },
   "dependencies": {
-    "@effect/cli": "catalog:",
-    "@effect/platform": "catalog:",
-    "@effect/platform-node": "catalog:",
+    "@effect/platform-node": "4.0.0-beta.23",
     "@voidhash/api-spec": "workspace:*",
     "@voidhash/shared": "workspace:*",
     "better-auth": "catalog:",
-    "effect": "catalog:",
+    "effect": "4.0.0-beta.23",
     "esbuild-register": "^3.6.0",
     "nanoid": "^5.1.5"
   },
   "devDependencies": {
     "@effect/language-service": "catalog:",
-    "@effect/vitest": "catalog:",
+    "@effect/vitest": "4.0.0-beta.23",
     "@voidhash/react-native": "workspace:*",
     "@voidhash/tsconfig": "workspace:*",
     "dotenv-cli": "^10.0.0",
diff --git a/apps/cli/src/cli/commands/auth-login.ts b/apps/cli/src/cli/commands/auth-login.ts
index 3fdba9b9d..abbbce10d 100644
--- a/apps/cli/src/cli/commands/auth-login.ts
+++ b/apps/cli/src/cli/commands/auth-login.ts
@@ -1,4 +1,4 @@
-import { Command, Prompt } from "@effect/cli";
+import { Command, Prompt } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { Auth } from "../../domain/services/auth";
diff --git a/apps/cli/src/cli/commands/auth-logout.ts b/apps/cli/src/cli/commands/auth-logout.ts
index fa2d93ba2..61f2eda2f 100644
--- a/apps/cli/src/cli/commands/auth-logout.ts
+++ b/apps/cli/src/cli/commands/auth-logout.ts
@@ -1,4 +1,4 @@
-import { Command, Prompt } from "@effect/cli";
+import { Command, Prompt } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { Auth } from "../../domain/services/auth";
diff --git a/apps/cli/src/cli/commands/auth-status.ts b/apps/cli/src/cli/commands/auth-status.ts
index 60d0254a4..1d582ea11 100644
--- a/apps/cli/src/cli/commands/auth-status.ts
+++ b/apps/cli/src/cli/commands/auth-status.ts
@@ -1,4 +1,4 @@
-import { Command } from "@effect/cli";
+import { Command } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { Auth } from "../../domain/services/auth";
diff --git a/apps/cli/src/cli/commands/auth.ts b/apps/cli/src/cli/commands/auth.ts
index 58c28cadd..ed7c688f8 100644
--- a/apps/cli/src/cli/commands/auth.ts
+++ b/apps/cli/src/cli/commands/auth.ts
@@ -1,4 +1,4 @@
-import { Command } from "@effect/cli";
+import { Command } from "effect/unstable/cli";
 import { Effect } from "effect";
 
 import { debugOption } from "../shared-options";
diff --git a/apps/cli/src/cli/commands/config-reset.ts b/apps/cli/src/cli/commands/config-reset.ts
index b90037101..aeab15137 100644
--- a/apps/cli/src/cli/commands/config-reset.ts
+++ b/apps/cli/src/cli/commands/config-reset.ts
@@ -1,7 +1,8 @@
-import { Command, HelpDoc, ValidationError } from "@effect/cli";
+import { Command } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { CliConfig } from "../../domain/services/cli-config";
+import { userError } from "../../utils/error-formatter";
 import { debugOption } from "../shared-options";
 
 export const configResetCommand = Command.make("reset", { debug: debugOption }, () =>
@@ -11,11 +12,9 @@ export const configResetCommand = Command.make("reset", { debug: debugOption },
     yield* cliConfig
       .resetConfig()
       .pipe(
-        Effect.catchTag("ParseError", () =>
+        Effect.catchTag("SchemaError", () =>
           Effect.fail(
-            ValidationError.invalidValue(
-              HelpDoc.p("Failed to set configuration")
-            )
+            userError("Failed to set configuration")
           )
         )
       );
diff --git a/apps/cli/src/cli/commands/config-set.ts b/apps/cli/src/cli/commands/config-set.ts
index 9d0d80a2c..f4a133792 100644
--- a/apps/cli/src/cli/commands/config-set.ts
+++ b/apps/cli/src/cli/commands/config-set.ts
@@ -1,11 +1,12 @@
-import { Args, Command, HelpDoc, ValidationError } from "@effect/cli";
+import { Argument, Command } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { CliConfig } from "../../domain/services/cli-config";
+import { userError } from "../../utils/error-formatter";
 import { debugOption } from "../shared-options";
 
-const keyArg = Args.text({ name: "key" });
-const valueArg = Args.text({ name: "value" });
+const keyArg = Argument.string("key");
+const valueArg = Argument.string("value");
 
 export const configSetCommand = Command.make(
   "set",
@@ -20,11 +21,9 @@ export const configSetCommand = Command.make(
           [key]: value,
         })
         .pipe(
-          Effect.catchTag("ParseError", () =>
+          Effect.catchTag("SchemaError", () =>
             Effect.fail(
-              ValidationError.invalidValue(
-                HelpDoc.p("Failed to set configuration")
-              )
+              userError("Failed to set configuration")
             )
           )
         );
diff --git a/apps/cli/src/cli/commands/config.ts b/apps/cli/src/cli/commands/config.ts
index cb118017c..7fcec09fc 100644
--- a/apps/cli/src/cli/commands/config.ts
+++ b/apps/cli/src/cli/commands/config.ts
@@ -1,4 +1,4 @@
-import { Command } from "@effect/cli";
+import { Command } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { CliConfig } from "../../domain/services/cli-config";
diff --git a/apps/cli/src/cli/commands/init.ts b/apps/cli/src/cli/commands/init.ts
index e0963a3be..acae5624d 100644
--- a/apps/cli/src/cli/commands/init.ts
+++ b/apps/cli/src/cli/commands/init.ts
@@ -1,6 +1,5 @@
-import { Command, Prompt } from "@effect/cli";
-import { Path } from "@effect/platform";
-import { Console, Effect } from "effect";
+import { Command, Prompt } from "effect/unstable/cli";
+import { Console, Effect, Path } from "effect";
 
 import { createInitialNormalizedSchema } from "../../domain/schema/normalized-schema";
 import { Auth } from "../../domain/services/auth";
diff --git a/apps/cli/src/cli/commands/schema-check.ts b/apps/cli/src/cli/commands/schema-check.ts
index 7eb7d5b00..717da7683 100644
--- a/apps/cli/src/cli/commands/schema-check.ts
+++ b/apps/cli/src/cli/commands/schema-check.ts
@@ -1,4 +1,4 @@
-import { Command } from "@effect/cli";
+import { Command } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import {
diff --git a/apps/cli/src/cli/commands/schema-pull.ts b/apps/cli/src/cli/commands/schema-pull.ts
index 29d2179af..2374afefd 100644
--- a/apps/cli/src/cli/commands/schema-pull.ts
+++ b/apps/cli/src/cli/commands/schema-pull.ts
@@ -1,20 +1,20 @@
-import { Command, HelpDoc, Options, Prompt, ValidationError } from "@effect/cli";
-import { Path } from "@effect/platform";
-import { Console, Effect } from "effect";
+import { Command, Flag, Prompt } from "effect/unstable/cli";
+import { Console, Effect, Path } from "effect";
 
 import { Auth } from "../../domain/services/auth";
 import { Codegen } from "../../domain/services/codegen";
 import { SchemaService } from "../../domain/services/schema";
 import { SourceCode } from "../../domain/services/source-code";
+import { userError } from "../../utils/error-formatter";
 import { debugOption } from "../shared-options";
 
 export const schemaPullCommand = Command.make(
   "pull",
   {
     debug: debugOption,
-    force: Options.boolean("force").pipe(
-      Options.withDescription("Skip confirmation prompt"),
-      Options.withDefault(false)
+    force: Flag.boolean("force").pipe(
+      Flag.withDescription("Skip confirmation prompt"),
+      Flag.withDefault(false)
     ),
   },
   ({ force }) =>
@@ -29,10 +29,8 @@ export const schemaPullCommand = Command.make(
       yield* auth.getSignedInSession.pipe(
         Effect.catchTag("NoSignedInUserError", () =>
           Effect.fail(
-            ValidationError.invalidValue(
-              HelpDoc.p(
-                "You must be logged in to pull schema. Run 'voidhash auth login' first."
-              )
+            userError(
+              "You must be logged in to pull schema. Run 'voidhash auth login' first."
             )
           )
         )
@@ -42,10 +40,8 @@ export const schemaPullCommand = Command.make(
       const config = yield* sourceCode.loadVoidhashConfig().pipe(
         Effect.catchTag("VoidhashConfigNotFoundError", () =>
           Effect.fail(
-            ValidationError.invalidValue(
-              HelpDoc.p(
-                "voidhash.config.ts not found. Run 'voidhash init' to create one."
-              )
+            userError(
+              "voidhash.config.ts not found. Run 'voidhash init' to create one."
             )
           )
         )
@@ -56,9 +52,7 @@ export const schemaPullCommand = Command.make(
       const remoteSchema = yield* schemaService.fetchRemoteSchema().pipe(
         Effect.catchTag("RemoteSchemaFetchError", (e) =>
           Effect.fail(
-            ValidationError.invalidValue(
-              HelpDoc.p(`Failed to fetch remote schema: ${String(e.cause)}`)
-            )
+            userError(`Failed to fetch remote schema: ${String(e.cause)}`)
           )
         )
       );
diff --git a/apps/cli/src/cli/commands/schema-push.ts b/apps/cli/src/cli/commands/schema-push.ts
index fa8aab3ae..a77414181 100644
--- a/apps/cli/src/cli/commands/schema-push.ts
+++ b/apps/cli/src/cli/commands/schema-push.ts
@@ -1,4 +1,4 @@
-import { Command, Options, Prompt } from "@effect/cli";
+import { Command, Flag, Prompt } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { MissingProviderConfigurationError } from "../../domain/errors/schema";
@@ -12,14 +12,14 @@ export const schemaPushCommand = Command.make(
   "push",
   {
     debug: debugOption,
-    dryRun: Options.boolean("dry-run").pipe(
-      Options.withDescription("Preview changes without applying"),
-      Options.withDefault(false)
+    dryRun: Flag.boolean("dry-run").pipe(
+      Flag.withDescription("Preview changes without applying"),
+      Flag.withDefault(false)
     ),
-    yes: Options.boolean("yes").pipe(
-      Options.withAlias("y"),
-      Options.withDescription("Auto-approve all changes"),
-      Options.withDefault(false)
+    yes: Flag.boolean("yes").pipe(
+      Flag.withAlias("y"),
+      Flag.withDescription("Auto-approve all changes"),
+      Flag.withDefault(false)
     ),
   },
   ({ dryRun, yes }) =>
diff --git a/apps/cli/src/cli/commands/schema.ts b/apps/cli/src/cli/commands/schema.ts
index 6eb1550c1..b2094019c 100644
--- a/apps/cli/src/cli/commands/schema.ts
+++ b/apps/cli/src/cli/commands/schema.ts
@@ -1,4 +1,4 @@
-import { Command } from "@effect/cli";
+import { Command } from "effect/unstable/cli";
 import { Effect } from "effect";
 
 import { debugOption } from "../shared-options";
diff --git a/apps/cli/src/cli/index.ts b/apps/cli/src/cli/index.ts
index 65e7f9993..129ca0390 100644
--- a/apps/cli/src/cli/index.ts
+++ b/apps/cli/src/cli/index.ts
@@ -1,7 +1,7 @@
-import { Command } from "@effect/cli";
-import { FetchHttpClient } from "@effect/platform";
-import { NodeContext, NodeRuntime } from "@effect/platform-node";
-import { Effect, Layer, Logger, LogLevel } from "effect";
+import { Command } from "effect/unstable/cli";
+import { NodeServices, NodeRuntime } from "@effect/platform-node";
+import { Effect, Layer, References } from "effect";
+import { FetchHttpClient } from "effect/unstable/http";
 
 import { Auth } from "../domain/services/auth";
 import { CliConfig } from "../domain/services/cli-config";
@@ -29,13 +29,12 @@ const command = Command.make("voidhash").pipe(
 );
 
 const cli = Command.run(command, {
-  name: "Voidhash CLI",
   version: "0.0.1-alpha.1",
 });
 
 // Apply debug log level if --debug flag is present
-const cliEffect = Effect.suspend(() => cli(process.argv)).pipe(
-  isDebugMode() ? Logger.withMinimumLogLevel(LogLevel.Debug) : (x) => x
+const cliEffect = cli.pipe(
+  isDebugMode() ? Effect.provideService(References.MinimumLogLevel, "Debug") : (x) => x
 );
 
 const ServicesLayer = Layer.mergeAll(
@@ -45,7 +44,7 @@ const ServicesLayer = Layer.mergeAll(
   SchemaService.Default
 );
 
-const PlatformLayer = Layer.mergeAll(NodeContext.layer, FetchHttpClient.layer);
+const PlatformLayer = Layer.mergeAll(NodeServices.layer, FetchHttpClient.layer);
 
 const MainLayer = ServicesLayer.pipe(
   Layer.provideMerge(ApiClient.Default),
diff --git a/apps/cli/src/cli/shared-options.ts b/apps/cli/src/cli/shared-options.ts
index bd17204a3..ba647dd19 100644
--- a/apps/cli/src/cli/shared-options.ts
+++ b/apps/cli/src/cli/shared-options.ts
@@ -1,12 +1,12 @@
-import { Options } from "@effect/cli";
+import { Flag } from "effect/unstable/cli";
 
 /**
  * Shared debug option for all commands.
  * The actual debug behavior is handled by isDebugMode() in error-formatter.ts
  * which checks process.argv directly. This option just tells the parser to accept it.
  */
-export const debugOption = Options.boolean("debug").pipe(
-  Options.withAlias("d"),
-  Options.withDescription("Enable debug logging with full error traces"),
-  Options.withDefault(false)
+export const debugOption = Flag.boolean("debug").pipe(
+  Flag.withAlias("d"),
+  Flag.withDescription("Enable debug logging with full error traces"),
+  Flag.withDefault(false)
 );
diff --git a/apps/cli/src/domain/schema/normalized-schema.ts b/apps/cli/src/domain/schema/normalized-schema.ts
index 0734b2227..8d8bef20a 100644
--- a/apps/cli/src/domain/schema/normalized-schema.ts
+++ b/apps/cli/src/domain/schema/normalized-schema.ts
@@ -4,7 +4,7 @@ import { Schema } from "effect";
 // Provider IDs
 // ========================================================
 
-export const ProviderId = Schema.Literal("appleAppStore", "googlePlay");
+export const ProviderId = Schema.Literals(["appleAppStore", "googlePlay"]);
 export type ProviderId = typeof ProviderId.Type;
 
 // ========================================================
@@ -22,7 +22,7 @@ export type NormalizedPerk = typeof NormalizedPerkSchema.Type;
 // ========================================================
 
 export const ProductProviderConfigSchema = Schema.Struct({
-  configuration: Schema.Record({ key: Schema.String, value: Schema.Unknown }),
+  configuration: Schema.Record(Schema.String, Schema.Unknown),
   providerId: ProviderId,
 });
 export type ProductProviderConfig = typeof ProductProviderConfigSchema.Type;
diff --git a/apps/cli/src/domain/schema/package-json.ts b/apps/cli/src/domain/schema/package-json.ts
index 4bd905199..81fdbd822 100644
--- a/apps/cli/src/domain/schema/package-json.ts
+++ b/apps/cli/src/domain/schema/package-json.ts
@@ -2,20 +2,20 @@ import { Schema } from "effect";
 
 export const PackageJsonSchema = Schema.Struct({
   dependencies: Schema.optional(
-    Schema.Record({ key: Schema.String, value: Schema.String })
+    Schema.Record(Schema.String, Schema.String)
   ),
   devDependencies: Schema.optional(
-    Schema.Record({ key: Schema.String, value: Schema.String })
+    Schema.Record(Schema.String, Schema.String)
   ),
   name: Schema.optional(Schema.String),
   peerDependencies: Schema.optional(
-    Schema.Record({ key: Schema.String, value: Schema.String })
+    Schema.Record(Schema.String, Schema.String)
   ),
   version: Schema.optional(Schema.String),
   workspaces: Schema.optional(
-    Schema.Union(
+    Schema.Union([
       Schema.Array(Schema.String),
-      Schema.Record({ key: Schema.String, value: Schema.Unknown })
-    )
+      Schema.Record(Schema.String, Schema.Unknown),
+    ])
   ),
 });
diff --git a/apps/cli/src/domain/services/auth.ts b/apps/cli/src/domain/services/auth.ts
index bdfcb268e..c269046d3 100644
--- a/apps/cli/src/domain/services/auth.ts
+++ b/apps/cli/src/domain/services/auth.ts
@@ -1,10 +1,17 @@
+import { NodeServices, NodeHttpServer } from "@effect/platform-node";
 import {
-  HttpLayerRouter,
+  Console,
+  Data,
+  Effect,
+  Layer,
+  PubSub,
+  ServiceMap,
+} from "effect";
+import {
+  HttpRouter,
   HttpServerRequest,
   HttpServerResponse,
-} from "@effect/platform";
-import { NodeContext, NodeHttpServer } from "@effect/platform-node";
-import { Console, Data, Effect, Layer, PubSub, Queue } from "effect";
+} from "effect/unstable/http";
 import { customAlphabet } from "nanoid";
 import { spawn } from "node:child_process";
 import { createServer } from "node:http";
@@ -47,7 +54,7 @@ const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
     // Create the callback route layer
     const CallbackRoute = Layer.effectDiscard(
       Effect.gen(function* CallbackRoute() {
-        const router = yield* HttpLayerRouter.HttpRouter;
+        const router = yield* HttpRouter.HttpRouter;
         yield* router.add(
           "GET",
           "/callback",
@@ -57,8 +64,8 @@ const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
             const { query } = parsedUrl;
 
             if (query.cancelled) {
-              yield* callbackEvents.publish({ type: "cancelled" });
-              return yield* HttpServerResponse.text("Login cancelled").pipe(
+              yield* PubSub.publish(callbackEvents, { type: "cancelled" });
+              return HttpServerResponse.text("Login cancelled").pipe(
                 HttpServerResponse.setHeader(
                   "Access-Control-Allow-Origin",
                   "*"
@@ -70,12 +77,12 @@ const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
               );
             }
 
-            yield* callbackEvents.publish({
+            yield* PubSub.publish(callbackEvents, {
               code: query.code as string,
               key: query.key as string,
               type: "success",
             });
-            return yield* HttpServerResponse.text("Login successful").pipe(
+            return HttpServerResponse.text("Login successful").pipe(
               HttpServerResponse.setHeader("Access-Control-Allow-Origin", "*"),
               HttpServerResponse.setHeader(
                 "Access-Control-Allow-Methods",
@@ -97,173 +104,180 @@ const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
     });
 
     // Launch the server with the callback route
-    return yield* HttpLayerRouter.serve(CallbackRoute).pipe(
-      Layer.provide(Layer.mergeAll(ServerLive, NodeContext.layer)),
+    return yield* HttpRouter.serve(CallbackRoute).pipe(
+      Layer.provide(Layer.mergeAll(ServerLive, NodeServices.layer)),
       Layer.launch
     );
   });
 
-export class Auth extends Effect.Service<Auth>()("voidhash-cli/Auth", {
-  dependencies: [CliConfig.Default],
-  effect: Effect.gen(function* effect() {
-    const client = yield* ApiClient;
-    const cliConfig = yield* CliConfig;
-    /**
-     * Retrieves the currently signed-in user from the local configuration and the BetterAuth service.
-     *
-     * Attempts to read the API key from the user's config file. If no API key is found, or if the session
-     * cannot be retrieved or does not contain a user, a `NoSignedInUserError` is thrown.
-     * If the session retrieval fails for other reasons, a `FailedToGetSessionError` is thrown.
-     *
-     * @returns {Effect.Effect<unknown, NoSignedInUserError | FailedToGetSessionError, { name: string; email: string }>}
-     *   An Effect that yields the signed-in user's information, or fails with an appropriate error.
-     */
-    const getSignedInSession = Effect.gen(function* getSignedInSession() {
-      yield* Effect.logDebug("Reading CLI config for session check");
-      const config = yield* cliConfig
-        .readConfig()
-        .pipe(
-          Effect.catchAll(() => Effect.dieMessage("Failed to read config"))
-        );
+const make = Effect.gen(function* effect() {
+  const client = yield* ApiClient;
+  const cliConfig = yield* CliConfig;
+  /**
+   * Retrieves the currently signed-in user from the local configuration and the BetterAuth service.
+   *
+   * Attempts to read the API key from the user's config file. If no API key is found, or if the session
+   * cannot be retrieved or does not contain a user, a `NoSignedInUserError` is thrown.
+   * If the session retrieval fails for other reasons, a `FailedToGetSessionError` is thrown.
+   *
+   * @returns {Effect.Effect<unknown, NoSignedInUserError | FailedToGetSessionError, { name: string; email: string }>}
+   *   An Effect that yields the signed-in user's information, or fails with an appropriate error.
+   */
+  const getSignedInSession = Effect.gen(function* getSignedInSession() {
+    yield* Effect.logDebug("Reading CLI config for session check");
+    const config = (yield* cliConfig
+      .readConfig()
+      .pipe(
+        Effect.catch(() => Effect.die("Failed to read config"))
+      ))!;
 
-      // If the config file is not found or the api key is not set, we consider the user to be signed out
-      const apiKey = config.api_key;
-      if (!apiKey) {
-        yield* Effect.logDebug("No API key found in config");
-        return yield* Effect.fail(
-          new NoSignedInUserError({ message: "No signed in user" })
-        );
-      }
-
-      yield* Effect.logDebug("Fetching session from API");
-      const sessionResponse = yield* client.auth.session().pipe(
-        Effect.tap((session) =>
-          Effect.logDebug(`Session retrieved for user: ${session.name}`)
-        ),
-        Effect.catchTags({
-          NotAuthenticatedError: () =>
-            new NoSignedInUserError({ message: "No signed in user" }),
-        })
+    // If the config file is not found or the api key is not set, we consider the user to be signed out
+    const apiKey = config.api_key;
+    if (!apiKey) {
+      yield* Effect.logDebug("No API key found in config");
+      return yield* Effect.fail(
+        new NoSignedInUserError({ message: "No signed in user" })
       );
+    }
 
-      return sessionResponse;
-    }).pipe(
-      Effect.withSpan("Auth.getSignedInSession"),
-      Effect.catchIf(
-        (e) => e._tag !== "NoSignedInUserError",
-        (e) =>
-          Effect.fail(
-            new FailedToGetSessionError({
-              cause: e,
-              message: "Failed to get session",
-            })
-          )
-      )
+    yield* Effect.logDebug("Fetching session from API");
+    const sessionResponse = yield* client.auth.session().pipe(
+      Effect.tap((session) =>
+        Effect.logDebug(`Session retrieved for user: ${session.name}`)
+      ),
+      Effect.catchTags({
+        NotAuthenticatedError: () =>
+          Effect.fail(new NoSignedInUserError({ message: "No signed in user" })),
+      })
     );
 
-    const login = Effect.scoped(
-      Effect.gen(function* login() {
-        yield* Effect.logDebug("Starting login flow");
-        const callbackEventsPubSub = yield* PubSub.unbounded<CallbackEvent>();
-
-        // Launch the callback server in a separate fiber to avoid blocking
-        yield* Effect.logDebug(
-          `Starting callback server on ${host}:${port}`
-        );
-        yield* Effect.fork(
-          Effect.catchAll(runCallbackServer(callbackEventsPubSub), (error) => {
-            // biome-ignore lint/suspicious/noConsole: Error logging
-            console.log(error);
-            return Effect.die(error);
+    return sessionResponse;
+  }).pipe(
+    Effect.withSpan("Auth.getSignedInSession"),
+    Effect.catchIf(
+      (e) => e._tag !== "NoSignedInUserError",
+      (e) =>
+        Effect.fail(
+          new FailedToGetSessionError({
+            cause: e,
+            message: "Failed to get session",
           })
-        );
+        )
+    )
+  );
 
-        // Set up the application server with routing
-        const redirect = `http://${host}:${port}/callback`;
+  const login = Effect.scoped(
+    Effect.gen(function* login() {
+      yield* Effect.logDebug("Starting login flow");
+      const callbackEventsPubSub = yield* PubSub.unbounded<CallbackEvent>();
 
-        const code = nanoid();
-        const config = yield* cliConfig
-          .readConfig()
-          .pipe(
-            Effect.catchAll(() => Effect.dieMessage("Failed to read config"))
-          );
-        const confirmationUrl = new URL(`${config.web_url}/auth/devices`);
-        confirmationUrl.searchParams.append("code", code);
-        confirmationUrl.searchParams.append("redirect", redirect);
+      // Launch the callback server in a separate fiber to avoid blocking
+      yield* Effect.logDebug(
+        `Starting callback server on ${host}:${port}`
+      );
+      yield* Effect.forkChild(
+        Effect.catch(runCallbackServer(callbackEventsPubSub), (error) => {
+          // biome-ignore lint/suspicious/noConsole: Error logging
+          console.log(error);
+          return Effect.die(error);
+        })
+      );
 
-        yield* Effect.logDebug(
-          `Opening browser for authentication: ${confirmationUrl.toString()}`
-        );
-        yield* Console.log(`Confirmation code: ${code}\n`);
-        yield* Console.log(
-          `If something goes wrong, copy and paste this URL into your browser: ${confirmationUrl.toString()}\n`
-        );
-        spawn("open", [confirmationUrl.toString()]);
+      // Set up the application server with routing
+      const redirect = `http://${host}:${port}/callback`;
 
-        // Wait for the callback event
-        yield* Effect.logDebug("Waiting for callback from browser");
-        const callbacksQueue = yield* PubSub.subscribe(callbackEventsPubSub);
-        const callbackEvent = yield* Queue.take(callbacksQueue);
+      const code = nanoid();
+      const config = (yield* cliConfig
+        .readConfig()
+        .pipe(
+          Effect.catch(() => Effect.die("Failed to read config"))
+        ))!;
+      const confirmationUrl = new URL(`${config.web_url}/auth/devices`);
+      confirmationUrl.searchParams.append("code", code);
+      confirmationUrl.searchParams.append("redirect", redirect);
 
-        if (callbackEvent.type === "cancelled") {
-          yield* Effect.logDebug("Login cancelled by user");
-          return yield* Effect.fail(
-            new LoginCancelledError({ message: "Login cancelled" })
-          );
-        }
+      yield* Effect.logDebug(
+        `Opening browser for authentication: ${confirmationUrl.toString()}`
+      );
+      yield* Console.log(`Confirmation code: ${code}\n`);
+      yield* Console.log(
+        `If something goes wrong, copy and paste this URL into your browser: ${confirmationUrl.toString()}\n`
+      );
+      spawn("open", [confirmationUrl.toString()]);
 
-        // Store in config
-        yield* Effect.logDebug("Storing API key in config");
-        yield* cliConfig.writeToConfig({ api_key: callbackEvent.key });
+      // Wait for the callback event
+      yield* Effect.logDebug("Waiting for callback from browser");
+      const subscription = yield* PubSub.subscribe(callbackEventsPubSub);
+      const callbackEvent = yield* PubSub.take(subscription);
 
-        yield* Console.log(
-          `Authentication successful! Your key has been stored in your config file.  To view it, type 'cat ~/${CONFIG_FILE_NAME}'.\n);`
+      if (callbackEvent.type === "cancelled") {
+        yield* Effect.logDebug("Login cancelled by user");
+        return yield* Effect.fail(
+          new LoginCancelledError({ message: "Login cancelled" })
         );
-      })
-    ).pipe(
-      Effect.withSpan("Auth.login"),
-      Effect.catchIf(
-        (e) => e._tag !== "LoginCancelledError",
-        (e) =>
-          Effect.fail(
-            new FailedToLoginError({ cause: e, message: "Failed to login" })
-          )
-      )
-    );
-
-    /**
-     * Logs out the current user
-     *
-     * @returns An Effect that logs out the current user, or fails with a FailedToLogoutError if the logout fails.
-     */
-    const logout = Effect.gen(function* logout() {
-      yield* Effect.logDebug("Starting logout");
-      const config = yield* cliConfig.readConfig();
-      if (!config.api_key) {
-        yield* Effect.logDebug("No API key found, user not logged in");
-        yield* Console.log("You are not logged in.");
-        return;
       }
 
-      yield* Effect.logDebug("Clearing API key from config");
-      yield* cliConfig.writeToConfig({ api_key: null });
-      yield* Console.log("You have been logged out.");
-    }).pipe(
-      Effect.withSpan("Auth.logout"),
-      Effect.catchAll((e) =>
+      // Store in config
+      yield* Effect.logDebug("Storing API key in config");
+      yield* cliConfig.writeToConfig({ api_key: callbackEvent.key });
+
+      yield* Console.log(
+        `Authentication successful! Your key has been stored in your config file.  To view it, type 'cat ~/${CONFIG_FILE_NAME}'.\n);`
+      );
+    })
+  ).pipe(
+    Effect.withSpan("Auth.login"),
+    Effect.catchIf(
+      (e) => e._tag !== "LoginCancelledError",
+      (e) =>
         Effect.fail(
-          new FailedToLogoutError({
-            cause: e,
-            message: "Failed to logout",
-          })
+          new FailedToLoginError({ cause: e, message: "Failed to login" })
         )
+    )
+  );
+
+  /**
+   * Logs out the current user
+   *
+   * @returns An Effect that logs out the current user, or fails with a FailedToLogoutError if the logout fails.
+   */
+  const logout = Effect.gen(function* logout() {
+    yield* Effect.logDebug("Starting logout");
+    const config = yield* cliConfig.readConfig();
+    if (!config.api_key) {
+      yield* Effect.logDebug("No API key found, user not logged in");
+      yield* Console.log("You are not logged in.");
+      return;
+    }
+
+    yield* Effect.logDebug("Clearing API key from config");
+    yield* cliConfig.writeToConfig({ api_key: null });
+    yield* Console.log("You have been logged out.");
+  }).pipe(
+    Effect.withSpan("Auth.logout"),
+    Effect.catch((e) =>
+      Effect.fail(
+        new FailedToLogoutError({
+          cause: e,
+          message: "Failed to logout",
+        })
       )
-    );
+    )
+  );
+
+  return {
+    getSignedInSession,
+    login,
+    logout,
+  } as const;
+});
 
-    return {
-      getSignedInSession,
-      login,
-      logout,
-    } as const;
-  }),
-}) {}
+type AuthShape = Effect.Success<typeof make>;
+
+export class Auth extends ServiceMap.Service<Auth, AuthShape>()(
+  "voidhash-cli/Auth"
+) {
+  static Default = Layer.effect(Auth, make).pipe(
+    Layer.provide(CliConfig.Default)
+  )
+}
diff --git a/apps/cli/src/domain/services/cli-config.ts b/apps/cli/src/domain/services/cli-config.ts
index 7e0db8897..92fc3799b 100644
--- a/apps/cli/src/domain/services/cli-config.ts
+++ b/apps/cli/src/domain/services/cli-config.ts
@@ -1,5 +1,4 @@
-import { FileSystem, Path } from "@effect/platform";
-import { Effect, Schema } from "effect";
+import { Effect, FileSystem, Layer, Path, Schema, ServiceMap } from "effect";
 import os from "node:os";
 
 import {
@@ -16,109 +15,103 @@ export const emptyConfig = {
   web_url: DEFAULT_WEB_URL,
 } satisfies typeof CliConfigSchema.Type;
 
-export class CliConfig extends Effect.Service<CliConfig>()(
-  "voidhash-cli/CliConfig",
-  {
-    dependencies: [],
-    // Define how to create the service
-    effect: Effect.gen(function* effect() {
-      const fileSystem = yield* FileSystem.FileSystem;
-      const path = yield* Path.Path;
+const make = Effect.gen(function* effect() {
+  const fileSystem = yield* FileSystem.FileSystem;
+  const path = yield* Path.Path;
 
-      const homeDir = os.homedir();
-      const filePath = path.join(homeDir, CONFIG_FILE_NAME);
+  const homeDir = os.homedir();
+  const filePath = path.join(homeDir, CONFIG_FILE_NAME);
 
-      /**
-       * Reads and decodes the user's configuration file from the home directory.
-       *
-       * @returns An Effect that yields the parsed configuration object, or fails with a ConfigFileNotFoundError if the config file does not exist, or a Schema.DecodeError if the file contents are invalid.
-       */
-      const readConfig = () =>
-        Effect.gen(function* readConfig() {
-          yield* Effect.logDebug(`Reading config from ${filePath}`);
-          if (!fileSystem.exists(filePath)) {
-            yield* Effect.logDebug("Config file not found, using defaults");
-            return yield* Effect.succeed(emptyConfig);
-          }
-          const configString = yield* fileSystem.readFileString(filePath);
-          const configJson = JSON.parse(configString);
-          yield* Effect.logDebug("Config file loaded successfully");
-          return yield* Schema.decodeUnknown(CliConfigSchema)({
-            ...emptyConfig,
-            ...configJson,
-          });
-        }).pipe(
-          Effect.withSpan("CliConfig.readConfig"),
-          Effect.catchTags({
-            BadArgument: (e) =>
-              Effect.fail(
-                new FailedToReadCliConfigError({
-                  cause: e,
-                  message: "Failed to read config",
-                })
-              ),
-            ParseError: (e) =>
-              Effect.fail(
-                new FailedToReadCliConfigError({
-                  cause: e,
-                  message: "Failed to read config",
-                })
-              ),
-            SystemError: (e) =>
-              Effect.fail(
-                new FailedToReadCliConfigError({
-                  cause: e,
-                  message: "Failed to read config",
-                })
-              ),
-          })
-        );
+  /**
+   * Reads and decodes the user's configuration file from the home directory.
+   *
+   * @returns An Effect that yields the parsed configuration object, or fails with a ConfigFileNotFoundError if the config file does not exist, or a Schema.DecodeError if the file contents are invalid.
+   */
+  const readConfig = () =>
+    Effect.gen(function* readConfig() {
+      yield* Effect.logDebug(`Reading config from ${filePath}`);
+      if (!fileSystem.exists(filePath)) {
+        yield* Effect.logDebug("Config file not found, using defaults");
+        return yield* Effect.succeed(emptyConfig);
+      }
+      const configString = yield* fileSystem.readFileString(filePath);
+      const configJson = JSON.parse(configString);
+      yield* Effect.logDebug("Config file loaded successfully");
+      return yield* Schema.decodeUnknownEffect(CliConfigSchema)({
+        ...emptyConfig,
+        ...configJson,
+      });
+    }).pipe(
+      Effect.withSpan("CliConfig.readConfig"),
+      Effect.catchTags({
+        PlatformError: (e) =>
+          Effect.fail(
+            new FailedToReadCliConfigError({
+              cause: e,
+              message: "Failed to read config",
+            })
+          ),
+        SchemaError: (e) =>
+          Effect.fail(
+            new FailedToReadCliConfigError({
+              cause: e,
+              message: "Failed to read config",
+            })
+          ),
+      })
+    );
 
-      /**
-       * Writes the provided partial configuration to the user's config file.
-       * Merges the new config with any existing config, then saves the result.
-       *
-       * @param config - Partial configuration object to write to the config file.
-       * @returns An Effect that writes the merged configuration to disk.
-       */
-      const writeToConfig = (config: Partial<typeof CliConfigSchema.Type>) =>
-        Effect.gen(function* writeToConfig() {
-          yield* Effect.logDebug(`Writing config to ${filePath}`);
-          const currentConfig = yield* readConfig().pipe(
-            Effect.orElse(() => Effect.succeed({}))
-          );
-          const mergedConfig = { ...currentConfig, ...config };
-          const validatedConfig =
-            yield* Schema.decodeUnknown(CliConfigSchema)(mergedConfig);
-          yield* fileSystem.writeFileString(
-            filePath,
-            JSON.stringify(validatedConfig)
-          );
-          yield* Effect.logDebug("Config file written successfully");
-        }).pipe(Effect.withSpan("CliConfig.writeToConfig"));
+  /**
+   * Writes the provided partial configuration to the user's config file.
+   * Merges the new config with any existing config, then saves the result.
+   *
+   * @param config - Partial configuration object to write to the config file.
+   * @returns An Effect that writes the merged configuration to disk.
+   */
+  const writeToConfig = (config: Partial<typeof CliConfigSchema.Type>) =>
+    Effect.gen(function* writeToConfig() {
+      yield* Effect.logDebug(`Writing config to ${filePath}`);
+      const currentConfig = yield* readConfig().pipe(
+        Effect.catch(() => Effect.succeed({}))
+      );
+      const mergedConfig = { ...currentConfig, ...config };
+      const validatedConfig =
+        yield* Schema.decodeUnknownEffect(CliConfigSchema)(mergedConfig);
+      yield* fileSystem.writeFileString(
+        filePath,
+        JSON.stringify(validatedConfig)
+      );
+      yield* Effect.logDebug("Config file written successfully");
+    }).pipe(Effect.withSpan("CliConfig.writeToConfig"));
 
-      /**
-       * Resets the configuration to the default values. If authenticated, persists the authentication state.
-       *
-       * @returns An Effect that resets the configuration to the default values.
-       */
-      const resetConfig = () =>
-        Effect.gen(function* resetConfig() {
-          yield* Effect.logDebug("Resetting config to defaults");
-          const config = yield* readConfig();
+  /**
+   * Resets the configuration to the default values. If authenticated, persists the authentication state.
+   *
+   * @returns An Effect that resets the configuration to the default values.
+   */
+  const resetConfig = () =>
+    Effect.gen(function* resetConfig() {
+      yield* Effect.logDebug("Resetting config to defaults");
+      const config = yield* readConfig();
 
-          yield* writeToConfig({
-            ...emptyConfig,
-            api_key: config.api_key ?? null,
-          });
-          yield* Effect.logDebug("Config reset complete");
-        }).pipe(Effect.withSpan("CliConfig.resetConfig"));
+      yield* writeToConfig({
+        ...emptyConfig,
+        api_key: config.api_key ?? null,
+      });
+      yield* Effect.logDebug("Config reset complete");
+    }).pipe(Effect.withSpan("CliConfig.resetConfig"));
 
-      return {
-        readConfig,
-        resetConfig,
-        writeToConfig,
-      } as const;
-    }),
-  }
-) {}
+  return {
+    readConfig,
+    resetConfig,
+    writeToConfig,
+  } as const;
+});
+
+type CliConfigShape = Effect.Success<typeof make>;
+
+export class CliConfig extends ServiceMap.Service<CliConfig, CliConfigShape>()(
+  "voidhash-cli/CliConfig"
+) {
+  static Default = Layer.effect(CliConfig, make)
+}
diff --git a/apps/cli/src/domain/services/codegen.ts b/apps/cli/src/domain/services/codegen.ts
index acf601761..5c052f6f8 100644
--- a/apps/cli/src/domain/services/codegen.ts
+++ b/apps/cli/src/domain/services/codegen.ts
@@ -1,5 +1,4 @@
-import { FileSystem } from "@effect/platform";
-import { Effect } from "effect";
+import { Effect, FileSystem, Layer, ServiceMap } from "effect";
 
 import type { Writable } from "../../utils/types";
 import type { NormalizedSchema, ProviderId } from "../schema/normalized-schema";
@@ -133,18 +132,15 @@ function generateSchemaCode(schema: NormalizedSchema): string {
   return lines.join("\n");
 }
 
-export class Codegen extends Effect.Service<Codegen>()("voidhash-cli/Codegen", {
-  dependencies: [],
-  // Define how to create the service
-  effect: Effect.gen(function* effect() {
-    const fileSystem = yield* FileSystem.FileSystem;
+const make = Effect.gen(function* effect() {
+  const fileSystem = yield* FileSystem.FileSystem;
 
-    const generateVoidhashConfigFile = (
-      filePath: string,
-      config: Writable<typeof VoidhashConfigSchema.Type>
-    ) =>
-      Effect.gen(function* generateVoidhashConfigFile() {
-        const content = `import { defineConfig } from 'voidhash-cli';
+  const generateVoidhashConfigFile = (
+    filePath: string,
+    config: Writable<typeof VoidhashConfigSchema.Type>
+  ) =>
+    Effect.gen(function* generateVoidhashConfigFile() {
+      const content = `import { defineConfig } from 'voidhash-cli';
 
 export default defineConfig({
   team: '${config.team}',
@@ -152,12 +148,12 @@ export default defineConfig({
   schema: '${config.schema}'
 });
 `;
-        yield* fileSystem.writeFileString(filePath, content);
-      });
+      yield* fileSystem.writeFileString(filePath, content);
+    });
 
-    const generateClientFile = (filePath: string, publishableKey: string) =>
-      Effect.gen(function* generateClientFile() {
-        const content = `import { createVoidhashClient } from "@voidhash/react-native";
+  const generateClientFile = (filePath: string, publishableKey: string) =>
+    Effect.gen(function* generateClientFile() {
+      const content = `import { createVoidhashClient } from "@voidhash/react-native";
 import * as schema from "./schema";
 
 export const voidhash = createVoidhashClient(
@@ -165,19 +161,26 @@ export const voidhash = createVoidhashClient(
   schema
 );
 `;
-        yield* fileSystem.writeFileString(filePath, content);
-      });
-
-    const generateSchemaFile = (filePath: string, schema: NormalizedSchema) =>
-      Effect.gen(function* generateSchemaFile() {
-        const content = generateSchemaCode(schema);
-        yield* fileSystem.writeFileString(filePath, content);
-      });
-
-    return {
-      generateClientFile,
-      generateSchemaFile,
-      generateVoidhashConfigFile,
-    } as const;
-  }),
-}) {}
+      yield* fileSystem.writeFileString(filePath, content);
+    });
+
+  const generateSchemaFile = (filePath: string, schema: NormalizedSchema) =>
+    Effect.gen(function* generateSchemaFile() {
+      const content = generateSchemaCode(schema);
+      yield* fileSystem.writeFileString(filePath, content);
+    });
+
+  return {
+    generateClientFile,
+    generateSchemaFile,
+    generateVoidhashConfigFile,
+  } as const;
+});
+
+type CodegenShape = Effect.Success<typeof make>;
+
+export class Codegen extends ServiceMap.Service<Codegen, CodegenShape>()(
+  "voidhash-cli/Codegen"
+) {
+  static Default = Layer.effect(Codegen, make)
+}
diff --git a/apps/cli/src/domain/services/schema.ts b/apps/cli/src/domain/services/schema.ts
index 2b2587412..846f3da56 100644
--- a/apps/cli/src/domain/services/schema.ts
+++ b/apps/cli/src/domain/services/schema.ts
@@ -1,5 +1,5 @@
 import type { ChangesetSchema } from "@voidhash/shared";
-import { Effect, Schedule } from "effect";
+import { Effect, Layer, Schedule, ServiceMap } from "effect";
 
 import { ApiClient } from "../../utils/api-client";
 import {
@@ -23,221 +23,225 @@ export { formatChange } from "../../utils/schema/changeset-builder";
 
 type Change = (typeof ChangesetSchema.Type)["changes"][number];
 
-export class SchemaService extends Effect.Service<SchemaService>()(
-	"voidhash-cli/Schema",
-	{
-		dependencies: [ApiClient.Default],
-		effect: Effect.gen(function* effect() {
-			const apiClient = yield* ApiClient;
-
-			/**
-			 * Fetch the remote schema from the API
-			 */
-			const fetchRemoteSchema = () =>
-				Effect.gen(function* fetchRemoteSchema() {
-					yield* Effect.logDebug("Fetching remote schema from API");
-					const schema = createEmptyNormalizedSchema();
-
-					// 1. Fetch all perks
-					const remotePerks = yield* apiClient.perks.listPerks();
-					for (const perk of remotePerks) {
-						schema.perks.set(perk.slug, {
-							name: perk.name,
-							slug: perk.slug,
-						});
-					}
-
-					// 1b. Fetch all active paywall locations
-					const remoteLocations =
-						yield* apiClient.paywall_locations.listPaywallLocations();
-					for (const location of remoteLocations) {
-						schema.locations.set(location.slug, {
-							description: location.description,
-							name: location.name,
-							slug: location.slug,
-						});
-					}
-
-					// 2. Fetch all products
-					const remoteProducts = yield* apiClient.products.listProducts();
-
-					// 3. Fetch payment provider configurations
-					const providerConfigs =
-						yield* apiClient.payment_provider_configurations.listPaymentProviderConfigurations();
-					for (const config of providerConfigs) {
-						if (
-							config.providerId === "appleAppStore" ||
-							config.providerId === "googlePlay"
-						) {
-							schema.enabledProviders.add(config.providerId);
-						}
-					}
-
-					// 4. Fetch all payment provider products
-					const providerProducts =
-						yield* apiClient.payment_provider_products.listPaymentProviderProducts();
-
-					// Build a map of productId -> provider products
-					const productProviderMap = new Map<
-						string,
-						{ providerId: ProviderId; configuration: Record<string, unknown> }[]
-					>();
-					for (const pp of providerProducts) {
-						if (
-							pp.providerId !== "appleAppStore" &&
-							pp.providerId !== "googlePlay"
-						) {
-							continue;
+const make = Effect.gen(function* effect() {
+	const apiClient = yield* ApiClient;
+
+	/**
+	 * Fetch the remote schema from the API
+	 */
+	const fetchRemoteSchema = () =>
+		Effect.gen(function* fetchRemoteSchema() {
+			yield* Effect.logDebug("Fetching remote schema from API");
+			const schema = createEmptyNormalizedSchema();
+
+			// 1. Fetch all perks
+			const remotePerks = yield* apiClient.perks.listPerks();
+			for (const perk of remotePerks) {
+				schema.perks.set(perk.slug, {
+					name: perk.name,
+					slug: perk.slug,
+				});
+			}
+
+			// 1b. Fetch all active paywall locations
+			const remoteLocations =
+				yield* apiClient.paywall_locations.listPaywallLocations();
+			for (const location of remoteLocations) {
+				schema.locations.set(location.slug, {
+					description: location.description,
+					name: location.name,
+					slug: location.slug,
+				});
+			}
+
+			// 2. Fetch all products
+			const remoteProducts = yield* apiClient.products.listProducts();
+
+			// 3. Fetch payment provider configurations
+			const providerConfigs =
+				yield* apiClient.payment_provider_configurations.listPaymentProviderConfigurations();
+			for (const config of providerConfigs) {
+				if (
+					config.providerId === "appleAppStore" ||
+					config.providerId === "googlePlay"
+				) {
+					schema.enabledProviders.add(config.providerId);
+				}
+			}
+
+			// 4. Fetch all payment provider products
+			const providerProducts =
+				yield* apiClient.payment_provider_products.listPaymentProviderProducts();
+
+			// Build a map of productId -> provider products
+			const productProviderMap = new Map<
+				string,
+				{ providerId: ProviderId; configuration: Record<string, unknown> }[]
+			>();
+			for (const pp of providerProducts) {
+				if (
+					pp.providerId !== "appleAppStore" &&
+					pp.providerId !== "googlePlay"
+				) {
+					continue;
+				}
+				const existing = productProviderMap.get(pp.productId) || [];
+				existing.push({
+					configuration: pp.configuration as Record<string, unknown>,
+					providerId: pp.providerId,
+				});
+				productProviderMap.set(pp.productId, existing);
+			}
+
+			// 5. For each product, fetch its perks
+
+			yield* Effect.all(
+				remoteProducts.map((product) =>
+					Effect.gen(function* () {
+						const productPerks = yield* apiClient.product_perks
+							.listProductPerksByProductId({
+								params: { productId: product.id },
+							})
+							.pipe(
+								Effect.retry({
+									schedule: Schedule.exponential(1000),
+									times: 3,
+								}),
+							);
+
+						// Map perkIds to slugs
+						const perkSlugs: string[] = [];
+						for (const pp of productPerks) {
+							const perk = remotePerks.find((p) => p.id === pp.perkId);
+							if (perk) {
+								perkSlugs.push(perk.slug);
+							}
 						}
-						const existing = productProviderMap.get(pp.productId) || [];
-						existing.push({
-							configuration: pp.configuration as Record<string, unknown>,
-							providerId: pp.providerId,
+
+						schema.products.set(product.slug, {
+							name: product.name,
+							perks: perkSlugs,
+							providers: productProviderMap.get(product.id) || [],
+							slug: product.slug,
+							type: "subscription", // TODO: map from product.type
 						});
-						productProviderMap.set(pp.productId, existing);
-					}
-
-					// 5. For each product, fetch its perks
-
-					yield* Effect.all(
-						remoteProducts.map((product) =>
-							Effect.gen(function* () {
-								const productPerks = yield* apiClient.product_perks
-									.listProductPerksByProductId({
-										path: { productId: product.id },
-									})
-									.pipe(
-										Effect.retry({
-											schedule: Schedule.exponential(1000),
-											times: 3,
-										}),
-									);
-
-								// Map perkIds to slugs
-								const perkSlugs: string[] = [];
-								for (const pp of productPerks) {
-									const perk = remotePerks.find((p) => p.id === pp.perkId);
-									if (perk) {
-										perkSlugs.push(perk.slug);
-									}
-								}
-
-								schema.products.set(product.slug, {
-									name: product.name,
-									perks: perkSlugs,
-									providers: productProviderMap.get(product.id) || [],
-									slug: product.slug,
-									type: "subscription", // TODO: map from product.type
-								});
-							}),
-						),
-						{
-							concurrency: 8,
-						},
-					);
-
-					yield* Effect.logDebug(
-						`Fetched ${schema.locations.size} locations, ${schema.perks.size} perks, ${schema.products.size} products`
-					);
-					return schema;
-				}).pipe(
-					Effect.withSpan("SchemaService.fetchRemoteSchema"),
-					Effect.catchAll(
-						(e) =>
-							new RemoteSchemaFetchError({
-								cause: e,
-							}),
-					),
-				);
-
-			/**
-			 * Fetch payment provider configurations
-			 */
-			const fetchProviderConfigurations = () =>
-				apiClient.payment_provider_configurations
-					.listPaymentProviderConfigurations()
-					.pipe(
-						Effect.tap((configs) =>
-							Effect.logDebug(
-								`Fetched ${configs.length} provider configurations`
-							)
-						),
-						Effect.withSpan("SchemaService.fetchProviderConfigurations"),
-						Effect.catchAll(
-							(e) =>
-								new RemoteSchemaFetchError({
-									cause: e,
-								}),
-						),
-					);
-			/**
-			 * Check which providers are missing configurations
-			 */
-			const checkProviderConfigurations = (
-				localProviders: Set<ProviderId>,
-				remoteConfigs: readonly { providerId: string }[],
-			): ProviderId[] => {
-				const remoteProviderIds = new Set(
-					remoteConfigs.map((c) => c.providerId),
-				);
-				return [...localProviders].filter(
-					(p) => !remoteProviderIds.has(p),
-				) as ProviderId[];
-			};
-
-			/**
-			 * Deploy a single change to the server
-			 */
-			const deployChange = (change: Change) =>
-				Effect.logDebug(`Deploying change: ${formatChange(change)}`).pipe(
-					Effect.andThen(
-						apiClient.changesets.deployChangeset({
-							payload: { changeset: { changes: [change] } },
-						})
-					),
-					Effect.withSpan("SchemaService.deployChange"),
-					Effect.catchAll(
-						(e) =>
-							new ChangeDeploymentError({
-								cause: e,
-								change: formatChange(change),
-							})
-					)
-				);
-
-			/**
-			 * Deploy an entire changeset to the server
-			 */
-			const deployChangeset = (changeset: typeof ChangesetSchema.Type) =>
-				Effect.logDebug(
-					`Deploying changeset with ${changeset.changes.length} changes`
-				).pipe(
-					Effect.andThen(
-						apiClient.changesets.deployChangeset({
-							payload: { changeset },
-						})
-					),
-					Effect.withSpan("SchemaService.deployChangeset"),
-					Effect.catchAll(
-						(e) =>
-							new ChangeDeploymentError({
-								cause: e,
-								change: "Full changeset deployment",
-							})
+					}),
+				),
+				{
+					concurrency: 8,
+				},
+			);
+
+			yield* Effect.logDebug(
+				`Fetched ${schema.locations.size} locations, ${schema.perks.size} perks, ${schema.products.size} products`
+			);
+			return schema;
+		}).pipe(
+			Effect.withSpan("SchemaService.fetchRemoteSchema"),
+			Effect.catch(
+				(e) =>
+					Effect.fail(new RemoteSchemaFetchError({
+						cause: e,
+					})),
+			),
+		);
+
+	/**
+	 * Fetch payment provider configurations
+	 */
+	const fetchProviderConfigurations = () =>
+		apiClient.payment_provider_configurations
+			.listPaymentProviderConfigurations()
+			.pipe(
+				Effect.tap((configs) =>
+					Effect.logDebug(
+						`Fetched ${configs.length} provider configurations`
 					)
-				);
-
-			return {
-				buildChangeset,
-				checkProviderConfigurations,
-				computeDiff,
-				deployChange,
-				deployChangeset,
-				fetchProviderConfigurations,
-				fetchRemoteSchema,
-				loadLocalSchema,
-				summarizeDiff,
-			} as const;
-		}),
-	},
-) {}
+				),
+				Effect.withSpan("SchemaService.fetchProviderConfigurations"),
+				Effect.catch(
+					(e) =>
+						Effect.fail(new RemoteSchemaFetchError({
+							cause: e,
+						})),
+				),
+			);
+	/**
+	 * Check which providers are missing configurations
+	 */
+	const checkProviderConfigurations = (
+		localProviders: Set<ProviderId>,
+		remoteConfigs: readonly { providerId: string }[],
+	): ProviderId[] => {
+		const remoteProviderIds = new Set(
+			remoteConfigs.map((c) => c.providerId),
+		);
+		return [...localProviders].filter(
+			(p) => !remoteProviderIds.has(p),
+		) as ProviderId[];
+	};
+
+	/**
+	 * Deploy a single change to the server
+	 */
+	const deployChange = (change: Change) =>
+		Effect.logDebug(`Deploying change: ${formatChange(change)}`).pipe(
+			Effect.andThen(
+				apiClient.changesets.deployChangeset({
+					payload: { changeset: { changes: [change] } },
+				})
+			),
+			Effect.withSpan("SchemaService.deployChange"),
+			Effect.catch(
+				(e) =>
+					Effect.fail(new ChangeDeploymentError({
+						cause: e,
+						change: formatChange(change),
+					}))
+			)
+		);
+
+	/**
+	 * Deploy an entire changeset to the server
+	 */
+	const deployChangeset = (changeset: typeof ChangesetSchema.Type) =>
+		Effect.logDebug(
+			`Deploying changeset with ${changeset.changes.length} changes`
+		).pipe(
+			Effect.andThen(
+				apiClient.changesets.deployChangeset({
+					payload: { changeset },
+				})
+			),
+			Effect.withSpan("SchemaService.deployChangeset"),
+			Effect.catch(
+				(e) =>
+					Effect.fail(new ChangeDeploymentError({
+						cause: e,
+						change: "Full changeset deployment",
+					}))
+			)
+		);
+
+	return {
+		buildChangeset,
+		checkProviderConfigurations,
+		computeDiff,
+		deployChange,
+		deployChangeset,
+		fetchProviderConfigurations,
+		fetchRemoteSchema,
+		loadLocalSchema,
+		summarizeDiff,
+	} as const;
+});
+
+type SchemaServiceShape = Effect.Success<typeof make>;
+
+export class SchemaService extends ServiceMap.Service<SchemaService, SchemaServiceShape>()(
+	"voidhash-cli/Schema"
+) {
+	static Default = Layer.effect(SchemaService, make).pipe(
+		Layer.provide(ApiClient.Default)
+	)
+}
diff --git a/apps/cli/src/domain/services/source-code.ts b/apps/cli/src/domain/services/source-code.ts
index c5a378bb0..efb083d01 100644
--- a/apps/cli/src/domain/services/source-code.ts
+++ b/apps/cli/src/domain/services/source-code.ts
@@ -1,5 +1,4 @@
-import { FileSystem, Path } from "@effect/platform";
-import { Effect, Schema } from "effect";
+import { Effect, FileSystem, Layer, Path, Schema, ServiceMap } from "effect";
 
 import { safeRegister } from "../../utils/js-loading/js-file-loading";
 import { relativePathPrefixFromDepth } from "../../utils/source-code";
@@ -16,338 +15,300 @@ import {
 import { PackageJsonSchema } from "../schema/package-json";
 import { VoidhashConfigSchema } from "../schema/voidhash-config";
 
-export class SourceCode extends Effect.Service<SourceCode>()(
-  "voidhash-cli/SourceCode",
-  {
-    dependencies: [],
-    // Define how to create the service
-    effect: Effect.gen(function* effect() {
-      const fs = yield* FileSystem.FileSystem;
-      const path = yield* Path.Path;
-
-      // ===================================
-      // Langauge
-      // ===================================
-
-      /**
-       * Detects the source code language of the project.
-       * @returns The source code language.
-       */
-      const detectSrcLanguage = () =>
-        Effect.gen(function* detectSrcLanguage() {
-          // Check if tsconfig.json exists
-          const tsconfigPath = path.resolve("./tsconfig.json");
-          const tsconfigExists = yield* fs.exists(tsconfigPath);
-          if (tsconfigExists) {
-            return "ts";
-          }
-          return "js";
-        });
-
-      // ===================================
-      // Monorepo
-      // ===================================
-
-      /**
-       * Detects the root path of the monorepo.
-       * @param maxDepth - The maximum depth to check for a monorepo root.
-       * @returns The root path of the monorepo.
-       */
-      const detectMonorepoRootPath = (maxDepth = 10) =>
-        Effect.gen(function* detectMonorepoRootPath() {
-          const checkIsMonorepoRoot = (depth: number) =>
-            Effect.gen(function* checkIsMonorepoRoot() {
-              const pathPrefix = relativePathPrefixFromDepth(depth);
-
-              // Check for monorepo indicators
-              const isPnpmWorkspace = yield* fs.exists(
-                path.resolve(pathPrefix, "pnpm-workspace.yaml")
-              );
-              const isYarnWorkspaces = yield* fs.exists(
-                path.resolve(pathPrefix, "yarn.workspaces.json")
-              );
-              const isTurboRoot = yield* fs.exists(
-                path.resolve(pathPrefix, "turbo.json")
-              );
-
-              // Check for package.json with workspaces field
-              const packageJsonPath = path.resolve(pathPrefix, "package.json");
-              const packageJsonExists = yield* fs.exists(packageJsonPath);
-              let hasWorkspacesField = false;
-
-              if (packageJsonExists) {
-                const packageJson = yield* loadPackageJson(pathPrefix);
-                hasWorkspacesField =
-                  (packageJson.workspaces !== undefined &&
-                    Array.isArray(packageJson.workspaces)) ||
-                  (packageJson.workspaces !== undefined &&
-                    typeof packageJson.workspaces === "object");
-              }
-
-              return (
-                isPnpmWorkspace ||
-                isYarnWorkspaces ||
-                isTurboRoot ||
-                hasWorkspacesField
-              );
-            });
-
-          // Check current directory and traverse up
-          for (let depth = 0; depth <= maxDepth; depth++) {
-            const isMonorepoRoot = yield* checkIsMonorepoRoot(depth);
-            if (isMonorepoRoot) {
-              const pathPrefix = relativePathPrefixFromDepth(depth);
-              return path.resolve(pathPrefix);
-            }
-          }
-
-          return null; // No monorepo root found
-        });
+const make = Effect.gen(function* effect() {
+  const fs = yield* FileSystem.FileSystem;
+  const path = yield* Path.Path;
+
+  // ===================================
+  // Langauge
+  // ===================================
+
+  /**
+   * Detects the source code language of the project.
+   * @returns The source code language.
+   */
+  const detectSrcLanguage = () =>
+    Effect.gen(function* detectSrcLanguage() {
+      // Check if tsconfig.json exists
+      const tsconfigPath = path.resolve("./tsconfig.json");
+      const tsconfigExists = yield* fs.exists(tsconfigPath);
+      if (tsconfigExists) {
+        return "ts";
+      }
+      return "js";
+    });
+
+  // ===================================
+  // Monorepo
+  // ===================================
+
+  /**
+   * Detects the root path of the monorepo.
+   * @param maxDepth - The maximum depth to check for a monorepo root.
+   * @returns The root path of the monorepo.
+   */
+  const detectMonorepoRootPath = (maxDepth = 10) =>
+    Effect.gen(function* detectMonorepoRootPath() {
+      const checkIsMonorepoRoot = (depth: number) =>
+        Effect.gen(function* checkIsMonorepoRoot() {
+          const pathPrefix = relativePathPrefixFromDepth(depth);
+
+          // Check for monorepo indicators
+          const isPnpmWorkspace = yield* fs.exists(
+            path.resolve(pathPrefix, "pnpm-workspace.yaml")
+          );
+          const isYarnWorkspaces = yield* fs.exists(
+            path.resolve(pathPrefix, "yarn.workspaces.json")
+          );
+          const isTurboRoot = yield* fs.exists(
+            path.resolve(pathPrefix, "turbo.json")
+          );
 
-      // ===================================
-      // Package JSON
-      // ===================================
-
-      /**
-       * Loads the package.json file from the given base path.
-       * @param basePath - The base path to load the package.json file from.
-       * @returns The package.json file.
-       */
-      const loadPackageJson = (basePath = "./") =>
-        Effect.gen(function* loadPackageJson() {
-          const packageJsonPath = path.resolve(basePath, "package.json");
+          // Check for package.json with workspaces field
+          const packageJsonPath = path.resolve(pathPrefix, "package.json");
           const packageJsonExists = yield* fs.exists(packageJsonPath);
-          if (!packageJsonExists) {
-            return yield* Effect.fail(
-              new PackageJsonNotFoundError({
-                message: "Package JSON not found in this directory.",
-              })
-            );
-
-            /**
-             * ValidationError.invalidValue(
-                HelpDoc.p(
-                  'React Native project not found in this directory. Please re-run the command in the root of the React Native project.'
-                )
-              )
-             */
+          let hasWorkspacesField = false;
+
+          if (packageJsonExists) {
+            const packageJson = yield* loadPackageJson(pathPrefix);
+            hasWorkspacesField =
+              (packageJson.workspaces !== undefined &&
+                Array.isArray(packageJson.workspaces)) ||
+              (packageJson.workspaces !== undefined &&
+                typeof packageJson.workspaces === "object");
           }
 
-          const packageJson = yield* fs.readFileString(packageJsonPath);
-          return yield* Schema.decodeUnknown(PackageJsonSchema)(
-            JSON.parse(packageJson)
-          ).pipe(
-            Effect.catchTag("ParseError", (e) =>
-              Effect.fail(
-                new InvalidPackageJsonError({
-                  cause: e,
-                  message: "Invalid package JSON",
-                })
-              )
-            )
+          return (
+            isPnpmWorkspace ||
+            isYarnWorkspaces ||
+            isTurboRoot ||
+            hasWorkspacesField
           );
-        }).pipe(
-          Effect.catchTags({
-            BadArgument: (e) =>
-              Effect.fail(
-                new FailedToLoadPackageJsonError({
-                  cause: e,
-                  message: "Failed to load package JSON",
-                })
-              ),
-            SystemError: (e) =>
-              Effect.fail(
-                new FailedToLoadPackageJsonError({
-                  cause: e,
-                  message: "Failed to load package JSON",
-                })
-              ),
+        });
+
+      // Check current directory and traverse up
+      for (let depth = 0; depth <= maxDepth; depth++) {
+        const isMonorepoRoot = yield* checkIsMonorepoRoot(depth);
+        if (isMonorepoRoot) {
+          const pathPrefix = relativePathPrefixFromDepth(depth);
+          return path.resolve(pathPrefix);
+        }
+      }
+
+      return null; // No monorepo root found
+    });
+
+  // ===================================
+  // Package JSON
+  // ===================================
+
+  /**
+   * Loads the package.json file from the given base path.
+   * @param basePath - The base path to load the package.json file from.
+   * @returns The package.json file.
+   */
+  const loadPackageJson = (basePath = "./") =>
+    Effect.gen(function* loadPackageJson() {
+      const packageJsonPath = path.resolve(basePath, "package.json");
+      const packageJsonExists = yield* fs.exists(packageJsonPath);
+      if (!packageJsonExists) {
+        return yield* Effect.fail(
+          new PackageJsonNotFoundError({
+            message: "Package JSON not found in this directory.",
           })
         );
-
-      // ===================================
-      // Package Manager
-      // ===================================
-
-      /**
-       * Detects the package manager of the project.
-       * @param pathPrefix - The path prefix to check for the package manager.
-       * @returns The package manager.
-       */
-      const detectPackageManager = (pathPrefix = "./") =>
-        Effect.gen(function* detectPackageManager() {
-          // npm
-          const packageLockPath = path.resolve(pathPrefix, "package-lock.json");
-          const packageLockExists = yield* fs.exists(packageLockPath);
-          if (packageLockExists) {
-            return "npm";
-          }
-
-          // yarn
-          const yarnLockPath = path.resolve(pathPrefix, "yarn.lock");
-          const yarnLockExists = yield* fs.exists(yarnLockPath);
-          if (yarnLockExists) {
-            return "yarn";
-          }
-
-          // pnpm
-          const pnpmLockPath = path.resolve(pathPrefix, "pnpm-lock.yaml");
-          const pnpmLockExists = yield* fs.exists(pnpmLockPath);
-          if (pnpmLockExists) {
-            return "pnpm";
-          }
-
-          // bun
-          const bunLockPath = path.resolve(pathPrefix, "bun.lockb");
-          const bunLockExists = yield* fs.exists(bunLockPath);
-          if (bunLockExists) {
-            return "bun";
-          }
-
-          return yield* Effect.fail(
-            new NoPackageManagerFoundError({
-              message: "No package manager found in this directory.",
+      }
+
+      const packageJson = yield* fs.readFileString(packageJsonPath);
+      return yield* Schema.decodeUnknownEffect(PackageJsonSchema)(
+        JSON.parse(packageJson)
+      ).pipe(
+        Effect.catchTag("SchemaError", (e) =>
+          Effect.fail(
+            new InvalidPackageJsonError({
+              cause: e,
+              message: "Invalid package JSON",
             })
-          );
-        }).pipe(
-          Effect.catchTags({
-            BadArgument: (e) =>
-              Effect.fail(
-                new FailedToDetectPackageManagerError({
-                  cause: e,
-                  message: "Failed to detect package manager",
-                })
-              ),
-            SystemError: (e) =>
-              Effect.fail(
-                new FailedToDetectPackageManagerError({
-                  cause: e,
-                  message: "Failed to detect package manager",
-                })
-              ),
+          )
+        )
+      );
+    }).pipe(
+      Effect.catchTag("PlatformError", (e) =>
+        Effect.fail(
+          new FailedToLoadPackageJsonError({
+            cause: e,
+            message: "Failed to load package JSON",
           })
-        );
-
-      // ===================================
-      // Source Directory
-      // ===================================
-
-      /**
-       * Determines the source directory path for the project.
-       *
-       * Checks if a './src' directory exists in the current working directory.
-       * If it exists, returns the absolute path to './src'.
-       * Otherwise, returns the absolute path to the current directory ('./').
-       *
-       * @returns {Effect.Effect<string, never, FileSystem | Path>} An Effect that yields the resolved source directory path.
-       */
-      const retrieveSrcDir = () =>
-        Effect.gen(function* retrieveSrcDir() {
-          const srcDir = path.resolve("./src");
-          const srcDirExists = yield* fs.exists(srcDir);
-          if (srcDirExists) {
-            return srcDir;
-          }
-          return path.resolve("./");
-        });
-
-      // ===================================
-      // Voidhash Config
-      // ===================================
-
-      const loadVoidhashConfig = () =>
-        Effect.gen(function* loadVoidhashConfig() {
-          const possibleVoidhashConfigPaths = [
-            path.resolve("./voidhash.config.ts"),
-            path.resolve("./voidhash.config.js"),
-            path.resolve("./voidhash.config.cjs"),
-            path.resolve("./voidhash.config.mjs"),
-          ];
-
-          const existingPaths = yield* Effect.all(
-            possibleVoidhashConfigPaths.map((path) =>
-              Effect.gen(function* existingPaths() {
-                const exists = yield* fs.exists(path);
-                return { exists, path };
-              })
-            ),
-            {
-              concurrency: "unbounded",
-            }
-          );
-
-          const existingPath = existingPaths.find((path) => path.exists)?.path;
-          if (!existingPath) {
-            return yield* Effect.fail(
-              new VoidhashConfigNotFoundError({
-                message: "Voidhash config not found",
-              })
-            );
-          }
-
-          const absolutePath = path.resolve(existingPath);
-          const { unregister } = yield* safeRegister();
-          const required = require(absolutePath);
-          unregister();
-          const content = required.default ?? required;
-          return yield* Schema.decodeUnknown(VoidhashConfigSchema)(content);
-        }).pipe(
-          Effect.catchTags({
-            BadArgument: (e) =>
-              Effect.fail(
-                new FailedToLoadVoidhashConfigError({
-                  cause: e,
-                  message: "Failed to load voidhash config",
-                })
-              ),
-            FailedToLoadJsFileError: (e) =>
-              Effect.fail(
-                new FailedToLoadVoidhashConfigError({
-                  cause: e,
-                  message:
-                    "There has been an error while trying to load the voidhash config.",
-                })
-              ),
-            ParseError: () =>
-              Effect.fail(
-                new InvalidVoidhashConfigError({
-                  message:
-                    "Could not parse voidhash config. Please check your voidhash.config.(ts|js|cjs|mjs) file is valid.",
-                })
-              ),
-            SystemError: (e) =>
-              Effect.fail(
-                new FailedToLoadVoidhashConfigError({
-                  cause: e,
-                  message: "Failed to load voidhash config",
-                })
-              ),
-
-            // Effect.fail(
-            //   ValidationError.invalidValue(
-            //     HelpDoc.p(
-            //       'Could not parse voidhash config. Please check your voidhash.config.(ts|js|cjs|mjs) file is valid.'
-            //     )
-            //   )
-            // )
+        )
+      )
+    );
+
+  // ===================================
+  // Package Manager
+  // ===================================
+
+  /**
+   * Detects the package manager of the project.
+   * @param pathPrefix - The path prefix to check for the package manager.
+   * @returns The package manager.
+   */
+  const detectPackageManager = (pathPrefix = "./") =>
+    Effect.gen(function* detectPackageManager() {
+      // npm
+      const packageLockPath = path.resolve(pathPrefix, "package-lock.json");
+      const packageLockExists = yield* fs.exists(packageLockPath);
+      if (packageLockExists) {
+        return "npm";
+      }
+
+      // yarn
+      const yarnLockPath = path.resolve(pathPrefix, "yarn.lock");
+      const yarnLockExists = yield* fs.exists(yarnLockPath);
+      if (yarnLockExists) {
+        return "yarn";
+      }
+
+      // pnpm
+      const pnpmLockPath = path.resolve(pathPrefix, "pnpm-lock.yaml");
+      const pnpmLockExists = yield* fs.exists(pnpmLockPath);
+      if (pnpmLockExists) {
+        return "pnpm";
+      }
+
+      // bun
+      const bunLockPath = path.resolve(pathPrefix, "bun.lockb");
+      const bunLockExists = yield* fs.exists(bunLockPath);
+      if (bunLockExists) {
+        return "bun";
+      }
+
+      return yield* Effect.fail(
+        new NoPackageManagerFoundError({
+          message: "No package manager found in this directory.",
+        })
+      );
+    }).pipe(
+      Effect.catchTag("PlatformError", (e) =>
+        Effect.fail(
+          new FailedToDetectPackageManagerError({
+            cause: e,
+            message: "Failed to detect package manager",
+          })
+        )
+      )
+    );
+
+  // ===================================
+  // Source Directory
+  // ===================================
+
+  /**
+   * Determines the source directory path for the project.
+   *
+   * Checks if a './src' directory exists in the current working directory.
+   * If it exists, returns the absolute path to './src'.
+   * Otherwise, returns the absolute path to the current directory ('./').
+   *
+   * @returns {Effect.Effect<string, never, FileSystem | Path>} An Effect that yields the resolved source directory path.
+   */
+  const retrieveSrcDir = () =>
+    Effect.gen(function* retrieveSrcDir() {
+      const srcDir = path.resolve("./src");
+      const srcDirExists = yield* fs.exists(srcDir);
+      if (srcDirExists) {
+        return srcDir;
+      }
+      return path.resolve("./");
+    });
+
+  // ===================================
+  // Voidhash Config
+  // ===================================
+
+  const loadVoidhashConfig = () =>
+    Effect.gen(function* loadVoidhashConfig() {
+      const possibleVoidhashConfigPaths = [
+        path.resolve("./voidhash.config.ts"),
+        path.resolve("./voidhash.config.js"),
+        path.resolve("./voidhash.config.cjs"),
+        path.resolve("./voidhash.config.mjs"),
+      ];
+
+      const existingPaths = yield* Effect.all(
+        possibleVoidhashConfigPaths.map((path) =>
+          Effect.gen(function* existingPaths() {
+            const exists = yield* fs.exists(path);
+            return { exists, path };
+          })
+        ),
+        {
+          concurrency: "unbounded",
+        }
+      );
+
+      const existingPath = existingPaths.find((path) => path.exists)?.path;
+      if (!existingPath) {
+        return yield* Effect.fail(
+          new VoidhashConfigNotFoundError({
+            message: "Voidhash config not found",
           })
         );
-
-      const deleteVoidhashConfig = () =>
-        Effect.gen(function* deleteVoidhashConfig() {
-          const voidhashConfigPath = path.resolve("./voidhash.config.ts");
-          yield* fs.remove(voidhashConfigPath);
-        });
-
-      return {
-        deleteVoidhashConfig,
-        detectMonorepoRootPath,
-        detectPackageManager,
-        detectSrcLanguage,
-        loadPackageJson,
-        loadVoidhashConfig,
-        retrieveSrcDir,
-      } as const;
-    }),
-  }
-) {}
+      }
+
+      const absolutePath = path.resolve(existingPath);
+      const { unregister } = yield* safeRegister();
+      const required = require(absolutePath);
+      unregister();
+      const content = required.default ?? required;
+      return yield* Schema.decodeUnknownEffect(VoidhashConfigSchema)(content);
+    }).pipe(
+      Effect.catchTags({
+        FailedToLoadJsFileError: (e) =>
+          Effect.fail(
+            new FailedToLoadVoidhashConfigError({
+              cause: e,
+              message:
+                "There has been an error while trying to load the voidhash config.",
+            })
+          ),
+        PlatformError: (e) =>
+          Effect.fail(
+            new FailedToLoadVoidhashConfigError({
+              cause: e,
+              message: "Failed to load voidhash config",
+            })
+          ),
+        SchemaError: () =>
+          Effect.fail(
+            new InvalidVoidhashConfigError({
+              message:
+                "Could not parse voidhash config. Please check your voidhash.config.(ts|js|cjs|mjs) file is valid.",
+            })
+          ),
+      })
+    );
+
+  const deleteVoidhashConfig = () =>
+    Effect.gen(function* deleteVoidhashConfig() {
+      const voidhashConfigPath = path.resolve("./voidhash.config.ts");
+      yield* fs.remove(voidhashConfigPath);
+    });
+
+  return {
+    deleteVoidhashConfig,
+    detectMonorepoRootPath,
+    detectPackageManager,
+    detectSrcLanguage,
+    loadPackageJson,
+    loadVoidhashConfig,
+    retrieveSrcDir,
+  } as const;
+});
+
+type SourceCodeShape = Effect.Success<typeof make>;
+
+export class SourceCode extends ServiceMap.Service<SourceCode, SourceCodeShape>()(
+  "voidhash-cli/SourceCode"
+) {
+  static Default = Layer.effect(SourceCode, make)
+}
diff --git a/apps/cli/src/services/auth/get-session.ts b/apps/cli/src/services/auth/get-session.ts
index 698fac6c4..03943b09f 100644
--- a/apps/cli/src/services/auth/get-session.ts
+++ b/apps/cli/src/services/auth/get-session.ts
@@ -17,7 +17,7 @@ export const getSession = Effect.gen(function* getSession() {
     },
     (effect) =>
       effect.pipe(
-        Effect.catchAll((error) => {
+        Effect.catch((error) => {
           if (error._tag === "NotAuthenticatedError") {
             return Effect.fail(
               new OrganizationServiceError({
diff --git a/apps/cli/src/services/auth/index.ts b/apps/cli/src/services/auth/index.ts
index 6a05e10fe..492774624 100644
--- a/apps/cli/src/services/auth/index.ts
+++ b/apps/cli/src/services/auth/index.ts
@@ -1,11 +1,13 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
-export class AuthService extends Effect.Service<AuthService>()(
-  "voidhash-cli/services/AuthService",
-  {
-    dependencies: [],
-    scoped: Effect.gen(function* scoped() {
-      return {} as const;
-    }),
-  }
-) {}
+const make = Effect.gen(function* scoped() {
+  return {} as const;
+});
+
+type AuthServiceShape = Effect.Success<typeof make>;
+
+export class AuthService extends ServiceMap.Service<AuthService, AuthServiceShape>()(
+  "voidhash-cli/services/AuthService"
+) {
+  static Default = Layer.effect(AuthService, make)
+}
diff --git a/apps/cli/src/services/auth/utils/better-auth.ts b/apps/cli/src/services/auth/utils/better-auth.ts
index c39235e17..a1e63da87 100644
--- a/apps/cli/src/services/auth/utils/better-auth.ts
+++ b/apps/cli/src/services/auth/utils/better-auth.ts
@@ -1,6 +1,6 @@
 import { createAuthClient } from "better-auth/client";
 import { apiKeyClient } from "better-auth/client/plugins";
-import { Data, Effect } from "effect";
+import { Data, Effect, Layer, ServiceMap } from "effect";
 
 import { CliConfig } from "../../../domain/services/cli-config";
 
@@ -11,40 +11,42 @@ export class BetterAuthClientError extends Data.TaggedError(
   readonly message: string;
 }> {}
 
-export class BetterAuthClient extends Effect.Service<BetterAuthClient>()(
-  "app/BetterAuthClient",
-  {
-    dependencies: [],
-    effect: Effect.gen(function* effect() {
-      const cliConfig = yield* CliConfig;
-      const config = yield* cliConfig.readConfig();
-      const authClient: ReturnType<typeof createAuthClient> = createAuthClient({
-        basePath: "/auth/api/auth",
-        baseURL: config.web_url ?? "https://voidhash.com",
-        plugins: [apiKeyClient()],
-      });
+const make = Effect.gen(function* effect() {
+  const cliConfig = yield* CliConfig;
+  const config = yield* cliConfig.readConfig();
+  const authClient: ReturnType<typeof createAuthClient> = createAuthClient({
+    basePath: "/auth/api/auth",
+    baseURL: config.web_url ?? "https://voidhash.com",
+    plugins: [apiKeyClient()],
+  });
 
-      return {
-        use: <D, E>(
-          fn: (
-            client: typeof authClient
-          ) => Promise<{ error: E; data?: null } | { error?: null; data: D }>
-        ) =>
-          Effect.tryPromise({
-            catch: (error) =>
-              new BetterAuthClientError({
-                cause: error,
-                message: "Failed to use better-auth client",
-              }),
-            try: async () => {
-              const res = await fn(authClient);
-              if (res.error) {
-                throw res.error;
-              }
-              return res.data;
-            },
+  return {
+    use: <D, E>(
+      fn: (
+        client: typeof authClient
+      ) => Promise<{ error: E; data?: null } | { error?: null; data: D }>
+    ) =>
+      Effect.tryPromise({
+        catch: (error) =>
+          new BetterAuthClientError({
+            cause: error,
+            message: "Failed to use better-auth client",
           }),
-      };
-    }),
-  }
-) {}
+        try: async () => {
+          const res = await fn(authClient);
+          if (res.error) {
+            throw res.error;
+          }
+          return res.data;
+        },
+      }),
+  };
+});
+
+type BetterAuthClientShape = Effect.Success<typeof make>;
+
+export class BetterAuthClient extends ServiceMap.Service<BetterAuthClient, BetterAuthClientShape>()(
+  "app/BetterAuthClient"
+) {
+  static Default = Layer.effect(BetterAuthClient, make)
+}
diff --git a/apps/cli/src/services/cli-config/index.ts b/apps/cli/src/services/cli-config/index.ts
index d5befac8b..b07018236 100644
--- a/apps/cli/src/services/cli-config/index.ts
+++ b/apps/cli/src/services/cli-config/index.ts
@@ -1,11 +1,13 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
-export class CliConfigService extends Effect.Service<CliConfigService>()(
-  "voidhash-cli/services/CliConfigService",
-  {
-    dependencies: [],
-    scoped: Effect.gen(function* scoped() {
-      return {} as const;
-    }),
-  }
-) {}
+const make = Effect.gen(function* scoped() {
+  return {} as const;
+});
+
+type CliConfigServiceShape = Effect.Success<typeof make>;
+
+export class CliConfigService extends ServiceMap.Service<CliConfigService, CliConfigServiceShape>()(
+  "voidhash-cli/services/CliConfigService"
+) {
+  static Default = Layer.effect(CliConfigService, make)
+}
diff --git a/apps/cli/src/services/organization/create-organization.ts b/apps/cli/src/services/organization/create-organization.ts
index acac1d67c..7bf2ed355 100644
--- a/apps/cli/src/services/organization/create-organization.ts
+++ b/apps/cli/src/services/organization/create-organization.ts
@@ -17,7 +17,7 @@ export const createOrganization = Effect.gen(function* createOrganization() {
     },
     (effect) =>
       effect.pipe(
-        Effect.catchAll((error) => {
+        Effect.catch((error) => {
           if (error._tag === "NotAuthenticatedError") {
             return Effect.fail(
               new OrganizationServiceError({
diff --git a/apps/cli/src/services/organization/errors.ts b/apps/cli/src/services/organization/errors.ts
index f14707d14..ad49c43c8 100644
--- a/apps/cli/src/services/organization/errors.ts
+++ b/apps/cli/src/services/organization/errors.ts
@@ -1,6 +1,6 @@
 import { Schema } from "effect";
 
-export class OrganizationServiceError extends Schema.TaggedError<OrganizationServiceError>()(
+export class OrganizationServiceError extends Schema.TaggedErrorClass<OrganizationServiceError>()(
   "OrganizationServiceError",
   {
     message: Schema.String,
diff --git a/apps/cli/src/services/organization/index.ts b/apps/cli/src/services/organization/index.ts
index a1aa2616a..341bb0221 100644
--- a/apps/cli/src/services/organization/index.ts
+++ b/apps/cli/src/services/organization/index.ts
@@ -1,11 +1,13 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
-export class OrganizationService extends Effect.Service<OrganizationService>()(
-  "voidhash-cli/services/OrganizationService",
-  {
-    dependencies: [],
-    scoped: Effect.gen(function* scoped() {
-      return {} as const;
-    }),
-  }
-) {}
+const make = Effect.gen(function* scoped() {
+  return {} as const;
+});
+
+type OrganizationServiceShape = Effect.Success<typeof make>;
+
+export class OrganizationService extends ServiceMap.Service<OrganizationService, OrganizationServiceShape>()(
+  "voidhash-cli/services/OrganizationService"
+) {
+  static Default = Layer.effect(OrganizationService, make)
+}
diff --git a/apps/cli/src/services/organization/list-organizations.ts b/apps/cli/src/services/organization/list-organizations.ts
index 17889b531..76be481c5 100644
--- a/apps/cli/src/services/organization/list-organizations.ts
+++ b/apps/cli/src/services/organization/list-organizations.ts
@@ -17,7 +17,7 @@ export const listOrganizations = Effect.gen(function* listOrganizations() {
     },
     (effect) =>
       effect.pipe(
-        Effect.catchAll((error) => {
+        Effect.catch((error) => {
           if (error._tag === "NotAuthenticatedError") {
             return Effect.fail(
               new OrganizationServiceError({
diff --git a/apps/cli/src/services/project/index.ts b/apps/cli/src/services/project/index.ts
index 0ffce0a93..5891ab42a 100644
--- a/apps/cli/src/services/project/index.ts
+++ b/apps/cli/src/services/project/index.ts
@@ -1,11 +1,13 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
-export class ProjectService extends Effect.Service<ProjectService>()(
-  "voidhash-cli/services/ProjectService",
-  {
-    dependencies: [],
-    scoped: Effect.gen(function* scoped() {
-      return {} as const;
-    }),
-  }
-) {}
+const make = Effect.gen(function* scoped() {
+  return {} as const;
+});
+
+type ProjectServiceShape = Effect.Success<typeof make>;
+
+export class ProjectService extends ServiceMap.Service<ProjectService, ProjectServiceShape>()(
+  "voidhash-cli/services/ProjectService"
+) {
+  static Default = Layer.effect(ProjectService, make)
+}
diff --git a/apps/cli/src/services/repository/index.ts b/apps/cli/src/services/repository/index.ts
index 703c7e414..dad5c0fcf 100644
--- a/apps/cli/src/services/repository/index.ts
+++ b/apps/cli/src/services/repository/index.ts
@@ -1,11 +1,13 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
-export class RepositoryService extends Effect.Service<RepositoryService>()(
-  "voidhash-cli/services/RepositoryService",
-  {
-    dependencies: [],
-    scoped: Effect.gen(function* scoped() {
-      return {} as const;
-    }),
-  }
-) {}
+const make = Effect.gen(function* scoped() {
+  return {} as const;
+});
+
+type RepositoryServiceShape = Effect.Success<typeof make>;
+
+export class RepositoryService extends ServiceMap.Service<RepositoryService, RepositoryServiceShape>()(
+  "voidhash-cli/services/RepositoryService"
+) {
+  static Default = Layer.effect(RepositoryService, make)
+}
diff --git a/apps/cli/src/utils/api-client.ts b/apps/cli/src/utils/api-client.ts
index ede8914be..e5a4b5f73 100644
--- a/apps/cli/src/utils/api-client.ts
+++ b/apps/cli/src/utils/api-client.ts
@@ -1,43 +1,48 @@
-import { FetchHttpClient, HttpApiClient, HttpClient } from "@effect/platform";
 import { VoidhashV1Api } from "@voidhash/api-spec";
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
+import { FetchHttpClient, HttpClient } from "effect/unstable/http";
+import { HttpApiClient } from "effect/unstable/httpapi";
 
 import { CliConfig } from "../domain/services/cli-config";
 
-export class ApiClient extends Effect.Service<ApiClient>()(
-  "voidhash-cli/ApiClient",
-  {
-    dependencies: [FetchHttpClient.layer, CliConfig.Default],
-    effect: Effect.gen(function* effect() {
-      yield* Effect.logDebug("Initializing API client");
-      const cliConfig = yield* CliConfig;
-      return yield* HttpApiClient.make(VoidhashV1Api, {
-        baseUrl: "http://localhost:5001",
-        transformClient: (client) =>
-          client.pipe(
-            HttpClient.mapRequestEffect((request) =>
-              Effect.gen(function* transformClient() {
-                const config = yield* cliConfig.readConfig().pipe(
-                  Effect.catchAll(() =>
-                    Effect.dieMessage("Failed to read config")
-                  )
-                );
+const make = Effect.gen(function* effect() {
+  yield* Effect.logDebug("Initializing API client");
+  const cliConfig = yield* CliConfig;
+  return yield* HttpApiClient.make(VoidhashV1Api, {
+    baseUrl: "http://localhost:5001",
+    transformClient: (client) =>
+      client.pipe(
+        HttpClient.mapRequestEffect((request) =>
+          Effect.gen(function* transformClient() {
+            const config = yield* cliConfig.readConfig().pipe(
+              Effect.catch(() =>
+                Effect.die("Failed to read config")
+              )
+            );
 
-                yield* Effect.logDebug(
-                  `API Request: ${request.method} ${request.url}`
-                );
+            yield* Effect.logDebug(
+              `API Request: ${request.method} ${request.url}`
+            );
 
-                return {
-                  ...request,
-                  headers: {
-                    ...request.headers,
-                    ...(config.api_key ? { "x-api-key": config.api_key } : {}),
-                  },
-                };
-              }).pipe(Effect.withSpan("ApiClient.transformRequest"))
-            )
-          ),
-      });
-    }).pipe(Effect.withSpan("ApiClient.make")),
-  }
-) {}
+            return {
+              ...request,
+              headers: {
+                ...request.headers,
+                ...(config.api_key ? { "x-api-key": config.api_key } : {}),
+              },
+            };
+          }).pipe(Effect.withSpan("ApiClient.transformRequest"))
+        )
+      ),
+  });
+}).pipe(Effect.withSpan("ApiClient.make"));
+
+type ApiClientShape = Effect.Success<typeof make>;
+
+export class ApiClient extends ServiceMap.Service<ApiClient, ApiClientShape>()(
+  "voidhash-cli/ApiClient"
+) {
+  static Default = Layer.effect(ApiClient, make).pipe(
+    Layer.provide(Layer.mergeAll(FetchHttpClient.layer, CliConfig.Default))
+  )
+}
diff --git a/apps/cli/src/utils/error-formatter.ts b/apps/cli/src/utils/error-formatter.ts
index d7eb3bb8c..10b754089 100644
--- a/apps/cli/src/utils/error-formatter.ts
+++ b/apps/cli/src/utils/error-formatter.ts
@@ -1,8 +1,7 @@
-import { HelpDoc, ValidationError } from "@effect/cli";
-import * as Span from "@effect/cli/HelpDoc/Span";
-import { Cause, Chunk, Console, Effect } from "effect";
+import { CliError } from "effect/unstable/cli";
+import { Cause, Console, Effect } from "effect";
 
-const ValidationErrorTypeId = Symbol.for("@effect/cli/ValidationError");
+const CliErrorTypeId = Symbol.for("~effect/cli/CliError");
 
 /**
  * Check if debug mode is enabled via --debug flag
@@ -11,13 +10,7 @@ export const isDebugMode = (): boolean =>
   process.argv.includes("--debug") || process.argv.includes("-d");
 
 /**
- * Creates a nicely formatted error HelpDoc with red styling.
- */
-export const errorDoc = (message: string): HelpDoc.HelpDoc =>
-  HelpDoc.p(Span.error(message));
-
-/**
- * Creates a ValidationError with a nicely formatted red error message.
+ * Creates a CliError.UserError with a message.
  * Use this in command error handlers to show user-friendly errors.
  *
  * @example
@@ -27,21 +20,21 @@ export const errorDoc = (message: string): HelpDoc.HelpDoc =>
  * )
  * ```
  */
-export const userError = (message: string): ValidationError.ValidationError =>
-  ValidationError.invalidValue(errorDoc(message));
+export const userError = (message: string): CliError.UserError =>
+  new CliError.UserError({ cause: new Error(message) });
 
 /**
- * Check if an error is a ValidationError from @effect/cli
+ * Check if an error is a CliError from @effect/cli
  */
-const isValidationError = (
+const isCliError = (
   error: unknown
-): error is ValidationError.ValidationError =>
-  typeof error === "object" && error !== null && ValidationErrorTypeId in error;
+): error is CliError.CliError =>
+  typeof error === "object" && error !== null && CliErrorTypeId in error;
 
 /**
- * Wraps a CLI effect to properly render ValidationErrors.
+ * Wraps a CLI effect to properly render CliErrors.
  *
- * @effect/cli's Command.run doesn't render ValidationErrors that bubble up
+ * @effect/cli's Command.run doesn't render CliErrors that bubble up
  * from command handlers - it only handles them during parsing.
  * This wrapper catches those errors and prints them nicely, then exits with code 1.
  *
@@ -49,54 +42,56 @@ const isValidationError = (
  */
 export const withValidationErrorHandler = <A, E, R>(
   effect: Effect.Effect<A, E, R>
-): Effect.Effect<A | void, Exclude<E, ValidationError.ValidationError>, R> =>
+): Effect.Effect<A | void, Exclude<E, CliError.CliError>, R> =>
   effect.pipe(
-    Effect.catchAllCause((cause) => {
-      const failures = Cause.failures(cause);
+    Effect.catchCause((cause) => {
+      const failures = cause.reasons
+        .filter((r): r is Extract<typeof r, { _tag: "Fail" }> => r._tag === "Fail")
+        .map((r) => r.error);
 
       for (const failure of failures) {
-        if (isValidationError(failure)) {
+        if (isCliError(failure)) {
           // In debug mode, show the full cause chain
           if (isDebugMode()) {
             return Console.error("\n--- Debug Trace ---").pipe(
               Effect.andThen(
-                Console.error(Cause.pretty(cause, { renderErrorCause: true }))
+                Console.error(Cause.pretty(cause))
               ),
               Effect.andThen(Console.error("--- End Debug Trace ---\n")),
-              Effect.andThen(Console.error(HelpDoc.toAnsiText(failure.error))),
+              Effect.andThen(Console.error(failure.message)),
               Effect.andThen(Effect.sync(() => process.exit(1)))
             );
           }
 
           // Normal mode: just show the user-friendly message
-          return Console.error(HelpDoc.toAnsiText(failure.error)).pipe(
+          return Console.error(failure.message).pipe(
             Effect.andThen(Effect.sync(() => process.exit(1)))
           );
         }
       }
 
-      // For non-ValidationError failures, show full cause in debug mode
-      if (isDebugMode() && !Cause.isEmpty(cause)) {
+      // For non-CliError failures, show full cause in debug mode
+      if (isDebugMode() && cause.reasons.length > 0) {
         return Console.error("\n--- Debug Trace ---").pipe(
           Effect.andThen(
-            Console.error(Cause.pretty(cause, { renderErrorCause: true }))
+            Console.error(Cause.pretty(cause))
           ),
           Effect.andThen(Console.error("--- End Debug Trace ---\n")),
           Effect.andThen(Effect.sync(() => process.exit(1)))
         );
       }
 
-      // Re-fail with non-ValidationError
-      const firstFailure = Chunk.head(failures);
-      if (firstFailure._tag === "Some") {
+      // Re-fail with non-CliError
+      const firstFailure = failures[0];
+      if (firstFailure !== undefined) {
         return Effect.fail(
-          firstFailure.value as Exclude<E, ValidationError.ValidationError>
+          firstFailure as Exclude<E, CliError.CliError>
         );
       }
 
       // Handle defects
       return Effect.failCause(
-        cause as Cause.Cause<Exclude<E, ValidationError.ValidationError>>
+        cause as Cause.Cause<Exclude<E, CliError.CliError>>
       );
     })
   );
diff --git a/apps/cli/src/utils/fs.ts b/apps/cli/src/utils/fs.ts
index e5aa2671c..19ba47b27 100644
--- a/apps/cli/src/utils/fs.ts
+++ b/apps/cli/src/utils/fs.ts
@@ -1,6 +1,5 @@
-import { Prompt } from "@effect/cli";
-import { FileSystem } from "@effect/platform";
-import { Data, Effect } from "effect";
+import { Prompt } from "effect/unstable/cli";
+import { Data, Effect, FileSystem } from "effect";
 
 export class FileExistsError extends Data.TaggedError("FileExistsError")<{
   readonly message: string;
diff --git a/apps/cli/src/utils/js-loading/js-file-loading.ts b/apps/cli/src/utils/js-loading/js-file-loading.ts
index 8f7b3f7f3..92ef1d028 100644
--- a/apps/cli/src/utils/js-loading/js-file-loading.ts
+++ b/apps/cli/src/utils/js-loading/js-file-loading.ts
@@ -57,7 +57,7 @@ export const safeRegister = () =>
           loader: "ts",
         }),
     }).pipe(
-      Effect.orElse(() =>
+      Effect.catch(() =>
         Effect.succeed({
           // biome-ignore lint/suspicious/noEmptyBlockStatements: it is on purpose an empty function. It is here instead of try-catch due to tsx.
           unregister(): void {},
diff --git a/apps/cli/src/utils/organizations/create-organization.ts b/apps/cli/src/utils/organizations/create-organization.ts
index 78a3f0d61..548d812d6 100644
--- a/apps/cli/src/utils/organizations/create-organization.ts
+++ b/apps/cli/src/utils/organizations/create-organization.ts
@@ -1,4 +1,4 @@
-import { Prompt } from "@effect/cli";
+import { Prompt } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { NoSignedInUserError } from "../../domain/errors/auth";
diff --git a/apps/cli/src/utils/organizations/select-organization.ts b/apps/cli/src/utils/organizations/select-organization.ts
index 8ff72fcc8..ffe4c4be5 100644
--- a/apps/cli/src/utils/organizations/select-organization.ts
+++ b/apps/cli/src/utils/organizations/select-organization.ts
@@ -1,4 +1,4 @@
-import { Prompt } from "@effect/cli";
+import { Prompt } from "effect/unstable/cli";
 import { Effect } from "effect";
 
 import { createOrganization } from "./create-organization";
@@ -30,7 +30,7 @@ export const selectOrganization = (
     }
     const organization = organizations.find((t) => t.slug === organizationSlug);
     if (!organization) {
-      return yield* Effect.dieMessage(
+      return yield* Effect.die(
         "Organization not found even though it was selected and should exist."
       );
     }
diff --git a/apps/cli/src/utils/projects/create-project.ts b/apps/cli/src/utils/projects/create-project.ts
index c711b3369..78d4cce19 100644
--- a/apps/cli/src/utils/projects/create-project.ts
+++ b/apps/cli/src/utils/projects/create-project.ts
@@ -1,4 +1,4 @@
-import { Prompt } from "@effect/cli";
+import { Prompt } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { NoSignedInUserError } from "../../domain/errors/auth";
@@ -22,7 +22,7 @@ export const createProject = (input: { organizationId: string }) =>
 
     const config = yield* cliConfig
       .readConfig()
-      .pipe(Effect.catchAll(() => Effect.dieMessage("Failed to read config")));
+      .pipe(Effect.catch(() => Effect.die("Failed to read config")));
 
     // If the config file is not found or the api key is not set, we consider the user to be signed out
     const apiKey = config.api_key;
diff --git a/apps/cli/src/utils/projects/select-project.ts b/apps/cli/src/utils/projects/select-project.ts
index 9892cf936..3c6150b01 100644
--- a/apps/cli/src/utils/projects/select-project.ts
+++ b/apps/cli/src/utils/projects/select-project.ts
@@ -1,4 +1,4 @@
-import { Prompt } from "@effect/cli";
+import { Prompt } from "effect/unstable/cli";
 import { Effect } from "effect";
 
 import { createProject } from "./create-project";
@@ -29,7 +29,7 @@ export const selectProject = (
 
     const project = projects.find((p) => p.slug === projectSlug);
     if (!project) {
-      return yield* Effect.dieMessage(
+      return yield* Effect.die(
         "Project not found even though it was selected and should exist."
       );
     }
diff --git a/apps/cli/src/utils/schema/local-schema-loader.ts b/apps/cli/src/utils/schema/local-schema-loader.ts
index 058fa2d3f..da5c6a803 100644
--- a/apps/cli/src/utils/schema/local-schema-loader.ts
+++ b/apps/cli/src/utils/schema/local-schema-loader.ts
@@ -1,6 +1,5 @@
-import { FileSystem, Path } from "@effect/platform";
 import Module from "node:module";
-import { Effect } from "effect";
+import { Effect, FileSystem, Path } from "effect";
 
 import {
   LocalSchemaNotFoundError,
diff --git a/apps/cli/src/utils/source-code-details.ts b/apps/cli/src/utils/source-code-details.ts
index ecca6ae9d..d4b19e195 100644
--- a/apps/cli/src/utils/source-code-details.ts
+++ b/apps/cli/src/utils/source-code-details.ts
@@ -1,4 +1,4 @@
-import { Context, Effect } from "effect";
+import { Effect, ServiceMap } from "effect";
 
 import type { PackageJsonSchema } from "../domain/schema/package-json";
 import { SourceCode } from "../domain/services/source-code";
@@ -14,10 +14,7 @@ export interface SourceCodeDetailsType {
   packageJson: typeof PackageJsonSchema.Type;
 }
 
-export class SourceCodeDetails extends Context.Tag("app/SourceCodeDetails")<
-  SourceCodeDetails,
-  SourceCodeDetailsType
->() {
+export class SourceCodeDetails extends ServiceMap.Service<SourceCodeDetails, SourceCodeDetailsType>()("app/SourceCodeDetails") {
   static readonly provide =
     (details: SourceCodeDetailsType) =>
     <A, E, R>(effect: Effect.Effect<A, E, R>) =>
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index 61a014bec..aabc40301 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -84,7 +84,6 @@
 		"ultracite": "5.0.39"
 	},
 	"peerDependencies": {
-		"@effect/platform": "catalog:",
 		"@react-native-async-storage/async-storage": "^1.24.0 || ^2.0.0",
 		"effect": "catalog:",
 		"expo": "*",
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 419b41715..40de0ed71 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -365,7 +365,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
       for (const transaction of observedTransactionsByKey.values()) {
         yield* processObservedTransaction(transaction).pipe(
-          Effect.catchAll((error) =>
+          Effect.catch((error) =>
             Effect.logWarning("Failed to process observed transaction", {
               error,
               transactionId: transaction.transactionId,
@@ -564,10 +564,10 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
             mapQueuedAnalyticsEventToIngestEvent(event, standardizedProperties, analyticsSessionId)
           );
 
-          const sendResult = yield* Effect.either(sendAnalyticsEventsImpl(ingestBatch));
-          if (sendResult._tag === "Left") {
+          const sendResult = yield* Effect.exit(sendAnalyticsEventsImpl(ingestBatch));
+          if (sendResult._tag === "Failure") {
             analyticsQueue.unshift(...queuedBatch);
-            yield* Effect.fail(sendResult.left);
+            yield* Effect.failCause(sendResult.cause);
           }
         }
       }),
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index db1293d0d..a3f9c6672 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -1,5 +1,5 @@
-import { FetchHttpClient } from "@effect/platform";
 import { Cause, Effect, Exit, Layer, ManagedRuntime, pipe } from "effect";
+import { FetchHttpClient } from "effect/unstable/http";
 
 import { VoidhashEffectClient } from "./client-effect";
 import { AsyncStorageCacheAdapter } from "./core/caching/async-storage-cache";
diff --git a/libraries/react-native/src/core/caching/cache-adapter.ts b/libraries/react-native/src/core/caching/cache-adapter.ts
index 64f6502a7..3d4fafde5 100644
--- a/libraries/react-native/src/core/caching/cache-adapter.ts
+++ b/libraries/react-native/src/core/caching/cache-adapter.ts
@@ -1,10 +1,7 @@
-import { Context, type Effect } from "effect";
+import { ServiceMap, type Effect } from "effect";
 
-export class CacheAdapter extends Context.Tag("rn-voidhash/CacheAdapter")<
-  CacheAdapter,
-  {
+export class CacheAdapter extends ServiceMap.Service<CacheAdapter, {
     readonly get: (key: string) => Effect.Effect<string | null>;
     readonly set: (key: string, value: string) => Effect.Effect<void>;
     readonly delete: (key: string) => Effect.Effect<void>;
-  }
->() {}
+  }>()("rn-voidhash/CacheAdapter") {}
diff --git a/libraries/react-native/src/core/caching/cache-manager.ts b/libraries/react-native/src/core/caching/cache-manager.ts
index d917eb398..66e6a2073 100644
--- a/libraries/react-native/src/core/caching/cache-manager.ts
+++ b/libraries/react-native/src/core/caching/cache-manager.ts
@@ -1,4 +1,4 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
 import { CacheAdapter } from "./cache-adapter";
 
@@ -15,96 +15,95 @@ type CacheHit<T> = CacheEnvelope<T> & {
   isStale: boolean;
   isExpired: boolean;
 };
-export class CacheManager extends Effect.Service<CacheManager>()(
-  "rn-voidhash/CacheManager",
-  {
-    dependencies: [],
-    effect: Effect.gen(function* effect() {
-      const cache = yield* CacheAdapter;
-      const get = <T>(key: string) =>
-        Effect.gen(function* get() {
-          const cachedValue = yield* cache.get(key);
-          if (cachedValue) {
-            const cacheHit = JSON.parse(cachedValue) as CacheEnvelope<T>;
 
-            const isExpired = cacheHit.expiresAt
-              ? cacheHit.expiresAt < Date.now()
-              : false;
-            const isStale = cacheHit.staleAt
-              ? cacheHit.staleAt < Date.now()
-              : false;
+const make = Effect.gen(function* effect() {
+  const cache = yield* CacheAdapter;
+  const get = <T>(key: string) =>
+    Effect.gen(function* get() {
+      const cachedValue = yield* cache.get(key);
+      if (cachedValue) {
+        const cacheHit = JSON.parse(cachedValue) as CacheEnvelope<T>;
 
-            if (isExpired) {
-              yield* deleteValue(key);
-              return null;
-            }
+        const isExpired = cacheHit.expiresAt
+          ? cacheHit.expiresAt < Date.now()
+          : false;
+        const isStale = cacheHit.staleAt
+          ? cacheHit.staleAt < Date.now()
+          : false;
 
-            return {
-              ...cacheHit,
-              isExpired,
-              isStale,
-            } satisfies CacheHit<T>;
-          }
+        if (isExpired) {
+          yield* deleteValue(key);
           return null;
-        });
+        }
 
-      const setValue = <T>(
-        key: string,
-        value: T,
-        options?: { ttl?: number; staleTime?: number }
-      ) =>
-        Effect.all([
-          cache.set(
-            key,
-            JSON.stringify({
-              createdAt: Date.now(),
-              expiresAt: options?.ttl ? Date.now() + options.ttl : null,
-              staleAt: options?.staleTime
-                ? Date.now() + options.staleTime
-                : null,
-              value,
-            } satisfies CacheEnvelope<T>)
-          ),
-          storeCacheKey(key),
-        ]);
+        return {
+          ...cacheHit,
+          isExpired,
+          isStale,
+        } satisfies CacheHit<T>;
+      }
+      return null;
+    });
 
-      const deleteValue = (key: string) => cache.delete(key);
+  const setValue = <T>(
+    key: string,
+    value: T,
+    options?: { ttl?: number; staleTime?: number }
+  ) =>
+    Effect.all([
+      cache.set(
+        key,
+        JSON.stringify({
+          createdAt: Date.now(),
+          expiresAt: options?.ttl ? Date.now() + options.ttl : null,
+          staleAt: options?.staleTime
+            ? Date.now() + options.staleTime
+            : null,
+          value,
+        } satisfies CacheEnvelope<T>)
+      ),
+      storeCacheKey(key),
+    ]);
 
-      const clear = () =>
-        Effect.gen(function* clear() {
-          const cacheKeys = yield* getCacheKeys();
-          yield* Effect.all(cacheKeys.map((key) => cache.delete(key)));
-          yield* cache.delete(CACHE_KEYS_KEY);
-        });
+  const deleteValue = (key: string) => cache.delete(key);
 
-      const getCacheKeys = () =>
-        Effect.gen(function* getCacheKeys() {
-          const cacheKeys = yield* cache.get(CACHE_KEYS_KEY);
-          if (cacheKeys) {
-            return JSON.parse(cacheKeys) as string[];
-          }
-          return [];
-        });
+  const clear = () =>
+    Effect.gen(function* clear() {
+      const cacheKeys = yield* getCacheKeys();
+      yield* Effect.all(cacheKeys.map((key) => cache.delete(key)));
+      yield* cache.delete(CACHE_KEYS_KEY);
+    });
 
-      const storeCacheKey = (key: string) =>
-        Effect.gen(function* storeCacheKey() {
-          const cacheKeys = yield* cache.get(CACHE_KEYS_KEY);
-          if (cacheKeys) {
-            const cacheKeysArray = JSON.parse(cacheKeys) as string[];
-            cacheKeysArray.push(key);
-            yield* cache.set(CACHE_KEYS_KEY, JSON.stringify(cacheKeysArray));
-          } else {
-            yield* cache.set(CACHE_KEYS_KEY, JSON.stringify([key]));
-          }
-        });
+  const getCacheKeys = () =>
+    Effect.gen(function* getCacheKeys() {
+      const cacheKeys = yield* cache.get(CACHE_KEYS_KEY);
+      if (cacheKeys) {
+        return JSON.parse(cacheKeys) as string[];
+      }
+      return [];
+    });
 
-      return {
-        clear,
-        delete: deleteValue,
-        get,
-        getCacheKeys,
-        set: setValue,
-      } as const;
-    }),
-  }
-) {}
+  const storeCacheKey = (key: string) =>
+    Effect.gen(function* storeCacheKey() {
+      const cacheKeys = yield* cache.get(CACHE_KEYS_KEY);
+      if (cacheKeys) {
+        const cacheKeysArray = JSON.parse(cacheKeys) as string[];
+        cacheKeysArray.push(key);
+        yield* cache.set(CACHE_KEYS_KEY, JSON.stringify(cacheKeysArray));
+      } else {
+        yield* cache.set(CACHE_KEYS_KEY, JSON.stringify([key]));
+      }
+    });
+
+  return {
+    clear,
+    delete: deleteValue,
+    get,
+    getCacheKeys,
+    set: setValue,
+  } as const;
+});
+
+export class CacheManager extends ServiceMap.Service<CacheManager, Effect.Success<typeof make>>()("rn-voidhash/CacheManager") {
+  static Default = Layer.effect(CacheManager, make)
+}
diff --git a/libraries/react-native/src/core/event-bus.ts b/libraries/react-native/src/core/event-bus.ts
index ea19b3b69..0e4f12686 100644
--- a/libraries/react-native/src/core/event-bus.ts
+++ b/libraries/react-native/src/core/event-bus.ts
@@ -1,5 +1,5 @@
 import type { SdkCustomer } from "@voidhash/api-spec";
-import { Context } from "effect";
+import { ServiceMap } from "effect";
 
 export interface CustomerFetchedEvent {
   type: "customer-fetched";
@@ -68,6 +68,4 @@ export class EventBus {
   }
 }
 
-export class EventBusProvider extends Context.Tag(
-  "rn-voidhash/EventBusProvider"
-)<EventBusProvider, EventBus>() {}
+export class EventBusProvider extends ServiceMap.Service<EventBusProvider, EventBus>()("rn-voidhash/EventBusProvider") {}
diff --git a/libraries/react-native/src/core/identity/customer-attribute-manager.ts b/libraries/react-native/src/core/identity/customer-attribute-manager.ts
index 08f22dde9..2f90b73c4 100644
--- a/libraries/react-native/src/core/identity/customer-attribute-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-attribute-manager.ts
@@ -1,4 +1,4 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
 import { ApiClient } from "../networking/api-client";
@@ -9,61 +9,61 @@ interface CustomerAttributes {
   name?: string;
 }
 
-export class CustomerAttributeManager extends Effect.Service<CustomerAttributeManager>()(
-  "rn-voidhash/CustomerAttributeManager",
-  {
-    dependencies: [CacheManager.Default],
-    effect: Effect.gen(function* effect() {
-      const cacheManager = yield* CacheManager;
-      const apiClient = yield* ApiClient;
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const apiClient = yield* ApiClient;
 
-      const getCustomerAttributes = (appUserId: string) =>
-        cacheManager
-          .get<CustomerAttributes>(
-            generateCustomerAttributesCacheKey(appUserId)
-          )
-          .pipe(Effect.map((attributes) => attributes?.value ?? null));
+  const getCustomerAttributes = (appUserId: string) =>
+    cacheManager
+      .get<CustomerAttributes>(
+        generateCustomerAttributesCacheKey(appUserId)
+      )
+      .pipe(Effect.map((attributes) => attributes?.value ?? null));
 
-      const setCustomerAttributes = (
-        appUserId: string,
-        attributes: CustomerAttributes
-      ) =>
-        cacheManager.set(
-          generateCustomerAttributesCacheKey(appUserId),
-          attributes
-        );
+  const setCustomerAttributes = (
+    appUserId: string,
+    attributes: CustomerAttributes
+  ) =>
+    cacheManager.set(
+      generateCustomerAttributesCacheKey(appUserId),
+      attributes
+    );
 
-      const syncCustomerAttributes = (appUserId: string) =>
-        Effect.gen(function* syncCustomerAttributes() {
-          let attributes = yield* getCustomerAttributes(appUserId);
-          if (!attributes) {
-            attributes = {
-              email: undefined,
-              name: undefined,
-            };
-            yield* setCustomerAttributes(appUserId, attributes);
-          }
-          const commonHeaders = yield* getCommonSdkHeaders();
-          yield* apiClient.sdk.syncCustomerAttributes({
-            headers: {
-              ...commonHeaders,
-              "x-app-user-id": appUserId,
-            },
-            payload: {
-              email: attributes.email,
-              name: attributes.name,
-            },
-          });
-        });
+  const syncCustomerAttributes = (appUserId: string) =>
+    Effect.gen(function* syncCustomerAttributes() {
+      let attributes = yield* getCustomerAttributes(appUserId);
+      if (!attributes) {
+        attributes = {
+          email: undefined,
+          name: undefined,
+        };
+        yield* setCustomerAttributes(appUserId, attributes);
+      }
+      const commonHeaders = yield* getCommonSdkHeaders();
+      yield* apiClient.sdk.syncCustomerAttributes({
+        headers: {
+          ...commonHeaders,
+          "x-app-user-id": appUserId,
+        },
+        payload: {
+          email: attributes.email,
+          name: attributes.name,
+        },
+      });
+    });
 
-      const generateCustomerAttributesCacheKey = (appUserId: string) =>
-        `customer-attributes:${appUserId}`;
+  const generateCustomerAttributesCacheKey = (appUserId: string) =>
+    `customer-attributes:${appUserId}`;
 
-      return {
-        getCustomerAttributes,
-        setCustomerAttributes,
-        syncCustomerAttributes,
-      } as const;
-    }),
-  }
-) {}
+  return {
+    getCustomerAttributes,
+    setCustomerAttributes,
+    syncCustomerAttributes,
+  } as const;
+});
+
+export class CustomerAttributeManager extends ServiceMap.Service<CustomerAttributeManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerAttributeManager") {
+  static Default = Layer.effect(CustomerAttributeManager, make).pipe(
+    Layer.provide(CacheManager.Default)
+  )
+}
diff --git a/libraries/react-native/src/core/identity/customer-info-manager.ts b/libraries/react-native/src/core/identity/customer-info-manager.ts
index b9d9a1ba2..4549db98a 100644
--- a/libraries/react-native/src/core/identity/customer-info-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-info-manager.ts
@@ -1,83 +1,83 @@
 import type { SdkCustomer } from "@voidhash/api-spec";
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
 import { EventBusProvider } from "../event-bus";
 import { ApiClient } from "../networking/api-client";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 
-export class CustomerInfoManager extends Effect.Service<CustomerInfoManager>()(
-  "rn-voidhash/CustomerInfoManager",
-  {
-    dependencies: [CacheManager.Default],
-    effect: Effect.gen(function* effect() {
-      const cacheManager = yield* CacheManager;
-      const apiClient = yield* ApiClient;
-      const eventBus = yield* EventBusProvider;
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const apiClient = yield* ApiClient;
+  const eventBus = yield* EventBusProvider;
 
-      const generateCustomerCacheKey = (appUserId: string) =>
-        `customer:${appUserId}`;
+  const generateCustomerCacheKey = (appUserId: string) =>
+    `customer:${appUserId}`;
 
-      const getCustomerFromCache = (appUserId: string) =>
-        cacheManager.get<SdkCustomer>(generateCustomerCacheKey(appUserId));
+  const getCustomerFromCache = (appUserId: string) =>
+    cacheManager.get<SdkCustomer>(generateCustomerCacheKey(appUserId));
 
-      const cache = (appUserId: string, customer: SdkCustomer) =>
-        cacheManager.set(generateCustomerCacheKey(appUserId), customer, {
-          ttl: 1000 * 60 * 60 * 24 * 2, // 2 days
-          staleTime: 1000 * 60 * 5, // 5 minutes
-        });
+  const cache = (appUserId: string, customer: SdkCustomer) =>
+    cacheManager.set(generateCustomerCacheKey(appUserId), customer, {
+      ttl: 1000 * 60 * 60 * 24 * 2, // 2 days
+      staleTime: 1000 * 60 * 5, // 5 minutes
+    });
 
-      const resetCache = (appUserId: string) =>
-        cacheManager.delete(generateCustomerCacheKey(appUserId));
+  const resetCache = (appUserId: string) =>
+    cacheManager.delete(generateCustomerCacheKey(appUserId));
 
-      const getCustomerFromServerAndCache = (appUserId: string) =>
-        Effect.gen(function* getCustomerFromServerAndCache() {
-          const commonHeaders = yield* getCommonSdkHeaders();
-          const result = yield* apiClient.sdk.getCustomer({
-            headers: {
-              ...commonHeaders,
-              "x-app-user-id": appUserId,
-            },
-          });
-          eventBus.emit("customer-fetched", result);
-          yield* cache(appUserId, result);
-          return result;
-        });
+  const getCustomerFromServerAndCache = (appUserId: string) =>
+    Effect.gen(function* getCustomerFromServerAndCache() {
+      const commonHeaders = yield* getCommonSdkHeaders();
+      const result = yield* apiClient.sdk.getCustomer({
+        headers: {
+          ...commonHeaders,
+          "x-app-user-id": appUserId,
+        },
+      });
+      eventBus.emit("customer-fetched", result);
+      yield* cache(appUserId, result);
+      return result;
+    });
 
-      const getCustomer = (
-        appUserId: string,
-        cachePolicy: "cache" | "fetch" | "fetch-while-stale"
-      ) =>
-        Effect.gen(function* getCustomer() {
-          if (cachePolicy === "cache") {
-            const customerFromCache = yield* getCustomerFromCache(appUserId);
-            return customerFromCache?.value ?? null;
-          }
+  const getCustomer = (
+    appUserId: string,
+    cachePolicy: "cache" | "fetch" | "fetch-while-stale"
+  ) =>
+    Effect.gen(function* getCustomer() {
+      if (cachePolicy === "cache") {
+        const customerFromCache = yield* getCustomerFromCache(appUserId);
+        return customerFromCache?.value ?? null;
+      }
 
-          if (cachePolicy === "fetch") {
-            return yield* getCustomerFromServerAndCache(appUserId);
-          }
+      if (cachePolicy === "fetch") {
+        return yield* getCustomerFromServerAndCache(appUserId);
+      }
 
-          // fetch-while-stale policy
-          const customerFromCache = yield* getCustomerFromCache(appUserId);
-          if (
-            customerFromCache &&
-            !customerFromCache.isStale &&
-            !customerFromCache.isExpired &&
-            customerFromCache.value
-          ) {
-            return customerFromCache.value;
-          }
+      // fetch-while-stale policy
+      const customerFromCache = yield* getCustomerFromCache(appUserId);
+      if (
+        customerFromCache &&
+        !customerFromCache.isStale &&
+        !customerFromCache.isExpired &&
+        customerFromCache.value
+      ) {
+        return customerFromCache.value;
+      }
 
-          return yield* getCustomerFromServerAndCache(appUserId);
-        });
+      return yield* getCustomerFromServerAndCache(appUserId);
+    });
 
-      return {
-        cache,
-        getCustomer,
-        getCustomerFromCache,
-        resetCache,
-      } as const;
-    }),
-  }
-) {}
+  return {
+    cache,
+    getCustomer,
+    getCustomerFromCache,
+    resetCache,
+  } as const;
+});
+
+export class CustomerInfoManager extends ServiceMap.Service<CustomerInfoManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerInfoManager") {
+  static Default = Layer.effect(CustomerInfoManager, make).pipe(
+    Layer.provide(CacheManager.Default)
+  )
+}
diff --git a/libraries/react-native/src/core/identity/identity-manager.ts b/libraries/react-native/src/core/identity/identity-manager.ts
index 59e42bb8c..f5e35c77b 100644
--- a/libraries/react-native/src/core/identity/identity-manager.ts
+++ b/libraries/react-native/src/core/identity/identity-manager.ts
@@ -1,4 +1,4 @@
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
 import { ANONYMOUS_USER_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../caching/cache-manager";
@@ -10,106 +10,106 @@ import { CustomerInfoManager } from "./customer-info-manager";
 
 const CACHE_KEY = "appUserId";
 
-export class IdentityManager extends Effect.Service<IdentityManager>()(
-  "rn-voidhash/IdentityManager",
-  {
-    dependencies: [
-      CacheManager.Default,
-      CustomerAttributeManager.Default,
-      CustomerInfoManager.Default,
-    ],
-    effect: Effect.gen(function* effect() {
-      const cacheManager = yield* CacheManager;
-      const customerAttributeManager = yield* CustomerAttributeManager;
-      const customerInfoManager = yield* CustomerInfoManager;
-      const eventBus = yield* EventBusProvider;
-      const apiClient = yield* ApiClient;
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const customerAttributeManager = yield* CustomerAttributeManager;
+  const customerInfoManager = yield* CustomerInfoManager;
+  const eventBus = yield* EventBusProvider;
+  const apiClient = yield* ApiClient;
+
+  /**
+   * Returns the app user id. If no app user id is cached, a new anonymous user id is generated and cached.
+   * @returns The app user id.
+   */
+  const getAppUserId = () =>
+    Effect.gen(function* getAppUserId() {
+      const appUserId = yield* getAppUserIdFromCache();
+      if (appUserId) {
+        yield* Effect.logDebug(`Using cached app user id: ${appUserId}`);
+        return appUserId;
+      }
 
-      /**
-       * Returns the app user id. If no app user id is cached, a new anonymous user id is generated and cached.
-       * @returns The app user id.
-       */
-      const getAppUserId = () =>
-        Effect.gen(function* getAppUserId() {
-          const appUserId = yield* getAppUserIdFromCache();
-          if (appUserId) {
-            yield* Effect.logDebug(`Using cached app user id: ${appUserId}`);
-            return appUserId;
-          }
+      const anonymousUserId = generateAnonymousUserId();
+      yield* setAppUserIdInCache(anonymousUserId);
+      return anonymousUserId;
+    });
 
-          const anonymousUserId = generateAnonymousUserId();
-          yield* setAppUserIdInCache(anonymousUserId);
-          return anonymousUserId;
-        });
+  /**
+   * Identifies the customer. It makes a request to the server to identify the customer and caches the app user id.
+   * @param appUserId - The app user id.
+   * @param options - The options.
+   */
+  const identify = (
+    appUserId: string,
+    options: {
+      email?: string;
+      name?: string;
+    }
+  ) =>
+    Effect.gen(function* identify() {
+      const currentAppUserId = yield* getAppUserId();
+      yield* customerAttributeManager.syncCustomerAttributes(
+        currentAppUserId
+      );
+      const commonHeaders = yield* getCommonSdkHeaders();
+      const identifyRequest = yield* apiClient.sdk.identify({
+        headers: {
+          ...commonHeaders,
+          "x-app-user-id": currentAppUserId,
+        },
+        payload: {
+          appUserId,
+          email: options.email,
+          name: options.name,
+        },
+      });
 
-      /**
-       * Identifies the customer. It makes a request to the server to identify the customer and caches the app user id.
-       * @param appUserId - The app user id.
-       * @param options - The options.
-       */
-      const identify = (
-        appUserId: string,
-        options: {
-          email?: string;
-          name?: string;
-        }
-      ) =>
-        Effect.gen(function* identify() {
-          const currentAppUserId = yield* getAppUserId();
-          yield* customerAttributeManager.syncCustomerAttributes(
-            currentAppUserId
-          );
-          const commonHeaders = yield* getCommonSdkHeaders();
-          const identifyRequest = yield* apiClient.sdk.identify({
-            headers: {
-              ...commonHeaders,
-              "x-app-user-id": currentAppUserId,
-            },
-            payload: {
-              appUserId,
-              email: options.email,
-              name: options.name,
-            },
-          });
+      yield* Effect.all([
+        setAppUserIdInCache(appUserId),
+        customerInfoManager.cache(appUserId, identifyRequest),
+      ]);
 
-          yield* Effect.all([
-            setAppUserIdInCache(appUserId),
-            customerInfoManager.cache(appUserId, identifyRequest),
-          ]);
+      eventBus.emit("customer-identified");
+      eventBus.emit("customer-fetched", {
+        ...identifyRequest,
+        appUserId,
+      });
+    });
 
-          eventBus.emit("customer-identified");
-          eventBus.emit("customer-fetched", {
-            ...identifyRequest,
-            appUserId,
-          });
-        });
+  const signOut = () =>
+    Effect.gen(function* signOut() {
+      const currentAppUserId = yield* getAppUserId();
+      yield* customerAttributeManager.syncCustomerAttributes(
+        currentAppUserId
+      );
+      yield* cacheManager.clear();
+      eventBus.emit("customer-signed-out");
+    });
 
-      const signOut = () =>
-        Effect.gen(function* signOut() {
-          const currentAppUserId = yield* getAppUserId();
-          yield* customerAttributeManager.syncCustomerAttributes(
-            currentAppUserId
-          );
-          yield* cacheManager.clear();
-          eventBus.emit("customer-signed-out");
-        });
+  // Helpers
+  const generateAnonymousUserId = () =>
+    `${ANONYMOUS_USER_ID_PREFIX}${Math.random().toString(36).slice(2, 15)}`;
+  const getAppUserIdFromCache = () =>
+    cacheManager
+      .get<string>(CACHE_KEY)
+      .pipe(Effect.map((appUserId) => appUserId?.value ?? null));
+  const setAppUserIdInCache = (appUserId: string) =>
+    cacheManager.set(CACHE_KEY, appUserId);
 
-      // Helpers
-      const generateAnonymousUserId = () =>
-        `${ANONYMOUS_USER_ID_PREFIX}${Math.random().toString(36).slice(2, 15)}`;
-      const getAppUserIdFromCache = () =>
-        cacheManager
-          .get<string>(CACHE_KEY)
-          .pipe(Effect.map((appUserId) => appUserId?.value ?? null));
-      const setAppUserIdInCache = (appUserId: string) =>
-        cacheManager.set(CACHE_KEY, appUserId);
+  return {
+    getAppUserId,
+    getAppUserIdFromCache,
+    identify,
+    signOut,
+  } as const;
+});
 
-      return {
-        getAppUserId,
-        getAppUserIdFromCache,
-        identify,
-        signOut,
-      } as const;
-    }),
-  }
-) {}
+export class IdentityManager extends ServiceMap.Service<IdentityManager, Effect.Success<typeof make>>()("rn-voidhash/IdentityManager") {
+  static Default = Layer.effect(IdentityManager, make).pipe(
+    Layer.provide(Layer.mergeAll(
+      CacheManager.Default,
+      CustomerAttributeManager.Default,
+      CustomerInfoManager.Default,
+    ))
+  )
+}
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index 201cecbd0..d5e2e64d0 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -1,22 +1,20 @@
-import { HttpApiClient } from "@effect/platform";
 import { VoidhashV1Api } from "@voidhash/api-spec";
-import { Effect } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
+import { HttpApiClient } from "effect/unstable/httpapi";
 
 import { SdkConfiguration } from "../sdk-configuration";
 import { withHttpDebugLogging } from "./http-debug-client";
 
-export class ApiClient extends Effect.Service<ApiClient>()(
-  "rn-voidhash/ApiClient",
-  {
-    dependencies: [],
-    effect: Effect.gen(function* effect() {
-      const sdkConfiguration = yield* SdkConfiguration;
-      return yield* HttpApiClient.make(VoidhashV1Api, {
-        baseUrl: sdkConfiguration.baseUrl,
-        transformClient: sdkConfiguration.debug
-          ? withHttpDebugLogging
-          : undefined,
-      });
-    }),
-  }
-) {}
+const make = Effect.gen(function* effect() {
+  const sdkConfiguration = yield* SdkConfiguration;
+  return yield* HttpApiClient.make(VoidhashV1Api, {
+    baseUrl: sdkConfiguration.baseUrl,
+    transformClient: sdkConfiguration.debug
+      ? withHttpDebugLogging
+      : undefined,
+  });
+});
+
+export class ApiClient extends ServiceMap.Service<ApiClient, Effect.Success<typeof make>>()("rn-voidhash/ApiClient") {
+  static Default = Layer.effect(ApiClient, make)
+}
diff --git a/libraries/react-native/src/core/networking/http-debug-client.ts b/libraries/react-native/src/core/networking/http-debug-client.ts
index 80327b7d8..725521af9 100644
--- a/libraries/react-native/src/core/networking/http-debug-client.ts
+++ b/libraries/react-native/src/core/networking/http-debug-client.ts
@@ -1,5 +1,5 @@
-import { HttpClient } from "@effect/platform";
 import { Console, Effect } from "effect";
+import { HttpClient } from "effect/unstable/http";
 
 const MAX_BODY_PREVIEW_BYTES = 2_048;
 const MAX_VALUE_PREVIEW_CHARS = 1_024;
diff --git a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
index 91060be37..b93d4987d 100644
--- a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
@@ -1,4 +1,4 @@
-import { Context, type Effect } from "effect";
+import { ServiceMap, type Effect } from "effect";
 
 import type { Product, SubscriptionProduct } from "../entities/product";
 import type { Transaction } from "../entities/transaction";
@@ -22,9 +22,7 @@ import type {
   UserCancelledError,
 } from "./errors";
 
-export class PaymentAdapter extends Context.Tag("rn-voidhash/PaymentAdapter")<
-  PaymentAdapter,
-  {
+export class PaymentAdapter extends ServiceMap.Service<PaymentAdapter, {
     initConnection(
       onPurchase?: (transaction: Transaction) => void
     ): Effect.Effect<void, FailedToInitializeNativeAdapterError>;
@@ -82,8 +80,7 @@ export class PaymentAdapter extends Context.Tag("rn-voidhash/PaymentAdapter")<
       FailedToShowManageSubscriptionsError,
       never
     >;
-  }
->() {}
+  }>()("rn-voidhash/PaymentAdapter") {}
 
 // export interface PaymentAdapter {
 //   initConnection(
diff --git a/libraries/react-native/src/core/platform/platform-provider.ts b/libraries/react-native/src/core/platform/platform-provider.ts
index 02764f139..270b83081 100644
--- a/libraries/react-native/src/core/platform/platform-provider.ts
+++ b/libraries/react-native/src/core/platform/platform-provider.ts
@@ -1,4 +1,4 @@
-import { Context } from "effect";
+import { ServiceMap } from "effect";
 
 export interface PlatformInfo {
   appBuild: string | undefined;
@@ -12,6 +12,4 @@ export interface PlatformInfo {
   isDebugBuild: boolean;
   platform: "ios" | "android" | "unknown";
 }
-export class PlatformProvider extends Context.Tag(
-  "rn-voidhash/PlatformProvider"
-)<PlatformProvider, PlatformInfo>() {}
+export class PlatformProvider extends ServiceMap.Service<PlatformProvider, PlatformInfo>()("rn-voidhash/PlatformProvider") {}
diff --git a/libraries/react-native/src/core/sdk-configuration.ts b/libraries/react-native/src/core/sdk-configuration.ts
index dd33a4eaf..7a5b6c591 100644
--- a/libraries/react-native/src/core/sdk-configuration.ts
+++ b/libraries/react-native/src/core/sdk-configuration.ts
@@ -1,14 +1,9 @@
-import { Context } from "effect";
+import { ServiceMap } from "effect";
 
-export class SdkConfiguration extends Context.Tag(
-  "rn-voidhash/SdkConfiguration"
-)<
-  SdkConfiguration,
-  {
+export class SdkConfiguration extends ServiceMap.Service<SdkConfiguration, {
     readonly baseUrl: string;
     readonly debug: boolean;
     readonly ingestUrl: string | undefined;
     readonly publishableKey: string;
     readonly readOnly: boolean;
-  }
->() {}
+  }>()("rn-voidhash/SdkConfiguration") {}
diff --git a/package.json b/package.json
index daab11308..9bc9c8ff0 100644
--- a/package.json
+++ b/package.json
@@ -23,15 +23,11 @@
       "@trpc/server": "^11.1.0",
       "@tanstack/react-query": "^5.90.21",
       "@trpc/tanstack-react-query": "^11.1.0",
-      "effect": "^3.19.14",
-      "@effect/platform-node": "^0.104.0",
-      "@effect/platform-bun": "^0.87.0",
-      "@effect/platform": "^0.94.1",
-      "@effect/cluster": "^0.56.1",
-      "@effect/cli": "^0.73.0",
-      "@effect/rpc": "^0.73.0",
-      "@effect/language-service": "^0.64.1",
-      "@effect/vitest": "^0.27.0",
+      "effect": "4.0.0-beta.23",
+      "@effect/platform-node": "4.0.0-beta.23",
+      "@effect/platform-bun": "4.0.0-beta.23",
+      "@effect/language-service": "^0.77.0",
+      "@effect/vitest": "4.0.0-beta.23",
       "better-auth": "^1.4.18"
     }
   },
@@ -63,6 +59,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "2.3.11",
+    "@typescript/native-preview": "7.0.0-dev.20260302.1",
     "dotenv-cli": "^8.0.0",
     "ultracite": "5.0.39"
   },
@@ -70,5 +67,10 @@
     "react": "19.1.0",
     "react-dom": "19.1.0"
   },
+  "pnpm": {
+    "overrides": {
+      "effect": "4.0.0-beta.23"
+    }
+  },
   "packageManager": "pnpm@10.19.0"
 }
diff --git a/packages/api-spec/package.json b/packages/api-spec/package.json
index e2df3b4b9..10d685a93 100644
--- a/packages/api-spec/package.json
+++ b/packages/api-spec/package.json
@@ -26,7 +26,6 @@
     "typescript": "5.6.3"
   },
   "peerDependencies": {
-    "@effect/platform": "catalog:",
     "effect": "catalog:"
   }
 }
diff --git a/packages/api-spec/src/api.ts b/packages/api-spec/src/api.ts
index 48b4d95c0..446a7d7a8 100644
--- a/packages/api-spec/src/api.ts
+++ b/packages/api-spec/src/api.ts
@@ -1,5 +1,5 @@
-import { HttpApi, HttpApiEndpoint, HttpApiGroup } from "@effect/platform";
 import { Schema } from "effect";
+import { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
 
 import {
   ActionForbiddenError,
@@ -32,26 +32,21 @@ import {
 import { AuthMiddleware } from "./middlewares";
 import {
   ApiKey,
-  ApiKeyIdParam,
   ApiKeyWithRawKey,
-  AppUserIdParam,
   CreateCustomerBody,
   CreateOrganizationBody,
   CreateProjectBody,
   CreateSecretKeyBody,
   CreateWebhookEndpointBody,
   Customer,
-  CustomerIdParam,
   DeployChangesetBody,
   DeployChangesetResponse,
   Organization,
-  OrganizationIdParam,
   PaymentProviderConfiguration,
   PaymentProviderProduct,
   PaywallLocation,
   Perk,
   Product,
-  ProductIdParam,
   ProductPerk,
   Project,
   EvaluateFeatureFlagsBody,
@@ -68,57 +63,55 @@ import {
   UpdateWebhookEndpointBody,
   User,
   WebhookDelivery,
-  WebhookDeliveryIdParam,
   WebhookDeliveryWithAttempts,
   WebhookEndpoint,
-  WebhookEndpointIdParam,
 } from "./schema";
 
 export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("auth")
       .add(
-        HttpApiEndpoint.get("session")`/session`
-          .addSuccess(Session)
-          .addError(ActionForbiddenError)
-          .middleware(AuthMiddleware)
+        HttpApiEndpoint.get("session", "/session", {
+          success: Session,
+          error: [ActionForbiddenError],
+        }).middleware(AuthMiddleware)
       )
       .prefix("/auth")
   )
   .add(
     HttpApiGroup.make("api_keys")
       .add(
-        HttpApiEndpoint.post("createSecretKey")`/`
-          .addSuccess(ApiKeyWithRawKey)
-          .setPayload(CreateSecretKeyBody)
-          .addError(ApiKeyServiceError)
-          .addError(ActionForbiddenError)
+        HttpApiEndpoint.post("createSecretKey", "/", {
+          success: ApiKeyWithRawKey,
+          payload: CreateSecretKeyBody,
+          error: [ApiKeyServiceError, ActionForbiddenError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("listApiKeys")`/`
-          .addSuccess(Schema.Array(ApiKey))
-          .addError(ApiKeyServiceError)
-          .addError(ActionForbiddenError)
+        HttpApiEndpoint.get("listApiKeys", "/", {
+          success: Schema.Array(ApiKey),
+          error: [ApiKeyServiceError, ActionForbiddenError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("getApiKeyById")`/${ApiKeyIdParam}`
-          .addSuccess(ApiKey)
-          .addError(ApiKeyServiceError)
-          .addError(ApiKeyNotFoundError)
-          .addError(ActionForbiddenError)
+        HttpApiEndpoint.get("getApiKeyById", "/:apiKeyId", {
+          params: { apiKeyId: Schema.String },
+          success: ApiKey,
+          error: [ApiKeyServiceError, ApiKeyNotFoundError, ActionForbiddenError],
+        })
       )
       .add(
-        HttpApiEndpoint.post("rotateSecretKey")`/${ApiKeyIdParam}/rotate`
-          .addSuccess(ApiKeyWithRawKey)
-          .addError(ApiKeyServiceError)
-          .addError(ApiKeyNotFoundError)
-          .addError(ActionForbiddenError)
+        HttpApiEndpoint.post("rotateSecretKey", "/:apiKeyId/rotate", {
+          params: { apiKeyId: Schema.String },
+          success: ApiKeyWithRawKey,
+          error: [ApiKeyServiceError, ApiKeyNotFoundError, ActionForbiddenError],
+        })
       )
       .add(
-        HttpApiEndpoint.del("deleteApiKey")`/${ApiKeyIdParam}`
-          .addError(ApiKeyServiceError)
-          .addError(ApiKeyNotFoundError)
-          .addError(ActionForbiddenError)
+        HttpApiEndpoint.delete("deleteApiKey", "/:apiKeyId", {
+          params: { apiKeyId: Schema.String },
+          error: [ApiKeyServiceError, ApiKeyNotFoundError, ActionForbiddenError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/api-keys")
@@ -126,32 +119,31 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("customers")
       .add(
-        HttpApiEndpoint.post("createCustomer")`/`
-          .setPayload(CreateCustomerBody)
-          .addSuccess(Customer)
-          .addError(ActionForbiddenError)
-          .addError(CustomerInvalidAnonymousIdError)
-          .addError(CustomerServiceError)
+        HttpApiEndpoint.post("createCustomer", "/", {
+          payload: CreateCustomerBody,
+          success: Customer,
+          error: [ActionForbiddenError, CustomerInvalidAnonymousIdError, CustomerServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("listCustomers")`/`
-          .addSuccess(Schema.Array(Customer))
-          .addError(ActionForbiddenError)
-          .addError(CustomerServiceError)
+        HttpApiEndpoint.get("listCustomers", "/", {
+          success: Schema.Array(Customer),
+          error: [ActionForbiddenError, CustomerServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("getCustomerById")`/${CustomerIdParam}`
-          .addSuccess(Customer)
-          .addError(ActionForbiddenError)
-          .addError(CustomerNotFoundError)
-          .addError(CustomerServiceError)
+        HttpApiEndpoint.get("getCustomerById", "/:customerId", {
+          params: { customerId: Schema.String },
+          success: Customer,
+          error: [ActionForbiddenError, CustomerNotFoundError, CustomerServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("byAppUserId")`/by-app-user-id/${AppUserIdParam}`
-          .addSuccess(Customer)
-          .addError(ActionForbiddenError)
-          .addError(CustomerNotFoundError)
-          .addError(CustomerServiceError)
+        HttpApiEndpoint.get("byAppUserId", "/by-app-user-id/:appUserId", {
+          params: { appUserId: Schema.String },
+          success: Customer,
+          error: [ActionForbiddenError, CustomerNotFoundError, CustomerServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/customers")
@@ -159,10 +151,11 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("organizations")
       .add(
-        HttpApiEndpoint.post("createOrganization")`/`
-          .setPayload(CreateOrganizationBody)
-          .addSuccess(Organization)
-          .addError(OrganizationServiceError)
+        HttpApiEndpoint.post("createOrganization", "/", {
+          payload: CreateOrganizationBody,
+          success: Organization,
+          error: [OrganizationServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/organizations")
@@ -170,10 +163,10 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("perks")
       .add(
-        HttpApiEndpoint.get("listPerks")`/`
-          .addSuccess(Schema.Array(Perk))
-          .addError(ActionForbiddenError)
-          .addError(PerkServiceError)
+        HttpApiEndpoint.get("listPerks", "/", {
+          success: Schema.Array(Perk),
+          error: [ActionForbiddenError, PerkServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/perks")
@@ -181,10 +174,10 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("paywall_locations")
       .add(
-        HttpApiEndpoint.get("listPaywallLocations")`/`
-          .addSuccess(Schema.Array(PaywallLocation))
-          .addError(ActionForbiddenError)
-          .addError(PaywallLocationServiceError)
+        HttpApiEndpoint.get("listPaywallLocations", "/", {
+          success: Schema.Array(PaywallLocation),
+          error: [ActionForbiddenError, PaywallLocationServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/paywall-locations")
@@ -192,18 +185,18 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("projects")
       .add(
-        HttpApiEndpoint.post("createProject")`/`
-          .setPayload(CreateProjectBody)
-          .addSuccess(Project)
-          .addError(ActionForbiddenError)
-          .addError(AuthenticationError)
-          .addError(ProjectServiceError)
+        HttpApiEndpoint.post("createProject", "/", {
+          payload: CreateProjectBody,
+          success: Project,
+          error: [ActionForbiddenError, AuthenticationError, ProjectServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("listProjects")`/${OrganizationIdParam}`
-          .addSuccess(Schema.Array(Project))
-          .addError(ActionForbiddenError)
-          .addError(ProjectServiceError)
+        HttpApiEndpoint.get("listProjects", "/:organizationId", {
+          params: { organizationId: Schema.String },
+          success: Schema.Array(Project),
+          error: [ActionForbiddenError, ProjectServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/projects")
@@ -211,10 +204,10 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("products")
       .add(
-        HttpApiEndpoint.get("listProducts")`/`
-          .addSuccess(Schema.Array(Product))
-          .addError(ActionForbiddenError)
-          .addError(ProductServiceError)
+        HttpApiEndpoint.get("listProducts", "/", {
+          success: Schema.Array(Product),
+          error: [ActionForbiddenError, ProductServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/products")
@@ -222,13 +215,11 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("product_perks")
       .add(
-        HttpApiEndpoint.get(
-          "listProductPerksByProductId"
-        )`/by-product-id/${ProductIdParam}`
-          .addSuccess(Schema.Array(ProductPerk))
-          .addError(ActionForbiddenError)
-          .addError(ProductPerkServiceError)
-          .addError(ProductPerkValidationError)
+        HttpApiEndpoint.get("listProductPerksByProductId", "/by-product-id/:productId", {
+          params: { productId: Schema.String },
+          success: Schema.Array(ProductPerk),
+          error: [ActionForbiddenError, ProductPerkServiceError, ProductPerkValidationError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/product-perks")
@@ -236,60 +227,51 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("sdk")
       .add(
-        HttpApiEndpoint.get("getCustomer")`/get-customer`
-          .addSuccess(SdkCustomer)
-          .setHeaders(SdkHeaders)
-          .addError(AuthenticationError)
-          .addError(SdkServiceError)
-          .addError(SdkCustomerNotFoundError)
-          .addError(SdkValidationError)
-      )
-      .add(
-        HttpApiEndpoint.post("identify")`/identify`
-          .setPayload(SdkIdentifyBody)
-          .addSuccess(SdkCustomer)
-          .setHeaders(SdkHeaders)
-          .addError(AuthenticationError)
-          .addError(SdkServiceError)
-          .addError(SdkValidationError)
-          .addError(SdkCustomerAlreadyIdentifiedError)
-      )
-      .add(
-        HttpApiEndpoint.post(
-          "syncCustomerAttributes"
-        )`/sync-customer-attributes`
-          .setPayload(SdkSyncCustomerAttributesBody)
-          .addSuccess(SdkCustomer)
-          .setHeaders(SdkHeaders)
-          .addError(AuthenticationError)
-          .addError(SdkServiceError)
-          .addError(SdkValidationError)
-      )
-      .add(
-        HttpApiEndpoint.post("syncTransaction")`/sync-transaction`
-          .setPayload(SdkSyncTransactionBody)
-          .addSuccess(SdkSyncTransactionResponse)
-          .setHeaders(SdkHeaders)
-          .addError(AuthenticationError)
-          .addError(SdkServiceError)
-          .addError(SdkValidationError)
-      )
-      .add(
-        HttpApiEndpoint.post("evaluateFeatureFlags")`/evaluate-flags`
-          .setPayload(EvaluateFeatureFlagsBody)
-          .addSuccess(SdkFeatureFlagsResponse)
-          .setHeaders(SdkHeaders)
-          .addError(AuthenticationError)
-          .addError(SdkServiceError)
-      )
-      .add(
-        HttpApiEndpoint.post("resolvePaywall")`/resolve-paywall`
-          .setPayload(SdkResolvePaywallBody)
-          .addSuccess(Schema.NullOr(SdkResolvedPaywall))
-          .setHeaders(SdkHeaders)
-          .addError(AuthenticationError)
-          .addError(SdkServiceError)
-          .addError(SdkValidationError)
+        HttpApiEndpoint.get("getCustomer", "/get-customer", {
+          success: SdkCustomer,
+          headers: SdkHeaders,
+          error: [AuthenticationError, SdkServiceError, SdkCustomerNotFoundError, SdkValidationError],
+        })
+      )
+      .add(
+        HttpApiEndpoint.post("identify", "/identify", {
+          payload: SdkIdentifyBody,
+          success: SdkCustomer,
+          headers: SdkHeaders,
+          error: [AuthenticationError, SdkServiceError, SdkValidationError, SdkCustomerAlreadyIdentifiedError],
+        })
+      )
+      .add(
+        HttpApiEndpoint.post("syncCustomerAttributes", "/sync-customer-attributes", {
+          payload: SdkSyncCustomerAttributesBody,
+          success: SdkCustomer,
+          headers: SdkHeaders,
+          error: [AuthenticationError, SdkServiceError, SdkValidationError],
+        })
+      )
+      .add(
+        HttpApiEndpoint.post("syncTransaction", "/sync-transaction", {
+          payload: SdkSyncTransactionBody,
+          success: SdkSyncTransactionResponse,
+          headers: SdkHeaders,
+          error: [AuthenticationError, SdkServiceError, SdkValidationError],
+        })
+      )
+      .add(
+        HttpApiEndpoint.post("evaluateFeatureFlags", "/evaluate-flags", {
+          payload: EvaluateFeatureFlagsBody,
+          success: SdkFeatureFlagsResponse,
+          headers: SdkHeaders,
+          error: [AuthenticationError, SdkServiceError],
+        })
+      )
+      .add(
+        HttpApiEndpoint.post("resolvePaywall", "/resolve-paywall", {
+          payload: SdkResolvePaywallBody,
+          success: Schema.NullOr(SdkResolvedPaywall),
+          headers: SdkHeaders,
+          error: [AuthenticationError, SdkServiceError, SdkValidationError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/sdk")
@@ -297,10 +279,10 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("users")
       .add(
-        HttpApiEndpoint.get("getUser")`/current`
-          .addSuccess(User)
-          .addError(AuthenticationError)
-          .addError(UserServiceError)
+        HttpApiEndpoint.get("getUser", "/current", {
+          success: User,
+          error: [AuthenticationError, UserServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/users")
@@ -308,10 +290,10 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("payment_provider_configurations")
       .add(
-        HttpApiEndpoint.get("listPaymentProviderConfigurations")`/`
-          .addSuccess(Schema.Array(PaymentProviderConfiguration))
-          .addError(ActionForbiddenError)
-          .addError(PaymentProviderConfigurationServiceError)
+        HttpApiEndpoint.get("listPaymentProviderConfigurations", "/", {
+          success: Schema.Array(PaymentProviderConfiguration),
+          error: [ActionForbiddenError, PaymentProviderConfigurationServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/payment-provider-configurations")
@@ -319,10 +301,10 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("payment_provider_products")
       .add(
-        HttpApiEndpoint.get("listPaymentProviderProducts")`/`
-          .addSuccess(Schema.Array(PaymentProviderProduct))
-          .addError(ActionForbiddenError)
-          .addError(PaymentProviderProductServiceError)
+        HttpApiEndpoint.get("listPaymentProviderProducts", "/", {
+          success: Schema.Array(PaymentProviderProduct),
+          error: [ActionForbiddenError, PaymentProviderProductServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/payment-provider-products")
@@ -330,12 +312,11 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("changesets")
       .add(
-        HttpApiEndpoint.post("deployChangeset")`/deploy`
-          .setPayload(DeployChangesetBody)
-          .addSuccess(DeployChangesetResponse)
-          .addError(AuthenticationError)
-          .addError(ActionForbiddenError)
-          .addError(ChangesetDeploymentServiceError)
+        HttpApiEndpoint.post("deployChangeset", "/deploy", {
+          payload: DeployChangesetBody,
+          success: DeployChangesetResponse,
+          error: [AuthenticationError, ActionForbiddenError, ChangesetDeploymentServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/changesets")
@@ -343,75 +324,72 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
   .add(
     HttpApiGroup.make("webhooks")
       .add(
-        HttpApiEndpoint.post("createWebhookEndpoint")`/endpoints`
-          .setPayload(CreateWebhookEndpointBody)
-          .addSuccess(WebhookEndpoint)
-          .addError(ActionForbiddenError)
-          .addError(WebhookValidationError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.post("createWebhookEndpoint", "/endpoints", {
+          payload: CreateWebhookEndpointBody,
+          success: WebhookEndpoint,
+          error: [ActionForbiddenError, WebhookValidationError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("listWebhookEndpoints")`/endpoints`
-          .addSuccess(Schema.Array(WebhookEndpoint))
-          .addError(ActionForbiddenError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.get("listWebhookEndpoints", "/endpoints", {
+          success: Schema.Array(WebhookEndpoint),
+          error: [ActionForbiddenError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("getWebhookEndpoint")`/endpoints/${WebhookEndpointIdParam}`
-          .addSuccess(WebhookEndpoint)
-          .addError(ActionForbiddenError)
-          .addError(WebhookEndpointNotFoundError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.get("getWebhookEndpoint", "/endpoints/:endpointId", {
+          params: { endpointId: Schema.String },
+          success: WebhookEndpoint,
+          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.patch("updateWebhookEndpoint")`/endpoints/${WebhookEndpointIdParam}`
-          .setPayload(UpdateWebhookEndpointBody)
-          .addSuccess(WebhookEndpoint)
-          .addError(ActionForbiddenError)
-          .addError(WebhookEndpointNotFoundError)
-          .addError(WebhookValidationError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.patch("updateWebhookEndpoint", "/endpoints/:endpointId", {
+          params: { endpointId: Schema.String },
+          payload: UpdateWebhookEndpointBody,
+          success: WebhookEndpoint,
+          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookValidationError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.del("deleteWebhookEndpoint")`/endpoints/${WebhookEndpointIdParam}`
-          .addError(ActionForbiddenError)
-          .addError(WebhookEndpointNotFoundError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.delete("deleteWebhookEndpoint", "/endpoints/:endpointId", {
+          params: { endpointId: Schema.String },
+          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.post("rotateWebhookSecret")`/endpoints/${WebhookEndpointIdParam}/rotate-secret`
-          .addSuccess(WebhookEndpoint)
-          .addError(ActionForbiddenError)
-          .addError(WebhookEndpointNotFoundError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.post("rotateWebhookSecret", "/endpoints/:endpointId/rotate-secret", {
+          params: { endpointId: Schema.String },
+          success: WebhookEndpoint,
+          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.post("testWebhookEndpoint")`/endpoints/${WebhookEndpointIdParam}/test`
-          .addSuccess(WebhookDelivery)
-          .addError(ActionForbiddenError)
-          .addError(WebhookEndpointNotFoundError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.post("testWebhookEndpoint", "/endpoints/:endpointId/test", {
+          params: { endpointId: Schema.String },
+          success: WebhookDelivery,
+          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("listWebhookDeliveries")`/deliveries`
-          .addSuccess(Schema.Array(WebhookDelivery))
-          .addError(ActionForbiddenError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.get("listWebhookDeliveries", "/deliveries", {
+          success: Schema.Array(WebhookDelivery),
+          error: [ActionForbiddenError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.get("getWebhookDelivery")`/deliveries/${WebhookDeliveryIdParam}`
-          .addSuccess(WebhookDeliveryWithAttempts)
-          .addError(ActionForbiddenError)
-          .addError(WebhookDeliveryNotFoundError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.get("getWebhookDelivery", "/deliveries/:deliveryId", {
+          params: { deliveryId: Schema.String },
+          success: WebhookDeliveryWithAttempts,
+          error: [ActionForbiddenError, WebhookDeliveryNotFoundError, WebhookServiceError],
+        })
       )
       .add(
-        HttpApiEndpoint.post("retryWebhookDelivery")`/deliveries/${WebhookDeliveryIdParam}/retry`
-          .addSuccess(WebhookDelivery)
-          .addError(ActionForbiddenError)
-          .addError(WebhookDeliveryNotFoundError)
-          .addError(WebhookValidationError)
-          .addError(WebhookServiceError)
+        HttpApiEndpoint.post("retryWebhookDelivery", "/deliveries/:deliveryId/retry", {
+          params: { deliveryId: Schema.String },
+          success: WebhookDelivery,
+          error: [ActionForbiddenError, WebhookDeliveryNotFoundError, WebhookValidationError, WebhookServiceError],
+        })
       )
       .middleware(AuthMiddleware)
       .prefix("/webhooks")
diff --git a/packages/api-spec/src/auth.ts b/packages/api-spec/src/auth.ts
index 85fe8433e..8ad068bc0 100644
--- a/packages/api-spec/src/auth.ts
+++ b/packages/api-spec/src/auth.ts
@@ -1,4 +1,4 @@
-import { Context, Schema } from "effect";
+import { Schema, ServiceMap } from "effect";
 
 // ============================================================================
 // Session Sub-Schemas
@@ -74,11 +74,11 @@ export const ApiPublishableKeySessionSchema = Schema.Struct({
 // Combined Auth Session Schema
 // ============================================================================
 
-export const ApiAuthSessionSchema = Schema.Union(
+export const ApiAuthSessionSchema = Schema.Union([
   ApiUserSessionSchema,
   ApiSecretKeySessionSchema,
-  ApiPublishableKeySessionSchema
-);
+  ApiPublishableKeySessionSchema,
+]);
 
 // ============================================================================
 // Type Exports
@@ -96,7 +96,4 @@ export type AnyApiAuthSession =
 // Context Tag
 // ============================================================================
 
-export class ApiAuthSession extends Context.Tag("api-spec/auth/ApiAuthSession")<
-  ApiAuthSession,
-  ApiUserSession | ApiSecretKeySession | ApiPublishableKeySession
->() {}
+export class ApiAuthSession extends ServiceMap.Service<ApiAuthSession, ApiUserSession | ApiSecretKeySession | ApiPublishableKeySession>()("api-spec/auth/ApiAuthSession") {}
diff --git a/packages/api-spec/src/changeset.ts b/packages/api-spec/src/changeset.ts
index 15bec1273..28972b21e 100644
--- a/packages/api-spec/src/changeset.ts
+++ b/packages/api-spec/src/changeset.ts
@@ -122,7 +122,7 @@ export const PaymentProviderProductCreateChangeSchema = Schema.Struct({
   changeType: Schema.Literal("create-payment-provider-product"),
   key: Schema.String,
   payload: Schema.Struct({
-    configuration: Schema.Record({ key: Schema.String, value: Schema.Unknown }),
+    configuration: Schema.Record(Schema.String, Schema.Unknown),
     productSlug: Schema.String,
     providerId: Schema.String,
   }),
@@ -132,7 +132,7 @@ export const PaymentProviderProductUpdateChangeSchema = Schema.Struct({
   changeType: Schema.Literal("update-payment-provider-product"),
   key: Schema.String,
   payload: Schema.Struct({
-    configuration: Schema.Record({ key: Schema.String, value: Schema.Unknown }),
+    configuration: Schema.Record(Schema.String, Schema.Unknown),
     productSlug: Schema.String,
     providerId: Schema.String,
   }),
@@ -151,7 +151,7 @@ export const PaymentProviderProductDeleteChangeSchema = Schema.Struct({
 // Combined Schemas
 // ============================================================================
 
-export const ChangeSchema = Schema.Union(
+export const ChangeSchema = Schema.Union([
   PaywallLocationCreateChangeSchema,
   PaywallLocationUpdateChangeSchema,
   PaywallLocationArchiveChangeSchema,
@@ -165,8 +165,8 @@ export const ChangeSchema = Schema.Union(
   ProductPerkDeleteChangeSchema,
   PaymentProviderProductCreateChangeSchema,
   PaymentProviderProductUpdateChangeSchema,
-  PaymentProviderProductDeleteChangeSchema
-);
+  PaymentProviderProductDeleteChangeSchema,
+]);
 
 export const ChangesetSchema = Schema.Struct({
   changes: Schema.Array(ChangeSchema),
diff --git a/packages/api-spec/src/errors/admin.ts b/packages/api-spec/src/errors/admin.ts
index 57afb04a2..8f266a42a 100644
--- a/packages/api-spec/src/errors/admin.ts
+++ b/packages/api-spec/src/errors/admin.ts
@@ -1,11 +1,10 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic admin service error */
-export class AdminServiceError extends Schema.TaggedError<AdminServiceError>()(
+export class AdminServiceError extends Schema.TaggedErrorClass<AdminServiceError>()(
   "AdminServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
diff --git a/packages/api-spec/src/errors/analytics.ts b/packages/api-spec/src/errors/analytics.ts
index d0832464c..c860289b7 100644
--- a/packages/api-spec/src/errors/analytics.ts
+++ b/packages/api-spec/src/errors/analytics.ts
@@ -1,29 +1,28 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic analytics service error */
-export class AnalyticsServiceError extends Schema.TaggedError<AnalyticsServiceError>()(
+export class AnalyticsServiceError extends Schema.TaggedErrorClass<AnalyticsServiceError>()(
   "AnalyticsServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Invalid time range error */
-export class InvalidTimeRangeError extends Schema.TaggedError<InvalidTimeRangeError>()(
+export class InvalidTimeRangeError extends Schema.TaggedErrorClass<InvalidTimeRangeError>()(
   "InvalidTimeRangeError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
 
 /** Invalid metric error */
-export class InvalidMetricError extends Schema.TaggedError<InvalidMetricError>()(
+export class InvalidMetricError extends Schema.TaggedErrorClass<InvalidMetricError>()(
   "InvalidMetricError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
diff --git a/packages/api-spec/src/errors/api-key.ts b/packages/api-spec/src/errors/api-key.ts
index c4b6d9ccb..1782b4200 100644
--- a/packages/api-spec/src/errors/api-key.ts
+++ b/packages/api-spec/src/errors/api-key.ts
@@ -1,20 +1,19 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic API key service error */
-export class ApiKeyServiceError extends Schema.TaggedError<ApiKeyServiceError>()(
+export class ApiKeyServiceError extends Schema.TaggedErrorClass<ApiKeyServiceError>()(
   "ApiKeyServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** API key not found */
-export class ApiKeyNotFoundError extends Schema.TaggedError<ApiKeyNotFoundError>()(
+export class ApiKeyNotFoundError extends Schema.TaggedErrorClass<ApiKeyNotFoundError>()(
   "ApiKeyNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
diff --git a/packages/api-spec/src/errors/billing.ts b/packages/api-spec/src/errors/billing.ts
index 036fb741e..71de5cbda 100644
--- a/packages/api-spec/src/errors/billing.ts
+++ b/packages/api-spec/src/errors/billing.ts
@@ -1,29 +1,28 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic billing service error */
-export class BillingServiceError extends Schema.TaggedError<BillingServiceError>()(
+export class BillingServiceError extends Schema.TaggedErrorClass<BillingServiceError>()(
   "BillingServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Organization billing not found */
-export class OrganizationBillingNotFoundError extends Schema.TaggedError<OrganizationBillingNotFoundError>()(
+export class OrganizationBillingNotFoundError extends Schema.TaggedErrorClass<OrganizationBillingNotFoundError>()(
   "OrganizationBillingNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** Invalid billing tier error */
-export class InvalidBillingTierError extends Schema.TaggedError<InvalidBillingTierError>()(
+export class InvalidBillingTierError extends Schema.TaggedErrorClass<InvalidBillingTierError>()(
   "InvalidBillingTierError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
diff --git a/packages/api-spec/src/errors/changeset.ts b/packages/api-spec/src/errors/changeset.ts
index 8fc1903dd..ec7e8a101 100644
--- a/packages/api-spec/src/errors/changeset.ts
+++ b/packages/api-spec/src/errors/changeset.ts
@@ -1,11 +1,10 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic changeset deployment service error */
-export class ChangesetDeploymentServiceError extends Schema.TaggedError<ChangesetDeploymentServiceError>()(
+export class ChangesetDeploymentServiceError extends Schema.TaggedErrorClass<ChangesetDeploymentServiceError>()(
   "ChangesetDeploymentServiceError",
   {
     cause: Schema.Unknown,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
diff --git a/packages/api-spec/src/errors/common.ts b/packages/api-spec/src/errors/common.ts
index fbff86995..0de329ce6 100644
--- a/packages/api-spec/src/errors/common.ts
+++ b/packages/api-spec/src/errors/common.ts
@@ -1,30 +1,29 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Action is forbidden due to insufficient permissions */
-export class ActionForbiddenError extends Schema.TaggedError<ActionForbiddenError>()(
+export class ActionForbiddenError extends Schema.TaggedErrorClass<ActionForbiddenError>()(
   "ActionForbiddenError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 403 })
+  { httpApiStatus: 403 }
 ) {}
 
 /** Authentication failed */
-export class AuthenticationError extends Schema.TaggedError<AuthenticationError>()(
+export class AuthenticationError extends Schema.TaggedErrorClass<AuthenticationError>()(
   "AuthenticationError",
   {
     cause: Schema.String,
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** User is not authenticated */
-export class NotAuthenticatedError extends Schema.TaggedError<NotAuthenticatedError>()(
+export class NotAuthenticatedError extends Schema.TaggedErrorClass<NotAuthenticatedError>()(
   "NotAuthenticatedError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 401 })
+  { httpApiStatus: 401 }
 ) {}
diff --git a/packages/api-spec/src/errors/customer.ts b/packages/api-spec/src/errors/customer.ts
index cf25fedea..113f31f8c 100644
--- a/packages/api-spec/src/errors/customer.ts
+++ b/packages/api-spec/src/errors/customer.ts
@@ -1,22 +1,21 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic customer service error */
-export class CustomerServiceError extends Schema.TaggedError<CustomerServiceError>()(
+export class CustomerServiceError extends Schema.TaggedErrorClass<CustomerServiceError>()(
   "CustomerServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Customer not found */
-export class CustomerNotFoundError extends Schema.TaggedError<CustomerNotFoundError>()(
+export class CustomerNotFoundError extends Schema.TaggedErrorClass<CustomerNotFoundError>()(
   "CustomerNotFoundError",
   {
     id: Schema.NonEmptyString,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {
   toString(): string {
     return `The following customer not found: ${this.id}`;
@@ -24,12 +23,12 @@ export class CustomerNotFoundError extends Schema.TaggedError<CustomerNotFoundEr
 }
 
 /** Anonymous ID is invalid */
-export class CustomerInvalidAnonymousIdError extends Schema.TaggedError<CustomerInvalidAnonymousIdError>()(
+export class CustomerInvalidAnonymousIdError extends Schema.TaggedErrorClass<CustomerInvalidAnonymousIdError>()(
   "CustomerInvalidAnonymousIdError",
   {
     id: Schema.NonEmptyString,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {
   toString(): string {
     return `The following anonymous ID is invalid: ${this.id}`;
diff --git a/packages/api-spec/src/errors/organization.ts b/packages/api-spec/src/errors/organization.ts
index e67c6559f..4ae8760f5 100644
--- a/packages/api-spec/src/errors/organization.ts
+++ b/packages/api-spec/src/errors/organization.ts
@@ -1,20 +1,19 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic organization service error */
-export class OrganizationServiceError extends Schema.TaggedError<OrganizationServiceError>()(
+export class OrganizationServiceError extends Schema.TaggedErrorClass<OrganizationServiceError>()(
   "OrganizationServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Organization not found */
-export class OrganizationNotFoundError extends Schema.TaggedError<OrganizationNotFoundError>()(
+export class OrganizationNotFoundError extends Schema.TaggedErrorClass<OrganizationNotFoundError>()(
   "OrganizationNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
diff --git a/packages/api-spec/src/errors/payment-provider.ts b/packages/api-spec/src/errors/payment-provider.ts
index a1979df3f..cbf0c597b 100644
--- a/packages/api-spec/src/errors/payment-provider.ts
+++ b/packages/api-spec/src/errors/payment-provider.ts
@@ -1,74 +1,73 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic payment provider configuration service error */
-export class PaymentProviderConfigurationServiceError extends Schema.TaggedError<PaymentProviderConfigurationServiceError>()(
+export class PaymentProviderConfigurationServiceError extends Schema.TaggedErrorClass<PaymentProviderConfigurationServiceError>()(
   "PaymentProviderConfigurationServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Payment provider configuration not found */
-export class PaymentProviderConfigurationNotFoundError extends Schema.TaggedError<PaymentProviderConfigurationNotFoundError>()(
+export class PaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<PaymentProviderConfigurationNotFoundError>()(
   "PaymentProviderConfigurationNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** Payment provider configuration validation error */
-export class PaymentProviderConfigurationValidationError extends Schema.TaggedError<PaymentProviderConfigurationValidationError>()(
+export class PaymentProviderConfigurationValidationError extends Schema.TaggedErrorClass<PaymentProviderConfigurationValidationError>()(
   "PaymentProviderConfigurationValidationError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
 
 /** Payment provider configuration key unavailable */
-export class PaymentProviderConfigurationKeyUnavailableError extends Schema.TaggedError<PaymentProviderConfigurationKeyUnavailableError>()(
+export class PaymentProviderConfigurationKeyUnavailableError extends Schema.TaggedErrorClass<PaymentProviderConfigurationKeyUnavailableError>()(
   "PaymentProviderConfigurationKeyUnavailableError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
 
 /** Payment provider already exists */
-export class PaymentProviderAlreadyExistsError extends Schema.TaggedError<PaymentProviderAlreadyExistsError>()(
+export class PaymentProviderAlreadyExistsError extends Schema.TaggedErrorClass<PaymentProviderAlreadyExistsError>()(
   "PaymentProviderAlreadyExistsError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 409 })
+  { httpApiStatus: 409 }
 ) {}
 
 /** Generic payment provider product service error */
-export class PaymentProviderProductServiceError extends Schema.TaggedError<PaymentProviderProductServiceError>()(
+export class PaymentProviderProductServiceError extends Schema.TaggedErrorClass<PaymentProviderProductServiceError>()(
   "PaymentProviderProductServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Payment provider product validation error */
-export class PaymentProviderProductValidationError extends Schema.TaggedError<PaymentProviderProductValidationError>()(
+export class PaymentProviderProductValidationError extends Schema.TaggedErrorClass<PaymentProviderProductValidationError>()(
   "PaymentProviderProductValidationError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
 
 /** Payment provider product not found */
-export class PaymentProviderProductNotFoundError extends Schema.TaggedError<PaymentProviderProductNotFoundError>()(
+export class PaymentProviderProductNotFoundError extends Schema.TaggedErrorClass<PaymentProviderProductNotFoundError>()(
   "PaymentProviderProductNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
diff --git a/packages/api-spec/src/errors/paywall-location.ts b/packages/api-spec/src/errors/paywall-location.ts
index 81716203c..2fa8573ac 100644
--- a/packages/api-spec/src/errors/paywall-location.ts
+++ b/packages/api-spec/src/errors/paywall-location.ts
@@ -1,11 +1,10 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic paywall location service error */
-export class PaywallLocationServiceError extends Schema.TaggedError<PaywallLocationServiceError>()(
+export class PaywallLocationServiceError extends Schema.TaggedErrorClass<PaywallLocationServiceError>()(
   "PaywallLocationServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
diff --git a/packages/api-spec/src/errors/paywall.ts b/packages/api-spec/src/errors/paywall.ts
index d9220623b..cabac2a39 100644
--- a/packages/api-spec/src/errors/paywall.ts
+++ b/packages/api-spec/src/errors/paywall.ts
@@ -1,38 +1,37 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic paywall service error */
-export class PaywallServiceError extends Schema.TaggedError<PaywallServiceError>()(
+export class PaywallServiceError extends Schema.TaggedErrorClass<PaywallServiceError>()(
   "PaywallServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Paywall not found */
-export class PaywallNotFoundError extends Schema.TaggedError<PaywallNotFoundError>()(
+export class PaywallNotFoundError extends Schema.TaggedErrorClass<PaywallNotFoundError>()(
   "PaywallNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** Paywall slug already exists */
-export class PaywallSlugAlreadyExistsError extends Schema.TaggedError<PaywallSlugAlreadyExistsError>()(
+export class PaywallSlugAlreadyExistsError extends Schema.TaggedErrorClass<PaywallSlugAlreadyExistsError>()(
   "PaywallSlugAlreadyExistsError",
   {
     slug: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 409 })
+  { httpApiStatus: 409 }
 ) {}
 
 /** Paywall publish error */
-export class PaywallPublishError extends Schema.TaggedError<PaywallPublishError>()(
+export class PaywallPublishError extends Schema.TaggedErrorClass<PaywallPublishError>()(
   "PaywallPublishError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
diff --git a/packages/api-spec/src/errors/perk.ts b/packages/api-spec/src/errors/perk.ts
index 5fe2623b7..6d143cc3e 100644
--- a/packages/api-spec/src/errors/perk.ts
+++ b/packages/api-spec/src/errors/perk.ts
@@ -1,31 +1,30 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic perk service error */
-export class PerkServiceError extends Schema.TaggedError<PerkServiceError>()(
+export class PerkServiceError extends Schema.TaggedErrorClass<PerkServiceError>()(
   "PerkServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Perk not found */
-export class PerkNotFoundError extends Schema.TaggedError<PerkNotFoundError>()(
+export class PerkNotFoundError extends Schema.TaggedErrorClass<PerkNotFoundError>()(
   "PerkNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** Perk slug already exists */
-export class PerkSlugAlreadyExistsError extends Schema.TaggedError<PerkSlugAlreadyExistsError>()(
+export class PerkSlugAlreadyExistsError extends Schema.TaggedErrorClass<PerkSlugAlreadyExistsError>()(
   "PerkSlugAlreadyExistsError",
   {
     slug: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 409 })
+  { httpApiStatus: 409 }
 ) {
   toString(): string {
     return `The following perk slug already exists: ${this.slug}`;
diff --git a/packages/api-spec/src/errors/product-perk.ts b/packages/api-spec/src/errors/product-perk.ts
index 404278cff..f96c14e3d 100644
--- a/packages/api-spec/src/errors/product-perk.ts
+++ b/packages/api-spec/src/errors/product-perk.ts
@@ -1,20 +1,19 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic product perk service error */
-export class ProductPerkServiceError extends Schema.TaggedError<ProductPerkServiceError>()(
+export class ProductPerkServiceError extends Schema.TaggedErrorClass<ProductPerkServiceError>()(
   "ProductPerkServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Product perk validation error */
-export class ProductPerkValidationError extends Schema.TaggedError<ProductPerkValidationError>()(
+export class ProductPerkValidationError extends Schema.TaggedErrorClass<ProductPerkValidationError>()(
   "ProductPerkValidationError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
diff --git a/packages/api-spec/src/errors/product.ts b/packages/api-spec/src/errors/product.ts
index eda8d2699..1425355e3 100644
--- a/packages/api-spec/src/errors/product.ts
+++ b/packages/api-spec/src/errors/product.ts
@@ -1,31 +1,30 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic product service error */
-export class ProductServiceError extends Schema.TaggedError<ProductServiceError>()(
+export class ProductServiceError extends Schema.TaggedErrorClass<ProductServiceError>()(
   "ProductServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Product not found */
-export class ProductNotFoundError extends Schema.TaggedError<ProductNotFoundError>()(
+export class ProductNotFoundError extends Schema.TaggedErrorClass<ProductNotFoundError>()(
   "ProductNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** Product slug already exists */
-export class ProductSlugAlreadyExistsError extends Schema.TaggedError<ProductSlugAlreadyExistsError>()(
+export class ProductSlugAlreadyExistsError extends Schema.TaggedErrorClass<ProductSlugAlreadyExistsError>()(
   "ProductSlugAlreadyExistsError",
   {
     slug: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 409 })
+  { httpApiStatus: 409 }
 ) {
   toString(): string {
     return `The following product slug already exists: ${this.slug}`;
diff --git a/packages/api-spec/src/errors/project.ts b/packages/api-spec/src/errors/project.ts
index 51675b982..804b87e37 100644
--- a/packages/api-spec/src/errors/project.ts
+++ b/packages/api-spec/src/errors/project.ts
@@ -1,22 +1,21 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic project service error */
-export class ProjectServiceError extends Schema.TaggedError<ProjectServiceError>()(
+export class ProjectServiceError extends Schema.TaggedErrorClass<ProjectServiceError>()(
   "ProjectServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Project not found */
-export class ProjectNotFoundError extends Schema.TaggedError<ProjectNotFoundError>()(
+export class ProjectNotFoundError extends Schema.TaggedErrorClass<ProjectNotFoundError>()(
   "ProjectNotFoundError",
   {
     projectId: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {
   toString(): string {
     return `The following project not found: ${this.projectId}`;
diff --git a/packages/api-spec/src/errors/sdk.ts b/packages/api-spec/src/errors/sdk.ts
index 72949f841..78987c117 100644
--- a/packages/api-spec/src/errors/sdk.ts
+++ b/packages/api-spec/src/errors/sdk.ts
@@ -1,31 +1,30 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic SDK service error */
-export class SdkServiceError extends Schema.TaggedError<SdkServiceError>()(
+export class SdkServiceError extends Schema.TaggedErrorClass<SdkServiceError>()(
   "SdkServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** SDK customer not found */
-export class SdkCustomerNotFoundError extends Schema.TaggedError<SdkCustomerNotFoundError>()(
+export class SdkCustomerNotFoundError extends Schema.TaggedErrorClass<SdkCustomerNotFoundError>()(
   "SdkCustomerNotFoundError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** SDK customer already identified */
-export class SdkCustomerAlreadyIdentifiedError extends Schema.TaggedError<SdkCustomerAlreadyIdentifiedError>()(
+export class SdkCustomerAlreadyIdentifiedError extends Schema.TaggedErrorClass<SdkCustomerAlreadyIdentifiedError>()(
   "SdkCustomerAlreadyIdentifiedError",
   {
     appUserId: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 409 })
+  { httpApiStatus: 409 }
 ) {
   toString(): string {
     return `The following customer was already identified: ${this.appUserId}`;
@@ -33,10 +32,10 @@ export class SdkCustomerAlreadyIdentifiedError extends Schema.TaggedError<SdkCus
 }
 
 /** SDK validation error */
-export class SdkValidationError extends Schema.TaggedError<SdkValidationError>()(
+export class SdkValidationError extends Schema.TaggedErrorClass<SdkValidationError>()(
   "SdkValidationError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
diff --git a/packages/api-spec/src/errors/user.ts b/packages/api-spec/src/errors/user.ts
index 85e2cb025..a46727294 100644
--- a/packages/api-spec/src/errors/user.ts
+++ b/packages/api-spec/src/errors/user.ts
@@ -1,11 +1,10 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic user service error */
-export class UserServiceError extends Schema.TaggedError<UserServiceError>()(
+export class UserServiceError extends Schema.TaggedErrorClass<UserServiceError>()(
   "UserServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
diff --git a/packages/api-spec/src/errors/webhook.ts b/packages/api-spec/src/errors/webhook.ts
index 0afe7ef43..87110dc04 100644
--- a/packages/api-spec/src/errors/webhook.ts
+++ b/packages/api-spec/src/errors/webhook.ts
@@ -1,38 +1,37 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 /** Generic webhook service error */
-export class WebhookServiceError extends Schema.TaggedError<WebhookServiceError>()(
+export class WebhookServiceError extends Schema.TaggedErrorClass<WebhookServiceError>()(
   "WebhookServiceError",
   {
     cause: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 500 })
+  { httpApiStatus: 500 }
 ) {}
 
 /** Webhook endpoint not found */
-export class WebhookEndpointNotFoundError extends Schema.TaggedError<WebhookEndpointNotFoundError>()(
+export class WebhookEndpointNotFoundError extends Schema.TaggedErrorClass<WebhookEndpointNotFoundError>()(
   "WebhookEndpointNotFoundError",
   {
     endpointId: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** Webhook delivery not found */
-export class WebhookDeliveryNotFoundError extends Schema.TaggedError<WebhookDeliveryNotFoundError>()(
+export class WebhookDeliveryNotFoundError extends Schema.TaggedErrorClass<WebhookDeliveryNotFoundError>()(
   "WebhookDeliveryNotFoundError",
   {
     deliveryId: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 404 })
+  { httpApiStatus: 404 }
 ) {}
 
 /** Webhook validation error */
-export class WebhookValidationError extends Schema.TaggedError<WebhookValidationError>()(
+export class WebhookValidationError extends Schema.TaggedErrorClass<WebhookValidationError>()(
   "WebhookValidationError",
   {
     message: Schema.String,
   },
-  HttpApiSchema.annotations({ status: 400 })
+  { httpApiStatus: 400 }
 ) {}
diff --git a/packages/api-spec/src/middlewares.ts b/packages/api-spec/src/middlewares.ts
index 6dd9f5920..a3ffdc7ef 100644
--- a/packages/api-spec/src/middlewares.ts
+++ b/packages/api-spec/src/middlewares.ts
@@ -1,15 +1,14 @@
-import { HttpApiMiddleware, HttpApiSecurity } from "@effect/platform";
 import { Schema } from "effect";
+import { HttpApiMiddleware, HttpApiSecurity } from "effect/unstable/httpapi";
 
 import { ApiAuthSession } from "./auth";
 import { AuthenticationError, NotAuthenticatedError } from "./errors";
 
-export class AuthMiddleware extends HttpApiMiddleware.Tag<AuthMiddleware>()(
+export class AuthMiddleware extends HttpApiMiddleware.Service<AuthMiddleware, { provides: ApiAuthSession }>()(
   "Http/AuthenticationMiddleware",
   {
     // Optionally define the error schema for the middleware
-    failure: Schema.Union(AuthenticationError, NotAuthenticatedError),
-    provides: ApiAuthSession,
+    error: Schema.Union([AuthenticationError, NotAuthenticatedError]),
     security: {
       apiKey: HttpApiSecurity.apiKey({
         in: "header",
diff --git a/packages/api-spec/src/schema.ts b/packages/api-spec/src/schema.ts
index e62de0a74..17cc9cc67 100644
--- a/packages/api-spec/src/schema.ts
+++ b/packages/api-spec/src/schema.ts
@@ -1,4 +1,3 @@
-import { HttpApiSchema } from "@effect/platform";
 import { Schema } from "effect";
 
 import { ChangesetSchema } from "./changeset";
@@ -20,11 +19,11 @@ export const SecretKeyAuthHeaders = Schema.Struct({
 // Auth
 // ========================================================
 
-const SessionAuthMethods = Schema.Union(
+const SessionAuthMethods = Schema.Union([
   Schema.Literal("api-key"),
   Schema.Literal("publishable-key"),
-  Schema.Literal("secret-key")
-);
+  Schema.Literal("secret-key"),
+]);
 
 export const Session = Schema.Struct({
   method: SessionAuthMethods,
@@ -79,7 +78,7 @@ export class CreateSecretKeyBody extends Schema.Class<CreateSecretKeyBody>(
   projectId: Schema.String,
 }) {}
 
-export const ApiKeyIdParam = HttpApiSchema.param("apiKeyId", Schema.String);
+export const ApiKeyIdParam = Schema.String;
 
 // ========================================================
 // Customers
@@ -100,9 +99,9 @@ export class CreateCustomerBody extends Schema.Class<CreateCustomerBody>(
   name: Schema.optional(Schema.String),
 }) {}
 
-export const CustomerIdParam = HttpApiSchema.param("customerId", Schema.String);
+export const CustomerIdParam = Schema.String;
 
-export const AppUserIdParam = HttpApiSchema.param("appUserId", Schema.String);
+export const AppUserIdParam = Schema.String;
 
 // ========================================================
 // Organizations
@@ -147,11 +146,11 @@ export class PaywallLocation extends Schema.Class<PaywallLocation>("PaywallLocat
 // Products
 // ========================================================
 
-export const ProductType = Schema.Literal(
+export const ProductType = Schema.Literals([
   "subscription",
   "one-time",
-  "one-time-consumable"
-);
+  "one-time-consumable",
+]);
 
 export class Product extends Schema.Class<Product>("Product")({
   id: Schema.String,
@@ -165,7 +164,7 @@ export class Product extends Schema.Class<Product>("Product")({
 // Product Perks
 // ========================================================
 
-export const ProductIdParam = HttpApiSchema.param("productId", Schema.String);
+export const ProductIdParam = Schema.String;
 
 export class ProductPerk extends Schema.Class<ProductPerk>("ProductPerk")({
   id: Schema.String,
@@ -194,7 +193,7 @@ export class PaymentProviderConfiguration extends Schema.Class<PaymentProviderCo
 export class PaymentProviderProduct extends Schema.Class<PaymentProviderProduct>(
   "PaymentProviderProduct"
 )({
-  configuration: Schema.Record({ key: Schema.String, value: Schema.Unknown }),
+  configuration: Schema.Record(Schema.String, Schema.Unknown),
   id: Schema.String,
   paymentProviderConfigurationId: Schema.String,
   productId: Schema.String,
@@ -234,10 +233,7 @@ export class Project extends Schema.Class<Project>("Project")({
   slug: Schema.String,
 }) {}
 
-export const OrganizationIdParam = HttpApiSchema.param(
-  "organizationId",
-  Schema.String
-);
+export const OrganizationIdParam = Schema.String;
 
 // ========================================================
 // SDK
@@ -248,9 +244,9 @@ const CommonSdkHeaders = Schema.Struct({
   "x-client-locale": Schema.optional(Schema.String),
   "x-client-version": Schema.optional(Schema.String),
   "x-is-backgrounded": Schema.Literal("false"),
-  "x-is-debug-build": Schema.Literal("true", "false"),
+  "x-is-debug-build": Schema.Literals(["true", "false"]),
   "x-nonce": Schema.optional(Schema.String),
-  "x-observer-mode": Schema.Literal("true", "false"),
+  "x-observer-mode": Schema.Literals(["true", "false"]),
   "x-platform": Schema.String,
   "x-platform-brand": Schema.optional(Schema.String),
   "x-platform-device": Schema.optional(Schema.String),
@@ -286,7 +282,7 @@ export class SdkSyncCustomerAttributesBody extends Schema.Class<SdkSyncCustomerA
 }) {}
 
 export const SdkSyncTransactionBody = Schema.Struct({
-  platform: Schema.Literal("ios", "android"),
+  platform: Schema.Literals(["ios", "android"]),
   productId: Schema.String,
   purchaseDate: Schema.Number,
   purchaseToken: Schema.optional(Schema.String),
@@ -343,7 +339,7 @@ export class User extends Schema.Class<User>("User")({
 // Webhooks
 // ========================================================
 
-export const WebhookEventType = Schema.Literal(
+export const WebhookEventType = Schema.Literals([
   "customer.created",
   "customer.updated",
   "customer.deleted",
@@ -352,18 +348,18 @@ export const WebhookEventType = Schema.Literal(
   "subscription.cancelled",
   "subscription.expired",
   "purchase.completed",
-  "purchase.refunded"
-);
+  "purchase.refunded",
+]);
 
-export const WebhookEndpointStatus = Schema.Literal("active", "disabled", "failed");
+export const WebhookEndpointStatus = Schema.Literals(["active", "disabled", "failed"]);
 
-export const WebhookDeliveryStatus = Schema.Literal(
+export const WebhookDeliveryStatus = Schema.Literals([
   "pending",
   "in_progress",
   "succeeded",
   "failed",
-  "exhausted"
-);
+  "exhausted",
+]);
 
 export class WebhookEndpoint extends Schema.Class<WebhookEndpoint>(
   "WebhookEndpoint"
@@ -396,14 +392,11 @@ export class UpdateWebhookEndpointBody extends Schema.Class<UpdateWebhookEndpoin
   description: Schema.optional(Schema.NullOr(Schema.String)),
   events: Schema.optional(Schema.Array(Schema.String)),
   name: Schema.optional(Schema.String),
-  status: Schema.optional(Schema.Literal("active", "disabled")),
+  status: Schema.optional(Schema.Literals(["active", "disabled"])),
   url: Schema.optional(Schema.String),
 }) {}
 
-export const WebhookEndpointIdParam = HttpApiSchema.param(
-  "endpointId",
-  Schema.String
-);
+export const WebhookEndpointIdParam = Schema.String;
 
 export class WebhookDelivery extends Schema.Class<WebhookDelivery>(
   "WebhookDelivery"
@@ -453,10 +446,7 @@ export class WebhookDeliveryWithAttempts extends Schema.Class<WebhookDeliveryWit
   webhookEndpointId: Schema.String,
 }) {}
 
-export const WebhookDeliveryIdParam = HttpApiSchema.param(
-  "deliveryId",
-  Schema.String
-);
+export const WebhookDeliveryIdParam = Schema.String;
 
 // ========================================================
 // Feature Flags (SDK)
@@ -493,10 +483,10 @@ export class SdkResolvePaywallBody extends Schema.Class<SdkResolvePaywallBody>(
   locationSlug: Schema.String,
 }) {}
 
-const SdkResolvedPaywallShowingType = Schema.Literal(
+const SdkResolvedPaywallShowingType = Schema.Literals([
   "paywall_release",
-  "feature_flag"
-);
+  "feature_flag",
+]);
 
 const SdkResolvedPaywallShowingPaywall = Schema.Struct({
   id: Schema.String,
diff --git a/packages/shared/src/auth.ts b/packages/shared/src/auth.ts
index eaee1a6c1..84a3e6349 100644
--- a/packages/shared/src/auth.ts
+++ b/packages/shared/src/auth.ts
@@ -1,4 +1,4 @@
-import { Context, Schema } from "effect";
+import { Schema, ServiceMap } from "effect";
 
 export const SessionOrganizationSchema = Schema.Struct({
   id: Schema.String,
@@ -62,11 +62,11 @@ export const PublishableKeySessionSchema = Schema.Struct({
   user: Schema.Null,
 });
 
-export const AuthSessionSchema = Schema.Union(
+export const AuthSessionSchema = Schema.Union([
   UserSessionSchema,
   SecretKeySessionSchema,
-  PublishableKeySessionSchema
-);
+  PublishableKeySessionSchema,
+]);
 
 // type User = {
 //   name: string;
@@ -129,7 +129,4 @@ export type AnyAuthSession =
   | SecretKeySession
   | PublishableKeySession;
 
-export class AuthSession extends Context.Tag("shared/auth/AuthSession")<
-  AuthSession,
-  UserSession | SecretKeySession | PublishableKeySession
->() {}
+export class AuthSession extends ServiceMap.Service<AuthSession, UserSession | SecretKeySession | PublishableKeySession>()("shared/auth/AuthSession") {}
diff --git a/packages/shared/src/deploy-changeset.ts b/packages/shared/src/deploy-changeset.ts
index 2a7a7b42e..ccce9e9e1 100644
--- a/packages/shared/src/deploy-changeset.ts
+++ b/packages/shared/src/deploy-changeset.ts
@@ -111,7 +111,7 @@ export const PaymentProviderProductCreateChangeSchema = Schema.Struct({
   changeType: Schema.Literal("create-payment-provider-product"),
   key: Schema.String,
   payload: Schema.Struct({
-    configuration: Schema.Record({ key: Schema.String, value: Schema.Unknown }),
+    configuration: Schema.Record(Schema.String, Schema.Unknown),
     productSlug: Schema.String,
     providerId: Schema.String,
   }),
@@ -121,7 +121,7 @@ export const PaymentProviderProductUpdateChangeSchema = Schema.Struct({
   changeType: Schema.Literal("update-payment-provider-product"),
   key: Schema.String,
   payload: Schema.Struct({
-    configuration: Schema.Record({ key: Schema.String, value: Schema.Unknown }),
+    configuration: Schema.Record(Schema.String, Schema.Unknown),
     productSlug: Schema.String,
     providerId: Schema.String,
   }),
@@ -136,7 +136,7 @@ export const PaymentProviderProductDeleteChangeSchema = Schema.Struct({
   }),
 });
 
-export const ChangeSchema = Schema.Union(
+export const ChangeSchema = Schema.Union([
   PaywallLocationCreateChangeSchema,
   PaywallLocationUpdateChangeSchema,
   PaywallLocationArchiveChangeSchema,
@@ -150,8 +150,8 @@ export const ChangeSchema = Schema.Union(
   ProductPerkDeleteChangeSchema,
   PaymentProviderProductCreateChangeSchema,
   PaymentProviderProductUpdateChangeSchema,
-  PaymentProviderProductDeleteChangeSchema
-);
+  PaymentProviderProductDeleteChangeSchema,
+]);
 
 export const ChangesetSchema = Schema.Struct({
   changes: Schema.Array(ChangeSchema),
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b085b86fe..43d89e241 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,31 +6,17 @@ settings:
 
 catalogs:
   default:
-    '@effect/cli':
-      specifier: ^0.73.0
-      version: 0.73.0
     '@effect/language-service':
       specifier: ^0.64.1
       version: 0.64.1
-    '@effect/platform':
-      specifier: ^0.94.1
-      version: 0.94.1
-    '@effect/platform-node':
-      specifier: ^0.104.0
-      version: 0.104.0
-    '@effect/vitest':
-      specifier: ^0.27.0
-      version: 0.27.0
     better-auth:
       specifier: ^1.4.18
       version: 1.4.18
-    effect:
-      specifier: ^3.19.14
-      version: 3.19.14
 
 overrides:
   react: 19.1.0
   react-dom: 19.1.0
+  effect: 4.0.0-beta.23
 
 importers:
 
@@ -82,15 +68,9 @@ importers:
 
   apps/cli:
     dependencies:
-      '@effect/cli':
-        specifier: 'catalog:'
-        version: 0.73.0(@effect/platform@0.94.1(effect@3.19.14))(@effect/printer-ansi@0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14))(@effect/printer@0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)
-      '@effect/platform':
-        specifier: 'catalog:'
-        version: 0.94.1(effect@3.19.14)
       '@effect/platform-node':
-        specifier: 'catalog:'
-        version: 0.104.0(@effect/cluster@0.56.1(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(ioredis@5.9.1)
       '@voidhash/api-spec':
         specifier: workspace:*
         version: link:../../packages/api-spec
@@ -99,10 +79,10 @@ importers:
         version: link:../../packages/shared
       better-auth:
         specifier: 'catalog:'
-        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
+        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
       effect:
-        specifier: 'catalog:'
-        version: 3.19.14
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23
       esbuild-register:
         specifier: ^3.6.0
         version: 3.6.0(esbuild@0.25.12)
@@ -114,8 +94,8 @@ importers:
         specifier: 'catalog:'
         version: 0.64.1
       '@effect/vitest':
-        specifier: 'catalog:'
-        version: 0.27.0(effect@3.19.14)(vitest@3.2.4)
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@3.2.4)
       '@voidhash/react-native':
         specifier: workspace:*
         version: link:../../libraries/react-native
@@ -139,10 +119,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       vitest:
         specifier: ^3.0.9
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   examples/react-native-example:
     dependencies:
@@ -172,7 +152,7 @@ importers:
         version: 17.0.8(expo@54.0.33)(react@19.1.0)
       expo-router:
         specifier: ~6.0.23
-        version: 6.0.23(9471de8f7829ecb4f3c776787ee824a6)
+        version: 6.0.23(a9179ff0b15fe10f2a71d6f189aa330e)
       expo-splash-screen:
         specifier: ~31.0.11
         version: 31.0.13(expo@54.0.33)
@@ -234,15 +214,12 @@ importers:
 
   libraries/react-native:
     dependencies:
-      '@effect/platform':
-        specifier: 'catalog:'
-        version: 0.94.1(effect@3.19.14)
       '@react-native-async-storage/async-storage':
         specifier: ^1.24.0 || ^2.0.0
-        version: 2.2.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+        version: 2.2.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
       effect:
-        specifier: 'catalog:'
-        version: 3.19.14
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23
       neverthrow:
         specifier: ^8.2.0
         version: 8.2.0
@@ -264,37 +241,37 @@ importers:
         version: link:../../packages/shared
       expo:
         specifier: 54.0.33
-        version: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-constants:
         specifier: ~18.0.13
-        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
       expo-linking:
         specifier: ~8.0.9
-        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.28.5)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.28.5))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.7.4)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.17.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.17.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       jest:
         specifier: ~29.7.0
         version: 29.7.0(@types/node@24.10.4)
       jest-expo:
         specifier: ~54.0.17
-        version: 54.0.17(@babel/core@7.28.5)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 54.0.17(@babel/core@7.29.0)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       jest-fixed-jsdom:
         specifier: ^0.0.9
         version: 0.0.9(jest-environment-jsdom@29.7.0)
       nitro-codegen:
         specifier: 0.26.4
-        version: 0.26.4(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react:
         specifier: 19.1.0
         version: 19.1.0
       react-native:
         specifier: 0.81.5
-        version: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+        version: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
       react-native-nitro-modules:
         specifier: 0.26.4
-        version: 0.26.4(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       typescript:
         specifier: 5.9.3
         version: 5.9.3
@@ -304,12 +281,9 @@ importers:
 
   packages/api-spec:
     dependencies:
-      '@effect/platform':
-        specifier: 'catalog:'
-        version: 0.94.1(effect@3.19.14)
       effect:
-        specifier: 'catalog:'
-        version: 3.19.14
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23
     devDependencies:
       '@voidhash/tsconfig':
         specifier: workspace:*
@@ -321,8 +295,8 @@ importers:
   packages/shared:
     dependencies:
       effect:
-        specifier: 'catalog:'
-        version: 3.19.14
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23
     devDependencies:
       '@voidhash/tsconfig':
         specifier: workspace:*
@@ -368,18 +342,34 @@ packages:
     resolution: {integrity: sha512-cjQ7ZlQ0Mv3b47hABuTevyTuYN4i+loJKGeV9flcCgIK37cCXRh+L1bd3iBHlynerhQ7BhCkn2BPbQUL+rGqFg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/code-frame@7.29.0':
+    resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/compat-data@7.28.5':
     resolution: {integrity: sha512-6uFXyCayocRbqhZOB+6XcuZbkMNimwfVGFji8CTZnCzOHVGvDqzvitu1re2AU5LROliz7eQPhB8CpAMvnx9EjA==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/compat-data@7.29.0':
+    resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/core@7.28.5':
     resolution: {integrity: sha512-e7jT4DxYvIDLk1ZHmU/m/mB19rex9sv0c2ftBtjSBv+kVM/902eh0fINUzD7UwLLNR+jU585GxUJ8/EBfAM5fw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/core@7.29.0':
+    resolution: {integrity: sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/generator@7.28.5':
     resolution: {integrity: sha512-3EwLFhZ38J4VyIP6WNtt2kUdW9dokXA9Cr4IVIFHuCpZ3H8/YFOl5JjZHisrn1fATPBmKKqXzDFvh9fUwHz6CQ==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/generator@7.29.1':
+    resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-annotate-as-pure@7.27.3':
     resolution: {integrity: sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg==}
     engines: {node: '>=6.9.0'}
@@ -388,12 +378,22 @@ packages:
     resolution: {integrity: sha512-2+1thGUUWWjLTYTHZWK1n8Yga0ijBz1XAhUXcKy81rd5g6yh7hGqMp45v7cadSbEHc9G3OTv45SyneRN3ps4DQ==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-compilation-targets@7.28.6':
+    resolution: {integrity: sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-create-class-features-plugin@7.28.5':
     resolution: {integrity: sha512-q3WC4JfdODypvxArsJQROfupPBq9+lMwjKq7C33GhbFYJsufD0yd/ziwD+hJucLeWsnFPWZjsU2DNFqBPE7jwQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
 
+  '@babel/helper-create-class-features-plugin@7.28.6':
+    resolution: {integrity: sha512-dTOdvsjnG3xNT9Y0AUg1wAl38y+4Rl4sf9caSQZOXdNqVn+H+HbbJ4IyyHaIqNR6SW9oJpA/RuRjsjCw2IdIow==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
   '@babel/helper-create-regexp-features-plugin@7.28.5':
     resolution: {integrity: sha512-N1EhvLtHzOvj7QQOUCCS3NrPJP8c5W6ZXCHDn7Yialuy1iu4r5EmIYkXlKNqT99Ciw+W0mDqWoR6HWMZlFP3hw==}
     engines: {node: '>=6.9.0'}
@@ -417,12 +417,22 @@ packages:
     resolution: {integrity: sha512-0gSFWUPNXNopqtIPQvlD5WgXYI5GY2kP2cCvoT8kczjbfcfuIljTbcWrulD1CIPIX2gt1wghbDy08yE1p+/r3w==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-module-imports@7.28.6':
+    resolution: {integrity: sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-module-transforms@7.28.3':
     resolution: {integrity: sha512-gytXUbs8k2sXS9PnQptz5o0QnpLL51SwASIORY6XaBKF88nsOT0Zw9szLqlSGQDP/4TljBAD5y98p2U1fqkdsw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
 
+  '@babel/helper-module-transforms@7.28.6':
+    resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
   '@babel/helper-optimise-call-expression@7.27.1':
     resolution: {integrity: sha512-URMGH08NzYFhubNSGJrpUEphGKQwMQYBySzat5cAByY1/YgIRkULnIy3tAMeszlL/so2HbeilYloUmSpd7GdVw==}
     engines: {node: '>=6.9.0'}
@@ -431,6 +441,10 @@ packages:
     resolution: {integrity: sha512-1gn1Up5YXka3YYAHGKpbideQ5Yjf1tDa9qYcgysz+cNCXukyLl6DjPXhD3VRwSb8c0J9tA4b2+rHEZtc6R0tlw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-plugin-utils@7.28.6':
+    resolution: {integrity: sha512-S9gzZ/bz83GRysI7gAD4wPT/AI3uCnY+9xn+Mx/KPs2JwHJIz1W8PZkg2cqyt3RNOBM8ejcXhV6y8Og7ly/Dug==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-remap-async-to-generator@7.27.1':
     resolution: {integrity: sha512-7fiA521aVw8lSPeI4ZOD3vRFkoqkJcS+z4hFo82bFSH/2tNd6eJ5qCVMS5OzDmZh/kaHQeBaeyxK6wljcPtveA==}
     engines: {node: '>=6.9.0'}
@@ -443,6 +457,12 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0
 
+  '@babel/helper-replace-supers@7.28.6':
+    resolution: {integrity: sha512-mq8e+laIk94/yFec3DxSjCRD2Z0TAjhVbEJY3UQrlwVo15Lmt7C2wAUbK4bjnTs4APkwsYLTahXRraQXhb1WCg==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
   '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
     resolution: {integrity: sha512-Tub4ZKEXqbPjXgWLl2+3JpQAYBJ8+ikpQ2Ocj/q/r0LwE3UhENh7EUabyHjz2kCEsrRY83ew2DQdHluuiDQFzg==}
     engines: {node: '>=6.9.0'}
@@ -467,6 +487,10 @@ packages:
     resolution: {integrity: sha512-HFN59MmQXGHVyYadKLVumYsA9dBFun/ldYxipEjzA4196jpLZd8UjEEBLkbEkvfYreDqJhZxYAWFPtrfhNpj4w==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helpers@7.28.6':
+    resolution: {integrity: sha512-xOBvwq86HHdB7WUDTfKfT/Vuxh7gElQ+Sfti2Cy6yIWNW05P8iUslOVcZ4/sKbE+/jQaukQAdz/gf3724kYdqw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/highlight@7.25.9':
     resolution: {integrity: sha512-llL88JShoCsth8fF8R4SJnIn+WLvR6ccFxu1H3FlMhDontdcmZWf2HgIZ7AIqV3Xcck1idlohrN4EUBQz6klbw==}
     engines: {node: '>=6.9.0'}
@@ -476,6 +500,11 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
+  '@babel/parser@7.29.0':
+    resolution: {integrity: sha512-IyDgFV5GeDUVX4YdF/3CPULtVGSXXMLh1xVIgdCgxApktqnQV0r7/8Nqthg+8YLGaAtdyIlo2qIdZrbCv4+7ww==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
   '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.28.5':
     resolution: {integrity: sha512-87GDMS3tsmMSi/3bWOte1UblL+YUTFMV8SZPZ2eSEL17s74Cw/l63rR6NmGVKMYW2GYi85nE+/d6Hw5N0bEk2Q==}
     engines: {node: '>=6.9.0'}
@@ -596,6 +625,12 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0-0
 
+  '@babel/plugin-syntax-jsx@7.28.6':
+    resolution: {integrity: sha512-wgEmr06G6sIpqr8YDwA2dSRTE3bJ+V0IfpzfSY3Lfgd7YWOaAdlykvJi13ZKBt8cZHfgH1IXN+CL656W3uUa4w==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
   '@babel/plugin-syntax-logical-assignment-operators@7.10.4':
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
@@ -644,6 +679,12 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0-0
 
+  '@babel/plugin-syntax-typescript@7.28.6':
+    resolution: {integrity: sha512-+nDNmQye7nlnuuHDboPbGm00Vqg3oO8niRRL27/4LYHUsHYh0zJ1xWOz0uRwNFmM1Avzk8wZbc6rdiYhomzv/A==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
   '@babel/plugin-syntax-unicode-sets-regex@7.18.6':
     resolution: {integrity: sha512-727YkEAPwSIQTv5im8QHz3upqp92JTWhidIC81Tdx4VJYIte/VndKf1qKrfnnhPLiPghStWfvC/iFaMCQu7Nqg==}
     engines: {node: '>=6.9.0'}
@@ -806,6 +847,12 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0-0
 
+  '@babel/plugin-transform-modules-commonjs@7.28.6':
+    resolution: {integrity: sha512-jppVbf8IV9iWWwWTQIxJMAJCWBuuKx71475wHwYytrRGQ2CWiDvYlADQno3tcYpS/T2UUWFQp3nVtYfK/YBQrA==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
   '@babel/plugin-transform-modules-systemjs@7.28.5':
     resolution: {integrity: sha512-vn5Jma98LCOeBy/KpeQhXcV2WZgaRUtjwQmjoBuLNlOmkg0fB5pdvYVeWRYI69wWKwK2cD1QbMiUQnoujWvrew==}
     engines: {node: '>=6.9.0'}
@@ -992,6 +1039,12 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0-0
 
+  '@babel/plugin-transform-typescript@7.28.6':
+    resolution: {integrity: sha512-0YWL2RFxOqEm9Efk5PvreamxPME8OyY0wM5wh5lHjF+VtVhdneCWGzZeSqzOfiobVqQaNCd2z0tQvnI9DaPWPw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
   '@babel/plugin-transform-unicode-escapes@7.27.1':
     resolution: {integrity: sha512-Ysg4v6AmF26k9vpfFuTZg8HRfVWzsh1kVfowA23y9j/Gu6dOuahdUVhkLqpObp3JIv27MLSii6noRnuKN8H0Mg==}
     engines: {node: '>=6.9.0'}
@@ -1053,14 +1106,26 @@ packages:
     resolution: {integrity: sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/template@7.28.6':
+    resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/traverse@7.28.5':
     resolution: {integrity: sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/traverse@7.29.0':
+    resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/types@7.28.5':
     resolution: {integrity: sha512-qQ5m48eI/MFLQ5PxQj4PFaprjyCTLI37ElWMmNs0K8Lk3dVeOdNpB3ks8jc7yM5CDmVC73eMVk/trk3fgmrUpA==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/types@7.29.0':
+    resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
+    engines: {node: '>=6.9.0'}
+
   '@bcoe/v8-coverage@0.2.3':
     resolution: {integrity: sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==}
 
@@ -1147,106 +1212,28 @@ packages:
   '@drizzle-team/brocli@0.10.2':
     resolution: {integrity: sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==}
 
-  '@effect/cli@0.73.0':
-    resolution: {integrity: sha512-KkRtFjfyG52kQ6Z3ZEjwytfKZQACsLzn/RI2jKKxMJDebY9BQganOiE3VGCT4slU3Zisur6SP//ghM0vCLQs4g==}
-    peerDependencies:
-      '@effect/platform': ^0.94.0
-      '@effect/printer': ^0.47.0
-      '@effect/printer-ansi': ^0.47.0
-      effect: ^3.19.13
-
-  '@effect/cluster@0.56.1':
-    resolution: {integrity: sha512-gnrsH6kfrUjn+82j/bw1IR4yFqJqV8tc7xZvrbJPRgzANycc6K1hu3LMg548uYbUkTzD8YYyqrSatMO1mkQpzw==}
-    peerDependencies:
-      '@effect/platform': ^0.94.1
-      '@effect/rpc': ^0.73.0
-      '@effect/sql': ^0.49.0
-      '@effect/workflow': ^0.16.0
-      effect: ^3.19.14
-
-  '@effect/experimental@0.58.0':
-    resolution: {integrity: sha512-IEP9sapjF6rFy5TkoqDPc86st/fnqUfjT7Xa3pWJrFGr1hzaMXHo+mWsYOZS9LAOVKnpHuVziDK97EP5qsCHVA==}
-    peerDependencies:
-      '@effect/platform': ^0.94.0
-      effect: ^3.19.13
-      ioredis: ^5
-      lmdb: ^3
-    peerDependenciesMeta:
-      ioredis:
-        optional: true
-      lmdb:
-        optional: true
-
   '@effect/language-service@0.64.1':
     resolution: {integrity: sha512-1S7Xr2t9mygR6QyiIdCQUvPwSvcf5EBpnWmKa/8rC4P0btFfw/RiWRI8bvFI2AW+U4KStMUHYxPu4QEsk4y8bg==}
     hasBin: true
 
-  '@effect/platform-node-shared@0.57.0':
-    resolution: {integrity: sha512-QXuvmLNlABCQLcTl+lN1YPhKosR6KqArPYjC2reU0fb5lroCo3YRb/aGpXIgLthHzQL8cLU5XMGA3Cu5hKY2Tw==}
-    peerDependencies:
-      '@effect/cluster': ^0.56.0
-      '@effect/platform': ^0.94.0
-      '@effect/rpc': ^0.73.0
-      '@effect/sql': ^0.49.0
-      effect: ^3.19.13
-
-  '@effect/platform-node@0.104.0':
-    resolution: {integrity: sha512-2ZkUDDTxLD95ARdYIKBx4tdIIgqA3cwb3jlnVVBxmHUf0Pg5N2HdMuD0Q+CXQ7Q94FDwnLW3ZvaSfxDh6FvrNw==}
-    peerDependencies:
-      '@effect/cluster': ^0.56.0
-      '@effect/platform': ^0.94.0
-      '@effect/rpc': ^0.73.0
-      '@effect/sql': ^0.49.0
-      effect: ^3.19.13
-
-  '@effect/platform@0.94.1':
-    resolution: {integrity: sha512-SlL8OMTogHmMNnFLnPAHHo3ua1yrB1LNQOVQMiZsqYu9g3216xjr0gn5WoDgCxUyOdZcseegMjWJ7dhm/2vnfg==}
-    peerDependencies:
-      effect: ^3.19.14
-
-  '@effect/printer-ansi@0.46.0':
-    resolution: {integrity: sha512-b+wCoCtmEF/Duobsid2N1JoGvZLiA9Fkcz1G1x/dhXVtsZqaGPa6jNYctopmzBhyuS53kK9XpqnFhEbF6+/5Ug==}
-    peerDependencies:
-      '@effect/typeclass': ^0.37.0
-      effect: ^3.18.0
-
-  '@effect/printer@0.46.0':
-    resolution: {integrity: sha512-8RbuXDY9ND3M7klt2wCrx4gCDlfecH3bFJl8Co4UenRDiAMa0WoI8GKPqlNA3FonryNYgrMN0TDnk39Yp5GUbQ==}
-    peerDependencies:
-      '@effect/typeclass': ^0.37.0
-      effect: ^3.18.0
-
-  '@effect/rpc@0.73.0':
-    resolution: {integrity: sha512-iMPf6tTriz8sK0l5x4koFId8Hz5nFptHYg8WqyjHGIIVLTpZxuiSqhmXZG7FnAs5N2n6uCEws4wWGcIgXNUrFg==}
-    peerDependencies:
-      '@effect/platform': ^0.94.0
-      effect: ^3.19.13
-
-  '@effect/sql@0.46.0':
-    resolution: {integrity: sha512-nm9TuTTG7gLmJlIPkf71wA5lXArSvkpm1oYoIF+rhf01wef+1ujz9Mv1SfuzYbzsk7W9+OXUIRMxz/nSlKkiGQ==}
-    peerDependencies:
-      '@effect/experimental': ^0.56.0
-      '@effect/platform': ^0.92.0
-      effect: ^3.18.0
-
-  '@effect/typeclass@0.37.0':
-    resolution: {integrity: sha512-8PkVWx82gkavYYMDlRV80pM1Ss0dL84wabkho6JjaAuDr+gJKx87N0T6Z+UGroySslsfw1FW1dMibUPH1BXX1w==}
+  '@effect/platform-node-shared@4.0.0-beta.23':
+    resolution: {integrity: sha512-iYy0oPMAKnpWEum1u8v42BcDAkUEK+AuiYGMHAnf+GJYlQTYbIcIQcLjAQ68yQuDf3n+la91TSs0MaiA3F2Svw==}
+    engines: {node: '>=18.0.0'}
     peerDependencies:
-      effect: ^3.18.0
+      effect: 4.0.0-beta.23
 
-  '@effect/vitest@0.27.0':
-    resolution: {integrity: sha512-8bM7n9xlMUYw9GqPIVgXFwFm2jf27m/R7psI64PGpwU5+26iwyxp9eAXEsfT5S6lqztYfpQQ1Ubp5o6HfNYzJQ==}
+  '@effect/platform-node@4.0.0-beta.23':
+    resolution: {integrity: sha512-7CNVrUbxXXxXsUWtyJrrBMpf5JtjDJpuhIPIQssACYTtD711EQdy3itHHxXrIjXf7vBhx0XrekQ3PJUSN9usIw==}
+    engines: {node: '>=18.0.0'}
     peerDependencies:
-      effect: ^3.19.0
-      vitest: ^3.2.0
+      effect: 4.0.0-beta.23
+      ioredis: ^5.7.0
 
-  '@effect/workflow@0.16.0':
-    resolution: {integrity: sha512-MiAdlxx3TixkgHdbw+Yf1Z3tHAAE0rOQga12kIydJqj05Fnod+W/I+kQGRMY/XWRg+QUsVxhmh1qTr7Ype6lrw==}
+  '@effect/vitest@4.0.0-beta.23':
+    resolution: {integrity: sha512-2ezxm8jpBuoY9UsrwUyGsbs1lwKodR6NGV/g/rypoPN3L6WABXOcZs2mhFmY8y5EXnGZnSgsWhpxwYlEo29jcA==}
     peerDependencies:
-      '@effect/experimental': ^0.58.0
-      '@effect/platform': ^0.94.0
-      '@effect/rpc': ^0.73.0
-      effect: ^3.19.13
+      effect: 4.0.0-beta.23
+      vitest: ^3.0.0 || ^4.0.0
 
   '@emnapi/core@1.7.1':
     resolution: {integrity: sha512-o1uhUASyo921r2XtHYOHy7gdkGLge8ghBEQHMWmyJFoXlpU58kIrhhN3w26lpQb6dspetweapMn2CSNwQ8I4wg==}
@@ -1254,6 +1241,9 @@ packages:
   '@emnapi/runtime@1.7.1':
     resolution: {integrity: sha512-PVtJr5CmLwYAU9PZDMITZoR5iAOShYREoR45EyyLrbntV50mdePTgUn4AmOw90Ifcj+x2kRjdzr1HP3RrNiHGA==}
 
+  '@emnapi/runtime@1.8.1':
+    resolution: {integrity: sha512-mehfKSMWjjNol8659Z8KxEMrdSJDDot5SXMq00dM8BN4o+CLNXQ0xH2V7EchNHV4RmbZLmmPdEaXZc5H2FXmDg==}
+
   '@emnapi/wasi-threads@1.1.0':
     resolution: {integrity: sha512-WI0DdZ8xFSbgMjR1sFsKABJ/C5OnRrjT06JXbZKexJGrDuPTzZdDYfFlsgcCXCyf+suG5QU2e/y1Wo2V/OapLQ==}
 
@@ -2015,8 +2005,8 @@ packages:
     resolution: {integrity: sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==}
     engines: {node: '>=18.18'}
 
-  '@img/colour@1.0.0':
-    resolution: {integrity: sha512-A5P/LfWGFSl6nsckYtjw9da+19jB8hkJ6ACTGcDfEJ0aE+l2n2El7dsVM7UVHZQ9s2lmYMWlrS21YLy2IR1LUw==}
+  '@img/colour@1.1.0':
+    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
     engines: {node: '>=18'}
 
   '@img/sharp-darwin-arm64@0.34.5':
@@ -2411,88 +2401,6 @@ packages:
     resolution: {integrity: sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==}
     engines: {node: '>=8.0.0'}
 
-  '@parcel/watcher-android-arm64@2.5.1':
-    resolution: {integrity: sha512-KF8+j9nNbUN8vzOFDpRMsaKBHZ/mcjEjMToVMJOhTozkDonQFFrRcfdLWn6yWKCmJKmdVxSgHiYvTCef4/qcBA==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [arm64]
-    os: [android]
-
-  '@parcel/watcher-darwin-arm64@2.5.1':
-    resolution: {integrity: sha512-eAzPv5osDmZyBhou8PoF4i6RQXAfeKL9tjb3QzYuccXFMQU0ruIc/POh30ePnaOyD1UXdlKguHBmsTs53tVoPw==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@parcel/watcher-darwin-x64@2.5.1':
-    resolution: {integrity: sha512-1ZXDthrnNmwv10A0/3AJNZ9JGlzrF82i3gNQcWOzd7nJ8aj+ILyW1MTxVk35Db0u91oD5Nlk9MBiujMlwmeXZg==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@parcel/watcher-freebsd-x64@2.5.1':
-    resolution: {integrity: sha512-SI4eljM7Flp9yPuKi8W0ird8TI/JK6CSxju3NojVI6BjHsTyK7zxA9urjVjEKJ5MBYC+bLmMcbAWlZ+rFkLpJQ==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@parcel/watcher-linux-arm-glibc@2.5.1':
-    resolution: {integrity: sha512-RCdZlEyTs8geyBkkcnPWvtXLY44BCeZKmGYRtSgtwwnHR4dxfHRG3gR99XdMEdQ7KeiDdasJwwvNSF5jKtDwdA==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [arm]
-    os: [linux]
-
-  '@parcel/watcher-linux-arm-musl@2.5.1':
-    resolution: {integrity: sha512-6E+m/Mm1t1yhB8X412stiKFG3XykmgdIOqhjWj+VL8oHkKABfu/gjFj8DvLrYVHSBNC+/u5PeNrujiSQ1zwd1Q==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [arm]
-    os: [linux]
-
-  '@parcel/watcher-linux-arm64-glibc@2.5.1':
-    resolution: {integrity: sha512-LrGp+f02yU3BN9A+DGuY3v3bmnFUggAITBGriZHUREfNEzZh/GO06FF5u2kx8x+GBEUYfyTGamol4j3m9ANe8w==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@parcel/watcher-linux-arm64-musl@2.5.1':
-    resolution: {integrity: sha512-cFOjABi92pMYRXS7AcQv9/M1YuKRw8SZniCDw0ssQb/noPkRzA+HBDkwmyOJYp5wXcsTrhxO0zq1U11cK9jsFg==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@parcel/watcher-linux-x64-glibc@2.5.1':
-    resolution: {integrity: sha512-GcESn8NZySmfwlTsIur+49yDqSny2IhPeZfXunQi48DMugKeZ7uy1FX83pO0X22sHntJ4Ub+9k34XQCX+oHt2A==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [x64]
-    os: [linux]
-
-  '@parcel/watcher-linux-x64-musl@2.5.1':
-    resolution: {integrity: sha512-n0E2EQbatQ3bXhcH2D1XIAANAcTZkQICBPVaxMeaCVBtOpBZpWJuf7LwyWPSBDITb7In8mqQgJ7gH8CILCURXg==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [x64]
-    os: [linux]
-
-  '@parcel/watcher-win32-arm64@2.5.1':
-    resolution: {integrity: sha512-RFzklRvmc3PkjKjry3hLF9wD7ppR4AKcWNzH7kXR7GUe0Igb3Nz8fyPwtZCSquGrhU5HhUNDr/mKBqj7tqA2Vw==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@parcel/watcher-win32-ia32@2.5.1':
-    resolution: {integrity: sha512-c2KkcVN+NJmuA7CGlaGD1qJh1cLfDnQsHjE89E60vUEMlqduHGCdCLJCID5geFVM0dOtA3ZiIO8BoEQmzQVfpQ==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [ia32]
-    os: [win32]
-
-  '@parcel/watcher-win32-x64@2.5.1':
-    resolution: {integrity: sha512-9lHBdJITeNR++EvSQVUcaZoWupyHfXe1jZvGZ06O/5MflPcuPLtEphScIBL+AiCWBO46tDSHzWyD0uDmmZqsgA==}
-    engines: {node: '>= 10.0.0'}
-    cpu: [x64]
-    os: [win32]
-
-  '@parcel/watcher@2.5.1':
-    resolution: {integrity: sha512-dfUnCxiN9H4ap84DvD2ubjw+3vUNpstxa0TneY/Paat8a3R4uQZDLSvWjmznAY/DoahqTHl9V46HF/Zs3F29pg==}
-    engines: {node: '>= 10.0.0'}
-
   '@pkgr/core@0.2.9':
     resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
@@ -3019,8 +2927,8 @@ packages:
       react-dom: 19.1.0
       vite: '>=7.0.0'
 
-  '@tanstack/react-store@0.8.0':
-    resolution: {integrity: sha512-1vG9beLIuB7q69skxK9r5xiLN3ztzIPfSQSs0GfeqWGO2tGIyInZx0x1COhpx97RKaONSoAb8C3dxacWksm1ow==}
+  '@tanstack/react-store@0.8.1':
+    resolution: {integrity: sha512-XItJt+rG8c5Wn/2L/bnxys85rBpm0BfMbhb4zmPVLXAKY9POrp1xd6IbU4PKoOI+jSEGc3vntPRfLGSgXfE2Ig==}
     peerDependencies:
       react: 19.1.0
       react-dom: 19.1.0
@@ -3058,6 +2966,10 @@ packages:
     resolution: {integrity: sha512-/eFGKCiix1SvjxwgzrmH4pHjMiMxc+GA4nIbgEkG2RdAJqyxLcRhd7RPLG0/LZaJ7d0ad3jrtRqsHLv2152Vbw==}
     engines: {node: '>=12'}
 
+  '@tanstack/router-utils@1.161.4':
+    resolution: {integrity: sha512-r8TpjyIZoqrXXaf2DDyjd44gjGBoyE+/oEaaH68yLI9ySPO1gUWmQENZ1MZnmBnpUGN24NOZxdjDLc8npK0SAw==}
+    engines: {node: '>=20.19'}
+
   '@tanstack/server-functions-plugin@1.142.1':
     resolution: {integrity: sha512-ltTOj6dIDlRV3M8+PzontDYFMnIQ+icUnD+OKzIRfKo6bbvC0qvy8ttuWmVJxmqHy9xsWgkNt4gZrKVjtWXIhQ==}
     engines: {node: '>=12'}
@@ -3080,8 +2992,8 @@ packages:
     resolution: {integrity: sha512-tB8oZLvTn3Ry3BM2d3jk+lOaI9ZYFR7N8EmjL6urmIWqgMqzuhgFuz+xqq2XveoPBdaSLeY5N6RsONH4tV4+dA==}
     engines: {node: '>=22.12.0'}
 
-  '@tanstack/store@0.8.0':
-    resolution: {integrity: sha512-Om+BO0YfMZe//X2z0uLF2j+75nQga6TpTJgLJQBiq85aOyZNIhkCgleNcud2KQg4k4v9Y9l+Uhru3qWMPGTOzQ==}
+  '@tanstack/store@0.8.1':
+    resolution: {integrity: sha512-PtOisLjUZPz5VyPRSCGjNOlwTvabdTBQ2K80DpVL1chGVr35WRxfeavAPdNq6pm/t7F8GhoR2qtmkkqtCEtHYw==}
 
   '@tanstack/virtual-file-routes@1.141.0':
     resolution: {integrity: sha512-CJrWtr6L9TVzEImm9S7dQINx+xJcYP/aDkIi6gnaWtIgbZs1pnzsE0yJc2noqXZ+yAOqLx3TBGpBEs9tS0P9/A==}
@@ -3166,6 +3078,9 @@ packages:
   '@types/node@24.10.4':
     resolution: {integrity: sha512-vnDVpYPMzs4wunl27jHrfmwojOGKya0xyM3sH+UE5iv5uPS6vX7UIoh6m+vQc5LGBq52HBKPIn/zcSZVzeDEZg==}
 
+  '@types/node@25.3.3':
+    resolution: {integrity: sha512-DpzbrH7wIcBaJibpKo9nnSQL0MTRdnWttGyE5haGwK86xgMOkFLp7vEyfQPGLOJh5wNYiJ3V9PmUMDhV9u8kkQ==}
+
   '@types/react-dom@19.2.3':
     resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==}
     peerDependencies:
@@ -3180,6 +3095,9 @@ packages:
   '@types/tough-cookie@4.0.5':
     resolution: {integrity: sha512-/Ad8+nIOV7Rl++6f1BdKxFSMgmoqEoYbHRpPcx3JEfv8VRsQe9Z4mCXeJBzxs7mbHY/XOZZuXlRNfhpVPbs6ZA==}
 
+  '@types/ws@8.18.1':
+    resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
+
   '@types/yargs-parser@21.0.3':
     resolution: {integrity: sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==}
 
@@ -3463,6 +3381,11 @@ packages:
     engines: {node: '>=0.4.0'}
     hasBin: true
 
+  acorn@8.16.0:
+    resolution: {integrity: sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==}
+    engines: {node: '>=0.4.0'}
+    hasBin: true
+
   agent-base@6.0.2:
     resolution: {integrity: sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==}
     engines: {node: '>= 6.0.0'}
@@ -3604,8 +3527,8 @@ packages:
     resolution: {integrity: sha512-NZKeq9AfyQvEeNlN0zSYAaWrmBffJh3IELMZfRpJVWgrpEbtEpnjvzqBPf+mxoI287JohRDoa+/nsfqqiZmF6g==}
     engines: {node: '>= 6.0.0'}
 
-  babel-dead-code-elimination@1.0.11:
-    resolution: {integrity: sha512-mwq3W3e/pKSI6TG8lXMiDWvEi1VXYlSBlJlB3l+I0bAb5u1RNUl88udos85eOPNK3m5EXK9uO7d2g08pesTySQ==}
+  babel-dead-code-elimination@1.0.12:
+    resolution: {integrity: sha512-GERT7L2TiYcYDtYk1IpD+ASAYXjKbLTDPhBtYj7X1NuRMDTMtAx9kyBenub1Ev41lo91OHCKdmP+egTDmfQ7Ig==}
 
   babel-jest@29.7.0:
     resolution: {integrity: sha512-BrvGY3xZSwEcCzKvKsCi2GgHqDqsYkOP4/by5xCgIwGXQxIEh+8ew3gmrE1y7XRR6LHZIj6yLYnUi/mm2KXKBg==}
@@ -3868,6 +3791,9 @@ packages:
   caniuse-lite@1.0.30001761:
     resolution: {integrity: sha512-JF9ptu1vP2coz98+5051jZ4PwQgd2ni8A+gYSN7EA7dPKIMf0pDlSUxhdmVOaV3/fYK5uWBkgSXJaRLr4+3A6g==}
 
+  caniuse-lite@1.0.30001775:
+    resolution: {integrity: sha512-s3Qv7Lht9zbVKE9XoTyRG6wVDCKdtOFIjBGg3+Yhn6JaytuNKPIjBMTMIY1AnOH3seL5mvF+x33oGAyK3hVt3A==}
+
   chai@5.3.3:
     resolution: {integrity: sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==}
     engines: {node: '>=18'}
@@ -3903,8 +3829,8 @@ packages:
   cheerio-select@2.1.0:
     resolution: {integrity: sha512-9v9kG0LvzrlcungtnJtpGNxY+fzECQKhK4EGJX2vByejiMX84MFNQw4UxPJl3bFbTMw+Dfs37XaIkCwTZfLh4g==}
 
-  cheerio@1.1.2:
-    resolution: {integrity: sha512-IkxPpb5rS/d1IiLbHMgfPuS0FgiWTtFIm/Nj+2woXDLTZ7fOT2eqzgYbdMlLweqlHbsZjxEChoVK+7iph7jyQg==}
+  cheerio@1.2.0:
+    resolution: {integrity: sha512-WDrybc/gKFpTYQutKIK6UvfcuxijIZfMfXaYm8NMsPQxSYvf+13fXUJ4rztGGbJcBQ/GF55gvrZ0Bc0bj/mqvg==}
     engines: {node: '>=20.18.1'}
 
   chokidar@3.6.0:
@@ -4201,11 +4127,6 @@ packages:
     resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
     engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
 
-  detect-libc@1.0.3:
-    resolution: {integrity: sha512-pGjwhsmsp4kL2RTz08wcOlGN83otlqHeD/Z5T8GXZB+/YcpQ/dgo+lbU8ZsGxV0HIvqqxo9l7mqYwyYMD9bKDg==}
-    engines: {node: '>=0.10'}
-    hasBin: true
-
   detect-libc@2.1.2:
     resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
     engines: {node: '>=8'}
@@ -4221,8 +4142,8 @@ packages:
     resolution: {integrity: sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
 
-  diff@8.0.2:
-    resolution: {integrity: sha512-sSuxWU5j5SR9QQji/o2qMvqRNYRDOcBTgsJ/DeCf4iSN4gW+gNMXM7wFIP+fdXZxoNiAnHUTGjCr+TSWXdRDKg==}
+  diff@8.0.3:
+    resolution: {integrity: sha512-qejHi7bcSD4hQAZE0tNAawRK1ZtafHDmMTMkrrIGgSLl7hTnQHmKCeB45xAcbfTqK2zowkM3j3bHt/4b/ARbYQ==}
     engines: {node: '>=0.3.1'}
 
   dir-glob@3.0.1:
@@ -4382,8 +4303,8 @@ packages:
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
-  effect@3.19.14:
-    resolution: {integrity: sha512-3vwdq0zlvQOxXzXNKRIPKTqZNMyGCdaFUBfMPqpsyzZDre67kgC1EEHDV4EoQTovJ4w5fmJW756f86kkuz7WFA==}
+  effect@4.0.0-beta.23:
+    resolution: {integrity: sha512-bu6Lv2Tjs8QBMz9/TfPrNur6wqRCykW0rOZCJuaylt6g6sT28niL9L4Aeak/7XTsnYp5bCWaqRrSYANBVkPFQw==}
 
   electron-to-chromium@1.5.267:
     resolution: {integrity: sha512-0Drusm6MVRXSOJpGbaSVgcQsuB4hEkMpHXaVstcPmhu5LIedxs1xNK/nIxmQIU/RPC0+1/o0AVZfBTkTNJOdUw==}
@@ -4418,6 +4339,10 @@ packages:
     resolution: {integrity: sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==}
     engines: {node: '>=0.12'}
 
+  entities@7.0.1:
+    resolution: {integrity: sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==}
+    engines: {node: '>=0.12'}
+
   env-editor@0.4.2:
     resolution: {integrity: sha512-ObFo8v4rQJAE59M69QzwloxPZtd33TpYEIjtKD1rrFDcM1Gd7IkDxEBU+HriziN6HSHQnBJi8Dmy+JWkav5HKA==}
     engines: {node: '>=8'}
@@ -4899,9 +4824,9 @@ packages:
   exsolve@1.0.8:
     resolution: {integrity: sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA==}
 
-  fast-check@3.23.2:
-    resolution: {integrity: sha512-h5+1OzzfCC3Ef7VbtKdcv7zsstUQwUDlYpUTvjeUsJAssPgLn7QzbboPtL5ro04Mq0rPOsMzl7q5hIbRs2wD1A==}
-    engines: {node: '>=8.0.0'}
+  fast-check@4.5.3:
+    resolution: {integrity: sha512-IE9csY7lnhxBnA8g/WI5eg/hygA6MGWJMSNfFRrBlXUciADEhS1EDB0SIsMSvzubzIlOBbVITSsypCsW717poA==}
+    engines: {node: '>=12.17.0'}
 
   fast-deep-equal@3.1.3:
     resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
@@ -4977,6 +4902,9 @@ packages:
   flatted@3.3.3:
     resolution: {integrity: sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==}
 
+  flatted@3.3.4:
+    resolution: {integrity: sha512-3+mMldrTAPdta5kjX2G2J7iX4zxtnwpdA8Tr2ZSjkyPSanvbZAcy6flmtnXbEybHrDcU9641lxrMfFuUxVz9vA==}
+
   flow-enums-runtime@0.0.6:
     resolution: {integrity: sha512-3PYnM29RFXwvAN6Pc/scUfkI7RwhQ/xqyLUyPNlXUp9S40zI8nup9tUSrTLSVnWGBN38FNiGWbwZOB6uR4OGdw==}
 
@@ -5183,8 +5111,8 @@ packages:
   html-escaper@2.0.2:
     resolution: {integrity: sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==}
 
-  htmlparser2@10.0.0:
-    resolution: {integrity: sha512-TwAZM+zE5Tq3lrEHvOlvwgj1XLWQCtaaibSN11Q+gGBAS7Y1uZSWwXXRe4iF6OXnaq1riyQAPFOBtYc77Mxq0g==}
+  htmlparser2@10.1.0:
+    resolution: {integrity: sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==}
 
   http-errors@2.0.1:
     resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
@@ -5210,8 +5138,8 @@ packages:
     resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
     engines: {node: '>=0.10.0'}
 
-  iconv-lite@0.7.1:
-    resolution: {integrity: sha512-2Tth85cXwGFHfvRgZWszZSvdo+0Xsqmw8k8ZwxScfcBneNUraK+dxRxRm24nszx80Y0TVio8kKLt5sLE7ZCLlw==}
+  iconv-lite@0.7.2:
+    resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==}
     engines: {node: '>=0.10.0'}
 
   ieee754@1.2.1:
@@ -5260,9 +5188,9 @@ packages:
   ini@1.3.8:
     resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
 
-  ini@4.1.3:
-    resolution: {integrity: sha512-X7rqawQBvfdjS10YU1y1YVreA3SsLrW9dX2CewP2EbBJM4ypVNLDkO5y04gejPwKIY9lR+7r9gn3rFPt/kmWFg==}
-    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+  ini@6.0.0:
+    resolution: {integrity: sha512-IBTdIkzZNOpqm7q3dRqJvMaldXjDHWkEDfrwGEQTs5eaQMWV+djAhR+wahyNNMAa+qpbDUhBMVt4ZKNwpPm7xQ==}
+    engines: {node: ^20.17.0 || >=22.9.0}
 
   internal-slot@1.1.0:
     resolution: {integrity: sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==}
@@ -5422,8 +5350,8 @@ packages:
   isarray@2.0.5:
     resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
 
-  isbot@5.1.32:
-    resolution: {integrity: sha512-VNfjM73zz2IBZmdShMfAUg10prm6t7HFUQmNAEOAVS4YH92ZrZcvkMcGX6cIgBJAzWDzPent/EeAtYEHNPNPBQ==}
+  isbot@5.1.35:
+    resolution: {integrity: sha512-waFfC72ZNfwLLuJ2iLaoVaqcNo+CAaLR7xCpAn0Y5WfGzkNHv7ZN39Vbi1y+kb+Zs46XHOX3tZNExroFUPX+Kg==}
     engines: {node: '>=18'}
 
   isexe@2.0.0:
@@ -5871,8 +5799,8 @@ packages:
   lru-cache@5.1.1:
     resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
 
-  lru.min@1.1.3:
-    resolution: {integrity: sha512-Lkk/vx6ak3rYkRR0Nhu4lFUT2VDnQSxBe8Hbl7f36358p6ow8Bnvr8lrLt98H8J1aGxfhbX4Fs5tYg2+FTwr5Q==}
+  lru.min@1.1.4:
+    resolution: {integrity: sha512-DqC6n3QQ77zdFpCMASA1a3Jlb64Hv2N2DciFGkO/4L9+q/IpIAuRlKOvCXabtRW6cQf8usbmM6BE/TOPysCdIA==}
     engines: {bun: '>=1.0.0', deno: '>=1.30.0', node: '>=8.0.0'}
 
   magic-string@0.30.21:
@@ -5995,9 +5923,9 @@ packages:
     engines: {node: '>=4'}
     hasBin: true
 
-  mime@3.0.0:
-    resolution: {integrity: sha512-jSCU7/VB1loIWBZe14aEYHU/+1UMEHoaO7qxCOVJOw9GgH72VAWppxNcjU+x9a2k3GSIBXNKxXQFqRvvZ7vr3A==}
-    engines: {node: '>=10.0.0'}
+  mime@4.1.0:
+    resolution: {integrity: sha512-X5ju04+cAzsojXKes0B/S4tcYtFAJ6tTMuSPBEn9CPGlrWr8Fiw7qYeLT0XyH80HSoAoqWCaz+MWKh22P7G1cw==}
+    engines: {node: '>=16'}
     hasBin: true
 
   mimic-fn@1.2.0:
@@ -6134,9 +6062,6 @@ packages:
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     hasBin: true
 
-  node-addon-api@7.1.1:
-    resolution: {integrity: sha512-5m3bsyrjFWE1xf7nz7YXdN4udnVtXK6/Yfgn5qnahL6bCkf2yKt4k3nuTKAtT4r3IG8JNR2ncsIMdZuAzJjHQQ==}
-
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
@@ -6431,8 +6356,8 @@ packages:
     engines: {node: '>=10.13.0'}
     hasBin: true
 
-  prettier@3.7.4:
-    resolution: {integrity: sha512-v6UNi1+3hSlVvv8fSaoUbggEM5VErKmmpGA7Pl3HF8V6uKY7rvClBOJlH6yNwQtfTueNkGVpOv/mtWL9L4bgRA==}
+  prettier@3.8.1:
+    resolution: {integrity: sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg==}
     engines: {node: '>=14'}
     hasBin: true
 
@@ -6476,6 +6401,9 @@ packages:
   pure-rand@6.1.0:
     resolution: {integrity: sha512-bVWawvoZoBYpp6yIoQtQXHZjmz35RSVHnUOTefl8Vcjr8snTPY1wnpSPMWekcFwbxI6gtmT7rSYPFvz71ldiOA==}
 
+  pure-rand@7.0.1:
+    resolution: {integrity: sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==}
+
   qrcode-terminal@0.11.0:
     resolution: {integrity: sha512-Uu7ii+FQy4Qf82G4xu7ShHhjhGahEpCWc3x8UavY3CTcWV+ufmmCtwkr7ZKsX42jdL0kr1B5FKUeqJvAn51jzQ==}
     hasBin: true
@@ -6829,6 +6757,11 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
+  semver@7.7.4:
+    resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
   send@0.19.2:
     resolution: {integrity: sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==}
     engines: {node: '>= 0.8.0'}
@@ -6840,14 +6773,14 @@ packages:
     resolution: {integrity: sha512-ghgmKt5o4Tly5yEG/UJp8qTd0AN7Xalw4XBtDEKP655B699qMEtra1WlXeE6WIvdEG481JvRxULKsInq/iNysw==}
     engines: {node: '>=0.10.0'}
 
-  seroval-plugins@1.4.0:
-    resolution: {integrity: sha512-zir1aWzoiax6pbBVjoYVd0O1QQXgIL3eVGBMsBsNmM8Ukq90yGaWlfx0AB9dTS8GPqrOrbXn79vmItCUP9U3BQ==}
+  seroval-plugins@1.5.0:
+    resolution: {integrity: sha512-EAHqADIQondwRZIdeW2I636zgsODzoBDwb3PT/+7TLDWyw1Dy/Xv7iGUIEXXav7usHDE9HVhOU61irI3EnyyHA==}
     engines: {node: '>=10'}
     peerDependencies:
       seroval: ^1.0
 
-  seroval@1.4.1:
-    resolution: {integrity: sha512-9GOc+8T6LN4aByLN75uRvMbrwY5RDBW6lSlknsY4LEa9ZmWcxKcRe1G/Q3HZXjltxMHTrStnvrwAICxZrhldtg==}
+  seroval@1.5.0:
+    resolution: {integrity: sha512-OE4cvmJ1uSPrKorFIH9/w/Qwuvi/IMcGbv5RKgcJ/zjA/IohDLU6SVaxFN9FwajbP7nsX0dQqMDes1whk3y+yw==}
     engines: {node: '>=10'}
 
   serve-static@1.16.3:
@@ -7429,6 +7362,9 @@ packages:
   ufo@1.6.1:
     resolution: {integrity: sha512-9a4/uxlTWJ4+a5i0ooc1rU7C7YOw3wT+UGqdeNNHWnOF9qcMBgLRS+4IYUqbczewFx4mLEig6gawh7X6mFlEkA==}
 
+  ufo@1.6.3:
+    resolution: {integrity: sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==}
+
   ultracite@5.0.39:
     resolution: {integrity: sha512-yyrftv3h7aIGEWYVfRGWn8fBB6vbCjmTK57LQr48uZsB1r/xs1vEHlwdZe4m7xfH5Bmch6xf7q9aylh0vVtkrQ==}
     hasBin: true
@@ -7443,12 +7379,15 @@ packages:
   undici-types@7.16.0:
     resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
 
+  undici-types@7.18.2:
+    resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
+
   undici@6.22.0:
     resolution: {integrity: sha512-hU/10obOIu62MGYjdskASR3CUAiYaFTtC9Pa6vHyf//mAipSvSQg6od2CnJswq7fvzNS3zJhxoRkgNVaHurWKw==}
     engines: {node: '>=18.17'}
 
-  undici@7.16.0:
-    resolution: {integrity: sha512-QEg3HPMll0o3t2ourKwOeUAZ159Kn9mx5pnzHRQO8+Wixmh88YdZRiIwat0iNzNNXn0yoEtXJqFpyW7eM8BV7g==}
+  undici@7.22.0:
+    resolution: {integrity: sha512-RqslV2Us5BrllB+JeiZnK4peryVTndy9Dnqq62S3yYRRTj0tFQCwEniUy2167skdGOy3vqRzEvl1Dm4sV2ReDg==}
     engines: {node: '>=20.18.1'}
 
   unicode-canonical-property-names-ecmascript@2.0.1:
@@ -7532,8 +7471,8 @@ packages:
     resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
     engines: {node: '>= 0.4.0'}
 
-  uuid@11.1.0:
-    resolution: {integrity: sha512-0/A9rDy9P7cJ+8w1c9WD9V//9Wj15Ce2MPz8Ri6032usz+NfePxx5AcN3bN+r6ZL6jEo066/yNYB3tn4pQEx+A==}
+  uuid@13.0.0:
+    resolution: {integrity: sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==}
     hasBin: true
 
   uuid@7.0.3:
@@ -7611,10 +7550,10 @@ packages:
       yaml:
         optional: true
 
-  vitefu@1.1.1:
-    resolution: {integrity: sha512-B/Fegf3i8zh0yFbpzZ21amWzHmuNlLlmJT6n7bu5e+pCHUKQIfXSYokrqOBGEMMe9UG2sostKQF9mml/vYaWJQ==}
+  vitefu@1.1.2:
+    resolution: {integrity: sha512-zpKATdUbzbsycPFBN71nS2uzBUQiVnFoOrr2rvqv34S1lcAgMKKkjWleLGeiJlZ8lwCXvtWaRn7R3ZC16SYRuw==}
     peerDependencies:
-      vite: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0-beta.0
+      vite: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-beta.0
     peerDependenciesMeta:
       vite:
         optional: true
@@ -7788,6 +7727,18 @@ packages:
       utf-8-validate:
         optional: true
 
+  ws@8.19.0:
+    resolution: {integrity: sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
   xcode@3.0.1:
     resolution: {integrity: sha512-kCz5k7J7XbJtjABOvkc5lJmkiDh8VhjVCGNiqdKCscmVpdVUpEAyXv1xmCLkQJ5dsHqx3IPO4XW+NTDhU/fatA==}
     engines: {node: '>=10.0.0'}
@@ -7861,9 +7812,9 @@ snapshots:
 
   '@antfu/utils@8.1.1': {}
 
-  '@babel/cli@7.28.3(@babel/core@7.28.5)':
+  '@babel/cli@7.28.3(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@jridgewell/trace-mapping': 0.3.31
       commander: 6.2.1
       convert-source-map: 2.0.0
@@ -7892,8 +7843,16 @@ snapshots:
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
+  '@babel/code-frame@7.29.0':
+    dependencies:
+      '@babel/helper-validator-identifier': 7.28.5
+      js-tokens: 4.0.0
+      picocolors: 1.1.1
+
   '@babel/compat-data@7.28.5': {}
 
+  '@babel/compat-data@7.29.0': {}
+
   '@babel/core@7.28.5':
     dependencies:
       '@babel/code-frame': 7.27.1
@@ -7914,6 +7873,26 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/core@7.29.0':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/helper-compilation-targets': 7.28.6
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0)
+      '@babel/helpers': 7.28.6
+      '@babel/parser': 7.29.0
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+      '@jridgewell/remapping': 2.3.5
+      convert-source-map: 2.0.0
+      debug: 4.4.3
+      gensync: 1.0.0-beta.2
+      json5: 2.2.3
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/generator@7.28.5':
     dependencies:
       '@babel/parser': 7.28.5
@@ -7922,6 +7901,14 @@ snapshots:
       '@jridgewell/trace-mapping': 0.3.31
       jsesc: 3.1.0
 
+  '@babel/generator@7.29.1':
+    dependencies:
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+      jsesc: 3.1.0
+
   '@babel/helper-annotate-as-pure@7.27.3':
     dependencies:
       '@babel/types': 7.28.5
@@ -7934,6 +7921,14 @@ snapshots:
       lru-cache: 5.1.1
       semver: 6.3.1
 
+  '@babel/helper-compilation-targets@7.28.6':
+    dependencies:
+      '@babel/compat-data': 7.29.0
+      '@babel/helper-validator-option': 7.27.1
+      browserslist: 4.28.1
+      lru-cache: 5.1.1
+      semver: 6.3.1
+
   '@babel/helper-create-class-features-plugin@7.28.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -7947,6 +7942,46 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-create-class-features-plugin@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.0)
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/traverse': 7.28.5
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-create-class-features-plugin@7.28.6(@babel/core@7.28.5)':
+    dependencies:
+      '@babel/core': 7.28.5
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/helper-replace-supers': 7.28.6(@babel/core@7.28.5)
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/traverse': 7.29.0
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-create-class-features-plugin@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/helper-replace-supers': 7.28.6(@babel/core@7.29.0)
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/traverse': 7.29.0
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
   '@babel/helper-create-regexp-features-plugin@7.28.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -7954,6 +7989,13 @@ snapshots:
       regexpu-core: 6.4.0
       semver: 6.3.1
 
+  '@babel/helper-create-regexp-features-plugin@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      regexpu-core: 6.4.0
+      semver: 6.3.1
+
   '@babel/helper-define-polyfill-provider@0.6.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -7965,6 +8007,17 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-define-polyfill-provider@0.6.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/helper-plugin-utils': 7.27.1
+      debug: 4.4.3
+      lodash.debounce: 4.0.8
+      resolve: 1.22.11
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-globals@7.28.0': {}
 
   '@babel/helper-member-expression-to-functions@7.28.5':
@@ -7981,6 +8034,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-module-imports@7.28.6':
+    dependencies:
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-module-transforms@7.28.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -7990,16 +8050,54 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-optimise-call-expression@7.27.1':
+  '@babel/helper-module-transforms@7.28.3(@babel/core@7.29.0)':
     dependencies:
-      '@babel/types': 7.28.5
-
-  '@babel/helper-plugin-utils@7.27.1': {}
+      '@babel/core': 7.29.0
+      '@babel/helper-module-imports': 7.27.1
+      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
 
-  '@babel/helper-remap-async-to-generator@7.27.1(@babel/core@7.28.5)':
+  '@babel/helper-module-transforms@7.28.6(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-module-imports': 7.28.6
+      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/traverse': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-imports': 7.28.6
+      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/traverse': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-optimise-call-expression@7.27.1':
+    dependencies:
+      '@babel/types': 7.28.5
+
+  '@babel/helper-plugin-utils@7.27.1': {}
+
+  '@babel/helper-plugin-utils@7.28.6': {}
+
+  '@babel/helper-remap-async-to-generator@7.27.1(@babel/core@7.28.5)':
+    dependencies:
+      '@babel/core': 7.28.5
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-wrap-function': 7.28.3
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-remap-async-to-generator@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-wrap-function': 7.28.3
       '@babel/traverse': 7.28.5
     transitivePeerDependencies:
@@ -8014,6 +8112,34 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-replace-supers@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-replace-supers@7.28.6(@babel/core@7.28.5)':
+    dependencies:
+      '@babel/core': 7.28.5
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/traverse': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-replace-supers@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-member-expression-to-functions': 7.28.5
+      '@babel/helper-optimise-call-expression': 7.27.1
+      '@babel/traverse': 7.29.0
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
   '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
     dependencies:
       '@babel/traverse': 7.28.5
@@ -8040,6 +8166,11 @@ snapshots:
       '@babel/template': 7.27.2
       '@babel/types': 7.28.5
 
+  '@babel/helpers@7.28.6':
+    dependencies:
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
+
   '@babel/highlight@7.25.9':
     dependencies:
       '@babel/helper-validator-identifier': 7.28.5
@@ -8051,36 +8182,40 @@ snapshots:
     dependencies:
       '@babel/types': 7.28.5
 
-  '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.28.5(@babel/core@7.28.5)':
+  '@babel/parser@7.29.0':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/types': 7.29.0
+
+  '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/traverse': 7.28.5
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.28.5)
+      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.0)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.28.3(@babel/core@7.28.5)':
+  '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.28.3(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/traverse': 7.28.5
     transitivePeerDependencies:
@@ -8095,58 +8230,112 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-proposal-decorators@7.28.0(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/plugin-syntax-decorators': 7.27.1(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-proposal-export-default-from@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2(@babel/core@7.28.5)':
+  '@babel/plugin-proposal-export-default-from@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
 
   '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-decorators@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-decorators@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-dynamic-import@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-dynamic-import@7.8.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-export-default-from@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-export-default-from@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-flow@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-import-assertions@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-flow@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-syntax-import-assertions@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-syntax-import-attributes@7.27.1(@babel/core@7.28.5)':
@@ -8154,70 +8343,157 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-import-attributes@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-jsx@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-jsx@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.28.5)':
+    dependencies:
+      '@babel/core': 7.28.5
+      '@babel/helper-plugin-utils': 7.28.6
+
+  '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+    optional: true
+
   '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-unicode-sets-regex@7.18.6(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/helper-plugin-utils': 7.28.6
+
+  '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+    optional: true
+
+  '@babel/plugin-syntax-unicode-sets-regex@7.18.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-arrow-functions@7.27.1(@babel/core@7.28.5)':
@@ -8225,6 +8501,11 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-arrow-functions@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-async-generator-functions@7.28.0(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8234,6 +8515,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-async-generator-functions@7.28.0(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.0)
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-async-to-generator@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8243,9 +8533,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-block-scoped-functions@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-async-to-generator@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-module-imports': 7.27.1
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-block-scoped-functions@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-block-scoping@7.28.5(@babel/core@7.28.5)':
@@ -8253,6 +8552,11 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-block-scoping@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-class-properties@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8261,6 +8565,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-class-properties@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-class-static-block@7.28.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8269,6 +8581,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-class-static-block@7.28.3(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-classes@7.28.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8281,12 +8601,30 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-classes@7.28.4(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/helper-globals': 7.28.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.0)
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-computed-properties@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/template': 7.27.2
 
+  '@babel/plugin-transform-computed-properties@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/template': 7.27.2
+
   '@babel/plugin-transform-destructuring@7.28.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8295,39 +8633,47 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-dotall-regex@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-destructuring@7.28.5(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
 
-  '@babel/plugin-transform-duplicate-keys@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-dotall-regex@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-duplicate-keys@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-dynamic-import@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-explicit-resource-management@7.28.0(@babel/core@7.28.5)':
+  '@babel/plugin-transform-dynamic-import@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.28.5)
+
+  '@babel/plugin-transform-explicit-resource-management@7.28.0(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-exponentiation-operator@7.28.5(@babel/core@7.28.5)':
+  '@babel/plugin-transform-exponentiation-operator@7.28.5(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-export-namespace-from@7.27.1(@babel/core@7.28.5)':
@@ -8335,12 +8681,23 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-export-namespace-from@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-flow-strip-types@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.28.5)
 
+  '@babel/plugin-transform-flow-strip-types@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.29.0)
+
   '@babel/plugin-transform-for-of@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8349,6 +8706,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-for-of@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-function-name@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8358,9 +8723,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-json-strings@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-function-name@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-json-strings@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-literals@7.27.1(@babel/core@7.28.5)':
@@ -8368,20 +8742,30 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-literals@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-logical-assignment-operators@7.28.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-member-expression-literals@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-logical-assignment-operators@7.28.5(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-modules-amd@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-member-expression-literals@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.28.5)
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-transform-modules-amd@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
@@ -8394,20 +8778,45 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-modules-systemjs@7.28.5(@babel/core@7.28.5)':
+  '@babel/plugin-transform-modules-commonjs@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-modules-commonjs@7.28.6(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.28.5)
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.28.5)
+      '@babel/helper-plugin-utils': 7.28.6
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-modules-commonjs@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.28.6
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  '@babel/plugin-transform-modules-systemjs@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-validator-identifier': 7.28.5
       '@babel/traverse': 7.28.5
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-modules-umd@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-modules-umd@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.28.5)
+      '@babel/core': 7.29.0
+      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
@@ -8418,9 +8827,15 @@ snapshots:
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-new-target@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-named-capturing-groups-regex@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-transform-new-target@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-nullish-coalescing-operator@7.27.1(@babel/core@7.28.5)':
@@ -8428,11 +8843,21 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-nullish-coalescing-operator@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-numeric-separator@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-numeric-separator@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-object-rest-spread@7.28.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8444,11 +8869,22 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-object-super@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-object-rest-spread@7.28.4(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-compilation-targets': 7.27.2
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.28.5)
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
+      '@babel/traverse': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-object-super@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.0)
     transitivePeerDependencies:
       - supports-color
 
@@ -8457,13 +8893,27 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-optional-catch-binding@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-optional-chaining@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-optional-chaining@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
+    optional: true
 
   '@babel/plugin-transform-optional-chaining@7.28.5(@babel/core@7.28.5)':
     dependencies:
@@ -8473,11 +8923,24 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-optional-chaining@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-parameters@7.27.7(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-parameters@7.27.7(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-private-methods@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8486,6 +8949,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-private-methods@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-private-property-in-object@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8495,9 +8966,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-property-literals@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-private-property-in-object@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-property-literals@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-react-display-name@7.28.0(@babel/core@7.28.5)':
@@ -8505,6 +8985,11 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-react-display-name@7.28.0(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-react-jsx-development@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8512,16 +8997,33 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-react-jsx-development@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-react-jsx@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8533,26 +9035,48 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-react-jsx@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-module-imports': 7.27.1
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.0)
+      '@babel/types': 7.28.5
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-react-pure-annotations@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-react-pure-annotations@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-regenerator@7.28.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-regexp-modifiers@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-regenerator@7.28.4(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-reserved-words@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-regexp-modifiers@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-transform-reserved-words@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-runtime@7.28.5(@babel/core@7.28.5)':
@@ -8567,11 +9091,28 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-runtime@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-module-imports': 7.27.1
+      '@babel/helper-plugin-utils': 7.27.1
+      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.29.0)
+      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.29.0)
+      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.29.0)
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-shorthand-properties@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-shorthand-properties@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-spread@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -8580,19 +9121,37 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-spread@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-sticky-regex@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
+  '@babel/plugin-transform-sticky-regex@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
   '@babel/plugin-transform-template-literals@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-typeof-symbol@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-template-literals@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-transform-typeof-symbol@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-typescript@7.28.5(@babel/core@7.28.5)':
@@ -8606,15 +9165,49 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-unicode-escapes@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-typescript@7.28.5(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
 
-  '@babel/plugin-transform-unicode-property-regex@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-typescript@7.28.6(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-create-class-features-plugin': 7.28.6(@babel/core@7.28.5)
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.28.5)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-typescript@7.28.6(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.27.3
+      '@babel/helper-create-class-features-plugin': 7.28.6(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  '@babel/plugin-transform-unicode-escapes@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-transform-unicode-property-regex@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
 
   '@babel/plugin-transform-unicode-regex@7.27.1(@babel/core@7.28.5)':
@@ -8623,91 +9216,97 @@ snapshots:
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-unicode-sets-regex@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-unicode-regex@7.27.1(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-plugin-utils': 7.27.1
+
+  '@babel/plugin-transform-unicode-sets-regex@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/preset-env@7.28.5(@babel/core@7.28.5)':
+  '@babel/preset-env@7.28.5(@babel/core@7.29.0)':
     dependencies:
       '@babel/compat-data': 7.28.5
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-compilation-targets': 7.27.2
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-bugfix-firefox-class-in-computed-class-key': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-bugfix-safari-class-field-initializer-scope': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly': 7.28.3(@babel/core@7.28.5)
-      '@babel/plugin-proposal-private-property-in-object': 7.21.0-placeholder-for-preset-env.2(@babel/core@7.28.5)
-      '@babel/plugin-syntax-import-assertions': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-unicode-sets-regex': 7.18.6(@babel/core@7.28.5)
-      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.28.5)
-      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-block-scoped-functions': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.28.5)
-      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-dotall-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-duplicate-keys': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-duplicate-named-capturing-groups-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-dynamic-import': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-explicit-resource-management': 7.28.0(@babel/core@7.28.5)
-      '@babel/plugin-transform-exponentiation-operator': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-json-strings': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-member-expression-literals': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-amd': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-systemjs': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-umd': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-new-target': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-object-super': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-property-literals': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-regexp-modifiers': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-reserved-words': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-typeof-symbol': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-unicode-escapes': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-unicode-property-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-unicode-sets-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/preset-modules': 0.1.6-no-external-plugins(@babel/core@7.28.5)
-      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.28.5)
-      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.28.5)
-      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.28.5)
+      '@babel/plugin-bugfix-firefox-class-in-computed-class-key': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-bugfix-safari-class-field-initializer-scope': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly': 7.28.3(@babel/core@7.29.0)
+      '@babel/plugin-proposal-private-property-in-object': 7.21.0-placeholder-for-preset-env.2(@babel/core@7.29.0)
+      '@babel/plugin-syntax-import-assertions': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-unicode-sets-regex': 7.18.6(@babel/core@7.29.0)
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.29.0)
+      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-block-scoped-functions': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.0)
+      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-dotall-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-duplicate-keys': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-duplicate-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-dynamic-import': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-explicit-resource-management': 7.28.0(@babel/core@7.29.0)
+      '@babel/plugin-transform-exponentiation-operator': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-json-strings': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-member-expression-literals': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-amd': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-systemjs': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-umd': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-new-target': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-object-super': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-property-literals': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-regexp-modifiers': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-reserved-words': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-typeof-symbol': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-unicode-escapes': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-unicode-property-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-unicode-sets-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/preset-modules': 0.1.6-no-external-plugins(@babel/core@7.29.0)
+      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.29.0)
+      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.29.0)
+      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.29.0)
       core-js-compat: 3.47.0
       semver: 6.3.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/preset-modules@0.1.6-no-external-plugins(@babel/core@7.28.5)':
+  '@babel/preset-modules@0.1.6-no-external-plugins(@babel/core@7.29.0)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/types': 7.28.5
       esutils: 2.0.3
@@ -8724,16 +9323,40 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/preset-react@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-validator-option': 7.27.1
+      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx-development': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-pure-annotations': 7.27.1(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/preset-typescript@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.28.5)
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.28.5)
+      '@babel/plugin-transform-modules-commonjs': 7.28.6(@babel/core@7.28.5)
+      '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.28.5)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/preset-typescript@7.27.1(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/helper-validator-option': 7.27.1
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-commonjs': 7.28.6(@babel/core@7.29.0)
+      '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.29.0)
     transitivePeerDependencies:
       - supports-color
+    optional: true
 
   '@babel/preset-typescript@7.28.5(@babel/core@7.28.5)':
     dependencies:
@@ -8746,6 +9369,17 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/preset-typescript@7.28.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-validator-option': 7.27.1
+      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/runtime@7.28.4': {}
 
   '@babel/template@7.27.2':
@@ -8754,6 +9388,12 @@ snapshots:
       '@babel/parser': 7.28.5
       '@babel/types': 7.28.5
 
+  '@babel/template@7.28.6':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
+
   '@babel/traverse@7.28.5':
     dependencies:
       '@babel/code-frame': 7.27.1
@@ -8766,11 +9406,28 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/traverse@7.29.0':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/helper-globals': 7.28.0
+      '@babel/parser': 7.29.0
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/types@7.28.5':
     dependencies:
       '@babel/helper-string-parser': 7.27.1
       '@babel/helper-validator-identifier': 7.28.5
 
+  '@babel/types@7.29.0':
+    dependencies:
+      '@babel/helper-string-parser': 7.27.1
+      '@babel/helper-validator-identifier': 7.28.5
+
   '@bcoe/v8-coverage@0.2.3': {}
 
   '@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)':
@@ -8842,110 +9499,32 @@ snapshots:
 
   '@drizzle-team/brocli@0.10.2': {}
 
-  '@effect/cli@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(@effect/printer-ansi@0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14))(@effect/printer@0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)':
-    dependencies:
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      '@effect/printer': 0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14)
-      '@effect/printer-ansi': 0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14)
-      effect: 3.19.14
-      ini: 4.1.3
-      toml: 3.0.0
-      yaml: 2.8.2
-
-  '@effect/cluster@0.56.1(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)':
-    dependencies:
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      '@effect/rpc': 0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)
-      '@effect/sql': 0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)
-      '@effect/workflow': 0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)
-      effect: 3.19.14
-      kubernetes-types: 1.30.0
-
-  '@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1)':
-    dependencies:
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      effect: 3.19.14
-      uuid: 11.1.0
-    optionalDependencies:
-      ioredis: 5.9.1
-
   '@effect/language-service@0.64.1': {}
 
-  '@effect/platform-node-shared@0.57.0(@effect/cluster@0.56.1(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)':
+  '@effect/platform-node-shared@4.0.0-beta.23(effect@4.0.0-beta.23)':
     dependencies:
-      '@effect/cluster': 0.56.1(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      '@effect/rpc': 0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)
-      '@effect/sql': 0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)
-      '@parcel/watcher': 2.5.1
-      effect: 3.19.14
-      multipasta: 0.2.7
-      ws: 8.18.3
+      '@types/ws': 8.18.1
+      effect: 4.0.0-beta.23
+      ws: 8.19.0
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
 
-  '@effect/platform-node@0.104.0(@effect/cluster@0.56.1(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)':
+  '@effect/platform-node@4.0.0-beta.23(effect@4.0.0-beta.23)(ioredis@5.9.1)':
     dependencies:
-      '@effect/cluster': 0.56.1(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      '@effect/platform-node-shared': 0.57.0(@effect/cluster@0.56.1(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(effect@3.19.14))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)
-      '@effect/rpc': 0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)
-      '@effect/sql': 0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)
-      effect: 3.19.14
-      mime: 3.0.0
-      undici: 7.16.0
-      ws: 8.18.3
+      '@effect/platform-node-shared': 4.0.0-beta.23(effect@4.0.0-beta.23)
+      effect: 4.0.0-beta.23
+      ioredis: 5.9.1
+      mime: 4.1.0
+      undici: 7.22.0
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
 
-  '@effect/platform@0.94.1(effect@3.19.14)':
-    dependencies:
-      effect: 3.19.14
-      find-my-way-ts: 0.1.6
-      msgpackr: 1.11.8
-      multipasta: 0.2.7
-
-  '@effect/printer-ansi@0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14)':
-    dependencies:
-      '@effect/printer': 0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14)
-      '@effect/typeclass': 0.37.0(effect@3.19.14)
-      effect: 3.19.14
-
-  '@effect/printer@0.46.0(@effect/typeclass@0.37.0(effect@3.19.14))(effect@3.19.14)':
-    dependencies:
-      '@effect/typeclass': 0.37.0(effect@3.19.14)
-      effect: 3.19.14
-
-  '@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)':
-    dependencies:
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      effect: 3.19.14
-      msgpackr: 1.11.8
-
-  '@effect/sql@0.46.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)':
-    dependencies:
-      '@effect/experimental': 0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1)
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      effect: 3.19.14
-      uuid: 11.1.0
-
-  '@effect/typeclass@0.37.0(effect@3.19.14)':
-    dependencies:
-      effect: 3.19.14
-
-  '@effect/vitest@0.27.0(effect@3.19.14)(vitest@3.2.4)':
-    dependencies:
-      effect: 3.19.14
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-
-  '@effect/workflow@0.16.0(@effect/experimental@0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1))(@effect/platform@0.94.1(effect@3.19.14))(@effect/rpc@0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14))(effect@3.19.14)':
+  '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@3.2.4)':
     dependencies:
-      '@effect/experimental': 0.58.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)(ioredis@5.9.1)
-      '@effect/platform': 0.94.1(effect@3.19.14)
-      '@effect/rpc': 0.73.0(@effect/platform@0.94.1(effect@3.19.14))(effect@3.19.14)
-      effect: 3.19.14
+      effect: 4.0.0-beta.23
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   '@emnapi/core@1.7.1':
     dependencies:
@@ -8958,6 +9537,11 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
+  '@emnapi/runtime@1.8.1':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@emnapi/wasi-threads@1.1.0':
     dependencies:
       tslib: 2.8.1
@@ -9374,7 +9958,7 @@ snapshots:
       wrap-ansi: 7.0.0
       ws: 8.18.3
     optionalDependencies:
-      expo-router: 6.0.23(9471de8f7829ecb4f3c776787ee824a6)
+      expo-router: 6.0.23(a9179ff0b15fe10f2a71d6f189aa330e)
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - bufferutil
@@ -9382,6 +9966,81 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  '@expo/cli@54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))':
+    dependencies:
+      '@0no-co/graphql.web': 1.2.0
+      '@expo/code-signing-certificates': 0.0.6
+      '@expo/config': 12.0.13
+      '@expo/config-plugins': 54.0.4
+      '@expo/devcert': 1.2.1
+      '@expo/env': 2.0.8
+      '@expo/image-utils': 0.8.8
+      '@expo/json-file': 10.0.8
+      '@expo/metro': 54.2.0
+      '@expo/metro-config': 54.0.14(expo@54.0.33)
+      '@expo/osascript': 2.3.8
+      '@expo/package-manager': 1.9.10
+      '@expo/plist': 0.4.8
+      '@expo/prebuild-config': 54.0.8(expo@54.0.33)
+      '@expo/schema-utils': 0.1.8
+      '@expo/spawn-async': 1.7.2
+      '@expo/ws-tunnel': 1.0.6
+      '@expo/xcpretty': 4.3.2
+      '@react-native/dev-middleware': 0.81.5
+      '@urql/core': 5.2.0
+      '@urql/exchange-retry': 1.3.2(@urql/core@5.2.0)
+      accepts: 1.3.8
+      arg: 5.0.2
+      better-opn: 3.0.2
+      bplist-creator: 0.1.0
+      bplist-parser: 0.3.2
+      chalk: 4.1.2
+      ci-info: 3.9.0
+      compression: 1.8.1
+      connect: 3.7.0
+      debug: 4.4.3
+      env-editor: 0.4.2
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-server: 1.0.5
+      freeport-async: 2.0.0
+      getenv: 2.0.0
+      glob: 13.0.0
+      lan-network: 0.1.7
+      minimatch: 9.0.5
+      node-forge: 1.3.3
+      npm-package-arg: 11.0.3
+      ora: 3.4.0
+      picomatch: 3.0.1
+      pretty-bytes: 5.6.0
+      pretty-format: 29.7.0
+      progress: 2.0.3
+      prompts: 2.4.2
+      qrcode-terminal: 0.11.0
+      require-from-string: 2.0.2
+      requireg: 0.2.2
+      resolve: 1.22.11
+      resolve-from: 5.0.0
+      resolve.exports: 2.0.3
+      semver: 7.7.3
+      send: 0.19.2
+      slugify: 1.6.6
+      source-map-support: 0.5.21
+      stacktrace-parser: 0.1.11
+      structured-headers: 0.4.1
+      tar: 7.5.2
+      terminal-link: 2.1.1
+      undici: 6.22.0
+      wrap-ansi: 7.0.0
+      ws: 8.18.3
+    optionalDependencies:
+      expo-router: 6.0.23(9c9430879de51b484c3e68e2beaf4aeb)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+    transitivePeerDependencies:
+      - bufferutil
+      - graphql
+      - supports-color
+      - utf-8-validate
+
   '@expo/code-signing-certificates@0.0.6':
     dependencies:
       node-forge: 1.3.3
@@ -9439,6 +10098,13 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  '@expo/devtools@0.1.8(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      chalk: 4.1.2
+    optionalDependencies:
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+
   '@expo/env@2.0.8':
     dependencies:
       chalk: 4.1.2
@@ -9525,6 +10191,19 @@ snapshots:
     optionalDependencies:
       react-dom: 19.1.1(react@19.1.0)
 
+  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      anser: 1.4.10
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      pretty-format: 29.7.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      stacktrace-parser: 0.1.11
+      whatwg-fetch: 3.6.20
+    optionalDependencies:
+      react-dom: 19.1.1(react@19.1.0)
+    optional: true
+
   '@expo/metro@54.2.0':
     dependencies:
       metro: 0.83.3
@@ -9602,6 +10281,12 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  '@expo/vector-icons@15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+
   '@expo/ws-tunnel@1.0.6': {}
 
   '@expo/xcpretty@4.3.2':
@@ -9622,7 +10307,7 @@ snapshots:
 
   '@humanwhocodes/retry@0.4.3': {}
 
-  '@img/colour@1.0.0':
+  '@img/colour@1.1.0':
     optional: true
 
   '@img/sharp-darwin-arm64@0.34.5':
@@ -9707,7 +10392,7 @@ snapshots:
 
   '@img/sharp-wasm32@0.34.5':
     dependencies:
-      '@emnapi/runtime': 1.7.1
+      '@emnapi/runtime': 1.8.1
     optional: true
 
   '@img/sharp-win32-arm64@0.34.5':
@@ -9719,8 +10404,7 @@ snapshots:
   '@img/sharp-win32-x64@0.34.5':
     optional: true
 
-  '@ioredis/commands@1.5.0':
-    optional: true
+  '@ioredis/commands@1.5.0': {}
 
   '@isaacs/balanced-match@4.0.1': {}
 
@@ -10039,66 +10723,6 @@ snapshots:
   '@opentelemetry/api@1.9.0':
     optional: true
 
-  '@parcel/watcher-android-arm64@2.5.1':
-    optional: true
-
-  '@parcel/watcher-darwin-arm64@2.5.1':
-    optional: true
-
-  '@parcel/watcher-darwin-x64@2.5.1':
-    optional: true
-
-  '@parcel/watcher-freebsd-x64@2.5.1':
-    optional: true
-
-  '@parcel/watcher-linux-arm-glibc@2.5.1':
-    optional: true
-
-  '@parcel/watcher-linux-arm-musl@2.5.1':
-    optional: true
-
-  '@parcel/watcher-linux-arm64-glibc@2.5.1':
-    optional: true
-
-  '@parcel/watcher-linux-arm64-musl@2.5.1':
-    optional: true
-
-  '@parcel/watcher-linux-x64-glibc@2.5.1':
-    optional: true
-
-  '@parcel/watcher-linux-x64-musl@2.5.1':
-    optional: true
-
-  '@parcel/watcher-win32-arm64@2.5.1':
-    optional: true
-
-  '@parcel/watcher-win32-ia32@2.5.1':
-    optional: true
-
-  '@parcel/watcher-win32-x64@2.5.1':
-    optional: true
-
-  '@parcel/watcher@2.5.1':
-    dependencies:
-      detect-libc: 1.0.3
-      is-glob: 4.0.3
-      micromatch: 4.0.8
-      node-addon-api: 7.1.1
-    optionalDependencies:
-      '@parcel/watcher-android-arm64': 2.5.1
-      '@parcel/watcher-darwin-arm64': 2.5.1
-      '@parcel/watcher-darwin-x64': 2.5.1
-      '@parcel/watcher-freebsd-x64': 2.5.1
-      '@parcel/watcher-linux-arm-glibc': 2.5.1
-      '@parcel/watcher-linux-arm-musl': 2.5.1
-      '@parcel/watcher-linux-arm64-glibc': 2.5.1
-      '@parcel/watcher-linux-arm64-musl': 2.5.1
-      '@parcel/watcher-linux-x64-glibc': 2.5.1
-      '@parcel/watcher-linux-x64-musl': 2.5.1
-      '@parcel/watcher-win32-arm64': 2.5.1
-      '@parcel/watcher-win32-ia32': 2.5.1
-      '@parcel/watcher-win32-x64': 2.5.1
-
   '@pkgr/core@0.2.9': {}
 
   '@planetscale/database@1.19.0':
@@ -10313,6 +10937,11 @@ snapshots:
       merge-options: 3.0.4
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))':
+    dependencies:
+      merge-options: 3.0.4
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+
   '@react-native/assets-registry@0.81.5': {}
 
   '@react-native/babel-plugin-codegen@0.81.5(@babel/core@7.28.5)':
@@ -10323,6 +10952,14 @@ snapshots:
       - '@babel/core'
       - supports-color
 
+  '@react-native/babel-plugin-codegen@0.81.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/traverse': 7.28.5
+      '@react-native/codegen': 0.81.5(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - '@babel/core'
+      - supports-color
+
   '@react-native/babel-preset@0.81.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -10373,6 +11010,56 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@react-native/babel-preset@0.81.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-dynamic-import': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.29.0)
+      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/template': 7.27.2
+      '@react-native/babel-plugin-codegen': 0.81.5(@babel/core@7.29.0)
+      babel-plugin-syntax-hermes-parser: 0.29.1
+      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.0)
+      react-refresh: 0.14.2
+    transitivePeerDependencies:
+      - supports-color
+
   '@react-native/codegen@0.81.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
@@ -10383,6 +11070,16 @@ snapshots:
       nullthrows: 1.1.1
       yargs: 17.7.2
 
+  '@react-native/codegen@0.81.5(@babel/core@7.29.0)':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/parser': 7.28.5
+      glob: 7.2.3
+      hermes-parser: 0.29.1
+      invariant: 2.2.4
+      nullthrows: 1.1.1
+      yargs: 17.7.2
+
   '@react-native/community-cli-plugin@0.81.5':
     dependencies:
       '@react-native/dev-middleware': 0.81.5
@@ -10432,6 +11129,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@react-native/virtualized-lists@0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      invariant: 2.2.4
+      nullthrows: 1.1.1
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@react-navigation/bottom-tabs@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -10445,6 +11151,20 @@ snapshots:
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
 
+  '@react-navigation/bottom-tabs@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      color: 4.2.3
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      sf-symbols-typescript: 2.2.0
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
+    optional: true
+
   '@react-navigation/core@7.13.7(react@19.1.0)':
     dependencies:
       '@react-navigation/routers': 7.5.3
@@ -10467,6 +11187,17 @@ snapshots:
       use-latest-callback: 0.2.6(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
 
+  '@react-navigation/elements@2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      color: 4.2.3
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      use-latest-callback: 0.2.6(react@19.1.0)
+      use-sync-external-store: 1.6.0(react@19.1.0)
+    optional: true
+
   '@react-navigation/native-stack@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -10481,15 +11212,41 @@ snapshots:
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
 
-  '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@react-navigation/native-stack@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      color: 4.2.3
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      sf-symbols-typescript: 2.2.0
+      warn-once: 0.1.1
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
+    optional: true
+
+  '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@react-navigation/core': 7.13.7(react@19.1.0)
+      escape-string-regexp: 4.0.0
+      fast-deep-equal: 3.1.3
+      nanoid: 3.3.11
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      use-latest-callback: 0.2.6(react@19.1.0)
+
+  '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@react-navigation/core': 7.13.7(react@19.1.0)
       escape-string-regexp: 4.0.0
       fast-deep-equal: 3.1.3
       nanoid: 3.3.11
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
       use-latest-callback: 0.2.6(react@19.1.0)
+    optional: true
 
   '@react-navigation/routers@7.5.3':
     dependencies:
@@ -10587,17 +11344,17 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@tanstack/directive-functions-plugin@1.142.1(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/directive-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/code-frame': 7.27.1
-      '@babel/core': 7.28.5
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
       '@tanstack/router-utils': 1.141.0
-      babel-dead-code-elimination: 1.0.11
+      babel-dead-code-elimination: 1.0.12
       pathe: 2.0.3
       tiny-invariant: 1.3.3
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
     optional: true
@@ -10608,9 +11365,9 @@ snapshots:
   '@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/history': 1.141.0
-      '@tanstack/react-store': 0.8.0(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-store': 0.8.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/router-core': 1.142.8
-      isbot: 5.1.32
+      isbot: 5.1.35
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
       tiny-invariant: 1.3.3
@@ -10641,19 +11398,19 @@ snapshots:
       - crossws
     optional: true
 
-  '@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@tanstack/react-router': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/react-start-client': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/react-start-server': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@tanstack/router-utils': 1.141.0
+      '@tanstack/router-utils': 1.161.4
       '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/start-server-core': 1.142.8
       pathe: 2.0.3
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - '@rsbuild/core'
       - crossws
@@ -10662,9 +11419,9 @@ snapshots:
       - webpack
     optional: true
 
-  '@tanstack/react-store@0.8.0(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-store@0.8.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@tanstack/store': 0.8.0
+      '@tanstack/store': 0.8.1
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
@@ -10673,10 +11430,10 @@ snapshots:
   '@tanstack/router-core@1.142.8':
     dependencies:
       '@tanstack/history': 1.141.0
-      '@tanstack/store': 0.8.0
+      '@tanstack/store': 0.8.1
       cookie-es: 2.0.0
-      seroval: 1.4.1
-      seroval-plugins: 1.4.0(seroval@1.4.1)
+      seroval: 1.5.0
+      seroval-plugins: 1.5.0(seroval@1.5.0)
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
     optional: true
@@ -10686,7 +11443,7 @@ snapshots:
       '@tanstack/router-core': 1.142.8
       '@tanstack/router-utils': 1.141.0
       '@tanstack/virtual-file-routes': 1.141.0
-      prettier: 3.7.4
+      prettier: 3.8.1
       recast: 0.23.11
       source-map: 0.7.6
       tsx: 4.21.0
@@ -10695,54 +11452,69 @@ snapshots:
       - supports-color
     optional: true
 
-  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.28.5)
-      '@babel/template': 7.27.2
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
       '@tanstack/router-core': 1.142.8
       '@tanstack/router-generator': 1.142.8
       '@tanstack/router-utils': 1.141.0
       '@tanstack/virtual-file-routes': 1.141.0
-      babel-dead-code-elimination: 1.0.11
+      babel-dead-code-elimination: 1.0.12
       chokidar: 3.6.0
       unplugin: 2.3.11
       zod: 3.25.76
     optionalDependencies:
       '@tanstack/react-router': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
     optional: true
 
   '@tanstack/router-utils@1.141.0':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/generator': 7.28.5
-      '@babel/parser': 7.28.5
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/parser': 7.29.0
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
+      ansis: 4.2.0
+      diff: 8.0.3
+      pathe: 2.0.3
+      tinyglobby: 0.2.15
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  '@tanstack/router-utils@1.161.4':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/generator': 7.29.1
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
       ansis: 4.2.0
-      diff: 8.0.2
+      babel-dead-code-elimination: 1.0.12
+      diff: 8.0.3
       pathe: 2.0.3
       tinyglobby: 0.2.15
     transitivePeerDependencies:
       - supports-color
     optional: true
 
-  '@tanstack/server-functions-plugin@1.142.1(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/server-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/code-frame': 7.27.1
-      '@babel/core': 7.28.5
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.28.5)
-      '@babel/template': 7.27.2
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
-      '@tanstack/directive-functions-plugin': 1.142.1(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
-      babel-dead-code-elimination: 1.0.11
+      '@babel/core': 7.29.0
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
+      '@tanstack/directive-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      babel-dead-code-elimination: 1.0.12
       tiny-invariant: 1.3.3
     transitivePeerDependencies:
       - supports-color
@@ -10753,33 +11525,33 @@ snapshots:
     dependencies:
       '@tanstack/router-core': 1.142.8
       '@tanstack/start-storage-context': 1.142.8
-      seroval: 1.4.1
+      seroval: 1.5.0
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
     optional: true
 
-  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/code-frame': 7.26.2
-      '@babel/core': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/types': 7.29.0
       '@rolldown/pluginutils': 1.0.0-beta.40
       '@tanstack/router-core': 1.142.8
       '@tanstack/router-generator': 1.142.8
-      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/router-utils': 1.141.0
-      '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/start-client-core': 1.142.8
       '@tanstack/start-server-core': 1.142.8
-      babel-dead-code-elimination: 1.0.11
-      cheerio: 1.1.2
+      babel-dead-code-elimination: 1.0.12
+      cheerio: 1.2.0
       exsolve: 1.0.8
       pathe: 2.0.3
       srvx: 0.9.8
       tinyglobby: 0.2.15
-      ufo: 1.6.1
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vitefu: 1.1.1(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      ufo: 1.6.3
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitefu: 1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       xmlbuilder2: 4.0.3
       zod: 3.25.76
     transitivePeerDependencies:
@@ -10798,7 +11570,7 @@ snapshots:
       '@tanstack/start-client-core': 1.142.8
       '@tanstack/start-storage-context': 1.142.8
       h3-v2: h3@2.0.1-rc.6
-      seroval: 1.4.1
+      seroval: 1.5.0
       tiny-invariant: 1.3.3
     transitivePeerDependencies:
       - crossws
@@ -10809,24 +11581,37 @@ snapshots:
       '@tanstack/router-core': 1.142.8
     optional: true
 
-  '@tanstack/store@0.8.0':
+  '@tanstack/store@0.8.1':
     optional: true
 
   '@tanstack/virtual-file-routes@1.141.0':
     optional: true
 
-  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       jest-matcher-utils: 30.2.0
       picocolors: 1.1.1
       pretty-format: 30.2.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
       react-test-renderer: 19.1.0(react@19.1.0)
       redent: 3.0.0
     optionalDependencies:
       jest: 29.7.0(@types/node@24.10.4)
 
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      jest-matcher-utils: 30.2.0
+      picocolors: 1.1.1
+      pretty-format: 30.2.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-test-renderer: 19.1.0(react@19.1.0)
+      redent: 3.0.0
+    optionalDependencies:
+      jest: 29.7.0(@types/node@25.3.3)
+    optional: true
+
   '@tootallnate/once@2.0.0': {}
 
   '@ts-morph/common@0.26.1':
@@ -10913,6 +11698,10 @@ snapshots:
     dependencies:
       undici-types: 7.16.0
 
+  '@types/node@25.3.3':
+    dependencies:
+      undici-types: 7.18.2
+
   '@types/react-dom@19.2.3(@types/react@19.1.17)':
     dependencies:
       '@types/react': 19.1.17
@@ -10926,6 +11715,10 @@ snapshots:
 
   '@types/tough-cookie@4.0.5': {}
 
+  '@types/ws@8.18.1':
+    dependencies:
+      '@types/node': 25.3.3
+
   '@types/yargs-parser@21.0.3': {}
 
   '@types/yargs@17.0.35':
@@ -11155,6 +11948,14 @@ snapshots:
     optionalDependencies:
       vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
+  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+    dependencies:
+      '@vitest/spy': 3.2.4
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+    optionalDependencies:
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+
   '@vitest/pretty-format@3.2.4':
     dependencies:
       tinyrainbow: 2.0.0
@@ -11179,12 +11980,12 @@ snapshots:
     dependencies:
       '@vitest/utils': 3.2.4
       fflate: 0.8.2
-      flatted: 3.3.3
+      flatted: 3.3.4
       pathe: 2.0.3
       sirv: 3.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 2.0.0
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     optional: true
 
   '@vitest/utils@3.2.4':
@@ -11221,6 +12022,9 @@ snapshots:
 
   acorn@8.15.0: {}
 
+  acorn@8.16.0:
+    optional: true
+
   agent-base@6.0.2:
     dependencies:
       debug: 4.4.3
@@ -11381,12 +12185,12 @@ snapshots:
   aws-ssl-profiles@1.1.2:
     optional: true
 
-  babel-dead-code-elimination@1.0.11:
+  babel-dead-code-elimination@1.0.12:
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/parser': 7.28.5
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/parser': 7.29.0
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
     transitivePeerDependencies:
       - supports-color
     optional: true
@@ -11404,6 +12208,19 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-jest@29.7.0(@babel/core@7.29.0):
+    dependencies:
+      '@babel/core': 7.29.0
+      '@jest/transform': 29.7.0
+      '@types/babel__core': 7.20.5
+      babel-plugin-istanbul: 6.1.1
+      babel-preset-jest: 29.6.3(@babel/core@7.29.0)
+      chalk: 4.1.2
+      graceful-fs: 4.2.11
+      slash: 3.0.0
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-dynamic-import-node@2.3.3:
     dependencies:
       object.assign: 4.1.7
@@ -11434,6 +12251,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-plugin-polyfill-corejs2@0.4.14(@babel/core@7.29.0):
+    dependencies:
+      '@babel/compat-data': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.0)
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-polyfill-corejs3@0.13.0(@babel/core@7.28.5):
     dependencies:
       '@babel/core': 7.28.5
@@ -11442,6 +12268,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-plugin-polyfill-corejs3@0.13.0(@babel/core@7.29.0):
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.0)
+      core-js-compat: 3.47.0
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-polyfill-regenerator@0.6.5(@babel/core@7.28.5):
     dependencies:
       '@babel/core': 7.28.5
@@ -11449,6 +12283,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-plugin-polyfill-regenerator@0.6.5(@babel/core@7.29.0):
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-react-compiler@1.0.0:
     dependencies:
       '@babel/types': 7.28.5
@@ -11465,6 +12306,12 @@ snapshots:
     transitivePeerDependencies:
       - '@babel/core'
 
+  babel-plugin-transform-flow-enums@0.0.2(@babel/core@7.29.0):
+    dependencies:
+      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.29.0)
+    transitivePeerDependencies:
+      - '@babel/core'
+
   babel-preset-current-node-syntax@1.2.0(@babel/core@7.28.5):
     dependencies:
       '@babel/core': 7.28.5
@@ -11484,6 +12331,25 @@ snapshots:
       '@babel/plugin-syntax-private-property-in-object': 7.14.5(@babel/core@7.28.5)
       '@babel/plugin-syntax-top-level-await': 7.14.5(@babel/core@7.28.5)
 
+  babel-preset-current-node-syntax@1.2.0(@babel/core@7.29.0):
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-syntax-async-generators': 7.8.4(@babel/core@7.29.0)
+      '@babel/plugin-syntax-bigint': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-class-properties': 7.12.13(@babel/core@7.29.0)
+      '@babel/plugin-syntax-class-static-block': 7.14.5(@babel/core@7.29.0)
+      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-import-meta': 7.10.4(@babel/core@7.29.0)
+      '@babel/plugin-syntax-json-strings': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4(@babel/core@7.29.0)
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-numeric-separator': 7.10.4(@babel/core@7.29.0)
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.29.0)
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5(@babel/core@7.29.0)
+      '@babel/plugin-syntax-top-level-await': 7.14.5(@babel/core@7.29.0)
+
   babel-preset-expo@54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2):
     dependencies:
       '@babel/helper-module-imports': 7.27.1
@@ -11548,19 +12414,89 @@ snapshots:
       - '@babel/core'
       - supports-color
 
+  babel-preset-expo@54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2):
+    dependencies:
+      '@babel/helper-module-imports': 7.27.1
+      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.0)
+      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.0)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.0)
+      '@babel/preset-react': 7.28.5(@babel/core@7.29.0)
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
+      '@react-native/babel-preset': 0.81.5(@babel/core@7.29.0)
+      babel-plugin-react-compiler: 1.0.0
+      babel-plugin-react-native-web: 0.21.2
+      babel-plugin-syntax-hermes-parser: 0.29.1
+      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.0)
+      debug: 4.4.3
+      react-refresh: 0.14.2
+      resolve-from: 5.0.0
+    optionalDependencies:
+      '@babel/runtime': 7.28.4
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@babel/core'
+      - supports-color
+
+  babel-preset-expo@54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.17.0):
+    dependencies:
+      '@babel/helper-module-imports': 7.27.1
+      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.0)
+      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.0)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.0)
+      '@babel/preset-react': 7.28.5(@babel/core@7.29.0)
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
+      '@react-native/babel-preset': 0.81.5(@babel/core@7.29.0)
+      babel-plugin-react-compiler: 1.0.0
+      babel-plugin-react-native-web: 0.21.2
+      babel-plugin-syntax-hermes-parser: 0.29.1
+      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.0)
+      debug: 4.4.3
+      react-refresh: 0.17.0
+      resolve-from: 5.0.0
+    optionalDependencies:
+      '@babel/runtime': 7.28.4
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@babel/core'
+      - supports-color
+
   babel-preset-jest@29.6.3(@babel/core@7.28.5):
     dependencies:
       '@babel/core': 7.28.5
       babel-plugin-jest-hoist: 29.6.3
       babel-preset-current-node-syntax: 1.2.0(@babel/core@7.28.5)
 
+  babel-preset-jest@29.6.3(@babel/core@7.29.0):
+    dependencies:
+      '@babel/core': 7.29.0
+      babel-plugin-jest-hoist: 29.6.3
+      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.0)
+
   balanced-match@1.0.2: {}
 
   base64-js@1.5.1: {}
 
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
+  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
     dependencies:
       '@better-auth/core': 1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)
       '@better-auth/telemetry': 1.4.18(@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0))
@@ -11575,14 +12511,14 @@ snapshots:
       nanostores: 1.1.0
       zod: 4.3.6
     optionalDependencies:
-      '@tanstack/react-start': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/react-start': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       drizzle-kit: 0.31.8
       drizzle-orm: 0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0)
       mysql2: 3.16.0
-      next: 16.0.0(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      next: 16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   better-call@1.1.8(zod@4.3.6):
     dependencies:
@@ -11721,6 +12657,9 @@ snapshots:
 
   caniuse-lite@1.0.30001761: {}
 
+  caniuse-lite@1.0.30001775:
+    optional: true
+
   chai@5.3.3:
     dependencies:
       assertion-error: 2.0.1
@@ -11763,18 +12702,18 @@ snapshots:
       domutils: 3.2.2
     optional: true
 
-  cheerio@1.1.2:
+  cheerio@1.2.0:
     dependencies:
       cheerio-select: 2.1.0
       dom-serializer: 2.0.0
       domhandler: 5.0.3
       domutils: 3.2.2
       encoding-sniffer: 0.2.1
-      htmlparser2: 10.0.0
+      htmlparser2: 10.1.0
       parse5: 7.3.0
       parse5-htmlparser2-tree-adapter: 7.1.0
       parse5-parser-stream: 7.1.2
-      undici: 7.16.0
+      undici: 7.22.0
       whatwg-mimetype: 4.0.0
     optional: true
 
@@ -11842,8 +12781,7 @@ snapshots:
 
   clone@1.0.4: {}
 
-  cluster-key-slot@1.1.2:
-    optional: true
+  cluster-key-slot@1.1.2: {}
 
   co@4.6.0: {}
 
@@ -11944,6 +12882,22 @@ snapshots:
       - supports-color
       - ts-node
 
+  create-jest@29.7.0(@types/node@25.3.3):
+    dependencies:
+      '@jest/types': 29.6.3
+      chalk: 4.1.2
+      exit: 0.1.2
+      graceful-fs: 4.2.11
+      jest-config: 29.7.0(@types/node@25.3.3)
+      jest-util: 29.7.0
+      prompts: 2.4.2
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
+    optional: true
+
   cross-env@7.0.3:
     dependencies:
       cross-spawn: 7.0.6
@@ -12053,8 +13007,7 @@ snapshots:
 
   delayed-stream@1.0.0: {}
 
-  denque@2.1.0:
-    optional: true
+  denque@2.1.0: {}
 
   depd@2.0.0: {}
 
@@ -12062,8 +13015,6 @@ snapshots:
 
   destroy@1.2.0: {}
 
-  detect-libc@1.0.3: {}
-
   detect-libc@2.1.2: {}
 
   detect-newline@3.1.0: {}
@@ -12072,7 +13023,7 @@ snapshots:
 
   diff-sequences@29.6.3: {}
 
-  diff@8.0.2:
+  diff@8.0.3:
     optional: true
 
   dir-glob@3.0.1:
@@ -12156,10 +13107,18 @@ snapshots:
 
   ee-first@1.1.1: {}
 
-  effect@3.19.14:
+  effect@4.0.0-beta.23:
     dependencies:
       '@standard-schema/spec': 1.1.0
-      fast-check: 3.23.2
+      fast-check: 4.5.3
+      find-my-way-ts: 0.1.6
+      ini: 6.0.0
+      kubernetes-types: 1.30.0
+      msgpackr: 1.11.8
+      multipasta: 0.2.7
+      toml: 3.0.0
+      uuid: 13.0.0
+      yaml: 2.8.2
 
   electron-to-chromium@1.5.267: {}
 
@@ -12186,6 +13145,9 @@ snapshots:
 
   entities@6.0.1: {}
 
+  entities@7.0.1:
+    optional: true
+
   env-editor@0.4.2: {}
 
   error-ex@1.3.4:
@@ -12458,7 +13420,7 @@ snapshots:
     dependencies:
       eslint: 9.39.2(jiti@2.6.1)
 
-  eslint-config-universe@15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.7.4)(typescript@5.9.3):
+  eslint-config-universe@15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3):
     dependencies:
       '@typescript-eslint/eslint-plugin': 8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
       '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
@@ -12467,12 +13429,12 @@ snapshots:
       eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.6.1))
       eslint-plugin-n: 17.23.1(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
       eslint-plugin-node: 11.1.0(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-prettier: 5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.6.1)))(eslint@9.39.2(jiti@2.6.1))(prettier@3.7.4)
+      eslint-plugin-prettier: 5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.6.1)))(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)
       eslint-plugin-react: 7.37.5(eslint@9.39.2(jiti@2.6.1))
       eslint-plugin-react-hooks: 5.2.0(eslint@9.39.2(jiti@2.6.1))
       globals: 16.5.0
     optionalDependencies:
-      prettier: 3.7.4
+      prettier: 3.8.1
     transitivePeerDependencies:
       - '@types/eslint'
       - eslint-import-resolver-typescript
@@ -12590,10 +13552,10 @@ snapshots:
       resolve: 1.22.11
       semver: 6.3.1
 
-  eslint-plugin-prettier@5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.6.1)))(eslint@9.39.2(jiti@2.6.1))(prettier@3.7.4):
+  eslint-plugin-prettier@5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.6.1)))(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1):
     dependencies:
       eslint: 9.39.2(jiti@2.6.1)
-      prettier: 3.7.4
+      prettier: 3.8.1
       prettier-linter-helpers: 1.0.0
       synckit: 0.11.11
     optionalDependencies:
@@ -12745,6 +13707,16 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@expo/image-utils': 0.8.8
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+    transitivePeerDependencies:
+      - supports-color
+
   expo-constants@18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)):
     dependencies:
       '@expo/config': 12.0.13
@@ -12754,6 +13726,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  expo-constants@18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)):
+    dependencies:
+      '@expo/config': 12.0.13
+      '@expo/env': 2.0.8
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+    transitivePeerDependencies:
+      - supports-color
+
   expo-dev-client@6.0.20(expo@54.0.33):
     dependencies:
       expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -12788,6 +13769,11 @@ snapshots:
       expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)):
+    dependencies:
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+
   expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -12795,6 +13781,13 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      fontfaceobserver: 2.3.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+
   expo-json-utils@0.15.0: {}
 
   expo-keep-awake@15.0.8(expo@54.0.33)(react@19.1.0):
@@ -12812,6 +13805,16 @@ snapshots:
       - expo
       - supports-color
 
+  expo-linking@8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      invariant: 2.2.4
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+    transitivePeerDependencies:
+      - expo
+      - supports-color
+
   expo-localization@17.0.8(expo@54.0.33)(react@19.1.0):
     dependencies:
       expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -12826,26 +13829,26 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.28.5)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.28.5))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.7.4)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.17.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.17.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@babel/cli': 7.28.3(@babel/core@7.28.5)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/preset-env': 7.28.5(@babel/core@7.28.5)
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.28.5)
+      '@babel/cli': 7.28.3(@babel/core@7.29.0)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
+      '@babel/preset-env': 7.28.5(@babel/core@7.29.0)
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
       '@expo/npm-proofread': 1.0.1
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.17.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.17.0)
       commander: 12.1.0
-      eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.7.4)(typescript@5.9.3)
+      eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3)
       glob: 13.0.0
-      jest-expo: 54.0.17(@babel/core@7.28.5)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      jest-expo: 54.0.17(@babel/core@7.29.0)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       jest-snapshot-prettier: prettier@2.8.8
       jest-watch-typeahead: 2.2.1(jest@29.7.0(@types/node@24.10.4))
       resolve-workspace-root: 2.0.0
-      ts-jest: 29.0.5(@babel/core@7.28.5)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.28.5))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3)
+      ts-jest: 29.0.5(@babel/core@7.29.0)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3)
       typescript: 5.9.3
     transitivePeerDependencies:
       - '@babel/core'
@@ -12884,7 +13887,56 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
-  expo-router@6.0.23(9471de8f7829ecb4f3c776787ee824a6):
+  expo-modules-core@3.0.29(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      invariant: 2.2.4
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+
+  expo-router@6.0.23(9c9430879de51b484c3e68e2beaf4aeb):
+    dependencies:
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/schema-utils': 0.1.8
+      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      client-only: 0.0.1
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-server: 1.0.5
+      fast-deep-equal: 3.1.3
+      invariant: 2.2.4
+      nanoid: 3.3.11
+      query-string: 7.1.3
+      react: 19.1.0
+      react-fast-compare: 3.2.2
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      semver: 7.6.3
+      server-only: 0.0.1
+      sf-symbols-typescript: 2.2.0
+      shallowequal: 1.1.0
+      use-latest-callback: 0.2.6(react@19.1.0)
+      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+    optionalDependencies:
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
+      react-native-reanimated: 4.1.6(@babel/core@7.29.0)(react-native-worklets@0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
+      - '@types/react'
+      - '@types/react-dom'
+      - supports-color
+    optional: true
+
+  expo-router@6.0.23(a9179ff0b15fe10f2a71d6f189aa330e):
     dependencies:
       '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/schema-utils': 0.1.8
@@ -12917,7 +13969,7 @@ snapshots:
       use-latest-callback: 0.2.6(react@19.1.0)
       vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
     optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       react-dom: 19.1.1(react@19.1.0)
       react-native-reanimated: 4.1.6(@babel/core@7.28.5)(react-native-worklets@0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
@@ -12950,37 +14002,72 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-updates-interface@2.0.0(expo@54.0.33):
-    dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-
-  expo@54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-updates-interface@2.0.0(expo@54.0.33):
+    dependencies:
+      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+
+  expo@54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@babel/runtime': 7.28.4
+      '@expo/cli': 54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+      '@expo/config': 12.0.13
+      '@expo/config-plugins': 54.0.4
+      '@expo/devtools': 0.1.8(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/fingerprint': 0.15.4
+      '@expo/metro': 54.2.0
+      '@expo/metro-config': 54.0.14(expo@54.0.33)
+      '@expo/vector-icons': 15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@ungap/structured-clone': 1.3.0
+      babel-preset-expo: 54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2)
+      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-keep-awake: 15.0.8(expo@54.0.33)(react@19.1.0)
+      expo-modules-autolinking: 3.0.24
+      expo-modules-core: 3.0.29(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      pretty-format: 29.7.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-refresh: 0.14.2
+      whatwg-url-without-unicode: 8.0.0-3
+    optionalDependencies:
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@babel/core'
+      - bufferutil
+      - expo-router
+      - graphql
+      - supports-color
+      - utf-8-validate
+
+  expo@54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/runtime': 7.28.4
-      '@expo/cli': 54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+      '@expo/cli': 54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
       '@expo/config': 12.0.13
       '@expo/config-plugins': 54.0.4
-      '@expo/devtools': 0.1.8(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/devtools': 0.1.8(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/fingerprint': 0.15.4
       '@expo/metro': 54.2.0
       '@expo/metro-config': 54.0.14(expo@54.0.33)
-      '@expo/vector-icons': 15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/vector-icons': 15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@ungap/structured-clone': 1.3.0
-      babel-preset-expo: 54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2)
-      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2)
+      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-keep-awake: 15.0.8(expo@54.0.33)(react@19.1.0)
       expo-modules-autolinking: 3.0.24
-      expo-modules-core: 3.0.29(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-modules-core: 3.0.29(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       pretty-format: 29.7.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
       react-refresh: 0.14.2
       whatwg-url-without-unicode: 8.0.0-3
     optionalDependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@babel/core'
       - bufferutil
@@ -12993,9 +14080,9 @@ snapshots:
 
   exsolve@1.0.8: {}
 
-  fast-check@3.23.2:
+  fast-check@4.5.3:
     dependencies:
-      pure-rand: 6.1.0
+      pure-rand: 7.0.1
 
   fast-deep-equal@3.1.3: {}
 
@@ -13073,6 +14160,9 @@ snapshots:
 
   flatted@3.3.3: {}
 
+  flatted@3.3.4:
+    optional: true
+
   flow-enums-runtime@0.0.6: {}
 
   fontfaceobserver@2.3.0: {}
@@ -13274,12 +14364,12 @@ snapshots:
 
   html-escaper@2.0.2: {}
 
-  htmlparser2@10.0.0:
+  htmlparser2@10.1.0:
     dependencies:
       domelementtype: 2.3.0
       domhandler: 5.0.3
       domutils: 3.2.2
-      entities: 6.0.1
+      entities: 7.0.1
     optional: true
 
   http-errors@2.0.1:
@@ -13318,7 +14408,7 @@ snapshots:
     dependencies:
       safer-buffer: 2.1.2
 
-  iconv-lite@0.7.1:
+  iconv-lite@0.7.2:
     dependencies:
       safer-buffer: 2.1.2
     optional: true
@@ -13367,7 +14457,7 @@ snapshots:
 
   ini@1.3.8: {}
 
-  ini@4.1.3: {}
+  ini@6.0.0: {}
 
   internal-slot@1.1.0:
     dependencies:
@@ -13392,7 +14482,6 @@ snapshots:
       standard-as-callback: 2.1.0
     transitivePeerDependencies:
       - supports-color
-    optional: true
 
   is-array-buffer@3.0.5:
     dependencies:
@@ -13535,7 +14624,7 @@ snapshots:
 
   isarray@2.0.5: {}
 
-  isbot@5.1.32:
+  isbot@5.1.35:
     optional: true
 
   isexe@2.0.0: {}
@@ -13641,6 +14730,26 @@ snapshots:
       - supports-color
       - ts-node
 
+  jest-cli@29.7.0(@types/node@25.3.3):
+    dependencies:
+      '@jest/core': 29.7.0
+      '@jest/test-result': 29.7.0
+      '@jest/types': 29.6.3
+      chalk: 4.1.2
+      create-jest: 29.7.0(@types/node@25.3.3)
+      exit: 0.1.2
+      import-local: 3.2.0
+      jest-config: 29.7.0(@types/node@25.3.3)
+      jest-util: 29.7.0
+      jest-validate: 29.7.0
+      yargs: 17.7.2
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
+    optional: true
+
   jest-config@29.7.0(@types/node@24.10.4):
     dependencies:
       '@babel/core': 7.28.5
@@ -13671,6 +14780,37 @@ snapshots:
       - babel-plugin-macros
       - supports-color
 
+  jest-config@29.7.0(@types/node@25.3.3):
+    dependencies:
+      '@babel/core': 7.28.5
+      '@jest/test-sequencer': 29.7.0
+      '@jest/types': 29.6.3
+      babel-jest: 29.7.0(@babel/core@7.28.5)
+      chalk: 4.1.2
+      ci-info: 3.9.0
+      deepmerge: 4.3.1
+      glob: 7.2.3
+      graceful-fs: 4.2.11
+      jest-circus: 29.7.0
+      jest-environment-node: 29.7.0
+      jest-get-type: 29.6.3
+      jest-regex-util: 29.6.3
+      jest-resolve: 29.7.0
+      jest-runner: 29.7.0
+      jest-util: 29.7.0
+      jest-validate: 29.7.0
+      micromatch: 4.0.8
+      parse-json: 5.2.0
+      pretty-format: 29.7.0
+      slash: 3.0.0
+      strip-json-comments: 3.1.1
+    optionalDependencies:
+      '@types/node': 25.3.3
+    transitivePeerDependencies:
+      - babel-plugin-macros
+      - supports-color
+    optional: true
+
   jest-diff@29.7.0:
     dependencies:
       chalk: 4.1.2
@@ -13721,21 +14861,21 @@ snapshots:
       jest-mock: 29.7.0
       jest-util: 29.7.0
 
-  jest-expo@54.0.17(@babel/core@7.28.5)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  jest-expo@54.0.17(@babel/core@7.29.0)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       '@expo/config': 12.0.13
       '@expo/json-file': 10.0.8
       '@jest/create-cache-key-function': 29.7.0
       '@jest/globals': 29.7.0
-      babel-jest: 29.7.0(@babel/core@7.28.5)
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      babel-jest: 29.7.0(@babel/core@7.29.0)
+      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       jest-environment-jsdom: 29.7.0
       jest-snapshot: 29.7.0
       jest-watch-select-projects: 2.0.0
       jest-watch-typeahead: 2.2.1(jest@29.7.0(@types/node@24.10.4))
       json5: 2.2.3
       lodash: 4.17.21
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
       react-test-renderer: 19.1.0(react@19.1.0)
       server-only: 0.0.1
       stacktrace-js: 2.0.2
@@ -13975,6 +15115,19 @@ snapshots:
       - supports-color
       - ts-node
 
+  jest@29.7.0(@types/node@25.3.3):
+    dependencies:
+      '@jest/core': 29.7.0
+      '@jest/types': 29.6.3
+      import-local: 3.2.0
+      jest-cli: 29.7.0(@types/node@25.3.3)
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
+    optional: true
+
   jimp-compact@0.16.1: {}
 
   jiti@2.6.1: {}
@@ -14149,11 +15302,9 @@ snapshots:
 
   lodash.debounce@4.0.8: {}
 
-  lodash.defaults@4.2.0:
-    optional: true
+  lodash.defaults@4.2.0: {}
 
-  lodash.isarguments@3.1.0:
-    optional: true
+  lodash.isarguments@3.1.0: {}
 
   lodash.memoize@4.1.2: {}
 
@@ -14186,7 +15337,7 @@ snapshots:
     dependencies:
       yallist: 3.1.1
 
-  lru.min@1.1.3:
+  lru.min@1.1.4:
     optional: true
 
   magic-string@0.30.21:
@@ -14298,7 +15449,7 @@ snapshots:
   metro-source-map@0.83.3:
     dependencies:
       '@babel/traverse': 7.28.5
-      '@babel/traverse--for-generate-function-map': '@babel/traverse@7.28.5'
+      '@babel/traverse--for-generate-function-map': '@babel/traverse@7.29.0'
       '@babel/types': 7.28.5
       flow-enums-runtime: 0.0.6
       invariant: 2.2.4
@@ -14414,7 +15565,7 @@ snapshots:
 
   mime@1.6.0: {}
 
-  mime@3.0.0: {}
+  mime@4.1.0: {}
 
   mimic-fn@1.2.0: {}
 
@@ -14474,9 +15625,9 @@ snapshots:
       aws-ssl-profiles: 1.1.2
       denque: 2.1.0
       generate-function: 2.3.1
-      iconv-lite: 0.7.1
+      iconv-lite: 0.7.2
       long: 5.3.2
-      lru.min: 1.1.3
+      lru.min: 1.1.4
       named-placeholders: 1.1.6
       seq-queue: 0.0.5
       sqlstring: 2.3.3
@@ -14490,7 +15641,7 @@ snapshots:
 
   named-placeholders@1.1.6:
     dependencies:
-      lru.min: 1.1.3
+      lru.min: 1.1.4
     optional: true
 
   nanoid@3.3.11: {}
@@ -14513,15 +15664,15 @@ snapshots:
     optionalDependencies:
       '@rollup/rollup-linux-x64-gnu': 4.54.0
 
-  next@16.0.0(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
       '@next/env': 16.0.0
       '@swc/helpers': 0.5.15
-      caniuse-lite: 1.0.30001761
+      caniuse-lite: 1.0.30001775
       postcss: 8.4.31
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
-      styled-jsx: 5.1.6(@babel/core@7.28.5)(react@19.1.0)
+      styled-jsx: 5.1.6(@babel/core@7.29.0)(react@19.1.0)
     optionalDependencies:
       '@next/swc-darwin-arm64': 16.0.0
       '@next/swc-darwin-x64': 16.0.0
@@ -14539,10 +15690,10 @@ snapshots:
       - babel-plugin-macros
     optional: true
 
-  nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       chalk: 5.6.2
-      react-native-nitro-modules: 0.26.4(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-nitro-modules: 0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       ts-morph: 25.0.1
       yargs: 17.7.2
       zod: 4.3.6
@@ -14550,8 +15701,6 @@ snapshots:
       - react
       - react-native
 
-  node-addon-api@7.1.1: {}
-
   node-fetch-native@1.6.7: {}
 
   node-forge@1.3.3: {}
@@ -14850,7 +15999,7 @@ snapshots:
 
   prettier@2.8.8: {}
 
-  prettier@3.7.4: {}
+  prettier@3.8.1: {}
 
   pretty-bytes@5.6.0: {}
 
@@ -14893,6 +16042,8 @@ snapshots:
 
   pure-rand@6.1.0: {}
 
+  pure-rand@7.0.1: {}
+
   qrcode-terminal@0.11.0: {}
 
   quansync@0.2.11: {}
@@ -14956,11 +16107,22 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  react-native-is-edge-to-edge@1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+    optional: true
+
   react-native-nitro-modules@0.26.4(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  react-native-nitro-modules@0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+
   react-native-reanimated@4.1.6(@babel/core@7.28.5)(react-native-worklets@0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/core': 7.28.5
@@ -14970,11 +16132,27 @@ snapshots:
       react-native-worklets: 0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       semver: 7.7.2
 
+  react-native-reanimated@4.1.6(@babel/core@7.29.0)(react-native-worklets@0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@babel/core': 7.29.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-worklets: 0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      semver: 7.7.2
+    optional: true
+
   react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
 
+  react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+    optional: true
+
   react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -14983,6 +16161,15 @@ snapshots:
       react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       warn-once: 0.1.1
 
+  react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-freeze: 1.0.4(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      warn-once: 0.1.1
+    optional: true
+
   react-native-svg@15.12.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       css-select: 5.2.2
@@ -15010,6 +16197,26 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  react-native-worklets@0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.0)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-optional-chaining': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.0)
+      '@babel/preset-typescript': 7.27.1(@babel/core@7.29.0)
+      convert-source-map: 2.0.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      semver: 7.7.3
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
   react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0):
     dependencies:
       '@jest/create-cache-key-function': 29.7.0
@@ -15057,6 +16264,53 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0):
+    dependencies:
+      '@jest/create-cache-key-function': 29.7.0
+      '@react-native/assets-registry': 0.81.5
+      '@react-native/codegen': 0.81.5(@babel/core@7.29.0)
+      '@react-native/community-cli-plugin': 0.81.5
+      '@react-native/gradle-plugin': 0.81.5
+      '@react-native/js-polyfills': 0.81.5
+      '@react-native/normalize-colors': 0.81.5
+      '@react-native/virtualized-lists': 0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      abort-controller: 3.0.0
+      anser: 1.4.10
+      ansi-regex: 5.0.1
+      babel-jest: 29.7.0(@babel/core@7.29.0)
+      babel-plugin-syntax-hermes-parser: 0.29.1
+      base64-js: 1.5.1
+      commander: 12.1.0
+      flow-enums-runtime: 0.0.6
+      glob: 7.2.3
+      invariant: 2.2.4
+      jest-environment-node: 29.7.0
+      memoize-one: 5.2.1
+      metro-runtime: 0.83.3
+      metro-source-map: 0.83.3
+      nullthrows: 1.1.1
+      pretty-format: 29.7.0
+      promise: 8.3.0
+      react: 19.1.0
+      react-devtools-core: 6.1.5
+      react-refresh: 0.14.2
+      regenerator-runtime: 0.13.11
+      scheduler: 0.26.0
+      semver: 7.7.3
+      stacktrace-parser: 0.1.11
+      whatwg-fetch: 3.6.20
+      ws: 6.2.3
+      yargs: 17.7.2
+    optionalDependencies:
+      '@types/react': 19.1.17
+    transitivePeerDependencies:
+      - '@babel/core'
+      - '@react-native-community/cli'
+      - '@react-native/metro-config'
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
   react-refresh@0.14.2: {}
 
   react-refresh@0.17.0: {}
@@ -15116,13 +16370,11 @@ snapshots:
       indent-string: 4.0.0
       strip-indent: 3.0.0
 
-  redis-errors@1.2.0:
-    optional: true
+  redis-errors@1.2.0: {}
 
   redis-parser@3.0.0:
     dependencies:
       redis-errors: 1.2.0
-    optional: true
 
   reflect.getprototypeof@1.0.10:
     dependencies:
@@ -15307,6 +16559,9 @@ snapshots:
 
   semver@7.7.3: {}
 
+  semver@7.7.4:
+    optional: true
+
   send@0.19.2:
     dependencies:
       debug: 2.6.9
@@ -15330,12 +16585,12 @@ snapshots:
 
   serialize-error@2.1.0: {}
 
-  seroval-plugins@1.4.0(seroval@1.4.1):
+  seroval-plugins@1.5.0(seroval@1.5.0):
     dependencies:
-      seroval: 1.4.1
+      seroval: 1.5.0
     optional: true
 
-  seroval@1.4.1:
+  seroval@1.5.0:
     optional: true
 
   serve-static@1.16.3:
@@ -15381,9 +16636,9 @@ snapshots:
 
   sharp@0.34.5:
     dependencies:
-      '@img/colour': 1.0.0
+      '@img/colour': 1.1.0
       detect-libc: 2.1.2
-      semver: 7.7.3
+      semver: 7.7.4
     optionalDependencies:
       '@img/sharp-darwin-arm64': 0.34.5
       '@img/sharp-darwin-x64': 0.34.5
@@ -15544,8 +16799,7 @@ snapshots:
     dependencies:
       type-fest: 0.7.1
 
-  standard-as-callback@2.1.0:
-    optional: true
+  standard-as-callback@2.1.0: {}
 
   statuses@1.5.0: {}
 
@@ -15654,12 +16908,12 @@ snapshots:
 
   structured-headers@0.4.1: {}
 
-  styled-jsx@5.1.6(@babel/core@7.28.5)(react@19.1.0):
+  styled-jsx@5.1.6(@babel/core@7.29.0)(react@19.1.0):
     dependencies:
       client-only: 0.0.1
       react: 19.1.0
     optionalDependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
     optional: true
 
   sucrase@3.35.1:
@@ -15813,7 +17067,7 @@ snapshots:
 
   ts-interface-checker@0.1.13: {}
 
-  ts-jest@29.0.5(@babel/core@7.28.5)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.28.5))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3):
+  ts-jest@29.0.5(@babel/core@7.29.0)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3):
     dependencies:
       bs-logger: 0.2.6
       fast-json-stable-stringify: 2.1.0
@@ -15826,9 +17080,9 @@ snapshots:
       typescript: 5.9.3
       yargs-parser: 21.1.1
     optionalDependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@jest/types': 29.6.3
-      babel-jest: 29.7.0(@babel/core@7.28.5)
+      babel-jest: 29.7.0(@babel/core@7.29.0)
       esbuild: 0.25.12
 
   ts-morph@25.0.1:
@@ -15955,6 +17209,9 @@ snapshots:
 
   ufo@1.6.1: {}
 
+  ufo@1.6.3:
+    optional: true
+
   ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       '@clack/prompts': 0.11.0
@@ -16000,9 +17257,11 @@ snapshots:
 
   undici-types@7.16.0: {}
 
+  undici-types@7.18.2: {}
+
   undici@6.22.0: {}
 
-  undici@7.16.0: {}
+  undici@7.22.0: {}
 
   unicode-canonical-property-names-ecmascript@2.0.1: {}
 
@@ -16026,7 +17285,7 @@ snapshots:
   unplugin@2.3.11:
     dependencies:
       '@jridgewell/remapping': 2.3.5
-      acorn: 8.15.0
+      acorn: 8.16.0
       picomatch: 4.0.3
       webpack-virtual-modules: 0.6.2
     optional: true
@@ -16095,7 +17354,7 @@ snapshots:
 
   utils-merge@1.0.1: {}
 
-  uuid@11.1.0: {}
+  uuid@13.0.0: {}
 
   uuid@7.0.3: {}
 
@@ -16139,13 +17398,34 @@ snapshots:
       - tsx
       - yaml
 
-  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+    dependencies:
+      cac: 6.7.14
+      debug: 4.4.3
+      es-module-lexer: 1.7.0
+      pathe: 2.0.3
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+    transitivePeerDependencies:
+      - '@types/node'
+      - jiti
+      - less
+      - lightningcss
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
+  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.6.3)
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -16167,9 +17447,26 @@ snapshots:
       tsx: 4.21.0
       yaml: 2.8.2
 
-  vitefu@1.1.1(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+    dependencies:
+      esbuild: 0.27.2
+      fdir: 6.5.0(picomatch@4.0.3)
+      picomatch: 4.0.3
+      postcss: 8.5.6
+      rollup: 4.54.0
+      tinyglobby: 0.2.15
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      '@types/node': 25.3.3
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      lightningcss: 1.30.2
+      terser: 5.44.1
+      tsx: 4.21.0
+      yaml: 2.8.2
+
+  vitefu@1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+    optionalDependencies:
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     optional: true
 
   vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
@@ -16216,6 +17513,50 @@ snapshots:
       - tsx
       - yaml
 
+  vitest@3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+    dependencies:
+      '@types/chai': 5.2.3
+      '@vitest/expect': 3.2.4
+      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/pretty-format': 3.2.4
+      '@vitest/runner': 3.2.4
+      '@vitest/snapshot': 3.2.4
+      '@vitest/spy': 3.2.4
+      '@vitest/utils': 3.2.4
+      chai: 5.3.3
+      debug: 4.4.3
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      pathe: 2.0.3
+      picomatch: 4.0.3
+      std-env: 3.10.0
+      tinybench: 2.9.0
+      tinyexec: 0.3.2
+      tinyglobby: 0.2.15
+      tinypool: 1.1.1
+      tinyrainbow: 2.0.0
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      why-is-node-running: 2.3.0
+    optionalDependencies:
+      '@types/debug': 4.1.12
+      '@types/node': 25.3.3
+      '@vitest/ui': 3.2.4(vitest@3.2.4)
+      jsdom: 20.0.3
+    transitivePeerDependencies:
+      - jiti
+      - less
+      - lightningcss
+      - msw
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
   vlq@1.0.1: {}
 
   w3c-xmlserializer@4.0.0:
@@ -16349,6 +17690,8 @@ snapshots:
 
   ws@8.18.3: {}
 
+  ws@8.19.0: {}
+
   xcode@3.0.1:
     dependencies:
       simple-plist: 1.3.1

From b889ea26bdfee26675091f1d136c877cdfc4e9be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 8 Mar 2026 00:29:52 +0100
Subject: [PATCH 004/129] Add @voidhash/web SDK with analytics, feature flags,
 and React hooks

- scaffold new browser-first `@voidhash/web` package with core client/runtime modules
- implement analytics queue/dispatcher, feature flag services, identity/cache/platform layers, and React provider/hooks
- add web SDK tests/docs and update `@voidhash/api-spec` schema + lockfile for new contract/deps
---
 docs/JS-SDK.md                                | 541 ++++++++++++++++++
 libraries/web/build.ts                        |  36 ++
 libraries/web/package.json                    |  68 +++
 libraries/web/src/client-effect.ts            | 320 +++++++++++
 libraries/web/src/client.ts                   | 157 +++++
 .../src/core/analytics/analytics-context.ts   |  25 +
 .../core/analytics/analytics-dispatcher.ts    | 186 ++++++
 .../web/src/core/analytics/analytics-queue.ts | 112 ++++
 libraries/web/src/core/analytics/contracts.ts |  29 +
 .../caching/adapters/local-storage-cache.ts   |  63 ++
 .../src/core/caching/adapters/memory-cache.ts |  21 +
 .../web/src/core/caching/cache-manager.ts     | 165 ++++++
 libraries/web/src/core/event-bus.ts           |  43 ++
 .../feature-flags/feature-flag-service.ts     | 100 ++++
 .../web/src/core/http/analytics-client.ts     |  70 +++
 libraries/web/src/core/http/sdk-api-client.ts | 126 ++++
 .../web/src/core/identity/identity-manager.ts |  85 +++
 .../platform/browser-platform-provider.ts     | 119 ++++
 libraries/web/src/errors.ts                   |  31 +
 libraries/web/src/index.ts                    |   3 +
 .../web/src/react/hooks/use-analytics.ts      |  25 +
 .../web/src/react/hooks/use-feature-flags.ts  | 103 ++++
 libraries/web/src/react/hooks/use-voidhash.ts |  12 +
 libraries/web/src/react/index.ts              |   4 +
 libraries/web/src/react/provider.tsx          |  92 +++
 libraries/web/src/types.ts                    | 114 ++++
 libraries/web/tests/analytics.test.ts         | 101 ++++
 libraries/web/tests/client.test.ts            | 165 ++++++
 libraries/web/tests/helpers.ts                |  55 ++
 libraries/web/tests/react.test.tsx            |  98 ++++
 libraries/web/tsconfig.json                   |   8 +
 libraries/web/vitest.unit.mts                 |  12 +
 packages/api-spec/src/schema.ts               |  15 +-
 pnpm-lock.yaml                                | 154 +++--
 34 files changed, 3218 insertions(+), 40 deletions(-)
 create mode 100644 docs/JS-SDK.md
 create mode 100644 libraries/web/build.ts
 create mode 100644 libraries/web/package.json
 create mode 100644 libraries/web/src/client-effect.ts
 create mode 100644 libraries/web/src/client.ts
 create mode 100644 libraries/web/src/core/analytics/analytics-context.ts
 create mode 100644 libraries/web/src/core/analytics/analytics-dispatcher.ts
 create mode 100644 libraries/web/src/core/analytics/analytics-queue.ts
 create mode 100644 libraries/web/src/core/analytics/contracts.ts
 create mode 100644 libraries/web/src/core/caching/adapters/local-storage-cache.ts
 create mode 100644 libraries/web/src/core/caching/adapters/memory-cache.ts
 create mode 100644 libraries/web/src/core/caching/cache-manager.ts
 create mode 100644 libraries/web/src/core/event-bus.ts
 create mode 100644 libraries/web/src/core/feature-flags/feature-flag-service.ts
 create mode 100644 libraries/web/src/core/http/analytics-client.ts
 create mode 100644 libraries/web/src/core/http/sdk-api-client.ts
 create mode 100644 libraries/web/src/core/identity/identity-manager.ts
 create mode 100644 libraries/web/src/core/platform/browser-platform-provider.ts
 create mode 100644 libraries/web/src/errors.ts
 create mode 100644 libraries/web/src/index.ts
 create mode 100644 libraries/web/src/react/hooks/use-analytics.ts
 create mode 100644 libraries/web/src/react/hooks/use-feature-flags.ts
 create mode 100644 libraries/web/src/react/hooks/use-voidhash.ts
 create mode 100644 libraries/web/src/react/index.ts
 create mode 100644 libraries/web/src/react/provider.tsx
 create mode 100644 libraries/web/src/types.ts
 create mode 100644 libraries/web/tests/analytics.test.ts
 create mode 100644 libraries/web/tests/client.test.ts
 create mode 100644 libraries/web/tests/helpers.ts
 create mode 100644 libraries/web/tests/react.test.tsx
 create mode 100644 libraries/web/tsconfig.json
 create mode 100644 libraries/web/vitest.unit.mts

diff --git a/docs/JS-SDK.md b/docs/JS-SDK.md
new file mode 100644
index 000000000..45ff444e4
--- /dev/null
+++ b/docs/JS-SDK.md
@@ -0,0 +1,541 @@
+# Voidhash Web JS SDK Implementation Plan
+
+## Summary
+
+This document outlines the plan for a new browser-first Voidhash JavaScript SDK.
+
+The implementation should be heavily inspired by the existing React Native SDK, especially around:
+
+- client creation and initialization
+- identity management
+- cache management
+- event bus usage
+- feature flag fetching ergonomics
+- React provider and hooks
+- error handling and runtime guards
+
+Version 1 of the web SDK should focus on **analytics** and **feature flags**.
+
+The following areas are explicitly out of scope for the initial release:
+
+- paywalls
+- payments
+- purchase flows
+- native/mobile-only platform features
+
+## Recommended Package Shape
+
+Create the SDK as a new library:
+
+- path: `libraries/web`
+- package name: `@voidhash/web`
+
+This keeps the SDK family consistent with the existing React Native package:
+
+- `libraries/react-native`
+- `@voidhash/react-native`
+
+The web package should expose:
+
+- a framework-agnostic browser client
+- a React integration layer via subpath exports such as `@voidhash/web/react`
+
+## Goals
+
+- Ship a browser SDK that feels structurally similar to the React Native SDK.
+- Reuse existing shared packages where possible, especially `@voidhash/api-spec` and `@voidhash/shared`.
+- Make feature flags production-ready first, because the backend contract already exists.
+- Design analytics as a first-class SDK capability for web, even though the current React Native SDK does not yet implement an analytics transport.
+- Support anonymous and identified users.
+- Provide a React API that mirrors the ergonomics of the React Native hooks where practical.
+- Keep the SDK SSR-safe and browser-safe.
+- Keep the public surface area small and predictable for the initial release.
+
+## Non-Goals
+
+- Paywall rendering
+- Payment collection
+- Web purchase flows
+- Session replay
+- Full autocapture analytics
+- Framework-specific adapters beyond React
+- Multi-platform abstractions that weaken the browser-first design
+
+## React Native Concepts To Reuse
+
+The React Native SDK already gives us the right architectural direction. The web SDK should intentionally mirror the same internal module boundaries where they still make sense.
+
+| React Native concept | Web plan |
+| --- | --- |
+| `createVoidhashClient` entrypoint | Keep a similar factory as the main way to construct the SDK. |
+| Initialization guards in `client.tsx` | Public methods should reject or no-op consistently until initialization completes. |
+| `client-effect.ts` runtime orchestration | Keep a dedicated internal runtime layer for networking, caching, identity, and feature flags. |
+| `IdentityManager` | Reuse the same anonymous-to-identified user model, adapted to browser storage. |
+| `CacheManager` with TTL support | Keep the same cache semantics, backed by memory plus optional persistent browser storage. |
+| Event bus | Reuse an internal event bus so hooks and client subscribers share the same update path. |
+| `useFeatureFlags` hook | Preserve the same basic return shape and behavior in React. |
+| Shared SDK headers | Reuse the existing header model and fill the browser-compatible subset. |
+
+One important difference: analytics for web will need new implementation work and likely some API-spec additions, because the current React Native SDK does not yet appear to ship an analytics transport.
+
+## Proposed Directory Layout
+
+```text
+libraries/web/
+  package.json
+  tsconfig.json
+  src/
+    index.ts
+    client.ts
+    client-effect.ts
+    types.ts
+    errors.ts
+    core/
+      event-bus.ts
+      http/
+        fetch-client.ts
+      identity/
+        identity-manager.ts
+      caching/
+        cache-manager.ts
+        adapters/
+          memory-cache.ts
+          local-storage-cache.ts
+      platform/
+        browser-platform-provider.ts
+      feature-flags/
+        feature-flag-service.ts
+      analytics/
+        analytics-queue.ts
+        analytics-dispatcher.ts
+        analytics-context.ts
+    react/
+      index.ts
+      provider.tsx
+      hooks/
+        use-voidhash.ts
+        use-feature-flags.ts
+        use-analytics.ts
+```
+
+This layout deliberately mirrors the React Native SDK structure so code can be compared across platforms without unnecessary translation.
+
+## Public API Proposal
+
+The initial API should stay compact and map cleanly to the core use cases.
+
+```ts
+import { createVoidhashClient } from "@voidhash/web";
+
+const voidhash = createVoidhashClient({
+  publishableKey: "pk_live_xxx",
+  baseUrl: "https://api.voidhash.com",
+  observerMode: false,
+  featureFlags: {
+    bootstrap: false,
+  },
+  analytics: {
+    enabled: true,
+    autoPageViews: true,
+  },
+});
+
+await voidhash.initialize();
+
+await voidhash.identify("user_123", {
+  plan: "pro",
+  companyId: "acme",
+});
+
+await voidhash.track("checkout_started", {
+  source: "pricing_page",
+});
+
+const flags = await voidhash.getFeatureFlags(["new-checkout", "new-nav"]);
+const enabled = voidhash.isFeatureEnabled("new-checkout");
+```
+
+### Core Client Methods
+
+- `initialize()`
+- `identify(appUserId, attributes?)`
+- `resetIdentity()`
+- `getFeatureFlags(keys?)`
+- `refreshFeatureFlags(keys?)`
+- `isFeatureEnabled(key)`
+- `getFeatureVariant(key)`
+- `track(eventName, properties?, options?)`
+- `page(pageName?, properties?)`
+- `flushAnalytics()`
+- `on(eventName, handler)`
+- `off(eventName, handler)`
+- `destroy()`
+
+### React Surface
+
+```ts
+import {
+  VoidhashProvider,
+  useFeatureFlags,
+  useVoidhash,
+} from "@voidhash/web/react";
+```
+
+The React hooks should mirror the React Native ergonomics as closely as possible:
+
+- `useVoidhash()`
+- `useFeatureFlags(keys?)`
+- `useAnalytics()` or direct access through `useVoidhash()`
+
+## Initialization Lifecycle
+
+Initialization should follow the same disciplined flow as the React Native SDK:
+
+1. Validate configuration.
+2. Create the browser platform provider.
+3. Resolve cache adapters.
+4. Resolve or create an anonymous `appUserId`.
+5. Build common headers and auth headers.
+6. Create the internal runtime services.
+7. Mark the client as initialized.
+8. Optionally warm feature flag state.
+
+Important constraints:
+
+- No browser globals should be touched at module import time.
+- `window`, `document`, `navigator`, and `localStorage` access must happen behind runtime guards.
+- Public methods should fail with clear SDK errors if called before initialization.
+- React components should be able to mount safely in SSR environments without crashing.
+
+## Identity Model
+
+The web SDK should preserve the same identity concepts as React Native:
+
+- anonymous users get an SDK-managed generated `appUserId`
+- identified users can replace the anonymous user via `identify`
+- user attributes should be synchronized in a predictable order
+- resetting identity should rotate back to a new anonymous user
+
+### Identity Requirements
+
+- Persist the current `appUserId` in browser storage.
+- Keep an in-memory copy for fast request construction.
+- Treat identity changes as cache boundaries.
+- Clear or segregate user-scoped caches when the identity changes.
+- Re-fetch feature flags after `identify` and `resetIdentity`.
+- Emit an identity-changed event so React hooks and host apps can respond.
+
+## Feature Flags Plan
+
+Feature flags are the most straightforward capability to implement first because the backend contract already exists.
+
+### Behavior To Preserve From React Native
+
+- Fetch from the existing server-side flag evaluation endpoint.
+- Cache responses by sorted key list.
+- Use a 5-minute TTL by default.
+- Emit a `feature-flags-fetched` event when fresh data arrives.
+- Expose a React hook with:
+  - `data`
+  - `isEnabled`
+  - `getVariant`
+  - `isLoading`
+  - `error`
+  - `refetch`
+
+### Web-Specific Enhancements
+
+- Support bootstrapped flags from server-rendered HTML when available.
+- Refresh on `visibilitychange` when the tab becomes active again.
+- Refresh on `online` when the browser regains connectivity.
+- Keep an in-memory cache for fast repeated lookups.
+- Optionally persist the latest flag payloads in `localStorage`.
+
+### Feature Flag Response Shape
+
+The SDK should preserve the same conceptual shape used today:
+
+```ts
+type FeatureFlagEntry = {
+  key: string;
+  enabled: boolean;
+  variantKey?: string | null;
+  payload?: unknown;
+};
+```
+
+### Initial Scope
+
+- Remote evaluation only
+- No local rule engine
+- No streaming updates
+- No paywall-targeting behavior
+
+## Analytics Plan
+
+Analytics is a first-class goal of the web SDK, but it needs a clearer contract than feature flags currently do.
+
+### Prerequisite: API Contract Alignment
+
+Before analytics implementation begins, the repo should define or confirm the following in `@voidhash/api-spec`:
+
+- the analytics ingestion endpoint path
+- the request payload shape
+- supported batching behavior
+- size limits and flush limits
+- success and partial-failure semantics
+- retryable vs non-retryable errors
+- expected headers for browser SDK clients
+
+This should be treated as a required upstream step. The web SDK should not invent a private analytics contract inside `libraries/web`.
+
+### Analytics V1 Scope
+
+- Manual `track` calls
+- Manual `page` calls
+- Optional automatic initial page-view capture
+- Anonymous and identified user support
+- Browser context enrichment
+- Batched delivery
+- Reliable flush on page hide / unload where possible
+
+### Recommended Event Payload Shape
+
+The final schema should come from `@voidhash/api-spec`, but the SDK should plan around this structure:
+
+```ts
+type AnalyticsEvent = {
+  event: string;
+  properties?: Record<string, unknown>;
+  timestamp: string;
+  appUserId: string;
+  anonymousId?: string;
+  context: {
+    url?: string;
+    path?: string;
+    referrer?: string;
+    locale?: string;
+    userAgent?: string;
+    screen?: {
+      width: number;
+      height: number;
+    };
+  };
+};
+```
+
+### Delivery Strategy
+
+- Queue events in memory for low-latency writes.
+- Persist a bounded retry queue in browser storage.
+- Batch events on a short interval and when the queue reaches a threshold.
+- Use `navigator.sendBeacon` when supported for page-exit flushes.
+- Fall back to `fetch` with `keepalive` when necessary.
+- Apply exponential backoff for retryable failures.
+- Drop or quarantine malformed events rather than poisoning the queue.
+
+### Analytics V1 Non-Goals
+
+- Click autocapture
+- DOM event autocapture
+- Session replay
+- Heatmaps
+- Cross-tab event coordination
+- Marketing attribution enrichment beyond basic browser context
+
+## Headers, Transport, and Platform Data
+
+The web SDK should reuse the existing SDK header model instead of creating a parallel convention.
+
+### Header Strategy
+
+- Reuse publishable-key auth headers.
+- Reuse the browser-compatible subset of common SDK headers.
+- Set web-specific platform values consistently.
+- Continue sending a nonce and SDK version metadata.
+- Preserve observer-mode support if it is already part of the shared contract.
+
+### Browser Platform Mapping
+
+The browser platform provider should be responsible for gathering:
+
+- locale information
+- user agent information when permitted
+- current URL context
+- timezone
+- screen dimensions
+- debug/dev mode hints when available
+
+Any native-only header fields should either:
+
+- be omitted when optional, or
+- be set through explicit shared defaults rather than ad hoc web-only behavior
+
+## Storage and Caching Strategy
+
+Use a layered cache model:
+
+1. In-memory cache for hot reads
+2. `localStorage` adapter for persistence
+3. Graceful fallback to memory-only mode when storage is unavailable
+
+### What Should Be Cached
+
+- feature flag responses
+- current identity
+- pending analytics queue
+- last successful analytics flush metadata if useful for debugging
+
+### Cache Rules
+
+- Keep the 5-minute feature flag TTL from React Native by default.
+- Namespace cache keys by environment and `appUserId`.
+- Keep cache clearing explicit and testable.
+- Bound the analytics queue so storage growth is controlled.
+
+## Error Handling
+
+The public client should keep the same pattern as React Native:
+
+- internal errors stay implementation-specific
+- public methods translate them into stable SDK errors
+- hooks expose user-actionable errors without leaking internal details
+
+The web SDK should define clear error categories for:
+
+- initialization failures
+- configuration errors
+- analytics dispatch failures
+- feature flag fetch failures
+- storage access failures
+- identity errors
+
+## React Integration
+
+The React layer should be a thin wrapper over the core client, not a second implementation.
+
+### Provider Behavior
+
+- `VoidhashProvider` accepts an already-created client or client config.
+- It initializes the client once on mount.
+- It exposes SDK state through context.
+- It subscribes to SDK events and updates hooks from the shared event bus.
+
+### Hook Design
+
+`useFeatureFlags(keys?)` should preserve the React Native mental model:
+
+- fetch only when initialized
+- reuse cached data when available
+- subscribe to `feature-flags-fetched`
+- avoid unnecessary rerenders
+- expose helpers for `isEnabled` and `getVariant`
+
+An analytics hook can stay simple in V1:
+
+- expose `track`
+- expose `page`
+- expose `flushAnalytics`
+- expose analytics enabled/disabled state
+
+## Build and Publishing Requirements
+
+- Publish TypeScript types.
+- Publish ESM output.
+- Publish CJS output only if the repo still requires it.
+- Keep the package tree-shakeable.
+- Avoid Node-only dependencies.
+- Ensure the browser build does not accidentally pull in React unless the React subpath is imported.
+
+## Testing Plan
+
+### Unit Tests
+
+- config validation
+- initialization guards
+- identity creation and reset
+- cache TTL behavior
+- feature flag response caching
+- analytics queue enqueue/dequeue behavior
+- analytics retry rules
+- header construction
+
+### Browser Integration Tests
+
+- `localStorage` unavailable
+- `sendBeacon` available vs unavailable
+- `visibilitychange` refresh behavior
+- `online` refresh behavior
+- multiple tabs with distinct identities
+- SSR-safe import and mount behavior
+
+### Contract Tests
+
+- feature flag request/response compatibility with `@voidhash/api-spec`
+- analytics contract compatibility once defined upstream
+
+## Example Apps and Documentation
+
+The SDK should ship with examples in `examples/`:
+
+- a vanilla JavaScript example
+- a React example
+
+Documentation should cover:
+
+- installation
+- initialization
+- identify vs anonymous behavior
+- tracking events
+- fetching feature flags
+- React hooks
+- SSR caveats
+- storage and privacy behavior
+
+## Phased Delivery Plan
+
+| Phase | Scope | Output |
+| --- | --- | --- |
+| 0 | API and package alignment | Confirm `libraries/web`, confirm `@voidhash/web`, finalize analytics API contract in `@voidhash/api-spec`. |
+| 1 | Core runtime | Create client factory, runtime layer, event bus, identity manager, cache manager, browser platform provider, fetch transport. |
+| 2 | Feature flags | Implement `getFeatureFlags`, caching, refetch behavior, React hook parity, tests. |
+| 3 | Analytics | Implement `track`, `page`, queueing, batching, retrying, page-exit flush, tests. |
+| 4 | React layer and examples | Add provider, hooks, example apps, usage docs. |
+| 5 | Hardening and release | Add observability, edge-case fixes, publishing config, release docs. |
+
+## Decisions To Lock Early
+
+- Use `libraries/web` and `@voidhash/web`.
+- Ship a core browser SDK first, with React support as a thin wrapper.
+- Keep feature flags server-evaluated in V1.
+- Keep analytics manual-first in V1.
+- Exclude paywalls and payments completely from the initial implementation.
+- Upstream any shared contract changes into `@voidhash/api-spec` before depending on them in the SDK.
+
+## Open Questions
+
+- What is the final public analytics ingestion contract?
+- Should automatic page-view tracking be enabled by default or opt-in?
+- Should bootstrapped feature flags be part of the initial release or a follow-up?
+- Do we want a separate package for React helpers later, or is a `/react` subpath enough?
+- What observer-mode semantics should the web SDK expose at launch?
+- How much user-agent and browser-context enrichment should happen by default from a privacy standpoint?
+
+## Recommended First Implementation Sequence
+
+1. Create `libraries/web` with package scaffolding and shared exports.
+2. Port the React Native identity, cache, and event bus concepts into browser-safe modules.
+3. Implement feature flags first using the existing API contract and 5-minute TTL parity.
+4. Add the React provider and `useFeatureFlags` hook.
+5. Finalize the analytics API contract in `@voidhash/api-spec`.
+6. Implement analytics queueing, batching, and flush behavior.
+7. Add examples, tests, and publishable package metadata.
+
+## Success Criteria For V1
+
+- A browser app can initialize the SDK with a publishable key.
+- The SDK can manage anonymous and identified users safely.
+- Feature flags can be fetched, cached, and consumed from React hooks.
+- Analytics events can be queued and delivered reliably from the browser.
+- The SDK remains fully independent of paywall and payment code.
+- The package fits the existing monorepo and naming conventions cleanly.
diff --git a/libraries/web/build.ts b/libraries/web/build.ts
new file mode 100644
index 000000000..eeb40bb59
--- /dev/null
+++ b/libraries/web/build.ts
@@ -0,0 +1,36 @@
+import * as tsup from "tsup";
+
+const main = async () => {
+  await tsup.build({
+    dts: true,
+    entryPoints: {
+      index: "./src/index.ts",
+      react: "./src/react/index.ts",
+    },
+    external: ["react"],
+    format: ["cjs", "esm"],
+    outDir: "./dist",
+    outExtension: (ctx) => {
+      if (ctx.format === "cjs") {
+        return {
+          dts: ".d.ts",
+          js: ".js",
+        };
+      }
+
+      return {
+        dts: ".d.mts",
+        js: ".mjs",
+      };
+    },
+    sourcemap: true,
+    splitting: false,
+    target: "es2022",
+  });
+};
+
+main().catch((error) => {
+  // biome-ignore lint/suspicious/noConsole: Build script should print the failure.
+  console.error(error);
+  process.exit(1);
+});
diff --git a/libraries/web/package.json b/libraries/web/package.json
new file mode 100644
index 000000000..19cbcf99d
--- /dev/null
+++ b/libraries/web/package.json
@@ -0,0 +1,68 @@
+{
+  "name": "@voidhash/web",
+  "version": "0.0.1-alpha.1",
+  "description": "Browser-first Voidhash SDK.",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "libraries/web"
+  },
+  "type": "module",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./react": {
+      "import": {
+        "types": "./dist/react.d.ts",
+        "default": "./dist/react.mjs"
+      },
+      "require": {
+        "types": "./dist/react.d.ts",
+        "default": "./dist/react.js"
+      }
+    }
+  },
+  "scripts": {
+    "build": "rm -rf ./dist && tsx build.ts",
+    "typecheck": "tsgo --noEmit",
+    "test": "vitest run -c vitest.unit.mts",
+    "test:watch": "vitest -c vitest.unit.mts"
+  },
+  "dependencies": {
+    "@effect/platform": "catalog:",
+    "@voidhash/api-spec": "workspace:*",
+    "effect": "catalog:"
+  },
+  "devDependencies": {
+    "@types/react": "catalog:",
+    "@types/react-dom": "catalog:",
+    "@voidhash/tsconfig": "workspace:*",
+    "jsdom": "^20.0.3",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "tsup": "^6.1.3",
+    "tsx": "^4.19.3",
+    "typescript": "5.6.3",
+    "vite-tsconfig-paths": "catalog:",
+    "vitest": "^3.2.4"
+  },
+  "peerDependencies": {
+    "react": "*"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  }
+}
diff --git a/libraries/web/src/client-effect.ts b/libraries/web/src/client-effect.ts
new file mode 100644
index 000000000..3b741c781
--- /dev/null
+++ b/libraries/web/src/client-effect.ts
@@ -0,0 +1,320 @@
+import { VoidhashConfigurationError } from "./errors";
+import type {
+  AnalyticsFlushResult,
+  ResolvedVoidhashConfig,
+  VoidhashClientOptions,
+  VoidhashTrackOptions,
+  VoidhashTraits,
+} from "./types";
+import { createAnalyticsEvent } from "./core/analytics/analytics-context";
+import { AnalyticsDispatcher } from "./core/analytics/analytics-dispatcher";
+import { AnalyticsQueue } from "./core/analytics/analytics-queue";
+import { CacheManager } from "./core/caching/cache-manager";
+import { LocalStorageCacheAdapter } from "./core/caching/adapters/local-storage-cache";
+import { MemoryCacheAdapter } from "./core/caching/adapters/memory-cache";
+import { EventBus } from "./core/event-bus";
+import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
+import { AnalyticsHttpClient } from "./core/http/analytics-client";
+import { SdkApiClient } from "./core/http/sdk-api-client";
+import { IdentityManager } from "./core/identity/identity-manager";
+import { BrowserPlatformProvider } from "./core/platform/browser-platform-provider";
+
+const DEFAULT_BASE_URL = "https://api.voidhash.com";
+
+const assertPositiveInteger = (name: string, value: number) => {
+  if (!Number.isInteger(value) || value < 1) {
+    throw new VoidhashConfigurationError(`${name} must be a positive integer.`);
+  }
+};
+
+const deriveAnalyticsBaseUrl = (baseUrl: string, override?: string) => {
+  if (override) {
+    return new URL(override).toString();
+  }
+
+  const url = new URL(baseUrl);
+  if (url.hostname.startsWith("api.")) {
+    url.hostname = `i.${url.hostname.slice(4)}`;
+  }
+
+  return url.toString();
+};
+
+export const resolveVoidhashConfig = (
+  options: VoidhashClientOptions
+): ResolvedVoidhashConfig => {
+  const baseUrl = new URL(options.baseUrl ?? DEFAULT_BASE_URL).toString();
+  const analyticsBaseUrl = deriveAnalyticsBaseUrl(
+    baseUrl,
+    options.analytics?.baseUrl
+  );
+  const maxBatchSize = options.analytics?.maxBatchSize ?? 20;
+  const maxBatchBytes = options.analytics?.maxBatchBytes ?? 262_144;
+  const maxQueueSize = options.analytics?.maxQueueSize ?? 1_000;
+  const flushIntervalMs = options.analytics?.flushIntervalMs ?? 5_000;
+  const ttlMs = options.featureFlags?.ttlMs ?? 300_000;
+
+  if (!options.publishableKey.trim()) {
+    throw new VoidhashConfigurationError("publishableKey is required.");
+  }
+
+  assertPositiveInteger("analytics.maxBatchSize", maxBatchSize);
+  assertPositiveInteger("analytics.maxBatchBytes", maxBatchBytes);
+  assertPositiveInteger("analytics.maxQueueSize", maxQueueSize);
+  assertPositiveInteger("analytics.flushIntervalMs", flushIntervalMs);
+  assertPositiveInteger("featureFlags.ttlMs", ttlMs);
+
+  return {
+    analytics: {
+      baseUrl: analyticsBaseUrl,
+      enabled: options.analytics?.enabled ?? true,
+      flushIntervalMs,
+      maxBatchBytes,
+      maxBatchSize,
+      maxQueueSize,
+    },
+    baseUrl,
+    featureFlags: {
+      persist: options.featureFlags?.persist ?? true,
+      prefetchOnInit: options.featureFlags?.prefetchOnInit ?? false,
+      refreshOnOnline: options.featureFlags?.refreshOnOnline ?? true,
+      refreshOnVisibility: options.featureFlags?.refreshOnVisibility ?? true,
+      ttlMs,
+    },
+    initialAppUserId: options.initialAppUserId,
+    observerMode: options.observerMode ?? false,
+    publishableKey: options.publishableKey,
+  };
+};
+
+export class VoidhashClientEffect {
+  private readonly analyticsDispatcher: AnalyticsDispatcher;
+  private readonly analyticsHttpClient: AnalyticsHttpClient;
+  private readonly analyticsQueue: AnalyticsQueue;
+  private readonly cache: CacheManager;
+  private readonly eventBus: EventBus;
+  private readonly featureFlags: FeatureFlagService;
+  private readonly identityManager: IdentityManager;
+  private listeners: Array<() => void> = [];
+  private readonly platform: BrowserPlatformProvider;
+  private readonly sdkApiClient: SdkApiClient;
+
+  constructor(private readonly config: ResolvedVoidhashConfig) {
+    this.platform = new BrowserPlatformProvider();
+    this.eventBus = new EventBus();
+    this.cache = new CacheManager(
+      `@voidhash/web:${this.config.publishableKey}:${this.config.baseUrl}`,
+      new MemoryCacheAdapter(),
+      LocalStorageCacheAdapter.create()
+    );
+    this.sdkApiClient = new SdkApiClient(
+      this.config.baseUrl,
+      this.config.publishableKey,
+      this.config.observerMode,
+      this.platform
+    );
+    this.analyticsHttpClient = new AnalyticsHttpClient(
+      this.config.analytics.baseUrl,
+      this.config.publishableKey
+    );
+    this.identityManager = new IdentityManager(
+      this.cache,
+      this.sdkApiClient,
+      this.eventBus,
+      this.platform
+    );
+    this.featureFlags = new FeatureFlagService(
+      this.cache,
+      this.sdkApiClient,
+      this.eventBus,
+      this.config.featureFlags.ttlMs,
+      async () => this.identityManager.getAppUserId()
+    );
+    this.analyticsQueue = new AnalyticsQueue(
+      this.cache,
+      this.config.analytics.maxQueueSize
+    );
+    this.analyticsDispatcher = new AnalyticsDispatcher(
+      this.analyticsQueue,
+      this.analyticsHttpClient,
+      {
+        flushIntervalMs: this.config.analytics.flushIntervalMs,
+        maxBatchBytes: this.config.analytics.maxBatchBytes,
+        maxBatchSize: this.config.analytics.maxBatchSize,
+      },
+      this.eventBus
+    );
+  }
+
+  async destroy() {
+    this.detachBrowserListeners();
+    const flushResult = this.config.analytics.enabled
+      ? await this.analyticsDispatcher.flush({ force: true }).catch(() => null)
+      : null;
+    this.analyticsDispatcher.stop();
+    await this.sdkApiClient.destroy();
+    return flushResult;
+  }
+
+  getAppUserId() {
+    return this.identityManager.getAppUserId();
+  }
+
+  getEventBus() {
+    return this.eventBus;
+  }
+
+  getFeatureVariant(key: string) {
+    return this.featureFlags.getVariant(key);
+  }
+
+  isFeatureEnabled(key: string) {
+    return this.featureFlags.isEnabled(key);
+  }
+
+  async flushAnalytics(): Promise<AnalyticsFlushResult | null> {
+    if (!this.config.analytics.enabled) {
+      return null;
+    }
+
+    return this.analyticsDispatcher.flush({ force: true });
+  }
+
+  async getFeatureFlags(keys?: string[]) {
+    return this.featureFlags.getFeatureFlags(keys);
+  }
+
+  async identify(appUserId: string, traits?: VoidhashTraits) {
+    await this.identityManager.identify(appUserId, traits);
+    await this.featureFlags.clearCachedFlags();
+    await this.featureFlags.refreshTrackedKeySets();
+  }
+
+  async initialize() {
+    const appUserId = await this.identityManager.initialize(
+      this.config.initialAppUserId
+    );
+
+    if (this.config.analytics.enabled) {
+      this.analyticsDispatcher.start();
+    }
+
+    this.attachBrowserListeners();
+
+    if (this.config.featureFlags.prefetchOnInit) {
+      await this.featureFlags.getFeatureFlags();
+    }
+
+    this.eventBus.emit("initialized", { appUserId });
+  }
+
+  async page(
+    pageName?: string,
+    properties?: Record<string, unknown>,
+    options?: VoidhashTrackOptions
+  ) {
+    const pageProperties = pageName
+      ? {
+          ...properties,
+          page_name: pageName,
+        }
+      : properties;
+
+    await this.track("page", pageProperties, options);
+  }
+
+  async refreshFeatureFlags(keys?: string[]) {
+    return this.featureFlags.refreshFeatureFlags(keys);
+  }
+
+  async resetIdentity() {
+    await this.identityManager.resetIdentity();
+    await this.featureFlags.clearCachedFlags();
+    await this.featureFlags.refreshTrackedKeySets();
+  }
+
+  async track(
+    eventName: string,
+    properties?: Record<string, unknown>,
+    options?: VoidhashTrackOptions
+  ) {
+    if (!this.config.analytics.enabled) {
+      return;
+    }
+
+    const appUserId = await this.identityManager.getAppUserId();
+    if (!appUserId) {
+      return;
+    }
+
+    const event = createAnalyticsEvent(
+      this.platform,
+      eventName,
+      properties,
+      options
+    );
+    const droppedCount = await this.analyticsQueue.enqueue({
+      appUserId,
+      id: event.event_id,
+      payload: event,
+    });
+
+    if (droppedCount > 0) {
+      this.eventBus.emit("error", {
+        message: `Dropped ${droppedCount} analytics event(s) because the queue is full.`,
+        source: "analytics",
+      });
+    }
+
+    const queueSize = await this.analyticsQueue.size();
+    if (queueSize >= this.config.analytics.maxBatchSize) {
+      await this.analyticsDispatcher.flush();
+    }
+  }
+
+  private attachBrowserListeners() {
+    if (typeof window === "undefined") {
+      return;
+    }
+
+    const onlineHandler = () => {
+      if (this.config.featureFlags.refreshOnOnline) {
+        void this.featureFlags.refreshTrackedKeySets();
+      }
+    };
+    const pageHideHandler = () => {
+      if (this.config.analytics.enabled) {
+        void this.analyticsDispatcher.flush({ force: true, keepalive: true });
+      }
+    };
+    const visibilityHandler = () => {
+      if (
+        this.config.featureFlags.refreshOnVisibility &&
+        typeof document !== "undefined" &&
+        document.visibilityState === "visible"
+      ) {
+        void this.featureFlags.refreshTrackedKeySets();
+      }
+    };
+
+    window.addEventListener("online", onlineHandler);
+    window.addEventListener("pagehide", pageHideHandler);
+    if (typeof document !== "undefined") {
+      document.addEventListener("visibilitychange", visibilityHandler);
+    }
+
+    this.listeners.push(() => window.removeEventListener("online", onlineHandler));
+    this.listeners.push(() => window.removeEventListener("pagehide", pageHideHandler));
+    if (typeof document !== "undefined") {
+      this.listeners.push(() =>
+        document.removeEventListener("visibilitychange", visibilityHandler)
+      );
+    }
+  }
+
+  private detachBrowserListeners() {
+    for (const cleanup of this.listeners.splice(0)) {
+      cleanup();
+    }
+  }
+}
diff --git a/libraries/web/src/client.ts b/libraries/web/src/client.ts
new file mode 100644
index 000000000..c149cdce6
--- /dev/null
+++ b/libraries/web/src/client.ts
@@ -0,0 +1,157 @@
+import { VoidhashDestroyedError, VoidhashNotInitializedError } from "./errors";
+import { VoidhashClientEffect, resolveVoidhashConfig } from "./client-effect";
+import type {
+  AnalyticsFlushResult,
+  FeatureFlagsResult,
+  VoidhashClientOptions,
+  VoidhashEventMap,
+  VoidhashEventName,
+  VoidhashTrackOptions,
+  VoidhashTraits,
+} from "./types";
+
+type ClientState = "destroyed" | "idle" | "initializing" | "ready";
+
+export class VoidhashWebClient {
+  private readonly effect: VoidhashClientEffect;
+  private state: ClientState = "idle";
+  private initializePromise: Promise<void> | null = null;
+
+  constructor(private readonly options: VoidhashClientOptions) {
+    this.effect = new VoidhashClientEffect(resolveVoidhashConfig(options));
+  }
+
+  async destroy() {
+    if (this.state === "destroyed") {
+      return;
+    }
+
+    if (this.state === "initializing" && this.initializePromise) {
+      await this.initializePromise;
+    }
+
+    await this.effect.destroy();
+    this.state = "destroyed";
+  }
+
+  getAppUserId() {
+    if (this.state !== "ready") {
+      return null;
+    }
+
+    return this.effect.getAppUserId();
+  }
+
+  async getFeatureFlags(keys?: string[]) {
+    this.ensureReady();
+    return this.effect.getFeatureFlags(keys);
+  }
+
+  getFeatureVariant(key: string) {
+    this.ensureReady();
+    return this.effect.getFeatureVariant(key);
+  }
+
+  async identify(appUserId: string, traits?: VoidhashTraits) {
+    this.ensureReady();
+    await this.effect.identify(appUserId, traits);
+  }
+
+  async initialize() {
+    if (this.state === "destroyed") {
+      throw new VoidhashDestroyedError();
+    }
+
+    if (this.state === "ready") {
+      return;
+    }
+
+    if (this.initializePromise) {
+      return this.initializePromise;
+    }
+
+    this.state = "initializing";
+    this.initializePromise = this.effect
+      .initialize()
+      .then(() => {
+        this.state = "ready";
+      })
+      .finally(() => {
+        this.initializePromise = null;
+      });
+
+    return this.initializePromise;
+  }
+
+  isFeatureEnabled(key: string) {
+    this.ensureReady();
+    return this.effect.isFeatureEnabled(key);
+  }
+
+  off<TEvent extends VoidhashEventName>(
+    eventName: TEvent,
+    handler: (payload: VoidhashEventMap[TEvent]) => void
+  ) {
+    this.effect.getEventBus().off(eventName, handler);
+  }
+
+  on<TEvent extends VoidhashEventName>(
+    eventName: TEvent,
+    handler: (payload: VoidhashEventMap[TEvent]) => void
+  ) {
+    return this.effect.getEventBus().on(eventName, handler);
+  }
+
+  async page(
+    pageName?: string,
+    properties?: Record<string, unknown>,
+    options?: VoidhashTrackOptions
+  ) {
+    this.ensureReady();
+    await this.effect.page(pageName, properties, options);
+  }
+
+  async refreshFeatureFlags(keys?: string[]) {
+    this.ensureReady();
+    return this.effect.refreshFeatureFlags(keys);
+  }
+
+  async resetIdentity() {
+    this.ensureReady();
+    await this.effect.resetIdentity();
+  }
+
+  async track(
+    eventName: string,
+    properties?: Record<string, unknown>,
+    options?: VoidhashTrackOptions
+  ) {
+    this.ensureReady();
+    await this.effect.track(eventName, properties, options);
+  }
+
+  async flushAnalytics(): Promise<AnalyticsFlushResult | null> {
+    this.ensureReady();
+    return this.effect.flushAnalytics();
+  }
+
+  private ensureReady() {
+    if (this.state === "destroyed") {
+      throw new VoidhashDestroyedError();
+    }
+
+    if (this.state !== "ready") {
+      throw new VoidhashNotInitializedError();
+    }
+  }
+}
+
+export const createVoidhashClient = (options: VoidhashClientOptions) =>
+  new VoidhashWebClient(options);
+
+export type {
+  AnalyticsFlushResult,
+  FeatureFlagsResult,
+  VoidhashClientOptions,
+  VoidhashTrackOptions,
+};
diff --git a/libraries/web/src/core/analytics/analytics-context.ts b/libraries/web/src/core/analytics/analytics-context.ts
new file mode 100644
index 000000000..8bc99b0bc
--- /dev/null
+++ b/libraries/web/src/core/analytics/analytics-context.ts
@@ -0,0 +1,25 @@
+import type { VoidhashTrackOptions } from "../../types";
+import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
+import type { AnalyticsRequestEvent } from "./contracts";
+
+const trimUndefined = (entries: Record<string, unknown>) =>
+  Object.fromEntries(
+    Object.entries(entries).filter(([, value]) => typeof value !== "undefined")
+  );
+
+const createEventId = (platform: BrowserPlatformProvider) =>
+  `evt_${platform.randomId().split("-").join("")}`;
+
+export const createAnalyticsEvent = (
+  platform: BrowserPlatformProvider,
+  eventName: string,
+  properties?: Record<string, unknown>,
+  options?: VoidhashTrackOptions
+): AnalyticsRequestEvent => ({
+  context: platform.buildAnalyticsContext(),
+  event_id: options?.eventId ?? createEventId(platform),
+  event_name: eventName,
+  event_ts: options?.timestamp ?? new Date().toISOString(),
+  properties: trimUndefined(properties ?? {}),
+  session_id: options?.sessionId,
+});
diff --git a/libraries/web/src/core/analytics/analytics-dispatcher.ts b/libraries/web/src/core/analytics/analytics-dispatcher.ts
new file mode 100644
index 000000000..f0243fdc1
--- /dev/null
+++ b/libraries/web/src/core/analytics/analytics-dispatcher.ts
@@ -0,0 +1,186 @@
+import { VoidhashAnalyticsError } from "../../errors";
+import type { EventBus } from "../event-bus";
+import { AnalyticsHttpClient } from "../http/analytics-client";
+import { AnalyticsQueue } from "./analytics-queue";
+import type {
+  AnalyticsRequestEvent,
+  AnalyticsSendBatchResult,
+  QueuedAnalyticsEvent,
+} from "./contracts";
+
+const MAX_INGEST_BATCH_SIZE = 100;
+const RETRYABLE_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
+
+const buildIdSet = (events: ReadonlyArray<QueuedAnalyticsEvent>) =>
+  new Set(events.map((event) => event.id));
+
+const getBackoffMs = (attempts: number) =>
+  Math.min(1000 * 2 ** Math.max(attempts - 1, 0), 30_000);
+
+export class AnalyticsDispatcher {
+  private flushIntervalId: ReturnType<typeof setInterval> | null = null;
+  private inFlightFlush: Promise<AnalyticsSendBatchResult | null> | null = null;
+
+  constructor(
+    private readonly queue: AnalyticsQueue,
+    private readonly client: AnalyticsHttpClient,
+    private readonly config: {
+      readonly flushIntervalMs: number;
+      readonly maxBatchBytes: number;
+      readonly maxBatchSize: number;
+    },
+    private readonly eventBus: EventBus
+  ) {}
+
+  start() {
+    if (this.flushIntervalId) {
+      return;
+    }
+
+    this.flushIntervalId = setInterval(() => {
+      void this.flush().catch((error) => {
+        this.eventBus.emit("error", {
+          error,
+          message: "Scheduled analytics flush failed.",
+          source: "analytics",
+        });
+      });
+    }, this.config.flushIntervalMs);
+  }
+
+  stop() {
+    if (this.flushIntervalId) {
+      clearInterval(this.flushIntervalId);
+      this.flushIntervalId = null;
+    }
+  }
+
+  async flush(options?: { force?: boolean; keepalive?: boolean }) {
+    if (this.inFlightFlush) {
+      return this.inFlightFlush;
+    }
+
+    this.inFlightFlush = this.flushInternal(options).finally(() => {
+      this.inFlightFlush = null;
+    });
+
+    return this.inFlightFlush;
+  }
+
+  private async flushInternal(options?: { force?: boolean; keepalive?: boolean }) {
+    const batch = await this.queue.peekBatch({
+      ignoreAvailability: options?.force,
+      maxBatchBytes: this.config.maxBatchBytes,
+      maxBatchSize: Math.min(this.config.maxBatchSize, MAX_INGEST_BATCH_SIZE),
+    });
+
+    if (batch.length === 0) {
+      return null;
+    }
+
+    return this.sendBatch(batch, options);
+  }
+
+  private async sendBatch(
+    batch: ReadonlyArray<QueuedAnalyticsEvent>,
+    options?: { keepalive?: boolean }
+  ): Promise<AnalyticsSendBatchResult | null> {
+    if (batch.length === 0) {
+      return null;
+    }
+
+    const distinctId = batch[0]?.appUserId;
+    if (!distinctId) {
+      return null;
+    }
+
+    try {
+      const result = await this.client.send(
+        distinctId,
+        { events: batch.map((entry) => entry.payload as AnalyticsRequestEvent) },
+        options
+      );
+      const ids = buildIdSet(batch);
+
+      if (result.status === 202) {
+        await this.queue.drop(ids);
+        const response = {
+          accepted: Number(result.data?.accepted ?? batch.length),
+          rejected: Number(result.data?.rejected ?? 0),
+          requestId:
+            typeof result.data?.request_id === "string"
+              ? result.data.request_id
+              : undefined,
+        };
+
+        this.eventBus.emit("analytics-flushed", response);
+        if (response.rejected > 0) {
+          this.eventBus.emit("analytics-partial-rejection", response);
+        }
+
+        return response;
+      }
+
+      if (result.status === 413) {
+        return this.handlePayloadTooLarge(batch, options);
+      }
+
+      if (RETRYABLE_STATUS_CODES.has(result.status)) {
+        await this.queue.postpone(
+          ids,
+          Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
+        );
+        return null;
+      }
+
+      await this.queue.drop(ids);
+      this.eventBus.emit("error", {
+        message: `Dropping analytics batch after non-retryable ${result.status} response.`,
+        source: "analytics",
+      });
+      return null;
+    } catch (error) {
+      if (error instanceof VoidhashAnalyticsError) {
+        const ids = buildIdSet(batch);
+        await this.queue.postpone(
+          ids,
+          Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
+        );
+        return null;
+      }
+
+      throw error;
+    }
+  }
+
+  private async handlePayloadTooLarge(
+    batch: ReadonlyArray<QueuedAnalyticsEvent>,
+    options?: { keepalive?: boolean }
+  ): Promise<AnalyticsSendBatchResult | null> {
+    if (batch.length === 1) {
+      await this.queue.drop(buildIdSet(batch));
+      this.eventBus.emit("error", {
+        message: "Dropping analytics event after 413 response.",
+        source: "analytics",
+      });
+      return {
+        accepted: 0,
+        rejected: 1,
+      };
+    }
+
+    const midpoint = Math.ceil(batch.length / 2);
+    const first = await this.sendBatch(batch.slice(0, midpoint), options);
+    const second = await this.sendBatch(batch.slice(midpoint), options);
+
+    if (!first && !second) {
+      return null;
+    }
+
+    return {
+      accepted: (first?.accepted ?? 0) + (second?.accepted ?? 0),
+      rejected: (first?.rejected ?? 0) + (second?.rejected ?? 0),
+      requestId: second?.requestId ?? first?.requestId,
+    };
+  }
+}
diff --git a/libraries/web/src/core/analytics/analytics-queue.ts b/libraries/web/src/core/analytics/analytics-queue.ts
new file mode 100644
index 000000000..1919a5e0e
--- /dev/null
+++ b/libraries/web/src/core/analytics/analytics-queue.ts
@@ -0,0 +1,112 @@
+import type { CacheManager } from "../caching/cache-manager";
+import type { QueuedAnalyticsEvent } from "./contracts";
+
+const QUEUE_KEY = "analytics:queue";
+
+const estimateEventBytes = (event: QueuedAnalyticsEvent) =>
+  new TextEncoder().encode(JSON.stringify(event.payload)).byteLength;
+
+export class AnalyticsQueue {
+  private events: QueuedAnalyticsEvent[] = [];
+  private isLoaded = false;
+
+  constructor(
+    private readonly cache: CacheManager,
+    private readonly maxQueueSize: number
+  ) {}
+
+  async drop(ids: ReadonlySet<string>) {
+    await this.load();
+    this.events = this.events.filter((event) => !ids.has(event.id));
+    await this.persist();
+  }
+
+  async enqueue(event: Omit<QueuedAnalyticsEvent, "attempts" | "availableAt">) {
+    await this.load();
+    this.events.push({
+      ...event,
+      attempts: 0,
+      availableAt: Date.now(),
+    });
+    const droppedCount = Math.max(this.events.length - this.maxQueueSize, 0);
+    if (droppedCount > 0) {
+      this.events.splice(0, droppedCount);
+    }
+    await this.persist();
+    return droppedCount;
+  }
+
+  async peekBatch(input: {
+    ignoreAvailability?: boolean;
+    maxBatchBytes: number;
+    maxBatchSize: number;
+    now?: number;
+  }) {
+    await this.load();
+    const now = input.now ?? Date.now();
+    const dueEvents = this.events.filter((event) =>
+      input.ignoreAvailability ? true : event.availableAt <= now
+    );
+
+    if (dueEvents.length === 0) {
+      return [];
+    }
+
+    const firstAppUserId = dueEvents[0]?.appUserId;
+    const selected: QueuedAnalyticsEvent[] = [];
+    let totalBytes = 0;
+
+    for (const event of dueEvents) {
+      if (event.appUserId !== firstAppUserId) {
+        break;
+      }
+
+      const nextBytes = estimateEventBytes(event);
+      if (selected.length > 0 && totalBytes + nextBytes > input.maxBatchBytes) {
+        break;
+      }
+
+      selected.push(event);
+      totalBytes += nextBytes;
+
+      if (selected.length >= input.maxBatchSize) {
+        break;
+      }
+    }
+
+    return selected;
+  }
+
+  async postpone(ids: ReadonlySet<string>, nextAvailableAt: number) {
+    await this.load();
+    this.events = this.events.map((event) =>
+      ids.has(event.id)
+        ? {
+            ...event,
+            attempts: event.attempts + 1,
+            availableAt: nextAvailableAt,
+          }
+        : event
+    );
+    await this.persist();
+  }
+
+  async size() {
+    await this.load();
+    return this.events.length;
+  }
+
+  private async load() {
+    if (this.isLoaded) {
+      return;
+    }
+
+    const cached = await this.cache.get<QueuedAnalyticsEvent[]>(QUEUE_KEY);
+    this.events = cached?.value ?? [];
+    this.isLoaded = true;
+  }
+
+  private async persist() {
+    await this.cache.set(QUEUE_KEY, this.events);
+  }
+}
diff --git a/libraries/web/src/core/analytics/contracts.ts b/libraries/web/src/core/analytics/contracts.ts
new file mode 100644
index 000000000..ad392a1af
--- /dev/null
+++ b/libraries/web/src/core/analytics/contracts.ts
@@ -0,0 +1,29 @@
+import type { AnalyticsFlushResult } from "../../types";
+
+export interface AnalyticsRequestEvent {
+  readonly context?: Record<string, unknown>;
+  readonly event_id: string;
+  readonly event_name: string;
+  readonly event_ts: string;
+  readonly properties?: Record<string, unknown>;
+  readonly session_id?: string;
+}
+
+export interface AnalyticsBatchRequest {
+  readonly events: ReadonlyArray<AnalyticsRequestEvent>;
+}
+
+export interface QueuedAnalyticsEvent {
+  readonly appUserId: string;
+  readonly attempts: number;
+  readonly availableAt: number;
+  readonly id: string;
+  readonly payload: AnalyticsRequestEvent;
+}
+
+export interface AnalyticsTransportResult {
+  readonly data?: Record<string, unknown>;
+  readonly status: number;
+}
+
+export interface AnalyticsSendBatchResult extends AnalyticsFlushResult {}
diff --git a/libraries/web/src/core/caching/adapters/local-storage-cache.ts b/libraries/web/src/core/caching/adapters/local-storage-cache.ts
new file mode 100644
index 000000000..03345bc66
--- /dev/null
+++ b/libraries/web/src/core/caching/adapters/local-storage-cache.ts
@@ -0,0 +1,63 @@
+import { VoidhashStorageError } from "../../../errors";
+import type { CacheAdapter } from "../cache-manager";
+
+export class LocalStorageCacheAdapter implements CacheAdapter {
+  static create() {
+    if (typeof window === "undefined" || !window.localStorage) {
+      return null;
+    }
+
+    try {
+      const probeKey = "__voidhash_probe__";
+      window.localStorage.setItem(probeKey, "1");
+      window.localStorage.removeItem(probeKey);
+      return new LocalStorageCacheAdapter(window.localStorage);
+    } catch {
+      return null;
+    }
+  }
+
+  constructor(private readonly storage: Storage) {}
+
+  async delete(key: string) {
+    try {
+      this.storage.removeItem(key);
+    } catch (error) {
+      throw new VoidhashStorageError("Failed to delete from localStorage.", {
+        cause: error,
+      });
+    }
+  }
+
+  async get(key: string) {
+    try {
+      return this.storage.getItem(key);
+    } catch (error) {
+      throw new VoidhashStorageError("Failed to read from localStorage.", {
+        cause: error,
+      });
+    }
+  }
+
+  async keys() {
+    try {
+      return Array.from({ length: this.storage.length }, (_, index) =>
+        this.storage.key(index)
+      ).filter((key): key is string => typeof key === "string");
+    } catch (error) {
+      throw new VoidhashStorageError("Failed to enumerate localStorage.", {
+        cause: error,
+      });
+    }
+  }
+
+  async set(key: string, value: string) {
+    try {
+      this.storage.setItem(key, value);
+    } catch (error) {
+      throw new VoidhashStorageError("Failed to write to localStorage.", {
+        cause: error,
+      });
+    }
+  }
+}
diff --git a/libraries/web/src/core/caching/adapters/memory-cache.ts b/libraries/web/src/core/caching/adapters/memory-cache.ts
new file mode 100644
index 000000000..4b6f56328
--- /dev/null
+++ b/libraries/web/src/core/caching/adapters/memory-cache.ts
@@ -0,0 +1,21 @@
+import type { CacheAdapter } from "../cache-manager";
+
+export class MemoryCacheAdapter implements CacheAdapter {
+  private store = new Map<string, string>();
+
+  async delete(key: string) {
+    this.store.delete(key);
+  }
+
+  async get(key: string) {
+    return this.store.get(key) ?? null;
+  }
+
+  async keys() {
+    return [...this.store.keys()];
+  }
+
+  async set(key: string, value: string) {
+    this.store.set(key, value);
+  }
+}
diff --git a/libraries/web/src/core/caching/cache-manager.ts b/libraries/web/src/core/caching/cache-manager.ts
new file mode 100644
index 000000000..d0d97c486
--- /dev/null
+++ b/libraries/web/src/core/caching/cache-manager.ts
@@ -0,0 +1,165 @@
+export interface CacheAdapter {
+  delete(key: string): Promise<void>;
+  get(key: string): Promise<string | null>;
+  keys(): Promise<ReadonlyArray<string>>;
+  set(key: string, value: string): Promise<void>;
+}
+
+interface CacheEnvelope<T> {
+  readonly createdAt: number;
+  readonly expiresAt: number | null;
+  readonly staleAt: number | null;
+  readonly value: T;
+}
+
+export interface CacheHit<T> extends CacheEnvelope<T> {
+  readonly isExpired: boolean;
+  readonly isStale: boolean;
+}
+
+const CACHE_INDEX_SUFFIX = "__keys__";
+
+export class CacheManager {
+  private memoryIndex = new Set<string>();
+  private readonly persistentIndexKey: string;
+
+  constructor(
+    private readonly namespace: string,
+    private readonly memory: CacheAdapter,
+    private readonly persistent: CacheAdapter | null
+  ) {
+    this.persistentIndexKey = this.buildStorageKey(CACHE_INDEX_SUFFIX);
+  }
+
+  async clearAll() {
+    const keys = await this.getCacheKeys();
+    await Promise.all(keys.map((key) => this.delete(key)));
+  }
+
+  async clearPrefix(prefix: string) {
+    const keys = await this.getCacheKeys();
+    const matchedKeys = keys.filter((key) => key.startsWith(prefix));
+    await Promise.all(matchedKeys.map((key) => this.delete(key)));
+  }
+
+  async delete(key: string) {
+    const storageKey = this.buildStorageKey(key);
+    await this.memory.delete(storageKey);
+    if (this.persistent) {
+      await this.persistent.delete(storageKey);
+    }
+    this.memoryIndex.delete(storageKey);
+    await this.persistIndex();
+  }
+
+  async get<T>(key: string): Promise<CacheHit<T> | null> {
+    const storageKey = this.buildStorageKey(key);
+    const rawValue =
+      (await this.memory.get(storageKey)) ??
+      (this.persistent ? await this.persistent.get(storageKey) : null);
+
+    if (!rawValue) {
+      return null;
+    }
+
+    const cachedValue = JSON.parse(rawValue) as CacheEnvelope<T>;
+    const isExpired =
+      typeof cachedValue.expiresAt === "number"
+        ? cachedValue.expiresAt < Date.now()
+        : false;
+    const isStale =
+      typeof cachedValue.staleAt === "number"
+        ? cachedValue.staleAt < Date.now()
+        : false;
+
+    if (isExpired) {
+      await this.delete(key);
+      return null;
+    }
+
+    if (!(await this.memory.get(storageKey))) {
+      await this.memory.set(storageKey, rawValue);
+    }
+
+    await this.rememberKey(storageKey);
+
+    return {
+      ...cachedValue,
+      isExpired,
+      isStale,
+    };
+  }
+
+  async getCacheKeys() {
+    const storageKeys = await this.loadIndexedStorageKeys();
+    const keys = new Set<string>([
+      ...this.memoryIndex,
+      ...storageKeys,
+    ]);
+
+    return [...keys]
+      .filter((key) => key.startsWith(`${this.namespace}:`))
+      .filter((key) => key !== this.persistentIndexKey)
+      .map((key) => key.slice(this.namespace.length + 1));
+  }
+
+  async set<T>(
+    key: string,
+    value: T,
+    options?: { staleTime?: number; ttl?: number }
+  ) {
+    const storageKey = this.buildStorageKey(key);
+    const envelope: CacheEnvelope<T> = {
+      createdAt: Date.now(),
+      expiresAt: options?.ttl ? Date.now() + options.ttl : null,
+      staleAt: options?.staleTime ? Date.now() + options.staleTime : null,
+      value,
+    };
+    const serialized = JSON.stringify(envelope);
+
+    await this.memory.set(storageKey, serialized);
+    if (this.persistent) {
+      await this.persistent.set(storageKey, serialized);
+    }
+
+    await this.rememberKey(storageKey);
+  }
+
+  private buildStorageKey(key: string) {
+    return `${this.namespace}:${key}`;
+  }
+
+  private async loadIndexedStorageKeys() {
+    if (!this.persistent) {
+      return [];
+    }
+
+    const rawIndex = await this.persistent.get(this.persistentIndexKey);
+    if (!rawIndex) {
+      return [];
+    }
+
+    try {
+      return JSON.parse(rawIndex) as string[];
+    } catch {
+      return [];
+    }
+  }
+
+  private async persistIndex() {
+    const serialized = JSON.stringify([...this.memoryIndex]);
+    await this.memory.set(this.persistentIndexKey, serialized);
+    if (this.persistent) {
+      await this.persistent.set(this.persistentIndexKey, serialized);
+    }
+  }
+
+  private async rememberKey(storageKey: string) {
+    if (storageKey === this.persistentIndexKey) {
+      return;
+    }
+
+    this.memoryIndex.add(storageKey);
+    await this.persistIndex();
+  }
+}
diff --git a/libraries/web/src/core/event-bus.ts b/libraries/web/src/core/event-bus.ts
new file mode 100644
index 000000000..22da53101
--- /dev/null
+++ b/libraries/web/src/core/event-bus.ts
@@ -0,0 +1,43 @@
+import type { VoidhashEventMap, VoidhashEventName } from "../types";
+
+export class EventBus {
+  private listeners: {
+    [TEvent in VoidhashEventName]: Set<
+      (payload: VoidhashEventMap[TEvent]) => void
+    >;
+  } = {
+    "analytics-flushed": new Set(),
+    "analytics-partial-rejection": new Set(),
+    error: new Set(),
+    "feature-flags-updated": new Set(),
+    "identity-changed": new Set(),
+    initialized: new Set(),
+  };
+
+  emit<TEvent extends VoidhashEventName>(
+    event: TEvent,
+    payload: VoidhashEventMap[TEvent]
+  ) {
+    for (const listener of this.listeners[event] ?? []) {
+      listener(payload);
+    }
+  }
+
+  off<TEvent extends VoidhashEventName>(
+    event: TEvent,
+    listener: (payload: VoidhashEventMap[TEvent]) => void
+  ) {
+    this.listeners[event]?.delete(listener);
+  }
+
+  on<TEvent extends VoidhashEventName>(
+    event: TEvent,
+    listener: (payload: VoidhashEventMap[TEvent]) => void
+  ) {
+    this.listeners[event]?.add(listener);
+
+    return () => {
+      this.off(event, listener);
+    };
+  }
+}
diff --git a/libraries/web/src/core/feature-flags/feature-flag-service.ts b/libraries/web/src/core/feature-flags/feature-flag-service.ts
new file mode 100644
index 000000000..1ab1aae63
--- /dev/null
+++ b/libraries/web/src/core/feature-flags/feature-flag-service.ts
@@ -0,0 +1,100 @@
+import type { FeatureFlagEntry, FeatureFlagsResult } from "../../types";
+import type { CacheManager } from "../caching/cache-manager";
+import type { EventBus } from "../event-bus";
+import { SdkApiClient } from "../http/sdk-api-client";
+
+const serializeKeys = (keys?: ReadonlyArray<string>) =>
+  keys && keys.length > 0 ? [...keys].sort().join(",") : "all";
+
+export class FeatureFlagService {
+  private latestFlags = new Map<string, FeatureFlagEntry>();
+  private trackedKeySets = new Set<string>();
+
+  constructor(
+    private readonly cache: CacheManager,
+    private readonly sdkApi: SdkApiClient,
+    private readonly eventBus: EventBus,
+    private readonly ttlMs: number,
+    private readonly getAppUserId: () => Promise<string | null>
+  ) {}
+
+  async clearCachedFlags() {
+    this.latestFlags.clear();
+    await this.cache.clearPrefix("feature-flags:");
+  }
+
+  getTrackedKeys() {
+    return [...this.trackedKeySets];
+  }
+
+  getVariant(key: string) {
+    return this.latestFlags.get(key) ?? null;
+  }
+
+  isEnabled(key: string) {
+    return this.latestFlags.get(key)?.enabled ?? false;
+  }
+
+  async refreshTrackedKeySets() {
+    if (this.trackedKeySets.size === 0) {
+      return;
+    }
+
+    await Promise.all(
+      [...this.trackedKeySets].map((serializedKeys) =>
+        this.refreshFeatureFlags(
+          serializedKeys === "all" ? undefined : serializedKeys.split(",")
+        )
+      )
+    );
+  }
+
+  async getFeatureFlags(keys?: ReadonlyArray<string>) {
+    return this.getOrRefreshFeatureFlags(keys, false);
+  }
+
+  async refreshFeatureFlags(keys?: ReadonlyArray<string>) {
+    return this.getOrRefreshFeatureFlags(keys, true);
+  }
+
+  private cacheKey(appUserId: string, keys?: ReadonlyArray<string>) {
+    return `feature-flags:${appUserId}:${serializeKeys(keys)}`;
+  }
+
+  private async getOrRefreshFeatureFlags(
+    keys: ReadonlyArray<string> | undefined,
+    forceRefresh: boolean
+  ): Promise<FeatureFlagsResult> {
+    const appUserId = await this.getAppUserId();
+    if (!appUserId) {
+      return { flags: [] };
+    }
+
+    const cacheKey = this.cacheKey(appUserId, keys);
+    const serializedKeys = serializeKeys(keys);
+    this.trackedKeySets.add(serializedKeys);
+
+    if (!forceRefresh) {
+      const cached = await this.cache.get<FeatureFlagsResult>(cacheKey);
+      if (cached && !cached.isExpired && !cached.isStale) {
+        this.rememberFlags(cached.value.flags);
+        return cached.value;
+      }
+    }
+
+    const result = await this.sdkApi.evaluateFeatureFlags(appUserId, keys);
+    this.rememberFlags(result.flags);
+    await this.cache.set(cacheKey, result, { ttl: this.ttlMs });
+    this.eventBus.emit("feature-flags-updated", {
+      keys,
+      result,
+    });
+    return result;
+  }
+
+  private rememberFlags(flags: ReadonlyArray<FeatureFlagEntry>) {
+    for (const flag of flags) {
+      this.latestFlags.set(flag.key, flag);
+    }
+  }
+}
diff --git a/libraries/web/src/core/http/analytics-client.ts b/libraries/web/src/core/http/analytics-client.ts
new file mode 100644
index 000000000..5d770de97
--- /dev/null
+++ b/libraries/web/src/core/http/analytics-client.ts
@@ -0,0 +1,70 @@
+import { VoidhashAnalyticsError } from "../../errors";
+import type {
+  AnalyticsBatchRequest,
+  AnalyticsTransportResult,
+} from "../analytics/contracts";
+
+const DEFAULT_TIMEOUT_MS = 10_000;
+
+export class AnalyticsHttpClient {
+  constructor(
+    private readonly baseUrl: string,
+    private readonly publishableKey: string
+  ) {}
+
+  async send(
+    distinctId: string,
+    request: AnalyticsBatchRequest,
+    options?: { keepalive?: boolean; timeoutMs?: number }
+  ): Promise<AnalyticsTransportResult> {
+    const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const controller =
+      typeof AbortController !== "undefined" && !options?.keepalive
+        ? new AbortController()
+        : null;
+    const timeoutId =
+      controller && timeoutMs > 0
+        ? setTimeout(() => controller.abort(), timeoutMs)
+        : null;
+
+    try {
+      const response = await fetch(new URL("/v1/events", this.baseUrl), {
+        body: JSON.stringify(request),
+        headers: {
+          "content-type": "application/json",
+          "x-distinct-id": distinctId,
+          "x-publishable-key": this.publishableKey,
+        },
+        keepalive: options?.keepalive ?? false,
+        method: "POST",
+        signal: controller?.signal,
+      });
+      let data: Record<string, unknown> | undefined;
+
+      try {
+        data = (await response.json()) as Record<string, unknown>;
+      } catch {
+        data = undefined;
+      }
+
+      return {
+        data,
+        status: response.status,
+      };
+    } catch (error) {
+      if (error instanceof Error && error.name === "AbortError") {
+        throw new VoidhashAnalyticsError("Analytics flush timed out.", {
+          cause: error,
+        });
+      }
+
+      throw new VoidhashAnalyticsError("Analytics request failed.", {
+        cause: error,
+      });
+    } finally {
+      if (timeoutId) {
+        clearTimeout(timeoutId);
+      }
+    }
+  }
+}
diff --git a/libraries/web/src/core/http/sdk-api-client.ts b/libraries/web/src/core/http/sdk-api-client.ts
new file mode 100644
index 000000000..63deb7eef
--- /dev/null
+++ b/libraries/web/src/core/http/sdk-api-client.ts
@@ -0,0 +1,126 @@
+import { VoidhashFeatureFlagsError, VoidhashIdentityError } from "../../errors";
+import type { FeatureFlagsResult, VoidhashTraits } from "../../types";
+import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
+
+type ApiClientRequest = {
+  readonly headers: Record<string, string | undefined>;
+  readonly payload?: Record<string, unknown>;
+};
+
+const trimUndefined = <TValue>(record: Record<string, TValue | undefined>) =>
+  Object.fromEntries(
+    Object.entries(record).filter(([, value]) => typeof value !== "undefined")
+  ) as Record<string, TValue>;
+
+export class SdkApiClient {
+  constructor(
+    private readonly baseUrl: string,
+    private readonly publishableKey: string,
+    private readonly observerMode: boolean,
+    private readonly platform = new BrowserPlatformProvider()
+  ) {}
+
+  async destroy() {}
+
+  async evaluateFeatureFlags(
+    appUserId: string,
+    flagKeys?: ReadonlyArray<string>
+  ): Promise<FeatureFlagsResult> {
+    try {
+      return await this.request<FeatureFlagsResult>("/sdk/evaluate-flags", {
+          headers: this.buildHeaders(appUserId),
+          payload: trimUndefined({
+            flagKeys,
+          }),
+        });
+    } catch (error) {
+      throw new VoidhashFeatureFlagsError("Failed to fetch feature flags.", {
+        cause: error,
+      });
+    }
+  }
+
+  async identify(
+    currentAppUserId: string,
+    appUserId: string,
+    traits?: VoidhashTraits
+  ) {
+    try {
+      await this.request("/sdk/identify", {
+          headers: this.buildHeaders(currentAppUserId),
+          payload: trimUndefined({
+            appUserId,
+            traits: this.normalizeTraits(traits),
+          }),
+        });
+    } catch (error) {
+      throw new VoidhashIdentityError("Failed to identify app user.", {
+        cause: error,
+      });
+    }
+  }
+
+  async syncTraits(appUserId: string, traits?: VoidhashTraits) {
+    try {
+      await this.request("/sdk/sync-customer-attributes", {
+          headers: this.buildHeaders(appUserId),
+          payload: trimUndefined({
+            traits: this.normalizeTraits(traits),
+          }),
+        });
+    } catch (error) {
+      throw new VoidhashIdentityError("Failed to sync customer traits.", {
+        cause: error,
+      });
+    }
+  }
+
+  private buildHeaders(appUserId: string) {
+    return {
+      ...this.platform.getSdkHeaders({
+        observerMode: this.observerMode,
+        publishableKey: this.publishableKey,
+      }),
+      "x-app-user-id": appUserId,
+    };
+  }
+
+  private normalizeTraits(traits?: VoidhashTraits) {
+    if (!traits || Object.keys(traits).length === 0) {
+      return undefined;
+    }
+
+    return traits;
+  }
+
+  private async request<T = void>(path: string, input: ApiClientRequest) {
+    const controller =
+      typeof AbortController !== "undefined" ? new AbortController() : null;
+    const timeoutId = controller
+      ? setTimeout(() => controller.abort(), 10_000)
+      : null;
+
+    try {
+      const response = await fetch(new URL(path, this.baseUrl), {
+        body: input.payload ? JSON.stringify(input.payload) : undefined,
+        headers: trimUndefined(input.headers),
+        method: input.payload ? "POST" : "GET",
+        signal: controller?.signal,
+      });
+
+      if (!response.ok) {
+        throw new Error(`SDK request failed with status ${response.status}.`);
+      }
+
+      if (response.status === 204) {
+        return undefined as T;
+      }
+
+      return (await response.json()) as T;
+    } finally {
+      if (timeoutId) {
+        clearTimeout(timeoutId);
+      }
+    }
+  }
+}
diff --git a/libraries/web/src/core/identity/identity-manager.ts b/libraries/web/src/core/identity/identity-manager.ts
new file mode 100644
index 000000000..8bb94c4f1
--- /dev/null
+++ b/libraries/web/src/core/identity/identity-manager.ts
@@ -0,0 +1,85 @@
+import { VoidhashIdentityError } from "../../errors";
+import type { EventBus } from "../event-bus";
+import { SdkApiClient } from "../http/sdk-api-client";
+import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
+import type { CacheManager } from "../caching/cache-manager";
+import type { VoidhashTraits } from "../../types";
+
+const APP_USER_ID_KEY = "identity:app-user-id";
+const ANONYMOUS_USER_ID_PREFIX = "vh:anon:";
+
+const buildTraitsKey = (appUserId: string) => `identity:traits:${appUserId}`;
+
+export class IdentityManager {
+  private currentAppUserId: string | null = null;
+
+  constructor(
+    private readonly cache: CacheManager,
+    private readonly sdkApi: SdkApiClient,
+    private readonly eventBus: EventBus,
+    private readonly platform = new BrowserPlatformProvider()
+  ) {}
+
+  getAppUserId() {
+    return this.currentAppUserId;
+  }
+
+  async identify(appUserId: string, traits?: VoidhashTraits) {
+    const currentAppUserId = await this.requireAppUserId();
+    await this.syncTraits(currentAppUserId);
+    await this.sdkApi.identify(currentAppUserId, appUserId, traits);
+    await this.cache.set(APP_USER_ID_KEY, appUserId);
+    await this.cache.set(buildTraitsKey(appUserId), traits ?? {});
+    this.currentAppUserId = appUserId;
+    this.eventBus.emit("identity-changed", {
+      appUserId,
+      previousAppUserId: currentAppUserId,
+    });
+  }
+
+  async initialize(initialAppUserId?: string) {
+    const cachedAppUserId = await this.cache.get<string>(APP_USER_ID_KEY);
+    this.currentAppUserId =
+      initialAppUserId ??
+      cachedAppUserId?.value ??
+      `${ANONYMOUS_USER_ID_PREFIX}${this.platform.randomId()}`;
+
+    await this.cache.set(APP_USER_ID_KEY, this.currentAppUserId);
+
+    if (initialAppUserId && cachedAppUserId?.value && cachedAppUserId.value !== initialAppUserId) {
+      await this.identify(initialAppUserId);
+      return this.currentAppUserId;
+    }
+
+    return this.currentAppUserId;
+  }
+
+  async resetIdentity() {
+    const currentAppUserId = await this.requireAppUserId();
+    await this.syncTraits(currentAppUserId);
+    const nextAnonymousId = `${ANONYMOUS_USER_ID_PREFIX}${this.platform.randomId()}`;
+    await this.cache.set(APP_USER_ID_KEY, nextAnonymousId);
+    await this.cache.set(buildTraitsKey(nextAnonymousId), {});
+    this.currentAppUserId = nextAnonymousId;
+    this.eventBus.emit("identity-changed", {
+      appUserId: nextAnonymousId,
+      previousAppUserId: currentAppUserId,
+    });
+  }
+
+  async syncTraits(appUserId?: string) {
+    const resolvedAppUserId = appUserId ?? (await this.requireAppUserId());
+    const cachedTraits = await this.cache.get<VoidhashTraits>(
+      buildTraitsKey(resolvedAppUserId)
+    );
+    await this.sdkApi.syncTraits(resolvedAppUserId, cachedTraits?.value);
+  }
+
+  private async requireAppUserId() {
+    if (!this.currentAppUserId) {
+      throw new VoidhashIdentityError("App user id has not been initialized.");
+    }
+
+    return this.currentAppUserId;
+  }
+}
diff --git a/libraries/web/src/core/platform/browser-platform-provider.ts b/libraries/web/src/core/platform/browser-platform-provider.ts
new file mode 100644
index 000000000..eb5c44c2e
--- /dev/null
+++ b/libraries/web/src/core/platform/browser-platform-provider.ts
@@ -0,0 +1,119 @@
+const SDK_VERSION = "0.0.1-alpha.1";
+
+const trimUndefined = (entries: Record<string, unknown>) =>
+  Object.fromEntries(
+    Object.entries(entries).filter(([, value]) => typeof value !== "undefined")
+  );
+
+const safeUrl = (value: string | undefined) => {
+  if (!value) {
+    return null;
+  }
+
+  try {
+    return new URL(value);
+  } catch {
+    return null;
+  }
+};
+
+export class BrowserPlatformProvider {
+  private getCurrentUrl() {
+    if (typeof window === "undefined") {
+      return null;
+    }
+
+    return safeUrl(window.location.href);
+  }
+
+  private getReferrerUrl() {
+    if (typeof document === "undefined") {
+      return null;
+    }
+
+    return safeUrl(document.referrer);
+  }
+
+  private isDebugBuild() {
+    if (typeof window === "undefined") {
+      return false;
+    }
+
+    const hostname = window.location.hostname;
+    return (
+      hostname === "localhost" ||
+      hostname === "127.0.0.1" ||
+      hostname.endsWith(".local")
+    );
+  }
+
+  buildAnalyticsContext() {
+    const currentUrl = this.getCurrentUrl();
+    const referrerUrl = this.getReferrerUrl();
+    const navigatorRef =
+      typeof navigator !== "undefined" ? navigator : undefined;
+    const screenRef = typeof screen !== "undefined" ? screen : undefined;
+    const viewport =
+      typeof window !== "undefined"
+        ? {
+            viewportHeight: window.innerHeight,
+            viewportWidth: window.innerWidth,
+          }
+        : undefined;
+
+    return trimUndefined({
+      locale: navigatorRef?.language,
+      page_title:
+        typeof document !== "undefined" ? document.title || undefined : undefined,
+      referrer_origin: referrerUrl?.origin,
+      referrer_path: referrerUrl?.pathname,
+      screen_height: screenRef?.height,
+      screen_width: screenRef?.width,
+      sdk: "web",
+      sdk_version: SDK_VERSION,
+      timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+      url_origin: currentUrl?.origin,
+      url_path: currentUrl?.pathname,
+      user_agent: navigatorRef?.userAgent,
+      viewport_height: viewport?.viewportHeight,
+      viewport_width: viewport?.viewportWidth,
+    });
+  }
+
+  getSdkHeaders(input: {
+    observerMode: boolean;
+    publishableKey: string;
+  }): Record<string, string | undefined> {
+    const navigatorRef =
+      typeof navigator !== "undefined" ? navigator : undefined;
+
+    return {
+      "x-client-bundle-id": "",
+      "x-client-locale": navigatorRef?.language,
+      "x-client-version": undefined,
+      "x-is-backgrounded": "false",
+      "x-is-debug-build": this.isDebugBuild() ? "true" : "false",
+      "x-nonce": this.randomId(),
+      "x-observer-mode": input.observerMode ? "true" : "false",
+      "x-platform": "web",
+      "x-platform-brand": undefined,
+      "x-platform-device": navigatorRef?.platform,
+      "x-platform-flavor": "browser",
+      "x-platform-flavor-version": undefined,
+      "x-platform-version": navigatorRef?.userAgent,
+      "x-preferred-locales": navigatorRef?.languages?.join(","),
+      "x-publishable-key": input.publishableKey,
+      "x-sdk": "web",
+      "x-sdk-version": SDK_VERSION,
+      "x-storefront": undefined,
+    };
+  }
+
+  randomId() {
+    if (typeof crypto !== "undefined" && "randomUUID" in crypto) {
+      return crypto.randomUUID();
+    }
+
+    return `vh_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`;
+  }
+}
diff --git a/libraries/web/src/errors.ts b/libraries/web/src/errors.ts
new file mode 100644
index 000000000..6b375dd1d
--- /dev/null
+++ b/libraries/web/src/errors.ts
@@ -0,0 +1,31 @@
+export class VoidhashError extends Error {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message);
+    this.name = new.target.name;
+    if (options?.cause) {
+      (this as Error & { cause?: unknown }).cause = options.cause;
+    }
+  }
+}
+
+export class VoidhashConfigurationError extends VoidhashError {}
+
+export class VoidhashNotInitializedError extends VoidhashError {
+  constructor() {
+    super("Voidhash client has not been initialized.");
+  }
+}
+
+export class VoidhashDestroyedError extends VoidhashError {
+  constructor() {
+    super("Voidhash client has already been destroyed.");
+  }
+}
+
+export class VoidhashStorageError extends VoidhashError {}
+
+export class VoidhashFeatureFlagsError extends VoidhashError {}
+
+export class VoidhashAnalyticsError extends VoidhashError {}
+
+export class VoidhashIdentityError extends VoidhashError {}
diff --git a/libraries/web/src/index.ts b/libraries/web/src/index.ts
new file mode 100644
index 000000000..8061769a6
--- /dev/null
+++ b/libraries/web/src/index.ts
@@ -0,0 +1,3 @@
+export * from "./client";
+export * from "./errors";
+export * from "./types";
diff --git a/libraries/web/src/react/hooks/use-analytics.ts b/libraries/web/src/react/hooks/use-analytics.ts
new file mode 100644
index 000000000..57ad3a799
--- /dev/null
+++ b/libraries/web/src/react/hooks/use-analytics.ts
@@ -0,0 +1,25 @@
+import React from "react";
+
+import { useVoidhash } from "./use-voidhash";
+
+export const useAnalytics = () => {
+  const { client } = useVoidhash();
+
+  return React.useMemo(
+    () => ({
+      enabled: true,
+      flushAnalytics: () => client.flushAnalytics(),
+      page: (
+        pageName?: string,
+        properties?: Record<string, unknown>,
+        options?: { eventId?: string; sessionId?: string; timestamp?: string }
+      ) => client.page(pageName, properties, options),
+      track: (
+        eventName: string,
+        properties?: Record<string, unknown>,
+        options?: { eventId?: string; sessionId?: string; timestamp?: string }
+      ) => client.track(eventName, properties, options),
+    }),
+    [client]
+  );
+};
diff --git a/libraries/web/src/react/hooks/use-feature-flags.ts b/libraries/web/src/react/hooks/use-feature-flags.ts
new file mode 100644
index 000000000..a9448a146
--- /dev/null
+++ b/libraries/web/src/react/hooks/use-feature-flags.ts
@@ -0,0 +1,103 @@
+import React from "react";
+
+import type { FeatureFlagsResult } from "../../types";
+import { useVoidhash } from "./use-voidhash";
+
+const serializeKeys = (keys?: ReadonlyArray<string>) =>
+  keys && keys.length > 0 ? [...keys].sort().join(",") : "all";
+
+export const useFeatureFlags = (keys?: string[]) => {
+  const { appUserId, client, isInitialized } = useVoidhash();
+  const [data, setData] = React.useState<FeatureFlagsResult>({ flags: [] });
+  const [error, setError] = React.useState<Error | null>(null);
+  const [isLoading, setIsLoading] = React.useState(false);
+  const serializedKeys = React.useMemo(() => serializeKeys(keys), [keys]);
+  const resolvedKeys = React.useMemo(
+    () => (serializedKeys === "all" ? undefined : serializedKeys.split(",")),
+    [serializedKeys]
+  );
+
+  const updateData = React.useCallback((nextData: FeatureFlagsResult) => {
+    setData((previous) =>
+      JSON.stringify(previous) === JSON.stringify(nextData) ? previous : nextData
+    );
+  }, []);
+
+  const refetch = React.useCallback(async () => {
+    setIsLoading(true);
+    setError(null);
+    try {
+      const nextData = await client.refreshFeatureFlags(resolvedKeys);
+      updateData(nextData);
+      return nextData;
+    } catch (cause) {
+      const nextError =
+        cause instanceof Error ? cause : new Error("Failed to refresh flags.");
+      setError(nextError);
+      throw nextError;
+    } finally {
+      setIsLoading(false);
+    }
+  }, [client, resolvedKeys, updateData]);
+
+  React.useEffect(() => {
+    if (!isInitialized) {
+      return;
+    }
+
+    let isMounted = true;
+    setIsLoading(true);
+    setError(null);
+
+    void client
+      .getFeatureFlags(resolvedKeys)
+      .then((nextData) => {
+        if (isMounted) {
+          updateData(nextData);
+        }
+      })
+      .catch((cause) => {
+        if (isMounted) {
+          setError(
+            cause instanceof Error ? cause : new Error("Failed to load flags.")
+          );
+        }
+      })
+      .finally(() => {
+        if (isMounted) {
+          setIsLoading(false);
+        }
+      });
+
+    return () => {
+      isMounted = false;
+    };
+  }, [appUserId, client, isInitialized, resolvedKeys, updateData]);
+
+  React.useEffect(() => {
+    return client.on("feature-flags-updated", (event) => {
+      if (serializeKeys(event.keys) === serializedKeys) {
+        updateData(event.result);
+      }
+    });
+  }, [client, serializedKeys, updateData]);
+
+  const isEnabled = React.useCallback(
+    (key: string) => data.flags.find((flag) => flag.key === key)?.enabled ?? false,
+    [data.flags]
+  );
+
+  const getVariant = React.useCallback(
+    (key: string) => data.flags.find((flag) => flag.key === key) ?? null,
+    [data.flags]
+  );
+
+  return {
+    data,
+    error,
+    getVariant,
+    isEnabled,
+    isLoading,
+    refetch,
+  };
+};
diff --git a/libraries/web/src/react/hooks/use-voidhash.ts b/libraries/web/src/react/hooks/use-voidhash.ts
new file mode 100644
index 000000000..217305cfa
--- /dev/null
+++ b/libraries/web/src/react/hooks/use-voidhash.ts
@@ -0,0 +1,12 @@
+import React from "react";
+
+import { VoidhashReactContext } from "../provider";
+
+export const useVoidhash = () => {
+  const context = React.useContext(VoidhashReactContext);
+  if (!context) {
+    throw new Error("useVoidhash must be used within a VoidhashProvider.");
+  }
+
+  return context;
+};
diff --git a/libraries/web/src/react/index.ts b/libraries/web/src/react/index.ts
new file mode 100644
index 000000000..11de499df
--- /dev/null
+++ b/libraries/web/src/react/index.ts
@@ -0,0 +1,4 @@
+export * from "./provider";
+export * from "./hooks/use-analytics";
+export * from "./hooks/use-feature-flags";
+export * from "./hooks/use-voidhash";
diff --git a/libraries/web/src/react/provider.tsx b/libraries/web/src/react/provider.tsx
new file mode 100644
index 000000000..d6f9eab43
--- /dev/null
+++ b/libraries/web/src/react/provider.tsx
@@ -0,0 +1,92 @@
+import React, { createContext, useEffect, useMemo, useRef, useState } from "react";
+
+import {
+  createVoidhashClient,
+  type VoidhashClientOptions,
+  type VoidhashWebClient,
+} from "../client";
+
+interface ProviderBaseProps {
+  readonly children: React.ReactNode;
+}
+
+interface ProviderWithClient extends ProviderBaseProps {
+  readonly client: VoidhashWebClient;
+  readonly config?: never;
+}
+
+interface ProviderWithConfig extends ProviderBaseProps {
+  readonly client?: never;
+  readonly config: VoidhashClientOptions;
+}
+
+export interface VoidhashReactContextValue {
+  readonly appUserId: string | null;
+  readonly client: VoidhashWebClient;
+  readonly isInitialized: boolean;
+}
+
+export const VoidhashReactContext =
+  createContext<VoidhashReactContextValue | null>(null);
+
+export function VoidhashProvider(props: ProviderWithClient | ProviderWithConfig) {
+  const clientRef = useRef<VoidhashWebClient | null>(null);
+  if (!clientRef.current) {
+    clientRef.current =
+      "client" in props && props.client
+        ? props.client
+        : createVoidhashClient((props as ProviderWithConfig).config);
+  }
+
+  const client = clientRef.current;
+  if (!client) {
+    throw new Error("VoidhashProvider failed to create a client instance.");
+  }
+  const [isInitialized, setIsInitialized] = useState(false);
+  const [appUserId, setAppUserId] = useState<string | null>(null);
+
+  useEffect(() => {
+    let isMounted = true;
+    const removeInitialized = client.on("initialized", ({ appUserId }) => {
+      if (!isMounted) {
+        return;
+      }
+      setIsInitialized(true);
+      setAppUserId(appUserId);
+    });
+    const removeIdentityChanged = client.on("identity-changed", ({ appUserId }) => {
+      if (isMounted) {
+        setAppUserId(appUserId);
+      }
+    });
+
+    void client.initialize().then(() => {
+      if (isMounted) {
+        setIsInitialized(true);
+        setAppUserId(client.getAppUserId());
+      }
+    });
+
+    return () => {
+      isMounted = false;
+      removeInitialized();
+      removeIdentityChanged();
+      void client.destroy();
+    };
+  }, [client]);
+
+  const value = useMemo(
+    () => ({
+      appUserId,
+      client,
+      isInitialized,
+    }),
+    [appUserId, client, isInitialized]
+  );
+
+  return (
+    <VoidhashReactContext.Provider value={value}>
+      {props.children}
+    </VoidhashReactContext.Provider>
+  );
+}
diff --git a/libraries/web/src/types.ts b/libraries/web/src/types.ts
new file mode 100644
index 000000000..9bfe9effc
--- /dev/null
+++ b/libraries/web/src/types.ts
@@ -0,0 +1,114 @@
+export type VoidhashTraitValue = string | number | boolean | null;
+
+export type VoidhashTraits = Record<string, VoidhashTraitValue>;
+
+export interface FeatureFlagEntry {
+  readonly enabled: boolean;
+  readonly key: string;
+  readonly payload: unknown | null;
+  readonly variantKey: string | null;
+}
+
+export interface FeatureFlagsResult {
+  readonly flags: ReadonlyArray<FeatureFlagEntry>;
+}
+
+export interface VoidhashFeatureFlagsOptions {
+  readonly persist?: boolean;
+  readonly prefetchOnInit?: boolean;
+  readonly refreshOnOnline?: boolean;
+  readonly refreshOnVisibility?: boolean;
+  readonly ttlMs?: number;
+}
+
+export interface VoidhashAnalyticsOptions {
+  readonly baseUrl?: string;
+  readonly enabled?: boolean;
+  readonly flushIntervalMs?: number;
+  readonly maxBatchBytes?: number;
+  readonly maxBatchSize?: number;
+  readonly maxQueueSize?: number;
+}
+
+export interface VoidhashClientOptions {
+  readonly analytics?: VoidhashAnalyticsOptions;
+  readonly baseUrl?: string;
+  readonly featureFlags?: VoidhashFeatureFlagsOptions;
+  readonly initialAppUserId?: string;
+  readonly observerMode?: boolean;
+  readonly publishableKey: string;
+}
+
+export interface VoidhashTrackOptions {
+  readonly eventId?: string;
+  readonly sessionId?: string;
+  readonly timestamp?: string;
+}
+
+export interface AnalyticsFlushResult {
+  readonly accepted: number;
+  readonly rejected: number;
+  readonly requestId?: string;
+}
+
+export interface InitializedEvent {
+  readonly appUserId: string;
+}
+
+export interface IdentityChangedEvent {
+  readonly appUserId: string;
+  readonly previousAppUserId: string | null;
+}
+
+export interface FeatureFlagsUpdatedEvent {
+  readonly keys?: ReadonlyArray<string>;
+  readonly result: FeatureFlagsResult;
+}
+
+export interface AnalyticsFlushedEvent extends AnalyticsFlushResult {}
+
+export interface AnalyticsPartialRejectionEvent extends AnalyticsFlushResult {}
+
+export interface VoidhashErrorEvent {
+  readonly error?: unknown;
+  readonly message: string;
+  readonly source:
+    | "analytics"
+    | "client"
+    | "feature-flags"
+    | "identity"
+    | "storage";
+}
+
+export interface VoidhashEventMap {
+  readonly "analytics-flushed": AnalyticsFlushedEvent;
+  readonly "analytics-partial-rejection": AnalyticsPartialRejectionEvent;
+  readonly error: VoidhashErrorEvent;
+  readonly "feature-flags-updated": FeatureFlagsUpdatedEvent;
+  readonly "identity-changed": IdentityChangedEvent;
+  readonly initialized: InitializedEvent;
+}
+
+export type VoidhashEventName = keyof VoidhashEventMap;
+
+export interface ResolvedVoidhashConfig {
+  readonly analytics: {
+    readonly baseUrl: string;
+    readonly enabled: boolean;
+    readonly flushIntervalMs: number;
+    readonly maxBatchBytes: number;
+    readonly maxBatchSize: number;
+    readonly maxQueueSize: number;
+  };
+  readonly baseUrl: string;
+  readonly featureFlags: {
+    readonly persist: boolean;
+    readonly prefetchOnInit: boolean;
+    readonly refreshOnOnline: boolean;
+    readonly refreshOnVisibility: boolean;
+    readonly ttlMs: number;
+  };
+  readonly initialAppUserId?: string;
+  readonly observerMode: boolean;
+  readonly publishableKey: string;
+}
diff --git a/libraries/web/tests/analytics.test.ts b/libraries/web/tests/analytics.test.ts
new file mode 100644
index 000000000..43d51d81c
--- /dev/null
+++ b/libraries/web/tests/analytics.test.ts
@@ -0,0 +1,101 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import { createVoidhashClient } from "../src/index";
+import { createJsonResponse } from "./helpers";
+
+describe("analytics delivery", () => {
+  beforeEach(() => {
+    localStorage.clear();
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it("retries a retryable analytics failure on the next flush", async () => {
+    let analyticsAttempts = 0;
+    vi.stubGlobal("fetch", vi.fn(async (input: URL | RequestInfo) => {
+      const url = input.toString();
+      if (url.endsWith("/v1/events")) {
+        analyticsAttempts += 1;
+        if (analyticsAttempts === 1) {
+          return createJsonResponse({ error: "try again" }, 503);
+        }
+
+        return createJsonResponse(
+          {
+            accepted: 1,
+            rejected: 0,
+            request_id: "req_retry",
+          },
+          202
+        );
+      }
+
+      return createJsonResponse({});
+    }));
+    const client = createVoidhashClient({
+      analytics: {
+        flushIntervalMs: 60_000,
+      },
+      publishableKey: "vh_pk_test",
+    });
+
+    await client.initialize();
+    await client.track("purchase_started");
+
+    expect(await client.flushAnalytics()).toBeNull();
+    expect(await client.flushAnalytics()).toEqual({
+      accepted: 1,
+      rejected: 0,
+      requestId: "req_retry",
+    });
+
+    await client.destroy();
+  });
+
+  it("splits batches when the ingest service returns 413", async () => {
+    let analyticsAttempts = 0;
+    vi.stubGlobal("fetch", vi.fn(async (input: URL | RequestInfo) => {
+      const url = input.toString();
+      if (url.endsWith("/v1/events")) {
+        analyticsAttempts += 1;
+        if (analyticsAttempts === 1) {
+          return createJsonResponse({ error: "payload too large" }, 413);
+        }
+
+        return createJsonResponse(
+          {
+            accepted: 1,
+            rejected: 0,
+            request_id: `req_${analyticsAttempts}`,
+          },
+          202
+        );
+      }
+
+      return createJsonResponse({});
+    }));
+    const client = createVoidhashClient({
+      analytics: {
+        flushIntervalMs: 60_000,
+        maxBatchBytes: 100_000,
+        maxBatchSize: 10,
+      },
+      publishableKey: "vh_pk_test",
+    });
+
+    await client.initialize();
+    await client.track("event_one");
+    await client.track("event_two");
+
+    expect(await client.flushAnalytics()).toEqual({
+      accepted: 2,
+      rejected: 0,
+      requestId: "req_3",
+    });
+    expect(analyticsAttempts).toBe(3);
+
+    await client.destroy();
+  });
+});
diff --git a/libraries/web/tests/client.test.ts b/libraries/web/tests/client.test.ts
new file mode 100644
index 000000000..a112bb07d
--- /dev/null
+++ b/libraries/web/tests/client.test.ts
@@ -0,0 +1,165 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import {
+  VoidhashNotInitializedError,
+  createVoidhashClient,
+} from "../src/index";
+import { createJsonResponse, flushMicrotasks, installFetchMock } from "./helpers";
+
+describe("VoidhashWebClient", () => {
+  beforeEach(() => {
+    localStorage.clear();
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it("rejects operational methods before initialize", async () => {
+    const client = createVoidhashClient({
+      publishableKey: "vh_pk_test",
+    });
+
+    await expect(client.getFeatureFlags()).rejects.toBeInstanceOf(
+      VoidhashNotInitializedError
+    );
+  });
+
+  it("initializes, fetches flags, derives analytics url, and flushes events", async () => {
+    const { calls } = installFetchMock((call) => {
+      if (call.url.endsWith("/sdk/evaluate-flags")) {
+        return createJsonResponse({
+          flags: [
+            {
+              enabled: true,
+              key: "new-nav",
+              payload: { color: "blue" },
+              variantKey: "on",
+            },
+          ],
+        });
+      }
+
+      if (call.url.endsWith("/v1/events")) {
+        return createJsonResponse(
+          {
+            accepted: 1,
+            rejected: 0,
+            request_id: "req_1",
+          },
+          202
+        );
+      }
+
+      if (call.url.endsWith("/sdk/sync-customer-attributes")) {
+        return createJsonResponse({});
+      }
+
+      return createJsonResponse({});
+    });
+    const client = createVoidhashClient({
+      analytics: {
+        flushIntervalMs: 60_000,
+      },
+      baseUrl: "https://api.voidhash.test",
+      publishableKey: "vh_pk_test",
+    });
+
+    await client.initialize();
+    const appUserId = client.getAppUserId();
+    const flags = await client.getFeatureFlags(["new-nav"]);
+    await client.track("checkout_started", { source: "pricing_page" });
+    const flushResult = await client.flushAnalytics();
+
+    expect(appUserId).toMatch(/^vh:anon:/);
+    expect(flags.flags[0]?.key).toBe("new-nav");
+    expect(client.isFeatureEnabled("new-nav")).toBe(true);
+    expect(flushResult).toEqual({
+      accepted: 1,
+      rejected: 0,
+      requestId: "req_1",
+    });
+
+    const analyticsCall = calls.find((call) => call.url.includes("/v1/events"));
+    expect(analyticsCall?.url).toBe("https://i.voidhash.test/v1/events");
+    expect(analyticsCall?.headers["x-distinct-id"]).toBe(appUserId);
+
+    await client.destroy();
+  });
+
+  it("syncs traits before identify and reset identity", async () => {
+    const { calls } = installFetchMock((call) => {
+      if (call.url.endsWith("/sdk/identify")) {
+        return createJsonResponse({
+          appUserId: "user_123",
+        });
+      }
+
+      return createJsonResponse({});
+    });
+    const client = createVoidhashClient({
+      analytics: {
+        enabled: false,
+      },
+      publishableKey: "vh_pk_test",
+    });
+
+    await client.initialize();
+    const initialAppUserId = client.getAppUserId();
+    await client.identify("user_123", { companyId: "acme", plan: "pro" });
+    await client.resetIdentity();
+
+    const syncCalls = calls.filter((call) =>
+      call.url.endsWith("/sdk/sync-customer-attributes")
+    );
+    const identifyCall = calls.find((call) => call.url.endsWith("/sdk/identify"));
+
+    expect(syncCalls[0]?.headers["x-app-user-id"]).toBe(initialAppUserId);
+    expect(JSON.parse(identifyCall?.body ?? "{}")).toEqual({
+      appUserId: "user_123",
+      traits: {
+        companyId: "acme",
+        plan: "pro",
+      },
+    });
+    expect(syncCalls[1]?.headers["x-app-user-id"]).toBe("user_123");
+    expect(client.getAppUserId()).toMatch(/^vh:anon:/);
+
+    await client.destroy();
+  });
+
+  it("refreshes tracked feature flags when the browser comes back online", async () => {
+    const { calls } = installFetchMock((call) => {
+      if (call.url.endsWith("/sdk/evaluate-flags")) {
+        return createJsonResponse({
+          flags: [
+            {
+              enabled: true,
+              key: "new-nav",
+              payload: null,
+              variantKey: "on",
+            },
+          ],
+        });
+      }
+
+      return createJsonResponse({});
+    });
+    const client = createVoidhashClient({
+      analytics: {
+        enabled: false,
+      },
+      publishableKey: "vh_pk_test",
+    });
+
+    await client.initialize();
+    await client.getFeatureFlags(["new-nav"]);
+    window.dispatchEvent(new Event("online"));
+    await flushMicrotasks();
+
+    const flagCalls = calls.filter((call) => call.url.endsWith("/sdk/evaluate-flags"));
+    expect(flagCalls).toHaveLength(2);
+
+    await client.destroy();
+  });
+});
diff --git a/libraries/web/tests/helpers.ts b/libraries/web/tests/helpers.ts
new file mode 100644
index 000000000..c22e2e44e
--- /dev/null
+++ b/libraries/web/tests/helpers.ts
@@ -0,0 +1,55 @@
+import { vi } from "vitest";
+
+export interface FetchCall {
+  readonly body?: string;
+  readonly headers: Record<string, string>;
+  readonly method: string;
+  readonly url: string;
+}
+
+export const createJsonResponse = (
+  body: Record<string, unknown>,
+  status = 200
+) =>
+  new Response(JSON.stringify(body), {
+    headers: {
+      "content-type": "application/json",
+    },
+    status,
+  });
+
+export const flushMicrotasks = async (times = 4) => {
+  for (let index = 0; index < times; index += 1) {
+    await Promise.resolve();
+  }
+};
+
+export const installFetchMock = (
+  handler: (call: FetchCall) => Promise<Response> | Response
+) => {
+  const calls: FetchCall[] = [];
+  const fetchMock = vi.fn(async (input: URL | RequestInfo, init?: RequestInit) => {
+    const headers = new Headers(init?.headers);
+    const call: FetchCall = {
+      body:
+        typeof init?.body === "string"
+          ? init.body
+          : init?.body instanceof Uint8Array
+            ? new TextDecoder().decode(init.body)
+            : undefined,
+      headers: Object.fromEntries(headers.entries()),
+      method: init?.method ?? "GET",
+      url: input.toString(),
+    };
+
+    calls.push(call);
+    return handler(call);
+  });
+
+  vi.stubGlobal("fetch", fetchMock);
+
+  return {
+    calls,
+    fetchMock,
+  };
+};
diff --git a/libraries/web/tests/react.test.tsx b/libraries/web/tests/react.test.tsx
new file mode 100644
index 000000000..377d628b7
--- /dev/null
+++ b/libraries/web/tests/react.test.tsx
@@ -0,0 +1,98 @@
+import React, { act } from "react";
+import { createRoot } from "react-dom/client";
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { createJsonResponse } from "./helpers";
+
+describe("react integration", () => {
+  afterEach(() => {
+    vi.unstubAllGlobals();
+    localStorage.clear();
+    delete (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean })
+      .IS_REACT_ACT_ENVIRONMENT;
+  });
+
+  it("keeps the root entry importable without react", async () => {
+    const mod = await import("../src/index");
+
+    expect(typeof mod.createVoidhashClient).toBe("function");
+  });
+
+  it("renders provider and hooks safely", async () => {
+    (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT =
+      true;
+    vi.stubGlobal("fetch", vi.fn(async (input: URL | RequestInfo) => {
+      const url = input.toString();
+      if (url.endsWith("/sdk/evaluate-flags")) {
+        return createJsonResponse({
+          flags: [
+            {
+              enabled: true,
+              key: "new-nav",
+              payload: null,
+              variantKey: "on",
+            },
+          ],
+        });
+      }
+
+      return createJsonResponse({});
+    }));
+
+    const {
+      VoidhashProvider,
+      useFeatureFlags,
+      useVoidhash,
+    } = await import("../src/react/index");
+
+    const container = document.createElement("div");
+    const root = createRoot(container);
+
+    function TestComponent() {
+      const { appUserId, isInitialized } = useVoidhash();
+      const flags = useFeatureFlags(["new-nav"]);
+
+      return (
+        <div>
+          <span data-testid="ready">{String(isInitialized)}</span>
+          <span data-testid="app-user-id">{appUserId ?? ""}</span>
+          <span data-testid="flag">{String(flags.isEnabled("new-nav"))}</span>
+        </div>
+      );
+    }
+
+    await act(async () => {
+      root.render(
+        <VoidhashProvider
+          config={{
+            analytics: {
+              enabled: false,
+            },
+            publishableKey: "vh_pk_test",
+          }}
+        >
+          <TestComponent />
+        </VoidhashProvider>
+      );
+    });
+    await act(async () => {
+      await Promise.resolve();
+      await Promise.resolve();
+      await Promise.resolve();
+    });
+
+    expect(container.querySelector('[data-testid="ready"]')?.textContent).toBe(
+      "true"
+    );
+    expect(
+      container.querySelector('[data-testid="app-user-id"]')?.textContent
+    ).toMatch(/^vh:anon:/);
+    expect(container.querySelector('[data-testid="flag"]')?.textContent).toBe(
+      "true"
+    );
+
+    await act(async () => {
+      root.unmount();
+    });
+  });
+});
diff --git a/libraries/web/tsconfig.json b/libraries/web/tsconfig.json
new file mode 100644
index 000000000..75343a881
--- /dev/null
+++ b/libraries/web/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../../packages/tsconfig/react-library.json",
+  "compilerOptions": {
+    "lib": ["ES2022", "DOM"],
+    "rootDir": "."
+  },
+  "include": ["src", "tests", "build.ts", "vitest.unit.mts"]
+}
diff --git a/libraries/web/vitest.unit.mts b/libraries/web/vitest.unit.mts
new file mode 100644
index 000000000..d6abf3f2b
--- /dev/null
+++ b/libraries/web/vitest.unit.mts
@@ -0,0 +1,12 @@
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  plugins: [tsconfigPaths()],
+  test: {
+    environment: "jsdom",
+    exclude: ["./node_modules/**", "./dist/**"],
+    include: ["./tests/**/*.test.ts", "./tests/**/*.test.tsx"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/packages/api-spec/src/schema.ts b/packages/api-spec/src/schema.ts
index 17cc9cc67..53b02dbcf 100644
--- a/packages/api-spec/src/schema.ts
+++ b/packages/api-spec/src/schema.ts
@@ -250,11 +250,11 @@ const CommonSdkHeaders = Schema.Struct({
   "x-platform": Schema.String,
   "x-platform-brand": Schema.optional(Schema.String),
   "x-platform-device": Schema.optional(Schema.String),
-  "x-platform-flavor": Schema.Literal("native"),
+  "x-platform-flavor": Schema.Literals(["native", "browser"]),
   "x-platform-flavor-version": Schema.optional(Schema.String),
   "x-platform-version": Schema.optional(Schema.String),
   "x-preferred-locales": Schema.optional(Schema.String),
-  "x-sdk": Schema.Literal("react-native"),
+  "x-sdk": Schema.Literals(["react-native", "web"]),
   "x-sdk-version": Schema.String,
   "x-storefront": Schema.optional(Schema.String),
 });
@@ -264,6 +264,15 @@ export const SdkHeaders = Schema.Struct({
   ...CommonSdkHeaders.fields,
 });
 
+const SdkTraitValue = Schema.Union([
+  Schema.String,
+  Schema.Number,
+  Schema.Boolean,
+  Schema.Null,
+]);
+
+const SdkTraits = Schema.Record(Schema.String, SdkTraitValue);
+
 // SDK Identify
 export class SdkIdentifyBody extends Schema.Class<SdkIdentifyBody>(
   "SdkIdentifyBody"
@@ -271,6 +280,7 @@ export class SdkIdentifyBody extends Schema.Class<SdkIdentifyBody>(
   appUserId: Schema.String,
   email: Schema.optional(Schema.String),
   name: Schema.optional(Schema.String),
+  traits: Schema.optional(SdkTraits),
 }) {}
 
 // SDK Sync Customer Attributes
@@ -279,6 +289,7 @@ export class SdkSyncCustomerAttributesBody extends Schema.Class<SdkSyncCustomerA
 )({
   email: Schema.optional(Schema.String),
   name: Schema.optional(Schema.String),
+  traits: Schema.optional(SdkTraits),
 }) {}
 
 export const SdkSyncTransactionBody = Schema.Struct({
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 43d89e241..874a5f5d0 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,9 +9,21 @@ catalogs:
     '@effect/language-service':
       specifier: ^0.64.1
       version: 0.64.1
+    '@effect/platform':
+      specifier: ^0.94.1
+      version: 0.94.5
+    '@types/react':
+      specifier: ^19.1.0
+      version: 19.1.17
+    '@types/react-dom':
+      specifier: ^19.1.0
+      version: 19.2.3
     better-auth:
       specifier: ^1.4.18
       version: 1.4.18
+    vite-tsconfig-paths:
+      specifier: ^5.1.4
+      version: 5.1.4
 
 overrides:
   react: 19.1.0
@@ -79,7 +91,7 @@ importers:
         version: link:../../packages/shared
       better-auth:
         specifier: 'catalog:'
-        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
+        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
       effect:
         specifier: 4.0.0-beta.23
         version: 4.0.0-beta.23
@@ -279,6 +291,52 @@ importers:
         specifier: 5.0.39
         version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
+  libraries/web:
+    dependencies:
+      '@effect/platform':
+        specifier: 'catalog:'
+        version: 0.94.5(effect@4.0.0-beta.23)
+      '@voidhash/api-spec':
+        specifier: workspace:*
+        version: link:../../packages/api-spec
+      effect:
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23
+    devDependencies:
+      '@types/react':
+        specifier: 'catalog:'
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: 'catalog:'
+        version: 19.2.3(@types/react@19.1.17)
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      jsdom:
+        specifier: ^20.0.3
+        version: 20.0.3
+      react:
+        specifier: 19.1.0
+        version: 19.1.0
+      react-dom:
+        specifier: 19.1.0
+        version: 19.1.0(react@19.1.0)
+      tsup:
+        specifier: ^6.1.3
+        version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
+      typescript:
+        specifier: 5.6.3
+        version: 5.6.3
+      vite-tsconfig-paths:
+        specifier: 'catalog:'
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vitest:
+        specifier: ^3.2.4
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+
   packages/api-spec:
     dependencies:
       effect:
@@ -1229,6 +1287,11 @@ packages:
       effect: 4.0.0-beta.23
       ioredis: ^5.7.0
 
+  '@effect/platform@0.94.5':
+    resolution: {integrity: sha512-z05APUiDDPbodhTkH/RJqOLoCU11bU2IZLfcwLFrld03+ob1VeqRnELQlmueLIYm6NZifHAtjl32V+GRt34y4A==}
+    peerDependencies:
+      effect: 4.0.0-beta.23
+
   '@effect/vitest@4.0.0-beta.23':
     resolution: {integrity: sha512-2ezxm8jpBuoY9UsrwUyGsbs1lwKodR6NGV/g/rypoPN3L6WABXOcZs2mhFmY8y5EXnGZnSgsWhpxwYlEo29jcA==}
     peerDependencies:
@@ -6438,6 +6501,11 @@ packages:
   react-devtools-core@6.1.5:
     resolution: {integrity: sha512-ePrwPfxAnB+7hgnEr8vpKxL9cmnp7F322t8oqcPshbIQQhDKgFDW4tjhF2wjVbdXF9O/nyuy3sQWd9JGpiLPvA==}
 
+  react-dom@19.1.0:
+    resolution: {integrity: sha512-Xs1hdnE+DyKgeHJeJznQmYMIBG3TKIHJJT95Q58nHLSrElKlGQqDTR2HQ9fx5CN/Gk6Vh/kupBTDLU11/nDk/g==}
+    peerDependencies:
+      react: 19.1.0
+
   react-dom@19.1.1:
     resolution: {integrity: sha512-Dlq/5LAZgF0Gaz6yiqZCf6VCcZs1ghAJyrsu84Q/GT0gV+mCxbfmKNoGRKBYMJ8IEdGPqu49YWXD02GCknEDkw==}
     peerDependencies:
@@ -8155,9 +8223,9 @@ snapshots:
 
   '@babel/helper-wrap-function@7.28.3':
     dependencies:
-      '@babel/template': 7.27.2
+      '@babel/template': 7.28.6
       '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -9521,6 +9589,13 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
+  '@effect/platform@0.94.5(effect@4.0.0-beta.23)':
+    dependencies:
+      effect: 4.0.0-beta.23
+      find-my-way-ts: 0.1.6
+      msgpackr: 1.11.8
+      multipasta: 0.2.7
+
   '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@3.2.4)':
     dependencies:
       effect: 4.0.0-beta.23
@@ -11362,54 +11437,54 @@ snapshots:
   '@tanstack/history@1.141.0':
     optional: true
 
-  '@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/history': 1.141.0
-      '@tanstack/react-store': 0.8.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-store': 0.8.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/router-core': 1.142.8
       isbot: 5.1.35
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
     optional: true
 
-  '@tanstack/react-start-client@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-start-client@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/router-core': 1.142.8
       '@tanstack/start-client-core': 1.142.8
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
     optional: true
 
-  '@tanstack/react-start-server@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-start-server@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/history': 1.141.0
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/router-core': 1.142.8
       '@tanstack/start-client-core': 1.142.8
       '@tanstack/start-server-core': 1.142.8
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     transitivePeerDependencies:
       - crossws
     optional: true
 
-  '@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start-client': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start-server': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-start-client': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-start-server': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/router-utils': 1.161.4
       '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/start-server-core': 1.142.8
       pathe: 2.0.3
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
       vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - '@rsbuild/core'
@@ -11419,11 +11494,11 @@ snapshots:
       - webpack
     optional: true
 
-  '@tanstack/react-store@0.8.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-store@0.8.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/store': 0.8.1
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
     optional: true
 
@@ -11452,7 +11527,7 @@ snapshots:
       - supports-color
     optional: true
 
-  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/core': 7.29.0
       '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
@@ -11469,7 +11544,7 @@ snapshots:
       unplugin: 2.3.11
       zod: 3.25.76
     optionalDependencies:
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
@@ -11530,7 +11605,7 @@ snapshots:
       tiny-warning: 1.0.3
     optional: true
 
-  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.0
@@ -11538,7 +11613,7 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-beta.40
       '@tanstack/router-core': 1.142.8
       '@tanstack/router-generator': 1.142.8
-      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/router-utils': 1.141.0
       '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/start-client-core': 1.142.8
@@ -11705,7 +11780,6 @@ snapshots:
   '@types/react-dom@19.2.3(@types/react@19.1.17)':
     dependencies:
       '@types/react': 19.1.17
-    optional: true
 
   '@types/react@19.1.17':
     dependencies:
@@ -12009,7 +12083,7 @@ snapshots:
 
   acorn-globals@7.0.1:
     dependencies:
-      acorn: 8.15.0
+      acorn: 8.16.0
       acorn-walk: 8.3.4
 
   acorn-jsx@5.3.2(acorn@8.15.0):
@@ -12018,12 +12092,11 @@ snapshots:
 
   acorn-walk@8.3.4:
     dependencies:
-      acorn: 8.15.0
+      acorn: 8.16.0
 
   acorn@8.15.0: {}
 
-  acorn@8.16.0:
-    optional: true
+  acorn@8.16.0: {}
 
   agent-base@6.0.2:
     dependencies:
@@ -12496,7 +12569,7 @@ snapshots:
 
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
+  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
     dependencies:
       '@better-auth/core': 1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)
       '@better-auth/telemetry': 1.4.18(@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0))
@@ -12511,13 +12584,13 @@ snapshots:
       nanostores: 1.1.0
       zod: 4.3.6
     optionalDependencies:
-      '@tanstack/react-start': 1.142.8(react-dom@19.1.1(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/react-start': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       drizzle-kit: 0.31.8
       drizzle-orm: 0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0)
       mysql2: 3.16.0
-      next: 16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      next: 16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
       vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   better-call@1.1.8(zod@4.3.6):
@@ -15154,7 +15227,7 @@ snapshots:
   jsdom@20.0.3:
     dependencies:
       abab: 2.0.6
-      acorn: 8.15.0
+      acorn: 8.16.0
       acorn-globals: 7.0.1
       cssom: 0.5.0
       cssstyle: 2.3.0
@@ -15177,7 +15250,7 @@ snapshots:
       whatwg-encoding: 2.0.0
       whatwg-mimetype: 3.0.0
       whatwg-url: 11.0.0
-      ws: 8.18.3
+      ws: 8.19.0
       xml-name-validator: 4.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -15664,14 +15737,14 @@ snapshots:
     optionalDependencies:
       '@rollup/rollup-linux-x64-gnu': 4.54.0
 
-  next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@next/env': 16.0.0
       '@swc/helpers': 0.5.15
       caniuse-lite: 1.0.30001775
       postcss: 8.4.31
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
       styled-jsx: 5.1.6(@babel/core@7.29.0)(react@19.1.0)
     optionalDependencies:
       '@next/swc-darwin-arm64': 16.0.0
@@ -16085,6 +16158,11 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
+  react-dom@19.1.0(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      scheduler: 0.26.0
+
   react-dom@19.1.1(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -16983,7 +17061,7 @@ snapshots:
   terser@5.44.1:
     dependencies:
       '@jridgewell/source-map': 0.3.11
-      acorn: 8.15.0
+      acorn: 8.16.0
       commander: 2.20.3
       source-map-support: 0.5.21
 

From d043b8bcb28d83e3dbe3418103bff569b82d31f1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 10 Mar 2026 11:18:55 +0100
Subject: [PATCH 005/129] feat: serveer sdk wip (#76)

* feat: serveer sdk wip

* chore: improve
---
 libraries/node/build.ts                       |  34 ++
 libraries/node/package.json                   |  49 +++
 libraries/node/src/effect-client.ts           |  20 +
 libraries/node/src/errors.ts                  |   9 +
 libraries/node/src/index.ts                   |  10 +
 libraries/node/src/internal/client-types.ts   | 172 +++++++++
 .../node/src/internal/filter-sdk-group.ts     |  13 +
 .../node/src/internal/json-compatible-api.ts  |  57 +++
 .../src/internal/make-generated-client.ts     | 101 +++++
 .../internal/normalize-generated-client.ts    | 122 ++++++
 libraries/node/src/promise-client.ts          |  58 +++
 libraries/node/src/types.ts                   |   5 +
 libraries/node/tests/client.test.ts           | 352 ++++++++++++++++++
 libraries/node/tests/helpers.ts               |  58 +++
 libraries/node/tsconfig.json                  |  12 +
 libraries/node/vitest.unit.mts                |  12 +
 pnpm-lock.yaml                                |  31 ++
 17 files changed, 1115 insertions(+)
 create mode 100644 libraries/node/build.ts
 create mode 100644 libraries/node/package.json
 create mode 100644 libraries/node/src/effect-client.ts
 create mode 100644 libraries/node/src/errors.ts
 create mode 100644 libraries/node/src/index.ts
 create mode 100644 libraries/node/src/internal/client-types.ts
 create mode 100644 libraries/node/src/internal/filter-sdk-group.ts
 create mode 100644 libraries/node/src/internal/json-compatible-api.ts
 create mode 100644 libraries/node/src/internal/make-generated-client.ts
 create mode 100644 libraries/node/src/internal/normalize-generated-client.ts
 create mode 100644 libraries/node/src/promise-client.ts
 create mode 100644 libraries/node/src/types.ts
 create mode 100644 libraries/node/tests/client.test.ts
 create mode 100644 libraries/node/tests/helpers.ts
 create mode 100644 libraries/node/tsconfig.json
 create mode 100644 libraries/node/vitest.unit.mts

diff --git a/libraries/node/build.ts b/libraries/node/build.ts
new file mode 100644
index 000000000..a6335e077
--- /dev/null
+++ b/libraries/node/build.ts
@@ -0,0 +1,34 @@
+import * as tsup from "tsup";
+
+const main = async () => {
+  await tsup.build({
+    dts: true,
+    entryPoints: {
+      index: "./src/index.ts",
+    },
+    format: ["cjs", "esm"],
+    outDir: "./dist",
+    outExtension: (ctx) => {
+      if (ctx.format === "cjs") {
+        return {
+          dts: ".d.ts",
+          js: ".js",
+        };
+      }
+
+      return {
+        dts: ".d.mts",
+        js: ".mjs",
+      };
+    },
+    sourcemap: true,
+    splitting: false,
+    target: "es2022",
+  });
+};
+
+main().catch((error) => {
+  // biome-ignore lint/suspicious/noConsole: Build script should print the failure.
+  console.error(error);
+  process.exit(1);
+});
diff --git a/libraries/node/package.json b/libraries/node/package.json
new file mode 100644
index 000000000..cf416fb78
--- /dev/null
+++ b/libraries/node/package.json
@@ -0,0 +1,49 @@
+{
+  "name": "@voidhash/node",
+  "version": "0.0.1-alpha.1",
+  "description": "Fetch-compatible Voidhash Node SDK.",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "libraries/node"
+  },
+  "type": "module",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "scripts": {
+    "build": "rm -rf ./dist && tsx build.ts",
+    "typecheck": "tsgo --noEmit",
+    "test": "vitest run -c vitest.unit.mts",
+    "test:watch": "vitest -c vitest.unit.mts"
+  },
+  "dependencies": {
+    "@voidhash/api-spec": "workspace:*"
+  },
+  "devDependencies": {
+    "@effect/platform": "catalog:",
+    "@voidhash/tsconfig": "workspace:*",
+    "effect": "catalog:",
+    "tsx": "^4.19.3",
+    "typescript": "5.6.3",
+    "vite-tsconfig-paths": "catalog:",
+    "vitest": "^3.2.4",
+    "tsup": "^6.1.3"
+  },
+  "peerDependencies": {
+    "@effect/platform": "catalog:",
+    "effect": "catalog:"
+  }
+}
diff --git a/libraries/node/src/effect-client.ts b/libraries/node/src/effect-client.ts
new file mode 100644
index 000000000..602cf7646
--- /dev/null
+++ b/libraries/node/src/effect-client.ts
@@ -0,0 +1,20 @@
+import { Effect } from "effect";
+
+import type { VoidhashNodeClientOptions } from "./types";
+import type { PublicVoidhashNodeEffectClient } from "./internal/client-types";
+import {
+  type FilterSdkGroup,
+  filterSdkGroup,
+} from "./internal/filter-sdk-group";
+import { makeGeneratedClient } from "./internal/make-generated-client";
+import { normalizeGeneratedClient } from "./internal/normalize-generated-client";
+
+export type VoidhashNodeEffectClient =
+  FilterSdkGroup<PublicVoidhashNodeEffectClient>;
+
+export const createVoidhashNodeEffectClient = (
+  options: VoidhashNodeClientOptions
+): VoidhashNodeEffectClient =>
+  filterSdkGroup(
+    normalizeGeneratedClient(Effect.runSync(makeGeneratedClient(options)))
+  ) as VoidhashNodeEffectClient;
diff --git a/libraries/node/src/errors.ts b/libraries/node/src/errors.ts
new file mode 100644
index 000000000..67e36dc03
--- /dev/null
+++ b/libraries/node/src/errors.ts
@@ -0,0 +1,9 @@
+export class VoidhashNodeConfigurationError extends Error {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message);
+    this.name = new.target.name;
+    if (options?.cause) {
+      (this as Error & { cause?: unknown }).cause = options.cause;
+    }
+  }
+}
diff --git a/libraries/node/src/index.ts b/libraries/node/src/index.ts
new file mode 100644
index 000000000..2f8f7258c
--- /dev/null
+++ b/libraries/node/src/index.ts
@@ -0,0 +1,10 @@
+export { VoidhashNodeConfigurationError } from "./errors";
+export {
+  createVoidhashNodeEffectClient,
+  type VoidhashNodeEffectClient,
+} from "./effect-client";
+export {
+  createVoidhashNodeClient,
+  type VoidhashNodeClient,
+} from "./promise-client";
+export type { VoidhashNodeClientOptions } from "./types";
diff --git a/libraries/node/src/internal/client-types.ts b/libraries/node/src/internal/client-types.ts
new file mode 100644
index 000000000..73da656f6
--- /dev/null
+++ b/libraries/node/src/internal/client-types.ts
@@ -0,0 +1,172 @@
+import type { VoidhashV1Api } from "@voidhash/api-spec";
+import type { Effect } from "effect";
+import type * as Schema from "effect/Schema";
+import type * as HttpClientError from "effect/unstable/http/HttpClientError";
+import type { HttpClientResponse } from "effect/unstable/http";
+import type { HttpApiSchemaError } from "effect/unstable/httpapi/HttpApiError";
+import type {
+  HttpApi,
+  HttpApiClient,
+  HttpApiEndpoint,
+  HttpApiGroup,
+  HttpApiMiddleware,
+} from "effect/unstable/httpapi";
+import type { Brand } from "effect/Brand";
+import type * as HttpApiSchema from "effect/unstable/httpapi/HttpApiSchema";
+
+type Simplify<T> = { [Key in keyof T]: T[Key] } & {};
+
+type ApiGroups<Api extends HttpApi.Any> =
+  Api extends HttpApi.HttpApi<infer _ApiId, infer Groups> ? Groups : never;
+
+type EncodedClientRequest<
+  Params extends Schema.Top,
+  Query extends Schema.Top,
+  Payload extends Schema.Top,
+  Headers extends Schema.Top,
+  WithResponse extends boolean,
+> = (
+  & ([Params["Encoded"]] extends [never]
+    ? {}
+    : { readonly params: Params["Encoded"] })
+  & ([Query["Encoded"]] extends [never]
+    ? {}
+    : { readonly query: Query["Encoded"] })
+  & ([Headers["Encoded"]] extends [never]
+    ? {}
+    : { readonly headers: Headers["Encoded"] })
+  & ([Payload["Encoded"]] extends [never]
+    ? {}
+    : Payload["Encoded"] extends infer EncodedPayload
+      ? EncodedPayload extends
+          | Brand<HttpApiSchema.MultipartTypeId>
+          | Brand<HttpApiSchema.MultipartStreamTypeId>
+        ? { readonly payload: FormData }
+        : { readonly payload: Payload["Encoded"] }
+      : { readonly payload: Payload["Encoded"] })
+) extends infer Request
+  ? keyof Request extends never
+    ? void | { readonly withResponse?: WithResponse }
+    : Request & { readonly withResponse?: WithResponse }
+  : void;
+
+type EffectMethod<Endpoint> =
+  Endpoint extends HttpApiEndpoint.HttpApiEndpoint<
+    infer _Name,
+    infer _Method,
+    infer _Path,
+    infer Params,
+    infer Query,
+    infer Payload,
+    infer Headers,
+    infer Success,
+    infer Error,
+    infer Middleware,
+    infer _MR
+  >
+    ? <WithResponse extends boolean = false>(
+        request: Simplify<
+          EncodedClientRequest<Params, Query, Payload, Headers, WithResponse>
+        >
+      ) => Effect.Effect<
+        WithResponse extends true
+          ? [Success["Type"], HttpClientResponse.HttpClientResponse]
+          : Success["Type"],
+        | Error["Type"]
+        | HttpApiMiddleware.Error<Middleware>
+        | HttpApiMiddleware.ClientError<Middleware>
+        | HttpApiSchemaError
+        | HttpClientError.HttpClientError
+        | Schema.SchemaError,
+        | Params["DecodingServices"]
+        | Query["DecodingServices"]
+        | Payload["DecodingServices"]
+        | Headers["DecodingServices"]
+        | Params["EncodingServices"]
+        | Query["EncodingServices"]
+        | Payload["EncodingServices"]
+        | Headers["EncodingServices"]
+        | Success["DecodingServices"]
+        | Error["DecodingServices"]
+      >
+    : never;
+
+type EffectTopLevelMethods<Groups extends HttpApiGroup.Any> =
+  Extract<Groups, { readonly topLevel: true }> extends
+    HttpApiGroup.HttpApiGroup<infer _Id, infer Endpoints, infer _TopLevel>
+    ? Endpoints extends infer Endpoint
+      ? [HttpApiEndpoint.Name<Endpoint>, EffectMethod<Endpoint>]
+      : never
+    : never;
+
+type EffectClient<Groups extends HttpApiGroup.Any> = Simplify<
+  & {
+    readonly [Group in Extract<Groups, { readonly topLevel: false }> as HttpApiGroup.Name<Group>]:
+      Group extends HttpApiGroup.HttpApiGroup<infer _GroupName, infer Endpoints>
+        ? {
+            readonly [Endpoint in Endpoints as HttpApiEndpoint.Name<Endpoint>]:
+              EffectMethod<Endpoint>;
+          }
+        : never;
+  }
+  & {
+    readonly [Method in EffectTopLevelMethods<Groups> as Method[0]]: Method[1];
+  }
+>;
+
+type PromiseTopLevelMethods<Groups extends HttpApiGroup.Any> =
+  Extract<Groups, { readonly topLevel: true }> extends
+    HttpApiGroup.HttpApiGroup<infer _Id, infer Endpoints, infer _TopLevel>
+    ? Endpoints extends infer Endpoint
+      ? [HttpApiEndpoint.Name<Endpoint>, PromiseMethod<Endpoint>]
+      : never
+    : never;
+
+type PromiseMethod<Endpoint> =
+  Endpoint extends HttpApiEndpoint.HttpApiEndpoint<
+    infer _Name,
+    infer _Method,
+    infer _Path,
+    infer Params,
+    infer Query,
+    infer Payload,
+    infer Headers,
+    infer Success,
+    infer _Error,
+    infer _Middleware,
+    infer _MR
+  >
+    ? <WithResponse extends boolean = false>(
+        request: Simplify<
+          EncodedClientRequest<Params, Query, Payload, Headers, WithResponse>
+        >
+      ) => Promise<
+        WithResponse extends true
+          ? [Success["Type"], HttpClientResponse.HttpClientResponse]
+          : Success["Type"]
+      >
+    : never;
+
+type PromiseClient<Groups extends HttpApiGroup.Any> = Simplify<
+  & {
+    readonly [Group in Extract<Groups, { readonly topLevel: false }> as HttpApiGroup.Name<Group>]:
+      Group extends HttpApiGroup.HttpApiGroup<infer _GroupName, infer Endpoints>
+        ? {
+            readonly [Endpoint in Endpoints as HttpApiEndpoint.Name<Endpoint>]:
+              PromiseMethod<Endpoint>;
+          }
+        : never;
+  }
+  & {
+    readonly [Method in PromiseTopLevelMethods<Groups> as Method[0]]: Method[1];
+  }
+>;
+
+type PromiseClientForApi<Api extends HttpApi.Any> =
+  Api extends HttpApi.HttpApi<infer _ApiId, infer Groups> ? PromiseClient<Groups> : never;
+
+export type GeneratedVoidhashNodeEffectClient = HttpApiClient.ForApi<typeof VoidhashV1Api>;
+export type PublicVoidhashNodeEffectClient = EffectClient<ApiGroups<typeof VoidhashV1Api>>;
+
+export type GeneratedVoidhashNodeClient = PromiseClientForApi<typeof VoidhashV1Api>;
+export type PublicVoidhashNodeClient = PromiseClientForApi<typeof VoidhashV1Api>;
diff --git a/libraries/node/src/internal/filter-sdk-group.ts b/libraries/node/src/internal/filter-sdk-group.ts
new file mode 100644
index 000000000..c45eb49b0
--- /dev/null
+++ b/libraries/node/src/internal/filter-sdk-group.ts
@@ -0,0 +1,13 @@
+export type FilterSdkGroup<TClient> = TClient extends { readonly sdk: unknown }
+  ? Omit<TClient, "sdk">
+  : TClient;
+
+export const filterSdkGroup = <TClient extends object>(
+  client: TClient
+): FilterSdkGroup<TClient> => {
+  const { sdk: _sdk, ...filteredClient } = client as TClient & {
+    readonly sdk?: unknown;
+  };
+
+  return filteredClient as FilterSdkGroup<TClient>;
+};
diff --git a/libraries/node/src/internal/json-compatible-api.ts b/libraries/node/src/internal/json-compatible-api.ts
new file mode 100644
index 000000000..837e9e28b
--- /dev/null
+++ b/libraries/node/src/internal/json-compatible-api.ts
@@ -0,0 +1,57 @@
+import { Schema } from "effect";
+import type { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+
+const cloneWithPrototype = <T extends object>(
+  value: T,
+  properties: Record<string, unknown>
+): T =>
+  Object.assign(Object.create(Object.getPrototypeOf(value)), value, properties) as T;
+
+const mapPayloadSchemas = (
+  payload: HttpApiEndpoint.AnyWithProps["payload"]
+): HttpApiEndpoint.AnyWithProps["payload"] =>
+  new Map(
+    Array.from(payload.entries(), ([contentType, value]) => [
+      contentType,
+      {
+        ...value,
+        schemas: value.schemas.map((schema) => Schema.toCodecJson(schema)) as typeof value.schemas,
+      },
+    ])
+  );
+
+const mapEndpoint = <TEndpoint extends HttpApiEndpoint.AnyWithProps>(
+  endpoint: TEndpoint
+): TEndpoint =>
+  cloneWithPrototype(endpoint, {
+    error: new Set(
+      Array.from(endpoint.error, (schema) => Schema.toCodecJson(schema))
+    ) as TEndpoint["error"],
+    headers: endpoint.headers ? Schema.toCodecJson(endpoint.headers) : undefined,
+    params: endpoint.params ? Schema.toCodecJson(endpoint.params) : undefined,
+    payload: mapPayloadSchemas(endpoint.payload) as TEndpoint["payload"],
+    query: endpoint.query ? Schema.toCodecJson(endpoint.query) : undefined,
+    success: new Set(
+      Array.from(endpoint.success, (schema) => Schema.toCodecJson(schema))
+    ) as TEndpoint["success"],
+  });
+
+const mapGroup = <TGroup extends HttpApiGroup.AnyWithProps>(group: TGroup): TGroup =>
+  cloneWithPrototype(group, {
+    endpoints: Object.fromEntries(
+      Object.entries(group.endpoints).map(([endpointName, endpoint]) => [
+        endpointName,
+        mapEndpoint(endpoint as HttpApiEndpoint.AnyWithProps),
+      ])
+    ) as TGroup["endpoints"],
+  });
+
+export const toJsonCompatibleApi = <TApi extends HttpApi.Any>(api: TApi): TApi =>
+  cloneWithPrototype(api, {
+    groups: Object.fromEntries(
+      Object.entries((api as TApi & { groups: Record<string, HttpApiGroup.AnyWithProps> }).groups).map(([groupName, group]) => [
+        groupName,
+        mapGroup(group as HttpApiGroup.AnyWithProps),
+      ])
+    ),
+  });
diff --git a/libraries/node/src/internal/make-generated-client.ts b/libraries/node/src/internal/make-generated-client.ts
new file mode 100644
index 000000000..55de4d4fd
--- /dev/null
+++ b/libraries/node/src/internal/make-generated-client.ts
@@ -0,0 +1,101 @@
+import { VoidhashV1Api } from "@voidhash/api-spec";
+import { Effect } from "effect";
+import {
+  FetchHttpClient,
+  HttpClient,
+  HttpClientRequest,
+} from "effect/unstable/http";
+import { HttpApiClient } from "effect/unstable/httpapi";
+
+import { VoidhashNodeConfigurationError } from "../errors";
+import type { VoidhashNodeClientOptions } from "../types";
+import type { GeneratedVoidhashNodeEffectClient } from "./client-types";
+import { toJsonCompatibleApi } from "./json-compatible-api";
+
+export const DEFAULT_BASE_URL = "https://api.voidhash.com";
+
+const SECRET_KEY_HEADER = "x-secret-key";
+
+const hasSecretKeyHeader = (
+  headers: Record<string, string | undefined> | undefined
+) =>
+  Object.keys(headers ?? {}).some(
+    (headerName) => headerName.toLowerCase() === SECRET_KEY_HEADER
+  );
+
+const normalizeHeaders = (
+  headers: Record<string, string | undefined> | undefined
+): Record<string, string> =>
+  Object.fromEntries(
+    Object.entries(headers ?? {}).filter(
+      (entry): entry is [string, string] => typeof entry[1] === "string"
+    )
+  );
+
+const resolveBaseUrl = (baseUrl: string | undefined) => {
+  try {
+    const resolved = new URL(baseUrl ?? DEFAULT_BASE_URL);
+
+    if (resolved.protocol !== "http:" && resolved.protocol !== "https:") {
+      throw new VoidhashNodeConfigurationError(
+        "baseUrl must use the http or https protocol."
+      );
+    }
+
+    return resolved.toString();
+  } catch (error) {
+    if (error instanceof VoidhashNodeConfigurationError) {
+      throw error;
+    }
+
+    throw new VoidhashNodeConfigurationError("baseUrl must be a valid URL.", {
+      cause: error,
+    });
+  }
+};
+
+const resolveOptions = (options: VoidhashNodeClientOptions) => {
+  if (!options.secretKey.trim()) {
+    throw new VoidhashNodeConfigurationError("secretKey is required.");
+  }
+
+  if (typeof globalThis.fetch !== "function") {
+    throw new VoidhashNodeConfigurationError(
+      "globalThis.fetch must be available."
+    );
+  }
+
+  if (hasSecretKeyHeader(options.headers)) {
+    throw new VoidhashNodeConfigurationError(
+      "headers.x-secret-key cannot be set explicitly."
+    );
+  }
+
+  return {
+    baseUrl: resolveBaseUrl(options.baseUrl),
+    headers: normalizeHeaders(options.headers),
+    secretKey: options.secretKey,
+  };
+};
+
+const JsonVoidhashV1Api = toJsonCompatibleApi(VoidhashV1Api);
+
+export const makeGeneratedClient = (
+  options: VoidhashNodeClientOptions
+): Effect.Effect<GeneratedVoidhashNodeEffectClient> => {
+  const resolvedOptions = resolveOptions(options);
+
+  return HttpApiClient.make(JsonVoidhashV1Api, {
+    baseUrl: resolvedOptions.baseUrl,
+    transformClient: (client) =>
+      client.pipe(
+        HttpClient.mapRequest((request) =>
+          HttpClientRequest.setHeader(
+            HttpClientRequest.setHeaders(request, resolvedOptions.headers),
+            SECRET_KEY_HEADER,
+            resolvedOptions.secretKey
+          )
+        )
+      ),
+  }).pipe(Effect.provide(FetchHttpClient.layer));
+};
diff --git a/libraries/node/src/internal/normalize-generated-client.ts b/libraries/node/src/internal/normalize-generated-client.ts
new file mode 100644
index 000000000..bdba221fa
--- /dev/null
+++ b/libraries/node/src/internal/normalize-generated-client.ts
@@ -0,0 +1,122 @@
+import { VoidhashV1Api } from "@voidhash/api-spec";
+import { Effect, Schema } from "effect";
+import { HttpApi, HttpApiEndpoint } from "effect/unstable/httpapi";
+
+import type { GeneratedVoidhashNodeEffectClient } from "./client-types";
+
+type RequestPartName = "headers" | "params" | "payload" | "query";
+
+type EndpointNormalizers = Partial<
+  Record<RequestPartName, (value: unknown) => Effect.Effect<unknown, Schema.SchemaError, unknown>>
+>;
+
+const endpointNormalizers = new Map<string, EndpointNormalizers>();
+
+const endpointKey = (group: string, endpoint: string) => `${group}.${endpoint}`;
+
+const getPayloadSchema = (endpoint: HttpApiEndpoint.AnyWithProps) => {
+  const schemas = Array.from(endpoint.payload.values()).flatMap((value) => value.schemas);
+
+  if (schemas.length === 0) {
+    return undefined;
+  }
+
+  return schemas.length === 1 ? schemas[0] : Schema.Union(schemas);
+};
+
+HttpApi.reflect(VoidhashV1Api, {
+  onGroup: () => {},
+  onEndpoint: ({ endpoint, group }) => {
+    const normalizers: EndpointNormalizers = {};
+
+    if (endpoint.params) {
+      normalizers.params = Schema.decodeUnknownEffect(endpoint.params);
+    }
+
+    if (endpoint.query) {
+      normalizers.query = Schema.decodeUnknownEffect(endpoint.query);
+    }
+
+    if (endpoint.headers) {
+      normalizers.headers = Schema.decodeUnknownEffect(endpoint.headers);
+    }
+
+    const payloadSchema = getPayloadSchema(endpoint);
+    if (payloadSchema) {
+      normalizers.payload = Schema.decodeUnknownEffect(payloadSchema);
+    }
+
+    endpointNormalizers.set(endpointKey(group.identifier, endpoint.name), normalizers);
+  },
+});
+
+const normalizeRequest = (
+  normalizers: EndpointNormalizers,
+  request: Record<string, unknown> | undefined
+) =>
+  Effect.gen(function*() {
+    if (request === undefined) {
+      return undefined;
+    }
+
+    const normalized = {
+      ...request,
+    };
+
+    if (normalizers.params && "params" in request) {
+      normalized.params = yield* normalizers.params(request.params);
+    }
+
+    if (normalizers.query && "query" in request) {
+      normalized.query = yield* normalizers.query(request.query);
+    }
+
+    if (normalizers.headers && "headers" in request) {
+      normalized.headers = yield* normalizers.headers(request.headers);
+    }
+
+    if (normalizers.payload && "payload" in request) {
+      normalized.payload = yield* normalizers.payload(request.payload);
+    }
+
+    return normalized;
+  });
+
+export const normalizeGeneratedClient = (
+  client: GeneratedVoidhashNodeEffectClient
+): GeneratedVoidhashNodeEffectClient =>
+  Object.fromEntries(
+    Object.entries(client).map(([groupName, groupValue]) => {
+      if (!groupValue || typeof groupValue !== "object") {
+        return [groupName, groupValue];
+      }
+
+      const normalizedGroup = Object.fromEntries(
+        Object.entries(groupValue).map(([endpointName, endpoint]) => {
+          if (typeof endpoint !== "function") {
+            return [endpointName, endpoint];
+          }
+
+          const normalizers = endpointNormalizers.get(endpointKey(groupName, endpointName));
+
+          if (!normalizers) {
+            return [endpointName, endpoint];
+          }
+
+          return [
+            endpointName,
+            (request?: Record<string, unknown>) =>
+              Effect.flatMap(normalizeRequest(normalizers, request), (normalized) =>
+                Reflect.apply(
+                  endpoint as (request?: unknown) => Effect.Effect<unknown>,
+                  groupValue,
+                  [normalized]
+                )
+              ),
+          ];
+        })
+      );
+
+      return [groupName, normalizedGroup];
+    })
+  ) as GeneratedVoidhashNodeEffectClient;
diff --git a/libraries/node/src/promise-client.ts b/libraries/node/src/promise-client.ts
new file mode 100644
index 000000000..612f06186
--- /dev/null
+++ b/libraries/node/src/promise-client.ts
@@ -0,0 +1,58 @@
+import { Effect } from "effect";
+
+import {
+  createVoidhashNodeEffectClient,
+  type VoidhashNodeEffectClient,
+} from "./effect-client";
+import type { PublicVoidhashNodeClient } from "./internal/client-types";
+import type { FilterSdkGroup } from "./internal/filter-sdk-group";
+import type { VoidhashNodeClientOptions } from "./types";
+
+type RuntimePromisifyClient<TClient> = {
+  readonly [Key in keyof TClient]: TClient[Key] extends (
+    ...args: infer Args
+  ) => Effect.Effect<infer Result, infer _Error, infer _Requirements>
+    ? (...args: Args) => Promise<Result>
+    : TClient[Key] extends object
+      ? RuntimePromisifyClient<TClient[Key]>
+      : TClient[Key];
+};
+
+const promisifyClient = <TClient extends object>(
+  client: TClient
+): RuntimePromisifyClient<TClient> => {
+  const entries = Object.entries(client).map(([key, value]) => {
+    if (typeof value === "function") {
+      return [
+        key,
+        (...args: Array<unknown>) =>
+          Effect.runPromise(
+            Reflect.apply(
+              value as (...parameters: Array<unknown>) => Effect.Effect<unknown>,
+              client,
+              args
+            )
+          ),
+      ];
+    }
+
+    if (value && typeof value === "object") {
+      return [key, promisifyClient(value)];
+    }
+
+    return [key, value];
+  });
+
+  return Object.fromEntries(entries) as RuntimePromisifyClient<TClient>;
+};
+
+export type VoidhashNodeClient = FilterSdkGroup<PublicVoidhashNodeClient>;
+
+export const createVoidhashNodeClient = (
+  options: VoidhashNodeClientOptions
+): VoidhashNodeClient =>
+  promisifyClient(
+    createVoidhashNodeEffectClient(options)
+  ) as unknown as VoidhashNodeClient;
+
+export type { VoidhashNodeEffectClient };
diff --git a/libraries/node/src/types.ts b/libraries/node/src/types.ts
new file mode 100644
index 000000000..191017910
--- /dev/null
+++ b/libraries/node/src/types.ts
@@ -0,0 +1,5 @@
+export type VoidhashNodeClientOptions = {
+  secretKey: string;
+  baseUrl?: string;
+  headers?: Record<string, string | undefined>;
+};
diff --git a/libraries/node/tests/client.test.ts b/libraries/node/tests/client.test.ts
new file mode 100644
index 000000000..713b13f8f
--- /dev/null
+++ b/libraries/node/tests/client.test.ts
@@ -0,0 +1,352 @@
+import { ActionForbiddenError } from "@voidhash/api-spec/errors";
+import { Cause, Effect, Exit, Option } from "effect";
+import {
+  afterEach,
+  describe,
+  expect,
+  expectTypeOf,
+  it,
+  vi,
+} from "vitest";
+
+import {
+  VoidhashNodeConfigurationError,
+  createVoidhashNodeClient,
+  createVoidhashNodeEffectClient,
+  type VoidhashNodeClient,
+  type VoidhashNodeEffectClient,
+} from "../src/index";
+import { createJsonResponse, installFetchMock } from "./helpers";
+
+const EXPECTED_GROUPS = [
+  "api_keys",
+  "auth",
+  "changesets",
+  "customers",
+  "organizations",
+  "payment_provider_configurations",
+  "payment_provider_products",
+  "paywall_locations",
+  "perks",
+  "product_perks",
+  "products",
+  "projects",
+  "users",
+  "webhooks",
+] as const;
+
+type HasKey<TValue, TKey extends PropertyKey> = TKey extends keyof TValue
+  ? true
+  : false;
+
+const extractEffectFailure = async <Result, Error>(
+  effect: Effect.Effect<Result, Error>
+) => {
+  const exit = await Effect.runPromiseExit(effect);
+
+  if (Exit.isSuccess(exit)) {
+    throw new Error("Expected effect failure.");
+  }
+
+  const typedError = Cause.findErrorOption(exit.cause);
+
+  return Option.isSome(typedError)
+    ? typedError.value
+    : Cause.squash(exit.cause);
+};
+
+describe("@voidhash/node", () => {
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it("exposes the exact non-sdk namespaces and omits sdk in types", () => {
+    const effectClient = createVoidhashNodeEffectClient({
+      secretKey: "vh_sk_test",
+    });
+    const promiseClient = createVoidhashNodeClient({
+      secretKey: "vh_sk_test",
+    });
+
+    expect(Object.keys(effectClient).sort()).toEqual([...EXPECTED_GROUPS].sort());
+    expect(Object.keys(promiseClient).sort()).toEqual([...EXPECTED_GROUPS].sort());
+    expect("sdk" in effectClient).toBe(false);
+    expect("sdk" in promiseClient).toBe(false);
+
+    expectTypeOf<HasKey<VoidhashNodeEffectClient, "sdk">>().toEqualTypeOf<false>();
+    expectTypeOf<HasKey<VoidhashNodeClient, "sdk">>().toEqualTypeOf<false>();
+    expectTypeOf<HasKey<VoidhashNodeEffectClient, "auth">>().toEqualTypeOf<true>();
+    expectTypeOf<HasKey<VoidhashNodeEffectClient, "webhooks">>().toEqualTypeOf<true>();
+    expectTypeOf<HasKey<VoidhashNodeClient, "auth">>().toEqualTypeOf<true>();
+    expectTypeOf<HasKey<VoidhashNodeClient, "webhooks">>().toEqualTypeOf<true>();
+  });
+
+  it("fails immediately for invalid configuration", () => {
+    expect(() =>
+      createVoidhashNodeEffectClient({
+        secretKey: "   ",
+      })
+    ).toThrow(VoidhashNodeConfigurationError);
+
+    expect(() =>
+      createVoidhashNodeEffectClient({
+        baseUrl: "not a url",
+        secretKey: "vh_sk_test",
+      })
+    ).toThrow(VoidhashNodeConfigurationError);
+
+    expect(() =>
+      createVoidhashNodeEffectClient({
+        headers: {
+          "x-secret-key": "attempted_override",
+        },
+        secretKey: "vh_sk_test",
+      })
+    ).toThrow(VoidhashNodeConfigurationError);
+
+    vi.stubGlobal("fetch", undefined);
+
+    expect(() =>
+      createVoidhashNodeClient({
+        secretKey: "vh_sk_test",
+      })
+    ).toThrow(VoidhashNodeConfigurationError);
+  });
+
+  it("uses the default baseUrl and sends x-secret-key on auth.session()", async () => {
+    const { calls } = installFetchMock(() =>
+      createJsonResponse({
+        method: "secret-key",
+        name: "voidhash",
+        organizations: [],
+        projects: [],
+      })
+    );
+
+    const client = createVoidhashNodeEffectClient({
+      headers: {
+        "x-trace-id": "trace_123",
+      },
+      secretKey: "vh_sk_test",
+    });
+
+    const session = await Effect.runPromise(client.auth.session());
+
+    expect(session).toEqual({
+      method: "secret-key",
+      name: "voidhash",
+      organizations: [],
+      projects: [],
+    });
+    expect(calls[0]?.method).toBe("GET");
+    expect(calls[0]?.url).toBe("https://api.voidhash.com/api/v1/auth/session");
+    expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
+    expect(calls[0]?.headers["x-trace-id"]).toBe("trace_123");
+  });
+
+  it("supports path params with projects.listProjects({ params })", async () => {
+    const { calls } = installFetchMock(() =>
+      createJsonResponse([
+        {
+          id: "proj_1",
+          name: "Alpha",
+          slug: "alpha",
+        },
+      ])
+    );
+
+    const client = createVoidhashNodeClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+
+    const projects = await client.projects.listProjects({
+      params: {
+        organizationId: "org_123",
+      },
+    });
+
+    expect(projects).toEqual([
+      {
+        id: "proj_1",
+        name: "Alpha",
+        slug: "alpha",
+      },
+    ]);
+    expect(calls[0]?.method).toBe("GET");
+    expect(calls[0]?.url).toBe(
+      "https://api.voidhash.test/api/v1/projects/org_123"
+    );
+    expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
+  });
+
+  it("supports POST bodies with customers.createCustomer({ payload })", async () => {
+    const { calls } = installFetchMock(() =>
+      createJsonResponse({
+        appUserId: "user_123",
+        email: "user@example.com",
+        id: "customer_123",
+        name: "Taylor",
+      })
+    );
+
+    const client = createVoidhashNodeClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+
+    const customer = await client.customers.createCustomer({
+      payload: {
+        appUserId: "user_123",
+        email: "user@example.com",
+        name: "Taylor",
+      },
+    });
+
+    expect(customer).toEqual({
+      appUserId: "user_123",
+      email: "user@example.com",
+      id: "customer_123",
+      name: "Taylor",
+    });
+    expect(calls[0]?.method).toBe("POST");
+    expect(calls[0]?.url).toBe("https://api.voidhash.test/api/v1/customers");
+    expect(JSON.parse(calls[0]?.body ?? "{}")).toEqual({
+      appUserId: "user_123",
+      email: "user@example.com",
+      name: "Taylor",
+    });
+    expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
+  });
+
+  it("supports PATCH bodies with webhooks.updateWebhookEndpoint({ params, payload })", async () => {
+    const { calls } = installFetchMock(() =>
+      createJsonResponse({
+        consecutiveFailures: 0,
+        createdAt: "2026-03-09T12:00:00.000Z",
+        description: "Updated description",
+        events: ["purchase.completed"],
+        id: "wh_123",
+        lastSuccessAt: null,
+        name: "Updated endpoint",
+        projectId: "proj_123",
+        secret: "secret_123",
+        status: "active",
+        url: "https://example.com/hooks",
+      })
+    );
+
+    const client = createVoidhashNodeClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+
+    const endpoint = await client.webhooks.updateWebhookEndpoint({
+      params: {
+        endpointId: "wh_123",
+      },
+      payload: {
+        description: "Updated description",
+        events: ["purchase.completed"],
+        name: "Updated endpoint",
+        status: "active",
+        url: "https://example.com/hooks",
+      },
+    });
+
+    expect(endpoint.id).toBe("wh_123");
+    expect(endpoint.createdAt).toEqual(new Date("2026-03-09T12:00:00.000Z"));
+    expect(calls[0]?.method).toBe("PATCH");
+    expect(calls[0]?.url).toBe(
+      "https://api.voidhash.test/api/v1/webhooks/endpoints/wh_123"
+    );
+    expect(JSON.parse(calls[0]?.body ?? "{}")).toEqual({
+      description: "Updated description",
+      events: ["purchase.completed"],
+      name: "Updated endpoint",
+      status: "active",
+      url: "https://example.com/hooks",
+    });
+    expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
+  });
+
+  it("supports DELETE requests with api_keys.deleteApiKey({ params })", async () => {
+    const { calls } = installFetchMock(() => new Response(null, { status: 204 }));
+
+    const client = createVoidhashNodeClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+
+    const result = await client.api_keys.deleteApiKey({
+      params: {
+        apiKeyId: "ak_123",
+      },
+    });
+
+    expect(result).toBeUndefined();
+    expect(calls[0]?.method).toBe("DELETE");
+    expect(calls[0]?.url).toBe(
+      "https://api.voidhash.test/api/v1/api-keys/ak_123"
+    );
+    expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
+  });
+
+  it("surfaces matching success values through effect and promise factories", async () => {
+    installFetchMock(() =>
+      createJsonResponse({
+        method: "secret-key",
+        name: "voidhash",
+        organizations: [],
+        projects: [],
+      })
+    );
+
+    const effectClient = createVoidhashNodeEffectClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+    const promiseClient = createVoidhashNodeClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+
+    const effectResult = await Effect.runPromise(effectClient.auth.session());
+    const promiseResult = await promiseClient.auth.session();
+
+    expect(promiseResult).toEqual(effectResult);
+  });
+
+  it("surfaces matching failure objects through effect and promise factories", async () => {
+    installFetchMock(() =>
+      createJsonResponse(
+        new ActionForbiddenError({
+          message: "Forbidden",
+        }),
+        403
+      )
+    );
+
+    const effectClient = createVoidhashNodeEffectClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+    const promiseClient = createVoidhashNodeClient({
+      baseUrl: "https://api.voidhash.test",
+      secretKey: "vh_sk_test",
+    });
+
+    const effectError = await extractEffectFailure(effectClient.auth.session());
+    const promiseError = await promiseClient.auth
+      .session()
+      .then(
+        () => {
+          throw new Error("Expected promise client failure.");
+        },
+        (error: unknown) => error
+      );
+
+    expect(promiseError).toStrictEqual(effectError);
+    expect(promiseError).toBeInstanceOf(ActionForbiddenError);
+  });
+});
diff --git a/libraries/node/tests/helpers.ts b/libraries/node/tests/helpers.ts
new file mode 100644
index 000000000..138d1671f
--- /dev/null
+++ b/libraries/node/tests/helpers.ts
@@ -0,0 +1,58 @@
+import { vi } from "vitest";
+
+export interface FetchCall {
+  readonly body?: string;
+  readonly headers: Record<string, string>;
+  readonly method: string;
+  readonly url: string;
+}
+
+export const createJsonResponse = (body: unknown, status = 200) =>
+  new Response(JSON.stringify(body), {
+    headers: {
+      "content-type": "application/json",
+    },
+    status,
+  });
+
+let currentCalls: FetchCall[] = [];
+let currentHandler: (call: FetchCall) => Promise<Response> | Response = () =>
+  new Response(null, { status: 500 });
+
+const fetchMock = vi.fn(async (input: URL | RequestInfo, init?: RequestInit) => {
+  const request = input instanceof Request ? input : undefined;
+  const headers = new Headers(request?.headers ?? init?.headers);
+  const bodySource = init?.body;
+  const requestBody =
+    typeof bodySource === "string"
+      ? bodySource
+      : bodySource instanceof Uint8Array
+        ? new TextDecoder().decode(bodySource)
+        : request
+          ? await request.clone().text()
+          : undefined;
+  const call: FetchCall = {
+    body: requestBody === "" ? undefined : requestBody,
+    headers: Object.fromEntries(headers.entries()),
+    method: init?.method ?? request?.method ?? "GET",
+    url: request?.url ?? input.toString(),
+  };
+
+  currentCalls.push(call);
+  return currentHandler(call);
+});
+
+export const installFetchMock = (
+  handler: (call: FetchCall) => Promise<Response> | Response
+) => {
+  currentCalls = [];
+  currentHandler = handler;
+  fetchMock.mockClear();
+
+  vi.stubGlobal("fetch", fetchMock);
+
+  return {
+    calls: currentCalls,
+    fetchMock,
+  };
+};
diff --git a/libraries/node/tsconfig.json b/libraries/node/tsconfig.json
new file mode 100644
index 000000000..d6b542bcd
--- /dev/null
+++ b/libraries/node/tsconfig.json
@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "../../packages/tsconfig/base.json",
+  "compilerOptions": {
+    "lib": ["ES2022", "DOM"],
+    "module": "ESNext",
+    "target": "ES2022",
+    "noEmit": true,
+    "rootDir": "."
+  },
+  "include": ["src", "tests", "build.ts", "vitest.unit.mts"]
+}
diff --git a/libraries/node/vitest.unit.mts b/libraries/node/vitest.unit.mts
new file mode 100644
index 000000000..a828dc593
--- /dev/null
+++ b/libraries/node/vitest.unit.mts
@@ -0,0 +1,12 @@
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  plugins: [tsconfigPaths()],
+  test: {
+    environment: "node",
+    exclude: ["./node_modules/**", "./dist/**"],
+    include: ["./tests/**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 874a5f5d0..9f9656ef2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -224,6 +224,37 @@ importers:
         specifier: workspace:*
         version: link:../../apps/cli
 
+  libraries/node:
+    dependencies:
+      '@voidhash/api-spec':
+        specifier: workspace:*
+        version: link:../../packages/api-spec
+    devDependencies:
+      '@effect/platform':
+        specifier: 'catalog:'
+        version: 0.94.5(effect@4.0.0-beta.23)
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      effect:
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23
+      tsup:
+        specifier: ^6.1.3
+        version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
+      typescript:
+        specifier: 5.6.3
+        version: 5.6.3
+      vite-tsconfig-paths:
+        specifier: 'catalog:'
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vitest:
+        specifier: ^3.2.4
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+
   libraries/react-native:
     dependencies:
       '@react-native-async-storage/async-storage':

From a8483882d72b4d3aab0615d6f6eaaf0b3ff3c0a8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 24 Mar 2026 11:52:15 +0100
Subject: [PATCH 006/129] feat: server sdk (#77)

* feat: serveer sdk wip

* chore: improve

* wip

* wip

* feat: publishing
---
 .../publish-api-spec-canary-preview.yml       |  55 --
 .../publish-libraries-canary-preview.yml      | 119 +++++
 docs/JS-SDK.md                                |  16 +-
 docs/customer-identifier-refactor.md          | 222 ++++++++
 examples/react-native-example/app/index.tsx   |   4 +-
 libraries/node/build.ts                       |   1 +
 libraries/node/package.json                   |  32 ++
 libraries/node/src/effect-client.ts           |   2 +-
 libraries/node/src/effect.ts                  |   6 +
 libraries/node/src/index.ts                   |   6 +-
 libraries/node/src/promise-client.ts          |   6 +-
 libraries/node/tests/client.test.ts           |  50 +-
 libraries/react-native/README.md              |   2 +-
 libraries/react-native/package.json           |  22 +-
 .../src/__tests__/core/client-effect.test.ts  | 169 ++++--
 .../core/customer-info-manager.test.ts        |   6 +-
 .../__tests__/core/identity-manager.test.ts   |  58 +--
 .../__tests__/helpers/effect-test-harness.ts  |  14 +-
 libraries/react-native/src/client-effect.ts   | 488 +++++++++++-------
 .../react-native/src/client-react-native.ts   |   4 +-
 libraries/react-native/src/client.tsx         |  39 +-
 libraries/react-native/src/constants.ts       |   2 +-
 .../src/core/analytics/constants.ts           |   0
 .../src/core/analytics/service.ts             |  13 +
 .../react-native/src/core/analytics/types.ts  |  43 ++
 .../react-native/src/core/analytics/utils.ts  |  77 +++
 .../identity/customer-attribute-manager.ts    |  20 +-
 .../core/identity/customer-info-manager.ts    |  32 +-
 .../src/core/identity/identity-manager.ts     |  71 ++-
 .../react-native/src/core/testing/client.ts   |   6 +-
 libraries/react-native/src/core/types.ts      |   2 +-
 .../react-native/src/core/utils/crypto.ts     |   7 +
 .../src/core/utils/get-common-sdk-headers.ts  |   2 +-
 libraries/web/package.json                    |  31 +-
 libraries/web/src/client-effect.ts            | 359 +++++--------
 libraries/web/src/client.ts                   | 308 ++++++++---
 .../src/core/analytics/analytics-context.ts   |  60 ++-
 .../core/analytics/analytics-dispatcher.ts    | 186 -------
 .../web/src/core/analytics/analytics-queue.ts | 112 ----
 .../src/core/analytics/analytics-service.ts   | 398 ++++++++++++++
 libraries/web/src/core/analytics/contracts.ts |  21 +-
 .../caching/adapters/browser-cache-adapter.ts | 104 ++++
 .../caching/adapters/local-storage-cache.ts   |  63 ---
 .../src/core/caching/adapters/memory-cache.ts |  21 -
 .../web/src/core/caching/cache-adapter.ts     |  11 +
 .../web/src/core/caching/cache-manager.ts     | 282 +++++-----
 libraries/web/src/core/constants.ts           |   1 +
 libraries/web/src/core/event-bus.ts           |   8 +
 .../feature-flags/feature-flag-service.ts     | 202 +++++---
 .../web/src/core/http/analytics-client.ts     |  70 ---
 libraries/web/src/core/http/sdk-api-client.ts | 126 -----
 .../web/src/core/identity/identity-manager.ts | 191 ++++---
 .../web/src/core/networking/api-client.ts     |  21 +
 .../networking/event-capture-api-client.ts    |  22 +
 .../core/networking/json-compatible-api.ts    |  57 ++
 .../networking/normalize-generated-client.ts  | 121 +++++
 .../platform/browser-platform-provider.ts     |   2 +-
 .../src/core/platform/platform-provider.ts    |  13 +
 libraries/web/src/core/sdk-configuration.ts   |   8 +
 .../web/src/react/hooks/use-feature-flags.ts  |   4 +-
 libraries/web/src/react/provider.tsx          |  18 +-
 libraries/web/src/types.ts                    |  11 +-
 libraries/web/tests/analytics.test.ts         | 114 +++-
 libraries/web/tests/client.test.ts            |  55 +-
 libraries/web/tests/helpers.ts                |  43 +-
 libraries/web/tests/react.test.tsx            |   6 +-
 packages/api-spec/package.json                |   1 +
 packages/api-spec/src/api.ts                  |   4 +-
 packages/api-spec/src/auth.ts                 |   2 +-
 packages/api-spec/src/errors/customer.ts      |   4 +-
 packages/api-spec/src/errors/perk.ts          |   2 +-
 packages/api-spec/src/errors/product.ts       |   2 +-
 packages/api-spec/src/errors/project.ts       |   2 +-
 packages/api-spec/src/errors/sdk.ts           |   6 +-
 packages/api-spec/src/event-capture.ts        | 184 +++++++
 packages/api-spec/src/schema.ts               |  14 +-
 packages/shared/src/auth.ts                   |   4 +-
 77 files changed, 3120 insertions(+), 1750 deletions(-)
 delete mode 100644 .github/workflows/publish-api-spec-canary-preview.yml
 create mode 100644 .github/workflows/publish-libraries-canary-preview.yml
 create mode 100644 docs/customer-identifier-refactor.md
 create mode 100644 libraries/node/src/effect.ts
 create mode 100644 libraries/react-native/src/core/analytics/constants.ts
 create mode 100644 libraries/react-native/src/core/analytics/service.ts
 create mode 100644 libraries/react-native/src/core/analytics/types.ts
 create mode 100644 libraries/react-native/src/core/analytics/utils.ts
 create mode 100644 libraries/react-native/src/core/utils/crypto.ts
 delete mode 100644 libraries/web/src/core/analytics/analytics-dispatcher.ts
 delete mode 100644 libraries/web/src/core/analytics/analytics-queue.ts
 create mode 100644 libraries/web/src/core/analytics/analytics-service.ts
 create mode 100644 libraries/web/src/core/caching/adapters/browser-cache-adapter.ts
 delete mode 100644 libraries/web/src/core/caching/adapters/local-storage-cache.ts
 delete mode 100644 libraries/web/src/core/caching/adapters/memory-cache.ts
 create mode 100644 libraries/web/src/core/caching/cache-adapter.ts
 create mode 100644 libraries/web/src/core/constants.ts
 delete mode 100644 libraries/web/src/core/http/analytics-client.ts
 delete mode 100644 libraries/web/src/core/http/sdk-api-client.ts
 create mode 100644 libraries/web/src/core/networking/api-client.ts
 create mode 100644 libraries/web/src/core/networking/event-capture-api-client.ts
 create mode 100644 libraries/web/src/core/networking/json-compatible-api.ts
 create mode 100644 libraries/web/src/core/networking/normalize-generated-client.ts
 create mode 100644 libraries/web/src/core/platform/platform-provider.ts
 create mode 100644 libraries/web/src/core/sdk-configuration.ts
 create mode 100644 packages/api-spec/src/event-capture.ts

diff --git a/.github/workflows/publish-api-spec-canary-preview.yml b/.github/workflows/publish-api-spec-canary-preview.yml
deleted file mode 100644
index 00782bfeb..000000000
--- a/.github/workflows/publish-api-spec-canary-preview.yml
+++ /dev/null
@@ -1,55 +0,0 @@
-name: Publish API Spec Canary (Preview)
-
-on:
-  push:
-    branches:
-      - preview
-    paths:
-      - packages/api-spec/**
-      - pnpm-lock.yaml
-      - pnpm-workspace.yaml
-      - package.json
-      - .github/workflows/publish-api-spec-canary-preview.yml
-
-permissions:
-  contents: read
-
-concurrency: api-spec-canary-preview-${{ github.ref }}
-
-jobs:
-  publish-canary:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          registry-url: https://registry.npmjs.org
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 10.19.0
-          run_install: false
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Typecheck api-spec
-        run: pnpm --filter @voidhash/api-spec typecheck
-
-      - name: Publish canary from preview
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: |
-          set -euo pipefail
-          short_sha="${GITHUB_SHA::7}"
-          canary_version="$(SHORT_SHA="$short_sha" node -e 'const fs=require("node:fs"); const p="./packages/api-spec/package.json"; const pkg=JSON.parse(fs.readFileSync(p,"utf8")); const run=process.env.GITHUB_RUN_NUMBER; const attempt=process.env.GITHUB_RUN_ATTEMPT; const sha=process.env.SHORT_SHA; pkg.version=`${pkg.version}-canary.${run}.${attempt}.${sha}`; fs.writeFileSync(p, JSON.stringify(pkg,null,2)+"\n"); process.stdout.write(pkg.version);')"
-          echo "Publishing @voidhash/api-spec@${canary_version}"
-          cd packages/api-spec
-          npm publish --tag canary --access public
diff --git a/.github/workflows/publish-libraries-canary-preview.yml b/.github/workflows/publish-libraries-canary-preview.yml
new file mode 100644
index 000000000..da29ee67e
--- /dev/null
+++ b/.github/workflows/publish-libraries-canary-preview.yml
@@ -0,0 +1,119 @@
+name: Publish SDK Canaries (Preview)
+
+on:
+  push:
+    branches:
+      - preview
+    paths:
+      - libraries/**
+      - packages/api-spec/**
+      - packages/shared/**
+      - packages/tsconfig/**
+      - package.json
+      - pnpm-lock.yaml
+      - pnpm-workspace.yaml
+      - turbo.json
+      - .github/workflows/publish-libraries-canary-preview.yml
+
+permissions:
+  contents: read
+
+concurrency: library-canaries-preview-${{ github.ref }}
+
+jobs:
+  publish-canary:
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.19.0
+          run_install: false
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Prepare coordinated canary versions
+        run: |
+          set -euo pipefail
+          short_sha="${GITHUB_SHA::7}"
+          SHORT_SHA="$short_sha" node <<'EOF'
+          const fs = require("node:fs");
+
+          const canarySuffix = `canary.${process.env.GITHUB_RUN_NUMBER}.${process.env.GITHUB_RUN_ATTEMPT}.${process.env.SHORT_SHA}`;
+          const packages = [
+            { path: "./packages/api-spec/package.json", indent: 2 },
+            { path: "./libraries/node/package.json", indent: 2, apiSpecField: "dependencies" },
+            { path: "./libraries/web/package.json", indent: 2, apiSpecField: "dependencies" },
+            { path: "./libraries/react-native/package.json", indent: "\t", apiSpecField: "devDependencies" },
+          ];
+
+          const apiSpecPath = "./packages/api-spec/package.json";
+          const apiSpec = JSON.parse(fs.readFileSync(apiSpecPath, "utf8"));
+          const canaryVersion = `${apiSpec.version}-${canarySuffix}`;
+          apiSpec.version = canaryVersion;
+          fs.writeFileSync(apiSpecPath, JSON.stringify(apiSpec, null, 2) + "\n");
+
+          for (const pkg of packages.slice(1)) {
+            const manifest = JSON.parse(fs.readFileSync(pkg.path, "utf8"));
+            manifest.version = canaryVersion;
+            if (pkg.apiSpecField) {
+              manifest[pkg.apiSpecField]["@voidhash/api-spec"] = canaryVersion;
+            }
+            fs.writeFileSync(pkg.path, JSON.stringify(manifest, null, pkg.indent) + "\n");
+          }
+
+          process.stdout.write(canaryVersion);
+          EOF
+
+      - name: Typecheck api-spec
+        run: pnpm --filter @voidhash/api-spec typecheck
+
+      - name: Typecheck node
+        run: pnpm --filter @voidhash/node typecheck
+
+      - name: Typecheck web
+        run: pnpm --filter @voidhash/web typecheck
+
+      - name: Typecheck react-native
+        run: pnpm --filter @voidhash/react-native typecheck
+
+      - name: Build node
+        run: pnpm --filter @voidhash/node build
+
+      - name: Build web
+        run: pnpm --filter @voidhash/web build
+
+      - name: Build react-native
+        run: pnpm --filter @voidhash/react-native build
+
+      - name: Publish api-spec canary
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: pnpm --filter @voidhash/api-spec publish --tag canary --access public --no-git-checks
+
+      - name: Publish node canary
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: pnpm --filter @voidhash/node publish --tag canary --access public --no-git-checks
+
+      - name: Publish web canary
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: pnpm --filter @voidhash/web publish --tag canary --access public --no-git-checks
+
+      - name: Publish react-native canary
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: pnpm --filter @voidhash/react-native publish --tag canary --access public --no-git-checks
diff --git a/docs/JS-SDK.md b/docs/JS-SDK.md
index 45ff444e4..8afedcfae 100644
--- a/docs/JS-SDK.md
+++ b/docs/JS-SDK.md
@@ -158,8 +158,8 @@ const enabled = voidhash.isFeatureEnabled("new-checkout");
 ### Core Client Methods
 
 - `initialize()`
-- `identify(appUserId, attributes?)`
-- `resetIdentity()`
+- `identify(externalUserId, attributes?)`
+- `reset()`
 - `getFeatureFlags(keys?)`
 - `refreshFeatureFlags(keys?)`
 - `isFeatureEnabled(key)`
@@ -194,7 +194,7 @@ Initialization should follow the same disciplined flow as the React Native SDK:
 1. Validate configuration.
 2. Create the browser platform provider.
 3. Resolve cache adapters.
-4. Resolve or create an anonymous `appUserId`.
+4. Resolve or create an anonymous `distinctId`.
 5. Build common headers and auth headers.
 6. Create the internal runtime services.
 7. Mark the client as initialized.
@@ -211,18 +211,18 @@ Important constraints:
 
 The web SDK should preserve the same identity concepts as React Native:
 
-- anonymous users get an SDK-managed generated `appUserId`
+- anonymous users get an SDK-managed generated `distinctId`
 - identified users can replace the anonymous user via `identify`
 - user attributes should be synchronized in a predictable order
 - resetting identity should rotate back to a new anonymous user
 
 ### Identity Requirements
 
-- Persist the current `appUserId` in browser storage.
+- Persist the current `distinctId` in browser storage.
 - Keep an in-memory copy for fast request construction.
 - Treat identity changes as cache boundaries.
 - Clear or segregate user-scoped caches when the identity changes.
-- Re-fetch feature flags after `identify` and `resetIdentity`.
+- Re-fetch feature flags after `identify` and `reset`.
 - Emit an identity-changed event so React hooks and host apps can respond.
 
 ## Feature Flags Plan
@@ -308,7 +308,7 @@ type AnalyticsEvent = {
   event: string;
   properties?: Record<string, unknown>;
   timestamp: string;
-  appUserId: string;
+  distinctId: string;
   anonymousId?: string;
   context: {
     url?: string;
@@ -389,7 +389,7 @@ Use a layered cache model:
 ### Cache Rules
 
 - Keep the 5-minute feature flag TTL from React Native by default.
-- Namespace cache keys by environment and `appUserId`.
+- Namespace cache keys by environment and `distinctId`.
 - Keep cache clearing explicit and testable.
 - Bound the analytics queue so storage growth is controlled.
 
diff --git a/docs/customer-identifier-refactor.md b/docs/customer-identifier-refactor.md
new file mode 100644
index 000000000..7fe74b365
--- /dev/null
+++ b/docs/customer-identifier-refactor.md
@@ -0,0 +1,222 @@
+# Customer Identifier Refactor
+
+Status: Draft
+Owner: SDK + platform
+
+## Summary
+
+This document defines the clean-slate identity model for `voidhash`.
+
+The goal is to remove the current overlap between:
+
+- `appUserId`
+- `distinctId`
+- anonymous user identifiers
+
+and replace it with one clear public identity model for SDKs and shared contracts.
+
+## Design Goal
+
+The public/open-source SDK and shared types should model exactly two concepts:
+
+1. `distinctId`
+2. `customerId`
+
+`distinctId` is public and event-facing.
+
+`customerId` is internal and server-issued.
+
+Everything else is metadata or compatibility glue and should not be part of the long-term design.
+
+## Canonical Terms
+
+### `distinctId`
+
+`distinctId` is the current identity attached to SDK traffic and analytics events.
+
+It can represent:
+
+- an anonymous SDK-generated identity
+- an identified app-provided identity
+
+It is the only identifier that SDKs should persist locally.
+
+### `customerId`
+
+`customerId` is the canonical internal person/customer record id.
+
+It is:
+
+- generated by the backend
+- stable across merges and identity resolution
+- not supplied by the integrating app
+
+### `externalUserId`
+
+`externalUserId` is an optional naming convenience at the SDK method boundary only.
+
+Example:
+
+- `identify(externalUserId: string)`
+
+Internally, the SDK should immediately treat that value as the new `distinctId`.
+
+`externalUserId` should not become a separate persisted or transport-level identity field.
+
+## Explicit Non-Goals
+
+The following should not exist as first-class identity concepts in the target model:
+
+- `appUserId`
+- `anonymousId`
+- `identifiedDistinctId`
+- `analyticsIdentityId`
+
+These names may exist temporarily during migration, but they should not remain in the long-term public design.
+
+## Public SDK Model
+
+## Initialization
+
+Target initialization API:
+
+```ts
+createVoidhashClient({
+  publishableKey: "...",
+  baseUrl: "...",
+  distinctId?: string,
+})
+```
+
+Rules:
+
+- if `distinctId` is provided, use it as the current identity
+- otherwise generate a new anonymous `distinctId`
+- the SDK persists exactly one current `distinctId`
+
+## Identity API
+
+Target public API:
+
+```ts
+await client.identify("user_123", {
+  email: "user@example.com",
+  name: "User",
+})
+
+await client.reset()
+
+const distinctId = await client.getDistinctId()
+```
+
+Recommended method names:
+
+- `identify(externalUserId, traits?)`
+- `reset()`
+- `getDistinctId()`
+
+Avoid:
+
+- `identify(appUserId, ...)`
+- `signOut()` as the primary identity primitive
+
+`signOut()` may still exist as a product convenience, but identity rotation should be modeled as `reset()`.
+
+## Anonymous Identity
+
+Anonymous users are not a separate identifier type.
+
+They are just `distinctId` values generated by the SDK, for example:
+
+```txt
+anon_<random>
+```
+
+The current `vh:anon:` prefix is acceptable if kept consistent, but the important rule is conceptual:
+
+- anonymous identity is still just `distinctId`
+
+## Identify Semantics
+
+Calling:
+
+```ts
+await client.identify("user_123")
+```
+
+means:
+
+1. read current `distinctId`
+2. emit an identify signal from old identity to new identity
+3. switch current SDK identity to `"user_123"`
+
+The canonical identify payload should conceptually be:
+
+```ts
+{
+  event: "$identify",
+  distinctId: "user_123",
+  properties: {
+    previous_distinct_id: "anon_abc",
+  }
+}
+```
+
+This keeps the model aligned with the event pipeline:
+
+- event target identity is `distinctId`
+- previous identity is explicit
+
+## Shared Type Changes
+
+The shared/open-source packages should move toward:
+
+- `distinctId` in SDK runtime and client types
+- `customerId` in server responses
+- no `appUserId` in new shared contracts
+
+Target response shape:
+
+```ts
+type SdkCustomer = {
+  customerId: string
+  distinctId: string
+  email: string | null
+  name: string | null
+}
+```
+
+If the backend still exposes the customer's primary identified value, it should still be called `distinctId`, not `appUserId`.
+
+## Migration Direction In OSS
+
+The OSS repo should make these changes:
+
+1. Rename SDK runtime state from `appUserId` to `distinctId`.
+2. Rename `userId` init options to `distinctId`.
+3. Rename headers and request fields in shared API contracts away from `x-app-user-id` where possible.
+4. Update docs and examples to use `distinctId` consistently.
+5. Treat identify as an identity transition from previous `distinctId` to next `distinctId`.
+
+Because breaking changes are acceptable, this should be done directly rather than layering long-term compatibility abstractions into the OSS API.
+
+## Design Rules
+
+When adding new SDK or shared API surface area:
+
+1. Use `distinctId` for the event/customer identity supplied by the SDK.
+2. Use `customerId` for the backend canonical customer record.
+3. Do not introduce another synonym for either concept.
+4. Do not store both `appUserId` and `distinctId` in SDK state.
+5. Prefer one identity value in transit and one canonical identity value in storage.
+
+## Result
+
+The target public model is:
+
+- SDK stores one `distinctId`
+- backend returns one `customerId`
+- identify changes the current `distinctId`
+- anonymous and identified users use the same identity field
+
+That is the simplest model that still supports anonymous users, identified users, and downstream identity resolution.
diff --git a/examples/react-native-example/app/index.tsx b/examples/react-native-example/app/index.tsx
index 698e19fa1..e3f4eea71 100644
--- a/examples/react-native-example/app/index.tsx
+++ b/examples/react-native-example/app/index.tsx
@@ -14,10 +14,10 @@ export default function HomeScreen() {
 	// Mock authentication
 	const { user, isLoading } = useCurrentUser();
 
-	// Signs out the user
+	// Resets the current identity and signs the example user out.
 	const handleSignOut = async () => {
 		await fakeAuthService.signOut();
-		await voidhash.client.signOut();
+		await voidhash.client.reset();
 	};
 
 	// Resets the Voidhash cache. This is useful for testing.
diff --git a/libraries/node/build.ts b/libraries/node/build.ts
index a6335e077..1ab0ae09b 100644
--- a/libraries/node/build.ts
+++ b/libraries/node/build.ts
@@ -5,6 +5,7 @@ const main = async () => {
     dts: true,
     entryPoints: {
       index: "./src/index.ts",
+      effect: "./src/effect.ts",
     },
     format: ["cjs", "esm"],
     outDir: "./dist",
diff --git a/libraries/node/package.json b/libraries/node/package.json
index cf416fb78..cd2a6c1a3 100644
--- a/libraries/node/package.json
+++ b/libraries/node/package.json
@@ -1,7 +1,21 @@
 {
   "name": "@voidhash/node",
   "version": "0.0.1-alpha.1",
+  "private": false,
   "description": "Fetch-compatible Voidhash Node SDK.",
+  "keywords": [
+    "voidhash",
+    "sdk",
+    "node",
+    "server",
+    "payments"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "MIT",
+  "author": "Voidhash (https://voidhash.com)",
   "repository": {
     "type": "git",
     "url": "https://github.com/voidhashcom/voidhash",
@@ -11,6 +25,14 @@
   "files": [
     "dist"
   ],
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "exports": {
     ".": {
       "import": {
@@ -21,6 +43,16 @@
         "types": "./dist/index.d.ts",
         "default": "./dist/index.js"
       }
+    },
+    "./effect": {
+      "import": {
+        "types": "./dist/effect.d.ts",
+        "default": "./dist/effect.mjs"
+      },
+      "require": {
+        "types": "./dist/effect.d.ts",
+        "default": "./dist/effect.js"
+      }
     }
   },
   "scripts": {
diff --git a/libraries/node/src/effect-client.ts b/libraries/node/src/effect-client.ts
index 602cf7646..e672b2446 100644
--- a/libraries/node/src/effect-client.ts
+++ b/libraries/node/src/effect-client.ts
@@ -12,7 +12,7 @@ import { normalizeGeneratedClient } from "./internal/normalize-generated-client"
 export type VoidhashNodeEffectClient =
   FilterSdkGroup<PublicVoidhashNodeEffectClient>;
 
-export const createVoidhashNodeEffectClient = (
+export const createVoidhashSdk = (
   options: VoidhashNodeClientOptions
 ): VoidhashNodeEffectClient =>
   filterSdkGroup(
diff --git a/libraries/node/src/effect.ts b/libraries/node/src/effect.ts
new file mode 100644
index 000000000..27ca5ceb0
--- /dev/null
+++ b/libraries/node/src/effect.ts
@@ -0,0 +1,6 @@
+export { VoidhashNodeConfigurationError } from "./errors";
+export {
+  createVoidhashSdk,
+  type VoidhashNodeEffectClient,
+} from "./effect-client";
+export type { VoidhashNodeClientOptions } from "./types";
diff --git a/libraries/node/src/index.ts b/libraries/node/src/index.ts
index 2f8f7258c..2ccbba02e 100644
--- a/libraries/node/src/index.ts
+++ b/libraries/node/src/index.ts
@@ -1,10 +1,6 @@
 export { VoidhashNodeConfigurationError } from "./errors";
 export {
-  createVoidhashNodeEffectClient,
-  type VoidhashNodeEffectClient,
-} from "./effect-client";
-export {
-  createVoidhashNodeClient,
+  createVoidhashSdk,
   type VoidhashNodeClient,
 } from "./promise-client";
 export type { VoidhashNodeClientOptions } from "./types";
diff --git a/libraries/node/src/promise-client.ts b/libraries/node/src/promise-client.ts
index 612f06186..ae71f443b 100644
--- a/libraries/node/src/promise-client.ts
+++ b/libraries/node/src/promise-client.ts
@@ -1,7 +1,7 @@
 import { Effect } from "effect";
 
 import {
-  createVoidhashNodeEffectClient,
+  createVoidhashSdk as createVoidhashEffectSdk,
   type VoidhashNodeEffectClient,
 } from "./effect-client";
 import type { PublicVoidhashNodeClient } from "./internal/client-types";
@@ -48,11 +48,11 @@ const promisifyClient = <TClient extends object>(
 
 export type VoidhashNodeClient = FilterSdkGroup<PublicVoidhashNodeClient>;
 
-export const createVoidhashNodeClient = (
+export const createVoidhashSdk = (
   options: VoidhashNodeClientOptions
 ): VoidhashNodeClient =>
   promisifyClient(
-    createVoidhashNodeEffectClient(options)
+    createVoidhashEffectSdk(options)
   ) as unknown as VoidhashNodeClient;
 
 export type { VoidhashNodeEffectClient };
diff --git a/libraries/node/tests/client.test.ts b/libraries/node/tests/client.test.ts
index 713b13f8f..fbc37ad5b 100644
--- a/libraries/node/tests/client.test.ts
+++ b/libraries/node/tests/client.test.ts
@@ -11,11 +11,13 @@ import {
 
 import {
   VoidhashNodeConfigurationError,
-  createVoidhashNodeClient,
-  createVoidhashNodeEffectClient,
+  createVoidhashSdk,
   type VoidhashNodeClient,
-  type VoidhashNodeEffectClient,
 } from "../src/index";
+import {
+  createVoidhashSdk as createVoidhashEffectSdk,
+  type VoidhashNodeEffectClient,
+} from "../src/effect";
 import { createJsonResponse, installFetchMock } from "./helpers";
 
 const EXPECTED_GROUPS = [
@@ -61,10 +63,10 @@ describe("@voidhash/node", () => {
   });
 
   it("exposes the exact non-sdk namespaces and omits sdk in types", () => {
-    const effectClient = createVoidhashNodeEffectClient({
+    const effectClient = createVoidhashEffectSdk({
       secretKey: "vh_sk_test",
     });
-    const promiseClient = createVoidhashNodeClient({
+    const promiseClient = createVoidhashSdk({
       secretKey: "vh_sk_test",
     });
 
@@ -83,20 +85,20 @@ describe("@voidhash/node", () => {
 
   it("fails immediately for invalid configuration", () => {
     expect(() =>
-      createVoidhashNodeEffectClient({
+      createVoidhashEffectSdk({
         secretKey: "   ",
       })
     ).toThrow(VoidhashNodeConfigurationError);
 
     expect(() =>
-      createVoidhashNodeEffectClient({
+      createVoidhashEffectSdk({
         baseUrl: "not a url",
         secretKey: "vh_sk_test",
       })
     ).toThrow(VoidhashNodeConfigurationError);
 
     expect(() =>
-      createVoidhashNodeEffectClient({
+      createVoidhashEffectSdk({
         headers: {
           "x-secret-key": "attempted_override",
         },
@@ -107,7 +109,7 @@ describe("@voidhash/node", () => {
     vi.stubGlobal("fetch", undefined);
 
     expect(() =>
-      createVoidhashNodeClient({
+      createVoidhashSdk({
         secretKey: "vh_sk_test",
       })
     ).toThrow(VoidhashNodeConfigurationError);
@@ -123,7 +125,7 @@ describe("@voidhash/node", () => {
       })
     );
 
-    const client = createVoidhashNodeEffectClient({
+    const client = createVoidhashEffectSdk({
       headers: {
         "x-trace-id": "trace_123",
       },
@@ -155,7 +157,7 @@ describe("@voidhash/node", () => {
       ])
     );
 
-    const client = createVoidhashNodeClient({
+    const client = createVoidhashSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
@@ -183,36 +185,36 @@ describe("@voidhash/node", () => {
   it("supports POST bodies with customers.createCustomer({ payload })", async () => {
     const { calls } = installFetchMock(() =>
       createJsonResponse({
-        appUserId: "user_123",
+        customerId: "customer_123",
+        distinctId: "user_123",
         email: "user@example.com",
-        id: "customer_123",
         name: "Taylor",
       })
     );
 
-    const client = createVoidhashNodeClient({
+    const client = createVoidhashSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
 
     const customer = await client.customers.createCustomer({
       payload: {
-        appUserId: "user_123",
+        distinctId: "user_123",
         email: "user@example.com",
         name: "Taylor",
       },
     });
 
     expect(customer).toEqual({
-      appUserId: "user_123",
+      customerId: "customer_123",
+      distinctId: "user_123",
       email: "user@example.com",
-      id: "customer_123",
       name: "Taylor",
     });
     expect(calls[0]?.method).toBe("POST");
     expect(calls[0]?.url).toBe("https://api.voidhash.test/api/v1/customers");
     expect(JSON.parse(calls[0]?.body ?? "{}")).toEqual({
-      appUserId: "user_123",
+      distinctId: "user_123",
       email: "user@example.com",
       name: "Taylor",
     });
@@ -236,7 +238,7 @@ describe("@voidhash/node", () => {
       })
     );
 
-    const client = createVoidhashNodeClient({
+    const client = createVoidhashSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
@@ -273,7 +275,7 @@ describe("@voidhash/node", () => {
   it("supports DELETE requests with api_keys.deleteApiKey({ params })", async () => {
     const { calls } = installFetchMock(() => new Response(null, { status: 204 }));
 
-    const client = createVoidhashNodeClient({
+    const client = createVoidhashSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
@@ -302,11 +304,11 @@ describe("@voidhash/node", () => {
       })
     );
 
-    const effectClient = createVoidhashNodeEffectClient({
+    const effectClient = createVoidhashEffectSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
-    const promiseClient = createVoidhashNodeClient({
+    const promiseClient = createVoidhashSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
@@ -327,11 +329,11 @@ describe("@voidhash/node", () => {
       )
     );
 
-    const effectClient = createVoidhashNodeEffectClient({
+    const effectClient = createVoidhashEffectSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
-    const promiseClient = createVoidhashNodeClient({
+    const promiseClient = createVoidhashSdk({
       baseUrl: "https://api.voidhash.test",
       secretKey: "vh_sk_test",
     });
diff --git a/libraries/react-native/README.md b/libraries/react-native/README.md
index 8f6423ee2..c4f3a65fb 100644
--- a/libraries/react-native/README.md
+++ b/libraries/react-native/README.md
@@ -45,7 +45,7 @@ When `unstable_swallowErrors: true`, the SDK logs warnings and does not reject f
 - `init()`
 - `end()`
 - `identify(...)`
-- `signOut()`
+- `reset()`
 - `restorePurchases()`
 - `flush()`
 - `iosPresentCodeRedemptionSheet()`
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index aabc40301..ce14c93fd 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -1,20 +1,26 @@
 {
 	"name": "@voidhash/react-native",
-	"version": "0.0.1",
-	"description": "React Native SDK for in-app purchases.",
+	"version": "0.0.1-alpha.1",
+	"private": false,
+	"description": "Voidhash React Native SDK for in-app purchases.",
 	"keywords": [
+		"voidhash",
+		"sdk",
 		"nitro",
-		"react-native"
+		"react-native",
+		"expo",
+		"payments"
 	],
 	"homepage": "https://voidhash.com/docs",
 	"bugs": {
-		"url": "https://github.com/mrousavy/nitro/issues"
+		"url": "https://github.com/voidhashcom/voidhash/issues"
 	},
 	"license": "MIT",
-	"author": "Marc Rousavy <me@mrousavy.com> (https://github.com/mrousavy)",
+	"author": "Voidhash (https://voidhash.com)",
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/mrousavy/nitro.git"
+		"url": "https://github.com/voidhashcom/voidhash",
+		"directory": "libraries/react-native"
 	},
 	"source": "src/index",
 	"files": [
@@ -40,6 +46,7 @@
 	"types": "build/index.d.ts",
 	"react-native": "src/index",
 	"publishConfig": {
+		"access": "public",
 		"registry": "https://registry.npmjs.org/"
 	},
 	"exports": {
@@ -61,13 +68,12 @@
 		"specs": "pnpm run typescript && nitro-codegen --logLevel=\"debug\""
 	},
 	"dependencies": {
-		"neverthrow": "^8.2.0"
+		"@voidhash/api-spec": "workspace:*"
 	},
 	"devDependencies": {
 		"@types/jest": "^29.5.14",
 		"@types/react": "~19.1.10",
 		"@vitejs/plugin-react": "^4.6.0",
-		"@voidhash/api-spec": "workspace:*",
 		"@voidhash/shared": "workspace:*",
 		"expo": "54.0.33",
 		"expo-constants": "~18.0.13",
diff --git a/libraries/react-native/src/__tests__/core/client-effect.test.ts b/libraries/react-native/src/__tests__/core/client-effect.test.ts
index 73c20d1a3..fbfaf6563 100644
--- a/libraries/react-native/src/__tests__/core/client-effect.test.ts
+++ b/libraries/react-native/src/__tests__/core/client-effect.test.ts
@@ -4,11 +4,12 @@ import {
   type AnalyticsIngestEvent,
   VoidhashEffectClient,
 } from "../../client-effect";
-import { ANONYMOUS_USER_ID_PREFIX } from "../../constants";
+import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../../core/caching/cache-manager";
 import { Product, SubscriptionProduct } from "../../core/entities/product";
 import { Transaction } from "../../core/entities/transaction";
 import { CustomerAttributeManager } from "../../core/identity/customer-attribute-manager";
+import { SDK_VERSION } from "../../core/constants";
 import {
   createApiClientDouble,
   createEffectTestHarness,
@@ -18,7 +19,7 @@ import {
 import { createTestSchema } from "../helpers/test-schema";
 
 describe("VoidhashEffectClient", () => {
-  it("init with initial user id identifies user and syncs previous attributes", async () => {
+  it("init with a provided distinct id identifies the user and syncs previous attributes", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -31,7 +32,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("appUserId", "cached-before-init"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-before-init"))
       );
       await harness.runtime.runPromise(
         Effect.flatMap(CustomerAttributeManager, (manager) =>
@@ -44,29 +45,29 @@ describe("VoidhashEffectClient", () => {
 
       const initializedClient = await harness.runtime.runPromise(
         VoidhashEffectClient.makeUnitializedClient().init({
-          initialAppUserId: "user-after-init",
+          distinctId: "user-after-init",
           schema,
         })
       );
 
       expect(initializedClient).toHaveProperty("getProducts");
       expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(2);
-      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-app-user-id"]).toBe(
+      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
         "cached-before-init"
       );
       expect(apiDouble.state.identifyCalls).toHaveLength(1);
-      expect(apiDouble.state.identifyCalls[0]?.headers["x-app-user-id"]).toBe(
+      expect(apiDouble.state.identifyCalls[0]?.headers["x-distinct-id"]).toBe(
         "cached-before-init"
       );
       expect(apiDouble.state.identifyCalls[0]?.payload).toMatchObject({
-        appUserId: "user-after-init",
+        distinctId: "user-after-init",
       });
     } finally {
       await harness.runtime.dispose();
     }
   });
 
-  it("init without initial user id prefetches customer", async () => {
+  it("init without a provided distinct id prefetches customer", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -87,10 +88,10 @@ describe("VoidhashEffectClient", () => {
       expect(apiDouble.state.identifyCalls).toHaveLength(0);
       expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
       expect(apiDouble.state.getCustomerCalls).toHaveLength(1);
-      const appUserId = String(
-        apiDouble.state.getCustomerCalls[0]?.headers["x-app-user-id"]
+      const distinctId = String(
+        apiDouble.state.getCustomerCalls[0]?.headers["x-distinct-id"]
       );
-      expect(appUserId.startsWith(ANONYMOUS_USER_ID_PREFIX)).toBe(true);
+      expect(distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
     } finally {
       await harness.runtime.dispose();
     }
@@ -164,7 +165,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("appUserId", "feature-user"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "feature-user"))
       );
 
       const first = await harness.runtime.runPromise(
@@ -455,7 +456,7 @@ describe("VoidhashEffectClient", () => {
       try {
         await harness.runtime.runPromise(
           Effect.flatMap(CacheManager, (manager) =>
-            manager.set("appUserId", "analytics-user")
+            manager.set("distinctId", "analytics-user")
           )
         );
         await harness.runtime.runPromise(
@@ -464,15 +465,32 @@ describe("VoidhashEffectClient", () => {
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
         expect(fetchMock.mock.calls[0]?.[0]).toBe(
-          "https://i.api.voidhash.test/v1/events"
+          "https://i.api.voidhash.test/batch"
         );
 
         const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
         expect(request?.method).toBe("POST");
         expect(request?.headers).toEqual({
           "content-type": "application/json",
-          "x-app-user-id": "analytics-user",
-          "x-publishable-key": "pk_analytics",
+        });
+        expect(JSON.parse(String(request?.body))).toMatchObject({
+          events: [
+            {
+              distinct_id: "analytics-user",
+              event: "cta-button-clicked",
+              properties: {
+                button_name: "Get Started",
+              },
+              request: {
+                sdk_name: "react-native",
+                sdk_version: SDK_VERSION,
+              },
+              session_id: "sess_1",
+              timestamp: "2026-01-01T00:00:00.000Z",
+              uuid: "evt_1",
+            },
+          ],
+          token: "pk_analytics",
         });
       } finally {
         global.fetch = originalFetch;
@@ -507,36 +525,23 @@ describe("VoidhashEffectClient", () => {
         );
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
-        expect(fetchMock.mock.calls[0]?.[0]).toBe("http://localhost:8083/v1/events");
+        expect(fetchMock.mock.calls[0]?.[0]).toBe("http://localhost:8083/batch");
       } finally {
         global.fetch = originalFetch;
         await harness.runtime.dispose();
       }
     });
 
-    it("retries failed analytics delivery up to 3 times", async () => {
+    it("does not inline retry failed analytics delivery", async () => {
       const originalFetch = global.fetch;
       const fetchMock = jest
         .fn()
         .mockResolvedValueOnce({
-          ok: false,
-          status: 500,
-          statusText: "Internal Server Error",
-        })
-        .mockResolvedValueOnce({
-          ok: false,
-          status: 500,
-          statusText: "Internal Server Error",
-        })
-        .mockResolvedValueOnce({
+          headers: new Headers(),
+          json: async () => ({ error: "try again" }),
           ok: false,
           status: 503,
           statusText: "Service Unavailable",
-        })
-        .mockResolvedValueOnce({
-          ok: true,
-          status: 202,
-          statusText: "Accepted",
         });
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
@@ -553,11 +558,10 @@ describe("VoidhashEffectClient", () => {
       const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
 
       try {
-        await harness.runtime.runPromise(
+        await expect(harness.runtime.runPromise(
           initializedClient.sendAnalyticsEvents(analyticsEvents)
-        );
-
-        expect(fetchMock).toHaveBeenCalledTimes(4);
+        )).rejects.toThrow("Analytics ingest request failed: 503 Service Unavailable");
+        expect(fetchMock).toHaveBeenCalledTimes(1);
       } finally {
         global.fetch = originalFetch;
         await harness.runtime.dispose();
@@ -671,13 +675,21 @@ describe("VoidhashEffectClient", () => {
       }
     });
 
-    it("keeps batch in queue when flush fails", async () => {
+    it("keeps batch in queue when flush is retryably rate limited", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = jest.fn()
-        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" })
-        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" })
-        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" })
-        .mockResolvedValueOnce({ ok: false, status: 500, statusText: "Internal Server Error" });
+      const fetchMock = jest.fn().mockResolvedValueOnce({
+        headers: new Headers({
+          "retry-after": "2",
+        }),
+        json: async () => ({
+          code: "rate_limited",
+          error: "request rate limit exceeded",
+          retry_after_ms: 2000,
+        }),
+        ok: false,
+        status: 429,
+        statusText: "Too Many Requests",
+      });
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -696,12 +708,75 @@ describe("VoidhashEffectClient", () => {
         harness.runtime.runSync(initializedClient.capture("event-1"));
         harness.runtime.runSync(initializedClient.capture("event-2"));
 
-        await expect(
-          harness.runtime.runPromise(initializedClient.flush())
-        ).rejects.toThrow();
-
+        await harness.runtime.runPromise(initializedClient.flush());
         expect(initializedClient.getAnalyticsQueueLength()).toBe(2);
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("retries a rate-limited batch after Retry-After elapses", async () => {
+      jest.useFakeTimers();
+
+      const originalFetch = global.fetch;
+      const fetchMock = jest
+        .fn()
+        .mockResolvedValueOnce({
+          headers: new Headers({
+            "retry-after": "2",
+          }),
+          json: async () => ({
+            code: "rate_limited",
+            error: "request rate limit exceeded",
+            retry_after_ms: 2000,
+          }),
+          ok: false,
+          status: 429,
+          statusText: "Too Many Requests",
+        })
+        .mockResolvedValueOnce({
+          headers: new Headers(),
+          json: async () => ({
+            accepted: 1,
+            rejected: 0,
+            request_id: "req_after_backoff",
+          }),
+          ok: true,
+          status: 202,
+          statusText: "Accepted",
+        });
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        ingestUrl: "http://localhost:8083",
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+
+      try {
+        harness.runtime.runSync(initializedClient.capture("event-1"));
+
+        await harness.runtime.runPromise(initializedClient.flush());
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(1);
+
+        await harness.runtime.runPromise(initializedClient.flush());
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+
+        jest.advanceTimersByTime(2000);
+        await harness.runtime.runPromise(initializedClient.flush());
+
+        expect(fetchMock).toHaveBeenCalledTimes(2);
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(0);
       } finally {
+        jest.useRealTimers();
         global.fetch = originalFetch;
         await harness.runtime.dispose();
       }
diff --git a/libraries/react-native/src/__tests__/core/customer-info-manager.test.ts b/libraries/react-native/src/__tests__/core/customer-info-manager.test.ts
index 813a92f6a..db0ea3713 100644
--- a/libraries/react-native/src/__tests__/core/customer-info-manager.test.ts
+++ b/libraries/react-native/src/__tests__/core/customer-info-manager.test.ts
@@ -61,7 +61,7 @@ describe("CustomerInfoManager", () => {
 
     const fetchedEvents: string[] = [];
     const remove = harness.eventBus.on("customer-fetched", (customer) => {
-      fetchedEvents.push(customer.appUserId);
+      fetchedEvents.push(customer.distinctId);
     });
 
     try {
@@ -76,9 +76,9 @@ describe("CustomerInfoManager", () => {
         )
       );
 
-      expect(result.appUserId).toBe("fetched-user");
+      expect(result.distinctId).toBe("fetched-user");
       expect(apiDouble.state.getCustomerCalls).toHaveLength(1);
-      expect(cached?.value.appUserId).toBe("fetched-user");
+      expect(cached?.value.distinctId).toBe("fetched-user");
       expect(fetchedEvents).toEqual(["fetched-user"]);
     } finally {
       remove();
diff --git a/libraries/react-native/src/__tests__/core/identity-manager.test.ts b/libraries/react-native/src/__tests__/core/identity-manager.test.ts
index 9e9435b52..5d16ff174 100644
--- a/libraries/react-native/src/__tests__/core/identity-manager.test.ts
+++ b/libraries/react-native/src/__tests__/core/identity-manager.test.ts
@@ -1,6 +1,6 @@
 import { Effect } from "effect";
 
-import { ANONYMOUS_USER_ID_PREFIX } from "../../constants";
+import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../../core/caching/cache-manager";
 import { CustomerAttributeManager } from "../../core/identity/customer-attribute-manager";
 import { CustomerInfoManager } from "../../core/identity/customer-info-manager";
@@ -13,7 +13,7 @@ import {
 } from "../helpers/effect-test-harness";
 
 describe("IdentityManager", () => {
-  it("uses cached app user id when present", async () => {
+  it("uses the cached distinct id when present", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -25,20 +25,20 @@ describe("IdentityManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("appUserId", "cached-user"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-user"))
       );
 
-      const appUserId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getAppUserId())
+      const distinctId = await harness.runtime.runPromise(
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
       );
 
-      expect(appUserId).toBe("cached-user");
+      expect(distinctId).toBe("cached-user");
     } finally {
       await harness.runtime.dispose();
     }
   });
 
-  it("generates and persists anonymous app user id when cache is empty", async () => {
+  it("generates and persists an anonymous distinct id when the cache is empty", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -49,21 +49,21 @@ describe("IdentityManager", () => {
     });
 
     try {
-      const appUserId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getAppUserId())
+      const distinctId = await harness.runtime.runPromise(
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getAppUserIdFromCache())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
       );
 
-      expect(appUserId.startsWith(ANONYMOUS_USER_ID_PREFIX)).toBe(true);
-      expect(cached).toBe(appUserId);
+      expect(distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
+      expect(cached).toBe(distinctId);
     } finally {
       await harness.runtime.dispose();
     }
   });
 
-  it("identify syncs previous user attributes, updates cache and emits events", async () => {
+  it("identify syncs previous traits, updates cache and emits events", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -80,14 +80,14 @@ describe("IdentityManager", () => {
       identifiedEvents.push("customer-identified");
     });
     const removeFetched = harness.eventBus.on("customer-fetched", (customer) => {
-      fetchedEvents.push(customer.appUserId);
+      fetchedEvents.push(customer.distinctId);
     });
 
     try {
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
           Effect.all([
-            manager.set("appUserId", "old-user"),
+            manager.set("distinctId", "old-user"),
             manager.set("customer-attributes:old-user", {
               email: "old@voidhash.test",
               name: "Old User",
@@ -105,8 +105,8 @@ describe("IdentityManager", () => {
         )
       );
 
-      const cachedAppUserId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getAppUserIdFromCache())
+      const cachedDistinctId = await harness.runtime.runPromise(
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
       );
       const cachedCustomer = await harness.runtime.runPromise(
         Effect.flatMap(CustomerInfoManager, (manager) =>
@@ -115,20 +115,20 @@ describe("IdentityManager", () => {
       );
 
       expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
-      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-app-user-id"]).toBe(
+      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
         "old-user"
       );
 
       expect(apiDouble.state.identifyCalls).toHaveLength(1);
       expect(apiDouble.state.identifyCalls[0]?.payload).toMatchObject({
-        appUserId: "new-user",
+        distinctId: "new-user",
         email: "new@voidhash.test",
         name: "New User",
       });
-      expect(apiDouble.state.identifyCalls[0]?.headers["x-app-user-id"]).toBe("old-user");
+      expect(apiDouble.state.identifyCalls[0]?.headers["x-distinct-id"]).toBe("old-user");
 
-      expect(cachedAppUserId).toBe("new-user");
-      expect(cachedCustomer?.value.appUserId).toBe("new-user");
+      expect(cachedDistinctId).toBe("new-user");
+      expect(cachedCustomer?.value.distinctId).toBe("new-user");
       expect(identifiedEvents).toEqual(["customer-identified"]);
       expect(fetchedEvents).toEqual(["new-user"]);
     } finally {
@@ -138,7 +138,7 @@ describe("IdentityManager", () => {
     }
   });
 
-  it("signOut syncs attributes, clears cache and emits signed out event", async () => {
+  it("reset syncs attributes, clears cache and emits signed out event", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -157,7 +157,7 @@ describe("IdentityManager", () => {
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
           Effect.all([
-            manager.set("appUserId", "signed-in-user"),
+            manager.set("distinctId", "signed-in-user"),
             manager.set("customer:some-user", { id: "some-user" }),
           ])
         )
@@ -172,21 +172,21 @@ describe("IdentityManager", () => {
       );
 
       await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.signOut())
+        Effect.flatMap(IdentityManager, (manager) => manager.reset())
       );
 
-      const appUserIdFromCache = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getAppUserIdFromCache())
+      const distinctIdFromCache = await harness.runtime.runPromise(
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
       );
       const cacheKeys = await harness.runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
       );
 
       expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
-      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-app-user-id"]).toBe(
+      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
         "signed-in-user"
       );
-      expect(appUserIdFromCache).toBeNull();
+      expect(distinctIdFromCache).toBeNull();
       expect(cacheKeys).toEqual([]);
       expect(signOutEvents).toEqual(["customer-signed-out"]);
     } finally {
diff --git a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
index 1227475f7..1bfd5b0f8 100644
--- a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
+++ b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
@@ -44,10 +44,10 @@ export interface ApiClientDoubleOptions {
   syncTransactionShouldFail?: boolean;
 }
 
-export function createSdkCustomer(appUserId: string) {
+export function createSdkCustomer(distinctId: string) {
   return {
-    appUserId,
-    customerId: `customer-${appUserId}`,
+    distinctId,
+    customerId: `customer-${distinctId}`,
     email: null,
     name: null,
   } as SdkCustomer;
@@ -81,16 +81,16 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
       },
       getCustomer: (request: ApiSdkCall) => {
         state.getCustomerCalls.push(request);
-        const appUserId = String(request.headers["x-app-user-id"]);
+        const distinctId = String(request.headers["x-distinct-id"]);
         return Effect.succeed(
-          options.getCustomerResult ?? createSdkCustomer(appUserId)
+          options.getCustomerResult ?? createSdkCustomer(distinctId)
         );
       },
       identify: (request: ApiSdkCall) => {
         state.identifyCalls.push(request);
-        const appUserId = String(request.payload?.appUserId ?? "identified-user");
+        const distinctId = String(request.payload?.distinctId ?? "identified-user");
         return Effect.succeed(
-          options.identifyResult ?? createSdkCustomer(appUserId)
+          options.identifyResult ?? createSdkCustomer(distinctId)
         );
       },
       syncCustomerAttributes: (request: ApiSdkCall) => {
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 40de0ed71..17dfdee61 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -1,4 +1,8 @@
-import { Effect, Schedule } from "effect";
+import type {
+  CaptureAcceptedResponse,
+  CaptureErrorResponse,
+} from "@voidhash/api-spec/event-capture";
+import { Cause, Effect } from "effect";
 
 import { SDK_VERSION } from "./core/constants";
 import { CacheManager } from "./core/caching/cache-manager";
@@ -10,7 +14,6 @@ import { CustomerInfoManager } from "./core/identity/customer-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
 import { ApiClient } from "./core/networking/api-client";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
-import { PlatformProvider } from "./core/platform/platform-provider";
 import type {
   ExtractSchemaProductDefinitions,
   ExtractSchemaProductKeys,
@@ -22,29 +25,18 @@ import { extractProductDefinitions } from "./core/schema/utils";
 import { SdkConfiguration } from "./core/sdk-configuration";
 import { getCommonSdkHeaders } from "./core/utils/get-common-sdk-headers";
 import { UnsupportedPlatformError } from "./errors";
+import { AnalyticsIngestEvent, AnalyticsSendFailure, QueuedAnalyticsEvent } from "./core/analytics/types";
+import { createQueuedAnalyticsEvent, getAnalyticsStandardizedProperties, mapQueuedAnalyticsEventToIngestEvent } from "./core/analytics/utils";
+import { getNonce } from "./core/utils/crypto";
 
 const PROCESSED_TRANSACTION_TTL_MS = 1000 * 60 * 30;
-const ANALYTICS_RETRY_BASE_MS = 200;
 const ANALYTICS_BATCH_SIZE = 20;
 const ANALYTICS_FLUSH_INTERVAL_MS = 5000;
+const MAX_ANALYTICS_RETRY_DELAY_MS = 30_000;
+const RETRYABLE_ANALYTICS_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
 
-const generateFallbackNonce = () =>
-  `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
-
-const getNonce = () => {
-  const cryptoObject = globalThis.crypto as { randomUUID?: () => string } | undefined;
-  return cryptoObject?.randomUUID?.() ?? generateFallbackNonce();
-};
 
-const isRecord = (value: unknown): value is Record<string, unknown> =>
-  typeof value === "object" && value !== null;
 
-interface QueuedAnalyticsEvent {
-  readonly eventName: string;
-  readonly eventTimestamp: string;
-  readonly id: string;
-  readonly properties: Record<string, unknown>;
-}
 
 interface AppReleaseInfo {
   readonly appBuild: string | null;
@@ -79,35 +71,50 @@ const getReactNativeAppState = (): ReactNativeAppState | null => {
   }
 };
 
-const toNullableString = (value: unknown) =>
-  typeof value === "string" ? value : null;
+const toNullableString = (value: unknown): string | null =>
+  value !== null && value !== undefined ? String(value) : null;
 
-const toAppReleaseInfo = (value: unknown) => {
-  if (!isRecord(value)) return null;
+const toAppReleaseInfo = (value: AppReleaseInfo | undefined | null): AppReleaseInfo | null => {
+  if (!value) return null;
   return {
-    appBuild: toNullableString(value.appBuild),
-    appVersion: toNullableString(value.appVersion),
+    appBuild: value.appBuild,
+    appVersion: value.appVersion,
   };
 };
 
-export interface AnalyticsIngestEvent {
-  /** Shared metadata attached to every event (for example app, device, or SDK context). */
-  readonly context: Record<string, unknown>;
-  /** Unique identifier for this event instance. */
-  readonly event_id: string;
-  /** Canonical event name used for analytics processing. */
-  readonly event_name: string;
-  /** Event timestamp in string form (typically ISO-8601). */
-  readonly event_ts: string;
-  /** Event-specific payload fields for this event name. */
-  readonly properties: Record<string, unknown>;
-  /** Identifier that groups events belonging to the same user session. */
-  readonly session_id: string;
-}
+
+
+const getAnalyticsRetryDelayMs = (attempts: number) =>
+  Math.min(1000 * 2 ** Math.max(attempts - 1, 0), MAX_ANALYTICS_RETRY_DELAY_MS);
+
+const parseRetryAfterMs = (value: string | null): number | undefined => {
+  if (!value) {
+    return undefined;
+  }
+
+  const retryAfterSeconds = Number(value);
+  if (!Number.isNaN(retryAfterSeconds) && retryAfterSeconds >= 0) {
+    return Math.ceil(retryAfterSeconds * 1000);
+  }
+
+  const retryAt = Date.parse(value);
+  if (Number.isNaN(retryAt)) {
+    return undefined;
+  }
+
+  return Math.max(retryAt - Date.now(), 0);
+};
+
+const getRetryAfterMsFromResponseBody = (
+  data: CaptureAcceptedResponse | CaptureErrorResponse | undefined,
+): number | undefined =>
+  data && "retry_after_ms" in data && typeof data.retry_after_ms === "number"
+    ? data.retry_after_ms
+    : undefined;
 
 const makeUnitializedClient = () => ({
   init: <TSchema extends VoidhashSchema>(initOptions: {
-    initialAppUserId?: string;
+    distinctId?: string;
     schema: TSchema;
   }) =>
     Effect.gen(function* init() {
@@ -115,30 +122,30 @@ const makeUnitializedClient = () => ({
       const customerAttributeManager = yield* CustomerAttributeManager;
       const customerInfoManager = yield* CustomerInfoManager;
 
-      if (initOptions.initialAppUserId) {
-        // Identify as the user which ID was passed during SDK initialization
-        yield* Effect.logDebug("Initializing with initial user id", {
-          appUserId: initOptions.initialAppUserId,
+      if (initOptions.distinctId) {
+        // Identify as the distinct id provided during SDK initialization.
+        yield* Effect.logDebug("Initializing with provided distinct id", {
+          distinctId: initOptions.distinctId,
         });
 
         // Sync customer attributes before identify to not lose historical customer data
-        const appUserId = yield* identityManager.getAppUserIdFromCache();
-        if (appUserId) {
-          yield* customerAttributeManager.syncCustomerAttributes(appUserId);
+        const distinctId = yield* identityManager.getDistinctIdFromCache();
+        if (distinctId) {
+          yield* customerAttributeManager.syncCustomerAttributes(distinctId);
         }
 
-        yield* identityManager.identify(initOptions.initialAppUserId, {});
+        yield* identityManager.identify(initOptions.distinctId, {});
       } else {
-        // If no user ID was passed during SDK initialization, fetch the last identified customer from the server
-        const appUserId = yield* identityManager.getAppUserId();
-        yield* Effect.logDebug("Initializing without initial user id", {
-          appUserId,
+        // If no distinct id was passed during SDK initialization, fetch the current customer in the background.
+        const distinctId = yield* identityManager.getDistinctId();
+        yield* Effect.logDebug("Initializing without provided distinct id", {
+          distinctId,
         });
 
-        yield* customerAttributeManager.syncCustomerAttributes(appUserId);
+        yield* customerAttributeManager.syncCustomerAttributes(distinctId);
 
         // We don't need the result immediately. We do this to pre-fetch fresh customer data in the background.
-        yield* customerInfoManager.getCustomer(appUserId, "fetch");
+        yield* customerInfoManager.getCustomer(distinctId, "fetch");
       }
 
       // Return the initialized client
@@ -148,72 +155,6 @@ const makeUnitializedClient = () => ({
     }),
 });
 
-const getAnalyticsStandardizedProperties = () => {
-  let cached: Record<string, unknown> | null = null;
-
-  const fallbackProperties = {
-    $app_build: null,
-    $app_name: null,
-    $app_version: null,
-    $bundle_id: null,
-    $device_brand: null,
-    $device_name: null,
-    $locale: null,
-    $platform: "unknown",
-    $platform_version: null,
-    $sdk: "react-native",
-    $sdk_version: SDK_VERSION,
-  } satisfies Record<string, unknown>;
-
-  return () =>
-    Effect.gen(function* () {
-      if (cached) return cached;
-
-      const platformProvider = yield* PlatformProvider;
-      const props = {
-        $app_build: platformProvider.appBuild ?? null,
-        $app_name: platformProvider.appName ?? platformProvider.bundleId ?? null,
-        $app_version: platformProvider.appVersion ?? null,
-        $bundle_id: platformProvider.bundleId ?? null,
-        $device_brand: platformProvider.deviceBrand ?? null,
-        $device_name: platformProvider.deviceName ?? null,
-        $locale: platformProvider.locales[0]?.languageTag ?? null,
-        $platform: platformProvider.platform ?? "unknown",
-        $platform_version: platformProvider.systemVersion ?? null,
-        $sdk: "react-native",
-        $sdk_version: SDK_VERSION,
-      } satisfies Record<string, unknown>;
-
-      if (!isRecord(props)) {
-        cached = fallbackProperties;
-        return fallbackProperties;
-      }
-
-      cached = props;
-      return props;
-    }).pipe(
-      Effect.orElseSucceed(() => {
-        cached = fallbackProperties;
-        return fallbackProperties;
-      })
-    );
-};
-
-const mapQueuedAnalyticsEventToIngestEvent = (
-  event: QueuedAnalyticsEvent,
-  standardizedProperties: Record<string, unknown>,
-  sessionId: string
-) => ({
-  context: {},
-  event_id: event.id,
-  event_name: event.eventName,
-  event_ts: event.eventTimestamp,
-  properties: {
-    ...event.properties,
-    ...standardizedProperties,
-  },
-  session_id: sessionId,
-});
 
 const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
   schema: TSchema;
@@ -234,12 +175,32 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
     }
   };
 
+  const getNextAnalyticsFlushDelayMs = () => {
+    if (analyticsQueue.length === 0) {
+      return null;
+    }
+
+    const now = Date.now();
+    const hasDueEvents = analyticsQueue.some((event) => event.availableAt <= now);
+    if (hasDueEvents) {
+      return ANALYTICS_FLUSH_INTERVAL_MS;
+    }
+
+    const nextAvailableAt = Math.min(...analyticsQueue.map((event) => event.availableAt));
+    return Math.max(nextAvailableAt - now, 0);
+  };
+
   const scheduleFlushTimer = () => {
     if (analyticsFlushTimer || analyticsQueue.length === 0) return;
+    const delayMs = getNextAnalyticsFlushDelayMs();
+    if (delayMs === null) {
+      return;
+    }
+
     analyticsFlushTimer = setTimeout(() => {
       analyticsFlushTimer = null;
       triggerFlushCallback?.();
-    }, ANALYTICS_FLUSH_INTERVAL_MS);
+    }, delayMs);
   };
 
   const sendAnalyticsEventsImpl = (events: ReadonlyArray<AnalyticsIngestEvent>) =>
@@ -248,7 +209,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
       const identityManager = yield* IdentityManager;
       const sdkConfiguration = yield* SdkConfiguration;
-      const appUserId = yield* identityManager.getAppUserId();
+      const distinctId = yield* identityManager.getDistinctId();
       const ingestEventsUrl = resolveIngestEventsUrl({
         baseUrl: sdkConfiguration.baseUrl,
         ingestUrl: sdkConfiguration.ingestUrl,
@@ -257,31 +218,182 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
       const response = yield* Effect.tryPromise({
         try: () =>
           fetch(ingestEventsUrl, {
-            body: JSON.stringify({ events }),
+            body: JSON.stringify({
+              events: events.map((event) => ({
+                context: event.context,
+                distinct_id: distinctId,
+                event: event.event_name,
+                properties: event.properties,
+                request: {
+                  sdk_name: "react-native",
+                  sdk_version: SDK_VERSION,
+                },
+                session_id: event.session_id,
+                timestamp: event.event_ts,
+                uuid: event.event_id,
+              })),
+              sent_at: new Date().toISOString(),
+              token: sdkConfiguration.publishableKey,
+            }),
             headers: {
               "content-type": "application/json",
-              "x-app-user-id": appUserId,
-              "x-publishable-key": sdkConfiguration.publishableKey,
             },
             method: "POST",
           }),
         catch: (cause) =>
-          cause instanceof Error ? cause : new Error(String(cause)),
+          new AnalyticsSendFailure({
+            cause,
+            message: "Analytics request failed",
+            retryable: true,
+          }),
       });
 
+      const data = (yield* Effect.tryPromise({
+        try: () => response.json() as Promise<CaptureAcceptedResponse | CaptureErrorResponse>,
+        catch: (cause) => cause,
+      }).pipe(
+        Effect.orElseSucceed(() => undefined),
+      )) as CaptureAcceptedResponse | CaptureErrorResponse | undefined;
+
+      if (response.status === 202) {
+        return;
+      }
+
+      if (response.status === 413) {
+        return yield* Effect.fail(
+          new AnalyticsSendFailure({
+            message: `Analytics ingest request failed: ${response.status} ${response.statusText}`,
+            retryable: false,
+            status: response.status,
+          })
+        );
+      }
+
+      if (RETRYABLE_ANALYTICS_STATUS_CODES.has(response.status)) {
+        return yield* Effect.fail(
+          new AnalyticsSendFailure({
+            message: `Analytics ingest request failed: ${response.status} ${response.statusText}`,
+            retryAfterMs:
+              parseRetryAfterMs(response.headers.get("retry-after")) ??
+              getRetryAfterMsFromResponseBody(data),
+            retryable: true,
+            status: response.status,
+          })
+        );
+      }
+
       if (!response.ok) {
         return yield* Effect.fail(
-          new Error(
-            `Analytics ingest request failed: ${response.status} ${response.statusText}`
-          )
+          new AnalyticsSendFailure({
+            message: `Analytics ingest request failed: ${response.status} ${response.statusText}`,
+            retryable: false,
+            status: response.status,
+          })
         );
       }
-    }).pipe(
-      Effect.retry({
-        schedule: Schedule.exponential(ANALYTICS_RETRY_BASE_MS),
-        times: 3,
-      })
-    );
+    });
+
+  const buildQueuedAnalyticsBatchIds = (events: ReadonlyArray<QueuedAnalyticsEvent>) =>
+    new Set(events.map((event) => event.id));
+
+  const dropQueuedAnalyticsBatch = (events: ReadonlyArray<QueuedAnalyticsEvent>) => {
+    const ids = buildQueuedAnalyticsBatchIds(events);
+    for (let index = analyticsQueue.length - 1; index >= 0; index -= 1) {
+      if (ids.has(analyticsQueue[index]!.id)) {
+        analyticsQueue.splice(index, 1);
+      }
+    }
+  };
+
+  const postponeQueuedAnalyticsBatch = (
+    events: ReadonlyArray<QueuedAnalyticsEvent>,
+    nextAvailableAt: number,
+  ) => {
+    const ids = buildQueuedAnalyticsBatchIds(events);
+    for (let index = 0; index < analyticsQueue.length; index += 1) {
+      const queuedEvent = analyticsQueue[index]!;
+      if (!ids.has(queuedEvent.id)) {
+        continue;
+      }
+
+      analyticsQueue[index] = {
+        ...queuedEvent,
+        attempts: queuedEvent.attempts + 1,
+        availableAt: nextAvailableAt,
+      };
+    }
+  };
+
+  const getDueQueuedAnalyticsBatch = () => {
+    const now = Date.now();
+    const queuedBatch: QueuedAnalyticsEvent[] = [];
+
+    for (const event of analyticsQueue) {
+      if (event.availableAt > now) {
+        break;
+      }
+
+      queuedBatch.push(event);
+      if (queuedBatch.length >= ANALYTICS_BATCH_SIZE) {
+        break;
+      }
+    }
+
+    return queuedBatch;
+  };
+
+  const processQueuedAnalyticsBatch = (
+    queuedBatch: ReadonlyArray<QueuedAnalyticsEvent>,
+    standardizedProperties: Record<string, unknown>,
+  ): Effect.Effect<void, AnalyticsSendFailure, IdentityManager | SdkConfiguration> =>
+    Effect.gen(function* () {
+      const ingestBatch = queuedBatch.map((event) =>
+        mapQueuedAnalyticsEventToIngestEvent(event, standardizedProperties, analyticsSessionId),
+      );
+
+      const sendResult = yield* Effect.exit(sendAnalyticsEventsImpl(ingestBatch));
+      if (sendResult._tag === "Success") {
+        dropQueuedAnalyticsBatch(queuedBatch);
+        return;
+      }
+
+      const failure = Cause.squash(sendResult.cause);
+      if (!(failure instanceof AnalyticsSendFailure)) {
+        return yield* Effect.fail(
+          new AnalyticsSendFailure({
+            cause: failure,
+            message: failure instanceof Error ? failure.message : String(failure),
+            retryable: false,
+          }),
+        );
+      }
+
+      if (failure.status === 413 && queuedBatch.length > 1) {
+        const midpoint = Math.ceil(queuedBatch.length / 2);
+        yield* processQueuedAnalyticsBatch(queuedBatch.slice(0, midpoint), standardizedProperties);
+        yield* processQueuedAnalyticsBatch(queuedBatch.slice(midpoint), standardizedProperties);
+        return;
+      }
+
+      if (failure.status === 413 && queuedBatch.length === 1) {
+        dropQueuedAnalyticsBatch(queuedBatch);
+        yield* Effect.logWarning("Dropping analytics event after 413 response", {
+          eventId: queuedBatch[0]?.id,
+        });
+        return;
+      }
+
+      if (!failure.retryable) {
+        dropQueuedAnalyticsBatch(queuedBatch);
+        yield* Effect.logWarning("Dropping analytics batch after non-retryable response", {
+          eventIds: queuedBatch.map((event) => event.id),
+          status: failure.status,
+        });
+        return;
+      }
+
+      return yield* Effect.fail(failure);
+    });
 
   const processObservedTransaction = (transaction: Transaction) =>
     Effect.gen(function* processObservedTransaction() {
@@ -313,7 +425,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         const sdkConfiguration = yield* SdkConfiguration;
 
         const commonHeaders = yield* getCommonSdkHeaders();
-        const appUserId = yield* identityManager.getAppUserId();
+        const distinctId = yield* identityManager.getDistinctId();
         if (transaction.platform === "android" && !transaction.purchaseToken) {
           yield* Effect.logWarning(
             "Skipping observed Android transaction without purchase token",
@@ -327,7 +439,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         yield* apiClient.sdk.syncTransaction({
           headers: {
             ...commonHeaders,
-            "x-app-user-id": appUserId,
+            "x-distinct-id": distinctId,
           },
           payload: mapTransactionToSyncPayload(transaction),
         });
@@ -404,11 +516,11 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         }
 
         const commonHeaders = yield* getCommonSdkHeaders();
-        const appUserId = yield* identityManager.getAppUserId();
+        const distinctId = yield* identityManager.getDistinctId();
         const result = yield* apiClient.sdk.evaluateFeatureFlags({
           headers: {
             ...commonHeaders,
-            "x-app-user-id": appUserId,
+            "x-distinct-id": distinctId,
           },
           payload: { flagKeys },
         });
@@ -430,12 +542,12 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         const identityManager = yield* IdentityManager;
 
         const commonHeaders = yield* getCommonSdkHeaders();
-        const appUserId = yield* identityManager.getAppUserId();
+        const distinctId = yield* identityManager.getDistinctId();
 
         return yield* apiClient.sdk.resolvePaywall({
           headers: {
             ...commonHeaders,
-            "x-app-user-id": appUserId,
+            "x-distinct-id": distinctId,
           },
           payload: { locationSlug },
         });
@@ -446,15 +558,21 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         const identityManager = yield* IdentityManager;
         const customerInfoManager = yield* CustomerInfoManager;
 
-        const appUserId = yield* identityManager.getAppUserId();
+        const distinctId = yield* identityManager.getDistinctId();
         const customer = yield* customerInfoManager.getCustomer(
-          appUserId,
+          distinctId,
           forceFetch ? "fetch" : "fetch-while-stale"
         );
 
         return customer;
       }),
 
+    getDistinctId: () =>
+      Effect.gen(function* getDistinctId() {
+        const identityManager = yield* IdentityManager;
+        return yield* identityManager.getDistinctId();
+      }),
+
     getProducts: () =>
       Effect.gen(function* getProducts() {
         const productDefinitions = extractProductDefinitions(options.schema);
@@ -463,7 +581,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
       }),
 
     identify: (
-      appUserId: string,
+      distinctId: string,
       options: {
         email?: string;
         name?: string;
@@ -471,7 +589,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
     ) =>
       Effect.gen(function* identify() {
         const identityManager = yield* IdentityManager;
-        return yield* identityManager.identify(appUserId, options);
+        return yield* identityManager.identify(distinctId, options);
       }),
 
     iosPresentCodeRedemptionSheet: () =>
@@ -525,8 +643,8 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
         yield* reconcileObservedTransactions();
 
-        const appUserId = yield* identityManager.getAppUserId();
-        yield* customerInfoManager.getCustomer(appUserId, "fetch");
+        const distinctId = yield* identityManager.getDistinctId();
+        yield* customerInfoManager.getCustomer(distinctId, "fetch");
       }),
 
     reconcileObservedTransactions: () => reconcileObservedTransactions(),
@@ -537,12 +655,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
       Effect.sync(() => {
         const normalized = eventName.trim();
         if (!normalized) return;
-        analyticsQueue.push({
-          eventName: normalized,
-          eventTimestamp: new Date().toISOString(),
-          id: getNonce(),
-          properties,
-        });
+        analyticsQueue.push(createQueuedAnalyticsEvent(normalized, properties));
         if (analyticsQueue.length >= ANALYTICS_BATCH_SIZE) {
           clearFlushTimer();
           triggerFlushCallback?.();
@@ -559,14 +672,28 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         const standardizedProperties = yield* getStandardizedProperties();
 
         while (analyticsQueue.length > 0) {
-          const queuedBatch = analyticsQueue.splice(0, ANALYTICS_BATCH_SIZE);
-          const ingestBatch = queuedBatch.map((event) =>
-            mapQueuedAnalyticsEventToIngestEvent(event, standardizedProperties, analyticsSessionId)
-          );
+          const queuedBatch = getDueQueuedAnalyticsBatch();
+          if (queuedBatch.length === 0) {
+            scheduleFlushTimer();
+            return;
+          }
 
-          const sendResult = yield* Effect.exit(sendAnalyticsEventsImpl(ingestBatch));
+          const sendResult = yield* Effect.exit(
+            processQueuedAnalyticsBatch(queuedBatch, standardizedProperties),
+          );
           if (sendResult._tag === "Failure") {
-            analyticsQueue.unshift(...queuedBatch);
+            const failure = Cause.squash(sendResult.cause);
+            if (failure instanceof AnalyticsSendFailure && failure.retryable) {
+              postponeQueuedAnalyticsBatch(
+                queuedBatch,
+                Date.now() +
+                  (failure.retryAfterMs ??
+                    getAnalyticsRetryDelayMs((queuedBatch[0]?.attempts ?? 0) + 1)),
+              );
+              scheduleFlushTimer();
+              return;
+            }
+
             yield* Effect.failCause(sendResult.cause);
           }
         }
@@ -588,12 +715,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         for (const event of events) {
           const normalized = event.eventName.trim();
           if (!normalized) continue;
-          analyticsQueue.push({
-            eventName: normalized,
-            eventTimestamp: new Date().toISOString(),
-            id: getNonce(),
-            properties: event.properties,
-          });
+          analyticsQueue.push(createQueuedAnalyticsEvent(normalized, event.properties));
         }
       }),
 
@@ -613,42 +735,22 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
           const previousAppRelease = toAppReleaseInfo(cachedRelease?.value);
 
           if (!previousAppRelease) {
-            analyticsQueue.push({
-              eventName: "app_installed",
-              eventTimestamp: new Date().toISOString(),
-              id: getNonce(),
-              properties: {},
-            });
+            analyticsQueue.push(createQueuedAnalyticsEvent("app_installed", {}));
           } else if (
             previousAppRelease.appBuild !== currentAppRelease.appBuild ||
             previousAppRelease.appVersion !== currentAppRelease.appVersion
           ) {
-            analyticsQueue.push({
-              eventName: "app_updated",
-              eventTimestamp: new Date().toISOString(),
-              id: getNonce(),
-              properties: {},
-            });
+            analyticsQueue.push(createQueuedAnalyticsEvent("app_updated", {}));
           }
 
-          analyticsQueue.push({
-            eventName: "app_opened",
-            eventTimestamp: new Date().toISOString(),
-            id: getNonce(),
-            properties: {},
-          });
+          analyticsQueue.push(createQueuedAnalyticsEvent("app_opened", {}));
 
           yield* cacheManager.set(
             ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY,
             currentAppRelease
           );
         } catch {
-          analyticsQueue.push({
-            eventName: "app_opened",
-            eventTimestamp: new Date().toISOString(),
-            id: getNonce(),
-            properties: {},
-          });
+          analyticsQueue.push(createQueuedAnalyticsEvent("app_opened", {}));
         }
       }),
 
@@ -685,10 +787,16 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
     sendAnalyticsEvents: (events: ReadonlyArray<AnalyticsIngestEvent>) =>
       sendAnalyticsEventsImpl(events),
 
+    reset: () =>
+      Effect.gen(function* reset() {
+        const identityManager = yield* IdentityManager;
+        return yield* identityManager.reset();
+      }),
+
     signOut: () =>
       Effect.gen(function* signOut() {
         const identityManager = yield* IdentityManager;
-        return yield* identityManager.signOut();
+        return yield* identityManager.reset();
       }),
 
     startTransactionObserver: (
@@ -806,7 +914,7 @@ const resolveIngestEventsUrl = (options: {
   const baseUrl = options.ingestUrl
     ? new URL(options.ingestUrl)
     : buildDefaultIngestBaseUrl(options.baseUrl);
-  return new URL("/v1/events", baseUrl).toString();
+  return new URL("/batch", baseUrl).toString();
 };
 
 const buildDefaultIngestBaseUrl = (apiBaseUrl: string) => {
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index 42d0ac389..736219377 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -23,8 +23,8 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
 ) {
   const baseUrl = options.baseUrl || "https://api.voidhash.com";
   const debug = options.debug ?? false;
+  const distinctId = options.distinctId ?? null;
   const ingestUrl = options.ingestUrl;
-  const initialAppUserId = options.userId ?? null;
   const readOnly = options.readOnly ?? false;
   const unstableSwallowErrors = options.unstable_swallowErrors ?? false;
   const scheme =
@@ -41,7 +41,7 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
   const platform = RNPlatform.OS === "ios" ? "ios" : "android";
 
   const client = new VoidhashClient<TSchema>(
-    initialAppUserId,
+    distinctId,
     scheme,
     schema,
     baseUrl,
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index a3f9c6672..63b44e830 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -20,16 +20,17 @@ import type {
 } from "./core/schema";
 import { SdkConfiguration } from "./core/sdk-configuration";
 import { ReadOnlyModePurchaseNotAllowedError, VoidhashError } from "./errors";
+import { AnalyticsService } from "./core/analytics/service";
 
 export interface VoidhashClientOptions<TSchema extends VoidhashSchema> {
   baseUrl?: string;
   debug?: boolean;
+  distinctId?: string;
   ingestUrl?: string;
   readOnly?: boolean;
   schema: TSchema;
   scheme?: string;
   unstable_swallowErrors?: boolean;
-  userId?: string;
 }
 
 const CreateEffectRuntime = (
@@ -44,6 +45,7 @@ const CreateEffectRuntime = (
   ManagedRuntime.make(
     pipe(
       CustomerAttributeManager.Default,
+      Layer.provideMerge(AnalyticsService.layer),
       Layer.provideMerge(CustomerInfoManager.Default),
       Layer.provideMerge(IdentityManager.Default),
       Layer.provideMerge(CacheManager.Default),
@@ -89,7 +91,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   private analyticsFlushInFlight: Promise<void> | null = null;
   private appLifecycleSubscription: { remove: () => void } | null = null;
   private preInitAnalyticsBuffer: Array<{ eventName: string; properties: Record<string, unknown> }> = [];
-  private initialAppUserId: string | null;
+  private initialDistinctId: string | null;
   private readOnly: boolean;
   private scheme: string;
   private schema: TSchema;
@@ -102,7 +104,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   private initializedClient?: InitializedEffectClient<TSchema>;
 
   constructor(
-    initialAppUserId: string | null,
+    initialDistinctId: string | null,
     scheme: string,
     schema: TSchema,
     baseUrl: string,
@@ -114,7 +116,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     platform: Exclude<PlatformInfo["platform"], "unknown">,
     debug = false
   ) {
-    this.initialAppUserId = initialAppUserId;
+    this.initialDistinctId = initialDistinctId;
     this.readOnly = readOnly;
     this.scheme = scheme;
     this.schema = schema;
@@ -155,7 +157,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     await this.runSideEffect("init", async () => {
       const initializedClient = await this.runEffect(
         this.unitializedClient.init<TSchema>({
-          initialAppUserId: this.initialAppUserId ?? undefined,
+          distinctId: this.initialDistinctId ?? undefined,
           schema: this.schema,
         }),
         "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT"
@@ -238,12 +240,16 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     return this.runEffect(this.initializedClient!.getCurrentCustomer(forceFetch), "FAILED_TO_GET_CURRENT_CUSTOMER");
   }
 
+  async getDistinctId() {
+    this.ensureInitialized();
+    return this.runEffect(this.initializedClient!.getDistinctId(), "FAILED_TO_GET_DISTINCT_ID");
+  }
+
   /**
-   * Identifies the user.
-   * @param appUserId - Id used to identify the user. Make sure it is unique and hard to guess.
+   * Identifies the user by switching the current distinct id.
    */
   async identify(
-    appUserId: string,
+    externalUserId: string,
     options: {
       email?: string;
       name?: string;
@@ -251,20 +257,27 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   ) {
     await this.runSideEffect("identify", async () => {
       this.ensureInitialized();
-      await this.runEffect(this.initializedClient!.identify(appUserId, options), "FAILED_TO_IDENTIFY");
+      await this.runEffect(
+        this.initializedClient!.identify(externalUserId, options),
+        "FAILED_TO_IDENTIFY"
+      );
     });
   }
 
   /**
-   * Signs out the user.
+   * Resets the current identity to a fresh anonymous distinct id.
    */
-  async signOut() {
-    await this.runSideEffect("signOut", async () => {
+  async reset() {
+    await this.runSideEffect("reset", async () => {
       this.ensureInitialized();
-      await this.runEffect(this.initializedClient!.signOut(), "FAILED_TO_SIGN_OUT");
+      await this.runEffect(this.initializedClient!.reset(), "FAILED_TO_RESET");
     });
   }
 
+  async signOut() {
+    return this.reset();
+  }
+
   /**
    * Returns feature flag evaluation results.
    * @param flagKeys - Optional array of specific flag keys to evaluate. If omitted, evaluates all flags.
diff --git a/libraries/react-native/src/constants.ts b/libraries/react-native/src/constants.ts
index e7446a7a6..271cfa2d8 100644
--- a/libraries/react-native/src/constants.ts
+++ b/libraries/react-native/src/constants.ts
@@ -1 +1 @@
-export const ANONYMOUS_USER_ID_PREFIX = "vh:anon:";
+export const ANONYMOUS_DISTINCT_ID_PREFIX = "vh:anon:";
diff --git a/libraries/react-native/src/core/analytics/constants.ts b/libraries/react-native/src/core/analytics/constants.ts
new file mode 100644
index 000000000..e69de29bb
diff --git a/libraries/react-native/src/core/analytics/service.ts b/libraries/react-native/src/core/analytics/service.ts
new file mode 100644
index 000000000..8e164ef84
--- /dev/null
+++ b/libraries/react-native/src/core/analytics/service.ts
@@ -0,0 +1,13 @@
+import { Effect, Layer, ServiceMap } from "effect";
+
+
+export class AnalyticsService extends ServiceMap.Service<AnalyticsService>()("voidhash-react-native/AnalyticsService", {
+  make: Effect.gen(function* () {
+
+    // const config = yield* Config;
+    // return { log: (msg: string) => Effect.log(`[${config.prefix}] ${msg}`) };
+  }),
+}) {
+  // Build the layer yourself from the make effect
+  static readonly layer = Layer.effect(this, this.make);
+}
\ No newline at end of file
diff --git a/libraries/react-native/src/core/analytics/types.ts b/libraries/react-native/src/core/analytics/types.ts
new file mode 100644
index 000000000..d49f313f5
--- /dev/null
+++ b/libraries/react-native/src/core/analytics/types.ts
@@ -0,0 +1,43 @@
+export interface QueuedAnalyticsEvent {
+  readonly attempts: number;
+  readonly availableAt: number;
+  readonly eventName: string;
+  readonly eventTimestamp: string;
+  readonly id: string;
+  readonly properties: Record<string, unknown>;
+}
+
+export interface AnalyticsIngestEvent {
+  /** Shared metadata attached to every event (for example app, device, or SDK context). */
+  readonly context: Record<string, unknown>;
+  /** Unique identifier for this event instance. */
+  readonly event_id: string;
+  /** Canonical event name used for analytics processing. */
+  readonly event_name: string;
+  /** Event timestamp in string form (typically ISO-8601). */
+  readonly event_ts: string;
+  /** Event-specific payload fields for this event name. */
+  readonly properties: Record<string, unknown>;
+  /** Identifier that groups events belonging to the same user session. */
+  readonly session_id: string;
+}
+
+export class AnalyticsSendFailure extends Error {
+  readonly retryAfterMs?: number;
+  readonly retryable: boolean;
+  readonly status?: number;
+
+  constructor(input: {
+    readonly message: string;
+    readonly retryable: boolean;
+    readonly retryAfterMs?: number;
+    readonly status?: number;
+    readonly cause?: unknown;
+  }) {
+    super(input.message, input.cause ? { cause: input.cause } : undefined);
+    this.name = "AnalyticsSendFailure";
+    this.retryAfterMs = input.retryAfterMs;
+    this.retryable = input.retryable;
+    this.status = input.status;
+  }
+}
diff --git a/libraries/react-native/src/core/analytics/utils.ts b/libraries/react-native/src/core/analytics/utils.ts
new file mode 100644
index 000000000..531b66a41
--- /dev/null
+++ b/libraries/react-native/src/core/analytics/utils.ts
@@ -0,0 +1,77 @@
+import { Effect } from "effect";
+import { SDK_VERSION } from "../constants";
+import { getNonce } from "../utils/crypto";
+import { QueuedAnalyticsEvent } from "./types";
+import { PlatformProvider } from "../platform/platform-provider";
+
+export const createQueuedAnalyticsEvent = (
+  eventName: string,
+  properties: Record<string, unknown>,
+): QueuedAnalyticsEvent => ({
+  attempts: 0,
+  availableAt: Date.now(),
+  eventName,
+  eventTimestamp: new Date().toISOString(),
+  id: getNonce(),
+  properties,
+});
+
+export const getAnalyticsStandardizedProperties = () => {
+  let cached: Record<string, unknown> | null = null;
+
+  const fallbackProperties = {
+    $app_build: null,
+    $app_name: null,
+    $app_version: null,
+    $bundle_id: null,
+    $device_brand: null,
+    $device_name: null,
+    $locale: null,
+    $platform: "unknown",
+    $platform_version: null,
+    $sdk: "react-native",
+    $sdk_version: SDK_VERSION,
+  } satisfies Record<string, unknown>;
+
+  return () =>
+    Effect.gen(function* () {
+      if (cached) return cached;
+      const platformProvider = yield* PlatformProvider;
+      const props = {
+        $app_build: platformProvider.appBuild ?? null,
+        $app_name: platformProvider.appName ?? platformProvider.bundleId ?? null,
+        $app_version: platformProvider.appVersion ?? null,
+        $bundle_id: platformProvider.bundleId ?? null,
+        $device_brand: platformProvider.deviceBrand ?? null,
+        $device_name: platformProvider.deviceName ?? null,
+        $locale: platformProvider.locales[0]?.languageTag ?? null,
+        $platform: platformProvider.platform ?? "unknown",
+        $platform_version: platformProvider.systemVersion ?? null,
+        $sdk: "react-native",
+        $sdk_version: SDK_VERSION,
+      };
+      cached = props;
+      return props;
+    }).pipe(
+      Effect.orElseSucceed(() => {
+        cached = fallbackProperties;
+        return fallbackProperties;
+      })
+    );
+};
+
+export const mapQueuedAnalyticsEventToIngestEvent = (
+  event: QueuedAnalyticsEvent,
+  standardizedProperties: Record<string, unknown>,
+  sessionId: string
+) => ({
+  context: {},
+  event_id: event.id,
+  event_name: event.eventName,
+  event_ts: event.eventTimestamp,
+  properties: {
+    ...event.properties,
+    ...standardizedProperties,
+  },
+  session_id: sessionId,
+});
diff --git a/libraries/react-native/src/core/identity/customer-attribute-manager.ts b/libraries/react-native/src/core/identity/customer-attribute-manager.ts
index 2f90b73c4..7ce1771b5 100644
--- a/libraries/react-native/src/core/identity/customer-attribute-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-attribute-manager.ts
@@ -13,37 +13,37 @@ const make = Effect.gen(function* effect() {
   const cacheManager = yield* CacheManager;
   const apiClient = yield* ApiClient;
 
-  const getCustomerAttributes = (appUserId: string) =>
+  const getCustomerAttributes = (distinctId: string) =>
     cacheManager
       .get<CustomerAttributes>(
-        generateCustomerAttributesCacheKey(appUserId)
+        generateCustomerAttributesCacheKey(distinctId)
       )
       .pipe(Effect.map((attributes) => attributes?.value ?? null));
 
   const setCustomerAttributes = (
-    appUserId: string,
+    distinctId: string,
     attributes: CustomerAttributes
   ) =>
     cacheManager.set(
-      generateCustomerAttributesCacheKey(appUserId),
+      generateCustomerAttributesCacheKey(distinctId),
       attributes
     );
 
-  const syncCustomerAttributes = (appUserId: string) =>
+  const syncCustomerAttributes = (distinctId: string) =>
     Effect.gen(function* syncCustomerAttributes() {
-      let attributes = yield* getCustomerAttributes(appUserId);
+      let attributes = yield* getCustomerAttributes(distinctId);
       if (!attributes) {
         attributes = {
           email: undefined,
           name: undefined,
         };
-        yield* setCustomerAttributes(appUserId, attributes);
+        yield* setCustomerAttributes(distinctId, attributes);
       }
       const commonHeaders = yield* getCommonSdkHeaders();
       yield* apiClient.sdk.syncCustomerAttributes({
         headers: {
           ...commonHeaders,
-          "x-app-user-id": appUserId,
+          "x-distinct-id": distinctId,
         },
         payload: {
           email: attributes.email,
@@ -52,8 +52,8 @@ const make = Effect.gen(function* effect() {
       });
     });
 
-  const generateCustomerAttributesCacheKey = (appUserId: string) =>
-    `customer-attributes:${appUserId}`;
+  const generateCustomerAttributesCacheKey = (distinctId: string) =>
+    `customer-attributes:${distinctId}`;
 
   return {
     getCustomerAttributes,
diff --git a/libraries/react-native/src/core/identity/customer-info-manager.ts b/libraries/react-native/src/core/identity/customer-info-manager.ts
index 4549db98a..b70ce1f6a 100644
--- a/libraries/react-native/src/core/identity/customer-info-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-info-manager.ts
@@ -11,51 +11,51 @@ const make = Effect.gen(function* effect() {
   const apiClient = yield* ApiClient;
   const eventBus = yield* EventBusProvider;
 
-  const generateCustomerCacheKey = (appUserId: string) =>
-    `customer:${appUserId}`;
+  const generateCustomerCacheKey = (distinctId: string) =>
+    `customer:${distinctId}`;
 
-  const getCustomerFromCache = (appUserId: string) =>
-    cacheManager.get<SdkCustomer>(generateCustomerCacheKey(appUserId));
+  const getCustomerFromCache = (distinctId: string) =>
+    cacheManager.get<SdkCustomer>(generateCustomerCacheKey(distinctId));
 
-  const cache = (appUserId: string, customer: SdkCustomer) =>
-    cacheManager.set(generateCustomerCacheKey(appUserId), customer, {
+  const cache = (distinctId: string, customer: SdkCustomer) =>
+    cacheManager.set(generateCustomerCacheKey(distinctId), customer, {
       ttl: 1000 * 60 * 60 * 24 * 2, // 2 days
       staleTime: 1000 * 60 * 5, // 5 minutes
     });
 
-  const resetCache = (appUserId: string) =>
-    cacheManager.delete(generateCustomerCacheKey(appUserId));
+  const resetCache = (distinctId: string) =>
+    cacheManager.delete(generateCustomerCacheKey(distinctId));
 
-  const getCustomerFromServerAndCache = (appUserId: string) =>
+  const getCustomerFromServerAndCache = (distinctId: string) =>
     Effect.gen(function* getCustomerFromServerAndCache() {
       const commonHeaders = yield* getCommonSdkHeaders();
       const result = yield* apiClient.sdk.getCustomer({
         headers: {
           ...commonHeaders,
-          "x-app-user-id": appUserId,
+          "x-distinct-id": distinctId,
         },
       });
       eventBus.emit("customer-fetched", result);
-      yield* cache(appUserId, result);
+      yield* cache(distinctId, result);
       return result;
     });
 
   const getCustomer = (
-    appUserId: string,
+    distinctId: string,
     cachePolicy: "cache" | "fetch" | "fetch-while-stale"
   ) =>
     Effect.gen(function* getCustomer() {
       if (cachePolicy === "cache") {
-        const customerFromCache = yield* getCustomerFromCache(appUserId);
+        const customerFromCache = yield* getCustomerFromCache(distinctId);
         return customerFromCache?.value ?? null;
       }
 
       if (cachePolicy === "fetch") {
-        return yield* getCustomerFromServerAndCache(appUserId);
+        return yield* getCustomerFromServerAndCache(distinctId);
       }
 
       // fetch-while-stale policy
-      const customerFromCache = yield* getCustomerFromCache(appUserId);
+      const customerFromCache = yield* getCustomerFromCache(distinctId);
       if (
         customerFromCache &&
         !customerFromCache.isStale &&
@@ -65,7 +65,7 @@ const make = Effect.gen(function* effect() {
         return customerFromCache.value;
       }
 
-      return yield* getCustomerFromServerAndCache(appUserId);
+      return yield* getCustomerFromServerAndCache(distinctId);
     });
 
   return {
diff --git a/libraries/react-native/src/core/identity/identity-manager.ts b/libraries/react-native/src/core/identity/identity-manager.ts
index f5e35c77b..d05e9e6e2 100644
--- a/libraries/react-native/src/core/identity/identity-manager.ts
+++ b/libraries/react-native/src/core/identity/identity-manager.ts
@@ -1,6 +1,6 @@
 import { Effect, Layer, ServiceMap } from "effect";
 
-import { ANONYMOUS_USER_ID_PREFIX } from "../../constants";
+import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../caching/cache-manager";
 import { EventBusProvider } from "../event-bus";
 import { ApiClient } from "../networking/api-client";
@@ -8,7 +8,7 @@ import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 import { CustomerAttributeManager } from "./customer-attribute-manager";
 import { CustomerInfoManager } from "./customer-info-manager";
 
-const CACHE_KEY = "appUserId";
+const CACHE_KEY = "distinctId";
 
 const make = Effect.gen(function* effect() {
   const cacheManager = yield* CacheManager;
@@ -18,89 +18,88 @@ const make = Effect.gen(function* effect() {
   const apiClient = yield* ApiClient;
 
   /**
-   * Returns the app user id. If no app user id is cached, a new anonymous user id is generated and cached.
-   * @returns The app user id.
+   * Returns the current distinct id. If none is cached, a new anonymous distinct id is generated and cached.
    */
-  const getAppUserId = () =>
-    Effect.gen(function* getAppUserId() {
-      const appUserId = yield* getAppUserIdFromCache();
-      if (appUserId) {
-        yield* Effect.logDebug(`Using cached app user id: ${appUserId}`);
-        return appUserId;
+  const getDistinctId = () =>
+    Effect.gen(function* getDistinctId() {
+      const distinctId = yield* getDistinctIdFromCache();
+      if (distinctId) {
+        yield* Effect.logDebug(`Using cached distinct id: ${distinctId}`);
+        return distinctId;
       }
 
-      const anonymousUserId = generateAnonymousUserId();
-      yield* setAppUserIdInCache(anonymousUserId);
-      return anonymousUserId;
+      const anonymousDistinctId = generateAnonymousDistinctId();
+      yield* setDistinctIdInCache(anonymousDistinctId);
+      return anonymousDistinctId;
     });
 
   /**
-   * Identifies the customer. It makes a request to the server to identify the customer and caches the app user id.
-   * @param appUserId - The app user id.
+   * Identifies the customer by switching the current distinct id.
    * @param options - The options.
    */
   const identify = (
-    appUserId: string,
+    distinctId: string,
     options: {
       email?: string;
       name?: string;
     }
   ) =>
     Effect.gen(function* identify() {
-      const currentAppUserId = yield* getAppUserId();
+      const currentDistinctId = yield* getDistinctId();
       yield* customerAttributeManager.syncCustomerAttributes(
-        currentAppUserId
+        currentDistinctId
       );
       const commonHeaders = yield* getCommonSdkHeaders();
       const identifyRequest = yield* apiClient.sdk.identify({
         headers: {
           ...commonHeaders,
-          "x-app-user-id": currentAppUserId,
+          "x-distinct-id": currentDistinctId,
         },
         payload: {
-          appUserId,
+          distinctId,
           email: options.email,
           name: options.name,
         },
       });
 
       yield* Effect.all([
-        setAppUserIdInCache(appUserId),
-        customerInfoManager.cache(appUserId, identifyRequest),
+        setDistinctIdInCache(distinctId),
+        customerInfoManager.cache(distinctId, identifyRequest),
       ]);
 
       eventBus.emit("customer-identified");
       eventBus.emit("customer-fetched", {
         ...identifyRequest,
-        appUserId,
+        distinctId,
       });
     });
 
-  const signOut = () =>
-    Effect.gen(function* signOut() {
-      const currentAppUserId = yield* getAppUserId();
+  const reset = () =>
+    Effect.gen(function* reset() {
+      const currentDistinctId = yield* getDistinctId();
       yield* customerAttributeManager.syncCustomerAttributes(
-        currentAppUserId
+        currentDistinctId
       );
       yield* cacheManager.clear();
       eventBus.emit("customer-signed-out");
     });
 
   // Helpers
-  const generateAnonymousUserId = () =>
-    `${ANONYMOUS_USER_ID_PREFIX}${Math.random().toString(36).slice(2, 15)}`;
-  const getAppUserIdFromCache = () =>
+  const generateAnonymousDistinctId = () =>
+    `${ANONYMOUS_DISTINCT_ID_PREFIX}${Math.random().toString(36).slice(2, 15)}`;
+  const getDistinctIdFromCache = () =>
     cacheManager
       .get<string>(CACHE_KEY)
-      .pipe(Effect.map((appUserId) => appUserId?.value ?? null));
-  const setAppUserIdInCache = (appUserId: string) =>
-    cacheManager.set(CACHE_KEY, appUserId);
+      .pipe(Effect.map((distinctId) => distinctId?.value ?? null));
+  const setDistinctIdInCache = (distinctId: string) =>
+    cacheManager.set(CACHE_KEY, distinctId);
 
   return {
-    getAppUserId,
-    getAppUserIdFromCache,
+    getDistinctId,
+    getDistinctIdFromCache,
     identify,
-    signOut,
+    reset,
+    signOut: reset,
   } as const;
 });
 
diff --git a/libraries/react-native/src/core/testing/client.ts b/libraries/react-native/src/core/testing/client.ts
index ff62f1a69..c75bc743a 100644
--- a/libraries/react-native/src/core/testing/client.ts
+++ b/libraries/react-native/src/core/testing/client.ts
@@ -16,7 +16,7 @@
 // import { TestPlatformProvider } from './platform-provider';
 
 // type CreateVoidhashTestClientOptions = {
-//   initialAppUserId?: string;
+//   initialDistinctId?: string;
 //   schema: VoidhashSchema;
 //   platformInfo?: Partial<PlatformInfo>;
 //   eventBus?: EventBus;
@@ -29,7 +29,7 @@
 // };
 
 // export function createVoidhashTestClient({
-//   initialAppUserId,
+//   initialDistinctId,
 //   schema,
 //   platformInfo,
 //   cacheManager: cacheManagerOverride,
@@ -72,7 +72,7 @@
 //     );
 //   const paymentAdapter = paymentAdapterOverride ?? new TestPaymentAdapter();
 //   const voidhashClient = new VoidhashClient(
-//     initialAppUserId ?? null,
+//     initialDistinctId ?? null,
 //     scheme,
 //     logger,
 //     cacheManager,
diff --git a/libraries/react-native/src/core/types.ts b/libraries/react-native/src/core/types.ts
index 1f454d49f..ffc902763 100644
--- a/libraries/react-native/src/core/types.ts
+++ b/libraries/react-native/src/core/types.ts
@@ -61,7 +61,7 @@ export interface CustomerResponse {
   customerId: string;
   name: null;
   email: null;
-  appUserId: null;
+  distinctId: null;
 }
 
 export interface PaywallProduct {
diff --git a/libraries/react-native/src/core/utils/crypto.ts b/libraries/react-native/src/core/utils/crypto.ts
new file mode 100644
index 000000000..c9675a33a
--- /dev/null
+++ b/libraries/react-native/src/core/utils/crypto.ts
@@ -0,0 +1,7 @@
+export const generateFallbackNonce = () =>
+  `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
+
+export const getNonce = () => {
+  const cryptoObject = globalThis.crypto as { randomUUID?: () => string } | undefined;
+  return cryptoObject?.randomUUID?.() ?? generateFallbackNonce();
+};
diff --git a/libraries/react-native/src/core/utils/get-common-sdk-headers.ts b/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
index d3a2c4a71..1ccfd36ac 100644
--- a/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
+++ b/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
@@ -15,7 +15,7 @@ const getNonce = () => {
 };
 
 export const getCommonSdkHeaders = (): Effect.Effect<
-  Omit<typeof SdkHeaders.Type, "x-app-user-id">,
+  Omit<typeof SdkHeaders.Type, "x-distinct-id">,
   never,
   PlatformProvider | SdkConfiguration | IdentityManager
 > =>
diff --git a/libraries/web/package.json b/libraries/web/package.json
index 19cbcf99d..39d3eb042 100644
--- a/libraries/web/package.json
+++ b/libraries/web/package.json
@@ -1,7 +1,22 @@
 {
   "name": "@voidhash/web",
   "version": "0.0.1-alpha.1",
+  "private": false,
   "description": "Browser-first Voidhash SDK.",
+  "keywords": [
+    "voidhash",
+    "sdk",
+    "web",
+    "browser",
+    "react",
+    "payments"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "MIT",
+  "author": "Voidhash (https://voidhash.com)",
   "repository": {
     "type": "git",
     "url": "https://github.com/voidhashcom/voidhash",
@@ -11,6 +26,14 @@
   "files": [
     "dist"
   ],
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "exports": {
     ".": {
       "import": {
@@ -40,9 +63,7 @@
     "test:watch": "vitest -c vitest.unit.mts"
   },
   "dependencies": {
-    "@effect/platform": "catalog:",
-    "@voidhash/api-spec": "workspace:*",
-    "effect": "catalog:"
+    "@voidhash/api-spec": "workspace:*"
   },
   "devDependencies": {
     "@types/react": "catalog:",
@@ -58,7 +79,9 @@
     "vitest": "^3.2.4"
   },
   "peerDependencies": {
-    "react": "*"
+    "react": "*",
+    "@effect/platform": "catalog:",
+    "effect": "catalog:"
   },
   "peerDependenciesMeta": {
     "react": {
diff --git a/libraries/web/src/client-effect.ts b/libraries/web/src/client-effect.ts
index 3b741c781..6ab648ae8 100644
--- a/libraries/web/src/client-effect.ts
+++ b/libraries/web/src/client-effect.ts
@@ -1,3 +1,6 @@
+import { Cause, Effect, Exit, Layer, ManagedRuntime, pipe } from "effect";
+import { FetchHttpClient, HttpClient } from "effect/unstable/http";
+
 import { VoidhashConfigurationError } from "./errors";
 import type {
   AnalyticsFlushResult,
@@ -6,24 +9,26 @@ import type {
   VoidhashTrackOptions,
   VoidhashTraits,
 } from "./types";
-import { createAnalyticsEvent } from "./core/analytics/analytics-context";
-import { AnalyticsDispatcher } from "./core/analytics/analytics-dispatcher";
-import { AnalyticsQueue } from "./core/analytics/analytics-queue";
+import { AnalyticsService } from "./core/analytics/analytics-service";
 import { CacheManager } from "./core/caching/cache-manager";
-import { LocalStorageCacheAdapter } from "./core/caching/adapters/local-storage-cache";
-import { MemoryCacheAdapter } from "./core/caching/adapters/memory-cache";
-import { EventBus } from "./core/event-bus";
+import { createBrowserCacheAdapterLayer } from "./core/caching/adapters/browser-cache-adapter";
+import { type EventBus, EventBusProvider } from "./core/event-bus";
 import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
-import { AnalyticsHttpClient } from "./core/http/analytics-client";
-import { SdkApiClient } from "./core/http/sdk-api-client";
 import { IdentityManager } from "./core/identity/identity-manager";
-import { BrowserPlatformProvider } from "./core/platform/browser-platform-provider";
+import { ApiClient } from "./core/networking/api-client";
+import { EventCaptureApiClient } from "./core/networking/event-capture-api-client";
+import {
+  BrowserPlatformProviderLayer,
+} from "./core/platform/platform-provider";
+import { SdkConfiguration } from "./core/sdk-configuration";
 
 const DEFAULT_BASE_URL = "https://api.voidhash.com";
 
 const assertPositiveInteger = (name: string, value: number) => {
   if (!Number.isInteger(value) || value < 1) {
-    throw new VoidhashConfigurationError(`${name} must be a positive integer.`);
+    throw new VoidhashConfigurationError(
+      `${name} must be a positive integer.`
+    );
   }
 };
 
@@ -81,240 +86,122 @@ export const resolveVoidhashConfig = (
       refreshOnVisibility: options.featureFlags?.refreshOnVisibility ?? true,
       ttlMs,
     },
-    initialAppUserId: options.initialAppUserId,
+    distinctId: options.distinctId,
     observerMode: options.observerMode ?? false,
     publishableKey: options.publishableKey,
   };
 };
 
-export class VoidhashClientEffect {
-  private readonly analyticsDispatcher: AnalyticsDispatcher;
-  private readonly analyticsHttpClient: AnalyticsHttpClient;
-  private readonly analyticsQueue: AnalyticsQueue;
-  private readonly cache: CacheManager;
-  private readonly eventBus: EventBus;
-  private readonly featureFlags: FeatureFlagService;
-  private readonly identityManager: IdentityManager;
-  private listeners: Array<() => void> = [];
-  private readonly platform: BrowserPlatformProvider;
-  private readonly sdkApiClient: SdkApiClient;
-
-  constructor(private readonly config: ResolvedVoidhashConfig) {
-    this.platform = new BrowserPlatformProvider();
-    this.eventBus = new EventBus();
-    this.cache = new CacheManager(
-      `@voidhash/web:${this.config.publishableKey}:${this.config.baseUrl}`,
-      new MemoryCacheAdapter(),
-      LocalStorageCacheAdapter.create()
-    );
-    this.sdkApiClient = new SdkApiClient(
-      this.config.baseUrl,
-      this.config.publishableKey,
-      this.config.observerMode,
-      this.platform
-    );
-    this.analyticsHttpClient = new AnalyticsHttpClient(
-      this.config.analytics.baseUrl,
-      this.config.publishableKey
-    );
-    this.identityManager = new IdentityManager(
-      this.cache,
-      this.sdkApiClient,
-      this.eventBus,
-      this.platform
-    );
-    this.featureFlags = new FeatureFlagService(
-      this.cache,
-      this.sdkApiClient,
-      this.eventBus,
-      this.config.featureFlags.ttlMs,
-      async () => this.identityManager.getAppUserId()
-    );
-    this.analyticsQueue = new AnalyticsQueue(
-      this.cache,
-      this.config.analytics.maxQueueSize
-    );
-    this.analyticsDispatcher = new AnalyticsDispatcher(
-      this.analyticsQueue,
-      this.analyticsHttpClient,
-      {
-        flushIntervalMs: this.config.analytics.flushIntervalMs,
-        maxBatchBytes: this.config.analytics.maxBatchBytes,
-        maxBatchSize: this.config.analytics.maxBatchSize,
-      },
-      this.eventBus
-    );
-  }
-
-  async destroy() {
-    this.detachBrowserListeners();
-    const flushResult = this.config.analytics.enabled
-      ? await this.analyticsDispatcher.flush({ force: true }).catch(() => null)
-      : null;
-    this.analyticsDispatcher.stop();
-    await this.sdkApiClient.destroy();
-    return flushResult;
-  }
-
-  getAppUserId() {
-    return this.identityManager.getAppUserId();
-  }
-
-  getEventBus() {
-    return this.eventBus;
-  }
-
-  getFeatureVariant(key: string) {
-    return this.featureFlags.getVariant(key);
-  }
-
-  isFeatureEnabled(key: string) {
-    return this.featureFlags.isEnabled(key);
-  }
-
-  async flushAnalytics(): Promise<AnalyticsFlushResult | null> {
-    if (!this.config.analytics.enabled) {
-      return null;
-    }
-
-    return this.analyticsDispatcher.flush({ force: true });
-  }
-
-  async getFeatureFlags(keys?: string[]) {
-    return this.featureFlags.getFeatureFlags(keys);
-  }
-
-  async identify(appUserId: string, traits?: VoidhashTraits) {
-    await this.identityManager.identify(appUserId, traits);
-    await this.featureFlags.clearCachedFlags();
-    await this.featureFlags.refreshTrackedKeySets();
-  }
-
-  async initialize() {
-    const appUserId = await this.identityManager.initialize(
-      this.config.initialAppUserId
-    );
-
-    if (this.config.analytics.enabled) {
-      this.analyticsDispatcher.start();
-    }
-
-    this.attachBrowserListeners();
-
-    if (this.config.featureFlags.prefetchOnInit) {
-      await this.featureFlags.getFeatureFlags();
-    }
-
-    this.eventBus.emit("initialized", { appUserId });
-  }
-
-  async page(
-    pageName?: string,
-    properties?: Record<string, unknown>,
-    options?: VoidhashTrackOptions
-  ) {
-    const pageProperties = pageName
-      ? {
-          ...properties,
-          page_name: pageName,
-        }
-      : properties;
-
-    await this.track("page", pageProperties, options);
-  }
-
-  async refreshFeatureFlags(keys?: string[]) {
-    return this.featureFlags.refreshFeatureFlags(keys);
-  }
-
-  async resetIdentity() {
-    await this.identityManager.resetIdentity();
-    await this.featureFlags.clearCachedFlags();
-    await this.featureFlags.refreshTrackedKeySets();
-  }
-
-  async track(
-    eventName: string,
-    properties?: Record<string, unknown>,
-    options?: VoidhashTrackOptions
-  ) {
-    if (!this.config.analytics.enabled) {
-      return;
-    }
-
-    const appUserId = await this.identityManager.getAppUserId();
-    if (!appUserId) {
-      return;
-    }
+export const CreateEffectRuntime = (
+  config: ResolvedVoidhashConfig,
+  eventBus: EventBus
+) =>
+  ManagedRuntime.make(
+    Layer.fresh(
+      pipe(
+        AnalyticsService.Default,
+        Layer.provideMerge(FeatureFlagService.Default),
+        Layer.provideMerge(IdentityManager.Default),
+        Layer.provideMerge(CacheManager.Default),
+        Layer.provideMerge(ApiClient.Default),
+        Layer.provideMerge(EventCaptureApiClient.Default),
+        Layer.provideMerge(
+          Layer.effect(
+            FetchHttpClient.Fetch,
+            Effect.sync(() => globalThis.fetch)
+          ).pipe(Layer.provideMerge(FetchHttpClient.layer))
+        ),
+        Layer.provideMerge(createBrowserCacheAdapterLayer()),
+        Layer.provideMerge(BrowserPlatformProviderLayer),
+        Layer.provideMerge(Layer.succeed(EventBusProvider, eventBus)),
+        Layer.provideMerge(Layer.succeed(SdkConfiguration, config))
+      )
+    )
+  );
 
-    const event = createAnalyticsEvent(
-      this.platform,
+// Effects that run against the runtime
+export const initializeEffect = (initialDistinctId?: string) =>
+  Effect.gen(function* initialize() {
+    const identityManager = yield* IdentityManager;
+    return yield* identityManager.initialize(initialDistinctId);
+  });
+
+export const identifyEffect = (
+  distinctId: string,
+  traits?: VoidhashTraits
+) =>
+  Effect.gen(function* identify() {
+    const identityManager = yield* IdentityManager;
+    const featureFlags = yield* FeatureFlagService;
+    yield* identityManager.identify(distinctId, traits);
+    yield* featureFlags.clearCachedFlags();
+    yield* featureFlags.refreshTrackedKeySets();
+  });
+
+export const resetEffect = () =>
+  Effect.gen(function* reset() {
+    const identityManager = yield* IdentityManager;
+    const featureFlags = yield* FeatureFlagService;
+    yield* identityManager.reset();
+    yield* featureFlags.clearCachedFlags();
+    yield* featureFlags.refreshTrackedKeySets();
+  });
+
+export const trackEffect = (
+  eventName: string,
+  properties?: Record<string, unknown>,
+  options?: VoidhashTrackOptions
+) =>
+  Effect.gen(function* track() {
+    const analyticsService = yield* AnalyticsService;
+    const queueLength = yield* analyticsService.enqueue(
       eventName,
       properties,
       options
     );
-    const droppedCount = await this.analyticsQueue.enqueue({
-      appUserId,
-      id: event.event_id,
-      payload: event,
-    });
-
-    if (droppedCount > 0) {
-      this.eventBus.emit("error", {
-        message: `Dropped ${droppedCount} analytics event(s) because the queue is full.`,
-        source: "analytics",
-      });
-    }
-
-    const queueSize = await this.analyticsQueue.size();
-    if (queueSize >= this.config.analytics.maxBatchSize) {
-      await this.analyticsDispatcher.flush();
-    }
-  }
-
-  private attachBrowserListeners() {
-    if (typeof window === "undefined") {
-      return;
-    }
-
-    const onlineHandler = () => {
-      if (this.config.featureFlags.refreshOnOnline) {
-        void this.featureFlags.refreshTrackedKeySets();
-      }
-    };
-    const pageHideHandler = () => {
-      if (this.config.analytics.enabled) {
-        void this.analyticsDispatcher.flush({ force: true, keepalive: true });
-      }
-    };
-    const visibilityHandler = () => {
-      if (
-        this.config.featureFlags.refreshOnVisibility &&
-        typeof document !== "undefined" &&
-        document.visibilityState === "visible"
-      ) {
-        void this.featureFlags.refreshTrackedKeySets();
-      }
-    };
-
-    window.addEventListener("online", onlineHandler);
-    window.addEventListener("pagehide", pageHideHandler);
-    if (typeof document !== "undefined") {
-      document.addEventListener("visibilitychange", visibilityHandler);
-    }
-
-    this.listeners.push(() => window.removeEventListener("online", onlineHandler));
-    this.listeners.push(() => window.removeEventListener("pagehide", pageHideHandler));
-    if (typeof document !== "undefined") {
-      this.listeners.push(() =>
-        document.removeEventListener("visibilitychange", visibilityHandler)
-      );
+    if (queueLength !== undefined && queueLength >= 20) {
+      yield* analyticsService.flush();
     }
-  }
-
-  private detachBrowserListeners() {
-    for (const cleanup of this.listeners.splice(0)) {
-      cleanup();
-    }
-  }
-}
+  });
+
+export const getFeatureFlagsEffect = (keys?: string[]) =>
+  Effect.gen(function* getFeatureFlags() {
+    const featureFlags = yield* FeatureFlagService;
+    return yield* featureFlags.getFeatureFlags(keys);
+  });
+
+export const refreshFeatureFlagsEffect = (keys?: string[]) =>
+  Effect.gen(function* refreshFeatureFlags() {
+    const featureFlags = yield* FeatureFlagService;
+    return yield* featureFlags.refreshFeatureFlags(keys);
+  });
+
+export const refreshTrackedKeySetsEffect = () =>
+  Effect.gen(function* refreshTrackedKeySets() {
+    const featureFlags = yield* FeatureFlagService;
+    yield* featureFlags.refreshTrackedKeySets();
+  });
+
+export const flushAnalyticsEffect = () =>
+  Effect.gen(function* flushAnalytics() {
+    const analyticsService = yield* AnalyticsService;
+    return yield* analyticsService.flush();
+  });
+
+export const startAnalyticsEffect = () =>
+  Effect.gen(function* startAnalytics() {
+    const analyticsService = yield* AnalyticsService;
+    analyticsService.start();
+  });
+
+export const stopAnalyticsEffect = () =>
+  Effect.gen(function* stopAnalytics() {
+    const analyticsService = yield* AnalyticsService;
+    analyticsService.stop();
+  });
+
+export const flushAnalyticsKeepaliveEffect = () =>
+  Effect.gen(function* flushKeepalive() {
+    const analyticsService = yield* AnalyticsService;
+    return yield* analyticsService.flush({ keepalive: true });
+  });
diff --git a/libraries/web/src/client.ts b/libraries/web/src/client.ts
index c149cdce6..a9e2d4858 100644
--- a/libraries/web/src/client.ts
+++ b/libraries/web/src/client.ts
@@ -1,5 +1,24 @@
-import { VoidhashDestroyedError, VoidhashNotInitializedError } from "./errors";
-import { VoidhashClientEffect, resolveVoidhashConfig } from "./client-effect";
+import { Cause, Effect, Exit } from "effect";
+
+import { VoidhashDestroyedError, VoidhashError, VoidhashNotInitializedError } from "./errors";
+import {
+  CreateEffectRuntime,
+  flushAnalyticsEffect,
+  flushAnalyticsKeepaliveEffect,
+  getFeatureFlagsEffect,
+  identifyEffect,
+  initializeEffect,
+  refreshFeatureFlagsEffect,
+  refreshTrackedKeySetsEffect,
+  resetEffect,
+  resolveVoidhashConfig,
+  startAnalyticsEffect,
+  stopAnalyticsEffect,
+  trackEffect,
+} from "./client-effect";
+import { EventBus } from "./core/event-bus";
+import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
+import { IdentityManager } from "./core/identity/identity-manager";
 import type {
   AnalyticsFlushResult,
   FeatureFlagsResult,
@@ -12,13 +31,104 @@ import type {
 
 type ClientState = "destroyed" | "idle" | "initializing" | "ready";
 
+const toError = (errorCode: string, cause: unknown) => {
+  const error =
+    cause instanceof Error ? cause : new Error(String(cause));
+  return new VoidhashError(`${errorCode}: ${error.message}`, {
+    cause: error,
+  });
+};
+
 export class VoidhashWebClient {
-  private readonly effect: VoidhashClientEffect;
+  private readonly eventBus: EventBus;
+  private readonly runtime: ReturnType<typeof CreateEffectRuntime>;
   private state: ClientState = "idle";
   private initializePromise: Promise<void> | null = null;
+  private listeners: Array<() => void> = [];
+  private inFlightFlush: Promise<AnalyticsFlushResult | null> | null = null;
+
+  // Service references for sync access (set during init)
+  private featureFlagService: InstanceType<typeof FeatureFlagService> | null = null;
+  private identityManagerService: InstanceType<typeof IdentityManager> | null = null;
 
   constructor(private readonly options: VoidhashClientOptions) {
-    this.effect = new VoidhashClientEffect(resolveVoidhashConfig(options));
+    const config = resolveVoidhashConfig(options);
+    this.eventBus = new EventBus();
+    this.runtime = CreateEffectRuntime(config, this.eventBus);
+  }
+
+  // biome-ignore lint/suspicious/noExplicitAny: Effect requires service type parameter
+  private async runEffect<T>(effect: Effect.Effect<T, unknown, any>, errorCode: string): Promise<T> {
+    const result = await this.runtime.runPromiseExit(effect);
+    if (Exit.isSuccess(result)) return result.value;
+    throw toError(errorCode, Cause.squash(result.cause));
+  }
+
+  async initialize() {
+    if (this.state === "destroyed") {
+      throw new VoidhashDestroyedError();
+    }
+
+    if (this.state === "ready") {
+      return;
+    }
+
+    if (this.initializePromise) {
+      return this.initializePromise;
+    }
+
+    this.state = "initializing";
+    const config = resolveVoidhashConfig(this.options);
+
+    this.initializePromise = (async () => {
+      const distinctId = await this.runEffect(
+        initializeEffect(config.distinctId),
+        "FAILED_TO_INITIALIZE"
+      );
+
+      // Grab service references for sync access
+      this.featureFlagService = await this.runEffect(
+        Effect.gen(function* () { return yield* FeatureFlagService; }),
+        "FAILED_TO_INITIALIZE"
+      );
+      this.identityManagerService = await this.runEffect(
+        Effect.gen(function* () { return yield* IdentityManager; }),
+        "FAILED_TO_INITIALIZE"
+      );
+
+      if (config.analytics.enabled) {
+        await this.runEffect(startAnalyticsEffect(), "FAILED_TO_START_ANALYTICS");
+
+        // Handle scheduled flush events from the analytics service timer
+        this.eventBus.on("analytics-flush-needed", () => {
+          void this.flushAnalyticsInternal().catch((error) => {
+            this.eventBus.emit("error", {
+              error,
+              message: "Scheduled analytics flush failed.",
+              source: "analytics",
+            });
+          });
+        });
+      }
+
+      this.attachBrowserListeners(config);
+
+      if (config.featureFlags.prefetchOnInit) {
+        await this.runEffect(
+          getFeatureFlagsEffect(),
+          "FAILED_TO_PREFETCH_FLAGS"
+        );
+      }
+
+      this.eventBus.emit("initialized", { distinctId });
+      this.state = "ready";
+    })();
+
+    try {
+      await this.initializePromise;
+    } finally {
+      this.initializePromise = null;
+    }
   }
 
   async destroy() {
@@ -30,76 +140,78 @@ export class VoidhashWebClient {
       await this.initializePromise;
     }
 
-    await this.effect.destroy();
+    this.detachBrowserListeners();
+
+    const config = resolveVoidhashConfig(this.options);
+    if (config.analytics.enabled) {
+      try {
+        await this.flushAnalyticsInternal();
+      } catch {
+        // Best effort
+      }
+      await this.runEffect(stopAnalyticsEffect(), "FAILED_TO_STOP_ANALYTICS");
+    }
+
+    await this.runtime.dispose();
     this.state = "destroyed";
   }
 
-  getAppUserId() {
+  getDistinctId() {
     if (this.state !== "ready") {
       return null;
     }
-
-    return this.effect.getAppUserId();
+    return this.identityManagerService?.getDistinctId() ?? null;
   }
 
-  async getFeatureFlags(keys?: string[]) {
+  isFeatureEnabled(key: string) {
     this.ensureReady();
-    return this.effect.getFeatureFlags(keys);
+    return this.featureFlagService!.isEnabled(key);
   }
 
   getFeatureVariant(key: string) {
     this.ensureReady();
-    return this.effect.getFeatureVariant(key);
+    return this.featureFlagService!.getVariant(key);
   }
 
-  async identify(appUserId: string, traits?: VoidhashTraits) {
+  async getFeatureFlags(keys?: string[]) {
     this.ensureReady();
-    await this.effect.identify(appUserId, traits);
+    return this.runEffect(
+      getFeatureFlagsEffect(keys),
+      "FAILED_TO_GET_FEATURE_FLAGS"
+    );
   }
 
-  async initialize() {
-    if (this.state === "destroyed") {
-      throw new VoidhashDestroyedError();
-    }
-
-    if (this.state === "ready") {
-      return;
-    }
-
-    if (this.initializePromise) {
-      return this.initializePromise;
-    }
-
-    this.state = "initializing";
-    this.initializePromise = this.effect
-      .initialize()
-      .then(() => {
-        this.state = "ready";
-      })
-      .finally(() => {
-        this.initializePromise = null;
-      });
-
-    return this.initializePromise;
+  async refreshFeatureFlags(keys?: string[]) {
+    this.ensureReady();
+    return this.runEffect(
+      refreshFeatureFlagsEffect(keys),
+      "FAILED_TO_REFRESH_FEATURE_FLAGS"
+    );
   }
 
-  isFeatureEnabled(key: string) {
+  async identify(externalUserId: string, traits?: VoidhashTraits) {
     this.ensureReady();
-    return this.effect.isFeatureEnabled(key);
+    await this.runEffect(
+      identifyEffect(externalUserId, traits),
+      "FAILED_TO_IDENTIFY"
+    );
   }
 
-  off<TEvent extends VoidhashEventName>(
-    eventName: TEvent,
-    handler: (payload: VoidhashEventMap[TEvent]) => void
-  ) {
-    this.effect.getEventBus().off(eventName, handler);
+  async reset() {
+    this.ensureReady();
+    await this.runEffect(resetEffect(), "FAILED_TO_RESET");
   }
 
-  on<TEvent extends VoidhashEventName>(
-    eventName: TEvent,
-    handler: (payload: VoidhashEventMap[TEvent]) => void
+  async track(
+    eventName: string,
+    properties?: Record<string, unknown>,
+    options?: VoidhashTrackOptions
   ) {
-    return this.effect.getEventBus().on(eventName, handler);
+    this.ensureReady();
+    await this.runEffect(
+      trackEffect(eventName, properties, options),
+      "FAILED_TO_TRACK"
+    );
   }
 
   async page(
@@ -108,31 +220,42 @@ export class VoidhashWebClient {
     options?: VoidhashTrackOptions
   ) {
     this.ensureReady();
-    await this.effect.page(pageName, properties, options);
+    const pageProperties = pageName
+      ? { ...properties, page_name: pageName }
+      : properties;
+    await this.track("page", pageProperties, options);
   }
 
-  async refreshFeatureFlags(keys?: string[]) {
+  async flushAnalytics(): Promise<AnalyticsFlushResult | null> {
     this.ensureReady();
-    return this.effect.refreshFeatureFlags(keys);
+    return this.flushAnalyticsInternal();
   }
 
-  async resetIdentity() {
-    this.ensureReady();
-    await this.effect.resetIdentity();
+  on<TEvent extends VoidhashEventName>(
+    eventName: TEvent,
+    handler: (payload: VoidhashEventMap[TEvent]) => void
+  ) {
+    return this.eventBus.on(eventName, handler);
   }
 
-  async track(
-    eventName: string,
-    properties?: Record<string, unknown>,
-    options?: VoidhashTrackOptions
+  off<TEvent extends VoidhashEventName>(
+    eventName: TEvent,
+    handler: (payload: VoidhashEventMap[TEvent]) => void
   ) {
-    this.ensureReady();
-    await this.effect.track(eventName, properties, options);
+    this.eventBus.off(eventName, handler);
   }
 
-  async flushAnalytics(): Promise<AnalyticsFlushResult | null> {
-    this.ensureReady();
-    return this.effect.flushAnalytics();
+  private async flushAnalyticsInternal(): Promise<AnalyticsFlushResult | null> {
+    if (this.inFlightFlush) return this.inFlightFlush;
+
+    this.inFlightFlush = this.runEffect(
+      flushAnalyticsEffect(),
+      "FAILED_TO_FLUSH_ANALYTICS"
+    ).finally(() => {
+      this.inFlightFlush = null;
+    });
+
+    return this.inFlightFlush;
   }
 
   private ensureReady() {
@@ -144,6 +267,65 @@ export class VoidhashWebClient {
       throw new VoidhashNotInitializedError();
     }
   }
+
+  private attachBrowserListeners(config: ReturnType<typeof resolveVoidhashConfig>) {
+    if (typeof window === "undefined") {
+      return;
+    }
+
+    const onlineHandler = () => {
+      if (config.featureFlags.refreshOnOnline) {
+        void this.runEffect(
+          refreshTrackedKeySetsEffect(),
+          "FAILED_TO_REFRESH_FLAGS"
+        ).catch(() => {});
+      }
+    };
+
+    const pageHideHandler = () => {
+      if (config.analytics.enabled) {
+        void this.runEffect(
+          flushAnalyticsKeepaliveEffect(),
+          "FAILED_TO_FLUSH"
+        ).catch(() => {});
+      }
+    };
+
+    const visibilityHandler = () => {
+      if (
+        config.featureFlags.refreshOnVisibility &&
+        typeof document !== "undefined" &&
+        document.visibilityState === "visible"
+      ) {
+        void this.runEffect(
+          refreshTrackedKeySetsEffect(),
+          "FAILED_TO_REFRESH_FLAGS"
+        ).catch(() => {});
+      }
+    };
+
+    window.addEventListener("online", onlineHandler);
+    window.addEventListener("pagehide", pageHideHandler);
+    this.listeners.push(() =>
+      window.removeEventListener("online", onlineHandler)
+    );
+    this.listeners.push(() =>
+      window.removeEventListener("pagehide", pageHideHandler)
+    );
+
+    if (typeof document !== "undefined") {
+      document.addEventListener("visibilitychange", visibilityHandler);
+      this.listeners.push(() =>
+        document.removeEventListener("visibilitychange", visibilityHandler)
+      );
+    }
+  }
+
+  private detachBrowserListeners() {
+    for (const cleanup of this.listeners.splice(0)) {
+      cleanup();
+    }
+  }
 }
 
 export const createVoidhashClient = (options: VoidhashClientOptions) =>
diff --git a/libraries/web/src/core/analytics/analytics-context.ts b/libraries/web/src/core/analytics/analytics-context.ts
index 8bc99b0bc..6ab6d4d63 100644
--- a/libraries/web/src/core/analytics/analytics-context.ts
+++ b/libraries/web/src/core/analytics/analytics-context.ts
@@ -1,10 +1,54 @@
+import type {
+  EventContextField,
+  EventPropertiesField,
+} from "@voidhash/api-spec/event-capture";
+
 import type { VoidhashTrackOptions } from "../../types";
 import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
 import type { AnalyticsRequestEvent } from "./contracts";
 
-const trimUndefined = (entries: Record<string, unknown>) =>
+const normalizeAnalyticsValue = (
+  value: unknown
+): EventContextField | EventPropertiesField | undefined => {
+  if (
+    value === null ||
+    typeof value === "string" ||
+    typeof value === "number" ||
+    typeof value === "boolean"
+  ) {
+    return value;
+  }
+
+  if (value instanceof Date) {
+    return value.toISOString();
+  }
+
+  if (Array.isArray(value)) {
+    return value
+      .map((entry) => normalizeAnalyticsValue(entry))
+      .filter((entry) => typeof entry !== "undefined");
+  }
+
+  if (typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).flatMap(([key, entry]) => {
+        const normalized = normalizeAnalyticsValue(entry);
+        return typeof normalized === "undefined" ? [] : [[key, normalized]];
+      })
+    );
+  }
+
+  return undefined;
+};
+
+const normalizeAnalyticsRecord = (
+  entries: Record<string, unknown>
+): Record<string, EventContextField | EventPropertiesField> =>
   Object.fromEntries(
-    Object.entries(entries).filter(([, value]) => typeof value !== "undefined")
+    Object.entries(entries).flatMap(([key, value]) => {
+      const normalized = normalizeAnalyticsValue(value);
+      return typeof normalized === "undefined" ? [] : [[key, normalized]];
+    })
   );
 
 const createEventId = (platform: BrowserPlatformProvider) =>
@@ -12,14 +56,16 @@ const createEventId = (platform: BrowserPlatformProvider) =>
 
 export const createAnalyticsEvent = (
   platform: BrowserPlatformProvider,
+  distinctId: string,
   eventName: string,
   properties?: Record<string, unknown>,
   options?: VoidhashTrackOptions
 ): AnalyticsRequestEvent => ({
-  context: platform.buildAnalyticsContext(),
-  event_id: options?.eventId ?? createEventId(platform),
-  event_name: eventName,
-  event_ts: options?.timestamp ?? new Date().toISOString(),
-  properties: trimUndefined(properties ?? {}),
+  context: normalizeAnalyticsRecord(platform.buildAnalyticsContext()),
+  distinct_id: distinctId,
+  event: eventName,
+  properties: normalizeAnalyticsRecord(properties ?? {}),
+  timestamp: options?.timestamp ? new Date(options.timestamp) : new Date(),
   session_id: options?.sessionId,
+  uuid: options?.eventId ?? createEventId(platform),
 });
diff --git a/libraries/web/src/core/analytics/analytics-dispatcher.ts b/libraries/web/src/core/analytics/analytics-dispatcher.ts
deleted file mode 100644
index f0243fdc1..000000000
--- a/libraries/web/src/core/analytics/analytics-dispatcher.ts
+++ /dev/null
@@ -1,186 +0,0 @@
-import { VoidhashAnalyticsError } from "../../errors";
-import type { EventBus } from "../event-bus";
-import { AnalyticsHttpClient } from "../http/analytics-client";
-import { AnalyticsQueue } from "./analytics-queue";
-import type {
-  AnalyticsRequestEvent,
-  AnalyticsSendBatchResult,
-  QueuedAnalyticsEvent,
-} from "./contracts";
-
-const MAX_INGEST_BATCH_SIZE = 100;
-const RETRYABLE_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
-
-const buildIdSet = (events: ReadonlyArray<QueuedAnalyticsEvent>) =>
-  new Set(events.map((event) => event.id));
-
-const getBackoffMs = (attempts: number) =>
-  Math.min(1000 * 2 ** Math.max(attempts - 1, 0), 30_000);
-
-export class AnalyticsDispatcher {
-  private flushIntervalId: ReturnType<typeof setInterval> | null = null;
-  private inFlightFlush: Promise<AnalyticsSendBatchResult | null> | null = null;
-
-  constructor(
-    private readonly queue: AnalyticsQueue,
-    private readonly client: AnalyticsHttpClient,
-    private readonly config: {
-      readonly flushIntervalMs: number;
-      readonly maxBatchBytes: number;
-      readonly maxBatchSize: number;
-    },
-    private readonly eventBus: EventBus
-  ) {}
-
-  start() {
-    if (this.flushIntervalId) {
-      return;
-    }
-
-    this.flushIntervalId = setInterval(() => {
-      void this.flush().catch((error) => {
-        this.eventBus.emit("error", {
-          error,
-          message: "Scheduled analytics flush failed.",
-          source: "analytics",
-        });
-      });
-    }, this.config.flushIntervalMs);
-  }
-
-  stop() {
-    if (this.flushIntervalId) {
-      clearInterval(this.flushIntervalId);
-      this.flushIntervalId = null;
-    }
-  }
-
-  async flush(options?: { force?: boolean; keepalive?: boolean }) {
-    if (this.inFlightFlush) {
-      return this.inFlightFlush;
-    }
-
-    this.inFlightFlush = this.flushInternal(options).finally(() => {
-      this.inFlightFlush = null;
-    });
-
-    return this.inFlightFlush;
-  }
-
-  private async flushInternal(options?: { force?: boolean; keepalive?: boolean }) {
-    const batch = await this.queue.peekBatch({
-      ignoreAvailability: options?.force,
-      maxBatchBytes: this.config.maxBatchBytes,
-      maxBatchSize: Math.min(this.config.maxBatchSize, MAX_INGEST_BATCH_SIZE),
-    });
-
-    if (batch.length === 0) {
-      return null;
-    }
-
-    return this.sendBatch(batch, options);
-  }
-
-  private async sendBatch(
-    batch: ReadonlyArray<QueuedAnalyticsEvent>,
-    options?: { keepalive?: boolean }
-  ): Promise<AnalyticsSendBatchResult | null> {
-    if (batch.length === 0) {
-      return null;
-    }
-
-    const distinctId = batch[0]?.appUserId;
-    if (!distinctId) {
-      return null;
-    }
-
-    try {
-      const result = await this.client.send(
-        distinctId,
-        { events: batch.map((entry) => entry.payload as AnalyticsRequestEvent) },
-        options
-      );
-      const ids = buildIdSet(batch);
-
-      if (result.status === 202) {
-        await this.queue.drop(ids);
-        const response = {
-          accepted: Number(result.data?.accepted ?? batch.length),
-          rejected: Number(result.data?.rejected ?? 0),
-          requestId:
-            typeof result.data?.request_id === "string"
-              ? result.data.request_id
-              : undefined,
-        };
-
-        this.eventBus.emit("analytics-flushed", response);
-        if (response.rejected > 0) {
-          this.eventBus.emit("analytics-partial-rejection", response);
-        }
-
-        return response;
-      }
-
-      if (result.status === 413) {
-        return this.handlePayloadTooLarge(batch, options);
-      }
-
-      if (RETRYABLE_STATUS_CODES.has(result.status)) {
-        await this.queue.postpone(
-          ids,
-          Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
-        );
-        return null;
-      }
-
-      await this.queue.drop(ids);
-      this.eventBus.emit("error", {
-        message: `Dropping analytics batch after non-retryable ${result.status} response.`,
-        source: "analytics",
-      });
-      return null;
-    } catch (error) {
-      if (error instanceof VoidhashAnalyticsError) {
-        const ids = buildIdSet(batch);
-        await this.queue.postpone(
-          ids,
-          Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
-        );
-        return null;
-      }
-
-      throw error;
-    }
-  }
-
-  private async handlePayloadTooLarge(
-    batch: ReadonlyArray<QueuedAnalyticsEvent>,
-    options?: { keepalive?: boolean }
-  ): Promise<AnalyticsSendBatchResult | null> {
-    if (batch.length === 1) {
-      await this.queue.drop(buildIdSet(batch));
-      this.eventBus.emit("error", {
-        message: "Dropping analytics event after 413 response.",
-        source: "analytics",
-      });
-      return {
-        accepted: 0,
-        rejected: 1,
-      };
-    }
-
-    const midpoint = Math.ceil(batch.length / 2);
-    const first = await this.sendBatch(batch.slice(0, midpoint), options);
-    const second = await this.sendBatch(batch.slice(midpoint), options);
-
-    if (!first && !second) {
-      return null;
-    }
-
-    return {
-      accepted: (first?.accepted ?? 0) + (second?.accepted ?? 0),
-      rejected: (first?.rejected ?? 0) + (second?.rejected ?? 0),
-      requestId: second?.requestId ?? first?.requestId,
-    };
-  }
-}
diff --git a/libraries/web/src/core/analytics/analytics-queue.ts b/libraries/web/src/core/analytics/analytics-queue.ts
deleted file mode 100644
index 1919a5e0e..000000000
--- a/libraries/web/src/core/analytics/analytics-queue.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-import type { CacheManager } from "../caching/cache-manager";
-import type { QueuedAnalyticsEvent } from "./contracts";
-
-const QUEUE_KEY = "analytics:queue";
-
-const estimateEventBytes = (event: QueuedAnalyticsEvent) =>
-  new TextEncoder().encode(JSON.stringify(event.payload)).byteLength;
-
-export class AnalyticsQueue {
-  private events: QueuedAnalyticsEvent[] = [];
-  private isLoaded = false;
-
-  constructor(
-    private readonly cache: CacheManager,
-    private readonly maxQueueSize: number
-  ) {}
-
-  async drop(ids: ReadonlySet<string>) {
-    await this.load();
-    this.events = this.events.filter((event) => !ids.has(event.id));
-    await this.persist();
-  }
-
-  async enqueue(event: Omit<QueuedAnalyticsEvent, "attempts" | "availableAt">) {
-    await this.load();
-    this.events.push({
-      ...event,
-      attempts: 0,
-      availableAt: Date.now(),
-    });
-    const droppedCount = Math.max(this.events.length - this.maxQueueSize, 0);
-    if (droppedCount > 0) {
-      this.events.splice(0, droppedCount);
-    }
-    await this.persist();
-    return droppedCount;
-  }
-
-  async peekBatch(input: {
-    ignoreAvailability?: boolean;
-    maxBatchBytes: number;
-    maxBatchSize: number;
-    now?: number;
-  }) {
-    await this.load();
-    const now = input.now ?? Date.now();
-    const dueEvents = this.events.filter((event) =>
-      input.ignoreAvailability ? true : event.availableAt <= now
-    );
-
-    if (dueEvents.length === 0) {
-      return [];
-    }
-
-    const firstAppUserId = dueEvents[0]?.appUserId;
-    const selected: QueuedAnalyticsEvent[] = [];
-    let totalBytes = 0;
-
-    for (const event of dueEvents) {
-      if (event.appUserId !== firstAppUserId) {
-        break;
-      }
-
-      const nextBytes = estimateEventBytes(event);
-      if (selected.length > 0 && totalBytes + nextBytes > input.maxBatchBytes) {
-        break;
-      }
-
-      selected.push(event);
-      totalBytes += nextBytes;
-
-      if (selected.length >= input.maxBatchSize) {
-        break;
-      }
-    }
-
-    return selected;
-  }
-
-  async postpone(ids: ReadonlySet<string>, nextAvailableAt: number) {
-    await this.load();
-    this.events = this.events.map((event) =>
-      ids.has(event.id)
-        ? {
-            ...event,
-            attempts: event.attempts + 1,
-            availableAt: nextAvailableAt,
-          }
-        : event
-    );
-    await this.persist();
-  }
-
-  async size() {
-    await this.load();
-    return this.events.length;
-  }
-
-  private async load() {
-    if (this.isLoaded) {
-      return;
-    }
-
-    const cached = await this.cache.get<QueuedAnalyticsEvent[]>(QUEUE_KEY);
-    this.events = cached?.value ?? [];
-    this.isLoaded = true;
-  }
-
-  private async persist() {
-    await this.cache.set(QUEUE_KEY, this.events);
-  }
-}
diff --git a/libraries/web/src/core/analytics/analytics-service.ts b/libraries/web/src/core/analytics/analytics-service.ts
new file mode 100644
index 000000000..dfbff832c
--- /dev/null
+++ b/libraries/web/src/core/analytics/analytics-service.ts
@@ -0,0 +1,398 @@
+import { Effect, Layer, Schema, ServiceMap } from "effect";
+import { CaptureAcceptedResponse } from "@voidhash/api-spec/event-capture";
+
+import type { AnalyticsFlushResult } from "../../types";
+import { CacheManager } from "../caching/cache-manager";
+import { EventBusProvider } from "../event-bus";
+import { IdentityManager } from "../identity/identity-manager";
+import { PlatformProvider } from "../platform/platform-provider";
+import { SdkConfiguration } from "../sdk-configuration";
+import { createAnalyticsEvent } from "./analytics-context";
+import type {
+  AnalyticsRequestEvent,
+  QueuedAnalyticsEvent,
+} from "./contracts";
+
+const QUEUE_KEY = "analytics:queue";
+const MAX_INGEST_BATCH_SIZE = 100;
+const RETRYABLE_ERROR_CODES = new Set([
+  "rate_limited",
+  "dependency_unavailable",
+  "internal_error",
+]);
+const getBackoffMs = (attempts: number) =>
+  Math.min(1000 * 2 ** Math.max(attempts - 1, 0), 30_000);
+
+const estimateEventBytes = (event: QueuedAnalyticsEvent) =>
+  new TextEncoder().encode(JSON.stringify(event.payload)).byteLength;
+
+const buildIdSet = (events: ReadonlyArray<QueuedAnalyticsEvent>) =>
+  new Set(events.map((event) => event.id));
+
+const extractCaptureError = (input: {
+  data?: unknown;
+  status: number;
+}): { code: string; retry_after_ms?: number } | null => {
+  if (input.data && typeof input.data === "object") {
+    const err = input.data as Record<string, unknown>;
+    if (typeof err.code === "string") {
+      return {
+        code: err.code,
+        retry_after_ms:
+          typeof err.retry_after_ms === "number" ? err.retry_after_ms : undefined,
+      };
+    }
+  }
+
+  switch (input.status) {
+    case 400:
+      return { code: "invalid_request" };
+    case 401:
+      return { code: "unauthorized" };
+    case 413:
+      return { code: "payload_too_large" };
+    case 429:
+      return { code: "rate_limited" };
+    case 500:
+      return { code: "internal_error" };
+    case 503:
+      return { code: "dependency_unavailable" };
+    default:
+      return null;
+  }
+};
+
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const config = yield* SdkConfiguration;
+  const eventBus = yield* EventBusProvider;
+  const identityManager = yield* IdentityManager;
+  const platform = yield* PlatformProvider;
+
+  // Mutable queue state
+  let events: QueuedAnalyticsEvent[] = [];
+  let isLoaded = false;
+  let flushIntervalId: ReturnType<typeof setInterval> | null = null;
+
+  // Queue persistence
+  const loadQueue = () =>
+    Effect.gen(function* loadQueue() {
+      if (isLoaded) return;
+      const cached =
+        yield* cacheManager.get<QueuedAnalyticsEvent[]>(QUEUE_KEY);
+      events = cached?.value ?? [];
+      isLoaded = true;
+    });
+
+  const persistQueue = () => cacheManager.set(QUEUE_KEY, events);
+
+  // Queue operations
+  const dropEvents = (ids: ReadonlySet<string>) => {
+    events = events.filter((event) => !ids.has(event.id));
+  };
+
+  const postponeEvents = (
+    ids: ReadonlySet<string>,
+    nextAvailableAt: number
+  ) => {
+    events = events.map((event) =>
+      ids.has(event.id)
+        ? { ...event, attempts: event.attempts + 1, availableAt: nextAvailableAt }
+        : event
+    );
+  };
+
+  const peekBatch = (input: {
+    maxBatchBytes: number;
+    maxBatchSize: number;
+  }) => {
+    const now = Date.now();
+    const dueEvents = events.filter((event) => event.availableAt <= now);
+    if (dueEvents.length === 0) return [];
+
+    const firstDistinctId = dueEvents[0]?.payload.distinct_id;
+    const selected: QueuedAnalyticsEvent[] = [];
+    let totalBytes = 0;
+
+    for (const event of dueEvents) {
+      if (event.payload.distinct_id !== firstDistinctId) break;
+      const nextBytes = estimateEventBytes(event);
+      if (selected.length > 0 && totalBytes + nextBytes > input.maxBatchBytes) break;
+      selected.push(event);
+      totalBytes += nextBytes;
+      if (selected.length >= input.maxBatchSize) break;
+    }
+
+    return selected;
+  };
+
+  const sendBatchViaClient = (
+    batchEvents: ReadonlyArray<AnalyticsRequestEvent>
+  ) =>
+    Effect.tryPromise({
+      try: async () => {
+        const response = await fetch(new URL("/batch", config.analytics.baseUrl), {
+          body: JSON.stringify({
+            events: batchEvents,
+            sent_at: new Date().toISOString(),
+            token: config.publishableKey,
+          }),
+          headers: { "content-type": "application/json" },
+          method: "POST",
+        });
+
+        let data: unknown;
+        try {
+          data = await response.json();
+        } catch {
+          data = undefined;
+        }
+
+        return {
+          data,
+          status: response.status,
+        };
+      },
+      catch: () => ({ _tag: "AnalyticsSendFailure" as const }),
+    });
+
+  // Raw fetch fallback — only used for keepalive on pagehide
+  const sendBatchKeepalive = (
+    batchEvents: ReadonlyArray<AnalyticsRequestEvent>
+  ) =>
+    Effect.tryPromise({
+      try: () =>
+        fetch(new URL("/batch", config.analytics.baseUrl), {
+          body: JSON.stringify({
+            events: batchEvents,
+            sent_at: new Date().toISOString(),
+            token: config.publishableKey,
+          }),
+          headers: { "content-type": "application/json" },
+          keepalive: true,
+          method: "POST",
+        }),
+      catch: () => ({ _tag: "KeepaliveSendFailure" as const }),
+    });
+
+  // Core flush logic
+  const sendBatch = (
+    batch: ReadonlyArray<QueuedAnalyticsEvent>,
+    options?: { keepalive?: boolean }
+  ): Effect.Effect<AnalyticsFlushResult | null> =>
+    Effect.gen(function* sendBatchEffect() {
+      if (batch.length === 0) return null;
+
+      const distinctId = batch[0]?.payload.distinct_id;
+      if (!distinctId) return null;
+
+      const batchPayloads = batch.map((entry) => entry.payload);
+      const ids = buildIdSet(batch);
+
+      // keepalive sends use raw fetch (best-effort, fire-and-forget)
+      if (options?.keepalive) {
+        const result = yield* Effect.exit(
+          sendBatchKeepalive(batchPayloads)
+        );
+        if (result._tag === "Success") {
+          dropEvents(ids);
+          yield* persistQueue();
+        }
+        return null;
+      }
+
+      const result = yield* Effect.exit(
+        sendBatchViaClient(batchPayloads)
+      );
+
+      if (result._tag === "Success") {
+        if (result.value.status === 202) {
+          const decodedResponse = yield* Effect.exit(
+            Schema.decodeUnknownEffect(CaptureAcceptedResponse)(result.value.data)
+          );
+          if (decodedResponse._tag !== "Success") {
+            postponeEvents(
+              ids,
+              Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
+            );
+            yield* persistQueue();
+            return null;
+          }
+
+          dropEvents(ids);
+          yield* persistQueue();
+          const response = decodedResponse.value;
+          const flushResult: AnalyticsFlushResult = {
+            accepted: response.accepted,
+            rejected: response.rejected,
+          };
+          eventBus.emit("analytics-flushed", flushResult);
+          if (flushResult.rejected > 0) {
+            eventBus.emit("analytics-partial-rejection", flushResult);
+          }
+          return flushResult;
+        }
+
+        const error = extractCaptureError(result.value);
+
+        if (error?.code === "payload_too_large") {
+          return yield* handlePayloadTooLarge(batch, options);
+        }
+
+        if (error && RETRYABLE_ERROR_CODES.has(error.code)) {
+          postponeEvents(
+            ids,
+            Date.now() +
+              (error.retry_after_ms ?? getBackoffMs((batch[0]?.attempts ?? 0) + 1))
+          );
+          yield* persistQueue();
+          return null;
+        }
+
+        if (error) {
+          dropEvents(ids);
+          yield* persistQueue();
+          eventBus.emit("error", {
+            message: `Dropping analytics batch after non-retryable ${error.code} response.`,
+            source: "analytics",
+          });
+          return null;
+        }
+      }
+
+      postponeEvents(
+        ids,
+        Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
+      );
+      yield* persistQueue();
+      return null;
+    });
+
+  const handlePayloadTooLarge = (
+    batch: ReadonlyArray<QueuedAnalyticsEvent>,
+    options?: { keepalive?: boolean }
+  ): Effect.Effect<AnalyticsFlushResult | null> =>
+    Effect.gen(function* handlePayloadTooLargeEffect() {
+      if (batch.length === 1) {
+        dropEvents(buildIdSet(batch));
+        yield* persistQueue();
+        eventBus.emit("error", {
+          message: "Dropping analytics event after 413 response.",
+          source: "analytics",
+        });
+        return { accepted: 0, rejected: 1 } as AnalyticsFlushResult;
+      }
+
+      const midpoint = Math.ceil(batch.length / 2);
+      const first = yield* sendBatch(batch.slice(0, midpoint), options);
+      const second = yield* sendBatch(batch.slice(midpoint), options);
+
+      if (!first && !second) return null;
+
+      return {
+        accepted: (first?.accepted ?? 0) + (second?.accepted ?? 0),
+        rejected: (first?.rejected ?? 0) + (second?.rejected ?? 0),
+        requestId: second?.requestId ?? first?.requestId,
+      } as AnalyticsFlushResult;
+    });
+
+  // Public API
+  const enqueue = (
+    eventName: string,
+    properties?: Record<string, unknown>,
+    options?: {
+      eventId?: string;
+      sessionId?: string;
+      timestamp?: string;
+    }
+  ) =>
+    Effect.gen(function* enqueue() {
+      yield* loadQueue();
+
+      const distinctId = identityManager.getDistinctId();
+      if (!distinctId) return;
+
+      const event = createAnalyticsEvent(
+        platform,
+        distinctId,
+        eventName,
+        properties,
+        options
+      );
+
+      events.push({
+        attempts: 0,
+        availableAt: Date.now(),
+        id: event.uuid,
+        payload: event,
+      });
+
+      const droppedCount = Math.max(
+        events.length - config.analytics.maxQueueSize,
+        0
+      );
+      if (droppedCount > 0) {
+        events.splice(0, droppedCount);
+        eventBus.emit("error", {
+          message: `Dropped ${droppedCount} analytics event(s) because the queue is full.`,
+          source: "analytics",
+        });
+      }
+
+      yield* persistQueue();
+      return events.length;
+    });
+
+  const flush = (options?: {
+    keepalive?: boolean;
+  }): Effect.Effect<AnalyticsFlushResult | null> =>
+    Effect.gen(function* flushEffect() {
+      yield* loadQueue();
+      const batch = peekBatch({
+        maxBatchBytes: config.analytics.maxBatchBytes,
+        maxBatchSize: Math.min(
+          config.analytics.maxBatchSize,
+          MAX_INGEST_BATCH_SIZE
+        ),
+      });
+      if (batch.length === 0) return null;
+      return yield* sendBatch(batch, options);
+    });
+
+  const start = () => {
+    if (flushIntervalId) return;
+    flushIntervalId = setInterval(() => {
+      // Scheduled flushes need to be run through the runtime externally.
+      // The eventBus signals that a flush is needed; the client handles execution.
+      eventBus.emit("analytics-flush-needed", undefined);
+    }, config.analytics.flushIntervalMs);
+  };
+
+  const stop = () => {
+    if (flushIntervalId) {
+      clearInterval(flushIntervalId);
+      flushIntervalId = null;
+    }
+  };
+
+  const getQueueLength = () =>
+    Effect.gen(function* getQueueLength() {
+      yield* loadQueue();
+      return events.length;
+    });
+
+  return {
+    enqueue,
+    flush,
+    getQueueLength,
+    start,
+    stop,
+  } as const;
+});
+
+export class AnalyticsService extends ServiceMap.Service<
+  AnalyticsService,
+  Effect.Success<typeof make>
+>()("web-voidhash/AnalyticsService") {
+  static Default = Layer.effect(AnalyticsService, make);
+}
diff --git a/libraries/web/src/core/analytics/contracts.ts b/libraries/web/src/core/analytics/contracts.ts
index ad392a1af..f799958e7 100644
--- a/libraries/web/src/core/analytics/contracts.ts
+++ b/libraries/web/src/core/analytics/contracts.ts
@@ -1,20 +1,14 @@
-import type { AnalyticsFlushResult } from "../../types";
+import {
+  CaptureBatchRequest,
+  CaptureEvent,
+} from "@voidhash/api-spec/event-capture";
 
-export interface AnalyticsRequestEvent {
-  readonly context?: Record<string, unknown>;
-  readonly event_id: string;
-  readonly event_name: string;
-  readonly event_ts: string;
-  readonly properties?: Record<string, unknown>;
-  readonly session_id?: string;
-}
+import type { AnalyticsFlushResult } from "../../types";
 
-export interface AnalyticsBatchRequest {
-  readonly events: ReadonlyArray<AnalyticsRequestEvent>;
-}
+export type AnalyticsRequestEvent = typeof CaptureEvent.Type;
+export type AnalyticsBatchRequest = typeof CaptureBatchRequest.Type;
 
 export interface QueuedAnalyticsEvent {
-  readonly appUserId: string;
   readonly attempts: number;
   readonly availableAt: number;
   readonly id: string;
@@ -23,6 +17,7 @@ export interface QueuedAnalyticsEvent {
 
 export interface AnalyticsTransportResult {
   readonly data?: Record<string, unknown>;
+  readonly retryAfterMs?: number;
   readonly status: number;
 }
 
diff --git a/libraries/web/src/core/caching/adapters/browser-cache-adapter.ts b/libraries/web/src/core/caching/adapters/browser-cache-adapter.ts
new file mode 100644
index 000000000..d71544f2f
--- /dev/null
+++ b/libraries/web/src/core/caching/adapters/browser-cache-adapter.ts
@@ -0,0 +1,104 @@
+import { Effect, Layer } from "effect";
+
+import { CacheAdapter } from "../cache-adapter";
+
+/**
+ * Dual-layer (memory + localStorage) browser cache adapter.
+ * Writes go to both layers (write-through). Reads check memory first, fall back to localStorage.
+ * Gracefully degrades when localStorage is unavailable.
+ */
+const makeBrowserCacheAdapter = () => {
+  const memoryStore = new Map<string, string>();
+  const localStorage = detectLocalStorage();
+
+  return {
+    get: (key: string) =>
+      Effect.sync(() => {
+        const memoryValue = memoryStore.get(key);
+        if (memoryValue !== undefined) {
+          return memoryValue;
+        }
+
+        if (localStorage) {
+          try {
+            const persistedValue = localStorage.getItem(key);
+            if (persistedValue !== null) {
+              memoryStore.set(key, persistedValue);
+              return persistedValue;
+            }
+          } catch {
+            // Graceful degradation
+          }
+        }
+
+        return null;
+      }),
+
+    set: (key: string, value: string) =>
+      Effect.sync(() => {
+        memoryStore.set(key, value);
+
+        if (localStorage) {
+          try {
+            localStorage.setItem(key, value);
+          } catch {
+            // Graceful degradation — storage may be full or unavailable
+          }
+        }
+      }),
+
+    delete: (key: string) =>
+      Effect.sync(() => {
+        memoryStore.delete(key);
+
+        if (localStorage) {
+          try {
+            localStorage.removeItem(key);
+          } catch {
+            // Graceful degradation
+          }
+        }
+      }),
+
+    keys: () =>
+      Effect.sync(() => {
+        const keySet = new Set<string>(memoryStore.keys());
+
+        if (localStorage) {
+          try {
+            for (let i = 0; i < localStorage.length; i++) {
+              const key = localStorage.key(i);
+              if (key !== null) {
+                keySet.add(key);
+              }
+            }
+          } catch {
+            // Graceful degradation
+          }
+        }
+
+        return [...keySet] as ReadonlyArray<string>;
+      }),
+  };
+};
+
+const detectLocalStorage = (): Storage | null => {
+  if (typeof window === "undefined" || !window.localStorage) {
+    return null;
+  }
+
+  try {
+    const probeKey = "__voidhash_probe__";
+    window.localStorage.setItem(probeKey, "1");
+    window.localStorage.removeItem(probeKey);
+    return window.localStorage;
+  } catch {
+    return null;
+  }
+};
+
+export const createBrowserCacheAdapterLayer = () =>
+  Layer.effect(
+    CacheAdapter,
+    Effect.sync(() => makeBrowserCacheAdapter())
+  );
diff --git a/libraries/web/src/core/caching/adapters/local-storage-cache.ts b/libraries/web/src/core/caching/adapters/local-storage-cache.ts
deleted file mode 100644
index 03345bc66..000000000
--- a/libraries/web/src/core/caching/adapters/local-storage-cache.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import { VoidhashStorageError } from "../../../errors";
-import type { CacheAdapter } from "../cache-manager";
-
-export class LocalStorageCacheAdapter implements CacheAdapter {
-  static create() {
-    if (typeof window === "undefined" || !window.localStorage) {
-      return null;
-    }
-
-    try {
-      const probeKey = "__voidhash_probe__";
-      window.localStorage.setItem(probeKey, "1");
-      window.localStorage.removeItem(probeKey);
-      return new LocalStorageCacheAdapter(window.localStorage);
-    } catch {
-      return null;
-    }
-  }
-
-  constructor(private readonly storage: Storage) {}
-
-  async delete(key: string) {
-    try {
-      this.storage.removeItem(key);
-    } catch (error) {
-      throw new VoidhashStorageError("Failed to delete from localStorage.", {
-        cause: error,
-      });
-    }
-  }
-
-  async get(key: string) {
-    try {
-      return this.storage.getItem(key);
-    } catch (error) {
-      throw new VoidhashStorageError("Failed to read from localStorage.", {
-        cause: error,
-      });
-    }
-  }
-
-  async keys() {
-    try {
-      return Array.from({ length: this.storage.length }, (_, index) =>
-        this.storage.key(index)
-      ).filter((key): key is string => typeof key === "string");
-    } catch (error) {
-      throw new VoidhashStorageError("Failed to enumerate localStorage.", {
-        cause: error,
-      });
-    }
-  }
-
-  async set(key: string, value: string) {
-    try {
-      this.storage.setItem(key, value);
-    } catch (error) {
-      throw new VoidhashStorageError("Failed to write to localStorage.", {
-        cause: error,
-      });
-    }
-  }
-}
diff --git a/libraries/web/src/core/caching/adapters/memory-cache.ts b/libraries/web/src/core/caching/adapters/memory-cache.ts
deleted file mode 100644
index 4b6f56328..000000000
--- a/libraries/web/src/core/caching/adapters/memory-cache.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-import type { CacheAdapter } from "../cache-manager";
-
-export class MemoryCacheAdapter implements CacheAdapter {
-  private store = new Map<string, string>();
-
-  async delete(key: string) {
-    this.store.delete(key);
-  }
-
-  async get(key: string) {
-    return this.store.get(key) ?? null;
-  }
-
-  async keys() {
-    return [...this.store.keys()];
-  }
-
-  async set(key: string, value: string) {
-    this.store.set(key, value);
-  }
-}
diff --git a/libraries/web/src/core/caching/cache-adapter.ts b/libraries/web/src/core/caching/cache-adapter.ts
new file mode 100644
index 000000000..b3d01f5a1
--- /dev/null
+++ b/libraries/web/src/core/caching/cache-adapter.ts
@@ -0,0 +1,11 @@
+import { ServiceMap, type Effect } from "effect";
+
+export class CacheAdapter extends ServiceMap.Service<
+  CacheAdapter,
+  {
+    readonly get: (key: string) => Effect.Effect<string | null>;
+    readonly set: (key: string, value: string) => Effect.Effect<void>;
+    readonly delete: (key: string) => Effect.Effect<void>;
+    readonly keys: () => Effect.Effect<ReadonlyArray<string>>;
+  }
+>()("web-voidhash/CacheAdapter") {}
diff --git a/libraries/web/src/core/caching/cache-manager.ts b/libraries/web/src/core/caching/cache-manager.ts
index d0d97c486..fa52806db 100644
--- a/libraries/web/src/core/caching/cache-manager.ts
+++ b/libraries/web/src/core/caching/cache-manager.ts
@@ -1,9 +1,7 @@
-export interface CacheAdapter {
-  delete(key: string): Promise<void>;
-  get(key: string): Promise<string | null>;
-  keys(): Promise<ReadonlyArray<string>>;
-  set(key: string, value: string): Promise<void>;
-}
+import { Effect, Layer, ServiceMap } from "effect";
+
+import { SdkConfiguration } from "../sdk-configuration";
+import { CacheAdapter } from "./cache-adapter";
 
 interface CacheEnvelope<T> {
   readonly createdAt: number;
@@ -19,147 +17,139 @@ export interface CacheHit<T> extends CacheEnvelope<T> {
 
 const CACHE_INDEX_SUFFIX = "__keys__";
 
-export class CacheManager {
-  private memoryIndex = new Set<string>();
-  private readonly persistentIndexKey: string;
-
-  constructor(
-    private readonly namespace: string,
-    private readonly memory: CacheAdapter,
-    private readonly persistent: CacheAdapter | null
-  ) {
-    this.persistentIndexKey = this.buildStorageKey(CACHE_INDEX_SUFFIX);
-  }
-
-  async clearAll() {
-    const keys = await this.getCacheKeys();
-    await Promise.all(keys.map((key) => this.delete(key)));
-  }
-
-  async clearPrefix(prefix: string) {
-    const keys = await this.getCacheKeys();
-    const matchedKeys = keys.filter((key) => key.startsWith(prefix));
-    await Promise.all(matchedKeys.map((key) => this.delete(key)));
-  }
-
-  async delete(key: string) {
-    const storageKey = this.buildStorageKey(key);
-    await this.memory.delete(storageKey);
-    if (this.persistent) {
-      await this.persistent.delete(storageKey);
-    }
-    this.memoryIndex.delete(storageKey);
-    await this.persistIndex();
-  }
-
-  async get<T>(key: string): Promise<CacheHit<T> | null> {
-    const storageKey = this.buildStorageKey(key);
-    const rawValue =
-      (await this.memory.get(storageKey)) ??
-      (this.persistent ? await this.persistent.get(storageKey) : null);
-
-    if (!rawValue) {
-      return null;
-    }
-
-    const cachedValue = JSON.parse(rawValue) as CacheEnvelope<T>;
-    const isExpired =
-      typeof cachedValue.expiresAt === "number"
-        ? cachedValue.expiresAt < Date.now()
-        : false;
-    const isStale =
-      typeof cachedValue.staleAt === "number"
-        ? cachedValue.staleAt < Date.now()
-        : false;
-
-    if (isExpired) {
-      await this.delete(key);
-      return null;
-    }
-
-    if (!(await this.memory.get(storageKey))) {
-      await this.memory.set(storageKey, rawValue);
-    }
-
-    await this.rememberKey(storageKey);
-
-    return {
-      ...cachedValue,
-      isExpired,
-      isStale,
-    };
-  }
-
-  async getCacheKeys() {
-    const storageKeys = await this.loadIndexedStorageKeys();
-    const keys = new Set<string>([
-      ...this.memoryIndex,
-      ...storageKeys,
-    ]);
-
-    return [...keys]
-      .filter((key) => key.startsWith(`${this.namespace}:`))
-      .filter((key) => key !== this.persistentIndexKey)
-      .map((key) => key.slice(this.namespace.length + 1));
-  }
-
-  async set<T>(
+const make = Effect.gen(function* effect() {
+  const cache = yield* CacheAdapter;
+  const config = yield* SdkConfiguration;
+
+  const namespace = `@voidhash/web:${config.publishableKey}:${config.baseUrl}`;
+  const persistentIndexKey = `${namespace}:${CACHE_INDEX_SUFFIX}`;
+  const memoryIndex = new Set<string>();
+
+  const buildStorageKey = (key: string) => `${namespace}:${key}`;
+
+  const loadIndexedStorageKeys = () =>
+    Effect.gen(function* loadIndexedStorageKeys() {
+      const rawIndex = yield* cache.get(persistentIndexKey);
+      if (!rawIndex) {
+        return [] as string[];
+      }
+      try {
+        return JSON.parse(rawIndex) as string[];
+      } catch {
+        return [] as string[];
+      }
+    });
+
+  const persistIndex = () =>
+    Effect.gen(function* persistIndex() {
+      const serialized = JSON.stringify([...memoryIndex]);
+      yield* cache.set(persistentIndexKey, serialized);
+    });
+
+  const rememberKey = (storageKey: string) =>
+    Effect.gen(function* rememberKey() {
+      if (storageKey === persistentIndexKey) {
+        return;
+      }
+      memoryIndex.add(storageKey);
+      yield* persistIndex();
+    });
+
+  const get = <T>(key: string) =>
+    Effect.gen(function* get() {
+      const storageKey = buildStorageKey(key);
+      const rawValue = yield* cache.get(storageKey);
+
+      if (!rawValue) {
+        return null as CacheHit<T> | null;
+      }
+
+      const cachedValue = JSON.parse(rawValue) as CacheEnvelope<T>;
+      const isExpired =
+        typeof cachedValue.expiresAt === "number"
+          ? cachedValue.expiresAt < Date.now()
+          : false;
+      const isStale =
+        typeof cachedValue.staleAt === "number"
+          ? cachedValue.staleAt < Date.now()
+          : false;
+
+      if (isExpired) {
+        yield* deleteValue(key);
+        return null as CacheHit<T> | null;
+      }
+
+      yield* rememberKey(storageKey);
+
+      return {
+        ...cachedValue,
+        isExpired,
+        isStale,
+      } as CacheHit<T>;
+    });
+
+  const setValue = <T>(
     key: string,
     value: T,
     options?: { staleTime?: number; ttl?: number }
-  ) {
-    const storageKey = this.buildStorageKey(key);
-    const envelope: CacheEnvelope<T> = {
-      createdAt: Date.now(),
-      expiresAt: options?.ttl ? Date.now() + options.ttl : null,
-      staleAt: options?.staleTime ? Date.now() + options.staleTime : null,
-      value,
-    };
-    const serialized = JSON.stringify(envelope);
-
-    await this.memory.set(storageKey, serialized);
-    if (this.persistent) {
-      await this.persistent.set(storageKey, serialized);
-    }
-
-    await this.rememberKey(storageKey);
-  }
-
-  private buildStorageKey(key: string) {
-    return `${this.namespace}:${key}`;
-  }
-
-  private async loadIndexedStorageKeys() {
-    if (!this.persistent) {
-      return [];
-    }
-
-    const rawIndex = await this.persistent.get(this.persistentIndexKey);
-    if (!rawIndex) {
-      return [];
-    }
-
-    try {
-      return JSON.parse(rawIndex) as string[];
-    } catch {
-      return [];
-    }
-  }
-
-  private async persistIndex() {
-    const serialized = JSON.stringify([...this.memoryIndex]);
-    await this.memory.set(this.persistentIndexKey, serialized);
-    if (this.persistent) {
-      await this.persistent.set(this.persistentIndexKey, serialized);
-    }
-  }
-
-  private async rememberKey(storageKey: string) {
-    if (storageKey === this.persistentIndexKey) {
-      return;
-    }
-
-    this.memoryIndex.add(storageKey);
-    await this.persistIndex();
-  }
+  ) =>
+    Effect.gen(function* setValue() {
+      const storageKey = buildStorageKey(key);
+      const envelope: CacheEnvelope<T> = {
+        createdAt: Date.now(),
+        expiresAt: options?.ttl ? Date.now() + options.ttl : null,
+        staleAt: options?.staleTime ? Date.now() + options.staleTime : null,
+        value,
+      };
+      const serialized = JSON.stringify(envelope);
+      yield* cache.set(storageKey, serialized);
+      yield* rememberKey(storageKey);
+    });
+
+  const deleteValue = (key: string) =>
+    Effect.gen(function* deleteValue() {
+      const storageKey = buildStorageKey(key);
+      yield* cache.delete(storageKey);
+      memoryIndex.delete(storageKey);
+      yield* persistIndex();
+    });
+
+  const clearAll = () =>
+    Effect.gen(function* clearAll() {
+      const keys = yield* getCacheKeys();
+      yield* Effect.all(keys.map((key) => deleteValue(key)));
+    });
+
+  const clearPrefix = (prefix: string) =>
+    Effect.gen(function* clearPrefix() {
+      const keys = yield* getCacheKeys();
+      const matched = keys.filter((key) => key.startsWith(prefix));
+      yield* Effect.all(matched.map((key) => deleteValue(key)));
+    });
+
+  const getCacheKeys = () =>
+    Effect.gen(function* getCacheKeys() {
+      const storageKeys = yield* loadIndexedStorageKeys();
+      const keys = new Set<string>([...memoryIndex, ...storageKeys]);
+      return [...keys]
+        .filter((key) => key.startsWith(`${namespace}:`))
+        .filter((key) => key !== persistentIndexKey)
+        .map((key) => key.slice(namespace.length + 1));
+    });
+
+  return {
+    clearAll,
+    clearPrefix,
+    delete: deleteValue,
+    get,
+    getCacheKeys,
+    set: setValue,
+  } as const;
+});
+
+export class CacheManager extends ServiceMap.Service<
+  CacheManager,
+  Effect.Success<typeof make>
+>()("web-voidhash/CacheManager") {
+  static Default = Layer.effect(CacheManager, make);
 }
diff --git a/libraries/web/src/core/constants.ts b/libraries/web/src/core/constants.ts
new file mode 100644
index 000000000..e325acc6c
--- /dev/null
+++ b/libraries/web/src/core/constants.ts
@@ -0,0 +1 @@
+export const SDK_VERSION = "0.0.1-alpha.1";
diff --git a/libraries/web/src/core/event-bus.ts b/libraries/web/src/core/event-bus.ts
index 22da53101..b230d505e 100644
--- a/libraries/web/src/core/event-bus.ts
+++ b/libraries/web/src/core/event-bus.ts
@@ -1,3 +1,5 @@
+import { ServiceMap } from "effect";
+
 import type { VoidhashEventMap, VoidhashEventName } from "../types";
 
 export class EventBus {
@@ -6,6 +8,7 @@ export class EventBus {
       (payload: VoidhashEventMap[TEvent]) => void
     >;
   } = {
+    "analytics-flush-needed": new Set(),
     "analytics-flushed": new Set(),
     "analytics-partial-rejection": new Set(),
     error: new Set(),
@@ -41,3 +44,8 @@ export class EventBus {
     };
   }
 }
+
+export class EventBusProvider extends ServiceMap.Service<
+  EventBusProvider,
+  EventBus
+>()("web-voidhash/EventBusProvider") {}
diff --git a/libraries/web/src/core/feature-flags/feature-flag-service.ts b/libraries/web/src/core/feature-flags/feature-flag-service.ts
index 1ab1aae63..1b8ec093b 100644
--- a/libraries/web/src/core/feature-flags/feature-flag-service.ts
+++ b/libraries/web/src/core/feature-flags/feature-flag-service.ts
@@ -1,100 +1,134 @@
-import type { FeatureFlagEntry, FeatureFlagsResult } from "../../types";
-import type { CacheManager } from "../caching/cache-manager";
-import type { EventBus } from "../event-bus";
-import { SdkApiClient } from "../http/sdk-api-client";
+import { Effect, Layer, ServiceMap } from "effect";
+
+import type {
+  FeatureFlagEntry,
+  FeatureFlagsResult,
+} from "../../types";
+import { CacheManager } from "../caching/cache-manager";
+import { EventBusProvider } from "../event-bus";
+import { IdentityManager } from "../identity/identity-manager";
+import { ApiClient } from "../networking/api-client";
+import { PlatformProvider } from "../platform/platform-provider";
+import { SdkConfiguration } from "../sdk-configuration";
 
 const serializeKeys = (keys?: ReadonlyArray<string>) =>
   keys && keys.length > 0 ? [...keys].sort().join(",") : "all";
 
-export class FeatureFlagService {
-  private latestFlags = new Map<string, FeatureFlagEntry>();
-  private trackedKeySets = new Set<string>();
-
-  constructor(
-    private readonly cache: CacheManager,
-    private readonly sdkApi: SdkApiClient,
-    private readonly eventBus: EventBus,
-    private readonly ttlMs: number,
-    private readonly getAppUserId: () => Promise<string | null>
-  ) {}
-
-  async clearCachedFlags() {
-    this.latestFlags.clear();
-    await this.cache.clearPrefix("feature-flags:");
-  }
-
-  getTrackedKeys() {
-    return [...this.trackedKeySets];
-  }
-
-  getVariant(key: string) {
-    return this.latestFlags.get(key) ?? null;
-  }
-
-  isEnabled(key: string) {
-    return this.latestFlags.get(key)?.enabled ?? false;
-  }
-
-  async refreshTrackedKeySets() {
-    if (this.trackedKeySets.size === 0) {
-      return;
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const apiClient = yield* ApiClient;
+  const eventBus = yield* EventBusProvider;
+  const identityManager = yield* IdentityManager;
+  const platform = yield* PlatformProvider;
+  const config = yield* SdkConfiguration;
+
+  const latestFlags = new Map<string, FeatureFlagEntry>();
+  const trackedKeySets = new Set<string>();
+
+  // biome-ignore lint/suspicious/noExplicitAny: SDK headers match the schema shape at runtime
+  const buildHeaders = (distinctId: string) =>
+    ({
+      ...platform.getSdkHeaders({
+        observerMode: config.observerMode,
+        publishableKey: config.publishableKey,
+      }),
+      "x-distinct-id": distinctId,
+    }) as any;
+
+  const buildCacheKey = (distinctId: string, keys?: ReadonlyArray<string>) =>
+    `feature-flags:${distinctId}:${serializeKeys(keys)}`;
+
+  const rememberFlags = (flags: ReadonlyArray<FeatureFlagEntry>) => {
+    for (const flag of flags) {
+      latestFlags.set(flag.key, flag);
     }
+  };
 
-    await Promise.all(
-      [...this.trackedKeySets].map((serializedKeys) =>
-        this.refreshFeatureFlags(
-          serializedKeys === "all" ? undefined : serializedKeys.split(",")
-        )
-      )
-    );
-  }
-
-  async getFeatureFlags(keys?: ReadonlyArray<string>) {
-    return this.getOrRefreshFeatureFlags(keys, false);
-  }
+  // Sync accessors (plain functions, not Effects)
+  const isEnabled = (key: string) =>
+    latestFlags.get(key)?.enabled ?? false;
 
-  async refreshFeatureFlags(keys?: ReadonlyArray<string>) {
-    return this.getOrRefreshFeatureFlags(keys, true);
-  }
+  const getVariant = (key: string) =>
+    latestFlags.get(key) ?? null;
 
-  private cacheKey(appUserId: string, keys?: ReadonlyArray<string>) {
-    return `feature-flags:${appUserId}:${serializeKeys(keys)}`;
-  }
-
-  private async getOrRefreshFeatureFlags(
+  const getOrRefreshFeatureFlags = (
     keys: ReadonlyArray<string> | undefined,
     forceRefresh: boolean
-  ): Promise<FeatureFlagsResult> {
-    const appUserId = await this.getAppUserId();
-    if (!appUserId) {
-      return { flags: [] };
-    }
-
-    const cacheKey = this.cacheKey(appUserId, keys);
-    const serializedKeys = serializeKeys(keys);
-    this.trackedKeySets.add(serializedKeys);
+  ) =>
+    Effect.gen(function* getOrRefreshFeatureFlags() {
+      const distinctId = identityManager.getDistinctId();
+      if (!distinctId) {
+        return { flags: [] } as FeatureFlagsResult;
+      }
 
-    if (!forceRefresh) {
-      const cached = await this.cache.get<FeatureFlagsResult>(cacheKey);
-      if (cached && !cached.isExpired && !cached.isStale) {
-        this.rememberFlags(cached.value.flags);
-        return cached.value;
+      const cacheKey = buildCacheKey(distinctId, keys);
+      const serializedKeys = serializeKeys(keys);
+      trackedKeySets.add(serializedKeys);
+
+      if (!forceRefresh) {
+        const cached =
+          yield* cacheManager.get<FeatureFlagsResult>(cacheKey);
+        if (cached && !cached.isExpired && !cached.isStale) {
+          rememberFlags(cached.value.flags);
+          return cached.value;
+        }
       }
-    }
 
-    const result = await this.sdkApi.evaluateFeatureFlags(appUserId, keys);
-    this.rememberFlags(result.flags);
-    await this.cache.set(cacheKey, result, { ttl: this.ttlMs });
-    this.eventBus.emit("feature-flags-updated", {
-      keys,
-      result,
+      const payload = keys
+        ? { flagKeys: [...keys] as string[] }
+        : {};
+      const result = yield* apiClient.sdk.evaluateFeatureFlags({
+        headers: buildHeaders(distinctId),
+        payload,
+      });
+
+      rememberFlags(result.flags);
+      yield* cacheManager.set(cacheKey, result, {
+        ttl: config.featureFlags.ttlMs,
+      });
+      eventBus.emit("feature-flags-updated", { keys, result });
+      return result;
     });
-    return result;
-  }
 
-  private rememberFlags(flags: ReadonlyArray<FeatureFlagEntry>) {
-    for (const flag of flags) {
-      this.latestFlags.set(flag.key, flag);
-    }
-  }
+  const getFeatureFlags = (keys?: ReadonlyArray<string>) =>
+    getOrRefreshFeatureFlags(keys, false);
+
+  const refreshFeatureFlags = (keys?: ReadonlyArray<string>) =>
+    getOrRefreshFeatureFlags(keys, true);
+
+  const refreshTrackedKeySets = () =>
+    Effect.gen(function* refreshTrackedKeySets() {
+      if (trackedKeySets.size === 0) return;
+
+      yield* Effect.all(
+        [...trackedKeySets].map((serializedKeys) =>
+          refreshFeatureFlags(
+            serializedKeys === "all" ? undefined : serializedKeys.split(",")
+          )
+        ),
+        { concurrency: "unbounded" }
+      );
+    });
+
+  const clearCachedFlags = () =>
+    Effect.gen(function* clearCachedFlags() {
+      latestFlags.clear();
+      yield* cacheManager.clearPrefix("feature-flags:");
+    });
+
+  return {
+    clearCachedFlags,
+    getFeatureFlags,
+    getVariant,
+    isEnabled,
+    refreshFeatureFlags,
+    refreshTrackedKeySets,
+  } as const;
+});
+
+export class FeatureFlagService extends ServiceMap.Service<
+  FeatureFlagService,
+  Effect.Success<typeof make>
+>()("web-voidhash/FeatureFlagService") {
+  static Default = Layer.effect(FeatureFlagService, make);
 }
diff --git a/libraries/web/src/core/http/analytics-client.ts b/libraries/web/src/core/http/analytics-client.ts
deleted file mode 100644
index 5d770de97..000000000
--- a/libraries/web/src/core/http/analytics-client.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-import { VoidhashAnalyticsError } from "../../errors";
-import type {
-  AnalyticsBatchRequest,
-  AnalyticsTransportResult,
-} from "../analytics/contracts";
-
-const DEFAULT_TIMEOUT_MS = 10_000;
-
-export class AnalyticsHttpClient {
-  constructor(
-    private readonly baseUrl: string,
-    private readonly publishableKey: string
-  ) {}
-
-  async send(
-    distinctId: string,
-    request: AnalyticsBatchRequest,
-    options?: { keepalive?: boolean; timeoutMs?: number }
-  ): Promise<AnalyticsTransportResult> {
-    const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const controller =
-      typeof AbortController !== "undefined" && !options?.keepalive
-        ? new AbortController()
-        : null;
-    const timeoutId =
-      controller && timeoutMs > 0
-        ? setTimeout(() => controller.abort(), timeoutMs)
-        : null;
-
-    try {
-      const response = await fetch(new URL("/v1/events", this.baseUrl), {
-        body: JSON.stringify(request),
-        headers: {
-          "content-type": "application/json",
-          "x-distinct-id": distinctId,
-          "x-publishable-key": this.publishableKey,
-        },
-        keepalive: options?.keepalive ?? false,
-        method: "POST",
-        signal: controller?.signal,
-      });
-      let data: Record<string, unknown> | undefined;
-
-      try {
-        data = (await response.json()) as Record<string, unknown>;
-      } catch {
-        data = undefined;
-      }
-
-      return {
-        data,
-        status: response.status,
-      };
-    } catch (error) {
-      if (error instanceof Error && error.name === "AbortError") {
-        throw new VoidhashAnalyticsError("Analytics flush timed out.", {
-          cause: error,
-        });
-      }
-
-      throw new VoidhashAnalyticsError("Analytics request failed.", {
-        cause: error,
-      });
-    } finally {
-      if (timeoutId) {
-        clearTimeout(timeoutId);
-      }
-    }
-  }
-}
diff --git a/libraries/web/src/core/http/sdk-api-client.ts b/libraries/web/src/core/http/sdk-api-client.ts
deleted file mode 100644
index 63deb7eef..000000000
--- a/libraries/web/src/core/http/sdk-api-client.ts
+++ /dev/null
@@ -1,126 +0,0 @@
-import { VoidhashFeatureFlagsError, VoidhashIdentityError } from "../../errors";
-import type { FeatureFlagsResult, VoidhashTraits } from "../../types";
-import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
-
-type ApiClientRequest = {
-  readonly headers: Record<string, string | undefined>;
-  readonly payload?: Record<string, unknown>;
-};
-
-const trimUndefined = <TValue>(record: Record<string, TValue | undefined>) =>
-  Object.fromEntries(
-    Object.entries(record).filter(([, value]) => typeof value !== "undefined")
-  ) as Record<string, TValue>;
-
-export class SdkApiClient {
-  constructor(
-    private readonly baseUrl: string,
-    private readonly publishableKey: string,
-    private readonly observerMode: boolean,
-    private readonly platform = new BrowserPlatformProvider()
-  ) {}
-
-  async destroy() {}
-
-  async evaluateFeatureFlags(
-    appUserId: string,
-    flagKeys?: ReadonlyArray<string>
-  ): Promise<FeatureFlagsResult> {
-    try {
-      return await this.request<FeatureFlagsResult>("/sdk/evaluate-flags", {
-          headers: this.buildHeaders(appUserId),
-          payload: trimUndefined({
-            flagKeys,
-          }),
-        });
-    } catch (error) {
-      throw new VoidhashFeatureFlagsError("Failed to fetch feature flags.", {
-        cause: error,
-      });
-    }
-  }
-
-  async identify(
-    currentAppUserId: string,
-    appUserId: string,
-    traits?: VoidhashTraits
-  ) {
-    try {
-      await this.request("/sdk/identify", {
-          headers: this.buildHeaders(currentAppUserId),
-          payload: trimUndefined({
-            appUserId,
-            traits: this.normalizeTraits(traits),
-          }),
-        });
-    } catch (error) {
-      throw new VoidhashIdentityError("Failed to identify app user.", {
-        cause: error,
-      });
-    }
-  }
-
-  async syncTraits(appUserId: string, traits?: VoidhashTraits) {
-    try {
-      await this.request("/sdk/sync-customer-attributes", {
-          headers: this.buildHeaders(appUserId),
-          payload: trimUndefined({
-            traits: this.normalizeTraits(traits),
-          }),
-        });
-    } catch (error) {
-      throw new VoidhashIdentityError("Failed to sync customer traits.", {
-        cause: error,
-      });
-    }
-  }
-
-  private buildHeaders(appUserId: string) {
-    return {
-      ...this.platform.getSdkHeaders({
-        observerMode: this.observerMode,
-        publishableKey: this.publishableKey,
-      }),
-      "x-app-user-id": appUserId,
-    };
-  }
-
-  private normalizeTraits(traits?: VoidhashTraits) {
-    if (!traits || Object.keys(traits).length === 0) {
-      return undefined;
-    }
-
-    return traits;
-  }
-
-  private async request<T = void>(path: string, input: ApiClientRequest) {
-    const controller =
-      typeof AbortController !== "undefined" ? new AbortController() : null;
-    const timeoutId = controller
-      ? setTimeout(() => controller.abort(), 10_000)
-      : null;
-
-    try {
-      const response = await fetch(new URL(path, this.baseUrl), {
-        body: input.payload ? JSON.stringify(input.payload) : undefined,
-        headers: trimUndefined(input.headers),
-        method: input.payload ? "POST" : "GET",
-        signal: controller?.signal,
-      });
-
-      if (!response.ok) {
-        throw new Error(`SDK request failed with status ${response.status}.`);
-      }
-
-      if (response.status === 204) {
-        return undefined as T;
-      }
-
-      return (await response.json()) as T;
-    } finally {
-      if (timeoutId) {
-        clearTimeout(timeoutId);
-      }
-    }
-  }
-}
diff --git a/libraries/web/src/core/identity/identity-manager.ts b/libraries/web/src/core/identity/identity-manager.ts
index 8bb94c4f1..0e8a10af6 100644
--- a/libraries/web/src/core/identity/identity-manager.ts
+++ b/libraries/web/src/core/identity/identity-manager.ts
@@ -1,85 +1,142 @@
-import { VoidhashIdentityError } from "../../errors";
-import type { EventBus } from "../event-bus";
-import { SdkApiClient } from "../http/sdk-api-client";
-import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
-import type { CacheManager } from "../caching/cache-manager";
+import { Effect, Layer, ServiceMap } from "effect";
+
 import type { VoidhashTraits } from "../../types";
+import { CacheManager } from "../caching/cache-manager";
+import { EventBusProvider } from "../event-bus";
+import { ApiClient } from "../networking/api-client";
+import { PlatformProvider } from "../platform/platform-provider";
+import { SdkConfiguration } from "../sdk-configuration";
 
-const APP_USER_ID_KEY = "identity:app-user-id";
-const ANONYMOUS_USER_ID_PREFIX = "vh:anon:";
+const DISTINCT_ID_KEY = "identity:distinct-id";
+const ANONYMOUS_DISTINCT_ID_PREFIX = "vh:anon:";
 
-const buildTraitsKey = (appUserId: string) => `identity:traits:${appUserId}`;
+const buildTraitsKey = (distinctId: string) => `identity:traits:${distinctId}`;
 
-export class IdentityManager {
-  private currentAppUserId: string | null = null;
+const normalizeTraits = (traits?: VoidhashTraits) => {
+  if (!traits || Object.keys(traits).length === 0) {
+    return undefined;
+  }
+  return traits;
+};
 
-  constructor(
-    private readonly cache: CacheManager,
-    private readonly sdkApi: SdkApiClient,
-    private readonly eventBus: EventBus,
-    private readonly platform = new BrowserPlatformProvider()
-  ) {}
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const apiClient = yield* ApiClient;
+  const eventBus = yield* EventBusProvider;
+  const platform = yield* PlatformProvider;
+  const config = yield* SdkConfiguration;
 
-  getAppUserId() {
-    return this.currentAppUserId;
-  }
+  let currentDistinctId: string | null = null;
 
-  async identify(appUserId: string, traits?: VoidhashTraits) {
-    const currentAppUserId = await this.requireAppUserId();
-    await this.syncTraits(currentAppUserId);
-    await this.sdkApi.identify(currentAppUserId, appUserId, traits);
-    await this.cache.set(APP_USER_ID_KEY, appUserId);
-    await this.cache.set(buildTraitsKey(appUserId), traits ?? {});
-    this.currentAppUserId = appUserId;
-    this.eventBus.emit("identity-changed", {
-      appUserId,
-      previousAppUserId: currentAppUserId,
+  const getDistinctId = () => currentDistinctId;
+
+  const getSdkHeaders = () =>
+    platform.getSdkHeaders({
+      observerMode: config.observerMode,
+      publishableKey: config.publishableKey,
     });
-  }
 
-  async initialize(initialAppUserId?: string) {
-    const cachedAppUserId = await this.cache.get<string>(APP_USER_ID_KEY);
-    this.currentAppUserId =
-      initialAppUserId ??
-      cachedAppUserId?.value ??
-      `${ANONYMOUS_USER_ID_PREFIX}${this.platform.randomId()}`;
+  // biome-ignore lint/suspicious/noExplicitAny: SDK headers match the schema shape at runtime
+  const buildHeaders = (distinctId: string) =>
+    ({
+      ...getSdkHeaders(),
+      "x-distinct-id": distinctId,
+    }) as any;
 
-    await this.cache.set(APP_USER_ID_KEY, this.currentAppUserId);
+  const syncTraits = (distinctId?: string) =>
+    Effect.gen(function* syncTraits() {
+      const resolvedDistinctId = distinctId ?? currentDistinctId;
+      if (!resolvedDistinctId) return;
 
-    if (initialAppUserId && cachedAppUserId?.value && cachedAppUserId.value !== initialAppUserId) {
-      await this.identify(initialAppUserId);
-      return this.currentAppUserId;
-    }
+      const cached = yield* cacheManager.get<VoidhashTraits>(
+        buildTraitsKey(resolvedDistinctId)
+      );
 
-    return this.currentAppUserId;
-  }
+      const traits = normalizeTraits(cached?.value);
+      yield* apiClient.sdk.syncCustomerAttributes({
+        headers: buildHeaders(resolvedDistinctId),
+        payload: traits ? { traits } : {},
+      });
+    });
+
+  const initialize = (initialDistinctId?: string) =>
+    Effect.gen(function* initialize() {
+      const cached = yield* cacheManager.get<string>(DISTINCT_ID_KEY);
+      currentDistinctId =
+        initialDistinctId ??
+        cached?.value ??
+        `${ANONYMOUS_DISTINCT_ID_PREFIX}${platform.randomId()}`;
+
+      yield* cacheManager.set(DISTINCT_ID_KEY, currentDistinctId);
+
+      if (
+        initialDistinctId &&
+        cached?.value &&
+        cached.value !== initialDistinctId
+      ) {
+        yield* identify(initialDistinctId);
+        return currentDistinctId;
+      }
 
-  async resetIdentity() {
-    const currentAppUserId = await this.requireAppUserId();
-    await this.syncTraits(currentAppUserId);
-    const nextAnonymousId = `${ANONYMOUS_USER_ID_PREFIX}${this.platform.randomId()}`;
-    await this.cache.set(APP_USER_ID_KEY, nextAnonymousId);
-    await this.cache.set(buildTraitsKey(nextAnonymousId), {});
-    this.currentAppUserId = nextAnonymousId;
-    this.eventBus.emit("identity-changed", {
-      appUserId: nextAnonymousId,
-      previousAppUserId: currentAppUserId,
+      return currentDistinctId;
     });
-  }
 
-  async syncTraits(appUserId?: string) {
-    const resolvedAppUserId = appUserId ?? (await this.requireAppUserId());
-    const cachedTraits = await this.cache.get<VoidhashTraits>(
-      buildTraitsKey(resolvedAppUserId)
-    );
-    await this.sdkApi.syncTraits(resolvedAppUserId, cachedTraits?.value);
-  }
+  const identify = (distinctId: string, traits?: VoidhashTraits) =>
+    Effect.gen(function* identify() {
+      if (!currentDistinctId) {
+        throw new Error("Distinct id has not been initialized.");
+      }
 
-  private async requireAppUserId() {
-    if (!this.currentAppUserId) {
-      throw new VoidhashIdentityError("App user id has not been initialized.");
-    }
+      const previousDistinctId = currentDistinctId;
+      yield* syncTraits(previousDistinctId);
 
-    return this.currentAppUserId;
-  }
+      const normalizedTraits = normalizeTraits(traits);
+      yield* apiClient.sdk.identify({
+        headers: buildHeaders(previousDistinctId),
+        payload: normalizedTraits
+          ? { distinctId, traits: normalizedTraits }
+          : { distinctId },
+      });
+
+      yield* cacheManager.set(DISTINCT_ID_KEY, distinctId);
+      yield* cacheManager.set(buildTraitsKey(distinctId), traits ?? {});
+      currentDistinctId = distinctId;
+      eventBus.emit("identity-changed", {
+        distinctId,
+        previousDistinctId,
+      });
+    });
+
+  const reset = () =>
+    Effect.gen(function* reset() {
+      if (!currentDistinctId) {
+        throw new Error("Distinct id has not been initialized.");
+      }
+
+      const previousDistinctId = currentDistinctId;
+      yield* syncTraits(previousDistinctId);
+      const nextAnonymousId = `${ANONYMOUS_DISTINCT_ID_PREFIX}${platform.randomId()}`;
+      yield* cacheManager.set(DISTINCT_ID_KEY, nextAnonymousId);
+      yield* cacheManager.set(buildTraitsKey(nextAnonymousId), {});
+      currentDistinctId = nextAnonymousId;
+      eventBus.emit("identity-changed", {
+        distinctId: nextAnonymousId,
+        previousDistinctId,
+      });
+    });
+
+  return {
+    getDistinctId,
+    identify,
+    initialize,
+    reset,
+    syncTraits,
+  } as const;
+});
+
+export class IdentityManager extends ServiceMap.Service<
+  IdentityManager,
+  Effect.Success<typeof make>
+>()("web-voidhash/IdentityManager") {
+  static Default = Layer.effect(IdentityManager, make);
 }
diff --git a/libraries/web/src/core/networking/api-client.ts b/libraries/web/src/core/networking/api-client.ts
new file mode 100644
index 000000000..556300dca
--- /dev/null
+++ b/libraries/web/src/core/networking/api-client.ts
@@ -0,0 +1,21 @@
+import { VoidhashV1Api } from "@voidhash/api-spec";
+import { Effect, Layer, ServiceMap } from "effect";
+import { HttpApiClient } from "effect/unstable/httpapi";
+
+import { SdkConfiguration } from "../sdk-configuration";
+import { normalizeGeneratedClient } from "./normalize-generated-client";
+
+const make = Effect.gen(function* effect() {
+  const config = yield* SdkConfiguration;
+  const rawClient = yield* HttpApiClient.make(VoidhashV1Api, {
+    baseUrl: config.baseUrl,
+  });
+  return normalizeGeneratedClient(rawClient);
+});
+
+export class ApiClient extends ServiceMap.Service<
+  ApiClient,
+  Effect.Success<typeof make>
+>()("web-voidhash/ApiClient") {
+  static Default = Layer.effect(ApiClient, make);
+}
diff --git a/libraries/web/src/core/networking/event-capture-api-client.ts b/libraries/web/src/core/networking/event-capture-api-client.ts
new file mode 100644
index 000000000..a68b77fda
--- /dev/null
+++ b/libraries/web/src/core/networking/event-capture-api-client.ts
@@ -0,0 +1,22 @@
+import { EventCaptureApi } from "@voidhash/api-spec/event-capture";
+import { Effect, Layer, ServiceMap } from "effect";
+import { HttpApiClient } from "effect/unstable/httpapi";
+
+import { SdkConfiguration } from "../sdk-configuration";
+import { normalizeGeneratedClient } from "./normalize-generated-client";
+import { toJsonCompatibleApi } from "./json-compatible-api";
+
+const make = Effect.gen(function* effect() {
+  const config = yield* SdkConfiguration;
+  const rawClient = yield* HttpApiClient.make(toJsonCompatibleApi(EventCaptureApi), {
+    baseUrl: config.analytics.baseUrl,
+  });
+  return normalizeGeneratedClient(rawClient);
+});
+
+export class EventCaptureApiClient extends ServiceMap.Service<
+  EventCaptureApiClient,
+  Effect.Success<typeof make>
+>()("web-voidhash/EventCaptureApiClient") {
+  static Default = Layer.effect(EventCaptureApiClient, make);
+}
diff --git a/libraries/web/src/core/networking/json-compatible-api.ts b/libraries/web/src/core/networking/json-compatible-api.ts
new file mode 100644
index 000000000..837e9e28b
--- /dev/null
+++ b/libraries/web/src/core/networking/json-compatible-api.ts
@@ -0,0 +1,57 @@
+import { Schema } from "effect";
+import type { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+
+const cloneWithPrototype = <T extends object>(
+  value: T,
+  properties: Record<string, unknown>
+): T =>
+  Object.assign(Object.create(Object.getPrototypeOf(value)), value, properties) as T;
+
+const mapPayloadSchemas = (
+  payload: HttpApiEndpoint.AnyWithProps["payload"]
+): HttpApiEndpoint.AnyWithProps["payload"] =>
+  new Map(
+    Array.from(payload.entries(), ([contentType, value]) => [
+      contentType,
+      {
+        ...value,
+        schemas: value.schemas.map((schema) => Schema.toCodecJson(schema)) as typeof value.schemas,
+      },
+    ])
+  );
+
+const mapEndpoint = <TEndpoint extends HttpApiEndpoint.AnyWithProps>(
+  endpoint: TEndpoint
+): TEndpoint =>
+  cloneWithPrototype(endpoint, {
+    error: new Set(
+      Array.from(endpoint.error, (schema) => Schema.toCodecJson(schema))
+    ) as TEndpoint["error"],
+    headers: endpoint.headers ? Schema.toCodecJson(endpoint.headers) : undefined,
+    params: endpoint.params ? Schema.toCodecJson(endpoint.params) : undefined,
+    payload: mapPayloadSchemas(endpoint.payload) as TEndpoint["payload"],
+    query: endpoint.query ? Schema.toCodecJson(endpoint.query) : undefined,
+    success: new Set(
+      Array.from(endpoint.success, (schema) => Schema.toCodecJson(schema))
+    ) as TEndpoint["success"],
+  });
+
+const mapGroup = <TGroup extends HttpApiGroup.AnyWithProps>(group: TGroup): TGroup =>
+  cloneWithPrototype(group, {
+    endpoints: Object.fromEntries(
+      Object.entries(group.endpoints).map(([endpointName, endpoint]) => [
+        endpointName,
+        mapEndpoint(endpoint as HttpApiEndpoint.AnyWithProps),
+      ])
+    ) as TGroup["endpoints"],
+  });
+
+export const toJsonCompatibleApi = <TApi extends HttpApi.Any>(api: TApi): TApi =>
+  cloneWithPrototype(api, {
+    groups: Object.fromEntries(
+      Object.entries((api as TApi & { groups: Record<string, HttpApiGroup.AnyWithProps> }).groups).map(([groupName, group]) => [
+        groupName,
+        mapGroup(group as HttpApiGroup.AnyWithProps),
+      ])
+    ),
+  });
diff --git a/libraries/web/src/core/networking/normalize-generated-client.ts b/libraries/web/src/core/networking/normalize-generated-client.ts
new file mode 100644
index 000000000..f574065ff
--- /dev/null
+++ b/libraries/web/src/core/networking/normalize-generated-client.ts
@@ -0,0 +1,121 @@
+import { VoidhashV1Api } from "@voidhash/api-spec";
+import { Effect, Schema } from "effect";
+import { HttpApi, HttpApiEndpoint } from "effect/unstable/httpapi";
+
+type RequestPartName = "headers" | "params" | "payload" | "query";
+
+type EndpointNormalizers = Partial<
+  Record<RequestPartName, (value: unknown) => Effect.Effect<unknown, Schema.SchemaError, unknown>>
+>;
+
+const endpointNormalizers = new Map<string, EndpointNormalizers>();
+
+const endpointKey = (group: string, endpoint: string) => `${group}.${endpoint}`;
+
+const getPayloadSchema = (endpoint: HttpApiEndpoint.AnyWithProps) => {
+  const schemas = Array.from(endpoint.payload.values()).flatMap((value) => value.schemas);
+
+  if (schemas.length === 0) {
+    return undefined;
+  }
+
+  return schemas.length === 1 ? schemas[0] : Schema.Union(schemas);
+};
+
+HttpApi.reflect(VoidhashV1Api, {
+  onGroup: () => {},
+  onEndpoint: ({ endpoint, group }) => {
+    const normalizers: EndpointNormalizers = {};
+
+    if (endpoint.params) {
+      normalizers.params = Schema.decodeUnknownEffect(endpoint.params);
+    }
+
+    if (endpoint.query) {
+      normalizers.query = Schema.decodeUnknownEffect(endpoint.query);
+    }
+
+    if (endpoint.headers) {
+      normalizers.headers = Schema.decodeUnknownEffect(endpoint.headers);
+    }
+
+    const payloadSchema = getPayloadSchema(endpoint);
+    if (payloadSchema) {
+      normalizers.payload = Schema.decodeUnknownEffect(payloadSchema);
+    }
+
+    endpointNormalizers.set(endpointKey(group.identifier, endpoint.name), normalizers);
+  },
+});
+
+const normalizeRequest = (
+  normalizers: EndpointNormalizers,
+  request: Record<string, unknown> | undefined
+) =>
+  Effect.gen(function* normalizeRequestEffect() {
+    if (request === undefined) {
+      return undefined;
+    }
+
+    const normalized = {
+      ...request,
+    };
+
+    if (normalizers.params && "params" in request) {
+      normalized.params = yield* normalizers.params(request.params);
+    }
+
+    if (normalizers.query && "query" in request) {
+      normalized.query = yield* normalizers.query(request.query);
+    }
+
+    if (normalizers.headers && "headers" in request) {
+      normalized.headers = yield* normalizers.headers(request.headers);
+    }
+
+    if (normalizers.payload && "payload" in request) {
+      normalized.payload = yield* normalizers.payload(request.payload);
+    }
+
+    return normalized;
+  });
+
+// biome-ignore lint/suspicious/noExplicitAny: Generic client normalization requires dynamic typing
+export const normalizeGeneratedClient = <T extends Record<string, any>>(
+  client: T
+): T =>
+  Object.fromEntries(
+    Object.entries(client).map(([groupName, groupValue]) => {
+      if (!groupValue || typeof groupValue !== "object") {
+        return [groupName, groupValue];
+      }
+
+      const normalizedGroup = Object.fromEntries(
+        Object.entries(groupValue).map(([endpointName, endpoint]) => {
+          if (typeof endpoint !== "function") {
+            return [endpointName, endpoint];
+          }
+
+          const normalizers = endpointNormalizers.get(endpointKey(groupName, endpointName));
+
+          if (!normalizers) {
+            return [endpointName, endpoint];
+          }
+
+          return [
+            endpointName,
+            (request?: Record<string, unknown>) =>
+              Effect.flatMap(normalizeRequest(normalizers, request), (normalized) =>
+                Reflect.apply(
+                  endpoint as (request?: unknown) => Effect.Effect<unknown>,
+                  groupValue,
+                  [normalized]
+                )
+              ),
+          ];
+        })
+      );
+
+      return [groupName, normalizedGroup];
+    })
+  ) as T;
diff --git a/libraries/web/src/core/platform/browser-platform-provider.ts b/libraries/web/src/core/platform/browser-platform-provider.ts
index eb5c44c2e..67275c93d 100644
--- a/libraries/web/src/core/platform/browser-platform-provider.ts
+++ b/libraries/web/src/core/platform/browser-platform-provider.ts
@@ -1,4 +1,4 @@
-const SDK_VERSION = "0.0.1-alpha.1";
+import { SDK_VERSION } from "../constants";
 
 const trimUndefined = (entries: Record<string, unknown>) =>
   Object.fromEntries(
diff --git a/libraries/web/src/core/platform/platform-provider.ts b/libraries/web/src/core/platform/platform-provider.ts
new file mode 100644
index 000000000..3b096b14d
--- /dev/null
+++ b/libraries/web/src/core/platform/platform-provider.ts
@@ -0,0 +1,13 @@
+import { Layer, ServiceMap } from "effect";
+
+import { BrowserPlatformProvider } from "./browser-platform-provider";
+
+export class PlatformProvider extends ServiceMap.Service<
+  PlatformProvider,
+  BrowserPlatformProvider
+>()("web-voidhash/PlatformProvider") {}
+
+export const BrowserPlatformProviderLayer = Layer.succeed(
+  PlatformProvider,
+  new BrowserPlatformProvider()
+);
diff --git a/libraries/web/src/core/sdk-configuration.ts b/libraries/web/src/core/sdk-configuration.ts
new file mode 100644
index 000000000..c5247af9b
--- /dev/null
+++ b/libraries/web/src/core/sdk-configuration.ts
@@ -0,0 +1,8 @@
+import { ServiceMap } from "effect";
+
+import type { ResolvedVoidhashConfig } from "../types";
+
+export class SdkConfiguration extends ServiceMap.Service<
+  SdkConfiguration,
+  ResolvedVoidhashConfig
+>()("web-voidhash/SdkConfiguration") {}
diff --git a/libraries/web/src/react/hooks/use-feature-flags.ts b/libraries/web/src/react/hooks/use-feature-flags.ts
index a9448a146..1dd979e84 100644
--- a/libraries/web/src/react/hooks/use-feature-flags.ts
+++ b/libraries/web/src/react/hooks/use-feature-flags.ts
@@ -7,7 +7,7 @@ const serializeKeys = (keys?: ReadonlyArray<string>) =>
   keys && keys.length > 0 ? [...keys].sort().join(",") : "all";
 
 export const useFeatureFlags = (keys?: string[]) => {
-  const { appUserId, client, isInitialized } = useVoidhash();
+  const { client, distinctId, isInitialized } = useVoidhash();
   const [data, setData] = React.useState<FeatureFlagsResult>({ flags: [] });
   const [error, setError] = React.useState<Error | null>(null);
   const [isLoading, setIsLoading] = React.useState(false);
@@ -72,7 +72,7 @@ export const useFeatureFlags = (keys?: string[]) => {
     return () => {
       isMounted = false;
     };
-  }, [appUserId, client, isInitialized, resolvedKeys, updateData]);
+  }, [client, distinctId, isInitialized, resolvedKeys, updateData]);
 
   React.useEffect(() => {
     return client.on("feature-flags-updated", (event) => {
diff --git a/libraries/web/src/react/provider.tsx b/libraries/web/src/react/provider.tsx
index d6f9eab43..45e741642 100644
--- a/libraries/web/src/react/provider.tsx
+++ b/libraries/web/src/react/provider.tsx
@@ -21,8 +21,8 @@ interface ProviderWithConfig extends ProviderBaseProps {
 }
 
 export interface VoidhashReactContextValue {
-  readonly appUserId: string | null;
   readonly client: VoidhashWebClient;
+  readonly distinctId: string | null;
   readonly isInitialized: boolean;
 }
 
@@ -43,27 +43,27 @@ export function VoidhashProvider(props: ProviderWithClient | ProviderWithConfig)
     throw new Error("VoidhashProvider failed to create a client instance.");
   }
   const [isInitialized, setIsInitialized] = useState(false);
-  const [appUserId, setAppUserId] = useState<string | null>(null);
+  const [distinctId, setDistinctId] = useState<string | null>(null);
 
   useEffect(() => {
     let isMounted = true;
-    const removeInitialized = client.on("initialized", ({ appUserId }) => {
+    const removeInitialized = client.on("initialized", ({ distinctId }) => {
       if (!isMounted) {
         return;
       }
       setIsInitialized(true);
-      setAppUserId(appUserId);
+      setDistinctId(distinctId);
     });
-    const removeIdentityChanged = client.on("identity-changed", ({ appUserId }) => {
+    const removeIdentityChanged = client.on("identity-changed", ({ distinctId }) => {
       if (isMounted) {
-        setAppUserId(appUserId);
+        setDistinctId(distinctId);
       }
     });
 
     void client.initialize().then(() => {
       if (isMounted) {
         setIsInitialized(true);
-        setAppUserId(client.getAppUserId());
+        setDistinctId(client.getDistinctId());
       }
     });
 
@@ -77,11 +77,11 @@ export function VoidhashProvider(props: ProviderWithClient | ProviderWithConfig)
 
   const value = useMemo(
     () => ({
-      appUserId,
       client,
+      distinctId,
       isInitialized,
     }),
-    [appUserId, client, isInitialized]
+    [client, distinctId, isInitialized]
   );
 
   return (
diff --git a/libraries/web/src/types.ts b/libraries/web/src/types.ts
index 9bfe9effc..69d43e257 100644
--- a/libraries/web/src/types.ts
+++ b/libraries/web/src/types.ts
@@ -33,8 +33,8 @@ export interface VoidhashAnalyticsOptions {
 export interface VoidhashClientOptions {
   readonly analytics?: VoidhashAnalyticsOptions;
   readonly baseUrl?: string;
+  readonly distinctId?: string;
   readonly featureFlags?: VoidhashFeatureFlagsOptions;
-  readonly initialAppUserId?: string;
   readonly observerMode?: boolean;
   readonly publishableKey: string;
 }
@@ -52,12 +52,12 @@ export interface AnalyticsFlushResult {
 }
 
 export interface InitializedEvent {
-  readonly appUserId: string;
+  readonly distinctId: string;
 }
 
 export interface IdentityChangedEvent {
-  readonly appUserId: string;
-  readonly previousAppUserId: string | null;
+  readonly distinctId: string;
+  readonly previousDistinctId: string | null;
 }
 
 export interface FeatureFlagsUpdatedEvent {
@@ -81,6 +81,7 @@ export interface VoidhashErrorEvent {
 }
 
 export interface VoidhashEventMap {
+  readonly "analytics-flush-needed": undefined;
   readonly "analytics-flushed": AnalyticsFlushedEvent;
   readonly "analytics-partial-rejection": AnalyticsPartialRejectionEvent;
   readonly error: VoidhashErrorEvent;
@@ -108,7 +109,7 @@ export interface ResolvedVoidhashConfig {
     readonly refreshOnVisibility: boolean;
     readonly ttlMs: number;
   };
-  readonly initialAppUserId?: string;
+  readonly distinctId?: string;
   readonly observerMode: boolean;
   readonly publishableKey: string;
 }
diff --git a/libraries/web/tests/analytics.test.ts b/libraries/web/tests/analytics.test.ts
index 43d51d81c..824d78430 100644
--- a/libraries/web/tests/analytics.test.ts
+++ b/libraries/web/tests/analytics.test.ts
@@ -1,7 +1,7 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import { createVoidhashClient } from "../src/index";
-import { createJsonResponse } from "./helpers";
+import { createJsonResponse, installFetchMock } from "./helpers";
 
 describe("analytics delivery", () => {
   beforeEach(() => {
@@ -13,27 +13,33 @@ describe("analytics delivery", () => {
   });
 
   it("retries a retryable analytics failure on the next flush", async () => {
+    vi.useFakeTimers();
+
     let analyticsAttempts = 0;
-    vi.stubGlobal("fetch", vi.fn(async (input: URL | RequestInfo) => {
-      const url = input.toString();
-      if (url.endsWith("/v1/events")) {
+    installFetchMock((call) => {
+      if (call.url.endsWith("/batch")) {
         analyticsAttempts += 1;
         if (analyticsAttempts === 1) {
-          return createJsonResponse({ error: "try again" }, 503);
+          return createJsonResponse(
+            {
+              code: "dependency_unavailable",
+              error: "try again",
+            },
+            503
+          );
         }
 
         return createJsonResponse(
           {
             accepted: 1,
             rejected: 0,
-            request_id: "req_retry",
           },
           202
         );
       }
 
       return createJsonResponse({});
-    }));
+    });
     const client = createVoidhashClient({
       analytics: {
         flushIntervalMs: 60_000,
@@ -44,38 +50,47 @@ describe("analytics delivery", () => {
     await client.initialize();
     await client.track("purchase_started");
 
-    expect(await client.flushAnalytics()).toBeNull();
-    expect(await client.flushAnalytics()).toEqual({
-      accepted: 1,
-      rejected: 0,
-      requestId: "req_retry",
-    });
+    try {
+      expect(await client.flushAnalytics()).toBeNull();
+      expect(await client.flushAnalytics()).toBeNull();
 
-    await client.destroy();
+      vi.advanceTimersByTime(1_000);
+      expect(await client.flushAnalytics()).toEqual({
+        accepted: 1,
+        rejected: 0,
+      });
+    } finally {
+      vi.useRealTimers();
+      await client.destroy();
+    }
   });
 
   it("splits batches when the ingest service returns 413", async () => {
     let analyticsAttempts = 0;
-    vi.stubGlobal("fetch", vi.fn(async (input: URL | RequestInfo) => {
-      const url = input.toString();
-      if (url.endsWith("/v1/events")) {
+    installFetchMock((call) => {
+      if (call.url.endsWith("/batch")) {
         analyticsAttempts += 1;
         if (analyticsAttempts === 1) {
-          return createJsonResponse({ error: "payload too large" }, 413);
+          return createJsonResponse(
+            {
+              code: "payload_too_large",
+              error: "payload too large",
+            },
+            413
+          );
         }
 
         return createJsonResponse(
           {
             accepted: 1,
             rejected: 0,
-            request_id: `req_${analyticsAttempts}`,
           },
           202
         );
       }
 
       return createJsonResponse({});
-    }));
+    });
     const client = createVoidhashClient({
       analytics: {
         flushIntervalMs: 60_000,
@@ -92,10 +107,67 @@ describe("analytics delivery", () => {
     expect(await client.flushAnalytics()).toEqual({
       accepted: 2,
       rejected: 0,
-      requestId: "req_3",
     });
     expect(analyticsAttempts).toBe(3);
 
     await client.destroy();
   });
+
+  it("honors Retry-After before retrying a rate-limited batch", async () => {
+    vi.useFakeTimers();
+
+    let analyticsAttempts = 0;
+    installFetchMock((call) => {
+      if (call.url.endsWith("/batch")) {
+        analyticsAttempts += 1;
+        if (analyticsAttempts === 1) {
+          return createJsonResponse(
+            {
+              code: "rate_limited",
+              error: "request rate limit exceeded",
+              retry_after_ms: 2_000,
+            },
+            429,
+            {
+              "retry-after": "2",
+            }
+          );
+        }
+
+        return createJsonResponse(
+          {
+            accepted: 1,
+            rejected: 0,
+          },
+          202
+        );
+      }
+
+      return createJsonResponse({});
+    });
+    const client = createVoidhashClient({
+      analytics: {
+        flushIntervalMs: 60_000,
+      },
+      publishableKey: "vh_pk_test",
+    });
+
+    try {
+      await client.initialize();
+      await client.track("purchase_started");
+
+      expect(await client.flushAnalytics()).toBeNull();
+      expect(await client.flushAnalytics()).toBeNull();
+
+      vi.advanceTimersByTime(2_000);
+      expect(await client.flushAnalytics()).toEqual({
+        accepted: 1,
+        rejected: 0,
+      });
+      expect(analyticsAttempts).toBe(2);
+    } finally {
+      vi.useRealTimers();
+      await client.destroy();
+    }
+  });
 });
diff --git a/libraries/web/tests/client.test.ts b/libraries/web/tests/client.test.ts
index a112bb07d..a9041604a 100644
--- a/libraries/web/tests/client.test.ts
+++ b/libraries/web/tests/client.test.ts
@@ -40,12 +40,11 @@ describe("VoidhashWebClient", () => {
         });
       }
 
-      if (call.url.endsWith("/v1/events")) {
+      if (call.url.endsWith("/batch")) {
         return createJsonResponse(
           {
             accepted: 1,
             rejected: 0,
-            request_id: "req_1",
           },
           202
         );
@@ -66,23 +65,37 @@ describe("VoidhashWebClient", () => {
     });
 
     await client.initialize();
-    const appUserId = client.getAppUserId();
+    const distinctId = client.getDistinctId();
     const flags = await client.getFeatureFlags(["new-nav"]);
     await client.track("checkout_started", { source: "pricing_page" });
     const flushResult = await client.flushAnalytics();
 
-    expect(appUserId).toMatch(/^vh:anon:/);
+    expect(distinctId).toMatch(/^vh:anon:/);
     expect(flags.flags[0]?.key).toBe("new-nav");
     expect(client.isFeatureEnabled("new-nav")).toBe(true);
     expect(flushResult).toEqual({
       accepted: 1,
       rejected: 0,
-      requestId: "req_1",
     });
 
-    const analyticsCall = calls.find((call) => call.url.includes("/v1/events"));
-    expect(analyticsCall?.url).toBe("https://i.voidhash.test/v1/events");
-    expect(analyticsCall?.headers["x-distinct-id"]).toBe(appUserId);
+    const analyticsCall = calls.find((call) => call.url.includes("/batch"));
+    expect(analyticsCall?.url).toBe("https://i.voidhash.test/batch");
+    expect(analyticsCall?.headers).toMatchObject({
+      "content-type": "application/json",
+    });
+    expect(JSON.parse(analyticsCall?.body ?? "{}")).toMatchObject({
+      events: [
+        {
+          distinct_id: distinctId,
+          event: "checkout_started",
+          properties: {
+            source: "pricing_page",
+          },
+          uuid: expect.stringMatching(/^evt_/),
+        },
+      ],
+      token: "vh_pk_test",
+    });
 
     await client.destroy();
   });
@@ -91,7 +104,19 @@ describe("VoidhashWebClient", () => {
     const { calls } = installFetchMock((call) => {
       if (call.url.endsWith("/sdk/identify")) {
         return createJsonResponse({
-          appUserId: "user_123",
+          customerId: "customer_123",
+          distinctId: "user_123",
+          email: null,
+          name: null,
+        });
+      }
+
+      if (call.url.endsWith("/sdk/sync-customer-attributes")) {
+        return createJsonResponse({
+          customerId: "customer_sync",
+          distinctId: "synced",
+          email: null,
+          name: null,
         });
       }
 
@@ -105,25 +130,25 @@ describe("VoidhashWebClient", () => {
     });
 
     await client.initialize();
-    const initialAppUserId = client.getAppUserId();
+    const initialDistinctId = client.getDistinctId();
     await client.identify("user_123", { companyId: "acme", plan: "pro" });
-    await client.resetIdentity();
+    await client.reset();
 
     const syncCalls = calls.filter((call) =>
       call.url.endsWith("/sdk/sync-customer-attributes")
     );
     const identifyCall = calls.find((call) => call.url.endsWith("/sdk/identify"));
 
-    expect(syncCalls[0]?.headers["x-app-user-id"]).toBe(initialAppUserId);
+    expect(syncCalls[0]?.headers["x-distinct-id"]).toBe(initialDistinctId);
     expect(JSON.parse(identifyCall?.body ?? "{}")).toEqual({
-      appUserId: "user_123",
+      distinctId: "user_123",
       traits: {
         companyId: "acme",
         plan: "pro",
       },
     });
-    expect(syncCalls[1]?.headers["x-app-user-id"]).toBe("user_123");
-    expect(client.getAppUserId()).toMatch(/^vh:anon:/);
+    expect(syncCalls[1]?.headers["x-distinct-id"]).toBe("user_123");
+    expect(client.getDistinctId()).toMatch(/^vh:anon:/);
 
     await client.destroy();
   });
diff --git a/libraries/web/tests/helpers.ts b/libraries/web/tests/helpers.ts
index c22e2e44e..33f6f6aef 100644
--- a/libraries/web/tests/helpers.ts
+++ b/libraries/web/tests/helpers.ts
@@ -9,11 +9,13 @@ export interface FetchCall {
 
 export const createJsonResponse = (
   body: Record<string, unknown>,
-  status = 200
+  status = 200,
+  headers?: Record<string, string>
 ) =>
   new Response(JSON.stringify(body), {
     headers: {
       "content-type": "application/json",
+      ...headers,
     },
     status,
   });
@@ -29,17 +31,38 @@ export const installFetchMock = (
 ) => {
   const calls: FetchCall[] = [];
   const fetchMock = vi.fn(async (input: URL | RequestInfo, init?: RequestInit) => {
-    const headers = new Headers(init?.headers);
+    let url: string;
+    let method: string;
+    let headers: Headers;
+    let bodyStr: string | undefined;
+
+    if (input instanceof Request) {
+      url = input.url;
+      method = input.method;
+      headers = new Headers(input.headers);
+      try {
+        bodyStr = await input.clone().text();
+      } catch {
+        bodyStr = undefined;
+      }
+    } else {
+      url = input.toString();
+      method = init?.method ?? "GET";
+      headers = new Headers(init?.headers);
+      if (typeof init?.body === "string") {
+        bodyStr = init.body;
+      } else if (init?.body && ArrayBuffer.isView(init.body)) {
+        bodyStr = new TextDecoder().decode(init.body);
+      } else {
+        bodyStr = undefined;
+      }
+    }
+
     const call: FetchCall = {
-      body:
-        typeof init?.body === "string"
-          ? init.body
-          : init?.body instanceof Uint8Array
-            ? new TextDecoder().decode(init.body)
-            : undefined,
+      body: bodyStr,
       headers: Object.fromEntries(headers.entries()),
-      method: init?.method ?? "GET",
-      url: input.toString(),
+      method,
+      url,
     };
 
     calls.push(call);
diff --git a/libraries/web/tests/react.test.tsx b/libraries/web/tests/react.test.tsx
index 377d628b7..c91534d50 100644
--- a/libraries/web/tests/react.test.tsx
+++ b/libraries/web/tests/react.test.tsx
@@ -49,13 +49,13 @@ describe("react integration", () => {
     const root = createRoot(container);
 
     function TestComponent() {
-      const { appUserId, isInitialized } = useVoidhash();
+      const { distinctId, isInitialized } = useVoidhash();
       const flags = useFeatureFlags(["new-nav"]);
 
       return (
         <div>
           <span data-testid="ready">{String(isInitialized)}</span>
-          <span data-testid="app-user-id">{appUserId ?? ""}</span>
+          <span data-testid="distinct-id">{distinctId ?? ""}</span>
           <span data-testid="flag">{String(flags.isEnabled("new-nav"))}</span>
         </div>
       );
@@ -85,7 +85,7 @@ describe("react integration", () => {
       "true"
     );
     expect(
-      container.querySelector('[data-testid="app-user-id"]')?.textContent
+      container.querySelector('[data-testid="distinct-id"]')?.textContent
     ).toMatch(/^vh:anon:/);
     expect(container.querySelector('[data-testid="flag"]')?.textContent).toBe(
       "true"
diff --git a/packages/api-spec/package.json b/packages/api-spec/package.json
index 10d685a93..ba4d3fb97 100644
--- a/packages/api-spec/package.json
+++ b/packages/api-spec/package.json
@@ -15,6 +15,7 @@
   "type": "module",
   "exports": {
     ".": "./src/index.ts",
+    "./event-capture": "./src/event-capture.ts",
     "./errors": "./src/errors/index.ts"
   },
   "scripts": {
diff --git a/packages/api-spec/src/api.ts b/packages/api-spec/src/api.ts
index 446a7d7a8..db1caeb07 100644
--- a/packages/api-spec/src/api.ts
+++ b/packages/api-spec/src/api.ts
@@ -139,8 +139,8 @@ export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
         })
       )
       .add(
-        HttpApiEndpoint.get("byAppUserId", "/by-app-user-id/:appUserId", {
-          params: { appUserId: Schema.String },
+        HttpApiEndpoint.get("byDistinctId", "/by-distinct-id/:distinctId", {
+          params: { distinctId: Schema.String },
           success: Customer,
           error: [ActionForbiddenError, CustomerNotFoundError, CustomerServiceError],
         })
diff --git a/packages/api-spec/src/auth.ts b/packages/api-spec/src/auth.ts
index 8ad068bc0..18c58878f 100644
--- a/packages/api-spec/src/auth.ts
+++ b/packages/api-spec/src/auth.ts
@@ -23,7 +23,7 @@ const ApiSessionOrganizationsSchema = Schema.Array(ApiSessionOrganizationSchema)
 const ApiSessionProjectsSchema = Schema.Array(ApiSessionProjectSchema);
 
 export const ApiSessionCustomerSchema = Schema.Struct({
-  appUserId: Schema.String,
+  distinctId: Schema.String,
 });
 
 export const ApiSessionUserSchema = Schema.Struct({
diff --git a/packages/api-spec/src/errors/customer.ts b/packages/api-spec/src/errors/customer.ts
index 113f31f8c..1b8c252d6 100644
--- a/packages/api-spec/src/errors/customer.ts
+++ b/packages/api-spec/src/errors/customer.ts
@@ -17,7 +17,7 @@ export class CustomerNotFoundError extends Schema.TaggedErrorClass<CustomerNotFo
   },
   { httpApiStatus: 404 }
 ) {
-  toString(): string {
+  override toString(): string {
     return `The following customer not found: ${this.id}`;
   }
 }
@@ -30,7 +30,7 @@ export class CustomerInvalidAnonymousIdError extends Schema.TaggedErrorClass<Cus
   },
   { httpApiStatus: 400 }
 ) {
-  toString(): string {
+  override toString(): string {
     return `The following anonymous ID is invalid: ${this.id}`;
   }
 }
diff --git a/packages/api-spec/src/errors/perk.ts b/packages/api-spec/src/errors/perk.ts
index 6d143cc3e..8621d3f6b 100644
--- a/packages/api-spec/src/errors/perk.ts
+++ b/packages/api-spec/src/errors/perk.ts
@@ -26,7 +26,7 @@ export class PerkSlugAlreadyExistsError extends Schema.TaggedErrorClass<PerkSlug
   },
   { httpApiStatus: 409 }
 ) {
-  toString(): string {
+  override toString(): string {
     return `The following perk slug already exists: ${this.slug}`;
   }
 }
diff --git a/packages/api-spec/src/errors/product.ts b/packages/api-spec/src/errors/product.ts
index 1425355e3..5b203f9e4 100644
--- a/packages/api-spec/src/errors/product.ts
+++ b/packages/api-spec/src/errors/product.ts
@@ -26,7 +26,7 @@ export class ProductSlugAlreadyExistsError extends Schema.TaggedErrorClass<Produ
   },
   { httpApiStatus: 409 }
 ) {
-  toString(): string {
+  override toString(): string {
     return `The following product slug already exists: ${this.slug}`;
   }
 }
diff --git a/packages/api-spec/src/errors/project.ts b/packages/api-spec/src/errors/project.ts
index 804b87e37..f964125cf 100644
--- a/packages/api-spec/src/errors/project.ts
+++ b/packages/api-spec/src/errors/project.ts
@@ -17,7 +17,7 @@ export class ProjectNotFoundError extends Schema.TaggedErrorClass<ProjectNotFoun
   },
   { httpApiStatus: 404 }
 ) {
-  toString(): string {
+  override toString(): string {
     return `The following project not found: ${this.projectId}`;
   }
 }
diff --git a/packages/api-spec/src/errors/sdk.ts b/packages/api-spec/src/errors/sdk.ts
index 78987c117..8f6de2125 100644
--- a/packages/api-spec/src/errors/sdk.ts
+++ b/packages/api-spec/src/errors/sdk.ts
@@ -22,12 +22,12 @@ export class SdkCustomerNotFoundError extends Schema.TaggedErrorClass<SdkCustome
 export class SdkCustomerAlreadyIdentifiedError extends Schema.TaggedErrorClass<SdkCustomerAlreadyIdentifiedError>()(
   "SdkCustomerAlreadyIdentifiedError",
   {
-    appUserId: Schema.String,
+    distinctId: Schema.String,
   },
   { httpApiStatus: 409 }
 ) {
-  toString(): string {
-    return `The following customer was already identified: ${this.appUserId}`;
+  override toString(): string {
+    return `The following customer was already identified: ${this.distinctId}`;
   }
 }
 
diff --git a/packages/api-spec/src/event-capture.ts b/packages/api-spec/src/event-capture.ts
new file mode 100644
index 000000000..1ad1012db
--- /dev/null
+++ b/packages/api-spec/src/event-capture.ts
@@ -0,0 +1,184 @@
+import { Schema } from "effect";
+import { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+
+const CaptureErrorResponseFields = {
+  error: Schema.NonEmptyString,
+};
+
+// export { CaptureAcceptedResponse, CaptureBatchRequest, CaptureErrorCode, CaptureErrorResponse };
+// export { CaptureEvent, CaptureSdkRequestMetadata };
+export type EventPropertiesFieldPrimitive = string | number | boolean | null;
+export type EventPropertiesField =
+  | EventPropertiesFieldPrimitive
+  | ReadonlyArray<EventPropertiesField>
+  | {
+      readonly [key: string]: EventPropertiesField;
+    };
+
+export const EventPropertiesField: Schema.Codec<EventPropertiesField> = Schema.Union([
+  Schema.String,
+  Schema.Finite,
+  Schema.Boolean,
+  Schema.Null,
+  Schema.Array(
+    Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesField),
+  ),
+  Schema.Record(
+    Schema.String,
+    Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesField),
+  ),
+]);
+export const EventPropertiesSchema = Schema.Record(Schema.String, EventPropertiesField);
+
+
+export type EventContextFieldPrimitive = string | number | boolean | null;
+export type EventContextField =
+  | EventContextFieldPrimitive
+  | ReadonlyArray<EventContextField>
+  | {
+      readonly [key: string]: EventContextField;
+    };
+export const EventContextField: Schema.Codec<EventContextField> = Schema.Union([
+  Schema.String,
+  Schema.Finite,
+  Schema.Boolean,
+  Schema.Null,
+  Schema.Array(
+    Schema.suspend((): Schema.Codec<EventContextField> => EventContextField),
+  ),
+  Schema.Record(
+    Schema.String,
+    Schema.suspend((): Schema.Codec<EventContextField> => EventContextField),
+  ),
+]);
+export const EventContextSchema = Schema.Record(Schema.String, EventContextField);
+
+export const CaptureEvent = Schema.Struct({
+  uuid: Schema.NonEmptyString,
+  event: Schema.NonEmptyString,
+  context: EventContextSchema,
+  properties: EventPropertiesSchema,
+  distinct_id: Schema.NonEmptyString,
+  session_id: Schema.optional(Schema.NonEmptyString),
+  timestamp: Schema.optional(Schema.DateValid),
+});
+
+export const CaptureSingleRequest = Schema.Struct({
+  ...CaptureEvent.fields,
+  sent_at: Schema.DateValid,
+  token: Schema.NonEmptyString,
+});
+
+export const CaptureBatchRequest = Schema.Struct({
+  events: Schema.NonEmptyArray(CaptureEvent),
+  sent_at: Schema.DateValid,
+  token: Schema.NonEmptyString,
+});
+
+export class CaptureAcceptedResponse extends Schema.Class<CaptureAcceptedResponse>(
+  "CaptureAcceptedResponse",
+)({
+  accepted: Schema.Int,
+  rejected: Schema.Int,
+}) {
+  httpApiStatus = 202;
+}
+// export const CaptureAcceptedApiResponse = CaptureAcceptedResponse.pipe(HttpApiSchema.status(202));
+
+export class CaptureInvalidRequestError extends Schema.TaggedErrorClass<CaptureInvalidRequestError>()(
+  "CaptureInvalidRequestError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("invalid_request"),
+  },
+  { httpApiStatus: 400 },
+) {}
+
+export class CaptureUnauthorizedError extends Schema.TaggedErrorClass<CaptureUnauthorizedError>()(
+  "CaptureUnauthorizedError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("unauthorized"),
+  },
+  { httpApiStatus: 401 },
+) {}
+
+export class CapturePayloadTooLargeError extends Schema.TaggedErrorClass<CapturePayloadTooLargeError>()(
+  "CapturePayloadTooLargeError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("payload_too_large"),
+  },
+  { httpApiStatus: 413 },
+) {}
+
+export class CaptureRateLimitedError extends Schema.TaggedErrorClass<CaptureRateLimitedError>()(
+  "CaptureRateLimitedError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("rate_limited"),
+    retry_after_ms: Schema.optional(Schema.Int),
+  },
+  { httpApiStatus: 429 },
+) {}
+
+export class CaptureDependencyUnavailableError extends Schema.TaggedErrorClass<CaptureDependencyUnavailableError>()(
+  "CaptureDependencyUnavailableError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("dependency_unavailable"),
+  },
+  { httpApiStatus: 503 },
+) {}
+
+export class CaptureInternalServerError extends Schema.TaggedErrorClass<CaptureInternalServerError>()(
+  "CaptureInternalServerError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("internal_error"),
+  },
+  { httpApiStatus: 500 },
+) {}
+
+export type CaptureErrorResponse =
+  | CaptureInvalidRequestError
+  | CaptureUnauthorizedError
+  | CapturePayloadTooLargeError
+  | CaptureRateLimitedError
+  | CaptureDependencyUnavailableError
+  | CaptureInternalServerError;
+
+export type CaptureErrorCode = CaptureErrorResponse["code"];
+
+
+export const EventCaptureApi = HttpApi.make("EventCaptureApi").add(
+  HttpApiGroup.make("event_capture")
+    .add(
+      HttpApiEndpoint.post("capture", "/capture", {
+        error: [
+          CaptureInvalidRequestError,
+          CaptureUnauthorizedError,
+          CapturePayloadTooLargeError,
+          CaptureRateLimitedError,
+          CaptureDependencyUnavailableError,
+          CaptureInternalServerError,
+        ],
+        payload: CaptureSingleRequest,
+        success: CaptureAcceptedResponse,
+      }),
+    )
+    .add(
+      HttpApiEndpoint.post("batch", "/batch", {
+        error: [
+          CaptureInvalidRequestError,
+          CaptureUnauthorizedError,
+          CapturePayloadTooLargeError,
+          CaptureRateLimitedError,
+          CaptureDependencyUnavailableError,
+          CaptureInternalServerError,
+        ],
+        payload: CaptureBatchRequest,
+        success: CaptureAcceptedResponse,
+      }),
+    ),
+);
diff --git a/packages/api-spec/src/schema.ts b/packages/api-spec/src/schema.ts
index 53b02dbcf..c43cc6b65 100644
--- a/packages/api-spec/src/schema.ts
+++ b/packages/api-spec/src/schema.ts
@@ -3,7 +3,7 @@ import { Schema } from "effect";
 import { ChangesetSchema } from "./changeset";
 
 export const PublishableKeyAuthHeaders = Schema.Struct({
-  "x-app-user-id": Schema.String,
+  "x-distinct-id": Schema.String,
   "x-publishable-key": Schema.String,
 });
 
@@ -85,23 +85,23 @@ export const ApiKeyIdParam = Schema.String;
 // ========================================================
 
 export class Customer extends Schema.Class<Customer>("Customer")({
-  appUserId: Schema.String,
+  customerId: Schema.String,
+  distinctId: Schema.String,
   email: Schema.NullOr(Schema.String),
-  id: Schema.String,
   name: Schema.NullOr(Schema.String),
 }) {}
 
 export class CreateCustomerBody extends Schema.Class<CreateCustomerBody>(
   "CreateCustomerBody"
 )({
-  appUserId: Schema.String,
+  distinctId: Schema.String,
   email: Schema.optional(Schema.String),
   name: Schema.optional(Schema.String),
 }) {}
 
 export const CustomerIdParam = Schema.String;
 
-export const AppUserIdParam = Schema.String;
+export const DistinctIdParam = Schema.String;
 
 // ========================================================
 // Organizations
@@ -277,7 +277,7 @@ const SdkTraits = Schema.Record(Schema.String, SdkTraitValue);
 export class SdkIdentifyBody extends Schema.Class<SdkIdentifyBody>(
   "SdkIdentifyBody"
 )({
-  appUserId: Schema.String,
+  distinctId: Schema.String,
   email: Schema.optional(Schema.String),
   name: Schema.optional(Schema.String),
   traits: Schema.optional(SdkTraits),
@@ -309,8 +309,8 @@ export class SdkSyncTransactionResponse extends Schema.Class<SdkSyncTransactionR
 }) {}
 
 export class SdkCustomer extends Schema.Class<SdkCustomer>("SdkCustomer")({
-  appUserId: Schema.String,
   customerId: Schema.String,
+  distinctId: Schema.String,
   email: Schema.NullOr(Schema.String),
   name: Schema.NullOr(Schema.String),
 }) {}
diff --git a/packages/shared/src/auth.ts b/packages/shared/src/auth.ts
index 84a3e6349..9056ee2a1 100644
--- a/packages/shared/src/auth.ts
+++ b/packages/shared/src/auth.ts
@@ -19,7 +19,7 @@ const SessionOrganizationsSchema = Schema.Array(SessionOrganizationSchema);
 const SessionProjectsSchema = Schema.Array(SessionProjectSchema);
 
 export const SessionCustomerSchema = Schema.Struct({
-  appUserId: Schema.String,
+  distinctId: Schema.String,
 });
 
 export const SessionUserSchema = Schema.Struct({
@@ -118,7 +118,7 @@ export type PublishableKeySession = typeof PublishableKeySessionSchema.Type;
 //   readonly method: 'publishable-key';
 //   readonly name: string;
 //   readonly customer: {
-//     readonly appUserId: string;
+//     readonly distinctId: string;
 //   };
 //   readonly user: null;
 //   readonly cookie: null;

From fdef6c1b3ac9e49246719c08101de08bba837fd1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 24 Mar 2026 11:53:41 +0100
Subject: [PATCH 007/129] fix: package-lock

---
 pnpm-lock.yaml | 17 +++--------------
 1 file changed, 3 insertions(+), 14 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9f9656ef2..b24257888 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -260,12 +260,12 @@ importers:
       '@react-native-async-storage/async-storage':
         specifier: ^1.24.0 || ^2.0.0
         version: 2.2.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      '@voidhash/api-spec':
+        specifier: workspace:*
+        version: link:../../packages/api-spec
       effect:
         specifier: 4.0.0-beta.23
         version: 4.0.0-beta.23
-      neverthrow:
-        specifier: ^8.2.0
-        version: 8.2.0
     devDependencies:
       '@types/jest':
         specifier: ^29.5.14
@@ -276,9 +276,6 @@ importers:
       '@vitejs/plugin-react':
         specifier: ^4.6.0
         version: 4.7.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
-      '@voidhash/api-spec':
-        specifier: workspace:*
-        version: link:../../packages/api-spec
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
@@ -6125,10 +6122,6 @@ packages:
   nested-error-stacks@2.0.1:
     resolution: {integrity: sha512-SrQrok4CATudVzBS7coSz26QRSmlK9TzzoFbeKfcPBUFPjcQM9Rqvr/DlJkOrwI/0KcgvMub1n1g5Jt9EgRn4A==}
 
-  neverthrow@8.2.0:
-    resolution: {integrity: sha512-kOCT/1MCPAxY5iUV3wytNFUMUolzuwd/VF/1KCx7kf6CutrOsTie+84zTGTpgQycjvfLdBBdvBvFLqFD2c0wkQ==}
-    engines: {node: '>=18'}
-
   next@16.0.0:
     resolution: {integrity: sha512-nYohiNdxGu4OmBzggxy9rczmjIGI+TpR5vbKTsE1HqYwNm1B+YSiugSrFguX6omMOKnDHAmBPY4+8TNJk0Idyg==}
     engines: {node: '>=20.9.0'}
@@ -15764,10 +15757,6 @@ snapshots:
 
   nested-error-stacks@2.0.1: {}
 
-  neverthrow@8.2.0:
-    optionalDependencies:
-      '@rollup/rollup-linux-x64-gnu': 4.54.0
-
   next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@next/env': 16.0.0

From 73d606d93b7aaa7826faeef11c055b61fcb804b7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 24 Mar 2026 13:30:49 +0100
Subject: [PATCH 008/129] publish from their directory directly

---
 .../workflows/publish-libraries-canary-preview.yml   | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish-libraries-canary-preview.yml b/.github/workflows/publish-libraries-canary-preview.yml
index da29ee67e..f515aac97 100644
--- a/.github/workflows/publish-libraries-canary-preview.yml
+++ b/.github/workflows/publish-libraries-canary-preview.yml
@@ -99,21 +99,25 @@ jobs:
         run: pnpm --filter @voidhash/react-native build
 
       - name: Publish api-spec canary
+        working-directory: packages/api-spec
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: pnpm --filter @voidhash/api-spec publish --tag canary --access public --no-git-checks
+        run: npm publish --tag canary --access public
 
       - name: Publish node canary
+        working-directory: libraries/node
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: pnpm --filter @voidhash/node publish --tag canary --access public --no-git-checks
+        run: npm publish --tag canary --access public
 
       - name: Publish web canary
+        working-directory: libraries/web
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: pnpm --filter @voidhash/web publish --tag canary --access public --no-git-checks
+        run: npm publish --tag canary --access public
 
       - name: Publish react-native canary
+        working-directory: libraries/react-native
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: pnpm --filter @voidhash/react-native publish --tag canary --access public --no-git-checks
+        run: npm publish --tag canary --access public

From e9036dbacf0f1e847d6b3ba6598b24af4b32b4d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 18 Apr 2026 15:19:23 +0200
Subject: [PATCH 009/129] wip: refactor

---
 apps/cli/package.json                         |    2 +-
 apps/cli/src/cli/commands/init.ts             |    2 +-
 apps/cli/src/domain/services/auth.ts          |   64 +-
 apps/cli/src/domain/services/schema.ts        |   27 +-
 apps/cli/src/services/auth/get-session.ts     |   32 +-
 .../organization/create-organization.ts       |   29 +-
 .../organization/list-organizations.ts        |   29 +-
 apps/cli/src/utils/api-client.ts              |   49 +-
 .../organizations/create-organization.ts      |    6 +-
 apps/cli/src/utils/projects/create-project.ts |   11 +-
 docs/JS-SDK.md                                |   14 +-
 examples/react-native-example/package.json    |    2 +-
 examples/react-native-example/tsconfig.json   |    5 +-
 libraries/node/package.json                   |    2 +-
 libraries/node/src/effect-client.ts           |   13 +-
 .../node/src/generated/grouped-client.ts      |   65 +
 libraries/node/src/internal/client-types.ts   |  172 -
 .../src/internal/make-generated-client.ts     |   46 +-
 .../internal/normalize-generated-client.ts    |  122 -
 libraries/node/src/promise-client.ts          |    3 +-
 libraries/node/tests/client.test.ts           |   34 +-
 libraries/react-native/package.json           |    2 +-
 .../__tests__/helpers/effect-test-harness.ts  |    2 +-
 libraries/react-native/src/client-effect.ts   |    2 +-
 libraries/react-native/src/core/event-bus.ts  |    4 +-
 .../core/identity/customer-info-manager.ts    |    2 +-
 .../src/core/networking/api-client.ts         |  145 +-
 .../src/core/utils/get-common-sdk-headers.ts  |   25 +-
 .../src/react/hooks/use-customer.ts           |    2 +-
 libraries/web/package.json                    |    2 +-
 .../src/core/analytics/analytics-context.ts   |    4 +-
 .../src/core/analytics/analytics-service.ts   |   16 +-
 libraries/web/src/core/analytics/contracts.ts |    8 +-
 .../web/src/core/networking/api-client.ts     |  116 +-
 .../networking/event-capture-api-client.ts    |   22 +-
 .../networking/normalize-generated-client.ts  |  121 -
 package.json                                  |    2 +
 packages/api-spec/LICENSE.md                  |   21 -
 packages/api-spec/README.md                   |   43 -
 packages/api-spec/package.json                |   32 -
 packages/api-spec/src/api.ts                  |  398 -
 packages/api-spec/src/auth.ts                 |   99 -
 packages/api-spec/src/changeset.ts            |  204 -
 packages/api-spec/src/errors/admin.ts         |   10 -
 packages/api-spec/src/errors/analytics.ts     |   28 -
 packages/api-spec/src/errors/api-key.ts       |   19 -
 packages/api-spec/src/errors/billing.ts       |   28 -
 packages/api-spec/src/errors/changeset.ts     |   10 -
 packages/api-spec/src/errors/common.ts        |   29 -
 packages/api-spec/src/errors/customer.ts      |   36 -
 packages/api-spec/src/errors/index.ts         |   18 -
 packages/api-spec/src/errors/organization.ts  |   19 -
 .../api-spec/src/errors/payment-provider.ts   |   73 -
 .../api-spec/src/errors/paywall-location.ts   |   10 -
 packages/api-spec/src/errors/paywall.ts       |   37 -
 packages/api-spec/src/errors/perk.ts          |   32 -
 packages/api-spec/src/errors/product-perk.ts  |   19 -
 packages/api-spec/src/errors/product.ts       |   32 -
 packages/api-spec/src/errors/project.ts       |   23 -
 packages/api-spec/src/errors/sdk.ts           |   41 -
 packages/api-spec/src/errors/user.ts          |   10 -
 packages/api-spec/src/errors/webhook.ts       |   37 -
 packages/api-spec/src/event-capture.ts        |  184 -
 packages/api-spec/src/index.ts                |    5 -
 packages/api-spec/src/middlewares.ts          |   31 -
 packages/api-spec/src/schema.ts               |  536 --
 .../openapi/preview/core.json                 | 8086 +++++++++++++++++
 .../openapi/preview/event-capture.json        |  787 ++
 .../openapi/production/core.json              | 8086 +++++++++++++++++
 .../openapi/production/event-capture.json     |  787 ++
 packages/generated-clients/package.json       |   22 +
 .../generated-clients/src/core/generated.ts   | 1230 +++
 packages/generated-clients/src/core/index.ts  |    1 +
 .../src/event-capture/generated.ts            |  229 +
 .../src/event-capture/index.ts                |   37 +
 packages/generated-clients/src/index.ts       |    2 +
 .../tsconfig.json                             |    0
 packages/shared/src/admin.ts                  |    2 +-
 packages/shared/src/analytics.ts              |    2 +-
 packages/shared/src/api-key.ts                |    2 +-
 packages/shared/src/app-store.ts              |    2 +-
 packages/shared/src/billing.ts                |    2 +-
 packages/shared/src/customer.ts               |    2 +-
 packages/shared/src/deploy-changeset.ts       |    2 +-
 packages/shared/src/errors.ts                 |    2 +-
 packages/shared/src/google-play.ts            |    2 +-
 packages/shared/src/organization.ts           |    2 +-
 .../src/payment-provider-configuration.ts     |    2 +-
 .../shared/src/payment-provider-product.ts    |    2 +-
 packages/shared/src/paywall.ts                |    2 +-
 packages/shared/src/perk-grant.ts             |    2 +-
 packages/shared/src/perk.ts                   |    2 +-
 packages/shared/src/product-perk.ts           |    2 +-
 packages/shared/src/product.ts                |    2 +-
 packages/shared/src/project.ts                |    2 +-
 packages/shared/src/sdk.ts                    |    2 +-
 packages/shared/src/user.ts                   |    2 +-
 packages/shared/src/webhook.ts                |    2 +-
 pnpm-lock.yaml                                |   18 +-
 scripts/generate-node-grouped-client.mjs      |  199 +
 scripts/generate-openapi-clients.mjs          |  119 +
 101 files changed, 20220 insertions(+), 2693 deletions(-)
 create mode 100644 libraries/node/src/generated/grouped-client.ts
 delete mode 100644 libraries/node/src/internal/client-types.ts
 delete mode 100644 libraries/node/src/internal/normalize-generated-client.ts
 delete mode 100644 libraries/web/src/core/networking/normalize-generated-client.ts
 delete mode 100644 packages/api-spec/LICENSE.md
 delete mode 100644 packages/api-spec/README.md
 delete mode 100644 packages/api-spec/package.json
 delete mode 100644 packages/api-spec/src/api.ts
 delete mode 100644 packages/api-spec/src/auth.ts
 delete mode 100644 packages/api-spec/src/changeset.ts
 delete mode 100644 packages/api-spec/src/errors/admin.ts
 delete mode 100644 packages/api-spec/src/errors/analytics.ts
 delete mode 100644 packages/api-spec/src/errors/api-key.ts
 delete mode 100644 packages/api-spec/src/errors/billing.ts
 delete mode 100644 packages/api-spec/src/errors/changeset.ts
 delete mode 100644 packages/api-spec/src/errors/common.ts
 delete mode 100644 packages/api-spec/src/errors/customer.ts
 delete mode 100644 packages/api-spec/src/errors/index.ts
 delete mode 100644 packages/api-spec/src/errors/organization.ts
 delete mode 100644 packages/api-spec/src/errors/payment-provider.ts
 delete mode 100644 packages/api-spec/src/errors/paywall-location.ts
 delete mode 100644 packages/api-spec/src/errors/paywall.ts
 delete mode 100644 packages/api-spec/src/errors/perk.ts
 delete mode 100644 packages/api-spec/src/errors/product-perk.ts
 delete mode 100644 packages/api-spec/src/errors/product.ts
 delete mode 100644 packages/api-spec/src/errors/project.ts
 delete mode 100644 packages/api-spec/src/errors/sdk.ts
 delete mode 100644 packages/api-spec/src/errors/user.ts
 delete mode 100644 packages/api-spec/src/errors/webhook.ts
 delete mode 100644 packages/api-spec/src/event-capture.ts
 delete mode 100644 packages/api-spec/src/index.ts
 delete mode 100644 packages/api-spec/src/middlewares.ts
 delete mode 100644 packages/api-spec/src/schema.ts
 create mode 100644 packages/generated-clients/openapi/preview/core.json
 create mode 100644 packages/generated-clients/openapi/preview/event-capture.json
 create mode 100644 packages/generated-clients/openapi/production/core.json
 create mode 100644 packages/generated-clients/openapi/production/event-capture.json
 create mode 100644 packages/generated-clients/package.json
 create mode 100644 packages/generated-clients/src/core/generated.ts
 create mode 100644 packages/generated-clients/src/core/index.ts
 create mode 100644 packages/generated-clients/src/event-capture/generated.ts
 create mode 100644 packages/generated-clients/src/event-capture/index.ts
 create mode 100644 packages/generated-clients/src/index.ts
 rename packages/{api-spec => generated-clients}/tsconfig.json (100%)
 create mode 100644 scripts/generate-node-grouped-client.mjs
 create mode 100644 scripts/generate-openapi-clients.mjs

diff --git a/apps/cli/package.json b/apps/cli/package.json
index 3cee200de..31a956b7b 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -33,7 +33,7 @@
   },
   "dependencies": {
     "@effect/platform-node": "4.0.0-beta.23",
-    "@voidhash/api-spec": "workspace:*",
+    "@voidhash/generated-clients": "workspace:*",
     "@voidhash/shared": "workspace:*",
     "better-auth": "catalog:",
     "effect": "4.0.0-beta.23",
diff --git a/apps/cli/src/cli/commands/init.ts b/apps/cli/src/cli/commands/init.ts
index acae5624d..2aaf2e17c 100644
--- a/apps/cli/src/cli/commands/init.ts
+++ b/apps/cli/src/cli/commands/init.ts
@@ -83,7 +83,7 @@ export const initCommand = Command.make("init", { debug: debugOption }, () =>
 			organization.id,
 			session.projects.filter((p) => p.organizationId === organization.id),
 		);
-		const apiKeys = (yield* apiClient.api_keys.listApiKeys()) as readonly {
+		const apiKeys = (yield* apiClient.apiKeysListApiKeys()) as readonly {
 			id: string;
 			isPublic: boolean;
 			projectId: string;
diff --git a/apps/cli/src/domain/services/auth.ts b/apps/cli/src/domain/services/auth.ts
index c269046d3..d4ecd4f50 100644
--- a/apps/cli/src/domain/services/auth.ts
+++ b/apps/cli/src/domain/services/auth.ts
@@ -1,4 +1,5 @@
 import { NodeServices, NodeHttpServer } from "@effect/platform-node";
+import type { AuthSession200 } from "@voidhash/generated-clients";
 import {
   Console,
   Data,
@@ -49,6 +50,43 @@ interface KeyCallbackEvent {
 
 type CallbackEvent = CancelledCallbackEvent | KeyCallbackEvent;
 
+interface AuthShape {
+  readonly getSignedInSession: Effect.Effect<
+    AuthSession200,
+    FailedToGetSessionError | NoSignedInUserError
+  >;
+  readonly login: Effect.Effect<void, FailedToLoginError | LoginCancelledError>;
+  readonly logout: Effect.Effect<void, FailedToLogoutError>;
+}
+
+const hasTag = (
+  error: unknown,
+  tag: string
+): error is { readonly _tag: string } =>
+  typeof error === "object" &&
+  error !== null &&
+  "_tag" in error &&
+  typeof error._tag === "string" &&
+  error._tag === tag;
+
+const hasNestedTag = (
+  error: unknown,
+  outerTag: string,
+  innerTag: string
+): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
+  hasTag(error, outerTag) &&
+  "data" in error &&
+  typeof error.data === "object" &&
+  error.data !== null &&
+  "_tag" in error.data &&
+  typeof error.data._tag === "string" &&
+  error.data._tag === innerTag;
+
+const isNoSignedInUserError = (
+  error: unknown
+): error is NoSignedInUserError =>
+  error instanceof NoSignedInUserError || hasTag(error, "NoSignedInUserError");
+
 const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
   Effect.gen(function* runCallbackServer() {
     // Create the callback route layer
@@ -123,7 +161,7 @@ const make = Effect.gen(function* effect() {
    * @returns {Effect.Effect<unknown, NoSignedInUserError | FailedToGetSessionError, { name: string; email: string }>}
    *   An Effect that yields the signed-in user's information, or fails with an appropriate error.
    */
-  const getSignedInSession = Effect.gen(function* getSignedInSession() {
+  const getSignedInSession: AuthShape["getSignedInSession"] = Effect.gen(function* getSignedInSession() {
     yield* Effect.logDebug("Reading CLI config for session check");
     const config = (yield* cliConfig
       .readConfig()
@@ -141,32 +179,34 @@ const make = Effect.gen(function* effect() {
     }
 
     yield* Effect.logDebug("Fetching session from API");
-    const sessionResponse = yield* client.auth.session().pipe(
+    const sessionResponse = yield* client.authSession().pipe(
       Effect.tap((session) =>
         Effect.logDebug(`Session retrieved for user: ${session.name}`)
       ),
-      Effect.catchTags({
-        NotAuthenticatedError: () =>
+      Effect.catchIf(
+        (error) => hasNestedTag(error, "AuthSession500", "NotAuthenticatedError"),
+        () =>
           Effect.fail(new NoSignedInUserError({ message: "No signed in user" })),
-      })
+      )
     );
 
     return sessionResponse;
   }).pipe(
     Effect.withSpan("Auth.getSignedInSession"),
     Effect.catchIf(
-      (e) => e._tag !== "NoSignedInUserError",
-      (e) =>
+      isNoSignedInUserError,
+      (error) => Effect.fail(error),
+      (error) =>
         Effect.fail(
           new FailedToGetSessionError({
-            cause: e,
+            cause: error,
             message: "Failed to get session",
           })
         )
     )
   );
 
-  const login = Effect.scoped(
+  const login: AuthShape["login"] = Effect.scoped(
     Effect.gen(function* login() {
       yield* Effect.logDebug("Starting login flow");
       const callbackEventsPubSub = yield* PubSub.unbounded<CallbackEvent>();
@@ -241,7 +281,7 @@ const make = Effect.gen(function* effect() {
    *
    * @returns An Effect that logs out the current user, or fails with a FailedToLogoutError if the logout fails.
    */
-  const logout = Effect.gen(function* logout() {
+  const logout: AuthShape["logout"] = Effect.gen(function* logout() {
     yield* Effect.logDebug("Starting logout");
     const config = yield* cliConfig.readConfig();
     if (!config.api_key) {
@@ -269,11 +309,9 @@ const make = Effect.gen(function* effect() {
     getSignedInSession,
     login,
     logout,
-  } as const;
+  } satisfies AuthShape;
 });
 
-type AuthShape = Effect.Success<typeof make>;
-
 export class Auth extends ServiceMap.Service<Auth, AuthShape>()(
   "voidhash-cli/Auth"
 ) {
diff --git a/apps/cli/src/domain/services/schema.ts b/apps/cli/src/domain/services/schema.ts
index 846f3da56..77a7025d9 100644
--- a/apps/cli/src/domain/services/schema.ts
+++ b/apps/cli/src/domain/services/schema.ts
@@ -35,7 +35,7 @@ const make = Effect.gen(function* effect() {
 			const schema = createEmptyNormalizedSchema();
 
 			// 1. Fetch all perks
-			const remotePerks = yield* apiClient.perks.listPerks();
+			const remotePerks = yield* apiClient.perksListPerks();
 			for (const perk of remotePerks) {
 				schema.perks.set(perk.slug, {
 					name: perk.name,
@@ -45,7 +45,7 @@ const make = Effect.gen(function* effect() {
 
 			// 1b. Fetch all active paywall locations
 			const remoteLocations =
-				yield* apiClient.paywall_locations.listPaywallLocations();
+				yield* apiClient.paywallLocationsListPaywallLocations();
 			for (const location of remoteLocations) {
 				schema.locations.set(location.slug, {
 					description: location.description,
@@ -55,11 +55,11 @@ const make = Effect.gen(function* effect() {
 			}
 
 			// 2. Fetch all products
-			const remoteProducts = yield* apiClient.products.listProducts();
+			const remoteProducts = yield* apiClient.productsListProducts();
 
 			// 3. Fetch payment provider configurations
 			const providerConfigs =
-				yield* apiClient.payment_provider_configurations.listPaymentProviderConfigurations();
+				yield* apiClient.paymentProviderConfigurationsListPaymentProviderConfigurations();
 			for (const config of providerConfigs) {
 				if (
 					config.providerId === "appleAppStore" ||
@@ -71,7 +71,7 @@ const make = Effect.gen(function* effect() {
 
 			// 4. Fetch all payment provider products
 			const providerProducts =
-				yield* apiClient.payment_provider_products.listPaymentProviderProducts();
+				yield* apiClient.paymentProviderProductsListPaymentProviderProducts();
 
 			// Build a map of productId -> provider products
 			const productProviderMap = new Map<
@@ -98,10 +98,8 @@ const make = Effect.gen(function* effect() {
 			yield* Effect.all(
 				remoteProducts.map((product) =>
 					Effect.gen(function* () {
-						const productPerks = yield* apiClient.product_perks
-							.listProductPerksByProductId({
-								params: { productId: product.id },
-							})
+						const productPerks = yield* apiClient
+							.productPerksListProductPerksByProductId(product.id)
 							.pipe(
 								Effect.retry({
 									schedule: Schedule.exponential(1000),
@@ -150,8 +148,7 @@ const make = Effect.gen(function* effect() {
 	 * Fetch payment provider configurations
 	 */
 	const fetchProviderConfigurations = () =>
-		apiClient.payment_provider_configurations
-			.listPaymentProviderConfigurations()
+		apiClient.paymentProviderConfigurationsListPaymentProviderConfigurations()
 			.pipe(
 				Effect.tap((configs) =>
 					Effect.logDebug(
@@ -187,8 +184,8 @@ const make = Effect.gen(function* effect() {
 	const deployChange = (change: Change) =>
 		Effect.logDebug(`Deploying change: ${formatChange(change)}`).pipe(
 			Effect.andThen(
-				apiClient.changesets.deployChangeset({
-					payload: { changeset: { changes: [change] } },
+				apiClient.changesetsDeployChangeset({
+					changeset: { changes: [change] },
 				})
 			),
 			Effect.withSpan("SchemaService.deployChange"),
@@ -209,8 +206,8 @@ const make = Effect.gen(function* effect() {
 			`Deploying changeset with ${changeset.changes.length} changes`
 		).pipe(
 			Effect.andThen(
-				apiClient.changesets.deployChangeset({
-					payload: { changeset },
+				apiClient.changesetsDeployChangeset({
+					changeset,
 				})
 			),
 			Effect.withSpan("SchemaService.deployChangeset"),
diff --git a/apps/cli/src/services/auth/get-session.ts b/apps/cli/src/services/auth/get-session.ts
index 03943b09f..eee1eb593 100644
--- a/apps/cli/src/services/auth/get-session.ts
+++ b/apps/cli/src/services/auth/get-session.ts
@@ -3,26 +3,36 @@ import { Effect } from "effect";
 import { ApiClient } from "../../utils/api-client";
 import { OrganizationServiceError } from "../organization/errors";
 
+const hasNestedTag = (
+  error: unknown,
+  outerTag: string,
+  innerTag: string
+): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
+  typeof error === "object" &&
+  error !== null &&
+  "_tag" in error &&
+  error._tag === outerTag &&
+  "data" in error &&
+  typeof error.data === "object" &&
+  error.data !== null &&
+  "_tag" in error.data &&
+  error.data._tag === innerTag;
+
 export const getSession = Effect.gen(function* getSession() {
   const client = yield* ApiClient;
   return Effect.fn("getSession")(
-    function* getSession(input: { name: string }) {
-      const organization = yield* client.organizations.createOrganization({
-        payload: {
-          name: input.name,
-        },
-      });
-
-      return organization;
+    function* getSession() {
+      const session = yield* client.authSession();
+      return session;
     },
     (effect) =>
       effect.pipe(
         Effect.catch((error) => {
-          if (error._tag === "NotAuthenticatedError") {
+          if (hasNestedTag(error, "AuthSession500", "NotAuthenticatedError")) {
             return Effect.fail(
               new OrganizationServiceError({
                 message:
-                  "Failed to create an organization because you are not authenticated.",
+                  "Failed to fetch the session because you are not authenticated.",
               })
             );
           }
@@ -30,7 +40,7 @@ export const getSession = Effect.gen(function* getSession() {
           return Effect.fail(
             new OrganizationServiceError({
               message:
-                "Failed to create an organization because of an unknown error. Please try again. If the problem persists, please contact us at support@voidhash.com",
+                "Failed to fetch the session because of an unknown error. Please try again. If the problem persists, please contact us at support@voidhash.com",
             })
           );
         })
diff --git a/apps/cli/src/services/organization/create-organization.ts b/apps/cli/src/services/organization/create-organization.ts
index 7bf2ed355..da06c9e33 100644
--- a/apps/cli/src/services/organization/create-organization.ts
+++ b/apps/cli/src/services/organization/create-organization.ts
@@ -3,14 +3,27 @@ import { Effect } from "effect";
 import { ApiClient } from "../../utils/api-client";
 import { OrganizationServiceError } from "./errors";
 
+const hasNestedTag = (
+  error: unknown,
+  outerTag: string,
+  innerTag: string
+): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
+  typeof error === "object" &&
+  error !== null &&
+  "_tag" in error &&
+  error._tag === outerTag &&
+  "data" in error &&
+  typeof error.data === "object" &&
+  error.data !== null &&
+  "_tag" in error.data &&
+  error.data._tag === innerTag;
+
 export const createOrganization = Effect.gen(function* createOrganization() {
   const client = yield* ApiClient;
   return Effect.fn("createOrganization")(
     function* createOrganization(input: { name: string }) {
-      const organization = yield* client.organizations.createOrganization({
-        payload: {
-          name: input.name,
-        },
+      const organization = yield* client.organizationsCreateOrganization({
+        name: input.name,
       });
 
       return organization;
@@ -18,7 +31,13 @@ export const createOrganization = Effect.gen(function* createOrganization() {
     (effect) =>
       effect.pipe(
         Effect.catch((error) => {
-          if (error._tag === "NotAuthenticatedError") {
+          if (
+            hasNestedTag(
+              error,
+              "OrganizationsCreateOrganization500",
+              "NotAuthenticatedError"
+            )
+          ) {
             return Effect.fail(
               new OrganizationServiceError({
                 message:
diff --git a/apps/cli/src/services/organization/list-organizations.ts b/apps/cli/src/services/organization/list-organizations.ts
index 76be481c5..8e46c6dcc 100644
--- a/apps/cli/src/services/organization/list-organizations.ts
+++ b/apps/cli/src/services/organization/list-organizations.ts
@@ -3,14 +3,27 @@ import { Effect } from "effect";
 import { ApiClient } from "../../utils/api-client";
 import { OrganizationServiceError } from "./errors";
 
+const hasNestedTag = (
+  error: unknown,
+  outerTag: string,
+  innerTag: string
+): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
+  typeof error === "object" &&
+  error !== null &&
+  "_tag" in error &&
+  error._tag === outerTag &&
+  "data" in error &&
+  typeof error.data === "object" &&
+  error.data !== null &&
+  "_tag" in error.data &&
+  error.data._tag === innerTag;
+
 export const listOrganizations = Effect.gen(function* listOrganizations() {
   const client = yield* ApiClient;
   return Effect.fn("listOrganizations")(
     function* listOrganizations(input: { name: string }) {
-      const organization = yield* client.organizations.createOrganization({
-        payload: {
-          name: input.name,
-        },
+      const organization = yield* client.organizationsCreateOrganization({
+        name: input.name,
       });
 
       return organization;
@@ -18,7 +31,13 @@ export const listOrganizations = Effect.gen(function* listOrganizations() {
     (effect) =>
       effect.pipe(
         Effect.catch((error) => {
-          if (error._tag === "NotAuthenticatedError") {
+          if (
+            hasNestedTag(
+              error,
+              "OrganizationsCreateOrganization500",
+              "NotAuthenticatedError"
+            )
+          ) {
             return Effect.fail(
               new OrganizationServiceError({
                 message:
diff --git a/apps/cli/src/utils/api-client.ts b/apps/cli/src/utils/api-client.ts
index e5a4b5f73..a521d3eda 100644
--- a/apps/cli/src/utils/api-client.ts
+++ b/apps/cli/src/utils/api-client.ts
@@ -1,37 +1,38 @@
-import { VoidhashV1Api } from "@voidhash/api-spec";
+import {
+  make as makeCoreClient,
+  type VoidhashCoreClient,
+} from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
-import { FetchHttpClient, HttpClient } from "effect/unstable/http";
-import { HttpApiClient } from "effect/unstable/httpapi";
+import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { CliConfig } from "../domain/services/cli-config";
 
 const make = Effect.gen(function* effect() {
   yield* Effect.logDebug("Initializing API client");
   const cliConfig = yield* CliConfig;
-  return yield* HttpApiClient.make(VoidhashV1Api, {
-    baseUrl: "http://localhost:5001",
+  const httpClient = yield* HttpClient.HttpClient;
+  return makeCoreClient(httpClient as VoidhashCoreClient["httpClient"], {
     transformClient: (client) =>
-      client.pipe(
-        HttpClient.mapRequestEffect((request) =>
-          Effect.gen(function* transformClient() {
-            const config = yield* cliConfig.readConfig().pipe(
-              Effect.catch(() =>
-                Effect.die("Failed to read config")
-              )
-            );
+      Effect.succeed(
+        client.pipe(
+          HttpClient.mapRequestEffect((request) =>
+            Effect.gen(function* transformClient() {
+              const config = yield* cliConfig.readConfig().pipe(
+                Effect.catch(() =>
+                  Effect.die("Failed to read config")
+                )
+              );
 
-            yield* Effect.logDebug(
-              `API Request: ${request.method} ${request.url}`
-            );
+              yield* Effect.logDebug(
+                `API Request: ${request.method} ${request.url}`
+              );
 
-            return {
-              ...request,
-              headers: {
-                ...request.headers,
-                ...(config.api_key ? { "x-api-key": config.api_key } : {}),
-              },
-            };
-          }).pipe(Effect.withSpan("ApiClient.transformRequest"))
+              return HttpClientRequest.setHeaders(
+                HttpClientRequest.prependUrl(request, "http://localhost:5001"),
+                config.api_key ? { "x-api-key": config.api_key } : {}
+              );
+            }).pipe(Effect.withSpan("ApiClient.transformRequest"))
+          )
         )
       ),
   });
diff --git a/apps/cli/src/utils/organizations/create-organization.ts b/apps/cli/src/utils/organizations/create-organization.ts
index 548d812d6..b33f8b30e 100644
--- a/apps/cli/src/utils/organizations/create-organization.ts
+++ b/apps/cli/src/utils/organizations/create-organization.ts
@@ -28,10 +28,8 @@ export const createOrganization = () =>
           })
         );
 
-        const organization = yield* client.organizations.createOrganization({
-          payload: {
-            name,
-          },
+        const organization = yield* client.organizationsCreateOrganization({
+          name,
         });
 
         yield* Console.log(
diff --git a/apps/cli/src/utils/projects/create-project.ts b/apps/cli/src/utils/projects/create-project.ts
index 78d4cce19..eeaa3274a 100644
--- a/apps/cli/src/utils/projects/create-project.ts
+++ b/apps/cli/src/utils/projects/create-project.ts
@@ -44,14 +44,9 @@ export const createProject = (input: { organizationId: string }) =>
           })
         );
 
-        const project = yield* client.projects.createProject({
-          // headers: {
-          //   'x-api-key': apiKey
-          // },
-          payload: {
-            name,
-            organizationId: input.organizationId,
-          },
+        const project = yield* client.projectsCreateProject({
+          name,
+          organizationId: input.organizationId,
         });
 
         yield* Console.log(`Successfully created project ${project.name}`);
diff --git a/docs/JS-SDK.md b/docs/JS-SDK.md
index 8afedcfae..6890c9b8a 100644
--- a/docs/JS-SDK.md
+++ b/docs/JS-SDK.md
@@ -43,7 +43,7 @@ The web package should expose:
 ## Goals
 
 - Ship a browser SDK that feels structurally similar to the React Native SDK.
-- Reuse existing shared packages where possible, especially `@voidhash/api-spec` and `@voidhash/shared`.
+- Reuse existing shared packages where possible, especially `@voidhash/generated-clients` and `@voidhash/shared`.
 - Make feature flags production-ready first, because the backend contract already exists.
 - Design analytics as a first-class SDK capability for web, even though the current React Native SDK does not yet implement an analytics transport.
 - Support anonymous and identified users.
@@ -277,7 +277,7 @@ Analytics is a first-class goal of the web SDK, but it needs a clearer contract
 
 ### Prerequisite: API Contract Alignment
 
-Before analytics implementation begins, the repo should define or confirm the following in `@voidhash/api-spec`:
+Before analytics implementation begins, the repo should define or confirm the following in `@voidhash/generated-clients`:
 
 - the analytics ingestion endpoint path
 - the request payload shape
@@ -301,7 +301,7 @@ This should be treated as a required upstream step. The web SDK should not inven
 
 ### Recommended Event Payload Shape
 
-The final schema should come from `@voidhash/api-spec`, but the SDK should plan around this structure:
+The final schema should come from `@voidhash/generated-clients`, but the SDK should plan around this structure:
 
 ```ts
 type AnalyticsEvent = {
@@ -471,7 +471,7 @@ An analytics hook can stay simple in V1:
 
 ### Contract Tests
 
-- feature flag request/response compatibility with `@voidhash/api-spec`
+- feature flag request/response compatibility with `@voidhash/generated-clients`
 - analytics contract compatibility once defined upstream
 
 ## Example Apps and Documentation
@@ -496,7 +496,7 @@ Documentation should cover:
 
 | Phase | Scope | Output |
 | --- | --- | --- |
-| 0 | API and package alignment | Confirm `libraries/web`, confirm `@voidhash/web`, finalize analytics API contract in `@voidhash/api-spec`. |
+| 0 | API and package alignment | Confirm `libraries/web`, confirm `@voidhash/web`, finalize analytics API contract in `@voidhash/generated-clients`. |
 | 1 | Core runtime | Create client factory, runtime layer, event bus, identity manager, cache manager, browser platform provider, fetch transport. |
 | 2 | Feature flags | Implement `getFeatureFlags`, caching, refetch behavior, React hook parity, tests. |
 | 3 | Analytics | Implement `track`, `page`, queueing, batching, retrying, page-exit flush, tests. |
@@ -510,7 +510,7 @@ Documentation should cover:
 - Keep feature flags server-evaluated in V1.
 - Keep analytics manual-first in V1.
 - Exclude paywalls and payments completely from the initial implementation.
-- Upstream any shared contract changes into `@voidhash/api-spec` before depending on them in the SDK.
+- Upstream any shared contract changes into `@voidhash/generated-clients` before depending on them in the SDK.
 
 ## Open Questions
 
@@ -527,7 +527,7 @@ Documentation should cover:
 2. Port the React Native identity, cache, and event bus concepts into browser-safe modules.
 3. Implement feature flags first using the existing API contract and 5-minute TTL parity.
 4. Add the React provider and `useFeatureFlags` hook.
-5. Finalize the analytics API contract in `@voidhash/api-spec`.
+5. Finalize the analytics API contract in `@voidhash/generated-clients`.
 6. Implement analytics queueing, batching, and flush behavior.
 7. Add examples, tests, and publishable package metadata.
 
diff --git a/examples/react-native-example/package.json b/examples/react-native-example/package.json
index d097173aa..bfb331f4d 100644
--- a/examples/react-native-example/package.json
+++ b/examples/react-native-example/package.json
@@ -5,7 +5,7 @@
   "main": "expo-router/entry",
   "scripts": {
     "run:android": "expo run:android",
-    "run:ios": "expo run:ios",
+    "run:ios": "expo run:ios --device",
     "eas:build-dev:local": "eas build --local -e development",
     "start": "expo start --dev-client",
     "prebuild": "expo prebuild",
diff --git a/examples/react-native-example/tsconfig.json b/examples/react-native-example/tsconfig.json
index 2d3b7bd64..79279d1b6 100644
--- a/examples/react-native-example/tsconfig.json
+++ b/examples/react-native-example/tsconfig.json
@@ -4,7 +4,8 @@
   "compilerOptions": {
     "strict": true,
     "jsx": "react-jsx",
-
-    "baseUrl": "."
+    "paths": {
+      "*": ["./*"]
+    }
   }
 }
diff --git a/libraries/node/package.json b/libraries/node/package.json
index cd2a6c1a3..7fa622b32 100644
--- a/libraries/node/package.json
+++ b/libraries/node/package.json
@@ -62,7 +62,7 @@
     "test:watch": "vitest -c vitest.unit.mts"
   },
   "dependencies": {
-    "@voidhash/api-spec": "workspace:*"
+    "@voidhash/generated-clients": "workspace:*"
   },
   "devDependencies": {
     "@effect/platform": "catalog:",
diff --git a/libraries/node/src/effect-client.ts b/libraries/node/src/effect-client.ts
index e672b2446..d432bf97d 100644
--- a/libraries/node/src/effect-client.ts
+++ b/libraries/node/src/effect-client.ts
@@ -1,20 +1,19 @@
 import { Effect } from "effect";
 
 import type { VoidhashNodeClientOptions } from "./types";
-import type { PublicVoidhashNodeEffectClient } from "./internal/client-types";
 import {
   type FilterSdkGroup,
   filterSdkGroup,
 } from "./internal/filter-sdk-group";
-import { makeGeneratedClient } from "./internal/make-generated-client";
-import { normalizeGeneratedClient } from "./internal/normalize-generated-client";
+import {
+  makeGeneratedClient,
+  type GeneratedVoidhashNodeEffectClient,
+} from "./internal/make-generated-client";
 
 export type VoidhashNodeEffectClient =
-  FilterSdkGroup<PublicVoidhashNodeEffectClient>;
+  FilterSdkGroup<GeneratedVoidhashNodeEffectClient>;
 
 export const createVoidhashSdk = (
   options: VoidhashNodeClientOptions
 ): VoidhashNodeEffectClient =>
-  filterSdkGroup(
-    normalizeGeneratedClient(Effect.runSync(makeGeneratedClient(options)))
-  ) as VoidhashNodeEffectClient;
+  filterSdkGroup(Effect.runSync(makeGeneratedClient(options))) as VoidhashNodeEffectClient;
diff --git a/libraries/node/src/generated/grouped-client.ts b/libraries/node/src/generated/grouped-client.ts
new file mode 100644
index 000000000..80d9a880a
--- /dev/null
+++ b/libraries/node/src/generated/grouped-client.ts
@@ -0,0 +1,65 @@
+import type { VoidhashCoreClient } from "@voidhash/generated-clients";
+
+export const groupCoreClient = (client: VoidhashCoreClient) => ({
+  apiKeys: {
+    createSecretKey: (request: { payload: Parameters<VoidhashCoreClient["apiKeysCreateSecretKey"]>[0] }) => client.apiKeysCreateSecretKey(request.payload),
+    deleteApiKey: (request: { params: { readonly "apiKeyId": string } }) => client.apiKeysDeleteApiKey(request.params["apiKeyId"]),
+    getApiKeyById: (request: { params: { readonly "apiKeyId": string } }) => client.apiKeysGetApiKeyById(request.params["apiKeyId"]),
+    listApiKeys: () => client.apiKeysListApiKeys(),
+    rotateSecretKey: (request: { params: { readonly "apiKeyId": string } }) => client.apiKeysRotateSecretKey(request.params["apiKeyId"]),
+  },
+  auth: {
+    session: () => client.authSession(),
+  },
+  changesets: {
+    deployChangeset: (request: { payload: Parameters<VoidhashCoreClient["changesetsDeployChangeset"]>[0] }) => client.changesetsDeployChangeset(request.payload),
+  },
+  customers: {
+    byDistinctId: (request: { params: { readonly "distinctId": string } }) => client.customersByDistinctId(request.params["distinctId"]),
+    createCustomer: (request: { payload: Parameters<VoidhashCoreClient["customersCreateCustomer"]>[0] }) => client.customersCreateCustomer(request.payload),
+    getCustomerById: (request: { params: { readonly "customerId": string } }) => client.customersGetCustomerById(request.params["customerId"]),
+    listCustomers: () => client.customersListCustomers(),
+  },
+  organizations: {
+    createOrganization: (request: { payload: Parameters<VoidhashCoreClient["organizationsCreateOrganization"]>[0] }) => client.organizationsCreateOrganization(request.payload),
+  },
+  paymentProviderConfigurations: {
+    listPaymentProviderConfigurations: () => client.paymentProviderConfigurationsListPaymentProviderConfigurations(),
+  },
+  paymentProviderProducts: {
+    listPaymentProviderProducts: () => client.paymentProviderProductsListPaymentProviderProducts(),
+  },
+  paywallLocations: {
+    listPaywallLocations: () => client.paywallLocationsListPaywallLocations(),
+  },
+  perks: {
+    listPerks: () => client.perksListPerks(),
+  },
+  productPerks: {
+    listProductPerksByProductId: (request: { params: { readonly "productId": string } }) => client.productPerksListProductPerksByProductId(request.params["productId"]),
+  },
+  products: {
+    listProducts: () => client.productsListProducts(),
+  },
+  projects: {
+    createProject: (request: { payload: Parameters<VoidhashCoreClient["projectsCreateProject"]>[0] }) => client.projectsCreateProject(request.payload),
+    listProjects: (request: { params: { readonly "organizationId": string } }) => client.projectsListProjects(request.params["organizationId"]),
+  },
+  users: {
+    getUser: () => client.usersGetUser(),
+  },
+  webhooks: {
+    createWebhookEndpoint: (request: { payload: Parameters<VoidhashCoreClient["webhooksCreateWebhookEndpoint"]>[0] }) => client.webhooksCreateWebhookEndpoint(request.payload),
+    deleteWebhookEndpoint: (request: { params: { readonly "endpointId": string } }) => client.webhooksDeleteWebhookEndpoint(request.params["endpointId"]),
+    getWebhookDelivery: (request: { params: { readonly "deliveryId": string } }) => client.webhooksGetWebhookDelivery(request.params["deliveryId"]),
+    getWebhookEndpoint: (request: { params: { readonly "endpointId": string } }) => client.webhooksGetWebhookEndpoint(request.params["endpointId"]),
+    listWebhookDeliveries: () => client.webhooksListWebhookDeliveries(),
+    listWebhookEndpoints: () => client.webhooksListWebhookEndpoints(),
+    retryWebhookDelivery: (request: { params: { readonly "deliveryId": string } }) => client.webhooksRetryWebhookDelivery(request.params["deliveryId"]),
+    rotateWebhookSecret: (request: { params: { readonly "endpointId": string } }) => client.webhooksRotateWebhookSecret(request.params["endpointId"]),
+    testWebhookEndpoint: (request: { params: { readonly "endpointId": string } }) => client.webhooksTestWebhookEndpoint(request.params["endpointId"]),
+    updateWebhookEndpoint: (request: { params: { readonly "endpointId": string }; payload: Parameters<VoidhashCoreClient["webhooksUpdateWebhookEndpoint"]>[1] }) => client.webhooksUpdateWebhookEndpoint(request.params["endpointId"], request.payload),
+  },
+});
+
+export type GroupedVoidhashNodeEffectClient = ReturnType<typeof groupCoreClient>;
diff --git a/libraries/node/src/internal/client-types.ts b/libraries/node/src/internal/client-types.ts
deleted file mode 100644
index 73da656f6..000000000
--- a/libraries/node/src/internal/client-types.ts
+++ /dev/null
@@ -1,172 +0,0 @@
-import type { VoidhashV1Api } from "@voidhash/api-spec";
-import type { Effect } from "effect";
-import type * as Schema from "effect/Schema";
-import type * as HttpClientError from "effect/unstable/http/HttpClientError";
-import type { HttpClientResponse } from "effect/unstable/http";
-import type { HttpApiSchemaError } from "effect/unstable/httpapi/HttpApiError";
-import type {
-  HttpApi,
-  HttpApiClient,
-  HttpApiEndpoint,
-  HttpApiGroup,
-  HttpApiMiddleware,
-} from "effect/unstable/httpapi";
-import type { Brand } from "effect/Brand";
-import type * as HttpApiSchema from "effect/unstable/httpapi/HttpApiSchema";
-
-type Simplify<T> = { [Key in keyof T]: T[Key] } & {};
-
-type ApiGroups<Api extends HttpApi.Any> =
-  Api extends HttpApi.HttpApi<infer _ApiId, infer Groups> ? Groups : never;
-
-type EncodedClientRequest<
-  Params extends Schema.Top,
-  Query extends Schema.Top,
-  Payload extends Schema.Top,
-  Headers extends Schema.Top,
-  WithResponse extends boolean,
-> = (
-  & ([Params["Encoded"]] extends [never]
-    ? {}
-    : { readonly params: Params["Encoded"] })
-  & ([Query["Encoded"]] extends [never]
-    ? {}
-    : { readonly query: Query["Encoded"] })
-  & ([Headers["Encoded"]] extends [never]
-    ? {}
-    : { readonly headers: Headers["Encoded"] })
-  & ([Payload["Encoded"]] extends [never]
-    ? {}
-    : Payload["Encoded"] extends infer EncodedPayload
-      ? EncodedPayload extends
-          | Brand<HttpApiSchema.MultipartTypeId>
-          | Brand<HttpApiSchema.MultipartStreamTypeId>
-        ? { readonly payload: FormData }
-        : { readonly payload: Payload["Encoded"] }
-      : { readonly payload: Payload["Encoded"] })
-) extends infer Request
-  ? keyof Request extends never
-    ? void | { readonly withResponse?: WithResponse }
-    : Request & { readonly withResponse?: WithResponse }
-  : void;
-
-type EffectMethod<Endpoint> =
-  Endpoint extends HttpApiEndpoint.HttpApiEndpoint<
-    infer _Name,
-    infer _Method,
-    infer _Path,
-    infer Params,
-    infer Query,
-    infer Payload,
-    infer Headers,
-    infer Success,
-    infer Error,
-    infer Middleware,
-    infer _MR
-  >
-    ? <WithResponse extends boolean = false>(
-        request: Simplify<
-          EncodedClientRequest<Params, Query, Payload, Headers, WithResponse>
-        >
-      ) => Effect.Effect<
-        WithResponse extends true
-          ? [Success["Type"], HttpClientResponse.HttpClientResponse]
-          : Success["Type"],
-        | Error["Type"]
-        | HttpApiMiddleware.Error<Middleware>
-        | HttpApiMiddleware.ClientError<Middleware>
-        | HttpApiSchemaError
-        | HttpClientError.HttpClientError
-        | Schema.SchemaError,
-        | Params["DecodingServices"]
-        | Query["DecodingServices"]
-        | Payload["DecodingServices"]
-        | Headers["DecodingServices"]
-        | Params["EncodingServices"]
-        | Query["EncodingServices"]
-        | Payload["EncodingServices"]
-        | Headers["EncodingServices"]
-        | Success["DecodingServices"]
-        | Error["DecodingServices"]
-      >
-    : never;
-
-type EffectTopLevelMethods<Groups extends HttpApiGroup.Any> =
-  Extract<Groups, { readonly topLevel: true }> extends
-    HttpApiGroup.HttpApiGroup<infer _Id, infer Endpoints, infer _TopLevel>
-    ? Endpoints extends infer Endpoint
-      ? [HttpApiEndpoint.Name<Endpoint>, EffectMethod<Endpoint>]
-      : never
-    : never;
-
-type EffectClient<Groups extends HttpApiGroup.Any> = Simplify<
-  & {
-    readonly [Group in Extract<Groups, { readonly topLevel: false }> as HttpApiGroup.Name<Group>]:
-      Group extends HttpApiGroup.HttpApiGroup<infer _GroupName, infer Endpoints>
-        ? {
-            readonly [Endpoint in Endpoints as HttpApiEndpoint.Name<Endpoint>]:
-              EffectMethod<Endpoint>;
-          }
-        : never;
-  }
-  & {
-    readonly [Method in EffectTopLevelMethods<Groups> as Method[0]]: Method[1];
-  }
->;
-
-type PromiseTopLevelMethods<Groups extends HttpApiGroup.Any> =
-  Extract<Groups, { readonly topLevel: true }> extends
-    HttpApiGroup.HttpApiGroup<infer _Id, infer Endpoints, infer _TopLevel>
-    ? Endpoints extends infer Endpoint
-      ? [HttpApiEndpoint.Name<Endpoint>, PromiseMethod<Endpoint>]
-      : never
-    : never;
-
-type PromiseMethod<Endpoint> =
-  Endpoint extends HttpApiEndpoint.HttpApiEndpoint<
-    infer _Name,
-    infer _Method,
-    infer _Path,
-    infer Params,
-    infer Query,
-    infer Payload,
-    infer Headers,
-    infer Success,
-    infer _Error,
-    infer _Middleware,
-    infer _MR
-  >
-    ? <WithResponse extends boolean = false>(
-        request: Simplify<
-          EncodedClientRequest<Params, Query, Payload, Headers, WithResponse>
-        >
-      ) => Promise<
-        WithResponse extends true
-          ? [Success["Type"], HttpClientResponse.HttpClientResponse]
-          : Success["Type"]
-      >
-    : never;
-
-type PromiseClient<Groups extends HttpApiGroup.Any> = Simplify<
-  & {
-    readonly [Group in Extract<Groups, { readonly topLevel: false }> as HttpApiGroup.Name<Group>]:
-      Group extends HttpApiGroup.HttpApiGroup<infer _GroupName, infer Endpoints>
-        ? {
-            readonly [Endpoint in Endpoints as HttpApiEndpoint.Name<Endpoint>]:
-              PromiseMethod<Endpoint>;
-          }
-        : never;
-  }
-  & {
-    readonly [Method in PromiseTopLevelMethods<Groups> as Method[0]]: Method[1];
-  }
->;
-
-type PromiseClientForApi<Api extends HttpApi.Any> =
-  Api extends HttpApi.HttpApi<infer _ApiId, infer Groups> ? PromiseClient<Groups> : never;
-
-export type GeneratedVoidhashNodeEffectClient = HttpApiClient.ForApi<typeof VoidhashV1Api>;
-export type PublicVoidhashNodeEffectClient = EffectClient<ApiGroups<typeof VoidhashV1Api>>;
-
-export type GeneratedVoidhashNodeClient = PromiseClientForApi<typeof VoidhashV1Api>;
-export type PublicVoidhashNodeClient = PromiseClientForApi<typeof VoidhashV1Api>;
diff --git a/libraries/node/src/internal/make-generated-client.ts b/libraries/node/src/internal/make-generated-client.ts
index 55de4d4fd..2a940141a 100644
--- a/libraries/node/src/internal/make-generated-client.ts
+++ b/libraries/node/src/internal/make-generated-client.ts
@@ -1,16 +1,21 @@
-import { VoidhashV1Api } from "@voidhash/api-spec";
+import {
+  make as makeCoreClient,
+  type VoidhashCoreClient,
+} from "@voidhash/generated-clients";
 import { Effect } from "effect";
 import {
   FetchHttpClient,
   HttpClient,
   HttpClientRequest,
 } from "effect/unstable/http";
-import { HttpApiClient } from "effect/unstable/httpapi";
 
 import { VoidhashNodeConfigurationError } from "../errors";
+import {
+  groupCoreClient,
+  type GroupedVoidhashNodeEffectClient,
+} from "../generated/grouped-client";
 import type { VoidhashNodeClientOptions } from "../types";
-import type { GeneratedVoidhashNodeEffectClient } from "./client-types";
-import { toJsonCompatibleApi } from "./json-compatible-api";
+export type GeneratedVoidhashNodeEffectClient = GroupedVoidhashNodeEffectClient;
 
 export const DEFAULT_BASE_URL = "https://api.voidhash.com";
 
@@ -78,24 +83,31 @@ const resolveOptions = (options: VoidhashNodeClientOptions) => {
   };
 };
 
-const JsonVoidhashV1Api = toJsonCompatibleApi(VoidhashV1Api);
-
 export const makeGeneratedClient = (
   options: VoidhashNodeClientOptions
 ): Effect.Effect<GeneratedVoidhashNodeEffectClient> => {
   const resolvedOptions = resolveOptions(options);
 
-  return HttpApiClient.make(JsonVoidhashV1Api, {
-    baseUrl: resolvedOptions.baseUrl,
-    transformClient: (client) =>
-      client.pipe(
-        HttpClient.mapRequest((request) =>
-          HttpClientRequest.setHeader(
-            HttpClientRequest.setHeaders(request, resolvedOptions.headers),
-            SECRET_KEY_HEADER,
-            resolvedOptions.secretKey
+  return Effect.gen(function* () {
+    const httpClient = yield* HttpClient.HttpClient;
+    const client = makeCoreClient(httpClient as VoidhashCoreClient["httpClient"], {
+      transformClient: (httpClient) =>
+        Effect.succeed(
+          httpClient.pipe(
+            HttpClient.mapRequest((request) =>
+              HttpClientRequest.setHeader(
+                HttpClientRequest.setHeaders(
+                  HttpClientRequest.prependUrl(request, resolvedOptions.baseUrl),
+                  resolvedOptions.headers
+                ),
+                SECRET_KEY_HEADER,
+                resolvedOptions.secretKey
+              )
+            )
           )
-        )
-      ),
+        ),
+    });
+
+    return groupCoreClient(client);
   }).pipe(Effect.provide(FetchHttpClient.layer));
 };
diff --git a/libraries/node/src/internal/normalize-generated-client.ts b/libraries/node/src/internal/normalize-generated-client.ts
deleted file mode 100644
index bdba221fa..000000000
--- a/libraries/node/src/internal/normalize-generated-client.ts
+++ /dev/null
@@ -1,122 +0,0 @@
-import { VoidhashV1Api } from "@voidhash/api-spec";
-import { Effect, Schema } from "effect";
-import { HttpApi, HttpApiEndpoint } from "effect/unstable/httpapi";
-
-import type { GeneratedVoidhashNodeEffectClient } from "./client-types";
-
-type RequestPartName = "headers" | "params" | "payload" | "query";
-
-type EndpointNormalizers = Partial<
-  Record<RequestPartName, (value: unknown) => Effect.Effect<unknown, Schema.SchemaError, unknown>>
->;
-
-const endpointNormalizers = new Map<string, EndpointNormalizers>();
-
-const endpointKey = (group: string, endpoint: string) => `${group}.${endpoint}`;
-
-const getPayloadSchema = (endpoint: HttpApiEndpoint.AnyWithProps) => {
-  const schemas = Array.from(endpoint.payload.values()).flatMap((value) => value.schemas);
-
-  if (schemas.length === 0) {
-    return undefined;
-  }
-
-  return schemas.length === 1 ? schemas[0] : Schema.Union(schemas);
-};
-
-HttpApi.reflect(VoidhashV1Api, {
-  onGroup: () => {},
-  onEndpoint: ({ endpoint, group }) => {
-    const normalizers: EndpointNormalizers = {};
-
-    if (endpoint.params) {
-      normalizers.params = Schema.decodeUnknownEffect(endpoint.params);
-    }
-
-    if (endpoint.query) {
-      normalizers.query = Schema.decodeUnknownEffect(endpoint.query);
-    }
-
-    if (endpoint.headers) {
-      normalizers.headers = Schema.decodeUnknownEffect(endpoint.headers);
-    }
-
-    const payloadSchema = getPayloadSchema(endpoint);
-    if (payloadSchema) {
-      normalizers.payload = Schema.decodeUnknownEffect(payloadSchema);
-    }
-
-    endpointNormalizers.set(endpointKey(group.identifier, endpoint.name), normalizers);
-  },
-});
-
-const normalizeRequest = (
-  normalizers: EndpointNormalizers,
-  request: Record<string, unknown> | undefined
-) =>
-  Effect.gen(function*() {
-    if (request === undefined) {
-      return undefined;
-    }
-
-    const normalized = {
-      ...request,
-    };
-
-    if (normalizers.params && "params" in request) {
-      normalized.params = yield* normalizers.params(request.params);
-    }
-
-    if (normalizers.query && "query" in request) {
-      normalized.query = yield* normalizers.query(request.query);
-    }
-
-    if (normalizers.headers && "headers" in request) {
-      normalized.headers = yield* normalizers.headers(request.headers);
-    }
-
-    if (normalizers.payload && "payload" in request) {
-      normalized.payload = yield* normalizers.payload(request.payload);
-    }
-
-    return normalized;
-  });
-
-export const normalizeGeneratedClient = (
-  client: GeneratedVoidhashNodeEffectClient
-): GeneratedVoidhashNodeEffectClient =>
-  Object.fromEntries(
-    Object.entries(client).map(([groupName, groupValue]) => {
-      if (!groupValue || typeof groupValue !== "object") {
-        return [groupName, groupValue];
-      }
-
-      const normalizedGroup = Object.fromEntries(
-        Object.entries(groupValue).map(([endpointName, endpoint]) => {
-          if (typeof endpoint !== "function") {
-            return [endpointName, endpoint];
-          }
-
-          const normalizers = endpointNormalizers.get(endpointKey(groupName, endpointName));
-
-          if (!normalizers) {
-            return [endpointName, endpoint];
-          }
-
-          return [
-            endpointName,
-            (request?: Record<string, unknown>) =>
-              Effect.flatMap(normalizeRequest(normalizers, request), (normalized) =>
-                Reflect.apply(
-                  endpoint as (request?: unknown) => Effect.Effect<unknown>,
-                  groupValue,
-                  [normalized]
-                )
-              ),
-          ];
-        })
-      );
-
-      return [groupName, normalizedGroup];
-    })
-  ) as GeneratedVoidhashNodeEffectClient;
diff --git a/libraries/node/src/promise-client.ts b/libraries/node/src/promise-client.ts
index ae71f443b..37ddfb2f2 100644
--- a/libraries/node/src/promise-client.ts
+++ b/libraries/node/src/promise-client.ts
@@ -4,7 +4,6 @@ import {
   createVoidhashSdk as createVoidhashEffectSdk,
   type VoidhashNodeEffectClient,
 } from "./effect-client";
-import type { PublicVoidhashNodeClient } from "./internal/client-types";
 import type { FilterSdkGroup } from "./internal/filter-sdk-group";
 import type { VoidhashNodeClientOptions } from "./types";
 
@@ -46,7 +45,7 @@ const promisifyClient = <TClient extends object>(
   return Object.fromEntries(entries) as RuntimePromisifyClient<TClient>;
 };
 
-export type VoidhashNodeClient = FilterSdkGroup<PublicVoidhashNodeClient>;
+export type VoidhashNodeClient = RuntimePromisifyClient<VoidhashNodeEffectClient>;
 
 export const createVoidhashSdk = (
   options: VoidhashNodeClientOptions
diff --git a/libraries/node/tests/client.test.ts b/libraries/node/tests/client.test.ts
index fbc37ad5b..1e61fec24 100644
--- a/libraries/node/tests/client.test.ts
+++ b/libraries/node/tests/client.test.ts
@@ -1,4 +1,3 @@
-import { ActionForbiddenError } from "@voidhash/api-spec/errors";
 import { Cause, Effect, Exit, Option } from "effect";
 import {
   afterEach,
@@ -21,16 +20,16 @@ import {
 import { createJsonResponse, installFetchMock } from "./helpers";
 
 const EXPECTED_GROUPS = [
-  "api_keys",
+  "apiKeys",
   "auth",
   "changesets",
   "customers",
   "organizations",
-  "payment_provider_configurations",
-  "payment_provider_products",
-  "paywall_locations",
+  "paymentProviderConfigurations",
+  "paymentProviderProducts",
+  "paywallLocations",
   "perks",
-  "product_perks",
+  "productPerks",
   "products",
   "projects",
   "users",
@@ -251,13 +250,13 @@ describe("@voidhash/node", () => {
         description: "Updated description",
         events: ["purchase.completed"],
         name: "Updated endpoint",
-        status: "active",
+        status: "disabled",
         url: "https://example.com/hooks",
       },
     });
 
     expect(endpoint.id).toBe("wh_123");
-    expect(endpoint.createdAt).toEqual(new Date("2026-03-09T12:00:00.000Z"));
+    expect(endpoint.createdAt).toBe("2026-03-09T12:00:00.000Z");
     expect(calls[0]?.method).toBe("PATCH");
     expect(calls[0]?.url).toBe(
       "https://api.voidhash.test/api/v1/webhooks/endpoints/wh_123"
@@ -266,13 +265,13 @@ describe("@voidhash/node", () => {
       description: "Updated description",
       events: ["purchase.completed"],
       name: "Updated endpoint",
-      status: "active",
+      status: "disabled",
       url: "https://example.com/hooks",
     });
     expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
   });
 
-  it("supports DELETE requests with api_keys.deleteApiKey({ params })", async () => {
+  it("supports DELETE requests with apiKeys.deleteApiKey({ params })", async () => {
     const { calls } = installFetchMock(() => new Response(null, { status: 204 }));
 
     const client = createVoidhashSdk({
@@ -280,7 +279,7 @@ describe("@voidhash/node", () => {
       secretKey: "vh_sk_test",
     });
 
-    const result = await client.api_keys.deleteApiKey({
+    const result = await client.apiKeys.deleteApiKey({
       params: {
         apiKeyId: "ak_123",
       },
@@ -322,9 +321,10 @@ describe("@voidhash/node", () => {
   it("surfaces matching failure objects through effect and promise factories", async () => {
     installFetchMock(() =>
       createJsonResponse(
-        new ActionForbiddenError({
+        {
+          _tag: "ActionForbiddenError",
           message: "Forbidden",
-        }),
+        },
         403
       )
     );
@@ -348,7 +348,11 @@ describe("@voidhash/node", () => {
         (error: unknown) => error
       );
 
-    expect(promiseError).toStrictEqual(effectError);
-    expect(promiseError).toBeInstanceOf(ActionForbiddenError);
+    expect(promiseError).toMatchObject({
+      _tag: (effectError as { _tag?: string })._tag,
+    });
+    expect(promiseError).toMatchObject({
+      _tag: "ActionForbiddenError",
+    });
   });
 });
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index ce14c93fd..7e55036e2 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -68,7 +68,7 @@
 		"specs": "pnpm run typescript && nitro-codegen --logLevel=\"debug\""
 	},
 	"dependencies": {
-		"@voidhash/api-spec": "workspace:*"
+		"@voidhash/generated-clients": "workspace:*"
 	},
 	"devDependencies": {
 		"@types/jest": "^29.5.14",
diff --git a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
index 1bfd5b0f8..f28bf4268 100644
--- a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
+++ b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/api-spec";
+import type { SdkCustomer } from "@voidhash/generated-clients";
 import { Effect, Layer, ManagedRuntime, pipe } from "effect";
 
 import { CacheAdapter } from "../../core/caching/cache-adapter";
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 17dfdee61..fe9cf6362 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -1,7 +1,7 @@
 import type {
   CaptureAcceptedResponse,
   CaptureErrorResponse,
-} from "@voidhash/api-spec/event-capture";
+} from "@voidhash/generated-clients/event-capture";
 import { Cause, Effect } from "effect";
 
 import { SDK_VERSION } from "./core/constants";
diff --git a/libraries/react-native/src/core/event-bus.ts b/libraries/react-native/src/core/event-bus.ts
index 0e4f12686..c25535d21 100644
--- a/libraries/react-native/src/core/event-bus.ts
+++ b/libraries/react-native/src/core/event-bus.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/api-spec";
+import type { SdkCustomer } from "@voidhash/generated-clients";
 import { ServiceMap } from "effect";
 
 export interface CustomerFetchedEvent {
@@ -18,7 +18,7 @@ export interface FeatureFlagsFetchedEvent {
   readonly flags: ReadonlyArray<{
     readonly enabled: boolean;
     readonly key: string;
-    readonly payload: unknown | null;
+    readonly payload?: unknown | null;
     readonly variantKey: string | null;
   }>;
 }
diff --git a/libraries/react-native/src/core/identity/customer-info-manager.ts b/libraries/react-native/src/core/identity/customer-info-manager.ts
index b70ce1f6a..e425bb7e5 100644
--- a/libraries/react-native/src/core/identity/customer-info-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-info-manager.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/api-spec";
+import type { SdkCustomer } from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index d5e2e64d0..dc260942f 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -1,18 +1,147 @@
-import { VoidhashV1Api } from "@voidhash/api-spec";
+import {
+  make as makeCoreClient,
+  type VoidhashCoreClient,
+  type EvaluateFeatureFlagsBody,
+  type SdkEvaluateFeatureFlagsParams,
+  type SdkFeatureFlagsResponse,
+  type SdkGetCustomerParams,
+  type SdkIdentifyBody,
+  type SdkResolvePaywallBody,
+  type SdkSyncCustomerAttributesBody,
+  type SdkSyncTransactionRequest,
+} from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
-import { HttpApiClient } from "effect/unstable/httpapi";
+import { HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { SdkConfiguration } from "../sdk-configuration";
 import { withHttpDebugLogging } from "./http-debug-client";
 
+export interface ReactNativeFeatureFlagsResponse {
+  readonly flags: ReadonlyArray<{
+    readonly enabled: boolean;
+    readonly key: string;
+    readonly payload: unknown | null;
+    readonly variantKey: string | null;
+  }>;
+}
+
+export interface ReactNativeSyncTransactionRequest {
+  readonly platform: "android" | "ios";
+  readonly productId: string;
+  readonly purchaseDate: number;
+  readonly quantity: number;
+  readonly receipt?: string | undefined;
+  readonly purchaseToken?: string | undefined;
+  readonly transactionId: string;
+}
+
+interface ReactNativeSdkHeaders {
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | undefined;
+  readonly "x-client-version"?: string | undefined;
+  readonly "x-distinct-id": string;
+  readonly "x-is-backgrounded": "false" | "true";
+  readonly "x-is-debug-build": "false" | "true";
+  readonly "x-nonce": string;
+  readonly "x-observer-mode": "false" | "true";
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | undefined;
+  readonly "x-platform-device"?: string | undefined;
+  readonly "x-platform-flavor": "browser" | "native";
+  readonly "x-platform-flavor-version"?: string | undefined;
+  readonly "x-platform-version"?: string | undefined;
+  readonly "x-preferred-locales"?: string | undefined;
+  readonly "x-publishable-key": string;
+  readonly "x-sdk": "web" | "react-native";
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | undefined;
+}
+
+const normalizeFeatureFlagsResponse = (
+  response: SdkFeatureFlagsResponse
+): ReactNativeFeatureFlagsResponse => ({
+  flags: response.flags.map((flag) => ({
+    enabled: flag.enabled,
+    key: flag.key,
+    payload: null,
+    variantKey: flag.variantKey,
+  })),
+});
+
+const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
+  sdk: {
+    evaluateFeatureFlags: (request: {
+      headers: ReactNativeSdkHeaders;
+      payload: EvaluateFeatureFlagsBody;
+    }) =>
+      Effect.map(
+        client.sdkEvaluateFeatureFlags({
+          params: request.headers as SdkEvaluateFeatureFlagsParams,
+          payload: request.payload,
+        }),
+        normalizeFeatureFlagsResponse
+      ),
+    getCustomer: (request: { headers: ReactNativeSdkHeaders }) =>
+      client.sdkGetCustomer(request.headers as SdkGetCustomerParams),
+    identify: (request: {
+      headers: ReactNativeSdkHeaders;
+      payload: SdkIdentifyBody;
+    }) =>
+      client.sdkIdentify({
+        params: request.headers as Parameters<typeof client.sdkIdentify>[0]["params"],
+        payload: request.payload,
+      }),
+    resolvePaywall: (request: {
+      headers: ReactNativeSdkHeaders;
+      payload: SdkResolvePaywallBody;
+    }) =>
+      client.sdkResolvePaywall({
+        params: request.headers as Parameters<typeof client.sdkResolvePaywall>[0]["params"],
+        payload: request.payload,
+      }),
+    syncCustomerAttributes: (request: {
+      headers: ReactNativeSdkHeaders;
+      payload: SdkSyncCustomerAttributesBody;
+    }) =>
+      client.sdkSyncCustomerAttributes({
+        params: request.headers as Parameters<typeof client.sdkSyncCustomerAttributes>[0]["params"],
+        payload: request.payload,
+      }),
+    syncTransaction: (request: {
+      headers: ReactNativeSdkHeaders;
+      payload: ReactNativeSyncTransactionRequest;
+    }) =>
+      client.sdkSyncTransaction({
+        params: request.headers as Parameters<typeof client.sdkSyncTransaction>[0]["params"],
+        payload: request.payload as SdkSyncTransactionRequest,
+      }),
+  },
+});
+
 const make = Effect.gen(function* effect() {
   const sdkConfiguration = yield* SdkConfiguration;
-  return yield* HttpApiClient.make(VoidhashV1Api, {
-    baseUrl: sdkConfiguration.baseUrl,
-    transformClient: sdkConfiguration.debug
-      ? withHttpDebugLogging
-      : undefined,
-  });
+  const httpClient = yield* HttpClient.HttpClient;
+  return bindReactNativeSdkClient(
+    makeCoreClient(httpClient as VoidhashCoreClient["httpClient"], {
+      transformClient: sdkConfiguration.debug
+        ? (client) =>
+            Effect.succeed(
+              withHttpDebugLogging(client).pipe(
+                HttpClient.mapRequest((request) =>
+                  HttpClientRequest.prependUrl(request, sdkConfiguration.baseUrl)
+                )
+              )
+            )
+        : (client) =>
+            Effect.succeed(
+              client.pipe(
+                HttpClient.mapRequest((request) =>
+                  HttpClientRequest.prependUrl(request, sdkConfiguration.baseUrl)
+                )
+              )
+            ),
+    })
+  );
 });
 
 export class ApiClient extends ServiceMap.Service<ApiClient, Effect.Success<typeof make>>()("rn-voidhash/ApiClient") {
diff --git a/libraries/react-native/src/core/utils/get-common-sdk-headers.ts b/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
index 1ccfd36ac..932e90d3e 100644
--- a/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
+++ b/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
@@ -1,4 +1,3 @@
-import type { SdkHeaders } from "@voidhash/api-spec";
 import { Effect } from "effect";
 
 import { SDK_VERSION } from "../constants";
@@ -14,8 +13,30 @@ const getNonce = () => {
   return cryptoObject?.randomUUID?.() ?? generateFallbackNonce();
 };
 
+interface ReactNativeSdkHeaders {
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | undefined;
+  readonly "x-client-version"?: string | undefined;
+  readonly "x-distinct-id": string;
+  readonly "x-is-backgrounded": "false" | "true";
+  readonly "x-is-debug-build": "false" | "true";
+  readonly "x-nonce": string;
+  readonly "x-observer-mode": "false" | "true";
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | undefined;
+  readonly "x-platform-device"?: string | undefined;
+  readonly "x-platform-flavor": "browser" | "native";
+  readonly "x-platform-flavor-version"?: string | undefined;
+  readonly "x-platform-version"?: string | undefined;
+  readonly "x-preferred-locales"?: string | undefined;
+  readonly "x-publishable-key": string;
+  readonly "x-sdk": "web" | "react-native";
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | undefined;
+}
+
 export const getCommonSdkHeaders = (): Effect.Effect<
-  Omit<typeof SdkHeaders.Type, "x-distinct-id">,
+  Omit<ReactNativeSdkHeaders, "x-distinct-id">,
   never,
   PlatformProvider | SdkConfiguration | IdentityManager
 > =>
diff --git a/libraries/react-native/src/react/hooks/use-customer.ts b/libraries/react-native/src/react/hooks/use-customer.ts
index 2d88465aa..5118a2479 100644
--- a/libraries/react-native/src/react/hooks/use-customer.ts
+++ b/libraries/react-native/src/react/hooks/use-customer.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/api-spec";
+import type { SdkCustomer } from "@voidhash/generated-clients";
 import React, { useCallback, useEffect, useMemo, useState } from "react";
 
 import type { VoidhashClient } from "../../client";
diff --git a/libraries/web/package.json b/libraries/web/package.json
index 39d3eb042..789fcfbf5 100644
--- a/libraries/web/package.json
+++ b/libraries/web/package.json
@@ -63,7 +63,7 @@
     "test:watch": "vitest -c vitest.unit.mts"
   },
   "dependencies": {
-    "@voidhash/api-spec": "workspace:*"
+    "@voidhash/generated-clients": "workspace:*"
   },
   "devDependencies": {
     "@types/react": "catalog:",
diff --git a/libraries/web/src/core/analytics/analytics-context.ts b/libraries/web/src/core/analytics/analytics-context.ts
index 6ab6d4d63..1ddebdb6f 100644
--- a/libraries/web/src/core/analytics/analytics-context.ts
+++ b/libraries/web/src/core/analytics/analytics-context.ts
@@ -1,7 +1,7 @@
 import type {
   EventContextField,
   EventPropertiesField,
-} from "@voidhash/api-spec/event-capture";
+} from "@voidhash/generated-clients/event-capture";
 
 import type { VoidhashTrackOptions } from "../../types";
 import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
@@ -65,7 +65,7 @@ export const createAnalyticsEvent = (
   distinct_id: distinctId,
   event: eventName,
   properties: normalizeAnalyticsRecord(properties ?? {}),
-  timestamp: options?.timestamp ? new Date(options.timestamp) : new Date(),
+  timestamp: options?.timestamp ?? new Date().toISOString(),
   session_id: options?.sessionId,
   uuid: options?.eventId ?? createEventId(platform),
 });
diff --git a/libraries/web/src/core/analytics/analytics-service.ts b/libraries/web/src/core/analytics/analytics-service.ts
index dfbff832c..02a1ceae2 100644
--- a/libraries/web/src/core/analytics/analytics-service.ts
+++ b/libraries/web/src/core/analytics/analytics-service.ts
@@ -1,5 +1,5 @@
-import { Effect, Layer, Schema, ServiceMap } from "effect";
-import { CaptureAcceptedResponse } from "@voidhash/api-spec/event-capture";
+import { Effect, Layer, ServiceMap } from "effect";
+import type { CaptureAcceptedResponse } from "@voidhash/generated-clients/event-capture";
 
 import type { AnalyticsFlushResult } from "../../types";
 import { CacheManager } from "../caching/cache-manager";
@@ -207,10 +207,12 @@ const make = Effect.gen(function* effect() {
 
       if (result._tag === "Success") {
         if (result.value.status === 202) {
-          const decodedResponse = yield* Effect.exit(
-            Schema.decodeUnknownEffect(CaptureAcceptedResponse)(result.value.data)
-          );
-          if (decodedResponse._tag !== "Success") {
+          if (
+            !result.value.data ||
+            typeof result.value.data !== "object" ||
+            typeof (result.value.data as CaptureAcceptedResponse).accepted !== "number" ||
+            typeof (result.value.data as CaptureAcceptedResponse).rejected !== "number"
+          ) {
             postponeEvents(
               ids,
               Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
@@ -221,7 +223,7 @@ const make = Effect.gen(function* effect() {
 
           dropEvents(ids);
           yield* persistQueue();
-          const response = decodedResponse.value;
+          const response = result.value.data as CaptureAcceptedResponse;
           const flushResult: AnalyticsFlushResult = {
             accepted: response.accepted,
             rejected: response.rejected,
diff --git a/libraries/web/src/core/analytics/contracts.ts b/libraries/web/src/core/analytics/contracts.ts
index f799958e7..10d20adca 100644
--- a/libraries/web/src/core/analytics/contracts.ts
+++ b/libraries/web/src/core/analytics/contracts.ts
@@ -1,12 +1,12 @@
-import {
+import type {
   CaptureBatchRequest,
   CaptureEvent,
-} from "@voidhash/api-spec/event-capture";
+} from "@voidhash/generated-clients/event-capture";
 
 import type { AnalyticsFlushResult } from "../../types";
 
-export type AnalyticsRequestEvent = typeof CaptureEvent.Type;
-export type AnalyticsBatchRequest = typeof CaptureBatchRequest.Type;
+export type AnalyticsRequestEvent = CaptureEvent;
+export type AnalyticsBatchRequest = CaptureBatchRequest;
 
 export interface QueuedAnalyticsEvent {
   readonly attempts: number;
diff --git a/libraries/web/src/core/networking/api-client.ts b/libraries/web/src/core/networking/api-client.ts
index 556300dca..4d26174bc 100644
--- a/libraries/web/src/core/networking/api-client.ts
+++ b/libraries/web/src/core/networking/api-client.ts
@@ -1,16 +1,118 @@
-import { VoidhashV1Api } from "@voidhash/api-spec";
+import {
+  make as makeCoreClient,
+  type VoidhashCoreClient,
+  type EvaluateFeatureFlagsBody,
+  type SdkEvaluateFeatureFlagsParams,
+  type SdkFeatureFlagsResponse,
+  type SdkGetCustomerParams,
+  type SdkIdentifyBody,
+  type SdkResolvePaywallBody,
+  type SdkSyncCustomerAttributesBody,
+} from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
-import { HttpApiClient } from "effect/unstable/httpapi";
+import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { SdkConfiguration } from "../sdk-configuration";
-import { normalizeGeneratedClient } from "./normalize-generated-client";
+
+interface WebFeatureFlagsResponse {
+  readonly flags: ReadonlyArray<{
+    readonly enabled: boolean;
+    readonly key: string;
+    readonly payload: unknown | null;
+    readonly variantKey: string | null;
+  }>;
+}
+
+interface WebSdkHeaders {
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | undefined;
+  readonly "x-client-version"?: string | undefined;
+  readonly "x-distinct-id": string;
+  readonly "x-is-backgrounded": "false" | "true";
+  readonly "x-is-debug-build": "false" | "true";
+  readonly "x-nonce": string;
+  readonly "x-observer-mode": "false" | "true";
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | undefined;
+  readonly "x-platform-device"?: string | undefined;
+  readonly "x-platform-flavor": "browser" | "native";
+  readonly "x-platform-flavor-version"?: string | undefined;
+  readonly "x-platform-version"?: string | undefined;
+  readonly "x-preferred-locales"?: string | undefined;
+  readonly "x-publishable-key": string;
+  readonly "x-sdk": "web" | "react-native";
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | undefined;
+}
+
+const normalizeFeatureFlagsResponse = (
+  response: SdkFeatureFlagsResponse
+): WebFeatureFlagsResponse => ({
+  flags: response.flags.map((flag) => ({
+    enabled: flag.enabled,
+    key: flag.key,
+    payload: null,
+    variantKey: flag.variantKey,
+  })),
+});
+
+const bindWebSdkClient = (client: VoidhashCoreClient) => ({
+  sdk: {
+    evaluateFeatureFlags: (request: {
+      headers: WebSdkHeaders;
+      payload: EvaluateFeatureFlagsBody;
+    }) =>
+      Effect.map(
+        client.sdkEvaluateFeatureFlags({
+          params: request.headers as SdkEvaluateFeatureFlagsParams,
+          payload: request.payload,
+        }),
+        normalizeFeatureFlagsResponse
+      ),
+    getCustomer: (request: { headers: WebSdkHeaders }) =>
+      client.sdkGetCustomer(request.headers as SdkGetCustomerParams),
+    identify: (request: {
+      headers: WebSdkHeaders;
+      payload: SdkIdentifyBody;
+    }) =>
+      client.sdkIdentify({
+        params: request.headers as Parameters<typeof client.sdkIdentify>[0]["params"],
+        payload: request.payload,
+      }),
+    resolvePaywall: (request: {
+      headers: WebSdkHeaders;
+      payload: SdkResolvePaywallBody;
+    }) =>
+      client.sdkResolvePaywall({
+        params: request.headers as Parameters<typeof client.sdkResolvePaywall>[0]["params"],
+        payload: request.payload,
+      }),
+    syncCustomerAttributes: (request: {
+      headers: WebSdkHeaders;
+      payload: SdkSyncCustomerAttributesBody;
+    }) =>
+      client.sdkSyncCustomerAttributes({
+        params: request.headers as Parameters<typeof client.sdkSyncCustomerAttributes>[0]["params"],
+        payload: request.payload,
+      }),
+  },
+});
 
 const make = Effect.gen(function* effect() {
   const config = yield* SdkConfiguration;
-  const rawClient = yield* HttpApiClient.make(VoidhashV1Api, {
-    baseUrl: config.baseUrl,
-  });
-  return normalizeGeneratedClient(rawClient);
+  const httpClient = yield* HttpClient.HttpClient;
+  return bindWebSdkClient(
+    makeCoreClient(httpClient as VoidhashCoreClient["httpClient"], {
+      transformClient: (client) =>
+        Effect.succeed(
+          client.pipe(
+            HttpClient.mapRequest((request) =>
+              HttpClientRequest.prependUrl(request, config.baseUrl)
+            )
+          )
+        ),
+    })
+  );
 });
 
 export class ApiClient extends ServiceMap.Service<
diff --git a/libraries/web/src/core/networking/event-capture-api-client.ts b/libraries/web/src/core/networking/event-capture-api-client.ts
index a68b77fda..f6741d2e4 100644
--- a/libraries/web/src/core/networking/event-capture-api-client.ts
+++ b/libraries/web/src/core/networking/event-capture-api-client.ts
@@ -1,17 +1,25 @@
-import { EventCaptureApi } from "@voidhash/api-spec/event-capture";
+import {
+  make as makeEventCaptureClient,
+  type VoidhashEventCaptureClient,
+} from "@voidhash/generated-clients/event-capture";
 import { Effect, Layer, ServiceMap } from "effect";
-import { HttpApiClient } from "effect/unstable/httpapi";
+import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { SdkConfiguration } from "../sdk-configuration";
-import { normalizeGeneratedClient } from "./normalize-generated-client";
-import { toJsonCompatibleApi } from "./json-compatible-api";
 
 const make = Effect.gen(function* effect() {
   const config = yield* SdkConfiguration;
-  const rawClient = yield* HttpApiClient.make(toJsonCompatibleApi(EventCaptureApi), {
-    baseUrl: config.analytics.baseUrl,
+  const httpClient = yield* HttpClient.HttpClient;
+  return makeEventCaptureClient(httpClient as VoidhashEventCaptureClient["httpClient"], {
+    transformClient: (client) =>
+      Effect.succeed(
+        client.pipe(
+          HttpClient.mapRequest((request) =>
+            HttpClientRequest.prependUrl(request, config.analytics.baseUrl)
+          )
+        )
+      ),
   });
-  return normalizeGeneratedClient(rawClient);
 });
 
 export class EventCaptureApiClient extends ServiceMap.Service<
diff --git a/libraries/web/src/core/networking/normalize-generated-client.ts b/libraries/web/src/core/networking/normalize-generated-client.ts
deleted file mode 100644
index f574065ff..000000000
--- a/libraries/web/src/core/networking/normalize-generated-client.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import { VoidhashV1Api } from "@voidhash/api-spec";
-import { Effect, Schema } from "effect";
-import { HttpApi, HttpApiEndpoint } from "effect/unstable/httpapi";
-
-type RequestPartName = "headers" | "params" | "payload" | "query";
-
-type EndpointNormalizers = Partial<
-  Record<RequestPartName, (value: unknown) => Effect.Effect<unknown, Schema.SchemaError, unknown>>
->;
-
-const endpointNormalizers = new Map<string, EndpointNormalizers>();
-
-const endpointKey = (group: string, endpoint: string) => `${group}.${endpoint}`;
-
-const getPayloadSchema = (endpoint: HttpApiEndpoint.AnyWithProps) => {
-  const schemas = Array.from(endpoint.payload.values()).flatMap((value) => value.schemas);
-
-  if (schemas.length === 0) {
-    return undefined;
-  }
-
-  return schemas.length === 1 ? schemas[0] : Schema.Union(schemas);
-};
-
-HttpApi.reflect(VoidhashV1Api, {
-  onGroup: () => {},
-  onEndpoint: ({ endpoint, group }) => {
-    const normalizers: EndpointNormalizers = {};
-
-    if (endpoint.params) {
-      normalizers.params = Schema.decodeUnknownEffect(endpoint.params);
-    }
-
-    if (endpoint.query) {
-      normalizers.query = Schema.decodeUnknownEffect(endpoint.query);
-    }
-
-    if (endpoint.headers) {
-      normalizers.headers = Schema.decodeUnknownEffect(endpoint.headers);
-    }
-
-    const payloadSchema = getPayloadSchema(endpoint);
-    if (payloadSchema) {
-      normalizers.payload = Schema.decodeUnknownEffect(payloadSchema);
-    }
-
-    endpointNormalizers.set(endpointKey(group.identifier, endpoint.name), normalizers);
-  },
-});
-
-const normalizeRequest = (
-  normalizers: EndpointNormalizers,
-  request: Record<string, unknown> | undefined
-) =>
-  Effect.gen(function* normalizeRequestEffect() {
-    if (request === undefined) {
-      return undefined;
-    }
-
-    const normalized = {
-      ...request,
-    };
-
-    if (normalizers.params && "params" in request) {
-      normalized.params = yield* normalizers.params(request.params);
-    }
-
-    if (normalizers.query && "query" in request) {
-      normalized.query = yield* normalizers.query(request.query);
-    }
-
-    if (normalizers.headers && "headers" in request) {
-      normalized.headers = yield* normalizers.headers(request.headers);
-    }
-
-    if (normalizers.payload && "payload" in request) {
-      normalized.payload = yield* normalizers.payload(request.payload);
-    }
-
-    return normalized;
-  });
-
-// biome-ignore lint/suspicious/noExplicitAny: Generic client normalization requires dynamic typing
-export const normalizeGeneratedClient = <T extends Record<string, any>>(
-  client: T
-): T =>
-  Object.fromEntries(
-    Object.entries(client).map(([groupName, groupValue]) => {
-      if (!groupValue || typeof groupValue !== "object") {
-        return [groupName, groupValue];
-      }
-
-      const normalizedGroup = Object.fromEntries(
-        Object.entries(groupValue).map(([endpointName, endpoint]) => {
-          if (typeof endpoint !== "function") {
-            return [endpointName, endpoint];
-          }
-
-          const normalizers = endpointNormalizers.get(endpointKey(groupName, endpointName));
-
-          if (!normalizers) {
-            return [endpointName, endpoint];
-          }
-
-          return [
-            endpointName,
-            (request?: Record<string, unknown>) =>
-              Effect.flatMap(normalizeRequest(normalizers, request), (normalized) =>
-                Reflect.apply(
-                  endpoint as (request?: unknown) => Effect.Effect<unknown>,
-                  groupValue,
-                  [normalized]
-                )
-              ),
-          ];
-        })
-      );
-
-      return [groupName, normalizedGroup];
-    })
-  ) as T;
diff --git a/package.json b/package.json
index 9bc9c8ff0..11307c757 100644
--- a/package.json
+++ b/package.json
@@ -40,6 +40,8 @@
     "lint": "biome check .",
     "lint:fix": "biome check . --apply",
     "bump": "bumpp",
+    "openapi:generate:preview": "node ./scripts/generate-openapi-clients.mjs preview",
+    "openapi:generate:production": "node ./scripts/generate-openapi-clients.mjs production",
     "test": "turbo test",
     "typecheck": "turbo typecheck",
     "lines-of-code": "npx cloc . --exclude-dir=.next,node_modules,.vercel,.turbo,.git,meta,.github,.expo,build,.expo-shared,nitrogen --vcs git --not-match-f=pnpm-lock.yaml,meta.json --exclude-ext=yaml,md"
diff --git a/packages/api-spec/LICENSE.md b/packages/api-spec/LICENSE.md
deleted file mode 100644
index cc433146c..000000000
--- a/packages/api-spec/LICENSE.md
+++ /dev/null
@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2025 Voidhash s.r.o.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
diff --git a/packages/api-spec/README.md b/packages/api-spec/README.md
deleted file mode 100644
index 777ac13b5..000000000
--- a/packages/api-spec/README.md
+++ /dev/null
@@ -1,43 +0,0 @@
-# @voidhash/api-spec
-
-`@voidhash/api-spec` contains the shared Voidhash API contracts (routes, schemas, auth headers, and API error types).
-
-## Installation
-
-Install stable:
-
-```bash
-pnpm add @voidhash/api-spec@latest
-```
-
-Install a specific version:
-
-```bash
-pnpm add @voidhash/api-spec@0.0.1-alpha.1
-```
-
-Install latest canary:
-
-```bash
-pnpm add @voidhash/api-spec@canary
-```
-
-## Runtime Expectations
-
-- ESM package (`"type": "module"`).
-- Exports TypeScript source files from `src`.
-- Consumers should compile TS dependencies in their build pipeline.
-- Peer dependencies are required from the consuming app:
-  - `effect`
-  - `@effect/platform`
-
-## Release Channels
-
-- `latest`: stable releases published from `main`.
-- `canary`: preview builds published from pushes to `preview`.
-
-Recommended flow:
-
-1. Push `api-spec` changes to `preview` to publish a canary build.
-2. Validate in `voidhash-mono` against `@voidhash/api-spec@canary` (or the exact canary version).
-3. Merge to `main` and publish `latest`.
diff --git a/packages/api-spec/package.json b/packages/api-spec/package.json
deleted file mode 100644
index ba4d3fb97..000000000
--- a/packages/api-spec/package.json
+++ /dev/null
@@ -1,32 +0,0 @@
-{
-  "name": "@voidhash/api-spec",
-  "version": "0.0.1-alpha.1",
-  "private": false,
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/voidhashcom/voidhash",
-    "directory": "packages/api-spec"
-  },
-  "files": ["src", "LICENSE.md", "README.md", "package.json"],
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
-  },
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts",
-    "./event-capture": "./src/event-capture.ts",
-    "./errors": "./src/errors/index.ts"
-  },
-  "scripts": {
-    "typecheck": "tsgo --noEmit"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@voidhash/tsconfig": "workspace:*",
-    "typescript": "5.6.3"
-  },
-  "peerDependencies": {
-    "effect": "catalog:"
-  }
-}
diff --git a/packages/api-spec/src/api.ts b/packages/api-spec/src/api.ts
deleted file mode 100644
index db1caeb07..000000000
--- a/packages/api-spec/src/api.ts
+++ /dev/null
@@ -1,398 +0,0 @@
-import { Schema } from "effect";
-import { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
-
-import {
-  ActionForbiddenError,
-  ApiKeyNotFoundError,
-  ApiKeyServiceError,
-  AuthenticationError,
-  ChangesetDeploymentServiceError,
-  CustomerInvalidAnonymousIdError,
-  CustomerNotFoundError,
-  CustomerServiceError,
-  OrganizationServiceError,
-  PaymentProviderConfigurationServiceError,
-  PaymentProviderProductServiceError,
-  PaywallLocationServiceError,
-  PerkServiceError,
-  ProductPerkServiceError,
-  ProductPerkValidationError,
-  ProductServiceError,
-  ProjectServiceError,
-  SdkCustomerAlreadyIdentifiedError,
-  SdkCustomerNotFoundError,
-  SdkServiceError,
-  SdkValidationError,
-  UserServiceError,
-  WebhookDeliveryNotFoundError,
-  WebhookEndpointNotFoundError,
-  WebhookServiceError,
-  WebhookValidationError,
-} from "./errors";
-import { AuthMiddleware } from "./middlewares";
-import {
-  ApiKey,
-  ApiKeyWithRawKey,
-  CreateCustomerBody,
-  CreateOrganizationBody,
-  CreateProjectBody,
-  CreateSecretKeyBody,
-  CreateWebhookEndpointBody,
-  Customer,
-  DeployChangesetBody,
-  DeployChangesetResponse,
-  Organization,
-  PaymentProviderConfiguration,
-  PaymentProviderProduct,
-  PaywallLocation,
-  Perk,
-  Product,
-  ProductPerk,
-  Project,
-  EvaluateFeatureFlagsBody,
-  SdkCustomer,
-  SdkFeatureFlagsResponse,
-  SdkHeaders,
-  SdkIdentifyBody,
-  SdkResolvePaywallBody,
-  SdkResolvedPaywall,
-  SdkSyncCustomerAttributesBody,
-  SdkSyncTransactionBody,
-  SdkSyncTransactionResponse,
-  Session,
-  UpdateWebhookEndpointBody,
-  User,
-  WebhookDelivery,
-  WebhookDeliveryWithAttempts,
-  WebhookEndpoint,
-} from "./schema";
-
-export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
-  .add(
-    HttpApiGroup.make("auth")
-      .add(
-        HttpApiEndpoint.get("session", "/session", {
-          success: Session,
-          error: [ActionForbiddenError],
-        }).middleware(AuthMiddleware)
-      )
-      .prefix("/auth")
-  )
-  .add(
-    HttpApiGroup.make("api_keys")
-      .add(
-        HttpApiEndpoint.post("createSecretKey", "/", {
-          success: ApiKeyWithRawKey,
-          payload: CreateSecretKeyBody,
-          error: [ApiKeyServiceError, ActionForbiddenError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("listApiKeys", "/", {
-          success: Schema.Array(ApiKey),
-          error: [ApiKeyServiceError, ActionForbiddenError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("getApiKeyById", "/:apiKeyId", {
-          params: { apiKeyId: Schema.String },
-          success: ApiKey,
-          error: [ApiKeyServiceError, ApiKeyNotFoundError, ActionForbiddenError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("rotateSecretKey", "/:apiKeyId/rotate", {
-          params: { apiKeyId: Schema.String },
-          success: ApiKeyWithRawKey,
-          error: [ApiKeyServiceError, ApiKeyNotFoundError, ActionForbiddenError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.delete("deleteApiKey", "/:apiKeyId", {
-          params: { apiKeyId: Schema.String },
-          error: [ApiKeyServiceError, ApiKeyNotFoundError, ActionForbiddenError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/api-keys")
-  )
-  .add(
-    HttpApiGroup.make("customers")
-      .add(
-        HttpApiEndpoint.post("createCustomer", "/", {
-          payload: CreateCustomerBody,
-          success: Customer,
-          error: [ActionForbiddenError, CustomerInvalidAnonymousIdError, CustomerServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("listCustomers", "/", {
-          success: Schema.Array(Customer),
-          error: [ActionForbiddenError, CustomerServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("getCustomerById", "/:customerId", {
-          params: { customerId: Schema.String },
-          success: Customer,
-          error: [ActionForbiddenError, CustomerNotFoundError, CustomerServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("byDistinctId", "/by-distinct-id/:distinctId", {
-          params: { distinctId: Schema.String },
-          success: Customer,
-          error: [ActionForbiddenError, CustomerNotFoundError, CustomerServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/customers")
-  )
-  .add(
-    HttpApiGroup.make("organizations")
-      .add(
-        HttpApiEndpoint.post("createOrganization", "/", {
-          payload: CreateOrganizationBody,
-          success: Organization,
-          error: [OrganizationServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/organizations")
-  )
-  .add(
-    HttpApiGroup.make("perks")
-      .add(
-        HttpApiEndpoint.get("listPerks", "/", {
-          success: Schema.Array(Perk),
-          error: [ActionForbiddenError, PerkServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/perks")
-  )
-  .add(
-    HttpApiGroup.make("paywall_locations")
-      .add(
-        HttpApiEndpoint.get("listPaywallLocations", "/", {
-          success: Schema.Array(PaywallLocation),
-          error: [ActionForbiddenError, PaywallLocationServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/paywall-locations")
-  )
-  .add(
-    HttpApiGroup.make("projects")
-      .add(
-        HttpApiEndpoint.post("createProject", "/", {
-          payload: CreateProjectBody,
-          success: Project,
-          error: [ActionForbiddenError, AuthenticationError, ProjectServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("listProjects", "/:organizationId", {
-          params: { organizationId: Schema.String },
-          success: Schema.Array(Project),
-          error: [ActionForbiddenError, ProjectServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/projects")
-  )
-  .add(
-    HttpApiGroup.make("products")
-      .add(
-        HttpApiEndpoint.get("listProducts", "/", {
-          success: Schema.Array(Product),
-          error: [ActionForbiddenError, ProductServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/products")
-  )
-  .add(
-    HttpApiGroup.make("product_perks")
-      .add(
-        HttpApiEndpoint.get("listProductPerksByProductId", "/by-product-id/:productId", {
-          params: { productId: Schema.String },
-          success: Schema.Array(ProductPerk),
-          error: [ActionForbiddenError, ProductPerkServiceError, ProductPerkValidationError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/product-perks")
-  )
-  .add(
-    HttpApiGroup.make("sdk")
-      .add(
-        HttpApiEndpoint.get("getCustomer", "/get-customer", {
-          success: SdkCustomer,
-          headers: SdkHeaders,
-          error: [AuthenticationError, SdkServiceError, SdkCustomerNotFoundError, SdkValidationError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("identify", "/identify", {
-          payload: SdkIdentifyBody,
-          success: SdkCustomer,
-          headers: SdkHeaders,
-          error: [AuthenticationError, SdkServiceError, SdkValidationError, SdkCustomerAlreadyIdentifiedError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("syncCustomerAttributes", "/sync-customer-attributes", {
-          payload: SdkSyncCustomerAttributesBody,
-          success: SdkCustomer,
-          headers: SdkHeaders,
-          error: [AuthenticationError, SdkServiceError, SdkValidationError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("syncTransaction", "/sync-transaction", {
-          payload: SdkSyncTransactionBody,
-          success: SdkSyncTransactionResponse,
-          headers: SdkHeaders,
-          error: [AuthenticationError, SdkServiceError, SdkValidationError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("evaluateFeatureFlags", "/evaluate-flags", {
-          payload: EvaluateFeatureFlagsBody,
-          success: SdkFeatureFlagsResponse,
-          headers: SdkHeaders,
-          error: [AuthenticationError, SdkServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("resolvePaywall", "/resolve-paywall", {
-          payload: SdkResolvePaywallBody,
-          success: Schema.NullOr(SdkResolvedPaywall),
-          headers: SdkHeaders,
-          error: [AuthenticationError, SdkServiceError, SdkValidationError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/sdk")
-  )
-  .add(
-    HttpApiGroup.make("users")
-      .add(
-        HttpApiEndpoint.get("getUser", "/current", {
-          success: User,
-          error: [AuthenticationError, UserServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/users")
-  )
-  .add(
-    HttpApiGroup.make("payment_provider_configurations")
-      .add(
-        HttpApiEndpoint.get("listPaymentProviderConfigurations", "/", {
-          success: Schema.Array(PaymentProviderConfiguration),
-          error: [ActionForbiddenError, PaymentProviderConfigurationServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/payment-provider-configurations")
-  )
-  .add(
-    HttpApiGroup.make("payment_provider_products")
-      .add(
-        HttpApiEndpoint.get("listPaymentProviderProducts", "/", {
-          success: Schema.Array(PaymentProviderProduct),
-          error: [ActionForbiddenError, PaymentProviderProductServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/payment-provider-products")
-  )
-  .add(
-    HttpApiGroup.make("changesets")
-      .add(
-        HttpApiEndpoint.post("deployChangeset", "/deploy", {
-          payload: DeployChangesetBody,
-          success: DeployChangesetResponse,
-          error: [AuthenticationError, ActionForbiddenError, ChangesetDeploymentServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/changesets")
-  )
-  .add(
-    HttpApiGroup.make("webhooks")
-      .add(
-        HttpApiEndpoint.post("createWebhookEndpoint", "/endpoints", {
-          payload: CreateWebhookEndpointBody,
-          success: WebhookEndpoint,
-          error: [ActionForbiddenError, WebhookValidationError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("listWebhookEndpoints", "/endpoints", {
-          success: Schema.Array(WebhookEndpoint),
-          error: [ActionForbiddenError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("getWebhookEndpoint", "/endpoints/:endpointId", {
-          params: { endpointId: Schema.String },
-          success: WebhookEndpoint,
-          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.patch("updateWebhookEndpoint", "/endpoints/:endpointId", {
-          params: { endpointId: Schema.String },
-          payload: UpdateWebhookEndpointBody,
-          success: WebhookEndpoint,
-          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookValidationError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.delete("deleteWebhookEndpoint", "/endpoints/:endpointId", {
-          params: { endpointId: Schema.String },
-          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("rotateWebhookSecret", "/endpoints/:endpointId/rotate-secret", {
-          params: { endpointId: Schema.String },
-          success: WebhookEndpoint,
-          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("testWebhookEndpoint", "/endpoints/:endpointId/test", {
-          params: { endpointId: Schema.String },
-          success: WebhookDelivery,
-          error: [ActionForbiddenError, WebhookEndpointNotFoundError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("listWebhookDeliveries", "/deliveries", {
-          success: Schema.Array(WebhookDelivery),
-          error: [ActionForbiddenError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.get("getWebhookDelivery", "/deliveries/:deliveryId", {
-          params: { deliveryId: Schema.String },
-          success: WebhookDeliveryWithAttempts,
-          error: [ActionForbiddenError, WebhookDeliveryNotFoundError, WebhookServiceError],
-        })
-      )
-      .add(
-        HttpApiEndpoint.post("retryWebhookDelivery", "/deliveries/:deliveryId/retry", {
-          params: { deliveryId: Schema.String },
-          success: WebhookDelivery,
-          error: [ActionForbiddenError, WebhookDeliveryNotFoundError, WebhookValidationError, WebhookServiceError],
-        })
-      )
-      .middleware(AuthMiddleware)
-      .prefix("/webhooks")
-  )
-
-  .prefix("/api/v1");
diff --git a/packages/api-spec/src/auth.ts b/packages/api-spec/src/auth.ts
deleted file mode 100644
index 18c58878f..000000000
--- a/packages/api-spec/src/auth.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-import { Schema, ServiceMap } from "effect";
-
-// ============================================================================
-// Session Sub-Schemas
-// ============================================================================
-
-export const ApiSessionOrganizationSchema = Schema.Struct({
-  id: Schema.String,
-  name: Schema.String,
-  permissions: Schema.Array(Schema.String),
-  slug: Schema.String,
-});
-
-export const ApiSessionProjectSchema = Schema.Struct({
-  id: Schema.String,
-  name: Schema.String,
-  organizationId: Schema.String,
-  permissions: Schema.Array(Schema.String),
-  slug: Schema.String,
-});
-
-const ApiSessionOrganizationsSchema = Schema.Array(ApiSessionOrganizationSchema);
-const ApiSessionProjectsSchema = Schema.Array(ApiSessionProjectSchema);
-
-export const ApiSessionCustomerSchema = Schema.Struct({
-  distinctId: Schema.String,
-});
-
-export const ApiSessionUserSchema = Schema.Struct({
-  createdAt: Schema.Date,
-  email: Schema.String,
-  emailVerified: Schema.Boolean,
-  id: Schema.String,
-  image: Schema.NullOr(Schema.String),
-  name: Schema.String,
-  updatedAt: Schema.Date,
-});
-
-// ============================================================================
-// Session Type Schemas
-// ============================================================================
-
-export const ApiUserSessionSchema = Schema.Struct({
-  cookie: Schema.NullOr(Schema.String),
-  customer: Schema.Null,
-  method: Schema.Literal("user"),
-  name: Schema.String,
-  organizations: ApiSessionOrganizationsSchema,
-  projects: ApiSessionProjectsSchema,
-  user: ApiSessionUserSchema,
-});
-
-export const ApiSecretKeySessionSchema = Schema.Struct({
-  cookie: Schema.Null,
-  customer: Schema.Null,
-  method: Schema.Literal("secret-key"),
-  name: Schema.String,
-  organizations: ApiSessionOrganizationsSchema,
-  projects: ApiSessionProjectsSchema,
-  user: Schema.Null,
-});
-
-export const ApiPublishableKeySessionSchema = Schema.Struct({
-  cookie: Schema.Null,
-  customer: ApiSessionCustomerSchema,
-  method: Schema.Literal("publishable-key"),
-  name: Schema.String,
-  organizations: ApiSessionOrganizationsSchema,
-  projects: ApiSessionProjectsSchema,
-  user: Schema.Null,
-});
-
-// ============================================================================
-// Combined Auth Session Schema
-// ============================================================================
-
-export const ApiAuthSessionSchema = Schema.Union([
-  ApiUserSessionSchema,
-  ApiSecretKeySessionSchema,
-  ApiPublishableKeySessionSchema,
-]);
-
-// ============================================================================
-// Type Exports
-// ============================================================================
-
-export type ApiUserSession = typeof ApiUserSessionSchema.Type;
-export type ApiSecretKeySession = typeof ApiSecretKeySessionSchema.Type;
-export type ApiPublishableKeySession = typeof ApiPublishableKeySessionSchema.Type;
-export type AnyApiAuthSession =
-  | ApiUserSession
-  | ApiSecretKeySession
-  | ApiPublishableKeySession;
-
-// ============================================================================
-// Context Tag
-// ============================================================================
-
-export class ApiAuthSession extends ServiceMap.Service<ApiAuthSession, ApiUserSession | ApiSecretKeySession | ApiPublishableKeySession>()("api-spec/auth/ApiAuthSession") {}
diff --git a/packages/api-spec/src/changeset.ts b/packages/api-spec/src/changeset.ts
deleted file mode 100644
index 28972b21e..000000000
--- a/packages/api-spec/src/changeset.ts
+++ /dev/null
@@ -1,204 +0,0 @@
-import { Schema } from "effect";
-
-// ============================================================================
-// Paywall Location Changes
-// ============================================================================
-
-export const PaywallLocationCreateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("create-paywall-location"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    description: Schema.optional(Schema.NullOr(Schema.String)),
-    name: Schema.String,
-    slug: Schema.String,
-  }),
-});
-
-export const PaywallLocationUpdateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("update-paywall-location"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    description: Schema.optional(Schema.NullOr(Schema.String)),
-    name: Schema.String,
-    slug: Schema.String,
-  }),
-});
-
-export const PaywallLocationArchiveChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("archive-paywall-location"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    slug: Schema.String,
-  }),
-});
-
-// ============================================================================
-// Perk Changes
-// ============================================================================
-
-export const PerkCreateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("create-perk"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    name: Schema.String,
-    slug: Schema.String,
-  }),
-});
-
-export const PerkUpdateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("update-perk"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    name: Schema.String,
-    slug: Schema.String,
-  }),
-});
-
-export const PerkDeleteChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("delete-perk"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    slug: Schema.String,
-  }),
-});
-
-// ============================================================================
-// Product Changes
-// ============================================================================
-
-export const ProductCreateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("create-product"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    name: Schema.String,
-    slug: Schema.String,
-  }),
-});
-
-export const ProductUpdateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("update-product"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    name: Schema.String,
-    slug: Schema.String,
-  }),
-});
-
-export const ProductDeleteChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("delete-product"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    slug: Schema.String,
-  }),
-});
-
-// ============================================================================
-// Product Perk Changes
-// ============================================================================
-
-export const ProductPerkCreateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("create-product-perk"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    perkSlug: Schema.String,
-    productSlug: Schema.String,
-  }),
-});
-
-export const ProductPerkDeleteChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("delete-product-perk"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    perkSlug: Schema.String,
-    productSlug: Schema.String,
-  }),
-});
-
-// ============================================================================
-// Payment Provider Product Changes
-// ============================================================================
-
-export const PaymentProviderProductCreateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("create-payment-provider-product"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    configuration: Schema.Record(Schema.String, Schema.Unknown),
-    productSlug: Schema.String,
-    providerId: Schema.String,
-  }),
-});
-
-export const PaymentProviderProductUpdateChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("update-payment-provider-product"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    configuration: Schema.Record(Schema.String, Schema.Unknown),
-    productSlug: Schema.String,
-    providerId: Schema.String,
-  }),
-});
-
-export const PaymentProviderProductDeleteChangeSchema = Schema.Struct({
-  changeType: Schema.Literal("delete-payment-provider-product"),
-  key: Schema.String,
-  payload: Schema.Struct({
-    productSlug: Schema.String,
-    providerId: Schema.String,
-  }),
-});
-
-// ============================================================================
-// Combined Schemas
-// ============================================================================
-
-export const ChangeSchema = Schema.Union([
-  PaywallLocationCreateChangeSchema,
-  PaywallLocationUpdateChangeSchema,
-  PaywallLocationArchiveChangeSchema,
-  PerkCreateChangeSchema,
-  PerkUpdateChangeSchema,
-  PerkDeleteChangeSchema,
-  ProductCreateChangeSchema,
-  ProductUpdateChangeSchema,
-  ProductDeleteChangeSchema,
-  ProductPerkCreateChangeSchema,
-  ProductPerkDeleteChangeSchema,
-  PaymentProviderProductCreateChangeSchema,
-  PaymentProviderProductUpdateChangeSchema,
-  PaymentProviderProductDeleteChangeSchema,
-]);
-
-export const ChangesetSchema = Schema.Struct({
-  changes: Schema.Array(ChangeSchema),
-});
-
-// ============================================================================
-// Utility Functions
-// ============================================================================
-
-export function sortChangeset(changeset: typeof ChangesetSchema.Type) {
-  const sortedChangeTypesByPriority: (typeof ChangeSchema.Type.changeType)[] = [
-    "create-paywall-location",
-    "create-perk",
-    "create-product",
-    "update-paywall-location",
-    "update-perk",
-    "update-product",
-    "create-product-perk",
-    "create-payment-provider-product",
-    "update-payment-provider-product",
-    "archive-paywall-location",
-    "delete-product-perk",
-    "delete-payment-provider-product",
-    "delete-product",
-    "delete-perk",
-  ];
-
-  const sortedChangeset = [...changeset.changes].sort(
-    (a, b) =>
-      sortedChangeTypesByPriority.indexOf(a.changeType) -
-      sortedChangeTypesByPriority.indexOf(b.changeType)
-  );
-
-  return sortedChangeset;
-}
diff --git a/packages/api-spec/src/errors/admin.ts b/packages/api-spec/src/errors/admin.ts
deleted file mode 100644
index 8f266a42a..000000000
--- a/packages/api-spec/src/errors/admin.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic admin service error */
-export class AdminServiceError extends Schema.TaggedErrorClass<AdminServiceError>()(
-  "AdminServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
diff --git a/packages/api-spec/src/errors/analytics.ts b/packages/api-spec/src/errors/analytics.ts
deleted file mode 100644
index c860289b7..000000000
--- a/packages/api-spec/src/errors/analytics.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic analytics service error */
-export class AnalyticsServiceError extends Schema.TaggedErrorClass<AnalyticsServiceError>()(
-  "AnalyticsServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Invalid time range error */
-export class InvalidTimeRangeError extends Schema.TaggedErrorClass<InvalidTimeRangeError>()(
-  "InvalidTimeRangeError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
-
-/** Invalid metric error */
-export class InvalidMetricError extends Schema.TaggedErrorClass<InvalidMetricError>()(
-  "InvalidMetricError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
diff --git a/packages/api-spec/src/errors/api-key.ts b/packages/api-spec/src/errors/api-key.ts
deleted file mode 100644
index 1782b4200..000000000
--- a/packages/api-spec/src/errors/api-key.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic API key service error */
-export class ApiKeyServiceError extends Schema.TaggedErrorClass<ApiKeyServiceError>()(
-  "ApiKeyServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** API key not found */
-export class ApiKeyNotFoundError extends Schema.TaggedErrorClass<ApiKeyNotFoundError>()(
-  "ApiKeyNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
diff --git a/packages/api-spec/src/errors/billing.ts b/packages/api-spec/src/errors/billing.ts
deleted file mode 100644
index 71de5cbda..000000000
--- a/packages/api-spec/src/errors/billing.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic billing service error */
-export class BillingServiceError extends Schema.TaggedErrorClass<BillingServiceError>()(
-  "BillingServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Organization billing not found */
-export class OrganizationBillingNotFoundError extends Schema.TaggedErrorClass<OrganizationBillingNotFoundError>()(
-  "OrganizationBillingNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** Invalid billing tier error */
-export class InvalidBillingTierError extends Schema.TaggedErrorClass<InvalidBillingTierError>()(
-  "InvalidBillingTierError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
diff --git a/packages/api-spec/src/errors/changeset.ts b/packages/api-spec/src/errors/changeset.ts
deleted file mode 100644
index ec7e8a101..000000000
--- a/packages/api-spec/src/errors/changeset.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic changeset deployment service error */
-export class ChangesetDeploymentServiceError extends Schema.TaggedErrorClass<ChangesetDeploymentServiceError>()(
-  "ChangesetDeploymentServiceError",
-  {
-    cause: Schema.Unknown,
-  },
-  { httpApiStatus: 500 }
-) {}
diff --git a/packages/api-spec/src/errors/common.ts b/packages/api-spec/src/errors/common.ts
deleted file mode 100644
index 0de329ce6..000000000
--- a/packages/api-spec/src/errors/common.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-import { Schema } from "effect";
-
-/** Action is forbidden due to insufficient permissions */
-export class ActionForbiddenError extends Schema.TaggedErrorClass<ActionForbiddenError>()(
-  "ActionForbiddenError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 403 }
-) {}
-
-/** Authentication failed */
-export class AuthenticationError extends Schema.TaggedErrorClass<AuthenticationError>()(
-  "AuthenticationError",
-  {
-    cause: Schema.String,
-    message: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** User is not authenticated */
-export class NotAuthenticatedError extends Schema.TaggedErrorClass<NotAuthenticatedError>()(
-  "NotAuthenticatedError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 401 }
-) {}
diff --git a/packages/api-spec/src/errors/customer.ts b/packages/api-spec/src/errors/customer.ts
deleted file mode 100644
index 1b8c252d6..000000000
--- a/packages/api-spec/src/errors/customer.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic customer service error */
-export class CustomerServiceError extends Schema.TaggedErrorClass<CustomerServiceError>()(
-  "CustomerServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Customer not found */
-export class CustomerNotFoundError extends Schema.TaggedErrorClass<CustomerNotFoundError>()(
-  "CustomerNotFoundError",
-  {
-    id: Schema.NonEmptyString,
-  },
-  { httpApiStatus: 404 }
-) {
-  override toString(): string {
-    return `The following customer not found: ${this.id}`;
-  }
-}
-
-/** Anonymous ID is invalid */
-export class CustomerInvalidAnonymousIdError extends Schema.TaggedErrorClass<CustomerInvalidAnonymousIdError>()(
-  "CustomerInvalidAnonymousIdError",
-  {
-    id: Schema.NonEmptyString,
-  },
-  { httpApiStatus: 400 }
-) {
-  override toString(): string {
-    return `The following anonymous ID is invalid: ${this.id}`;
-  }
-}
diff --git a/packages/api-spec/src/errors/index.ts b/packages/api-spec/src/errors/index.ts
deleted file mode 100644
index 3c8500686..000000000
--- a/packages/api-spec/src/errors/index.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-export * from "./admin";
-export * from "./analytics";
-export * from "./api-key";
-export * from "./billing";
-export * from "./changeset";
-export * from "./common";
-export * from "./customer";
-export * from "./organization";
-export * from "./payment-provider";
-export * from "./paywall";
-export * from "./paywall-location";
-export * from "./perk";
-export * from "./product";
-export * from "./product-perk";
-export * from "./project";
-export * from "./sdk";
-export * from "./user";
-export * from "./webhook";
diff --git a/packages/api-spec/src/errors/organization.ts b/packages/api-spec/src/errors/organization.ts
deleted file mode 100644
index 4ae8760f5..000000000
--- a/packages/api-spec/src/errors/organization.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic organization service error */
-export class OrganizationServiceError extends Schema.TaggedErrorClass<OrganizationServiceError>()(
-  "OrganizationServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Organization not found */
-export class OrganizationNotFoundError extends Schema.TaggedErrorClass<OrganizationNotFoundError>()(
-  "OrganizationNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
diff --git a/packages/api-spec/src/errors/payment-provider.ts b/packages/api-spec/src/errors/payment-provider.ts
deleted file mode 100644
index cbf0c597b..000000000
--- a/packages/api-spec/src/errors/payment-provider.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic payment provider configuration service error */
-export class PaymentProviderConfigurationServiceError extends Schema.TaggedErrorClass<PaymentProviderConfigurationServiceError>()(
-  "PaymentProviderConfigurationServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Payment provider configuration not found */
-export class PaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<PaymentProviderConfigurationNotFoundError>()(
-  "PaymentProviderConfigurationNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** Payment provider configuration validation error */
-export class PaymentProviderConfigurationValidationError extends Schema.TaggedErrorClass<PaymentProviderConfigurationValidationError>()(
-  "PaymentProviderConfigurationValidationError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
-
-/** Payment provider configuration key unavailable */
-export class PaymentProviderConfigurationKeyUnavailableError extends Schema.TaggedErrorClass<PaymentProviderConfigurationKeyUnavailableError>()(
-  "PaymentProviderConfigurationKeyUnavailableError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
-
-/** Payment provider already exists */
-export class PaymentProviderAlreadyExistsError extends Schema.TaggedErrorClass<PaymentProviderAlreadyExistsError>()(
-  "PaymentProviderAlreadyExistsError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 409 }
-) {}
-
-/** Generic payment provider product service error */
-export class PaymentProviderProductServiceError extends Schema.TaggedErrorClass<PaymentProviderProductServiceError>()(
-  "PaymentProviderProductServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Payment provider product validation error */
-export class PaymentProviderProductValidationError extends Schema.TaggedErrorClass<PaymentProviderProductValidationError>()(
-  "PaymentProviderProductValidationError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
-
-/** Payment provider product not found */
-export class PaymentProviderProductNotFoundError extends Schema.TaggedErrorClass<PaymentProviderProductNotFoundError>()(
-  "PaymentProviderProductNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
diff --git a/packages/api-spec/src/errors/paywall-location.ts b/packages/api-spec/src/errors/paywall-location.ts
deleted file mode 100644
index 2fa8573ac..000000000
--- a/packages/api-spec/src/errors/paywall-location.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic paywall location service error */
-export class PaywallLocationServiceError extends Schema.TaggedErrorClass<PaywallLocationServiceError>()(
-  "PaywallLocationServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
diff --git a/packages/api-spec/src/errors/paywall.ts b/packages/api-spec/src/errors/paywall.ts
deleted file mode 100644
index cabac2a39..000000000
--- a/packages/api-spec/src/errors/paywall.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic paywall service error */
-export class PaywallServiceError extends Schema.TaggedErrorClass<PaywallServiceError>()(
-  "PaywallServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Paywall not found */
-export class PaywallNotFoundError extends Schema.TaggedErrorClass<PaywallNotFoundError>()(
-  "PaywallNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** Paywall slug already exists */
-export class PaywallSlugAlreadyExistsError extends Schema.TaggedErrorClass<PaywallSlugAlreadyExistsError>()(
-  "PaywallSlugAlreadyExistsError",
-  {
-    slug: Schema.String,
-  },
-  { httpApiStatus: 409 }
-) {}
-
-/** Paywall publish error */
-export class PaywallPublishError extends Schema.TaggedErrorClass<PaywallPublishError>()(
-  "PaywallPublishError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
diff --git a/packages/api-spec/src/errors/perk.ts b/packages/api-spec/src/errors/perk.ts
deleted file mode 100644
index 8621d3f6b..000000000
--- a/packages/api-spec/src/errors/perk.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic perk service error */
-export class PerkServiceError extends Schema.TaggedErrorClass<PerkServiceError>()(
-  "PerkServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Perk not found */
-export class PerkNotFoundError extends Schema.TaggedErrorClass<PerkNotFoundError>()(
-  "PerkNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** Perk slug already exists */
-export class PerkSlugAlreadyExistsError extends Schema.TaggedErrorClass<PerkSlugAlreadyExistsError>()(
-  "PerkSlugAlreadyExistsError",
-  {
-    slug: Schema.String,
-  },
-  { httpApiStatus: 409 }
-) {
-  override toString(): string {
-    return `The following perk slug already exists: ${this.slug}`;
-  }
-}
diff --git a/packages/api-spec/src/errors/product-perk.ts b/packages/api-spec/src/errors/product-perk.ts
deleted file mode 100644
index f96c14e3d..000000000
--- a/packages/api-spec/src/errors/product-perk.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic product perk service error */
-export class ProductPerkServiceError extends Schema.TaggedErrorClass<ProductPerkServiceError>()(
-  "ProductPerkServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Product perk validation error */
-export class ProductPerkValidationError extends Schema.TaggedErrorClass<ProductPerkValidationError>()(
-  "ProductPerkValidationError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
diff --git a/packages/api-spec/src/errors/product.ts b/packages/api-spec/src/errors/product.ts
deleted file mode 100644
index 5b203f9e4..000000000
--- a/packages/api-spec/src/errors/product.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic product service error */
-export class ProductServiceError extends Schema.TaggedErrorClass<ProductServiceError>()(
-  "ProductServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Product not found */
-export class ProductNotFoundError extends Schema.TaggedErrorClass<ProductNotFoundError>()(
-  "ProductNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** Product slug already exists */
-export class ProductSlugAlreadyExistsError extends Schema.TaggedErrorClass<ProductSlugAlreadyExistsError>()(
-  "ProductSlugAlreadyExistsError",
-  {
-    slug: Schema.String,
-  },
-  { httpApiStatus: 409 }
-) {
-  override toString(): string {
-    return `The following product slug already exists: ${this.slug}`;
-  }
-}
diff --git a/packages/api-spec/src/errors/project.ts b/packages/api-spec/src/errors/project.ts
deleted file mode 100644
index f964125cf..000000000
--- a/packages/api-spec/src/errors/project.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic project service error */
-export class ProjectServiceError extends Schema.TaggedErrorClass<ProjectServiceError>()(
-  "ProjectServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Project not found */
-export class ProjectNotFoundError extends Schema.TaggedErrorClass<ProjectNotFoundError>()(
-  "ProjectNotFoundError",
-  {
-    projectId: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {
-  override toString(): string {
-    return `The following project not found: ${this.projectId}`;
-  }
-}
diff --git a/packages/api-spec/src/errors/sdk.ts b/packages/api-spec/src/errors/sdk.ts
deleted file mode 100644
index 8f6de2125..000000000
--- a/packages/api-spec/src/errors/sdk.ts
+++ /dev/null
@@ -1,41 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic SDK service error */
-export class SdkServiceError extends Schema.TaggedErrorClass<SdkServiceError>()(
-  "SdkServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** SDK customer not found */
-export class SdkCustomerNotFoundError extends Schema.TaggedErrorClass<SdkCustomerNotFoundError>()(
-  "SdkCustomerNotFoundError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** SDK customer already identified */
-export class SdkCustomerAlreadyIdentifiedError extends Schema.TaggedErrorClass<SdkCustomerAlreadyIdentifiedError>()(
-  "SdkCustomerAlreadyIdentifiedError",
-  {
-    distinctId: Schema.String,
-  },
-  { httpApiStatus: 409 }
-) {
-  override toString(): string {
-    return `The following customer was already identified: ${this.distinctId}`;
-  }
-}
-
-/** SDK validation error */
-export class SdkValidationError extends Schema.TaggedErrorClass<SdkValidationError>()(
-  "SdkValidationError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
diff --git a/packages/api-spec/src/errors/user.ts b/packages/api-spec/src/errors/user.ts
deleted file mode 100644
index a46727294..000000000
--- a/packages/api-spec/src/errors/user.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic user service error */
-export class UserServiceError extends Schema.TaggedErrorClass<UserServiceError>()(
-  "UserServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
diff --git a/packages/api-spec/src/errors/webhook.ts b/packages/api-spec/src/errors/webhook.ts
deleted file mode 100644
index 87110dc04..000000000
--- a/packages/api-spec/src/errors/webhook.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import { Schema } from "effect";
-
-/** Generic webhook service error */
-export class WebhookServiceError extends Schema.TaggedErrorClass<WebhookServiceError>()(
-  "WebhookServiceError",
-  {
-    cause: Schema.String,
-  },
-  { httpApiStatus: 500 }
-) {}
-
-/** Webhook endpoint not found */
-export class WebhookEndpointNotFoundError extends Schema.TaggedErrorClass<WebhookEndpointNotFoundError>()(
-  "WebhookEndpointNotFoundError",
-  {
-    endpointId: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** Webhook delivery not found */
-export class WebhookDeliveryNotFoundError extends Schema.TaggedErrorClass<WebhookDeliveryNotFoundError>()(
-  "WebhookDeliveryNotFoundError",
-  {
-    deliveryId: Schema.String,
-  },
-  { httpApiStatus: 404 }
-) {}
-
-/** Webhook validation error */
-export class WebhookValidationError extends Schema.TaggedErrorClass<WebhookValidationError>()(
-  "WebhookValidationError",
-  {
-    message: Schema.String,
-  },
-  { httpApiStatus: 400 }
-) {}
diff --git a/packages/api-spec/src/event-capture.ts b/packages/api-spec/src/event-capture.ts
deleted file mode 100644
index 1ad1012db..000000000
--- a/packages/api-spec/src/event-capture.ts
+++ /dev/null
@@ -1,184 +0,0 @@
-import { Schema } from "effect";
-import { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
-
-const CaptureErrorResponseFields = {
-  error: Schema.NonEmptyString,
-};
-
-// export { CaptureAcceptedResponse, CaptureBatchRequest, CaptureErrorCode, CaptureErrorResponse };
-// export { CaptureEvent, CaptureSdkRequestMetadata };
-export type EventPropertiesFieldPrimitive = string | number | boolean | null;
-export type EventPropertiesField =
-  | EventPropertiesFieldPrimitive
-  | ReadonlyArray<EventPropertiesField>
-  | {
-      readonly [key: string]: EventPropertiesField;
-    };
-
-export const EventPropertiesField: Schema.Codec<EventPropertiesField> = Schema.Union([
-  Schema.String,
-  Schema.Finite,
-  Schema.Boolean,
-  Schema.Null,
-  Schema.Array(
-    Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesField),
-  ),
-  Schema.Record(
-    Schema.String,
-    Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesField),
-  ),
-]);
-export const EventPropertiesSchema = Schema.Record(Schema.String, EventPropertiesField);
-
-
-export type EventContextFieldPrimitive = string | number | boolean | null;
-export type EventContextField =
-  | EventContextFieldPrimitive
-  | ReadonlyArray<EventContextField>
-  | {
-      readonly [key: string]: EventContextField;
-    };
-export const EventContextField: Schema.Codec<EventContextField> = Schema.Union([
-  Schema.String,
-  Schema.Finite,
-  Schema.Boolean,
-  Schema.Null,
-  Schema.Array(
-    Schema.suspend((): Schema.Codec<EventContextField> => EventContextField),
-  ),
-  Schema.Record(
-    Schema.String,
-    Schema.suspend((): Schema.Codec<EventContextField> => EventContextField),
-  ),
-]);
-export const EventContextSchema = Schema.Record(Schema.String, EventContextField);
-
-export const CaptureEvent = Schema.Struct({
-  uuid: Schema.NonEmptyString,
-  event: Schema.NonEmptyString,
-  context: EventContextSchema,
-  properties: EventPropertiesSchema,
-  distinct_id: Schema.NonEmptyString,
-  session_id: Schema.optional(Schema.NonEmptyString),
-  timestamp: Schema.optional(Schema.DateValid),
-});
-
-export const CaptureSingleRequest = Schema.Struct({
-  ...CaptureEvent.fields,
-  sent_at: Schema.DateValid,
-  token: Schema.NonEmptyString,
-});
-
-export const CaptureBatchRequest = Schema.Struct({
-  events: Schema.NonEmptyArray(CaptureEvent),
-  sent_at: Schema.DateValid,
-  token: Schema.NonEmptyString,
-});
-
-export class CaptureAcceptedResponse extends Schema.Class<CaptureAcceptedResponse>(
-  "CaptureAcceptedResponse",
-)({
-  accepted: Schema.Int,
-  rejected: Schema.Int,
-}) {
-  httpApiStatus = 202;
-}
-// export const CaptureAcceptedApiResponse = CaptureAcceptedResponse.pipe(HttpApiSchema.status(202));
-
-export class CaptureInvalidRequestError extends Schema.TaggedErrorClass<CaptureInvalidRequestError>()(
-  "CaptureInvalidRequestError",
-  {
-    ...CaptureErrorResponseFields,
-    code: Schema.Literal("invalid_request"),
-  },
-  { httpApiStatus: 400 },
-) {}
-
-export class CaptureUnauthorizedError extends Schema.TaggedErrorClass<CaptureUnauthorizedError>()(
-  "CaptureUnauthorizedError",
-  {
-    ...CaptureErrorResponseFields,
-    code: Schema.Literal("unauthorized"),
-  },
-  { httpApiStatus: 401 },
-) {}
-
-export class CapturePayloadTooLargeError extends Schema.TaggedErrorClass<CapturePayloadTooLargeError>()(
-  "CapturePayloadTooLargeError",
-  {
-    ...CaptureErrorResponseFields,
-    code: Schema.Literal("payload_too_large"),
-  },
-  { httpApiStatus: 413 },
-) {}
-
-export class CaptureRateLimitedError extends Schema.TaggedErrorClass<CaptureRateLimitedError>()(
-  "CaptureRateLimitedError",
-  {
-    ...CaptureErrorResponseFields,
-    code: Schema.Literal("rate_limited"),
-    retry_after_ms: Schema.optional(Schema.Int),
-  },
-  { httpApiStatus: 429 },
-) {}
-
-export class CaptureDependencyUnavailableError extends Schema.TaggedErrorClass<CaptureDependencyUnavailableError>()(
-  "CaptureDependencyUnavailableError",
-  {
-    ...CaptureErrorResponseFields,
-    code: Schema.Literal("dependency_unavailable"),
-  },
-  { httpApiStatus: 503 },
-) {}
-
-export class CaptureInternalServerError extends Schema.TaggedErrorClass<CaptureInternalServerError>()(
-  "CaptureInternalServerError",
-  {
-    ...CaptureErrorResponseFields,
-    code: Schema.Literal("internal_error"),
-  },
-  { httpApiStatus: 500 },
-) {}
-
-export type CaptureErrorResponse =
-  | CaptureInvalidRequestError
-  | CaptureUnauthorizedError
-  | CapturePayloadTooLargeError
-  | CaptureRateLimitedError
-  | CaptureDependencyUnavailableError
-  | CaptureInternalServerError;
-
-export type CaptureErrorCode = CaptureErrorResponse["code"];
-
-
-export const EventCaptureApi = HttpApi.make("EventCaptureApi").add(
-  HttpApiGroup.make("event_capture")
-    .add(
-      HttpApiEndpoint.post("capture", "/capture", {
-        error: [
-          CaptureInvalidRequestError,
-          CaptureUnauthorizedError,
-          CapturePayloadTooLargeError,
-          CaptureRateLimitedError,
-          CaptureDependencyUnavailableError,
-          CaptureInternalServerError,
-        ],
-        payload: CaptureSingleRequest,
-        success: CaptureAcceptedResponse,
-      }),
-    )
-    .add(
-      HttpApiEndpoint.post("batch", "/batch", {
-        error: [
-          CaptureInvalidRequestError,
-          CaptureUnauthorizedError,
-          CapturePayloadTooLargeError,
-          CaptureRateLimitedError,
-          CaptureDependencyUnavailableError,
-          CaptureInternalServerError,
-        ],
-        payload: CaptureBatchRequest,
-        success: CaptureAcceptedResponse,
-      }),
-    ),
-);
diff --git a/packages/api-spec/src/index.ts b/packages/api-spec/src/index.ts
deleted file mode 100644
index 2c8e8fe51..000000000
--- a/packages/api-spec/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-export * from "./api";
-export * from "./auth";
-export * from "./changeset";
-export * from "./middlewares";
-export * from "./schema";
diff --git a/packages/api-spec/src/middlewares.ts b/packages/api-spec/src/middlewares.ts
deleted file mode 100644
index a3ffdc7ef..000000000
--- a/packages/api-spec/src/middlewares.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-import { Schema } from "effect";
-import { HttpApiMiddleware, HttpApiSecurity } from "effect/unstable/httpapi";
-
-import { ApiAuthSession } from "./auth";
-import { AuthenticationError, NotAuthenticatedError } from "./errors";
-
-export class AuthMiddleware extends HttpApiMiddleware.Service<AuthMiddleware, { provides: ApiAuthSession }>()(
-  "Http/AuthenticationMiddleware",
-  {
-    // Optionally define the error schema for the middleware
-    error: Schema.Union([AuthenticationError, NotAuthenticatedError]),
-    security: {
-      apiKey: HttpApiSecurity.apiKey({
-        in: "header",
-        key: "x-api-key",
-      }),
-      betterAuthCookie: HttpApiSecurity.apiKey({
-        in: "cookie",
-        key: "__Secure-better-auth.session_token",
-      }),
-      publishableKey: HttpApiSecurity.apiKey({
-        in: "header",
-        key: "x-publishable-key",
-      }),
-      secretKey: HttpApiSecurity.apiKey({
-        in: "header",
-        key: "x-secret-key",
-      }),
-    },
-  }
-) {}
diff --git a/packages/api-spec/src/schema.ts b/packages/api-spec/src/schema.ts
deleted file mode 100644
index c43cc6b65..000000000
--- a/packages/api-spec/src/schema.ts
+++ /dev/null
@@ -1,536 +0,0 @@
-import { Schema } from "effect";
-
-import { ChangesetSchema } from "./changeset";
-
-export const PublishableKeyAuthHeaders = Schema.Struct({
-  "x-distinct-id": Schema.String,
-  "x-publishable-key": Schema.String,
-});
-
-export const ApiKeyAuthHeaders = Schema.Struct({
-  "x-api-key": Schema.String,
-});
-
-export const SecretKeyAuthHeaders = Schema.Struct({
-  "x-secret-key": Schema.String,
-});
-
-// ========================================================
-// Auth
-// ========================================================
-
-const SessionAuthMethods = Schema.Union([
-  Schema.Literal("api-key"),
-  Schema.Literal("publishable-key"),
-  Schema.Literal("secret-key"),
-]);
-
-export const Session = Schema.Struct({
-  method: SessionAuthMethods,
-  name: Schema.String,
-  organizations: Schema.Array(
-    Schema.Struct({
-      id: Schema.String,
-      name: Schema.String,
-      slug: Schema.String,
-    })
-  ),
-  projects: Schema.Array(
-    Schema.Struct({
-      id: Schema.String,
-      name: Schema.String,
-      organizationId: Schema.String,
-      slug: Schema.String,
-    })
-  ),
-});
-
-// ========================================================
-// API Keys
-// ========================================================
-
-export class ApiKey extends Schema.Class<ApiKey>("ApiKey")({
-  end: Schema.String,
-  id: Schema.String,
-  isPublic: Schema.Boolean,
-  name: Schema.String,
-  prefix: Schema.String,
-  projectId: Schema.String,
-  rawKey: Schema.optional(Schema.String),
-}) {}
-
-export class ApiKeyWithRawKey extends Schema.Class<ApiKeyWithRawKey>(
-  "ApiKeyWithRawKey"
-)({
-  end: Schema.String,
-  id: Schema.String,
-  isPublic: Schema.Boolean,
-  name: Schema.String,
-  prefix: Schema.String,
-  projectId: Schema.String,
-  rawKey: Schema.String,
-}) {}
-
-export class CreateSecretKeyBody extends Schema.Class<CreateSecretKeyBody>(
-  "CreateSecretKeyBody"
-)({
-  name: Schema.String,
-  projectId: Schema.String,
-}) {}
-
-export const ApiKeyIdParam = Schema.String;
-
-// ========================================================
-// Customers
-// ========================================================
-
-export class Customer extends Schema.Class<Customer>("Customer")({
-  customerId: Schema.String,
-  distinctId: Schema.String,
-  email: Schema.NullOr(Schema.String),
-  name: Schema.NullOr(Schema.String),
-}) {}
-
-export class CreateCustomerBody extends Schema.Class<CreateCustomerBody>(
-  "CreateCustomerBody"
-)({
-  distinctId: Schema.String,
-  email: Schema.optional(Schema.String),
-  name: Schema.optional(Schema.String),
-}) {}
-
-export const CustomerIdParam = Schema.String;
-
-export const DistinctIdParam = Schema.String;
-
-// ========================================================
-// Organizations
-// ========================================================
-
-export class CreateOrganizationBody extends Schema.Class<CreateOrganizationBody>(
-  "CreateOrganizationBody"
-)({
-  name: Schema.String,
-}) {}
-
-export class Organization extends Schema.Class<Organization>("Organization")({
-  id: Schema.String,
-  name: Schema.String,
-  slug: Schema.String,
-}) {}
-
-// ========================================================
-// Perks
-// ========================================================
-
-export class Perk extends Schema.Class<Perk>("Perk")({
-  id: Schema.String,
-  name: Schema.String,
-  projectId: Schema.String,
-  slug: Schema.String,
-}) {}
-
-// ========================================================
-// Paywall Locations
-// ========================================================
-
-export class PaywallLocation extends Schema.Class<PaywallLocation>("PaywallLocation")({
-  description: Schema.NullOr(Schema.String),
-  id: Schema.String,
-  name: Schema.String,
-  projectId: Schema.String,
-  slug: Schema.String,
-}) {}
-
-// ========================================================
-// Products
-// ========================================================
-
-export const ProductType = Schema.Literals([
-  "subscription",
-  "one-time",
-  "one-time-consumable",
-]);
-
-export class Product extends Schema.Class<Product>("Product")({
-  id: Schema.String,
-  name: Schema.String,
-  projectId: Schema.String,
-  slug: Schema.String,
-  type: ProductType,
-}) {}
-
-// ========================================================
-// Product Perks
-// ========================================================
-
-export const ProductIdParam = Schema.String;
-
-export class ProductPerk extends Schema.Class<ProductPerk>("ProductPerk")({
-  id: Schema.String,
-  perkId: Schema.String,
-  productId: Schema.String,
-}) {}
-
-// ========================================================
-// Payment Provider Configurations
-// ========================================================
-
-export class PaymentProviderConfiguration extends Schema.Class<PaymentProviderConfiguration>(
-  "PaymentProviderConfiguration"
-)({
-  enabled: Schema.Boolean,
-  id: Schema.String,
-  name: Schema.String,
-  projectId: Schema.String,
-  providerId: Schema.String,
-}) {}
-
-// ========================================================
-// Payment Provider Products
-// ========================================================
-
-export class PaymentProviderProduct extends Schema.Class<PaymentProviderProduct>(
-  "PaymentProviderProduct"
-)({
-  configuration: Schema.Record(Schema.String, Schema.Unknown),
-  id: Schema.String,
-  paymentProviderConfigurationId: Schema.String,
-  productId: Schema.String,
-  providerId: Schema.String,
-}) {}
-
-// ========================================================
-// Changesets
-// ========================================================
-
-export class DeployChangesetBody extends Schema.Class<DeployChangesetBody>(
-  "DeployChangesetBody"
-)({
-  changeset: ChangesetSchema,
-}) {}
-
-export class DeployChangesetResponse extends Schema.Class<DeployChangesetResponse>(
-  "DeployChangesetResponse"
-)({
-  deploymentId: Schema.String,
-}) {}
-
-// ========================================================
-// Projects
-// ========================================================
-
-export class CreateProjectBody extends Schema.Class<CreateProjectBody>(
-  "CreateProjectBody"
-)({
-  name: Schema.String,
-  organizationId: Schema.String,
-}) {}
-
-export class Project extends Schema.Class<Project>("Project")({
-  id: Schema.String,
-  name: Schema.String,
-  slug: Schema.String,
-}) {}
-
-export const OrganizationIdParam = Schema.String;
-
-// ========================================================
-// SDK
-// ========================================================
-
-const CommonSdkHeaders = Schema.Struct({
-  "x-client-bundle-id": Schema.String,
-  "x-client-locale": Schema.optional(Schema.String),
-  "x-client-version": Schema.optional(Schema.String),
-  "x-is-backgrounded": Schema.Literal("false"),
-  "x-is-debug-build": Schema.Literals(["true", "false"]),
-  "x-nonce": Schema.optional(Schema.String),
-  "x-observer-mode": Schema.Literals(["true", "false"]),
-  "x-platform": Schema.String,
-  "x-platform-brand": Schema.optional(Schema.String),
-  "x-platform-device": Schema.optional(Schema.String),
-  "x-platform-flavor": Schema.Literals(["native", "browser"]),
-  "x-platform-flavor-version": Schema.optional(Schema.String),
-  "x-platform-version": Schema.optional(Schema.String),
-  "x-preferred-locales": Schema.optional(Schema.String),
-  "x-sdk": Schema.Literals(["react-native", "web"]),
-  "x-sdk-version": Schema.String,
-  "x-storefront": Schema.optional(Schema.String),
-});
-
-export const SdkHeaders = Schema.Struct({
-  ...PublishableKeyAuthHeaders.fields,
-  ...CommonSdkHeaders.fields,
-});
-
-const SdkTraitValue = Schema.Union([
-  Schema.String,
-  Schema.Number,
-  Schema.Boolean,
-  Schema.Null,
-]);
-
-const SdkTraits = Schema.Record(Schema.String, SdkTraitValue);
-
-// SDK Identify
-export class SdkIdentifyBody extends Schema.Class<SdkIdentifyBody>(
-  "SdkIdentifyBody"
-)({
-  distinctId: Schema.String,
-  email: Schema.optional(Schema.String),
-  name: Schema.optional(Schema.String),
-  traits: Schema.optional(SdkTraits),
-}) {}
-
-// SDK Sync Customer Attributes
-export class SdkSyncCustomerAttributesBody extends Schema.Class<SdkSyncCustomerAttributesBody>(
-  "SdkSyncCustomerAttributesBody"
-)({
-  email: Schema.optional(Schema.String),
-  name: Schema.optional(Schema.String),
-  traits: Schema.optional(SdkTraits),
-}) {}
-
-export const SdkSyncTransactionBody = Schema.Struct({
-  platform: Schema.Literals(["ios", "android"]),
-  productId: Schema.String,
-  purchaseDate: Schema.Number,
-  purchaseToken: Schema.optional(Schema.String),
-  quantity: Schema.Number,
-  receipt: Schema.optional(Schema.String),
-  transactionId: Schema.String,
-});
-
-export class SdkSyncTransactionResponse extends Schema.Class<SdkSyncTransactionResponse>(
-  "SdkSyncTransactionResponse"
-)({
-  accepted: Schema.Boolean,
-}) {}
-
-export class SdkCustomer extends Schema.Class<SdkCustomer>("SdkCustomer")({
-  customerId: Schema.String,
-  distinctId: Schema.String,
-  email: Schema.NullOr(Schema.String),
-  name: Schema.NullOr(Schema.String),
-}) {}
-
-// ========================================================
-// User
-// ========================================================
-
-export class User extends Schema.Class<User>("User")({
-  createdAt: Schema.Date,
-  email: Schema.String,
-  emailVerified: Schema.Boolean,
-  id: Schema.String,
-  image: Schema.NullOr(Schema.String),
-  name: Schema.String,
-  organizations: Schema.Array(
-    Schema.Struct({
-      id: Schema.String,
-      logo: Schema.NullOr(Schema.String),
-      name: Schema.String,
-      slug: Schema.String,
-    })
-  ),
-  projects: Schema.Array(
-    Schema.Struct({
-      id: Schema.String,
-      logo: Schema.NullOr(Schema.String),
-      name: Schema.String,
-      organizationId: Schema.String,
-      slug: Schema.String,
-    })
-  ),
-  updatedAt: Schema.Date,
-}) {}
-
-// ========================================================
-// Webhooks
-// ========================================================
-
-export const WebhookEventType = Schema.Literals([
-  "customer.created",
-  "customer.updated",
-  "customer.deleted",
-  "subscription.created",
-  "subscription.renewed",
-  "subscription.cancelled",
-  "subscription.expired",
-  "purchase.completed",
-  "purchase.refunded",
-]);
-
-export const WebhookEndpointStatus = Schema.Literals(["active", "disabled", "failed"]);
-
-export const WebhookDeliveryStatus = Schema.Literals([
-  "pending",
-  "in_progress",
-  "succeeded",
-  "failed",
-  "exhausted",
-]);
-
-export class WebhookEndpoint extends Schema.Class<WebhookEndpoint>(
-  "WebhookEndpoint"
-)({
-  consecutiveFailures: Schema.Number,
-  createdAt: Schema.NullOr(Schema.Date),
-  description: Schema.NullOr(Schema.String),
-  events: Schema.Array(WebhookEventType),
-  id: Schema.String,
-  lastSuccessAt: Schema.NullOr(Schema.Date),
-  name: Schema.String,
-  projectId: Schema.String,
-  secret: Schema.String,
-  status: WebhookEndpointStatus,
-  url: Schema.String,
-}) {}
-
-export class CreateWebhookEndpointBody extends Schema.Class<CreateWebhookEndpointBody>(
-  "CreateWebhookEndpointBody"
-)({
-  description: Schema.optional(Schema.String),
-  events: Schema.Array(Schema.String),
-  name: Schema.String,
-  url: Schema.String,
-}) {}
-
-export class UpdateWebhookEndpointBody extends Schema.Class<UpdateWebhookEndpointBody>(
-  "UpdateWebhookEndpointBody"
-)({
-  description: Schema.optional(Schema.NullOr(Schema.String)),
-  events: Schema.optional(Schema.Array(Schema.String)),
-  name: Schema.optional(Schema.String),
-  status: Schema.optional(Schema.Literals(["active", "disabled"])),
-  url: Schema.optional(Schema.String),
-}) {}
-
-export const WebhookEndpointIdParam = Schema.String;
-
-export class WebhookDelivery extends Schema.Class<WebhookDelivery>(
-  "WebhookDelivery"
-)({
-  attemptCount: Schema.Number,
-  completedAt: Schema.NullOr(Schema.Date),
-  createdAt: Schema.NullOr(Schema.Date),
-  eventOccurredAt: Schema.Date,
-  eventType: Schema.String,
-  id: Schema.String,
-  maxAttempts: Schema.Number,
-  nextAttemptAt: Schema.NullOr(Schema.Date),
-  payload: Schema.Unknown,
-  projectId: Schema.String,
-  status: WebhookDeliveryStatus,
-  webhookEndpointId: Schema.String,
-}) {}
-
-export class WebhookDeliveryAttempt extends Schema.Class<WebhookDeliveryAttempt>(
-  "WebhookDeliveryAttempt"
-)({
-  attemptNumber: Schema.Number,
-  createdAt: Schema.NullOr(Schema.Date),
-  durationMs: Schema.NullOr(Schema.Number),
-  errorMessage: Schema.NullOr(Schema.String),
-  id: Schema.String,
-  responseBody: Schema.NullOr(Schema.String),
-  statusCode: Schema.NullOr(Schema.Number),
-  succeeded: Schema.Boolean,
-}) {}
-
-export class WebhookDeliveryWithAttempts extends Schema.Class<WebhookDeliveryWithAttempts>(
-  "WebhookDeliveryWithAttempts"
-)({
-  attemptCount: Schema.Number,
-  attempts: Schema.Array(WebhookDeliveryAttempt),
-  completedAt: Schema.NullOr(Schema.Date),
-  createdAt: Schema.NullOr(Schema.Date),
-  eventOccurredAt: Schema.Date,
-  eventType: Schema.String,
-  id: Schema.String,
-  maxAttempts: Schema.Number,
-  nextAttemptAt: Schema.NullOr(Schema.Date),
-  payload: Schema.Unknown,
-  projectId: Schema.String,
-  status: WebhookDeliveryStatus,
-  webhookEndpointId: Schema.String,
-}) {}
-
-export const WebhookDeliveryIdParam = Schema.String;
-
-// ========================================================
-// Feature Flags (SDK)
-// ========================================================
-
-export class EvaluateFeatureFlagsBody extends Schema.Class<EvaluateFeatureFlagsBody>(
-  "EvaluateFeatureFlagsBody"
-)({
-  flagKeys: Schema.optional(Schema.Array(Schema.String)),
-}) {}
-
-export class SdkFeatureFlagResult extends Schema.Class<SdkFeatureFlagResult>(
-  "SdkFeatureFlagResult"
-)({
-  enabled: Schema.Boolean,
-  key: Schema.String,
-  payload: Schema.NullOr(Schema.Unknown),
-  variantKey: Schema.NullOr(Schema.String),
-}) {}
-
-export class SdkFeatureFlagsResponse extends Schema.Class<SdkFeatureFlagsResponse>(
-  "SdkFeatureFlagsResponse"
-)({
-  flags: Schema.Array(SdkFeatureFlagResult),
-}) {}
-
-// ========================================================
-// Paywall Resolution (SDK)
-// ========================================================
-
-export class SdkResolvePaywallBody extends Schema.Class<SdkResolvePaywallBody>(
-  "SdkResolvePaywallBody"
-)({
-  locationSlug: Schema.String,
-}) {}
-
-const SdkResolvedPaywallShowingType = Schema.Literals([
-  "paywall_release",
-  "feature_flag",
-]);
-
-const SdkResolvedPaywallShowingPaywall = Schema.Struct({
-  id: Schema.String,
-  name: Schema.String,
-  slug: Schema.String,
-});
-
-const SdkResolvedPaywallShowingPaywallRelease = Schema.Struct({
-  htmlUrl: Schema.String,
-  publishedAt: Schema.NullOr(Schema.Date),
-  releaseId: Schema.String,
-  version: Schema.Number,
-});
-
-export class SdkResolvedPaywallShowing extends Schema.Class<SdkResolvedPaywallShowing>(
-  "SdkResolvedPaywallShowing"
-)({
-  id: Schema.String,
-  paywall: Schema.NullOr(SdkResolvedPaywallShowingPaywall),
-  paywallId: Schema.NullOr(Schema.String),
-  paywallRelease: Schema.NullOr(SdkResolvedPaywallShowingPaywallRelease),
-  paywallReleaseId: Schema.NullOr(Schema.String),
-  startedAt: Schema.Date,
-  type: SdkResolvedPaywallShowingType,
-}) {}
-
-export class SdkResolvedPaywall extends Schema.Class<SdkResolvedPaywall>(
-  "SdkResolvedPaywall"
-)({
-  location: Schema.Struct({
-    id: Schema.String,
-    name: Schema.String,
-    slug: Schema.String,
-  }),
-  showing: SdkResolvedPaywallShowing,
-}) {}
diff --git a/packages/generated-clients/openapi/preview/core.json b/packages/generated-clients/openapi/preview/core.json
new file mode 100644
index 000000000..e8aefec47
--- /dev/null
+++ b/packages/generated-clients/openapi/preview/core.json
@@ -0,0 +1,8086 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Api",
+    "version": "0.0.1"
+  },
+  "paths": {
+    "/api/v1/auth/session": {
+      "get": {
+        "tags": [
+          "auth"
+        ],
+        "operationId": "auth.session",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "method": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "api-key"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "publishable-key"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "secret-key"
+                          ]
+                        }
+                      ]
+                    },
+                    "name": {
+                      "type": "string"
+                    },
+                    "organizations": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "name": {
+                            "type": "string"
+                          },
+                          "slug": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "id",
+                          "name",
+                          "slug"
+                        ],
+                        "additionalProperties": false
+                      }
+                    },
+                    "projects": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "name": {
+                            "type": "string"
+                          },
+                          "organizationId": {
+                            "type": "string"
+                          },
+                          "slug": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "id",
+                          "name",
+                          "organizationId",
+                          "slug"
+                        ],
+                        "additionalProperties": false
+                      }
+                    }
+                  },
+                  "required": [
+                    "method",
+                    "name",
+                    "organizations",
+                    "projects"
+                  ],
+                  "additionalProperties": false
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/NotAuthenticatedError"
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys": {
+      "post": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.createSecretKey",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyWithRawKey"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateSecretKeyBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.listApiKeys",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/ApiKey"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}": {
+      "get": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.getApiKeyById",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "ApiKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKey"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.deleteApiKey",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "<No Content>"
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}/rotate": {
+      "post": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.rotateSecretKey",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyWithRawKey"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/customers": {
+      "post": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.createCustomer",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Customer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Customer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CustomerInvalidAnonymousIdError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerInvalidAnonymousIdError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateCustomerBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.listCustomers",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Customer"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/customers/{customerId}": {
+      "get": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.getCustomerById",
+        "parameters": [
+          {
+            "name": "customerId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Customer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Customer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "CustomerNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CustomerNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/customers/by-distinct-id/{distinctId}": {
+      "get": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.byDistinctId",
+        "parameters": [
+          {
+            "name": "distinctId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Customer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Customer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "CustomerNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CustomerNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/organizations": {
+      "post": {
+        "tags": [
+          "organizations"
+        ],
+        "operationId": "organizations.createOrganization",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Organization",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Organization"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "OrganizationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/OrganizationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateOrganizationBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/perks": {
+      "get": {
+        "tags": [
+          "perks"
+        ],
+        "operationId": "perks.listPerks",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Perk"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PerkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/paywall-locations": {
+      "get": {
+        "tags": [
+          "paywall_locations"
+        ],
+        "operationId": "paywall_locations.listPaywallLocations",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaywallLocation"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PaywallLocationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PaywallLocationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/projects": {
+      "post": {
+        "tags": [
+          "projects"
+        ],
+        "operationId": "projects.createProject",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Project",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Project"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/ProjectServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateProjectBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/projects/{organizationId}": {
+      "get": {
+        "tags": [
+          "projects"
+        ],
+        "operationId": "projects.listProjects",
+        "parameters": [
+          {
+            "name": "organizationId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Project"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProjectServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/products": {
+      "get": {
+        "tags": [
+          "products"
+        ],
+        "operationId": "products.listProducts",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Product"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProductServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/product-perks/by-product-id/{productId}": {
+      "get": {
+        "tags": [
+          "product_perks"
+        ],
+        "operationId": "product_perks.listProductPerksByProductId",
+        "parameters": [
+          {
+            "name": "productId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/ProductPerk"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "ProductPerkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProductPerkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ProductPerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProductPerkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/get-customer": {
+      "get": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.getCustomer",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkCustomer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "SdkCustomerNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomerNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/identify": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.identify",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkCustomer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "SdkCustomerAlreadyIdentifiedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomerAlreadyIdentifiedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkIdentifyBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/sync-customer-attributes": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.syncCustomerAttributes",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkCustomer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkSyncCustomerAttributesBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/sync-transaction": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.syncTransaction",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkSyncTransactionResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkSyncTransactionResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "platform": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "ios"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "android"
+                        ]
+                      }
+                    ]
+                  },
+                  "productId": {
+                    "type": "string"
+                  },
+                  "purchaseDate": {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  },
+                  "purchaseToken": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "quantity": {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  },
+                  "receipt": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "transactionId": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "platform",
+                  "productId",
+                  "purchaseDate",
+                  "quantity",
+                  "transactionId"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/evaluate-flags": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.evaluateFeatureFlags",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkFeatureFlagsResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkFeatureFlagsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/EvaluateFeatureFlagsBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/resolve-paywall": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.resolvePaywall",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkResolvedPaywall"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkResolvePaywallBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/users/current": {
+      "get": {
+        "tags": [
+          "users"
+        ],
+        "operationId": "users.getUser",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "User",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | UserServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/UserServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-configurations": {
+      "get": {
+        "tags": [
+          "payment_provider_configurations"
+        ],
+        "operationId": "payment_provider_configurations.listPaymentProviderConfigurations",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaymentProviderConfiguration"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PaymentProviderConfigurationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PaymentProviderConfigurationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-products": {
+      "get": {
+        "tags": [
+          "payment_provider_products"
+        ],
+        "operationId": "payment_provider_products.listPaymentProviderProducts",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaymentProviderProduct"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PaymentProviderProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PaymentProviderProductServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/changesets/deploy": {
+      "post": {
+        "tags": [
+          "changesets"
+        ],
+        "operationId": "changesets.deployChangeset",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "DeployChangesetResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeployChangesetResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | ChangesetDeploymentServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/ChangesetDeploymentServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/DeployChangesetBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.createWebhookEndpoint",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateWebhookEndpointBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.listWebhookEndpoints",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/WebhookEndpoint"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.getWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "patch": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.updateWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateWebhookEndpointBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "delete": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.deleteWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "<No Content>"
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/rotate-secret": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.rotateWebhookSecret",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/test": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.testWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDelivery"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.listWebhookDeliveries",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/WebhookDelivery"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.getWebhookDelivery",
+        "parameters": [
+          {
+            "name": "deliveryId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookDeliveryWithAttempts",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDeliveryWithAttempts"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDeliveryNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}/retry": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.retryWebhookDelivery",
+        "parameters": [
+          {
+            "name": "deliveryId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDelivery"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDeliveryNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "ActionForbiddenError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ActionForbiddenError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "AuthenticationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "AuthenticationError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "NotAuthenticatedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "NotAuthenticatedError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "effect_HttpApiSchemaError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "HttpApiSchemaError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CreateSecretKeyBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "projectId"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKeyWithRawKey": {
+        "type": "object",
+        "properties": {
+          "end": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "isPublic": {
+            "type": "boolean"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prefix": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "rawKey": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "end",
+          "id",
+          "isPublic",
+          "name",
+          "prefix",
+          "projectId",
+          "rawKey"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKeyServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ApiKeyServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKey": {
+        "type": "object",
+        "properties": {
+          "end": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "isPublic": {
+            "type": "boolean"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prefix": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "rawKey": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "end",
+          "id",
+          "isPublic",
+          "name",
+          "prefix",
+          "projectId"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKeyNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ApiKeyNotFoundError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CreateCustomerBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "Customer": {
+        "type": "object",
+        "properties": {
+          "customerId": {
+            "type": "string"
+          },
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "customerId",
+          "distinctId",
+          "email",
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "CustomerInvalidAnonymousIdError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CustomerInvalidAnonymousIdError"
+            ]
+          },
+          "id": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "id"
+        ],
+        "additionalProperties": false
+      },
+      "CustomerServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CustomerServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CustomerNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CustomerNotFoundError"
+            ]
+          },
+          "id": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "id"
+        ],
+        "additionalProperties": false
+      },
+      "CreateOrganizationBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "Organization": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "OrganizationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "OrganizationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Perk": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "projectId",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "PerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PerkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaywallLocation": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "description",
+          "id",
+          "name",
+          "projectId",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "PaywallLocationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PaywallLocationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CreateProjectBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "organizationId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "organizationId"
+        ],
+        "additionalProperties": false
+      },
+      "Project": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "ProjectServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProjectServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Product": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          },
+          "type": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "subscription"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "one-time"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "one-time-consumable"
+                ]
+              }
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "projectId",
+          "slug",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "ProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProductServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ProductPerk": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "perkId": {
+            "type": "string"
+          },
+          "productId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "perkId",
+          "productId"
+        ],
+        "additionalProperties": false
+      },
+      "ProductPerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProductPerkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ProductPerkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProductPerkValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCustomer": {
+        "type": "object",
+        "properties": {
+          "customerId": {
+            "type": "string"
+          },
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "customerId",
+          "distinctId",
+          "email",
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "SdkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCustomerNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkCustomerNotFoundError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkIdentifyBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "type": "number"
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "NaN"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "Infinity"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "-Infinity"
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCustomerAlreadyIdentifiedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkCustomerAlreadyIdentifiedError"
+            ]
+          },
+          "distinctId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSyncCustomerAttributesBody": {
+        "type": "object",
+        "properties": {
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "type": "number"
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "NaN"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "Infinity"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "-Infinity"
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkSyncTransactionResponse": {
+        "type": "object",
+        "properties": {
+          "accepted": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "accepted"
+        ],
+        "additionalProperties": false
+      },
+      "EvaluateFeatureFlagsBody": {
+        "type": "object",
+        "properties": {
+          "flagKeys": {
+            "anyOf": [
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagResult": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean"
+          },
+          "key": {
+            "type": "string"
+          },
+          "payload": {
+            "anyOf": [
+              {
+                "type": "null"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "variantKey": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "enabled",
+          "key",
+          "payload",
+          "variantKey"
+        ],
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagsResponse": {
+        "type": "object",
+        "properties": {
+          "flags": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SdkFeatureFlagResult"
+            }
+          }
+        },
+        "required": [
+          "flags"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvePaywallBody": {
+        "type": "object",
+        "properties": {
+          "locationSlug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "locationSlug"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywallShowing": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "paywall": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "id": {
+                    "type": "string"
+                  },
+                  "name": {
+                    "type": "string"
+                  },
+                  "slug": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "id",
+                  "name",
+                  "slug"
+                ],
+                "additionalProperties": false
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallRelease": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "htmlUrl": {
+                    "type": "string"
+                  },
+                  "publishedAt": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "releaseId": {
+                    "type": "string"
+                  },
+                  "version": {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "htmlUrl",
+                  "publishedAt",
+                  "releaseId",
+                  "version"
+                ],
+                "additionalProperties": false
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallReleaseId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "startedAt": {
+            "type": "string"
+          },
+          "type": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "paywall_release"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "feature_flag"
+                ]
+              }
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "paywall",
+          "paywallId",
+          "paywallRelease",
+          "paywallReleaseId",
+          "startedAt",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywall": {
+        "type": "object",
+        "properties": {
+          "location": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "name": {
+                "type": "string"
+              },
+              "slug": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "id",
+              "name",
+              "slug"
+            ],
+            "additionalProperties": false
+          },
+          "showing": {
+            "$ref": "#/components/schemas/SdkResolvedPaywallShowing"
+          }
+        },
+        "required": [
+          "location",
+          "showing"
+        ],
+        "additionalProperties": false
+      },
+      "User": {
+        "type": "object",
+        "properties": {
+          "createdAt": {
+            "type": "string"
+          },
+          "email": {
+            "type": "string"
+          },
+          "emailVerified": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "image": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "organizations": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "logo": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "slug": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "logo",
+                "name",
+                "slug"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "projects": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "logo": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "organizationId": {
+                  "type": "string"
+                },
+                "slug": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "logo",
+                "name",
+                "organizationId",
+                "slug"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "updatedAt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "createdAt",
+          "email",
+          "emailVerified",
+          "id",
+          "image",
+          "name",
+          "organizations",
+          "projects",
+          "updatedAt"
+        ],
+        "additionalProperties": false
+      },
+      "UserServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "UserServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderConfiguration": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "providerId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "enabled",
+          "id",
+          "name",
+          "projectId",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderConfigurationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PaymentProviderConfigurationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderProduct": {
+        "type": "object",
+        "properties": {
+          "configuration": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "null"
+            }
+          },
+          "id": {
+            "type": "string"
+          },
+          "paymentProviderConfigurationId": {
+            "type": "string"
+          },
+          "productId": {
+            "type": "string"
+          },
+          "providerId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "configuration",
+          "id",
+          "paymentProviderConfigurationId",
+          "productId",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PaymentProviderProductServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "DeployChangesetBody": {
+        "type": "object",
+        "properties": {
+          "changeset": {
+            "type": "object",
+            "properties": {
+              "changes": {
+                "type": "array",
+                "items": {
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-paywall-location"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "description": {
+                              "anyOf": [
+                                {
+                                  "anyOf": [
+                                    {
+                                      "type": "string"
+                                    },
+                                    {
+                                      "type": "null"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-paywall-location"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "description": {
+                              "anyOf": [
+                                {
+                                  "anyOf": [
+                                    {
+                                      "type": "string"
+                                    },
+                                    {
+                                      "type": "null"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "archive-paywall-location"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-product-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "perkSlug": {
+                              "type": "string"
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "perkSlug",
+                            "productSlug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-product-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "perkSlug": {
+                              "type": "string"
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "perkSlug",
+                            "productSlug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-payment-provider-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "configuration": {
+                              "type": "object",
+                              "additionalProperties": {
+                                "type": "null"
+                              }
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            },
+                            "providerId": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "configuration",
+                            "productSlug",
+                            "providerId"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-payment-provider-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "configuration": {
+                              "type": "object",
+                              "additionalProperties": {
+                                "type": "null"
+                              }
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            },
+                            "providerId": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "configuration",
+                            "productSlug",
+                            "providerId"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-payment-provider-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "productSlug": {
+                              "type": "string"
+                            },
+                            "providerId": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "productSlug",
+                            "providerId"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    }
+                  ]
+                }
+              }
+            },
+            "required": [
+              "changes"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "required": [
+          "changeset"
+        ],
+        "additionalProperties": false
+      },
+      "DeployChangesetResponse": {
+        "type": "object",
+        "properties": {
+          "deploymentId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "deploymentId"
+        ],
+        "additionalProperties": false
+      },
+      "ChangesetDeploymentServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ChangesetDeploymentServiceError"
+            ]
+          },
+          "cause": {
+            "type": "null"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CreateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "name": {
+            "type": "string"
+          },
+          "url": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "events",
+          "name",
+          "url"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookEndpoint": {
+        "type": "object",
+        "properties": {
+          "consecutiveFailures": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "type": "array",
+            "items": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "customer.created"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "customer.updated"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "customer.deleted"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.created"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.renewed"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.cancelled"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.expired"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "purchase.completed"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "purchase.refunded"
+                  ]
+                }
+              ]
+            }
+          },
+          "id": {
+            "type": "string"
+          },
+          "lastSuccessAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "secret": {
+            "type": "string"
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "active"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "disabled"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "failed"
+                ]
+              }
+            ]
+          },
+          "url": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "consecutiveFailures",
+          "createdAt",
+          "description",
+          "events",
+          "id",
+          "lastSuccessAt",
+          "name",
+          "projectId",
+          "secret",
+          "status",
+          "url"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookEndpointNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookEndpointNotFoundError"
+            ]
+          },
+          "endpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "endpointId"
+        ],
+        "additionalProperties": false
+      },
+      "UpdateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "anyOf": [
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "status": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "active"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "disabled"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "url": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "WebhookDelivery": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "completedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "eventOccurredAt": {
+            "type": "string"
+          },
+          "eventType": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "maxAttempts": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "nextAttemptAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "payload": {
+            "type": "null"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "pending"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "in_progress"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "succeeded"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "failed"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "exhausted"
+                ]
+              }
+            ]
+          },
+          "webhookEndpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "attemptCount",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryAttempt": {
+        "type": "object",
+        "properties": {
+          "attemptNumber": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "durationMs": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "errorMessage": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "id": {
+            "type": "string"
+          },
+          "responseBody": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "statusCode": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "succeeded": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "attemptNumber",
+          "createdAt",
+          "durationMs",
+          "errorMessage",
+          "id",
+          "responseBody",
+          "statusCode",
+          "succeeded"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryWithAttempts": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "attempts": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/WebhookDeliveryAttempt"
+            }
+          },
+          "completedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "eventOccurredAt": {
+            "type": "string"
+          },
+          "eventType": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "maxAttempts": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "nextAttemptAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "payload": {
+            "type": "null"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "pending"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "in_progress"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "succeeded"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "failed"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "exhausted"
+                ]
+              }
+            ]
+          },
+          "webhookEndpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "attemptCount",
+          "attempts",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookDeliveryNotFoundError"
+            ]
+          },
+          "deliveryId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "deliveryId"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {
+      "apiKey": {
+        "type": "apiKey",
+        "name": "x-api-key",
+        "in": "header"
+      },
+      "betterAuthCookie": {
+        "type": "apiKey",
+        "name": "__Secure-better-auth.session_token",
+        "in": "cookie"
+      },
+      "publishableKey": {
+        "type": "apiKey",
+        "name": "x-publishable-key",
+        "in": "header"
+      },
+      "secretKey": {
+        "type": "apiKey",
+        "name": "x-secret-key",
+        "in": "header"
+      }
+    }
+  },
+  "security": [],
+  "tags": [
+    {
+      "name": "auth"
+    },
+    {
+      "name": "api_keys"
+    },
+    {
+      "name": "customers"
+    },
+    {
+      "name": "organizations"
+    },
+    {
+      "name": "perks"
+    },
+    {
+      "name": "paywall_locations"
+    },
+    {
+      "name": "projects"
+    },
+    {
+      "name": "products"
+    },
+    {
+      "name": "product_perks"
+    },
+    {
+      "name": "sdk"
+    },
+    {
+      "name": "users"
+    },
+    {
+      "name": "payment_provider_configurations"
+    },
+    {
+      "name": "payment_provider_products"
+    },
+    {
+      "name": "changesets"
+    },
+    {
+      "name": "webhooks"
+    }
+  ]
+}
diff --git a/packages/generated-clients/openapi/preview/event-capture.json b/packages/generated-clients/openapi/preview/event-capture.json
new file mode 100644
index 000000000..a219e4a0b
--- /dev/null
+++ b/packages/generated-clients/openapi/preview/event-capture.json
@@ -0,0 +1,787 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Api",
+    "version": "0.0.1"
+  },
+  "paths": {
+    "/capture": {
+      "post": {
+        "tags": [
+          "event_capture"
+        ],
+        "operationId": "event_capture.capture",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureAcceptedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CaptureInvalidRequestError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureUnauthorizedError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CapturePayloadTooLargeError"
+                }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureRateLimitedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInternalServerError"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureDependencyUnavailableError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "uuid": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "event": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "context": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "$ref": "#/components/schemas/Union_"
+                    }
+                  },
+                  "properties": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "$ref": "#/components/schemas/Union_1"
+                    }
+                  },
+                  "distinct_id": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "session_id": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "allOf": [
+                          {
+                            "minLength": 1
+                          }
+                        ]
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "timestamp": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "allOf": [
+                          {
+                            "format": "date-time"
+                          }
+                        ]
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "sent_at": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "format": "date-time"
+                      }
+                    ]
+                  },
+                  "token": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "uuid",
+                  "event",
+                  "context",
+                  "properties",
+                  "distinct_id",
+                  "sent_at",
+                  "token"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/batch": {
+      "post": {
+        "tags": [
+          "event_capture"
+        ],
+        "operationId": "event_capture.batch",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureAcceptedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CaptureInvalidRequestError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureUnauthorizedError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CapturePayloadTooLargeError"
+                }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureRateLimitedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInternalServerError"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureDependencyUnavailableError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "events": {
+                    "type": "array",
+                    "prefixItems": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "uuid": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "event": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "context": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "$ref": "#/components/schemas/Union_"
+                            }
+                          },
+                          "properties": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "$ref": "#/components/schemas/Union_1"
+                            }
+                          },
+                          "distinct_id": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "session_id": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "allOf": [
+                                  {
+                                    "minLength": 1
+                                  }
+                                ]
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "timestamp": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "allOf": [
+                                  {
+                                    "format": "date-time"
+                                  }
+                                ]
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          }
+                        },
+                        "required": [
+                          "uuid",
+                          "event",
+                          "context",
+                          "properties",
+                          "distinct_id"
+                        ],
+                        "additionalProperties": false
+                      }
+                    ],
+                    "minItems": 1,
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "uuid": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "event": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "context": {
+                          "type": "object",
+                          "additionalProperties": {
+                            "$ref": "#/components/schemas/Union_"
+                          }
+                        },
+                        "properties": {
+                          "type": "object",
+                          "additionalProperties": {
+                            "$ref": "#/components/schemas/Union_1"
+                          }
+                        },
+                        "distinct_id": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "session_id": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "allOf": [
+                                {
+                                  "minLength": 1
+                                }
+                              ]
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        },
+                        "timestamp": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "allOf": [
+                                {
+                                  "format": "date-time"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        }
+                      },
+                      "required": [
+                        "uuid",
+                        "event",
+                        "context",
+                        "properties",
+                        "distinct_id"
+                      ],
+                      "additionalProperties": false
+                    }
+                  },
+                  "sent_at": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "format": "date-time"
+                      }
+                    ]
+                  },
+                  "token": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "events",
+                  "sent_at",
+                  "token"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "Union_": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "number"
+          },
+          {
+            "type": "boolean"
+          },
+          {
+            "type": "null"
+          },
+          {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Union_"
+            }
+          },
+          {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/Union_"
+            }
+          }
+        ]
+      },
+      "Union_1": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "number"
+          },
+          {
+            "type": "boolean"
+          },
+          {
+            "type": "null"
+          },
+          {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Union_1"
+            }
+          },
+          {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/Union_1"
+            }
+          }
+        ]
+      },
+      "CaptureAcceptedResponse": {
+        "type": "object",
+        "properties": {
+          "accepted": {
+            "type": "integer"
+          },
+          "rejected": {
+            "type": "integer"
+          }
+        },
+        "required": [
+          "accepted",
+          "rejected"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureInvalidRequestError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureInvalidRequestError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "invalid_request"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "effect_HttpApiSchemaError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "HttpApiSchemaError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureUnauthorizedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureUnauthorizedError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "unauthorized"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CapturePayloadTooLargeError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CapturePayloadTooLargeError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "payload_too_large"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureRateLimitedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureRateLimitedError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "rate_limited"
+            ]
+          },
+          "retry_after_ms": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureDependencyUnavailableError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureDependencyUnavailableError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "dependency_unavailable"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureInternalServerError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureInternalServerError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "internal_error"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {}
+  },
+  "security": [],
+  "tags": [
+    {
+      "name": "event_capture"
+    }
+  ]
+}
diff --git a/packages/generated-clients/openapi/production/core.json b/packages/generated-clients/openapi/production/core.json
new file mode 100644
index 000000000..e8aefec47
--- /dev/null
+++ b/packages/generated-clients/openapi/production/core.json
@@ -0,0 +1,8086 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Api",
+    "version": "0.0.1"
+  },
+  "paths": {
+    "/api/v1/auth/session": {
+      "get": {
+        "tags": [
+          "auth"
+        ],
+        "operationId": "auth.session",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "method": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "api-key"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "publishable-key"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "secret-key"
+                          ]
+                        }
+                      ]
+                    },
+                    "name": {
+                      "type": "string"
+                    },
+                    "organizations": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "name": {
+                            "type": "string"
+                          },
+                          "slug": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "id",
+                          "name",
+                          "slug"
+                        ],
+                        "additionalProperties": false
+                      }
+                    },
+                    "projects": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "name": {
+                            "type": "string"
+                          },
+                          "organizationId": {
+                            "type": "string"
+                          },
+                          "slug": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "id",
+                          "name",
+                          "organizationId",
+                          "slug"
+                        ],
+                        "additionalProperties": false
+                      }
+                    }
+                  },
+                  "required": [
+                    "method",
+                    "name",
+                    "organizations",
+                    "projects"
+                  ],
+                  "additionalProperties": false
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/NotAuthenticatedError"
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys": {
+      "post": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.createSecretKey",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyWithRawKey"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateSecretKeyBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.listApiKeys",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/ApiKey"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}": {
+      "get": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.getApiKeyById",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "ApiKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKey"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.deleteApiKey",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "<No Content>"
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}/rotate": {
+      "post": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.rotateSecretKey",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyWithRawKey"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/customers": {
+      "post": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.createCustomer",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Customer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Customer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CustomerInvalidAnonymousIdError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerInvalidAnonymousIdError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateCustomerBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.listCustomers",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Customer"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/customers/{customerId}": {
+      "get": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.getCustomerById",
+        "parameters": [
+          {
+            "name": "customerId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Customer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Customer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "CustomerNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CustomerNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/customers/by-distinct-id/{distinctId}": {
+      "get": {
+        "tags": [
+          "customers"
+        ],
+        "operationId": "customers.byDistinctId",
+        "parameters": [
+          {
+            "name": "distinctId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Customer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Customer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "CustomerNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CustomerNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CustomerServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CustomerServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/organizations": {
+      "post": {
+        "tags": [
+          "organizations"
+        ],
+        "operationId": "organizations.createOrganization",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Organization",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Organization"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "OrganizationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/OrganizationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateOrganizationBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/perks": {
+      "get": {
+        "tags": [
+          "perks"
+        ],
+        "operationId": "perks.listPerks",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Perk"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PerkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/paywall-locations": {
+      "get": {
+        "tags": [
+          "paywall_locations"
+        ],
+        "operationId": "paywall_locations.listPaywallLocations",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaywallLocation"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PaywallLocationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PaywallLocationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/projects": {
+      "post": {
+        "tags": [
+          "projects"
+        ],
+        "operationId": "projects.createProject",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Project",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Project"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/ProjectServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateProjectBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/projects/{organizationId}": {
+      "get": {
+        "tags": [
+          "projects"
+        ],
+        "operationId": "projects.listProjects",
+        "parameters": [
+          {
+            "name": "organizationId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Project"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProjectServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/products": {
+      "get": {
+        "tags": [
+          "products"
+        ],
+        "operationId": "products.listProducts",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Product"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProductServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/product-perks/by-product-id/{productId}": {
+      "get": {
+        "tags": [
+          "product_perks"
+        ],
+        "operationId": "product_perks.listProductPerksByProductId",
+        "parameters": [
+          {
+            "name": "productId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/ProductPerk"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "ProductPerkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProductPerkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "ProductPerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/ProductPerkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/get-customer": {
+      "get": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.getCustomer",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkCustomer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "SdkCustomerNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomerNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/identify": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.identify",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkCustomer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "SdkCustomerAlreadyIdentifiedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomerAlreadyIdentifiedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkIdentifyBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/sync-customer-attributes": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.syncCustomerAttributes",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkCustomer",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkCustomer"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkSyncCustomerAttributesBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/sync-transaction": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.syncTransaction",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkSyncTransactionResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkSyncTransactionResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "platform": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "ios"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "android"
+                        ]
+                      }
+                    ]
+                  },
+                  "productId": {
+                    "type": "string"
+                  },
+                  "purchaseDate": {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  },
+                  "purchaseToken": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "quantity": {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  },
+                  "receipt": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "transactionId": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "platform",
+                  "productId",
+                  "purchaseDate",
+                  "quantity",
+                  "transactionId"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/evaluate-flags": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.evaluateFeatureFlags",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "SdkFeatureFlagsResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkFeatureFlagsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/EvaluateFeatureFlagsBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/resolve-paywall": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.resolvePaywall",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "true"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "false"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "browser"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "react-native"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "web"
+                  ]
+                }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkResolvedPaywall"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkResolvePaywallBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/users/current": {
+      "get": {
+        "tags": [
+          "users"
+        ],
+        "operationId": "users.getUser",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "User",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | UserServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/UserServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-configurations": {
+      "get": {
+        "tags": [
+          "payment_provider_configurations"
+        ],
+        "operationId": "payment_provider_configurations.listPaymentProviderConfigurations",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaymentProviderConfiguration"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PaymentProviderConfigurationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PaymentProviderConfigurationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-products": {
+      "get": {
+        "tags": [
+          "payment_provider_products"
+        ],
+        "operationId": "payment_provider_products.listPaymentProviderProducts",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaymentProviderProduct"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "PaymentProviderProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/PaymentProviderProductServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/changesets/deploy": {
+      "post": {
+        "tags": [
+          "changesets"
+        ],
+        "operationId": "changesets.deployChangeset",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "DeployChangesetResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeployChangesetResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "AuthenticationError | ChangesetDeploymentServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/ChangesetDeploymentServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/DeployChangesetBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.createWebhookEndpoint",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateWebhookEndpointBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.listWebhookEndpoints",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/WebhookEndpoint"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.getWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "patch": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.updateWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateWebhookEndpointBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "delete": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.deleteWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "<No Content>"
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/rotate-secret": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.rotateWebhookSecret",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/test": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.testWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDelivery"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.listWebhookDeliveries",
+        "parameters": [],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/WebhookDelivery"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.getWebhookDelivery",
+        "parameters": [
+          {
+            "name": "deliveryId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookDeliveryWithAttempts",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDeliveryWithAttempts"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDeliveryNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}/retry": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.retryWebhookDelivery",
+        "parameters": [
+          {
+            "name": "deliveryId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "apiKey": []
+          },
+          {
+            "betterAuthCookie": []
+          },
+          {
+            "publishableKey": []
+          },
+          {
+            "secretKey": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDelivery"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookValidationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDeliveryNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "ActionForbiddenError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ActionForbiddenError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "AuthenticationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "AuthenticationError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "NotAuthenticatedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "NotAuthenticatedError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "effect_HttpApiSchemaError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "HttpApiSchemaError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CreateSecretKeyBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "projectId"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKeyWithRawKey": {
+        "type": "object",
+        "properties": {
+          "end": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "isPublic": {
+            "type": "boolean"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prefix": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "rawKey": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "end",
+          "id",
+          "isPublic",
+          "name",
+          "prefix",
+          "projectId",
+          "rawKey"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKeyServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ApiKeyServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKey": {
+        "type": "object",
+        "properties": {
+          "end": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "isPublic": {
+            "type": "boolean"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prefix": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "rawKey": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "end",
+          "id",
+          "isPublic",
+          "name",
+          "prefix",
+          "projectId"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKeyNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ApiKeyNotFoundError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CreateCustomerBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "Customer": {
+        "type": "object",
+        "properties": {
+          "customerId": {
+            "type": "string"
+          },
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "customerId",
+          "distinctId",
+          "email",
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "CustomerInvalidAnonymousIdError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CustomerInvalidAnonymousIdError"
+            ]
+          },
+          "id": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "id"
+        ],
+        "additionalProperties": false
+      },
+      "CustomerServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CustomerServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CustomerNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CustomerNotFoundError"
+            ]
+          },
+          "id": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "id"
+        ],
+        "additionalProperties": false
+      },
+      "CreateOrganizationBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "Organization": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "OrganizationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "OrganizationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Perk": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "projectId",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "PerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PerkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaywallLocation": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "description",
+          "id",
+          "name",
+          "projectId",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "PaywallLocationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PaywallLocationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CreateProjectBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "organizationId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "organizationId"
+        ],
+        "additionalProperties": false
+      },
+      "Project": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "ProjectServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProjectServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Product": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          },
+          "type": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "subscription"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "one-time"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "one-time-consumable"
+                ]
+              }
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "projectId",
+          "slug",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "ProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProductServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ProductPerk": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "perkId": {
+            "type": "string"
+          },
+          "productId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "perkId",
+          "productId"
+        ],
+        "additionalProperties": false
+      },
+      "ProductPerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProductPerkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ProductPerkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ProductPerkValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCustomer": {
+        "type": "object",
+        "properties": {
+          "customerId": {
+            "type": "string"
+          },
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "customerId",
+          "distinctId",
+          "email",
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "SdkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCustomerNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkCustomerNotFoundError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkIdentifyBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "type": "number"
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "NaN"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "Infinity"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "-Infinity"
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCustomerAlreadyIdentifiedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "SdkCustomerAlreadyIdentifiedError"
+            ]
+          },
+          "distinctId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSyncCustomerAttributesBody": {
+        "type": "object",
+        "properties": {
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "type": "number"
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "NaN"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "Infinity"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "-Infinity"
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkSyncTransactionResponse": {
+        "type": "object",
+        "properties": {
+          "accepted": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "accepted"
+        ],
+        "additionalProperties": false
+      },
+      "EvaluateFeatureFlagsBody": {
+        "type": "object",
+        "properties": {
+          "flagKeys": {
+            "anyOf": [
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagResult": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean"
+          },
+          "key": {
+            "type": "string"
+          },
+          "payload": {
+            "anyOf": [
+              {
+                "type": "null"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "variantKey": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "enabled",
+          "key",
+          "payload",
+          "variantKey"
+        ],
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagsResponse": {
+        "type": "object",
+        "properties": {
+          "flags": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SdkFeatureFlagResult"
+            }
+          }
+        },
+        "required": [
+          "flags"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvePaywallBody": {
+        "type": "object",
+        "properties": {
+          "locationSlug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "locationSlug"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywallShowing": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "paywall": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "id": {
+                    "type": "string"
+                  },
+                  "name": {
+                    "type": "string"
+                  },
+                  "slug": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "id",
+                  "name",
+                  "slug"
+                ],
+                "additionalProperties": false
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallRelease": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "htmlUrl": {
+                    "type": "string"
+                  },
+                  "publishedAt": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "releaseId": {
+                    "type": "string"
+                  },
+                  "version": {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "htmlUrl",
+                  "publishedAt",
+                  "releaseId",
+                  "version"
+                ],
+                "additionalProperties": false
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallReleaseId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "startedAt": {
+            "type": "string"
+          },
+          "type": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "paywall_release"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "feature_flag"
+                ]
+              }
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "paywall",
+          "paywallId",
+          "paywallRelease",
+          "paywallReleaseId",
+          "startedAt",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywall": {
+        "type": "object",
+        "properties": {
+          "location": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "name": {
+                "type": "string"
+              },
+              "slug": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "id",
+              "name",
+              "slug"
+            ],
+            "additionalProperties": false
+          },
+          "showing": {
+            "$ref": "#/components/schemas/SdkResolvedPaywallShowing"
+          }
+        },
+        "required": [
+          "location",
+          "showing"
+        ],
+        "additionalProperties": false
+      },
+      "User": {
+        "type": "object",
+        "properties": {
+          "createdAt": {
+            "type": "string"
+          },
+          "email": {
+            "type": "string"
+          },
+          "emailVerified": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "image": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "organizations": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "logo": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "slug": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "logo",
+                "name",
+                "slug"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "projects": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "logo": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "organizationId": {
+                  "type": "string"
+                },
+                "slug": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "logo",
+                "name",
+                "organizationId",
+                "slug"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "updatedAt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "createdAt",
+          "email",
+          "emailVerified",
+          "id",
+          "image",
+          "name",
+          "organizations",
+          "projects",
+          "updatedAt"
+        ],
+        "additionalProperties": false
+      },
+      "UserServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "UserServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderConfiguration": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "providerId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "enabled",
+          "id",
+          "name",
+          "projectId",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderConfigurationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PaymentProviderConfigurationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderProduct": {
+        "type": "object",
+        "properties": {
+          "configuration": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "null"
+            }
+          },
+          "id": {
+            "type": "string"
+          },
+          "paymentProviderConfigurationId": {
+            "type": "string"
+          },
+          "productId": {
+            "type": "string"
+          },
+          "providerId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "configuration",
+          "id",
+          "paymentProviderConfigurationId",
+          "productId",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "PaymentProviderProductServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "DeployChangesetBody": {
+        "type": "object",
+        "properties": {
+          "changeset": {
+            "type": "object",
+            "properties": {
+              "changes": {
+                "type": "array",
+                "items": {
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-paywall-location"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "description": {
+                              "anyOf": [
+                                {
+                                  "anyOf": [
+                                    {
+                                      "type": "string"
+                                    },
+                                    {
+                                      "type": "null"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-paywall-location"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "description": {
+                              "anyOf": [
+                                {
+                                  "anyOf": [
+                                    {
+                                      "type": "string"
+                                    },
+                                    {
+                                      "type": "null"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "archive-paywall-location"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "name": {
+                              "type": "string"
+                            },
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "name",
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "slug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "slug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-product-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "perkSlug": {
+                              "type": "string"
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "perkSlug",
+                            "productSlug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-product-perk"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "perkSlug": {
+                              "type": "string"
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "perkSlug",
+                            "productSlug"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "create-payment-provider-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "configuration": {
+                              "type": "object",
+                              "additionalProperties": {
+                                "type": "null"
+                              }
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            },
+                            "providerId": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "configuration",
+                            "productSlug",
+                            "providerId"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "update-payment-provider-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "configuration": {
+                              "type": "object",
+                              "additionalProperties": {
+                                "type": "null"
+                              }
+                            },
+                            "productSlug": {
+                              "type": "string"
+                            },
+                            "providerId": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "configuration",
+                            "productSlug",
+                            "providerId"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "changeType": {
+                          "type": "string",
+                          "enum": [
+                            "delete-payment-provider-product"
+                          ]
+                        },
+                        "key": {
+                          "type": "string"
+                        },
+                        "payload": {
+                          "type": "object",
+                          "properties": {
+                            "productSlug": {
+                              "type": "string"
+                            },
+                            "providerId": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "productSlug",
+                            "providerId"
+                          ],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": [
+                        "changeType",
+                        "key",
+                        "payload"
+                      ],
+                      "additionalProperties": false
+                    }
+                  ]
+                }
+              }
+            },
+            "required": [
+              "changes"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "required": [
+          "changeset"
+        ],
+        "additionalProperties": false
+      },
+      "DeployChangesetResponse": {
+        "type": "object",
+        "properties": {
+          "deploymentId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "deploymentId"
+        ],
+        "additionalProperties": false
+      },
+      "ChangesetDeploymentServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "ChangesetDeploymentServiceError"
+            ]
+          },
+          "cause": {
+            "type": "null"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CreateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "name": {
+            "type": "string"
+          },
+          "url": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "events",
+          "name",
+          "url"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookEndpoint": {
+        "type": "object",
+        "properties": {
+          "consecutiveFailures": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "type": "array",
+            "items": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "customer.created"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "customer.updated"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "customer.deleted"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.created"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.renewed"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.cancelled"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "subscription.expired"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "purchase.completed"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "purchase.refunded"
+                  ]
+                }
+              ]
+            }
+          },
+          "id": {
+            "type": "string"
+          },
+          "lastSuccessAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "secret": {
+            "type": "string"
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "active"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "disabled"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "failed"
+                ]
+              }
+            ]
+          },
+          "url": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "consecutiveFailures",
+          "createdAt",
+          "description",
+          "events",
+          "id",
+          "lastSuccessAt",
+          "name",
+          "projectId",
+          "secret",
+          "status",
+          "url"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookEndpointNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookEndpointNotFoundError"
+            ]
+          },
+          "endpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "endpointId"
+        ],
+        "additionalProperties": false
+      },
+      "UpdateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "anyOf": [
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "status": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "active"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "disabled"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "url": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "WebhookDelivery": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "completedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "eventOccurredAt": {
+            "type": "string"
+          },
+          "eventType": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "maxAttempts": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "nextAttemptAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "payload": {
+            "type": "null"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "pending"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "in_progress"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "succeeded"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "failed"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "exhausted"
+                ]
+              }
+            ]
+          },
+          "webhookEndpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "attemptCount",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryAttempt": {
+        "type": "object",
+        "properties": {
+          "attemptNumber": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "durationMs": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "errorMessage": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "id": {
+            "type": "string"
+          },
+          "responseBody": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "statusCode": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "succeeded": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "attemptNumber",
+          "createdAt",
+          "durationMs",
+          "errorMessage",
+          "id",
+          "responseBody",
+          "statusCode",
+          "succeeded"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryWithAttempts": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "attempts": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/WebhookDeliveryAttempt"
+            }
+          },
+          "completedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "eventOccurredAt": {
+            "type": "string"
+          },
+          "eventType": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "maxAttempts": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "NaN"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "-Infinity"
+                ]
+              }
+            ]
+          },
+          "nextAttemptAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "payload": {
+            "type": "null"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "pending"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "in_progress"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "succeeded"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "failed"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "exhausted"
+                ]
+              }
+            ]
+          },
+          "webhookEndpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "attemptCount",
+          "attempts",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "WebhookDeliveryNotFoundError"
+            ]
+          },
+          "deliveryId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "deliveryId"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {
+      "apiKey": {
+        "type": "apiKey",
+        "name": "x-api-key",
+        "in": "header"
+      },
+      "betterAuthCookie": {
+        "type": "apiKey",
+        "name": "__Secure-better-auth.session_token",
+        "in": "cookie"
+      },
+      "publishableKey": {
+        "type": "apiKey",
+        "name": "x-publishable-key",
+        "in": "header"
+      },
+      "secretKey": {
+        "type": "apiKey",
+        "name": "x-secret-key",
+        "in": "header"
+      }
+    }
+  },
+  "security": [],
+  "tags": [
+    {
+      "name": "auth"
+    },
+    {
+      "name": "api_keys"
+    },
+    {
+      "name": "customers"
+    },
+    {
+      "name": "organizations"
+    },
+    {
+      "name": "perks"
+    },
+    {
+      "name": "paywall_locations"
+    },
+    {
+      "name": "projects"
+    },
+    {
+      "name": "products"
+    },
+    {
+      "name": "product_perks"
+    },
+    {
+      "name": "sdk"
+    },
+    {
+      "name": "users"
+    },
+    {
+      "name": "payment_provider_configurations"
+    },
+    {
+      "name": "payment_provider_products"
+    },
+    {
+      "name": "changesets"
+    },
+    {
+      "name": "webhooks"
+    }
+  ]
+}
diff --git a/packages/generated-clients/openapi/production/event-capture.json b/packages/generated-clients/openapi/production/event-capture.json
new file mode 100644
index 000000000..a219e4a0b
--- /dev/null
+++ b/packages/generated-clients/openapi/production/event-capture.json
@@ -0,0 +1,787 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Api",
+    "version": "0.0.1"
+  },
+  "paths": {
+    "/capture": {
+      "post": {
+        "tags": [
+          "event_capture"
+        ],
+        "operationId": "event_capture.capture",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureAcceptedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CaptureInvalidRequestError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureUnauthorizedError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CapturePayloadTooLargeError"
+                }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureRateLimitedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInternalServerError"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureDependencyUnavailableError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "uuid": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "event": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "context": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "$ref": "#/components/schemas/Union_"
+                    }
+                  },
+                  "properties": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "$ref": "#/components/schemas/Union_1"
+                    }
+                  },
+                  "distinct_id": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "session_id": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "allOf": [
+                          {
+                            "minLength": 1
+                          }
+                        ]
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "timestamp": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "allOf": [
+                          {
+                            "format": "date-time"
+                          }
+                        ]
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "sent_at": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "format": "date-time"
+                      }
+                    ]
+                  },
+                  "token": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "uuid",
+                  "event",
+                  "context",
+                  "properties",
+                  "distinct_id",
+                  "sent_at",
+                  "token"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/batch": {
+      "post": {
+        "tags": [
+          "event_capture"
+        ],
+        "operationId": "event_capture.batch",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureAcceptedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/CaptureInvalidRequestError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/effect_HttpApiSchemaError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureUnauthorizedError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CapturePayloadTooLargeError"
+                }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureRateLimitedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInternalServerError"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureDependencyUnavailableError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "events": {
+                    "type": "array",
+                    "prefixItems": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "uuid": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "event": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "context": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "$ref": "#/components/schemas/Union_"
+                            }
+                          },
+                          "properties": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "$ref": "#/components/schemas/Union_1"
+                            }
+                          },
+                          "distinct_id": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "session_id": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "allOf": [
+                                  {
+                                    "minLength": 1
+                                  }
+                                ]
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "timestamp": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "allOf": [
+                                  {
+                                    "format": "date-time"
+                                  }
+                                ]
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          }
+                        },
+                        "required": [
+                          "uuid",
+                          "event",
+                          "context",
+                          "properties",
+                          "distinct_id"
+                        ],
+                        "additionalProperties": false
+                      }
+                    ],
+                    "minItems": 1,
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "uuid": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "event": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "context": {
+                          "type": "object",
+                          "additionalProperties": {
+                            "$ref": "#/components/schemas/Union_"
+                          }
+                        },
+                        "properties": {
+                          "type": "object",
+                          "additionalProperties": {
+                            "$ref": "#/components/schemas/Union_1"
+                          }
+                        },
+                        "distinct_id": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "session_id": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "allOf": [
+                                {
+                                  "minLength": 1
+                                }
+                              ]
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        },
+                        "timestamp": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "allOf": [
+                                {
+                                  "format": "date-time"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        }
+                      },
+                      "required": [
+                        "uuid",
+                        "event",
+                        "context",
+                        "properties",
+                        "distinct_id"
+                      ],
+                      "additionalProperties": false
+                    }
+                  },
+                  "sent_at": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "format": "date-time"
+                      }
+                    ]
+                  },
+                  "token": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "events",
+                  "sent_at",
+                  "token"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "Union_": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "number"
+          },
+          {
+            "type": "boolean"
+          },
+          {
+            "type": "null"
+          },
+          {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Union_"
+            }
+          },
+          {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/Union_"
+            }
+          }
+        ]
+      },
+      "Union_1": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "number"
+          },
+          {
+            "type": "boolean"
+          },
+          {
+            "type": "null"
+          },
+          {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Union_1"
+            }
+          },
+          {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/Union_1"
+            }
+          }
+        ]
+      },
+      "CaptureAcceptedResponse": {
+        "type": "object",
+        "properties": {
+          "accepted": {
+            "type": "integer"
+          },
+          "rejected": {
+            "type": "integer"
+          }
+        },
+        "required": [
+          "accepted",
+          "rejected"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureInvalidRequestError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureInvalidRequestError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "invalid_request"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "effect_HttpApiSchemaError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "HttpApiSchemaError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureUnauthorizedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureUnauthorizedError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "unauthorized"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CapturePayloadTooLargeError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CapturePayloadTooLargeError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "payload_too_large"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureRateLimitedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureRateLimitedError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "rate_limited"
+            ]
+          },
+          "retry_after_ms": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureDependencyUnavailableError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureDependencyUnavailableError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "dependency_unavailable"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureInternalServerError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureInternalServerError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "internal_error"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {}
+  },
+  "security": [],
+  "tags": [
+    {
+      "name": "event_capture"
+    }
+  ]
+}
diff --git a/packages/generated-clients/package.json b/packages/generated-clients/package.json
new file mode 100644
index 000000000..de8743462
--- /dev/null
+++ b/packages/generated-clients/package.json
@@ -0,0 +1,22 @@
+{
+  "name": "@voidhash/generated-clients",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./core": "./src/core/index.ts",
+    "./event-capture": "./src/event-capture/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsgo --noEmit"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "5.6.3"
+  },
+  "peerDependencies": {
+    "effect": "catalog:"
+  }
+}
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
new file mode 100644
index 000000000..d936f4b12
--- /dev/null
+++ b/packages/generated-clients/src/core/generated.ts
@@ -0,0 +1,1230 @@
+import type * as HttpClient from "effect/unstable/http/HttpClient"
+import * as HttpClientError from "effect/unstable/http/HttpClientError"
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest"
+import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse"
+import * as Data from "effect/Data"
+import * as Effect from "effect/Effect"
+
+export type AuthSession200MethodEnum = "secret-key"
+
+export interface AuthSession200 {
+  readonly "method": AuthSession200MethodEnum | AuthSession200MethodEnum | AuthSession200MethodEnum;
+  readonly "name": string;
+  readonly "organizations": ReadonlyArray<{
+  readonly "id": string;
+  readonly "name": string;
+  readonly "slug": string
+}>;
+  readonly "projects": ReadonlyArray<{
+  readonly "id": string;
+  readonly "name": string;
+  readonly "organizationId": string;
+  readonly "slug": string
+}>
+}
+
+export type EffectHttpApiSchemaErrorTag = "HttpApiSchemaError"
+
+export interface EffectHttpApiSchemaError {
+  readonly "_tag": EffectHttpApiSchemaErrorTag;
+  readonly "message": string
+}
+
+export type ActionForbiddenErrorTag = "ActionForbiddenError"
+
+export interface ActionForbiddenError {
+  readonly "_tag": ActionForbiddenErrorTag;
+  readonly "message": string
+}
+
+export type AuthenticationErrorTag = "AuthenticationError"
+
+export interface AuthenticationError {
+  readonly "_tag": AuthenticationErrorTag;
+  readonly "cause": string;
+  readonly "message": string
+}
+
+export type NotAuthenticatedErrorTag = "NotAuthenticatedError"
+
+export interface NotAuthenticatedError {
+  readonly "_tag": NotAuthenticatedErrorTag;
+  readonly "message": string
+}
+
+export type AuthSession500 = AuthenticationError | NotAuthenticatedError
+
+export interface ApiKey {
+  readonly "end": string;
+  readonly "id": string;
+  readonly "isPublic": boolean;
+  readonly "name": string;
+  readonly "prefix": string;
+  readonly "projectId": string;
+  readonly "rawKey"?: string | null | undefined
+}
+
+export type ApiKeysListApiKeys200 = ReadonlyArray<ApiKey>
+
+export type ApiKeyServiceErrorTag = "ApiKeyServiceError"
+
+export interface ApiKeyServiceError {
+  readonly "_tag": ApiKeyServiceErrorTag;
+  readonly "cause": string
+}
+
+export type ApiKeysListApiKeys500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface CreateSecretKeyBody {
+  readonly "name": string;
+  readonly "projectId": string
+}
+
+export interface ApiKeyWithRawKey {
+  readonly "end": string;
+  readonly "id": string;
+  readonly "isPublic": boolean;
+  readonly "name": string;
+  readonly "prefix": string;
+  readonly "projectId": string;
+  readonly "rawKey": string
+}
+
+export type ApiKeysCreateSecretKey500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+
+export type ApiKeyNotFoundErrorTag = "ApiKeyNotFoundError"
+
+export interface ApiKeyNotFoundError {
+  readonly "_tag": ApiKeyNotFoundErrorTag;
+  readonly "message": string
+}
+
+export type ApiKeysGetApiKeyById500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+
+export type ApiKeysDeleteApiKey500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+
+export type ApiKeysRotateSecretKey500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface Customer {
+  readonly "customerId": string;
+  readonly "distinctId": string;
+  readonly "email": string | null;
+  readonly "name": string | null
+}
+
+export type CustomersListCustomers200 = ReadonlyArray<Customer>
+
+export type CustomerServiceErrorTag = "CustomerServiceError"
+
+export interface CustomerServiceError {
+  readonly "_tag": CustomerServiceErrorTag;
+  readonly "cause": string
+}
+
+export type CustomersListCustomers500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface CreateCustomerBody {
+  readonly "distinctId": string;
+  readonly "email"?: string | null | undefined;
+  readonly "name"?: string | null | undefined
+}
+
+export type CustomerInvalidAnonymousIdErrorTag = "CustomerInvalidAnonymousIdError"
+
+export interface CustomerInvalidAnonymousIdError {
+  readonly "_tag": CustomerInvalidAnonymousIdErrorTag;
+  readonly "id": string
+}
+
+export type CustomersCreateCustomer400 = CustomerInvalidAnonymousIdError | EffectHttpApiSchemaError
+
+export type CustomersCreateCustomer500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+
+export type CustomerNotFoundErrorTag = "CustomerNotFoundError"
+
+export interface CustomerNotFoundError {
+  readonly "_tag": CustomerNotFoundErrorTag;
+  readonly "id": string
+}
+
+export type CustomersGetCustomerById500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+
+export type CustomersByDistinctId500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface CreateOrganizationBody {
+  readonly "name": string
+}
+
+export interface Organization {
+  readonly "id": string;
+  readonly "name": string;
+  readonly "slug": string
+}
+
+export type OrganizationServiceErrorTag = "OrganizationServiceError"
+
+export interface OrganizationServiceError {
+  readonly "_tag": OrganizationServiceErrorTag;
+  readonly "cause": string
+}
+
+export type OrganizationsCreateOrganization500 = OrganizationServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface Perk {
+  readonly "id": string;
+  readonly "name": string;
+  readonly "projectId": string;
+  readonly "slug": string
+}
+
+export type PerksListPerks200 = ReadonlyArray<Perk>
+
+export type PerkServiceErrorTag = "PerkServiceError"
+
+export interface PerkServiceError {
+  readonly "_tag": PerkServiceErrorTag;
+  readonly "cause": string
+}
+
+export type PerksListPerks500 = PerkServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface PaywallLocation {
+  readonly "description": string | null;
+  readonly "id": string;
+  readonly "name": string;
+  readonly "projectId": string;
+  readonly "slug": string
+}
+
+export type PaywallLocationsListPaywallLocations200 = ReadonlyArray<PaywallLocation>
+
+export type PaywallLocationServiceErrorTag = "PaywallLocationServiceError"
+
+export interface PaywallLocationServiceError {
+  readonly "_tag": PaywallLocationServiceErrorTag;
+  readonly "cause": string
+}
+
+export type PaywallLocationsListPaywallLocations500 = PaywallLocationServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface CreateProjectBody {
+  readonly "name": string;
+  readonly "organizationId": string
+}
+
+export interface Project {
+  readonly "id": string;
+  readonly "name": string;
+  readonly "slug": string
+}
+
+export type ProjectServiceErrorTag = "ProjectServiceError"
+
+export interface ProjectServiceError {
+  readonly "_tag": ProjectServiceErrorTag;
+  readonly "cause": string
+}
+
+export type ProjectsCreateProject500 = AuthenticationError | ProjectServiceError | AuthenticationError | NotAuthenticatedError
+
+export type ProjectsListProjects200 = ReadonlyArray<Project>
+
+export type ProjectsListProjects500 = ProjectServiceError | AuthenticationError | NotAuthenticatedError
+
+export type ProductTypeEnum = "one-time-consumable"
+
+export interface Product {
+  readonly "id": string;
+  readonly "name": string;
+  readonly "projectId": string;
+  readonly "slug": string;
+  readonly "type": ProductTypeEnum | ProductTypeEnum | ProductTypeEnum
+}
+
+export type ProductsListProducts200 = ReadonlyArray<Product>
+
+export type ProductServiceErrorTag = "ProductServiceError"
+
+export interface ProductServiceError {
+  readonly "_tag": ProductServiceErrorTag;
+  readonly "cause": string
+}
+
+export type ProductsListProducts500 = ProductServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface ProductPerk {
+  readonly "id": string;
+  readonly "perkId": string;
+  readonly "productId": string
+}
+
+export type ProductPerksListProductPerksByProductId200 = ReadonlyArray<ProductPerk>
+
+export type ProductPerkValidationErrorTag = "ProductPerkValidationError"
+
+export interface ProductPerkValidationError {
+  readonly "_tag": ProductPerkValidationErrorTag;
+  readonly "message": string
+}
+
+export type ProductPerksListProductPerksByProductId400 = ProductPerkValidationError | EffectHttpApiSchemaError
+
+export type ProductPerkServiceErrorTag = "ProductPerkServiceError"
+
+export interface ProductPerkServiceError {
+  readonly "_tag": ProductPerkServiceErrorTag;
+  readonly "cause": string
+}
+
+export type ProductPerksListProductPerksByProductId500 = ProductPerkServiceError | AuthenticationError | NotAuthenticatedError
+
+export type SdkGetCustomerParamsXIsBackgrounded = "false"
+
+export type SdkGetCustomerParamsXIsDebugBuildEnum = "false"
+
+export type SdkGetCustomerParamsXObserverModeEnum = "false"
+
+export type SdkGetCustomerParamsXPlatformFlavorEnum = "browser"
+
+export type SdkGetCustomerParamsXSdkEnum = "web"
+
+export interface SdkGetCustomerParams {
+  readonly "x-distinct-id": string;
+  readonly "x-publishable-key": string;
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | null | undefined;
+  readonly "x-client-version"?: string | null | undefined;
+  readonly "x-is-backgrounded": SdkGetCustomerParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkGetCustomerParamsXIsDebugBuildEnum | SdkGetCustomerParamsXIsDebugBuildEnum;
+  readonly "x-nonce"?: string | null | undefined;
+  readonly "x-observer-mode": SdkGetCustomerParamsXObserverModeEnum | SdkGetCustomerParamsXObserverModeEnum;
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | null | undefined;
+  readonly "x-platform-device"?: string | null | undefined;
+  readonly "x-platform-flavor": SdkGetCustomerParamsXPlatformFlavorEnum | SdkGetCustomerParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor-version"?: string | null | undefined;
+  readonly "x-platform-version"?: string | null | undefined;
+  readonly "x-preferred-locales"?: string | null | undefined;
+  readonly "x-sdk": SdkGetCustomerParamsXSdkEnum | SdkGetCustomerParamsXSdkEnum;
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | null | undefined
+}
+
+export interface SdkCustomer {
+  readonly "customerId": string;
+  readonly "distinctId": string;
+  readonly "email": string | null;
+  readonly "name": string | null
+}
+
+export type SdkValidationErrorTag = "SdkValidationError"
+
+export interface SdkValidationError {
+  readonly "_tag": SdkValidationErrorTag;
+  readonly "message": string
+}
+
+export type SdkGetCustomer400 = SdkValidationError | EffectHttpApiSchemaError
+
+export type SdkCustomerNotFoundErrorTag = "SdkCustomerNotFoundError"
+
+export interface SdkCustomerNotFoundError {
+  readonly "_tag": SdkCustomerNotFoundErrorTag;
+  readonly "message": string
+}
+
+export type SdkServiceErrorTag = "SdkServiceError"
+
+export interface SdkServiceError {
+  readonly "_tag": SdkServiceErrorTag;
+  readonly "cause": string
+}
+
+export type SdkGetCustomer500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+
+export type SdkIdentifyParamsXIsBackgrounded = "false"
+
+export type SdkIdentifyParamsXIsDebugBuildEnum = "false"
+
+export type SdkIdentifyParamsXObserverModeEnum = "false"
+
+export type SdkIdentifyParamsXPlatformFlavorEnum = "browser"
+
+export type SdkIdentifyParamsXSdkEnum = "web"
+
+export interface SdkIdentifyParams {
+  readonly "x-distinct-id": string;
+  readonly "x-publishable-key": string;
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | null | undefined;
+  readonly "x-client-version"?: string | null | undefined;
+  readonly "x-is-backgrounded": SdkIdentifyParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkIdentifyParamsXIsDebugBuildEnum | SdkIdentifyParamsXIsDebugBuildEnum;
+  readonly "x-nonce"?: string | null | undefined;
+  readonly "x-observer-mode": SdkIdentifyParamsXObserverModeEnum | SdkIdentifyParamsXObserverModeEnum;
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | null | undefined;
+  readonly "x-platform-device"?: string | null | undefined;
+  readonly "x-platform-flavor": SdkIdentifyParamsXPlatformFlavorEnum | SdkIdentifyParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor-version"?: string | null | undefined;
+  readonly "x-platform-version"?: string | null | undefined;
+  readonly "x-preferred-locales"?: string | null | undefined;
+  readonly "x-sdk": SdkIdentifyParamsXSdkEnum | SdkIdentifyParamsXSdkEnum;
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | null | undefined
+}
+
+export interface SdkIdentifyBody {
+  readonly "distinctId": string;
+  readonly "email"?: string | null | undefined;
+  readonly "name"?: string | null | undefined;
+  readonly "traits"?: Record<string, unknown> | null | undefined
+}
+
+export type SdkIdentify400 = SdkValidationError | EffectHttpApiSchemaError
+
+export type SdkCustomerAlreadyIdentifiedErrorTag = "SdkCustomerAlreadyIdentifiedError"
+
+export interface SdkCustomerAlreadyIdentifiedError {
+  readonly "_tag": SdkCustomerAlreadyIdentifiedErrorTag;
+  readonly "distinctId": string
+}
+
+export type SdkIdentify500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+
+export type SdkSyncCustomerAttributesParamsXIsBackgrounded = "false"
+
+export type SdkSyncCustomerAttributesParamsXIsDebugBuildEnum = "false"
+
+export type SdkSyncCustomerAttributesParamsXObserverModeEnum = "false"
+
+export type SdkSyncCustomerAttributesParamsXPlatformFlavorEnum = "browser"
+
+export type SdkSyncCustomerAttributesParamsXSdkEnum = "web"
+
+export interface SdkSyncCustomerAttributesParams {
+  readonly "x-distinct-id": string;
+  readonly "x-publishable-key": string;
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | null | undefined;
+  readonly "x-client-version"?: string | null | undefined;
+  readonly "x-is-backgrounded": SdkSyncCustomerAttributesParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkSyncCustomerAttributesParamsXIsDebugBuildEnum | SdkSyncCustomerAttributesParamsXIsDebugBuildEnum;
+  readonly "x-nonce"?: string | null | undefined;
+  readonly "x-observer-mode": SdkSyncCustomerAttributesParamsXObserverModeEnum | SdkSyncCustomerAttributesParamsXObserverModeEnum;
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | null | undefined;
+  readonly "x-platform-device"?: string | null | undefined;
+  readonly "x-platform-flavor": SdkSyncCustomerAttributesParamsXPlatformFlavorEnum | SdkSyncCustomerAttributesParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor-version"?: string | null | undefined;
+  readonly "x-platform-version"?: string | null | undefined;
+  readonly "x-preferred-locales"?: string | null | undefined;
+  readonly "x-sdk": SdkSyncCustomerAttributesParamsXSdkEnum | SdkSyncCustomerAttributesParamsXSdkEnum;
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | null | undefined
+}
+
+export interface SdkSyncCustomerAttributesBody {
+  readonly "email"?: string | null | undefined;
+  readonly "name"?: string | null | undefined;
+  readonly "traits"?: Record<string, unknown> | null | undefined
+}
+
+export type SdkSyncCustomerAttributes400 = SdkValidationError | EffectHttpApiSchemaError
+
+export type SdkSyncCustomerAttributes500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+
+export type SdkSyncTransactionParamsXIsBackgrounded = "false"
+
+export type SdkSyncTransactionParamsXIsDebugBuildEnum = "false"
+
+export type SdkSyncTransactionParamsXObserverModeEnum = "false"
+
+export type SdkSyncTransactionParamsXPlatformFlavorEnum = "browser"
+
+export type SdkSyncTransactionParamsXSdkEnum = "web"
+
+export interface SdkSyncTransactionParams {
+  readonly "x-distinct-id": string;
+  readonly "x-publishable-key": string;
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | null | undefined;
+  readonly "x-client-version"?: string | null | undefined;
+  readonly "x-is-backgrounded": SdkSyncTransactionParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkSyncTransactionParamsXIsDebugBuildEnum | SdkSyncTransactionParamsXIsDebugBuildEnum;
+  readonly "x-nonce"?: string | null | undefined;
+  readonly "x-observer-mode": SdkSyncTransactionParamsXObserverModeEnum | SdkSyncTransactionParamsXObserverModeEnum;
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | null | undefined;
+  readonly "x-platform-device"?: string | null | undefined;
+  readonly "x-platform-flavor": SdkSyncTransactionParamsXPlatformFlavorEnum | SdkSyncTransactionParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor-version"?: string | null | undefined;
+  readonly "x-platform-version"?: string | null | undefined;
+  readonly "x-preferred-locales"?: string | null | undefined;
+  readonly "x-sdk": SdkSyncTransactionParamsXSdkEnum | SdkSyncTransactionParamsXSdkEnum;
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | null | undefined
+}
+
+export type SdkSyncTransactionRequestPlatformEnum = "android"
+
+export type SdkSyncTransactionRequestPurchaseDateEnum = "-Infinity"
+
+export type SdkSyncTransactionRequestQuantityEnum = "-Infinity"
+
+export interface SdkSyncTransactionRequest {
+  readonly "platform": SdkSyncTransactionRequestPlatformEnum | SdkSyncTransactionRequestPlatformEnum;
+  readonly "productId": string;
+  readonly "purchaseDate": number | SdkSyncTransactionRequestPurchaseDateEnum | SdkSyncTransactionRequestPurchaseDateEnum | SdkSyncTransactionRequestPurchaseDateEnum;
+  readonly "purchaseToken"?: string | null | undefined;
+  readonly "quantity": number | SdkSyncTransactionRequestQuantityEnum | SdkSyncTransactionRequestQuantityEnum | SdkSyncTransactionRequestQuantityEnum;
+  readonly "receipt"?: string | null | undefined;
+  readonly "transactionId": string
+}
+
+export interface SdkSyncTransactionResponse {
+  readonly "accepted": boolean
+}
+
+export type SdkSyncTransaction400 = SdkValidationError | EffectHttpApiSchemaError
+
+export type SdkSyncTransaction500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+
+export type SdkEvaluateFeatureFlagsParamsXIsBackgrounded = "false"
+
+export type SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum = "false"
+
+export type SdkEvaluateFeatureFlagsParamsXObserverModeEnum = "false"
+
+export type SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum = "browser"
+
+export type SdkEvaluateFeatureFlagsParamsXSdkEnum = "web"
+
+export interface SdkEvaluateFeatureFlagsParams {
+  readonly "x-distinct-id": string;
+  readonly "x-publishable-key": string;
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | null | undefined;
+  readonly "x-client-version"?: string | null | undefined;
+  readonly "x-is-backgrounded": SdkEvaluateFeatureFlagsParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum | SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum;
+  readonly "x-nonce"?: string | null | undefined;
+  readonly "x-observer-mode": SdkEvaluateFeatureFlagsParamsXObserverModeEnum | SdkEvaluateFeatureFlagsParamsXObserverModeEnum;
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | null | undefined;
+  readonly "x-platform-device"?: string | null | undefined;
+  readonly "x-platform-flavor": SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum | SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor-version"?: string | null | undefined;
+  readonly "x-platform-version"?: string | null | undefined;
+  readonly "x-preferred-locales"?: string | null | undefined;
+  readonly "x-sdk": SdkEvaluateFeatureFlagsParamsXSdkEnum | SdkEvaluateFeatureFlagsParamsXSdkEnum;
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | null | undefined
+}
+
+export interface EvaluateFeatureFlagsBody {
+  readonly "flagKeys"?: ReadonlyArray<string> | null | undefined
+}
+
+export interface SdkFeatureFlagResult {
+  readonly "enabled": boolean;
+  readonly "key": string;
+  readonly "variantKey": string | null
+}
+
+export interface SdkFeatureFlagsResponse {
+  readonly "flags": ReadonlyArray<SdkFeatureFlagResult>
+}
+
+export type SdkEvaluateFeatureFlags500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+
+export type SdkResolvePaywallParamsXIsBackgrounded = "false"
+
+export type SdkResolvePaywallParamsXIsDebugBuildEnum = "false"
+
+export type SdkResolvePaywallParamsXObserverModeEnum = "false"
+
+export type SdkResolvePaywallParamsXPlatformFlavorEnum = "browser"
+
+export type SdkResolvePaywallParamsXSdkEnum = "web"
+
+export interface SdkResolvePaywallParams {
+  readonly "x-distinct-id": string;
+  readonly "x-publishable-key": string;
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | null | undefined;
+  readonly "x-client-version"?: string | null | undefined;
+  readonly "x-is-backgrounded": SdkResolvePaywallParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkResolvePaywallParamsXIsDebugBuildEnum | SdkResolvePaywallParamsXIsDebugBuildEnum;
+  readonly "x-nonce"?: string | null | undefined;
+  readonly "x-observer-mode": SdkResolvePaywallParamsXObserverModeEnum | SdkResolvePaywallParamsXObserverModeEnum;
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | null | undefined;
+  readonly "x-platform-device"?: string | null | undefined;
+  readonly "x-platform-flavor": SdkResolvePaywallParamsXPlatformFlavorEnum | SdkResolvePaywallParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor-version"?: string | null | undefined;
+  readonly "x-platform-version"?: string | null | undefined;
+  readonly "x-preferred-locales"?: string | null | undefined;
+  readonly "x-sdk": SdkResolvePaywallParamsXSdkEnum | SdkResolvePaywallParamsXSdkEnum;
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | null | undefined
+}
+
+export interface SdkResolvePaywallBody {
+  readonly "locationSlug": string
+}
+
+export type SdkResolvedPaywallShowingPaywallReleaseEnumVersionEnum = "-Infinity"
+
+export type SdkResolvedPaywallShowingTypeEnum = "feature_flag"
+
+export interface SdkResolvedPaywallShowing {
+  readonly "id": string;
+  readonly "paywall": {
+  readonly "id": string;
+  readonly "name": string;
+  readonly "slug": string
+} | null;
+  readonly "paywallId": string | null;
+  readonly "paywallRelease": {
+  readonly "htmlUrl": string;
+  readonly "publishedAt": string | null;
+  readonly "releaseId": string;
+  readonly "version": number | "NaN" | "Infinity" | "-Infinity"
+} | null;
+  readonly "paywallReleaseId": string | null;
+  readonly "startedAt": string;
+  readonly "type": SdkResolvedPaywallShowingTypeEnum | SdkResolvedPaywallShowingTypeEnum
+}
+
+export interface SdkResolvedPaywall {
+  readonly "location": {
+  readonly "id": string;
+  readonly "name": string;
+  readonly "slug": string
+};
+  readonly "showing": SdkResolvedPaywallShowing
+}
+
+export type SdkResolvePaywall200 = SdkResolvedPaywall | null
+
+export type SdkResolvePaywall400 = SdkValidationError | EffectHttpApiSchemaError
+
+export type SdkResolvePaywall500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface User {
+  readonly "createdAt": string;
+  readonly "email": string;
+  readonly "emailVerified": boolean;
+  readonly "id": string;
+  readonly "image": string | null;
+  readonly "name": string;
+  readonly "organizations": ReadonlyArray<{
+  readonly "id": string;
+  readonly "logo": string | null;
+  readonly "name": string;
+  readonly "slug": string
+}>;
+  readonly "projects": ReadonlyArray<{
+  readonly "id": string;
+  readonly "logo": string | null;
+  readonly "name": string;
+  readonly "organizationId": string;
+  readonly "slug": string
+}>;
+  readonly "updatedAt": string
+}
+
+export type UserServiceErrorTag = "UserServiceError"
+
+export interface UserServiceError {
+  readonly "_tag": UserServiceErrorTag;
+  readonly "cause": string
+}
+
+export type UsersGetUser500 = AuthenticationError | UserServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface PaymentProviderConfiguration {
+  readonly "enabled": boolean;
+  readonly "id": string;
+  readonly "name": string;
+  readonly "projectId": string;
+  readonly "providerId": string
+}
+
+export type PaymentProviderConfigurationsListPaymentProviderConfigurations200 = ReadonlyArray<PaymentProviderConfiguration>
+
+export type PaymentProviderConfigurationServiceErrorTag = "PaymentProviderConfigurationServiceError"
+
+export interface PaymentProviderConfigurationServiceError {
+  readonly "_tag": PaymentProviderConfigurationServiceErrorTag;
+  readonly "cause": string
+}
+
+export type PaymentProviderConfigurationsListPaymentProviderConfigurations500 = PaymentProviderConfigurationServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface PaymentProviderProduct {
+  readonly "configuration": Record<string, unknown>;
+  readonly "id": string;
+  readonly "paymentProviderConfigurationId": string;
+  readonly "productId": string;
+  readonly "providerId": string
+}
+
+export type PaymentProviderProductsListPaymentProviderProducts200 = ReadonlyArray<PaymentProviderProduct>
+
+export type PaymentProviderProductServiceErrorTag = "PaymentProviderProductServiceError"
+
+export interface PaymentProviderProductServiceError {
+  readonly "_tag": PaymentProviderProductServiceErrorTag;
+  readonly "cause": string
+}
+
+export type PaymentProviderProductsListPaymentProviderProducts500 = PaymentProviderProductServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface DeployChangesetBody {
+  readonly "changeset": {
+  readonly "changes": ReadonlyArray<{
+  readonly "changeType": "create-paywall-location";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "description"?: string | null | null | undefined;
+  readonly "name": string;
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "update-paywall-location";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "description"?: string | null | null | undefined;
+  readonly "name": string;
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "archive-paywall-location";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "create-perk";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "name": string;
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "update-perk";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "name": string;
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "delete-perk";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "create-product";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "name": string;
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "update-product";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "name": string;
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "delete-product";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "slug": string
+}
+} | {
+  readonly "changeType": "create-product-perk";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "perkSlug": string;
+  readonly "productSlug": string
+}
+} | {
+  readonly "changeType": "delete-product-perk";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "perkSlug": string;
+  readonly "productSlug": string
+}
+} | {
+  readonly "changeType": "create-payment-provider-product";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "configuration": Record<string, unknown>;
+  readonly "productSlug": string;
+  readonly "providerId": string
+}
+} | {
+  readonly "changeType": "update-payment-provider-product";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "configuration": Record<string, unknown>;
+  readonly "productSlug": string;
+  readonly "providerId": string
+}
+} | {
+  readonly "changeType": "delete-payment-provider-product";
+  readonly "key": string;
+  readonly "payload": {
+  readonly "productSlug": string;
+  readonly "providerId": string
+}
+}>
+}
+}
+
+export interface DeployChangesetResponse {
+  readonly "deploymentId": string
+}
+
+export type ChangesetDeploymentServiceErrorTag = "ChangesetDeploymentServiceError"
+
+export interface ChangesetDeploymentServiceError {
+  readonly "_tag": ChangesetDeploymentServiceErrorTag;
+  readonly "cause": null
+}
+
+export type ChangesetsDeployChangeset500 = AuthenticationError | ChangesetDeploymentServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhookEndpointConsecutiveFailuresEnum = "-Infinity"
+
+export type WebhookEndpointStatusEnum = "failed"
+
+export interface WebhookEndpoint {
+  readonly "consecutiveFailures": number | WebhookEndpointConsecutiveFailuresEnum | WebhookEndpointConsecutiveFailuresEnum | WebhookEndpointConsecutiveFailuresEnum;
+  readonly "createdAt": string | null;
+  readonly "description": string | null;
+  readonly "events": ReadonlyArray<"customer.created" | "customer.updated" | "customer.deleted" | "subscription.created" | "subscription.renewed" | "subscription.cancelled" | "subscription.expired" | "purchase.completed" | "purchase.refunded">;
+  readonly "id": string;
+  readonly "lastSuccessAt": string | null;
+  readonly "name": string;
+  readonly "projectId": string;
+  readonly "secret": string;
+  readonly "status": WebhookEndpointStatusEnum | WebhookEndpointStatusEnum | WebhookEndpointStatusEnum;
+  readonly "url": string
+}
+
+export type WebhooksListWebhookEndpoints200 = ReadonlyArray<WebhookEndpoint>
+
+export type WebhookServiceErrorTag = "WebhookServiceError"
+
+export interface WebhookServiceError {
+  readonly "_tag": WebhookServiceErrorTag;
+  readonly "cause": string
+}
+
+export type WebhooksListWebhookEndpoints500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export interface CreateWebhookEndpointBody {
+  readonly "description"?: string | null | undefined;
+  readonly "events": ReadonlyArray<string>;
+  readonly "name": string;
+  readonly "url": string
+}
+
+export type WebhookValidationErrorTag = "WebhookValidationError"
+
+export interface WebhookValidationError {
+  readonly "_tag": WebhookValidationErrorTag;
+  readonly "message": string
+}
+
+export type WebhooksCreateWebhookEndpoint400 = WebhookValidationError | EffectHttpApiSchemaError
+
+export type WebhooksCreateWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhookEndpointNotFoundErrorTag = "WebhookEndpointNotFoundError"
+
+export interface WebhookEndpointNotFoundError {
+  readonly "_tag": WebhookEndpointNotFoundErrorTag;
+  readonly "endpointId": string
+}
+
+export type WebhooksGetWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhooksDeleteWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type UpdateWebhookEndpointBodyStatusEnum = "disabled"
+
+export interface UpdateWebhookEndpointBody {
+  readonly "description"?: string | null | null | undefined;
+  readonly "events"?: ReadonlyArray<string> | null | undefined;
+  readonly "name"?: string | null | undefined;
+  readonly "status"?: UpdateWebhookEndpointBodyStatusEnum | UpdateWebhookEndpointBodyStatusEnum | null | undefined;
+  readonly "url"?: string | null | undefined
+}
+
+export type WebhooksUpdateWebhookEndpoint400 = WebhookValidationError | EffectHttpApiSchemaError
+
+export type WebhooksUpdateWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhooksRotateWebhookSecret500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhookDeliveryAttemptCountEnum = "-Infinity"
+
+export type WebhookDeliveryMaxAttemptsEnum = "-Infinity"
+
+export type WebhookDeliveryStatusEnum = "exhausted"
+
+export interface WebhookDelivery {
+  readonly "attemptCount": number | WebhookDeliveryAttemptCountEnum | WebhookDeliveryAttemptCountEnum | WebhookDeliveryAttemptCountEnum;
+  readonly "completedAt": string | null;
+  readonly "createdAt": string | null;
+  readonly "eventOccurredAt": string;
+  readonly "eventType": string;
+  readonly "id": string;
+  readonly "maxAttempts": number | WebhookDeliveryMaxAttemptsEnum | WebhookDeliveryMaxAttemptsEnum | WebhookDeliveryMaxAttemptsEnum;
+  readonly "nextAttemptAt": string | null;
+  readonly "payload": null;
+  readonly "projectId": string;
+  readonly "status": WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum;
+  readonly "webhookEndpointId": string
+}
+
+export type WebhooksTestWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhooksListWebhookDeliveries200 = ReadonlyArray<WebhookDelivery>
+
+export type WebhooksListWebhookDeliveries500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhookDeliveryWithAttemptsAttemptCountEnum = "-Infinity"
+
+export type WebhookDeliveryAttemptAttemptNumberEnum = "-Infinity"
+
+export type WebhookDeliveryAttemptDurationMsEnum = "-Infinity"
+
+export type WebhookDeliveryAttemptStatusCodeEnum = "-Infinity"
+
+export interface WebhookDeliveryAttempt {
+  readonly "attemptNumber": number | WebhookDeliveryAttemptAttemptNumberEnum | WebhookDeliveryAttemptAttemptNumberEnum | WebhookDeliveryAttemptAttemptNumberEnum;
+  readonly "createdAt": string | null;
+  readonly "durationMs": number | WebhookDeliveryAttemptDurationMsEnum | WebhookDeliveryAttemptDurationMsEnum | WebhookDeliveryAttemptDurationMsEnum | null;
+  readonly "errorMessage": string | null;
+  readonly "id": string;
+  readonly "responseBody": string | null;
+  readonly "statusCode": number | WebhookDeliveryAttemptStatusCodeEnum | WebhookDeliveryAttemptStatusCodeEnum | WebhookDeliveryAttemptStatusCodeEnum | null;
+  readonly "succeeded": boolean
+}
+
+export type WebhookDeliveryWithAttemptsMaxAttemptsEnum = "-Infinity"
+
+export type WebhookDeliveryWithAttemptsStatusEnum = "exhausted"
+
+export interface WebhookDeliveryWithAttempts {
+  readonly "attemptCount": number | WebhookDeliveryWithAttemptsAttemptCountEnum | WebhookDeliveryWithAttemptsAttemptCountEnum | WebhookDeliveryWithAttemptsAttemptCountEnum;
+  readonly "attempts": ReadonlyArray<WebhookDeliveryAttempt>;
+  readonly "completedAt": string | null;
+  readonly "createdAt": string | null;
+  readonly "eventOccurredAt": string;
+  readonly "eventType": string;
+  readonly "id": string;
+  readonly "maxAttempts": number | WebhookDeliveryWithAttemptsMaxAttemptsEnum | WebhookDeliveryWithAttemptsMaxAttemptsEnum | WebhookDeliveryWithAttemptsMaxAttemptsEnum;
+  readonly "nextAttemptAt": string | null;
+  readonly "payload": null;
+  readonly "projectId": string;
+  readonly "status": WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum;
+  readonly "webhookEndpointId": string
+}
+
+export type WebhookDeliveryNotFoundErrorTag = "WebhookDeliveryNotFoundError"
+
+export interface WebhookDeliveryNotFoundError {
+  readonly "_tag": WebhookDeliveryNotFoundErrorTag;
+  readonly "deliveryId": string
+}
+
+export type WebhooksGetWebhookDelivery500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export type WebhooksRetryWebhookDelivery400 = WebhookValidationError | EffectHttpApiSchemaError
+
+export type WebhooksRetryWebhookDelivery500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+
+export const make = (
+  httpClient: HttpClient.HttpClient, 
+  options: {
+    readonly transformClient?: ((client: HttpClient.HttpClient) => Effect.Effect<HttpClient.HttpClient>) | undefined
+  } = {}
+): VoidhashCoreClient => {
+  const unexpectedStatus = (response: HttpClientResponse.HttpClientResponse) =>
+    Effect.flatMap(
+      Effect.orElseSucceed(response.json, () => "Unexpected status code"),
+      (description) =>
+        Effect.fail(
+          new HttpClientError.HttpClientError({
+            reason: new HttpClientError.StatusCodeError({
+              request: response.request,
+              response,
+              description:
+                typeof description === "string"
+                  ? description
+                  : JSON.stringify(description),
+            }),
+          }),
+        ),
+    )
+  const withResponse: <A, E>(
+    f: (response: HttpClientResponse.HttpClientResponse) => Effect.Effect<A, E>,
+  ) => (
+    request: HttpClientRequest.HttpClientRequest,
+  ) => Effect.Effect<any, any> = options.transformClient
+    ? (f) => (request) =>
+        Effect.flatMap(
+          Effect.flatMap(options.transformClient!(httpClient), (client) =>
+            client.execute(request),
+          ),
+          f,
+        )
+    : (f) => (request) => Effect.flatMap(httpClient.execute(request), f)
+  const decodeSuccess = <A>(response: HttpClientResponse.HttpClientResponse) =>
+    response.json as Effect.Effect<A, HttpClientError.HttpClientError>
+  const decodeVoid = (_response: HttpClientResponse.HttpClientResponse) =>
+    Effect.void
+  const decodeError =
+    <Tag extends string, E>(tag: Tag) =>
+    (
+      response: HttpClientResponse.HttpClientResponse,
+    ): Effect.Effect<
+      never,
+      VoidhashCoreClientError<Tag, E> | HttpClientError.HttpClientError
+    > =>
+      Effect.flatMap(
+        response.json as Effect.Effect<E, HttpClientError.HttpClientError>,
+        (cause) => Effect.fail(VoidhashCoreClientError(tag, cause, response)),
+      )
+  const onRequest = (
+    successCodes: ReadonlyArray<string>,
+    errorCodes?: Record<string, string>,
+  ) => {
+    const cases: any = { orElse: unexpectedStatus }
+    for (const code of successCodes) {
+      cases[code] = decodeSuccess
+    }
+    if (errorCodes) {
+      for (const [code, tag] of Object.entries(errorCodes)) {
+        cases[code] = decodeError(tag)
+      }
+    }
+    if (successCodes.length === 0) {
+      cases["2xx"] = decodeVoid
+    }
+    return withResponse(HttpClientResponse.matchStatus(cases) as any)
+  }
+  return {
+    httpClient,
+    "authSession": () => HttpClientRequest.get(`/api/v1/auth/session`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"AuthSession500"})
+  ),
+  "apiKeysListApiKeys": () => HttpClientRequest.get(`/api/v1/api-keys`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ApiKeysListApiKeys500"})
+  ),
+  "apiKeysCreateSecretKey": (options) => HttpClientRequest.post(`/api/v1/api-keys`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ApiKeysCreateSecretKey500"})
+  ),
+  "apiKeysGetApiKeyById": (apiKeyId) => HttpClientRequest.get(`/api/v1/api-keys/${apiKeyId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"ApiKeyNotFoundError","500":"ApiKeysGetApiKeyById500"})
+  ),
+  "apiKeysDeleteApiKey": (apiKeyId) => HttpClientRequest.delete(`/api/v1/api-keys/${apiKeyId}`).pipe(
+    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"ApiKeyNotFoundError","500":"ApiKeysDeleteApiKey500"})
+  ),
+  "apiKeysRotateSecretKey": (apiKeyId) => HttpClientRequest.post(`/api/v1/api-keys/${apiKeyId}/rotate`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"ApiKeyNotFoundError","500":"ApiKeysRotateSecretKey500"})
+  ),
+  "customersListCustomers": () => HttpClientRequest.get(`/api/v1/customers`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"CustomersListCustomers500"})
+  ),
+  "customersCreateCustomer": (options) => HttpClientRequest.post(`/api/v1/customers`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"CustomersCreateCustomer400","403":"ActionForbiddenError","500":"CustomersCreateCustomer500"})
+  ),
+  "customersGetCustomerById": (customerId) => HttpClientRequest.get(`/api/v1/customers/${customerId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"CustomerNotFoundError","500":"CustomersGetCustomerById500"})
+  ),
+  "customersByDistinctId": (distinctId) => HttpClientRequest.get(`/api/v1/customers/by-distinct-id/${distinctId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"CustomerNotFoundError","500":"CustomersByDistinctId500"})
+  ),
+  "organizationsCreateOrganization": (options) => HttpClientRequest.post(`/api/v1/organizations`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"OrganizationsCreateOrganization500"})
+  ),
+  "perksListPerks": () => HttpClientRequest.get(`/api/v1/perks`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PerksListPerks500"})
+  ),
+  "paywallLocationsListPaywallLocations": () => HttpClientRequest.get(`/api/v1/paywall-locations`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PaywallLocationsListPaywallLocations500"})
+  ),
+  "projectsCreateProject": (options) => HttpClientRequest.post(`/api/v1/projects`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ProjectsCreateProject500"})
+  ),
+  "projectsListProjects": (organizationId) => HttpClientRequest.get(`/api/v1/projects/${organizationId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ProjectsListProjects500"})
+  ),
+  "productsListProducts": () => HttpClientRequest.get(`/api/v1/products`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ProductsListProducts500"})
+  ),
+  "productPerksListProductPerksByProductId": (productId) => HttpClientRequest.get(`/api/v1/product-perks/by-product-id/${productId}`).pipe(
+    onRequest(["2xx"], {"400":"ProductPerksListProductPerksByProductId400","403":"ActionForbiddenError","500":"ProductPerksListProductPerksByProductId500"})
+  ),
+  "sdkGetCustomer": (options) => HttpClientRequest.get(`/api/v1/sdk/get-customer`).pipe(
+    HttpClientRequest.setHeaders({ "x-distinct-id": options?.["x-distinct-id"] ?? undefined, "x-publishable-key": options?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options?.["x-client-locale"] ?? undefined, "x-client-version": options?.["x-client-version"] ?? undefined, "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined, "x-nonce": options?.["x-nonce"] ?? undefined, "x-observer-mode": options?.["x-observer-mode"] ?? undefined, "x-platform": options?.["x-platform"] ?? undefined, "x-platform-brand": options?.["x-platform-brand"] ?? undefined, "x-platform-device": options?.["x-platform-device"] ?? undefined, "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options?.["x-platform-version"] ?? undefined, "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined, "x-sdk": options?.["x-sdk"] ?? undefined, "x-sdk-version": options?.["x-sdk-version"] ?? undefined, "x-storefront": options?.["x-storefront"] ?? undefined }),
+    onRequest(["2xx"], {"400":"SdkGetCustomer400","404":"SdkCustomerNotFoundError","500":"SdkGetCustomer500"})
+  ),
+  "sdkIdentify": (options) => HttpClientRequest.post(`/api/v1/sdk/identify`).pipe(
+    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
+    HttpClientRequest.bodyJsonUnsafe(options.payload),
+    onRequest(["2xx"], {"400":"SdkIdentify400","409":"SdkCustomerAlreadyIdentifiedError","500":"SdkIdentify500"})
+  ),
+  "sdkSyncCustomerAttributes": (options) => HttpClientRequest.post(`/api/v1/sdk/sync-customer-attributes`).pipe(
+    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
+    HttpClientRequest.bodyJsonUnsafe(options.payload),
+    onRequest(["2xx"], {"400":"SdkSyncCustomerAttributes400","500":"SdkSyncCustomerAttributes500"})
+  ),
+  "sdkSyncTransaction": (options) => HttpClientRequest.post(`/api/v1/sdk/sync-transaction`).pipe(
+    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
+    HttpClientRequest.bodyJsonUnsafe(options.payload),
+    onRequest(["2xx"], {"400":"SdkSyncTransaction400","500":"SdkSyncTransaction500"})
+  ),
+  "sdkEvaluateFeatureFlags": (options) => HttpClientRequest.post(`/api/v1/sdk/evaluate-flags`).pipe(
+    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
+    HttpClientRequest.bodyJsonUnsafe(options.payload),
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"SdkEvaluateFeatureFlags500"})
+  ),
+  "sdkResolvePaywall": (options) => HttpClientRequest.post(`/api/v1/sdk/resolve-paywall`).pipe(
+    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
+    HttpClientRequest.bodyJsonUnsafe(options.payload),
+    onRequest(["2xx"], {"400":"SdkResolvePaywall400","500":"SdkResolvePaywall500"})
+  ),
+  "usersGetUser": () => HttpClientRequest.get(`/api/v1/users/current`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"UsersGetUser500"})
+  ),
+  "paymentProviderConfigurationsListPaymentProviderConfigurations": () => HttpClientRequest.get(`/api/v1/payment-provider-configurations`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PaymentProviderConfigurationsListPaymentProviderConfigurations500"})
+  ),
+  "paymentProviderProductsListPaymentProviderProducts": () => HttpClientRequest.get(`/api/v1/payment-provider-products`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PaymentProviderProductsListPaymentProviderProducts500"})
+  ),
+  "changesetsDeployChangeset": (options) => HttpClientRequest.post(`/api/v1/changesets/deploy`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ChangesetsDeployChangeset500"})
+  ),
+  "webhooksListWebhookEndpoints": () => HttpClientRequest.get(`/api/v1/webhooks/endpoints`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"WebhooksListWebhookEndpoints500"})
+  ),
+  "webhooksCreateWebhookEndpoint": (options) => HttpClientRequest.post(`/api/v1/webhooks/endpoints`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"WebhooksCreateWebhookEndpoint400","403":"ActionForbiddenError","500":"WebhooksCreateWebhookEndpoint500"})
+  ),
+  "webhooksGetWebhookEndpoint": (endpointId) => HttpClientRequest.get(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksGetWebhookEndpoint500"})
+  ),
+  "webhooksDeleteWebhookEndpoint": (endpointId) => HttpClientRequest.delete(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
+    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksDeleteWebhookEndpoint500"})
+  ),
+  "webhooksUpdateWebhookEndpoint": (endpointId, options) => HttpClientRequest.patch(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"WebhooksUpdateWebhookEndpoint400","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksUpdateWebhookEndpoint500"})
+  ),
+  "webhooksRotateWebhookSecret": (endpointId) => HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/rotate-secret`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksRotateWebhookSecret500"})
+  ),
+  "webhooksTestWebhookEndpoint": (endpointId) => HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/test`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksTestWebhookEndpoint500"})
+  ),
+  "webhooksListWebhookDeliveries": () => HttpClientRequest.get(`/api/v1/webhooks/deliveries`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"WebhooksListWebhookDeliveries500"})
+  ),
+  "webhooksGetWebhookDelivery": (deliveryId) => HttpClientRequest.get(`/api/v1/webhooks/deliveries/${deliveryId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookDeliveryNotFoundError","500":"WebhooksGetWebhookDelivery500"})
+  ),
+  "webhooksRetryWebhookDelivery": (deliveryId) => HttpClientRequest.post(`/api/v1/webhooks/deliveries/${deliveryId}/retry`).pipe(
+    onRequest(["2xx"], {"400":"WebhooksRetryWebhookDelivery400","403":"ActionForbiddenError","404":"WebhookDeliveryNotFoundError","500":"WebhooksRetryWebhookDelivery500"})
+  )
+  }
+}
+
+export interface VoidhashCoreClient {
+  readonly httpClient: HttpClient.HttpClient
+  readonly "authSession": () => Effect.Effect<AuthSession200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"AuthSession500", AuthSession500>>
+  readonly "apiKeysListApiKeys": () => Effect.Effect<ApiKeysListApiKeys200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeysListApiKeys500", ApiKeysListApiKeys500>>
+  readonly "apiKeysCreateSecretKey": (options: CreateSecretKeyBody) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeysCreateSecretKey500", ApiKeysCreateSecretKey500>>
+  readonly "apiKeysGetApiKeyById": (apiKeyId: string) => Effect.Effect<ApiKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysGetApiKeyById500", ApiKeysGetApiKeyById500>>
+  readonly "apiKeysDeleteApiKey": (apiKeyId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysDeleteApiKey500", ApiKeysDeleteApiKey500>>
+  readonly "apiKeysRotateSecretKey": (apiKeyId: string) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysRotateSecretKey500", ApiKeysRotateSecretKey500>>
+  readonly "customersListCustomers": () => Effect.Effect<CustomersListCustomers200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomersListCustomers500", CustomersListCustomers500>>
+  readonly "customersCreateCustomer": (options: CreateCustomerBody) => Effect.Effect<Customer, HttpClientError.HttpClientError | VoidhashCoreClientError<"CustomersCreateCustomer400", CustomersCreateCustomer400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomersCreateCustomer500", CustomersCreateCustomer500>>
+  readonly "customersGetCustomerById": (customerId: string) => Effect.Effect<Customer, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomerNotFoundError", CustomerNotFoundError> | VoidhashCoreClientError<"CustomersGetCustomerById500", CustomersGetCustomerById500>>
+  readonly "customersByDistinctId": (distinctId: string) => Effect.Effect<Customer, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomerNotFoundError", CustomerNotFoundError> | VoidhashCoreClientError<"CustomersByDistinctId500", CustomersByDistinctId500>>
+  readonly "organizationsCreateOrganization": (options: CreateOrganizationBody) => Effect.Effect<Organization, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"OrganizationsCreateOrganization500", OrganizationsCreateOrganization500>>
+  readonly "perksListPerks": () => Effect.Effect<PerksListPerks200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PerksListPerks500", PerksListPerks500>>
+  readonly "paywallLocationsListPaywallLocations": () => Effect.Effect<PaywallLocationsListPaywallLocations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PaywallLocationsListPaywallLocations500", PaywallLocationsListPaywallLocations500>>
+  readonly "projectsCreateProject": (options: CreateProjectBody) => Effect.Effect<Project, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProjectsCreateProject500", ProjectsCreateProject500>>
+  readonly "projectsListProjects": (organizationId: string) => Effect.Effect<ProjectsListProjects200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProjectsListProjects500", ProjectsListProjects500>>
+  readonly "productsListProducts": () => Effect.Effect<ProductsListProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProductsListProducts500", ProductsListProducts500>>
+  readonly "productPerksListProductPerksByProductId": (productId: string) => Effect.Effect<ProductPerksListProductPerksByProductId200, HttpClientError.HttpClientError | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId400", ProductPerksListProductPerksByProductId400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId500", ProductPerksListProductPerksByProductId500>>
+  readonly "sdkGetCustomer": (options: SdkGetCustomerParams) => Effect.Effect<SdkCustomer, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkGetCustomer400", SdkGetCustomer400> | VoidhashCoreClientError<"SdkCustomerNotFoundError", SdkCustomerNotFoundError> | VoidhashCoreClientError<"SdkGetCustomer500", SdkGetCustomer500>>
+  readonly "sdkIdentify": (options: { readonly params: SdkIdentifyParams; readonly payload: SdkIdentifyBody }) => Effect.Effect<SdkCustomer, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkIdentify400", SdkIdentify400> | VoidhashCoreClientError<"SdkCustomerAlreadyIdentifiedError", SdkCustomerAlreadyIdentifiedError> | VoidhashCoreClientError<"SdkIdentify500", SdkIdentify500>>
+  readonly "sdkSyncCustomerAttributes": (options: { readonly params: SdkSyncCustomerAttributesParams; readonly payload: SdkSyncCustomerAttributesBody }) => Effect.Effect<SdkCustomer, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncCustomerAttributes400", SdkSyncCustomerAttributes400> | VoidhashCoreClientError<"SdkSyncCustomerAttributes500", SdkSyncCustomerAttributes500>>
+  readonly "sdkSyncTransaction": (options: { readonly params: SdkSyncTransactionParams; readonly payload: SdkSyncTransactionRequest }) => Effect.Effect<SdkSyncTransactionResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncTransaction400", SdkSyncTransaction400> | VoidhashCoreClientError<"SdkSyncTransaction500", SdkSyncTransaction500>>
+  readonly "sdkEvaluateFeatureFlags": (options: { readonly params: SdkEvaluateFeatureFlagsParams; readonly payload: EvaluateFeatureFlagsBody }) => Effect.Effect<SdkFeatureFlagsResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"SdkEvaluateFeatureFlags500", SdkEvaluateFeatureFlags500>>
+  readonly "sdkResolvePaywall": (options: { readonly params: SdkResolvePaywallParams; readonly payload: SdkResolvePaywallBody }) => Effect.Effect<SdkResolvePaywall200, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkResolvePaywall400", SdkResolvePaywall400> | VoidhashCoreClientError<"SdkResolvePaywall500", SdkResolvePaywall500>>
+  readonly "usersGetUser": () => Effect.Effect<User, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"UsersGetUser500", UsersGetUser500>>
+  readonly "paymentProviderConfigurationsListPaymentProviderConfigurations": () => Effect.Effect<PaymentProviderConfigurationsListPaymentProviderConfigurations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderConfigurationsListPaymentProviderConfigurations500", PaymentProviderConfigurationsListPaymentProviderConfigurations500>>
+  readonly "paymentProviderProductsListPaymentProviderProducts": () => Effect.Effect<PaymentProviderProductsListPaymentProviderProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderProductsListPaymentProviderProducts500", PaymentProviderProductsListPaymentProviderProducts500>>
+  readonly "changesetsDeployChangeset": (options: DeployChangesetBody) => Effect.Effect<DeployChangesetResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ChangesetsDeployChangeset500", ChangesetsDeployChangeset500>>
+  readonly "webhooksListWebhookEndpoints": () => Effect.Effect<WebhooksListWebhookEndpoints200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookEndpoints500", WebhooksListWebhookEndpoints500>>
+  readonly "webhooksCreateWebhookEndpoint": (options: CreateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint400", WebhooksCreateWebhookEndpoint400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint500", WebhooksCreateWebhookEndpoint500>>
+  readonly "webhooksGetWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookEndpoint500", WebhooksGetWebhookEndpoint500>>
+  readonly "webhooksDeleteWebhookEndpoint": (endpointId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksDeleteWebhookEndpoint500", WebhooksDeleteWebhookEndpoint500>>
+  readonly "webhooksUpdateWebhookEndpoint": (endpointId: string, options: UpdateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint400", WebhooksUpdateWebhookEndpoint400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint500", WebhooksUpdateWebhookEndpoint500>>
+  readonly "webhooksRotateWebhookSecret": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksRotateWebhookSecret500", WebhooksRotateWebhookSecret500>>
+  readonly "webhooksTestWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksTestWebhookEndpoint500", WebhooksTestWebhookEndpoint500>>
+  readonly "webhooksListWebhookDeliveries": () => Effect.Effect<WebhooksListWebhookDeliveries200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookDeliveries500", WebhooksListWebhookDeliveries500>>
+  readonly "webhooksGetWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDeliveryWithAttempts, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookDeliveryNotFoundError", WebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookDelivery500", WebhooksGetWebhookDelivery500>>
+  readonly "webhooksRetryWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery400", WebhooksRetryWebhookDelivery400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookDeliveryNotFoundError", WebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery500", WebhooksRetryWebhookDelivery500>>
+}
+
+export interface VoidhashCoreClientError<Tag extends string, E> extends Error {
+  readonly _tag: Tag
+  readonly request: HttpClientRequest.HttpClientRequest
+  readonly response: HttpClientResponse.HttpClientResponse
+  readonly data: E
+  readonly message: string
+}
+
+class VoidhashCoreClientErrorImpl extends Data.Error<{
+  _tag: string
+  data: any
+  message: string
+  request: HttpClientRequest.HttpClientRequest
+  response: HttpClientResponse.HttpClientResponse
+}> {
+  name = "VoidhashCoreClientError"
+}
+
+export const VoidhashCoreClientError = <Tag extends string, E>(
+  tag: Tag,
+  data: E,
+  response: HttpClientResponse.HttpClientResponse,
+): VoidhashCoreClientError<Tag, E> =>
+  new VoidhashCoreClientErrorImpl({
+    _tag: tag,
+    data,
+    message: JSON.stringify(data),
+    response,
+    request: response.request,
+  }) as any
diff --git a/packages/generated-clients/src/core/index.ts b/packages/generated-clients/src/core/index.ts
new file mode 100644
index 000000000..e84c86c64
--- /dev/null
+++ b/packages/generated-clients/src/core/index.ts
@@ -0,0 +1 @@
+export * from "./generated";
diff --git a/packages/generated-clients/src/event-capture/generated.ts b/packages/generated-clients/src/event-capture/generated.ts
new file mode 100644
index 000000000..bc2ad26e8
--- /dev/null
+++ b/packages/generated-clients/src/event-capture/generated.ts
@@ -0,0 +1,229 @@
+import type * as HttpClient from "effect/unstable/http/HttpClient"
+import * as HttpClientError from "effect/unstable/http/HttpClientError"
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest"
+import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse"
+import * as Data from "effect/Data"
+import * as Effect from "effect/Effect"
+
+export interface EventCaptureCaptureRequest {
+  readonly "uuid": string;
+  readonly "event": string;
+  readonly "context": Record<string, unknown>;
+  readonly "properties": Record<string, unknown>;
+  readonly "distinct_id": string;
+  readonly "session_id"?: string | null | undefined;
+  readonly "timestamp"?: string | null | undefined;
+  readonly "sent_at": string;
+  readonly "token": string
+}
+
+export interface CaptureAcceptedResponse {
+  readonly "accepted": number;
+  readonly "rejected": number
+}
+
+export type CaptureInvalidRequestErrorTag = "CaptureInvalidRequestError"
+
+export type CaptureInvalidRequestErrorCode = "invalid_request"
+
+export interface CaptureInvalidRequestError {
+  readonly "_tag": CaptureInvalidRequestErrorTag;
+  readonly "error": string;
+  readonly "code": CaptureInvalidRequestErrorCode
+}
+
+export type EffectHttpApiSchemaErrorTag = "HttpApiSchemaError"
+
+export interface EffectHttpApiSchemaError {
+  readonly "_tag": EffectHttpApiSchemaErrorTag;
+  readonly "message": string
+}
+
+export type EventCaptureCapture400 = CaptureInvalidRequestError | EffectHttpApiSchemaError
+
+export type CaptureUnauthorizedErrorTag = "CaptureUnauthorizedError"
+
+export type CaptureUnauthorizedErrorCode = "unauthorized"
+
+export interface CaptureUnauthorizedError {
+  readonly "_tag": CaptureUnauthorizedErrorTag;
+  readonly "error": string;
+  readonly "code": CaptureUnauthorizedErrorCode
+}
+
+export type CapturePayloadTooLargeErrorTag = "CapturePayloadTooLargeError"
+
+export type CapturePayloadTooLargeErrorCode = "payload_too_large"
+
+export interface CapturePayloadTooLargeError {
+  readonly "_tag": CapturePayloadTooLargeErrorTag;
+  readonly "error": string;
+  readonly "code": CapturePayloadTooLargeErrorCode
+}
+
+export type CaptureRateLimitedErrorTag = "CaptureRateLimitedError"
+
+export type CaptureRateLimitedErrorCode = "rate_limited"
+
+export interface CaptureRateLimitedError {
+  readonly "_tag": CaptureRateLimitedErrorTag;
+  readonly "error": string;
+  readonly "code": CaptureRateLimitedErrorCode;
+  readonly "retry_after_ms"?: number | null | undefined
+}
+
+export type CaptureInternalServerErrorTag = "CaptureInternalServerError"
+
+export type CaptureInternalServerErrorCode = "internal_error"
+
+export interface CaptureInternalServerError {
+  readonly "_tag": CaptureInternalServerErrorTag;
+  readonly "error": string;
+  readonly "code": CaptureInternalServerErrorCode
+}
+
+export type CaptureDependencyUnavailableErrorTag = "CaptureDependencyUnavailableError"
+
+export type CaptureDependencyUnavailableErrorCode = "dependency_unavailable"
+
+export interface CaptureDependencyUnavailableError {
+  readonly "_tag": CaptureDependencyUnavailableErrorTag;
+  readonly "error": string;
+  readonly "code": CaptureDependencyUnavailableErrorCode
+}
+
+export interface EventCaptureBatchRequest {
+  readonly "events": ReadonlyArray<{
+  readonly "uuid": string;
+  readonly "event": string;
+  readonly "context": Record<string, unknown>;
+  readonly "properties": Record<string, unknown>;
+  readonly "distinct_id": string;
+  readonly "session_id"?: string | null | undefined;
+  readonly "timestamp"?: string | null | undefined
+}>;
+  readonly "sent_at": string;
+  readonly "token": string
+}
+
+export type EventCaptureBatch400 = CaptureInvalidRequestError | EffectHttpApiSchemaError
+
+export const make = (
+  httpClient: HttpClient.HttpClient, 
+  options: {
+    readonly transformClient?: ((client: HttpClient.HttpClient) => Effect.Effect<HttpClient.HttpClient>) | undefined
+  } = {}
+): VoidhashEventCaptureClient => {
+  const unexpectedStatus = (response: HttpClientResponse.HttpClientResponse) =>
+    Effect.flatMap(
+      Effect.orElseSucceed(response.json, () => "Unexpected status code"),
+      (description) =>
+        Effect.fail(
+          new HttpClientError.HttpClientError({
+            reason: new HttpClientError.StatusCodeError({
+              request: response.request,
+              response,
+              description:
+                typeof description === "string"
+                  ? description
+                  : JSON.stringify(description),
+            }),
+          }),
+        ),
+    )
+  const withResponse: <A, E>(
+    f: (response: HttpClientResponse.HttpClientResponse) => Effect.Effect<A, E>,
+  ) => (
+    request: HttpClientRequest.HttpClientRequest,
+  ) => Effect.Effect<any, any> = options.transformClient
+    ? (f) => (request) =>
+        Effect.flatMap(
+          Effect.flatMap(options.transformClient!(httpClient), (client) =>
+            client.execute(request),
+          ),
+          f,
+        )
+    : (f) => (request) => Effect.flatMap(httpClient.execute(request), f)
+  const decodeSuccess = <A>(response: HttpClientResponse.HttpClientResponse) =>
+    response.json as Effect.Effect<A, HttpClientError.HttpClientError>
+  const decodeVoid = (_response: HttpClientResponse.HttpClientResponse) =>
+    Effect.void
+  const decodeError =
+    <Tag extends string, E>(tag: Tag) =>
+    (
+      response: HttpClientResponse.HttpClientResponse,
+    ): Effect.Effect<
+      never,
+      VoidhashEventCaptureClientError<Tag, E> | HttpClientError.HttpClientError
+    > =>
+      Effect.flatMap(
+        response.json as Effect.Effect<E, HttpClientError.HttpClientError>,
+        (cause) => Effect.fail(VoidhashEventCaptureClientError(tag, cause, response)),
+      )
+  const onRequest = (
+    successCodes: ReadonlyArray<string>,
+    errorCodes?: Record<string, string>,
+  ) => {
+    const cases: any = { orElse: unexpectedStatus }
+    for (const code of successCodes) {
+      cases[code] = decodeSuccess
+    }
+    if (errorCodes) {
+      for (const [code, tag] of Object.entries(errorCodes)) {
+        cases[code] = decodeError(tag)
+      }
+    }
+    if (successCodes.length === 0) {
+      cases["2xx"] = decodeVoid
+    }
+    return withResponse(HttpClientResponse.matchStatus(cases) as any)
+  }
+  return {
+    httpClient,
+    "eventCaptureCapture": (options) => HttpClientRequest.post(`/capture`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"EventCaptureCapture400","401":"CaptureUnauthorizedError","413":"CapturePayloadTooLargeError","429":"CaptureRateLimitedError","500":"CaptureInternalServerError","503":"CaptureDependencyUnavailableError"})
+  ),
+  "eventCaptureBatch": (options) => HttpClientRequest.post(`/batch`).pipe(
+    HttpClientRequest.bodyJsonUnsafe(options),
+    onRequest(["2xx"], {"400":"EventCaptureBatch400","401":"CaptureUnauthorizedError","413":"CapturePayloadTooLargeError","429":"CaptureRateLimitedError","500":"CaptureInternalServerError","503":"CaptureDependencyUnavailableError"})
+  )
+  }
+}
+
+export interface VoidhashEventCaptureClient {
+  readonly httpClient: HttpClient.HttpClient
+  readonly "eventCaptureCapture": (options: EventCaptureCaptureRequest) => Effect.Effect<CaptureAcceptedResponse, HttpClientError.HttpClientError | VoidhashEventCaptureClientError<"EventCaptureCapture400", EventCaptureCapture400> | VoidhashEventCaptureClientError<"CaptureUnauthorizedError", CaptureUnauthorizedError> | VoidhashEventCaptureClientError<"CapturePayloadTooLargeError", CapturePayloadTooLargeError> | VoidhashEventCaptureClientError<"CaptureRateLimitedError", CaptureRateLimitedError> | VoidhashEventCaptureClientError<"CaptureInternalServerError", CaptureInternalServerError> | VoidhashEventCaptureClientError<"CaptureDependencyUnavailableError", CaptureDependencyUnavailableError>>
+  readonly "eventCaptureBatch": (options: EventCaptureBatchRequest) => Effect.Effect<CaptureAcceptedResponse, HttpClientError.HttpClientError | VoidhashEventCaptureClientError<"EventCaptureBatch400", EventCaptureBatch400> | VoidhashEventCaptureClientError<"CaptureUnauthorizedError", CaptureUnauthorizedError> | VoidhashEventCaptureClientError<"CapturePayloadTooLargeError", CapturePayloadTooLargeError> | VoidhashEventCaptureClientError<"CaptureRateLimitedError", CaptureRateLimitedError> | VoidhashEventCaptureClientError<"CaptureInternalServerError", CaptureInternalServerError> | VoidhashEventCaptureClientError<"CaptureDependencyUnavailableError", CaptureDependencyUnavailableError>>
+}
+
+export interface VoidhashEventCaptureClientError<Tag extends string, E> extends Error {
+  readonly _tag: Tag
+  readonly request: HttpClientRequest.HttpClientRequest
+  readonly response: HttpClientResponse.HttpClientResponse
+  readonly data: E
+  readonly message: string
+}
+
+class VoidhashEventCaptureClientErrorImpl extends Data.Error<{
+  _tag: string
+  data: any
+  message: string
+  request: HttpClientRequest.HttpClientRequest
+  response: HttpClientResponse.HttpClientResponse
+}> {
+  name = "VoidhashEventCaptureClientError"
+}
+
+export const VoidhashEventCaptureClientError = <Tag extends string, E>(
+  tag: Tag,
+  data: E,
+  response: HttpClientResponse.HttpClientResponse,
+): VoidhashEventCaptureClientError<Tag, E> =>
+  new VoidhashEventCaptureClientErrorImpl({
+    _tag: tag,
+    data,
+    message: JSON.stringify(data),
+    response,
+    request: response.request,
+  }) as any
diff --git a/packages/generated-clients/src/event-capture/index.ts b/packages/generated-clients/src/event-capture/index.ts
new file mode 100644
index 000000000..b0ed30152
--- /dev/null
+++ b/packages/generated-clients/src/event-capture/index.ts
@@ -0,0 +1,37 @@
+import type {
+  CaptureDependencyUnavailableError,
+  CaptureInternalServerError,
+  CaptureInvalidRequestError,
+  CapturePayloadTooLargeError,
+  CaptureRateLimitedError,
+  CaptureUnauthorizedError,
+  EventCaptureBatchRequest,
+  EventCaptureCaptureRequest,
+} from "./generated";
+
+export * from "./generated";
+
+export type CaptureBatchRequest = EventCaptureBatchRequest;
+export type CaptureErrorResponse =
+  | CaptureDependencyUnavailableError
+  | CaptureInternalServerError
+  | CaptureInvalidRequestError
+  | CapturePayloadTooLargeError
+  | CaptureRateLimitedError
+  | CaptureUnauthorizedError;
+export type CaptureEvent = EventCaptureBatchRequest["events"][number];
+export type CaptureSingleRequest = EventCaptureCaptureRequest;
+export type EventContextField =
+  | string
+  | number
+  | boolean
+  | null
+  | ReadonlyArray<EventContextField>
+  | { readonly [key: string]: EventContextField };
+export type EventPropertiesField =
+  | string
+  | number
+  | boolean
+  | null
+  | ReadonlyArray<EventPropertiesField>
+  | { readonly [key: string]: EventPropertiesField };
diff --git a/packages/generated-clients/src/index.ts b/packages/generated-clients/src/index.ts
new file mode 100644
index 000000000..2d643a3e2
--- /dev/null
+++ b/packages/generated-clients/src/index.ts
@@ -0,0 +1,2 @@
+export * from "./core";
+export * as EventCapture from "./event-capture";
diff --git a/packages/api-spec/tsconfig.json b/packages/generated-clients/tsconfig.json
similarity index 100%
rename from packages/api-spec/tsconfig.json
rename to packages/generated-clients/tsconfig.json
diff --git a/packages/shared/src/admin.ts b/packages/shared/src/admin.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/admin.ts
+++ b/packages/shared/src/admin.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/analytics.ts b/packages/shared/src/analytics.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/analytics.ts
+++ b/packages/shared/src/analytics.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/api-key.ts b/packages/shared/src/api-key.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/api-key.ts
+++ b/packages/shared/src/api-key.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/app-store.ts b/packages/shared/src/app-store.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/app-store.ts
+++ b/packages/shared/src/app-store.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/billing.ts b/packages/shared/src/billing.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/billing.ts
+++ b/packages/shared/src/billing.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/customer.ts b/packages/shared/src/customer.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/customer.ts
+++ b/packages/shared/src/customer.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/deploy-changeset.ts b/packages/shared/src/deploy-changeset.ts
index ccce9e9e1..04487fb49 100644
--- a/packages/shared/src/deploy-changeset.ts
+++ b/packages/shared/src/deploy-changeset.ts
@@ -1,7 +1,7 @@
 import { Schema } from "effect";
 
 // ChangesetDeploymentServiceError has been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
 
 // Paywall Locations
diff --git a/packages/shared/src/errors.ts b/packages/shared/src/errors.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/errors.ts
+++ b/packages/shared/src/errors.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/google-play.ts b/packages/shared/src/google-play.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/google-play.ts
+++ b/packages/shared/src/google-play.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/organization.ts b/packages/shared/src/organization.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/organization.ts
+++ b/packages/shared/src/organization.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/payment-provider-configuration.ts b/packages/shared/src/payment-provider-configuration.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/payment-provider-configuration.ts
+++ b/packages/shared/src/payment-provider-configuration.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/payment-provider-product.ts b/packages/shared/src/payment-provider-product.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/payment-provider-product.ts
+++ b/packages/shared/src/payment-provider-product.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/paywall.ts b/packages/shared/src/paywall.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/paywall.ts
+++ b/packages/shared/src/paywall.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/perk-grant.ts b/packages/shared/src/perk-grant.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/perk-grant.ts
+++ b/packages/shared/src/perk-grant.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/perk.ts b/packages/shared/src/perk.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/perk.ts
+++ b/packages/shared/src/perk.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/product-perk.ts b/packages/shared/src/product-perk.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/product-perk.ts
+++ b/packages/shared/src/product-perk.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/product.ts b/packages/shared/src/product.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/product.ts
+++ b/packages/shared/src/product.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/project.ts b/packages/shared/src/project.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/project.ts
+++ b/packages/shared/src/project.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/sdk.ts b/packages/shared/src/sdk.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/sdk.ts
+++ b/packages/shared/src/sdk.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/user.ts b/packages/shared/src/user.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/user.ts
+++ b/packages/shared/src/user.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/packages/shared/src/webhook.ts b/packages/shared/src/webhook.ts
index 82dc3803e..3bda060ec 100644
--- a/packages/shared/src/webhook.ts
+++ b/packages/shared/src/webhook.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
-// - @voidhash/api-spec/errors (API layer)
+// - @voidhash/generated-clients (API layer)
 // - @voidhash-internal/core/domain/errors (domain layer)
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b24257888..8fb45882a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -83,9 +83,9 @@ importers:
       '@effect/platform-node':
         specifier: 4.0.0-beta.23
         version: 4.0.0-beta.23(effect@4.0.0-beta.23)(ioredis@5.9.1)
-      '@voidhash/api-spec':
+      '@voidhash/generated-clients':
         specifier: workspace:*
-        version: link:../../packages/api-spec
+        version: link:../../packages/generated-clients
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
@@ -226,9 +226,9 @@ importers:
 
   libraries/node:
     dependencies:
-      '@voidhash/api-spec':
+      '@voidhash/generated-clients':
         specifier: workspace:*
-        version: link:../../packages/api-spec
+        version: link:../../packages/generated-clients
     devDependencies:
       '@effect/platform':
         specifier: 'catalog:'
@@ -260,9 +260,9 @@ importers:
       '@react-native-async-storage/async-storage':
         specifier: ^1.24.0 || ^2.0.0
         version: 2.2.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
-      '@voidhash/api-spec':
+      '@voidhash/generated-clients':
         specifier: workspace:*
-        version: link:../../packages/api-spec
+        version: link:../../packages/generated-clients
       effect:
         specifier: 4.0.0-beta.23
         version: 4.0.0-beta.23
@@ -324,9 +324,9 @@ importers:
       '@effect/platform':
         specifier: 'catalog:'
         version: 0.94.5(effect@4.0.0-beta.23)
-      '@voidhash/api-spec':
+      '@voidhash/generated-clients':
         specifier: workspace:*
-        version: link:../../packages/api-spec
+        version: link:../../packages/generated-clients
       effect:
         specifier: 4.0.0-beta.23
         version: 4.0.0-beta.23
@@ -365,7 +365,7 @@ importers:
         specifier: ^3.2.4
         version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
-  packages/api-spec:
+  packages/generated-clients:
     dependencies:
       effect:
         specifier: 4.0.0-beta.23
diff --git a/scripts/generate-node-grouped-client.mjs b/scripts/generate-node-grouped-client.mjs
new file mode 100644
index 000000000..989a4459c
--- /dev/null
+++ b/scripts/generate-node-grouped-client.mjs
@@ -0,0 +1,199 @@
+#!/usr/bin/env node
+
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import process from "node:process";
+
+const [specPathArg, outputPathArg] = process.argv.slice(2);
+
+if (!specPathArg || !outputPathArg) {
+  console.error(
+    "Usage: node ./scripts/generate-node-grouped-client.mjs <core-openapi.json> <output-file>"
+  );
+  process.exit(1);
+}
+
+const specPath = path.resolve(specPathArg);
+const outputPath = path.resolve(outputPathArg);
+mkdirSync(path.dirname(outputPath), { recursive: true });
+const spec = JSON.parse(readFileSync(specPath, "utf8"));
+
+const camelCase = (value) =>
+  value.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
+
+const pascalCase = (value) => {
+  const camel = camelCase(value);
+  return camel.charAt(0).toUpperCase() + camel.slice(1);
+};
+
+const toMethodName = (groupName, methodName) =>
+  `${camelCase(groupName)}${pascalCase(methodName)}`;
+
+const toTypeLiteral = (schema) => {
+  if (!schema) {
+    return "unknown";
+  }
+
+  if (schema.enum?.length) {
+    return schema.enum.map((entry) => JSON.stringify(entry)).join(" | ");
+  }
+
+  if (Array.isArray(schema.type)) {
+    return schema.type.map((type) => toTypeLiteral({ ...schema, type })).join(" | ");
+  }
+
+  switch (schema.type) {
+    case "string":
+      return "string";
+    case "integer":
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "array":
+      return `ReadonlyArray<${toTypeLiteral(schema.items)}>`;
+    case "object":
+      if (schema.additionalProperties) {
+        return `{ readonly [key: string]: ${toTypeLiteral(schema.additionalProperties)} }`;
+      }
+
+      if (schema.properties) {
+        const required = new Set(schema.required ?? []);
+        const entries = Object.entries(schema.properties).map(([key, value]) => {
+          const optional = required.has(key) ? "" : "?";
+          return `readonly ${JSON.stringify(key)}${optional}: ${toTypeLiteral(value)}`;
+        });
+        return `{ ${entries.join("; ")} }`;
+      }
+
+      return "Record<string, unknown>";
+    default:
+      return "unknown";
+  }
+};
+
+const formatRequestType = ({ methodName, parameterNames, parameterTypes, hasBody, hasParams }) => {
+  if (!hasBody && !hasParams) {
+    return null;
+  }
+
+  if (hasBody && !hasParams) {
+    return `{ payload: Parameters<VoidhashCoreClient[${JSON.stringify(methodName)}]>[0] }`;
+  }
+
+  const paramsType =
+    parameterNames.length === 1
+      ? `{ ${parameterNames
+          .map((name, index) => `readonly ${JSON.stringify(name)}: ${parameterTypes[index]}`)
+          .join("; ")} }`
+      : `Parameters<VoidhashCoreClient[${JSON.stringify(methodName)}]>[0]`;
+
+  if (!hasBody) {
+    return `{ params: ${paramsType} }`;
+  }
+
+  return `{ params: ${paramsType}; payload: Parameters<VoidhashCoreClient[${JSON.stringify(methodName)}]>[1] }`;
+};
+
+const formatCall = ({ methodName, parameterNames, hasBody, hasParams }) => {
+  if (!hasBody && !hasParams) {
+    return `client.${methodName}()`;
+  }
+
+  if (hasBody && !hasParams) {
+    return `client.${methodName}(request.payload)`;
+  }
+
+  const paramsExpression =
+    parameterNames.length === 1
+      ? `request.params[${JSON.stringify(parameterNames[0])}]`
+      : `request.params`;
+
+  if (!hasBody) {
+    return `client.${methodName}(${paramsExpression})`;
+  }
+
+  return `client.${methodName}(${paramsExpression}, request.payload)`;
+};
+
+const groups = new Map();
+
+for (const [routePath, pathItem] of Object.entries(spec.paths)) {
+  for (const [httpMethod, operation] of Object.entries(pathItem)) {
+    if (!["get", "post", "patch", "delete", "put"].includes(httpMethod)) {
+      continue;
+    }
+
+    const operationId = operation.operationId;
+
+    if (!operationId || !operationId.includes(".")) {
+      continue;
+    }
+
+    const [groupName, memberName] = operationId.split(".");
+
+    if (groupName === "sdk") {
+      continue;
+    }
+
+    const methodName = toMethodName(groupName, memberName);
+    const parameters = [...(pathItem.parameters ?? []), ...(operation.parameters ?? [])].filter(
+      (parameter) => parameter.in !== "header"
+    );
+    const parameterNames = parameters.map((parameter) => parameter.name);
+    const parameterTypes = parameters.map((parameter) => toTypeLiteral(parameter.schema));
+    const hasBody = Boolean(operation.requestBody);
+    const hasParams = parameterNames.length > 0;
+    const requestType = formatRequestType({
+      hasBody,
+      hasParams,
+      methodName,
+      parameterNames,
+      parameterTypes,
+    });
+    const callExpression = formatCall({
+      hasBody,
+      hasParams,
+      methodName,
+      parameterNames,
+    });
+
+    const groupKey = camelCase(groupName);
+    const existing = groups.get(groupKey) ?? [];
+    existing.push({
+      callExpression,
+      memberName,
+      requestType,
+    });
+    groups.set(groupKey, existing);
+  }
+}
+
+const groupEntries = [...groups.entries()]
+  .sort(([left], [right]) => left.localeCompare(right))
+  .map(([groupName, operations]) => {
+    const members = operations
+      .sort((left, right) => left.memberName.localeCompare(right.memberName))
+      .map((operation) => {
+        if (!operation.requestType) {
+          return `    ${operation.memberName}: () => ${operation.callExpression},`;
+        }
+
+        return `    ${operation.memberName}: (request: ${operation.requestType}) => ${operation.callExpression},`;
+      })
+      .join("\n");
+
+    return `  ${groupName}: {\n${members}\n  },`;
+  })
+  .join("\n");
+
+const output = `import type { VoidhashCoreClient } from "@voidhash/generated-clients";
+
+export const groupCoreClient = (client: VoidhashCoreClient) => ({
+${groupEntries}
+});
+
+export type GroupedVoidhashNodeEffectClient = ReturnType<typeof groupCoreClient>;
+`;
+
+writeFileSync(outputPath, output, "utf8");
diff --git a/scripts/generate-openapi-clients.mjs b/scripts/generate-openapi-clients.mjs
new file mode 100644
index 000000000..ee53848f3
--- /dev/null
+++ b/scripts/generate-openapi-clients.mjs
@@ -0,0 +1,119 @@
+#!/usr/bin/env node
+
+import { mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import process from "node:process";
+import { fileURLToPath } from "node:url";
+import { spawnSync } from "node:child_process";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const repoRoot = path.resolve(__dirname, "..");
+const generatedClientsRoot = path.join(repoRoot, "packages/generated-clients");
+const nodeGeneratedRoot = path.join(repoRoot, "libraries/node/src/generated");
+
+const mode = process.argv[2];
+
+if (mode !== "preview" && mode !== "production") {
+  console.error("Usage: node ./scripts/generate-openapi-clients.mjs <preview|production>");
+  process.exit(1);
+}
+
+const resolveUrl = (name, fallback) => {
+  const value = process.env[name] ?? fallback;
+
+  if (!value) {
+    console.error(`Missing required environment variable: ${name}`);
+    process.exit(1);
+  }
+
+  return value;
+};
+
+const specsByMode = {
+  preview: {
+    core: resolveUrl("VOIDHASH_PREVIEW_CORE_OPENAPI_URL"),
+    eventCapture: resolveUrl("VOIDHASH_PREVIEW_EVENT_CAPTURE_OPENAPI_URL"),
+  },
+  production: {
+    core: resolveUrl(
+      "VOIDHASH_PRODUCTION_CORE_OPENAPI_URL",
+      "https://api.voidhash.com/api/docs/openapi.json",
+    ),
+    eventCapture: resolveUrl("VOIDHASH_PRODUCTION_EVENT_CAPTURE_OPENAPI_URL"),
+  },
+};
+
+const openapiDir = path.join(generatedClientsRoot, "openapi", mode);
+mkdirSync(openapiDir, { recursive: true });
+
+const fetchJson = async (url) => {
+  const response = await fetch(url);
+
+  if (!response.ok) {
+    throw new Error(`Failed to fetch ${url}: ${response.status} ${response.statusText}`);
+  }
+
+  return await response.text();
+};
+
+const run = (command, args) => {
+  const result = spawnSync(command, args, {
+    cwd: repoRoot,
+    encoding: "utf8",
+    stdio: "pipe",
+  });
+
+  if (result.status !== 0) {
+    process.stderr.write(result.stderr);
+    process.stdout.write(result.stdout);
+    process.exit(result.status ?? 1);
+  }
+
+  return result.stdout;
+};
+
+const main = async () => {
+  const specUrls = specsByMode[mode];
+  const corePath = path.join(openapiDir, "core.json");
+  const eventCapturePath = path.join(openapiDir, "event-capture.json");
+
+  writeFileSync(corePath, `${await fetchJson(specUrls.core)}\n`, "utf8");
+  writeFileSync(eventCapturePath, `${await fetchJson(specUrls.eventCapture)}\n`, "utf8");
+
+  const coreOutput = run("pnpm", [
+    "dlx",
+    "@tim-smart/openapi-gen@1.0.3",
+    "--spec",
+    corePath,
+    "--name",
+    "VoidhashCoreClient",
+  ]);
+  writeFileSync(path.join(generatedClientsRoot, "src/core/generated.ts"), coreOutput, "utf8");
+
+  const eventCaptureOutput = run("pnpm", [
+    "dlx",
+    "@tim-smart/openapi-gen@1.0.3",
+    "--spec",
+    eventCapturePath,
+    "--name",
+    "VoidhashEventCaptureClient",
+  ]);
+  writeFileSync(
+    path.join(generatedClientsRoot, "src/event-capture/generated.ts"),
+    eventCaptureOutput,
+    "utf8",
+  );
+
+  mkdirSync(nodeGeneratedRoot, { recursive: true });
+  run("node", [
+    "./scripts/generate-node-grouped-client.mjs",
+    corePath,
+    path.join(nodeGeneratedRoot, "grouped-client.ts"),
+  ]);
+};
+
+main().catch((error) => {
+  console.error(error);
+  process.exit(1);
+});

From db51cbaeccf273b279ea91ea953fd60f0331ec7d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 26 Apr 2026 23:04:44 +0200
Subject: [PATCH 010/129] wip

---
 examples/react-native-example/.env.example    |   5 +-
 examples/react-native-example/babel.config.js |  11 +-
 examples/react-native-example/package.json    |   1 +
 examples/react-native-example/tsconfig.json   |   1 +
 .../utils/voidhash/client.ts                  |  10 +-
 .../utils/voidhash/local.client.ts            |  78 ++++----
 .../node/src/generated/grouped-client.ts      |  12 +-
 libraries/node/tests/client.test.ts           |  14 +-
 .../__tests__/helpers/effect-test-harness.ts  |   4 +-
 libraries/react-native/src/core/event-bus.ts  |   2 +-
 .../core/identity/customer-info-manager.ts    |   2 +-
 .../src/core/networking/api-client.ts         |  18 +-
 .../src/react/hooks/use-customer.ts           |   2 +-
 .../web/src/core/networking/api-client.ts     |  18 +-
 package.json                                  |   5 +-
 packages/generated-clients/openapi/core.json  |   1 +
 .../openapi/event-capture.json                |   1 +
 packages/generated-clients/package.json       |   1 +
 .../generated-clients/src/core/generated.ts   | 176 +++++++++---------
 .../src/event-capture/generated.ts            |   4 +-
 scripts/generate-openapi-clients.mjs          |  82 ++++----
 21 files changed, 233 insertions(+), 215 deletions(-)
 create mode 100644 packages/generated-clients/openapi/core.json
 create mode 100644 packages/generated-clients/openapi/event-capture.json

diff --git a/examples/react-native-example/.env.example b/examples/react-native-example/.env.example
index 2173b32c5..6aeba8757 100644
--- a/examples/react-native-example/.env.example
+++ b/examples/react-native-example/.env.example
@@ -2,7 +2,4 @@ NODE_ENV=production
 APP_ENV=production
 EXPO_PUBLIC_VOIDHASH_PUBLISHABLE_KEY=vh_pk_your_publishable_key
 # Optional explicit API URL override (e.g. http://192.168.1.100:5001)
-EXPO_PUBLIC_VOIDHASH_API_URL=
-# Optional local API switch: 1/true to infer local host on port 5001.
-# In development, local API is used by default when EXPO_PUBLIC_VOIDHASH_API_URL is unset.
-EXPO_PUBLIC_VOIDHASH_USE_LOCAL_API=
+EXPO_PUBLIC_VOIDHASH_API_URL=http://localhost:8787
diff --git a/examples/react-native-example/babel.config.js b/examples/react-native-example/babel.config.js
index f17c4638b..5f8c26eee 100644
--- a/examples/react-native-example/babel.config.js
+++ b/examples/react-native-example/babel.config.js
@@ -3,6 +3,15 @@ module.exports = (api) => {
 	const plugins = [];
 	return {
 		plugins,
-		presets: ["babel-preset-expo"],
+		presets: [
+			[
+				"babel-preset-expo",
+				{
+					native: {
+						unstable_transformImportMeta: true,
+					},
+				},
+			],
+		],
 	};
 };
diff --git a/examples/react-native-example/package.json b/examples/react-native-example/package.json
index bfb331f4d..2efde49e6 100644
--- a/examples/react-native-example/package.json
+++ b/examples/react-native-example/package.json
@@ -10,6 +10,7 @@
     "start": "expo start --dev-client",
     "prebuild": "expo prebuild",
     "lint": "biome check .",
+    "typecheck": "tsc --noEmit",
     "format": "biome format .",
     "web": "expo start --web",
     "xcode": "xed ios",
diff --git a/examples/react-native-example/tsconfig.json b/examples/react-native-example/tsconfig.json
index 79279d1b6..4430a302c 100644
--- a/examples/react-native-example/tsconfig.json
+++ b/examples/react-native-example/tsconfig.json
@@ -4,6 +4,7 @@
   "compilerOptions": {
     "strict": true,
     "jsx": "react-jsx",
+    "types": ["node"],
     "paths": {
       "*": ["./*"]
     }
diff --git a/examples/react-native-example/utils/voidhash/client.ts b/examples/react-native-example/utils/voidhash/client.ts
index 83da435a1..fb855fa2b 100644
--- a/examples/react-native-example/utils/voidhash/client.ts
+++ b/examples/react-native-example/utils/voidhash/client.ts
@@ -1,8 +1,8 @@
 import { createVoidhashClient } from "@voidhash/react-native";
 import * as schema from "./schema";
 
-export const voidhash = createVoidhashClient(
-	"vh_pk_PWIsDyqMEOOuHpmAsFQvwaFhGKBVlkHf",
-	schema,
-	{}
-);
+// export const voidhash = createVoidhashClient(
+// 	"vh_pk_PWIsDyqMEOOuHpmAsFQvwaFhGKBVlkHf",
+// 	schema,
+// 	{}
+// );
diff --git a/examples/react-native-example/utils/voidhash/local.client.ts b/examples/react-native-example/utils/voidhash/local.client.ts
index 84a7eae8c..5a5d3316e 100644
--- a/examples/react-native-example/utils/voidhash/local.client.ts
+++ b/examples/react-native-example/utils/voidhash/local.client.ts
@@ -3,59 +3,47 @@ import Constants from "expo-constants";
 
 import * as schema from "./_schema";
 
-const debuggerHost =
-	(
-		Constants.expoConfig as {
-			debuggerHost?: string;
-			hostUri?: string;
-		} | null
-	)?.debuggerHost ??
-	(
-		Constants.expoConfig as {
-			debuggerHost?: string;
-			hostUri?: string;
-		} | null
-	)?.hostUri ??
-	(
-		Constants.manifest2 as {
-			extra?: {
-				expoGo?: {
-					debuggerHost?: string;
+function resolveHostIp() {
+	const debuggerHost =
+		(
+			Constants.expoConfig as {
+				debuggerHost?: string;
+				hostUri?: string;
+			} | null
+		)?.debuggerHost ??
+		(
+			Constants.expoConfig as {
+				debuggerHost?: string;
+				hostUri?: string;
+			} | null
+		)?.hostUri ??
+		(
+			Constants.manifest2 as {
+				extra?: {
+					expoGo?: {
+						debuggerHost?: string;
+					};
 				};
-			};
-		} | null
-	)?.extra?.expoGo?.debuggerHost;
-const localhost = debuggerHost?.split(":")[0];
-const useLocalApiFromEnv =
-	process.env.EXPO_PUBLIC_VOIDHASH_USE_LOCAL_API === "1" ||
-	process.env.EXPO_PUBLIC_VOIDHASH_USE_LOCAL_API === "true";
-const defaultToLocalApiInDev =
-	__DEV__ &&
-	process.env.EXPO_PUBLIC_VOIDHASH_USE_LOCAL_API == null &&
-	process.env.EXPO_PUBLIC_VOIDHASH_API_URL == null;
-const useLocalApi = useLocalApiFromEnv || defaultToLocalApiInDev;
-const inferredLocalBaseUrl = localhost
-	? `http://${localhost}:5001`
-	: "http://localhost:5001";
+			} | null
+		)?.extra?.expoGo?.debuggerHost;
 
-const baseUrl =
-	process.env.EXPO_PUBLIC_VOIDHASH_API_URL ??
-	(useLocalApi ? inferredLocalBaseUrl : undefined);
-
-if (__DEV__) {
-	console.log(
-		`[voidhash-example] Resolved API URL: ${baseUrl ?? "https://api.voidhash.com"}`
-	);
+	return debuggerHost?.split(":")[0];
 }
 
-// Defaults to local API in development and Voidhash cloud API in production.
-// Set EXPO_PUBLIC_VOIDHASH_API_URL to explicitly override base URL.
-// Set EXPO_PUBLIC_VOIDHASH_USE_LOCAL_API=1/true to force inferred local URL.
+const baseUrl = process.env.EXPO_PUBLIC_VOIDHASH_API_URL?.replace(
+	"localhost",
+	resolveHostIp() ?? "localhost",
+);
+
 const clientOptions = {
 	debug: true,
 	...(baseUrl ? { baseUrl } : {}),
 };
-const publishableKey = "vh_pk_PWIsDyqMEOOuHpmAsFQvwaFhGKBVlkHf";
+const publishableKey =
+	process.env.EXPO_PUBLIC_VOIDHASH_PUBLISHABLE_KEY ??
+	"vh_pk_hrvyOZJoxtonGGPtTnkMehrCoEPsAbwD";
+
+console.log(baseUrl, publishableKey);
 
 export const voidhash = createVoidhashClient(
 	publishableKey,
diff --git a/libraries/node/src/generated/grouped-client.ts b/libraries/node/src/generated/grouped-client.ts
index 80d9a880a..989908c25 100644
--- a/libraries/node/src/generated/grouped-client.ts
+++ b/libraries/node/src/generated/grouped-client.ts
@@ -14,12 +14,6 @@ export const groupCoreClient = (client: VoidhashCoreClient) => ({
   changesets: {
     deployChangeset: (request: { payload: Parameters<VoidhashCoreClient["changesetsDeployChangeset"]>[0] }) => client.changesetsDeployChangeset(request.payload),
   },
-  customers: {
-    byDistinctId: (request: { params: { readonly "distinctId": string } }) => client.customersByDistinctId(request.params["distinctId"]),
-    createCustomer: (request: { payload: Parameters<VoidhashCoreClient["customersCreateCustomer"]>[0] }) => client.customersCreateCustomer(request.payload),
-    getCustomerById: (request: { params: { readonly "customerId": string } }) => client.customersGetCustomerById(request.params["customerId"]),
-    listCustomers: () => client.customersListCustomers(),
-  },
   organizations: {
     createOrganization: (request: { payload: Parameters<VoidhashCoreClient["organizationsCreateOrganization"]>[0] }) => client.organizationsCreateOrganization(request.payload),
   },
@@ -35,6 +29,12 @@ export const groupCoreClient = (client: VoidhashCoreClient) => ({
   perks: {
     listPerks: () => client.perksListPerks(),
   },
+  persons: {
+    createPerson: (request: { payload: Parameters<VoidhashCoreClient["personsCreatePerson"]>[0] }) => client.personsCreatePerson(request.payload),
+    getPersonByDistinctId: (request: { params: { readonly "distinctId": string } }) => client.personsGetPersonByDistinctId(request.params["distinctId"]),
+    getPersonById: (request: { params: { readonly "personId": string } }) => client.personsGetPersonById(request.params["personId"]),
+    listPersons: () => client.personsListPersons(),
+  },
   productPerks: {
     listProductPerksByProductId: (request: { params: { readonly "productId": string } }) => client.productPerksListProductPerksByProductId(request.params["productId"]),
   },
diff --git a/libraries/node/tests/client.test.ts b/libraries/node/tests/client.test.ts
index 1e61fec24..d61efd1c9 100644
--- a/libraries/node/tests/client.test.ts
+++ b/libraries/node/tests/client.test.ts
@@ -23,12 +23,12 @@ const EXPECTED_GROUPS = [
   "apiKeys",
   "auth",
   "changesets",
-  "customers",
   "organizations",
   "paymentProviderConfigurations",
   "paymentProviderProducts",
   "paywallLocations",
   "perks",
+  "persons",
   "productPerks",
   "products",
   "projects",
@@ -181,10 +181,10 @@ describe("@voidhash/node", () => {
     expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
   });
 
-  it("supports POST bodies with customers.createCustomer({ payload })", async () => {
+  it("supports POST bodies with persons.createPerson({ payload })", async () => {
     const { calls } = installFetchMock(() =>
       createJsonResponse({
-        customerId: "customer_123",
+        personId: "person_123",
         distinctId: "user_123",
         email: "user@example.com",
         name: "Taylor",
@@ -196,7 +196,7 @@ describe("@voidhash/node", () => {
       secretKey: "vh_sk_test",
     });
 
-    const customer = await client.customers.createCustomer({
+    const person = await client.persons.createPerson({
       payload: {
         distinctId: "user_123",
         email: "user@example.com",
@@ -204,14 +204,14 @@ describe("@voidhash/node", () => {
       },
     });
 
-    expect(customer).toEqual({
-      customerId: "customer_123",
+    expect(person).toEqual({
+      personId: "person_123",
       distinctId: "user_123",
       email: "user@example.com",
       name: "Taylor",
     });
     expect(calls[0]?.method).toBe("POST");
-    expect(calls[0]?.url).toBe("https://api.voidhash.test/api/v1/customers");
+    expect(calls[0]?.url).toBe("https://api.voidhash.test/api/v1/persons");
     expect(JSON.parse(calls[0]?.body ?? "{}")).toEqual({
       distinctId: "user_123",
       email: "user@example.com",
diff --git a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
index f28bf4268..02ce3fc59 100644
--- a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
+++ b/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/generated-clients";
+import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import { Effect, Layer, ManagedRuntime, pipe } from "effect";
 
 import { CacheAdapter } from "../../core/caching/cache-adapter";
@@ -47,7 +47,7 @@ export interface ApiClientDoubleOptions {
 export function createSdkCustomer(distinctId: string) {
   return {
     distinctId,
-    customerId: `customer-${distinctId}`,
+    personId: `person-${distinctId}`,
     email: null,
     name: null,
   } as SdkCustomer;
diff --git a/libraries/react-native/src/core/event-bus.ts b/libraries/react-native/src/core/event-bus.ts
index c25535d21..f475f1bb6 100644
--- a/libraries/react-native/src/core/event-bus.ts
+++ b/libraries/react-native/src/core/event-bus.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/generated-clients";
+import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import { ServiceMap } from "effect";
 
 export interface CustomerFetchedEvent {
diff --git a/libraries/react-native/src/core/identity/customer-info-manager.ts b/libraries/react-native/src/core/identity/customer-info-manager.ts
index e425bb7e5..a9cfbe3e5 100644
--- a/libraries/react-native/src/core/identity/customer-info-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-info-manager.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/generated-clients";
+import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index dc260942f..3a8230e8e 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -4,10 +4,12 @@ import {
   type EvaluateFeatureFlagsBody,
   type SdkEvaluateFeatureFlagsParams,
   type SdkFeatureFlagsResponse,
-  type SdkGetCustomerParams,
+  type SdkGetPersonParams,
+  type SdkIdentifyPersonParams,
   type SdkIdentifyBody,
   type SdkResolvePaywallBody,
-  type SdkSyncCustomerAttributesBody,
+  type SdkSyncPersonAttributesBody,
+  type SdkSyncPersonAttributesParams,
   type SdkSyncTransactionRequest,
 } from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
@@ -82,13 +84,13 @@ const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
         normalizeFeatureFlagsResponse
       ),
     getCustomer: (request: { headers: ReactNativeSdkHeaders }) =>
-      client.sdkGetCustomer(request.headers as SdkGetCustomerParams),
+      client.sdkGetPerson(request.headers as SdkGetPersonParams),
     identify: (request: {
       headers: ReactNativeSdkHeaders;
       payload: SdkIdentifyBody;
     }) =>
-      client.sdkIdentify({
-        params: request.headers as Parameters<typeof client.sdkIdentify>[0]["params"],
+      client.sdkIdentifyPerson({
+        params: request.headers as SdkIdentifyPersonParams,
         payload: request.payload,
       }),
     resolvePaywall: (request: {
@@ -101,10 +103,10 @@ const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
       }),
     syncCustomerAttributes: (request: {
       headers: ReactNativeSdkHeaders;
-      payload: SdkSyncCustomerAttributesBody;
+      payload: SdkSyncPersonAttributesBody;
     }) =>
-      client.sdkSyncCustomerAttributes({
-        params: request.headers as Parameters<typeof client.sdkSyncCustomerAttributes>[0]["params"],
+      client.sdkSyncPersonAttributes({
+        params: request.headers as SdkSyncPersonAttributesParams,
         payload: request.payload,
       }),
     syncTransaction: (request: {
diff --git a/libraries/react-native/src/react/hooks/use-customer.ts b/libraries/react-native/src/react/hooks/use-customer.ts
index 5118a2479..9188b0ce6 100644
--- a/libraries/react-native/src/react/hooks/use-customer.ts
+++ b/libraries/react-native/src/react/hooks/use-customer.ts
@@ -1,4 +1,4 @@
-import type { SdkCustomer } from "@voidhash/generated-clients";
+import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import React, { useCallback, useEffect, useMemo, useState } from "react";
 
 import type { VoidhashClient } from "../../client";
diff --git a/libraries/web/src/core/networking/api-client.ts b/libraries/web/src/core/networking/api-client.ts
index 4d26174bc..bec06e743 100644
--- a/libraries/web/src/core/networking/api-client.ts
+++ b/libraries/web/src/core/networking/api-client.ts
@@ -4,10 +4,12 @@ import {
   type EvaluateFeatureFlagsBody,
   type SdkEvaluateFeatureFlagsParams,
   type SdkFeatureFlagsResponse,
-  type SdkGetCustomerParams,
+  type SdkGetPersonParams,
+  type SdkIdentifyPersonParams,
   type SdkIdentifyBody,
   type SdkResolvePaywallBody,
-  type SdkSyncCustomerAttributesBody,
+  type SdkSyncPersonAttributesBody,
+  type SdkSyncPersonAttributesParams,
 } from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
 import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
@@ -70,13 +72,13 @@ const bindWebSdkClient = (client: VoidhashCoreClient) => ({
         normalizeFeatureFlagsResponse
       ),
     getCustomer: (request: { headers: WebSdkHeaders }) =>
-      client.sdkGetCustomer(request.headers as SdkGetCustomerParams),
+      client.sdkGetPerson(request.headers as SdkGetPersonParams),
     identify: (request: {
       headers: WebSdkHeaders;
       payload: SdkIdentifyBody;
     }) =>
-      client.sdkIdentify({
-        params: request.headers as Parameters<typeof client.sdkIdentify>[0]["params"],
+      client.sdkIdentifyPerson({
+        params: request.headers as SdkIdentifyPersonParams,
         payload: request.payload,
       }),
     resolvePaywall: (request: {
@@ -89,10 +91,10 @@ const bindWebSdkClient = (client: VoidhashCoreClient) => ({
       }),
     syncCustomerAttributes: (request: {
       headers: WebSdkHeaders;
-      payload: SdkSyncCustomerAttributesBody;
+      payload: SdkSyncPersonAttributesBody;
     }) =>
-      client.sdkSyncCustomerAttributes({
-        params: request.headers as Parameters<typeof client.sdkSyncCustomerAttributes>[0]["params"],
+      client.sdkSyncPersonAttributes({
+        params: request.headers as SdkSyncPersonAttributesParams,
         payload: request.payload,
       }),
   },
diff --git a/package.json b/package.json
index 11307c757..79f950596 100644
--- a/package.json
+++ b/package.json
@@ -40,8 +40,9 @@
     "lint": "biome check .",
     "lint:fix": "biome check . --apply",
     "bump": "bumpp",
-    "openapi:generate:preview": "node ./scripts/generate-openapi-clients.mjs preview",
-    "openapi:generate:production": "node ./scripts/generate-openapi-clients.mjs production",
+    "openapi:generate": "node ./scripts/generate-openapi-clients.mjs",
+    "openapi:generate:dev": "pnpm openapi:generate -- localhost:8787",
+    "openapi:generate:prod": "pnpm openapi:generate -- api.voidhash.com",
     "test": "turbo test",
     "typecheck": "turbo typecheck",
     "lines-of-code": "npx cloc . --exclude-dir=.next,node_modules,.vercel,.turbo,.git,meta,.github,.expo,build,.expo-shared,nitrogen --vcs git --not-match-f=pnpm-lock.yaml,meta.json --exclude-ext=yaml,md"
diff --git a/packages/generated-clients/openapi/core.json b/packages/generated-clients/openapi/core.json
new file mode 100644
index 000000000..0336e4b39
--- /dev/null
+++ b/packages/generated-clients/openapi/core.json
@@ -0,0 +1 @@
+{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/api/v1/auth/session":{"get":{"tags":["auth"],"operationId":"auth.session","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"method":{"anyOf":[{"type":"string","enum":["api-key"]},{"type":"string","enum":["publishable-key"]},{"type":"string","enum":["secret-key"]}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","organizationId","slug"],"additionalProperties":false}}},"required":["method","name","organizations","projects"],"additionalProperties":false}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"Error","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}}}}}}},"/api/v1/api-keys":{"post":{"tags":["api_keys"],"operationId":"api_keys.createSecretKey","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSecretKeyBody"}}},"required":true}},"get":{"tags":["api_keys"],"operationId":"api_keys.listApiKeys","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ApiKey"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}":{"get":{"tags":["api_keys"],"operationId":"api_keys.getApiKeyById","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"ApiKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"delete":{"tags":["api_keys"],"operationId":"api_keys.deleteApiKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}/rotate":{"post":{"tags":["api_keys"],"operationId":"api_keys.rotateSecretKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons":{"post":{"tags":["persons"],"operationId":"persons.createPerson","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"PersonInvalidAnonymousIdError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonInvalidAnonymousIdError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreatePersonBody"}}},"required":true}},"get":{"tags":["persons"],"operationId":"persons.listPersons","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Person"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/{personId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonById","parameters":[{"name":"personId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/by-distinct-id/{distinctId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonByDistinctId","parameters":[{"name":"distinctId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/organizations":{"post":{"tags":["organizations"],"operationId":"organizations.createOrganization","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Organization","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Organization"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"OrganizationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/OrganizationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateOrganizationBody"}}},"required":true}}},"/api/v1/perks":{"get":{"tags":["perks"],"operationId":"perks.listPerks","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Perk"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/paywall-locations":{"get":{"tags":["paywall_locations"],"operationId":"paywall_locations.listPaywallLocations","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaywallLocation"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaywallLocationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaywallLocationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/projects":{"post":{"tags":["projects"],"operationId":"projects.createProject","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Project","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Project"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateProjectBody"}}},"required":true}}},"/api/v1/projects/{organizationId}":{"get":{"tags":["projects"],"operationId":"projects.listProjects","parameters":[{"name":"organizationId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Project"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/products":{"get":{"tags":["products"],"operationId":"products.listProducts","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Product"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/product-perks/by-product-id/{productId}":{"get":{"tags":["product_perks"],"operationId":"product_perks.listProductPerksByProductId","parameters":[{"name":"productId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ProductPerk"}}}}},"400":{"description":"ProductPerkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductPerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/person":{"get":{"tags":["sdk"],"operationId":"sdk.getPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonNotFoundError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/identify":{"post":{"tags":["sdk"],"operationId":"sdk.identifyPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"409":{"description":"SdkPersonAlreadyIdentifiedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonAlreadyIdentifiedError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkIdentifyBody"}}},"required":true}}},"/api/v1/sdk/person/traits":{"post":{"tags":["sdk"],"operationId":"sdk.syncPersonAttributes","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncPersonAttributesBody"}}},"required":true}}},"/api/v1/sdk/sync-transaction":{"post":{"tags":["sdk"],"operationId":"sdk.syncTransaction","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkSyncTransactionResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncTransactionResponse"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"platform":{"anyOf":[{"type":"string","enum":["ios"]},{"type":"string","enum":["android"]}]},"productId":{"type":"string"},"purchaseDate":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"purchaseToken":{"anyOf":[{"type":"string"},{"type":"null"}]},"quantity":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"receipt":{"anyOf":[{"type":"string"},{"type":"null"}]},"transactionId":{"type":"string"}},"required":["platform","productId","purchaseDate","quantity","transactionId"],"additionalProperties":false}}},"required":true}}},"/api/v1/sdk/evaluate-flags":{"post":{"tags":["sdk"],"operationId":"sdk.evaluateFeatureFlags","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkFeatureFlagsResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkFeatureFlagsResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EvaluateFeatureFlagsBody"}}},"required":true}}},"/api/v1/sdk/resolve-paywall":{"post":{"tags":["sdk"],"operationId":"sdk.resolvePaywall","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkResolvedPaywall"},{"type":"null"}]}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkResolvePaywallBody"}}},"required":true}}},"/api/v1/users/current":{"get":{"tags":["users"],"operationId":"users.getUser","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"User","content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | UserServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/UserServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-configurations":{"get":{"tags":["payment_provider_configurations"],"operationId":"payment_provider_configurations.listPaymentProviderConfigurations","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderConfiguration"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderConfigurationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderConfigurationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-products":{"get":{"tags":["payment_provider_products"],"operationId":"payment_provider_products.listPaymentProviderProducts","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderProduct"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/changesets/deploy":{"post":{"tags":["changesets"],"operationId":"changesets.deployChangeset","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"DeployChangesetResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ChangesetDeploymentServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ChangesetDeploymentServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetBody"}}},"required":true}}},"/api/v1/webhooks/endpoints":{"post":{"tags":["webhooks"],"operationId":"webhooks.createWebhookEndpoint","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateWebhookEndpointBody"}}},"required":true}},"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookEndpoints","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEndpoint"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"patch":{"tags":["webhooks"],"operationId":"webhooks.updateWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateWebhookEndpointBody"}}},"required":true}},"delete":{"tags":["webhooks"],"operationId":"webhooks.deleteWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/rotate-secret":{"post":{"tags":["webhooks"],"operationId":"webhooks.rotateWebhookSecret","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/test":{"post":{"tags":["webhooks"],"operationId":"webhooks.testWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries":{"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookDeliveries","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDelivery"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookDeliveryWithAttempts","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryWithAttempts"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}/retry":{"post":{"tags":["webhooks"],"operationId":"webhooks.retryWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}}},"components":{"schemas":{"ActionForbiddenError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ActionForbiddenError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"AuthenticationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["AuthenticationError"]},"cause":{"type":"string"},"message":{"type":"string"}},"required":["_tag","cause","message"],"additionalProperties":false},"NotAuthenticatedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["NotAuthenticatedError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreateSecretKeyBody":{"type":"object","properties":{"name":{"type":"string"},"projectId":{"type":"string"}},"required":["name","projectId"],"additionalProperties":false},"ApiKeyWithRawKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"type":"string"}},"required":["end","id","isPublic","name","prefix","projectId","rawKey"],"additionalProperties":false},"ApiKeyServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ApiKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["end","id","isPublic","name","prefix","projectId"],"additionalProperties":false},"ApiKeyNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreatePersonBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Person":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"PersonInvalidAnonymousIdError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonInvalidAnonymousIdError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"PersonServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonNotFoundError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"CreateOrganizationBody":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"Organization":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"OrganizationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["OrganizationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Perk":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","projectId","slug"],"additionalProperties":false},"PerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaywallLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["description","id","name","projectId","slug"],"additionalProperties":false},"PaywallLocationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaywallLocationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"CreateProjectBody":{"type":"object","properties":{"name":{"type":"string"},"organizationId":{"type":"string"}},"required":["name","organizationId"],"additionalProperties":false},"Project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"ProjectServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProjectServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Product":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["one-time"]},{"type":"string","enum":["one-time-consumable"]}]}},"required":["id","name","projectId","slug","type"],"additionalProperties":false},"ProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerk":{"type":"object","properties":{"id":{"type":"string"},"perkId":{"type":"string"},"productId":{"type":"string"}},"required":["id","perkId","productId"],"additionalProperties":false},"ProductPerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkPerson":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"SdkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SdkPersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkIdentifyBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"SdkPersonAlreadyIdentifiedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonAlreadyIdentifiedError"]},"distinctId":{"type":"string"}},"required":["_tag","distinctId"],"additionalProperties":false},"SdkSyncPersonAttributesBody":{"type":"object","properties":{"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"additionalProperties":false},"SdkSyncTransactionResponse":{"type":"object","properties":{"accepted":{"type":"boolean"}},"required":["accepted"],"additionalProperties":false},"EvaluateFeatureFlagsBody":{"type":"object","properties":{"flagKeys":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]}},"additionalProperties":false},"SdkFeatureFlagResult":{"type":"object","properties":{"enabled":{"type":"boolean"},"key":{"type":"string"},"payload":{"anyOf":[{"type":"null"},{"type":"null"}]},"variantKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["enabled","key","payload","variantKey"],"additionalProperties":false},"SdkFeatureFlagsResponse":{"type":"object","properties":{"flags":{"type":"array","items":{"$ref":"#/components/schemas/SdkFeatureFlagResult"}}},"required":["flags"],"additionalProperties":false},"SdkResolvePaywallBody":{"type":"object","properties":{"locationSlug":{"type":"string"}},"required":["locationSlug"],"additionalProperties":false},"SdkResolvedPaywallShowing":{"type":"object","properties":{"id":{"type":"string"},"paywall":{"anyOf":[{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},{"type":"null"}]},"paywallId":{"anyOf":[{"type":"string"},{"type":"null"}]},"paywallRelease":{"anyOf":[{"type":"object","properties":{"htmlUrl":{"type":"string"},"publishedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"releaseId":{"type":"string"},"version":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]}},"required":["htmlUrl","publishedAt","releaseId","version"],"additionalProperties":false},{"type":"null"}]},"paywallReleaseId":{"anyOf":[{"type":"string"},{"type":"null"}]},"startedAt":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["paywall_release"]},{"type":"string","enum":["feature_flag"]}]}},"required":["id","paywall","paywallId","paywallRelease","paywallReleaseId","startedAt","type"],"additionalProperties":false},"SdkResolvedPaywall":{"type":"object","properties":{"location":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"showing":{"$ref":"#/components/schemas/SdkResolvedPaywallShowing"}},"required":["location","showing"],"additionalProperties":false},"User":{"type":"object","properties":{"createdAt":{"type":"string"},"email":{"type":"string"},"emailVerified":{"type":"boolean"},"id":{"type":"string"},"image":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","organizationId","slug"],"additionalProperties":false}},"updatedAt":{"type":"string"}},"required":["createdAt","email","emailVerified","id","image","name","organizations","projects","updatedAt"],"additionalProperties":false},"UserServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["UserServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderConfiguration":{"type":"object","properties":{"enabled":{"type":"boolean"},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"providerId":{"type":"string"}},"required":["enabled","id","name","projectId","providerId"],"additionalProperties":false},"PaymentProviderConfigurationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderConfigurationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderProduct":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"id":{"type":"string"},"paymentProviderConfigurationId":{"type":"string"},"productId":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","id","paymentProviderConfigurationId","productId","providerId"],"additionalProperties":false},"PaymentProviderProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"DeployChangesetBody":{"type":"object","properties":{"changeset":{"type":"object","properties":{"changes":{"type":"array","items":{"anyOf":[{"type":"object","properties":{"changeType":{"type":"string","enum":["create-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["archive-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false}]}}},"required":["changes"],"additionalProperties":false}},"required":["changeset"],"additionalProperties":false},"DeployChangesetResponse":{"type":"object","properties":{"deploymentId":{"type":"string"}},"required":["deploymentId"],"additionalProperties":false},"ChangesetDeploymentServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ChangesetDeploymentServiceError"]},"cause":{"type":"null"}},"required":["_tag","cause"],"additionalProperties":false},"CreateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"url":{"type":"string"}},"required":["events","name","url"],"additionalProperties":false},"WebhookEndpoint":{"type":"object","properties":{"consecutiveFailures":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"anyOf":[{"type":"string","enum":["person.created"]},{"type":"string","enum":["person.updated"]},{"type":"string","enum":["person.deleted"]},{"type":"string","enum":["subscription.created"]},{"type":"string","enum":["subscription.renewed"]},{"type":"string","enum":["subscription.cancelled"]},{"type":"string","enum":["subscription.expired"]},{"type":"string","enum":["purchase.completed"]},{"type":"string","enum":["purchase.refunded"]}]}},"id":{"type":"string"},"lastSuccessAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"projectId":{"type":"string"},"secret":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]},{"type":"string","enum":["failed"]}]},"url":{"type":"string"}},"required":["consecutiveFailures","createdAt","description","events","id","lastSuccessAt","name","projectId","secret","status","url"],"additionalProperties":false},"WebhookValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"WebhookServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"WebhookEndpointNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookEndpointNotFoundError"]},"endpointId":{"type":"string"}},"required":["_tag","endpointId"],"additionalProperties":false},"UpdateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"events":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]}]},{"type":"null"}]},"url":{"anyOf":[{"type":"string"},{"type":"null"}]}},"additionalProperties":false},"WebhookDelivery":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryAttempt":{"type":"object","properties":{"attemptNumber":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"durationMs":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"errorMessage":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"responseBody":{"anyOf":[{"type":"string"},{"type":"null"}]},"statusCode":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"succeeded":{"type":"boolean"}},"required":["attemptNumber","createdAt","durationMs","errorMessage","id","responseBody","statusCode","succeeded"],"additionalProperties":false},"WebhookDeliveryWithAttempts":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"attempts":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDeliveryAttempt"}},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","attempts","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookDeliveryNotFoundError"]},"deliveryId":{"type":"string"}},"required":["_tag","deliveryId"],"additionalProperties":false}},"securitySchemes":{"apiKey":{"type":"apiKey","name":"x-api-key","in":"header"},"betterAuthCookie":{"type":"apiKey","name":"__Secure-better-auth.session_token","in":"cookie"},"publishableKey":{"type":"apiKey","name":"x-publishable-key","in":"header"},"secretKey":{"type":"apiKey","name":"x-secret-key","in":"header"}}},"security":[],"tags":[{"name":"auth"},{"name":"api_keys"},{"name":"persons"},{"name":"organizations"},{"name":"perks"},{"name":"paywall_locations"},{"name":"projects"},{"name":"products"},{"name":"product_perks"},{"name":"sdk"},{"name":"users"},{"name":"payment_provider_configurations"},{"name":"payment_provider_products"},{"name":"changesets"},{"name":"webhooks"}]}
diff --git a/packages/generated-clients/openapi/event-capture.json b/packages/generated-clients/openapi/event-capture.json
new file mode 100644
index 000000000..0cc0bf2f5
--- /dev/null
+++ b/packages/generated-clients/openapi/event-capture.json
@@ -0,0 +1 @@
+{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/i/v1/capture":{"post":{"tags":["event_capture"],"operationId":"event_capture.capture","parameters":[],"security":[],"responses":{"200":{"description":"CaptureAcceptedResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureAcceptedResponse"}}}},"400":{"description":"CaptureInvalidRequestError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/CaptureInvalidRequestError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"401":{"description":"CaptureUnauthorizedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureUnauthorizedError"}}}},"413":{"description":"CapturePayloadTooLargeError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CapturePayloadTooLargeError"}}}},"429":{"description":"CaptureRateLimitedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureRateLimitedError"}}}},"500":{"description":"CaptureInternalServerError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureInternalServerError"}}}},"503":{"description":"CaptureDependencyUnavailableError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureDependencyUnavailableError"}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"uuid":{"type":"string","allOf":[{"minLength":1}]},"event":{"type":"string","allOf":[{"minLength":1}]},"context":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}},"properties":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}},"distinct_id":{"type":"string","allOf":[{"minLength":1}]},"session_id":{"anyOf":[{"type":"string","allOf":[{"minLength":1}]},{"type":"null"}]},"timestamp":{"anyOf":[{"type":"string","allOf":[{"format":"date-time"}]},{"type":"null"}]},"sent_at":{"type":"string","allOf":[{"format":"date-time"}]},"token":{"type":"string","allOf":[{"minLength":1}]}},"required":["uuid","event","context","properties","distinct_id","sent_at","token"],"additionalProperties":false}}},"required":true}}},"/i/v1/batch":{"post":{"tags":["event_capture"],"operationId":"event_capture.batch","parameters":[],"security":[],"responses":{"200":{"description":"CaptureAcceptedResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureAcceptedResponse"}}}},"400":{"description":"CaptureInvalidRequestError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/CaptureInvalidRequestError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"401":{"description":"CaptureUnauthorizedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureUnauthorizedError"}}}},"413":{"description":"CapturePayloadTooLargeError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CapturePayloadTooLargeError"}}}},"429":{"description":"CaptureRateLimitedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureRateLimitedError"}}}},"500":{"description":"CaptureInternalServerError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureInternalServerError"}}}},"503":{"description":"CaptureDependencyUnavailableError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureDependencyUnavailableError"}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"events":{"type":"array","prefixItems":[{"type":"object","properties":{"uuid":{"type":"string","allOf":[{"minLength":1}]},"event":{"type":"string","allOf":[{"minLength":1}]},"context":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}},"properties":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}},"distinct_id":{"type":"string","allOf":[{"minLength":1}]},"session_id":{"anyOf":[{"type":"string","allOf":[{"minLength":1}]},{"type":"null"}]},"timestamp":{"anyOf":[{"type":"string","allOf":[{"format":"date-time"}]},{"type":"null"}]}},"required":["uuid","event","context","properties","distinct_id"],"additionalProperties":false}],"minItems":1,"items":{"type":"object","properties":{"uuid":{"type":"string","allOf":[{"minLength":1}]},"event":{"type":"string","allOf":[{"minLength":1}]},"context":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}},"properties":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}},"distinct_id":{"type":"string","allOf":[{"minLength":1}]},"session_id":{"anyOf":[{"type":"string","allOf":[{"minLength":1}]},{"type":"null"}]},"timestamp":{"anyOf":[{"type":"string","allOf":[{"format":"date-time"}]},{"type":"null"}]}},"required":["uuid","event","context","properties","distinct_id"],"additionalProperties":false}},"sent_at":{"type":"string","allOf":[{"format":"date-time"}]},"token":{"type":"string","allOf":[{"minLength":1}]}},"required":["events","sent_at","token"],"additionalProperties":false}}},"required":true}}}},"components":{"schemas":{"Union_":{"anyOf":[{"type":"string"},{"type":"number"},{"type":"boolean"},{"type":"null"},{"type":"array","items":{"$ref":"#/components/schemas/Union_"}},{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}}]},"Union_1":{"anyOf":[{"type":"string"},{"type":"number"},{"type":"boolean"},{"type":"null"},{"type":"array","items":{"$ref":"#/components/schemas/Union_1"}},{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}}]},"CaptureAcceptedResponse":{"type":"object","properties":{"accepted":{"type":"integer"},"rejected":{"type":"integer"}},"required":["accepted","rejected"],"additionalProperties":false},"CaptureInvalidRequestError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureInvalidRequestError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["invalid_request"]}},"required":["_tag","error","code"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CaptureUnauthorizedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureUnauthorizedError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["unauthorized"]}},"required":["_tag","error","code"],"additionalProperties":false},"CapturePayloadTooLargeError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CapturePayloadTooLargeError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["payload_too_large"]}},"required":["_tag","error","code"],"additionalProperties":false},"CaptureRateLimitedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureRateLimitedError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["rate_limited"]},"retry_after_ms":{"anyOf":[{"type":"integer"},{"type":"null"}]}},"required":["_tag","error","code"],"additionalProperties":false},"CaptureDependencyUnavailableError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureDependencyUnavailableError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["dependency_unavailable"]}},"required":["_tag","error","code"],"additionalProperties":false},"CaptureInternalServerError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureInternalServerError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["internal_error"]}},"required":["_tag","error","code"],"additionalProperties":false}},"securitySchemes":{}},"security":[],"tags":[{"name":"event_capture"}]}
diff --git a/packages/generated-clients/package.json b/packages/generated-clients/package.json
index de8743462..2e9083ee4 100644
--- a/packages/generated-clients/package.json
+++ b/packages/generated-clients/package.json
@@ -9,6 +9,7 @@
     "./event-capture": "./src/event-capture/index.ts"
   },
   "scripts": {
+    "openapi:generate": "node ../../scripts/generate-openapi-clients.mjs",
     "typecheck": "tsgo --noEmit"
   },
   "dependencies": {},
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
index d936f4b12..96bc2254e 100644
--- a/packages/generated-clients/src/core/generated.ts
+++ b/packages/generated-clients/src/core/generated.ts
@@ -105,51 +105,51 @@ export type ApiKeysDeleteApiKey500 = ApiKeyServiceError | AuthenticationError |
 
 export type ApiKeysRotateSecretKey500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
 
-export interface Customer {
-  readonly "customerId": string;
+export interface Person {
+  readonly "personId": string;
   readonly "distinctId": string;
   readonly "email": string | null;
   readonly "name": string | null
 }
 
-export type CustomersListCustomers200 = ReadonlyArray<Customer>
+export type PersonsListPersons200 = ReadonlyArray<Person>
 
-export type CustomerServiceErrorTag = "CustomerServiceError"
+export type PersonServiceErrorTag = "PersonServiceError"
 
-export interface CustomerServiceError {
-  readonly "_tag": CustomerServiceErrorTag;
+export interface PersonServiceError {
+  readonly "_tag": PersonServiceErrorTag;
   readonly "cause": string
 }
 
-export type CustomersListCustomers500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsListPersons500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
 
-export interface CreateCustomerBody {
+export interface CreatePersonBody {
   readonly "distinctId": string;
   readonly "email"?: string | null | undefined;
   readonly "name"?: string | null | undefined
 }
 
-export type CustomerInvalidAnonymousIdErrorTag = "CustomerInvalidAnonymousIdError"
+export type PersonInvalidAnonymousIdErrorTag = "PersonInvalidAnonymousIdError"
 
-export interface CustomerInvalidAnonymousIdError {
-  readonly "_tag": CustomerInvalidAnonymousIdErrorTag;
+export interface PersonInvalidAnonymousIdError {
+  readonly "_tag": PersonInvalidAnonymousIdErrorTag;
   readonly "id": string
 }
 
-export type CustomersCreateCustomer400 = CustomerInvalidAnonymousIdError | EffectHttpApiSchemaError
+export type PersonsCreatePerson400 = PersonInvalidAnonymousIdError | EffectHttpApiSchemaError
 
-export type CustomersCreateCustomer500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsCreatePerson500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
 
-export type CustomerNotFoundErrorTag = "CustomerNotFoundError"
+export type PersonNotFoundErrorTag = "PersonNotFoundError"
 
-export interface CustomerNotFoundError {
-  readonly "_tag": CustomerNotFoundErrorTag;
+export interface PersonNotFoundError {
+  readonly "_tag": PersonNotFoundErrorTag;
   readonly "id": string
 }
 
-export type CustomersGetCustomerById500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsGetPersonById500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
 
-export type CustomersByDistinctId500 = CustomerServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsGetPersonByDistinctId500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
 
 export interface CreateOrganizationBody {
   readonly "name": string
@@ -278,40 +278,40 @@ export interface ProductPerkServiceError {
 
 export type ProductPerksListProductPerksByProductId500 = ProductPerkServiceError | AuthenticationError | NotAuthenticatedError
 
-export type SdkGetCustomerParamsXIsBackgrounded = "false"
+export type SdkGetPersonParamsXIsBackgrounded = "false"
 
-export type SdkGetCustomerParamsXIsDebugBuildEnum = "false"
+export type SdkGetPersonParamsXIsDebugBuildEnum = "false"
 
-export type SdkGetCustomerParamsXObserverModeEnum = "false"
+export type SdkGetPersonParamsXObserverModeEnum = "false"
 
-export type SdkGetCustomerParamsXPlatformFlavorEnum = "browser"
+export type SdkGetPersonParamsXPlatformFlavorEnum = "browser"
 
-export type SdkGetCustomerParamsXSdkEnum = "web"
+export type SdkGetPersonParamsXSdkEnum = "web"
 
-export interface SdkGetCustomerParams {
+export interface SdkGetPersonParams {
   readonly "x-distinct-id": string;
   readonly "x-publishable-key": string;
   readonly "x-client-bundle-id": string;
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
-  readonly "x-is-backgrounded": SdkGetCustomerParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkGetCustomerParamsXIsDebugBuildEnum | SdkGetCustomerParamsXIsDebugBuildEnum;
+  readonly "x-is-backgrounded": SdkGetPersonParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkGetPersonParamsXIsDebugBuildEnum | SdkGetPersonParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkGetCustomerParamsXObserverModeEnum | SdkGetCustomerParamsXObserverModeEnum;
+  readonly "x-observer-mode": SdkGetPersonParamsXObserverModeEnum | SdkGetPersonParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkGetCustomerParamsXPlatformFlavorEnum | SdkGetCustomerParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor": SdkGetPersonParamsXPlatformFlavorEnum | SdkGetPersonParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
-  readonly "x-sdk": SdkGetCustomerParamsXSdkEnum | SdkGetCustomerParamsXSdkEnum;
+  readonly "x-sdk": SdkGetPersonParamsXSdkEnum | SdkGetPersonParamsXSdkEnum;
   readonly "x-sdk-version": string;
   readonly "x-storefront"?: string | null | undefined
 }
 
-export interface SdkCustomer {
-  readonly "customerId": string;
+export interface SdkPerson {
+  readonly "personId": string;
   readonly "distinctId": string;
   readonly "email": string | null;
   readonly "name": string | null
@@ -324,12 +324,12 @@ export interface SdkValidationError {
   readonly "message": string
 }
 
-export type SdkGetCustomer400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkGetPerson400 = SdkValidationError | EffectHttpApiSchemaError
 
-export type SdkCustomerNotFoundErrorTag = "SdkCustomerNotFoundError"
+export type SdkPersonNotFoundErrorTag = "SdkPersonNotFoundError"
 
-export interface SdkCustomerNotFoundError {
-  readonly "_tag": SdkCustomerNotFoundErrorTag;
+export interface SdkPersonNotFoundError {
+  readonly "_tag": SdkPersonNotFoundErrorTag;
   readonly "message": string
 }
 
@@ -340,36 +340,36 @@ export interface SdkServiceError {
   readonly "cause": string
 }
 
-export type SdkGetCustomer500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkGetPerson500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
 
-export type SdkIdentifyParamsXIsBackgrounded = "false"
+export type SdkIdentifyPersonParamsXIsBackgrounded = "false"
 
-export type SdkIdentifyParamsXIsDebugBuildEnum = "false"
+export type SdkIdentifyPersonParamsXIsDebugBuildEnum = "false"
 
-export type SdkIdentifyParamsXObserverModeEnum = "false"
+export type SdkIdentifyPersonParamsXObserverModeEnum = "false"
 
-export type SdkIdentifyParamsXPlatformFlavorEnum = "browser"
+export type SdkIdentifyPersonParamsXPlatformFlavorEnum = "browser"
 
-export type SdkIdentifyParamsXSdkEnum = "web"
+export type SdkIdentifyPersonParamsXSdkEnum = "web"
 
-export interface SdkIdentifyParams {
+export interface SdkIdentifyPersonParams {
   readonly "x-distinct-id": string;
   readonly "x-publishable-key": string;
   readonly "x-client-bundle-id": string;
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
-  readonly "x-is-backgrounded": SdkIdentifyParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkIdentifyParamsXIsDebugBuildEnum | SdkIdentifyParamsXIsDebugBuildEnum;
+  readonly "x-is-backgrounded": SdkIdentifyPersonParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkIdentifyPersonParamsXIsDebugBuildEnum | SdkIdentifyPersonParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkIdentifyParamsXObserverModeEnum | SdkIdentifyParamsXObserverModeEnum;
+  readonly "x-observer-mode": SdkIdentifyPersonParamsXObserverModeEnum | SdkIdentifyPersonParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkIdentifyParamsXPlatformFlavorEnum | SdkIdentifyParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor": SdkIdentifyPersonParamsXPlatformFlavorEnum | SdkIdentifyPersonParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
-  readonly "x-sdk": SdkIdentifyParamsXSdkEnum | SdkIdentifyParamsXSdkEnum;
+  readonly "x-sdk": SdkIdentifyPersonParamsXSdkEnum | SdkIdentifyPersonParamsXSdkEnum;
   readonly "x-sdk-version": string;
   readonly "x-storefront"?: string | null | undefined
 }
@@ -381,58 +381,58 @@ export interface SdkIdentifyBody {
   readonly "traits"?: Record<string, unknown> | null | undefined
 }
 
-export type SdkIdentify400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkIdentifyPerson400 = SdkValidationError | EffectHttpApiSchemaError
 
-export type SdkCustomerAlreadyIdentifiedErrorTag = "SdkCustomerAlreadyIdentifiedError"
+export type SdkPersonAlreadyIdentifiedErrorTag = "SdkPersonAlreadyIdentifiedError"
 
-export interface SdkCustomerAlreadyIdentifiedError {
-  readonly "_tag": SdkCustomerAlreadyIdentifiedErrorTag;
+export interface SdkPersonAlreadyIdentifiedError {
+  readonly "_tag": SdkPersonAlreadyIdentifiedErrorTag;
   readonly "distinctId": string
 }
 
-export type SdkIdentify500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkIdentifyPerson500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
 
-export type SdkSyncCustomerAttributesParamsXIsBackgrounded = "false"
+export type SdkSyncPersonAttributesParamsXIsBackgrounded = "false"
 
-export type SdkSyncCustomerAttributesParamsXIsDebugBuildEnum = "false"
+export type SdkSyncPersonAttributesParamsXIsDebugBuildEnum = "false"
 
-export type SdkSyncCustomerAttributesParamsXObserverModeEnum = "false"
+export type SdkSyncPersonAttributesParamsXObserverModeEnum = "false"
 
-export type SdkSyncCustomerAttributesParamsXPlatformFlavorEnum = "browser"
+export type SdkSyncPersonAttributesParamsXPlatformFlavorEnum = "browser"
 
-export type SdkSyncCustomerAttributesParamsXSdkEnum = "web"
+export type SdkSyncPersonAttributesParamsXSdkEnum = "web"
 
-export interface SdkSyncCustomerAttributesParams {
+export interface SdkSyncPersonAttributesParams {
   readonly "x-distinct-id": string;
   readonly "x-publishable-key": string;
   readonly "x-client-bundle-id": string;
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
-  readonly "x-is-backgrounded": SdkSyncCustomerAttributesParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkSyncCustomerAttributesParamsXIsDebugBuildEnum | SdkSyncCustomerAttributesParamsXIsDebugBuildEnum;
+  readonly "x-is-backgrounded": SdkSyncPersonAttributesParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkSyncPersonAttributesParamsXIsDebugBuildEnum | SdkSyncPersonAttributesParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkSyncCustomerAttributesParamsXObserverModeEnum | SdkSyncCustomerAttributesParamsXObserverModeEnum;
+  readonly "x-observer-mode": SdkSyncPersonAttributesParamsXObserverModeEnum | SdkSyncPersonAttributesParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkSyncCustomerAttributesParamsXPlatformFlavorEnum | SdkSyncCustomerAttributesParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor": SdkSyncPersonAttributesParamsXPlatformFlavorEnum | SdkSyncPersonAttributesParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
-  readonly "x-sdk": SdkSyncCustomerAttributesParamsXSdkEnum | SdkSyncCustomerAttributesParamsXSdkEnum;
+  readonly "x-sdk": SdkSyncPersonAttributesParamsXSdkEnum | SdkSyncPersonAttributesParamsXSdkEnum;
   readonly "x-sdk-version": string;
   readonly "x-storefront"?: string | null | undefined
 }
 
-export interface SdkSyncCustomerAttributesBody {
+export interface SdkSyncPersonAttributesBody {
   readonly "email"?: string | null | undefined;
   readonly "name"?: string | null | undefined;
   readonly "traits"?: Record<string, unknown> | null | undefined
 }
 
-export type SdkSyncCustomerAttributes400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkSyncPersonAttributes400 = SdkValidationError | EffectHttpApiSchemaError
 
-export type SdkSyncCustomerAttributes500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkSyncPersonAttributes500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
 
 export type SdkSyncTransactionParamsXIsBackgrounded = "false"
 
@@ -808,7 +808,7 @@ export interface WebhookEndpoint {
   readonly "consecutiveFailures": number | WebhookEndpointConsecutiveFailuresEnum | WebhookEndpointConsecutiveFailuresEnum | WebhookEndpointConsecutiveFailuresEnum;
   readonly "createdAt": string | null;
   readonly "description": string | null;
-  readonly "events": ReadonlyArray<"customer.created" | "customer.updated" | "customer.deleted" | "subscription.created" | "subscription.renewed" | "subscription.cancelled" | "subscription.expired" | "purchase.completed" | "purchase.refunded">;
+  readonly "events": ReadonlyArray<"person.created" | "person.updated" | "person.deleted" | "subscription.created" | "subscription.renewed" | "subscription.cancelled" | "subscription.expired" | "purchase.completed" | "purchase.refunded">;
   readonly "id": string;
   readonly "lastSuccessAt": string | null;
   readonly "name": string;
@@ -1044,18 +1044,18 @@ export const make = (
   "apiKeysRotateSecretKey": (apiKeyId) => HttpClientRequest.post(`/api/v1/api-keys/${apiKeyId}/rotate`).pipe(
     onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"ApiKeyNotFoundError","500":"ApiKeysRotateSecretKey500"})
   ),
-  "customersListCustomers": () => HttpClientRequest.get(`/api/v1/customers`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"CustomersListCustomers500"})
+  "personsListPersons": () => HttpClientRequest.get(`/api/v1/persons`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PersonsListPersons500"})
   ),
-  "customersCreateCustomer": (options) => HttpClientRequest.post(`/api/v1/customers`).pipe(
+  "personsCreatePerson": (options) => HttpClientRequest.post(`/api/v1/persons`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"CustomersCreateCustomer400","403":"ActionForbiddenError","500":"CustomersCreateCustomer500"})
+    onRequest(["2xx"], {"400":"PersonsCreatePerson400","403":"ActionForbiddenError","500":"PersonsCreatePerson500"})
   ),
-  "customersGetCustomerById": (customerId) => HttpClientRequest.get(`/api/v1/customers/${customerId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"CustomerNotFoundError","500":"CustomersGetCustomerById500"})
+  "personsGetPersonById": (personId) => HttpClientRequest.get(`/api/v1/persons/${personId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"PersonNotFoundError","500":"PersonsGetPersonById500"})
   ),
-  "customersByDistinctId": (distinctId) => HttpClientRequest.get(`/api/v1/customers/by-distinct-id/${distinctId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"CustomerNotFoundError","500":"CustomersByDistinctId500"})
+  "personsGetPersonByDistinctId": (distinctId) => HttpClientRequest.get(`/api/v1/persons/by-distinct-id/${distinctId}`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"PersonNotFoundError","500":"PersonsGetPersonByDistinctId500"})
   ),
   "organizationsCreateOrganization": (options) => HttpClientRequest.post(`/api/v1/organizations`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
@@ -1080,19 +1080,19 @@ export const make = (
   "productPerksListProductPerksByProductId": (productId) => HttpClientRequest.get(`/api/v1/product-perks/by-product-id/${productId}`).pipe(
     onRequest(["2xx"], {"400":"ProductPerksListProductPerksByProductId400","403":"ActionForbiddenError","500":"ProductPerksListProductPerksByProductId500"})
   ),
-  "sdkGetCustomer": (options) => HttpClientRequest.get(`/api/v1/sdk/get-customer`).pipe(
+  "sdkGetPerson": (options) => HttpClientRequest.get(`/api/v1/sdk/person`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options?.["x-distinct-id"] ?? undefined, "x-publishable-key": options?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options?.["x-client-locale"] ?? undefined, "x-client-version": options?.["x-client-version"] ?? undefined, "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined, "x-nonce": options?.["x-nonce"] ?? undefined, "x-observer-mode": options?.["x-observer-mode"] ?? undefined, "x-platform": options?.["x-platform"] ?? undefined, "x-platform-brand": options?.["x-platform-brand"] ?? undefined, "x-platform-device": options?.["x-platform-device"] ?? undefined, "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options?.["x-platform-version"] ?? undefined, "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined, "x-sdk": options?.["x-sdk"] ?? undefined, "x-sdk-version": options?.["x-sdk-version"] ?? undefined, "x-storefront": options?.["x-storefront"] ?? undefined }),
-    onRequest(["2xx"], {"400":"SdkGetCustomer400","404":"SdkCustomerNotFoundError","500":"SdkGetCustomer500"})
+    onRequest(["2xx"], {"400":"SdkGetPerson400","404":"SdkPersonNotFoundError","500":"SdkGetPerson500"})
   ),
-  "sdkIdentify": (options) => HttpClientRequest.post(`/api/v1/sdk/identify`).pipe(
+  "sdkIdentifyPerson": (options) => HttpClientRequest.post(`/api/v1/sdk/identify`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
     HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkIdentify400","409":"SdkCustomerAlreadyIdentifiedError","500":"SdkIdentify500"})
+    onRequest(["2xx"], {"400":"SdkIdentifyPerson400","409":"SdkPersonAlreadyIdentifiedError","500":"SdkIdentifyPerson500"})
   ),
-  "sdkSyncCustomerAttributes": (options) => HttpClientRequest.post(`/api/v1/sdk/sync-customer-attributes`).pipe(
+  "sdkSyncPersonAttributes": (options) => HttpClientRequest.post(`/api/v1/sdk/person/traits`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
     HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkSyncCustomerAttributes400","500":"SdkSyncCustomerAttributes500"})
+    onRequest(["2xx"], {"400":"SdkSyncPersonAttributes400","500":"SdkSyncPersonAttributes500"})
   ),
   "sdkSyncTransaction": (options) => HttpClientRequest.post(`/api/v1/sdk/sync-transaction`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
@@ -1165,10 +1165,10 @@ export interface VoidhashCoreClient {
   readonly "apiKeysGetApiKeyById": (apiKeyId: string) => Effect.Effect<ApiKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysGetApiKeyById500", ApiKeysGetApiKeyById500>>
   readonly "apiKeysDeleteApiKey": (apiKeyId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysDeleteApiKey500", ApiKeysDeleteApiKey500>>
   readonly "apiKeysRotateSecretKey": (apiKeyId: string) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysRotateSecretKey500", ApiKeysRotateSecretKey500>>
-  readonly "customersListCustomers": () => Effect.Effect<CustomersListCustomers200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomersListCustomers500", CustomersListCustomers500>>
-  readonly "customersCreateCustomer": (options: CreateCustomerBody) => Effect.Effect<Customer, HttpClientError.HttpClientError | VoidhashCoreClientError<"CustomersCreateCustomer400", CustomersCreateCustomer400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomersCreateCustomer500", CustomersCreateCustomer500>>
-  readonly "customersGetCustomerById": (customerId: string) => Effect.Effect<Customer, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomerNotFoundError", CustomerNotFoundError> | VoidhashCoreClientError<"CustomersGetCustomerById500", CustomersGetCustomerById500>>
-  readonly "customersByDistinctId": (distinctId: string) => Effect.Effect<Customer, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"CustomerNotFoundError", CustomerNotFoundError> | VoidhashCoreClientError<"CustomersByDistinctId500", CustomersByDistinctId500>>
+  readonly "personsListPersons": () => Effect.Effect<PersonsListPersons200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonsListPersons500", PersonsListPersons500>>
+  readonly "personsCreatePerson": (options: CreatePersonBody) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"PersonsCreatePerson400", PersonsCreatePerson400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonsCreatePerson500", PersonsCreatePerson500>>
+  readonly "personsGetPersonById": (personId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonNotFoundError", PersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonById500", PersonsGetPersonById500>>
+  readonly "personsGetPersonByDistinctId": (distinctId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonNotFoundError", PersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonByDistinctId500", PersonsGetPersonByDistinctId500>>
   readonly "organizationsCreateOrganization": (options: CreateOrganizationBody) => Effect.Effect<Organization, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"OrganizationsCreateOrganization500", OrganizationsCreateOrganization500>>
   readonly "perksListPerks": () => Effect.Effect<PerksListPerks200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PerksListPerks500", PerksListPerks500>>
   readonly "paywallLocationsListPaywallLocations": () => Effect.Effect<PaywallLocationsListPaywallLocations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PaywallLocationsListPaywallLocations500", PaywallLocationsListPaywallLocations500>>
@@ -1176,9 +1176,9 @@ export interface VoidhashCoreClient {
   readonly "projectsListProjects": (organizationId: string) => Effect.Effect<ProjectsListProjects200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProjectsListProjects500", ProjectsListProjects500>>
   readonly "productsListProducts": () => Effect.Effect<ProductsListProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProductsListProducts500", ProductsListProducts500>>
   readonly "productPerksListProductPerksByProductId": (productId: string) => Effect.Effect<ProductPerksListProductPerksByProductId200, HttpClientError.HttpClientError | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId400", ProductPerksListProductPerksByProductId400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId500", ProductPerksListProductPerksByProductId500>>
-  readonly "sdkGetCustomer": (options: SdkGetCustomerParams) => Effect.Effect<SdkCustomer, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkGetCustomer400", SdkGetCustomer400> | VoidhashCoreClientError<"SdkCustomerNotFoundError", SdkCustomerNotFoundError> | VoidhashCoreClientError<"SdkGetCustomer500", SdkGetCustomer500>>
-  readonly "sdkIdentify": (options: { readonly params: SdkIdentifyParams; readonly payload: SdkIdentifyBody }) => Effect.Effect<SdkCustomer, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkIdentify400", SdkIdentify400> | VoidhashCoreClientError<"SdkCustomerAlreadyIdentifiedError", SdkCustomerAlreadyIdentifiedError> | VoidhashCoreClientError<"SdkIdentify500", SdkIdentify500>>
-  readonly "sdkSyncCustomerAttributes": (options: { readonly params: SdkSyncCustomerAttributesParams; readonly payload: SdkSyncCustomerAttributesBody }) => Effect.Effect<SdkCustomer, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncCustomerAttributes400", SdkSyncCustomerAttributes400> | VoidhashCoreClientError<"SdkSyncCustomerAttributes500", SdkSyncCustomerAttributes500>>
+  readonly "sdkGetPerson": (options: SdkGetPersonParams) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkGetPerson400", SdkGetPerson400> | VoidhashCoreClientError<"SdkPersonNotFoundError", SdkPersonNotFoundError> | VoidhashCoreClientError<"SdkGetPerson500", SdkGetPerson500>>
+  readonly "sdkIdentifyPerson": (options: { readonly params: SdkIdentifyPersonParams; readonly payload: SdkIdentifyBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkIdentifyPerson400", SdkIdentifyPerson400> | VoidhashCoreClientError<"SdkPersonAlreadyIdentifiedError", SdkPersonAlreadyIdentifiedError> | VoidhashCoreClientError<"SdkIdentifyPerson500", SdkIdentifyPerson500>>
+  readonly "sdkSyncPersonAttributes": (options: { readonly params: SdkSyncPersonAttributesParams; readonly payload: SdkSyncPersonAttributesBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncPersonAttributes400", SdkSyncPersonAttributes400> | VoidhashCoreClientError<"SdkSyncPersonAttributes500", SdkSyncPersonAttributes500>>
   readonly "sdkSyncTransaction": (options: { readonly params: SdkSyncTransactionParams; readonly payload: SdkSyncTransactionRequest }) => Effect.Effect<SdkSyncTransactionResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncTransaction400", SdkSyncTransaction400> | VoidhashCoreClientError<"SdkSyncTransaction500", SdkSyncTransaction500>>
   readonly "sdkEvaluateFeatureFlags": (options: { readonly params: SdkEvaluateFeatureFlagsParams; readonly payload: EvaluateFeatureFlagsBody }) => Effect.Effect<SdkFeatureFlagsResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"SdkEvaluateFeatureFlags500", SdkEvaluateFeatureFlags500>>
   readonly "sdkResolvePaywall": (options: { readonly params: SdkResolvePaywallParams; readonly payload: SdkResolvePaywallBody }) => Effect.Effect<SdkResolvePaywall200, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkResolvePaywall400", SdkResolvePaywall400> | VoidhashCoreClientError<"SdkResolvePaywall500", SdkResolvePaywall500>>
diff --git a/packages/generated-clients/src/event-capture/generated.ts b/packages/generated-clients/src/event-capture/generated.ts
index bc2ad26e8..ba2ab714d 100644
--- a/packages/generated-clients/src/event-capture/generated.ts
+++ b/packages/generated-clients/src/event-capture/generated.ts
@@ -180,11 +180,11 @@ export const make = (
   }
   return {
     httpClient,
-    "eventCaptureCapture": (options) => HttpClientRequest.post(`/capture`).pipe(
+    "eventCaptureCapture": (options) => HttpClientRequest.post(`/i/v1/capture`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
     onRequest(["2xx"], {"400":"EventCaptureCapture400","401":"CaptureUnauthorizedError","413":"CapturePayloadTooLargeError","429":"CaptureRateLimitedError","500":"CaptureInternalServerError","503":"CaptureDependencyUnavailableError"})
   ),
-  "eventCaptureBatch": (options) => HttpClientRequest.post(`/batch`).pipe(
+  "eventCaptureBatch": (options) => HttpClientRequest.post(`/i/v1/batch`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
     onRequest(["2xx"], {"400":"EventCaptureBatch400","401":"CaptureUnauthorizedError","413":"CapturePayloadTooLargeError","429":"CaptureRateLimitedError","500":"CaptureInternalServerError","503":"CaptureDependencyUnavailableError"})
   )
diff --git a/scripts/generate-openapi-clients.mjs b/scripts/generate-openapi-clients.mjs
index ee53848f3..f1be75d2d 100644
--- a/scripts/generate-openapi-clients.mjs
+++ b/scripts/generate-openapi-clients.mjs
@@ -1,51 +1,43 @@
 #!/usr/bin/env node
 
 import { mkdirSync, writeFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
 import path from "node:path";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
-import { spawnSync } from "node:child_process";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 const repoRoot = path.resolve(__dirname, "..");
 const generatedClientsRoot = path.join(repoRoot, "packages/generated-clients");
 const nodeGeneratedRoot = path.join(repoRoot, "libraries/node/src/generated");
+const openapiRoot = path.join(generatedClientsRoot, "openapi");
 
-const mode = process.argv[2];
+const rawHost = process.argv.slice(2).find((arg) => arg !== "--")?.trim();
 
-if (mode !== "preview" && mode !== "production") {
-  console.error("Usage: node ./scripts/generate-openapi-clients.mjs <preview|production>");
+if (!rawHost) {
+  console.error(
+    "Usage: node ./scripts/generate-openapi-clients.mjs <host>\nExample: node ./scripts/generate-openapi-clients.mjs localhost:8787",
+  );
   process.exit(1);
 }
 
-const resolveUrl = (name, fallback) => {
-  const value = process.env[name] ?? fallback;
-
-  if (!value) {
-    console.error(`Missing required environment variable: ${name}`);
-    process.exit(1);
+const normalizeHost = (host) => {
+  if (host.startsWith("http://") || host.startsWith("https://")) {
+    return new URL(host).toString();
   }
 
-  return value;
-};
+  const protocol =
+    host.startsWith("localhost") || host.startsWith("127.0.0.1") ? "http://" : "https://";
 
-const specsByMode = {
-  preview: {
-    core: resolveUrl("VOIDHASH_PREVIEW_CORE_OPENAPI_URL"),
-    eventCapture: resolveUrl("VOIDHASH_PREVIEW_EVENT_CAPTURE_OPENAPI_URL"),
-  },
-  production: {
-    core: resolveUrl(
-      "VOIDHASH_PRODUCTION_CORE_OPENAPI_URL",
-      "https://api.voidhash.com/api/docs/openapi.json",
-    ),
-    eventCapture: resolveUrl("VOIDHASH_PRODUCTION_EVENT_CAPTURE_OPENAPI_URL"),
-  },
+  return new URL(`${protocol}${host}`).toString();
 };
 
-const openapiDir = path.join(generatedClientsRoot, "openapi", mode);
-mkdirSync(openapiDir, { recursive: true });
+const baseUrl = normalizeHost(rawHost);
+const coreSpecUrl = new URL("/api/docs/openapi.json", baseUrl).toString();
+const eventCaptureSpecUrl = new URL("/i/docs/openapi.json", baseUrl).toString();
+const coreSpecPath = path.join(openapiRoot, "core.json");
+const eventCaptureSpecPath = path.join(openapiRoot, "event-capture.json");
 
 const fetchJson = async (url) => {
   const response = await fetch(url);
@@ -57,6 +49,22 @@ const fetchJson = async (url) => {
   return await response.text();
 };
 
+const assertCoreSpec = (spec) => {
+  const paths = Object.keys(spec.paths ?? {});
+
+  if (!paths.some((specPath) => specPath.startsWith("/api/v1/"))) {
+    throw new Error("The core OpenAPI schema is missing /api/v1/* paths.");
+  }
+};
+
+const assertEventCaptureSpec = (spec) => {
+  const paths = Object.keys(spec.paths ?? {});
+
+  if (!paths.includes("/i/v1/capture") || !paths.includes("/i/v1/batch")) {
+    throw new Error("The event-capture OpenAPI schema is missing /i/v1/capture or /i/v1/batch.");
+  }
+};
+
 const run = (command, args) => {
   const result = spawnSync(command, args, {
     cwd: repoRoot,
@@ -74,18 +82,24 @@ const run = (command, args) => {
 };
 
 const main = async () => {
-  const specUrls = specsByMode[mode];
-  const corePath = path.join(openapiDir, "core.json");
-  const eventCapturePath = path.join(openapiDir, "event-capture.json");
+  mkdirSync(openapiRoot, { recursive: true });
+
+  const [coreSpecText, eventCaptureSpecText] = await Promise.all([
+    fetchJson(coreSpecUrl),
+    fetchJson(eventCaptureSpecUrl),
+  ]);
+
+  assertCoreSpec(JSON.parse(coreSpecText));
+  assertEventCaptureSpec(JSON.parse(eventCaptureSpecText));
 
-  writeFileSync(corePath, `${await fetchJson(specUrls.core)}\n`, "utf8");
-  writeFileSync(eventCapturePath, `${await fetchJson(specUrls.eventCapture)}\n`, "utf8");
+  writeFileSync(coreSpecPath, `${coreSpecText}\n`, "utf8");
+  writeFileSync(eventCaptureSpecPath, `${eventCaptureSpecText}\n`, "utf8");
 
   const coreOutput = run("pnpm", [
     "dlx",
     "@tim-smart/openapi-gen@1.0.3",
     "--spec",
-    corePath,
+    coreSpecPath,
     "--name",
     "VoidhashCoreClient",
   ]);
@@ -95,7 +109,7 @@ const main = async () => {
     "dlx",
     "@tim-smart/openapi-gen@1.0.3",
     "--spec",
-    eventCapturePath,
+    eventCaptureSpecPath,
     "--name",
     "VoidhashEventCaptureClient",
   ]);
@@ -108,7 +122,7 @@ const main = async () => {
   mkdirSync(nodeGeneratedRoot, { recursive: true });
   run("node", [
     "./scripts/generate-node-grouped-client.mjs",
-    corePath,
+    coreSpecPath,
     path.join(nodeGeneratedRoot, "grouped-client.ts"),
   ]);
 };

From 7dccd7a3eaea4d6c985b37bc79dd4aae95a6d5de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 10 May 2026 21:14:37 +0200
Subject: [PATCH 011/129] wip: update schema

---
 packages/generated-clients/openapi/core.json  |  2 +-
 .../generated-clients/src/core/generated.ts   | 67 ++++++++++++++++++-
 2 files changed, 66 insertions(+), 3 deletions(-)

diff --git a/packages/generated-clients/openapi/core.json b/packages/generated-clients/openapi/core.json
index 0336e4b39..58e3cf7e3 100644
--- a/packages/generated-clients/openapi/core.json
+++ b/packages/generated-clients/openapi/core.json
@@ -1 +1 @@
-{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/api/v1/auth/session":{"get":{"tags":["auth"],"operationId":"auth.session","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"method":{"anyOf":[{"type":"string","enum":["api-key"]},{"type":"string","enum":["publishable-key"]},{"type":"string","enum":["secret-key"]}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","organizationId","slug"],"additionalProperties":false}}},"required":["method","name","organizations","projects"],"additionalProperties":false}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"Error","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}}}}}}},"/api/v1/api-keys":{"post":{"tags":["api_keys"],"operationId":"api_keys.createSecretKey","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSecretKeyBody"}}},"required":true}},"get":{"tags":["api_keys"],"operationId":"api_keys.listApiKeys","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ApiKey"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}":{"get":{"tags":["api_keys"],"operationId":"api_keys.getApiKeyById","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"ApiKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"delete":{"tags":["api_keys"],"operationId":"api_keys.deleteApiKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}/rotate":{"post":{"tags":["api_keys"],"operationId":"api_keys.rotateSecretKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons":{"post":{"tags":["persons"],"operationId":"persons.createPerson","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"PersonInvalidAnonymousIdError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonInvalidAnonymousIdError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreatePersonBody"}}},"required":true}},"get":{"tags":["persons"],"operationId":"persons.listPersons","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Person"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/{personId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonById","parameters":[{"name":"personId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/by-distinct-id/{distinctId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonByDistinctId","parameters":[{"name":"distinctId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/organizations":{"post":{"tags":["organizations"],"operationId":"organizations.createOrganization","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Organization","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Organization"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"OrganizationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/OrganizationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateOrganizationBody"}}},"required":true}}},"/api/v1/perks":{"get":{"tags":["perks"],"operationId":"perks.listPerks","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Perk"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/paywall-locations":{"get":{"tags":["paywall_locations"],"operationId":"paywall_locations.listPaywallLocations","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaywallLocation"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaywallLocationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaywallLocationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/projects":{"post":{"tags":["projects"],"operationId":"projects.createProject","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Project","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Project"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateProjectBody"}}},"required":true}}},"/api/v1/projects/{organizationId}":{"get":{"tags":["projects"],"operationId":"projects.listProjects","parameters":[{"name":"organizationId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Project"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/products":{"get":{"tags":["products"],"operationId":"products.listProducts","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Product"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/product-perks/by-product-id/{productId}":{"get":{"tags":["product_perks"],"operationId":"product_perks.listProductPerksByProductId","parameters":[{"name":"productId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ProductPerk"}}}}},"400":{"description":"ProductPerkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductPerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/person":{"get":{"tags":["sdk"],"operationId":"sdk.getPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonNotFoundError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/identify":{"post":{"tags":["sdk"],"operationId":"sdk.identifyPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"409":{"description":"SdkPersonAlreadyIdentifiedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonAlreadyIdentifiedError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkIdentifyBody"}}},"required":true}}},"/api/v1/sdk/person/traits":{"post":{"tags":["sdk"],"operationId":"sdk.syncPersonAttributes","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncPersonAttributesBody"}}},"required":true}}},"/api/v1/sdk/sync-transaction":{"post":{"tags":["sdk"],"operationId":"sdk.syncTransaction","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkSyncTransactionResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncTransactionResponse"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"platform":{"anyOf":[{"type":"string","enum":["ios"]},{"type":"string","enum":["android"]}]},"productId":{"type":"string"},"purchaseDate":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"purchaseToken":{"anyOf":[{"type":"string"},{"type":"null"}]},"quantity":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"receipt":{"anyOf":[{"type":"string"},{"type":"null"}]},"transactionId":{"type":"string"}},"required":["platform","productId","purchaseDate","quantity","transactionId"],"additionalProperties":false}}},"required":true}}},"/api/v1/sdk/evaluate-flags":{"post":{"tags":["sdk"],"operationId":"sdk.evaluateFeatureFlags","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"SdkFeatureFlagsResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkFeatureFlagsResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EvaluateFeatureFlagsBody"}}},"required":true}}},"/api/v1/sdk/resolve-paywall":{"post":{"tags":["sdk"],"operationId":"sdk.resolvePaywall","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkResolvedPaywall"},{"type":"null"}]}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkResolvePaywallBody"}}},"required":true}}},"/api/v1/users/current":{"get":{"tags":["users"],"operationId":"users.getUser","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"User","content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | UserServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/UserServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-configurations":{"get":{"tags":["payment_provider_configurations"],"operationId":"payment_provider_configurations.listPaymentProviderConfigurations","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderConfiguration"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderConfigurationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderConfigurationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-products":{"get":{"tags":["payment_provider_products"],"operationId":"payment_provider_products.listPaymentProviderProducts","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderProduct"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/changesets/deploy":{"post":{"tags":["changesets"],"operationId":"changesets.deployChangeset","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"DeployChangesetResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ChangesetDeploymentServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ChangesetDeploymentServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetBody"}}},"required":true}}},"/api/v1/webhooks/endpoints":{"post":{"tags":["webhooks"],"operationId":"webhooks.createWebhookEndpoint","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateWebhookEndpointBody"}}},"required":true}},"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookEndpoints","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEndpoint"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"patch":{"tags":["webhooks"],"operationId":"webhooks.updateWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateWebhookEndpointBody"}}},"required":true}},"delete":{"tags":["webhooks"],"operationId":"webhooks.deleteWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/rotate-secret":{"post":{"tags":["webhooks"],"operationId":"webhooks.rotateWebhookSecret","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/test":{"post":{"tags":["webhooks"],"operationId":"webhooks.testWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries":{"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookDeliveries","parameters":[],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDelivery"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookDeliveryWithAttempts","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryWithAttempts"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}/retry":{"post":{"tags":["webhooks"],"operationId":"webhooks.retryWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[{"apiKey":[]},{"betterAuthCookie":[]},{"publishableKey":[]},{"secretKey":[]}],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}}},"components":{"schemas":{"ActionForbiddenError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ActionForbiddenError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"AuthenticationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["AuthenticationError"]},"cause":{"type":"string"},"message":{"type":"string"}},"required":["_tag","cause","message"],"additionalProperties":false},"NotAuthenticatedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["NotAuthenticatedError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreateSecretKeyBody":{"type":"object","properties":{"name":{"type":"string"},"projectId":{"type":"string"}},"required":["name","projectId"],"additionalProperties":false},"ApiKeyWithRawKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"type":"string"}},"required":["end","id","isPublic","name","prefix","projectId","rawKey"],"additionalProperties":false},"ApiKeyServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ApiKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["end","id","isPublic","name","prefix","projectId"],"additionalProperties":false},"ApiKeyNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreatePersonBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Person":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"PersonInvalidAnonymousIdError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonInvalidAnonymousIdError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"PersonServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonNotFoundError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"CreateOrganizationBody":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"Organization":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"OrganizationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["OrganizationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Perk":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","projectId","slug"],"additionalProperties":false},"PerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaywallLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["description","id","name","projectId","slug"],"additionalProperties":false},"PaywallLocationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaywallLocationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"CreateProjectBody":{"type":"object","properties":{"name":{"type":"string"},"organizationId":{"type":"string"}},"required":["name","organizationId"],"additionalProperties":false},"Project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"ProjectServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProjectServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Product":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["one-time"]},{"type":"string","enum":["one-time-consumable"]}]}},"required":["id","name","projectId","slug","type"],"additionalProperties":false},"ProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerk":{"type":"object","properties":{"id":{"type":"string"},"perkId":{"type":"string"},"productId":{"type":"string"}},"required":["id","perkId","productId"],"additionalProperties":false},"ProductPerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkPerson":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"SdkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SdkPersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkIdentifyBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"SdkPersonAlreadyIdentifiedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonAlreadyIdentifiedError"]},"distinctId":{"type":"string"}},"required":["_tag","distinctId"],"additionalProperties":false},"SdkSyncPersonAttributesBody":{"type":"object","properties":{"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"additionalProperties":false},"SdkSyncTransactionResponse":{"type":"object","properties":{"accepted":{"type":"boolean"}},"required":["accepted"],"additionalProperties":false},"EvaluateFeatureFlagsBody":{"type":"object","properties":{"flagKeys":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]}},"additionalProperties":false},"SdkFeatureFlagResult":{"type":"object","properties":{"enabled":{"type":"boolean"},"key":{"type":"string"},"payload":{"anyOf":[{"type":"null"},{"type":"null"}]},"variantKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["enabled","key","payload","variantKey"],"additionalProperties":false},"SdkFeatureFlagsResponse":{"type":"object","properties":{"flags":{"type":"array","items":{"$ref":"#/components/schemas/SdkFeatureFlagResult"}}},"required":["flags"],"additionalProperties":false},"SdkResolvePaywallBody":{"type":"object","properties":{"locationSlug":{"type":"string"}},"required":["locationSlug"],"additionalProperties":false},"SdkResolvedPaywallShowing":{"type":"object","properties":{"id":{"type":"string"},"paywall":{"anyOf":[{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},{"type":"null"}]},"paywallId":{"anyOf":[{"type":"string"},{"type":"null"}]},"paywallRelease":{"anyOf":[{"type":"object","properties":{"htmlUrl":{"type":"string"},"publishedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"releaseId":{"type":"string"},"version":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]}},"required":["htmlUrl","publishedAt","releaseId","version"],"additionalProperties":false},{"type":"null"}]},"paywallReleaseId":{"anyOf":[{"type":"string"},{"type":"null"}]},"startedAt":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["paywall_release"]},{"type":"string","enum":["feature_flag"]}]}},"required":["id","paywall","paywallId","paywallRelease","paywallReleaseId","startedAt","type"],"additionalProperties":false},"SdkResolvedPaywall":{"type":"object","properties":{"location":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"showing":{"$ref":"#/components/schemas/SdkResolvedPaywallShowing"}},"required":["location","showing"],"additionalProperties":false},"User":{"type":"object","properties":{"createdAt":{"type":"string"},"email":{"type":"string"},"emailVerified":{"type":"boolean"},"id":{"type":"string"},"image":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","organizationId","slug"],"additionalProperties":false}},"updatedAt":{"type":"string"}},"required":["createdAt","email","emailVerified","id","image","name","organizations","projects","updatedAt"],"additionalProperties":false},"UserServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["UserServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderConfiguration":{"type":"object","properties":{"enabled":{"type":"boolean"},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"providerId":{"type":"string"}},"required":["enabled","id","name","projectId","providerId"],"additionalProperties":false},"PaymentProviderConfigurationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderConfigurationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderProduct":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"id":{"type":"string"},"paymentProviderConfigurationId":{"type":"string"},"productId":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","id","paymentProviderConfigurationId","productId","providerId"],"additionalProperties":false},"PaymentProviderProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"DeployChangesetBody":{"type":"object","properties":{"changeset":{"type":"object","properties":{"changes":{"type":"array","items":{"anyOf":[{"type":"object","properties":{"changeType":{"type":"string","enum":["create-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["archive-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false}]}}},"required":["changes"],"additionalProperties":false}},"required":["changeset"],"additionalProperties":false},"DeployChangesetResponse":{"type":"object","properties":{"deploymentId":{"type":"string"}},"required":["deploymentId"],"additionalProperties":false},"ChangesetDeploymentServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ChangesetDeploymentServiceError"]},"cause":{"type":"null"}},"required":["_tag","cause"],"additionalProperties":false},"CreateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"url":{"type":"string"}},"required":["events","name","url"],"additionalProperties":false},"WebhookEndpoint":{"type":"object","properties":{"consecutiveFailures":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"anyOf":[{"type":"string","enum":["person.created"]},{"type":"string","enum":["person.updated"]},{"type":"string","enum":["person.deleted"]},{"type":"string","enum":["subscription.created"]},{"type":"string","enum":["subscription.renewed"]},{"type":"string","enum":["subscription.cancelled"]},{"type":"string","enum":["subscription.expired"]},{"type":"string","enum":["purchase.completed"]},{"type":"string","enum":["purchase.refunded"]}]}},"id":{"type":"string"},"lastSuccessAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"projectId":{"type":"string"},"secret":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]},{"type":"string","enum":["failed"]}]},"url":{"type":"string"}},"required":["consecutiveFailures","createdAt","description","events","id","lastSuccessAt","name","projectId","secret","status","url"],"additionalProperties":false},"WebhookValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"WebhookServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"WebhookEndpointNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookEndpointNotFoundError"]},"endpointId":{"type":"string"}},"required":["_tag","endpointId"],"additionalProperties":false},"UpdateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"events":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]}]},{"type":"null"}]},"url":{"anyOf":[{"type":"string"},{"type":"null"}]}},"additionalProperties":false},"WebhookDelivery":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryAttempt":{"type":"object","properties":{"attemptNumber":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"durationMs":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"errorMessage":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"responseBody":{"anyOf":[{"type":"string"},{"type":"null"}]},"statusCode":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"succeeded":{"type":"boolean"}},"required":["attemptNumber","createdAt","durationMs","errorMessage","id","responseBody","statusCode","succeeded"],"additionalProperties":false},"WebhookDeliveryWithAttempts":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"attempts":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDeliveryAttempt"}},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","attempts","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookDeliveryNotFoundError"]},"deliveryId":{"type":"string"}},"required":["_tag","deliveryId"],"additionalProperties":false}},"securitySchemes":{"apiKey":{"type":"apiKey","name":"x-api-key","in":"header"},"betterAuthCookie":{"type":"apiKey","name":"__Secure-better-auth.session_token","in":"cookie"},"publishableKey":{"type":"apiKey","name":"x-publishable-key","in":"header"},"secretKey":{"type":"apiKey","name":"x-secret-key","in":"header"}}},"security":[],"tags":[{"name":"auth"},{"name":"api_keys"},{"name":"persons"},{"name":"organizations"},{"name":"perks"},{"name":"paywall_locations"},{"name":"projects"},{"name":"products"},{"name":"product_perks"},{"name":"sdk"},{"name":"users"},{"name":"payment_provider_configurations"},{"name":"payment_provider_products"},{"name":"changesets"},{"name":"webhooks"}]}
+{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/api/v1/auth/session":{"get":{"tags":["auth"],"operationId":"auth.session","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"method":{"anyOf":[{"type":"string","enum":["api-key"]},{"type":"string","enum":["publishable-key"]},{"type":"string","enum":["secret-key"]}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","organizationId","slug"],"additionalProperties":false}}},"required":["method","name","organizations","projects"],"additionalProperties":false}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"Error","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}}}}}}},"/api/v1/api-keys":{"post":{"tags":["api_keys"],"operationId":"api_keys.createSecretKey","parameters":[],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSecretKeyBody"}}},"required":true}},"get":{"tags":["api_keys"],"operationId":"api_keys.listApiKeys","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ApiKey"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}":{"get":{"tags":["api_keys"],"operationId":"api_keys.getApiKeyById","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"delete":{"tags":["api_keys"],"operationId":"api_keys.deleteApiKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}/rotate":{"post":{"tags":["api_keys"],"operationId":"api_keys.rotateSecretKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons":{"post":{"tags":["persons"],"operationId":"persons.createPerson","parameters":[],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"PersonInvalidAnonymousIdError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonInvalidAnonymousIdError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreatePersonBody"}}},"required":true}},"get":{"tags":["persons"],"operationId":"persons.listPersons","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Person"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/{personId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonById","parameters":[{"name":"personId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/by-distinct-id/{distinctId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonByDistinctId","parameters":[{"name":"distinctId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/organizations":{"post":{"tags":["organizations"],"operationId":"organizations.createOrganization","parameters":[],"security":[],"responses":{"200":{"description":"Organization","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Organization"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"OrganizationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/OrganizationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateOrganizationBody"}}},"required":true}}},"/api/v1/perks":{"get":{"tags":["perks"],"operationId":"perks.listPerks","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Perk"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/paywall-locations":{"get":{"tags":["paywall_locations"],"operationId":"paywall_locations.listPaywallLocations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaywallLocation"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaywallLocationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaywallLocationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/projects":{"post":{"tags":["projects"],"operationId":"projects.createProject","parameters":[],"security":[],"responses":{"200":{"description":"Project","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Project"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateProjectBody"}}},"required":true}}},"/api/v1/projects/{organizationId}":{"get":{"tags":["projects"],"operationId":"projects.listProjects","parameters":[{"name":"organizationId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Project"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/products":{"get":{"tags":["products"],"operationId":"products.listProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Product"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/product-perks/by-product-id/{productId}":{"get":{"tags":["product_perks"],"operationId":"product_perks.listProductPerksByProductId","parameters":[{"name":"productId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ProductPerk"}}}}},"400":{"description":"ProductPerkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductPerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/person":{"get":{"tags":["sdk"],"operationId":"sdk.getPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonNotFoundError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/identify":{"post":{"tags":["sdk"],"operationId":"sdk.identifyPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"409":{"description":"SdkPersonAlreadyIdentifiedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonAlreadyIdentifiedError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkIdentifyBody"}}},"required":true}}},"/api/v1/sdk/person/traits":{"post":{"tags":["sdk"],"operationId":"sdk.syncPersonAttributes","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncPersonAttributesBody"}}},"required":true}}},"/api/v1/sdk/sync-transaction":{"post":{"tags":["sdk"],"operationId":"sdk.syncTransaction","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkSyncTransactionResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncTransactionResponse"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"platform":{"anyOf":[{"type":"string","enum":["ios"]},{"type":"string","enum":["android"]}]},"productId":{"type":"string"},"purchaseDate":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"purchaseToken":{"anyOf":[{"type":"string"},{"type":"null"}]},"quantity":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"receipt":{"anyOf":[{"type":"string"},{"type":"null"}]},"transactionId":{"type":"string"}},"required":["platform","productId","purchaseDate","quantity","transactionId"],"additionalProperties":false}}},"required":true}}},"/api/v1/sdk/evaluate-flags":{"post":{"tags":["sdk"],"operationId":"sdk.evaluateFeatureFlags","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkFeatureFlagsResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkFeatureFlagsResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EvaluateFeatureFlagsBody"}}},"required":true}}},"/api/v1/sdk/resolve-paywall":{"post":{"tags":["sdk"],"operationId":"sdk.resolvePaywall","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkResolvedPaywall"},{"type":"null"}]}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkResolvePaywallBody"}}},"required":true}}},"/api/v1/users/current":{"get":{"tags":["users"],"operationId":"users.getUser","parameters":[],"security":[],"responses":{"200":{"description":"User","content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | UserServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/UserServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-configurations":{"get":{"tags":["payment_provider_configurations"],"operationId":"payment_provider_configurations.listPaymentProviderConfigurations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderConfiguration"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderConfigurationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderConfigurationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-products":{"get":{"tags":["payment_provider_products"],"operationId":"payment_provider_products.listPaymentProviderProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderProduct"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/changesets/deploy":{"post":{"tags":["changesets"],"operationId":"changesets.deployChangeset","parameters":[],"security":[],"responses":{"200":{"description":"DeployChangesetResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ChangesetDeploymentServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ChangesetDeploymentServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetBody"}}},"required":true}}},"/api/v1/webhooks/endpoints":{"post":{"tags":["webhooks"],"operationId":"webhooks.createWebhookEndpoint","parameters":[],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateWebhookEndpointBody"}}},"required":true}},"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookEndpoints","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEndpoint"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"patch":{"tags":["webhooks"],"operationId":"webhooks.updateWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateWebhookEndpointBody"}}},"required":true}},"delete":{"tags":["webhooks"],"operationId":"webhooks.deleteWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/rotate-secret":{"post":{"tags":["webhooks"],"operationId":"webhooks.rotateWebhookSecret","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/test":{"post":{"tags":["webhooks"],"operationId":"webhooks.testWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries":{"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookDeliveries","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDelivery"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDeliveryWithAttempts","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryWithAttempts"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}/retry":{"post":{"tags":["webhooks"],"operationId":"webhooks.retryWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}}},"components":{"schemas":{"ActionForbiddenError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ActionForbiddenError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"AuthenticationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["AuthenticationError"]},"cause":{"type":"string"},"message":{"type":"string"}},"required":["_tag","cause","message"],"additionalProperties":false},"NotAuthenticatedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["NotAuthenticatedError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreateSecretKeyBody":{"type":"object","properties":{"name":{"type":"string"},"projectId":{"type":"string"}},"required":["name","projectId"],"additionalProperties":false},"ApiKeyWithRawKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"type":"string"}},"required":["end","id","isPublic","name","prefix","projectId","rawKey"],"additionalProperties":false},"ApiKeyServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ApiKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["end","id","isPublic","name","prefix","projectId"],"additionalProperties":false},"ApiKeyNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreatePersonBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Person":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"PersonInvalidAnonymousIdError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonInvalidAnonymousIdError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"PersonServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonNotFoundError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"CreateOrganizationBody":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"Organization":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"OrganizationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["OrganizationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Perk":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","projectId","slug"],"additionalProperties":false},"PerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaywallLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["description","id","name","projectId","slug"],"additionalProperties":false},"PaywallLocationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaywallLocationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"CreateProjectBody":{"type":"object","properties":{"name":{"type":"string"},"organizationId":{"type":"string"}},"required":["name","organizationId"],"additionalProperties":false},"Project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"ProjectServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProjectServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Product":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["one-time"]},{"type":"string","enum":["one-time-consumable"]}]}},"required":["id","name","projectId","slug","type"],"additionalProperties":false},"ProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerk":{"type":"object","properties":{"id":{"type":"string"},"perkId":{"type":"string"},"productId":{"type":"string"}},"required":["id","perkId","productId"],"additionalProperties":false},"ProductPerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkEntitlementGrant":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"perkId":{"type":"string"},"source":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["purchase"]},{"type":"string","enum":["manual"]}]},"sourceId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["expired"]}]}},"required":["expiresAt","perkId","source","sourceId","sourcePersonId","status"],"additionalProperties":false},"SdkPurchaseHistoryEntry":{"type":"object","properties":{"createdAt":{"type":"string"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"providerKey":{"type":"string"},"purchaseId":{"type":"string"},"sourcePersonId":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["one_time"]},{"type":"string","enum":["subscription"]}]}},"required":["createdAt","productId","providerKey","purchaseId","sourcePersonId","type"],"additionalProperties":false},"SdkCurrentSubscription":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"type":"string","enum":["none"]},{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["past_due"]},{"type":"string","enum":["trialing"]}]},"subscriptionId":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["expiresAt","productId","status","subscriptionId"],"additionalProperties":false},"SdkSubscriptionHistoryEntry":{"type":"object","properties":{"canceledAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"isTrial":{"type":"boolean"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"startsAt":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["expired"]},{"type":"string","enum":["trialing"]},{"type":"string","enum":["past_due"]}]},"subscriptionId":{"type":"string"}},"required":["canceledAt","expiresAt","isTrial","productId","sourcePersonId","startsAt","status","subscriptionId"],"additionalProperties":false},"SdkPerson":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"entitlements":{"type":"object","properties":{"grants":{"type":"array","items":{"$ref":"#/components/schemas/SdkEntitlementGrant"}}},"required":["grants"],"additionalProperties":false},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"personId":{"type":"string"},"purchases":{"type":"object","properties":{"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkPurchaseHistoryEntry"}}},"required":["history"],"additionalProperties":false},"snapshotContext":{"type":"object","properties":{"includedPersonIds":{"type":"array","items":{"type":"string"}},"migrationJobId":{"anyOf":[{"type":"string"},{"type":"null"}]},"mode":{"anyOf":[{"type":"string","enum":["persisted"]},{"type":"string","enum":["temporary_pending_transfer"]}]}},"required":["includedPersonIds","migrationJobId","mode"],"additionalProperties":false},"subscriptions":{"type":"object","properties":{"current":{"anyOf":[{"$ref":"#/components/schemas/SdkCurrentSubscription"},{"type":"null"}]},"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkSubscriptionHistoryEntry"}}},"required":["current","history"],"additionalProperties":false}},"required":["distinctId","email","entitlements","name","personId","purchases","snapshotContext","subscriptions"],"additionalProperties":false},"SdkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SdkPersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkIdentifyBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"SdkPersonAlreadyIdentifiedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonAlreadyIdentifiedError"]},"distinctId":{"type":"string"}},"required":["_tag","distinctId"],"additionalProperties":false},"SdkSyncPersonAttributesBody":{"type":"object","properties":{"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"additionalProperties":false},"SdkSyncTransactionResponse":{"type":"object","properties":{"accepted":{"type":"boolean"}},"required":["accepted"],"additionalProperties":false},"EvaluateFeatureFlagsBody":{"type":"object","properties":{"flagKeys":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]}},"additionalProperties":false},"SdkFeatureFlagResult":{"type":"object","properties":{"enabled":{"type":"boolean"},"key":{"type":"string"},"payload":{"anyOf":[{"type":"null"},{"type":"null"}]},"variantKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["enabled","key","payload","variantKey"],"additionalProperties":false},"SdkFeatureFlagsResponse":{"type":"object","properties":{"flags":{"type":"array","items":{"$ref":"#/components/schemas/SdkFeatureFlagResult"}}},"required":["flags"],"additionalProperties":false},"SdkResolvePaywallBody":{"type":"object","properties":{"locationSlug":{"type":"string"}},"required":["locationSlug"],"additionalProperties":false},"SdkResolvedPaywallShowing":{"type":"object","properties":{"id":{"type":"string"},"paywall":{"anyOf":[{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},{"type":"null"}]},"paywallId":{"anyOf":[{"type":"string"},{"type":"null"}]},"paywallRelease":{"anyOf":[{"type":"object","properties":{"htmlUrl":{"type":"string"},"publishedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"releaseId":{"type":"string"},"version":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]}},"required":["htmlUrl","publishedAt","releaseId","version"],"additionalProperties":false},{"type":"null"}]},"paywallReleaseId":{"anyOf":[{"type":"string"},{"type":"null"}]},"startedAt":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["paywall_release"]},{"type":"string","enum":["feature_flag"]}]}},"required":["id","paywall","paywallId","paywallRelease","paywallReleaseId","startedAt","type"],"additionalProperties":false},"SdkResolvedPaywall":{"type":"object","properties":{"location":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"showing":{"$ref":"#/components/schemas/SdkResolvedPaywallShowing"}},"required":["location","showing"],"additionalProperties":false},"User":{"type":"object","properties":{"createdAt":{"type":"string"},"email":{"type":"string"},"emailVerified":{"type":"boolean"},"id":{"type":"string"},"image":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","organizationId","slug"],"additionalProperties":false}},"updatedAt":{"type":"string"}},"required":["createdAt","email","emailVerified","id","image","name","organizations","projects","updatedAt"],"additionalProperties":false},"UserServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["UserServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderConfiguration":{"type":"object","properties":{"enabled":{"type":"boolean"},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"providerId":{"type":"string"}},"required":["enabled","id","name","projectId","providerId"],"additionalProperties":false},"PaymentProviderConfigurationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderConfigurationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderProduct":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"id":{"type":"string"},"paymentProviderConfigurationId":{"type":"string"},"productId":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","id","paymentProviderConfigurationId","productId","providerId"],"additionalProperties":false},"PaymentProviderProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"DeployChangesetBody":{"type":"object","properties":{"changeset":{"type":"object","properties":{"changes":{"type":"array","items":{"anyOf":[{"type":"object","properties":{"changeType":{"type":"string","enum":["create-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["archive-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false}]}}},"required":["changes"],"additionalProperties":false}},"required":["changeset"],"additionalProperties":false},"DeployChangesetResponse":{"type":"object","properties":{"deploymentId":{"type":"string"}},"required":["deploymentId"],"additionalProperties":false},"ChangesetDeploymentServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ChangesetDeploymentServiceError"]},"cause":{"type":"null"}},"required":["_tag","cause"],"additionalProperties":false},"CreateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"url":{"type":"string"}},"required":["events","name","url"],"additionalProperties":false},"WebhookEndpoint":{"type":"object","properties":{"consecutiveFailures":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"anyOf":[{"type":"string","enum":["person.created"]},{"type":"string","enum":["person.updated"]},{"type":"string","enum":["person.deleted"]},{"type":"string","enum":["subscription.created"]},{"type":"string","enum":["subscription.renewed"]},{"type":"string","enum":["subscription.cancelled"]},{"type":"string","enum":["subscription.expired"]},{"type":"string","enum":["purchase.completed"]},{"type":"string","enum":["purchase.refunded"]}]}},"id":{"type":"string"},"lastSuccessAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"projectId":{"type":"string"},"secret":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]},{"type":"string","enum":["failed"]}]},"url":{"type":"string"}},"required":["consecutiveFailures","createdAt","description","events","id","lastSuccessAt","name","projectId","secret","status","url"],"additionalProperties":false},"WebhookValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"WebhookServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"WebhookEndpointNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookEndpointNotFoundError"]},"endpointId":{"type":"string"}},"required":["_tag","endpointId"],"additionalProperties":false},"UpdateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"events":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]}]},{"type":"null"}]},"url":{"anyOf":[{"type":"string"},{"type":"null"}]}},"additionalProperties":false},"WebhookDelivery":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryAttempt":{"type":"object","properties":{"attemptNumber":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"durationMs":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"errorMessage":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"responseBody":{"anyOf":[{"type":"string"},{"type":"null"}]},"statusCode":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"succeeded":{"type":"boolean"}},"required":["attemptNumber","createdAt","durationMs","errorMessage","id","responseBody","statusCode","succeeded"],"additionalProperties":false},"WebhookDeliveryWithAttempts":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"attempts":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDeliveryAttempt"}},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","attempts","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookDeliveryNotFoundError"]},"deliveryId":{"type":"string"}},"required":["_tag","deliveryId"],"additionalProperties":false}},"securitySchemes":{}},"security":[],"tags":[{"name":"auth"},{"name":"api_keys"},{"name":"persons"},{"name":"organizations"},{"name":"perks"},{"name":"paywall_locations"},{"name":"projects"},{"name":"products"},{"name":"product_perks"},{"name":"sdk"},{"name":"users"},{"name":"payment_provider_configurations"},{"name":"payment_provider_products"},{"name":"changesets"},{"name":"webhooks"}]}
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
index 96bc2254e..e738e0727 100644
--- a/packages/generated-clients/src/core/generated.ts
+++ b/packages/generated-clients/src/core/generated.ts
@@ -310,11 +310,74 @@ export interface SdkGetPersonParams {
   readonly "x-storefront"?: string | null | undefined
 }
 
+export type SdkEntitlementGrantSourceEnum = "manual"
+
+export type SdkEntitlementGrantStatusEnum = "expired"
+
+export interface SdkEntitlementGrant {
+  readonly "expiresAt": string | null;
+  readonly "perkId": string;
+  readonly "source": SdkEntitlementGrantSourceEnum | SdkEntitlementGrantSourceEnum | SdkEntitlementGrantSourceEnum;
+  readonly "sourceId": string | null;
+  readonly "sourcePersonId": string;
+  readonly "status": SdkEntitlementGrantStatusEnum | SdkEntitlementGrantStatusEnum
+}
+
+export type SdkPurchaseHistoryEntryTypeEnum = "subscription"
+
+export interface SdkPurchaseHistoryEntry {
+  readonly "createdAt": string;
+  readonly "productId": string | null;
+  readonly "providerKey": string;
+  readonly "purchaseId": string;
+  readonly "sourcePersonId": string;
+  readonly "type": SdkPurchaseHistoryEntryTypeEnum | SdkPurchaseHistoryEntryTypeEnum
+}
+
+export type SdkPersonSnapshotContextModeEnum = "temporary_pending_transfer"
+
+export type SdkCurrentSubscriptionStatusEnum = "trialing"
+
+export interface SdkCurrentSubscription {
+  readonly "expiresAt": string | null;
+  readonly "productId": string | null;
+  readonly "status": SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum;
+  readonly "subscriptionId": string | null
+}
+
+export type SdkSubscriptionHistoryEntryStatusEnum = "past_due"
+
+export interface SdkSubscriptionHistoryEntry {
+  readonly "canceledAt": string | null;
+  readonly "expiresAt": string | null;
+  readonly "isTrial": boolean;
+  readonly "productId": string | null;
+  readonly "sourcePersonId": string;
+  readonly "startsAt": string;
+  readonly "status": SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum;
+  readonly "subscriptionId": string
+}
+
 export interface SdkPerson {
-  readonly "personId": string;
   readonly "distinctId": string;
   readonly "email": string | null;
-  readonly "name": string | null
+  readonly "entitlements": {
+  readonly "grants": ReadonlyArray<SdkEntitlementGrant>
+};
+  readonly "name": string | null;
+  readonly "personId": string;
+  readonly "purchases": {
+  readonly "history": ReadonlyArray<SdkPurchaseHistoryEntry>
+};
+  readonly "snapshotContext": {
+  readonly "includedPersonIds": ReadonlyArray<string>;
+  readonly "migrationJobId": string | null;
+  readonly "mode": SdkPersonSnapshotContextModeEnum | SdkPersonSnapshotContextModeEnum
+};
+  readonly "subscriptions": {
+  readonly "current": SdkCurrentSubscription | null;
+  readonly "history": ReadonlyArray<SdkSubscriptionHistoryEntry>
+}
 }
 
 export type SdkValidationErrorTag = "SdkValidationError"

From b250210c99e0539c824325a1f1a54f08e1a674d1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 10 May 2026 22:41:04 +0200
Subject: [PATCH 012/129] feat: refactor voidhash cli / sdk to typegen instead
 of DSL

---
 apps/cli/src/cli/commands/init.ts             | 309 +++---
 apps/cli/src/cli/commands/schema-check.ts     | 181 ----
 apps/cli/src/cli/commands/schema-pull.ts      |  99 --
 apps/cli/src/cli/commands/schema-push.ts      | 203 ----
 apps/cli/src/cli/commands/schema.ts           |  18 -
 apps/cli/src/cli/commands/types-check.ts      | 107 ++
 apps/cli/src/cli/commands/types-generate.ts   | 141 +++
 apps/cli/src/cli/commands/types.ts            |  17 +
 apps/cli/src/cli/index.ts                     |   4 +-
 apps/cli/src/domain/errors/schema.ts          |  31 -
 apps/cli/src/domain/schema/voidhash-config.ts |  21 +-
 apps/cli/src/domain/services/codegen.ts       | 219 ++--
 apps/cli/src/domain/services/schema.ts        | 378 +++----
 apps/cli/src/index.ts                         |   6 +-
 .../cli/src/utils/schema/changeset-builder.ts | 257 -----
 apps/cli/src/utils/schema/diff.ts             | 222 ----
 .../src/utils/schema/local-schema-loader.ts   | 339 ------
 apps/cli/src/utils/schema/version.ts          |  66 ++
 apps/cli/tests/fixtures/empty-schema.ts       |   6 -
 apps/cli/tests/fixtures/valid-schema.ts       |  44 -
 .../utils/schema/changeset-builder.test.ts    | 991 ------------------
 apps/cli/tests/utils/schema/diff.test.ts      | 648 ------------
 .../utils/schema/local-schema-loader.test.ts  | 433 --------
 docs/server-first-schema-server-spec.md       | 363 +++++++
 examples/react-native-example/app/_layout.tsx |   2 +-
 examples/react-native-example/app/index.tsx   |   2 +-
 .../app/menu/customer.tsx                     |   2 +-
 .../react-native-example/app/menu/paywall.tsx |   2 +-
 .../react-native-example/app/menu/sign-in.tsx |   2 +-
 examples/react-native-example/package.json    |   2 +
 .../utils/voidhash/_schema.ts                 |  44 -
 .../utils/voidhash/client.ts                  |  22 +-
 .../utils/voidhash/local.client.ts            |  52 -
 .../utils/voidhash/schema.ts                  |  27 -
 .../react-native-example/voidhash.config.ts   |   7 +-
 .../react-native-example/voidhash.gen.d.ts    |  15 +
 libraries/react-native/package.json           |  12 +-
 .../react-native/src/__tests__/client.test.ts |   5 +-
 .../src/__tests__/core/client-effect.test.ts  |  10 +-
 .../src/__tests__/helpers/test-schema.ts      |  78 +-
 .../react/use-paywall-by-location.test.tsx    |   3 +-
 libraries/react-native/src/client-effect.ts   | 250 +++--
 .../react-native/src/client-react-native.ts   |  21 +-
 libraries/react-native/src/client.tsx         | 158 +--
 .../src/core/networking/api-client.ts         |  30 +
 .../payment-adapters/app-store-adapter.ts     |  56 +-
 .../payment-adapters/google-play-adapter.ts   |  40 +-
 .../core/payment-adapters/payment-adapter.ts  | 104 +-
 .../react-native/src/core/schema/builder.ts   | 139 ---
 .../react-native/src/core/schema/constants.ts |  15 -
 .../src/core/schema/definitions.ts            |  13 -
 .../react-native/src/core/schema/index.ts     |  12 +-
 .../src/core/schema/paywall-location.ts       |  19 -
 .../react-native/src/core/schema/perk.ts      |  18 -
 .../src/core/schema/products/base.ts          | 106 --
 .../src/core/schema/products/subscription.ts  |  52 -
 .../react-native/src/core/schema/registry.ts  |  49 +
 .../react-native/src/core/schema/runtime.ts   |  65 ++
 .../react-native/src/core/schema/types.ts     | 234 -----
 .../react-native/src/core/schema/utils.ts     |  70 --
 .../src/core/testing/payment-adapter.ts       |  16 +-
 libraries/react-native/src/index.ts           |  43 -
 libraries/react-native/src/metro/index.ts     | 146 +++
 .../src/react/components/provider.tsx         |  32 +-
 .../src/react/hooks/use-customer.ts           |   7 +-
 .../src/react/hooks/use-feature-flags.ts      |   7 +-
 .../react/hooks/use-paywall-by-location.ts    |  45 +-
 .../src/react/hooks/use-products.ts           |  46 +-
 .../src/react/hooks/use-purchase.ts           |  14 +-
 69 files changed, 1849 insertions(+), 5348 deletions(-)
 delete mode 100644 apps/cli/src/cli/commands/schema-check.ts
 delete mode 100644 apps/cli/src/cli/commands/schema-pull.ts
 delete mode 100644 apps/cli/src/cli/commands/schema-push.ts
 delete mode 100644 apps/cli/src/cli/commands/schema.ts
 create mode 100644 apps/cli/src/cli/commands/types-check.ts
 create mode 100644 apps/cli/src/cli/commands/types-generate.ts
 create mode 100644 apps/cli/src/cli/commands/types.ts
 delete mode 100644 apps/cli/src/utils/schema/changeset-builder.ts
 delete mode 100644 apps/cli/src/utils/schema/diff.ts
 delete mode 100644 apps/cli/src/utils/schema/local-schema-loader.ts
 create mode 100644 apps/cli/src/utils/schema/version.ts
 delete mode 100644 apps/cli/tests/fixtures/empty-schema.ts
 delete mode 100644 apps/cli/tests/fixtures/valid-schema.ts
 delete mode 100644 apps/cli/tests/utils/schema/changeset-builder.test.ts
 delete mode 100644 apps/cli/tests/utils/schema/diff.test.ts
 delete mode 100644 apps/cli/tests/utils/schema/local-schema-loader.test.ts
 create mode 100644 docs/server-first-schema-server-spec.md
 delete mode 100644 examples/react-native-example/utils/voidhash/_schema.ts
 delete mode 100644 examples/react-native-example/utils/voidhash/local.client.ts
 delete mode 100644 examples/react-native-example/utils/voidhash/schema.ts
 create mode 100644 examples/react-native-example/voidhash.gen.d.ts
 delete mode 100644 libraries/react-native/src/core/schema/builder.ts
 delete mode 100644 libraries/react-native/src/core/schema/constants.ts
 delete mode 100644 libraries/react-native/src/core/schema/definitions.ts
 delete mode 100644 libraries/react-native/src/core/schema/paywall-location.ts
 delete mode 100644 libraries/react-native/src/core/schema/perk.ts
 delete mode 100644 libraries/react-native/src/core/schema/products/base.ts
 delete mode 100644 libraries/react-native/src/core/schema/products/subscription.ts
 create mode 100644 libraries/react-native/src/core/schema/registry.ts
 create mode 100644 libraries/react-native/src/core/schema/runtime.ts
 delete mode 100644 libraries/react-native/src/core/schema/types.ts
 delete mode 100644 libraries/react-native/src/core/schema/utils.ts
 create mode 100644 libraries/react-native/src/metro/index.ts

diff --git a/apps/cli/src/cli/commands/init.ts b/apps/cli/src/cli/commands/init.ts
index 2aaf2e17c..473a1b14b 100644
--- a/apps/cli/src/cli/commands/init.ts
+++ b/apps/cli/src/cli/commands/init.ts
@@ -1,9 +1,10 @@
 import { Command, Prompt } from "effect/unstable/cli";
 import { Console, Effect, Path } from "effect";
 
-import { createInitialNormalizedSchema } from "../../domain/schema/normalized-schema";
+import { DEFAULT_TYPES_OUTPUT } from "../../domain/schema/voidhash-config";
 import { Auth } from "../../domain/services/auth";
 import { Codegen } from "../../domain/services/codegen";
+import { SchemaService } from "../../domain/services/schema";
 import { SourceCode } from "../../domain/services/source-code";
 import { ApiClient } from "../../utils/api-client";
 import { userError } from "../../utils/error-formatter";
@@ -12,159 +13,157 @@ import { selectOrganization } from "../../utils/organizations/select-organizatio
 import { selectProject } from "../../utils/projects/select-project";
 import { debugOption } from "../shared-options";
 
+/**
+ * `voidhash init`
+ *
+ * One-time setup: authenticate, select team/project, write `voidhash.config.ts`
+ * at the project root, and produce the initial `voidhash.gen.d.ts` so type
+ * autocomplete works immediately.
+ *
+ * Schema files are no longer generated — the dashboard is the source of truth
+ * after the server-first redesign. Likewise the client file is the user's to
+ * write (it's two lines now: import + `createVoidhashClient`).
+ */
 export const initCommand = Command.make("init", { debug: debugOption }, () =>
-	Effect.gen(function* initCommand() {
-		const auth = yield* Auth;
-		const apiClient = yield* ApiClient;
-		const sourceCode = yield* SourceCode;
-		const codegen = yield* Codegen;
-		const path = yield* Path.Path;
-
-		const voidhashConfig = yield* sourceCode
-			.loadVoidhashConfig()
-			.pipe(
-				Effect.catchTag("VoidhashConfigNotFoundError", () =>
-					Effect.succeed(null),
-				),
-			);
-
-		if (voidhashConfig) {
-			const shouldContinue = yield* Prompt.run(
-				Prompt.confirm({
-					message:
-						"Voidhash was already initialized in this project. This will overwrite the existing configuration. Do you want to continue?",
-				}),
-			);
-			if (!shouldContinue) {
-				return yield* Console.log("Initialization cancelled.");
-			}
-			yield* sourceCode.deleteVoidhashConfig();
-		}
-
-		// Sign in
-		const session = yield* auth.getSignedInSession
-			.pipe(
-				Effect.catchTag("NoSignedInUserError", () =>
-					Effect.gen(function* session() {
-						const shouldContinue = yield* Prompt.run(
-							Prompt.confirm({
-								message:
-									"You are not logged in. In the next step, we will open a browser window to sign you in. Do you want to continue?",
-							}),
-						);
-						if (!shouldContinue) {
-							return yield* Effect.fail(userError("Login cancelled."));
-						}
-						return yield* auth.login.pipe(
-							Effect.andThen(auth.getSignedInSession),
-						);
-					}),
-				),
-			)
-			.pipe(
-				Effect.catchTags({
-					FailedToGetSessionError: (e) =>
-						Effect.fail(
-							userError("Failed to get user session. Please try again."),
-						).pipe(Effect.tapError(() => Effect.logDebug(e))),
-					NoSignedInUserError: () =>
-						Effect.fail(
-							userError("We were unable to sign you in. Please try it again."),
-						),
-					// TODO: handle other errors
-				}),
-			);
-
-		// Select team
-		const organization = yield* selectOrganization(session.organizations);
-
-		// Select project
-		const project = yield* selectProject(
-			organization.id,
-			session.projects.filter((p) => p.organizationId === organization.id),
-		);
-		const apiKeys = (yield* apiClient.apiKeysListApiKeys()) as readonly {
-			id: string;
-			isPublic: boolean;
-			projectId: string;
-			rawKey?: string;
-		}[];
-		const publishableApiKey = apiKeys.find(
-			(apiKey) => apiKey.isPublic && apiKey.projectId === project.id,
-		);
-		const publishableKey = publishableApiKey?.rawKey;
-		if (!publishableKey) {
-			return yield* Effect.fail(
-				userError(
-					"Could not retrieve raw publishable key from listApiKeys for the selected project.",
-				),
-			);
-		}
-		if (!publishableKey.startsWith("vh_pk_")) {
-			return yield* Effect.fail(
-				userError(
-					"Received an invalid publishable key from listApiKeys for the selected project.",
-				),
-			);
-		}
-
-		// Select folder path
-
-		const srcFolderPath = yield* sourceCode.retrieveSrcDir();
-		const hasSrcDir = srcFolderPath.endsWith("src");
-
-		const voidhashFilesFolderPath = yield* Prompt.run(
-			Prompt.text({
-				default: hasSrcDir ? "./src/utils/voidhash" : "./utils/voidhash",
-				message:
-					"Select the folder where you want to create the Voidhash schema and client",
-			}),
-		);
-
-		// File names
-		const language = yield* sourceCode.detectSrcLanguage();
-		const schemaFileName = language === "ts" ? "schema.ts" : "schema.js";
-		const clientFileName = language === "ts" ? "client.ts" : "client.js";
-		const configFileName =
-			language === "ts" ? "voidhash.config.ts" : "voidhash.config.js";
-
-		// File paths
-		const schemaFilePath = path.resolve(
-			voidhashFilesFolderPath,
-			schemaFileName,
-		);
-		const clientFilePath = path.resolve(
-			voidhashFilesFolderPath,
-			clientFileName,
-		);
-		const configFilePath = path.resolve(configFileName);
-
-		// Assert files can be created
-		yield* assertFileCanBeCreated(schemaFileName, schemaFilePath);
-		yield* assertFileCanBeCreated(clientFileName, clientFilePath);
-		yield* assertFileCanBeCreated(configFileName, configFilePath);
-
-		// Generate files
-		yield* codegen.generateVoidhashConfigFile(configFilePath, {
-			project: project.slug,
-			schema: path.relative(path.resolve(), schemaFilePath),
-			team: organization.slug,
-		});
-
-		// Generate initial schema file
-		const initialSchema = createInitialNormalizedSchema();
-		yield* codegen.generateSchemaFile(schemaFilePath, initialSchema);
-		yield* codegen.generateClientFile(clientFilePath, publishableKey);
-
-		yield* Console.log("\nVoidhash initialized successfully!");
-		yield* Console.log(`  Config: ${configFilePath}`);
-		yield* Console.log(`  Schema: ${schemaFilePath}`);
-		yield* Console.log(`  Client: ${clientFilePath}`);
-		yield* Console.log(`\nNext steps:`);
-		yield* Console.log(`  1. Add your products and perks to the schema file.`);
-		yield* Console.log(`  2. Use the generated client in your app code.`);
-		yield* Console.log(
-			`  3. Run \`voidhash-cli schema push\` to push your schema to the server.`,
-		);
-	}),
+  Effect.gen(function* initCommand() {
+    const auth = yield* Auth;
+    const apiClient = yield* ApiClient;
+    const sourceCode = yield* SourceCode;
+    const codegen = yield* Codegen;
+    const schemaService = yield* SchemaService;
+    const path = yield* Path.Path;
+
+    const voidhashConfig = yield* sourceCode.loadVoidhashConfig().pipe(
+      Effect.catchTag("VoidhashConfigNotFoundError", () =>
+        Effect.succeed(null)
+      )
+    );
+
+    if (voidhashConfig) {
+      const shouldContinue = yield* Prompt.run(
+        Prompt.confirm({
+          message:
+            "Voidhash was already initialized in this project. This will overwrite the existing configuration. Do you want to continue?",
+        })
+      );
+      if (!shouldContinue) {
+        return yield* Console.log("Initialization cancelled.");
+      }
+      yield* sourceCode.deleteVoidhashConfig();
+    }
+
+    // Sign in
+    const session = yield* auth.getSignedInSession
+      .pipe(
+        Effect.catchTag("NoSignedInUserError", () =>
+          Effect.gen(function* session() {
+            const shouldContinue = yield* Prompt.run(
+              Prompt.confirm({
+                message:
+                  "You are not logged in. In the next step, we will open a browser window to sign you in. Do you want to continue?",
+              })
+            );
+            if (!shouldContinue) {
+              return yield* Effect.fail(userError("Login cancelled."));
+            }
+            return yield* auth.login.pipe(
+              Effect.andThen(auth.getSignedInSession)
+            );
+          })
+        )
+      )
+      .pipe(
+        Effect.catchTags({
+          FailedToGetSessionError: (e) =>
+            Effect.fail(
+              userError("Failed to get user session. Please try again.")
+            ).pipe(Effect.tapError(() => Effect.logDebug(e))),
+          NoSignedInUserError: () =>
+            Effect.fail(
+              userError("We were unable to sign you in. Please try it again.")
+            ),
+        })
+      );
+
+    // Select team
+    const organization = yield* selectOrganization(session.organizations);
+
+    // Select project
+    const project = yield* selectProject(
+      organization.id,
+      session.projects.filter((p) => p.organizationId === organization.id)
+    );
+
+    // Sanity-check that a publishable key exists for this project; we don't
+    // need to write it anywhere (the user puts it in their app code), but a
+    // missing key is a configuration problem we should surface now.
+    const apiKeys = (yield* apiClient.apiKeysListApiKeys()) as readonly {
+      id: string;
+      isPublic: boolean;
+      projectId: string;
+      rawKey?: string;
+    }[];
+    const publishableApiKey = apiKeys.find(
+      (apiKey) => apiKey.isPublic && apiKey.projectId === project.id
+    );
+    if (!publishableApiKey?.rawKey?.startsWith("vh_pk_")) {
+      return yield* Effect.fail(
+        userError(
+          "Could not retrieve a valid publishable key for the selected project."
+        )
+      );
+    }
+    const publishableKey = publishableApiKey.rawKey;
+
+    // Decide where the generated `.d.ts` lives. We default to the project
+    // root since module augmentation works from anywhere in `tsconfig.include`.
+    const language = yield* sourceCode.detectSrcLanguage();
+    const configFileName =
+      language === "ts" ? "voidhash.config.ts" : "voidhash.config.js";
+
+    const configFilePath = path.resolve(configFileName);
+    const typesOutputPath = path.resolve(DEFAULT_TYPES_OUTPUT);
+
+    yield* assertFileCanBeCreated(configFileName, configFilePath);
+    yield* assertFileCanBeCreated(DEFAULT_TYPES_OUTPUT, typesOutputPath);
+
+    // Write the config. `typesOutput` is omitted from the generated file so
+    // it picks up the default (`voidhash.gen.d.ts`) — keeps the config terse.
+    yield* codegen.generateVoidhashConfigFile(configFilePath, {
+      project: project.slug,
+      team: organization.slug,
+    });
+
+    // Produce the initial declaration file so the user has working
+    // autocomplete on the first run. Failures here are non-fatal — the user
+    // can re-run `voidhash types generate` later.
+    const generatedVersion = yield* schemaService
+      .fetchRemoteSchema()
+      .pipe(
+        Effect.flatMap((schema) =>
+          codegen.generateTypesDeclarationFile(typesOutputPath, schema)
+        ),
+        Effect.catch((e) =>
+          Effect.logWarning(
+            `Failed to generate initial types: ${String(e)}. You can run 'voidhash types generate' later.`
+          ).pipe(Effect.as(null))
+        )
+      );
+
+    yield* Console.log("\nVoidhash initialized successfully!");
+    yield* Console.log(`  Config:  ${configFilePath}`);
+    if (generatedVersion !== null) {
+      yield* Console.log(`  Types:   ${typesOutputPath}`);
+    }
+    yield* Console.log(`\nNext steps:`);
+    yield* Console.log(
+      `  1. Add the publishable key (${publishableKey}) to your client code.`
+    );
+    yield* Console.log(
+      `  2. Create your products and paywall locations in the Voidhash dashboard.`
+    );
+    yield* Console.log(
+      `  3. Re-run 'voidhash types generate' whenever the dashboard schema changes.`
+    );
+  })
 ).pipe(Command.withDescription("Initialize a new Voidhash project."));
diff --git a/apps/cli/src/cli/commands/schema-check.ts b/apps/cli/src/cli/commands/schema-check.ts
deleted file mode 100644
index 717da7683..000000000
--- a/apps/cli/src/cli/commands/schema-check.ts
+++ /dev/null
@@ -1,181 +0,0 @@
-import { Command } from "effect/unstable/cli";
-import { Console, Effect } from "effect";
-
-import {
-  MissingProviderConfigurationError,
-  SchemaCheckFailedError,
-} from "../../domain/errors/schema";
-import { Auth } from "../../domain/services/auth";
-import { SchemaService } from "../../domain/services/schema";
-import { SourceCode } from "../../domain/services/source-code";
-import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
-
-export const schemaCheckCommand = Command.make("check", { debug: debugOption }, () =>
-  Effect.gen(function* schemaCheckCommand() {
-    const auth = yield* Auth;
-    const sourceCode = yield* SourceCode;
-    const schemaService = yield* SchemaService;
-
-    // Authenticate
-    yield* auth.getSignedInSession.pipe(
-      Effect.catchTag("NoSignedInUserError", () =>
-        Effect.fail(
-          userError(
-            "You must be logged in to check schema. Run 'voidhash auth login' first."
-          )
-        )
-      )
-    );
-
-    // Load voidhash.config
-    const config = yield* sourceCode.loadVoidhashConfig().pipe(
-      Effect.catchTag("VoidhashConfigNotFoundError", () =>
-        Effect.fail(
-          userError("voidhash.config.ts not found. Run 'voidhash init' to create one.")
-        )
-      )
-    );
-
-    // Load local schema
-    yield* Console.log("Loading local schema...");
-    const localSchema = yield* schemaService.loadLocalSchema(config.schema).pipe(
-      Effect.catchTag("LocalSchemaNotFoundError", (e) =>
-        Effect.fail(userError(`Schema file not found: ${e.path}`))
-      ),
-      Effect.catchTag("LocalSchemaParseError", (e) =>
-        Effect.fail(userError(`Failed to parse schema: ${e.message}`))
-      )
-    );
-
-    yield* Console.log(`  Found ${localSchema.locations.size} paywall locations`);
-    yield* Console.log(`  Found ${localSchema.perks.size} perks`);
-    yield* Console.log(`  Found ${localSchema.products.size} products`);
-    yield* Console.log(
-      `  Providers: ${[...localSchema.enabledProviders].join(", ") || "none"}`
-    );
-
-    // Fetch remote schema
-    yield* Console.log("\nFetching remote schema...");
-    const remoteSchema = yield* schemaService.fetchRemoteSchema().pipe(
-      Effect.catchTag("RemoteSchemaFetchError", (e) =>
-        Effect.fail(userError(`Failed to fetch remote schema: ${String(e.cause)}`))
-      )
-    );
-
-    yield* Console.log(`  Found ${remoteSchema.locations.size} paywall locations`);
-    yield* Console.log(`  Found ${remoteSchema.perks.size} perks`);
-    yield* Console.log(`  Found ${remoteSchema.products.size} products`);
-
-    // Check provider configurations
-    const providerConfigs = yield* schemaService.fetchProviderConfigurations().pipe(
-      Effect.catchTag("RemoteSchemaFetchError", (e) =>
-        Effect.fail(
-          userError(`Failed to fetch provider configurations: ${String(e.cause)}`)
-        )
-      )
-    );
-
-    const missingProviders = schemaService.checkProviderConfigurations(
-      localSchema.enabledProviders,
-      providerConfigs
-    );
-
-    if (missingProviders.length > 0) {
-      yield* Console.log("\nMissing payment provider configurations:");
-      for (const provider of missingProviders) {
-        yield* Console.log(`  - ${provider}`);
-      }
-      yield* Console.log(
-        "\nPlease configure these providers in the dashboard before pushing."
-      );
-      return yield* Effect.fail(
-        new MissingProviderConfigurationError({ providers: missingProviders })
-      );
-    }
-
-    // Compute diff
-    const diff = schemaService.computeDiff(localSchema, remoteSchema);
-    const summary = schemaService.summarizeDiff(diff);
-
-    // Check results
-    const issues: string[] = [];
-
-    if (diff.locations.toCreate.length > 0) {
-      issues.push(`${diff.locations.toCreate.length} paywall locations missing from server`);
-      yield* Console.log("\nMissing paywall locations:");
-      for (const location of diff.locations.toCreate) {
-        yield* Console.log(`  + ${location.slug} ("${location.name}")`);
-      }
-    }
-
-    if (diff.locations.toUpdate.length > 0) {
-      issues.push(`${diff.locations.toUpdate.length} paywall locations need updating`);
-      yield* Console.log("\nOutdated paywall locations:");
-      for (const { local, remote } of diff.locations.toUpdate) {
-        yield* Console.log(`  ~ ${local.slug}: "${remote.name}" -> "${local.name}"`);
-      }
-    }
-
-    if (diff.locations.toArchive.length > 0) {
-      issues.push(`${diff.locations.toArchive.length} paywall locations should be archived`);
-      yield* Console.log("\nPaywall locations to archive (remote-only):");
-      for (const location of diff.locations.toArchive) {
-        yield* Console.log(`  - ${location.slug} ("${location.name}")`);
-      }
-    }
-
-    if (diff.perks.toCreate.length > 0) {
-      issues.push(`${diff.perks.toCreate.length} perks missing from server`);
-      yield* Console.log("\nMissing perks:");
-      for (const perk of diff.perks.toCreate) {
-        yield* Console.log(`  + ${perk.slug} ("${perk.name}")`);
-      }
-    }
-
-    if (diff.products.toCreate.length > 0) {
-      issues.push(`${diff.products.toCreate.length} products missing from server`);
-      yield* Console.log("\nMissing products:");
-      for (const product of diff.products.toCreate) {
-        yield* Console.log(`  + ${product.slug} ("${product.name}")`);
-      }
-    }
-
-    if (diff.perks.toUpdate.length > 0) {
-      issues.push(`${diff.perks.toUpdate.length} perks need updating`);
-      yield* Console.log("\nOutdated perks:");
-      for (const { local, remote } of diff.perks.toUpdate) {
-        yield* Console.log(`  ~ ${local.slug}: "${remote.name}" -> "${local.name}"`);
-      }
-    }
-
-    if (diff.products.toUpdate.length > 0) {
-      issues.push(`${diff.products.toUpdate.length} products need updating`);
-      yield* Console.log("\nOutdated products:");
-      for (const { local, remote } of diff.products.toUpdate) {
-        yield* Console.log(`  ~ ${local.slug}: "${remote.name}" -> "${local.name}"`);
-      }
-    }
-
-    if (issues.length === 0) {
-      yield* Console.log(
-        "\n\u2713 All local schema entities exist on the server and are up to date."
-      );
-      return;
-    }
-
-    yield* Console.log(`\n\u2717 Schema check failed: ${issues.join(", ")}`);
-    yield* Console.log("\nRun 'voidhash schema push' to sync these changes.");
-
-    return yield* Effect.fail(
-      new SchemaCheckFailedError({
-        message: `Schema check failed: ${issues.join(", ")}`,
-      })
-    );
-  }).pipe(
-    Effect.catchTags({
-      MissingProviderConfigurationError: () => Effect.void,
-      SchemaCheckFailedError: () => Effect.void,
-    })
-  )
-).pipe(Command.withDescription("Check that the server contains all local schema entities."));
diff --git a/apps/cli/src/cli/commands/schema-pull.ts b/apps/cli/src/cli/commands/schema-pull.ts
deleted file mode 100644
index 2374afefd..000000000
--- a/apps/cli/src/cli/commands/schema-pull.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-import { Command, Flag, Prompt } from "effect/unstable/cli";
-import { Console, Effect, Path } from "effect";
-
-import { Auth } from "../../domain/services/auth";
-import { Codegen } from "../../domain/services/codegen";
-import { SchemaService } from "../../domain/services/schema";
-import { SourceCode } from "../../domain/services/source-code";
-import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
-
-export const schemaPullCommand = Command.make(
-  "pull",
-  {
-    debug: debugOption,
-    force: Flag.boolean("force").pipe(
-      Flag.withDescription("Skip confirmation prompt"),
-      Flag.withDefault(false)
-    ),
-  },
-  ({ force }) =>
-    Effect.gen(function* schemaPullCommand() {
-      const auth = yield* Auth;
-      const sourceCode = yield* SourceCode;
-      const schemaService = yield* SchemaService;
-      const codegen = yield* Codegen;
-      const pathService = yield* Path.Path;
-
-      // Authenticate
-      yield* auth.getSignedInSession.pipe(
-        Effect.catchTag("NoSignedInUserError", () =>
-          Effect.fail(
-            userError(
-              "You must be logged in to pull schema. Run 'voidhash auth login' first."
-            )
-          )
-        )
-      );
-
-      // Load voidhash.config
-      const config = yield* sourceCode.loadVoidhashConfig().pipe(
-        Effect.catchTag("VoidhashConfigNotFoundError", () =>
-          Effect.fail(
-            userError(
-              "voidhash.config.ts not found. Run 'voidhash init' to create one."
-            )
-          )
-        )
-      );
-
-      // Fetch remote schema
-      yield* Console.log("Fetching remote schema...");
-      const remoteSchema = yield* schemaService.fetchRemoteSchema().pipe(
-        Effect.catchTag("RemoteSchemaFetchError", (e) =>
-          Effect.fail(
-            userError(`Failed to fetch remote schema: ${String(e.cause)}`)
-          )
-        )
-      );
-
-      // Display summary
-      yield* Console.log(`\nRemote schema contains:`);
-      yield* Console.log(`  ${remoteSchema.locations.size} paywall locations`);
-      yield* Console.log(`  ${remoteSchema.perks.size} perks`);
-      yield* Console.log(`  ${remoteSchema.products.size} products`);
-      yield* Console.log(
-        `  Providers: ${[...remoteSchema.enabledProviders].join(", ") || "none"}`
-      );
-
-      if (
-        remoteSchema.locations.size === 0 &&
-        remoteSchema.perks.size === 0 &&
-        remoteSchema.products.size === 0
-      ) {
-        yield* Console.log(
-          "\nRemote schema is empty. Nothing to pull."
-        );
-        return;
-      }
-
-      // Confirm unless --force
-      if (!force) {
-        const confirmed = yield* Prompt.run(
-          Prompt.confirm({
-            message: `This will overwrite ${config.schema}. Continue?`,
-          })
-        );
-        if (!confirmed) {
-          yield* Console.log("Pull cancelled.");
-          return;
-        }
-      }
-
-      // Generate schema file
-      const schemaPath = pathService.resolve(config.schema);
-      yield* codegen.generateSchemaFile(schemaPath, remoteSchema);
-
-      yield* Console.log(`\n\u2713 Schema pulled to ${config.schema}`);
-    })
-).pipe(Command.withDescription("Pull the Voidhash schema from the server."));
diff --git a/apps/cli/src/cli/commands/schema-push.ts b/apps/cli/src/cli/commands/schema-push.ts
deleted file mode 100644
index a77414181..000000000
--- a/apps/cli/src/cli/commands/schema-push.ts
+++ /dev/null
@@ -1,203 +0,0 @@
-import { Command, Flag, Prompt } from "effect/unstable/cli";
-import { Console, Effect } from "effect";
-
-import { MissingProviderConfigurationError } from "../../domain/errors/schema";
-import { Auth } from "../../domain/services/auth";
-import { SchemaService, formatChange } from "../../domain/services/schema";
-import { SourceCode } from "../../domain/services/source-code";
-import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
-
-export const schemaPushCommand = Command.make(
-  "push",
-  {
-    debug: debugOption,
-    dryRun: Flag.boolean("dry-run").pipe(
-      Flag.withDescription("Preview changes without applying"),
-      Flag.withDefault(false)
-    ),
-    yes: Flag.boolean("yes").pipe(
-      Flag.withAlias("y"),
-      Flag.withDescription("Auto-approve all changes"),
-      Flag.withDefault(false)
-    ),
-  },
-  ({ dryRun, yes }) =>
-    Effect.gen(function* schemaPushCommand() {
-      const auth = yield* Auth;
-      const sourceCode = yield* SourceCode;
-      const schemaService = yield* SchemaService;
-
-      // Authenticate
-      yield* auth.getSignedInSession.pipe(
-        Effect.catchTag("NoSignedInUserError", () =>
-          Effect.fail(
-            userError(
-              "You must be logged in to push schema. Run 'voidhash auth login' first."
-            )
-          )
-        )
-      );
-
-      // Load voidhash.config
-      const config = yield* sourceCode
-        .loadVoidhashConfig()
-        .pipe(
-          Effect.catchTag("VoidhashConfigNotFoundError", () =>
-            Effect.fail(
-              userError(
-                "voidhash.config.ts not found. Run 'voidhash init' to create one."
-              )
-            )
-          )
-        );
-
-      // Load local schema
-      yield* Console.log("Loading local schema...");
-      const localSchema = yield* schemaService
-        .loadLocalSchema(config.schema)
-        .pipe(
-          Effect.catchTag("LocalSchemaNotFoundError", (e) =>
-            Effect.fail(userError(`Schema file not found: ${e.path}`))
-          ),
-          Effect.catchTag("LocalSchemaParseError", (e) =>
-            Effect.fail(userError(`Failed to parse schema: ${e.message}`))
-          )
-        );
-
-      yield* Console.log(`  Found ${localSchema.locations.size} paywall locations`);
-      yield* Console.log(`  Found ${localSchema.perks.size} perks`);
-      yield* Console.log(`  Found ${localSchema.products.size} products`);
-
-      // Fetch remote schema
-      yield* Console.log("\nFetching remote schema...");
-      const remoteSchema = yield* schemaService
-        .fetchRemoteSchema()
-        .pipe(
-          Effect.catchTag("RemoteSchemaFetchError", (e) =>
-            Effect.fail(
-              userError(`Failed to fetch remote schema: ${String(e.cause)}`)
-            )
-          )
-        );
-
-      yield* Console.log(`  Found ${remoteSchema.locations.size} paywall locations`);
-      yield* Console.log(`  Found ${remoteSchema.perks.size} perks`);
-      yield* Console.log(`  Found ${remoteSchema.products.size} products`);
-
-      // Check provider configurations FIRST
-      const providerConfigs = yield* schemaService
-        .fetchProviderConfigurations()
-        .pipe(
-          Effect.catchTag("RemoteSchemaFetchError", (e) =>
-            Effect.fail(
-              userError(
-                `Failed to fetch provider configurations: ${String(e.cause)}`
-              )
-            )
-          )
-        );
-
-      const missingProviders = schemaService.checkProviderConfigurations(
-        localSchema.enabledProviders,
-        providerConfigs
-      );
-
-      if (missingProviders.length > 0) {
-        yield* Console.log(
-          "\nCannot push: Missing payment provider configurations:"
-        );
-        for (const provider of missingProviders) {
-          yield* Console.log(`  - ${provider}`);
-        }
-        yield* Console.log(
-          "\nPlease configure these providers in the dashboard first."
-        );
-        return yield* Effect.fail(
-          new MissingProviderConfigurationError({ providers: missingProviders })
-        );
-      }
-
-      // Compute diff
-      const diff = schemaService.computeDiff(localSchema, remoteSchema);
-
-      // Build changeset (creates + updates only)
-      const changeset = schemaService.buildChangeset(diff);
-
-      if (changeset.changes.length === 0) {
-        yield* Console.log(
-          "\n\u2713 Schema is already in sync. Nothing to push."
-        );
-        return;
-      }
-
-      // Display changes
-      yield* Console.log(`\n${changeset.changes.length} changes to push:\n`);
-      for (const change of changeset.changes) {
-        yield* Console.log(`  ${formatChange(change)}`);
-      }
-
-      if (dryRun) {
-        yield* Console.log("\n(Dry run - no changes applied)");
-        return;
-      }
-
-      // Collect approved changes
-      const approvedChanges: (typeof changeset.changes)[number][] = [];
-
-      for (const change of changeset.changes) {
-        yield* Console.log(`\n${formatChange(change)}`);
-
-        const approved =
-          yes ||
-          (yield* Prompt.run(
-            Prompt.confirm({ initial: true, message: "Apply this change?" })
-          ));
-
-        if (approved) {
-          approvedChanges.push(change);
-          yield* Console.log("  \u2713 Approved");
-        } else {
-          yield* Console.log("  \u2298 Skipped");
-        }
-      }
-
-      const skipped = changeset.changes.length - approvedChanges.length;
-
-      if (approvedChanges.length === 0) {
-        yield* Console.log("\nNo changes to apply.");
-        return;
-      }
-
-      // Deploy all approved changes at once
-      yield* Console.log(`\nDeploying ${approvedChanges.length} changes...`);
-      const result = yield* schemaService
-        .deployChangeset({ changes: approvedChanges })
-        .pipe(
-          Effect.map(() => true),
-          Effect.catchTag("ChangeDeploymentError", (e) =>
-            Effect.succeed(false).pipe(
-              Effect.tap(() =>
-                Console.log(`\u2717 Deployment failed: ${String(e.cause)}`)
-              )
-            )
-          )
-        );
-
-      if (result) {
-        yield* Console.log(
-          `\n\u2713 Push complete: ${approvedChanges.length} applied, ${skipped} skipped`
-        );
-      } else {
-        yield* Console.log(
-          `\n\u2717 Push failed: 0 applied, ${skipped} skipped`
-        );
-      }
-    }).pipe(
-      Effect.catchTags({
-        MissingProviderConfigurationError: () => Effect.void,
-      })
-    )
-).pipe(
-  Command.withDescription("Push the local Voidhash schema to the server.")
-);
diff --git a/apps/cli/src/cli/commands/schema.ts b/apps/cli/src/cli/commands/schema.ts
deleted file mode 100644
index b2094019c..000000000
--- a/apps/cli/src/cli/commands/schema.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-import { Command } from "effect/unstable/cli";
-import { Effect } from "effect";
-
-import { debugOption } from "../shared-options";
-import { schemaCheckCommand } from "./schema-check";
-import { schemaPullCommand } from "./schema-pull";
-import { schemaPushCommand } from "./schema-push";
-
-export const schemaCommand = Command.make("schema", { debug: debugOption }, () =>
-  Effect.gen(function* schemaCommand() {})
-).pipe(
-  Command.withDescription("Manage the Voidhash schema."),
-  Command.withSubcommands([
-    schemaPullCommand,
-    schemaPushCommand,
-    schemaCheckCommand,
-  ])
-);
diff --git a/apps/cli/src/cli/commands/types-check.ts b/apps/cli/src/cli/commands/types-check.ts
new file mode 100644
index 000000000..cf19e2261
--- /dev/null
+++ b/apps/cli/src/cli/commands/types-check.ts
@@ -0,0 +1,107 @@
+import { Command } from "effect/unstable/cli";
+import { Console, Effect, Path } from "effect";
+
+import { SchemaCheckFailedError } from "../../domain/errors/schema";
+import { resolveTypesOutput } from "../../domain/schema/voidhash-config";
+import { Auth } from "../../domain/services/auth";
+import { Codegen } from "../../domain/services/codegen";
+import { SchemaService } from "../../domain/services/schema";
+import { SourceCode } from "../../domain/services/source-code";
+import { userError } from "../../utils/error-formatter";
+import { debugOption } from "../shared-options";
+
+/**
+ * `voidhash types check`
+ *
+ * CI gate. Compares the `@voidhash:version` header inside the local
+ * `voidhash.gen.d.ts` against the server's current schema version. Exits
+ * non-zero with a clear message when they diverge, so a stale commit can't
+ * pass PR CI.
+ */
+export const typesCheckCommand = Command.make(
+  "check",
+  { debug: debugOption },
+  () =>
+    Effect.gen(function* typesCheckCommand() {
+      const auth = yield* Auth;
+      const sourceCode = yield* SourceCode;
+      const schemaService = yield* SchemaService;
+      const codegen = yield* Codegen;
+      const pathService = yield* Path.Path;
+
+      yield* auth.getSignedInSession.pipe(
+        Effect.catchTag("NoSignedInUserError", () =>
+          Effect.fail(
+            userError(
+              "You must be logged in to check types. Run 'voidhash auth login' first."
+            )
+          )
+        )
+      );
+
+      const config = yield* sourceCode.loadVoidhashConfig().pipe(
+        Effect.catchTag("VoidhashConfigNotFoundError", () =>
+          Effect.fail(
+            userError(
+              "voidhash.config.ts not found. Run 'voidhash init' to create one."
+            )
+          )
+        )
+      );
+
+      const typesOutput = resolveTypesOutput(config);
+      const outPath = pathService.resolve(typesOutput);
+
+      const localVersion = yield* codegen.readDeclarationVersion(outPath).pipe(
+        Effect.catch(() =>
+          Effect.fail(
+            userError(
+              `Could not read generated types at ${typesOutput}. Run 'voidhash types generate' first.`
+            )
+          )
+        )
+      );
+
+      if (localVersion === null) {
+        return yield* Effect.fail(
+          userError(
+            `${typesOutput} is missing the @voidhash:version header. Re-run 'voidhash types generate' to regenerate.`
+          )
+        );
+      }
+
+      const remoteVersion = yield* schemaService.fetchSchemaVersion().pipe(
+        Effect.catchTag("RemoteSchemaFetchError", (e) =>
+          Effect.fail(
+            userError(
+              `Failed to fetch remote schema version: ${String(e.cause)}`
+            )
+          )
+        )
+      );
+
+      if (localVersion === remoteVersion) {
+        yield* Console.log(
+          `✓ Types are up to date (version ${localVersion.slice(0, 19)}...)`
+        );
+        return;
+      }
+
+      yield* Console.log("✗ Types are stale.");
+      yield* Console.log(`  Local:  ${localVersion}`);
+      yield* Console.log(`  Server: ${remoteVersion}`);
+      yield* Console.log(
+        "\nRun 'voidhash types generate' to refresh, then commit the updated declaration file."
+      );
+
+      return yield* Effect.fail(
+        new SchemaCheckFailedError({
+          message: `Local types version ${localVersion} does not match server version ${remoteVersion}`,
+        })
+      );
+    })
+).pipe(
+  Command.withDescription(
+    "Check whether the locally generated types are in sync with the server schema."
+  )
+);
diff --git a/apps/cli/src/cli/commands/types-generate.ts b/apps/cli/src/cli/commands/types-generate.ts
new file mode 100644
index 000000000..26d81c31b
--- /dev/null
+++ b/apps/cli/src/cli/commands/types-generate.ts
@@ -0,0 +1,141 @@
+import { Command, Flag } from "effect/unstable/cli";
+import { Console, Effect, Path, Schedule } from "effect";
+
+import { resolveTypesOutput } from "../../domain/schema/voidhash-config";
+import { Auth } from "../../domain/services/auth";
+import { Codegen } from "../../domain/services/codegen";
+import { SchemaService } from "../../domain/services/schema";
+import { SourceCode } from "../../domain/services/source-code";
+import { userError } from "../../utils/error-formatter";
+import { debugOption } from "../shared-options";
+
+/**
+ * `voidhash types generate [--watch]`
+ *
+ * Fetches the schema from the server and emits `voidhash.gen.d.ts` (path
+ * configurable via `voidhash.config.ts#typesOutput`). With `--watch`, polls
+ * `GET /schema/version` every `pollIntervalMs` (default 5s) and regenerates
+ * on hash change.
+ */
+export const typesGenerateCommand = Command.make(
+  "generate",
+  {
+    debug: debugOption,
+    pollIntervalMs: Flag.integer("poll-interval-ms").pipe(
+      Flag.withDescription(
+        "Polling interval for --watch mode, in milliseconds"
+      ),
+      Flag.withDefault(5000)
+    ),
+    watch: Flag.boolean("watch").pipe(
+      Flag.withDescription(
+        "Watch the server schema and regenerate types when it changes"
+      ),
+      Flag.withDefault(false)
+    ),
+  },
+  ({ pollIntervalMs, watch }) =>
+    Effect.gen(function* typesGenerateCommand() {
+      const auth = yield* Auth;
+      const sourceCode = yield* SourceCode;
+      const schemaService = yield* SchemaService;
+      const codegen = yield* Codegen;
+      const pathService = yield* Path.Path;
+
+      yield* auth.getSignedInSession.pipe(
+        Effect.catchTag("NoSignedInUserError", () =>
+          Effect.fail(
+            userError(
+              "You must be logged in to generate types. Run 'voidhash auth login' first."
+            )
+          )
+        )
+      );
+
+      const config = yield* sourceCode.loadVoidhashConfig().pipe(
+        Effect.catchTag("VoidhashConfigNotFoundError", () =>
+          Effect.fail(
+            userError(
+              "voidhash.config.ts not found. Run 'voidhash init' to create one."
+            )
+          )
+        )
+      );
+
+      const typesOutput = resolveTypesOutput(config);
+      const outPath = pathService.resolve(typesOutput);
+
+      const regenerate = Effect.gen(function* regenerate() {
+        yield* Console.log("Fetching remote schema...");
+        const remoteSchema = yield* schemaService.fetchRemoteSchema().pipe(
+          Effect.catchTag("RemoteSchemaFetchError", (e) =>
+            Effect.fail(
+              userError(`Failed to fetch remote schema: ${String(e.cause)}`)
+            )
+          )
+        );
+
+        const version = yield* codegen.generateTypesDeclarationFile(
+          outPath,
+          remoteSchema
+        );
+
+        yield* Console.log(
+          `✓ Types written to ${typesOutput} (version ${version.slice(
+            0,
+            19
+          )}...)`
+        );
+        return version;
+      });
+
+      const initialVersion = yield* regenerate;
+
+      if (!watch) {
+        return;
+      }
+
+      yield* Console.log(
+        `\nWatching for schema changes (poll every ${pollIntervalMs}ms). Press Ctrl+C to stop.`
+      );
+
+      // Keep the last known version in a closure-shared ref so the poll loop
+      // can compare and skip work when the schema hasn't changed.
+      let lastVersion = initialVersion;
+
+      const pollOnce = Effect.gen(function* pollOnce() {
+        const latest = yield* schemaService.fetchSchemaVersion().pipe(
+          Effect.catch((e) =>
+            Effect.logWarning(
+              `[voidhash types --watch] Skipping poll due to error: ${String(e)}`
+            ).pipe(Effect.as(null))
+          )
+        );
+
+        if (latest === null || latest === lastVersion) {
+          return;
+        }
+
+        yield* Console.log("Schema changed on server — regenerating types...");
+        const next = yield* regenerate.pipe(
+          Effect.catch((e) =>
+            Effect.logWarning(
+              `[voidhash types --watch] Regeneration failed: ${String(e)}`
+            ).pipe(Effect.as(null))
+          )
+        );
+        if (next !== null) {
+          lastVersion = next;
+        }
+      });
+
+      yield* Effect.repeat(
+        pollOnce,
+        Schedule.spaced(`${pollIntervalMs} millis`)
+      );
+    })
+).pipe(
+  Command.withDescription(
+    "Generate the voidhash.gen.d.ts declaration file from the server schema."
+  )
+);
diff --git a/apps/cli/src/cli/commands/types.ts b/apps/cli/src/cli/commands/types.ts
new file mode 100644
index 000000000..7aefd2b6e
--- /dev/null
+++ b/apps/cli/src/cli/commands/types.ts
@@ -0,0 +1,17 @@
+import { Command } from "effect/unstable/cli";
+import { Effect } from "effect";
+
+import { debugOption } from "../shared-options";
+import { typesCheckCommand } from "./types-check";
+import { typesGenerateCommand } from "./types-generate";
+
+export const typesCommand = Command.make(
+  "types",
+  { debug: debugOption },
+  () => Effect.gen(function* typesCommand() {})
+).pipe(
+  Command.withDescription(
+    "Generate and validate the Voidhash TypeScript declaration file."
+  ),
+  Command.withSubcommands([typesGenerateCommand, typesCheckCommand])
+);
diff --git a/apps/cli/src/cli/index.ts b/apps/cli/src/cli/index.ts
index 129ca0390..e475791d2 100644
--- a/apps/cli/src/cli/index.ts
+++ b/apps/cli/src/cli/index.ts
@@ -16,14 +16,14 @@ import {
 import { authCommand } from "./commands/auth";
 import { configCommand } from "./commands/config";
 import { initCommand } from "./commands/init";
-import { schemaCommand } from "./commands/schema";
+import { typesCommand } from "./commands/types";
 
 const command = Command.make("voidhash").pipe(
   Command.withDescription("Voidhash CLI application."),
   Command.withSubcommands([
     initCommand,
     authCommand,
-    schemaCommand,
+    typesCommand,
     configCommand,
   ])
 );
diff --git a/apps/cli/src/domain/errors/schema.ts b/apps/cli/src/domain/errors/schema.ts
index eac5697e6..f5e4dc870 100644
--- a/apps/cli/src/domain/errors/schema.ts
+++ b/apps/cli/src/domain/errors/schema.ts
@@ -1,42 +1,11 @@
 import { Data } from "effect";
 
-export class LocalSchemaNotFoundError extends Data.TaggedError(
-  "LocalSchemaNotFoundError"
-)<{
-  path: string;
-}> {}
-
-export class LocalSchemaParseError extends Data.TaggedError(
-  "LocalSchemaParseError"
-)<{
-  message: string;
-}> {}
-
 export class RemoteSchemaFetchError extends Data.TaggedError(
   "RemoteSchemaFetchError"
 )<{
   cause: unknown;
 }> {}
 
-export class MissingProviderConfigurationError extends Data.TaggedError(
-  "MissingProviderConfigurationError"
-)<{
-  providers: string[];
-}> {}
-
-export class SchemaValidationError extends Data.TaggedError(
-  "SchemaValidationError"
-)<{
-  issues: string[];
-}> {}
-
-export class ChangeDeploymentError extends Data.TaggedError(
-  "ChangeDeploymentError"
-)<{
-  cause: unknown;
-  change: string;
-}> {}
-
 export class SchemaCheckFailedError extends Data.TaggedError(
   "SchemaCheckFailedError"
 )<{
diff --git a/apps/cli/src/domain/schema/voidhash-config.ts b/apps/cli/src/domain/schema/voidhash-config.ts
index b11bab36f..901507cd2 100644
--- a/apps/cli/src/domain/schema/voidhash-config.ts
+++ b/apps/cli/src/domain/schema/voidhash-config.ts
@@ -1,7 +1,26 @@
 import { Schema } from "effect";
 
+/**
+ * Default output path for the generated `.d.ts` when `typesOutput` is omitted
+ * from `voidhash.config.ts`.
+ */
+export const DEFAULT_TYPES_OUTPUT = "voidhash.gen.d.ts";
+
 export const VoidhashConfigSchema = Schema.Struct({
   project: Schema.String,
-  schema: Schema.String,
   team: Schema.String,
+  /**
+   * Output path for the generated `.d.ts` declaration file. Optional —
+   * defaults to `voidhash.gen.d.ts` at the project root.
+   */
+  typesOutput: Schema.optional(Schema.String),
 });
+
+/**
+ * Resolve `typesOutput` from a loaded config, applying the default.
+ */
+export function resolveTypesOutput(
+  config: typeof VoidhashConfigSchema.Type
+): string {
+  return config.typesOutput ?? DEFAULT_TYPES_OUTPUT;
+}
diff --git a/apps/cli/src/domain/services/codegen.ts b/apps/cli/src/domain/services/codegen.ts
index 5c052f6f8..0db126d99 100644
--- a/apps/cli/src/domain/services/codegen.ts
+++ b/apps/cli/src/domain/services/codegen.ts
@@ -1,135 +1,62 @@
 import { Effect, FileSystem, Layer, ServiceMap } from "effect";
 
+import {
+  VOIDHASH_FETCHED_AT_COMMENT_PREFIX,
+  VOIDHASH_VERSION_COMMENT_PREFIX,
+  computeSchemaVersionFromNormalized,
+  parseVersionFromDeclaration,
+} from "../../utils/schema/version";
 import type { Writable } from "../../utils/types";
-import type { NormalizedSchema, ProviderId } from "../schema/normalized-schema";
+import type { NormalizedSchema } from "../schema/normalized-schema";
 import type { VoidhashConfigSchema } from "../schema/voidhash-config";
 
-/**
- * Convert slug to camelCase variable name
- * e.g., "all-access" -> "allAccess", "monthly_sub" -> "monthlySub"
- */
-function slugToCamelCase(slug: string): string {
-  return slug
-    .split(/[-_]/)
-    .map((part, i) =>
-      i === 0
-        ? part.toLowerCase()
-        : part.charAt(0).toUpperCase() + part.slice(1).toLowerCase()
-    )
-    .join("");
-}
-
-function toTsStringLiteral(value: string): string {
-  return JSON.stringify(value);
+function toUnionType(slugs: string[]): string {
+  if (slugs.length === 0) {
+    return "never";
+  }
+  return slugs.map((slug) => JSON.stringify(slug)).join(" | ");
 }
 
 /**
- * Generate TypeScript code for a schema file
+ * Generate the contents of the `voidhash.gen.d.ts` declaration file.
+ *
+ * The file:
+ * - Starts with a `@voidhash:version` header so `voidhash types check` and the
+ *   dev-mode runtime warning can detect staleness without re-downloading the
+ *   full schema.
+ * - Augments `@voidhash/react-native`'s `VoidhashRegister` interface so all
+ *   typed hook arguments (slug literals) resolve via the registry.
  */
-function generateSchemaCode(schema: NormalizedSchema): string {
-  const lines: string[] = [];
+export function generateTypesDeclaration(
+  schema: NormalizedSchema,
+  options: { fetchedAt?: Date } = {}
+): { content: string; version: string } {
+  const version = computeSchemaVersionFromNormalized(schema);
+  const fetchedAt = (options.fetchedAt ?? new Date()).toISOString();
 
-  // Collect all provider IDs used
-  const providerIds = new Set<ProviderId>();
-  for (const product of schema.products.values()) {
-    for (const provider of product.providers) {
-      providerIds.add(provider.providerId);
-    }
-  }
-  // Also include providers from enabledProviders
-  for (const providerId of schema.enabledProviders) {
-    providerIds.add(providerId);
-  }
+  const productSlugs = [...schema.products.keys()].sort();
+  const locationSlugs = [...schema.locations.keys()].sort();
+  const perkSlugs = [...schema.perks.keys()].sort();
 
-  // Imports
-  lines.push(
-    'import { schemaConfiguration, unlockablePerk } from "@voidhash/react-native";'
-  );
+  const lines: string[] = [];
+  lines.push("// voidhash.gen.d.ts — generated by voidhash-cli, do not edit");
+  lines.push(`${VOIDHASH_VERSION_COMMENT_PREFIX}${version}`);
+  lines.push(`${VOIDHASH_FETCHED_AT_COMMENT_PREFIX}${fetchedAt}`);
   lines.push("");
-
-  // Schema configuration
-  lines.push("export const sc = schemaConfiguration({");
-
-  // Perks
-  lines.push("  perks: {");
-  const sortedPerks = [...schema.perks.values()].sort((a, b) =>
-    a.slug.localeCompare(b.slug)
-  );
-  for (const perk of sortedPerks) {
-    const varName = slugToCamelCase(perk.slug);
-    lines.push(
-      `    ${varName}: unlockablePerk(${toTsStringLiteral(perk.slug)}, { name: ${toTsStringLiteral(perk.name)} }),`
-    );
-  }
-  lines.push("  },");
-
-  // Providers
-  lines.push("  providers: {");
-  const sortedProviders = [...providerIds].sort();
-  for (const providerId of sortedProviders) {
-    lines.push(`    ${providerId}: true,`);
-  }
-  lines.push("  },");
-
-  lines.push("});");
+  lines.push('declare module "@voidhash/react-native" {');
+  lines.push("  interface VoidhashRegister {");
+  lines.push("    schema: {");
+  lines.push(`      products: ${toUnionType(productSlugs)};`);
+  lines.push(`      locations: ${toUnionType(locationSlugs)};`);
+  lines.push(`      perks: ${toUnionType(perkSlugs)};`);
+  lines.push("    };");
+  lines.push("  }");
+  lines.push("}");
+  lines.push("");
+  lines.push("export {};");
   lines.push("");
 
-  // Paywall locations
-  const sortedLocations = [...schema.locations.values()].sort((a, b) =>
-    a.slug.localeCompare(b.slug)
-  );
-  for (const location of sortedLocations) {
-    const varName = slugToCamelCase(location.slug);
-    lines.push(
-      `export const ${varName} = sc.location(${toTsStringLiteral(location.slug)}, {`
-    );
-    lines.push(`  name: ${toTsStringLiteral(location.name)},`);
-    if (location.description !== null) {
-      lines.push(`  description: ${toTsStringLiteral(location.description)},`);
-    }
-    lines.push("});");
-    lines.push("");
-  }
-
-  // Products
-  const sortedProducts = [...schema.products.values()].sort((a, b) =>
-    a.slug.localeCompare(b.slug)
-  );
-  for (const product of sortedProducts) {
-    const varName = slugToCamelCase(product.slug);
-    lines.push(
-      `export const ${varName} = sc.subscription(${toTsStringLiteral(product.slug)}, {`
-    );
-    lines.push(`  name: ${toTsStringLiteral(product.name)},`);
-
-    // Perks
-    lines.push("  perks: {");
-    const sortedProductPerks = [...product.perks].sort();
-    for (const perkSlug of sortedProductPerks) {
-      const perkVarName = slugToCamelCase(perkSlug);
-      lines.push(`    ${perkVarName}: true,`);
-    }
-    lines.push("  },");
-
-    // Providers
-    lines.push("  providers: {");
-    const sortedProductProviders = [...product.providers].sort((a, b) =>
-      a.providerId.localeCompare(b.providerId)
-    );
-    for (const provider of sortedProductProviders) {
-      const configStr = JSON.stringify(provider.configuration, null, 2)
-        .split("\n")
-        .map((line, i) => (i === 0 ? line : `    ${line}`))
-        .join("\n");
-      lines.push(`    ${provider.providerId}: ${configStr},`);
-    }
-    lines.push("  },");
-
-    lines.push("});");
-    lines.push("");
-  }
-
-  return lines.join("\n");
+  return { content: lines.join("\n"), version };
 }
 
 const make = Effect.gen(function* effect() {
@@ -140,40 +67,44 @@ const make = Effect.gen(function* effect() {
     config: Writable<typeof VoidhashConfigSchema.Type>
   ) =>
     Effect.gen(function* generateVoidhashConfigFile() {
-      const content = `import { defineConfig } from 'voidhash-cli';
-
-export default defineConfig({
-  team: '${config.team}',
-  project: '${config.project}',
-  schema: '${config.schema}'
-});
-`;
-      yield* fileSystem.writeFileString(filePath, content);
+      const lines = [
+        "import { defineConfig } from 'voidhash-cli';",
+        "",
+        "export default defineConfig({",
+        `  team: '${config.team}',`,
+        `  project: '${config.project}',`,
+      ];
+      if (config.typesOutput !== undefined) {
+        lines.push(`  typesOutput: '${config.typesOutput}',`);
+      }
+      lines.push("});", "");
+      yield* fileSystem.writeFileString(filePath, lines.join("\n"));
     });
 
-  const generateClientFile = (filePath: string, publishableKey: string) =>
-    Effect.gen(function* generateClientFile() {
-      const content = `import { createVoidhashClient } from "@voidhash/react-native";
-import * as schema from "./schema";
-
-export const voidhash = createVoidhashClient(
-  "${publishableKey}",
-  schema
-);
-`;
+  /**
+   * Generate the `.d.ts` declaration file from the remote schema and write it
+   * to disk. Returns the version hash that was baked into the header.
+   */
+  const generateTypesDeclarationFile = (
+    filePath: string,
+    schema: NormalizedSchema
+  ) =>
+    Effect.gen(function* generateTypesDeclarationFile() {
+      const { content, version } = generateTypesDeclaration(schema);
       yield* fileSystem.writeFileString(filePath, content);
+      return version;
     });
 
-  const generateSchemaFile = (filePath: string, schema: NormalizedSchema) =>
-    Effect.gen(function* generateSchemaFile() {
-      const content = generateSchemaCode(schema);
-      yield* fileSystem.writeFileString(filePath, content);
+  const readDeclarationVersion = (filePath: string) =>
+    Effect.gen(function* readDeclarationVersion() {
+      const content = yield* fileSystem.readFileString(filePath);
+      return parseVersionFromDeclaration(content);
     });
 
   return {
-    generateClientFile,
-    generateSchemaFile,
+    generateTypesDeclarationFile,
     generateVoidhashConfigFile,
+    readDeclarationVersion,
   } as const;
 });
 
@@ -182,5 +113,5 @@ type CodegenShape = Effect.Success<typeof make>;
 export class Codegen extends ServiceMap.Service<Codegen, CodegenShape>()(
   "voidhash-cli/Codegen"
 ) {
-  static Default = Layer.effect(Codegen, make)
+  static Default = Layer.effect(Codegen, make);
 }
diff --git a/apps/cli/src/domain/services/schema.ts b/apps/cli/src/domain/services/schema.ts
index 77a7025d9..72a8432ff 100644
--- a/apps/cli/src/domain/services/schema.ts
+++ b/apps/cli/src/domain/services/schema.ts
@@ -1,244 +1,162 @@
-import type { ChangesetSchema } from "@voidhash/shared";
 import { Effect, Layer, Schedule, ServiceMap } from "effect";
 
 import { ApiClient } from "../../utils/api-client";
+import { computeSchemaVersionFromNormalized } from "../../utils/schema/version";
+import { RemoteSchemaFetchError } from "../errors/schema";
 import {
-	buildChangeset,
-	formatChange,
-} from "../../utils/schema/changeset-builder";
-import { computeDiff, summarizeDiff } from "../../utils/schema/diff";
-import { loadLocalSchema } from "../../utils/schema/local-schema-loader";
-import {
-	ChangeDeploymentError,
-	RemoteSchemaFetchError,
-} from "../errors/schema";
-import {
-	type ProviderId,
-	createEmptyNormalizedSchema,
+  type ProviderId,
+  createEmptyNormalizedSchema,
 } from "../schema/normalized-schema";
 
-// Re-export types for convenience
-export type { SchemaDiff } from "../../utils/schema/diff";
-export { formatChange } from "../../utils/schema/changeset-builder";
-
-type Change = (typeof ChangesetSchema.Type)["changes"][number];
-
 const make = Effect.gen(function* effect() {
-	const apiClient = yield* ApiClient;
-
-	/**
-	 * Fetch the remote schema from the API
-	 */
-	const fetchRemoteSchema = () =>
-		Effect.gen(function* fetchRemoteSchema() {
-			yield* Effect.logDebug("Fetching remote schema from API");
-			const schema = createEmptyNormalizedSchema();
-
-			// 1. Fetch all perks
-			const remotePerks = yield* apiClient.perksListPerks();
-			for (const perk of remotePerks) {
-				schema.perks.set(perk.slug, {
-					name: perk.name,
-					slug: perk.slug,
-				});
-			}
-
-			// 1b. Fetch all active paywall locations
-			const remoteLocations =
-				yield* apiClient.paywallLocationsListPaywallLocations();
-			for (const location of remoteLocations) {
-				schema.locations.set(location.slug, {
-					description: location.description,
-					name: location.name,
-					slug: location.slug,
-				});
-			}
-
-			// 2. Fetch all products
-			const remoteProducts = yield* apiClient.productsListProducts();
-
-			// 3. Fetch payment provider configurations
-			const providerConfigs =
-				yield* apiClient.paymentProviderConfigurationsListPaymentProviderConfigurations();
-			for (const config of providerConfigs) {
-				if (
-					config.providerId === "appleAppStore" ||
-					config.providerId === "googlePlay"
-				) {
-					schema.enabledProviders.add(config.providerId);
-				}
-			}
-
-			// 4. Fetch all payment provider products
-			const providerProducts =
-				yield* apiClient.paymentProviderProductsListPaymentProviderProducts();
-
-			// Build a map of productId -> provider products
-			const productProviderMap = new Map<
-				string,
-				{ providerId: ProviderId; configuration: Record<string, unknown> }[]
-			>();
-			for (const pp of providerProducts) {
-				if (
-					pp.providerId !== "appleAppStore" &&
-					pp.providerId !== "googlePlay"
-				) {
-					continue;
-				}
-				const existing = productProviderMap.get(pp.productId) || [];
-				existing.push({
-					configuration: pp.configuration as Record<string, unknown>,
-					providerId: pp.providerId,
-				});
-				productProviderMap.set(pp.productId, existing);
-			}
-
-			// 5. For each product, fetch its perks
-
-			yield* Effect.all(
-				remoteProducts.map((product) =>
-					Effect.gen(function* () {
-						const productPerks = yield* apiClient
-							.productPerksListProductPerksByProductId(product.id)
-							.pipe(
-								Effect.retry({
-									schedule: Schedule.exponential(1000),
-									times: 3,
-								}),
-							);
-
-						// Map perkIds to slugs
-						const perkSlugs: string[] = [];
-						for (const pp of productPerks) {
-							const perk = remotePerks.find((p) => p.id === pp.perkId);
-							if (perk) {
-								perkSlugs.push(perk.slug);
-							}
-						}
-
-						schema.products.set(product.slug, {
-							name: product.name,
-							perks: perkSlugs,
-							providers: productProviderMap.get(product.id) || [],
-							slug: product.slug,
-							type: "subscription", // TODO: map from product.type
-						});
-					}),
-				),
-				{
-					concurrency: 8,
-				},
-			);
-
-			yield* Effect.logDebug(
-				`Fetched ${schema.locations.size} locations, ${schema.perks.size} perks, ${schema.products.size} products`
-			);
-			return schema;
-		}).pipe(
-			Effect.withSpan("SchemaService.fetchRemoteSchema"),
-			Effect.catch(
-				(e) =>
-					Effect.fail(new RemoteSchemaFetchError({
-						cause: e,
-					})),
-			),
-		);
-
-	/**
-	 * Fetch payment provider configurations
-	 */
-	const fetchProviderConfigurations = () =>
-		apiClient.paymentProviderConfigurationsListPaymentProviderConfigurations()
-			.pipe(
-				Effect.tap((configs) =>
-					Effect.logDebug(
-						`Fetched ${configs.length} provider configurations`
-					)
-				),
-				Effect.withSpan("SchemaService.fetchProviderConfigurations"),
-				Effect.catch(
-					(e) =>
-						Effect.fail(new RemoteSchemaFetchError({
-							cause: e,
-						})),
-				),
-			);
-	/**
-	 * Check which providers are missing configurations
-	 */
-	const checkProviderConfigurations = (
-		localProviders: Set<ProviderId>,
-		remoteConfigs: readonly { providerId: string }[],
-	): ProviderId[] => {
-		const remoteProviderIds = new Set(
-			remoteConfigs.map((c) => c.providerId),
-		);
-		return [...localProviders].filter(
-			(p) => !remoteProviderIds.has(p),
-		) as ProviderId[];
-	};
-
-	/**
-	 * Deploy a single change to the server
-	 */
-	const deployChange = (change: Change) =>
-		Effect.logDebug(`Deploying change: ${formatChange(change)}`).pipe(
-			Effect.andThen(
-				apiClient.changesetsDeployChangeset({
-					changeset: { changes: [change] },
-				})
-			),
-			Effect.withSpan("SchemaService.deployChange"),
-			Effect.catch(
-				(e) =>
-					Effect.fail(new ChangeDeploymentError({
-						cause: e,
-						change: formatChange(change),
-					}))
-			)
-		);
-
-	/**
-	 * Deploy an entire changeset to the server
-	 */
-	const deployChangeset = (changeset: typeof ChangesetSchema.Type) =>
-		Effect.logDebug(
-			`Deploying changeset with ${changeset.changes.length} changes`
-		).pipe(
-			Effect.andThen(
-				apiClient.changesetsDeployChangeset({
-					changeset,
-				})
-			),
-			Effect.withSpan("SchemaService.deployChangeset"),
-			Effect.catch(
-				(e) =>
-					Effect.fail(new ChangeDeploymentError({
-						cause: e,
-						change: "Full changeset deployment",
-					}))
-			)
-		);
-
-	return {
-		buildChangeset,
-		checkProviderConfigurations,
-		computeDiff,
-		deployChange,
-		deployChangeset,
-		fetchProviderConfigurations,
-		fetchRemoteSchema,
-		loadLocalSchema,
-		summarizeDiff,
-	} as const;
+  const apiClient = yield* ApiClient;
+
+  /**
+   * Fetch the full schema (perks, locations, products, provider configs) from
+   * the server. Used by `voidhash types generate` to assemble the data the
+   * `.d.ts` is generated from.
+   *
+   * Once the server ships a consolidated `GET /schema` endpoint this collapses
+   * to a single call; for now it composes the per-entity endpoints.
+   */
+  const fetchRemoteSchema = () =>
+    Effect.gen(function* fetchRemoteSchema() {
+      yield* Effect.logDebug("Fetching remote schema from API");
+      const schema = createEmptyNormalizedSchema();
+
+      // Perks
+      const remotePerks = yield* apiClient.perksListPerks();
+      for (const perk of remotePerks) {
+        schema.perks.set(perk.slug, {
+          name: perk.name,
+          slug: perk.slug,
+        });
+      }
+
+      // Paywall locations
+      const remoteLocations =
+        yield* apiClient.paywallLocationsListPaywallLocations();
+      for (const location of remoteLocations) {
+        schema.locations.set(location.slug, {
+          description: location.description,
+          name: location.name,
+          slug: location.slug,
+        });
+      }
+
+      // Products
+      const remoteProducts = yield* apiClient.productsListProducts();
+
+      // Payment provider configurations
+      const providerConfigs =
+        yield* apiClient.paymentProviderConfigurationsListPaymentProviderConfigurations();
+      for (const config of providerConfigs) {
+        if (
+          config.providerId === "appleAppStore" ||
+          config.providerId === "googlePlay"
+        ) {
+          schema.enabledProviders.add(config.providerId);
+        }
+      }
+
+      // Payment provider products
+      const providerProducts =
+        yield* apiClient.paymentProviderProductsListPaymentProviderProducts();
+      const productProviderMap = new Map<
+        string,
+        { providerId: ProviderId; configuration: Record<string, unknown> }[]
+      >();
+      for (const pp of providerProducts) {
+        if (
+          pp.providerId !== "appleAppStore" &&
+          pp.providerId !== "googlePlay"
+        ) {
+          continue;
+        }
+        const existing = productProviderMap.get(pp.productId) || [];
+        existing.push({
+          configuration: pp.configuration as Record<string, unknown>,
+          providerId: pp.providerId,
+        });
+        productProviderMap.set(pp.productId, existing);
+      }
+
+      // For each product, fetch its perks
+      yield* Effect.all(
+        remoteProducts.map((product) =>
+          Effect.gen(function* () {
+            const productPerks = yield* apiClient
+              .productPerksListProductPerksByProductId(product.id)
+              .pipe(
+                Effect.retry({
+                  schedule: Schedule.exponential(1000),
+                  times: 3,
+                }),
+              );
+
+            const perkSlugs: string[] = [];
+            for (const pp of productPerks) {
+              const perk = remotePerks.find((p) => p.id === pp.perkId);
+              if (perk) {
+                perkSlugs.push(perk.slug);
+              }
+            }
+
+            schema.products.set(product.slug, {
+              name: product.name,
+              perks: perkSlugs,
+              providers: productProviderMap.get(product.id) || [],
+              slug: product.slug,
+              type: "subscription",
+            });
+          }),
+        ),
+        {
+          concurrency: 8,
+        },
+      );
+
+      yield* Effect.logDebug(
+        `Fetched ${schema.locations.size} locations, ${schema.perks.size} perks, ${schema.products.size} products`
+      );
+      return schema;
+    }).pipe(
+      Effect.withSpan("SchemaService.fetchRemoteSchema"),
+      Effect.catch(
+        (e) =>
+          Effect.fail(new RemoteSchemaFetchError({
+            cause: e,
+          })),
+      ),
+    );
+
+  /**
+   * Fetch just the schema version hash from the server. Used by `types check`,
+   * the `--watch` poll loop, and the dev-mode runtime warning to detect
+   * staleness cheaply without re-downloading the full schema.
+   *
+   * Today this re-derives the version from the full schema fetch (since the
+   * consolidated `GET /schema/version` endpoint isn't shipped yet). Once
+   * that endpoint exists this collapses to a single sub-kilobyte request.
+   */
+  const fetchSchemaVersion = () =>
+    Effect.gen(function* fetchSchemaVersion() {
+      const schema = yield* fetchRemoteSchema();
+      return computeSchemaVersionFromNormalized(schema);
+    });
+
+  return {
+    fetchRemoteSchema,
+    fetchSchemaVersion,
+  } as const;
 });
 
 type SchemaServiceShape = Effect.Success<typeof make>;
 
 export class SchemaService extends ServiceMap.Service<SchemaService, SchemaServiceShape>()(
-	"voidhash-cli/Schema"
+  "voidhash-cli/Schema"
 ) {
-	static Default = Layer.effect(SchemaService, make).pipe(
-		Layer.provide(ApiClient.Default)
-	)
+  static Default = Layer.effect(SchemaService, make).pipe(
+    Layer.provide(ApiClient.Default)
+  );
 }
diff --git a/apps/cli/src/index.ts b/apps/cli/src/index.ts
index d971dd272..2d388959b 100644
--- a/apps/cli/src/index.ts
+++ b/apps/cli/src/index.ts
@@ -1,7 +1,11 @@
 interface Config {
-  schema: string;
   team: string;
   project: string;
+  /**
+   * Output path for the generated `.d.ts` declaration file. Defaults to
+   * `voidhash.gen.d.ts` at the project root.
+   */
+  typesOutput?: string;
 }
 
 export const defineConfig = (config: Config) => config;
diff --git a/apps/cli/src/utils/schema/changeset-builder.ts b/apps/cli/src/utils/schema/changeset-builder.ts
deleted file mode 100644
index 5ae94ab24..000000000
--- a/apps/cli/src/utils/schema/changeset-builder.ts
+++ /dev/null
@@ -1,257 +0,0 @@
-import type { ChangesetSchema } from "@voidhash/shared";
-
-import type { NormalizedProduct } from "../../domain/schema/normalized-schema";
-import type { SchemaDiff } from "./diff";
-
-// ========================================================
-// Types
-// ========================================================
-
-// Re-export the Change type from the changeset
-type Change = (typeof ChangesetSchema.Type)["changes"][number];
-type Changeset = typeof ChangesetSchema.Type;
-
-// ========================================================
-// Changeset Builder
-// ========================================================
-
-/**
- * Build a changeset from a schema diff.
- * Only includes creates and updates, NOT deletes.
- * 
- * Order:
- * 1. Create locations
- * 2. Update locations
- * 3. Create perks
- * 4. Update perks
- * 5. Create products
- * 6. Update products
- * 7. Create product-perks (for new products)
- * 8. Create payment-provider-products (for new products)
- * 9. Update payment-provider-products (for updated products)
- * 10. Archive locations
- */
-export function buildChangeset(diff: SchemaDiff): Changeset {
-  const changes: Change[] = [];
-
-  // 1. Create locations
-  for (const location of diff.locations.toCreate) {
-    changes.push({
-      changeType: "create-paywall-location",
-      key: location.slug,
-      payload: {
-        description: location.description,
-        name: location.name,
-        slug: location.slug,
-      },
-    });
-  }
-
-  // 2. Update locations
-  for (const { local } of diff.locations.toUpdate) {
-    changes.push({
-      changeType: "update-paywall-location",
-      key: local.slug,
-      payload: {
-        description: local.description,
-        name: local.name,
-        slug: local.slug,
-      },
-    });
-  }
-
-  // 3. Create perks (first, as products depend on them)
-  for (const perk of diff.perks.toCreate) {
-    changes.push({
-      changeType: "create-perk",
-      key: perk.slug,
-      payload: { name: perk.name, slug: perk.slug },
-    });
-  }
-
-  // 4. Update perks
-  for (const { local } of diff.perks.toUpdate) {
-    changes.push({
-      changeType: "update-perk",
-      key: local.slug,
-      payload: { name: local.name, slug: local.slug },
-    });
-  }
-
-  // 5. Create products
-  for (const product of diff.products.toCreate) {
-    changes.push({
-      changeType: "create-product",
-      key: product.slug,
-      payload: { name: product.name, slug: product.slug },
-    });
-
-    // 3a. Create product-perks for this product
-    for (const perkSlug of product.perks) {
-      changes.push({
-        changeType: "create-product-perk",
-        key: `${product.slug}:${perkSlug}`,
-        payload: { perkSlug, productSlug: product.slug },
-      });
-    }
-
-    // 3b. Create payment-provider-products for this product
-    for (const provider of product.providers) {
-      changes.push({
-        changeType: "create-payment-provider-product",
-        key: `${product.slug}:${provider.providerId}`,
-        payload: {
-          configuration: provider.configuration as Record<string, unknown>,
-          productSlug: product.slug,
-          providerId: provider.providerId,
-        },
-      });
-    }
-  }
-
-  // 6. Update products
-  for (const { local, remote } of diff.products.toUpdate) {
-    // Check if product name changed
-    if (local.name !== remote.name) {
-      changes.push({
-        changeType: "update-product",
-        key: local.slug,
-        payload: { name: local.name, slug: local.slug },
-      });
-    }
-
-    // Handle product-perk changes
-    const localPerkSet = new Set(local.perks);
-    const remotePerkSet = new Set(remote.perks);
-
-    // Add new perks
-    for (const perkSlug of local.perks) {
-      if (!remotePerkSet.has(perkSlug)) {
-        changes.push({
-          changeType: "create-product-perk",
-          key: `${local.slug}:${perkSlug}`,
-          payload: { perkSlug, productSlug: local.slug },
-        });
-      }
-    }
-
-    // Note: We don't delete product-perks here (no deletes in push)
-
-    // Handle payment-provider-product changes
-    const localProviderMap = new Map(
-      local.providers.map((p) => [p.providerId, p])
-    );
-    const remoteProviderMap = new Map(
-      remote.providers.map((p) => [p.providerId, p])
-    );
-
-    for (const [providerId, localProvider] of localProviderMap) {
-      const remoteProvider = remoteProviderMap.get(providerId);
-
-      if (!remoteProvider) {
-        // New provider configuration
-        changes.push({
-          changeType: "create-payment-provider-product",
-          key: `${local.slug}:${providerId}`,
-          payload: {
-            configuration: localProvider.configuration as Record<string, unknown>,
-            productSlug: local.slug,
-            providerId,
-          },
-        });
-      } else if (
-        JSON.stringify(localProvider.configuration) !==
-        JSON.stringify(remoteProvider.configuration)
-      ) {
-        // Updated provider configuration
-        changes.push({
-          changeType: "update-payment-provider-product",
-          key: `${local.slug}:${providerId}`,
-          payload: {
-            configuration: localProvider.configuration as Record<string, unknown>,
-            productSlug: local.slug,
-            providerId,
-          },
-        });
-      }
-    }
-
-    // Note: We don't delete payment-provider-products here (no deletes in push)
-  }
-
-  // 10. Archive locations
-  for (const location of diff.locations.toArchive) {
-    changes.push({
-      changeType: "archive-paywall-location",
-      key: location.slug,
-      payload: { slug: location.slug },
-    });
-  }
-
-  return { changes };
-}
-
-// ========================================================
-// Change Formatting
-// ========================================================
-
-export function formatChange(change: Change): string {
-  switch (change.changeType) {
-    case "create-paywall-location":
-      return `+ Create paywall location: ${change.payload.slug} ("${change.payload.name}")`;
-    case "update-paywall-location":
-      return `~ Update paywall location: ${change.payload.slug} ("${change.payload.name}")`;
-    case "archive-paywall-location":
-      return `- Archive paywall location: ${change.payload.slug}`;
-    case "create-perk":
-      return `+ Create perk: ${change.payload.slug} ("${change.payload.name}")`;
-    case "update-perk":
-      return `~ Update perk: ${change.payload.slug} ("${change.payload.name}")`;
-    case "create-product":
-      return `+ Create product: ${change.payload.slug} ("${change.payload.name}")`;
-    case "update-product":
-      return `~ Update product: ${change.payload.slug} ("${change.payload.name}")`;
-    case "create-product-perk":
-      return `+ Link perk "${change.payload.perkSlug}" to product "${change.payload.productSlug}"`;
-    case "delete-product-perk":
-      return `- Unlink perk "${change.payload.perkSlug}" from product "${change.payload.productSlug}"`;
-    case "create-payment-provider-product":
-      return `+ Configure ${change.payload.providerId} for product "${change.payload.productSlug}"`;
-    case "update-payment-provider-product":
-      return `~ Update ${change.payload.providerId} config for product "${change.payload.productSlug}"`;
-    case "delete-payment-provider-product":
-      return `- Remove ${change.payload.providerId} config from product "${change.payload.productSlug}"`;
-    case "delete-perk":
-      return `- Delete perk: ${change.payload.slug}`;
-    case "delete-product":
-      return `- Delete product: ${change.payload.slug}`;
-    default:
-      return `? Unknown change type`;
-  }
-}
-
-export function formatChangeShort(change: Change): string {
-  switch (change.changeType) {
-    case "create-paywall-location":
-    case "update-paywall-location":
-    case "archive-paywall-location":
-      return `PaywallLocation: ${change.payload.slug}`;
-    case "create-perk":
-    case "update-perk":
-    case "delete-perk":
-      return `Perk: ${change.payload.slug}`;
-    case "create-product":
-    case "update-product":
-    case "delete-product":
-      return `Product: ${change.payload.slug}`;
-    case "create-product-perk":
-    case "delete-product-perk":
-      return `ProductPerk: ${change.payload.productSlug}:${change.payload.perkSlug}`;
-    case "create-payment-provider-product":
-    case "update-payment-provider-product":
-    case "delete-payment-provider-product":
-      return `ProviderProduct: ${change.payload.productSlug}:${change.payload.providerId}`;
-    default:
-      return "Unknown";
-  }
-}
diff --git a/apps/cli/src/utils/schema/diff.ts b/apps/cli/src/utils/schema/diff.ts
deleted file mode 100644
index 4be3e4a55..000000000
--- a/apps/cli/src/utils/schema/diff.ts
+++ /dev/null
@@ -1,222 +0,0 @@
-import type {
-  NormalizedPaywallLocation,
-  NormalizedPerk,
-  NormalizedProduct,
-  NormalizedSchema,
-} from "../../domain/schema/normalized-schema";
-
-// ========================================================
-// Types
-// ========================================================
-
-export interface PerkDiff {
-  remoteOnly: NormalizedPerk[];
-  toCreate: NormalizedPerk[];
-  toUpdate: { local: NormalizedPerk; remote: NormalizedPerk }[];
-}
-
-export interface ProductDiff {
-  remoteOnly: NormalizedProduct[];
-  toCreate: NormalizedProduct[];
-  toUpdate: { local: NormalizedProduct; remote: NormalizedProduct }[];
-}
-
-export interface PaywallLocationDiff {
-  remoteOnly: NormalizedPaywallLocation[];
-  toArchive: NormalizedPaywallLocation[];
-  toCreate: NormalizedPaywallLocation[];
-  toUpdate: { local: NormalizedPaywallLocation; remote: NormalizedPaywallLocation }[];
-}
-
-export interface SchemaDiff {
-  locations: PaywallLocationDiff;
-  perks: PerkDiff;
-  products: ProductDiff;
-}
-
-// ========================================================
-// Comparison Helpers
-// ========================================================
-
-function perksEqual(a: NormalizedPerk, b: NormalizedPerk): boolean {
-  return a.slug === b.slug && a.name === b.name;
-}
-
-function arraysEqual<T>(a: readonly T[], b: readonly T[]): boolean {
-  if (a.length !== b.length) return false;
-  const sortedA = [...a].sort();
-  const sortedB = [...b].sort();
-  return sortedA.every((val, i) => val === sortedB[i]);
-}
-
-function providerConfigsEqual(
-  a: readonly { providerId: string; configuration: Readonly<Record<string, unknown>> }[],
-  b: readonly { providerId: string; configuration: Readonly<Record<string, unknown>> }[]
-): boolean {
-  if (a.length !== b.length) return false;
-
-  const sortedA = [...a].sort((x, y) => x.providerId.localeCompare(y.providerId));
-  const sortedB = [...b].sort((x, y) => x.providerId.localeCompare(y.providerId));
-
-  for (let i = 0; i < sortedA.length; i++) {
-    const provA = sortedA[i];
-    const provB = sortedB[i];
-    if (!provA || !provB) return false;
-    if (provA.providerId !== provB.providerId) return false;
-    // Deep compare configurations
-    if (JSON.stringify(provA.configuration) !== JSON.stringify(provB.configuration)) {
-      return false;
-    }
-  }
-
-  return true;
-}
-
-function productsEqual(a: NormalizedProduct, b: NormalizedProduct): boolean {
-  return (
-    a.slug === b.slug &&
-    a.name === b.name &&
-    a.type === b.type &&
-    arraysEqual(a.perks, b.perks) &&
-    providerConfigsEqual(a.providers, b.providers)
-  );
-}
-
-function locationsEqual(
-  a: NormalizedPaywallLocation,
-  b: NormalizedPaywallLocation
-): boolean {
-  return (
-    a.slug === b.slug &&
-    a.name === b.name &&
-    (a.description ?? null) === (b.description ?? null)
-  );
-}
-
-// ========================================================
-// Diff Algorithm
-// ========================================================
-
-/**
- * Compute the difference between local and remote schemas.
- * 
- * - toCreate: exists in local but not in remote
- * - toUpdate: exists in both but values differ
- * - remoteOnly: exists in remote but not in local (for info, we don't delete)
- */
-export function computeDiff(
-  local: NormalizedSchema,
-  remote: NormalizedSchema
-): SchemaDiff {
-  const diff: SchemaDiff = {
-    locations: { remoteOnly: [], toArchive: [], toCreate: [], toUpdate: [] },
-    perks: { remoteOnly: [], toCreate: [], toUpdate: [] },
-    products: { remoteOnly: [], toCreate: [], toUpdate: [] },
-  };
-
-  // Compare paywall locations
-  for (const [slug, localLocation] of local.locations) {
-    const remoteLocation = remote.locations.get(slug);
-    if (!remoteLocation) {
-      diff.locations.toCreate.push(localLocation);
-    } else if (!locationsEqual(localLocation, remoteLocation)) {
-      diff.locations.toUpdate.push({ local: localLocation, remote: remoteLocation });
-    }
-  }
-
-  // Find remote-only locations (active on server, absent locally)
-  for (const [slug, remoteLocation] of remote.locations) {
-    if (!local.locations.has(slug)) {
-      diff.locations.remoteOnly.push(remoteLocation);
-      diff.locations.toArchive.push(remoteLocation);
-    }
-  }
-
-  // Compare perks
-  for (const [slug, localPerk] of local.perks) {
-    const remotePerk = remote.perks.get(slug);
-    if (!remotePerk) {
-      diff.perks.toCreate.push(localPerk);
-    } else if (!perksEqual(localPerk, remotePerk)) {
-      diff.perks.toUpdate.push({ local: localPerk, remote: remotePerk });
-    }
-  }
-
-  // Find remote-only perks
-  for (const [slug, remotePerk] of remote.perks) {
-    if (!local.perks.has(slug)) {
-      diff.perks.remoteOnly.push(remotePerk);
-    }
-  }
-
-  // Compare products
-  for (const [slug, localProduct] of local.products) {
-    const remoteProduct = remote.products.get(slug);
-    if (!remoteProduct) {
-      diff.products.toCreate.push(localProduct);
-    } else if (!productsEqual(localProduct, remoteProduct)) {
-      diff.products.toUpdate.push({ local: localProduct, remote: remoteProduct });
-    }
-  }
-
-  // Find remote-only products
-  for (const [slug, remoteProduct] of remote.products) {
-    if (!local.products.has(slug)) {
-      diff.products.remoteOnly.push(remoteProduct);
-    }
-  }
-
-  return diff;
-}
-
-// ========================================================
-// Summary Helpers
-// ========================================================
-
-export interface DiffSummary {
-  locationsToArchive: number;
-  locationsToCreate: number;
-  locationsToUpdate: number;
-  locationsRemoteOnly: number;
-  perksToCreate: number;
-  perksToUpdate: number;
-  perksRemoteOnly: number;
-  productsToCreate: number;
-  productsToUpdate: number;
-  productsRemoteOnly: number;
-  totalChanges: number;
-}
-
-export function summarizeDiff(diff: SchemaDiff): DiffSummary {
-  const locationsToCreate = diff.locations.toCreate.length;
-  const locationsToUpdate = diff.locations.toUpdate.length;
-  const locationsToArchive = diff.locations.toArchive.length;
-  const locationsRemoteOnly = diff.locations.remoteOnly.length;
-  const perksToCreate = diff.perks.toCreate.length;
-  const perksToUpdate = diff.perks.toUpdate.length;
-  const perksRemoteOnly = diff.perks.remoteOnly.length;
-  const productsToCreate = diff.products.toCreate.length;
-  const productsToUpdate = diff.products.toUpdate.length;
-  const productsRemoteOnly = diff.products.remoteOnly.length;
-
-  return {
-    locationsRemoteOnly,
-    locationsToArchive,
-    locationsToCreate,
-    locationsToUpdate,
-    perksRemoteOnly,
-    perksToCreate,
-    perksToUpdate,
-    productsRemoteOnly,
-    productsToCreate,
-    productsToUpdate,
-    totalChanges:
-      locationsToCreate +
-      locationsToUpdate +
-      locationsToArchive +
-      perksToCreate +
-      perksToUpdate +
-      productsToCreate +
-      productsToUpdate,
-  };
-}
diff --git a/apps/cli/src/utils/schema/local-schema-loader.ts b/apps/cli/src/utils/schema/local-schema-loader.ts
deleted file mode 100644
index da5c6a803..000000000
--- a/apps/cli/src/utils/schema/local-schema-loader.ts
+++ /dev/null
@@ -1,339 +0,0 @@
-import Module from "node:module";
-import { Effect, FileSystem, Path } from "effect";
-
-import {
-  LocalSchemaNotFoundError,
-  LocalSchemaParseError,
-} from "../../domain/errors/schema";
-import {
-  type NormalizedSchema,
-  type ProviderId,
-  createEmptyNormalizedSchema,
-} from "../../domain/schema/normalized-schema";
-import { safeRegister } from "../js-loading/js-file-loading";
-
-// Extended Module type to include internal _resolveFilename method
-interface ModuleInternal {
-  _resolveFilename: (
-    request: string,
-    parent: unknown,
-    isMain: boolean,
-    options: unknown
-  ) => string;
-}
-
-/**
- * Sets up module resolution alias to redirect @voidhash/react-native imports
- * to the schema-only exports. This prevents the CLI from loading the full
- * React Native package which requires native bindings.
- *
- * @returns A cleanup function to restore original module resolution
- */
-function setupSchemaModuleAlias(): () => void {
-  const moduleInternal = Module as unknown as ModuleInternal;
-  const originalResolve = moduleInternal._resolveFilename;
-
-  moduleInternal._resolveFilename = function (
-    request: string,
-    parent: unknown,
-    isMain: boolean,
-    options: unknown
-  ) {
-    // Redirect @voidhash/react-native to its schema-only exports
-    if (request === "@voidhash/react-native") {
-      // Resolve the schema subpath using the original resolver
-      return originalResolve.call(
-        this,
-        "@voidhash/react-native/schema",
-        parent,
-        isMain,
-        options
-      );
-    }
-    return originalResolve.call(this, request, parent, isMain, options);
-  };
-
-  return () => {
-    moduleInternal._resolveFilename = originalResolve;
-  };
-}
-
-/**
- * Symbol used to identify schema entity types at runtime.
- * Must match the symbol used in @voidhash/react-native schema definitions.
- */
-export const SCHEMA_KIND = Symbol.for("voidhash.schema.kind");
-
-export const SchemaKind = {
-  Perk: "perk",
-  PaywallLocation: "paywall-location",
-  Product: "product",
-  SchemaConfiguration: "schema-configuration",
-} as const;
-
-/**
- * Check if a value is a SchemaConfiguration object using the schema kind symbol
- */
-export function isSchemaConfiguration(
-  value: unknown
-): value is {
-  perks: Record<string, { slug: string; name: string }>;
-  providers: Record<string, boolean>;
-  location: unknown;
-  subscription: unknown;
-} {
-  return (
-    value !== null &&
-    typeof value === "object" &&
-    (value as Record<symbol, unknown>)[SCHEMA_KIND] ===
-      SchemaKind.SchemaConfiguration
-  );
-}
-
-/**
- * Check if a value is a PaywallLocationDefinition instance using the schema kind symbol
- */
-export function isPaywallLocationDefinition(
-  value: unknown
-): value is {
-  description: string | null;
-  name: string;
-  slug: string;
-} {
-  return (
-    value !== null &&
-    typeof value === "object" &&
-    (value as Record<symbol, unknown>)[SCHEMA_KIND] ===
-      SchemaKind.PaywallLocation
-  );
-}
-
-/**
- * Check if a value is a PerkDefinition instance using the schema kind symbol
- */
-export function isPerkDefinition(
-  value: unknown
-): value is { slug: string; name: string } {
-  return (
-    value !== null &&
-    typeof value === "object" &&
-    (value as Record<symbol, unknown>)[SCHEMA_KIND] === SchemaKind.Perk
-  );
-}
-
-/**
- * Check if a value is a ProductDefinition instance using the schema kind symbol
- */
-export function isProductDefinition(
-  value: unknown
-): value is {
-  type: string;
-  slug: string;
-  properties: { name: string };
-  configuration: {
-    perks?: Record<string, boolean | { _: unknown }>;
-    providers?: Record<string, unknown>;
-  };
-} {
-  return (
-    value !== null &&
-    typeof value === "object" &&
-    (value as Record<symbol, unknown>)[SCHEMA_KIND] === SchemaKind.Product
-  );
-}
-
-/**
- * Extract perk slugs from a product's configuration
- */
-export function extractPerkSlugs(
-  perksConfig: Record<string, boolean | { _: unknown }> | undefined,
-  allPerks: Map<string, { slug: string; name: string }>
-): string[] {
-  if (!perksConfig) return [];
-
-  const perkSlugs: string[] = [];
-
-  for (const [key, value] of Object.entries(perksConfig)) {
-    // Skip the metadata key
-    if (key === "_") continue;
-
-    // If value is true, this perk is enabled
-    if (value === true) {
-      // Find the perk by variable name (key) in our perks map
-      // We need to match by the variable name, not slug
-      for (const [slug, perk] of allPerks) {
-        // The key in the config should match the camelCase version of the slug
-        const expectedKey = slugToCamelCase(slug);
-        if (expectedKey === key) {
-          perkSlugs.push(slug);
-          break;
-        }
-      }
-    }
-  }
-
-  return perkSlugs;
-}
-
-/**
- * Extract provider configurations from a product
- */
-export function extractProviderConfigs(
-  providersConfig: Record<string, unknown> | undefined
-): { providerId: ProviderId; configuration: Record<string, unknown> }[] {
-  if (!providersConfig) return [];
-
-  const providers: {
-    providerId: ProviderId;
-    configuration: Record<string, unknown>;
-  }[] = [];
-
-  for (const [providerId, config] of Object.entries(providersConfig)) {
-    // Skip the metadata key
-    if (providerId === "_") continue;
-
-    // Only include appleAppStore and googlePlay
-    if (providerId === "appleAppStore" || providerId === "googlePlay") {
-      if (config && typeof config === "object") {
-        providers.push({
-          configuration: config as Record<string, unknown>,
-          providerId,
-        });
-      }
-    }
-  }
-
-  return providers;
-}
-
-/**
- * Convert slug to camelCase variable name
- * e.g., "all-access" -> "allAccess", "monthly_sub" -> "monthlySub"
- */
-export function slugToCamelCase(slug: string): string {
-  return slug
-    .split(/[-_]/)
-    .map((part, i) =>
-      i === 0 ? part.toLowerCase() : part.charAt(0).toUpperCase() + part.slice(1).toLowerCase()
-    )
-    .join("");
-}
-
-/**
- * Load and parse a local schema file into a NormalizedSchema
- */
-export const loadLocalSchema = (schemaPath: string) =>
-  Effect.gen(function* loadLocalSchema() {
-    const fs = yield* FileSystem.FileSystem;
-    const pathService = yield* Path.Path;
-
-    // Resolve the absolute path
-    const absolutePath = pathService.resolve(schemaPath);
-
-    // Check if file exists
-    const exists = yield* fs.exists(absolutePath);
-    if (!exists) {
-      return yield* Effect.fail(
-        new LocalSchemaNotFoundError({ path: schemaPath })
-      );
-    }
-
-    // Register esbuild for TypeScript
-    const { unregister } = yield* safeRegister().pipe(
-      Effect.catchTag("FailedToLoadJsFileError", (e) =>
-        Effect.fail(
-          new LocalSchemaParseError({
-            message: `Failed to register TypeScript loader: ${e.message}`,
-          })
-        )
-      )
-    );
-
-    // Set up module alias to redirect @voidhash/react-native to schema-only exports
-    // This prevents loading React Native native bindings in the CLI
-    const removeAlias = setupSchemaModuleAlias();
-
-    // Load the schema module
-    let schemaModule: Record<string, unknown>;
-    try {
-      // Clear require cache to ensure fresh load
-      delete require.cache[require.resolve(absolutePath)];
-      schemaModule = require(absolutePath);
-    } catch (e) {
-      removeAlias();
-      unregister();
-      return yield* Effect.fail(
-        new LocalSchemaParseError({
-          message: `Failed to load schema file: ${e instanceof Error ? e.message : String(e)}`,
-        })
-      );
-    }
-
-    removeAlias();
-    unregister();
-
-    // Create the normalized schema
-    const schema = createEmptyNormalizedSchema();
-
-    // First pass: extract perks and providers from SchemaConfiguration
-    for (const [, value] of Object.entries(schemaModule)) {
-      if (isSchemaConfiguration(value)) {
-        // Extract perks
-        for (const [, perkDef] of Object.entries(value.perks)) {
-          if (isPerkDefinition(perkDef)) {
-            schema.perks.set(perkDef.slug, {
-              name: perkDef.name,
-              slug: perkDef.slug,
-            });
-          }
-        }
-
-        // Extract enabled providers
-        for (const [providerId, enabled] of Object.entries(value.providers)) {
-          if (
-            enabled === true &&
-            (providerId === "appleAppStore" || providerId === "googlePlay")
-          ) {
-            schema.enabledProviders.add(providerId);
-          }
-        }
-      }
-    }
-
-    // Second pass: extract products
-    for (const [, value] of Object.entries(schemaModule)) {
-      if (isProductDefinition(value)) {
-        const perkSlugs = extractPerkSlugs(
-          value.configuration.perks,
-          schema.perks
-        );
-        const providers = extractProviderConfigs(value.configuration.providers);
-
-        // Add providers from this product to enabled providers
-        for (const provider of providers) {
-          schema.enabledProviders.add(provider.providerId);
-        }
-
-        schema.products.set(value.slug, {
-          name: value.properties.name,
-          perks: perkSlugs,
-          providers,
-          slug: value.slug,
-          type: "subscription", // For now, only subscription is supported
-        });
-      }
-    }
-
-    // Third pass: extract paywall locations
-    for (const [, value] of Object.entries(schemaModule)) {
-      if (isPaywallLocationDefinition(value)) {
-        schema.locations.set(value.slug, {
-          description: value.description,
-          name: value.name,
-          slug: value.slug,
-        });
-      }
-    }
-
-    return schema;
-  });
diff --git a/apps/cli/src/utils/schema/version.ts b/apps/cli/src/utils/schema/version.ts
new file mode 100644
index 000000000..bfecd1993
--- /dev/null
+++ b/apps/cli/src/utils/schema/version.ts
@@ -0,0 +1,66 @@
+import { createHash } from "node:crypto";
+
+import type { NormalizedSchema } from "../../domain/schema/normalized-schema";
+
+/**
+ * Compute a deterministic sha256 hash of a normalized schema. The result is
+ * what `voidhash types generate` bakes into the `.d.ts` header and what
+ * `voidhash types check` compares against the server.
+ *
+ * The hash is order-independent (slugs sorted) so unrelated reorderings
+ * don't churn the version.
+ */
+export function computeSchemaVersionFromNormalized(
+  schema: NormalizedSchema
+): string {
+  const sortedProducts = [...schema.products.values()]
+    .map((product) => ({
+      name: product.name,
+      perks: [...product.perks].sort(),
+      providers: [...product.providers]
+        .map((provider) => ({
+          providerId: provider.providerId,
+          configuration: provider.configuration,
+        }))
+        .sort((a, b) => a.providerId.localeCompare(b.providerId)),
+      slug: product.slug,
+      type: product.type,
+    }))
+    .sort((a, b) => a.slug.localeCompare(b.slug));
+
+  const sortedLocations = [...schema.locations.values()]
+    .map((location) => ({
+      description: location.description,
+      name: location.name,
+      slug: location.slug,
+    }))
+    .sort((a, b) => a.slug.localeCompare(b.slug));
+
+  const sortedPerks = [...schema.perks.values()]
+    .map((perk) => ({ name: perk.name, slug: perk.slug }))
+    .sort((a, b) => a.slug.localeCompare(b.slug));
+
+  const payload = JSON.stringify({
+    locations: sortedLocations,
+    perks: sortedPerks,
+    products: sortedProducts,
+  });
+
+  return `sha256:${createHash("sha256").update(payload).digest("hex")}`;
+}
+
+export const VOIDHASH_VERSION_COMMENT_PREFIX = "// @voidhash:version ";
+export const VOIDHASH_FETCHED_AT_COMMENT_PREFIX = "// @voidhash:fetched-at ";
+
+/**
+ * Extract the version header from a generated `.d.ts`, if present.
+ * Returns null when the header is missing (e.g. the file was hand-edited).
+ */
+export function parseVersionFromDeclaration(content: string): string | null {
+  for (const line of content.split(/\r?\n/)) {
+    if (line.startsWith(VOIDHASH_VERSION_COMMENT_PREFIX)) {
+      return line.slice(VOIDHASH_VERSION_COMMENT_PREFIX.length).trim();
+    }
+  }
+  return null;
+}
diff --git a/apps/cli/tests/fixtures/empty-schema.ts b/apps/cli/tests/fixtures/empty-schema.ts
deleted file mode 100644
index e684fc181..000000000
--- a/apps/cli/tests/fixtures/empty-schema.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-import { schemaConfiguration } from "@voidhash/react-native/schema";
-
-export const schema = schemaConfiguration({
-	perks: {},
-	providers: {},
-});
diff --git a/apps/cli/tests/fixtures/valid-schema.ts b/apps/cli/tests/fixtures/valid-schema.ts
deleted file mode 100644
index 33b80a833..000000000
--- a/apps/cli/tests/fixtures/valid-schema.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import {
-	schemaConfiguration,
-	unlockablePerk,
-} from "@voidhash/react-native/schema";
-
-export const schema = schemaConfiguration({
-	perks: {
-		allAccess: unlockablePerk("all-access", { name: "All Access" }),
-		premiumFeatures: unlockablePerk("premium-features", {
-			name: "Premium Features",
-		}),
-	},
-	providers: {
-		appleAppStore: true,
-		googlePlay: true,
-	},
-});
-
-export const monthlyPlan = schema.subscription("monthly-plan", {
-	name: "Monthly Plan",
-	perks: { allAccess: true },
-	providers: {
-		appleAppStore: { productId: "com.example.monthly" },
-		googlePlay: { productId: "monthly_subscription" },
-	},
-});
-
-export const yearlyPlan = schema.subscription("yearly-plan", {
-	name: "Yearly Plan",
-	perks: { allAccess: true, premiumFeatures: true },
-	providers: {
-		appleAppStore: { productId: "com.example.yearly" },
-		googlePlay: { productId: "yearly_subscription", basePlanId: "base-yearly" },
-	},
-});
-
-export const onboardingUpsell = schema.location("onboarding-upsell", {
-	description: "Shown after onboarding",
-	name: "Onboarding Upsell",
-});
-
-export const settingsPaywall = schema.location("settings-paywall", {
-	name: "Settings Paywall",
-});
diff --git a/apps/cli/tests/utils/schema/changeset-builder.test.ts b/apps/cli/tests/utils/schema/changeset-builder.test.ts
deleted file mode 100644
index a2165ebad..000000000
--- a/apps/cli/tests/utils/schema/changeset-builder.test.ts
+++ /dev/null
@@ -1,991 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import {
-	buildChangeset,
-	formatChange,
-	formatChangeShort,
-} from "../../../src/utils/schema/changeset-builder";
-import { computeDiff } from "../../../src/utils/schema/diff";
-import {
-	createProviderConfig,
-	createTestPaywallLocation,
-	createTestPerk,
-	createTestProduct,
-	createTestSchema,
-} from "../../helpers/schema-factories";
-
-describe("buildChangeset", () => {
-	describe("empty diff", () => {
-		it("returns empty changeset for empty diff", () => {
-			const local = createTestSchema({});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			expect(changeset.changes).toHaveLength(0);
-		});
-	});
-
-	describe("paywall location changes", () => {
-		it("generates create-paywall-location for new locations", () => {
-			const local = createTestSchema({
-				locations: [
-					createTestPaywallLocation({
-						description: "Shown on launch",
-						name: "Onboarding",
-						slug: "onboarding",
-					}),
-				],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			expect(changeset.changes).toHaveLength(1);
-			expect(changeset.changes[0]).toEqual({
-				changeType: "create-paywall-location",
-				key: "onboarding",
-				payload: {
-					description: "Shown on launch",
-					name: "Onboarding",
-					slug: "onboarding",
-				},
-			});
-		});
-
-		it("generates update-paywall-location for updated locations", () => {
-			const local = createTestSchema({
-				locations: [
-					createTestPaywallLocation({
-						description: null,
-						name: "Onboarding New",
-						slug: "onboarding",
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				locations: [
-					createTestPaywallLocation({
-						description: "Shown on launch",
-						name: "Onboarding Old",
-						slug: "onboarding",
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			expect(changeset.changes).toHaveLength(1);
-			expect(changeset.changes[0]).toEqual({
-				changeType: "update-paywall-location",
-				key: "onboarding",
-				payload: {
-					description: null,
-					name: "Onboarding New",
-					slug: "onboarding",
-				},
-			});
-		});
-
-		it("generates archive-paywall-location for remote-only locations", () => {
-			const local = createTestSchema({});
-			const remote = createTestSchema({
-				locations: [
-					createTestPaywallLocation({
-						name: "Onboarding",
-						slug: "onboarding",
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			expect(changeset.changes).toHaveLength(1);
-			expect(changeset.changes[0]).toEqual({
-				changeType: "archive-paywall-location",
-				key: "onboarding",
-				payload: { slug: "onboarding" },
-			});
-		});
-	});
-
-	describe("perk changes", () => {
-		it("generates create-perk for new perks", () => {
-			const local = createTestSchema({
-				perks: [createTestPerk({ slug: "new-perk", name: "New Perk" })],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			expect(changeset.changes).toHaveLength(1);
-			expect(changeset.changes[0]).toEqual({
-				changeType: "create-perk",
-				key: "new-perk",
-				payload: { name: "New Perk", slug: "new-perk" },
-			});
-		});
-
-		it("generates update-perk for updated perks", () => {
-			const local = createTestSchema({
-				perks: [createTestPerk({ slug: "perk-1", name: "Updated Name" })],
-			});
-			const remote = createTestSchema({
-				perks: [createTestPerk({ slug: "perk-1", name: "Original Name" })],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			expect(changeset.changes).toHaveLength(1);
-			expect(changeset.changes[0]).toEqual({
-				changeType: "update-perk",
-				key: "perk-1",
-				payload: { name: "Updated Name", slug: "perk-1" },
-			});
-		});
-
-		it("generates multiple perk changes in correct order", () => {
-			const local = createTestSchema({
-				perks: [
-					createTestPerk({ slug: "new-perk", name: "New" }),
-					createTestPerk({ slug: "updated-perk", name: "Updated Local" }),
-				],
-			});
-			const remote = createTestSchema({
-				perks: [createTestPerk({ slug: "updated-perk", name: "Updated Remote" })],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			expect(changeset.changes).toHaveLength(2);
-			// Creates should come before updates
-			expect(changeset.changes[0]?.changeType).toBe("create-perk");
-			expect(changeset.changes[1]?.changeType).toBe("update-perk");
-		});
-	});
-
-	describe("product creation", () => {
-		it("generates create-product for new products", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "new-product",
-						name: "New Product",
-						perks: [],
-						providers: [],
-					}),
-				],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const createProductChange = changeset.changes.find(
-				(c) => c.changeType === "create-product",
-			);
-			expect(createProductChange).toEqual({
-				changeType: "create-product",
-				key: "new-product",
-				payload: { name: "New Product", slug: "new-product" },
-			});
-		});
-
-		it("generates create-product-perk for each perk on new product", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "new-product",
-						name: "New Product",
-						perks: ["perk-1", "perk-2"],
-						providers: [],
-					}),
-				],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const productPerkChanges = changeset.changes.filter(
-				(c) => c.changeType === "create-product-perk",
-			);
-			expect(productPerkChanges).toHaveLength(2);
-			expect(productPerkChanges).toContainEqual({
-				changeType: "create-product-perk",
-				key: "new-product:perk-1",
-				payload: { perkSlug: "perk-1", productSlug: "new-product" },
-			});
-			expect(productPerkChanges).toContainEqual({
-				changeType: "create-product-perk",
-				key: "new-product:perk-2",
-				payload: { perkSlug: "perk-2", productSlug: "new-product" },
-			});
-		});
-
-		it("generates create-payment-provider-product for each provider on new product", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "new-product",
-						name: "New Product",
-						perks: [],
-						providers: [
-							createProviderConfig("appleAppStore", {
-								productId: "com.app.monthly",
-							}),
-							createProviderConfig("googlePlay", {
-								productId: "monthly_subscription",
-							}),
-						],
-					}),
-				],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const providerChanges = changeset.changes.filter(
-				(c) => c.changeType === "create-payment-provider-product",
-			);
-			expect(providerChanges).toHaveLength(2);
-			expect(providerChanges).toContainEqual({
-				changeType: "create-payment-provider-product",
-				key: "new-product:appleAppStore",
-				payload: {
-					configuration: { productId: "com.app.monthly" },
-					productSlug: "new-product",
-					providerId: "appleAppStore",
-				},
-			});
-		});
-
-		it("generates changes in correct order: product, then perks, then providers", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "new-product",
-						name: "New Product",
-						perks: ["perk-1"],
-						providers: [
-							createProviderConfig("appleAppStore", { productId: "com.app.1" }),
-						],
-					}),
-				],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const changeTypes = changeset.changes.map((c) => c.changeType);
-			const productIndex = changeTypes.indexOf("create-product");
-			const perkIndex = changeTypes.indexOf("create-product-perk");
-			const providerIndex = changeTypes.indexOf("create-payment-provider-product");
-
-			expect(productIndex).toBeLessThan(perkIndex);
-			expect(perkIndex).toBeLessThan(providerIndex);
-		});
-	});
-
-	describe("product updates", () => {
-		it("generates update-product when name changes", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Updated Name",
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Original Name",
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const updateProductChange = changeset.changes.find(
-				(c) => c.changeType === "update-product",
-			);
-			expect(updateProductChange).toEqual({
-				changeType: "update-product",
-				key: "product-1",
-				payload: { name: "Updated Name", slug: "product-1" },
-			});
-		});
-
-		it("does not generate update-product when only perks/providers change", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						perks: ["perk-1", "perk-2"],
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						perks: ["perk-1"],
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const updateProductChange = changeset.changes.find(
-				(c) => c.changeType === "update-product",
-			);
-			expect(updateProductChange).toBeUndefined();
-		});
-
-		it("generates create-product-perk for newly added perks", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						perks: ["perk-1", "perk-2"],
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						perks: ["perk-1"],
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const createPerkChanges = changeset.changes.filter(
-				(c) => c.changeType === "create-product-perk",
-			);
-			expect(createPerkChanges).toHaveLength(1);
-			expect(createPerkChanges[0]).toEqual({
-				changeType: "create-product-perk",
-				key: "product-1:perk-2",
-				payload: { perkSlug: "perk-2", productSlug: "product-1" },
-			});
-		});
-
-		it("does not generate delete-product-perk for removed perks", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						perks: ["perk-1"],
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						perks: ["perk-1", "perk-2"],
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const deleteChanges = changeset.changes.filter(
-				(c) => c.changeType === "delete-product-perk",
-			);
-			expect(deleteChanges).toHaveLength(0);
-		});
-
-		it("generates create-payment-provider-product for new provider", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						providers: [
-							createProviderConfig("appleAppStore", { productId: "com.app.1" }),
-						],
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						providers: [],
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const createProviderChanges = changeset.changes.filter(
-				(c) => c.changeType === "create-payment-provider-product",
-			);
-			expect(createProviderChanges).toHaveLength(1);
-			expect(createProviderChanges[0]).toEqual({
-				changeType: "create-payment-provider-product",
-				key: "product-1:appleAppStore",
-				payload: {
-					configuration: { productId: "com.app.1" },
-					productSlug: "product-1",
-					providerId: "appleAppStore",
-				},
-			});
-		});
-
-		it("generates update-payment-provider-product for changed config", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						providers: [
-							createProviderConfig("appleAppStore", {
-								productId: "com.app.new",
-							}),
-						],
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						providers: [
-							createProviderConfig("appleAppStore", {
-								productId: "com.app.old",
-							}),
-						],
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const updateProviderChanges = changeset.changes.filter(
-				(c) => c.changeType === "update-payment-provider-product",
-			);
-			expect(updateProviderChanges).toHaveLength(1);
-			expect(updateProviderChanges[0]).toEqual({
-				changeType: "update-payment-provider-product",
-				key: "product-1:appleAppStore",
-				payload: {
-					configuration: { productId: "com.app.new" },
-					productSlug: "product-1",
-					providerId: "appleAppStore",
-				},
-			});
-		});
-
-		it("does not generate delete for removed providers", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						providers: [],
-					}),
-				],
-			});
-			const remote = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "product-1",
-						name: "Product",
-						providers: [
-							createProviderConfig("appleAppStore", { productId: "com.app.1" }),
-						],
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const deleteChanges = changeset.changes.filter(
-				(c) => c.changeType === "delete-payment-provider-product",
-			);
-			expect(deleteChanges).toHaveLength(0);
-		});
-	});
-
-	describe("ordering", () => {
-		it("orders: create-paywall-location before create-perk", () => {
-			const local = createTestSchema({
-				locations: [
-					createTestPaywallLocation({
-						name: "Onboarding",
-						slug: "onboarding",
-					}),
-				],
-				perks: [createTestPerk({ slug: "new-perk", name: "New" })],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const locationIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-paywall-location",
-			);
-			const perkIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-perk",
-			);
-
-			expect(locationIndex).toBeLessThan(perkIndex);
-		});
-
-		it("orders: create-perk before update-perk", () => {
-			const local = createTestSchema({
-				perks: [
-					createTestPerk({ slug: "new-perk", name: "New" }),
-					createTestPerk({ slug: "updated-perk", name: "Updated Local" }),
-				],
-			});
-			const remote = createTestSchema({
-				perks: [createTestPerk({ slug: "updated-perk", name: "Updated Remote" })],
-			});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const createIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-perk",
-			);
-			const updateIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "update-perk",
-			);
-
-			expect(createIndex).toBeLessThan(updateIndex);
-		});
-
-		it("orders: perk changes before product changes", () => {
-			const local = createTestSchema({
-				perks: [createTestPerk({ slug: "new-perk", name: "New" })],
-				products: [createTestProduct({ slug: "new-product", name: "New" })],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const perkIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-perk",
-			);
-			const productIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-product",
-			);
-
-			expect(perkIndex).toBeLessThan(productIndex);
-		});
-
-		it("orders: create-product before product-perk and provider changes", () => {
-			const local = createTestSchema({
-				products: [
-					createTestProduct({
-						slug: "new-product",
-						name: "New",
-						perks: ["perk-1"],
-						providers: [
-							createProviderConfig("appleAppStore", { productId: "com.app.1" }),
-						],
-					}),
-				],
-			});
-			const remote = createTestSchema({});
-			const diff = computeDiff(local, remote);
-
-			const changeset = buildChangeset(diff);
-
-			const productIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-product",
-			);
-			const perkIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-product-perk",
-			);
-			const providerIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-payment-provider-product",
-			);
-
-			expect(productIndex).toBeLessThan(perkIndex);
-			expect(productIndex).toBeLessThan(providerIndex);
-		});
-
-		it("orders: archive-paywall-location after creates/updates", () => {
-			const local = createTestSchema({
-				locations: [
-					createTestPaywallLocation({
-						name: "Onboarding New",
-						slug: "onboarding",
-					}),
-				],
-				perks: [createTestPerk({ slug: "new-perk", name: "New" })],
-			});
-			const remote = createTestSchema({
-				locations: [
-					createTestPaywallLocation({
-						name: "Legacy",
-						slug: "legacy",
-					}),
-					createTestPaywallLocation({
-						description: "Old",
-						name: "Onboarding Old",
-						slug: "onboarding",
-					}),
-				],
-			});
-			const diff = computeDiff(local, remote);
-			const changeset = buildChangeset(diff);
-
-			const createLocationIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "create-paywall-location",
-			);
-			const updateLocationIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "update-paywall-location",
-			);
-			const archiveLocationIndex = changeset.changes.findIndex(
-				(c) => c.changeType === "archive-paywall-location",
-			);
-
-			expect(createLocationIndex).toBe(-1);
-			expect(updateLocationIndex).toBeGreaterThan(-1);
-			expect(archiveLocationIndex).toBeGreaterThan(updateLocationIndex);
-		});
-	});
-});
-
-describe("formatChange", () => {
-	it("formats paywall location changes correctly", () => {
-		expect(
-			formatChange({
-				changeType: "create-paywall-location",
-				key: "onboarding",
-				payload: {
-					description: "Shown after onboarding",
-					name: "Onboarding",
-					slug: "onboarding",
-				},
-			}),
-		).toBe('+ Create paywall location: onboarding ("Onboarding")');
-
-		expect(
-			formatChange({
-				changeType: "update-paywall-location",
-				key: "onboarding",
-				payload: {
-					description: null,
-					name: "Onboarding Updated",
-					slug: "onboarding",
-				},
-			}),
-		).toBe('~ Update paywall location: onboarding ("Onboarding Updated")');
-
-		expect(
-			formatChange({
-				changeType: "archive-paywall-location",
-				key: "onboarding",
-				payload: { slug: "onboarding" },
-			}),
-		).toBe("- Archive paywall location: onboarding");
-	});
-
-	it("formats create-perk correctly", () => {
-		const result = formatChange({
-			changeType: "create-perk",
-			key: "all-access",
-			payload: { name: "All Access", slug: "all-access" },
-		});
-		expect(result).toBe('+ Create perk: all-access ("All Access")');
-	});
-
-	it("formats update-perk correctly", () => {
-		const result = formatChange({
-			changeType: "update-perk",
-			key: "all-access",
-			payload: { name: "All Access Updated", slug: "all-access" },
-		});
-		expect(result).toBe('~ Update perk: all-access ("All Access Updated")');
-	});
-
-	it("formats create-product correctly", () => {
-		const result = formatChange({
-			changeType: "create-product",
-			key: "monthly",
-			payload: { name: "Monthly Plan", slug: "monthly" },
-		});
-		expect(result).toBe('+ Create product: monthly ("Monthly Plan")');
-	});
-
-	it("formats update-product correctly", () => {
-		const result = formatChange({
-			changeType: "update-product",
-			key: "monthly",
-			payload: { name: "Monthly Plan Updated", slug: "monthly" },
-		});
-		expect(result).toBe('~ Update product: monthly ("Monthly Plan Updated")');
-	});
-
-	it("formats create-product-perk correctly", () => {
-		const result = formatChange({
-			changeType: "create-product-perk",
-			key: "monthly:all-access",
-			payload: { perkSlug: "all-access", productSlug: "monthly" },
-		});
-		expect(result).toBe('+ Link perk "all-access" to product "monthly"');
-	});
-
-	it("formats delete-product-perk correctly", () => {
-		const result = formatChange({
-			changeType: "delete-product-perk",
-			key: "monthly:all-access",
-			payload: { perkSlug: "all-access", productSlug: "monthly" },
-		});
-		expect(result).toBe('- Unlink perk "all-access" from product "monthly"');
-	});
-
-	it("formats create-payment-provider-product correctly", () => {
-		const result = formatChange({
-			changeType: "create-payment-provider-product",
-			key: "monthly:appleAppStore",
-			payload: {
-				configuration: { productId: "com.app.monthly" },
-				productSlug: "monthly",
-				providerId: "appleAppStore",
-			},
-		});
-		expect(result).toBe('+ Configure appleAppStore for product "monthly"');
-	});
-
-	it("formats update-payment-provider-product correctly", () => {
-		const result = formatChange({
-			changeType: "update-payment-provider-product",
-			key: "monthly:appleAppStore",
-			payload: {
-				configuration: { productId: "com.app.monthly.v2" },
-				productSlug: "monthly",
-				providerId: "appleAppStore",
-			},
-		});
-		expect(result).toBe('~ Update appleAppStore config for product "monthly"');
-	});
-
-	it("formats delete-payment-provider-product correctly", () => {
-		const result = formatChange({
-			changeType: "delete-payment-provider-product",
-			key: "monthly:appleAppStore",
-			payload: {
-				productSlug: "monthly",
-				providerId: "appleAppStore",
-			},
-		});
-		expect(result).toBe('- Remove appleAppStore config from product "monthly"');
-	});
-
-	it("formats delete-perk correctly", () => {
-		const result = formatChange({
-			changeType: "delete-perk",
-			key: "all-access",
-			payload: { slug: "all-access" },
-		});
-		expect(result).toBe("- Delete perk: all-access");
-	});
-
-	it("formats delete-product correctly", () => {
-		const result = formatChange({
-			changeType: "delete-product",
-			key: "monthly",
-			payload: { slug: "monthly" },
-		});
-		expect(result).toBe("- Delete product: monthly");
-	});
-
-	it("returns fallback for unknown change type", () => {
-		const result = formatChange({
-			changeType: "unknown-type" as never,
-			key: "test",
-			payload: {},
-		} as never);
-		expect(result).toBe("? Unknown change type");
-	});
-});
-
-describe("formatChangeShort", () => {
-	it("formats paywall location changes correctly", () => {
-		expect(
-			formatChangeShort({
-				changeType: "create-paywall-location",
-				key: "onboarding",
-				payload: {
-					description: "Shown after onboarding",
-					name: "Onboarding",
-					slug: "onboarding",
-				},
-			}),
-		).toBe("PaywallLocation: onboarding");
-
-		expect(
-			formatChangeShort({
-				changeType: "update-paywall-location",
-				key: "onboarding",
-				payload: {
-					description: null,
-					name: "Onboarding Updated",
-					slug: "onboarding",
-				},
-			}),
-		).toBe("PaywallLocation: onboarding");
-
-		expect(
-			formatChangeShort({
-				changeType: "archive-paywall-location",
-				key: "onboarding",
-				payload: { slug: "onboarding" },
-			}),
-		).toBe("PaywallLocation: onboarding");
-	});
-
-	it("formats perk changes correctly", () => {
-		expect(
-			formatChangeShort({
-				changeType: "create-perk",
-				key: "all-access",
-				payload: { name: "All Access", slug: "all-access" },
-			}),
-		).toBe("Perk: all-access");
-
-		expect(
-			formatChangeShort({
-				changeType: "update-perk",
-				key: "all-access",
-				payload: { name: "All Access", slug: "all-access" },
-			}),
-		).toBe("Perk: all-access");
-
-		expect(
-			formatChangeShort({
-				changeType: "delete-perk",
-				key: "all-access",
-				payload: { slug: "all-access" },
-			}),
-		).toBe("Perk: all-access");
-	});
-
-	it("formats product changes correctly", () => {
-		expect(
-			formatChangeShort({
-				changeType: "create-product",
-				key: "monthly",
-				payload: { name: "Monthly", slug: "monthly" },
-			}),
-		).toBe("Product: monthly");
-
-		expect(
-			formatChangeShort({
-				changeType: "update-product",
-				key: "monthly",
-				payload: { name: "Monthly", slug: "monthly" },
-			}),
-		).toBe("Product: monthly");
-
-		expect(
-			formatChangeShort({
-				changeType: "delete-product",
-				key: "monthly",
-				payload: { slug: "monthly" },
-			}),
-		).toBe("Product: monthly");
-	});
-
-	it("formats product-perk changes correctly", () => {
-		expect(
-			formatChangeShort({
-				changeType: "create-product-perk",
-				key: "monthly:all-access",
-				payload: { perkSlug: "all-access", productSlug: "monthly" },
-			}),
-		).toBe("ProductPerk: monthly:all-access");
-
-		expect(
-			formatChangeShort({
-				changeType: "delete-product-perk",
-				key: "monthly:all-access",
-				payload: { perkSlug: "all-access", productSlug: "monthly" },
-			}),
-		).toBe("ProductPerk: monthly:all-access");
-	});
-
-	it("formats provider-product changes correctly", () => {
-		expect(
-			formatChangeShort({
-				changeType: "create-payment-provider-product",
-				key: "monthly:appleAppStore",
-				payload: {
-					configuration: {},
-					productSlug: "monthly",
-					providerId: "appleAppStore",
-				},
-			}),
-		).toBe("ProviderProduct: monthly:appleAppStore");
-
-		expect(
-			formatChangeShort({
-				changeType: "update-payment-provider-product",
-				key: "monthly:appleAppStore",
-				payload: {
-					configuration: {},
-					productSlug: "monthly",
-					providerId: "appleAppStore",
-				},
-			}),
-		).toBe("ProviderProduct: monthly:appleAppStore");
-
-		expect(
-			formatChangeShort({
-				changeType: "delete-payment-provider-product",
-				key: "monthly:appleAppStore",
-				payload: {
-					productSlug: "monthly",
-					providerId: "appleAppStore",
-				},
-			}),
-		).toBe("ProviderProduct: monthly:appleAppStore");
-	});
-
-	it("returns Unknown for unknown change type", () => {
-		const result = formatChangeShort({
-			changeType: "unknown-type" as never,
-			key: "test",
-			payload: {},
-		} as never);
-		expect(result).toBe("Unknown");
-	});
-});
diff --git a/apps/cli/tests/utils/schema/diff.test.ts b/apps/cli/tests/utils/schema/diff.test.ts
deleted file mode 100644
index fbeb170d2..000000000
--- a/apps/cli/tests/utils/schema/diff.test.ts
+++ /dev/null
@@ -1,648 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { computeDiff, summarizeDiff } from "../../../src/utils/schema/diff";
-import {
-	createProviderConfig,
-	createTestPaywallLocation,
-	createTestPerk,
-	createTestProduct,
-	createTestSchema,
-} from "../../helpers/schema-factories";
-
-describe("computeDiff", () => {
-	describe("locations", () => {
-		it("returns empty diff for identical locations", () => {
-			const location = createTestPaywallLocation({
-				slug: "onboarding",
-				name: "Onboarding",
-			});
-			const local = createTestSchema({ locations: [location] });
-			const remote = createTestSchema({ locations: [location] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.locations.toCreate).toHaveLength(0);
-			expect(diff.locations.toUpdate).toHaveLength(0);
-			expect(diff.locations.remoteOnly).toHaveLength(0);
-			expect(diff.locations.toArchive).toHaveLength(0);
-		});
-
-		it("identifies locations to create (local only)", () => {
-			const localLocation = createTestPaywallLocation({
-				slug: "onboarding",
-				name: "Onboarding",
-			});
-			const local = createTestSchema({ locations: [localLocation] });
-			const remote = createTestSchema({ locations: [] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.locations.toCreate).toHaveLength(1);
-			expect(diff.locations.toCreate[0]).toEqual(localLocation);
-			expect(diff.locations.toUpdate).toHaveLength(0);
-			expect(diff.locations.remoteOnly).toHaveLength(0);
-			expect(diff.locations.toArchive).toHaveLength(0);
-		});
-
-		it("identifies locations to update (same slug, different metadata)", () => {
-			const localLocation = createTestPaywallLocation({
-				description: null,
-				slug: "onboarding",
-				name: "Onboarding New",
-			});
-			const remoteLocation = createTestPaywallLocation({
-				description: "Shown after launch",
-				slug: "onboarding",
-				name: "Onboarding Old",
-			});
-			const local = createTestSchema({ locations: [localLocation] });
-			const remote = createTestSchema({ locations: [remoteLocation] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.locations.toCreate).toHaveLength(0);
-			expect(diff.locations.toUpdate).toHaveLength(1);
-			expect(diff.locations.toUpdate[0]).toEqual({
-				local: localLocation,
-				remote: remoteLocation,
-			});
-		});
-
-		it("identifies remote-only locations to archive", () => {
-			const remoteLocation = createTestPaywallLocation({
-				slug: "onboarding",
-				name: "Onboarding",
-			});
-			const local = createTestSchema({ locations: [] });
-			const remote = createTestSchema({ locations: [remoteLocation] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.locations.remoteOnly).toHaveLength(1);
-			expect(diff.locations.toArchive).toHaveLength(1);
-			expect(diff.locations.toArchive[0]).toEqual(remoteLocation);
-		});
-	});
-
-	describe("perks", () => {
-		it("returns empty diff for identical schemas", () => {
-			const perk = createTestPerk({ slug: "perk-1", name: "Perk 1" });
-			const local = createTestSchema({ perks: [perk] });
-			const remote = createTestSchema({ perks: [perk] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(0);
-			expect(diff.perks.toUpdate).toHaveLength(0);
-			expect(diff.perks.remoteOnly).toHaveLength(0);
-		});
-
-		it("identifies perks to create (local only)", () => {
-			const localPerk = createTestPerk({ slug: "local-perk", name: "Local" });
-			const local = createTestSchema({ perks: [localPerk] });
-			const remote = createTestSchema({ perks: [] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(1);
-			expect(diff.perks.toCreate[0]).toEqual(localPerk);
-			expect(diff.perks.toUpdate).toHaveLength(0);
-			expect(diff.perks.remoteOnly).toHaveLength(0);
-		});
-
-		it("identifies remote-only perks", () => {
-			const remotePerk = createTestPerk({
-				slug: "remote-perk",
-				name: "Remote",
-			});
-			const local = createTestSchema({ perks: [] });
-			const remote = createTestSchema({ perks: [remotePerk] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(0);
-			expect(diff.perks.toUpdate).toHaveLength(0);
-			expect(diff.perks.remoteOnly).toHaveLength(1);
-			expect(diff.perks.remoteOnly[0]).toEqual(remotePerk);
-		});
-
-		it("identifies perks to update (same slug, different name)", () => {
-			const localPerk = createTestPerk({ slug: "perk-1", name: "Updated Name" });
-			const remotePerk = createTestPerk({
-				slug: "perk-1",
-				name: "Original Name",
-			});
-			const local = createTestSchema({ perks: [localPerk] });
-			const remote = createTestSchema({ perks: [remotePerk] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(0);
-			expect(diff.perks.toUpdate).toHaveLength(1);
-			expect(diff.perks.toUpdate[0]).toEqual({
-				local: localPerk,
-				remote: remotePerk,
-			});
-			expect(diff.perks.remoteOnly).toHaveLength(0);
-		});
-
-		it("handles multiple perks correctly", () => {
-			const sharedPerk = createTestPerk({ slug: "shared", name: "Shared" });
-			const localOnlyPerk = createTestPerk({
-				slug: "local-only",
-				name: "Local Only",
-			});
-			const remoteOnlyPerk = createTestPerk({
-				slug: "remote-only",
-				name: "Remote Only",
-			});
-			const localUpdatedPerk = createTestPerk({
-				slug: "updated",
-				name: "Updated Local",
-			});
-			const remoteUpdatedPerk = createTestPerk({
-				slug: "updated",
-				name: "Updated Remote",
-			});
-
-			const local = createTestSchema({
-				perks: [sharedPerk, localOnlyPerk, localUpdatedPerk],
-			});
-			const remote = createTestSchema({
-				perks: [sharedPerk, remoteOnlyPerk, remoteUpdatedPerk],
-			});
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(1);
-			expect(diff.perks.toCreate[0]?.slug).toBe("local-only");
-			expect(diff.perks.toUpdate).toHaveLength(1);
-			expect(diff.perks.toUpdate[0]?.local.slug).toBe("updated");
-			expect(diff.perks.remoteOnly).toHaveLength(1);
-			expect(diff.perks.remoteOnly[0]?.slug).toBe("remote-only");
-		});
-	});
-
-	describe("products", () => {
-		it("identifies products to create (local only)", () => {
-			const localProduct = createTestProduct({
-				slug: "local-product",
-				name: "Local",
-			});
-			const local = createTestSchema({ products: [localProduct] });
-			const remote = createTestSchema({ products: [] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toCreate).toHaveLength(1);
-			expect(diff.products.toCreate[0]).toEqual(localProduct);
-			expect(diff.products.toUpdate).toHaveLength(0);
-			expect(diff.products.remoteOnly).toHaveLength(0);
-		});
-
-		it("identifies remote-only products", () => {
-			const remoteProduct = createTestProduct({
-				slug: "remote-product",
-				name: "Remote",
-			});
-			const local = createTestSchema({ products: [] });
-			const remote = createTestSchema({ products: [remoteProduct] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toCreate).toHaveLength(0);
-			expect(diff.products.toUpdate).toHaveLength(0);
-			expect(diff.products.remoteOnly).toHaveLength(1);
-			expect(diff.products.remoteOnly[0]).toEqual(remoteProduct);
-		});
-
-		it("identifies products to update when name differs", () => {
-			const localProduct = createTestProduct({
-				slug: "product-1",
-				name: "Updated Name",
-			});
-			const remoteProduct = createTestProduct({
-				slug: "product-1",
-				name: "Original Name",
-			});
-			const local = createTestSchema({ products: [localProduct] });
-			const remote = createTestSchema({ products: [remoteProduct] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toCreate).toHaveLength(0);
-			expect(diff.products.toUpdate).toHaveLength(1);
-			expect(diff.products.toUpdate[0]).toEqual({
-				local: localProduct,
-				remote: remoteProduct,
-			});
-		});
-
-		it("identifies products to update when perks differ", () => {
-			const localProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				perks: ["perk-1", "perk-2"],
-			});
-			const remoteProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				perks: ["perk-1"],
-			});
-			const local = createTestSchema({ products: [localProduct] });
-			const remote = createTestSchema({ products: [remoteProduct] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toUpdate).toHaveLength(1);
-			expect(diff.products.toUpdate[0]?.local.perks).toEqual([
-				"perk-1",
-				"perk-2",
-			]);
-			expect(diff.products.toUpdate[0]?.remote.perks).toEqual(["perk-1"]);
-		});
-
-		it("identifies products to update when providers differ", () => {
-			const localProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				providers: [
-					createProviderConfig("appleAppStore", { productId: "com.app.1" }),
-				],
-			});
-			const remoteProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				providers: [],
-			});
-			const local = createTestSchema({ products: [localProduct] });
-			const remote = createTestSchema({ products: [remoteProduct] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toUpdate).toHaveLength(1);
-		});
-
-		it("identifies products to update when provider config differs", () => {
-			const localProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				providers: [
-					createProviderConfig("appleAppStore", { productId: "com.app.new" }),
-				],
-			});
-			const remoteProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				providers: [
-					createProviderConfig("appleAppStore", { productId: "com.app.old" }),
-				],
-			});
-			const local = createTestSchema({ products: [localProduct] });
-			const remote = createTestSchema({ products: [remoteProduct] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toUpdate).toHaveLength(1);
-		});
-
-		it("handles products with no perks", () => {
-			const product = createTestProduct({
-				slug: "no-perks",
-				name: "No Perks",
-				perks: [],
-			});
-			const local = createTestSchema({ products: [product] });
-			const remote = createTestSchema({ products: [product] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toCreate).toHaveLength(0);
-			expect(diff.products.toUpdate).toHaveLength(0);
-		});
-
-		it("handles products with no providers", () => {
-			const product = createTestProduct({
-				slug: "no-providers",
-				name: "No Providers",
-				providers: [],
-			});
-			const local = createTestSchema({ products: [product] });
-			const remote = createTestSchema({ products: [product] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toCreate).toHaveLength(0);
-			expect(diff.products.toUpdate).toHaveLength(0);
-		});
-
-		it("treats products with same perks in different order as equal", () => {
-			const localProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				perks: ["perk-1", "perk-2"],
-			});
-			const remoteProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				perks: ["perk-2", "perk-1"],
-			});
-			const local = createTestSchema({ products: [localProduct] });
-			const remote = createTestSchema({ products: [remoteProduct] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toUpdate).toHaveLength(0);
-		});
-
-		it("treats products with same providers in different order as equal", () => {
-			const localProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				providers: [
-					createProviderConfig("googlePlay", { productId: "google.1" }),
-					createProviderConfig("appleAppStore", { productId: "apple.1" }),
-				],
-			});
-			const remoteProduct = createTestProduct({
-				slug: "product-1",
-				name: "Product",
-				providers: [
-					createProviderConfig("appleAppStore", { productId: "apple.1" }),
-					createProviderConfig("googlePlay", { productId: "google.1" }),
-				],
-			});
-			const local = createTestSchema({ products: [localProduct] });
-			const remote = createTestSchema({ products: [remoteProduct] });
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.products.toUpdate).toHaveLength(0);
-		});
-	});
-
-	describe("complex scenarios", () => {
-		it("handles mixed creates, updates, and remote-only items", () => {
-			const sharedPerk = createTestPerk({ slug: "shared", name: "Shared" });
-			const localPerk = createTestPerk({
-				slug: "local-perk",
-				name: "Local Perk",
-			});
-			const remotePerk = createTestPerk({
-				slug: "remote-perk",
-				name: "Remote Perk",
-			});
-
-			const sharedProduct = createTestProduct({
-				slug: "shared-product",
-				name: "Shared",
-			});
-			const localProduct = createTestProduct({
-				slug: "local-product",
-				name: "Local",
-			});
-			const localUpdatedProduct = createTestProduct({
-				slug: "updated-product",
-				name: "Updated Local",
-			});
-			const remoteProduct = createTestProduct({
-				slug: "remote-product",
-				name: "Remote",
-			});
-			const remoteUpdatedProduct = createTestProduct({
-				slug: "updated-product",
-				name: "Updated Remote",
-			});
-
-			const local = createTestSchema({
-				perks: [sharedPerk, localPerk],
-				products: [sharedProduct, localProduct, localUpdatedProduct],
-			});
-			const remote = createTestSchema({
-				perks: [sharedPerk, remotePerk],
-				products: [sharedProduct, remoteProduct, remoteUpdatedProduct],
-			});
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(1);
-			expect(diff.perks.remoteOnly).toHaveLength(1);
-			expect(diff.products.toCreate).toHaveLength(1);
-			expect(diff.products.toUpdate).toHaveLength(1);
-			expect(diff.products.remoteOnly).toHaveLength(1);
-		});
-
-		it("handles empty local schema against populated remote", () => {
-			const remotePerk = createTestPerk({
-				slug: "remote-perk",
-				name: "Remote",
-			});
-			const remoteProduct = createTestProduct({
-				slug: "remote-product",
-				name: "Remote",
-			});
-
-			const local = createTestSchema({});
-			const remote = createTestSchema({
-				perks: [remotePerk],
-				products: [remoteProduct],
-			});
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(0);
-			expect(diff.perks.remoteOnly).toHaveLength(1);
-			expect(diff.products.toCreate).toHaveLength(0);
-			expect(diff.products.remoteOnly).toHaveLength(1);
-		});
-
-		it("handles populated local schema against empty remote", () => {
-			const localPerk = createTestPerk({ slug: "local-perk", name: "Local" });
-			const localProduct = createTestProduct({
-				slug: "local-product",
-				name: "Local",
-			});
-
-			const local = createTestSchema({
-				perks: [localPerk],
-				products: [localProduct],
-			});
-			const remote = createTestSchema({});
-
-			const diff = computeDiff(local, remote);
-
-			expect(diff.perks.toCreate).toHaveLength(1);
-			expect(diff.perks.remoteOnly).toHaveLength(0);
-			expect(diff.products.toCreate).toHaveLength(1);
-			expect(diff.products.remoteOnly).toHaveLength(0);
-		});
-	});
-});
-
-describe("summarizeDiff", () => {
-	it("returns zeros for empty diff", () => {
-		const local = createTestSchema({});
-		const remote = createTestSchema({});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		expect(summary.perksToCreate).toBe(0);
-		expect(summary.locationsToCreate).toBe(0);
-		expect(summary.locationsToUpdate).toBe(0);
-		expect(summary.locationsToArchive).toBe(0);
-		expect(summary.locationsRemoteOnly).toBe(0);
-		expect(summary.perksToUpdate).toBe(0);
-		expect(summary.perksRemoteOnly).toBe(0);
-		expect(summary.productsToCreate).toBe(0);
-		expect(summary.productsToUpdate).toBe(0);
-		expect(summary.productsRemoteOnly).toBe(0);
-		expect(summary.totalChanges).toBe(0);
-	});
-
-	it("correctly counts perks to create", () => {
-		const local = createTestSchema({
-			perks: [
-				createTestPerk({ slug: "perk-1", name: "Perk 1" }),
-				createTestPerk({ slug: "perk-2", name: "Perk 2" }),
-			],
-		});
-		const remote = createTestSchema({});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		expect(summary.perksToCreate).toBe(2);
-	});
-
-	it("correctly counts perks to update", () => {
-		const local = createTestSchema({
-			perks: [createTestPerk({ slug: "perk-1", name: "Updated" })],
-		});
-		const remote = createTestSchema({
-			perks: [createTestPerk({ slug: "perk-1", name: "Original" })],
-		});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		expect(summary.perksToUpdate).toBe(1);
-	});
-
-	it("correctly counts remote-only perks", () => {
-		const local = createTestSchema({});
-		const remote = createTestSchema({
-			perks: [
-				createTestPerk({ slug: "perk-1", name: "Perk 1" }),
-				createTestPerk({ slug: "perk-2", name: "Perk 2" }),
-				createTestPerk({ slug: "perk-3", name: "Perk 3" }),
-			],
-		});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		expect(summary.perksRemoteOnly).toBe(3);
-	});
-
-	it("correctly counts products to create", () => {
-		const local = createTestSchema({
-			products: [createTestProduct({ slug: "product-1", name: "Product 1" })],
-		});
-		const remote = createTestSchema({});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		expect(summary.productsToCreate).toBe(1);
-	});
-
-	it("correctly counts products to update", () => {
-		const local = createTestSchema({
-			products: [createTestProduct({ slug: "product-1", name: "Updated" })],
-		});
-		const remote = createTestSchema({
-			products: [createTestProduct({ slug: "product-1", name: "Original" })],
-		});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		expect(summary.productsToUpdate).toBe(1);
-	});
-
-	it("correctly counts remote-only products", () => {
-		const local = createTestSchema({});
-		const remote = createTestSchema({
-			products: [
-				createTestProduct({ slug: "product-1", name: "Product 1" }),
-				createTestProduct({ slug: "product-2", name: "Product 2" }),
-			],
-		});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		expect(summary.productsRemoteOnly).toBe(2);
-	});
-
-	it("totalChanges includes location archive actions derived from remote-only locations", () => {
-		const local = createTestSchema({
-			locations: [
-				createTestPaywallLocation({
-					description: null,
-					slug: "new-location",
-					name: "New Location",
-				}),
-				createTestPaywallLocation({
-					description: null,
-					slug: "updated-location",
-					name: "Updated Local",
-				}),
-			],
-			perks: [
-				createTestPerk({ slug: "new-perk", name: "New" }),
-				createTestPerk({ slug: "updated-perk", name: "Updated Local" }),
-			],
-			products: [
-				createTestProduct({ slug: "new-product", name: "New" }),
-				createTestProduct({ slug: "updated-product", name: "Updated Local" }),
-			],
-		});
-		const remote = createTestSchema({
-			locations: [
-				createTestPaywallLocation({
-					description: "Old description",
-					slug: "updated-location",
-					name: "Updated Remote",
-				}),
-				createTestPaywallLocation({
-					slug: "remote-only-location",
-					name: "Remote Only",
-				}),
-			],
-			perks: [
-				createTestPerk({ slug: "updated-perk", name: "Updated Remote" }),
-				createTestPerk({ slug: "remote-only-perk", name: "Remote Only" }),
-			],
-			products: [
-				createTestProduct({ slug: "updated-product", name: "Updated Remote" }),
-				createTestProduct({
-					slug: "remote-only-product",
-					name: "Remote Only",
-				}),
-			],
-		});
-		const diff = computeDiff(local, remote);
-
-		const summary = summarizeDiff(diff);
-
-		// 1 location to create + 1 location to update + 1 location to archive +
-		// 1 perk to create + 1 perk to update + 1 product to create + 1 product to update = 7
-		expect(summary.totalChanges).toBe(7);
-		expect(summary.locationsRemoteOnly).toBe(1);
-		expect(summary.locationsToArchive).toBe(1);
-		expect(summary.perksRemoteOnly).toBe(1);
-		expect(summary.productsRemoteOnly).toBe(1);
-	});
-});
diff --git a/apps/cli/tests/utils/schema/local-schema-loader.test.ts b/apps/cli/tests/utils/schema/local-schema-loader.test.ts
deleted file mode 100644
index 3246263a7..000000000
--- a/apps/cli/tests/utils/schema/local-schema-loader.test.ts
+++ /dev/null
@@ -1,433 +0,0 @@
-import { NodeFileSystem, NodePath } from "@effect/platform-node";
-import { Effect, Exit, Layer } from "effect";
-import path from "node:path";
-import { describe, expect, it } from "vitest";
-
-import {
-	extractPerkSlugs,
-	extractProviderConfigs,
-	isPaywallLocationDefinition,
-	isPerkDefinition,
-	isProductDefinition,
-	isSchemaConfiguration,
-	loadLocalSchema,
-	SCHEMA_KIND,
-	SchemaKind,
-	slugToCamelCase,
-} from "../../../src/utils/schema/local-schema-loader";
-
-// Create a minimal layer for testing that only includes what we need
-const TestLayer = Layer.mergeAll(NodeFileSystem.layer, NodePath.layer);
-
-describe("slugToCamelCase", () => {
-	it("converts hyphenated slug", () => {
-		expect(slugToCamelCase("all-access")).toBe("allAccess");
-	});
-
-	it("converts underscored slug", () => {
-		expect(slugToCamelCase("monthly_sub")).toBe("monthlySub");
-	});
-
-	it("handles simple slug", () => {
-		expect(slugToCamelCase("simple")).toBe("simple");
-	});
-
-	it("handles multi-part slug", () => {
-		expect(slugToCamelCase("multi-part-slug")).toBe("multiPartSlug");
-	});
-
-	it("handles uppercase", () => {
-		expect(slugToCamelCase("UPPER_CASE")).toBe("upperCase");
-	});
-
-	it("handles mixed separators", () => {
-		expect(slugToCamelCase("foo-bar_baz")).toBe("fooBarBaz");
-	});
-
-	it("handles empty string", () => {
-		expect(slugToCamelCase("")).toBe("");
-	});
-});
-
-describe("extractPerkSlugs", () => {
-	it("returns empty array for undefined config", () => {
-		const allPerks = new Map<string, { slug: string; name: string }>();
-		expect(extractPerkSlugs(undefined, allPerks)).toEqual([]);
-	});
-
-	it("returns empty array for empty config", () => {
-		const allPerks = new Map<string, { slug: string; name: string }>();
-		expect(extractPerkSlugs({}, allPerks)).toEqual([]);
-	});
-
-	it("extracts enabled perks (value=true)", () => {
-		const allPerks = new Map<string, { slug: string; name: string }>([
-			["all-access", { slug: "all-access", name: "All Access" }],
-			["premium", { slug: "premium", name: "Premium" }],
-		]);
-		const config = { allAccess: true, premium: false };
-
-		const result = extractPerkSlugs(config, allPerks);
-
-		expect(result).toEqual(["all-access"]);
-	});
-
-	it("skips metadata key '_'", () => {
-		const allPerks = new Map<string, { slug: string; name: string }>([
-			["all-access", { slug: "all-access", name: "All Access" }],
-		]);
-		const config = {
-			_: { perks: {} } as unknown as boolean,
-			allAccess: true,
-		};
-
-		const result = extractPerkSlugs(config, allPerks);
-
-		expect(result).toEqual(["all-access"]);
-	});
-
-	it("correctly maps camelCase keys to slugs via allPerks map", () => {
-		const allPerks = new Map<string, { slug: string; name: string }>([
-			["premium-features", { slug: "premium-features", name: "Premium" }],
-			["all-access", { slug: "all-access", name: "All Access" }],
-		]);
-		const config = { premiumFeatures: true, allAccess: true };
-
-		const result = extractPerkSlugs(config, allPerks);
-
-		expect(result).toContain("premium-features");
-		expect(result).toContain("all-access");
-	});
-
-	it("ignores perks not in allPerks map", () => {
-		const allPerks = new Map<string, { slug: string; name: string }>([
-			["existing-perk", { slug: "existing-perk", name: "Existing" }],
-		]);
-		const config = { nonExistentPerk: true };
-
-		const result = extractPerkSlugs(config, allPerks);
-
-		expect(result).toEqual([]);
-	});
-});
-
-describe("extractProviderConfigs", () => {
-	it("returns empty array for undefined config", () => {
-		expect(extractProviderConfigs(undefined)).toEqual([]);
-	});
-
-	it("returns empty array for empty config", () => {
-		expect(extractProviderConfigs({})).toEqual([]);
-	});
-
-	it("extracts appleAppStore provider", () => {
-		const config = {
-			appleAppStore: { productId: "com.app.monthly" },
-		};
-
-		const result = extractProviderConfigs(config);
-
-		expect(result).toHaveLength(1);
-		expect(result[0]).toEqual({
-			providerId: "appleAppStore",
-			configuration: { productId: "com.app.monthly" },
-		});
-	});
-
-	it("extracts googlePlay provider", () => {
-		const config = {
-			googlePlay: { productId: "monthly_subscription" },
-		};
-
-		const result = extractProviderConfigs(config);
-
-		expect(result).toHaveLength(1);
-		expect(result[0]).toEqual({
-			providerId: "googlePlay",
-			configuration: { productId: "monthly_subscription" },
-		});
-	});
-
-	it("ignores unknown provider IDs", () => {
-		const config = {
-			unknownProvider: { productId: "test" },
-			appleAppStore: { productId: "com.app.1" },
-		};
-
-		const result = extractProviderConfigs(config);
-
-		expect(result).toHaveLength(1);
-		expect(result[0]?.providerId).toBe("appleAppStore");
-	});
-
-	it("skips metadata key '_'", () => {
-		const config = {
-			_: { paymentProviders: {} },
-			appleAppStore: { productId: "com.app.1" },
-		};
-
-		const result = extractProviderConfigs(config);
-
-		expect(result).toHaveLength(1);
-		expect(result[0]?.providerId).toBe("appleAppStore");
-	});
-
-	it("ignores null/undefined config values", () => {
-		const config = {
-			appleAppStore: null,
-			googlePlay: undefined,
-		};
-
-		const result = extractProviderConfigs(config as Record<string, unknown>);
-
-		expect(result).toEqual([]);
-	});
-
-	it("extracts configuration object correctly", () => {
-		const config = {
-			appleAppStore: { productId: "com.app.1", groupId: "group123" },
-		};
-
-		const result = extractProviderConfigs(config);
-
-		expect(result[0]?.configuration).toEqual({
-			productId: "com.app.1",
-			groupId: "group123",
-		});
-	});
-});
-
-describe("type guards", () => {
-	describe("isSchemaConfiguration", () => {
-		it("returns true for object with correct symbol", () => {
-			const obj = {
-				[SCHEMA_KIND]: SchemaKind.SchemaConfiguration,
-				perks: {},
-				providers: {},
-				location: () => {},
-				subscription: () => {},
-			};
-			expect(isSchemaConfiguration(obj)).toBe(true);
-		});
-
-		it("returns false for null", () => {
-			expect(isSchemaConfiguration(null)).toBe(false);
-		});
-
-		it("returns false for non-object", () => {
-			expect(isSchemaConfiguration("string")).toBe(false);
-			expect(isSchemaConfiguration(123)).toBe(false);
-			expect(isSchemaConfiguration(undefined)).toBe(false);
-		});
-
-		it("returns false for object without symbol", () => {
-			const obj = {
-				perks: {},
-				providers: {},
-				location: () => {},
-				subscription: () => {},
-			};
-			expect(isSchemaConfiguration(obj)).toBe(false);
-		});
-
-		it("returns false for object with wrong symbol value", () => {
-			const obj = {
-				[SCHEMA_KIND]: SchemaKind.Perk,
-				perks: {},
-				providers: {},
-				location: () => {},
-				subscription: () => {},
-			};
-			expect(isSchemaConfiguration(obj)).toBe(false);
-		});
-	});
-
-	describe("isPaywallLocationDefinition", () => {
-		it("returns true for object with correct symbol", () => {
-			const obj = {
-				[SCHEMA_KIND]: SchemaKind.PaywallLocation,
-				description: "Shown after onboarding",
-				name: "Onboarding",
-				slug: "onboarding",
-			};
-			expect(isPaywallLocationDefinition(obj)).toBe(true);
-		});
-
-		it("returns false for null", () => {
-			expect(isPaywallLocationDefinition(null)).toBe(false);
-		});
-
-		it("returns false for non-object", () => {
-			expect(isPaywallLocationDefinition("string")).toBe(false);
-		});
-
-		it("returns false for object without symbol", () => {
-			const obj = { name: "Onboarding", slug: "onboarding" };
-			expect(isPaywallLocationDefinition(obj)).toBe(false);
-		});
-	});
-
-	describe("isPerkDefinition", () => {
-		it("returns true for object with correct symbol", () => {
-			const obj = {
-				[SCHEMA_KIND]: SchemaKind.Perk,
-				slug: "test-perk",
-				name: "Test Perk",
-			};
-			expect(isPerkDefinition(obj)).toBe(true);
-		});
-
-		it("returns false for null", () => {
-			expect(isPerkDefinition(null)).toBe(false);
-		});
-
-		it("returns false for non-object", () => {
-			expect(isPerkDefinition("string")).toBe(false);
-		});
-
-		it("returns false for object without symbol", () => {
-			const obj = { slug: "test", name: "Test" };
-			expect(isPerkDefinition(obj)).toBe(false);
-		});
-	});
-
-	describe("isProductDefinition", () => {
-		it("returns true for object with correct symbol", () => {
-			const obj = {
-				[SCHEMA_KIND]: SchemaKind.Product,
-				type: "subscription",
-				slug: "test-product",
-				properties: { name: "Test" },
-				configuration: {},
-			};
-			expect(isProductDefinition(obj)).toBe(true);
-		});
-
-		it("returns false for null", () => {
-			expect(isProductDefinition(null)).toBe(false);
-		});
-
-		it("returns false for non-object", () => {
-			expect(isProductDefinition(123)).toBe(false);
-		});
-
-		it("returns false for object without symbol", () => {
-			const obj = {
-				type: "subscription",
-				slug: "test",
-				properties: { name: "Test" },
-				configuration: {},
-			};
-			expect(isProductDefinition(obj)).toBe(false);
-		});
-	});
-});
-
-describe("loadLocalSchema", () => {
-	const fixturesPath = path.resolve(__dirname, "../../fixtures");
-
-	it(
-		"fails with LocalSchemaNotFoundError when file doesn't exist",
-		async () => {
-			await Effect.runPromise(
-				Effect.gen(function* () {
-				const result = yield* Effect.exit(
-					loadLocalSchema("/non/existent/path.ts"),
-				);
-
-				expect(Exit.isFailure(result)).toBe(true);
-				if (Exit.isFailure(result)) {
-					const error = result.cause;
-					expect(error._tag).toBe("Fail");
-				}
-				}).pipe(Effect.provide(TestLayer)),
-			);
-		},
-	);
-
-	it("extracts perks from SchemaConfiguration", async () => {
-		await Effect.runPromise(
-			Effect.gen(function* () {
-			const schemaPath = path.join(fixturesPath, "valid-schema.ts");
-			const result = yield* loadLocalSchema(schemaPath);
-
-			expect(result.perks.size).toBe(2);
-			expect(result.perks.has("all-access")).toBe(true);
-			expect(result.perks.has("premium-features")).toBe(true);
-
-			const allAccessPerk = result.perks.get("all-access");
-			expect(allAccessPerk?.name).toBe("All Access");
-			}).pipe(Effect.provide(TestLayer)),
-		);
-	});
-
-	it("extracts enabled providers from SchemaConfiguration", async () => {
-		await Effect.runPromise(
-			Effect.gen(function* () {
-			const schemaPath = path.join(fixturesPath, "valid-schema.ts");
-			const result = yield* loadLocalSchema(schemaPath);
-
-			expect(result.enabledProviders.has("appleAppStore")).toBe(true);
-			expect(result.enabledProviders.has("googlePlay")).toBe(true);
-			}).pipe(Effect.provide(TestLayer)),
-		);
-	});
-
-	it("extracts products with perks and providers", async () => {
-		await Effect.runPromise(
-			Effect.gen(function* () {
-			const schemaPath = path.join(fixturesPath, "valid-schema.ts");
-			const result = yield* loadLocalSchema(schemaPath);
-
-			expect(result.products.size).toBe(2);
-			expect(result.products.has("monthly-plan")).toBe(true);
-			expect(result.products.has("yearly-plan")).toBe(true);
-
-			const monthlyPlan = result.products.get("monthly-plan");
-			expect(monthlyPlan?.name).toBe("Monthly Plan");
-			expect(monthlyPlan?.perks).toContain("all-access");
-			expect(monthlyPlan?.providers).toHaveLength(2);
-
-			const yearlyPlan = result.products.get("yearly-plan");
-			expect(yearlyPlan?.name).toBe("Yearly Plan");
-			expect(yearlyPlan?.perks).toContain("all-access");
-			expect(yearlyPlan?.perks).toContain("premium-features");
-			}).pipe(Effect.provide(TestLayer)),
-		);
-	});
-
-	it("extracts paywall locations", async () => {
-		await Effect.runPromise(
-			Effect.gen(function* () {
-			const schemaPath = path.join(fixturesPath, "valid-schema.ts");
-			const result = yield* loadLocalSchema(schemaPath);
-
-			expect(result.locations.size).toBe(2);
-			expect(result.locations.has("onboarding-upsell")).toBe(true);
-			expect(result.locations.has("settings-paywall")).toBe(true);
-
-			const onboardingUpsell = result.locations.get("onboarding-upsell");
-			expect(onboardingUpsell?.name).toBe("Onboarding Upsell");
-			expect(onboardingUpsell?.description).toBe("Shown after onboarding");
-
-			const settingsPaywall = result.locations.get("settings-paywall");
-			expect(settingsPaywall?.name).toBe("Settings Paywall");
-			expect(settingsPaywall?.description).toBeNull();
-			}).pipe(Effect.provide(TestLayer)),
-		);
-	});
-
-	it("handles empty schema", async () => {
-		await Effect.runPromise(
-			Effect.gen(function* () {
-			const schemaPath = path.join(fixturesPath, "empty-schema.ts");
-			const result = yield* loadLocalSchema(schemaPath);
-
-			expect(result.perks.size).toBe(0);
-			expect(result.products.size).toBe(0);
-			expect(result.locations.size).toBe(0);
-			expect(result.enabledProviders.size).toBe(0);
-			}).pipe(Effect.provide(TestLayer)),
-		);
-	});
-});
diff --git a/docs/server-first-schema-server-spec.md b/docs/server-first-schema-server-spec.md
new file mode 100644
index 000000000..41c615f2a
--- /dev/null
+++ b/docs/server-first-schema-server-spec.md
@@ -0,0 +1,363 @@
+# Server-First Schema — Backend Implementation Spec
+
+Status: Draft
+Owner: Backend (consumed by CLI + React Native SDK)
+Tracks: server-side work required by the
+`feat/move-to-server-first` redesign of the CLI and `@voidhash/react-native`.
+
+## Context
+
+The CLI and React Native SDK no longer treat the user's code as the source of
+truth for the schema (perks, products, paywall locations, payment provider
+mappings). The dashboard is. After the client-side refactor:
+
+- `voidhash schema push / pull / check` are gone.
+- The CLI's only job vs the schema is to generate a `.d.ts` declaration file
+  (`voidhash.gen.d.ts`) consumed by the SDK via module augmentation.
+- The SDK fetches the runtime schema on `Provider` mount instead of receiving
+  it via code.
+- The CLI watches for schema changes and the dev-mode SDK warns when the
+  generated file is stale.
+
+This document specifies the **server-side** endpoints and contracts that make
+that operational. None of this exists today — the client side has stubs / falls
+back to existing per-entity endpoints in the meantime.
+
+The shapes referenced below come from:
+
+- `apps/cli/src/domain/schema/normalized-schema.ts` — `NormalizedSchema`
+  (what the CLI generates the `.d.ts` from).
+- `libraries/react-native/src/core/schema/runtime.ts` — `RuntimeSchema`
+  (what the SDK consumes at runtime).
+- `apps/cli/src/utils/schema/version.ts` —
+  `computeSchemaVersionFromNormalized` (the deterministic hash that both
+  client and server must agree on).
+
+## Endpoints
+
+Three new things to ship. Existing per-entity endpoints
+(`/api/v1/perks`, `/api/v1/products`, `/api/v1/paywall-locations`,
+`/api/v1/payment-provider-configurations`,
+`/api/v1/payment-provider-products`, `/api/v1/product-perks/by-product-id/{productId}`)
+can stay; the new endpoints are additive.
+
+### 1. `GET /api/v1/schema` — consolidated read (CLI-facing)
+
+Replaces the five round-trips the CLI currently makes to assemble a
+`NormalizedSchema`. Returns everything in one response.
+
+**Authentication:** Bearer token (session). Same auth as today's per-entity
+admin endpoints. The CLI calls this from `voidhash types generate` (and
+indirectly from `voidhash init`).
+
+**Response (200):**
+
+```jsonc
+{
+  "version": "sha256:<hex>",      // identical to GET /schema/version below
+  "perks": [
+    { "slug": "all-access", "name": "All Access" }
+  ],
+  "locations": [
+    { "slug": "home", "name": "Home", "description": null }
+  ],
+  "products": [
+    {
+      "slug": "monthly_sub",
+      "name": "Monthly",
+      "type": "subscription",
+      "perks": ["all-access"],           // perk slugs, not IDs
+      "providers": [
+        {
+          "providerId": "appleAppStore",
+          "configuration": { "productId": "com.app.monthly" }
+        },
+        {
+          "providerId": "googlePlay",
+          "configuration": {
+            "productId": "com.app.monthly",
+            "basePlanId": "monthly-base"
+          }
+        }
+      ]
+    }
+  ],
+  "enabledProviders": ["appleAppStore", "googlePlay"]
+}
+```
+
+**Field-by-field mapping** to the CLI's `NormalizedSchema` (which is the
+intermediate the codegen runs over):
+
+| Server field           | CLI shape (`NormalizedSchema`)        | Notes |
+|------------------------|---------------------------------------|-------|
+| `perks[]`              | `Map<slug, { slug, name }>`           |       |
+| `locations[]`          | `Map<slug, { slug, name, description }>` | `description` is `null` when unset. |
+| `products[]`           | `Map<slug, { slug, name, type, perks[], providers[] }>` | `perks` is an array of perk **slugs**. `providers[].configuration` is provider-shaped. `type` is currently always `"subscription"` (extensible later). |
+| `enabledProviders[]`   | `Set<ProviderId>`                     | `"appleAppStore"` / `"googlePlay"`. Other provider IDs are filtered out client-side; sending them is harmless. |
+| `version`              | derived (see hash spec below)         | Must equal `GET /schema/version`. |
+
+**Caching:** Should set `ETag: "<version>"` and respect
+`If-None-Match` → return 304 when the client's known version matches.
+The CLI watch loop relies on this being cheap.
+
+**Errors:** Standard auth / not-found responses. An empty project (zero
+perks/products/locations) returns 200 with empty arrays and a deterministic
+version hash (see below).
+
+### 2. `GET /api/v1/schema/version` — cheap version probe
+
+Returns just the version hash. Used by:
+
+- `voidhash types generate --watch` (polls every 5s by default).
+- `voidhash types check` (CI gate — compares against the `@voidhash:version`
+  header in the local `.d.ts`).
+- The SDK's dev-mode drift warning.
+
+**Authentication:** Bearer token (session) **OR** publishable key.
+The CLI uses session auth. The SDK uses the publishable key it already
+sends on every other request (`x-publishable-key` header). The endpoint
+needs to accept both so we don't need two near-identical routes.
+
+**Response (200):**
+
+```json
+{ "version": "sha256:<hex>" }
+```
+
+Must equal the `version` field of `GET /api/v1/schema`.
+
+**Caching:** Same `ETag` / `If-None-Match` story; 304 on match. Strongly
+prefer keeping this under ~200 bytes uncompressed.
+
+### 3. `GET /sdk/schema` — runtime schema for the SDK
+
+The SDK calls this on `Provider` mount to populate `RuntimeSchema`, which
+drives `useProducts`, native store lookups (slug → provider productId), etc.
+
+**Authentication:** Publishable key (`x-publishable-key` header, matching
+existing `/api/v1/sdk/*` endpoints). The CLI does **not** call this — it
+uses `GET /api/v1/schema`.
+
+**Response (200):**
+
+```jsonc
+{
+  "version": "sha256:<hex>",
+  "perks": {
+    "all-access": { "slug": "all-access", "name": "All Access" }
+  },
+  "locations": {
+    "home": { "slug": "home", "name": "Home", "description": null }
+  },
+  "products": {
+    "monthly_sub": {
+      "slug": "monthly_sub",
+      "type": "subscription",
+      "properties": { "name": "Monthly" },
+      "configuration": {
+        "perks": { "all-access": true },
+        "providers": {
+          "appleAppStore": { "productId": "com.app.monthly" },
+          "googlePlay": {
+            "productId": "com.app.monthly",
+            "basePlanId": "monthly-base"
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+This is exactly `RuntimeSchema` from
+`libraries/react-native/src/core/schema/runtime.ts`. Note the differences
+from `GET /api/v1/schema`:
+
+- Object-keyed by slug (not arrays of objects). The SDK looks products up
+  by slug at runtime.
+- Per product, `properties: { name }` and
+  `configuration: { perks, providers }` are split (matches the SDK's
+  existing internal shape — minimizes the diff vs the old DSL-built
+  product definitions).
+- `enabledProviders` is **not** required (the SDK doesn't need it; only the
+  CLI codegen does).
+
+The server should be able to derive this from the same underlying records
+that back `GET /api/v1/schema` — it's a different projection of the same
+data.
+
+### 4. Slug-accepting endpoint variants
+
+Today the SDK passes server-issued IDs to:
+
+- `POST /api/v1/sdk/sync-transaction` — `payload.productId`
+- `POST /api/v1/sdk/resolve-paywall` — `payload.locationSlug` (already a
+  slug; verify no other ID fields are needed)
+- Any internal lookups during purchase/restore that travel through
+  `/api/v1/sdk/*`
+
+After the redesign the SDK no longer ships a slug → ID map. **Every SDK
+endpoint that today accepts an entity ID must accept the corresponding
+slug as a substitute.** Two acceptable patterns:
+
+- Replace the field type from "ID" to "slug or ID" with the server
+  resolving either form. Simplest; keeps a single field name.
+- Add a parallel `*Slug` field and deprecate the `*Id` variant.
+
+Pick whichever your typed HTTP framework prefers. The SDK will only emit
+slugs going forward; the ID variants only need to remain alive long enough
+to drain in-flight clients (probably one or two release cycles).
+
+Affected endpoints to audit (non-exhaustive — please confirm against the
+current code):
+
+- `POST /api/v1/sdk/sync-transaction` — `productId`
+- `POST /api/v1/sdk/resolve-paywall` — confirm whether the body or any
+  resolved sub-objects carry IDs the client would need to round-trip
+- Any future purchase / checkout endpoints
+
+The CLI does not need slug variants — it operates against IDs as today.
+
+## Version hash algorithm
+
+The hash is the single point of agreement between client and server. The
+CLI computes it from a `NormalizedSchema` in
+`apps/cli/src/utils/schema/version.ts`. The server **must** produce the
+same bytes from the same logical schema, otherwise `types check` will
+ping-pong between "stale" and "fresh" depending on who computed last.
+
+Algorithm:
+
+1. Build a JSON object with three top-level keys, **in this exact order**:
+   `locations`, `perks`, `products`.
+2. Each is an array, sorted ascending by `slug`.
+3. Per-element field order matches the CLI emit (see below).
+4. Stable JSON stringification: no whitespace, no trailing keys, exact
+   field order as written. (Node's `JSON.stringify` with explicit object
+   construction in declared order is what the CLI does.)
+5. `sha256` the resulting UTF-8 bytes, hex-encode, prefix with `sha256:`.
+
+Reference: `apps/cli/src/utils/schema/version.ts` —
+`computeSchemaVersionFromNormalized`. The exact source order:
+
+```js
+// products[i]
+{ name, perks: [sorted slugs], providers: [{providerId, configuration} sorted by providerId], slug, type }
+
+// locations[i]
+{ description, name, slug }
+
+// perks[i]
+{ name, slug }
+```
+
+The `configuration` field per provider is whatever object was stored — its
+internal property order matters. Two safe options:
+
+- Store provider configurations canonically (sort keys at write time).
+- Re-canonicalize at read time before hashing.
+
+Whichever you pick, the CLI just round-trips whatever the server sent in
+its `providers[].configuration`. As long as **the server hashes the same
+bytes it sends in `GET /api/v1/schema`**, the client side will match by
+construction (the CLI just JSON-serializes what it received).
+
+An empty schema produces a deterministic hash:
+
+```
+sha256:<sha256({"locations":[],"perks":[],"products":[]})>
+```
+
+## Authentication summary
+
+| Endpoint                       | Session bearer | Publishable key |
+|--------------------------------|:--------------:|:---------------:|
+| `GET /api/v1/schema`           | ✅             | ❌              |
+| `GET /api/v1/schema/version`   | ✅             | ✅              |
+| `GET /sdk/schema`              | ❌             | ✅              |
+| Slug-accepting `/sdk/*`        | ❌             | ✅              |
+
+`GET /api/v1/schema/version` accepts both because the CLI uses it during
+`types generate --watch` and the SDK uses it for the dev-mode drift
+warning.
+
+## Caching & freshness
+
+- All three GETs should set `Cache-Control: no-cache, must-revalidate` and
+  `ETag: "<version>"`.
+- 304 on `If-None-Match` match. The CLI watch loop and the dev-mode SDK
+  warning will both benefit (cheap polls, no payload on no-change).
+- Don't set a positive max-age — the whole point is that we want clients
+  to revalidate eagerly. The cache savings come from 304s, not from
+  skipping the round trip.
+
+## Empty / unconfigured projects
+
+A freshly-`init`ed project has zero perks/products/locations. The
+endpoints should still return 200 with empty collections and a deterministic
+hash (see "Empty schema" above). The CLI / SDK already handle this
+gracefully — `voidhash.gen.d.ts` lists `products: never`, and the
+SDK-side conditional types in
+`libraries/react-native/src/core/schema/registry.ts` degrade `never` back
+to `string` so user code still compiles.
+
+## Out of scope for this spec
+
+- Schema mutation endpoints. The dashboard already exposes them today; no
+  changes needed.
+- Versioning of the schema itself (migrations, snapshots, history). The
+  `sha256:` is a content hash, not a logical version number. If we want
+  per-revision history later, that's an additive feature.
+- Webhook on schema change. Out of scope for v1 of the server-first
+  redesign — the CLI's polling against `/schema/version` is intentionally
+  the v1 freshness mechanism (Combo A + B in the design doc).
+
+## Sequencing recommendation
+
+1. **`GET /api/v1/schema/version`** first. It's the smallest piece of
+   surface area and unblocks both the CLI watch loop and the dev-mode SDK
+   drift warning. Until it ships, `types check` falls back to a full
+   schema fetch (already implemented client-side in `fetchSchemaVersion`).
+2. **`GET /api/v1/schema`** second. The CLI already composes today's
+   per-entity endpoints to produce the same `NormalizedSchema`, so this
+   is purely an optimization (1 round-trip vs 5+). No client changes
+   needed when it lands — the CLI's `fetchRemoteSchema` can be swapped
+   internally to use the new endpoint.
+3. **`GET /sdk/schema`** third. Unblocks runtime product hooks
+   (`useProducts`, `usePurchase`) in the SDK. Until it ships,
+   `apiClient.sdk.getSchema()` returns an empty schema with a warning
+   (see the stub in `libraries/react-native/src/core/networking/api-client.ts`).
+4. **Slug-accepting `/sdk/*` variants** last. The SDK doesn't need them
+   to function in the "products fetched via `GET /sdk/schema`" path — it
+   still has the provider productIds — but they let us drop the
+   provider-productId fields from the bundle if/when we decide
+   schema-on-bundle was wrong. Out of the critical path for v1.
+
+## Verification (server-side)
+
+1. Round-trip `GET /api/v1/schema` and run the result through the CLI's
+   `computeSchemaVersionFromNormalized` helper. The result must equal the
+   `version` field in the response and the response of
+   `GET /api/v1/schema/version`.
+2. Mutate the schema (add a perk), assert `GET /schema/version` changes,
+   `If-None-Match: <old-version>` returns 304 before the mutation and 200
+   after.
+3. From a fresh CLI clone with a generated `voidhash.gen.d.ts` for the
+   pre-mutation schema, run `voidhash types check` — assert non-zero
+   exit + the printed diff cites the new version.
+4. From the SDK example app, mount `Provider`, assert `useProducts()`
+   returns the slugs/configurations now living on the server.
+
+## Open questions for the backend team
+
+- Should `GET /sdk/schema` be rate-limited per publishable key? The SDK
+  calls it once per session; a misbehaving app could call it more
+  aggressively.
+- Do we want the dashboard to invalidate ETags eagerly on edit, or rely
+  on the natural propagation? (Either works; ETag invalidation is purely
+  a latency optimization.)
+- Provider-configuration shape stability: are we comfortable hashing the
+  raw `configuration` object, or do we want to canonicalize per-provider
+  to insulate against accidental key reorderings? Current proposal is
+  "hash what you send" which is the simplest contract.
diff --git a/examples/react-native-example/app/_layout.tsx b/examples/react-native-example/app/_layout.tsx
index dba02aa5b..4baef834e 100644
--- a/examples/react-native-example/app/_layout.tsx
+++ b/examples/react-native-example/app/_layout.tsx
@@ -2,7 +2,7 @@ import { Stack } from "expo-router";
 import "react-native-reanimated";
 import "fast-text-encoding";
 import { StatusBar } from "expo-status-bar";
-import { voidhash } from "utils/voidhash/local.client";
+import { voidhash } from "utils/voidhash/client";
 
 // Prevent the splash screen from auto-hiding before asset loading is complete.
 // SplashScreen.preventAutoHideAsync();
diff --git a/examples/react-native-example/app/index.tsx b/examples/react-native-example/app/index.tsx
index e3f4eea71..d23a05833 100644
--- a/examples/react-native-example/app/index.tsx
+++ b/examples/react-native-example/app/index.tsx
@@ -3,7 +3,7 @@ import { useRouter } from "expo-router";
 import { ActivityIndicator, Image, StyleSheet, Text, View } from "react-native";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
 import { fakeAuthService, useCurrentUser } from "utils/fake-auth-service";
-import { voidhash } from "utils/voidhash/local.client";
+import { voidhash } from "utils/voidhash/client";
 
 import { Logo } from "../components/logo";
 
diff --git a/examples/react-native-example/app/menu/customer.tsx b/examples/react-native-example/app/menu/customer.tsx
index 74b4aa1b1..33f283ca6 100644
--- a/examples/react-native-example/app/menu/customer.tsx
+++ b/examples/react-native-example/app/menu/customer.tsx
@@ -1,7 +1,7 @@
 import { Button } from "components/button";
 import { Platform, StyleSheet, Text, View } from "react-native";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
-import { voidhash } from "utils/voidhash/local.client";
+import { voidhash } from "utils/voidhash/client";
 
 export default function HomeScreen() {
   const insets = useSafeAreaInsets();
diff --git a/examples/react-native-example/app/menu/paywall.tsx b/examples/react-native-example/app/menu/paywall.tsx
index fd38df17b..b736990b4 100644
--- a/examples/react-native-example/app/menu/paywall.tsx
+++ b/examples/react-native-example/app/menu/paywall.tsx
@@ -3,7 +3,7 @@ import { Button } from "components/button";
 import { useMemo, useState } from "react";
 import { StyleSheet, Text, View } from "react-native";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
-import { voidhash } from "utils/voidhash/local.client";
+import { voidhash } from "utils/voidhash/client";
 
 const PAYWALL_LOCATION_SLUG = "example-paywall";
 
diff --git a/examples/react-native-example/app/menu/sign-in.tsx b/examples/react-native-example/app/menu/sign-in.tsx
index 3438d5e6c..22458e68c 100644
--- a/examples/react-native-example/app/menu/sign-in.tsx
+++ b/examples/react-native-example/app/menu/sign-in.tsx
@@ -2,7 +2,7 @@ import { useRouter } from "expo-router";
 import { Image, Pressable, StyleSheet, Text, View } from "react-native";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
 import { fakeAuthService, users } from "utils/fake-auth-service";
-import { voidhash } from "utils/voidhash/local.client";
+import { voidhash } from "utils/voidhash/client";
 
 export default function HomeScreen() {
   const router = useRouter();
diff --git a/examples/react-native-example/package.json b/examples/react-native-example/package.json
index 2efde49e6..661ae7739 100644
--- a/examples/react-native-example/package.json
+++ b/examples/react-native-example/package.json
@@ -9,6 +9,8 @@
     "eas:build-dev:local": "eas build --local -e development",
     "start": "expo start --dev-client",
     "prebuild": "expo prebuild",
+    "voidhash:types": "voidhash types generate",
+    "voidhash:types-check": "voidhash types check",
     "lint": "biome check .",
     "typecheck": "tsc --noEmit",
     "format": "biome format .",
diff --git a/examples/react-native-example/utils/voidhash/_schema.ts b/examples/react-native-example/utils/voidhash/_schema.ts
deleted file mode 100644
index 8c167b40e..000000000
--- a/examples/react-native-example/utils/voidhash/_schema.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import { schemaConfiguration, unlockablePerk } from "@voidhash/react-native";
-
-export const sc = schemaConfiguration({
-	perks: {
-		allAccess: unlockablePerk("all-access", {
-			name: "All Access",
-		}),
-	},
-	providers: {
-		// appleAppStore: true,
-		// googlePlay: true,
-	},
-});
-
-export const monthlySub = sc.subscription("monthly_sub", {
-	name: "Monthly",
-	perks: {
-		allAccess: true,
-	},
-	providers: {
-		// appleAppStore: {
-		//   productId: "test_group_monthly",
-		// },
-		// googlePlay: {
-		//   productId: "com.voidhash.example.monthly",
-		// },
-	},
-});
-
-export const yearlySub = sc.subscription("yearly_sub", {
-	name: "Yearly",
-	perks: {
-		allAccess: true,
-	},
-	providers: {
-		// appleAppStore: {
-		//   productId: "test_group_yearly",
-		// },
-		// googlePlay: {
-		//   basePlanId: "com.voidhash.example.yearly.base",
-		//   productId: "com.voidhash.example.yearly",
-		// },
-	},
-});
diff --git a/examples/react-native-example/utils/voidhash/client.ts b/examples/react-native-example/utils/voidhash/client.ts
index fb855fa2b..db76c615c 100644
--- a/examples/react-native-example/utils/voidhash/client.ts
+++ b/examples/react-native-example/utils/voidhash/client.ts
@@ -1,8 +1,18 @@
 import { createVoidhashClient } from "@voidhash/react-native";
-import * as schema from "./schema";
 
-// export const voidhash = createVoidhashClient(
-// 	"vh_pk_PWIsDyqMEOOuHpmAsFQvwaFhGKBVlkHf",
-// 	schema,
-// 	{}
-// );
+/**
+ * Voidhash client for the example app.
+ *
+ * Schema lives on the server now — run `voidhash types generate` to refresh
+ * the local `voidhash.gen.d.ts` whenever the dashboard schema changes.
+ */
+export const voidhash = createVoidhashClient(
+	process.env.EXPO_PUBLIC_VOIDHASH_PUBLISHABLE_KEY ??
+		"vh_pk_hrvyOZJoxtonGGPtTnkMehrCoEPsAbwD",
+	{
+		debug: true,
+		...(process.env.EXPO_PUBLIC_VOIDHASH_API_URL
+			? { baseUrl: process.env.EXPO_PUBLIC_VOIDHASH_API_URL }
+			: {}),
+	},
+);
diff --git a/examples/react-native-example/utils/voidhash/local.client.ts b/examples/react-native-example/utils/voidhash/local.client.ts
deleted file mode 100644
index 5a5d3316e..000000000
--- a/examples/react-native-example/utils/voidhash/local.client.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-import { createVoidhashClient } from "@voidhash/react-native";
-import Constants from "expo-constants";
-
-import * as schema from "./_schema";
-
-function resolveHostIp() {
-	const debuggerHost =
-		(
-			Constants.expoConfig as {
-				debuggerHost?: string;
-				hostUri?: string;
-			} | null
-		)?.debuggerHost ??
-		(
-			Constants.expoConfig as {
-				debuggerHost?: string;
-				hostUri?: string;
-			} | null
-		)?.hostUri ??
-		(
-			Constants.manifest2 as {
-				extra?: {
-					expoGo?: {
-						debuggerHost?: string;
-					};
-				};
-			} | null
-		)?.extra?.expoGo?.debuggerHost;
-
-	return debuggerHost?.split(":")[0];
-}
-
-const baseUrl = process.env.EXPO_PUBLIC_VOIDHASH_API_URL?.replace(
-	"localhost",
-	resolveHostIp() ?? "localhost",
-);
-
-const clientOptions = {
-	debug: true,
-	...(baseUrl ? { baseUrl } : {}),
-};
-const publishableKey =
-	process.env.EXPO_PUBLIC_VOIDHASH_PUBLISHABLE_KEY ??
-	"vh_pk_hrvyOZJoxtonGGPtTnkMehrCoEPsAbwD";
-
-console.log(baseUrl, publishableKey);
-
-export const voidhash = createVoidhashClient(
-	publishableKey,
-	schema,
-	clientOptions,
-);
diff --git a/examples/react-native-example/utils/voidhash/schema.ts b/examples/react-native-example/utils/voidhash/schema.ts
deleted file mode 100644
index d39a3ff95..000000000
--- a/examples/react-native-example/utils/voidhash/schema.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import { schemaConfiguration, unlockablePerk } from "@voidhash/react-native";
-
-export const sc = schemaConfiguration({
-  perks: {
-    allAccess: unlockablePerk("all-access", { name: "All Access" }),
-  },
-  providers: {
-  },
-});
-
-export const monthlySub = sc.subscription("monthly_sub", {
-  name: "Monthly",
-  perks: {
-    allAccess: true,
-  },
-  providers: {
-  },
-});
-
-export const yearlySub = sc.subscription("yearly_sub", {
-  name: "Yearly",
-  perks: {
-    allAccess: true,
-  },
-  providers: {
-  },
-});
diff --git a/examples/react-native-example/voidhash.config.ts b/examples/react-native-example/voidhash.config.ts
index 315e61edb..2c63f37e4 100644
--- a/examples/react-native-example/voidhash.config.ts
+++ b/examples/react-native-example/voidhash.config.ts
@@ -1,7 +1,6 @@
-import { defineConfig } from 'voidhash-cli';
+import { defineConfig } from "voidhash-cli";
 
 export default defineConfig({
-  team: 'voidhash-dev-sro',
-  project: 'dev-proj',
-  schema: 'utils/voidhash/schema.ts'
+	team: "voidhash-dev-sro",
+	project: "dev-proj",
 });
diff --git a/examples/react-native-example/voidhash.gen.d.ts b/examples/react-native-example/voidhash.gen.d.ts
new file mode 100644
index 000000000..ea5c4866a
--- /dev/null
+++ b/examples/react-native-example/voidhash.gen.d.ts
@@ -0,0 +1,15 @@
+// voidhash.gen.d.ts — generated by voidhash-cli, do not edit
+// @voidhash:version sha256:placeholder
+// @voidhash:fetched-at 1970-01-01T00:00:00.000Z
+
+declare module "@voidhash/react-native" {
+  interface VoidhashRegister {
+    schema: {
+      products: never;
+      locations: never;
+      perks: never;
+    };
+  }
+}
+
+export {};
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index 7e55036e2..84b2b6692 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -52,7 +52,9 @@
 	"exports": {
 		"./app.plugin.js": "./app.plugin.js",
 		"./package.json": "./package.json",
-		"./schema": "./src/core/schema/index.ts",
+		"./metro": {
+			"node": "./src/metro/index.ts"
+		},
 		".": "./src/index.ts"
 	},
 	"scripts": {
@@ -97,7 +99,13 @@
 		"expo-linking": "*",
 		"react": "*",
 		"react-native": "*",
-		"react-native-nitro-modules": "0.26.4"
+		"react-native-nitro-modules": "0.26.4",
+		"voidhash-cli": "workspace:*"
+	},
+	"peerDependenciesMeta": {
+		"voidhash-cli": {
+			"optional": true
+		}
 	},
 	"jest": {
 		"moduleNameMapper": {
diff --git a/libraries/react-native/src/__tests__/client.test.ts b/libraries/react-native/src/__tests__/client.test.ts
index 1ec69179a..e7a88568a 100644
--- a/libraries/react-native/src/__tests__/client.test.ts
+++ b/libraries/react-native/src/__tests__/client.test.ts
@@ -49,14 +49,15 @@ function createClient(readOnly = false, unstableSwallowErrors = false) {
   return new VoidhashClient(
     null,
     "voidhash",
-    createTestSchema(),
     "https://api.voidhash.test",
     undefined,
     "pk_test",
     readOnly,
     unstableSwallowErrors,
     new EventBus(),
-    "ios"
+    "ios",
+    false,
+    createTestSchema()
   );
 }
 
diff --git a/libraries/react-native/src/__tests__/core/client-effect.test.ts b/libraries/react-native/src/__tests__/core/client-effect.test.ts
index fbfaf6563..a255e4ce7 100644
--- a/libraries/react-native/src/__tests__/core/client-effect.test.ts
+++ b/libraries/react-native/src/__tests__/core/client-effect.test.ts
@@ -46,7 +46,7 @@ describe("VoidhashEffectClient", () => {
       const initializedClient = await harness.runtime.runPromise(
         VoidhashEffectClient.makeUnitializedClient().init({
           distinctId: "user-after-init",
-          schema,
+          internalSchema: schema,
         })
       );
 
@@ -81,7 +81,7 @@ describe("VoidhashEffectClient", () => {
     try {
       await harness.runtime.runPromise(
         VoidhashEffectClient.makeUnitializedClient().init({
-          schema,
+          internalSchema: schema,
         })
       );
 
@@ -128,8 +128,8 @@ describe("VoidhashEffectClient", () => {
       const second = await harness.runtime.runPromise(initializedClient.getProducts());
 
       expect(paymentDouble.state.getProductsCalls).toBe(1);
-      expect(first.monthlySub?.slug).toBe("monthly_sub");
-      expect(first.yearlySub).toBeNull();
+      expect(first.monthly_sub?.slug).toBe("monthly_sub");
+      expect(first.yearly_sub).toBeNull();
       expect(second).toEqual(first);
     } finally {
       await harness.runtime.dispose();
@@ -237,7 +237,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        initializedClient.purchase<typeof schema>(monthlyProduct, {
+        initializedClient.purchase(monthlyProduct, {
           method: "native",
         })
       );
diff --git a/libraries/react-native/src/__tests__/helpers/test-schema.ts b/libraries/react-native/src/__tests__/helpers/test-schema.ts
index 8611a48b0..0f2b7aa7f 100644
--- a/libraries/react-native/src/__tests__/helpers/test-schema.ts
+++ b/libraries/react-native/src/__tests__/helpers/test-schema.ts
@@ -1,49 +1,45 @@
-import { schemaConfiguration, unlockablePerk } from "../../core/schema";
-import type { VoidhashSchema } from "../../core/schema/types";
+import type { RuntimeSchema } from "../../core/schema/runtime";
 
-export function createTestSchema() {
-  const schemaConfig = schemaConfiguration({
+/**
+ * Build a deterministic in-memory schema for tests. Mirrors the shape the
+ * SDK fetches from the server at init time so tests don't need a live
+ * backend to exercise product / purchase flows.
+ */
+export function createTestSchema(): RuntimeSchema {
+  return {
+    version: "sha256:test",
     perks: {
-      allAccess: unlockablePerk("all-access", { name: "All Access" }),
+      "all-access": { slug: "all-access", name: "All Access" },
     },
-    providers: {
-      appleAppStore: true,
-      googlePlay: true,
-    },
-  });
-
-  const schema = {
-    monthlySub: schemaConfig.subscription("monthly_sub", {
-      name: "Monthly",
-      perks: {
-        allAccess: true,
-      },
-      providers: {
-        appleAppStore: {
-          productId: "com.voidhash.monthly.ios",
-        },
-        googlePlay: {
-          productId: "com.voidhash.monthly.android",
+    locations: {},
+    products: {
+      monthly_sub: {
+        slug: "monthly_sub",
+        type: "subscription",
+        properties: { name: "Monthly" },
+        configuration: {
+          perks: { "all-access": true },
+          providers: {
+            appleAppStore: { productId: "com.voidhash.monthly.ios" },
+            googlePlay: { productId: "com.voidhash.monthly.android" },
+          },
         },
       },
-    }),
-    schemaConfig,
-    yearlySub: schemaConfig.subscription("yearly_sub", {
-      name: "Yearly",
-      perks: {
-        allAccess: true,
-      },
-      providers: {
-        appleAppStore: {
-          productId: "com.voidhash.yearly.ios",
-        },
-        googlePlay: {
-          basePlanId: "yearly-base",
-          productId: "com.voidhash.yearly.android",
+      yearly_sub: {
+        slug: "yearly_sub",
+        type: "subscription",
+        properties: { name: "Yearly" },
+        configuration: {
+          perks: { "all-access": true },
+          providers: {
+            appleAppStore: { productId: "com.voidhash.yearly.ios" },
+            googlePlay: {
+              productId: "com.voidhash.yearly.android",
+              basePlanId: "yearly-base",
+            },
+          },
         },
       },
-    }),
-  } satisfies VoidhashSchema;
-
-  return schema;
+    },
+  };
 }
diff --git a/libraries/react-native/src/__tests__/react/use-paywall-by-location.test.tsx b/libraries/react-native/src/__tests__/react/use-paywall-by-location.test.tsx
index ab730e323..bd0aca4b3 100644
--- a/libraries/react-native/src/__tests__/react/use-paywall-by-location.test.tsx
+++ b/libraries/react-native/src/__tests__/react/use-paywall-by-location.test.tsx
@@ -1,5 +1,4 @@
 import type { VoidhashClient } from "../../client";
-import type { VoidhashSchema } from "../../core/schema";
 import {
   __internal_handlePaywallBridgeEventForTests,
   __internal_resetPaywallByLocationCachesForTests,
@@ -23,7 +22,7 @@ function createClientMock() {
     getProducts: jest.fn(),
     purchase: jest.fn(),
     restorePurchases: jest.fn(),
-  } as unknown as jest.Mocked<VoidhashClient<VoidhashSchema>>;
+  } as unknown as jest.Mocked<VoidhashClient>;
 }
 
 function createPresenterMock() {
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index fe9cf6362..69a2de9c9 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -6,7 +6,7 @@ import { Cause, Effect } from "effect";
 
 import { SDK_VERSION } from "./core/constants";
 import { CacheManager } from "./core/caching/cache-manager";
-import type { Product } from "./core/entities/product";
+import type { Product, SubscriptionProduct } from "./core/entities/product";
 import type { Transaction } from "./core/entities/transaction";
 import { EventBusProvider } from "./core/event-bus";
 import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
@@ -14,19 +14,25 @@ import { CustomerInfoManager } from "./core/identity/customer-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
 import { ApiClient } from "./core/networking/api-client";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
-import type {
-  ExtractSchemaProductDefinitions,
-  ExtractSchemaProductKeys,
-  InferGetPaywallLocationInput,
-  InferGetProductResponseFromSchema,
-  VoidhashSchema,
-} from "./core/schema";
-import { extractProductDefinitions } from "./core/schema/utils";
+import type { LocationSlug, ProductSlug } from "./core/schema/registry";
+import {
+  type RuntimeProductDefinition,
+  type RuntimeSchema,
+  createEmptyRuntimeSchema,
+} from "./core/schema/runtime";
 import { SdkConfiguration } from "./core/sdk-configuration";
 import { getCommonSdkHeaders } from "./core/utils/get-common-sdk-headers";
 import { UnsupportedPlatformError } from "./errors";
-import { AnalyticsIngestEvent, AnalyticsSendFailure, QueuedAnalyticsEvent } from "./core/analytics/types";
-import { createQueuedAnalyticsEvent, getAnalyticsStandardizedProperties, mapQueuedAnalyticsEventToIngestEvent } from "./core/analytics/utils";
+import {
+  AnalyticsIngestEvent,
+  AnalyticsSendFailure,
+  QueuedAnalyticsEvent,
+} from "./core/analytics/types";
+import {
+  createQueuedAnalyticsEvent,
+  getAnalyticsStandardizedProperties,
+  mapQueuedAnalyticsEventToIngestEvent,
+} from "./core/analytics/utils";
 import { getNonce } from "./core/utils/crypto";
 
 const PROCESSED_TRANSACTION_TTL_MS = 1000 * 60 * 30;
@@ -35,8 +41,12 @@ const ANALYTICS_FLUSH_INTERVAL_MS = 5000;
 const MAX_ANALYTICS_RETRY_DELAY_MS = 30_000;
 const RETRYABLE_ANALYTICS_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
 
-
-
+/**
+ * The shape of `useProducts()` etc. — keyed by the registered product slugs.
+ * Values are `null` when the underlying store SDK doesn't know about that
+ * product (e.g. the product isn't configured on this platform).
+ */
+export type ProductsBySlug = Record<ProductSlug, SubscriptionProduct | null>;
 
 interface AppReleaseInfo {
   readonly appBuild: string | null;
@@ -74,7 +84,9 @@ const getReactNativeAppState = (): ReactNativeAppState | null => {
 const toNullableString = (value: unknown): string | null =>
   value !== null && value !== undefined ? String(value) : null;
 
-const toAppReleaseInfo = (value: AppReleaseInfo | undefined | null): AppReleaseInfo | null => {
+const toAppReleaseInfo = (
+  value: AppReleaseInfo | undefined | null
+): AppReleaseInfo | null => {
   if (!value) return null;
   return {
     appBuild: value.appBuild,
@@ -82,8 +94,6 @@ const toAppReleaseInfo = (value: AppReleaseInfo | undefined | null): AppReleaseI
   };
 };
 
-
-
 const getAnalyticsRetryDelayMs = (attempts: number) =>
   Math.min(1000 * 2 ** Math.max(attempts - 1, 0), MAX_ANALYTICS_RETRY_DELAY_MS);
 
@@ -106,29 +116,36 @@ const parseRetryAfterMs = (value: string | null): number | undefined => {
 };
 
 const getRetryAfterMsFromResponseBody = (
-  data: CaptureAcceptedResponse | CaptureErrorResponse | undefined,
+  data: CaptureAcceptedResponse | CaptureErrorResponse | undefined
 ): number | undefined =>
   data && "retry_after_ms" in data && typeof data.retry_after_ms === "number"
     ? data.retry_after_ms
     : undefined;
 
+interface InitOptions {
+  readonly distinctId?: string;
+  /**
+   * Test/internal escape hatch — inject a known runtime schema instead of
+   * fetching from the server. Not part of the public API. Lets the test
+   * suite drive product fetching deterministically while the server-side
+   * schema endpoint is still being built out.
+   */
+  readonly internalSchema?: RuntimeSchema;
+}
+
 const makeUnitializedClient = () => ({
-  init: <TSchema extends VoidhashSchema>(initOptions: {
-    distinctId?: string;
-    schema: TSchema;
-  }) =>
+  init: (initOptions: InitOptions = {}) =>
     Effect.gen(function* init() {
       const identityManager = yield* IdentityManager;
       const customerAttributeManager = yield* CustomerAttributeManager;
       const customerInfoManager = yield* CustomerInfoManager;
+      const apiClient = yield* ApiClient;
 
       if (initOptions.distinctId) {
-        // Identify as the distinct id provided during SDK initialization.
         yield* Effect.logDebug("Initializing with provided distinct id", {
           distinctId: initOptions.distinctId,
         });
 
-        // Sync customer attributes before identify to not lose historical customer data
         const distinctId = yield* identityManager.getDistinctIdFromCache();
         if (distinctId) {
           yield* customerAttributeManager.syncCustomerAttributes(distinctId);
@@ -136,29 +153,44 @@ const makeUnitializedClient = () => ({
 
         yield* identityManager.identify(initOptions.distinctId, {});
       } else {
-        // If no distinct id was passed during SDK initialization, fetch the current customer in the background.
         const distinctId = yield* identityManager.getDistinctId();
         yield* Effect.logDebug("Initializing without provided distinct id", {
           distinctId,
         });
 
         yield* customerAttributeManager.syncCustomerAttributes(distinctId);
-
-        // We don't need the result immediately. We do this to pre-fetch fresh customer data in the background.
         yield* customerInfoManager.getCustomer(distinctId, "fetch");
       }
 
-      // Return the initialized client
-      return makeInitializedClient<TSchema>({
-        schema: initOptions.schema,
-      });
+      // Fetch the runtime schema. The server endpoint is still being built;
+      // until it ships the API client returns an empty schema with a warning,
+      // and product-related calls return empty data.
+      let runtimeSchema = initOptions.internalSchema ?? createEmptyRuntimeSchema();
+      if (!initOptions.internalSchema) {
+        const commonHeaders = yield* getCommonSdkHeaders();
+        const distinctId = yield* identityManager.getDistinctId();
+        const fetched = yield* Effect.exit(
+          apiClient.sdk.getSchema({
+            headers: {
+              ...commonHeaders,
+              "x-distinct-id": distinctId,
+            },
+          })
+        );
+        if (fetched._tag === "Success") {
+          runtimeSchema = fetched.value as RuntimeSchema;
+        } else {
+          yield* Effect.logWarning(
+            "[voidhash] Failed to fetch schema at init — product-related hooks will return empty data."
+          );
+        }
+      }
+
+      return makeInitializedClient({ schema: runtimeSchema });
     }),
 });
 
-
-const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
-  schema: TSchema;
-}) => {
+const makeInitializedClient = (options: { schema: RuntimeSchema }) => {
   const inFlightTransactionKeys = new Set<string>();
 
   // Analytics state
@@ -181,12 +213,16 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
     }
 
     const now = Date.now();
-    const hasDueEvents = analyticsQueue.some((event) => event.availableAt <= now);
+    const hasDueEvents = analyticsQueue.some(
+      (event) => event.availableAt <= now
+    );
     if (hasDueEvents) {
       return ANALYTICS_FLUSH_INTERVAL_MS;
     }
 
-    const nextAvailableAt = Math.min(...analyticsQueue.map((event) => event.availableAt));
+    const nextAvailableAt = Math.min(
+      ...analyticsQueue.map((event) => event.availableAt)
+    );
     return Math.max(nextAvailableAt - now, 0);
   };
 
@@ -203,7 +239,9 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
     }, delayMs);
   };
 
-  const sendAnalyticsEventsImpl = (events: ReadonlyArray<AnalyticsIngestEvent>) =>
+  const sendAnalyticsEventsImpl = (
+    events: ReadonlyArray<AnalyticsIngestEvent>
+  ) =>
     Effect.gen(function* () {
       if (events.length === 0) return;
 
@@ -249,11 +287,15 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
       });
 
       const data = (yield* Effect.tryPromise({
-        try: () => response.json() as Promise<CaptureAcceptedResponse | CaptureErrorResponse>,
+        try: () =>
+          response.json() as Promise<
+            CaptureAcceptedResponse | CaptureErrorResponse
+          >,
         catch: (cause) => cause,
-      }).pipe(
-        Effect.orElseSucceed(() => undefined),
-      )) as CaptureAcceptedResponse | CaptureErrorResponse | undefined;
+      }).pipe(Effect.orElseSucceed(() => undefined))) as
+        | CaptureAcceptedResponse
+        | CaptureErrorResponse
+        | undefined;
 
       if (response.status === 202) {
         return;
@@ -293,10 +335,13 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
       }
     });
 
-  const buildQueuedAnalyticsBatchIds = (events: ReadonlyArray<QueuedAnalyticsEvent>) =>
-    new Set(events.map((event) => event.id));
+  const buildQueuedAnalyticsBatchIds = (
+    events: ReadonlyArray<QueuedAnalyticsEvent>
+  ) => new Set(events.map((event) => event.id));
 
-  const dropQueuedAnalyticsBatch = (events: ReadonlyArray<QueuedAnalyticsEvent>) => {
+  const dropQueuedAnalyticsBatch = (
+    events: ReadonlyArray<QueuedAnalyticsEvent>
+  ) => {
     const ids = buildQueuedAnalyticsBatchIds(events);
     for (let index = analyticsQueue.length - 1; index >= 0; index -= 1) {
       if (ids.has(analyticsQueue[index]!.id)) {
@@ -307,7 +352,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
   const postponeQueuedAnalyticsBatch = (
     events: ReadonlyArray<QueuedAnalyticsEvent>,
-    nextAvailableAt: number,
+    nextAvailableAt: number
   ) => {
     const ids = buildQueuedAnalyticsBatchIds(events);
     for (let index = 0; index < analyticsQueue.length; index += 1) {
@@ -344,11 +389,19 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
   const processQueuedAnalyticsBatch = (
     queuedBatch: ReadonlyArray<QueuedAnalyticsEvent>,
-    standardizedProperties: Record<string, unknown>,
-  ): Effect.Effect<void, AnalyticsSendFailure, IdentityManager | SdkConfiguration> =>
+    standardizedProperties: Record<string, unknown>
+  ): Effect.Effect<
+    void,
+    AnalyticsSendFailure,
+    IdentityManager | SdkConfiguration
+  > =>
     Effect.gen(function* () {
       const ingestBatch = queuedBatch.map((event) =>
-        mapQueuedAnalyticsEventToIngestEvent(event, standardizedProperties, analyticsSessionId),
+        mapQueuedAnalyticsEventToIngestEvent(
+          event,
+          standardizedProperties,
+          analyticsSessionId
+        )
       );
 
       const sendResult = yield* Effect.exit(sendAnalyticsEventsImpl(ingestBatch));
@@ -364,14 +417,20 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
             cause: failure,
             message: failure instanceof Error ? failure.message : String(failure),
             retryable: false,
-          }),
+          })
         );
       }
 
       if (failure.status === 413 && queuedBatch.length > 1) {
         const midpoint = Math.ceil(queuedBatch.length / 2);
-        yield* processQueuedAnalyticsBatch(queuedBatch.slice(0, midpoint), standardizedProperties);
-        yield* processQueuedAnalyticsBatch(queuedBatch.slice(midpoint), standardizedProperties);
+        yield* processQueuedAnalyticsBatch(
+          queuedBatch.slice(0, midpoint),
+          standardizedProperties
+        );
+        yield* processQueuedAnalyticsBatch(
+          queuedBatch.slice(midpoint),
+          standardizedProperties
+        );
         return;
       }
 
@@ -385,10 +444,13 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
       if (!failure.retryable) {
         dropQueuedAnalyticsBatch(queuedBatch);
-        yield* Effect.logWarning("Dropping analytics batch after non-retryable response", {
-          eventIds: queuedBatch.map((event) => event.id),
-          status: failure.status,
-        });
+        yield* Effect.logWarning(
+          "Dropping analytics batch after non-retryable response",
+          {
+            eventIds: queuedBatch.map((event) => event.id),
+            status: failure.status,
+          }
+        );
         return;
       }
 
@@ -397,8 +459,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
   const processObservedTransaction = (transaction: Transaction) =>
     Effect.gen(function* processObservedTransaction() {
-      const transactionProcessingKey =
-        buildTransactionProcessingKey(transaction);
+      const transactionProcessingKey = buildTransactionProcessingKey(transaction);
       if (inFlightTransactionKeys.has(transactionProcessingKey)) {
         return;
       }
@@ -534,9 +595,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         return result;
       }),
 
-    getPaywallForLocation: (
-      locationSlug: InferGetPaywallLocationInput<TSchema>
-    ) =>
+    getPaywallForLocation: (locationSlug: LocationSlug) =>
       Effect.gen(function* getPaywallForLocation() {
         const apiClient = yield* ApiClient;
         const identityManager = yield* IdentityManager;
@@ -549,7 +608,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
             ...commonHeaders,
             "x-distinct-id": distinctId,
           },
-          payload: { locationSlug },
+          payload: { locationSlug: String(locationSlug) },
         });
       }),
 
@@ -575,11 +634,14 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
     getProducts: () =>
       Effect.gen(function* getProducts() {
-        const productDefinitions = extractProductDefinitions(options.schema);
+        const productDefinitions = options.schema.products;
         const nativeProducts = yield* loadProductsCached(productDefinitions);
         return mapNativeProductsToProductMap(productDefinitions, nativeProducts);
       }),
 
+    /** Read access to the schema fetched at init time. */
+    getSchema: () => options.schema,
+
     identify: (
       distinctId: string,
       options: {
@@ -622,10 +684,8 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
 
     processObservedTransaction,
 
-    purchase: <TSchemaOverload extends VoidhashSchema>(
-      product: NonNullable<
-        InferGetProductResponseFromSchema<TSchemaOverload>[keyof InferGetProductResponseFromSchema<TSchemaOverload>]
-      >,
+    purchase: (
+      product: SubscriptionProduct,
       _options: {
         method?: "native";
       }
@@ -679,7 +739,7 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
           }
 
           const sendResult = yield* Effect.exit(
-            processQueuedAnalyticsBatch(queuedBatch, standardizedProperties),
+            processQueuedAnalyticsBatch(queuedBatch, standardizedProperties)
           );
           if (sendResult._tag === "Failure") {
             const failure = Cause.squash(sendResult.cause);
@@ -688,7 +748,9 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
                 queuedBatch,
                 Date.now() +
                   (failure.retryAfterMs ??
-                    getAnalyticsRetryDelayMs((queuedBatch[0]?.attempts ?? 0) + 1)),
+                    getAnalyticsRetryDelayMs(
+                      (queuedBatch[0]?.attempts ?? 0) + 1
+                    ))
               );
               scheduleFlushTimer();
               return;
@@ -710,12 +772,19 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
         clearFlushTimer();
       }),
 
-    transferAnalyticsEvents: (events: ReadonlyArray<{ eventName: string; properties: Record<string, unknown> }>) =>
+    transferAnalyticsEvents: (
+      events: ReadonlyArray<{
+        eventName: string;
+        properties: Record<string, unknown>;
+      }>
+    ) =>
       Effect.sync(() => {
         for (const event of events) {
           const normalized = event.eventName.trim();
           if (!normalized) continue;
-          analyticsQueue.push(createQueuedAnalyticsEvent(normalized, event.properties));
+          analyticsQueue.push(
+            createQueuedAnalyticsEvent(normalized, event.properties)
+          );
         }
       }),
 
@@ -761,7 +830,8 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
           return null;
         }
 
-        let lifecycleState: AppLifecycleState | null = appState.currentState ?? null;
+        let lifecycleState: AppLifecycleState | null =
+          appState.currentState ?? null;
 
         const subscription = appState.addEventListener("change", (nextAppState) => {
           const previousAppState = lifecycleState;
@@ -809,8 +879,8 @@ const makeInitializedClient = <TSchema extends VoidhashSchema>(options: {
   };
 };
 
-const loadProductsCached = <TSchema extends VoidhashSchema>(
-  productDefinitions: ExtractSchemaProductDefinitions<TSchema>
+const loadProductsCached = (
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
 ) =>
   Effect.gen(function* loadProductsCached() {
     const cacheManager = yield* CacheManager;
@@ -830,8 +900,7 @@ const loadProductsCached = <TSchema extends VoidhashSchema>(
       return cachedProducts.value;
     }
 
-    const nativeProducts =
-      yield* paymentAdapter.getProducts(productDefinitions);
+    const nativeProducts = yield* paymentAdapter.getProducts(productDefinitions);
 
     yield* Effect.logDebug("Products fetched from native adapter", {
       products: nativeProducts,
@@ -845,33 +914,26 @@ const loadProductsCached = <TSchema extends VoidhashSchema>(
     return nativeProducts;
   });
 
-const mapNativeProductsToProductMap = <TSchema extends VoidhashSchema>(
-  productDefinitions: ExtractSchemaProductDefinitions<TSchema>,
+const mapNativeProductsToProductMap = (
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
   nativeProducts: Product[]
-) => {
-  const productMap: InferGetProductResponseFromSchema<TSchema> =
-    {} as InferGetProductResponseFromSchema<TSchema>;
-
-  for (const productDefinitionKey of Object.keys(productDefinitions)) {
-    const productDefinition =
-      productDefinitions[
-        productDefinitionKey as ExtractSchemaProductKeys<TSchema>
-      ];
+): ProductsBySlug => {
+  const productMap = {} as Record<string, SubscriptionProduct | null>;
+
+  for (const slug of Object.keys(productDefinitions)) {
     const nativeProduct = nativeProducts.find(
-      (nativeProduct) => nativeProduct.slug === productDefinition.slug
+      (nativeProduct) => nativeProduct.slug === slug
     );
 
     if (nativeProduct) {
-      productMap[productDefinitionKey as ExtractSchemaProductKeys<TSchema>] =
-        nativeProduct as InferGetProductResponseFromSchema<TSchema>[ExtractSchemaProductKeys<TSchema>];
+      productMap[slug] = nativeProduct as SubscriptionProduct;
       continue;
     }
 
-    productMap[productDefinitionKey as ExtractSchemaProductKeys<TSchema>] =
-      null as InferGetProductResponseFromSchema<TSchema>[ExtractSchemaProductKeys<TSchema>];
+    productMap[slug] = null;
   }
 
-  return productMap;
+  return productMap as ProductsBySlug;
 };
 
 const buildTransactionProcessingKey = (transaction: Transaction) =>
@@ -903,8 +965,8 @@ const mapTransactionToSyncPayload = (transaction: Transaction) => {
   };
 };
 
-const generateCacheKeyFromProductDefinitions = <TSchema extends VoidhashSchema>(
-  productDefinitions: ExtractSchemaProductDefinitions<TSchema>
+const generateCacheKeyFromProductDefinitions = (
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
 ) => `native-products:${JSON.stringify(productDefinitions)}`;
 
 const resolveIngestEventsUrl = (options: {
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index 736219377..0dd0b0d0a 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -3,7 +3,6 @@ import { Platform as RNPlatform } from "react-native";
 
 import { VoidhashClient, type VoidhashClientOptions } from "./client";
 import { EventBus } from "./core/event-bus";
-import type { VoidhashSchema } from "./core/schema";
 import { SchemeNotSetError } from "./errors";
 import { voidhashProviderFactory } from "./react/components/provider";
 import { useRetrieveAppStoreProduct } from "./react/hooks/app-store/use-retrieve-app-store-product";
@@ -16,10 +15,18 @@ import { paywallByLocationHookFactory } from "./react/hooks/use-paywall-by-locat
 import { productsHookFactory } from "./react/hooks/use-products";
 import { purchaseHookFactory } from "./react/hooks/use-purchase";
 
-export function createVoidhashClient<TSchema extends VoidhashSchema>(
+/**
+ * Bootstrap the Voidhash React Native SDK for a project.
+ *
+ * After the server-first redesign:
+ * - There is no schema argument. The schema lives on the server and is
+ *   fetched on `Provider` mount.
+ * - Type safety for product / location / perk slugs comes from the generated
+ *   `voidhash.gen.d.ts` (run `voidhash types generate`).
+ */
+export function createVoidhashClient(
   publishableKey: string,
-  schema: VoidhashClientOptions<TSchema>["schema"],
-  options: Omit<VoidhashClientOptions<TSchema>, "schema">
+  options: VoidhashClientOptions = {}
 ) {
   const baseUrl = options.baseUrl || "https://api.voidhash.com";
   const debug = options.debug ?? false;
@@ -40,10 +47,9 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
   const eventBus = new EventBus();
   const platform = RNPlatform.OS === "ios" ? "ios" : "android";
 
-  const client = new VoidhashClient<TSchema>(
+  const client = new VoidhashClient(
     distinctId,
     scheme,
-    schema,
     baseUrl,
     ingestUrl,
     publishableKey,
@@ -51,7 +57,8 @@ export function createVoidhashClient<TSchema extends VoidhashSchema>(
     unstableSwallowErrors,
     eventBus,
     platform,
-    debug
+    debug,
+    options.unstable_internalSchema
   );
 
   const { provider, context, useVoidhash } = voidhashProviderFactory(client);
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index 63b44e830..c6c5259d0 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -13,24 +13,27 @@ import { AppStoreAdapter } from "./core/payment-adapters/app-store-adapter";
 import { GooglePlayAdapter } from "./core/payment-adapters/google-play-adapter";
 import { type PlatformInfo } from "./core/platform/platform-provider";
 import { ReactNativePlatformProvider } from "./core/platform/react-native-platform-provider";
-import type {
-  InferGetPaywallLocationInput,
-  InferGetProductResponseFromSchema,
-  VoidhashSchema,
-} from "./core/schema";
+import type { LocationSlug, ProductSlug } from "./core/schema/registry";
+import type { RuntimeSchema } from "./core/schema/runtime";
 import { SdkConfiguration } from "./core/sdk-configuration";
 import { ReadOnlyModePurchaseNotAllowedError, VoidhashError } from "./errors";
 import { AnalyticsService } from "./core/analytics/service";
+import type { SubscriptionProduct } from "./core/entities/product";
 
-export interface VoidhashClientOptions<TSchema extends VoidhashSchema> {
+export interface VoidhashClientOptions {
   baseUrl?: string;
   debug?: boolean;
   distinctId?: string;
   ingestUrl?: string;
   readOnly?: boolean;
-  schema: TSchema;
   scheme?: string;
   unstable_swallowErrors?: boolean;
+  /**
+   * Test/internal escape hatch — inject a known runtime schema instead of
+   * letting the SDK fetch from the server on init. Not part of the public
+   * API; production code should rely on the server-side schema endpoint.
+   */
+  unstable_internalSchema?: RuntimeSchema;
 }
 
 const CreateEffectRuntime = (
@@ -82,31 +85,33 @@ type UninitializedEffectClient = ReturnType<
   typeof VoidhashEffectClient.makeUnitializedClient
 >;
 
-type InitializedEffectClient<TSchema extends VoidhashSchema> = ReturnType<
-  typeof VoidhashEffectClient.makeInitializedClient<TSchema>
+type InitializedEffectClient = ReturnType<
+  typeof VoidhashEffectClient.makeInitializedClient
 >;
 
-export class VoidhashClient<TSchema extends VoidhashSchema> {
+export class VoidhashClient {
   private _isInitialized = false;
   private analyticsFlushInFlight: Promise<void> | null = null;
   private appLifecycleSubscription: { remove: () => void } | null = null;
-  private preInitAnalyticsBuffer: Array<{ eventName: string; properties: Record<string, unknown> }> = [];
+  private preInitAnalyticsBuffer: Array<{
+    eventName: string;
+    properties: Record<string, unknown>;
+  }> = [];
   private initialDistinctId: string | null;
   private readOnly: boolean;
   private scheme: string;
-  private schema: TSchema;
+  private internalSchema: RuntimeSchema | undefined;
   private unstableSwallowErrors: boolean;
   private eventBus: EventBus;
 
   private effectRuntime: ReturnType<typeof CreateEffectRuntime>;
 
   private unitializedClient: UninitializedEffectClient;
-  private initializedClient?: InitializedEffectClient<TSchema>;
+  private initializedClient?: InitializedEffectClient;
 
   constructor(
     initialDistinctId: string | null,
     scheme: string,
-    schema: TSchema,
     baseUrl: string,
     ingestUrl: string | undefined,
     publishableKey: string,
@@ -114,12 +119,13 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     unstableSwallowErrors: boolean,
     eventBus: EventBus,
     platform: Exclude<PlatformInfo["platform"], "unknown">,
-    debug = false
+    debug = false,
+    internalSchema?: RuntimeSchema
   ) {
     this.initialDistinctId = initialDistinctId;
     this.readOnly = readOnly;
     this.scheme = scheme;
-    this.schema = schema;
+    this.internalSchema = internalSchema;
     this.unstableSwallowErrors = unstableSwallowErrors;
     this.eventBus = eventBus;
     this.effectRuntime = CreateEffectRuntime(
@@ -134,10 +140,7 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     this.unitializedClient = VoidhashEffectClient.makeUnitializedClient();
   }
 
-  private async runSideEffect(
-    operation: string,
-    effect: () => Promise<void>
-  ) {
+  private async runSideEffect(operation: string, effect: () => Promise<void>) {
     try {
       await effect();
     } catch (error) {
@@ -149,16 +152,18 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
       console.warn(`[voidhash] swallowed error in ${operation}`, error);
     }
   }
+
   /**
-   * Initializes the voidhash client.
+   * Initializes the voidhash client. Fetches the runtime schema from the
+   * server (or uses the injected internal schema if one was provided for tests).
    * @throws {FailedToInitializeNativeAdapterError} If the payment adapter fails to initialize
    */
   async init() {
     await this.runSideEffect("init", async () => {
       const initializedClient = await this.runEffect(
-        this.unitializedClient.init<TSchema>({
+        this.unitializedClient.init({
           distinctId: this.initialDistinctId ?? undefined,
-          schema: this.schema,
+          internalSchema: this.internalSchema,
         }),
         "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT"
       );
@@ -196,7 +201,10 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
         "FAILED_TO_CAPTURE_STARTUP_EVENTS"
       ).catch((error) => {
         // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
-        console.warn("[voidhash] failed to capture automatic startup analytics", error);
+        console.warn(
+          "[voidhash] failed to capture automatic startup analytics",
+          error
+        );
       });
 
       this.appLifecycleSubscription = this.effectRuntime.runSync(
@@ -217,7 +225,10 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     await this.runSideEffect("end", async () => {
       this.ensureInitialized();
       await this.flush();
-      await this.runEffect(this.initializedClient!.end(), "FAILED_TO_END_VOIDHASH_CLIENT");
+      await this.runEffect(
+        this.initializedClient!.end(),
+        "FAILED_TO_END_VOIDHASH_CLIENT"
+      );
       this.appLifecycleSubscription?.remove();
       this.appLifecycleSubscription = null;
       this._isInitialized = false;
@@ -233,16 +244,21 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
 
   /**
    * Returns currently identified customer.
-   * @returns Customer object.
    */
   async getCurrentCustomer(forceFetch = false) {
     this.ensureInitialized();
-    return this.runEffect(this.initializedClient!.getCurrentCustomer(forceFetch), "FAILED_TO_GET_CURRENT_CUSTOMER");
+    return this.runEffect(
+      this.initializedClient!.getCurrentCustomer(forceFetch),
+      "FAILED_TO_GET_CURRENT_CUSTOMER"
+    );
   }
 
   async getDistinctId() {
     this.ensureInitialized();
-    return this.runEffect(this.initializedClient!.getDistinctId(), "FAILED_TO_GET_DISTINCT_ID");
+    return this.runEffect(
+      this.initializedClient!.getDistinctId(),
+      "FAILED_TO_GET_DISTINCT_ID"
+    );
   }
 
   /**
@@ -280,47 +296,45 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
 
   /**
    * Returns feature flag evaluation results.
-   * @param flagKeys - Optional array of specific flag keys to evaluate. If omitted, evaluates all flags.
-   * @returns Feature flags evaluation result with enabled status, variant keys, and payloads.
    */
   async getFeatureFlags(flagKeys?: string[]) {
     this.ensureInitialized();
-    return this.runEffect(this.initializedClient!.getFeatureFlags(flagKeys), "FAILED_TO_GET_FEATURE_FLAGS");
+    return this.runEffect(
+      this.initializedClient!.getFeatureFlags(flagKeys),
+      "FAILED_TO_GET_FEATURE_FLAGS"
+    );
   }
 
   /**
    * Resolves the currently assigned paywall showing for a location slug.
    */
-  async getPaywallForLocation(
-    locationSlug: InferGetPaywallLocationInput<TSchema>
-  ) {
+  async getPaywallForLocation(locationSlug: LocationSlug) {
     this.ensureInitialized();
-    return this.runEffect(this.initializedClient!.getPaywallForLocation(locationSlug), "FAILED_TO_GET_PAYWALL_FOR_LOCATION");
+    return this.runEffect(
+      this.initializedClient!.getPaywallForLocation(locationSlug),
+      "FAILED_TO_GET_PAYWALL_FOR_LOCATION"
+    );
   }
 
   /**
    * Returns products available on the current platform.
-   * @throws {NotInitializedError} If the voidhash client is not initialized
-   * @throws {FailedToGetProductsError} If the payment adapter fails to get products
-   * @returns A map of product definitions to products. Each value can be null if the product is not available on the current platform.
+   * Keys are the project's product slugs (resolved via the generated
+   * `voidhash.gen.d.ts`). Values are `null` when the underlying store SDK
+   * doesn't know about that product.
    */
   async getProducts() {
     this.ensureInitialized();
-    return this.runEffect(this.initializedClient!.getProducts(), "FAILED_TO_GET_PRODUCTS");
+    return this.runEffect(
+      this.initializedClient!.getProducts(),
+      "FAILED_TO_GET_PRODUCTS"
+    );
   }
 
   /**
    * Purchases a product.
-   * @throws {NotInitializedError} Voidhash client is not initialized. Call init() before calling this method.
-   * @throws {FailedToBuyProductError} Failed to buy the product.
-   * @throws {ProductNotFoundError} Product not found on the current platform.
-   * @throws {PurchasePendingError} The purchase is pending. The purchase will be completed in the background.
-   * @throws {PurchaseCancelledError} The customer has cancelled the purchase
    */
   async purchase(
-    product: NonNullable<
-      InferGetProductResponseFromSchema<TSchema>[keyof InferGetProductResponseFromSchema<TSchema>]
-    >,
+    product: SubscriptionProduct,
     _options: {
       method?: "native";
     }
@@ -330,16 +344,23 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
       throw new ReadOnlyModePurchaseNotAllowedError();
     }
 
-    await this.runEffect(this.initializedClient!.purchase<TSchema>(product, _options), "FAILED_TO_PURCHASE");
+    await this.runEffect(
+      this.initializedClient!.purchase(product, _options),
+      "FAILED_TO_PURCHASE"
+    );
   }
 
   /**
-   * Restores purchases by reconciling pending/past store transactions and refreshing customer state.
+   * Restores purchases by reconciling pending/past store transactions and
+   * refreshing customer state.
    */
   async restorePurchases() {
     await this.runSideEffect("restorePurchases", async () => {
       this.ensureInitialized();
-      await this.runEffect(this.initializedClient!.restorePurchases(), "FAILED_TO_RESTORE_PURCHASES");
+      await this.runEffect(
+        this.initializedClient!.restorePurchases(),
+        "FAILED_TO_RESTORE_PURCHASES"
+      );
     });
   }
 
@@ -388,27 +409,23 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   // IOS only methods
   // ===============================
 
-  /**
-   * Presents the code redemption sheet.
-   * @throws {UnsupportedPlatformError} If the platform does not support the code redemption sheet
-   * @throws {VoidhashError} If the code redemption sheet fails to present
-   */
   async iosPresentCodeRedemptionSheet() {
     await this.runSideEffect("iosPresentCodeRedemptionSheet", async () => {
       this.ensureInitialized();
-      await this.runEffect(this.initializedClient!.iosPresentCodeRedemptionSheet(), "FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET");
+      await this.runEffect(
+        this.initializedClient!.iosPresentCodeRedemptionSheet(),
+        "FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET"
+      );
     });
   }
 
-  /**
-   * Shows the manage subscriptions screen.
-   * @throws {UnsupportedPlatformError} If the platform does not support the manage subscriptions screen
-   * @throws {VoidhashError} If the manage subscriptions screen fails to show
-   */
   async iosShowManageSubscriptions() {
     await this.runSideEffect("iosShowManageSubscriptions", async () => {
       this.ensureInitialized();
-      await this.runEffect(this.initializedClient!.iosShowManageSubscriptions(), "FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS");
+      await this.runEffect(
+        this.initializedClient!.iosShowManageSubscriptions(),
+        "FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS"
+      );
     });
   }
 
@@ -420,8 +437,13 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     return this.eventBus;
   }
 
-  internal_getSchema() {
-    return this.schema;
+  /**
+   * Returns the runtime schema fetched at init time. Returns `null` when the
+   * client hasn't been initialized yet. Used by hooks that need to resolve
+   * slugs to product metadata.
+   */
+  internal_getSchema(): RuntimeSchema | null {
+    return this.initializedClient?.getSchema() ?? null;
   }
 
   internal_getSuccessCallbackBaseUrl() {
@@ -440,7 +462,10 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
   }
 
   // biome-ignore lint/suspicious/noExplicitAny: Effect requires service type parameter
-  private async runEffect<T>(effect: Effect.Effect<T, unknown, any>, errorCode: string): Promise<T> {
+  private async runEffect<T>(
+    effect: Effect.Effect<T, unknown, any>,
+    errorCode: string
+  ): Promise<T> {
     const result = await this.effectRuntime.runPromiseExit(effect);
     if (Exit.isSuccess(result)) return result.value;
     throw toErrorWithMessage(errorCode, Cause.squash(result.cause));
@@ -466,3 +491,6 @@ export class VoidhashClient<TSchema extends VoidhashSchema> {
     // TODO: Implement
   }
 }
+
+/** Convenience re-export to keep `ProductSlug` reachable from this module. */
+export type { ProductSlug };
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index 3a8230e8e..0ee7d5984 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -70,8 +70,38 @@ const normalizeFeatureFlagsResponse = (
   })),
 });
 
+/**
+ * Stub error surfaced when the server-side `GET /sdk/schema` endpoint is not
+ * yet deployed (the server-side work is tracked separately per the
+ * server-first redesign plan). When the endpoint ships, this stub is replaced
+ * by a call into the generated client.
+ */
+const SCHEMA_ENDPOINT_NOT_IMPLEMENTED_MESSAGE =
+  "[voidhash] The GET /sdk/schema endpoint is not yet available on the server. " +
+  "Schema-dependent hooks (useProducts, usePurchase) will return empty data until it ships. " +
+  "See the server-first redesign plan for tracking.";
+
 const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
   sdk: {
+    /**
+     * Fetch the project's schema from the server. Called once on `Provider`
+     * mount and cached for the session. Authenticates via the publishable key
+     * (same credential the SDK uses for paywall resolution, etc.).
+     *
+     * TODO(server): wire up `client.sdkGetSchema(...)` once the server endpoint
+     * is implemented. For now this returns an empty schema and logs once so
+     * the SDK remains usable while the backend work is in flight.
+     */
+    getSchema: (_request: { headers: ReactNativeSdkHeaders }) =>
+      Effect.gen(function* getSchema() {
+        yield* Effect.logWarning(SCHEMA_ENDPOINT_NOT_IMPLEMENTED_MESSAGE);
+        return {
+          version: "",
+          products: {} as Readonly<Record<string, never>>,
+          locations: {} as Readonly<Record<string, never>>,
+          perks: {} as Readonly<Record<string, never>>,
+        };
+      }),
     evaluateFeatureFlags: (request: {
       headers: ReactNativeSdkHeaders;
       payload: EvaluateFeatureFlagsBody;
diff --git a/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts b/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
index afda9a1a9..985eb068f 100644
--- a/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
@@ -7,8 +7,7 @@ import type { StorekitProduct } from "../../specs/ios/StorekitProduct.nitro";
 import type { StorekitTransaction } from "../../specs/ios/StorekitTransaction.nitro";
 import { Product, type SubscriptionProduct } from "../entities/product";
 import { Transaction } from "../entities/transaction";
-import type { ExtractSchemaProductDefinitions, VoidhashSchema } from "../schema";
-import { ProductDefinition } from "../schema/products/base";
+import type { RuntimeProductDefinition } from "../schema/runtime";
 import {
   FailedToAcknowledgePurchaseError,
   FailedToBuyProductError,
@@ -187,11 +186,8 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
     });
   },
 
-  getProducts<
-    TSchema extends VoidhashSchema,
-    TDefinedProducts extends ExtractSchemaProductDefinitions<TSchema>,
-  >(
-    productDefinitions: TDefinedProducts
+  getProducts(
+    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
   ): Effect.Effect<
     Product[],
     NativeAdapterNotInitializedError | FailedToGetProductsError,
@@ -206,23 +202,21 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         );
       }
 
-      const productDefinitionsArray = Object.values(
-        productDefinitions
-      ) as TDefinedProducts[keyof TDefinedProducts][];
+      const productDefinitionsArray = Object.values(productDefinitions);
 
-      const getProductId = (
-        productDefinition: TDefinedProducts[keyof TDefinedProducts]
-      ) => productDefinition.configuration.providers.appleAppStore?.productId;
+      const getProductId = (productDefinition: RuntimeProductDefinition) =>
+        productDefinition.configuration.providers.appleAppStore?.productId;
 
       const productIds = productDefinitionsArray
         .map((productDefinition) => {
-          if (productDefinition instanceof ProductDefinition) {
-            return {
-              id: getProductId(productDefinition),
-              slug: productDefinition.slug,
-            };
+          const id = getProductId(productDefinition);
+          if (!id) {
+            return null;
           }
-          return null;
+          return {
+            id,
+            slug: productDefinition.slug,
+          };
         })
         .filter(
           (slugIdPair): slugIdPair is { slug: string; id: string } =>
@@ -264,15 +258,18 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
       });
 
       return yield* Effect.succeed(
-        nativeProducts.map((nativeProduct) =>
-          mapStorekitProductToProduct(
-            productDefinitionsArray.find(
+        nativeProducts
+          .map((nativeProduct) => {
+            const matched = productDefinitionsArray.find(
               (productDefinition) =>
                 getProductId(productDefinition) === nativeProduct.id
-            ) as TDefinedProducts[keyof TDefinedProducts],
-            nativeProduct
-          )
-        )
+            );
+            if (!matched) {
+              return null;
+            }
+            return mapStorekitProductToProduct(matched, nativeProduct);
+          })
+          .filter((p): p is Product => p !== null)
       );
     });
   },
@@ -403,11 +400,8 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
 });
 
 // Helper functions for mapping StoreKit objects to our domain objects
-function mapStorekitProductToProduct<
-  TSchema extends VoidhashSchema,
-  TDefinedProducts extends ExtractSchemaProductDefinitions<TSchema>,
->(
-  productDefinition: TDefinedProducts[keyof TDefinedProducts],
+function mapStorekitProductToProduct(
+  productDefinition: RuntimeProductDefinition,
   nativeProduct: StorekitProduct
 ): Product {
   return new Product(
diff --git a/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts b/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
index fafbf78de..ca1921ff7 100644
--- a/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
@@ -7,11 +7,7 @@ import type { GoogleBillingProductDetail } from "../../specs/android/GoogleBilli
 import type { GoogleBillingPurchase } from "../../specs/android/GoogleBillingPurchase.nitro";
 import { Product, type SubscriptionProduct } from "../entities/product";
 import { Transaction } from "../entities/transaction";
-import {
-  type ExtractSchemaProductDefinitions,
-  ProductDefinition,
-  type VoidhashSchema,
-} from "../schema";
+import type { RuntimeProductDefinition } from "../schema/runtime";
 import {
   FailedToAcknowledgePurchaseError,
   FailedToBuyProductError,
@@ -195,11 +191,8 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
     return Effect.succeed([]);
   },
 
-  getProducts<
-    TSchema extends VoidhashSchema,
-    TDefinedProducts extends ExtractSchemaProductDefinitions<TSchema>,
-  >(
-    productDefinitions: TDefinedProducts
+  getProducts(
+    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
   ): Effect.Effect<
     Product[],
     NativeAdapterNotInitializedError | FailedToGetProductsError,
@@ -214,15 +207,13 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         );
       }
 
-      const productIds = Object.values(productDefinitions).map((product) => {
-        if (product instanceof ProductDefinition) {
-          return {
-            id: product.configuration.providers.googlePlay?.productId,
-            slug: product.slug,
-          };
-        }
-        return null;
-      });
+      const productIds = Object.values(productDefinitions)
+        .map((product) => {
+          const id = product.configuration.providers.googlePlay?.productId;
+          if (!id) return null;
+          return { id, slug: product.slug };
+        })
+        .filter((p): p is { id: string; slug: string } => p !== null);
 
       const inappProducts = yield* Effect.tryPromise({
         catch: (error) =>
@@ -233,9 +224,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         try: () =>
           GoogleBilling!.getItemsByType(
             "inapp",
-            productIds
-              .map((pair) => pair?.id)
-              .filter((id): id is string => id !== null)
+            productIds.map((pair) => pair.id)
           ),
       });
 
@@ -248,9 +237,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         try: () =>
           GoogleBilling!.getItemsByType(
             "subs",
-            productIds
-              .map((pair) => pair?.id)
-              .filter((id): id is string => id !== null)
+            productIds.map((pair) => pair.id)
           ),
       });
 
@@ -258,8 +245,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
       return yield* Effect.succeed(
         allProducts.map((nativeProduct) =>
           mapGoogleBillingProductToProduct(
-            productIds.find((pair) => pair?.id === nativeProduct.id)?.slug ??
-              "",
+            productIds.find((pair) => pair.id === nativeProduct.id)?.slug ?? "",
             nativeProduct
           )
         )
diff --git a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
index b93d4987d..f6b6bdd74 100644
--- a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
@@ -2,10 +2,7 @@ import { ServiceMap, type Effect } from "effect";
 
 import type { Product, SubscriptionProduct } from "../entities/product";
 import type { Transaction } from "../entities/transaction";
-import type {
-  ExtractSchemaProductDefinitions,
-  VoidhashSchema,
-} from "../schema";
+import type { RuntimeProductDefinition } from "../schema/runtime";
 import type {
   FailedToAcknowledgePurchaseError,
   FailedToBuyProductError,
@@ -22,18 +19,23 @@ import type {
   UserCancelledError,
 } from "./errors";
 
-export class PaymentAdapter extends ServiceMap.Service<PaymentAdapter, {
+export class PaymentAdapter extends ServiceMap.Service<
+  PaymentAdapter,
+  {
     initConnection(
       onPurchase?: (transaction: Transaction) => void
     ): Effect.Effect<void, FailedToInitializeNativeAdapterError>;
 
     endConnection(): Effect.Effect<void, FailedToEndNativeAdapterError, never>;
 
-    getProducts<
-      TSchema extends VoidhashSchema,
-      TDefinedProducts extends ExtractSchemaProductDefinitions<TSchema>,
-    >(
-      productDefinitions: TDefinedProducts
+    /**
+     * Fetch products from the underlying native store. Receives the product
+     * definitions exactly as the server returned them at SDK init time (keyed
+     * by slug). Implementations resolve the platform-specific store productId
+     * from the definition's `configuration.providers.*`.
+     */
+    getProducts(
+      productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
     ): Effect.Effect<
       Product[],
       NativeAdapterNotInitializedError | FailedToGetProductsError,
@@ -80,83 +82,5 @@ export class PaymentAdapter extends ServiceMap.Service<PaymentAdapter, {
       FailedToShowManageSubscriptionsError,
       never
     >;
-  }>()("rn-voidhash/PaymentAdapter") {}
-
-// export interface PaymentAdapter {
-//   initConnection(
-//     onPurchase?: (transaction: Transaction) => void
-//   ): Effect.Effect<void, FailedToInitializeNativeAdapterError>;
-
-//   endConnection(): Effect.Effect<void, FailedToEndNativeAdapterError, never>;
-
-//   getProducts<
-//     TSchema extends VoidhashSchema,
-//     TDefinedProducts extends ExtractSchemaProductDefinitions<TSchema>
-//   >(
-//     productDefinitions: TDefinedProducts
-//   ): Effect.Effect<
-//     Product[],
-//     NativeAdapterNotInitializedError | FailedToGetProductsError,
-//     never
-//   >;
-
-//   buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
-//     product: TSubscriptionProduct,
-//     quantity?: number,
-//     appAccountToken?: string
-//   ): Effect.Effect<
-//     Transaction,
-//     | UserCancelledError
-//     | PurchasePendingError
-//     | NativeAdapterNotInitializedError
-//     | ProductNotFoundError
-//     | FailedToBuyProductError,
-//     never
-//   >;
-
-//   acknowledgePurchase(
-//     transaction: Transaction
-//   ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never>;
-
-//   getPurchaseHistory(
-//     onlyIncludeActiveItems?: boolean
-//   ): Effect.Effect<Transaction[], GetPurchaseHistoryError, never>;
-
-//   getPendingTransactions(): Effect.Effect<
-//     Transaction[],
-//     GetPendingTransactionsError,
-//     never
-//   >;
-
-//   // Platform specific methods
-//   presentCodeRedemptionSheet?(): Effect.Effect<
-//     void,
-//     FailedToPresentCodeRedemptionSheetError,
-//     never
-//   >;
-
-//   showManageSubscriptions?(): Effect.Effect<
-//     void,
-//     FailedToShowManageSubscriptionsError,
-//     never
-//   >;
-// }
-
-// export function createPaymentAdapter(
-//   platformProvider: PlatformProvider,
-//   logger: Logger
-// ): PaymentAdapter {
-//   const platform = platformProvider.getPlatform();
-
-//   if (platform === 'ios') {
-//     const { AppStoreAdapter } = require('./app-store-adapter');
-//     return new AppStoreAdapter(logger);
-//   }
-
-//   if (platform === 'android') {
-//     const { GooglePlayAdapter } = require('./google-play-adapter');
-//     return new GooglePlayAdapter();
-//   }
-
-//   throw new Error(`Unsupported platform: ${platform}`);
-// }
+  }
+>()("rn-voidhash/PaymentAdapter") {}
diff --git a/libraries/react-native/src/core/schema/builder.ts b/libraries/react-native/src/core/schema/builder.ts
deleted file mode 100644
index 23d8cef79..000000000
--- a/libraries/react-native/src/core/schema/builder.ts
+++ /dev/null
@@ -1,139 +0,0 @@
-import { SCHEMA_KIND, SchemaKind } from "./constants";
-import { PaywallLocationDefinition } from "./paywall-location";
-import {
-  type SubscriptionDefinitionProperties,
-  subscription as createSubscription,
-} from "./products/subscription";
-import type {
-  DefinedPerks,
-  DefinedProviders,
-  InferProductConfigurationPerks,
-  InferProductConfigurationProviders,
-} from "./types";
-
-/**
- * Configuration for creating a schema configuration
- */
-export interface SchemaConfig<
-  TProviders extends DefinedProviders,
-  TPerks extends DefinedPerks,
-> {
-  providers: TProviders;
-  perks: TPerks;
-}
-
-/**
- * Simplified subscription configuration that doesn't require callback functions
- */
-export interface SubscriptionConfig<
-  TProviders extends DefinedProviders,
-  TPerks extends DefinedPerks,
-> {
-  name: string;
-  perks: Omit<InferProductConfigurationPerks<TPerks>, "_">;
-  providers: Omit<InferProductConfigurationProviders<TProviders>, "_">;
-}
-
-export interface LocationConfig {
-  description?: string;
-  name: string;
-}
-
-/**
- * Schema configuration object with access to providers, perks, and product builders
- */
-export interface SchemaConfiguration<
-  TProviders extends DefinedProviders,
-  TPerks extends DefinedPerks,
-> {
-  readonly [SCHEMA_KIND]: typeof SchemaKind.SchemaConfiguration;
-  providers: TProviders;
-  perks: TPerks;
-  subscription: (
-    slug: string,
-    subscriptionConfig: SubscriptionConfig<TProviders, TPerks>
-  ) => ReturnType<typeof createSubscription>;
-  location: <TSlug extends string>(
-    slug: TSlug,
-    locationConfig: LocationConfig
-  ) => PaywallLocationDefinition<TSlug>;
-}
-
-/**
- * Creates a schema configuration with improved DX.
- * Providers and perks are defined once, then products reference them directly.
- * Export the configuration to access providers and perks later.
- *
- * @example
- * ```typescript
- * export const schema = schemaConfiguration({
- *   providers: {
- *     googlePlay: true,
- *     appleAppStore: true
- *   },
- *   perks: {
- *     allAccess: unlockablePerk('all-access', { name: 'All Access' })
- *   }
- * });
- *
- * export const monthlySub = schema.subscription('monthly_sub', {
- *   name: 'Monthly',
- *   perks: { allAccess: true },
- *   providers: {
- *     googlePlay: { productId: 'com.example.monthly' },
- *     appleAppStore: { productId: 'monthly_sub' }
- *   }
- * });
- *
- * // Access perks later
- * const allAccessPerk = schema.perks.allAccess;
- * ```
- */
-export function schemaConfiguration<
-  TProviders extends DefinedProviders,
-  TPerks extends DefinedPerks,
->(
-  config: SchemaConfig<TProviders, TPerks>
-): SchemaConfiguration<TProviders, TPerks> {
-  const { providers, perks } = config;
-
-  return {
-    [SCHEMA_KIND]: SchemaKind.SchemaConfiguration,
-    providers,
-    perks,
-    /**
-     * Define a subscription product
-     */
-    subscription: (
-      slug: string,
-      subscriptionConfig: SubscriptionConfig<TProviders, TPerks>
-    ) =>
-      createSubscription(slug, (s) => {
-        const perksConfig = s.configurePerks(
-          perks,
-          () => subscriptionConfig.perks
-        );
-        const providersConfig = s.configureProviders(
-          providers,
-          () => subscriptionConfig.providers
-        );
-
-        return {
-          name: subscriptionConfig.name,
-          perks: perksConfig,
-          providers: providersConfig,
-        } as SubscriptionDefinitionProperties & {
-          perks: InferProductConfigurationPerks<TPerks>;
-          providers: InferProductConfigurationProviders<TProviders>;
-        };
-      }),
-    location: <TSlug extends string>(
-      slug: TSlug,
-      locationConfig: LocationConfig
-    ) =>
-      new PaywallLocationDefinition(slug, {
-        description: locationConfig.description,
-        name: locationConfig.name,
-      }),
-  };
-}
diff --git a/libraries/react-native/src/core/schema/constants.ts b/libraries/react-native/src/core/schema/constants.ts
deleted file mode 100644
index d74d9d1f9..000000000
--- a/libraries/react-native/src/core/schema/constants.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-/**
- * Symbols used to identify schema entity types at runtime.
- * These allow the CLI to reliably detect entity types without duck typing.
- */
-
-export const SCHEMA_KIND = Symbol.for("voidhash.schema.kind");
-
-export const SchemaKind = {
-  Perk: "perk",
-  PaywallLocation: "paywall-location",
-  Product: "product",
-  SchemaConfiguration: "schema-configuration",
-} as const;
-
-export type SchemaKindValue = (typeof SchemaKind)[keyof typeof SchemaKind];
diff --git a/libraries/react-native/src/core/schema/definitions.ts b/libraries/react-native/src/core/schema/definitions.ts
deleted file mode 100644
index 950f4daf4..000000000
--- a/libraries/react-native/src/core/schema/definitions.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import type { DefinedPerks, DefinedProviders } from "./types";
-
-export function paymentProviders<TConfig extends DefinedProviders>(
-  config: TConfig
-): Readonly<TConfig> {
-  return config;
-}
-
-export function definePerks<TConfig extends DefinedPerks>(
-  config: TConfig
-): Readonly<TConfig> {
-  return config;
-}
diff --git a/libraries/react-native/src/core/schema/index.ts b/libraries/react-native/src/core/schema/index.ts
index 5d4b28a3b..bb7af8240 100644
--- a/libraries/react-native/src/core/schema/index.ts
+++ b/libraries/react-native/src/core/schema/index.ts
@@ -1,10 +1,2 @@
-export * from "./builder";
-export * from "./constants";
-export * from "./perk";
-export * from "./paywall-location";
-export * from "./products/base";
-export {
-  type SubscriptionDefinitionProperties,
-  SubscriptionProductDefinition,
-} from "./products/subscription";
-export * from "./types";
+export * from "./registry";
+export * from "./runtime";
diff --git a/libraries/react-native/src/core/schema/paywall-location.ts b/libraries/react-native/src/core/schema/paywall-location.ts
deleted file mode 100644
index 3fa736b09..000000000
--- a/libraries/react-native/src/core/schema/paywall-location.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { SCHEMA_KIND, SchemaKind } from "./constants";
-
-export interface PaywallLocationDefinitionProperties {
-  description?: string;
-  name: string;
-}
-
-export class PaywallLocationDefinition<TSlug extends string = string> {
-  readonly [SCHEMA_KIND] = SchemaKind.PaywallLocation;
-  slug: TSlug;
-  name: string;
-  description: string | null;
-
-  constructor(slug: TSlug, params: PaywallLocationDefinitionProperties) {
-    this.slug = slug;
-    this.name = params.name;
-    this.description = params.description ?? null;
-  }
-}
diff --git a/libraries/react-native/src/core/schema/perk.ts b/libraries/react-native/src/core/schema/perk.ts
deleted file mode 100644
index b7eb355dc..000000000
--- a/libraries/react-native/src/core/schema/perk.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-import { SCHEMA_KIND, SchemaKind } from "./constants";
-
-export abstract class PerkDefinition {
-  readonly [SCHEMA_KIND] = SchemaKind.Perk;
-  slug: string;
-  name: string;
-  constructor(slug: string, params: { name: string }) {
-    this.slug = slug;
-    this.name = params.name;
-  }
-}
-
-export class UnlockablePerkDefinition extends PerkDefinition {}
-
-export const unlockablePerk = (
-  slug: string,
-  params: { name: string }
-): UnlockablePerkDefinition => new UnlockablePerkDefinition(slug, params);
diff --git a/libraries/react-native/src/core/schema/products/base.ts b/libraries/react-native/src/core/schema/products/base.ts
deleted file mode 100644
index 19af2b2b4..000000000
--- a/libraries/react-native/src/core/schema/products/base.ts
+++ /dev/null
@@ -1,106 +0,0 @@
-import { SCHEMA_KIND, SchemaKind } from "../constants";
-import type {
-  AnyDefinedPerks,
-  AnyDefinedProviders,
-  InferProductConfigurationPerks,
-  InferProductConfigurationProviders,
-  ProductDefinitionConfiguration,
-  ProductDefinitionConfigurePerksFn,
-  ProductDefinitionConfigureProvidersFn,
-} from "../types";
-
-export abstract class ProductDefinition<
-  TType,
-  TProductProperties extends Record<string, unknown>,
-  TProductDefinitionConfiguration extends ProductDefinitionConfiguration<
-    AnyDefinedProviders,
-    AnyDefinedPerks
-  >,
-  // TProductDefinitionConfiguration extends ReturnType<
-  //   SubscriptionProductDefinitionConfigurationFn<TProductProperties>
-  // >,
-> {
-  readonly [SCHEMA_KIND] = SchemaKind.Product;
-  type: TType;
-  slug: string;
-  private _properties: TProductProperties;
-  private _configuration: TProductDefinitionConfiguration;
-
-  constructor(
-    type: TType,
-    slug: string,
-    properties: TProductProperties,
-    configuration: TProductDefinitionConfiguration
-  ) {
-    this.type = type;
-    this.slug = slug;
-    this._properties = properties;
-    this._configuration = configuration;
-  }
-
-  get properties(): TProductProperties {
-    return this._properties;
-  }
-
-  get configuration(): TProductDefinitionConfiguration {
-    return this._configuration;
-  }
-}
-
-// export class ProductPerkConfiguration<
-//   TPerks extends DefinedPerks<Record<string, PerkDefinition>>,
-// > {
-//   private _perks: TPerks;
-//   private _options: ProductPerkConfigurationOptions<TPerks>;
-
-//   constructor(perks: TPerks, options: ProductPerkConfigurationOptions<TPerks>) {
-//     this._perks = perks;
-//     this._options = options;
-//   }
-
-//   get perks(): TPerks {
-//     return this._perks;
-//   }
-
-//   get options(): ProductPerkConfigurationOptions<TPerks> {
-//     return this._options;
-//   }
-// }
-
-export function productConfigurationFactory() {
-  const configureProviders: ProductDefinitionConfigureProvidersFn = (
-    paymentProviders,
-    configureFn
-  ) => {
-    const configuration = configureFn() as InferProductConfigurationProviders<
-      typeof paymentProviders
-    >;
-    configuration._ = {
-      paymentProviders,
-    };
-    return configuration;
-  };
-
-  const configurePerks: ProductDefinitionConfigurePerksFn = (
-    perks,
-    configureFn
-  ) => {
-    const configuration = configureFn() as InferProductConfigurationPerks<
-      typeof perks
-    >;
-    configuration._ = {
-      perks,
-    };
-    return {
-      ...configuration,
-      _: {
-        perks,
-      },
-    };
-  };
-
-  return {
-    configurePerks,
-    configureProviders,
-  };
-}
diff --git a/libraries/react-native/src/core/schema/products/subscription.ts b/libraries/react-native/src/core/schema/products/subscription.ts
deleted file mode 100644
index 04700905f..000000000
--- a/libraries/react-native/src/core/schema/products/subscription.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-import type {
-  DefinedPerks,
-  DefinedProviders,
-  InferProductDefinitionConfigurationFn,
-} from "../types";
-import { ProductDefinition, productConfigurationFactory } from "./base";
-
-export interface SubscriptionDefinitionProperties
-  extends Record<string, unknown> {
-  name: string;
-}
-
-const subscriptionConfigurationFactory = productConfigurationFactory();
-
-export class SubscriptionProductDefinition<
-  TDefinitionProperties extends SubscriptionDefinitionProperties,
-  TDefinedProviders extends DefinedProviders = DefinedProviders,
-  TDefinedPerks extends DefinedPerks = DefinedPerks,
-> extends ProductDefinition<
-  "subscription",
-  TDefinitionProperties,
-  ReturnType<
-    InferProductDefinitionConfigurationFn<TDefinedProviders, TDefinedPerks>
-  >
-> {}
-
-export function subscription<
-  TDefinedProviders extends DefinedProviders,
-  TDefinedPerks extends DefinedPerks,
->(
-  slug: string,
-  configurationFn: InferProductDefinitionConfigurationFn<
-    TDefinedProviders,
-    TDefinedPerks,
-    SubscriptionDefinitionProperties
-  >
-) {
-  const configuration = configurationFn({
-    configurePerks: subscriptionConfigurationFactory.configurePerks,
-    configureProviders: subscriptionConfigurationFactory.configureProviders,
-  });
-
-  const properties: SubscriptionDefinitionProperties = {
-    name: configuration.name,
-  };
-
-  return new SubscriptionProductDefinition<
-    SubscriptionDefinitionProperties,
-    TDefinedProviders,
-    TDefinedPerks
-  >("subscription", slug, properties, configuration);
-}
diff --git a/libraries/react-native/src/core/schema/registry.ts b/libraries/react-native/src/core/schema/registry.ts
new file mode 100644
index 000000000..79da267d7
--- /dev/null
+++ b/libraries/react-native/src/core/schema/registry.ts
@@ -0,0 +1,49 @@
+/**
+ * Schema registry — the mechanism by which a generated `voidhash.gen.d.ts`
+ * teaches the SDK about the project-specific schema (product slugs, paywall
+ * location slugs, perk slugs) defined on the server.
+ *
+ * Usage in user code: the user runs `voidhash types generate`, which writes a
+ * declaration file augmenting this interface. Once that file is part of the
+ * project's TypeScript compilation, hooks like `usePaywallByLocation(slug)`
+ * autocomplete the literal union of valid slugs.
+ *
+ * When no augmentation is present (e.g. before the first generate, or in
+ * isolated tests), the resolved types degrade gracefully to `string`.
+ */
+
+// biome-ignore lint/suspicious/noEmptyInterface: intentional - user code augments this
+export interface VoidhashRegister {}
+
+/**
+ * Shape required of the augmented schema. Generated `voidhash.gen.d.ts`
+ * declares `interface VoidhashRegister { schema: { products: ...; locations: ...; perks: ... } }`.
+ */
+export interface VoidhashRegisterShape {
+  schema: {
+    products: string;
+    locations: string;
+    perks: string;
+  };
+}
+
+type Resolve<K extends keyof VoidhashRegisterShape["schema"]> =
+  VoidhashRegister extends {
+    schema: { [P in K]: infer V extends string };
+  }
+    ? // When the augmentation declares an empty union (`never`) — e.g. the
+      // placeholder `voidhash.gen.d.ts` written before the first real
+      // generation — fall back to `string` so user code still compiles.
+      [V] extends [never]
+      ? string
+      : V
+    : string;
+
+/** Resolves to the literal union of product slugs declared on the server, or `string` when the .d.ts isn't loaded. */
+export type ProductSlug = Resolve<"products">;
+
+/** Resolves to the literal union of paywall location slugs declared on the server, or `string` when the .d.ts isn't loaded. */
+export type LocationSlug = Resolve<"locations">;
+
+/** Resolves to the literal union of perk slugs declared on the server, or `string` when the .d.ts isn't loaded. */
+export type PerkSlug = Resolve<"perks">;
diff --git a/libraries/react-native/src/core/schema/runtime.ts b/libraries/react-native/src/core/schema/runtime.ts
new file mode 100644
index 000000000..e0d8d07d7
--- /dev/null
+++ b/libraries/react-native/src/core/schema/runtime.ts
@@ -0,0 +1,65 @@
+/**
+ * Plain-data shapes representing the schema as fetched from the server at
+ * runtime. After the server-first redesign, these replace the old DSL-built
+ * `ProductDefinition` / `PaywallLocationDefinition` / `PerkDefinition` classes.
+ *
+ * The SDK fetches a `RuntimeSchema` on `Provider` mount and uses it for things
+ * like resolving product slugs to native store productIds when calling
+ * StoreKit / Google Play.
+ */
+
+export interface RuntimeAppleAppStoreProductConfiguration {
+  readonly productId: string;
+}
+
+export interface RuntimeGooglePlayProductConfiguration {
+  readonly productId: string;
+  readonly basePlanId?: string;
+}
+
+export interface RuntimeProductProviders {
+  readonly appleAppStore?: RuntimeAppleAppStoreProductConfiguration;
+  readonly googlePlay?: RuntimeGooglePlayProductConfiguration;
+}
+
+export interface RuntimeProductDefinition {
+  readonly slug: string;
+  readonly type: "subscription";
+  readonly properties: { readonly name: string };
+  readonly configuration: {
+    readonly providers: RuntimeProductProviders;
+    readonly perks: Readonly<Record<string, true>>;
+  };
+}
+
+export interface RuntimePaywallLocationDefinition {
+  readonly slug: string;
+  readonly name: string;
+  readonly description: string | null;
+}
+
+export interface RuntimePerkDefinition {
+  readonly slug: string;
+  readonly name: string;
+}
+
+/**
+ * The full schema as fetched from the server. Keyed by slug.
+ *
+ * The `version` is a sha256 hash of the schema state on the server and is
+ * what `voidhash types check` and the dev-mode runtime warning compare
+ * against the generated `.d.ts` header.
+ */
+export interface RuntimeSchema {
+  readonly version: string;
+  readonly products: Readonly<Record<string, RuntimeProductDefinition>>;
+  readonly locations: Readonly<Record<string, RuntimePaywallLocationDefinition>>;
+  readonly perks: Readonly<Record<string, RuntimePerkDefinition>>;
+}
+
+export const createEmptyRuntimeSchema = (): RuntimeSchema => ({
+  version: "",
+  products: {},
+  locations: {},
+  perks: {},
+});
diff --git a/libraries/react-native/src/core/schema/types.ts b/libraries/react-native/src/core/schema/types.ts
deleted file mode 100644
index 62eb0adc7..000000000
--- a/libraries/react-native/src/core/schema/types.ts
+++ /dev/null
@@ -1,234 +0,0 @@
-import type { SubscriptionProduct } from "../entities/product";
-import type { PerkDefinition } from "./perk";
-import type { PaywallLocationDefinition } from "./paywall-location";
-import type { ProductDefinition } from "./products/base";
-
-export type Simplify<T> = {
-  [K in keyof T]: T[K];
-} & {};
-
-// ===============================
-// Payment Providers
-// ===============================
-
-export interface GooglePlayProductConfiguration {
-  /**
-   * The unique identifier for the in-app product or subscription as configured in the Google Play Console.
-   * For subscriptions, this is the subscription product ID.
-   */
-  productId: string;
-}
-
-export type GooglePlaySubscriptionProductConfiguration =
-  GooglePlayProductConfiguration & {
-    /**
-     * The unique identifier for the base plan within a subscription product in the Google Play Console.
-     * This field is only relevant for subscription products. For one-time products, leave undefined.
-     */
-    basePlanId?: string;
-  };
-
-export interface AppleAppStoreProductConfiguration {
-  /**
-   * The unique identifier for the in-app purchase or subscription as configured in App Store Connect.
-   */
-  productId: string;
-}
-
-export interface PaymentProviders {
-  googlePlay: {
-    definition: true;
-    productTypes: {
-      subscription: GooglePlaySubscriptionProductConfiguration;
-    };
-  };
-  appleAppStore: {
-    definition: true;
-    productTypes: {
-      subscription: AppleAppStoreProductConfiguration;
-    };
-  };
-}
-
-// ===============================
-// Definitions
-// ===============================
-
-export type DefinedProviders = {
-  [K in keyof PaymentProviders]?: PaymentProviders[K]["definition"];
-};
-
-export type DefinedPerks = Record<string, PerkDefinition>;
-
-// ===============================
-// Products
-// ===============================
-
-export interface BaseProductDefinitionProperties {
-  name: string;
-}
-
-export type InferProductConfigurationProviders<
-  TDefinedProviders extends DefinedProviders,
-> = {
-  [K in keyof TDefinedProviders]: TDefinedProviders[K] extends true
-    ? K extends keyof PaymentProviders
-      ? PaymentProviders[K]["productTypes"]["subscription"]
-      : never
-    : never;
-} & {
-  _: {
-    paymentProviders: TDefinedProviders;
-  };
-};
-
-export type InferProductConfigurationPerks<TDefinedPerks extends DefinedPerks> =
-  {
-    [K in keyof TDefinedPerks]?: TDefinedPerks[K] extends PerkDefinition
-      ? true
-      : never;
-  } & {
-    _: {
-      perks: TDefinedPerks;
-    };
-  };
-
-export type AnyDefinedProviders = DefinedProviders;
-export type AnyDefinedPerks = DefinedPerks;
-export type AnyPaywallLocationDefinition = PaywallLocationDefinition<string>;
-export type AnyProductDefinition = ProductDefinition<
-  // biome-ignore lint/suspicious/noExplicitAny: ok
-  any,
-  // biome-ignore lint/suspicious/noExplicitAny: ok
-  Record<string, any>,
-  // biome-ignore lint/suspicious/noExplicitAny: ok
-  any
->;
-
-/**
- * Type representing any schema configuration object.
- * Schema configurations contain providers and perks definitions,
- * along with methods to create product definitions.
- */
-export interface AnySchemaConfiguration {
-  providers: AnyDefinedProviders;
-  perks: AnyDefinedPerks;
-  // biome-ignore lint/suspicious/noExplicitAny: needed for flexibility
-  subscription: (...args: any[]) => AnyProductDefinition;
-  // biome-ignore lint/suspicious/noExplicitAny: needed for flexibility
-  location: (...args: any[]) => AnyPaywallLocationDefinition;
-}
-
-export interface ProductDefinitionConfiguration<
-  TDefinedProviders extends DefinedProviders,
-  TDefinedPerks extends DefinedPerks,
-> {
-  providers: InferProductConfigurationProviders<TDefinedProviders>;
-  perks: InferProductConfigurationPerks<TDefinedPerks>;
-}
-
-export type ProductDefinitionConfigureProvidersFn = <
-  TDefinedProviders extends DefinedProviders,
->(
-  providers: TDefinedProviders,
-  configureFn: () => Omit<
-    InferProductConfigurationProviders<TDefinedProviders>,
-    "_"
-  >
-) => InferProductConfigurationProviders<TDefinedProviders>;
-
-export type ProductDefinitionConfigurePerksFn = <
-  TDefinedPerks extends DefinedPerks,
->(
-  perks: TDefinedPerks,
-  configureFn: () => Omit<InferProductConfigurationPerks<TDefinedPerks>, "_">
-) => InferProductConfigurationPerks<TDefinedPerks>;
-
-export type InferProductDefinitionConfigurationFn<
-  TDefinedProviders extends DefinedProviders = DefinedProviders,
-  TDefinedPerks extends DefinedPerks = DefinedPerks,
-  TDefinitionProperties extends Record<string, unknown> = Record<
-    string,
-    unknown
-  >,
-> = (funs: {
-  configureProviders: ProductDefinitionConfigureProvidersFn;
-  configurePerks: ProductDefinitionConfigurePerksFn;
-}) => ProductDefinitionConfiguration<TDefinedProviders, TDefinedPerks> &
-  TDefinitionProperties;
-
-// ===============================
-// Get products
-// ===============================
-
-export type InferGetProductResponseFromSchema<TSchema extends VoidhashSchema> =
-  Simplify<{
-    [K in ExtractSchemaProductKeys<TSchema>]: TSchema[K] extends AnyProductDefinition
-      ? TSchema[K]["type"] extends "subscription"
-        ? SubscriptionProduct | null
-        : never
-      : never;
-  }>;
-
-// ===============================
-// Schema
-// ===============================
-
-/**
- * A Voidhash schema can contain:
- * - Product definitions (subscriptions, one-time purchases, etc.)
- * - Schema configuration objects (which contain providers and perks)
- */
-export type VoidhashSchema = Record<
-  string,
-  AnyProductDefinition | AnySchemaConfiguration | AnyPaywallLocationDefinition
->;
-
-export type ExtractSchemaKeys<TSchema extends VoidhashSchema> = keyof TSchema;
-
-export type ExtractSchemaProductKeys<TSchema extends VoidhashSchema> = {
-  [K in keyof TSchema]: TSchema[K] extends AnyProductDefinition ? K : never;
-}[keyof TSchema];
-
-export type ExtractSchemaProductDefinitions<TSchema extends VoidhashSchema> = {
-  [K in ExtractSchemaProductKeys<TSchema>]: TSchema[K] extends AnyProductDefinition
-    ? TSchema[K]
-    : never;
-};
-
-export type ExtractSchemaConfigurationKeys<TSchema extends VoidhashSchema> = {
-  [K in keyof TSchema]: TSchema[K] extends AnySchemaConfiguration ? K : never;
-}[keyof TSchema];
-
-export type ExtractSchemaConfigurations<TSchema extends VoidhashSchema> = {
-  [K in ExtractSchemaConfigurationKeys<TSchema>]: TSchema[K] extends AnySchemaConfiguration
-    ? TSchema[K]
-    : never;
-};
-
-export type ExtractSchemaPaywallLocationKeys<TSchema extends VoidhashSchema> = {
-  [K in keyof TSchema]: TSchema[K] extends AnyPaywallLocationDefinition
-    ? K
-    : never;
-}[keyof TSchema];
-
-export type ExtractSchemaPaywallLocationDefinitions<
-  TSchema extends VoidhashSchema,
-> = {
-  [K in ExtractSchemaPaywallLocationKeys<TSchema>]: TSchema[K] extends AnyPaywallLocationDefinition
-    ? TSchema[K]
-    : never;
-};
-
-export type ExtractSchemaPaywallLocationSlugs<
-  TSchema extends VoidhashSchema,
-> = {
-  [K in ExtractSchemaPaywallLocationKeys<TSchema>]: TSchema[K] extends AnyPaywallLocationDefinition
-    ? TSchema[K]["slug"]
-    : never;
-}[ExtractSchemaPaywallLocationKeys<TSchema>];
-
-export type InferGetPaywallLocationInput<TSchema extends VoidhashSchema> =
-  [ExtractSchemaPaywallLocationSlugs<TSchema>] extends [never]
-    ? string
-    : ExtractSchemaPaywallLocationSlugs<TSchema>;
diff --git a/libraries/react-native/src/core/schema/utils.ts b/libraries/react-native/src/core/schema/utils.ts
deleted file mode 100644
index 90980acd7..000000000
--- a/libraries/react-native/src/core/schema/utils.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-import { ProductDefinition } from "./products/base";
-import { PaywallLocationDefinition } from "./paywall-location";
-import type {
-  AnyPaywallLocationDefinition,
-  AnySchemaConfiguration,
-  ExtractSchemaConfigurations,
-  ExtractSchemaPaywallLocationDefinitions,
-  ExtractSchemaProductDefinitions,
-  VoidhashSchema,
-} from "./types";
-
-export function extractProductDefinitions<TSchema extends VoidhashSchema>(
-  schema: TSchema
-): ExtractSchemaProductDefinitions<TSchema> {
-  const productDefinitions = {} as ExtractSchemaProductDefinitions<TSchema>;
-
-  for (const [key, value] of Object.entries(schema)) {
-    if (value instanceof ProductDefinition) {
-      // @ts-expect-error - TypeScript can't infer that key is a valid product key, but we know it is
-      productDefinitions[key] = value;
-    }
-  }
-
-  return productDefinitions;
-}
-
-export function extractPaywallLocationDefinitions<TSchema extends VoidhashSchema>(
-  schema: TSchema
-): ExtractSchemaPaywallLocationDefinitions<TSchema> {
-  const paywallLocationDefinitions =
-    {} as ExtractSchemaPaywallLocationDefinitions<TSchema>;
-
-  for (const [key, value] of Object.entries(schema)) {
-    if (value instanceof PaywallLocationDefinition) {
-      // @ts-expect-error - TypeScript can't infer that key is a valid paywall location key, but we know it is
-      paywallLocationDefinitions[key] = value as AnyPaywallLocationDefinition;
-    }
-  }
-
-  return paywallLocationDefinitions;
-}
-
-/**
- * Extracts schema configuration objects from a schema module.
- * Schema configurations contain providers, perks, and product builder methods.
- */
-export function extractSchemaConfigurations<TSchema extends VoidhashSchema>(
-  schema: TSchema
-): ExtractSchemaConfigurations<TSchema> {
-  const configurations = {} as ExtractSchemaConfigurations<TSchema>;
-
-  for (const [key, value] of Object.entries(schema)) {
-    // Check if this is a schema configuration by looking for the required properties
-    if (
-      value &&
-      typeof value === "object" &&
-      "providers" in value &&
-      "perks" in value &&
-      "subscription" in value &&
-      typeof value.subscription === "function" &&
-      "location" in value &&
-      typeof value.location === "function"
-    ) {
-      // @ts-expect-error - TypeScript can't infer that key is a valid configuration key, but we know it is
-      configurations[key] = value as AnySchemaConfiguration;
-    }
-  }
-
-  return configurations;
-}
diff --git a/libraries/react-native/src/core/testing/payment-adapter.ts b/libraries/react-native/src/core/testing/payment-adapter.ts
index f26a6fecd..649c81c54 100644
--- a/libraries/react-native/src/core/testing/payment-adapter.ts
+++ b/libraries/react-native/src/core/testing/payment-adapter.ts
@@ -18,10 +18,7 @@ import type {
   UserCancelledError,
 } from "../payment-adapters/errors";
 import { PaymentAdapter } from "../payment-adapters/payment-adapter";
-import type {
-  ExtractSchemaProductDefinitions,
-  VoidhashSchema,
-} from "../schema";
+import type { RuntimeProductDefinition } from "../schema/runtime";
 
 export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
   acknowledgePurchase(
@@ -79,19 +76,14 @@ export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
     return Effect.succeed([]);
   },
 
-  getProducts<
-    TSchema extends VoidhashSchema,
-    TDefinedProducts extends ExtractSchemaProductDefinitions<TSchema>,
-  >(
-    productDefinitions: TDefinedProducts
+  getProducts(
+    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
   ): Effect.Effect<
     Product[],
     NativeAdapterNotInitializedError | FailedToGetProductsError,
     never
   > {
-    const productDefinitionsArray = Object.values(
-      productDefinitions
-    ) as TDefinedProducts[keyof TDefinedProducts][];
+    const productDefinitionsArray = Object.values(productDefinitions);
 
     Effect.logDebug("TestPaymentAdapter: Getting products", {
       count: productDefinitionsArray.length,
diff --git a/libraries/react-native/src/index.ts b/libraries/react-native/src/index.ts
index adb823ad3..1cbd9d098 100644
--- a/libraries/react-native/src/index.ts
+++ b/libraries/react-native/src/index.ts
@@ -1,46 +1,3 @@
-// import { Platform } from "react-native";
-
-// import { PayKit } from "./nitro";
-
-// export * from "./specs/PurchasedItem.nitro";
-
-// export { PayKit };
-
-// type iOSAvailableProduct = {
-// 	sku: string;
-// };
-
-// type PayKitIntegrationOptions = {
-// 	ios?: {
-// 		/**
-// 		 * Returns currently available products that the user can purchase or subscribe to
-// 		 * @returns The offerings
-// 		 */
-// 		getAvailableProducts: () => Promise<iOSAvailableProduct[]>;
-// 	};
-// 	android?: {
-// 		getAvailableProducts?: () => Promise<string[]>;
-// 	};
-// };
-
-// export class PayKitIntegration {
-// 	constructor(private readonly options: PayKitIntegrationOptions) {
-// 		console.log(options);
-// 	}
-
-// 	purchase(sku: string) {
-// 		return PayKit.purchase(sku);
-// 	}
-
-// 	getProducts() {
-// 		if (Platform.OS === "ios") {
-// 			return this.options.ios?.getAvailableProducts?.();
-// 		}
-
-// 		throw new Error("Not implemented");
-// 	}
-// }
-
 export * from "./client";
 export * from "./client-react-native";
 export * from "./core/schema";
diff --git a/libraries/react-native/src/metro/index.ts b/libraries/react-native/src/metro/index.ts
new file mode 100644
index 000000000..3e9548356
--- /dev/null
+++ b/libraries/react-native/src/metro/index.ts
@@ -0,0 +1,146 @@
+/**
+ * Metro plugin — Node-only entry, never bundled into the RN app.
+ *
+ * Wire this into the user's `metro.config.js` to automatically regenerate
+ * `voidhash.gen.d.ts` when the dashboard schema changes during `expo start`:
+ *
+ * ```js
+ * const { getDefaultConfig } = require("expo/metro-config");
+ * const { withVoidhash } = require("@voidhash/react-native/metro");
+ *
+ * module.exports = withVoidhash(getDefaultConfig(__dirname), {
+ *   pollIntervalMs: 5000, // optional
+ * });
+ * ```
+ *
+ * Spawns `voidhash types generate --watch` as a child process on Metro server
+ * start and tears it down on shutdown. Errors from the spawned CLI are logged
+ * but do not crash Metro — the user can keep developing against the
+ * last-known-good `.d.ts`.
+ *
+ * `voidhash-cli` is an optional peer dependency. If the binary isn't on PATH,
+ * `withVoidhash` returns the original Metro config unchanged with a warning.
+ */
+
+// We avoid pulling in `@types/node` so the SDK's TypeScript compilation
+// stays free of Node ambient types — this module only runs in the Metro
+// (Node) context. The minimal ambient declarations below describe just what
+// we need.
+
+declare const require: (id: string) => unknown;
+declare const process: {
+  env: Record<string, string | undefined>;
+  on(event: string, listener: () => void): void;
+};
+
+interface ChildProcessLike {
+  killed: boolean;
+  kill(signal?: string): boolean;
+  on(event: "error", listener: (error: { message: string }) => void): void;
+  on(event: "exit", listener: () => void): void;
+}
+
+interface ChildProcessModule {
+  spawn(
+    command: string,
+    args: ReadonlyArray<string>,
+    options: {
+      env: Record<string, string | undefined>;
+      stdio: "inherit";
+    }
+  ): ChildProcessLike;
+}
+
+// Metro config has a deep, framework-specific type. We treat it as opaque
+// here and return it unchanged so we don't have to depend on `metro-config`.
+type MetroConfig = unknown;
+
+export interface WithVoidhashOptions {
+  /** How often to poll the server for schema changes (ms). Default 5000. */
+  pollIntervalMs?: number;
+  /** Path to the `voidhash` CLI binary. Defaults to picking it up via $PATH. */
+  cliBinary?: string;
+  /** Additional CLI arguments forwarded after `types generate --watch`. */
+  extraArgs?: ReadonlyArray<string>;
+}
+
+let activeChildProcess: ChildProcessLike | null = null;
+let teardownInstalled = false;
+
+function ensureTeardownHandlers() {
+  if (teardownInstalled) return;
+  teardownInstalled = true;
+
+  const teardown = () => {
+    if (activeChildProcess && !activeChildProcess.killed) {
+      activeChildProcess.kill("SIGTERM");
+      activeChildProcess = null;
+    }
+  };
+
+  process.on("exit", teardown);
+  process.on("SIGINT", teardown);
+  process.on("SIGTERM", teardown);
+}
+
+function startWatcher(options: WithVoidhashOptions) {
+  if (activeChildProcess) {
+    return;
+  }
+
+  const binary = options.cliBinary ?? "voidhash";
+  const args = [
+    "types",
+    "generate",
+    "--watch",
+    "--poll-interval-ms",
+    String(options.pollIntervalMs ?? 5000),
+    ...(options.extraArgs ?? []),
+  ];
+
+  try {
+    const childProcessModule = require("node:child_process") as ChildProcessModule;
+    activeChildProcess = childProcessModule.spawn(binary, args, {
+      env: process.env,
+      stdio: "inherit",
+    });
+
+    activeChildProcess.on("error", (error) => {
+      // biome-ignore lint/suspicious/noConsole: dev-time diagnostic
+      console.warn(
+        `[voidhash/metro] Failed to spawn '${binary} ${args.join(" ")}': ${error.message}. ` +
+          "Ensure voidhash-cli is installed in this project."
+      );
+      activeChildProcess = null;
+    });
+
+    activeChildProcess.on("exit", () => {
+      activeChildProcess = null;
+    });
+
+    ensureTeardownHandlers();
+  } catch (error) {
+    // biome-ignore lint/suspicious/noConsole: dev-time diagnostic
+    console.warn(
+      `[voidhash/metro] Could not start types watcher: ${
+        error instanceof Error ? error.message : String(error)
+      }`
+    );
+    activeChildProcess = null;
+  }
+}
+
+/**
+ * Wrap a Metro config so that `voidhash types generate --watch` runs alongside
+ * the Metro dev server. Returns the original config unchanged — the watcher
+ * runs as a sibling process, not via Metro's transformer/resolver pipeline.
+ */
+export function withVoidhash<TConfig extends MetroConfig>(
+  metroConfig: TConfig,
+  options: WithVoidhashOptions = {}
+): TConfig {
+  // Kick the watcher off lazily so that simply *importing* this module from a
+  // non-dev context doesn't spawn a background process.
+  globalThis.queueMicrotask?.(() => startWatcher(options));
+  return metroConfig;
+}
diff --git a/libraries/react-native/src/react/components/provider.tsx b/libraries/react-native/src/react/components/provider.tsx
index 073a0df4d..26195a883 100644
--- a/libraries/react-native/src/react/components/provider.tsx
+++ b/libraries/react-native/src/react/components/provider.tsx
@@ -1,21 +1,18 @@
 import React, { type ReactNode, createContext } from "react";
 
 import type { VoidhashClient } from "../../client";
-import type { VoidhashSchema } from "../../core/schema";
 
 export interface VoidhashProviderBaseProps {
   children: ReactNode;
 }
 
-export interface VoidhashContext<TSchema extends VoidhashSchema> {
+export interface VoidhashContext {
   isInitialized: boolean;
-  client: VoidhashClient<TSchema>;
+  client: VoidhashClient;
 }
 
-export function voidhashProviderFactory<TSchema extends VoidhashSchema>(
-  initialClient: VoidhashClient<TSchema>
-) {
-  const VoidhashContext = createContext<VoidhashContext<TSchema> | null>(null);
+export function voidhashProviderFactory(initialClient: VoidhashClient) {
+  const VoidhashContext = createContext<VoidhashContext | null>(null);
   function VoidhashProvider({ children }: VoidhashProviderBaseProps) {
     const client = React.useRef(initialClient);
 
@@ -48,25 +45,4 @@ export function voidhashProviderFactory<TSchema extends VoidhashSchema>(
   }
 
   return { context: VoidhashContext, provider: VoidhashProvider, useVoidhash };
-
-  // React.useEffect(() => {
-  //   const listener = Linking.addEventListener("url", (event) => {
-  //     if (
-  //       event.url.startsWith(
-  //         client.current.internal_getSuccessCallbackBaseUrl()
-  //       )
-  //     ) {
-  //       client.current.internal_onWebCheckoutSuccess(event.url);
-  //     } else if (
-  //       event.url.startsWith(
-  //         client.current.internal_getErrorCallbackBaseUrl()
-  //       )
-  //     ) {
-  //       client.current.internal_onWebCheckoutError(event.url);
-  //     }
-  //   });
-  //   return () => {
-  //     listener.remove();
-  //   };
-  // }, []);
 }
diff --git a/libraries/react-native/src/react/hooks/use-customer.ts b/libraries/react-native/src/react/hooks/use-customer.ts
index 9188b0ce6..c0ea42fad 100644
--- a/libraries/react-native/src/react/hooks/use-customer.ts
+++ b/libraries/react-native/src/react/hooks/use-customer.ts
@@ -2,13 +2,12 @@ import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import React, { useCallback, useEffect, useMemo, useState } from "react";
 
 import type { VoidhashClient } from "../../client";
-import type { VoidhashSchema } from "../../core/schema";
 import type { VoidhashContext } from "../components/provider";
 import useAsyncFunction from "./use-async-function";
 
-export function currentCustomerHookFactory<TSchema extends VoidhashSchema>(
-  client: VoidhashClient<TSchema>,
-  vhContext: React.Context<VoidhashContext<TSchema> | null>
+export function currentCustomerHookFactory(
+  client: VoidhashClient,
+  vhContext: React.Context<VoidhashContext | null>
 ) {
   function useCurrentCustomer() {
     const voidhashContext = React.useContext(vhContext);
diff --git a/libraries/react-native/src/react/hooks/use-feature-flags.ts b/libraries/react-native/src/react/hooks/use-feature-flags.ts
index a1cbce864..6c2c39ef2 100644
--- a/libraries/react-native/src/react/hooks/use-feature-flags.ts
+++ b/libraries/react-native/src/react/hooks/use-feature-flags.ts
@@ -2,15 +2,14 @@ import React, { useCallback, useEffect, useMemo, useState } from "react";
 
 import type { VoidhashClient } from "../../client";
 import type { FeatureFlagsFetchedEvent } from "../../core/event-bus";
-import type { VoidhashSchema } from "../../core/schema";
 import type { VoidhashContext } from "../components/provider";
 import useAsyncFunction from "./use-async-function";
 
 type FeatureFlagsResult = FeatureFlagsFetchedEvent;
 
-export function featureFlagsHookFactory<TSchema extends VoidhashSchema>(
-  client: VoidhashClient<TSchema>,
-  vhContext: React.Context<VoidhashContext<TSchema> | null>
+export function featureFlagsHookFactory(
+  client: VoidhashClient,
+  vhContext: React.Context<VoidhashContext | null>
 ) {
   function useFeatureFlags(flagKeys?: string[]) {
     const voidhashContext = React.useContext(vhContext);
diff --git a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
index b9cc91843..584d1a21f 100644
--- a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
+++ b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
@@ -2,11 +2,8 @@ import React, { useCallback, useEffect } from "react";
 import { AppState, Linking } from "react-native";
 
 import type { VoidhashClient } from "../../client";
-import type {
-  ExtractSchemaPaywallLocationSlugs,
-  InferGetProductResponseFromSchema,
-  VoidhashSchema,
-} from "../../core/schema";
+import type { SubscriptionProduct } from "../../core/entities/product";
+import type { LocationSlug } from "../../core/schema/registry";
 import { PaywallPresenter } from "../../nitro";
 import {
   createPaywallBridgeErrorResponse,
@@ -31,16 +28,6 @@ export interface UsePaywallByLocationOptions {
   onRestore?: (context: { requestId?: string }) => void;
 }
 
-type InferGetPaywallLocationInput<TSchema extends VoidhashSchema> =
-  [ExtractSchemaPaywallLocationSlugs<TSchema>] extends [never]
-    ? string
-    : ExtractSchemaPaywallLocationSlugs<TSchema>;
-
-type ResolvedProduct<TSchema extends VoidhashSchema> = Exclude<
-  InferGetProductResponseFromSchema<TSchema>[keyof InferGetProductResponseFromSchema<TSchema>],
-  null
->;
-
 const resolvedPaywallHtmlByLocation = new Map<string, string>();
 const activeHookCountByLocation = new Map<string, number>();
 const inFlightActionByLocation = new Set<string>();
@@ -57,7 +44,7 @@ function normalizeLocation(locationSlug: string): string {
 
 function getResolvedHtmlUrl(
   resolvedPaywall:
-    | Awaited<ReturnType<VoidhashClient<VoidhashSchema>["getPaywallForLocation"]>>
+    | Awaited<ReturnType<VoidhashClient["getPaywallForLocation"]>>
     | null
     | undefined
 ): string | null {
@@ -87,12 +74,12 @@ function getErrorPayload(error: unknown): { code: string; message: string } {
   };
 }
 
-function findProductByBridgeProductId<TSchema extends VoidhashSchema>(
-  products: InferGetProductResponseFromSchema<TSchema>,
+function findProductByBridgeProductId(
+  products: Record<string, SubscriptionProduct | null>,
   productId: string
-): ResolvedProduct<TSchema> | null {
+): SubscriptionProduct | null {
   const productList = Object.values(products).filter(
-    (product): product is ResolvedProduct<TSchema> => product !== null
+    (product): product is SubscriptionProduct => product !== null
   );
 
   const byId = productList.find((product) => product.id === productId);
@@ -109,8 +96,8 @@ interface PaywallPresenterBridgeAdapter {
   postMessage: (locationSlug: string, data: string) => void;
 }
 
-async function handlePaywallBridgeEvent<TSchema extends VoidhashSchema>(options: {
-  client: VoidhashClient<TSchema>;
+async function handlePaywallBridgeEvent(options: {
+  client: VoidhashClient;
   locationKey: string;
   paywallOptions?: UsePaywallByLocationOptions;
   openExternalUrl: (url: string) => Promise<void>;
@@ -239,10 +226,8 @@ async function handlePaywallBridgeEvent<TSchema extends VoidhashSchema>(options:
   }
 }
 
-export async function __internal_handlePaywallBridgeEventForTests<
-  TSchema extends VoidhashSchema,
->(options: {
-  client: VoidhashClient<TSchema>;
+export async function __internal_handlePaywallBridgeEventForTests(options: {
+  client: VoidhashClient;
   locationKey: string;
   paywallOptions?: UsePaywallByLocationOptions;
   openExternalUrl: (url: string) => Promise<void>;
@@ -269,12 +254,12 @@ function decrementActiveHookCount(locationSlug: string) {
   return nextCount;
 }
 
-export function paywallByLocationHookFactory<TSchema extends VoidhashSchema>(
-  client: VoidhashClient<TSchema>,
-  vhContext: React.Context<VoidhashContext<TSchema> | null>
+export function paywallByLocationHookFactory(
+  client: VoidhashClient,
+  vhContext: React.Context<VoidhashContext | null>
 ) {
   function usePaywallByLocation(
-    locationSlug: InferGetPaywallLocationInput<TSchema>,
+    locationSlug: LocationSlug,
     paywallOptions?: UsePaywallByLocationOptions
   ): UsePaywallByLocationResult {
     const voidhashContext = React.useContext(vhContext);
diff --git a/libraries/react-native/src/react/hooks/use-products.ts b/libraries/react-native/src/react/hooks/use-products.ts
index 6fc5c4e9f..de9505e19 100644
--- a/libraries/react-native/src/react/hooks/use-products.ts
+++ b/libraries/react-native/src/react/hooks/use-products.ts
@@ -2,18 +2,13 @@ import React, { useCallback, useMemo } from "react";
 
 import type { VoidhashClient } from "../../client";
 import type { SubscriptionProduct } from "../../core/entities/product";
-import type {
-  ExtractSchemaProductDefinitions,
-  InferGetProductResponseFromSchema,
-  SubscriptionProductDefinition,
-  VoidhashSchema,
-} from "../../core/schema";
+import type { ProductSlug } from "../../core/schema/registry";
 import type { VoidhashContext } from "../components/provider";
 import useAsyncFunction from "./use-async-function";
 
-export function productsHookFactory<TSchema extends VoidhashSchema>(
-  client: VoidhashClient<TSchema>,
-  vhContext: React.Context<VoidhashContext<TSchema> | null>
+export function productsHookFactory(
+  client: VoidhashClient,
+  vhContext: React.Context<VoidhashContext | null>
 ) {
   function useProducts() {
     const voidhashContext = React.useContext(vhContext);
@@ -29,42 +24,31 @@ export function productsHookFactory<TSchema extends VoidhashSchema>(
     });
 
     const getProduct = useCallback(
-      (
-        productDefinition: ExtractSchemaProductDefinitions<TSchema>[keyof ExtractSchemaProductDefinitions<TSchema>]
-      ) => {
+      (productSlug: ProductSlug): SubscriptionProduct | null => {
         if (!products) {
           return null;
         }
-
-        const product = Object.values(products).find(
-          (product) =>
-            (product as SubscriptionProduct).slug ===
-            // biome-ignore lint/suspicious/noExplicitAny: any is ok in this case
-            (productDefinition as SubscriptionProductDefinition<any, any, any>)
-              .slug
-        ) as SubscriptionProduct | null;
-
-        return product;
+        // ProductSlug is `string` at runtime; the index access is safe.
+        return (products as Record<string, SubscriptionProduct | null>)[
+          String(productSlug)
+        ] ?? null;
       },
       [products]
     );
 
     const toList = useCallback(
-      () =>
+      (): SubscriptionProduct[] =>
         products
-          ? (
-              Object.values(products) as Exclude<
-                Exclude<typeof products, null>[keyof typeof products],
-                null
-              >[]
-            ).filter((product) => product !== null)
+          ? (Object.values(products) as Array<SubscriptionProduct | null>).filter(
+              (product): product is SubscriptionProduct => product !== null
+            )
           : [],
       [products]
     );
 
     const data = useMemo(
       () => ({
-        ...products,
+        ...(products ?? {}),
         get: getProduct,
         toList,
       }),
@@ -72,7 +56,7 @@ export function productsHookFactory<TSchema extends VoidhashSchema>(
     );
 
     return {
-      data: data as InferGetProductResponseFromSchema<TSchema> & {
+      data: data as Record<ProductSlug, SubscriptionProduct | null> & {
         get: typeof getProduct;
         toList: typeof toList;
       },
diff --git a/libraries/react-native/src/react/hooks/use-purchase.ts b/libraries/react-native/src/react/hooks/use-purchase.ts
index c2139dfa8..725fbbd0a 100644
--- a/libraries/react-native/src/react/hooks/use-purchase.ts
+++ b/libraries/react-native/src/react/hooks/use-purchase.ts
@@ -1,10 +1,7 @@
 import { useCallback, useState } from "react";
 
 import type { VoidhashClient } from "../../client";
-import type {
-  InferGetProductResponseFromSchema,
-  VoidhashSchema,
-} from "../../core/schema";
+import type { SubscriptionProduct } from "../../core/entities/product";
 
 export interface UsePurchaseOptions {
   method?: "native";
@@ -13,19 +10,14 @@ export interface UsePurchaseOptions {
   onSettled?: () => void;
 }
 
-export function purchaseHookFactory<TSchema extends VoidhashSchema>(
-  client: VoidhashClient<TSchema>
-) {
+export function purchaseHookFactory(client: VoidhashClient) {
   function usePurchase(hookOptions?: UsePurchaseOptions) {
     const [isLoading, setIsLoading] = useState(false);
     const [error, setError] = useState<Error | null>(null);
 
     const purchase = useCallback(
       (
-        product: Exclude<
-          InferGetProductResponseFromSchema<TSchema>[keyof InferGetProductResponseFromSchema<TSchema>],
-          null
-        >,
+        product: SubscriptionProduct,
         options?: {
           method?: "native";
           onSuccess?: () => void;

From 9be4ae2787d88c182f55c0d29b0c465c19daaca9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 11 May 2026 09:00:53 +0200
Subject: [PATCH 013/129] fix: cli error

---
 apps/cli/src/cli/commands/auth-login.ts     | 3 +--
 apps/cli/src/cli/commands/auth-logout.ts    | 3 +--
 apps/cli/src/cli/commands/auth-status.ts    | 3 +--
 apps/cli/src/cli/commands/auth.ts           | 3 +--
 apps/cli/src/cli/commands/config-reset.ts   | 3 +--
 apps/cli/src/cli/commands/config-set.ts     | 3 +--
 apps/cli/src/cli/commands/config.ts         | 3 +--
 apps/cli/src/cli/commands/init.ts           | 3 +--
 apps/cli/src/cli/commands/types-check.ts    | 3 +--
 apps/cli/src/cli/commands/types-generate.ts | 2 --
 apps/cli/src/cli/commands/types.ts          | 3 +--
 apps/cli/src/cli/index.ts                   | 5 ++++-
 12 files changed, 14 insertions(+), 23 deletions(-)

diff --git a/apps/cli/src/cli/commands/auth-login.ts b/apps/cli/src/cli/commands/auth-login.ts
index abbbce10d..ced9af4b5 100644
--- a/apps/cli/src/cli/commands/auth-login.ts
+++ b/apps/cli/src/cli/commands/auth-login.ts
@@ -2,9 +2,8 @@ import { Command, Prompt } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { Auth } from "../../domain/services/auth";
-import { debugOption } from "../shared-options";
 
-export const loginCommand = Command.make("login", { debug: debugOption }, () =>
+export const loginCommand = Command.make("login", {}, () =>
   Effect.gen(function* loginCommand() {
     const auth = yield* Auth;
     const user = yield* auth.getSignedInSession.pipe(
diff --git a/apps/cli/src/cli/commands/auth-logout.ts b/apps/cli/src/cli/commands/auth-logout.ts
index 61f2eda2f..7237ef0d5 100644
--- a/apps/cli/src/cli/commands/auth-logout.ts
+++ b/apps/cli/src/cli/commands/auth-logout.ts
@@ -2,11 +2,10 @@ import { Command, Prompt } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { Auth } from "../../domain/services/auth";
-import { debugOption } from "../shared-options";
 
 export const logoutCommand = Command.make(
 	"logout",
-	{ debug: debugOption },
+	{},
 	() =>
 		Effect.gen(function* logoutCommand() {
 			const auth = yield* Auth;
diff --git a/apps/cli/src/cli/commands/auth-status.ts b/apps/cli/src/cli/commands/auth-status.ts
index 1d582ea11..8e02fc705 100644
--- a/apps/cli/src/cli/commands/auth-status.ts
+++ b/apps/cli/src/cli/commands/auth-status.ts
@@ -3,9 +3,8 @@ import { Console, Effect } from "effect";
 
 import { Auth } from "../../domain/services/auth";
 import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
 
-export const authStatusCommand = Command.make("status", { debug: debugOption }, () =>
+export const authStatusCommand = Command.make("status", {}, () =>
   Effect.gen(function* authStatusCommand() {
     const auth = yield* Auth;
     const user = yield* auth.getSignedInSession.pipe(
diff --git a/apps/cli/src/cli/commands/auth.ts b/apps/cli/src/cli/commands/auth.ts
index ed7c688f8..c3528dfec 100644
--- a/apps/cli/src/cli/commands/auth.ts
+++ b/apps/cli/src/cli/commands/auth.ts
@@ -1,12 +1,11 @@
 import { Command } from "effect/unstable/cli";
 import { Effect } from "effect";
 
-import { debugOption } from "../shared-options";
 import { loginCommand } from "./auth-login";
 import { logoutCommand } from "./auth-logout";
 import { authStatusCommand } from "./auth-status";
 
-export const authCommand = Command.make("auth", { debug: debugOption }, () =>
+export const authCommand = Command.make("auth", {}, () =>
   Effect.gen(function* authCommand() {
     // TODO: Show sucommands documentation
   })
diff --git a/apps/cli/src/cli/commands/config-reset.ts b/apps/cli/src/cli/commands/config-reset.ts
index aeab15137..bf456f013 100644
--- a/apps/cli/src/cli/commands/config-reset.ts
+++ b/apps/cli/src/cli/commands/config-reset.ts
@@ -3,9 +3,8 @@ import { Console, Effect } from "effect";
 
 import { CliConfig } from "../../domain/services/cli-config";
 import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
 
-export const configResetCommand = Command.make("reset", { debug: debugOption }, () =>
+export const configResetCommand = Command.make("reset", {}, () =>
   Effect.gen(function* configResetCommand() {
     const cliConfig = yield* CliConfig;
 
diff --git a/apps/cli/src/cli/commands/config-set.ts b/apps/cli/src/cli/commands/config-set.ts
index f4a133792..4a295ac7b 100644
--- a/apps/cli/src/cli/commands/config-set.ts
+++ b/apps/cli/src/cli/commands/config-set.ts
@@ -3,14 +3,13 @@ import { Console, Effect } from "effect";
 
 import { CliConfig } from "../../domain/services/cli-config";
 import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
 
 const keyArg = Argument.string("key");
 const valueArg = Argument.string("value");
 
 export const configSetCommand = Command.make(
   "set",
-  { debug: debugOption, key: keyArg, value: valueArg },
+  { key: keyArg, value: valueArg },
   ({ key, value }) =>
     Effect.gen(function* configSetCommand() {
       const cliConfig = yield* CliConfig;
diff --git a/apps/cli/src/cli/commands/config.ts b/apps/cli/src/cli/commands/config.ts
index 7fcec09fc..6dc561fb4 100644
--- a/apps/cli/src/cli/commands/config.ts
+++ b/apps/cli/src/cli/commands/config.ts
@@ -2,11 +2,10 @@ import { Command } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { CliConfig } from "../../domain/services/cli-config";
-import { debugOption } from "../shared-options";
 import { configResetCommand } from "./config-reset";
 import { configSetCommand } from "./config-set";
 
-export const configCommand = Command.make("config", { debug: debugOption }, () =>
+export const configCommand = Command.make("config", {}, () =>
   Effect.gen(function* configCommand() {
     const cliConfig = yield* CliConfig;
     yield* Console.log("Current configuration:");
diff --git a/apps/cli/src/cli/commands/init.ts b/apps/cli/src/cli/commands/init.ts
index 473a1b14b..38c6930e1 100644
--- a/apps/cli/src/cli/commands/init.ts
+++ b/apps/cli/src/cli/commands/init.ts
@@ -11,7 +11,6 @@ import { userError } from "../../utils/error-formatter";
 import { assertFileCanBeCreated } from "../../utils/fs";
 import { selectOrganization } from "../../utils/organizations/select-organization";
 import { selectProject } from "../../utils/projects/select-project";
-import { debugOption } from "../shared-options";
 
 /**
  * `voidhash init`
@@ -24,7 +23,7 @@ import { debugOption } from "../shared-options";
  * after the server-first redesign. Likewise the client file is the user's to
  * write (it's two lines now: import + `createVoidhashClient`).
  */
-export const initCommand = Command.make("init", { debug: debugOption }, () =>
+export const initCommand = Command.make("init", {}, () =>
   Effect.gen(function* initCommand() {
     const auth = yield* Auth;
     const apiClient = yield* ApiClient;
diff --git a/apps/cli/src/cli/commands/types-check.ts b/apps/cli/src/cli/commands/types-check.ts
index cf19e2261..c2e2aa99f 100644
--- a/apps/cli/src/cli/commands/types-check.ts
+++ b/apps/cli/src/cli/commands/types-check.ts
@@ -8,7 +8,6 @@ import { Codegen } from "../../domain/services/codegen";
 import { SchemaService } from "../../domain/services/schema";
 import { SourceCode } from "../../domain/services/source-code";
 import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
 
 /**
  * `voidhash types check`
@@ -20,7 +19,7 @@ import { debugOption } from "../shared-options";
  */
 export const typesCheckCommand = Command.make(
   "check",
-  { debug: debugOption },
+  {},
   () =>
     Effect.gen(function* typesCheckCommand() {
       const auth = yield* Auth;
diff --git a/apps/cli/src/cli/commands/types-generate.ts b/apps/cli/src/cli/commands/types-generate.ts
index 26d81c31b..ded8554fe 100644
--- a/apps/cli/src/cli/commands/types-generate.ts
+++ b/apps/cli/src/cli/commands/types-generate.ts
@@ -7,7 +7,6 @@ import { Codegen } from "../../domain/services/codegen";
 import { SchemaService } from "../../domain/services/schema";
 import { SourceCode } from "../../domain/services/source-code";
 import { userError } from "../../utils/error-formatter";
-import { debugOption } from "../shared-options";
 
 /**
  * `voidhash types generate [--watch]`
@@ -20,7 +19,6 @@ import { debugOption } from "../shared-options";
 export const typesGenerateCommand = Command.make(
   "generate",
   {
-    debug: debugOption,
     pollIntervalMs: Flag.integer("poll-interval-ms").pipe(
       Flag.withDescription(
         "Polling interval for --watch mode, in milliseconds"
diff --git a/apps/cli/src/cli/commands/types.ts b/apps/cli/src/cli/commands/types.ts
index 7aefd2b6e..25be40f74 100644
--- a/apps/cli/src/cli/commands/types.ts
+++ b/apps/cli/src/cli/commands/types.ts
@@ -1,13 +1,12 @@
 import { Command } from "effect/unstable/cli";
 import { Effect } from "effect";
 
-import { debugOption } from "../shared-options";
 import { typesCheckCommand } from "./types-check";
 import { typesGenerateCommand } from "./types-generate";
 
 export const typesCommand = Command.make(
   "types",
-  { debug: debugOption },
+  {},
   () => Effect.gen(function* typesCommand() {})
 ).pipe(
   Command.withDescription(
diff --git a/apps/cli/src/cli/index.ts b/apps/cli/src/cli/index.ts
index e475791d2..85284d429 100644
--- a/apps/cli/src/cli/index.ts
+++ b/apps/cli/src/cli/index.ts
@@ -17,8 +17,11 @@ import { authCommand } from "./commands/auth";
 import { configCommand } from "./commands/config";
 import { initCommand } from "./commands/init";
 import { typesCommand } from "./commands/types";
+import { debugOption } from "./shared-options";
 
-const command = Command.make("voidhash").pipe(
+const command = Command.make("voidhash", { debug: debugOption }, () =>
+  Effect.void
+).pipe(
   Command.withDescription("Voidhash CLI application."),
   Command.withSubcommands([
     initCommand,

From bf92623fadcf5eca23cf71f2d8d4371b326c0fa2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 11 May 2026 17:12:40 +0200
Subject: [PATCH 014/129] wip

---
 .gitignore                                    |   2 +-
 AGENTS.md                                     |   3 +
 CLAUDE.md                                     |   5 +
 apps/cli/package.json                         |   2 +-
 apps/cli/src/cli/commands/auth-status.ts      |   2 +-
 apps/cli/src/cli/commands/init.ts             |  16 +-
 apps/cli/src/cli/commands/types-check.ts      |  12 +-
 apps/cli/src/cli/commands/types-generate.ts   |  29 +-
 apps/cli/src/domain/services/codegen.ts       |  21 +-
 apps/cli/src/domain/services/schema.ts        | 166 ++---
 apps/cli/src/utils/api-client.ts              |   2 +-
 apps/cli/src/utils/error-formatter.ts         |   2 +-
 apps/cli/src/utils/schema/version.ts          |  51 +-
 docs/server-first-schema-server-spec.md       |  12 +-
 examples/react-native-example/package.json    |   8 +-
 .../utils/voidhash/client.ts                  |   2 +-
 .../react-native-example/voidhash.gen.d.ts    |   6 +-
 .../node/src/generated/grouped-client.ts      |   7 +-
 libraries/node/tests/client.test.ts           |   7 +-
 libraries/react-native/src/client-effect.ts   |  54 +-
 .../react-native/src/client-react-native.ts   |   2 +-
 .../src/core/networking/api-client.ts         |  38 +-
 .../react-native/src/core/schema/registry.ts  |   2 +-
 .../react-native/src/core/schema/runtime.ts   |   2 +-
 libraries/react-native/src/metro/index.ts     |   8 +-
 packages/generated-clients/openapi/core.json  |   2 +-
 .../generated-clients/src/core/generated.ts   | 602 +++++++++---------
 27 files changed, 505 insertions(+), 560 deletions(-)
 create mode 100644 AGENTS.md
 create mode 100644 CLAUDE.md

diff --git a/.gitignore b/.gitignore
index ff58f646d..e485f1016 100644
--- a/.gitignore
+++ b/.gitignore
@@ -294,4 +294,4 @@ yalc.lock
 # Typescript
 **/tsconfig.tsbuildinfo
 
-# resources/
\ No newline at end of file
+resources/
\ No newline at end of file
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 000000000..7cc0a3b53
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,3 @@
+You have access to read-only clones of some key dependencies we use and get inspired by in ./resources
+
+- /effect-smol - Effect v4 codebase. Great to find all primitives available in Effect.
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 000000000..f918c6961
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,5 @@
+You have access to read-only clones of some key dependencies we use and get inspired by in ./resources
+
+- /effect-smol - Effect v4 codebase. Great to find all primitives available in Effect.
+
+Avoid adding unneccessary comments. Add jsdoc comments to public functions and explaination comments if doing something unorthodox / uncommon.
diff --git a/apps/cli/package.json b/apps/cli/package.json
index 31a956b7b..38fb9fb79 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -26,7 +26,7 @@
     "start": "dotenv -- tsx ./src/index.ts",
     "build": "rm -rf ./dist && tsx build.ts && cp package.json dist/ && chmod +x ./dist/bin.cjs",
     "build:dev": "rm -rf ./dist && tsx build.dev.ts && chmod +x ./dist/index.cjs",
-    "dev:set-local-urls": "npx voidhash-cli config set api_url http://localhost:5001 && npx voidhash-cli config set web_url https://voidhash.localhost:1355",
+    "dev:set-local-urls": "npx voidhash-cli config set api_url http://localhost:8787 && npx voidhash-cli config set web_url https://localhost:3000",
     "typecheck": "tsgo --noEmit",
     "test": "vitest run -c vitest.unit.mts",
     "test:watch": "vitest -c vitest.unit.mts"
diff --git a/apps/cli/src/cli/commands/auth-status.ts b/apps/cli/src/cli/commands/auth-status.ts
index 8e02fc705..b18f91196 100644
--- a/apps/cli/src/cli/commands/auth-status.ts
+++ b/apps/cli/src/cli/commands/auth-status.ts
@@ -12,7 +12,7 @@ export const authStatusCommand = Command.make("status", {}, () =>
         FailedToGetSessionError: () =>
           Effect.fail(
             userError(
-              "Failed to get user session. Please try again or run 'voidhash auth login'."
+              "Failed to get user session. Please try again or run 'voidhash-cli auth login'."
             )
           ),
         NoSignedInUserError: () => Effect.succeed(null),
diff --git a/apps/cli/src/cli/commands/init.ts b/apps/cli/src/cli/commands/init.ts
index 38c6930e1..6ce7459da 100644
--- a/apps/cli/src/cli/commands/init.ts
+++ b/apps/cli/src/cli/commands/init.ts
@@ -13,7 +13,7 @@ import { selectOrganization } from "../../utils/organizations/select-organizatio
 import { selectProject } from "../../utils/projects/select-project";
 
 /**
- * `voidhash init`
+ * `voidhash-cli init`
  *
  * One-time setup: authenticate, select team/project, write `voidhash.config.ts`
  * at the project root, and produce the initial `voidhash.gen.d.ts` so type
@@ -135,16 +135,20 @@ export const initCommand = Command.make("init", {}, () =>
 
     // Produce the initial declaration file so the user has working
     // autocomplete on the first run. Failures here are non-fatal — the user
-    // can re-run `voidhash types generate` later.
+    // can re-run `voidhash-cli types generate` later.
     const generatedVersion = yield* schemaService
       .fetchRemoteSchema()
       .pipe(
-        Effect.flatMap((schema) =>
-          codegen.generateTypesDeclarationFile(typesOutputPath, schema)
+        Effect.flatMap(({ schema, version }) =>
+          codegen.generateTypesDeclarationFile(
+            typesOutputPath,
+            schema,
+            version
+          )
         ),
         Effect.catch((e) =>
           Effect.logWarning(
-            `Failed to generate initial types: ${String(e)}. You can run 'voidhash types generate' later.`
+            `Failed to generate initial types: ${String(e)}. You can run 'voidhash-cli types generate' later.`
           ).pipe(Effect.as(null))
         )
       );
@@ -162,7 +166,7 @@ export const initCommand = Command.make("init", {}, () =>
       `  2. Create your products and paywall locations in the Voidhash dashboard.`
     );
     yield* Console.log(
-      `  3. Re-run 'voidhash types generate' whenever the dashboard schema changes.`
+      `  3. Re-run 'voidhash-cli types generate' whenever the dashboard schema changes.`
     );
   })
 ).pipe(Command.withDescription("Initialize a new Voidhash project."));
diff --git a/apps/cli/src/cli/commands/types-check.ts b/apps/cli/src/cli/commands/types-check.ts
index c2e2aa99f..a2e3b67e1 100644
--- a/apps/cli/src/cli/commands/types-check.ts
+++ b/apps/cli/src/cli/commands/types-check.ts
@@ -10,7 +10,7 @@ import { SourceCode } from "../../domain/services/source-code";
 import { userError } from "../../utils/error-formatter";
 
 /**
- * `voidhash types check`
+ * `voidhash-cli types check`
  *
  * CI gate. Compares the `@voidhash:version` header inside the local
  * `voidhash.gen.d.ts` against the server's current schema version. Exits
@@ -32,7 +32,7 @@ export const typesCheckCommand = Command.make(
         Effect.catchTag("NoSignedInUserError", () =>
           Effect.fail(
             userError(
-              "You must be logged in to check types. Run 'voidhash auth login' first."
+              "You must be logged in to check types. Run 'voidhash-cli auth login' first."
             )
           )
         )
@@ -42,7 +42,7 @@ export const typesCheckCommand = Command.make(
         Effect.catchTag("VoidhashConfigNotFoundError", () =>
           Effect.fail(
             userError(
-              "voidhash.config.ts not found. Run 'voidhash init' to create one."
+              "voidhash.config.ts not found. Run 'voidhash-cli init' to create one."
             )
           )
         )
@@ -55,7 +55,7 @@ export const typesCheckCommand = Command.make(
         Effect.catch(() =>
           Effect.fail(
             userError(
-              `Could not read generated types at ${typesOutput}. Run 'voidhash types generate' first.`
+              `Could not read generated types at ${typesOutput}. Run 'voidhash-cli types generate' first.`
             )
           )
         )
@@ -64,7 +64,7 @@ export const typesCheckCommand = Command.make(
       if (localVersion === null) {
         return yield* Effect.fail(
           userError(
-            `${typesOutput} is missing the @voidhash:version header. Re-run 'voidhash types generate' to regenerate.`
+            `${typesOutput} is missing the @voidhash:version header. Re-run 'voidhash-cli types generate' to regenerate.`
           )
         );
       }
@@ -90,7 +90,7 @@ export const typesCheckCommand = Command.make(
       yield* Console.log(`  Local:  ${localVersion}`);
       yield* Console.log(`  Server: ${remoteVersion}`);
       yield* Console.log(
-        "\nRun 'voidhash types generate' to refresh, then commit the updated declaration file."
+        "\nRun 'voidhash-cli types generate' to refresh, then commit the updated declaration file."
       );
 
       return yield* Effect.fail(
diff --git a/apps/cli/src/cli/commands/types-generate.ts b/apps/cli/src/cli/commands/types-generate.ts
index ded8554fe..5c938fc97 100644
--- a/apps/cli/src/cli/commands/types-generate.ts
+++ b/apps/cli/src/cli/commands/types-generate.ts
@@ -9,7 +9,7 @@ import { SourceCode } from "../../domain/services/source-code";
 import { userError } from "../../utils/error-formatter";
 
 /**
- * `voidhash types generate [--watch]`
+ * `voidhash-cli types generate [--watch]`
  *
  * Fetches the schema from the server and emits `voidhash.gen.d.ts` (path
  * configurable via `voidhash.config.ts#typesOutput`). With `--watch`, polls
@@ -44,7 +44,7 @@ export const typesGenerateCommand = Command.make(
         Effect.catchTag("NoSignedInUserError", () =>
           Effect.fail(
             userError(
-              "You must be logged in to generate types. Run 'voidhash auth login' first."
+              "You must be logged in to generate types. Run 'voidhash-cli auth login' first."
             )
           )
         )
@@ -54,7 +54,7 @@ export const typesGenerateCommand = Command.make(
         Effect.catchTag("VoidhashConfigNotFoundError", () =>
           Effect.fail(
             userError(
-              "voidhash.config.ts not found. Run 'voidhash init' to create one."
+              "voidhash.config.ts not found. Run 'voidhash-cli init' to create one."
             )
           )
         )
@@ -65,18 +65,17 @@ export const typesGenerateCommand = Command.make(
 
       const regenerate = Effect.gen(function* regenerate() {
         yield* Console.log("Fetching remote schema...");
-        const remoteSchema = yield* schemaService.fetchRemoteSchema().pipe(
-          Effect.catchTag("RemoteSchemaFetchError", (e) =>
-            Effect.fail(
-              userError(`Failed to fetch remote schema: ${String(e.cause)}`)
+        const { schema, version } = yield* schemaService
+          .fetchRemoteSchema()
+          .pipe(
+            Effect.catchTag("RemoteSchemaFetchError", (e) =>
+              Effect.fail(
+                userError(`Failed to fetch remote schema: ${String(e.cause)}`)
+              )
             )
-          )
-        );
+          );
 
-        const version = yield* codegen.generateTypesDeclarationFile(
-          outPath,
-          remoteSchema
-        );
+        yield* codegen.generateTypesDeclarationFile(outPath, schema, version);
 
         yield* Console.log(
           `✓ Types written to ${typesOutput} (version ${version.slice(
@@ -105,7 +104,7 @@ export const typesGenerateCommand = Command.make(
         const latest = yield* schemaService.fetchSchemaVersion().pipe(
           Effect.catch((e) =>
             Effect.logWarning(
-              `[voidhash types --watch] Skipping poll due to error: ${String(e)}`
+              `[voidhash-cli types --watch] Skipping poll due to error: ${String(e)}`
             ).pipe(Effect.as(null))
           )
         );
@@ -118,7 +117,7 @@ export const typesGenerateCommand = Command.make(
         const next = yield* regenerate.pipe(
           Effect.catch((e) =>
             Effect.logWarning(
-              `[voidhash types --watch] Regeneration failed: ${String(e)}`
+              `[voidhash-cli types --watch] Regeneration failed: ${String(e)}`
             ).pipe(Effect.as(null))
           )
         );
diff --git a/apps/cli/src/domain/services/codegen.ts b/apps/cli/src/domain/services/codegen.ts
index 0db126d99..3a5f1f8df 100644
--- a/apps/cli/src/domain/services/codegen.ts
+++ b/apps/cli/src/domain/services/codegen.ts
@@ -3,7 +3,6 @@ import { Effect, FileSystem, Layer, ServiceMap } from "effect";
 import {
   VOIDHASH_FETCHED_AT_COMMENT_PREFIX,
   VOIDHASH_VERSION_COMMENT_PREFIX,
-  computeSchemaVersionFromNormalized,
   parseVersionFromDeclaration,
 } from "../../utils/schema/version";
 import type { Writable } from "../../utils/types";
@@ -20,8 +19,12 @@ function toUnionType(slugs: string[]): string {
 /**
  * Generate the contents of the `voidhash.gen.d.ts` declaration file.
  *
+ * The version baked into the header is supplied by the caller (and ultimately
+ * by the server's `GET /api/v1/schema` / `GET /api/v1/schema/version`
+ * endpoints) so client and server can never disagree on the hash.
+ *
  * The file:
- * - Starts with a `@voidhash:version` header so `voidhash types check` and the
+ * - Starts with a `@voidhash:version` header so `voidhash-cli types check` and the
  *   dev-mode runtime warning can detect staleness without re-downloading the
  *   full schema.
  * - Augments `@voidhash/react-native`'s `VoidhashRegister` interface so all
@@ -29,9 +32,9 @@ function toUnionType(slugs: string[]): string {
  */
 export function generateTypesDeclaration(
   schema: NormalizedSchema,
+  version: string,
   options: { fetchedAt?: Date } = {}
-): { content: string; version: string } {
-  const version = computeSchemaVersionFromNormalized(schema);
+): string {
   const fetchedAt = (options.fetchedAt ?? new Date()).toISOString();
 
   const productSlugs = [...schema.products.keys()].sort();
@@ -56,7 +59,7 @@ export function generateTypesDeclaration(
   lines.push("export {};");
   lines.push("");
 
-  return { content: lines.join("\n"), version };
+  return lines.join("\n");
 }
 
 const make = Effect.gen(function* effect() {
@@ -83,14 +86,16 @@ const make = Effect.gen(function* effect() {
 
   /**
    * Generate the `.d.ts` declaration file from the remote schema and write it
-   * to disk. Returns the version hash that was baked into the header.
+   * to disk. `version` is the server-provided hash that gets baked into the
+   * header so the CI gate / dev-mode warning can detect drift.
    */
   const generateTypesDeclarationFile = (
     filePath: string,
-    schema: NormalizedSchema
+    schema: NormalizedSchema,
+    version: string
   ) =>
     Effect.gen(function* generateTypesDeclarationFile() {
-      const { content, version } = generateTypesDeclaration(schema);
+      const content = generateTypesDeclaration(schema, version);
       yield* fileSystem.writeFileString(filePath, content);
       return version;
     });
diff --git a/apps/cli/src/domain/services/schema.ts b/apps/cli/src/domain/services/schema.ts
index 72a8432ff..4ff0ca706 100644
--- a/apps/cli/src/domain/services/schema.ts
+++ b/apps/cli/src/domain/services/schema.ts
@@ -1,11 +1,11 @@
-import { Effect, Layer, Schedule, ServiceMap } from "effect";
+import { Effect, Layer, ServiceMap } from "effect";
 
 import { ApiClient } from "../../utils/api-client";
-import { computeSchemaVersionFromNormalized } from "../../utils/schema/version";
 import { RemoteSchemaFetchError } from "../errors/schema";
 import {
   type ProviderId,
   createEmptyNormalizedSchema,
+  type NormalizedSchema,
 } from "../schema/normalized-schema";
 
 const make = Effect.gen(function* effect() {
@@ -13,30 +13,28 @@ const make = Effect.gen(function* effect() {
 
   /**
    * Fetch the full schema (perks, locations, products, provider configs) from
-   * the server. Used by `voidhash types generate` to assemble the data the
-   * `.d.ts` is generated from.
+   * the server's consolidated `GET /api/v1/schema` endpoint and project it
+   * into the CLI's `NormalizedSchema`.
    *
-   * Once the server ships a consolidated `GET /schema` endpoint this collapses
-   * to a single call; for now it composes the per-entity endpoints.
+   * Replaces the five round-trips the CLI used to make against the
+   * per-entity endpoints. The server is now the canonical source for the
+   * version hash too — we no longer re-derive it on the client.
    */
   const fetchRemoteSchema = () =>
     Effect.gen(function* fetchRemoteSchema() {
       yield* Effect.logDebug("Fetching remote schema from API");
-      const schema = createEmptyNormalizedSchema();
+      const response = yield* apiClient.schemaGetSchema();
 
-      // Perks
-      const remotePerks = yield* apiClient.perksListPerks();
-      for (const perk of remotePerks) {
+      const schema: NormalizedSchema = createEmptyNormalizedSchema();
+
+      for (const perk of response.perks) {
         schema.perks.set(perk.slug, {
           name: perk.name,
           slug: perk.slug,
         });
       }
 
-      // Paywall locations
-      const remoteLocations =
-        yield* apiClient.paywallLocationsListPaywallLocations();
-      for (const location of remoteLocations) {
+      for (const location of response.locations) {
         schema.locations.set(location.slug, {
           description: location.description,
           name: location.name,
@@ -44,106 +42,71 @@ const make = Effect.gen(function* effect() {
         });
       }
 
-      // Products
-      const remoteProducts = yield* apiClient.productsListProducts();
-
-      // Payment provider configurations
-      const providerConfigs =
-        yield* apiClient.paymentProviderConfigurationsListPaymentProviderConfigurations();
-      for (const config of providerConfigs) {
-        if (
-          config.providerId === "appleAppStore" ||
-          config.providerId === "googlePlay"
-        ) {
-          schema.enabledProviders.add(config.providerId);
-        }
-      }
-
-      // Payment provider products
-      const providerProducts =
-        yield* apiClient.paymentProviderProductsListPaymentProviderProducts();
-      const productProviderMap = new Map<
-        string,
-        { providerId: ProviderId; configuration: Record<string, unknown> }[]
-      >();
-      for (const pp of providerProducts) {
-        if (
-          pp.providerId !== "appleAppStore" &&
-          pp.providerId !== "googlePlay"
-        ) {
-          continue;
-        }
-        const existing = productProviderMap.get(pp.productId) || [];
-        existing.push({
-          configuration: pp.configuration as Record<string, unknown>,
-          providerId: pp.providerId,
+      const SUPPORTED_PROVIDER_IDS: ReadonlySet<string> = new Set<ProviderId>([
+        "appleAppStore",
+        "googlePlay",
+      ]);
+
+      for (const product of response.products) {
+        schema.products.set(product.slug, {
+          name: product.name,
+          perks: [...product.perks],
+          providers: product.providers
+            .filter((provider) =>
+              SUPPORTED_PROVIDER_IDS.has(provider.providerId as string)
+            )
+            .map((provider) => ({
+              configuration: provider.configuration,
+              providerId: provider.providerId as ProviderId,
+            })),
+          slug: product.slug,
+          type: product.type,
         });
-        productProviderMap.set(pp.productId, existing);
       }
 
-      // For each product, fetch its perks
-      yield* Effect.all(
-        remoteProducts.map((product) =>
-          Effect.gen(function* () {
-            const productPerks = yield* apiClient
-              .productPerksListProductPerksByProductId(product.id)
-              .pipe(
-                Effect.retry({
-                  schedule: Schedule.exponential(1000),
-                  times: 3,
-                }),
-              );
-
-            const perkSlugs: string[] = [];
-            for (const pp of productPerks) {
-              const perk = remotePerks.find((p) => p.id === pp.perkId);
-              if (perk) {
-                perkSlugs.push(perk.slug);
-              }
-            }
-
-            schema.products.set(product.slug, {
-              name: product.name,
-              perks: perkSlugs,
-              providers: productProviderMap.get(product.id) || [],
-              slug: product.slug,
-              type: "subscription",
-            });
-          }),
-        ),
-        {
-          concurrency: 8,
-        },
-      );
+      for (const providerId of response.enabledProviders) {
+        schema.enabledProviders.add(providerId);
+      }
 
       yield* Effect.logDebug(
         `Fetched ${schema.locations.size} locations, ${schema.perks.size} perks, ${schema.products.size} products`
       );
-      return schema;
+
+      // The server-side version is the canonical hash and trumps any local
+      // re-derivation. Surface it so callers (codegen, `types check`) can
+      // bake it into the `.d.ts` header / compare against the local one.
+      return { schema, version: response.version };
     }).pipe(
       Effect.withSpan("SchemaService.fetchRemoteSchema"),
-      Effect.catch(
-        (e) =>
-          Effect.fail(new RemoteSchemaFetchError({
+      Effect.catch((e) =>
+        Effect.fail(
+          new RemoteSchemaFetchError({
             cause: e,
-          })),
-      ),
+          })
+        )
+      )
     );
 
   /**
-   * Fetch just the schema version hash from the server. Used by `types check`,
-   * the `--watch` poll loop, and the dev-mode runtime warning to detect
-   * staleness cheaply without re-downloading the full schema.
-   *
-   * Today this re-derives the version from the full schema fetch (since the
-   * consolidated `GET /schema/version` endpoint isn't shipped yet). Once
-   * that endpoint exists this collapses to a single sub-kilobyte request.
+   * Cheap version probe used by `voidhash-cli types check`, the `--watch` poll
+   * loop, and (indirectly) the dev-mode SDK drift warning. Hits the dedicated
+   * `GET /api/v1/schema/version` endpoint so we don't ship the whole schema
+   * just to compare hashes.
    */
   const fetchSchemaVersion = () =>
     Effect.gen(function* fetchSchemaVersion() {
-      const schema = yield* fetchRemoteSchema();
-      return computeSchemaVersionFromNormalized(schema);
-    });
+      const response = yield* apiClient.schemaGetSchemaVersion();
+      return response.version;
+    }).pipe(
+      Effect.withSpan("SchemaService.fetchSchemaVersion"),
+      Effect.catch((e) =>
+        Effect.fail(
+          new RemoteSchemaFetchError({
+            cause: e,
+          })
+        )
+      )
+    );
 
   return {
     fetchRemoteSchema,
@@ -153,9 +116,10 @@ const make = Effect.gen(function* effect() {
 
 type SchemaServiceShape = Effect.Success<typeof make>;
 
-export class SchemaService extends ServiceMap.Service<SchemaService, SchemaServiceShape>()(
-  "voidhash-cli/Schema"
-) {
+export class SchemaService extends ServiceMap.Service<
+  SchemaService,
+  SchemaServiceShape
+>()("voidhash-cli/Schema") {
   static Default = Layer.effect(SchemaService, make).pipe(
     Layer.provide(ApiClient.Default)
   );
diff --git a/apps/cli/src/utils/api-client.ts b/apps/cli/src/utils/api-client.ts
index a521d3eda..46ee36824 100644
--- a/apps/cli/src/utils/api-client.ts
+++ b/apps/cli/src/utils/api-client.ts
@@ -28,7 +28,7 @@ const make = Effect.gen(function* effect() {
               );
 
               return HttpClientRequest.setHeaders(
-                HttpClientRequest.prependUrl(request, "http://localhost:5001"),
+                HttpClientRequest.prependUrl(request, "http://localhost:8787"),
                 config.api_key ? { "x-api-key": config.api_key } : {}
               );
             }).pipe(Effect.withSpan("ApiClient.transformRequest"))
diff --git a/apps/cli/src/utils/error-formatter.ts b/apps/cli/src/utils/error-formatter.ts
index 10b754089..124cb168a 100644
--- a/apps/cli/src/utils/error-formatter.ts
+++ b/apps/cli/src/utils/error-formatter.ts
@@ -16,7 +16,7 @@ export const isDebugMode = (): boolean =>
  * @example
  * ```ts
  * Effect.catchTag("NoSignedInUserError", () =>
- *   Effect.fail(userError("You must be logged in. Run 'voidhash auth login' first."))
+ *   Effect.fail(userError("You must be logged in. Run 'voidhash-cli auth login' first."))
  * )
  * ```
  */
diff --git a/apps/cli/src/utils/schema/version.ts b/apps/cli/src/utils/schema/version.ts
index bfecd1993..52461a327 100644
--- a/apps/cli/src/utils/schema/version.ts
+++ b/apps/cli/src/utils/schema/version.ts
@@ -1,53 +1,8 @@
-import { createHash } from "node:crypto";
-
-import type { NormalizedSchema } from "../../domain/schema/normalized-schema";
-
 /**
- * Compute a deterministic sha256 hash of a normalized schema. The result is
- * what `voidhash types generate` bakes into the `.d.ts` header and what
- * `voidhash types check` compares against the server.
- *
- * The hash is order-independent (slugs sorted) so unrelated reorderings
- * don't churn the version.
+ * Header-comment helpers used by the generated `voidhash.gen.d.ts`. The
+ * version hash itself is supplied by the server (`GET /api/v1/schema`,
+ * `GET /api/v1/schema/version`) — there is no client-side derivation.
  */
-export function computeSchemaVersionFromNormalized(
-  schema: NormalizedSchema
-): string {
-  const sortedProducts = [...schema.products.values()]
-    .map((product) => ({
-      name: product.name,
-      perks: [...product.perks].sort(),
-      providers: [...product.providers]
-        .map((provider) => ({
-          providerId: provider.providerId,
-          configuration: provider.configuration,
-        }))
-        .sort((a, b) => a.providerId.localeCompare(b.providerId)),
-      slug: product.slug,
-      type: product.type,
-    }))
-    .sort((a, b) => a.slug.localeCompare(b.slug));
-
-  const sortedLocations = [...schema.locations.values()]
-    .map((location) => ({
-      description: location.description,
-      name: location.name,
-      slug: location.slug,
-    }))
-    .sort((a, b) => a.slug.localeCompare(b.slug));
-
-  const sortedPerks = [...schema.perks.values()]
-    .map((perk) => ({ name: perk.name, slug: perk.slug }))
-    .sort((a, b) => a.slug.localeCompare(b.slug));
-
-  const payload = JSON.stringify({
-    locations: sortedLocations,
-    perks: sortedPerks,
-    products: sortedProducts,
-  });
-
-  return `sha256:${createHash("sha256").update(payload).digest("hex")}`;
-}
 
 export const VOIDHASH_VERSION_COMMENT_PREFIX = "// @voidhash:version ";
 export const VOIDHASH_FETCHED_AT_COMMENT_PREFIX = "// @voidhash:fetched-at ";
diff --git a/docs/server-first-schema-server-spec.md b/docs/server-first-schema-server-spec.md
index 41c615f2a..ab3b14a87 100644
--- a/docs/server-first-schema-server-spec.md
+++ b/docs/server-first-schema-server-spec.md
@@ -11,7 +11,7 @@ The CLI and React Native SDK no longer treat the user's code as the source of
 truth for the schema (perks, products, paywall locations, payment provider
 mappings). The dashboard is. After the client-side refactor:
 
-- `voidhash schema push / pull / check` are gone.
+- `voidhash-cli schema push / pull / check` are gone.
 - The CLI's only job vs the schema is to generate a `.d.ts` declaration file
   (`voidhash.gen.d.ts`) consumed by the SDK via module augmentation.
 - The SDK fetches the runtime schema on `Provider` mount instead of receiving
@@ -47,8 +47,8 @@ Replaces the five round-trips the CLI currently makes to assemble a
 `NormalizedSchema`. Returns everything in one response.
 
 **Authentication:** Bearer token (session). Same auth as today's per-entity
-admin endpoints. The CLI calls this from `voidhash types generate` (and
-indirectly from `voidhash init`).
+admin endpoints. The CLI calls this from `voidhash-cli types generate` (and
+indirectly from `voidhash-cli init`).
 
 **Response (200):**
 
@@ -109,8 +109,8 @@ version hash (see below).
 
 Returns just the version hash. Used by:
 
-- `voidhash types generate --watch` (polls every 5s by default).
-- `voidhash types check` (CI gate — compares against the `@voidhash:version`
+- `voidhash-cli types generate --watch` (polls every 5s by default).
+- `voidhash-cli types check` (CI gate — compares against the `@voidhash:version`
   header in the local `.d.ts`).
 - The SDK's dev-mode drift warning.
 
@@ -344,7 +344,7 @@ to `string` so user code still compiles.
    `If-None-Match: <old-version>` returns 304 before the mutation and 200
    after.
 3. From a fresh CLI clone with a generated `voidhash.gen.d.ts` for the
-   pre-mutation schema, run `voidhash types check` — assert non-zero
+   pre-mutation schema, run `voidhash-cli types check` — assert non-zero
    exit + the printed diff cites the new version.
 4. From the SDK example app, mount `Provider`, assert `useProducts()`
    returns the slugs/configurations now living on the server.
diff --git a/examples/react-native-example/package.json b/examples/react-native-example/package.json
index 661ae7739..83f8c2645 100644
--- a/examples/react-native-example/package.json
+++ b/examples/react-native-example/package.json
@@ -4,13 +4,13 @@
   "private": true,
   "main": "expo-router/entry",
   "scripts": {
-    "run:android": "expo run:android",
-    "run:ios": "expo run:ios --device",
+    "android:device": "expo run:android --device",
+    "ios:device": "expo run:ios --device",
     "eas:build-dev:local": "eas build --local -e development",
     "start": "expo start --dev-client",
     "prebuild": "expo prebuild",
-    "voidhash:types": "voidhash types generate",
-    "voidhash:types-check": "voidhash types check",
+    "voidhash:types": "voidhash-cli types generate",
+    "voidhash:types-check": "voidhash-cli types check",
     "lint": "biome check .",
     "typecheck": "tsc --noEmit",
     "format": "biome format .",
diff --git a/examples/react-native-example/utils/voidhash/client.ts b/examples/react-native-example/utils/voidhash/client.ts
index db76c615c..a43e8dc2a 100644
--- a/examples/react-native-example/utils/voidhash/client.ts
+++ b/examples/react-native-example/utils/voidhash/client.ts
@@ -3,7 +3,7 @@ import { createVoidhashClient } from "@voidhash/react-native";
 /**
  * Voidhash client for the example app.
  *
- * Schema lives on the server now — run `voidhash types generate` to refresh
+ * Schema lives on the server now — run `voidhash-cli types generate` to refresh
  * the local `voidhash.gen.d.ts` whenever the dashboard schema changes.
  */
 export const voidhash = createVoidhashClient(
diff --git a/examples/react-native-example/voidhash.gen.d.ts b/examples/react-native-example/voidhash.gen.d.ts
index ea5c4866a..4cddd9f3f 100644
--- a/examples/react-native-example/voidhash.gen.d.ts
+++ b/examples/react-native-example/voidhash.gen.d.ts
@@ -1,13 +1,13 @@
 // voidhash.gen.d.ts — generated by voidhash-cli, do not edit
-// @voidhash:version sha256:placeholder
-// @voidhash:fetched-at 1970-01-01T00:00:00.000Z
+// @voidhash:version sha256:e6f6dbac538ef9956b435013a314f220ac028d21762b4777096a0b1df7966a13
+// @voidhash:fetched-at 2026-05-11T14:56:24.982Z
 
 declare module "@voidhash/react-native" {
   interface VoidhashRegister {
     schema: {
       products: never;
       locations: never;
-      perks: never;
+      perks: "test" | "test-2";
     };
   }
 }
diff --git a/libraries/node/src/generated/grouped-client.ts b/libraries/node/src/generated/grouped-client.ts
index 989908c25..6d0e26185 100644
--- a/libraries/node/src/generated/grouped-client.ts
+++ b/libraries/node/src/generated/grouped-client.ts
@@ -11,9 +11,6 @@ export const groupCoreClient = (client: VoidhashCoreClient) => ({
   auth: {
     session: () => client.authSession(),
   },
-  changesets: {
-    deployChangeset: (request: { payload: Parameters<VoidhashCoreClient["changesetsDeployChangeset"]>[0] }) => client.changesetsDeployChangeset(request.payload),
-  },
   organizations: {
     createOrganization: (request: { payload: Parameters<VoidhashCoreClient["organizationsCreateOrganization"]>[0] }) => client.organizationsCreateOrganization(request.payload),
   },
@@ -45,6 +42,10 @@ export const groupCoreClient = (client: VoidhashCoreClient) => ({
     createProject: (request: { payload: Parameters<VoidhashCoreClient["projectsCreateProject"]>[0] }) => client.projectsCreateProject(request.payload),
     listProjects: (request: { params: { readonly "organizationId": string } }) => client.projectsListProjects(request.params["organizationId"]),
   },
+  schema: {
+    getSchema: () => client.schemaGetSchema(),
+    getSchemaVersion: () => client.schemaGetSchemaVersion(),
+  },
   users: {
     getUser: () => client.usersGetUser(),
   },
diff --git a/libraries/node/tests/client.test.ts b/libraries/node/tests/client.test.ts
index d61efd1c9..2ec318158 100644
--- a/libraries/node/tests/client.test.ts
+++ b/libraries/node/tests/client.test.ts
@@ -22,7 +22,6 @@ import { createJsonResponse, installFetchMock } from "./helpers";
 const EXPECTED_GROUPS = [
   "apiKeys",
   "auth",
-  "changesets",
   "organizations",
   "paymentProviderConfigurations",
   "paymentProviderProducts",
@@ -32,6 +31,7 @@ const EXPECTED_GROUPS = [
   "productPerks",
   "products",
   "projects",
+  "schema",
   "users",
   "webhooks",
 ] as const;
@@ -76,9 +76,12 @@ describe("@voidhash/node", () => {
 
     expectTypeOf<HasKey<VoidhashNodeEffectClient, "sdk">>().toEqualTypeOf<false>();
     expectTypeOf<HasKey<VoidhashNodeClient, "sdk">>().toEqualTypeOf<false>();
+    expectTypeOf<HasKey<VoidhashNodeEffectClient, "changesets">>().toEqualTypeOf<false>();
     expectTypeOf<HasKey<VoidhashNodeEffectClient, "auth">>().toEqualTypeOf<true>();
+    expectTypeOf<HasKey<VoidhashNodeEffectClient, "schema">>().toEqualTypeOf<true>();
     expectTypeOf<HasKey<VoidhashNodeEffectClient, "webhooks">>().toEqualTypeOf<true>();
     expectTypeOf<HasKey<VoidhashNodeClient, "auth">>().toEqualTypeOf<true>();
+    expectTypeOf<HasKey<VoidhashNodeClient, "schema">>().toEqualTypeOf<true>();
     expectTypeOf<HasKey<VoidhashNodeClient, "webhooks">>().toEqualTypeOf<true>();
   });
 
@@ -352,7 +355,7 @@ describe("@voidhash/node", () => {
       _tag: (effectError as { _tag?: string })._tag,
     });
     expect(promiseError).toMatchObject({
-      _tag: "ActionForbiddenError",
+      _tag: "ApiActionForbiddenError",
     });
   });
 });
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 69a2de9c9..38b1f1efb 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -162,10 +162,13 @@ const makeUnitializedClient = () => ({
         yield* customerInfoManager.getCustomer(distinctId, "fetch");
       }
 
-      // Fetch the runtime schema. The server endpoint is still being built;
-      // until it ships the API client returns an empty schema with a warning,
-      // and product-related calls return empty data.
-      let runtimeSchema = initOptions.internalSchema ?? createEmptyRuntimeSchema();
+      // Fetch the runtime schema from the server's `GET /sdk/schema`
+      // endpoint and cache it on the initialized client. A failure here is
+      // non-fatal — non-schema hooks (paywall resolution, feature flags,
+      // identify) still work — but product-related hooks will return empty
+      // data until the next successful init.
+      let runtimeSchema =
+        initOptions.internalSchema ?? createEmptyRuntimeSchema();
       if (!initOptions.internalSchema) {
         const commonHeaders = yield* getCommonSdkHeaders();
         const distinctId = yield* identityManager.getDistinctId();
@@ -178,7 +181,7 @@ const makeUnitializedClient = () => ({
           })
         );
         if (fetched._tag === "Success") {
-          runtimeSchema = fetched.value as RuntimeSchema;
+          runtimeSchema = fetched.value;
         } else {
           yield* Effect.logWarning(
             "[voidhash] Failed to fetch schema at init — product-related hooks will return empty data."
@@ -502,7 +505,10 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) => {
             ...commonHeaders,
             "x-distinct-id": distinctId,
           },
-          payload: mapTransactionToSyncPayload(transaction),
+          payload: mapTransactionToSyncPayload(
+            transaction,
+            options.schema.products
+          ),
         });
 
         yield* cacheManager.set(processedTransactionCacheKey, true, {
@@ -942,11 +948,41 @@ const buildTransactionProcessingKey = (transaction: Transaction) =>
 const getProcessedTransactionCacheKey = (transactionProcessingKey: string) =>
   `processed-transaction:${transactionProcessingKey}`;
 
-const mapTransactionToSyncPayload = (transaction: Transaction) => {
+const resolveTransactionProductSlug = (
+  transaction: Transaction,
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+) => {
+  const matchedProduct = Object.values(productDefinitions).find(
+    (productDefinition) => {
+      if (productDefinition.slug === transaction.productId) {
+        return true;
+      }
+
+      const provider =
+        transaction.platform === "ios"
+          ? productDefinition.configuration.providers.appleAppStore
+          : productDefinition.configuration.providers.googlePlay;
+
+      return provider?.productId === transaction.productId;
+    }
+  );
+
+  return matchedProduct?.slug ?? transaction.productId;
+};
+
+const mapTransactionToSyncPayload = (
+  transaction: Transaction,
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+) => {
+  const productSlug = resolveTransactionProductSlug(
+    transaction,
+    productDefinitions
+  );
+
   if (transaction.platform === "ios") {
     return {
       platform: "ios" as const,
-      productId: transaction.productId,
+      productSlug,
       purchaseDate: transaction.purchaseDate,
       quantity: transaction.quantity,
       receipt: transaction.receipt,
@@ -956,7 +992,7 @@ const mapTransactionToSyncPayload = (transaction: Transaction) => {
 
   return {
     platform: "android" as const,
-    productId: transaction.productId,
+    productSlug,
     purchaseDate: transaction.purchaseDate,
     purchaseToken: transaction.purchaseToken ?? "",
     quantity: transaction.quantity,
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index 0dd0b0d0a..1088b24bd 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -22,7 +22,7 @@ import { purchaseHookFactory } from "./react/hooks/use-purchase";
  * - There is no schema argument. The schema lives on the server and is
  *   fetched on `Provider` mount.
  * - Type safety for product / location / perk slugs comes from the generated
- *   `voidhash.gen.d.ts` (run `voidhash types generate`).
+ *   `voidhash.gen.d.ts` (run `voidhash-cli types generate`).
  */
 export function createVoidhashClient(
   publishableKey: string,
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index 0ee7d5984..b6451813a 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -5,6 +5,7 @@ import {
   type SdkEvaluateFeatureFlagsParams,
   type SdkFeatureFlagsResponse,
   type SdkGetPersonParams,
+  type SdkGetSchemaParams,
   type SdkIdentifyPersonParams,
   type SdkIdentifyBody,
   type SdkResolvePaywallBody,
@@ -15,6 +16,7 @@ import {
 import { Effect, Layer, ServiceMap } from "effect";
 import { HttpClient, HttpClientRequest } from "effect/unstable/http";
 
+import type { RuntimeSchema } from "../schema/runtime";
 import { SdkConfiguration } from "../sdk-configuration";
 import { withHttpDebugLogging } from "./http-debug-client";
 
@@ -29,7 +31,7 @@ export interface ReactNativeFeatureFlagsResponse {
 
 export interface ReactNativeSyncTransactionRequest {
   readonly platform: "android" | "ios";
-  readonly productId: string;
+  readonly productSlug: string;
   readonly purchaseDate: number;
   readonly quantity: number;
   readonly receipt?: string | undefined;
@@ -70,17 +72,6 @@ const normalizeFeatureFlagsResponse = (
   })),
 });
 
-/**
- * Stub error surfaced when the server-side `GET /sdk/schema` endpoint is not
- * yet deployed (the server-side work is tracked separately per the
- * server-first redesign plan). When the endpoint ships, this stub is replaced
- * by a call into the generated client.
- */
-const SCHEMA_ENDPOINT_NOT_IMPLEMENTED_MESSAGE =
-  "[voidhash] The GET /sdk/schema endpoint is not yet available on the server. " +
-  "Schema-dependent hooks (useProducts, usePurchase) will return empty data until it ships. " +
-  "See the server-first redesign plan for tracking.";
-
 const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
   sdk: {
     /**
@@ -88,20 +79,17 @@ const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
      * mount and cached for the session. Authenticates via the publishable key
      * (same credential the SDK uses for paywall resolution, etc.).
      *
-     * TODO(server): wire up `client.sdkGetSchema(...)` once the server endpoint
-     * is implemented. For now this returns an empty schema and logs once so
-     * the SDK remains usable while the backend work is in flight.
+     * The server's `SdkSchema` response is structurally identical to
+     * `RuntimeSchema` (slug-keyed records). The generated client types the
+     * nested fields loosely as `Record<string, unknown>`; we tighten the
+     * boundary with a cast here so the rest of the SDK can treat it as a
+     * `RuntimeSchema`.
      */
-    getSchema: (_request: { headers: ReactNativeSdkHeaders }) =>
-      Effect.gen(function* getSchema() {
-        yield* Effect.logWarning(SCHEMA_ENDPOINT_NOT_IMPLEMENTED_MESSAGE);
-        return {
-          version: "",
-          products: {} as Readonly<Record<string, never>>,
-          locations: {} as Readonly<Record<string, never>>,
-          perks: {} as Readonly<Record<string, never>>,
-        };
-      }),
+    getSchema: (request: { headers: ReactNativeSdkHeaders }) =>
+      Effect.map(
+        client.sdkGetSchema(request.headers as SdkGetSchemaParams),
+        (response): RuntimeSchema => response as unknown as RuntimeSchema
+      ),
     evaluateFeatureFlags: (request: {
       headers: ReactNativeSdkHeaders;
       payload: EvaluateFeatureFlagsBody;
diff --git a/libraries/react-native/src/core/schema/registry.ts b/libraries/react-native/src/core/schema/registry.ts
index 79da267d7..6bd84a522 100644
--- a/libraries/react-native/src/core/schema/registry.ts
+++ b/libraries/react-native/src/core/schema/registry.ts
@@ -3,7 +3,7 @@
  * teaches the SDK about the project-specific schema (product slugs, paywall
  * location slugs, perk slugs) defined on the server.
  *
- * Usage in user code: the user runs `voidhash types generate`, which writes a
+ * Usage in user code: the user runs `voidhash-cli types generate`, which writes a
  * declaration file augmenting this interface. Once that file is part of the
  * project's TypeScript compilation, hooks like `usePaywallByLocation(slug)`
  * autocomplete the literal union of valid slugs.
diff --git a/libraries/react-native/src/core/schema/runtime.ts b/libraries/react-native/src/core/schema/runtime.ts
index e0d8d07d7..23c24ddc8 100644
--- a/libraries/react-native/src/core/schema/runtime.ts
+++ b/libraries/react-native/src/core/schema/runtime.ts
@@ -47,7 +47,7 @@ export interface RuntimePerkDefinition {
  * The full schema as fetched from the server. Keyed by slug.
  *
  * The `version` is a sha256 hash of the schema state on the server and is
- * what `voidhash types check` and the dev-mode runtime warning compare
+ * what `voidhash-cli types check` and the dev-mode runtime warning compare
  * against the generated `.d.ts` header.
  */
 export interface RuntimeSchema {
diff --git a/libraries/react-native/src/metro/index.ts b/libraries/react-native/src/metro/index.ts
index 3e9548356..65cd4c4f1 100644
--- a/libraries/react-native/src/metro/index.ts
+++ b/libraries/react-native/src/metro/index.ts
@@ -13,7 +13,7 @@
  * });
  * ```
  *
- * Spawns `voidhash types generate --watch` as a child process on Metro server
+ * Spawns `voidhash-cli types generate --watch` as a child process on Metro server
  * start and tears it down on shutdown. Errors from the spawned CLI are logged
  * but do not crash Metro — the user can keep developing against the
  * last-known-good `.d.ts`.
@@ -58,7 +58,7 @@ type MetroConfig = unknown;
 export interface WithVoidhashOptions {
   /** How often to poll the server for schema changes (ms). Default 5000. */
   pollIntervalMs?: number;
-  /** Path to the `voidhash` CLI binary. Defaults to picking it up via $PATH. */
+  /** Path to the `voidhash-cli` binary. Defaults to picking it up via $PATH. */
   cliBinary?: string;
   /** Additional CLI arguments forwarded after `types generate --watch`. */
   extraArgs?: ReadonlyArray<string>;
@@ -88,7 +88,7 @@ function startWatcher(options: WithVoidhashOptions) {
     return;
   }
 
-  const binary = options.cliBinary ?? "voidhash";
+  const binary = options.cliBinary ?? "voidhash-cli";
   const args = [
     "types",
     "generate",
@@ -131,7 +131,7 @@ function startWatcher(options: WithVoidhashOptions) {
 }
 
 /**
- * Wrap a Metro config so that `voidhash types generate --watch` runs alongside
+ * Wrap a Metro config so that `voidhash-cli types generate --watch` runs alongside
  * the Metro dev server. Returns the original config unchanged — the watcher
  * runs as a sibling process, not via Metro's transformer/resolver pipeline.
  */
diff --git a/packages/generated-clients/openapi/core.json b/packages/generated-clients/openapi/core.json
index 58e3cf7e3..735c243a5 100644
--- a/packages/generated-clients/openapi/core.json
+++ b/packages/generated-clients/openapi/core.json
@@ -1 +1 @@
-{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/api/v1/auth/session":{"get":{"tags":["auth"],"operationId":"auth.session","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"method":{"anyOf":[{"type":"string","enum":["api-key"]},{"type":"string","enum":["publishable-key"]},{"type":"string","enum":["secret-key"]}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","organizationId","slug"],"additionalProperties":false}}},"required":["method","name","organizations","projects"],"additionalProperties":false}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"Error","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}}}}}}},"/api/v1/api-keys":{"post":{"tags":["api_keys"],"operationId":"api_keys.createSecretKey","parameters":[],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSecretKeyBody"}}},"required":true}},"get":{"tags":["api_keys"],"operationId":"api_keys.listApiKeys","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ApiKey"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}":{"get":{"tags":["api_keys"],"operationId":"api_keys.getApiKeyById","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"delete":{"tags":["api_keys"],"operationId":"api_keys.deleteApiKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}/rotate":{"post":{"tags":["api_keys"],"operationId":"api_keys.rotateSecretKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyNotFoundError"}}}},"500":{"description":"ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons":{"post":{"tags":["persons"],"operationId":"persons.createPerson","parameters":[],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"PersonInvalidAnonymousIdError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonInvalidAnonymousIdError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreatePersonBody"}}},"required":true}},"get":{"tags":["persons"],"operationId":"persons.listPersons","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Person"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/{personId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonById","parameters":[{"name":"personId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/by-distinct-id/{distinctId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonByDistinctId","parameters":[{"name":"distinctId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/PersonNotFoundError"}}}},"500":{"description":"PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/organizations":{"post":{"tags":["organizations"],"operationId":"organizations.createOrganization","parameters":[],"security":[],"responses":{"200":{"description":"Organization","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Organization"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"OrganizationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/OrganizationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateOrganizationBody"}}},"required":true}}},"/api/v1/perks":{"get":{"tags":["perks"],"operationId":"perks.listPerks","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Perk"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/paywall-locations":{"get":{"tags":["paywall_locations"],"operationId":"paywall_locations.listPaywallLocations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaywallLocation"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaywallLocationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaywallLocationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/projects":{"post":{"tags":["projects"],"operationId":"projects.createProject","parameters":[],"security":[],"responses":{"200":{"description":"Project","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Project"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateProjectBody"}}},"required":true}}},"/api/v1/projects/{organizationId}":{"get":{"tags":["projects"],"operationId":"projects.listProjects","parameters":[{"name":"organizationId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Project"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/products":{"get":{"tags":["products"],"operationId":"products.listProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Product"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/product-perks/by-product-id/{productId}":{"get":{"tags":["product_perks"],"operationId":"product_perks.listProductPerksByProductId","parameters":[{"name":"productId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ProductPerk"}}}}},"400":{"description":"ProductPerkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"ProductPerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/ProductPerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/person":{"get":{"tags":["sdk"],"operationId":"sdk.getPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonNotFoundError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/identify":{"post":{"tags":["sdk"],"operationId":"sdk.identifyPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"409":{"description":"SdkPersonAlreadyIdentifiedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPersonAlreadyIdentifiedError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkIdentifyBody"}}},"required":true}}},"/api/v1/sdk/person/traits":{"post":{"tags":["sdk"],"operationId":"sdk.syncPersonAttributes","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncPersonAttributesBody"}}},"required":true}}},"/api/v1/sdk/sync-transaction":{"post":{"tags":["sdk"],"operationId":"sdk.syncTransaction","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkSyncTransactionResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncTransactionResponse"}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"platform":{"anyOf":[{"type":"string","enum":["ios"]},{"type":"string","enum":["android"]}]},"productId":{"type":"string"},"purchaseDate":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"purchaseToken":{"anyOf":[{"type":"string"},{"type":"null"}]},"quantity":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"receipt":{"anyOf":[{"type":"string"},{"type":"null"}]},"transactionId":{"type":"string"}},"required":["platform","productId","purchaseDate","quantity","transactionId"],"additionalProperties":false}}},"required":true}}},"/api/v1/sdk/evaluate-flags":{"post":{"tags":["sdk"],"operationId":"sdk.evaluateFeatureFlags","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkFeatureFlagsResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkFeatureFlagsResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EvaluateFeatureFlagsBody"}}},"required":true}}},"/api/v1/sdk/resolve-paywall":{"post":{"tags":["sdk"],"operationId":"sdk.resolvePaywall","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkResolvedPaywall"},{"type":"null"}]}}}},"400":{"description":"SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"AuthenticationError | SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkResolvePaywallBody"}}},"required":true}}},"/api/v1/users/current":{"get":{"tags":["users"],"operationId":"users.getUser","parameters":[],"security":[],"responses":{"200":{"description":"User","content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"AuthenticationError | UserServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/UserServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-configurations":{"get":{"tags":["payment_provider_configurations"],"operationId":"payment_provider_configurations.listPaymentProviderConfigurations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderConfiguration"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderConfigurationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderConfigurationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-products":{"get":{"tags":["payment_provider_products"],"operationId":"payment_provider_products.listPaymentProviderProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderProduct"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"PaymentProviderProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/PaymentProviderProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/changesets/deploy":{"post":{"tags":["changesets"],"operationId":"changesets.deployChangeset","parameters":[],"security":[],"responses":{"200":{"description":"DeployChangesetResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"AuthenticationError | ChangesetDeploymentServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/ChangesetDeploymentServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeployChangesetBody"}}},"required":true}}},"/api/v1/webhooks/endpoints":{"post":{"tags":["webhooks"],"operationId":"webhooks.createWebhookEndpoint","parameters":[],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateWebhookEndpointBody"}}},"required":true}},"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookEndpoints","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEndpoint"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}},"patch":{"tags":["webhooks"],"operationId":"webhooks.updateWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateWebhookEndpointBody"}}},"required":true}},"delete":{"tags":["webhooks"],"operationId":"webhooks.deleteWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/rotate-secret":{"post":{"tags":["webhooks"],"operationId":"webhooks.rotateWebhookSecret","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/test":{"post":{"tags":["webhooks"],"operationId":"webhooks.testWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpointNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries":{"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookDeliveries","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDelivery"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDeliveryWithAttempts","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryWithAttempts"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}/retry":{"post":{"tags":["webhooks"],"operationId":"webhooks.retryWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ActionForbiddenError"}}}},"404":{"description":"WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryNotFoundError"}}}},"500":{"description":"WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/AuthenticationError"},{"$ref":"#/components/schemas/NotAuthenticatedError"}]}]}}}}}}}},"components":{"schemas":{"ActionForbiddenError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ActionForbiddenError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"AuthenticationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["AuthenticationError"]},"cause":{"type":"string"},"message":{"type":"string"}},"required":["_tag","cause","message"],"additionalProperties":false},"NotAuthenticatedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["NotAuthenticatedError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreateSecretKeyBody":{"type":"object","properties":{"name":{"type":"string"},"projectId":{"type":"string"}},"required":["name","projectId"],"additionalProperties":false},"ApiKeyWithRawKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"type":"string"}},"required":["end","id","isPublic","name","prefix","projectId","rawKey"],"additionalProperties":false},"ApiKeyServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ApiKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["end","id","isPublic","name","prefix","projectId"],"additionalProperties":false},"ApiKeyNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ApiKeyNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreatePersonBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Person":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"PersonInvalidAnonymousIdError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonInvalidAnonymousIdError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"PersonServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PersonNotFoundError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"CreateOrganizationBody":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"Organization":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"OrganizationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["OrganizationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Perk":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","projectId","slug"],"additionalProperties":false},"PerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaywallLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["description","id","name","projectId","slug"],"additionalProperties":false},"PaywallLocationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaywallLocationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"CreateProjectBody":{"type":"object","properties":{"name":{"type":"string"},"organizationId":{"type":"string"}},"required":["name","organizationId"],"additionalProperties":false},"Project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"ProjectServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProjectServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Product":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["one-time"]},{"type":"string","enum":["one-time-consumable"]}]}},"required":["id","name","projectId","slug","type"],"additionalProperties":false},"ProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerk":{"type":"object","properties":{"id":{"type":"string"},"perkId":{"type":"string"},"productId":{"type":"string"}},"required":["id","perkId","productId"],"additionalProperties":false},"ProductPerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ProductPerkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkEntitlementGrant":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"perkId":{"type":"string"},"source":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["purchase"]},{"type":"string","enum":["manual"]}]},"sourceId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["expired"]}]}},"required":["expiresAt","perkId","source","sourceId","sourcePersonId","status"],"additionalProperties":false},"SdkPurchaseHistoryEntry":{"type":"object","properties":{"createdAt":{"type":"string"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"providerKey":{"type":"string"},"purchaseId":{"type":"string"},"sourcePersonId":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["one_time"]},{"type":"string","enum":["subscription"]}]}},"required":["createdAt","productId","providerKey","purchaseId","sourcePersonId","type"],"additionalProperties":false},"SdkCurrentSubscription":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"type":"string","enum":["none"]},{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["past_due"]},{"type":"string","enum":["trialing"]}]},"subscriptionId":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["expiresAt","productId","status","subscriptionId"],"additionalProperties":false},"SdkSubscriptionHistoryEntry":{"type":"object","properties":{"canceledAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"isTrial":{"type":"boolean"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"startsAt":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["expired"]},{"type":"string","enum":["trialing"]},{"type":"string","enum":["past_due"]}]},"subscriptionId":{"type":"string"}},"required":["canceledAt","expiresAt","isTrial","productId","sourcePersonId","startsAt","status","subscriptionId"],"additionalProperties":false},"SdkPerson":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"entitlements":{"type":"object","properties":{"grants":{"type":"array","items":{"$ref":"#/components/schemas/SdkEntitlementGrant"}}},"required":["grants"],"additionalProperties":false},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"personId":{"type":"string"},"purchases":{"type":"object","properties":{"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkPurchaseHistoryEntry"}}},"required":["history"],"additionalProperties":false},"snapshotContext":{"type":"object","properties":{"includedPersonIds":{"type":"array","items":{"type":"string"}},"migrationJobId":{"anyOf":[{"type":"string"},{"type":"null"}]},"mode":{"anyOf":[{"type":"string","enum":["persisted"]},{"type":"string","enum":["temporary_pending_transfer"]}]}},"required":["includedPersonIds","migrationJobId","mode"],"additionalProperties":false},"subscriptions":{"type":"object","properties":{"current":{"anyOf":[{"$ref":"#/components/schemas/SdkCurrentSubscription"},{"type":"null"}]},"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkSubscriptionHistoryEntry"}}},"required":["current","history"],"additionalProperties":false}},"required":["distinctId","email","entitlements","name","personId","purchases","snapshotContext","subscriptions"],"additionalProperties":false},"SdkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SdkPersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkIdentifyBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"SdkPersonAlreadyIdentifiedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["SdkPersonAlreadyIdentifiedError"]},"distinctId":{"type":"string"}},"required":["_tag","distinctId"],"additionalProperties":false},"SdkSyncPersonAttributesBody":{"type":"object","properties":{"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"additionalProperties":false},"SdkSyncTransactionResponse":{"type":"object","properties":{"accepted":{"type":"boolean"}},"required":["accepted"],"additionalProperties":false},"EvaluateFeatureFlagsBody":{"type":"object","properties":{"flagKeys":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]}},"additionalProperties":false},"SdkFeatureFlagResult":{"type":"object","properties":{"enabled":{"type":"boolean"},"key":{"type":"string"},"payload":{"anyOf":[{"type":"null"},{"type":"null"}]},"variantKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["enabled","key","payload","variantKey"],"additionalProperties":false},"SdkFeatureFlagsResponse":{"type":"object","properties":{"flags":{"type":"array","items":{"$ref":"#/components/schemas/SdkFeatureFlagResult"}}},"required":["flags"],"additionalProperties":false},"SdkResolvePaywallBody":{"type":"object","properties":{"locationSlug":{"type":"string"}},"required":["locationSlug"],"additionalProperties":false},"SdkResolvedPaywallShowing":{"type":"object","properties":{"id":{"type":"string"},"paywall":{"anyOf":[{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},{"type":"null"}]},"paywallId":{"anyOf":[{"type":"string"},{"type":"null"}]},"paywallRelease":{"anyOf":[{"type":"object","properties":{"htmlUrl":{"type":"string"},"publishedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"releaseId":{"type":"string"},"version":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]}},"required":["htmlUrl","publishedAt","releaseId","version"],"additionalProperties":false},{"type":"null"}]},"paywallReleaseId":{"anyOf":[{"type":"string"},{"type":"null"}]},"startedAt":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["paywall_release"]},{"type":"string","enum":["feature_flag"]}]}},"required":["id","paywall","paywallId","paywallRelease","paywallReleaseId","startedAt","type"],"additionalProperties":false},"SdkResolvedPaywall":{"type":"object","properties":{"location":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"showing":{"$ref":"#/components/schemas/SdkResolvedPaywallShowing"}},"required":["location","showing"],"additionalProperties":false},"User":{"type":"object","properties":{"createdAt":{"type":"string"},"email":{"type":"string"},"emailVerified":{"type":"boolean"},"id":{"type":"string"},"image":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","organizationId","slug"],"additionalProperties":false}},"updatedAt":{"type":"string"}},"required":["createdAt","email","emailVerified","id","image","name","organizations","projects","updatedAt"],"additionalProperties":false},"UserServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["UserServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderConfiguration":{"type":"object","properties":{"enabled":{"type":"boolean"},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"providerId":{"type":"string"}},"required":["enabled","id","name","projectId","providerId"],"additionalProperties":false},"PaymentProviderConfigurationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderConfigurationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderProduct":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"id":{"type":"string"},"paymentProviderConfigurationId":{"type":"string"},"productId":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","id","paymentProviderConfigurationId","productId","providerId"],"additionalProperties":false},"PaymentProviderProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["PaymentProviderProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"DeployChangesetBody":{"type":"object","properties":{"changeset":{"type":"object","properties":{"changes":{"type":"array","items":{"anyOf":[{"type":"object","properties":{"changeType":{"type":"string","enum":["create-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["archive-paywall-location"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"slug":{"type":"string"}},"required":["slug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-product-perk"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"perkSlug":{"type":"string"},"productSlug":{"type":"string"}},"required":["perkSlug","productSlug"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["create-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["update-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false},{"type":"object","properties":{"changeType":{"type":"string","enum":["delete-payment-provider-product"]},"key":{"type":"string"},"payload":{"type":"object","properties":{"productSlug":{"type":"string"},"providerId":{"type":"string"}},"required":["productSlug","providerId"],"additionalProperties":false}},"required":["changeType","key","payload"],"additionalProperties":false}]}}},"required":["changes"],"additionalProperties":false}},"required":["changeset"],"additionalProperties":false},"DeployChangesetResponse":{"type":"object","properties":{"deploymentId":{"type":"string"}},"required":["deploymentId"],"additionalProperties":false},"ChangesetDeploymentServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["ChangesetDeploymentServiceError"]},"cause":{"type":"null"}},"required":["_tag","cause"],"additionalProperties":false},"CreateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"url":{"type":"string"}},"required":["events","name","url"],"additionalProperties":false},"WebhookEndpoint":{"type":"object","properties":{"consecutiveFailures":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"anyOf":[{"type":"string","enum":["person.created"]},{"type":"string","enum":["person.updated"]},{"type":"string","enum":["person.deleted"]},{"type":"string","enum":["subscription.created"]},{"type":"string","enum":["subscription.renewed"]},{"type":"string","enum":["subscription.cancelled"]},{"type":"string","enum":["subscription.expired"]},{"type":"string","enum":["purchase.completed"]},{"type":"string","enum":["purchase.refunded"]}]}},"id":{"type":"string"},"lastSuccessAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"projectId":{"type":"string"},"secret":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]},{"type":"string","enum":["failed"]}]},"url":{"type":"string"}},"required":["consecutiveFailures","createdAt","description","events","id","lastSuccessAt","name","projectId","secret","status","url"],"additionalProperties":false},"WebhookValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"WebhookServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"WebhookEndpointNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookEndpointNotFoundError"]},"endpointId":{"type":"string"}},"required":["_tag","endpointId"],"additionalProperties":false},"UpdateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"events":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]}]},{"type":"null"}]},"url":{"anyOf":[{"type":"string"},{"type":"null"}]}},"additionalProperties":false},"WebhookDelivery":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryAttempt":{"type":"object","properties":{"attemptNumber":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"durationMs":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"errorMessage":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"responseBody":{"anyOf":[{"type":"string"},{"type":"null"}]},"statusCode":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"succeeded":{"type":"boolean"}},"required":["attemptNumber","createdAt","durationMs","errorMessage","id","responseBody","statusCode","succeeded"],"additionalProperties":false},"WebhookDeliveryWithAttempts":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"attempts":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDeliveryAttempt"}},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","attempts","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["WebhookDeliveryNotFoundError"]},"deliveryId":{"type":"string"}},"required":["_tag","deliveryId"],"additionalProperties":false}},"securitySchemes":{}},"security":[],"tags":[{"name":"auth"},{"name":"api_keys"},{"name":"persons"},{"name":"organizations"},{"name":"perks"},{"name":"paywall_locations"},{"name":"projects"},{"name":"products"},{"name":"product_perks"},{"name":"sdk"},{"name":"users"},{"name":"payment_provider_configurations"},{"name":"payment_provider_products"},{"name":"changesets"},{"name":"webhooks"}]}
+{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/api/v1/auth/session":{"get":{"tags":["auth"],"operationId":"auth.session","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"method":{"anyOf":[{"type":"string","enum":["api-key"]},{"type":"string","enum":["publishable-key"]},{"type":"string","enum":["secret-key"]}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","organizationId","slug"],"additionalProperties":false}}},"required":["method","name","organizations","projects"],"additionalProperties":false}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Error","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}}}}}}},"/api/v1/api-keys":{"post":{"tags":["api_keys"],"operationId":"api_keys.createSecretKey","parameters":[],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSecretKeyBody"}}},"required":true}},"get":{"tags":["api_keys"],"operationId":"api_keys.listApiKeys","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ApiKey"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}":{"get":{"tags":["api_keys"],"operationId":"api_keys.getApiKeyById","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ApiKeyNotFoundError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}},"delete":{"tags":["api_keys"],"operationId":"api_keys.deleteApiKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ApiKeyNotFoundError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}/rotate":{"post":{"tags":["api_keys"],"operationId":"api_keys.rotateSecretKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ApiKeyNotFoundError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons":{"post":{"tags":["persons"],"operationId":"persons.createPerson","parameters":[],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"Api/PersonInvalidAnonymousIdError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonInvalidAnonymousIdError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreatePersonBody"}}},"required":true}},"get":{"tags":["persons"],"operationId":"persons.listPersons","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Person"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/{personId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonById","parameters":[{"name":"personId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_PersonNotFoundError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/by-distinct-id/{distinctId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonByDistinctId","parameters":[{"name":"distinctId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_PersonNotFoundError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/organizations":{"post":{"tags":["organizations"],"operationId":"organizations.createOrganization","parameters":[],"security":[],"responses":{"200":{"description":"Organization","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Organization"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/OrganizationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_OrganizationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateOrganizationBody"}}},"required":true}}},"/api/v1/perks":{"get":{"tags":["perks"],"operationId":"perks.listPerks","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Perk"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/paywall-locations":{"get":{"tags":["paywall_locations"],"operationId":"paywall_locations.listPaywallLocations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaywallLocation"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PaywallLocationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PaywallLocationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/schema":{"get":{"tags":["schema"],"operationId":"schema.getSchema","parameters":[],"security":[],"responses":{"200":{"description":"ProjectSchemaResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProjectSchemaResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/SchemaServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SchemaServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/schema/version":{"get":{"tags":["schema"],"operationId":"schema.getSchemaVersion","parameters":[],"security":[],"responses":{"200":{"description":"SchemaVersion","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SchemaVersion"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/SchemaServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SchemaServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/projects":{"post":{"tags":["projects"],"operationId":"projects.createProject","parameters":[],"security":[],"responses":{"200":{"description":"Project","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Project"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/AuthenticationError | Api/ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateProjectBody"}}},"required":true}}},"/api/v1/projects/{organizationId}":{"get":{"tags":["projects"],"operationId":"projects.listProjects","parameters":[{"name":"organizationId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Project"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/products":{"get":{"tags":["products"],"operationId":"products.listProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Product"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/product-perks/by-product-id/{productId}":{"get":{"tags":["product_perks"],"operationId":"product_perks.listProductPerksByProductId","parameters":[{"name":"productId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ProductPerk"}}}}},"400":{"description":"Api/ProductPerkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProductPerkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ProductPerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProductPerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/person":{"get":{"tags":["sdk"],"operationId":"sdk.getPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"Api/SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonNotFoundError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/identify":{"post":{"tags":["sdk"],"operationId":"sdk.identifyPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"Api/SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonNotFoundError"}}}},"409":{"description":"Api/SdkPersonAlreadyIdentifiedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonAlreadyIdentifiedError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkIdentifyBody"}}},"required":true}}},"/api/v1/sdk/person/traits":{"post":{"tags":["sdk"],"operationId":"sdk.syncPersonAttributes","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"Api/SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonNotFoundError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncPersonAttributesBody"}}},"required":true}}},"/api/v1/sdk/sync-transaction":{"post":{"tags":["sdk"],"operationId":"sdk.syncTransaction","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkSyncTransactionResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncTransactionResponse"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"platform":{"anyOf":[{"type":"string","enum":["ios"]},{"type":"string","enum":["android"]}]},"productSlug":{"type":"string"},"purchaseDate":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"purchaseToken":{"anyOf":[{"type":"string"},{"type":"null"}]},"quantity":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"receipt":{"anyOf":[{"type":"string"},{"type":"null"}]},"transactionId":{"type":"string"}},"required":["platform","productSlug","purchaseDate","quantity","transactionId"],"additionalProperties":false}}},"required":true}}},"/api/v1/sdk/evaluate-flags":{"post":{"tags":["sdk"],"operationId":"sdk.evaluateFeatureFlags","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkFeatureFlagsResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkFeatureFlagsResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EvaluateFeatureFlagsBody"}}},"required":true}}},"/api/v1/sdk/resolve-paywall":{"post":{"tags":["sdk"],"operationId":"sdk.resolvePaywall","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkResolvedPaywall"},{"type":"null"}]}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkResolvePaywallBody"}}},"required":true}}},"/api/v1/sdk/schema":{"get":{"tags":["sdk"],"operationId":"sdk.getSchema","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkSchema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSchema"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/AuthenticationError | Api/SchemaServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SchemaServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/users/current":{"get":{"tags":["users"],"operationId":"users.getUser","parameters":[],"security":[],"responses":{"200":{"description":"User","content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/AuthenticationError | Api/UserServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_UserServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-configurations":{"get":{"tags":["payment_provider_configurations"],"operationId":"payment_provider_configurations.listPaymentProviderConfigurations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderConfiguration"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PaymentProviderConfigurationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PaymentProviderConfigurationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-products":{"get":{"tags":["payment_provider_products"],"operationId":"payment_provider_products.listPaymentProviderProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderProduct"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PaymentProviderProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PaymentProviderProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints":{"post":{"tags":["webhooks"],"operationId":"webhooks.createWebhookEndpoint","parameters":[],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"Api/WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateWebhookEndpointBody"}}},"required":true}},"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookEndpoints","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEndpoint"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}},"patch":{"tags":["webhooks"],"operationId":"webhooks.updateWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"Api/WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateWebhookEndpointBody"}}},"required":true}},"delete":{"tags":["webhooks"],"operationId":"webhooks.deleteWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/rotate-secret":{"post":{"tags":["webhooks"],"operationId":"webhooks.rotateWebhookSecret","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/test":{"post":{"tags":["webhooks"],"operationId":"webhooks.testWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries":{"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookDeliveries","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDelivery"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDeliveryWithAttempts","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryWithAttempts"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookDeliveryNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}/retry":{"post":{"tags":["webhooks"],"operationId":"webhooks.retryWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"Api/WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookDeliveryNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}}},"components":{"schemas":{"Api_ActionForbiddenError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ActionForbiddenError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"Api_AuthenticationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/AuthenticationError"]},"cause":{"type":"string"},"message":{"type":"string"}},"required":["_tag","cause","message"],"additionalProperties":false},"Api_NotAuthenticatedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/NotAuthenticatedError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreateSecretKeyBody":{"type":"object","properties":{"name":{"type":"string"},"projectId":{"type":"string"}},"required":["name","projectId"],"additionalProperties":false},"ApiKeyWithRawKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"type":"string"}},"required":["end","id","isPublic","name","prefix","projectId","rawKey"],"additionalProperties":false},"Api_ApiKeyServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ApiKeyServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ApiKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["end","id","isPublic","name","prefix","projectId"],"additionalProperties":false},"Api_ApiKeyNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ApiKeyNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreatePersonBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Person":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"Api_PersonInvalidAnonymousIdError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PersonInvalidAnonymousIdError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"Api_PersonServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PersonServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_PersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PersonNotFoundError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"CreateOrganizationBody":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"Organization":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"Api_OrganizationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/OrganizationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Perk":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","projectId","slug"],"additionalProperties":false},"Api_PerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaywallLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["description","id","name","projectId","slug"],"additionalProperties":false},"Api_PaywallLocationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PaywallLocationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SchemaLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["description","name","slug"],"additionalProperties":false},"SchemaPerk":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false},"SchemaProductProvider":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"providerId":{"anyOf":[{"type":"string","enum":["appleAppStore"]},{"type":"string","enum":["googlePlay"]}]}},"required":["configuration","providerId"],"additionalProperties":false},"SchemaProduct":{"type":"object","properties":{"name":{"type":"string"},"perks":{"type":"array","items":{"type":"string"}},"providers":{"type":"array","items":{"$ref":"#/components/schemas/SchemaProductProvider"}},"slug":{"type":"string"},"type":{"type":"string","enum":["subscription"]}},"required":["name","perks","providers","slug","type"],"additionalProperties":false},"ProjectSchemaResponse":{"type":"object","properties":{"enabledProviders":{"type":"array","items":{"anyOf":[{"type":"string","enum":["appleAppStore"]},{"type":"string","enum":["googlePlay"]}]}},"locations":{"type":"array","items":{"$ref":"#/components/schemas/SchemaLocation"}},"perks":{"type":"array","items":{"$ref":"#/components/schemas/SchemaPerk"}},"products":{"type":"array","items":{"$ref":"#/components/schemas/SchemaProduct"}},"version":{"type":"string"}},"required":["enabledProviders","locations","perks","products","version"],"additionalProperties":false},"Api_SchemaServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SchemaServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SchemaVersion":{"type":"object","properties":{"version":{"type":"string"}},"required":["version"],"additionalProperties":false},"CreateProjectBody":{"type":"object","properties":{"name":{"type":"string"},"organizationId":{"type":"string"}},"required":["name","organizationId"],"additionalProperties":false},"Project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"Api_ProjectServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProjectServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Product":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["one-time"]},{"type":"string","enum":["one-time-consumable"]}]}},"required":["id","name","projectId","slug","type"],"additionalProperties":false},"Api_ProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerk":{"type":"object","properties":{"id":{"type":"string"},"perkId":{"type":"string"},"productId":{"type":"string"}},"required":["id","perkId","productId"],"additionalProperties":false},"Api_ProductPerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProductPerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_ProductPerkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProductPerkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkEntitlementGrant":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"perkId":{"type":"string"},"source":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["purchase"]},{"type":"string","enum":["manual"]}]},"sourceId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["expired"]}]}},"required":["expiresAt","perkId","source","sourceId","sourcePersonId","status"],"additionalProperties":false},"SdkPurchaseHistoryEntry":{"type":"object","properties":{"createdAt":{"type":"string"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"providerKey":{"type":"string"},"purchaseId":{"type":"string"},"sourcePersonId":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["one_time"]},{"type":"string","enum":["subscription"]}]}},"required":["createdAt","productId","providerKey","purchaseId","sourcePersonId","type"],"additionalProperties":false},"SdkCurrentSubscription":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"type":"string","enum":["none"]},{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["past_due"]},{"type":"string","enum":["trialing"]}]},"subscriptionId":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["expiresAt","productId","status","subscriptionId"],"additionalProperties":false},"SdkSubscriptionHistoryEntry":{"type":"object","properties":{"canceledAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"isTrial":{"type":"boolean"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"startsAt":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["expired"]},{"type":"string","enum":["trialing"]},{"type":"string","enum":["past_due"]}]},"subscriptionId":{"type":"string"}},"required":["canceledAt","expiresAt","isTrial","productId","sourcePersonId","startsAt","status","subscriptionId"],"additionalProperties":false},"SdkPerson":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"entitlements":{"type":"object","properties":{"grants":{"type":"array","items":{"$ref":"#/components/schemas/SdkEntitlementGrant"}}},"required":["grants"],"additionalProperties":false},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"personId":{"type":"string"},"purchases":{"type":"object","properties":{"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkPurchaseHistoryEntry"}}},"required":["history"],"additionalProperties":false},"snapshotContext":{"type":"object","properties":{"includedPersonIds":{"type":"array","items":{"type":"string"}},"migrationJobId":{"anyOf":[{"type":"string"},{"type":"null"}]},"mode":{"anyOf":[{"type":"string","enum":["persisted"]},{"type":"string","enum":["temporary_pending_transfer"]}]}},"required":["includedPersonIds","migrationJobId","mode"],"additionalProperties":false},"subscriptions":{"type":"object","properties":{"current":{"anyOf":[{"$ref":"#/components/schemas/SdkCurrentSubscription"},{"type":"null"}]},"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkSubscriptionHistoryEntry"}}},"required":["current","history"],"additionalProperties":false}},"required":["distinctId","email","entitlements","name","personId","purchases","snapshotContext","subscriptions"],"additionalProperties":false},"Api_SdkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_SdkPersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkPersonNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"Api_SdkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkIdentifyBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Api_SdkPersonAlreadyIdentifiedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkPersonAlreadyIdentifiedError"]},"distinctId":{"type":"string"}},"required":["_tag","distinctId"],"additionalProperties":false},"SdkSyncPersonAttributesBody":{"type":"object","properties":{"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"additionalProperties":false},"SdkSyncTransactionResponse":{"type":"object","properties":{"accepted":{"type":"boolean"}},"required":["accepted"],"additionalProperties":false},"EvaluateFeatureFlagsBody":{"type":"object","properties":{"flagKeys":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]}},"additionalProperties":false},"SdkFeatureFlagResult":{"type":"object","properties":{"enabled":{"type":"boolean"},"key":{"type":"string"},"payload":{"anyOf":[{"type":"null"},{"type":"null"}]},"variantKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["enabled","key","payload","variantKey"],"additionalProperties":false},"SdkFeatureFlagsResponse":{"type":"object","properties":{"flags":{"type":"array","items":{"$ref":"#/components/schemas/SdkFeatureFlagResult"}}},"required":["flags"],"additionalProperties":false},"SdkResolvePaywallBody":{"type":"object","properties":{"locationSlug":{"type":"string"}},"required":["locationSlug"],"additionalProperties":false},"SdkResolvedPaywallShowing":{"type":"object","properties":{"id":{"type":"string"},"paywall":{"anyOf":[{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},{"type":"null"}]},"paywallId":{"anyOf":[{"type":"string"},{"type":"null"}]},"paywallRelease":{"anyOf":[{"type":"object","properties":{"htmlUrl":{"type":"string"},"publishedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"releaseId":{"type":"string"},"version":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]}},"required":["htmlUrl","publishedAt","releaseId","version"],"additionalProperties":false},{"type":"null"}]},"paywallReleaseId":{"anyOf":[{"type":"string"},{"type":"null"}]},"startedAt":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["paywall_release"]},{"type":"string","enum":["feature_flag"]}]}},"required":["id","paywall","paywallId","paywallRelease","paywallReleaseId","startedAt","type"],"additionalProperties":false},"SdkResolvedPaywall":{"type":"object","properties":{"location":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"showing":{"$ref":"#/components/schemas/SdkResolvedPaywallShowing"}},"required":["location","showing"],"additionalProperties":false},"SdkSchemaLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["description","name","slug"],"additionalProperties":false},"SdkSchemaPerk":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false},"SdkSchemaProduct":{"type":"object","properties":{"configuration":{"type":"object","properties":{"perks":{"type":"object","additionalProperties":{"type":"boolean","enum":[true]}},"providers":{"type":"object","properties":{"appleAppStore":{"anyOf":[{"type":"object","additionalProperties":{"type":"null"}},{"type":"null"}]},"googlePlay":{"anyOf":[{"type":"object","additionalProperties":{"type":"null"}},{"type":"null"}]}},"additionalProperties":false}},"required":["perks","providers"],"additionalProperties":false},"properties":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"slug":{"type":"string"},"type":{"type":"string","enum":["subscription"]}},"required":["configuration","properties","slug","type"],"additionalProperties":false},"SdkSchema":{"type":"object","properties":{"locations":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/SdkSchemaLocation"}},"perks":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/SdkSchemaPerk"}},"products":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/SdkSchemaProduct"}},"version":{"type":"string"}},"required":["locations","perks","products","version"],"additionalProperties":false},"User":{"type":"object","properties":{"createdAt":{"type":"string"},"email":{"type":"string"},"emailVerified":{"type":"boolean"},"id":{"type":"string"},"image":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","organizationId","slug"],"additionalProperties":false}},"updatedAt":{"type":"string"}},"required":["createdAt","email","emailVerified","id","image","name","organizations","projects","updatedAt"],"additionalProperties":false},"Api_UserServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/UserServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderConfiguration":{"type":"object","properties":{"enabled":{"type":"boolean"},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"providerId":{"type":"string"}},"required":["enabled","id","name","projectId","providerId"],"additionalProperties":false},"Api_PaymentProviderConfigurationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PaymentProviderConfigurationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderProduct":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"id":{"type":"string"},"paymentProviderConfigurationId":{"type":"string"},"productId":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","id","paymentProviderConfigurationId","productId","providerId"],"additionalProperties":false},"Api_PaymentProviderProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PaymentProviderProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"CreateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"url":{"type":"string"}},"required":["events","name","url"],"additionalProperties":false},"WebhookEndpoint":{"type":"object","properties":{"consecutiveFailures":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"anyOf":[{"type":"string","enum":["person.created"]},{"type":"string","enum":["person.updated"]},{"type":"string","enum":["person.deleted"]},{"type":"string","enum":["subscription.created"]},{"type":"string","enum":["subscription.renewed"]},{"type":"string","enum":["subscription.cancelled"]},{"type":"string","enum":["subscription.expired"]},{"type":"string","enum":["purchase.completed"]},{"type":"string","enum":["purchase.refunded"]}]}},"id":{"type":"string"},"lastSuccessAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"projectId":{"type":"string"},"secret":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]},{"type":"string","enum":["failed"]}]},"url":{"type":"string"}},"required":["consecutiveFailures","createdAt","description","events","id","lastSuccessAt","name","projectId","secret","status","url"],"additionalProperties":false},"Api_WebhookValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"Api_WebhookServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_WebhookEndpointNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookEndpointNotFoundError"]},"endpointId":{"type":"string"}},"required":["_tag","endpointId"],"additionalProperties":false},"UpdateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"events":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]}]},{"type":"null"}]},"url":{"anyOf":[{"type":"string"},{"type":"null"}]}},"additionalProperties":false},"WebhookDelivery":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryAttempt":{"type":"object","properties":{"attemptNumber":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"durationMs":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"errorMessage":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"responseBody":{"anyOf":[{"type":"string"},{"type":"null"}]},"statusCode":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"succeeded":{"type":"boolean"}},"required":["attemptNumber","createdAt","durationMs","errorMessage","id","responseBody","statusCode","succeeded"],"additionalProperties":false},"WebhookDeliveryWithAttempts":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"attempts":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDeliveryAttempt"}},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","attempts","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"Api_WebhookDeliveryNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookDeliveryNotFoundError"]},"deliveryId":{"type":"string"}},"required":["_tag","deliveryId"],"additionalProperties":false}},"securitySchemes":{}},"security":[],"tags":[{"name":"auth"},{"name":"api_keys"},{"name":"persons"},{"name":"organizations"},{"name":"perks"},{"name":"paywall_locations"},{"name":"schema"},{"name":"projects"},{"name":"products"},{"name":"product_perks"},{"name":"sdk"},{"name":"users"},{"name":"payment_provider_configurations"},{"name":"payment_provider_products"},{"name":"webhooks"}]}
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
index e738e0727..5eab012e7 100644
--- a/packages/generated-clients/src/core/generated.ts
+++ b/packages/generated-clients/src/core/generated.ts
@@ -30,29 +30,29 @@ export interface EffectHttpApiSchemaError {
   readonly "message": string
 }
 
-export type ActionForbiddenErrorTag = "ActionForbiddenError"
+export type ApiActionForbiddenErrorTag = "Api/ActionForbiddenError"
 
-export interface ActionForbiddenError {
-  readonly "_tag": ActionForbiddenErrorTag;
+export interface ApiActionForbiddenError {
+  readonly "_tag": ApiActionForbiddenErrorTag;
   readonly "message": string
 }
 
-export type AuthenticationErrorTag = "AuthenticationError"
+export type ApiAuthenticationErrorTag = "Api/AuthenticationError"
 
-export interface AuthenticationError {
-  readonly "_tag": AuthenticationErrorTag;
+export interface ApiAuthenticationError {
+  readonly "_tag": ApiAuthenticationErrorTag;
   readonly "cause": string;
   readonly "message": string
 }
 
-export type NotAuthenticatedErrorTag = "NotAuthenticatedError"
+export type ApiNotAuthenticatedErrorTag = "Api/NotAuthenticatedError"
 
-export interface NotAuthenticatedError {
-  readonly "_tag": NotAuthenticatedErrorTag;
+export interface ApiNotAuthenticatedError {
+  readonly "_tag": ApiNotAuthenticatedErrorTag;
   readonly "message": string
 }
 
-export type AuthSession500 = AuthenticationError | NotAuthenticatedError
+export type AuthSession500 = ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface ApiKey {
   readonly "end": string;
@@ -66,14 +66,14 @@ export interface ApiKey {
 
 export type ApiKeysListApiKeys200 = ReadonlyArray<ApiKey>
 
-export type ApiKeyServiceErrorTag = "ApiKeyServiceError"
+export type ApiApiKeyServiceErrorTag = "Api/ApiKeyServiceError"
 
-export interface ApiKeyServiceError {
-  readonly "_tag": ApiKeyServiceErrorTag;
+export interface ApiApiKeyServiceError {
+  readonly "_tag": ApiApiKeyServiceErrorTag;
   readonly "cause": string
 }
 
-export type ApiKeysListApiKeys500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+export type ApiKeysListApiKeys500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface CreateSecretKeyBody {
   readonly "name": string;
@@ -90,20 +90,20 @@ export interface ApiKeyWithRawKey {
   readonly "rawKey": string
 }
 
-export type ApiKeysCreateSecretKey500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+export type ApiKeysCreateSecretKey500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type ApiKeyNotFoundErrorTag = "ApiKeyNotFoundError"
+export type ApiApiKeyNotFoundErrorTag = "Api/ApiKeyNotFoundError"
 
-export interface ApiKeyNotFoundError {
-  readonly "_tag": ApiKeyNotFoundErrorTag;
+export interface ApiApiKeyNotFoundError {
+  readonly "_tag": ApiApiKeyNotFoundErrorTag;
   readonly "message": string
 }
 
-export type ApiKeysGetApiKeyById500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+export type ApiKeysGetApiKeyById500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type ApiKeysDeleteApiKey500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+export type ApiKeysDeleteApiKey500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type ApiKeysRotateSecretKey500 = ApiKeyServiceError | AuthenticationError | NotAuthenticatedError
+export type ApiKeysRotateSecretKey500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface Person {
   readonly "personId": string;
@@ -114,14 +114,14 @@ export interface Person {
 
 export type PersonsListPersons200 = ReadonlyArray<Person>
 
-export type PersonServiceErrorTag = "PersonServiceError"
+export type ApiPersonServiceErrorTag = "Api/PersonServiceError"
 
-export interface PersonServiceError {
-  readonly "_tag": PersonServiceErrorTag;
+export interface ApiPersonServiceError {
+  readonly "_tag": ApiPersonServiceErrorTag;
   readonly "cause": string
 }
 
-export type PersonsListPersons500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsListPersons500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface CreatePersonBody {
   readonly "distinctId": string;
@@ -129,27 +129,27 @@ export interface CreatePersonBody {
   readonly "name"?: string | null | undefined
 }
 
-export type PersonInvalidAnonymousIdErrorTag = "PersonInvalidAnonymousIdError"
+export type ApiPersonInvalidAnonymousIdErrorTag = "Api/PersonInvalidAnonymousIdError"
 
-export interface PersonInvalidAnonymousIdError {
-  readonly "_tag": PersonInvalidAnonymousIdErrorTag;
+export interface ApiPersonInvalidAnonymousIdError {
+  readonly "_tag": ApiPersonInvalidAnonymousIdErrorTag;
   readonly "id": string
 }
 
-export type PersonsCreatePerson400 = PersonInvalidAnonymousIdError | EffectHttpApiSchemaError
+export type PersonsCreatePerson400 = ApiPersonInvalidAnonymousIdError | EffectHttpApiSchemaError
 
-export type PersonsCreatePerson500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsCreatePerson500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type PersonNotFoundErrorTag = "PersonNotFoundError"
+export type ApiPersonNotFoundErrorTag = "Api/PersonNotFoundError"
 
-export interface PersonNotFoundError {
-  readonly "_tag": PersonNotFoundErrorTag;
+export interface ApiPersonNotFoundError {
+  readonly "_tag": ApiPersonNotFoundErrorTag;
   readonly "id": string
 }
 
-export type PersonsGetPersonById500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsGetPersonById500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type PersonsGetPersonByDistinctId500 = PersonServiceError | AuthenticationError | NotAuthenticatedError
+export type PersonsGetPersonByDistinctId500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface CreateOrganizationBody {
   readonly "name": string
@@ -161,14 +161,14 @@ export interface Organization {
   readonly "slug": string
 }
 
-export type OrganizationServiceErrorTag = "OrganizationServiceError"
+export type ApiOrganizationServiceErrorTag = "Api/OrganizationServiceError"
 
-export interface OrganizationServiceError {
-  readonly "_tag": OrganizationServiceErrorTag;
+export interface ApiOrganizationServiceError {
+  readonly "_tag": ApiOrganizationServiceErrorTag;
   readonly "cause": string
 }
 
-export type OrganizationsCreateOrganization500 = OrganizationServiceError | AuthenticationError | NotAuthenticatedError
+export type OrganizationsCreateOrganization500 = ApiOrganizationServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface Perk {
   readonly "id": string;
@@ -179,14 +179,14 @@ export interface Perk {
 
 export type PerksListPerks200 = ReadonlyArray<Perk>
 
-export type PerkServiceErrorTag = "PerkServiceError"
+export type ApiPerkServiceErrorTag = "Api/PerkServiceError"
 
-export interface PerkServiceError {
-  readonly "_tag": PerkServiceErrorTag;
+export interface ApiPerkServiceError {
+  readonly "_tag": ApiPerkServiceErrorTag;
   readonly "cause": string
 }
 
-export type PerksListPerks500 = PerkServiceError | AuthenticationError | NotAuthenticatedError
+export type PerksListPerks500 = ApiPerkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface PaywallLocation {
   readonly "description": string | null;
@@ -198,14 +198,65 @@ export interface PaywallLocation {
 
 export type PaywallLocationsListPaywallLocations200 = ReadonlyArray<PaywallLocation>
 
-export type PaywallLocationServiceErrorTag = "PaywallLocationServiceError"
+export type ApiPaywallLocationServiceErrorTag = "Api/PaywallLocationServiceError"
 
-export interface PaywallLocationServiceError {
-  readonly "_tag": PaywallLocationServiceErrorTag;
+export interface ApiPaywallLocationServiceError {
+  readonly "_tag": ApiPaywallLocationServiceErrorTag;
   readonly "cause": string
 }
 
-export type PaywallLocationsListPaywallLocations500 = PaywallLocationServiceError | AuthenticationError | NotAuthenticatedError
+export type PaywallLocationsListPaywallLocations500 = ApiPaywallLocationServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+
+export interface SchemaLocation {
+  readonly "description": string | null;
+  readonly "name": string;
+  readonly "slug": string
+}
+
+export interface SchemaPerk {
+  readonly "name": string;
+  readonly "slug": string
+}
+
+export type SchemaProductProviderProviderIdEnum = "googlePlay"
+
+export interface SchemaProductProvider {
+  readonly "configuration": Record<string, unknown>;
+  readonly "providerId": SchemaProductProviderProviderIdEnum | SchemaProductProviderProviderIdEnum
+}
+
+export type SchemaProductType = "subscription"
+
+export interface SchemaProduct {
+  readonly "name": string;
+  readonly "perks": ReadonlyArray<string>;
+  readonly "providers": ReadonlyArray<SchemaProductProvider>;
+  readonly "slug": string;
+  readonly "type": SchemaProductType
+}
+
+export interface ProjectSchemaResponse {
+  readonly "enabledProviders": ReadonlyArray<"appleAppStore" | "googlePlay">;
+  readonly "locations": ReadonlyArray<SchemaLocation>;
+  readonly "perks": ReadonlyArray<SchemaPerk>;
+  readonly "products": ReadonlyArray<SchemaProduct>;
+  readonly "version": string
+}
+
+export type ApiSchemaServiceErrorTag = "Api/SchemaServiceError"
+
+export interface ApiSchemaServiceError {
+  readonly "_tag": ApiSchemaServiceErrorTag;
+  readonly "cause": string
+}
+
+export type SchemaGetSchema500 = ApiSchemaServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+
+export interface SchemaVersion {
+  readonly "version": string
+}
+
+export type SchemaGetSchemaVersion500 = ApiSchemaServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface CreateProjectBody {
   readonly "name": string;
@@ -218,18 +269,18 @@ export interface Project {
   readonly "slug": string
 }
 
-export type ProjectServiceErrorTag = "ProjectServiceError"
+export type ApiProjectServiceErrorTag = "Api/ProjectServiceError"
 
-export interface ProjectServiceError {
-  readonly "_tag": ProjectServiceErrorTag;
+export interface ApiProjectServiceError {
+  readonly "_tag": ApiProjectServiceErrorTag;
   readonly "cause": string
 }
 
-export type ProjectsCreateProject500 = AuthenticationError | ProjectServiceError | AuthenticationError | NotAuthenticatedError
+export type ProjectsCreateProject500 = ApiAuthenticationError | ApiProjectServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type ProjectsListProjects200 = ReadonlyArray<Project>
 
-export type ProjectsListProjects500 = ProjectServiceError | AuthenticationError | NotAuthenticatedError
+export type ProjectsListProjects500 = ApiProjectServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type ProductTypeEnum = "one-time-consumable"
 
@@ -243,14 +294,14 @@ export interface Product {
 
 export type ProductsListProducts200 = ReadonlyArray<Product>
 
-export type ProductServiceErrorTag = "ProductServiceError"
+export type ApiProductServiceErrorTag = "Api/ProductServiceError"
 
-export interface ProductServiceError {
-  readonly "_tag": ProductServiceErrorTag;
+export interface ApiProductServiceError {
+  readonly "_tag": ApiProductServiceErrorTag;
   readonly "cause": string
 }
 
-export type ProductsListProducts500 = ProductServiceError | AuthenticationError | NotAuthenticatedError
+export type ProductsListProducts500 = ApiProductServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface ProductPerk {
   readonly "id": string;
@@ -260,23 +311,23 @@ export interface ProductPerk {
 
 export type ProductPerksListProductPerksByProductId200 = ReadonlyArray<ProductPerk>
 
-export type ProductPerkValidationErrorTag = "ProductPerkValidationError"
+export type ApiProductPerkValidationErrorTag = "Api/ProductPerkValidationError"
 
-export interface ProductPerkValidationError {
-  readonly "_tag": ProductPerkValidationErrorTag;
+export interface ApiProductPerkValidationError {
+  readonly "_tag": ApiProductPerkValidationErrorTag;
   readonly "message": string
 }
 
-export type ProductPerksListProductPerksByProductId400 = ProductPerkValidationError | EffectHttpApiSchemaError
+export type ProductPerksListProductPerksByProductId400 = ApiProductPerkValidationError | EffectHttpApiSchemaError
 
-export type ProductPerkServiceErrorTag = "ProductPerkServiceError"
+export type ApiProductPerkServiceErrorTag = "Api/ProductPerkServiceError"
 
-export interface ProductPerkServiceError {
-  readonly "_tag": ProductPerkServiceErrorTag;
+export interface ApiProductPerkServiceError {
+  readonly "_tag": ApiProductPerkServiceErrorTag;
   readonly "cause": string
 }
 
-export type ProductPerksListProductPerksByProductId500 = ProductPerkServiceError | AuthenticationError | NotAuthenticatedError
+export type ProductPerksListProductPerksByProductId500 = ApiProductPerkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type SdkGetPersonParamsXIsBackgrounded = "false"
 
@@ -380,30 +431,30 @@ export interface SdkPerson {
 }
 }
 
-export type SdkValidationErrorTag = "SdkValidationError"
+export type ApiSdkValidationErrorTag = "Api/SdkValidationError"
 
-export interface SdkValidationError {
-  readonly "_tag": SdkValidationErrorTag;
+export interface ApiSdkValidationError {
+  readonly "_tag": ApiSdkValidationErrorTag;
   readonly "message": string
 }
 
-export type SdkGetPerson400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkGetPerson400 = ApiSdkValidationError | EffectHttpApiSchemaError
 
-export type SdkPersonNotFoundErrorTag = "SdkPersonNotFoundError"
+export type ApiSdkPersonNotFoundErrorTag = "Api/SdkPersonNotFoundError"
 
-export interface SdkPersonNotFoundError {
-  readonly "_tag": SdkPersonNotFoundErrorTag;
+export interface ApiSdkPersonNotFoundError {
+  readonly "_tag": ApiSdkPersonNotFoundErrorTag;
   readonly "message": string
 }
 
-export type SdkServiceErrorTag = "SdkServiceError"
+export type ApiSdkServiceErrorTag = "Api/SdkServiceError"
 
-export interface SdkServiceError {
-  readonly "_tag": SdkServiceErrorTag;
+export interface ApiSdkServiceError {
+  readonly "_tag": ApiSdkServiceErrorTag;
   readonly "cause": string
 }
 
-export type SdkGetPerson500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkGetPerson500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type SdkIdentifyPersonParamsXIsBackgrounded = "false"
 
@@ -444,16 +495,16 @@ export interface SdkIdentifyBody {
   readonly "traits"?: Record<string, unknown> | null | undefined
 }
 
-export type SdkIdentifyPerson400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkIdentifyPerson400 = ApiSdkValidationError | EffectHttpApiSchemaError
 
-export type SdkPersonAlreadyIdentifiedErrorTag = "SdkPersonAlreadyIdentifiedError"
+export type ApiSdkPersonAlreadyIdentifiedErrorTag = "Api/SdkPersonAlreadyIdentifiedError"
 
-export interface SdkPersonAlreadyIdentifiedError {
-  readonly "_tag": SdkPersonAlreadyIdentifiedErrorTag;
+export interface ApiSdkPersonAlreadyIdentifiedError {
+  readonly "_tag": ApiSdkPersonAlreadyIdentifiedErrorTag;
   readonly "distinctId": string
 }
 
-export type SdkIdentifyPerson500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkIdentifyPerson500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type SdkSyncPersonAttributesParamsXIsBackgrounded = "false"
 
@@ -493,9 +544,9 @@ export interface SdkSyncPersonAttributesBody {
   readonly "traits"?: Record<string, unknown> | null | undefined
 }
 
-export type SdkSyncPersonAttributes400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkSyncPersonAttributes400 = ApiSdkValidationError | EffectHttpApiSchemaError
 
-export type SdkSyncPersonAttributes500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkSyncPersonAttributes500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type SdkSyncTransactionParamsXIsBackgrounded = "false"
 
@@ -537,7 +588,7 @@ export type SdkSyncTransactionRequestQuantityEnum = "-Infinity"
 
 export interface SdkSyncTransactionRequest {
   readonly "platform": SdkSyncTransactionRequestPlatformEnum | SdkSyncTransactionRequestPlatformEnum;
-  readonly "productId": string;
+  readonly "productSlug": string;
   readonly "purchaseDate": number | SdkSyncTransactionRequestPurchaseDateEnum | SdkSyncTransactionRequestPurchaseDateEnum | SdkSyncTransactionRequestPurchaseDateEnum;
   readonly "purchaseToken"?: string | null | undefined;
   readonly "quantity": number | SdkSyncTransactionRequestQuantityEnum | SdkSyncTransactionRequestQuantityEnum | SdkSyncTransactionRequestQuantityEnum;
@@ -549,9 +600,9 @@ export interface SdkSyncTransactionResponse {
   readonly "accepted": boolean
 }
 
-export type SdkSyncTransaction400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkSyncTransaction400 = ApiSdkValidationError | EffectHttpApiSchemaError
 
-export type SdkSyncTransaction500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkSyncTransaction500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type SdkEvaluateFeatureFlagsParamsXIsBackgrounded = "false"
 
@@ -599,7 +650,7 @@ export interface SdkFeatureFlagsResponse {
   readonly "flags": ReadonlyArray<SdkFeatureFlagResult>
 }
 
-export type SdkEvaluateFeatureFlags500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkEvaluateFeatureFlags500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type SdkResolvePaywallParamsXIsBackgrounded = "false"
 
@@ -671,9 +722,50 @@ export interface SdkResolvedPaywall {
 
 export type SdkResolvePaywall200 = SdkResolvedPaywall | null
 
-export type SdkResolvePaywall400 = SdkValidationError | EffectHttpApiSchemaError
+export type SdkResolvePaywall400 = ApiSdkValidationError | EffectHttpApiSchemaError
+
+export type SdkResolvePaywall500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type SdkResolvePaywall500 = AuthenticationError | SdkServiceError | AuthenticationError | NotAuthenticatedError
+export type SdkGetSchemaParamsXIsBackgrounded = "false"
+
+export type SdkGetSchemaParamsXIsDebugBuildEnum = "false"
+
+export type SdkGetSchemaParamsXObserverModeEnum = "false"
+
+export type SdkGetSchemaParamsXPlatformFlavorEnum = "browser"
+
+export type SdkGetSchemaParamsXSdkEnum = "web"
+
+export interface SdkGetSchemaParams {
+  readonly "x-distinct-id": string;
+  readonly "x-publishable-key": string;
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | null | undefined;
+  readonly "x-client-version"?: string | null | undefined;
+  readonly "x-is-backgrounded": SdkGetSchemaParamsXIsBackgrounded;
+  readonly "x-is-debug-build": SdkGetSchemaParamsXIsDebugBuildEnum | SdkGetSchemaParamsXIsDebugBuildEnum;
+  readonly "x-nonce"?: string | null | undefined;
+  readonly "x-observer-mode": SdkGetSchemaParamsXObserverModeEnum | SdkGetSchemaParamsXObserverModeEnum;
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | null | undefined;
+  readonly "x-platform-device"?: string | null | undefined;
+  readonly "x-platform-flavor": SdkGetSchemaParamsXPlatformFlavorEnum | SdkGetSchemaParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor-version"?: string | null | undefined;
+  readonly "x-platform-version"?: string | null | undefined;
+  readonly "x-preferred-locales"?: string | null | undefined;
+  readonly "x-sdk": SdkGetSchemaParamsXSdkEnum | SdkGetSchemaParamsXSdkEnum;
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | null | undefined
+}
+
+export interface SdkSchema {
+  readonly "locations": Record<string, unknown>;
+  readonly "perks": Record<string, unknown>;
+  readonly "products": Record<string, unknown>;
+  readonly "version": string
+}
+
+export type SdkGetSchema500 = ApiAuthenticationError | ApiSchemaServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface User {
   readonly "createdAt": string;
@@ -698,14 +790,14 @@ export interface User {
   readonly "updatedAt": string
 }
 
-export type UserServiceErrorTag = "UserServiceError"
+export type ApiUserServiceErrorTag = "Api/UserServiceError"
 
-export interface UserServiceError {
-  readonly "_tag": UserServiceErrorTag;
+export interface ApiUserServiceError {
+  readonly "_tag": ApiUserServiceErrorTag;
   readonly "cause": string
 }
 
-export type UsersGetUser500 = AuthenticationError | UserServiceError | AuthenticationError | NotAuthenticatedError
+export type UsersGetUser500 = ApiAuthenticationError | ApiUserServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface PaymentProviderConfiguration {
   readonly "enabled": boolean;
@@ -717,14 +809,14 @@ export interface PaymentProviderConfiguration {
 
 export type PaymentProviderConfigurationsListPaymentProviderConfigurations200 = ReadonlyArray<PaymentProviderConfiguration>
 
-export type PaymentProviderConfigurationServiceErrorTag = "PaymentProviderConfigurationServiceError"
+export type ApiPaymentProviderConfigurationServiceErrorTag = "Api/PaymentProviderConfigurationServiceError"
 
-export interface PaymentProviderConfigurationServiceError {
-  readonly "_tag": PaymentProviderConfigurationServiceErrorTag;
+export interface ApiPaymentProviderConfigurationServiceError {
+  readonly "_tag": ApiPaymentProviderConfigurationServiceErrorTag;
   readonly "cause": string
 }
 
-export type PaymentProviderConfigurationsListPaymentProviderConfigurations500 = PaymentProviderConfigurationServiceError | AuthenticationError | NotAuthenticatedError
+export type PaymentProviderConfigurationsListPaymentProviderConfigurations500 = ApiPaymentProviderConfigurationServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface PaymentProviderProduct {
   readonly "configuration": Record<string, unknown>;
@@ -736,132 +828,14 @@ export interface PaymentProviderProduct {
 
 export type PaymentProviderProductsListPaymentProviderProducts200 = ReadonlyArray<PaymentProviderProduct>
 
-export type PaymentProviderProductServiceErrorTag = "PaymentProviderProductServiceError"
+export type ApiPaymentProviderProductServiceErrorTag = "Api/PaymentProviderProductServiceError"
 
-export interface PaymentProviderProductServiceError {
-  readonly "_tag": PaymentProviderProductServiceErrorTag;
+export interface ApiPaymentProviderProductServiceError {
+  readonly "_tag": ApiPaymentProviderProductServiceErrorTag;
   readonly "cause": string
 }
 
-export type PaymentProviderProductsListPaymentProviderProducts500 = PaymentProviderProductServiceError | AuthenticationError | NotAuthenticatedError
-
-export interface DeployChangesetBody {
-  readonly "changeset": {
-  readonly "changes": ReadonlyArray<{
-  readonly "changeType": "create-paywall-location";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "description"?: string | null | null | undefined;
-  readonly "name": string;
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "update-paywall-location";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "description"?: string | null | null | undefined;
-  readonly "name": string;
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "archive-paywall-location";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "create-perk";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "name": string;
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "update-perk";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "name": string;
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "delete-perk";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "create-product";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "name": string;
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "update-product";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "name": string;
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "delete-product";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "slug": string
-}
-} | {
-  readonly "changeType": "create-product-perk";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "perkSlug": string;
-  readonly "productSlug": string
-}
-} | {
-  readonly "changeType": "delete-product-perk";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "perkSlug": string;
-  readonly "productSlug": string
-}
-} | {
-  readonly "changeType": "create-payment-provider-product";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "configuration": Record<string, unknown>;
-  readonly "productSlug": string;
-  readonly "providerId": string
-}
-} | {
-  readonly "changeType": "update-payment-provider-product";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "configuration": Record<string, unknown>;
-  readonly "productSlug": string;
-  readonly "providerId": string
-}
-} | {
-  readonly "changeType": "delete-payment-provider-product";
-  readonly "key": string;
-  readonly "payload": {
-  readonly "productSlug": string;
-  readonly "providerId": string
-}
-}>
-}
-}
-
-export interface DeployChangesetResponse {
-  readonly "deploymentId": string
-}
-
-export type ChangesetDeploymentServiceErrorTag = "ChangesetDeploymentServiceError"
-
-export interface ChangesetDeploymentServiceError {
-  readonly "_tag": ChangesetDeploymentServiceErrorTag;
-  readonly "cause": null
-}
-
-export type ChangesetsDeployChangeset500 = AuthenticationError | ChangesetDeploymentServiceError | AuthenticationError | NotAuthenticatedError
+export type PaymentProviderProductsListPaymentProviderProducts500 = ApiPaymentProviderProductServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type WebhookEndpointConsecutiveFailuresEnum = "-Infinity"
 
@@ -883,14 +857,14 @@ export interface WebhookEndpoint {
 
 export type WebhooksListWebhookEndpoints200 = ReadonlyArray<WebhookEndpoint>
 
-export type WebhookServiceErrorTag = "WebhookServiceError"
+export type ApiWebhookServiceErrorTag = "Api/WebhookServiceError"
 
-export interface WebhookServiceError {
-  readonly "_tag": WebhookServiceErrorTag;
+export interface ApiWebhookServiceError {
+  readonly "_tag": ApiWebhookServiceErrorTag;
   readonly "cause": string
 }
 
-export type WebhooksListWebhookEndpoints500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksListWebhookEndpoints500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export interface CreateWebhookEndpointBody {
   readonly "description"?: string | null | undefined;
@@ -899,27 +873,27 @@ export interface CreateWebhookEndpointBody {
   readonly "url": string
 }
 
-export type WebhookValidationErrorTag = "WebhookValidationError"
+export type ApiWebhookValidationErrorTag = "Api/WebhookValidationError"
 
-export interface WebhookValidationError {
-  readonly "_tag": WebhookValidationErrorTag;
+export interface ApiWebhookValidationError {
+  readonly "_tag": ApiWebhookValidationErrorTag;
   readonly "message": string
 }
 
-export type WebhooksCreateWebhookEndpoint400 = WebhookValidationError | EffectHttpApiSchemaError
+export type WebhooksCreateWebhookEndpoint400 = ApiWebhookValidationError | EffectHttpApiSchemaError
 
-export type WebhooksCreateWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksCreateWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type WebhookEndpointNotFoundErrorTag = "WebhookEndpointNotFoundError"
+export type ApiWebhookEndpointNotFoundErrorTag = "Api/WebhookEndpointNotFoundError"
 
-export interface WebhookEndpointNotFoundError {
-  readonly "_tag": WebhookEndpointNotFoundErrorTag;
+export interface ApiWebhookEndpointNotFoundError {
+  readonly "_tag": ApiWebhookEndpointNotFoundErrorTag;
   readonly "endpointId": string
 }
 
-export type WebhooksGetWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksGetWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type WebhooksDeleteWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksDeleteWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type UpdateWebhookEndpointBodyStatusEnum = "disabled"
 
@@ -931,11 +905,11 @@ export interface UpdateWebhookEndpointBody {
   readonly "url"?: string | null | undefined
 }
 
-export type WebhooksUpdateWebhookEndpoint400 = WebhookValidationError | EffectHttpApiSchemaError
+export type WebhooksUpdateWebhookEndpoint400 = ApiWebhookValidationError | EffectHttpApiSchemaError
 
-export type WebhooksUpdateWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksUpdateWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type WebhooksRotateWebhookSecret500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksRotateWebhookSecret500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type WebhookDeliveryAttemptCountEnum = "-Infinity"
 
@@ -958,11 +932,11 @@ export interface WebhookDelivery {
   readonly "webhookEndpointId": string
 }
 
-export type WebhooksTestWebhookEndpoint500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksTestWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type WebhooksListWebhookDeliveries200 = ReadonlyArray<WebhookDelivery>
 
-export type WebhooksListWebhookDeliveries500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksListWebhookDeliveries500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export type WebhookDeliveryWithAttemptsAttemptCountEnum = "-Infinity"
 
@@ -1003,18 +977,18 @@ export interface WebhookDeliveryWithAttempts {
   readonly "webhookEndpointId": string
 }
 
-export type WebhookDeliveryNotFoundErrorTag = "WebhookDeliveryNotFoundError"
+export type ApiWebhookDeliveryNotFoundErrorTag = "Api/WebhookDeliveryNotFoundError"
 
-export interface WebhookDeliveryNotFoundError {
-  readonly "_tag": WebhookDeliveryNotFoundErrorTag;
+export interface ApiWebhookDeliveryNotFoundError {
+  readonly "_tag": ApiWebhookDeliveryNotFoundErrorTag;
   readonly "deliveryId": string
 }
 
-export type WebhooksGetWebhookDelivery500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksGetWebhookDelivery500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
-export type WebhooksRetryWebhookDelivery400 = WebhookValidationError | EffectHttpApiSchemaError
+export type WebhooksRetryWebhookDelivery400 = ApiWebhookValidationError | EffectHttpApiSchemaError
 
-export type WebhooksRetryWebhookDelivery500 = WebhookServiceError | AuthenticationError | NotAuthenticatedError
+export type WebhooksRetryWebhookDelivery500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
 
 export const make = (
   httpClient: HttpClient.HttpClient, 
@@ -1089,73 +1063,79 @@ export const make = (
   return {
     httpClient,
     "authSession": () => HttpClientRequest.get(`/api/v1/auth/session`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"AuthSession500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"AuthSession500"})
   ),
   "apiKeysListApiKeys": () => HttpClientRequest.get(`/api/v1/api-keys`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ApiKeysListApiKeys500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ApiKeysListApiKeys500"})
   ),
   "apiKeysCreateSecretKey": (options) => HttpClientRequest.post(`/api/v1/api-keys`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ApiKeysCreateSecretKey500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ApiKeysCreateSecretKey500"})
   ),
   "apiKeysGetApiKeyById": (apiKeyId) => HttpClientRequest.get(`/api/v1/api-keys/${apiKeyId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"ApiKeyNotFoundError","500":"ApiKeysGetApiKeyById500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiApiKeyNotFoundError","500":"ApiKeysGetApiKeyById500"})
   ),
   "apiKeysDeleteApiKey": (apiKeyId) => HttpClientRequest.delete(`/api/v1/api-keys/${apiKeyId}`).pipe(
-    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"ApiKeyNotFoundError","500":"ApiKeysDeleteApiKey500"})
+    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiApiKeyNotFoundError","500":"ApiKeysDeleteApiKey500"})
   ),
   "apiKeysRotateSecretKey": (apiKeyId) => HttpClientRequest.post(`/api/v1/api-keys/${apiKeyId}/rotate`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"ApiKeyNotFoundError","500":"ApiKeysRotateSecretKey500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiApiKeyNotFoundError","500":"ApiKeysRotateSecretKey500"})
   ),
   "personsListPersons": () => HttpClientRequest.get(`/api/v1/persons`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PersonsListPersons500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PersonsListPersons500"})
   ),
   "personsCreatePerson": (options) => HttpClientRequest.post(`/api/v1/persons`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"PersonsCreatePerson400","403":"ActionForbiddenError","500":"PersonsCreatePerson500"})
+    onRequest(["2xx"], {"400":"PersonsCreatePerson400","403":"ApiActionForbiddenError","500":"PersonsCreatePerson500"})
   ),
   "personsGetPersonById": (personId) => HttpClientRequest.get(`/api/v1/persons/${personId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"PersonNotFoundError","500":"PersonsGetPersonById500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiPersonNotFoundError","500":"PersonsGetPersonById500"})
   ),
   "personsGetPersonByDistinctId": (distinctId) => HttpClientRequest.get(`/api/v1/persons/by-distinct-id/${distinctId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"PersonNotFoundError","500":"PersonsGetPersonByDistinctId500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiPersonNotFoundError","500":"PersonsGetPersonByDistinctId500"})
   ),
   "organizationsCreateOrganization": (options) => HttpClientRequest.post(`/api/v1/organizations`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
     onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"OrganizationsCreateOrganization500"})
   ),
   "perksListPerks": () => HttpClientRequest.get(`/api/v1/perks`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PerksListPerks500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PerksListPerks500"})
   ),
   "paywallLocationsListPaywallLocations": () => HttpClientRequest.get(`/api/v1/paywall-locations`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PaywallLocationsListPaywallLocations500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PaywallLocationsListPaywallLocations500"})
+  ),
+  "schemaGetSchema": () => HttpClientRequest.get(`/api/v1/schema`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"SchemaGetSchema500"})
+  ),
+  "schemaGetSchemaVersion": () => HttpClientRequest.get(`/api/v1/schema/version`).pipe(
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"SchemaGetSchemaVersion500"})
   ),
   "projectsCreateProject": (options) => HttpClientRequest.post(`/api/v1/projects`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ProjectsCreateProject500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ProjectsCreateProject500"})
   ),
   "projectsListProjects": (organizationId) => HttpClientRequest.get(`/api/v1/projects/${organizationId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ProjectsListProjects500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ProjectsListProjects500"})
   ),
   "productsListProducts": () => HttpClientRequest.get(`/api/v1/products`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ProductsListProducts500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ProductsListProducts500"})
   ),
   "productPerksListProductPerksByProductId": (productId) => HttpClientRequest.get(`/api/v1/product-perks/by-product-id/${productId}`).pipe(
-    onRequest(["2xx"], {"400":"ProductPerksListProductPerksByProductId400","403":"ActionForbiddenError","500":"ProductPerksListProductPerksByProductId500"})
+    onRequest(["2xx"], {"400":"ProductPerksListProductPerksByProductId400","403":"ApiActionForbiddenError","500":"ProductPerksListProductPerksByProductId500"})
   ),
   "sdkGetPerson": (options) => HttpClientRequest.get(`/api/v1/sdk/person`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options?.["x-distinct-id"] ?? undefined, "x-publishable-key": options?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options?.["x-client-locale"] ?? undefined, "x-client-version": options?.["x-client-version"] ?? undefined, "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined, "x-nonce": options?.["x-nonce"] ?? undefined, "x-observer-mode": options?.["x-observer-mode"] ?? undefined, "x-platform": options?.["x-platform"] ?? undefined, "x-platform-brand": options?.["x-platform-brand"] ?? undefined, "x-platform-device": options?.["x-platform-device"] ?? undefined, "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options?.["x-platform-version"] ?? undefined, "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined, "x-sdk": options?.["x-sdk"] ?? undefined, "x-sdk-version": options?.["x-sdk-version"] ?? undefined, "x-storefront": options?.["x-storefront"] ?? undefined }),
-    onRequest(["2xx"], {"400":"SdkGetPerson400","404":"SdkPersonNotFoundError","500":"SdkGetPerson500"})
+    onRequest(["2xx"], {"400":"SdkGetPerson400","404":"ApiSdkPersonNotFoundError","500":"SdkGetPerson500"})
   ),
   "sdkIdentifyPerson": (options) => HttpClientRequest.post(`/api/v1/sdk/identify`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
     HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkIdentifyPerson400","409":"SdkPersonAlreadyIdentifiedError","500":"SdkIdentifyPerson500"})
+    onRequest(["2xx"], {"400":"SdkIdentifyPerson400","404":"ApiSdkPersonNotFoundError","409":"ApiSdkPersonAlreadyIdentifiedError","500":"SdkIdentifyPerson500"})
   ),
   "sdkSyncPersonAttributes": (options) => HttpClientRequest.post(`/api/v1/sdk/person/traits`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
     HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkSyncPersonAttributes400","500":"SdkSyncPersonAttributes500"})
+    onRequest(["2xx"], {"400":"SdkSyncPersonAttributes400","404":"ApiSdkPersonNotFoundError","500":"SdkSyncPersonAttributes500"})
   ),
   "sdkSyncTransaction": (options) => HttpClientRequest.post(`/api/v1/sdk/sync-transaction`).pipe(
     HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
@@ -1172,93 +1152,95 @@ export const make = (
     HttpClientRequest.bodyJsonUnsafe(options.payload),
     onRequest(["2xx"], {"400":"SdkResolvePaywall400","500":"SdkResolvePaywall500"})
   ),
+  "sdkGetSchema": (options) => HttpClientRequest.get(`/api/v1/sdk/schema`).pipe(
+    HttpClientRequest.setHeaders({ "x-distinct-id": options?.["x-distinct-id"] ?? undefined, "x-publishable-key": options?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options?.["x-client-locale"] ?? undefined, "x-client-version": options?.["x-client-version"] ?? undefined, "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined, "x-nonce": options?.["x-nonce"] ?? undefined, "x-observer-mode": options?.["x-observer-mode"] ?? undefined, "x-platform": options?.["x-platform"] ?? undefined, "x-platform-brand": options?.["x-platform-brand"] ?? undefined, "x-platform-device": options?.["x-platform-device"] ?? undefined, "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options?.["x-platform-version"] ?? undefined, "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined, "x-sdk": options?.["x-sdk"] ?? undefined, "x-sdk-version": options?.["x-sdk-version"] ?? undefined, "x-storefront": options?.["x-storefront"] ?? undefined }),
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"SdkGetSchema500"})
+  ),
   "usersGetUser": () => HttpClientRequest.get(`/api/v1/users/current`).pipe(
     onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"UsersGetUser500"})
   ),
   "paymentProviderConfigurationsListPaymentProviderConfigurations": () => HttpClientRequest.get(`/api/v1/payment-provider-configurations`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PaymentProviderConfigurationsListPaymentProviderConfigurations500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PaymentProviderConfigurationsListPaymentProviderConfigurations500"})
   ),
   "paymentProviderProductsListPaymentProviderProducts": () => HttpClientRequest.get(`/api/v1/payment-provider-products`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"PaymentProviderProductsListPaymentProviderProducts500"})
-  ),
-  "changesetsDeployChangeset": (options) => HttpClientRequest.post(`/api/v1/changesets/deploy`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"ChangesetsDeployChangeset500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PaymentProviderProductsListPaymentProviderProducts500"})
   ),
   "webhooksListWebhookEndpoints": () => HttpClientRequest.get(`/api/v1/webhooks/endpoints`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"WebhooksListWebhookEndpoints500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"WebhooksListWebhookEndpoints500"})
   ),
   "webhooksCreateWebhookEndpoint": (options) => HttpClientRequest.post(`/api/v1/webhooks/endpoints`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"WebhooksCreateWebhookEndpoint400","403":"ActionForbiddenError","500":"WebhooksCreateWebhookEndpoint500"})
+    onRequest(["2xx"], {"400":"WebhooksCreateWebhookEndpoint400","403":"ApiActionForbiddenError","500":"WebhooksCreateWebhookEndpoint500"})
   ),
   "webhooksGetWebhookEndpoint": (endpointId) => HttpClientRequest.get(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksGetWebhookEndpoint500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksGetWebhookEndpoint500"})
   ),
   "webhooksDeleteWebhookEndpoint": (endpointId) => HttpClientRequest.delete(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
-    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksDeleteWebhookEndpoint500"})
+    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksDeleteWebhookEndpoint500"})
   ),
   "webhooksUpdateWebhookEndpoint": (endpointId, options) => HttpClientRequest.patch(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
     HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"WebhooksUpdateWebhookEndpoint400","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksUpdateWebhookEndpoint500"})
+    onRequest(["2xx"], {"400":"WebhooksUpdateWebhookEndpoint400","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksUpdateWebhookEndpoint500"})
   ),
   "webhooksRotateWebhookSecret": (endpointId) => HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/rotate-secret`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksRotateWebhookSecret500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksRotateWebhookSecret500"})
   ),
   "webhooksTestWebhookEndpoint": (endpointId) => HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/test`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookEndpointNotFoundError","500":"WebhooksTestWebhookEndpoint500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksTestWebhookEndpoint500"})
   ),
   "webhooksListWebhookDeliveries": () => HttpClientRequest.get(`/api/v1/webhooks/deliveries`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","500":"WebhooksListWebhookDeliveries500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"WebhooksListWebhookDeliveries500"})
   ),
   "webhooksGetWebhookDelivery": (deliveryId) => HttpClientRequest.get(`/api/v1/webhooks/deliveries/${deliveryId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ActionForbiddenError","404":"WebhookDeliveryNotFoundError","500":"WebhooksGetWebhookDelivery500"})
+    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookDeliveryNotFoundError","500":"WebhooksGetWebhookDelivery500"})
   ),
   "webhooksRetryWebhookDelivery": (deliveryId) => HttpClientRequest.post(`/api/v1/webhooks/deliveries/${deliveryId}/retry`).pipe(
-    onRequest(["2xx"], {"400":"WebhooksRetryWebhookDelivery400","403":"ActionForbiddenError","404":"WebhookDeliveryNotFoundError","500":"WebhooksRetryWebhookDelivery500"})
+    onRequest(["2xx"], {"400":"WebhooksRetryWebhookDelivery400","403":"ApiActionForbiddenError","404":"ApiWebhookDeliveryNotFoundError","500":"WebhooksRetryWebhookDelivery500"})
   )
   }
 }
 
 export interface VoidhashCoreClient {
   readonly httpClient: HttpClient.HttpClient
-  readonly "authSession": () => Effect.Effect<AuthSession200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"AuthSession500", AuthSession500>>
-  readonly "apiKeysListApiKeys": () => Effect.Effect<ApiKeysListApiKeys200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeysListApiKeys500", ApiKeysListApiKeys500>>
-  readonly "apiKeysCreateSecretKey": (options: CreateSecretKeyBody) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeysCreateSecretKey500", ApiKeysCreateSecretKey500>>
-  readonly "apiKeysGetApiKeyById": (apiKeyId: string) => Effect.Effect<ApiKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysGetApiKeyById500", ApiKeysGetApiKeyById500>>
-  readonly "apiKeysDeleteApiKey": (apiKeyId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysDeleteApiKey500", ApiKeysDeleteApiKey500>>
-  readonly "apiKeysRotateSecretKey": (apiKeyId: string) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ApiKeyNotFoundError", ApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysRotateSecretKey500", ApiKeysRotateSecretKey500>>
-  readonly "personsListPersons": () => Effect.Effect<PersonsListPersons200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonsListPersons500", PersonsListPersons500>>
-  readonly "personsCreatePerson": (options: CreatePersonBody) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"PersonsCreatePerson400", PersonsCreatePerson400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonsCreatePerson500", PersonsCreatePerson500>>
-  readonly "personsGetPersonById": (personId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonNotFoundError", PersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonById500", PersonsGetPersonById500>>
-  readonly "personsGetPersonByDistinctId": (distinctId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PersonNotFoundError", PersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonByDistinctId500", PersonsGetPersonByDistinctId500>>
+  readonly "authSession": () => Effect.Effect<AuthSession200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"AuthSession500", AuthSession500>>
+  readonly "apiKeysListApiKeys": () => Effect.Effect<ApiKeysListApiKeys200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiKeysListApiKeys500", ApiKeysListApiKeys500>>
+  readonly "apiKeysCreateSecretKey": (options: CreateSecretKeyBody) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiKeysCreateSecretKey500", ApiKeysCreateSecretKey500>>
+  readonly "apiKeysGetApiKeyById": (apiKeyId: string) => Effect.Effect<ApiKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysGetApiKeyById500", ApiKeysGetApiKeyById500>>
+  readonly "apiKeysDeleteApiKey": (apiKeyId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysDeleteApiKey500", ApiKeysDeleteApiKey500>>
+  readonly "apiKeysRotateSecretKey": (apiKeyId: string) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysRotateSecretKey500", ApiKeysRotateSecretKey500>>
+  readonly "personsListPersons": () => Effect.Effect<PersonsListPersons200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PersonsListPersons500", PersonsListPersons500>>
+  readonly "personsCreatePerson": (options: CreatePersonBody) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"PersonsCreatePerson400", PersonsCreatePerson400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PersonsCreatePerson500", PersonsCreatePerson500>>
+  readonly "personsGetPersonById": (personId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiPersonNotFoundError", ApiPersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonById500", PersonsGetPersonById500>>
+  readonly "personsGetPersonByDistinctId": (distinctId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiPersonNotFoundError", ApiPersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonByDistinctId500", PersonsGetPersonByDistinctId500>>
   readonly "organizationsCreateOrganization": (options: CreateOrganizationBody) => Effect.Effect<Organization, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"OrganizationsCreateOrganization500", OrganizationsCreateOrganization500>>
-  readonly "perksListPerks": () => Effect.Effect<PerksListPerks200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PerksListPerks500", PerksListPerks500>>
-  readonly "paywallLocationsListPaywallLocations": () => Effect.Effect<PaywallLocationsListPaywallLocations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PaywallLocationsListPaywallLocations500", PaywallLocationsListPaywallLocations500>>
-  readonly "projectsCreateProject": (options: CreateProjectBody) => Effect.Effect<Project, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProjectsCreateProject500", ProjectsCreateProject500>>
-  readonly "projectsListProjects": (organizationId: string) => Effect.Effect<ProjectsListProjects200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProjectsListProjects500", ProjectsListProjects500>>
-  readonly "productsListProducts": () => Effect.Effect<ProductsListProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProductsListProducts500", ProductsListProducts500>>
-  readonly "productPerksListProductPerksByProductId": (productId: string) => Effect.Effect<ProductPerksListProductPerksByProductId200, HttpClientError.HttpClientError | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId400", ProductPerksListProductPerksByProductId400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId500", ProductPerksListProductPerksByProductId500>>
-  readonly "sdkGetPerson": (options: SdkGetPersonParams) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkGetPerson400", SdkGetPerson400> | VoidhashCoreClientError<"SdkPersonNotFoundError", SdkPersonNotFoundError> | VoidhashCoreClientError<"SdkGetPerson500", SdkGetPerson500>>
-  readonly "sdkIdentifyPerson": (options: { readonly params: SdkIdentifyPersonParams; readonly payload: SdkIdentifyBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkIdentifyPerson400", SdkIdentifyPerson400> | VoidhashCoreClientError<"SdkPersonAlreadyIdentifiedError", SdkPersonAlreadyIdentifiedError> | VoidhashCoreClientError<"SdkIdentifyPerson500", SdkIdentifyPerson500>>
-  readonly "sdkSyncPersonAttributes": (options: { readonly params: SdkSyncPersonAttributesParams; readonly payload: SdkSyncPersonAttributesBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncPersonAttributes400", SdkSyncPersonAttributes400> | VoidhashCoreClientError<"SdkSyncPersonAttributes500", SdkSyncPersonAttributes500>>
+  readonly "perksListPerks": () => Effect.Effect<PerksListPerks200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PerksListPerks500", PerksListPerks500>>
+  readonly "paywallLocationsListPaywallLocations": () => Effect.Effect<PaywallLocationsListPaywallLocations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PaywallLocationsListPaywallLocations500", PaywallLocationsListPaywallLocations500>>
+  readonly "schemaGetSchema": () => Effect.Effect<ProjectSchemaResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"SchemaGetSchema500", SchemaGetSchema500>>
+  readonly "schemaGetSchemaVersion": () => Effect.Effect<SchemaVersion, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"SchemaGetSchemaVersion500", SchemaGetSchemaVersion500>>
+  readonly "projectsCreateProject": (options: CreateProjectBody) => Effect.Effect<Project, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProjectsCreateProject500", ProjectsCreateProject500>>
+  readonly "projectsListProjects": (organizationId: string) => Effect.Effect<ProjectsListProjects200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProjectsListProjects500", ProjectsListProjects500>>
+  readonly "productsListProducts": () => Effect.Effect<ProductsListProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProductsListProducts500", ProductsListProducts500>>
+  readonly "productPerksListProductPerksByProductId": (productId: string) => Effect.Effect<ProductPerksListProductPerksByProductId200, HttpClientError.HttpClientError | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId400", ProductPerksListProductPerksByProductId400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId500", ProductPerksListProductPerksByProductId500>>
+  readonly "sdkGetPerson": (options: SdkGetPersonParams) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkGetPerson400", SdkGetPerson400> | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError> | VoidhashCoreClientError<"SdkGetPerson500", SdkGetPerson500>>
+  readonly "sdkIdentifyPerson": (options: { readonly params: SdkIdentifyPersonParams; readonly payload: SdkIdentifyBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkIdentifyPerson400", SdkIdentifyPerson400> | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError> | VoidhashCoreClientError<"ApiSdkPersonAlreadyIdentifiedError", ApiSdkPersonAlreadyIdentifiedError> | VoidhashCoreClientError<"SdkIdentifyPerson500", SdkIdentifyPerson500>>
+  readonly "sdkSyncPersonAttributes": (options: { readonly params: SdkSyncPersonAttributesParams; readonly payload: SdkSyncPersonAttributesBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncPersonAttributes400", SdkSyncPersonAttributes400> | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError> | VoidhashCoreClientError<"SdkSyncPersonAttributes500", SdkSyncPersonAttributes500>>
   readonly "sdkSyncTransaction": (options: { readonly params: SdkSyncTransactionParams; readonly payload: SdkSyncTransactionRequest }) => Effect.Effect<SdkSyncTransactionResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncTransaction400", SdkSyncTransaction400> | VoidhashCoreClientError<"SdkSyncTransaction500", SdkSyncTransaction500>>
   readonly "sdkEvaluateFeatureFlags": (options: { readonly params: SdkEvaluateFeatureFlagsParams; readonly payload: EvaluateFeatureFlagsBody }) => Effect.Effect<SdkFeatureFlagsResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"SdkEvaluateFeatureFlags500", SdkEvaluateFeatureFlags500>>
   readonly "sdkResolvePaywall": (options: { readonly params: SdkResolvePaywallParams; readonly payload: SdkResolvePaywallBody }) => Effect.Effect<SdkResolvePaywall200, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkResolvePaywall400", SdkResolvePaywall400> | VoidhashCoreClientError<"SdkResolvePaywall500", SdkResolvePaywall500>>
+  readonly "sdkGetSchema": (options: SdkGetSchemaParams) => Effect.Effect<SdkSchema, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"SdkGetSchema500", SdkGetSchema500>>
   readonly "usersGetUser": () => Effect.Effect<User, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"UsersGetUser500", UsersGetUser500>>
-  readonly "paymentProviderConfigurationsListPaymentProviderConfigurations": () => Effect.Effect<PaymentProviderConfigurationsListPaymentProviderConfigurations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderConfigurationsListPaymentProviderConfigurations500", PaymentProviderConfigurationsListPaymentProviderConfigurations500>>
-  readonly "paymentProviderProductsListPaymentProviderProducts": () => Effect.Effect<PaymentProviderProductsListPaymentProviderProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderProductsListPaymentProviderProducts500", PaymentProviderProductsListPaymentProviderProducts500>>
-  readonly "changesetsDeployChangeset": (options: DeployChangesetBody) => Effect.Effect<DeployChangesetResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"ChangesetsDeployChangeset500", ChangesetsDeployChangeset500>>
-  readonly "webhooksListWebhookEndpoints": () => Effect.Effect<WebhooksListWebhookEndpoints200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookEndpoints500", WebhooksListWebhookEndpoints500>>
-  readonly "webhooksCreateWebhookEndpoint": (options: CreateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint400", WebhooksCreateWebhookEndpoint400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint500", WebhooksCreateWebhookEndpoint500>>
-  readonly "webhooksGetWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookEndpoint500", WebhooksGetWebhookEndpoint500>>
-  readonly "webhooksDeleteWebhookEndpoint": (endpointId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksDeleteWebhookEndpoint500", WebhooksDeleteWebhookEndpoint500>>
-  readonly "webhooksUpdateWebhookEndpoint": (endpointId: string, options: UpdateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint400", WebhooksUpdateWebhookEndpoint400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint500", WebhooksUpdateWebhookEndpoint500>>
-  readonly "webhooksRotateWebhookSecret": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksRotateWebhookSecret500", WebhooksRotateWebhookSecret500>>
-  readonly "webhooksTestWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookEndpointNotFoundError", WebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksTestWebhookEndpoint500", WebhooksTestWebhookEndpoint500>>
-  readonly "webhooksListWebhookDeliveries": () => Effect.Effect<WebhooksListWebhookDeliveries200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookDeliveries500", WebhooksListWebhookDeliveries500>>
-  readonly "webhooksGetWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDeliveryWithAttempts, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookDeliveryNotFoundError", WebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookDelivery500", WebhooksGetWebhookDelivery500>>
-  readonly "webhooksRetryWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery400", WebhooksRetryWebhookDelivery400> | VoidhashCoreClientError<"ActionForbiddenError", ActionForbiddenError> | VoidhashCoreClientError<"WebhookDeliveryNotFoundError", WebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery500", WebhooksRetryWebhookDelivery500>>
+  readonly "paymentProviderConfigurationsListPaymentProviderConfigurations": () => Effect.Effect<PaymentProviderConfigurationsListPaymentProviderConfigurations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderConfigurationsListPaymentProviderConfigurations500", PaymentProviderConfigurationsListPaymentProviderConfigurations500>>
+  readonly "paymentProviderProductsListPaymentProviderProducts": () => Effect.Effect<PaymentProviderProductsListPaymentProviderProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderProductsListPaymentProviderProducts500", PaymentProviderProductsListPaymentProviderProducts500>>
+  readonly "webhooksListWebhookEndpoints": () => Effect.Effect<WebhooksListWebhookEndpoints200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookEndpoints500", WebhooksListWebhookEndpoints500>>
+  readonly "webhooksCreateWebhookEndpoint": (options: CreateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint400", WebhooksCreateWebhookEndpoint400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint500", WebhooksCreateWebhookEndpoint500>>
+  readonly "webhooksGetWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookEndpoint500", WebhooksGetWebhookEndpoint500>>
+  readonly "webhooksDeleteWebhookEndpoint": (endpointId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksDeleteWebhookEndpoint500", WebhooksDeleteWebhookEndpoint500>>
+  readonly "webhooksUpdateWebhookEndpoint": (endpointId: string, options: UpdateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint400", WebhooksUpdateWebhookEndpoint400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint500", WebhooksUpdateWebhookEndpoint500>>
+  readonly "webhooksRotateWebhookSecret": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksRotateWebhookSecret500", WebhooksRotateWebhookSecret500>>
+  readonly "webhooksTestWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksTestWebhookEndpoint500", WebhooksTestWebhookEndpoint500>>
+  readonly "webhooksListWebhookDeliveries": () => Effect.Effect<WebhooksListWebhookDeliveries200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookDeliveries500", WebhooksListWebhookDeliveries500>>
+  readonly "webhooksGetWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDeliveryWithAttempts, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookDeliveryNotFoundError", ApiWebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookDelivery500", WebhooksGetWebhookDelivery500>>
+  readonly "webhooksRetryWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery400", WebhooksRetryWebhookDelivery400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookDeliveryNotFoundError", ApiWebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery500", WebhooksRetryWebhookDelivery500>>
 }
 
 export interface VoidhashCoreClientError<Tag extends string, E> extends Error {

From 8d7a7acdbb4bd14b5916fe66db18238acce70652 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 11 May 2026 19:04:20 +0200
Subject: [PATCH 015/129] feat: move to vitest

---
 libraries/react-native/package.json           |   32 +-
 .../src/__mocks__/api/handlers.ts             |   89 --
 .../react-native/src/__mocks__/api/node.ts    |    3 -
 libraries/react-native/src/client-effect.ts   | 1115 +++--------------
 libraries/react-native/src/client.tsx         |   18 +-
 .../src/core/analytics/service.ts             |  469 ++++++-
 .../react-native/src/core/analytics/types.ts  |   34 +-
 .../feature-flags/feature-flag-service.ts     |   68 +
 .../src/core/lifecycle/lifecycle-adapter.ts   |   24 +
 .../src/core/lifecycle/lifecycle-service.ts   |   40 +
 .../react-native-lifecycle-adapter.ts         |   54 +
 .../src/core/paywalls/paywall-service.ts      |   37 +
 .../src/core/products/product-service.ts      |   95 ++
 .../core/transactions/transaction-service.ts  |  223 ++++
 .../{src/__tests__ => tests}/client.test.ts   |   54 +-
 .../core/cache-manager.test.ts                |   25 +-
 .../core/client-effect.test.ts                |  268 ++--
 .../core/customer-info-manager.test.ts        |   25 +-
 .../core/identity-manager.test.ts             |   37 +-
 .../helpers/effect-test-harness.ts            |   89 +-
 .../tests/helpers/effect-vitest.ts            |    9 +
 .../helpers/test-schema.ts                    |    2 +-
 .../internal/paywall-bridge-parser.test.ts    |    3 +-
 .../internal/webview-utils.test.ts            |    3 +-
 .../internal/whitelist.test.ts                |    3 +-
 .../react/use-paywall-by-location.test.tsx    |   66 +-
 libraries/react-native/tsconfig.json          |    2 +-
 libraries/react-native/vitest.setup.ts        |   53 +
 libraries/react-native/vitest.unit.mts        |   16 +
 pnpm-lock.yaml                                |  775 ++++++++++--
 30 files changed, 2313 insertions(+), 1418 deletions(-)
 delete mode 100644 libraries/react-native/src/__mocks__/api/handlers.ts
 delete mode 100644 libraries/react-native/src/__mocks__/api/node.ts
 create mode 100644 libraries/react-native/src/core/feature-flags/feature-flag-service.ts
 create mode 100644 libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
 create mode 100644 libraries/react-native/src/core/lifecycle/lifecycle-service.ts
 create mode 100644 libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts
 create mode 100644 libraries/react-native/src/core/paywalls/paywall-service.ts
 create mode 100644 libraries/react-native/src/core/products/product-service.ts
 create mode 100644 libraries/react-native/src/core/transactions/transaction-service.ts
 rename libraries/react-native/{src/__tests__ => tests}/client.test.ts (78%)
 rename libraries/react-native/{src/__tests__ => tests}/core/cache-manager.test.ts (79%)
 rename libraries/react-native/{src/__tests__ => tests}/core/client-effect.test.ts (79%)
 rename libraries/react-native/{src/__tests__ => tests}/core/customer-info-manager.test.ts (83%)
 rename libraries/react-native/{src/__tests__ => tests}/core/identity-manager.test.ts (78%)
 rename libraries/react-native/{src/__tests__ => tests}/helpers/effect-test-harness.ts (68%)
 create mode 100644 libraries/react-native/tests/helpers/effect-vitest.ts
 rename libraries/react-native/{src/__tests__ => tests}/helpers/test-schema.ts (94%)
 rename libraries/react-native/{src/__tests__ => tests}/internal/paywall-bridge-parser.test.ts (90%)
 rename libraries/react-native/{src/__tests__ => tests}/internal/webview-utils.test.ts (86%)
 rename libraries/react-native/{src/__tests__ => tests}/internal/whitelist.test.ts (81%)
 rename libraries/react-native/{src/__tests__ => tests}/react/use-paywall-by-location.test.tsx (86%)
 create mode 100644 libraries/react-native/vitest.setup.ts
 create mode 100644 libraries/react-native/vitest.unit.mts

diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index 84b2b6692..22236c511 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -61,7 +61,7 @@
 		"postinstall": "tsc || exit 0;",
 		"typecheck": "tsgo --noEmit",
 		"build": "expo-module build",
-		"test": "expo-module test",
+		"test": "vitest --config vitest.unit.mts run",
 		"clean": "rm -rf android/build node_modules/**/android/build lib",
 		"lint": "biome check .",
 		"lint-ci": "biome check .",
@@ -73,23 +73,23 @@
 		"@voidhash/generated-clients": "workspace:*"
 	},
 	"devDependencies": {
-		"@types/jest": "^29.5.14",
+		"@effect/vitest": "4.0.0-beta.23",
+		"@srsholmes/vitest-react-native": "^0.1.5",
 		"@types/react": "~19.1.10",
-		"@vitejs/plugin-react": "^4.6.0",
+		"@vitejs/plugin-react": "catalog:",
 		"@voidhash/shared": "workspace:*",
 		"expo": "54.0.33",
 		"expo-constants": "~18.0.13",
 		"expo-linking": "~8.0.9",
 		"expo-module-scripts": "^5.0.8",
-		"jest": "~29.7.0",
-		"jest-expo": "~54.0.17",
-		"jest-fixed-jsdom": "^0.0.9",
 		"nitro-codegen": "0.26.4",
 		"react": "19.1.0",
 		"react-native": "0.81.5",
 		"react-native-nitro-modules": "0.26.4",
 		"typescript": "5.9.3",
-		"ultracite": "5.0.39"
+		"ultracite": "5.0.39",
+		"vite-tsconfig-paths": "catalog:",
+		"vitest": "^4.1.6"
 	},
 	"peerDependencies": {
 		"@react-native-async-storage/async-storage": "^1.24.0 || ^2.0.0",
@@ -107,23 +107,5 @@
 			"optional": true
 		}
 	},
-	"jest": {
-		"moduleNameMapper": {
-			"^msgpackr$": "<rootDir>/../../node_modules/msgpackr/dist/node.cjs"
-		},
-		"modulePathIgnorePatterns": [
-			"<rootDir>/lib/",
-			"<rootDir>/build/"
-		],
-		"preset": "expo-module-scripts",
-		"projects": [],
-		"setupFiles": [
-			"<rootDir>/jest.setup.ts"
-		],
-		"testPathIgnorePatterns": [
-			"<rootDir>/src/__tests__/helpers/"
-		],
-		"testEnvironment": "jest-fixed-jsdom"
-	},
 	"packageManager": "pnpm@10.19.0"
 }
diff --git a/libraries/react-native/src/__mocks__/api/handlers.ts b/libraries/react-native/src/__mocks__/api/handlers.ts
deleted file mode 100644
index 100cba191..000000000
--- a/libraries/react-native/src/__mocks__/api/handlers.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-// import { HttpResponse, http } from '../../../../node_modules/msw';
-
-// export const handlers = [
-//   http.post('http://localhost:3000/v1/sdk/get-configuration', () => {
-//     return HttpResponse.json({
-//       paywalls: [
-//         {
-//           paywallId: 'paywall_1',
-//           paywallProducts: [
-//             {
-//               paywallProductId: 'pw_prod_1',
-//               productId: 'prod_1',
-//               displayName: 'Premium Monthly',
-//               nativePaymentProviderConfigurationProductId: 'native_ppc_prod_1',
-//               defaultWebCheckoutPaymentProviderConfigurationProductId:
-//                 'web_ppc_prod_1',
-//               paymentProviderConfigurationProducts: [
-//                 // App Store
-//                 {
-//                   paymentProviderConfigurationProductId: 'ppc_prod_1_1',
-//                   paymentProviderConfigurationId: 'ppc_1',
-//                   configuration: {}
-//                 },
-//                 // Google Play
-//                 {
-//                   paymentProviderConfigurationProductId: 'ppc_prod_1_2',
-//                   paymentProviderConfigurationId: 'ppc_2',
-//                   configuration: {}
-//                 }
-//               ]
-//             },
-//             {
-//               paywallProductId: 'pw_prod_2',
-//               productId: 'prod_2',
-//               displayName: 'Premium Yearly',
-//               nativePaymentProviderConfigurationProductId: null,
-//               defaultWebCheckoutPaymentProviderConfigurationProductId:
-//                 'web_ppc_prod_2',
-//               paymentProviderConfigurationProducts: [
-//                 // App Store
-//                 {
-//                   paymentProviderConfigurationProductId: 'ppc_prod_2_1',
-//                   paymentProviderConfigurationId: 'ppc_1',
-//                   configuration: {}
-//                 },
-//                 // Google Play
-//                 {
-//                   paymentProviderConfigurationProductId: 'ppc_prod_2_2',
-//                   paymentProviderConfigurationId: 'ppc_2',
-//                   configuration: {}
-//                 }
-//               ]
-//             }
-//           ]
-//         }
-//       ],
-//       paywallLocations: [
-//         {
-//           paywallLocationId: 'location_1',
-//           slug: 'home'
-//         },
-//         {
-//           paywallLocationId: 'location_2',
-//           slug: 'settings'
-//         }
-//       ],
-//       placements: [
-//         {
-//           paywallId: 'paywall_1',
-//           paywallLocationId: 'location_1'
-//         },
-//         {
-//           paywallId: 'paywall_1',
-//           paywallLocationId: 'location_2'
-//         }
-//       ],
-//       paymentProviderConfigurations: [
-//         {
-//           paymentProviderConfigurationId: 'ppc_1',
-//           providerId: 'app-store'
-//         },
-//         {
-//           paymentProviderConfigurationId: 'ppc_2',
-//           providerId: 'google-play'
-//         }
-//       ]
-//     });
-//   })
-// ];
diff --git a/libraries/react-native/src/__mocks__/api/node.ts b/libraries/react-native/src/__mocks__/api/node.ts
deleted file mode 100644
index 03d997792..000000000
--- a/libraries/react-native/src/__mocks__/api/node.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// import { handlers } from './handlers';
-
-// export const server = setupServer(...handlers);
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 38b1f1efb..b3b3b75d5 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -1,126 +1,29 @@
-import type {
-  CaptureAcceptedResponse,
-  CaptureErrorResponse,
-} from "@voidhash/generated-clients/event-capture";
-import { Cause, Effect } from "effect";
+import { Effect } from "effect";
 
-import { SDK_VERSION } from "./core/constants";
-import { CacheManager } from "./core/caching/cache-manager";
-import type { Product, SubscriptionProduct } from "./core/entities/product";
-import type { Transaction } from "./core/entities/transaction";
-import { EventBusProvider } from "./core/event-bus";
+import { AnalyticsService } from "./core/analytics/service";
+import type { AnalyticsIngestEvent } from "./core/analytics/types";
 import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
 import { CustomerInfoManager } from "./core/identity/customer-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
+import type { SubscriptionProduct } from "./core/entities/product";
+import type { Transaction } from "./core/entities/transaction";
+import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
+import { LifecycleService } from "./core/lifecycle/lifecycle-service";
 import { ApiClient } from "./core/networking/api-client";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
-import type { LocationSlug, ProductSlug } from "./core/schema/registry";
+import { PaywallService } from "./core/paywalls/paywall-service";
+import { ProductService, type ProductsBySlug } from "./core/products/product-service";
+import type { LocationSlug } from "./core/schema/registry";
 import {
-  type RuntimeProductDefinition,
   type RuntimeSchema,
   createEmptyRuntimeSchema,
 } from "./core/schema/runtime";
-import { SdkConfiguration } from "./core/sdk-configuration";
+import { TransactionService } from "./core/transactions/transaction-service";
 import { getCommonSdkHeaders } from "./core/utils/get-common-sdk-headers";
 import { UnsupportedPlatformError } from "./errors";
-import {
-  AnalyticsIngestEvent,
-  AnalyticsSendFailure,
-  QueuedAnalyticsEvent,
-} from "./core/analytics/types";
-import {
-  createQueuedAnalyticsEvent,
-  getAnalyticsStandardizedProperties,
-  mapQueuedAnalyticsEventToIngestEvent,
-} from "./core/analytics/utils";
-import { getNonce } from "./core/utils/crypto";
-
-const PROCESSED_TRANSACTION_TTL_MS = 1000 * 60 * 30;
-const ANALYTICS_BATCH_SIZE = 20;
-const ANALYTICS_FLUSH_INTERVAL_MS = 5000;
-const MAX_ANALYTICS_RETRY_DELAY_MS = 30_000;
-const RETRYABLE_ANALYTICS_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
-
-/**
- * The shape of `useProducts()` etc. — keyed by the registered product slugs.
- * Values are `null` when the underlying store SDK doesn't know about that
- * product (e.g. the product isn't configured on this platform).
- */
-export type ProductsBySlug = Record<ProductSlug, SubscriptionProduct | null>;
-
-interface AppReleaseInfo {
-  readonly appBuild: string | null;
-  readonly appVersion: string | null;
-}
-
-type AppLifecycleState = string;
 
-interface AppLifecycleSubscription {
-  readonly remove: () => void;
-}
-
-interface ReactNativeAppState {
-  readonly currentState?: AppLifecycleState;
-  addEventListener: (
-    eventType: "change",
-    listener: (nextState: AppLifecycleState) => void
-  ) => AppLifecycleSubscription;
-}
-
-const ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY =
-  "voidhash:analytics:last-seen-app-release";
-
-const getReactNativeAppState = (): ReactNativeAppState | null => {
-  try {
-    const reactNative = require("react-native") as {
-      readonly AppState?: ReactNativeAppState;
-    };
-    return reactNative.AppState ?? null;
-  } catch {
-    return null;
-  }
-};
-
-const toNullableString = (value: unknown): string | null =>
-  value !== null && value !== undefined ? String(value) : null;
-
-const toAppReleaseInfo = (
-  value: AppReleaseInfo | undefined | null
-): AppReleaseInfo | null => {
-  if (!value) return null;
-  return {
-    appBuild: value.appBuild,
-    appVersion: value.appVersion,
-  };
-};
-
-const getAnalyticsRetryDelayMs = (attempts: number) =>
-  Math.min(1000 * 2 ** Math.max(attempts - 1, 0), MAX_ANALYTICS_RETRY_DELAY_MS);
-
-const parseRetryAfterMs = (value: string | null): number | undefined => {
-  if (!value) {
-    return undefined;
-  }
-
-  const retryAfterSeconds = Number(value);
-  if (!Number.isNaN(retryAfterSeconds) && retryAfterSeconds >= 0) {
-    return Math.ceil(retryAfterSeconds * 1000);
-  }
-
-  const retryAt = Date.parse(value);
-  if (Number.isNaN(retryAt)) {
-    return undefined;
-  }
-
-  return Math.max(retryAt - Date.now(), 0);
-};
-
-const getRetryAfterMsFromResponseBody = (
-  data: CaptureAcceptedResponse | CaptureErrorResponse | undefined
-): number | undefined =>
-  data && "retry_after_ms" in data && typeof data.retry_after_ms === "number"
-    ? data.retry_after_ms
-    : undefined;
+export type { ProductsBySlug };
+export type { AnalyticsIngestEvent };
 
 interface InitOptions {
   readonly distinctId?: string;
@@ -133,6 +36,11 @@ interface InitOptions {
   readonly internalSchema?: RuntimeSchema;
 }
 
+/**
+ * Build the initial state of the SDK before `init()` has run. Returns an
+ * object whose `init` method performs identity establishment, schema fetching,
+ * and then yields the fully-initialized client facade.
+ */
 const makeUnitializedClient = () => ({
   init: (initOptions: InitOptions = {}) =>
     Effect.gen(function* init() {
@@ -189,841 +97,204 @@ const makeUnitializedClient = () => ({
         }
       }
 
-      return makeInitializedClient({ schema: runtimeSchema });
+      return yield* makeInitializedClient({ schema: runtimeSchema });
     }),
 });
 
-const makeInitializedClient = (options: { schema: RuntimeSchema }) => {
-  const inFlightTransactionKeys = new Set<string>();
-
-  // Analytics state
-  const analyticsQueue: QueuedAnalyticsEvent[] = [];
-  const analyticsSessionId = getNonce();
-  let analyticsFlushTimer: ReturnType<typeof setTimeout> | null = null;
-  let triggerFlushCallback: (() => void) | null = null;
-  const getStandardizedProperties = getAnalyticsStandardizedProperties();
-
-  const clearFlushTimer = () => {
-    if (analyticsFlushTimer) {
-      clearTimeout(analyticsFlushTimer);
-      analyticsFlushTimer = null;
-    }
-  };
-
-  const getNextAnalyticsFlushDelayMs = () => {
-    if (analyticsQueue.length === 0) {
-      return null;
-    }
-
-    const now = Date.now();
-    const hasDueEvents = analyticsQueue.some(
-      (event) => event.availableAt <= now
-    );
-    if (hasDueEvents) {
-      return ANALYTICS_FLUSH_INTERVAL_MS;
-    }
-
-    const nextAvailableAt = Math.min(
-      ...analyticsQueue.map((event) => event.availableAt)
-    );
-    return Math.max(nextAvailableAt - now, 0);
-  };
-
-  const scheduleFlushTimer = () => {
-    if (analyticsFlushTimer || analyticsQueue.length === 0) return;
-    const delayMs = getNextAnalyticsFlushDelayMs();
-    if (delayMs === null) {
-      return;
-    }
-
-    analyticsFlushTimer = setTimeout(() => {
-      analyticsFlushTimer = null;
-      triggerFlushCallback?.();
-    }, delayMs);
-  };
-
-  const sendAnalyticsEventsImpl = (
-    events: ReadonlyArray<AnalyticsIngestEvent>
-  ) =>
-    Effect.gen(function* () {
-      if (events.length === 0) return;
-
-      const identityManager = yield* IdentityManager;
-      const sdkConfiguration = yield* SdkConfiguration;
-      const distinctId = yield* identityManager.getDistinctId();
-      const ingestEventsUrl = resolveIngestEventsUrl({
-        baseUrl: sdkConfiguration.baseUrl,
-        ingestUrl: sdkConfiguration.ingestUrl,
-      });
-
-      const response = yield* Effect.tryPromise({
-        try: () =>
-          fetch(ingestEventsUrl, {
-            body: JSON.stringify({
-              events: events.map((event) => ({
-                context: event.context,
-                distinct_id: distinctId,
-                event: event.event_name,
-                properties: event.properties,
-                request: {
-                  sdk_name: "react-native",
-                  sdk_version: SDK_VERSION,
-                },
-                session_id: event.session_id,
-                timestamp: event.event_ts,
-                uuid: event.event_id,
-              })),
-              sent_at: new Date().toISOString(),
-              token: sdkConfiguration.publishableKey,
-            }),
-            headers: {
-              "content-type": "application/json",
-            },
-            method: "POST",
-          }),
-        catch: (cause) =>
-          new AnalyticsSendFailure({
-            cause,
-            message: "Analytics request failed",
-            retryable: true,
-          }),
-      });
-
-      const data = (yield* Effect.tryPromise({
-        try: () =>
-          response.json() as Promise<
-            CaptureAcceptedResponse | CaptureErrorResponse
-          >,
-        catch: (cause) => cause,
-      }).pipe(Effect.orElseSucceed(() => undefined))) as
-        | CaptureAcceptedResponse
-        | CaptureErrorResponse
-        | undefined;
-
-      if (response.status === 202) {
-        return;
-      }
-
-      if (response.status === 413) {
-        return yield* Effect.fail(
-          new AnalyticsSendFailure({
-            message: `Analytics ingest request failed: ${response.status} ${response.statusText}`,
-            retryable: false,
-            status: response.status,
-          })
-        );
-      }
-
-      if (RETRYABLE_ANALYTICS_STATUS_CODES.has(response.status)) {
-        return yield* Effect.fail(
-          new AnalyticsSendFailure({
-            message: `Analytics ingest request failed: ${response.status} ${response.statusText}`,
-            retryAfterMs:
-              parseRetryAfterMs(response.headers.get("retry-after")) ??
-              getRetryAfterMsFromResponseBody(data),
-            retryable: true,
-            status: response.status,
-          })
-        );
-      }
-
-      if (!response.ok) {
-        return yield* Effect.fail(
-          new AnalyticsSendFailure({
-            message: `Analytics ingest request failed: ${response.status} ${response.statusText}`,
-            retryable: false,
-            status: response.status,
-          })
-        );
-      }
-    });
-
-  const buildQueuedAnalyticsBatchIds = (
-    events: ReadonlyArray<QueuedAnalyticsEvent>
-  ) => new Set(events.map((event) => event.id));
-
-  const dropQueuedAnalyticsBatch = (
-    events: ReadonlyArray<QueuedAnalyticsEvent>
-  ) => {
-    const ids = buildQueuedAnalyticsBatchIds(events);
-    for (let index = analyticsQueue.length - 1; index >= 0; index -= 1) {
-      if (ids.has(analyticsQueue[index]!.id)) {
-        analyticsQueue.splice(index, 1);
-      }
-    }
-  };
-
-  const postponeQueuedAnalyticsBatch = (
-    events: ReadonlyArray<QueuedAnalyticsEvent>,
-    nextAvailableAt: number
-  ) => {
-    const ids = buildQueuedAnalyticsBatchIds(events);
-    for (let index = 0; index < analyticsQueue.length; index += 1) {
-      const queuedEvent = analyticsQueue[index]!;
-      if (!ids.has(queuedEvent.id)) {
-        continue;
-      }
-
-      analyticsQueue[index] = {
-        ...queuedEvent,
-        attempts: queuedEvent.attempts + 1,
-        availableAt: nextAvailableAt,
-      };
-    }
-  };
-
-  const getDueQueuedAnalyticsBatch = () => {
-    const now = Date.now();
-    const queuedBatch: QueuedAnalyticsEvent[] = [];
-
-    for (const event of analyticsQueue) {
-      if (event.availableAt > now) {
-        break;
-      }
-
-      queuedBatch.push(event);
-      if (queuedBatch.length >= ANALYTICS_BATCH_SIZE) {
-        break;
-      }
-    }
-
-    return queuedBatch;
-  };
-
-  const processQueuedAnalyticsBatch = (
-    queuedBatch: ReadonlyArray<QueuedAnalyticsEvent>,
-    standardizedProperties: Record<string, unknown>
-  ): Effect.Effect<
-    void,
-    AnalyticsSendFailure,
-    IdentityManager | SdkConfiguration
-  > =>
-    Effect.gen(function* () {
-      const ingestBatch = queuedBatch.map((event) =>
-        mapQueuedAnalyticsEventToIngestEvent(
-          event,
-          standardizedProperties,
-          analyticsSessionId
-        )
-      );
-
-      const sendResult = yield* Effect.exit(sendAnalyticsEventsImpl(ingestBatch));
-      if (sendResult._tag === "Success") {
-        dropQueuedAnalyticsBatch(queuedBatch);
-        return;
-      }
-
-      const failure = Cause.squash(sendResult.cause);
-      if (!(failure instanceof AnalyticsSendFailure)) {
-        return yield* Effect.fail(
-          new AnalyticsSendFailure({
-            cause: failure,
-            message: failure instanceof Error ? failure.message : String(failure),
-            retryable: false,
-          })
-        );
-      }
-
-      if (failure.status === 413 && queuedBatch.length > 1) {
-        const midpoint = Math.ceil(queuedBatch.length / 2);
-        yield* processQueuedAnalyticsBatch(
-          queuedBatch.slice(0, midpoint),
-          standardizedProperties
-        );
-        yield* processQueuedAnalyticsBatch(
-          queuedBatch.slice(midpoint),
-          standardizedProperties
-        );
-        return;
-      }
-
-      if (failure.status === 413 && queuedBatch.length === 1) {
-        dropQueuedAnalyticsBatch(queuedBatch);
-        yield* Effect.logWarning("Dropping analytics event after 413 response", {
-          eventId: queuedBatch[0]?.id,
-        });
-        return;
-      }
-
-      if (!failure.retryable) {
-        dropQueuedAnalyticsBatch(queuedBatch);
-        yield* Effect.logWarning(
-          "Dropping analytics batch after non-retryable response",
-          {
-            eventIds: queuedBatch.map((event) => event.id),
-            status: failure.status,
-          }
-        );
-        return;
-      }
-
-      return yield* Effect.fail(failure);
-    });
-
-  const processObservedTransaction = (transaction: Transaction) =>
-    Effect.gen(function* processObservedTransaction() {
-      const transactionProcessingKey = buildTransactionProcessingKey(transaction);
-      if (inFlightTransactionKeys.has(transactionProcessingKey)) {
-        return;
-      }
-
-      const cacheManager = yield* CacheManager;
-      const processedTransactionCacheKey =
-        getProcessedTransactionCacheKey(transactionProcessingKey);
-      const cachedTransaction = yield* cacheManager.get<boolean>(
-        processedTransactionCacheKey
-      );
-      if (
-        cachedTransaction &&
-        !cachedTransaction.isExpired &&
-        cachedTransaction.value
-      ) {
-        return;
-      }
-
-      inFlightTransactionKeys.add(transactionProcessingKey);
-      try {
-        const apiClient = yield* ApiClient;
-        const identityManager = yield* IdentityManager;
-        const paymentAdapter = yield* PaymentAdapter;
-        const sdkConfiguration = yield* SdkConfiguration;
+/**
+ * Build the initialized SDK facade. Yields long-lived services from the
+ * runtime (most notably `AnalyticsService`, so its mutable queue/timer can be
+ * exposed via the synchronous accessors below) and returns an object that
+ * delegates every method to the appropriate service.
+ */
+const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
+  Effect.gen(function* () {
+    const analyticsService = yield* AnalyticsService;
 
-        const commonHeaders = yield* getCommonSdkHeaders();
-        const distinctId = yield* identityManager.getDistinctId();
-        if (transaction.platform === "android" && !transaction.purchaseToken) {
-          yield* Effect.logWarning(
-            "Skipping observed Android transaction without purchase token",
-            {
-              transactionId: transaction.transactionId,
-            }
+    return {
+      end: () =>
+        Effect.gen(function* end() {
+          const transactionService = yield* TransactionService;
+          return yield* transactionService.endConnection();
+        }),
+
+      getFeatureFlags: (flagKeys?: string[]) =>
+        Effect.gen(function* getFeatureFlags() {
+          const featureFlagService = yield* FeatureFlagService;
+          return yield* featureFlagService.getFeatureFlags(flagKeys);
+        }),
+
+      getPaywallForLocation: (locationSlug: LocationSlug) =>
+        Effect.gen(function* getPaywallForLocation() {
+          const paywallService = yield* PaywallService;
+          return yield* paywallService.getPaywallForLocation(locationSlug);
+        }),
+
+      getCurrentCustomer: (forceFetch = false) =>
+        Effect.gen(function* getCurrentCustomer() {
+          const identityManager = yield* IdentityManager;
+          const customerInfoManager = yield* CustomerInfoManager;
+          const distinctId = yield* identityManager.getDistinctId();
+          return yield* customerInfoManager.getCustomer(
+            distinctId,
+            forceFetch ? "fetch" : "fetch-while-stale"
           );
-          return;
+        }),
+
+      getDistinctId: () =>
+        Effect.gen(function* getDistinctId() {
+          const identityManager = yield* IdentityManager;
+          return yield* identityManager.getDistinctId();
+        }),
+
+      getProducts: () =>
+        Effect.gen(function* getProducts() {
+          const productService = yield* ProductService;
+          return yield* productService.getProducts(options.schema);
+        }),
+
+      /** Read access to the schema fetched at init time. */
+      getSchema: () => options.schema,
+
+      identify: (
+        distinctId: string,
+        identifyOptions: {
+          email?: string;
+          name?: string;
         }
+      ) =>
+        Effect.gen(function* identify() {
+          const identityManager = yield* IdentityManager;
+          return yield* identityManager.identify(distinctId, identifyOptions);
+        }),
+
+      iosPresentCodeRedemptionSheet: () =>
+        Effect.gen(function* iosPresentCodeRedemptionSheet() {
+          const paymentAdapter = yield* PaymentAdapter;
+          const { presentCodeRedemptionSheet } = paymentAdapter;
+          if (!presentCodeRedemptionSheet) {
+            return yield* Effect.fail(
+              new UnsupportedPlatformError(
+                "Present code redemption sheet is not supported on this platform"
+              )
+            );
+          }
+          return yield* presentCodeRedemptionSheet();
+        }),
+
+      iosShowManageSubscriptions: () =>
+        Effect.gen(function* iosShowManageSubscriptions() {
+          const paymentAdapter = yield* PaymentAdapter;
+          const { showManageSubscriptions } = paymentAdapter;
+          if (!showManageSubscriptions) {
+            return yield* Effect.fail(
+              new UnsupportedPlatformError(
+                "Show manage subscriptions is not supported on this platform"
+              )
+            );
+          }
+          return yield* showManageSubscriptions();
+        }),
 
-        yield* apiClient.sdk.syncTransaction({
-          headers: {
-            ...commonHeaders,
-            "x-distinct-id": distinctId,
-          },
-          payload: mapTransactionToSyncPayload(
+      processObservedTransaction: (transaction: Transaction) =>
+        Effect.gen(function* processObservedTransaction() {
+          const transactionService = yield* TransactionService;
+          return yield* transactionService.processObservedTransaction(
             transaction,
-            options.schema.products
-          ),
-        });
-
-        yield* cacheManager.set(processedTransactionCacheKey, true, {
-          ttl: PROCESSED_TRANSACTION_TTL_MS,
-        });
-
-        if (!sdkConfiguration.readOnly) {
-          yield* paymentAdapter.acknowledgePurchase(transaction);
-        }
-      } finally {
-        inFlightTransactionKeys.delete(transactionProcessingKey);
-      }
-    });
-
-  const reconcileObservedTransactions = () =>
-    Effect.gen(function* reconcileObservedTransactions() {
-      const paymentAdapter = yield* PaymentAdapter;
-      const [pendingTransactions, purchasedTransactions] = yield* Effect.all([
-        paymentAdapter.getPendingTransactions(),
-        paymentAdapter.getPurchaseHistory(true),
-      ]);
-
-      const observedTransactionsByKey = new Map<string, Transaction>();
-      for (const transaction of [
-        ...pendingTransactions,
-        ...purchasedTransactions,
-      ]) {
-        observedTransactionsByKey.set(
-          buildTransactionProcessingKey(transaction),
-          transaction
-        );
-      }
-
-      for (const transaction of observedTransactionsByKey.values()) {
-        yield* processObservedTransaction(transaction).pipe(
-          Effect.catch((error) =>
-            Effect.logWarning("Failed to process observed transaction", {
-              error,
-              transactionId: transaction.transactionId,
-            })
-          )
-        );
-      }
-    });
-
-  return {
-    end: () =>
-      Effect.gen(function* end() {
-        const paymentAdapter = yield* PaymentAdapter;
-        return yield* paymentAdapter.endConnection();
-      }),
-
-    getFeatureFlags: (flagKeys?: string[]) =>
-      Effect.gen(function* getFeatureFlags() {
-        const cacheManager = yield* CacheManager;
-        const apiClient = yield* ApiClient;
-        const eventBus = yield* EventBusProvider;
-        const identityManager = yield* IdentityManager;
-
-        const cacheKey = `feature-flags:${flagKeys?.sort().join(",") ?? "all"}`;
-        const cached = yield* cacheManager.get<{
-          readonly flags: ReadonlyArray<{
-            readonly enabled: boolean;
-            readonly key: string;
-            readonly payload: unknown | null;
-            readonly variantKey: string | null;
-          }>;
-        }>(cacheKey);
-
-        if (cached && !cached.isExpired && !cached.isStale) {
-          return cached.value;
-        }
-
-        const commonHeaders = yield* getCommonSdkHeaders();
-        const distinctId = yield* identityManager.getDistinctId();
-        const result = yield* apiClient.sdk.evaluateFeatureFlags({
-          headers: {
-            ...commonHeaders,
-            "x-distinct-id": distinctId,
-          },
-          payload: { flagKeys },
-        });
-
-        yield* cacheManager.set(cacheKey, result, {
-          ttl: 1000 * 60 * 5, // 5 minutes
-        });
-
-        eventBus.emit("feature-flags-fetched", result);
-
-        return result;
-      }),
-
-    getPaywallForLocation: (locationSlug: LocationSlug) =>
-      Effect.gen(function* getPaywallForLocation() {
-        const apiClient = yield* ApiClient;
-        const identityManager = yield* IdentityManager;
-
-        const commonHeaders = yield* getCommonSdkHeaders();
-        const distinctId = yield* identityManager.getDistinctId();
-
-        return yield* apiClient.sdk.resolvePaywall({
-          headers: {
-            ...commonHeaders,
-            "x-distinct-id": distinctId,
-          },
-          payload: { locationSlug: String(locationSlug) },
-        });
-      }),
-
-    getCurrentCustomer: (forceFetch = false) =>
-      Effect.gen(function* getCurrentCustomer() {
-        const identityManager = yield* IdentityManager;
-        const customerInfoManager = yield* CustomerInfoManager;
-
-        const distinctId = yield* identityManager.getDistinctId();
-        const customer = yield* customerInfoManager.getCustomer(
-          distinctId,
-          forceFetch ? "fetch" : "fetch-while-stale"
-        );
-
-        return customer;
-      }),
-
-    getDistinctId: () =>
-      Effect.gen(function* getDistinctId() {
-        const identityManager = yield* IdentityManager;
-        return yield* identityManager.getDistinctId();
-      }),
-
-    getProducts: () =>
-      Effect.gen(function* getProducts() {
-        const productDefinitions = options.schema.products;
-        const nativeProducts = yield* loadProductsCached(productDefinitions);
-        return mapNativeProductsToProductMap(productDefinitions, nativeProducts);
-      }),
-
-    /** Read access to the schema fetched at init time. */
-    getSchema: () => options.schema,
-
-    identify: (
-      distinctId: string,
-      options: {
-        email?: string;
-        name?: string;
-      }
-    ) =>
-      Effect.gen(function* identify() {
-        const identityManager = yield* IdentityManager;
-        return yield* identityManager.identify(distinctId, options);
-      }),
-
-    iosPresentCodeRedemptionSheet: () =>
-      Effect.gen(function* iosPresentCodeRedemptionSheet() {
-        const paymentAdapter = yield* PaymentAdapter;
-        const { presentCodeRedemptionSheet } = paymentAdapter;
-        if (!presentCodeRedemptionSheet) {
-          return yield* Effect.fail(
-            new UnsupportedPlatformError(
-              "Present code redemption sheet is not supported on this platform"
-            )
-          );
-        }
-        return yield* presentCodeRedemptionSheet();
-      }),
-
-    iosShowManageSubscriptions: () =>
-      Effect.gen(function* iosShowManageSubscriptions() {
-        const paymentAdapter = yield* PaymentAdapter;
-        const { showManageSubscriptions } = paymentAdapter;
-        if (!showManageSubscriptions) {
-          return yield* Effect.fail(
-            new UnsupportedPlatformError(
-              "Show manage subscriptions is not supported on this platform"
-            )
+            options.schema
           );
-        }
-        return yield* showManageSubscriptions();
-      }),
+        }),
 
-    processObservedTransaction,
-
-    purchase: (
-      product: SubscriptionProduct,
-      _options: {
-        method?: "native";
-      }
-    ) =>
-      Effect.gen(function* purchase() {
-        const paymentAdapter = yield* PaymentAdapter;
-        const transaction = yield* paymentAdapter.buyProduct(product);
-        yield* processObservedTransaction(transaction);
-      }),
-
-    restorePurchases: () =>
-      Effect.gen(function* restorePurchases() {
-        const customerInfoManager = yield* CustomerInfoManager;
-        const identityManager = yield* IdentityManager;
-
-        yield* reconcileObservedTransactions();
-
-        const distinctId = yield* identityManager.getDistinctId();
-        yield* customerInfoManager.getCustomer(distinctId, "fetch");
-      }),
-
-    reconcileObservedTransactions: () => reconcileObservedTransactions(),
-
-    getAnalyticsStandardizedProperties: () => getStandardizedProperties(),
-
-    capture: (eventName: string, properties: Record<string, unknown> = {}) =>
-      Effect.sync(() => {
-        const normalized = eventName.trim();
-        if (!normalized) return;
-        analyticsQueue.push(createQueuedAnalyticsEvent(normalized, properties));
-        if (analyticsQueue.length >= ANALYTICS_BATCH_SIZE) {
-          clearFlushTimer();
-          triggerFlushCallback?.();
-          return;
+      purchase: (
+        product: SubscriptionProduct,
+        _options: {
+          method?: "native";
         }
-        scheduleFlushTimer();
-      }),
-
-    flush: () =>
-      Effect.gen(function* () {
-        clearFlushTimer();
-        if (analyticsQueue.length === 0) return;
-
-        const standardizedProperties = yield* getStandardizedProperties();
-
-        while (analyticsQueue.length > 0) {
-          const queuedBatch = getDueQueuedAnalyticsBatch();
-          if (queuedBatch.length === 0) {
-            scheduleFlushTimer();
-            return;
-          }
-
-          const sendResult = yield* Effect.exit(
-            processQueuedAnalyticsBatch(queuedBatch, standardizedProperties)
+      ) =>
+        Effect.gen(function* purchase() {
+          const transactionService = yield* TransactionService;
+          yield* transactionService.purchase(product, options.schema);
+        }),
+
+      restorePurchases: () =>
+        Effect.gen(function* restorePurchases() {
+          const transactionService = yield* TransactionService;
+          yield* transactionService.restorePurchases(options.schema);
+        }),
+
+      reconcileObservedTransactions: () =>
+        Effect.gen(function* reconcileObservedTransactions() {
+          const transactionService = yield* TransactionService;
+          return yield* transactionService.reconcileObservedTransactions(
+            options.schema
           );
-          if (sendResult._tag === "Failure") {
-            const failure = Cause.squash(sendResult.cause);
-            if (failure instanceof AnalyticsSendFailure && failure.retryable) {
-              postponeQueuedAnalyticsBatch(
-                queuedBatch,
-                Date.now() +
-                  (failure.retryAfterMs ??
-                    getAnalyticsRetryDelayMs(
-                      (queuedBatch[0]?.attempts ?? 0) + 1
-                    ))
-              );
-              scheduleFlushTimer();
-              return;
-            }
+        }),
 
-            yield* Effect.failCause(sendResult.cause);
-          }
-        }
-      }),
+      // --- Analytics: Effect methods delegate to AnalyticsService ---
 
-    getAnalyticsQueueLength: () => analyticsQueue.length,
+      getAnalyticsStandardizedProperties: () =>
+        analyticsService.getStandardizedProperties(),
 
-    setAnalyticsFlushCallback: (callback: () => void) => {
-      triggerFlushCallback = callback;
-    },
+      capture: (eventName: string, properties: Record<string, unknown> = {}) =>
+        analyticsService.capture(eventName, properties),
 
-    stopAnalyticsFlushTimer: () =>
-      Effect.sync(() => {
-        clearFlushTimer();
-      }),
+      flush: () => analyticsService.flush(),
 
-    transferAnalyticsEvents: (
-      events: ReadonlyArray<{
-        eventName: string;
-        properties: Record<string, unknown>;
-      }>
-    ) =>
-      Effect.sync(() => {
-        for (const event of events) {
-          const normalized = event.eventName.trim();
-          if (!normalized) continue;
-          analyticsQueue.push(
-            createQueuedAnalyticsEvent(normalized, event.properties)
-          );
-        }
-      }),
+      transferAnalyticsEvents: (
+        events: ReadonlyArray<{
+          eventName: string;
+          properties: Record<string, unknown>;
+        }>
+      ) => analyticsService.transferEvents(events),
 
-    captureAutomaticStartupEvents: () =>
-      Effect.gen(function* () {
-        try {
-          const standardizedProps = yield* getStandardizedProperties();
-          const currentAppRelease: AppReleaseInfo = {
-            appBuild: toNullableString(standardizedProps.$app_build),
-            appVersion: toNullableString(standardizedProps.$app_version),
-          };
+      captureAutomaticStartupEvents: () =>
+        analyticsService.captureAutomaticStartupEvents(),
 
-          const cacheManager = yield* CacheManager;
-          const cachedRelease = yield* cacheManager.get<AppReleaseInfo>(
-            ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY
-          );
-          const previousAppRelease = toAppReleaseInfo(cachedRelease?.value);
+      sendAnalyticsEvents: (events: ReadonlyArray<AnalyticsIngestEvent>) =>
+        analyticsService.sendAnalyticsEvents(events),
 
-          if (!previousAppRelease) {
-            analyticsQueue.push(createQueuedAnalyticsEvent("app_installed", {}));
-          } else if (
-            previousAppRelease.appBuild !== currentAppRelease.appBuild ||
-            previousAppRelease.appVersion !== currentAppRelease.appVersion
-          ) {
-            analyticsQueue.push(createQueuedAnalyticsEvent("app_updated", {}));
-          }
-
-          analyticsQueue.push(createQueuedAnalyticsEvent("app_opened", {}));
-
-          yield* cacheManager.set(
-            ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY,
-            currentAppRelease
+      setupAutomaticLifecycleEvents: (
+        captureEvent: (eventName: string) => void
+      ) =>
+        Effect.gen(function* setupAutomaticLifecycleEvents() {
+          const lifecycleService = yield* LifecycleService;
+          return yield* lifecycleService.setupAutomaticLifecycleEvents(
+            captureEvent
           );
-        } catch {
-          analyticsQueue.push(createQueuedAnalyticsEvent("app_opened", {}));
-        }
-      }),
-
-    setupAutomaticLifecycleEvents: (captureEvent: (eventName: string) => void) =>
-      Effect.sync(() => {
-        const appState = getReactNativeAppState();
-        if (!appState || typeof appState.addEventListener !== "function") {
-          return null;
-        }
-
-        let lifecycleState: AppLifecycleState | null =
-          appState.currentState ?? null;
-
-        const subscription = appState.addEventListener("change", (nextAppState) => {
-          const previousAppState = lifecycleState;
-          lifecycleState = nextAppState;
-
-          if (nextAppState === "background" && previousAppState !== "background") {
-            captureEvent("app_backgrounded");
-            return;
-          }
-
-          if (
-            nextAppState === "active" &&
-            previousAppState !== null &&
-            previousAppState !== "active"
-          ) {
-            captureEvent("app_became_active");
-          }
-        });
-
-        return subscription;
-      }),
-
-    sendAnalyticsEvents: (events: ReadonlyArray<AnalyticsIngestEvent>) =>
-      sendAnalyticsEventsImpl(events),
-
-    reset: () =>
-      Effect.gen(function* reset() {
-        const identityManager = yield* IdentityManager;
-        return yield* identityManager.reset();
-      }),
-
-    signOut: () =>
-      Effect.gen(function* signOut() {
-        const identityManager = yield* IdentityManager;
-        return yield* identityManager.reset();
-      }),
-
-    startTransactionObserver: (
-      onPurchase?: (transaction: Transaction) => void
-    ) =>
-      Effect.gen(function* startTransactionObserver() {
-        const paymentAdapter = yield* PaymentAdapter;
-        return yield* paymentAdapter.initConnection(onPurchase);
-      }),
-  };
-};
-
-const loadProductsCached = (
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-) =>
-  Effect.gen(function* loadProductsCached() {
-    const cacheManager = yield* CacheManager;
-    const paymentAdapter = yield* PaymentAdapter;
-
-    const cacheKey = generateCacheKeyFromProductDefinitions(productDefinitions);
-
-    const cachedProducts = yield* cacheManager.get<Product[]>(cacheKey);
-
-    if (
-      cachedProducts &&
-      !(cachedProducts.isStale || cachedProducts.isExpired)
-    ) {
-      yield* Effect.logDebug("Products fetched from cache", {
-        products: cachedProducts.value,
-      });
-      return cachedProducts.value;
-    }
-
-    const nativeProducts = yield* paymentAdapter.getProducts(productDefinitions);
-
-    yield* Effect.logDebug("Products fetched from native adapter", {
-      products: nativeProducts,
-    });
-
-    // Store products in cache
-    yield* cacheManager.set(cacheKey, nativeProducts, {
-      ttl: 1000 * 60 * 60 * 24, // 24 hours
-    });
-
-    return nativeProducts;
+        }),
+
+      // --- Analytics: sync accessors read directly from the service ---
+
+      getAnalyticsQueueLength: () => analyticsService.getQueueLength(),
+
+      setAnalyticsFlushCallback: (callback: () => void) => {
+        analyticsService.setFlushCallback(callback);
+      },
+
+      // --- Identity ---
+
+      reset: () =>
+        Effect.gen(function* reset() {
+          const identityManager = yield* IdentityManager;
+          return yield* identityManager.reset();
+        }),
+
+      signOut: () =>
+        Effect.gen(function* signOut() {
+          const identityManager = yield* IdentityManager;
+          return yield* identityManager.reset();
+        }),
+
+      startTransactionObserver: (
+        onPurchase?: (transaction: Transaction) => void
+      ) =>
+        Effect.gen(function* startTransactionObserver() {
+          const transactionService = yield* TransactionService;
+          return yield* transactionService.startTransactionObserver(onPurchase);
+        }),
+    } as const;
   });
 
-const mapNativeProductsToProductMap = (
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
-  nativeProducts: Product[]
-): ProductsBySlug => {
-  const productMap = {} as Record<string, SubscriptionProduct | null>;
-
-  for (const slug of Object.keys(productDefinitions)) {
-    const nativeProduct = nativeProducts.find(
-      (nativeProduct) => nativeProduct.slug === slug
-    );
-
-    if (nativeProduct) {
-      productMap[slug] = nativeProduct as SubscriptionProduct;
-      continue;
-    }
-
-    productMap[slug] = null;
-  }
-
-  return productMap as ProductsBySlug;
-};
-
-const buildTransactionProcessingKey = (transaction: Transaction) =>
-  `${transaction.platform}:${transaction.transactionId}:${transaction.purchaseDate}`;
-
-const getProcessedTransactionCacheKey = (transactionProcessingKey: string) =>
-  `processed-transaction:${transactionProcessingKey}`;
-
-const resolveTransactionProductSlug = (
-  transaction: Transaction,
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-) => {
-  const matchedProduct = Object.values(productDefinitions).find(
-    (productDefinition) => {
-      if (productDefinition.slug === transaction.productId) {
-        return true;
-      }
-
-      const provider =
-        transaction.platform === "ios"
-          ? productDefinition.configuration.providers.appleAppStore
-          : productDefinition.configuration.providers.googlePlay;
-
-      return provider?.productId === transaction.productId;
-    }
-  );
-
-  return matchedProduct?.slug ?? transaction.productId;
-};
-
-const mapTransactionToSyncPayload = (
-  transaction: Transaction,
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-) => {
-  const productSlug = resolveTransactionProductSlug(
-    transaction,
-    productDefinitions
-  );
-
-  if (transaction.platform === "ios") {
-    return {
-      platform: "ios" as const,
-      productSlug,
-      purchaseDate: transaction.purchaseDate,
-      quantity: transaction.quantity,
-      receipt: transaction.receipt,
-      transactionId: transaction.transactionId,
-    };
-  }
-
-  return {
-    platform: "android" as const,
-    productSlug,
-    purchaseDate: transaction.purchaseDate,
-    purchaseToken: transaction.purchaseToken ?? "",
-    quantity: transaction.quantity,
-    receipt: transaction.receipt,
-    transactionId: transaction.transactionId,
-  };
-};
-
-const generateCacheKeyFromProductDefinitions = (
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-) => `native-products:${JSON.stringify(productDefinitions)}`;
-
-const resolveIngestEventsUrl = (options: {
-  baseUrl: string;
-  ingestUrl: string | undefined;
-}) => {
-  const baseUrl = options.ingestUrl
-    ? new URL(options.ingestUrl)
-    : buildDefaultIngestBaseUrl(options.baseUrl);
-  return new URL("/batch", baseUrl).toString();
-};
-
-const buildDefaultIngestBaseUrl = (apiBaseUrl: string) => {
-  const parsedApiUrl = new URL(apiBaseUrl);
-  parsedApiUrl.hostname = `i.${parsedApiUrl.hostname}`;
-  parsedApiUrl.hash = "";
-  parsedApiUrl.pathname = "/";
-  parsedApiUrl.search = "";
-  return parsedApiUrl;
-};
-
 export const VoidhashEffectClient = {
   makeInitializedClient,
   makeUnitializedClient,
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index c6c5259d0..97c3c0ada 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -11,8 +11,14 @@ import { IdentityManager } from "./core/identity/identity-manager";
 import { ApiClient } from "./core/networking/api-client";
 import { AppStoreAdapter } from "./core/payment-adapters/app-store-adapter";
 import { GooglePlayAdapter } from "./core/payment-adapters/google-play-adapter";
+import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
+import { LifecycleService } from "./core/lifecycle/lifecycle-service";
+import { ReactNativeLifecycleAdapter } from "./core/lifecycle/react-native-lifecycle-adapter";
+import { PaywallService } from "./core/paywalls/paywall-service";
 import { type PlatformInfo } from "./core/platform/platform-provider";
 import { ReactNativePlatformProvider } from "./core/platform/react-native-platform-provider";
+import { ProductService } from "./core/products/product-service";
+import { TransactionService } from "./core/transactions/transaction-service";
 import type { LocationSlug, ProductSlug } from "./core/schema/registry";
 import type { RuntimeSchema } from "./core/schema/runtime";
 import { SdkConfiguration } from "./core/sdk-configuration";
@@ -48,7 +54,13 @@ const CreateEffectRuntime = (
   ManagedRuntime.make(
     pipe(
       CustomerAttributeManager.Default,
+      Layer.provideMerge(ProductService.layer),
+      Layer.provideMerge(FeatureFlagService.layer),
+      Layer.provideMerge(PaywallService.layer),
+      Layer.provideMerge(TransactionService.layer),
       Layer.provideMerge(AnalyticsService.layer),
+      Layer.provideMerge(LifecycleService.layer),
+      Layer.provideMerge(ReactNativeLifecycleAdapter),
       Layer.provideMerge(CustomerInfoManager.Default),
       Layer.provideMerge(IdentityManager.Default),
       Layer.provideMerge(CacheManager.Default),
@@ -85,8 +97,10 @@ type UninitializedEffectClient = ReturnType<
   typeof VoidhashEffectClient.makeUnitializedClient
 >;
 
-type InitializedEffectClient = ReturnType<
-  typeof VoidhashEffectClient.makeInitializedClient
+// `makeInitializedClient` now returns `Effect<Facade, ...>` — unwrap to the
+// facade type by extracting the Effect's Success channel.
+type InitializedEffectClient = Effect.Success<
+  ReturnType<typeof VoidhashEffectClient.makeInitializedClient>
 >;
 
 export class VoidhashClient {
diff --git a/libraries/react-native/src/core/analytics/service.ts b/libraries/react-native/src/core/analytics/service.ts
index 8e164ef84..7bf9ecf4a 100644
--- a/libraries/react-native/src/core/analytics/service.ts
+++ b/libraries/react-native/src/core/analytics/service.ts
@@ -1,13 +1,464 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import {
+  Duration,
+  Effect,
+  Latch,
+  Layer,
+  Ref,
+  Schedule,
+  ServiceMap,
+} from "effect";
+import {
+  HttpClient,
+  HttpClientRequest,
+  HttpClientResponse,
+} from "effect/unstable/http";
 
+import { CacheManager } from "../caching/cache-manager";
+import { SDK_VERSION } from "../constants";
+import { IdentityManager } from "../identity/identity-manager";
+import { SdkConfiguration } from "../sdk-configuration";
+import { getNonce } from "../utils/crypto";
+import {
+  AnalyticsIngestEvent,
+  AnalyticsSendFailure,
+  QueuedAnalyticsEvent,
+} from "./types";
+import {
+  createQueuedAnalyticsEvent,
+  getAnalyticsStandardizedProperties,
+  mapQueuedAnalyticsEventToIngestEvent,
+} from "./utils";
 
-export class AnalyticsService extends ServiceMap.Service<AnalyticsService>()("voidhash-react-native/AnalyticsService", {
-  make: Effect.gen(function* () {
+const ANALYTICS_BATCH_SIZE = 20;
+const ANALYTICS_FLUSH_INTERVAL_MS = 5000;
+const MAX_ANALYTICS_RETRY_DELAY_MS = 30_000;
+const RETRYABLE_ANALYTICS_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
+const ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY =
+  "voidhash:analytics:last-seen-app-release";
 
-    // const config = yield* Config;
-    // return { log: (msg: string) => Effect.log(`[${config.prefix}] ${msg}`) };
-  }),
-}) {
-  // Build the layer yourself from the make effect
+interface AppReleaseInfo {
+  readonly appBuild: string | null;
+  readonly appVersion: string | null;
+}
+
+const toNullableString = (value: unknown): string | null =>
+  value !== null && value !== undefined ? String(value) : null;
+
+const toAppReleaseInfo = (
+  value: AppReleaseInfo | undefined | null
+): AppReleaseInfo | null => {
+  if (!value) return null;
+  return {
+    appBuild: value.appBuild,
+    appVersion: value.appVersion,
+  };
+};
+
+const getAnalyticsRetryDelayMs = (attempts: number) =>
+  Math.min(1000 * 2 ** Math.max(attempts - 1, 0), MAX_ANALYTICS_RETRY_DELAY_MS);
+
+const parseRetryAfterMs = (
+  value: string | null | undefined
+): number | undefined => {
+  if (!value) {
+    return undefined;
+  }
+
+  const retryAfterSeconds = Number(value);
+  if (!Number.isNaN(retryAfterSeconds) && retryAfterSeconds >= 0) {
+    return Math.ceil(retryAfterSeconds * 1000);
+  }
+
+  const retryAt = Date.parse(value);
+  if (Number.isNaN(retryAt)) {
+    return undefined;
+  }
+
+  return Math.max(retryAt - Date.now(), 0);
+};
+
+const getRetryAfterMsFromResponseBody = (
+  data: unknown
+): number | undefined => {
+  if (
+    data !== null &&
+    typeof data === "object" &&
+    "retry_after_ms" in data &&
+    typeof (data as { retry_after_ms?: unknown }).retry_after_ms === "number"
+  ) {
+    return (data as { retry_after_ms: number }).retry_after_ms;
+  }
+  return undefined;
+};
+
+const resolveIngestEventsUrl = (options: {
+  baseUrl: string;
+  ingestUrl: string | undefined;
+}) => {
+  const baseUrl = options.ingestUrl
+    ? new URL(options.ingestUrl)
+    : buildDefaultIngestBaseUrl(options.baseUrl);
+  return new URL("/batch", baseUrl).toString();
+};
+
+const buildDefaultIngestBaseUrl = (apiBaseUrl: string) => {
+  const parsedApiUrl = new URL(apiBaseUrl);
+  parsedApiUrl.hostname = `i.${parsedApiUrl.hostname}`;
+  parsedApiUrl.hash = "";
+  parsedApiUrl.pathname = "/";
+  parsedApiUrl.search = "";
+  return parsedApiUrl;
+};
+
+/**
+ * Inline retry schedule used inside `flush()`: exponential backoff capped at 3
+ * total attempts. Retry-After-bearing failures are excluded via the `while`
+ * predicate so they're postponed in the queue instead — preserving the
+ * cool-down behavior expected by the rate-limit tests.
+ */
+const inlineRetrySchedule = Schedule.exponential(
+  Duration.seconds(1),
+  2
+).pipe(Schedule.both(Schedule.recurs(2)));
+
+/**
+ * Owns the analytics pipeline: an in-memory event queue with batching, a
+ * declarative retry schedule, `Retry-After` honouring, automatic startup
+ * events (`app_installed` / `app_updated` / `app_opened`), and a periodic
+ * flush daemon forked into the service scope. Disposing the runtime closes
+ * the scope, which interrupts the daemon — no manual timer cleanup required.
+ *
+ * The synchronous `getQueueLength` and `setFlushCallback` methods exist so the
+ * outer `VoidhashClient` wrapper can hook a background flush callback at init
+ * time (which routes the daemon's flush through the wrapper's
+ * `analyticsFlushInFlight` Promise guard) and tests can assert on queue length
+ * without driving an Effect.
+ */
+export class AnalyticsService extends ServiceMap.Service<AnalyticsService>()(
+  "rn-voidhash/AnalyticsService",
+  {
+    make: Effect.gen(function* () {
+      const identityManager = yield* IdentityManager;
+      const cacheManager = yield* CacheManager;
+      const sdkConfiguration = yield* SdkConfiguration;
+      const httpClient = yield* HttpClient.HttpClient;
+
+      const queueRef = yield* Ref.make<ReadonlyArray<QueuedAnalyticsEvent>>([]);
+      const latch = yield* Latch.make(false);
+      const sessionId = getNonce();
+      const getStandardizedProperties = getAnalyticsStandardizedProperties();
+      let flushCallback: (() => void) | null = null;
+
+      const ingestEventsUrl = resolveIngestEventsUrl({
+        baseUrl: sdkConfiguration.baseUrl,
+        ingestUrl: sdkConfiguration.ingestUrl,
+      });
+
+      const buildRetryableFailure = (response: HttpClientResponse.HttpClientResponse) =>
+        Effect.gen(function* () {
+          const body = yield* response.json.pipe(
+            Effect.orElseSucceed(() => undefined as unknown)
+          );
+          return yield* Effect.fail(
+            new AnalyticsSendFailure({
+              message: `Analytics ingest request failed: ${response.status}`,
+              retryAfterMs:
+                parseRetryAfterMs(response.headers["retry-after"]) ??
+                getRetryAfterMsFromResponseBody(body),
+              retryable: true,
+              status: response.status,
+            })
+          );
+        });
+
+      const sendAnalyticsEvents = (
+        events: ReadonlyArray<AnalyticsIngestEvent>
+      ): Effect.Effect<void, AnalyticsSendFailure> =>
+        Effect.gen(function* () {
+          if (events.length === 0) return;
+
+          const distinctId = yield* identityManager.getDistinctId();
+          const request = HttpClientRequest.post(ingestEventsUrl).pipe(
+            HttpClientRequest.bodyJsonUnsafe({
+              events: events.map((event) => ({
+                context: event.context,
+                distinct_id: distinctId,
+                event: event.event_name,
+                properties: event.properties,
+                request: {
+                  sdk_name: "react-native",
+                  sdk_version: SDK_VERSION,
+                },
+                session_id: event.session_id,
+                timestamp: event.event_ts,
+                uuid: event.event_id,
+              })),
+              sent_at: new Date().toISOString(),
+              token: sdkConfiguration.publishableKey,
+            })
+          );
+
+          const response = yield* httpClient.execute(request).pipe(
+            Effect.catchTag("HttpClientError", (cause) =>
+              Effect.fail(
+                new AnalyticsSendFailure({
+                  cause,
+                  message: "Analytics request failed",
+                  retryable: true,
+                })
+              )
+            )
+          );
+
+          return yield* HttpClientResponse.matchStatus(response, {
+            "2xx": () => Effect.void,
+            413: () =>
+              Effect.fail(
+                new AnalyticsSendFailure({
+                  message: `Analytics ingest request failed: ${response.status}`,
+                  retryable: false,
+                  status: response.status,
+                })
+              ),
+            orElse: (res) =>
+              RETRYABLE_ANALYTICS_STATUS_CODES.has(res.status)
+                ? buildRetryableFailure(res)
+                : Effect.fail(
+                    new AnalyticsSendFailure({
+                      message: `Analytics ingest request failed: ${res.status}`,
+                      retryable: false,
+                      status: res.status,
+                    })
+                  ),
+          });
+        });
+
+      // Inline retry wrapper used by the queue-draining `flush()` path. Public
+      // `sendAnalyticsEvents` stays single-shot so callers can implement their
+      // own retry strategy.
+      const sendWithInlineRetry = (
+        events: ReadonlyArray<AnalyticsIngestEvent>
+      ) =>
+        sendAnalyticsEvents(events).pipe(
+          Effect.retry({
+            schedule: inlineRetrySchedule,
+            while: (failure: AnalyticsSendFailure) =>
+              failure.retryable && failure.retryAfterMs === undefined,
+          })
+        );
+
+      // Re-inserts a failed batch at the head of the queue with bumped
+      // `availableAt` so the next due-check skips it until cool-down has
+      // elapsed. Used only on retryable failures — successful sends and
+      // non-retryable drops simply leave the events out of the queue, since
+      // `takeDueBatch` already removed them.
+      const postponeQueuedBatch = (
+        events: ReadonlyArray<QueuedAnalyticsEvent>,
+        nextAvailableAt: number
+      ) =>
+        Ref.update(queueRef, (queue) => {
+          const postponed = events.map((event) => ({
+            ...event,
+            attempts: event.attempts + 1,
+            availableAt: nextAvailableAt,
+          }));
+          return [...postponed, ...queue];
+        });
+
+      // Pops the next `due` batch (events whose `availableAt <= now`) from the
+      // head of the queue. Treating taken events as "in flight" simplifies
+      // failure handling: success means no further action, retryable failure
+      // re-inserts via `postponeQueuedBatch`, and non-retryable failure leaves
+      // them dropped.
+      const takeDueBatch = () =>
+        Ref.modify(queueRef, (queue) => {
+          const now = Date.now();
+          const batch: QueuedAnalyticsEvent[] = [];
+          let cutoff = 0;
+
+          for (const event of queue) {
+            if (event.availableAt > now) break;
+            batch.push(event);
+            cutoff += 1;
+            if (batch.length >= ANALYTICS_BATCH_SIZE) break;
+          }
+
+          const remaining = batch.length === 0 ? queue : queue.slice(cutoff);
+          return [batch as ReadonlyArray<QueuedAnalyticsEvent>, remaining];
+        });
+
+      const processQueuedBatch = (
+        queuedBatch: ReadonlyArray<QueuedAnalyticsEvent>,
+        standardizedProperties: Record<string, unknown>
+      ): Effect.Effect<void> => {
+        const ingestBatch = queuedBatch.map((event) =>
+          mapQueuedAnalyticsEventToIngestEvent(
+            event,
+            standardizedProperties,
+            sessionId
+          )
+        );
+
+        return sendWithInlineRetry(ingestBatch).pipe(
+          Effect.catchTag("AnalyticsSendFailure", (failure) => {
+            if (failure.status === 413 && queuedBatch.length > 1) {
+              const midpoint = Math.ceil(queuedBatch.length / 2);
+              return Effect.gen(function* () {
+                yield* processQueuedBatch(
+                  queuedBatch.slice(0, midpoint),
+                  standardizedProperties
+                );
+                yield* processQueuedBatch(
+                  queuedBatch.slice(midpoint),
+                  standardizedProperties
+                );
+              });
+            }
+
+            if (failure.status === 413) {
+              return Effect.logWarning(
+                "Dropping analytics event after 413 response",
+                { eventId: queuedBatch[0]?.id }
+              );
+            }
+
+            if (failure.retryable) {
+              const delayMs =
+                failure.retryAfterMs ??
+                getAnalyticsRetryDelayMs(
+                  (queuedBatch[0]?.attempts ?? 0) + 1
+                );
+              return postponeQueuedBatch(queuedBatch, Date.now() + delayMs);
+            }
+
+            return Effect.logWarning(
+              "Dropping analytics batch after non-retryable response",
+              {
+                eventIds: queuedBatch.map((event) => event.id),
+                status: failure.status,
+              }
+            );
+          })
+        );
+      };
+
+      const capture = (
+        eventName: string,
+        properties: Record<string, unknown> = {}
+      ) =>
+        Effect.sync(() => {
+          const normalized = eventName.trim();
+          if (!normalized) return;
+          const queued = createQueuedAnalyticsEvent(normalized, properties);
+          // Direct mutation inside `Effect.sync` is safe: the Effect runtime
+          // guarantees no other fiber crosses this sync boundary.
+          const next = [...queueRef.ref.current, queued];
+          queueRef.ref.current = next;
+          if (next.length >= ANALYTICS_BATCH_SIZE) {
+            // Wake the flush daemon immediately rather than waiting for the tick.
+            latch.openUnsafe();
+            flushCallback?.();
+          }
+        });
+
+      const flush = () =>
+        Effect.gen(function* () {
+          const standardizedProperties = yield* getStandardizedProperties();
+
+          let batch = yield* takeDueBatch();
+          while (batch.length > 0) {
+            yield* processQueuedBatch(batch, standardizedProperties);
+            batch = yield* takeDueBatch();
+          }
+        });
+
+      const transferEvents = (
+        events: ReadonlyArray<{
+          eventName: string;
+          properties: Record<string, unknown>;
+        }>
+      ) =>
+        Effect.sync(() => {
+          const additions: QueuedAnalyticsEvent[] = [];
+          for (const event of events) {
+            const normalized = event.eventName.trim();
+            if (!normalized) continue;
+            additions.push(
+              createQueuedAnalyticsEvent(normalized, event.properties)
+            );
+          }
+          if (additions.length === 0) return;
+          queueRef.ref.current = [...queueRef.ref.current, ...additions];
+        });
+
+      const captureAutomaticStartupEvents = () =>
+        Effect.gen(function* () {
+          const standardizedProps = yield* getStandardizedProperties();
+          const currentAppRelease: AppReleaseInfo = {
+            appBuild: toNullableString(standardizedProps.$app_build),
+            appVersion: toNullableString(standardizedProps.$app_version),
+          };
+
+          // If reading the cached release fails, fall back to recording the
+          // session as a fresh `app_opened`. Captures still flow through the
+          // same queue so the failure mode is "lose the install/update event,"
+          // not "drop the session start."
+          const cachedRelease = yield* cacheManager
+            .get<AppReleaseInfo>(ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY)
+            .pipe(Effect.orElseSucceed(() => null));
+          const previousAppRelease = toAppReleaseInfo(cachedRelease?.value);
+
+          const additions: QueuedAnalyticsEvent[] = [];
+          if (!previousAppRelease) {
+            additions.push(createQueuedAnalyticsEvent("app_installed", {}));
+          } else if (
+            previousAppRelease.appBuild !== currentAppRelease.appBuild ||
+            previousAppRelease.appVersion !== currentAppRelease.appVersion
+          ) {
+            additions.push(createQueuedAnalyticsEvent("app_updated", {}));
+          }
+          additions.push(createQueuedAnalyticsEvent("app_opened", {}));
+
+          queueRef.ref.current = [...queueRef.ref.current, ...additions];
+
+          yield* cacheManager
+            .set(
+              ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY,
+              currentAppRelease
+            )
+            .pipe(Effect.orElseSucceed(() => undefined));
+        });
+
+      // Background flush daemon: wakes on either the 5s tick or a threshold
+      // signal from `capture`, then fires the registered callback so the outer
+      // wrapper can route the flush through its single-flight guard. Forked
+      // into the service scope — interrupted automatically on runtime dispose.
+      const daemon = Effect.forever(
+        Effect.gen(function* () {
+          yield* Effect.race(
+            Effect.sleep(Duration.millis(ANALYTICS_FLUSH_INTERVAL_MS)),
+            latch.await
+          );
+          yield* latch.close;
+          yield* Effect.sync(() => flushCallback?.());
+        })
+      );
+      yield* Effect.forkScoped(daemon);
+
+      return {
+        capture,
+        captureAutomaticStartupEvents,
+        flush,
+        getQueueLength: () => queueRef.ref.current.length,
+        getStandardizedProperties: () => getStandardizedProperties(),
+        sendAnalyticsEvents,
+        setFlushCallback: (cb: () => void) => {
+          flushCallback = cb;
+        },
+        transferEvents,
+      } as const;
+    }),
+  }
+) {
   static readonly layer = Layer.effect(this, this.make);
-}
\ No newline at end of file
+}
diff --git a/libraries/react-native/src/core/analytics/types.ts b/libraries/react-native/src/core/analytics/types.ts
index d49f313f5..9f7b1ce08 100644
--- a/libraries/react-native/src/core/analytics/types.ts
+++ b/libraries/react-native/src/core/analytics/types.ts
@@ -1,3 +1,5 @@
+import { Data } from "effect";
+
 export interface QueuedAnalyticsEvent {
   readonly attempts: number;
   readonly availableAt: number;
@@ -22,22 +24,18 @@ export interface AnalyticsIngestEvent {
   readonly session_id: string;
 }
 
-export class AnalyticsSendFailure extends Error {
-  readonly retryAfterMs?: number;
+/**
+ * Tagged error raised when the analytics ingest endpoint rejects a batch.
+ * Tagged so callers can use `Effect.catchTag("AnalyticsSendFailure", ...)`.
+ * `retryable` indicates whether the failure is worth re-attempting; `retryAfterMs`
+ * communicates a server-suggested backoff (from `Retry-After` header or body).
+ */
+export class AnalyticsSendFailure extends Data.TaggedError(
+  "AnalyticsSendFailure"
+)<{
+  readonly message: string;
   readonly retryable: boolean;
-  readonly status?: number;
-
-  constructor(input: {
-    readonly message: string;
-    readonly retryable: boolean;
-    readonly retryAfterMs?: number;
-    readonly status?: number;
-    readonly cause?: unknown;
-  }) {
-    super(input.message, input.cause ? { cause: input.cause } : undefined);
-    this.name = "AnalyticsSendFailure";
-    this.retryAfterMs = input.retryAfterMs;
-    this.retryable = input.retryable;
-    this.status = input.status;
-  }
-}
+  readonly retryAfterMs?: number | undefined;
+  readonly status?: number | undefined;
+  readonly cause?: unknown;
+}> {}
diff --git a/libraries/react-native/src/core/feature-flags/feature-flag-service.ts b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
new file mode 100644
index 000000000..8fbcd782b
--- /dev/null
+++ b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
@@ -0,0 +1,68 @@
+import { Effect, Layer, ServiceMap } from "effect";
+
+import { CacheManager } from "../caching/cache-manager";
+import { EventBusProvider } from "../event-bus";
+import { IdentityManager } from "../identity/identity-manager";
+import { ApiClient } from "../networking/api-client";
+import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
+
+export interface FeatureFlagsResult {
+  readonly flags: ReadonlyArray<{
+    readonly enabled: boolean;
+    readonly key: string;
+    readonly payload: unknown | null;
+    readonly variantKey: string | null;
+  }>;
+}
+
+const FEATURE_FLAGS_CACHE_TTL_MS = 1000 * 60 * 5;
+
+const generateCacheKey = (flagKeys: string[] | undefined) =>
+  `feature-flags:${flagKeys?.sort().join(",") ?? "all"}`;
+
+/**
+ * Evaluates feature flags via the SDK API with a 5-minute cache. Emits a
+ * `feature-flags-fetched` event on the event bus whenever a fresh result is
+ * received from the server (cache hits don't re-emit).
+ */
+export class FeatureFlagService extends ServiceMap.Service<FeatureFlagService>()(
+  "rn-voidhash/FeatureFlagService",
+  {
+    make: Effect.gen(function* () {
+      const cacheManager = yield* CacheManager;
+      const apiClient = yield* ApiClient;
+      const eventBus = yield* EventBusProvider;
+      const identityManager = yield* IdentityManager;
+
+      const getFeatureFlags = (flagKeys?: string[]) =>
+        Effect.gen(function* () {
+          const cacheKey = generateCacheKey(flagKeys);
+          const cached = yield* cacheManager.get<FeatureFlagsResult>(cacheKey);
+          if (cached && !cached.isExpired && !cached.isStale) {
+            return cached.value;
+          }
+
+          const commonHeaders = yield* getCommonSdkHeaders();
+          const distinctId = yield* identityManager.getDistinctId();
+          const result = yield* apiClient.sdk.evaluateFeatureFlags({
+            headers: {
+              ...commonHeaders,
+              "x-distinct-id": distinctId,
+            },
+            payload: { flagKeys },
+          });
+
+          yield* cacheManager.set(cacheKey, result, {
+            ttl: FEATURE_FLAGS_CACHE_TTL_MS,
+          });
+
+          eventBus.emit("feature-flags-fetched", result);
+          return result;
+        });
+
+      return { getFeatureFlags } as const;
+    }),
+  }
+) {
+  static readonly layer = Layer.effect(this, this.make);
+}
diff --git a/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts b/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
new file mode 100644
index 000000000..61efce21a
--- /dev/null
+++ b/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
@@ -0,0 +1,24 @@
+import { type Effect, ServiceMap } from "effect";
+
+export interface LifecycleSubscription {
+  readonly remove: () => void;
+}
+
+/**
+ * Bridge to the host platform's app-lifecycle events. Implementations subscribe
+ * to native state-change events (foreground/background/inactive) and forward
+ * the raw transitions to the listener. The listener receives both the next
+ * state and the previously observed state so it can compute meaningful
+ * transitions (e.g. "became active" only fires when coming from non-active).
+ *
+ * Implementations return `null` when the platform doesn't expose lifecycle
+ * events (e.g. unit-test environments without React Native installed).
+ */
+export class LifecycleAdapter extends ServiceMap.Service<
+  LifecycleAdapter,
+  {
+    readonly subscribe: (
+      listener: (nextState: string, previousState: string | null) => void
+    ) => Effect.Effect<LifecycleSubscription | null>;
+  }
+>()("rn-voidhash/LifecycleAdapter") {}
diff --git a/libraries/react-native/src/core/lifecycle/lifecycle-service.ts b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
new file mode 100644
index 000000000..2cac8f71c
--- /dev/null
+++ b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
@@ -0,0 +1,40 @@
+import { Effect, Layer, ServiceMap } from "effect";
+
+import { LifecycleAdapter, type LifecycleSubscription } from "./lifecycle-adapter";
+
+/**
+ * Wires raw platform lifecycle transitions to high-level analytics-style
+ * events. Translates background/active transitions delivered by
+ * `LifecycleAdapter` into `app_backgrounded` and `app_became_active` callbacks
+ * which the caller is expected to forward to the analytics pipeline.
+ */
+export class LifecycleService extends ServiceMap.Service<LifecycleService>()(
+  "rn-voidhash/LifecycleService",
+  {
+    make: Effect.gen(function* () {
+      const adapter = yield* LifecycleAdapter;
+
+      const setupAutomaticLifecycleEvents = (
+        captureEvent: (eventName: string) => void
+      ): Effect.Effect<LifecycleSubscription | null> =>
+        adapter.subscribe((nextState, previousState) => {
+          if (nextState === "background" && previousState !== "background") {
+            captureEvent("app_backgrounded");
+            return;
+          }
+
+          if (
+            nextState === "active" &&
+            previousState !== null &&
+            previousState !== "active"
+          ) {
+            captureEvent("app_became_active");
+          }
+        });
+
+      return { setupAutomaticLifecycleEvents } as const;
+    }),
+  }
+) {
+  static readonly layer = Layer.effect(this, this.make);
+}
diff --git a/libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts b/libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts
new file mode 100644
index 000000000..66eda9e19
--- /dev/null
+++ b/libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts
@@ -0,0 +1,54 @@
+import { Effect, Layer } from "effect";
+
+import { LifecycleAdapter, type LifecycleSubscription } from "./lifecycle-adapter";
+
+type AppLifecycleState = string;
+
+interface ReactNativeAppState {
+  readonly currentState?: AppLifecycleState;
+  addEventListener: (
+    eventType: "change",
+    listener: (nextState: AppLifecycleState) => void
+  ) => LifecycleSubscription;
+}
+
+/**
+ * Dynamically resolve `react-native`'s `AppState` so that the SDK degrades
+ * gracefully in environments where React Native isn't installed (e.g. Jest
+ * tests, Node-only consumers).
+ */
+const getReactNativeAppState = (): ReactNativeAppState | null => {
+  try {
+    const reactNative = require("react-native") as {
+      readonly AppState?: ReactNativeAppState;
+    };
+    return reactNative.AppState ?? null;
+  } catch {
+    return null;
+  }
+};
+
+/**
+ * Default `LifecycleAdapter` implementation that bridges to React Native's
+ * `AppState`. Owns the dynamic `require("react-native")` so the rest of the
+ * SDK can stay React-Native-independent.
+ */
+export const ReactNativeLifecycleAdapter = Layer.succeed(LifecycleAdapter, {
+  subscribe: (listener) =>
+    Effect.sync(() => {
+      const appState = getReactNativeAppState();
+      if (!appState || typeof appState.addEventListener !== "function") {
+        return null;
+      }
+
+      let previousState: AppLifecycleState | null = appState.currentState ?? null;
+
+      const subscription = appState.addEventListener("change", (nextState) => {
+        const prior = previousState;
+        previousState = nextState;
+        listener(nextState, prior);
+      });
+
+      return subscription;
+    }),
+});
diff --git a/libraries/react-native/src/core/paywalls/paywall-service.ts b/libraries/react-native/src/core/paywalls/paywall-service.ts
new file mode 100644
index 000000000..9b45ed42d
--- /dev/null
+++ b/libraries/react-native/src/core/paywalls/paywall-service.ts
@@ -0,0 +1,37 @@
+import { Effect, Layer, ServiceMap } from "effect";
+
+import { IdentityManager } from "../identity/identity-manager";
+import { ApiClient } from "../networking/api-client";
+import type { LocationSlug } from "../schema/registry";
+import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
+
+/**
+ * Resolves the currently assigned paywall for a location slug. Stateless;
+ * delegates to the SDK API with the standard SDK headers.
+ */
+export class PaywallService extends ServiceMap.Service<PaywallService>()(
+  "rn-voidhash/PaywallService",
+  {
+    make: Effect.gen(function* () {
+      const apiClient = yield* ApiClient;
+      const identityManager = yield* IdentityManager;
+
+      const getPaywallForLocation = (locationSlug: LocationSlug) =>
+        Effect.gen(function* () {
+          const commonHeaders = yield* getCommonSdkHeaders();
+          const distinctId = yield* identityManager.getDistinctId();
+          return yield* apiClient.sdk.resolvePaywall({
+            headers: {
+              ...commonHeaders,
+              "x-distinct-id": distinctId,
+            },
+            payload: { locationSlug: String(locationSlug) },
+          });
+        });
+
+      return { getPaywallForLocation } as const;
+    }),
+  }
+) {
+  static readonly layer = Layer.effect(this, this.make);
+}
diff --git a/libraries/react-native/src/core/products/product-service.ts b/libraries/react-native/src/core/products/product-service.ts
new file mode 100644
index 000000000..eca43bbac
--- /dev/null
+++ b/libraries/react-native/src/core/products/product-service.ts
@@ -0,0 +1,95 @@
+import { Effect, Layer, ServiceMap } from "effect";
+
+import { CacheManager } from "../caching/cache-manager";
+import type { Product, SubscriptionProduct } from "../entities/product";
+import { PaymentAdapter } from "../payment-adapters/payment-adapter";
+import type { ProductSlug } from "../schema/registry";
+import type {
+  RuntimeProductDefinition,
+  RuntimeSchema,
+} from "../schema/runtime";
+
+/**
+ * Map of product slugs to the resolved native subscription product (or `null`
+ * when the underlying store SDK doesn't know about that product on this
+ * platform).
+ */
+export type ProductsBySlug = Record<ProductSlug, SubscriptionProduct | null>;
+
+const NATIVE_PRODUCTS_CACHE_TTL_MS = 1000 * 60 * 60 * 24;
+
+const generateCacheKeyFromProductDefinitions = (
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+) => `native-products:${JSON.stringify(productDefinitions)}`;
+
+const mapNativeProductsToProductMap = (
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
+  nativeProducts: Product[]
+): ProductsBySlug => {
+  const productMap = {} as Record<string, SubscriptionProduct | null>;
+
+  for (const slug of Object.keys(productDefinitions)) {
+    const nativeProduct = nativeProducts.find(
+      (candidate) => candidate.slug === slug
+    );
+    productMap[slug] = (nativeProduct as SubscriptionProduct | undefined) ?? null;
+  }
+
+  return productMap as ProductsBySlug;
+};
+
+/**
+ * Fetches the products declared in the given schema from the native store
+ * (with a 24h cache) and maps them back to the schema slugs. Missing products
+ * (not configured for the current platform) are returned as `null`.
+ */
+export class ProductService extends ServiceMap.Service<ProductService>()(
+  "rn-voidhash/ProductService",
+  {
+    make: Effect.gen(function* () {
+      const cacheManager = yield* CacheManager;
+      const paymentAdapter = yield* PaymentAdapter;
+
+      const loadProductsCached = (
+        productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+      ) =>
+        Effect.gen(function* () {
+          const cacheKey =
+            generateCacheKeyFromProductDefinitions(productDefinitions);
+          const cached = yield* cacheManager.get<Product[]>(cacheKey);
+          if (cached && !(cached.isStale || cached.isExpired)) {
+            yield* Effect.logDebug("Products fetched from cache", {
+              products: cached.value,
+            });
+            return cached.value;
+          }
+
+          const nativeProducts =
+            yield* paymentAdapter.getProducts(productDefinitions);
+          yield* Effect.logDebug("Products fetched from native adapter", {
+            products: nativeProducts,
+          });
+
+          yield* cacheManager.set(cacheKey, nativeProducts, {
+            ttl: NATIVE_PRODUCTS_CACHE_TTL_MS,
+          });
+
+          return nativeProducts;
+        });
+
+      const getProducts = (schema: RuntimeSchema) =>
+        Effect.gen(function* () {
+          const productDefinitions = schema.products;
+          const nativeProducts = yield* loadProductsCached(productDefinitions);
+          return mapNativeProductsToProductMap(
+            productDefinitions,
+            nativeProducts
+          );
+        });
+
+      return { getProducts } as const;
+    }),
+  }
+) {
+  static readonly layer = Layer.effect(this, this.make);
+}
diff --git a/libraries/react-native/src/core/transactions/transaction-service.ts b/libraries/react-native/src/core/transactions/transaction-service.ts
new file mode 100644
index 000000000..00441f094
--- /dev/null
+++ b/libraries/react-native/src/core/transactions/transaction-service.ts
@@ -0,0 +1,223 @@
+import { Effect, Layer, ServiceMap } from "effect";
+
+import { CacheManager } from "../caching/cache-manager";
+import type { SubscriptionProduct } from "../entities/product";
+import type { Transaction } from "../entities/transaction";
+import { CustomerInfoManager } from "../identity/customer-info-manager";
+import { IdentityManager } from "../identity/identity-manager";
+import { ApiClient } from "../networking/api-client";
+import { PaymentAdapter } from "../payment-adapters/payment-adapter";
+import type {
+  RuntimeProductDefinition,
+  RuntimeSchema,
+} from "../schema/runtime";
+import { SdkConfiguration } from "../sdk-configuration";
+import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
+
+const PROCESSED_TRANSACTION_TTL_MS = 1000 * 60 * 30;
+
+const buildTransactionProcessingKey = (transaction: Transaction) =>
+  `${transaction.platform}:${transaction.transactionId}:${transaction.purchaseDate}`;
+
+const getProcessedTransactionCacheKey = (transactionProcessingKey: string) =>
+  `processed-transaction:${transactionProcessingKey}`;
+
+const resolveTransactionProductSlug = (
+  transaction: Transaction,
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+) => {
+  const matchedProduct = Object.values(productDefinitions).find(
+    (productDefinition) => {
+      if (productDefinition.slug === transaction.productId) {
+        return true;
+      }
+
+      const provider =
+        transaction.platform === "ios"
+          ? productDefinition.configuration.providers.appleAppStore
+          : productDefinition.configuration.providers.googlePlay;
+
+      return provider?.productId === transaction.productId;
+    }
+  );
+
+  return matchedProduct?.slug ?? transaction.productId;
+};
+
+const mapTransactionToSyncPayload = (
+  transaction: Transaction,
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+) => {
+  const productSlug = resolveTransactionProductSlug(
+    transaction,
+    productDefinitions
+  );
+
+  if (transaction.platform === "ios") {
+    return {
+      platform: "ios" as const,
+      productSlug,
+      purchaseDate: transaction.purchaseDate,
+      quantity: transaction.quantity,
+      receipt: transaction.receipt,
+      transactionId: transaction.transactionId,
+    };
+  }
+
+  return {
+    platform: "android" as const,
+    productSlug,
+    purchaseDate: transaction.purchaseDate,
+    purchaseToken: transaction.purchaseToken ?? "",
+    quantity: transaction.quantity,
+    receipt: transaction.receipt,
+    transactionId: transaction.transactionId,
+  };
+};
+
+/**
+ * Owns the transaction lifecycle: deduplicated server-side sync, observation
+ * reconciliation, purchase orchestration, restore-purchases, and the native
+ * transaction observer. Holds an in-memory `inFlightKeys` set per runtime to
+ * coalesce concurrent sync attempts for the same transaction (the cache TTL
+ * catches duplicate attempts across runtime restarts).
+ */
+export class TransactionService extends ServiceMap.Service<TransactionService>()(
+  "rn-voidhash/TransactionService",
+  {
+    make: Effect.gen(function* () {
+      const apiClient = yield* ApiClient;
+      const cacheManager = yield* CacheManager;
+      const customerInfoManager = yield* CustomerInfoManager;
+      const identityManager = yield* IdentityManager;
+      const paymentAdapter = yield* PaymentAdapter;
+      const sdkConfiguration = yield* SdkConfiguration;
+
+      const inFlightKeys = new Set<string>();
+
+      const processObservedTransaction = (
+        transaction: Transaction,
+        schema: RuntimeSchema
+      ) =>
+        Effect.gen(function* () {
+          const transactionProcessingKey =
+            buildTransactionProcessingKey(transaction);
+          if (inFlightKeys.has(transactionProcessingKey)) {
+            return;
+          }
+
+          const processedCacheKey = getProcessedTransactionCacheKey(
+            transactionProcessingKey
+          );
+          const cachedTransaction =
+            yield* cacheManager.get<boolean>(processedCacheKey);
+          if (
+            cachedTransaction &&
+            !cachedTransaction.isExpired &&
+            cachedTransaction.value
+          ) {
+            return;
+          }
+
+          if (transaction.platform === "android" && !transaction.purchaseToken) {
+            yield* Effect.logWarning(
+              "Skipping observed Android transaction without purchase token",
+              {
+                transactionId: transaction.transactionId,
+              }
+            );
+            return;
+          }
+
+          inFlightKeys.add(transactionProcessingKey);
+          try {
+            const commonHeaders = yield* getCommonSdkHeaders();
+            const distinctId = yield* identityManager.getDistinctId();
+
+            yield* apiClient.sdk.syncTransaction({
+              headers: {
+                ...commonHeaders,
+                "x-distinct-id": distinctId,
+              },
+              payload: mapTransactionToSyncPayload(
+                transaction,
+                schema.products
+              ),
+            });
+
+            yield* cacheManager.set(processedCacheKey, true, {
+              ttl: PROCESSED_TRANSACTION_TTL_MS,
+            });
+
+            if (!sdkConfiguration.readOnly) {
+              yield* paymentAdapter.acknowledgePurchase(transaction);
+            }
+          } finally {
+            inFlightKeys.delete(transactionProcessingKey);
+          }
+        });
+
+      const reconcileObservedTransactions = (schema: RuntimeSchema) =>
+        Effect.gen(function* () {
+          const [pendingTransactions, purchasedTransactions] = yield* Effect.all(
+            [
+              paymentAdapter.getPendingTransactions(),
+              paymentAdapter.getPurchaseHistory(true),
+            ]
+          );
+
+          const observedTransactionsByKey = new Map<string, Transaction>();
+          for (const transaction of [
+            ...pendingTransactions,
+            ...purchasedTransactions,
+          ]) {
+            observedTransactionsByKey.set(
+              buildTransactionProcessingKey(transaction),
+              transaction
+            );
+          }
+
+          for (const transaction of observedTransactionsByKey.values()) {
+            yield* processObservedTransaction(transaction, schema).pipe(
+              Effect.catch((error) =>
+                Effect.logWarning("Failed to process observed transaction", {
+                  error,
+                  transactionId: transaction.transactionId,
+                })
+              )
+            );
+          }
+        });
+
+      const purchase = (product: SubscriptionProduct, schema: RuntimeSchema) =>
+        Effect.gen(function* () {
+          const transaction = yield* paymentAdapter.buyProduct(product);
+          yield* processObservedTransaction(transaction, schema);
+        });
+
+      const restorePurchases = (schema: RuntimeSchema) =>
+        Effect.gen(function* () {
+          yield* reconcileObservedTransactions(schema);
+          const distinctId = yield* identityManager.getDistinctId();
+          yield* customerInfoManager.getCustomer(distinctId, "fetch");
+        });
+
+      const startTransactionObserver = (
+        onPurchase?: (transaction: Transaction) => void
+      ) => paymentAdapter.initConnection(onPurchase);
+
+      const endConnection = () => paymentAdapter.endConnection();
+
+      return {
+        endConnection,
+        processObservedTransaction,
+        purchase,
+        reconcileObservedTransactions,
+        restorePurchases,
+        startTransactionObserver,
+      } as const;
+    }),
+  }
+) {
+  static readonly layer = Layer.effect(this, this.make);
+}
diff --git a/libraries/react-native/src/__tests__/client.test.ts b/libraries/react-native/tests/client.test.ts
similarity index 78%
rename from libraries/react-native/src/__tests__/client.test.ts
rename to libraries/react-native/tests/client.test.ts
index e7a88568a..810f00c12 100644
--- a/libraries/react-native/src/__tests__/client.test.ts
+++ b/libraries/react-native/tests/client.test.ts
@@ -1,25 +1,29 @@
 import { Exit } from "effect";
+import { vi } from "vitest";
+import { describe, expect, it } from "./helpers/effect-vitest";
 
-jest.mock("react-native", () => ({ AppState: null }), { virtual: true });
+vi.mock("react-native", () => ({ AppState: null }));
 
-jest.mock("../core/payment-adapters/app-store-adapter", () => {
-  const { Layer } = jest.requireActual("effect");
+vi.mock("../src/core/payment-adapters/app-store-adapter", async () => {
+  const { Layer } = await vi.importActual<typeof import("effect")>("effect");
   return {
     AppStoreAdapter: Layer.empty,
   };
 });
 
-jest.mock("../core/payment-adapters/google-play-adapter", () => {
-  const { Layer } = jest.requireActual("effect");
+vi.mock("../src/core/payment-adapters/google-play-adapter", async () => {
+  const { Layer } = await vi.importActual<typeof import("effect")>("effect");
   return {
     GooglePlayAdapter: Layer.empty,
   };
 });
 
-jest.mock("../core/platform/react-native-platform-provider", () => {
-  const { Layer } = jest.requireActual("effect");
-  const { PlatformProvider } = jest.requireActual(
-    "../core/platform/platform-provider"
+vi.mock("../src/core/platform/react-native-platform-provider", async () => {
+  const { Layer } = await vi.importActual<typeof import("effect")>("effect");
+  const { PlatformProvider } = await vi.importActual<
+    typeof import("../src/core/platform/platform-provider")
+  >(
+    "../src/core/platform/platform-provider"
   );
   return {
     ReactNativePlatformProvider: Layer.succeed(PlatformProvider, {
@@ -37,12 +41,12 @@ jest.mock("../core/platform/react-native-platform-provider", () => {
   };
 });
 
-import { VoidhashClient } from "../client";
-import { EventBus } from "../core/event-bus";
+import { VoidhashClient } from "../src/client";
+import { EventBus } from "../src/core/event-bus";
 import {
   ReadOnlyModePurchaseNotAllowedError,
   VoidhashError,
-} from "../errors";
+} from "../src/errors";
 import { createTestSchema } from "./helpers/test-schema";
 
 function createClient(readOnly = false, unstableSwallowErrors = false) {
@@ -64,7 +68,7 @@ function createClient(readOnly = false, unstableSwallowErrors = false) {
 describe("VoidhashClient", () => {
   describe("unstable_swallowErrors", () => {
     it("swallows flush errors when unstable_swallowErrors is enabled", async () => {
-      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+      const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {
         return;
       });
       const client = createClient(false, true);
@@ -73,7 +77,7 @@ describe("VoidhashClient", () => {
         flush: () => "flush-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.fail("boom")),
       };
 
       await expect(client.flush()).resolves.toBeUndefined();
@@ -86,7 +90,7 @@ describe("VoidhashClient", () => {
     });
 
     it("swallows identify errors when unstable_swallowErrors is enabled", async () => {
-      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+      const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {
         return;
       });
       const client = createClient(false, true);
@@ -95,7 +99,7 @@ describe("VoidhashClient", () => {
         identify: () => "identify-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.fail("boom")),
       };
 
       await expect(
@@ -109,7 +113,7 @@ describe("VoidhashClient", () => {
     });
 
     it("swallows restorePurchases errors when unstable_swallowErrors is enabled", async () => {
-      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+      const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {
         return;
       });
       const client = createClient(false, true);
@@ -118,7 +122,7 @@ describe("VoidhashClient", () => {
         restorePurchases: () => "restore-purchases-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.fail("boom")),
       };
 
       await expect(client.restorePurchases()).resolves.toBeUndefined();
@@ -130,7 +134,7 @@ describe("VoidhashClient", () => {
     });
 
     it("swallows init errors and keeps client uninitialized when unstable_swallowErrors is enabled", async () => {
-      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+      const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {
         return;
       });
       const client = createClient(false, true);
@@ -139,7 +143,7 @@ describe("VoidhashClient", () => {
         init: () => "init-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.fail("boom")),
       };
 
       await expect(client.init()).resolves.toBeUndefined();
@@ -152,7 +156,7 @@ describe("VoidhashClient", () => {
     });
 
     it("swallows ensureInitialized errors in side-effect methods when unstable_swallowErrors is enabled", async () => {
-      const warnSpy = jest.spyOn(console, "warn").mockImplementation(() => {
+      const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {
         return;
       });
       const client = createClient(false, true);
@@ -174,7 +178,7 @@ describe("VoidhashClient", () => {
         getProducts: () => "get-products-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.fail("boom")),
       };
 
       await expect(client.getProducts()).rejects.toEqual(
@@ -191,7 +195,7 @@ describe("VoidhashClient", () => {
         purchase: () => "purchase-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.fail("boom")),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.fail("boom")),
       };
 
       await expect(
@@ -217,7 +221,7 @@ describe("VoidhashClient", () => {
         purchase: () => "purchase-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.succeed(undefined)),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.succeed(undefined)),
       };
 
       await expect(
@@ -237,7 +241,7 @@ describe("VoidhashClient", () => {
         purchase: () => "purchase-effect",
       };
       (client as unknown as Record<string, unknown>).effectRuntime = {
-        runPromiseExit: jest.fn().mockResolvedValue(Exit.succeed(undefined)),
+        runPromiseExit: vi.fn().mockResolvedValue(Exit.succeed(undefined)),
       };
 
       await expect(
diff --git a/libraries/react-native/src/__tests__/core/cache-manager.test.ts b/libraries/react-native/tests/core/cache-manager.test.ts
similarity index 79%
rename from libraries/react-native/src/__tests__/core/cache-manager.test.ts
rename to libraries/react-native/tests/core/cache-manager.test.ts
index e081acf14..fdba80abc 100644
--- a/libraries/react-native/src/__tests__/core/cache-manager.test.ts
+++ b/libraries/react-native/tests/core/cache-manager.test.ts
@@ -1,8 +1,9 @@
 import { Effect, Layer, ManagedRuntime, pipe } from "effect";
 
-import { CacheAdapter } from "../../core/caching/cache-adapter";
-import { CacheManager } from "../../core/caching/cache-manager";
+import { CacheAdapter } from "../../src/core/caching/cache-adapter";
+import { CacheManager } from "../../src/core/caching/cache-manager";
 import { createInMemoryCacheAdapter } from "../helpers/effect-test-harness";
+import { describe, expect, it } from "../helpers/effect-vitest";
 
 const wait = (ms: number) =>
   new Promise<void>((resolve) => {
@@ -21,13 +22,13 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           manager.set("customer:1", { id: "1" }, { staleTime: 1000, ttl: 1000 })
         )
       );
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           manager.get<{ id: string }>("customer:1")
         )
       );
@@ -53,14 +54,14 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           manager.set("customer:expired", { id: "expired" }, { ttl: 1 })
         )
       );
       await wait(5);
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           manager.get<{ id: string }>("customer:expired")
         )
       );
@@ -83,14 +84,14 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           manager.set("customer:stale", { id: "stale" }, { staleTime: 1, ttl: 1000 })
         )
       );
       await wait(5);
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           manager.get<{ id: string }>("customer:stale")
         )
       );
@@ -115,7 +116,7 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           Effect.all([
             manager.set("k1", "v1"),
             manager.set("k2", "v2"),
@@ -125,13 +126,13 @@ describe("CacheManager", () => {
       );
 
       const keys = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
+        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.getCacheKeys())
       );
       const k1 = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k1"))
+        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.get<string>("k1"))
       );
       const k2 = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k2"))
+        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.get<string>("k2"))
       );
 
       expect(keys).toEqual([]);
diff --git a/libraries/react-native/src/__tests__/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
similarity index 79%
rename from libraries/react-native/src/__tests__/core/client-effect.test.ts
rename to libraries/react-native/tests/core/client-effect.test.ts
index a255e4ce7..afc8a9d3d 100644
--- a/libraries/react-native/src/__tests__/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -1,21 +1,23 @@
 import { Effect } from "effect";
+import { vi } from "vitest";
 
 import {
   type AnalyticsIngestEvent,
   VoidhashEffectClient,
-} from "../../client-effect";
-import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
-import { CacheManager } from "../../core/caching/cache-manager";
-import { Product, SubscriptionProduct } from "../../core/entities/product";
-import { Transaction } from "../../core/entities/transaction";
-import { CustomerAttributeManager } from "../../core/identity/customer-attribute-manager";
-import { SDK_VERSION } from "../../core/constants";
+} from "../../src/client-effect";
+import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../src/constants";
+import { CacheManager } from "../../src/core/caching/cache-manager";
+import { Product, SubscriptionProduct } from "../../src/core/entities/product";
+import { Transaction } from "../../src/core/entities/transaction";
+import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
+import { SDK_VERSION } from "../../src/core/constants";
 import {
   createApiClientDouble,
   createEffectTestHarness,
   createInMemoryCacheAdapter,
   createPaymentAdapterDouble,
 } from "../helpers/effect-test-harness";
+import { describe, expect, it } from "../helpers/effect-vitest";
 import { createTestSchema } from "../helpers/test-schema";
 
 describe("VoidhashEffectClient", () => {
@@ -32,10 +34,10 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-before-init"))
+        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.set("distinctId", "cached-before-init"))
       );
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerAttributeManager, (manager) =>
+        Effect.flatMap(CustomerAttributeManager.asEffect(), (manager) =>
           manager.setCustomerAttributes("cached-before-init", {
             email: "before@voidhash.test",
             name: "Before",
@@ -121,7 +123,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
 
     try {
       const first = await harness.runtime.runPromise(initializedClient.getProducts());
@@ -157,7 +161,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
     const events: string[] = [];
     const remove = harness.eventBus.on("feature-flags-fetched", () => {
       events.push("feature-flags-fetched");
@@ -165,7 +171,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "feature-user"))
+        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.set("distinctId", "feature-user"))
       );
 
       const first = await harness.runtime.runPromise(
@@ -195,7 +201,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
 
     try {
       await expect(
@@ -220,7 +228,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
     const monthlyProduct = new SubscriptionProduct(
       "monthly-id",
       "monthly_sub",
@@ -261,7 +271,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
 
     try {
       await harness.runtime.runPromise(
@@ -285,7 +297,9 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
       readOnly: true,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
     const transaction = new Transaction(
       "tx-id",
       "tx-id",
@@ -321,7 +335,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
     const transaction = new Transaction(
       "tx-id",
       "tx-id",
@@ -368,7 +384,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
 
     try {
       await harness.runtime.runPromise(
@@ -393,7 +411,9 @@ describe("VoidhashEffectClient", () => {
       cacheAdapter: cache.adapter,
       paymentAdapter: paymentDouble.paymentAdapter,
     });
-    const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
     const transaction = new Transaction(
       "tx-id",
       "tx-id",
@@ -417,27 +437,35 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
-  describe("sendAnalyticsEvents", () => {
-    const analyticsEvents: ReadonlyArray<AnalyticsIngestEvent> = [
-      {
-        context: {},
-        event_id: "evt_1",
-        event_name: "cta-button-clicked",
-        event_ts: "2026-01-01T00:00:00.000Z",
-        properties: {
-          button_name: "Get Started",
-        },
-        session_id: "sess_1",
+  const analyticsEvents: ReadonlyArray<AnalyticsIngestEvent> = [
+    {
+      context: {},
+      event_id: "evt_1",
+      event_name: "cta-button-clicked",
+      event_ts: "2026-01-01T00:00:00.000Z",
+      properties: {
+        button_name: "Get Started",
       },
-    ];
+      session_id: "sess_1",
+    },
+  ];
+
+  const acceptedAnalyticsResponse = () =>
+    new Response(null, {
+      status: 202,
+      statusText: "Accepted",
+    });
+
+  const decodeRequestBody = (body: RequestInit["body"]) => {
+    if (typeof body === "string") return body;
+    if (body instanceof Uint8Array) return new TextDecoder().decode(body);
+    return String(body);
+  };
 
+  describe("sendAnalyticsEvents", () => {
     it("sends analytics to derived i. subdomain by default", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = jest.fn().mockResolvedValue({
-        ok: true,
-        status: 202,
-        statusText: "Accepted",
-      });
+      const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -448,14 +476,17 @@ describe("VoidhashEffectClient", () => {
         apiClient: apiDouble.apiClient,
         baseUrl: "https://api.voidhash.test",
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         paymentAdapter: paymentDouble.paymentAdapter,
         publishableKey: "pk_analytics",
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager, (manager) =>
+          Effect.flatMap(CacheManager.asEffect(), (manager) =>
             manager.set("distinctId", "analytics-user")
           )
         );
@@ -464,16 +495,16 @@ describe("VoidhashEffectClient", () => {
         );
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
-        expect(fetchMock.mock.calls[0]?.[0]).toBe(
+        expect(String(fetchMock.mock.calls[0]?.[0])).toBe(
           "https://i.api.voidhash.test/batch"
         );
 
         const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
         expect(request?.method).toBe("POST");
-        expect(request?.headers).toEqual({
+        expect(request?.headers).toEqual(expect.objectContaining({
           "content-type": "application/json",
-        });
-        expect(JSON.parse(String(request?.body))).toMatchObject({
+        }));
+        expect(JSON.parse(decodeRequestBody(request?.body))).toMatchObject({
           events: [
             {
               distinct_id: "analytics-user",
@@ -500,11 +531,7 @@ describe("VoidhashEffectClient", () => {
 
     it("uses ingestUrl override when provided", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = jest.fn().mockResolvedValue({
-        ok: true,
-        status: 202,
-        statusText: "Accepted",
-      });
+      const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -514,10 +541,13 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         ingestUrl: "http://localhost:8083",
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         await harness.runtime.runPromise(
@@ -525,7 +555,9 @@ describe("VoidhashEffectClient", () => {
         );
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
-        expect(fetchMock.mock.calls[0]?.[0]).toBe("http://localhost:8083/batch");
+        expect(String(fetchMock.mock.calls[0]?.[0])).toBe(
+          "http://localhost:8083/batch"
+        );
       } finally {
         global.fetch = originalFetch;
         await harness.runtime.dispose();
@@ -534,15 +566,12 @@ describe("VoidhashEffectClient", () => {
 
     it("does not inline retry failed analytics delivery", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = jest
-        .fn()
-        .mockResolvedValueOnce({
-          headers: new Headers(),
-          json: async () => ({ error: "try again" }),
-          ok: false,
+      const fetchMock = vi.fn()
+        .mockResolvedValueOnce(new Response(JSON.stringify({ error: "try again" }), {
+          headers: { "content-type": "application/json" },
           status: 503,
           statusText: "Service Unavailable",
-        });
+        }));
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -552,15 +581,18 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         ingestUrl: "http://localhost:8083",
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         await expect(harness.runtime.runPromise(
           initializedClient.sendAnalyticsEvents(analyticsEvents)
-        )).rejects.toThrow("Analytics ingest request failed: 503 Service Unavailable");
+        )).rejects.toThrow("Analytics ingest request failed: 503");
         expect(fetchMock).toHaveBeenCalledTimes(1);
       } finally {
         global.fetch = originalFetch;
@@ -580,7 +612,9 @@ describe("VoidhashEffectClient", () => {
         cacheAdapter: cache.adapter,
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         harness.runtime.runSync(
@@ -595,11 +629,7 @@ describe("VoidhashEffectClient", () => {
 
     it("flushes immediately when queue reaches 20 events", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = jest.fn().mockResolvedValue({
-        ok: true,
-        status: 202,
-        statusText: "Accepted",
-      });
+      const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -609,10 +639,13 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         ingestUrl: "http://localhost:8083",
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
       let flushTriggered = false;
       initializedClient.setAnalyticsFlushCallback(() => {
         flushTriggered = true;
@@ -636,14 +669,10 @@ describe("VoidhashEffectClient", () => {
     });
 
     it("flushes queued events when timer fires after 5 seconds", async () => {
-      jest.useFakeTimers();
+      vi.useFakeTimers();
 
       const originalFetch = global.fetch;
-      const fetchMock = jest.fn().mockResolvedValue({
-        ok: true,
-        status: 202,
-        statusText: "Accepted",
-      });
+      const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -653,10 +682,13 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         ingestUrl: "http://localhost:8083",
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
       let flushTriggered = false;
       initializedClient.setAnalyticsFlushCallback(() => {
         flushTriggered = true;
@@ -666,10 +698,10 @@ describe("VoidhashEffectClient", () => {
         harness.runtime.runSync(initializedClient.capture("screen-view"));
         expect(flushTriggered).toBe(false);
 
-        jest.advanceTimersByTime(5000);
+        vi.advanceTimersByTime(5000);
         expect(flushTriggered).toBe(true);
       } finally {
-        jest.useRealTimers();
+        vi.useRealTimers();
         global.fetch = originalFetch;
         await harness.runtime.dispose();
       }
@@ -677,19 +709,21 @@ describe("VoidhashEffectClient", () => {
 
     it("keeps batch in queue when flush is retryably rate limited", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = jest.fn().mockResolvedValueOnce({
-        headers: new Headers({
-          "retry-after": "2",
-        }),
-        json: async () => ({
+      const fetchMock = vi.fn().mockResolvedValueOnce(new Response(
+        JSON.stringify({
           code: "rate_limited",
           error: "request rate limit exceeded",
           retry_after_ms: 2000,
         }),
-        ok: false,
-        status: 429,
-        statusText: "Too Many Requests",
-      });
+        {
+          headers: {
+            "content-type": "application/json",
+            "retry-after": "2",
+          },
+          status: 429,
+          statusText: "Too Many Requests",
+        }
+      ));
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -699,10 +733,13 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         ingestUrl: "http://localhost:8083",
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         harness.runtime.runSync(initializedClient.capture("event-1"));
@@ -718,35 +755,37 @@ describe("VoidhashEffectClient", () => {
     });
 
     it("retries a rate-limited batch after Retry-After elapses", async () => {
-      jest.useFakeTimers();
+      vi.useFakeTimers();
 
       const originalFetch = global.fetch;
-      const fetchMock = jest
-        .fn()
-        .mockResolvedValueOnce({
-          headers: new Headers({
-            "retry-after": "2",
-          }),
-          json: async () => ({
+      const fetchMock = vi.fn()
+        .mockResolvedValueOnce(new Response(
+          JSON.stringify({
             code: "rate_limited",
             error: "request rate limit exceeded",
             retry_after_ms: 2000,
           }),
-          ok: false,
-          status: 429,
-          statusText: "Too Many Requests",
-        })
-        .mockResolvedValueOnce({
-          headers: new Headers(),
-          json: async () => ({
+          {
+            headers: {
+              "content-type": "application/json",
+              "retry-after": "2",
+            },
+            status: 429,
+            statusText: "Too Many Requests",
+          }
+        ))
+        .mockResolvedValueOnce(new Response(
+          JSON.stringify({
             accepted: 1,
             rejected: 0,
             request_id: "req_after_backoff",
           }),
-          ok: true,
-          status: 202,
-          statusText: "Accepted",
-        });
+          {
+            headers: { "content-type": "application/json" },
+            status: 202,
+            statusText: "Accepted",
+          }
+        ));
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -756,10 +795,13 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         ingestUrl: "http://localhost:8083",
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         harness.runtime.runSync(initializedClient.capture("event-1"));
@@ -770,13 +812,13 @@ describe("VoidhashEffectClient", () => {
         await harness.runtime.runPromise(initializedClient.flush());
         expect(fetchMock).toHaveBeenCalledTimes(1);
 
-        jest.advanceTimersByTime(2000);
+        vi.advanceTimersByTime(2000);
         await harness.runtime.runPromise(initializedClient.flush());
 
         expect(fetchMock).toHaveBeenCalledTimes(2);
         expect(initializedClient.getAnalyticsQueueLength()).toBe(0);
       } finally {
-        jest.useRealTimers();
+        vi.useRealTimers();
         global.fetch = originalFetch;
         await harness.runtime.dispose();
       }
@@ -794,7 +836,9 @@ describe("VoidhashEffectClient", () => {
         cacheAdapter: cache.adapter,
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         await harness.runtime.runPromise(
@@ -818,12 +862,14 @@ describe("VoidhashEffectClient", () => {
         cacheAdapter: cache.adapter,
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
 
       try {
         // Store a different app release in cache
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager, (manager) =>
+          Effect.flatMap(CacheManager.asEffect(), (manager) =>
             manager.set("voidhash:analytics:last-seen-app-release", {
               appBuild: "0",
               appVersion: "0.0.1",
@@ -854,7 +900,9 @@ describe("VoidhashEffectClient", () => {
         cacheAdapter: cache.adapter,
         paymentAdapter: paymentDouble.paymentAdapter,
       });
-      const initializedClient = VoidhashEffectClient.makeInitializedClient({ schema });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
       const capturedEvents: string[] = [];
 
       try {
diff --git a/libraries/react-native/src/__tests__/core/customer-info-manager.test.ts b/libraries/react-native/tests/core/customer-info-manager.test.ts
similarity index 83%
rename from libraries/react-native/src/__tests__/core/customer-info-manager.test.ts
rename to libraries/react-native/tests/core/customer-info-manager.test.ts
index db0ea3713..fdaea8b58 100644
--- a/libraries/react-native/src/__tests__/core/customer-info-manager.test.ts
+++ b/libraries/react-native/tests/core/customer-info-manager.test.ts
@@ -1,7 +1,7 @@
 import { Effect } from "effect";
 
-import { CacheManager } from "../../core/caching/cache-manager";
-import { CustomerInfoManager } from "../../core/identity/customer-info-manager";
+import { CacheManager } from "../../src/core/caching/cache-manager";
+import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
 import {
   createApiClientDouble,
   createEffectTestHarness,
@@ -9,6 +9,7 @@ import {
   createPaymentAdapterDouble,
   createSdkCustomer,
 } from "../helpers/effect-test-harness";
+import { describe, expect, it } from "../helpers/effect-vitest";
 
 const wait = (ms: number) =>
   new Promise<void>((resolve) => {
@@ -29,13 +30,13 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
           manager.cache("cached-user", customer)
         )
       );
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
           manager.getCustomer("cached-user", "cache")
         )
       );
@@ -66,16 +67,20 @@ describe("CustomerInfoManager", () => {
 
     try {
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
           manager.getCustomer("fetched-user", "fetch")
         )
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
           manager.getCustomerFromCache("fetched-user")
         )
       );
 
+      if (result === null) {
+        throw new Error("Expected fetched customer");
+      }
+
       expect(result.distinctId).toBe("fetched-user");
       expect(apiDouble.state.getCustomerCalls).toHaveLength(1);
       expect(cached?.value.distinctId).toBe("fetched-user");
@@ -99,11 +104,11 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) => manager.cache("fresh-user", customer))
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) => manager.cache("fresh-user", customer))
       );
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
           manager.getCustomer("fresh-user", "fetch-while-stale")
         )
       );
@@ -131,7 +136,7 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           manager.set("customer:stale-user", staleCustomer, {
             staleTime: 1,
             ttl: 1000,
@@ -141,7 +146,7 @@ describe("CustomerInfoManager", () => {
       await wait(5);
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
           manager.getCustomer("stale-user", "fetch-while-stale")
         )
       );
diff --git a/libraries/react-native/src/__tests__/core/identity-manager.test.ts b/libraries/react-native/tests/core/identity-manager.test.ts
similarity index 78%
rename from libraries/react-native/src/__tests__/core/identity-manager.test.ts
rename to libraries/react-native/tests/core/identity-manager.test.ts
index 5d16ff174..dae9f8462 100644
--- a/libraries/react-native/src/__tests__/core/identity-manager.test.ts
+++ b/libraries/react-native/tests/core/identity-manager.test.ts
@@ -1,16 +1,17 @@
 import { Effect } from "effect";
 
-import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
-import { CacheManager } from "../../core/caching/cache-manager";
-import { CustomerAttributeManager } from "../../core/identity/customer-attribute-manager";
-import { CustomerInfoManager } from "../../core/identity/customer-info-manager";
-import { IdentityManager } from "../../core/identity/identity-manager";
+import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../src/constants";
+import { CacheManager } from "../../src/core/caching/cache-manager";
+import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
+import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
+import { IdentityManager } from "../../src/core/identity/identity-manager";
 import {
   createApiClientDouble,
   createEffectTestHarness,
   createInMemoryCacheAdapter,
   createPaymentAdapterDouble,
 } from "../helpers/effect-test-harness";
+import { describe, expect, it } from "../helpers/effect-vitest";
 
 describe("IdentityManager", () => {
   it("uses the cached distinct id when present", async () => {
@@ -25,11 +26,11 @@ describe("IdentityManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-user"))
+        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.set("distinctId", "cached-user"))
       );
 
       const distinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
+        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctId())
       );
 
       expect(distinctId).toBe("cached-user");
@@ -50,10 +51,10 @@ describe("IdentityManager", () => {
 
     try {
       const distinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
+        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctId())
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctIdFromCache())
       );
 
       expect(distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
@@ -85,7 +86,7 @@ describe("IdentityManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           Effect.all([
             manager.set("distinctId", "old-user"),
             manager.set("customer-attributes:old-user", {
@@ -97,7 +98,7 @@ describe("IdentityManager", () => {
       );
 
       await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) =>
+        Effect.flatMap(IdentityManager.asEffect(), (manager) =>
           manager.identify("new-user", {
             email: "new@voidhash.test",
             name: "New User",
@@ -106,10 +107,10 @@ describe("IdentityManager", () => {
       );
 
       const cachedDistinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctIdFromCache())
       );
       const cachedCustomer = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
+        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
           manager.getCustomerFromCache("new-user")
         )
       );
@@ -155,7 +156,7 @@ describe("IdentityManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
           Effect.all([
             manager.set("distinctId", "signed-in-user"),
             manager.set("customer:some-user", { id: "some-user" }),
@@ -163,7 +164,7 @@ describe("IdentityManager", () => {
         )
       );
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerAttributeManager, (manager) =>
+        Effect.flatMap(CustomerAttributeManager.asEffect(), (manager) =>
           manager.setCustomerAttributes("signed-in-user", {
             email: "signed@voidhash.test",
             name: "Signed User",
@@ -172,14 +173,14 @@ describe("IdentityManager", () => {
       );
 
       await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.reset())
+        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.reset())
       );
 
       const distinctIdFromCache = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctIdFromCache())
       );
       const cacheKeys = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
+        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.getCacheKeys())
       );
 
       expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
diff --git a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts b/libraries/react-native/tests/helpers/effect-test-harness.ts
similarity index 68%
rename from libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
rename to libraries/react-native/tests/helpers/effect-test-harness.ts
index 02ce3fc59..e955cd6dc 100644
--- a/libraries/react-native/src/__tests__/helpers/effect-test-harness.ts
+++ b/libraries/react-native/tests/helpers/effect-test-harness.ts
@@ -1,19 +1,28 @@
 import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import { Effect, Layer, ManagedRuntime, pipe } from "effect";
+import { FetchHttpClient } from "effect/unstable/http";
 
-import { CacheAdapter } from "../../core/caching/cache-adapter";
-import { CacheManager } from "../../core/caching/cache-manager";
-import { Product, type SubscriptionProduct } from "../../core/entities/product";
-import { Transaction } from "../../core/entities/transaction";
-import { EventBus, EventBusProvider } from "../../core/event-bus";
-import { CustomerAttributeManager } from "../../core/identity/customer-attribute-manager";
-import { CustomerInfoManager } from "../../core/identity/customer-info-manager";
-import { IdentityManager } from "../../core/identity/identity-manager";
-import { ApiClient } from "../../core/networking/api-client";
-import { PaymentAdapter } from "../../core/payment-adapters/payment-adapter";
-import type { PlatformInfo } from "../../core/platform/platform-provider";
-import { PlatformProvider } from "../../core/platform/platform-provider";
-import { SdkConfiguration } from "../../core/sdk-configuration";
+import { CacheAdapter } from "../../src/core/caching/cache-adapter";
+import { CacheManager } from "../../src/core/caching/cache-manager";
+import { Product, type SubscriptionProduct } from "../../src/core/entities/product";
+import { Transaction } from "../../src/core/entities/transaction";
+import { EventBus, EventBusProvider } from "../../src/core/event-bus";
+import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
+import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
+import { IdentityManager } from "../../src/core/identity/identity-manager";
+import { AnalyticsService } from "../../src/core/analytics/service";
+import { FeatureFlagService } from "../../src/core/feature-flags/feature-flag-service";
+import { LifecycleAdapter } from "../../src/core/lifecycle/lifecycle-adapter";
+import { LifecycleService } from "../../src/core/lifecycle/lifecycle-service";
+import { ApiClient } from "../../src/core/networking/api-client";
+import { PaywallService } from "../../src/core/paywalls/paywall-service";
+import { PaymentAdapter } from "../../src/core/payment-adapters/payment-adapter";
+import type { PlatformInfo } from "../../src/core/platform/platform-provider";
+import { PlatformProvider } from "../../src/core/platform/platform-provider";
+import { ProductService } from "../../src/core/products/product-service";
+import { SdkConfiguration } from "../../src/core/sdk-configuration";
+import { TransactionService } from "../../src/core/transactions/transaction-service";
+import { createTestSchema } from "./test-schema";
 
 type FeatureFlagsResult = {
   readonly flags: ReadonlyArray<{
@@ -64,6 +73,7 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
 
   const apiClient = {
     sdk: {
+      getSchema: () => Effect.succeed(createTestSchema()),
       evaluateFeatureFlags: (request: ApiSdkCall) => {
         state.evaluateFeatureFlagsCalls.push(request);
         return Effect.succeed(
@@ -93,6 +103,7 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
           options.identifyResult ?? createSdkCustomer(distinctId)
         );
       },
+      resolvePaywall: () => Effect.succeed(null),
       syncCustomerAttributes: (request: ApiSdkCall) => {
         state.syncCustomerAttributesCalls.push(request);
         return Effect.void;
@@ -108,7 +119,7 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
   };
 
   return {
-    apiClient: apiClient as unknown as ApiClient,
+    apiClient: apiClient as unknown,
     state,
   };
 }
@@ -184,7 +195,7 @@ export function createPaymentAdapterDouble(
   };
 
   return {
-    paymentAdapter: paymentAdapter as unknown as PaymentAdapter,
+    paymentAdapter: paymentAdapter as unknown,
     state,
   };
 }
@@ -208,14 +219,29 @@ export function createInMemoryCacheAdapter() {
   };
 }
 
+/**
+ * No-op `LifecycleAdapter` double for tests. Returns `null` so callers know
+ * lifecycle wiring is unavailable, mirroring the production fallback when
+ * `react-native` isn't installed.
+ */
+export function createLifecycleAdapterDouble() {
+  return {
+    adapter: {
+      subscribe: () => Effect.succeed(null),
+    },
+  };
+}
+
 export interface EffectTestHarnessOptions {
-  apiClient: ApiClient;
+  apiClient: unknown;
   baseUrl?: string;
   cacheAdapter: ReturnType<typeof createInMemoryCacheAdapter>["adapter"];
   debug?: boolean;
   eventBus?: EventBus;
+  fetch?: typeof globalThis.fetch;
   ingestUrl?: string;
-  paymentAdapter: PaymentAdapter;
+  lifecycleAdapter?: ReturnType<typeof createLifecycleAdapterDouble>;
+  paymentAdapter: unknown;
   platform?: Partial<PlatformInfo>;
   publishableKey?: string;
   readOnly?: boolean;
@@ -237,14 +263,31 @@ const defaultPlatformInfo: PlatformInfo = {
 export function createEffectTestHarness(options: EffectTestHarnessOptions) {
   const eventBus = options.eventBus ?? new EventBus();
 
-  const layer = pipe(
+  const lifecycle = options.lifecycleAdapter ?? createLifecycleAdapterDouble();
+
+  const baseLayer = pipe(
     CustomerAttributeManager.Default,
+    Layer.provideMerge(ProductService.layer),
+    Layer.provideMerge(FeatureFlagService.layer),
+    Layer.provideMerge(PaywallService.layer),
+    Layer.provideMerge(TransactionService.layer),
+    Layer.provideMerge(AnalyticsService.layer),
+    Layer.provideMerge(LifecycleService.layer),
+    Layer.provideMerge(Layer.succeed(LifecycleAdapter, lifecycle.adapter)),
     Layer.provideMerge(CustomerInfoManager.Default),
     Layer.provideMerge(IdentityManager.Default),
     Layer.provideMerge(CacheManager.Default),
     Layer.provideMerge(Layer.succeed(CacheAdapter, options.cacheAdapter)),
-    Layer.provideMerge(Layer.succeed(ApiClient, options.apiClient)),
-    Layer.provideMerge(Layer.succeed(PaymentAdapter, options.paymentAdapter)),
+    Layer.provideMerge(
+      Layer.succeed(ApiClient, options.apiClient as typeof ApiClient.Service)
+    ),
+    Layer.provideMerge(FetchHttpClient.layer),
+    Layer.provideMerge(
+      Layer.succeed(
+        PaymentAdapter,
+        options.paymentAdapter as typeof PaymentAdapter.Service
+      )
+    ),
     Layer.provideMerge(Layer.succeed(EventBusProvider, eventBus)),
     Layer.provideMerge(
       Layer.succeed(PlatformProvider, {
@@ -262,6 +305,12 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
       })
     )
   );
+  const layer = options.fetch
+    ? pipe(
+        baseLayer,
+        Layer.provideMerge(Layer.succeed(FetchHttpClient.Fetch, options.fetch))
+      )
+    : baseLayer;
 
   return {
     eventBus,
diff --git a/libraries/react-native/tests/helpers/effect-vitest.ts b/libraries/react-native/tests/helpers/effect-vitest.ts
new file mode 100644
index 000000000..2aeeb1562
--- /dev/null
+++ b/libraries/react-native/tests/helpers/effect-vitest.ts
@@ -0,0 +1,9 @@
+import { makeMethods } from "@effect/vitest";
+import { it as vitestIt } from "vitest";
+
+export { beforeEach, describe, expect } from "vitest";
+const makeVitestMethods = makeMethods as unknown as (
+	it: typeof vitestIt
+) => typeof vitestIt;
+
+export const it = makeVitestMethods(vitestIt);
diff --git a/libraries/react-native/src/__tests__/helpers/test-schema.ts b/libraries/react-native/tests/helpers/test-schema.ts
similarity index 94%
rename from libraries/react-native/src/__tests__/helpers/test-schema.ts
rename to libraries/react-native/tests/helpers/test-schema.ts
index 0f2b7aa7f..b441e7da7 100644
--- a/libraries/react-native/src/__tests__/helpers/test-schema.ts
+++ b/libraries/react-native/tests/helpers/test-schema.ts
@@ -1,4 +1,4 @@
-import type { RuntimeSchema } from "../../core/schema/runtime";
+import type { RuntimeSchema } from "../../src/core/schema/runtime";
 
 /**
  * Build a deterministic in-memory schema for tests. Mirrors the shape the
diff --git a/libraries/react-native/src/__tests__/internal/paywall-bridge-parser.test.ts b/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
similarity index 90%
rename from libraries/react-native/src/__tests__/internal/paywall-bridge-parser.test.ts
rename to libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
index 77fceb5d4..23794fa63 100644
--- a/libraries/react-native/src/__tests__/internal/paywall-bridge-parser.test.ts
+++ b/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
@@ -1,7 +1,8 @@
+import { describe, expect, it } from "../helpers/effect-vitest";
 import {
   PaywallBridgeParseError,
   parsePaywallBridgeEnvelope,
-} from "../../internal/paywall-bridge/parser";
+} from "../../src/internal/paywall-bridge/parser";
 
 describe("parsePaywallBridgeEnvelope", () => {
   it("parses a valid purchase payload", () => {
diff --git a/libraries/react-native/src/__tests__/internal/webview-utils.test.ts b/libraries/react-native/tests/internal/webview-utils.test.ts
similarity index 86%
rename from libraries/react-native/src/__tests__/internal/webview-utils.test.ts
rename to libraries/react-native/tests/internal/webview-utils.test.ts
index c04c91e77..0bdefcd06 100644
--- a/libraries/react-native/src/__tests__/internal/webview-utils.test.ts
+++ b/libraries/react-native/tests/internal/webview-utils.test.ts
@@ -1,7 +1,8 @@
+import { describe, expect, it } from "../helpers/effect-vitest";
 import {
   normalizeSource,
   wrapNitroCallback,
-} from "../../internal/webview/utils";
+} from "../../src/internal/webview/utils";
 
 describe("webview utils", () => {
   it("wraps callbacks in Nitro callback object", () => {
diff --git a/libraries/react-native/src/__tests__/internal/whitelist.test.ts b/libraries/react-native/tests/internal/whitelist.test.ts
similarity index 81%
rename from libraries/react-native/src/__tests__/internal/whitelist.test.ts
rename to libraries/react-native/tests/internal/whitelist.test.ts
index f20cf07ea..67c766fb7 100644
--- a/libraries/react-native/src/__tests__/internal/whitelist.test.ts
+++ b/libraries/react-native/tests/internal/whitelist.test.ts
@@ -1,4 +1,5 @@
-import { compileWhitelist, passesWhitelist } from "../../internal/webview/whitelist";
+import { compileWhitelist, passesWhitelist } from "../../src/internal/webview/whitelist";
+import { describe, expect, it } from "../helpers/effect-vitest";
 
 describe("webview whitelist", () => {
   it("allows whitelisted https origin", () => {
diff --git a/libraries/react-native/src/__tests__/react/use-paywall-by-location.test.tsx b/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
similarity index 86%
rename from libraries/react-native/src/__tests__/react/use-paywall-by-location.test.tsx
rename to libraries/react-native/tests/react/use-paywall-by-location.test.tsx
index bd0aca4b3..73de0d020 100644
--- a/libraries/react-native/src/__tests__/react/use-paywall-by-location.test.tsx
+++ b/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
@@ -1,47 +1,49 @@
-import type { VoidhashClient } from "../../client";
+import { type Mocked, vi } from "vitest";
+import type { VoidhashClient } from "../../src/client";
 import {
   __internal_handlePaywallBridgeEventForTests,
   __internal_resetPaywallByLocationCachesForTests,
-} from "../../react/hooks/use-paywall-by-location";
+} from "../../src/react/hooks/use-paywall-by-location";
+import { beforeEach, describe, expect, it } from "../helpers/effect-vitest";
 
-jest.mock("react-native", () => ({
+vi.mock("react-native", () => ({
   AppState: {
-    addEventListener: jest.fn(),
+    addEventListener: vi.fn(),
   },
   Linking: {
-    openURL: jest.fn().mockResolvedValue(undefined),
+    openURL: vi.fn().mockResolvedValue(undefined),
   },
 }));
 
-jest.mock("../../nitro", () => ({
+vi.mock("../../src/nitro", () => ({
   PaywallPresenter: undefined,
 }));
 
 function createClientMock() {
   return {
-    getProducts: jest.fn(),
-    purchase: jest.fn(),
-    restorePurchases: jest.fn(),
-  } as unknown as jest.Mocked<VoidhashClient>;
+    getProducts: vi.fn(),
+    purchase: vi.fn(),
+    restorePurchases: vi.fn(),
+  } as unknown as Mocked<VoidhashClient>;
 }
 
 function createPresenterMock() {
   return {
-    dismiss: jest.fn().mockResolvedValue(undefined),
-    postMessage: jest.fn(),
+    dismiss: vi.fn().mockResolvedValue(undefined),
+    postMessage: vi.fn(),
   };
 }
 
 describe("usePaywallByLocation bridge coordinator", () => {
   beforeEach(() => {
     __internal_resetPaywallByLocationCachesForTests();
-    jest.clearAllMocks();
+    vi.clearAllMocks();
   });
 
   it("handles purchase bridge action and dismisses on success", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const openExternalUrl = jest.fn().mockResolvedValue(undefined);
+    const openExternalUrl = vi.fn().mockResolvedValue(undefined);
 
     client.getProducts.mockResolvedValue({
       monthly: {
@@ -78,8 +80,8 @@ describe("usePaywallByLocation bridge coordinator", () => {
   it("invokes onPurchase callback on purchase success", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const onPurchase = jest.fn();
-    const onError = jest.fn();
+    const onPurchase = vi.fn();
+    const onError = vi.fn();
 
     client.getProducts.mockResolvedValue({
       monthly: {
@@ -92,7 +94,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       paywallOptions: {
         onError,
         onPurchase,
@@ -130,7 +132,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       presenter,
       rawBridgeEvent: JSON.stringify({
         payload: {
@@ -150,7 +152,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
   it("invokes onError callback when purchase product cannot be resolved", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const onError = jest.fn();
+    const onError = vi.fn();
 
     client.getProducts.mockResolvedValue({
       monthly: {
@@ -162,7 +164,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       paywallOptions: {
         onError,
       },
@@ -195,7 +197,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       presenter,
       rawBridgeEvent: JSON.stringify({
         requestId: "req_restore",
@@ -212,15 +214,15 @@ describe("usePaywallByLocation bridge coordinator", () => {
   it("invokes onRestore callback on restore success", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const onRestore = jest.fn();
-    const onError = jest.fn();
+    const onRestore = vi.fn();
+    const onError = vi.fn();
 
     client.restorePurchases.mockResolvedValue(undefined as never);
 
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       paywallOptions: {
         onError,
         onRestore,
@@ -242,7 +244,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
   it("invokes onError callback when purchase fails", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const onError = jest.fn();
+    const onError = vi.fn();
 
     client.getProducts.mockResolvedValue({
       monthly: {
@@ -255,7 +257,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       paywallOptions: {
         onError,
       },
@@ -280,14 +282,14 @@ describe("usePaywallByLocation bridge coordinator", () => {
   it("invokes onError callback when restore fails", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const onError = jest.fn();
+    const onError = vi.fn();
 
     client.restorePurchases.mockRejectedValue(new Error("restore failed") as never);
 
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       paywallOptions: {
         onError,
       },
@@ -309,7 +311,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
   it("handles openExternal and close actions", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const openExternalUrl = jest.fn().mockResolvedValue(undefined);
+    const openExternalUrl = vi.fn().mockResolvedValue(undefined);
 
     await __internal_handlePaywallBridgeEventForTests({
       client,
@@ -343,7 +345,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
   it("returns deterministic busy error while another action is in-flight", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
-    const onError = jest.fn();
+    const onError = vi.fn();
 
     client.getProducts.mockResolvedValue({
       monthly: {
@@ -363,7 +365,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     const firstRequest = __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       presenter,
       rawBridgeEvent: JSON.stringify({
         payload: {
@@ -378,7 +380,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     await __internal_handlePaywallBridgeEventForTests({
       client,
       locationKey: "home",
-      openExternalUrl: jest.fn().mockResolvedValue(undefined),
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
       paywallOptions: {
         onError,
       },
diff --git a/libraries/react-native/tsconfig.json b/libraries/react-native/tsconfig.json
index 101b9ac40..22dfd0821 100644
--- a/libraries/react-native/tsconfig.json
+++ b/libraries/react-native/tsconfig.json
@@ -3,6 +3,6 @@
   "compilerOptions": {
     "outDir": "./build"
   },
-  "include": ["./src"],
+  "include": ["./src", "./tests", "./vitest.setup.ts", "./vitest.unit.mts"],
   "exclude": ["**/__tests__/*", "**/__rsc_tests__/*", "**/node_modules/**"]
 }
diff --git a/libraries/react-native/vitest.setup.ts b/libraries/react-native/vitest.setup.ts
new file mode 100644
index 000000000..d9418a9ec
--- /dev/null
+++ b/libraries/react-native/vitest.setup.ts
@@ -0,0 +1,53 @@
+import { randomUUID } from "node:crypto";
+import { ServiceMap } from "effect";
+import { expect } from "vitest";
+
+expect.addEqualityTesters([]);
+
+if (typeof globalThis.crypto !== "object") {
+	Object.defineProperty(globalThis, "crypto", {
+		value: {},
+		writable: true,
+	});
+}
+
+if (typeof globalThis.crypto.randomUUID !== "function") {
+	Object.defineProperty(globalThis.crypto, "randomUUID", {
+		value: randomUUID,
+		writable: true,
+	});
+}
+
+/**
+ * Effect v4 (effect-smol) no longer treats `ServiceMap.Service` classes as
+ * effects directly - they're `Yieldable` and must be unwrapped via
+ * `Service.asEffect()` or `yield* Service` before use in operators like
+ * `Effect.flatMap`. The fiber runtime checks for an `evaluate` symbol on the
+ * value it's stepping through and throws "Not a valid effect" otherwise.
+ *
+ * This codebase's tests still use the v3-era `Effect.flatMap(Service, fn)`
+ * pattern. Rather than touch every call site, we patch `ServiceProto` so a
+ * `Service` evaluates as its underlying effect - restoring the old behavior in
+ * tests only. Production code uses the `yield* Service` syntax and is
+ * unaffected.
+ */
+{
+	const evaluateKey = "~effect/Effect/evaluate";
+	class DummyService extends ServiceMap.Service<
+		DummyService,
+		Record<string, unknown>
+	>()("__voidhash/VitestPolyfillProbe__") {}
+	const ServiceProto = Object.getPrototypeOf(Object.getPrototypeOf(DummyService));
+	if (ServiceProto && !(evaluateKey in ServiceProto)) {
+		Object.defineProperty(ServiceProto, evaluateKey, {
+			configurable: true,
+			writable: true,
+			value(this: { asEffect: () => Record<string, unknown> }, fiber: unknown) {
+				const effect = this.asEffect();
+				return (
+					effect as Record<string, (fiber: unknown) => unknown>
+				)[evaluateKey](fiber);
+			},
+		});
+	}
+}
diff --git a/libraries/react-native/vitest.unit.mts b/libraries/react-native/vitest.unit.mts
new file mode 100644
index 000000000..fcd14fed8
--- /dev/null
+++ b/libraries/react-native/vitest.unit.mts
@@ -0,0 +1,16 @@
+import react from "@vitejs/plugin-react";
+import { reactNative } from "@srsholmes/vitest-react-native";
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+	plugins: [tsconfigPaths(), react(), reactNative()],
+	test: {
+		environment: "node",
+		exclude: ["./node_modules/**", "./build/**", "./lib/**"],
+		globals: false,
+		include: ["./tests/**/*.test.{ts,tsx}"],
+		reporters: ["verbose"],
+		setupFiles: ["./vitest.setup.ts"],
+	},
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8fb45882a..4f999252c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -18,6 +18,9 @@ catalogs:
     '@types/react-dom':
       specifier: ^19.1.0
       version: 19.2.3
+    '@vitejs/plugin-react':
+      specifier: ^5.1.1
+      version: 5.2.0
     better-auth:
       specifier: ^1.4.18
       version: 1.4.18
@@ -210,7 +213,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.17.0)
+        version: 54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.6.1)
@@ -266,16 +269,22 @@ importers:
       effect:
         specifier: 4.0.0-beta.23
         version: 4.0.0-beta.23
+      voidhash-cli:
+        specifier: workspace:*
+        version: link:../../apps/cli
     devDependencies:
-      '@types/jest':
-        specifier: ^29.5.14
-        version: 29.5.14
+      '@effect/vitest':
+        specifier: 4.0.0-beta.23
+        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
+      '@srsholmes/vitest-react-native':
+        specifier: ^0.1.5
+        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
       '@vitejs/plugin-react':
-        specifier: ^4.6.0
-        version: 4.7.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        specifier: 'catalog:'
+        version: 5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
@@ -290,16 +299,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.17.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
-      jest:
-        specifier: ~29.7.0
-        version: 29.7.0(@types/node@24.10.4)
-      jest-expo:
-        specifier: ~54.0.17
-        version: 54.0.17(@babel/core@7.29.0)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      jest-fixed-jsdom:
-        specifier: ^0.0.9
-        version: 0.0.9(jest-environment-jsdom@29.7.0)
+        version: 5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -318,6 +318,12 @@ importers:
       ultracite:
         specifier: 5.0.39
         version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite-tsconfig-paths:
+        specifier: 'catalog:'
+        version: 5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vitest:
+        specifier: ^4.1.6
+        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
 
   libraries/web:
     dependencies:
@@ -1358,6 +1364,12 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
+  '@esbuild/aix-ppc64@0.27.7':
+    resolution: {integrity: sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
   '@esbuild/android-arm64@0.17.19':
     resolution: {integrity: sha512-KBMWvEZooR7+kzY0BtbTQn0OAYY7CsiydT63pVEaPtVYF0hXbUaOyZog37DKxK7NF3XacBJOpYT4adIJh+avxA==}
     engines: {node: '>=12'}
@@ -1382,6 +1394,12 @@ packages:
     cpu: [arm64]
     os: [android]
 
+  '@esbuild/android-arm64@0.27.7':
+    resolution: {integrity: sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
   '@esbuild/android-arm@0.17.19':
     resolution: {integrity: sha512-rIKddzqhmav7MSmoFCmDIb6e2W57geRsM94gV2l38fzhXMwq7hZoClug9USI2pFRGL06f4IOPHHpFNOkWieR8A==}
     engines: {node: '>=12'}
@@ -1406,6 +1424,12 @@ packages:
     cpu: [arm]
     os: [android]
 
+  '@esbuild/android-arm@0.27.7':
+    resolution: {integrity: sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
   '@esbuild/android-x64@0.17.19':
     resolution: {integrity: sha512-uUTTc4xGNDT7YSArp/zbtmbhO0uEEK9/ETW29Wk1thYUJBz3IVnvgEiEwEa9IeLyvnpKrWK64Utw2bgUmDveww==}
     engines: {node: '>=12'}
@@ -1430,6 +1454,12 @@ packages:
     cpu: [x64]
     os: [android]
 
+  '@esbuild/android-x64@0.27.7':
+    resolution: {integrity: sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
   '@esbuild/darwin-arm64@0.17.19':
     resolution: {integrity: sha512-80wEoCfF/hFKM6WE1FyBHc9SfUblloAWx6FJkFWTWiCoht9Mc0ARGEM47e67W9rI09YoUxJL68WHfDRYEAvOhg==}
     engines: {node: '>=12'}
@@ -1454,6 +1484,12 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
+  '@esbuild/darwin-arm64@0.27.7':
+    resolution: {integrity: sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
   '@esbuild/darwin-x64@0.17.19':
     resolution: {integrity: sha512-IJM4JJsLhRYr9xdtLytPLSH9k/oxR3boaUIYiHkAawtwNOXKE8KoU8tMvryogdcT8AU+Bflmh81Xn6Q0vTZbQw==}
     engines: {node: '>=12'}
@@ -1478,6 +1514,12 @@ packages:
     cpu: [x64]
     os: [darwin]
 
+  '@esbuild/darwin-x64@0.27.7':
+    resolution: {integrity: sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
   '@esbuild/freebsd-arm64@0.17.19':
     resolution: {integrity: sha512-pBwbc7DufluUeGdjSU5Si+P3SoMF5DQ/F/UmTSb8HXO80ZEAJmrykPyzo1IfNbAoaqw48YRpv8shwd1NoI0jcQ==}
     engines: {node: '>=12'}
@@ -1502,6 +1544,12 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
+  '@esbuild/freebsd-arm64@0.27.7':
+    resolution: {integrity: sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
   '@esbuild/freebsd-x64@0.17.19':
     resolution: {integrity: sha512-4lu+n8Wk0XlajEhbEffdy2xy53dpR06SlzvhGByyg36qJw6Kpfk7cp45DR/62aPH9mtJRmIyrXAS5UWBrJT6TQ==}
     engines: {node: '>=12'}
@@ -1526,6 +1574,12 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
+  '@esbuild/freebsd-x64@0.27.7':
+    resolution: {integrity: sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
   '@esbuild/linux-arm64@0.17.19':
     resolution: {integrity: sha512-ct1Tg3WGwd3P+oZYqic+YZF4snNl2bsnMKRkb3ozHmnM0dGWuxcPTTntAF6bOP0Sp4x0PjSF+4uHQ1xvxfRKqg==}
     engines: {node: '>=12'}
@@ -1550,6 +1604,12 @@ packages:
     cpu: [arm64]
     os: [linux]
 
+  '@esbuild/linux-arm64@0.27.7':
+    resolution: {integrity: sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
   '@esbuild/linux-arm@0.17.19':
     resolution: {integrity: sha512-cdmT3KxjlOQ/gZ2cjfrQOtmhG4HJs6hhvm3mWSRDPtZ/lP5oe8FWceS10JaSJC13GBd4eH/haHnqf7hhGNLerA==}
     engines: {node: '>=12'}
@@ -1574,6 +1634,12 @@ packages:
     cpu: [arm]
     os: [linux]
 
+  '@esbuild/linux-arm@0.27.7':
+    resolution: {integrity: sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
   '@esbuild/linux-ia32@0.17.19':
     resolution: {integrity: sha512-w4IRhSy1VbsNxHRQpeGCHEmibqdTUx61Vc38APcsRbuVgK0OPEnQ0YD39Brymn96mOx48Y2laBQGqgZ0j9w6SQ==}
     engines: {node: '>=12'}
@@ -1598,6 +1664,12 @@ packages:
     cpu: [ia32]
     os: [linux]
 
+  '@esbuild/linux-ia32@0.27.7':
+    resolution: {integrity: sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
   '@esbuild/linux-loong64@0.17.19':
     resolution: {integrity: sha512-2iAngUbBPMq439a+z//gE+9WBldoMp1s5GWsUSgqHLzLJ9WoZLZhpwWuym0u0u/4XmZ3gpHmzV84PonE+9IIdQ==}
     engines: {node: '>=12'}
@@ -1622,6 +1694,12 @@ packages:
     cpu: [loong64]
     os: [linux]
 
+  '@esbuild/linux-loong64@0.27.7':
+    resolution: {integrity: sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
   '@esbuild/linux-mips64el@0.17.19':
     resolution: {integrity: sha512-LKJltc4LVdMKHsrFe4MGNPp0hqDFA1Wpt3jE1gEyM3nKUvOiO//9PheZZHfYRfYl6AwdTH4aTcXSqBerX0ml4A==}
     engines: {node: '>=12'}
@@ -1646,6 +1724,12 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
+  '@esbuild/linux-mips64el@0.27.7':
+    resolution: {integrity: sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
   '@esbuild/linux-ppc64@0.17.19':
     resolution: {integrity: sha512-/c/DGybs95WXNS8y3Ti/ytqETiW7EU44MEKuCAcpPto3YjQbyK3IQVKfF6nbghD7EcLUGl0NbiL5Rt5DMhn5tg==}
     engines: {node: '>=12'}
@@ -1670,6 +1754,12 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
+  '@esbuild/linux-ppc64@0.27.7':
+    resolution: {integrity: sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
   '@esbuild/linux-riscv64@0.17.19':
     resolution: {integrity: sha512-FC3nUAWhvFoutlhAkgHf8f5HwFWUL6bYdvLc/TTuxKlvLi3+pPzdZiFKSWz/PF30TB1K19SuCxDTI5KcqASJqA==}
     engines: {node: '>=12'}
@@ -1694,6 +1784,12 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
+  '@esbuild/linux-riscv64@0.27.7':
+    resolution: {integrity: sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
   '@esbuild/linux-s390x@0.17.19':
     resolution: {integrity: sha512-IbFsFbxMWLuKEbH+7sTkKzL6NJmG2vRyy6K7JJo55w+8xDk7RElYn6xvXtDW8HCfoKBFK69f3pgBJSUSQPr+4Q==}
     engines: {node: '>=12'}
@@ -1718,6 +1814,12 @@ packages:
     cpu: [s390x]
     os: [linux]
 
+  '@esbuild/linux-s390x@0.27.7':
+    resolution: {integrity: sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
   '@esbuild/linux-x64@0.17.19':
     resolution: {integrity: sha512-68ngA9lg2H6zkZcyp22tsVt38mlhWde8l3eJLWkyLrp4HwMUr3c1s/M2t7+kHIhvMjglIBrFpncX1SzMckomGw==}
     engines: {node: '>=12'}
@@ -1742,6 +1844,12 @@ packages:
     cpu: [x64]
     os: [linux]
 
+  '@esbuild/linux-x64@0.27.7':
+    resolution: {integrity: sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
   '@esbuild/netbsd-arm64@0.25.12':
     resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
     engines: {node: '>=18'}
@@ -1754,6 +1862,12 @@ packages:
     cpu: [arm64]
     os: [netbsd]
 
+  '@esbuild/netbsd-arm64@0.27.7':
+    resolution: {integrity: sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
   '@esbuild/netbsd-x64@0.17.19':
     resolution: {integrity: sha512-CwFq42rXCR8TYIjIfpXCbRX0rp1jo6cPIUPSaWwzbVI4aOfX96OXY8M6KNmtPcg7QjYeDmN+DD0Wp3LaBOLf4Q==}
     engines: {node: '>=12'}
@@ -1778,6 +1892,12 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
+  '@esbuild/netbsd-x64@0.27.7':
+    resolution: {integrity: sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
   '@esbuild/openbsd-arm64@0.25.12':
     resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
     engines: {node: '>=18'}
@@ -1790,6 +1910,12 @@ packages:
     cpu: [arm64]
     os: [openbsd]
 
+  '@esbuild/openbsd-arm64@0.27.7':
+    resolution: {integrity: sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
   '@esbuild/openbsd-x64@0.17.19':
     resolution: {integrity: sha512-cnq5brJYrSZ2CF6c35eCmviIN3k3RczmHz8eYaVlNasVqsNY+JKohZU5MKmaOI+KkllCdzOKKdPs762VCPC20g==}
     engines: {node: '>=12'}
@@ -1814,6 +1940,12 @@ packages:
     cpu: [x64]
     os: [openbsd]
 
+  '@esbuild/openbsd-x64@0.27.7':
+    resolution: {integrity: sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
   '@esbuild/openharmony-arm64@0.25.12':
     resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
     engines: {node: '>=18'}
@@ -1826,6 +1958,12 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
+  '@esbuild/openharmony-arm64@0.27.7':
+    resolution: {integrity: sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
   '@esbuild/sunos-x64@0.17.19':
     resolution: {integrity: sha512-vCRT7yP3zX+bKWFeP/zdS6SqdWB8OIpaRq/mbXQxTGHnIxspRtigpkUcDMlSCOejlHowLqII7K2JKevwyRP2rg==}
     engines: {node: '>=12'}
@@ -1850,6 +1988,12 @@ packages:
     cpu: [x64]
     os: [sunos]
 
+  '@esbuild/sunos-x64@0.27.7':
+    resolution: {integrity: sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
   '@esbuild/win32-arm64@0.17.19':
     resolution: {integrity: sha512-yYx+8jwowUstVdorcMdNlzklLYhPxjniHWFKgRqH7IFlUEa0Umu3KuYplf1HUZZ422e3NU9F4LGb+4O0Kdcaag==}
     engines: {node: '>=12'}
@@ -1874,6 +2018,12 @@ packages:
     cpu: [arm64]
     os: [win32]
 
+  '@esbuild/win32-arm64@0.27.7':
+    resolution: {integrity: sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
   '@esbuild/win32-ia32@0.17.19':
     resolution: {integrity: sha512-eggDKanJszUtCdlVs0RB+h35wNlb5v4TWEkq4vZcmVt5u/HiDZrTXe2bWFQUez3RgNHwx/x4sk5++4NSSicKkw==}
     engines: {node: '>=12'}
@@ -1898,6 +2048,12 @@ packages:
     cpu: [ia32]
     os: [win32]
 
+  '@esbuild/win32-ia32@0.27.7':
+    resolution: {integrity: sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
   '@esbuild/win32-x64@0.17.19':
     resolution: {integrity: sha512-lAhycmKnVOuRYNtRtatQR1LPQf2oYCkRGkSFnseDAKPl8lu5SOsK/e1sXe5a0Pc5kHIHe6P2I/ilntNv2xf3cA==}
     engines: {node: '>=12'}
@@ -1922,6 +2078,12 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@esbuild/win32-x64@0.27.7':
+    resolution: {integrity: sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
   '@eslint-community/eslint-utils@4.9.0':
     resolution: {integrity: sha512-ayVFHdtZ+hsq1t2Dy24wCmGXGe4q9Gu3smhLYALJrr473ZH27MsnSL+LKUlimp4BWJqMDMLmPpx/Q9R3OAlL4g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -2787,6 +2949,9 @@ packages:
   '@react-native/normalize-colors@0.81.5':
     resolution: {integrity: sha512-0HuJ8YtqlTVRXGZuGeBejLE04wSQsibpTI+RGOyVqxZvgtlLLC/Ssw0UmbHhT4lYMp2fhdtvKZSs5emWB1zR/g==}
 
+  '@react-native/polyfills@2.0.0':
+    resolution: {integrity: sha512-K0aGNn1TjalKj+65D7ycc1//H9roAQ51GJVk5ZJQFb2teECGmzd86bYDC0aYdbRf7gtovescq4Zt6FR0tgXiHQ==}
+
   '@react-native/virtualized-lists@0.81.5':
     resolution: {integrity: sha512-UVXgV/db25OPIvwZySeToXD/9sKKhOdkcWmmf4Jh8iBZuyfML+/5CasaZ1E7Lqg6g3uqVQq75NqIwkYmORJMPw==}
     engines: {node: '>= 20.19.4'}
@@ -2842,12 +3007,12 @@ packages:
   '@react-navigation/routers@7.5.3':
     resolution: {integrity: sha512-1tJHg4KKRJuQ1/EvJxatrMef3NZXEPzwUIUZ3n1yJ2t7Q97siwRtbynRpQG9/69ebbtiZ8W3ScOZF/OmhvM4Rg==}
 
-  '@rolldown/pluginutils@1.0.0-beta.27':
-    resolution: {integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==}
-
   '@rolldown/pluginutils@1.0.0-beta.40':
     resolution: {integrity: sha512-s3GeJKSQOwBlzdUrj4ISjJj5SfSh+aqn0wjOar4Bx95iV1ETI7F6S/5hLcfAxZ9kXDcyrAkxPlqmd1ZITttf+w==}
 
+  '@rolldown/pluginutils@1.0.0-rc.3':
+    resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
+
   '@rollup/rollup-android-arm-eabi@4.54.0':
     resolution: {integrity: sha512-OywsdRHrFvCdvsewAInDKCNyR3laPA2mc9bRYJ6LBp5IyvF3fvXbbNR0bSzHlZVFtn6E0xw2oZlyjg4rKCVcng==}
     cpu: [arm]
@@ -2973,6 +3138,15 @@ packages:
   '@sinonjs/fake-timers@10.3.0':
     resolution: {integrity: sha512-V4BG07kuYSUkTCSBHG8G8TNhM+F19jXFWnQtzj+we8DrkpSBCee9Z3Ms8yiGer/dlmhe35/Xdgyo3/0rQKg7YA==}
 
+  '@srsholmes/vitest-react-native@0.1.5':
+    resolution: {integrity: sha512-LqUsKKevWSrma/q2jMVOz/yFUZ4KRTkHSBMTCbsyyx5m8RSAdgPci6FPT9rbnnEJv8nUmcEZIUbYWqiJQpQYEg==}
+    engines: {node: '>=20'}
+    peerDependencies:
+      react: 19.1.0
+      react-native: '>=0.72'
+      vite: '>=6'
+      vitest: '>=4'
+
   '@standard-schema/spec@1.1.0':
     resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
 
@@ -3295,6 +3469,7 @@ packages:
 
   '@ungap/structured-clone@1.3.0':
     resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==}
+    deprecated: Potential CWE-502 - Update to 1.3.1 or higher
 
   '@unrs/resolver-binding-android-arm-eabi@1.11.1':
     resolution: {integrity: sha512-ppLRUgHVaGRWUx0R0Ut06Mjo9gBaBkg3v/8AxusGLhsIotbBLuRk51rAzqLC8gq6NyyAojEXglNjzf6R948DNw==}
@@ -3399,15 +3574,18 @@ packages:
     peerDependencies:
       '@urql/core': ^5.0.0
 
-  '@vitejs/plugin-react@4.7.0':
-    resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==}
-    engines: {node: ^14.18.0 || >=16.0.0}
+  '@vitejs/plugin-react@5.2.0':
+    resolution: {integrity: sha512-YmKkfhOAi3wsB1PhJq5Scj3GXMn3WvtQ/JC0xoopuHoXSdmtdStOpFrYaT1kie2YgFBcIe64ROzMYRjCrYOdYw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
     peerDependencies:
-      vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0
+      vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
 
   '@vitest/expect@3.2.4':
     resolution: {integrity: sha512-Io0yyORnB6sikFlt8QW5K7slY4OjqNX9jmJQ02QDda8lyM6B5oNgVWoSoKPac8/kgnCUzuHQKrSLtu/uOqqrig==}
 
+  '@vitest/expect@4.1.6':
+    resolution: {integrity: sha512-7EHDquPthALSV0jhhjgEW8FXaviMx7rSqu8W6oqCoAuOhKov814P99QDV1pxMA3QPv21YudvJngIhjrNI4opLg==}
+
   '@vitest/mocker@3.2.4':
     resolution: {integrity: sha512-46ryTE9RZO/rfDd7pEqFl7etuyzekzEhUbTW3BvmeO/BcCMEgq59BKhek3dXDWgAj4oMK6OZi+vRr1wPW6qjEQ==}
     peerDependencies:
@@ -3419,18 +3597,41 @@ packages:
       vite:
         optional: true
 
+  '@vitest/mocker@4.1.6':
+    resolution: {integrity: sha512-MCFc63czMjEInOlcY2cpQCvCN+KgbAn+60xu9cMgP4sKaLC5JNAKw7JH8QdAnoAC88hW1IiSNZ+GgVXlN1UcMQ==}
+    peerDependencies:
+      msw: ^2.4.9
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
+    peerDependenciesMeta:
+      msw:
+        optional: true
+      vite:
+        optional: true
+
   '@vitest/pretty-format@3.2.4':
     resolution: {integrity: sha512-IVNZik8IVRJRTr9fxlitMKeJeXFFFN0JaB9PHPGQ8NKQbGpfjlTx9zO4RefN8gp7eqjNy8nyK3NZmBzOPeIxtA==}
 
+  '@vitest/pretty-format@4.1.6':
+    resolution: {integrity: sha512-h5SxD/IzNhZYnrSZRsUZQIC+vD0GY8cUvq0iwsmkFKixRCKLLWqCXa/FIQ4S1R+sI+PGoojkHsdNrbZiM9Qpgw==}
+
   '@vitest/runner@3.2.4':
     resolution: {integrity: sha512-oukfKT9Mk41LreEW09vt45f8wx7DordoWUZMYdY/cyAk7w5TWkTRCNZYF7sX7n2wB7jyGAl74OxgwhPgKaqDMQ==}
 
+  '@vitest/runner@4.1.6':
+    resolution: {integrity: sha512-nOPCmn2+yD0ZNmKdsXGv/UxMMWbMuKeD6GyYncNwdkYDxpQvrPSKYj2rWuDjC2Y4b6w6hjip5dBKFzEUuZe3vA==}
+
   '@vitest/snapshot@3.2.4':
     resolution: {integrity: sha512-dEYtS7qQP2CjU27QBC5oUOxLE/v5eLkGqPE0ZKEIDGMs4vKWe7IjgLOeauHsR0D5YuuycGRO5oSRXnwnmA78fQ==}
 
+  '@vitest/snapshot@4.1.6':
+    resolution: {integrity: sha512-YhsdE6xAVfTDmzjxL2ZDUvjj+ZsgyOKe+TdQzqkD72wIOmHka8NuGQ6NpTNZv9D2Z63fbwWKJPeVpEw4EQgYxw==}
+
   '@vitest/spy@3.2.4':
     resolution: {integrity: sha512-vAfasCOe6AIK70iP5UD11Ac4siNUNJ9i/9PZ3NKx07sG6sUxeag1LWdNrMWeKKYBLlzuK+Gn65Yd5nyL6ds+nw==}
 
+  '@vitest/spy@4.1.6':
+    resolution: {integrity: sha512-JFKxMx6udhwKh/Ldo270e17QX710vgunMkuPAvXjHSvC6oqLWAHhVhjg/I71q0u0CBSErIODV1Kjv0FQNSWjdg==}
+
   '@vitest/ui@3.2.4':
     resolution: {integrity: sha512-hGISOaP18plkzbWEcP/QvtRW1xDXF2+96HbEX6byqQhAUbiS5oH6/9JwW+QsQCIYON2bI6QZBF+2PvOmrRZ9wA==}
     peerDependencies:
@@ -3439,9 +3640,13 @@ packages:
   '@vitest/utils@3.2.4':
     resolution: {integrity: sha512-fB2V0JFrQSMsCo9HiSq3Ezpdv4iYaXRG1Sx8edX3MwxfyNn83mKiGzOcH+Fkxt4MHxr3y42fQi1oeAInqgX2QA==}
 
+  '@vitest/utils@4.1.6':
+    resolution: {integrity: sha512-FxIY+U81R3LGKCxaHHFRQ5+g6/iRgGLmeHWdp2Amj4ljQRrEIWHmZyDfDYBRZlpyqA7qKxtS9DD1dhk8RnRIVQ==}
+
   '@xmldom/xmldom@0.8.11':
     resolution: {integrity: sha512-cQzWCtO6C8TQiYl1ruKNn2U6Ao4o4WBBcbL61yJl84x+j5sOWWFU9X7DpND8XZG3daDppSsigMdfAIl2upQBRw==}
     engines: {node: '>=10.0.0'}
+    deprecated: this version has critical issues, please update to the latest version
 
   abab@2.0.6:
     resolution: {integrity: sha512-j2afSsaIENvHZN2B8GOpF566vZ5WVk5opAiMTvWgaQT8DkbOqsTfvNAvHoRGU2zzP8cPoqys+xHTRDWW8L+/BA==}
@@ -3889,6 +4094,10 @@ packages:
     resolution: {integrity: sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==}
     engines: {node: '>=18'}
 
+  chai@6.2.2:
+    resolution: {integrity: sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==}
+    engines: {node: '>=18'}
+
   chalk@2.4.2:
     resolution: {integrity: sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==}
     engines: {node: '>=4'}
@@ -4463,6 +4672,9 @@ packages:
   es-module-lexer@1.7.0:
     resolution: {integrity: sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==}
 
+  es-module-lexer@2.1.0:
+    resolution: {integrity: sha512-n27zTYMjYu1aj4MjCWzSP7G9r75utsaoc8m61weK+W8JMBGGQybd43GstCXZ3WNmSFtGT9wi59qQTW6mhTR5LQ==}
+
   es-object-atoms@1.1.1:
     resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
     engines: {node: '>= 0.4'}
@@ -4504,6 +4716,11 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
+  esbuild@0.27.7:
+    resolution: {integrity: sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   escalade@3.2.0:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
@@ -4999,6 +5216,11 @@ packages:
   flow-enums-runtime@0.0.6:
     resolution: {integrity: sha512-3PYnM29RFXwvAN6Pc/scUfkI7RwhQ/xqyLUyPNlXUp9S40zI8nup9tUSrTLSVnWGBN38FNiGWbwZOB6uR4OGdw==}
 
+  flow-remove-types@2.313.0:
+    resolution: {integrity: sha512-j+tfOktOZO4rLpBCFyZzoXh8hHfPFvDEB/x7N5rPnKWNHzjz1ifw3LzsQPI1cOKnho2weULMgdnmFqBFwOv6Cw==}
+    engines: {node: '>=4'}
+    hasBin: true
+
   fontfaceobserver@2.3.0:
     resolution: {integrity: sha512-6FPvD/IVyT4ZlNe7Wcn5Fb/4ChigpucKYSvD6a+0iMoLn2inpo711eyIcKjmDtE5XNcgAkSH9uN/nfAeZzHEfg==}
 
@@ -5185,12 +5407,18 @@ packages:
   hermes-estree@0.32.0:
     resolution: {integrity: sha512-KWn3BqnlDOl97Xe1Yviur6NbgIZ+IP+UVSpshlZWkq+EtoHg6/cwiDj/osP9PCEgFE15KBm1O55JRwbMEm5ejQ==}
 
+  hermes-estree@0.36.0:
+    resolution: {integrity: sha512-A1+8zn5oss2CFP7pKsOaxorQG6FNIz1WU1VDqruLPPZl3LVgeE2C5xfFg8Ow6/Ow4mSslLLtYP1J3n38eKyW9w==}
+
   hermes-parser@0.29.1:
     resolution: {integrity: sha512-xBHWmUtRC5e/UL0tI7Ivt2riA/YBq9+SiYFU7C1oBa/j2jYGlIF9043oak1F47ihuDIxQ5nbsKueYJDRY02UgA==}
 
   hermes-parser@0.32.0:
     resolution: {integrity: sha512-g4nBOWFpuiTqjR3LZdRxKUkij9iyveWeuks7INEsMX741f3r9xxrOe8TeQfUxtda0eXmiIFiMQzoeSQEno33Hw==}
 
+  hermes-parser@0.36.0:
+    resolution: {integrity: sha512-GdpwMmH5x6IpC1cijvcvYnlPB60Mh6kTSF/NFdYV/j56gYdi+0RIakYs+eqOV+bbO0SW7mgVVGSsTJxyPQfo3w==}
+
   hosted-git-info@7.0.2:
     resolution: {integrity: sha512-puUZAUKT5m8Zzvs72XWy3HtvVbTWljRE66cP60bxJzAqf2DgICo7lYTY2IHUmLnNpjYvw5bvmoHvPc0QO2a62w==}
     engines: {node: ^16.14.0 || >=18.0.0}
@@ -5546,12 +5774,6 @@ packages:
       react-server-dom-webpack:
         optional: true
 
-  jest-fixed-jsdom@0.0.9:
-    resolution: {integrity: sha512-KPfqh2+sn5q2B+7LZktwDcwhCpOpUSue8a1I+BcixWLOQoEVyAjAGfH+IYZGoxZsziNojoHGRTC8xRbB1wDD4g==}
-    engines: {node: '>=18.0.0'}
-    peerDependencies:
-      jest-environment-jsdom: '>=28.0.0'
-
   jest-get-type@29.6.3:
     resolution: {integrity: sha512-zrteXnqYxfQh7l5FHyL38jL39di8H8rHoecLH3JNxH3BwOrBsNeabdap5e0I23lD4HHI8W5VFBZqG4Eaq5LNcw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6163,6 +6385,10 @@ packages:
   node-int64@0.4.0:
     resolution: {integrity: sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==}
 
+  node-modules-regexp@1.0.0:
+    resolution: {integrity: sha512-JMaRS9L4wSRIR+6PTVEikTrq/lMGEZR43a48ETeilY0Q0iMwVnccMFrUM1k+tNzmYuIU0Vh710bCUqHX+/+ctQ==}
+    engines: {node: '>=0.10.0'}
+
   node-releases@2.0.27:
     resolution: {integrity: sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA==}
 
@@ -6228,6 +6454,9 @@ packages:
     resolution: {integrity: sha512-gXah6aZrcUxjWg2zR2MwouP2eHlCBzdV4pygudehaKXSGW4v2AsRQUK+lwwXhii6KFZcunEnmSUoYp5CXibxtA==}
     engines: {node: '>= 0.4'}
 
+  obug@2.1.1:
+    resolution: {integrity: sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==}
+
   ofetch@1.5.1:
     resolution: {integrity: sha512-2W4oUZlVaqAPAil6FUg/difl6YhqhUR7x2eZY4bQCko22UXg3hptq9KLQdqFClV+Wu85UX7hNtdGTngi/1BxcA==}
 
@@ -6383,6 +6612,10 @@ packages:
     resolution: {integrity: sha512-uB80kBFb/tfd68bVleG9T5GGsGPjJrLAUpR5PZIrhBnIaRTQRjqdJSsIKkOP6OAIFbj7GOrcudc5pNjZ+geV2g==}
     engines: {node: '>=6'}
 
+  pirates@3.0.2:
+    resolution: {integrity: sha512-c5CgUJq6H2k6MJz72Ak1F5sN9n9wlSlJyEnwvpm9/y3WB4E3pHBDT2c6PEiS1vyJvq2bUxUAIu0EGf8Cx4Ic7Q==}
+    engines: {node: '>= 4'}
+
   pirates@4.0.7:
     resolution: {integrity: sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==}
     engines: {node: '>= 6'}
@@ -6613,8 +6846,8 @@ packages:
     resolution: {integrity: sha512-jCvmsr+1IUSMUyzOkRcvnVbX3ZYC6g9TDrDbFuFmRDq7PD4yaGbLKNQL6k2jnArV8hjYxh7hVhAZB6s9HDGpZA==}
     engines: {node: '>=0.10.0'}
 
-  react-refresh@0.17.0:
-    resolution: {integrity: sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ==}
+  react-refresh@0.18.0:
+    resolution: {integrity: sha512-QgT5//D3jfjJb6Gsjxv0Slpj23ip+HtOpnNgnb2S5zU3CB26G/IDPGoy4RJB42wzFE46DRsstbW6tKHoKbhAxw==}
     engines: {node: '>=0.10.0'}
 
   react-remove-scroll-bar@2.3.8:
@@ -6694,6 +6927,9 @@ packages:
   regenerator-runtime@0.13.11:
     resolution: {integrity: sha512-kY1AZVr2Ra+t+piVaJ4gxaFaReZVH40AKNo7UCX6W+dEwBo/2oZJzqfuN1qLq1oL45o56cPaTXELwrTh8Fpggg==}
 
+  regenerator-runtime@0.14.1:
+    resolution: {integrity: sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==}
+
   regexp.prototype.flags@1.5.4:
     resolution: {integrity: sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==}
     engines: {node: '>= 0.4'}
@@ -7065,6 +7301,9 @@ packages:
   std-env@3.10.0:
     resolution: {integrity: sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==}
 
+  std-env@4.1.0:
+    resolution: {integrity: sha512-Rq7ybcX2RuC55r9oaPVEW7/xu3tj8u4GeBYHBWCychFtzMIr86A7e3PPEBPT37sHStKX3+TiX/Fr/ACmJLVlLQ==}
+
   stop-iteration-iterator@1.1.0:
     resolution: {integrity: sha512-eLoXW/DHyl62zxY4SCaIgnRhuMr6ri4juEYARS8E6sCEqzKpOiE521Ucofdx+KnDZl5xmvGYaaKCk5FEOxJCoQ==}
     engines: {node: '>= 0.4'}
@@ -7263,6 +7502,10 @@ packages:
     resolution: {integrity: sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==}
     engines: {node: '>=14.0.0'}
 
+  tinyrainbow@3.1.0:
+    resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==}
+    engines: {node: '>=14.0.0'}
+
   tinyspy@4.0.4:
     resolution: {integrity: sha512-azl+t0z7pw/z958Gy9svOTuzqIk6xq+NSheJzn5MMWtWTFywIacg2wUlzKFGtt3cthx0r2SxMK0yzJOR0IES7Q==}
     engines: {node: '>=14.0.0'}
@@ -7569,6 +7812,7 @@ packages:
 
   uuid@7.0.3:
     resolution: {integrity: sha512-DPSke0pXhTZgoF/d+WSt2QaKMCFSfx7QegxEWT+JOuHF5aWrKEn0G+ztjuJg/gG8/ItK+rbPCD/yNv8yyih6Cg==}
+    deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
     hasBin: true
 
   v8-to-istanbul@9.3.0:
@@ -7678,6 +7922,50 @@ packages:
       jsdom:
         optional: true
 
+  vitest@4.1.6:
+    resolution: {integrity: sha512-6lvjbS3p9b4CrdCmguzbh2/4uoXhGE2q71R4OX5sqF9R1bo9Xd6fGrMAfvp5wnCzlBnFVdCOp6onuTQVbo8iUQ==}
+    engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
+    hasBin: true
+    peerDependencies:
+      '@edge-runtime/vm': '*'
+      '@opentelemetry/api': ^1.9.0
+      '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
+      '@vitest/browser-playwright': 4.1.6
+      '@vitest/browser-preview': 4.1.6
+      '@vitest/browser-webdriverio': 4.1.6
+      '@vitest/coverage-istanbul': 4.1.6
+      '@vitest/coverage-v8': 4.1.6
+      '@vitest/ui': 4.1.6
+      happy-dom: '*'
+      jsdom: '*'
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
+    peerDependenciesMeta:
+      '@edge-runtime/vm':
+        optional: true
+      '@opentelemetry/api':
+        optional: true
+      '@types/node':
+        optional: true
+      '@vitest/browser-playwright':
+        optional: true
+      '@vitest/browser-preview':
+        optional: true
+      '@vitest/browser-webdriverio':
+        optional: true
+      '@vitest/coverage-istanbul':
+        optional: true
+      '@vitest/coverage-v8':
+        optional: true
+      '@vitest/ui':
+        optional: true
+      happy-dom:
+        optional: true
+      jsdom:
+        optional: true
+
+  vlq@0.2.3:
+    resolution: {integrity: sha512-DRibZL6DsNhIgYQ+wNdWDL2SL3bKPlVrRiBqV5yuMm++op8W4kGFtaQfCs4KEJn0wBZcHVHJ3eoywX8983k1ow==}
+
   vlq@1.0.1:
     resolution: {integrity: sha512-gQpnTgkubC6hQgdIcRdYGDSDc+SaujOdyesZQMv6JlfQee/9Mp0Qhnys6WxDWvQnL5WZdT7o2Ul187aSt0Rq+w==}
 
@@ -8091,8 +8379,8 @@ snapshots:
   '@babel/helper-define-polyfill-provider@0.6.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-compilation-targets': 7.27.2
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-compilation-targets': 7.28.6
+      '@babel/helper-plugin-utils': 7.28.6
       debug: 4.4.3
       lodash.debounce: 4.0.8
       resolve: 1.22.11
@@ -8102,8 +8390,8 @@ snapshots:
   '@babel/helper-define-polyfill-provider@0.6.5(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-compilation-targets': 7.27.2
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-compilation-targets': 7.28.6
+      '@babel/helper-plugin-utils': 7.28.6
       debug: 4.4.3
       lodash.debounce: 4.0.8
       resolve: 1.22.11
@@ -8114,8 +8402,8 @@ snapshots:
 
   '@babel/helper-member-expression-to-functions@7.28.5':
     dependencies:
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -8171,7 +8459,7 @@ snapshots:
 
   '@babel/helper-optimise-call-expression@7.27.1':
     dependencies:
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.0
 
   '@babel/helper-plugin-utils@7.27.1': {}
 
@@ -8182,7 +8470,7 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-wrap-function': 7.28.3
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -8191,7 +8479,7 @@ snapshots:
       '@babel/core': 7.29.0
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-wrap-function': 7.28.3
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -8200,7 +8488,7 @@ snapshots:
       '@babel/core': 7.28.5
       '@babel/helper-member-expression-to-functions': 7.28.5
       '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -8209,7 +8497,7 @@ snapshots:
       '@babel/core': 7.29.0
       '@babel/helper-member-expression-to-functions': 7.28.5
       '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -8234,8 +8522,8 @@ snapshots:
 
   '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
     dependencies:
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -8248,7 +8536,7 @@ snapshots:
   '@babel/helper-wrap-function@7.28.3':
     dependencies:
       '@babel/template': 7.28.6
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
       '@babel/types': 7.29.0
     transitivePeerDependencies:
       - supports-color
@@ -8348,42 +8636,42 @@ snapshots:
   '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-decorators@7.27.1(@babel/core@7.28.5)':
     dependencies:
@@ -8443,22 +8731,22 @@ snapshots:
   '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-jsx@7.27.1(@babel/core@7.28.5)':
     dependencies:
@@ -8484,12 +8772,12 @@ snapshots:
   '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.28.5)':
     dependencies:
@@ -8504,32 +8792,32 @@ snapshots:
   '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.28.5)':
     dependencies:
@@ -8544,32 +8832,32 @@ snapshots:
   '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.28.5)':
     dependencies:
@@ -9099,22 +9387,22 @@ snapshots:
   '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.28.5)':
     dependencies:
       '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-react-jsx@7.27.1(@babel/core@7.28.5)':
     dependencies:
@@ -9625,6 +9913,11 @@ snapshots:
       effect: 4.0.0-beta.23
       vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
+  '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
+    dependencies:
+      effect: 4.0.0-beta.23
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+
   '@emnapi/core@1.7.1':
     dependencies:
       '@emnapi/wasi-threads': 1.1.0
@@ -9662,6 +9955,9 @@ snapshots:
   '@esbuild/aix-ppc64@0.27.2':
     optional: true
 
+  '@esbuild/aix-ppc64@0.27.7':
+    optional: true
+
   '@esbuild/android-arm64@0.17.19':
     optional: true
 
@@ -9674,6 +9970,9 @@ snapshots:
   '@esbuild/android-arm64@0.27.2':
     optional: true
 
+  '@esbuild/android-arm64@0.27.7':
+    optional: true
+
   '@esbuild/android-arm@0.17.19':
     optional: true
 
@@ -9686,6 +9985,9 @@ snapshots:
   '@esbuild/android-arm@0.27.2':
     optional: true
 
+  '@esbuild/android-arm@0.27.7':
+    optional: true
+
   '@esbuild/android-x64@0.17.19':
     optional: true
 
@@ -9698,6 +10000,9 @@ snapshots:
   '@esbuild/android-x64@0.27.2':
     optional: true
 
+  '@esbuild/android-x64@0.27.7':
+    optional: true
+
   '@esbuild/darwin-arm64@0.17.19':
     optional: true
 
@@ -9710,6 +10015,9 @@ snapshots:
   '@esbuild/darwin-arm64@0.27.2':
     optional: true
 
+  '@esbuild/darwin-arm64@0.27.7':
+    optional: true
+
   '@esbuild/darwin-x64@0.17.19':
     optional: true
 
@@ -9722,6 +10030,9 @@ snapshots:
   '@esbuild/darwin-x64@0.27.2':
     optional: true
 
+  '@esbuild/darwin-x64@0.27.7':
+    optional: true
+
   '@esbuild/freebsd-arm64@0.17.19':
     optional: true
 
@@ -9734,6 +10045,9 @@ snapshots:
   '@esbuild/freebsd-arm64@0.27.2':
     optional: true
 
+  '@esbuild/freebsd-arm64@0.27.7':
+    optional: true
+
   '@esbuild/freebsd-x64@0.17.19':
     optional: true
 
@@ -9746,6 +10060,9 @@ snapshots:
   '@esbuild/freebsd-x64@0.27.2':
     optional: true
 
+  '@esbuild/freebsd-x64@0.27.7':
+    optional: true
+
   '@esbuild/linux-arm64@0.17.19':
     optional: true
 
@@ -9758,6 +10075,9 @@ snapshots:
   '@esbuild/linux-arm64@0.27.2':
     optional: true
 
+  '@esbuild/linux-arm64@0.27.7':
+    optional: true
+
   '@esbuild/linux-arm@0.17.19':
     optional: true
 
@@ -9770,6 +10090,9 @@ snapshots:
   '@esbuild/linux-arm@0.27.2':
     optional: true
 
+  '@esbuild/linux-arm@0.27.7':
+    optional: true
+
   '@esbuild/linux-ia32@0.17.19':
     optional: true
 
@@ -9782,6 +10105,9 @@ snapshots:
   '@esbuild/linux-ia32@0.27.2':
     optional: true
 
+  '@esbuild/linux-ia32@0.27.7':
+    optional: true
+
   '@esbuild/linux-loong64@0.17.19':
     optional: true
 
@@ -9794,6 +10120,9 @@ snapshots:
   '@esbuild/linux-loong64@0.27.2':
     optional: true
 
+  '@esbuild/linux-loong64@0.27.7':
+    optional: true
+
   '@esbuild/linux-mips64el@0.17.19':
     optional: true
 
@@ -9806,6 +10135,9 @@ snapshots:
   '@esbuild/linux-mips64el@0.27.2':
     optional: true
 
+  '@esbuild/linux-mips64el@0.27.7':
+    optional: true
+
   '@esbuild/linux-ppc64@0.17.19':
     optional: true
 
@@ -9818,6 +10150,9 @@ snapshots:
   '@esbuild/linux-ppc64@0.27.2':
     optional: true
 
+  '@esbuild/linux-ppc64@0.27.7':
+    optional: true
+
   '@esbuild/linux-riscv64@0.17.19':
     optional: true
 
@@ -9830,6 +10165,9 @@ snapshots:
   '@esbuild/linux-riscv64@0.27.2':
     optional: true
 
+  '@esbuild/linux-riscv64@0.27.7':
+    optional: true
+
   '@esbuild/linux-s390x@0.17.19':
     optional: true
 
@@ -9842,6 +10180,9 @@ snapshots:
   '@esbuild/linux-s390x@0.27.2':
     optional: true
 
+  '@esbuild/linux-s390x@0.27.7':
+    optional: true
+
   '@esbuild/linux-x64@0.17.19':
     optional: true
 
@@ -9854,12 +10195,18 @@ snapshots:
   '@esbuild/linux-x64@0.27.2':
     optional: true
 
+  '@esbuild/linux-x64@0.27.7':
+    optional: true
+
   '@esbuild/netbsd-arm64@0.25.12':
     optional: true
 
   '@esbuild/netbsd-arm64@0.27.2':
     optional: true
 
+  '@esbuild/netbsd-arm64@0.27.7':
+    optional: true
+
   '@esbuild/netbsd-x64@0.17.19':
     optional: true
 
@@ -9872,12 +10219,18 @@ snapshots:
   '@esbuild/netbsd-x64@0.27.2':
     optional: true
 
+  '@esbuild/netbsd-x64@0.27.7':
+    optional: true
+
   '@esbuild/openbsd-arm64@0.25.12':
     optional: true
 
   '@esbuild/openbsd-arm64@0.27.2':
     optional: true
 
+  '@esbuild/openbsd-arm64@0.27.7':
+    optional: true
+
   '@esbuild/openbsd-x64@0.17.19':
     optional: true
 
@@ -9890,12 +10243,18 @@ snapshots:
   '@esbuild/openbsd-x64@0.27.2':
     optional: true
 
+  '@esbuild/openbsd-x64@0.27.7':
+    optional: true
+
   '@esbuild/openharmony-arm64@0.25.12':
     optional: true
 
   '@esbuild/openharmony-arm64@0.27.2':
     optional: true
 
+  '@esbuild/openharmony-arm64@0.27.7':
+    optional: true
+
   '@esbuild/sunos-x64@0.17.19':
     optional: true
 
@@ -9908,6 +10267,9 @@ snapshots:
   '@esbuild/sunos-x64@0.27.2':
     optional: true
 
+  '@esbuild/sunos-x64@0.27.7':
+    optional: true
+
   '@esbuild/win32-arm64@0.17.19':
     optional: true
 
@@ -9920,6 +10282,9 @@ snapshots:
   '@esbuild/win32-arm64@0.27.2':
     optional: true
 
+  '@esbuild/win32-arm64@0.27.7':
+    optional: true
+
   '@esbuild/win32-ia32@0.17.19':
     optional: true
 
@@ -9932,6 +10297,9 @@ snapshots:
   '@esbuild/win32-ia32@0.27.2':
     optional: true
 
+  '@esbuild/win32-ia32@0.27.7':
+    optional: true
+
   '@esbuild/win32-x64@0.17.19':
     optional: true
 
@@ -9944,6 +10312,9 @@ snapshots:
   '@esbuild/win32-x64@0.27.2':
     optional: true
 
+  '@esbuild/win32-x64@0.27.7':
+    optional: true
+
   '@eslint-community/eslint-utils@4.9.0(eslint@9.39.2(jiti@2.6.1))':
     dependencies:
       eslint: 9.39.2(jiti@2.6.1)
@@ -11219,6 +11590,8 @@ snapshots:
 
   '@react-native/normalize-colors@0.81.5': {}
 
+  '@react-native/polyfills@2.0.0': {}
+
   '@react-native/virtualized-lists@0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       invariant: 2.2.4
@@ -11351,11 +11724,11 @@ snapshots:
     dependencies:
       nanoid: 3.3.11
 
-  '@rolldown/pluginutils@1.0.0-beta.27': {}
-
   '@rolldown/pluginutils@1.0.0-beta.40':
     optional: true
 
+  '@rolldown/pluginutils@1.0.0-rc.3': {}
+
   '@rollup/rollup-android-arm-eabi@4.54.0':
     optional: true
 
@@ -11436,6 +11809,18 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
+  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
+    dependencies:
+      '@react-native/polyfills': 2.0.0
+      esbuild: 0.27.7
+      flow-remove-types: 2.313.0
+      pirates: 4.0.7
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      regenerator-runtime: 0.14.1
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+
   '@standard-schema/spec@1.1.0': {}
 
   '@swc/helpers@0.5.15':
@@ -11728,24 +12113,24 @@ snapshots:
 
   '@types/babel__core@7.20.5':
     dependencies:
-      '@babel/parser': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
       '@types/babel__generator': 7.27.0
       '@types/babel__template': 7.4.4
       '@types/babel__traverse': 7.28.0
 
   '@types/babel__generator@7.27.0':
     dependencies:
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.0
 
   '@types/babel__template@7.4.4':
     dependencies:
-      '@babel/parser': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
 
   '@types/babel__traverse@7.28.0':
     dependencies:
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.0
 
   '@types/chai@5.2.3':
     dependencies:
@@ -12018,14 +12403,14 @@ snapshots:
       '@urql/core': 5.2.0
       wonka: 6.3.5
 
-  '@vitejs/plugin-react@4.7.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.28.5)
-      '@rolldown/pluginutils': 1.0.0-beta.27
+      '@babel/core': 7.29.0
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
+      '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
-      react-refresh: 0.17.0
+      react-refresh: 0.18.0
       vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
@@ -12038,6 +12423,15 @@ snapshots:
       chai: 5.3.3
       tinyrainbow: 2.0.0
 
+  '@vitest/expect@4.1.6':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@vitest/spy': 4.1.6
+      '@vitest/utils': 4.1.6
+      chai: 6.2.2
+      tinyrainbow: 3.1.0
+
   '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@vitest/spy': 3.2.4
@@ -12054,26 +12448,52 @@ snapshots:
     optionalDependencies:
       vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
+  '@vitest/mocker@4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+    dependencies:
+      '@vitest/spy': 4.1.6
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+    optionalDependencies:
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+
   '@vitest/pretty-format@3.2.4':
     dependencies:
       tinyrainbow: 2.0.0
 
+  '@vitest/pretty-format@4.1.6':
+    dependencies:
+      tinyrainbow: 3.1.0
+
   '@vitest/runner@3.2.4':
     dependencies:
       '@vitest/utils': 3.2.4
       pathe: 2.0.3
       strip-literal: 3.1.0
 
+  '@vitest/runner@4.1.6':
+    dependencies:
+      '@vitest/utils': 4.1.6
+      pathe: 2.0.3
+
   '@vitest/snapshot@3.2.4':
     dependencies:
       '@vitest/pretty-format': 3.2.4
       magic-string: 0.30.21
       pathe: 2.0.3
 
+  '@vitest/snapshot@4.1.6':
+    dependencies:
+      '@vitest/pretty-format': 4.1.6
+      '@vitest/utils': 4.1.6
+      magic-string: 0.30.21
+      pathe: 2.0.3
+
   '@vitest/spy@3.2.4':
     dependencies:
       tinyspy: 4.0.4
 
+  '@vitest/spy@4.1.6': {}
+
   '@vitest/ui@3.2.4(vitest@3.2.4)':
     dependencies:
       '@vitest/utils': 3.2.4
@@ -12086,12 +12506,30 @@ snapshots:
       vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     optional: true
 
+  '@vitest/ui@3.2.4(vitest@4.1.6)':
+    dependencies:
+      '@vitest/utils': 3.2.4
+      fflate: 0.8.2
+      flatted: 3.3.4
+      pathe: 2.0.3
+      sirv: 3.0.2
+      tinyglobby: 0.2.15
+      tinyrainbow: 2.0.0
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+    optional: true
+
   '@vitest/utils@3.2.4':
     dependencies:
       '@vitest/pretty-format': 3.2.4
       loupe: 3.2.1
       tinyrainbow: 2.0.0
 
+  '@vitest/utils@4.1.6':
+    dependencies:
+      '@vitest/pretty-format': 4.1.6
+      convert-source-map: 2.0.0
+      tinyrainbow: 3.1.0
+
   '@xmldom/xmldom@0.8.11': {}
 
   abab@2.0.6: {}
@@ -12334,8 +12772,8 @@ snapshots:
 
   babel-plugin-jest-hoist@29.6.3:
     dependencies:
-      '@babel/template': 7.27.2
-      '@babel/types': 7.28.5
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
       '@types/babel__core': 7.20.5
       '@types/babel__traverse': 7.28.0
 
@@ -12479,7 +12917,7 @@ snapshots:
       - '@babel/core'
       - supports-color
 
-  babel-preset-expo@54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.17.0):
+  babel-preset-expo@54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0):
     dependencies:
       '@babel/helper-module-imports': 7.27.1
       '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.28.5)
@@ -12502,7 +12940,7 @@ snapshots:
       babel-plugin-syntax-hermes-parser: 0.29.1
       babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.28.5)
       debug: 4.4.3
-      react-refresh: 0.17.0
+      react-refresh: 0.18.0
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
@@ -12543,7 +12981,7 @@ snapshots:
       - '@babel/core'
       - supports-color
 
-  babel-preset-expo@54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.17.0):
+  babel-preset-expo@54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0):
     dependencies:
       '@babel/helper-module-imports': 7.27.1
       '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.0)
@@ -12566,7 +13004,7 @@ snapshots:
       babel-plugin-syntax-hermes-parser: 0.29.1
       babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.0)
       debug: 4.4.3
-      react-refresh: 0.17.0
+      react-refresh: 0.18.0
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
@@ -12765,6 +13203,8 @@ snapshots:
       loupe: 3.2.1
       pathval: 2.0.1
 
+  chai@6.2.2: {}
+
   chalk@2.4.2:
     dependencies:
       ansi-styles: 3.2.1
@@ -13337,6 +13777,8 @@ snapshots:
 
   es-module-lexer@1.7.0: {}
 
+  es-module-lexer@2.1.0: {}
+
   es-object-atoms@1.1.1:
     dependencies:
       es-errors: 1.3.0
@@ -13473,6 +13915,35 @@ snapshots:
       '@esbuild/win32-ia32': 0.27.2
       '@esbuild/win32-x64': 0.27.2
 
+  esbuild@0.27.7:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.27.7
+      '@esbuild/android-arm': 0.27.7
+      '@esbuild/android-arm64': 0.27.7
+      '@esbuild/android-x64': 0.27.7
+      '@esbuild/darwin-arm64': 0.27.7
+      '@esbuild/darwin-x64': 0.27.7
+      '@esbuild/freebsd-arm64': 0.27.7
+      '@esbuild/freebsd-x64': 0.27.7
+      '@esbuild/linux-arm': 0.27.7
+      '@esbuild/linux-arm64': 0.27.7
+      '@esbuild/linux-ia32': 0.27.7
+      '@esbuild/linux-loong64': 0.27.7
+      '@esbuild/linux-mips64el': 0.27.7
+      '@esbuild/linux-ppc64': 0.27.7
+      '@esbuild/linux-riscv64': 0.27.7
+      '@esbuild/linux-s390x': 0.27.7
+      '@esbuild/linux-x64': 0.27.7
+      '@esbuild/netbsd-arm64': 0.27.7
+      '@esbuild/netbsd-x64': 0.27.7
+      '@esbuild/openbsd-arm64': 0.27.7
+      '@esbuild/openbsd-x64': 0.27.7
+      '@esbuild/openharmony-arm64': 0.27.7
+      '@esbuild/sunos-x64': 0.27.7
+      '@esbuild/win32-arm64': 0.27.7
+      '@esbuild/win32-ia32': 0.27.7
+      '@esbuild/win32-x64': 0.27.7
+
   escalade@3.2.0: {}
 
   escape-html@1.0.3: {}
@@ -13494,7 +13965,7 @@ snapshots:
   eslint-compat-utils@0.5.1(eslint@9.39.2(jiti@2.6.1)):
     dependencies:
       eslint: 9.39.2(jiti@2.6.1)
-      semver: 7.7.3
+      semver: 7.7.4
 
   eslint-config-expo@10.0.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3):
     dependencies:
@@ -13926,7 +14397,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.17.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.0)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
@@ -13937,7 +14408,7 @@ snapshots:
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.17.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
       eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3)
       glob: 13.0.0
@@ -14262,6 +14733,12 @@ snapshots:
 
   flow-enums-runtime@0.0.6: {}
 
+  flow-remove-types@2.313.0:
+    dependencies:
+      hermes-parser: 0.36.0
+      pirates: 3.0.2
+      vlq: 0.2.3
+
   fontfaceobserver@2.3.0: {}
 
   for-each@0.3.5:
@@ -14443,6 +14920,8 @@ snapshots:
 
   hermes-estree@0.32.0: {}
 
+  hermes-estree@0.36.0: {}
+
   hermes-parser@0.29.1:
     dependencies:
       hermes-estree: 0.29.1
@@ -14451,6 +14930,10 @@ snapshots:
     dependencies:
       hermes-estree: 0.32.0
 
+  hermes-parser@0.36.0:
+    dependencies:
+      hermes-estree: 0.36.0
+
   hosted-git-info@7.0.2:
     dependencies:
       lru-cache: 10.4.3
@@ -14730,8 +15213,8 @@ snapshots:
 
   istanbul-lib-instrument@5.2.1:
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/parser': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/parser': 7.29.0
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-coverage: 3.2.2
       semver: 6.3.1
@@ -14740,11 +15223,11 @@ snapshots:
 
   istanbul-lib-instrument@6.0.3:
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/parser': 7.28.5
+      '@babel/core': 7.29.0
+      '@babel/parser': 7.29.0
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-coverage: 3.2.2
-      semver: 7.7.3
+      semver: 7.7.4
     transitivePeerDependencies:
       - supports-color
 
@@ -14849,10 +15332,10 @@ snapshots:
 
   jest-config@29.7.0(@types/node@24.10.4):
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@jest/test-sequencer': 29.7.0
       '@jest/types': 29.6.3
-      babel-jest: 29.7.0(@babel/core@7.28.5)
+      babel-jest: 29.7.0(@babel/core@7.29.0)
       chalk: 4.1.2
       ci-info: 3.9.0
       deepmerge: 4.3.1
@@ -14879,10 +15362,10 @@ snapshots:
 
   jest-config@29.7.0(@types/node@25.3.3):
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@jest/test-sequencer': 29.7.0
       '@jest/types': 29.6.3
-      babel-jest: 29.7.0(@babel/core@7.28.5)
+      babel-jest: 29.7.0(@babel/core@7.29.0)
       chalk: 4.1.2
       ci-info: 3.9.0
       deepmerge: 4.3.1
@@ -14985,10 +15468,6 @@ snapshots:
       - supports-color
       - utf-8-validate
 
-  jest-fixed-jsdom@0.0.9(jest-environment-jsdom@29.7.0):
-    dependencies:
-      jest-environment-jsdom: 29.7.0
-
   jest-get-type@29.6.3: {}
 
   jest-haste-map@29.7.0:
@@ -15028,7 +15507,7 @@ snapshots:
 
   jest-message-util@29.7.0:
     dependencies:
-      '@babel/code-frame': 7.27.1
+      '@babel/code-frame': 7.29.0
       '@jest/types': 29.6.3
       '@types/stack-utils': 2.0.3
       chalk: 4.1.2
@@ -15448,7 +15927,7 @@ snapshots:
 
   make-dir@4.0.0:
     dependencies:
-      semver: 7.7.3
+      semver: 7.7.4
 
   make-error@1.3.6: {}
 
@@ -15805,6 +16284,8 @@ snapshots:
 
   node-int64@0.4.0: {}
 
+  node-modules-regexp@1.0.0: {}
+
   node-releases@2.0.27: {}
 
   normalize-path@3.0.0: {}
@@ -15882,6 +16363,8 @@ snapshots:
       define-properties: 1.2.1
       es-object-atoms: 1.1.1
 
+  obug@2.1.1: {}
+
   ofetch@1.5.1:
     dependencies:
       destr: 2.0.5
@@ -15977,7 +16460,7 @@ snapshots:
 
   parse-json@5.2.0:
     dependencies:
-      '@babel/code-frame': 7.27.1
+      '@babel/code-frame': 7.29.0
       error-ex: 1.3.4
       json-parse-even-better-errors: 2.3.1
       lines-and-columns: 1.2.4
@@ -16036,6 +16519,10 @@ snapshots:
 
   pify@4.0.1: {}
 
+  pirates@3.0.2:
+    dependencies:
+      node-modules-regexp: 1.0.0
+
   pirates@4.0.7: {}
 
   pkg-dir@4.2.0:
@@ -16411,7 +16898,7 @@ snapshots:
 
   react-refresh@0.14.2: {}
 
-  react-refresh@0.17.0: {}
+  react-refresh@0.18.0: {}
 
   react-remove-scroll-bar@2.3.8(@types/react@19.1.17)(react@19.1.0):
     dependencies:
@@ -16493,6 +16980,8 @@ snapshots:
 
   regenerator-runtime@0.13.11: {}
 
+  regenerator-runtime@0.14.1: {}
+
   regexp.prototype.flags@1.5.4:
     dependencies:
       call-bind: 1.0.8
@@ -16657,8 +17146,7 @@ snapshots:
 
   semver@7.7.3: {}
 
-  semver@7.7.4:
-    optional: true
+  semver@7.7.4: {}
 
   send@0.19.2:
     dependencies:
@@ -16905,6 +17393,8 @@ snapshots:
 
   std-env@3.10.0: {}
 
+  std-env@4.1.0: {}
+
   stop-iteration-iterator@1.1.0:
     dependencies:
       es-errors: 1.3.0
@@ -17122,6 +17612,8 @@ snapshots:
 
   tinyrainbow@2.0.0: {}
 
+  tinyrainbow@3.1.0: {}
+
   tinyspy@4.0.4: {}
 
   tmpl@1.0.5: {}
@@ -17192,6 +17684,10 @@ snapshots:
     optionalDependencies:
       typescript: 5.6.3
 
+  tsconfck@3.1.6(typescript@5.9.3):
+    optionalDependencies:
+      typescript: 5.9.3
+
   tsconfig-paths@3.15.0:
     dependencies:
       '@types/json5': 0.0.29
@@ -17528,6 +18024,17 @@ snapshots:
       - supports-color
       - typescript
 
+  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+    dependencies:
+      debug: 4.4.3
+      globrex: 0.1.2
+      tsconfck: 3.1.6(typescript@5.9.3)
+    optionalDependencies:
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+    transitivePeerDependencies:
+      - supports-color
+      - typescript
+
   vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       esbuild: 0.27.2
@@ -17595,7 +18102,7 @@ snapshots:
     optionalDependencies:
       '@types/debug': 4.1.12
       '@types/node': 24.10.4
-      '@vitest/ui': 3.2.4(vitest@3.2.4)
+      '@vitest/ui': 3.2.4(vitest@4.1.6)
       jsdom: 20.0.3
     transitivePeerDependencies:
       - jiti
@@ -17655,6 +18162,38 @@ snapshots:
       - tsx
       - yaml
 
+  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+    dependencies:
+      '@vitest/expect': 4.1.6
+      '@vitest/mocker': 4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/pretty-format': 4.1.6
+      '@vitest/runner': 4.1.6
+      '@vitest/snapshot': 4.1.6
+      '@vitest/spy': 4.1.6
+      '@vitest/utils': 4.1.6
+      es-module-lexer: 2.1.0
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      obug: 2.1.1
+      pathe: 2.0.3
+      picomatch: 4.0.3
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      tinyrainbow: 3.1.0
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      why-is-node-running: 2.3.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 24.10.4
+      '@vitest/ui': 3.2.4(vitest@4.1.6)
+      jsdom: 20.0.3
+    transitivePeerDependencies:
+      - msw
+
+  vlq@0.2.3: {}
+
   vlq@1.0.1: {}
 
   w3c-xmlserializer@4.0.0:

From 6a71e0753173b9f28a47e94d3fb0825455787718 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 11 May 2026 19:22:21 +0200
Subject: [PATCH 016/129] wip: move to reactivity

---
 libraries/react-native/src/client-effect.ts   |  20 ++-
 .../react-native/src/client-react-native.ts   |   6 +-
 libraries/react-native/src/client.tsx         |  18 +--
 libraries/react-native/src/core/event-bus.ts  |  71 ---------
 .../feature-flags/feature-flag-service.ts     |  34 ++++-
 .../core/identity/customer-info-manager.ts    |   3 -
 .../src/core/identity/identity-manager.ts     |  17 ++-
 .../src/core/reactivity/client-state.ts       |  54 +++++++
 .../src/react/hooks/use-atom-value.ts         |  59 ++++++++
 .../src/react/hooks/use-customer.ts           |  50 ++----
 .../src/react/hooks/use-feature-flags.ts      |  46 ++----
 libraries/react-native/tests/client.test.ts   |   4 +-
 .../tests/core/client-effect.test.ts          | 143 +++++++++++++++++-
 .../tests/core/customer-info-manager.test.ts  |   9 +-
 .../tests/core/identity-manager.test.ts       |  50 +++---
 .../tests/helpers/effect-test-harness.ts      |  10 +-
 16 files changed, 373 insertions(+), 221 deletions(-)
 delete mode 100644 libraries/react-native/src/core/event-bus.ts
 create mode 100644 libraries/react-native/src/core/reactivity/client-state.ts
 create mode 100644 libraries/react-native/src/react/hooks/use-atom-value.ts

diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index b3b3b75d5..517c80046 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -1,7 +1,9 @@
 import { Effect } from "effect";
+import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { AnalyticsService } from "./core/analytics/service";
 import type { AnalyticsIngestEvent } from "./core/analytics/types";
+import { currentCustomerAtom } from "./core/reactivity/client-state";
 import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
 import { CustomerInfoManager } from "./core/identity/customer-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
@@ -67,7 +69,15 @@ const makeUnitializedClient = () => ({
         });
 
         yield* customerAttributeManager.syncCustomerAttributes(distinctId);
-        yield* customerInfoManager.getCustomer(distinctId, "fetch");
+        const prefetched = yield* customerInfoManager.getCustomer(
+          distinctId,
+          "fetch"
+        );
+
+        // Publish the prefetched customer so React subscribers see initial
+        // state without having to wait for a hook-driven refetch.
+        const atomRegistry = yield* AtomRegistry.AtomRegistry;
+        atomRegistry.set(currentCustomerAtom, prefetched);
       }
 
       // Fetch the runtime schema from the server's `GET /sdk/schema`
@@ -134,11 +144,17 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         Effect.gen(function* getCurrentCustomer() {
           const identityManager = yield* IdentityManager;
           const customerInfoManager = yield* CustomerInfoManager;
+          const atomRegistry = yield* AtomRegistry.AtomRegistry;
           const distinctId = yield* identityManager.getDistinctId();
-          return yield* customerInfoManager.getCustomer(
+          const customer = yield* customerInfoManager.getCustomer(
             distinctId,
             forceFetch ? "fetch" : "fetch-while-stale"
           );
+          // Publish to the reactive store so any subscribed React hook
+          // re-renders with the latest result (whether cached or freshly
+          // fetched).
+          atomRegistry.set(currentCustomerAtom, customer);
+          return customer;
         }),
 
       getDistinctId: () =>
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index 1088b24bd..c9bc76db2 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -1,8 +1,8 @@
 import Constants from "expo-constants";
+import { AtomRegistry } from "effect/unstable/reactivity";
 import { Platform as RNPlatform } from "react-native";
 
 import { VoidhashClient, type VoidhashClientOptions } from "./client";
-import { EventBus } from "./core/event-bus";
 import { SchemeNotSetError } from "./errors";
 import { voidhashProviderFactory } from "./react/components/provider";
 import { useRetrieveAppStoreProduct } from "./react/hooks/app-store/use-retrieve-app-store-product";
@@ -44,7 +44,7 @@ export function createVoidhashClient(
     throw new SchemeNotSetError();
   }
 
-  const eventBus = new EventBus();
+  const atomRegistry = AtomRegistry.make();
   const platform = RNPlatform.OS === "ios" ? "ios" : "android";
 
   const client = new VoidhashClient(
@@ -55,7 +55,7 @@ export function createVoidhashClient(
     publishableKey,
     readOnly,
     unstableSwallowErrors,
-    eventBus,
+    atomRegistry,
     platform,
     debug,
     options.unstable_internalSchema
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index 97c3c0ada..527009d61 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -1,10 +1,10 @@
 import { Cause, Effect, Exit, Layer, ManagedRuntime, pipe } from "effect";
 import { FetchHttpClient } from "effect/unstable/http";
+import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { VoidhashEffectClient } from "./client-effect";
 import { AsyncStorageCacheAdapter } from "./core/caching/async-storage-cache";
 import { CacheManager } from "./core/caching/cache-manager";
-import { type EventBus, EventBusProvider } from "./core/event-bus";
 import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
 import { CustomerInfoManager } from "./core/identity/customer-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
@@ -49,7 +49,7 @@ const CreateEffectRuntime = (
   ingestUrl: string | undefined,
   publishableKey: string,
   readOnly: boolean,
-  eventBus: EventBus
+  atomRegistry: AtomRegistry.AtomRegistry
 ) =>
   ManagedRuntime.make(
     pipe(
@@ -70,7 +70,7 @@ const CreateEffectRuntime = (
       Layer.provideMerge(
         platform === "ios" ? AppStoreAdapter : GooglePlayAdapter
       ),
-      Layer.provideMerge(Layer.succeed(EventBusProvider, eventBus)),
+      Layer.provideMerge(Layer.succeed(AtomRegistry.AtomRegistry, atomRegistry)),
       Layer.provideMerge(ReactNativePlatformProvider),
       Layer.provideMerge(
         Layer.succeed(SdkConfiguration, {
@@ -116,7 +116,7 @@ export class VoidhashClient {
   private scheme: string;
   private internalSchema: RuntimeSchema | undefined;
   private unstableSwallowErrors: boolean;
-  private eventBus: EventBus;
+  private atomRegistry: AtomRegistry.AtomRegistry;
 
   private effectRuntime: ReturnType<typeof CreateEffectRuntime>;
 
@@ -131,7 +131,7 @@ export class VoidhashClient {
     publishableKey: string,
     readOnly: boolean,
     unstableSwallowErrors: boolean,
-    eventBus: EventBus,
+    atomRegistry: AtomRegistry.AtomRegistry,
     platform: Exclude<PlatformInfo["platform"], "unknown">,
     debug = false,
     internalSchema?: RuntimeSchema
@@ -141,7 +141,7 @@ export class VoidhashClient {
     this.scheme = scheme;
     this.internalSchema = internalSchema;
     this.unstableSwallowErrors = unstableSwallowErrors;
-    this.eventBus = eventBus;
+    this.atomRegistry = atomRegistry;
     this.effectRuntime = CreateEffectRuntime(
       platform,
       baseUrl,
@@ -149,7 +149,7 @@ export class VoidhashClient {
       ingestUrl,
       publishableKey,
       readOnly,
-      eventBus
+      atomRegistry
     );
     this.unitializedClient = VoidhashEffectClient.makeUnitializedClient();
   }
@@ -447,8 +447,8 @@ export class VoidhashClient {
   // Internal helpers
   // ===============================
 
-  internal_getEventBus() {
-    return this.eventBus;
+  internal_getAtomRegistry() {
+    return this.atomRegistry;
   }
 
   /**
diff --git a/libraries/react-native/src/core/event-bus.ts b/libraries/react-native/src/core/event-bus.ts
deleted file mode 100644
index f475f1bb6..000000000
--- a/libraries/react-native/src/core/event-bus.ts
+++ /dev/null
@@ -1,71 +0,0 @@
-import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
-import { ServiceMap } from "effect";
-
-export interface CustomerFetchedEvent {
-  type: "customer-fetched";
-  customer: SdkCustomer;
-}
-
-export interface CustomerSignedOutEvent {
-  type: "customer-signed-out";
-}
-
-export interface CustomerIdentifiedEvent {
-  type: "customer-identified";
-}
-
-export interface FeatureFlagsFetchedEvent {
-  readonly flags: ReadonlyArray<{
-    readonly enabled: boolean;
-    readonly key: string;
-    readonly payload?: unknown | null;
-    readonly variantKey: string | null;
-  }>;
-}
-
-export interface VoidhashEvents {
-  "customer-fetched": SdkCustomer;
-  // biome-ignore lint/suspicious/noConfusingVoidType: it specifies that the event has no payload
-  "customer-signed-out": void;
-  // biome-ignore lint/suspicious/noConfusingVoidType: it specifies that the event has no payload
-  "customer-identified": void;
-  "feature-flags-fetched": FeatureFlagsFetchedEvent;
-}
-
-export type VoidhashClientEvent = keyof VoidhashEvents;
-
-export class EventBus {
-  private listeners: {
-    [key in VoidhashClientEvent]: ((...args: VoidhashEvents[key][]) => void)[];
-  } = {
-    "customer-fetched": [],
-    "customer-identified": [],
-    "customer-signed-out": [],
-    "feature-flags-fetched": [],
-  };
-
-  on<TEvent extends VoidhashClientEvent>(
-    event: TEvent,
-    listener: (...args: VoidhashEvents[TEvent][]) => void
-  ) {
-    this.listeners[event] = this.listeners[event] || [];
-    this.listeners[event].push(listener);
-
-    return () => {
-      (this.listeners[event] as ((
-        ...args: VoidhashEvents[TEvent][]
-      ) => void)[]) = this.listeners[event].filter((l) => l !== listener);
-    };
-  }
-
-  emit<TEvent extends VoidhashClientEvent>(
-    event: TEvent,
-    ...args: VoidhashEvents[TEvent][]
-  ) {
-    for (const listener of this.listeners[event]) {
-      listener(...args);
-    }
-  }
-}
-
-export class EventBusProvider extends ServiceMap.Service<EventBusProvider, EventBus>()("rn-voidhash/EventBusProvider") {}
diff --git a/libraries/react-native/src/core/feature-flags/feature-flag-service.ts b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
index 8fbcd782b..48063777d 100644
--- a/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
+++ b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
@@ -1,9 +1,13 @@
 import { Effect, Layer, ServiceMap } from "effect";
+import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { CacheManager } from "../caching/cache-manager";
-import { EventBusProvider } from "../event-bus";
 import { IdentityManager } from "../identity/identity-manager";
 import { ApiClient } from "../networking/api-client";
+import {
+  featureFlagsByKeyAtom,
+  normalizeFeatureFlagKeys,
+} from "../reactivity/client-state";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 
 export interface FeatureFlagsResult {
@@ -17,13 +21,16 @@ export interface FeatureFlagsResult {
 
 const FEATURE_FLAGS_CACHE_TTL_MS = 1000 * 60 * 5;
 
+// Sort a *copy* of the caller's array — the input is part of their data and
+// must not be mutated, which the previous in-place `.sort()` was doing.
 const generateCacheKey = (flagKeys: string[] | undefined) =>
-  `feature-flags:${flagKeys?.sort().join(",") ?? "all"}`;
+  `feature-flags:${flagKeys && flagKeys.length > 0 ? [...flagKeys].sort().join(",") : "all"}`;
 
 /**
- * Evaluates feature flags via the SDK API with a 5-minute cache. Emits a
- * `feature-flags-fetched` event on the event bus whenever a fresh result is
- * received from the server (cache hits don't re-emit).
+ * Evaluates feature flags via the SDK API with a 5-minute cache. Publishes
+ * each result (cached or fresh) into the reactive `featureFlagsByKeyAtom`
+ * keyed by the normalized request signature, so React hooks can subscribe to
+ * exactly the slice of state they asked for.
  */
 export class FeatureFlagService extends ServiceMap.Service<FeatureFlagService>()(
   "rn-voidhash/FeatureFlagService",
@@ -31,14 +38,27 @@ export class FeatureFlagService extends ServiceMap.Service<FeatureFlagService>()
     make: Effect.gen(function* () {
       const cacheManager = yield* CacheManager;
       const apiClient = yield* ApiClient;
-      const eventBus = yield* EventBusProvider;
+      const atomRegistry = yield* AtomRegistry.AtomRegistry;
       const identityManager = yield* IdentityManager;
 
+      const publishResult = (
+        flagKeys: string[] | undefined,
+        result: FeatureFlagsResult
+      ) => {
+        const normalizedKey = normalizeFeatureFlagKeys(flagKeys);
+        const current = atomRegistry.get(featureFlagsByKeyAtom);
+        atomRegistry.set(featureFlagsByKeyAtom, {
+          ...current,
+          [normalizedKey]: result,
+        });
+      };
+
       const getFeatureFlags = (flagKeys?: string[]) =>
         Effect.gen(function* () {
           const cacheKey = generateCacheKey(flagKeys);
           const cached = yield* cacheManager.get<FeatureFlagsResult>(cacheKey);
           if (cached && !cached.isExpired && !cached.isStale) {
+            publishResult(flagKeys, cached.value);
             return cached.value;
           }
 
@@ -56,7 +76,7 @@ export class FeatureFlagService extends ServiceMap.Service<FeatureFlagService>()
             ttl: FEATURE_FLAGS_CACHE_TTL_MS,
           });
 
-          eventBus.emit("feature-flags-fetched", result);
+          publishResult(flagKeys, result);
           return result;
         });
 
diff --git a/libraries/react-native/src/core/identity/customer-info-manager.ts b/libraries/react-native/src/core/identity/customer-info-manager.ts
index a9cfbe3e5..d14860b9e 100644
--- a/libraries/react-native/src/core/identity/customer-info-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-info-manager.ts
@@ -2,14 +2,12 @@ import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
-import { EventBusProvider } from "../event-bus";
 import { ApiClient } from "../networking/api-client";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 
 const make = Effect.gen(function* effect() {
   const cacheManager = yield* CacheManager;
   const apiClient = yield* ApiClient;
-  const eventBus = yield* EventBusProvider;
 
   const generateCustomerCacheKey = (distinctId: string) =>
     `customer:${distinctId}`;
@@ -35,7 +33,6 @@ const make = Effect.gen(function* effect() {
           "x-distinct-id": distinctId,
         },
       });
-      eventBus.emit("customer-fetched", result);
       yield* cache(distinctId, result);
       return result;
     });
diff --git a/libraries/react-native/src/core/identity/identity-manager.ts b/libraries/react-native/src/core/identity/identity-manager.ts
index d05e9e6e2..f763c656e 100644
--- a/libraries/react-native/src/core/identity/identity-manager.ts
+++ b/libraries/react-native/src/core/identity/identity-manager.ts
@@ -1,9 +1,13 @@
 import { Effect, Layer, ServiceMap } from "effect";
+import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../caching/cache-manager";
-import { EventBusProvider } from "../event-bus";
 import { ApiClient } from "../networking/api-client";
+import {
+  currentCustomerAtom,
+  featureFlagsByKeyAtom,
+} from "../reactivity/client-state";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 import { CustomerAttributeManager } from "./customer-attribute-manager";
 import { CustomerInfoManager } from "./customer-info-manager";
@@ -14,7 +18,7 @@ const make = Effect.gen(function* effect() {
   const cacheManager = yield* CacheManager;
   const customerAttributeManager = yield* CustomerAttributeManager;
   const customerInfoManager = yield* CustomerInfoManager;
-  const eventBus = yield* EventBusProvider;
+  const atomRegistry = yield* AtomRegistry.AtomRegistry;
   const apiClient = yield* ApiClient;
 
   /**
@@ -67,11 +71,13 @@ const make = Effect.gen(function* effect() {
         customerInfoManager.cache(distinctId, identifyRequest),
       ]);
 
-      eventBus.emit("customer-identified");
-      eventBus.emit("customer-fetched", {
+      // Identity has changed: surface the new customer and clear stale
+      // feature flag state, since flag evaluations are identity-scoped.
+      atomRegistry.set(currentCustomerAtom, {
         ...identifyRequest,
         distinctId,
       });
+      atomRegistry.set(featureFlagsByKeyAtom, {});
     });
 
   const reset = () =>
@@ -81,7 +87,8 @@ const make = Effect.gen(function* effect() {
         currentDistinctId
       );
       yield* cacheManager.clear();
-      eventBus.emit("customer-signed-out");
+      atomRegistry.set(currentCustomerAtom, null);
+      atomRegistry.set(featureFlagsByKeyAtom, {});
     });
 
   // Helpers
diff --git a/libraries/react-native/src/core/reactivity/client-state.ts b/libraries/react-native/src/core/reactivity/client-state.ts
new file mode 100644
index 000000000..d44cc33f4
--- /dev/null
+++ b/libraries/react-native/src/core/reactivity/client-state.ts
@@ -0,0 +1,54 @@
+import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
+import { Atom } from "effect/unstable/reactivity";
+
+import type { FeatureFlagsResult } from "../feature-flags/feature-flag-service";
+
+export type { FeatureFlagsResult };
+
+/**
+ * Reactive store of the currently identified customer. Written by the
+ * customer/identity facade paths and read by `useCurrentCustomer`.
+ */
+export const currentCustomerAtom: Atom.Writable<SdkCustomer | null> =
+  Atom.make<SdkCustomer | null>(null);
+
+/**
+ * Reactive store of feature flag results, keyed by their normalized flag-key
+ * request signature (see {@link normalizeFeatureFlagKeys}). Keeping every
+ * request set in its own slot prevents one hook's fetch from overwriting the
+ * value of another hook that asked for a different set of flags.
+ */
+export const featureFlagsByKeyAtom: Atom.Writable<
+  Readonly<Record<string, FeatureFlagsResult>>
+> = Atom.make<Readonly<Record<string, FeatureFlagsResult>>>({});
+
+/**
+ * Normalizes a feature-flag request signature so that any callers asking for
+ * the same set of keys (regardless of order) share the same atom slot. We
+ * sort a copy because the caller's array is part of their input and must not
+ * be mutated.
+ */
+export const normalizeFeatureFlagKeys = (
+  flagKeys?: readonly string[]
+): string => {
+  if (!flagKeys || flagKeys.length === 0) {
+    return "all";
+  }
+  return [...flagKeys].sort().join(",");
+};
+
+const featureFlagsForNormalizedKeyAtom = Atom.family((normalizedKey: string) =>
+  Atom.make((get): FeatureFlagsResult | null => {
+    const byKey = get(featureFlagsByKeyAtom);
+    return byKey[normalizedKey] ?? null;
+  })
+);
+
+/**
+ * Derived atom that returns the cached `FeatureFlagsResult` for a particular
+ * set of flag keys (or `null` if nothing has been published yet). Reusing
+ * the same normalized key across requests means callers subscribe to the
+ * minimum slice of state they care about.
+ */
+export const featureFlagsForKeysAtom = (flagKeys?: readonly string[]) =>
+  featureFlagsForNormalizedKeyAtom(normalizeFeatureFlagKeys(flagKeys));
diff --git a/libraries/react-native/src/react/hooks/use-atom-value.ts b/libraries/react-native/src/react/hooks/use-atom-value.ts
new file mode 100644
index 000000000..7419b47fb
--- /dev/null
+++ b/libraries/react-native/src/react/hooks/use-atom-value.ts
@@ -0,0 +1,59 @@
+import React from "react";
+import type { Atom, AtomRegistry } from "effect/unstable/reactivity";
+
+interface AtomStore<A> {
+  readonly subscribe: (notify: () => void) => () => void;
+  readonly snapshot: () => A;
+}
+
+// Mirrors the WeakMap caching pattern used by `@effect/atom-react` so the
+// `useSyncExternalStore` subscribe/snapshot pair is stable across renders.
+const storeRegistry = new WeakMap<
+  AtomRegistry.AtomRegistry,
+  WeakMap<Atom.Atom<unknown>, AtomStore<unknown>>
+>();
+
+function getStore<A>(
+  registry: AtomRegistry.AtomRegistry,
+  atom: Atom.Atom<A>
+): AtomStore<A> {
+  let stores = storeRegistry.get(registry);
+  if (stores === undefined) {
+    stores = new WeakMap();
+    storeRegistry.set(registry, stores);
+  }
+
+  const cached = stores.get(atom as Atom.Atom<unknown>);
+  if (cached !== undefined) {
+    return cached as AtomStore<A>;
+  }
+
+  const store: AtomStore<A> = {
+    subscribe: (notify) => registry.subscribe(atom, notify),
+    snapshot: () => registry.get(atom),
+  };
+  stores.set(atom as Atom.Atom<unknown>, store as AtomStore<unknown>);
+  return store;
+}
+
+/**
+ * Reads the value of an Effect `Atom` and re-renders whenever it changes.
+ *
+ * Internal binding around `React.useSyncExternalStore`, intentionally scoped
+ * to the SDK so we don't pull in `@effect/atom-react` (which targets a newer
+ * React peer range than this package currently supports).
+ */
+export function useAtomValue<A>(
+  registry: AtomRegistry.AtomRegistry,
+  atom: Atom.Atom<A>
+): A {
+  const store = getStore(registry, atom);
+  const value = React.useSyncExternalStore(store.subscribe, store.snapshot);
+
+  // Atoms are lazy: without an active mount they may be removed from the
+  // registry and lose listeners. Mounting on commit keeps the atom alive for
+  // the lifetime of the component subscription.
+  React.useEffect(() => registry.mount(atom), [registry, atom]);
+
+  return value;
+}
diff --git a/libraries/react-native/src/react/hooks/use-customer.ts b/libraries/react-native/src/react/hooks/use-customer.ts
index c0ea42fad..7c17feade 100644
--- a/libraries/react-native/src/react/hooks/use-customer.ts
+++ b/libraries/react-native/src/react/hooks/use-customer.ts
@@ -1,9 +1,10 @@
-import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
-import React, { useCallback, useEffect, useMemo, useState } from "react";
+import React, { useCallback, useMemo } from "react";
 
 import type { VoidhashClient } from "../../client";
+import { currentCustomerAtom } from "../../core/reactivity/client-state";
 import type { VoidhashContext } from "../components/provider";
 import useAsyncFunction from "./use-async-function";
+import { useAtomValue } from "./use-atom-value";
 
 export function currentCustomerHookFactory(
   client: VoidhashClient,
@@ -11,54 +12,25 @@ export function currentCustomerHookFactory(
 ) {
   function useCurrentCustomer() {
     const voidhashContext = React.useContext(vhContext);
-    const [customer, setCustomer] = useState<SdkCustomer | null>(null);
 
-    const setCustomerIfDifferent = useCallback(
-      (newCustomer: SdkCustomer | null) => {
-        if (JSON.stringify(customer) === JSON.stringify(newCustomer)) {
-          return;
-        }
-        setCustomer(newCustomer);
-      },
-      [customer]
-    );
-
-    // Loading customer
     const getCustomerCallback = useCallback(
       () => client.getCurrentCustomer(),
       []
     );
 
-    const {
-      data: loadedCustomer,
-      isLoading,
-      error,
-      refetch,
-    } = useAsyncFunction(getCustomerCallback, {
+    const { isLoading, error, refetch } = useAsyncFunction(getCustomerCallback, {
       enabled: voidhashContext?.isInitialized,
     });
 
-    // Listen for customer updates. Update state if there was a change. This is used to sync state between uses of this hook and for background updates.
-    useEffect(() => {
-      const eventBus = client.internal_getEventBus();
-      const removeListener = eventBus.on("customer-fetched", (newCustomer) => {
-        setCustomerIfDifferent(newCustomer);
-      });
-
-      return () => {
-        removeListener();
-      };
-    }, [setCustomerIfDifferent]);
-
-    // Processing
-    const data = useMemo(
-      () => ({
-        ...customer,
-      }),
-      [customer]
+    const customer = useAtomValue(
+      client.internal_getAtomRegistry(),
+      currentCustomerAtom
     );
 
-    setCustomerIfDifferent(loadedCustomer ?? null);
+    // Preserve the previous return shape: `data` spreads the customer fields,
+    // so callers reading e.g. `data.email` keep working and `null` becomes
+    // `{}` rather than `null`.
+    const data = useMemo(() => ({ ...customer }), [customer]);
 
     return {
       data,
diff --git a/libraries/react-native/src/react/hooks/use-feature-flags.ts b/libraries/react-native/src/react/hooks/use-feature-flags.ts
index 6c2c39ef2..24167448f 100644
--- a/libraries/react-native/src/react/hooks/use-feature-flags.ts
+++ b/libraries/react-native/src/react/hooks/use-feature-flags.ts
@@ -1,11 +1,10 @@
-import React, { useCallback, useEffect, useMemo, useState } from "react";
+import React, { useCallback, useMemo } from "react";
 
 import type { VoidhashClient } from "../../client";
-import type { FeatureFlagsFetchedEvent } from "../../core/event-bus";
+import { featureFlagsForKeysAtom } from "../../core/reactivity/client-state";
 import type { VoidhashContext } from "../components/provider";
 import useAsyncFunction from "./use-async-function";
-
-type FeatureFlagsResult = FeatureFlagsFetchedEvent;
+import { useAtomValue } from "./use-atom-value";
 
 export function featureFlagsHookFactory(
   client: VoidhashClient,
@@ -13,47 +12,22 @@ export function featureFlagsHookFactory(
 ) {
   function useFeatureFlags(flagKeys?: string[]) {
     const voidhashContext = React.useContext(vhContext);
-    const [flags, setFlags] = useState<FeatureFlagsResult | null>(null);
-
-    const setFlagsIfDifferent = useCallback(
-      (newFlags: FeatureFlagsResult | null) => {
-        if (JSON.stringify(flags) === JSON.stringify(newFlags)) {
-          return;
-        }
-        setFlags(newFlags);
-      },
-      [flags]
-    );
 
     const fetchFlags = useCallback(
       () => client.getFeatureFlags(flagKeys),
       [flagKeys]
     );
 
-    const {
-      data: loadedFlags,
-      isLoading,
-      error,
-      refetch,
-    } = useAsyncFunction(fetchFlags, {
+    const { isLoading, error, refetch } = useAsyncFunction(fetchFlags, {
       enabled: voidhashContext?.isInitialized,
     });
 
-    useEffect(() => {
-      const eventBus = client.internal_getEventBus();
-      const removeListener = eventBus.on(
-        "feature-flags-fetched",
-        (newFlags) => {
-          setFlagsIfDifferent(newFlags);
-        }
-      );
-
-      return () => {
-        removeListener();
-      };
-    }, [setFlagsIfDifferent]);
-
-    setFlagsIfDifferent(loadedFlags ?? null);
+    // Subscribe to only the slice of flag state matching our request. The
+    // `featureFlagsForKeysAtom` family memoizes by normalized key so two
+    // hooks asking for the same keys (in any order) share an atom, and hooks
+    // asking for different keys can't trample each other.
+    const flagsAtom = useMemo(() => featureFlagsForKeysAtom(flagKeys), [flagKeys]);
+    const flags = useAtomValue(client.internal_getAtomRegistry(), flagsAtom);
 
     const isEnabled = useCallback(
       (key: string) =>
diff --git a/libraries/react-native/tests/client.test.ts b/libraries/react-native/tests/client.test.ts
index 810f00c12..04f5e0a45 100644
--- a/libraries/react-native/tests/client.test.ts
+++ b/libraries/react-native/tests/client.test.ts
@@ -1,4 +1,5 @@
 import { Exit } from "effect";
+import { AtomRegistry } from "effect/unstable/reactivity";
 import { vi } from "vitest";
 import { describe, expect, it } from "./helpers/effect-vitest";
 
@@ -42,7 +43,6 @@ vi.mock("../src/core/platform/react-native-platform-provider", async () => {
 });
 
 import { VoidhashClient } from "../src/client";
-import { EventBus } from "../src/core/event-bus";
 import {
   ReadOnlyModePurchaseNotAllowedError,
   VoidhashError,
@@ -58,7 +58,7 @@ function createClient(readOnly = false, unstableSwallowErrors = false) {
     "pk_test",
     readOnly,
     unstableSwallowErrors,
-    new EventBus(),
+    AtomRegistry.make(),
     "ios",
     false,
     createTestSchema()
diff --git a/libraries/react-native/tests/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
index afc8a9d3d..7a59a1d57 100644
--- a/libraries/react-native/tests/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -11,11 +11,16 @@ import { Product, SubscriptionProduct } from "../../src/core/entities/product";
 import { Transaction } from "../../src/core/entities/transaction";
 import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
 import { SDK_VERSION } from "../../src/core/constants";
+import {
+  currentCustomerAtom,
+  featureFlagsForKeysAtom,
+} from "../../src/core/reactivity/client-state";
 import {
   createApiClientDouble,
   createEffectTestHarness,
   createInMemoryCacheAdapter,
   createPaymentAdapterDouble,
+  createSdkCustomer,
 } from "../helpers/effect-test-harness";
 import { describe, expect, it } from "../helpers/effect-vitest";
 import { createTestSchema } from "../helpers/test-schema";
@@ -140,7 +145,7 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
-  it("getFeatureFlags caches by sorted keys and emits event only for fetch", async () => {
+  it("getFeatureFlags caches by sorted keys and publishes to the reactive atom", async () => {
     const schema = createTestSchema();
     const apiDouble = createApiClientDouble({
       evaluateFeatureFlagsResult: {
@@ -164,18 +169,17 @@ describe("VoidhashEffectClient", () => {
     const initializedClient = await harness.runtime.runPromise(
       VoidhashEffectClient.makeInitializedClient({ schema })
     );
-    const events: string[] = [];
-    const remove = harness.eventBus.on("feature-flags-fetched", () => {
-      events.push("feature-flags-fetched");
-    });
 
     try {
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager.asEffect(), (manager) => manager.set("distinctId", "feature-user"))
       );
 
+      const inputKeys = ["b", "a"];
+      const inputSnapshot = [...inputKeys];
+
       const first = await harness.runtime.runPromise(
-        initializedClient.getFeatureFlags(["b", "a"])
+        initializedClient.getFeatureFlags(inputKeys)
       );
       const second = await harness.runtime.runPromise(
         initializedClient.getFeatureFlags(["a", "b"])
@@ -184,9 +188,132 @@ describe("VoidhashEffectClient", () => {
       expect(first.flags).toHaveLength(1);
       expect(second).toEqual(first);
       expect(apiDouble.state.evaluateFeatureFlagsCalls).toHaveLength(1);
-      expect(events).toEqual(["feature-flags-fetched"]);
+
+      // The caller's input array must remain in its original order — the
+      // service must sort a copy, not mutate the input.
+      expect(inputKeys).toEqual(inputSnapshot);
+
+      // Both reversed and original orders observe the same atom slot.
+      const publishedForBA = harness.atomRegistry.get(
+        featureFlagsForKeysAtom(["b", "a"])
+      );
+      const publishedForAB = harness.atomRegistry.get(
+        featureFlagsForKeysAtom(["a", "b"])
+      );
+      expect(publishedForBA).toEqual(first);
+      expect(publishedForAB).toEqual(first);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("maintains separate atom entries for distinct flag-key requests", async () => {
+    const schema = createTestSchema();
+    const responses: Record<string, { flags: Array<{ enabled: boolean; key: string; payload: unknown; variantKey: string | null }> }> = {
+      a: { flags: [{ enabled: true, key: "a", payload: null, variantKey: null }] },
+      b: { flags: [{ enabled: false, key: "b", payload: null, variantKey: null }] },
+    };
+    const apiDouble = createApiClientDouble();
+    (apiDouble.apiClient as {
+      sdk: {
+        evaluateFeatureFlags: (request: {
+          headers: Record<string, unknown>;
+          payload?: { flagKeys?: string[] };
+        }) => unknown;
+      };
+    }).sdk.evaluateFeatureFlags = (request) => {
+      apiDouble.state.evaluateFeatureFlagsCalls.push(request);
+      const key = request.payload?.flagKeys?.[0] ?? "all";
+      return Effect.succeed(responses[key] ?? { flags: [] });
+    };
+
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
+
+    try {
+      await harness.runtime.runPromise(initializedClient.getFeatureFlags(["a"]));
+      await harness.runtime.runPromise(initializedClient.getFeatureFlags(["b"]));
+
+      const forA = harness.atomRegistry.get(featureFlagsForKeysAtom(["a"]));
+      const forB = harness.atomRegistry.get(featureFlagsForKeysAtom(["b"]));
+      expect(forA?.flags[0]?.key).toBe("a");
+      expect(forB?.flags[0]?.key).toBe("b");
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("getCurrentCustomer publishes both cached and freshly fetched results to the reactive atom", async () => {
+    const schema = createTestSchema();
+    const fetched = createSdkCustomer("fetched-customer");
+    const apiDouble = createApiClientDouble({ getCustomerResult: fetched });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema })
+    );
+
+    try {
+      await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.set("distinctId", "fetched-customer")
+        )
+      );
+
+      // First call fetches and publishes the network result.
+      await harness.runtime.runPromise(
+        initializedClient.getCurrentCustomer(true)
+      );
+      expect(harness.atomRegistry.get(currentCustomerAtom)).toEqual(fetched);
+
+      // Reset atom then verify a cached read still publishes back.
+      harness.atomRegistry.set(currentCustomerAtom, null);
+      await harness.runtime.runPromise(
+        initializedClient.getCurrentCustomer()
+      );
+      expect(harness.atomRegistry.get(currentCustomerAtom)).toEqual(fetched);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("init without distinct id publishes the prefetched customer to the reactive atom", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble();
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+
+    try {
+      await harness.runtime.runPromise(
+        VoidhashEffectClient.makeUnitializedClient().init({
+          internalSchema: schema,
+        })
+      );
+
+      const published = harness.atomRegistry.get(currentCustomerAtom);
+      expect(published).not.toBeNull();
+      expect(
+        published?.distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)
+      ).toBe(true);
     } finally {
-      remove();
       await harness.runtime.dispose();
     }
   });
diff --git a/libraries/react-native/tests/core/customer-info-manager.test.ts b/libraries/react-native/tests/core/customer-info-manager.test.ts
index fdaea8b58..e5f95cfa6 100644
--- a/libraries/react-native/tests/core/customer-info-manager.test.ts
+++ b/libraries/react-native/tests/core/customer-info-manager.test.ts
@@ -48,7 +48,7 @@ describe("CustomerInfoManager", () => {
     }
   });
 
-  it("fetch policy always requests API, updates cache and emits event", async () => {
+  it("fetch policy always requests API and updates cache", async () => {
     const apiDouble = createApiClientDouble({
       getCustomerResult: createSdkCustomer("fetched-user"),
     });
@@ -60,11 +60,6 @@ describe("CustomerInfoManager", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
 
-    const fetchedEvents: string[] = [];
-    const remove = harness.eventBus.on("customer-fetched", (customer) => {
-      fetchedEvents.push(customer.distinctId);
-    });
-
     try {
       const result = await harness.runtime.runPromise(
         Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
@@ -84,9 +79,7 @@ describe("CustomerInfoManager", () => {
       expect(result.distinctId).toBe("fetched-user");
       expect(apiDouble.state.getCustomerCalls).toHaveLength(1);
       expect(cached?.value.distinctId).toBe("fetched-user");
-      expect(fetchedEvents).toEqual(["fetched-user"]);
     } finally {
-      remove();
       await harness.runtime.dispose();
     }
   });
diff --git a/libraries/react-native/tests/core/identity-manager.test.ts b/libraries/react-native/tests/core/identity-manager.test.ts
index dae9f8462..ff5b9ce2f 100644
--- a/libraries/react-native/tests/core/identity-manager.test.ts
+++ b/libraries/react-native/tests/core/identity-manager.test.ts
@@ -5,11 +5,16 @@ import { CacheManager } from "../../src/core/caching/cache-manager";
 import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
 import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
 import { IdentityManager } from "../../src/core/identity/identity-manager";
+import {
+  currentCustomerAtom,
+  featureFlagsByKeyAtom,
+} from "../../src/core/reactivity/client-state";
 import {
   createApiClientDouble,
   createEffectTestHarness,
   createInMemoryCacheAdapter,
   createPaymentAdapterDouble,
+  createSdkCustomer,
 } from "../helpers/effect-test-harness";
 import { describe, expect, it } from "../helpers/effect-vitest";
 
@@ -64,7 +69,7 @@ describe("IdentityManager", () => {
     }
   });
 
-  it("identify syncs previous traits, updates cache and emits events", async () => {
+  it("identify syncs previous traits, updates cache and publishes new customer", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -74,17 +79,12 @@ describe("IdentityManager", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
 
-    const identifiedEvents: string[] = [];
-    const fetchedEvents: string[] = [];
-
-    const removeIdentified = harness.eventBus.on("customer-identified", () => {
-      identifiedEvents.push("customer-identified");
-    });
-    const removeFetched = harness.eventBus.on("customer-fetched", (customer) => {
-      fetchedEvents.push(customer.distinctId);
-    });
-
     try {
+      // Seed feature flag state to verify identity changes clear it.
+      harness.atomRegistry.set(featureFlagsByKeyAtom, {
+        all: { flags: [{ enabled: true, key: "k", payload: null, variantKey: null }] },
+      });
+
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager.asEffect(), (manager) =>
           Effect.all([
@@ -130,16 +130,16 @@ describe("IdentityManager", () => {
 
       expect(cachedDistinctId).toBe("new-user");
       expect(cachedCustomer?.value.distinctId).toBe("new-user");
-      expect(identifiedEvents).toEqual(["customer-identified"]);
-      expect(fetchedEvents).toEqual(["new-user"]);
+
+      const publishedCustomer = harness.atomRegistry.get(currentCustomerAtom);
+      expect(publishedCustomer?.distinctId).toBe("new-user");
+      expect(harness.atomRegistry.get(featureFlagsByKeyAtom)).toEqual({});
     } finally {
-      removeIdentified();
-      removeFetched();
       await harness.runtime.dispose();
     }
   });
 
-  it("reset syncs attributes, clears cache and emits signed out event", async () => {
+  it("reset syncs attributes, clears cache and resets reactive state", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -149,12 +149,16 @@ describe("IdentityManager", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
 
-    const signOutEvents: string[] = [];
-    const remove = harness.eventBus.on("customer-signed-out", () => {
-      signOutEvents.push("customer-signed-out");
-    });
-
     try {
+      // Seed reactive state so we can assert reset clears it.
+      harness.atomRegistry.set(
+        currentCustomerAtom,
+        createSdkCustomer("signed-in-user")
+      );
+      harness.atomRegistry.set(featureFlagsByKeyAtom, {
+        all: { flags: [] },
+      });
+
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager.asEffect(), (manager) =>
           Effect.all([
@@ -189,9 +193,9 @@ describe("IdentityManager", () => {
       );
       expect(distinctIdFromCache).toBeNull();
       expect(cacheKeys).toEqual([]);
-      expect(signOutEvents).toEqual(["customer-signed-out"]);
+      expect(harness.atomRegistry.get(currentCustomerAtom)).toBeNull();
+      expect(harness.atomRegistry.get(featureFlagsByKeyAtom)).toEqual({});
     } finally {
-      remove();
       await harness.runtime.dispose();
     }
   });
diff --git a/libraries/react-native/tests/helpers/effect-test-harness.ts b/libraries/react-native/tests/helpers/effect-test-harness.ts
index e955cd6dc..99dfe94b6 100644
--- a/libraries/react-native/tests/helpers/effect-test-harness.ts
+++ b/libraries/react-native/tests/helpers/effect-test-harness.ts
@@ -1,12 +1,12 @@
 import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import { Effect, Layer, ManagedRuntime, pipe } from "effect";
 import { FetchHttpClient } from "effect/unstable/http";
+import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { CacheAdapter } from "../../src/core/caching/cache-adapter";
 import { CacheManager } from "../../src/core/caching/cache-manager";
 import { Product, type SubscriptionProduct } from "../../src/core/entities/product";
 import { Transaction } from "../../src/core/entities/transaction";
-import { EventBus, EventBusProvider } from "../../src/core/event-bus";
 import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
 import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
 import { IdentityManager } from "../../src/core/identity/identity-manager";
@@ -234,10 +234,10 @@ export function createLifecycleAdapterDouble() {
 
 export interface EffectTestHarnessOptions {
   apiClient: unknown;
+  atomRegistry?: AtomRegistry.AtomRegistry;
   baseUrl?: string;
   cacheAdapter: ReturnType<typeof createInMemoryCacheAdapter>["adapter"];
   debug?: boolean;
-  eventBus?: EventBus;
   fetch?: typeof globalThis.fetch;
   ingestUrl?: string;
   lifecycleAdapter?: ReturnType<typeof createLifecycleAdapterDouble>;
@@ -261,7 +261,7 @@ const defaultPlatformInfo: PlatformInfo = {
 };
 
 export function createEffectTestHarness(options: EffectTestHarnessOptions) {
-  const eventBus = options.eventBus ?? new EventBus();
+  const atomRegistry = options.atomRegistry ?? AtomRegistry.make();
 
   const lifecycle = options.lifecycleAdapter ?? createLifecycleAdapterDouble();
 
@@ -288,7 +288,7 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
         options.paymentAdapter as typeof PaymentAdapter.Service
       )
     ),
-    Layer.provideMerge(Layer.succeed(EventBusProvider, eventBus)),
+    Layer.provideMerge(Layer.succeed(AtomRegistry.AtomRegistry, atomRegistry)),
     Layer.provideMerge(
       Layer.succeed(PlatformProvider, {
         ...defaultPlatformInfo,
@@ -313,7 +313,7 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
     : baseLayer;
 
   return {
-    eventBus,
+    atomRegistry,
     runtime: ManagedRuntime.make(layer),
   };
 }

From 611babfae7f307f2fcd5d520883802ce6c5b4f49 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 11 May 2026 20:42:48 +0200
Subject: [PATCH 017/129] feat: schema loading with caching

---
 libraries/react-native/src/client-effect.ts   | 103 +++---
 libraries/react-native/src/client.tsx         |   2 +
 .../src/core/reactivity/client-state.ts       |  13 +
 .../src/core/schema/schema-manager.ts         | 163 ++++++++++
 libraries/react-native/src/errors.ts          |   2 +
 .../tests/core/client-effect.test.ts          |  62 +++-
 .../tests/core/schema-manager.test.ts         | 305 ++++++++++++++++++
 .../tests/helpers/effect-test-harness.ts      |  14 +-
 8 files changed, 605 insertions(+), 59 deletions(-)
 create mode 100644 libraries/react-native/src/core/schema/schema-manager.ts
 create mode 100644 libraries/react-native/tests/core/schema-manager.test.ts

diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 517c80046..ccd0b2b4d 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -11,17 +11,13 @@ import type { SubscriptionProduct } from "./core/entities/product";
 import type { Transaction } from "./core/entities/transaction";
 import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
 import { LifecycleService } from "./core/lifecycle/lifecycle-service";
-import { ApiClient } from "./core/networking/api-client";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
 import { PaywallService } from "./core/paywalls/paywall-service";
 import { ProductService, type ProductsBySlug } from "./core/products/product-service";
 import type { LocationSlug } from "./core/schema/registry";
-import {
-  type RuntimeSchema,
-  createEmptyRuntimeSchema,
-} from "./core/schema/runtime";
+import type { RuntimeSchema } from "./core/schema/runtime";
+import { SchemaManager } from "./core/schema/schema-manager";
 import { TransactionService } from "./core/transactions/transaction-service";
-import { getCommonSdkHeaders } from "./core/utils/get-common-sdk-headers";
 import { UnsupportedPlatformError } from "./errors";
 
 export type { ProductsBySlug };
@@ -40,8 +36,15 @@ interface InitOptions {
 
 /**
  * Build the initial state of the SDK before `init()` has run. Returns an
- * object whose `init` method performs identity establishment, schema fetching,
- * and then yields the fully-initialized client facade.
+ * object whose `init` method establishes identity, resolves the runtime
+ * schema (via `SchemaManager`'s stale-while-revalidate cache), and yields
+ * the fully-initialized client facade. The independent network calls are
+ * run concurrently via `Effect.all({ concurrency: "unbounded" })`.
+ *
+ * A missing/failed schema fetch is fatal — when the cache is cold and the
+ * server is unreachable, `init` rejects with `FailedToFetchSchemaError`.
+ * This trades silent degradation for a loud failure that surfaces through
+ * `client.tsx`'s `runEffect` wrapping.
  */
 const makeUnitializedClient = () => ({
   init: (initOptions: InitOptions = {}) =>
@@ -49,63 +52,51 @@ const makeUnitializedClient = () => ({
       const identityManager = yield* IdentityManager;
       const customerAttributeManager = yield* CustomerAttributeManager;
       const customerInfoManager = yield* CustomerInfoManager;
-      const apiClient = yield* ApiClient;
+      const schemaManager = yield* SchemaManager;
+      const atomRegistry = yield* AtomRegistry.AtomRegistry;
 
       if (initOptions.distinctId) {
         yield* Effect.logDebug("Initializing with provided distinct id", {
           distinctId: initOptions.distinctId,
         });
 
-        const distinctId = yield* identityManager.getDistinctIdFromCache();
-        if (distinctId) {
-          yield* customerAttributeManager.syncCustomerAttributes(distinctId);
-        }
-
-        yield* identityManager.identify(initOptions.distinctId, {});
-      } else {
-        const distinctId = yield* identityManager.getDistinctId();
-        yield* Effect.logDebug("Initializing without provided distinct id", {
-          distinctId,
-        });
-
-        yield* customerAttributeManager.syncCustomerAttributes(distinctId);
-        const prefetched = yield* customerInfoManager.getCustomer(
-          distinctId,
-          "fetch"
+        // `identityManager.identify()` internally syncs attributes for the
+        // current cached distinctId AND publishes the new customer to
+        // `currentCustomerAtom`, so we don't duplicate either here.
+        const [, runtimeSchema] = yield* Effect.all(
+          [
+            identityManager.identify(initOptions.distinctId, {}),
+            schemaManager.resolveSchema({
+              distinctId: initOptions.distinctId,
+              internalSchema: initOptions.internalSchema,
+            }),
+          ],
+          { concurrency: "unbounded" }
         );
-
-        // Publish the prefetched customer so React subscribers see initial
-        // state without having to wait for a hook-driven refetch.
-        const atomRegistry = yield* AtomRegistry.AtomRegistry;
-        atomRegistry.set(currentCustomerAtom, prefetched);
+        return yield* makeInitializedClient({ schema: runtimeSchema });
       }
 
-      // Fetch the runtime schema from the server's `GET /sdk/schema`
-      // endpoint and cache it on the initialized client. A failure here is
-      // non-fatal — non-schema hooks (paywall resolution, feature flags,
-      // identify) still work — but product-related hooks will return empty
-      // data until the next successful init.
-      let runtimeSchema =
-        initOptions.internalSchema ?? createEmptyRuntimeSchema();
-      if (!initOptions.internalSchema) {
-        const commonHeaders = yield* getCommonSdkHeaders();
-        const distinctId = yield* identityManager.getDistinctId();
-        const fetched = yield* Effect.exit(
-          apiClient.sdk.getSchema({
-            headers: {
-              ...commonHeaders,
-              "x-distinct-id": distinctId,
-            },
-          })
-        );
-        if (fetched._tag === "Success") {
-          runtimeSchema = fetched.value;
-        } else {
-          yield* Effect.logWarning(
-            "[voidhash] Failed to fetch schema at init — product-related hooks will return empty data."
-          );
-        }
-      }
+      const distinctId = yield* identityManager.getDistinctId();
+      yield* Effect.logDebug("Initializing without provided distinct id", {
+        distinctId,
+      });
+
+      const [, prefetchedCustomer, runtimeSchema] = yield* Effect.all(
+        [
+          customerAttributeManager.syncCustomerAttributes(distinctId),
+          customerInfoManager.getCustomer(distinctId, "fetch"),
+          schemaManager.resolveSchema({
+            distinctId,
+            internalSchema: initOptions.internalSchema,
+          }),
+        ],
+        { concurrency: "unbounded" }
+      );
+
+      // Publish the prefetched customer so React subscribers see initial
+      // state without having to wait for a hook-driven refetch.
+      // `SchemaManager` publishes `schemaAtom` itself.
+      atomRegistry.set(currentCustomerAtom, prefetchedCustomer);
 
       return yield* makeInitializedClient({ schema: runtimeSchema });
     }),
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index 527009d61..a9617bfe1 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -21,6 +21,7 @@ import { ProductService } from "./core/products/product-service";
 import { TransactionService } from "./core/transactions/transaction-service";
 import type { LocationSlug, ProductSlug } from "./core/schema/registry";
 import type { RuntimeSchema } from "./core/schema/runtime";
+import { SchemaManager } from "./core/schema/schema-manager";
 import { SdkConfiguration } from "./core/sdk-configuration";
 import { ReadOnlyModePurchaseNotAllowedError, VoidhashError } from "./errors";
 import { AnalyticsService } from "./core/analytics/service";
@@ -62,6 +63,7 @@ const CreateEffectRuntime = (
       Layer.provideMerge(LifecycleService.layer),
       Layer.provideMerge(ReactNativeLifecycleAdapter),
       Layer.provideMerge(CustomerInfoManager.Default),
+      Layer.provideMerge(SchemaManager.layer),
       Layer.provideMerge(IdentityManager.Default),
       Layer.provideMerge(CacheManager.Default),
       Layer.provideMerge(AsyncStorageCacheAdapter),
diff --git a/libraries/react-native/src/core/reactivity/client-state.ts b/libraries/react-native/src/core/reactivity/client-state.ts
index d44cc33f4..d48ed79d7 100644
--- a/libraries/react-native/src/core/reactivity/client-state.ts
+++ b/libraries/react-native/src/core/reactivity/client-state.ts
@@ -2,6 +2,7 @@ import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
 import { Atom } from "effect/unstable/reactivity";
 
 import type { FeatureFlagsResult } from "../feature-flags/feature-flag-service";
+import type { RuntimeSchema } from "../schema/runtime";
 
 export type { FeatureFlagsResult };
 
@@ -12,6 +13,18 @@ export type { FeatureFlagsResult };
 export const currentCustomerAtom: Atom.Writable<SdkCustomer | null> =
   Atom.make<SdkCustomer | null>(null);
 
+/**
+ * Reactive store of the runtime schema fetched at init time and refreshed
+ * in the background by `SchemaManager`. `null` until init has resolved a
+ * schema. Read by React hooks that need to react to in-session refreshes
+ * (e.g. when the SWR background fetch lands a newer schema than the one
+ * served at init). Note: on a cache-hit init, subscribers may observe two
+ * publishes — the cached value first, then the freshly refreshed value
+ * when the background fetch lands. The two values are usually identical.
+ */
+export const schemaAtom: Atom.Writable<RuntimeSchema | null> =
+  Atom.make<RuntimeSchema | null>(null);
+
 /**
  * Reactive store of feature flag results, keyed by their normalized flag-key
  * request signature (see {@link normalizeFeatureFlagKeys}). Keeping every
diff --git a/libraries/react-native/src/core/schema/schema-manager.ts b/libraries/react-native/src/core/schema/schema-manager.ts
new file mode 100644
index 000000000..060ff3e0e
--- /dev/null
+++ b/libraries/react-native/src/core/schema/schema-manager.ts
@@ -0,0 +1,163 @@
+import { Effect, Layer, ServiceMap } from "effect";
+import { AtomRegistry } from "effect/unstable/reactivity";
+
+import { FailedToFetchSchemaError } from "../../errors";
+import { CacheManager } from "../caching/cache-manager";
+import { ApiClient } from "../networking/api-client";
+import { PlatformProvider } from "../platform/platform-provider";
+import { schemaAtom } from "../reactivity/client-state";
+import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
+import type { RuntimeSchema } from "./runtime";
+
+/**
+ * 30 days. Covers long offline gaps (user reopens the app after a month)
+ * while bounding cache staleness. Combined with the unconditional background
+ * refresh on cache hits this gives a stale-while-revalidate read path: hot
+ * sessions always get cached data immediately and the next session benefits
+ * from the refresh that landed in the background.
+ */
+const SCHEMA_CACHE_TTL_MS = 1000 * 60 * 60 * 24 * 30;
+
+const generateSchemaCacheKey = (appVersion: string) => `schema:${appVersion}`;
+
+const toFetchError = (cause: unknown): FailedToFetchSchemaError => {
+  const errorCause = cause instanceof Error ? cause : new Error(String(cause));
+  return new FailedToFetchSchemaError(
+    "Failed to fetch schema at init",
+    errorCause
+  );
+};
+
+interface ResolveSchemaArgs {
+  readonly distinctId: string;
+  readonly internalSchema?: RuntimeSchema;
+}
+
+/**
+ * Resolves the runtime schema with a stale-while-revalidate cache keyed by
+ * the current app version. On a cold cache the synchronous fetch is fatal
+ * (`FailedToFetchSchemaError`). On a warm cache the cached value is returned
+ * immediately and a background fiber refreshes both the cache and
+ * `schemaAtom`.
+ *
+ * App-version keying matters because features in a new app build may
+ * reference products, locations, or perks that don't exist in an older
+ * cached schema — using a separate cache key per version makes upgrades
+ * safe by forcing a fresh fetch on the first launch of a new build.
+ */
+export class SchemaManager extends ServiceMap.Service<SchemaManager>()(
+  "rn-voidhash/SchemaManager",
+  {
+    make: Effect.gen(function* () {
+      const cacheManager = yield* CacheManager;
+      const apiClient = yield* ApiClient;
+      const platformProvider = yield* PlatformProvider;
+      const atomRegistry = yield* AtomRegistry.AtomRegistry;
+
+      const publishSchema = (schema: RuntimeSchema) => {
+        atomRegistry.set(schemaAtom, schema);
+      };
+
+      const fetchFromServer = (distinctId: string) =>
+        Effect.gen(function* () {
+          const commonHeaders = yield* getCommonSdkHeaders();
+          return yield* apiClient.sdk.getSchema({
+            headers: {
+              ...commonHeaders,
+              "x-distinct-id": distinctId,
+            },
+          });
+        });
+
+      const cacheAndPublish = (cacheKey: string, schema: RuntimeSchema) =>
+        Effect.gen(function* () {
+          yield* cacheManager.set(cacheKey, schema, {
+            ttl: SCHEMA_CACHE_TTL_MS,
+          });
+          publishSchema(schema);
+        });
+
+      /**
+       * Fork a background refresh that outlives `init()`'s scope.
+       * `forkDetach` decouples the fiber from the caller scope so a cache
+       * hit on init returns synchronously while the refresh still completes
+       * later. Long-term, the proper shape is a scoped consumer fiber
+       * backed by a queue (see `analytics/service.ts` for that pattern);
+       * `forkDetach` is the lightweight equivalent for a single-shot
+       * request.
+       */
+      const scheduleBackgroundRefresh = (
+        cacheKey: string,
+        distinctId: string
+      ) =>
+        fetchFromServer(distinctId).pipe(
+          Effect.tap((schema) => cacheAndPublish(cacheKey, schema)),
+          Effect.catch((cause) =>
+            Effect.logDebug(
+              "[voidhash] schema background refresh failed",
+              { cause }
+            )
+          ),
+          // `startImmediately: true` so the fiber runs without waiting for
+          // the next yield point — important because `resolveSchema`
+          // returns synchronously after this and the caller may not yield
+          // again for some time.
+          Effect.forkDetach({ startImmediately: true })
+        );
+
+      const resolveSchema = ({
+        distinctId,
+        internalSchema,
+      }: ResolveSchemaArgs) =>
+        Effect.gen(function* () {
+          // Test/internal escape hatch — never hit the cache or network.
+          if (internalSchema) {
+            publishSchema(internalSchema);
+            return internalSchema;
+          }
+
+          const { appVersion } = platformProvider;
+
+          // No app version means we can't safely key the cache (features in
+          // a future build could reference items missing from the cached
+          // schema). Skip the cache entirely and always fetch synchronously;
+          // a failure is fatal.
+          if (!appVersion) {
+            yield* Effect.logWarning(
+              "[voidhash] No appVersion available — skipping schema cache and fetching synchronously."
+            );
+            const schema = yield* fetchFromServer(distinctId).pipe(
+              Effect.mapError(toFetchError)
+            );
+            publishSchema(schema);
+            return schema;
+          }
+
+          const cacheKey = generateSchemaCacheKey(appVersion);
+          const cached = yield* cacheManager.get<RuntimeSchema>(cacheKey);
+
+          // Cache hit: serve immediately and unconditionally revalidate in
+          // the background. `CacheManager.get` already drops expired
+          // entries before returning, so any non-null hit is fresh enough
+          // to serve.
+          if (cached) {
+            publishSchema(cached.value);
+            yield* scheduleBackgroundRefresh(cacheKey, distinctId);
+            return cached.value;
+          }
+
+          // Cache miss (including expired-and-dropped entries). Synchronous
+          // fetch — failures are fatal.
+          const schema = yield* fetchFromServer(distinctId).pipe(
+            Effect.mapError(toFetchError)
+          );
+          yield* cacheAndPublish(cacheKey, schema);
+          return schema;
+        });
+
+      return { resolveSchema } as const;
+    }),
+  }
+) {
+  static readonly layer = Layer.effect(this, this.make);
+}
diff --git a/libraries/react-native/src/errors.ts b/libraries/react-native/src/errors.ts
index af0db917c..647c396c2 100644
--- a/libraries/react-native/src/errors.ts
+++ b/libraries/react-native/src/errors.ts
@@ -9,6 +9,8 @@ export class FailedToInitializeNativeAdapterError extends VoidhashError {}
 
 export class FailedToEndNativeAdapterError extends VoidhashError {}
 
+export class FailedToFetchSchemaError extends VoidhashError {}
+
 export class NotInitializedError extends VoidhashError {
   constructor() {
     super(
diff --git a/libraries/react-native/tests/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
index 7a59a1d57..dcea6148b 100644
--- a/libraries/react-native/tests/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -1,4 +1,4 @@
-import { Effect } from "effect";
+import { Cause, Effect, Exit } from "effect";
 import { vi } from "vitest";
 
 import {
@@ -14,7 +14,9 @@ import { SDK_VERSION } from "../../src/core/constants";
 import {
   currentCustomerAtom,
   featureFlagsForKeysAtom,
+  schemaAtom,
 } from "../../src/core/reactivity/client-state";
+import { FailedToFetchSchemaError } from "../../src/errors";
 import {
   createApiClientDouble,
   createEffectTestHarness,
@@ -58,7 +60,10 @@ describe("VoidhashEffectClient", () => {
       );
 
       expect(initializedClient).toHaveProperty("getProducts");
-      expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(2);
+      // `identify()` syncs attributes for the current cached distinctId
+      // internally, so init no longer makes a second explicit sync call
+      // before identify — one POST suffices.
+      expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
       expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
         "cached-before-init"
       );
@@ -104,6 +109,59 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
+  it("init without internalSchema fetches the schema once and publishes it to schemaAtom", async () => {
+    const remoteSchema = createTestSchema();
+    const apiDouble = createApiClientDouble({ getSchemaResult: remoteSchema });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    // Module-level singleton: reset before asserting on it.
+    harness.atomRegistry.set(schemaAtom, null);
+
+    try {
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeUnitializedClient().init({})
+      );
+
+      expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
+      expect(initializedClient.getSchema()).toEqual(remoteSchema);
+      expect(harness.atomRegistry.get(schemaAtom)).toEqual(remoteSchema);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("init fails fatally with FailedToFetchSchemaError when schema fetch fails and no cache exists", async () => {
+    const apiDouble = createApiClientDouble({ getSchemaShouldFail: true });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    harness.atomRegistry.set(schemaAtom, null);
+
+    try {
+      const exit = await harness.runtime.runPromiseExit(
+        VoidhashEffectClient.makeUnitializedClient().init({})
+      );
+
+      expect(Exit.isFailure(exit)).toBe(true);
+      if (Exit.isFailure(exit)) {
+        const error = Cause.squash(exit.cause);
+        expect(error).toBeInstanceOf(FailedToFetchSchemaError);
+      }
+      expect(harness.atomRegistry.get(schemaAtom)).toBeNull();
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
   it("getProducts caches native result and maps missing schema keys to null", async () => {
     const schema = createTestSchema();
     const monthlyProduct = new Product(
diff --git a/libraries/react-native/tests/core/schema-manager.test.ts b/libraries/react-native/tests/core/schema-manager.test.ts
new file mode 100644
index 000000000..bbf403978
--- /dev/null
+++ b/libraries/react-native/tests/core/schema-manager.test.ts
@@ -0,0 +1,305 @@
+import { Cause, Effect, Exit } from "effect";
+
+import { CacheManager } from "../../src/core/caching/cache-manager";
+import { schemaAtom } from "../../src/core/reactivity/client-state";
+import type { RuntimeSchema } from "../../src/core/schema/runtime";
+import { SchemaManager } from "../../src/core/schema/schema-manager";
+import { FailedToFetchSchemaError } from "../../src/errors";
+import {
+  createApiClientDouble,
+  createEffectTestHarness,
+  createInMemoryCacheAdapter,
+  createPaymentAdapterDouble,
+} from "../helpers/effect-test-harness";
+import { describe, expect, it } from "../helpers/effect-vitest";
+import { createTestSchema } from "../helpers/test-schema";
+
+/**
+ * Poll `predicate` until it returns true (or `timeoutMs` elapses) without
+ * relying on `vi.waitFor`, which isn't available under the project's bun
+ * test runner.
+ */
+const waitFor = async (
+  predicate: () => boolean,
+  options: { timeoutMs?: number; intervalMs?: number } = {}
+) => {
+  const timeoutMs = options.timeoutMs ?? 1_000;
+  const intervalMs = options.intervalMs ?? 5;
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (predicate()) return;
+    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+  }
+  throw new Error(`waitFor timed out after ${timeoutMs}ms`);
+};
+
+const resolveSchemaEffect = (args: {
+  distinctId: string;
+  internalSchema?: RuntimeSchema;
+}) =>
+  Effect.flatMap(SchemaManager.asEffect(), (manager) =>
+    manager.resolveSchema(args)
+  );
+
+const createAltSchema = (): RuntimeSchema => ({
+  version: "sha256:alt",
+  perks: {},
+  locations: {},
+  products: {},
+});
+
+describe("SchemaManager", () => {
+  it("internalSchema bypasses cache and network and publishes to schemaAtom", async () => {
+    const apiDouble = createApiClientDouble();
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const internalSchema = createTestSchema();
+
+    try {
+      const result = await harness.runtime.runPromise(
+        resolveSchemaEffect({
+          distinctId: "user-1",
+          internalSchema,
+        })
+      );
+
+      expect(result).toEqual(internalSchema);
+      expect(apiDouble.state.getSchemaCalls).toHaveLength(0);
+      expect(harness.atomRegistry.get(schemaAtom)).toEqual(internalSchema);
+      // Cache should still be empty because we bypassed it entirely.
+      const cached = await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.get<RuntimeSchema>("schema:1.0.0")
+        )
+      );
+      expect(cached).toBeNull();
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("cache miss fetches from server, caches under appVersion key, and publishes to atom", async () => {
+    const remoteSchema = createTestSchema();
+    const apiDouble = createApiClientDouble({ getSchemaResult: remoteSchema });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+
+    try {
+      const result = await harness.runtime.runPromise(
+        resolveSchemaEffect({ distinctId: "user-1" })
+      );
+
+      expect(result).toEqual(remoteSchema);
+      expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
+      expect(harness.atomRegistry.get(schemaAtom)).toEqual(remoteSchema);
+
+      const cached = await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.get<RuntimeSchema>("schema:1.0.0")
+        )
+      );
+      expect(cached?.value).toEqual(remoteSchema);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("cache hit returns cached value immediately and schedules a background refresh", async () => {
+    const cachedSchema = createAltSchema();
+    const refreshedSchema = createTestSchema();
+    const apiDouble = createApiClientDouble({
+      getSchemaResult: refreshedSchema,
+    });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+
+    try {
+      // Prime the cache with a different schema so we can tell which one
+      // is being returned.
+      await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.set("schema:1.0.0", cachedSchema, {
+            ttl: 1000 * 60 * 60 * 24 * 30,
+          })
+        )
+      );
+
+      const result = await harness.runtime.runPromise(
+        resolveSchemaEffect({ distinctId: "user-1" })
+      );
+
+      // The synchronous return value is the cached schema — what the
+      // caller actually receives. (The atom transitions cached → refreshed
+      // back-to-back in this test because every Effect is synchronous, so
+      // we don't assert the intermediate atom state here.)
+      expect(result).toEqual(cachedSchema);
+
+      // The background refresh eventually lands the refreshed schema in
+      // both the atom and the cache.
+      await waitFor(
+        () =>
+          apiDouble.state.getSchemaCalls.length === 1 &&
+          harness.atomRegistry.get(schemaAtom) === refreshedSchema
+      );
+      expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
+      expect(harness.atomRegistry.get(schemaAtom)).toEqual(refreshedSchema);
+
+      const cached = await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.get<RuntimeSchema>("schema:1.0.0")
+        )
+      );
+      expect(cached?.value).toEqual(refreshedSchema);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("cache miss with failing fetch surfaces FailedToFetchSchemaError and leaves schemaAtom null", async () => {
+    const apiDouble = createApiClientDouble({ getSchemaShouldFail: true });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    // Reset atom because it's a module-level singleton — other tests may
+    // have left it populated.
+    harness.atomRegistry.set(schemaAtom, null);
+
+    try {
+      const exit = await harness.runtime.runPromiseExit(
+        resolveSchemaEffect({ distinctId: "user-1" })
+      );
+
+      expect(Exit.isFailure(exit)).toBe(true);
+      if (Exit.isFailure(exit)) {
+        const error = Cause.squash(exit.cause);
+        expect(error).toBeInstanceOf(FailedToFetchSchemaError);
+      }
+      expect(harness.atomRegistry.get(schemaAtom)).toBeNull();
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("changing app version misses the cache and fetches fresh", async () => {
+    const previousVersionSchema = createAltSchema();
+    const remoteSchema = createTestSchema();
+    const apiDouble = createApiClientDouble({ getSchemaResult: remoteSchema });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+      platform: { appVersion: "2.0.0" },
+    });
+
+    try {
+      // Cache a schema under the OLD app version key — should not be used
+      // when the harness is configured for "2.0.0".
+      await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.set("schema:1.0.0", previousVersionSchema, {
+            ttl: 1000 * 60 * 60 * 24 * 30,
+          })
+        )
+      );
+
+      const result = await harness.runtime.runPromise(
+        resolveSchemaEffect({ distinctId: "user-1" })
+      );
+
+      expect(result).toEqual(remoteSchema);
+      expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
+
+      const cachedForNewVersion = await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.get<RuntimeSchema>("schema:2.0.0")
+        )
+      );
+      expect(cachedForNewVersion?.value).toEqual(remoteSchema);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("missing appVersion skips the cache and fetches synchronously", async () => {
+    const remoteSchema = createTestSchema();
+    const apiDouble = createApiClientDouble({ getSchemaResult: remoteSchema });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+      platform: { appVersion: undefined },
+    });
+
+    try {
+      const result = await harness.runtime.runPromise(
+        resolveSchemaEffect({ distinctId: "user-1" })
+      );
+
+      expect(result).toEqual(remoteSchema);
+      expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
+      expect(harness.atomRegistry.get(schemaAtom)).toEqual(remoteSchema);
+
+      // No cache key should have been written.
+      const cacheKeys = await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          manager.getCacheKeys()
+        )
+      );
+      expect(
+        cacheKeys.some((key) => key.startsWith("schema:"))
+      ).toBe(false);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("missing appVersion with failing fetch surfaces FailedToFetchSchemaError", async () => {
+    const apiDouble = createApiClientDouble({ getSchemaShouldFail: true });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+      platform: { appVersion: undefined },
+    });
+    harness.atomRegistry.set(schemaAtom, null);
+
+    try {
+      const exit = await harness.runtime.runPromiseExit(
+        resolveSchemaEffect({ distinctId: "user-1" })
+      );
+
+      expect(Exit.isFailure(exit)).toBe(true);
+      if (Exit.isFailure(exit)) {
+        const error = Cause.squash(exit.cause);
+        expect(error).toBeInstanceOf(FailedToFetchSchemaError);
+      }
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+});
diff --git a/libraries/react-native/tests/helpers/effect-test-harness.ts b/libraries/react-native/tests/helpers/effect-test-harness.ts
index 99dfe94b6..fc0ef1c31 100644
--- a/libraries/react-native/tests/helpers/effect-test-harness.ts
+++ b/libraries/react-native/tests/helpers/effect-test-harness.ts
@@ -20,6 +20,7 @@ import { PaymentAdapter } from "../../src/core/payment-adapters/payment-adapter"
 import type { PlatformInfo } from "../../src/core/platform/platform-provider";
 import { PlatformProvider } from "../../src/core/platform/platform-provider";
 import { ProductService } from "../../src/core/products/product-service";
+import { SchemaManager } from "../../src/core/schema/schema-manager";
 import { SdkConfiguration } from "../../src/core/sdk-configuration";
 import { TransactionService } from "../../src/core/transactions/transaction-service";
 import { createTestSchema } from "./test-schema";
@@ -41,6 +42,7 @@ export type ApiSdkCall = {
 export interface ApiClientDoubleState {
   readonly evaluateFeatureFlagsCalls: ApiSdkCall[];
   readonly getCustomerCalls: ApiSdkCall[];
+  readonly getSchemaCalls: ApiSdkCall[];
   readonly identifyCalls: ApiSdkCall[];
   readonly syncCustomerAttributesCalls: ApiSdkCall[];
   readonly syncTransactionCalls: ApiSdkCall[];
@@ -49,6 +51,8 @@ export interface ApiClientDoubleState {
 export interface ApiClientDoubleOptions {
   evaluateFeatureFlagsResult?: FeatureFlagsResult;
   getCustomerResult?: SdkCustomer;
+  getSchemaResult?: ReturnType<typeof createTestSchema>;
+  getSchemaShouldFail?: boolean;
   identifyResult?: SdkCustomer;
   syncTransactionShouldFail?: boolean;
 }
@@ -66,6 +70,7 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
   const state: ApiClientDoubleState = {
     evaluateFeatureFlagsCalls: [],
     getCustomerCalls: [],
+    getSchemaCalls: [],
     identifyCalls: [],
     syncCustomerAttributesCalls: [],
     syncTransactionCalls: [],
@@ -73,7 +78,13 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
 
   const apiClient = {
     sdk: {
-      getSchema: () => Effect.succeed(createTestSchema()),
+      getSchema: (request: ApiSdkCall) => {
+        state.getSchemaCalls.push(request);
+        if (options.getSchemaShouldFail) {
+          return Effect.fail(new Error("getSchema failed"));
+        }
+        return Effect.succeed(options.getSchemaResult ?? createTestSchema());
+      },
       evaluateFeatureFlags: (request: ApiSdkCall) => {
         state.evaluateFeatureFlagsCalls.push(request);
         return Effect.succeed(
@@ -275,6 +286,7 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
     Layer.provideMerge(LifecycleService.layer),
     Layer.provideMerge(Layer.succeed(LifecycleAdapter, lifecycle.adapter)),
     Layer.provideMerge(CustomerInfoManager.Default),
+    Layer.provideMerge(SchemaManager.layer),
     Layer.provideMerge(IdentityManager.Default),
     Layer.provideMerge(CacheManager.Default),
     Layer.provideMerge(Layer.succeed(CacheAdapter, options.cacheAdapter)),

From 7ec202b1648c88e8253262824d5b8c6f76209125 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 11 May 2026 23:00:43 +0200
Subject: [PATCH 018/129] fix: analytics

---
 .../utils/voidhash/client.ts                  |  52 ++++-
 .../src/core/analytics/service.ts             | 204 ++++++++----------
 .../tests/core/client-effect.test.ts          |  11 +-
 3 files changed, 147 insertions(+), 120 deletions(-)

diff --git a/examples/react-native-example/utils/voidhash/client.ts b/examples/react-native-example/utils/voidhash/client.ts
index a43e8dc2a..8282f7afb 100644
--- a/examples/react-native-example/utils/voidhash/client.ts
+++ b/examples/react-native-example/utils/voidhash/client.ts
@@ -1,4 +1,52 @@
 import { createVoidhashClient } from "@voidhash/react-native";
+import Constants from "expo-constants";
+
+const LOCALHOST_NAMES = new Set([
+	"0.0.0.0",
+	"127.0.0.1",
+	"::1",
+	"[::1]",
+	"localhost",
+]);
+
+const isLocalhost = (hostname: string) =>
+	LOCALHOST_NAMES.has(hostname.toLowerCase());
+
+const parseHostUriHostname = (hostUri: string | null | undefined) => {
+	if (!hostUri) return null;
+
+	try {
+		const url = hostUri.includes("://")
+			? new URL(hostUri)
+			: new URL(`http://${hostUri}`);
+		return url.hostname || null;
+	} catch {
+		return null;
+	}
+};
+
+const resolveExampleApiUrl = (baseUrl: string) => {
+	let url: URL;
+	try {
+		url = new URL(baseUrl);
+	} catch {
+		return baseUrl;
+	}
+
+	if (!isLocalhost(url.hostname)) return baseUrl;
+
+	const hostHostname = parseHostUriHostname(
+		Constants.expoConfig?.hostUri ?? Constants.expoGoConfig?.debuggerHost,
+	);
+	if (!hostHostname || isLocalhost(hostHostname)) return baseUrl;
+
+	url.hostname = hostHostname;
+	return url.toString();
+};
+
+const apiUrl = process.env.EXPO_PUBLIC_VOIDHASH_API_URL
+	? resolveExampleApiUrl(process.env.EXPO_PUBLIC_VOIDHASH_API_URL)
+	: undefined;
 
 /**
  * Voidhash client for the example app.
@@ -11,8 +59,6 @@ export const voidhash = createVoidhashClient(
 		"vh_pk_hrvyOZJoxtonGGPtTnkMehrCoEPsAbwD",
 	{
 		debug: true,
-		...(process.env.EXPO_PUBLIC_VOIDHASH_API_URL
-			? { baseUrl: process.env.EXPO_PUBLIC_VOIDHASH_API_URL }
-			: {}),
+		...(apiUrl ? { baseUrl: apiUrl } : {}),
 	},
 );
diff --git a/libraries/react-native/src/core/analytics/service.ts b/libraries/react-native/src/core/analytics/service.ts
index 7bf9ecf4a..38a679312 100644
--- a/libraries/react-native/src/core/analytics/service.ts
+++ b/libraries/react-native/src/core/analytics/service.ts
@@ -1,3 +1,7 @@
+import {
+  make as makeEventCaptureClient,
+  type VoidhashEventCaptureClient,
+} from "@voidhash/generated-clients/event-capture";
 import {
   Duration,
   Effect,
@@ -7,14 +11,9 @@ import {
   Schedule,
   ServiceMap,
 } from "effect";
-import {
-  HttpClient,
-  HttpClientRequest,
-  HttpClientResponse,
-} from "effect/unstable/http";
+import { HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { CacheManager } from "../caching/cache-manager";
-import { SDK_VERSION } from "../constants";
 import { IdentityManager } from "../identity/identity-manager";
 import { SdkConfiguration } from "../sdk-configuration";
 import { getNonce } from "../utils/crypto";
@@ -32,7 +31,13 @@ import {
 const ANALYTICS_BATCH_SIZE = 20;
 const ANALYTICS_FLUSH_INTERVAL_MS = 5000;
 const MAX_ANALYTICS_RETRY_DELAY_MS = 30_000;
-const RETRYABLE_ANALYTICS_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
+/**
+ * Status codes treated as retryable for raw HTTP failures that don't surface a
+ * typed error from the generated event-capture client (e.g. 408, 502, 504).
+ * 429/500/503 are also retryable but reach the catch handlers as their typed
+ * counterparts and so don't go through the status-set fallback.
+ */
+const RETRYABLE_HTTP_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
 const ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY =
   "voidhash:analytics:last-seen-app-release";
 
@@ -77,39 +82,6 @@ const parseRetryAfterMs = (
   return Math.max(retryAt - Date.now(), 0);
 };
 
-const getRetryAfterMsFromResponseBody = (
-  data: unknown
-): number | undefined => {
-  if (
-    data !== null &&
-    typeof data === "object" &&
-    "retry_after_ms" in data &&
-    typeof (data as { retry_after_ms?: unknown }).retry_after_ms === "number"
-  ) {
-    return (data as { retry_after_ms: number }).retry_after_ms;
-  }
-  return undefined;
-};
-
-const resolveIngestEventsUrl = (options: {
-  baseUrl: string;
-  ingestUrl: string | undefined;
-}) => {
-  const baseUrl = options.ingestUrl
-    ? new URL(options.ingestUrl)
-    : buildDefaultIngestBaseUrl(options.baseUrl);
-  return new URL("/batch", baseUrl).toString();
-};
-
-const buildDefaultIngestBaseUrl = (apiBaseUrl: string) => {
-  const parsedApiUrl = new URL(apiBaseUrl);
-  parsedApiUrl.hostname = `i.${parsedApiUrl.hostname}`;
-  parsedApiUrl.hash = "";
-  parsedApiUrl.pathname = "/";
-  parsedApiUrl.search = "";
-  return parsedApiUrl;
-};
-
 /**
  * Inline retry schedule used inside `flush()`: exponential backoff capped at 3
  * total attempts. Retry-After-bearing failures are excluded via the `while`
@@ -149,27 +121,43 @@ export class AnalyticsService extends ServiceMap.Service<AnalyticsService>()(
       const getStandardizedProperties = getAnalyticsStandardizedProperties();
       let flushCallback: (() => void) | null = null;
 
-      const ingestEventsUrl = resolveIngestEventsUrl({
-        baseUrl: sdkConfiguration.baseUrl,
-        ingestUrl: sdkConfiguration.ingestUrl,
-      });
+      // The ingest endpoint lives on the same host as the API but under the
+      // `/i/v1/...` path prefix. The generated client owns the path, so we
+      // only need to inject the base origin via `prependUrl`. `ingestUrl`
+      // remains as an override for local/test ingest servers.
+      const ingestBaseUrl = sdkConfiguration.ingestUrl ?? sdkConfiguration.baseUrl;
+      const eventCaptureClient = makeEventCaptureClient(
+        httpClient as VoidhashEventCaptureClient["httpClient"],
+        {
+          transformClient: (client) =>
+            Effect.succeed(
+              client.pipe(
+                HttpClient.mapRequest((request) =>
+                  HttpClientRequest.prependUrl(request, ingestBaseUrl)
+                )
+              )
+            ),
+        }
+      );
 
-      const buildRetryableFailure = (response: HttpClientResponse.HttpClientResponse) =>
-        Effect.gen(function* () {
-          const body = yield* response.json.pipe(
-            Effect.orElseSucceed(() => undefined as unknown)
-          );
-          return yield* Effect.fail(
-            new AnalyticsSendFailure({
-              message: `Analytics ingest request failed: ${response.status}`,
-              retryAfterMs:
-                parseRetryAfterMs(response.headers["retry-after"]) ??
-                getRetryAfterMsFromResponseBody(body),
-              retryable: true,
-              status: response.status,
-            })
-          );
-        });
+      const failNonRetryable = (status: number) =>
+        Effect.fail(
+          new AnalyticsSendFailure({
+            message: `Analytics ingest request failed: ${status}`,
+            retryable: false,
+            status,
+          })
+        );
+
+      const failRetryable = (status: number, retryAfterMs?: number) =>
+        Effect.fail(
+          new AnalyticsSendFailure({
+            message: `Analytics ingest request failed: ${status}`,
+            retryAfterMs,
+            retryable: true,
+            status,
+          })
+        );
 
       const sendAnalyticsEvents = (
         events: ReadonlyArray<AnalyticsIngestEvent>
@@ -178,60 +166,58 @@ export class AnalyticsService extends ServiceMap.Service<AnalyticsService>()(
           if (events.length === 0) return;
 
           const distinctId = yield* identityManager.getDistinctId();
-          const request = HttpClientRequest.post(ingestEventsUrl).pipe(
-            HttpClientRequest.bodyJsonUnsafe({
-              events: events.map((event) => ({
-                context: event.context,
-                distinct_id: distinctId,
-                event: event.event_name,
-                properties: event.properties,
-                request: {
-                  sdk_name: "react-native",
-                  sdk_version: SDK_VERSION,
-                },
-                session_id: event.session_id,
-                timestamp: event.event_ts,
-                uuid: event.event_id,
-              })),
-              sent_at: new Date().toISOString(),
-              token: sdkConfiguration.publishableKey,
-            })
-          );
-
-          const response = yield* httpClient.execute(request).pipe(
-            Effect.catchTag("HttpClientError", (cause) =>
-              Effect.fail(
+          yield* eventCaptureClient.eventCaptureBatch({
+            events: events.map((event) => ({
+              context: event.context,
+              distinct_id: distinctId,
+              event: event.event_name,
+              properties: event.properties,
+              session_id: event.session_id,
+              timestamp: event.event_ts,
+              uuid: event.event_id,
+            })),
+            sent_at: new Date().toISOString(),
+            token: sdkConfiguration.publishableKey,
+          });
+        }).pipe(
+          Effect.catchTags({
+            CaptureDependencyUnavailableError: (err) =>
+              failRetryable(err.response.status),
+            CaptureInternalServerError: (err) =>
+              failRetryable(err.response.status),
+            CapturePayloadTooLargeError: (err) =>
+              failNonRetryable(err.response.status),
+            CaptureRateLimitedError: (err) =>
+              failRetryable(
+                err.response.status,
+                parseRetryAfterMs(err.response.headers["retry-after"]) ??
+                  err.data.retry_after_ms ??
+                  undefined
+              ),
+            CaptureUnauthorizedError: (err) =>
+              failNonRetryable(err.response.status),
+            EventCaptureBatch400: (err) =>
+              failNonRetryable(err.response.status),
+          }),
+          // Unmapped status codes (e.g. 408/502/504) surface as
+          // `HttpClientError`; treat network errors and the retryable subset
+          // as retryable, everything else as non-retryable.
+          Effect.catchTag("HttpClientError", (cause) => {
+            const status = cause.response?.status;
+            if (status === undefined) {
+              return Effect.fail(
                 new AnalyticsSendFailure({
                   cause,
                   message: "Analytics request failed",
                   retryable: true,
                 })
-              )
-            )
-          );
-
-          return yield* HttpClientResponse.matchStatus(response, {
-            "2xx": () => Effect.void,
-            413: () =>
-              Effect.fail(
-                new AnalyticsSendFailure({
-                  message: `Analytics ingest request failed: ${response.status}`,
-                  retryable: false,
-                  status: response.status,
-                })
-              ),
-            orElse: (res) =>
-              RETRYABLE_ANALYTICS_STATUS_CODES.has(res.status)
-                ? buildRetryableFailure(res)
-                : Effect.fail(
-                    new AnalyticsSendFailure({
-                      message: `Analytics ingest request failed: ${res.status}`,
-                      retryable: false,
-                      status: res.status,
-                    })
-                  ),
-          });
-        });
+              );
+            }
+            return RETRYABLE_HTTP_STATUS_CODES.has(status)
+              ? failRetryable(status)
+              : failNonRetryable(status);
+          })
+        );
 
       // Inline retry wrapper used by the queue-draining `flush()` path. Public
       // `sendAnalyticsEvents` stays single-shot so callers can implement their
diff --git a/libraries/react-native/tests/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
index dcea6148b..9883f46bd 100644
--- a/libraries/react-native/tests/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -10,7 +10,6 @@ import { CacheManager } from "../../src/core/caching/cache-manager";
 import { Product, SubscriptionProduct } from "../../src/core/entities/product";
 import { Transaction } from "../../src/core/entities/transaction";
 import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
-import { SDK_VERSION } from "../../src/core/constants";
 import {
   currentCustomerAtom,
   featureFlagsForKeysAtom,
@@ -648,7 +647,7 @@ describe("VoidhashEffectClient", () => {
   };
 
   describe("sendAnalyticsEvents", () => {
-    it("sends analytics to derived i. subdomain by default", async () => {
+    it("sends analytics to the /i/v1/batch path on the API host by default", async () => {
       const originalFetch = global.fetch;
       const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
       global.fetch = fetchMock as unknown as typeof global.fetch;
@@ -681,7 +680,7 @@ describe("VoidhashEffectClient", () => {
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
         expect(String(fetchMock.mock.calls[0]?.[0])).toBe(
-          "https://i.api.voidhash.test/batch"
+          "https://api.voidhash.test/i/v1/batch"
         );
 
         const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
@@ -697,10 +696,6 @@ describe("VoidhashEffectClient", () => {
               properties: {
                 button_name: "Get Started",
               },
-              request: {
-                sdk_name: "react-native",
-                sdk_version: SDK_VERSION,
-              },
               session_id: "sess_1",
               timestamp: "2026-01-01T00:00:00.000Z",
               uuid: "evt_1",
@@ -741,7 +736,7 @@ describe("VoidhashEffectClient", () => {
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
         expect(String(fetchMock.mock.calls[0]?.[0])).toBe(
-          "http://localhost:8083/batch"
+          "http://localhost:8083/i/v1/batch"
         );
       } finally {
         global.fetch = originalFetch;

From de175200b58b65b7674c033fe3cd52c873d3f98d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 3 Jun 2026 10:41:08 +0200
Subject: [PATCH 019/129] wip: paywall specs

---
 PAYWALLS-MVP.md                               | 28 +++++++++++++++++++
 .../.voidhash/components/canvas.tsx           | 17 +++++++++++
 .../.voidhash/paywalls/onboarding-green.tsx   | 18 ++++++++++++
 3 files changed, 63 insertions(+)
 create mode 100644 PAYWALLS-MVP.md
 create mode 100644 examples/react-native-example/.voidhash/components/canvas.tsx
 create mode 100644 examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx

diff --git a/PAYWALLS-MVP.md b/PAYWALLS-MVP.md
new file mode 100644
index 000000000..58aac8aa4
--- /dev/null
+++ b/PAYWALLS-MVP.md
@@ -0,0 +1,28 @@
+# Paywalls MVP
+
+## Context
+Voidhash is a Google Play and App Store subscription management platform. It includes analytics, revenue tracking, server side recipe validation and much more.
+
+## Objective
+In this task, we want to add highly requested feature - Paywalls. Similar to Superwall, we want to enable our customers to quickly change and test their paywalls without re-deploying their app. In the future, we will have a GUI paywall builder but for now, we will have fully code driven paywall building experience. For this task, I have scaffolded an MVP version of the code, that will define both paywalls and re-usable components in ./examples/react-native-example (in a .voidhash folder)
+
+## Paywalls
+Paywalls are screens in a mobile app where the app user can purchase something - this could be subscription, one time items etc. Each app needs it's own distinct look and have a different use-case for it. In our MVP, paywalls are code driven and they are defined via a createPaywall. Both paywalls and components will live in .voidhash folder, that will be scaffolded by the CLI. There will be 2 folders - components for re-usable component definitions and paywalls for individual paywall designs.
+
+## Components
+As mentioned previously, components are re-usable primitives across paywalls. They are mostly designed to add dynamic, interactive logic (carousels, sheets etc.).
+
+
+## How will they work, custom react, renderers
+Paywalls will be powered by react. Instead of using react-dom, we will impement our own renderer (that will use HTML DOM under the hood). We want to build a scoped, abstract way for building paywalls to allow as to build native renderers in the future as well. The API will be similar to react-native with View, Text, Pressable, ScrollView etc.
+
+## Studio
+Studio is vite js application, that is ran via our CLI. It previews the paywalls and refreshes in real-time as the paywall changes. There will be a sidepanel on the right with list of all paywalls. We can switch between them. In the middle, there will be 9:16 aspect ratio (phone) preview. It will use tailwind for styling and shadcn for UI primitives.
+
+## CLI
+We need to extend our CLI with few commands
+```voidhash-cli studio``` will launch the paywall preview studio
+```voidhash-cli deploy``` will build and deploy everything to Voidhash
+
+# Bundling and deployment
+As part of this task, we need to define the entire flow and specify, what will be sent to our server and in what format. Modifying the backend service will be the next task. We need to create final html / js, that will be server and rendered in a mobile webview as the paywall itself. We also want to send the raw source code files to the server (both, components and paywalls) and we need to deploy assets. Create PAYWALLS-MVP-SERVER-SPEC.md that will map all the requirements and protocols the server should implement for it to integrate together well.
\ No newline at end of file
diff --git a/examples/react-native-example/.voidhash/components/canvas.tsx b/examples/react-native-example/.voidhash/components/canvas.tsx
new file mode 100644
index 000000000..28d7b7eb6
--- /dev/null
+++ b/examples/react-native-example/.voidhash/components/canvas.tsx
@@ -0,0 +1,17 @@
+
+import { defineComponent, View, Text, Slot } from "@voidhash/paywalls"
+
+export const componentDefinition = defineComponent({
+  props: (c) => ({
+    title: c.string().withLabel("Title").withDefault("Untitled")
+  })
+})
+
+export default componentDefinition.render((props) => {
+  return (
+    <View>
+      <Text>Canvas {props.title}</Text>
+      <Slot />
+    </View>
+  )
+})
diff --git a/examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx b/examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx
new file mode 100644
index 000000000..d61c98e07
--- /dev/null
+++ b/examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx
@@ -0,0 +1,18 @@
+import { createPaywall, View, Pressable, Text } from "@voidhash/paywalls"
+import Canvas from '../components/canvas';
+
+const paywall = createPaywall({
+  title: "Onboarding paywall",
+  render: (
+    <View>
+      <Pressable>
+        <Text>Hello World</Text>
+      </Pressable>
+      <Canvas>
+        <Text>Hello</Text>
+      </Canvas>
+    </View>
+  )
+})
+
+export default paywall;

From b517ec7d0ed6f8558b161ead6f7702ce9e08efba Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 12 Jun 2026 09:57:28 +0200
Subject: [PATCH 020/129] feat: paywalls and refactor

---
 .claude/launch.json                           |   23 +
 PAYWALLS-MVP-SERVER-SPEC.md                   |  407 +++++++
 apps/cli/build.dev.ts                         |    8 +-
 apps/cli/build.ts                             |   10 +-
 apps/cli/package.json                         |    6 +-
 apps/cli/src/cli/commands/deploy.ts           |  179 +++
 apps/cli/src/cli/commands/studio.ts           |  133 +++
 apps/cli/src/cli/index.ts                     |   26 +-
 apps/cli/src/domain/schema/paywall-deploy.ts  |  163 +++
 apps/cli/src/domain/services/paywall-build.ts | 1018 +++++++++++++++++
 .../domain/services/paywall-closed-imports.ts |  121 ++
 .../domain/services/paywall-deploy-upload.ts  |  397 +++++++
 .../src/domain/services/paywall-typecheck.ts  |  186 +++
 apps/cli/src/utils/api-client.ts              |    2 +-
 .../domain/schema/paywall-deploy.test.ts      |  159 +++
 .../services/paywall-build-warnings.test.ts   |   72 ++
 .../services/paywall-closed-imports.test.ts   |  142 +++
 .../services/paywall-content-hash.test.ts     |  106 ++
 .../services/paywall-deploy-upload.test.ts    |  270 +++++
 .../domain/services/paywall-typecheck.test.ts |  102 ++
 apps/studio/index.html                        |   12 +
 apps/studio/package.json                      |   40 +
 apps/studio/src/App.tsx                       |   88 ++
 .../src/components/ComponentPreview.tsx       |  136 +++
 apps/studio/src/components/PaywallPreview.tsx |   36 +
 apps/studio/src/components/PhoneFrame.tsx     |   28 +
 .../src/components/PreviewErrorBoundary.tsx   |   52 +
 apps/studio/src/components/Sidebar.tsx        |  206 ++++
 apps/studio/src/components/ui/button.tsx      |   44 +
 apps/studio/src/index.css                     |   20 +
 apps/studio/src/lib/cn.ts                     |    4 +
 apps/studio/src/main.tsx                      |   14 +
 apps/studio/src/server/config.ts              |   54 +
 apps/studio/src/server/index.ts               |   50 +
 .../src/server/virtual-paywalls-plugin.ts     |  159 +++
 apps/studio/src/vite-env.d.ts                 |   20 +
 apps/studio/src/voidhash/paywalls.ts          |  131 +++
 apps/studio/src/voidhash/preview-runtime.ts   |   91 ++
 apps/studio/tsconfig.json                     |   11 +
 apps/studio/vite.config.ts                    |   19 +
 docs/specs/paywall-deploy-contract.md         |  297 +++++
 examples/react-native-example/.gitignore      |    4 +-
 .../.voidhash/components/canvas.tsx           |   32 +-
 .../.voidhash/components/product-option.tsx   |   73 ++
 .../.voidhash/paywalls/onboarding-green.tsx   |   18 -
 .../.voidhash/paywalls/onboarding.tsx         |   82 ++
 examples/react-native-example/package.json    |    1 +
 .../react-native-example/voidhash.config.ts   |    4 +-
 libraries/paywalls/README.md                  |  121 ++
 libraries/paywalls/build.ts                   |   50 +
 libraries/paywalls/package.json               |  102 ++
 libraries/paywalls/src/authoring/actions.ts   |  119 ++
 .../paywalls/src/authoring/create-paywall.ts  |   81 ++
 .../src/authoring/define-component.tsx        |  186 +++
 libraries/paywalls/src/authoring/manifest.ts  |  172 +++
 libraries/paywalls/src/authoring/props.ts     |  254 ++++
 libraries/paywalls/src/dom.tsx                |   77 ++
 libraries/paywalls/src/index.ts               |  192 ++++
 .../paywalls/src/internal/action-brand.ts     |   33 +
 libraries/paywalls/src/panel.ts               |   43 +
 .../paywalls/src/primitives/components.tsx    |   53 +
 .../paywalls/src/primitives/host-context.tsx  |   34 +
 libraries/paywalls/src/primitives/slot.tsx    |   29 +
 libraries/paywalls/src/primitives/types.ts    |  102 ++
 libraries/paywalls/src/renderer/dom-host.tsx  |  227 ++++
 .../paywalls/src/renderer/error-boundary.tsx  |   49 +
 .../src/renderer/paywall-renderer.tsx         |   47 +
 libraries/paywalls/src/runtime/bridge.ts      |  202 ++++
 libraries/paywalls/src/runtime/config.ts      |   90 ++
 libraries/paywalls/src/runtime/envelope.ts    |  306 +++++
 libraries/paywalls/src/runtime/runtime.tsx    |  268 +++++
 .../paywalls/src/schema/component-manifest.ts |  111 ++
 libraries/paywalls/src/schema/node-tree.ts    |   73 ++
 libraries/paywalls/src/schema/style.ts        |  211 ++++
 libraries/paywalls/src/style/resolve.ts       |  117 ++
 .../src/tree-renderer/react-reconciler.d.ts   |   53 +
 .../src/tree-renderer/render-to-node-tree.tsx |  434 +++++++
 .../paywalls/src/tree-renderer/tree-host.ts   |   95 ++
 libraries/paywalls/src/tree.ts                |   30 +
 libraries/paywalls/tests/envelope.test.ts     |  242 ++++
 libraries/paywalls/tests/manifest.test.tsx    |  250 ++++
 .../paywalls/tests/observability.test.tsx     |  161 +++
 libraries/paywalls/tests/render.test.tsx      |  147 +++
 libraries/paywalls/tests/style.test.ts        |  140 +++
 libraries/paywalls/tests/tree.test.tsx        |  256 +++++
 libraries/paywalls/tests/types.test.ts        |  156 +++
 libraries/paywalls/tsconfig.json              |   10 +
 libraries/paywalls/vitest.unit.mts            |   12 +
 libraries/react-native/src/client-effect.ts   |   85 +-
 libraries/react-native/src/client.tsx         |  105 +-
 .../core/paywalls/paywall-runtime-config.ts   |   96 ++
 .../src/core/paywalls/paywall-service.ts      |   24 +-
 .../src/internal/paywall-bridge/parser.ts     |   21 +-
 .../src/internal/paywall-bridge/protocol.ts   |  113 +-
 .../react/hooks/use-paywall-by-location.ts    |  253 +++-
 .../tests/core/paywall-runtime-config.test.ts |  175 +++
 .../internal/paywall-bridge-configure.test.ts |  113 ++
 .../internal/paywall-bridge-parser.test.ts    |   80 +-
 .../react/use-paywall-by-location.test.tsx    |  309 ++++-
 .../generated-clients/src/core/generated.ts   |   10 +-
 pnpm-lock.yaml                                |  569 +++++++--
 101 files changed, 12287 insertions(+), 257 deletions(-)
 create mode 100644 .claude/launch.json
 create mode 100644 PAYWALLS-MVP-SERVER-SPEC.md
 create mode 100644 apps/cli/src/cli/commands/deploy.ts
 create mode 100644 apps/cli/src/cli/commands/studio.ts
 create mode 100644 apps/cli/src/domain/schema/paywall-deploy.ts
 create mode 100644 apps/cli/src/domain/services/paywall-build.ts
 create mode 100644 apps/cli/src/domain/services/paywall-closed-imports.ts
 create mode 100644 apps/cli/src/domain/services/paywall-deploy-upload.ts
 create mode 100644 apps/cli/src/domain/services/paywall-typecheck.ts
 create mode 100644 apps/cli/tests/domain/schema/paywall-deploy.test.ts
 create mode 100644 apps/cli/tests/domain/services/paywall-build-warnings.test.ts
 create mode 100644 apps/cli/tests/domain/services/paywall-closed-imports.test.ts
 create mode 100644 apps/cli/tests/domain/services/paywall-content-hash.test.ts
 create mode 100644 apps/cli/tests/domain/services/paywall-deploy-upload.test.ts
 create mode 100644 apps/cli/tests/domain/services/paywall-typecheck.test.ts
 create mode 100644 apps/studio/index.html
 create mode 100644 apps/studio/package.json
 create mode 100644 apps/studio/src/App.tsx
 create mode 100644 apps/studio/src/components/ComponentPreview.tsx
 create mode 100644 apps/studio/src/components/PaywallPreview.tsx
 create mode 100644 apps/studio/src/components/PhoneFrame.tsx
 create mode 100644 apps/studio/src/components/PreviewErrorBoundary.tsx
 create mode 100644 apps/studio/src/components/Sidebar.tsx
 create mode 100644 apps/studio/src/components/ui/button.tsx
 create mode 100644 apps/studio/src/index.css
 create mode 100644 apps/studio/src/lib/cn.ts
 create mode 100644 apps/studio/src/main.tsx
 create mode 100644 apps/studio/src/server/config.ts
 create mode 100644 apps/studio/src/server/index.ts
 create mode 100644 apps/studio/src/server/virtual-paywalls-plugin.ts
 create mode 100644 apps/studio/src/vite-env.d.ts
 create mode 100644 apps/studio/src/voidhash/paywalls.ts
 create mode 100644 apps/studio/src/voidhash/preview-runtime.ts
 create mode 100644 apps/studio/tsconfig.json
 create mode 100644 apps/studio/vite.config.ts
 create mode 100644 docs/specs/paywall-deploy-contract.md
 create mode 100644 examples/react-native-example/.voidhash/components/product-option.tsx
 delete mode 100644 examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx
 create mode 100644 examples/react-native-example/.voidhash/paywalls/onboarding.tsx
 create mode 100644 libraries/paywalls/README.md
 create mode 100644 libraries/paywalls/build.ts
 create mode 100644 libraries/paywalls/package.json
 create mode 100644 libraries/paywalls/src/authoring/actions.ts
 create mode 100644 libraries/paywalls/src/authoring/create-paywall.ts
 create mode 100644 libraries/paywalls/src/authoring/define-component.tsx
 create mode 100644 libraries/paywalls/src/authoring/manifest.ts
 create mode 100644 libraries/paywalls/src/authoring/props.ts
 create mode 100644 libraries/paywalls/src/dom.tsx
 create mode 100644 libraries/paywalls/src/index.ts
 create mode 100644 libraries/paywalls/src/internal/action-brand.ts
 create mode 100644 libraries/paywalls/src/panel.ts
 create mode 100644 libraries/paywalls/src/primitives/components.tsx
 create mode 100644 libraries/paywalls/src/primitives/host-context.tsx
 create mode 100644 libraries/paywalls/src/primitives/slot.tsx
 create mode 100644 libraries/paywalls/src/primitives/types.ts
 create mode 100644 libraries/paywalls/src/renderer/dom-host.tsx
 create mode 100644 libraries/paywalls/src/renderer/error-boundary.tsx
 create mode 100644 libraries/paywalls/src/renderer/paywall-renderer.tsx
 create mode 100644 libraries/paywalls/src/runtime/bridge.ts
 create mode 100644 libraries/paywalls/src/runtime/config.ts
 create mode 100644 libraries/paywalls/src/runtime/envelope.ts
 create mode 100644 libraries/paywalls/src/runtime/runtime.tsx
 create mode 100644 libraries/paywalls/src/schema/component-manifest.ts
 create mode 100644 libraries/paywalls/src/schema/node-tree.ts
 create mode 100644 libraries/paywalls/src/schema/style.ts
 create mode 100644 libraries/paywalls/src/style/resolve.ts
 create mode 100644 libraries/paywalls/src/tree-renderer/react-reconciler.d.ts
 create mode 100644 libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
 create mode 100644 libraries/paywalls/src/tree-renderer/tree-host.ts
 create mode 100644 libraries/paywalls/src/tree.ts
 create mode 100644 libraries/paywalls/tests/envelope.test.ts
 create mode 100644 libraries/paywalls/tests/manifest.test.tsx
 create mode 100644 libraries/paywalls/tests/observability.test.tsx
 create mode 100644 libraries/paywalls/tests/render.test.tsx
 create mode 100644 libraries/paywalls/tests/style.test.ts
 create mode 100644 libraries/paywalls/tests/tree.test.tsx
 create mode 100644 libraries/paywalls/tests/types.test.ts
 create mode 100644 libraries/paywalls/tsconfig.json
 create mode 100644 libraries/paywalls/vitest.unit.mts
 create mode 100644 libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
 create mode 100644 libraries/react-native/tests/core/paywall-runtime-config.test.ts
 create mode 100644 libraries/react-native/tests/internal/paywall-bridge-configure.test.ts

diff --git a/.claude/launch.json b/.claude/launch.json
new file mode 100644
index 000000000..d68adbb21
--- /dev/null
+++ b/.claude/launch.json
@@ -0,0 +1,23 @@
+{
+  "version": "0.0.1",
+  "configurations": [
+    {
+      "name": "studio",
+      "runtimeExecutable": "pnpm",
+      "runtimeArgs": ["--filter", "@voidhash/studio", "dev", "--port", "4830"],
+      "port": 4830
+    },
+    {
+      "name": "deployed",
+      "runtimeExecutable": "python3",
+      "runtimeArgs": [
+        "-m",
+        "http.server",
+        "4831",
+        "--directory",
+        "examples/react-native-example/.voidhash/.build"
+      ],
+      "port": 4831
+    }
+  ]
+}
diff --git a/PAYWALLS-MVP-SERVER-SPEC.md b/PAYWALLS-MVP-SERVER-SPEC.md
new file mode 100644
index 000000000..15158a527
--- /dev/null
+++ b/PAYWALLS-MVP-SERVER-SPEC.md
@@ -0,0 +1,407 @@
+# Paywalls MVP — Server Protocol Spec
+
+This document specifies the backend Voidhash must implement so the paywall system
+(`@voidhash/paywalls`, the Studio, and the `voidhash-cli deploy`/`studio`
+commands) integrates end-to-end. It is the contract between three actors:
+
+| Actor | Role |
+| --- | --- |
+| **CLI** (`voidhash-cli deploy`) | Builds paywalls and **uploads** the deploy payload. |
+| **Server** (this spec) | Stores deploys, serves the live paywall to devices, resolves placements + entitlements. |
+| **Device SDK** (`@voidhash/react-native`) | Presents a paywall in a WebView, **injects** runtime config, handles the **bridge**. |
+
+The client side is implemented today. Everything marked **[server]** is what this
+task hands off; everything marked **[done]** already exists in this repo and the
+server must remain compatible with it.
+
+> **Source of truth for shapes.** The TypeScript contracts referenced here are
+> real and version-locked:
+> - Deploy payload: [`apps/cli/src/domain/schema/paywall-deploy.ts`](apps/cli/src/domain/schema/paywall-deploy.ts) (`DeployManifest`, `schemaVersion: 1`).
+> - Runtime config: [`libraries/paywalls/src/runtime/config.ts`](libraries/paywalls/src/runtime/config.ts) (`PaywallRuntimeConfig`).
+> - Bridge protocol: [`libraries/paywalls/src/runtime/bridge.ts`](libraries/paywalls/src/runtime/bridge.ts) (`PaywallOutboundMessage`, `PaywallInboundMessage`).
+> The server MUST keep these in sync; bump `schemaVersion` on any breaking change.
+
+---
+
+## 1. Concepts & glossary
+
+- **Paywall** — a code-driven screen authored in `.voidhash/paywalls/<id>.tsx`.
+  Compiles to a self-contained HTML+JS bundle.
+- **Component** — a reusable piece in `.voidhash/components/<id>.tsx`. Not served
+  standalone; shipped as raw source only (for the future GUI builder + diffing).
+- **Asset** — a binary (image/font) referenced by a paywall, content-addressed.
+- **Deploy** — one immutable upload of all paywalls/components/assets for a
+  project, produced by `voidhash-cli deploy`.
+- **Placement** (a.k.a. *location*) — a named slot in the app (e.g. `onboarding`,
+  `settings_upgrade`) that the SDK presents. A placement is *assigned* a paywall.
+  This indirection is what lets customers swap paywalls without an app release.
+- **Content hash** — lowercase hex SHA-256. Every file and every paywall has one;
+  identical content ⇒ identical hash ⇒ dedupe + cache key.
+- **Release / channel** — a pointer that maps placements → paywall versions for a
+  given audience (e.g. `production`, `staging`). The device resolves through a
+  channel, never directly to a deploy.
+
+---
+
+## 2. The full flow
+
+```
+ author .voidhash/*.tsx
+          │  voidhash-cli deploy
+          ▼
+   ┌──────────────┐  POST /v1/paywalls/deploys (manifest + files)   ┌──────────┐
+   │     CLI       │ ───────────────────────────────────────────▶  │  Server  │
+   └──────────────┘  ◀─── 201 { deployId, missingFiles? }           └────┬─────┘
+          │  PUT missing blobs (content-addressed)                       │ store deploy (immutable)
+          │  POST .../finalize                                           │ assign placements (manual or auto)
+          ▼                                                              ▼
+   dashboard: assign placement → paywall, publish to a channel
+          │
+          ▼
+   ┌──────────────┐  GET /v1/paywalls/resolve?placement=onboarding   ┌──────────┐
+   │  Device SDK   │ ───────────────────────────────────────────────▶│  Server  │
+   └──────┬───────┘  ◀── { url, contentHash, products, variables }    └──────────┘
+          │  open WebView(url), inject window.__VOIDHASH_PAYWALL__
+          │  bundle boots → renders paywall
+          ▼
+   user taps "Subscribe" → bridge postMessage → SDK runs StoreKit/Billing
+          │  SDK pushes status back into the WebView
+          ▼
+   purchase complete → SDK dismisses paywall, unlocks entitlement
+```
+
+---
+
+## 3. Deploy API **[server]**
+
+The CLI today builds the payload and writes it to `.voidhash/.build/` with a
+`manifest.json`; the upload call is the only missing piece (see the `// Upload`
+block in [`apps/cli/src/cli/commands/deploy.ts`](apps/cli/src/cli/commands/deploy.ts)).
+Implement the endpoints below; wiring the CLI to them is a one-function change.
+
+### 3.1 Authentication
+
+All deploy endpoints require a **secret** API key (`x-api-key: vh_sk_…`), the same
+scheme the CLI already uses (see [`apps/cli/src/utils/api-client.ts`](apps/cli/src/utils/api-client.ts)).
+The key authorizes a single `{team, project}`. Reject if `manifest.team` /
+`manifest.project` don't match the key's scope (`403`).
+
+### 3.2 Content-addressed upload (two-phase)
+
+To avoid re-uploading unchanged bundles/assets on every deploy, uploads are
+content-addressed and two-phase.
+
+**Phase 1 — create the deploy.** The CLI POSTs the **manifest only**.
+
+```
+POST /v1/paywalls/deploys
+Content-Type: application/json
+x-api-key: vh_sk_…
+
+<DeployManifest>            // exactly the manifest.json the CLI produced
+```
+
+The manifest lists every file with its `sha256`. The server responds with the
+deploy id and the subset of hashes it does **not** already have stored:
+
+```
+201 Created
+{
+  "deployId": "dep_…",
+  "missing": ["<sha256>", "<sha256>", …]   // upload only these
+}
+```
+
+**Phase 2 — upload missing blobs.** For each missing hash, the CLI uploads the
+raw bytes. Content-addressed, so the path is the hash:
+
+```
+PUT /v1/paywalls/deploys/dep_…/blobs/<sha256>
+Content-Type: application/octet-stream
+x-api-key: vh_sk_…
+
+<raw bytes>
+```
+
+The server MUST verify `sha256(body) === <sha256>` and reject mismatches (`422`).
+A blob already present returns `200`/`204` (idempotent).
+
+**Finalize.** Once all blobs are present:
+
+```
+POST /v1/paywalls/deploys/dep_…/finalize
+→ 200 { "deployId", "paywalls": [{ "id", "contentHash" }], "status": "ready" }
+```
+
+The server validates that every file referenced by the manifest now resolves to a
+stored blob; if any are missing it returns `409 { missing: […] }`. Finalize is the
+commit point — a deploy is **immutable** afterward.
+
+> A simple server MAY accept the whole payload in one multipart request instead of
+> the two-phase flow (see §3.4). The two-phase flow is recommended because most
+> deploys change one paywall, so most blobs are already stored.
+
+### 3.3 What's in the payload
+
+The `DeployManifest` (schema v1) groups everything (paths are relative to the
+project root, POSIX-separated):
+
+```jsonc
+{
+  "schemaVersion": 1,
+  "cliVersion": "0.0.1-alpha.1",
+  "runtimeVersion": "0.0.1-alpha.1",        // @voidhash/paywalls version built against
+  "team": "voidhash-dev-sro",
+  "project": "dev-proj",
+  "createdAt": "2026-06-03T10:00:00.000Z",
+  "paywalls": [
+    {
+      "id": "onboarding-green",
+      "title": "Onboarding (Green)",
+      "description": "Full-screen onboarding paywall with selectable plans.",
+      "source":    { "path": ".voidhash/paywalls/onboarding-green.tsx", "bytes": 4096, "sha256": "…" },
+      "artifacts": {
+        "html":    { "path": ".voidhash/.build/onboarding-green/index.html", "bytes": 900,   "sha256": "…", "contentType": "text/html; charset=utf-8" },
+        "js":      { "path": ".voidhash/.build/onboarding-green/bundle.js",   "bytes": 201000,"sha256": "…", "contentType": "text/javascript; charset=utf-8" }
+      },
+      "assets": [".voidhash/.build/onboarding-green/assets/hero-AB12CD.png"],
+      "contentHash": "5b00934c90ee…"          // identity of the deployable paywall
+    }
+  ],
+  "components": [
+    { "id": "product-option", "source": { "path": ".voidhash/components/product-option.tsx", "bytes": 1500, "sha256": "…" } }
+  ],
+  "config": { "path": "voidhash.config.ts", "bytes": 120, "sha256": "…" },
+  "assets": [
+    { "path": ".voidhash/.build/onboarding-green/assets/hero-AB12CD.png", "bytes": 88000, "sha256": "…", "contentType": "image/png" }
+  ]
+}
+```
+
+Three classes of content, all in one deploy:
+
+1. **Compiled artifacts** — `paywalls[].artifacts.html` + `.js`: the WebView-ready
+   bundle (the paywall React tree + the DOM renderer + React, IIFE, minified,
+   `NODE_ENV=production`, targeting `es2019`/`safari13`). This is what the device
+   renders.
+2. **Raw source** — `paywalls[].source`, `components[].source`, `config`: the
+   author's `.tsx`/config. Stored for the future GUI builder, deploy diffing, and
+   support. **Not** served to devices.
+3. **Assets** — `assets[]`: binaries referenced by bundles, content-addressed.
+
+### 3.4 Single-request fallback
+
+For a minimal first server, accept `multipart/form-data` at
+`POST /v1/paywalls/deploys` with one `manifest` part (JSON) and one part per file
+keyed by its `sha256`. Server validates hashes and finalizes atomically. Same
+result, fewer round-trips; lose the dedupe optimization.
+
+### 3.5 `contentHash` semantics
+
+`paywalls[].contentHash = sha256( sha256(html) : sha256(js) : sorted(asset hashes) )`
+(see `buildPaywalls` in [`apps/cli/src/domain/services/paywall-build.ts`](apps/cli/src/domain/services/paywall-build.ts)).
+The server MUST treat it as the deployable paywall's identity: dedupe storage by
+it, use it as the device cache key (§4.3), and expose it in resolve responses.
+
+---
+
+## 4. Delivery API **[server]**
+
+How a device gets a paywall to show. The SDK never references a deploy or a raw
+paywall id directly — it asks for a **placement**, and the server resolves the
+placement through the active **channel** to a concrete paywall version + the
+products/variables to inject.
+
+### 4.1 Resolve a placement
+
+```
+GET /v1/paywalls/resolve?placement=onboarding&platform=ios&locale=en-US
+x-api-key: vh_pk_…            // PUBLISHABLE key (safe to ship in the app)
+```
+
+```jsonc
+200 OK
+{
+  "placement": "onboarding",
+  "paywall": {
+    "id": "onboarding-green",
+    "contentHash": "5b00934c90ee…",
+    "url": "https://paywalls.voidhash.com/p/5b00934c90ee…/index.html",
+    "assetBaseUrl": "https://paywalls.voidhash.com/p/5b00934c90ee…/"
+  },
+  "runtime": {                 // becomes window.__VOIDHASH_PAYWALL__ (see §5.1)
+    "products": [
+      { "id": "com.app.pro.yearly", "displayName": "Yearly", "priceString": "$59.99",
+        "price": 59.99, "currencyCode": "USD", "period": "year", "trialPeriod": "7d" }
+    ],
+    "variables": { "accentColor": "#16a34a" },
+    "locale": "en-US",
+    "platform": "ios",
+    "defaultSelectedProductId": "com.app.pro.yearly"
+  },
+  "presentation": { "style": "fullScreen" }   // optional SDK presentation hints
+}
+```
+
+- **No paywall assigned** to the placement → `204 No Content`. The SDK shows
+  nothing (or a hardcoded fallback). Never error the app over a missing paywall.
+- **`products`** — the server resolves the placement's product group to store
+  product ids. The SDK enriches localized price/title from StoreKit/Billing and
+  presents; the server's `priceString`/`price` are display fallbacks. (The
+  `products`/`variables` map 1:1 onto `PaywallRuntimeConfig`; see §5.1.)
+- **`variables`** — author-overridable values, the seam for A/B tests &
+  remote config. Returning different paywall ids or variables per audience is how
+  experiments are run — opaque to this MVP, but `resolve` is the hook.
+
+### 4.2 Serving the bundle
+
+`paywall.url` serves the stored `index.html`; `assetBaseUrl` + the asset filename
+serves each asset. The HTML references `./bundle.js` and `./assets/…` relatively,
+so **all three must be served under the same path prefix** (`/p/<contentHash>/`).
+Recommended: object storage + CDN, immutable + long `Cache-Control` (content is
+addressed by hash, so it never changes for a given URL).
+
+`Content-Type` per the manifest. Set permissive CORS / WebView-friendly headers.
+The SDK MAY also pre-fetch and serve the bundle from a local cache (see §4.3).
+
+### 4.3 Caching & offline
+
+- The bundle URL is immutable per `contentHash`; the SDK SHOULD cache by it and
+  reuse across launches, only re-downloading when `resolve` returns a new hash.
+- The SDK SHOULD pre-warm the current paywall on app start so presentation is
+  instant and works offline.
+- `resolve` responses are short-lived (products/prices change); the bundle is
+  effectively permanent.
+
+---
+
+## 5. Runtime contract **[done — server must conform]**
+
+Once the WebView loads the bundle, two channels connect it to the native app.
+
+### 5.1 Config injection
+
+Before the bundle script runs, the SDK MUST set the global
+`window.__VOIDHASH_PAYWALL__` to the `runtime` object from §4.1. On a React Native
+WebView this is `injectedJavaScriptBeforeContentLoaded`:
+
+```js
+`window.__VOIDHASH_PAYWALL__ = ${JSON.stringify(runtime)};`
+```
+
+The bundle reads it via `readInjectedConfig()` and exposes it to author code
+through `usePaywallProducts()`, `usePaywallVariables()`, `useSelectedProduct()`,
+`usePaywallStatus()`. The shape is `PaywallRuntimeConfig`
+([`config.ts`](libraries/paywalls/src/runtime/config.ts)) — the server's `resolve`
+`runtime` block MUST match it field-for-field. If injection is skipped the paywall
+still mounts with no products (safe default).
+
+### 5.2 The native bridge
+
+Author actions (`usePaywallActions()`) are **requests** the paywall sends up to
+the native host; the host owns the actual store transaction and pushes status
+back down. The wire format is fixed in
+[`bridge.ts`](libraries/paywalls/src/runtime/bridge.ts).
+
+**Outbound — WebView → native** (delivered via `window.ReactNativeWebView.postMessage(json)`).
+The SDK parses `event.nativeEvent.data` as JSON:
+
+| `type` | Payload | Native action |
+| --- | --- | --- |
+| `voidhash.paywall.ready` | — | Paywall mounted; safe to inject status. |
+| `voidhash.paywall.purchase` | `{ productId }` | Start StoreKit/Billing purchase for `productId`. |
+| `voidhash.paywall.restore` | — | Restore entitlements. |
+| `voidhash.paywall.close` | — | Dismiss the paywall. |
+| `voidhash.paywall.openUrl` | `{ url }` | Open `url` (terms/privacy) in a browser. |
+| `voidhash.paywall.event` | `{ name, properties? }` | Forward to analytics (ties into existing Voidhash analytics). |
+
+**Inbound — native → WebView.** The SDK calls the function the runtime installs on
+`window`:
+
+```js
+webview.injectJavaScript(`window.__voidhashPaywallReceive(${JSON.stringify(msg)});`)
+```
+
+| `type` | Payload |
+| --- | --- |
+| `voidhash.paywall.status` | `{ status, productId?, error? }` where `status ∈ idle \| purchasing \| restoring \| purchased \| restored \| cancelled \| failed` |
+
+The paywall reflects `status` (e.g. disables the CTA while `purchasing`). On
+`purchased`/`restored` the SDK validates the receipt (existing Voidhash
+server-side validation), unlocks the entitlement, and dismisses.
+
+### 5.3 Purchase → entitlement (ties into existing platform)
+
+The bridge only conveys intent. Receipt validation, entitlement state, and
+revenue tracking continue to flow through the **existing** Voidhash subscription
+APIs and analytics — this spec does not change them. The paywall is purely the
+presentation + intent layer.
+
+---
+
+## 6. Suggested data model **[server]**
+
+```
+deploys              (id, team_id, project_id, schema_version, cli_version,
+                      runtime_version, created_at, status, manifest_json)
+blobs                (sha256 PK, bytes, content_type, storage_key)      -- content-addressed
+deploy_files         (deploy_id, role, logical_path, sha256 → blobs)    -- role: html|js|asset|source|config
+paywalls             (id, deploy_id, slug, title, description, content_hash)
+placements           (id, project_id, key)                              -- e.g. "onboarding"
+channels             (id, project_id, key)                              -- e.g. "production"
+placement_assignments(channel_id, placement_id, paywall_content_hash, product_group_id, variables_json, updated_at)
+```
+
+- `blobs` deduped by `sha256` across all deploys ⇒ unchanged bundles/assets stored
+  once.
+- A **deploy** is immutable; **assignments** are the only mutable, audience-facing
+  state (what `resolve` reads). This cleanly separates "what was built" from "what
+  is live", enabling instant rollback (repoint an assignment) without a rebuild.
+
+---
+
+## 7. Cross-cutting **[server]**
+
+- **Versioning.** Honor `manifest.schemaVersion`; reject unknown majors with a
+  clear "upgrade the CLI" error. Echo a server `apiVersion`.
+- **Idempotency.** Re-POSTing an identical manifest (same file set) returns the
+  same `deployId` (key on team+project+manifest hash). Blob PUTs are idempotent by
+  hash.
+- **Limits.** Cap bundle size (e.g. 5 MB) and asset size; return `413` with the
+  offending path. Validate `contentType` against an allowlist.
+- **Validation.** On finalize, recompute each paywall's `contentHash` from stored
+  blobs and reject mismatches — never serve an unverified bundle.
+- **Auth split.** Deploy needs a **secret** key (`vh_sk_`); `resolve` + bundle/asset
+  serving accept the **publishable** key (`vh_pk_`). Bundles/assets are public,
+  immutable, content-addressed — no secrets ever go in a paywall bundle.
+- **Errors.** JSON `{ error: { code, message, details? } }`; `4xx` for client
+  faults (bad hash, scope mismatch, missing blob), `5xx` for server faults.
+
+---
+
+## 8. Out of scope (future)
+
+- **GUI paywall builder** — will read the stored **raw source** and prop schemas
+  (`defineComponent` editor metadata: kind/label/default/options) to render an
+  editor. The deploy already ships everything it needs.
+- **Native renderers** — the renderer is abstracted behind a host-component
+  registry (`RendererProvider`), so a future native target reuses the same authored
+  paywalls without server changes; delivery would serve a native bundle instead of
+  HTML/JS, keyed by the same `contentHash` model.
+- **Experiments / targeting** — `resolve` is the designed hook (return different
+  paywall/variables per audience); the allocation engine is a later task.
+
+---
+
+## 9. Server implementation checklist
+
+- [ ] `POST /v1/paywalls/deploys` — accept `DeployManifest`, return `{ deployId, missing[] }`.
+- [ ] `PUT /v1/paywalls/deploys/:id/blobs/:sha256` — verify hash, store blob.
+- [ ] `POST /v1/paywalls/deploys/:id/finalize` — validate completeness + hashes, mark ready.
+- [ ] Object storage + CDN for `/p/<contentHash>/index.html|bundle.js|assets/*` (immutable, CORS, correct `Content-Type`).
+- [ ] `GET /v1/paywalls/resolve` — placement → `{ paywall.url, contentHash, runtime{products,variables,…} }`, `204` when unassigned.
+- [ ] Dashboard: assign placement → paywall, publish to a channel, rollback.
+- [ ] Enforce key scopes (`vh_sk_` deploy, `vh_pk_` resolve) + size/type limits.
+- [ ] Keep `runtime` (resolve) and the bridge message types in lockstep with `@voidhash/paywalls`; bump `schemaVersion` on breaking changes.
+- [ ] Wire the CLI upload: replace the `// Upload` placeholder in `deploy.ts` with the phase-1/2 calls.
+```
diff --git a/apps/cli/build.dev.ts b/apps/cli/build.dev.ts
index 0c4de7371..d75f0864c 100644
--- a/apps/cli/build.dev.ts
+++ b/apps/cli/build.dev.ts
@@ -6,7 +6,13 @@ esbuild.buildSync({
   },
   bundle: true,
   entryPoints: ["./src/cli/index.ts"],
-  external: ["esbuild"],
+  external: [
+    "esbuild",
+    "@voidhash/studio",
+    "@voidhash/paywalls",
+    "vite",
+    "typescript",
+  ],
   format: "cjs",
   outfile: "dist/index.cjs",
   platform: "node",
diff --git a/apps/cli/build.ts b/apps/cli/build.ts
index c548640c4..68970eea2 100644
--- a/apps/cli/build.ts
+++ b/apps/cli/build.ts
@@ -12,7 +12,15 @@ esbuild.buildSync({
     "process.env.VOIDHASH_CLI_VERSION": `"${pkg.version}"`,
   },
   entryPoints: ["./src/cli/index.ts"],
-  external: ["esbuild"],
+  // These are resolved/launched at runtime (Studio's Vite app, the paywalls
+  // runtime, Vite itself) — keep them out of the bundle.
+  external: [
+    "esbuild",
+    "@voidhash/studio",
+    "@voidhash/paywalls",
+    "vite",
+    "typescript",
+  ],
   format: "cjs",
   outfile: "dist/bin.cjs",
   platform: "node",
diff --git a/apps/cli/package.json b/apps/cli/package.json
index 38fb9fb79..34ac1dc52 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -35,10 +35,13 @@
     "@effect/platform-node": "4.0.0-beta.23",
     "@voidhash/generated-clients": "workspace:*",
     "@voidhash/shared": "workspace:*",
+    "@voidhash/studio": "workspace:*",
     "better-auth": "catalog:",
     "effect": "4.0.0-beta.23",
+    "esbuild": "^0.25.10",
     "esbuild-register": "^3.6.0",
-    "nanoid": "^5.1.5"
+    "nanoid": "^5.1.5",
+    "typescript": "5.6.3"
   },
   "devDependencies": {
     "@effect/language-service": "catalog:",
@@ -49,7 +52,6 @@
     "esbuild": "^0.25.10",
     "tsup": "^6.1.3",
     "tsx": "^4.19.3",
-    "typescript": "5.6.3",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.0.9"
   }
diff --git a/apps/cli/src/cli/commands/deploy.ts b/apps/cli/src/cli/commands/deploy.ts
new file mode 100644
index 000000000..56f7d6692
--- /dev/null
+++ b/apps/cli/src/cli/commands/deploy.ts
@@ -0,0 +1,179 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { Console, Effect, Path } from "effect";
+import { Command, Flag } from "effect/unstable/cli";
+import {
+  type BuildPaywallsResult,
+  buildPaywalls,
+} from "../../domain/services/paywall-build";
+import {
+  type UploadPaywallDeployResult,
+  uploadPaywallDeploy,
+} from "../../domain/services/paywall-deploy-upload";
+import { SourceCode } from "../../domain/services/source-code";
+import { userError } from "../../utils/error-formatter";
+
+const formatBytes = (bytes: number): string =>
+  bytes < 1024 ? `${bytes} B` : `${(bytes / 1024).toFixed(1)} KB`;
+
+const reportBuild = ({ manifest, outDir, manifestPath }: BuildPaywallsResult) =>
+  Effect.gen(function* reportBuild() {
+    yield* Console.log(
+      `\nBuilt ${manifest.paywalls.length} paywall(s) and ` +
+        `${manifest.components.length} component(s) for ` +
+        `${manifest.team}/${manifest.project}:\n`,
+    );
+    for (const paywall of manifest.paywalls) {
+      const size = paywall.artifacts.html.bytes + paywall.artifacts.js.bytes;
+      yield* Console.log(
+        `  • ${paywall.title} (${paywall.id})\n` +
+          `      hash    ${paywall.contentHash.slice(0, 12)}\n` +
+          `      bundle  ${formatBytes(size)}` +
+          (paywall.assets.length ? `, ${paywall.assets.length} asset(s)` : ""),
+      );
+    }
+    for (const component of manifest.components) {
+      yield* Console.log(
+        `  • ${component.title ?? component.id} (${component.id}, component)\n` +
+          `      hash     ${component.contentHash.slice(0, 12)}\n` +
+          `      runtime  ${formatBytes(component.artifacts.runtime.bytes)}, ` +
+          `${component.previews.length} preview(s)` +
+          (component.artifacts.panel ? ", custom panel" : ""),
+      );
+    }
+    yield* Console.log(`\n  ${manifest.assets.length} asset(s)`);
+    yield* Console.log(`  Output:   ${outDir}`);
+    yield* Console.log(`  Manifest: ${manifestPath}`);
+  });
+
+const reportDeploy = (result: UploadPaywallDeployResult) =>
+  Effect.gen(function* reportDeploy() {
+    yield* Console.log(
+      `\nDeploy ${result.deployId} is ${result.finalize.status} ` +
+        `(${result.uploadedCount} blob(s) uploaded, ${result.cachedCount} reused).`,
+    );
+    if (result.finalize.paywalls.length > 0) {
+      yield* Console.log("\nPaywalls:");
+      for (const paywall of result.finalize.paywalls) {
+        yield* Console.log(
+          `  • ${paywall.id}  v${paywall.version}\n      ${paywall.url}`,
+        );
+      }
+    }
+    if (result.finalize.components.length > 0) {
+      yield* Console.log("\nComponents:");
+      for (const component of result.finalize.components) {
+        yield* Console.log(`  • ${component.id}  v${component.version}`);
+      }
+    }
+  });
+
+/**
+ * `voidhash-cli deploy [--dry-run]`
+ *
+ * Builds every paywall and component in `.voidhash` into the content-addressed
+ * schemaVersion-2 deploy payload, then runs the contract-§4 upload flow:
+ * create the deploy from the manifest, upload missing blobs, finalize, and
+ * print the released paywall URLs/versions. `--dry-run` stops after the build.
+ */
+export const deployCommand = Command.make(
+  "deploy",
+  {
+    dryRun: Flag.boolean("dry-run").pipe(
+      Flag.withDescription("Build the deploy payload without uploading it"),
+      Flag.withDefault(false),
+    ),
+  },
+  ({ dryRun }) =>
+    Effect.gen(function* deployCommand() {
+      const sourceCode = yield* SourceCode;
+      const path = yield* Path.Path;
+
+      const config = yield* sourceCode
+        .loadVoidhashConfig()
+        .pipe(
+          Effect.catchTag("VoidhashConfigNotFoundError", () =>
+            Effect.fail(
+              userError(
+                "voidhash.config.ts not found. Run 'voidhash-cli init' to create one.",
+              ),
+            ),
+          ),
+        );
+
+      const projectRoot = path.resolve(".");
+      const cliVersion = process.env.VOIDHASH_CLI_VERSION ?? "0.0.0";
+
+      // Best-effort: stamp the @voidhash/paywalls version the bundle was built
+      // against, resolved from the user's project. The package's exports map
+      // does not expose ./package.json, so walk up from the resolved entry.
+      const runtimeVersion = yield* Effect.try({
+        try: () => {
+          const entry = require.resolve("@voidhash/paywalls", {
+            paths: [projectRoot],
+          });
+          for (
+            let dir = dirname(entry);
+            dir !== dirname(dir);
+            dir = dirname(dir)
+          ) {
+            const pkgPath = join(dir, "package.json");
+            if (existsSync(pkgPath)) {
+              const pkg = JSON.parse(readFileSync(pkgPath, "utf8")) as {
+                name?: string;
+                version?: string;
+              };
+              if (
+                pkg.name === "@voidhash/paywalls" &&
+                typeof pkg.version === "string"
+              ) {
+                return pkg.version;
+              }
+            }
+          }
+          throw new Error("@voidhash/paywalls package.json not found");
+        },
+        catch: (cause) => cause,
+      }).pipe(Effect.orElseSucceed(() => "unknown"));
+
+      yield* Console.log("Building paywalls…");
+
+      const result = yield* buildPaywalls({
+        cliVersion,
+        onWarn: (message) => Console.log(`  Warning: ${message}`),
+        project: config.project,
+        projectRoot,
+        runtimeVersion,
+        team: config.team,
+      }).pipe(
+        Effect.catchTag("PaywallBuildError", (e) =>
+          Effect.fail(userError(e.message)).pipe(
+            Effect.tapError(() => Effect.logDebug(e.cause)),
+          ),
+        ),
+      );
+
+      yield* reportBuild(result);
+
+      if (dryRun) {
+        yield* Console.log("\nDry run — nothing uploaded.");
+        return;
+      }
+
+      yield* Console.log("\nDeploying…");
+
+      const deployed = yield* uploadPaywallDeploy({
+        manifest: result.manifest,
+        onProgress: (message) => Console.log(`  ${message}`),
+        projectRoot,
+      }).pipe(
+        Effect.catchTag("PaywallDeployUploadError", (e) =>
+          Effect.fail(userError(e.message)).pipe(
+            Effect.tapError(() => Effect.logDebug(e.cause)),
+          ),
+        ),
+      );
+
+      yield* reportDeploy(deployed);
+    }),
+).pipe(Command.withDescription("Build and deploy paywalls to Voidhash."));
diff --git a/apps/cli/src/cli/commands/studio.ts b/apps/cli/src/cli/commands/studio.ts
new file mode 100644
index 000000000..38b1aff80
--- /dev/null
+++ b/apps/cli/src/cli/commands/studio.ts
@@ -0,0 +1,133 @@
+import { type ChildProcess, spawn } from "node:child_process";
+import { dirname, join } from "node:path";
+import { Console, Effect, FileSystem, Path } from "effect";
+import { Command, Flag } from "effect/unstable/cli";
+
+import { userError } from "../../utils/error-formatter";
+
+const DEFAULT_PORT = 4830;
+
+/** Resolves the installed Studio app directory and the Vite CLI entry point. */
+const resolveStudioPaths = () =>
+  Effect.try({
+    try: () => {
+      // `require.resolve` works both in the bundled CJS binary and under tsx in
+      // development. We resolve the package manifest to get the app root, and
+      // Vite's own CLI entry so we can launch it without depending on bin
+      // shims being hoisted in any particular way.
+      const studioDir = dirname(
+        require.resolve("@voidhash/studio/package.json"),
+      );
+      // Resolve Vite via its package.json (an exported subpath) from the Studio
+      // package, then join the CLI entry — `vite/bin/vite.js` is not an exported
+      // subpath, so it can't be resolved directly under Node's exports rules.
+      const viteDir = dirname(
+        require.resolve("vite/package.json", { paths: [studioDir] }),
+      );
+      const viteBin = join(viteDir, "bin", "vite.js");
+      return { studioDir, viteBin };
+    },
+    catch: () =>
+      userError(
+        "Could not locate the Voidhash Studio app. Reinstall the CLI and try again.",
+      ),
+  });
+
+/** Best-effort: open the given URL in the user's default browser. */
+const openBrowser = (url: string): void => {
+  const command =
+    process.platform === "darwin"
+      ? "open"
+      : process.platform === "win32"
+        ? "cmd"
+        : "xdg-open";
+  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+  try {
+    spawn(command, args, { stdio: "ignore", detached: true }).unref();
+  } catch {
+    // Opening the browser is a convenience; never fail the command over it.
+  }
+};
+
+/**
+ * `voidhash-cli studio [--port] [--no-open]`
+ *
+ * Launches the paywall preview Studio (a Vite app) against the current project.
+ * The project's `.voidhash` folder is the source of truth; the Studio process is
+ * pointed at it via the `VOIDHASH_PROJECT_ROOT` env var. Runs until interrupted
+ * (Ctrl+C), at which point the Vite child process is terminated.
+ */
+export const studioCommand = Command.make(
+  "studio",
+  {
+    port: Flag.integer("port").pipe(
+      Flag.withAlias("p"),
+      Flag.withDescription("Port for the Studio dev server"),
+      Flag.withDefault(DEFAULT_PORT),
+    ),
+    open: Flag.boolean("open").pipe(
+      Flag.withDescription("Open Studio in your browser once it starts"),
+      Flag.withDefault(true),
+    ),
+  },
+  ({ port, open }) =>
+    Effect.gen(function* studioCommand() {
+      const fs = yield* FileSystem.FileSystem;
+      const path = yield* Path.Path;
+
+      const projectRoot = path.resolve(".");
+      const voidhashDir = path.join(projectRoot, ".voidhash");
+
+      const hasVoidhash = yield* fs.exists(voidhashDir);
+      if (!hasVoidhash) {
+        yield* Console.warn(
+          `No .voidhash folder found in ${projectRoot}.\n` +
+            "Studio will start, but there are no paywalls to preview yet.\n" +
+            "Create .voidhash/paywalls/<name>.tsx to get started.\n",
+        );
+      }
+
+      const { studioDir, viteBin } = yield* resolveStudioPaths();
+      const url = `http://localhost:${port}`;
+
+      yield* Console.log("\n  Voidhash Studio");
+      yield* Console.log(`  Project:  ${projectRoot}`);
+      yield* Console.log(`  Preview:  ${url}\n`);
+
+      // Spawn Vite, keep the command alive until the child exits, and ensure the
+      // child is terminated if the fiber is interrupted (Ctrl+C).
+      yield* Effect.acquireUseRelease(
+        Effect.sync(() =>
+          spawn(
+            process.execPath,
+            [viteBin, "--port", String(port), "--strictPort"],
+            {
+              cwd: studioDir,
+              env: { ...process.env, VOIDHASH_PROJECT_ROOT: projectRoot },
+              stdio: "inherit",
+            },
+          ),
+        ),
+        (child: ChildProcess) => {
+          if (open) {
+            // Give Vite a moment to bind the port before opening the browser.
+            setTimeout(() => openBrowser(url), 1500);
+          }
+          return Effect.callback<void>((resume) => {
+            child.on("exit", () => resume(Effect.void));
+            child.on("error", (error) => resume(Effect.die(error)));
+          });
+        },
+        (child: ChildProcess) =>
+          Effect.sync(() => {
+            if (child.exitCode === null && !child.killed) {
+              child.kill("SIGTERM");
+            }
+          }),
+      );
+    }),
+).pipe(
+  Command.withDescription(
+    "Launch the paywall preview Studio for this project.",
+  ),
+);
diff --git a/apps/cli/src/cli/index.ts b/apps/cli/src/cli/index.ts
index 85284d429..6ca1350c4 100644
--- a/apps/cli/src/cli/index.ts
+++ b/apps/cli/src/cli/index.ts
@@ -1,6 +1,6 @@
-import { Command } from "effect/unstable/cli";
-import { NodeServices, NodeRuntime } from "@effect/platform-node";
+import { NodeRuntime, NodeServices } from "@effect/platform-node";
 import { Effect, Layer, References } from "effect";
+import { Command } from "effect/unstable/cli";
 import { FetchHttpClient } from "effect/unstable/http";
 
 import { Auth } from "../domain/services/auth";
@@ -15,12 +15,16 @@ import {
 } from "../utils/error-formatter";
 import { authCommand } from "./commands/auth";
 import { configCommand } from "./commands/config";
+import { deployCommand } from "./commands/deploy";
 import { initCommand } from "./commands/init";
+import { studioCommand } from "./commands/studio";
 import { typesCommand } from "./commands/types";
 import { debugOption } from "./shared-options";
 
-const command = Command.make("voidhash", { debug: debugOption }, () =>
-  Effect.void
+const command = Command.make(
+  "voidhash",
+  { debug: debugOption },
+  () => Effect.void,
 ).pipe(
   Command.withDescription("Voidhash CLI application."),
   Command.withSubcommands([
@@ -28,7 +32,9 @@ const command = Command.make("voidhash", { debug: debugOption }, () =>
     authCommand,
     typesCommand,
     configCommand,
-  ])
+    studioCommand,
+    deployCommand,
+  ]),
 );
 
 const cli = Command.run(command, {
@@ -37,14 +43,16 @@ const cli = Command.run(command, {
 
 // Apply debug log level if --debug flag is present
 const cliEffect = cli.pipe(
-  isDebugMode() ? Effect.provideService(References.MinimumLogLevel, "Debug") : (x) => x
+  isDebugMode()
+    ? Effect.provideService(References.MinimumLogLevel, "Debug")
+    : (x) => x,
 );
 
 const ServicesLayer = Layer.mergeAll(
   SourceCode.Default,
   Auth.Default,
   Codegen.Default,
-  SchemaService.Default
+  SchemaService.Default,
 );
 
 const PlatformLayer = Layer.mergeAll(NodeServices.layer, FetchHttpClient.layer);
@@ -52,9 +60,9 @@ const PlatformLayer = Layer.mergeAll(NodeServices.layer, FetchHttpClient.layer);
 const MainLayer = ServicesLayer.pipe(
   Layer.provideMerge(ApiClient.Default),
   Layer.provideMerge(CliConfig.Default),
-  Layer.provideMerge(PlatformLayer)
+  Layer.provideMerge(PlatformLayer),
 );
 
 NodeRuntime.runMain(
-  cliEffect.pipe(Effect.provide(MainLayer), withValidationErrorHandler)
+  cliEffect.pipe(Effect.provide(MainLayer), withValidationErrorHandler),
 );
diff --git a/apps/cli/src/domain/schema/paywall-deploy.ts b/apps/cli/src/domain/schema/paywall-deploy.ts
new file mode 100644
index 000000000..d1fb2b6db
--- /dev/null
+++ b/apps/cli/src/domain/schema/paywall-deploy.ts
@@ -0,0 +1,163 @@
+/**
+ * The deploy manifest contract (schemaVersion 2) — the payload `voidhash-cli
+ * deploy` produces at `.voidhash/.build/manifest.json` and uploads to the
+ * Voidhash backend. The wire-format source of truth is
+ * `docs/specs/paywall-deploy-contract.md` (§1); these schemas mirror it
+ * exactly and MUST stay in sync. Breaking changes bump the schema version.
+ */
+import { Schema } from "effect";
+
+/** Current deploy manifest schema version (contract §1). */
+export const DEPLOY_MANIFEST_VERSION = 2 as const;
+
+/** Paywall/component slug shape (contract §1.1). */
+export const DEPLOY_SLUG_REGEX = /^[a-z0-9][a-z0-9-]{0,63}$/;
+
+const SHA256_HEX_REGEX = /^[a-f0-9]{64}$/;
+
+/** A slug identifier derived from a source file name, e.g. `onboarding`. */
+export const DeploySlugSchema = Schema.String.check(
+  Schema.isPattern(DEPLOY_SLUG_REGEX),
+);
+
+/** Lowercase hex SHA-256 digest. */
+export const DeploySha256Schema = Schema.String.check(
+  Schema.isPattern(SHA256_HEX_REGEX),
+);
+
+/** A file's identity: where it lives, how big it is, and its content hash. */
+export const DeployFileSchema = Schema.Struct({
+  /** Path relative to the project root, POSIX-separated. */
+  path: Schema.String,
+  bytes: Schema.Number.check(Schema.isInt()),
+  /** Lowercase hex SHA-256 of the file's raw bytes. */
+  sha256: DeploySha256Schema,
+});
+export type DeployFile = typeof DeployFileSchema.Type;
+
+/** A deployable output file with its MIME type. */
+export const DeployArtifactSchema = Schema.Struct({
+  ...DeployFileSchema.fields,
+  contentType: Schema.String,
+});
+export type DeployArtifact = typeof DeployArtifactSchema.Type;
+
+/** A binary asset (image, font, …) referenced by one or more paywalls. */
+export const DeployAssetSchema = DeployArtifactSchema;
+export type DeployAsset = typeof DeployAssetSchema.Type;
+
+/** Author variable values: `string | number | boolean` only (contract §1.1). */
+export const DeployVariableValueSchema = Schema.Union([
+  Schema.String,
+  Schema.Number,
+  Schema.Boolean,
+]);
+export type DeployVariableValue = typeof DeployVariableValueSchema.Type;
+
+/** The paywall's author variables, keyed by name. */
+export const DeployVariablesSchema = Schema.Record(
+  Schema.String,
+  DeployVariableValueSchema,
+);
+export type DeployVariables = typeof DeployVariablesSchema.Type;
+
+/** The compiled, WebView-ready output for a single paywall. */
+export const DeployPaywallArtifactsSchema = Schema.Struct({
+  /** The HTML shell that boots the paywall in a WebView. */
+  html: DeployArtifactSchema,
+  /** The bundled JS (paywall tree + renderer + React) the shell loads. */
+  js: DeployArtifactSchema,
+});
+export type DeployPaywallArtifacts = typeof DeployPaywallArtifactsSchema.Type;
+
+/** One paywall in the deploy manifest (contract §1). */
+export const DeployPaywallSchema = Schema.Struct({
+  /** Slug derived from the source file name, e.g. `onboarding`. */
+  id: DeploySlugSchema,
+  title: Schema.String,
+  description: Schema.optional(Schema.String),
+  /** Product slugs the paywall uses (may be empty). */
+  products: Schema.Array(Schema.String),
+  variables: DeployVariablesSchema,
+  /** The raw author source for this paywall. */
+  source: DeployFileSchema,
+  artifacts: DeployPaywallArtifactsSchema,
+  /** Paths into the manifest's top-level `assets[]` this paywall references. */
+  assets: Schema.Array(Schema.String),
+  /**
+   * `sha256(sha256(html) + ":" + sha256(js) + ":" + sortedAssetHashes.join(":"))`
+   * (contract §1.2) — the paywall's deployable identity: storage prefix, cache
+   * key, dedupe key.
+   */
+  contentHash: DeploySha256Schema,
+});
+export type DeployPaywall = typeof DeployPaywallSchema.Type;
+
+/** One rendered preview state of a component (contract §3 node tree file). */
+export const DeployComponentPreviewSchema = Schema.Struct({
+  state: Schema.String,
+  file: DeployArtifactSchema,
+});
+export type DeployComponentPreview = typeof DeployComponentPreviewSchema.Type;
+
+/** The compiled artifacts of a component. */
+export const DeployComponentArtifactsSchema = Schema.Struct({
+  /** ESM bundle of the component module (react/@voidhash/paywalls external). */
+  runtime: DeployArtifactSchema,
+  /** Custom editor panel bundle, or `null` when none is declared. */
+  panel: Schema.NullOr(DeployArtifactSchema),
+});
+export type DeployComponentArtifacts =
+  typeof DeployComponentArtifactsSchema.Type;
+
+/** One reusable component in the deploy manifest (contract §1). */
+export const DeployComponentSchema = Schema.Struct({
+  /** Slug derived from the source file name, e.g. `product-option`. */
+  id: DeploySlugSchema,
+  title: Schema.optional(Schema.String),
+  /** The raw author source for this component. */
+  source: DeployFileSchema,
+  /** The §2 component manifest artifact. */
+  manifest: DeployArtifactSchema,
+  /** §3 preview node trees, one per preview state. */
+  previews: Schema.Array(DeployComponentPreviewSchema),
+  artifacts: DeployComponentArtifactsSchema,
+  /**
+   * `sha256(sha256(manifest) + ":" + sha256(runtime) + ":" + (sha256(panel) | "")
+   * + ":" + sortedPreviewHashes.join(":"))` (contract §1.2).
+   */
+  contentHash: DeploySha256Schema,
+});
+export type DeployComponent = typeof DeployComponentSchema.Type;
+
+/** The full manifest written to `.voidhash/.build/manifest.json` (contract §1). */
+export const DeployManifestSchema = Schema.Struct({
+  schemaVersion: Schema.Literal(DEPLOY_MANIFEST_VERSION),
+  cliVersion: Schema.String,
+  /** Version of `@voidhash/paywalls` the bundles were built against. */
+  runtimeVersion: Schema.String,
+  /** Organization slug. */
+  team: Schema.String,
+  /** Project slug. */
+  project: Schema.String,
+  /** ISO-8601 build timestamp. */
+  createdAt: Schema.String,
+  paywalls: Schema.Array(DeployPaywallSchema),
+  components: Schema.Array(DeployComponentSchema),
+  /** The project's `voidhash.config.*`. */
+  config: DeployFileSchema,
+  /** Every binary asset, deduped by path. */
+  assets: Schema.Array(DeployAssetSchema),
+}).check(
+  // Contract §1.1: at least one paywall or one component.
+  Schema.makeFilter(
+    (manifest: {
+      readonly paywalls: ReadonlyArray<unknown>;
+      readonly components: ReadonlyArray<unknown>;
+    }) =>
+      manifest.paywalls.length > 0 || manifest.components.length > 0
+        ? undefined
+        : "manifest must contain at least one paywall or one component",
+  ),
+);
+export type DeployManifest = typeof DeployManifestSchema.Type;
diff --git a/apps/cli/src/domain/services/paywall-build.ts b/apps/cli/src/domain/services/paywall-build.ts
new file mode 100644
index 000000000..654fd44db
--- /dev/null
+++ b/apps/cli/src/domain/services/paywall-build.ts
@@ -0,0 +1,1018 @@
+/**
+ * The deploy build pipeline: scans `.voidhash/paywalls` and
+ * `.voidhash/components`, typechecks them, compiles every paywall into a
+ * WebView-ready HTML/JS bundle and every component into its §2 manifest, §3
+ * preview trees and runtime bundle, and assembles the content-addressed
+ * schemaVersion-2 deploy manifest (contract: docs/specs/paywall-deploy-contract.md).
+ */
+import { createHash } from "node:crypto";
+import { existsSync, promises as fsp, readdirSync, statSync } from "node:fs";
+import {
+  basename,
+  dirname,
+  extname,
+  join,
+  posix,
+  relative,
+  sep,
+} from "node:path";
+import { Data, Effect, Schema } from "effect";
+import * as esbuild from "esbuild";
+
+import {
+  DEPLOY_MANIFEST_VERSION,
+  DEPLOY_SLUG_REGEX,
+  type DeployArtifact,
+  type DeployAsset,
+  type DeployComponent,
+  type DeployComponentPreview,
+  type DeployFile,
+  type DeployManifest,
+  DeployManifestSchema,
+  type DeployPaywall,
+  type DeployVariables,
+} from "../schema/paywall-deploy";
+import { closedImportsPlugin } from "./paywall-closed-imports";
+import {
+  PAYWALL_ASSET_EXTENSIONS,
+  typecheckPaywallSources,
+} from "./paywall-typecheck";
+
+export class PaywallBuildError extends Data.TaggedError("PaywallBuildError")<{
+  readonly message: string;
+  readonly cause?: unknown;
+}> {}
+
+/** Directory (relative to the project root) where build output is written. */
+export const BUILD_DIR = join(".voidhash", ".build");
+
+const SOURCE_EXTENSIONS = [".tsx", ".jsx", ".ts", ".js"];
+
+/**
+ * Binary asset types paywall bundles may import; emitted as files. Derived
+ * from the typecheck gate's extension list so the two can never drift.
+ */
+const PAYWALL_ASSET_LOADERS: Record<string, esbuild.Loader> =
+  Object.fromEntries(
+    PAYWALL_ASSET_EXTENSIONS.map((ext) => [`.${ext}`, "file"]),
+  );
+
+/**
+ * Component runtime bundles must stay a single file (the manifest has no
+ * per-component asset list), so binary imports are inlined as data URLs.
+ */
+const COMPONENT_ASSET_LOADERS: Record<string, esbuild.Loader> =
+  Object.fromEntries(
+    Object.keys(PAYWALL_ASSET_LOADERS).map((ext) => [ext, "dataurl"]),
+  );
+
+const CONTENT_TYPES: Record<string, string> = {
+  ".html": "text/html; charset=utf-8",
+  ".js": "text/javascript; charset=utf-8",
+  ".json": "application/json",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".svg": "image/svg+xml",
+  ".ttf": "font/ttf",
+  ".otf": "font/otf",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+};
+
+const textEncoder = new TextEncoder();
+
+/** Lowercase hex SHA-256 of a string or byte payload. */
+export const sha256Hex = (data: Uint8Array | string): string =>
+  createHash("sha256").update(data).digest("hex");
+
+/**
+ * Contract §1.2 paywall content hash:
+ * `sha256(sha256(html) + ":" + sha256(js) + ":" + sortedAssetHashes.join(":"))`.
+ */
+export const computePaywallContentHash = (input: {
+  readonly htmlSha256: string;
+  readonly jsSha256: string;
+  readonly assetSha256s: ReadonlyArray<string>;
+}): string =>
+  sha256Hex(
+    `${input.htmlSha256}:${input.jsSha256}:${[...input.assetSha256s]
+      .sort()
+      .join(":")}`,
+  );
+
+/**
+ * Contract §1.2 component content hash:
+ * `sha256(sha256(manifest) + ":" + sha256(runtime) + ":" + (sha256(panel) | "")
+ * + ":" + sortedPreviewHashes.join(":"))`.
+ */
+export const computeComponentContentHash = (input: {
+  readonly manifestSha256: string;
+  readonly runtimeSha256: string;
+  readonly panelSha256?: string | null;
+  readonly previewSha256s: ReadonlyArray<string>;
+}): string =>
+  sha256Hex(
+    `${input.manifestSha256}:${input.runtimeSha256}:${
+      input.panelSha256 ?? ""
+    }:${[...input.previewSha256s].sort().join(":")}`,
+  );
+
+const contentTypeFor = (path: string): string =>
+  CONTENT_TYPES[extname(path).toLowerCase()] ?? "application/octet-stream";
+
+/** Normalizes an absolute path to a project-root-relative POSIX path. */
+const toRelPosix = (projectRoot: string, abs: string): string =>
+  relative(projectRoot, abs).split(sep).join(posix.sep);
+
+// Discovery (isSourceFile / idFromFile / listFilesRecursive) is mirrored by
+// Studio's virtual-paywalls plugin
+// (apps/studio/src/server/virtual-paywalls-plugin.ts) — keep both in sync.
+const isSourceFile = (name: string): boolean =>
+  SOURCE_EXTENSIONS.some((ext) => name.endsWith(ext)) &&
+  !name.endsWith(".d.ts");
+
+const idFromFile = (file: string): string =>
+  basename(file).replace(/\.(tsx|jsx|ts|js)$/, "");
+
+/** Recursively lists files under a directory (absolute paths). */
+const listFilesRecursive = (dir: string): string[] => {
+  if (!existsSync(dir)) return [];
+  const out: string[] = [];
+  for (const entry of readdirSync(dir)) {
+    const full = join(dir, entry);
+    if (statSync(full).isDirectory()) {
+      out.push(...listFilesRecursive(full));
+    } else {
+      out.push(full);
+    }
+  }
+  return out;
+};
+
+const listSourceFiles = (dir: string): string[] =>
+  listFilesRecursive(dir).filter((f) => isSourceFile(basename(f)));
+
+/** Turns an esbuild failure into a readable, file-located error message. */
+const describeEsbuildFailure = (cause: unknown): string | undefined => {
+  if (
+    typeof cause === "object" &&
+    cause !== null &&
+    "errors" in cause &&
+    Array.isArray((cause as esbuild.BuildFailure).errors)
+  ) {
+    return (cause as esbuild.BuildFailure).errors
+      .map((error) => {
+        const location = error.location
+          ? `${error.location.file}:${error.location.line}:${error.location.column}: `
+          : "";
+        return `  ${location}${error.text}`;
+      })
+      .join("\n");
+  }
+  return;
+};
+
+const bundleFailure = (subject: string) => (cause: unknown) => {
+  const details = describeEsbuildFailure(cause);
+  return new PaywallBuildError({
+    cause,
+    message: details
+      ? `Failed to bundle ${subject}:\n${details}`
+      : `Failed to bundle ${subject}`,
+  });
+};
+
+// ── User-project library access ──────────────────────────────────────────────
+//
+// `@voidhash/paywalls` (and React) are intentionally NOT dependencies of the
+// CLI: modules are resolved from the *user's* project so the paywall module,
+// the tree renderer and React are all one instance.
+
+interface UserPaywallsLib {
+  readonly extractComponentManifest: (
+    definition: ComponentDefinitionLike,
+  ) => { readonly id: string } & Record<string, unknown>;
+}
+
+interface UserTreeLib {
+  readonly renderToNodeTree: (
+    element: unknown,
+    options?: {
+      readonly config?: {
+        readonly products?: ReadonlyArray<unknown>;
+        readonly variables?: Record<string, unknown>;
+      };
+      readonly state?: string;
+    },
+  ) => Promise<unknown>;
+}
+
+interface UserReactLib {
+  readonly createElement: (
+    type: unknown,
+    props: Record<string, unknown> | null,
+  ) => unknown;
+}
+
+interface ComponentPreviewStateLike {
+  readonly props?: Record<string, unknown>;
+  readonly data?: {
+    readonly products?: ReadonlyArray<unknown>;
+    readonly variables?: Record<string, unknown>;
+  };
+}
+
+interface ComponentDefinitionLike {
+  readonly id: string;
+  readonly title?: string;
+  readonly description?: string;
+  readonly previews: Record<string, ComponentPreviewStateLike>;
+  readonly panel?: unknown;
+  readonly component: unknown;
+  readonly __voidhash: { readonly kind: string };
+}
+
+const requireFromProject = <T>(
+  projectRoot: string,
+  specifier: string,
+): Effect.Effect<T, PaywallBuildError> =>
+  Effect.try({
+    try: () =>
+      require(require.resolve(specifier, { paths: [projectRoot] })) as T,
+    catch: (cause) =>
+      new PaywallBuildError({
+        cause,
+        message:
+          `Failed to load "${specifier}" from the project. ` +
+          `Make sure "@voidhash/paywalls" is installed in your project.`,
+      }),
+  });
+
+/**
+ * Registers an esbuild `require` hook with the `tsx` loader so paywall and
+ * component modules (which contain JSX) can be loaded for metadata extraction
+ * and preview rendering. The shared `safeRegister` helper uses the `ts`
+ * loader, which rejects JSX — hence a dedicated hook here.
+ */
+const registerTsxLoader = (): Effect.Effect<
+  { unregister: () => void },
+  PaywallBuildError
+> =>
+  Effect.tryPromise({
+    try: async () => {
+      const { register } = await import("esbuild-register/dist/node");
+      return register({ format: "cjs", loader: "tsx" });
+    },
+    catch: (cause) =>
+      new PaywallBuildError({
+        cause,
+        message: "Failed to initialize the TypeScript/JSX loader.",
+      }),
+  });
+
+const loadModuleDefault = (
+  file: string,
+): Effect.Effect<unknown, PaywallBuildError> =>
+  Effect.try({
+    try: () => {
+      delete require.cache[require.resolve(file)];
+      const mod = require(file) as { default?: unknown };
+      return mod?.default ?? mod;
+    },
+    catch: (cause) =>
+      new PaywallBuildError({
+        cause,
+        message: `Failed to load ${file}: ${
+          cause instanceof Error ? cause.message : String(cause)
+        }`,
+      }),
+  });
+
+const isScalar = (value: unknown): value is string | number | boolean =>
+  typeof value === "string" ||
+  typeof value === "number" ||
+  typeof value === "boolean";
+
+interface PaywallModuleMeta {
+  readonly title: string;
+  readonly description?: string;
+  readonly products: ReadonlyArray<string>;
+  readonly variables: DeployVariables;
+}
+
+/** Reads the `__voidhash` metadata off a paywall module's default export. */
+const loadPaywallMeta = (
+  file: string,
+): Effect.Effect<PaywallModuleMeta, PaywallBuildError> =>
+  loadModuleDefault(file).pipe(
+    Effect.flatMap((def) => {
+      const meta = (
+        def as { __voidhash?: Record<string, unknown> } | null | undefined
+      )?.__voidhash;
+      if (!meta || meta.kind !== "paywall") {
+        return Effect.fail(
+          new PaywallBuildError({
+            message: `${file} must default-export createPaywall({ … }) from "@voidhash/paywalls".`,
+          }),
+        );
+      }
+      const title =
+        typeof meta.title === "string" && meta.title.length > 0
+          ? meta.title
+          : idFromFile(file);
+      const description =
+        typeof meta.description === "string" ? meta.description : undefined;
+      const products = Array.isArray(meta.products)
+        ? meta.products.filter((p): p is string => typeof p === "string")
+        : [];
+      const rawVariables =
+        typeof meta.variables === "object" && meta.variables !== null
+          ? (meta.variables as Record<string, unknown>)
+          : {};
+      const variables: Record<string, string | number | boolean> = {};
+      for (const [key, value] of Object.entries(rawVariables)) {
+        if (!isScalar(value)) {
+          return Effect.fail(
+            new PaywallBuildError({
+              message:
+                `Variable "${key}" of paywall ${basename(file)} must be a ` +
+                "string, number or boolean (contract §1.1).",
+            }),
+          );
+        }
+        variables[key] = value;
+      }
+      return Effect.succeed<PaywallModuleMeta>({
+        description,
+        products,
+        title,
+        variables,
+      });
+    }),
+  );
+
+/** Loads a component module's default export and validates its shape. */
+const loadComponentDefinition = (
+  file: string,
+): Effect.Effect<ComponentDefinitionLike, PaywallBuildError> =>
+  loadModuleDefault(file).pipe(
+    Effect.flatMap((def) => {
+      const candidate = def as Partial<ComponentDefinitionLike> | null;
+      if (
+        !candidate ||
+        candidate.__voidhash?.kind !== "component" ||
+        typeof candidate.component !== "function" ||
+        typeof candidate.id !== "string"
+      ) {
+        return Effect.fail(
+          new PaywallBuildError({
+            message: `${file} must default-export defineComponent({ … }) from "@voidhash/paywalls".`,
+          }),
+        );
+      }
+      const expectedId = idFromFile(file);
+      if (candidate.id !== expectedId) {
+        return Effect.fail(
+          new PaywallBuildError({
+            message:
+              `Component id "${candidate.id}" does not match its file name ` +
+              `"${expectedId}" (${basename(file)}). Rename the file or the id.`,
+          }),
+        );
+      }
+      return Effect.succeed({
+        ...candidate,
+        previews: candidate.previews ?? {},
+      } as ComponentDefinitionLike);
+    }),
+  );
+
+// ── Output writing ───────────────────────────────────────────────────────────
+
+const writeFile = (
+  absPath: string,
+  bytes: Uint8Array,
+): Effect.Effect<void, PaywallBuildError> =>
+  Effect.tryPromise({
+    try: async () => {
+      await fsp.mkdir(dirname(absPath), { recursive: true });
+      await fsp.writeFile(absPath, bytes);
+    },
+    catch: (cause) =>
+      new PaywallBuildError({ cause, message: `Failed to write ${absPath}` }),
+  });
+
+/** Writes `bytes` to `absPath` and returns its manifest artifact entry. */
+const writeArtifact = (
+  projectRoot: string,
+  absPath: string,
+  bytes: Uint8Array,
+): Effect.Effect<DeployArtifact, PaywallBuildError> =>
+  writeFile(absPath, bytes).pipe(
+    Effect.map(() => ({
+      bytes: bytes.byteLength,
+      contentType: contentTypeFor(absPath),
+      path: toRelPosix(projectRoot, absPath),
+      sha256: sha256Hex(bytes),
+    })),
+  );
+
+const readDeployFile = (
+  projectRoot: string,
+  absPath: string,
+): Effect.Effect<DeployFile, PaywallBuildError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const bytes = await fsp.readFile(absPath);
+      return {
+        bytes: bytes.byteLength,
+        path: toRelPosix(projectRoot, absPath),
+        sha256: sha256Hex(bytes),
+      };
+    },
+    catch: (cause) =>
+      new PaywallBuildError({ cause, message: `Failed to read ${absPath}` }),
+  });
+
+// ── Paywall bundling ─────────────────────────────────────────────────────────
+
+/** The WebView HTML shell that boots a compiled paywall bundle. */
+const htmlShell = (jsFileName: string): string =>
+  `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta
+      name="viewport"
+      content="width=device-width, initial-scale=1, maximum-scale=1, viewport-fit=cover"
+    />
+    <title>Voidhash Paywall</title>
+    <style>
+      html, body, #root { height: 100%; margin: 0; }
+      body { overscroll-behavior: none; -webkit-user-select: none; user-select: none; }
+    </style>
+    <script>
+      // The native host overwrites this (when it can inject before-load
+      // scripts) with real products/variables before the bundle runs. The
+      // default keeps an isolated open of the page from crashing; late
+      // configuration arrives via the bridge's "configure" message.
+      window.__VOIDHASH_PAYWALL__ = window.__VOIDHASH_PAYWALL__ || { products: [], variables: {} };
+    </script>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script src="./${jsFileName}"></script>
+  </body>
+</html>
+`;
+
+/** The in-memory entry esbuild bundles for a paywall. */
+const paywallEntryContents = (paywallAbsPath: string): string =>
+  `import paywall from ${JSON.stringify(paywallAbsPath)};
+import { mountPaywall } from "@voidhash/paywalls/dom";
+const root = document.getElementById("root");
+if (root) mountPaywall(paywall, root);
+`;
+
+interface BuiltPaywallArtifacts {
+  readonly htmlBytes: Uint8Array;
+  readonly jsBytes: Uint8Array;
+  readonly jsFileName: string;
+  readonly assets: ReadonlyArray<{ relName: string; bytes: Uint8Array }>;
+}
+
+/** Bundles a single paywall to HTML + JS (+ assets) in memory via esbuild. */
+const bundlePaywall = (
+  projectRoot: string,
+  voidhashDir: string,
+  paywallAbsPath: string,
+): Effect.Effect<BuiltPaywallArtifacts, PaywallBuildError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const result = await esbuild.build({
+        assetNames: "assets/[name]-[hash]",
+        bundle: true,
+        define: { "process.env.NODE_ENV": '"production"' },
+        format: "iife",
+        jsx: "automatic",
+        jsxImportSource: "react",
+        loader: PAYWALL_ASSET_LOADERS,
+        logLevel: "silent",
+        minify: true,
+        outdir: "out",
+        platform: "browser",
+        plugins: [closedImportsPlugin(voidhashDir)],
+        publicPath: ".",
+        stdin: {
+          contents: paywallEntryContents(paywallAbsPath),
+          loader: "tsx",
+          resolveDir: projectRoot,
+          sourcefile: "voidhash-entry.tsx",
+        },
+        target: ["es2019", "safari13"],
+        write: false,
+      });
+
+      let jsBytes: Uint8Array | undefined;
+      const assets: Array<{ relName: string; bytes: Uint8Array }> = [];
+
+      for (const file of result.outputFiles) {
+        const rel = file.path.split(sep).join(posix.sep);
+        if (rel.endsWith(".js")) {
+          jsBytes = file.contents;
+        } else {
+          // Asset emitted under out/assets/… — keep the assets/… suffix.
+          const idx = rel.indexOf("/assets/");
+          const relName = idx >= 0 ? rel.slice(idx + 1) : posix.basename(rel);
+          assets.push({ bytes: file.contents, relName });
+        }
+      }
+
+      if (!jsBytes) {
+        throw new Error("esbuild produced no JavaScript output");
+      }
+
+      const jsFileName = "bundle.js";
+      return {
+        assets,
+        htmlBytes: textEncoder.encode(htmlShell(jsFileName)),
+        jsBytes,
+        jsFileName,
+      };
+    },
+    catch: bundleFailure(`paywall ${basename(paywallAbsPath)}`),
+  });
+
+// ── Component bundling ───────────────────────────────────────────────────────
+
+/** Modules a component runtime bundle leaves to the consumer (Studio). */
+const COMPONENT_RUNTIME_EXTERNALS = [
+  "react",
+  "react/jsx-runtime",
+  "react/jsx-dev-runtime",
+  "@voidhash/paywalls",
+  "@voidhash/paywalls/*",
+];
+
+const componentBuildOptions = (voidhashDir: string): esbuild.BuildOptions => ({
+  bundle: true,
+  define: { "process.env.NODE_ENV": '"production"' },
+  external: [...COMPONENT_RUNTIME_EXTERNALS],
+  format: "esm",
+  jsx: "automatic",
+  jsxImportSource: "react",
+  loader: COMPONENT_ASSET_LOADERS,
+  logLevel: "silent",
+  minify: true,
+  platform: "browser",
+  plugins: [closedImportsPlugin(voidhashDir)],
+  target: ["es2020"],
+  write: false,
+});
+
+const firstJsOutput = (result: esbuild.BuildResult): Uint8Array => {
+  const file = (result.outputFiles ?? []).find((f) => f.path.endsWith(".js"));
+  if (!file) {
+    throw new Error("esbuild produced no JavaScript output");
+  }
+  return file.contents;
+};
+
+/** Bundles a component module to a single ESM `runtime.js`. */
+const bundleComponentRuntime = (
+  voidhashDir: string,
+  componentAbsPath: string,
+): Effect.Effect<Uint8Array, PaywallBuildError> =>
+  Effect.tryPromise({
+    try: async () =>
+      firstJsOutput(
+        await esbuild.build({
+          ...componentBuildOptions(voidhashDir),
+          entryPoints: [componentAbsPath],
+          outdir: "out",
+        }),
+      ),
+    catch: bundleFailure(`component ${basename(componentAbsPath)}`),
+  });
+
+/**
+ * Bundles a component's custom editor panel: an ESM module whose default
+ * export is the definition's `panel` element tree.
+ */
+const bundleComponentPanel = (
+  voidhashDir: string,
+  componentAbsPath: string,
+): Effect.Effect<Uint8Array, PaywallBuildError> =>
+  Effect.tryPromise({
+    try: async () =>
+      firstJsOutput(
+        await esbuild.build({
+          ...componentBuildOptions(voidhashDir),
+          outdir: "out",
+          stdin: {
+            contents: `import definition from ${JSON.stringify(componentAbsPath)};
+export default definition.panel;
+`,
+            loader: "ts",
+            resolveDir: dirname(componentAbsPath),
+            sourcefile: "voidhash-panel-entry.ts",
+          },
+        }),
+      ),
+    catch: bundleFailure(`panel of component ${basename(componentAbsPath)}`),
+  });
+
+// ── Preview tree inspection ──────────────────────────────────────────────────
+
+/** The one placeholder reason that is NOT a render error (§3). */
+const LEGITIMATE_NULL_REASON = "render returned null";
+
+/**
+ * Collects the reasons of placeholder nodes a §3 preview tree contains that
+ * were produced by render ERRORS — a thrown render (`"render threw: …"`), an
+ * unsupported element type, … Placeholders carrying the legitimate
+ * `"render returned null"` reason are not errors and are skipped.
+ */
+export const collectRenderErrorPlaceholderReasons = (
+  tree: unknown,
+): string[] => {
+  const reasons: string[] = [];
+  const visit = (node: unknown): void => {
+    if (typeof node !== "object" || node === null) {
+      return;
+    }
+    if ("root" in node) {
+      visit(node.root);
+    }
+    if (
+      "type" in node &&
+      node.type === "placeholder" &&
+      "reason" in node &&
+      typeof node.reason === "string" &&
+      node.reason !== LEGITIMATE_NULL_REASON
+    ) {
+      reasons.push(node.reason);
+    }
+    if ("children" in node && Array.isArray(node.children)) {
+      for (const child of node.children) {
+        visit(child);
+      }
+    }
+  };
+  visit(tree);
+  return reasons;
+};
+
+// ── Validation helpers ───────────────────────────────────────────────────────
+
+const validateIds = (
+  kind: "paywall" | "component",
+  files: ReadonlyArray<string>,
+): Effect.Effect<void, PaywallBuildError> =>
+  Effect.gen(function* validateIds() {
+    const seen = new Map<string, string>();
+    for (const file of files) {
+      const id = idFromFile(file);
+      if (!DEPLOY_SLUG_REGEX.test(id)) {
+        return yield* Effect.fail(
+          new PaywallBuildError({
+            message:
+              `Invalid ${kind} id "${id}" (${basename(file)}). Ids derive ` +
+              `from file names and must match ${DEPLOY_SLUG_REGEX}.`,
+          }),
+        );
+      }
+      const existing = seen.get(id);
+      if (existing !== undefined) {
+        return yield* Effect.fail(
+          new PaywallBuildError({
+            message: `Duplicate ${kind} id "${id}" (${existing} and ${file}).`,
+          }),
+        );
+      }
+      seen.set(id, file);
+    }
+  });
+
+// ── Public API ───────────────────────────────────────────────────────────────
+
+export interface BuildPaywallsOptions {
+  readonly projectRoot: string;
+  readonly team: string;
+  readonly project: string;
+  readonly cliVersion: string;
+  readonly runtimeVersion: string;
+  /** Non-fatal warning callback (e.g. `Console.log`). */
+  readonly onWarn?: (message: string) => Effect.Effect<void>;
+}
+
+export interface BuildPaywallsResult {
+  readonly manifest: DeployManifest;
+  /** Absolute path to the build output directory. */
+  readonly outDir: string;
+  /** Absolute path to the written manifest.json. */
+  readonly manifestPath: string;
+}
+
+/**
+ * Compiles every paywall and component in `.voidhash` into deployable
+ * artifacts and writes the content-addressed schemaVersion-2
+ * {@link DeployManifest} — the exact payload `voidhash-cli deploy` uploads.
+ * Output lands in {@link BUILD_DIR}:
+ *
+ * - `paywalls/<id>/` — `index.html`, `bundle.js`, `assets/…`
+ * - `components/<id>/` — `manifest.json`, `previews/<state>.json`,
+ *   `runtime.js` and (when declared) `panel.js`
+ * - `manifest.json` — the assembled deploy manifest
+ *
+ * The build runs a TypeScript gate over all discovered sources first, and
+ * every bundle enforces the closed-import rules (only `@voidhash/paywalls`,
+ * React's runtime entries and relative imports within `.voidhash`).
+ */
+export const buildPaywalls = ({
+  projectRoot,
+  team,
+  project,
+  cliVersion,
+  runtimeVersion,
+  onWarn,
+}: BuildPaywallsOptions): Effect.Effect<
+  BuildPaywallsResult,
+  PaywallBuildError
+> =>
+  Effect.gen(function* buildPaywalls() {
+    const warn = (message: string): Effect.Effect<void> =>
+      onWarn ? onWarn(message) : Effect.void;
+    const voidhashDir = join(projectRoot, ".voidhash");
+    const paywallsDir = join(voidhashDir, "paywalls");
+    const componentsDir = join(voidhashDir, "components");
+    const outDir = join(projectRoot, BUILD_DIR);
+
+    const paywallFiles = listSourceFiles(paywallsDir);
+    const componentFiles = listSourceFiles(componentsDir);
+
+    if (paywallFiles.length === 0 && componentFiles.length === 0) {
+      return yield* Effect.fail(
+        new PaywallBuildError({
+          message: `No paywalls or components found in ${voidhashDir}.`,
+        }),
+      );
+    }
+
+    yield* validateIds("paywall", paywallFiles);
+    yield* validateIds("component", componentFiles);
+
+    // Typecheck gate: fail fast, before any bundling.
+    yield* typecheckPaywallSources({
+      files: [...paywallFiles, ...componentFiles],
+      projectRoot,
+    }).pipe(
+      Effect.catchTag("PaywallTypecheckError", (e) =>
+        Effect.fail(
+          new PaywallBuildError({ cause: e.cause, message: e.message }),
+        ),
+      ),
+    );
+
+    // Clear any previous build so removed paywalls/components don't linger.
+    yield* Effect.tryPromise({
+      try: () => fsp.rm(outDir, { force: true, recursive: true }),
+      catch: (cause) =>
+        new PaywallBuildError({ cause, message: "Failed to clean build dir" }),
+    });
+
+    // Register esbuild so we can `require` paywall/component modules (JSX) to
+    // read metadata and render preview trees.
+    const { unregister } = yield* registerTsxLoader();
+
+    // ── Paywalls ─────────────────────────────────────────────────────────────
+
+    const assetIndex = new Map<string, DeployAsset>();
+    const paywalls: DeployPaywall[] = [];
+
+    for (const file of paywallFiles) {
+      const id = idFromFile(file);
+      const meta = yield* loadPaywallMeta(file);
+      const built = yield* bundlePaywall(projectRoot, voidhashDir, file);
+
+      const paywallOutDir = join(outDir, "paywalls", id);
+      const html = yield* writeArtifact(
+        projectRoot,
+        join(paywallOutDir, "index.html"),
+        built.htmlBytes,
+      );
+      const js = yield* writeArtifact(
+        projectRoot,
+        join(paywallOutDir, built.jsFileName),
+        built.jsBytes,
+      );
+
+      const referencedAssets: string[] = [];
+      for (const asset of built.assets) {
+        const deployAsset = yield* writeArtifact(
+          projectRoot,
+          join(paywallOutDir, asset.relName),
+          asset.bytes,
+        );
+        assetIndex.set(deployAsset.path, deployAsset);
+        referencedAssets.push(deployAsset.path);
+      }
+      referencedAssets.sort();
+
+      const source = yield* readDeployFile(projectRoot, file);
+
+      paywalls.push({
+        artifacts: { html, js },
+        assets: referencedAssets,
+        contentHash: computePaywallContentHash({
+          assetSha256s: referencedAssets.map(
+            (path) => assetIndex.get(path)?.sha256 ?? "",
+          ),
+          htmlSha256: html.sha256,
+          jsSha256: js.sha256,
+        }),
+        description: meta.description,
+        id,
+        products: meta.products,
+        source,
+        title: meta.title,
+        variables: meta.variables,
+      });
+    }
+
+    // ── Components ───────────────────────────────────────────────────────────
+
+    const components: DeployComponent[] = [];
+
+    if (componentFiles.length > 0) {
+      const paywallsLib = yield* requireFromProject<UserPaywallsLib>(
+        projectRoot,
+        "@voidhash/paywalls",
+      );
+      const treeLib = yield* requireFromProject<UserTreeLib>(
+        projectRoot,
+        "@voidhash/paywalls/tree",
+      );
+      const react = yield* requireFromProject<UserReactLib>(
+        projectRoot,
+        "react",
+      );
+
+      for (const file of componentFiles) {
+        const id = idFromFile(file);
+        const definition = yield* loadComponentDefinition(file);
+        const componentOutDir = join(outDir, "components", id);
+
+        // §2 component manifest.
+        const manifestJson = yield* Effect.try({
+          try: () => paywallsLib.extractComponentManifest(definition),
+          catch: (cause) =>
+            new PaywallBuildError({
+              cause,
+              message:
+                `Failed to extract the manifest of component "${id}"` +
+                (cause instanceof Error ? `: ${cause.message}` : "."),
+            }),
+        });
+        const manifest = yield* writeArtifact(
+          projectRoot,
+          join(componentOutDir, "manifest.json"),
+          textEncoder.encode(`${JSON.stringify(manifestJson, null, 2)}\n`),
+        );
+
+        // §3 preview trees — one per declared state, always including
+        // "default" (rendered with prop defaults when not declared).
+        const previewStates: Record<string, ComponentPreviewStateLike> = {
+          default: definition.previews.default ?? {},
+          ...definition.previews,
+        };
+        const previews: DeployComponentPreview[] = [];
+        for (const [state, preview] of Object.entries(previewStates)) {
+          const tree = yield* Effect.tryPromise({
+            try: () =>
+              treeLib.renderToNodeTree(
+                react.createElement(definition.component, preview.props ?? {}),
+                {
+                  config: {
+                    products: preview.data?.products ?? [],
+                    variables: preview.data?.variables ?? {},
+                  },
+                  state,
+                },
+              ),
+            catch: (cause) =>
+              new PaywallBuildError({
+                cause,
+                message: `Failed to render preview "${state}" of component "${id}".`,
+              }),
+          });
+          // A placeholder produced by a render error (thrown render,
+          // unsupported element) still yields a valid tree — surface it so
+          // authors don't ship broken previews silently.
+          for (const reason of collectRenderErrorPlaceholderReasons(tree)) {
+            yield* warn(
+              `Component "${id}" preview "${state}" contains a render-error ` +
+                `placeholder: ${reason}`,
+            );
+          }
+
+          const previewFile = yield* writeArtifact(
+            projectRoot,
+            join(componentOutDir, "previews", `${state}.json`),
+            textEncoder.encode(`${JSON.stringify(tree, null, 2)}\n`),
+          );
+          previews.push({ file: previewFile, state });
+        }
+
+        // Runtime bundle (and panel bundle, when declared).
+        const runtimeBytes = yield* bundleComponentRuntime(voidhashDir, file);
+        const runtime = yield* writeArtifact(
+          projectRoot,
+          join(componentOutDir, "runtime.js"),
+          runtimeBytes,
+        );
+
+        let panel: DeployArtifact | null = null;
+        if (definition.panel !== undefined && definition.panel !== null) {
+          const panelBytes = yield* bundleComponentPanel(voidhashDir, file);
+          panel = yield* writeArtifact(
+            projectRoot,
+            join(componentOutDir, "panel.js"),
+            panelBytes,
+          );
+        }
+
+        const source = yield* readDeployFile(projectRoot, file);
+
+        components.push({
+          artifacts: { panel, runtime },
+          contentHash: computeComponentContentHash({
+            manifestSha256: manifest.sha256,
+            panelSha256: panel?.sha256 ?? null,
+            previewSha256s: previews.map((p) => p.file.sha256),
+            runtimeSha256: runtime.sha256,
+          }),
+          id,
+          manifest,
+          previews,
+          source,
+          title: definition.title,
+        });
+      }
+    }
+
+    yield* Effect.sync(() => unregister());
+
+    // ── Manifest ─────────────────────────────────────────────────────────────
+
+    const configFile = ["ts", "js", "cjs", "mjs"]
+      .map((ext) => join(projectRoot, `voidhash.config.${ext}`))
+      .find((p) => existsSync(p));
+    if (!configFile) {
+      return yield* Effect.fail(
+        new PaywallBuildError({
+          message:
+            "voidhash.config.* not found. Run 'voidhash-cli init' first.",
+        }),
+      );
+    }
+    const config = yield* readDeployFile(projectRoot, configFile);
+
+    const manifest: DeployManifest = {
+      assets: [...assetIndex.values()].sort((a, b) =>
+        a.path.localeCompare(b.path),
+      ),
+      cliVersion,
+      components,
+      config,
+      createdAt: new Date().toISOString(),
+      paywalls,
+      project,
+      runtimeVersion,
+      schemaVersion: DEPLOY_MANIFEST_VERSION,
+      team,
+    };
+
+    // Self-check against the contract schema before writing — a manifest the
+    // server would reject should never leave the build.
+    yield* Schema.decodeUnknownEffect(DeployManifestSchema)(manifest).pipe(
+      Effect.mapError(
+        (cause) =>
+          new PaywallBuildError({
+            cause,
+            message: `The build produced an invalid deploy manifest: ${cause.message}`,
+          }),
+      ),
+    );
+
+    const manifestPath = join(outDir, "manifest.json");
+    yield* writeFile(
+      manifestPath,
+      textEncoder.encode(`${JSON.stringify(manifest, null, 2)}\n`),
+    );
+
+    return { manifest, manifestPath, outDir };
+  });
diff --git a/apps/cli/src/domain/services/paywall-closed-imports.ts b/apps/cli/src/domain/services/paywall-closed-imports.ts
new file mode 100644
index 000000000..e3f814537
--- /dev/null
+++ b/apps/cli/src/domain/services/paywall-closed-imports.ts
@@ -0,0 +1,121 @@
+/**
+ * Closed-import enforcement for `.voidhash` sources. Paywalls and components
+ * may only import the paywalls SDK, React's runtime entries, and each other —
+ * anything else (react-dom, lodash, app code outside `.voidhash`, …) fails the
+ * build with an error naming the offending import.
+ */
+import { realpathSync } from "node:fs";
+import { isAbsolute, resolve, sep } from "node:path";
+
+import type * as esbuild from "esbuild";
+
+/** Bare specifiers `.voidhash` sources may import. */
+export const ALLOWED_BARE_IMPORTS: ReadonlyArray<string> = [
+  "@voidhash/paywalls",
+  "react",
+  "react/jsx-runtime",
+  "react/jsx-dev-runtime",
+];
+
+const PAYWALLS_PACKAGE = "@voidhash/paywalls";
+/** The Node-only tree renderer never belongs in a shipped bundle. */
+const FORBIDDEN_PAYWALLS_SUBPATH = `${PAYWALLS_PACKAGE}/tree`;
+
+/** Resolves symlinks (macOS tmp dirs, pnpm) so containment checks compare real paths. */
+const toRealPath = (path: string): string => {
+  try {
+    return realpathSync(path);
+  } catch {
+    return resolve(path);
+  }
+};
+
+const isPathWithin = (parent: string, child: string): boolean => {
+  const parentPath = toRealPath(parent);
+  const childPath = toRealPath(child);
+  return childPath === parentPath || childPath.startsWith(parentPath + sep);
+};
+
+const isAllowedBareImport = (specifier: string): boolean => {
+  if (ALLOWED_BARE_IMPORTS.includes(specifier)) {
+    return true;
+  }
+  // Any @voidhash/paywalls subpath except ./tree (dom, panel, …).
+  return (
+    specifier.startsWith(`${PAYWALLS_PACKAGE}/`) &&
+    specifier !== FORBIDDEN_PAYWALLS_SUBPATH
+  );
+};
+
+const disallowedMessage = (specifier: string, importer: string): string =>
+  `Import "${specifier}" (in ${importer}) is not allowed in .voidhash sources. ` +
+  `Allowed imports: ${ALLOWED_BARE_IMPORTS.join(", ")} ` +
+  `(any "@voidhash/paywalls/*" subpath except "@voidhash/paywalls/tree"), ` +
+  "plus relative imports within .voidhash.";
+
+/**
+ * An esbuild plugin that rejects any import from a `.voidhash` source file
+ * other than:
+ *
+ * - `@voidhash/paywalls` and its subpaths (except the Node-only `./tree`),
+ * - `react`, `react/jsx-runtime`, `react/jsx-dev-runtime`,
+ * - relative/absolute imports that stay within `voidhashDir` (components
+ *   importing components is allowed in P1 — they are bundled together).
+ *
+ * Imports made by `node_modules` code (e.g. the SDK importing `react-dom`
+ * internally) are not constrained — only user-authored sources are.
+ *
+ * @param voidhashDir Absolute path to the project's `.voidhash` directory.
+ */
+export const closedImportsPlugin = (voidhashDir: string): esbuild.Plugin => ({
+  name: "voidhash-closed-imports",
+  setup(build) {
+    build.onResolve({ filter: /.*/ }, (args) => {
+      if (args.kind === "entry-point") {
+        return null;
+      }
+      // Only user-authored sources are constrained. Synthetic stdin entries
+      // (non-absolute importer) count as user sources.
+      const fromUserSource =
+        !isAbsolute(args.importer) || isPathWithin(voidhashDir, args.importer);
+      if (!fromUserSource) {
+        return null;
+      }
+
+      const specifier = args.path;
+
+      if (specifier.startsWith(".")) {
+        const target = resolve(args.resolveDir, specifier);
+        if (!isPathWithin(voidhashDir, target)) {
+          return {
+            errors: [
+              {
+                text:
+                  `Import "${specifier}" (in ${args.importer}) escapes the ` +
+                  ".voidhash directory. Paywall sources may only import files " +
+                  "within .voidhash.",
+              },
+            ],
+          };
+        }
+        return null;
+      }
+
+      if (isAbsolute(specifier)) {
+        return isPathWithin(voidhashDir, specifier)
+          ? null
+          : {
+              errors: [{ text: disallowedMessage(specifier, args.importer) }],
+            };
+      }
+
+      if (isAllowedBareImport(specifier)) {
+        return null;
+      }
+
+      return {
+        errors: [{ text: disallowedMessage(specifier, args.importer) }],
+      };
+    });
+  },
+});
diff --git a/apps/cli/src/domain/services/paywall-deploy-upload.ts b/apps/cli/src/domain/services/paywall-deploy-upload.ts
new file mode 100644
index 000000000..b78cef84c
--- /dev/null
+++ b/apps/cli/src/domain/services/paywall-deploy-upload.ts
@@ -0,0 +1,397 @@
+/**
+ * The deploy upload flow (contract §4): create the deploy from the manifest,
+ * upload whatever blobs the server is missing, then finalize. Transport
+ * follows the CLI's API conventions — `api_url` base + `x-api-key` header from
+ * the user's CLI config.
+ */
+import { promises as fsp } from "node:fs";
+import { join } from "node:path";
+
+import { Data, Effect, Schema } from "effect";
+import {
+  HttpClient,
+  HttpClientRequest,
+  type HttpClientResponse,
+} from "effect/unstable/http";
+
+import type { DeployManifest } from "../schema/paywall-deploy";
+import { CliConfig } from "./cli-config";
+
+export class PaywallDeployUploadError extends Data.TaggedError(
+  "PaywallDeployUploadError",
+)<{
+  readonly message: string;
+  readonly cause?: unknown;
+}> {}
+
+/** `POST /api/v1/paywall-deploys` response (contract §4.1). */
+const CreateDeployResponseSchema = Schema.Struct({
+  deployId: Schema.String,
+  /** Manifest file hashes the server does not already have for this project. */
+  missing: Schema.Array(Schema.String),
+});
+export type CreateDeployResponse = typeof CreateDeployResponseSchema.Type;
+
+const FinalizedPaywallSchema = Schema.Struct({
+  id: Schema.String,
+  paywallId: Schema.String,
+  releaseId: Schema.String,
+  version: Schema.Number,
+  contentHash: Schema.String,
+  url: Schema.String,
+});
+export type FinalizedPaywall = typeof FinalizedPaywallSchema.Type;
+
+const FinalizedComponentSchema = Schema.Struct({
+  id: Schema.String,
+  componentId: Schema.String,
+  version: Schema.Number,
+  contentHash: Schema.String,
+});
+export type FinalizedComponent = typeof FinalizedComponentSchema.Type;
+
+/** `POST /api/v1/paywall-deploys/:deployId/finalize` response (contract §4.3). */
+const FinalizeResponseSchema = Schema.Struct({
+  deployId: Schema.String,
+  status: Schema.String,
+  paywalls: Schema.Array(FinalizedPaywallSchema),
+  components: Schema.Array(FinalizedComponentSchema),
+});
+export type FinalizeResponse = typeof FinalizeResponseSchema.Type;
+
+/**
+ * Maps every file hash in the manifest to its project-root-relative path —
+ * the lookup used to satisfy the server's `missing` list.
+ */
+export const collectManifestFiles = (
+  manifest: DeployManifest,
+): Map<string, string> => {
+  const files = new Map<string, string>();
+  const add = (
+    file: { readonly path: string; readonly sha256: string } | null,
+  ): void => {
+    if (file) {
+      files.set(file.sha256, file.path);
+    }
+  };
+  for (const paywall of manifest.paywalls) {
+    add(paywall.source);
+    add(paywall.artifacts.html);
+    add(paywall.artifacts.js);
+  }
+  for (const component of manifest.components) {
+    add(component.source);
+    add(component.manifest);
+    for (const preview of component.previews) {
+      add(preview.file);
+    }
+    add(component.artifacts.runtime);
+    add(component.artifacts.panel);
+  }
+  add(manifest.config);
+  for (const asset of manifest.assets) {
+    add(asset);
+  }
+  return files;
+};
+
+const tryParseJson = (body: string): unknown => {
+  try {
+    return JSON.parse(body);
+  } catch {
+    return;
+  }
+};
+
+/**
+ * Extracts the `missing` hash list from a finalize `409` body (contract §4.3:
+ * `409 { missing: [...] }`). Returns `undefined` when the body carries no
+ * such list — callers then fall back to the generic failure path.
+ */
+const readMissingHashes = (body: string): string[] | undefined => {
+  const parsed = tryParseJson(body);
+  if (typeof parsed !== "object" || parsed === null || !("missing" in parsed)) {
+    return;
+  }
+  const missing = parsed.missing;
+  if (
+    !Array.isArray(missing) ||
+    missing.length === 0 ||
+    !missing.every((hash): hash is string => typeof hash === "string")
+  ) {
+    return;
+  }
+  return missing;
+};
+
+/** Renders a non-2xx response into an actionable message (esp. 422 details). */
+const describeHttpFailure = (
+  step: string,
+  status: number,
+  body: string,
+): string => {
+  const parsed = tryParseJson(body);
+  const details =
+    parsed !== undefined ? JSON.stringify(parsed, null, 2) : body.trim();
+  const hint =
+    status === 400
+      ? " The server rejected the manifest — your CLI may be outdated; try upgrading voidhash-cli."
+      : status === 401
+        ? " Authentication failed. Run 'voidhash-cli auth login' and retry."
+        : status === 403
+          ? " Check that the team/project in voidhash.config.ts match a project you have access to."
+          : status === 409
+            ? " The deploy is incomplete (blobs missing server-side). Re-run deploy to retry."
+            : status === 422
+              ? " The server rejected the deploy contents:"
+              : "";
+  return `${step} failed with status ${status}.${hint}${
+    details ? `\n${details}` : ""
+  }`;
+};
+
+const failHttp = (
+  step: string,
+  response: HttpClientResponse.HttpClientResponse,
+): Effect.Effect<never, PaywallDeployUploadError> =>
+  response.text.pipe(
+    Effect.orElseSucceed(() => ""),
+    Effect.flatMap((body) =>
+      Effect.fail(
+        new PaywallDeployUploadError({
+          message: describeHttpFailure(step, response.status, body),
+        }),
+      ),
+    ),
+  );
+
+const networkFailure = (step: string) => (cause: unknown) =>
+  new PaywallDeployUploadError({
+    cause,
+    message: `${step} failed: could not reach the Voidhash API.`,
+  });
+
+const decodeJson = <S extends Schema.Top>(
+  step: string,
+  schema: S,
+  response: HttpClientResponse.HttpClientResponse,
+): Effect.Effect<S["Type"], PaywallDeployUploadError, S["DecodingServices"]> =>
+  response.json.pipe(
+    Effect.mapError(networkFailure(step)),
+    Effect.flatMap((json) =>
+      Schema.decodeUnknownEffect(schema)(json).pipe(
+        Effect.mapError(
+          (cause) =>
+            new PaywallDeployUploadError({
+              cause,
+              message: `${step} returned an unexpected response shape: ${cause.message}`,
+            }),
+        ),
+      ),
+    ),
+  );
+
+export interface UploadPaywallDeployOptions {
+  readonly manifest: DeployManifest;
+  /** Absolute project root the manifest's relative paths resolve against. */
+  readonly projectRoot: string;
+  /** Progress callback, e.g. `Console.log`. */
+  readonly onProgress?: (message: string) => Effect.Effect<void>;
+}
+
+export interface UploadPaywallDeployResult {
+  readonly deployId: string;
+  readonly finalize: FinalizeResponse;
+  /** Blobs actually uploaded this run. */
+  readonly uploadedCount: number;
+  /** Manifest files the server already had. */
+  readonly cachedCount: number;
+}
+
+/**
+ * Runs the full contract-§4 deploy flow against the configured Voidhash API:
+ *
+ * 1. `POST /api/v1/paywall-deploys` with the manifest → `{ deployId, missing }`
+ * 2. `PUT  /api/v1/paywall-deploys/:deployId/blobs/:sha256` for each missing blob
+ * 3. `POST /api/v1/paywall-deploys/:deployId/finalize` → released versions/URLs
+ *
+ * Requires a logged-in CLI (an `x-api-key` credential in the CLI config).
+ */
+export const uploadPaywallDeploy = ({
+  manifest,
+  projectRoot,
+  onProgress,
+}: UploadPaywallDeployOptions): Effect.Effect<
+  UploadPaywallDeployResult,
+  PaywallDeployUploadError,
+  HttpClient.HttpClient | CliConfig
+> =>
+  Effect.gen(function* uploadPaywallDeploy() {
+    const httpClient = yield* HttpClient.HttpClient;
+    const cliConfig = yield* CliConfig;
+
+    const config = yield* cliConfig.readConfig().pipe(
+      Effect.mapError(
+        (cause) =>
+          new PaywallDeployUploadError({
+            cause,
+            message: "Failed to read the CLI config.",
+          }),
+      ),
+    );
+    if (!config.api_key) {
+      return yield* Effect.fail(
+        new PaywallDeployUploadError({
+          message:
+            "You must be logged in to deploy. Run 'voidhash-cli auth login' first.",
+        }),
+      );
+    }
+    const apiKey = config.api_key;
+
+    const send = (
+      step: string,
+      request: HttpClientRequest.HttpClientRequest,
+    ): Effect.Effect<
+      HttpClientResponse.HttpClientResponse,
+      PaywallDeployUploadError
+    > =>
+      httpClient
+        .execute(
+          request.pipe(
+            HttpClientRequest.prependUrl(config.api_url),
+            HttpClientRequest.setHeaders({ "x-api-key": apiKey }),
+          ),
+        )
+        .pipe(Effect.mapError(networkFailure(step)));
+
+    const report = (message: string): Effect.Effect<void> =>
+      onProgress ? onProgress(message) : Effect.void;
+
+    // 1. Create the deploy from the manifest.
+    const createStep = "Creating the deploy";
+    const createResponse = yield* send(
+      createStep,
+      HttpClientRequest.post("/api/v1/paywall-deploys").pipe(
+        HttpClientRequest.bodyJsonUnsafe(manifest),
+      ),
+    );
+    if (createResponse.status < 200 || createResponse.status >= 300) {
+      return yield* failHttp(createStep, createResponse);
+    }
+    const created = yield* decodeJson(
+      createStep,
+      CreateDeployResponseSchema,
+      createResponse,
+    );
+
+    // 2. Upload every blob the server is missing.
+    const filesByHash = collectManifestFiles(manifest);
+
+    const uploadBlob = (
+      sha256: string,
+    ): Effect.Effect<void, PaywallDeployUploadError> =>
+      Effect.gen(function* uploadBlob() {
+        const relPath = filesByHash.get(sha256);
+        if (relPath === undefined) {
+          return yield* Effect.fail(
+            new PaywallDeployUploadError({
+              message:
+                `The server requested blob ${sha256}, which is not part of the ` +
+                "manifest. Re-run the build and deploy again.",
+            }),
+          );
+        }
+        const bytes = yield* Effect.tryPromise({
+          try: () => fsp.readFile(join(projectRoot, relPath)),
+          catch: (cause) =>
+            new PaywallDeployUploadError({
+              cause,
+              message: `Failed to read ${relPath} for upload.`,
+            }),
+        });
+        const uploadStep = `Uploading ${relPath}`;
+        const uploadResponse = yield* send(
+          uploadStep,
+          HttpClientRequest.put(
+            `/api/v1/paywall-deploys/${created.deployId}/blobs/${sha256}`,
+          ).pipe(
+            HttpClientRequest.bodyUint8Array(bytes, "application/octet-stream"),
+          ),
+        );
+        if (uploadResponse.status < 200 || uploadResponse.status >= 300) {
+          return yield* failHttp(uploadStep, uploadResponse);
+        }
+      });
+
+    yield* report(
+      `Uploading ${created.missing.length} blob(s) ` +
+        `(${filesByHash.size - created.missing.length} already on the server)…`,
+    );
+
+    for (const sha256 of created.missing) {
+      yield* uploadBlob(sha256);
+    }
+
+    // 3. Finalize — the immutable commit point. A 409 with a `missing` list
+    // (e.g. a blob lost server-side between create and finalize) is retried
+    // ONCE after re-uploading exactly those blobs; a second failure surfaces
+    // the server's readable error, hashes included.
+    const finalizeStep = "Finalizing the deploy";
+    const requestFinalize = (): Effect.Effect<
+      HttpClientResponse.HttpClientResponse,
+      PaywallDeployUploadError
+    > =>
+      send(
+        finalizeStep,
+        HttpClientRequest.post(
+          `/api/v1/paywall-deploys/${created.deployId}/finalize`,
+        ),
+      );
+
+    let finalizeResponse = yield* requestFinalize();
+    let retriedUploadCount = 0;
+
+    if (finalizeResponse.status === 409) {
+      const body = yield* finalizeResponse.text.pipe(
+        Effect.orElseSucceed(() => ""),
+      );
+      const missingOnFinalize = readMissingHashes(body);
+      if (
+        missingOnFinalize === undefined ||
+        missingOnFinalize.some((sha256) => !filesByHash.has(sha256))
+      ) {
+        return yield* Effect.fail(
+          new PaywallDeployUploadError({
+            message: describeHttpFailure(finalizeStep, 409, body),
+          }),
+        );
+      }
+
+      yield* report(
+        `Finalize reported ${missingOnFinalize.length} missing blob(s); ` +
+          "re-uploading and retrying once…",
+      );
+      for (const sha256 of missingOnFinalize) {
+        yield* uploadBlob(sha256);
+        retriedUploadCount += 1;
+      }
+      finalizeResponse = yield* requestFinalize();
+    }
+
+    if (finalizeResponse.status < 200 || finalizeResponse.status >= 300) {
+      return yield* failHttp(finalizeStep, finalizeResponse);
+    }
+    const finalize = yield* decodeJson(
+      finalizeStep,
+      FinalizeResponseSchema,
+      finalizeResponse,
+    );
+
+    return {
+      cachedCount: filesByHash.size - created.missing.length,
+      deployId: created.deployId,
+      finalize,
+      uploadedCount: created.missing.length + retriedUploadCount,
+    };
+  });
diff --git a/apps/cli/src/domain/services/paywall-typecheck.ts b/apps/cli/src/domain/services/paywall-typecheck.ts
new file mode 100644
index 000000000..074954401
--- /dev/null
+++ b/apps/cli/src/domain/services/paywall-typecheck.ts
@@ -0,0 +1,186 @@
+/**
+ * The deploy typecheck gate: before anything is bundled, the discovered
+ * `.voidhash` sources are typechecked with the TypeScript compiler API using
+ * the project's own `tsconfig.json`, and the build fails listing diagnostics.
+ */
+import { dirname, join } from "node:path";
+
+import { Data, Effect } from "effect";
+import ts from "typescript";
+
+export class PaywallTypecheckError extends Data.TaggedError(
+  "PaywallTypecheckError",
+)<{
+  readonly message: string;
+  readonly cause?: unknown;
+}> {}
+
+/**
+ * Asset extensions the build's esbuild loaders accept in paywall/component
+ * sources. The typecheck gate injects matching ambient module declarations so
+ * `import hero from "./hero.png"` typechecks, and the bundler emits/inlines
+ * the file.
+ */
+export const PAYWALL_ASSET_EXTENSIONS = [
+  "png",
+  "jpg",
+  "jpeg",
+  "gif",
+  "webp",
+  "svg",
+  "ttf",
+  "otf",
+  "woff",
+  "woff2",
+] as const;
+
+/** Ambient `declare module "*.png" { … }` block per supported asset extension. */
+const ASSET_MODULE_DECLARATIONS = PAYWALL_ASSET_EXTENSIONS.map(
+  (ext) =>
+    `declare module "*.${ext}" {\n  const url: string;\n  export default url;\n}\n`,
+).join("\n");
+
+/**
+ * Virtual file name (resolved under the project root) for the injected asset
+ * declarations. Never written to disk — served from memory by the gate's
+ * compiler host.
+ */
+const ASSET_DECLARATIONS_FILE_NAME = "__voidhash-asset-modules__.d.ts";
+
+/** Options used when the project has no `tsconfig.json` to inherit from. */
+const FALLBACK_OPTIONS: ts.CompilerOptions = {
+  jsx: ts.JsxEmit.ReactJSX,
+  lib: ["lib.es2022.d.ts", "lib.dom.d.ts"],
+  module: ts.ModuleKind.ESNext,
+  moduleResolution: ts.ModuleResolutionKind.Bundler,
+  strict: true,
+  target: ts.ScriptTarget.ES2022,
+};
+
+const formatHost: ts.FormatDiagnosticsHost = {
+  getCanonicalFileName: (fileName) => fileName,
+  getCurrentDirectory: ts.sys.getCurrentDirectory,
+  getNewLine: () => ts.sys.newLine,
+};
+
+const loadCompilerOptions = (
+  projectRoot: string,
+): { options: ts.CompilerOptions; configPath: string | undefined } => {
+  const configPath = ts.findConfigFile(
+    projectRoot,
+    ts.sys.fileExists,
+    "tsconfig.json",
+  );
+  if (!configPath) {
+    return { configPath: undefined, options: { ...FALLBACK_OPTIONS } };
+  }
+
+  const read = ts.readConfigFile(configPath, ts.sys.readFile);
+  if (read.error) {
+    throw new Error(ts.formatDiagnostics([read.error], formatHost));
+  }
+  const parsed = ts.parseJsonConfigFileContent(
+    read.config,
+    ts.sys,
+    dirname(configPath),
+    undefined,
+    configPath,
+  );
+  // "no inputs were found" (18003) is irrelevant — we supply our own roots.
+  const configErrors = parsed.errors.filter((e) => e.code !== 18_003);
+  if (configErrors.length > 0) {
+    throw new Error(ts.formatDiagnostics(configErrors, formatHost));
+  }
+  return { configPath, options: parsed.options };
+};
+
+/**
+ * Wraps a compiler host so the in-memory asset declaration file exists at
+ * `assetDeclPath` without ever touching disk.
+ */
+const withAssetDeclarations = (
+  host: ts.CompilerHost,
+  assetDeclPath: string,
+): ts.CompilerHost => {
+  const getSourceFile = host.getSourceFile.bind(host);
+  const fileExists = host.fileExists.bind(host);
+  const readFile = host.readFile.bind(host);
+  return {
+    ...host,
+    fileExists: (fileName) =>
+      fileName === assetDeclPath || fileExists(fileName),
+    getSourceFile: (fileName, languageVersionOrOptions, ...rest) =>
+      fileName === assetDeclPath
+        ? ts.createSourceFile(
+            fileName,
+            ASSET_MODULE_DECLARATIONS,
+            languageVersionOrOptions,
+            true,
+          )
+        : getSourceFile(fileName, languageVersionOrOptions, ...rest),
+    readFile: (fileName) =>
+      fileName === assetDeclPath ? ASSET_MODULE_DECLARATIONS : readFile(fileName),
+  };
+};
+
+/**
+ * Typechecks the given `.voidhash` source files with the project's
+ * `tsconfig.json` (falling back to strict react-jsx defaults when the project
+ * has none). An in-memory ambient declaration file covering the
+ * esbuild-supported asset extensions ({@link PAYWALL_ASSET_EXTENSIONS}) is
+ * injected so asset imports typecheck as string default exports. Fails with a
+ * {@link PaywallTypecheckError} listing every error-severity diagnostic.
+ */
+export const typecheckPaywallSources = (options: {
+  readonly projectRoot: string;
+  readonly files: ReadonlyArray<string>;
+}): Effect.Effect<void, PaywallTypecheckError> =>
+  Effect.try({
+    try: () => {
+      const { options: compilerOptions } = loadCompilerOptions(
+        options.projectRoot,
+      );
+
+      const finalOptions: ts.CompilerOptions = {
+        ...compilerOptions,
+        // The gate only checks — never emit, and never stumble over
+        // third-party declaration files.
+        incremental: false,
+        jsx: compilerOptions.jsx ?? ts.JsxEmit.ReactJSX,
+        noEmit: true,
+        skipLibCheck: true,
+      };
+
+      const assetDeclPath = join(
+        options.projectRoot,
+        ASSET_DECLARATIONS_FILE_NAME,
+      );
+      const program = ts.createProgram({
+        host: withAssetDeclarations(
+          ts.createCompilerHost(finalOptions),
+          assetDeclPath,
+        ),
+        options: finalOptions,
+        rootNames: [...options.files, assetDeclPath],
+      });
+
+      const diagnostics = ts
+        .getPreEmitDiagnostics(program)
+        .filter((d) => d.category === ts.DiagnosticCategory.Error);
+
+      if (diagnostics.length > 0) {
+        throw new Error(
+          `TypeScript found ${diagnostics.length} error(s) in .voidhash sources:\n\n` +
+            ts.formatDiagnosticsWithColorAndContext(diagnostics, formatHost),
+        );
+      }
+    },
+    catch: (cause) =>
+      new PaywallTypecheckError({
+        cause,
+        message:
+          cause instanceof Error
+            ? cause.message
+            : "Failed to typecheck .voidhash sources.",
+      }),
+  });
diff --git a/apps/cli/src/utils/api-client.ts b/apps/cli/src/utils/api-client.ts
index 46ee36824..1bd8e1ea1 100644
--- a/apps/cli/src/utils/api-client.ts
+++ b/apps/cli/src/utils/api-client.ts
@@ -28,7 +28,7 @@ const make = Effect.gen(function* effect() {
               );
 
               return HttpClientRequest.setHeaders(
-                HttpClientRequest.prependUrl(request, "http://localhost:8787"),
+                HttpClientRequest.prependUrl(request, config.api_url),
                 config.api_key ? { "x-api-key": config.api_key } : {}
               );
             }).pipe(Effect.withSpan("ApiClient.transformRequest"))
diff --git a/apps/cli/tests/domain/schema/paywall-deploy.test.ts b/apps/cli/tests/domain/schema/paywall-deploy.test.ts
new file mode 100644
index 000000000..aef7ee3f7
--- /dev/null
+++ b/apps/cli/tests/domain/schema/paywall-deploy.test.ts
@@ -0,0 +1,159 @@
+import { Schema } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  DEPLOY_MANIFEST_VERSION,
+  DeployManifestSchema,
+} from "../../../src/domain/schema/paywall-deploy";
+
+const decode = Schema.decodeUnknownSync(DeployManifestSchema);
+
+const hash = (char: string): string => char.repeat(64);
+
+const file = (path: string, char: string) => ({
+  bytes: 1024,
+  path,
+  sha256: hash(char),
+});
+
+const artifact = (path: string, char: string, contentType: string) => ({
+  ...file(path, char),
+  contentType,
+});
+
+/** A fully-populated, contract-§1-shaped manifest fixture. */
+const validManifest = () => ({
+  assets: [
+    artifact(
+      ".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png",
+      "e",
+      "image/png",
+    ),
+  ],
+  cliVersion: "0.0.1-alpha.1",
+  components: [
+    {
+      artifacts: {
+        panel: null,
+        runtime: artifact(
+          ".voidhash/.build/components/product-option/runtime.js",
+          "9",
+          "text/javascript; charset=utf-8",
+        ),
+      },
+      contentHash: hash("0"),
+      id: "product-option",
+      manifest: artifact(
+        ".voidhash/.build/components/product-option/manifest.json",
+        "7",
+        "application/json",
+      ),
+      previews: [
+        {
+          file: artifact(
+            ".voidhash/.build/components/product-option/previews/default.json",
+            "8",
+            "application/json",
+          ),
+          state: "default",
+        },
+      ],
+      source: file(".voidhash/components/product-option.tsx", "6"),
+      title: "Product Option",
+    },
+  ],
+  config: file("voidhash.config.ts", "d"),
+  createdAt: "2026-06-11T10:00:00.000Z",
+  paywalls: [
+    {
+      artifacts: {
+        html: artifact(
+          ".voidhash/.build/paywalls/onboarding/index.html",
+          "b",
+          "text/html; charset=utf-8",
+        ),
+        js: artifact(
+          ".voidhash/.build/paywalls/onboarding/bundle.js",
+          "c",
+          "text/javascript; charset=utf-8",
+        ),
+      },
+      assets: [".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png"],
+      contentHash: hash("1"),
+      description: "Full-screen onboarding paywall.",
+      id: "onboarding",
+      products: ["yearly", "monthly"],
+      source: file(".voidhash/paywalls/onboarding.tsx", "a"),
+      title: "Onboarding",
+      variables: { accentColor: "#16a34a", maxRows: 3, showTrial: true },
+    },
+  ],
+  project: "dev-proj",
+  runtimeVersion: "0.0.1-alpha.1",
+  schemaVersion: DEPLOY_MANIFEST_VERSION,
+  team: "voidhash-dev-sro",
+});
+
+describe("DeployManifestSchema", () => {
+  it("decodes a contract-§1 manifest", () => {
+    const manifest = decode(validManifest());
+
+    expect(manifest.schemaVersion).toBe(2);
+    expect(manifest.paywalls[0]?.id).toBe("onboarding");
+    expect(manifest.paywalls[0]?.variables).toEqual({
+      accentColor: "#16a34a",
+      maxRows: 3,
+      showTrial: true,
+    });
+    expect(manifest.components[0]?.artifacts.panel).toBeNull();
+  });
+
+  it("accepts a component-only manifest and a panel artifact", () => {
+    const fixture = validManifest();
+    fixture.paywalls = [];
+    fixture.components[0]!.artifacts.panel = artifact(
+      ".voidhash/.build/components/product-option/panel.js",
+      "f",
+      "text/javascript; charset=utf-8",
+    ) as never;
+
+    const manifest = decode(fixture);
+    expect(manifest.components[0]?.artifacts.panel?.sha256).toBe(hash("f"));
+  });
+
+  it("rejects unknown schema versions", () => {
+    expect(() => decode({ ...validManifest(), schemaVersion: 1 })).toThrow();
+  });
+
+  it("rejects ids that do not match the slug regex", () => {
+    const fixture = validManifest();
+    fixture.paywalls[0]!.id = "Bad_Id";
+    expect(() => decode(fixture)).toThrow();
+  });
+
+  it("rejects non-scalar variable values", () => {
+    const fixture = validManifest();
+    fixture.paywalls[0]!.variables = {
+      accentColor: { hex: "#16a34a" },
+    } as never;
+    expect(() => decode(fixture)).toThrow();
+  });
+
+  it("rejects malformed sha256 digests", () => {
+    const fixture = validManifest();
+    fixture.paywalls[0]!.contentHash = "not-a-hash";
+    expect(() => decode(fixture)).toThrow();
+  });
+
+  it("rejects a manifest with no paywalls and no components", () => {
+    const fixture = validManifest();
+    fixture.paywalls = [];
+    fixture.components = [];
+    expect(() => decode(fixture)).toThrow();
+  });
+
+  it("rejects missing required fields", () => {
+    const { config: _config, ...withoutConfig } = validManifest();
+    expect(() => decode(withoutConfig)).toThrow();
+  });
+});
diff --git a/apps/cli/tests/domain/services/paywall-build-warnings.test.ts b/apps/cli/tests/domain/services/paywall-build-warnings.test.ts
new file mode 100644
index 000000000..7c872b885
--- /dev/null
+++ b/apps/cli/tests/domain/services/paywall-build-warnings.test.ts
@@ -0,0 +1,72 @@
+import { describe, expect, it } from "vitest";
+
+import { collectRenderErrorPlaceholderReasons } from "../../../src/domain/services/paywall-build";
+
+/** A §3 preview tree wrapper, as emitted by `renderToNodeTree`. */
+const tree = (root: unknown) => ({ root, state: "default", treeVersion: 1 });
+
+describe("collectRenderErrorPlaceholderReasons", () => {
+  it("reports a root placeholder produced by a thrown render", () => {
+    expect(
+      collectRenderErrorPlaceholderReasons(
+        tree({ reason: "render threw: boom", type: "placeholder" }),
+      ),
+    ).toEqual(["render threw: boom"]);
+  });
+
+  it("skips the legitimate render-returned-null placeholder", () => {
+    expect(
+      collectRenderErrorPlaceholderReasons(
+        tree({ reason: "render returned null", type: "placeholder" }),
+      ),
+    ).toEqual([]);
+  });
+
+  it("finds nested error placeholders and preserves order", () => {
+    expect(
+      collectRenderErrorPlaceholderReasons(
+        tree({
+          children: [
+            { style: {}, text: "ok", type: "text" },
+            {
+              children: [
+                {
+                  reason: 'unsupported element type "div"',
+                  type: "placeholder",
+                },
+                { reason: "render returned null", type: "placeholder" },
+              ],
+              style: {},
+              type: "view",
+            },
+            { reason: "render threw: late", type: "placeholder" },
+          ],
+          style: {},
+          type: "view",
+        }),
+      ),
+    ).toEqual(['unsupported element type "div"', "render threw: late"]);
+  });
+
+  it("returns nothing for clean trees and non-tree values", () => {
+    expect(
+      collectRenderErrorPlaceholderReasons(
+        tree({ children: [], style: {}, type: "view" }),
+      ),
+    ).toEqual([]);
+    expect(collectRenderErrorPlaceholderReasons(undefined)).toEqual([]);
+    expect(collectRenderErrorPlaceholderReasons("nonsense")).toEqual([]);
+    expect(collectRenderErrorPlaceholderReasons({ type: "slot" })).toEqual([]);
+  });
+
+  it("ignores placeholder-shaped nodes without a string reason", () => {
+    expect(
+      collectRenderErrorPlaceholderReasons(tree({ type: "placeholder" })),
+    ).toEqual([]);
+    expect(
+      collectRenderErrorPlaceholderReasons(
+        tree({ reason: 42, type: "placeholder" }),
+      ),
+    ).toEqual([]);
+  });
+});
diff --git a/apps/cli/tests/domain/services/paywall-closed-imports.test.ts b/apps/cli/tests/domain/services/paywall-closed-imports.test.ts
new file mode 100644
index 000000000..a7173d997
--- /dev/null
+++ b/apps/cli/tests/domain/services/paywall-closed-imports.test.ts
@@ -0,0 +1,142 @@
+import { promises as fsp } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import * as esbuild from "esbuild";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+
+import { closedImportsPlugin } from "../../../src/domain/services/paywall-closed-imports";
+
+let projectRoot: string;
+let voidhashDir: string;
+
+/** Bare modules marked external so "allowed" imports need no node_modules. */
+const EXTERNALS = [
+  "react",
+  "react/jsx-runtime",
+  "react/jsx-dev-runtime",
+  "@voidhash/paywalls",
+  "@voidhash/paywalls/*",
+];
+
+const writeSource = async (relPath: string, contents: string) => {
+  const abs = join(projectRoot, relPath);
+  await fsp.mkdir(join(abs, ".."), { recursive: true });
+  await fsp.writeFile(abs, contents);
+  return abs;
+};
+
+/** Bundles `entry` with the plugin; returns esbuild error texts ([] = ok). */
+const buildErrors = async (
+  entry: string,
+  options: esbuild.BuildOptions = {},
+): Promise<string[]> => {
+  try {
+    await esbuild.build({
+      bundle: true,
+      external: EXTERNALS,
+      format: "esm",
+      logLevel: "silent",
+      plugins: [closedImportsPlugin(voidhashDir)],
+      write: false,
+      ...options,
+      entryPoints: [entry],
+    });
+    return [];
+  } catch (error) {
+    return ((error as esbuild.BuildFailure).errors ?? []).map((e) => e.text);
+  }
+};
+
+beforeAll(async () => {
+  projectRoot = await fsp.mkdtemp(join(tmpdir(), "voidhash-closed-imports-"));
+  voidhashDir = join(projectRoot, ".voidhash");
+  await writeSource(
+    ".voidhash/components/helper.ts",
+    "export const helper = 1;\n",
+  );
+  await fsp.writeFile(
+    join(projectRoot, "app-code.ts"),
+    "export const y = 1;\n",
+  );
+});
+
+afterAll(async () => {
+  await fsp.rm(projectRoot, { force: true, recursive: true });
+});
+
+describe("closedImportsPlugin", () => {
+  it("allows the allowlist plus relative imports within .voidhash", async () => {
+    const entry = await writeSource(
+      ".voidhash/components/allowed.ts",
+      [
+        'import "react";',
+        'import "react/jsx-runtime";',
+        'import "react/jsx-dev-runtime";',
+        'import "@voidhash/paywalls";',
+        'import "@voidhash/paywalls/dom";',
+        'import "@voidhash/paywalls/panel";',
+        'import { helper } from "./helper";',
+        "export const ok = helper;",
+      ].join("\n"),
+    );
+
+    expect(await buildErrors(entry)).toEqual([]);
+  });
+
+  it("rejects react-dom, naming the importing file", async () => {
+    const entry = await writeSource(
+      ".voidhash/components/uses-react-dom.ts",
+      'import "react-dom";\nexport {};\n',
+    );
+
+    const errors = await buildErrors(entry, {
+      external: [...EXTERNALS, "react-dom"],
+    });
+    expect(errors).toHaveLength(1);
+    expect(errors[0]).toContain('"react-dom"');
+    expect(errors[0]).toContain("uses-react-dom.ts");
+  });
+
+  it("rejects arbitrary packages", async () => {
+    const entry = await writeSource(
+      ".voidhash/components/uses-lodash.ts",
+      'import "lodash";\nexport {};\n',
+    );
+
+    const errors = await buildErrors(entry);
+    expect(errors).toHaveLength(1);
+    expect(errors[0]).toContain('"lodash"');
+  });
+
+  it("rejects the Node-only @voidhash/paywalls/tree entry", async () => {
+    const entry = await writeSource(
+      ".voidhash/components/uses-tree.ts",
+      'import "@voidhash/paywalls/tree";\nexport {};\n',
+    );
+
+    const errors = await buildErrors(entry);
+    expect(errors).toHaveLength(1);
+    expect(errors[0]).toContain('"@voidhash/paywalls/tree"');
+  });
+
+  it("rejects relative imports escaping .voidhash", async () => {
+    const entry = await writeSource(
+      ".voidhash/components/escapes.ts",
+      'import "../../app-code";\nexport {};\n',
+    );
+
+    const errors = await buildErrors(entry);
+    expect(errors).toHaveLength(1);
+    expect(errors[0]).toContain("escapes the .voidhash directory");
+  });
+
+  it("does not constrain imports made outside .voidhash (node_modules)", async () => {
+    const entry = join(projectRoot, "vendor-entry.ts");
+    await fsp.writeFile(entry, 'import "react-dom";\nexport {};\n');
+
+    expect(
+      await buildErrors(entry, { external: [...EXTERNALS, "react-dom"] }),
+    ).toEqual([]);
+  });
+});
diff --git a/apps/cli/tests/domain/services/paywall-content-hash.test.ts b/apps/cli/tests/domain/services/paywall-content-hash.test.ts
new file mode 100644
index 000000000..057161425
--- /dev/null
+++ b/apps/cli/tests/domain/services/paywall-content-hash.test.ts
@@ -0,0 +1,106 @@
+import { createHash } from "node:crypto";
+
+import { describe, expect, it } from "vitest";
+
+import {
+  computeComponentContentHash,
+  computePaywallContentHash,
+  sha256Hex,
+} from "../../../src/domain/services/paywall-build";
+
+const digest = (input: string): string =>
+  createHash("sha256").update(input).digest("hex");
+
+const h = sha256Hex("html");
+const j = sha256Hex("js");
+const m = sha256Hex("manifest");
+const r = sha256Hex("runtime");
+const p = sha256Hex("panel");
+const a1 = sha256Hex("asset-1");
+const a2 = sha256Hex("asset-2");
+
+describe("computePaywallContentHash", () => {
+  it("hashes html:js:sortedAssets per contract §1.2", () => {
+    const sorted = [a1, a2].sort();
+    expect(
+      computePaywallContentHash({
+        assetSha256s: [a1, a2],
+        htmlSha256: h,
+        jsSha256: j,
+      }),
+    ).toBe(digest(`${h}:${j}:${sorted.join(":")}`));
+  });
+
+  it("sorts asset hashes before joining", () => {
+    const forward = computePaywallContentHash({
+      assetSha256s: [a1, a2],
+      htmlSha256: h,
+      jsSha256: j,
+    });
+    const reversed = computePaywallContentHash({
+      assetSha256s: [a2, a1],
+      htmlSha256: h,
+      jsSha256: j,
+    });
+    expect(forward).toBe(reversed);
+  });
+
+  it("keeps the trailing separator when there are no assets", () => {
+    expect(
+      computePaywallContentHash({
+        assetSha256s: [],
+        htmlSha256: h,
+        jsSha256: j,
+      }),
+    ).toBe(digest(`${h}:${j}:`));
+  });
+});
+
+describe("computeComponentContentHash", () => {
+  it("hashes manifest:runtime:panel:sortedPreviews per contract §1.2", () => {
+    const sorted = [a1, a2].sort();
+    expect(
+      computeComponentContentHash({
+        manifestSha256: m,
+        panelSha256: p,
+        previewSha256s: [a2, a1],
+        runtimeSha256: r,
+      }),
+    ).toBe(digest(`${m}:${r}:${p}:${sorted.join(":")}`));
+  });
+
+  it("uses the empty string for an absent panel", () => {
+    const expected = digest(`${m}:${r}::${a1}`);
+    expect(
+      computeComponentContentHash({
+        manifestSha256: m,
+        panelSha256: null,
+        previewSha256s: [a1],
+        runtimeSha256: r,
+      }),
+    ).toBe(expected);
+    expect(
+      computeComponentContentHash({
+        manifestSha256: m,
+        previewSha256s: [a1],
+        runtimeSha256: r,
+      }),
+    ).toBe(expected);
+  });
+
+  it("distinguishes panel-less and panel-bearing builds", () => {
+    const without = computeComponentContentHash({
+      manifestSha256: m,
+      panelSha256: null,
+      previewSha256s: [a1],
+      runtimeSha256: r,
+    });
+    const withPanel = computeComponentContentHash({
+      manifestSha256: m,
+      panelSha256: p,
+      previewSha256s: [a1],
+      runtimeSha256: r,
+    });
+    expect(without).not.toBe(withPanel);
+  });
+});
diff --git a/apps/cli/tests/domain/services/paywall-deploy-upload.test.ts b/apps/cli/tests/domain/services/paywall-deploy-upload.test.ts
new file mode 100644
index 000000000..ebe8d11fd
--- /dev/null
+++ b/apps/cli/tests/domain/services/paywall-deploy-upload.test.ts
@@ -0,0 +1,270 @@
+import { createHash } from "node:crypto";
+import { promises as fsp } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import { Effect, Schema } from "effect";
+import { HttpClient, HttpClientResponse } from "effect/unstable/http";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+
+import {
+  type DeployManifest,
+  DeployManifestSchema,
+} from "../../../src/domain/schema/paywall-deploy";
+import { CliConfig } from "../../../src/domain/services/cli-config";
+import {
+  type PaywallDeployUploadError,
+  type UploadPaywallDeployResult,
+  uploadPaywallDeploy,
+} from "../../../src/domain/services/paywall-deploy-upload";
+
+let projectRoot: string;
+let manifest: DeployManifest;
+
+const sha256Hex = (data: string): string =>
+  createHash("sha256").update(data).digest("hex");
+
+const FILES = {
+  config: { contents: "export default {};\n", path: "voidhash.config.ts" },
+  html: {
+    contents: "<!doctype html>\n",
+    path: ".voidhash/.build/paywalls/onboarding/index.html",
+  },
+  js: {
+    contents: "console.log('paywall');\n",
+    path: ".voidhash/.build/paywalls/onboarding/bundle.js",
+  },
+  source: {
+    contents: "export default null;\n",
+    path: ".voidhash/paywalls/onboarding.tsx",
+  },
+} as const;
+
+const hashOf = (file: { contents: string }): string => sha256Hex(file.contents);
+
+const fileEntry = (file: { contents: string; path: string }) => ({
+  bytes: file.contents.length,
+  path: file.path,
+  sha256: hashOf(file),
+});
+
+const buildManifest = (): DeployManifest =>
+  Schema.decodeUnknownSync(DeployManifestSchema)({
+    assets: [],
+    cliVersion: "0.0.1",
+    components: [],
+    config: fileEntry(FILES.config),
+    createdAt: "2026-06-11T10:00:00.000Z",
+    paywalls: [
+      {
+        artifacts: {
+          html: {
+            ...fileEntry(FILES.html),
+            contentType: "text/html; charset=utf-8",
+          },
+          js: {
+            ...fileEntry(FILES.js),
+            contentType: "text/javascript; charset=utf-8",
+          },
+        },
+        assets: [],
+        contentHash: "0".repeat(64),
+        id: "onboarding",
+        products: [],
+        source: fileEntry(FILES.source),
+        title: "Onboarding",
+        variables: {},
+      },
+    ],
+    project: "dev-proj",
+    runtimeVersion: "0.0.1",
+    schemaVersion: 2,
+    team: "voidhash-dev-sro",
+  });
+
+interface RecordedRequest {
+  readonly method: string;
+  readonly path: string;
+}
+
+/** Scripted HTTP stub: routes requests, records calls, counts finalizes. */
+const makeStubClient = (options: {
+  /** `missing` returned by create-deploy. */
+  createMissing: ReadonlyArray<string>;
+  /** Per-attempt finalize responses (status + JSON body), consumed in order. */
+  finalizeResponses: ReadonlyArray<{ status: number; body: unknown }>;
+  requests: RecordedRequest[];
+}): HttpClient.HttpClient =>
+  HttpClient.make((request) => {
+    const path = new URL(request.url).pathname;
+    options.requests.push({ method: request.method, path });
+
+    const respond = (status: number, body: unknown) =>
+      Effect.succeed(
+        HttpClientResponse.fromWeb(
+          request,
+          new Response(JSON.stringify(body), {
+            headers: { "content-type": "application/json" },
+            status,
+          }),
+        ),
+      );
+
+    if (request.method === "POST" && path === "/api/v1/paywall-deploys") {
+      return respond(201, {
+        deployId: "pw_dep_test",
+        missing: options.createMissing,
+      });
+    }
+    if (request.method === "PUT" && path.includes("/blobs/")) {
+      return respond(200, {});
+    }
+    if (request.method === "POST" && path.endsWith("/finalize")) {
+      const attempt = options.requests.filter(
+        (r) => r.method === "POST" && r.path.endsWith("/finalize"),
+      ).length;
+      const scripted =
+        options.finalizeResponses[attempt - 1] ??
+        options.finalizeResponses[options.finalizeResponses.length - 1];
+      return respond(scripted?.status ?? 500, scripted?.body ?? {});
+    }
+    return respond(404, {});
+  });
+
+const cliConfigStub: typeof CliConfig.Service = {
+  readConfig: () =>
+    Effect.succeed({
+      api_key: "vh_sk_test",
+      api_url: "https://api.voidhash.test",
+      web_url: "https://voidhash.test",
+    }),
+  resetConfig: () => Effect.void,
+  writeToConfig: () => Effect.void,
+};
+
+const runUpload = (
+  client: HttpClient.HttpClient,
+): Promise<UploadPaywallDeployResult> =>
+  Effect.runPromise(
+    uploadPaywallDeploy({ manifest, projectRoot }).pipe(
+      Effect.provideService(HttpClient.HttpClient, client),
+      Effect.provideService(CliConfig, cliConfigStub),
+    ),
+  );
+
+const runUploadError = (
+  client: HttpClient.HttpClient,
+): Promise<PaywallDeployUploadError> =>
+  Effect.runPromise(
+    uploadPaywallDeploy({ manifest, projectRoot }).pipe(
+      Effect.flip,
+      Effect.provideService(HttpClient.HttpClient, client),
+      Effect.provideService(CliConfig, cliConfigStub),
+    ),
+  );
+
+const readyFinalizeBody = {
+  components: [],
+  deployId: "pw_dep_test",
+  paywalls: [],
+  status: "ready",
+};
+
+beforeAll(async () => {
+  projectRoot = await fsp.mkdtemp(join(tmpdir(), "voidhash-deploy-upload-"));
+  for (const file of Object.values(FILES)) {
+    const abs = join(projectRoot, file.path);
+    await fsp.mkdir(join(abs, ".."), { recursive: true });
+    await fsp.writeFile(abs, file.contents);
+  }
+  manifest = buildManifest();
+});
+
+afterAll(async () => {
+  await fsp.rm(projectRoot, { force: true, recursive: true });
+});
+
+describe("uploadPaywallDeploy finalize-409 retry", () => {
+  it("uploads the 409 missing blobs and retries finalize once", async () => {
+    const requests: RecordedRequest[] = [];
+    const result = await runUpload(
+      makeStubClient({
+        createMissing: [hashOf(FILES.js)],
+        finalizeResponses: [
+          { body: { missing: [hashOf(FILES.html)] }, status: 409 },
+          { body: readyFinalizeBody, status: 200 },
+        ],
+        requests,
+      }),
+    );
+
+    expect(result.finalize.status).toBe("ready");
+    // One blob from create's missing list + one re-uploaded after the 409.
+    expect(result.uploadedCount).toBe(2);
+    const puts = requests.filter((r) => r.method === "PUT");
+    expect(puts.map((r) => r.path)).toEqual([
+      `/api/v1/paywall-deploys/pw_dep_test/blobs/${hashOf(FILES.js)}`,
+      `/api/v1/paywall-deploys/pw_dep_test/blobs/${hashOf(FILES.html)}`,
+    ]);
+    expect(
+      requests.filter((r) => r.path.endsWith("/finalize")),
+    ).toHaveLength(2);
+  });
+
+  it("retries at most once and fails readably when finalize stays 409", async () => {
+    const requests: RecordedRequest[] = [];
+    const error = await runUploadError(
+      makeStubClient({
+        createMissing: [],
+        finalizeResponses: [
+          { body: { missing: [hashOf(FILES.html)] }, status: 409 },
+          { body: { missing: [hashOf(FILES.html)] }, status: 409 },
+        ],
+        requests,
+      }),
+    );
+
+    expect(error._tag).toBe("PaywallDeployUploadError");
+    expect(error.message).toContain("Finalizing the deploy failed");
+    expect(error.message).toContain(hashOf(FILES.html));
+    expect(
+      requests.filter((r) => r.path.endsWith("/finalize")),
+    ).toHaveLength(2);
+  });
+
+  it("fails without retrying when the 409 carries no usable missing list", async () => {
+    const requests: RecordedRequest[] = [];
+    const error = await runUploadError(
+      makeStubClient({
+        createMissing: [],
+        finalizeResponses: [{ body: { error: "incomplete" }, status: 409 }],
+        requests,
+      }),
+    );
+
+    expect(error._tag).toBe("PaywallDeployUploadError");
+    expect(
+      requests.filter((r) => r.path.endsWith("/finalize")),
+    ).toHaveLength(1);
+    expect(requests.filter((r) => r.method === "PUT")).toHaveLength(0);
+  });
+
+  it("fails without retrying when a 409 hash is not part of the manifest", async () => {
+    const requests: RecordedRequest[] = [];
+    const error = await runUploadError(
+      makeStubClient({
+        createMissing: [],
+        finalizeResponses: [
+          { body: { missing: ["f".repeat(64)] }, status: 409 },
+        ],
+        requests,
+      }),
+    );
+
+    expect(error._tag).toBe("PaywallDeployUploadError");
+    expect(error.message).toContain("f".repeat(64));
+    expect(
+      requests.filter((r) => r.path.endsWith("/finalize")),
+    ).toHaveLength(1);
+  });
+});
diff --git a/apps/cli/tests/domain/services/paywall-typecheck.test.ts b/apps/cli/tests/domain/services/paywall-typecheck.test.ts
new file mode 100644
index 000000000..b10caaac0
--- /dev/null
+++ b/apps/cli/tests/domain/services/paywall-typecheck.test.ts
@@ -0,0 +1,102 @@
+import { promises as fsp } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import { Effect } from "effect";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+
+import {
+  PAYWALL_ASSET_EXTENSIONS,
+  PaywallTypecheckError,
+  typecheckPaywallSources,
+} from "../../../src/domain/services/paywall-typecheck";
+
+let projectRoot: string;
+
+const writeSource = async (relPath: string, contents: string) => {
+  const abs = join(projectRoot, relPath);
+  await fsp.mkdir(join(abs, ".."), { recursive: true });
+  await fsp.writeFile(abs, contents);
+  return abs;
+};
+
+beforeAll(async () => {
+  projectRoot = await fsp.mkdtemp(join(tmpdir(), "voidhash-typecheck-"));
+});
+
+afterAll(async () => {
+  await fsp.rm(projectRoot, { force: true, recursive: true });
+});
+
+describe("typecheckPaywallSources", () => {
+  it("passes a source importing a .png via the injected asset declarations", async () => {
+    const entry = await writeSource(
+      ".voidhash/paywalls/with-asset.ts",
+      [
+        'import hero from "./hero.png";',
+        "export const heroUrl: string = hero;",
+        "",
+      ].join("\n"),
+    );
+
+    await expect(
+      Effect.runPromise(
+        typecheckPaywallSources({ files: [entry], projectRoot }),
+      ),
+    ).resolves.toBeUndefined();
+  });
+
+  it("covers every esbuild-supported asset extension", async () => {
+    const imports = PAYWALL_ASSET_EXTENSIONS.map(
+      (ext, i) => `import asset${i} from "./asset.${ext}";`,
+    );
+    const uses = PAYWALL_ASSET_EXTENSIONS.map(
+      (_, i) => `export const url${i}: string = asset${i};`,
+    );
+    const entry = await writeSource(
+      ".voidhash/paywalls/all-assets.ts",
+      [...imports, ...uses, ""].join("\n"),
+    );
+
+    await expect(
+      Effect.runPromise(
+        typecheckPaywallSources({ files: [entry], projectRoot }),
+      ),
+    ).resolves.toBeUndefined();
+  });
+
+  it("still fails a genuinely type-broken source", async () => {
+    const entry = await writeSource(
+      ".voidhash/paywalls/broken.ts",
+      [
+        'import hero from "./hero.png";',
+        "export const broken: number = hero;",
+        "",
+      ].join("\n"),
+    );
+
+    const error = await Effect.runPromise(
+      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(
+        Effect.flip,
+      ),
+    );
+    expect(error).toBeInstanceOf(PaywallTypecheckError);
+    expect(error.message).toContain("broken.ts");
+  });
+
+  it("still fails an import of an undeclared module kind", async () => {
+    const entry = await writeSource(
+      ".voidhash/paywalls/bad-import.ts",
+      ['import data from "./data.bin";', "export const d = data;", ""].join(
+        "\n",
+      ),
+    );
+
+    const error = await Effect.runPromise(
+      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(
+        Effect.flip,
+      ),
+    );
+    expect(error).toBeInstanceOf(PaywallTypecheckError);
+  });
+});
diff --git a/apps/studio/index.html b/apps/studio/index.html
new file mode 100644
index 000000000..5c996c28c
--- /dev/null
+++ b/apps/studio/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en" class="dark">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Voidhash Studio</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/studio/package.json b/apps/studio/package.json
new file mode 100644
index 000000000..c78ad798e
--- /dev/null
+++ b/apps/studio/package.json
@@ -0,0 +1,40 @@
+{
+  "name": "@voidhash/studio",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "Voidhash paywall preview studio (Vite app launched by the CLI).",
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    "./package.json": "./package.json",
+    "./server": {
+      "import": "./src/server/index.ts"
+    }
+  },
+  "files": [
+    "src",
+    "index.html",
+    "vite.config.ts"
+  ],
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build",
+    "preview": "vite preview",
+    "typecheck": "tsgo --noEmit"
+  },
+  "dependencies": {
+    "@tailwindcss/vite": "^4.1.13",
+    "@vitejs/plugin-react": "^5.2.0",
+    "@voidhash/paywalls": "workspace:*",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "tailwindcss": "^4.1.13",
+    "vite": "^7.0.0"
+  },
+  "devDependencies": {
+    "@types/react": "catalog:",
+    "@types/react-dom": "catalog:",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "5.6.3"
+  }
+}
diff --git a/apps/studio/src/App.tsx b/apps/studio/src/App.tsx
new file mode 100644
index 000000000..03cc3233a
--- /dev/null
+++ b/apps/studio/src/App.tsx
@@ -0,0 +1,88 @@
+import { type ReactNode, useMemo, useState } from "react";
+
+import { PaywallPreview } from "./components/PaywallPreview";
+import { Sidebar } from "./components/Sidebar";
+import { loadProjectContent } from "./voidhash/paywalls";
+import {
+  createStudioBridge,
+  DEFAULT_PREVIEW_CONFIG,
+  type PreviewEvent,
+} from "./voidhash/preview-runtime";
+
+const projectName = (root: string): string =>
+  root.replace(/\/+$/, "").split("/").pop() || root;
+
+export const App = (): ReactNode => {
+  // Recomputed every render so HMR (add/remove/edit paywalls) is reflected.
+  const content = loadProjectContent();
+  const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [events, setEvents] = useState<ReadonlyArray<PreviewEvent>>([]);
+
+  const bridge = useMemo(
+    () => createStudioBridge((event) => setEvents((prev) => [...prev, event])),
+    [],
+  );
+
+  // Resolve the active paywall, falling back to the first available one so the
+  // preview is never empty when paywalls exist.
+  const selected =
+    content.paywalls.find((p) => p.id === selectedId) ??
+    content.paywalls[0] ??
+    null;
+
+  const handleSelect = (id: string) => {
+    setSelectedId(id);
+    setEvents([]);
+  };
+
+  return (
+    <div className="flex h-full flex-col bg-neutral-900 text-neutral-100">
+      <header className="flex items-center justify-between border-neutral-800 border-b px-5 py-3">
+        <div className="flex items-baseline gap-2">
+          <span className="font-semibold text-sm">Voidhash Studio</span>
+          <span className="text-neutral-500 text-xs">
+            {projectName(content.projectRoot)}
+          </span>
+        </div>
+        {selected && (
+          <div className="flex items-center gap-3 text-neutral-400 text-xs">
+            <span>{selected.title}</span>
+            <span className="rounded bg-neutral-800 px-2 py-0.5 uppercase">
+              {DEFAULT_PREVIEW_CONFIG.platform}
+            </span>
+          </div>
+        )}
+      </header>
+
+      <div className="flex min-h-0 flex-1">
+        <main className="min-w-0 flex-1">
+          {selected ? (
+            <PaywallPreview
+              bridge={bridge}
+              config={DEFAULT_PREVIEW_CONFIG}
+              entry={selected}
+            />
+          ) : (
+            <div className="flex h-full items-center justify-center p-8 text-center text-neutral-500 text-sm">
+              Create a paywall in{" "}
+              <code className="mx-1 rounded bg-neutral-800 px-1.5 py-0.5">
+                .voidhash/paywalls
+              </code>{" "}
+              to preview it here.
+            </div>
+          )}
+        </main>
+
+        <Sidebar
+          components={content.components}
+          events={events}
+          invalid={content.invalid}
+          onClearEvents={() => setEvents([])}
+          onSelect={handleSelect}
+          paywalls={content.paywalls}
+          selectedId={selected?.id ?? null}
+        />
+      </div>
+    </div>
+  );
+};
diff --git a/apps/studio/src/components/ComponentPreview.tsx b/apps/studio/src/components/ComponentPreview.tsx
new file mode 100644
index 000000000..868a92382
--- /dev/null
+++ b/apps/studio/src/components/ComponentPreview.tsx
@@ -0,0 +1,136 @@
+import {
+  type ActionMap,
+  type ComponentPreviewState,
+  type InferComponentProps,
+  type PaywallProduct,
+  type PaywallRuntimeConfig,
+  PaywallRuntimeProvider,
+  type PropMap,
+  type PropSchema,
+  RendererProvider,
+} from "@voidhash/paywalls";
+import { createElement, type ReactNode } from "react";
+
+import type { AnyComponentDefinition } from "../voidhash/paywalls";
+import {
+  DEFAULT_PREVIEW_CONFIG,
+  SILENT_BRIDGE,
+} from "../voidhash/preview-runtime";
+import { PreviewErrorBoundary } from "./PreviewErrorBoundary";
+
+const PLACEHOLDER_IMAGE = `data:image/svg+xml,${encodeURIComponent(
+  '<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48"><rect width="48" height="48" rx="8" fill="#d4d4d4"/></svg>',
+)}`;
+
+/** Best-effort value for a required prop with no fixture and no default. */
+const placeholderValue = (
+  schema: PropSchema,
+  products: ReadonlyArray<PaywallProduct>,
+): unknown => {
+  switch (schema.kind) {
+    case "string":
+      return schema.label ?? "Text";
+    case "number":
+      return 0;
+    case "boolean":
+      return false;
+    case "select":
+      return schema.options?.[0] ?? "";
+    case "image":
+      return PLACEHOLDER_IMAGE;
+    case "ref":
+      // Only `ref("product")` exists in Phase 1: fall back to the first mock
+      // product when the default preview state declares no fixture.
+      return products[0];
+    case "component":
+      return null;
+    case "array":
+      return [];
+    default:
+      return;
+  }
+};
+
+/** The "default" preview state, or the first declared one as a stand-in. */
+const defaultPreviewState = (
+  definition: AnyComponentDefinition,
+): ComponentPreviewState<PropMap> | undefined =>
+  definition.previews.default ?? Object.values(definition.previews)[0];
+
+/** Mock runtime config, overridden by the preview state's declared data. */
+const previewConfig = (
+  state: ComponentPreviewState<PropMap> | undefined,
+): PaywallRuntimeConfig => ({
+  ...DEFAULT_PREVIEW_CONFIG,
+  products: state?.data?.products ?? DEFAULT_PREVIEW_CONFIG.products,
+  variables: state?.data?.variables ?? DEFAULT_PREVIEW_CONFIG.variables,
+});
+
+/**
+ * Resolves the props to mount a component preview with: declared preview-state
+ * fixtures first, then schema defaults, then best-effort placeholders for
+ * whatever required props remain (optional props stay unset).
+ */
+const buildPreviewProps = (
+  definition: AnyComponentDefinition,
+  state: ComponentPreviewState<PropMap> | undefined,
+  products: ReadonlyArray<PaywallProduct>,
+): Record<string, unknown> => {
+  const fixtures: Record<string, unknown> = state?.props ?? {};
+  const props: Record<string, unknown> = {};
+  for (const [name, builder] of Object.entries(definition.props)) {
+    if (fixtures[name] !== undefined) {
+      props[name] = fixtures[name];
+      continue;
+    }
+    const schema = builder.schema;
+    if (schema.hasDefault) {
+      props[name] = schema.defaultValue;
+    } else if (!schema.optional) {
+      props[name] = placeholderValue(schema, products);
+    }
+  }
+  return props;
+};
+
+export interface ComponentPreviewProps {
+  definition: AnyComponentDefinition;
+}
+
+/**
+ * A best-effort static preview of a `defineComponent(...)` definition: mounts
+ * `definition.component` with its default-preview props inside the same
+ * renderer + runtime providers a real paywall renders under, against the mock
+ * Studio config (envelopes go to a silent bridge).
+ */
+export const ComponentPreview = ({
+  definition,
+}: ComponentPreviewProps): ReactNode => {
+  const state = defaultPreviewState(definition);
+  const config = previewConfig(state);
+  const props = buildPreviewProps(definition, state, config.products);
+
+  return (
+    <div className="overflow-hidden rounded-md bg-neutral-800 p-2">
+      <PreviewErrorBoundary
+        fallback={(error) => (
+          <p className="break-words px-1 py-0.5 text-[11px] text-red-400">
+            Failed to render: {error.message}
+          </p>
+        )}
+      >
+        <RendererProvider>
+          <PaywallRuntimeProvider bridge={SILENT_BRIDGE} config={config}>
+            {createElement(
+              definition.component,
+              // Safe: the definition's prop/action generics are erased for
+              // dynamically discovered components; the props are best-effort
+              // fixtures built from its own schemas above.
+              props as InferComponentProps<PropMap, ActionMap>,
+            )}
+          </PaywallRuntimeProvider>
+        </RendererProvider>
+      </PreviewErrorBoundary>
+    </div>
+  );
+};
diff --git a/apps/studio/src/components/PaywallPreview.tsx b/apps/studio/src/components/PaywallPreview.tsx
new file mode 100644
index 000000000..f7e4efcf4
--- /dev/null
+++ b/apps/studio/src/components/PaywallPreview.tsx
@@ -0,0 +1,36 @@
+import {
+  type PaywallBridge,
+  PaywallRenderer,
+  type PaywallRuntimeConfig,
+} from "@voidhash/paywalls";
+import type { ReactNode } from "react";
+
+import type { PaywallEntry } from "../voidhash/paywalls";
+import { PhoneFrame } from "./PhoneFrame";
+import { PreviewErrorBoundary } from "./PreviewErrorBoundary";
+
+export interface PaywallPreviewProps {
+  entry: PaywallEntry;
+  config: PaywallRuntimeConfig;
+  bridge: PaywallBridge;
+}
+
+/**
+ * Renders the selected paywall inside the phone frame using the real
+ * `@voidhash/paywalls` DOM renderer — the same code path that runs on a device.
+ */
+export const PaywallPreview = ({
+  entry,
+  config,
+  bridge,
+}: PaywallPreviewProps): ReactNode => (
+  <PhoneFrame>
+    <PreviewErrorBoundary key={entry.id}>
+      <PaywallRenderer
+        bridge={bridge}
+        config={config}
+        paywall={entry.definition}
+      />
+    </PreviewErrorBoundary>
+  </PhoneFrame>
+);
diff --git a/apps/studio/src/components/PhoneFrame.tsx b/apps/studio/src/components/PhoneFrame.tsx
new file mode 100644
index 000000000..626c1796e
--- /dev/null
+++ b/apps/studio/src/components/PhoneFrame.tsx
@@ -0,0 +1,28 @@
+import type { ReactNode } from "react";
+
+export interface PhoneFrameProps {
+  children: ReactNode;
+}
+
+/**
+ * A 9:16 device mock. The screen fills the available height, keeps the phone
+ * aspect ratio, and clips its content so a paywall renders exactly as it would
+ * on a real device. The paywall owns the full screen via `absolute inset-0`.
+ */
+export const PhoneFrame = ({ children }: PhoneFrameProps): ReactNode => (
+  <div className="flex h-full w-full items-center justify-center p-6">
+    <div
+      className="relative aspect-[9/16] h-full max-h-full overflow-hidden rounded-[2.5rem] border-[10px] border-neutral-950 bg-white shadow-2xl ring-1 ring-neutral-800"
+      style={{ maxWidth: "100%" }}
+    >
+      {/* Notch */}
+      <div className="-translate-x-1/2 pointer-events-none absolute top-0 left-1/2 z-10 h-6 w-32 rounded-b-2xl bg-neutral-950" />
+      {/* Screen — the paywall mounts here */}
+      <div className="absolute inset-0 flex flex-col bg-white text-black">
+        {children}
+      </div>
+      {/* Home indicator */}
+      <div className="-translate-x-1/2 pointer-events-none absolute bottom-1.5 left-1/2 z-10 h-1 w-28 rounded-full bg-neutral-900/30" />
+    </div>
+  </div>
+);
diff --git a/apps/studio/src/components/PreviewErrorBoundary.tsx b/apps/studio/src/components/PreviewErrorBoundary.tsx
new file mode 100644
index 000000000..23eaef9dd
--- /dev/null
+++ b/apps/studio/src/components/PreviewErrorBoundary.tsx
@@ -0,0 +1,52 @@
+import { Component, type ErrorInfo, type ReactNode } from "react";
+
+export interface PreviewErrorBoundaryProps {
+  children: ReactNode;
+  /** Replaces the default full-size error panel (e.g. a compact card note). */
+  fallback?: (error: Error) => ReactNode;
+}
+
+interface PreviewErrorBoundaryState {
+  error: Error | null;
+}
+
+/**
+ * Stops a runtime error in author code (a paywall or a component preview) from
+ * blanking the whole Studio. Key it by the previewed entry's id upstream so
+ * switching entries clears a previous error.
+ */
+export class PreviewErrorBoundary extends Component<
+  PreviewErrorBoundaryProps,
+  PreviewErrorBoundaryState
+> {
+  state: PreviewErrorBoundaryState = { error: null };
+
+  static getDerivedStateFromError(error: Error): PreviewErrorBoundaryState {
+    return { error };
+  }
+
+  componentDidCatch(error: Error, info: ErrorInfo): void {
+    // biome-ignore lint/suspicious/noConsole: surface author errors in the dev console.
+    console.error("[voidhash-studio] preview render error", error, info);
+  }
+
+  render(): ReactNode {
+    const { error } = this.state;
+    if (error) {
+      if (this.props.fallback) {
+        return this.props.fallback(error);
+      }
+      return (
+        <div className="flex h-full flex-col items-center justify-center gap-2 bg-red-50 p-6 text-center">
+          <p className="font-semibold text-red-700 text-sm">
+            This paywall failed to render
+          </p>
+          <pre className="max-w-full overflow-auto whitespace-pre-wrap text-red-600 text-xs">
+            {error.message}
+          </pre>
+        </div>
+      );
+    }
+    return this.props.children;
+  }
+}
diff --git a/apps/studio/src/components/Sidebar.tsx b/apps/studio/src/components/Sidebar.tsx
new file mode 100644
index 000000000..4e87a65f2
--- /dev/null
+++ b/apps/studio/src/components/Sidebar.tsx
@@ -0,0 +1,206 @@
+import type { PaywallOutboundEnvelope } from "@voidhash/paywalls";
+import type { ReactNode } from "react";
+
+import { cn } from "../lib/cn";
+import type {
+  ComponentEntry,
+  InvalidEntry,
+  PaywallEntry,
+} from "../voidhash/paywalls";
+import type { PreviewEvent } from "../voidhash/preview-runtime";
+import { ComponentPreview } from "./ComponentPreview";
+
+const SectionLabel = ({ children }: { children: ReactNode }): ReactNode => (
+  <div className="px-4 pt-4 pb-1 font-semibold text-[11px] text-neutral-500 uppercase tracking-wider">
+    {children}
+  </div>
+);
+
+/** A one-line summary of an envelope's payload, or null when it has none. */
+const envelopeDetail = (envelope: PaywallOutboundEnvelope): string | null => {
+  switch (envelope.type) {
+    case "ready":
+      return envelope.payload?.templateVersion ?? null;
+    case "close":
+      return envelope.payload?.reason ?? null;
+    case "purchase":
+      return envelope.payload.productId;
+    case "restore":
+      return envelope.payload?.source ?? null;
+    case "openExternal":
+      return envelope.payload.url;
+    case "event":
+      return envelope.payload.properties
+        ? `${envelope.payload.name} ${JSON.stringify(envelope.payload.properties)}`
+        : envelope.payload.name;
+    case "log":
+      return `${envelope.payload.level}: ${envelope.payload.message}`;
+    default:
+      return null;
+  }
+};
+
+export interface SidebarProps {
+  paywalls: ReadonlyArray<PaywallEntry>;
+  components: ReadonlyArray<ComponentEntry>;
+  invalid: ReadonlyArray<InvalidEntry>;
+  events: ReadonlyArray<PreviewEvent>;
+  selectedId: string | null;
+  onSelect: (id: string) => void;
+  onClearEvents: () => void;
+}
+
+/**
+ * The right-hand panel: the list of paywalls (primary navigation), any invalid
+ * files, the project's reusable components (with a best-effort static
+ * preview each), and a live log of the bridge envelopes the previewed paywall
+ * posts.
+ */
+export const Sidebar = ({
+  paywalls,
+  components,
+  invalid,
+  events,
+  selectedId,
+  onSelect,
+  onClearEvents,
+}: SidebarProps): ReactNode => (
+  <aside className="flex h-full w-80 flex-col border-neutral-800 border-l bg-neutral-950">
+    <div className="flex items-center justify-between px-4 pt-4 pb-2">
+      <h2 className="font-semibold text-neutral-100 text-sm">Paywalls</h2>
+      <span className="rounded-full bg-neutral-800 px-2 py-0.5 text-[11px] text-neutral-400">
+        {paywalls.length}
+      </span>
+    </div>
+
+    <div className="min-h-0 flex-1 overflow-y-auto">
+      <div className="flex flex-col gap-0.5 px-2">
+        {paywalls.length === 0 && (
+          <p className="px-2 py-4 text-neutral-500 text-xs">
+            No paywalls found in <code>.voidhash/paywalls</code>.
+          </p>
+        )}
+        {paywalls.map((p) => (
+          <button
+            className={cn(
+              "flex flex-col items-start gap-0.5 rounded-md px-3 py-2 text-left transition-colors",
+              p.id === selectedId
+                ? "bg-emerald-600/15 text-emerald-300 ring-1 ring-emerald-600/40"
+                : "text-neutral-300 hover:bg-neutral-900",
+            )}
+            key={p.id}
+            onClick={() => onSelect(p.id)}
+            type="button"
+          >
+            <span className="font-medium text-sm">{p.title}</span>
+            <span className="text-[11px] text-neutral-500">{p.id}</span>
+          </button>
+        ))}
+      </div>
+
+      {invalid.length > 0 && (
+        <>
+          <SectionLabel>Needs attention</SectionLabel>
+          <div className="flex flex-col gap-1 px-3">
+            {invalid.map((entry) => (
+              <div
+                className="rounded-md border border-amber-700/40 bg-amber-950/30 px-3 py-2"
+                key={entry.id}
+              >
+                <p className="font-medium text-amber-300 text-xs">{entry.id}</p>
+                <p className="mt-0.5 text-[11px] text-amber-500/80">
+                  {entry.reason}
+                </p>
+              </div>
+            ))}
+          </div>
+        </>
+      )}
+
+      {components.length > 0 && (
+        <>
+          <SectionLabel>Components</SectionLabel>
+          <div className="flex flex-col gap-2 px-3 pb-2">
+            {components.map((c) => (
+              <div
+                className="rounded-md border border-neutral-800 bg-neutral-900/40"
+                key={c.id}
+              >
+                <div className="flex items-baseline justify-between px-2.5 pt-2 pb-1">
+                  <span className="font-medium text-neutral-300 text-xs">
+                    {c.definition?.title ?? c.id}
+                  </span>
+                  {c.manifest && (
+                    <span className="text-[11px] text-neutral-600">
+                      {Object.keys(c.manifest.props).length} props
+                    </span>
+                  )}
+                </div>
+                {c.definition ? (
+                  <div className="px-2 pb-2">
+                    <ComponentPreview definition={c.definition} />
+                  </div>
+                ) : (
+                  <p className="px-2.5 pb-2 text-[11px] text-neutral-600">
+                    No <code>defineComponent(...)</code> export found.
+                  </p>
+                )}
+              </div>
+            ))}
+          </div>
+        </>
+      )}
+    </div>
+
+    <div className="border-neutral-800 border-t">
+      <div className="flex items-center justify-between px-4 pt-3 pb-1">
+        <span className="font-semibold text-[11px] text-neutral-500 uppercase tracking-wider">
+          Events
+        </span>
+        {events.length > 0 && (
+          <button
+            className="text-[11px] text-neutral-500 hover:text-neutral-300"
+            onClick={onClearEvents}
+            type="button"
+          >
+            clear
+          </button>
+        )}
+      </div>
+      <div className="max-h-40 overflow-y-auto px-3 pb-3">
+        {events.length === 0 ? (
+          <p className="px-1 py-2 text-[11px] text-neutral-600">
+            Envelopes posted by the paywall (ready, purchase, …) show up here.
+          </p>
+        ) : (
+          <ul className="flex flex-col gap-1">
+            {events
+              .slice()
+              .reverse()
+              .map((event) => {
+                const detail = envelopeDetail(event.envelope);
+                return (
+                  <li
+                    className="flex items-baseline gap-2 rounded bg-neutral-900 px-2 py-1 font-mono text-[11px]"
+                    key={event.key}
+                  >
+                    <span className="shrink-0 text-emerald-300">
+                      {event.envelope.type}
+                    </span>
+                    {detail && (
+                      <span
+                        className="truncate text-neutral-400"
+                        title={detail}
+                      >
+                        {detail}
+                      </span>
+                    )}
+                  </li>
+                );
+              })}
+          </ul>
+        )}
+      </div>
+    </div>
+  </aside>
+);
diff --git a/apps/studio/src/components/ui/button.tsx b/apps/studio/src/components/ui/button.tsx
new file mode 100644
index 000000000..7b0fbf708
--- /dev/null
+++ b/apps/studio/src/components/ui/button.tsx
@@ -0,0 +1,44 @@
+import type { ButtonHTMLAttributes, ReactNode } from "react";
+
+import { cn } from "../../lib/cn";
+
+type Variant = "default" | "secondary" | "ghost" | "outline";
+type Size = "sm" | "md" | "icon";
+
+const VARIANTS: Record<Variant, string> = {
+  default: "bg-emerald-600 text-white hover:bg-emerald-500",
+  secondary: "bg-neutral-800 text-neutral-100 hover:bg-neutral-700",
+  ghost: "bg-transparent text-neutral-300 hover:bg-neutral-800",
+  outline:
+    "border border-neutral-700 bg-transparent text-neutral-200 hover:bg-neutral-800",
+};
+
+const SIZES: Record<Size, string> = {
+  sm: "h-8 px-3 text-xs",
+  md: "h-9 px-4 text-sm",
+  icon: "h-8 w-8 text-sm",
+};
+
+export interface ButtonProps extends ButtonHTMLAttributes<HTMLButtonElement> {
+  variant?: Variant;
+  size?: Size;
+  children?: ReactNode;
+}
+
+/** Minimal shadcn-style button. */
+export const Button = ({
+  variant = "default",
+  size = "md",
+  className,
+  ...props
+}: ButtonProps): ReactNode => (
+  <button
+    className={cn(
+      "inline-flex select-none items-center justify-center gap-2 rounded-md font-medium transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-emerald-500/60 disabled:pointer-events-none disabled:opacity-50",
+      VARIANTS[variant],
+      SIZES[size],
+      className,
+    )}
+    {...props}
+  />
+);
diff --git a/apps/studio/src/index.css b/apps/studio/src/index.css
new file mode 100644
index 000000000..86a478822
--- /dev/null
+++ b/apps/studio/src/index.css
@@ -0,0 +1,20 @@
+@import "tailwindcss";
+
+@custom-variant dark (&:where(.dark, .dark *));
+
+:root {
+  color-scheme: dark;
+}
+
+html,
+body,
+#root {
+  height: 100%;
+  margin: 0;
+}
+
+body {
+  font-family:
+    ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Helvetica,
+    Arial, sans-serif;
+}
diff --git a/apps/studio/src/lib/cn.ts b/apps/studio/src/lib/cn.ts
new file mode 100644
index 000000000..51c61e344
--- /dev/null
+++ b/apps/studio/src/lib/cn.ts
@@ -0,0 +1,4 @@
+/** Joins truthy class names. A dependency-free stand-in for `clsx`. */
+export const cn = (
+  ...classes: Array<string | false | null | undefined>
+): string => classes.filter(Boolean).join(" ");
diff --git a/apps/studio/src/main.tsx b/apps/studio/src/main.tsx
new file mode 100644
index 000000000..a1aa34dea
--- /dev/null
+++ b/apps/studio/src/main.tsx
@@ -0,0 +1,14 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+
+import { App } from "./App";
+import "./index.css";
+
+const container = document.getElementById("root");
+if (!container) throw new Error("Studio root element #root not found");
+
+createRoot(container).render(
+  <StrictMode>
+    <App />
+  </StrictMode>,
+);
diff --git a/apps/studio/src/server/config.ts b/apps/studio/src/server/config.ts
new file mode 100644
index 000000000..cdf7eb1aa
--- /dev/null
+++ b/apps/studio/src/server/config.ts
@@ -0,0 +1,54 @@
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import tailwindcss from "@tailwindcss/vite";
+import react from "@vitejs/plugin-react";
+import type { InlineConfig } from "vite";
+
+import { voidhashPaywallsPlugin } from "./virtual-paywalls-plugin";
+
+/** Absolute path to the Studio app root (the folder containing `index.html`). */
+export const STUDIO_ROOT = resolve(
+  dirname(fileURLToPath(import.meta.url)),
+  "../..",
+);
+
+export interface StudioViteConfigOptions {
+  /** The user's project root (folder containing `.voidhash`). */
+  projectRoot: string;
+  /** Studio app root. Defaults to {@link STUDIO_ROOT}. */
+  studioRoot?: string;
+  /** Dev server port. */
+  port?: number;
+}
+
+/**
+ * Builds the Vite config that powers Studio. It is shared by the standalone
+ * `vite` dev script (see `vite.config.ts`) and the CLI's programmatic launch
+ * (`startStudio`), so both render the user's paywalls identically.
+ *
+ * Key choices:
+ * - `dedupe` forces a single copy of React and `@voidhash/paywalls`, so the
+ *   paywall's primitives and Studio's `PaywallRenderer` share one renderer/
+ *   runtime context even though they're imported from different places.
+ * - The paywalls plugin contributes `server.fs.allow` for the project root.
+ */
+export const createStudioViteConfig = ({
+  projectRoot,
+  studioRoot = STUDIO_ROOT,
+  port,
+}: StudioViteConfigOptions): InlineConfig => ({
+  configFile: false,
+  root: studioRoot,
+  plugins: [voidhashPaywallsPlugin({ projectRoot }), react(), tailwindcss()],
+  resolve: {
+    dedupe: ["react", "react-dom", "@voidhash/paywalls"],
+  },
+  optimizeDeps: {
+    include: ["react", "react-dom", "react-dom/client"],
+  },
+  server: {
+    port,
+    fs: { allow: [studioRoot, projectRoot] },
+  },
+});
diff --git a/apps/studio/src/server/index.ts b/apps/studio/src/server/index.ts
new file mode 100644
index 000000000..9043bf7c7
--- /dev/null
+++ b/apps/studio/src/server/index.ts
@@ -0,0 +1,50 @@
+import { createServer, type ViteDevServer } from "vite";
+
+import { createStudioViteConfig } from "./config";
+
+export { createStudioViteConfig, STUDIO_ROOT } from "./config";
+
+export interface StartStudioOptions {
+  /** The user's project root (folder containing `.voidhash`). */
+  projectRoot: string;
+  /** Preferred port; Vite picks the next free port if taken. Defaults to 4830. */
+  port?: number;
+}
+
+export interface StudioHandle {
+  /** The URL the Studio dev server is listening on. */
+  readonly url: string;
+  /** The resolved port. */
+  readonly port: number;
+  /** Stops the dev server. */
+  readonly close: () => Promise<void>;
+  /** The underlying Vite dev server, for advanced control. */
+  readonly server: ViteDevServer;
+}
+
+const DEFAULT_PORT = 4830;
+
+/**
+ * Boots the Studio Vite dev server for a given project and returns a handle.
+ * This is the programmatic entry point the CLI's `studio` command calls.
+ */
+export const startStudio = async ({
+  projectRoot,
+  port = DEFAULT_PORT,
+}: StartStudioOptions): Promise<StudioHandle> => {
+  const server = await createServer(
+    createStudioViteConfig({ projectRoot, port }),
+  );
+
+  await server.listen();
+
+  const resolvedPort = server.config.server.port ?? port;
+  const url = `http://localhost:${resolvedPort}`;
+
+  return {
+    close: () => server.close(),
+    port: resolvedPort,
+    server,
+    url,
+  };
+};
diff --git a/apps/studio/src/server/virtual-paywalls-plugin.ts b/apps/studio/src/server/virtual-paywalls-plugin.ts
new file mode 100644
index 000000000..174c10591
--- /dev/null
+++ b/apps/studio/src/server/virtual-paywalls-plugin.ts
@@ -0,0 +1,159 @@
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { basename, join } from "node:path";
+
+import type { Plugin, ViteDevServer } from "vite";
+
+/**
+ * The id Studio imports to discover the user's paywalls and components. Resolved
+ * by {@link voidhashPaywallsPlugin} into a module of eager imports so titles and
+ * prop schemas are available synchronously and HMR tracks each source file.
+ */
+export const VIRTUAL_ID = "virtual:voidhash-paywalls";
+const RESOLVED_VIRTUAL_ID = `\0${VIRTUAL_ID}`;
+
+const PAYWALLS_DIR = "paywalls";
+const COMPONENTS_DIR = "components";
+const SOURCE_EXTENSIONS = [".tsx", ".jsx", ".ts", ".js"];
+
+interface SourceEntry {
+  /** Stable id derived from the file name (e.g. `onboarding-green`). */
+  readonly id: string;
+  /** Absolute path to the source file. */
+  readonly file: string;
+}
+
+// Discovery below MUST stay in sync with the CLI build's logic
+// (apps/cli/src/domain/services/paywall-build.ts: `listFilesRecursive`,
+// `isSourceFile`, `idFromFile`) so Studio shows exactly what `deploy` ships:
+// recursive scan, same source extensions, id = file basename without extension.
+const isSourceFile = (name: string): boolean =>
+  SOURCE_EXTENSIONS.some((ext) => name.endsWith(ext)) &&
+  !name.endsWith(".d.ts");
+
+const idFromFile = (file: string): string =>
+  basename(file).replace(/\.(tsx|jsx|ts|js)$/, "");
+
+/** Recursively lists files under a directory (absolute paths). */
+const listFilesRecursive = (dir: string): string[] => {
+  if (!existsSync(dir)) return [];
+  const out: string[] = [];
+  for (const entry of readdirSync(dir)) {
+    const full = join(dir, entry);
+    if (statSync(full).isDirectory()) {
+      out.push(...listFilesRecursive(full));
+    } else {
+      out.push(full);
+    }
+  }
+  return out;
+};
+
+/** Lists the source files under a `.voidhash/<dir>` tree, sorted by id. */
+const scanDir = (voidhashDir: string, dir: string): SourceEntry[] =>
+  listFilesRecursive(join(voidhashDir, dir))
+    .filter((file) => isSourceFile(basename(file)))
+    .map((file) => ({ file, id: idFromFile(file) }))
+    .sort((a, b) => a.id.localeCompare(b.id));
+
+/**
+ * Vite reference to a filesystem-absolute path. Files live in the *user's*
+ * project, outside Studio's own root, so they must be addressed via the `/@fs/`
+ * convention (and the project root must be added to `server.fs.allow`).
+ */
+const fsImportSpecifier = (absPath: string): string => `/@fs${absPath}`;
+
+/** Generates the source of the virtual module from the discovered files. */
+const generateModule = (
+  projectRoot: string,
+  paywalls: SourceEntry[],
+  components: SourceEntry[],
+): string => {
+  const lines: string[] = [];
+  const paywallRefs: string[] = [];
+  const componentRefs: string[] = [];
+
+  paywalls.forEach((entry, i) => {
+    lines.push(
+      `import * as __pw${i} from ${JSON.stringify(fsImportSpecifier(entry.file))};`,
+    );
+    paywallRefs.push(
+      `{ id: ${JSON.stringify(entry.id)}, file: ${JSON.stringify(entry.file)}, module: __pw${i} }`,
+    );
+  });
+
+  components.forEach((entry, i) => {
+    lines.push(
+      `import * as __cmp${i} from ${JSON.stringify(fsImportSpecifier(entry.file))};`,
+    );
+    componentRefs.push(
+      `{ id: ${JSON.stringify(entry.id)}, file: ${JSON.stringify(entry.file)}, module: __cmp${i} }`,
+    );
+  });
+
+  lines.push(`export const projectRoot = ${JSON.stringify(projectRoot)};`);
+  lines.push(`export const paywalls = [${paywallRefs.join(", ")}];`);
+  lines.push(`export const components = [${componentRefs.join(", ")}];`);
+  return lines.join("\n");
+};
+
+export interface VoidhashPaywallsPluginOptions {
+  /** Absolute path to the user's project root (the folder holding `.voidhash`). */
+  projectRoot: string;
+}
+
+/**
+ * Exposes the user's `.voidhash/paywalls` and `.voidhash/components` to Studio as
+ * the `virtual:voidhash-paywalls` module, and keeps the preview live: editing a
+ * file triggers HMR through the static-import graph, while adding or removing a
+ * file invalidates the virtual module and reloads so the sidebar stays in sync.
+ */
+export const voidhashPaywallsPlugin = ({
+  projectRoot,
+}: VoidhashPaywallsPluginOptions): Plugin => {
+  const voidhashDir = join(projectRoot, ".voidhash");
+  let server: ViteDevServer | undefined;
+
+  const invalidate = () => {
+    if (!server) return;
+    const mod = server.moduleGraph.getModuleById(RESOLVED_VIRTUAL_ID);
+    if (mod) server.moduleGraph.invalidateModule(mod);
+    server.ws.send({ type: "full-reload" });
+  };
+
+  const isPaywallSource = (file: string): boolean =>
+    file.startsWith(join(voidhashDir, PAYWALLS_DIR)) ||
+    file.startsWith(join(voidhashDir, COMPONENTS_DIR));
+
+  return {
+    name: "voidhash:paywalls",
+    enforce: "pre",
+
+    config: () => ({
+      server: { fs: { allow: [projectRoot] } },
+    }),
+
+    configureServer(devServer) {
+      server = devServer;
+      // Watch the .voidhash tree for structural changes (add/remove files).
+      devServer.watcher.add(voidhashDir);
+      devServer.watcher.on("add", (file) => {
+        if (isPaywallSource(file)) invalidate();
+      });
+      devServer.watcher.on("unlink", (file) => {
+        if (isPaywallSource(file)) invalidate();
+      });
+    },
+
+    resolveId(id) {
+      if (id === VIRTUAL_ID) return RESOLVED_VIRTUAL_ID;
+      return null;
+    },
+
+    load(id) {
+      if (id !== RESOLVED_VIRTUAL_ID) return null;
+      const paywalls = scanDir(voidhashDir, PAYWALLS_DIR);
+      const components = scanDir(voidhashDir, COMPONENTS_DIR);
+      return generateModule(projectRoot, paywalls, components);
+    },
+  };
+};
diff --git a/apps/studio/src/vite-env.d.ts b/apps/studio/src/vite-env.d.ts
new file mode 100644
index 000000000..3a7298330
--- /dev/null
+++ b/apps/studio/src/vite-env.d.ts
@@ -0,0 +1,20 @@
+/// <reference types="vite/client" />
+
+declare module "virtual:voidhash-paywalls" {
+  import type { PaywallDefinition } from "@voidhash/paywalls";
+
+  interface RawEntry {
+    readonly id: string;
+    readonly file: string;
+    readonly module: { readonly default?: unknown } & Record<string, unknown>;
+  }
+
+  /** Absolute path to the user's project root. */
+  export const projectRoot: string;
+  /** Every paywall discovered under `.voidhash/paywalls`. */
+  export const paywalls: ReadonlyArray<RawEntry>;
+  /** Every reusable component discovered under `.voidhash/components`. */
+  export const components: ReadonlyArray<RawEntry>;
+
+  export type { PaywallDefinition };
+}
diff --git a/apps/studio/src/voidhash/paywalls.ts b/apps/studio/src/voidhash/paywalls.ts
new file mode 100644
index 000000000..4537a327b
--- /dev/null
+++ b/apps/studio/src/voidhash/paywalls.ts
@@ -0,0 +1,131 @@
+import {
+  components as rawComponents,
+  paywalls as rawPaywalls,
+  projectRoot as rawProjectRoot,
+} from "virtual:voidhash-paywalls";
+import {
+  type ActionMap,
+  type ComponentDefinition,
+  type ComponentManifest,
+  extractComponentManifest,
+  isComponentDefinition,
+  isPaywallDefinition,
+  type PaywallDefinition,
+  type PropMap,
+} from "@voidhash/paywalls";
+
+/**
+ * A component definition with its prop/action generics erased — the shape of
+ * definitions discovered dynamically from the user's project.
+ */
+export type AnyComponentDefinition = ComponentDefinition<PropMap, ActionMap>;
+
+/** A paywall ready to preview, with its source location. */
+export interface PaywallEntry {
+  readonly id: string;
+  readonly file: string;
+  readonly title: string;
+  readonly definition: PaywallDefinition;
+}
+
+/** A reusable component discovered in the project, with its editor metadata. */
+export interface ComponentEntry {
+  readonly id: string;
+  readonly file: string;
+  /** The `defineComponent(...)` export, or null when the file has none. */
+  readonly definition: AnyComponentDefinition | null;
+  /** The extracted §2 manifest, or null when extraction failed. */
+  readonly manifest: ComponentManifest | null;
+}
+
+/** An entry whose default export failed to be a valid paywall definition. */
+export interface InvalidEntry {
+  readonly id: string;
+  readonly file: string;
+  readonly reason: string;
+}
+
+export interface ProjectContent {
+  readonly projectRoot: string;
+  readonly paywalls: ReadonlyArray<PaywallEntry>;
+  readonly components: ReadonlyArray<ComponentEntry>;
+  readonly invalid: ReadonlyArray<InvalidEntry>;
+}
+
+/**
+ * Finds the `defineComponent(...)` result in a component module: the default
+ * export by convention, falling back to the first matching named export
+ * (authors commonly `export const definition = defineComponent(...)`).
+ */
+const findComponentDefinition = (
+  module: { readonly default?: unknown } & Record<string, unknown>,
+): AnyComponentDefinition | null => {
+  if (isComponentDefinition(module.default)) {
+    return module.default;
+  }
+  for (const value of Object.values(module)) {
+    if (isComponentDefinition(value)) {
+      return value;
+    }
+  }
+  return null;
+};
+
+const safeManifest = (
+  definition: AnyComponentDefinition,
+): ComponentManifest | null => {
+  try {
+    return extractComponentManifest(definition);
+  } catch {
+    // A structurally valid definition with hand-rolled (non-builder) props can
+    // still blow up extraction; the sidebar then just omits the metadata.
+    return null;
+  }
+};
+
+/**
+ * Normalizes the raw `virtual:voidhash-paywalls` module into typed, validated
+ * collections for the UI. Paywalls whose default export isn't a valid
+ * `createPaywall(...)` result are surfaced as {@link InvalidEntry} rather than
+ * crashing the preview.
+ */
+export const loadProjectContent = (): ProjectContent => {
+  const paywalls: PaywallEntry[] = [];
+  const invalid: InvalidEntry[] = [];
+
+  for (const entry of rawPaywalls) {
+    const def = entry.module.default;
+    if (isPaywallDefinition(def)) {
+      paywalls.push({
+        definition: def,
+        file: entry.file,
+        id: entry.id,
+        title: def.title || entry.id,
+      });
+    } else {
+      invalid.push({
+        file: entry.file,
+        id: entry.id,
+        reason:
+          "Default export is not a paywall. Did you forget `export default createPaywall(...)`?",
+      });
+    }
+  }
+
+  const components: ComponentEntry[] = rawComponents.map((entry) => {
+    const definition = findComponentDefinition(entry.module);
+    return {
+      definition,
+      file: entry.file,
+      id: entry.id,
+      manifest: definition ? safeManifest(definition) : null,
+    };
+  });
+
+  return {
+    components,
+    invalid,
+    paywalls: paywalls.sort((a, b) => a.title.localeCompare(b.title)),
+    projectRoot: rawProjectRoot,
+  };
+};
diff --git a/apps/studio/src/voidhash/preview-runtime.ts b/apps/studio/src/voidhash/preview-runtime.ts
new file mode 100644
index 000000000..306f7609e
--- /dev/null
+++ b/apps/studio/src/voidhash/preview-runtime.ts
@@ -0,0 +1,91 @@
+import type {
+  PaywallBridge,
+  PaywallOutboundEnvelope,
+  PaywallRuntimeConfig,
+} from "@voidhash/paywalls";
+
+/**
+ * Mock products + variables injected into previewed paywalls (contract §7.1).
+ * On a device the native SDK supplies these; in Studio we fake a representative
+ * subscription group so product-driven layouts render with realistic data.
+ * `id` mirrors a store product identifier, `slug` the Voidhash product slug.
+ */
+export const DEFAULT_PREVIEW_CONFIG: PaywallRuntimeConfig = {
+  defaultSelectedProductId: "com.example.app.yearly",
+  locale: "en-US",
+  platform: "ios",
+  products: [
+    {
+      currencyCode: "USD",
+      displayName: "Yearly",
+      id: "com.example.app.yearly",
+      period: "year",
+      price: 59.99,
+      priceString: "$59.99",
+      slug: "yearly",
+      trialPeriod: "7d",
+    },
+    {
+      currencyCode: "USD",
+      displayName: "Monthly",
+      id: "com.example.app.monthly",
+      period: "month",
+      price: 9.99,
+      priceString: "$9.99",
+      slug: "monthly",
+    },
+    {
+      currencyCode: "USD",
+      displayName: "Lifetime",
+      id: "com.example.app.lifetime",
+      period: "lifetime",
+      price: 199.99,
+      priceString: "$199.99",
+      slug: "lifetime",
+    },
+  ],
+  variables: {
+    accentColor: "#16a34a",
+    ctaLabel: "Continue",
+    showTrialBadge: true,
+  },
+};
+
+/** A captured outbound envelope with a monotonically increasing id + timestamp. */
+export interface PreviewEvent {
+  readonly key: number;
+  readonly at: number;
+  readonly envelope: PaywallOutboundEnvelope;
+}
+
+// Module-scoped so every emitted event has a unique key even if more than one
+// bridge instance exists (React StrictMode double-invokes the `useMemo` factory
+// that creates the bridge, yielding two closures that would otherwise both start
+// their counter at 0 and collide).
+let eventCounter = 0;
+
+/**
+ * A {@link PaywallBridge} that records every outbound envelope a previewed
+ * paywall posts so Studio can display them, instead of forwarding to a
+ * (non-existent) native host. Studio renders the paywall in-process — it never
+ * delivers inbound envelopes (`configure`/`response`/`status`), so `subscribe`
+ * is a no-op subscription.
+ */
+export const createStudioBridge = (
+  onEvent: (event: PreviewEvent) => void,
+): PaywallBridge => ({
+  post: (envelope) => {
+    eventCounter += 1;
+    onEvent({ at: Date.now(), envelope, key: eventCounter });
+  },
+  subscribe: () => () => {},
+});
+
+/**
+ * A bridge that drops everything. Used for static component previews in the
+ * sidebar so their mount-time `ready` envelopes don't pollute the event log.
+ */
+export const SILENT_BRIDGE: PaywallBridge = {
+  post: () => {},
+  subscribe: () => () => {},
+};
diff --git a/apps/studio/tsconfig.json b/apps/studio/tsconfig.json
new file mode 100644
index 000000000..ed889ee8a
--- /dev/null
+++ b/apps/studio/tsconfig.json
@@ -0,0 +1,11 @@
+{
+  "extends": "../../packages/tsconfig/react-library.json",
+  "compilerOptions": {
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "types": ["vite/client", "node"],
+    "jsx": "react-jsx",
+    "jsxImportSource": "react",
+    "rootDir": "."
+  },
+  "include": ["src", "vite.config.ts"]
+}
diff --git a/apps/studio/vite.config.ts b/apps/studio/vite.config.ts
new file mode 100644
index 000000000..31782d607
--- /dev/null
+++ b/apps/studio/vite.config.ts
@@ -0,0 +1,19 @@
+import { resolve } from "node:path";
+
+import { createStudioViteConfig } from "./src/server/config";
+
+/**
+ * Vite config for Studio. The project to preview is chosen by the
+ * `VOIDHASH_PROJECT_ROOT` env var, which `voidhash-cli studio` sets when it
+ * launches Vite. When run standalone (`pnpm --filter @voidhash/studio dev`) it
+ * falls back to the bundled React Native example so Studio can be developed in
+ * isolation.
+ */
+const projectRoot =
+  process.env.VOIDHASH_PROJECT_ROOT ??
+  resolve(import.meta.dirname, "../../examples/react-native-example");
+
+export default createStudioViteConfig({
+  projectRoot,
+  studioRoot: import.meta.dirname,
+});
diff --git a/docs/specs/paywall-deploy-contract.md b/docs/specs/paywall-deploy-contract.md
new file mode 100644
index 000000000..f65c3fa80
--- /dev/null
+++ b/docs/specs/paywall-deploy-contract.md
@@ -0,0 +1,297 @@
+# Paywall Deploy Contract (Phase 1)
+
+**Status:** Implementation contract for PRD "Paywall Code Components" Phase 1.
+**Implementors:** `voidhash` OSS repo (SDK `@voidhash/paywalls`, `voidhash-cli`, studio, `@voidhash/react-native`) and `voidhash-mono` (backend, www).
+**Rule:** this file is the wire-format source of truth. Both repos validate against schemas that mirror this document exactly. Breaking changes bump `schemaVersion`.
+
+---
+
+## 1. Deploy manifest — `schemaVersion: 2`
+
+Produced by `voidhash-cli deploy` at `.voidhash/.build/manifest.json`. Supersedes the v1 manifest (whole file, not additive).
+
+```jsonc
+{
+  "schemaVersion": 2,
+  "cliVersion": "0.0.1-alpha.1",
+  "runtimeVersion": "0.0.1-alpha.1",        // @voidhash/paywalls version built against
+  "team": "voidhash-dev-sro",               // organization slug
+  "project": "dev-proj",                    // project slug
+  "createdAt": "2026-06-11T10:00:00.000Z",
+
+  "paywalls": [
+    {
+      "id": "onboarding",                   // slug, from filename; ^[a-z0-9][a-z0-9-]{0,63}$
+      "title": "Onboarding",
+      "description": "Full-screen onboarding paywall.",   // optional
+      "products": ["yearly", "monthly"],    // product slugs the paywall uses (may be empty)
+      "variables": { "accentColor": "#16a34a" },          // string|number|boolean values only
+      "source":  { "path": ".voidhash/paywalls/onboarding.tsx", "bytes": 4096, "sha256": "…" },
+      "artifacts": {
+        "html": { "path": ".voidhash/.build/paywalls/onboarding/index.html", "bytes": 900,    "sha256": "…", "contentType": "text/html; charset=utf-8" },
+        "js":   { "path": ".voidhash/.build/paywalls/onboarding/bundle.js",  "bytes": 201000, "sha256": "…", "contentType": "text/javascript; charset=utf-8" }
+      },
+      "assets": [".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png"],  // paths into top-level assets[]
+      "contentHash": "5b00934c90ee…"        // see §1.2
+    }
+  ],
+
+  "components": [
+    {
+      "id": "product-option",               // slug, from filename; same regex as paywall ids
+      "title": "Product Option",            // optional, from definition
+      "source":   { "path": ".voidhash/components/product-option.tsx", "bytes": 1500, "sha256": "…" },
+      "manifest": { "path": ".voidhash/.build/components/product-option/manifest.json", "bytes": 800, "sha256": "…", "contentType": "application/json" },
+      "previews": [
+        { "state": "default", "file": { "path": ".voidhash/.build/components/product-option/previews/default.json", "bytes": 2000, "sha256": "…", "contentType": "application/json" } }
+      ],
+      "artifacts": {
+        "runtime": { "path": ".voidhash/.build/components/product-option/runtime.js", "bytes": 6000, "sha256": "…", "contentType": "text/javascript; charset=utf-8" },
+        "panel":   null                     // or a file entry when the component declares a custom panel
+      },
+      "contentHash": "ab93f1…"              // see §1.2
+    }
+  ],
+
+  "config": { "path": "voidhash.config.ts", "bytes": 120, "sha256": "…" },
+
+  "assets": [
+    { "path": ".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png", "bytes": 88000, "sha256": "…", "contentType": "image/png" }
+  ]
+}
+```
+
+File entry shapes (same as v1): `DeployFile = { path, bytes, sha256 }`, `DeployArtifact = DeployFile + { contentType }`. `path` is POSIX, relative to project root. `sha256` is lowercase hex of the raw bytes.
+
+### 1.1 Constraints (server rejects violations at finalize)
+
+- `paywalls[].id`, `components[].id` unique within the manifest, regex above.
+- `variables` values: `string | number | boolean` only.
+- Size caps: js bundles ≤ 5 MB, assets ≤ 10 MB each, manifest body ≤ 1 MB, component manifest ≤ 256 KB, preview tree ≤ 512 KB, paywall html ≤ 1 MB, source files ≤ 1 MB, config ≤ 256 KB. Caps are enforced on the ACTUAL uploaded bytes (upload rejects a body whose length differs from the declared `bytes` or exceeds the role cap) and re-verified at finalize against the recorded blob sizes.
+- `contentType` allowlist: `text/html`, `text/javascript`, `application/json`, `image/png`, `image/jpeg`, `image/gif`, `image/webp`, `image/svg+xml`, `font/ttf`, `font/otf`, `font/woff`, `font/woff2` (charset suffixes allowed).
+- Per-role `contentType` rules (validated at finalize, on the bare type before any charset suffix):
+  - paywall `html` artifact: `text/html` only.
+  - paywall `js`, component `runtime`, component `panel`: `text/javascript` only.
+  - component `manifest` and `previews[].file`: `application/json` only.
+  - `assets[]`: `image/*` or `font/*` types from the allowlist only — never `text/html` or `text/javascript`.
+- At least one paywall **or** one component.
+- `components[].previews` non-empty (the CLI always emits a `default` tree).
+- `previews[].state` matches `^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$` — state names become serving object keys and URL path segments (§5.1).
+- Each decoded preview tree's `state` field (§3) equals its `previews[].state` entry. This binds the state→file mapping into the `contentHash` transitively; without it, the same file set with swapped state assignments would collide under one immutable `contentHash`.
+
+### 1.2 `contentHash`
+
+- Paywall: `sha256( sha256(html) + ":" + sha256(js) + ":" + sortedAssetHashes.join(":") )` — hex string concatenation, lowercase.
+- Component: `sha256( sha256(manifest) + ":" + sha256(runtime) + ":" + (sha256(panel) | "") + ":" + sortedPreviewHashes.join(":") )`.
+
+The paywall `contentHash` is the deployable identity: storage prefix, cache key, dedupe key.
+
+## 2. Component manifest (`manifest.json` artifact)
+
+Emitted per component by the CLI (extracted from `defineComponent` in a local node process — never on the server). Validated server-side at finalize.
+
+```jsonc
+{
+  "manifestVersion": 1,
+  "id": "product-option",
+  "title": "Product Option",                // optional
+  "description": "…",                       // optional
+  "props": {
+    "product":     { "kind": "ref", "refType": "product", "label": "Product", "optional": false },
+    "selected":    { "kind": "boolean", "default": false, "optional": true },
+    "accentColor": { "kind": "string", "editor": "color", "default": "#16a34a", "optional": true },
+    "badge":       { "kind": "component", "optional": true },
+    "features":    { "kind": "array", "item": { "kind": "string" }, "optional": true },
+    "plan":        { "kind": "select", "options": ["monthly", "yearly"], "optional": true }
+  },
+  "actions": {
+    "onSelect": { "payload": { "productId": { "kind": "string" } } }   // payload may be {}
+  },
+  "slot": true,                             // exactly one <Slot/> allowed per component
+  "previewStates": ["default", "trial"],
+  "hostData": ["products"]                  // which injected runtime data the component reads
+}
+```
+
+Prop kinds: `string | number | boolean | select | image | ref | component | array`. Per-kind fields and constraints:
+
+| `kind` | extra fields | `editor` | `default` |
+| --- | --- | --- | --- |
+| `string` | — | allowed (`"color"` for now) | `string` |
+| `number` | — | not allowed | `number` |
+| `boolean` | — | not allowed | `boolean` |
+| `select` | `options`: **non-empty** `string[]` (empty options are a build error in the CLI and rejected at finalize) | not allowed | `string` |
+| `image` | — | not allowed | `string` (URL / asset reference) |
+| `ref` | `refType`: `"product"` only in P1 | not allowed | — |
+| `component` | — | not allowed | — |
+| `array` | `item`: a non-array kind (carries the same per-kind fields) | not allowed | array of scalars matching `item` |
+
+`editor` is a UI hint and only legal on `string` props — the authoring API enforces this at the type level. Non-JSON-serializable defaults (e.g. React nodes) are omitted from the manifest. A prop with a `default` is always emitted with `optional: true`. All kinds also accept optional `label`, `description`, `optional`.
+
+## 3. Preview node tree (`previews/<state>.json` artifact)
+
+The component SSR-ed at CLI build time against the preview state's fixtures, rendered to a tree of closed primitives. Never HTML.
+
+```jsonc
+{
+  "treeVersion": 1,
+  "state": "default",
+  "root": {
+    "type": "view",                         // view|text|image|pressable|scroll|slot|placeholder
+    "style": { "flexDirection": "row", "padding": 16 },   // RN-compatible subset, see §3.1
+    "children": [
+      { "type": "text", "style": { "color": "#fff" }, "text": "Yearly" },
+      { "type": "image", "style": {}, "src": "https://…", "resizeMode": "cover" },
+      { "type": "slot" },                   // slot marker — editor mounts children here
+      { "type": "placeholder", "reason": "render returned null" }
+    ]
+  }
+}
+```
+
+Node shapes: `view|pressable|scroll` have `style` + `children[]`; `text` has `style` + `text` (string); `image` has `style` + `src` + optional `resizeMode` (`"cover" | "contain" | "stretch" | "center"` — exactly these four values); `slot` has nothing else (at most one in the tree); `placeholder` has `reason`. `pressable` additionally has optional `action` (string — the declared action name it fires). No other keys; servers MUST reject unknown node types and unknown keys.
+
+### 3.1 Style subset
+
+Keys limited to the RN-compatible vocabulary: flexbox (`flex`, `flexDirection`, `alignItems`, `alignSelf`, `justifyContent`, `flexWrap`, `gap`, `rowGap`, `columnGap`, `flexGrow`, `flexShrink`, `flexBasis`), box (`width`, `height`, `minWidth`, `minHeight`, `maxWidth`, `maxHeight`, `padding[Top|Bottom|Left|Right|Horizontal|Vertical]`, `margin[…same…]`, `aspectRatio`), border (`borderWidth`, `borderColor`, `borderRadius` + per-corner variants, `borderStyle`), visual (`backgroundColor`, `opacity`, `overflow`), position (`position`, `top`, `right`, `bottom`, `left`, `zIndex`), text-only (`color`, `fontSize`, `fontWeight`, `fontStyle`, `lineHeight`, `letterSpacing`, `textAlign`, `textTransform`, `textDecorationLine`, `fontFamily`). Values: numbers, strings (colors, `"50%"`); no arbitrary CSS.
+
+## 4. Deploy HTTP API (voidhash-mono backend)
+
+Base: the existing v1 API host. All three endpoints are part of the authenticated studio/CLI surface: header `x-api-key` accepting the same credentials as `/api/v1/auth/session` (CLI user key from device login, or a `vh_sk_` secret key). The authenticated session must include a project whose `slug == manifest.project` within an organization whose `slug == manifest.team`; otherwise `403`.
+
+### 4.1 Create deploy
+
+```
+POST /api/v1/paywall-deploys
+Content-Type: application/json
+Body: <DeployManifest>            // §1, validated against schemaVersion 2
+→ 201 { "deployId": "pw_dep_…", "missing": ["<sha256>", …] }
+```
+
+`missing` = subset of manifest file hashes the server does not already have stored **for this project**. Idempotent: re-POSTing a manifest whose canonical hash matches an existing deploy of the same project — of **any** status; the (project, canonical manifest hash) pair is unique per project — returns that deploy. A pending match resumes uploading via the returned `missing` list; a ready match returns `missing: []`. Unknown `schemaVersion` → `400` with a "upgrade the CLI" message.
+
+### 4.2 Upload blob
+
+```
+PUT /api/v1/paywall-deploys/:deployId/blobs/:sha256
+Content-Type: application/octet-stream
+Body: raw bytes
+→ 200 {}
+```
+
+Server MUST verify `sha256(body) === :sha256` (reject mismatch with `422`) and that the hash appears in the deploy's manifest (`404` otherwise). Re-uploading an existing blob is a no-op `200`.
+
+### 4.3 Finalize
+
+```
+POST /api/v1/paywall-deploys/:deployId/finalize
+→ 200 {
+  "deployId": "pw_dep_…",
+  "status": "ready",
+  "paywalls": [{ "id": "onboarding", "paywallId": "pw_…", "releaseId": "pw_pub_…", "version": 3, "contentHash": "…", "url": "https://…/p/<contentHash>/index.html" }],
+  "components": [{ "id": "product-option", "componentId": "pw_cmp_…", "version": 2, "contentHash": "…" }]
+}
+```
+
+Finalize is the immutable commit point. Server-side validation (trusts nothing): every referenced blob present; recompute every sha256 + every `contentHash`; schema-validate component manifests (§2) and preview trees (§3) from the stored blobs; enforce §1.1 caps. Any failure → `409 { missing: [...] }` for incompleteness, `422` with details for validation failures; the deploy stays pending and can be retried. On a `409` whose `missing` hashes map back to manifest files, the CLI re-uploads exactly those blobs and retries finalize once; a second failure surfaces as an error. Finalizing an already-`ready` deploy is a fully re-validated no-op: it re-copies the idempotent serving objects and returns the current release/component summaries (releases are reused when the latest released `contentHash` matches, so no new versions are created).
+
+Effects on success, per paywall in the manifest:
+1. Upsert a `paywall` row by `(projectId, slug=id)` with `source = code`.
+2. If the latest released release for that paywall already has this `contentHash`, reuse it (no new version). Otherwise create a released `paywall_release` row: `version = max+1`, `s3Key = "p/<contentHash>/index.html"`, `contentHash`, `deployId`, `runtimeConfig = { productSlugs, variables }`, and mark it active (previous active cleared).
+3. Copy blobs into the public serving layout (§5).
+
+Whenever a release becomes active for a CODE-source paywall (finalize activation or explicit release activation), every open location showing of that paywall still pinning a different release is ended and replaced by a new open showing pinning the newly-active release, atomically with the activation.
+
+Per component: upsert `paywall_component` by `(projectId, slug)`; create a `paywall_component_version` (version = max+1, skip if latest has same `contentHash`) storing the component manifest JSON + artifact hashes.
+
+## 5. Serving layout
+
+Released paywall artifacts are public, immutable, content-addressed:
+
+```
+GET {publicBaseUrl}/p/<contentHash>/index.html
+GET {publicBaseUrl}/p/<contentHash>/bundle.js
+GET {publicBaseUrl}/p/<contentHash>/assets/<name>
+```
+
+- The HTML references `./bundle.js` and `./assets/…` relatively — everything under one prefix.
+- Headers: correct `Content-Type` (from manifest), `Cache-Control: public, max-age=31536000, immutable`, permissive CORS (`Access-Control-Allow-Origin: *`).
+- When artifacts are co-hosted with an authenticated origin (e.g. served from the API host), every `/p/*` response MUST additionally carry `Content-Security-Policy: sandbox allow-scripts allow-forms` (the CSP sandbox gives tenant-authored HTML an opaque origin: no same-origin credentialed API access, no `document.cookie`), `X-Content-Type-Options: nosniff`, and `Referrer-Policy: no-referrer`.
+- Recommendation: serve the artifacts from a dedicated cookieless domain before production traffic.
+- `publicBaseUrl` is platform configuration (CDN or a backend serving route); the SDK never constructs these URLs — it uses `htmlUrl` from resolve verbatim.
+
+### 5.1 Component artifacts
+
+Finalize also copies each component's artifacts into the same public, immutable, content-addressed layout, keyed by the component `contentHash` (§1.2):
+
+```
+GET {publicBaseUrl}/c/<contentHash>/manifest.json
+GET {publicBaseUrl}/c/<contentHash>/previews/<state>.json
+GET {publicBaseUrl}/c/<contentHash>/runtime.js
+GET {publicBaseUrl}/c/<contentHash>/panel.js          // only when the deploy manifest declares artifacts.panel
+```
+
+- Same headers as §5: declared `Content-Type`, `Cache-Control: public, max-age=31536000, immutable`, `Access-Control-Allow-Origin: *`, and the co-hosted security headers (CSP sandbox / nosniff / no-referrer).
+- 404 and error responses on `/c/*` (and `/p/*`) also carry `Access-Control-Allow-Origin: *` — cross-origin consumers (e.g. the studio fetching preview trees) must observe a readable 404, not an opaque CORS failure.
+- Clients never construct these URLs from the layout; the platform hands out `artifactBaseUrl = {publicBaseUrl}/c/<contentHash>` and consumers append the file names above.
+
+## 6. Resolve extension
+
+`POST /api/v1/sdk/resolve-paywall` response: the existing `SdkResolvedPaywall` shape, with `showing.paywallRelease` gaining one **optional** field:
+
+```jsonc
+"paywallRelease": {
+  "releaseId": "pw_pub_…",
+  "version": 3,
+  "htmlUrl": "https://…/p/5b00934c…/index.html",
+  "publishedAt": "…",
+  "runtime": {                       // null/absent for visual-editor releases
+    "contentHash": "5b00934c…",
+    "productSlugs": ["yearly", "monthly"],
+    "variables": { "accentColor": "#16a34a" }
+  }
+}
+```
+
+The device SDK: caches the bundle by `runtime.contentHash` when present; maps `productSlugs` through its native store metadata to build the injected products list; passes `variables` through unchanged.
+
+## 7. Runtime config + bridge (WebView ⇄ native)
+
+### 7.1 Config injection
+
+The bundle reads `window.__VOIDHASH_PAYWALL__` (shape below) if set before it runs. Because the current native presenter cannot inject before-load scripts, the runtime ALSO accepts late configuration: it renders immediately with the injected-or-empty config and applies a `configure` message (§7.2) whenever one arrives.
+
+```ts
+interface PaywallRuntimeConfig {
+  products: Array<{
+    id: string;                 // store product id
+    slug: string;               // voidhash product slug
+    displayName: string;
+    description?: string;
+    price?: number;
+    priceString: string;        // locale-correct, from StoreKit/Play Billing
+    currencyCode?: string;
+    period?: "month" | "year" | "week" | "lifetime";
+    trialPeriod?: string;       // e.g. "7d"
+  }>;
+  variables: Record<string, string | number | boolean>;
+  locale?: string;
+  platform?: "ios" | "android" | "web";
+  defaultSelectedProductId?: string;
+}
+```
+
+### 7.2 Bridge protocol
+
+The **normative implementation** is `libraries/react-native/src/internal/paywall-bridge/protocol.ts` (envelope `version: 1`) — the native presenter and SDK handler already speak it. The new runtime conforms to it, plus one new inbound action:
+
+- Outbound (paywall → native): envelopes for `ready`, `purchase { productId }`, `restore`, `close`, `openExternal { url }`, `event { name, properties? }` — exact action names/payload keys per protocol.ts. Sent via `window.ReactNativeWebView.postMessage(json)`; in studio/preview contexts via `window.parent.postMessage({ source: "voidhash-paywall", message }, "*")`.
+- Inbound (native → paywall): delivered by the presenter to the runtime's installed global (per protocol.ts / the existing native implementations — the runtime installs whatever global the native side already calls). Actions: existing success/error responses + status updates, plus **`configure`** with payload `PaywallRuntimeConfig` (§7.1). The SDK sends `configure` immediately after receiving `ready`.
+
+If the OSS implementor finds protocol.ts and the native presenters disagree on any detail, the **native presenters win** (Swift/Kotlin are not modified in P1) and protocol.ts/the runtime are aligned to them.
+
+## 8. Versioning
+
+- `schemaVersion` (manifest, §1): server rejects unknown majors with an upgrade hint.
+- `manifestVersion` (component manifest, §2) and `treeVersion` (§3): independent, validated at finalize.
+- Bridge envelope `version: 1`: unchanged in P1.
diff --git a/examples/react-native-example/.gitignore b/examples/react-native-example/.gitignore
index fdcfc831b..cb2264e84 100644
--- a/examples/react-native-example/.gitignore
+++ b/examples/react-native-example/.gitignore
@@ -20,4 +20,6 @@ android
 .DS_Store
 
 # Temporary files created by Metro to check the health of the file watcher
-.metro-health-check*
\ No newline at end of file
+.metro-health-check*
+# Voidhash paywall build output
+.voidhash/.build/
diff --git a/examples/react-native-example/.voidhash/components/canvas.tsx b/examples/react-native-example/.voidhash/components/canvas.tsx
index 28d7b7eb6..0b4f6c882 100644
--- a/examples/react-native-example/.voidhash/components/canvas.tsx
+++ b/examples/react-native-example/.voidhash/components/canvas.tsx
@@ -1,17 +1,21 @@
+import { defineComponent, Slot, Text, View } from "@voidhash/paywalls";
 
-import { defineComponent, View, Text, Slot } from "@voidhash/paywalls"
-
-export const componentDefinition = defineComponent({
-  props: (c) => ({
-    title: c.string().withLabel("Title").withDefault("Untitled")
-  })
-})
-
-export default componentDefinition.render((props) => {
-  return (
-    <View>
-      <Text>Canvas {props.title}</Text>
+/**
+ * A titled container the editor can drop other elements into (via the slot).
+ */
+export default defineComponent({
+  id: "canvas",
+  title: "Canvas",
+  description: "A titled container with a slot for nested content.",
+  props: (p) => ({
+    title: p.string().label("Title").default("Untitled"),
+  }),
+  render: ({ props }) => (
+    <View style={{ gap: 8, padding: 16 }}>
+      <Text style={{ color: "white", fontSize: 18, fontWeight: "700" }}>
+        {props.title}
+      </Text>
       <Slot />
     </View>
-  )
-})
+  ),
+});
diff --git a/examples/react-native-example/.voidhash/components/product-option.tsx b/examples/react-native-example/.voidhash/components/product-option.tsx
new file mode 100644
index 000000000..cbffe53a1
--- /dev/null
+++ b/examples/react-native-example/.voidhash/components/product-option.tsx
@@ -0,0 +1,73 @@
+import {
+  defineComponent,
+  type PaywallProduct,
+  Pressable,
+  Text,
+  View,
+} from "@voidhash/paywalls";
+
+const yearlyFixture: PaywallProduct = {
+  currencyCode: "USD",
+  displayName: "Yearly Pro",
+  id: "com.example.app.yearly",
+  period: "year",
+  priceString: "$59.99",
+  slug: "yearly",
+  trialPeriod: "7d",
+};
+
+/**
+ * A selectable product row: name and trial on the left, price on the right.
+ * Purely presentational — the paywall passes the product, whether it is
+ * selected, and an `onSelect` handler.
+ */
+export default defineComponent({
+  id: "product-option",
+  title: "Product Option",
+  description: "A selectable product row showing name, trial and price.",
+  props: (p) => ({
+    product: p.ref("product").label("Product"),
+    selected: p.boolean().default(false),
+    accentColor: p.string().editor("color").default("#16a34a"),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ productId: a.string() }),
+  }),
+  previews: {
+    default: { props: { product: yearlyFixture } },
+    selected: { props: { product: yearlyFixture, selected: true } },
+  },
+  render: ({ props, actions }) => (
+    <Pressable
+      onPress={() => actions.onSelect({ productId: props.product.id })}
+      style={{
+        alignItems: "center",
+        backgroundColor: props.selected
+          ? "rgba(255,255,255,0.10)"
+          : "transparent",
+        borderColor: props.selected
+          ? props.accentColor
+          : "rgba(255,255,255,0.15)",
+        borderRadius: 16,
+        borderWidth: 2,
+        flexDirection: "row",
+        justifyContent: "space-between",
+        padding: 16,
+      }}
+    >
+      <View style={{ gap: 2 }}>
+        <Text style={{ color: "white", fontSize: 16, fontWeight: "700" }}>
+          {props.product.displayName}
+        </Text>
+        {props.product.trialPeriod ? (
+          <Text style={{ color: props.accentColor, fontSize: 12 }}>
+            {props.product.trialPeriod} free trial
+          </Text>
+        ) : null}
+      </View>
+      <Text style={{ color: "white", fontSize: 16, fontWeight: "700" }}>
+        {props.product.priceString}
+      </Text>
+    </Pressable>
+  ),
+});
diff --git a/examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx b/examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx
deleted file mode 100644
index d61c98e07..000000000
--- a/examples/react-native-example/.voidhash/paywalls/onboarding-green.tsx
+++ /dev/null
@@ -1,18 +0,0 @@
-import { createPaywall, View, Pressable, Text } from "@voidhash/paywalls"
-import Canvas from '../components/canvas';
-
-const paywall = createPaywall({
-  title: "Onboarding paywall",
-  render: (
-    <View>
-      <Pressable>
-        <Text>Hello World</Text>
-      </Pressable>
-      <Canvas>
-        <Text>Hello</Text>
-      </Canvas>
-    </View>
-  )
-})
-
-export default paywall;
diff --git a/examples/react-native-example/.voidhash/paywalls/onboarding.tsx b/examples/react-native-example/.voidhash/paywalls/onboarding.tsx
new file mode 100644
index 000000000..35181a4e8
--- /dev/null
+++ b/examples/react-native-example/.voidhash/paywalls/onboarding.tsx
@@ -0,0 +1,82 @@
+import {
+  createPaywall,
+  Pressable,
+  Text,
+  usePaywallActions,
+  usePaywallProducts,
+  usePaywallVariables,
+  useSelectedProduct,
+  View,
+} from "@voidhash/paywalls";
+
+import productOption from "../components/product-option";
+
+const ProductOption = productOption.component;
+
+export default createPaywall({
+  title: "Onboarding",
+  description: "Full-screen onboarding paywall.",
+  products: ["yearly", "monthly"],
+  variables: { accentColor: "#16a34a" },
+  render: () => {
+    const products = usePaywallProducts();
+    const variables = usePaywallVariables();
+    const actions = usePaywallActions();
+    const { selectedProductId, selectProduct } = useSelectedProduct();
+    const accentColor =
+      typeof variables.accentColor === "string"
+        ? variables.accentColor
+        : "#16a34a";
+
+    return (
+      <View
+        style={{
+          backgroundColor: "#0b0b0f",
+          flex: 1,
+          gap: 16,
+          justifyContent: "flex-end",
+          padding: 24,
+        }}
+      >
+        <Text style={{ color: "white", fontSize: 28, fontWeight: "800" }}>
+          Unlock everything
+        </Text>
+        <Text style={{ color: "rgba(255,255,255,0.7)", fontSize: 15 }}>
+          Unlimited projects, every pro feature, and priority support.
+        </Text>
+        <View style={{ gap: 12 }}>
+          {products.map((product) => (
+            <ProductOption
+              accentColor={accentColor}
+              key={product.id}
+              onSelect={({ productId }) => selectProduct(productId)}
+              product={product}
+              selected={product.id === selectedProductId}
+            />
+          ))}
+        </View>
+        <Pressable
+          onPress={() => actions.purchase()}
+          style={{
+            alignItems: "center",
+            backgroundColor: accentColor,
+            borderRadius: 16,
+            padding: 16,
+          }}
+        >
+          <Text style={{ color: "white", fontSize: 17, fontWeight: "700" }}>
+            Continue
+          </Text>
+        </Pressable>
+        <Pressable
+          onPress={() => actions.close()}
+          style={{ alignItems: "center", padding: 8 }}
+        >
+          <Text style={{ color: "rgba(255,255,255,0.6)", fontSize: 14 }}>
+            Not now
+          </Text>
+        </Pressable>
+      </View>
+    );
+  },
+});
diff --git a/examples/react-native-example/package.json b/examples/react-native-example/package.json
index 83f8c2645..63c052b44 100644
--- a/examples/react-native-example/package.json
+++ b/examples/react-native-example/package.json
@@ -22,6 +22,7 @@
   "dependencies": {
     "@expo/metro-runtime": "~6.1.2",
     "@react-native-async-storage/async-storage": "^2.1.2",
+    "@voidhash/paywalls": "workspace:*",
     "@voidhash/react-native": "workspace:*",
     "expo": "^54.0.33",
     "expo-constants": "~18.0.13",
diff --git a/examples/react-native-example/voidhash.config.ts b/examples/react-native-example/voidhash.config.ts
index 2c63f37e4..e0f3fe0c5 100644
--- a/examples/react-native-example/voidhash.config.ts
+++ b/examples/react-native-example/voidhash.config.ts
@@ -1,6 +1,6 @@
 import { defineConfig } from "voidhash-cli";
 
 export default defineConfig({
-	team: "voidhash-dev-sro",
-	project: "dev-proj",
+	team: "voidhash-s-r-o",
+	project: "react-native-example",
 });
diff --git a/libraries/paywalls/README.md b/libraries/paywalls/README.md
new file mode 100644
index 000000000..c3d83f59e
--- /dev/null
+++ b/libraries/paywalls/README.md
@@ -0,0 +1,121 @@
+# @voidhash/paywalls
+
+Code-driven paywall authoring runtime and renderer for Voidhash.
+
+Paywalls are React trees written with a React-Native-like primitive set and
+rendered by a **pluggable renderer**. The default renderer targets the DOM
+(used by Studio and the deployed WebView bundle); the Node-only tree renderer
+serializes the same components into the preview node trees the visual editor
+consumes. Author code never references a platform.
+
+The wire formats this package implements (runtime config, bridge envelopes,
+component manifest, preview node tree) are specified in
+[`docs/specs/paywall-deploy-contract.md`](../../docs/specs/paywall-deploy-contract.md).
+
+## Authoring a paywall
+
+`.voidhash/paywalls/*.tsx`
+
+```tsx
+import { createPaywall, View, Text, Pressable, usePaywallActions } from "@voidhash/paywalls";
+
+function Body() {
+  const { purchase } = usePaywallActions();
+  return (
+    <View style={{ flex: 1, padding: 24, justifyContent: "flex-end" }}>
+      <Text style={{ fontSize: 28, fontWeight: "700" }}>Go Pro</Text>
+      <Pressable onPress={() => purchase()} style={{ backgroundColor: "#16a34a", padding: 16, borderRadius: 12 }}>
+        <Text style={{ color: "white", textAlign: "center" }}>Subscribe</Text>
+      </Pressable>
+    </View>
+  );
+}
+
+export default createPaywall({
+  title: "Onboarding",
+  products: ["yearly", "monthly"],
+  variables: { accentColor: "#16a34a" },
+  render: () => <Body />,
+});
+```
+
+## Reusable components
+
+`.voidhash/components/*.tsx`
+
+```tsx
+import { defineComponent, Pressable, Slot, Text } from "@voidhash/paywalls";
+
+export const definition = defineComponent({
+  id: "product-option",
+  title: "Product Option",
+  props: (p) => ({
+    product: p.ref("product"),
+    accentColor: p.string().editor("color").default("#16a34a"),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ productId: a.string() }),
+  }),
+  previews: {
+    default: { data: { products: [/* fixture products */] } },
+  },
+  render: ({ props, actions }) => (
+    <Pressable onPress={actions.onSelect} style={{ borderColor: props.accentColor }}>
+      <Text>{props.product.displayName}</Text>
+      <Slot /> {/* children passed by the consumer render here */}
+    </Pressable>
+  ),
+});
+
+export const ProductOption = definition.component;
+```
+
+The prop builder (`p`) records both the prop's **type** (for type-safe
+templates) and its **editor metadata** which the component manifest and the
+visual editor consume. Kinds: `string`, `number`, `boolean`,
+`select(options)`, `image`, `ref("product")`, `component`, `array(item)` —
+each chainable with `.label()`, `.default()`, `.editor("color")`,
+`.optional()`.
+
+Declared actions become typed callbacks in the template (`actions.onSelect`)
+that forward to the consumer prop of the same name. `extractComponentManifest(definition)`
+emits the §2 manifest JSON (props, actions, slot usage, preview states,
+host data).
+
+## Primitives
+
+`View`, `Text`, `Pressable`, `ScrollView`, `Image`, `Slot` — RN-style props
+(`style`, `onPress`, `numberOfLines`, `resizeMode`, …). The `style` prop is
+typed as `PaywallStyle`, the RN-compatible subset from the deploy contract
+(§3.1) — arbitrary CSS does not compile.
+
+## Runtime
+
+Hooks read the runtime config the host supplies (injected
+`window.__VOIDHASH_PAYWALL__` or a late `configure` bridge message):
+
+- `usePaywallProducts()` — products to display.
+- `usePaywallVariables()` — dashboard/experiment overrides.
+- `useSelectedProduct()` — selected product + setter.
+- `usePaywallActions()` — `purchase`, `restore`, `close`, `openUrl`, `track`,
+  `selectProduct`.
+- `usePaywallStatus()` — transaction lifecycle (idle/purchasing/purchased/…).
+- `usePaywallConfig()` — the full config (locale, platform, …).
+
+Actions are sent to the native SDK as version-1 envelopes over the WebView
+bridge; the envelope format mirrors
+`@voidhash/react-native`'s `paywall-bridge/protocol.ts` (normative). In Studio
+the same envelopes are posted to the parent frame as
+`{ source: "voidhash-paywall", message }`.
+
+## Rendering
+
+- `PaywallRenderer` — embeds a paywall in an existing React tree (Studio).
+- `mountPaywall(paywall, container)` (from `@voidhash/paywalls/dom`) — commits
+  a paywall to a DOM container via `react-dom`; used by the deployed WebView
+  bundle. Reads the injected config and applies `configure` messages.
+- `renderToNodeTree(element, { config, state })` (from
+  `@voidhash/paywalls/tree`, **Node-only**) — renders components (hooks
+  included) to the §3 preview node tree via a custom `react-reconciler` host.
+- `@voidhash/paywalls/panel` — data-only `Panel` primitives for future custom
+  editor panels (inert in Phase 1).
diff --git a/libraries/paywalls/build.ts b/libraries/paywalls/build.ts
new file mode 100644
index 000000000..d0226c3d6
--- /dev/null
+++ b/libraries/paywalls/build.ts
@@ -0,0 +1,50 @@
+import * as tsup from "tsup";
+
+const main = async () => {
+  await tsup.build({
+    dts: true,
+    entryPoints: {
+      dom: "./src/dom.tsx",
+      index: "./src/index.ts",
+      panel: "./src/panel.ts",
+      tree: "./src/tree.ts",
+    },
+    external: [
+      "react",
+      "react-dom",
+      "react/jsx-runtime",
+      // Node-only dependency of the `tree` entry; never reaches the browser
+      // entries because nothing outside `src/tree-renderer` imports it.
+      "react-reconciler",
+      "react-reconciler/constants",
+    ],
+    format: ["cjs", "esm"],
+    outDir: "./dist",
+    outExtension: (ctx) => {
+      if (ctx.format === "cjs") {
+        // `.cjs` because package.json declares `"type": "module"` — a plain
+        // `.js` would be loaded as ESM by Node and break the require path.
+        return { dts: ".d.ts", js: ".cjs" };
+      }
+      return { dts: ".d.mts", js: ".mjs" };
+    },
+    sourcemap: true,
+    // Split shared code (runtime, primitives, contexts) into common chunks all
+    // entries import. Without this, each entry would inline its own copy of
+    // the runtime — yielding distinct React contexts, so e.g. a component
+    // rendered by `@voidhash/paywalls/tree` could not resolve the tree host
+    // installed through `RendererProvider`. Splitting guarantees a single
+    // shared instance.
+    splitting: true,
+    target: "es2022",
+    esbuildOptions: (options) => {
+      options.jsx = "automatic";
+    },
+  });
+};
+
+main().catch((error) => {
+  // biome-ignore lint/suspicious/noConsole: Build script should print the failure.
+  console.error(error);
+  process.exit(1);
+});
diff --git a/libraries/paywalls/package.json b/libraries/paywalls/package.json
new file mode 100644
index 000000000..943a5a1b9
--- /dev/null
+++ b/libraries/paywalls/package.json
@@ -0,0 +1,102 @@
+{
+  "name": "@voidhash/paywalls",
+  "version": "0.0.1-alpha.1",
+  "private": false,
+  "description": "Code-driven paywall authoring runtime and renderer for Voidhash.",
+  "keywords": [
+    "voidhash",
+    "paywalls",
+    "react",
+    "renderer",
+    "subscriptions"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "MIT",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "libraries/paywalls"
+  },
+  "type": "module",
+  "files": [
+    "dist"
+  ],
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./dom": {
+      "import": {
+        "types": "./dist/dom.d.ts",
+        "default": "./dist/dom.mjs"
+      },
+      "require": {
+        "types": "./dist/dom.d.ts",
+        "default": "./dist/dom.cjs"
+      }
+    },
+    "./tree": {
+      "import": {
+        "types": "./dist/tree.d.ts",
+        "default": "./dist/tree.mjs"
+      },
+      "require": {
+        "types": "./dist/tree.d.ts",
+        "default": "./dist/tree.cjs"
+      }
+    },
+    "./panel": {
+      "import": {
+        "types": "./dist/panel.d.ts",
+        "default": "./dist/panel.mjs"
+      },
+      "require": {
+        "types": "./dist/panel.d.ts",
+        "default": "./dist/panel.cjs"
+      }
+    }
+  },
+  "scripts": {
+    "build": "rm -rf ./dist && tsx build.ts",
+    "typecheck": "tsgo --noEmit",
+    "test": "vitest run -c vitest.unit.mts",
+    "test:watch": "vitest -c vitest.unit.mts"
+  },
+  "dependencies": {
+    "react-reconciler": "^0.32.0"
+  },
+  "peerDependencies": {
+    "react": ">=18",
+    "react-dom": ">=18"
+  },
+  "devDependencies": {
+    "@types/react": "catalog:",
+    "@types/react-dom": "catalog:",
+    "@voidhash/tsconfig": "workspace:*",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "tsup": "^6.1.3",
+    "tsx": "^4.19.3",
+    "typescript": "5.6.3",
+    "vitest": "^3.0.9"
+  }
+}
diff --git a/libraries/paywalls/src/authoring/actions.ts b/libraries/paywalls/src/authoring/actions.ts
new file mode 100644
index 000000000..927d2a600
--- /dev/null
+++ b/libraries/paywalls/src/authoring/actions.ts
@@ -0,0 +1,119 @@
+/**
+ * The action schema builder passed to `defineComponent`. Declared actions
+ * surface in two places: the component manifest (contract §2, so the visual
+ * editor can bind to them) and the template's `actions` context, where each
+ * action is a typed callback that invokes the consumer-passed prop of the
+ * same name (e.g. action `onSelect` → component prop `onSelect`).
+ */
+import { brandActionCallback } from "../internal/action-brand";
+import type { ManifestActionPayloadKind } from "../schema/component-manifest";
+
+/** Describes one scalar field of an action payload. */
+export class ActionPayloadBuilder<T> {
+  declare readonly __value: T;
+  readonly kind: ManifestActionPayloadKind;
+
+  constructor(kind: ManifestActionPayloadKind) {
+    this.kind = kind;
+  }
+}
+
+/** The payload shape of an action: scalar fields only. */
+export type ActionPayloadShape = Record<string, ActionPayloadBuilder<unknown>>;
+
+/** A declared action, optionally carrying a payload shape. */
+export class ActionBuilder<S extends ActionPayloadShape | undefined> {
+  declare readonly __payload: S;
+  readonly payloadShape: ActionPayloadShape | undefined;
+
+  constructor(payloadShape: ActionPayloadShape | undefined) {
+    this.payloadShape = payloadShape;
+  }
+}
+
+/** Any action builder, used as the constraint for action maps. */
+export type AnyActionBuilder = ActionBuilder<ActionPayloadShape | undefined>;
+
+/** A record of action builders, as returned by an `actions` callback. */
+export type ActionMap = Record<string, AnyActionBuilder>;
+
+/** The `a` builder factory handed to a `defineComponent({ actions })` callback. */
+export interface ActionFactory {
+  /** Declares an action without a payload. */
+  action(): ActionBuilder<undefined>;
+  /** Declares an action carrying a typed scalar payload. */
+  action<S extends ActionPayloadShape>(payload: S): ActionBuilder<S>;
+  string(): ActionPayloadBuilder<string>;
+  number(): ActionPayloadBuilder<number>;
+  boolean(): ActionPayloadBuilder<boolean>;
+}
+
+function buildAction(): ActionBuilder<undefined>;
+function buildAction<S extends ActionPayloadShape>(
+  payload: S,
+): ActionBuilder<S>;
+function buildAction<S extends ActionPayloadShape>(
+  payload?: S,
+): ActionBuilder<S | undefined> {
+  return new ActionBuilder<S | undefined>(payload);
+}
+
+export const actionFactory: ActionFactory = {
+  action: buildAction,
+  string: () => new ActionPayloadBuilder<string>("string"),
+  number: () => new ActionPayloadBuilder<number>("number"),
+  boolean: () => new ActionPayloadBuilder<boolean>("boolean"),
+};
+
+/** The payload object type of an action payload shape. */
+export type InferActionPayload<S extends ActionPayloadShape> = {
+  [K in keyof S]: S[K] extends ActionPayloadBuilder<infer T> ? T : never;
+};
+
+/**
+ * The typed callbacks a component template receives: one per declared action,
+ * each forwarding to the consumer-passed prop of the same name.
+ */
+export type InferActions<A extends ActionMap> = {
+  [K in keyof A]: A[K] extends ActionBuilder<infer S>
+    ? S extends ActionPayloadShape
+      ? (payload: InferActionPayload<S>) => void
+      : () => void
+    : never;
+};
+
+/**
+ * The optional handler props a *consumer* of the component may pass, one per
+ * declared action (same name, e.g. `onSelect`).
+ */
+export type ActionHandlerProps<A extends ActionMap> = {
+  [K in keyof A]?: A[K] extends ActionBuilder<infer S>
+    ? S extends ActionPayloadShape
+      ? (payload: InferActionPayload<S>) => void
+      : () => void
+    : never;
+};
+
+/**
+ * Builds the template-facing action callbacks. Each callback reads the
+ * *latest* consumer handlers through `getHandlers` (so identities stay stable
+ * across renders) and is branded with its action name so `<Pressable
+ * onPress={actions.onSelect}>` can record the action in preview trees.
+ */
+export const buildActionCallbacks = <A extends ActionMap>(
+  actionMap: A,
+  getHandlers: () => Record<string, unknown>,
+): InferActions<A> => {
+  const callbacks: Record<string, (payload?: unknown) => void> = {};
+  for (const name of Object.keys(actionMap)) {
+    callbacks[name] = brandActionCallback((payload?: unknown) => {
+      const handler = getHandlers()[name];
+      if (typeof handler === "function") {
+        handler(payload);
+      }
+    }, name);
+  }
+  // Safe: one callback per `A` key, matching the `InferActions<A>` signatures
+  // (payload is forwarded verbatim).
+  return callbacks as InferActions<A>;
+};
diff --git a/libraries/paywalls/src/authoring/create-paywall.ts b/libraries/paywalls/src/authoring/create-paywall.ts
new file mode 100644
index 000000000..395bfd291
--- /dev/null
+++ b/libraries/paywalls/src/authoring/create-paywall.ts
@@ -0,0 +1,81 @@
+import { createElement, type ReactNode } from "react";
+
+import type { PaywallVariables } from "../runtime/config";
+
+/**
+ * The body of a paywall: a static tree, or a component function (so it may use
+ * runtime hooks such as `usePaywallProducts`).
+ */
+export type PaywallBody = ReactNode | (() => ReactNode);
+
+export interface CreatePaywallInput {
+  /** Display name shown in Studio and the dashboard. */
+  readonly title: string;
+  /** Optional longer description for the dashboard. */
+  readonly description?: string;
+  /** Product slugs the paywall uses. Drives the SDK's injected product list. */
+  readonly products?: ReadonlyArray<string>;
+  /** Author variables (dashboard/experiment overridable). */
+  readonly variables?: PaywallVariables;
+  /** The paywall's content. */
+  readonly render: PaywallBody;
+}
+
+/** Metadata attached to every value produced by {@link createPaywall}. */
+export interface PaywallMeta {
+  readonly kind: "paywall";
+  readonly title: string;
+  readonly description?: string;
+  readonly products: ReadonlyArray<string>;
+  readonly variables: PaywallVariables;
+}
+
+/**
+ * The object returned by {@link createPaywall}. It is intentionally inert
+ * data — rendering is performed by `PaywallRenderer` / `mountPaywall` so the
+ * same definition can be previewed in Studio and bundled for a device.
+ */
+export interface PaywallDefinition extends CreatePaywallInput {
+  readonly __voidhash: PaywallMeta;
+}
+
+/**
+ * Declares a paywall. The result is exported as the module default and picked
+ * up by the CLI (Studio preview + deploy bundling).
+ *
+ * ```tsx
+ * export default createPaywall({
+ *   title: "Onboarding",
+ *   products: ["yearly", "monthly"],
+ *   variables: { accentColor: "#16a34a" },
+ *   render: () => <View>…</View>,
+ * });
+ * ```
+ */
+export const createPaywall = (
+  input: CreatePaywallInput,
+): PaywallDefinition => ({
+  ...input,
+  __voidhash: {
+    kind: "paywall",
+    title: input.title,
+    description: input.description,
+    products: input.products ?? [],
+    variables: input.variables ?? {},
+  },
+});
+
+/** Type guard for a {@link PaywallDefinition}. */
+export const isPaywallDefinition = (
+  value: unknown,
+): value is PaywallDefinition =>
+  typeof value === "object" &&
+  value !== null &&
+  (value as { __voidhash?: PaywallMeta }).__voidhash?.kind === "paywall";
+
+/**
+ * Normalizes a {@link PaywallBody} to a renderable element, wrapping a
+ * function body in a component element so it may use hooks.
+ */
+export const renderPaywallBody = (body: PaywallBody): ReactNode =>
+  typeof body === "function" ? createElement(body as () => ReactNode) : body;
diff --git a/libraries/paywalls/src/authoring/define-component.tsx b/libraries/paywalls/src/authoring/define-component.tsx
new file mode 100644
index 000000000..395b7e91f
--- /dev/null
+++ b/libraries/paywalls/src/authoring/define-component.tsx
@@ -0,0 +1,186 @@
+import { type ReactNode, useMemo, useRef } from "react";
+
+import { SlotProvider } from "../primitives/slot";
+import type { PaywallProduct, PaywallVariables } from "../runtime/config";
+import {
+  type ActionFactory,
+  type ActionHandlerProps,
+  type ActionMap,
+  actionFactory,
+  buildActionCallbacks,
+  type InferActions,
+} from "./actions";
+import {
+  applyPropDefaults,
+  type InferExternalProps,
+  type InferProps,
+  type PropFactory,
+  type PropMap,
+  propFactory,
+} from "./props";
+
+/** Fixtures one preview state renders against (contract §2 `previewStates`). */
+export interface ComponentPreviewState<M extends PropMap> {
+  /** Prop values for this state. Unset props fall back to their defaults. */
+  readonly props?: Partial<InferExternalProps<M>>;
+  /** Injected runtime data the preview renders with. */
+  readonly data?: {
+    readonly products?: ReadonlyArray<PaywallProduct>;
+    readonly variables?: PaywallVariables;
+  };
+}
+
+/** The context object a component template receives. */
+export interface ComponentRenderContext<
+  M extends PropMap,
+  A extends ActionMap,
+> {
+  readonly props: InferProps<M>;
+  readonly actions: InferActions<A>;
+}
+
+/**
+ * The props a consumer of the component passes: declared props (optional when
+ * `.optional()`/`.default()`), one optional handler per declared action, and
+ * children (surfaced at the template's `<Slot />`).
+ */
+export type InferComponentProps<
+  M extends PropMap,
+  A extends ActionMap,
+> = InferExternalProps<M> & ActionHandlerProps<A> & { children?: ReactNode };
+
+/** The renderable React component produced by {@link defineComponent}. */
+export type PaywallComponent<M extends PropMap, A extends ActionMap> = (
+  props: InferComponentProps<M, A>,
+) => ReactNode;
+
+/** Identity metadata attached to every component definition. */
+export interface PaywallComponentMeta {
+  readonly kind: "component";
+  readonly id: string;
+  readonly title?: string;
+  readonly description?: string;
+}
+
+export interface DefineComponentInput<M extends PropMap, A extends ActionMap> {
+  /** Stable component slug (`^[a-z0-9][a-z0-9-]{0,63}$`), e.g. "product-option". */
+  readonly id: string;
+  /** Display name shown in the editor. */
+  readonly title?: string;
+  readonly description?: string;
+  /** Declares the component's editable props using the `p` builder factory. */
+  readonly props?: (p: PropFactory) => M;
+  /** Declares the component's actions using the `a` builder factory. */
+  readonly actions?: (a: ActionFactory) => A;
+  /** Named preview states the CLI renders to §3 node trees at build time. */
+  readonly previews?: Readonly<Record<string, ComponentPreviewState<M>>>;
+  /**
+   * Custom editor panel (data-only `@voidhash/paywalls/panel` elements).
+   * Accepted but inert in Phase 1.
+   */
+  readonly panel?: ReactNode;
+  /** The component template. Receives fully-typed props and action callbacks. */
+  readonly render: (ctx: ComponentRenderContext<M, A>) => ReactNode;
+}
+
+/**
+ * A reusable paywall component definition: the renderable React component plus
+ * everything the CLI needs to emit the §2 manifest and §3 preview trees.
+ */
+export interface ComponentDefinition<M extends PropMap, A extends ActionMap> {
+  readonly id: string;
+  readonly title?: string;
+  readonly description?: string;
+  /** The resolved prop builders, keyed by name. */
+  readonly props: M;
+  /** The resolved action builders, keyed by name. */
+  readonly actions: A;
+  readonly previews: Readonly<Record<string, ComponentPreviewState<M>>>;
+  readonly panel?: ReactNode;
+  /** The original template function (used for declarative slot detection). */
+  readonly render: (ctx: ComponentRenderContext<M, A>) => ReactNode;
+  /** The renderable React component. */
+  readonly component: PaywallComponent<M, A>;
+  readonly __voidhash: PaywallComponentMeta;
+}
+
+/**
+ * Defines a reusable, code-driven paywall component.
+ *
+ * ```tsx
+ * export const definition = defineComponent({
+ *   id: "product-option",
+ *   props: (p) => ({
+ *     product: p.ref("product"),
+ *     accentColor: p.string().editor("color").default("#16a34a"),
+ *   }),
+ *   actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
+ *   render: ({ props, actions }) => (
+ *     <Pressable onPress={() => actions.onSelect({ productId: props.product.id })}>
+ *       <Text>{props.product.displayName}</Text>
+ *       <Slot />
+ *     </Pressable>
+ *   ),
+ * });
+ * export const ProductOption = definition.component;
+ * ```
+ */
+export const defineComponent = <
+  M extends PropMap = Record<never, never>,
+  A extends ActionMap = Record<never, never>,
+>(
+  input: DefineComponentInput<M, A>,
+): ComponentDefinition<M, A> => {
+  // Safe: when `props`/`actions` are omitted the maps are empty, which is
+  // exactly what the `Record<never, never>` defaults describe.
+  const propMap = (input.props?.(propFactory) ?? {}) as M;
+  const actionMap = (input.actions?.(actionFactory) ?? {}) as A;
+  const render = input.render;
+
+  const Component = (incoming: InferComponentProps<M, A>): ReactNode => {
+    const { children, ...rest } = incoming;
+    const handlersRef = useRef<Record<string, unknown>>(rest);
+    // Keep the latest handlers readable from the stable action callbacks.
+    handlersRef.current = rest;
+    const actions = useMemo(
+      () => buildActionCallbacks(actionMap, () => handlersRef.current),
+      [],
+    );
+    const props = applyPropDefaults(propMap, rest);
+    return (
+      <SlotProvider value={children ?? null}>
+        {render({ actions, props })}
+      </SlotProvider>
+    );
+  };
+  Component.displayName = input.title ?? input.id;
+
+  return {
+    __voidhash: {
+      kind: "component",
+      id: input.id,
+      title: input.title,
+      description: input.description,
+    },
+    actions: actionMap,
+    component: Component,
+    description: input.description,
+    id: input.id,
+    panel: input.panel,
+    previews: input.previews ?? {},
+    props: propMap,
+    render,
+    title: input.title,
+  };
+};
+
+/** Type guard for a {@link ComponentDefinition}. */
+export const isComponentDefinition = (
+  value: unknown,
+): value is ComponentDefinition<PropMap, ActionMap> =>
+  typeof value === "object" &&
+  value !== null &&
+  (value as { __voidhash?: PaywallComponentMeta }).__voidhash?.kind ===
+    "component" &&
+  typeof (value as { render?: unknown }).render === "function" &&
+  typeof (value as { component?: unknown }).component === "function";
diff --git a/libraries/paywalls/src/authoring/manifest.ts b/libraries/paywalls/src/authoring/manifest.ts
new file mode 100644
index 000000000..0e4056153
--- /dev/null
+++ b/libraries/paywalls/src/authoring/manifest.ts
@@ -0,0 +1,172 @@
+import type {
+  ComponentManifest,
+  ManifestAction,
+  ManifestArrayItem,
+  ManifestProp,
+  ManifestPropKind,
+} from "../schema/component-manifest";
+import { COMPONENT_MANIFEST_VERSION } from "../schema/component-manifest";
+import type { ActionMap } from "./actions";
+import type { ComponentDefinition } from "./define-component";
+import type { PropMap, PropSchema } from "./props";
+
+const isJsonScalar = (value: unknown): value is string | number | boolean =>
+  typeof value === "string" ||
+  typeof value === "number" ||
+  typeof value === "boolean";
+
+/** Defaults are emitted only when they survive JSON serialization losslessly. */
+const serializableDefault = (value: unknown): unknown => {
+  if (isJsonScalar(value)) {
+    return value;
+  }
+  if (Array.isArray(value) && value.every(isJsonScalar)) {
+    return value;
+  }
+  return;
+};
+
+const isEmptySelect = (schema: PropSchema | undefined): boolean =>
+  schema?.kind === "select" &&
+  (schema.options === undefined || schema.options.length === 0);
+
+/**
+ * Rejects `p.select([])` (contract §2: select options must be non-empty) with
+ * an error naming the offending component and prop, covering both top-level
+ * select props and `p.array(p.select([]))` items.
+ */
+const assertSelectHasOptions = (
+  componentId: string,
+  propName: string,
+  schema: PropSchema,
+): void => {
+  if (isEmptySelect(schema) || (schema.kind === "array" && isEmptySelect(schema.item))) {
+    throw new Error(
+      `Component "${componentId}": prop "${propName}" declares p.select([]) ` +
+        "with no options — select props need at least one option.",
+    );
+  }
+};
+
+const toManifestItem = (item: PropSchema): ManifestArrayItem => ({
+  kind: item.kind as Exclude<ManifestPropKind, "array">,
+  ...(item.options ? { options: item.options } : {}),
+  ...(item.refType ? { refType: item.refType } : {}),
+  ...(item.editor ? { editor: item.editor } : {}),
+});
+
+const toManifestProp = (schema: PropSchema): ManifestProp => {
+  const defaultValue = schema.hasDefault
+    ? serializableDefault(schema.defaultValue)
+    : undefined;
+  const entry = {
+    kind: schema.kind,
+    ...(schema.kind === "select" && schema.options
+      ? { options: schema.options }
+      : {}),
+    ...(schema.kind === "ref" && schema.refType
+      ? { refType: schema.refType }
+      : {}),
+    ...(schema.kind === "array" && schema.item
+      ? { item: toManifestItem(schema.item) }
+      : {}),
+    ...(schema.label !== undefined ? { label: schema.label } : {}),
+    ...(defaultValue !== undefined ? { default: defaultValue } : {}),
+    ...(schema.editor !== undefined ? { editor: schema.editor } : {}),
+    // A prop with a default is omittable for consumers, so the manifest
+    // reports it as optional even without an explicit `.optional()`.
+    optional: schema.optional || schema.hasDefault,
+  };
+  // Safe: `kind` discriminates the union but TS cannot narrow a value built
+  // with conditional spreads; the per-kind fields above match the schema.
+  return entry as ManifestProp;
+};
+
+/**
+ * Heuristic slot detection: the compiled template source references the `Slot`
+ * identifier (as `jsx(Slot, …)`, `(0, paywalls.Slot)(…)`, …). False negatives
+ * are possible if the import is renamed (`Slot as Foo`); renaming `Slot` is
+ * therefore unsupported in component templates.
+ */
+const detectSlotUsage = (render: (ctx: never) => unknown): boolean =>
+  /\bSlot\b/.test(String(render));
+
+/**
+ * Heuristic product-hook detection, mirroring {@link detectSlotUsage}: the
+ * compiled template source references one of the runtime hooks that read
+ * injected products. `usePaywallConfig` is included loosely — it returns the
+ * full config (products included), so a false positive merely over-injects
+ * products, which is harmless while `"products"` is the only legal hostData
+ * value. Same limitation as slot detection: hooks called inside local helper
+ * components outside the template function, or renamed imports, are not
+ * detected.
+ */
+const detectProductHookUsage = (render: (ctx: never) => unknown): boolean =>
+  /\b(usePaywallProducts|useSelectedProduct|usePaywallConfig)\b/.test(
+    String(render),
+  );
+
+/**
+ * Extracts the §2 component manifest from a {@link ComponentDefinition}. Runs
+ * in the CLI's local node process at build time — never on the server.
+ *
+ * Heuristics (documented behaviour):
+ * - `slot` — true when the template source references the `Slot` identifier.
+ * - `hostData` — `["products"]` when any preview state declares product data,
+ *   any prop is `p.ref("product")`, or the template source references a
+ *   product-reading runtime hook (`usePaywallProducts`, `useSelectedProduct`,
+ *   `usePaywallConfig`); otherwise `[]`. The hook check shares slot
+ *   detection's source-regex limitation: renamed imports or hooks called only
+ *   in helper components defined outside the template are not detected.
+ * - `previewStates` — the declared preview names, or `["default"]` when the
+ *   definition declares none (the CLI renders an implicit fixture-less state).
+ */
+export const extractComponentManifest = <
+  M extends PropMap,
+  A extends ActionMap,
+>(
+  definition: ComponentDefinition<M, A>,
+): ComponentManifest => {
+  const props: Record<string, ManifestProp> = {};
+  for (const [name, builder] of Object.entries(definition.props)) {
+    assertSelectHasOptions(definition.id, name, builder.schema);
+    props[name] = toManifestProp(builder.schema);
+  }
+
+  const actions: Record<string, ManifestAction> = {};
+  for (const [name, builder] of Object.entries(definition.actions)) {
+    const payload: Record<string, { kind: "string" | "number" | "boolean" }> =
+      {};
+    for (const [field, fieldBuilder] of Object.entries(
+      builder.payloadShape ?? {},
+    )) {
+      payload[field] = { kind: fieldBuilder.kind };
+    }
+    actions[name] = { payload };
+  }
+
+  const previewNames = Object.keys(definition.previews);
+  const usesProducts =
+    Object.values(definition.props).some(
+      (builder) =>
+        builder.schema.kind === "ref" && builder.schema.refType === "product",
+    ) ||
+    Object.values(definition.previews).some(
+      (preview) => preview.data?.products !== undefined,
+    ) ||
+    detectProductHookUsage(definition.render);
+
+  return {
+    manifestVersion: COMPONENT_MANIFEST_VERSION,
+    id: definition.id,
+    ...(definition.title !== undefined ? { title: definition.title } : {}),
+    ...(definition.description !== undefined
+      ? { description: definition.description }
+      : {}),
+    props,
+    actions,
+    slot: detectSlotUsage(definition.render),
+    previewStates: previewNames.length > 0 ? previewNames : ["default"],
+    hostData: usesProducts ? ["products"] : [],
+  };
+};
diff --git a/libraries/paywalls/src/authoring/props.ts b/libraries/paywalls/src/authoring/props.ts
new file mode 100644
index 000000000..2a79a85a7
--- /dev/null
+++ b/libraries/paywalls/src/authoring/props.ts
@@ -0,0 +1,254 @@
+/**
+ * The prop schema builder passed to `defineComponent`. It captures both the
+ * *type* of each editable prop (for end-to-end type-safety in the component
+ * template) and its *editor metadata* (label, default, editor hint, options)
+ * which the component manifest (contract §2) and the visual editor consume.
+ */
+import type { ReactNode } from "react";
+import type { PaywallProduct } from "../runtime/config";
+import type {
+  ManifestPropEditor,
+  ManifestPropKind,
+  ManifestRefType,
+} from "../schema/component-manifest";
+
+/** The kind of a prop, mirroring the §2 manifest vocabulary. */
+export type PropKind = ManifestPropKind;
+
+/** Serializable description of a single editable prop. */
+export interface PropSchema {
+  readonly kind: PropKind;
+  readonly label?: string;
+  readonly defaultValue?: unknown;
+  readonly hasDefault: boolean;
+  readonly editor?: ManifestPropEditor;
+  readonly optional: boolean;
+  readonly options?: ReadonlyArray<string>;
+  readonly refType?: ManifestRefType;
+  readonly item?: PropSchema;
+}
+
+/**
+ * Immutable, chainable builder for one prop:
+ * `p.string().label("Title").default("Untitled")`.
+ *
+ * Type parameters (all phantom, never read at runtime):
+ * - `T` — the prop's runtime value type, threaded through {@link InferProps}.
+ * - `Opt` — whether `.optional()` was applied.
+ * - `Def` — whether `.default()` was applied.
+ * - `K` — the prop kind, used to forbid nested arrays at the type level.
+ */
+export class PropBuilder<
+  T,
+  Opt extends boolean = false,
+  Def extends boolean = false,
+  K extends PropKind = PropKind,
+> {
+  declare readonly __value: T;
+  declare readonly __optional: Opt;
+  declare readonly __hasDefault: Def;
+  readonly schema: PropSchema & { readonly kind: K };
+
+  constructor(schema: PropSchema & { readonly kind: K }) {
+    this.schema = schema;
+  }
+
+  /** Sets the human-readable label shown in the editor. */
+  label(label: string): PropBuilder<T, Opt, Def, K> {
+    return new PropBuilder({ ...this.schema, label });
+  }
+
+  /**
+   * Sets the default value applied when the consumer omits this prop. A prop
+   * with a default is optional for consumers but always present in the
+   * template.
+   */
+  default(value: T): PropBuilder<T, Opt, true, K> {
+    return new PropBuilder({
+      ...this.schema,
+      defaultValue: value,
+      hasDefault: true,
+    });
+  }
+
+  /**
+   * Attaches an editor UI hint (`"color"` renders a colour picker). Only
+   * string props accept an editor hint (contract §2) — the `this` constraint
+   * makes the method uncallable on any other prop kind.
+   */
+  editor(
+    this: PropBuilder<T, Opt, Def, "string">,
+    editor: ManifestPropEditor,
+  ): PropBuilder<T, Opt, Def, "string"> {
+    return new PropBuilder({ ...this.schema, editor });
+  }
+
+  /** Marks the prop as omittable; the template receives `T | undefined`. */
+  optional(): PropBuilder<T, true, Def, K> {
+    return new PropBuilder({ ...this.schema, optional: true });
+  }
+}
+
+/** Any prop builder, used as the constraint for prop maps. */
+export type AnyPropBuilder = PropBuilder<unknown, boolean, boolean, PropKind>;
+
+/** A record of prop builders, as returned by a `props` callback. */
+export type PropMap = Record<string, AnyPropBuilder>;
+
+const base = (kind: PropKind): PropSchema & { kind: PropKind } => ({
+  kind,
+  hasDefault: false,
+  optional: false,
+});
+
+/** The `p` builder factory handed to a `defineComponent({ props })` callback. */
+export interface PropFactory {
+  string(): PropBuilder<string, false, false, "string">;
+  number(): PropBuilder<number, false, false, "number">;
+  boolean(): PropBuilder<boolean, false, false, "boolean">;
+  /** A constrained string value chosen from `options`. */
+  select<const O extends ReadonlyArray<string>>(
+    options: O,
+  ): PropBuilder<O[number], false, false, "select">;
+  /** An image URL/asset reference. */
+  image(): PropBuilder<string, false, false, "image">;
+  /** A reference to a runtime entity. The template receives the entity value. */
+  ref(refType: "product"): PropBuilder<PaywallProduct, false, false, "ref">;
+  /** A nested element the editor can fill. The template receives a ReactNode. */
+  component(): PropBuilder<ReactNode, false, false, "component">;
+  /** A homogeneous list. The item must be a non-array kind. */
+  array<
+    B extends PropBuilder<
+      unknown,
+      boolean,
+      boolean,
+      Exclude<PropKind, "array">
+    >,
+  >(item: B): PropBuilder<Array<B["__value"]>, false, false, "array">;
+}
+
+export const propFactory: PropFactory = {
+  string: () =>
+    new PropBuilder<string, false, false, "string">({
+      ...base("string"),
+      kind: "string",
+    }),
+  number: () =>
+    new PropBuilder<number, false, false, "number">({
+      ...base("number"),
+      kind: "number",
+    }),
+  boolean: () =>
+    new PropBuilder<boolean, false, false, "boolean">({
+      ...base("boolean"),
+      kind: "boolean",
+    }),
+  select: <const O extends ReadonlyArray<string>>(options: O) =>
+    new PropBuilder<O[number], false, false, "select">({
+      ...base("select"),
+      kind: "select",
+      options: [...options],
+    }),
+  image: () =>
+    new PropBuilder<string, false, false, "image">({
+      ...base("image"),
+      kind: "image",
+    }),
+  ref: (refType) =>
+    new PropBuilder<PaywallProduct, false, false, "ref">({
+      ...base("ref"),
+      kind: "ref",
+      refType,
+    }),
+  component: () =>
+    new PropBuilder<ReactNode, false, false, "component">({
+      ...base("component"),
+      kind: "component",
+    }),
+  array: <
+    B extends PropBuilder<
+      unknown,
+      boolean,
+      boolean,
+      Exclude<PropKind, "array">
+    >,
+  >(
+    item: B,
+  ) => {
+    // Type-level enforced; runtime guard covers untyped (plain JS) authors.
+    if (String(item.schema.kind) === "array") {
+      throw new Error("array() items must be a non-array prop kind.");
+    }
+    return new PropBuilder<Array<B["__value"]>, false, false, "array">({
+      ...base("array"),
+      kind: "array",
+      item: item.schema,
+    });
+  },
+};
+
+/** The runtime value type of a prop builder. */
+export type PropValueOf<B> = B extends PropBuilder<
+  infer T,
+  boolean,
+  boolean,
+  PropKind
+>
+  ? T
+  : never;
+
+/**
+ * The props object a component template receives: defaults are always filled
+ * in, `.optional()` props may be `undefined`.
+ */
+export type InferProps<M extends PropMap> = {
+  [K in keyof M]: M[K] extends PropBuilder<infer T, infer O, infer D, PropKind>
+    ? D extends true
+      ? T
+      : O extends true
+        ? T | undefined
+        : T
+    : never;
+};
+
+type OptionalPropKeys<M extends PropMap> = {
+  [K in keyof M]: M[K] extends PropBuilder<unknown, infer O, infer D, PropKind>
+    ? O extends true
+      ? K
+      : D extends true
+        ? K
+        : never
+    : never;
+}[keyof M];
+
+/**
+ * The props a *consumer* of the component passes: `.optional()` and
+ * `.default()` props may be omitted, everything else is required.
+ */
+export type InferExternalProps<M extends PropMap> = {
+  [K in Exclude<keyof M, OptionalPropKeys<M>>]: PropValueOf<M[K]>;
+} & {
+  [K in OptionalPropKeys<M>]?: PropValueOf<M[K]>;
+};
+
+/**
+ * Applies declared defaults to incoming consumer props, returning the
+ * fully-populated props object the template receives.
+ */
+export const applyPropDefaults = <M extends PropMap>(
+  propMap: M,
+  incoming: Record<string, unknown>,
+): InferProps<M> => {
+  const result: Record<string, unknown> = {};
+  for (const [key, builder] of Object.entries(propMap)) {
+    const provided = incoming[key];
+    if (provided !== undefined) {
+      result[key] = provided;
+    } else if (builder.schema.hasDefault) {
+      result[key] = builder.schema.defaultValue;
+    }
+  }
+  // Safe: the loop fills exactly the keys of `M` with provided-or-default
+  // values, which is what `InferProps<M>` describes.
+  return result as InferProps<M>;
+};
diff --git a/libraries/paywalls/src/dom.tsx b/libraries/paywalls/src/dom.tsx
new file mode 100644
index 000000000..0bf387a67
--- /dev/null
+++ b/libraries/paywalls/src/dom.tsx
@@ -0,0 +1,77 @@
+/**
+ * `@voidhash/paywalls/dom` — the web mount entry point.
+ *
+ * Where the main entry exposes the platform-agnostic `PaywallRenderer`
+ * component, this module owns the one web-specific concern: committing a
+ * paywall to a real DOM container via `react-dom`. The deployed WebView bundle
+ * calls {@link mountPaywall}.
+ */
+import { StrictMode } from "react";
+import { createRoot, type Root } from "react-dom/client";
+
+import type { PaywallDefinition } from "./authoring/create-paywall";
+import { PaywallErrorBoundary } from "./renderer/error-boundary";
+import { PaywallRenderer } from "./renderer/paywall-renderer";
+import type { PaywallBridge } from "./runtime/bridge";
+import type { PaywallRuntimeConfig } from "./runtime/config";
+
+export interface MountPaywallOptions {
+  /**
+   * Runtime config (products/variables). When omitted the runtime reads the
+   * host-injected `window.__VOIDHASH_PAYWALL__` (or starts empty) and applies
+   * `configure` bridge messages as they arrive — contract §7.1.
+   */
+  config?: PaywallRuntimeConfig;
+  /** Override the bridge (mainly for tests/preview). */
+  bridge?: PaywallBridge;
+  /** Wrap in `StrictMode`. Defaults to `false` for production parity. */
+  strict?: boolean;
+}
+
+/** A handle to an active paywall mount. */
+export interface PaywallMount {
+  /** Unmounts the paywall and releases the React root. */
+  unmount: () => void;
+}
+
+/**
+ * Mounts a paywall into a DOM container and returns a handle. This is the
+ * entry point the generated deploy bundle invokes:
+ *
+ * ```ts
+ * import paywall from "./paywall";
+ * import { mountPaywall } from "@voidhash/paywalls/dom";
+ * mountPaywall(paywall, document.getElementById("root")!);
+ * ```
+ */
+export const mountPaywall = (
+  paywall: PaywallDefinition,
+  container: Element | DocumentFragment,
+  options: MountPaywallOptions = {},
+): PaywallMount => {
+  const root: Root = createRoot(container);
+
+  const tree = (
+    <PaywallErrorBoundary post={options.bridge?.post}>
+      <PaywallRenderer
+        bridge={options.bridge}
+        config={options.config}
+        paywall={paywall}
+      />
+    </PaywallErrorBoundary>
+  );
+
+  root.render(options.strict ? <StrictMode>{tree}</StrictMode> : tree);
+
+  return { unmount: () => root.unmount() };
+};
+
+export { domHostComponents } from "./renderer/dom-host";
+export {
+  PaywallErrorBoundary,
+  type PaywallErrorBoundaryProps,
+} from "./renderer/error-boundary";
+export {
+  PaywallRenderer,
+  type PaywallRendererProps,
+} from "./renderer/paywall-renderer";
diff --git a/libraries/paywalls/src/index.ts b/libraries/paywalls/src/index.ts
new file mode 100644
index 000000000..7248d5657
--- /dev/null
+++ b/libraries/paywalls/src/index.ts
@@ -0,0 +1,192 @@
+/**
+ * `@voidhash/paywalls` — the authoring API and runtime for code-driven
+ * paywalls.
+ *
+ * Paywalls are written with a React-Native-like primitive set (`View`, `Text`,
+ * `Pressable`, …) and rendered by a pluggable renderer. The default renderer
+ * targets the DOM (Studio and the deployed WebView bundle); the Node-only
+ * `@voidhash/paywalls/tree` entry renders the same components to the §3
+ * preview node tree the visual editor consumes.
+ */
+
+export {
+  ActionBuilder,
+  type ActionFactory,
+  type ActionHandlerProps,
+  type ActionMap,
+  ActionPayloadBuilder,
+  type ActionPayloadShape,
+  type AnyActionBuilder,
+  type InferActionPayload,
+  type InferActions,
+} from "./authoring/actions";
+// ── Authoring API ────────────────────────────────────────────────────────────
+export {
+  type CreatePaywallInput,
+  createPaywall,
+  isPaywallDefinition,
+  type PaywallBody,
+  type PaywallDefinition,
+  type PaywallMeta,
+  renderPaywallBody,
+} from "./authoring/create-paywall";
+export {
+  type ComponentDefinition,
+  type ComponentPreviewState,
+  type ComponentRenderContext,
+  type DefineComponentInput,
+  defineComponent,
+  type InferComponentProps,
+  isComponentDefinition,
+  type PaywallComponent,
+  type PaywallComponentMeta,
+} from "./authoring/define-component";
+export { extractComponentManifest } from "./authoring/manifest";
+export {
+  type AnyPropBuilder,
+  type InferExternalProps,
+  type InferProps,
+  PropBuilder,
+  type PropFactory,
+  type PropKind,
+  type PropMap,
+  type PropSchema,
+  type PropValueOf,
+} from "./authoring/props";
+// ── Primitives ───────────────────────────────────────────────────────────────
+export {
+  Image,
+  Pressable,
+  ScrollView,
+  Text,
+  View,
+} from "./primitives/components";
+export {
+  RendererProvider,
+  type RendererProviderProps,
+  useHost,
+} from "./primitives/host-context";
+export { Slot, type SlotProps, SlotProvider } from "./primitives/slot";
+export type {
+  HostComponents,
+  ImageProps,
+  ImageSource,
+  PressableHostProps,
+  PressableProps,
+  PressableState,
+  ResizeMode,
+  ScrollViewProps,
+  SlotHostProps,
+  TextProps,
+  ViewProps,
+} from "./primitives/types";
+export { domHostComponents } from "./renderer/dom-host";
+// ── Renderer / runtime ───────────────────────────────────────────────────────
+export {
+  PaywallRenderer,
+  type PaywallRendererProps,
+} from "./renderer/paywall-renderer";
+export {
+  createDefaultBridge,
+  NATIVE_INBOUND_GLOBAL,
+  type PaywallBridge,
+  STUDIO_HOST_MESSAGE_SOURCE,
+  STUDIO_MESSAGE_SOURCE,
+  subscribeToInboundEnvelopes,
+} from "./runtime/bridge";
+export {
+  EMPTY_RUNTIME_CONFIG,
+  normalizeRuntimeConfig,
+  type PaywallPlatform,
+  type PaywallProduct,
+  type PaywallProductPeriod,
+  type PaywallRuntimeConfig,
+  type PaywallVariables,
+  RUNTIME_CONFIG_GLOBAL,
+  readInjectedConfig,
+} from "./runtime/config";
+export {
+  createCloseEnvelope,
+  createEventEnvelope,
+  createOpenExternalEnvelope,
+  createPurchaseEnvelope,
+  createReadyEnvelope,
+  createRestoreEnvelope,
+  PAYWALL_BRIDGE_VERSION,
+  type PaywallBridgeError,
+  type PaywallCloseEnvelope,
+  type PaywallConfigureEnvelope,
+  type PaywallEventEnvelope,
+  type PaywallInboundEnvelope,
+  type PaywallLogEnvelope,
+  type PaywallOpenExternalEnvelope,
+  type PaywallOutboundActionType,
+  type PaywallOutboundEnvelope,
+  type PaywallPurchaseEnvelope,
+  type PaywallReadyEnvelope,
+  type PaywallResponseEnvelope,
+  type PaywallRestoreEnvelope,
+  type PaywallStatusEnvelope,
+  type PaywallTransactionStatus,
+  parseInboundEnvelope,
+  serializeEnvelope,
+} from "./runtime/envelope";
+export {
+  type PaywallActions,
+  PaywallRuntimeProvider,
+  type PaywallRuntimeProviderProps,
+  type PaywallStatusSnapshot,
+  usePaywallActions,
+  usePaywallConfig,
+  usePaywallProducts,
+  usePaywallStatus,
+  usePaywallVariables,
+  useSelectedProduct,
+} from "./runtime/runtime";
+export {
+  COMPONENT_MANIFEST_VERSION,
+  type ComponentManifest,
+  type ManifestAction,
+  type ManifestActionPayloadKind,
+  type ManifestArrayItem,
+  type ManifestArrayProp,
+  type ManifestBooleanProp,
+  type ManifestComponentProp,
+  type ManifestHostData,
+  type ManifestImageProp,
+  type ManifestNumberProp,
+  type ManifestProp,
+  type ManifestPropEditor,
+  type ManifestPropKind,
+  type ManifestRefProp,
+  type ManifestRefType,
+  type ManifestSelectProp,
+  type ManifestStringProp,
+} from "./schema/component-manifest";
+export {
+  PAYWALL_TREE_VERSION,
+  type PaywallImageNode,
+  type PaywallNode,
+  type PaywallNodeResizeMode,
+  type PaywallNodeTree,
+  type PaywallPlaceholderNode,
+  type PaywallPressableNode,
+  type PaywallScrollNode,
+  type PaywallSlotNode,
+  type PaywallTextNode,
+  type PaywallViewNode,
+} from "./schema/node-tree";
+// ── Schema (shared wire types) ───────────────────────────────────────────────
+export {
+  PAYWALL_STYLE_KEYS,
+  type PaywallAlignItems,
+  type PaywallAlignSelf,
+  type PaywallDimension,
+  type PaywallFlexDirection,
+  type PaywallFontWeight,
+  type PaywallJustifyContent,
+  type PaywallStyle,
+  type StyleProp,
+} from "./schema/style";
+// ── Style ────────────────────────────────────────────────────────────────────
+export { flattenStyle, resolveStyle } from "./style/resolve";
diff --git a/libraries/paywalls/src/internal/action-brand.ts b/libraries/paywalls/src/internal/action-brand.ts
new file mode 100644
index 000000000..34c277e60
--- /dev/null
+++ b/libraries/paywalls/src/internal/action-brand.ts
@@ -0,0 +1,33 @@
+/**
+ * Internal: brands action callbacks produced by `defineComponent` with their
+ * declared action name, so a `<Pressable onPress={actions.onSelect}>` can be
+ * traced back to the action it fires when serializing preview trees.
+ *
+ * `Symbol.for` keeps the brand stable even if two copies of the package end up
+ * in one process (the symbol lives in the global registry).
+ */
+const ACTION_NAME_BRAND = Symbol.for("voidhash.paywalls.actionName");
+
+interface BrandedCallback {
+  [ACTION_NAME_BRAND]?: string;
+}
+
+/** Attaches the declared action name to an action callback. */
+export const brandActionCallback = <F extends (...args: never[]) => void>(
+  callback: F,
+  actionName: string,
+): F => {
+  (callback as BrandedCallback)[ACTION_NAME_BRAND] = actionName;
+  return callback;
+};
+
+/**
+ * Reads the declared action name off a callback, if it is a branded action
+ * callback passed directly (a wrapping arrow function loses the brand).
+ */
+export const getActionName = (callback: unknown): string | undefined => {
+  if (typeof callback !== "function") {
+    return;
+  }
+  return (callback as BrandedCallback)[ACTION_NAME_BRAND];
+};
diff --git a/libraries/paywalls/src/panel.ts b/libraries/paywalls/src/panel.ts
new file mode 100644
index 000000000..5e4438af6
--- /dev/null
+++ b/libraries/paywalls/src/panel.ts
@@ -0,0 +1,43 @@
+/**
+ * `@voidhash/paywalls/panel` — data-only editor panel primitives.
+ *
+ * Phase 1 stub: a `defineComponent({ panel: <Panel>…</Panel> })` declaration
+ * is accepted and carried on the definition, but no panel behaviour is emitted
+ * yet. The elements are inert (they render `null`) — a later phase compiles
+ * them to a JSON panel specification, so no author JS ever runs in the editor.
+ */
+import type { ReactNode } from "react";
+
+export interface PanelProps {
+  children?: ReactNode;
+}
+
+export interface PanelSectionProps {
+  title?: string;
+  children?: ReactNode;
+}
+
+export interface PanelFieldProps {
+  /** The declared prop this field edits. */
+  name: string;
+  label?: string;
+  children?: ReactNode;
+}
+
+const PanelRoot = (_props: PanelProps): ReactNode => null;
+PanelRoot.displayName = "Panel";
+
+const PanelSection = (_props: PanelSectionProps): ReactNode => null;
+PanelSection.displayName = "Panel.Section";
+
+const PanelField = (_props: PanelFieldProps): ReactNode => null;
+PanelField.displayName = "Panel.Field";
+
+/**
+ * Root of a component's custom editor panel. Compose with `Panel.Section` and
+ * `Panel.Field`; the structure is data-only and renders nothing at runtime.
+ */
+export const Panel = Object.assign(PanelRoot, {
+  Field: PanelField,
+  Section: PanelSection,
+});
diff --git a/libraries/paywalls/src/primitives/components.tsx b/libraries/paywalls/src/primitives/components.tsx
new file mode 100644
index 000000000..8b1390d3e
--- /dev/null
+++ b/libraries/paywalls/src/primitives/components.tsx
@@ -0,0 +1,53 @@
+import type { ReactNode } from "react";
+
+import { getActionName } from "../internal/action-brand";
+import { useHost } from "./host-context";
+import type {
+  ImageProps,
+  PressableProps,
+  ScrollViewProps,
+  TextProps,
+  ViewProps,
+} from "./types";
+
+/**
+ * The abstract paywall primitives. Each one resolves the active renderer and
+ * mounts the matching host component, so author code never references a
+ * platform directly.
+ */
+
+/** A generic flexbox container (column layout by default), like RN `View`. */
+export const View = (props: ViewProps): ReactNode => {
+  const HostView = useHost().View;
+  return <HostView {...props} />;
+};
+
+/** Displays text, like RN `Text`. */
+export const Text = (props: TextProps): ReactNode => {
+  const HostText = useHost().Text;
+  return <HostText {...props} />;
+};
+
+/**
+ * A tappable surface, like RN `Pressable`. Use `onPress` for actions. When
+ * `onPress` is a declared component action passed directly (e.g.
+ * `onPress={actions.onSelect}`), the action name is forwarded to the host so
+ * preview trees can record which action the pressable fires.
+ */
+export const Pressable = (props: PressableProps): ReactNode => {
+  const HostPressable = useHost().Pressable;
+  const actionName = getActionName(props.onPress);
+  return <HostPressable {...props} actionName={actionName} />;
+};
+
+/** A scrollable container, like RN `ScrollView`. */
+export const ScrollView = (props: ScrollViewProps): ReactNode => {
+  const HostScrollView = useHost().ScrollView;
+  return <HostScrollView {...props} />;
+};
+
+/** Displays an image from a URL or `{ uri }` source, like RN `Image`. */
+export const Image = (props: ImageProps): ReactNode => {
+  const HostImage = useHost().Image;
+  return <HostImage {...props} />;
+};
diff --git a/libraries/paywalls/src/primitives/host-context.tsx b/libraries/paywalls/src/primitives/host-context.tsx
new file mode 100644
index 000000000..29fca99dc
--- /dev/null
+++ b/libraries/paywalls/src/primitives/host-context.tsx
@@ -0,0 +1,34 @@
+import { createContext, type ReactNode, useContext } from "react";
+
+import { domHostComponents } from "../renderer/dom-host";
+import type { HostComponents } from "./types";
+
+/**
+ * The renderer registry. Primitives read their host implementation from here
+ * so the platform can be swapped by wrapping a subtree in
+ * {@link RendererProvider}.
+ *
+ * The default value is the DOM renderer: a paywall tree therefore renders on
+ * the web with no explicit provider, while other targets (the preview node
+ * tree, native views) are opt-in.
+ */
+const HostContext = createContext<HostComponents>(domHostComponents);
+
+/** The active renderer's host components. */
+export const useHost = (): HostComponents => useContext(HostContext);
+
+export interface RendererProviderProps {
+  host?: HostComponents;
+  children: ReactNode;
+}
+
+/**
+ * Overrides the active renderer for a subtree. Pass `host` to target a
+ * non-default platform; omit it to keep the DOM renderer.
+ */
+export const RendererProvider = ({
+  host = domHostComponents,
+  children,
+}: RendererProviderProps): ReactNode => (
+  <HostContext.Provider value={host}>{children}</HostContext.Provider>
+);
diff --git a/libraries/paywalls/src/primitives/slot.tsx b/libraries/paywalls/src/primitives/slot.tsx
new file mode 100644
index 000000000..5d55f7944
--- /dev/null
+++ b/libraries/paywalls/src/primitives/slot.tsx
@@ -0,0 +1,29 @@
+import { createContext, type ReactNode, useContext } from "react";
+
+import { useHost } from "./host-context";
+
+/**
+ * Carries the children passed to a `defineComponent` instance down to the
+ * `<Slot />` placeholder rendered inside that component's template.
+ */
+const SlotContext = createContext<ReactNode>(null);
+
+export const SlotProvider = SlotContext.Provider;
+
+export interface SlotProps {
+  /** Rendered when the component instance was given no children. */
+  fallback?: ReactNode;
+}
+
+/**
+ * Renders the children that were passed to the enclosing reusable component —
+ * the paywall equivalent of `props.children`. A component template uses
+ * `<Slot />` to mark where consumer-provided content should appear; the tree
+ * renderer serializes an empty slot as a `{ type: "slot" }` marker node so the
+ * visual editor knows where to mount its own children.
+ */
+export const Slot = ({ fallback = null }: SlotProps): ReactNode => {
+  const children = useContext(SlotContext);
+  const HostSlot = useHost().Slot;
+  return <HostSlot fallback={fallback}>{children}</HostSlot>;
+};
diff --git a/libraries/paywalls/src/primitives/types.ts b/libraries/paywalls/src/primitives/types.ts
new file mode 100644
index 000000000..bb9875623
--- /dev/null
+++ b/libraries/paywalls/src/primitives/types.ts
@@ -0,0 +1,102 @@
+import type { ReactNode } from "react";
+
+import type { StyleProp } from "../schema/style";
+
+/** Interaction state passed to a {@link PressableProps} render-prop child. */
+export interface PressableState {
+  readonly pressed: boolean;
+}
+
+/** A resolvable image source — a remote/asset URL or a `{ uri }` object. */
+export type ImageSource = string | { readonly uri: string };
+
+/** How an {@link ImageProps} image fills its frame. Mirrors RN `resizeMode`. */
+export type ResizeMode = "cover" | "contain" | "stretch" | "center";
+
+export interface ViewProps {
+  style?: StyleProp;
+  children?: ReactNode;
+  /** Stable identifier for testing / analytics targeting. */
+  testID?: string;
+  /** Accessibility label surfaced to screen readers. */
+  accessibilityLabel?: string;
+}
+
+export interface TextProps {
+  style?: StyleProp;
+  children?: ReactNode;
+  /** Truncate to N lines with an ellipsis. `0`/undefined means unlimited. */
+  numberOfLines?: number;
+  testID?: string;
+  accessibilityLabel?: string;
+}
+
+export interface PressableProps {
+  style?: StyleProp;
+  /** Static children, or a render-prop receiving the {@link PressableState}. */
+  children?: ReactNode | ((state: PressableState) => ReactNode);
+  /**
+   * Fired on tap/click. The primary action hook for a paywall button. The
+   * `never[]` rest signature accepts any callback — including declared
+   * component actions passed directly (`onPress={actions.onSelect}`), which is
+   * how preview trees learn the action a pressable fires. Note that a
+   * direct-passed payload action receives no payload from a raw press; the
+   * visual editor supplies payload bindings itself.
+   */
+  onPress?: (...args: never[]) => void;
+  disabled?: boolean;
+  testID?: string;
+  accessibilityLabel?: string;
+}
+
+export interface ScrollViewProps {
+  style?: StyleProp;
+  /** Style applied to the inner content wrapper (RN `contentContainerStyle`). */
+  contentContainerStyle?: StyleProp;
+  /** Scroll on the x-axis instead of the y-axis. */
+  horizontal?: boolean;
+  children?: ReactNode;
+  testID?: string;
+}
+
+export interface ImageProps {
+  style?: StyleProp;
+  source: ImageSource;
+  resizeMode?: ResizeMode;
+  accessibilityLabel?: string;
+  testID?: string;
+}
+
+/**
+ * Host-facing pressable props. `actionName` is threaded by the abstract
+ * `Pressable` when its `onPress` is a declared component action, so the tree
+ * renderer can record which action a pressable fires.
+ */
+export interface PressableHostProps extends PressableProps {
+  actionName?: string;
+}
+
+/**
+ * Host-facing slot props. `children` are the consumer-provided children of the
+ * enclosing component (or `null` when none were passed); `fallback` is the
+ * author-declared fallback content.
+ */
+export interface SlotHostProps {
+  children?: ReactNode;
+  fallback?: ReactNode;
+}
+
+/**
+ * The set of host components a renderer must provide. The abstract primitives
+ * exported from `@voidhash/paywalls` resolve their implementation from the
+ * active renderer via this contract, which is what lets the same paywall tree
+ * target the DOM, the preview node tree, and native views later.
+ */
+export interface HostComponents {
+  View: (props: ViewProps) => ReactNode;
+  Text: (props: TextProps) => ReactNode;
+  Pressable: (props: PressableHostProps) => ReactNode;
+  ScrollView: (props: ScrollViewProps) => ReactNode;
+  Image: (props: ImageProps) => ReactNode;
+  Slot: (props: SlotHostProps) => ReactNode;
+}
diff --git a/libraries/paywalls/src/renderer/dom-host.tsx b/libraries/paywalls/src/renderer/dom-host.tsx
new file mode 100644
index 000000000..a027e7602
--- /dev/null
+++ b/libraries/paywalls/src/renderer/dom-host.tsx
@@ -0,0 +1,227 @@
+import {
+  type CSSProperties,
+  type KeyboardEvent,
+  type ReactNode,
+  useState,
+} from "react";
+
+import type {
+  HostComponents,
+  ImageProps,
+  ImageSource,
+  PressableHostProps,
+  ResizeMode,
+  ScrollViewProps,
+  SlotHostProps,
+  TextProps,
+  ViewProps,
+} from "../primitives/types";
+import { resolveStyle } from "../style/resolve";
+
+/**
+ * Flexbox defaults that mirror React Native's `View` reset. Authoring code is
+ * written with RN layout expectations (column flow, no implicit shrink, border
+ * box), so the DOM renderer re-creates them rather than inheriting the
+ * browser's block-layout defaults.
+ */
+const VIEW_BASE: CSSProperties = {
+  alignItems: "stretch",
+  boxSizing: "border-box",
+  display: "flex",
+  flexBasis: "auto",
+  flexDirection: "column",
+  flexShrink: 0,
+  margin: 0,
+  minHeight: 0,
+  minWidth: 0,
+  padding: 0,
+  position: "relative",
+};
+
+const TEXT_BASE: CSSProperties = {
+  boxSizing: "border-box",
+  display: "block",
+  margin: 0,
+  padding: 0,
+  whiteSpace: "pre-wrap",
+  wordWrap: "break-word",
+};
+
+const RESIZE_MODE_TO_OBJECT_FIT: Record<
+  ResizeMode,
+  CSSProperties["objectFit"]
+> = {
+  center: "none",
+  contain: "contain",
+  cover: "cover",
+  stretch: "fill",
+};
+
+/** Resolves an {@link ImageSource} to its URL. */
+export const resolveImageSource = (source: ImageSource): string =>
+  typeof source === "string" ? source : source.uri;
+
+const lineClampStyle = (numberOfLines?: number): CSSProperties =>
+  numberOfLines && numberOfLines > 0
+    ? {
+        display: "-webkit-box",
+        overflow: "hidden",
+        WebkitBoxOrient: "vertical",
+        WebkitLineClamp: numberOfLines,
+      }
+    : {};
+
+const DomView = ({
+  style,
+  children,
+  testID,
+  accessibilityLabel,
+}: ViewProps): ReactNode => (
+  <div
+    aria-label={accessibilityLabel}
+    data-testid={testID}
+    style={{ ...VIEW_BASE, ...resolveStyle(style) }}
+  >
+    {children}
+  </div>
+);
+
+const DomText = ({
+  style,
+  children,
+  numberOfLines,
+  testID,
+  accessibilityLabel,
+}: TextProps): ReactNode => (
+  <div
+    aria-label={accessibilityLabel}
+    data-testid={testID}
+    style={{
+      ...TEXT_BASE,
+      ...lineClampStyle(numberOfLines),
+      ...resolveStyle(style),
+    }}
+  >
+    {children}
+  </div>
+);
+
+const DomPressable = ({
+  style,
+  children,
+  onPress,
+  disabled,
+  testID,
+  accessibilityLabel,
+}: PressableHostProps): ReactNode => {
+  const [pressed, setPressed] = useState(false);
+
+  const handleActivate = () => {
+    if (disabled) {
+      return;
+    }
+    onPress?.();
+  };
+
+  const handleKeyDown = (event: KeyboardEvent<HTMLDivElement>) => {
+    if (disabled) {
+      return;
+    }
+    if (event.key === "Enter" || event.key === " ") {
+      event.preventDefault();
+      handleActivate();
+    }
+  };
+
+  return (
+    <div
+      aria-disabled={disabled || undefined}
+      aria-label={accessibilityLabel}
+      data-pressed={pressed || undefined}
+      data-testid={testID}
+      onClick={handleActivate}
+      onKeyDown={handleKeyDown}
+      onPointerCancel={() => setPressed(false)}
+      onPointerDown={() => setPressed(true)}
+      onPointerLeave={() => setPressed(false)}
+      onPointerUp={() => setPressed(false)}
+      role="button"
+      style={{
+        ...VIEW_BASE,
+        cursor: disabled ? "default" : "pointer",
+        opacity: disabled ? 0.5 : 1,
+        touchAction: "manipulation",
+        userSelect: "none",
+        ...resolveStyle(style),
+      }}
+      tabIndex={disabled ? -1 : 0}
+    >
+      {typeof children === "function" ? children({ pressed }) : children}
+    </div>
+  );
+};
+
+const DomScrollView = ({
+  style,
+  contentContainerStyle,
+  horizontal,
+  children,
+  testID,
+}: ScrollViewProps): ReactNode => (
+  <div
+    data-testid={testID}
+    style={{
+      ...VIEW_BASE,
+      flexDirection: horizontal ? "row" : "column",
+      overflowX: horizontal ? "auto" : "hidden",
+      overflowY: horizontal ? "hidden" : "auto",
+      WebkitOverflowScrolling: "touch",
+      ...resolveStyle(style),
+    }}
+  >
+    <div
+      style={{
+        ...VIEW_BASE,
+        flexDirection: horizontal ? "row" : "column",
+        flexGrow: 1,
+        flexShrink: 0,
+        ...resolveStyle(contentContainerStyle),
+      }}
+    >
+      {children}
+    </div>
+  </div>
+);
+
+const DomImage = ({
+  style,
+  source,
+  resizeMode = "cover",
+  accessibilityLabel,
+  testID,
+}: ImageProps): ReactNode => (
+  <img
+    alt={accessibilityLabel ?? ""}
+    data-testid={testID}
+    src={resolveImageSource(source)}
+    style={{
+      boxSizing: "border-box",
+      display: "block",
+      objectFit: RESIZE_MODE_TO_OBJECT_FIT[resizeMode],
+      ...resolveStyle(style),
+    }}
+  />
+);
+
+const DomSlot = ({ children, fallback }: SlotHostProps): ReactNode =>
+  children ?? fallback ?? null;
+
+/** The DOM implementation of the {@link HostComponents} contract. */
+export const domHostComponents: HostComponents = {
+  Image: DomImage,
+  Pressable: DomPressable,
+  ScrollView: DomScrollView,
+  Slot: DomSlot,
+  Text: DomText,
+  View: DomView,
+};
diff --git a/libraries/paywalls/src/renderer/error-boundary.tsx b/libraries/paywalls/src/renderer/error-boundary.tsx
new file mode 100644
index 000000000..dd2b40d00
--- /dev/null
+++ b/libraries/paywalls/src/renderer/error-boundary.tsx
@@ -0,0 +1,49 @@
+import { Component, type ReactNode } from "react";
+
+import { postOutboundEnvelope } from "../runtime/bridge";
+import {
+  createEventEnvelope,
+  type PaywallOutboundEnvelope,
+} from "../runtime/envelope";
+
+export interface PaywallErrorBoundaryProps {
+  /** Posts an outbound envelope; defaults to the production bridge channel. */
+  post?: (envelope: PaywallOutboundEnvelope) => void;
+  children: ReactNode;
+}
+
+interface PaywallErrorBoundaryState {
+  failed: boolean;
+}
+
+/**
+ * Last-resort error boundary around a mounted paywall: a runtime crash is
+ * `console.error`-ed AND reported through the bridge as a `paywall_error`
+ * event envelope, then the tree renders null — so crashes are observable by
+ * the host instead of presenting as a blank WebView with no signal.
+ */
+export class PaywallErrorBoundary extends Component<
+  PaywallErrorBoundaryProps,
+  PaywallErrorBoundaryState
+> {
+  state: PaywallErrorBoundaryState = { failed: false };
+
+  static getDerivedStateFromError(): PaywallErrorBoundaryState {
+    return { failed: true };
+  }
+
+  componentDidCatch(error: Error): void {
+    // biome-ignore lint/suspicious/noConsole: deliberate crash signal — the WebView has no other visible failure channel.
+    console.error("[voidhash-paywall] paywall render crashed", error);
+    const post = this.props.post ?? postOutboundEnvelope;
+    post(
+      createEventEnvelope("paywall_error", {
+        message: error instanceof Error ? error.message : String(error),
+      }),
+    );
+  }
+
+  render(): ReactNode {
+    return this.state.failed ? null : this.props.children;
+  }
+}
diff --git a/libraries/paywalls/src/renderer/paywall-renderer.tsx b/libraries/paywalls/src/renderer/paywall-renderer.tsx
new file mode 100644
index 000000000..ad60c53b9
--- /dev/null
+++ b/libraries/paywalls/src/renderer/paywall-renderer.tsx
@@ -0,0 +1,47 @@
+import type { ReactNode } from "react";
+
+import {
+  type PaywallDefinition,
+  renderPaywallBody,
+} from "../authoring/create-paywall";
+import { RendererProvider } from "../primitives/host-context";
+import type { HostComponents } from "../primitives/types";
+import type { PaywallBridge } from "../runtime/bridge";
+import type { PaywallRuntimeConfig } from "../runtime/config";
+import { PaywallRuntimeProvider } from "../runtime/runtime";
+
+export interface PaywallRendererProps {
+  /** The paywall to render. */
+  paywall: PaywallDefinition;
+  /**
+   * Runtime products/variables. Defaults to the host-injected config (or an
+   * empty one), live-updated by `configure` bridge messages.
+   */
+  config?: PaywallRuntimeConfig;
+  /** Override the renderer's host components (e.g. the tree host map). */
+  host?: HostComponents;
+  /** Override the bridge (Studio/tests inject their own). */
+  bridge?: PaywallBridge;
+}
+
+/**
+ * Renders a {@link PaywallDefinition} into the current React tree. This is the
+ * embeddable entry point used by Studio; the deploy bundle uses `mountPaywall`
+ * (from `@voidhash/paywalls/dom`) which wraps this in a `createRoot`.
+ *
+ * It composes the two ambient providers a paywall needs — the renderer
+ * registry (defaulting to the DOM host) and the runtime (products, variables,
+ * actions, bridge).
+ */
+export const PaywallRenderer = ({
+  paywall,
+  config,
+  host,
+  bridge,
+}: PaywallRendererProps): ReactNode => (
+  <RendererProvider host={host}>
+    <PaywallRuntimeProvider bridge={bridge} config={config}>
+      {renderPaywallBody(paywall.render)}
+    </PaywallRuntimeProvider>
+  </RendererProvider>
+);
diff --git a/libraries/paywalls/src/runtime/bridge.ts b/libraries/paywalls/src/runtime/bridge.ts
new file mode 100644
index 000000000..2a0273b71
--- /dev/null
+++ b/libraries/paywalls/src/runtime/bridge.ts
@@ -0,0 +1,202 @@
+/**
+ * Channel layer between a rendered paywall and its host.
+ *
+ * Outbound channels, in priority order (re-evaluated per send):
+ *
+ * 1. `window.ReactNativeWebView.postMessage(json)` — the production target.
+ *    On iOS the native presenter injects this shim only after the page
+ *    finishes loading, so early messages (notably `ready`) are queued and
+ *    retried until the shim appears.
+ * 2. `window.parent.postMessage({ source: "voidhash-paywall", message }, "*")`
+ *    — Studio/preview contexts embedding the paywall in an iframe.
+ * 3. `console.info` — last-resort logger after the retry deadline so nothing
+ *    fails silently when the paywall is opened standalone in a browser.
+ *
+ * Inbound: the native presenters deliver raw JSON strings by calling
+ * `window.onVoidhashNativeMessage(json)` (and dispatching a synthetic
+ * `MessageEvent` we deliberately ignore to avoid double-handling). Studio
+ * delivers `{ source: "voidhash-paywall-host", message }` objects via regular
+ * `postMessage` into the iframe.
+ */
+import {
+  type PaywallInboundEnvelope,
+  type PaywallOutboundEnvelope,
+  parseInboundEnvelope,
+  serializeEnvelope,
+} from "./envelope";
+
+/** `source` tag on outbound `postMessage` payloads to a parent frame. */
+export const STUDIO_MESSAGE_SOURCE = "voidhash-paywall";
+
+/** `source` tag a studio host uses for inbound messages into the paywall. */
+export const STUDIO_HOST_MESSAGE_SOURCE = "voidhash-paywall-host";
+
+/** Name of the global the native presenters call to deliver inbound messages. */
+export const NATIVE_INBOUND_GLOBAL = "onVoidhashNativeMessage";
+
+declare global {
+  interface Window {
+    /** Injected by the native paywall presenter (RN WebView shim). */
+    ReactNativeWebView?: { postMessage: (data: string) => void };
+    /** Installed by the runtime; called by the native presenter with raw JSON. */
+    [NATIVE_INBOUND_GLOBAL]?: (data: string) => void;
+  }
+}
+
+/** Abstraction over the message channel between paywall and host. */
+export interface PaywallBridge {
+  /** Sends an outbound envelope to the host. */
+  post: (envelope: PaywallOutboundEnvelope) => void;
+  /** Subscribes to inbound envelopes. Returns an unsubscribe function. */
+  subscribe: (
+    listener: (envelope: PaywallInboundEnvelope) => void,
+  ) => () => void;
+}
+
+// ── Inbound dispatch (module-level singleton) ───────────────────────────────
+
+const inboundListeners = new Set<(envelope: PaywallInboundEnvelope) => void>();
+let inboundInstalled = false;
+
+const dispatchInbound = (raw: unknown): void => {
+  const envelope = parseInboundEnvelope(raw);
+  if (!envelope) {
+    // biome-ignore lint/suspicious/noConsole: dev-visible signal — a host message that fails to parse would otherwise vanish silently.
+    console.warn(
+      "[voidhash-paywall] ignoring unparseable inbound bridge message",
+      raw,
+    );
+    return;
+  }
+  for (const listener of [...inboundListeners]) {
+    listener(envelope);
+  }
+};
+
+const ensureInboundInstalled = (): void => {
+  if (inboundInstalled || typeof window === "undefined") {
+    return;
+  }
+  inboundInstalled = true;
+  window[NATIVE_INBOUND_GLOBAL] = (data: string) => dispatchInbound(data);
+  window.addEventListener("message", (event: MessageEvent) => {
+    const data: unknown = event.data;
+    if (
+      typeof data === "object" &&
+      data !== null &&
+      (data as { source?: unknown }).source === STUDIO_HOST_MESSAGE_SOURCE
+    ) {
+      dispatchInbound((data as { message?: unknown }).message);
+    }
+  });
+};
+
+/**
+ * Subscribes to inbound host messages on the shared channel (installing the
+ * native global and the studio `message` listener on first use).
+ */
+export const subscribeToInboundEnvelopes = (
+  listener: (envelope: PaywallInboundEnvelope) => void,
+): (() => void) => {
+  ensureInboundInstalled();
+  inboundListeners.add(listener);
+  return () => {
+    inboundListeners.delete(listener);
+  };
+};
+
+// ── Outbound delivery with pre-shim queueing ────────────────────────────────
+
+const OUTBOUND_RETRY_INTERVAL_MS = 100;
+const OUTBOUND_RETRY_DEADLINE_MS = 10_000;
+
+const pendingOutbound: PaywallOutboundEnvelope[] = [];
+let retryTimer: ReturnType<typeof setInterval> | undefined;
+let retryDeadline = 0;
+
+const tryDeliver = (envelope: PaywallOutboundEnvelope): boolean => {
+  if (window.ReactNativeWebView) {
+    window.ReactNativeWebView.postMessage(serializeEnvelope(envelope));
+    return true;
+  }
+  if (window.parent && window.parent !== window) {
+    window.parent.postMessage(
+      { source: STUDIO_MESSAGE_SOURCE, message: envelope },
+      "*",
+    );
+    return true;
+  }
+  return false;
+};
+
+const stopRetrying = (): void => {
+  if (retryTimer !== undefined) {
+    clearInterval(retryTimer);
+    retryTimer = undefined;
+  }
+};
+
+const flushPending = (): void => {
+  while (pendingOutbound.length > 0) {
+    const next = pendingOutbound[0] as PaywallOutboundEnvelope;
+    if (!tryDeliver(next)) {
+      return;
+    }
+    pendingOutbound.shift();
+  }
+  stopRetrying();
+};
+
+const giveUpPending = (): void => {
+  stopRetrying();
+  for (const envelope of pendingOutbound.splice(0)) {
+    // biome-ignore lint/suspicious/noConsole: deliberate standalone-preview fallback.
+    console.info("[voidhash-paywall]", envelope);
+  }
+};
+
+const enqueueOutbound = (envelope: PaywallOutboundEnvelope): void => {
+  pendingOutbound.push(envelope);
+  if (retryTimer !== undefined) {
+    return;
+  }
+  retryDeadline = Date.now() + OUTBOUND_RETRY_DEADLINE_MS;
+  retryTimer = setInterval(() => {
+    flushPending();
+    if (pendingOutbound.length > 0 && Date.now() >= retryDeadline) {
+      giveUpPending();
+    }
+  }, OUTBOUND_RETRY_INTERVAL_MS);
+};
+
+/**
+ * Posts an outbound envelope on the best available channel, queueing it until
+ * the native shim appears when no channel exists yet. Outside a browser-like
+ * environment the message is dropped (the tree renderer passes its own silent
+ * bridge instead).
+ */
+export const postOutboundEnvelope = (
+  envelope: PaywallOutboundEnvelope,
+): void => {
+  if (typeof window === "undefined") {
+    return;
+  }
+  if (pendingOutbound.length > 0) {
+    // Preserve ordering while a queue is draining.
+    enqueueOutbound(envelope);
+    return;
+  }
+  if (!tryDeliver(envelope)) {
+    enqueueOutbound(envelope);
+  }
+};
+
+/**
+ * The production bridge: posts on the detected channel (RN WebView → studio
+ * parent frame → console fallback) and receives envelopes from the native
+ * global / studio `postMessage` channel.
+ */
+export const createDefaultBridge = (): PaywallBridge => ({
+  post: postOutboundEnvelope,
+  subscribe: subscribeToInboundEnvelopes,
+});
diff --git a/libraries/paywalls/src/runtime/config.ts b/libraries/paywalls/src/runtime/config.ts
new file mode 100644
index 000000000..02f9f6cf7
--- /dev/null
+++ b/libraries/paywalls/src/runtime/config.ts
@@ -0,0 +1,90 @@
+/** Billing period of a {@link PaywallProduct}. */
+export type PaywallProductPeriod = "month" | "year" | "week" | "lifetime";
+
+/**
+ * A purchasable product surfaced to a paywall by the native SDK, per contract
+ * §7.1. The SDK maps the release's product slugs through its native store
+ * metadata (StoreKit / Play Billing) to build this list.
+ */
+export interface PaywallProduct {
+  /** Store product identifier (App Store / Play Store). */
+  readonly id: string;
+  /** Voidhash product slug. */
+  readonly slug: string;
+  /** Human-readable name, e.g. "Yearly Pro". */
+  readonly displayName: string;
+  readonly description?: string;
+  /** Raw price amount, when known. */
+  readonly price?: number;
+  /** Localized, currency-formatted price, e.g. "$59.99". */
+  readonly priceString: string;
+  readonly currencyCode?: string;
+  readonly period?: PaywallProductPeriod;
+  /** Free-trial duration string, e.g. "7d", when the product offers one. */
+  readonly trialPeriod?: string;
+}
+
+/** Author-configurable values the dashboard/experiments can override at runtime. */
+export type PaywallVariables = Readonly<
+  Record<string, string | number | boolean>
+>;
+
+/** Platform the paywall is being presented on. */
+export type PaywallPlatform = "ios" | "android" | "web";
+
+/**
+ * Everything a paywall needs at runtime beyond its own React tree (contract
+ * §7.1). The native host injects it as `window.__VOIDHASH_PAYWALL__` when it
+ * can, and/or delivers it late via a `configure` bridge message; Studio
+ * supplies it with mock data.
+ */
+export interface PaywallRuntimeConfig {
+  readonly products: ReadonlyArray<PaywallProduct>;
+  readonly variables: PaywallVariables;
+  readonly locale?: string;
+  readonly platform?: PaywallPlatform;
+  /** Product selected when the paywall first renders. Defaults to the first. */
+  readonly defaultSelectedProductId?: string;
+}
+
+/** Global name under which the native host injects the runtime config. */
+export const RUNTIME_CONFIG_GLOBAL = "__VOIDHASH_PAYWALL__";
+
+declare global {
+  interface Window {
+    [RUNTIME_CONFIG_GLOBAL]?: PaywallRuntimeConfig;
+  }
+}
+
+/** A frozen empty config used wherever no products/variables are available. */
+export const EMPTY_RUNTIME_CONFIG: PaywallRuntimeConfig = {
+  products: [],
+  variables: {},
+};
+
+/**
+ * Fills a partial config (e.g. a `configure` message payload or tree-renderer
+ * fixtures) into a complete {@link PaywallRuntimeConfig}.
+ */
+export const normalizeRuntimeConfig = (
+  input: Partial<PaywallRuntimeConfig> | undefined,
+): PaywallRuntimeConfig => ({
+  products: input?.products ?? [],
+  variables: input?.variables ?? {},
+  locale: input?.locale,
+  platform: input?.platform,
+  defaultSelectedProductId: input?.defaultSelectedProductId,
+});
+
+/**
+ * Reads the runtime config the native host injected onto `window`. Falls back
+ * to an empty config so the paywall renders immediately (contract §7.1) and
+ * picks up products/variables from a later `configure` message.
+ */
+export const readInjectedConfig = (): PaywallRuntimeConfig => {
+  if (typeof window === "undefined") {
+    return EMPTY_RUNTIME_CONFIG;
+  }
+  const injected = window[RUNTIME_CONFIG_GLOBAL];
+  return injected ? normalizeRuntimeConfig(injected) : EMPTY_RUNTIME_CONFIG;
+};
diff --git a/libraries/paywalls/src/runtime/envelope.ts b/libraries/paywalls/src/runtime/envelope.ts
new file mode 100644
index 000000000..9cfc58a17
--- /dev/null
+++ b/libraries/paywalls/src/runtime/envelope.ts
@@ -0,0 +1,306 @@
+/**
+ * The bridge envelope wire format spoken between a rendered paywall (inside a
+ * mobile WebView) and the native Voidhash SDK. The normative implementation is
+ * `@voidhash/react-native`'s `paywall-bridge/protocol.ts` (envelope
+ * `version: 1`); this module mirrors it exactly and adds the two contract §7.2
+ * extensions: the outbound `event` action and the inbound `configure` action.
+ */
+import { normalizeRuntimeConfig, type PaywallRuntimeConfig } from "./config";
+
+/** Bridge envelope wire version. Unchanged in Phase 1. */
+export const PAYWALL_BRIDGE_VERSION = 1 as const;
+
+// ── Outbound (paywall → host) ────────────────────────────────────────────────
+
+interface OutboundBase<TType extends string> {
+  readonly version: typeof PAYWALL_BRIDGE_VERSION;
+  readonly type: TType;
+  readonly requestId?: string;
+}
+
+export interface PaywallReadyEnvelope extends OutboundBase<"ready"> {
+  readonly payload?: { readonly templateVersion?: string };
+}
+
+export interface PaywallCloseEnvelope extends OutboundBase<"close"> {
+  readonly payload?: { readonly reason?: string };
+}
+
+export interface PaywallPurchaseEnvelope extends OutboundBase<"purchase"> {
+  readonly payload: {
+    readonly productId: string;
+    readonly paywallProductId?: string;
+  };
+}
+
+export interface PaywallRestoreEnvelope extends OutboundBase<"restore"> {
+  readonly payload?: { readonly source?: string };
+}
+
+export interface PaywallOpenExternalEnvelope
+  extends OutboundBase<"openExternal"> {
+  readonly payload: { readonly url: string };
+}
+
+/** Custom analytics event (contract §7.2; not part of the original protocol). */
+export interface PaywallEventEnvelope extends OutboundBase<"event"> {
+  readonly payload: {
+    readonly name: string;
+    readonly properties?: Readonly<Record<string, unknown>>;
+  };
+}
+
+export interface PaywallLogEnvelope extends OutboundBase<"log"> {
+  readonly payload: {
+    readonly level: "debug" | "info" | "warn" | "error";
+    readonly message: string;
+  };
+}
+
+export type PaywallOutboundEnvelope =
+  | PaywallReadyEnvelope
+  | PaywallCloseEnvelope
+  | PaywallPurchaseEnvelope
+  | PaywallRestoreEnvelope
+  | PaywallOpenExternalEnvelope
+  | PaywallEventEnvelope
+  | PaywallLogEnvelope;
+
+export type PaywallOutboundActionType = PaywallOutboundEnvelope["type"];
+
+// ── Inbound (host → paywall) ─────────────────────────────────────────────────
+
+/** Transaction lifecycle reflected into the paywall by the host. */
+export type PaywallTransactionStatus =
+  | "idle"
+  | "purchasing"
+  | "restoring"
+  | "purchased"
+  | "restored"
+  | "cancelled"
+  | "failed";
+
+export interface PaywallBridgeError {
+  readonly code: string;
+  readonly message: string;
+}
+
+/** Success/error response to a previously sent action (mirrors protocol.ts). */
+export interface PaywallResponseEnvelope {
+  readonly version: typeof PAYWALL_BRIDGE_VERSION;
+  readonly type: "response";
+  readonly requestId?: string;
+  readonly payload: {
+    readonly action: string;
+    readonly status: "success" | "error";
+    readonly data?: Readonly<Record<string, unknown>>;
+    readonly error?: PaywallBridgeError;
+  };
+}
+
+/** Direct transaction-status push from the host. */
+export interface PaywallStatusEnvelope {
+  readonly version: typeof PAYWALL_BRIDGE_VERSION;
+  readonly type: "status";
+  readonly requestId?: string;
+  readonly payload: {
+    readonly status: PaywallTransactionStatus;
+    readonly productId?: string;
+    readonly error?: string;
+  };
+}
+
+/** Late runtime configuration (contract §7.2). Sent after `ready`. */
+export interface PaywallConfigureEnvelope {
+  readonly version: typeof PAYWALL_BRIDGE_VERSION;
+  readonly type: "configure";
+  readonly requestId?: string;
+  readonly payload: PaywallRuntimeConfig;
+}
+
+export type PaywallInboundEnvelope =
+  | PaywallResponseEnvelope
+  | PaywallStatusEnvelope
+  | PaywallConfigureEnvelope;
+
+// ── Encode ───────────────────────────────────────────────────────────────────
+
+export const createReadyEnvelope = (
+  templateVersion?: string,
+): PaywallReadyEnvelope => ({
+  version: PAYWALL_BRIDGE_VERSION,
+  type: "ready",
+  ...(templateVersion === undefined ? {} : { payload: { templateVersion } }),
+});
+
+export const createCloseEnvelope = (reason?: string): PaywallCloseEnvelope => ({
+  version: PAYWALL_BRIDGE_VERSION,
+  type: "close",
+  ...(reason === undefined ? {} : { payload: { reason } }),
+});
+
+export const createPurchaseEnvelope = (
+  productId: string,
+  requestId?: string,
+): PaywallPurchaseEnvelope => ({
+  version: PAYWALL_BRIDGE_VERSION,
+  type: "purchase",
+  requestId,
+  payload: { productId },
+});
+
+export const createRestoreEnvelope = (
+  requestId?: string,
+): PaywallRestoreEnvelope => ({
+  version: PAYWALL_BRIDGE_VERSION,
+  type: "restore",
+  requestId,
+});
+
+export const createOpenExternalEnvelope = (
+  url: string,
+): PaywallOpenExternalEnvelope => ({
+  version: PAYWALL_BRIDGE_VERSION,
+  type: "openExternal",
+  payload: { url },
+});
+
+export const createEventEnvelope = (
+  name: string,
+  properties?: Record<string, unknown>,
+): PaywallEventEnvelope => ({
+  version: PAYWALL_BRIDGE_VERSION,
+  type: "event",
+  payload: properties === undefined ? { name } : { name, properties },
+});
+
+/** Serializes an outbound envelope to its JSON wire form. */
+export const serializeEnvelope = (envelope: PaywallOutboundEnvelope): string =>
+  JSON.stringify(envelope);
+
+// ── Decode ───────────────────────────────────────────────────────────────────
+
+const TRANSACTION_STATUSES: ReadonlyArray<PaywallTransactionStatus> = [
+  "idle",
+  "purchasing",
+  "restoring",
+  "purchased",
+  "restored",
+  "cancelled",
+  "failed",
+];
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null;
+
+const readRequestId = (value: Record<string, unknown>): string | undefined =>
+  typeof value.requestId === "string" && value.requestId.length > 0
+    ? value.requestId
+    : undefined;
+
+const parseResponse = (
+  value: Record<string, unknown>,
+): PaywallResponseEnvelope | null => {
+  const payload = value.payload;
+  if (!isRecord(payload)) {
+    return null;
+  }
+  const { action, status, data, error } = payload;
+  if (typeof action !== "string") {
+    return null;
+  }
+  if (status !== "success" && status !== "error") {
+    return null;
+  }
+  const parsedError =
+    isRecord(error) &&
+    typeof error.code === "string" &&
+    typeof error.message === "string"
+      ? { code: error.code, message: error.message }
+      : undefined;
+  return {
+    version: PAYWALL_BRIDGE_VERSION,
+    type: "response",
+    requestId: readRequestId(value),
+    payload: {
+      action,
+      status,
+      data: isRecord(data) ? data : undefined,
+      error: parsedError,
+    },
+  };
+};
+
+const parseStatus = (
+  value: Record<string, unknown>,
+): PaywallStatusEnvelope | null => {
+  const payload = value.payload;
+  if (!isRecord(payload)) {
+    return null;
+  }
+  const status = payload.status;
+  if (
+    typeof status !== "string" ||
+    !TRANSACTION_STATUSES.includes(status as PaywallTransactionStatus)
+  ) {
+    return null;
+  }
+  return {
+    version: PAYWALL_BRIDGE_VERSION,
+    type: "status",
+    requestId: readRequestId(value),
+    payload: {
+      status: status as PaywallTransactionStatus,
+      productId:
+        typeof payload.productId === "string" ? payload.productId : undefined,
+      error: typeof payload.error === "string" ? payload.error : undefined,
+    },
+  };
+};
+
+const parseConfigure = (
+  value: Record<string, unknown>,
+): PaywallConfigureEnvelope | null => {
+  const payload = value.payload;
+  if (!isRecord(payload)) {
+    return null;
+  }
+  return {
+    version: PAYWALL_BRIDGE_VERSION,
+    type: "configure",
+    requestId: readRequestId(value),
+    payload: normalizeRuntimeConfig(payload as Partial<PaywallRuntimeConfig>),
+  };
+};
+
+/**
+ * Parses a raw inbound message (JSON string or already-parsed object) into a
+ * {@link PaywallInboundEnvelope}. Returns `null` for malformed input, unknown
+ * versions and unknown actions — the runtime ignores those rather than
+ * crashing the paywall.
+ */
+export const parseInboundEnvelope = (
+  raw: unknown,
+): PaywallInboundEnvelope | null => {
+  let value: unknown = raw;
+  if (typeof raw === "string") {
+    try {
+      value = JSON.parse(raw);
+    } catch {
+      return null;
+    }
+  }
+  if (!isRecord(value) || value.version !== PAYWALL_BRIDGE_VERSION) {
+    return null;
+  }
+  switch (value.type) {
+    case "response":
+      return parseResponse(value);
+    case "status":
+      return parseStatus(value);
+    case "configure":
+      return parseConfigure(value);
+    default:
+      return null;
+  }
+};
diff --git a/libraries/paywalls/src/runtime/runtime.tsx b/libraries/paywalls/src/runtime/runtime.tsx
new file mode 100644
index 000000000..c84f6ece2
--- /dev/null
+++ b/libraries/paywalls/src/runtime/runtime.tsx
@@ -0,0 +1,268 @@
+import {
+  createContext,
+  type ReactNode,
+  useContext,
+  useEffect,
+  useMemo,
+  useRef,
+  useState,
+} from "react";
+
+import { createDefaultBridge, type PaywallBridge } from "./bridge";
+import {
+  type PaywallProduct,
+  type PaywallRuntimeConfig,
+  type PaywallVariables,
+  readInjectedConfig,
+} from "./config";
+import {
+  createCloseEnvelope,
+  createEventEnvelope,
+  createOpenExternalEnvelope,
+  createPurchaseEnvelope,
+  createReadyEnvelope,
+  createRestoreEnvelope,
+  type PaywallBridgeError,
+  type PaywallInboundEnvelope,
+  type PaywallTransactionStatus,
+} from "./envelope";
+
+/** Actions a paywall can request from its host. */
+export interface PaywallActions {
+  /** Start a purchase. Defaults to the currently selected product. */
+  readonly purchase: (productId?: string) => void;
+  /** Restore previously purchased entitlements. */
+  readonly restore: () => void;
+  /** Dismiss the paywall. */
+  readonly close: (reason?: string) => void;
+  /** Open an external URL (terms, privacy, …). */
+  readonly openUrl: (url: string) => void;
+  /** Emit a custom analytics event. */
+  readonly track: (name: string, properties?: Record<string, unknown>) => void;
+  /** Change the highlighted product. */
+  readonly selectProduct: (productId: string) => void;
+}
+
+/** The current transaction state plus the last error/product it relates to. */
+export interface PaywallStatusSnapshot {
+  readonly status: PaywallTransactionStatus;
+  readonly productId?: string;
+  readonly error?: PaywallBridgeError;
+}
+
+interface PaywallRuntimeValue {
+  readonly config: PaywallRuntimeConfig;
+  readonly products: ReadonlyArray<PaywallProduct>;
+  readonly variables: PaywallVariables;
+  readonly selectedProductId: string | undefined;
+  readonly selectedProduct: PaywallProduct | undefined;
+  readonly status: PaywallStatusSnapshot;
+  readonly actions: PaywallActions;
+}
+
+const PaywallRuntimeContext = createContext<PaywallRuntimeValue | null>(null);
+
+const useRuntimeOrThrow = (hook: string): PaywallRuntimeValue => {
+  const value = useContext(PaywallRuntimeContext);
+  if (!value) {
+    throw new Error(
+      `${hook} must be used inside a paywall rendered by @voidhash/paywalls.`,
+    );
+  }
+  return value;
+};
+
+let requestCounter = 0;
+const nextRequestId = (): string =>
+  `vh-${Date.now().toString(36)}-${++requestCounter}`;
+
+const IDLE_STATUS: PaywallStatusSnapshot = { status: "idle" };
+
+const deriveStatusFromResponse = (
+  envelope: Extract<PaywallInboundEnvelope, { type: "response" }>,
+): PaywallStatusSnapshot | null => {
+  const { action, status, data, error } = envelope.payload;
+  if (action !== "purchase" && action !== "restore") {
+    return null;
+  }
+  if (status === "error") {
+    return { status: "failed", error };
+  }
+  return {
+    status: action === "purchase" ? "purchased" : "restored",
+    productId: typeof data?.productId === "string" ? data.productId : undefined,
+  };
+};
+
+export interface PaywallRuntimeProviderProps {
+  /**
+   * Runtime products/variables. Defaults to the host-injected
+   * `window.__VOIDHASH_PAYWALL__` (or an empty config), per contract §7.1.
+   */
+  config?: PaywallRuntimeConfig;
+  /** Override the bridge (Studio injects its own; tests inject mocks). */
+  bridge?: PaywallBridge;
+  children: ReactNode;
+}
+
+/**
+ * Supplies products, author variables and host-backed actions to a paywall
+ * subtree, and wires the bridge: it announces readiness on mount, applies late
+ * `configure` messages (contract §7 — render immediately with the
+ * injected-or-empty config, reconfigure when the host catches up), and tracks
+ * purchase/restore progress from host responses and status pushes.
+ */
+export const PaywallRuntimeProvider = ({
+  config: configProp,
+  bridge,
+  children,
+}: PaywallRuntimeProviderProps): ReactNode => {
+  const resolvedBridge = useMemo(
+    () => bridge ?? createDefaultBridge(),
+    [bridge],
+  );
+
+  const [config, setConfig] = useState<PaywallRuntimeConfig>(
+    () => configProp ?? readInjectedConfig(),
+  );
+  useEffect(() => {
+    if (configProp) {
+      setConfig(configProp);
+    }
+  }, [configProp]);
+
+  const [explicitSelection, setExplicitSelection] = useState<
+    string | undefined
+  >(undefined);
+  // An explicit user selection survives reconfiguration as long as the product
+  // still exists; otherwise fall back to the configured default.
+  const selectedProductId = useMemo(() => {
+    if (
+      explicitSelection !== undefined &&
+      config.products.some((product) => product.id === explicitSelection)
+    ) {
+      return explicitSelection;
+    }
+    return config.defaultSelectedProductId ?? config.products[0]?.id;
+  }, [explicitSelection, config]);
+
+  const [status, setStatus] = useState<PaywallStatusSnapshot>(IDLE_STATUS);
+
+  // Guards against duplicate `ready` announcements (React StrictMode's
+  // double-invoked mount effect in development).
+  const announcedRef = useRef(false);
+
+  useEffect(() => {
+    const unsubscribe = resolvedBridge.subscribe((envelope) => {
+      if (envelope.type === "configure") {
+        setConfig(envelope.payload);
+        return;
+      }
+      if (envelope.type === "status") {
+        const { status: nextStatus, productId, error } = envelope.payload;
+        setStatus({
+          status: nextStatus,
+          productId,
+          error:
+            error === undefined
+              ? undefined
+              : { code: "HOST_STATUS", message: error },
+        });
+        return;
+      }
+      const derived = deriveStatusFromResponse(envelope);
+      if (derived) {
+        setStatus(derived);
+      }
+    });
+
+    if (!announcedRef.current) {
+      announcedRef.current = true;
+      resolvedBridge.post(createReadyEnvelope());
+    }
+
+    return unsubscribe;
+  }, [resolvedBridge]);
+
+  const actions = useMemo<PaywallActions>(
+    () => ({
+      purchase: (productId) => {
+        const target = productId ?? selectedProductId;
+        if (!target) {
+          // biome-ignore lint/suspicious/noConsole: dev-visible signal — a purchase that silently no-ops is undebuggable from inside a WebView.
+          console.warn(
+            "[voidhash-paywall] purchase() called with no selected or available product — did the host send a configure message with products?",
+          );
+          return;
+        }
+        setStatus({ status: "purchasing", productId: target });
+        resolvedBridge.post(createPurchaseEnvelope(target, nextRequestId()));
+      },
+      restore: () => {
+        setStatus({ status: "restoring" });
+        resolvedBridge.post(createRestoreEnvelope(nextRequestId()));
+      },
+      close: (reason) => resolvedBridge.post(createCloseEnvelope(reason)),
+      openUrl: (url) => resolvedBridge.post(createOpenExternalEnvelope(url)),
+      track: (name, properties) =>
+        resolvedBridge.post(createEventEnvelope(name, properties)),
+      selectProduct: (productId) => setExplicitSelection(productId),
+    }),
+    [resolvedBridge, selectedProductId],
+  );
+
+  const value = useMemo<PaywallRuntimeValue>(
+    () => ({
+      actions,
+      config,
+      products: config.products,
+      selectedProduct: config.products.find(
+        (product) => product.id === selectedProductId,
+      ),
+      selectedProductId,
+      status,
+      variables: config.variables,
+    }),
+    [actions, config, selectedProductId, status],
+  );
+
+  return (
+    <PaywallRuntimeContext.Provider value={value}>
+      {children}
+    </PaywallRuntimeContext.Provider>
+  );
+};
+
+/** The products available on this paywall. */
+export const usePaywallProducts = (): ReadonlyArray<PaywallProduct> =>
+  useRuntimeOrThrow("usePaywallProducts").products;
+
+/** Author-configurable variables (dashboard/experiment overrides). */
+export const usePaywallVariables = (): PaywallVariables =>
+  useRuntimeOrThrow("usePaywallVariables").variables;
+
+/** Host-backed actions: purchase, restore, close, openUrl, track, select. */
+export const usePaywallActions = (): PaywallActions =>
+  useRuntimeOrThrow("usePaywallActions").actions;
+
+/** The full runtime config (products, variables, locale, platform). */
+export const usePaywallConfig = (): PaywallRuntimeConfig =>
+  useRuntimeOrThrow("usePaywallConfig").config;
+
+/** The currently highlighted product and a setter. */
+export const useSelectedProduct = (): {
+  selectedProduct: PaywallProduct | undefined;
+  selectedProductId: string | undefined;
+  selectProduct: (productId: string) => void;
+} => {
+  const runtime = useRuntimeOrThrow("useSelectedProduct");
+  return {
+    selectProduct: runtime.actions.selectProduct,
+    selectedProduct: runtime.selectedProduct,
+    selectedProductId: runtime.selectedProductId,
+  };
+};
+
+/** The current transaction status (idle/purchasing/purchased/…). */
+export const usePaywallStatus = (): PaywallStatusSnapshot =>
+  useRuntimeOrThrow("usePaywallStatus").status;
diff --git a/libraries/paywalls/src/schema/component-manifest.ts b/libraries/paywalls/src/schema/component-manifest.ts
new file mode 100644
index 000000000..0b67e1d2d
--- /dev/null
+++ b/libraries/paywalls/src/schema/component-manifest.ts
@@ -0,0 +1,111 @@
+/**
+ * The §2 component manifest — the JSON artifact the CLI extracts from a
+ * `defineComponent` definition and uploads alongside the component's runtime
+ * bundle. Servers validate uploaded manifests against exactly these shapes.
+ */
+
+/** Wire version of the component manifest format. */
+export const COMPONENT_MANIFEST_VERSION = 1 as const;
+
+/** Editor kinds a component prop can map to. */
+export type ManifestPropKind =
+  | "string"
+  | "number"
+  | "boolean"
+  | "select"
+  | "image"
+  | "ref"
+  | "component"
+  | "array";
+
+/** Optional UI hint for how a prop should be edited. */
+export type ManifestPropEditor = "color";
+
+/** Referenceable runtime entity kinds. `"product"` only in Phase 1. */
+export type ManifestRefType = "product";
+
+interface ManifestPropBase {
+  readonly label?: string;
+  readonly default?: unknown;
+  readonly editor?: ManifestPropEditor;
+  readonly optional: boolean;
+}
+
+export interface ManifestStringProp extends ManifestPropBase {
+  readonly kind: "string";
+}
+
+export interface ManifestNumberProp extends ManifestPropBase {
+  readonly kind: "number";
+}
+
+export interface ManifestBooleanProp extends ManifestPropBase {
+  readonly kind: "boolean";
+}
+
+export interface ManifestSelectProp extends ManifestPropBase {
+  readonly kind: "select";
+  readonly options: ReadonlyArray<string>;
+}
+
+export interface ManifestImageProp extends ManifestPropBase {
+  readonly kind: "image";
+}
+
+export interface ManifestRefProp extends ManifestPropBase {
+  readonly kind: "ref";
+  readonly refType: ManifestRefType;
+}
+
+export interface ManifestComponentProp extends ManifestPropBase {
+  readonly kind: "component";
+}
+
+/** Element shape of an array prop. Must be a non-array kind. */
+export interface ManifestArrayItem {
+  readonly kind: Exclude<ManifestPropKind, "array">;
+  readonly options?: ReadonlyArray<string>;
+  readonly refType?: ManifestRefType;
+  readonly editor?: ManifestPropEditor;
+}
+
+export interface ManifestArrayProp extends ManifestPropBase {
+  readonly kind: "array";
+  readonly item: ManifestArrayItem;
+}
+
+export type ManifestProp =
+  | ManifestStringProp
+  | ManifestNumberProp
+  | ManifestBooleanProp
+  | ManifestSelectProp
+  | ManifestImageProp
+  | ManifestRefProp
+  | ManifestComponentProp
+  | ManifestArrayProp;
+
+/** Scalar kinds allowed in an action payload. */
+export type ManifestActionPayloadKind = "string" | "number" | "boolean";
+
+export interface ManifestAction {
+  /** Payload field shapes. May be `{}` for payload-less actions. */
+  readonly payload: Readonly<
+    Record<string, { readonly kind: ManifestActionPayloadKind }>
+  >;
+}
+
+/** Injected runtime data a component reads. `"products"` only in Phase 1. */
+export type ManifestHostData = "products";
+
+export interface ComponentManifest {
+  readonly manifestVersion: typeof COMPONENT_MANIFEST_VERSION;
+  readonly id: string;
+  readonly title?: string;
+  readonly description?: string;
+  readonly props: Readonly<Record<string, ManifestProp>>;
+  readonly actions: Readonly<Record<string, ManifestAction>>;
+  /** Whether the component renders a `<Slot/>` (exactly one allowed). */
+  readonly slot: boolean;
+  readonly previewStates: ReadonlyArray<string>;
+  readonly hostData: ReadonlyArray<ManifestHostData>;
+}
diff --git a/libraries/paywalls/src/schema/node-tree.ts b/libraries/paywalls/src/schema/node-tree.ts
new file mode 100644
index 000000000..0689cd96a
--- /dev/null
+++ b/libraries/paywalls/src/schema/node-tree.ts
@@ -0,0 +1,73 @@
+/**
+ * The §3 preview node tree — the closed-primitive serialization of a component
+ * SSR-ed at CLI build time against a preview state's fixtures. Never HTML.
+ * Servers validate uploaded trees against exactly these shapes.
+ */
+import type { PaywallStyle } from "./style";
+
+/** Wire version of the preview node tree format. */
+export const PAYWALL_TREE_VERSION = 1 as const;
+
+/** How an image node fills its frame. Mirrors RN `resizeMode`. */
+export type PaywallNodeResizeMode = "cover" | "contain" | "stretch" | "center";
+
+export interface PaywallViewNode {
+  readonly type: "view";
+  readonly style: PaywallStyle;
+  readonly children: ReadonlyArray<PaywallNode>;
+}
+
+export interface PaywallPressableNode {
+  readonly type: "pressable";
+  readonly style: PaywallStyle;
+  readonly children: ReadonlyArray<PaywallNode>;
+  /** The declared action name this pressable fires, when known. */
+  readonly action?: string;
+}
+
+export interface PaywallScrollNode {
+  readonly type: "scroll";
+  readonly style: PaywallStyle;
+  readonly children: ReadonlyArray<PaywallNode>;
+}
+
+export interface PaywallTextNode {
+  readonly type: "text";
+  readonly style: PaywallStyle;
+  readonly text: string;
+}
+
+export interface PaywallImageNode {
+  readonly type: "image";
+  readonly style: PaywallStyle;
+  readonly src: string;
+  readonly resizeMode?: PaywallNodeResizeMode;
+}
+
+/** Marker where the editor mounts consumer children. At most one per tree. */
+export interface PaywallSlotNode {
+  readonly type: "slot";
+}
+
+/** Emitted where rendering failed or produced nothing renderable. */
+export interface PaywallPlaceholderNode {
+  readonly type: "placeholder";
+  readonly reason: string;
+}
+
+export type PaywallNode =
+  | PaywallViewNode
+  | PaywallPressableNode
+  | PaywallScrollNode
+  | PaywallTextNode
+  | PaywallImageNode
+  | PaywallSlotNode
+  | PaywallPlaceholderNode;
+
+/** A rendered preview tree artifact (`previews/<state>.json`). */
+export interface PaywallNodeTree {
+  readonly treeVersion: typeof PAYWALL_TREE_VERSION;
+  /** The preview state this tree was rendered for, e.g. `"default"`. */
+  readonly state: string;
+  readonly root: PaywallNode;
+}
diff --git a/libraries/paywalls/src/schema/style.ts b/libraries/paywalls/src/schema/style.ts
new file mode 100644
index 000000000..873a0100e
--- /dev/null
+++ b/libraries/paywalls/src/schema/style.ts
@@ -0,0 +1,211 @@
+/**
+ * The RN-compatible style subset every paywall primitive accepts — the §3.1
+ * vocabulary of the paywall deploy contract. Using this type (instead of
+ * `React.CSSProperties`) on primitive props enforces the subset at compile
+ * time, so authored paywalls stay renderable on the DOM today and on native
+ * views later.
+ */
+
+/** A length value: device-independent pixels or a string (e.g. `"50%"`). */
+export type PaywallDimension = number | string;
+
+export type PaywallFlexDirection =
+  | "row"
+  | "row-reverse"
+  | "column"
+  | "column-reverse";
+
+export type PaywallAlignItems =
+  | "flex-start"
+  | "flex-end"
+  | "center"
+  | "stretch"
+  | "baseline";
+
+export type PaywallAlignSelf = "auto" | PaywallAlignItems;
+
+export type PaywallJustifyContent =
+  | "flex-start"
+  | "flex-end"
+  | "center"
+  | "space-between"
+  | "space-around"
+  | "space-evenly";
+
+export type PaywallFontWeight =
+  | number
+  | "normal"
+  | "bold"
+  | "100"
+  | "200"
+  | "300"
+  | "400"
+  | "500"
+  | "600"
+  | "700"
+  | "800"
+  | "900";
+
+/**
+ * The §3.1 style subset. Keys are limited to the RN-compatible vocabulary;
+ * values are numbers (device-independent pixels) or strings (colors, `"50%"`).
+ * No arbitrary CSS.
+ */
+export interface PaywallStyle {
+  // Flexbox
+  flex?: number;
+  flexDirection?: PaywallFlexDirection;
+  alignItems?: PaywallAlignItems;
+  alignSelf?: PaywallAlignSelf;
+  justifyContent?: PaywallJustifyContent;
+  flexWrap?: "wrap" | "nowrap" | "wrap-reverse";
+  gap?: PaywallDimension;
+  rowGap?: PaywallDimension;
+  columnGap?: PaywallDimension;
+  flexGrow?: number;
+  flexShrink?: number;
+  flexBasis?: PaywallDimension;
+
+  // Box
+  width?: PaywallDimension;
+  height?: PaywallDimension;
+  minWidth?: PaywallDimension;
+  minHeight?: PaywallDimension;
+  maxWidth?: PaywallDimension;
+  maxHeight?: PaywallDimension;
+  padding?: PaywallDimension;
+  paddingTop?: PaywallDimension;
+  paddingBottom?: PaywallDimension;
+  paddingLeft?: PaywallDimension;
+  paddingRight?: PaywallDimension;
+  paddingHorizontal?: PaywallDimension;
+  paddingVertical?: PaywallDimension;
+  margin?: PaywallDimension;
+  marginTop?: PaywallDimension;
+  marginBottom?: PaywallDimension;
+  marginLeft?: PaywallDimension;
+  marginRight?: PaywallDimension;
+  marginHorizontal?: PaywallDimension;
+  marginVertical?: PaywallDimension;
+  aspectRatio?: number | string;
+
+  // Border
+  borderWidth?: number;
+  borderColor?: string;
+  borderRadius?: number;
+  borderTopLeftRadius?: number;
+  borderTopRightRadius?: number;
+  borderBottomLeftRadius?: number;
+  borderBottomRightRadius?: number;
+  borderStyle?: "solid" | "dotted" | "dashed";
+
+  // Visual
+  backgroundColor?: string;
+  opacity?: number;
+  overflow?: "visible" | "hidden" | "scroll";
+
+  // Position
+  position?: "absolute" | "relative";
+  top?: PaywallDimension;
+  right?: PaywallDimension;
+  bottom?: PaywallDimension;
+  left?: PaywallDimension;
+  zIndex?: number;
+
+  // Text-only
+  color?: string;
+  fontSize?: number;
+  fontWeight?: PaywallFontWeight;
+  fontStyle?: "normal" | "italic";
+  lineHeight?: number | string;
+  letterSpacing?: number;
+  textAlign?: "auto" | "left" | "right" | "center" | "justify";
+  textTransform?: "none" | "uppercase" | "lowercase" | "capitalize";
+  textDecorationLine?:
+    | "none"
+    | "underline"
+    | "line-through"
+    | "underline line-through";
+  fontFamily?: string;
+}
+
+/**
+ * Every key allowed by the §3.1 subset, as a runtime value. The tree renderer
+ * filters serialized styles down to this list so an out-of-contract key (e.g.
+ * smuggled in through a cast) never reaches a preview tree the server would
+ * reject.
+ */
+export const PAYWALL_STYLE_KEYS = [
+  "flex",
+  "flexDirection",
+  "alignItems",
+  "alignSelf",
+  "justifyContent",
+  "flexWrap",
+  "gap",
+  "rowGap",
+  "columnGap",
+  "flexGrow",
+  "flexShrink",
+  "flexBasis",
+  "width",
+  "height",
+  "minWidth",
+  "minHeight",
+  "maxWidth",
+  "maxHeight",
+  "padding",
+  "paddingTop",
+  "paddingBottom",
+  "paddingLeft",
+  "paddingRight",
+  "paddingHorizontal",
+  "paddingVertical",
+  "margin",
+  "marginTop",
+  "marginBottom",
+  "marginLeft",
+  "marginRight",
+  "marginHorizontal",
+  "marginVertical",
+  "aspectRatio",
+  "borderWidth",
+  "borderColor",
+  "borderRadius",
+  "borderTopLeftRadius",
+  "borderTopRightRadius",
+  "borderBottomLeftRadius",
+  "borderBottomRightRadius",
+  "borderStyle",
+  "backgroundColor",
+  "opacity",
+  "overflow",
+  "position",
+  "top",
+  "right",
+  "bottom",
+  "left",
+  "zIndex",
+  "color",
+  "fontSize",
+  "fontWeight",
+  "fontStyle",
+  "lineHeight",
+  "letterSpacing",
+  "textAlign",
+  "textTransform",
+  "textDecorationLine",
+  "fontFamily",
+] as const satisfies ReadonlyArray<keyof PaywallStyle>;
+
+/**
+ * A style prop may be a single object, a (possibly nested) array of objects,
+ * or a falsy value — mirroring React Native's `StyleProp`. Falsy entries are
+ * ignored so `style={[base, condition && override]}` works as expected.
+ */
+export type StyleProp =
+  | PaywallStyle
+  | false
+  | null
+  | undefined
+  | ReadonlyArray<StyleProp>;
diff --git a/libraries/paywalls/src/style/resolve.ts b/libraries/paywalls/src/style/resolve.ts
new file mode 100644
index 000000000..64bfd77ec
--- /dev/null
+++ b/libraries/paywalls/src/style/resolve.ts
@@ -0,0 +1,117 @@
+import type { CSSProperties } from "react";
+
+import type { PaywallStyle, StyleProp } from "../schema/style";
+
+/**
+ * Flattens a (possibly nested, possibly falsy) {@link StyleProp} into a single
+ * {@link PaywallStyle}. Later entries win, matching React Native's
+ * `StyleSheet.flatten` semantics.
+ */
+export const flattenStyle = (style: StyleProp): PaywallStyle => {
+  if (!style) {
+    return {};
+  }
+  if (Array.isArray(style)) {
+    let acc: PaywallStyle = {};
+    for (const entry of style as ReadonlyArray<StyleProp>) {
+      acc = { ...acc, ...flattenStyle(entry) };
+    }
+    return acc;
+  }
+  return style as PaywallStyle;
+};
+
+/**
+ * §3.1 keys that are CSS shorthands on the DOM. Committed later in an inline
+ * style object they reset their longhands (`padding` clears `paddingLeft`,
+ * `gap` clears `rowGap`, …), whereas React Native gives longhands precedence
+ * within one object regardless of declaration order. {@link resolveStyle}
+ * therefore emits these keys before everything else.
+ */
+const CSS_SHORTHAND_KEYS = [
+  "flex",
+  "gap",
+  "padding",
+  "margin",
+  "borderRadius",
+] as const satisfies ReadonlyArray<keyof PaywallStyle>;
+
+const isCssShorthandKey = (key: string): boolean =>
+  (CSS_SHORTHAND_KEYS as ReadonlyArray<string>).includes(key);
+
+/**
+ * Lowers a {@link StyleProp} onto the web target as plain
+ * {@link CSSProperties}. Transforms applied:
+ *
+ * - keys are emitted in deterministic specificity order — CSS shorthands
+ *   (`flex`, `gap`, `padding`, `margin`, `borderRadius`) first, then the
+ *   `paddingHorizontal`/`paddingVertical`/`marginHorizontal`/`marginVertical`
+ *   expansions into their physical edges, then explicit edges/corners — so
+ *   React Native's "longhand wins within one object" semantics hold on the
+ *   DOM independent of the author's key order.
+ * - numeric `lineHeight` becomes `"<n>px"` (RN treats it as pixels; React
+ *   would otherwise emit a unitless multiplier).
+ * - `borderStyle: "solid"` is defaulted when a border width/color is set
+ *   without one (RN renders solid borders implicitly).
+ *
+ * Everything else passes through untouched — React appends `px` to unitless
+ * length values when committing to the DOM.
+ */
+export const resolveStyle = (style: StyleProp): CSSProperties => {
+  const flat = flattenStyle(style);
+  const {
+    paddingHorizontal,
+    paddingVertical,
+    marginHorizontal,
+    marginVertical,
+    lineHeight,
+    ...rest
+  } = flat;
+
+  const out: Record<string, unknown> = {};
+
+  for (const key of CSS_SHORTHAND_KEYS) {
+    if (rest[key] !== undefined) {
+      out[key] = rest[key];
+    }
+  }
+
+  if (paddingHorizontal !== undefined) {
+    out.paddingLeft = paddingHorizontal;
+    out.paddingRight = paddingHorizontal;
+  }
+  if (paddingVertical !== undefined) {
+    out.paddingTop = paddingVertical;
+    out.paddingBottom = paddingVertical;
+  }
+  if (marginHorizontal !== undefined) {
+    out.marginLeft = marginHorizontal;
+    out.marginRight = marginHorizontal;
+  }
+  if (marginVertical !== undefined) {
+    out.marginTop = marginVertical;
+    out.marginBottom = marginVertical;
+  }
+
+  // Explicit edges/corners (and every other longhand) land last, so they win
+  // over both the shorthands above and the Horizontal/Vertical expansions.
+  for (const [key, value] of Object.entries(rest)) {
+    if (value === undefined || isCssShorthandKey(key)) {
+      continue;
+    }
+    out[key] = value;
+  }
+
+  if (lineHeight !== undefined) {
+    out.lineHeight =
+      typeof lineHeight === "number" ? `${lineHeight}px` : lineHeight;
+  }
+  if (
+    (flat.borderWidth !== undefined || flat.borderColor !== undefined) &&
+    flat.borderStyle === undefined
+  ) {
+    out.borderStyle = "solid";
+  }
+
+  return out as CSSProperties;
+};
diff --git a/libraries/paywalls/src/tree-renderer/react-reconciler.d.ts b/libraries/paywalls/src/tree-renderer/react-reconciler.d.ts
new file mode 100644
index 000000000..579237b03
--- /dev/null
+++ b/libraries/paywalls/src/tree-renderer/react-reconciler.d.ts
@@ -0,0 +1,53 @@
+/**
+ * Minimal ambient typings for `react-reconciler` (the package ships untyped
+ * and DefinitelyTyped lags behind the React 19 line). Only the surface used by
+ * the tree renderer is declared.
+ */
+declare module "react-reconciler" {
+  import type { ReactNode } from "react";
+
+  /** Opaque fiber root handle. */
+  export type OpaqueRoot = unknown;
+
+  export interface ReconcilerInstance<Container> {
+    createContainer(
+      containerInfo: Container,
+      tag: number,
+      hydrationCallbacks: null,
+      isStrictMode: boolean,
+      concurrentUpdatesByDefaultOverride: boolean | null,
+      identifierPrefix: string,
+      onUncaughtError: (error: unknown, errorInfo?: unknown) => void,
+      onCaughtError: (error: unknown, errorInfo?: unknown) => void,
+      onRecoverableError: (error: unknown, errorInfo?: unknown) => void,
+      transitionCallbacks: null,
+    ): OpaqueRoot;
+    updateContainer(
+      element: ReactNode,
+      container: OpaqueRoot,
+      parentComponent?: unknown,
+      callback?: (() => void) | null,
+    ): number;
+    flushPassiveEffects(): boolean;
+  }
+
+  /**
+   * Structural host config: the renderer passes a superset of what any given
+   * reconciler minor consumes, so unknown members are tolerated.
+   */
+  export type HostConfig = Record<string, unknown>;
+
+  export default function createReconciler<Container>(
+    config: HostConfig,
+  ): ReconcilerInstance<Container>;
+}
+
+declare module "react-reconciler/constants.js" {
+  export const LegacyRoot: number;
+  export const ConcurrentRoot: number;
+  export const NoEventPriority: number;
+  export const DiscreteEventPriority: number;
+  export const ContinuousEventPriority: number;
+  export const DefaultEventPriority: number;
+  export const IdleEventPriority: number;
+}
diff --git a/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
new file mode 100644
index 000000000..81ac0b034
--- /dev/null
+++ b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
@@ -0,0 +1,434 @@
+/**
+ * Renders a React element to a §3 preview node tree using a custom
+ * `react-reconciler` host. Node-only: the CLI runs this at build time to emit
+ * `previews/<state>.json` artifacts. Components may use hooks (including the
+ * paywall runtime hooks — the element is wrapped in a `PaywallRuntimeProvider`
+ * fed from the supplied fixtures).
+ */
+import { Component, createElement, type ReactNode } from "react";
+import createReconciler from "react-reconciler";
+// The explicit ".js" matters: react-reconciler has no `exports` map, so Node
+// ESM resolution of the bare "react-reconciler/constants" specifier fails.
+import {
+  ConcurrentRoot,
+  DefaultEventPriority,
+} from "react-reconciler/constants.js";
+
+import { RendererProvider } from "../primitives/host-context";
+import type { PaywallBridge } from "../runtime/bridge";
+import {
+  normalizeRuntimeConfig,
+  type PaywallRuntimeConfig,
+} from "../runtime/config";
+import { PaywallRuntimeProvider } from "../runtime/runtime";
+import {
+  PAYWALL_TREE_VERSION,
+  type PaywallNode,
+  type PaywallNodeResizeMode,
+  type PaywallNodeTree,
+} from "../schema/node-tree";
+import {
+  PAYWALL_STYLE_KEYS,
+  type PaywallStyle,
+  type StyleProp,
+} from "../schema/style";
+import { flattenStyle } from "../style/resolve";
+import { TREE_ELEMENT_TYPES, treeHostComponents } from "./tree-host";
+
+// ── Instance model ───────────────────────────────────────────────────────────
+
+interface TreeElementInstance {
+  readonly tag: "element";
+  readonly type: string;
+  props: Record<string, unknown>;
+  children: TreeChild[];
+}
+
+interface TreeTextInstance {
+  readonly tag: "text";
+  text: string;
+}
+
+type TreeChild = TreeElementInstance | TreeTextInstance;
+
+interface TreeContainer {
+  children: TreeChild[];
+}
+
+// ── Host config ──────────────────────────────────────────────────────────────
+
+const removeFrom = (list: TreeChild[], child: TreeChild): void => {
+  const index = list.indexOf(child);
+  if (index >= 0) {
+    list.splice(index, 1);
+  }
+};
+
+const insertInto = (
+  list: TreeChild[],
+  child: TreeChild,
+  before: TreeChild,
+): void => {
+  removeFrom(list, child);
+  const index = list.indexOf(before);
+  list.splice(index < 0 ? list.length : index, 0, child);
+};
+
+const noop = (): void => {
+  // intentionally empty
+};
+
+// React 19 asserts the host context is non-null ("Expected host context to
+// exist"), so a shared sentinel object stands in for the unused context.
+const HOST_CONTEXT: Record<string, never> = {};
+
+let currentUpdatePriority = 0;
+
+const reconciler = createReconciler<TreeContainer>({
+  supportsMutation: true,
+  supportsPersistence: false,
+  supportsHydration: false,
+  isPrimaryRenderer: true,
+  warnsIfNotActing: false,
+  noTimeout: -1,
+  scheduleTimeout: setTimeout,
+  cancelTimeout: clearTimeout,
+  supportsMicrotasks: true,
+  scheduleMicrotask: queueMicrotask,
+
+  createInstance: (
+    type: string,
+    props: Record<string, unknown>,
+  ): TreeElementInstance => ({
+    tag: "element",
+    type,
+    props,
+    children: [],
+  }),
+  createTextInstance: (text: string): TreeTextInstance => ({
+    tag: "text",
+    text,
+  }),
+  shouldSetTextContent: () => false,
+  finalizeInitialChildren: () => false,
+  getRootHostContext: () => HOST_CONTEXT,
+  getChildHostContext: (parentContext: unknown) => parentContext,
+  getPublicInstance: (instance: TreeChild) => instance,
+
+  appendInitialChild: (parent: TreeElementInstance, child: TreeChild) => {
+    parent.children.push(child);
+  },
+  appendChild: (parent: TreeElementInstance, child: TreeChild) => {
+    parent.children.push(child);
+  },
+  appendChildToContainer: (container: TreeContainer, child: TreeChild) => {
+    container.children.push(child);
+  },
+  insertBefore: (
+    parent: TreeElementInstance,
+    child: TreeChild,
+    before: TreeChild,
+  ) => {
+    insertInto(parent.children, child, before);
+  },
+  insertInContainerBefore: (
+    container: TreeContainer,
+    child: TreeChild,
+    before: TreeChild,
+  ) => {
+    insertInto(container.children, child, before);
+  },
+  removeChild: (parent: TreeElementInstance, child: TreeChild) => {
+    removeFrom(parent.children, child);
+  },
+  removeChildFromContainer: (container: TreeContainer, child: TreeChild) => {
+    removeFrom(container.children, child);
+  },
+  clearContainer: (container: TreeContainer) => {
+    container.children = [];
+  },
+  commitUpdate: (
+    instance: TreeElementInstance,
+    _type: string,
+    _prevProps: Record<string, unknown>,
+    nextProps: Record<string, unknown>,
+  ) => {
+    instance.props = nextProps;
+  },
+  commitTextUpdate: (
+    instance: TreeTextInstance,
+    _oldText: string,
+    newText: string,
+  ) => {
+    instance.text = newText;
+  },
+  resetTextContent: noop,
+
+  prepareForCommit: () => null,
+  resetAfterCommit: noop,
+  preparePortalMount: noop,
+  hideInstance: noop,
+  unhideInstance: noop,
+  hideTextInstance: noop,
+  unhideTextInstance: noop,
+  detachDeletedInstance: noop,
+  commitMount: noop,
+  getInstanceFromNode: () => null,
+  getInstanceFromScope: () => null,
+  prepareScopeUpdate: noop,
+  beforeActiveInstanceBlur: noop,
+  afterActiveInstanceBlur: noop,
+
+  // Priority plumbing (React 19 host-config surface).
+  setCurrentUpdatePriority: (priority: number) => {
+    currentUpdatePriority = priority;
+  },
+  getCurrentUpdatePriority: () => currentUpdatePriority,
+  resolveUpdatePriority: () =>
+    currentUpdatePriority !== 0 ? currentUpdatePriority : DefaultEventPriority,
+  getCurrentEventPriority: () => DefaultEventPriority,
+  shouldAttemptEagerTransition: () => false,
+  requestPostPaintCallback: noop,
+  trackSchedulerEvent: noop,
+  resolveEventType: () => null,
+  resolveEventTimeStamp: () => -1.1,
+
+  // Suspense-y commit hooks (unused, but required by newer reconcilers).
+  maySuspendCommit: () => false,
+  preloadInstance: () => true,
+  startSuspendingCommit: noop,
+  suspendInstance: noop,
+  waitForCommitToBeReady: () => null,
+  NotPendingTransition: null,
+  resetFormInstance: noop,
+});
+
+// ── Serialization ────────────────────────────────────────────────────────────
+
+const ALLOWED_STYLE_KEYS = new Set<string>(PAYWALL_STYLE_KEYS);
+
+const sanitizeStyle = (style: unknown): PaywallStyle => {
+  const flat = flattenStyle(style as StyleProp);
+  const out: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(flat)) {
+    if (value !== undefined && value !== null && ALLOWED_STYLE_KEYS.has(key)) {
+      out[key] = value;
+    }
+  }
+  return out as PaywallStyle;
+};
+
+const collectText = (children: ReadonlyArray<TreeChild>): string => {
+  let text = "";
+  for (const child of children) {
+    if (child.tag === "text") {
+      text += child.text;
+    } else if (child.type === TREE_ELEMENT_TYPES.text) {
+      text += collectText(child.children);
+    }
+  }
+  return text;
+};
+
+const RESIZE_MODES: ReadonlyArray<PaywallNodeResizeMode> = [
+  "cover",
+  "contain",
+  "stretch",
+  "center",
+];
+
+const serializeChildren = (children: ReadonlyArray<TreeChild>): PaywallNode[] =>
+  children.map(serializeChild);
+
+const serializeChild = (child: TreeChild): PaywallNode => {
+  if (child.tag === "text") {
+    // Bare text outside a <Text> wrapper still becomes a legal §3 text node.
+    return { type: "text", style: {}, text: child.text };
+  }
+  const style = sanitizeStyle(child.props.style);
+  switch (child.type) {
+    case TREE_ELEMENT_TYPES.view:
+      return {
+        type: "view",
+        style,
+        children: serializeChildren(child.children),
+      };
+    case TREE_ELEMENT_TYPES.pressable: {
+      const action = child.props.action;
+      return {
+        type: "pressable",
+        style,
+        children: serializeChildren(child.children),
+        ...(typeof action === "string" ? { action } : {}),
+      };
+    }
+    case TREE_ELEMENT_TYPES.scroll:
+      return {
+        type: "scroll",
+        style,
+        children: serializeChildren(child.children),
+      };
+    case TREE_ELEMENT_TYPES.text:
+      return { type: "text", style, text: collectText(child.children) };
+    case TREE_ELEMENT_TYPES.image: {
+      const resizeMode = child.props.resizeMode as
+        | PaywallNodeResizeMode
+        | undefined;
+      return {
+        type: "image",
+        style,
+        src: typeof child.props.src === "string" ? child.props.src : "",
+        ...(resizeMode && RESIZE_MODES.includes(resizeMode)
+          ? { resizeMode }
+          : {}),
+      };
+    }
+    case TREE_ELEMENT_TYPES.slot:
+      return { type: "slot" };
+    case TREE_ELEMENT_TYPES.placeholder:
+      return {
+        type: "placeholder",
+        reason: String(child.props.reason ?? "unknown"),
+      };
+    default:
+      // A non-paywall element reached the renderer (e.g. a raw DOM tag).
+      return {
+        type: "placeholder",
+        reason: `unsupported element type "${child.type}"`,
+      };
+  }
+};
+
+const serializeRoot = (container: TreeContainer): PaywallNode => {
+  const nodes = serializeChildren(container.children);
+  if (nodes.length === 0) {
+    return { type: "placeholder", reason: "render returned null" };
+  }
+  if (nodes.length === 1) {
+    return nodes[0] as PaywallNode;
+  }
+  // Multiple top-level nodes (a fragment root) get an implicit view wrapper so
+  // the tree keeps a single root.
+  return { type: "view", style: {}, children: nodes };
+};
+
+// ── Error capture ────────────────────────────────────────────────────────────
+
+const describeError = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+interface TreeErrorBoundaryProps {
+  children: ReactNode;
+}
+
+interface TreeErrorBoundaryState {
+  error: unknown;
+  failed: boolean;
+}
+
+/** Converts a throwing render into a §3 placeholder node. */
+class TreeErrorBoundary extends Component<
+  TreeErrorBoundaryProps,
+  TreeErrorBoundaryState
+> {
+  state: TreeErrorBoundaryState = { error: null, failed: false };
+
+  static getDerivedStateFromError(error: unknown): TreeErrorBoundaryState {
+    return { error, failed: true };
+  }
+
+  render(): ReactNode {
+    if (this.state.failed) {
+      return createElement(TREE_ELEMENT_TYPES.placeholder, {
+        reason: `render threw: ${describeError(this.state.error)}`,
+      });
+    }
+    return this.props.children;
+  }
+}
+
+// ── Public API ───────────────────────────────────────────────────────────────
+
+const silentBridge: PaywallBridge = {
+  post: noop,
+  subscribe: () => noop,
+};
+
+export interface RenderToNodeTreeOptions {
+  /** Fixture products/variables the rendered components read. */
+  config?: Partial<PaywallRuntimeConfig>;
+  /** Preview state name recorded in the tree. Defaults to `"default"`. */
+  state?: string;
+}
+
+/**
+ * Renders `element` to a §3 preview node tree. The element is mounted with the
+ * tree host components and a fixture-fed paywall runtime, committed, allowed
+ * one effect pass (so hook-driven state settles), serialized, and unmounted.
+ *
+ * A render that throws yields a `{ type: "placeholder" }` root carrying the
+ * error message; a render that produces nothing yields a placeholder with
+ * reason `"render returned null"`.
+ */
+export const renderToNodeTree = async (
+  element: ReactNode,
+  options: RenderToNodeTreeOptions = {},
+): Promise<PaywallNodeTree> => {
+  const container: TreeContainer = { children: [] };
+  let uncaught: unknown;
+  let sawUncaught = false;
+
+  const root = reconciler.createContainer(
+    container,
+    ConcurrentRoot,
+    null,
+    false,
+    null,
+    "vh",
+    (error: unknown) => {
+      uncaught = error;
+      sawUncaught = true;
+    },
+    noop,
+    noop,
+    null,
+  );
+
+  const wrapped = (
+    <RendererProvider host={treeHostComponents}>
+      <PaywallRuntimeProvider
+        bridge={silentBridge}
+        config={normalizeRuntimeConfig(options.config)}
+      >
+        <TreeErrorBoundary>{element}</TreeErrorBoundary>
+      </PaywallRuntimeProvider>
+    </RendererProvider>
+  );
+
+  await new Promise<void>((resolve) => {
+    reconciler.updateContainer(wrapped, root, null, () => resolve());
+  });
+  // Let passive effects (and any state updates they schedule) settle before
+  // reading the committed tree.
+  reconciler.flushPassiveEffects();
+  await new Promise<void>((resolve) => {
+    setTimeout(resolve, 0);
+  });
+
+  const tree: PaywallNodeTree = {
+    treeVersion: PAYWALL_TREE_VERSION,
+    state: options.state ?? "default",
+    root: sawUncaught
+      ? {
+          type: "placeholder",
+          reason: `render threw: ${describeError(uncaught)}`,
+        }
+      : serializeRoot(container),
+  };
+
+  await new Promise<void>((resolve) => {
+    reconciler.updateContainer(null, root, null, () => resolve());
+  });
+
+  return tree;
+};
diff --git a/libraries/paywalls/src/tree-renderer/tree-host.ts b/libraries/paywalls/src/tree-renderer/tree-host.ts
new file mode 100644
index 000000000..3470f7409
--- /dev/null
+++ b/libraries/paywalls/src/tree-renderer/tree-host.ts
@@ -0,0 +1,95 @@
+/**
+ * Host components for the preview-tree target. Each primitive lowers to an
+ * internal intrinsic element (`vh-view`, `vh-text`, …) that the custom
+ * reconciler turns into §3 nodes. Interaction state is static: pressables
+ * render their non-pressed children, scroll views render flat.
+ */
+import { createElement, type ReactNode } from "react";
+
+import type {
+  HostComponents,
+  ImageProps,
+  PressableHostProps,
+  ScrollViewProps,
+  SlotHostProps,
+  TextProps,
+  ViewProps,
+} from "../primitives/types";
+import { resolveImageSource } from "../renderer/dom-host";
+import type { StyleProp } from "../schema/style";
+import { flattenStyle } from "../style/resolve";
+
+/** Intrinsic element names understood by the tree reconciler. */
+export const TREE_ELEMENT_TYPES = {
+  image: "vh-image",
+  placeholder: "vh-placeholder",
+  pressable: "vh-pressable",
+  scroll: "vh-scroll",
+  slot: "vh-slot",
+  text: "vh-text",
+  view: "vh-view",
+} as const;
+
+const hasStyleKeys = (style: StyleProp): boolean =>
+  Object.keys(flattenStyle(style)).length > 0;
+
+const TreeView = ({ style, children }: ViewProps): ReactNode =>
+  createElement(TREE_ELEMENT_TYPES.view, { style }, children);
+
+const TreeText = ({ style, children }: TextProps): ReactNode =>
+  createElement(TREE_ELEMENT_TYPES.text, { style }, children);
+
+const TreePressable = ({
+  style,
+  children,
+  actionName,
+}: PressableHostProps): ReactNode =>
+  createElement(
+    TREE_ELEMENT_TYPES.pressable,
+    { action: actionName, style },
+    typeof children === "function" ? children({ pressed: false }) : children,
+  );
+
+const TreeScrollView = ({
+  style,
+  contentContainerStyle,
+  horizontal,
+  children,
+}: ScrollViewProps): ReactNode =>
+  createElement(
+    TREE_ELEMENT_TYPES.scroll,
+    // §3 scroll nodes carry no `horizontal` key; the axis is expressed
+    // through the style subset instead.
+    { style: horizontal ? [{ flexDirection: "row" as const }, style] : style },
+    // RN's contentContainerStyle has no §3 equivalent — preserve it as an
+    // inner view when it actually styles something.
+    hasStyleKeys(contentContainerStyle)
+      ? createElement(
+          TREE_ELEMENT_TYPES.view,
+          { style: contentContainerStyle },
+          children,
+        )
+      : children,
+  );
+
+const TreeImage = ({ style, source, resizeMode }: ImageProps): ReactNode =>
+  createElement(TREE_ELEMENT_TYPES.image, {
+    resizeMode,
+    src: resolveImageSource(source),
+    style,
+  });
+
+const TreeSlot = ({ children }: SlotHostProps): ReactNode =>
+  // No consumer children → emit the slot marker so the editor knows where to
+  // mount its own (the author fallback is a runtime-only affordance).
+  children ?? createElement(TREE_ELEMENT_TYPES.slot);
+
+/** The preview-tree implementation of the {@link HostComponents} contract. */
+export const treeHostComponents: HostComponents = {
+  Image: TreeImage,
+  Pressable: TreePressable,
+  ScrollView: TreeScrollView,
+  Slot: TreeSlot,
+  Text: TreeText,
+  View: TreeView,
+};
diff --git a/libraries/paywalls/src/tree.ts b/libraries/paywalls/src/tree.ts
new file mode 100644
index 000000000..97d03495d
--- /dev/null
+++ b/libraries/paywalls/src/tree.ts
@@ -0,0 +1,30 @@
+/**
+ * `@voidhash/paywalls/tree` — the Node-only preview-tree renderer.
+ *
+ * Used by the CLI at build time to SSR component preview states into §3 node
+ * trees (`previews/<state>.json`). Depends on `react-reconciler`; never import
+ * this entry from browser code (the `.` and `./dom` entries stay
+ * reconciler-free).
+ */
+
+export {
+  PAYWALL_TREE_VERSION,
+  type PaywallImageNode,
+  type PaywallNode,
+  type PaywallNodeResizeMode,
+  type PaywallNodeTree,
+  type PaywallPlaceholderNode,
+  type PaywallPressableNode,
+  type PaywallScrollNode,
+  type PaywallSlotNode,
+  type PaywallTextNode,
+  type PaywallViewNode,
+} from "./schema/node-tree";
+export {
+  type RenderToNodeTreeOptions,
+  renderToNodeTree,
+} from "./tree-renderer/render-to-node-tree";
+export {
+  TREE_ELEMENT_TYPES,
+  treeHostComponents,
+} from "./tree-renderer/tree-host";
diff --git a/libraries/paywalls/tests/envelope.test.ts b/libraries/paywalls/tests/envelope.test.ts
new file mode 100644
index 000000000..b267889a9
--- /dev/null
+++ b/libraries/paywalls/tests/envelope.test.ts
@@ -0,0 +1,242 @@
+import { describe, expect, it } from "vitest";
+
+// The normative protocol implementation lives in @voidhash/react-native; the
+// round-trip below proves the envelopes this runtime emits parse cleanly with
+// the exact validator the device SDK runs.
+import { parsePaywallBridgeEnvelope } from "../../react-native/src/internal/paywall-bridge/parser";
+import {
+  createCloseEnvelope,
+  createEventEnvelope,
+  createOpenExternalEnvelope,
+  createPurchaseEnvelope,
+  createReadyEnvelope,
+  createRestoreEnvelope,
+  parseInboundEnvelope,
+  serializeEnvelope,
+} from "../src/index";
+
+describe("outbound envelopes (protocol.ts round-trip)", () => {
+  it("ready parses with the native SDK validator", () => {
+    const parsed = parsePaywallBridgeEnvelope(
+      serializeEnvelope(createReadyEnvelope()),
+    );
+    expect(parsed).toMatchObject({ version: 1, type: "ready" });
+  });
+
+  it("purchase carries productId and the requestId", () => {
+    const parsed = parsePaywallBridgeEnvelope(
+      serializeEnvelope(createPurchaseEnvelope("com.app.yearly", "req-1")),
+    );
+    expect(parsed).toMatchObject({
+      version: 1,
+      type: "purchase",
+      requestId: "req-1",
+      payload: { productId: "com.app.yearly" },
+    });
+  });
+
+  it("restore parses with an optional requestId", () => {
+    const parsed = parsePaywallBridgeEnvelope(
+      serializeEnvelope(createRestoreEnvelope("req-2")),
+    );
+    expect(parsed).toMatchObject({
+      version: 1,
+      type: "restore",
+      requestId: "req-2",
+    });
+  });
+
+  it("close parses with and without a reason", () => {
+    expect(
+      parsePaywallBridgeEnvelope(serializeEnvelope(createCloseEnvelope())),
+    ).toMatchObject({ version: 1, type: "close" });
+    expect(
+      parsePaywallBridgeEnvelope(
+        serializeEnvelope(createCloseEnvelope("user-dismissed")),
+      ),
+    ).toMatchObject({
+      version: 1,
+      type: "close",
+      payload: { reason: "user-dismissed" },
+    });
+  });
+
+  it("openExternal carries the url", () => {
+    const parsed = parsePaywallBridgeEnvelope(
+      serializeEnvelope(
+        createOpenExternalEnvelope("https://voidhash.com/terms"),
+      ),
+    );
+    expect(parsed).toMatchObject({
+      version: 1,
+      type: "openExternal",
+      payload: { url: "https://voidhash.com/terms" },
+    });
+  });
+
+  it("event matches the contract §7.2 shape and parses with the native SDK validator", () => {
+    expect(
+      JSON.parse(
+        serializeEnvelope(createEventEnvelope("cta_seen", { screen: "home" })),
+      ),
+    ).toEqual({
+      version: 1,
+      type: "event",
+      payload: { name: "cta_seen", properties: { screen: "home" } },
+    });
+    expect(JSON.parse(serializeEnvelope(createEventEnvelope("bare")))).toEqual({
+      version: 1,
+      type: "event",
+      payload: { name: "bare" },
+    });
+
+    expect(
+      parsePaywallBridgeEnvelope(
+        serializeEnvelope(createEventEnvelope("cta_seen", { screen: "home" })),
+      ),
+    ).toMatchObject({
+      version: 1,
+      type: "event",
+      payload: { name: "cta_seen", properties: { screen: "home" } },
+    });
+    expect(
+      parsePaywallBridgeEnvelope(
+        serializeEnvelope(createEventEnvelope("bare")),
+      ),
+    ).toMatchObject({ version: 1, type: "event", payload: { name: "bare" } });
+  });
+});
+
+describe("parseInboundEnvelope", () => {
+  it("decodes the native SDK's success response wire shape", () => {
+    const raw = JSON.stringify({
+      version: 1,
+      type: "response",
+      requestId: "req-1",
+      payload: {
+        action: "purchase",
+        status: "success",
+        data: { productId: "com.app.yearly" },
+      },
+    });
+    expect(parseInboundEnvelope(raw)).toEqual({
+      version: 1,
+      type: "response",
+      requestId: "req-1",
+      payload: {
+        action: "purchase",
+        status: "success",
+        data: { productId: "com.app.yearly" },
+        error: undefined,
+      },
+    });
+  });
+
+  it("decodes error responses with code and message", () => {
+    const parsed = parseInboundEnvelope(
+      JSON.stringify({
+        version: 1,
+        type: "response",
+        payload: {
+          action: "restore",
+          status: "error",
+          error: { code: "ACTION_FAILED", message: "boom" },
+        },
+      }),
+    );
+    expect(parsed).toMatchObject({
+      type: "response",
+      payload: {
+        action: "restore",
+        status: "error",
+        error: { code: "ACTION_FAILED", message: "boom" },
+      },
+    });
+  });
+
+  it("decodes status pushes", () => {
+    expect(
+      parseInboundEnvelope(
+        JSON.stringify({
+          version: 1,
+          type: "status",
+          payload: { status: "purchasing", productId: "p1" },
+        }),
+      ),
+    ).toMatchObject({
+      type: "status",
+      payload: { status: "purchasing", productId: "p1" },
+    });
+  });
+
+  it("decodes configure payloads into a normalized runtime config", () => {
+    const parsed = parseInboundEnvelope(
+      JSON.stringify({
+        version: 1,
+        type: "configure",
+        payload: {
+          products: [
+            {
+              id: "com.app.yearly",
+              slug: "yearly",
+              displayName: "Yearly",
+              priceString: "$59.99",
+            },
+          ],
+          variables: { accentColor: "#16a34a" },
+          platform: "ios",
+        },
+      }),
+    );
+    expect(parsed).toEqual({
+      version: 1,
+      type: "configure",
+      requestId: undefined,
+      payload: {
+        products: [
+          {
+            id: "com.app.yearly",
+            slug: "yearly",
+            displayName: "Yearly",
+            priceString: "$59.99",
+          },
+        ],
+        variables: { accentColor: "#16a34a" },
+        locale: undefined,
+        platform: "ios",
+        defaultSelectedProductId: undefined,
+      },
+    });
+  });
+
+  it("fills missing configure fields with empty defaults", () => {
+    const parsed = parseInboundEnvelope({
+      version: 1,
+      type: "configure",
+      payload: {},
+    });
+    expect(parsed).toMatchObject({
+      type: "configure",
+      payload: { products: [], variables: {} },
+    });
+  });
+
+  it("ignores malformed input, unknown versions and unknown actions", () => {
+    expect(parseInboundEnvelope("not json")).toBeNull();
+    expect(
+      parseInboundEnvelope(JSON.stringify({ version: 2, type: "status" })),
+    ).toBeNull();
+    expect(
+      parseInboundEnvelope(JSON.stringify({ version: 1, type: "mystery" })),
+    ).toBeNull();
+    expect(
+      parseInboundEnvelope(
+        JSON.stringify({
+          version: 1,
+          type: "status",
+          payload: { status: "??" },
+        }),
+      ),
+    ).toBeNull();
+  });
+});
diff --git a/libraries/paywalls/tests/manifest.test.tsx b/libraries/paywalls/tests/manifest.test.tsx
new file mode 100644
index 000000000..f44b76412
--- /dev/null
+++ b/libraries/paywalls/tests/manifest.test.tsx
@@ -0,0 +1,250 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  defineComponent,
+  extractComponentManifest,
+  type PaywallProduct,
+  Pressable,
+  Slot,
+  Text,
+  usePaywallProducts,
+  View,
+} from "../src/index";
+
+const yearly: PaywallProduct = {
+  id: "com.app.yearly",
+  slug: "yearly",
+  displayName: "Yearly",
+  priceString: "$59.99",
+};
+
+describe("extractComponentManifest", () => {
+  it("emits the contract §2 manifest for a full-surface component", () => {
+    const definition = defineComponent({
+      id: "product-option",
+      title: "Product Option",
+      description: "A selectable product row.",
+      props: (p) => ({
+        product: p.ref("product").label("Product"),
+        selected: p.boolean().default(false),
+        accentColor: p.string().editor("color").default("#16a34a"),
+        badge: p.component().optional(),
+        features: p.array(p.string()).optional(),
+        plan: p.select(["monthly", "yearly"]).optional(),
+      }),
+      actions: (a) => ({
+        onSelect: a.action({ productId: a.string() }),
+      }),
+      previews: {
+        default: { data: { products: [yearly] } },
+        trial: { props: { selected: true } },
+      },
+      render: ({ props, actions }) => (
+        <Pressable
+          onPress={() => actions.onSelect({ productId: props.product.id })}
+        >
+          <Text>{props.product.displayName}</Text>
+          <Slot />
+        </Pressable>
+      ),
+    });
+
+    expect(extractComponentManifest(definition)).toEqual({
+      manifestVersion: 1,
+      id: "product-option",
+      title: "Product Option",
+      description: "A selectable product row.",
+      props: {
+        product: {
+          kind: "ref",
+          refType: "product",
+          label: "Product",
+          optional: false,
+        },
+        selected: { kind: "boolean", default: false, optional: true },
+        accentColor: {
+          kind: "string",
+          editor: "color",
+          default: "#16a34a",
+          optional: true,
+        },
+        badge: { kind: "component", optional: true },
+        features: { kind: "array", item: { kind: "string" }, optional: true },
+        plan: {
+          kind: "select",
+          options: ["monthly", "yearly"],
+          optional: true,
+        },
+      },
+      actions: {
+        onSelect: { payload: { productId: { kind: "string" } } },
+      },
+      slot: true,
+      previewStates: ["default", "trial"],
+      hostData: ["products"],
+    });
+  });
+
+  it("reports slot: false and empty hostData for a plain component", () => {
+    const definition = defineComponent({
+      id: "title-block",
+      props: (p) => ({ title: p.string() }),
+      render: ({ props }) => (
+        <View>
+          <Text>{props.title}</Text>
+        </View>
+      ),
+    });
+
+    const manifest = extractComponentManifest(definition);
+    expect(manifest.slot).toBe(false);
+    expect(manifest.hostData).toEqual([]);
+    expect(manifest.actions).toEqual({});
+    expect(manifest.previewStates).toEqual(["default"]);
+    expect(manifest.title).toBeUndefined();
+  });
+
+  it("reports hostData products when a prop is ref('product')", () => {
+    const definition = defineComponent({
+      id: "with-ref",
+      props: (p) => ({ product: p.ref("product") }),
+      render: ({ props }) => <Text>{props.product.displayName}</Text>,
+    });
+    expect(extractComponentManifest(definition).hostData).toEqual(["products"]);
+  });
+
+  it("reports hostData products when a preview declares product data", () => {
+    const definition = defineComponent({
+      id: "with-preview-products",
+      previews: { default: { data: { products: [yearly] } } },
+      render: () => <View />,
+    });
+    expect(extractComponentManifest(definition).hostData).toEqual(["products"]);
+  });
+
+  it("reports hostData products when the template reads products via a runtime hook", () => {
+    const definition = defineComponent({
+      id: "with-products-hook",
+      render: () => {
+        const products = usePaywallProducts();
+        return <Text>{products.length}</Text>;
+      },
+    });
+    expect(extractComponentManifest(definition).hostData).toEqual(["products"]);
+  });
+
+  it("emits payload-less actions as empty payload objects", () => {
+    const definition = defineComponent({
+      id: "with-bare-action",
+      actions: (a) => ({ onDismiss: a.action() }),
+      render: ({ actions }) => <Pressable onPress={actions.onDismiss} />,
+    });
+    expect(extractComponentManifest(definition).actions).toEqual({
+      onDismiss: { payload: {} },
+    });
+  });
+
+  it("omits non-serializable defaults from the manifest", () => {
+    const definition = defineComponent({
+      id: "with-node-default",
+      props: (p) => ({ badge: p.component().default(<Text>hi</Text>) }),
+      render: ({ props }) => <View>{props.badge}</View>,
+    });
+    expect(extractComponentManifest(definition).props.badge).toEqual({
+      kind: "component",
+      optional: true,
+    });
+  });
+
+  it("emits the contract §2 per-kind table for every builder combination", () => {
+    const definition = defineComponent({
+      id: "per-kind",
+      props: (p) => ({
+        headline: p.string().editor("color").default("#16a34a"),
+        count: p.number().default(3),
+        highlighted: p.boolean().default(false),
+        plan: p.select(["monthly", "yearly"]).default("monthly"),
+        hero: p.image().default("https://cdn.test/hero.png"),
+        product: p.ref("product"),
+        badge: p.component(),
+        features: p.array(p.string()).default(["a", "b"]),
+      }),
+      render: () => <View />,
+    });
+
+    const manifest = extractComponentManifest(definition);
+    // Round-trip through JSON: the manifest artifact is what the server
+    // validates, so defaults must survive serialization losslessly.
+    expect(JSON.parse(JSON.stringify(manifest.props))).toEqual({
+      headline: {
+        kind: "string",
+        editor: "color",
+        default: "#16a34a",
+        optional: true,
+      },
+      count: { kind: "number", default: 3, optional: true },
+      highlighted: { kind: "boolean", default: false, optional: true },
+      plan: {
+        kind: "select",
+        options: ["monthly", "yearly"],
+        default: "monthly",
+        optional: true,
+      },
+      hero: {
+        kind: "image",
+        default: "https://cdn.test/hero.png",
+        optional: true,
+      },
+      product: { kind: "ref", refType: "product", optional: false },
+      badge: { kind: "component", optional: false },
+      features: {
+        kind: "array",
+        item: { kind: "string" },
+        default: ["a", "b"],
+        optional: true,
+      },
+    });
+  });
+
+  it("rejects p.select([]) with an error naming the component and prop", () => {
+    const definition = defineComponent({
+      id: "broken-select",
+      props: (p) => ({ plan: p.select([]) }),
+      render: () => <View />,
+    });
+    expect(() => extractComponentManifest(definition)).toThrow(
+      'Component "broken-select": prop "plan" declares p.select([])',
+    );
+  });
+
+  it("rejects p.array(p.select([])) items the same way", () => {
+    const definition = defineComponent({
+      id: "broken-array-select",
+      props: (p) => ({ plans: p.array(p.select([])) }),
+      render: () => <View />,
+    });
+    expect(() => extractComponentManifest(definition)).toThrow(
+      'Component "broken-array-select": prop "plans" declares p.select([])',
+    );
+  });
+
+  it("keeps explicit optional() and default() both consumer-optional", () => {
+    const definition = defineComponent({
+      id: "optionality",
+      props: (p) => ({
+        required: p.string(),
+        optional: p.string().optional(),
+        defaulted: p.number().default(3),
+      }),
+      render: () => <View />,
+    });
+    const manifest = extractComponentManifest(definition);
+    expect(manifest.props.required?.optional).toBe(false);
+    expect(manifest.props.optional?.optional).toBe(true);
+    expect(manifest.props.defaulted).toEqual({
+      kind: "number",
+      default: 3,
+      optional: true,
+    });
+  });
+});
diff --git a/libraries/paywalls/tests/observability.test.tsx b/libraries/paywalls/tests/observability.test.tsx
new file mode 100644
index 000000000..e385ff764
--- /dev/null
+++ b/libraries/paywalls/tests/observability.test.tsx
@@ -0,0 +1,161 @@
+/**
+ * Runtime observability: malformed inbound messages and product-less
+ * purchase() calls warn instead of silently no-oping, and a crashing paywall
+ * reports a `paywall_error` event through the bridge instead of leaving a
+ * blank WebView with no signal.
+ */
+import { useEffect } from "react";
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import {
+  type PaywallBridge,
+  type PaywallOutboundEnvelope,
+  PaywallRuntimeProvider,
+  usePaywallActions,
+} from "../src/index";
+import { PaywallErrorBoundary } from "../src/renderer/error-boundary";
+import { subscribeToInboundEnvelopes } from "../src/runtime/bridge";
+import type { PaywallInboundEnvelope } from "../src/runtime/envelope";
+import { renderToNodeTree } from "../src/tree";
+
+const collectingBridge = (
+  posted: PaywallOutboundEnvelope[],
+): PaywallBridge => ({
+  post: (envelope) => {
+    posted.push(envelope);
+  },
+  subscribe: () => () => {
+    // no inbound channel in tests
+  },
+});
+
+interface FakeWindow {
+  addEventListener: (
+    type: string,
+    listener: (event: { data: unknown }) => void,
+  ) => void;
+  onVoidhashNativeMessage?: (data: string) => void;
+}
+
+afterEach(() => {
+  vi.unstubAllGlobals();
+  vi.restoreAllMocks();
+});
+
+describe("inbound bridge parsing", () => {
+  it("warns when an inbound message fails to parse and keeps dispatching valid ones", () => {
+    const fakeWindow: FakeWindow = {
+      addEventListener: () => {
+        // the studio postMessage channel is not under test here
+      },
+    };
+    vi.stubGlobal("window", fakeWindow);
+    const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
+
+    const received: PaywallInboundEnvelope[] = [];
+    const unsubscribe = subscribeToInboundEnvelopes((envelope) => {
+      received.push(envelope);
+    });
+
+    // The native presenter delivers raw JSON through the installed global.
+    fakeWindow.onVoidhashNativeMessage?.("{not json");
+    expect(warnSpy).toHaveBeenCalledTimes(1);
+    expect(received).toEqual([]);
+
+    fakeWindow.onVoidhashNativeMessage?.(
+      JSON.stringify({ version: 99, type: "configure", payload: {} }),
+    );
+    expect(warnSpy).toHaveBeenCalledTimes(2);
+    expect(received).toEqual([]);
+
+    fakeWindow.onVoidhashNativeMessage?.(
+      JSON.stringify({
+        version: 1,
+        type: "status",
+        payload: { status: "purchasing" },
+      }),
+    );
+    expect(warnSpy).toHaveBeenCalledTimes(2);
+    expect(received).toHaveLength(1);
+
+    unsubscribe();
+  });
+});
+
+describe("purchase() without a product", () => {
+  it("warns and posts no purchase envelope", async () => {
+    const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
+    const posted: PaywallOutboundEnvelope[] = [];
+
+    const Trigger = () => {
+      const actions = usePaywallActions();
+      useEffect(() => {
+        actions.purchase();
+      }, [actions]);
+      return null;
+    };
+
+    await renderToNodeTree(
+      <PaywallRuntimeProvider
+        bridge={collectingBridge(posted)}
+        config={{ products: [], variables: {} }}
+      >
+        <Trigger />
+      </PaywallRuntimeProvider>,
+    );
+
+    expect(warnSpy).toHaveBeenCalledWith(
+      expect.stringContaining("purchase() called with no selected"),
+    );
+    expect(posted.filter((envelope) => envelope.type === "purchase")).toEqual(
+      [],
+    );
+  });
+});
+
+describe("PaywallErrorBoundary", () => {
+  it("console.errors, posts a paywall_error event and renders null on a crash", async () => {
+    const errorSpy = vi.spyOn(console, "error").mockImplementation(() => {});
+    const posted: PaywallOutboundEnvelope[] = [];
+
+    const Thrower = (): null => {
+      throw new Error("boom from paywall");
+    };
+
+    const tree = await renderToNodeTree(
+      <PaywallErrorBoundary post={(envelope) => posted.push(envelope)}>
+        <Thrower />
+      </PaywallErrorBoundary>,
+    );
+
+    expect(errorSpy).toHaveBeenCalled();
+    const events = posted.filter((envelope) => envelope.type === "event");
+    expect(events).toEqual([
+      {
+        version: 1,
+        type: "event",
+        payload: {
+          name: "paywall_error",
+          properties: { message: "boom from paywall" },
+        },
+      },
+    ]);
+    // The boundary renders null, so the serialized root is the legitimate
+    // "render returned null" placeholder — not a crashed reconciler.
+    expect(tree.root).toEqual({
+      type: "placeholder",
+      reason: "render returned null",
+    });
+  });
+
+  it("renders its children when nothing throws", async () => {
+    const posted: PaywallOutboundEnvelope[] = [];
+    const tree = await renderToNodeTree(
+      <PaywallErrorBoundary post={(envelope) => posted.push(envelope)}>
+        {null}
+      </PaywallErrorBoundary>,
+    );
+    expect(posted).toEqual([]);
+    expect(tree.root.type).toBe("placeholder");
+  });
+});
diff --git a/libraries/paywalls/tests/render.test.tsx b/libraries/paywalls/tests/render.test.tsx
new file mode 100644
index 000000000..d6e1ab44b
--- /dev/null
+++ b/libraries/paywalls/tests/render.test.tsx
@@ -0,0 +1,147 @@
+import { renderToStaticMarkup } from "react-dom/server";
+import { describe, expect, it } from "vitest";
+
+import {
+  createPaywall,
+  defineComponent,
+  type PaywallBridge,
+  type PaywallOutboundEnvelope,
+  PaywallRenderer,
+  Pressable,
+  Slot,
+  Text,
+  usePaywallProducts,
+  usePaywallVariables,
+  View,
+} from "../src/index";
+
+const Card = defineComponent({
+  id: "card",
+  props: (p) => ({
+    title: p.string().label("Title").default("Untitled"),
+  }),
+  render: ({ props }) => (
+    <View style={{ padding: 16 }}>
+      <Text>Card {props.title}</Text>
+      <Slot />
+    </View>
+  ),
+}).component;
+
+const collectingBridge = (
+  posted: PaywallOutboundEnvelope[],
+): PaywallBridge => ({
+  post: (envelope) => {
+    posted.push(envelope);
+  },
+  subscribe: () => () => {
+    // no inbound channel in tests
+  },
+});
+
+describe("DOM paywall rendering", () => {
+  it("renders primitives with the RN flex reset and resolved styles", () => {
+    const paywall = createPaywall({
+      title: "Onboarding",
+      render: (
+        <View style={{ paddingHorizontal: 24 }}>
+          <Pressable>
+            <Text>Hello World</Text>
+          </Pressable>
+        </View>
+      ),
+    });
+
+    const html = renderToStaticMarkup(<PaywallRenderer paywall={paywall} />);
+    expect(html).toContain("Hello World");
+    expect(html).toContain('role="button"');
+    expect(html).toContain("flex-direction:column");
+    expect(html).toContain("padding-left:24px");
+    expect(html).toContain("padding-right:24px");
+  });
+
+  it("fills component defaults and renders slotted children", () => {
+    const paywall = createPaywall({
+      title: "With component",
+      render: (
+        <Card>
+          <Text>Slotted child</Text>
+        </Card>
+      ),
+    });
+
+    const html = renderToStaticMarkup(<PaywallRenderer paywall={paywall} />);
+    expect(html).toContain("Card Untitled");
+    expect(html).toContain("Slotted child");
+  });
+
+  it("overrides component defaults when provided", () => {
+    const paywall = createPaywall({
+      title: "Override",
+      render: <Card title="Pro" />,
+    });
+    expect(
+      renderToStaticMarkup(<PaywallRenderer paywall={paywall} />),
+    ).toContain("Card Pro");
+  });
+
+  it("exposes runtime products and variables through hooks", () => {
+    const Body = () => {
+      const products = usePaywallProducts();
+      const variables = usePaywallVariables();
+      return (
+        <Text>
+          {products.map((product) => product.displayName).join(",")}|
+          {String(variables.accentColor)}
+        </Text>
+      );
+    };
+    const paywall = createPaywall({ title: "Hooks", render: () => <Body /> });
+
+    const html = renderToStaticMarkup(
+      <PaywallRenderer
+        config={{
+          products: [
+            {
+              id: "y",
+              slug: "yearly",
+              displayName: "Yearly",
+              priceString: "$59.99",
+            },
+          ],
+          variables: { accentColor: "#16a34a" },
+        }}
+        paywall={paywall}
+      />,
+    );
+    expect(html).toContain("Yearly|#16a34a");
+  });
+
+  it("carries paywall metadata under __voidhash", () => {
+    const paywall = createPaywall({
+      title: "Onboarding",
+      description: "Full-screen onboarding paywall.",
+      products: ["yearly", "monthly"],
+      variables: { accentColor: "#16a34a" },
+      render: <View />,
+    });
+    expect(paywall.__voidhash).toEqual({
+      kind: "paywall",
+      title: "Onboarding",
+      description: "Full-screen onboarding paywall.",
+      products: ["yearly", "monthly"],
+      variables: { accentColor: "#16a34a" },
+    });
+  });
+
+  it("accepts an injected bridge (no envelopes from a static render)", () => {
+    const posted: PaywallOutboundEnvelope[] = [];
+    const paywall = createPaywall({ title: "Bridge", render: <View /> });
+    renderToStaticMarkup(
+      <PaywallRenderer bridge={collectingBridge(posted)} paywall={paywall} />,
+    );
+    // Static SSR runs no effects, so `ready` is not announced here; the
+    // mount-time behaviour is covered by the tree renderer tests.
+    expect(posted).toEqual([]);
+  });
+});
diff --git a/libraries/paywalls/tests/style.test.ts b/libraries/paywalls/tests/style.test.ts
new file mode 100644
index 000000000..f369271ae
--- /dev/null
+++ b/libraries/paywalls/tests/style.test.ts
@@ -0,0 +1,140 @@
+import { describe, expect, it } from "vitest";
+
+import { flattenStyle, resolveStyle } from "../src/index";
+
+describe("flattenStyle", () => {
+  it("returns an empty object for falsy input", () => {
+    expect(flattenStyle(undefined)).toEqual({});
+    expect(flattenStyle(null)).toEqual({});
+    expect(flattenStyle(false)).toEqual({});
+  });
+
+  it("flattens nested arrays with later entries winning", () => {
+    expect(
+      flattenStyle([
+        { padding: 4, opacity: 1 },
+        [{ padding: 8 }, false, [{ opacity: 0.5 }]],
+        null,
+      ]),
+    ).toEqual({ padding: 8, opacity: 0.5 });
+  });
+
+  it("supports the conditional-entry idiom", () => {
+    const selected = false;
+    expect(
+      flattenStyle([{ borderWidth: 1 }, selected && { borderWidth: 2 }]),
+    ).toEqual({ borderWidth: 1 });
+  });
+});
+
+describe("resolveStyle", () => {
+  it("expands paddingHorizontal/Vertical into physical edges", () => {
+    expect(resolveStyle({ paddingHorizontal: 16, paddingVertical: 8 })).toEqual(
+      {
+        paddingLeft: 16,
+        paddingRight: 16,
+        paddingTop: 8,
+        paddingBottom: 8,
+      },
+    );
+  });
+
+  it("expands marginHorizontal/Vertical into physical edges", () => {
+    expect(resolveStyle({ marginHorizontal: 12, marginVertical: 6 })).toEqual({
+      marginLeft: 12,
+      marginRight: 12,
+      marginTop: 6,
+      marginBottom: 6,
+    });
+  });
+
+  it("lets explicit physical edges win over shorthands", () => {
+    expect(resolveStyle({ paddingHorizontal: 16, paddingLeft: 4 })).toEqual({
+      paddingLeft: 4,
+      paddingRight: 16,
+    });
+  });
+
+  it("expands shorthands provided across array entries", () => {
+    expect(
+      resolveStyle([{ paddingHorizontal: 16 }, { paddingRight: 2 }]),
+    ).toEqual({ paddingLeft: 16, paddingRight: 2 });
+  });
+
+  it("converts numeric lineHeight to pixels (RN semantics)", () => {
+    expect(resolveStyle({ lineHeight: 20 })).toEqual({ lineHeight: "20px" });
+    expect(resolveStyle({ lineHeight: "1.5em" })).toEqual({
+      lineHeight: "1.5em",
+    });
+  });
+
+  it("defaults borderStyle to solid when a border is set without one", () => {
+    expect(resolveStyle({ borderWidth: 2, borderColor: "#fff" })).toEqual({
+      borderWidth: 2,
+      borderColor: "#fff",
+      borderStyle: "solid",
+    });
+    expect(resolveStyle({ borderWidth: 2, borderStyle: "dashed" })).toEqual({
+      borderWidth: 2,
+      borderStyle: "dashed",
+    });
+  });
+
+  it("passes the remaining subset through untouched", () => {
+    expect(
+      resolveStyle({ flexDirection: "row", gap: 8, backgroundColor: "#000" }),
+    ).toEqual({ flexDirection: "row", gap: 8, backgroundColor: "#000" });
+  });
+
+  // RN gives longhands precedence within one object regardless of key order;
+  // on the DOM a CSS shorthand committed later resets its longhands. The
+  // resolver must therefore emit shorthands first.
+  it("emits padding before an earlier-declared paddingLeft", () => {
+    const resolved = resolveStyle({ paddingLeft: 8, padding: 16 });
+    expect(resolved).toEqual({ padding: 16, paddingLeft: 8 });
+    expect(Object.keys(resolved)).toEqual(["padding", "paddingLeft"]);
+  });
+
+  it("emits borderRadius before an earlier-declared corner radius", () => {
+    const resolved = resolveStyle({ borderTopLeftRadius: 4, borderRadius: 8 });
+    expect(resolved).toEqual({ borderRadius: 8, borderTopLeftRadius: 4 });
+    expect(Object.keys(resolved)).toEqual([
+      "borderRadius",
+      "borderTopLeftRadius",
+    ]);
+  });
+
+  it("keeps an explicit corner winning when the shorthand arrives in a later array entry", () => {
+    const resolved = resolveStyle([
+      { borderTopLeftRadius: 4 },
+      { borderRadius: 8 },
+    ]);
+    expect(resolved).toEqual({ borderRadius: 8, borderTopLeftRadius: 4 });
+    expect(Object.keys(resolved)).toEqual([
+      "borderRadius",
+      "borderTopLeftRadius",
+    ]);
+  });
+
+  it("emits gap before rowGap/columnGap and flex before its longhands", () => {
+    expect(Object.keys(resolveStyle({ rowGap: 4, gap: 8 }))).toEqual([
+      "gap",
+      "rowGap",
+    ]);
+    expect(Object.keys(resolveStyle({ flexGrow: 2, flex: 1 }))).toEqual([
+      "flex",
+      "flexGrow",
+    ]);
+  });
+
+  it("emits Horizontal/Vertical expansions after the plain shorthand", () => {
+    expect(
+      Object.keys(resolveStyle({ paddingHorizontal: 8, padding: 16 })),
+    ).toEqual(["padding", "paddingLeft", "paddingRight"]);
+    expect(resolveStyle({ paddingHorizontal: 8, padding: 16 })).toEqual({
+      padding: 16,
+      paddingLeft: 8,
+      paddingRight: 8,
+    });
+  });
+});
diff --git a/libraries/paywalls/tests/tree.test.tsx b/libraries/paywalls/tests/tree.test.tsx
new file mode 100644
index 000000000..bc33d3168
--- /dev/null
+++ b/libraries/paywalls/tests/tree.test.tsx
@@ -0,0 +1,256 @@
+// NOTE: requires the `react-reconciler` dependency to be installed.
+import { useState } from "react";
+import { describe, expect, it } from "vitest";
+
+import {
+  defineComponent,
+  Image,
+  type PaywallProduct,
+  Pressable,
+  ScrollView,
+  Slot,
+  Text,
+  usePaywallProducts,
+  useSelectedProduct,
+  View,
+} from "../src/index";
+import { renderToNodeTree } from "../src/tree";
+
+const yearly: PaywallProduct = {
+  id: "com.app.yearly",
+  slug: "yearly",
+  displayName: "Yearly",
+  priceString: "$59.99",
+};
+
+const monthly: PaywallProduct = {
+  id: "com.app.monthly",
+  slug: "monthly",
+  displayName: "Monthly",
+  priceString: "$9.99",
+};
+
+describe("renderToNodeTree", () => {
+  it("serializes primitives to §3 nodes with the style subset intact", async () => {
+    const tree = await renderToNodeTree(
+      <View style={{ flexDirection: "row", padding: 16 }}>
+        <Text style={{ color: "#fff" }}>Yearly</Text>
+        <Image
+          resizeMode="cover"
+          source="https://cdn.test/hero.png"
+          style={{}}
+        />
+      </View>,
+    );
+
+    expect(tree).toEqual({
+      treeVersion: 1,
+      state: "default",
+      root: {
+        type: "view",
+        style: { flexDirection: "row", padding: 16 },
+        children: [
+          { type: "text", style: { color: "#fff" }, text: "Yearly" },
+          {
+            type: "image",
+            style: {},
+            src: "https://cdn.test/hero.png",
+            resizeMode: "cover",
+          },
+        ],
+      },
+    });
+  });
+
+  it("keeps paddingHorizontal/Vertical shorthands (allowed by §3.1)", async () => {
+    const tree = await renderToNodeTree(
+      <View style={[{ paddingHorizontal: 24 }, { marginVertical: 8 }]} />,
+    );
+    expect(tree.root).toEqual({
+      type: "view",
+      style: { paddingHorizontal: 24, marginVertical: 8 },
+      children: [],
+    });
+  });
+
+  it("renders components that use hooks and conditionals", async () => {
+    const Body = () => {
+      const products = usePaywallProducts();
+      const { selectedProductId } = useSelectedProduct();
+      const [note] = useState("from-state");
+      return (
+        <View>
+          {products.map((product) => (
+            <Text key={product.id}>
+              {product.id === selectedProductId ? "*" : ""}
+              {product.displayName}
+            </Text>
+          ))}
+          {products.length === 0 ? <Text>Empty</Text> : null}
+          <Text>{note}</Text>
+        </View>
+      );
+    };
+
+    const tree = await renderToNodeTree(<Body />, {
+      config: {
+        products: [yearly, monthly],
+        defaultSelectedProductId: monthly.id,
+      },
+      state: "trial",
+    });
+
+    expect(tree.state).toBe("trial");
+    expect(tree.root).toEqual({
+      type: "view",
+      style: {},
+      children: [
+        { type: "text", style: {}, text: "Yearly" },
+        { type: "text", style: {}, text: "*Monthly" },
+        { type: "text", style: {}, text: "from-state" },
+      ],
+    });
+  });
+
+  it("emits a slot marker for an empty Slot in a component preview", async () => {
+    const definition = defineComponent({
+      id: "card",
+      props: (p) => ({ title: p.string().default("Untitled") }),
+      render: ({ props }) => (
+        <View>
+          <Text>{props.title}</Text>
+          <Slot />
+        </View>
+      ),
+    });
+    const Card = definition.component;
+
+    const tree = await renderToNodeTree(<Card />);
+    expect(tree.root).toEqual({
+      type: "view",
+      style: {},
+      children: [
+        { type: "text", style: {}, text: "Untitled" },
+        { type: "slot" },
+      ],
+    });
+  });
+
+  it("renders consumer children in place of the slot marker", async () => {
+    const definition = defineComponent({
+      id: "card",
+      render: () => (
+        <View>
+          <Slot />
+        </View>
+      ),
+    });
+    const Card = definition.component;
+
+    const tree = await renderToNodeTree(
+      <Card>
+        <Text>child</Text>
+      </Card>,
+    );
+    expect(tree.root).toEqual({
+      type: "view",
+      style: {},
+      children: [{ type: "text", style: {}, text: "child" }],
+    });
+  });
+
+  it("records the action name on pressables bound to declared actions", async () => {
+    const definition = defineComponent({
+      id: "selectable",
+      actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
+      render: ({ actions }) => (
+        <View>
+          <Pressable onPress={actions.onSelect}>
+            <Text>direct</Text>
+          </Pressable>
+          <Pressable onPress={() => actions.onSelect({ productId: "x" })}>
+            <Text>wrapped</Text>
+          </Pressable>
+        </View>
+      ),
+    });
+    const Selectable = definition.component;
+
+    const tree = await renderToNodeTree(<Selectable />);
+    expect(tree.root).toMatchObject({
+      type: "view",
+      children: [
+        { type: "pressable", action: "onSelect" },
+        { type: "pressable" },
+      ],
+    });
+    if (tree.root.type !== "view") {
+      throw new Error("expected a view root");
+    }
+    expect(tree.root.children[1]).not.toHaveProperty("action");
+  });
+
+  it("serializes scroll views and preserves contentContainerStyle as a view", async () => {
+    const tree = await renderToNodeTree(
+      <ScrollView contentContainerStyle={{ gap: 8 }} horizontal>
+        <Text>a</Text>
+      </ScrollView>,
+    );
+    expect(tree.root).toEqual({
+      type: "scroll",
+      style: { flexDirection: "row" },
+      children: [
+        {
+          type: "view",
+          style: { gap: 8 },
+          children: [{ type: "text", style: {}, text: "a" }],
+        },
+      ],
+    });
+  });
+
+  it("produces a placeholder when the render throws", async () => {
+    const Boom = (): never => {
+      throw new Error("kaboom");
+    };
+    const tree = await renderToNodeTree(<Boom />);
+    expect(tree.root).toEqual({
+      type: "placeholder",
+      reason: "render threw: kaboom",
+    });
+  });
+
+  it("produces a placeholder when the render yields null", async () => {
+    const Nothing = () => null;
+    const tree = await renderToNodeTree(<Nothing />);
+    expect(tree.root).toEqual({
+      type: "placeholder",
+      reason: "render returned null",
+    });
+  });
+
+  it("replaces non-paywall elements with diagnostic placeholders", async () => {
+    const tree = await renderToNodeTree(<div>raw</div>);
+    expect(tree.root).toEqual({
+      type: "placeholder",
+      reason: 'unsupported element type "div"',
+    });
+  });
+
+  it("wraps multi-node roots in an implicit view", async () => {
+    const tree = await renderToNodeTree(
+      <>
+        <Text>a</Text>
+        <Text>b</Text>
+      </>,
+    );
+    expect(tree.root).toEqual({
+      type: "view",
+      style: {},
+      children: [
+        { type: "text", style: {}, text: "a" },
+        { type: "text", style: {}, text: "b" },
+      ],
+    });
+  });
+});
diff --git a/libraries/paywalls/tests/types.test.ts b/libraries/paywalls/tests/types.test.ts
new file mode 100644
index 000000000..dcd573119
--- /dev/null
+++ b/libraries/paywalls/tests/types.test.ts
@@ -0,0 +1,156 @@
+/**
+ * Type-level assertions for the authoring API. These run as a normal vitest
+ * file but the value is in compilation: `expectTypeOf` failures break
+ * `typecheck`.
+ */
+import type { ReactNode } from "react";
+import { describe, expectTypeOf, it } from "vitest";
+import { actionFactory } from "../src/authoring/actions";
+import { propFactory } from "../src/authoring/props";
+import {
+  defineComponent,
+  type InferActions,
+  type InferComponentProps,
+  type InferExternalProps,
+  type InferProps,
+  type PAYWALL_STYLE_KEYS,
+  type PaywallProduct,
+  type PaywallStyle,
+} from "../src/index";
+
+const p = propFactory;
+const a = actionFactory;
+
+const propMap = {
+  required: p.string(),
+  optional: p.number().optional(),
+  defaulted: p.boolean().default(true),
+  optionalDefaulted: p.string().optional().default("x"),
+  plan: p.select(["monthly", "yearly"]),
+  product: p.ref("product"),
+  badge: p.component().optional(),
+  features: p.array(p.string()),
+};
+
+const actionMap = {
+  onSelect: a.action({ productId: a.string(), index: a.number() }),
+  onDismiss: a.action(),
+};
+
+type Props = InferProps<typeof propMap>;
+type External = InferExternalProps<typeof propMap>;
+type Actions = InferActions<typeof actionMap>;
+type ComponentProps = InferComponentProps<typeof propMap, typeof actionMap>;
+
+describe("PropBuilder.editor() (contract §2: string props only)", () => {
+  it("is callable on string builders and uncallable on every other kind", () => {
+    // Chaining keeps working in either order on strings.
+    expectTypeOf(p.string().editor("color").default("#16a34a")).not.toBeNever();
+    expectTypeOf(p.string().label("Accent").editor("color")).not.toBeNever();
+
+    // @ts-expect-error editor() is a string-only UI hint
+    p.number().editor("color");
+    // @ts-expect-error editor() is a string-only UI hint
+    p.boolean().editor("color");
+    // @ts-expect-error editor() is a string-only UI hint
+    p.select(["a", "b"]).editor("color");
+    // @ts-expect-error editor() is a string-only UI hint
+    p.image().editor("color");
+    // @ts-expect-error editor() is a string-only UI hint
+    p.ref("product").editor("color");
+    // @ts-expect-error editor() is a string-only UI hint
+    p.component().editor("color");
+    // @ts-expect-error editor() is a string-only UI hint
+    p.array(p.string()).editor("color");
+  });
+});
+
+describe("InferProps (template-facing)", () => {
+  it("infers value types and optionality", () => {
+    expectTypeOf<Props["required"]>().toEqualTypeOf<string>();
+    expectTypeOf<Props["optional"]>().toEqualTypeOf<number | undefined>();
+    // Defaults are always filled before the template runs.
+    expectTypeOf<Props["defaulted"]>().toEqualTypeOf<boolean>();
+    expectTypeOf<Props["optionalDefaulted"]>().toEqualTypeOf<string>();
+    expectTypeOf<Props["plan"]>().toEqualTypeOf<"monthly" | "yearly">();
+    expectTypeOf<Props["product"]>().toEqualTypeOf<PaywallProduct>();
+    expectTypeOf<Props["badge"]>().toEqualTypeOf<ReactNode | undefined>();
+    expectTypeOf<Props["features"]>().toEqualTypeOf<string[]>();
+  });
+});
+
+describe("InferExternalProps (consumer-facing)", () => {
+  it("requires undecorated props and relaxes optional()/default()", () => {
+    expectTypeOf<External>().toMatchTypeOf<{
+      required: string;
+      plan: "monthly" | "yearly";
+      product: PaywallProduct;
+      features: string[];
+    }>();
+    // .optional() and .default() props may be omitted by consumers.
+    expectTypeOf<{
+      required: string;
+      plan: "monthly" | "yearly";
+      product: PaywallProduct;
+      features: string[];
+    }>().toMatchTypeOf<External>();
+  });
+});
+
+describe("InferActions", () => {
+  it("types payloads from the declared shape", () => {
+    expectTypeOf<Actions["onSelect"]>().toEqualTypeOf<
+      (payload: { productId: string; index: number }) => void
+    >();
+    expectTypeOf<Actions["onDismiss"]>().toEqualTypeOf<() => void>();
+  });
+
+  it("exposes consumer handler props under the action names", () => {
+    expectTypeOf<ComponentProps["onSelect"]>().toEqualTypeOf<
+      ((payload: { productId: string; index: number }) => void) | undefined
+    >();
+    expectTypeOf<ComponentProps["onDismiss"]>().toEqualTypeOf<
+      (() => void) | undefined
+    >();
+    expectTypeOf<ComponentProps["children"]>().toEqualTypeOf<
+      ReactNode | undefined
+    >();
+  });
+});
+
+describe("defineComponent end-to-end typing", () => {
+  it("types the render context and the produced component", () => {
+    const definition = defineComponent({
+      id: "typed",
+      props: () => propMap,
+      actions: () => actionMap,
+      render: ({ props, actions }) => {
+        expectTypeOf(props.required).toEqualTypeOf<string>();
+        expectTypeOf(props.optional).toEqualTypeOf<number | undefined>();
+        expectTypeOf(props.defaulted).toEqualTypeOf<boolean>();
+        expectTypeOf(actions.onSelect).toEqualTypeOf<
+          (payload: { productId: string; index: number }) => void
+        >();
+        return null;
+      },
+    });
+
+    expectTypeOf(definition.component)
+      .parameter(0)
+      .toEqualTypeOf<ComponentProps>();
+  });
+});
+
+describe("PaywallStyle subset", () => {
+  it("PAYWALL_STYLE_KEYS covers every PaywallStyle key", () => {
+    type Listed = (typeof PAYWALL_STYLE_KEYS)[number];
+    expectTypeOf<Exclude<keyof PaywallStyle, Listed>>().toEqualTypeOf<never>();
+    expectTypeOf<Exclude<Listed, keyof PaywallStyle>>().toEqualTypeOf<never>();
+  });
+
+  it("rejects arbitrary CSS keys", () => {
+    // @ts-expect-error transform is not part of the §3.1 subset
+    const bad: PaywallStyle = { transform: "scale(2)" };
+    void bad;
+  });
+});
diff --git a/libraries/paywalls/tsconfig.json b/libraries/paywalls/tsconfig.json
new file mode 100644
index 000000000..c831dc0ec
--- /dev/null
+++ b/libraries/paywalls/tsconfig.json
@@ -0,0 +1,10 @@
+{
+  "extends": "../../packages/tsconfig/react-library.json",
+  "compilerOptions": {
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "rootDir": ".",
+    "jsx": "react-jsx",
+    "jsxImportSource": "react"
+  },
+  "include": ["src", "tests", "build.ts", "vitest.unit.mts"]
+}
diff --git a/libraries/paywalls/vitest.unit.mts b/libraries/paywalls/vitest.unit.mts
new file mode 100644
index 000000000..3c0d5df91
--- /dev/null
+++ b/libraries/paywalls/vitest.unit.mts
@@ -0,0 +1,12 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  esbuild: {
+    jsx: "automatic",
+    jsxImportSource: "react",
+  },
+  test: {
+    environment: "node",
+    include: ["tests/**/*.test.{ts,tsx}"],
+  },
+});
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index ccd0b2b4d..cedca626f 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -3,17 +3,25 @@ import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { AnalyticsService } from "./core/analytics/service";
 import type { AnalyticsIngestEvent } from "./core/analytics/types";
-import { currentCustomerAtom } from "./core/reactivity/client-state";
-import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
-import { CustomerInfoManager } from "./core/identity/customer-info-manager";
-import { IdentityManager } from "./core/identity/identity-manager";
 import type { SubscriptionProduct } from "./core/entities/product";
 import type { Transaction } from "./core/entities/transaction";
 import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
+import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
+import { CustomerInfoManager } from "./core/identity/customer-info-manager";
+import { IdentityManager } from "./core/identity/identity-manager";
 import { LifecycleService } from "./core/lifecycle/lifecycle-service";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
-import { PaywallService } from "./core/paywalls/paywall-service";
-import { ProductService, type ProductsBySlug } from "./core/products/product-service";
+import { buildPaywallRuntimeConfig } from "./core/paywalls/paywall-runtime-config";
+import {
+  type PaywallReleaseRuntime,
+  PaywallService,
+} from "./core/paywalls/paywall-service";
+import { PlatformProvider } from "./core/platform/platform-provider";
+import {
+  ProductService,
+  type ProductsBySlug,
+} from "./core/products/product-service";
+import { currentCustomerAtom } from "./core/reactivity/client-state";
 import type { LocationSlug } from "./core/schema/registry";
 import type { RuntimeSchema } from "./core/schema/runtime";
 import { SchemaManager } from "./core/schema/schema-manager";
@@ -71,7 +79,7 @@ const makeUnitializedClient = () => ({
               internalSchema: initOptions.internalSchema,
             }),
           ],
-          { concurrency: "unbounded" }
+          { concurrency: "unbounded" },
         );
         return yield* makeInitializedClient({ schema: runtimeSchema });
       }
@@ -90,7 +98,7 @@ const makeUnitializedClient = () => ({
             internalSchema: initOptions.internalSchema,
           }),
         ],
-        { concurrency: "unbounded" }
+        { concurrency: "unbounded" },
       );
 
       // Publish the prefetched customer so React subscribers see initial
@@ -131,6 +139,41 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           return yield* paywallService.getPaywallForLocation(locationSlug);
         }),
 
+      /**
+       * Builds the deploy-contract §7.1 runtime config for a code-release
+       * paywall: maps the release's product slugs through the native store
+       * metadata, passes variables through unchanged and stamps the current
+       * platform + locale. Slugs the store can't resolve are skipped (debug
+       * log) — an empty products list is still a valid config.
+       */
+      buildPaywallRuntimeConfig: (runtime: PaywallReleaseRuntime) =>
+        Effect.gen(function* buildRuntimeConfig() {
+          const productService = yield* ProductService;
+          const platformProvider = yield* PlatformProvider;
+
+          const productsBySlug = yield* productService.getProducts(
+            options.schema,
+          );
+
+          const skippedSlugs: string[] = [];
+          const runtimeConfig = buildPaywallRuntimeConfig({
+            runtime,
+            productsBySlug,
+            platform: platformProvider.platform,
+            locale: platformProvider.locales[0]?.languageTag,
+            onSkippedProductSlug: (slug) => skippedSlugs.push(slug),
+          });
+
+          if (skippedSlugs.length > 0) {
+            yield* Effect.logDebug(
+              "Skipping paywall products unresolved in the native store",
+              { slugs: skippedSlugs },
+            );
+          }
+
+          return runtimeConfig;
+        }),
+
       getCurrentCustomer: (forceFetch = false) =>
         Effect.gen(function* getCurrentCustomer() {
           const identityManager = yield* IdentityManager;
@@ -139,7 +182,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           const distinctId = yield* identityManager.getDistinctId();
           const customer = yield* customerInfoManager.getCustomer(
             distinctId,
-            forceFetch ? "fetch" : "fetch-while-stale"
+            forceFetch ? "fetch" : "fetch-while-stale",
           );
           // Publish to the reactive store so any subscribed React hook
           // re-renders with the latest result (whether cached or freshly
@@ -168,7 +211,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         identifyOptions: {
           email?: string;
           name?: string;
-        }
+        },
       ) =>
         Effect.gen(function* identify() {
           const identityManager = yield* IdentityManager;
@@ -182,8 +225,8 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           if (!presentCodeRedemptionSheet) {
             return yield* Effect.fail(
               new UnsupportedPlatformError(
-                "Present code redemption sheet is not supported on this platform"
-              )
+                "Present code redemption sheet is not supported on this platform",
+              ),
             );
           }
           return yield* presentCodeRedemptionSheet();
@@ -196,8 +239,8 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           if (!showManageSubscriptions) {
             return yield* Effect.fail(
               new UnsupportedPlatformError(
-                "Show manage subscriptions is not supported on this platform"
-              )
+                "Show manage subscriptions is not supported on this platform",
+              ),
             );
           }
           return yield* showManageSubscriptions();
@@ -208,7 +251,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           const transactionService = yield* TransactionService;
           return yield* transactionService.processObservedTransaction(
             transaction,
-            options.schema
+            options.schema,
           );
         }),
 
@@ -216,7 +259,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         product: SubscriptionProduct,
         _options: {
           method?: "native";
-        }
+        },
       ) =>
         Effect.gen(function* purchase() {
           const transactionService = yield* TransactionService;
@@ -233,7 +276,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         Effect.gen(function* reconcileObservedTransactions() {
           const transactionService = yield* TransactionService;
           return yield* transactionService.reconcileObservedTransactions(
-            options.schema
+            options.schema,
           );
         }),
 
@@ -251,7 +294,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         events: ReadonlyArray<{
           eventName: string;
           properties: Record<string, unknown>;
-        }>
+        }>,
       ) => analyticsService.transferEvents(events),
 
       captureAutomaticStartupEvents: () =>
@@ -261,12 +304,12 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         analyticsService.sendAnalyticsEvents(events),
 
       setupAutomaticLifecycleEvents: (
-        captureEvent: (eventName: string) => void
+        captureEvent: (eventName: string) => void,
       ) =>
         Effect.gen(function* setupAutomaticLifecycleEvents() {
           const lifecycleService = yield* LifecycleService;
           return yield* lifecycleService.setupAutomaticLifecycleEvents(
-            captureEvent
+            captureEvent,
           );
         }),
 
@@ -293,7 +336,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         }),
 
       startTransactionObserver: (
-        onPurchase?: (transaction: Transaction) => void
+        onPurchase?: (transaction: Transaction) => void,
       ) =>
         Effect.gen(function* startTransactionObserver() {
           const transactionService = yield* TransactionService;
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index a9617bfe1..5672a1856 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -1,31 +1,34 @@
-import { Cause, Effect, Exit, Layer, ManagedRuntime, pipe } from "effect";
+import { Cause, type Effect, Exit, Layer, ManagedRuntime, pipe } from "effect";
 import { FetchHttpClient } from "effect/unstable/http";
 import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { VoidhashEffectClient } from "./client-effect";
+import { AnalyticsService } from "./core/analytics/service";
 import { AsyncStorageCacheAdapter } from "./core/caching/async-storage-cache";
 import { CacheManager } from "./core/caching/cache-manager";
+import type { SubscriptionProduct } from "./core/entities/product";
+import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
 import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
 import { CustomerInfoManager } from "./core/identity/customer-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
+import { LifecycleService } from "./core/lifecycle/lifecycle-service";
+import { ReactNativeLifecycleAdapter } from "./core/lifecycle/react-native-lifecycle-adapter";
 import { ApiClient } from "./core/networking/api-client";
 import { AppStoreAdapter } from "./core/payment-adapters/app-store-adapter";
 import { GooglePlayAdapter } from "./core/payment-adapters/google-play-adapter";
-import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
-import { LifecycleService } from "./core/lifecycle/lifecycle-service";
-import { ReactNativeLifecycleAdapter } from "./core/lifecycle/react-native-lifecycle-adapter";
-import { PaywallService } from "./core/paywalls/paywall-service";
-import { type PlatformInfo } from "./core/platform/platform-provider";
+import {
+  type PaywallReleaseRuntime,
+  PaywallService,
+} from "./core/paywalls/paywall-service";
+import type { PlatformInfo } from "./core/platform/platform-provider";
 import { ReactNativePlatformProvider } from "./core/platform/react-native-platform-provider";
 import { ProductService } from "./core/products/product-service";
-import { TransactionService } from "./core/transactions/transaction-service";
 import type { LocationSlug, ProductSlug } from "./core/schema/registry";
 import type { RuntimeSchema } from "./core/schema/runtime";
 import { SchemaManager } from "./core/schema/schema-manager";
 import { SdkConfiguration } from "./core/sdk-configuration";
+import { TransactionService } from "./core/transactions/transaction-service";
 import { ReadOnlyModePurchaseNotAllowedError, VoidhashError } from "./errors";
-import { AnalyticsService } from "./core/analytics/service";
-import type { SubscriptionProduct } from "./core/entities/product";
 
 export interface VoidhashClientOptions {
   baseUrl?: string;
@@ -50,7 +53,7 @@ const CreateEffectRuntime = (
   ingestUrl: string | undefined,
   publishableKey: string,
   readOnly: boolean,
-  atomRegistry: AtomRegistry.AtomRegistry
+  atomRegistry: AtomRegistry.AtomRegistry,
 ) =>
   ManagedRuntime.make(
     pipe(
@@ -70,9 +73,11 @@ const CreateEffectRuntime = (
       Layer.provideMerge(ApiClient.Default),
       Layer.provideMerge(FetchHttpClient.layer),
       Layer.provideMerge(
-        platform === "ios" ? AppStoreAdapter : GooglePlayAdapter
+        platform === "ios" ? AppStoreAdapter : GooglePlayAdapter,
+      ),
+      Layer.provideMerge(
+        Layer.succeed(AtomRegistry.AtomRegistry, atomRegistry),
       ),
-      Layer.provideMerge(Layer.succeed(AtomRegistry.AtomRegistry, atomRegistry)),
       Layer.provideMerge(ReactNativePlatformProvider),
       Layer.provideMerge(
         Layer.succeed(SdkConfiguration, {
@@ -81,9 +86,9 @@ const CreateEffectRuntime = (
           ingestUrl,
           publishableKey,
           readOnly,
-        })
-      )
-    )
+        }),
+      ),
+    ),
   );
 
 const toErrorWithMessage = (code: string, unknownCause: unknown) => {
@@ -136,7 +141,7 @@ export class VoidhashClient {
     atomRegistry: AtomRegistry.AtomRegistry,
     platform: Exclude<PlatformInfo["platform"], "unknown">,
     debug = false,
-    internalSchema?: RuntimeSchema
+    internalSchema?: RuntimeSchema,
   ) {
     this.initialDistinctId = initialDistinctId;
     this.readOnly = readOnly;
@@ -151,7 +156,7 @@ export class VoidhashClient {
       ingestUrl,
       publishableKey,
       readOnly,
-      atomRegistry
+      atomRegistry,
     );
     this.unitializedClient = VoidhashEffectClient.makeUnitializedClient();
   }
@@ -181,20 +186,20 @@ export class VoidhashClient {
           distinctId: this.initialDistinctId ?? undefined,
           internalSchema: this.internalSchema,
         }),
-        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT"
+        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
       );
 
       await this.runEffect(
         initializedClient.startTransactionObserver((transaction) => {
           void this.effectRuntime.runPromiseExit(
-            initializedClient.processObservedTransaction(transaction)
+            initializedClient.processObservedTransaction(transaction),
           );
         }),
-        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT"
+        "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
       );
 
       void this.effectRuntime.runPromiseExit(
-        initializedClient.reconcileObservedTransactions()
+        initializedClient.reconcileObservedTransactions(),
       );
 
       this.initializedClient = initializedClient;
@@ -207,26 +212,28 @@ export class VoidhashClient {
 
       if (this.preInitAnalyticsBuffer.length > 0) {
         this.effectRuntime.runSync(
-          initializedClient.transferAnalyticsEvents(this.preInitAnalyticsBuffer)
+          initializedClient.transferAnalyticsEvents(
+            this.preInitAnalyticsBuffer,
+          ),
         );
         this.preInitAnalyticsBuffer = [];
       }
 
       await this.runEffect(
         initializedClient.captureAutomaticStartupEvents(),
-        "FAILED_TO_CAPTURE_STARTUP_EVENTS"
+        "FAILED_TO_CAPTURE_STARTUP_EVENTS",
       ).catch((error) => {
         // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
         console.warn(
           "[voidhash] failed to capture automatic startup analytics",
-          error
+          error,
         );
       });
 
       this.appLifecycleSubscription = this.effectRuntime.runSync(
         initializedClient.setupAutomaticLifecycleEvents((eventName) => {
           this.capture(eventName);
-        })
+        }),
       );
 
       this.triggerBackgroundFlush("flush analytics after init");
@@ -243,7 +250,7 @@ export class VoidhashClient {
       await this.flush();
       await this.runEffect(
         this.initializedClient!.end(),
-        "FAILED_TO_END_VOIDHASH_CLIENT"
+        "FAILED_TO_END_VOIDHASH_CLIENT",
       );
       this.appLifecycleSubscription?.remove();
       this.appLifecycleSubscription = null;
@@ -265,7 +272,7 @@ export class VoidhashClient {
     this.ensureInitialized();
     return this.runEffect(
       this.initializedClient!.getCurrentCustomer(forceFetch),
-      "FAILED_TO_GET_CURRENT_CUSTOMER"
+      "FAILED_TO_GET_CURRENT_CUSTOMER",
     );
   }
 
@@ -273,7 +280,7 @@ export class VoidhashClient {
     this.ensureInitialized();
     return this.runEffect(
       this.initializedClient!.getDistinctId(),
-      "FAILED_TO_GET_DISTINCT_ID"
+      "FAILED_TO_GET_DISTINCT_ID",
     );
   }
 
@@ -285,13 +292,13 @@ export class VoidhashClient {
     options: {
       email?: string;
       name?: string;
-    }
+    },
   ) {
     await this.runSideEffect("identify", async () => {
       this.ensureInitialized();
       await this.runEffect(
         this.initializedClient!.identify(externalUserId, options),
-        "FAILED_TO_IDENTIFY"
+        "FAILED_TO_IDENTIFY",
       );
     });
   }
@@ -317,7 +324,7 @@ export class VoidhashClient {
     this.ensureInitialized();
     return this.runEffect(
       this.initializedClient!.getFeatureFlags(flagKeys),
-      "FAILED_TO_GET_FEATURE_FLAGS"
+      "FAILED_TO_GET_FEATURE_FLAGS",
     );
   }
 
@@ -328,7 +335,21 @@ export class VoidhashClient {
     this.ensureInitialized();
     return this.runEffect(
       this.initializedClient!.getPaywallForLocation(locationSlug),
-      "FAILED_TO_GET_PAYWALL_FOR_LOCATION"
+      "FAILED_TO_GET_PAYWALL_FOR_LOCATION",
+    );
+  }
+
+  /**
+   * Builds the paywall-deploy contract §7.1 runtime config for a code-release
+   * paywall (native store product metadata, variables passthrough, platform +
+   * locale). Used by `usePaywallByLocation` to answer the bundle's `ready`
+   * event with a `configure` envelope.
+   */
+  async internal_buildPaywallRuntimeConfig(runtime: PaywallReleaseRuntime) {
+    this.ensureInitialized();
+    return this.runEffect(
+      this.initializedClient!.buildPaywallRuntimeConfig(runtime),
+      "FAILED_TO_BUILD_PAYWALL_RUNTIME_CONFIG",
     );
   }
 
@@ -342,7 +363,7 @@ export class VoidhashClient {
     this.ensureInitialized();
     return this.runEffect(
       this.initializedClient!.getProducts(),
-      "FAILED_TO_GET_PRODUCTS"
+      "FAILED_TO_GET_PRODUCTS",
     );
   }
 
@@ -353,7 +374,7 @@ export class VoidhashClient {
     product: SubscriptionProduct,
     _options: {
       method?: "native";
-    }
+    },
   ) {
     this.ensureInitialized();
     if (this.readOnly) {
@@ -362,7 +383,7 @@ export class VoidhashClient {
 
     await this.runEffect(
       this.initializedClient!.purchase(product, _options),
-      "FAILED_TO_PURCHASE"
+      "FAILED_TO_PURCHASE",
     );
   }
 
@@ -375,7 +396,7 @@ export class VoidhashClient {
       this.ensureInitialized();
       await this.runEffect(
         this.initializedClient!.restorePurchases(),
-        "FAILED_TO_RESTORE_PURCHASES"
+        "FAILED_TO_RESTORE_PURCHASES",
       );
     });
   }
@@ -394,7 +415,7 @@ export class VoidhashClient {
     }
 
     this.effectRuntime.runSync(
-      this.initializedClient.capture(eventName, properties)
+      this.initializedClient.capture(eventName, properties),
     );
   }
 
@@ -412,7 +433,7 @@ export class VoidhashClient {
 
       this.analyticsFlushInFlight = this.runEffect(
         this.initializedClient.flush(),
-        "FAILED_TO_FLUSH_ANALYTICS"
+        "FAILED_TO_FLUSH_ANALYTICS",
       ).finally(() => {
         this.analyticsFlushInFlight = null;
       });
@@ -430,7 +451,7 @@ export class VoidhashClient {
       this.ensureInitialized();
       await this.runEffect(
         this.initializedClient!.iosPresentCodeRedemptionSheet(),
-        "FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET"
+        "FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET",
       );
     });
   }
@@ -440,7 +461,7 @@ export class VoidhashClient {
       this.ensureInitialized();
       await this.runEffect(
         this.initializedClient!.iosShowManageSubscriptions(),
-        "FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS"
+        "FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS",
       );
     });
   }
@@ -480,7 +501,7 @@ export class VoidhashClient {
   // biome-ignore lint/suspicious/noExplicitAny: Effect requires service type parameter
   private async runEffect<T>(
     effect: Effect.Effect<T, unknown, any>,
-    errorCode: string
+    errorCode: string,
   ): Promise<T> {
     const result = await this.effectRuntime.runPromiseExit(effect);
     if (Exit.isSuccess(result)) return result.value;
@@ -491,7 +512,7 @@ export class VoidhashClient {
     if (!this.initializedClient) {
       throw new VoidhashError(
         "VOIDHASH_CLIENT_NOT_INITIALIZED",
-        new Error("ProductManager is not initialized")
+        new Error("ProductManager is not initialized"),
       );
     }
   }
diff --git a/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts b/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
new file mode 100644
index 000000000..5d018b07d
--- /dev/null
+++ b/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
@@ -0,0 +1,96 @@
+import type {
+  PaywallRuntimeConfig,
+  PaywallRuntimeConfigProduct,
+  PaywallRuntimeConfigProductPeriod,
+} from "../../internal/paywall-bridge/protocol";
+import type { SubscriptionProduct } from "../entities/product";
+import type { PaywallReleaseRuntime } from "./paywall-service";
+
+const PERIOD_BY_NORMALIZED_INTERVAL: Readonly<
+  Record<string, PaywallRuntimeConfigProductPeriod>
+> = {
+  // ISO-8601 billing periods (Play Billing `billingPeriod`).
+  p1m: "month",
+  p1y: "year",
+  p1w: "week",
+  p7d: "week",
+  // Keyword variants seen across store SDK surfaces.
+  month: "month",
+  monthly: "month",
+  year: "year",
+  yearly: "year",
+  annual: "year",
+  week: "week",
+  weekly: "week",
+  lifetime: "lifetime",
+};
+
+/**
+ * Maps a native store billing-interval string (StoreKit subscription period
+ * unit or Play Billing ISO-8601 `billingPeriod`) to the contract §7.1 period
+ * union. Returns `undefined` for unknown/missing intervals — `period` is
+ * optional on the wire.
+ */
+export function mapStoreIntervalToPeriod(
+  interval: string | undefined,
+): PaywallRuntimeConfigProductPeriod | undefined {
+  if (!interval) {
+    return;
+  }
+  return PERIOD_BY_NORMALIZED_INTERVAL[interval.trim().toLowerCase()];
+}
+
+function mapProductToRuntimeConfigProduct(
+  product: SubscriptionProduct,
+): PaywallRuntimeConfigProduct {
+  return {
+    id: product.id,
+    slug: product.slug,
+    displayName: product.displayName,
+    description:
+      product.description.length > 0 ? product.description : undefined,
+    price: Number.isFinite(product.price) ? product.price : undefined,
+    priceString: product.displayPrice,
+    currencyCode: product.currency.length > 0 ? product.currency : undefined,
+    // `interval` is only present when the adapter produced a full
+    // SubscriptionProduct; plain Product instances leave it undefined.
+    period: mapStoreIntervalToPeriod(
+      (product as Partial<SubscriptionProduct>).interval,
+    ),
+    // Trial metadata isn't surfaced by the current native adapters yet.
+    trialPeriod: undefined,
+  };
+}
+
+/**
+ * Builds the contract §7.1 `PaywallRuntimeConfig` for a code-release paywall
+ * from the release's runtime block and the products resolved from the native
+ * store. Pure: product slugs that didn't resolve in the store are skipped
+ * (reported via `onSkippedProductSlug`) and an empty products list is valid.
+ */
+export function buildPaywallRuntimeConfig(options: {
+  runtime: PaywallReleaseRuntime;
+  productsBySlug: Readonly<Record<string, SubscriptionProduct | null>>;
+  platform: "ios" | "android" | "unknown";
+  locale: string | undefined;
+  onSkippedProductSlug?: (slug: string) => void;
+}): PaywallRuntimeConfig {
+  const products: PaywallRuntimeConfigProduct[] = [];
+
+  for (const slug of options.runtime.productSlugs) {
+    const product = options.productsBySlug[slug] ?? null;
+    if (!product) {
+      options.onSkippedProductSlug?.(slug);
+      continue;
+    }
+    products.push(mapProductToRuntimeConfigProduct(product));
+  }
+
+  return {
+    products,
+    variables: options.runtime.variables,
+    locale: options.locale,
+    platform: options.platform === "unknown" ? undefined : options.platform,
+    defaultSelectedProductId: products[0]?.id,
+  };
+}
diff --git a/libraries/react-native/src/core/paywalls/paywall-service.ts b/libraries/react-native/src/core/paywalls/paywall-service.ts
index 9b45ed42d..5d66f3068 100644
--- a/libraries/react-native/src/core/paywalls/paywall-service.ts
+++ b/libraries/react-native/src/core/paywalls/paywall-service.ts
@@ -1,3 +1,4 @@
+import type { SdkResolvedPaywall } from "@voidhash/generated-clients";
 import { Effect, Layer, ServiceMap } from "effect";
 
 import { IdentityManager } from "../identity/identity-manager";
@@ -5,9 +6,28 @@ import { ApiClient } from "../networking/api-client";
 import type { LocationSlug } from "../schema/registry";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 
+/**
+ * Release row of a resolved paywall showing, including the deploy-contract §6
+ * `runtime` block for code releases (`null`/absent for visual-editor
+ * releases). Passed through from the server response untouched.
+ */
+export type ResolvedPaywallRelease = NonNullable<
+  SdkResolvedPaywall["showing"]["paywallRelease"]
+>;
+
+/**
+ * The §6 runtime block of a code-release paywall: content-addressed identity,
+ * the product slugs the paywall uses and the author-configured variables.
+ */
+export type PaywallReleaseRuntime = NonNullable<
+  ResolvedPaywallRelease["runtime"]
+>;
+
 /**
  * Resolves the currently assigned paywall for a location slug. Stateless;
- * delegates to the SDK API with the standard SDK headers.
+ * delegates to the SDK API with the standard SDK headers. The response is
+ * returned as-is — including `showing.paywallRelease.runtime` when the active
+ * release is a code release.
  */
 export class PaywallService extends ServiceMap.Service<PaywallService>()(
   "rn-voidhash/PaywallService",
@@ -31,7 +51,7 @@ export class PaywallService extends ServiceMap.Service<PaywallService>()(
 
       return { getPaywallForLocation } as const;
     }),
-  }
+  },
 ) {
   static readonly layer = Layer.effect(this, this.make);
 }
diff --git a/libraries/react-native/src/internal/paywall-bridge/parser.ts b/libraries/react-native/src/internal/paywall-bridge/parser.ts
index 0cd05c048..7b4ec335d 100644
--- a/libraries/react-native/src/internal/paywall-bridge/parser.ts
+++ b/libraries/react-native/src/internal/paywall-bridge/parser.ts
@@ -28,6 +28,7 @@ const ACTION_TYPES: PaywallBridgeActionType[] = [
   "purchase",
   "restore",
   "openExternal",
+  "event",
   "log",
 ];
 
@@ -55,7 +56,12 @@ function validatePayload(
   payload: unknown
 ): void {
   if (payload === undefined || payload === null) {
-    if (type === "purchase" || type === "openExternal" || type === "log") {
+    if (
+      type === "purchase" ||
+      type === "openExternal" ||
+      type === "event" ||
+      type === "log"
+    ) {
       throw new PaywallBridgeParseError(
         "INVALID_PAYLOAD",
         `Invalid paywall bridge payload for '${type}': payload is required`
@@ -82,6 +88,19 @@ function validatePayload(
     return;
   }
 
+  if (type === "event") {
+    getRequiredString(payload.name, "name", type);
+
+    if (payload.properties !== undefined && !isRecord(payload.properties)) {
+      throw new PaywallBridgeParseError(
+        "INVALID_PAYLOAD",
+        "Invalid paywall bridge payload for 'event': 'properties' must be an object when present",
+        payload.properties
+      );
+    }
+    return;
+  }
+
   if (type === "log") {
     const level = payload.level;
     const message = payload.message;
diff --git a/libraries/react-native/src/internal/paywall-bridge/protocol.ts b/libraries/react-native/src/internal/paywall-bridge/protocol.ts
index f0b9604b9..64409054b 100644
--- a/libraries/react-native/src/internal/paywall-bridge/protocol.ts
+++ b/libraries/react-native/src/internal/paywall-bridge/protocol.ts
@@ -1,14 +1,34 @@
 export const PAYWALL_BRIDGE_VERSION = 1 as const;
 
+/**
+ * Serializes to JSON with every non-ASCII code unit escaped as `\uXXXX`.
+ * The native presenters deliver inbound messages by base64-encoding the UTF-8
+ * JSON and decoding it in the page with `atob`, which yields one Latin-1
+ * character per byte — multi-byte UTF-8 sequences (localized prices like
+ * "59,99 €", accented product names, author variables) would arrive as
+ * mojibake. Escaping per code unit keeps the wire payload pure ASCII and is
+ * surrogate-pair-safe (each half of an astral pair escapes independently and
+ * `JSON.parse` reassembles them).
+ */
+const toAsciiSafeJson = (value: unknown): string =>
+  JSON.stringify(value).replace(
+    /[\u0080-\uffff]/g,
+    (character) =>
+      `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`,
+  );
+
 export type PaywallBridgeActionType =
   | "ready"
   | "close"
   | "purchase"
   | "restore"
   | "openExternal"
+  | "event"
   | "log";
 
-export interface PaywallBridgeBaseEnvelope<TType extends PaywallBridgeActionType> {
+export interface PaywallBridgeBaseEnvelope<
+  TType extends PaywallBridgeActionType,
+> {
   version: typeof PAYWALL_BRIDGE_VERSION;
   type: TType;
   requestId?: string;
@@ -50,6 +70,19 @@ export interface PaywallBridgeOpenExternalEnvelope
   };
 }
 
+/**
+ * Custom analytics event emitted by a paywall bundle (deploy-contract §7.2).
+ * Fire-and-forget: the SDK routes it to analytics capture and never sends a
+ * response envelope.
+ */
+export interface PaywallBridgeEventEnvelope
+  extends PaywallBridgeBaseEnvelope<"event"> {
+  payload: {
+    name: string;
+    properties?: Record<string, unknown>;
+  };
+}
+
 export interface PaywallBridgeLogEnvelope
   extends PaywallBridgeBaseEnvelope<"log"> {
   payload: {
@@ -64,6 +97,7 @@ export type PaywallBridgeEnvelope =
   | PaywallBridgePurchaseEnvelope
   | PaywallBridgeRestoreEnvelope
   | PaywallBridgeOpenExternalEnvelope
+  | PaywallBridgeEventEnvelope
   | PaywallBridgeLogEnvelope;
 
 export type PaywallBridgeResponseStatus = "success" | "error";
@@ -88,7 +122,7 @@ export interface PaywallBridgeResponseEnvelope {
 export function createPaywallBridgeSuccessResponse(
   action: PaywallBridgeActionType,
   requestId?: string,
-  data?: Record<string, unknown>
+  data?: Record<string, unknown>,
 ): string {
   const response: PaywallBridgeResponseEnvelope = {
     version: PAYWALL_BRIDGE_VERSION,
@@ -101,14 +135,65 @@ export function createPaywallBridgeSuccessResponse(
     },
   };
 
-  return JSON.stringify(response);
+  return toAsciiSafeJson(response);
+}
+
+/** Billing period of a {@link PaywallRuntimeConfigProduct} (contract §7.1). */
+export type PaywallRuntimeConfigProductPeriod =
+  | "month"
+  | "year"
+  | "week"
+  | "lifetime";
+
+/**
+ * A purchasable product surfaced to a paywall bundle, per deploy-contract
+ * §7.1. Built by mapping the release's product slugs through the native store
+ * metadata (StoreKit / Play Billing) — `priceString` is the locale-correct
+ * formatted price from the store.
+ */
+export interface PaywallRuntimeConfigProduct {
+  id: string;
+  slug: string;
+  displayName: string;
+  description?: string;
+  price?: number;
+  priceString: string;
+  currencyCode?: string;
+  period?: PaywallRuntimeConfigProductPeriod;
+  trialPeriod?: string;
+}
+
+/**
+ * Everything a code-release paywall bundle needs at runtime beyond its own
+ * React tree (deploy-contract §7.1). Delivered late via a `configure`
+ * envelope after the bundle's `ready` event.
+ */
+export interface PaywallRuntimeConfig {
+  products: PaywallRuntimeConfigProduct[];
+  variables: Readonly<Record<string, string | number | boolean>>;
+  locale?: string;
+  platform?: "ios" | "android" | "web";
+  defaultSelectedProductId?: string;
+}
+
+/**
+ * Inbound (native → paywall) `configure` envelope (deploy-contract §7.2).
+ * Not part of {@link PaywallBridgeEnvelope} on purpose: like `response`, it
+ * only travels native → WebView and is never parsed by
+ * `parsePaywallBridgeEnvelope`.
+ */
+export interface PaywallBridgeConfigureEnvelope {
+  version: typeof PAYWALL_BRIDGE_VERSION;
+  type: "configure";
+  requestId?: string;
+  payload: PaywallRuntimeConfig;
 }
 
 export function createPaywallBridgeErrorResponse(
   action: PaywallBridgeActionType,
   code: string,
   message: string,
-  requestId?: string
+  requestId?: string,
 ): string {
   const response: PaywallBridgeResponseEnvelope = {
     version: PAYWALL_BRIDGE_VERSION,
@@ -124,5 +209,23 @@ export function createPaywallBridgeErrorResponse(
     },
   };
 
-  return JSON.stringify(response);
+  return toAsciiSafeJson(response);
+}
+
+/**
+ * Serializes a `configure` envelope carrying the runtime config, ready to be
+ * delivered to the WebView via `PaywallPresenter.postMessage`.
+ */
+export function createPaywallBridgeConfigureMessage(
+  config: PaywallRuntimeConfig,
+  requestId?: string,
+): string {
+  const envelope: PaywallBridgeConfigureEnvelope = {
+    version: PAYWALL_BRIDGE_VERSION,
+    type: "configure",
+    requestId,
+    payload: config,
+  };
+
+  return toAsciiSafeJson(envelope);
 }
diff --git a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
index 584d1a21f..aa8fdcb27 100644
--- a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
+++ b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
@@ -1,15 +1,17 @@
 import React, { useCallback, useEffect } from "react";
-import { AppState, Linking } from "react-native";
+import { AppState, Linking, Platform } from "react-native";
 
 import type { VoidhashClient } from "../../client";
 import type { SubscriptionProduct } from "../../core/entities/product";
+import type { PaywallReleaseRuntime } from "../../core/paywalls/paywall-service";
 import type { LocationSlug } from "../../core/schema/registry";
-import { PaywallPresenter } from "../../nitro";
+import { parsePaywallBridgeEnvelope } from "../../internal/paywall-bridge/parser";
 import {
+  createPaywallBridgeConfigureMessage,
   createPaywallBridgeErrorResponse,
   createPaywallBridgeSuccessResponse,
 } from "../../internal/paywall-bridge/protocol";
-import { parsePaywallBridgeEnvelope } from "../../internal/paywall-bridge/parser";
+import { PaywallPresenter } from "../../nitro";
 import type { VoidhashContext } from "../components/provider";
 
 export interface UsePaywallByLocationResult {
@@ -22,42 +24,59 @@ export interface UsePaywallByLocationOptions {
     context: {
       action: "purchase" | "restore";
       requestId?: string;
-    }
+    },
   ) => void;
   onPurchase?: (context: { productId: string; requestId?: string }) => void;
   onRestore?: (context: { requestId?: string }) => void;
 }
 
-const resolvedPaywallHtmlByLocation = new Map<string, string>();
+interface ResolvedPaywallEntry {
+  htmlUrl: string;
+  /** Contract §6 runtime block; `null` for visual-editor releases. */
+  runtime: PaywallReleaseRuntime | null;
+}
+
+const resolvedPaywallByLocation = new Map<string, ResolvedPaywallEntry>();
 const activeHookCountByLocation = new Map<string, number>();
 const inFlightActionByLocation = new Set<string>();
 
 export function __internal_resetPaywallByLocationCachesForTests() {
-  resolvedPaywallHtmlByLocation.clear();
+  resolvedPaywallByLocation.clear();
   activeHookCountByLocation.clear();
   inFlightActionByLocation.clear();
 }
 
+export function __internal_setResolvedPaywallForTests(
+  locationKey: string,
+  entry: ResolvedPaywallEntry,
+) {
+  resolvedPaywallByLocation.set(locationKey, entry);
+}
+
 function normalizeLocation(locationSlug: string): string {
   return locationSlug;
 }
 
-function getResolvedHtmlUrl(
+function getResolvedPaywallEntry(
   resolvedPaywall:
     | Awaited<ReturnType<VoidhashClient["getPaywallForLocation"]>>
     | null
-    | undefined
-): string | null {
+    | undefined,
+): ResolvedPaywallEntry | null {
   if (!resolvedPaywall) {
     return null;
   }
 
-  const htmlUrl = resolvedPaywall.showing.paywallRelease?.htmlUrl;
+  const paywallRelease = resolvedPaywall.showing.paywallRelease;
+  const htmlUrl = paywallRelease?.htmlUrl;
   if (!htmlUrl || htmlUrl.length === 0) {
     return null;
   }
 
-  return htmlUrl;
+  return {
+    htmlUrl,
+    runtime: paywallRelease?.runtime ?? null,
+  };
 }
 
 function getErrorPayload(error: unknown): { code: string; message: string } {
@@ -76,10 +95,10 @@ function getErrorPayload(error: unknown): { code: string; message: string } {
 
 function findProductByBridgeProductId(
   products: Record<string, SubscriptionProduct | null>,
-  productId: string
+  productId: string,
 ): SubscriptionProduct | null {
   const productList = Object.values(products).filter(
-    (product): product is SubscriptionProduct => product !== null
+    (product): product is SubscriptionProduct => product !== null,
   );
 
   const byId = productList.find((product) => product.id === productId);
@@ -96,6 +115,67 @@ interface PaywallPresenterBridgeAdapter {
   postMessage: (locationSlug: string, data: string) => void;
 }
 
+/** `Platform.OS` narrowed to the contract §7.1 platform union. */
+function getBridgePlatform(): "ios" | "android" | undefined {
+  return Platform.OS === "ios" || Platform.OS === "android"
+    ? Platform.OS
+    : undefined;
+}
+
+/**
+ * Answers the bundle's `ready` event with a `configure` envelope (contract
+ * §7.2) when the resolved release is a code release. Visual-editor releases
+ * (no `runtime` block) receive nothing. When building the full config fails
+ * (e.g. the native store is unavailable) a degraded configure envelope —
+ * empty products, the release's variables passed through — is still sent
+ * after a warning, so the paywall is never left configless forever.
+ */
+async function sendConfigureMessage(options: {
+  client: VoidhashClient;
+  locationKey: string;
+  presenter: PaywallPresenterBridgeAdapter;
+  requestId?: string;
+}) {
+  const { client, locationKey, presenter, requestId } = options;
+
+  const runtime = resolvedPaywallByLocation.get(locationKey)?.runtime;
+  if (!runtime) {
+    return;
+  }
+
+  try {
+    const runtimeConfig =
+      await client.internal_buildPaywallRuntimeConfig(runtime);
+    presenter.postMessage(
+      locationKey,
+      createPaywallBridgeConfigureMessage(runtimeConfig, requestId),
+    );
+  } catch (error) {
+    // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
+    console.warn("[voidhash] failed to send paywall configure message", error);
+
+    try {
+      presenter.postMessage(
+        locationKey,
+        createPaywallBridgeConfigureMessage(
+          {
+            products: [],
+            variables: runtime.variables ?? {},
+            platform: getBridgePlatform(),
+          },
+          requestId,
+        ),
+      );
+    } catch (fallbackError) {
+      // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
+      console.warn(
+        "[voidhash] failed to send fallback paywall configure message",
+        fallbackError,
+      );
+    }
+  }
+}
+
 async function handlePaywallBridgeEvent(options: {
   client: VoidhashClient;
   locationKey: string;
@@ -116,7 +196,22 @@ async function handlePaywallBridgeEvent(options: {
   let bridgeEvent: ReturnType<typeof parsePaywallBridgeEnvelope>;
   try {
     bridgeEvent = parsePaywallBridgeEnvelope(rawBridgeEvent);
-  } catch {
+  } catch (error) {
+    // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
+    console.warn(
+      "[voidhash] ignoring unparseable paywall bridge message",
+      error,
+    );
+    return;
+  }
+
+  if (bridgeEvent.type === "ready") {
+    await sendConfigureMessage({
+      client,
+      locationKey,
+      presenter,
+      requestId: bridgeEvent.requestId,
+    });
     return;
   }
 
@@ -130,6 +225,16 @@ async function handlePaywallBridgeEvent(options: {
     return;
   }
 
+  if (bridgeEvent.type === "event") {
+    // Fire-and-forget analytics (contract §7.2): route to the SDK's capture
+    // queue, stamped with the paywall location. No response envelope.
+    client.capture(bridgeEvent.payload.name, {
+      ...(bridgeEvent.payload.properties ?? {}),
+      paywall_location: locationKey,
+    });
+    return;
+  }
+
   if (bridgeEvent.type !== "purchase" && bridgeEvent.type !== "restore") {
     return;
   }
@@ -146,8 +251,8 @@ async function handlePaywallBridgeEvent(options: {
         bridgeEvent.type,
         "ACTION_BUSY",
         busyMessage,
-        bridgeEvent.requestId
-      )
+        bridgeEvent.requestId,
+      ),
     );
     return;
   }
@@ -158,7 +263,7 @@ async function handlePaywallBridgeEvent(options: {
       const products = await client.getProducts();
       const product = findProductByBridgeProductId(
         products,
-        bridgeEvent.payload.productId
+        bridgeEvent.payload.productId,
       );
 
       if (!product) {
@@ -173,8 +278,8 @@ async function handlePaywallBridgeEvent(options: {
             "purchase",
             "ACTION_FAILED",
             productNotFoundMessage,
-            bridgeEvent.requestId
-          )
+            bridgeEvent.requestId,
+          ),
         );
         return;
       }
@@ -191,7 +296,7 @@ async function handlePaywallBridgeEvent(options: {
         locationKey,
         createPaywallBridgeSuccessResponse("purchase", bridgeEvent.requestId, {
           productId: product.id,
-        })
+        }),
       );
       await presenter.dismiss();
       return;
@@ -203,7 +308,7 @@ async function handlePaywallBridgeEvent(options: {
     });
     presenter.postMessage(
       locationKey,
-      createPaywallBridgeSuccessResponse("restore", bridgeEvent.requestId)
+      createPaywallBridgeSuccessResponse("restore", bridgeEvent.requestId),
     );
     await presenter.dismiss();
   } catch (error) {
@@ -218,8 +323,8 @@ async function handlePaywallBridgeEvent(options: {
         bridgeEvent.type,
         errorPayload.code,
         errorPayload.message,
-        bridgeEvent.requestId
-      )
+        bridgeEvent.requestId,
+      ),
     );
   } finally {
     inFlightActionByLocation.delete(locationKey);
@@ -237,6 +342,66 @@ export async function __internal_handlePaywallBridgeEventForTests(options: {
   await handlePaywallBridgeEvent(options);
 }
 
+interface PaywallPresenterShowAdapter extends PaywallPresenterBridgeAdapter {
+  show: (
+    locationSlug: string,
+    htmlUrl: string,
+    onBridgeEvent?: (rawEvent: string) => void,
+    onDismiss?: () => void,
+  ) => Promise<boolean>;
+}
+
+/**
+ * Presents the resolved paywall and, on success, unconditionally re-sends the
+ * `configure` envelope. The bundle announces `ready` exactly once at mount,
+ * and the native presenters only deliver bridge events to the callback
+ * registered by `show` — so a `ready` fired during `preload` is silently
+ * dropped and the ready-triggered configure in {@link handlePaywallBridgeEvent}
+ * never runs. The post-show send covers that warm path (the runtime applies
+ * `configure` idempotently; visual-editor releases no-op via the
+ * `runtime == null` guard in {@link sendConfigureMessage}), while the
+ * ready-triggered send still covers cold shows where the page finishes
+ * loading after the callback is attached.
+ */
+async function showResolvedPaywall(options: {
+  client: VoidhashClient;
+  htmlUrl: string;
+  locationKey: string;
+  onBridgeEvent: (rawBridgeEvent: string) => void;
+  presenter: PaywallPresenterShowAdapter;
+}): Promise<boolean> {
+  const { client, htmlUrl, locationKey, onBridgeEvent, presenter } = options;
+
+  const shown = await presenter.show(
+    locationKey,
+    htmlUrl,
+    onBridgeEvent,
+    () => {
+      inFlightActionByLocation.delete(locationKey);
+    },
+  );
+
+  if (shown) {
+    void sendConfigureMessage({
+      client,
+      locationKey,
+      presenter,
+    });
+  }
+
+  return shown;
+}
+
+export async function __internal_showResolvedPaywallForTests(options: {
+  client: VoidhashClient;
+  htmlUrl: string;
+  locationKey: string;
+  onBridgeEvent: (rawBridgeEvent: string) => void;
+  presenter: PaywallPresenterShowAdapter;
+}) {
+  return await showResolvedPaywall(options);
+}
+
 function incrementActiveHookCount(locationSlug: string) {
   const existingCount = activeHookCountByLocation.get(locationSlug) ?? 0;
   activeHookCountByLocation.set(locationSlug, existingCount + 1);
@@ -256,30 +421,30 @@ function decrementActiveHookCount(locationSlug: string) {
 
 export function paywallByLocationHookFactory(
   client: VoidhashClient,
-  vhContext: React.Context<VoidhashContext | null>
+  vhContext: React.Context<VoidhashContext | null>,
 ) {
   function usePaywallByLocation(
     locationSlug: LocationSlug,
-    paywallOptions?: UsePaywallByLocationOptions
+    paywallOptions?: UsePaywallByLocationOptions,
   ): UsePaywallByLocationResult {
     const voidhashContext = React.useContext(vhContext);
     const locationKey = normalizeLocation(String(locationSlug));
 
     const preloadPaywall = useCallback(async () => {
-      if (!voidhashContext?.isInitialized || !PaywallPresenter) {
+      if (!(voidhashContext?.isInitialized && PaywallPresenter)) {
         return;
       }
 
       const resolvedPaywall = await client.getPaywallForLocation(locationSlug);
-      const htmlUrl = getResolvedHtmlUrl(resolvedPaywall);
+      const resolvedEntry = getResolvedPaywallEntry(resolvedPaywall);
 
-      if (!htmlUrl) {
-        resolvedPaywallHtmlByLocation.delete(locationKey);
+      if (!resolvedEntry) {
+        resolvedPaywallByLocation.delete(locationKey);
         return;
       }
 
-      resolvedPaywallHtmlByLocation.set(locationKey, htmlUrl);
-      await PaywallPresenter.preload(locationKey, htmlUrl);
+      resolvedPaywallByLocation.set(locationKey, resolvedEntry);
+      await PaywallPresenter.preload(locationKey, resolvedEntry.htmlUrl);
     }, [client, locationKey, locationSlug, voidhashContext?.isInitialized]);
 
     const handleBridgeEvent = useCallback(
@@ -297,34 +462,34 @@ export function paywallByLocationHookFactory(
           rawBridgeEvent,
         });
       },
-      [client, locationKey, paywallOptions]
+      [client, locationKey, paywallOptions],
     );
 
     const show = useCallback(async () => {
-      if (!voidhashContext?.isInitialized || !PaywallPresenter) {
+      if (!(voidhashContext?.isInitialized && PaywallPresenter)) {
         return false;
       }
 
-      if (!resolvedPaywallHtmlByLocation.has(locationKey)) {
+      if (!resolvedPaywallByLocation.has(locationKey)) {
         await preloadPaywall();
       }
 
-      const htmlUrl = resolvedPaywallHtmlByLocation.get(locationKey);
-      if (!htmlUrl) {
+      const resolvedEntry = resolvedPaywallByLocation.get(locationKey);
+      if (!resolvedEntry) {
         return false;
       }
 
-      return PaywallPresenter.show(
+      return await showResolvedPaywall({
+        client,
+        htmlUrl: resolvedEntry.htmlUrl,
         locationKey,
-        htmlUrl,
-        (rawBridgeEvent: string) => {
+        onBridgeEvent: (rawBridgeEvent: string) => {
           void handleBridgeEvent(rawBridgeEvent);
         },
-        () => {
-          inFlightActionByLocation.delete(locationKey);
-        }
-      );
+        presenter: PaywallPresenter,
+      });
     }, [
+      client,
       handleBridgeEvent,
       locationKey,
       preloadPaywall,
@@ -356,7 +521,7 @@ export function paywallByLocationHookFactory(
           if (nextState === "active") {
             void preloadPaywall();
           }
-        }
+        },
       );
 
       return () => {
diff --git a/libraries/react-native/tests/core/paywall-runtime-config.test.ts b/libraries/react-native/tests/core/paywall-runtime-config.test.ts
new file mode 100644
index 000000000..4f4e2e27d
--- /dev/null
+++ b/libraries/react-native/tests/core/paywall-runtime-config.test.ts
@@ -0,0 +1,175 @@
+import { SubscriptionProduct } from "../../src/core/entities/product";
+import {
+  buildPaywallRuntimeConfig,
+  mapStoreIntervalToPeriod,
+} from "../../src/core/paywalls/paywall-runtime-config";
+import type { PaywallReleaseRuntime } from "../../src/core/paywalls/paywall-service";
+import { describe, expect, it } from "../helpers/effect-vitest";
+
+function makeSubscriptionProduct(overrides: {
+  id: string;
+  slug: string;
+  displayName?: string;
+  description?: string;
+  displayPrice?: string;
+  price?: number;
+  currency?: string;
+  interval?: string;
+}): SubscriptionProduct {
+  return new SubscriptionProduct(
+    overrides.id,
+    overrides.slug,
+    overrides.displayName ?? "Name",
+    overrides.description ?? "Description",
+    overrides.displayName ?? "Display Name",
+    overrides.displayPrice ?? "$9.99",
+    overrides.price ?? 9.99,
+    overrides.currency ?? "USD",
+    "autoRenewable",
+    "ios",
+    overrides.interval ?? "month",
+  );
+}
+
+function makeRuntime(
+  overrides: Partial<PaywallReleaseRuntime> = {},
+): PaywallReleaseRuntime {
+  return {
+    contentHash: "abc123",
+    productSlugs: ["yearly", "monthly"],
+    variables: { accentColor: "#16a34a" },
+    ...overrides,
+  };
+}
+
+describe("mapStoreIntervalToPeriod", () => {
+  it("maps ISO-8601 and keyword intervals to contract periods", () => {
+    expect(mapStoreIntervalToPeriod("P1M")).toBe("month");
+    expect(mapStoreIntervalToPeriod("p1y")).toBe("year");
+    expect(mapStoreIntervalToPeriod("P1W")).toBe("week");
+    expect(mapStoreIntervalToPeriod("P7D")).toBe("week");
+    expect(mapStoreIntervalToPeriod("monthly")).toBe("month");
+    expect(mapStoreIntervalToPeriod("annual")).toBe("year");
+    expect(mapStoreIntervalToPeriod("lifetime")).toBe("lifetime");
+  });
+
+  it("returns undefined for unknown or missing intervals", () => {
+    expect(mapStoreIntervalToPeriod(undefined)).toBeUndefined();
+    expect(mapStoreIntervalToPeriod("")).toBeUndefined();
+    expect(mapStoreIntervalToPeriod("P3M")).toBeUndefined();
+    expect(mapStoreIntervalToPeriod("fortnightly")).toBeUndefined();
+  });
+});
+
+describe("buildPaywallRuntimeConfig", () => {
+  it("maps resolved products onto the contract §7.1 shape", () => {
+    const config = buildPaywallRuntimeConfig({
+      runtime: makeRuntime(),
+      productsBySlug: {
+        yearly: makeSubscriptionProduct({
+          id: "store_yearly",
+          slug: "yearly",
+          displayName: "Yearly Pro",
+          description: "Best value",
+          displayPrice: "$59.99",
+          price: 59.99,
+          currency: "USD",
+          interval: "year",
+        }),
+        monthly: makeSubscriptionProduct({
+          id: "store_monthly",
+          slug: "monthly",
+          displayPrice: "$9.99",
+          price: 9.99,
+          interval: "month",
+        }),
+      },
+      platform: "ios",
+      locale: "en-US",
+    });
+
+    expect(config.products).toEqual([
+      {
+        id: "store_yearly",
+        slug: "yearly",
+        displayName: "Yearly Pro",
+        description: "Best value",
+        price: 59.99,
+        priceString: "$59.99",
+        currencyCode: "USD",
+        period: "year",
+        trialPeriod: undefined,
+      },
+      expect.objectContaining({
+        id: "store_monthly",
+        slug: "monthly",
+        priceString: "$9.99",
+        period: "month",
+      }),
+    ]);
+    expect(config.variables).toEqual({ accentColor: "#16a34a" });
+    expect(config.locale).toBe("en-US");
+    expect(config.platform).toBe("ios");
+    expect(config.defaultSelectedProductId).toBe("store_yearly");
+  });
+
+  it("skips slugs the store could not resolve and reports them", () => {
+    const skipped: string[] = [];
+    const config = buildPaywallRuntimeConfig({
+      runtime: makeRuntime({ productSlugs: ["missing", "monthly", "unknown"] }),
+      productsBySlug: {
+        missing: null,
+        monthly: makeSubscriptionProduct({
+          id: "store_monthly",
+          slug: "monthly",
+        }),
+      },
+      platform: "android",
+      locale: undefined,
+      onSkippedProductSlug: (slug) => skipped.push(slug),
+    });
+
+    expect(skipped).toEqual(["missing", "unknown"]);
+    expect(config.products.map((product) => product.id)).toEqual([
+      "store_monthly",
+    ]);
+    expect(config.defaultSelectedProductId).toBe("store_monthly");
+  });
+
+  it("still produces a config with an empty products list", () => {
+    const config = buildPaywallRuntimeConfig({
+      runtime: makeRuntime({ productSlugs: ["missing"] }),
+      productsBySlug: { missing: null },
+      platform: "unknown",
+      locale: undefined,
+    });
+
+    expect(config.products).toEqual([]);
+    expect(config.defaultSelectedProductId).toBeUndefined();
+    expect(config.platform).toBeUndefined();
+    expect(config.locale).toBeUndefined();
+    expect(config.variables).toEqual({ accentColor: "#16a34a" });
+  });
+
+  it("omits empty description/currency and non-finite price", () => {
+    const config = buildPaywallRuntimeConfig({
+      runtime: makeRuntime({ productSlugs: ["monthly"] }),
+      productsBySlug: {
+        monthly: makeSubscriptionProduct({
+          id: "store_monthly",
+          slug: "monthly",
+          description: "",
+          currency: "",
+          price: Number.NaN,
+        }),
+      },
+      platform: "ios",
+      locale: "en-US",
+    });
+
+    const [product] = config.products;
+    expect(product?.description).toBeUndefined();
+    expect(product?.currencyCode).toBeUndefined();
+    expect(product?.price).toBeUndefined();
+  });
+});
diff --git a/libraries/react-native/tests/internal/paywall-bridge-configure.test.ts b/libraries/react-native/tests/internal/paywall-bridge-configure.test.ts
new file mode 100644
index 000000000..90401e676
--- /dev/null
+++ b/libraries/react-native/tests/internal/paywall-bridge-configure.test.ts
@@ -0,0 +1,113 @@
+/**
+ * Interop round-trip: the configure envelope the SDK posts to the WebView must
+ * parse in the REAL `@voidhash/paywalls` runtime parser (the code running
+ * inside the paywall bundle). Mirrors the paywalls package's envelope test,
+ * which round-trips its outbound envelopes through this package's parser.
+ */
+import { parseInboundEnvelope } from "../../../paywalls/src/runtime/envelope";
+import {
+  createPaywallBridgeConfigureMessage,
+  type PaywallRuntimeConfig,
+} from "../../src/internal/paywall-bridge/protocol";
+import { describe, expect, it } from "../helpers/effect-vitest";
+
+describe("paywall bridge configure interop", () => {
+  it("round-trips a configure message through the paywalls runtime parser", () => {
+    const config: PaywallRuntimeConfig = {
+      products: [
+        {
+          id: "store_yearly",
+          slug: "yearly",
+          displayName: "Yearly Pro",
+          description: "Best value",
+          price: 59.99,
+          priceString: "$59.99",
+          currencyCode: "USD",
+          period: "year",
+        },
+      ],
+      variables: { accentColor: "#16a34a", trialDays: 7, showBadge: true },
+      locale: "en-US",
+      platform: "ios",
+      defaultSelectedProductId: "store_yearly",
+    };
+
+    const parsed = parseInboundEnvelope(
+      createPaywallBridgeConfigureMessage(config, "req_ready"),
+    );
+
+    expect(parsed).not.toBeNull();
+    expect(parsed?.type).toBe("configure");
+    if (parsed?.type !== "configure") {
+      return;
+    }
+    expect(parsed.requestId).toBe("req_ready");
+    expect(parsed.payload.products).toEqual(config.products);
+    expect(parsed.payload.variables).toEqual(config.variables);
+    expect(parsed.payload.locale).toBe("en-US");
+    expect(parsed.payload.platform).toBe("ios");
+    expect(parsed.payload.defaultSelectedProductId).toBe("store_yearly");
+  });
+
+  it("round-trips an empty-products configure message", () => {
+    const config: PaywallRuntimeConfig = {
+      products: [],
+      variables: {},
+    };
+
+    const parsed = parseInboundEnvelope(
+      createPaywallBridgeConfigureMessage(config),
+    );
+
+    expect(parsed?.type).toBe("configure");
+    if (parsed?.type !== "configure") {
+      return;
+    }
+    expect(parsed.payload.products).toEqual([]);
+    expect(parsed.payload.variables).toEqual({});
+  });
+
+  it("survives the native base64/atob delivery path with non-ASCII content", () => {
+    // The native presenters base64-encode the UTF-8 JSON (Swift
+    // `Data(data.utf8).base64EncodedString()`, Kotlin `Base64.encodeToString`)
+    // and the page decodes with `atob`, which yields one LATIN-1 character per
+    // byte. Simulate that lossy leg: utf8 → base64 → latin1.
+    const throughNativeDelivery = (message: string): string =>
+      Buffer.from(
+        Buffer.from(message, "utf8").toString("base64"),
+        "base64",
+      ).toString("latin1");
+
+    const config: PaywallRuntimeConfig = {
+      products: [
+        {
+          id: "store_yearly_fr",
+          slug: "yearly",
+          displayName: "Année Pro",
+          description: "Meilleure offre — 7 jours d'essai",
+          priceString: "59,99 €",
+          currencyCode: "EUR",
+          period: "year",
+        },
+      ],
+      variables: { headline: "Débloquez tout 😀", trialDays: 7 },
+      locale: "fr-FR",
+      platform: "ios",
+    };
+
+    const parsed = parseInboundEnvelope(
+      throughNativeDelivery(createPaywallBridgeConfigureMessage(config)),
+    );
+
+    expect(parsed?.type).toBe("configure");
+    if (parsed?.type !== "configure") {
+      return;
+    }
+    expect(parsed.payload.products[0]?.priceString).toBe("59,99 €");
+    expect(parsed.payload.products[0]?.displayName).toBe("Année Pro");
+    expect(parsed.payload.products[0]?.description).toBe(
+      "Meilleure offre — 7 jours d'essai",
+    );
+    expect(parsed.payload.variables.headline).toBe("Débloquez tout 😀");
+  });
+});
diff --git a/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts b/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
index 23794fa63..d6b0fed40 100644
--- a/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
+++ b/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
@@ -1,8 +1,14 @@
-import { describe, expect, it } from "../helpers/effect-vitest";
+// The real `@voidhash/paywalls` runtime encoder — round-tripping its output
+// through this parser proves the two packages agree on the wire format.
+import {
+  createEventEnvelope,
+  serializeEnvelope,
+} from "../../../paywalls/src/runtime/envelope";
 import {
   PaywallBridgeParseError,
   parsePaywallBridgeEnvelope,
 } from "../../src/internal/paywall-bridge/parser";
+import { describe, expect, it } from "../helpers/effect-vitest";
 
 describe("parsePaywallBridgeEnvelope", () => {
   it("parses a valid purchase payload", () => {
@@ -46,4 +52,76 @@ describe("parsePaywallBridgeEnvelope", () => {
       )
     ).toThrow(PaywallBridgeParseError);
   });
+
+  it("parses a valid event payload", () => {
+    const parsed = parsePaywallBridgeEnvelope(
+      JSON.stringify({
+        payload: {
+          name: "cta_seen",
+          properties: { screen: "home" },
+        },
+        type: "event",
+        version: 1,
+      })
+    );
+
+    expect(parsed.type).toBe("event");
+    if (parsed.type === "event") {
+      expect(parsed.payload.name).toBe("cta_seen");
+      expect(parsed.payload.properties).toEqual({ screen: "home" });
+    }
+  });
+
+  it("parses an event without properties", () => {
+    const parsed = parsePaywallBridgeEnvelope(
+      JSON.stringify({
+        payload: {
+          name: "bare",
+        },
+        type: "event",
+        version: 1,
+      })
+    );
+
+    expect(parsed.type).toBe("event");
+    if (parsed.type === "event") {
+      expect(parsed.payload.properties).toBeUndefined();
+    }
+  });
+
+  it("throws for an event without a name", () => {
+    expect(() =>
+      parsePaywallBridgeEnvelope(
+        JSON.stringify({
+          payload: { properties: {} },
+          type: "event",
+          version: 1,
+        })
+      )
+    ).toThrow(PaywallBridgeParseError);
+  });
+
+  it("throws for an event with non-object properties", () => {
+    expect(() =>
+      parsePaywallBridgeEnvelope(
+        JSON.stringify({
+          payload: { name: "cta_seen", properties: "nope" },
+          type: "event",
+          version: 1,
+        })
+      )
+    ).toThrow(PaywallBridgeParseError);
+  });
+
+  it("round-trips the paywalls runtime's createEventEnvelope output", () => {
+    const parsed = parsePaywallBridgeEnvelope(
+      serializeEnvelope(createEventEnvelope("cta_seen", { screen: "home" }))
+    );
+
+    expect(parsed).toMatchObject({
+      payload: { name: "cta_seen", properties: { screen: "home" } },
+      type: "event",
+      version: 1,
+    });
+  });
 });
diff --git a/libraries/react-native/tests/react/use-paywall-by-location.test.tsx b/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
index 73de0d020..311dbeb17 100644
--- a/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
+++ b/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
@@ -1,8 +1,16 @@
 import { type Mocked, vi } from "vitest";
+// The real `@voidhash/paywalls` runtime encoder, used to prove the SDK handles
+// the exact wire bytes a deployed bundle emits.
+import {
+  createEventEnvelope,
+  serializeEnvelope,
+} from "../../../paywalls/src/runtime/envelope";
 import type { VoidhashClient } from "../../src/client";
 import {
   __internal_handlePaywallBridgeEventForTests,
   __internal_resetPaywallByLocationCachesForTests,
+  __internal_setResolvedPaywallForTests,
+  __internal_showResolvedPaywallForTests,
 } from "../../src/react/hooks/use-paywall-by-location";
 import { beforeEach, describe, expect, it } from "../helpers/effect-vitest";
 
@@ -13,6 +21,9 @@ vi.mock("react-native", () => ({
   Linking: {
     openURL: vi.fn().mockResolvedValue(undefined),
   },
+  Platform: {
+    OS: "ios",
+  },
 }));
 
 vi.mock("../../src/nitro", () => ({
@@ -21,7 +32,9 @@ vi.mock("../../src/nitro", () => ({
 
 function createClientMock() {
   return {
+    capture: vi.fn(),
     getProducts: vi.fn(),
+    internal_buildPaywallRuntimeConfig: vi.fn(),
     purchase: vi.fn(),
     restorePurchases: vi.fn(),
   } as unknown as Mocked<VoidhashClient>;
@@ -70,7 +83,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
 
     expect(client.purchase).toHaveBeenCalledWith(
       expect.objectContaining({ id: "prod_monthly" }),
-      { method: "native" }
+      { method: "native" },
     );
     expect(presenter.postMessage).toHaveBeenCalled();
     expect(presenter.dismiss).toHaveBeenCalled();
@@ -144,7 +157,9 @@ describe("usePaywallByLocation bridge coordinator", () => {
       }),
     });
 
-    const response = JSON.parse(presenter.postMessage.mock.calls[0][1] as string);
+    const response = JSON.parse(
+      presenter.postMessage.mock.calls[0][1] as string,
+    );
     expect(response.payload.status).toBe("error");
     expect(presenter.dismiss).not.toHaveBeenCalled();
   });
@@ -284,7 +299,9 @@ describe("usePaywallByLocation bridge coordinator", () => {
     const presenter = createPresenterMock();
     const onError = vi.fn();
 
-    client.restorePurchases.mockRejectedValue(new Error("restore failed") as never);
+    client.restorePurchases.mockRejectedValue(
+      new Error("restore failed") as never,
+    );
 
     await __internal_handlePaywallBridgeEventForTests({
       client,
@@ -342,6 +359,288 @@ describe("usePaywallByLocation bridge coordinator", () => {
     expect(presenter.dismiss).toHaveBeenCalledTimes(1);
   });
 
+  it("answers ready with a configure envelope when the release has a runtime block", async () => {
+    const client = createClientMock();
+    const presenter = createPresenterMock();
+    const runtime = {
+      contentHash: "5b00934c",
+      productSlugs: ["yearly", "monthly"],
+      variables: { accentColor: "#16a34a" },
+    };
+    const runtimeConfig = {
+      products: [
+        {
+          id: "store_yearly",
+          slug: "yearly",
+          displayName: "Yearly Pro",
+          priceString: "$59.99",
+        },
+      ],
+      variables: { accentColor: "#16a34a" },
+      locale: "en-US",
+      platform: "ios" as const,
+      defaultSelectedProductId: "store_yearly",
+    };
+
+    __internal_setResolvedPaywallForTests("home", {
+      htmlUrl: "https://cdn.example/p/5b00934c/index.html",
+      runtime,
+    });
+    client.internal_buildPaywallRuntimeConfig.mockResolvedValue(
+      runtimeConfig as never,
+    );
+
+    await __internal_handlePaywallBridgeEventForTests({
+      client,
+      locationKey: "home",
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
+      presenter,
+      rawBridgeEvent: JSON.stringify({
+        requestId: "req_ready",
+        type: "ready",
+        version: 1,
+      }),
+    });
+
+    expect(client.internal_buildPaywallRuntimeConfig).toHaveBeenCalledWith(
+      runtime,
+    );
+    expect(presenter.postMessage).toHaveBeenCalledTimes(1);
+    const envelope = JSON.parse(
+      presenter.postMessage.mock.calls[0][1] as string,
+    );
+    expect(envelope).toEqual({
+      version: 1,
+      type: "configure",
+      requestId: "req_ready",
+      payload: runtimeConfig,
+    });
+    expect(presenter.dismiss).not.toHaveBeenCalled();
+  });
+
+  it("re-sends configure after show when preload dropped the bundle's ready event", async () => {
+    const client = createClientMock();
+    const runtimeConfig = {
+      products: [
+        {
+          id: "store_yearly",
+          slug: "yearly",
+          displayName: "Yearly Pro",
+          priceString: "$59.99",
+        },
+      ],
+      variables: { accentColor: "#16a34a" },
+    };
+
+    __internal_setResolvedPaywallForTests("home", {
+      htmlUrl: "https://cdn.example/p/5b00934c/index.html",
+      runtime: {
+        contentHash: "5b00934c",
+        productSlugs: ["yearly"],
+        variables: { accentColor: "#16a34a" },
+      },
+    });
+    client.internal_buildPaywallRuntimeConfig.mockResolvedValue(
+      runtimeConfig as never,
+    );
+
+    // Simulates the native presenters in the preload-then-show flow: the
+    // bundle's one-shot `ready` fired during preload, before show() attached
+    // the bridge callback, so NOTHING is ever delivered to onBridgeEvent.
+    const onBridgeEvent = vi.fn();
+    const presenter = {
+      ...createPresenterMock(),
+      show: vi.fn().mockResolvedValue(true),
+    };
+
+    const shown = await __internal_showResolvedPaywallForTests({
+      client,
+      htmlUrl: "https://cdn.example/p/5b00934c/index.html",
+      locationKey: "home",
+      onBridgeEvent,
+      presenter,
+    });
+
+    expect(shown).toBe(true);
+    expect(onBridgeEvent).not.toHaveBeenCalled();
+    // The post-show configure is fire-and-forget; wait for it to land.
+    await vi.waitFor(() =>
+      expect(presenter.postMessage).toHaveBeenCalledTimes(1),
+    );
+    const envelope = JSON.parse(
+      presenter.postMessage.mock.calls[0][1] as string,
+    );
+    expect(envelope.type).toBe("configure");
+    expect(envelope.payload).toEqual(runtimeConfig);
+  });
+
+  it("sends no post-show configure for visual-editor releases or failed shows", async () => {
+    const client = createClientMock();
+
+    __internal_setResolvedPaywallForTests("home", {
+      htmlUrl: "https://cdn.example/p/legacy/index.html",
+      runtime: null,
+    });
+
+    const visualEditorPresenter = {
+      ...createPresenterMock(),
+      show: vi.fn().mockResolvedValue(true),
+    };
+    await __internal_showResolvedPaywallForTests({
+      client,
+      htmlUrl: "https://cdn.example/p/legacy/index.html",
+      locationKey: "home",
+      onBridgeEvent: vi.fn(),
+      presenter: visualEditorPresenter,
+    });
+
+    __internal_setResolvedPaywallForTests("home", {
+      htmlUrl: "https://cdn.example/p/5b00934c/index.html",
+      runtime: {
+        contentHash: "5b00934c",
+        productSlugs: ["yearly"],
+        variables: {},
+      },
+    });
+
+    const failedShowPresenter = {
+      ...createPresenterMock(),
+      show: vi.fn().mockResolvedValue(false),
+    };
+    const shown = await __internal_showResolvedPaywallForTests({
+      client,
+      htmlUrl: "https://cdn.example/p/5b00934c/index.html",
+      locationKey: "home",
+      onBridgeEvent: vi.fn(),
+      presenter: failedShowPresenter,
+    });
+
+    expect(shown).toBe(false);
+    await new Promise((resolve) => setTimeout(resolve, 0));
+    expect(client.internal_buildPaywallRuntimeConfig).not.toHaveBeenCalled();
+    expect(visualEditorPresenter.postMessage).not.toHaveBeenCalled();
+    expect(failedShowPresenter.postMessage).not.toHaveBeenCalled();
+  });
+
+  it("sends no configure for visual-editor releases (no runtime block)", async () => {
+    const client = createClientMock();
+    const presenter = createPresenterMock();
+
+    __internal_setResolvedPaywallForTests("home", {
+      htmlUrl: "https://cdn.example/p/legacy/index.html",
+      runtime: null,
+    });
+
+    await __internal_handlePaywallBridgeEventForTests({
+      client,
+      locationKey: "home",
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
+      presenter,
+      rawBridgeEvent: JSON.stringify({
+        type: "ready",
+        version: 1,
+      }),
+    });
+
+    expect(client.internal_buildPaywallRuntimeConfig).not.toHaveBeenCalled();
+    expect(presenter.postMessage).not.toHaveBeenCalled();
+  });
+
+  it("sends a degraded configure envelope when the config build fails", async () => {
+    const client = createClientMock();
+    const presenter = createPresenterMock();
+    const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
+
+    __internal_setResolvedPaywallForTests("home", {
+      htmlUrl: "https://cdn.example/p/5b00934c/index.html",
+      runtime: {
+        contentHash: "5b00934c",
+        productSlugs: ["yearly"],
+        variables: { accentColor: "#16a34a" },
+      },
+    });
+    client.internal_buildPaywallRuntimeConfig.mockRejectedValue(
+      new Error("store unavailable") as never,
+    );
+
+    await expect(
+      __internal_handlePaywallBridgeEventForTests({
+        client,
+        locationKey: "home",
+        openExternalUrl: vi.fn().mockResolvedValue(undefined),
+        presenter,
+        rawBridgeEvent: JSON.stringify({
+          requestId: "req_ready_degraded",
+          type: "ready",
+          version: 1,
+        }),
+      }),
+    ).resolves.toBeUndefined();
+
+    expect(warnSpy).toHaveBeenCalled();
+    expect(presenter.postMessage).toHaveBeenCalledTimes(1);
+    const envelope = JSON.parse(
+      presenter.postMessage.mock.calls[0][1] as string,
+    );
+    expect(envelope).toEqual({
+      version: 1,
+      type: "configure",
+      requestId: "req_ready_degraded",
+      payload: {
+        products: [],
+        variables: { accentColor: "#16a34a" },
+        platform: "ios",
+      },
+    });
+    warnSpy.mockRestore();
+  });
+
+  it("routes event bridge actions to analytics capture with the location", async () => {
+    const client = createClientMock();
+    const presenter = createPresenterMock();
+
+    await __internal_handlePaywallBridgeEventForTests({
+      client,
+      locationKey: "home",
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
+      presenter,
+      rawBridgeEvent: JSON.stringify({
+        payload: {
+          name: "cta_seen",
+          properties: { screen: "intro" },
+        },
+        type: "event",
+        version: 1,
+      }),
+    });
+
+    expect(client.capture).toHaveBeenCalledTimes(1);
+    expect(client.capture).toHaveBeenCalledWith("cta_seen", {
+      paywall_location: "home",
+      screen: "intro",
+    });
+    // Fire-and-forget: no response envelope, no dismissal.
+    expect(presenter.postMessage).not.toHaveBeenCalled();
+    expect(presenter.dismiss).not.toHaveBeenCalled();
+  });
+
+  it("routes a property-less event through the real paywalls runtime encoder", async () => {
+    const client = createClientMock();
+    const presenter = createPresenterMock();
+
+    await __internal_handlePaywallBridgeEventForTests({
+      client,
+      locationKey: "home",
+      openExternalUrl: vi.fn().mockResolvedValue(undefined),
+      presenter,
+      rawBridgeEvent: serializeEnvelope(createEventEnvelope("paywall_error")),
+    });
+
+    expect(client.capture).toHaveBeenCalledWith("paywall_error", {
+      paywall_location: "home",
+    });
+  });
+
   it("returns deterministic busy error while another action is in-flight", async () => {
     const client = createClientMock();
     const presenter = createPresenterMock();
@@ -359,7 +658,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
       () =>
         new Promise<void>((resolve) => {
           resolvePurchase = resolve;
-        }) as never
+        }) as never,
     );
 
     const firstRequest = __internal_handlePaywallBridgeEventForTests({
@@ -396,7 +695,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     });
 
     const busyResponse = JSON.parse(
-      presenter.postMessage.mock.calls[0][1] as string
+      presenter.postMessage.mock.calls[0][1] as string,
     );
     expect(busyResponse.payload.error.code).toBe("ACTION_BUSY");
     expect(onError).toHaveBeenCalledWith(expect.any(Error), {
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
index 5eab012e7..06a1dc128 100644
--- a/packages/generated-clients/src/core/generated.ts
+++ b/packages/generated-clients/src/core/generated.ts
@@ -704,7 +704,15 @@ export interface SdkResolvedPaywallShowing {
   readonly "htmlUrl": string;
   readonly "publishedAt": string | null;
   readonly "releaseId": string;
-  readonly "version": number | "NaN" | "Infinity" | "-Infinity"
+  readonly "version": number | "NaN" | "Infinity" | "-Infinity";
+  // extended by hand for paywall-deploy contract §6 (code-release runtime block); keep when regenerating.
+  // Optional/nullable on purpose: old servers omit it (visual-editor releases send null) and the
+  // client decodes responses with a plain JSON cast, so absence must remain valid.
+  readonly "runtime"?: {
+  readonly "contentHash": string;
+  readonly "productSlugs": ReadonlyArray<string>;
+  readonly "variables": Readonly<Record<string, string | number | boolean>>
+} | null | undefined
 } | null;
   readonly "paywallReleaseId": string | null;
   readonly "startedAt": string;
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4f999252c..c6028aa9f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -79,7 +79,7 @@ importers:
         version: 8.0.0
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   apps/cli:
     dependencies:
@@ -92,18 +92,27 @@ importers:
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
+      '@voidhash/studio':
+        specifier: workspace:*
+        version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
+        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
       effect:
         specifier: 4.0.0-beta.23
         version: 4.0.0-beta.23
+      esbuild:
+        specifier: ^0.25.10
+        version: 0.25.12
       esbuild-register:
         specifier: ^3.6.0
         version: 3.6.0(esbuild@0.25.12)
       nanoid:
         specifier: ^5.1.5
         version: 5.1.6
+      typescript:
+        specifier: 5.6.3
+        version: 5.6.3
     devDependencies:
       '@effect/language-service':
         specifier: 'catalog:'
@@ -120,24 +129,55 @@ importers:
       dotenv-cli:
         specifier: ^10.0.0
         version: 10.0.0
-      esbuild:
-        specifier: ^0.25.10
-        version: 0.25.12
       tsup:
         specifier: ^6.1.3
         version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
-      typescript:
-        specifier: 5.6.3
-        version: 5.6.3
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       vitest:
         specifier: ^3.0.9
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+
+  apps/studio:
+    dependencies:
+      '@tailwindcss/vite':
+        specifier: ^4.1.13
+        version: 4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitejs/plugin-react':
+        specifier: ^5.2.0
+        version: 5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+      react:
+        specifier: 19.1.0
+        version: 19.1.0
+      react-dom:
+        specifier: 19.1.0
+        version: 19.1.0(react@19.1.0)
+      tailwindcss:
+        specifier: ^4.1.13
+        version: 4.3.0
+      vite:
+        specifier: ^7.0.0
+        version: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+    devDependencies:
+      '@types/react':
+        specifier: 'catalog:'
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: 'catalog:'
+        version: 19.2.3(@types/react@19.1.17)
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      typescript:
+        specifier: 5.6.3
+        version: 5.6.3
 
   examples/react-native-example:
     dependencies:
@@ -147,6 +187,9 @@ importers:
       '@react-native-async-storage/async-storage':
         specifier: ^2.1.2
         version: 2.2.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
       '@voidhash/react-native':
         specifier: workspace:*
         version: link:../../libraries/react-native
@@ -253,10 +296,44 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+
+  libraries/paywalls:
+    dependencies:
+      react-reconciler:
+        specifier: ^0.32.0
+        version: 0.32.0(react@19.1.0)
+    devDependencies:
+      '@types/react':
+        specifier: 'catalog:'
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: 'catalog:'
+        version: 19.2.3(@types/react@19.1.17)
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      react:
+        specifier: 19.1.0
+        version: 19.1.0
+      react-dom:
+        specifier: 19.1.0
+        version: 19.1.0(react@19.1.0)
+      tsup:
+        specifier: ^6.1.3
+        version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
+      typescript:
+        specifier: 5.6.3
+        version: 5.6.3
+      vitest:
+        specifier: ^3.0.9
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   libraries/react-native:
     dependencies:
@@ -275,16 +352,16 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
+        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
+        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
       '@vitejs/plugin-react':
         specifier: 'catalog:'
-        version: 5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
@@ -317,13 +394,13 @@ importers:
         version: 5.9.3
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       vitest:
         specifier: ^4.1.6
-        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
 
   libraries/web:
     dependencies:
@@ -366,10 +443,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   packages/generated-clients:
     dependencies:
@@ -3153,6 +3230,96 @@ packages:
   '@swc/helpers@0.5.15':
     resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
 
+  '@tailwindcss/node@4.3.0':
+    resolution: {integrity: sha512-aFb4gUhFOgdh9AXo4IzBEOzBkkAxm9VigwDJnMIYv3lcfXCJVesNfbEaBl4BNgVRyid92AmdviqwBUBRKSeY3g==}
+
+  '@tailwindcss/oxide-android-arm64@4.3.0':
+    resolution: {integrity: sha512-TJPiq67tKlLuObP6RkwvVGDoxCMBVtDgKkLfa/uyj7/FyxvQwHS+UOnVrXXgbEsfUaMgiVvC4KbJnRr26ho4Ng==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [android]
+
+  '@tailwindcss/oxide-darwin-arm64@4.3.0':
+    resolution: {integrity: sha512-oMN/WZRb+SO37BmUElEgeEWuU8E/HXRkiODxJxLe1UTHVXLrdVSgfaJV7pSlhRGMSOiXLuxTIjfsF3wYvz8cgQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-darwin-x64@4.3.0':
+    resolution: {integrity: sha512-N6CUmu4a6bKVADfw77p+iw6Yd9Q3OBhe0veaDX+QazfuVYlQsHfDgxBrsjQ/IW+zywL8mTrNd0SdJT/zgtvMdA==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@tailwindcss/oxide-freebsd-x64@4.3.0':
+    resolution: {integrity: sha512-zDL5hBkQdH5C6MpqbK3gQAgP80tsMwSI26vjOzjJtNCMUo0lFgOItzHKBIupOZNQxt3ouPH7RPhvNhiTfCe5CQ==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.0':
+    resolution: {integrity: sha512-R06HdNi7A7OEoMsf6d4tjZ71RCWnZQPHj2mnotSFURjNLdBC+cIgXQ7l81CqeoiQftjf6OOblxXMInMgN2VzMA==}
+    engines: {node: '>= 20'}
+    cpu: [arm]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.0':
+    resolution: {integrity: sha512-qTJHELX8jetjhRQHCLilkVLmybpzNQAtaI/gaoVoidn/ufbNDbAo8KlK2J+yPoc8wQxvDxCmh/5lr8nC1+lTbg==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.0':
+    resolution: {integrity: sha512-Z6sukiQsngnWO+l39X4pPbiWT81IC+PLKF+PHxIlyZbGNb9MODfYlXEVlFvej5BOZInWX01kVyzeLvHsXhfczQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.0':
+    resolution: {integrity: sha512-DRNdQRpSGzRGfARVuVkxvM8Q12nh19l4BF/G7zGA1oe+9wcC6saFBHTISrpIcKzhiXtSrlSrluCfvMuledoCTQ==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+
+  '@tailwindcss/oxide-linux-x64-musl@4.3.0':
+    resolution: {integrity: sha512-Z0IADbDo8bh6I7h2IQMx601AdXBLfFpEdUotft86evd/8ZPflZe9COPO8Q1vw+pfLWIUo9zN/JGZvwuAJqduqg==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+
+  '@tailwindcss/oxide-wasm32-wasi@4.3.0':
+    resolution: {integrity: sha512-HNZGOUxEmElksYR7S6sC5jTeNGpobAsy9u7Gu0AskJ8/20FR9GqebUyB+HBcU/ax6BHuiuJi+Oda4B+YX6H1yA==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+    bundledDependencies:
+      - '@napi-rs/wasm-runtime'
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@tybys/wasm-util'
+      - '@emnapi/wasi-threads'
+      - tslib
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.0':
+    resolution: {integrity: sha512-Pe+RPVTi1T+qymuuRpcdvwSVZjnll/f7n8gBxMMh3xLTctMDKqpdfGimbMyioqtLhUYZxdJ9wGNhV7MKHvgZsQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.0':
+    resolution: {integrity: sha512-Mvrf2kXW/yeW/OTezZlCGOirXRcUuLIBx/5Y12BaPM7wJoryG6dfS/NJL8aBPqtTEx/Vm4T4vKzFUcKDT+TKUA==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [win32]
+
+  '@tailwindcss/oxide@4.3.0':
+    resolution: {integrity: sha512-F7HZGBeN9I0/AuuJS5PwcD8xayx5ri5GhjYUDBEVYUkexyA/giwbDNjRVrxSezE3T250OU2K/wp/ltWx3UOefg==}
+    engines: {node: '>= 20'}
+
+  '@tailwindcss/vite@4.3.0':
+    resolution: {integrity: sha512-t6J3OrB5Fc0ExuhohouH0fWUGMYL6PTLhW+E7zIk/pdbnJARZDCwjBznFnkh5ynRnIRSI4YjtTH0t6USjJISrw==}
+    peerDependencies:
+      vite: ^5.2.0 || ^6 || ^7 || ^8
+
   '@tanstack/directive-functions-plugin@1.142.1':
     resolution: {integrity: sha512-k4HhAaitobp+z2pXBkmoWgE8Ollhx7fQXpVL+PQ7HeHZc2PilrQtC3ysxvoPunufrztIxweSE9HAWkZ2AFNaLw==}
     engines: {node: '>=12'}
@@ -4631,6 +4798,10 @@ packages:
     resolution: {integrity: sha512-LgQMM4WXU3QI+SYgEc2liRgznaD5ojbmY3sb8LxyguVkIg5FxdpTkvk72te2R38/TGKxH634oLxXRGY6d7AP+Q==}
     engines: {node: '>=10.13.0'}
 
+  enhanced-resolve@5.22.1:
+    resolution: {integrity: sha512-6QEuw3zoX1SJQc7b87aBXke/no+mG2bTBgw29gWMQonLmpEkWoCAVkl+M49e48AZlWzxiDzDZzYdp6kobcyLww==}
+    engines: {node: '>=10.13.0'}
+
   entities@4.5.0:
     resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
     engines: {node: '>=0.12'}
@@ -5981,70 +6152,140 @@ packages:
     cpu: [arm64]
     os: [android]
 
+  lightningcss-android-arm64@1.32.0:
+    resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [android]
+
   lightningcss-darwin-arm64@1.30.2:
     resolution: {integrity: sha512-ylTcDJBN3Hp21TdhRT5zBOIi73P6/W0qwvlFEk22fkdXchtNTOU4Qc37SkzV+EKYxLouZ6M4LG9NfZ1qkhhBWA==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [darwin]
 
+  lightningcss-darwin-arm64@1.32.0:
+    resolution: {integrity: sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [darwin]
+
   lightningcss-darwin-x64@1.30.2:
     resolution: {integrity: sha512-oBZgKchomuDYxr7ilwLcyms6BCyLn0z8J0+ZZmfpjwg9fRVZIR5/GMXd7r9RH94iDhld3UmSjBM6nXWM2TfZTQ==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [darwin]
 
+  lightningcss-darwin-x64@1.32.0:
+    resolution: {integrity: sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [darwin]
+
   lightningcss-freebsd-x64@1.30.2:
     resolution: {integrity: sha512-c2bH6xTrf4BDpK8MoGG4Bd6zAMZDAXS569UxCAGcA7IKbHNMlhGQ89eRmvpIUGfKWNVdbhSbkQaWhEoMGmGslA==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [freebsd]
 
+  lightningcss-freebsd-x64@1.32.0:
+    resolution: {integrity: sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [freebsd]
+
   lightningcss-linux-arm-gnueabihf@1.30.2:
     resolution: {integrity: sha512-eVdpxh4wYcm0PofJIZVuYuLiqBIakQ9uFZmipf6LF/HRj5Bgm0eb3qL/mr1smyXIS1twwOxNWndd8z0E374hiA==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm]
     os: [linux]
 
+  lightningcss-linux-arm-gnueabihf@1.32.0:
+    resolution: {integrity: sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm]
+    os: [linux]
+
   lightningcss-linux-arm64-gnu@1.30.2:
     resolution: {integrity: sha512-UK65WJAbwIJbiBFXpxrbTNArtfuznvxAJw4Q2ZGlU8kPeDIWEX1dg3rn2veBVUylA2Ezg89ktszWbaQnxD/e3A==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [linux]
 
+  lightningcss-linux-arm64-gnu@1.32.0:
+    resolution: {integrity: sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+
   lightningcss-linux-arm64-musl@1.30.2:
     resolution: {integrity: sha512-5Vh9dGeblpTxWHpOx8iauV02popZDsCYMPIgiuw97OJ5uaDsL86cnqSFs5LZkG3ghHoX5isLgWzMs+eD1YzrnA==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [linux]
 
+  lightningcss-linux-arm64-musl@1.32.0:
+    resolution: {integrity: sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [linux]
+
   lightningcss-linux-x64-gnu@1.30.2:
     resolution: {integrity: sha512-Cfd46gdmj1vQ+lR6VRTTadNHu6ALuw2pKR9lYq4FnhvgBc4zWY1EtZcAc6EffShbb1MFrIPfLDXD6Xprbnni4w==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [linux]
 
+  lightningcss-linux-x64-gnu@1.32.0:
+    resolution: {integrity: sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+
   lightningcss-linux-x64-musl@1.30.2:
     resolution: {integrity: sha512-XJaLUUFXb6/QG2lGIW6aIk6jKdtjtcffUT0NKvIqhSBY3hh9Ch+1LCeH80dR9q9LBjG3ewbDjnumefsLsP6aiA==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [linux]
 
+  lightningcss-linux-x64-musl@1.32.0:
+    resolution: {integrity: sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [linux]
+
   lightningcss-win32-arm64-msvc@1.30.2:
     resolution: {integrity: sha512-FZn+vaj7zLv//D/192WFFVA0RgHawIcHqLX9xuWiQt7P0PtdFEVaxgF9rjM/IRYHQXNnk61/H/gb2Ei+kUQ4xQ==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [win32]
 
+  lightningcss-win32-arm64-msvc@1.32.0:
+    resolution: {integrity: sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [arm64]
+    os: [win32]
+
   lightningcss-win32-x64-msvc@1.30.2:
     resolution: {integrity: sha512-5g1yc73p+iAkid5phb4oVFMB45417DkRevRbt/El/gKXJk4jid+vPFF/AXbxn05Aky8PapwzZrdJShv5C0avjw==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [win32]
 
+  lightningcss-win32-x64-msvc@1.32.0:
+    resolution: {integrity: sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==}
+    engines: {node: '>= 12.0.0'}
+    cpu: [x64]
+    os: [win32]
+
   lightningcss@1.30.2:
     resolution: {integrity: sha512-utfs7Pr5uJyyvDETitgsaqSyjCb2qNRAtuqUeWIAKztsOYdcACf2KtARYXg2pSvhkt+9NfoaNY7fxjl6nuMjIQ==}
     engines: {node: '>= 12.0.0'}
 
+  lightningcss@1.32.0:
+    resolution: {integrity: sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==}
+    engines: {node: '>= 12.0.0'}
+
   lilconfig@2.1.0:
     resolution: {integrity: sha512-utWOt/GHzuUxnLKxB6dk81RoOeoNeHgbrXiuGk4yyF5qlRz+iIVWu56E2fqGHFrXz0QNUhLB/8nKqvRH66JKGQ==}
     engines: {node: '>=10'}
@@ -6842,6 +7083,12 @@ packages:
       '@types/react':
         optional: true
 
+  react-reconciler@0.32.0:
+    resolution: {integrity: sha512-2NPMOzgTlG0ZWdIf3qG+dcbLSoAc/uLfOwckc3ofy5sSK0pLJqnQLpUFxvGcN2rlXSjnVtGeeFLNimCQEj5gOQ==}
+    engines: {node: '>=0.10.0'}
+    peerDependencies:
+      react: 19.1.0
+
   react-refresh@0.14.2:
     resolution: {integrity: sha512-jCvmsr+1IUSMUyzOkRcvnVbX3ZYC6g9TDrDbFuFmRDq7PD4yaGbLKNQL6k2jnArV8hjYxh7hVhAZB6s9HDGpZA==}
     engines: {node: '>=0.10.0'}
@@ -7434,10 +7681,17 @@ packages:
     resolution: {integrity: sha512-MeQTA1r0litLUf0Rp/iisCaL8761lKAZHaimlbGK4j0HysC4PLfqygQj9srcs0m2RdtDYnF8UuYyKpbjHYp7Jw==}
     engines: {node: ^14.18.0 || >=16.0.0}
 
+  tailwindcss@4.3.0:
+    resolution: {integrity: sha512-y6nxMGB1nMW9R6k96e5gdIFzcfL/gTJRNaqGes1YvkLnPVXzWgbqFF2yLC0T8G774n24cx3Pe8XrKoniCOAH+Q==}
+
   tapable@2.3.0:
     resolution: {integrity: sha512-g9ljZiwki/LfxmQADO3dEY1CbpmXT5Hm2fJ+QaGKwSXUylMybePR7/67YW7jOrrvjEgL1Fmz5kzyAjWVWLlucg==}
     engines: {node: '>=6'}
 
+  tapable@2.3.3:
+    resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
+    engines: {node: '>=6'}
+
   tar@7.5.2:
     resolution: {integrity: sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==}
     engines: {node: '>=18'}
@@ -9911,12 +10165,12 @@ snapshots:
   '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@3.2.4)':
     dependencies:
       effect: 4.0.0-beta.23
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
-  '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
+  '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
     dependencies:
       effect: 4.0.0-beta.23
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
 
   '@emnapi/core@1.7.1':
     dependencies:
@@ -11809,7 +12063,7 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
-  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
+  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
     dependencies:
       '@react-native/polyfills': 2.0.0
       esbuild: 0.27.7
@@ -11818,8 +12072,8 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
 
   '@standard-schema/spec@1.1.0': {}
 
@@ -11828,7 +12082,75 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@tanstack/directive-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tailwindcss/node@4.3.0':
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      enhanced-resolve: 5.22.1
+      jiti: 2.6.1
+      lightningcss: 1.32.0
+      magic-string: 0.30.21
+      source-map-js: 1.2.1
+      tailwindcss: 4.3.0
+
+  '@tailwindcss/oxide-android-arm64@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-arm64@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-darwin-x64@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-freebsd-x64@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-linux-x64-musl@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-wasm32-wasi@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.0':
+    optional: true
+
+  '@tailwindcss/oxide@4.3.0':
+    optionalDependencies:
+      '@tailwindcss/oxide-android-arm64': 4.3.0
+      '@tailwindcss/oxide-darwin-arm64': 4.3.0
+      '@tailwindcss/oxide-darwin-x64': 4.3.0
+      '@tailwindcss/oxide-freebsd-x64': 4.3.0
+      '@tailwindcss/oxide-linux-arm-gnueabihf': 4.3.0
+      '@tailwindcss/oxide-linux-arm64-gnu': 4.3.0
+      '@tailwindcss/oxide-linux-arm64-musl': 4.3.0
+      '@tailwindcss/oxide-linux-x64-gnu': 4.3.0
+      '@tailwindcss/oxide-linux-x64-musl': 4.3.0
+      '@tailwindcss/oxide-wasm32-wasi': 4.3.0
+      '@tailwindcss/oxide-win32-arm64-msvc': 4.3.0
+      '@tailwindcss/oxide-win32-x64-msvc': 4.3.0
+
+  '@tailwindcss/vite@4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+    dependencies:
+      '@tailwindcss/node': 4.3.0
+      '@tailwindcss/oxide': 4.3.0
+      tailwindcss: 4.3.0
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+
+  '@tanstack/directive-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/code-frame': 7.27.1
       '@babel/core': 7.29.0
@@ -11838,7 +12160,7 @@ snapshots:
       babel-dead-code-elimination: 1.0.12
       pathe: 2.0.3
       tiny-invariant: 1.3.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
     optional: true
@@ -11882,19 +12204,19 @@ snapshots:
       - crossws
     optional: true
 
-  '@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/react-start-client': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/react-start-server': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/router-utils': 1.161.4
       '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/start-server-core': 1.142.8
       pathe: 2.0.3
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - '@rsbuild/core'
       - crossws
@@ -11936,7 +12258,7 @@ snapshots:
       - supports-color
     optional: true
 
-  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/core': 7.29.0
       '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
@@ -11954,7 +12276,7 @@ snapshots:
       zod: 3.25.76
     optionalDependencies:
       '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
     optional: true
@@ -11988,7 +12310,7 @@ snapshots:
       - supports-color
     optional: true
 
-  '@tanstack/server-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/server-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/code-frame': 7.27.1
       '@babel/core': 7.29.0
@@ -11997,7 +12319,7 @@ snapshots:
       '@babel/template': 7.28.6
       '@babel/traverse': 7.29.0
       '@babel/types': 7.29.0
-      '@tanstack/directive-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/directive-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       babel-dead-code-elimination: 1.0.12
       tiny-invariant: 1.3.3
     transitivePeerDependencies:
@@ -12014,7 +12336,7 @@ snapshots:
       tiny-warning: 1.0.3
     optional: true
 
-  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.0
@@ -12022,9 +12344,9 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-beta.40
       '@tanstack/router-core': 1.142.8
       '@tanstack/router-generator': 1.142.8
-      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/router-utils': 1.141.0
-      '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@tanstack/start-client-core': 1.142.8
       '@tanstack/start-server-core': 1.142.8
       babel-dead-code-elimination: 1.0.12
@@ -12034,8 +12356,8 @@ snapshots:
       srvx: 0.9.8
       tinyglobby: 0.2.15
       ufo: 1.6.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vitefu: 1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitefu: 1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       xmlbuilder2: 4.0.3
       zod: 3.25.76
     transitivePeerDependencies:
@@ -12403,7 +12725,19 @@ snapshots:
       '@urql/core': 5.2.0
       wonka: 6.3.5
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
+      '@rolldown/pluginutils': 1.0.0-rc.3
+      '@types/babel__core': 7.20.5
+      react-refresh: 0.18.0
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@babel/core': 7.29.0
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
@@ -12411,7 +12745,7 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
 
@@ -12432,29 +12766,29 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
-  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@vitest/spy': 3.2.4
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
-  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@vitest/spy': 3.2.4
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
-  '@vitest/mocker@4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@vitest/spy': 4.1.6
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   '@vitest/pretty-format@3.2.4':
     dependencies:
@@ -12503,7 +12837,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 2.0.0
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     optional: true
 
   '@vitest/ui@3.2.4(vitest@4.1.6)':
@@ -12515,7 +12849,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 2.0.0
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
     optional: true
 
   '@vitest/utils@3.2.4':
@@ -13031,7 +13365,7 @@ snapshots:
 
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
+  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
     dependencies:
       '@better-auth/core': 1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)
       '@better-auth/telemetry': 1.4.18(@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0))
@@ -13046,14 +13380,14 @@ snapshots:
       nanostores: 1.1.0
       zod: 4.3.6
     optionalDependencies:
-      '@tanstack/react-start': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/react-start': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       drizzle-kit: 0.31.8
       drizzle-orm: 0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0)
       mysql2: 3.16.0
       next: 16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
 
   better-call@1.1.8(zod@4.3.6):
     dependencies:
@@ -13678,6 +14012,11 @@ snapshots:
       graceful-fs: 4.2.11
       tapable: 2.3.0
 
+  enhanced-resolve@5.22.1:
+    dependencies:
+      graceful-fs: 4.2.11
+      tapable: 2.3.3
+
   entities@4.5.0: {}
 
   entities@6.0.1: {}
@@ -15603,15 +15942,15 @@ snapshots:
 
   jest-snapshot@29.7.0:
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.0
       '@babel/generator': 7.28.5
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.28.5)
+      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.0)
       '@babel/types': 7.28.5
       '@jest/expect-utils': 29.7.0
       '@jest/transform': 29.7.0
       '@jest/types': 29.6.3
-      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.28.5)
+      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.0)
       chalk: 4.1.2
       expect: 29.7.0
       graceful-fs: 4.2.11
@@ -15816,36 +16155,69 @@ snapshots:
   lightningcss-android-arm64@1.30.2:
     optional: true
 
+  lightningcss-android-arm64@1.32.0:
+    optional: true
+
   lightningcss-darwin-arm64@1.30.2:
     optional: true
 
+  lightningcss-darwin-arm64@1.32.0:
+    optional: true
+
   lightningcss-darwin-x64@1.30.2:
     optional: true
 
+  lightningcss-darwin-x64@1.32.0:
+    optional: true
+
   lightningcss-freebsd-x64@1.30.2:
     optional: true
 
+  lightningcss-freebsd-x64@1.32.0:
+    optional: true
+
   lightningcss-linux-arm-gnueabihf@1.30.2:
     optional: true
 
+  lightningcss-linux-arm-gnueabihf@1.32.0:
+    optional: true
+
   lightningcss-linux-arm64-gnu@1.30.2:
     optional: true
 
+  lightningcss-linux-arm64-gnu@1.32.0:
+    optional: true
+
   lightningcss-linux-arm64-musl@1.30.2:
     optional: true
 
+  lightningcss-linux-arm64-musl@1.32.0:
+    optional: true
+
   lightningcss-linux-x64-gnu@1.30.2:
     optional: true
 
+  lightningcss-linux-x64-gnu@1.32.0:
+    optional: true
+
   lightningcss-linux-x64-musl@1.30.2:
     optional: true
 
+  lightningcss-linux-x64-musl@1.32.0:
+    optional: true
+
   lightningcss-win32-arm64-msvc@1.30.2:
     optional: true
 
+  lightningcss-win32-arm64-msvc@1.32.0:
+    optional: true
+
   lightningcss-win32-x64-msvc@1.30.2:
     optional: true
 
+  lightningcss-win32-x64-msvc@1.32.0:
+    optional: true
+
   lightningcss@1.30.2:
     dependencies:
       detect-libc: 2.1.2
@@ -15862,6 +16234,22 @@ snapshots:
       lightningcss-win32-arm64-msvc: 1.30.2
       lightningcss-win32-x64-msvc: 1.30.2
 
+  lightningcss@1.32.0:
+    dependencies:
+      detect-libc: 2.1.2
+    optionalDependencies:
+      lightningcss-android-arm64: 1.32.0
+      lightningcss-darwin-arm64: 1.32.0
+      lightningcss-darwin-x64: 1.32.0
+      lightningcss-freebsd-x64: 1.32.0
+      lightningcss-linux-arm-gnueabihf: 1.32.0
+      lightningcss-linux-arm64-gnu: 1.32.0
+      lightningcss-linux-arm64-musl: 1.32.0
+      lightningcss-linux-x64-gnu: 1.32.0
+      lightningcss-linux-x64-musl: 1.32.0
+      lightningcss-win32-arm64-msvc: 1.32.0
+      lightningcss-win32-x64-msvc: 1.32.0
+
   lilconfig@2.1.0: {}
 
   lines-and-columns@1.2.4: {}
@@ -16896,6 +17284,11 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  react-reconciler@0.32.0(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      scheduler: 0.26.0
+
   react-refresh@0.14.2: {}
 
   react-refresh@0.18.0: {}
@@ -17539,8 +17932,12 @@ snapshots:
     dependencies:
       '@pkgr/core': 0.2.9
 
+  tailwindcss@4.3.0: {}
+
   tapable@2.3.0: {}
 
+  tapable@2.3.3: {}
+
   tar@7.5.2:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
@@ -17806,13 +18203,13 @@ snapshots:
   ufo@1.6.3:
     optional: true
 
-  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       '@clack/prompts': 0.11.0
       commander: 14.0.2
       deepmerge: 4.3.1
       jsonc-parser: 3.3.1
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - '@edge-runtime/vm'
       - '@types/debug'
@@ -17971,13 +18368,13 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
-  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -17992,13 +18389,13 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -18013,31 +18410,31 @@ snapshots:
       - tsx
       - yaml
 
-  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.6.3)
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.9.3)
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
-      esbuild: 0.27.2
+      esbuild: 0.27.7
       fdir: 6.5.0(picomatch@4.0.3)
       picomatch: 4.0.3
       postcss: 8.5.6
@@ -18047,14 +18444,14 @@ snapshots:
       '@types/node': 24.10.4
       fsevents: 2.3.3
       jiti: 2.6.1
-      lightningcss: 1.30.2
+      lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
       yaml: 2.8.2
 
-  vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
-      esbuild: 0.27.2
+      esbuild: 0.27.7
       fdir: 6.5.0(picomatch@4.0.3)
       picomatch: 4.0.3
       postcss: 8.5.6
@@ -18064,21 +18461,21 @@ snapshots:
       '@types/node': 25.3.3
       fsevents: 2.3.3
       jiti: 2.6.1
-      lightningcss: 1.30.2
+      lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
       yaml: 2.8.2
 
-  vitefu@1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vitefu@1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
     optional: true
 
-  vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.4
-      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@vitest/pretty-format': 3.2.4
       '@vitest/runner': 3.2.4
       '@vitest/snapshot': 3.2.4
@@ -18096,8 +18493,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -18118,11 +18515,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vitest@3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.4
-      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@vitest/pretty-format': 3.2.4
       '@vitest/runner': 3.2.4
       '@vitest/snapshot': 3.2.4
@@ -18140,8 +18537,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -18162,10 +18559,10 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
     dependencies:
       '@vitest/expect': 4.1.6
-      '@vitest/mocker': 4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
       '@vitest/pretty-format': 4.1.6
       '@vitest/runner': 4.1.6
       '@vitest/snapshot': 4.1.6
@@ -18182,7 +18579,7 @@ snapshots:
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.1.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0

From ab9b036a6fdd17ff8627fea5ae2b87a52a5f5bfe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 12 Jun 2026 10:55:27 +0200
Subject: [PATCH 021/129] feat: pr packages

---
 .github/workflows/pr-packages.yml             | 114 ++++++++
 .github/workflows/publish-api-spec-stable.yml |  65 -----
 .../publish-libraries-canary-preview.yml      | 123 --------
 scripts/publish-pr-packages.mjs               | 271 ++++++++++++++++++
 4 files changed, 385 insertions(+), 188 deletions(-)
 create mode 100644 .github/workflows/pr-packages.yml
 delete mode 100644 .github/workflows/publish-api-spec-stable.yml
 delete mode 100644 .github/workflows/publish-libraries-canary-preview.yml
 create mode 100644 scripts/publish-pr-packages.mjs

diff --git a/.github/workflows/pr-packages.yml b/.github/workflows/pr-packages.yml
new file mode 100644
index 000000000..4cf23b8e2
--- /dev/null
+++ b/.github/workflows/pr-packages.yml
@@ -0,0 +1,114 @@
+# Publishes per-commit tarballs of all publishable packages to the pr-package
+# service at pkg.voidha.sh so any commit can be tried out without an npm
+# release:
+#
+#   pnpm add @voidhash/node@https://pkg.voidha.sh/node/<short-sha>
+#
+# - push to main/preview → tarballs tagged with sha + branch name
+# - pull_request         → tarballs tagged with sha + branch + `pr-<n>` (1 week
+#                          TTL), plus a sticky install-instructions comment on
+#                          the PR
+#
+# Tags persist past PR close so install URLs keep resolving; the bucket's TTL
+# handles cleanup. All packages publish on every run — with this few packages
+# that is cheaper than maintaining diff-driven change detection, and it
+# guarantees the workspace-dep URL rewriting always has a same-sha tarball to
+# point at. The package list lives in scripts/publish-pr-packages.mjs.
+
+name: PR Packages
+
+on:
+  push:
+    branches: [main, preview]
+    paths:
+      - packages/generated-clients/**
+      - packages/shared/**
+      - apps/cli/**
+      - apps/studio/**
+      - libraries/**
+      - package.json
+      - pnpm-lock.yaml
+      - pnpm-workspace.yaml
+      - .github/workflows/pr-packages.yml
+      - scripts/publish-pr-packages.mjs
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - packages/generated-clients/**
+      - packages/shared/**
+      - apps/cli/**
+      - apps/studio/**
+      - libraries/**
+      - package.json
+      - pnpm-lock.yaml
+      - pnpm-workspace.yaml
+      - .github/workflows/pr-packages.yml
+      - scripts/publish-pr-packages.mjs
+
+permissions:
+  contents: read
+  pull-requests: write
+
+# Cancel superseded PR runs; let branch-push runs finish so a published sha is
+# never left half-uploaded.
+concurrency:
+  group: pr-packages-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  publish:
+    # Fork PRs can't access PR_PACKAGE_TOKEN — skip them entirely.
+    if: >-
+      github.event_name == 'push' ||
+      github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.19.0
+          run_install: false
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build and publish pr-packages
+        env:
+          PR_PACKAGE_TOKEN: ${{ secrets.PR_PACKAGE_TOKEN }}
+          SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
+          BRANCH: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref_name }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          PR_PACKAGE_TTL: ${{ github.event_name == 'pull_request' && '1 week' || '' }}
+          COMMENT_FILE: ${{ runner.temp }}/pr-packages-comment.md
+        run: node scripts/publish-pr-packages.mjs
+
+      - name: Comment install instructions on PR
+        if: github.event_name == 'pull_request'
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          COMMENT_FILE: ${{ runner.temp }}/pr-packages-comment.md
+        run: |
+          set -euo pipefail
+          MARKER="<!-- pr-packages -->"
+          BODY=$(cat "$COMMENT_FILE")
+
+          existing=$(gh api --paginate \
+            "repos/${REPO}/issues/${PR_NUMBER}/comments" \
+            --jq ".[] | select(.body | startswith(\"${MARKER}\")) | .id" \
+            | head -1)
+
+          if [ -n "$existing" ]; then
+            gh api -X PATCH "repos/${REPO}/issues/comments/${existing}" -f body="$BODY"
+          else
+            gh api -X POST "repos/${REPO}/issues/${PR_NUMBER}/comments" -f body="$BODY"
+          fi
diff --git a/.github/workflows/publish-api-spec-stable.yml b/.github/workflows/publish-api-spec-stable.yml
deleted file mode 100644
index 57b4bbc77..000000000
--- a/.github/workflows/publish-api-spec-stable.yml
+++ /dev/null
@@ -1,65 +0,0 @@
-name: Publish API Spec Stable
-
-on:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency: api-spec-stable-${{ github.ref }}
-
-jobs:
-  publish-stable:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    outputs:
-      published_version: ${{ steps.version.outputs.version }}
-    steps:
-      - name: Ensure main branch trigger
-        run: |
-          if [ "${GITHUB_REF}" != "refs/heads/main" ]; then
-            echo "This workflow can only run from main. Current ref: ${GITHUB_REF}" >&2
-            exit 1
-          fi
-
-      - name: Checkout main
-        uses: actions/checkout@v4
-        with:
-          ref: main
-          fetch-depth: 0
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          registry-url: https://registry.npmjs.org
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 10.19.0
-          run_install: false
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Typecheck api-spec
-        run: pnpm --filter @voidhash/api-spec typecheck
-
-      - name: Resolve package version
-        id: version
-        run: |
-          version="$(node -p "require('./packages/api-spec/package.json').version")"
-          echo "version=${version}" >> "$GITHUB_OUTPUT"
-
-      - name: Fail if version already exists
-        run: |
-          if npm view "@voidhash/api-spec@${{ steps.version.outputs.version }}" version >/dev/null 2>&1; then
-            echo "@voidhash/api-spec@${{ steps.version.outputs.version }} already exists on npm." >&2
-            exit 1
-          fi
-
-      - name: Publish stable
-        working-directory: packages/api-spec
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm publish --tag latest --access public
diff --git a/.github/workflows/publish-libraries-canary-preview.yml b/.github/workflows/publish-libraries-canary-preview.yml
deleted file mode 100644
index f515aac97..000000000
--- a/.github/workflows/publish-libraries-canary-preview.yml
+++ /dev/null
@@ -1,123 +0,0 @@
-name: Publish SDK Canaries (Preview)
-
-on:
-  push:
-    branches:
-      - preview
-    paths:
-      - libraries/**
-      - packages/api-spec/**
-      - packages/shared/**
-      - packages/tsconfig/**
-      - package.json
-      - pnpm-lock.yaml
-      - pnpm-workspace.yaml
-      - turbo.json
-      - .github/workflows/publish-libraries-canary-preview.yml
-
-permissions:
-  contents: read
-
-concurrency: library-canaries-preview-${{ github.ref }}
-
-jobs:
-  publish-canary:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          registry-url: https://registry.npmjs.org
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 10.19.0
-          run_install: false
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Prepare coordinated canary versions
-        run: |
-          set -euo pipefail
-          short_sha="${GITHUB_SHA::7}"
-          SHORT_SHA="$short_sha" node <<'EOF'
-          const fs = require("node:fs");
-
-          const canarySuffix = `canary.${process.env.GITHUB_RUN_NUMBER}.${process.env.GITHUB_RUN_ATTEMPT}.${process.env.SHORT_SHA}`;
-          const packages = [
-            { path: "./packages/api-spec/package.json", indent: 2 },
-            { path: "./libraries/node/package.json", indent: 2, apiSpecField: "dependencies" },
-            { path: "./libraries/web/package.json", indent: 2, apiSpecField: "dependencies" },
-            { path: "./libraries/react-native/package.json", indent: "\t", apiSpecField: "devDependencies" },
-          ];
-
-          const apiSpecPath = "./packages/api-spec/package.json";
-          const apiSpec = JSON.parse(fs.readFileSync(apiSpecPath, "utf8"));
-          const canaryVersion = `${apiSpec.version}-${canarySuffix}`;
-          apiSpec.version = canaryVersion;
-          fs.writeFileSync(apiSpecPath, JSON.stringify(apiSpec, null, 2) + "\n");
-
-          for (const pkg of packages.slice(1)) {
-            const manifest = JSON.parse(fs.readFileSync(pkg.path, "utf8"));
-            manifest.version = canaryVersion;
-            if (pkg.apiSpecField) {
-              manifest[pkg.apiSpecField]["@voidhash/api-spec"] = canaryVersion;
-            }
-            fs.writeFileSync(pkg.path, JSON.stringify(manifest, null, pkg.indent) + "\n");
-          }
-
-          process.stdout.write(canaryVersion);
-          EOF
-
-      - name: Typecheck api-spec
-        run: pnpm --filter @voidhash/api-spec typecheck
-
-      - name: Typecheck node
-        run: pnpm --filter @voidhash/node typecheck
-
-      - name: Typecheck web
-        run: pnpm --filter @voidhash/web typecheck
-
-      - name: Typecheck react-native
-        run: pnpm --filter @voidhash/react-native typecheck
-
-      - name: Build node
-        run: pnpm --filter @voidhash/node build
-
-      - name: Build web
-        run: pnpm --filter @voidhash/web build
-
-      - name: Build react-native
-        run: pnpm --filter @voidhash/react-native build
-
-      - name: Publish api-spec canary
-        working-directory: packages/api-spec
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm publish --tag canary --access public
-
-      - name: Publish node canary
-        working-directory: libraries/node
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm publish --tag canary --access public
-
-      - name: Publish web canary
-        working-directory: libraries/web
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm publish --tag canary --access public
-
-      - name: Publish react-native canary
-        working-directory: libraries/react-native
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm publish --tag canary --access public
diff --git a/scripts/publish-pr-packages.mjs b/scripts/publish-pr-packages.mjs
new file mode 100644
index 000000000..a3f3c8594
--- /dev/null
+++ b/scripts/publish-pr-packages.mjs
@@ -0,0 +1,271 @@
+/**
+ * Publishes per-commit tarballs of every publishable workspace package to
+ * the pr-package service (alchemy's `@alchemy.run/pr-package` worker) at
+ * pkg.voidha.sh, so any commit can be installed without publishing to
+ * npm:
+ *
+ *   pnpm add @voidhash/node@https://pkg.voidha.sh/node/<short-sha>
+ *
+ * The pretty URL form relies on the deployment's `parseAliasUrl` mapping
+ * `/<project>/<tag>`; the canonical form is
+ * `https://<host>/projects/<project>/tags/<tag>`.
+ *
+ * For each package in PACKAGES it:
+ *   1. rewrites package.json — suffixes the version with the short sha and
+ *      pins `workspace:*` runtime/peer deps to pr-package URLs at the same
+ *      sha (so installs of e.g. voidhash-cli resolve its private workspace
+ *      deps to tarballs built from this very commit)
+ *   2. runs the package's build (after the rewrite, so e.g. the CLI embeds
+ *      the sha-suffixed version)
+ *   3. `pnpm pack`s it (pnpm also resolves `catalog:` ranges at pack time)
+ *   4. PUTs the tarball to the pr-package host, tagged with short sha, full
+ *      sha, branch and (for PRs) `pr-<number>`
+ *
+ * Mutates package.json files in place — meant for a throwaway CI checkout.
+ * Locally, use PR_PACKAGES_DRY_RUN=1 (skips upload) and `git restore` the
+ * manifests afterwards.
+ *
+ * Environment:
+ *   SHA                  (required) full commit sha the tarballs are built from
+ *   BRANCH               (required) branch name, used as an install tag
+ *   PR_NUMBER            (optional) adds a `pr-<number>` tag
+ *   PR_PACKAGE_TOKEN     (required unless dry run) bearer token for the host
+ *   PR_PACKAGE_HOST      (optional) pr-package host, default pkg.voidha.sh
+ *   PR_PACKAGE_TTL       (optional) X-TTL header, e.g. "1 week" for PR builds
+ *   PR_PACKAGES_DRY_RUN  (optional) "1" → rewrite/build/pack but skip upload
+ *   COMMENT_FILE         (optional) where to write the PR comment markdown
+ */
+
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+process.chdir(path.resolve(path.dirname(fileURLToPath(import.meta.url)), ".."));
+
+// Ordered deps-first for readable logs; uploads don't depend on order since
+// install URLs are resolved lazily, at install time.
+//
+// `internal: true` marks private packages that are published only so the
+// rewritten workspace-dep URLs of the public packages resolve; they are left
+// out of the PR comment.
+const PACKAGES = [
+  {
+    dir: "packages/generated-clients",
+    name: "@voidhash/generated-clients",
+    project: "generated-clients",
+    build: false,
+    internal: true,
+  },
+  {
+    dir: "packages/shared",
+    name: "@voidhash/shared",
+    project: "shared",
+    build: false,
+    internal: true,
+  },
+  // Studio ships as source (src + index.html + vite.config.ts) that the CLI
+  // drives through Vite at runtime, so it packs without a build.
+  {
+    dir: "apps/studio",
+    name: "@voidhash/studio",
+    project: "studio",
+    build: false,
+    internal: true,
+  },
+  {
+    dir: "libraries/paywalls",
+    name: "@voidhash/paywalls",
+    project: "paywalls",
+    build: true,
+  },
+  {
+    dir: "libraries/node",
+    name: "@voidhash/node",
+    project: "node",
+    build: true,
+  },
+  {
+    dir: "libraries/web",
+    name: "@voidhash/web",
+    project: "web",
+    build: true,
+  },
+  {
+    dir: "apps/cli",
+    name: "voidhash-cli",
+    project: "cli",
+    build: true,
+  },
+  {
+    dir: "libraries/react-native",
+    name: "@voidhash/react-native",
+    project: "react-native",
+    build: true,
+  },
+];
+
+const requireEnv = (key) => {
+  const value = process.env[key];
+  if (!value) {
+    console.error(`Missing required environment variable ${key}`);
+    process.exit(1);
+  }
+  return value;
+};
+
+const dryRun = process.env.PR_PACKAGES_DRY_RUN === "1";
+const sha = requireEnv("SHA");
+const branch = requireEnv("BRANCH");
+const token = dryRun
+  ? process.env.PR_PACKAGE_TOKEN
+  : requireEnv("PR_PACKAGE_TOKEN");
+const host = process.env.PR_PACKAGE_HOST || "pkg.voidha.sh";
+const ttl = process.env.PR_PACKAGE_TTL || "";
+const prNumber = process.env.PR_NUMBER || "";
+
+const shortSha = sha.slice(0, 7);
+const tags = [shortSha, sha, branch, ...(prNumber ? [`pr-${prNumber}`] : [])];
+const installUrl = (pkg) => `https://${host}/${pkg.project}/${shortSha}`;
+
+const byName = new Map(PACKAGES.map((pkg) => [pkg.name, pkg]));
+
+const group = (title, fn) => {
+  console.log(`::group::${title}`);
+  try {
+    return fn();
+  } finally {
+    console.log("::endgroup::");
+  }
+};
+
+// ── 1. Rewrite manifests ─────────────────────────────────────────────
+group(`Rewrite manifests (version + workspace deps @ ${shortSha})`, () => {
+  for (const pkg of PACKAGES) {
+    const file = path.join(pkg.dir, "package.json");
+    const raw = fs.readFileSync(file, "utf8");
+    const manifest = JSON.parse(raw);
+    manifest.version = `${manifest.version}-${shortSha}`;
+
+    // devDependencies are skipped: consumers never install them, and
+    // `pnpm pack` substitutes their workspace ranges with local versions.
+    for (const field of [
+      "dependencies",
+      "optionalDependencies",
+      "peerDependencies",
+    ]) {
+      for (const [depName, range] of Object.entries(manifest[field] ?? {})) {
+        if (!range.startsWith("workspace:")) {
+          continue;
+        }
+        const dep = byName.get(depName);
+        if (!dep) {
+          throw new Error(
+            `${pkg.name} has workspace ${field} "${depName}" that is not in the pr-packages list — the published tarball would not install`,
+          );
+        }
+        manifest[field][depName] = installUrl(dep);
+      }
+    }
+
+    const indent = raw.match(/\n([ \t]+)"/)?.[1] ?? "  ";
+    fs.writeFileSync(file, `${JSON.stringify(manifest, null, indent)}\n`);
+    console.log(`${pkg.name} → ${manifest.version}`);
+  }
+});
+
+// ── 2. Build ─────────────────────────────────────────────────────────
+for (const pkg of PACKAGES) {
+  if (!pkg.build) {
+    continue;
+  }
+  group(`Build ${pkg.name}`, () => {
+    execFileSync("pnpm", ["--filter", pkg.name, "run", "build"], {
+      stdio: "inherit",
+    });
+  });
+}
+
+// ── 3. Pack + upload ─────────────────────────────────────────────────
+for (const pkg of PACKAGES) {
+  await group(`Publish ${pkg.name}`, async () => {
+    const destination = fs.mkdtempSync(path.join(os.tmpdir(), "pr-packages-"));
+    execFileSync("pnpm", ["pack", "--pack-destination", destination], {
+      cwd: pkg.dir,
+      stdio: "inherit",
+    });
+    const tarball = fs.readdirSync(destination).find((f) => f.endsWith(".tgz"));
+    if (!tarball) {
+      throw new Error(`pnpm pack produced no tarball for ${pkg.name}`);
+    }
+
+    if (dryRun) {
+      console.log(
+        `[dry run] would upload ${tarball} to ${installUrl(pkg)} with tags ${JSON.stringify(tags)}`,
+      );
+      return;
+    }
+
+    const response = await fetch(
+      `https://${host}/projects/${pkg.project}/packages`,
+      {
+        method: "PUT",
+        headers: {
+          authorization: `Bearer ${token}`,
+          "x-tags": JSON.stringify(tags),
+          ...(ttl ? { "x-ttl": ttl } : {}),
+          "content-type": "application/gzip",
+        },
+        body: fs.readFileSync(path.join(destination, tarball)),
+      },
+    );
+    if (!response.ok) {
+      throw new Error(
+        `Upload of ${pkg.name} failed: ${response.status} ${response.statusText}\n${await response.text()}`,
+      );
+    }
+    console.log(
+      `Published ${installUrl(pkg)} (tags: ${tags.join(", ")}, ttl: ${ttl || "default"})`,
+    );
+  });
+}
+
+// ── 4. Install instructions (PR comment / step summary) ──────────────
+const lines = [
+  "<!-- pr-packages -->",
+  "",
+  `Install the packages built from ${shortSha}:`,
+  "",
+];
+for (const pkg of PACKAGES) {
+  if (pkg.internal) {
+    continue;
+  }
+  lines.push(
+    `**${pkg.name}**`,
+    "```sh",
+    `pnpm add ${pkg.name}@${installUrl(pkg)}`,
+    "```",
+    "",
+  );
+}
+lines.push(
+  "Internal workspace deps (generated-clients, shared, studio) are published at the same sha and resolved automatically.",
+  "",
+  ...(prNumber
+    ? [
+        `Replace the sha with \`pr-${prNumber}\` or the branch name to always get the latest build of this PR.`,
+        "",
+      ]
+    : []),
+);
+const body = lines.join("\n");
+
+if (process.env.COMMENT_FILE) {
+  fs.writeFileSync(process.env.COMMENT_FILE, body);
+}
+if (process.env.GITHUB_STEP_SUMMARY) {
+  fs.appendFileSync(process.env.GITHUB_STEP_SUMMARY, body);
+}
+console.log(body);

From 484e11635b87a23f7b7e3041f3ded38ee8a78d02 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 12 Jun 2026 11:15:00 +0200
Subject: [PATCH 022/129] fix: attempt to fix deployment

---
 scripts/publish-pr-packages.mjs | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/scripts/publish-pr-packages.mjs b/scripts/publish-pr-packages.mjs
index a3f3c8594..8f8a2d680 100644
--- a/scripts/publish-pr-packages.mjs
+++ b/scripts/publish-pr-packages.mjs
@@ -118,9 +118,12 @@ const requireEnv = (key) => {
 const dryRun = process.env.PR_PACKAGES_DRY_RUN === "1";
 const sha = requireEnv("SHA");
 const branch = requireEnv("BRANCH");
-const token = dryRun
-  ? process.env.PR_PACKAGE_TOKEN
-  : requireEnv("PR_PACKAGE_TOKEN");
+// Trim: the server does a strict `Bearer ${token}` string compare, so a
+// trailing newline in the GitHub secret (common when a token is piped in from
+// a file) would otherwise 401 every upload.
+const token = (
+  dryRun ? process.env.PR_PACKAGE_TOKEN : requireEnv("PR_PACKAGE_TOKEN")
+)?.trim();
 const host = process.env.PR_PACKAGE_HOST || "pkg.voidha.sh";
 const ttl = process.env.PR_PACKAGE_TTL || "";
 const prNumber = process.env.PR_NUMBER || "";

From c68335c9c3e5ff17d3a7c01252de20d0dcd790b2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 29 Jun 2026 12:26:56 +0200
Subject: [PATCH 023/129] feat: effect version update and profiles support

---
 apps/cli/package.json                         |   6 +-
 apps/cli/src/cli/commands/config-set.ts       |   2 -
 apps/cli/src/cli/commands/config.ts           |  12 +
 apps/cli/src/cli/index.ts                     |   6 +-
 apps/cli/src/cli/shared-options.ts            |  15 +
 apps/cli/src/domain/schema/cli-config.ts      |  26 ++
 apps/cli/src/domain/services/auth.ts          |   4 +-
 apps/cli/src/domain/services/cli-config.ts    | 121 +++++-
 apps/cli/src/domain/services/codegen.ts       |   4 +-
 apps/cli/src/domain/services/schema.ts        |   4 +-
 apps/cli/src/domain/services/source-code.ts   |   4 +-
 apps/cli/src/services/auth/index.ts           |   4 +-
 .../src/services/auth/utils/better-auth.ts    |   4 +-
 apps/cli/src/services/cli-config/index.ts     |   4 +-
 apps/cli/src/services/organization/index.ts   |   4 +-
 apps/cli/src/services/project/index.ts        |   4 +-
 apps/cli/src/services/repository/index.ts     |   4 +-
 apps/cli/src/utils/api-client.ts              |   4 +-
 apps/cli/src/utils/error-formatter.ts         |  22 +
 apps/cli/src/utils/source-code-details.ts     |   4 +-
 apps/cli/sst-env.d.ts                         |  10 +
 examples/react-native-example/sst-env.d.ts    |  10 +
 libraries/node/sst-env.d.ts                   |  10 +
 libraries/react-native/package.json           |   2 +-
 .../src/core/analytics/service.ts             |   4 +-
 .../src/core/caching/cache-adapter.ts         |   4 +-
 .../src/core/caching/cache-manager.ts         |   4 +-
 .../feature-flags/feature-flag-service.ts     |   4 +-
 .../identity/customer-attribute-manager.ts    |   4 +-
 .../core/identity/customer-info-manager.ts    |   4 +-
 .../src/core/identity/identity-manager.ts     |   4 +-
 .../src/core/lifecycle/lifecycle-adapter.ts   |   4 +-
 .../src/core/lifecycle/lifecycle-service.ts   |   4 +-
 .../src/core/networking/api-client.ts         |   4 +-
 .../core/payment-adapters/payment-adapter.ts  |   4 +-
 .../src/core/paywalls/paywall-service.ts      |   4 +-
 .../src/core/platform/platform-provider.ts    |   4 +-
 .../src/core/products/product-service.ts      |   4 +-
 .../src/core/schema/schema-manager.ts         |   4 +-
 .../src/core/sdk-configuration.ts             |   4 +-
 .../core/transactions/transaction-service.ts  |   4 +-
 libraries/react-native/sst-env.d.ts           |  10 +
 .../tests/core/cache-manager.test.ts          |  20 +-
 .../tests/core/client-effect.test.ts          |  12 +-
 .../tests/core/customer-info-manager.test.ts  |  16 +-
 .../tests/core/identity-manager.test.ts       |  26 +-
 .../tests/core/schema-manager.test.ts         |  16 +-
 libraries/react-native/vitest.setup.ts        |  35 --
 .../src/core/analytics/analytics-service.ts   |   4 +-
 .../web/src/core/caching/cache-adapter.ts     |   4 +-
 .../web/src/core/caching/cache-manager.ts     |   4 +-
 libraries/web/src/core/event-bus.ts           |   4 +-
 .../feature-flags/feature-flag-service.ts     |   4 +-
 .../web/src/core/identity/identity-manager.ts |   4 +-
 .../web/src/core/networking/api-client.ts     |   4 +-
 .../networking/event-capture-api-client.ts    |   4 +-
 .../src/core/platform/platform-provider.ts    |   4 +-
 libraries/web/src/core/sdk-configuration.ts   |   4 +-
 libraries/web/sst-env.d.ts                    |  10 +
 libraries/web/tests/client.test.ts            |   2 +-
 package.json                                  |  12 +-
 packages/generated-clients/sst-env.d.ts       |  10 +
 packages/shared/src/auth.ts                   |   4 +-
 packages/shared/sst-env.d.ts                  |  10 +
 packages/tsconfig/sst-env.d.ts                |  10 +
 pnpm-lock.yaml                                | 408 +++++++++++-------
 sst-env.d.ts                                  |  10 +
 67 files changed, 661 insertions(+), 348 deletions(-)
 create mode 100644 apps/cli/sst-env.d.ts
 create mode 100644 examples/react-native-example/sst-env.d.ts
 create mode 100644 libraries/node/sst-env.d.ts
 create mode 100644 libraries/react-native/sst-env.d.ts
 create mode 100644 libraries/web/sst-env.d.ts
 create mode 100644 packages/generated-clients/sst-env.d.ts
 create mode 100644 packages/shared/sst-env.d.ts
 create mode 100644 packages/tsconfig/sst-env.d.ts
 create mode 100644 sst-env.d.ts

diff --git a/apps/cli/package.json b/apps/cli/package.json
index 34ac1dc52..eed8a482a 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -32,12 +32,12 @@
     "test:watch": "vitest -c vitest.unit.mts"
   },
   "dependencies": {
-    "@effect/platform-node": "4.0.0-beta.23",
+    "@effect/platform-node": "4.0.0-beta.84",
     "@voidhash/generated-clients": "workspace:*",
     "@voidhash/shared": "workspace:*",
     "@voidhash/studio": "workspace:*",
     "better-auth": "catalog:",
-    "effect": "4.0.0-beta.23",
+    "effect": "4.0.0-beta.84",
     "esbuild": "^0.25.10",
     "esbuild-register": "^3.6.0",
     "nanoid": "^5.1.5",
@@ -45,7 +45,7 @@
   },
   "devDependencies": {
     "@effect/language-service": "catalog:",
-    "@effect/vitest": "4.0.0-beta.23",
+    "@effect/vitest": "4.0.0-beta.84",
     "@voidhash/react-native": "workspace:*",
     "@voidhash/tsconfig": "workspace:*",
     "dotenv-cli": "^10.0.0",
diff --git a/apps/cli/src/cli/commands/config-set.ts b/apps/cli/src/cli/commands/config-set.ts
index 4a295ac7b..b137f54c2 100644
--- a/apps/cli/src/cli/commands/config-set.ts
+++ b/apps/cli/src/cli/commands/config-set.ts
@@ -13,10 +13,8 @@ export const configSetCommand = Command.make(
   ({ key, value }) =>
     Effect.gen(function* configSetCommand() {
       const cliConfig = yield* CliConfig;
-      const config = yield* cliConfig.readConfig();
       yield* cliConfig
         .writeToConfig({
-          ...config,
           [key]: value,
         })
         .pipe(
diff --git a/apps/cli/src/cli/commands/config.ts b/apps/cli/src/cli/commands/config.ts
index 6dc561fb4..372662040 100644
--- a/apps/cli/src/cli/commands/config.ts
+++ b/apps/cli/src/cli/commands/config.ts
@@ -2,12 +2,18 @@ import { Command } from "effect/unstable/cli";
 import { Console, Effect } from "effect";
 
 import { CliConfig } from "../../domain/services/cli-config";
+import { getActiveProfile } from "../../utils/error-formatter";
 import { configResetCommand } from "./config-reset";
 import { configSetCommand } from "./config-set";
 
 export const configCommand = Command.make("config", {}, () =>
   Effect.gen(function* configCommand() {
     const cliConfig = yield* CliConfig;
+    const activeProfile = getActiveProfile();
+
+    if (activeProfile) {
+      yield* Console.log(`Active profile: ${activeProfile}`);
+    }
     yield* Console.log("Current configuration:");
     const config = yield* cliConfig.readConfig();
 
@@ -19,6 +25,12 @@ export const configCommand = Command.make("config", {}, () =>
         yield* Console.log(`${key}: ${value}`);
       }
     }
+
+    const raw = yield* cliConfig.readRawConfig();
+    const profileNames = Object.keys(raw.profiles ?? {});
+    if (profileNames.length > 0) {
+      yield* Console.log(`\nProfiles: ${profileNames.join(", ")}`);
+    }
   })
 ).pipe(
   Command.withDescription("Manage the Voidhash authentication."),
diff --git a/apps/cli/src/cli/index.ts b/apps/cli/src/cli/index.ts
index 6ca1350c4..f26a2b85b 100644
--- a/apps/cli/src/cli/index.ts
+++ b/apps/cli/src/cli/index.ts
@@ -19,7 +19,7 @@ import { deployCommand } from "./commands/deploy";
 import { initCommand } from "./commands/init";
 import { studioCommand } from "./commands/studio";
 import { typesCommand } from "./commands/types";
-import { debugOption } from "./shared-options";
+import { debugOption, profileOption } from "./shared-options";
 
 const command = Command.make(
   "voidhash",
@@ -27,6 +27,10 @@ const command = Command.make(
   () => Effect.void,
 ).pipe(
   Command.withDescription("Voidhash CLI application."),
+  // Shared flags are accepted before and after the subcommand name (npm-style),
+  // so `voidhash deploy --profile dev` and `voidhash --profile dev deploy` both
+  // parse. Must be applied before withSubcommands.
+  Command.withSharedFlags({ profile: profileOption }),
   Command.withSubcommands([
     initCommand,
     authCommand,
diff --git a/apps/cli/src/cli/shared-options.ts b/apps/cli/src/cli/shared-options.ts
index ba647dd19..3c5b40635 100644
--- a/apps/cli/src/cli/shared-options.ts
+++ b/apps/cli/src/cli/shared-options.ts
@@ -10,3 +10,18 @@ export const debugOption = Flag.boolean("debug").pipe(
   Flag.withDescription("Enable debug logging with full error traces"),
   Flag.withDefault(false)
 );
+
+/**
+ * Shared profile option for all commands.
+ * Selects a named set of config overrides merged onto the shared base config.
+ * The active profile is resolved from process.argv by getActiveProfile() in
+ * error-formatter.ts; this option just tells the parser to accept it.
+ *
+ * No short alias: `-p` is already used by the `studio` command for `--port`.
+ */
+export const profileOption = Flag.string("profile").pipe(
+  Flag.withDescription(
+    "Use a named config profile (overrides merged onto the base config)"
+  ),
+  Flag.withDefault("")
+);
diff --git a/apps/cli/src/domain/schema/cli-config.ts b/apps/cli/src/domain/schema/cli-config.ts
index 86500772d..208d486a2 100644
--- a/apps/cli/src/domain/schema/cli-config.ts
+++ b/apps/cli/src/domain/schema/cli-config.ts
@@ -1,7 +1,33 @@
 import { Schema } from "effect";
 
+/**
+ * The resolved/effective CLI configuration returned by `CliConfig.readConfig`.
+ * Also describes the shape of the shared base section stored on disk.
+ */
+export const ResolvedCliConfigSchema = Schema.Struct({
+  api_key: Schema.NullishOr(Schema.String),
+  api_url: Schema.String,
+  web_url: Schema.String,
+});
+
+/**
+ * Per-profile overrides. Every field is optional and stored sparsely so that a
+ * profile only carries the keys it actually overrides; any missing key falls
+ * back to the shared base config when resolved.
+ */
+export const CliProfileSchema = Schema.Struct({
+  api_key: Schema.optional(Schema.NullishOr(Schema.String)),
+  api_url: Schema.optional(Schema.String),
+  web_url: Schema.optional(Schema.String),
+});
+
+/**
+ * The on-disk configuration file: the shared base config plus an optional map
+ * of named profiles, each holding partial overrides merged onto the base.
+ */
 export const CliConfigSchema = Schema.Struct({
   api_key: Schema.NullishOr(Schema.String),
   api_url: Schema.String,
   web_url: Schema.String,
+  profiles: Schema.optional(Schema.Record(Schema.String, CliProfileSchema)),
 });
diff --git a/apps/cli/src/domain/services/auth.ts b/apps/cli/src/domain/services/auth.ts
index d4ecd4f50..edb04402b 100644
--- a/apps/cli/src/domain/services/auth.ts
+++ b/apps/cli/src/domain/services/auth.ts
@@ -6,7 +6,7 @@ import {
   Effect,
   Layer,
   PubSub,
-  ServiceMap,
+  Context,
 } from "effect";
 import {
   HttpRouter,
@@ -312,7 +312,7 @@ const make = Effect.gen(function* effect() {
   } satisfies AuthShape;
 });
 
-export class Auth extends ServiceMap.Service<Auth, AuthShape>()(
+export class Auth extends Context.Service<Auth, AuthShape>()(
   "voidhash-cli/Auth"
 ) {
   static Default = Layer.effect(Auth, make).pipe(
diff --git a/apps/cli/src/domain/services/cli-config.ts b/apps/cli/src/domain/services/cli-config.ts
index 92fc3799b..98628e858 100644
--- a/apps/cli/src/domain/services/cli-config.ts
+++ b/apps/cli/src/domain/services/cli-config.ts
@@ -1,4 +1,4 @@
-import { Effect, FileSystem, Layer, Path, Schema, ServiceMap } from "effect";
+import { Effect, FileSystem, Layer, Path, Schema, Context } from "effect";
 import os from "node:os";
 
 import {
@@ -6,14 +6,33 @@ import {
   DEFAULT_API_URL,
   DEFAULT_WEB_URL,
 } from "../../constants";
+import { getActiveProfile } from "../../utils/error-formatter";
 import { FailedToReadCliConfigError } from "../errors/cli-config";
-import { CliConfigSchema } from "../schema/cli-config";
+import {
+  CliConfigSchema,
+  type CliProfileSchema,
+  type ResolvedCliConfigSchema,
+} from "../schema/cli-config";
+
+type ConfigFile = typeof CliConfigSchema.Type;
+type ResolvedConfig = typeof ResolvedCliConfigSchema.Type;
+type ProfileOverrides = typeof CliProfileSchema.Type;
 
 export const emptyConfig = {
   api_key: null,
   api_url: DEFAULT_API_URL,
   web_url: DEFAULT_WEB_URL,
-} satisfies typeof CliConfigSchema.Type;
+} satisfies ResolvedConfig;
+
+/**
+ * Strips the `profiles` map from a config file, leaving only the resolved base
+ * fields (`api_key`, `api_url`, `web_url`).
+ */
+const baseOf = (config: ConfigFile): ResolvedConfig => ({
+  api_key: config.api_key,
+  api_url: config.api_url,
+  web_url: config.web_url,
+});
 
 const make = Effect.gen(function* effect() {
   const fileSystem = yield* FileSystem.FileSystem;
@@ -22,17 +41,23 @@ const make = Effect.gen(function* effect() {
   const homeDir = os.homedir();
   const filePath = path.join(homeDir, CONFIG_FILE_NAME);
 
+  // Resolved once at layer build time, mirroring the isDebugMode() pattern.
+  const activeProfile = getActiveProfile();
+
   /**
-   * Reads and decodes the user's configuration file from the home directory.
+   * Reads and decodes the raw config file, including the full `profiles` map.
+   * Returns the defaults when the file does not exist.
    *
-   * @returns An Effect that yields the parsed configuration object, or fails with a ConfigFileNotFoundError if the config file does not exist, or a Schema.DecodeError if the file contents are invalid.
+   * @returns An Effect that yields the parsed config file, or fails with a
+   * FailedToReadCliConfigError if the file cannot be read or is invalid.
    */
-  const readConfig = () =>
-    Effect.gen(function* readConfig() {
+  const readRawConfig = () =>
+    Effect.gen(function* readRawConfig() {
       yield* Effect.logDebug(`Reading config from ${filePath}`);
-      if (!fileSystem.exists(filePath)) {
+      const exists = yield* fileSystem.exists(filePath);
+      if (!exists) {
         yield* Effect.logDebug("Config file not found, using defaults");
-        return yield* Effect.succeed(emptyConfig);
+        return yield* Effect.succeed<ConfigFile>(emptyConfig);
       }
       const configString = yield* fileSystem.readFileString(filePath);
       const configJson = JSON.parse(configString);
@@ -42,7 +67,7 @@ const make = Effect.gen(function* effect() {
         ...configJson,
       });
     }).pipe(
-      Effect.withSpan("CliConfig.readConfig"),
+      Effect.withSpan("CliConfig.readRawConfig"),
       Effect.catchTags({
         PlatformError: (e) =>
           Effect.fail(
@@ -62,19 +87,49 @@ const make = Effect.gen(function* effect() {
     );
 
   /**
-   * Writes the provided partial configuration to the user's config file.
-   * Merges the new config with any existing config, then saves the result.
+   * Reads the effective configuration: the shared base config with the active
+   * profile's overrides merged on top. When no profile is active (or the
+   * requested profile has no overrides) this equals the base config.
    *
-   * @param config - Partial configuration object to write to the config file.
+   * @returns An Effect that yields the resolved configuration object.
+   */
+  const readConfig = () =>
+    Effect.gen(function* readConfig() {
+      const raw = yield* readRawConfig();
+      const base = baseOf(raw);
+      if (!activeProfile) return base;
+      const overrides = raw.profiles?.[activeProfile] ?? {};
+      return { ...base, ...overrides } satisfies ResolvedConfig;
+    }).pipe(Effect.withSpan("CliConfig.readConfig"));
+
+  /**
+   * Writes the provided partial configuration. When a profile is active the
+   * values are merged into that profile's overrides, leaving the base config and
+   * other profiles untouched; otherwise they are merged into the base config.
+   *
+   * @param config - Partial configuration values to persist.
    * @returns An Effect that writes the merged configuration to disk.
    */
-  const writeToConfig = (config: Partial<typeof CliConfigSchema.Type>) =>
+  const writeToConfig = (config: Partial<ResolvedConfig>) =>
     Effect.gen(function* writeToConfig() {
       yield* Effect.logDebug(`Writing config to ${filePath}`);
-      const currentConfig = yield* readConfig().pipe(
-        Effect.catch(() => Effect.succeed({}))
+      const currentConfig = yield* readRawConfig().pipe(
+        Effect.catch(() => Effect.succeed<ConfigFile>(emptyConfig))
       );
-      const mergedConfig = { ...currentConfig, ...config };
+
+      const mergedConfig: ConfigFile = activeProfile
+        ? {
+            ...currentConfig,
+            profiles: {
+              ...currentConfig.profiles,
+              [activeProfile]: {
+                ...currentConfig.profiles?.[activeProfile],
+                ...config,
+              },
+            },
+          }
+        : { ...currentConfig, ...config };
+
       const validatedConfig =
         yield* Schema.decodeUnknownEffect(CliConfigSchema)(mergedConfig);
       yield* fileSystem.writeFileString(
@@ -85,15 +140,38 @@ const make = Effect.gen(function* effect() {
     }).pipe(Effect.withSpan("CliConfig.writeToConfig"));
 
   /**
-   * Resets the configuration to the default values. If authenticated, persists the authentication state.
+   * Resets the configuration to the default values. If authenticated, persists
+   * the authentication state. When a profile is active, only that profile's
+   * overrides are cleared (so it reverts to the base config), preserving a
+   * non-null api_key override if present.
    *
-   * @returns An Effect that resets the configuration to the default values.
+   * @returns An Effect that resets the configuration.
    */
   const resetConfig = () =>
     Effect.gen(function* resetConfig() {
       yield* Effect.logDebug("Resetting config to defaults");
-      const config = yield* readConfig();
 
+      if (activeProfile) {
+        const raw = yield* readRawConfig();
+        const apiKey = raw.profiles?.[activeProfile]?.api_key;
+        // Never persist `api_key: null` as an override — that would mask the
+        // base key. Keep only a real, non-null profile key.
+        const preserved: ProfileOverrides = apiKey ? { api_key: apiKey } : {};
+        const mergedConfig: ConfigFile = {
+          ...baseOf(raw),
+          profiles: { ...raw.profiles, [activeProfile]: preserved },
+        };
+        const validatedConfig =
+          yield* Schema.decodeUnknownEffect(CliConfigSchema)(mergedConfig);
+        yield* fileSystem.writeFileString(
+          filePath,
+          JSON.stringify(validatedConfig)
+        );
+        yield* Effect.logDebug("Config reset complete");
+        return;
+      }
+
+      const config = yield* readConfig();
       yield* writeToConfig({
         ...emptyConfig,
         api_key: config.api_key ?? null,
@@ -103,6 +181,7 @@ const make = Effect.gen(function* effect() {
 
   return {
     readConfig,
+    readRawConfig,
     resetConfig,
     writeToConfig,
   } as const;
@@ -110,7 +189,7 @@ const make = Effect.gen(function* effect() {
 
 type CliConfigShape = Effect.Success<typeof make>;
 
-export class CliConfig extends ServiceMap.Service<CliConfig, CliConfigShape>()(
+export class CliConfig extends Context.Service<CliConfig, CliConfigShape>()(
   "voidhash-cli/CliConfig"
 ) {
   static Default = Layer.effect(CliConfig, make)
diff --git a/apps/cli/src/domain/services/codegen.ts b/apps/cli/src/domain/services/codegen.ts
index 3a5f1f8df..decba0aa3 100644
--- a/apps/cli/src/domain/services/codegen.ts
+++ b/apps/cli/src/domain/services/codegen.ts
@@ -1,4 +1,4 @@
-import { Effect, FileSystem, Layer, ServiceMap } from "effect";
+import { Effect, FileSystem, Layer, Context } from "effect";
 
 import {
   VOIDHASH_FETCHED_AT_COMMENT_PREFIX,
@@ -115,7 +115,7 @@ const make = Effect.gen(function* effect() {
 
 type CodegenShape = Effect.Success<typeof make>;
 
-export class Codegen extends ServiceMap.Service<Codegen, CodegenShape>()(
+export class Codegen extends Context.Service<Codegen, CodegenShape>()(
   "voidhash-cli/Codegen"
 ) {
   static Default = Layer.effect(Codegen, make);
diff --git a/apps/cli/src/domain/services/schema.ts b/apps/cli/src/domain/services/schema.ts
index 4ff0ca706..04762a53c 100644
--- a/apps/cli/src/domain/services/schema.ts
+++ b/apps/cli/src/domain/services/schema.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { ApiClient } from "../../utils/api-client";
 import { RemoteSchemaFetchError } from "../errors/schema";
@@ -116,7 +116,7 @@ const make = Effect.gen(function* effect() {
 
 type SchemaServiceShape = Effect.Success<typeof make>;
 
-export class SchemaService extends ServiceMap.Service<
+export class SchemaService extends Context.Service<
   SchemaService,
   SchemaServiceShape
 >()("voidhash-cli/Schema") {
diff --git a/apps/cli/src/domain/services/source-code.ts b/apps/cli/src/domain/services/source-code.ts
index efb083d01..a19db18d7 100644
--- a/apps/cli/src/domain/services/source-code.ts
+++ b/apps/cli/src/domain/services/source-code.ts
@@ -1,4 +1,4 @@
-import { Effect, FileSystem, Layer, Path, Schema, ServiceMap } from "effect";
+import { Effect, FileSystem, Layer, Path, Schema, Context } from "effect";
 
 import { safeRegister } from "../../utils/js-loading/js-file-loading";
 import { relativePathPrefixFromDepth } from "../../utils/source-code";
@@ -307,7 +307,7 @@ const make = Effect.gen(function* effect() {
 
 type SourceCodeShape = Effect.Success<typeof make>;
 
-export class SourceCode extends ServiceMap.Service<SourceCode, SourceCodeShape>()(
+export class SourceCode extends Context.Service<SourceCode, SourceCodeShape>()(
   "voidhash-cli/SourceCode"
 ) {
   static Default = Layer.effect(SourceCode, make)
diff --git a/apps/cli/src/services/auth/index.ts b/apps/cli/src/services/auth/index.ts
index 492774624..ab87d706d 100644
--- a/apps/cli/src/services/auth/index.ts
+++ b/apps/cli/src/services/auth/index.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 const make = Effect.gen(function* scoped() {
   return {} as const;
@@ -6,7 +6,7 @@ const make = Effect.gen(function* scoped() {
 
 type AuthServiceShape = Effect.Success<typeof make>;
 
-export class AuthService extends ServiceMap.Service<AuthService, AuthServiceShape>()(
+export class AuthService extends Context.Service<AuthService, AuthServiceShape>()(
   "voidhash-cli/services/AuthService"
 ) {
   static Default = Layer.effect(AuthService, make)
diff --git a/apps/cli/src/services/auth/utils/better-auth.ts b/apps/cli/src/services/auth/utils/better-auth.ts
index a1e63da87..5139f544a 100644
--- a/apps/cli/src/services/auth/utils/better-auth.ts
+++ b/apps/cli/src/services/auth/utils/better-auth.ts
@@ -1,6 +1,6 @@
 import { createAuthClient } from "better-auth/client";
 import { apiKeyClient } from "better-auth/client/plugins";
-import { Data, Effect, Layer, ServiceMap } from "effect";
+import { Data, Effect, Layer, Context } from "effect";
 
 import { CliConfig } from "../../../domain/services/cli-config";
 
@@ -45,7 +45,7 @@ const make = Effect.gen(function* effect() {
 
 type BetterAuthClientShape = Effect.Success<typeof make>;
 
-export class BetterAuthClient extends ServiceMap.Service<BetterAuthClient, BetterAuthClientShape>()(
+export class BetterAuthClient extends Context.Service<BetterAuthClient, BetterAuthClientShape>()(
   "app/BetterAuthClient"
 ) {
   static Default = Layer.effect(BetterAuthClient, make)
diff --git a/apps/cli/src/services/cli-config/index.ts b/apps/cli/src/services/cli-config/index.ts
index b07018236..bf8c36c19 100644
--- a/apps/cli/src/services/cli-config/index.ts
+++ b/apps/cli/src/services/cli-config/index.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 const make = Effect.gen(function* scoped() {
   return {} as const;
@@ -6,7 +6,7 @@ const make = Effect.gen(function* scoped() {
 
 type CliConfigServiceShape = Effect.Success<typeof make>;
 
-export class CliConfigService extends ServiceMap.Service<CliConfigService, CliConfigServiceShape>()(
+export class CliConfigService extends Context.Service<CliConfigService, CliConfigServiceShape>()(
   "voidhash-cli/services/CliConfigService"
 ) {
   static Default = Layer.effect(CliConfigService, make)
diff --git a/apps/cli/src/services/organization/index.ts b/apps/cli/src/services/organization/index.ts
index 341bb0221..d016b41ee 100644
--- a/apps/cli/src/services/organization/index.ts
+++ b/apps/cli/src/services/organization/index.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 const make = Effect.gen(function* scoped() {
   return {} as const;
@@ -6,7 +6,7 @@ const make = Effect.gen(function* scoped() {
 
 type OrganizationServiceShape = Effect.Success<typeof make>;
 
-export class OrganizationService extends ServiceMap.Service<OrganizationService, OrganizationServiceShape>()(
+export class OrganizationService extends Context.Service<OrganizationService, OrganizationServiceShape>()(
   "voidhash-cli/services/OrganizationService"
 ) {
   static Default = Layer.effect(OrganizationService, make)
diff --git a/apps/cli/src/services/project/index.ts b/apps/cli/src/services/project/index.ts
index 5891ab42a..43e8e395b 100644
--- a/apps/cli/src/services/project/index.ts
+++ b/apps/cli/src/services/project/index.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 const make = Effect.gen(function* scoped() {
   return {} as const;
@@ -6,7 +6,7 @@ const make = Effect.gen(function* scoped() {
 
 type ProjectServiceShape = Effect.Success<typeof make>;
 
-export class ProjectService extends ServiceMap.Service<ProjectService, ProjectServiceShape>()(
+export class ProjectService extends Context.Service<ProjectService, ProjectServiceShape>()(
   "voidhash-cli/services/ProjectService"
 ) {
   static Default = Layer.effect(ProjectService, make)
diff --git a/apps/cli/src/services/repository/index.ts b/apps/cli/src/services/repository/index.ts
index dad5c0fcf..7407f4c13 100644
--- a/apps/cli/src/services/repository/index.ts
+++ b/apps/cli/src/services/repository/index.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 const make = Effect.gen(function* scoped() {
   return {} as const;
@@ -6,7 +6,7 @@ const make = Effect.gen(function* scoped() {
 
 type RepositoryServiceShape = Effect.Success<typeof make>;
 
-export class RepositoryService extends ServiceMap.Service<RepositoryService, RepositoryServiceShape>()(
+export class RepositoryService extends Context.Service<RepositoryService, RepositoryServiceShape>()(
   "voidhash-cli/services/RepositoryService"
 ) {
   static Default = Layer.effect(RepositoryService, make)
diff --git a/apps/cli/src/utils/api-client.ts b/apps/cli/src/utils/api-client.ts
index 1bd8e1ea1..1cfc08941 100644
--- a/apps/cli/src/utils/api-client.ts
+++ b/apps/cli/src/utils/api-client.ts
@@ -2,7 +2,7 @@ import {
   make as makeCoreClient,
   type VoidhashCoreClient,
 } from "@voidhash/generated-clients";
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { CliConfig } from "../domain/services/cli-config";
@@ -40,7 +40,7 @@ const make = Effect.gen(function* effect() {
 
 type ApiClientShape = Effect.Success<typeof make>;
 
-export class ApiClient extends ServiceMap.Service<ApiClient, ApiClientShape>()(
+export class ApiClient extends Context.Service<ApiClient, ApiClientShape>()(
   "voidhash-cli/ApiClient"
 ) {
   static Default = Layer.effect(ApiClient, make).pipe(
diff --git a/apps/cli/src/utils/error-formatter.ts b/apps/cli/src/utils/error-formatter.ts
index 124cb168a..b476cba72 100644
--- a/apps/cli/src/utils/error-formatter.ts
+++ b/apps/cli/src/utils/error-formatter.ts
@@ -9,6 +9,28 @@ const CliErrorTypeId = Symbol.for("~effect/cli/CliError");
 export const isDebugMode = (): boolean =>
   process.argv.includes("--debug") || process.argv.includes("-d");
 
+/**
+ * Resolve the active config profile from the `--profile <name>` / `--profile=<name>`
+ * flag, or `null` when no profile is requested.
+ *
+ * Like {@link isDebugMode}, this reads `process.argv` directly because the parsed
+ * flag value isn't available where the CliConfig layer is built. The flag itself
+ * is registered as a shared flag on the root command so the parser accepts it on
+ * every command.
+ */
+export const getActiveProfile = (): string | null => {
+  const argv = process.argv;
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === undefined) continue;
+    if (arg === "--profile") return argv[i + 1] ?? null;
+    if (arg.startsWith("--profile=")) {
+      return arg.slice("--profile=".length) || null;
+    }
+  }
+  return null;
+};
+
 /**
  * Creates a CliError.UserError with a message.
  * Use this in command error handlers to show user-friendly errors.
diff --git a/apps/cli/src/utils/source-code-details.ts b/apps/cli/src/utils/source-code-details.ts
index d4b19e195..d11e8d098 100644
--- a/apps/cli/src/utils/source-code-details.ts
+++ b/apps/cli/src/utils/source-code-details.ts
@@ -1,4 +1,4 @@
-import { Effect, ServiceMap } from "effect";
+import { Effect, Context } from "effect";
 
 import type { PackageJsonSchema } from "../domain/schema/package-json";
 import { SourceCode } from "../domain/services/source-code";
@@ -14,7 +14,7 @@ export interface SourceCodeDetailsType {
   packageJson: typeof PackageJsonSchema.Type;
 }
 
-export class SourceCodeDetails extends ServiceMap.Service<SourceCodeDetails, SourceCodeDetailsType>()("app/SourceCodeDetails") {
+export class SourceCodeDetails extends Context.Service<SourceCodeDetails, SourceCodeDetailsType>()("app/SourceCodeDetails") {
   static readonly provide =
     (details: SourceCodeDetailsType) =>
     <A, E, R>(effect: Effect.Effect<A, E, R>) =>
diff --git a/apps/cli/sst-env.d.ts b/apps/cli/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/apps/cli/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/examples/react-native-example/sst-env.d.ts b/examples/react-native-example/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/examples/react-native-example/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/libraries/node/sst-env.d.ts b/libraries/node/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/libraries/node/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index 22236c511..46d73728b 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -73,7 +73,7 @@
 		"@voidhash/generated-clients": "workspace:*"
 	},
 	"devDependencies": {
-		"@effect/vitest": "4.0.0-beta.23",
+		"@effect/vitest": "4.0.0-beta.84",
 		"@srsholmes/vitest-react-native": "^0.1.5",
 		"@types/react": "~19.1.10",
 		"@vitejs/plugin-react": "catalog:",
diff --git a/libraries/react-native/src/core/analytics/service.ts b/libraries/react-native/src/core/analytics/service.ts
index 38a679312..50c2309d3 100644
--- a/libraries/react-native/src/core/analytics/service.ts
+++ b/libraries/react-native/src/core/analytics/service.ts
@@ -9,7 +9,7 @@ import {
   Layer,
   Ref,
   Schedule,
-  ServiceMap,
+  Context,
 } from "effect";
 import { HttpClient, HttpClientRequest } from "effect/unstable/http";
 
@@ -106,7 +106,7 @@ const inlineRetrySchedule = Schedule.exponential(
  * `analyticsFlushInFlight` Promise guard) and tests can assert on queue length
  * without driving an Effect.
  */
-export class AnalyticsService extends ServiceMap.Service<AnalyticsService>()(
+export class AnalyticsService extends Context.Service<AnalyticsService>()(
   "rn-voidhash/AnalyticsService",
   {
     make: Effect.gen(function* () {
diff --git a/libraries/react-native/src/core/caching/cache-adapter.ts b/libraries/react-native/src/core/caching/cache-adapter.ts
index 3d4fafde5..aaaf20098 100644
--- a/libraries/react-native/src/core/caching/cache-adapter.ts
+++ b/libraries/react-native/src/core/caching/cache-adapter.ts
@@ -1,6 +1,6 @@
-import { ServiceMap, type Effect } from "effect";
+import { Context, type Effect } from "effect";
 
-export class CacheAdapter extends ServiceMap.Service<CacheAdapter, {
+export class CacheAdapter extends Context.Service<CacheAdapter, {
     readonly get: (key: string) => Effect.Effect<string | null>;
     readonly set: (key: string, value: string) => Effect.Effect<void>;
     readonly delete: (key: string) => Effect.Effect<void>;
diff --git a/libraries/react-native/src/core/caching/cache-manager.ts b/libraries/react-native/src/core/caching/cache-manager.ts
index 66e6a2073..f8ccbe963 100644
--- a/libraries/react-native/src/core/caching/cache-manager.ts
+++ b/libraries/react-native/src/core/caching/cache-manager.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { CacheAdapter } from "./cache-adapter";
 
@@ -104,6 +104,6 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class CacheManager extends ServiceMap.Service<CacheManager, Effect.Success<typeof make>>()("rn-voidhash/CacheManager") {
+export class CacheManager extends Context.Service<CacheManager, Effect.Success<typeof make>>()("rn-voidhash/CacheManager") {
   static Default = Layer.effect(CacheManager, make)
 }
diff --git a/libraries/react-native/src/core/feature-flags/feature-flag-service.ts b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
index 48063777d..cd42a6ffd 100644
--- a/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
+++ b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { CacheManager } from "../caching/cache-manager";
@@ -32,7 +32,7 @@ const generateCacheKey = (flagKeys: string[] | undefined) =>
  * keyed by the normalized request signature, so React hooks can subscribe to
  * exactly the slice of state they asked for.
  */
-export class FeatureFlagService extends ServiceMap.Service<FeatureFlagService>()(
+export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
   "rn-voidhash/FeatureFlagService",
   {
     make: Effect.gen(function* () {
diff --git a/libraries/react-native/src/core/identity/customer-attribute-manager.ts b/libraries/react-native/src/core/identity/customer-attribute-manager.ts
index 7ce1771b5..3f40cca66 100644
--- a/libraries/react-native/src/core/identity/customer-attribute-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-attribute-manager.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
 import { ApiClient } from "../networking/api-client";
@@ -62,7 +62,7 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class CustomerAttributeManager extends ServiceMap.Service<CustomerAttributeManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerAttributeManager") {
+export class CustomerAttributeManager extends Context.Service<CustomerAttributeManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerAttributeManager") {
   static Default = Layer.effect(CustomerAttributeManager, make).pipe(
     Layer.provide(CacheManager.Default)
   )
diff --git a/libraries/react-native/src/core/identity/customer-info-manager.ts b/libraries/react-native/src/core/identity/customer-info-manager.ts
index d14860b9e..96705f982 100644
--- a/libraries/react-native/src/core/identity/customer-info-manager.ts
+++ b/libraries/react-native/src/core/identity/customer-info-manager.ts
@@ -1,5 +1,5 @@
 import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
 import { ApiClient } from "../networking/api-client";
@@ -73,7 +73,7 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class CustomerInfoManager extends ServiceMap.Service<CustomerInfoManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerInfoManager") {
+export class CustomerInfoManager extends Context.Service<CustomerInfoManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerInfoManager") {
   static Default = Layer.effect(CustomerInfoManager, make).pipe(
     Layer.provide(CacheManager.Default)
   )
diff --git a/libraries/react-native/src/core/identity/identity-manager.ts b/libraries/react-native/src/core/identity/identity-manager.ts
index f763c656e..4fd44b94a 100644
--- a/libraries/react-native/src/core/identity/identity-manager.ts
+++ b/libraries/react-native/src/core/identity/identity-manager.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
@@ -110,7 +110,7 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class IdentityManager extends ServiceMap.Service<IdentityManager, Effect.Success<typeof make>>()("rn-voidhash/IdentityManager") {
+export class IdentityManager extends Context.Service<IdentityManager, Effect.Success<typeof make>>()("rn-voidhash/IdentityManager") {
   static Default = Layer.effect(IdentityManager, make).pipe(
     Layer.provide(Layer.mergeAll(
       CacheManager.Default,
diff --git a/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts b/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
index 61efce21a..f126ada15 100644
--- a/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
+++ b/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
@@ -1,4 +1,4 @@
-import { type Effect, ServiceMap } from "effect";
+import { type Effect, Context } from "effect";
 
 export interface LifecycleSubscription {
   readonly remove: () => void;
@@ -14,7 +14,7 @@ export interface LifecycleSubscription {
  * Implementations return `null` when the platform doesn't expose lifecycle
  * events (e.g. unit-test environments without React Native installed).
  */
-export class LifecycleAdapter extends ServiceMap.Service<
+export class LifecycleAdapter extends Context.Service<
   LifecycleAdapter,
   {
     readonly subscribe: (
diff --git a/libraries/react-native/src/core/lifecycle/lifecycle-service.ts b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
index 2cac8f71c..9f46d0f5a 100644
--- a/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
+++ b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { LifecycleAdapter, type LifecycleSubscription } from "./lifecycle-adapter";
 
@@ -8,7 +8,7 @@ import { LifecycleAdapter, type LifecycleSubscription } from "./lifecycle-adapte
  * `LifecycleAdapter` into `app_backgrounded` and `app_became_active` callbacks
  * which the caller is expected to forward to the analytics pipeline.
  */
-export class LifecycleService extends ServiceMap.Service<LifecycleService>()(
+export class LifecycleService extends Context.Service<LifecycleService>()(
   "rn-voidhash/LifecycleService",
   {
     make: Effect.gen(function* () {
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index b6451813a..c0082f4be 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -13,7 +13,7 @@ import {
   type SdkSyncPersonAttributesParams,
   type SdkSyncTransactionRequest,
 } from "@voidhash/generated-clients";
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import { HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import type { RuntimeSchema } from "../schema/runtime";
@@ -164,6 +164,6 @@ const make = Effect.gen(function* effect() {
   );
 });
 
-export class ApiClient extends ServiceMap.Service<ApiClient, Effect.Success<typeof make>>()("rn-voidhash/ApiClient") {
+export class ApiClient extends Context.Service<ApiClient, Effect.Success<typeof make>>()("rn-voidhash/ApiClient") {
   static Default = Layer.effect(ApiClient, make)
 }
diff --git a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
index f6b6bdd74..8de9d1727 100644
--- a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
@@ -1,4 +1,4 @@
-import { ServiceMap, type Effect } from "effect";
+import { Context, type Effect } from "effect";
 
 import type { Product, SubscriptionProduct } from "../entities/product";
 import type { Transaction } from "../entities/transaction";
@@ -19,7 +19,7 @@ import type {
   UserCancelledError,
 } from "./errors";
 
-export class PaymentAdapter extends ServiceMap.Service<
+export class PaymentAdapter extends Context.Service<
   PaymentAdapter,
   {
     initConnection(
diff --git a/libraries/react-native/src/core/paywalls/paywall-service.ts b/libraries/react-native/src/core/paywalls/paywall-service.ts
index 5d66f3068..c3ebeaf07 100644
--- a/libraries/react-native/src/core/paywalls/paywall-service.ts
+++ b/libraries/react-native/src/core/paywalls/paywall-service.ts
@@ -1,5 +1,5 @@
 import type { SdkResolvedPaywall } from "@voidhash/generated-clients";
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { IdentityManager } from "../identity/identity-manager";
 import { ApiClient } from "../networking/api-client";
@@ -29,7 +29,7 @@ export type PaywallReleaseRuntime = NonNullable<
  * returned as-is — including `showing.paywallRelease.runtime` when the active
  * release is a code release.
  */
-export class PaywallService extends ServiceMap.Service<PaywallService>()(
+export class PaywallService extends Context.Service<PaywallService>()(
   "rn-voidhash/PaywallService",
   {
     make: Effect.gen(function* () {
diff --git a/libraries/react-native/src/core/platform/platform-provider.ts b/libraries/react-native/src/core/platform/platform-provider.ts
index 270b83081..bddaebe03 100644
--- a/libraries/react-native/src/core/platform/platform-provider.ts
+++ b/libraries/react-native/src/core/platform/platform-provider.ts
@@ -1,4 +1,4 @@
-import { ServiceMap } from "effect";
+import { Context } from "effect";
 
 export interface PlatformInfo {
   appBuild: string | undefined;
@@ -12,4 +12,4 @@ export interface PlatformInfo {
   isDebugBuild: boolean;
   platform: "ios" | "android" | "unknown";
 }
-export class PlatformProvider extends ServiceMap.Service<PlatformProvider, PlatformInfo>()("rn-voidhash/PlatformProvider") {}
+export class PlatformProvider extends Context.Service<PlatformProvider, PlatformInfo>()("rn-voidhash/PlatformProvider") {}
diff --git a/libraries/react-native/src/core/products/product-service.ts b/libraries/react-native/src/core/products/product-service.ts
index eca43bbac..cc465e50b 100644
--- a/libraries/react-native/src/core/products/product-service.ts
+++ b/libraries/react-native/src/core/products/product-service.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
 import type { Product, SubscriptionProduct } from "../entities/product";
@@ -43,7 +43,7 @@ const mapNativeProductsToProductMap = (
  * (with a 24h cache) and maps them back to the schema slugs. Missing products
  * (not configured for the current platform) are returned as `null`.
  */
-export class ProductService extends ServiceMap.Service<ProductService>()(
+export class ProductService extends Context.Service<ProductService>()(
   "rn-voidhash/ProductService",
   {
     make: Effect.gen(function* () {
diff --git a/libraries/react-native/src/core/schema/schema-manager.ts b/libraries/react-native/src/core/schema/schema-manager.ts
index 060ff3e0e..db38415e7 100644
--- a/libraries/react-native/src/core/schema/schema-manager.ts
+++ b/libraries/react-native/src/core/schema/schema-manager.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { FailedToFetchSchemaError } from "../../errors";
@@ -45,7 +45,7 @@ interface ResolveSchemaArgs {
  * cached schema — using a separate cache key per version makes upgrades
  * safe by forcing a fresh fetch on the first launch of a new build.
  */
-export class SchemaManager extends ServiceMap.Service<SchemaManager>()(
+export class SchemaManager extends Context.Service<SchemaManager>()(
   "rn-voidhash/SchemaManager",
   {
     make: Effect.gen(function* () {
diff --git a/libraries/react-native/src/core/sdk-configuration.ts b/libraries/react-native/src/core/sdk-configuration.ts
index 7a5b6c591..7687e655e 100644
--- a/libraries/react-native/src/core/sdk-configuration.ts
+++ b/libraries/react-native/src/core/sdk-configuration.ts
@@ -1,6 +1,6 @@
-import { ServiceMap } from "effect";
+import { Context } from "effect";
 
-export class SdkConfiguration extends ServiceMap.Service<SdkConfiguration, {
+export class SdkConfiguration extends Context.Service<SdkConfiguration, {
     readonly baseUrl: string;
     readonly debug: boolean;
     readonly ingestUrl: string | undefined;
diff --git a/libraries/react-native/src/core/transactions/transaction-service.ts b/libraries/react-native/src/core/transactions/transaction-service.ts
index 00441f094..ced10afe4 100644
--- a/libraries/react-native/src/core/transactions/transaction-service.ts
+++ b/libraries/react-native/src/core/transactions/transaction-service.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
 import type { SubscriptionProduct } from "../entities/product";
@@ -82,7 +82,7 @@ const mapTransactionToSyncPayload = (
  * coalesce concurrent sync attempts for the same transaction (the cache TTL
  * catches duplicate attempts across runtime restarts).
  */
-export class TransactionService extends ServiceMap.Service<TransactionService>()(
+export class TransactionService extends Context.Service<TransactionService>()(
   "rn-voidhash/TransactionService",
   {
     make: Effect.gen(function* () {
diff --git a/libraries/react-native/sst-env.d.ts b/libraries/react-native/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/libraries/react-native/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/libraries/react-native/tests/core/cache-manager.test.ts b/libraries/react-native/tests/core/cache-manager.test.ts
index fdba80abc..c253113e2 100644
--- a/libraries/react-native/tests/core/cache-manager.test.ts
+++ b/libraries/react-native/tests/core/cache-manager.test.ts
@@ -22,13 +22,13 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.set("customer:1", { id: "1" }, { staleTime: 1000, ttl: 1000 })
         )
       );
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.get<{ id: string }>("customer:1")
         )
       );
@@ -54,14 +54,14 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.set("customer:expired", { id: "expired" }, { ttl: 1 })
         )
       );
       await wait(5);
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.get<{ id: string }>("customer:expired")
         )
       );
@@ -84,14 +84,14 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.set("customer:stale", { id: "stale" }, { staleTime: 1, ttl: 1000 })
         )
       );
       await wait(5);
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.get<{ id: string }>("customer:stale")
         )
       );
@@ -116,7 +116,7 @@ describe("CacheManager", () => {
 
     try {
       await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           Effect.all([
             manager.set("k1", "v1"),
             manager.set("k2", "v2"),
@@ -126,13 +126,13 @@ describe("CacheManager", () => {
       );
 
       const keys = await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.getCacheKeys())
+        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
       );
       const k1 = await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.get<string>("k1"))
+        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k1"))
       );
       const k2 = await runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.get<string>("k2"))
+        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k2"))
       );
 
       expect(keys).toEqual([]);
diff --git a/libraries/react-native/tests/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
index 9883f46bd..046346724 100644
--- a/libraries/react-native/tests/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -40,10 +40,10 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.set("distinctId", "cached-before-init"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-before-init"))
       );
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerAttributeManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerAttributeManager, (manager) =>
           manager.setCustomerAttributes("cached-before-init", {
             email: "before@voidhash.test",
             name: "Before",
@@ -229,7 +229,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.set("distinctId", "feature-user"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "feature-user"))
       );
 
       const inputKeys = ["b", "a"];
@@ -325,7 +325,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.set("distinctId", "fetched-customer")
         )
       );
@@ -670,7 +670,7 @@ describe("VoidhashEffectClient", () => {
 
       try {
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          Effect.flatMap(CacheManager, (manager) =>
             manager.set("distinctId", "analytics-user")
           )
         );
@@ -1049,7 +1049,7 @@ describe("VoidhashEffectClient", () => {
       try {
         // Store a different app release in cache
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager.asEffect(), (manager) =>
+          Effect.flatMap(CacheManager, (manager) =>
             manager.set("voidhash:analytics:last-seen-app-release", {
               appBuild: "0",
               appVersion: "0.0.1",
diff --git a/libraries/react-native/tests/core/customer-info-manager.test.ts b/libraries/react-native/tests/core/customer-info-manager.test.ts
index e5f95cfa6..ec87e91b9 100644
--- a/libraries/react-native/tests/core/customer-info-manager.test.ts
+++ b/libraries/react-native/tests/core/customer-info-manager.test.ts
@@ -30,13 +30,13 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerInfoManager, (manager) =>
           manager.cache("cached-user", customer)
         )
       );
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerInfoManager, (manager) =>
           manager.getCustomer("cached-user", "cache")
         )
       );
@@ -62,12 +62,12 @@ describe("CustomerInfoManager", () => {
 
     try {
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerInfoManager, (manager) =>
           manager.getCustomer("fetched-user", "fetch")
         )
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerInfoManager, (manager) =>
           manager.getCustomerFromCache("fetched-user")
         )
       );
@@ -97,11 +97,11 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) => manager.cache("fresh-user", customer))
+        Effect.flatMap(CustomerInfoManager, (manager) => manager.cache("fresh-user", customer))
       );
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerInfoManager, (manager) =>
           manager.getCustomer("fresh-user", "fetch-while-stale")
         )
       );
@@ -129,7 +129,7 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.set("customer:stale-user", staleCustomer, {
             staleTime: 1,
             ttl: 1000,
@@ -139,7 +139,7 @@ describe("CustomerInfoManager", () => {
       await wait(5);
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerInfoManager, (manager) =>
           manager.getCustomer("stale-user", "fetch-while-stale")
         )
       );
diff --git a/libraries/react-native/tests/core/identity-manager.test.ts b/libraries/react-native/tests/core/identity-manager.test.ts
index ff5b9ce2f..3cd10f407 100644
--- a/libraries/react-native/tests/core/identity-manager.test.ts
+++ b/libraries/react-native/tests/core/identity-manager.test.ts
@@ -31,11 +31,11 @@ describe("IdentityManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.set("distinctId", "cached-user"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-user"))
       );
 
       const distinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctId())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
       );
 
       expect(distinctId).toBe("cached-user");
@@ -56,10 +56,10 @@ describe("IdentityManager", () => {
 
     try {
       const distinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctId())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
       );
 
       expect(distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
@@ -86,7 +86,7 @@ describe("IdentityManager", () => {
       });
 
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           Effect.all([
             manager.set("distinctId", "old-user"),
             manager.set("customer-attributes:old-user", {
@@ -98,7 +98,7 @@ describe("IdentityManager", () => {
       );
 
       await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager.asEffect(), (manager) =>
+        Effect.flatMap(IdentityManager, (manager) =>
           manager.identify("new-user", {
             email: "new@voidhash.test",
             name: "New User",
@@ -107,10 +107,10 @@ describe("IdentityManager", () => {
       );
 
       const cachedDistinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
       );
       const cachedCustomer = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerInfoManager, (manager) =>
           manager.getCustomerFromCache("new-user")
         )
       );
@@ -160,7 +160,7 @@ describe("IdentityManager", () => {
       });
 
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           Effect.all([
             manager.set("distinctId", "signed-in-user"),
             manager.set("customer:some-user", { id: "some-user" }),
@@ -168,7 +168,7 @@ describe("IdentityManager", () => {
         )
       );
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerAttributeManager.asEffect(), (manager) =>
+        Effect.flatMap(CustomerAttributeManager, (manager) =>
           manager.setCustomerAttributes("signed-in-user", {
             email: "signed@voidhash.test",
             name: "Signed User",
@@ -177,14 +177,14 @@ describe("IdentityManager", () => {
       );
 
       await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.reset())
+        Effect.flatMap(IdentityManager, (manager) => manager.reset())
       );
 
       const distinctIdFromCache = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager.asEffect(), (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
       );
       const cacheKeys = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) => manager.getCacheKeys())
+        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
       );
 
       expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
diff --git a/libraries/react-native/tests/core/schema-manager.test.ts b/libraries/react-native/tests/core/schema-manager.test.ts
index bbf403978..4b184bf97 100644
--- a/libraries/react-native/tests/core/schema-manager.test.ts
+++ b/libraries/react-native/tests/core/schema-manager.test.ts
@@ -37,7 +37,7 @@ const resolveSchemaEffect = (args: {
   distinctId: string;
   internalSchema?: RuntimeSchema;
 }) =>
-  Effect.flatMap(SchemaManager.asEffect(), (manager) =>
+  Effect.flatMap(SchemaManager, (manager) =>
     manager.resolveSchema(args)
   );
 
@@ -73,7 +73,7 @@ describe("SchemaManager", () => {
       expect(harness.atomRegistry.get(schemaAtom)).toEqual(internalSchema);
       // Cache should still be empty because we bypassed it entirely.
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.get<RuntimeSchema>("schema:1.0.0")
         )
       );
@@ -104,7 +104,7 @@ describe("SchemaManager", () => {
       expect(harness.atomRegistry.get(schemaAtom)).toEqual(remoteSchema);
 
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.get<RuntimeSchema>("schema:1.0.0")
         )
       );
@@ -132,7 +132,7 @@ describe("SchemaManager", () => {
       // Prime the cache with a different schema so we can tell which one
       // is being returned.
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.set("schema:1.0.0", cachedSchema, {
             ttl: 1000 * 60 * 60 * 24 * 30,
           })
@@ -160,7 +160,7 @@ describe("SchemaManager", () => {
       expect(harness.atomRegistry.get(schemaAtom)).toEqual(refreshedSchema);
 
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.get<RuntimeSchema>("schema:1.0.0")
         )
       );
@@ -216,7 +216,7 @@ describe("SchemaManager", () => {
       // Cache a schema under the OLD app version key — should not be used
       // when the harness is configured for "2.0.0".
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.set("schema:1.0.0", previousVersionSchema, {
             ttl: 1000 * 60 * 60 * 24 * 30,
           })
@@ -231,7 +231,7 @@ describe("SchemaManager", () => {
       expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
 
       const cachedForNewVersion = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.get<RuntimeSchema>("schema:2.0.0")
         )
       );
@@ -264,7 +264,7 @@ describe("SchemaManager", () => {
 
       // No cache key should have been written.
       const cacheKeys = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager.asEffect(), (manager) =>
+        Effect.flatMap(CacheManager, (manager) =>
           manager.getCacheKeys()
         )
       );
diff --git a/libraries/react-native/vitest.setup.ts b/libraries/react-native/vitest.setup.ts
index d9418a9ec..d6fed5219 100644
--- a/libraries/react-native/vitest.setup.ts
+++ b/libraries/react-native/vitest.setup.ts
@@ -1,5 +1,4 @@
 import { randomUUID } from "node:crypto";
-import { ServiceMap } from "effect";
 import { expect } from "vitest";
 
 expect.addEqualityTesters([]);
@@ -17,37 +16,3 @@ if (typeof globalThis.crypto.randomUUID !== "function") {
 		writable: true,
 	});
 }
-
-/**
- * Effect v4 (effect-smol) no longer treats `ServiceMap.Service` classes as
- * effects directly - they're `Yieldable` and must be unwrapped via
- * `Service.asEffect()` or `yield* Service` before use in operators like
- * `Effect.flatMap`. The fiber runtime checks for an `evaluate` symbol on the
- * value it's stepping through and throws "Not a valid effect" otherwise.
- *
- * This codebase's tests still use the v3-era `Effect.flatMap(Service, fn)`
- * pattern. Rather than touch every call site, we patch `ServiceProto` so a
- * `Service` evaluates as its underlying effect - restoring the old behavior in
- * tests only. Production code uses the `yield* Service` syntax and is
- * unaffected.
- */
-{
-	const evaluateKey = "~effect/Effect/evaluate";
-	class DummyService extends ServiceMap.Service<
-		DummyService,
-		Record<string, unknown>
-	>()("__voidhash/VitestPolyfillProbe__") {}
-	const ServiceProto = Object.getPrototypeOf(Object.getPrototypeOf(DummyService));
-	if (ServiceProto && !(evaluateKey in ServiceProto)) {
-		Object.defineProperty(ServiceProto, evaluateKey, {
-			configurable: true,
-			writable: true,
-			value(this: { asEffect: () => Record<string, unknown> }, fiber: unknown) {
-				const effect = this.asEffect();
-				return (
-					effect as Record<string, (fiber: unknown) => unknown>
-				)[evaluateKey](fiber);
-			},
-		});
-	}
-}
diff --git a/libraries/web/src/core/analytics/analytics-service.ts b/libraries/web/src/core/analytics/analytics-service.ts
index 02a1ceae2..22ca16d23 100644
--- a/libraries/web/src/core/analytics/analytics-service.ts
+++ b/libraries/web/src/core/analytics/analytics-service.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import type { CaptureAcceptedResponse } from "@voidhash/generated-clients/event-capture";
 
 import type { AnalyticsFlushResult } from "../../types";
@@ -392,7 +392,7 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class AnalyticsService extends ServiceMap.Service<
+export class AnalyticsService extends Context.Service<
   AnalyticsService,
   Effect.Success<typeof make>
 >()("web-voidhash/AnalyticsService") {
diff --git a/libraries/web/src/core/caching/cache-adapter.ts b/libraries/web/src/core/caching/cache-adapter.ts
index b3d01f5a1..55675d780 100644
--- a/libraries/web/src/core/caching/cache-adapter.ts
+++ b/libraries/web/src/core/caching/cache-adapter.ts
@@ -1,6 +1,6 @@
-import { ServiceMap, type Effect } from "effect";
+import { Context, type Effect } from "effect";
 
-export class CacheAdapter extends ServiceMap.Service<
+export class CacheAdapter extends Context.Service<
   CacheAdapter,
   {
     readonly get: (key: string) => Effect.Effect<string | null>;
diff --git a/libraries/web/src/core/caching/cache-manager.ts b/libraries/web/src/core/caching/cache-manager.ts
index fa52806db..dc241e444 100644
--- a/libraries/web/src/core/caching/cache-manager.ts
+++ b/libraries/web/src/core/caching/cache-manager.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import { SdkConfiguration } from "../sdk-configuration";
 import { CacheAdapter } from "./cache-adapter";
@@ -147,7 +147,7 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class CacheManager extends ServiceMap.Service<
+export class CacheManager extends Context.Service<
   CacheManager,
   Effect.Success<typeof make>
 >()("web-voidhash/CacheManager") {
diff --git a/libraries/web/src/core/event-bus.ts b/libraries/web/src/core/event-bus.ts
index b230d505e..c82510c8d 100644
--- a/libraries/web/src/core/event-bus.ts
+++ b/libraries/web/src/core/event-bus.ts
@@ -1,4 +1,4 @@
-import { ServiceMap } from "effect";
+import { Context } from "effect";
 
 import type { VoidhashEventMap, VoidhashEventName } from "../types";
 
@@ -45,7 +45,7 @@ export class EventBus {
   }
 }
 
-export class EventBusProvider extends ServiceMap.Service<
+export class EventBusProvider extends Context.Service<
   EventBusProvider,
   EventBus
 >()("web-voidhash/EventBusProvider") {}
diff --git a/libraries/web/src/core/feature-flags/feature-flag-service.ts b/libraries/web/src/core/feature-flags/feature-flag-service.ts
index 1b8ec093b..9705dec85 100644
--- a/libraries/web/src/core/feature-flags/feature-flag-service.ts
+++ b/libraries/web/src/core/feature-flags/feature-flag-service.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import type {
   FeatureFlagEntry,
@@ -126,7 +126,7 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class FeatureFlagService extends ServiceMap.Service<
+export class FeatureFlagService extends Context.Service<
   FeatureFlagService,
   Effect.Success<typeof make>
 >()("web-voidhash/FeatureFlagService") {
diff --git a/libraries/web/src/core/identity/identity-manager.ts b/libraries/web/src/core/identity/identity-manager.ts
index 0e8a10af6..4faad9ef8 100644
--- a/libraries/web/src/core/identity/identity-manager.ts
+++ b/libraries/web/src/core/identity/identity-manager.ts
@@ -1,4 +1,4 @@
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 
 import type { VoidhashTraits } from "../../types";
 import { CacheManager } from "../caching/cache-manager";
@@ -134,7 +134,7 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class IdentityManager extends ServiceMap.Service<
+export class IdentityManager extends Context.Service<
   IdentityManager,
   Effect.Success<typeof make>
 >()("web-voidhash/IdentityManager") {
diff --git a/libraries/web/src/core/networking/api-client.ts b/libraries/web/src/core/networking/api-client.ts
index bec06e743..1464d8667 100644
--- a/libraries/web/src/core/networking/api-client.ts
+++ b/libraries/web/src/core/networking/api-client.ts
@@ -11,7 +11,7 @@ import {
   type SdkSyncPersonAttributesBody,
   type SdkSyncPersonAttributesParams,
 } from "@voidhash/generated-clients";
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { SdkConfiguration } from "../sdk-configuration";
@@ -117,7 +117,7 @@ const make = Effect.gen(function* effect() {
   );
 });
 
-export class ApiClient extends ServiceMap.Service<
+export class ApiClient extends Context.Service<
   ApiClient,
   Effect.Success<typeof make>
 >()("web-voidhash/ApiClient") {
diff --git a/libraries/web/src/core/networking/event-capture-api-client.ts b/libraries/web/src/core/networking/event-capture-api-client.ts
index f6741d2e4..0791b31e2 100644
--- a/libraries/web/src/core/networking/event-capture-api-client.ts
+++ b/libraries/web/src/core/networking/event-capture-api-client.ts
@@ -2,7 +2,7 @@ import {
   make as makeEventCaptureClient,
   type VoidhashEventCaptureClient,
 } from "@voidhash/generated-clients/event-capture";
-import { Effect, Layer, ServiceMap } from "effect";
+import { Effect, Layer, Context } from "effect";
 import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { SdkConfiguration } from "../sdk-configuration";
@@ -22,7 +22,7 @@ const make = Effect.gen(function* effect() {
   });
 });
 
-export class EventCaptureApiClient extends ServiceMap.Service<
+export class EventCaptureApiClient extends Context.Service<
   EventCaptureApiClient,
   Effect.Success<typeof make>
 >()("web-voidhash/EventCaptureApiClient") {
diff --git a/libraries/web/src/core/platform/platform-provider.ts b/libraries/web/src/core/platform/platform-provider.ts
index 3b096b14d..b85d92145 100644
--- a/libraries/web/src/core/platform/platform-provider.ts
+++ b/libraries/web/src/core/platform/platform-provider.ts
@@ -1,8 +1,8 @@
-import { Layer, ServiceMap } from "effect";
+import { Layer, Context } from "effect";
 
 import { BrowserPlatformProvider } from "./browser-platform-provider";
 
-export class PlatformProvider extends ServiceMap.Service<
+export class PlatformProvider extends Context.Service<
   PlatformProvider,
   BrowserPlatformProvider
 >()("web-voidhash/PlatformProvider") {}
diff --git a/libraries/web/src/core/sdk-configuration.ts b/libraries/web/src/core/sdk-configuration.ts
index c5247af9b..90cd26c77 100644
--- a/libraries/web/src/core/sdk-configuration.ts
+++ b/libraries/web/src/core/sdk-configuration.ts
@@ -1,8 +1,8 @@
-import { ServiceMap } from "effect";
+import { Context } from "effect";
 
 import type { ResolvedVoidhashConfig } from "../types";
 
-export class SdkConfiguration extends ServiceMap.Service<
+export class SdkConfiguration extends Context.Service<
   SdkConfiguration,
   ResolvedVoidhashConfig
 >()("web-voidhash/SdkConfiguration") {}
diff --git a/libraries/web/sst-env.d.ts b/libraries/web/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/libraries/web/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/libraries/web/tests/client.test.ts b/libraries/web/tests/client.test.ts
index a9041604a..aa84c86a0 100644
--- a/libraries/web/tests/client.test.ts
+++ b/libraries/web/tests/client.test.ts
@@ -135,7 +135,7 @@ describe("VoidhashWebClient", () => {
     await client.reset();
 
     const syncCalls = calls.filter((call) =>
-      call.url.endsWith("/sdk/sync-customer-attributes")
+      call.url.endsWith("/sdk/person/traits")
     );
     const identifyCall = calls.find((call) => call.url.endsWith("/sdk/identify"));
 
diff --git a/package.json b/package.json
index 79f950596..581fb9037 100644
--- a/package.json
+++ b/package.json
@@ -23,11 +23,11 @@
       "@trpc/server": "^11.1.0",
       "@tanstack/react-query": "^5.90.21",
       "@trpc/tanstack-react-query": "^11.1.0",
-      "effect": "4.0.0-beta.23",
-      "@effect/platform-node": "4.0.0-beta.23",
-      "@effect/platform-bun": "4.0.0-beta.23",
-      "@effect/language-service": "^0.77.0",
-      "@effect/vitest": "4.0.0-beta.23",
+      "effect": "4.0.0-beta.84",
+      "@effect/platform-node": "4.0.0-beta.84",
+      "@effect/platform-bun": "4.0.0-beta.84",
+      "@effect/language-service": "^0.86.2",
+      "@effect/vitest": "4.0.0-beta.84",
       "better-auth": "^1.4.18"
     }
   },
@@ -72,7 +72,7 @@
   },
   "pnpm": {
     "overrides": {
-      "effect": "4.0.0-beta.23"
+      "effect": "4.0.0-beta.84"
     }
   },
   "packageManager": "pnpm@10.19.0"
diff --git a/packages/generated-clients/sst-env.d.ts b/packages/generated-clients/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/packages/generated-clients/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/packages/shared/src/auth.ts b/packages/shared/src/auth.ts
index 9056ee2a1..67a7b05d9 100644
--- a/packages/shared/src/auth.ts
+++ b/packages/shared/src/auth.ts
@@ -1,4 +1,4 @@
-import { Schema, ServiceMap } from "effect";
+import { Schema, Context } from "effect";
 
 export const SessionOrganizationSchema = Schema.Struct({
   id: Schema.String,
@@ -129,4 +129,4 @@ export type AnyAuthSession =
   | SecretKeySession
   | PublishableKeySession;
 
-export class AuthSession extends ServiceMap.Service<AuthSession, UserSession | SecretKeySession | PublishableKeySession>()("shared/auth/AuthSession") {}
+export class AuthSession extends Context.Service<AuthSession, UserSession | SecretKeySession | PublishableKeySession>()("shared/auth/AuthSession") {}
diff --git a/packages/shared/sst-env.d.ts b/packages/shared/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/packages/shared/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/packages/tsconfig/sst-env.d.ts b/packages/tsconfig/sst-env.d.ts
new file mode 100644
index 000000000..9111ecdfa
--- /dev/null
+++ b/packages/tsconfig/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c6028aa9f..363d385c7 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -31,7 +31,7 @@ catalogs:
 overrides:
   react: 19.1.0
   react-dom: 19.1.0
-  effect: 4.0.0-beta.23
+  effect: 4.0.0-beta.84
 
 importers:
 
@@ -79,13 +79,13 @@ importers:
         version: 8.0.0
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
   apps/cli:
     dependencies:
       '@effect/platform-node':
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(ioredis@5.9.1)
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
       '@voidhash/generated-clients':
         specifier: workspace:*
         version: link:../../packages/generated-clients
@@ -97,10 +97,10 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
+        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
       effect:
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
       esbuild:
         specifier: ^0.25.10
         version: 0.25.12
@@ -118,8 +118,8 @@ importers:
         specifier: 'catalog:'
         version: 0.64.1
       '@effect/vitest':
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@3.2.4)
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.4)
       '@voidhash/react-native':
         specifier: workspace:*
         version: link:../../libraries/react-native
@@ -137,19 +137,19 @@ importers:
         version: 4.21.0
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       vitest:
         specifier: ^3.0.9
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
   apps/studio:
     dependencies:
       '@tailwindcss/vite':
         specifier: ^4.1.13
-        version: 4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@vitejs/plugin-react':
         specifier: ^5.2.0
-        version: 5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -164,7 +164,7 @@ importers:
         version: 4.3.0
       vite:
         specifier: ^7.0.0
-        version: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
@@ -278,13 +278,13 @@ importers:
     devDependencies:
       '@effect/platform':
         specifier: 'catalog:'
-        version: 0.94.5(effect@4.0.0-beta.23)
+        version: 0.94.5(effect@4.0.0-beta.84)
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
       effect:
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
       tsup:
         specifier: ^6.1.3
         version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
@@ -296,10 +296,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
   libraries/paywalls:
     dependencies:
@@ -333,7 +333,7 @@ importers:
         version: 5.6.3
       vitest:
         specifier: ^3.0.9
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
   libraries/react-native:
     dependencies:
@@ -344,24 +344,24 @@ importers:
         specifier: workspace:*
         version: link:../../packages/generated-clients
       effect:
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
       voidhash-cli:
         specifier: workspace:*
         version: link:../../apps/cli
     devDependencies:
       '@effect/vitest':
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))
+        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
       '@vitejs/plugin-react':
         specifier: 'catalog:'
-        version: 5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
@@ -394,25 +394,25 @@ importers:
         version: 5.9.3
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       vitest:
         specifier: ^4.1.6
-        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
 
   libraries/web:
     dependencies:
       '@effect/platform':
         specifier: 'catalog:'
-        version: 0.94.5(effect@4.0.0-beta.23)
+        version: 0.94.5(effect@4.0.0-beta.84)
       '@voidhash/generated-clients':
         specifier: workspace:*
         version: link:../../packages/generated-clients
       effect:
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
@@ -443,16 +443,16 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
   packages/generated-clients:
     dependencies:
       effect:
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
     devDependencies:
       '@voidhash/tsconfig':
         specifier: workspace:*
@@ -464,8 +464,8 @@ importers:
   packages/shared:
     dependencies:
       effect:
-        specifier: 4.0.0-beta.23
-        version: 4.0.0-beta.23
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
     devDependencies:
       '@voidhash/tsconfig':
         specifier: workspace:*
@@ -1385,28 +1385,28 @@ packages:
     resolution: {integrity: sha512-1S7Xr2t9mygR6QyiIdCQUvPwSvcf5EBpnWmKa/8rC4P0btFfw/RiWRI8bvFI2AW+U4KStMUHYxPu4QEsk4y8bg==}
     hasBin: true
 
-  '@effect/platform-node-shared@4.0.0-beta.23':
-    resolution: {integrity: sha512-iYy0oPMAKnpWEum1u8v42BcDAkUEK+AuiYGMHAnf+GJYlQTYbIcIQcLjAQ68yQuDf3n+la91TSs0MaiA3F2Svw==}
+  '@effect/platform-node-shared@4.0.0-beta.91':
+    resolution: {integrity: sha512-JX++yhomaOEpQmnTYuhn+pKAgKg5MQvycAf1rXGtyVKi202Nc5nK37xbywDcugfwrc1FrPxrxa3BY3lbSc74cw==}
     engines: {node: '>=18.0.0'}
     peerDependencies:
-      effect: 4.0.0-beta.23
+      effect: 4.0.0-beta.84
 
-  '@effect/platform-node@4.0.0-beta.23':
-    resolution: {integrity: sha512-7CNVrUbxXXxXsUWtyJrrBMpf5JtjDJpuhIPIQssACYTtD711EQdy3itHHxXrIjXf7vBhx0XrekQ3PJUSN9usIw==}
+  '@effect/platform-node@4.0.0-beta.84':
+    resolution: {integrity: sha512-WHPXaaIR1NpiANg+TOfTRupx9Uf2h/WVFZxRQdg5soUpa8bU61NwKxi3A5F/zLpp2AkRPgHTw1rQjwUD+/uA9A==}
     engines: {node: '>=18.0.0'}
     peerDependencies:
-      effect: 4.0.0-beta.23
+      effect: 4.0.0-beta.84
       ioredis: ^5.7.0
 
   '@effect/platform@0.94.5':
     resolution: {integrity: sha512-z05APUiDDPbodhTkH/RJqOLoCU11bU2IZLfcwLFrld03+ob1VeqRnELQlmueLIYm6NZifHAtjl32V+GRt34y4A==}
     peerDependencies:
-      effect: 4.0.0-beta.23
+      effect: 4.0.0-beta.84
 
-  '@effect/vitest@4.0.0-beta.23':
-    resolution: {integrity: sha512-2ezxm8jpBuoY9UsrwUyGsbs1lwKodR6NGV/g/rypoPN3L6WABXOcZs2mhFmY8y5EXnGZnSgsWhpxwYlEo29jcA==}
+  '@effect/vitest@4.0.0-beta.84':
+    resolution: {integrity: sha512-TNeqfWnX34CSArTXcRPwUh7g7evQU8qEJniD7XKUj+Yv79qV9BfRC+SA2V2u2gUcZoaks9RC1K2Ha49UOUz52Q==}
     peerDependencies:
-      effect: 4.0.0-beta.23
+      effect: 4.0.0-beta.84
       vitest: ^3.0.0 || ^4.0.0
 
   '@emnapi/core@1.7.1':
@@ -2605,31 +2605,61 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
+    resolution: {integrity: sha512-LCkGo6JDfaBhgST7UpPWgNgLINpcpabaHfyz5OBx75nUYxBsaEPxjnyNjWpeb/xBup/682QnBfRBy2/LvPutZQ==}
+    cpu: [arm64]
+    os: [darwin]
+
   '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.3':
     resolution: {integrity: sha512-mdzd3AVzYKuUmiWOQ8GNhl64/IoFGol569zNRdkLReh6LRLHOXxU4U8eq0JwaD8iFHdVGqSy4IjFL4reoWCDFw==}
     cpu: [x64]
     os: [darwin]
 
+  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
+    resolution: {integrity: sha512-zExlW9zUJKZH/tOtVMttwjKa4Xm/3KcNjnE3dPN92uCktwavMxpgCA3MoJK/DOnTWsQgo224OaST27/mPNAf+w==}
+    cpu: [x64]
+    os: [darwin]
+
   '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.3':
     resolution: {integrity: sha512-YxQL+ax0XqBJDZiKimS2XQaf+2wDGVa1enVRGzEvLLVFeqa5kx2bWbtcSXgsxjQB7nRqqIGFIcLteF/sHeVtQg==}
     cpu: [arm64]
     os: [linux]
 
+  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
+    resolution: {integrity: sha512-dgX0P/9wGPJeHFBG+ZmhgE6bmtMt7NP5CRBGyyktpopdk/mW4POnrpQsSLtKI1dwpc+pPLuXHDh6vvskyQE/sw==}
+    cpu: [arm64]
+    os: [linux]
+
   '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.3':
     resolution: {integrity: sha512-fg0uy/dG/nZEXfYilKoRe7yALaNmHoYeIoJuJ7KJ+YyU2bvY8vPv27f7UKhGRpY6euFYqEVhxCFZgAUNQBM3nw==}
     cpu: [arm]
     os: [linux]
 
+  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
+    resolution: {integrity: sha512-Tg3yX65f5GbtXLkrYEHE5oibZG9epyYWas7FogTTEJeDEF9JlXJzKgXaNhT3UXlTOeA+AfZpYZYZ0uPj7Cfquw==}
+    cpu: [arm]
+    os: [linux]
+
   '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.3':
     resolution: {integrity: sha512-cvwNfbP07pKUfq1uH+S6KJ7dT9K8WOE4ZiAcsrSes+UY55E/0jLYc+vq+DO7jlmqRb5zAggExKm0H7O/CBaesg==}
     cpu: [x64]
     os: [linux]
 
+  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
+    resolution: {integrity: sha512-8TNXMEjJc3QEy7R/x1INhgiU+XakDAFUzBhaz7+Rbrs8NH5UQeHQxxmzsSBJGyV6I1jW79undiQm8tOI+D+8FQ==}
+    cpu: [x64]
+    os: [linux]
+
   '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
     resolution: {integrity: sha512-x0fWaQtYp4E6sktbsdAqnehxDgEc/VwM7uLsRCYWaiGu0ykYdZPiS8zCWdnjHwyiumousxfBm4SO31eXqwEZhQ==}
     cpu: [x64]
     os: [win32]
 
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
+    resolution: {integrity: sha512-CmCXPQrkbwExx3j946/PtHWHbYJiCRBRDl4BlkRQcJB/YOwQxJRTpoo7aTsortjgoJ1x7opzTSxn7C+ASSLVjQ==}
+    cpu: [x64]
+    os: [win32]
+
   '@napi-rs/wasm-runtime@0.2.12':
     resolution: {integrity: sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==}
 
@@ -4770,8 +4800,8 @@ packages:
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
-  effect@4.0.0-beta.23:
-    resolution: {integrity: sha512-bu6Lv2Tjs8QBMz9/TfPrNur6wqRCykW0rOZCJuaylt6g6sT28niL9L4Aeak/7XTsnYp5bCWaqRrSYANBVkPFQw==}
+  effect@4.0.0-beta.84:
+    resolution: {integrity: sha512-zWwFI9WZ4TsddBmtcuuAO2IXGR0Dp56xIUt8cX29ZeyOEtErXqP6muDaVpro08lGiMSOGMqSpuH/C1TUxHsRAA==}
 
   electron-to-chromium@1.5.267:
     resolution: {integrity: sha512-0Drusm6MVRXSOJpGbaSVgcQsuB4hEkMpHXaVstcPmhu5LIedxs1xNK/nIxmQIU/RPC0+1/o0AVZfBTkTNJOdUw==}
@@ -5303,8 +5333,8 @@ packages:
   exsolve@1.0.8:
     resolution: {integrity: sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA==}
 
-  fast-check@4.5.3:
-    resolution: {integrity: sha512-IE9csY7lnhxBnA8g/WI5eg/hygA6MGWJMSNfFRrBlXUciADEhS1EDB0SIsMSvzubzIlOBbVITSsypCsW717poA==}
+  fast-check@4.8.0:
+    resolution: {integrity: sha512-GOJ158CUMnN6cSahsv4+ExARvIDuzzinFjkp0E9WtiBa5zcVeLozVkWaE4IzFcc+Y48Wp1EDlUZsXRyAztQcSg==}
     engines: {node: '>=12.17.0'}
 
   fast-deep-equal@3.1.3:
@@ -5678,9 +5708,9 @@ packages:
   ini@1.3.8:
     resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
 
-  ini@6.0.0:
-    resolution: {integrity: sha512-IBTdIkzZNOpqm7q3dRqJvMaldXjDHWkEDfrwGEQTs5eaQMWV+djAhR+wahyNNMAa+qpbDUhBMVt4ZKNwpPm7xQ==}
-    engines: {node: ^20.17.0 || >=22.9.0}
+  ini@7.0.0:
+    resolution: {integrity: sha512-ifK0CgjALofS5bkrcTy4RaQ9Vx2Knf/eLeIO+NaswQEpH1UblrtTSCIvN71qQDMq0PeQ/SSPojvEJp9vvvfr+w==}
+    engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
 
   internal-slot@1.1.0:
     resolution: {integrity: sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==}
@@ -6535,9 +6565,16 @@ packages:
     resolution: {integrity: sha512-P0efT1C9jIdVRefqjzOQ9Xml57zpOXnIuS+csaB4MdZbTdmGDLo8XhzBG1N7aO11gKDDkJvBLULeFTo46wwreA==}
     hasBin: true
 
+  msgpackr-extract@3.0.4:
+    resolution: {integrity: sha512-4kmO/MdyUIkLIvTPr8VHLil4AtoKIoniWPIEk5+CDy0xnWC84azhSFmuJ7PxZdsYtiP5kEeQsORAVIeMgxT+Hw==}
+    hasBin: true
+
   msgpackr@1.11.8:
     resolution: {integrity: sha512-bC4UGzHhVvgDNS7kn9tV8fAucIYUBuGojcaLiz7v+P63Lmtm0Xeji8B/8tYKddALXxJLpwIeBmUN3u64C4YkRA==}
 
+  msgpackr@2.0.4:
+    resolution: {integrity: sha512-o1C5KRmuRt+apqMr1HuGSqWStZoRBUpEsCsl15uM9VdAF1qHLtvMOU2En747EnTyEl6c4pzPewRMFF31s1CNbA==}
+
   multipasta@0.2.7:
     resolution: {integrity: sha512-KPA58d68KgGil15oDqXjkUBEBYc00XvbPj5/X+dyzeo/lWm9Nc25pQRlf1D+gv4OpK7NM0J1odrbu9JNNGvynA==}
 
@@ -6962,8 +6999,8 @@ packages:
   pure-rand@6.1.0:
     resolution: {integrity: sha512-bVWawvoZoBYpp6yIoQtQXHZjmz35RSVHnUOTefl8Vcjr8snTPY1wnpSPMWekcFwbxI6gtmT7rSYPFvz71ldiOA==}
 
-  pure-rand@7.0.1:
-    resolution: {integrity: sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==}
+  pure-rand@8.4.1:
+    resolution: {integrity: sha512-c58R2+SPFcSIPXoU834QN/KPDDOSd8sXcSrqf6e83Me6Rrp1EYkxukkjXMVrKvKaADs1SOyNkWdfvLf6zY8qLQ==}
 
   qrcode-terminal@0.11.0:
     resolution: {integrity: sha512-Uu7ii+FQy4Qf82G4xu7ShHhjhGahEpCWc3x8UavY3CTcWV+ufmmCtwkr7ZKsX42jdL0kr1B5FKUeqJvAn51jzQ==}
@@ -7775,8 +7812,9 @@ packages:
     resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
     engines: {node: '>=0.6'}
 
-  toml@3.0.0:
-    resolution: {integrity: sha512-y/mWCZinnvxjTKYhJ+pYxwD0mRLVvOtdS2Awbgxln6iEnt4rk0yBxeSBHkGJcPucRiG0e55mwWp+g/05rsrd6w==}
+  toml@4.1.1:
+    resolution: {integrity: sha512-EBJnVBr3dTXdA89WVFoAIPUqkBjxPMwRqsfuo1r240tKFHXv3zgca4+NJib/h6TyvGF7vOawz0jGuryJCdNHrw==}
+    engines: {node: '>=20'}
 
   totalist@3.0.1:
     resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==}
@@ -7979,6 +8017,10 @@ packages:
     resolution: {integrity: sha512-RqslV2Us5BrllB+JeiZnK4peryVTndy9Dnqq62S3yYRRTj0tFQCwEniUy2167skdGOy3vqRzEvl1Dm4sV2ReDg==}
     engines: {node: '>=20.18.1'}
 
+  undici@8.5.0:
+    resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==}
+    engines: {node: '>=22.19.0'}
+
   unicode-canonical-property-names-ecmascript@2.0.1:
     resolution: {integrity: sha512-dA8WbNeb2a6oQzAQ55YlT5vQAWGV9WXOsi3SskE3bcCdM0P4SDd+24zS/OCacdRq5BkdsRj9q3Pg6YyQoxIGqg==}
     engines: {node: '>=4'}
@@ -8060,8 +8102,8 @@ packages:
     resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
     engines: {node: '>= 0.4.0'}
 
-  uuid@13.0.0:
-    resolution: {integrity: sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==}
+  uuid@14.0.1:
+    resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
     hasBin: true
 
   uuid@7.0.3:
@@ -8373,6 +8415,18 @@ packages:
       utf-8-validate:
         optional: true
 
+  ws@8.21.0:
+    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
   xcode@3.0.1:
     resolution: {integrity: sha512-kCz5k7J7XbJtjABOvkc5lJmkiDh8VhjVCGNiqdKCscmVpdVUpEAyXv1xmCLkQJ5dsHqx3IPO4XW+NTDhU/fatA==}
     engines: {node: '>=10.0.0'}
@@ -8420,6 +8474,11 @@ packages:
     engines: {node: '>= 14.6'}
     hasBin: true
 
+  yaml@2.9.0:
+    resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==}
+    engines: {node: '>= 14.6'}
+    hasBin: true
+
   yargs-parser@21.1.1:
     resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
     engines: {node: '>=12'}
@@ -10135,42 +10194,42 @@ snapshots:
 
   '@effect/language-service@0.64.1': {}
 
-  '@effect/platform-node-shared@4.0.0-beta.23(effect@4.0.0-beta.23)':
+  '@effect/platform-node-shared@4.0.0-beta.91(effect@4.0.0-beta.84)':
     dependencies:
       '@types/ws': 8.18.1
-      effect: 4.0.0-beta.23
-      ws: 8.19.0
+      effect: 4.0.0-beta.84
+      ws: 8.21.0
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
 
-  '@effect/platform-node@4.0.0-beta.23(effect@4.0.0-beta.23)(ioredis@5.9.1)':
+  '@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)':
     dependencies:
-      '@effect/platform-node-shared': 4.0.0-beta.23(effect@4.0.0-beta.23)
-      effect: 4.0.0-beta.23
+      '@effect/platform-node-shared': 4.0.0-beta.91(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
       ioredis: 5.9.1
       mime: 4.1.0
-      undici: 7.22.0
+      undici: 8.5.0
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
 
-  '@effect/platform@0.94.5(effect@4.0.0-beta.23)':
+  '@effect/platform@0.94.5(effect@4.0.0-beta.84)':
     dependencies:
-      effect: 4.0.0-beta.23
+      effect: 4.0.0-beta.84
       find-my-way-ts: 0.1.6
       msgpackr: 1.11.8
       multipasta: 0.2.7
 
-  '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@3.2.4)':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.4)':
     dependencies:
-      effect: 4.0.0-beta.23
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      effect: 4.0.0-beta.84
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
-  '@effect/vitest@4.0.0-beta.23(effect@4.0.0-beta.23)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))':
     dependencies:
-      effect: 4.0.0-beta.23
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      effect: 4.0.0-beta.84
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
 
   '@emnapi/core@1.7.1':
     dependencies:
@@ -11353,21 +11412,39 @@ snapshots:
   '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.3':
     optional: true
 
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
+    optional: true
+
   '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.3':
     optional: true
 
+  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
+    optional: true
+
   '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.3':
     optional: true
 
+  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
+    optional: true
+
   '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.3':
     optional: true
 
+  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
+    optional: true
+
   '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.3':
     optional: true
 
+  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
+    optional: true
+
   '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
     optional: true
 
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
+    optional: true
+
   '@napi-rs/wasm-runtime@0.2.12':
     dependencies:
       '@emnapi/core': 1.7.1
@@ -12063,7 +12140,7 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
-  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))':
+  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))':
     dependencies:
       '@react-native/polyfills': 2.0.0
       esbuild: 0.27.7
@@ -12072,8 +12149,8 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
 
   '@standard-schema/spec@1.1.0': {}
 
@@ -12143,14 +12220,14 @@ snapshots:
       '@tailwindcss/oxide-win32-arm64-msvc': 4.3.0
       '@tailwindcss/oxide-win32-x64-msvc': 4.3.0
 
-  '@tailwindcss/vite@4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tailwindcss/vite@4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@tailwindcss/node': 4.3.0
       '@tailwindcss/oxide': 4.3.0
       tailwindcss: 4.3.0
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
-  '@tanstack/directive-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/directive-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.27.1
       '@babel/core': 7.29.0
@@ -12160,7 +12237,7 @@ snapshots:
       babel-dead-code-elimination: 1.0.12
       pathe: 2.0.3
       tiny-invariant: 1.3.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
     optional: true
@@ -12204,19 +12281,19 @@ snapshots:
       - crossws
     optional: true
 
-  '@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/react-start-client': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/react-start-server': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@tanstack/router-utils': 1.161.4
       '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@tanstack/start-server-core': 1.142.8
       pathe: 2.0.3
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@rsbuild/core'
       - crossws
@@ -12258,7 +12335,7 @@ snapshots:
       - supports-color
     optional: true
 
-  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@babel/core': 7.29.0
       '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
@@ -12276,7 +12353,7 @@ snapshots:
       zod: 3.25.76
     optionalDependencies:
       '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
     optional: true
@@ -12310,7 +12387,7 @@ snapshots:
       - supports-color
     optional: true
 
-  '@tanstack/server-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/server-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.27.1
       '@babel/core': 7.29.0
@@ -12319,7 +12396,7 @@ snapshots:
       '@babel/template': 7.28.6
       '@babel/traverse': 7.29.0
       '@babel/types': 7.29.0
-      '@tanstack/directive-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/directive-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       babel-dead-code-elimination: 1.0.12
       tiny-invariant: 1.3.3
     transitivePeerDependencies:
@@ -12336,7 +12413,7 @@ snapshots:
       tiny-warning: 1.0.3
     optional: true
 
-  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.0
@@ -12344,9 +12421,9 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-beta.40
       '@tanstack/router-core': 1.142.8
       '@tanstack/router-generator': 1.142.8
-      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@tanstack/router-utils': 1.141.0
-      '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@tanstack/start-client-core': 1.142.8
       '@tanstack/start-server-core': 1.142.8
       babel-dead-code-elimination: 1.0.12
@@ -12356,8 +12433,8 @@ snapshots:
       srvx: 0.9.8
       tinyglobby: 0.2.15
       ufo: 1.6.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vitefu: 1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vitefu: 1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       xmlbuilder2: 4.0.3
       zod: 3.25.76
     transitivePeerDependencies:
@@ -12507,6 +12584,7 @@ snapshots:
   '@types/node@25.3.3':
     dependencies:
       undici-types: 7.18.2
+    optional: true
 
   '@types/react-dom@19.2.3(@types/react@19.1.17)':
     dependencies:
@@ -12522,7 +12600,7 @@ snapshots:
 
   '@types/ws@8.18.1':
     dependencies:
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
 
   '@types/yargs-parser@21.0.3': {}
 
@@ -12725,7 +12803,7 @@ snapshots:
       '@urql/core': 5.2.0
       wonka: 6.3.5
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@babel/core': 7.29.0
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
@@ -12733,11 +12811,11 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@babel/core': 7.29.0
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
@@ -12745,7 +12823,7 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
@@ -12766,29 +12844,29 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
-  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 3.2.4
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
-  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 3.2.4
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
-  '@vitest/mocker@4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 4.1.6
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
   '@vitest/pretty-format@3.2.4':
     dependencies:
@@ -12837,7 +12915,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 2.0.0
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     optional: true
 
   '@vitest/ui@3.2.4(vitest@4.1.6)':
@@ -12849,7 +12927,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 2.0.0
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
     optional: true
 
   '@vitest/utils@3.2.4':
@@ -13365,7 +13443,7 @@ snapshots:
 
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
+  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
     dependencies:
       '@better-auth/core': 1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)
       '@better-auth/telemetry': 1.4.18(@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0))
@@ -13380,14 +13458,14 @@ snapshots:
       nanostores: 1.1.0
       zod: 4.3.6
     optionalDependencies:
-      '@tanstack/react-start': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@tanstack/react-start': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       drizzle-kit: 0.31.8
       drizzle-orm: 0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0)
       mysql2: 3.16.0
       next: 16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
 
   better-call@1.1.8(zod@4.3.6):
     dependencies:
@@ -13978,18 +14056,18 @@ snapshots:
 
   ee-first@1.1.1: {}
 
-  effect@4.0.0-beta.23:
+  effect@4.0.0-beta.84:
     dependencies:
       '@standard-schema/spec': 1.1.0
-      fast-check: 4.5.3
+      fast-check: 4.8.0
       find-my-way-ts: 0.1.6
-      ini: 6.0.0
+      ini: 7.0.0
       kubernetes-types: 1.30.0
-      msgpackr: 1.11.8
+      msgpackr: 2.0.4
       multipasta: 0.2.7
-      toml: 3.0.0
-      uuid: 13.0.0
-      yaml: 2.8.2
+      toml: 4.1.1
+      uuid: 14.0.1
+      yaml: 2.9.0
 
   electron-to-chromium@1.5.267: {}
 
@@ -14987,9 +15065,9 @@ snapshots:
 
   exsolve@1.0.8: {}
 
-  fast-check@4.5.3:
+  fast-check@4.8.0:
     dependencies:
-      pure-rand: 7.0.1
+      pure-rand: 8.4.1
 
   fast-deep-equal@3.1.3: {}
 
@@ -15376,7 +15454,7 @@ snapshots:
 
   ini@1.3.8: {}
 
-  ini@6.0.0: {}
+  ini@7.0.0: {}
 
   internal-slot@1.1.0:
     dependencies:
@@ -16578,10 +16656,26 @@ snapshots:
       '@msgpackr-extract/msgpackr-extract-win32-x64': 3.0.3
     optional: true
 
+  msgpackr-extract@3.0.4:
+    dependencies:
+      node-gyp-build-optional-packages: 5.2.2
+    optionalDependencies:
+      '@msgpackr-extract/msgpackr-extract-darwin-arm64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-darwin-x64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-linux-arm': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-linux-arm64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-linux-x64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-win32-x64': 3.0.4
+    optional: true
+
   msgpackr@1.11.8:
     optionalDependencies:
       msgpackr-extract: 3.0.3
 
+  msgpackr@2.0.4:
+    optionalDependencies:
+      msgpackr-extract: 3.0.4
+
   multipasta@0.2.7: {}
 
   mysql2@3.16.0:
@@ -17010,7 +17104,7 @@ snapshots:
 
   pure-rand@6.1.0: {}
 
-  pure-rand@7.0.1: {}
+  pure-rand@8.4.1: {}
 
   qrcode-terminal@0.11.0: {}
 
@@ -18021,7 +18115,7 @@ snapshots:
 
   toidentifier@1.0.1: {}
 
-  toml@3.0.0: {}
+  toml@4.1.1: {}
 
   totalist@3.0.1:
     optional: true
@@ -18203,13 +18297,13 @@ snapshots:
   ufo@1.6.3:
     optional: true
 
-  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       '@clack/prompts': 0.11.0
       commander: 14.0.2
       deepmerge: 4.3.1
       jsonc-parser: 3.3.1
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@edge-runtime/vm'
       - '@types/debug'
@@ -18248,11 +18342,15 @@ snapshots:
 
   undici-types@7.16.0: {}
 
-  undici-types@7.18.2: {}
+  undici-types@7.18.2:
+    optional: true
 
   undici@6.22.0: {}
 
-  undici@7.22.0: {}
+  undici@7.22.0:
+    optional: true
+
+  undici@8.5.0: {}
 
   unicode-canonical-property-names-ecmascript@2.0.1: {}
 
@@ -18345,7 +18443,7 @@ snapshots:
 
   utils-merge@1.0.1: {}
 
-  uuid@13.0.0: {}
+  uuid@14.0.1: {}
 
   uuid@7.0.3: {}
 
@@ -18368,13 +18466,13 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
-  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -18389,13 +18487,13 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -18410,29 +18508,29 @@ snapshots:
       - tsx
       - yaml
 
-  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.6.3)
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.9.3)
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       esbuild: 0.27.7
       fdir: 6.5.0(picomatch@4.0.3)
@@ -18447,9 +18545,9 @@ snapshots:
       lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
-      yaml: 2.8.2
+      yaml: 2.9.0
 
-  vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       esbuild: 0.27.7
       fdir: 6.5.0(picomatch@4.0.3)
@@ -18464,18 +18562,18 @@ snapshots:
       lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
-      yaml: 2.8.2
+      yaml: 2.9.0
 
-  vitefu@1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vitefu@1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
     optional: true
 
-  vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.4
-      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@vitest/pretty-format': 3.2.4
       '@vitest/runner': 3.2.4
       '@vitest/snapshot': 3.2.4
@@ -18493,8 +18591,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -18515,11 +18613,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2):
+  vitest@3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.4
-      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@vitest/pretty-format': 3.2.4
       '@vitest/runner': 3.2.4
       '@vitest/snapshot': 3.2.4
@@ -18537,8 +18635,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
-      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -18559,10 +18657,10 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
     dependencies:
       '@vitest/expect': 4.1.6
-      '@vitest/mocker': 4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.6
       '@vitest/runner': 4.1.6
       '@vitest/snapshot': 4.1.6
@@ -18579,7 +18677,7 @@ snapshots:
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.1.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
@@ -18726,6 +18824,8 @@ snapshots:
 
   ws@8.19.0: {}
 
+  ws@8.21.0: {}
+
   xcode@3.0.1:
     dependencies:
       simple-plist: 1.3.1
@@ -18762,6 +18862,8 @@ snapshots:
 
   yaml@2.8.2: {}
 
+  yaml@2.9.0: {}
+
   yargs-parser@21.1.1: {}
 
   yargs@17.7.2:
diff --git a/sst-env.d.ts b/sst-env.d.ts
new file mode 100644
index 000000000..64441936d
--- /dev/null
+++ b/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file

From 996ba75fd21844d2204e5541750f94c1f527edb2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 29 Jun 2026 14:05:31 +0200
Subject: [PATCH 024/129] feat: improve codegen with client

---
 apps/cli/src/cli/commands/init.ts       | 14 +++++++++-
 apps/cli/src/domain/services/codegen.ts | 37 ++++++++++++++++++++++++-
 2 files changed, 49 insertions(+), 2 deletions(-)

diff --git a/apps/cli/src/cli/commands/init.ts b/apps/cli/src/cli/commands/init.ts
index 6ce7459da..7db35d71f 100644
--- a/apps/cli/src/cli/commands/init.ts
+++ b/apps/cli/src/cli/commands/init.ts
@@ -123,8 +123,15 @@ export const initCommand = Command.make("init", {}, () =>
     const configFilePath = path.resolve(configFileName);
     const typesOutputPath = path.resolve(DEFAULT_TYPES_OUTPUT);
 
+    // Scaffold the SDK client into `src/lib` (or `lib` when there's no `src`),
+    // matching the project's `src` layout and language.
+    const srcDir = yield* sourceCode.retrieveSrcDir();
+    const clientFileName = language === "ts" ? "voidhash.ts" : "voidhash.js";
+    const clientFilePath = path.join(srcDir, "lib", clientFileName);
+
     yield* assertFileCanBeCreated(configFileName, configFilePath);
     yield* assertFileCanBeCreated(DEFAULT_TYPES_OUTPUT, typesOutputPath);
+    yield* assertFileCanBeCreated(clientFileName, clientFilePath);
 
     // Write the config. `typesOutput` is omitted from the generated file so
     // it picks up the default (`voidhash.gen.d.ts`) — keeps the config terse.
@@ -133,6 +140,10 @@ export const initCommand = Command.make("init", {}, () =>
       team: organization.slug,
     });
 
+    // Scaffold the SDK client with the publishable key pre-filled so the user
+    // has a working import target on the first run.
+    yield* codegen.generateClientFile(clientFilePath, { publishableKey });
+
     // Produce the initial declaration file so the user has working
     // autocomplete on the first run. Failures here are non-fatal — the user
     // can re-run `voidhash-cli types generate` later.
@@ -155,12 +166,13 @@ export const initCommand = Command.make("init", {}, () =>
 
     yield* Console.log("\nVoidhash initialized successfully!");
     yield* Console.log(`  Config:  ${configFilePath}`);
+    yield* Console.log(`  Client:  ${clientFilePath}`);
     if (generatedVersion !== null) {
       yield* Console.log(`  Types:   ${typesOutputPath}`);
     }
     yield* Console.log(`\nNext steps:`);
     yield* Console.log(
-      `  1. Add the publishable key (${publishableKey}) to your client code.`
+      `  1. Wrap your app with <voidhash.Provider> from ${path.relative(".", clientFilePath)}.`
     );
     yield* Console.log(
       `  2. Create your products and paywall locations in the Voidhash dashboard.`
diff --git a/apps/cli/src/domain/services/codegen.ts b/apps/cli/src/domain/services/codegen.ts
index decba0aa3..a09302936 100644
--- a/apps/cli/src/domain/services/codegen.ts
+++ b/apps/cli/src/domain/services/codegen.ts
@@ -1,4 +1,4 @@
-import { Effect, FileSystem, Layer, Context } from "effect";
+import { Effect, FileSystem, Layer, Path, Context } from "effect";
 
 import {
   VOIDHASH_FETCHED_AT_COMMENT_PREFIX,
@@ -64,6 +64,40 @@ export function generateTypesDeclaration(
 
 const make = Effect.gen(function* effect() {
   const fileSystem = yield* FileSystem.FileSystem;
+  const path = yield* Path.Path;
+
+  /**
+   * Scaffold the SDK client module (`voidhash.ts` / `.js`) that wires up
+   * `@voidhash/react-native` with the project's publishable key.
+   *
+   * The key is pre-filled as the default so the file works out of the box;
+   * the user is free to edit it and the client options afterwards. The client
+   * is exported as a single `voidhash` object, so the rest of the app uses it
+   * like `<voidhash.Provider>` or `voidhash.useProducts()`. The parent
+   * directory (`src/lib` or `lib`) is created if it does not exist yet.
+   */
+  const generateClientFile = (
+    filePath: string,
+    options: { publishableKey: string }
+  ) =>
+    Effect.gen(function* generateClientFile() {
+      yield* fileSystem.makeDirectory(path.dirname(filePath), {
+        recursive: true,
+      });
+      const lines = [
+        'import { createVoidhashClient } from "@voidhash/react-native";',
+        "",
+        "/**",
+        " * Voidhash SDK client. Safe to edit.",
+        " *",
+        " * Use it like `<voidhash.Provider>` and `voidhash.useProducts()`. The",
+        " * publishable key is safe to ship in client code.",
+        " */",
+        `export const voidhash = createVoidhashClient("${options.publishableKey}");`,
+        "",
+      ];
+      yield* fileSystem.writeFileString(filePath, lines.join("\n"));
+    });
 
   const generateVoidhashConfigFile = (
     filePath: string,
@@ -107,6 +141,7 @@ const make = Effect.gen(function* effect() {
     });
 
   return {
+    generateClientFile,
     generateTypesDeclarationFile,
     generateVoidhashConfigFile,
     readDeclarationVersion,

From fc32eb2bafebe30d3a841fe81d690c206a7db860 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 30 Jun 2026 09:56:02 +0200
Subject: [PATCH 025/129] fix: cjs error

---
 apps/cli/build.ts     | 10 ++--------
 apps/cli/package.json |  2 +-
 2 files changed, 3 insertions(+), 9 deletions(-)

diff --git a/apps/cli/build.ts b/apps/cli/build.ts
index 68970eea2..dc64c9037 100644
--- a/apps/cli/build.ts
+++ b/apps/cli/build.ts
@@ -14,13 +14,7 @@ esbuild.buildSync({
   entryPoints: ["./src/cli/index.ts"],
   // These are resolved/launched at runtime (Studio's Vite app, the paywalls
   // runtime, Vite itself) — keep them out of the bundle.
-  external: [
-    "esbuild",
-    "@voidhash/studio",
-    "@voidhash/paywalls",
-    "vite",
-    "typescript",
-  ],
+  external: ["esbuild", "@voidhash/studio", "@voidhash/paywalls", "vite", "typescript"],
   format: "cjs",
   outfile: "dist/bin.cjs",
   platform: "node",
@@ -38,7 +32,7 @@ const main = async () => {
       if (ctx.format === "cjs") {
         return {
           dts: ".d.ts",
-          js: ".js",
+          js: ".cjs",
         };
       }
       return {
diff --git a/apps/cli/package.json b/apps/cli/package.json
index eed8a482a..9afda4460 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -18,7 +18,7 @@
       },
       "require": {
         "types": "./dist/index.d.ts",
-        "default": "./dist/index.js"
+        "default": "./dist/index.cjs"
       }
     }
   },

From 4e9a5f57aac3fd828cba0c32ec7a688c72f986ac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 30 Jun 2026 14:11:58 +0200
Subject: [PATCH 026/129] wip

---
 apps/cli/build.dev.ts                         |   8 +-
 apps/cli/src/cli/commands/auth-login.ts       |  28 +-
 apps/cli/src/cli/commands/auth-logout.ts      |  71 ++--
 apps/cli/src/cli/commands/auth-status.ts      |   8 +-
 apps/cli/src/cli/commands/auth.ts             |   4 +-
 apps/cli/src/cli/commands/config-reset.ts     |  12 +-
 apps/cli/src/cli/commands/config-set.ts       |   8 +-
 apps/cli/src/cli/commands/config.ts           |   4 +-
 apps/cli/src/cli/commands/deploy.ts           |  32 +-
 apps/cli/src/cli/commands/init.ts             |  77 ++--
 apps/cli/src/cli/commands/studio.ts           |  38 +-
 apps/cli/src/cli/commands/types-check.ts      | 125 +++----
 apps/cli/src/cli/commands/types-generate.ts   |  84 ++---
 apps/cli/src/cli/commands/types.ts            |  12 +-
 apps/cli/src/cli/index.ts                     |  19 +-
 apps/cli/src/cli/shared-options.ts            |   8 +-
 apps/cli/src/domain/errors/auth.ts            |  12 +-
 apps/cli/src/domain/errors/cli-config.ts      |   8 +-
 apps/cli/src/domain/errors/schema.ts          |   8 +-
 apps/cli/src/domain/errors/source-code.ts     |  28 +-
 apps/cli/src/domain/schema/package-json.ts    |  17 +-
 apps/cli/src/domain/schema/paywall-deploy.ts  |  16 +-
 apps/cli/src/domain/schema/voidhash-config.ts |   4 +-
 apps/cli/src/domain/services/auth.ts          | 159 +++-----
 apps/cli/src/domain/services/cli-config.ts    |  34 +-
 apps/cli/src/domain/services/codegen.ts       |  15 +-
 apps/cli/src/domain/services/paywall-build.ts | 138 ++-----
 .../domain/services/paywall-closed-imports.ts |   8 +-
 .../domain/services/paywall-deploy-upload.ts  |  67 +---
 .../src/domain/services/paywall-typecheck.ts  |  47 +--
 apps/cli/src/domain/services/schema.ts        |  29 +-
 apps/cli/src/domain/services/source-code.ts   |  70 ++--
 apps/cli/src/services/auth/get-session.ts     |  13 +-
 apps/cli/src/services/auth/index.ts           |   4 +-
 .../src/services/auth/utils/better-auth.ts    |  12 +-
 apps/cli/src/services/cli-config/index.ts     |   4 +-
 .../organization/create-organization.ts       |  21 +-
 apps/cli/src/services/organization/errors.ts  |   2 +-
 apps/cli/src/services/organization/index.ts   |   9 +-
 .../organization/list-organizations.ts        |  21 +-
 apps/cli/src/services/project/index.ts        |   4 +-
 apps/cli/src/services/repository/index.ts     |   4 +-
 apps/cli/src/utils/api-client.ts              |  31 +-
 apps/cli/src/utils/error-formatter.ts         |  30 +-
 apps/cli/src/utils/fs.ts                      |  11 +-
 .../src/utils/js-loading/js-file-loading.ts   |  10 +-
 .../organizations/create-organization.ts      |  36 +-
 .../organizations/select-organization.ts      |   6 +-
 apps/cli/src/utils/projects/create-project.ts |  44 +--
 apps/cli/src/utils/projects/select-project.ts |   8 +-
 apps/cli/src/utils/source-code-details.ts     |  10 +-
 apps/cli/src/utils/source-code.ts             |   5 +-
 apps/cli/sst-env.d.ts                         |   4 +-
 .../domain/schema/normalized-schema.test.ts   | 160 ++++----
 .../domain/schema/paywall-deploy.test.ts      |   6 +-
 .../services/paywall-build-warnings.test.ts   |  16 +-
 .../services/paywall-closed-imports.test.ts   |  14 +-
 .../services/paywall-content-hash.test.ts     |   3 +-
 .../services/paywall-deploy-upload.test.ts    |  31 +-
 .../domain/services/paywall-typecheck.test.ts |  32 +-
 apps/cli/tests/helpers/schema-factories.ts    | 112 +++---
 apps/cli/vitest.unit.mts                      |  12 +-
 apps/studio/src/voidhash/paywalls.ts          |   4 +-
 .../app/menu/customer.tsx                     |  16 +-
 .../react-native-example/app/menu/paywall.tsx |  14 +-
 .../utils/voidhash/client.ts                  |  77 ++--
 .../react-native-example/voidhash.config.ts   |   6 +-
 .../react-native-example/voidhash.gen.d.ts    |   6 +-
 libraries/react-native/README.md              |   2 +-
 libraries/react-native/src/client-effect.ts   | 101 ++++-
 .../react-native/src/client-react-native.ts   |   4 +-
 libraries/react-native/src/client.tsx         |  69 +++-
 .../src/core/analytics/constants.ts           |  21 ++
 .../src/core/analytics/service.ts             |  17 +-
 .../identity/customer-attribute-manager.ts    |  69 ----
 .../core/identity/customer-info-manager.ts    |  80 ----
 .../src/core/identity/identity-manager.ts     |  28 +-
 .../core/identity/person-attribute-manager.ts |  85 +++++
 .../src/core/identity/person-info-manager.ts  |  95 +++++
 .../src/core/lifecycle/lifecycle-service.ts   |   9 +-
 .../src/core/networking/api-client.ts         |   4 +-
 .../src/core/reactivity/client-state.ts       |  10 +-
 .../react-native/src/core/testing/client.ts   |  32 +-
 .../core/transactions/transaction-service.ts  |   6 +-
 libraries/react-native/src/core/types.ts      |   4 +-
 .../hooks/{use-customer.ts => use-person.ts}  |  22 +-
 .../tests/core/cache-manager.test.ts          |  14 +-
 .../tests/core/client-effect.test.ts          | 347 +++++++++++++++---
 .../tests/core/identity-manager.test.ts       |  59 +--
 ...er.test.ts => person-info-manager.test.ts} |  95 +++--
 .../tests/helpers/effect-test-harness.ts      |  58 ++-
 libraries/web/src/client-effect.ts            |  67 ++++
 libraries/web/src/client.ts                   |  29 ++
 .../web/src/core/identity/identity-manager.ts |  46 ++-
 .../web/src/core/networking/api-client.ts     |   4 +-
 libraries/web/src/types.ts                    |  11 +
 libraries/web/tests/client.test.ts            | 133 ++++++-
 .../generated-clients/src/core/generated.ts   |   4 +-
 98 files changed, 1846 insertions(+), 1675 deletions(-)
 delete mode 100644 libraries/react-native/src/core/identity/customer-attribute-manager.ts
 delete mode 100644 libraries/react-native/src/core/identity/customer-info-manager.ts
 create mode 100644 libraries/react-native/src/core/identity/person-attribute-manager.ts
 create mode 100644 libraries/react-native/src/core/identity/person-info-manager.ts
 rename libraries/react-native/src/react/hooks/{use-customer.ts => use-person.ts} (56%)
 rename libraries/react-native/tests/core/{customer-info-manager.test.ts => person-info-manager.test.ts} (52%)

diff --git a/apps/cli/build.dev.ts b/apps/cli/build.dev.ts
index d75f0864c..0a7ba3062 100644
--- a/apps/cli/build.dev.ts
+++ b/apps/cli/build.dev.ts
@@ -6,13 +6,7 @@ esbuild.buildSync({
   },
   bundle: true,
   entryPoints: ["./src/cli/index.ts"],
-  external: [
-    "esbuild",
-    "@voidhash/studio",
-    "@voidhash/paywalls",
-    "vite",
-    "typescript",
-  ],
+  external: ["esbuild", "@voidhash/studio", "@voidhash/paywalls", "vite", "typescript"],
   format: "cjs",
   outfile: "dist/index.cjs",
   platform: "node",
diff --git a/apps/cli/src/cli/commands/auth-login.ts b/apps/cli/src/cli/commands/auth-login.ts
index ced9af4b5..33c14ec9e 100644
--- a/apps/cli/src/cli/commands/auth-login.ts
+++ b/apps/cli/src/cli/commands/auth-login.ts
@@ -12,19 +12,19 @@ export const loginCommand = Command.make("login", {}, () =>
           Effect.succeed(null).pipe(
             Effect.tap(() =>
               Console.log(
-                "Failed to get currect user session. Acting as if the user is not logged in."
-              )
-            )
+                "Failed to get currect user session. Acting as if the user is not logged in.",
+              ),
+            ),
           ),
         NoSignedInUserError: () => Effect.succeed(null),
-      })
+      }),
     );
 
     if (user) {
       const shouldContinue = yield* Prompt.run(
         Prompt.confirm({
           message: `You are already logged in as ${user.name}. You will be logged out. Do you want to continue?`,
-        })
+        }),
       );
       if (!shouldContinue) {
         return yield* Console.log("Login cancelled.");
@@ -32,24 +32,18 @@ export const loginCommand = Command.make("login", {}, () =>
       return yield* auth.logout.pipe(
         Effect.catchTags({
           FailedToLogoutError: () =>
-            Effect.succeed(null).pipe(
-              Effect.tap(() => Console.log("Failed to logout."))
-            ),
-        })
+            Effect.succeed(null).pipe(Effect.tap(() => Console.log("Failed to logout."))),
+        }),
       );
     }
 
     return yield* auth.login.pipe(
       Effect.catchTags({
         FailedToLoginError: () =>
-          Effect.void.pipe(
-            Effect.tap(() => Console.log("Failed to login. Please try again."))
-          ),
+          Effect.void.pipe(Effect.tap(() => Console.log("Failed to login. Please try again."))),
         LoginCancelledError: () =>
-          Effect.void.pipe(
-            Effect.tap(() => Console.log("Login cancelled."))
-          ),
-      })
+          Effect.void.pipe(Effect.tap(() => Console.log("Login cancelled."))),
+      }),
     );
-  })
+  }),
 ).pipe(Command.withDescription("Login to the Voidhash CLI."));
diff --git a/apps/cli/src/cli/commands/auth-logout.ts b/apps/cli/src/cli/commands/auth-logout.ts
index 7237ef0d5..25ddd18cd 100644
--- a/apps/cli/src/cli/commands/auth-logout.ts
+++ b/apps/cli/src/cli/commands/auth-logout.ts
@@ -3,45 +3,36 @@ import { Console, Effect } from "effect";
 
 import { Auth } from "../../domain/services/auth";
 
-export const logoutCommand = Command.make(
-	"logout",
-	{},
-	() =>
-		Effect.gen(function* logoutCommand() {
-			const auth = yield* Auth;
-			const user = yield* auth.getSignedInSession.pipe(
-				Effect.catchTags({
-					FailedToGetSessionError: () =>
-						Effect.succeed(null).pipe(
-							Effect.tap(() =>
-								Console.log(
-									"Failed to get current user session. We will still proceed with logout.",
-								),
-							),
-						),
-					NoSignedInUserError: () => Effect.succeed(null),
-				}),
-			);
+export const logoutCommand = Command.make("logout", {}, () =>
+  Effect.gen(function* logoutCommand() {
+    const auth = yield* Auth;
+    const user = yield* auth.getSignedInSession.pipe(
+      Effect.catchTags({
+        FailedToGetSessionError: () =>
+          Effect.succeed(null).pipe(
+            Effect.tap(() =>
+              Console.log("Failed to get current user session. We will still proceed with logout."),
+            ),
+          ),
+        NoSignedInUserError: () => Effect.succeed(null),
+      }),
+    );
 
-			if (user) {
-				const shouldContinue = yield* Prompt.run(
-					Prompt.confirm({
-						message: `You are currently logged in as ${user.name}. You will be logged out. Do you want to continue?`,
-					}),
-				);
-				if (!shouldContinue) {
-					return yield* Console.log("Login cancelled.");
-				}
-			}
-			return yield* auth.logout;
-		}).pipe(
-			Effect.catchTags({
-				FailedToLogoutError: () =>
-					Effect.void.pipe(
-						Effect.tap(() =>
-							Console.log("Failed to logout. Please try again."),
-						),
-					),
-			}),
-		),
+    if (user) {
+      const shouldContinue = yield* Prompt.run(
+        Prompt.confirm({
+          message: `You are currently logged in as ${user.name}. You will be logged out. Do you want to continue?`,
+        }),
+      );
+      if (!shouldContinue) {
+        return yield* Console.log("Login cancelled.");
+      }
+    }
+    return yield* auth.logout;
+  }).pipe(
+    Effect.catchTags({
+      FailedToLogoutError: () =>
+        Effect.void.pipe(Effect.tap(() => Console.log("Failed to logout. Please try again."))),
+    }),
+  ),
 ).pipe(Command.withDescription("Logout from the Voidhash CLI."));
diff --git a/apps/cli/src/cli/commands/auth-status.ts b/apps/cli/src/cli/commands/auth-status.ts
index b18f91196..7bfb54df0 100644
--- a/apps/cli/src/cli/commands/auth-status.ts
+++ b/apps/cli/src/cli/commands/auth-status.ts
@@ -12,11 +12,11 @@ export const authStatusCommand = Command.make("status", {}, () =>
         FailedToGetSessionError: () =>
           Effect.fail(
             userError(
-              "Failed to get user session. Please try again or run 'voidhash-cli auth login'."
-            )
+              "Failed to get user session. Please try again or run 'voidhash-cli auth login'.",
+            ),
           ),
         NoSignedInUserError: () => Effect.succeed(null),
-      })
+      }),
     );
 
     if (user) {
@@ -24,5 +24,5 @@ export const authStatusCommand = Command.make("status", {}, () =>
     } else {
       yield* Console.log("Not logged in");
     }
-  })
+  }),
 ).pipe(Command.withDescription("Check the status of the Voidhash CLI."));
diff --git a/apps/cli/src/cli/commands/auth.ts b/apps/cli/src/cli/commands/auth.ts
index c3528dfec..3976fe4a8 100644
--- a/apps/cli/src/cli/commands/auth.ts
+++ b/apps/cli/src/cli/commands/auth.ts
@@ -8,8 +8,8 @@ import { authStatusCommand } from "./auth-status";
 export const authCommand = Command.make("auth", {}, () =>
   Effect.gen(function* authCommand() {
     // TODO: Show sucommands documentation
-  })
+  }),
 ).pipe(
   Command.withDescription("Manage the Voidhash authentication."),
-  Command.withSubcommands([loginCommand, logoutCommand, authStatusCommand])
+  Command.withSubcommands([loginCommand, logoutCommand, authStatusCommand]),
 );
diff --git a/apps/cli/src/cli/commands/config-reset.ts b/apps/cli/src/cli/commands/config-reset.ts
index bf456f013..63c8364f1 100644
--- a/apps/cli/src/cli/commands/config-reset.ts
+++ b/apps/cli/src/cli/commands/config-reset.ts
@@ -11,16 +11,12 @@ export const configResetCommand = Command.make("reset", {}, () =>
     yield* cliConfig
       .resetConfig()
       .pipe(
-        Effect.catchTag("SchemaError", () =>
-          Effect.fail(
-            userError("Failed to set configuration")
-          )
-        )
+        Effect.catchTag("SchemaError", () => Effect.fail(userError("Failed to set configuration"))),
       );
     yield* Console.log("Configuration reset successfully.");
-  })
+  }),
 ).pipe(
   Command.withDescription(
-    "Reset the Voidhash configuration to the default values. If authenticated, persists the authentication state. For logout, use the `auth logout` command."
-  )
+    "Reset the Voidhash configuration to the default values. If authenticated, persists the authentication state. For logout, use the `auth logout` command.",
+  ),
 );
diff --git a/apps/cli/src/cli/commands/config-set.ts b/apps/cli/src/cli/commands/config-set.ts
index b137f54c2..9185ebc22 100644
--- a/apps/cli/src/cli/commands/config-set.ts
+++ b/apps/cli/src/cli/commands/config-set.ts
@@ -19,11 +19,9 @@ export const configSetCommand = Command.make(
         })
         .pipe(
           Effect.catchTag("SchemaError", () =>
-            Effect.fail(
-              userError("Failed to set configuration")
-            )
-          )
+            Effect.fail(userError("Failed to set configuration")),
+          ),
         );
       yield* Console.log("Configuration set successfully.");
-    })
+    }),
 ).pipe(Command.withDescription("Set a Voidhash configuration value."));
diff --git a/apps/cli/src/cli/commands/config.ts b/apps/cli/src/cli/commands/config.ts
index 372662040..cae62b97d 100644
--- a/apps/cli/src/cli/commands/config.ts
+++ b/apps/cli/src/cli/commands/config.ts
@@ -31,8 +31,8 @@ export const configCommand = Command.make("config", {}, () =>
     if (profileNames.length > 0) {
       yield* Console.log(`\nProfiles: ${profileNames.join(", ")}`);
     }
-  })
+  }),
 ).pipe(
   Command.withDescription("Manage the Voidhash authentication."),
-  Command.withSubcommands([configSetCommand, configResetCommand])
+  Command.withSubcommands([configSetCommand, configResetCommand]),
 );
diff --git a/apps/cli/src/cli/commands/deploy.ts b/apps/cli/src/cli/commands/deploy.ts
index 56f7d6692..74a6faa99 100644
--- a/apps/cli/src/cli/commands/deploy.ts
+++ b/apps/cli/src/cli/commands/deploy.ts
@@ -2,10 +2,7 @@ import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { Console, Effect, Path } from "effect";
 import { Command, Flag } from "effect/unstable/cli";
-import {
-  type BuildPaywallsResult,
-  buildPaywalls,
-} from "../../domain/services/paywall-build";
+import { type BuildPaywallsResult, buildPaywalls } from "../../domain/services/paywall-build";
 import {
   type UploadPaywallDeployResult,
   uploadPaywallDeploy,
@@ -55,9 +52,7 @@ const reportDeploy = (result: UploadPaywallDeployResult) =>
     if (result.finalize.paywalls.length > 0) {
       yield* Console.log("\nPaywalls:");
       for (const paywall of result.finalize.paywalls) {
-        yield* Console.log(
-          `  • ${paywall.id}  v${paywall.version}\n      ${paywall.url}`,
-        );
+        yield* Console.log(`  • ${paywall.id}  v${paywall.version}\n      ${paywall.url}`);
       }
     }
     if (result.finalize.components.length > 0) {
@@ -94,9 +89,7 @@ export const deployCommand = Command.make(
         .pipe(
           Effect.catchTag("VoidhashConfigNotFoundError", () =>
             Effect.fail(
-              userError(
-                "voidhash.config.ts not found. Run 'voidhash-cli init' to create one.",
-              ),
+              userError("voidhash.config.ts not found. Run 'voidhash-cli init' to create one."),
             ),
           ),
         );
@@ -112,21 +105,14 @@ export const deployCommand = Command.make(
           const entry = require.resolve("@voidhash/paywalls", {
             paths: [projectRoot],
           });
-          for (
-            let dir = dirname(entry);
-            dir !== dirname(dir);
-            dir = dirname(dir)
-          ) {
+          for (let dir = dirname(entry); dir !== dirname(dir); dir = dirname(dir)) {
             const pkgPath = join(dir, "package.json");
             if (existsSync(pkgPath)) {
               const pkg = JSON.parse(readFileSync(pkgPath, "utf8")) as {
                 name?: string;
                 version?: string;
               };
-              if (
-                pkg.name === "@voidhash/paywalls" &&
-                typeof pkg.version === "string"
-              ) {
+              if (pkg.name === "@voidhash/paywalls" && typeof pkg.version === "string") {
                 return pkg.version;
               }
             }
@@ -147,9 +133,7 @@ export const deployCommand = Command.make(
         team: config.team,
       }).pipe(
         Effect.catchTag("PaywallBuildError", (e) =>
-          Effect.fail(userError(e.message)).pipe(
-            Effect.tapError(() => Effect.logDebug(e.cause)),
-          ),
+          Effect.fail(userError(e.message)).pipe(Effect.tapError(() => Effect.logDebug(e.cause))),
         ),
       );
 
@@ -168,9 +152,7 @@ export const deployCommand = Command.make(
         projectRoot,
       }).pipe(
         Effect.catchTag("PaywallDeployUploadError", (e) =>
-          Effect.fail(userError(e.message)).pipe(
-            Effect.tapError(() => Effect.logDebug(e.cause)),
-          ),
+          Effect.fail(userError(e.message)).pipe(Effect.tapError(() => Effect.logDebug(e.cause))),
         ),
       );
 
diff --git a/apps/cli/src/cli/commands/init.ts b/apps/cli/src/cli/commands/init.ts
index 7db35d71f..ede69f50c 100644
--- a/apps/cli/src/cli/commands/init.ts
+++ b/apps/cli/src/cli/commands/init.ts
@@ -32,18 +32,16 @@ export const initCommand = Command.make("init", {}, () =>
     const schemaService = yield* SchemaService;
     const path = yield* Path.Path;
 
-    const voidhashConfig = yield* sourceCode.loadVoidhashConfig().pipe(
-      Effect.catchTag("VoidhashConfigNotFoundError", () =>
-        Effect.succeed(null)
-      )
-    );
+    const voidhashConfig = yield* sourceCode
+      .loadVoidhashConfig()
+      .pipe(Effect.catchTag("VoidhashConfigNotFoundError", () => Effect.succeed(null)));
 
     if (voidhashConfig) {
       const shouldContinue = yield* Prompt.run(
         Prompt.confirm({
           message:
             "Voidhash was already initialized in this project. This will overwrite the existing configuration. Do you want to continue?",
-        })
+        }),
       );
       if (!shouldContinue) {
         return yield* Console.log("Initialization cancelled.");
@@ -60,28 +58,24 @@ export const initCommand = Command.make("init", {}, () =>
               Prompt.confirm({
                 message:
                   "You are not logged in. In the next step, we will open a browser window to sign you in. Do you want to continue?",
-              })
+              }),
             );
             if (!shouldContinue) {
               return yield* Effect.fail(userError("Login cancelled."));
             }
-            return yield* auth.login.pipe(
-              Effect.andThen(auth.getSignedInSession)
-            );
-          })
-        )
+            return yield* auth.login.pipe(Effect.andThen(auth.getSignedInSession));
+          }),
+        ),
       )
       .pipe(
         Effect.catchTags({
           FailedToGetSessionError: (e) =>
-            Effect.fail(
-              userError("Failed to get user session. Please try again.")
-            ).pipe(Effect.tapError(() => Effect.logDebug(e))),
-          NoSignedInUserError: () =>
-            Effect.fail(
-              userError("We were unable to sign you in. Please try it again.")
+            Effect.fail(userError("Failed to get user session. Please try again.")).pipe(
+              Effect.tapError(() => Effect.logDebug(e)),
             ),
-        })
+          NoSignedInUserError: () =>
+            Effect.fail(userError("We were unable to sign you in. Please try it again.")),
+        }),
       );
 
     // Select team
@@ -90,7 +84,7 @@ export const initCommand = Command.make("init", {}, () =>
     // Select project
     const project = yield* selectProject(
       organization.id,
-      session.projects.filter((p) => p.organizationId === organization.id)
+      session.projects.filter((p) => p.organizationId === organization.id),
     );
 
     // Sanity-check that a publishable key exists for this project; we don't
@@ -103,13 +97,11 @@ export const initCommand = Command.make("init", {}, () =>
       rawKey?: string;
     }[];
     const publishableApiKey = apiKeys.find(
-      (apiKey) => apiKey.isPublic && apiKey.projectId === project.id
+      (apiKey) => apiKey.isPublic && apiKey.projectId === project.id,
     );
     if (!publishableApiKey?.rawKey?.startsWith("vh_pk_")) {
       return yield* Effect.fail(
-        userError(
-          "Could not retrieve a valid publishable key for the selected project."
-        )
+        userError("Could not retrieve a valid publishable key for the selected project."),
       );
     }
     const publishableKey = publishableApiKey.rawKey;
@@ -117,8 +109,7 @@ export const initCommand = Command.make("init", {}, () =>
     // Decide where the generated `.d.ts` lives. We default to the project
     // root since module augmentation works from anywhere in `tsconfig.include`.
     const language = yield* sourceCode.detectSrcLanguage();
-    const configFileName =
-      language === "ts" ? "voidhash.config.ts" : "voidhash.config.js";
+    const configFileName = language === "ts" ? "voidhash.config.ts" : "voidhash.config.js";
 
     const configFilePath = path.resolve(configFileName);
     const typesOutputPath = path.resolve(DEFAULT_TYPES_OUTPUT);
@@ -147,22 +138,16 @@ export const initCommand = Command.make("init", {}, () =>
     // Produce the initial declaration file so the user has working
     // autocomplete on the first run. Failures here are non-fatal — the user
     // can re-run `voidhash-cli types generate` later.
-    const generatedVersion = yield* schemaService
-      .fetchRemoteSchema()
-      .pipe(
-        Effect.flatMap(({ schema, version }) =>
-          codegen.generateTypesDeclarationFile(
-            typesOutputPath,
-            schema,
-            version
-          )
-        ),
-        Effect.catch((e) =>
-          Effect.logWarning(
-            `Failed to generate initial types: ${String(e)}. You can run 'voidhash-cli types generate' later.`
-          ).pipe(Effect.as(null))
-        )
-      );
+    const generatedVersion = yield* schemaService.fetchRemoteSchema().pipe(
+      Effect.flatMap(({ schema, version }) =>
+        codegen.generateTypesDeclarationFile(typesOutputPath, schema, version),
+      ),
+      Effect.catch((e) =>
+        Effect.logWarning(
+          `Failed to generate initial types: ${String(e)}. You can run 'voidhash-cli types generate' later.`,
+        ).pipe(Effect.as(null)),
+      ),
+    );
 
     yield* Console.log("\nVoidhash initialized successfully!");
     yield* Console.log(`  Config:  ${configFilePath}`);
@@ -172,13 +157,13 @@ export const initCommand = Command.make("init", {}, () =>
     }
     yield* Console.log(`\nNext steps:`);
     yield* Console.log(
-      `  1. Wrap your app with <voidhash.Provider> from ${path.relative(".", clientFilePath)}.`
+      `  1. Wrap your app with <voidhash.Provider> from ${path.relative(".", clientFilePath)}.`,
     );
     yield* Console.log(
-      `  2. Create your products and paywall locations in the Voidhash dashboard.`
+      `  2. Create your products and paywall locations in the Voidhash dashboard.`,
     );
     yield* Console.log(
-      `  3. Re-run 'voidhash-cli types generate' whenever the dashboard schema changes.`
+      `  3. Re-run 'voidhash-cli types generate' whenever the dashboard schema changes.`,
     );
-  })
+  }),
 ).pipe(Command.withDescription("Initialize a new Voidhash project."));
diff --git a/apps/cli/src/cli/commands/studio.ts b/apps/cli/src/cli/commands/studio.ts
index 38b1aff80..881bd6f5b 100644
--- a/apps/cli/src/cli/commands/studio.ts
+++ b/apps/cli/src/cli/commands/studio.ts
@@ -15,32 +15,22 @@ const resolveStudioPaths = () =>
       // development. We resolve the package manifest to get the app root, and
       // Vite's own CLI entry so we can launch it without depending on bin
       // shims being hoisted in any particular way.
-      const studioDir = dirname(
-        require.resolve("@voidhash/studio/package.json"),
-      );
+      const studioDir = dirname(require.resolve("@voidhash/studio/package.json"));
       // Resolve Vite via its package.json (an exported subpath) from the Studio
       // package, then join the CLI entry — `vite/bin/vite.js` is not an exported
       // subpath, so it can't be resolved directly under Node's exports rules.
-      const viteDir = dirname(
-        require.resolve("vite/package.json", { paths: [studioDir] }),
-      );
+      const viteDir = dirname(require.resolve("vite/package.json", { paths: [studioDir] }));
       const viteBin = join(viteDir, "bin", "vite.js");
       return { studioDir, viteBin };
     },
     catch: () =>
-      userError(
-        "Could not locate the Voidhash Studio app. Reinstall the CLI and try again.",
-      ),
+      userError("Could not locate the Voidhash Studio app. Reinstall the CLI and try again."),
   });
 
 /** Best-effort: open the given URL in the user's default browser. */
 const openBrowser = (url: string): void => {
   const command =
-    process.platform === "darwin"
-      ? "open"
-      : process.platform === "win32"
-        ? "cmd"
-        : "xdg-open";
+    process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
   const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
   try {
     spawn(command, args, { stdio: "ignore", detached: true }).unref();
@@ -98,15 +88,11 @@ export const studioCommand = Command.make(
       // child is terminated if the fiber is interrupted (Ctrl+C).
       yield* Effect.acquireUseRelease(
         Effect.sync(() =>
-          spawn(
-            process.execPath,
-            [viteBin, "--port", String(port), "--strictPort"],
-            {
-              cwd: studioDir,
-              env: { ...process.env, VOIDHASH_PROJECT_ROOT: projectRoot },
-              stdio: "inherit",
-            },
-          ),
+          spawn(process.execPath, [viteBin, "--port", String(port), "--strictPort"], {
+            cwd: studioDir,
+            env: { ...process.env, VOIDHASH_PROJECT_ROOT: projectRoot },
+            stdio: "inherit",
+          }),
         ),
         (child: ChildProcess) => {
           if (open) {
@@ -126,8 +112,4 @@ export const studioCommand = Command.make(
           }),
       );
     }),
-).pipe(
-  Command.withDescription(
-    "Launch the paywall preview Studio for this project.",
-  ),
-);
+).pipe(Command.withDescription("Launch the paywall preview Studio for this project."));
diff --git a/apps/cli/src/cli/commands/types-check.ts b/apps/cli/src/cli/commands/types-check.ts
index a2e3b67e1..49d10acee 100644
--- a/apps/cli/src/cli/commands/types-check.ts
+++ b/apps/cli/src/cli/commands/types-check.ts
@@ -17,90 +17,83 @@ import { userError } from "../../utils/error-formatter";
  * non-zero with a clear message when they diverge, so a stale commit can't
  * pass PR CI.
  */
-export const typesCheckCommand = Command.make(
-  "check",
-  {},
-  () =>
-    Effect.gen(function* typesCheckCommand() {
-      const auth = yield* Auth;
-      const sourceCode = yield* SourceCode;
-      const schemaService = yield* SchemaService;
-      const codegen = yield* Codegen;
-      const pathService = yield* Path.Path;
+export const typesCheckCommand = Command.make("check", {}, () =>
+  Effect.gen(function* typesCheckCommand() {
+    const auth = yield* Auth;
+    const sourceCode = yield* SourceCode;
+    const schemaService = yield* SchemaService;
+    const codegen = yield* Codegen;
+    const pathService = yield* Path.Path;
 
-      yield* auth.getSignedInSession.pipe(
-        Effect.catchTag("NoSignedInUserError", () =>
-          Effect.fail(
-            userError(
-              "You must be logged in to check types. Run 'voidhash-cli auth login' first."
-            )
-          )
-        )
-      );
+    yield* auth.getSignedInSession.pipe(
+      Effect.catchTag("NoSignedInUserError", () =>
+        Effect.fail(
+          userError("You must be logged in to check types. Run 'voidhash-cli auth login' first."),
+        ),
+      ),
+    );
 
-      const config = yield* sourceCode.loadVoidhashConfig().pipe(
+    const config = yield* sourceCode
+      .loadVoidhashConfig()
+      .pipe(
         Effect.catchTag("VoidhashConfigNotFoundError", () =>
           Effect.fail(
-            userError(
-              "voidhash.config.ts not found. Run 'voidhash-cli init' to create one."
-            )
-          )
-        )
+            userError("voidhash.config.ts not found. Run 'voidhash-cli init' to create one."),
+          ),
+        ),
       );
 
-      const typesOutput = resolveTypesOutput(config);
-      const outPath = pathService.resolve(typesOutput);
+    const typesOutput = resolveTypesOutput(config);
+    const outPath = pathService.resolve(typesOutput);
 
-      const localVersion = yield* codegen.readDeclarationVersion(outPath).pipe(
+    const localVersion = yield* codegen
+      .readDeclarationVersion(outPath)
+      .pipe(
         Effect.catch(() =>
           Effect.fail(
             userError(
-              `Could not read generated types at ${typesOutput}. Run 'voidhash-cli types generate' first.`
-            )
-          )
-        )
+              `Could not read generated types at ${typesOutput}. Run 'voidhash-cli types generate' first.`,
+            ),
+          ),
+        ),
       );
 
-      if (localVersion === null) {
-        return yield* Effect.fail(
-          userError(
-            `${typesOutput} is missing the @voidhash:version header. Re-run 'voidhash-cli types generate' to regenerate.`
-          )
-        );
-      }
+    if (localVersion === null) {
+      return yield* Effect.fail(
+        userError(
+          `${typesOutput} is missing the @voidhash:version header. Re-run 'voidhash-cli types generate' to regenerate.`,
+        ),
+      );
+    }
 
-      const remoteVersion = yield* schemaService.fetchSchemaVersion().pipe(
+    const remoteVersion = yield* schemaService
+      .fetchSchemaVersion()
+      .pipe(
         Effect.catchTag("RemoteSchemaFetchError", (e) =>
-          Effect.fail(
-            userError(
-              `Failed to fetch remote schema version: ${String(e.cause)}`
-            )
-          )
-        )
+          Effect.fail(userError(`Failed to fetch remote schema version: ${String(e.cause)}`)),
+        ),
       );
 
-      if (localVersion === remoteVersion) {
-        yield* Console.log(
-          `✓ Types are up to date (version ${localVersion.slice(0, 19)}...)`
-        );
-        return;
-      }
+    if (localVersion === remoteVersion) {
+      yield* Console.log(`✓ Types are up to date (version ${localVersion.slice(0, 19)}...)`);
+      return;
+    }
 
-      yield* Console.log("✗ Types are stale.");
-      yield* Console.log(`  Local:  ${localVersion}`);
-      yield* Console.log(`  Server: ${remoteVersion}`);
-      yield* Console.log(
-        "\nRun 'voidhash-cli types generate' to refresh, then commit the updated declaration file."
-      );
+    yield* Console.log("✗ Types are stale.");
+    yield* Console.log(`  Local:  ${localVersion}`);
+    yield* Console.log(`  Server: ${remoteVersion}`);
+    yield* Console.log(
+      "\nRun 'voidhash-cli types generate' to refresh, then commit the updated declaration file.",
+    );
 
-      return yield* Effect.fail(
-        new SchemaCheckFailedError({
-          message: `Local types version ${localVersion} does not match server version ${remoteVersion}`,
-        })
-      );
-    })
+    return yield* Effect.fail(
+      new SchemaCheckFailedError({
+        message: `Local types version ${localVersion} does not match server version ${remoteVersion}`,
+      }),
+    );
+  }),
 ).pipe(
   Command.withDescription(
-    "Check whether the locally generated types are in sync with the server schema."
-  )
+    "Check whether the locally generated types are in sync with the server schema.",
+  ),
 );
diff --git a/apps/cli/src/cli/commands/types-generate.ts b/apps/cli/src/cli/commands/types-generate.ts
index 5c938fc97..cac16c964 100644
--- a/apps/cli/src/cli/commands/types-generate.ts
+++ b/apps/cli/src/cli/commands/types-generate.ts
@@ -20,16 +20,12 @@ export const typesGenerateCommand = Command.make(
   "generate",
   {
     pollIntervalMs: Flag.integer("poll-interval-ms").pipe(
-      Flag.withDescription(
-        "Polling interval for --watch mode, in milliseconds"
-      ),
-      Flag.withDefault(5000)
+      Flag.withDescription("Polling interval for --watch mode, in milliseconds"),
+      Flag.withDefault(5000),
     ),
     watch: Flag.boolean("watch").pipe(
-      Flag.withDescription(
-        "Watch the server schema and regenerate types when it changes"
-      ),
-      Flag.withDefault(false)
+      Flag.withDescription("Watch the server schema and regenerate types when it changes"),
+      Flag.withDefault(false),
     ),
   },
   ({ pollIntervalMs, watch }) =>
@@ -44,21 +40,21 @@ export const typesGenerateCommand = Command.make(
         Effect.catchTag("NoSignedInUserError", () =>
           Effect.fail(
             userError(
-              "You must be logged in to generate types. Run 'voidhash-cli auth login' first."
-            )
-          )
-        )
+              "You must be logged in to generate types. Run 'voidhash-cli auth login' first.",
+            ),
+          ),
+        ),
       );
 
-      const config = yield* sourceCode.loadVoidhashConfig().pipe(
-        Effect.catchTag("VoidhashConfigNotFoundError", () =>
-          Effect.fail(
-            userError(
-              "voidhash.config.ts not found. Run 'voidhash-cli init' to create one."
-            )
-          )
-        )
-      );
+      const config = yield* sourceCode
+        .loadVoidhashConfig()
+        .pipe(
+          Effect.catchTag("VoidhashConfigNotFoundError", () =>
+            Effect.fail(
+              userError("voidhash.config.ts not found. Run 'voidhash-cli init' to create one."),
+            ),
+          ),
+        );
 
       const typesOutput = resolveTypesOutput(config);
       const outPath = pathService.resolve(typesOutput);
@@ -69,19 +65,14 @@ export const typesGenerateCommand = Command.make(
           .fetchRemoteSchema()
           .pipe(
             Effect.catchTag("RemoteSchemaFetchError", (e) =>
-              Effect.fail(
-                userError(`Failed to fetch remote schema: ${String(e.cause)}`)
-              )
-            )
+              Effect.fail(userError(`Failed to fetch remote schema: ${String(e.cause)}`)),
+            ),
           );
 
         yield* codegen.generateTypesDeclarationFile(outPath, schema, version);
 
         yield* Console.log(
-          `✓ Types written to ${typesOutput} (version ${version.slice(
-            0,
-            19
-          )}...)`
+          `✓ Types written to ${typesOutput} (version ${version.slice(0, 19)}...)`,
         );
         return version;
       });
@@ -93,7 +84,7 @@ export const typesGenerateCommand = Command.make(
       }
 
       yield* Console.log(
-        `\nWatching for schema changes (poll every ${pollIntervalMs}ms). Press Ctrl+C to stop.`
+        `\nWatching for schema changes (poll every ${pollIntervalMs}ms). Press Ctrl+C to stop.`,
       );
 
       // Keep the last known version in a closure-shared ref so the poll loop
@@ -101,13 +92,15 @@ export const typesGenerateCommand = Command.make(
       let lastVersion = initialVersion;
 
       const pollOnce = Effect.gen(function* pollOnce() {
-        const latest = yield* schemaService.fetchSchemaVersion().pipe(
-          Effect.catch((e) =>
-            Effect.logWarning(
-              `[voidhash-cli types --watch] Skipping poll due to error: ${String(e)}`
-            ).pipe(Effect.as(null))
-          )
-        );
+        const latest = yield* schemaService
+          .fetchSchemaVersion()
+          .pipe(
+            Effect.catch((e) =>
+              Effect.logWarning(
+                `[voidhash-cli types --watch] Skipping poll due to error: ${String(e)}`,
+              ).pipe(Effect.as(null)),
+            ),
+          );
 
         if (latest === null || latest === lastVersion) {
           return;
@@ -117,22 +110,19 @@ export const typesGenerateCommand = Command.make(
         const next = yield* regenerate.pipe(
           Effect.catch((e) =>
             Effect.logWarning(
-              `[voidhash-cli types --watch] Regeneration failed: ${String(e)}`
-            ).pipe(Effect.as(null))
-          )
+              `[voidhash-cli types --watch] Regeneration failed: ${String(e)}`,
+            ).pipe(Effect.as(null)),
+          ),
         );
         if (next !== null) {
           lastVersion = next;
         }
       });
 
-      yield* Effect.repeat(
-        pollOnce,
-        Schedule.spaced(`${pollIntervalMs} millis`)
-      );
-    })
+      yield* Effect.repeat(pollOnce, Schedule.spaced(`${pollIntervalMs} millis`));
+    }),
 ).pipe(
   Command.withDescription(
-    "Generate the voidhash.gen.d.ts declaration file from the server schema."
-  )
+    "Generate the voidhash.gen.d.ts declaration file from the server schema.",
+  ),
 );
diff --git a/apps/cli/src/cli/commands/types.ts b/apps/cli/src/cli/commands/types.ts
index 25be40f74..fccced206 100644
--- a/apps/cli/src/cli/commands/types.ts
+++ b/apps/cli/src/cli/commands/types.ts
@@ -4,13 +4,9 @@ import { Effect } from "effect";
 import { typesCheckCommand } from "./types-check";
 import { typesGenerateCommand } from "./types-generate";
 
-export const typesCommand = Command.make(
-  "types",
-  {},
-  () => Effect.gen(function* typesCommand() {})
+export const typesCommand = Command.make("types", {}, () =>
+  Effect.gen(function* typesCommand() {}),
 ).pipe(
-  Command.withDescription(
-    "Generate and validate the Voidhash TypeScript declaration file."
-  ),
-  Command.withSubcommands([typesGenerateCommand, typesCheckCommand])
+  Command.withDescription("Generate and validate the Voidhash TypeScript declaration file."),
+  Command.withSubcommands([typesGenerateCommand, typesCheckCommand]),
 );
diff --git a/apps/cli/src/cli/index.ts b/apps/cli/src/cli/index.ts
index f26a2b85b..bf2349d25 100644
--- a/apps/cli/src/cli/index.ts
+++ b/apps/cli/src/cli/index.ts
@@ -9,10 +9,7 @@ import { Codegen } from "../domain/services/codegen";
 import { SchemaService } from "../domain/services/schema";
 import { SourceCode } from "../domain/services/source-code";
 import { ApiClient } from "../utils/api-client";
-import {
-  isDebugMode,
-  withValidationErrorHandler,
-} from "../utils/error-formatter";
+import { isDebugMode, withValidationErrorHandler } from "../utils/error-formatter";
 import { authCommand } from "./commands/auth";
 import { configCommand } from "./commands/config";
 import { deployCommand } from "./commands/deploy";
@@ -21,11 +18,7 @@ import { studioCommand } from "./commands/studio";
 import { typesCommand } from "./commands/types";
 import { debugOption, profileOption } from "./shared-options";
 
-const command = Command.make(
-  "voidhash",
-  { debug: debugOption },
-  () => Effect.void,
-).pipe(
+const command = Command.make("voidhash", { debug: debugOption }, () => Effect.void).pipe(
   Command.withDescription("Voidhash CLI application."),
   // Shared flags are accepted before and after the subcommand name (npm-style),
   // so `voidhash deploy --profile dev` and `voidhash --profile dev deploy` both
@@ -47,9 +40,7 @@ const cli = Command.run(command, {
 
 // Apply debug log level if --debug flag is present
 const cliEffect = cli.pipe(
-  isDebugMode()
-    ? Effect.provideService(References.MinimumLogLevel, "Debug")
-    : (x) => x,
+  isDebugMode() ? Effect.provideService(References.MinimumLogLevel, "Debug") : (x) => x,
 );
 
 const ServicesLayer = Layer.mergeAll(
@@ -67,6 +58,4 @@ const MainLayer = ServicesLayer.pipe(
   Layer.provideMerge(PlatformLayer),
 );
 
-NodeRuntime.runMain(
-  cliEffect.pipe(Effect.provide(MainLayer), withValidationErrorHandler),
-);
+NodeRuntime.runMain(cliEffect.pipe(Effect.provide(MainLayer), withValidationErrorHandler));
diff --git a/apps/cli/src/cli/shared-options.ts b/apps/cli/src/cli/shared-options.ts
index 3c5b40635..cc1b49f7a 100644
--- a/apps/cli/src/cli/shared-options.ts
+++ b/apps/cli/src/cli/shared-options.ts
@@ -8,7 +8,7 @@ import { Flag } from "effect/unstable/cli";
 export const debugOption = Flag.boolean("debug").pipe(
   Flag.withAlias("d"),
   Flag.withDescription("Enable debug logging with full error traces"),
-  Flag.withDefault(false)
+  Flag.withDefault(false),
 );
 
 /**
@@ -20,8 +20,6 @@ export const debugOption = Flag.boolean("debug").pipe(
  * No short alias: `-p` is already used by the `studio` command for `--port`.
  */
 export const profileOption = Flag.string("profile").pipe(
-  Flag.withDescription(
-    "Use a named config profile (overrides merged onto the base config)"
-  ),
-  Flag.withDefault("")
+  Flag.withDescription("Use a named config profile (overrides merged onto the base config)"),
+  Flag.withDefault(""),
 );
diff --git a/apps/cli/src/domain/errors/auth.ts b/apps/cli/src/domain/errors/auth.ts
index d0cbb955f..6600ce04f 100644
--- a/apps/cli/src/domain/errors/auth.ts
+++ b/apps/cli/src/domain/errors/auth.ts
@@ -1,22 +1,16 @@
 import { Data } from "effect";
 
-export class NoSignedInUserError extends Data.TaggedError(
-  "NoSignedInUserError"
-)<{
+export class NoSignedInUserError extends Data.TaggedError("NoSignedInUserError")<{
   readonly cause?: unknown;
   readonly message: string;
 }> {}
 
-export class FailedToGetSessionError extends Data.TaggedError(
-  "FailedToGetSessionError"
-)<{
+export class FailedToGetSessionError extends Data.TaggedError("FailedToGetSessionError")<{
   readonly cause?: unknown;
   readonly message: string;
 }> {}
 
-export class FailedToLogoutError extends Data.TaggedError(
-  "FailedToLogoutError"
-)<{
+export class FailedToLogoutError extends Data.TaggedError("FailedToLogoutError")<{
   readonly cause?: unknown;
   readonly message: string;
 }> {}
diff --git a/apps/cli/src/domain/errors/cli-config.ts b/apps/cli/src/domain/errors/cli-config.ts
index 18a0f3c5e..328da7220 100644
--- a/apps/cli/src/domain/errors/cli-config.ts
+++ b/apps/cli/src/domain/errors/cli-config.ts
@@ -1,15 +1,11 @@
 import { Data } from "effect";
 
-export class CliConfigFileNotFoundError extends Data.TaggedError(
-  "ConfigFileNotFoundError"
-)<{
+export class CliConfigFileNotFoundError extends Data.TaggedError("ConfigFileNotFoundError")<{
   readonly cause?: unknown;
   readonly message: string;
 }> {}
 
-export class FailedToReadCliConfigError extends Data.TaggedError(
-  "FailedToReadConfigError"
-)<{
+export class FailedToReadCliConfigError extends Data.TaggedError("FailedToReadConfigError")<{
   readonly cause?: unknown;
   readonly message: string;
 }> {}
diff --git a/apps/cli/src/domain/errors/schema.ts b/apps/cli/src/domain/errors/schema.ts
index f5e4dc870..44f443b87 100644
--- a/apps/cli/src/domain/errors/schema.ts
+++ b/apps/cli/src/domain/errors/schema.ts
@@ -1,13 +1,9 @@
 import { Data } from "effect";
 
-export class RemoteSchemaFetchError extends Data.TaggedError(
-  "RemoteSchemaFetchError"
-)<{
+export class RemoteSchemaFetchError extends Data.TaggedError("RemoteSchemaFetchError")<{
   cause: unknown;
 }> {}
 
-export class SchemaCheckFailedError extends Data.TaggedError(
-  "SchemaCheckFailedError"
-)<{
+export class SchemaCheckFailedError extends Data.TaggedError("SchemaCheckFailedError")<{
   message: string;
 }> {}
diff --git a/apps/cli/src/domain/errors/source-code.ts b/apps/cli/src/domain/errors/source-code.ts
index 72148b9d9..1519c7ca7 100644
--- a/apps/cli/src/domain/errors/source-code.ts
+++ b/apps/cli/src/domain/errors/source-code.ts
@@ -1,53 +1,41 @@
 import { Data } from "effect";
 
-export class PackageJsonNotFoundError extends Data.TaggedError(
-  "PackageJsonNotFoundError"
-)<{
+export class PackageJsonNotFoundError extends Data.TaggedError("PackageJsonNotFoundError")<{
   readonly message: string;
 }> {}
 
-export class InvalidPackageJsonError extends Data.TaggedError(
-  "InvalidPackageJsonError"
-)<{
+export class InvalidPackageJsonError extends Data.TaggedError("InvalidPackageJsonError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class FailedToLoadPackageJsonError extends Data.TaggedError(
-  "FailedToLoadPackageJsonError"
-)<{
+export class FailedToLoadPackageJsonError extends Data.TaggedError("FailedToLoadPackageJsonError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class NoPackageManagerFoundError extends Data.TaggedError(
-  "NoPackageManagerFoundError"
-)<{
+export class NoPackageManagerFoundError extends Data.TaggedError("NoPackageManagerFoundError")<{
   readonly message: string;
 }> {}
 
 export class FailedToDetectPackageManagerError extends Data.TaggedError(
-  "FailedToDetectPackageManagerError"
+  "FailedToDetectPackageManagerError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class VoidhashConfigNotFoundError extends Data.TaggedError(
-  "VoidhashConfigNotFoundError"
-)<{
+export class VoidhashConfigNotFoundError extends Data.TaggedError("VoidhashConfigNotFoundError")<{
   readonly message: string;
 }> {}
 
-export class InvalidVoidhashConfigError extends Data.TaggedError(
-  "InvalidVoidhashConfigError"
-)<{
+export class InvalidVoidhashConfigError extends Data.TaggedError("InvalidVoidhashConfigError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
 export class FailedToLoadVoidhashConfigError extends Data.TaggedError(
-  "FailedToLoadVoidhashConfigError"
+  "FailedToLoadVoidhashConfigError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
diff --git a/apps/cli/src/domain/schema/package-json.ts b/apps/cli/src/domain/schema/package-json.ts
index 81fdbd822..a8505353d 100644
--- a/apps/cli/src/domain/schema/package-json.ts
+++ b/apps/cli/src/domain/schema/package-json.ts
@@ -1,21 +1,12 @@
 import { Schema } from "effect";
 
 export const PackageJsonSchema = Schema.Struct({
-  dependencies: Schema.optional(
-    Schema.Record(Schema.String, Schema.String)
-  ),
-  devDependencies: Schema.optional(
-    Schema.Record(Schema.String, Schema.String)
-  ),
+  dependencies: Schema.optional(Schema.Record(Schema.String, Schema.String)),
+  devDependencies: Schema.optional(Schema.Record(Schema.String, Schema.String)),
   name: Schema.optional(Schema.String),
-  peerDependencies: Schema.optional(
-    Schema.Record(Schema.String, Schema.String)
-  ),
+  peerDependencies: Schema.optional(Schema.Record(Schema.String, Schema.String)),
   version: Schema.optional(Schema.String),
   workspaces: Schema.optional(
-    Schema.Union([
-      Schema.Array(Schema.String),
-      Schema.Record(Schema.String, Schema.Unknown),
-    ])
+    Schema.Union([Schema.Array(Schema.String), Schema.Record(Schema.String, Schema.Unknown)]),
   ),
 });
diff --git a/apps/cli/src/domain/schema/paywall-deploy.ts b/apps/cli/src/domain/schema/paywall-deploy.ts
index d1fb2b6db..8d6319804 100644
--- a/apps/cli/src/domain/schema/paywall-deploy.ts
+++ b/apps/cli/src/domain/schema/paywall-deploy.ts
@@ -16,14 +16,10 @@ export const DEPLOY_SLUG_REGEX = /^[a-z0-9][a-z0-9-]{0,63}$/;
 const SHA256_HEX_REGEX = /^[a-f0-9]{64}$/;
 
 /** A slug identifier derived from a source file name, e.g. `onboarding`. */
-export const DeploySlugSchema = Schema.String.check(
-  Schema.isPattern(DEPLOY_SLUG_REGEX),
-);
+export const DeploySlugSchema = Schema.String.check(Schema.isPattern(DEPLOY_SLUG_REGEX));
 
 /** Lowercase hex SHA-256 digest. */
-export const DeploySha256Schema = Schema.String.check(
-  Schema.isPattern(SHA256_HEX_REGEX),
-);
+export const DeploySha256Schema = Schema.String.check(Schema.isPattern(SHA256_HEX_REGEX));
 
 /** A file's identity: where it lives, how big it is, and its content hash. */
 export const DeployFileSchema = Schema.Struct({
@@ -55,10 +51,7 @@ export const DeployVariableValueSchema = Schema.Union([
 export type DeployVariableValue = typeof DeployVariableValueSchema.Type;
 
 /** The paywall's author variables, keyed by name. */
-export const DeployVariablesSchema = Schema.Record(
-  Schema.String,
-  DeployVariableValueSchema,
-);
+export const DeployVariablesSchema = Schema.Record(Schema.String, DeployVariableValueSchema);
 export type DeployVariables = typeof DeployVariablesSchema.Type;
 
 /** The compiled, WebView-ready output for a single paywall. */
@@ -107,8 +100,7 @@ export const DeployComponentArtifactsSchema = Schema.Struct({
   /** Custom editor panel bundle, or `null` when none is declared. */
   panel: Schema.NullOr(DeployArtifactSchema),
 });
-export type DeployComponentArtifacts =
-  typeof DeployComponentArtifactsSchema.Type;
+export type DeployComponentArtifacts = typeof DeployComponentArtifactsSchema.Type;
 
 /** One reusable component in the deploy manifest (contract §1). */
 export const DeployComponentSchema = Schema.Struct({
diff --git a/apps/cli/src/domain/schema/voidhash-config.ts b/apps/cli/src/domain/schema/voidhash-config.ts
index 901507cd2..c2885ac2d 100644
--- a/apps/cli/src/domain/schema/voidhash-config.ts
+++ b/apps/cli/src/domain/schema/voidhash-config.ts
@@ -19,8 +19,6 @@ export const VoidhashConfigSchema = Schema.Struct({
 /**
  * Resolve `typesOutput` from a loaded config, applying the default.
  */
-export function resolveTypesOutput(
-  config: typeof VoidhashConfigSchema.Type
-): string {
+export function resolveTypesOutput(config: typeof VoidhashConfigSchema.Type): string {
   return config.typesOutput ?? DEFAULT_TYPES_OUTPUT;
 }
diff --git a/apps/cli/src/domain/services/auth.ts b/apps/cli/src/domain/services/auth.ts
index edb04402b..bcb7ab708 100644
--- a/apps/cli/src/domain/services/auth.ts
+++ b/apps/cli/src/domain/services/auth.ts
@@ -1,18 +1,7 @@
 import { NodeServices, NodeHttpServer } from "@effect/platform-node";
 import type { AuthSession200 } from "@voidhash/generated-clients";
-import {
-  Console,
-  Data,
-  Effect,
-  Layer,
-  PubSub,
-  Context,
-} from "effect";
-import {
-  HttpRouter,
-  HttpServerRequest,
-  HttpServerResponse,
-} from "effect/unstable/http";
+import { Console, Data, Effect, Layer, PubSub, Context } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
 import { customAlphabet } from "nanoid";
 import { spawn } from "node:child_process";
 import { createServer } from "node:http";
@@ -28,9 +17,7 @@ import {
 } from "../errors/auth";
 import { CliConfig } from "./cli-config";
 
-export class LoginCancelledError extends Data.TaggedError(
-  "LoginCancelledError"
-)<{
+export class LoginCancelledError extends Data.TaggedError("LoginCancelledError")<{
   readonly message: string;
 }> {}
 
@@ -59,10 +46,7 @@ interface AuthShape {
   readonly logout: Effect.Effect<void, FailedToLogoutError>;
 }
 
-const hasTag = (
-  error: unknown,
-  tag: string
-): error is { readonly _tag: string } =>
+const hasTag = (error: unknown, tag: string): error is { readonly _tag: string } =>
   typeof error === "object" &&
   error !== null &&
   "_tag" in error &&
@@ -72,7 +56,7 @@ const hasTag = (
 const hasNestedTag = (
   error: unknown,
   outerTag: string,
-  innerTag: string
+  innerTag: string,
 ): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
   hasTag(error, outerTag) &&
   "data" in error &&
@@ -82,9 +66,7 @@ const hasNestedTag = (
   typeof error.data._tag === "string" &&
   error.data._tag === innerTag;
 
-const isNoSignedInUserError = (
-  error: unknown
-): error is NoSignedInUserError =>
+const isNoSignedInUserError = (error: unknown): error is NoSignedInUserError =>
   error instanceof NoSignedInUserError || hasTag(error, "NoSignedInUserError");
 
 const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
@@ -104,14 +86,8 @@ const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
             if (query.cancelled) {
               yield* PubSub.publish(callbackEvents, { type: "cancelled" });
               return HttpServerResponse.text("Login cancelled").pipe(
-                HttpServerResponse.setHeader(
-                  "Access-Control-Allow-Origin",
-                  "*"
-                ),
-                HttpServerResponse.setHeader(
-                  "Access-Control-Allow-Methods",
-                  "GET, OPTIONS"
-                )
+                HttpServerResponse.setHeader("Access-Control-Allow-Origin", "*"),
+                HttpServerResponse.setHeader("Access-Control-Allow-Methods", "GET, OPTIONS"),
               );
             }
 
@@ -122,18 +98,15 @@ const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
             });
             return HttpServerResponse.text("Login successful").pipe(
               HttpServerResponse.setHeader("Access-Control-Allow-Origin", "*"),
-              HttpServerResponse.setHeader(
-                "Access-Control-Allow-Methods",
-                "GET, OPTIONS"
-              ),
+              HttpServerResponse.setHeader("Access-Control-Allow-Methods", "GET, OPTIONS"),
               HttpServerResponse.setHeader(
                 "Access-Control-Allow-Headers",
-                "Content-Type, Authorization"
-              )
+                "Content-Type, Authorization",
+              ),
             );
-          })
+          }),
         );
-      })
+      }),
     );
 
     const ServerLive = NodeHttpServer.layer(() => createServer(), {
@@ -144,7 +117,7 @@ const runCallbackServer = (callbackEvents: PubSub.PubSub<CallbackEvent>) =>
     // Launch the server with the callback route
     return yield* HttpRouter.serve(CallbackRoute).pipe(
       Layer.provide(Layer.mergeAll(ServerLive, NodeServices.layer)),
-      Layer.launch
+      Layer.launch,
     );
   });
 
@@ -161,37 +134,32 @@ const make = Effect.gen(function* effect() {
    * @returns {Effect.Effect<unknown, NoSignedInUserError | FailedToGetSessionError, { name: string; email: string }>}
    *   An Effect that yields the signed-in user's information, or fails with an appropriate error.
    */
-  const getSignedInSession: AuthShape["getSignedInSession"] = Effect.gen(function* getSignedInSession() {
-    yield* Effect.logDebug("Reading CLI config for session check");
-    const config = (yield* cliConfig
-      .readConfig()
-      .pipe(
-        Effect.catch(() => Effect.die("Failed to read config"))
-      ))!;
-
-    // If the config file is not found or the api key is not set, we consider the user to be signed out
-    const apiKey = config.api_key;
-    if (!apiKey) {
-      yield* Effect.logDebug("No API key found in config");
-      return yield* Effect.fail(
-        new NoSignedInUserError({ message: "No signed in user" })
-      );
-    }
+  const getSignedInSession: AuthShape["getSignedInSession"] = Effect.gen(
+    function* getSignedInSession() {
+      yield* Effect.logDebug("Reading CLI config for session check");
+      const config = (yield* cliConfig
+        .readConfig()
+        .pipe(Effect.catch(() => Effect.die("Failed to read config"))))!;
 
-    yield* Effect.logDebug("Fetching session from API");
-    const sessionResponse = yield* client.authSession().pipe(
-      Effect.tap((session) =>
-        Effect.logDebug(`Session retrieved for user: ${session.name}`)
-      ),
-      Effect.catchIf(
-        (error) => hasNestedTag(error, "AuthSession500", "NotAuthenticatedError"),
-        () =>
-          Effect.fail(new NoSignedInUserError({ message: "No signed in user" })),
-      )
-    );
+      // If the config file is not found or the api key is not set, we consider the user to be signed out
+      const apiKey = config.api_key;
+      if (!apiKey) {
+        yield* Effect.logDebug("No API key found in config");
+        return yield* Effect.fail(new NoSignedInUserError({ message: "No signed in user" }));
+      }
 
-    return sessionResponse;
-  }).pipe(
+      yield* Effect.logDebug("Fetching session from API");
+      const sessionResponse = yield* client.authSession().pipe(
+        Effect.tap((session) => Effect.logDebug(`Session retrieved for user: ${session.name}`)),
+        Effect.catchIf(
+          (error) => hasNestedTag(error, "AuthSession500", "NotAuthenticatedError"),
+          () => Effect.fail(new NoSignedInUserError({ message: "No signed in user" })),
+        ),
+      );
+
+      return sessionResponse;
+    },
+  ).pipe(
     Effect.withSpan("Auth.getSignedInSession"),
     Effect.catchIf(
       isNoSignedInUserError,
@@ -201,9 +169,9 @@ const make = Effect.gen(function* effect() {
           new FailedToGetSessionError({
             cause: error,
             message: "Failed to get session",
-          })
-        )
-    )
+          }),
+        ),
+    ),
   );
 
   const login: AuthShape["login"] = Effect.scoped(
@@ -212,15 +180,13 @@ const make = Effect.gen(function* effect() {
       const callbackEventsPubSub = yield* PubSub.unbounded<CallbackEvent>();
 
       // Launch the callback server in a separate fiber to avoid blocking
-      yield* Effect.logDebug(
-        `Starting callback server on ${host}:${port}`
-      );
+      yield* Effect.logDebug(`Starting callback server on ${host}:${port}`);
       yield* Effect.forkChild(
         Effect.catch(runCallbackServer(callbackEventsPubSub), (error) => {
           // biome-ignore lint/suspicious/noConsole: Error logging
           console.log(error);
           return Effect.die(error);
-        })
+        }),
       );
 
       // Set up the application server with routing
@@ -229,19 +195,15 @@ const make = Effect.gen(function* effect() {
       const code = nanoid();
       const config = (yield* cliConfig
         .readConfig()
-        .pipe(
-          Effect.catch(() => Effect.die("Failed to read config"))
-        ))!;
+        .pipe(Effect.catch(() => Effect.die("Failed to read config"))))!;
       const confirmationUrl = new URL(`${config.web_url}/auth/devices`);
       confirmationUrl.searchParams.append("code", code);
       confirmationUrl.searchParams.append("redirect", redirect);
 
-      yield* Effect.logDebug(
-        `Opening browser for authentication: ${confirmationUrl.toString()}`
-      );
+      yield* Effect.logDebug(`Opening browser for authentication: ${confirmationUrl.toString()}`);
       yield* Console.log(`Confirmation code: ${code}\n`);
       yield* Console.log(
-        `If something goes wrong, copy and paste this URL into your browser: ${confirmationUrl.toString()}\n`
+        `If something goes wrong, copy and paste this URL into your browser: ${confirmationUrl.toString()}\n`,
       );
       spawn("open", [confirmationUrl.toString()]);
 
@@ -252,9 +214,7 @@ const make = Effect.gen(function* effect() {
 
       if (callbackEvent.type === "cancelled") {
         yield* Effect.logDebug("Login cancelled by user");
-        return yield* Effect.fail(
-          new LoginCancelledError({ message: "Login cancelled" })
-        );
+        return yield* Effect.fail(new LoginCancelledError({ message: "Login cancelled" }));
       }
 
       // Store in config
@@ -262,18 +222,15 @@ const make = Effect.gen(function* effect() {
       yield* cliConfig.writeToConfig({ api_key: callbackEvent.key });
 
       yield* Console.log(
-        `Authentication successful! Your key has been stored in your config file.  To view it, type 'cat ~/${CONFIG_FILE_NAME}'.\n);`
+        `Authentication successful! Your key has been stored in your config file.  To view it, type 'cat ~/${CONFIG_FILE_NAME}'.\n);`,
       );
-    })
+    }),
   ).pipe(
     Effect.withSpan("Auth.login"),
     Effect.catchIf(
       (e) => e._tag !== "LoginCancelledError",
-      (e) =>
-        Effect.fail(
-          new FailedToLoginError({ cause: e, message: "Failed to login" })
-        )
-    )
+      (e) => Effect.fail(new FailedToLoginError({ cause: e, message: "Failed to login" })),
+    ),
   );
 
   /**
@@ -300,9 +257,9 @@ const make = Effect.gen(function* effect() {
         new FailedToLogoutError({
           cause: e,
           message: "Failed to logout",
-        })
-      )
-    )
+        }),
+      ),
+    ),
   );
 
   return {
@@ -312,10 +269,6 @@ const make = Effect.gen(function* effect() {
   } satisfies AuthShape;
 });
 
-export class Auth extends Context.Service<Auth, AuthShape>()(
-  "voidhash-cli/Auth"
-) {
-  static Default = Layer.effect(Auth, make).pipe(
-    Layer.provide(CliConfig.Default)
-  )
+export class Auth extends Context.Service<Auth, AuthShape>()("voidhash-cli/Auth") {
+  static Default = Layer.effect(Auth, make).pipe(Layer.provide(CliConfig.Default));
 }
diff --git a/apps/cli/src/domain/services/cli-config.ts b/apps/cli/src/domain/services/cli-config.ts
index 98628e858..2827d76a7 100644
--- a/apps/cli/src/domain/services/cli-config.ts
+++ b/apps/cli/src/domain/services/cli-config.ts
@@ -1,11 +1,7 @@
 import { Effect, FileSystem, Layer, Path, Schema, Context } from "effect";
 import os from "node:os";
 
-import {
-  CONFIG_FILE_NAME,
-  DEFAULT_API_URL,
-  DEFAULT_WEB_URL,
-} from "../../constants";
+import { CONFIG_FILE_NAME, DEFAULT_API_URL, DEFAULT_WEB_URL } from "../../constants";
 import { getActiveProfile } from "../../utils/error-formatter";
 import { FailedToReadCliConfigError } from "../errors/cli-config";
 import {
@@ -74,16 +70,16 @@ const make = Effect.gen(function* effect() {
             new FailedToReadCliConfigError({
               cause: e,
               message: "Failed to read config",
-            })
+            }),
           ),
         SchemaError: (e) =>
           Effect.fail(
             new FailedToReadCliConfigError({
               cause: e,
               message: "Failed to read config",
-            })
+            }),
           ),
-      })
+      }),
     );
 
   /**
@@ -114,7 +110,7 @@ const make = Effect.gen(function* effect() {
     Effect.gen(function* writeToConfig() {
       yield* Effect.logDebug(`Writing config to ${filePath}`);
       const currentConfig = yield* readRawConfig().pipe(
-        Effect.catch(() => Effect.succeed<ConfigFile>(emptyConfig))
+        Effect.catch(() => Effect.succeed<ConfigFile>(emptyConfig)),
       );
 
       const mergedConfig: ConfigFile = activeProfile
@@ -130,12 +126,8 @@ const make = Effect.gen(function* effect() {
           }
         : { ...currentConfig, ...config };
 
-      const validatedConfig =
-        yield* Schema.decodeUnknownEffect(CliConfigSchema)(mergedConfig);
-      yield* fileSystem.writeFileString(
-        filePath,
-        JSON.stringify(validatedConfig)
-      );
+      const validatedConfig = yield* Schema.decodeUnknownEffect(CliConfigSchema)(mergedConfig);
+      yield* fileSystem.writeFileString(filePath, JSON.stringify(validatedConfig));
       yield* Effect.logDebug("Config file written successfully");
     }).pipe(Effect.withSpan("CliConfig.writeToConfig"));
 
@@ -161,12 +153,8 @@ const make = Effect.gen(function* effect() {
           ...baseOf(raw),
           profiles: { ...raw.profiles, [activeProfile]: preserved },
         };
-        const validatedConfig =
-          yield* Schema.decodeUnknownEffect(CliConfigSchema)(mergedConfig);
-        yield* fileSystem.writeFileString(
-          filePath,
-          JSON.stringify(validatedConfig)
-        );
+        const validatedConfig = yield* Schema.decodeUnknownEffect(CliConfigSchema)(mergedConfig);
+        yield* fileSystem.writeFileString(filePath, JSON.stringify(validatedConfig));
         yield* Effect.logDebug("Config reset complete");
         return;
       }
@@ -190,7 +178,7 @@ const make = Effect.gen(function* effect() {
 type CliConfigShape = Effect.Success<typeof make>;
 
 export class CliConfig extends Context.Service<CliConfig, CliConfigShape>()(
-  "voidhash-cli/CliConfig"
+  "voidhash-cli/CliConfig",
 ) {
-  static Default = Layer.effect(CliConfig, make)
+  static Default = Layer.effect(CliConfig, make);
 }
diff --git a/apps/cli/src/domain/services/codegen.ts b/apps/cli/src/domain/services/codegen.ts
index a09302936..09d8f08f9 100644
--- a/apps/cli/src/domain/services/codegen.ts
+++ b/apps/cli/src/domain/services/codegen.ts
@@ -33,7 +33,7 @@ function toUnionType(slugs: string[]): string {
 export function generateTypesDeclaration(
   schema: NormalizedSchema,
   version: string,
-  options: { fetchedAt?: Date } = {}
+  options: { fetchedAt?: Date } = {},
 ): string {
   const fetchedAt = (options.fetchedAt ?? new Date()).toISOString();
 
@@ -76,10 +76,7 @@ const make = Effect.gen(function* effect() {
    * like `<voidhash.Provider>` or `voidhash.useProducts()`. The parent
    * directory (`src/lib` or `lib`) is created if it does not exist yet.
    */
-  const generateClientFile = (
-    filePath: string,
-    options: { publishableKey: string }
-  ) =>
+  const generateClientFile = (filePath: string, options: { publishableKey: string }) =>
     Effect.gen(function* generateClientFile() {
       yield* fileSystem.makeDirectory(path.dirname(filePath), {
         recursive: true,
@@ -101,7 +98,7 @@ const make = Effect.gen(function* effect() {
 
   const generateVoidhashConfigFile = (
     filePath: string,
-    config: Writable<typeof VoidhashConfigSchema.Type>
+    config: Writable<typeof VoidhashConfigSchema.Type>,
   ) =>
     Effect.gen(function* generateVoidhashConfigFile() {
       const lines = [
@@ -126,7 +123,7 @@ const make = Effect.gen(function* effect() {
   const generateTypesDeclarationFile = (
     filePath: string,
     schema: NormalizedSchema,
-    version: string
+    version: string,
   ) =>
     Effect.gen(function* generateTypesDeclarationFile() {
       const content = generateTypesDeclaration(schema, version);
@@ -150,8 +147,6 @@ const make = Effect.gen(function* effect() {
 
 type CodegenShape = Effect.Success<typeof make>;
 
-export class Codegen extends Context.Service<Codegen, CodegenShape>()(
-  "voidhash-cli/Codegen"
-) {
+export class Codegen extends Context.Service<Codegen, CodegenShape>()("voidhash-cli/Codegen") {
   static Default = Layer.effect(Codegen, make);
 }
diff --git a/apps/cli/src/domain/services/paywall-build.ts b/apps/cli/src/domain/services/paywall-build.ts
index 654fd44db..a6421500f 100644
--- a/apps/cli/src/domain/services/paywall-build.ts
+++ b/apps/cli/src/domain/services/paywall-build.ts
@@ -7,15 +7,7 @@
  */
 import { createHash } from "node:crypto";
 import { existsSync, promises as fsp, readdirSync, statSync } from "node:fs";
-import {
-  basename,
-  dirname,
-  extname,
-  join,
-  posix,
-  relative,
-  sep,
-} from "node:path";
+import { basename, dirname, extname, join, posix, relative, sep } from "node:path";
 import { Data, Effect, Schema } from "effect";
 import * as esbuild from "esbuild";
 
@@ -33,10 +25,7 @@ import {
   type DeployVariables,
 } from "../schema/paywall-deploy";
 import { closedImportsPlugin } from "./paywall-closed-imports";
-import {
-  PAYWALL_ASSET_EXTENSIONS,
-  typecheckPaywallSources,
-} from "./paywall-typecheck";
+import { PAYWALL_ASSET_EXTENSIONS, typecheckPaywallSources } from "./paywall-typecheck";
 
 export class PaywallBuildError extends Data.TaggedError("PaywallBuildError")<{
   readonly message: string;
@@ -52,19 +41,17 @@ const SOURCE_EXTENSIONS = [".tsx", ".jsx", ".ts", ".js"];
  * Binary asset types paywall bundles may import; emitted as files. Derived
  * from the typecheck gate's extension list so the two can never drift.
  */
-const PAYWALL_ASSET_LOADERS: Record<string, esbuild.Loader> =
-  Object.fromEntries(
-    PAYWALL_ASSET_EXTENSIONS.map((ext) => [`.${ext}`, "file"]),
-  );
+const PAYWALL_ASSET_LOADERS: Record<string, esbuild.Loader> = Object.fromEntries(
+  PAYWALL_ASSET_EXTENSIONS.map((ext) => [`.${ext}`, "file"]),
+);
 
 /**
  * Component runtime bundles must stay a single file (the manifest has no
  * per-component asset list), so binary imports are inlined as data URLs.
  */
-const COMPONENT_ASSET_LOADERS: Record<string, esbuild.Loader> =
-  Object.fromEntries(
-    Object.keys(PAYWALL_ASSET_LOADERS).map((ext) => [ext, "dataurl"]),
-  );
+const COMPONENT_ASSET_LOADERS: Record<string, esbuild.Loader> = Object.fromEntries(
+  Object.keys(PAYWALL_ASSET_LOADERS).map((ext) => [ext, "dataurl"]),
+);
 
 const CONTENT_TYPES: Record<string, string> = {
   ".html": "text/html; charset=utf-8",
@@ -97,11 +84,7 @@ export const computePaywallContentHash = (input: {
   readonly jsSha256: string;
   readonly assetSha256s: ReadonlyArray<string>;
 }): string =>
-  sha256Hex(
-    `${input.htmlSha256}:${input.jsSha256}:${[...input.assetSha256s]
-      .sort()
-      .join(":")}`,
-  );
+  sha256Hex(`${input.htmlSha256}:${input.jsSha256}:${[...input.assetSha256s].sort().join(":")}`);
 
 /**
  * Contract §1.2 component content hash:
@@ -131,11 +114,9 @@ const toRelPosix = (projectRoot: string, abs: string): string =>
 // Studio's virtual-paywalls plugin
 // (apps/studio/src/server/virtual-paywalls-plugin.ts) — keep both in sync.
 const isSourceFile = (name: string): boolean =>
-  SOURCE_EXTENSIONS.some((ext) => name.endsWith(ext)) &&
-  !name.endsWith(".d.ts");
+  SOURCE_EXTENSIONS.some((ext) => name.endsWith(ext)) && !name.endsWith(".d.ts");
 
-const idFromFile = (file: string): string =>
-  basename(file).replace(/\.(tsx|jsx|ts|js)$/, "");
+const idFromFile = (file: string): string => basename(file).replace(/\.(tsx|jsx|ts|js)$/, "");
 
 /** Recursively lists files under a directory (absolute paths). */
 const listFilesRecursive = (dir: string): string[] => {
@@ -179,9 +160,7 @@ const bundleFailure = (subject: string) => (cause: unknown) => {
   const details = describeEsbuildFailure(cause);
   return new PaywallBuildError({
     cause,
-    message: details
-      ? `Failed to bundle ${subject}:\n${details}`
-      : `Failed to bundle ${subject}`,
+    message: details ? `Failed to bundle ${subject}:\n${details}` : `Failed to bundle ${subject}`,
   });
 };
 
@@ -211,10 +190,7 @@ interface UserTreeLib {
 }
 
 interface UserReactLib {
-  readonly createElement: (
-    type: unknown,
-    props: Record<string, unknown> | null,
-  ) => unknown;
+  readonly createElement: (type: unknown, props: Record<string, unknown> | null) => unknown;
 }
 
 interface ComponentPreviewStateLike {
@@ -240,8 +216,7 @@ const requireFromProject = <T>(
   specifier: string,
 ): Effect.Effect<T, PaywallBuildError> =>
   Effect.try({
-    try: () =>
-      require(require.resolve(specifier, { paths: [projectRoot] })) as T,
+    try: () => require(require.resolve(specifier, { paths: [projectRoot] })) as T,
     catch: (cause) =>
       new PaywallBuildError({
         cause,
@@ -257,10 +232,7 @@ const requireFromProject = <T>(
  * and preview rendering. The shared `safeRegister` helper uses the `ts`
  * loader, which rejects JSX — hence a dedicated hook here.
  */
-const registerTsxLoader = (): Effect.Effect<
-  { unregister: () => void },
-  PaywallBuildError
-> =>
+const registerTsxLoader = (): Effect.Effect<{ unregister: () => void }, PaywallBuildError> =>
   Effect.tryPromise({
     try: async () => {
       const { register } = await import("esbuild-register/dist/node");
@@ -273,9 +245,7 @@ const registerTsxLoader = (): Effect.Effect<
       }),
   });
 
-const loadModuleDefault = (
-  file: string,
-): Effect.Effect<unknown, PaywallBuildError> =>
+const loadModuleDefault = (file: string): Effect.Effect<unknown, PaywallBuildError> =>
   Effect.try({
     try: () => {
       delete require.cache[require.resolve(file)];
@@ -292,9 +262,7 @@ const loadModuleDefault = (
   });
 
 const isScalar = (value: unknown): value is string | number | boolean =>
-  typeof value === "string" ||
-  typeof value === "number" ||
-  typeof value === "boolean";
+  typeof value === "string" || typeof value === "number" || typeof value === "boolean";
 
 interface PaywallModuleMeta {
   readonly title: string;
@@ -304,14 +272,10 @@ interface PaywallModuleMeta {
 }
 
 /** Reads the `__voidhash` metadata off a paywall module's default export. */
-const loadPaywallMeta = (
-  file: string,
-): Effect.Effect<PaywallModuleMeta, PaywallBuildError> =>
+const loadPaywallMeta = (file: string): Effect.Effect<PaywallModuleMeta, PaywallBuildError> =>
   loadModuleDefault(file).pipe(
     Effect.flatMap((def) => {
-      const meta = (
-        def as { __voidhash?: Record<string, unknown> } | null | undefined
-      )?.__voidhash;
+      const meta = (def as { __voidhash?: Record<string, unknown> } | null | undefined)?.__voidhash;
       if (!meta || meta.kind !== "paywall") {
         return Effect.fail(
           new PaywallBuildError({
@@ -320,11 +284,8 @@ const loadPaywallMeta = (
         );
       }
       const title =
-        typeof meta.title === "string" && meta.title.length > 0
-          ? meta.title
-          : idFromFile(file);
-      const description =
-        typeof meta.description === "string" ? meta.description : undefined;
+        typeof meta.title === "string" && meta.title.length > 0 ? meta.title : idFromFile(file);
+      const description = typeof meta.description === "string" ? meta.description : undefined;
       const products = Array.isArray(meta.products)
         ? meta.products.filter((p): p is string => typeof p === "string")
         : [];
@@ -392,17 +353,13 @@ const loadComponentDefinition = (
 
 // ── Output writing ───────────────────────────────────────────────────────────
 
-const writeFile = (
-  absPath: string,
-  bytes: Uint8Array,
-): Effect.Effect<void, PaywallBuildError> =>
+const writeFile = (absPath: string, bytes: Uint8Array): Effect.Effect<void, PaywallBuildError> =>
   Effect.tryPromise({
     try: async () => {
       await fsp.mkdir(dirname(absPath), { recursive: true });
       await fsp.writeFile(absPath, bytes);
     },
-    catch: (cause) =>
-      new PaywallBuildError({ cause, message: `Failed to write ${absPath}` }),
+    catch: (cause) => new PaywallBuildError({ cause, message: `Failed to write ${absPath}` }),
   });
 
 /** Writes `bytes` to `absPath` and returns its manifest artifact entry. */
@@ -433,8 +390,7 @@ const readDeployFile = (
         sha256: sha256Hex(bytes),
       };
     },
-    catch: (cause) =>
-      new PaywallBuildError({ cause, message: `Failed to read ${absPath}` }),
+    catch: (cause) => new PaywallBuildError({ cause, message: `Failed to read ${absPath}` }),
   });
 
 // ── Paywall bundling ─────────────────────────────────────────────────────────
@@ -636,9 +592,7 @@ const LEGITIMATE_NULL_REASON = "render returned null";
  * unsupported element type, … Placeholders carrying the legitimate
  * `"render returned null"` reason are not errors and are skipped.
  */
-export const collectRenderErrorPlaceholderReasons = (
-  tree: unknown,
-): string[] => {
+export const collectRenderErrorPlaceholderReasons = (tree: unknown): string[] => {
   const reasons: string[] = [];
   const visit = (node: unknown): void => {
     if (typeof node !== "object" || node === null) {
@@ -739,13 +693,9 @@ export const buildPaywalls = ({
   cliVersion,
   runtimeVersion,
   onWarn,
-}: BuildPaywallsOptions): Effect.Effect<
-  BuildPaywallsResult,
-  PaywallBuildError
-> =>
+}: BuildPaywallsOptions): Effect.Effect<BuildPaywallsResult, PaywallBuildError> =>
   Effect.gen(function* buildPaywalls() {
-    const warn = (message: string): Effect.Effect<void> =>
-      onWarn ? onWarn(message) : Effect.void;
+    const warn = (message: string): Effect.Effect<void> => (onWarn ? onWarn(message) : Effect.void);
     const voidhashDir = join(projectRoot, ".voidhash");
     const paywallsDir = join(voidhashDir, "paywalls");
     const componentsDir = join(voidhashDir, "components");
@@ -771,17 +721,14 @@ export const buildPaywalls = ({
       projectRoot,
     }).pipe(
       Effect.catchTag("PaywallTypecheckError", (e) =>
-        Effect.fail(
-          new PaywallBuildError({ cause: e.cause, message: e.message }),
-        ),
+        Effect.fail(new PaywallBuildError({ cause: e.cause, message: e.message })),
       ),
     );
 
     // Clear any previous build so removed paywalls/components don't linger.
     yield* Effect.tryPromise({
       try: () => fsp.rm(outDir, { force: true, recursive: true }),
-      catch: (cause) =>
-        new PaywallBuildError({ cause, message: "Failed to clean build dir" }),
+      catch: (cause) => new PaywallBuildError({ cause, message: "Failed to clean build dir" }),
     });
 
     // Register esbuild so we can `require` paywall/component modules (JSX) to
@@ -828,9 +775,7 @@ export const buildPaywalls = ({
         artifacts: { html, js },
         assets: referencedAssets,
         contentHash: computePaywallContentHash({
-          assetSha256s: referencedAssets.map(
-            (path) => assetIndex.get(path)?.sha256 ?? "",
-          ),
+          assetSha256s: referencedAssets.map((path) => assetIndex.get(path)?.sha256 ?? ""),
           htmlSha256: html.sha256,
           jsSha256: js.sha256,
         }),
@@ -856,10 +801,7 @@ export const buildPaywalls = ({
         projectRoot,
         "@voidhash/paywalls/tree",
       );
-      const react = yield* requireFromProject<UserReactLib>(
-        projectRoot,
-        "react",
-      );
+      const react = yield* requireFromProject<UserReactLib>(projectRoot, "react");
 
       for (const file of componentFiles) {
         const id = idFromFile(file);
@@ -938,11 +880,7 @@ export const buildPaywalls = ({
         let panel: DeployArtifact | null = null;
         if (definition.panel !== undefined && definition.panel !== null) {
           const panelBytes = yield* bundleComponentPanel(voidhashDir, file);
-          panel = yield* writeArtifact(
-            projectRoot,
-            join(componentOutDir, "panel.js"),
-            panelBytes,
-          );
+          panel = yield* writeArtifact(projectRoot, join(componentOutDir, "panel.js"), panelBytes);
         }
 
         const source = yield* readDeployFile(projectRoot, file);
@@ -974,17 +912,14 @@ export const buildPaywalls = ({
     if (!configFile) {
       return yield* Effect.fail(
         new PaywallBuildError({
-          message:
-            "voidhash.config.* not found. Run 'voidhash-cli init' first.",
+          message: "voidhash.config.* not found. Run 'voidhash-cli init' first.",
         }),
       );
     }
     const config = yield* readDeployFile(projectRoot, configFile);
 
     const manifest: DeployManifest = {
-      assets: [...assetIndex.values()].sort((a, b) =>
-        a.path.localeCompare(b.path),
-      ),
+      assets: [...assetIndex.values()].sort((a, b) => a.path.localeCompare(b.path)),
       cliVersion,
       components,
       config,
@@ -1009,10 +944,7 @@ export const buildPaywalls = ({
     );
 
     const manifestPath = join(outDir, "manifest.json");
-    yield* writeFile(
-      manifestPath,
-      textEncoder.encode(`${JSON.stringify(manifest, null, 2)}\n`),
-    );
+    yield* writeFile(manifestPath, textEncoder.encode(`${JSON.stringify(manifest, null, 2)}\n`));
 
     return { manifest, manifestPath, outDir };
   });
diff --git a/apps/cli/src/domain/services/paywall-closed-imports.ts b/apps/cli/src/domain/services/paywall-closed-imports.ts
index e3f814537..0a68518cf 100644
--- a/apps/cli/src/domain/services/paywall-closed-imports.ts
+++ b/apps/cli/src/domain/services/paywall-closed-imports.ts
@@ -41,10 +41,7 @@ const isAllowedBareImport = (specifier: string): boolean => {
     return true;
   }
   // Any @voidhash/paywalls subpath except ./tree (dom, panel, …).
-  return (
-    specifier.startsWith(`${PAYWALLS_PACKAGE}/`) &&
-    specifier !== FORBIDDEN_PAYWALLS_SUBPATH
-  );
+  return specifier.startsWith(`${PAYWALLS_PACKAGE}/`) && specifier !== FORBIDDEN_PAYWALLS_SUBPATH;
 };
 
 const disallowedMessage = (specifier: string, importer: string): string =>
@@ -76,8 +73,7 @@ export const closedImportsPlugin = (voidhashDir: string): esbuild.Plugin => ({
       }
       // Only user-authored sources are constrained. Synthetic stdin entries
       // (non-absolute importer) count as user sources.
-      const fromUserSource =
-        !isAbsolute(args.importer) || isPathWithin(voidhashDir, args.importer);
+      const fromUserSource = !isAbsolute(args.importer) || isPathWithin(voidhashDir, args.importer);
       if (!fromUserSource) {
         return null;
       }
diff --git a/apps/cli/src/domain/services/paywall-deploy-upload.ts b/apps/cli/src/domain/services/paywall-deploy-upload.ts
index b78cef84c..fb904b99f 100644
--- a/apps/cli/src/domain/services/paywall-deploy-upload.ts
+++ b/apps/cli/src/domain/services/paywall-deploy-upload.ts
@@ -8,18 +8,12 @@ import { promises as fsp } from "node:fs";
 import { join } from "node:path";
 
 import { Data, Effect, Schema } from "effect";
-import {
-  HttpClient,
-  HttpClientRequest,
-  type HttpClientResponse,
-} from "effect/unstable/http";
+import { HttpClient, HttpClientRequest, type HttpClientResponse } from "effect/unstable/http";
 
 import type { DeployManifest } from "../schema/paywall-deploy";
 import { CliConfig } from "./cli-config";
 
-export class PaywallDeployUploadError extends Data.TaggedError(
-  "PaywallDeployUploadError",
-)<{
+export class PaywallDeployUploadError extends Data.TaggedError("PaywallDeployUploadError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
@@ -63,13 +57,9 @@ export type FinalizeResponse = typeof FinalizeResponseSchema.Type;
  * Maps every file hash in the manifest to its project-root-relative path —
  * the lookup used to satisfy the server's `missing` list.
  */
-export const collectManifestFiles = (
-  manifest: DeployManifest,
-): Map<string, string> => {
+export const collectManifestFiles = (manifest: DeployManifest): Map<string, string> => {
   const files = new Map<string, string>();
-  const add = (
-    file: { readonly path: string; readonly sha256: string } | null,
-  ): void => {
+  const add = (file: { readonly path: string; readonly sha256: string } | null): void => {
     if (file) {
       files.set(file.sha256, file.path);
     }
@@ -125,14 +115,9 @@ const readMissingHashes = (body: string): string[] | undefined => {
 };
 
 /** Renders a non-2xx response into an actionable message (esp. 422 details). */
-const describeHttpFailure = (
-  step: string,
-  status: number,
-  body: string,
-): string => {
+const describeHttpFailure = (step: string, status: number, body: string): string => {
   const parsed = tryParseJson(body);
-  const details =
-    parsed !== undefined ? JSON.stringify(parsed, null, 2) : body.trim();
+  const details = parsed !== undefined ? JSON.stringify(parsed, null, 2) : body.trim();
   const hint =
     status === 400
       ? " The server rejected the manifest — your CLI may be outdated; try upgrading voidhash-cli."
@@ -145,9 +130,7 @@ const describeHttpFailure = (
             : status === 422
               ? " The server rejected the deploy contents:"
               : "";
-  return `${step} failed with status ${status}.${hint}${
-    details ? `\n${details}` : ""
-  }`;
+  return `${step} failed with status ${status}.${hint}${details ? `\n${details}` : ""}`;
 };
 
 const failHttp = (
@@ -242,8 +225,7 @@ export const uploadPaywallDeploy = ({
     if (!config.api_key) {
       return yield* Effect.fail(
         new PaywallDeployUploadError({
-          message:
-            "You must be logged in to deploy. Run 'voidhash-cli auth login' first.",
+          message: "You must be logged in to deploy. Run 'voidhash-cli auth login' first.",
         }),
       );
     }
@@ -252,10 +234,7 @@ export const uploadPaywallDeploy = ({
     const send = (
       step: string,
       request: HttpClientRequest.HttpClientRequest,
-    ): Effect.Effect<
-      HttpClientResponse.HttpClientResponse,
-      PaywallDeployUploadError
-    > =>
+    ): Effect.Effect<HttpClientResponse.HttpClientResponse, PaywallDeployUploadError> =>
       httpClient
         .execute(
           request.pipe(
@@ -279,18 +258,12 @@ export const uploadPaywallDeploy = ({
     if (createResponse.status < 200 || createResponse.status >= 300) {
       return yield* failHttp(createStep, createResponse);
     }
-    const created = yield* decodeJson(
-      createStep,
-      CreateDeployResponseSchema,
-      createResponse,
-    );
+    const created = yield* decodeJson(createStep, CreateDeployResponseSchema, createResponse);
 
     // 2. Upload every blob the server is missing.
     const filesByHash = collectManifestFiles(manifest);
 
-    const uploadBlob = (
-      sha256: string,
-    ): Effect.Effect<void, PaywallDeployUploadError> =>
+    const uploadBlob = (sha256: string): Effect.Effect<void, PaywallDeployUploadError> =>
       Effect.gen(function* uploadBlob() {
         const relPath = filesByHash.get(sha256);
         if (relPath === undefined) {
@@ -313,9 +286,7 @@ export const uploadPaywallDeploy = ({
         const uploadStep = `Uploading ${relPath}`;
         const uploadResponse = yield* send(
           uploadStep,
-          HttpClientRequest.put(
-            `/api/v1/paywall-deploys/${created.deployId}/blobs/${sha256}`,
-          ).pipe(
+          HttpClientRequest.put(`/api/v1/paywall-deploys/${created.deployId}/blobs/${sha256}`).pipe(
             HttpClientRequest.bodyUint8Array(bytes, "application/octet-stream"),
           ),
         );
@@ -344,18 +315,14 @@ export const uploadPaywallDeploy = ({
     > =>
       send(
         finalizeStep,
-        HttpClientRequest.post(
-          `/api/v1/paywall-deploys/${created.deployId}/finalize`,
-        ),
+        HttpClientRequest.post(`/api/v1/paywall-deploys/${created.deployId}/finalize`),
       );
 
     let finalizeResponse = yield* requestFinalize();
     let retriedUploadCount = 0;
 
     if (finalizeResponse.status === 409) {
-      const body = yield* finalizeResponse.text.pipe(
-        Effect.orElseSucceed(() => ""),
-      );
+      const body = yield* finalizeResponse.text.pipe(Effect.orElseSucceed(() => ""));
       const missingOnFinalize = readMissingHashes(body);
       if (
         missingOnFinalize === undefined ||
@@ -382,11 +349,7 @@ export const uploadPaywallDeploy = ({
     if (finalizeResponse.status < 200 || finalizeResponse.status >= 300) {
       return yield* failHttp(finalizeStep, finalizeResponse);
     }
-    const finalize = yield* decodeJson(
-      finalizeStep,
-      FinalizeResponseSchema,
-      finalizeResponse,
-    );
+    const finalize = yield* decodeJson(finalizeStep, FinalizeResponseSchema, finalizeResponse);
 
     return {
       cachedCount: filesByHash.size - created.missing.length,
diff --git a/apps/cli/src/domain/services/paywall-typecheck.ts b/apps/cli/src/domain/services/paywall-typecheck.ts
index 074954401..e11c76617 100644
--- a/apps/cli/src/domain/services/paywall-typecheck.ts
+++ b/apps/cli/src/domain/services/paywall-typecheck.ts
@@ -8,9 +8,7 @@ import { dirname, join } from "node:path";
 import { Data, Effect } from "effect";
 import ts from "typescript";
 
-export class PaywallTypecheckError extends Data.TaggedError(
-  "PaywallTypecheckError",
-)<{
+export class PaywallTypecheckError extends Data.TaggedError("PaywallTypecheckError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
@@ -36,8 +34,7 @@ export const PAYWALL_ASSET_EXTENSIONS = [
 
 /** Ambient `declare module "*.png" { … }` block per supported asset extension. */
 const ASSET_MODULE_DECLARATIONS = PAYWALL_ASSET_EXTENSIONS.map(
-  (ext) =>
-    `declare module "*.${ext}" {\n  const url: string;\n  export default url;\n}\n`,
+  (ext) => `declare module "*.${ext}" {\n  const url: string;\n  export default url;\n}\n`,
 ).join("\n");
 
 /**
@@ -66,11 +63,7 @@ const formatHost: ts.FormatDiagnosticsHost = {
 const loadCompilerOptions = (
   projectRoot: string,
 ): { options: ts.CompilerOptions; configPath: string | undefined } => {
-  const configPath = ts.findConfigFile(
-    projectRoot,
-    ts.sys.fileExists,
-    "tsconfig.json",
-  );
+  const configPath = ts.findConfigFile(projectRoot, ts.sys.fileExists, "tsconfig.json");
   if (!configPath) {
     return { configPath: undefined, options: { ...FALLBACK_OPTIONS } };
   }
@@ -98,25 +91,16 @@ const loadCompilerOptions = (
  * Wraps a compiler host so the in-memory asset declaration file exists at
  * `assetDeclPath` without ever touching disk.
  */
-const withAssetDeclarations = (
-  host: ts.CompilerHost,
-  assetDeclPath: string,
-): ts.CompilerHost => {
+const withAssetDeclarations = (host: ts.CompilerHost, assetDeclPath: string): ts.CompilerHost => {
   const getSourceFile = host.getSourceFile.bind(host);
   const fileExists = host.fileExists.bind(host);
   const readFile = host.readFile.bind(host);
   return {
     ...host,
-    fileExists: (fileName) =>
-      fileName === assetDeclPath || fileExists(fileName),
+    fileExists: (fileName) => fileName === assetDeclPath || fileExists(fileName),
     getSourceFile: (fileName, languageVersionOrOptions, ...rest) =>
       fileName === assetDeclPath
-        ? ts.createSourceFile(
-            fileName,
-            ASSET_MODULE_DECLARATIONS,
-            languageVersionOrOptions,
-            true,
-          )
+        ? ts.createSourceFile(fileName, ASSET_MODULE_DECLARATIONS, languageVersionOrOptions, true)
         : getSourceFile(fileName, languageVersionOrOptions, ...rest),
     readFile: (fileName) =>
       fileName === assetDeclPath ? ASSET_MODULE_DECLARATIONS : readFile(fileName),
@@ -137,9 +121,7 @@ export const typecheckPaywallSources = (options: {
 }): Effect.Effect<void, PaywallTypecheckError> =>
   Effect.try({
     try: () => {
-      const { options: compilerOptions } = loadCompilerOptions(
-        options.projectRoot,
-      );
+      const { options: compilerOptions } = loadCompilerOptions(options.projectRoot);
 
       const finalOptions: ts.CompilerOptions = {
         ...compilerOptions,
@@ -151,15 +133,9 @@ export const typecheckPaywallSources = (options: {
         skipLibCheck: true,
       };
 
-      const assetDeclPath = join(
-        options.projectRoot,
-        ASSET_DECLARATIONS_FILE_NAME,
-      );
+      const assetDeclPath = join(options.projectRoot, ASSET_DECLARATIONS_FILE_NAME);
       const program = ts.createProgram({
-        host: withAssetDeclarations(
-          ts.createCompilerHost(finalOptions),
-          assetDeclPath,
-        ),
+        host: withAssetDeclarations(ts.createCompilerHost(finalOptions), assetDeclPath),
         options: finalOptions,
         rootNames: [...options.files, assetDeclPath],
       });
@@ -178,9 +154,6 @@ export const typecheckPaywallSources = (options: {
     catch: (cause) =>
       new PaywallTypecheckError({
         cause,
-        message:
-          cause instanceof Error
-            ? cause.message
-            : "Failed to typecheck .voidhash sources.",
+        message: cause instanceof Error ? cause.message : "Failed to typecheck .voidhash sources.",
       }),
   });
diff --git a/apps/cli/src/domain/services/schema.ts b/apps/cli/src/domain/services/schema.ts
index 04762a53c..1fd76b2d6 100644
--- a/apps/cli/src/domain/services/schema.ts
+++ b/apps/cli/src/domain/services/schema.ts
@@ -52,9 +52,7 @@ const make = Effect.gen(function* effect() {
           name: product.name,
           perks: [...product.perks],
           providers: product.providers
-            .filter((provider) =>
-              SUPPORTED_PROVIDER_IDS.has(provider.providerId as string)
-            )
+            .filter((provider) => SUPPORTED_PROVIDER_IDS.has(provider.providerId as string))
             .map((provider) => ({
               configuration: provider.configuration,
               providerId: provider.providerId as ProviderId,
@@ -69,7 +67,7 @@ const make = Effect.gen(function* effect() {
       }
 
       yield* Effect.logDebug(
-        `Fetched ${schema.locations.size} locations, ${schema.perks.size} perks, ${schema.products.size} products`
+        `Fetched ${schema.locations.size} locations, ${schema.perks.size} perks, ${schema.products.size} products`,
       );
 
       // The server-side version is the canonical hash and trumps any local
@@ -82,9 +80,9 @@ const make = Effect.gen(function* effect() {
         Effect.fail(
           new RemoteSchemaFetchError({
             cause: e,
-          })
-        )
-      )
+          }),
+        ),
+      ),
     );
 
   /**
@@ -103,9 +101,9 @@ const make = Effect.gen(function* effect() {
         Effect.fail(
           new RemoteSchemaFetchError({
             cause: e,
-          })
-        )
-      )
+          }),
+        ),
+      ),
     );
 
   return {
@@ -116,11 +114,8 @@ const make = Effect.gen(function* effect() {
 
 type SchemaServiceShape = Effect.Success<typeof make>;
 
-export class SchemaService extends Context.Service<
-  SchemaService,
-  SchemaServiceShape
->()("voidhash-cli/Schema") {
-  static Default = Layer.effect(SchemaService, make).pipe(
-    Layer.provide(ApiClient.Default)
-  );
+export class SchemaService extends Context.Service<SchemaService, SchemaServiceShape>()(
+  "voidhash-cli/Schema",
+) {
+  static Default = Layer.effect(SchemaService, make).pipe(Layer.provide(ApiClient.Default));
 }
diff --git a/apps/cli/src/domain/services/source-code.ts b/apps/cli/src/domain/services/source-code.ts
index a19db18d7..c5bd0ef25 100644
--- a/apps/cli/src/domain/services/source-code.ts
+++ b/apps/cli/src/domain/services/source-code.ts
@@ -54,15 +54,11 @@ const make = Effect.gen(function* effect() {
           const pathPrefix = relativePathPrefixFromDepth(depth);
 
           // Check for monorepo indicators
-          const isPnpmWorkspace = yield* fs.exists(
-            path.resolve(pathPrefix, "pnpm-workspace.yaml")
-          );
+          const isPnpmWorkspace = yield* fs.exists(path.resolve(pathPrefix, "pnpm-workspace.yaml"));
           const isYarnWorkspaces = yield* fs.exists(
-            path.resolve(pathPrefix, "yarn.workspaces.json")
-          );
-          const isTurboRoot = yield* fs.exists(
-            path.resolve(pathPrefix, "turbo.json")
+            path.resolve(pathPrefix, "yarn.workspaces.json"),
           );
+          const isTurboRoot = yield* fs.exists(path.resolve(pathPrefix, "turbo.json"));
 
           // Check for package.json with workspaces field
           const packageJsonPath = path.resolve(pathPrefix, "package.json");
@@ -72,18 +68,11 @@ const make = Effect.gen(function* effect() {
           if (packageJsonExists) {
             const packageJson = yield* loadPackageJson(pathPrefix);
             hasWorkspacesField =
-              (packageJson.workspaces !== undefined &&
-                Array.isArray(packageJson.workspaces)) ||
-              (packageJson.workspaces !== undefined &&
-                typeof packageJson.workspaces === "object");
+              (packageJson.workspaces !== undefined && Array.isArray(packageJson.workspaces)) ||
+              (packageJson.workspaces !== undefined && typeof packageJson.workspaces === "object");
           }
 
-          return (
-            isPnpmWorkspace ||
-            isYarnWorkspaces ||
-            isTurboRoot ||
-            hasWorkspacesField
-          );
+          return isPnpmWorkspace || isYarnWorkspaces || isTurboRoot || hasWorkspacesField;
         });
 
       // Check current directory and traverse up
@@ -115,22 +104,20 @@ const make = Effect.gen(function* effect() {
         return yield* Effect.fail(
           new PackageJsonNotFoundError({
             message: "Package JSON not found in this directory.",
-          })
+          }),
         );
       }
 
       const packageJson = yield* fs.readFileString(packageJsonPath);
-      return yield* Schema.decodeUnknownEffect(PackageJsonSchema)(
-        JSON.parse(packageJson)
-      ).pipe(
+      return yield* Schema.decodeUnknownEffect(PackageJsonSchema)(JSON.parse(packageJson)).pipe(
         Effect.catchTag("SchemaError", (e) =>
           Effect.fail(
             new InvalidPackageJsonError({
               cause: e,
               message: "Invalid package JSON",
-            })
-          )
-        )
+            }),
+          ),
+        ),
       );
     }).pipe(
       Effect.catchTag("PlatformError", (e) =>
@@ -138,9 +125,9 @@ const make = Effect.gen(function* effect() {
           new FailedToLoadPackageJsonError({
             cause: e,
             message: "Failed to load package JSON",
-          })
-        )
-      )
+          }),
+        ),
+      ),
     );
 
   // ===================================
@@ -185,7 +172,7 @@ const make = Effect.gen(function* effect() {
       return yield* Effect.fail(
         new NoPackageManagerFoundError({
           message: "No package manager found in this directory.",
-        })
+        }),
       );
     }).pipe(
       Effect.catchTag("PlatformError", (e) =>
@@ -193,9 +180,9 @@ const make = Effect.gen(function* effect() {
           new FailedToDetectPackageManagerError({
             cause: e,
             message: "Failed to detect package manager",
-          })
-        )
-      )
+          }),
+        ),
+      ),
     );
 
   // ===================================
@@ -239,11 +226,11 @@ const make = Effect.gen(function* effect() {
           Effect.gen(function* existingPaths() {
             const exists = yield* fs.exists(path);
             return { exists, path };
-          })
+          }),
         ),
         {
           concurrency: "unbounded",
-        }
+        },
       );
 
       const existingPath = existingPaths.find((path) => path.exists)?.path;
@@ -251,7 +238,7 @@ const make = Effect.gen(function* effect() {
         return yield* Effect.fail(
           new VoidhashConfigNotFoundError({
             message: "Voidhash config not found",
-          })
+          }),
         );
       }
 
@@ -267,25 +254,24 @@ const make = Effect.gen(function* effect() {
           Effect.fail(
             new FailedToLoadVoidhashConfigError({
               cause: e,
-              message:
-                "There has been an error while trying to load the voidhash config.",
-            })
+              message: "There has been an error while trying to load the voidhash config.",
+            }),
           ),
         PlatformError: (e) =>
           Effect.fail(
             new FailedToLoadVoidhashConfigError({
               cause: e,
               message: "Failed to load voidhash config",
-            })
+            }),
           ),
         SchemaError: () =>
           Effect.fail(
             new InvalidVoidhashConfigError({
               message:
                 "Could not parse voidhash config. Please check your voidhash.config.(ts|js|cjs|mjs) file is valid.",
-            })
+            }),
           ),
-      })
+      }),
     );
 
   const deleteVoidhashConfig = () =>
@@ -308,7 +294,7 @@ const make = Effect.gen(function* effect() {
 type SourceCodeShape = Effect.Success<typeof make>;
 
 export class SourceCode extends Context.Service<SourceCode, SourceCodeShape>()(
-  "voidhash-cli/SourceCode"
+  "voidhash-cli/SourceCode",
 ) {
-  static Default = Layer.effect(SourceCode, make)
+  static Default = Layer.effect(SourceCode, make);
 }
diff --git a/apps/cli/src/services/auth/get-session.ts b/apps/cli/src/services/auth/get-session.ts
index eee1eb593..eeed3882e 100644
--- a/apps/cli/src/services/auth/get-session.ts
+++ b/apps/cli/src/services/auth/get-session.ts
@@ -6,7 +6,7 @@ import { OrganizationServiceError } from "../organization/errors";
 const hasNestedTag = (
   error: unknown,
   outerTag: string,
-  innerTag: string
+  innerTag: string,
 ): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
   typeof error === "object" &&
   error !== null &&
@@ -31,9 +31,8 @@ export const getSession = Effect.gen(function* getSession() {
           if (hasNestedTag(error, "AuthSession500", "NotAuthenticatedError")) {
             return Effect.fail(
               new OrganizationServiceError({
-                message:
-                  "Failed to fetch the session because you are not authenticated.",
-              })
+                message: "Failed to fetch the session because you are not authenticated.",
+              }),
             );
           }
 
@@ -41,9 +40,9 @@ export const getSession = Effect.gen(function* getSession() {
             new OrganizationServiceError({
               message:
                 "Failed to fetch the session because of an unknown error. Please try again. If the problem persists, please contact us at support@voidhash.com",
-            })
+            }),
           );
-        })
-      )
+        }),
+      ),
   );
 });
diff --git a/apps/cli/src/services/auth/index.ts b/apps/cli/src/services/auth/index.ts
index ab87d706d..a22186a7c 100644
--- a/apps/cli/src/services/auth/index.ts
+++ b/apps/cli/src/services/auth/index.ts
@@ -7,7 +7,7 @@ const make = Effect.gen(function* scoped() {
 type AuthServiceShape = Effect.Success<typeof make>;
 
 export class AuthService extends Context.Service<AuthService, AuthServiceShape>()(
-  "voidhash-cli/services/AuthService"
+  "voidhash-cli/services/AuthService",
 ) {
-  static Default = Layer.effect(AuthService, make)
+  static Default = Layer.effect(AuthService, make);
 }
diff --git a/apps/cli/src/services/auth/utils/better-auth.ts b/apps/cli/src/services/auth/utils/better-auth.ts
index 5139f544a..751354378 100644
--- a/apps/cli/src/services/auth/utils/better-auth.ts
+++ b/apps/cli/src/services/auth/utils/better-auth.ts
@@ -4,9 +4,7 @@ import { Data, Effect, Layer, Context } from "effect";
 
 import { CliConfig } from "../../../domain/services/cli-config";
 
-export class BetterAuthClientError extends Data.TaggedError(
-  "BetterAuthClientError"
-)<{
+export class BetterAuthClientError extends Data.TaggedError("BetterAuthClientError")<{
   readonly cause?: unknown;
   readonly message: string;
 }> {}
@@ -23,8 +21,8 @@ const make = Effect.gen(function* effect() {
   return {
     use: <D, E>(
       fn: (
-        client: typeof authClient
-      ) => Promise<{ error: E; data?: null } | { error?: null; data: D }>
+        client: typeof authClient,
+      ) => Promise<{ error: E; data?: null } | { error?: null; data: D }>,
     ) =>
       Effect.tryPromise({
         catch: (error) =>
@@ -46,7 +44,7 @@ const make = Effect.gen(function* effect() {
 type BetterAuthClientShape = Effect.Success<typeof make>;
 
 export class BetterAuthClient extends Context.Service<BetterAuthClient, BetterAuthClientShape>()(
-  "app/BetterAuthClient"
+  "app/BetterAuthClient",
 ) {
-  static Default = Layer.effect(BetterAuthClient, make)
+  static Default = Layer.effect(BetterAuthClient, make);
 }
diff --git a/apps/cli/src/services/cli-config/index.ts b/apps/cli/src/services/cli-config/index.ts
index bf8c36c19..0dfddff68 100644
--- a/apps/cli/src/services/cli-config/index.ts
+++ b/apps/cli/src/services/cli-config/index.ts
@@ -7,7 +7,7 @@ const make = Effect.gen(function* scoped() {
 type CliConfigServiceShape = Effect.Success<typeof make>;
 
 export class CliConfigService extends Context.Service<CliConfigService, CliConfigServiceShape>()(
-  "voidhash-cli/services/CliConfigService"
+  "voidhash-cli/services/CliConfigService",
 ) {
-  static Default = Layer.effect(CliConfigService, make)
+  static Default = Layer.effect(CliConfigService, make);
 }
diff --git a/apps/cli/src/services/organization/create-organization.ts b/apps/cli/src/services/organization/create-organization.ts
index da06c9e33..60df91445 100644
--- a/apps/cli/src/services/organization/create-organization.ts
+++ b/apps/cli/src/services/organization/create-organization.ts
@@ -6,7 +6,7 @@ import { OrganizationServiceError } from "./errors";
 const hasNestedTag = (
   error: unknown,
   outerTag: string,
-  innerTag: string
+  innerTag: string,
 ): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
   typeof error === "object" &&
   error !== null &&
@@ -31,18 +31,11 @@ export const createOrganization = Effect.gen(function* createOrganization() {
     (effect) =>
       effect.pipe(
         Effect.catch((error) => {
-          if (
-            hasNestedTag(
-              error,
-              "OrganizationsCreateOrganization500",
-              "NotAuthenticatedError"
-            )
-          ) {
+          if (hasNestedTag(error, "OrganizationsCreateOrganization500", "NotAuthenticatedError")) {
             return Effect.fail(
               new OrganizationServiceError({
-                message:
-                  "Failed to create an organization because you are not authenticated.",
-              })
+                message: "Failed to create an organization because you are not authenticated.",
+              }),
             );
           }
 
@@ -50,9 +43,9 @@ export const createOrganization = Effect.gen(function* createOrganization() {
             new OrganizationServiceError({
               message:
                 "Failed to create an organization because of an unknown error. Please try again. If the problem persists, please contact us at support@voidhash.com",
-            })
+            }),
           );
-        })
-      )
+        }),
+      ),
   );
 });
diff --git a/apps/cli/src/services/organization/errors.ts b/apps/cli/src/services/organization/errors.ts
index ad49c43c8..cdb643117 100644
--- a/apps/cli/src/services/organization/errors.ts
+++ b/apps/cli/src/services/organization/errors.ts
@@ -4,5 +4,5 @@ export class OrganizationServiceError extends Schema.TaggedErrorClass<Organizati
   "OrganizationServiceError",
   {
     message: Schema.String,
-  }
+  },
 ) {}
diff --git a/apps/cli/src/services/organization/index.ts b/apps/cli/src/services/organization/index.ts
index d016b41ee..99511c2e5 100644
--- a/apps/cli/src/services/organization/index.ts
+++ b/apps/cli/src/services/organization/index.ts
@@ -6,8 +6,9 @@ const make = Effect.gen(function* scoped() {
 
 type OrganizationServiceShape = Effect.Success<typeof make>;
 
-export class OrganizationService extends Context.Service<OrganizationService, OrganizationServiceShape>()(
-  "voidhash-cli/services/OrganizationService"
-) {
-  static Default = Layer.effect(OrganizationService, make)
+export class OrganizationService extends Context.Service<
+  OrganizationService,
+  OrganizationServiceShape
+>()("voidhash-cli/services/OrganizationService") {
+  static Default = Layer.effect(OrganizationService, make);
 }
diff --git a/apps/cli/src/services/organization/list-organizations.ts b/apps/cli/src/services/organization/list-organizations.ts
index 8e46c6dcc..680811df7 100644
--- a/apps/cli/src/services/organization/list-organizations.ts
+++ b/apps/cli/src/services/organization/list-organizations.ts
@@ -6,7 +6,7 @@ import { OrganizationServiceError } from "./errors";
 const hasNestedTag = (
   error: unknown,
   outerTag: string,
-  innerTag: string
+  innerTag: string,
 ): error is { readonly _tag: string; readonly data: { readonly _tag: string } } =>
   typeof error === "object" &&
   error !== null &&
@@ -31,18 +31,11 @@ export const listOrganizations = Effect.gen(function* listOrganizations() {
     (effect) =>
       effect.pipe(
         Effect.catch((error) => {
-          if (
-            hasNestedTag(
-              error,
-              "OrganizationsCreateOrganization500",
-              "NotAuthenticatedError"
-            )
-          ) {
+          if (hasNestedTag(error, "OrganizationsCreateOrganization500", "NotAuthenticatedError")) {
             return Effect.fail(
               new OrganizationServiceError({
-                message:
-                  "Failed to create an organization because you are not authenticated.",
-              })
+                message: "Failed to create an organization because you are not authenticated.",
+              }),
             );
           }
 
@@ -50,9 +43,9 @@ export const listOrganizations = Effect.gen(function* listOrganizations() {
             new OrganizationServiceError({
               message:
                 "Failed to create an organization because of an unknown error. Please try again. If the problem persists, please contact us at support@voidhash.com",
-            })
+            }),
           );
-        })
-      )
+        }),
+      ),
   );
 });
diff --git a/apps/cli/src/services/project/index.ts b/apps/cli/src/services/project/index.ts
index 43e8e395b..94be9ccdc 100644
--- a/apps/cli/src/services/project/index.ts
+++ b/apps/cli/src/services/project/index.ts
@@ -7,7 +7,7 @@ const make = Effect.gen(function* scoped() {
 type ProjectServiceShape = Effect.Success<typeof make>;
 
 export class ProjectService extends Context.Service<ProjectService, ProjectServiceShape>()(
-  "voidhash-cli/services/ProjectService"
+  "voidhash-cli/services/ProjectService",
 ) {
-  static Default = Layer.effect(ProjectService, make)
+  static Default = Layer.effect(ProjectService, make);
 }
diff --git a/apps/cli/src/services/repository/index.ts b/apps/cli/src/services/repository/index.ts
index 7407f4c13..da583e606 100644
--- a/apps/cli/src/services/repository/index.ts
+++ b/apps/cli/src/services/repository/index.ts
@@ -7,7 +7,7 @@ const make = Effect.gen(function* scoped() {
 type RepositoryServiceShape = Effect.Success<typeof make>;
 
 export class RepositoryService extends Context.Service<RepositoryService, RepositoryServiceShape>()(
-  "voidhash-cli/services/RepositoryService"
+  "voidhash-cli/services/RepositoryService",
 ) {
-  static Default = Layer.effect(RepositoryService, make)
+  static Default = Layer.effect(RepositoryService, make);
 }
diff --git a/apps/cli/src/utils/api-client.ts b/apps/cli/src/utils/api-client.ts
index 1cfc08941..8c30ae8f6 100644
--- a/apps/cli/src/utils/api-client.ts
+++ b/apps/cli/src/utils/api-client.ts
@@ -1,7 +1,4 @@
-import {
-  make as makeCoreClient,
-  type VoidhashCoreClient,
-} from "@voidhash/generated-clients";
+import { make as makeCoreClient, type VoidhashCoreClient } from "@voidhash/generated-clients";
 import { Effect, Layer, Context } from "effect";
 import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
@@ -17,23 +14,19 @@ const make = Effect.gen(function* effect() {
         client.pipe(
           HttpClient.mapRequestEffect((request) =>
             Effect.gen(function* transformClient() {
-              const config = yield* cliConfig.readConfig().pipe(
-                Effect.catch(() =>
-                  Effect.die("Failed to read config")
-                )
-              );
+              const config = yield* cliConfig
+                .readConfig()
+                .pipe(Effect.catch(() => Effect.die("Failed to read config")));
 
-              yield* Effect.logDebug(
-                `API Request: ${request.method} ${request.url}`
-              );
+              yield* Effect.logDebug(`API Request: ${request.method} ${request.url}`);
 
               return HttpClientRequest.setHeaders(
                 HttpClientRequest.prependUrl(request, config.api_url),
-                config.api_key ? { "x-api-key": config.api_key } : {}
+                config.api_key ? { "x-api-key": config.api_key } : {},
               );
-            }).pipe(Effect.withSpan("ApiClient.transformRequest"))
-          )
-        )
+            }).pipe(Effect.withSpan("ApiClient.transformRequest")),
+          ),
+        ),
       ),
   });
 }).pipe(Effect.withSpan("ApiClient.make"));
@@ -41,9 +34,9 @@ const make = Effect.gen(function* effect() {
 type ApiClientShape = Effect.Success<typeof make>;
 
 export class ApiClient extends Context.Service<ApiClient, ApiClientShape>()(
-  "voidhash-cli/ApiClient"
+  "voidhash-cli/ApiClient",
 ) {
   static Default = Layer.effect(ApiClient, make).pipe(
-    Layer.provide(Layer.mergeAll(FetchHttpClient.layer, CliConfig.Default))
-  )
+    Layer.provide(Layer.mergeAll(FetchHttpClient.layer, CliConfig.Default)),
+  );
 }
diff --git a/apps/cli/src/utils/error-formatter.ts b/apps/cli/src/utils/error-formatter.ts
index b476cba72..488ade62b 100644
--- a/apps/cli/src/utils/error-formatter.ts
+++ b/apps/cli/src/utils/error-formatter.ts
@@ -48,9 +48,7 @@ export const userError = (message: string): CliError.UserError =>
 /**
  * Check if an error is a CliError from @effect/cli
  */
-const isCliError = (
-  error: unknown
-): error is CliError.CliError =>
+const isCliError = (error: unknown): error is CliError.CliError =>
   typeof error === "object" && error !== null && CliErrorTypeId in error;
 
 /**
@@ -63,7 +61,7 @@ const isCliError = (
  * In debug mode, it also logs the full error cause chain before the user-friendly message.
  */
 export const withValidationErrorHandler = <A, E, R>(
-  effect: Effect.Effect<A, E, R>
+  effect: Effect.Effect<A, E, R>,
 ): Effect.Effect<A | void, Exclude<E, CliError.CliError>, R> =>
   effect.pipe(
     Effect.catchCause((cause) => {
@@ -76,18 +74,16 @@ export const withValidationErrorHandler = <A, E, R>(
           // In debug mode, show the full cause chain
           if (isDebugMode()) {
             return Console.error("\n--- Debug Trace ---").pipe(
-              Effect.andThen(
-                Console.error(Cause.pretty(cause))
-              ),
+              Effect.andThen(Console.error(Cause.pretty(cause))),
               Effect.andThen(Console.error("--- End Debug Trace ---\n")),
               Effect.andThen(Console.error(failure.message)),
-              Effect.andThen(Effect.sync(() => process.exit(1)))
+              Effect.andThen(Effect.sync(() => process.exit(1))),
             );
           }
 
           // Normal mode: just show the user-friendly message
           return Console.error(failure.message).pipe(
-            Effect.andThen(Effect.sync(() => process.exit(1)))
+            Effect.andThen(Effect.sync(() => process.exit(1))),
           );
         }
       }
@@ -95,25 +91,19 @@ export const withValidationErrorHandler = <A, E, R>(
       // For non-CliError failures, show full cause in debug mode
       if (isDebugMode() && cause.reasons.length > 0) {
         return Console.error("\n--- Debug Trace ---").pipe(
-          Effect.andThen(
-            Console.error(Cause.pretty(cause))
-          ),
+          Effect.andThen(Console.error(Cause.pretty(cause))),
           Effect.andThen(Console.error("--- End Debug Trace ---\n")),
-          Effect.andThen(Effect.sync(() => process.exit(1)))
+          Effect.andThen(Effect.sync(() => process.exit(1))),
         );
       }
 
       // Re-fail with non-CliError
       const firstFailure = failures[0];
       if (firstFailure !== undefined) {
-        return Effect.fail(
-          firstFailure as Exclude<E, CliError.CliError>
-        );
+        return Effect.fail(firstFailure as Exclude<E, CliError.CliError>);
       }
 
       // Handle defects
-      return Effect.failCause(
-        cause as Cause.Cause<Exclude<E, CliError.CliError>>
-      );
-    })
+      return Effect.failCause(cause as Cause.Cause<Exclude<E, CliError.CliError>>);
+    }),
   );
diff --git a/apps/cli/src/utils/fs.ts b/apps/cli/src/utils/fs.ts
index 19ba47b27..1bcad642d 100644
--- a/apps/cli/src/utils/fs.ts
+++ b/apps/cli/src/utils/fs.ts
@@ -12,10 +12,7 @@ export class FileExistsError extends Data.TaggedError("FileExistsError")<{
  * @param pathToAssert - The path to assert the file can be created at.
  * @returns An Effect that succeeds if the file can be created, or fails if the file already exists and the user does not want to overwrite it.
  */
-export const assertFileCanBeCreated = (
-  filename: string,
-  pathToAssert: string
-) =>
+export const assertFileCanBeCreated = (filename: string, pathToAssert: string) =>
   Effect.gen(function* assertFileCanBeCreated() {
     const fileSystem = yield* FileSystem.FileSystem;
 
@@ -25,12 +22,10 @@ export const assertFileCanBeCreated = (
       const overwrite = yield* Prompt.run(
         Prompt.confirm({
           message: `File ${filename} already exists. Do you want to overwrite it?`,
-        })
+        }),
       );
       if (!overwrite) {
-        return yield* Effect.fail(
-          new FileExistsError({ message: "File already exists" })
-        );
+        return yield* Effect.fail(new FileExistsError({ message: "File already exists" }));
       }
 
       return yield* Effect.succeed(true);
diff --git a/apps/cli/src/utils/js-loading/js-file-loading.ts b/apps/cli/src/utils/js-loading/js-file-loading.ts
index 92ef1d028..0f6c2d6c5 100644
--- a/apps/cli/src/utils/js-loading/js-file-loading.ts
+++ b/apps/cli/src/utils/js-loading/js-file-loading.ts
@@ -2,9 +2,7 @@
 
 import { Data, Effect } from "effect";
 
-export class FailedToLoadJsFileError extends Data.TaggedError(
-  "FailedToLoadJsFileError"
-)<{
+export class FailedToLoadJsFileError extends Data.TaggedError("FailedToLoadJsFileError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
@@ -18,7 +16,7 @@ const assertES5 = ({ unregister }: { unregister: () => void }) =>
       if ("errors" in e && Array.isArray(e.errors) && e.errors.length > 0) {
         // biome-ignore lint/suspicious/noExplicitAny: yolo
         const es5Error = (e.errors as any[]).some((it) =>
-          it.text?.includes(`("es5") is not supported yet`)
+          it.text?.includes(`("es5") is not supported yet`),
         );
         if (es5Error) {
           return new FailedToLoadJsFileError({
@@ -61,8 +59,8 @@ export const safeRegister = () =>
         Effect.succeed({
           // biome-ignore lint/suspicious/noEmptyBlockStatements: it is on purpose an empty function. It is here instead of try-catch due to tsx.
           unregister(): void {},
-        })
-      )
+        }),
+      ),
     );
 
     yield* assertES5(res);
diff --git a/apps/cli/src/utils/organizations/create-organization.ts b/apps/cli/src/utils/organizations/create-organization.ts
index b33f8b30e..c9969bf56 100644
--- a/apps/cli/src/utils/organizations/create-organization.ts
+++ b/apps/cli/src/utils/organizations/create-organization.ts
@@ -19,26 +19,22 @@ export const createOrganization = () =>
   Effect.gen(function* createOrganization() {
     const client = yield* ApiClient;
 
-    const attemptToCreateOrganization = Effect.gen(
-      function* attemptToCreateOrganization() {
-        const name = yield* Prompt.run(
-          Prompt.text({
-            message: "Enter a name for the organization",
-            validate: (value) => validateOrganizationName(value),
-          })
-        );
-
-        const organization = yield* client.organizationsCreateOrganization({
-          name,
-        });
-
-        yield* Console.log(
-          `Successfully created organization ${organization.name}`
-        );
-
-        return organization;
-      }
-    );
+    const attemptToCreateOrganization = Effect.gen(function* attemptToCreateOrganization() {
+      const name = yield* Prompt.run(
+        Prompt.text({
+          message: "Enter a name for the organization",
+          validate: (value) => validateOrganizationName(value),
+        }),
+      );
+
+      const organization = yield* client.organizationsCreateOrganization({
+        name,
+      });
+
+      yield* Console.log(`Successfully created organization ${organization.name}`);
+
+      return organization;
+    });
 
     return yield* attemptToCreateOrganization;
   });
diff --git a/apps/cli/src/utils/organizations/select-organization.ts b/apps/cli/src/utils/organizations/select-organization.ts
index ffe4c4be5..41f57aa11 100644
--- a/apps/cli/src/utils/organizations/select-organization.ts
+++ b/apps/cli/src/utils/organizations/select-organization.ts
@@ -4,7 +4,7 @@ import { Effect } from "effect";
 import { createOrganization } from "./create-organization";
 
 export const selectOrganization = (
-  organizations: readonly { id: string; slug: string; name: string }[]
+  organizations: readonly { id: string; slug: string; name: string }[],
 ) =>
   Effect.gen(function* selectOrganization() {
     if (organizations.length === 0) {
@@ -23,7 +23,7 @@ export const selectOrganization = (
           },
         ],
         message: "Select an organization",
-      })
+      }),
     );
     if (organizationSlug === "create-new-organization") {
       return yield* createOrganization();
@@ -31,7 +31,7 @@ export const selectOrganization = (
     const organization = organizations.find((t) => t.slug === organizationSlug);
     if (!organization) {
       return yield* Effect.die(
-        "Organization not found even though it was selected and should exist."
+        "Organization not found even though it was selected and should exist.",
       );
     }
     return organization;
diff --git a/apps/cli/src/utils/projects/create-project.ts b/apps/cli/src/utils/projects/create-project.ts
index eeaa3274a..344479bc2 100644
--- a/apps/cli/src/utils/projects/create-project.ts
+++ b/apps/cli/src/utils/projects/create-project.ts
@@ -27,33 +27,27 @@ export const createProject = (input: { organizationId: string }) =>
     // If the config file is not found or the api key is not set, we consider the user to be signed out
     const apiKey = config.api_key;
     if (!apiKey) {
-      yield* Effect.logInfo(
-        "Api key is not set, considering the user to be signed out"
-      );
-      return yield* Effect.fail(
-        new NoSignedInUserError({ message: "No signed in user" })
-      );
+      yield* Effect.logInfo("Api key is not set, considering the user to be signed out");
+      return yield* Effect.fail(new NoSignedInUserError({ message: "No signed in user" }));
     }
 
-    const attemptToCreateProject = Effect.gen(
-      function* attemptToCreateProject() {
-        const name = yield* Prompt.run(
-          Prompt.text({
-            message: "Enter a name for the project",
-            validate: (value) => validateProjectName(value),
-          })
-        );
-
-        const project = yield* client.projectsCreateProject({
-          name,
-          organizationId: input.organizationId,
-        });
-
-        yield* Console.log(`Successfully created project ${project.name}`);
-
-        return project;
-      }
-    );
+    const attemptToCreateProject = Effect.gen(function* attemptToCreateProject() {
+      const name = yield* Prompt.run(
+        Prompt.text({
+          message: "Enter a name for the project",
+          validate: (value) => validateProjectName(value),
+        }),
+      );
+
+      const project = yield* client.projectsCreateProject({
+        name,
+        organizationId: input.organizationId,
+      });
+
+      yield* Console.log(`Successfully created project ${project.name}`);
+
+      return project;
+    });
 
     return yield* attemptToCreateProject;
   });
diff --git a/apps/cli/src/utils/projects/select-project.ts b/apps/cli/src/utils/projects/select-project.ts
index 3c6150b01..01bfcb40e 100644
--- a/apps/cli/src/utils/projects/select-project.ts
+++ b/apps/cli/src/utils/projects/select-project.ts
@@ -5,7 +5,7 @@ import { createProject } from "./create-project";
 
 export const selectProject = (
   organizationId: string,
-  projects: readonly { id: string; slug: string; name: string }[]
+  projects: readonly { id: string; slug: string; name: string }[],
 ) =>
   Effect.gen(function* selectProject() {
     if (projects.length === 0) {
@@ -21,7 +21,7 @@ export const selectProject = (
           { title: "(+) Create new project", value: "create-new-project" },
         ],
         message: "Select a project",
-      })
+      }),
     );
     if (projectSlug === "create-new-project") {
       return yield* createProject({ organizationId });
@@ -29,9 +29,7 @@ export const selectProject = (
 
     const project = projects.find((p) => p.slug === projectSlug);
     if (!project) {
-      return yield* Effect.die(
-        "Project not found even though it was selected and should exist."
-      );
+      return yield* Effect.die("Project not found even though it was selected and should exist.");
     }
     return project;
   });
diff --git a/apps/cli/src/utils/source-code-details.ts b/apps/cli/src/utils/source-code-details.ts
index d11e8d098..f22af9b58 100644
--- a/apps/cli/src/utils/source-code-details.ts
+++ b/apps/cli/src/utils/source-code-details.ts
@@ -14,7 +14,9 @@ export interface SourceCodeDetailsType {
   packageJson: typeof PackageJsonSchema.Type;
 }
 
-export class SourceCodeDetails extends Context.Service<SourceCodeDetails, SourceCodeDetailsType>()("app/SourceCodeDetails") {
+export class SourceCodeDetails extends Context.Service<SourceCodeDetails, SourceCodeDetailsType>()(
+  "app/SourceCodeDetails",
+) {
   static readonly provide =
     (details: SourceCodeDetailsType) =>
     <A, E, R>(effect: Effect.Effect<A, E, R>) =>
@@ -37,12 +39,10 @@ export const retrieveSourceCodeDetails = () =>
       ],
       {
         concurrency: "unbounded",
-      }
+      },
     );
 
-    const packageManager = yield* sourceCode.detectPackageManager(
-      monorepoRootPath ?? "./"
-    );
+    const packageManager = yield* sourceCode.detectPackageManager(monorepoRootPath ?? "./");
     const isExpoProject = checkIsExpoProject(packageJson);
 
     return {
diff --git a/apps/cli/src/utils/source-code.ts b/apps/cli/src/utils/source-code.ts
index 1184e24b8..5e37e7c4d 100644
--- a/apps/cli/src/utils/source-code.ts
+++ b/apps/cli/src/utils/source-code.ts
@@ -15,6 +15,5 @@ export const relativePathPrefixFromDepth = (depth: number) =>
  * @param packageJson - The package.json contents.
  * @returns True if the project is an Expo project, false otherwise.
  */
-export const checkIsExpoProject = (
-  packageJson: typeof PackageJsonSchema.Type
-) => packageJson.dependencies?.expo !== undefined;
+export const checkIsExpoProject = (packageJson: typeof PackageJsonSchema.Type) =>
+  packageJson.dependencies?.expo !== undefined;
diff --git a/apps/cli/sst-env.d.ts b/apps/cli/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/apps/cli/sst-env.d.ts
+++ b/apps/cli/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/apps/cli/tests/domain/schema/normalized-schema.test.ts b/apps/cli/tests/domain/schema/normalized-schema.test.ts
index 445f74a1f..f7589ded5 100644
--- a/apps/cli/tests/domain/schema/normalized-schema.test.ts
+++ b/apps/cli/tests/domain/schema/normalized-schema.test.ts
@@ -3,84 +3,84 @@ import { describe, expect, it } from "vitest";
 import { createEmptyNormalizedSchema } from "../../../src/domain/schema/normalized-schema";
 
 describe("createEmptyNormalizedSchema", () => {
-	it("returns object with empty locations Map", () => {
-		const schema = createEmptyNormalizedSchema();
-
-		expect(schema.locations).toBeInstanceOf(Map);
-		expect(schema.locations.size).toBe(0);
-	});
-
-	it("returns object with empty perks Map", () => {
-		const schema = createEmptyNormalizedSchema();
-
-		expect(schema.perks).toBeInstanceOf(Map);
-		expect(schema.perks.size).toBe(0);
-	});
-
-	it("returns object with empty products Map", () => {
-		const schema = createEmptyNormalizedSchema();
-
-		expect(schema.products).toBeInstanceOf(Map);
-		expect(schema.products.size).toBe(0);
-	});
-
-	it("returns object with empty enabledProviders Set", () => {
-		const schema = createEmptyNormalizedSchema();
-
-		expect(schema.enabledProviders).toBeInstanceOf(Set);
-		expect(schema.enabledProviders.size).toBe(0);
-	});
-
-	it("maps are mutable", () => {
-		const schema = createEmptyNormalizedSchema();
-
-		schema.locations.set("test-location", {
-			description: "Shown after onboarding",
-			slug: "test-location",
-			name: "Test Location",
-		});
-		schema.perks.set("test-perk", { slug: "test-perk", name: "Test Perk" });
-		schema.products.set("test-product", {
-			slug: "test-product",
-			name: "Test Product",
-			type: "subscription",
-			perks: [],
-			providers: [],
-		});
-
-		expect(schema.locations.size).toBe(1);
-		expect(schema.perks.size).toBe(1);
-		expect(schema.products.size).toBe(1);
-	});
-
-	it("set is mutable", () => {
-		const schema = createEmptyNormalizedSchema();
-
-		schema.enabledProviders.add("appleAppStore");
-		schema.enabledProviders.add("googlePlay");
-
-		expect(schema.enabledProviders.size).toBe(2);
-		expect(schema.enabledProviders.has("appleAppStore")).toBe(true);
-		expect(schema.enabledProviders.has("googlePlay")).toBe(true);
-	});
-
-	it("each call returns a new instance", () => {
-		const schema1 = createEmptyNormalizedSchema();
-		const schema2 = createEmptyNormalizedSchema();
-
-		// Modify schema1
-		schema1.perks.set("perk", { slug: "perk", name: "Perk" });
-		schema1.enabledProviders.add("appleAppStore");
-
-		// schema2 should be unaffected
-		expect(schema2.perks.size).toBe(0);
-		expect(schema2.enabledProviders.size).toBe(0);
-
-		// References should be different
-		expect(schema1).not.toBe(schema2);
-		expect(schema1.locations).not.toBe(schema2.locations);
-		expect(schema1.perks).not.toBe(schema2.perks);
-		expect(schema1.products).not.toBe(schema2.products);
-		expect(schema1.enabledProviders).not.toBe(schema2.enabledProviders);
-	});
+  it("returns object with empty locations Map", () => {
+    const schema = createEmptyNormalizedSchema();
+
+    expect(schema.locations).toBeInstanceOf(Map);
+    expect(schema.locations.size).toBe(0);
+  });
+
+  it("returns object with empty perks Map", () => {
+    const schema = createEmptyNormalizedSchema();
+
+    expect(schema.perks).toBeInstanceOf(Map);
+    expect(schema.perks.size).toBe(0);
+  });
+
+  it("returns object with empty products Map", () => {
+    const schema = createEmptyNormalizedSchema();
+
+    expect(schema.products).toBeInstanceOf(Map);
+    expect(schema.products.size).toBe(0);
+  });
+
+  it("returns object with empty enabledProviders Set", () => {
+    const schema = createEmptyNormalizedSchema();
+
+    expect(schema.enabledProviders).toBeInstanceOf(Set);
+    expect(schema.enabledProviders.size).toBe(0);
+  });
+
+  it("maps are mutable", () => {
+    const schema = createEmptyNormalizedSchema();
+
+    schema.locations.set("test-location", {
+      description: "Shown after onboarding",
+      slug: "test-location",
+      name: "Test Location",
+    });
+    schema.perks.set("test-perk", { slug: "test-perk", name: "Test Perk" });
+    schema.products.set("test-product", {
+      slug: "test-product",
+      name: "Test Product",
+      type: "subscription",
+      perks: [],
+      providers: [],
+    });
+
+    expect(schema.locations.size).toBe(1);
+    expect(schema.perks.size).toBe(1);
+    expect(schema.products.size).toBe(1);
+  });
+
+  it("set is mutable", () => {
+    const schema = createEmptyNormalizedSchema();
+
+    schema.enabledProviders.add("appleAppStore");
+    schema.enabledProviders.add("googlePlay");
+
+    expect(schema.enabledProviders.size).toBe(2);
+    expect(schema.enabledProviders.has("appleAppStore")).toBe(true);
+    expect(schema.enabledProviders.has("googlePlay")).toBe(true);
+  });
+
+  it("each call returns a new instance", () => {
+    const schema1 = createEmptyNormalizedSchema();
+    const schema2 = createEmptyNormalizedSchema();
+
+    // Modify schema1
+    schema1.perks.set("perk", { slug: "perk", name: "Perk" });
+    schema1.enabledProviders.add("appleAppStore");
+
+    // schema2 should be unaffected
+    expect(schema2.perks.size).toBe(0);
+    expect(schema2.enabledProviders.size).toBe(0);
+
+    // References should be different
+    expect(schema1).not.toBe(schema2);
+    expect(schema1.locations).not.toBe(schema2.locations);
+    expect(schema1.perks).not.toBe(schema2.perks);
+    expect(schema1.products).not.toBe(schema2.products);
+    expect(schema1.enabledProviders).not.toBe(schema2.enabledProviders);
+  });
 });
diff --git a/apps/cli/tests/domain/schema/paywall-deploy.test.ts b/apps/cli/tests/domain/schema/paywall-deploy.test.ts
index aef7ee3f7..1e40085cd 100644
--- a/apps/cli/tests/domain/schema/paywall-deploy.test.ts
+++ b/apps/cli/tests/domain/schema/paywall-deploy.test.ts
@@ -24,11 +24,7 @@ const artifact = (path: string, char: string, contentType: string) => ({
 /** A fully-populated, contract-§1-shaped manifest fixture. */
 const validManifest = () => ({
   assets: [
-    artifact(
-      ".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png",
-      "e",
-      "image/png",
-    ),
+    artifact(".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png", "e", "image/png"),
   ],
   cliVersion: "0.0.1-alpha.1",
   components: [
diff --git a/apps/cli/tests/domain/services/paywall-build-warnings.test.ts b/apps/cli/tests/domain/services/paywall-build-warnings.test.ts
index 7c872b885..267a84a67 100644
--- a/apps/cli/tests/domain/services/paywall-build-warnings.test.ts
+++ b/apps/cli/tests/domain/services/paywall-build-warnings.test.ts
@@ -50,9 +50,7 @@ describe("collectRenderErrorPlaceholderReasons", () => {
 
   it("returns nothing for clean trees and non-tree values", () => {
     expect(
-      collectRenderErrorPlaceholderReasons(
-        tree({ children: [], style: {}, type: "view" }),
-      ),
+      collectRenderErrorPlaceholderReasons(tree({ children: [], style: {}, type: "view" })),
     ).toEqual([]);
     expect(collectRenderErrorPlaceholderReasons(undefined)).toEqual([]);
     expect(collectRenderErrorPlaceholderReasons("nonsense")).toEqual([]);
@@ -60,13 +58,9 @@ describe("collectRenderErrorPlaceholderReasons", () => {
   });
 
   it("ignores placeholder-shaped nodes without a string reason", () => {
-    expect(
-      collectRenderErrorPlaceholderReasons(tree({ type: "placeholder" })),
-    ).toEqual([]);
-    expect(
-      collectRenderErrorPlaceholderReasons(
-        tree({ reason: 42, type: "placeholder" }),
-      ),
-    ).toEqual([]);
+    expect(collectRenderErrorPlaceholderReasons(tree({ type: "placeholder" }))).toEqual([]);
+    expect(collectRenderErrorPlaceholderReasons(tree({ reason: 42, type: "placeholder" }))).toEqual(
+      [],
+    );
   });
 });
diff --git a/apps/cli/tests/domain/services/paywall-closed-imports.test.ts b/apps/cli/tests/domain/services/paywall-closed-imports.test.ts
index a7173d997..0af19d135 100644
--- a/apps/cli/tests/domain/services/paywall-closed-imports.test.ts
+++ b/apps/cli/tests/domain/services/paywall-closed-imports.test.ts
@@ -51,14 +51,8 @@ const buildErrors = async (
 beforeAll(async () => {
   projectRoot = await fsp.mkdtemp(join(tmpdir(), "voidhash-closed-imports-"));
   voidhashDir = join(projectRoot, ".voidhash");
-  await writeSource(
-    ".voidhash/components/helper.ts",
-    "export const helper = 1;\n",
-  );
-  await fsp.writeFile(
-    join(projectRoot, "app-code.ts"),
-    "export const y = 1;\n",
-  );
+  await writeSource(".voidhash/components/helper.ts", "export const helper = 1;\n");
+  await fsp.writeFile(join(projectRoot, "app-code.ts"), "export const y = 1;\n");
 });
 
 afterAll(async () => {
@@ -135,8 +129,6 @@ describe("closedImportsPlugin", () => {
     const entry = join(projectRoot, "vendor-entry.ts");
     await fsp.writeFile(entry, 'import "react-dom";\nexport {};\n');
 
-    expect(
-      await buildErrors(entry, { external: [...EXTERNALS, "react-dom"] }),
-    ).toEqual([]);
+    expect(await buildErrors(entry, { external: [...EXTERNALS, "react-dom"] })).toEqual([]);
   });
 });
diff --git a/apps/cli/tests/domain/services/paywall-content-hash.test.ts b/apps/cli/tests/domain/services/paywall-content-hash.test.ts
index 057161425..7ceb8bf08 100644
--- a/apps/cli/tests/domain/services/paywall-content-hash.test.ts
+++ b/apps/cli/tests/domain/services/paywall-content-hash.test.ts
@@ -8,8 +8,7 @@ import {
   sha256Hex,
 } from "../../../src/domain/services/paywall-build";
 
-const digest = (input: string): string =>
-  createHash("sha256").update(input).digest("hex");
+const digest = (input: string): string => createHash("sha256").update(input).digest("hex");
 
 const h = sha256Hex("html");
 const j = sha256Hex("js");
diff --git a/apps/cli/tests/domain/services/paywall-deploy-upload.test.ts b/apps/cli/tests/domain/services/paywall-deploy-upload.test.ts
index ebe8d11fd..cc297bce8 100644
--- a/apps/cli/tests/domain/services/paywall-deploy-upload.test.ts
+++ b/apps/cli/tests/domain/services/paywall-deploy-upload.test.ts
@@ -21,8 +21,7 @@ import {
 let projectRoot: string;
 let manifest: DeployManifest;
 
-const sha256Hex = (data: string): string =>
-  createHash("sha256").update(data).digest("hex");
+const sha256Hex = (data: string): string => createHash("sha256").update(data).digest("hex");
 
 const FILES = {
   config: { contents: "export default {};\n", path: "voidhash.config.ts" },
@@ -142,9 +141,7 @@ const cliConfigStub: typeof CliConfig.Service = {
   writeToConfig: () => Effect.void,
 };
 
-const runUpload = (
-  client: HttpClient.HttpClient,
-): Promise<UploadPaywallDeployResult> =>
+const runUpload = (client: HttpClient.HttpClient): Promise<UploadPaywallDeployResult> =>
   Effect.runPromise(
     uploadPaywallDeploy({ manifest, projectRoot }).pipe(
       Effect.provideService(HttpClient.HttpClient, client),
@@ -152,9 +149,7 @@ const runUpload = (
     ),
   );
 
-const runUploadError = (
-  client: HttpClient.HttpClient,
-): Promise<PaywallDeployUploadError> =>
+const runUploadError = (client: HttpClient.HttpClient): Promise<PaywallDeployUploadError> =>
   Effect.runPromise(
     uploadPaywallDeploy({ manifest, projectRoot }).pipe(
       Effect.flip,
@@ -206,9 +201,7 @@ describe("uploadPaywallDeploy finalize-409 retry", () => {
       `/api/v1/paywall-deploys/pw_dep_test/blobs/${hashOf(FILES.js)}`,
       `/api/v1/paywall-deploys/pw_dep_test/blobs/${hashOf(FILES.html)}`,
     ]);
-    expect(
-      requests.filter((r) => r.path.endsWith("/finalize")),
-    ).toHaveLength(2);
+    expect(requests.filter((r) => r.path.endsWith("/finalize"))).toHaveLength(2);
   });
 
   it("retries at most once and fails readably when finalize stays 409", async () => {
@@ -227,9 +220,7 @@ describe("uploadPaywallDeploy finalize-409 retry", () => {
     expect(error._tag).toBe("PaywallDeployUploadError");
     expect(error.message).toContain("Finalizing the deploy failed");
     expect(error.message).toContain(hashOf(FILES.html));
-    expect(
-      requests.filter((r) => r.path.endsWith("/finalize")),
-    ).toHaveLength(2);
+    expect(requests.filter((r) => r.path.endsWith("/finalize"))).toHaveLength(2);
   });
 
   it("fails without retrying when the 409 carries no usable missing list", async () => {
@@ -243,9 +234,7 @@ describe("uploadPaywallDeploy finalize-409 retry", () => {
     );
 
     expect(error._tag).toBe("PaywallDeployUploadError");
-    expect(
-      requests.filter((r) => r.path.endsWith("/finalize")),
-    ).toHaveLength(1);
+    expect(requests.filter((r) => r.path.endsWith("/finalize"))).toHaveLength(1);
     expect(requests.filter((r) => r.method === "PUT")).toHaveLength(0);
   });
 
@@ -254,17 +243,13 @@ describe("uploadPaywallDeploy finalize-409 retry", () => {
     const error = await runUploadError(
       makeStubClient({
         createMissing: [],
-        finalizeResponses: [
-          { body: { missing: ["f".repeat(64)] }, status: 409 },
-        ],
+        finalizeResponses: [{ body: { missing: ["f".repeat(64)] }, status: 409 }],
         requests,
       }),
     );
 
     expect(error._tag).toBe("PaywallDeployUploadError");
     expect(error.message).toContain("f".repeat(64));
-    expect(
-      requests.filter((r) => r.path.endsWith("/finalize")),
-    ).toHaveLength(1);
+    expect(requests.filter((r) => r.path.endsWith("/finalize"))).toHaveLength(1);
   });
 });
diff --git a/apps/cli/tests/domain/services/paywall-typecheck.test.ts b/apps/cli/tests/domain/services/paywall-typecheck.test.ts
index b10caaac0..99d61964e 100644
--- a/apps/cli/tests/domain/services/paywall-typecheck.test.ts
+++ b/apps/cli/tests/domain/services/paywall-typecheck.test.ts
@@ -32,17 +32,11 @@ describe("typecheckPaywallSources", () => {
   it("passes a source importing a .png via the injected asset declarations", async () => {
     const entry = await writeSource(
       ".voidhash/paywalls/with-asset.ts",
-      [
-        'import hero from "./hero.png";',
-        "export const heroUrl: string = hero;",
-        "",
-      ].join("\n"),
+      ['import hero from "./hero.png";', "export const heroUrl: string = hero;", ""].join("\n"),
     );
 
     await expect(
-      Effect.runPromise(
-        typecheckPaywallSources({ files: [entry], projectRoot }),
-      ),
+      Effect.runPromise(typecheckPaywallSources({ files: [entry], projectRoot })),
     ).resolves.toBeUndefined();
   });
 
@@ -59,26 +53,18 @@ describe("typecheckPaywallSources", () => {
     );
 
     await expect(
-      Effect.runPromise(
-        typecheckPaywallSources({ files: [entry], projectRoot }),
-      ),
+      Effect.runPromise(typecheckPaywallSources({ files: [entry], projectRoot })),
     ).resolves.toBeUndefined();
   });
 
   it("still fails a genuinely type-broken source", async () => {
     const entry = await writeSource(
       ".voidhash/paywalls/broken.ts",
-      [
-        'import hero from "./hero.png";',
-        "export const broken: number = hero;",
-        "",
-      ].join("\n"),
+      ['import hero from "./hero.png";', "export const broken: number = hero;", ""].join("\n"),
     );
 
     const error = await Effect.runPromise(
-      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(
-        Effect.flip,
-      ),
+      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(Effect.flip),
     );
     expect(error).toBeInstanceOf(PaywallTypecheckError);
     expect(error.message).toContain("broken.ts");
@@ -87,15 +73,11 @@ describe("typecheckPaywallSources", () => {
   it("still fails an import of an undeclared module kind", async () => {
     const entry = await writeSource(
       ".voidhash/paywalls/bad-import.ts",
-      ['import data from "./data.bin";', "export const d = data;", ""].join(
-        "\n",
-      ),
+      ['import data from "./data.bin";', "export const d = data;", ""].join("\n"),
     );
 
     const error = await Effect.runPromise(
-      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(
-        Effect.flip,
-      ),
+      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(Effect.flip),
     );
     expect(error).toBeInstanceOf(PaywallTypecheckError);
   });
diff --git a/apps/cli/tests/helpers/schema-factories.ts b/apps/cli/tests/helpers/schema-factories.ts
index d1715ff51..00ff040a3 100644
--- a/apps/cli/tests/helpers/schema-factories.ts
+++ b/apps/cli/tests/helpers/schema-factories.ts
@@ -1,96 +1,92 @@
 import {
-	createEmptyNormalizedSchema,
-	type NormalizedPaywallLocation,
-	type NormalizedPerk,
-	type NormalizedProduct,
-	type NormalizedSchema,
-	type ProviderId,
+  createEmptyNormalizedSchema,
+  type NormalizedPaywallLocation,
+  type NormalizedPerk,
+  type NormalizedProduct,
+  type NormalizedSchema,
+  type ProviderId,
 } from "../../src/domain/schema/normalized-schema";
 
 /**
  * Create a test perk with optional overrides
  */
-export function createTestPerk(
-	overrides: Partial<NormalizedPerk> = {},
-): NormalizedPerk {
-	return {
-		name: "Test Perk",
-		slug: "test-perk",
-		...overrides,
-	};
+export function createTestPerk(overrides: Partial<NormalizedPerk> = {}): NormalizedPerk {
+  return {
+    name: "Test Perk",
+    slug: "test-perk",
+    ...overrides,
+  };
 }
 
 /**
  * Create a test product with optional overrides
  */
-export function createTestProduct(
-	overrides: Partial<NormalizedProduct> = {},
-): NormalizedProduct {
-	return {
-		name: "Test Product",
-		perks: [],
-		providers: [],
-		slug: "test-product",
-		type: "subscription",
-		...overrides,
-	};
+export function createTestProduct(overrides: Partial<NormalizedProduct> = {}): NormalizedProduct {
+  return {
+    name: "Test Product",
+    perks: [],
+    providers: [],
+    slug: "test-product",
+    type: "subscription",
+    ...overrides,
+  };
 }
 
 /**
  * Create a test paywall location with optional overrides
  */
 export function createTestPaywallLocation(
-	overrides: Partial<NormalizedPaywallLocation> = {},
+  overrides: Partial<NormalizedPaywallLocation> = {},
 ): NormalizedPaywallLocation {
-	return {
-		description: null,
-		name: "Test Location",
-		slug: "test-location",
-		...overrides,
-	};
+  return {
+    description: null,
+    name: "Test Location",
+    slug: "test-location",
+    ...overrides,
+  };
 }
 
 /**
  * Create a test schema with optional perks, products, and providers
  */
 export function createTestSchema(
-	options: {
-		perks?: NormalizedPerk[];
-		products?: NormalizedProduct[];
-		locations?: NormalizedPaywallLocation[];
-		enabledProviders?: ProviderId[];
-	} = {},
+  options: {
+    perks?: NormalizedPerk[];
+    products?: NormalizedProduct[];
+    locations?: NormalizedPaywallLocation[];
+    enabledProviders?: ProviderId[];
+  } = {},
 ): NormalizedSchema {
-	const schema = createEmptyNormalizedSchema();
+  const schema = createEmptyNormalizedSchema();
 
-	for (const location of options.locations ?? []) {
-		schema.locations.set(location.slug, location);
-	}
+  for (const location of options.locations ?? []) {
+    schema.locations.set(location.slug, location);
+  }
 
-	for (const perk of options.perks ?? []) {
-		schema.perks.set(perk.slug, perk);
-	}
+  for (const perk of options.perks ?? []) {
+    schema.perks.set(perk.slug, perk);
+  }
 
-	for (const product of options.products ?? []) {
-		schema.products.set(product.slug, product);
-	}
+  for (const product of options.products ?? []) {
+    schema.products.set(product.slug, product);
+  }
 
-	for (const provider of options.enabledProviders ?? []) {
-		schema.enabledProviders.add(provider);
-	}
+  for (const provider of options.enabledProviders ?? []) {
+    schema.enabledProviders.add(provider);
+  }
 
-	return schema;
+  return schema;
 }
 
 /**
  * Create a provider configuration for a product
  */
 export function createProviderConfig(
-	providerId: ProviderId,
-	configuration: Record<string, unknown> = {},
+  providerId: ProviderId,
+  configuration: Record<string, unknown> = {},
 ): { providerId: ProviderId; configuration: Record<string, unknown> } {
-	return {
-		configuration,
-		providerId,
-	};
+  return {
+    configuration,
+    providerId,
+  };
 }
diff --git a/apps/cli/vitest.unit.mts b/apps/cli/vitest.unit.mts
index 995b04da6..aae86c8c7 100644
--- a/apps/cli/vitest.unit.mts
+++ b/apps/cli/vitest.unit.mts
@@ -2,10 +2,10 @@ import tsconfigPaths from "vite-tsconfig-paths";
 import { defineConfig } from "vitest/config";
 
 export default defineConfig({
-	plugins: [tsconfigPaths()],
-	test: {
-		exclude: ["./node_modules/**"],
-		include: ["./tests/**/*.test.ts"],
-		reporters: ["verbose"],
-	},
+  plugins: [tsconfigPaths()],
+  test: {
+    exclude: ["./node_modules/**"],
+    include: ["./tests/**/*.test.ts"],
+    reporters: ["verbose"],
+  },
 });
diff --git a/apps/studio/src/voidhash/paywalls.ts b/apps/studio/src/voidhash/paywalls.ts
index 4537a327b..bbc819b53 100644
--- a/apps/studio/src/voidhash/paywalls.ts
+++ b/apps/studio/src/voidhash/paywalls.ts
@@ -71,9 +71,7 @@ const findComponentDefinition = (
   return null;
 };
 
-const safeManifest = (
-  definition: AnyComponentDefinition,
-): ComponentManifest | null => {
+const safeManifest = (definition: AnyComponentDefinition): ComponentManifest | null => {
   try {
     return extractComponentManifest(definition);
   } catch {
diff --git a/examples/react-native-example/app/menu/customer.tsx b/examples/react-native-example/app/menu/customer.tsx
index 33f283ca6..b34c28fba 100644
--- a/examples/react-native-example/app/menu/customer.tsx
+++ b/examples/react-native-example/app/menu/customer.tsx
@@ -7,12 +7,12 @@ export default function HomeScreen() {
   const insets = useSafeAreaInsets();
   const { client } = voidhash.useVoidhash();
   const {
-    data: customer,
-    isLoading: isCustomerLoading,
-    error: customerError,
-  } = voidhash.useCurrentCustomer();
+    data: person,
+    isLoading: isPersonLoading,
+    error: personError,
+  } = voidhash.useCurrentPerson();
 
-  if (isCustomerLoading) {
+  if (isPersonLoading) {
     return null;
   }
 
@@ -28,9 +28,9 @@ export default function HomeScreen() {
   return (
     <View style={containerStyle}>
       <View>
-        <Text style={styles.title}>Customer</Text>
-        <Text style={styles.jsonText}>{JSON.stringify(customer, null, 2)}</Text>
-        <Text style={styles.jsonText}>{JSON.stringify(customerError, null, 2)}</Text>
+        <Text style={styles.title}>Person</Text>
+        <Text style={styles.jsonText}>{JSON.stringify(person, null, 2)}</Text>
+        <Text style={styles.jsonText}>{JSON.stringify(personError, null, 2)}</Text>
 
         {Platform.OS === "ios" && (
           <View style={styles.actions}>
diff --git a/examples/react-native-example/app/menu/paywall.tsx b/examples/react-native-example/app/menu/paywall.tsx
index b736990b4..f5df05c4c 100644
--- a/examples/react-native-example/app/menu/paywall.tsx
+++ b/examples/react-native-example/app/menu/paywall.tsx
@@ -31,8 +31,8 @@ export default function PaywallScreen() {
     PAYWALL_LOCATION_SLUG,
     paywallOptions
   );
-  const { data: customer, isLoading: isCustomerLoading } =
-    voidhash.useCurrentCustomer();
+  const { data: person, isLoading: isPersonLoading } =
+    voidhash.useCurrentPerson();
 
   const handleShowPaywall = async () => {
     setIsOpening(true);
@@ -62,10 +62,10 @@ export default function PaywallScreen() {
         {statusMessage && (
           <Text style={styles.statusMessage}>{statusMessage}</Text>
         )}
-        <Text style={styles.customerState}>
-          {isCustomerLoading
-            ? "Loading customer..."
-            : `Customer: ${JSON.stringify(customer)}`}
+        <Text style={styles.personState}>
+          {isPersonLoading
+            ? "Loading person..."
+            : `Person: ${JSON.stringify(person)}`}
         </Text>
 
         <Button
@@ -109,7 +109,7 @@ const styles = StyleSheet.create({
     marginTop: 16,
     padding: 12,
   },
-  customerState: {
+  personState: {
     color: "#a1a1aa",
     marginTop: 16,
   },
diff --git a/examples/react-native-example/utils/voidhash/client.ts b/examples/react-native-example/utils/voidhash/client.ts
index 8282f7afb..3fa4dc918 100644
--- a/examples/react-native-example/utils/voidhash/client.ts
+++ b/examples/react-native-example/utils/voidhash/client.ts
@@ -1,52 +1,43 @@
 import { createVoidhashClient } from "@voidhash/react-native";
 import Constants from "expo-constants";
 
-const LOCALHOST_NAMES = new Set([
-	"0.0.0.0",
-	"127.0.0.1",
-	"::1",
-	"[::1]",
-	"localhost",
-]);
+const LOCALHOST_NAMES = new Set(["0.0.0.0", "127.0.0.1", "::1", "[::1]", "localhost"]);
 
-const isLocalhost = (hostname: string) =>
-	LOCALHOST_NAMES.has(hostname.toLowerCase());
+const isLocalhost = (hostname: string) => LOCALHOST_NAMES.has(hostname.toLowerCase());
 
 const parseHostUriHostname = (hostUri: string | null | undefined) => {
-	if (!hostUri) return null;
-
-	try {
-		const url = hostUri.includes("://")
-			? new URL(hostUri)
-			: new URL(`http://${hostUri}`);
-		return url.hostname || null;
-	} catch {
-		return null;
-	}
+  if (!hostUri) return null;
+
+  try {
+    const url = hostUri.includes("://") ? new URL(hostUri) : new URL(`http://${hostUri}`);
+    return url.hostname || null;
+  } catch {
+    return null;
+  }
 };
 
 const resolveExampleApiUrl = (baseUrl: string) => {
-	let url: URL;
-	try {
-		url = new URL(baseUrl);
-	} catch {
-		return baseUrl;
-	}
-
-	if (!isLocalhost(url.hostname)) return baseUrl;
-
-	const hostHostname = parseHostUriHostname(
-		Constants.expoConfig?.hostUri ?? Constants.expoGoConfig?.debuggerHost,
-	);
-	if (!hostHostname || isLocalhost(hostHostname)) return baseUrl;
-
-	url.hostname = hostHostname;
-	return url.toString();
+  let url: URL;
+  try {
+    url = new URL(baseUrl);
+  } catch {
+    return baseUrl;
+  }
+
+  if (!isLocalhost(url.hostname)) return baseUrl;
+
+  const hostHostname = parseHostUriHostname(
+    Constants.expoConfig?.hostUri ?? Constants.expoGoConfig?.debuggerHost,
+  );
+  if (!hostHostname || isLocalhost(hostHostname)) return baseUrl;
+
+  url.hostname = hostHostname;
+  return url.toString();
 };
 
 const apiUrl = process.env.EXPO_PUBLIC_VOIDHASH_API_URL
-	? resolveExampleApiUrl(process.env.EXPO_PUBLIC_VOIDHASH_API_URL)
-	: undefined;
+  ? resolveExampleApiUrl(process.env.EXPO_PUBLIC_VOIDHASH_API_URL)
+  : undefined;
 
 /**
  * Voidhash client for the example app.
@@ -54,11 +45,7 @@ const apiUrl = process.env.EXPO_PUBLIC_VOIDHASH_API_URL
  * Schema lives on the server now — run `voidhash-cli types generate` to refresh
  * the local `voidhash.gen.d.ts` whenever the dashboard schema changes.
  */
-export const voidhash = createVoidhashClient(
-	process.env.EXPO_PUBLIC_VOIDHASH_PUBLISHABLE_KEY ??
-		"vh_pk_hrvyOZJoxtonGGPtTnkMehrCoEPsAbwD",
-	{
-		debug: true,
-		...(apiUrl ? { baseUrl: apiUrl } : {}),
-	},
-);
+export const voidhash = createVoidhashClient("vh_pk_QrGDcbcCbCcWHjOouLZipyEBoBrDKoAb", {
+  debug: true,
+  ...(apiUrl ? { baseUrl: apiUrl } : {}),
+});
diff --git a/examples/react-native-example/voidhash.config.ts b/examples/react-native-example/voidhash.config.ts
index e0f3fe0c5..208773e2f 100644
--- a/examples/react-native-example/voidhash.config.ts
+++ b/examples/react-native-example/voidhash.config.ts
@@ -1,6 +1,6 @@
-import { defineConfig } from "voidhash-cli";
+import { defineConfig } from 'voidhash-cli';
 
 export default defineConfig({
-	team: "voidhash-s-r-o",
-	project: "react-native-example",
+  team: 'voidhash-s-r-o',
+  project: 'react-native-example',
 });
diff --git a/examples/react-native-example/voidhash.gen.d.ts b/examples/react-native-example/voidhash.gen.d.ts
index 4cddd9f3f..620c151ff 100644
--- a/examples/react-native-example/voidhash.gen.d.ts
+++ b/examples/react-native-example/voidhash.gen.d.ts
@@ -1,13 +1,13 @@
 // voidhash.gen.d.ts — generated by voidhash-cli, do not edit
-// @voidhash:version sha256:e6f6dbac538ef9956b435013a314f220ac028d21762b4777096a0b1df7966a13
-// @voidhash:fetched-at 2026-05-11T14:56:24.982Z
+// @voidhash:version sha256:3f90ef2a787d32c6dfe6a60ffe6e9aed5dfc614bc6e26d0d433cc64b9a0acbc5
+// @voidhash:fetched-at 2026-06-30T08:36:31.608Z
 
 declare module "@voidhash/react-native" {
   interface VoidhashRegister {
     schema: {
       products: never;
       locations: never;
-      perks: "test" | "test-2";
+      perks: never;
     };
   }
 }
diff --git a/libraries/react-native/README.md b/libraries/react-native/README.md
index c4f3a65fb..d59e51e05 100644
--- a/libraries/react-native/README.md
+++ b/libraries/react-native/README.md
@@ -53,7 +53,7 @@ When `unstable_swallowErrors: true`, the SDK logs warnings and does not reject f
 
 The following remain strict and still reject on failures:
 
-- `getCurrentCustomer(...)`
+- `getCurrentPerson(...)`
 - `getFeatureFlags(...)`
 - `getPaywallForLocation(...)`
 - `getProducts()`
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index cedca626f..d40086864 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -1,13 +1,17 @@
 import { Effect } from "effect";
 import { AtomRegistry } from "effect/unstable/reactivity";
 
+import { AUTOMATIC_EVENTS } from "./core/analytics/constants";
 import { AnalyticsService } from "./core/analytics/service";
 import type { AnalyticsIngestEvent } from "./core/analytics/types";
 import type { SubscriptionProduct } from "./core/entities/product";
 import type { Transaction } from "./core/entities/transaction";
 import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
-import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
-import { CustomerInfoManager } from "./core/identity/customer-info-manager";
+import {
+  type PersonAttributes,
+  PersonAttributeManager,
+} from "./core/identity/person-attribute-manager";
+import { PersonInfoManager } from "./core/identity/person-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
 import { LifecycleService } from "./core/lifecycle/lifecycle-service";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
@@ -21,7 +25,7 @@ import {
   ProductService,
   type ProductsBySlug,
 } from "./core/products/product-service";
-import { currentCustomerAtom } from "./core/reactivity/client-state";
+import { currentPersonAtom } from "./core/reactivity/client-state";
 import type { LocationSlug } from "./core/schema/registry";
 import type { RuntimeSchema } from "./core/schema/runtime";
 import { SchemaManager } from "./core/schema/schema-manager";
@@ -30,6 +34,7 @@ import { UnsupportedPlatformError } from "./errors";
 
 export type { ProductsBySlug };
 export type { AnalyticsIngestEvent };
+export type { PersonAttributes };
 
 interface InitOptions {
   readonly distinctId?: string;
@@ -58,8 +63,7 @@ const makeUnitializedClient = () => ({
   init: (initOptions: InitOptions = {}) =>
     Effect.gen(function* init() {
       const identityManager = yield* IdentityManager;
-      const customerAttributeManager = yield* CustomerAttributeManager;
-      const customerInfoManager = yield* CustomerInfoManager;
+      const personInfoManager = yield* PersonInfoManager;
       const schemaManager = yield* SchemaManager;
       const atomRegistry = yield* AtomRegistry.AtomRegistry;
 
@@ -68,9 +72,8 @@ const makeUnitializedClient = () => ({
           distinctId: initOptions.distinctId,
         });
 
-        // `identityManager.identify()` internally syncs attributes for the
-        // current cached distinctId AND publishes the new customer to
-        // `currentCustomerAtom`, so we don't duplicate either here.
+        // `identityManager.identify()` publishes the new person to
+        // `currentPersonAtom`, so we don't duplicate that here.
         const [, runtimeSchema] = yield* Effect.all(
           [
             identityManager.identify(initOptions.distinctId, {}),
@@ -89,10 +92,9 @@ const makeUnitializedClient = () => ({
         distinctId,
       });
 
-      const [, prefetchedCustomer, runtimeSchema] = yield* Effect.all(
+      const [prefetchedPerson, runtimeSchema] = yield* Effect.all(
         [
-          customerAttributeManager.syncCustomerAttributes(distinctId),
-          customerInfoManager.getCustomer(distinctId, "fetch"),
+          personInfoManager.getPerson(distinctId, "fetch"),
           schemaManager.resolveSchema({
             distinctId,
             internalSchema: initOptions.internalSchema,
@@ -101,10 +103,10 @@ const makeUnitializedClient = () => ({
         { concurrency: "unbounded" },
       );
 
-      // Publish the prefetched customer so React subscribers see initial
+      // Publish the prefetched person so React subscribers see initial
       // state without having to wait for a hook-driven refetch.
       // `SchemaManager` publishes `schemaAtom` itself.
-      atomRegistry.set(currentCustomerAtom, prefetchedCustomer);
+      atomRegistry.set(currentPersonAtom, prefetchedPerson);
 
       return yield* makeInitializedClient({ schema: runtimeSchema });
     }),
@@ -174,21 +176,65 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           return runtimeConfig;
         }),
 
-      getCurrentCustomer: (forceFetch = false) =>
-        Effect.gen(function* getCurrentCustomer() {
+      getCurrentPerson: (forceFetch = false) =>
+        Effect.gen(function* getCurrentPerson() {
           const identityManager = yield* IdentityManager;
-          const customerInfoManager = yield* CustomerInfoManager;
+          const personInfoManager = yield* PersonInfoManager;
           const atomRegistry = yield* AtomRegistry.AtomRegistry;
           const distinctId = yield* identityManager.getDistinctId();
-          const customer = yield* customerInfoManager.getCustomer(
+          const person = yield* personInfoManager.getPerson(
             distinctId,
             forceFetch ? "fetch" : "fetch-while-stale",
           );
           // Publish to the reactive store so any subscribed React hook
           // re-renders with the latest result (whether cached or freshly
           // fetched).
-          atomRegistry.set(currentCustomerAtom, customer);
-          return customer;
+          atomRegistry.set(currentPersonAtom, person);
+          return person;
+        }),
+
+      /**
+       * Sets person attributes asynchronously (primary, fire-and-forget).
+       * Reserved `email`/`name` keys map to the dedicated server fields; any
+       * other key is forwarded as a custom trait. Rides the existing analytics
+       * queue as a `$set` capture — the queue's own batching/flushing delivers
+       * it. `$process_person_profile: true` is required so anonymous users
+       * still get a person created server-side. Returns void; does not flush.
+       */
+      setPersonAttributes: (attributes: PersonAttributes) =>
+        Effect.gen(function* setPersonAttributes() {
+          const { email, name, ...rest } = attributes;
+          const properties = {
+            $set: {
+              ...rest,
+              ...(email !== undefined ? { email } : {}),
+              ...(name !== undefined ? { name } : {}),
+            },
+            $process_person_profile: true,
+          };
+          yield* analyticsService.capture("$set", properties);
+        }),
+
+      /**
+       * Sets person attributes synchronously (opt-in). Performs the network
+       * sync, caches and publishes the returned person snapshot to
+       * `currentPersonAtom`, and returns it. Use when the caller needs the
+       * updated snapshot immediately; otherwise prefer `setPersonAttributes`.
+       */
+      setPersonAttributesSync: (attributes: PersonAttributes) =>
+        Effect.gen(function* setPersonAttributesSync() {
+          const identityManager = yield* IdentityManager;
+          const personAttributeManager = yield* PersonAttributeManager;
+          const personInfoManager = yield* PersonInfoManager;
+          const atomRegistry = yield* AtomRegistry.AtomRegistry;
+          const distinctId = yield* identityManager.getDistinctId();
+          const person = yield* personAttributeManager.syncPersonAttributes(
+            distinctId,
+            attributes,
+          );
+          yield* personInfoManager.cache(distinctId, person);
+          atomRegistry.set(currentPersonAtom, person);
+          return person;
         }),
 
       getDistinctId: () =>
@@ -215,6 +261,11 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
       ) =>
         Effect.gen(function* identify() {
           const identityManager = yield* IdentityManager;
+          // Drain queued events first so they attribute to the pre-switch
+          // distinct id. Flushed here in the facade (not in `IdentityManager`)
+          // because `AnalyticsService` depends on `IdentityManager` — a flush
+          // inside the manager would create a layer cycle.
+          yield* analyticsService.flush();
           return yield* identityManager.identify(distinctId, identifyOptions);
         }),
 
@@ -326,12 +377,24 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
       reset: () =>
         Effect.gen(function* reset() {
           const identityManager = yield* IdentityManager;
+          // Drain queued events first so they attribute to the pre-reset
+          // distinct id (after reset, `getDistinctId()` mints a fresh anon id).
+          // Flushed in the facade, not in `IdentityManager`, to avoid a layer
+          // cycle (`AnalyticsService` depends on `IdentityManager`).
+          yield* analyticsService.flush();
           return yield* identityManager.reset();
         }),
 
       signOut: () =>
         Effect.gen(function* signOut() {
           const identityManager = yield* IdentityManager;
+          // Capture the built-in sign-out event and drain the queue *before*
+          // resetting: `reset()` clears the identity cache, after which
+          // `getDistinctId()` mints a fresh anonymous id. Flushing first keeps
+          // `$sign_out` (and any pending events) attributed to the
+          // signing-out distinct id rather than the post-reset anonymous one.
+          yield* analyticsService.capture(AUTOMATIC_EVENTS.SIGN_OUT);
+          yield* analyticsService.flush();
           return yield* identityManager.reset();
         }),
 
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index c9bc76db2..89b2ff3fc 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -9,7 +9,7 @@ import { useRetrieveAppStoreProduct } from "./react/hooks/app-store/use-retrieve
 import { useRetrieveAppStoreProducts } from "./react/hooks/app-store/use-retrieve-app-store-products";
 import { useRetrieveGooglePlayProduct } from "./react/hooks/google-play/use-retrieve-google-play-product";
 import { useRetrieveGooglePlayProducts } from "./react/hooks/google-play/use-retrieve-google-play-products";
-import { currentCustomerHookFactory } from "./react/hooks/use-customer";
+import { currentPersonHookFactory } from "./react/hooks/use-person";
 import { featureFlagsHookFactory } from "./react/hooks/use-feature-flags";
 import { paywallByLocationHookFactory } from "./react/hooks/use-paywall-by-location";
 import { productsHookFactory } from "./react/hooks/use-products";
@@ -74,7 +74,7 @@ export function createVoidhashClient(
       useRetrieveProduct: useRetrieveGooglePlayProduct,
       useRetrieveProducts: useRetrieveGooglePlayProducts,
     },
-    useCurrentCustomer: currentCustomerHookFactory(client, context),
+    useCurrentPerson: currentPersonHookFactory(client, context),
     useFeatureFlags: featureFlagsHookFactory(client, context),
     usePaywallByLocation: paywallByLocationHookFactory(client, context),
     useProducts: productsHookFactory(client, context),
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index 5672a1856..c289bc172 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -8,8 +8,11 @@ import { AsyncStorageCacheAdapter } from "./core/caching/async-storage-cache";
 import { CacheManager } from "./core/caching/cache-manager";
 import type { SubscriptionProduct } from "./core/entities/product";
 import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
-import { CustomerAttributeManager } from "./core/identity/customer-attribute-manager";
-import { CustomerInfoManager } from "./core/identity/customer-info-manager";
+import {
+  type PersonAttributes,
+  PersonAttributeManager,
+} from "./core/identity/person-attribute-manager";
+import { PersonInfoManager } from "./core/identity/person-info-manager";
 import { IdentityManager } from "./core/identity/identity-manager";
 import { LifecycleService } from "./core/lifecycle/lifecycle-service";
 import { ReactNativeLifecycleAdapter } from "./core/lifecycle/react-native-lifecycle-adapter";
@@ -57,7 +60,7 @@ const CreateEffectRuntime = (
 ) =>
   ManagedRuntime.make(
     pipe(
-      CustomerAttributeManager.Default,
+      PersonAttributeManager.Default,
       Layer.provideMerge(ProductService.layer),
       Layer.provideMerge(FeatureFlagService.layer),
       Layer.provideMerge(PaywallService.layer),
@@ -65,7 +68,7 @@ const CreateEffectRuntime = (
       Layer.provideMerge(AnalyticsService.layer),
       Layer.provideMerge(LifecycleService.layer),
       Layer.provideMerge(ReactNativeLifecycleAdapter),
-      Layer.provideMerge(CustomerInfoManager.Default),
+      Layer.provideMerge(PersonInfoManager.Default),
       Layer.provideMerge(SchemaManager.layer),
       Layer.provideMerge(IdentityManager.Default),
       Layer.provideMerge(CacheManager.Default),
@@ -266,13 +269,46 @@ export class VoidhashClient {
   }
 
   /**
-   * Returns currently identified customer.
+   * Returns currently identified person.
+   */
+  async getCurrentPerson(forceFetch = false) {
+    this.ensureInitialized();
+    return this.runEffect(
+      this.initializedClient!.getCurrentPerson(forceFetch),
+      "FAILED_TO_GET_CURRENT_PERSON",
+    );
+  }
+
+  /**
+   * Sets person attributes asynchronously. Reserved `email`/`name` keys map to
+   * the dedicated server fields; any other key is forwarded as a custom trait.
+   * The update rides the analytics queue (fire-and-forget) — call `flush()` if
+   * you need it delivered promptly.
+   */
+  async setPersonAttributes(attributes: PersonAttributes) {
+    await this.runSideEffect("setPersonAttributes", async () => {
+      this.ensureInitialized();
+      await this.runEffect(
+        this.initializedClient!.setPersonAttributes(attributes),
+        "FAILED_TO_SET_PERSON_ATTRIBUTES",
+      );
+    });
+  }
+
+  /**
+   * Sets person attributes synchronously and returns the updated person
+   * snapshot. Performs a network round-trip, so this is a write — it is blocked
+   * in read-only mode, mirroring `purchase`.
    */
-  async getCurrentCustomer(forceFetch = false) {
+  async setPersonAttributesSync(attributes: PersonAttributes) {
     this.ensureInitialized();
+    if (this.readOnly) {
+      throw new ReadOnlyModePurchaseNotAllowedError();
+    }
+
     return this.runEffect(
-      this.initializedClient!.getCurrentCustomer(forceFetch),
-      "FAILED_TO_GET_CURRENT_CUSTOMER",
+      this.initializedClient!.setPersonAttributesSync(attributes),
+      "FAILED_TO_SET_PERSON_ATTRIBUTES_SYNC",
     );
   }
 
@@ -313,8 +349,19 @@ export class VoidhashClient {
     });
   }
 
+  /**
+   * Signs the current user out: captures the built-in `$sign_out` event,
+   * flushes it under the signing-out identity, then resets to a fresh
+   * anonymous distinct id.
+   */
   async signOut() {
-    return this.reset();
+    await this.runSideEffect("signOut", async () => {
+      this.ensureInitialized();
+      await this.runEffect(
+        this.initializedClient!.signOut(),
+        "FAILED_TO_SIGN_OUT",
+      );
+    });
   }
 
   /**
@@ -389,7 +436,7 @@ export class VoidhashClient {
 
   /**
    * Restores purchases by reconciling pending/past store transactions and
-   * refreshing customer state.
+   * refreshing person state.
    */
   async restorePurchases() {
     await this.runSideEffect("restorePurchases", async () => {
@@ -518,7 +565,7 @@ export class VoidhashClient {
   }
 
   // ===============================
-  // Customer helpers
+  // Person helpers
   // ===============================
 
   /**
diff --git a/libraries/react-native/src/core/analytics/constants.ts b/libraries/react-native/src/core/analytics/constants.ts
index e69de29bb..d2ced6de8 100644
--- a/libraries/react-native/src/core/analytics/constants.ts
+++ b/libraries/react-native/src/core/analytics/constants.ts
@@ -0,0 +1,21 @@
+/**
+ * Names of analytics events the SDK captures automatically on the user's
+ * behalf. The leading `$` marks them as built-in/reserved — mirroring the
+ * convention used for standardized properties (`$app_version`, `$platform`,
+ * …) — so they can be told apart from custom product events captured via
+ * `capture(...)`.
+ */
+export const AUTOMATIC_EVENTS = {
+  /** First launch the SDK has seen on this install (no cached release). */
+  APP_INSTALLED: "$app_installed",
+  /** Launch where the app build/version differs from the last seen one. */
+  APP_UPDATED: "$app_updated",
+  /** Every SDK startup, after install/update has been resolved. */
+  APP_OPENED: "$app_opened",
+  /** App moved to the background. */
+  APP_BACKGROUNDED: "$app_backgrounded",
+  /** App returned to the foreground from a non-active state. */
+  APP_BECAME_ACTIVE: "$app_became_active",
+  /** User signed out (identity reset triggered via `signOut`). */
+  SIGN_OUT: "$sign_out",
+} as const;
diff --git a/libraries/react-native/src/core/analytics/service.ts b/libraries/react-native/src/core/analytics/service.ts
index 50c2309d3..0dc342740 100644
--- a/libraries/react-native/src/core/analytics/service.ts
+++ b/libraries/react-native/src/core/analytics/service.ts
@@ -17,6 +17,7 @@ import { CacheManager } from "../caching/cache-manager";
 import { IdentityManager } from "../identity/identity-manager";
 import { SdkConfiguration } from "../sdk-configuration";
 import { getNonce } from "../utils/crypto";
+import { AUTOMATIC_EVENTS } from "./constants";
 import {
   AnalyticsIngestEvent,
   AnalyticsSendFailure,
@@ -96,7 +97,7 @@ const inlineRetrySchedule = Schedule.exponential(
 /**
  * Owns the analytics pipeline: an in-memory event queue with batching, a
  * declarative retry schedule, `Retry-After` honouring, automatic startup
- * events (`app_installed` / `app_updated` / `app_opened`), and a periodic
+ * events (`$app_installed` / `$app_updated` / `$app_opened`), and a periodic
  * flush daemon forked into the service scope. Disposing the runtime closes
  * the scope, which interrupts the daemon — no manual timer cleanup required.
  *
@@ -386,7 +387,7 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
           };
 
           // If reading the cached release fails, fall back to recording the
-          // session as a fresh `app_opened`. Captures still flow through the
+          // session as a fresh `$app_opened`. Captures still flow through the
           // same queue so the failure mode is "lose the install/update event,"
           // not "drop the session start."
           const cachedRelease = yield* cacheManager
@@ -396,14 +397,20 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
 
           const additions: QueuedAnalyticsEvent[] = [];
           if (!previousAppRelease) {
-            additions.push(createQueuedAnalyticsEvent("app_installed", {}));
+            additions.push(
+              createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_INSTALLED, {})
+            );
           } else if (
             previousAppRelease.appBuild !== currentAppRelease.appBuild ||
             previousAppRelease.appVersion !== currentAppRelease.appVersion
           ) {
-            additions.push(createQueuedAnalyticsEvent("app_updated", {}));
+            additions.push(
+              createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_UPDATED, {})
+            );
           }
-          additions.push(createQueuedAnalyticsEvent("app_opened", {}));
+          additions.push(
+            createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_OPENED, {})
+          );
 
           queueRef.ref.current = [...queueRef.ref.current, ...additions];
 
diff --git a/libraries/react-native/src/core/identity/customer-attribute-manager.ts b/libraries/react-native/src/core/identity/customer-attribute-manager.ts
deleted file mode 100644
index 3f40cca66..000000000
--- a/libraries/react-native/src/core/identity/customer-attribute-manager.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-import { Effect, Layer, Context } from "effect";
-
-import { CacheManager } from "../caching/cache-manager";
-import { ApiClient } from "../networking/api-client";
-import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
-
-interface CustomerAttributes {
-  email?: string;
-  name?: string;
-}
-
-const make = Effect.gen(function* effect() {
-  const cacheManager = yield* CacheManager;
-  const apiClient = yield* ApiClient;
-
-  const getCustomerAttributes = (distinctId: string) =>
-    cacheManager
-      .get<CustomerAttributes>(
-        generateCustomerAttributesCacheKey(distinctId)
-      )
-      .pipe(Effect.map((attributes) => attributes?.value ?? null));
-
-  const setCustomerAttributes = (
-    distinctId: string,
-    attributes: CustomerAttributes
-  ) =>
-    cacheManager.set(
-      generateCustomerAttributesCacheKey(distinctId),
-      attributes
-    );
-
-  const syncCustomerAttributes = (distinctId: string) =>
-    Effect.gen(function* syncCustomerAttributes() {
-      let attributes = yield* getCustomerAttributes(distinctId);
-      if (!attributes) {
-        attributes = {
-          email: undefined,
-          name: undefined,
-        };
-        yield* setCustomerAttributes(distinctId, attributes);
-      }
-      const commonHeaders = yield* getCommonSdkHeaders();
-      yield* apiClient.sdk.syncCustomerAttributes({
-        headers: {
-          ...commonHeaders,
-          "x-distinct-id": distinctId,
-        },
-        payload: {
-          email: attributes.email,
-          name: attributes.name,
-        },
-      });
-    });
-
-  const generateCustomerAttributesCacheKey = (distinctId: string) =>
-    `customer-attributes:${distinctId}`;
-
-  return {
-    getCustomerAttributes,
-    setCustomerAttributes,
-    syncCustomerAttributes,
-  } as const;
-});
-
-export class CustomerAttributeManager extends Context.Service<CustomerAttributeManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerAttributeManager") {
-  static Default = Layer.effect(CustomerAttributeManager, make).pipe(
-    Layer.provide(CacheManager.Default)
-  )
-}
diff --git a/libraries/react-native/src/core/identity/customer-info-manager.ts b/libraries/react-native/src/core/identity/customer-info-manager.ts
deleted file mode 100644
index 96705f982..000000000
--- a/libraries/react-native/src/core/identity/customer-info-manager.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
-import { Effect, Layer, Context } from "effect";
-
-import { CacheManager } from "../caching/cache-manager";
-import { ApiClient } from "../networking/api-client";
-import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
-
-const make = Effect.gen(function* effect() {
-  const cacheManager = yield* CacheManager;
-  const apiClient = yield* ApiClient;
-
-  const generateCustomerCacheKey = (distinctId: string) =>
-    `customer:${distinctId}`;
-
-  const getCustomerFromCache = (distinctId: string) =>
-    cacheManager.get<SdkCustomer>(generateCustomerCacheKey(distinctId));
-
-  const cache = (distinctId: string, customer: SdkCustomer) =>
-    cacheManager.set(generateCustomerCacheKey(distinctId), customer, {
-      ttl: 1000 * 60 * 60 * 24 * 2, // 2 days
-      staleTime: 1000 * 60 * 5, // 5 minutes
-    });
-
-  const resetCache = (distinctId: string) =>
-    cacheManager.delete(generateCustomerCacheKey(distinctId));
-
-  const getCustomerFromServerAndCache = (distinctId: string) =>
-    Effect.gen(function* getCustomerFromServerAndCache() {
-      const commonHeaders = yield* getCommonSdkHeaders();
-      const result = yield* apiClient.sdk.getCustomer({
-        headers: {
-          ...commonHeaders,
-          "x-distinct-id": distinctId,
-        },
-      });
-      yield* cache(distinctId, result);
-      return result;
-    });
-
-  const getCustomer = (
-    distinctId: string,
-    cachePolicy: "cache" | "fetch" | "fetch-while-stale"
-  ) =>
-    Effect.gen(function* getCustomer() {
-      if (cachePolicy === "cache") {
-        const customerFromCache = yield* getCustomerFromCache(distinctId);
-        return customerFromCache?.value ?? null;
-      }
-
-      if (cachePolicy === "fetch") {
-        return yield* getCustomerFromServerAndCache(distinctId);
-      }
-
-      // fetch-while-stale policy
-      const customerFromCache = yield* getCustomerFromCache(distinctId);
-      if (
-        customerFromCache &&
-        !customerFromCache.isStale &&
-        !customerFromCache.isExpired &&
-        customerFromCache.value
-      ) {
-        return customerFromCache.value;
-      }
-
-      return yield* getCustomerFromServerAndCache(distinctId);
-    });
-
-  return {
-    cache,
-    getCustomer,
-    getCustomerFromCache,
-    resetCache,
-  } as const;
-});
-
-export class CustomerInfoManager extends Context.Service<CustomerInfoManager, Effect.Success<typeof make>>()("rn-voidhash/CustomerInfoManager") {
-  static Default = Layer.effect(CustomerInfoManager, make).pipe(
-    Layer.provide(CacheManager.Default)
-  )
-}
diff --git a/libraries/react-native/src/core/identity/identity-manager.ts b/libraries/react-native/src/core/identity/identity-manager.ts
index 4fd44b94a..c96a2b8b9 100644
--- a/libraries/react-native/src/core/identity/identity-manager.ts
+++ b/libraries/react-native/src/core/identity/identity-manager.ts
@@ -5,19 +5,17 @@ import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../caching/cache-manager";
 import { ApiClient } from "../networking/api-client";
 import {
-  currentCustomerAtom,
+  currentPersonAtom,
   featureFlagsByKeyAtom,
 } from "../reactivity/client-state";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
-import { CustomerAttributeManager } from "./customer-attribute-manager";
-import { CustomerInfoManager } from "./customer-info-manager";
+import { PersonInfoManager } from "./person-info-manager";
 
 const CACHE_KEY = "distinctId";
 
 const make = Effect.gen(function* effect() {
   const cacheManager = yield* CacheManager;
-  const customerAttributeManager = yield* CustomerAttributeManager;
-  const customerInfoManager = yield* CustomerInfoManager;
+  const personInfoManager = yield* PersonInfoManager;
   const atomRegistry = yield* AtomRegistry.AtomRegistry;
   const apiClient = yield* ApiClient;
 
@@ -38,7 +36,7 @@ const make = Effect.gen(function* effect() {
     });
 
   /**
-   * Identifies the customer by switching the current distinct id.
+   * Identifies the person by switching the current distinct id.
    * @param options - The options.
    */
   const identify = (
@@ -50,9 +48,6 @@ const make = Effect.gen(function* effect() {
   ) =>
     Effect.gen(function* identify() {
       const currentDistinctId = yield* getDistinctId();
-      yield* customerAttributeManager.syncCustomerAttributes(
-        currentDistinctId
-      );
       const commonHeaders = yield* getCommonSdkHeaders();
       const identifyRequest = yield* apiClient.sdk.identify({
         headers: {
@@ -68,12 +63,12 @@ const make = Effect.gen(function* effect() {
 
       yield* Effect.all([
         setDistinctIdInCache(distinctId),
-        customerInfoManager.cache(distinctId, identifyRequest),
+        personInfoManager.cache(distinctId, identifyRequest),
       ]);
 
-      // Identity has changed: surface the new customer and clear stale
+      // Identity has changed: surface the new person and clear stale
       // feature flag state, since flag evaluations are identity-scoped.
-      atomRegistry.set(currentCustomerAtom, {
+      atomRegistry.set(currentPersonAtom, {
         ...identifyRequest,
         distinctId,
       });
@@ -82,12 +77,8 @@ const make = Effect.gen(function* effect() {
 
   const reset = () =>
     Effect.gen(function* reset() {
-      const currentDistinctId = yield* getDistinctId();
-      yield* customerAttributeManager.syncCustomerAttributes(
-        currentDistinctId
-      );
       yield* cacheManager.clear();
-      atomRegistry.set(currentCustomerAtom, null);
+      atomRegistry.set(currentPersonAtom, null);
       atomRegistry.set(featureFlagsByKeyAtom, {});
     });
 
@@ -114,8 +105,7 @@ export class IdentityManager extends Context.Service<IdentityManager, Effect.Suc
   static Default = Layer.effect(IdentityManager, make).pipe(
     Layer.provide(Layer.mergeAll(
       CacheManager.Default,
-      CustomerAttributeManager.Default,
-      CustomerInfoManager.Default,
+      PersonInfoManager.Default,
     ))
   )
 }
diff --git a/libraries/react-native/src/core/identity/person-attribute-manager.ts b/libraries/react-native/src/core/identity/person-attribute-manager.ts
new file mode 100644
index 000000000..e881ff54a
--- /dev/null
+++ b/libraries/react-native/src/core/identity/person-attribute-manager.ts
@@ -0,0 +1,85 @@
+import { Effect, Layer, Context } from "effect";
+
+import { CacheManager } from "../caching/cache-manager";
+import { ApiClient } from "../networking/api-client";
+import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
+
+/**
+ * Developer-facing person attributes. `email` and `name` are reserved keys
+ * mapped to the dedicated server fields; any other key is treated as a custom
+ * trait.
+ */
+export interface PersonAttributes {
+  email?: string;
+  name?: string;
+  [k: string]: string | number | boolean | null | undefined;
+}
+
+/**
+ * Splits the reserved `email`/`name` keys from the remaining custom traits so
+ * the reserved values can be sent on their dedicated server fields and the
+ * rest forwarded as a `traits` record.
+ */
+export const splitReservedAttributes = (attributes: PersonAttributes) => {
+  const { email, name, ...rest } = attributes;
+  return {
+    email,
+    name,
+    traits: rest as Record<string, unknown>,
+  };
+};
+
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const apiClient = yield* ApiClient;
+
+  const getPersonAttributes = (distinctId: string) =>
+    cacheManager
+      .get<PersonAttributes>(generatePersonAttributesCacheKey(distinctId))
+      .pipe(Effect.map((attributes) => attributes?.value ?? null));
+
+  const cacheAttributes = (distinctId: string, attributes: PersonAttributes) =>
+    cacheManager.set(generatePersonAttributesCacheKey(distinctId), attributes);
+
+  /**
+   * Performs the synchronous network sync of the given attributes for a
+   * distinct id and returns the updated person snapshot. The reserved
+   * `email`/`name` keys map to the dedicated server fields; everything else is
+   * forwarded as `traits`. `setOnce`/`clientEventId` are intentionally omitted
+   * — the server treats them as optional.
+   */
+  const syncPersonAttributes = (
+    distinctId: string,
+    attributes: PersonAttributes
+  ) =>
+    Effect.gen(function* syncPersonAttributes() {
+      const { email, name, traits } = splitReservedAttributes(attributes);
+      const commonHeaders = yield* getCommonSdkHeaders();
+      return yield* apiClient.sdk.syncPersonAttributes({
+        headers: {
+          ...commonHeaders,
+          "x-distinct-id": distinctId,
+        },
+        payload: {
+          email,
+          name,
+          traits,
+        },
+      });
+    });
+
+  const generatePersonAttributesCacheKey = (distinctId: string) =>
+    `person-attributes:${distinctId}`;
+
+  return {
+    cacheAttributes,
+    getPersonAttributes,
+    syncPersonAttributes,
+  } as const;
+});
+
+export class PersonAttributeManager extends Context.Service<PersonAttributeManager, Effect.Success<typeof make>>()("rn-voidhash/PersonAttributeManager") {
+  static Default = Layer.effect(PersonAttributeManager, make).pipe(
+    Layer.provide(CacheManager.Default)
+  )
+}
diff --git a/libraries/react-native/src/core/identity/person-info-manager.ts b/libraries/react-native/src/core/identity/person-info-manager.ts
new file mode 100644
index 000000000..bf624b90c
--- /dev/null
+++ b/libraries/react-native/src/core/identity/person-info-manager.ts
@@ -0,0 +1,95 @@
+import type { SdkPerson } from "@voidhash/generated-clients";
+import { Effect, Layer, Context } from "effect";
+
+import { CacheManager } from "../caching/cache-manager";
+import { ApiClient } from "../networking/api-client";
+import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
+
+const make = Effect.gen(function* effect() {
+  const cacheManager = yield* CacheManager;
+  const apiClient = yield* ApiClient;
+
+  const generatePersonCacheKey = (distinctId: string) =>
+    `person:${distinctId}`;
+
+  const getPersonFromCache = (distinctId: string) =>
+    cacheManager.get<SdkPerson>(generatePersonCacheKey(distinctId));
+
+  const cache = (distinctId: string, person: SdkPerson) =>
+    cacheManager.set(generatePersonCacheKey(distinctId), person, {
+      ttl: 1000 * 60 * 60 * 24 * 2, // 2 days
+      staleTime: 1000 * 60 * 5, // 5 minutes
+    });
+
+  const resetCache = (distinctId: string) =>
+    cacheManager.delete(generatePersonCacheKey(distinctId));
+
+  const getPersonFromServerAndCache = (distinctId: string) =>
+    Effect.gen(function* getPersonFromServerAndCache() {
+      const commonHeaders = yield* getCommonSdkHeaders();
+      // A brand-new (or freshly-reset) distinct id has no persisted person on
+      // the server until `syncPersonAttributes` creates it. On init those
+      // requests race, so `getPerson` legitimately 404s for a not-yet-created
+      // person. Treat that as "no snapshot yet" (null) — the same shape the
+      // cache-miss path already returns — instead of failing client init. Any
+      // other error still propagates so genuine faults aren't masked.
+      const result = yield* apiClient.sdk
+        .getPerson({
+          headers: {
+            ...commonHeaders,
+            "x-distinct-id": distinctId,
+          },
+        })
+        .pipe(
+          Effect.catchTag("ApiSdkPersonNotFoundError", () =>
+            Effect.succeed(null)
+          )
+        );
+      if (result === null) {
+        return null;
+      }
+      yield* cache(distinctId, result);
+      return result;
+    });
+
+  const getPerson = (
+    distinctId: string,
+    cachePolicy: "cache" | "fetch" | "fetch-while-stale"
+  ) =>
+    Effect.gen(function* getPerson() {
+      if (cachePolicy === "cache") {
+        const personFromCache = yield* getPersonFromCache(distinctId);
+        return personFromCache?.value ?? null;
+      }
+
+      if (cachePolicy === "fetch") {
+        return yield* getPersonFromServerAndCache(distinctId);
+      }
+
+      // fetch-while-stale policy
+      const personFromCache = yield* getPersonFromCache(distinctId);
+      if (
+        personFromCache &&
+        !personFromCache.isStale &&
+        !personFromCache.isExpired &&
+        personFromCache.value
+      ) {
+        return personFromCache.value;
+      }
+
+      return yield* getPersonFromServerAndCache(distinctId);
+    });
+
+  return {
+    cache,
+    getPerson,
+    getPersonFromCache,
+    resetCache,
+  } as const;
+});
+
+export class PersonInfoManager extends Context.Service<PersonInfoManager, Effect.Success<typeof make>>()("rn-voidhash/PersonInfoManager") {
+  static Default = Layer.effect(PersonInfoManager, make).pipe(
+    Layer.provide(CacheManager.Default)
+  )
+}
diff --git a/libraries/react-native/src/core/lifecycle/lifecycle-service.ts b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
index 9f46d0f5a..6d4c2f808 100644
--- a/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
+++ b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
@@ -1,12 +1,13 @@
 import { Effect, Layer, Context } from "effect";
 
+import { AUTOMATIC_EVENTS } from "../analytics/constants";
 import { LifecycleAdapter, type LifecycleSubscription } from "./lifecycle-adapter";
 
 /**
  * Wires raw platform lifecycle transitions to high-level analytics-style
  * events. Translates background/active transitions delivered by
- * `LifecycleAdapter` into `app_backgrounded` and `app_became_active` callbacks
- * which the caller is expected to forward to the analytics pipeline.
+ * `LifecycleAdapter` into `$app_backgrounded` and `$app_became_active`
+ * callbacks which the caller is expected to forward to the analytics pipeline.
  */
 export class LifecycleService extends Context.Service<LifecycleService>()(
   "rn-voidhash/LifecycleService",
@@ -19,7 +20,7 @@ export class LifecycleService extends Context.Service<LifecycleService>()(
       ): Effect.Effect<LifecycleSubscription | null> =>
         adapter.subscribe((nextState, previousState) => {
           if (nextState === "background" && previousState !== "background") {
-            captureEvent("app_backgrounded");
+            captureEvent(AUTOMATIC_EVENTS.APP_BACKGROUNDED);
             return;
           }
 
@@ -28,7 +29,7 @@ export class LifecycleService extends Context.Service<LifecycleService>()(
             previousState !== null &&
             previousState !== "active"
           ) {
-            captureEvent("app_became_active");
+            captureEvent(AUTOMATIC_EVENTS.APP_BECAME_ACTIVE);
           }
         });
 
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index c0082f4be..86216232e 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -101,7 +101,7 @@ const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
         }),
         normalizeFeatureFlagsResponse
       ),
-    getCustomer: (request: { headers: ReactNativeSdkHeaders }) =>
+    getPerson: (request: { headers: ReactNativeSdkHeaders }) =>
       client.sdkGetPerson(request.headers as SdkGetPersonParams),
     identify: (request: {
       headers: ReactNativeSdkHeaders;
@@ -119,7 +119,7 @@ const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
         params: request.headers as Parameters<typeof client.sdkResolvePaywall>[0]["params"],
         payload: request.payload,
       }),
-    syncCustomerAttributes: (request: {
+    syncPersonAttributes: (request: {
       headers: ReactNativeSdkHeaders;
       payload: SdkSyncPersonAttributesBody;
     }) =>
diff --git a/libraries/react-native/src/core/reactivity/client-state.ts b/libraries/react-native/src/core/reactivity/client-state.ts
index d48ed79d7..002681e74 100644
--- a/libraries/react-native/src/core/reactivity/client-state.ts
+++ b/libraries/react-native/src/core/reactivity/client-state.ts
@@ -1,4 +1,4 @@
-import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
+import type { SdkPerson } from "@voidhash/generated-clients";
 import { Atom } from "effect/unstable/reactivity";
 
 import type { FeatureFlagsResult } from "../feature-flags/feature-flag-service";
@@ -7,11 +7,11 @@ import type { RuntimeSchema } from "../schema/runtime";
 export type { FeatureFlagsResult };
 
 /**
- * Reactive store of the currently identified customer. Written by the
- * customer/identity facade paths and read by `useCurrentCustomer`.
+ * Reactive store of the currently identified person. Written by the
+ * person/identity facade paths and read by `useCurrentPerson`.
  */
-export const currentCustomerAtom: Atom.Writable<SdkCustomer | null> =
-  Atom.make<SdkCustomer | null>(null);
+export const currentPersonAtom: Atom.Writable<SdkPerson | null> =
+  Atom.make<SdkPerson | null>(null);
 
 /**
  * Reactive store of the runtime schema fetched at init time and refreshed
diff --git a/libraries/react-native/src/core/testing/client.ts b/libraries/react-native/src/core/testing/client.ts
index c75bc743a..240010e60 100644
--- a/libraries/react-native/src/core/testing/client.ts
+++ b/libraries/react-native/src/core/testing/client.ts
@@ -2,8 +2,8 @@
 // import { CacheManager } from '../caching/cache-manager';
 // import type { PlatformInfo } from '../constants';
 // import { EventBus } from '../event-bus';
-// import { CustomerAttributeManager } from '../identity/customer-attribute-manager';
-// import { CustomerInfoManager } from '../identity/customer-info-manager';
+// import { PersonAttributeManager } from '../identity/person-attribute-manager';
+// import { PersonInfoManager } from '../identity/person-info-manager';
 // import { IdentityManager } from '../identity/identity-manager';
 // import { Logger, LogLevel } from '../logging';
 // import { createApi } from '../networking/_/api';
@@ -22,8 +22,8 @@
 //   eventBus?: EventBus;
 //   platformProvider?: PlatformProvider;
 //   cacheManager?: CacheManager;
-//   customerInfoManager?: CustomerInfoManager;
-//   customerAttributeManager?: CustomerAttributeManager;
+//   personInfoManager?: PersonInfoManager;
+//   personAttributeManager?: PersonAttributeManager;
 //   identityManager?: IdentityManager;
 //   paymentAdapter?: PaymentAdapter;
 // };
@@ -35,8 +35,8 @@
 //   cacheManager: cacheManagerOverride,
 //   eventBus: eventBusOverride,
 //   platformProvider: platformProviderOverride,
-//   customerInfoManager: customerInfoManagerOverride,
-//   customerAttributeManager: customerAttributeManagerOverride,
+//   personInfoManager: personInfoManagerOverride,
+//   personAttributeManager: personAttributeManagerOverride,
 //   identityManager: identityManagerOverride,
 //   paymentAdapter: paymentAdapterOverride
 // }: CreateVoidhashTestClientOptions) {
@@ -54,19 +54,19 @@
 //     logger
 //   });
 //   const api = createApi(httpClient);
-//   const customerInfoManager =
-//     customerInfoManagerOverride ??
-//     new CustomerInfoManager(cacheManager, logger, api, eventBus);
-//   const customerAttributeManager =
-//     customerAttributeManagerOverride ??
-//     new CustomerAttributeManager(cacheManager, logger, api);
+//   const personInfoManager =
+//     personInfoManagerOverride ??
+//     new PersonInfoManager(cacheManager, logger, api, eventBus);
+//   const personAttributeManager =
+//     personAttributeManagerOverride ??
+//     new PersonAttributeManager(cacheManager, logger, api);
 //   const identityManager =
 //     identityManagerOverride ??
 //     new IdentityManager(
 //       cacheManager,
 //       logger,
-//       customerInfoManager,
-//       customerAttributeManager,
+//       personInfoManager,
+//       personAttributeManager,
 //       api,
 //       eventBus
 //     );
@@ -76,9 +76,9 @@
 //     scheme,
 //     logger,
 //     cacheManager,
-//     customerInfoManager,
+//     personInfoManager,
 //     identityManager,
-//     customerAttributeManager,
+//     personAttributeManager,
 //     schema,
 //     paymentAdapter,
 //     eventBus,
diff --git a/libraries/react-native/src/core/transactions/transaction-service.ts b/libraries/react-native/src/core/transactions/transaction-service.ts
index ced10afe4..64cb8211f 100644
--- a/libraries/react-native/src/core/transactions/transaction-service.ts
+++ b/libraries/react-native/src/core/transactions/transaction-service.ts
@@ -3,7 +3,7 @@ import { Effect, Layer, Context } from "effect";
 import { CacheManager } from "../caching/cache-manager";
 import type { SubscriptionProduct } from "../entities/product";
 import type { Transaction } from "../entities/transaction";
-import { CustomerInfoManager } from "../identity/customer-info-manager";
+import { PersonInfoManager } from "../identity/person-info-manager";
 import { IdentityManager } from "../identity/identity-manager";
 import { ApiClient } from "../networking/api-client";
 import { PaymentAdapter } from "../payment-adapters/payment-adapter";
@@ -88,7 +88,7 @@ export class TransactionService extends Context.Service<TransactionService>()(
     make: Effect.gen(function* () {
       const apiClient = yield* ApiClient;
       const cacheManager = yield* CacheManager;
-      const customerInfoManager = yield* CustomerInfoManager;
+      const personInfoManager = yield* PersonInfoManager;
       const identityManager = yield* IdentityManager;
       const paymentAdapter = yield* PaymentAdapter;
       const sdkConfiguration = yield* SdkConfiguration;
@@ -199,7 +199,7 @@ export class TransactionService extends Context.Service<TransactionService>()(
         Effect.gen(function* () {
           yield* reconcileObservedTransactions(schema);
           const distinctId = yield* identityManager.getDistinctId();
-          yield* customerInfoManager.getCustomer(distinctId, "fetch");
+          yield* personInfoManager.getPerson(distinctId, "fetch");
         });
 
       const startTransactionObserver = (
diff --git a/libraries/react-native/src/core/types.ts b/libraries/react-native/src/core/types.ts
index ffc902763..1fea0fba2 100644
--- a/libraries/react-native/src/core/types.ts
+++ b/libraries/react-native/src/core/types.ts
@@ -57,8 +57,8 @@ export type FetchEsque = (
 ) => Promise<ResponseEsque>;
 
 // API
-export interface CustomerResponse {
-  customerId: string;
+export interface PersonResponse {
+  personId: string;
   name: null;
   email: null;
   distinctId: null;
diff --git a/libraries/react-native/src/react/hooks/use-customer.ts b/libraries/react-native/src/react/hooks/use-person.ts
similarity index 56%
rename from libraries/react-native/src/react/hooks/use-customer.ts
rename to libraries/react-native/src/react/hooks/use-person.ts
index 7c17feade..27f6549eb 100644
--- a/libraries/react-native/src/react/hooks/use-customer.ts
+++ b/libraries/react-native/src/react/hooks/use-person.ts
@@ -1,36 +1,36 @@
 import React, { useCallback, useMemo } from "react";
 
 import type { VoidhashClient } from "../../client";
-import { currentCustomerAtom } from "../../core/reactivity/client-state";
+import { currentPersonAtom } from "../../core/reactivity/client-state";
 import type { VoidhashContext } from "../components/provider";
 import useAsyncFunction from "./use-async-function";
 import { useAtomValue } from "./use-atom-value";
 
-export function currentCustomerHookFactory(
+export function currentPersonHookFactory(
   client: VoidhashClient,
   vhContext: React.Context<VoidhashContext | null>
 ) {
-  function useCurrentCustomer() {
+  function useCurrentPerson() {
     const voidhashContext = React.useContext(vhContext);
 
-    const getCustomerCallback = useCallback(
-      () => client.getCurrentCustomer(),
+    const getPersonCallback = useCallback(
+      () => client.getCurrentPerson(),
       []
     );
 
-    const { isLoading, error, refetch } = useAsyncFunction(getCustomerCallback, {
+    const { isLoading, error, refetch } = useAsyncFunction(getPersonCallback, {
       enabled: voidhashContext?.isInitialized,
     });
 
-    const customer = useAtomValue(
+    const person = useAtomValue(
       client.internal_getAtomRegistry(),
-      currentCustomerAtom
+      currentPersonAtom
     );
 
-    // Preserve the previous return shape: `data` spreads the customer fields,
+    // Preserve the previous return shape: `data` spreads the person fields,
     // so callers reading e.g. `data.email` keep working and `null` becomes
     // `{}` rather than `null`.
-    const data = useMemo(() => ({ ...customer }), [customer]);
+    const data = useMemo(() => ({ ...person }), [person]);
 
     return {
       data,
@@ -39,5 +39,5 @@ export function currentCustomerHookFactory(
       refetch,
     };
   }
-  return useCurrentCustomer;
+  return useCurrentPerson;
 }
diff --git a/libraries/react-native/tests/core/cache-manager.test.ts b/libraries/react-native/tests/core/cache-manager.test.ts
index c253113e2..ab44304e2 100644
--- a/libraries/react-native/tests/core/cache-manager.test.ts
+++ b/libraries/react-native/tests/core/cache-manager.test.ts
@@ -23,13 +23,13 @@ describe("CacheManager", () => {
     try {
       await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("customer:1", { id: "1" }, { staleTime: 1000, ttl: 1000 })
+          manager.set("person:1", { id: "1" }, { staleTime: 1000, ttl: 1000 })
         )
       );
 
       const result = await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.get<{ id: string }>("customer:1")
+          manager.get<{ id: string }>("person:1")
         )
       );
 
@@ -55,19 +55,19 @@ describe("CacheManager", () => {
     try {
       await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("customer:expired", { id: "expired" }, { ttl: 1 })
+          manager.set("person:expired", { id: "expired" }, { ttl: 1 })
         )
       );
       await wait(5);
 
       const result = await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.get<{ id: string }>("customer:expired")
+          manager.get<{ id: string }>("person:expired")
         )
       );
 
       expect(result).toBeNull();
-      expect(cache.store.has("customer:expired")).toBe(false);
+      expect(cache.store.has("person:expired")).toBe(false);
     } finally {
       await runtime.dispose();
     }
@@ -85,14 +85,14 @@ describe("CacheManager", () => {
     try {
       await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("customer:stale", { id: "stale" }, { staleTime: 1, ttl: 1000 })
+          manager.set("person:stale", { id: "stale" }, { staleTime: 1, ttl: 1000 })
         )
       );
       await wait(5);
 
       const result = await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.get<{ id: string }>("customer:stale")
+          manager.get<{ id: string }>("person:stale")
         )
       );
 
diff --git a/libraries/react-native/tests/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
index 046346724..b60a90a5c 100644
--- a/libraries/react-native/tests/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -9,9 +9,8 @@ import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../src/constants";
 import { CacheManager } from "../../src/core/caching/cache-manager";
 import { Product, SubscriptionProduct } from "../../src/core/entities/product";
 import { Transaction } from "../../src/core/entities/transaction";
-import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
 import {
-  currentCustomerAtom,
+  currentPersonAtom,
   featureFlagsForKeysAtom,
   schemaAtom,
 } from "../../src/core/reactivity/client-state";
@@ -21,13 +20,13 @@ import {
   createEffectTestHarness,
   createInMemoryCacheAdapter,
   createPaymentAdapterDouble,
-  createSdkCustomer,
+  createSdkPerson,
 } from "../helpers/effect-test-harness";
 import { describe, expect, it } from "../helpers/effect-vitest";
 import { createTestSchema } from "../helpers/test-schema";
 
 describe("VoidhashEffectClient", () => {
-  it("init with a provided distinct id identifies the user and syncs previous attributes", async () => {
+  it("init with a provided distinct id identifies the user without syncing attributes", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -42,14 +41,6 @@ describe("VoidhashEffectClient", () => {
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-before-init"))
       );
-      await harness.runtime.runPromise(
-        Effect.flatMap(CustomerAttributeManager, (manager) =>
-          manager.setCustomerAttributes("cached-before-init", {
-            email: "before@voidhash.test",
-            name: "Before",
-          })
-        )
-      );
 
       const initializedClient = await harness.runtime.runPromise(
         VoidhashEffectClient.makeUnitializedClient().init({
@@ -59,13 +50,8 @@ describe("VoidhashEffectClient", () => {
       );
 
       expect(initializedClient).toHaveProperty("getProducts");
-      // `identify()` syncs attributes for the current cached distinctId
-      // internally, so init no longer makes a second explicit sync call
-      // before identify — one POST suffices.
-      expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
-      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
-        "cached-before-init"
-      );
+      // Init no longer auto-syncs attributes; identify is the only POST.
+      expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(0);
       expect(apiDouble.state.identifyCalls).toHaveLength(1);
       expect(apiDouble.state.identifyCalls[0]?.headers["x-distinct-id"]).toBe(
         "cached-before-init"
@@ -78,7 +64,7 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
-  it("init without a provided distinct id prefetches customer", async () => {
+  it("init without a provided distinct id prefetches the person without syncing attributes", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -97,10 +83,11 @@ describe("VoidhashEffectClient", () => {
       );
 
       expect(apiDouble.state.identifyCalls).toHaveLength(0);
-      expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
-      expect(apiDouble.state.getCustomerCalls).toHaveLength(1);
+      // No implicit attribute sync at init.
+      expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(0);
+      expect(apiDouble.state.getPersonCalls).toHaveLength(1);
       const distinctId = String(
-        apiDouble.state.getCustomerCalls[0]?.headers["x-distinct-id"]
+        apiDouble.state.getPersonCalls[0]?.headers["x-distinct-id"]
       );
       expect(distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
     } finally {
@@ -108,6 +95,36 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
+  it("init succeeds (does not crash) when the person is not yet persisted", async () => {
+    // Regression: on a cold start the anonymous person isn't created until an
+    // explicit attribute set lands, so `getPerson` 404s. That 404 must not
+    // abort init (previously surfaced as FAILED_TO_INITIALIZE_VOIDHASH_CLIENT).
+    const apiDouble = createApiClientDouble({ getPersonShouldNotFound: true });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const schema = createTestSchema();
+
+    try {
+      const exit = await harness.runtime.runPromiseExit(
+        VoidhashEffectClient.makeUnitializedClient().init({
+          internalSchema: schema,
+        })
+      );
+
+      expect(Exit.isSuccess(exit)).toBe(true);
+      expect(apiDouble.state.getPersonCalls).toHaveLength(1);
+      // A not-yet-persisted person publishes a null person, not a crash.
+      expect(harness.atomRegistry.get(currentPersonAtom)).toBeNull();
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
   it("init without internalSchema fetches the schema once and publishes it to schemaAtom", async () => {
     const remoteSchema = createTestSchema();
     const apiDouble = createApiClientDouble({ getSchemaResult: remoteSchema });
@@ -308,10 +325,10 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
-  it("getCurrentCustomer publishes both cached and freshly fetched results to the reactive atom", async () => {
+  it("getCurrentPerson publishes both cached and freshly fetched results to the reactive atom", async () => {
     const schema = createTestSchema();
-    const fetched = createSdkCustomer("fetched-customer");
-    const apiDouble = createApiClientDouble({ getCustomerResult: fetched });
+    const fetched = createSdkPerson("fetched-person");
+    const apiDouble = createApiClientDouble({ getPersonResult: fetched });
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
     const harness = createEffectTestHarness({
@@ -326,28 +343,28 @@ describe("VoidhashEffectClient", () => {
     try {
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("distinctId", "fetched-customer")
+          manager.set("distinctId", "fetched-person")
         )
       );
 
       // First call fetches and publishes the network result.
       await harness.runtime.runPromise(
-        initializedClient.getCurrentCustomer(true)
+        initializedClient.getCurrentPerson(true)
       );
-      expect(harness.atomRegistry.get(currentCustomerAtom)).toEqual(fetched);
+      expect(harness.atomRegistry.get(currentPersonAtom)).toEqual(fetched);
 
       // Reset atom then verify a cached read still publishes back.
-      harness.atomRegistry.set(currentCustomerAtom, null);
+      harness.atomRegistry.set(currentPersonAtom, null);
       await harness.runtime.runPromise(
-        initializedClient.getCurrentCustomer()
+        initializedClient.getCurrentPerson()
       );
-      expect(harness.atomRegistry.get(currentCustomerAtom)).toEqual(fetched);
+      expect(harness.atomRegistry.get(currentPersonAtom)).toEqual(fetched);
     } finally {
       await harness.runtime.dispose();
     }
   });
 
-  it("init without distinct id publishes the prefetched customer to the reactive atom", async () => {
+  it("init without distinct id publishes the prefetched person to the reactive atom", async () => {
     const schema = createTestSchema();
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
@@ -365,7 +382,7 @@ describe("VoidhashEffectClient", () => {
         })
       );
 
-      const published = harness.atomRegistry.get(currentCustomerAtom);
+      const published = harness.atomRegistry.get(currentPersonAtom);
       expect(published).not.toBeNull();
       expect(
         published?.distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)
@@ -375,6 +392,180 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
+  describe("person attributes", () => {
+    it("setPersonAttributes enqueues a $set capture carrying $process_person_profile", async () => {
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
+
+      try {
+        await harness.runtime.runPromise(
+          initializedClient.setPersonAttributes({
+            email: "person@voidhash.test",
+            name: "A Person",
+            plan: "pro",
+          })
+        );
+
+        // Rides the analytics queue; no network sync.
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(1);
+        expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(0);
+      } finally {
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("setPersonAttributesSync syncs, returns the snapshot and publishes the atom", async () => {
+      const schema = createTestSchema();
+      const synced = createSdkPerson("synced-person");
+      const apiDouble = createApiClientDouble({
+        syncPersonAttributesResult: synced,
+      });
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
+
+      try {
+        await harness.runtime.runPromise(
+          Effect.flatMap(CacheManager, (manager) =>
+            manager.set("distinctId", "sync-user")
+          )
+        );
+
+        const result = await harness.runtime.runPromise(
+          initializedClient.setPersonAttributesSync({
+            email: "sync@voidhash.test",
+            plan: "pro",
+          })
+        );
+
+        expect(result).toEqual(synced);
+        expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(1);
+        expect(
+          apiDouble.state.syncPersonAttributesCalls[0]?.headers["x-distinct-id"]
+        ).toBe("sync-user");
+        // Reserved keys map to dedicated fields; custom keys go to traits.
+        expect(
+          apiDouble.state.syncPersonAttributesCalls[0]?.payload
+        ).toMatchObject({
+          email: "sync@voidhash.test",
+          traits: { plan: "pro" },
+        });
+        expect(harness.atomRegistry.get(currentPersonAtom)).toEqual(synced);
+      } finally {
+        await harness.runtime.dispose();
+      }
+    });
+  });
+
+  describe("identify and reset flush analytics first", () => {
+    const acceptedResponse = () =>
+      new Response(null, { status: 202, statusText: "Accepted" });
+
+    it("identify flushes queued events under the pre-switch distinct id", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = vi.fn().mockResolvedValue(acceptedResponse());
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
+
+      try {
+        await harness.runtime.runPromise(
+          Effect.flatMap(CacheManager, (manager) =>
+            manager.set("distinctId", "pre-switch-user")
+          )
+        );
+
+        harness.runtime.runSync(initializedClient.capture("pre-identify-event"));
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(1);
+
+        await harness.runtime.runPromise(
+          initializedClient.identify("new-user", {})
+        );
+
+        // The queued event was flushed before the identity switch.
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(0);
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
+        const payload = JSON.parse(decodeRequestBody(request?.body));
+        expect(payload.events[0]?.distinct_id).toBe("pre-switch-user");
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+
+    it("reset flushes queued events under the pre-reset distinct id", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = vi.fn().mockResolvedValue(acceptedResponse());
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
+
+      try {
+        await harness.runtime.runPromise(
+          Effect.flatMap(CacheManager, (manager) =>
+            manager.set("distinctId", "pre-reset-user")
+          )
+        );
+
+        harness.runtime.runSync(initializedClient.capture("pre-reset-event"));
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(1);
+
+        await harness.runtime.runPromise(initializedClient.reset());
+
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(0);
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
+        const payload = JSON.parse(decodeRequestBody(request?.body));
+        expect(payload.events[0]?.distinct_id).toBe("pre-reset-user");
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+  });
+
   it("ios-only methods fail with UnsupportedPlatformError when adapter methods are absent", async () => {
     const schema = createTestSchema();
     const apiDouble = createApiClientDouble();
@@ -1006,7 +1197,11 @@ describe("VoidhashEffectClient", () => {
   });
 
   describe("automatic startup events", () => {
-    it("captures app_installed and app_opened on first init", async () => {
+    it("captures $app_installed and $app_opened on first init", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
       const schema = createTestSchema();
       const apiDouble = createApiClientDouble();
       const paymentDouble = createPaymentAdapterDouble();
@@ -1014,6 +1209,7 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
@@ -1024,15 +1220,26 @@ describe("VoidhashEffectClient", () => {
         await harness.runtime.runPromise(
           initializedClient.captureAutomaticStartupEvents()
         );
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(2);
+
+        await harness.runtime.runPromise(initializedClient.flush());
 
-        const queueLength = initializedClient.getAnalyticsQueueLength();
-        expect(queueLength).toBe(2);
+        const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
+        const payload = JSON.parse(decodeRequestBody(request?.body));
+        expect(
+          payload.events.map((event: { event: string }) => event.event)
+        ).toEqual(["$app_installed", "$app_opened"]);
       } finally {
+        global.fetch = originalFetch;
         await harness.runtime.dispose();
       }
     });
 
-    it("captures app_updated and app_opened when app release changes", async () => {
+    it("captures $app_updated and $app_opened when app release changes", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
       const schema = createTestSchema();
       const apiDouble = createApiClientDouble();
       const paymentDouble = createPaymentAdapterDouble();
@@ -1040,6 +1247,7 @@ describe("VoidhashEffectClient", () => {
       const harness = createEffectTestHarness({
         apiClient: apiDouble.apiClient,
         cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
@@ -1060,17 +1268,24 @@ describe("VoidhashEffectClient", () => {
         await harness.runtime.runPromise(
           initializedClient.captureAutomaticStartupEvents()
         );
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(2);
+
+        await harness.runtime.runPromise(initializedClient.flush());
 
-        const queueLength = initializedClient.getAnalyticsQueueLength();
-        expect(queueLength).toBe(2);
+        const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
+        const payload = JSON.parse(decodeRequestBody(request?.body));
+        expect(
+          payload.events.map((event: { event: string }) => event.event)
+        ).toEqual(["$app_updated", "$app_opened"]);
       } finally {
+        global.fetch = originalFetch;
         await harness.runtime.dispose();
       }
     });
   });
 
   describe("automatic lifecycle events", () => {
-    it("captures app_backgrounded and app_became_active from lifecycle transitions", async () => {
+    it("captures $app_backgrounded and $app_became_active from lifecycle transitions", async () => {
       const schema = createTestSchema();
       const apiDouble = createApiClientDouble();
       const paymentDouble = createPaymentAdapterDouble();
@@ -1102,4 +1317,54 @@ describe("VoidhashEffectClient", () => {
       }
     });
   });
+
+  describe("automatic sign-out event", () => {
+    it("captures $sign_out and flushes it under the signing-out distinct id", async () => {
+      const originalFetch = global.fetch;
+      const fetchMock = vi.fn().mockResolvedValue(acceptedAnalyticsResponse());
+      global.fetch = fetchMock as unknown as typeof global.fetch;
+
+      const schema = createTestSchema();
+      const apiDouble = createApiClientDouble();
+      const paymentDouble = createPaymentAdapterDouble();
+      const cache = createInMemoryCacheAdapter();
+      const harness = createEffectTestHarness({
+        apiClient: apiDouble.apiClient,
+        cacheAdapter: cache.adapter,
+        fetch: fetchMock as unknown as typeof globalThis.fetch,
+        paymentAdapter: paymentDouble.paymentAdapter,
+      });
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema })
+      );
+
+      try {
+        await harness.runtime.runPromise(
+          Effect.flatMap(CacheManager, (manager) =>
+            manager.set("distinctId", "user-signing-out")
+          )
+        );
+
+        await harness.runtime.runPromise(initializedClient.signOut());
+
+        // The sign-out event is flushed before reset clears the cache, so it
+        // is attributed to the signing-out distinct id, not a fresh anon one.
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
+        const payload = JSON.parse(decodeRequestBody(request?.body));
+        expect(payload.events).toEqual([
+          expect.objectContaining({
+            distinct_id: "user-signing-out",
+            event: "$sign_out",
+          }),
+        ]);
+
+        // Reset emptied the queue and cleared the cached identity.
+        expect(initializedClient.getAnalyticsQueueLength()).toBe(0);
+      } finally {
+        global.fetch = originalFetch;
+        await harness.runtime.dispose();
+      }
+    });
+  });
 });
diff --git a/libraries/react-native/tests/core/identity-manager.test.ts b/libraries/react-native/tests/core/identity-manager.test.ts
index 3cd10f407..6adec767e 100644
--- a/libraries/react-native/tests/core/identity-manager.test.ts
+++ b/libraries/react-native/tests/core/identity-manager.test.ts
@@ -2,11 +2,10 @@ import { Effect } from "effect";
 
 import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../src/constants";
 import { CacheManager } from "../../src/core/caching/cache-manager";
-import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
-import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
+import { PersonInfoManager } from "../../src/core/identity/person-info-manager";
 import { IdentityManager } from "../../src/core/identity/identity-manager";
 import {
-  currentCustomerAtom,
+  currentPersonAtom,
   featureFlagsByKeyAtom,
 } from "../../src/core/reactivity/client-state";
 import {
@@ -14,7 +13,7 @@ import {
   createEffectTestHarness,
   createInMemoryCacheAdapter,
   createPaymentAdapterDouble,
-  createSdkCustomer,
+  createSdkPerson,
 } from "../helpers/effect-test-harness";
 import { describe, expect, it } from "../helpers/effect-vitest";
 
@@ -69,7 +68,7 @@ describe("IdentityManager", () => {
     }
   });
 
-  it("identify syncs previous traits, updates cache and publishes new customer", async () => {
+  it("identify switches distinct id, updates cache and publishes new person", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -87,13 +86,7 @@ describe("IdentityManager", () => {
 
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          Effect.all([
-            manager.set("distinctId", "old-user"),
-            manager.set("customer-attributes:old-user", {
-              email: "old@voidhash.test",
-              name: "Old User",
-            }),
-          ])
+          manager.set("distinctId", "old-user")
         )
       );
 
@@ -109,16 +102,14 @@ describe("IdentityManager", () => {
       const cachedDistinctId = await harness.runtime.runPromise(
         Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
       );
-      const cachedCustomer = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
-          manager.getCustomerFromCache("new-user")
+      const cachedPerson = await harness.runtime.runPromise(
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPersonFromCache("new-user")
         )
       );
 
-      expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
-      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
-        "old-user"
-      );
+      // identify no longer auto-syncs attributes — only the identify POST runs.
+      expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(0);
 
       expect(apiDouble.state.identifyCalls).toHaveLength(1);
       expect(apiDouble.state.identifyCalls[0]?.payload).toMatchObject({
@@ -129,17 +120,17 @@ describe("IdentityManager", () => {
       expect(apiDouble.state.identifyCalls[0]?.headers["x-distinct-id"]).toBe("old-user");
 
       expect(cachedDistinctId).toBe("new-user");
-      expect(cachedCustomer?.value.distinctId).toBe("new-user");
+      expect(cachedPerson?.value.distinctId).toBe("new-user");
 
-      const publishedCustomer = harness.atomRegistry.get(currentCustomerAtom);
-      expect(publishedCustomer?.distinctId).toBe("new-user");
+      const publishedPerson = harness.atomRegistry.get(currentPersonAtom);
+      expect(publishedPerson?.distinctId).toBe("new-user");
       expect(harness.atomRegistry.get(featureFlagsByKeyAtom)).toEqual({});
     } finally {
       await harness.runtime.dispose();
     }
   });
 
-  it("reset syncs attributes, clears cache and resets reactive state", async () => {
+  it("reset clears cache and resets reactive state without syncing attributes", async () => {
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -152,8 +143,8 @@ describe("IdentityManager", () => {
     try {
       // Seed reactive state so we can assert reset clears it.
       harness.atomRegistry.set(
-        currentCustomerAtom,
-        createSdkCustomer("signed-in-user")
+        currentPersonAtom,
+        createSdkPerson("signed-in-user")
       );
       harness.atomRegistry.set(featureFlagsByKeyAtom, {
         all: { flags: [] },
@@ -163,18 +154,10 @@ describe("IdentityManager", () => {
         Effect.flatMap(CacheManager, (manager) =>
           Effect.all([
             manager.set("distinctId", "signed-in-user"),
-            manager.set("customer:some-user", { id: "some-user" }),
+            manager.set("person:some-user", { id: "some-user" }),
           ])
         )
       );
-      await harness.runtime.runPromise(
-        Effect.flatMap(CustomerAttributeManager, (manager) =>
-          manager.setCustomerAttributes("signed-in-user", {
-            email: "signed@voidhash.test",
-            name: "Signed User",
-          })
-        )
-      );
 
       await harness.runtime.runPromise(
         Effect.flatMap(IdentityManager, (manager) => manager.reset())
@@ -187,13 +170,11 @@ describe("IdentityManager", () => {
         Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
       );
 
-      expect(apiDouble.state.syncCustomerAttributesCalls).toHaveLength(1);
-      expect(apiDouble.state.syncCustomerAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
-        "signed-in-user"
-      );
+      // reset no longer auto-syncs attributes.
+      expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(0);
       expect(distinctIdFromCache).toBeNull();
       expect(cacheKeys).toEqual([]);
-      expect(harness.atomRegistry.get(currentCustomerAtom)).toBeNull();
+      expect(harness.atomRegistry.get(currentPersonAtom)).toBeNull();
       expect(harness.atomRegistry.get(featureFlagsByKeyAtom)).toEqual({});
     } finally {
       await harness.runtime.dispose();
diff --git a/libraries/react-native/tests/core/customer-info-manager.test.ts b/libraries/react-native/tests/core/person-info-manager.test.ts
similarity index 52%
rename from libraries/react-native/tests/core/customer-info-manager.test.ts
rename to libraries/react-native/tests/core/person-info-manager.test.ts
index ec87e91b9..bcffff756 100644
--- a/libraries/react-native/tests/core/customer-info-manager.test.ts
+++ b/libraries/react-native/tests/core/person-info-manager.test.ts
@@ -1,13 +1,13 @@
 import { Effect } from "effect";
 
 import { CacheManager } from "../../src/core/caching/cache-manager";
-import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
+import { PersonInfoManager } from "../../src/core/identity/person-info-manager";
 import {
   createApiClientDouble,
   createEffectTestHarness,
   createInMemoryCacheAdapter,
   createPaymentAdapterDouble,
-  createSdkCustomer,
+  createSdkPerson,
 } from "../helpers/effect-test-harness";
 import { describe, expect, it } from "../helpers/effect-vitest";
 
@@ -16,9 +16,9 @@ const wait = (ms: number) =>
     setTimeout(resolve, ms);
   });
 
-describe("CustomerInfoManager", () => {
-  it("returns cached customer for cache policy without API call", async () => {
-    const customer = createSdkCustomer("cached-user");
+describe("PersonInfoManager", () => {
+  it("returns cached person for cache policy without API call", async () => {
+    const person = createSdkPerson("cached-user");
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -30,19 +30,19 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
-          manager.cache("cached-user", customer)
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.cache("cached-user", person)
         )
       );
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
-          manager.getCustomer("cached-user", "cache")
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPerson("cached-user", "cache")
         )
       );
 
-      expect(result).toEqual(customer);
-      expect(apiDouble.state.getCustomerCalls).toHaveLength(0);
+      expect(result).toEqual(person);
+      expect(apiDouble.state.getPersonCalls).toHaveLength(0);
     } finally {
       await harness.runtime.dispose();
     }
@@ -50,7 +50,7 @@ describe("CustomerInfoManager", () => {
 
   it("fetch policy always requests API and updates cache", async () => {
     const apiDouble = createApiClientDouble({
-      getCustomerResult: createSdkCustomer("fetched-user"),
+      getPersonResult: createSdkPerson("fetched-user"),
     });
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -62,30 +62,61 @@ describe("CustomerInfoManager", () => {
 
     try {
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
-          manager.getCustomer("fetched-user", "fetch")
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPerson("fetched-user", "fetch")
         )
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
-          manager.getCustomerFromCache("fetched-user")
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPersonFromCache("fetched-user")
         )
       );
 
       if (result === null) {
-        throw new Error("Expected fetched customer");
+        throw new Error("Expected fetched person");
       }
 
       expect(result.distinctId).toBe("fetched-user");
-      expect(apiDouble.state.getCustomerCalls).toHaveLength(1);
+      expect(apiDouble.state.getPersonCalls).toHaveLength(1);
       expect(cached?.value.distinctId).toBe("fetched-user");
     } finally {
       await harness.runtime.dispose();
     }
   });
 
+  it("fetch policy returns null (not a failure) when the person is not found", async () => {
+    const apiDouble = createApiClientDouble({ getPersonShouldNotFound: true });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+
+    try {
+      const result = await harness.runtime.runPromise(
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPerson("brand-new-user", "fetch")
+        )
+      );
+      const cached = await harness.runtime.runPromise(
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPersonFromCache("brand-new-user")
+        )
+      );
+
+      expect(result).toBeNull();
+      expect(apiDouble.state.getPersonCalls).toHaveLength(1);
+      // A not-found person must not be cached as an empty snapshot.
+      expect(cached).toBeNull();
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
   it("fetch-while-stale returns fresh cache without API call", async () => {
-    const customer = createSdkCustomer("fresh-user");
+    const person = createSdkPerson("fresh-user");
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -97,27 +128,27 @@ describe("CustomerInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) => manager.cache("fresh-user", customer))
+        Effect.flatMap(PersonInfoManager, (manager) => manager.cache("fresh-user", person))
       );
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
-          manager.getCustomer("fresh-user", "fetch-while-stale")
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPerson("fresh-user", "fetch-while-stale")
         )
       );
 
-      expect(result).toEqual(customer);
-      expect(apiDouble.state.getCustomerCalls).toHaveLength(0);
+      expect(result).toEqual(person);
+      expect(apiDouble.state.getPersonCalls).toHaveLength(0);
     } finally {
       await harness.runtime.dispose();
     }
   });
 
   it("fetch-while-stale fetches from API when cache is stale", async () => {
-    const staleCustomer = createSdkCustomer("stale-user");
-    const fetchedCustomer = createSdkCustomer("fetched-stale-user");
+    const stalePerson = createSdkPerson("stale-user");
+    const fetchedPerson = createSdkPerson("fetched-stale-user");
     const apiDouble = createApiClientDouble({
-      getCustomerResult: fetchedCustomer,
+      getPersonResult: fetchedPerson,
     });
     const paymentDouble = createPaymentAdapterDouble();
     const cache = createInMemoryCacheAdapter();
@@ -130,7 +161,7 @@ describe("CustomerInfoManager", () => {
     try {
       await harness.runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("customer:stale-user", staleCustomer, {
+          manager.set("person:stale-user", stalePerson, {
             staleTime: 1,
             ttl: 1000,
           })
@@ -139,13 +170,13 @@ describe("CustomerInfoManager", () => {
       await wait(5);
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(CustomerInfoManager, (manager) =>
-          manager.getCustomer("stale-user", "fetch-while-stale")
+        Effect.flatMap(PersonInfoManager, (manager) =>
+          manager.getPerson("stale-user", "fetch-while-stale")
         )
       );
 
-      expect(apiDouble.state.getCustomerCalls).toHaveLength(1);
-      expect(result).toEqual(fetchedCustomer);
+      expect(apiDouble.state.getPersonCalls).toHaveLength(1);
+      expect(result).toEqual(fetchedPerson);
     } finally {
       await harness.runtime.dispose();
     }
diff --git a/libraries/react-native/tests/helpers/effect-test-harness.ts b/libraries/react-native/tests/helpers/effect-test-harness.ts
index fc0ef1c31..5b1b18bd3 100644
--- a/libraries/react-native/tests/helpers/effect-test-harness.ts
+++ b/libraries/react-native/tests/helpers/effect-test-harness.ts
@@ -1,4 +1,4 @@
-import type { SdkPerson as SdkCustomer } from "@voidhash/generated-clients";
+import type { SdkPerson } from "@voidhash/generated-clients";
 import { Effect, Layer, ManagedRuntime, pipe } from "effect";
 import { FetchHttpClient } from "effect/unstable/http";
 import { AtomRegistry } from "effect/unstable/reactivity";
@@ -7,8 +7,8 @@ import { CacheAdapter } from "../../src/core/caching/cache-adapter";
 import { CacheManager } from "../../src/core/caching/cache-manager";
 import { Product, type SubscriptionProduct } from "../../src/core/entities/product";
 import { Transaction } from "../../src/core/entities/transaction";
-import { CustomerAttributeManager } from "../../src/core/identity/customer-attribute-manager";
-import { CustomerInfoManager } from "../../src/core/identity/customer-info-manager";
+import { PersonAttributeManager } from "../../src/core/identity/person-attribute-manager";
+import { PersonInfoManager } from "../../src/core/identity/person-info-manager";
 import { IdentityManager } from "../../src/core/identity/identity-manager";
 import { AnalyticsService } from "../../src/core/analytics/service";
 import { FeatureFlagService } from "../../src/core/feature-flags/feature-flag-service";
@@ -41,38 +41,44 @@ export type ApiSdkCall = {
 
 export interface ApiClientDoubleState {
   readonly evaluateFeatureFlagsCalls: ApiSdkCall[];
-  readonly getCustomerCalls: ApiSdkCall[];
+  readonly getPersonCalls: ApiSdkCall[];
   readonly getSchemaCalls: ApiSdkCall[];
   readonly identifyCalls: ApiSdkCall[];
-  readonly syncCustomerAttributesCalls: ApiSdkCall[];
+  readonly syncPersonAttributesCalls: ApiSdkCall[];
   readonly syncTransactionCalls: ApiSdkCall[];
 }
 
 export interface ApiClientDoubleOptions {
   evaluateFeatureFlagsResult?: FeatureFlagsResult;
-  getCustomerResult?: SdkCustomer;
+  getPersonResult?: SdkPerson;
+  /**
+   * Simulate the server's `GET /sdk/person` 404 for a not-yet-persisted
+   * person (the `ApiSdkPersonNotFoundError` the generated client surfaces).
+   */
+  getPersonShouldNotFound?: boolean;
   getSchemaResult?: ReturnType<typeof createTestSchema>;
   getSchemaShouldFail?: boolean;
-  identifyResult?: SdkCustomer;
+  identifyResult?: SdkPerson;
+  syncPersonAttributesResult?: SdkPerson;
   syncTransactionShouldFail?: boolean;
 }
 
-export function createSdkCustomer(distinctId: string) {
+export function createSdkPerson(distinctId: string) {
   return {
     distinctId,
     personId: `person-${distinctId}`,
     email: null,
     name: null,
-  } as SdkCustomer;
+  } as SdkPerson;
 }
 
 export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
   const state: ApiClientDoubleState = {
     evaluateFeatureFlagsCalls: [],
-    getCustomerCalls: [],
+    getPersonCalls: [],
     getSchemaCalls: [],
     identifyCalls: [],
-    syncCustomerAttributesCalls: [],
+    syncPersonAttributesCalls: [],
     syncTransactionCalls: [],
   };
 
@@ -100,24 +106,36 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
           }
         );
       },
-      getCustomer: (request: ApiSdkCall) => {
-        state.getCustomerCalls.push(request);
+      getPerson: (request: ApiSdkCall) => {
+        state.getPersonCalls.push(request);
+        if (options.getPersonShouldNotFound) {
+          return Effect.fail({
+            _tag: "ApiSdkPersonNotFoundError",
+            message: JSON.stringify({
+              _tag: "Api/SdkPersonNotFoundError",
+              message: "Person not found",
+            }),
+          });
+        }
         const distinctId = String(request.headers["x-distinct-id"]);
         return Effect.succeed(
-          options.getCustomerResult ?? createSdkCustomer(distinctId)
+          options.getPersonResult ?? createSdkPerson(distinctId)
         );
       },
       identify: (request: ApiSdkCall) => {
         state.identifyCalls.push(request);
         const distinctId = String(request.payload?.distinctId ?? "identified-user");
         return Effect.succeed(
-          options.identifyResult ?? createSdkCustomer(distinctId)
+          options.identifyResult ?? createSdkPerson(distinctId)
         );
       },
       resolvePaywall: () => Effect.succeed(null),
-      syncCustomerAttributes: (request: ApiSdkCall) => {
-        state.syncCustomerAttributesCalls.push(request);
-        return Effect.void;
+      syncPersonAttributes: (request: ApiSdkCall) => {
+        state.syncPersonAttributesCalls.push(request);
+        const distinctId = String(request.headers["x-distinct-id"]);
+        return Effect.succeed(
+          options.syncPersonAttributesResult ?? createSdkPerson(distinctId)
+        );
       },
       syncTransaction: (request: ApiSdkCall) => {
         state.syncTransactionCalls.push(request);
@@ -277,7 +295,7 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
   const lifecycle = options.lifecycleAdapter ?? createLifecycleAdapterDouble();
 
   const baseLayer = pipe(
-    CustomerAttributeManager.Default,
+    PersonAttributeManager.Default,
     Layer.provideMerge(ProductService.layer),
     Layer.provideMerge(FeatureFlagService.layer),
     Layer.provideMerge(PaywallService.layer),
@@ -285,7 +303,7 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
     Layer.provideMerge(AnalyticsService.layer),
     Layer.provideMerge(LifecycleService.layer),
     Layer.provideMerge(Layer.succeed(LifecycleAdapter, lifecycle.adapter)),
-    Layer.provideMerge(CustomerInfoManager.Default),
+    Layer.provideMerge(PersonInfoManager.Default),
     Layer.provideMerge(SchemaManager.layer),
     Layer.provideMerge(IdentityManager.Default),
     Layer.provideMerge(CacheManager.Default),
diff --git a/libraries/web/src/client-effect.ts b/libraries/web/src/client-effect.ts
index 6ab648ae8..b9197c714 100644
--- a/libraries/web/src/client-effect.ts
+++ b/libraries/web/src/client-effect.ts
@@ -1,11 +1,14 @@
 import { Cause, Effect, Exit, Layer, ManagedRuntime, pipe } from "effect";
 import { FetchHttpClient, HttpClient } from "effect/unstable/http";
 
+import type { SdkPerson } from "@voidhash/generated-clients";
+
 import { VoidhashConfigurationError } from "./errors";
 import type {
   AnalyticsFlushResult,
   ResolvedVoidhashConfig,
   VoidhashClientOptions,
+  VoidhashPersonAttributes,
   VoidhashTrackOptions,
   VoidhashTraits,
 } from "./types";
@@ -126,6 +129,15 @@ export const initializeEffect = (initialDistinctId?: string) =>
     return yield* identityManager.initialize(initialDistinctId);
   });
 
+// Drain the analytics queue so any pending events are attributed to the
+// current distinct id before it is switched out by identify/reset.
+const flushAnalyticsForIdentitySwitch = Effect.gen(
+  function* flushForIdentitySwitch() {
+    const analyticsService = yield* AnalyticsService;
+    yield* analyticsService.flush();
+  }
+);
+
 export const identifyEffect = (
   distinctId: string,
   traits?: VoidhashTraits
@@ -133,6 +145,7 @@ export const identifyEffect = (
   Effect.gen(function* identify() {
     const identityManager = yield* IdentityManager;
     const featureFlags = yield* FeatureFlagService;
+    yield* flushAnalyticsForIdentitySwitch;
     yield* identityManager.identify(distinctId, traits);
     yield* featureFlags.clearCachedFlags();
     yield* featureFlags.refreshTrackedKeySets();
@@ -142,11 +155,65 @@ export const resetEffect = () =>
   Effect.gen(function* reset() {
     const identityManager = yield* IdentityManager;
     const featureFlags = yield* FeatureFlagService;
+    yield* flushAnalyticsForIdentitySwitch;
     yield* identityManager.reset();
     yield* featureFlags.clearCachedFlags();
     yield* featureFlags.refreshTrackedKeySets();
   });
 
+/**
+ * Splits person attributes into the reserved `email`/`name` fields and the
+ * remaining free-form traits.
+ */
+const splitPersonAttributes = (attributes: VoidhashPersonAttributes) => {
+  const { email, name, ...rest } = attributes;
+  const traits: VoidhashTraits = {};
+  for (const [key, value] of Object.entries(rest)) {
+    if (value !== undefined) {
+      traits[key] = value;
+    }
+  }
+  return { email, name, traits };
+};
+
+/**
+ * Enqueues a `$set` analytics event that updates the current person profile.
+ * Fire-and-forget: the event is queued and flushed by the normal pipeline.
+ */
+export const setPersonAttributesEffect = (
+  attributes: VoidhashPersonAttributes
+) =>
+  Effect.gen(function* setPersonAttributes() {
+    const analyticsService = yield* AnalyticsService;
+    const { email, name, traits } = splitPersonAttributes(attributes);
+    const $set = {
+      ...traits,
+      ...(email !== undefined ? { email } : {}),
+      ...(name !== undefined ? { name } : {}),
+    };
+    yield* analyticsService.enqueue("$set", {
+      $set,
+      $process_person_profile: true,
+    });
+  });
+
+/**
+ * Synchronously persists person attributes to the server and returns the
+ * resulting person snapshot.
+ */
+export const setPersonAttributesSyncEffect = (
+  attributes: VoidhashPersonAttributes
+): Effect.Effect<SdkPerson, unknown, IdentityManager> =>
+  Effect.gen(function* setPersonAttributesSync() {
+    const identityManager = yield* IdentityManager;
+    const { email, name, traits } = splitPersonAttributes(attributes);
+    return yield* identityManager.setPersonAttributesSync({
+      email,
+      name,
+      traits: Object.keys(traits).length > 0 ? traits : undefined,
+    });
+  });
+
 export const trackEffect = (
   eventName: string,
   properties?: Record<string, unknown>,
diff --git a/libraries/web/src/client.ts b/libraries/web/src/client.ts
index a9e2d4858..32a620c21 100644
--- a/libraries/web/src/client.ts
+++ b/libraries/web/src/client.ts
@@ -12,6 +12,8 @@ import {
   refreshTrackedKeySetsEffect,
   resetEffect,
   resolveVoidhashConfig,
+  setPersonAttributesEffect,
+  setPersonAttributesSyncEffect,
   startAnalyticsEffect,
   stopAnalyticsEffect,
   trackEffect,
@@ -25,6 +27,7 @@ import type {
   VoidhashClientOptions,
   VoidhashEventMap,
   VoidhashEventName,
+  VoidhashPersonAttributes,
   VoidhashTrackOptions,
   VoidhashTraits,
 } from "./types";
@@ -202,6 +205,32 @@ export class VoidhashWebClient {
     await this.runEffect(resetEffect(), "FAILED_TO_RESET");
   }
 
+  /**
+   * Updates the current person's attributes by enqueuing a `$set` analytics
+   * event. Reserved `email`/`name` are forwarded as dedicated profile fields;
+   * everything else is sent as free-form traits. Fire-and-forget — the event is
+   * queued and flushed by the normal analytics pipeline.
+   */
+  async setPersonAttributes(attributes: VoidhashPersonAttributes) {
+    this.ensureReady();
+    await this.runEffect(
+      setPersonAttributesEffect(attributes),
+      "FAILED_TO_SET_PERSON_ATTRIBUTES"
+    );
+  }
+
+  /**
+   * Synchronously persists the current person's attributes to the server and
+   * returns the resulting person snapshot.
+   */
+  async setPersonAttributesSync(attributes: VoidhashPersonAttributes) {
+    this.ensureReady();
+    return this.runEffect(
+      setPersonAttributesSyncEffect(attributes),
+      "FAILED_TO_SET_PERSON_ATTRIBUTES_SYNC"
+    );
+  }
+
   async track(
     eventName: string,
     properties?: Record<string, unknown>,
diff --git a/libraries/web/src/core/identity/identity-manager.ts b/libraries/web/src/core/identity/identity-manager.ts
index 4faad9ef8..ce8d13d89 100644
--- a/libraries/web/src/core/identity/identity-manager.ts
+++ b/libraries/web/src/core/identity/identity-manager.ts
@@ -43,22 +43,6 @@ const make = Effect.gen(function* effect() {
       "x-distinct-id": distinctId,
     }) as any;
 
-  const syncTraits = (distinctId?: string) =>
-    Effect.gen(function* syncTraits() {
-      const resolvedDistinctId = distinctId ?? currentDistinctId;
-      if (!resolvedDistinctId) return;
-
-      const cached = yield* cacheManager.get<VoidhashTraits>(
-        buildTraitsKey(resolvedDistinctId)
-      );
-
-      const traits = normalizeTraits(cached?.value);
-      yield* apiClient.sdk.syncCustomerAttributes({
-        headers: buildHeaders(resolvedDistinctId),
-        payload: traits ? { traits } : {},
-      });
-    });
-
   const initialize = (initialDistinctId?: string) =>
     Effect.gen(function* initialize() {
       const cached = yield* cacheManager.get<string>(DISTINCT_ID_KEY);
@@ -88,7 +72,6 @@ const make = Effect.gen(function* effect() {
       }
 
       const previousDistinctId = currentDistinctId;
-      yield* syncTraits(previousDistinctId);
 
       const normalizedTraits = normalizeTraits(traits);
       yield* apiClient.sdk.identify({
@@ -114,7 +97,6 @@ const make = Effect.gen(function* effect() {
       }
 
       const previousDistinctId = currentDistinctId;
-      yield* syncTraits(previousDistinctId);
       const nextAnonymousId = `${ANONYMOUS_DISTINCT_ID_PREFIX}${platform.randomId()}`;
       yield* cacheManager.set(DISTINCT_ID_KEY, nextAnonymousId);
       yield* cacheManager.set(buildTraitsKey(nextAnonymousId), {});
@@ -125,12 +107,38 @@ const make = Effect.gen(function* effect() {
       });
     });
 
+  /**
+   * Synchronously persists person attributes to the server and returns the
+   * resulting person snapshot. Reserved `email`/`name` are sent as dedicated
+   * fields; everything else is forwarded as `traits`.
+   */
+  const setPersonAttributesSync = (input: {
+    email?: string | undefined;
+    name?: string | undefined;
+    traits?: VoidhashTraits | undefined;
+  }) =>
+    Effect.gen(function* setPersonAttributesSync() {
+      if (!currentDistinctId) {
+        throw new Error("Distinct id has not been initialized.");
+      }
+
+      const normalizedTraits = normalizeTraits(input.traits);
+      return yield* apiClient.sdk.syncPersonAttributes({
+        headers: buildHeaders(currentDistinctId),
+        payload: {
+          ...(input.email !== undefined ? { email: input.email } : {}),
+          ...(input.name !== undefined ? { name: input.name } : {}),
+          ...(normalizedTraits ? { traits: normalizedTraits } : {}),
+        },
+      });
+    });
+
   return {
     getDistinctId,
     identify,
     initialize,
     reset,
-    syncTraits,
+    setPersonAttributesSync,
   } as const;
 });
 
diff --git a/libraries/web/src/core/networking/api-client.ts b/libraries/web/src/core/networking/api-client.ts
index 1464d8667..40808735f 100644
--- a/libraries/web/src/core/networking/api-client.ts
+++ b/libraries/web/src/core/networking/api-client.ts
@@ -71,7 +71,7 @@ const bindWebSdkClient = (client: VoidhashCoreClient) => ({
         }),
         normalizeFeatureFlagsResponse
       ),
-    getCustomer: (request: { headers: WebSdkHeaders }) =>
+    getPerson: (request: { headers: WebSdkHeaders }) =>
       client.sdkGetPerson(request.headers as SdkGetPersonParams),
     identify: (request: {
       headers: WebSdkHeaders;
@@ -89,7 +89,7 @@ const bindWebSdkClient = (client: VoidhashCoreClient) => ({
         params: request.headers as Parameters<typeof client.sdkResolvePaywall>[0]["params"],
         payload: request.payload,
       }),
-    syncCustomerAttributes: (request: {
+    syncPersonAttributes: (request: {
       headers: WebSdkHeaders;
       payload: SdkSyncPersonAttributesBody;
     }) =>
diff --git a/libraries/web/src/types.ts b/libraries/web/src/types.ts
index 69d43e257..001d749e2 100644
--- a/libraries/web/src/types.ts
+++ b/libraries/web/src/types.ts
@@ -2,6 +2,17 @@ export type VoidhashTraitValue = string | number | boolean | null;
 
 export type VoidhashTraits = Record<string, VoidhashTraitValue>;
 
+/**
+ * Person attributes accepted by `setPersonAttributes` /
+ * `setPersonAttributesSync`. `email` and `name` are reserved fields; every
+ * other key is treated as a free-form person trait.
+ */
+export type VoidhashPersonAttributes = {
+  readonly email?: string;
+  readonly name?: string;
+  readonly [key: string]: VoidhashTraitValue | undefined;
+};
+
 export interface FeatureFlagEntry {
   readonly enabled: boolean;
   readonly key: string;
diff --git a/libraries/web/tests/client.test.ts b/libraries/web/tests/client.test.ts
index aa84c86a0..c3bca7010 100644
--- a/libraries/web/tests/client.test.ts
+++ b/libraries/web/tests/client.test.ts
@@ -50,7 +50,7 @@ describe("VoidhashWebClient", () => {
         );
       }
 
-      if (call.url.endsWith("/sdk/sync-customer-attributes")) {
+      if (call.url.endsWith("/sdk/sync-person-attributes")) {
         return createJsonResponse({});
       }
 
@@ -100,46 +100,45 @@ describe("VoidhashWebClient", () => {
     await client.destroy();
   });
 
-  it("syncs traits before identify and reset identity", async () => {
+  it("flushes queued analytics before identify and reset identity", async () => {
     const { calls } = installFetchMock((call) => {
       if (call.url.endsWith("/sdk/identify")) {
         return createJsonResponse({
-          customerId: "customer_123",
+          personId: "person_123",
           distinctId: "user_123",
           email: null,
           name: null,
         });
       }
 
-      if (call.url.endsWith("/sdk/sync-customer-attributes")) {
-        return createJsonResponse({
-          customerId: "customer_sync",
-          distinctId: "synced",
-          email: null,
-          name: null,
-        });
+      if (call.url.endsWith("/batch")) {
+        return createJsonResponse({ accepted: 1, rejected: 0 }, 202);
       }
 
       return createJsonResponse({});
     });
     const client = createVoidhashClient({
       analytics: {
-        enabled: false,
+        flushIntervalMs: 60_000,
       },
       publishableKey: "vh_pk_test",
     });
 
     await client.initialize();
     const initialDistinctId = client.getDistinctId();
+
+    // Queue an event under the anonymous id, then identify. The pending event
+    // must flush attributed to the pre-switch distinct id.
+    await client.track("checkout_started", { source: "pricing_page" });
     await client.identify("user_123", { companyId: "acme", plan: "pro" });
     await client.reset();
 
-    const syncCalls = calls.filter((call) =>
-      call.url.endsWith("/sdk/person/traits")
-    );
-    const identifyCall = calls.find((call) => call.url.endsWith("/sdk/identify"));
+    // No person-attributes sync endpoint is hit during identify/reset anymore.
+    expect(
+      calls.some((call) => call.url.includes("sync-person-attributes"))
+    ).toBe(false);
 
-    expect(syncCalls[0]?.headers["x-distinct-id"]).toBe(initialDistinctId);
+    const identifyCall = calls.find((call) => call.url.endsWith("/sdk/identify"));
     expect(JSON.parse(identifyCall?.body ?? "{}")).toEqual({
       distinctId: "user_123",
       traits: {
@@ -147,12 +146,112 @@ describe("VoidhashWebClient", () => {
         plan: "pro",
       },
     });
-    expect(syncCalls[1]?.headers["x-distinct-id"]).toBe("user_123");
+
+    // The queued event flushed before the identity switch, attributed to the
+    // original anonymous distinct id.
+    const batchCall = calls.find((call) => call.url.endsWith("/batch"));
+    expect(JSON.parse(batchCall?.body ?? "{}").events?.[0]?.distinct_id).toBe(
+      initialDistinctId
+    );
+
     expect(client.getDistinctId()).toMatch(/^vh:anon:/);
 
     await client.destroy();
   });
 
+  it("setPersonAttributes enqueues a $set event with $process_person_profile", async () => {
+    const { calls } = installFetchMock((call) => {
+      if (call.url.endsWith("/batch")) {
+        return createJsonResponse({ accepted: 1, rejected: 0 }, 202);
+      }
+      return createJsonResponse({});
+    });
+    const client = createVoidhashClient({
+      analytics: {
+        flushIntervalMs: 60_000,
+      },
+      publishableKey: "vh_pk_test",
+    });
+
+    await client.initialize();
+    const distinctId = client.getDistinctId();
+
+    await client.setPersonAttributes({
+      email: "ada@example.com",
+      name: "Ada",
+      plan: "pro",
+    });
+    const flushResult = await client.flushAnalytics();
+
+    expect(flushResult).toEqual({ accepted: 1, rejected: 0 });
+
+    const batchCall = calls.find((call) => call.url.endsWith("/batch"));
+    const event = JSON.parse(batchCall?.body ?? "{}").events?.[0];
+    expect(event).toMatchObject({
+      distinct_id: distinctId,
+      event: "$set",
+      properties: {
+        $process_person_profile: true,
+        $set: {
+          email: "ada@example.com",
+          name: "Ada",
+          plan: "pro",
+        },
+      },
+    });
+
+    await client.destroy();
+  });
+
+  it("setPersonAttributesSync posts attributes and returns the person snapshot", async () => {
+    const { calls } = installFetchMock((call) => {
+      if (call.url.endsWith("/sdk/person/traits")) {
+        return createJsonResponse({
+          personId: "person_sync",
+          distinctId: "synced",
+          email: "ada@example.com",
+          name: "Ada",
+        });
+      }
+      return createJsonResponse({});
+    });
+    const client = createVoidhashClient({
+      analytics: {
+        enabled: false,
+      },
+      publishableKey: "vh_pk_test",
+    });
+
+    await client.initialize();
+    const distinctId = client.getDistinctId();
+
+    const snapshot = await client.setPersonAttributesSync({
+      email: "ada@example.com",
+      name: "Ada",
+      plan: "pro",
+    });
+
+    expect(snapshot).toMatchObject({
+      personId: "person_sync",
+      email: "ada@example.com",
+      name: "Ada",
+    });
+
+    const syncCall = calls.find((call) =>
+      call.url.endsWith("/sdk/person/traits")
+    );
+    expect(syncCall?.headers["x-distinct-id"]).toBe(distinctId);
+    expect(JSON.parse(syncCall?.body ?? "{}")).toEqual({
+      email: "ada@example.com",
+      name: "Ada",
+      traits: {
+        plan: "pro",
+      },
+    });
+
+    await client.destroy();
+  });
+
   it("refreshes tracked feature flags when the browser comes back online", async () => {
     const { calls } = installFetchMock((call) => {
       if (call.url.endsWith("/sdk/evaluate-flags")) {
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
index 06a1dc128..6c8acea43 100644
--- a/packages/generated-clients/src/core/generated.ts
+++ b/packages/generated-clients/src/core/generated.ts
@@ -541,7 +541,9 @@ export interface SdkSyncPersonAttributesParams {
 export interface SdkSyncPersonAttributesBody {
   readonly "email"?: string | null | undefined;
   readonly "name"?: string | null | undefined;
-  readonly "traits"?: Record<string, unknown> | null | undefined
+  readonly "traits"?: Record<string, unknown> | null | undefined;
+  readonly "setOnce"?: Record<string, unknown> | null | undefined;
+  readonly "clientEventId"?: string | null | undefined
 }
 
 export type SdkSyncPersonAttributes400 = ApiSdkValidationError | EffectHttpApiSchemaError

From f97f411013c3d8abab9c651919f6a9a817c4b7cd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 30 Jun 2026 14:13:56 +0200
Subject: [PATCH 027/129] chore: formatting

---
 PAYWALLS-MVP-SERVER-SPEC.md                   |   80 +-
 PAYWALLS-MVP.md                               |   15 +-
 apps/studio/package.json                      |   10 +-
 apps/studio/src/App.tsx                       |   22 +-
 .../src/components/ComponentPreview.tsx       |   14 +-
 apps/studio/src/components/PaywallPreview.tsx |   18 +-
 apps/studio/src/components/PhoneFrame.tsx     |    4 +-
 .../src/components/PreviewErrorBoundary.tsx   |    4 +-
 apps/studio/src/components/Sidebar.tsx        |   24 +-
 apps/studio/src/components/ui/button.tsx      |    3 +-
 apps/studio/src/index.css                     |   10 +-
 apps/studio/src/lib/cn.ts                     |    5 +-
 apps/studio/src/server/config.ts              |    5 +-
 apps/studio/src/server/index.ts               |    4 +-
 .../src/server/virtual-paywalls-plugin.ts     |   18 +-
 apps/studio/src/voidhash/preview-runtime.ts   |    4 +-
 docs/JS-SDK.md                                |   40 +-
 docs/customer-identifier-refactor.md          |   18 +-
 docs/server-first-schema-server-spec.md       |   68 +-
 docs/specs/paywall-deploy-contract.md         |  142 +-
 .../.voidhash/components/canvas.tsx           |    4 +-
 .../.voidhash/components/product-option.tsx   |   16 +-
 .../.voidhash/paywalls/onboarding.tsx         |   21 +-
 .../app/+native-intent.tsx                    |    5 +-
 examples/react-native-example/app/_layout.tsx |   88 +-
 examples/react-native-example/app/index.tsx   |  274 +-
 .../react-native-example/app/menu/paywall.tsx |   18 +-
 .../app/menu/webview-smoke.tsx                |    2 +-
 examples/react-native-example/babel.config.js |   30 +-
 .../react-native-example/components/logo.tsx  |   78 +-
 examples/react-native-example/sst-env.d.ts    |    4 +-
 .../react-native-example/voidhash.config.ts   |    6 +-
 libraries/node/package.json                   |   22 +-
 libraries/node/src/effect-client.ts           |   12 +-
 libraries/node/src/effect.ts                  |    5 +-
 .../node/src/generated/grouped-client.ts      |   67 +-
 libraries/node/src/index.ts                   |    5 +-
 .../node/src/internal/filter-sdk-group.ts     |    2 +-
 .../node/src/internal/json-compatible-api.ts  |   24 +-
 .../src/internal/make-generated-client.ts     |   54 +-
 libraries/node/src/promise-client.ts          |   14 +-
 libraries/node/sst-env.d.ts                   |    4 +-
 libraries/node/tests/client.test.ts           |   69 +-
 libraries/node/tests/helpers.ts               |    4 +-
 libraries/paywalls/README.md                  |   13 +-
 libraries/paywalls/package.json               |   24 +-
 libraries/paywalls/src/authoring/actions.ts   |    8 +-
 .../paywalls/src/authoring/create-paywall.ts  |    8 +-
 .../src/authoring/define-component.tsx        |   25 +-
 libraries/paywalls/src/authoring/manifest.ts  |   50 +-
 libraries/paywalls/src/authoring/props.ts     |   29 +-
 libraries/paywalls/src/dom.tsx                |   16 +-
 libraries/paywalls/src/index.ts               |   19 +-
 .../paywalls/src/primitives/components.tsx    |    8 +-
 libraries/paywalls/src/renderer/dom-host.tsx  |   22 +-
 .../paywalls/src/renderer/error-boundary.tsx  |    5 +-
 .../src/renderer/paywall-renderer.tsx         |    5 +-
 libraries/paywalls/src/runtime/bridge.ts      |   18 +-
 libraries/paywalls/src/runtime/config.ts      |    4 +-
 libraries/paywalls/src/runtime/envelope.ts    |   42 +-
 libraries/paywalls/src/runtime/runtime.tsx    |   34 +-
 .../paywalls/src/schema/component-manifest.ts |    4 +-
 libraries/paywalls/src/schema/style.ts        |   26 +-
 libraries/paywalls/src/style/resolve.ts       |    3 +-
 .../src/tree-renderer/render-to-node-tree.tsx |   63 +-
 .../paywalls/src/tree-renderer/tree-host.ts   |   15 +-
 libraries/paywalls/src/tree.ts                |    5 +-
 libraries/paywalls/tests/envelope.test.ts     |   39 +-
 libraries/paywalls/tests/manifest.test.tsx    |    4 +-
 .../paywalls/tests/observability.test.tsx     |   13 +-
 libraries/paywalls/tests/render.test.tsx      |   15 +-
 libraries/paywalls/tests/style.test.ts        |   74 +-
 libraries/paywalls/tests/tree.test.tsx        |   16 +-
 libraries/paywalls/tests/types.test.ts        |   12 +-
 libraries/react-native/ERROR_HANDLING.md      |   11 +-
 libraries/react-native/README.md              |    8 +-
 libraries/react-native/package.json           |  218 +-
 .../plugin/build/withVoidhashReactNative.js   |    2 +-
 .../plugin/src/withVoidhashReactNative.ts     |    6 +-
 libraries/react-native/src/client-effect.ts   |   53 +-
 .../react-native/src/client-react-native.ts   |    7 +-
 libraries/react-native/src/client.tsx         |   64 +-
 .../src/core/analytics/service.ts             |  153 +-
 .../react-native/src/core/analytics/types.ts  |    4 +-
 .../react-native/src/core/analytics/utils.ts  |    4 +-
 .../src/core/caching/async-storage-cache.ts   |    3 +-
 .../src/core/caching/cache-adapter.ts         |    7 +-
 .../src/core/caching/cache-manager.ts         |   26 +-
 .../react-native/src/core/entities/product.ts |   17 +-
 .../src/core/entities/transaction.ts          |    2 +-
 .../feature-flags/feature-flag-service.ts     |   12 +-
 .../src/core/identity/identity-manager.ts     |   26 +-
 .../core/identity/person-attribute-manager.ts |   14 +-
 .../src/core/identity/person-info-manager.ts  |   23 +-
 .../src/core/lifecycle/lifecycle-adapter.ts   |    2 +-
 .../src/core/lifecycle/lifecycle-service.ts   |   10 +-
 .../react-native-lifecycle-adapter.ts         |    2 +-
 .../react-native/src/core/logging/logger.ts   |    8 +-
 .../src/core/networking/api-client.ts         |   36 +-
 .../src/core/networking/http-debug-client.ts  |   19 +-
 .../payment-adapters/app-store-adapter.ts     |   98 +-
 .../src/core/payment-adapters/errors.ts       |   36 +-
 .../payment-adapters/google-play-adapter.ts   |   79 +-
 .../core/payment-adapters/payment-adapter.ts  |   28 +-
 .../core/paywalls/paywall-runtime-config.ts   |   11 +-
 .../src/core/paywalls/paywall-service.ts      |    8 +-
 .../src/core/platform/platform-provider.ts    |    4 +-
 .../src/core/products/product-service.ts      |   28 +-
 .../src/core/reactivity/client-state.ts       |   19 +-
 .../react-native/src/core/schema/registry.ts  |   21 +-
 .../src/core/schema/schema-manager.ts         |  207 +-
 .../src/core/sdk-configuration.ts             |    7 +-
 .../src/core/testing/payment-adapter.ts       |   38 +-
 .../core/testing/test-platform-provider.ts    |    9 +-
 .../core/transactions/transaction-service.ts  |   97 +-
 libraries/react-native/src/core/types.ts      |    2 +-
 libraries/react-native/src/core/utils.ts      |    9 +-
 .../src/core/utils/get-common-sdk-headers.ts  |    4 +-
 libraries/react-native/src/errors.ts          |    8 +-
 .../src/internal/paywall-bridge/parser.ts     |   43 +-
 .../src/internal/paywall-bridge/protocol.ts   |   34 +-
 .../src/internal/webview/PaywallWebView.tsx   |   80 +-
 .../internal/webview/PaywallWebViewHost.ts    |   18 +-
 .../src/internal/webview/types.ts             |   28 +-
 .../src/internal/webview/utils.ts             |    4 +-
 .../src/internal/webview/whitelist.ts         |    5 +-
 libraries/react-native/src/metro/index.ts     |    8 +-
 libraries/react-native/src/nitro.ts           |   14 +-
 .../src/react/hooks/use-async-function.ts     |    4 +-
 .../src/react/hooks/use-atom-value.ts         |   10 +-
 .../src/react/hooks/use-feature-flags.ts      |   16 +-
 .../react/hooks/use-paywall-by-location.ts    |   69 +-
 .../src/react/hooks/use-person.ts             |   12 +-
 .../src/react/hooks/use-products.ts           |   16 +-
 .../src/react/hooks/use-purchase.ts           |    4 +-
 .../src/specs/PaywallPresenter.nitro.ts       |    2 +-
 .../src/specs/PaywallWebView.nitro.ts         |   17 +-
 .../src/specs/android/GoogleBilling.nitro.ts  |   26 +-
 .../GoogleBillingAcknowledgeResult.nitro.ts   |    5 +-
 .../GoogleBillingConsumeResult.nitro.ts       |    5 +-
 ...illingOneTimePurchaseOfferDetails.nitro.ts |    7 +-
 .../GoogleBillingProductDetail.nitro.ts       |   13 +-
 .../android/GoogleBillingPurchase.nitro.ts    |    5 +-
 ...leBillingSubscriptionOfferDetails.nitro.ts |   11 +-
 .../src/specs/ios/Storekit.nitro.ts           |   10 +-
 ...StorekitProductSubscriptionPeriod.nitro.ts |    6 +-
 libraries/react-native/sst-env.d.ts           |    4 +-
 libraries/react-native/tests/client.test.ts   |   41 +-
 .../tests/core/cache-manager.test.ts          |   58 +-
 .../tests/core/client-effect.test.ts          |  386 +-
 .../tests/core/identity-manager.test.ts       |   42 +-
 .../tests/core/paywall-runtime-config.test.ts |    8 +-
 .../tests/core/person-info-manager.test.ts    |   38 +-
 .../tests/core/schema-manager.test.ts         |   59 +-
 .../tests/helpers/effect-test-harness.ts      |   51 +-
 .../tests/helpers/effect-vitest.ts            |    4 +-
 .../internal/paywall-bridge-configure.test.ts |   17 +-
 .../internal/paywall-bridge-parser.test.ts    |   29 +-
 .../tests/internal/webview-utils.test.ts      |    5 +-
 .../tests/internal/whitelist.test.ts          |    8 +-
 .../react/use-paywall-by-location.test.tsx    |   52 +-
 libraries/react-native/vitest.setup.ts        |   16 +-
 libraries/react-native/vitest.unit.mts        |   18 +-
 libraries/web/package.json                    |   24 +-
 libraries/web/src/client-effect.ts            |   61 +-
 libraries/web/src/client.ts                   |   97 +-
 .../src/core/analytics/analytics-context.ts   |   10 +-
 .../src/core/analytics/analytics-service.ts   |   89 +-
 libraries/web/src/core/analytics/contracts.ts |    5 +-
 .../caching/adapters/browser-cache-adapter.ts |    2 +-
 .../web/src/core/caching/cache-manager.ts     |   21 +-
 libraries/web/src/core/event-bus.ts           |   20 +-
 .../feature-flags/feature-flag-service.ts     |   29 +-
 .../web/src/core/identity/identity-manager.ts |   10 +-
 .../web/src/core/networking/api-client.ts     |   29 +-
 .../networking/event-capture-api-client.ts    |    6 +-
 .../core/networking/json-compatible-api.ts    |   24 +-
 .../platform/browser-platform-provider.ts     |   19 +-
 .../src/core/platform/platform-provider.ts    |    9 +-
 libraries/web/src/core/sdk-configuration.ts   |    7 +-
 .../web/src/react/hooks/use-analytics.ts      |    6 +-
 .../web/src/react/hooks/use-feature-flags.ts  |   15 +-
 libraries/web/src/react/provider.tsx          |    9 +-
 libraries/web/src/types.ts                    |    7 +-
 libraries/web/sst-env.d.ts                    |    4 +-
 libraries/web/tests/analytics.test.ts         |   12 +-
 libraries/web/tests/client.test.ts            |   23 +-
 libraries/web/tests/helpers.ts                |    6 +-
 libraries/web/tests/react.test.tsx            |   61 +-
 package.json                                  |    6 +-
 packages/generated-clients/openapi/core.json  | 4515 ++++++++++++++++-
 .../openapi/event-capture.json                |  381 +-
 .../openapi/preview/core.json                 | 1326 ++---
 .../openapi/preview/event-capture.json        |  128 +-
 .../openapi/production/core.json              | 1326 ++---
 .../openapi/production/event-capture.json     |  128 +-
 .../generated-clients/src/core/generated.ts   | 2406 ++++++---
 .../src/event-capture/generated.ts            |  286 +-
 packages/generated-clients/sst-env.d.ts       |    4 +-
 packages/shared/src/auth.ts                   |   10 +-
 packages/shared/src/deploy-changeset.ts       |    2 +-
 packages/shared/sst-env.d.ts                  |    4 +-
 packages/tsconfig/sst-env.d.ts                |    4 +-
 scripts/generate-node-grouped-client.mjs      |   10 +-
 scripts/generate-openapi-clients.mjs          |    5 +-
 scripts/publish-pr-packages.mjs               |   46 +-
 sst-env.d.ts                                  |    4 +-
 turbo.json                                    |  108 +-
 208 files changed, 9481 insertions(+), 6536 deletions(-)

diff --git a/PAYWALLS-MVP-SERVER-SPEC.md b/PAYWALLS-MVP-SERVER-SPEC.md
index 15158a527..de7742c66 100644
--- a/PAYWALLS-MVP-SERVER-SPEC.md
+++ b/PAYWALLS-MVP-SERVER-SPEC.md
@@ -4,11 +4,11 @@ This document specifies the backend Voidhash must implement so the paywall syste
 (`@voidhash/paywalls`, the Studio, and the `voidhash-cli deploy`/`studio`
 commands) integrates end-to-end. It is the contract between three actors:
 
-| Actor | Role |
-| --- | --- |
-| **CLI** (`voidhash-cli deploy`) | Builds paywalls and **uploads** the deploy payload. |
-| **Server** (this spec) | Stores deploys, serves the live paywall to devices, resolves placements + entitlements. |
-| **Device SDK** (`@voidhash/react-native`) | Presents a paywall in a WebView, **injects** runtime config, handles the **bridge**. |
+| Actor                                     | Role                                                                                    |
+| ----------------------------------------- | --------------------------------------------------------------------------------------- |
+| **CLI** (`voidhash-cli deploy`)           | Builds paywalls and **uploads** the deploy payload.                                     |
+| **Server** (this spec)                    | Stores deploys, serves the live paywall to devices, resolves placements + entitlements. |
+| **Device SDK** (`@voidhash/react-native`) | Presents a paywall in a WebView, **injects** runtime config, handles the **bridge**.    |
 
 The client side is implemented today. Everything marked **[server]** is what this
 task hands off; everything marked **[done]** already exists in this repo and the
@@ -16,10 +16,11 @@ server must remain compatible with it.
 
 > **Source of truth for shapes.** The TypeScript contracts referenced here are
 > real and version-locked:
+>
 > - Deploy payload: [`apps/cli/src/domain/schema/paywall-deploy.ts`](apps/cli/src/domain/schema/paywall-deploy.ts) (`DeployManifest`, `schemaVersion: 1`).
 > - Runtime config: [`libraries/paywalls/src/runtime/config.ts`](libraries/paywalls/src/runtime/config.ts) (`PaywallRuntimeConfig`).
 > - Bridge protocol: [`libraries/paywalls/src/runtime/bridge.ts`](libraries/paywalls/src/runtime/bridge.ts) (`PaywallOutboundMessage`, `PaywallInboundMessage`).
-> The server MUST keep these in sync; bump `schemaVersion` on any breaking change.
+>   The server MUST keep these in sync; bump `schemaVersion` on any breaking change.
 
 ---
 
@@ -32,8 +33,8 @@ server must remain compatible with it.
 - **Asset** — a binary (image/font) referenced by a paywall, content-addressed.
 - **Deploy** — one immutable upload of all paywalls/components/assets for a
   project, produced by `voidhash-cli deploy`.
-- **Placement** (a.k.a. *location*) — a named slot in the app (e.g. `onboarding`,
-  `settings_upgrade`) that the SDK presents. A placement is *assigned* a paywall.
+- **Placement** (a.k.a. _location_) — a named slot in the app (e.g. `onboarding`,
+  `settings_upgrade`) that the SDK presents. A placement is _assigned_ a paywall.
   This indirection is what lets customers swap paywalls without an app release.
 - **Content hash** — lowercase hex SHA-256. Every file and every paywall has one;
   identical content ⇒ identical hash ⇒ dedupe + cache key.
@@ -150,7 +151,7 @@ project root, POSIX-separated):
 {
   "schemaVersion": 1,
   "cliVersion": "0.0.1-alpha.1",
-  "runtimeVersion": "0.0.1-alpha.1",        // @voidhash/paywalls version built against
+  "runtimeVersion": "0.0.1-alpha.1", // @voidhash/paywalls version built against
   "team": "voidhash-dev-sro",
   "project": "dev-proj",
   "createdAt": "2026-06-03T10:00:00.000Z",
@@ -159,22 +160,40 @@ project root, POSIX-separated):
       "id": "onboarding-green",
       "title": "Onboarding (Green)",
       "description": "Full-screen onboarding paywall with selectable plans.",
-      "source":    { "path": ".voidhash/paywalls/onboarding-green.tsx", "bytes": 4096, "sha256": "…" },
+      "source": { "path": ".voidhash/paywalls/onboarding-green.tsx", "bytes": 4096, "sha256": "…" },
       "artifacts": {
-        "html":    { "path": ".voidhash/.build/onboarding-green/index.html", "bytes": 900,   "sha256": "…", "contentType": "text/html; charset=utf-8" },
-        "js":      { "path": ".voidhash/.build/onboarding-green/bundle.js",   "bytes": 201000,"sha256": "…", "contentType": "text/javascript; charset=utf-8" }
+        "html": {
+          "path": ".voidhash/.build/onboarding-green/index.html",
+          "bytes": 900,
+          "sha256": "…",
+          "contentType": "text/html; charset=utf-8",
+        },
+        "js": {
+          "path": ".voidhash/.build/onboarding-green/bundle.js",
+          "bytes": 201000,
+          "sha256": "…",
+          "contentType": "text/javascript; charset=utf-8",
+        },
       },
       "assets": [".voidhash/.build/onboarding-green/assets/hero-AB12CD.png"],
-      "contentHash": "5b00934c90ee…"          // identity of the deployable paywall
-    }
+      "contentHash": "5b00934c90ee…", // identity of the deployable paywall
+    },
   ],
   "components": [
-    { "id": "product-option", "source": { "path": ".voidhash/components/product-option.tsx", "bytes": 1500, "sha256": "…" } }
+    {
+      "id": "product-option",
+      "source": { "path": ".voidhash/components/product-option.tsx", "bytes": 1500, "sha256": "…" },
+    },
   ],
   "config": { "path": "voidhash.config.ts", "bytes": 120, "sha256": "…" },
   "assets": [
-    { "path": ".voidhash/.build/onboarding-green/assets/hero-AB12CD.png", "bytes": 88000, "sha256": "…", "contentType": "image/png" }
-  ]
+    {
+      "path": ".voidhash/.build/onboarding-green/assets/hero-AB12CD.png",
+      "bytes": 88000,
+      "sha256": "…",
+      "contentType": "image/png",
+    },
+  ],
 }
 ```
 
@@ -286,7 +305,7 @@ Before the bundle script runs, the SDK MUST set the global
 WebView this is `injectedJavaScriptBeforeContentLoaded`:
 
 ```js
-`window.__VOIDHASH_PAYWALL__ = ${JSON.stringify(runtime)};`
+`window.__VOIDHASH_PAYWALL__ = ${JSON.stringify(runtime)};`;
 ```
 
 The bundle reads it via `readInjectedConfig()` and exposes it to author code
@@ -306,24 +325,24 @@ back down. The wire format is fixed in
 **Outbound — WebView → native** (delivered via `window.ReactNativeWebView.postMessage(json)`).
 The SDK parses `event.nativeEvent.data` as JSON:
 
-| `type` | Payload | Native action |
-| --- | --- | --- |
-| `voidhash.paywall.ready` | — | Paywall mounted; safe to inject status. |
-| `voidhash.paywall.purchase` | `{ productId }` | Start StoreKit/Billing purchase for `productId`. |
-| `voidhash.paywall.restore` | — | Restore entitlements. |
-| `voidhash.paywall.close` | — | Dismiss the paywall. |
-| `voidhash.paywall.openUrl` | `{ url }` | Open `url` (terms/privacy) in a browser. |
-| `voidhash.paywall.event` | `{ name, properties? }` | Forward to analytics (ties into existing Voidhash analytics). |
+| `type`                      | Payload                 | Native action                                                 |
+| --------------------------- | ----------------------- | ------------------------------------------------------------- |
+| `voidhash.paywall.ready`    | —                       | Paywall mounted; safe to inject status.                       |
+| `voidhash.paywall.purchase` | `{ productId }`         | Start StoreKit/Billing purchase for `productId`.              |
+| `voidhash.paywall.restore`  | —                       | Restore entitlements.                                         |
+| `voidhash.paywall.close`    | —                       | Dismiss the paywall.                                          |
+| `voidhash.paywall.openUrl`  | `{ url }`               | Open `url` (terms/privacy) in a browser.                      |
+| `voidhash.paywall.event`    | `{ name, properties? }` | Forward to analytics (ties into existing Voidhash analytics). |
 
 **Inbound — native → WebView.** The SDK calls the function the runtime installs on
 `window`:
 
 ```js
-webview.injectJavaScript(`window.__voidhashPaywallReceive(${JSON.stringify(msg)});`)
+webview.injectJavaScript(`window.__voidhashPaywallReceive(${JSON.stringify(msg)});`);
 ```
 
-| `type` | Payload |
-| --- | --- |
+| `type`                    | Payload                                                                                                                           |
+| ------------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
 | `voidhash.paywall.status` | `{ status, productId?, error? }` where `status ∈ idle \| purchasing \| restoring \| purchased \| restored \| cancelled \| failed` |
 
 The paywall reflects `status` (e.g. disables the CTA while `purchasing`). On
@@ -404,4 +423,7 @@ placement_assignments(channel_id, placement_id, paywall_content_hash, product_gr
 - [ ] Enforce key scopes (`vh_sk_` deploy, `vh_pk_` resolve) + size/type limits.
 - [ ] Keep `runtime` (resolve) and the bridge message types in lockstep with `@voidhash/paywalls`; bump `schemaVersion` on breaking changes.
 - [ ] Wire the CLI upload: replace the `// Upload` placeholder in `deploy.ts` with the phase-1/2 calls.
+
+```
+
 ```
diff --git a/PAYWALLS-MVP.md b/PAYWALLS-MVP.md
index 58aac8aa4..5313aa024 100644
--- a/PAYWALLS-MVP.md
+++ b/PAYWALLS-MVP.md
@@ -1,28 +1,35 @@
 # Paywalls MVP
 
 ## Context
+
 Voidhash is a Google Play and App Store subscription management platform. It includes analytics, revenue tracking, server side recipe validation and much more.
 
 ## Objective
+
 In this task, we want to add highly requested feature - Paywalls. Similar to Superwall, we want to enable our customers to quickly change and test their paywalls without re-deploying their app. In the future, we will have a GUI paywall builder but for now, we will have fully code driven paywall building experience. For this task, I have scaffolded an MVP version of the code, that will define both paywalls and re-usable components in ./examples/react-native-example (in a .voidhash folder)
 
 ## Paywalls
+
 Paywalls are screens in a mobile app where the app user can purchase something - this could be subscription, one time items etc. Each app needs it's own distinct look and have a different use-case for it. In our MVP, paywalls are code driven and they are defined via a createPaywall. Both paywalls and components will live in .voidhash folder, that will be scaffolded by the CLI. There will be 2 folders - components for re-usable component definitions and paywalls for individual paywall designs.
 
 ## Components
-As mentioned previously, components are re-usable primitives across paywalls. They are mostly designed to add dynamic, interactive logic (carousels, sheets etc.).
 
+As mentioned previously, components are re-usable primitives across paywalls. They are mostly designed to add dynamic, interactive logic (carousels, sheets etc.).
 
 ## How will they work, custom react, renderers
+
 Paywalls will be powered by react. Instead of using react-dom, we will impement our own renderer (that will use HTML DOM under the hood). We want to build a scoped, abstract way for building paywalls to allow as to build native renderers in the future as well. The API will be similar to react-native with View, Text, Pressable, ScrollView etc.
 
 ## Studio
+
 Studio is vite js application, that is ran via our CLI. It previews the paywalls and refreshes in real-time as the paywall changes. There will be a sidepanel on the right with list of all paywalls. We can switch between them. In the middle, there will be 9:16 aspect ratio (phone) preview. It will use tailwind for styling and shadcn for UI primitives.
 
 ## CLI
+
 We need to extend our CLI with few commands
-```voidhash-cli studio``` will launch the paywall preview studio
-```voidhash-cli deploy``` will build and deploy everything to Voidhash
+`voidhash-cli studio` will launch the paywall preview studio
+`voidhash-cli deploy` will build and deploy everything to Voidhash
 
 # Bundling and deployment
-As part of this task, we need to define the entire flow and specify, what will be sent to our server and in what format. Modifying the backend service will be the next task. We need to create final html / js, that will be server and rendered in a mobile webview as the paywall itself. We also want to send the raw source code files to the server (both, components and paywalls) and we need to deploy assets. Create PAYWALLS-MVP-SERVER-SPEC.md that will map all the requirements and protocols the server should implement for it to integrate together well.
\ No newline at end of file
+
+As part of this task, we need to define the entire flow and specify, what will be sent to our server and in what format. Modifying the backend service will be the next task. We need to create final html / js, that will be server and rendered in a mobile webview as the paywall itself. We also want to send the raw source code files to the server (both, components and paywalls) and we need to deploy assets. Create PAYWALLS-MVP-SERVER-SPEC.md that will map all the requirements and protocols the server should implement for it to integrate together well.
diff --git a/apps/studio/package.json b/apps/studio/package.json
index c78ad798e..8d6041b8f 100644
--- a/apps/studio/package.json
+++ b/apps/studio/package.json
@@ -4,6 +4,11 @@
   "private": true,
   "description": "Voidhash paywall preview studio (Vite app launched by the CLI).",
   "license": "MIT",
+  "files": [
+    "src",
+    "index.html",
+    "vite.config.ts"
+  ],
   "type": "module",
   "exports": {
     "./package.json": "./package.json",
@@ -11,11 +16,6 @@
       "import": "./src/server/index.ts"
     }
   },
-  "files": [
-    "src",
-    "index.html",
-    "vite.config.ts"
-  ],
   "scripts": {
     "dev": "vite",
     "build": "vite build",
diff --git a/apps/studio/src/App.tsx b/apps/studio/src/App.tsx
index 03cc3233a..904956406 100644
--- a/apps/studio/src/App.tsx
+++ b/apps/studio/src/App.tsx
@@ -9,8 +9,7 @@ import {
   type PreviewEvent,
 } from "./voidhash/preview-runtime";
 
-const projectName = (root: string): string =>
-  root.replace(/\/+$/, "").split("/").pop() || root;
+const projectName = (root: string): string => root.replace(/\/+$/, "").split("/").pop() || root;
 
 export const App = (): ReactNode => {
   // Recomputed every render so HMR (add/remove/edit paywalls) is reflected.
@@ -25,10 +24,7 @@ export const App = (): ReactNode => {
 
   // Resolve the active paywall, falling back to the first available one so the
   // preview is never empty when paywalls exist.
-  const selected =
-    content.paywalls.find((p) => p.id === selectedId) ??
-    content.paywalls[0] ??
-    null;
+  const selected = content.paywalls.find((p) => p.id === selectedId) ?? content.paywalls[0] ?? null;
 
   const handleSelect = (id: string) => {
     setSelectedId(id);
@@ -40,9 +36,7 @@ export const App = (): ReactNode => {
       <header className="flex items-center justify-between border-neutral-800 border-b px-5 py-3">
         <div className="flex items-baseline gap-2">
           <span className="font-semibold text-sm">Voidhash Studio</span>
-          <span className="text-neutral-500 text-xs">
-            {projectName(content.projectRoot)}
-          </span>
+          <span className="text-neutral-500 text-xs">{projectName(content.projectRoot)}</span>
         </div>
         {selected && (
           <div className="flex items-center gap-3 text-neutral-400 text-xs">
@@ -57,17 +51,11 @@ export const App = (): ReactNode => {
       <div className="flex min-h-0 flex-1">
         <main className="min-w-0 flex-1">
           {selected ? (
-            <PaywallPreview
-              bridge={bridge}
-              config={DEFAULT_PREVIEW_CONFIG}
-              entry={selected}
-            />
+            <PaywallPreview bridge={bridge} config={DEFAULT_PREVIEW_CONFIG} entry={selected} />
           ) : (
             <div className="flex h-full items-center justify-center p-8 text-center text-neutral-500 text-sm">
               Create a paywall in{" "}
-              <code className="mx-1 rounded bg-neutral-800 px-1.5 py-0.5">
-                .voidhash/paywalls
-              </code>{" "}
+              <code className="mx-1 rounded bg-neutral-800 px-1.5 py-0.5">.voidhash/paywalls</code>{" "}
               to preview it here.
             </div>
           )}
diff --git a/apps/studio/src/components/ComponentPreview.tsx b/apps/studio/src/components/ComponentPreview.tsx
index 868a92382..5bfa20659 100644
--- a/apps/studio/src/components/ComponentPreview.tsx
+++ b/apps/studio/src/components/ComponentPreview.tsx
@@ -12,10 +12,7 @@ import {
 import { createElement, type ReactNode } from "react";
 
 import type { AnyComponentDefinition } from "../voidhash/paywalls";
-import {
-  DEFAULT_PREVIEW_CONFIG,
-  SILENT_BRIDGE,
-} from "../voidhash/preview-runtime";
+import { DEFAULT_PREVIEW_CONFIG, SILENT_BRIDGE } from "../voidhash/preview-runtime";
 import { PreviewErrorBoundary } from "./PreviewErrorBoundary";
 
 const PLACEHOLDER_IMAGE = `data:image/svg+xml,${encodeURIComponent(
@@ -23,10 +20,7 @@ const PLACEHOLDER_IMAGE = `data:image/svg+xml,${encodeURIComponent(
 )}`;
 
 /** Best-effort value for a required prop with no fixture and no default. */
-const placeholderValue = (
-  schema: PropSchema,
-  products: ReadonlyArray<PaywallProduct>,
-): unknown => {
+const placeholderValue = (schema: PropSchema, products: ReadonlyArray<PaywallProduct>): unknown => {
   switch (schema.kind) {
     case "string":
       return schema.label ?? "Text";
@@ -103,9 +97,7 @@ export interface ComponentPreviewProps {
  * renderer + runtime providers a real paywall renders under, against the mock
  * Studio config (envelopes go to a silent bridge).
  */
-export const ComponentPreview = ({
-  definition,
-}: ComponentPreviewProps): ReactNode => {
+export const ComponentPreview = ({ definition }: ComponentPreviewProps): ReactNode => {
   const state = defaultPreviewState(definition);
   const config = previewConfig(state);
   const props = buildPreviewProps(definition, state, config.products);
diff --git a/apps/studio/src/components/PaywallPreview.tsx b/apps/studio/src/components/PaywallPreview.tsx
index f7e4efcf4..3e2fc605d 100644
--- a/apps/studio/src/components/PaywallPreview.tsx
+++ b/apps/studio/src/components/PaywallPreview.tsx
@@ -1,8 +1,4 @@
-import {
-  type PaywallBridge,
-  PaywallRenderer,
-  type PaywallRuntimeConfig,
-} from "@voidhash/paywalls";
+import { type PaywallBridge, PaywallRenderer, type PaywallRuntimeConfig } from "@voidhash/paywalls";
 import type { ReactNode } from "react";
 
 import type { PaywallEntry } from "../voidhash/paywalls";
@@ -19,18 +15,10 @@ export interface PaywallPreviewProps {
  * Renders the selected paywall inside the phone frame using the real
  * `@voidhash/paywalls` DOM renderer — the same code path that runs on a device.
  */
-export const PaywallPreview = ({
-  entry,
-  config,
-  bridge,
-}: PaywallPreviewProps): ReactNode => (
+export const PaywallPreview = ({ entry, config, bridge }: PaywallPreviewProps): ReactNode => (
   <PhoneFrame>
     <PreviewErrorBoundary key={entry.id}>
-      <PaywallRenderer
-        bridge={bridge}
-        config={config}
-        paywall={entry.definition}
-      />
+      <PaywallRenderer bridge={bridge} config={config} paywall={entry.definition} />
     </PreviewErrorBoundary>
   </PhoneFrame>
 );
diff --git a/apps/studio/src/components/PhoneFrame.tsx b/apps/studio/src/components/PhoneFrame.tsx
index 626c1796e..b14c7467c 100644
--- a/apps/studio/src/components/PhoneFrame.tsx
+++ b/apps/studio/src/components/PhoneFrame.tsx
@@ -18,9 +18,7 @@ export const PhoneFrame = ({ children }: PhoneFrameProps): ReactNode => (
       {/* Notch */}
       <div className="-translate-x-1/2 pointer-events-none absolute top-0 left-1/2 z-10 h-6 w-32 rounded-b-2xl bg-neutral-950" />
       {/* Screen — the paywall mounts here */}
-      <div className="absolute inset-0 flex flex-col bg-white text-black">
-        {children}
-      </div>
+      <div className="absolute inset-0 flex flex-col bg-white text-black">{children}</div>
       {/* Home indicator */}
       <div className="-translate-x-1/2 pointer-events-none absolute bottom-1.5 left-1/2 z-10 h-1 w-28 rounded-full bg-neutral-900/30" />
     </div>
diff --git a/apps/studio/src/components/PreviewErrorBoundary.tsx b/apps/studio/src/components/PreviewErrorBoundary.tsx
index 23eaef9dd..3b3782961 100644
--- a/apps/studio/src/components/PreviewErrorBoundary.tsx
+++ b/apps/studio/src/components/PreviewErrorBoundary.tsx
@@ -38,9 +38,7 @@ export class PreviewErrorBoundary extends Component<
       }
       return (
         <div className="flex h-full flex-col items-center justify-center gap-2 bg-red-50 p-6 text-center">
-          <p className="font-semibold text-red-700 text-sm">
-            This paywall failed to render
-          </p>
+          <p className="font-semibold text-red-700 text-sm">This paywall failed to render</p>
           <pre className="max-w-full overflow-auto whitespace-pre-wrap text-red-600 text-xs">
             {error.message}
           </pre>
diff --git a/apps/studio/src/components/Sidebar.tsx b/apps/studio/src/components/Sidebar.tsx
index 4e87a65f2..c1e44d201 100644
--- a/apps/studio/src/components/Sidebar.tsx
+++ b/apps/studio/src/components/Sidebar.tsx
@@ -2,11 +2,7 @@ import type { PaywallOutboundEnvelope } from "@voidhash/paywalls";
 import type { ReactNode } from "react";
 
 import { cn } from "../lib/cn";
-import type {
-  ComponentEntry,
-  InvalidEntry,
-  PaywallEntry,
-} from "../voidhash/paywalls";
+import type { ComponentEntry, InvalidEntry, PaywallEntry } from "../voidhash/paywalls";
 import type { PreviewEvent } from "../voidhash/preview-runtime";
 import { ComponentPreview } from "./ComponentPreview";
 
@@ -108,9 +104,7 @@ export const Sidebar = ({
                 key={entry.id}
               >
                 <p className="font-medium text-amber-300 text-xs">{entry.id}</p>
-                <p className="mt-0.5 text-[11px] text-amber-500/80">
-                  {entry.reason}
-                </p>
+                <p className="mt-0.5 text-[11px] text-amber-500/80">{entry.reason}</p>
               </div>
             ))}
           </div>
@@ -122,10 +116,7 @@ export const Sidebar = ({
           <SectionLabel>Components</SectionLabel>
           <div className="flex flex-col gap-2 px-3 pb-2">
             {components.map((c) => (
-              <div
-                className="rounded-md border border-neutral-800 bg-neutral-900/40"
-                key={c.id}
-              >
+              <div className="rounded-md border border-neutral-800 bg-neutral-900/40" key={c.id}>
                 <div className="flex items-baseline justify-between px-2.5 pt-2 pb-1">
                   <span className="font-medium text-neutral-300 text-xs">
                     {c.definition?.title ?? c.id}
@@ -184,14 +175,9 @@ export const Sidebar = ({
                     className="flex items-baseline gap-2 rounded bg-neutral-900 px-2 py-1 font-mono text-[11px]"
                     key={event.key}
                   >
-                    <span className="shrink-0 text-emerald-300">
-                      {event.envelope.type}
-                    </span>
+                    <span className="shrink-0 text-emerald-300">{event.envelope.type}</span>
                     {detail && (
-                      <span
-                        className="truncate text-neutral-400"
-                        title={detail}
-                      >
+                      <span className="truncate text-neutral-400" title={detail}>
                         {detail}
                       </span>
                     )}
diff --git a/apps/studio/src/components/ui/button.tsx b/apps/studio/src/components/ui/button.tsx
index 7b0fbf708..9ba4de22f 100644
--- a/apps/studio/src/components/ui/button.tsx
+++ b/apps/studio/src/components/ui/button.tsx
@@ -9,8 +9,7 @@ const VARIANTS: Record<Variant, string> = {
   default: "bg-emerald-600 text-white hover:bg-emerald-500",
   secondary: "bg-neutral-800 text-neutral-100 hover:bg-neutral-700",
   ghost: "bg-transparent text-neutral-300 hover:bg-neutral-800",
-  outline:
-    "border border-neutral-700 bg-transparent text-neutral-200 hover:bg-neutral-800",
+  outline: "border border-neutral-700 bg-transparent text-neutral-200 hover:bg-neutral-800",
 };
 
 const SIZES: Record<Size, string> = {
diff --git a/apps/studio/src/index.css b/apps/studio/src/index.css
index 86a478822..89ccce3d5 100644
--- a/apps/studio/src/index.css
+++ b/apps/studio/src/index.css
@@ -15,6 +15,12 @@ body,
 
 body {
   font-family:
-    ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Helvetica,
-    Arial, sans-serif;
+    ui-sans-serif,
+    system-ui,
+    -apple-system,
+    "Segoe UI",
+    Roboto,
+    Helvetica,
+    Arial,
+    sans-serif;
 }
diff --git a/apps/studio/src/lib/cn.ts b/apps/studio/src/lib/cn.ts
index 51c61e344..490c98ca2 100644
--- a/apps/studio/src/lib/cn.ts
+++ b/apps/studio/src/lib/cn.ts
@@ -1,4 +1,3 @@
 /** Joins truthy class names. A dependency-free stand-in for `clsx`. */
-export const cn = (
-  ...classes: Array<string | false | null | undefined>
-): string => classes.filter(Boolean).join(" ");
+export const cn = (...classes: Array<string | false | null | undefined>): string =>
+  classes.filter(Boolean).join(" ");
diff --git a/apps/studio/src/server/config.ts b/apps/studio/src/server/config.ts
index cdf7eb1aa..5f6bb58d8 100644
--- a/apps/studio/src/server/config.ts
+++ b/apps/studio/src/server/config.ts
@@ -8,10 +8,7 @@ import type { InlineConfig } from "vite";
 import { voidhashPaywallsPlugin } from "./virtual-paywalls-plugin";
 
 /** Absolute path to the Studio app root (the folder containing `index.html`). */
-export const STUDIO_ROOT = resolve(
-  dirname(fileURLToPath(import.meta.url)),
-  "../..",
-);
+export const STUDIO_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 
 export interface StudioViteConfigOptions {
   /** The user's project root (folder containing `.voidhash`). */
diff --git a/apps/studio/src/server/index.ts b/apps/studio/src/server/index.ts
index 9043bf7c7..067c75096 100644
--- a/apps/studio/src/server/index.ts
+++ b/apps/studio/src/server/index.ts
@@ -32,9 +32,7 @@ export const startStudio = async ({
   projectRoot,
   port = DEFAULT_PORT,
 }: StartStudioOptions): Promise<StudioHandle> => {
-  const server = await createServer(
-    createStudioViteConfig({ projectRoot, port }),
-  );
+  const server = await createServer(createStudioViteConfig({ projectRoot, port }));
 
   await server.listen();
 
diff --git a/apps/studio/src/server/virtual-paywalls-plugin.ts b/apps/studio/src/server/virtual-paywalls-plugin.ts
index 174c10591..7bbb678c8 100644
--- a/apps/studio/src/server/virtual-paywalls-plugin.ts
+++ b/apps/studio/src/server/virtual-paywalls-plugin.ts
@@ -27,11 +27,9 @@ interface SourceEntry {
 // `isSourceFile`, `idFromFile`) so Studio shows exactly what `deploy` ships:
 // recursive scan, same source extensions, id = file basename without extension.
 const isSourceFile = (name: string): boolean =>
-  SOURCE_EXTENSIONS.some((ext) => name.endsWith(ext)) &&
-  !name.endsWith(".d.ts");
+  SOURCE_EXTENSIONS.some((ext) => name.endsWith(ext)) && !name.endsWith(".d.ts");
 
-const idFromFile = (file: string): string =>
-  basename(file).replace(/\.(tsx|jsx|ts|js)$/, "");
+const idFromFile = (file: string): string => basename(file).replace(/\.(tsx|jsx|ts|js)$/, "");
 
 /** Recursively lists files under a directory (absolute paths). */
 const listFilesRecursive = (dir: string): string[] => {
@@ -73,18 +71,14 @@ const generateModule = (
   const componentRefs: string[] = [];
 
   paywalls.forEach((entry, i) => {
-    lines.push(
-      `import * as __pw${i} from ${JSON.stringify(fsImportSpecifier(entry.file))};`,
-    );
+    lines.push(`import * as __pw${i} from ${JSON.stringify(fsImportSpecifier(entry.file))};`);
     paywallRefs.push(
       `{ id: ${JSON.stringify(entry.id)}, file: ${JSON.stringify(entry.file)}, module: __pw${i} }`,
     );
   });
 
   components.forEach((entry, i) => {
-    lines.push(
-      `import * as __cmp${i} from ${JSON.stringify(fsImportSpecifier(entry.file))};`,
-    );
+    lines.push(`import * as __cmp${i} from ${JSON.stringify(fsImportSpecifier(entry.file))};`);
     componentRefs.push(
       `{ id: ${JSON.stringify(entry.id)}, file: ${JSON.stringify(entry.file)}, module: __cmp${i} }`,
     );
@@ -107,9 +101,7 @@ export interface VoidhashPaywallsPluginOptions {
  * file triggers HMR through the static-import graph, while adding or removing a
  * file invalidates the virtual module and reloads so the sidebar stays in sync.
  */
-export const voidhashPaywallsPlugin = ({
-  projectRoot,
-}: VoidhashPaywallsPluginOptions): Plugin => {
+export const voidhashPaywallsPlugin = ({ projectRoot }: VoidhashPaywallsPluginOptions): Plugin => {
   const voidhashDir = join(projectRoot, ".voidhash");
   let server: ViteDevServer | undefined;
 
diff --git a/apps/studio/src/voidhash/preview-runtime.ts b/apps/studio/src/voidhash/preview-runtime.ts
index 306f7609e..a83ef150b 100644
--- a/apps/studio/src/voidhash/preview-runtime.ts
+++ b/apps/studio/src/voidhash/preview-runtime.ts
@@ -71,9 +71,7 @@ let eventCounter = 0;
  * delivers inbound envelopes (`configure`/`response`/`status`), so `subscribe`
  * is a no-op subscription.
  */
-export const createStudioBridge = (
-  onEvent: (event: PreviewEvent) => void,
-): PaywallBridge => ({
+export const createStudioBridge = (onEvent: (event: PreviewEvent) => void): PaywallBridge => ({
   post: (envelope) => {
     eventCounter += 1;
     onEvent({ at: Date.now(), envelope, key: eventCounter });
diff --git a/docs/JS-SDK.md b/docs/JS-SDK.md
index 6890c9b8a..d6f1c6f60 100644
--- a/docs/JS-SDK.md
+++ b/docs/JS-SDK.md
@@ -65,16 +65,16 @@ The web package should expose:
 
 The React Native SDK already gives us the right architectural direction. The web SDK should intentionally mirror the same internal module boundaries where they still make sense.
 
-| React Native concept | Web plan |
-| --- | --- |
-| `createVoidhashClient` entrypoint | Keep a similar factory as the main way to construct the SDK. |
-| Initialization guards in `client.tsx` | Public methods should reject or no-op consistently until initialization completes. |
+| React Native concept                     | Web plan                                                                                      |
+| ---------------------------------------- | --------------------------------------------------------------------------------------------- |
+| `createVoidhashClient` entrypoint        | Keep a similar factory as the main way to construct the SDK.                                  |
+| Initialization guards in `client.tsx`    | Public methods should reject or no-op consistently until initialization completes.            |
 | `client-effect.ts` runtime orchestration | Keep a dedicated internal runtime layer for networking, caching, identity, and feature flags. |
-| `IdentityManager` | Reuse the same anonymous-to-identified user model, adapted to browser storage. |
-| `CacheManager` with TTL support | Keep the same cache semantics, backed by memory plus optional persistent browser storage. |
-| Event bus | Reuse an internal event bus so hooks and client subscribers share the same update path. |
-| `useFeatureFlags` hook | Preserve the same basic return shape and behavior in React. |
-| Shared SDK headers | Reuse the existing header model and fill the browser-compatible subset. |
+| `IdentityManager`                        | Reuse the same anonymous-to-identified user model, adapted to browser storage.                |
+| `CacheManager` with TTL support          | Keep the same cache semantics, backed by memory plus optional persistent browser storage.     |
+| Event bus                                | Reuse an internal event bus so hooks and client subscribers share the same update path.       |
+| `useFeatureFlags` hook                   | Preserve the same basic return shape and behavior in React.                                   |
+| Shared SDK headers                       | Reuse the existing header model and fill the browser-compatible subset.                       |
 
 One important difference: analytics for web will need new implementation work and likely some API-spec additions, because the current React Native SDK does not yet appear to ship an analytics transport.
 
@@ -174,11 +174,7 @@ const enabled = voidhash.isFeatureEnabled("new-checkout");
 ### React Surface
 
 ```ts
-import {
-  VoidhashProvider,
-  useFeatureFlags,
-  useVoidhash,
-} from "@voidhash/web/react";
+import { VoidhashProvider, useFeatureFlags, useVoidhash } from "@voidhash/web/react";
 ```
 
 The React hooks should mirror the React Native ergonomics as closely as possible:
@@ -494,14 +490,14 @@ Documentation should cover:
 
 ## Phased Delivery Plan
 
-| Phase | Scope | Output |
-| --- | --- | --- |
-| 0 | API and package alignment | Confirm `libraries/web`, confirm `@voidhash/web`, finalize analytics API contract in `@voidhash/generated-clients`. |
-| 1 | Core runtime | Create client factory, runtime layer, event bus, identity manager, cache manager, browser platform provider, fetch transport. |
-| 2 | Feature flags | Implement `getFeatureFlags`, caching, refetch behavior, React hook parity, tests. |
-| 3 | Analytics | Implement `track`, `page`, queueing, batching, retrying, page-exit flush, tests. |
-| 4 | React layer and examples | Add provider, hooks, example apps, usage docs. |
-| 5 | Hardening and release | Add observability, edge-case fixes, publishing config, release docs. |
+| Phase | Scope                     | Output                                                                                                                        |
+| ----- | ------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
+| 0     | API and package alignment | Confirm `libraries/web`, confirm `@voidhash/web`, finalize analytics API contract in `@voidhash/generated-clients`.           |
+| 1     | Core runtime              | Create client factory, runtime layer, event bus, identity manager, cache manager, browser platform provider, fetch transport. |
+| 2     | Feature flags             | Implement `getFeatureFlags`, caching, refetch behavior, React hook parity, tests.                                             |
+| 3     | Analytics                 | Implement `track`, `page`, queueing, batching, retrying, page-exit flush, tests.                                              |
+| 4     | React layer and examples  | Add provider, hooks, example apps, usage docs.                                                                                |
+| 5     | Hardening and release     | Add observability, edge-case fixes, publishing config, release docs.                                                          |
 
 ## Decisions To Lock Early
 
diff --git a/docs/customer-identifier-refactor.md b/docs/customer-identifier-refactor.md
index 7fe74b365..e33f3af9f 100644
--- a/docs/customer-identifier-refactor.md
+++ b/docs/customer-identifier-refactor.md
@@ -102,11 +102,11 @@ Target public API:
 await client.identify("user_123", {
   email: "user@example.com",
   name: "User",
-})
+});
 
-await client.reset()
+await client.reset();
 
-const distinctId = await client.getDistinctId()
+const distinctId = await client.getDistinctId();
 ```
 
 Recommended method names:
@@ -141,7 +141,7 @@ The current `vh:anon:` prefix is acceptable if kept consistent, but the importan
 Calling:
 
 ```ts
-await client.identify("user_123")
+await client.identify("user_123");
 ```
 
 means:
@@ -179,11 +179,11 @@ Target response shape:
 
 ```ts
 type SdkCustomer = {
-  customerId: string
-  distinctId: string
-  email: string | null
-  name: string | null
-}
+  customerId: string;
+  distinctId: string;
+  email: string | null;
+  name: string | null;
+};
 ```
 
 If the backend still exposes the customer's primary identified value, it should still be called `distinctId`, not `appUserId`.
diff --git a/docs/server-first-schema-server-spec.md b/docs/server-first-schema-server-spec.md
index ab3b14a87..c738bc9dc 100644
--- a/docs/server-first-schema-server-spec.md
+++ b/docs/server-first-schema-server-spec.md
@@ -54,48 +54,44 @@ indirectly from `voidhash-cli init`).
 
 ```jsonc
 {
-  "version": "sha256:<hex>",      // identical to GET /schema/version below
-  "perks": [
-    { "slug": "all-access", "name": "All Access" }
-  ],
-  "locations": [
-    { "slug": "home", "name": "Home", "description": null }
-  ],
+  "version": "sha256:<hex>", // identical to GET /schema/version below
+  "perks": [{ "slug": "all-access", "name": "All Access" }],
+  "locations": [{ "slug": "home", "name": "Home", "description": null }],
   "products": [
     {
       "slug": "monthly_sub",
       "name": "Monthly",
       "type": "subscription",
-      "perks": ["all-access"],           // perk slugs, not IDs
+      "perks": ["all-access"], // perk slugs, not IDs
       "providers": [
         {
           "providerId": "appleAppStore",
-          "configuration": { "productId": "com.app.monthly" }
+          "configuration": { "productId": "com.app.monthly" },
         },
         {
           "providerId": "googlePlay",
           "configuration": {
             "productId": "com.app.monthly",
-            "basePlanId": "monthly-base"
-          }
-        }
-      ]
-    }
+            "basePlanId": "monthly-base",
+          },
+        },
+      ],
+    },
   ],
-  "enabledProviders": ["appleAppStore", "googlePlay"]
+  "enabledProviders": ["appleAppStore", "googlePlay"],
 }
 ```
 
 **Field-by-field mapping** to the CLI's `NormalizedSchema` (which is the
 intermediate the codegen runs over):
 
-| Server field           | CLI shape (`NormalizedSchema`)        | Notes |
-|------------------------|---------------------------------------|-------|
-| `perks[]`              | `Map<slug, { slug, name }>`           |       |
-| `locations[]`          | `Map<slug, { slug, name, description }>` | `description` is `null` when unset. |
-| `products[]`           | `Map<slug, { slug, name, type, perks[], providers[] }>` | `perks` is an array of perk **slugs**. `providers[].configuration` is provider-shaped. `type` is currently always `"subscription"` (extensible later). |
-| `enabledProviders[]`   | `Set<ProviderId>`                     | `"appleAppStore"` / `"googlePlay"`. Other provider IDs are filtered out client-side; sending them is harmless. |
-| `version`              | derived (see hash spec below)         | Must equal `GET /schema/version`. |
+| Server field         | CLI shape (`NormalizedSchema`)                          | Notes                                                                                                                                                  |
+| -------------------- | ------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `perks[]`            | `Map<slug, { slug, name }>`                             |                                                                                                                                                        |
+| `locations[]`        | `Map<slug, { slug, name, description }>`                | `description` is `null` when unset.                                                                                                                    |
+| `products[]`         | `Map<slug, { slug, name, type, perks[], providers[] }>` | `perks` is an array of perk **slugs**. `providers[].configuration` is provider-shaped. `type` is currently always `"subscription"` (extensible later). |
+| `enabledProviders[]` | `Set<ProviderId>`                                       | `"appleAppStore"` / `"googlePlay"`. Other provider IDs are filtered out client-side; sending them is harmless.                                         |
+| `version`            | derived (see hash spec below)                           | Must equal `GET /schema/version`.                                                                                                                      |
 
 **Caching:** Should set `ETag: "<version>"` and respect
 `If-None-Match` → return 304 when the client's known version matches.
@@ -145,10 +141,10 @@ uses `GET /api/v1/schema`.
 {
   "version": "sha256:<hex>",
   "perks": {
-    "all-access": { "slug": "all-access", "name": "All Access" }
+    "all-access": { "slug": "all-access", "name": "All Access" },
   },
   "locations": {
-    "home": { "slug": "home", "name": "Home", "description": null }
+    "home": { "slug": "home", "name": "Home", "description": null },
   },
   "products": {
     "monthly_sub": {
@@ -161,12 +157,12 @@ uses `GET /api/v1/schema`.
           "appleAppStore": { "productId": "com.app.monthly" },
           "googlePlay": {
             "productId": "com.app.monthly",
-            "basePlanId": "monthly-base"
-          }
-        }
-      }
-    }
-  }
+            "basePlanId": "monthly-base",
+          },
+        },
+      },
+    },
+  },
 }
 ```
 
@@ -271,12 +267,12 @@ sha256:<sha256({"locations":[],"perks":[],"products":[]})>
 
 ## Authentication summary
 
-| Endpoint                       | Session bearer | Publishable key |
-|--------------------------------|:--------------:|:---------------:|
-| `GET /api/v1/schema`           | ✅             | ❌              |
-| `GET /api/v1/schema/version`   | ✅             | ✅              |
-| `GET /sdk/schema`              | ❌             | ✅              |
-| Slug-accepting `/sdk/*`        | ❌             | ✅              |
+| Endpoint                     | Session bearer | Publishable key |
+| ---------------------------- | :------------: | :-------------: |
+| `GET /api/v1/schema`         |       ✅       |       ❌        |
+| `GET /api/v1/schema/version` |       ✅       |       ✅        |
+| `GET /sdk/schema`            |       ❌       |       ✅        |
+| Slug-accepting `/sdk/*`      |       ❌       |       ✅        |
 
 `GET /api/v1/schema/version` accepts both because the CLI uses it during
 `types generate --watch` and the SDK uses it for the dev-mode drift
diff --git a/docs/specs/paywall-deploy-contract.md b/docs/specs/paywall-deploy-contract.md
index f65c3fa80..bff4aa9c7 100644
--- a/docs/specs/paywall-deploy-contract.md
+++ b/docs/specs/paywall-deploy-contract.md
@@ -14,50 +14,83 @@ Produced by `voidhash-cli deploy` at `.voidhash/.build/manifest.json`. Supersede
 {
   "schemaVersion": 2,
   "cliVersion": "0.0.1-alpha.1",
-  "runtimeVersion": "0.0.1-alpha.1",        // @voidhash/paywalls version built against
-  "team": "voidhash-dev-sro",               // organization slug
-  "project": "dev-proj",                    // project slug
+  "runtimeVersion": "0.0.1-alpha.1", // @voidhash/paywalls version built against
+  "team": "voidhash-dev-sro", // organization slug
+  "project": "dev-proj", // project slug
   "createdAt": "2026-06-11T10:00:00.000Z",
 
   "paywalls": [
     {
-      "id": "onboarding",                   // slug, from filename; ^[a-z0-9][a-z0-9-]{0,63}$
+      "id": "onboarding", // slug, from filename; ^[a-z0-9][a-z0-9-]{0,63}$
       "title": "Onboarding",
-      "description": "Full-screen onboarding paywall.",   // optional
-      "products": ["yearly", "monthly"],    // product slugs the paywall uses (may be empty)
-      "variables": { "accentColor": "#16a34a" },          // string|number|boolean values only
-      "source":  { "path": ".voidhash/paywalls/onboarding.tsx", "bytes": 4096, "sha256": "…" },
+      "description": "Full-screen onboarding paywall.", // optional
+      "products": ["yearly", "monthly"], // product slugs the paywall uses (may be empty)
+      "variables": { "accentColor": "#16a34a" }, // string|number|boolean values only
+      "source": { "path": ".voidhash/paywalls/onboarding.tsx", "bytes": 4096, "sha256": "…" },
       "artifacts": {
-        "html": { "path": ".voidhash/.build/paywalls/onboarding/index.html", "bytes": 900,    "sha256": "…", "contentType": "text/html; charset=utf-8" },
-        "js":   { "path": ".voidhash/.build/paywalls/onboarding/bundle.js",  "bytes": 201000, "sha256": "…", "contentType": "text/javascript; charset=utf-8" }
+        "html": {
+          "path": ".voidhash/.build/paywalls/onboarding/index.html",
+          "bytes": 900,
+          "sha256": "…",
+          "contentType": "text/html; charset=utf-8",
+        },
+        "js": {
+          "path": ".voidhash/.build/paywalls/onboarding/bundle.js",
+          "bytes": 201000,
+          "sha256": "…",
+          "contentType": "text/javascript; charset=utf-8",
+        },
       },
-      "assets": [".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png"],  // paths into top-level assets[]
-      "contentHash": "5b00934c90ee…"        // see §1.2
-    }
+      "assets": [".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png"], // paths into top-level assets[]
+      "contentHash": "5b00934c90ee…", // see §1.2
+    },
   ],
 
   "components": [
     {
-      "id": "product-option",               // slug, from filename; same regex as paywall ids
-      "title": "Product Option",            // optional, from definition
-      "source":   { "path": ".voidhash/components/product-option.tsx", "bytes": 1500, "sha256": "…" },
-      "manifest": { "path": ".voidhash/.build/components/product-option/manifest.json", "bytes": 800, "sha256": "…", "contentType": "application/json" },
+      "id": "product-option", // slug, from filename; same regex as paywall ids
+      "title": "Product Option", // optional, from definition
+      "source": { "path": ".voidhash/components/product-option.tsx", "bytes": 1500, "sha256": "…" },
+      "manifest": {
+        "path": ".voidhash/.build/components/product-option/manifest.json",
+        "bytes": 800,
+        "sha256": "…",
+        "contentType": "application/json",
+      },
       "previews": [
-        { "state": "default", "file": { "path": ".voidhash/.build/components/product-option/previews/default.json", "bytes": 2000, "sha256": "…", "contentType": "application/json" } }
+        {
+          "state": "default",
+          "file": {
+            "path": ".voidhash/.build/components/product-option/previews/default.json",
+            "bytes": 2000,
+            "sha256": "…",
+            "contentType": "application/json",
+          },
+        },
       ],
       "artifacts": {
-        "runtime": { "path": ".voidhash/.build/components/product-option/runtime.js", "bytes": 6000, "sha256": "…", "contentType": "text/javascript; charset=utf-8" },
-        "panel":   null                     // or a file entry when the component declares a custom panel
+        "runtime": {
+          "path": ".voidhash/.build/components/product-option/runtime.js",
+          "bytes": 6000,
+          "sha256": "…",
+          "contentType": "text/javascript; charset=utf-8",
+        },
+        "panel": null, // or a file entry when the component declares a custom panel
       },
-      "contentHash": "ab93f1…"              // see §1.2
-    }
+      "contentHash": "ab93f1…", // see §1.2
+    },
   ],
 
   "config": { "path": "voidhash.config.ts", "bytes": 120, "sha256": "…" },
 
   "assets": [
-    { "path": ".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png", "bytes": 88000, "sha256": "…", "contentType": "image/png" }
-  ]
+    {
+      "path": ".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png",
+      "bytes": 88000,
+      "sha256": "…",
+      "contentType": "image/png",
+    },
+  ],
 }
 ```
 
@@ -94,37 +127,37 @@ Emitted per component by the CLI (extracted from `defineComponent` in a local no
 {
   "manifestVersion": 1,
   "id": "product-option",
-  "title": "Product Option",                // optional
-  "description": "…",                       // optional
+  "title": "Product Option", // optional
+  "description": "…", // optional
   "props": {
-    "product":     { "kind": "ref", "refType": "product", "label": "Product", "optional": false },
-    "selected":    { "kind": "boolean", "default": false, "optional": true },
+    "product": { "kind": "ref", "refType": "product", "label": "Product", "optional": false },
+    "selected": { "kind": "boolean", "default": false, "optional": true },
     "accentColor": { "kind": "string", "editor": "color", "default": "#16a34a", "optional": true },
-    "badge":       { "kind": "component", "optional": true },
-    "features":    { "kind": "array", "item": { "kind": "string" }, "optional": true },
-    "plan":        { "kind": "select", "options": ["monthly", "yearly"], "optional": true }
+    "badge": { "kind": "component", "optional": true },
+    "features": { "kind": "array", "item": { "kind": "string" }, "optional": true },
+    "plan": { "kind": "select", "options": ["monthly", "yearly"], "optional": true },
   },
   "actions": {
-    "onSelect": { "payload": { "productId": { "kind": "string" } } }   // payload may be {}
+    "onSelect": { "payload": { "productId": { "kind": "string" } } }, // payload may be {}
   },
-  "slot": true,                             // exactly one <Slot/> allowed per component
+  "slot": true, // exactly one <Slot/> allowed per component
   "previewStates": ["default", "trial"],
-  "hostData": ["products"]                  // which injected runtime data the component reads
+  "hostData": ["products"], // which injected runtime data the component reads
 }
 ```
 
 Prop kinds: `string | number | boolean | select | image | ref | component | array`. Per-kind fields and constraints:
 
-| `kind` | extra fields | `editor` | `default` |
-| --- | --- | --- | --- |
-| `string` | — | allowed (`"color"` for now) | `string` |
-| `number` | — | not allowed | `number` |
-| `boolean` | — | not allowed | `boolean` |
-| `select` | `options`: **non-empty** `string[]` (empty options are a build error in the CLI and rejected at finalize) | not allowed | `string` |
-| `image` | — | not allowed | `string` (URL / asset reference) |
-| `ref` | `refType`: `"product"` only in P1 | not allowed | — |
-| `component` | — | not allowed | — |
-| `array` | `item`: a non-array kind (carries the same per-kind fields) | not allowed | array of scalars matching `item` |
+| `kind`      | extra fields                                                                                              | `editor`                    | `default`                        |
+| ----------- | --------------------------------------------------------------------------------------------------------- | --------------------------- | -------------------------------- |
+| `string`    | —                                                                                                         | allowed (`"color"` for now) | `string`                         |
+| `number`    | —                                                                                                         | not allowed                 | `number`                         |
+| `boolean`   | —                                                                                                         | not allowed                 | `boolean`                        |
+| `select`    | `options`: **non-empty** `string[]` (empty options are a build error in the CLI and rejected at finalize) | not allowed                 | `string`                         |
+| `image`     | —                                                                                                         | not allowed                 | `string` (URL / asset reference) |
+| `ref`       | `refType`: `"product"` only in P1                                                                         | not allowed                 | —                                |
+| `component` | —                                                                                                         | not allowed                 | —                                |
+| `array`     | `item`: a non-array kind (carries the same per-kind fields)                                               | not allowed                 | array of scalars matching `item` |
 
 `editor` is a UI hint and only legal on `string` props — the authoring API enforces this at the type level. Non-JSON-serializable defaults (e.g. React nodes) are omitted from the manifest. A prop with a `default` is always emitted with `optional: true`. All kinds also accept optional `label`, `description`, `optional`.
 
@@ -137,15 +170,15 @@ The component SSR-ed at CLI build time against the preview state's fixtures, ren
   "treeVersion": 1,
   "state": "default",
   "root": {
-    "type": "view",                         // view|text|image|pressable|scroll|slot|placeholder
-    "style": { "flexDirection": "row", "padding": 16 },   // RN-compatible subset, see §3.1
+    "type": "view", // view|text|image|pressable|scroll|slot|placeholder
+    "style": { "flexDirection": "row", "padding": 16 }, // RN-compatible subset, see §3.1
     "children": [
       { "type": "text", "style": { "color": "#fff" }, "text": "Yearly" },
       { "type": "image", "style": {}, "src": "https://…", "resizeMode": "cover" },
-      { "type": "slot" },                   // slot marker — editor mounts children here
-      { "type": "placeholder", "reason": "render returned null" }
-    ]
-  }
+      { "type": "slot" }, // slot marker — editor mounts children here
+      { "type": "placeholder", "reason": "render returned null" },
+    ],
+  },
 }
 ```
 
@@ -196,6 +229,7 @@ POST /api/v1/paywall-deploys/:deployId/finalize
 Finalize is the immutable commit point. Server-side validation (trusts nothing): every referenced blob present; recompute every sha256 + every `contentHash`; schema-validate component manifests (§2) and preview trees (§3) from the stored blobs; enforce §1.1 caps. Any failure → `409 { missing: [...] }` for incompleteness, `422` with details for validation failures; the deploy stays pending and can be retried. On a `409` whose `missing` hashes map back to manifest files, the CLI re-uploads exactly those blobs and retries finalize once; a second failure surfaces as an error. Finalizing an already-`ready` deploy is a fully re-validated no-op: it re-copies the idempotent serving objects and returns the current release/component summaries (releases are reused when the latest released `contentHash` matches, so no new versions are created).
 
 Effects on success, per paywall in the manifest:
+
 1. Upsert a `paywall` row by `(projectId, slug=id)` with `source = code`.
 2. If the latest released release for that paywall already has this `contentHash`, reuse it (no new version). Otherwise create a released `paywall_release` row: `version = max+1`, `s3Key = "p/<contentHash>/index.html"`, `contentHash`, `deployId`, `runtimeConfig = { productSlugs, variables }`, and mark it active (previous active cleared).
 3. Copy blobs into the public serving layout (§5).
@@ -264,15 +298,15 @@ The bundle reads `window.__VOIDHASH_PAYWALL__` (shape below) if set before it ru
 ```ts
 interface PaywallRuntimeConfig {
   products: Array<{
-    id: string;                 // store product id
-    slug: string;               // voidhash product slug
+    id: string; // store product id
+    slug: string; // voidhash product slug
     displayName: string;
     description?: string;
     price?: number;
-    priceString: string;        // locale-correct, from StoreKit/Play Billing
+    priceString: string; // locale-correct, from StoreKit/Play Billing
     currencyCode?: string;
     period?: "month" | "year" | "week" | "lifetime";
-    trialPeriod?: string;       // e.g. "7d"
+    trialPeriod?: string; // e.g. "7d"
   }>;
   variables: Record<string, string | number | boolean>;
   locale?: string;
diff --git a/examples/react-native-example/.voidhash/components/canvas.tsx b/examples/react-native-example/.voidhash/components/canvas.tsx
index 0b4f6c882..54d89a3ab 100644
--- a/examples/react-native-example/.voidhash/components/canvas.tsx
+++ b/examples/react-native-example/.voidhash/components/canvas.tsx
@@ -12,9 +12,7 @@ export default defineComponent({
   }),
   render: ({ props }) => (
     <View style={{ gap: 8, padding: 16 }}>
-      <Text style={{ color: "white", fontSize: 18, fontWeight: "700" }}>
-        {props.title}
-      </Text>
+      <Text style={{ color: "white", fontSize: 18, fontWeight: "700" }}>{props.title}</Text>
       <Slot />
     </View>
   ),
diff --git a/examples/react-native-example/.voidhash/components/product-option.tsx b/examples/react-native-example/.voidhash/components/product-option.tsx
index cbffe53a1..80ee14ea9 100644
--- a/examples/react-native-example/.voidhash/components/product-option.tsx
+++ b/examples/react-native-example/.voidhash/components/product-option.tsx
@@ -1,10 +1,4 @@
-import {
-  defineComponent,
-  type PaywallProduct,
-  Pressable,
-  Text,
-  View,
-} from "@voidhash/paywalls";
+import { defineComponent, type PaywallProduct, Pressable, Text, View } from "@voidhash/paywalls";
 
 const yearlyFixture: PaywallProduct = {
   currencyCode: "USD",
@@ -42,12 +36,8 @@ export default defineComponent({
       onPress={() => actions.onSelect({ productId: props.product.id })}
       style={{
         alignItems: "center",
-        backgroundColor: props.selected
-          ? "rgba(255,255,255,0.10)"
-          : "transparent",
-        borderColor: props.selected
-          ? props.accentColor
-          : "rgba(255,255,255,0.15)",
+        backgroundColor: props.selected ? "rgba(255,255,255,0.10)" : "transparent",
+        borderColor: props.selected ? props.accentColor : "rgba(255,255,255,0.15)",
         borderRadius: 16,
         borderWidth: 2,
         flexDirection: "row",
diff --git a/examples/react-native-example/.voidhash/paywalls/onboarding.tsx b/examples/react-native-example/.voidhash/paywalls/onboarding.tsx
index 35181a4e8..2eea9c1aa 100644
--- a/examples/react-native-example/.voidhash/paywalls/onboarding.tsx
+++ b/examples/react-native-example/.voidhash/paywalls/onboarding.tsx
@@ -24,9 +24,7 @@ export default createPaywall({
     const actions = usePaywallActions();
     const { selectedProductId, selectProduct } = useSelectedProduct();
     const accentColor =
-      typeof variables.accentColor === "string"
-        ? variables.accentColor
-        : "#16a34a";
+      typeof variables.accentColor === "string" ? variables.accentColor : "#16a34a";
 
     return (
       <View
@@ -38,9 +36,7 @@ export default createPaywall({
           padding: 24,
         }}
       >
-        <Text style={{ color: "white", fontSize: 28, fontWeight: "800" }}>
-          Unlock everything
-        </Text>
+        <Text style={{ color: "white", fontSize: 28, fontWeight: "800" }}>Unlock everything</Text>
         <Text style={{ color: "rgba(255,255,255,0.7)", fontSize: 15 }}>
           Unlimited projects, every pro feature, and priority support.
         </Text>
@@ -64,17 +60,10 @@ export default createPaywall({
             padding: 16,
           }}
         >
-          <Text style={{ color: "white", fontSize: 17, fontWeight: "700" }}>
-            Continue
-          </Text>
+          <Text style={{ color: "white", fontSize: 17, fontWeight: "700" }}>Continue</Text>
         </Pressable>
-        <Pressable
-          onPress={() => actions.close()}
-          style={{ alignItems: "center", padding: 8 }}
-        >
-          <Text style={{ color: "rgba(255,255,255,0.6)", fontSize: 14 }}>
-            Not now
-          </Text>
+        <Pressable onPress={() => actions.close()} style={{ alignItems: "center", padding: 8 }}>
+          <Text style={{ color: "rgba(255,255,255,0.6)", fontSize: 14 }}>Not now</Text>
         </Pressable>
       </View>
     );
diff --git a/examples/react-native-example/app/+native-intent.tsx b/examples/react-native-example/app/+native-intent.tsx
index e5a6edb3e..f8856cbab 100644
--- a/examples/react-native-example/app/+native-intent.tsx
+++ b/examples/react-native-example/app/+native-intent.tsx
@@ -1,8 +1,5 @@
 import { expoRouterWithVoidhashCallback } from "@voidhash/react-native";
 
-export function redirectSystemPath(options: {
-  path: string;
-  initial: boolean;
-}) {
+export function redirectSystemPath(options: { path: string; initial: boolean }) {
   return expoRouterWithVoidhashCallback(options);
 }
diff --git a/examples/react-native-example/app/_layout.tsx b/examples/react-native-example/app/_layout.tsx
index 4baef834e..47608c9a1 100644
--- a/examples/react-native-example/app/_layout.tsx
+++ b/examples/react-native-example/app/_layout.tsx
@@ -8,49 +8,49 @@ import { voidhash } from "utils/voidhash/client";
 // SplashScreen.preventAutoHideAsync();
 
 export default function RootLayout() {
-	// useEffect(() => {
-	// 	SplashScreen.hideAsync();
-	// }, []);
+  // useEffect(() => {
+  // 	SplashScreen.hideAsync();
+  // }, []);
 
-	return (
-		<>
-			<voidhash.Provider>
-				<Stack>
-					<Stack.Screen name="index" options={{ headerShown: false }} />
-					<Stack.Screen
-						name="menu/paywall"
-						options={{
-							headerTintColor: "#FFF",
-							headerTitle: "Products",
-							headerTransparent: true,
-						}}
-					/>
-					<Stack.Screen
-						name="menu/customer"
-						options={{
-							headerTintColor: "#FFF",
-							headerTitle: "Customer",
-							headerTransparent: true,
-						}}
-					/>
-					<Stack.Screen
-						name="menu/sign-in"
-						options={{
-							headerTintColor: "#FFF",
-							headerTitle: "Sign in",
-							headerTransparent: true,
-						}}
-					/>
-					<Stack.Screen
-						name="menu/webview-smoke"
-						options={{
-							headerTitle: "WebView Smoke",
-						}}
-					/>
-					<Stack.Screen name="+not-found" />
-				</Stack>
-			</voidhash.Provider>
-			<StatusBar style="auto" />
-		</>
-	);
+  return (
+    <>
+      <voidhash.Provider>
+        <Stack>
+          <Stack.Screen name="index" options={{ headerShown: false }} />
+          <Stack.Screen
+            name="menu/paywall"
+            options={{
+              headerTintColor: "#FFF",
+              headerTitle: "Products",
+              headerTransparent: true,
+            }}
+          />
+          <Stack.Screen
+            name="menu/customer"
+            options={{
+              headerTintColor: "#FFF",
+              headerTitle: "Customer",
+              headerTransparent: true,
+            }}
+          />
+          <Stack.Screen
+            name="menu/sign-in"
+            options={{
+              headerTintColor: "#FFF",
+              headerTitle: "Sign in",
+              headerTransparent: true,
+            }}
+          />
+          <Stack.Screen
+            name="menu/webview-smoke"
+            options={{
+              headerTitle: "WebView Smoke",
+            }}
+          />
+          <Stack.Screen name="+not-found" />
+        </Stack>
+      </voidhash.Provider>
+      <StatusBar style="auto" />
+    </>
+  );
 }
diff --git a/examples/react-native-example/app/index.tsx b/examples/react-native-example/app/index.tsx
index d23a05833..ad3eedd8c 100644
--- a/examples/react-native-example/app/index.tsx
+++ b/examples/react-native-example/app/index.tsx
@@ -8,160 +8,144 @@ import { voidhash } from "utils/voidhash/client";
 import { Logo } from "../components/logo";
 
 export default function HomeScreen() {
-	const router = useRouter();
-	const insets = useSafeAreaInsets();
+  const router = useRouter();
+  const insets = useSafeAreaInsets();
 
-	// Mock authentication
-	const { user, isLoading } = useCurrentUser();
+  // Mock authentication
+  const { user, isLoading } = useCurrentUser();
 
-	// Resets the current identity and signs the example user out.
-	const handleSignOut = async () => {
-		await fakeAuthService.signOut();
-		await voidhash.client.reset();
-	};
+  // Resets the current identity and signs the example user out.
+  const handleSignOut = async () => {
+    await fakeAuthService.signOut();
+    await voidhash.client.reset();
+  };
 
-	// Resets the Voidhash cache. This is useful for testing.
-	const handleResetCache = () => {
-		voidhash.client.resetCache();
-	};
+  // Resets the Voidhash cache. This is useful for testing.
+  const handleResetCache = () => {
+    voidhash.client.resetCache();
+  };
 
-	if (isLoading) {
-		return (
-			<View style={styles.loadingContainer}>
-				<ActivityIndicator />
-			</View>
-		);
-	}
+  if (isLoading) {
+    return (
+      <View style={styles.loadingContainer}>
+        <ActivityIndicator />
+      </View>
+    );
+  }
 
-	const containerStyle = [
-		styles.container,
-		{
-			paddingBottom: Math.max(16, insets.bottom + 16),
-			paddingTop: Math.max(32, insets.top + 32),
-		},
-	];
+  const containerStyle = [
+    styles.container,
+    {
+      paddingBottom: Math.max(16, insets.bottom + 16),
+      paddingTop: Math.max(32, insets.top + 32),
+    },
+  ];
 
-	// If no active subscription, show the paywall
-	return (
-		<View style={containerStyle}>
-			<View style={styles.headerRow}>
-				<Logo height={20} style={styles.logo} variant="symbol" />
-				<Text style={styles.heading}>Playground</Text>
-			</View>
+  // If no active subscription, show the paywall
+  return (
+    <View style={containerStyle}>
+      <View style={styles.headerRow}>
+        <Logo height={20} style={styles.logo} variant="symbol" />
+        <Text style={styles.heading}>Playground</Text>
+      </View>
 
-			<View style={styles.section}>
-				{user && (
-					<>
-						<View style={styles.userCard}>
-							<Image source={user.avatar} style={styles.userAvatar} />
-							<View style={styles.userMeta}>
-								<Text style={styles.userName}>{user.name}</Text>
-								<Text style={styles.userEmail}>{user.email}</Text>
-							</View>
-						</View>
-						<MenuItem onPress={handleSignOut} title="Sign out" />
-					</>
-				)}
+      <View style={styles.section}>
+        {user && (
+          <>
+            <View style={styles.userCard}>
+              <Image source={user.avatar} style={styles.userAvatar} />
+              <View style={styles.userMeta}>
+                <Text style={styles.userName}>{user.name}</Text>
+                <Text style={styles.userEmail}>{user.email}</Text>
+              </View>
+            </View>
+            <MenuItem onPress={handleSignOut} title="Sign out" />
+          </>
+        )}
 
-				<MenuItem
-					isFirst={!user}
-					isLast
-					onPress={() => {
-						router.push("/menu/sign-in");
-					}}
-					title={user ? "Switch account" : "Sign in"}
-				/>
-			</View>
-			<View style={styles.menuSection}>
-				<MenuItem
-					isFirst
-					onPress={() => router.push("/menu/paywall")}
-					title="Paywall"
-				/>
-				<MenuItem
-					onPress={() => router.push("/menu/webview-smoke")}
-					title="WebView smoke"
-				/>
-				<MenuItem
-					isLast
-					onPress={() => router.push("/menu/customer")}
-					title="Customer"
-				/>
-				<View style={styles.subSection}>
-					<MenuItem
-						isFirst
-						isLast
-						onPress={handleResetCache}
-						title="Clear cache"
-					/>
-				</View>
-			</View>
-		</View>
-	);
+        <MenuItem
+          isFirst={!user}
+          isLast
+          onPress={() => {
+            router.push("/menu/sign-in");
+          }}
+          title={user ? "Switch account" : "Sign in"}
+        />
+      </View>
+      <View style={styles.menuSection}>
+        <MenuItem isFirst onPress={() => router.push("/menu/paywall")} title="Paywall" />
+        <MenuItem onPress={() => router.push("/menu/webview-smoke")} title="WebView smoke" />
+        <MenuItem isLast onPress={() => router.push("/menu/customer")} title="Customer" />
+        <View style={styles.subSection}>
+          <MenuItem isFirst isLast onPress={handleResetCache} title="Clear cache" />
+        </View>
+      </View>
+    </View>
+  );
 }
 
 const styles = StyleSheet.create({
-	container: {
-		backgroundColor: "#000000",
-		flex: 1,
-		justifyContent: "space-between",
-		paddingHorizontal: 16,
-	},
-	loadingContainer: {
-		alignItems: "center",
-		flex: 1,
-		justifyContent: "center",
-	},
-	headerRow: {
-		alignItems: "flex-end",
-		columnGap: 12,
-		flexDirection: "row",
-	},
-	logo: {
-		marginTop: 8,
-	},
-	heading: {
-		color: "#FFFFFF",
-		fontSize: 30,
-		fontWeight: "700",
-		marginBottom: 1,
-	},
-	section: {
-		marginTop: 32,
-	},
-	userCard: {
-		alignItems: "center",
-		backgroundColor: "#18181b",
-		borderBottomColor: "#27272a",
-		borderBottomWidth: StyleSheet.hairlineWidth,
-		borderTopLeftRadius: 8,
-		borderTopRightRadius: 8,
-		columnGap: 24,
-		flexDirection: "row",
-		padding: 12,
-	},
-	userMeta: {
-		flex: 1,
-	},
-	userAvatar: {
-		aspectRatio: 1,
-		borderRadius: 8,
-		width: 80,
-	},
-	userName: {
-		color: "#FFFFFF",
-		fontWeight: "600",
-	},
-	userEmail: {
-		color: "#a1a1aa",
-		marginTop: 8,
-	},
-	menuSection: {
-		flex: 1,
-		justifyContent: "flex-start",
-		marginTop: 32,
-	},
-	subSection: {
-		marginTop: 32,
-	},
+  container: {
+    backgroundColor: "#000000",
+    flex: 1,
+    justifyContent: "space-between",
+    paddingHorizontal: 16,
+  },
+  loadingContainer: {
+    alignItems: "center",
+    flex: 1,
+    justifyContent: "center",
+  },
+  headerRow: {
+    alignItems: "flex-end",
+    columnGap: 12,
+    flexDirection: "row",
+  },
+  logo: {
+    marginTop: 8,
+  },
+  heading: {
+    color: "#FFFFFF",
+    fontSize: 30,
+    fontWeight: "700",
+    marginBottom: 1,
+  },
+  section: {
+    marginTop: 32,
+  },
+  userCard: {
+    alignItems: "center",
+    backgroundColor: "#18181b",
+    borderBottomColor: "#27272a",
+    borderBottomWidth: StyleSheet.hairlineWidth,
+    borderTopLeftRadius: 8,
+    borderTopRightRadius: 8,
+    columnGap: 24,
+    flexDirection: "row",
+    padding: 12,
+  },
+  userMeta: {
+    flex: 1,
+  },
+  userAvatar: {
+    aspectRatio: 1,
+    borderRadius: 8,
+    width: 80,
+  },
+  userName: {
+    color: "#FFFFFF",
+    fontWeight: "600",
+  },
+  userEmail: {
+    color: "#a1a1aa",
+    marginTop: 8,
+  },
+  menuSection: {
+    flex: 1,
+    justifyContent: "flex-start",
+    marginTop: 32,
+  },
+  subSection: {
+    marginTop: 32,
+  },
 });
diff --git a/examples/react-native-example/app/menu/paywall.tsx b/examples/react-native-example/app/menu/paywall.tsx
index f5df05c4c..30562313a 100644
--- a/examples/react-native-example/app/menu/paywall.tsx
+++ b/examples/react-native-example/app/menu/paywall.tsx
@@ -24,15 +24,11 @@ export default function PaywallScreen() {
         setStatusMessage("Restore completed");
       },
     }),
-    []
+    [],
   );
 
-  const { show } = voidhash.usePaywallByLocation(
-    PAYWALL_LOCATION_SLUG,
-    paywallOptions
-  );
-  const { data: person, isLoading: isPersonLoading } =
-    voidhash.useCurrentPerson();
+  const { show } = voidhash.usePaywallByLocation(PAYWALL_LOCATION_SLUG, paywallOptions);
+  const { data: person, isLoading: isPersonLoading } = voidhash.useCurrentPerson();
 
   const handleShowPaywall = async () => {
     setIsOpening(true);
@@ -59,13 +55,9 @@ export default function PaywallScreen() {
           Opens a preloaded full-screen paywall rendered by Swift/Kotlin.
         </Text>
         <Text style={styles.location}>Location: {PAYWALL_LOCATION_SLUG}</Text>
-        {statusMessage && (
-          <Text style={styles.statusMessage}>{statusMessage}</Text>
-        )}
+        {statusMessage && <Text style={styles.statusMessage}>{statusMessage}</Text>}
         <Text style={styles.personState}>
-          {isPersonLoading
-            ? "Loading person..."
-            : `Person: ${JSON.stringify(person)}`}
+          {isPersonLoading ? "Loading person..." : `Person: ${JSON.stringify(person)}`}
         </Text>
 
         <Button
diff --git a/examples/react-native-example/app/menu/webview-smoke.tsx b/examples/react-native-example/app/menu/webview-smoke.tsx
index 0cf235100..1357a1ffc 100644
--- a/examples/react-native-example/app/menu/webview-smoke.tsx
+++ b/examples/react-native-example/app/menu/webview-smoke.tsx
@@ -28,7 +28,7 @@ export default function WebViewSmokeScreen() {
         <Button
           onPress={() =>
             ref.current?.injectJavaScript(
-              "window.ReactNativeWebView.postMessage(JSON.stringify({version:1,type:'log',payload:{level:'info',message:'inject ok'}}));"
+              "window.ReactNativeWebView.postMessage(JSON.stringify({version:1,type:'log',payload:{level:'info',message:'inject ok'}}));",
             )
           }
           title="Inject"
diff --git a/examples/react-native-example/babel.config.js b/examples/react-native-example/babel.config.js
index 5f8c26eee..596bf0d32 100644
--- a/examples/react-native-example/babel.config.js
+++ b/examples/react-native-example/babel.config.js
@@ -1,17 +1,17 @@
 module.exports = (api) => {
-	api.cache(true);
-	const plugins = [];
-	return {
-		plugins,
-		presets: [
-			[
-				"babel-preset-expo",
-				{
-					native: {
-						unstable_transformImportMeta: true,
-					},
-				},
-			],
-		],
-	};
+  api.cache(true);
+  const plugins = [];
+  return {
+    plugins,
+    presets: [
+      [
+        "babel-preset-expo",
+        {
+          native: {
+            unstable_transformImportMeta: true,
+          },
+        },
+      ],
+    ],
+  };
 };
diff --git a/examples/react-native-example/components/logo.tsx b/examples/react-native-example/components/logo.tsx
index 06f5dbfed..ed8bdedbf 100644
--- a/examples/react-native-example/components/logo.tsx
+++ b/examples/react-native-example/components/logo.tsx
@@ -4,49 +4,49 @@ import { type StyleProp, View, type ViewStyle } from "react-native";
 import Svg, { Path } from "react-native-svg";
 
 interface LogoProps {
-	style?: StyleProp<ViewStyle>;
-	variant?: "default" | "short" | "symbol";
-	color?: "dual-tone" | "mono";
-	height?: number;
+  style?: StyleProp<ViewStyle>;
+  variant?: "default" | "short" | "symbol";
+  color?: "dual-tone" | "mono";
+  height?: number;
 }
 
 export const Logo: React.FC<LogoProps> = ({
-	style,
-	variant = "default",
-	color = "mono",
-	height = 28,
+  style,
+  variant = "default",
+  color = "mono",
+  height = 28,
 }) => {
-	const currentColor = "#FFF";
-	const symbolColor = color === "dual-tone" ? "#005EFF" : currentColor;
+  const currentColor = "#FFF";
+  const symbolColor = color === "dual-tone" ? "#005EFF" : currentColor;
 
-	if (variant === "symbol") {
-		return (
-			<View style={style}>
-				<Svg height={height} viewBox="0 0 120 61" width={(height * 120) / 61}>
-					{/* Voidhash Symbol Logo */}
-					<Path
-						d="M60 30.5L90 0L120 0L120 30.5L90 30.5V61H60L60 30.5ZM0 30.5L30 30.5L30 0L60 0V30.5L30 61H0V30.5Z"
-						fill={symbolColor}
-					/>
-				</Svg>
-			</View>
-		);
-	}
+  if (variant === "symbol") {
+    return (
+      <View style={style}>
+        <Svg height={height} viewBox="0 0 120 61" width={(height * 120) / 61}>
+          {/* Voidhash Symbol Logo */}
+          <Path
+            d="M60 30.5L90 0L120 0L120 30.5L90 30.5V61H60L60 30.5ZM0 30.5L30 30.5L30 0L60 0V30.5L30 61H0V30.5Z"
+            fill={symbolColor}
+          />
+        </Svg>
+      </View>
+    );
+  }
 
-	// Default and short variants use the full logo
-	return (
-		<View style={style}>
-			<Svg height={height} viewBox="0 0 414 78" width={(height * 414) / 78}>
-				{/* Voidhash Full Logo */}
-				<Path
-					d="M60 39L90 8.5L120 8.5L120 39H90V69.5L60 69.5L60 39ZM0 39H30L30 8.5L60 8.5V39L30 69.5H0V39Z"
-					fill={symbolColor}
-				/>
-				<Path
-					d="M162.631 16.27L175.861 53.377L188.965 16.27H196.273L180.082 61H171.577L155.386 16.27H162.631ZM211.365 61.756C208.173 61.756 205.38 61.042 202.986 59.614C200.592 58.186 198.723 56.17 197.379 53.566C196.077 50.92 195.426 47.833 195.426 44.305C195.426 40.777 196.077 37.711 197.379 35.107C198.723 32.461 200.592 30.424 202.986 28.996C205.38 27.568 208.173 26.854 211.365 26.854C214.515 26.854 217.287 27.568 219.681 28.996C222.075 30.424 223.923 32.461 225.225 35.107C226.569 37.711 227.241 40.777 227.241 44.305C227.241 47.833 226.569 50.92 225.225 53.566C223.923 56.17 222.075 58.186 219.681 59.614C217.287 61.042 214.515 61.756 211.365 61.756ZM211.365 55.96C214.179 55.96 216.363 54.931 217.917 52.873C219.513 50.815 220.311 47.959 220.311 44.305C220.311 40.651 219.513 37.795 217.917 35.737C216.363 33.679 214.179 32.65 211.365 32.65C208.551 32.65 206.346 33.679 204.75 35.737C203.154 37.753 202.356 40.609 202.356 44.305C202.356 48.001 203.154 50.878 204.75 52.936C206.346 54.952 208.551 55.96 211.365 55.96ZM238.404 27.61V61H231.726V27.61H238.404ZM238.593 16.333V22.696H231.6V16.333H238.593ZM268.259 16.27H274.937V61H268.7L268.511 56.212C267.545 57.934 266.138 59.299 264.29 60.307C262.442 61.273 260.384 61.756 258.116 61.756C255.26 61.756 252.761 61.042 250.619 59.614C248.477 58.186 246.839 56.17 245.705 53.566C244.571 50.92 244.004 47.833 244.004 44.305C244.004 40.777 244.571 37.711 245.705 35.107C246.839 32.461 248.477 30.424 250.619 28.996C252.761 27.568 255.26 26.854 258.116 26.854C260.3 26.854 262.295 27.316 264.101 28.24C265.907 29.164 267.293 30.445 268.259 32.083V16.27ZM267.629 50.479C268.385 48.715 268.763 46.657 268.763 44.305C268.763 41.911 268.385 39.811 267.629 38.005C266.915 36.199 265.886 34.813 264.542 33.847C263.198 32.881 261.623 32.398 259.817 32.398C257.087 32.398 254.924 33.49 253.328 35.674C251.732 37.816 250.934 40.693 250.934 44.305C250.934 47.875 251.732 50.731 253.328 52.873C254.966 54.973 257.129 56.023 259.817 56.023C261.623 56.023 263.198 55.54 264.542 54.574C265.886 53.608 266.915 52.243 267.629 50.479ZM287.35 16.27V35.107L286.405 34.792C287.035 32.062 288.316 30.067 290.248 28.807C292.18 27.505 294.49 26.854 297.178 26.854C300.622 26.854 303.352 28.009 305.368 30.319C307.426 32.587 308.455 35.653 308.455 39.517V61H301.777V41.911C301.777 38.845 301.252 36.556 300.202 35.044C299.152 33.532 297.514 32.776 295.288 32.776C292.852 32.776 290.92 33.574 289.492 35.17C288.064 36.724 287.35 38.971 287.35 41.911V61H280.672V16.27H287.35ZM313.941 37.627C314.613 34.267 316.188 31.642 318.666 29.752C321.186 27.82 324.378 26.854 328.242 26.854C332.778 26.854 336.243 28.072 338.637 30.508C341.073 32.944 342.291 36.451 342.291 41.029V53.44C342.291 54.28 342.459 54.889 342.795 55.267C343.173 55.603 343.698 55.771 344.37 55.771H345.693V61H343.614L342.858 61.063C341.052 61.021 339.519 60.643 338.259 59.929C336.999 59.173 336.306 57.808 336.18 55.834C335.34 57.556 333.996 58.984 332.148 60.118C330.3 61.21 328.053 61.756 325.407 61.756C321.963 61.756 319.086 60.895 316.776 59.173C314.508 57.451 313.374 55.141 313.374 52.243C313.374 50.101 313.878 48.379 314.886 47.077C315.894 45.775 317.28 44.767 319.044 44.053C320.808 43.339 323.139 42.709 326.037 42.163L335.613 40.273C335.571 37.585 334.941 35.59 333.723 34.288C332.505 32.944 330.678 32.272 328.242 32.272C326.31 32.272 324.714 32.776 323.454 33.784C322.194 34.75 321.333 36.178 320.871 38.068L313.941 37.627ZM320.304 52.117C320.304 53.419 320.85 54.49 321.942 55.33C323.076 56.17 324.714 56.59 326.856 56.59C328.536 56.548 330.048 56.128 331.392 55.33C332.736 54.532 333.786 53.335 334.542 51.739C335.34 50.101 335.739 48.127 335.739 45.817V45.376L328.62 46.636C328.284 46.678 327.948 46.741 327.612 46.825C325.89 47.119 324.546 47.434 323.58 47.77C322.614 48.064 321.816 48.568 321.186 49.282C320.598 49.954 320.304 50.899 320.304 52.117ZM369.51 38.131C369.174 36.409 368.292 35.023 366.864 33.973C365.436 32.923 363.819 32.398 362.013 32.398C360.249 32.398 358.779 32.839 357.603 33.721C356.427 34.561 355.839 35.695 355.839 37.123C355.881 38.467 356.574 39.517 357.918 40.273C359.304 40.987 361.089 41.575 363.273 42.037C366.297 42.583 368.775 43.255 370.707 44.053C372.639 44.809 374.151 45.859 375.243 47.203C376.335 48.505 376.881 50.206 376.881 52.306C376.881 54.364 376.251 56.107 374.991 57.535C373.773 58.963 372.114 60.034 370.014 60.748C367.956 61.42 365.688 61.756 363.21 61.756C360.396 61.756 357.876 61.294 355.65 60.37C353.424 59.446 351.639 58.144 350.295 56.464C348.993 54.742 348.258 52.747 348.09 50.479L354.957 50.038C355.209 51.298 355.671 52.39 356.343 53.314C357.057 54.238 357.981 54.952 359.115 55.456C360.291 55.96 361.635 56.212 363.147 56.212C364.953 56.212 366.528 55.876 367.872 55.204C369.258 54.49 369.951 53.419 369.951 51.991C369.951 51.025 369.657 50.248 369.069 49.66C368.481 49.072 367.746 48.631 366.864 48.337C366.024 48.043 364.89 47.749 363.462 47.455C363.042 47.329 362.58 47.224 362.076 47.14C359.22 46.51 356.889 45.859 355.083 45.187C353.277 44.473 351.786 43.486 350.61 42.226C349.476 40.966 348.909 39.328 348.909 37.312C348.909 35.17 349.455 33.322 350.547 31.768C351.681 30.172 353.256 28.954 355.272 28.114C357.33 27.274 359.745 26.854 362.517 26.854C366.171 26.854 369.258 27.841 371.778 29.815C374.298 31.789 375.831 34.435 376.377 37.753L369.51 38.131ZM388.054 16.27V35.107L387.109 34.792C387.739 32.062 389.02 30.067 390.952 28.807C392.884 27.505 395.194 26.854 397.882 26.854C401.326 26.854 404.056 28.009 406.072 30.319C408.13 32.587 409.159 35.653 409.159 39.517V61H402.481V41.911C402.481 38.845 401.956 36.556 400.906 35.044C399.856 33.532 398.218 32.776 395.992 32.776C393.556 32.776 391.624 33.574 390.196 35.17C388.768 36.724 388.054 38.971 388.054 41.911V61H381.376V16.27H388.054Z"
-					fill={currentColor}
-				/>
-			</Svg>
-		</View>
-	);
+  // Default and short variants use the full logo
+  return (
+    <View style={style}>
+      <Svg height={height} viewBox="0 0 414 78" width={(height * 414) / 78}>
+        {/* Voidhash Full Logo */}
+        <Path
+          d="M60 39L90 8.5L120 8.5L120 39H90V69.5L60 69.5L60 39ZM0 39H30L30 8.5L60 8.5V39L30 69.5H0V39Z"
+          fill={symbolColor}
+        />
+        <Path
+          d="M162.631 16.27L175.861 53.377L188.965 16.27H196.273L180.082 61H171.577L155.386 16.27H162.631ZM211.365 61.756C208.173 61.756 205.38 61.042 202.986 59.614C200.592 58.186 198.723 56.17 197.379 53.566C196.077 50.92 195.426 47.833 195.426 44.305C195.426 40.777 196.077 37.711 197.379 35.107C198.723 32.461 200.592 30.424 202.986 28.996C205.38 27.568 208.173 26.854 211.365 26.854C214.515 26.854 217.287 27.568 219.681 28.996C222.075 30.424 223.923 32.461 225.225 35.107C226.569 37.711 227.241 40.777 227.241 44.305C227.241 47.833 226.569 50.92 225.225 53.566C223.923 56.17 222.075 58.186 219.681 59.614C217.287 61.042 214.515 61.756 211.365 61.756ZM211.365 55.96C214.179 55.96 216.363 54.931 217.917 52.873C219.513 50.815 220.311 47.959 220.311 44.305C220.311 40.651 219.513 37.795 217.917 35.737C216.363 33.679 214.179 32.65 211.365 32.65C208.551 32.65 206.346 33.679 204.75 35.737C203.154 37.753 202.356 40.609 202.356 44.305C202.356 48.001 203.154 50.878 204.75 52.936C206.346 54.952 208.551 55.96 211.365 55.96ZM238.404 27.61V61H231.726V27.61H238.404ZM238.593 16.333V22.696H231.6V16.333H238.593ZM268.259 16.27H274.937V61H268.7L268.511 56.212C267.545 57.934 266.138 59.299 264.29 60.307C262.442 61.273 260.384 61.756 258.116 61.756C255.26 61.756 252.761 61.042 250.619 59.614C248.477 58.186 246.839 56.17 245.705 53.566C244.571 50.92 244.004 47.833 244.004 44.305C244.004 40.777 244.571 37.711 245.705 35.107C246.839 32.461 248.477 30.424 250.619 28.996C252.761 27.568 255.26 26.854 258.116 26.854C260.3 26.854 262.295 27.316 264.101 28.24C265.907 29.164 267.293 30.445 268.259 32.083V16.27ZM267.629 50.479C268.385 48.715 268.763 46.657 268.763 44.305C268.763 41.911 268.385 39.811 267.629 38.005C266.915 36.199 265.886 34.813 264.542 33.847C263.198 32.881 261.623 32.398 259.817 32.398C257.087 32.398 254.924 33.49 253.328 35.674C251.732 37.816 250.934 40.693 250.934 44.305C250.934 47.875 251.732 50.731 253.328 52.873C254.966 54.973 257.129 56.023 259.817 56.023C261.623 56.023 263.198 55.54 264.542 54.574C265.886 53.608 266.915 52.243 267.629 50.479ZM287.35 16.27V35.107L286.405 34.792C287.035 32.062 288.316 30.067 290.248 28.807C292.18 27.505 294.49 26.854 297.178 26.854C300.622 26.854 303.352 28.009 305.368 30.319C307.426 32.587 308.455 35.653 308.455 39.517V61H301.777V41.911C301.777 38.845 301.252 36.556 300.202 35.044C299.152 33.532 297.514 32.776 295.288 32.776C292.852 32.776 290.92 33.574 289.492 35.17C288.064 36.724 287.35 38.971 287.35 41.911V61H280.672V16.27H287.35ZM313.941 37.627C314.613 34.267 316.188 31.642 318.666 29.752C321.186 27.82 324.378 26.854 328.242 26.854C332.778 26.854 336.243 28.072 338.637 30.508C341.073 32.944 342.291 36.451 342.291 41.029V53.44C342.291 54.28 342.459 54.889 342.795 55.267C343.173 55.603 343.698 55.771 344.37 55.771H345.693V61H343.614L342.858 61.063C341.052 61.021 339.519 60.643 338.259 59.929C336.999 59.173 336.306 57.808 336.18 55.834C335.34 57.556 333.996 58.984 332.148 60.118C330.3 61.21 328.053 61.756 325.407 61.756C321.963 61.756 319.086 60.895 316.776 59.173C314.508 57.451 313.374 55.141 313.374 52.243C313.374 50.101 313.878 48.379 314.886 47.077C315.894 45.775 317.28 44.767 319.044 44.053C320.808 43.339 323.139 42.709 326.037 42.163L335.613 40.273C335.571 37.585 334.941 35.59 333.723 34.288C332.505 32.944 330.678 32.272 328.242 32.272C326.31 32.272 324.714 32.776 323.454 33.784C322.194 34.75 321.333 36.178 320.871 38.068L313.941 37.627ZM320.304 52.117C320.304 53.419 320.85 54.49 321.942 55.33C323.076 56.17 324.714 56.59 326.856 56.59C328.536 56.548 330.048 56.128 331.392 55.33C332.736 54.532 333.786 53.335 334.542 51.739C335.34 50.101 335.739 48.127 335.739 45.817V45.376L328.62 46.636C328.284 46.678 327.948 46.741 327.612 46.825C325.89 47.119 324.546 47.434 323.58 47.77C322.614 48.064 321.816 48.568 321.186 49.282C320.598 49.954 320.304 50.899 320.304 52.117ZM369.51 38.131C369.174 36.409 368.292 35.023 366.864 33.973C365.436 32.923 363.819 32.398 362.013 32.398C360.249 32.398 358.779 32.839 357.603 33.721C356.427 34.561 355.839 35.695 355.839 37.123C355.881 38.467 356.574 39.517 357.918 40.273C359.304 40.987 361.089 41.575 363.273 42.037C366.297 42.583 368.775 43.255 370.707 44.053C372.639 44.809 374.151 45.859 375.243 47.203C376.335 48.505 376.881 50.206 376.881 52.306C376.881 54.364 376.251 56.107 374.991 57.535C373.773 58.963 372.114 60.034 370.014 60.748C367.956 61.42 365.688 61.756 363.21 61.756C360.396 61.756 357.876 61.294 355.65 60.37C353.424 59.446 351.639 58.144 350.295 56.464C348.993 54.742 348.258 52.747 348.09 50.479L354.957 50.038C355.209 51.298 355.671 52.39 356.343 53.314C357.057 54.238 357.981 54.952 359.115 55.456C360.291 55.96 361.635 56.212 363.147 56.212C364.953 56.212 366.528 55.876 367.872 55.204C369.258 54.49 369.951 53.419 369.951 51.991C369.951 51.025 369.657 50.248 369.069 49.66C368.481 49.072 367.746 48.631 366.864 48.337C366.024 48.043 364.89 47.749 363.462 47.455C363.042 47.329 362.58 47.224 362.076 47.14C359.22 46.51 356.889 45.859 355.083 45.187C353.277 44.473 351.786 43.486 350.61 42.226C349.476 40.966 348.909 39.328 348.909 37.312C348.909 35.17 349.455 33.322 350.547 31.768C351.681 30.172 353.256 28.954 355.272 28.114C357.33 27.274 359.745 26.854 362.517 26.854C366.171 26.854 369.258 27.841 371.778 29.815C374.298 31.789 375.831 34.435 376.377 37.753L369.51 38.131ZM388.054 16.27V35.107L387.109 34.792C387.739 32.062 389.02 30.067 390.952 28.807C392.884 27.505 395.194 26.854 397.882 26.854C401.326 26.854 404.056 28.009 406.072 30.319C408.13 32.587 409.159 35.653 409.159 39.517V61H402.481V41.911C402.481 38.845 401.956 36.556 400.906 35.044C399.856 33.532 398.218 32.776 395.992 32.776C393.556 32.776 391.624 33.574 390.196 35.17C388.768 36.724 388.054 38.971 388.054 41.911V61H381.376V16.27H388.054Z"
+          fill={currentColor}
+        />
+      </Svg>
+    </View>
+  );
 };
diff --git a/examples/react-native-example/sst-env.d.ts b/examples/react-native-example/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/examples/react-native-example/sst-env.d.ts
+++ b/examples/react-native-example/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/examples/react-native-example/voidhash.config.ts b/examples/react-native-example/voidhash.config.ts
index 208773e2f..e4386a457 100644
--- a/examples/react-native-example/voidhash.config.ts
+++ b/examples/react-native-example/voidhash.config.ts
@@ -1,6 +1,6 @@
-import { defineConfig } from 'voidhash-cli';
+import { defineConfig } from "voidhash-cli";
 
 export default defineConfig({
-  team: 'voidhash-s-r-o',
-  project: 'react-native-example',
+  team: "voidhash-s-r-o",
+  project: "react-native-example",
 });
diff --git a/libraries/node/package.json b/libraries/node/package.json
index 7fa622b32..b3facef88 100644
--- a/libraries/node/package.json
+++ b/libraries/node/package.json
@@ -4,11 +4,11 @@
   "private": false,
   "description": "Fetch-compatible Voidhash Node SDK.",
   "keywords": [
-    "voidhash",
-    "sdk",
     "node",
+    "payments",
+    "sdk",
     "server",
-    "payments"
+    "voidhash"
   ],
   "homepage": "https://voidhash.com/docs",
   "bugs": {
@@ -21,18 +21,14 @@
     "url": "https://github.com/voidhashcom/voidhash",
     "directory": "libraries/node"
   },
-  "type": "module",
   "files": [
     "dist"
   ],
+  "type": "module",
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.ts",
-  "sideEffects": false,
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
-  },
   "exports": {
     ".": {
       "import": {
@@ -55,6 +51,10 @@
       }
     }
   },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "scripts": {
     "build": "rm -rf ./dist && tsx build.ts",
     "typecheck": "tsgo --noEmit",
@@ -68,11 +68,11 @@
     "@effect/platform": "catalog:",
     "@voidhash/tsconfig": "workspace:*",
     "effect": "catalog:",
+    "tsup": "^6.1.3",
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
     "vite-tsconfig-paths": "catalog:",
-    "vitest": "^3.2.4",
-    "tsup": "^6.1.3"
+    "vitest": "^3.2.4"
   },
   "peerDependencies": {
     "@effect/platform": "catalog:",
diff --git a/libraries/node/src/effect-client.ts b/libraries/node/src/effect-client.ts
index d432bf97d..a5e136a7d 100644
--- a/libraries/node/src/effect-client.ts
+++ b/libraries/node/src/effect-client.ts
@@ -1,19 +1,13 @@
 import { Effect } from "effect";
 
 import type { VoidhashNodeClientOptions } from "./types";
-import {
-  type FilterSdkGroup,
-  filterSdkGroup,
-} from "./internal/filter-sdk-group";
+import { type FilterSdkGroup, filterSdkGroup } from "./internal/filter-sdk-group";
 import {
   makeGeneratedClient,
   type GeneratedVoidhashNodeEffectClient,
 } from "./internal/make-generated-client";
 
-export type VoidhashNodeEffectClient =
-  FilterSdkGroup<GeneratedVoidhashNodeEffectClient>;
+export type VoidhashNodeEffectClient = FilterSdkGroup<GeneratedVoidhashNodeEffectClient>;
 
-export const createVoidhashSdk = (
-  options: VoidhashNodeClientOptions
-): VoidhashNodeEffectClient =>
+export const createVoidhashSdk = (options: VoidhashNodeClientOptions): VoidhashNodeEffectClient =>
   filterSdkGroup(Effect.runSync(makeGeneratedClient(options))) as VoidhashNodeEffectClient;
diff --git a/libraries/node/src/effect.ts b/libraries/node/src/effect.ts
index 27ca5ceb0..84e69deb1 100644
--- a/libraries/node/src/effect.ts
+++ b/libraries/node/src/effect.ts
@@ -1,6 +1,3 @@
 export { VoidhashNodeConfigurationError } from "./errors";
-export {
-  createVoidhashSdk,
-  type VoidhashNodeEffectClient,
-} from "./effect-client";
+export { createVoidhashSdk, type VoidhashNodeEffectClient } from "./effect-client";
 export type { VoidhashNodeClientOptions } from "./types";
diff --git a/libraries/node/src/generated/grouped-client.ts b/libraries/node/src/generated/grouped-client.ts
index 6d0e26185..01a4784a3 100644
--- a/libraries/node/src/generated/grouped-client.ts
+++ b/libraries/node/src/generated/grouped-client.ts
@@ -2,20 +2,28 @@ import type { VoidhashCoreClient } from "@voidhash/generated-clients";
 
 export const groupCoreClient = (client: VoidhashCoreClient) => ({
   apiKeys: {
-    createSecretKey: (request: { payload: Parameters<VoidhashCoreClient["apiKeysCreateSecretKey"]>[0] }) => client.apiKeysCreateSecretKey(request.payload),
-    deleteApiKey: (request: { params: { readonly "apiKeyId": string } }) => client.apiKeysDeleteApiKey(request.params["apiKeyId"]),
-    getApiKeyById: (request: { params: { readonly "apiKeyId": string } }) => client.apiKeysGetApiKeyById(request.params["apiKeyId"]),
+    createSecretKey: (request: {
+      payload: Parameters<VoidhashCoreClient["apiKeysCreateSecretKey"]>[0];
+    }) => client.apiKeysCreateSecretKey(request.payload),
+    deleteApiKey: (request: { params: { readonly apiKeyId: string } }) =>
+      client.apiKeysDeleteApiKey(request.params["apiKeyId"]),
+    getApiKeyById: (request: { params: { readonly apiKeyId: string } }) =>
+      client.apiKeysGetApiKeyById(request.params["apiKeyId"]),
     listApiKeys: () => client.apiKeysListApiKeys(),
-    rotateSecretKey: (request: { params: { readonly "apiKeyId": string } }) => client.apiKeysRotateSecretKey(request.params["apiKeyId"]),
+    rotateSecretKey: (request: { params: { readonly apiKeyId: string } }) =>
+      client.apiKeysRotateSecretKey(request.params["apiKeyId"]),
   },
   auth: {
     session: () => client.authSession(),
   },
   organizations: {
-    createOrganization: (request: { payload: Parameters<VoidhashCoreClient["organizationsCreateOrganization"]>[0] }) => client.organizationsCreateOrganization(request.payload),
+    createOrganization: (request: {
+      payload: Parameters<VoidhashCoreClient["organizationsCreateOrganization"]>[0];
+    }) => client.organizationsCreateOrganization(request.payload),
   },
   paymentProviderConfigurations: {
-    listPaymentProviderConfigurations: () => client.paymentProviderConfigurationsListPaymentProviderConfigurations(),
+    listPaymentProviderConfigurations: () =>
+      client.paymentProviderConfigurationsListPaymentProviderConfigurations(),
   },
   paymentProviderProducts: {
     listPaymentProviderProducts: () => client.paymentProviderProductsListPaymentProviderProducts(),
@@ -27,20 +35,28 @@ export const groupCoreClient = (client: VoidhashCoreClient) => ({
     listPerks: () => client.perksListPerks(),
   },
   persons: {
-    createPerson: (request: { payload: Parameters<VoidhashCoreClient["personsCreatePerson"]>[0] }) => client.personsCreatePerson(request.payload),
-    getPersonByDistinctId: (request: { params: { readonly "distinctId": string } }) => client.personsGetPersonByDistinctId(request.params["distinctId"]),
-    getPersonById: (request: { params: { readonly "personId": string } }) => client.personsGetPersonById(request.params["personId"]),
+    createPerson: (request: {
+      payload: Parameters<VoidhashCoreClient["personsCreatePerson"]>[0];
+    }) => client.personsCreatePerson(request.payload),
+    getPersonByDistinctId: (request: { params: { readonly distinctId: string } }) =>
+      client.personsGetPersonByDistinctId(request.params["distinctId"]),
+    getPersonById: (request: { params: { readonly personId: string } }) =>
+      client.personsGetPersonById(request.params["personId"]),
     listPersons: () => client.personsListPersons(),
   },
   productPerks: {
-    listProductPerksByProductId: (request: { params: { readonly "productId": string } }) => client.productPerksListProductPerksByProductId(request.params["productId"]),
+    listProductPerksByProductId: (request: { params: { readonly productId: string } }) =>
+      client.productPerksListProductPerksByProductId(request.params["productId"]),
   },
   products: {
     listProducts: () => client.productsListProducts(),
   },
   projects: {
-    createProject: (request: { payload: Parameters<VoidhashCoreClient["projectsCreateProject"]>[0] }) => client.projectsCreateProject(request.payload),
-    listProjects: (request: { params: { readonly "organizationId": string } }) => client.projectsListProjects(request.params["organizationId"]),
+    createProject: (request: {
+      payload: Parameters<VoidhashCoreClient["projectsCreateProject"]>[0];
+    }) => client.projectsCreateProject(request.payload),
+    listProjects: (request: { params: { readonly organizationId: string } }) =>
+      client.projectsListProjects(request.params["organizationId"]),
   },
   schema: {
     getSchema: () => client.schemaGetSchema(),
@@ -50,16 +66,27 @@ export const groupCoreClient = (client: VoidhashCoreClient) => ({
     getUser: () => client.usersGetUser(),
   },
   webhooks: {
-    createWebhookEndpoint: (request: { payload: Parameters<VoidhashCoreClient["webhooksCreateWebhookEndpoint"]>[0] }) => client.webhooksCreateWebhookEndpoint(request.payload),
-    deleteWebhookEndpoint: (request: { params: { readonly "endpointId": string } }) => client.webhooksDeleteWebhookEndpoint(request.params["endpointId"]),
-    getWebhookDelivery: (request: { params: { readonly "deliveryId": string } }) => client.webhooksGetWebhookDelivery(request.params["deliveryId"]),
-    getWebhookEndpoint: (request: { params: { readonly "endpointId": string } }) => client.webhooksGetWebhookEndpoint(request.params["endpointId"]),
+    createWebhookEndpoint: (request: {
+      payload: Parameters<VoidhashCoreClient["webhooksCreateWebhookEndpoint"]>[0];
+    }) => client.webhooksCreateWebhookEndpoint(request.payload),
+    deleteWebhookEndpoint: (request: { params: { readonly endpointId: string } }) =>
+      client.webhooksDeleteWebhookEndpoint(request.params["endpointId"]),
+    getWebhookDelivery: (request: { params: { readonly deliveryId: string } }) =>
+      client.webhooksGetWebhookDelivery(request.params["deliveryId"]),
+    getWebhookEndpoint: (request: { params: { readonly endpointId: string } }) =>
+      client.webhooksGetWebhookEndpoint(request.params["endpointId"]),
     listWebhookDeliveries: () => client.webhooksListWebhookDeliveries(),
     listWebhookEndpoints: () => client.webhooksListWebhookEndpoints(),
-    retryWebhookDelivery: (request: { params: { readonly "deliveryId": string } }) => client.webhooksRetryWebhookDelivery(request.params["deliveryId"]),
-    rotateWebhookSecret: (request: { params: { readonly "endpointId": string } }) => client.webhooksRotateWebhookSecret(request.params["endpointId"]),
-    testWebhookEndpoint: (request: { params: { readonly "endpointId": string } }) => client.webhooksTestWebhookEndpoint(request.params["endpointId"]),
-    updateWebhookEndpoint: (request: { params: { readonly "endpointId": string }; payload: Parameters<VoidhashCoreClient["webhooksUpdateWebhookEndpoint"]>[1] }) => client.webhooksUpdateWebhookEndpoint(request.params["endpointId"], request.payload),
+    retryWebhookDelivery: (request: { params: { readonly deliveryId: string } }) =>
+      client.webhooksRetryWebhookDelivery(request.params["deliveryId"]),
+    rotateWebhookSecret: (request: { params: { readonly endpointId: string } }) =>
+      client.webhooksRotateWebhookSecret(request.params["endpointId"]),
+    testWebhookEndpoint: (request: { params: { readonly endpointId: string } }) =>
+      client.webhooksTestWebhookEndpoint(request.params["endpointId"]),
+    updateWebhookEndpoint: (request: {
+      params: { readonly endpointId: string };
+      payload: Parameters<VoidhashCoreClient["webhooksUpdateWebhookEndpoint"]>[1];
+    }) => client.webhooksUpdateWebhookEndpoint(request.params["endpointId"], request.payload),
   },
 });
 
diff --git a/libraries/node/src/index.ts b/libraries/node/src/index.ts
index 2ccbba02e..9fa7c182e 100644
--- a/libraries/node/src/index.ts
+++ b/libraries/node/src/index.ts
@@ -1,6 +1,3 @@
 export { VoidhashNodeConfigurationError } from "./errors";
-export {
-  createVoidhashSdk,
-  type VoidhashNodeClient,
-} from "./promise-client";
+export { createVoidhashSdk, type VoidhashNodeClient } from "./promise-client";
 export type { VoidhashNodeClientOptions } from "./types";
diff --git a/libraries/node/src/internal/filter-sdk-group.ts b/libraries/node/src/internal/filter-sdk-group.ts
index c45eb49b0..588aa342e 100644
--- a/libraries/node/src/internal/filter-sdk-group.ts
+++ b/libraries/node/src/internal/filter-sdk-group.ts
@@ -3,7 +3,7 @@ export type FilterSdkGroup<TClient> = TClient extends { readonly sdk: unknown }
   : TClient;
 
 export const filterSdkGroup = <TClient extends object>(
-  client: TClient
+  client: TClient,
 ): FilterSdkGroup<TClient> => {
   const { sdk: _sdk, ...filteredClient } = client as TClient & {
     readonly sdk?: unknown;
diff --git a/libraries/node/src/internal/json-compatible-api.ts b/libraries/node/src/internal/json-compatible-api.ts
index 837e9e28b..cfb759583 100644
--- a/libraries/node/src/internal/json-compatible-api.ts
+++ b/libraries/node/src/internal/json-compatible-api.ts
@@ -1,14 +1,11 @@
 import { Schema } from "effect";
 import type { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
 
-const cloneWithPrototype = <T extends object>(
-  value: T,
-  properties: Record<string, unknown>
-): T =>
+const cloneWithPrototype = <T extends object>(value: T, properties: Record<string, unknown>): T =>
   Object.assign(Object.create(Object.getPrototypeOf(value)), value, properties) as T;
 
 const mapPayloadSchemas = (
-  payload: HttpApiEndpoint.AnyWithProps["payload"]
+  payload: HttpApiEndpoint.AnyWithProps["payload"],
 ): HttpApiEndpoint.AnyWithProps["payload"] =>
   new Map(
     Array.from(payload.entries(), ([contentType, value]) => [
@@ -17,22 +14,22 @@ const mapPayloadSchemas = (
         ...value,
         schemas: value.schemas.map((schema) => Schema.toCodecJson(schema)) as typeof value.schemas,
       },
-    ])
+    ]),
   );
 
 const mapEndpoint = <TEndpoint extends HttpApiEndpoint.AnyWithProps>(
-  endpoint: TEndpoint
+  endpoint: TEndpoint,
 ): TEndpoint =>
   cloneWithPrototype(endpoint, {
     error: new Set(
-      Array.from(endpoint.error, (schema) => Schema.toCodecJson(schema))
+      Array.from(endpoint.error, (schema) => Schema.toCodecJson(schema)),
     ) as TEndpoint["error"],
     headers: endpoint.headers ? Schema.toCodecJson(endpoint.headers) : undefined,
     params: endpoint.params ? Schema.toCodecJson(endpoint.params) : undefined,
     payload: mapPayloadSchemas(endpoint.payload) as TEndpoint["payload"],
     query: endpoint.query ? Schema.toCodecJson(endpoint.query) : undefined,
     success: new Set(
-      Array.from(endpoint.success, (schema) => Schema.toCodecJson(schema))
+      Array.from(endpoint.success, (schema) => Schema.toCodecJson(schema)),
     ) as TEndpoint["success"],
   });
 
@@ -42,16 +39,15 @@ const mapGroup = <TGroup extends HttpApiGroup.AnyWithProps>(group: TGroup): TGro
       Object.entries(group.endpoints).map(([endpointName, endpoint]) => [
         endpointName,
         mapEndpoint(endpoint as HttpApiEndpoint.AnyWithProps),
-      ])
+      ]),
     ) as TGroup["endpoints"],
   });
 
 export const toJsonCompatibleApi = <TApi extends HttpApi.Any>(api: TApi): TApi =>
   cloneWithPrototype(api, {
     groups: Object.fromEntries(
-      Object.entries((api as TApi & { groups: Record<string, HttpApiGroup.AnyWithProps> }).groups).map(([groupName, group]) => [
-        groupName,
-        mapGroup(group as HttpApiGroup.AnyWithProps),
-      ])
+      Object.entries(
+        (api as TApi & { groups: Record<string, HttpApiGroup.AnyWithProps> }).groups,
+      ).map(([groupName, group]) => [groupName, mapGroup(group as HttpApiGroup.AnyWithProps)]),
     ),
   });
diff --git a/libraries/node/src/internal/make-generated-client.ts b/libraries/node/src/internal/make-generated-client.ts
index 2a940141a..da050dd31 100644
--- a/libraries/node/src/internal/make-generated-client.ts
+++ b/libraries/node/src/internal/make-generated-client.ts
@@ -1,19 +1,9 @@
-import {
-  make as makeCoreClient,
-  type VoidhashCoreClient,
-} from "@voidhash/generated-clients";
+import { make as makeCoreClient, type VoidhashCoreClient } from "@voidhash/generated-clients";
 import { Effect } from "effect";
-import {
-  FetchHttpClient,
-  HttpClient,
-  HttpClientRequest,
-} from "effect/unstable/http";
+import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { VoidhashNodeConfigurationError } from "../errors";
-import {
-  groupCoreClient,
-  type GroupedVoidhashNodeEffectClient,
-} from "../generated/grouped-client";
+import { groupCoreClient, type GroupedVoidhashNodeEffectClient } from "../generated/grouped-client";
 import type { VoidhashNodeClientOptions } from "../types";
 export type GeneratedVoidhashNodeEffectClient = GroupedVoidhashNodeEffectClient;
 
@@ -21,20 +11,16 @@ export const DEFAULT_BASE_URL = "https://api.voidhash.com";
 
 const SECRET_KEY_HEADER = "x-secret-key";
 
-const hasSecretKeyHeader = (
-  headers: Record<string, string | undefined> | undefined
-) =>
-  Object.keys(headers ?? {}).some(
-    (headerName) => headerName.toLowerCase() === SECRET_KEY_HEADER
-  );
+const hasSecretKeyHeader = (headers: Record<string, string | undefined> | undefined) =>
+  Object.keys(headers ?? {}).some((headerName) => headerName.toLowerCase() === SECRET_KEY_HEADER);
 
 const normalizeHeaders = (
-  headers: Record<string, string | undefined> | undefined
+  headers: Record<string, string | undefined> | undefined,
 ): Record<string, string> =>
   Object.fromEntries(
     Object.entries(headers ?? {}).filter(
-      (entry): entry is [string, string] => typeof entry[1] === "string"
-    )
+      (entry): entry is [string, string] => typeof entry[1] === "string",
+    ),
   );
 
 const resolveBaseUrl = (baseUrl: string | undefined) => {
@@ -42,9 +28,7 @@ const resolveBaseUrl = (baseUrl: string | undefined) => {
     const resolved = new URL(baseUrl ?? DEFAULT_BASE_URL);
 
     if (resolved.protocol !== "http:" && resolved.protocol !== "https:") {
-      throw new VoidhashNodeConfigurationError(
-        "baseUrl must use the http or https protocol."
-      );
+      throw new VoidhashNodeConfigurationError("baseUrl must use the http or https protocol.");
     }
 
     return resolved.toString();
@@ -65,15 +49,11 @@ const resolveOptions = (options: VoidhashNodeClientOptions) => {
   }
 
   if (typeof globalThis.fetch !== "function") {
-    throw new VoidhashNodeConfigurationError(
-      "globalThis.fetch must be available."
-    );
+    throw new VoidhashNodeConfigurationError("globalThis.fetch must be available.");
   }
 
   if (hasSecretKeyHeader(options.headers)) {
-    throw new VoidhashNodeConfigurationError(
-      "headers.x-secret-key cannot be set explicitly."
-    );
+    throw new VoidhashNodeConfigurationError("headers.x-secret-key cannot be set explicitly.");
   }
 
   return {
@@ -84,7 +64,7 @@ const resolveOptions = (options: VoidhashNodeClientOptions) => {
 };
 
 export const makeGeneratedClient = (
-  options: VoidhashNodeClientOptions
+  options: VoidhashNodeClientOptions,
 ): Effect.Effect<GeneratedVoidhashNodeEffectClient> => {
   const resolvedOptions = resolveOptions(options);
 
@@ -98,13 +78,13 @@ export const makeGeneratedClient = (
               HttpClientRequest.setHeader(
                 HttpClientRequest.setHeaders(
                   HttpClientRequest.prependUrl(request, resolvedOptions.baseUrl),
-                  resolvedOptions.headers
+                  resolvedOptions.headers,
                 ),
                 SECRET_KEY_HEADER,
-                resolvedOptions.secretKey
-              )
-            )
-          )
+                resolvedOptions.secretKey,
+              ),
+            ),
+          ),
         ),
     });
 
diff --git a/libraries/node/src/promise-client.ts b/libraries/node/src/promise-client.ts
index 37ddfb2f2..5ca547a64 100644
--- a/libraries/node/src/promise-client.ts
+++ b/libraries/node/src/promise-client.ts
@@ -18,7 +18,7 @@ type RuntimePromisifyClient<TClient> = {
 };
 
 const promisifyClient = <TClient extends object>(
-  client: TClient
+  client: TClient,
 ): RuntimePromisifyClient<TClient> => {
   const entries = Object.entries(client).map(([key, value]) => {
     if (typeof value === "function") {
@@ -29,8 +29,8 @@ const promisifyClient = <TClient extends object>(
             Reflect.apply(
               value as (...parameters: Array<unknown>) => Effect.Effect<unknown>,
               client,
-              args
-            )
+              args,
+            ),
           ),
       ];
     }
@@ -47,11 +47,7 @@ const promisifyClient = <TClient extends object>(
 
 export type VoidhashNodeClient = RuntimePromisifyClient<VoidhashNodeEffectClient>;
 
-export const createVoidhashSdk = (
-  options: VoidhashNodeClientOptions
-): VoidhashNodeClient =>
-  promisifyClient(
-    createVoidhashEffectSdk(options)
-  ) as unknown as VoidhashNodeClient;
+export const createVoidhashSdk = (options: VoidhashNodeClientOptions): VoidhashNodeClient =>
+  promisifyClient(createVoidhashEffectSdk(options)) as unknown as VoidhashNodeClient;
 
 export type { VoidhashNodeEffectClient };
diff --git a/libraries/node/sst-env.d.ts b/libraries/node/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/libraries/node/sst-env.d.ts
+++ b/libraries/node/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/libraries/node/tests/client.test.ts b/libraries/node/tests/client.test.ts
index 2ec318158..2c5961abd 100644
--- a/libraries/node/tests/client.test.ts
+++ b/libraries/node/tests/client.test.ts
@@ -1,12 +1,5 @@
 import { Cause, Effect, Exit, Option } from "effect";
-import {
-  afterEach,
-  describe,
-  expect,
-  expectTypeOf,
-  it,
-  vi,
-} from "vitest";
+import { afterEach, describe, expect, expectTypeOf, it, vi } from "vitest";
 
 import {
   VoidhashNodeConfigurationError,
@@ -36,13 +29,9 @@ const EXPECTED_GROUPS = [
   "webhooks",
 ] as const;
 
-type HasKey<TValue, TKey extends PropertyKey> = TKey extends keyof TValue
-  ? true
-  : false;
+type HasKey<TValue, TKey extends PropertyKey> = TKey extends keyof TValue ? true : false;
 
-const extractEffectFailure = async <Result, Error>(
-  effect: Effect.Effect<Result, Error>
-) => {
+const extractEffectFailure = async <Result, Error>(effect: Effect.Effect<Result, Error>) => {
   const exit = await Effect.runPromiseExit(effect);
 
   if (Exit.isSuccess(exit)) {
@@ -51,9 +40,7 @@ const extractEffectFailure = async <Result, Error>(
 
   const typedError = Cause.findErrorOption(exit.cause);
 
-  return Option.isSome(typedError)
-    ? typedError.value
-    : Cause.squash(exit.cause);
+  return Option.isSome(typedError) ? typedError.value : Cause.squash(exit.cause);
 };
 
 describe("@voidhash/node", () => {
@@ -89,14 +76,14 @@ describe("@voidhash/node", () => {
     expect(() =>
       createVoidhashEffectSdk({
         secretKey: "   ",
-      })
+      }),
     ).toThrow(VoidhashNodeConfigurationError);
 
     expect(() =>
       createVoidhashEffectSdk({
         baseUrl: "not a url",
         secretKey: "vh_sk_test",
-      })
+      }),
     ).toThrow(VoidhashNodeConfigurationError);
 
     expect(() =>
@@ -105,7 +92,7 @@ describe("@voidhash/node", () => {
           "x-secret-key": "attempted_override",
         },
         secretKey: "vh_sk_test",
-      })
+      }),
     ).toThrow(VoidhashNodeConfigurationError);
 
     vi.stubGlobal("fetch", undefined);
@@ -113,7 +100,7 @@ describe("@voidhash/node", () => {
     expect(() =>
       createVoidhashSdk({
         secretKey: "vh_sk_test",
-      })
+      }),
     ).toThrow(VoidhashNodeConfigurationError);
   });
 
@@ -124,7 +111,7 @@ describe("@voidhash/node", () => {
         name: "voidhash",
         organizations: [],
         projects: [],
-      })
+      }),
     );
 
     const client = createVoidhashEffectSdk({
@@ -156,7 +143,7 @@ describe("@voidhash/node", () => {
           name: "Alpha",
           slug: "alpha",
         },
-      ])
+      ]),
     );
 
     const client = createVoidhashSdk({
@@ -178,9 +165,7 @@ describe("@voidhash/node", () => {
       },
     ]);
     expect(calls[0]?.method).toBe("GET");
-    expect(calls[0]?.url).toBe(
-      "https://api.voidhash.test/api/v1/projects/org_123"
-    );
+    expect(calls[0]?.url).toBe("https://api.voidhash.test/api/v1/projects/org_123");
     expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
   });
 
@@ -191,7 +176,7 @@ describe("@voidhash/node", () => {
         distinctId: "user_123",
         email: "user@example.com",
         name: "Taylor",
-      })
+      }),
     );
 
     const client = createVoidhashSdk({
@@ -237,7 +222,7 @@ describe("@voidhash/node", () => {
         secret: "secret_123",
         status: "active",
         url: "https://example.com/hooks",
-      })
+      }),
     );
 
     const client = createVoidhashSdk({
@@ -261,9 +246,7 @@ describe("@voidhash/node", () => {
     expect(endpoint.id).toBe("wh_123");
     expect(endpoint.createdAt).toBe("2026-03-09T12:00:00.000Z");
     expect(calls[0]?.method).toBe("PATCH");
-    expect(calls[0]?.url).toBe(
-      "https://api.voidhash.test/api/v1/webhooks/endpoints/wh_123"
-    );
+    expect(calls[0]?.url).toBe("https://api.voidhash.test/api/v1/webhooks/endpoints/wh_123");
     expect(JSON.parse(calls[0]?.body ?? "{}")).toEqual({
       description: "Updated description",
       events: ["purchase.completed"],
@@ -290,9 +273,7 @@ describe("@voidhash/node", () => {
 
     expect(result).toBeUndefined();
     expect(calls[0]?.method).toBe("DELETE");
-    expect(calls[0]?.url).toBe(
-      "https://api.voidhash.test/api/v1/api-keys/ak_123"
-    );
+    expect(calls[0]?.url).toBe("https://api.voidhash.test/api/v1/api-keys/ak_123");
     expect(calls[0]?.headers["x-secret-key"]).toBe("vh_sk_test");
   });
 
@@ -303,7 +284,7 @@ describe("@voidhash/node", () => {
         name: "voidhash",
         organizations: [],
         projects: [],
-      })
+      }),
     );
 
     const effectClient = createVoidhashEffectSdk({
@@ -328,8 +309,8 @@ describe("@voidhash/node", () => {
           _tag: "ActionForbiddenError",
           message: "Forbidden",
         },
-        403
-      )
+        403,
+      ),
     );
 
     const effectClient = createVoidhashEffectSdk({
@@ -342,14 +323,12 @@ describe("@voidhash/node", () => {
     });
 
     const effectError = await extractEffectFailure(effectClient.auth.session());
-    const promiseError = await promiseClient.auth
-      .session()
-      .then(
-        () => {
-          throw new Error("Expected promise client failure.");
-        },
-        (error: unknown) => error
-      );
+    const promiseError = await promiseClient.auth.session().then(
+      () => {
+        throw new Error("Expected promise client failure.");
+      },
+      (error: unknown) => error,
+    );
 
     expect(promiseError).toMatchObject({
       _tag: (effectError as { _tag?: string })._tag,
diff --git a/libraries/node/tests/helpers.ts b/libraries/node/tests/helpers.ts
index 138d1671f..cb847fd18 100644
--- a/libraries/node/tests/helpers.ts
+++ b/libraries/node/tests/helpers.ts
@@ -42,9 +42,7 @@ const fetchMock = vi.fn(async (input: URL | RequestInfo, init?: RequestInit) =>
   return currentHandler(call);
 });
 
-export const installFetchMock = (
-  handler: (call: FetchCall) => Promise<Response> | Response
-) => {
+export const installFetchMock = (handler: (call: FetchCall) => Promise<Response> | Response) => {
   currentCalls = [];
   currentHandler = handler;
   fetchMock.mockClear();
diff --git a/libraries/paywalls/README.md b/libraries/paywalls/README.md
index c3d83f59e..2deb8fa8d 100644
--- a/libraries/paywalls/README.md
+++ b/libraries/paywalls/README.md
@@ -24,7 +24,10 @@ function Body() {
   return (
     <View style={{ flex: 1, padding: 24, justifyContent: "flex-end" }}>
       <Text style={{ fontSize: 28, fontWeight: "700" }}>Go Pro</Text>
-      <Pressable onPress={() => purchase()} style={{ backgroundColor: "#16a34a", padding: 16, borderRadius: 12 }}>
+      <Pressable
+        onPress={() => purchase()}
+        style={{ backgroundColor: "#16a34a", padding: 16, borderRadius: 12 }}
+      >
         <Text style={{ color: "white", textAlign: "center" }}>Subscribe</Text>
       </Pressable>
     </View>
@@ -57,7 +60,13 @@ export const definition = defineComponent({
     onSelect: a.action({ productId: a.string() }),
   }),
   previews: {
-    default: { data: { products: [/* fixture products */] } },
+    default: {
+      data: {
+        products: [
+          /* fixture products */
+        ],
+      },
+    },
   },
   render: ({ props, actions }) => (
     <Pressable onPress={actions.onSelect} style={{ borderColor: props.accentColor }}>
diff --git a/libraries/paywalls/package.json b/libraries/paywalls/package.json
index 943a5a1b9..5e68038b0 100644
--- a/libraries/paywalls/package.json
+++ b/libraries/paywalls/package.json
@@ -4,11 +4,11 @@
   "private": false,
   "description": "Code-driven paywall authoring runtime and renderer for Voidhash.",
   "keywords": [
-    "voidhash",
     "paywalls",
     "react",
     "renderer",
-    "subscriptions"
+    "subscriptions",
+    "voidhash"
   ],
   "homepage": "https://voidhash.com/docs",
   "bugs": {
@@ -21,18 +21,14 @@
     "url": "https://github.com/voidhashcom/voidhash",
     "directory": "libraries/paywalls"
   },
-  "type": "module",
   "files": [
     "dist"
   ],
+  "type": "module",
+  "sideEffects": false,
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.ts",
-  "sideEffects": false,
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
-  },
   "exports": {
     ".": {
       "import": {
@@ -75,6 +71,10 @@
       }
     }
   },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "scripts": {
     "build": "rm -rf ./dist && tsx build.ts",
     "typecheck": "tsgo --noEmit",
@@ -84,10 +84,6 @@
   "dependencies": {
     "react-reconciler": "^0.32.0"
   },
-  "peerDependencies": {
-    "react": ">=18",
-    "react-dom": ">=18"
-  },
   "devDependencies": {
     "@types/react": "catalog:",
     "@types/react-dom": "catalog:",
@@ -98,5 +94,9 @@
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
     "vitest": "^3.0.9"
+  },
+  "peerDependencies": {
+    "react": ">=18",
+    "react-dom": ">=18"
   }
 }
diff --git a/libraries/paywalls/src/authoring/actions.ts b/libraries/paywalls/src/authoring/actions.ts
index 927d2a600..e1965f34e 100644
--- a/libraries/paywalls/src/authoring/actions.ts
+++ b/libraries/paywalls/src/authoring/actions.ts
@@ -49,12 +49,8 @@ export interface ActionFactory {
 }
 
 function buildAction(): ActionBuilder<undefined>;
-function buildAction<S extends ActionPayloadShape>(
-  payload: S,
-): ActionBuilder<S>;
-function buildAction<S extends ActionPayloadShape>(
-  payload?: S,
-): ActionBuilder<S | undefined> {
+function buildAction<S extends ActionPayloadShape>(payload: S): ActionBuilder<S>;
+function buildAction<S extends ActionPayloadShape>(payload?: S): ActionBuilder<S | undefined> {
   return new ActionBuilder<S | undefined>(payload);
 }
 
diff --git a/libraries/paywalls/src/authoring/create-paywall.ts b/libraries/paywalls/src/authoring/create-paywall.ts
index 395bfd291..98074edcc 100644
--- a/libraries/paywalls/src/authoring/create-paywall.ts
+++ b/libraries/paywalls/src/authoring/create-paywall.ts
@@ -52,9 +52,7 @@ export interface PaywallDefinition extends CreatePaywallInput {
  * });
  * ```
  */
-export const createPaywall = (
-  input: CreatePaywallInput,
-): PaywallDefinition => ({
+export const createPaywall = (input: CreatePaywallInput): PaywallDefinition => ({
   ...input,
   __voidhash: {
     kind: "paywall",
@@ -66,9 +64,7 @@ export const createPaywall = (
 });
 
 /** Type guard for a {@link PaywallDefinition}. */
-export const isPaywallDefinition = (
-  value: unknown,
-): value is PaywallDefinition =>
+export const isPaywallDefinition = (value: unknown): value is PaywallDefinition =>
   typeof value === "object" &&
   value !== null &&
   (value as { __voidhash?: PaywallMeta }).__voidhash?.kind === "paywall";
diff --git a/libraries/paywalls/src/authoring/define-component.tsx b/libraries/paywalls/src/authoring/define-component.tsx
index 395b7e91f..f6afd3ebd 100644
--- a/libraries/paywalls/src/authoring/define-component.tsx
+++ b/libraries/paywalls/src/authoring/define-component.tsx
@@ -31,10 +31,7 @@ export interface ComponentPreviewState<M extends PropMap> {
 }
 
 /** The context object a component template receives. */
-export interface ComponentRenderContext<
-  M extends PropMap,
-  A extends ActionMap,
-> {
+export interface ComponentRenderContext<M extends PropMap, A extends ActionMap> {
   readonly props: InferProps<M>;
   readonly actions: InferActions<A>;
 }
@@ -44,10 +41,8 @@ export interface ComponentRenderContext<
  * `.optional()`/`.default()`), one optional handler per declared action, and
  * children (surfaced at the template's `<Slot />`).
  */
-export type InferComponentProps<
-  M extends PropMap,
-  A extends ActionMap,
-> = InferExternalProps<M> & ActionHandlerProps<A> & { children?: ReactNode };
+export type InferComponentProps<M extends PropMap, A extends ActionMap> = InferExternalProps<M> &
+  ActionHandlerProps<A> & { children?: ReactNode };
 
 /** The renderable React component produced by {@link defineComponent}. */
 export type PaywallComponent<M extends PropMap, A extends ActionMap> = (
@@ -142,16 +137,9 @@ export const defineComponent = <
     const handlersRef = useRef<Record<string, unknown>>(rest);
     // Keep the latest handlers readable from the stable action callbacks.
     handlersRef.current = rest;
-    const actions = useMemo(
-      () => buildActionCallbacks(actionMap, () => handlersRef.current),
-      [],
-    );
+    const actions = useMemo(() => buildActionCallbacks(actionMap, () => handlersRef.current), []);
     const props = applyPropDefaults(propMap, rest);
-    return (
-      <SlotProvider value={children ?? null}>
-        {render({ actions, props })}
-      </SlotProvider>
-    );
+    return <SlotProvider value={children ?? null}>{render({ actions, props })}</SlotProvider>;
   };
   Component.displayName = input.title ?? input.id;
 
@@ -180,7 +168,6 @@ export const isComponentDefinition = (
 ): value is ComponentDefinition<PropMap, ActionMap> =>
   typeof value === "object" &&
   value !== null &&
-  (value as { __voidhash?: PaywallComponentMeta }).__voidhash?.kind ===
-    "component" &&
+  (value as { __voidhash?: PaywallComponentMeta }).__voidhash?.kind === "component" &&
   typeof (value as { render?: unknown }).render === "function" &&
   typeof (value as { component?: unknown }).component === "function";
diff --git a/libraries/paywalls/src/authoring/manifest.ts b/libraries/paywalls/src/authoring/manifest.ts
index 0e4056153..9963c8e8d 100644
--- a/libraries/paywalls/src/authoring/manifest.ts
+++ b/libraries/paywalls/src/authoring/manifest.ts
@@ -11,9 +11,7 @@ import type { ComponentDefinition } from "./define-component";
 import type { PropMap, PropSchema } from "./props";
 
 const isJsonScalar = (value: unknown): value is string | number | boolean =>
-  typeof value === "string" ||
-  typeof value === "number" ||
-  typeof value === "boolean";
+  typeof value === "string" || typeof value === "number" || typeof value === "boolean";
 
 /** Defaults are emitted only when they survive JSON serialization losslessly. */
 const serializableDefault = (value: unknown): unknown => {
@@ -27,8 +25,7 @@ const serializableDefault = (value: unknown): unknown => {
 };
 
 const isEmptySelect = (schema: PropSchema | undefined): boolean =>
-  schema?.kind === "select" &&
-  (schema.options === undefined || schema.options.length === 0);
+  schema?.kind === "select" && (schema.options === undefined || schema.options.length === 0);
 
 /**
  * Rejects `p.select([])` (contract §2: select options must be non-empty) with
@@ -56,20 +53,12 @@ const toManifestItem = (item: PropSchema): ManifestArrayItem => ({
 });
 
 const toManifestProp = (schema: PropSchema): ManifestProp => {
-  const defaultValue = schema.hasDefault
-    ? serializableDefault(schema.defaultValue)
-    : undefined;
+  const defaultValue = schema.hasDefault ? serializableDefault(schema.defaultValue) : undefined;
   const entry = {
     kind: schema.kind,
-    ...(schema.kind === "select" && schema.options
-      ? { options: schema.options }
-      : {}),
-    ...(schema.kind === "ref" && schema.refType
-      ? { refType: schema.refType }
-      : {}),
-    ...(schema.kind === "array" && schema.item
-      ? { item: toManifestItem(schema.item) }
-      : {}),
+    ...(schema.kind === "select" && schema.options ? { options: schema.options } : {}),
+    ...(schema.kind === "ref" && schema.refType ? { refType: schema.refType } : {}),
+    ...(schema.kind === "array" && schema.item ? { item: toManifestItem(schema.item) } : {}),
     ...(schema.label !== undefined ? { label: schema.label } : {}),
     ...(defaultValue !== undefined ? { default: defaultValue } : {}),
     ...(schema.editor !== undefined ? { editor: schema.editor } : {}),
@@ -102,9 +91,7 @@ const detectSlotUsage = (render: (ctx: never) => unknown): boolean =>
  * detected.
  */
 const detectProductHookUsage = (render: (ctx: never) => unknown): boolean =>
-  /\b(usePaywallProducts|useSelectedProduct|usePaywallConfig)\b/.test(
-    String(render),
-  );
+  /\b(usePaywallProducts|useSelectedProduct|usePaywallConfig)\b/.test(String(render));
 
 /**
  * Extracts the §2 component manifest from a {@link ComponentDefinition}. Runs
@@ -121,10 +108,7 @@ const detectProductHookUsage = (render: (ctx: never) => unknown): boolean =>
  * - `previewStates` — the declared preview names, or `["default"]` when the
  *   definition declares none (the CLI renders an implicit fixture-less state).
  */
-export const extractComponentManifest = <
-  M extends PropMap,
-  A extends ActionMap,
->(
+export const extractComponentManifest = <M extends PropMap, A extends ActionMap>(
   definition: ComponentDefinition<M, A>,
 ): ComponentManifest => {
   const props: Record<string, ManifestProp> = {};
@@ -135,11 +119,8 @@ export const extractComponentManifest = <
 
   const actions: Record<string, ManifestAction> = {};
   for (const [name, builder] of Object.entries(definition.actions)) {
-    const payload: Record<string, { kind: "string" | "number" | "boolean" }> =
-      {};
-    for (const [field, fieldBuilder] of Object.entries(
-      builder.payloadShape ?? {},
-    )) {
+    const payload: Record<string, { kind: "string" | "number" | "boolean" }> = {};
+    for (const [field, fieldBuilder] of Object.entries(builder.payloadShape ?? {})) {
       payload[field] = { kind: fieldBuilder.kind };
     }
     actions[name] = { payload };
@@ -148,21 +129,16 @@ export const extractComponentManifest = <
   const previewNames = Object.keys(definition.previews);
   const usesProducts =
     Object.values(definition.props).some(
-      (builder) =>
-        builder.schema.kind === "ref" && builder.schema.refType === "product",
-    ) ||
-    Object.values(definition.previews).some(
-      (preview) => preview.data?.products !== undefined,
+      (builder) => builder.schema.kind === "ref" && builder.schema.refType === "product",
     ) ||
+    Object.values(definition.previews).some((preview) => preview.data?.products !== undefined) ||
     detectProductHookUsage(definition.render);
 
   return {
     manifestVersion: COMPONENT_MANIFEST_VERSION,
     id: definition.id,
     ...(definition.title !== undefined ? { title: definition.title } : {}),
-    ...(definition.description !== undefined
-      ? { description: definition.description }
-      : {}),
+    ...(definition.description !== undefined ? { description: definition.description } : {}),
     props,
     actions,
     slot: detectSlotUsage(definition.render),
diff --git a/libraries/paywalls/src/authoring/props.ts b/libraries/paywalls/src/authoring/props.ts
index 2a79a85a7..3154d902d 100644
--- a/libraries/paywalls/src/authoring/props.ts
+++ b/libraries/paywalls/src/authoring/props.ts
@@ -117,14 +117,9 @@ export interface PropFactory {
   /** A nested element the editor can fill. The template receives a ReactNode. */
   component(): PropBuilder<ReactNode, false, false, "component">;
   /** A homogeneous list. The item must be a non-array kind. */
-  array<
-    B extends PropBuilder<
-      unknown,
-      boolean,
-      boolean,
-      Exclude<PropKind, "array">
-    >,
-  >(item: B): PropBuilder<Array<B["__value"]>, false, false, "array">;
+  array<B extends PropBuilder<unknown, boolean, boolean, Exclude<PropKind, "array">>>(
+    item: B,
+  ): PropBuilder<Array<B["__value"]>, false, false, "array">;
 }
 
 export const propFactory: PropFactory = {
@@ -165,14 +160,7 @@ export const propFactory: PropFactory = {
       ...base("component"),
       kind: "component",
     }),
-  array: <
-    B extends PropBuilder<
-      unknown,
-      boolean,
-      boolean,
-      Exclude<PropKind, "array">
-    >,
-  >(
+  array: <B extends PropBuilder<unknown, boolean, boolean, Exclude<PropKind, "array">>>(
     item: B,
   ) => {
     // Type-level enforced; runtime guard covers untyped (plain JS) authors.
@@ -188,14 +176,7 @@ export const propFactory: PropFactory = {
 };
 
 /** The runtime value type of a prop builder. */
-export type PropValueOf<B> = B extends PropBuilder<
-  infer T,
-  boolean,
-  boolean,
-  PropKind
->
-  ? T
-  : never;
+export type PropValueOf<B> = B extends PropBuilder<infer T, boolean, boolean, PropKind> ? T : never;
 
 /**
  * The props object a component template receives: defaults are always filled
diff --git a/libraries/paywalls/src/dom.tsx b/libraries/paywalls/src/dom.tsx
index 0bf387a67..7fa3ac69c 100644
--- a/libraries/paywalls/src/dom.tsx
+++ b/libraries/paywalls/src/dom.tsx
@@ -53,11 +53,7 @@ export const mountPaywall = (
 
   const tree = (
     <PaywallErrorBoundary post={options.bridge?.post}>
-      <PaywallRenderer
-        bridge={options.bridge}
-        config={options.config}
-        paywall={paywall}
-      />
+      <PaywallRenderer bridge={options.bridge} config={options.config} paywall={paywall} />
     </PaywallErrorBoundary>
   );
 
@@ -67,11 +63,5 @@ export const mountPaywall = (
 };
 
 export { domHostComponents } from "./renderer/dom-host";
-export {
-  PaywallErrorBoundary,
-  type PaywallErrorBoundaryProps,
-} from "./renderer/error-boundary";
-export {
-  PaywallRenderer,
-  type PaywallRendererProps,
-} from "./renderer/paywall-renderer";
+export { PaywallErrorBoundary, type PaywallErrorBoundaryProps } from "./renderer/error-boundary";
+export { PaywallRenderer, type PaywallRendererProps } from "./renderer/paywall-renderer";
diff --git a/libraries/paywalls/src/index.ts b/libraries/paywalls/src/index.ts
index 7248d5657..bb944c80f 100644
--- a/libraries/paywalls/src/index.ts
+++ b/libraries/paywalls/src/index.ts
@@ -54,18 +54,8 @@ export {
   type PropValueOf,
 } from "./authoring/props";
 // ── Primitives ───────────────────────────────────────────────────────────────
-export {
-  Image,
-  Pressable,
-  ScrollView,
-  Text,
-  View,
-} from "./primitives/components";
-export {
-  RendererProvider,
-  type RendererProviderProps,
-  useHost,
-} from "./primitives/host-context";
+export { Image, Pressable, ScrollView, Text, View } from "./primitives/components";
+export { RendererProvider, type RendererProviderProps, useHost } from "./primitives/host-context";
 export { Slot, type SlotProps, SlotProvider } from "./primitives/slot";
 export type {
   HostComponents,
@@ -82,10 +72,7 @@ export type {
 } from "./primitives/types";
 export { domHostComponents } from "./renderer/dom-host";
 // ── Renderer / runtime ───────────────────────────────────────────────────────
-export {
-  PaywallRenderer,
-  type PaywallRendererProps,
-} from "./renderer/paywall-renderer";
+export { PaywallRenderer, type PaywallRendererProps } from "./renderer/paywall-renderer";
 export {
   createDefaultBridge,
   NATIVE_INBOUND_GLOBAL,
diff --git a/libraries/paywalls/src/primitives/components.tsx b/libraries/paywalls/src/primitives/components.tsx
index 8b1390d3e..e864bd4a7 100644
--- a/libraries/paywalls/src/primitives/components.tsx
+++ b/libraries/paywalls/src/primitives/components.tsx
@@ -2,13 +2,7 @@ import type { ReactNode } from "react";
 
 import { getActionName } from "../internal/action-brand";
 import { useHost } from "./host-context";
-import type {
-  ImageProps,
-  PressableProps,
-  ScrollViewProps,
-  TextProps,
-  ViewProps,
-} from "./types";
+import type { ImageProps, PressableProps, ScrollViewProps, TextProps, ViewProps } from "./types";
 
 /**
  * The abstract paywall primitives. Each one resolves the active renderer and
diff --git a/libraries/paywalls/src/renderer/dom-host.tsx b/libraries/paywalls/src/renderer/dom-host.tsx
index a027e7602..32dc07b3e 100644
--- a/libraries/paywalls/src/renderer/dom-host.tsx
+++ b/libraries/paywalls/src/renderer/dom-host.tsx
@@ -1,9 +1,4 @@
-import {
-  type CSSProperties,
-  type KeyboardEvent,
-  type ReactNode,
-  useState,
-} from "react";
+import { type CSSProperties, type KeyboardEvent, type ReactNode, useState } from "react";
 
 import type {
   HostComponents,
@@ -47,10 +42,7 @@ const TEXT_BASE: CSSProperties = {
   wordWrap: "break-word",
 };
 
-const RESIZE_MODE_TO_OBJECT_FIT: Record<
-  ResizeMode,
-  CSSProperties["objectFit"]
-> = {
+const RESIZE_MODE_TO_OBJECT_FIT: Record<ResizeMode, CSSProperties["objectFit"]> = {
   center: "none",
   contain: "contain",
   cover: "cover",
@@ -71,12 +63,7 @@ const lineClampStyle = (numberOfLines?: number): CSSProperties =>
       }
     : {};
 
-const DomView = ({
-  style,
-  children,
-  testID,
-  accessibilityLabel,
-}: ViewProps): ReactNode => (
+const DomView = ({ style, children, testID, accessibilityLabel }: ViewProps): ReactNode => (
   <div
     aria-label={accessibilityLabel}
     data-testid={testID}
@@ -213,8 +200,7 @@ const DomImage = ({
   />
 );
 
-const DomSlot = ({ children, fallback }: SlotHostProps): ReactNode =>
-  children ?? fallback ?? null;
+const DomSlot = ({ children, fallback }: SlotHostProps): ReactNode => children ?? fallback ?? null;
 
 /** The DOM implementation of the {@link HostComponents} contract. */
 export const domHostComponents: HostComponents = {
diff --git a/libraries/paywalls/src/renderer/error-boundary.tsx b/libraries/paywalls/src/renderer/error-boundary.tsx
index dd2b40d00..33df1f869 100644
--- a/libraries/paywalls/src/renderer/error-boundary.tsx
+++ b/libraries/paywalls/src/renderer/error-boundary.tsx
@@ -1,10 +1,7 @@
 import { Component, type ReactNode } from "react";
 
 import { postOutboundEnvelope } from "../runtime/bridge";
-import {
-  createEventEnvelope,
-  type PaywallOutboundEnvelope,
-} from "../runtime/envelope";
+import { createEventEnvelope, type PaywallOutboundEnvelope } from "../runtime/envelope";
 
 export interface PaywallErrorBoundaryProps {
   /** Posts an outbound envelope; defaults to the production bridge channel. */
diff --git a/libraries/paywalls/src/renderer/paywall-renderer.tsx b/libraries/paywalls/src/renderer/paywall-renderer.tsx
index ad60c53b9..d98917640 100644
--- a/libraries/paywalls/src/renderer/paywall-renderer.tsx
+++ b/libraries/paywalls/src/renderer/paywall-renderer.tsx
@@ -1,9 +1,6 @@
 import type { ReactNode } from "react";
 
-import {
-  type PaywallDefinition,
-  renderPaywallBody,
-} from "../authoring/create-paywall";
+import { type PaywallDefinition, renderPaywallBody } from "../authoring/create-paywall";
 import { RendererProvider } from "../primitives/host-context";
 import type { HostComponents } from "../primitives/types";
 import type { PaywallBridge } from "../runtime/bridge";
diff --git a/libraries/paywalls/src/runtime/bridge.ts b/libraries/paywalls/src/runtime/bridge.ts
index 2a0273b71..a76cbcfff 100644
--- a/libraries/paywalls/src/runtime/bridge.ts
+++ b/libraries/paywalls/src/runtime/bridge.ts
@@ -48,9 +48,7 @@ export interface PaywallBridge {
   /** Sends an outbound envelope to the host. */
   post: (envelope: PaywallOutboundEnvelope) => void;
   /** Subscribes to inbound envelopes. Returns an unsubscribe function. */
-  subscribe: (
-    listener: (envelope: PaywallInboundEnvelope) => void,
-  ) => () => void;
+  subscribe: (listener: (envelope: PaywallInboundEnvelope) => void) => () => void;
 }
 
 // ── Inbound dispatch (module-level singleton) ───────────────────────────────
@@ -62,10 +60,7 @@ const dispatchInbound = (raw: unknown): void => {
   const envelope = parseInboundEnvelope(raw);
   if (!envelope) {
     // biome-ignore lint/suspicious/noConsole: dev-visible signal — a host message that fails to parse would otherwise vanish silently.
-    console.warn(
-      "[voidhash-paywall] ignoring unparseable inbound bridge message",
-      raw,
-    );
+    console.warn("[voidhash-paywall] ignoring unparseable inbound bridge message", raw);
     return;
   }
   for (const listener of [...inboundListeners]) {
@@ -120,10 +115,7 @@ const tryDeliver = (envelope: PaywallOutboundEnvelope): boolean => {
     return true;
   }
   if (window.parent && window.parent !== window) {
-    window.parent.postMessage(
-      { source: STUDIO_MESSAGE_SOURCE, message: envelope },
-      "*",
-    );
+    window.parent.postMessage({ source: STUDIO_MESSAGE_SOURCE, message: envelope }, "*");
     return true;
   }
   return false;
@@ -175,9 +167,7 @@ const enqueueOutbound = (envelope: PaywallOutboundEnvelope): void => {
  * environment the message is dropped (the tree renderer passes its own silent
  * bridge instead).
  */
-export const postOutboundEnvelope = (
-  envelope: PaywallOutboundEnvelope,
-): void => {
+export const postOutboundEnvelope = (envelope: PaywallOutboundEnvelope): void => {
   if (typeof window === "undefined") {
     return;
   }
diff --git a/libraries/paywalls/src/runtime/config.ts b/libraries/paywalls/src/runtime/config.ts
index 02f9f6cf7..4e5ee6226 100644
--- a/libraries/paywalls/src/runtime/config.ts
+++ b/libraries/paywalls/src/runtime/config.ts
@@ -25,9 +25,7 @@ export interface PaywallProduct {
 }
 
 /** Author-configurable values the dashboard/experiments can override at runtime. */
-export type PaywallVariables = Readonly<
-  Record<string, string | number | boolean>
->;
+export type PaywallVariables = Readonly<Record<string, string | number | boolean>>;
 
 /** Platform the paywall is being presented on. */
 export type PaywallPlatform = "ios" | "android" | "web";
diff --git a/libraries/paywalls/src/runtime/envelope.ts b/libraries/paywalls/src/runtime/envelope.ts
index 9cfc58a17..179bb37ff 100644
--- a/libraries/paywalls/src/runtime/envelope.ts
+++ b/libraries/paywalls/src/runtime/envelope.ts
@@ -37,8 +37,7 @@ export interface PaywallRestoreEnvelope extends OutboundBase<"restore"> {
   readonly payload?: { readonly source?: string };
 }
 
-export interface PaywallOpenExternalEnvelope
-  extends OutboundBase<"openExternal"> {
+export interface PaywallOpenExternalEnvelope extends OutboundBase<"openExternal"> {
   readonly payload: { readonly url: string };
 }
 
@@ -125,9 +124,7 @@ export type PaywallInboundEnvelope =
 
 // ── Encode ───────────────────────────────────────────────────────────────────
 
-export const createReadyEnvelope = (
-  templateVersion?: string,
-): PaywallReadyEnvelope => ({
+export const createReadyEnvelope = (templateVersion?: string): PaywallReadyEnvelope => ({
   version: PAYWALL_BRIDGE_VERSION,
   type: "ready",
   ...(templateVersion === undefined ? {} : { payload: { templateVersion } }),
@@ -149,17 +146,13 @@ export const createPurchaseEnvelope = (
   payload: { productId },
 });
 
-export const createRestoreEnvelope = (
-  requestId?: string,
-): PaywallRestoreEnvelope => ({
+export const createRestoreEnvelope = (requestId?: string): PaywallRestoreEnvelope => ({
   version: PAYWALL_BRIDGE_VERSION,
   type: "restore",
   requestId,
 });
 
-export const createOpenExternalEnvelope = (
-  url: string,
-): PaywallOpenExternalEnvelope => ({
+export const createOpenExternalEnvelope = (url: string): PaywallOpenExternalEnvelope => ({
   version: PAYWALL_BRIDGE_VERSION,
   type: "openExternal",
   payload: { url },
@@ -194,13 +187,9 @@ const isRecord = (value: unknown): value is Record<string, unknown> =>
   typeof value === "object" && value !== null;
 
 const readRequestId = (value: Record<string, unknown>): string | undefined =>
-  typeof value.requestId === "string" && value.requestId.length > 0
-    ? value.requestId
-    : undefined;
+  typeof value.requestId === "string" && value.requestId.length > 0 ? value.requestId : undefined;
 
-const parseResponse = (
-  value: Record<string, unknown>,
-): PaywallResponseEnvelope | null => {
+const parseResponse = (value: Record<string, unknown>): PaywallResponseEnvelope | null => {
   const payload = value.payload;
   if (!isRecord(payload)) {
     return null;
@@ -213,9 +202,7 @@ const parseResponse = (
     return null;
   }
   const parsedError =
-    isRecord(error) &&
-    typeof error.code === "string" &&
-    typeof error.message === "string"
+    isRecord(error) && typeof error.code === "string" && typeof error.message === "string"
       ? { code: error.code, message: error.message }
       : undefined;
   return {
@@ -231,9 +218,7 @@ const parseResponse = (
   };
 };
 
-const parseStatus = (
-  value: Record<string, unknown>,
-): PaywallStatusEnvelope | null => {
+const parseStatus = (value: Record<string, unknown>): PaywallStatusEnvelope | null => {
   const payload = value.payload;
   if (!isRecord(payload)) {
     return null;
@@ -251,16 +236,13 @@ const parseStatus = (
     requestId: readRequestId(value),
     payload: {
       status: status as PaywallTransactionStatus,
-      productId:
-        typeof payload.productId === "string" ? payload.productId : undefined,
+      productId: typeof payload.productId === "string" ? payload.productId : undefined,
       error: typeof payload.error === "string" ? payload.error : undefined,
     },
   };
 };
 
-const parseConfigure = (
-  value: Record<string, unknown>,
-): PaywallConfigureEnvelope | null => {
+const parseConfigure = (value: Record<string, unknown>): PaywallConfigureEnvelope | null => {
   const payload = value.payload;
   if (!isRecord(payload)) {
     return null;
@@ -279,9 +261,7 @@ const parseConfigure = (
  * versions and unknown actions — the runtime ignores those rather than
  * crashing the paywall.
  */
-export const parseInboundEnvelope = (
-  raw: unknown,
-): PaywallInboundEnvelope | null => {
+export const parseInboundEnvelope = (raw: unknown): PaywallInboundEnvelope | null => {
   let value: unknown = raw;
   if (typeof raw === "string") {
     try {
diff --git a/libraries/paywalls/src/runtime/runtime.tsx b/libraries/paywalls/src/runtime/runtime.tsx
index c84f6ece2..440fa3d62 100644
--- a/libraries/paywalls/src/runtime/runtime.tsx
+++ b/libraries/paywalls/src/runtime/runtime.tsx
@@ -65,16 +65,13 @@ const PaywallRuntimeContext = createContext<PaywallRuntimeValue | null>(null);
 const useRuntimeOrThrow = (hook: string): PaywallRuntimeValue => {
   const value = useContext(PaywallRuntimeContext);
   if (!value) {
-    throw new Error(
-      `${hook} must be used inside a paywall rendered by @voidhash/paywalls.`,
-    );
+    throw new Error(`${hook} must be used inside a paywall rendered by @voidhash/paywalls.`);
   }
   return value;
 };
 
 let requestCounter = 0;
-const nextRequestId = (): string =>
-  `vh-${Date.now().toString(36)}-${++requestCounter}`;
+const nextRequestId = (): string => `vh-${Date.now().toString(36)}-${++requestCounter}`;
 
 const IDLE_STATUS: PaywallStatusSnapshot = { status: "idle" };
 
@@ -117,10 +114,7 @@ export const PaywallRuntimeProvider = ({
   bridge,
   children,
 }: PaywallRuntimeProviderProps): ReactNode => {
-  const resolvedBridge = useMemo(
-    () => bridge ?? createDefaultBridge(),
-    [bridge],
-  );
+  const resolvedBridge = useMemo(() => bridge ?? createDefaultBridge(), [bridge]);
 
   const [config, setConfig] = useState<PaywallRuntimeConfig>(
     () => configProp ?? readInjectedConfig(),
@@ -131,9 +125,7 @@ export const PaywallRuntimeProvider = ({
     }
   }, [configProp]);
 
-  const [explicitSelection, setExplicitSelection] = useState<
-    string | undefined
-  >(undefined);
+  const [explicitSelection, setExplicitSelection] = useState<string | undefined>(undefined);
   // An explicit user selection survives reconfiguration as long as the product
   // still exists; otherwise fall back to the configured default.
   const selectedProductId = useMemo(() => {
@@ -163,10 +155,7 @@ export const PaywallRuntimeProvider = ({
         setStatus({
           status: nextStatus,
           productId,
-          error:
-            error === undefined
-              ? undefined
-              : { code: "HOST_STATUS", message: error },
+          error: error === undefined ? undefined : { code: "HOST_STATUS", message: error },
         });
         return;
       }
@@ -204,8 +193,7 @@ export const PaywallRuntimeProvider = ({
       },
       close: (reason) => resolvedBridge.post(createCloseEnvelope(reason)),
       openUrl: (url) => resolvedBridge.post(createOpenExternalEnvelope(url)),
-      track: (name, properties) =>
-        resolvedBridge.post(createEventEnvelope(name, properties)),
+      track: (name, properties) => resolvedBridge.post(createEventEnvelope(name, properties)),
       selectProduct: (productId) => setExplicitSelection(productId),
     }),
     [resolvedBridge, selectedProductId],
@@ -216,9 +204,7 @@ export const PaywallRuntimeProvider = ({
       actions,
       config,
       products: config.products,
-      selectedProduct: config.products.find(
-        (product) => product.id === selectedProductId,
-      ),
+      selectedProduct: config.products.find((product) => product.id === selectedProductId),
       selectedProductId,
       status,
       variables: config.variables,
@@ -226,11 +212,7 @@ export const PaywallRuntimeProvider = ({
     [actions, config, selectedProductId, status],
   );
 
-  return (
-    <PaywallRuntimeContext.Provider value={value}>
-      {children}
-    </PaywallRuntimeContext.Provider>
-  );
+  return <PaywallRuntimeContext.Provider value={value}>{children}</PaywallRuntimeContext.Provider>;
 };
 
 /** The products available on this paywall. */
diff --git a/libraries/paywalls/src/schema/component-manifest.ts b/libraries/paywalls/src/schema/component-manifest.ts
index 0b67e1d2d..8864ab3ad 100644
--- a/libraries/paywalls/src/schema/component-manifest.ts
+++ b/libraries/paywalls/src/schema/component-manifest.ts
@@ -89,9 +89,7 @@ export type ManifestActionPayloadKind = "string" | "number" | "boolean";
 
 export interface ManifestAction {
   /** Payload field shapes. May be `{}` for payload-less actions. */
-  readonly payload: Readonly<
-    Record<string, { readonly kind: ManifestActionPayloadKind }>
-  >;
+  readonly payload: Readonly<Record<string, { readonly kind: ManifestActionPayloadKind }>>;
 }
 
 /** Injected runtime data a component reads. `"products"` only in Phase 1. */
diff --git a/libraries/paywalls/src/schema/style.ts b/libraries/paywalls/src/schema/style.ts
index 873a0100e..81595f3ab 100644
--- a/libraries/paywalls/src/schema/style.ts
+++ b/libraries/paywalls/src/schema/style.ts
@@ -9,18 +9,9 @@
 /** A length value: device-independent pixels or a string (e.g. `"50%"`). */
 export type PaywallDimension = number | string;
 
-export type PaywallFlexDirection =
-  | "row"
-  | "row-reverse"
-  | "column"
-  | "column-reverse";
+export type PaywallFlexDirection = "row" | "row-reverse" | "column" | "column-reverse";
 
-export type PaywallAlignItems =
-  | "flex-start"
-  | "flex-end"
-  | "center"
-  | "stretch"
-  | "baseline";
+export type PaywallAlignItems = "flex-start" | "flex-end" | "center" | "stretch" | "baseline";
 
 export type PaywallAlignSelf = "auto" | PaywallAlignItems;
 
@@ -121,11 +112,7 @@ export interface PaywallStyle {
   letterSpacing?: number;
   textAlign?: "auto" | "left" | "right" | "center" | "justify";
   textTransform?: "none" | "uppercase" | "lowercase" | "capitalize";
-  textDecorationLine?:
-    | "none"
-    | "underline"
-    | "line-through"
-    | "underline line-through";
+  textDecorationLine?: "none" | "underline" | "line-through" | "underline line-through";
   fontFamily?: string;
 }
 
@@ -203,9 +190,4 @@ export const PAYWALL_STYLE_KEYS = [
  * or a falsy value — mirroring React Native's `StyleProp`. Falsy entries are
  * ignored so `style={[base, condition && override]}` works as expected.
  */
-export type StyleProp =
-  | PaywallStyle
-  | false
-  | null
-  | undefined
-  | ReadonlyArray<StyleProp>;
+export type StyleProp = PaywallStyle | false | null | undefined | ReadonlyArray<StyleProp>;
diff --git a/libraries/paywalls/src/style/resolve.ts b/libraries/paywalls/src/style/resolve.ts
index 64bfd77ec..0cb5d8acb 100644
--- a/libraries/paywalls/src/style/resolve.ts
+++ b/libraries/paywalls/src/style/resolve.ts
@@ -103,8 +103,7 @@ export const resolveStyle = (style: StyleProp): CSSProperties => {
   }
 
   if (lineHeight !== undefined) {
-    out.lineHeight =
-      typeof lineHeight === "number" ? `${lineHeight}px` : lineHeight;
+    out.lineHeight = typeof lineHeight === "number" ? `${lineHeight}px` : lineHeight;
   }
   if (
     (flat.borderWidth !== undefined || flat.borderColor !== undefined) &&
diff --git a/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
index 81ac0b034..14dc7d057 100644
--- a/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
+++ b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
@@ -9,17 +9,11 @@ import { Component, createElement, type ReactNode } from "react";
 import createReconciler from "react-reconciler";
 // The explicit ".js" matters: react-reconciler has no `exports` map, so Node
 // ESM resolution of the bare "react-reconciler/constants" specifier fails.
-import {
-  ConcurrentRoot,
-  DefaultEventPriority,
-} from "react-reconciler/constants.js";
+import { ConcurrentRoot, DefaultEventPriority } from "react-reconciler/constants.js";
 
 import { RendererProvider } from "../primitives/host-context";
 import type { PaywallBridge } from "../runtime/bridge";
-import {
-  normalizeRuntimeConfig,
-  type PaywallRuntimeConfig,
-} from "../runtime/config";
+import { normalizeRuntimeConfig, type PaywallRuntimeConfig } from "../runtime/config";
 import { PaywallRuntimeProvider } from "../runtime/runtime";
 import {
   PAYWALL_TREE_VERSION,
@@ -27,11 +21,7 @@ import {
   type PaywallNodeResizeMode,
   type PaywallNodeTree,
 } from "../schema/node-tree";
-import {
-  PAYWALL_STYLE_KEYS,
-  type PaywallStyle,
-  type StyleProp,
-} from "../schema/style";
+import { PAYWALL_STYLE_KEYS, type PaywallStyle, type StyleProp } from "../schema/style";
 import { flattenStyle } from "../style/resolve";
 import { TREE_ELEMENT_TYPES, treeHostComponents } from "./tree-host";
 
@@ -64,11 +54,7 @@ const removeFrom = (list: TreeChild[], child: TreeChild): void => {
   }
 };
 
-const insertInto = (
-  list: TreeChild[],
-  child: TreeChild,
-  before: TreeChild,
-): void => {
+const insertInto = (list: TreeChild[], child: TreeChild, before: TreeChild): void => {
   removeFrom(list, child);
   const index = list.indexOf(before);
   list.splice(index < 0 ? list.length : index, 0, child);
@@ -96,10 +82,7 @@ const reconciler = createReconciler<TreeContainer>({
   supportsMicrotasks: true,
   scheduleMicrotask: queueMicrotask,
 
-  createInstance: (
-    type: string,
-    props: Record<string, unknown>,
-  ): TreeElementInstance => ({
+  createInstance: (type: string, props: Record<string, unknown>): TreeElementInstance => ({
     tag: "element",
     type,
     props,
@@ -124,18 +107,10 @@ const reconciler = createReconciler<TreeContainer>({
   appendChildToContainer: (container: TreeContainer, child: TreeChild) => {
     container.children.push(child);
   },
-  insertBefore: (
-    parent: TreeElementInstance,
-    child: TreeChild,
-    before: TreeChild,
-  ) => {
+  insertBefore: (parent: TreeElementInstance, child: TreeChild, before: TreeChild) => {
     insertInto(parent.children, child, before);
   },
-  insertInContainerBefore: (
-    container: TreeContainer,
-    child: TreeChild,
-    before: TreeChild,
-  ) => {
+  insertInContainerBefore: (container: TreeContainer, child: TreeChild, before: TreeChild) => {
     insertInto(container.children, child, before);
   },
   removeChild: (parent: TreeElementInstance, child: TreeChild) => {
@@ -155,11 +130,7 @@ const reconciler = createReconciler<TreeContainer>({
   ) => {
     instance.props = nextProps;
   },
-  commitTextUpdate: (
-    instance: TreeTextInstance,
-    _oldText: string,
-    newText: string,
-  ) => {
+  commitTextUpdate: (instance: TreeTextInstance, _oldText: string, newText: string) => {
     instance.text = newText;
   },
   resetTextContent: noop,
@@ -271,16 +242,12 @@ const serializeChild = (child: TreeChild): PaywallNode => {
     case TREE_ELEMENT_TYPES.text:
       return { type: "text", style, text: collectText(child.children) };
     case TREE_ELEMENT_TYPES.image: {
-      const resizeMode = child.props.resizeMode as
-        | PaywallNodeResizeMode
-        | undefined;
+      const resizeMode = child.props.resizeMode as PaywallNodeResizeMode | undefined;
       return {
         type: "image",
         style,
         src: typeof child.props.src === "string" ? child.props.src : "",
-        ...(resizeMode && RESIZE_MODES.includes(resizeMode)
-          ? { resizeMode }
-          : {}),
+        ...(resizeMode && RESIZE_MODES.includes(resizeMode) ? { resizeMode } : {}),
       };
     }
     case TREE_ELEMENT_TYPES.slot:
@@ -327,10 +294,7 @@ interface TreeErrorBoundaryState {
 }
 
 /** Converts a throwing render into a §3 placeholder node. */
-class TreeErrorBoundary extends Component<
-  TreeErrorBoundaryProps,
-  TreeErrorBoundaryState
-> {
+class TreeErrorBoundary extends Component<TreeErrorBoundaryProps, TreeErrorBoundaryState> {
   state: TreeErrorBoundaryState = { error: null, failed: false };
 
   static getDerivedStateFromError(error: unknown): TreeErrorBoundaryState {
@@ -396,10 +360,7 @@ export const renderToNodeTree = async (
 
   const wrapped = (
     <RendererProvider host={treeHostComponents}>
-      <PaywallRuntimeProvider
-        bridge={silentBridge}
-        config={normalizeRuntimeConfig(options.config)}
-      >
+      <PaywallRuntimeProvider bridge={silentBridge} config={normalizeRuntimeConfig(options.config)}>
         <TreeErrorBoundary>{element}</TreeErrorBoundary>
       </PaywallRuntimeProvider>
     </RendererProvider>
diff --git a/libraries/paywalls/src/tree-renderer/tree-host.ts b/libraries/paywalls/src/tree-renderer/tree-host.ts
index 3470f7409..0574edc1a 100644
--- a/libraries/paywalls/src/tree-renderer/tree-host.ts
+++ b/libraries/paywalls/src/tree-renderer/tree-host.ts
@@ -30,8 +30,7 @@ export const TREE_ELEMENT_TYPES = {
   view: "vh-view",
 } as const;
 
-const hasStyleKeys = (style: StyleProp): boolean =>
-  Object.keys(flattenStyle(style)).length > 0;
+const hasStyleKeys = (style: StyleProp): boolean => Object.keys(flattenStyle(style)).length > 0;
 
 const TreeView = ({ style, children }: ViewProps): ReactNode =>
   createElement(TREE_ELEMENT_TYPES.view, { style }, children);
@@ -39,11 +38,7 @@ const TreeView = ({ style, children }: ViewProps): ReactNode =>
 const TreeText = ({ style, children }: TextProps): ReactNode =>
   createElement(TREE_ELEMENT_TYPES.text, { style }, children);
 
-const TreePressable = ({
-  style,
-  children,
-  actionName,
-}: PressableHostProps): ReactNode =>
+const TreePressable = ({ style, children, actionName }: PressableHostProps): ReactNode =>
   createElement(
     TREE_ELEMENT_TYPES.pressable,
     { action: actionName, style },
@@ -64,11 +59,7 @@ const TreeScrollView = ({
     // RN's contentContainerStyle has no §3 equivalent — preserve it as an
     // inner view when it actually styles something.
     hasStyleKeys(contentContainerStyle)
-      ? createElement(
-          TREE_ELEMENT_TYPES.view,
-          { style: contentContainerStyle },
-          children,
-        )
+      ? createElement(TREE_ELEMENT_TYPES.view, { style: contentContainerStyle }, children)
       : children,
   );
 
diff --git a/libraries/paywalls/src/tree.ts b/libraries/paywalls/src/tree.ts
index 97d03495d..19db66d0d 100644
--- a/libraries/paywalls/src/tree.ts
+++ b/libraries/paywalls/src/tree.ts
@@ -24,7 +24,4 @@ export {
   type RenderToNodeTreeOptions,
   renderToNodeTree,
 } from "./tree-renderer/render-to-node-tree";
-export {
-  TREE_ELEMENT_TYPES,
-  treeHostComponents,
-} from "./tree-renderer/tree-host";
+export { TREE_ELEMENT_TYPES, treeHostComponents } from "./tree-renderer/tree-host";
diff --git a/libraries/paywalls/tests/envelope.test.ts b/libraries/paywalls/tests/envelope.test.ts
index b267889a9..e68781ae2 100644
--- a/libraries/paywalls/tests/envelope.test.ts
+++ b/libraries/paywalls/tests/envelope.test.ts
@@ -17,9 +17,7 @@ import {
 
 describe("outbound envelopes (protocol.ts round-trip)", () => {
   it("ready parses with the native SDK validator", () => {
-    const parsed = parsePaywallBridgeEnvelope(
-      serializeEnvelope(createReadyEnvelope()),
-    );
+    const parsed = parsePaywallBridgeEnvelope(serializeEnvelope(createReadyEnvelope()));
     expect(parsed).toMatchObject({ version: 1, type: "ready" });
   });
 
@@ -36,9 +34,7 @@ describe("outbound envelopes (protocol.ts round-trip)", () => {
   });
 
   it("restore parses with an optional requestId", () => {
-    const parsed = parsePaywallBridgeEnvelope(
-      serializeEnvelope(createRestoreEnvelope("req-2")),
-    );
+    const parsed = parsePaywallBridgeEnvelope(serializeEnvelope(createRestoreEnvelope("req-2")));
     expect(parsed).toMatchObject({
       version: 1,
       type: "restore",
@@ -47,13 +43,12 @@ describe("outbound envelopes (protocol.ts round-trip)", () => {
   });
 
   it("close parses with and without a reason", () => {
+    expect(parsePaywallBridgeEnvelope(serializeEnvelope(createCloseEnvelope()))).toMatchObject({
+      version: 1,
+      type: "close",
+    });
     expect(
-      parsePaywallBridgeEnvelope(serializeEnvelope(createCloseEnvelope())),
-    ).toMatchObject({ version: 1, type: "close" });
-    expect(
-      parsePaywallBridgeEnvelope(
-        serializeEnvelope(createCloseEnvelope("user-dismissed")),
-      ),
+      parsePaywallBridgeEnvelope(serializeEnvelope(createCloseEnvelope("user-dismissed"))),
     ).toMatchObject({
       version: 1,
       type: "close",
@@ -63,9 +58,7 @@ describe("outbound envelopes (protocol.ts round-trip)", () => {
 
   it("openExternal carries the url", () => {
     const parsed = parsePaywallBridgeEnvelope(
-      serializeEnvelope(
-        createOpenExternalEnvelope("https://voidhash.com/terms"),
-      ),
+      serializeEnvelope(createOpenExternalEnvelope("https://voidhash.com/terms")),
     );
     expect(parsed).toMatchObject({
       version: 1,
@@ -76,9 +69,7 @@ describe("outbound envelopes (protocol.ts round-trip)", () => {
 
   it("event matches the contract §7.2 shape and parses with the native SDK validator", () => {
     expect(
-      JSON.parse(
-        serializeEnvelope(createEventEnvelope("cta_seen", { screen: "home" })),
-      ),
+      JSON.parse(serializeEnvelope(createEventEnvelope("cta_seen", { screen: "home" }))),
     ).toEqual({
       version: 1,
       type: "event",
@@ -100,9 +91,7 @@ describe("outbound envelopes (protocol.ts round-trip)", () => {
       payload: { name: "cta_seen", properties: { screen: "home" } },
     });
     expect(
-      parsePaywallBridgeEnvelope(
-        serializeEnvelope(createEventEnvelope("bare")),
-      ),
+      parsePaywallBridgeEnvelope(serializeEnvelope(createEventEnvelope("bare"))),
     ).toMatchObject({ version: 1, type: "event", payload: { name: "bare" } });
   });
 });
@@ -223,12 +212,8 @@ describe("parseInboundEnvelope", () => {
 
   it("ignores malformed input, unknown versions and unknown actions", () => {
     expect(parseInboundEnvelope("not json")).toBeNull();
-    expect(
-      parseInboundEnvelope(JSON.stringify({ version: 2, type: "status" })),
-    ).toBeNull();
-    expect(
-      parseInboundEnvelope(JSON.stringify({ version: 1, type: "mystery" })),
-    ).toBeNull();
+    expect(parseInboundEnvelope(JSON.stringify({ version: 2, type: "status" }))).toBeNull();
+    expect(parseInboundEnvelope(JSON.stringify({ version: 1, type: "mystery" }))).toBeNull();
     expect(
       parseInboundEnvelope(
         JSON.stringify({
diff --git a/libraries/paywalls/tests/manifest.test.tsx b/libraries/paywalls/tests/manifest.test.tsx
index f44b76412..f7ade49e6 100644
--- a/libraries/paywalls/tests/manifest.test.tsx
+++ b/libraries/paywalls/tests/manifest.test.tsx
@@ -40,9 +40,7 @@ describe("extractComponentManifest", () => {
         trial: { props: { selected: true } },
       },
       render: ({ props, actions }) => (
-        <Pressable
-          onPress={() => actions.onSelect({ productId: props.product.id })}
-        >
+        <Pressable onPress={() => actions.onSelect({ productId: props.product.id })}>
           <Text>{props.product.displayName}</Text>
           <Slot />
         </Pressable>
diff --git a/libraries/paywalls/tests/observability.test.tsx b/libraries/paywalls/tests/observability.test.tsx
index e385ff764..4e8628f35 100644
--- a/libraries/paywalls/tests/observability.test.tsx
+++ b/libraries/paywalls/tests/observability.test.tsx
@@ -18,9 +18,7 @@ import { subscribeToInboundEnvelopes } from "../src/runtime/bridge";
 import type { PaywallInboundEnvelope } from "../src/runtime/envelope";
 import { renderToNodeTree } from "../src/tree";
 
-const collectingBridge = (
-  posted: PaywallOutboundEnvelope[],
-): PaywallBridge => ({
+const collectingBridge = (posted: PaywallOutboundEnvelope[]): PaywallBridge => ({
   post: (envelope) => {
     posted.push(envelope);
   },
@@ -30,10 +28,7 @@ const collectingBridge = (
 });
 
 interface FakeWindow {
-  addEventListener: (
-    type: string,
-    listener: (event: { data: unknown }) => void,
-  ) => void;
+  addEventListener: (type: string, listener: (event: { data: unknown }) => void) => void;
   onVoidhashNativeMessage?: (data: string) => void;
 }
 
@@ -107,9 +102,7 @@ describe("purchase() without a product", () => {
     expect(warnSpy).toHaveBeenCalledWith(
       expect.stringContaining("purchase() called with no selected"),
     );
-    expect(posted.filter((envelope) => envelope.type === "purchase")).toEqual(
-      [],
-    );
+    expect(posted.filter((envelope) => envelope.type === "purchase")).toEqual([]);
   });
 });
 
diff --git a/libraries/paywalls/tests/render.test.tsx b/libraries/paywalls/tests/render.test.tsx
index d6e1ab44b..0fbce3f90 100644
--- a/libraries/paywalls/tests/render.test.tsx
+++ b/libraries/paywalls/tests/render.test.tsx
@@ -28,9 +28,7 @@ const Card = defineComponent({
   ),
 }).component;
 
-const collectingBridge = (
-  posted: PaywallOutboundEnvelope[],
-): PaywallBridge => ({
+const collectingBridge = (posted: PaywallOutboundEnvelope[]): PaywallBridge => ({
   post: (envelope) => {
     posted.push(envelope);
   },
@@ -80,9 +78,7 @@ describe("DOM paywall rendering", () => {
       title: "Override",
       render: <Card title="Pro" />,
     });
-    expect(
-      renderToStaticMarkup(<PaywallRenderer paywall={paywall} />),
-    ).toContain("Card Pro");
+    expect(renderToStaticMarkup(<PaywallRenderer paywall={paywall} />)).toContain("Card Pro");
   });
 
   it("exposes runtime products and variables through hooks", () => {
@@ -91,8 +87,7 @@ describe("DOM paywall rendering", () => {
       const variables = usePaywallVariables();
       return (
         <Text>
-          {products.map((product) => product.displayName).join(",")}|
-          {String(variables.accentColor)}
+          {products.map((product) => product.displayName).join(",")}|{String(variables.accentColor)}
         </Text>
       );
     };
@@ -137,9 +132,7 @@ describe("DOM paywall rendering", () => {
   it("accepts an injected bridge (no envelopes from a static render)", () => {
     const posted: PaywallOutboundEnvelope[] = [];
     const paywall = createPaywall({ title: "Bridge", render: <View /> });
-    renderToStaticMarkup(
-      <PaywallRenderer bridge={collectingBridge(posted)} paywall={paywall} />,
-    );
+    renderToStaticMarkup(<PaywallRenderer bridge={collectingBridge(posted)} paywall={paywall} />);
     // Static SSR runs no effects, so `ready` is not announced here; the
     // mount-time behaviour is covered by the tree renderer tests.
     expect(posted).toEqual([]);
diff --git a/libraries/paywalls/tests/style.test.ts b/libraries/paywalls/tests/style.test.ts
index f369271ae..c703a0059 100644
--- a/libraries/paywalls/tests/style.test.ts
+++ b/libraries/paywalls/tests/style.test.ts
@@ -11,32 +11,26 @@ describe("flattenStyle", () => {
 
   it("flattens nested arrays with later entries winning", () => {
     expect(
-      flattenStyle([
-        { padding: 4, opacity: 1 },
-        [{ padding: 8 }, false, [{ opacity: 0.5 }]],
-        null,
-      ]),
+      flattenStyle([{ padding: 4, opacity: 1 }, [{ padding: 8 }, false, [{ opacity: 0.5 }]], null]),
     ).toEqual({ padding: 8, opacity: 0.5 });
   });
 
   it("supports the conditional-entry idiom", () => {
     const selected = false;
-    expect(
-      flattenStyle([{ borderWidth: 1 }, selected && { borderWidth: 2 }]),
-    ).toEqual({ borderWidth: 1 });
+    expect(flattenStyle([{ borderWidth: 1 }, selected && { borderWidth: 2 }])).toEqual({
+      borderWidth: 1,
+    });
   });
 });
 
 describe("resolveStyle", () => {
   it("expands paddingHorizontal/Vertical into physical edges", () => {
-    expect(resolveStyle({ paddingHorizontal: 16, paddingVertical: 8 })).toEqual(
-      {
-        paddingLeft: 16,
-        paddingRight: 16,
-        paddingTop: 8,
-        paddingBottom: 8,
-      },
-    );
+    expect(resolveStyle({ paddingHorizontal: 16, paddingVertical: 8 })).toEqual({
+      paddingLeft: 16,
+      paddingRight: 16,
+      paddingTop: 8,
+      paddingBottom: 8,
+    });
   });
 
   it("expands marginHorizontal/Vertical into physical edges", () => {
@@ -56,9 +50,10 @@ describe("resolveStyle", () => {
   });
 
   it("expands shorthands provided across array entries", () => {
-    expect(
-      resolveStyle([{ paddingHorizontal: 16 }, { paddingRight: 2 }]),
-    ).toEqual({ paddingLeft: 16, paddingRight: 2 });
+    expect(resolveStyle([{ paddingHorizontal: 16 }, { paddingRight: 2 }])).toEqual({
+      paddingLeft: 16,
+      paddingRight: 2,
+    });
   });
 
   it("converts numeric lineHeight to pixels (RN semantics)", () => {
@@ -81,9 +76,11 @@ describe("resolveStyle", () => {
   });
 
   it("passes the remaining subset through untouched", () => {
-    expect(
-      resolveStyle({ flexDirection: "row", gap: 8, backgroundColor: "#000" }),
-    ).toEqual({ flexDirection: "row", gap: 8, backgroundColor: "#000" });
+    expect(resolveStyle({ flexDirection: "row", gap: 8, backgroundColor: "#000" })).toEqual({
+      flexDirection: "row",
+      gap: 8,
+      backgroundColor: "#000",
+    });
   });
 
   // RN gives longhands precedence within one object regardless of key order;
@@ -98,39 +95,26 @@ describe("resolveStyle", () => {
   it("emits borderRadius before an earlier-declared corner radius", () => {
     const resolved = resolveStyle({ borderTopLeftRadius: 4, borderRadius: 8 });
     expect(resolved).toEqual({ borderRadius: 8, borderTopLeftRadius: 4 });
-    expect(Object.keys(resolved)).toEqual([
-      "borderRadius",
-      "borderTopLeftRadius",
-    ]);
+    expect(Object.keys(resolved)).toEqual(["borderRadius", "borderTopLeftRadius"]);
   });
 
   it("keeps an explicit corner winning when the shorthand arrives in a later array entry", () => {
-    const resolved = resolveStyle([
-      { borderTopLeftRadius: 4 },
-      { borderRadius: 8 },
-    ]);
+    const resolved = resolveStyle([{ borderTopLeftRadius: 4 }, { borderRadius: 8 }]);
     expect(resolved).toEqual({ borderRadius: 8, borderTopLeftRadius: 4 });
-    expect(Object.keys(resolved)).toEqual([
-      "borderRadius",
-      "borderTopLeftRadius",
-    ]);
+    expect(Object.keys(resolved)).toEqual(["borderRadius", "borderTopLeftRadius"]);
   });
 
   it("emits gap before rowGap/columnGap and flex before its longhands", () => {
-    expect(Object.keys(resolveStyle({ rowGap: 4, gap: 8 }))).toEqual([
-      "gap",
-      "rowGap",
-    ]);
-    expect(Object.keys(resolveStyle({ flexGrow: 2, flex: 1 }))).toEqual([
-      "flex",
-      "flexGrow",
-    ]);
+    expect(Object.keys(resolveStyle({ rowGap: 4, gap: 8 }))).toEqual(["gap", "rowGap"]);
+    expect(Object.keys(resolveStyle({ flexGrow: 2, flex: 1 }))).toEqual(["flex", "flexGrow"]);
   });
 
   it("emits Horizontal/Vertical expansions after the plain shorthand", () => {
-    expect(
-      Object.keys(resolveStyle({ paddingHorizontal: 8, padding: 16 })),
-    ).toEqual(["padding", "paddingLeft", "paddingRight"]);
+    expect(Object.keys(resolveStyle({ paddingHorizontal: 8, padding: 16 }))).toEqual([
+      "padding",
+      "paddingLeft",
+      "paddingRight",
+    ]);
     expect(resolveStyle({ paddingHorizontal: 8, padding: 16 })).toEqual({
       padding: 16,
       paddingLeft: 8,
diff --git a/libraries/paywalls/tests/tree.test.tsx b/libraries/paywalls/tests/tree.test.tsx
index bc33d3168..8eda33d0d 100644
--- a/libraries/paywalls/tests/tree.test.tsx
+++ b/libraries/paywalls/tests/tree.test.tsx
@@ -35,11 +35,7 @@ describe("renderToNodeTree", () => {
     const tree = await renderToNodeTree(
       <View style={{ flexDirection: "row", padding: 16 }}>
         <Text style={{ color: "#fff" }}>Yearly</Text>
-        <Image
-          resizeMode="cover"
-          source="https://cdn.test/hero.png"
-          style={{}}
-        />
+        <Image resizeMode="cover" source="https://cdn.test/hero.png" style={{}} />
       </View>,
     );
 
@@ -129,10 +125,7 @@ describe("renderToNodeTree", () => {
     expect(tree.root).toEqual({
       type: "view",
       style: {},
-      children: [
-        { type: "text", style: {}, text: "Untitled" },
-        { type: "slot" },
-      ],
+      children: [{ type: "text", style: {}, text: "Untitled" }, { type: "slot" }],
     });
   });
 
@@ -179,10 +172,7 @@ describe("renderToNodeTree", () => {
     const tree = await renderToNodeTree(<Selectable />);
     expect(tree.root).toMatchObject({
       type: "view",
-      children: [
-        { type: "pressable", action: "onSelect" },
-        { type: "pressable" },
-      ],
+      children: [{ type: "pressable", action: "onSelect" }, { type: "pressable" }],
     });
     if (tree.root.type !== "view") {
       throw new Error("expected a view root");
diff --git a/libraries/paywalls/tests/types.test.ts b/libraries/paywalls/tests/types.test.ts
index dcd573119..957a613b3 100644
--- a/libraries/paywalls/tests/types.test.ts
+++ b/libraries/paywalls/tests/types.test.ts
@@ -109,12 +109,8 @@ describe("InferActions", () => {
     expectTypeOf<ComponentProps["onSelect"]>().toEqualTypeOf<
       ((payload: { productId: string; index: number }) => void) | undefined
     >();
-    expectTypeOf<ComponentProps["onDismiss"]>().toEqualTypeOf<
-      (() => void) | undefined
-    >();
-    expectTypeOf<ComponentProps["children"]>().toEqualTypeOf<
-      ReactNode | undefined
-    >();
+    expectTypeOf<ComponentProps["onDismiss"]>().toEqualTypeOf<(() => void) | undefined>();
+    expectTypeOf<ComponentProps["children"]>().toEqualTypeOf<ReactNode | undefined>();
   });
 });
 
@@ -135,9 +131,7 @@ describe("defineComponent end-to-end typing", () => {
       },
     });
 
-    expectTypeOf(definition.component)
-      .parameter(0)
-      .toEqualTypeOf<ComponentProps>();
+    expectTypeOf(definition.component).parameter(0).toEqualTypeOf<ComponentProps>();
   });
 });
 
diff --git a/libraries/react-native/ERROR_HANDLING.md b/libraries/react-native/ERROR_HANDLING.md
index de6e0c345..b1bba140c 100644
--- a/libraries/react-native/ERROR_HANDLING.md
+++ b/libraries/react-native/ERROR_HANDLING.md
@@ -69,20 +69,13 @@ ERROR_CODE: descriptive message
 ### In TypeScript/JavaScript
 
 ```typescript
-import {
-  VoidhashError,
-  createNativeErrorMessage,
-  parseNativeError,
-} from "./core/errors";
+import { VoidhashError, createNativeErrorMessage, parseNativeError } from "./core/errors";
 
 // Creating errors
 throw new VoidhashError("INVALID_PRODUCT_ID", originalError);
 
 // Creating native error messages
-const errorMessage = createNativeErrorMessage(
-  "PURCHASE_FAILED",
-  "Additional context"
-);
+const errorMessage = createNativeErrorMessage("PURCHASE_FAILED", "Additional context");
 
 // Parsing native error messages
 const error = parseNativeError("PURCHASE_FAILED: Purchase operation failed");
diff --git a/libraries/react-native/README.md b/libraries/react-native/README.md
index d59e51e05..810794856 100644
--- a/libraries/react-native/README.md
+++ b/libraries/react-native/README.md
@@ -15,10 +15,10 @@ createVoidhashClient("pk_test", schema, {
 
 Behavior summary:
 
-| Mode | Starts purchases | Syncs transactions to Voidhash | Confirms/acknowledges store transactions |
-|---|---|---|---|
-| `readOnly: true` | No | Yes | No |
-| `readOnly: false` (default) | Yes | Yes | Yes (after successful server sync) |
+| Mode                        | Starts purchases | Syncs transactions to Voidhash | Confirms/acknowledges store transactions |
+| --------------------------- | ---------------- | ------------------------------ | ---------------------------------------- |
+| `readOnly: true`            | No               | Yes                            | No                                       |
+| `readOnly: false` (default) | Yes              | Yes                            | Yes (after successful server sync)       |
 
 Observer reconciliation:
 
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index 46d73728b..d48b364de 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -1,111 +1,111 @@
 {
-	"name": "@voidhash/react-native",
-	"version": "0.0.1-alpha.1",
-	"private": false,
-	"description": "Voidhash React Native SDK for in-app purchases.",
-	"keywords": [
-		"voidhash",
-		"sdk",
-		"nitro",
-		"react-native",
-		"expo",
-		"payments"
-	],
-	"homepage": "https://voidhash.com/docs",
-	"bugs": {
-		"url": "https://github.com/voidhashcom/voidhash/issues"
-	},
-	"license": "MIT",
-	"author": "Voidhash (https://voidhash.com)",
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/voidhashcom/voidhash",
-		"directory": "libraries/react-native"
-	},
-	"source": "src/index",
-	"files": [
-		"*.podspec",
-		"app.plugin.js",
-		"build",
-		"nitrogen",
-		"react-native.config.js",
-		"README.md",
-		"src",
-		"android/build.gradle",
-		"android/CMakeLists.txt",
-		"android/gradle.properties",
-		"android/src",
-		"ios/**/*.cpp",
-		"ios/**/*.h",
-		"ios/**/*.m",
-		"ios/**/*.mm",
-		"ios/**/*.swift"
-	],
-	"main": "build/index",
-	"module": "build/index",
-	"types": "build/index.d.ts",
-	"react-native": "src/index",
-	"publishConfig": {
-		"access": "public",
-		"registry": "https://registry.npmjs.org/"
-	},
-	"exports": {
-		"./app.plugin.js": "./app.plugin.js",
-		"./package.json": "./package.json",
-		"./metro": {
-			"node": "./src/metro/index.ts"
-		},
-		".": "./src/index.ts"
-	},
-	"scripts": {
-		"postinstall": "tsc || exit 0;",
-		"typecheck": "tsgo --noEmit",
-		"build": "expo-module build",
-		"test": "vitest --config vitest.unit.mts run",
-		"clean": "rm -rf android/build node_modules/**/android/build lib",
-		"lint": "biome check .",
-		"lint-ci": "biome check .",
-		"format": "biome format . --write",
-		"typescript": "tsc",
-		"specs": "pnpm run typescript && nitro-codegen --logLevel=\"debug\""
-	},
-	"dependencies": {
-		"@voidhash/generated-clients": "workspace:*"
-	},
-	"devDependencies": {
-		"@effect/vitest": "4.0.0-beta.84",
-		"@srsholmes/vitest-react-native": "^0.1.5",
-		"@types/react": "~19.1.10",
-		"@vitejs/plugin-react": "catalog:",
-		"@voidhash/shared": "workspace:*",
-		"expo": "54.0.33",
-		"expo-constants": "~18.0.13",
-		"expo-linking": "~8.0.9",
-		"expo-module-scripts": "^5.0.8",
-		"nitro-codegen": "0.26.4",
-		"react": "19.1.0",
-		"react-native": "0.81.5",
-		"react-native-nitro-modules": "0.26.4",
-		"typescript": "5.9.3",
-		"ultracite": "5.0.39",
-		"vite-tsconfig-paths": "catalog:",
-		"vitest": "^4.1.6"
-	},
-	"peerDependencies": {
-		"@react-native-async-storage/async-storage": "^1.24.0 || ^2.0.0",
-		"effect": "catalog:",
-		"expo": "*",
-		"expo-constants": "*",
-		"expo-linking": "*",
-		"react": "*",
-		"react-native": "*",
-		"react-native-nitro-modules": "0.26.4",
-		"voidhash-cli": "workspace:*"
-	},
-	"peerDependenciesMeta": {
-		"voidhash-cli": {
-			"optional": true
-		}
-	},
-	"packageManager": "pnpm@10.19.0"
+  "name": "@voidhash/react-native",
+  "version": "0.0.1-alpha.1",
+  "private": false,
+  "description": "Voidhash React Native SDK for in-app purchases.",
+  "keywords": [
+    "expo",
+    "nitro",
+    "payments",
+    "react-native",
+    "sdk",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "MIT",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "libraries/react-native"
+  },
+  "source": "src/index",
+  "files": [
+    "*.podspec",
+    "app.plugin.js",
+    "build",
+    "nitrogen",
+    "react-native.config.js",
+    "README.md",
+    "src",
+    "android/build.gradle",
+    "android/CMakeLists.txt",
+    "android/gradle.properties",
+    "android/src",
+    "ios/**/*.cpp",
+    "ios/**/*.h",
+    "ios/**/*.m",
+    "ios/**/*.mm",
+    "ios/**/*.swift"
+  ],
+  "main": "build/index",
+  "module": "build/index",
+  "types": "build/index.d.ts",
+  "react-native": "src/index",
+  "exports": {
+    "./app.plugin.js": "./app.plugin.js",
+    "./package.json": "./package.json",
+    "./metro": {
+      "node": "./src/metro/index.ts"
+    },
+    ".": "./src/index.ts"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "postinstall": "tsc || exit 0;",
+    "typecheck": "tsgo --noEmit",
+    "build": "expo-module build",
+    "test": "vitest --config vitest.unit.mts run",
+    "clean": "rm -rf android/build node_modules/**/android/build lib",
+    "lint": "biome check .",
+    "lint-ci": "biome check .",
+    "format": "biome format . --write",
+    "typescript": "tsc",
+    "specs": "pnpm run typescript && nitro-codegen --logLevel=\"debug\""
+  },
+  "dependencies": {
+    "@voidhash/generated-clients": "workspace:*"
+  },
+  "devDependencies": {
+    "@effect/vitest": "4.0.0-beta.84",
+    "@srsholmes/vitest-react-native": "^0.1.5",
+    "@types/react": "~19.1.10",
+    "@vitejs/plugin-react": "catalog:",
+    "@voidhash/shared": "workspace:*",
+    "expo": "54.0.33",
+    "expo-constants": "~18.0.13",
+    "expo-linking": "~8.0.9",
+    "expo-module-scripts": "^5.0.8",
+    "nitro-codegen": "0.26.4",
+    "react": "19.1.0",
+    "react-native": "0.81.5",
+    "react-native-nitro-modules": "0.26.4",
+    "typescript": "5.9.3",
+    "ultracite": "5.0.39",
+    "vite-tsconfig-paths": "catalog:",
+    "vitest": "^4.1.6"
+  },
+  "peerDependencies": {
+    "@react-native-async-storage/async-storage": "^1.24.0 || ^2.0.0",
+    "effect": "catalog:",
+    "expo": "*",
+    "expo-constants": "*",
+    "expo-linking": "*",
+    "react": "*",
+    "react-native": "*",
+    "react-native-nitro-modules": "0.26.4",
+    "voidhash-cli": "workspace:*"
+  },
+  "peerDependenciesMeta": {
+    "voidhash-cli": {
+      "optional": true
+    }
+  },
+  "packageManager": "pnpm@10.19.0"
 }
diff --git a/libraries/react-native/plugin/build/withVoidhashReactNative.js b/libraries/react-native/plugin/build/withVoidhashReactNative.js
index c88ed3bc4..23747e5da 100644
--- a/libraries/react-native/plugin/build/withVoidhashReactNative.js
+++ b/libraries/react-native/plugin/build/withVoidhashReactNative.js
@@ -11,5 +11,5 @@ const withVoidhashReactNative = (config) => config;
 exports.default = (0, config_plugins_1.createRunOncePlugin)(
   withVoidhashReactNative,
   package_json_1.default.name,
-  package_json_1.default.version
+  package_json_1.default.version,
 );
diff --git a/libraries/react-native/plugin/src/withVoidhashReactNative.ts b/libraries/react-native/plugin/src/withVoidhashReactNative.ts
index bdda5aa78..3d1cf8674 100644
--- a/libraries/react-native/plugin/src/withVoidhashReactNative.ts
+++ b/libraries/react-native/plugin/src/withVoidhashReactNative.ts
@@ -6,8 +6,4 @@ import pkg from "../../package.json";
 
 const withVoidhashReactNative: ConfigPlugin<void> = (config) => config;
 
-export default createRunOncePlugin(
-  withVoidhashReactNative,
-  pkg.name,
-  pkg.version
-);
+export default createRunOncePlugin(withVoidhashReactNative, pkg.name, pkg.version);
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index d40086864..851f0d8b1 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -16,15 +16,9 @@ import { IdentityManager } from "./core/identity/identity-manager";
 import { LifecycleService } from "./core/lifecycle/lifecycle-service";
 import { PaymentAdapter } from "./core/payment-adapters/payment-adapter";
 import { buildPaywallRuntimeConfig } from "./core/paywalls/paywall-runtime-config";
-import {
-  type PaywallReleaseRuntime,
-  PaywallService,
-} from "./core/paywalls/paywall-service";
+import { type PaywallReleaseRuntime, PaywallService } from "./core/paywalls/paywall-service";
 import { PlatformProvider } from "./core/platform/platform-provider";
-import {
-  ProductService,
-  type ProductsBySlug,
-} from "./core/products/product-service";
+import { ProductService, type ProductsBySlug } from "./core/products/product-service";
 import { currentPersonAtom } from "./core/reactivity/client-state";
 import type { LocationSlug } from "./core/schema/registry";
 import type { RuntimeSchema } from "./core/schema/runtime";
@@ -153,9 +147,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           const productService = yield* ProductService;
           const platformProvider = yield* PlatformProvider;
 
-          const productsBySlug = yield* productService.getProducts(
-            options.schema,
-          );
+          const productsBySlug = yield* productService.getProducts(options.schema);
 
           const skippedSlugs: string[] = [];
           const runtimeConfig = buildPaywallRuntimeConfig({
@@ -167,10 +159,9 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           });
 
           if (skippedSlugs.length > 0) {
-            yield* Effect.logDebug(
-              "Skipping paywall products unresolved in the native store",
-              { slugs: skippedSlugs },
-            );
+            yield* Effect.logDebug("Skipping paywall products unresolved in the native store", {
+              slugs: skippedSlugs,
+            });
           }
 
           return runtimeConfig;
@@ -228,10 +219,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           const personInfoManager = yield* PersonInfoManager;
           const atomRegistry = yield* AtomRegistry.AtomRegistry;
           const distinctId = yield* identityManager.getDistinctId();
-          const person = yield* personAttributeManager.syncPersonAttributes(
-            distinctId,
-            attributes,
-          );
+          const person = yield* personAttributeManager.syncPersonAttributes(distinctId, attributes);
           yield* personInfoManager.cache(distinctId, person);
           atomRegistry.set(currentPersonAtom, person);
           return person;
@@ -300,10 +288,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
       processObservedTransaction: (transaction: Transaction) =>
         Effect.gen(function* processObservedTransaction() {
           const transactionService = yield* TransactionService;
-          return yield* transactionService.processObservedTransaction(
-            transaction,
-            options.schema,
-          );
+          return yield* transactionService.processObservedTransaction(transaction, options.schema);
         }),
 
       purchase: (
@@ -326,15 +311,12 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
       reconcileObservedTransactions: () =>
         Effect.gen(function* reconcileObservedTransactions() {
           const transactionService = yield* TransactionService;
-          return yield* transactionService.reconcileObservedTransactions(
-            options.schema,
-          );
+          return yield* transactionService.reconcileObservedTransactions(options.schema);
         }),
 
       // --- Analytics: Effect methods delegate to AnalyticsService ---
 
-      getAnalyticsStandardizedProperties: () =>
-        analyticsService.getStandardizedProperties(),
+      getAnalyticsStandardizedProperties: () => analyticsService.getStandardizedProperties(),
 
       capture: (eventName: string, properties: Record<string, unknown> = {}) =>
         analyticsService.capture(eventName, properties),
@@ -348,20 +330,15 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         }>,
       ) => analyticsService.transferEvents(events),
 
-      captureAutomaticStartupEvents: () =>
-        analyticsService.captureAutomaticStartupEvents(),
+      captureAutomaticStartupEvents: () => analyticsService.captureAutomaticStartupEvents(),
 
       sendAnalyticsEvents: (events: ReadonlyArray<AnalyticsIngestEvent>) =>
         analyticsService.sendAnalyticsEvents(events),
 
-      setupAutomaticLifecycleEvents: (
-        captureEvent: (eventName: string) => void,
-      ) =>
+      setupAutomaticLifecycleEvents: (captureEvent: (eventName: string) => void) =>
         Effect.gen(function* setupAutomaticLifecycleEvents() {
           const lifecycleService = yield* LifecycleService;
-          return yield* lifecycleService.setupAutomaticLifecycleEvents(
-            captureEvent,
-          );
+          return yield* lifecycleService.setupAutomaticLifecycleEvents(captureEvent);
         }),
 
       // --- Analytics: sync accessors read directly from the service ---
@@ -398,9 +375,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
           return yield* identityManager.reset();
         }),
 
-      startTransactionObserver: (
-        onPurchase?: (transaction: Transaction) => void,
-      ) =>
+      startTransactionObserver: (onPurchase?: (transaction: Transaction) => void) =>
         Effect.gen(function* startTransactionObserver() {
           const transactionService = yield* TransactionService;
           return yield* transactionService.startTransactionObserver(onPurchase);
diff --git a/libraries/react-native/src/client-react-native.ts b/libraries/react-native/src/client-react-native.ts
index 89b2ff3fc..702488a96 100644
--- a/libraries/react-native/src/client-react-native.ts
+++ b/libraries/react-native/src/client-react-native.ts
@@ -24,10 +24,7 @@ import { purchaseHookFactory } from "./react/hooks/use-purchase";
  * - Type safety for product / location / perk slugs comes from the generated
  *   `voidhash.gen.d.ts` (run `voidhash-cli types generate`).
  */
-export function createVoidhashClient(
-  publishableKey: string,
-  options: VoidhashClientOptions = {}
-) {
+export function createVoidhashClient(publishableKey: string, options: VoidhashClientOptions = {}) {
   const baseUrl = options.baseUrl || "https://api.voidhash.com";
   const debug = options.debug ?? false;
   const distinctId = options.distinctId ?? null;
@@ -58,7 +55,7 @@ export function createVoidhashClient(
     atomRegistry,
     platform,
     debug,
-    options.unstable_internalSchema
+    options.unstable_internalSchema,
   );
 
   const { provider, context, useVoidhash } = voidhashProviderFactory(client);
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index c289bc172..4279852c6 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -19,10 +19,7 @@ import { ReactNativeLifecycleAdapter } from "./core/lifecycle/react-native-lifec
 import { ApiClient } from "./core/networking/api-client";
 import { AppStoreAdapter } from "./core/payment-adapters/app-store-adapter";
 import { GooglePlayAdapter } from "./core/payment-adapters/google-play-adapter";
-import {
-  type PaywallReleaseRuntime,
-  PaywallService,
-} from "./core/paywalls/paywall-service";
+import { type PaywallReleaseRuntime, PaywallService } from "./core/paywalls/paywall-service";
 import type { PlatformInfo } from "./core/platform/platform-provider";
 import { ReactNativePlatformProvider } from "./core/platform/react-native-platform-provider";
 import { ProductService } from "./core/products/product-service";
@@ -75,12 +72,8 @@ const CreateEffectRuntime = (
       Layer.provideMerge(AsyncStorageCacheAdapter),
       Layer.provideMerge(ApiClient.Default),
       Layer.provideMerge(FetchHttpClient.layer),
-      Layer.provideMerge(
-        platform === "ios" ? AppStoreAdapter : GooglePlayAdapter,
-      ),
-      Layer.provideMerge(
-        Layer.succeed(AtomRegistry.AtomRegistry, atomRegistry),
-      ),
+      Layer.provideMerge(platform === "ios" ? AppStoreAdapter : GooglePlayAdapter),
+      Layer.provideMerge(Layer.succeed(AtomRegistry.AtomRegistry, atomRegistry)),
       Layer.provideMerge(ReactNativePlatformProvider),
       Layer.provideMerge(
         Layer.succeed(SdkConfiguration, {
@@ -95,17 +88,12 @@ const CreateEffectRuntime = (
   );
 
 const toErrorWithMessage = (code: string, unknownCause: unknown) => {
-  const cause =
-    unknownCause instanceof Error
-      ? unknownCause
-      : new Error(String(unknownCause));
+  const cause = unknownCause instanceof Error ? unknownCause : new Error(String(unknownCause));
 
   return new VoidhashError(`${code}: ${cause.message}`, cause);
 };
 
-type UninitializedEffectClient = ReturnType<
-  typeof VoidhashEffectClient.makeUnitializedClient
->;
+type UninitializedEffectClient = ReturnType<typeof VoidhashEffectClient.makeUnitializedClient>;
 
 // `makeInitializedClient` now returns `Effect<Facade, ...>` — unwrap to the
 // facade type by extracting the Effect's Success channel.
@@ -201,9 +189,7 @@ export class VoidhashClient {
         "FAILED_TO_INITIALIZE_VOIDHASH_CLIENT",
       );
 
-      void this.effectRuntime.runPromiseExit(
-        initializedClient.reconcileObservedTransactions(),
-      );
+      void this.effectRuntime.runPromiseExit(initializedClient.reconcileObservedTransactions());
 
       this.initializedClient = initializedClient;
       this._isInitialized = true;
@@ -215,9 +201,7 @@ export class VoidhashClient {
 
       if (this.preInitAnalyticsBuffer.length > 0) {
         this.effectRuntime.runSync(
-          initializedClient.transferAnalyticsEvents(
-            this.preInitAnalyticsBuffer,
-          ),
+          initializedClient.transferAnalyticsEvents(this.preInitAnalyticsBuffer),
         );
         this.preInitAnalyticsBuffer = [];
       }
@@ -227,10 +211,7 @@ export class VoidhashClient {
         "FAILED_TO_CAPTURE_STARTUP_EVENTS",
       ).catch((error) => {
         // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
-        console.warn(
-          "[voidhash] failed to capture automatic startup analytics",
-          error,
-        );
+        console.warn("[voidhash] failed to capture automatic startup analytics", error);
       });
 
       this.appLifecycleSubscription = this.effectRuntime.runSync(
@@ -251,10 +232,7 @@ export class VoidhashClient {
     await this.runSideEffect("end", async () => {
       this.ensureInitialized();
       await this.flush();
-      await this.runEffect(
-        this.initializedClient!.end(),
-        "FAILED_TO_END_VOIDHASH_CLIENT",
-      );
+      await this.runEffect(this.initializedClient!.end(), "FAILED_TO_END_VOIDHASH_CLIENT");
       this.appLifecycleSubscription?.remove();
       this.appLifecycleSubscription = null;
       this._isInitialized = false;
@@ -314,10 +292,7 @@ export class VoidhashClient {
 
   async getDistinctId() {
     this.ensureInitialized();
-    return this.runEffect(
-      this.initializedClient!.getDistinctId(),
-      "FAILED_TO_GET_DISTINCT_ID",
-    );
+    return this.runEffect(this.initializedClient!.getDistinctId(), "FAILED_TO_GET_DISTINCT_ID");
   }
 
   /**
@@ -357,10 +332,7 @@ export class VoidhashClient {
   async signOut() {
     await this.runSideEffect("signOut", async () => {
       this.ensureInitialized();
-      await this.runEffect(
-        this.initializedClient!.signOut(),
-        "FAILED_TO_SIGN_OUT",
-      );
+      await this.runEffect(this.initializedClient!.signOut(), "FAILED_TO_SIGN_OUT");
     });
   }
 
@@ -408,10 +380,7 @@ export class VoidhashClient {
    */
   async getProducts() {
     this.ensureInitialized();
-    return this.runEffect(
-      this.initializedClient!.getProducts(),
-      "FAILED_TO_GET_PRODUCTS",
-    );
+    return this.runEffect(this.initializedClient!.getProducts(), "FAILED_TO_GET_PRODUCTS");
   }
 
   /**
@@ -428,10 +397,7 @@ export class VoidhashClient {
       throw new ReadOnlyModePurchaseNotAllowedError();
     }
 
-    await this.runEffect(
-      this.initializedClient!.purchase(product, _options),
-      "FAILED_TO_PURCHASE",
-    );
+    await this.runEffect(this.initializedClient!.purchase(product, _options), "FAILED_TO_PURCHASE");
   }
 
   /**
@@ -461,9 +427,7 @@ export class VoidhashClient {
       return;
     }
 
-    this.effectRuntime.runSync(
-      this.initializedClient.capture(eventName, properties),
-    );
+    this.effectRuntime.runSync(this.initializedClient.capture(eventName, properties));
   }
 
   /**
diff --git a/libraries/react-native/src/core/analytics/service.ts b/libraries/react-native/src/core/analytics/service.ts
index 0dc342740..e04941f43 100644
--- a/libraries/react-native/src/core/analytics/service.ts
+++ b/libraries/react-native/src/core/analytics/service.ts
@@ -2,15 +2,7 @@ import {
   make as makeEventCaptureClient,
   type VoidhashEventCaptureClient,
 } from "@voidhash/generated-clients/event-capture";
-import {
-  Duration,
-  Effect,
-  Latch,
-  Layer,
-  Ref,
-  Schedule,
-  Context,
-} from "effect";
+import { Duration, Effect, Latch, Layer, Ref, Schedule, Context } from "effect";
 import { HttpClient, HttpClientRequest } from "effect/unstable/http";
 
 import { CacheManager } from "../caching/cache-manager";
@@ -18,11 +10,7 @@ import { IdentityManager } from "../identity/identity-manager";
 import { SdkConfiguration } from "../sdk-configuration";
 import { getNonce } from "../utils/crypto";
 import { AUTOMATIC_EVENTS } from "./constants";
-import {
-  AnalyticsIngestEvent,
-  AnalyticsSendFailure,
-  QueuedAnalyticsEvent,
-} from "./types";
+import { AnalyticsIngestEvent, AnalyticsSendFailure, QueuedAnalyticsEvent } from "./types";
 import {
   createQueuedAnalyticsEvent,
   getAnalyticsStandardizedProperties,
@@ -39,8 +27,7 @@ const MAX_ANALYTICS_RETRY_DELAY_MS = 30_000;
  * counterparts and so don't go through the status-set fallback.
  */
 const RETRYABLE_HTTP_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
-const ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY =
-  "voidhash:analytics:last-seen-app-release";
+const ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY = "voidhash:analytics:last-seen-app-release";
 
 interface AppReleaseInfo {
   readonly appBuild: string | null;
@@ -50,9 +37,7 @@ interface AppReleaseInfo {
 const toNullableString = (value: unknown): string | null =>
   value !== null && value !== undefined ? String(value) : null;
 
-const toAppReleaseInfo = (
-  value: AppReleaseInfo | undefined | null
-): AppReleaseInfo | null => {
+const toAppReleaseInfo = (value: AppReleaseInfo | undefined | null): AppReleaseInfo | null => {
   if (!value) return null;
   return {
     appBuild: value.appBuild,
@@ -63,9 +48,7 @@ const toAppReleaseInfo = (
 const getAnalyticsRetryDelayMs = (attempts: number) =>
   Math.min(1000 * 2 ** Math.max(attempts - 1, 0), MAX_ANALYTICS_RETRY_DELAY_MS);
 
-const parseRetryAfterMs = (
-  value: string | null | undefined
-): number | undefined => {
+const parseRetryAfterMs = (value: string | null | undefined): number | undefined => {
   if (!value) {
     return undefined;
   }
@@ -89,10 +72,9 @@ const parseRetryAfterMs = (
  * predicate so they're postponed in the queue instead — preserving the
  * cool-down behavior expected by the rate-limit tests.
  */
-const inlineRetrySchedule = Schedule.exponential(
-  Duration.seconds(1),
-  2
-).pipe(Schedule.both(Schedule.recurs(2)));
+const inlineRetrySchedule = Schedule.exponential(Duration.seconds(1), 2).pipe(
+  Schedule.both(Schedule.recurs(2)),
+);
 
 /**
  * Owns the analytics pipeline: an in-memory event queue with batching, a
@@ -134,11 +116,11 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
             Effect.succeed(
               client.pipe(
                 HttpClient.mapRequest((request) =>
-                  HttpClientRequest.prependUrl(request, ingestBaseUrl)
-                )
-              )
+                  HttpClientRequest.prependUrl(request, ingestBaseUrl),
+                ),
+              ),
             ),
-        }
+        },
       );
 
       const failNonRetryable = (status: number) =>
@@ -147,7 +129,7 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
             message: `Analytics ingest request failed: ${status}`,
             retryable: false,
             status,
-          })
+          }),
         );
 
       const failRetryable = (status: number, retryAfterMs?: number) =>
@@ -157,11 +139,11 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
             retryAfterMs,
             retryable: true,
             status,
-          })
+          }),
         );
 
       const sendAnalyticsEvents = (
-        events: ReadonlyArray<AnalyticsIngestEvent>
+        events: ReadonlyArray<AnalyticsIngestEvent>,
       ): Effect.Effect<void, AnalyticsSendFailure> =>
         Effect.gen(function* () {
           if (events.length === 0) return;
@@ -182,23 +164,18 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
           });
         }).pipe(
           Effect.catchTags({
-            CaptureDependencyUnavailableError: (err) =>
-              failRetryable(err.response.status),
-            CaptureInternalServerError: (err) =>
-              failRetryable(err.response.status),
-            CapturePayloadTooLargeError: (err) =>
-              failNonRetryable(err.response.status),
+            CaptureDependencyUnavailableError: (err) => failRetryable(err.response.status),
+            CaptureInternalServerError: (err) => failRetryable(err.response.status),
+            CapturePayloadTooLargeError: (err) => failNonRetryable(err.response.status),
             CaptureRateLimitedError: (err) =>
               failRetryable(
                 err.response.status,
                 parseRetryAfterMs(err.response.headers["retry-after"]) ??
                   err.data.retry_after_ms ??
-                  undefined
+                  undefined,
               ),
-            CaptureUnauthorizedError: (err) =>
-              failNonRetryable(err.response.status),
-            EventCaptureBatch400: (err) =>
-              failNonRetryable(err.response.status),
+            CaptureUnauthorizedError: (err) => failNonRetryable(err.response.status),
+            EventCaptureBatch400: (err) => failNonRetryable(err.response.status),
           }),
           // Unmapped status codes (e.g. 408/502/504) surface as
           // `HttpClientError`; treat network errors and the retryable subset
@@ -211,27 +188,25 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
                   cause,
                   message: "Analytics request failed",
                   retryable: true,
-                })
+                }),
               );
             }
             return RETRYABLE_HTTP_STATUS_CODES.has(status)
               ? failRetryable(status)
               : failNonRetryable(status);
-          })
+          }),
         );
 
       // Inline retry wrapper used by the queue-draining `flush()` path. Public
       // `sendAnalyticsEvents` stays single-shot so callers can implement their
       // own retry strategy.
-      const sendWithInlineRetry = (
-        events: ReadonlyArray<AnalyticsIngestEvent>
-      ) =>
+      const sendWithInlineRetry = (events: ReadonlyArray<AnalyticsIngestEvent>) =>
         sendAnalyticsEvents(events).pipe(
           Effect.retry({
             schedule: inlineRetrySchedule,
             while: (failure: AnalyticsSendFailure) =>
               failure.retryable && failure.retryAfterMs === undefined,
-          })
+          }),
         );
 
       // Re-inserts a failed batch at the head of the queue with bumped
@@ -241,7 +216,7 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
       // `takeDueBatch` already removed them.
       const postponeQueuedBatch = (
         events: ReadonlyArray<QueuedAnalyticsEvent>,
-        nextAvailableAt: number
+        nextAvailableAt: number,
       ) =>
         Ref.update(queueRef, (queue) => {
           const postponed = events.map((event) => ({
@@ -276,14 +251,10 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
 
       const processQueuedBatch = (
         queuedBatch: ReadonlyArray<QueuedAnalyticsEvent>,
-        standardizedProperties: Record<string, unknown>
+        standardizedProperties: Record<string, unknown>,
       ): Effect.Effect<void> => {
         const ingestBatch = queuedBatch.map((event) =>
-          mapQueuedAnalyticsEventToIngestEvent(
-            event,
-            standardizedProperties,
-            sessionId
-          )
+          mapQueuedAnalyticsEventToIngestEvent(event, standardizedProperties, sessionId),
         );
 
         return sendWithInlineRetry(ingestBatch).pipe(
@@ -291,48 +262,33 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
             if (failure.status === 413 && queuedBatch.length > 1) {
               const midpoint = Math.ceil(queuedBatch.length / 2);
               return Effect.gen(function* () {
-                yield* processQueuedBatch(
-                  queuedBatch.slice(0, midpoint),
-                  standardizedProperties
-                );
-                yield* processQueuedBatch(
-                  queuedBatch.slice(midpoint),
-                  standardizedProperties
-                );
+                yield* processQueuedBatch(queuedBatch.slice(0, midpoint), standardizedProperties);
+                yield* processQueuedBatch(queuedBatch.slice(midpoint), standardizedProperties);
               });
             }
 
             if (failure.status === 413) {
-              return Effect.logWarning(
-                "Dropping analytics event after 413 response",
-                { eventId: queuedBatch[0]?.id }
-              );
+              return Effect.logWarning("Dropping analytics event after 413 response", {
+                eventId: queuedBatch[0]?.id,
+              });
             }
 
             if (failure.retryable) {
               const delayMs =
                 failure.retryAfterMs ??
-                getAnalyticsRetryDelayMs(
-                  (queuedBatch[0]?.attempts ?? 0) + 1
-                );
+                getAnalyticsRetryDelayMs((queuedBatch[0]?.attempts ?? 0) + 1);
               return postponeQueuedBatch(queuedBatch, Date.now() + delayMs);
             }
 
-            return Effect.logWarning(
-              "Dropping analytics batch after non-retryable response",
-              {
-                eventIds: queuedBatch.map((event) => event.id),
-                status: failure.status,
-              }
-            );
-          })
+            return Effect.logWarning("Dropping analytics batch after non-retryable response", {
+              eventIds: queuedBatch.map((event) => event.id),
+              status: failure.status,
+            });
+          }),
         );
       };
 
-      const capture = (
-        eventName: string,
-        properties: Record<string, unknown> = {}
-      ) =>
+      const capture = (eventName: string, properties: Record<string, unknown> = {}) =>
         Effect.sync(() => {
           const normalized = eventName.trim();
           if (!normalized) return;
@@ -363,16 +319,14 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
         events: ReadonlyArray<{
           eventName: string;
           properties: Record<string, unknown>;
-        }>
+        }>,
       ) =>
         Effect.sync(() => {
           const additions: QueuedAnalyticsEvent[] = [];
           for (const event of events) {
             const normalized = event.eventName.trim();
             if (!normalized) continue;
-            additions.push(
-              createQueuedAnalyticsEvent(normalized, event.properties)
-            );
+            additions.push(createQueuedAnalyticsEvent(normalized, event.properties));
           }
           if (additions.length === 0) return;
           queueRef.ref.current = [...queueRef.ref.current, ...additions];
@@ -397,28 +351,19 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
 
           const additions: QueuedAnalyticsEvent[] = [];
           if (!previousAppRelease) {
-            additions.push(
-              createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_INSTALLED, {})
-            );
+            additions.push(createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_INSTALLED, {}));
           } else if (
             previousAppRelease.appBuild !== currentAppRelease.appBuild ||
             previousAppRelease.appVersion !== currentAppRelease.appVersion
           ) {
-            additions.push(
-              createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_UPDATED, {})
-            );
+            additions.push(createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_UPDATED, {}));
           }
-          additions.push(
-            createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_OPENED, {})
-          );
+          additions.push(createQueuedAnalyticsEvent(AUTOMATIC_EVENTS.APP_OPENED, {}));
 
           queueRef.ref.current = [...queueRef.ref.current, ...additions];
 
           yield* cacheManager
-            .set(
-              ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY,
-              currentAppRelease
-            )
+            .set(ANALYTICS_LAST_SEEN_APP_RELEASE_STORAGE_KEY, currentAppRelease)
             .pipe(Effect.orElseSucceed(() => undefined));
         });
 
@@ -430,11 +375,11 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
         Effect.gen(function* () {
           yield* Effect.race(
             Effect.sleep(Duration.millis(ANALYTICS_FLUSH_INTERVAL_MS)),
-            latch.await
+            latch.await,
           );
           yield* latch.close;
           yield* Effect.sync(() => flushCallback?.());
-        })
+        }),
       );
       yield* Effect.forkScoped(daemon);
 
@@ -451,7 +396,7 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()(
         transferEvents,
       } as const;
     }),
-  }
+  },
 ) {
   static readonly layer = Layer.effect(this, this.make);
 }
diff --git a/libraries/react-native/src/core/analytics/types.ts b/libraries/react-native/src/core/analytics/types.ts
index 9f7b1ce08..1de637d4a 100644
--- a/libraries/react-native/src/core/analytics/types.ts
+++ b/libraries/react-native/src/core/analytics/types.ts
@@ -30,9 +30,7 @@ export interface AnalyticsIngestEvent {
  * `retryable` indicates whether the failure is worth re-attempting; `retryAfterMs`
  * communicates a server-suggested backoff (from `Retry-After` header or body).
  */
-export class AnalyticsSendFailure extends Data.TaggedError(
-  "AnalyticsSendFailure"
-)<{
+export class AnalyticsSendFailure extends Data.TaggedError("AnalyticsSendFailure")<{
   readonly message: string;
   readonly retryable: boolean;
   readonly retryAfterMs?: number | undefined;
diff --git a/libraries/react-native/src/core/analytics/utils.ts b/libraries/react-native/src/core/analytics/utils.ts
index 531b66a41..622de6bf8 100644
--- a/libraries/react-native/src/core/analytics/utils.ts
+++ b/libraries/react-native/src/core/analytics/utils.ts
@@ -56,14 +56,14 @@ export const getAnalyticsStandardizedProperties = () => {
       Effect.orElseSucceed(() => {
         cached = fallbackProperties;
         return fallbackProperties;
-      })
+      }),
     );
 };
 
 export const mapQueuedAnalyticsEventToIngestEvent = (
   event: QueuedAnalyticsEvent,
   standardizedProperties: Record<string, unknown>,
-  sessionId: string
+  sessionId: string,
 ) => ({
   context: {},
   event_id: event.id,
diff --git a/libraries/react-native/src/core/caching/async-storage-cache.ts b/libraries/react-native/src/core/caching/async-storage-cache.ts
index d894c19bf..340bd17ab 100644
--- a/libraries/react-native/src/core/caching/async-storage-cache.ts
+++ b/libraries/react-native/src/core/caching/async-storage-cache.ts
@@ -6,6 +6,5 @@ import { CacheAdapter } from "./cache-adapter";
 export const AsyncStorageCacheAdapter = Layer.succeed(CacheAdapter, {
   delete: (key: string) => Effect.promise(() => AsyncStorage.removeItem(key)),
   get: (key: string) => Effect.promise(() => AsyncStorage.getItem(key)),
-  set: (key: string, value: string) =>
-    Effect.promise(() => AsyncStorage.setItem(key, value)),
+  set: (key: string, value: string) => Effect.promise(() => AsyncStorage.setItem(key, value)),
 } as const);
diff --git a/libraries/react-native/src/core/caching/cache-adapter.ts b/libraries/react-native/src/core/caching/cache-adapter.ts
index aaaf20098..0950a2f9a 100644
--- a/libraries/react-native/src/core/caching/cache-adapter.ts
+++ b/libraries/react-native/src/core/caching/cache-adapter.ts
@@ -1,7 +1,10 @@
 import { Context, type Effect } from "effect";
 
-export class CacheAdapter extends Context.Service<CacheAdapter, {
+export class CacheAdapter extends Context.Service<
+  CacheAdapter,
+  {
     readonly get: (key: string) => Effect.Effect<string | null>;
     readonly set: (key: string, value: string) => Effect.Effect<void>;
     readonly delete: (key: string) => Effect.Effect<void>;
-  }>()("rn-voidhash/CacheAdapter") {}
+  }
+>()("rn-voidhash/CacheAdapter") {}
diff --git a/libraries/react-native/src/core/caching/cache-manager.ts b/libraries/react-native/src/core/caching/cache-manager.ts
index f8ccbe963..2409544ec 100644
--- a/libraries/react-native/src/core/caching/cache-manager.ts
+++ b/libraries/react-native/src/core/caching/cache-manager.ts
@@ -24,12 +24,8 @@ const make = Effect.gen(function* effect() {
       if (cachedValue) {
         const cacheHit = JSON.parse(cachedValue) as CacheEnvelope<T>;
 
-        const isExpired = cacheHit.expiresAt
-          ? cacheHit.expiresAt < Date.now()
-          : false;
-        const isStale = cacheHit.staleAt
-          ? cacheHit.staleAt < Date.now()
-          : false;
+        const isExpired = cacheHit.expiresAt ? cacheHit.expiresAt < Date.now() : false;
+        const isStale = cacheHit.staleAt ? cacheHit.staleAt < Date.now() : false;
 
         if (isExpired) {
           yield* deleteValue(key);
@@ -45,22 +41,16 @@ const make = Effect.gen(function* effect() {
       return null;
     });
 
-  const setValue = <T>(
-    key: string,
-    value: T,
-    options?: { ttl?: number; staleTime?: number }
-  ) =>
+  const setValue = <T>(key: string, value: T, options?: { ttl?: number; staleTime?: number }) =>
     Effect.all([
       cache.set(
         key,
         JSON.stringify({
           createdAt: Date.now(),
           expiresAt: options?.ttl ? Date.now() + options.ttl : null,
-          staleAt: options?.staleTime
-            ? Date.now() + options.staleTime
-            : null,
+          staleAt: options?.staleTime ? Date.now() + options.staleTime : null,
           value,
-        } satisfies CacheEnvelope<T>)
+        } satisfies CacheEnvelope<T>),
       ),
       storeCacheKey(key),
     ]);
@@ -104,6 +94,8 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class CacheManager extends Context.Service<CacheManager, Effect.Success<typeof make>>()("rn-voidhash/CacheManager") {
-  static Default = Layer.effect(CacheManager, make)
+export class CacheManager extends Context.Service<CacheManager, Effect.Success<typeof make>>()(
+  "rn-voidhash/CacheManager",
+) {
+  static Default = Layer.effect(CacheManager, make);
 }
diff --git a/libraries/react-native/src/core/entities/product.ts b/libraries/react-native/src/core/entities/product.ts
index 73f4949fa..9fa0d57c4 100644
--- a/libraries/react-native/src/core/entities/product.ts
+++ b/libraries/react-native/src/core/entities/product.ts
@@ -20,7 +20,7 @@ export class Product {
     price: number,
     currency: string,
     type: string,
-    platform: "ios" | "android"
+    platform: "ios" | "android",
   ) {
     this.id = id;
     this.slug = slug;
@@ -49,20 +49,9 @@ export class SubscriptionProduct extends Product {
     currency: string,
     type: string,
     platform: "ios" | "android",
-    interval: string
+    interval: string,
   ) {
-    super(
-      id,
-      slug,
-      name,
-      description,
-      displayName,
-      displayPrice,
-      price,
-      currency,
-      type,
-      platform
-    );
+    super(id, slug, name, description, displayName, displayPrice, price, currency, type, platform);
     this.interval = interval;
   }
 }
diff --git a/libraries/react-native/src/core/entities/transaction.ts b/libraries/react-native/src/core/entities/transaction.ts
index 4a17203a9..58d4ec708 100644
--- a/libraries/react-native/src/core/entities/transaction.ts
+++ b/libraries/react-native/src/core/entities/transaction.ts
@@ -32,7 +32,7 @@ export class Transaction {
       receipt?: string;
       price?: number;
       currency?: string;
-    }
+    },
   ) {
     this.id = id;
     this.transactionId = transactionId;
diff --git a/libraries/react-native/src/core/feature-flags/feature-flag-service.ts b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
index cd42a6ffd..62938c516 100644
--- a/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
+++ b/libraries/react-native/src/core/feature-flags/feature-flag-service.ts
@@ -4,10 +4,7 @@ import { AtomRegistry } from "effect/unstable/reactivity";
 import { CacheManager } from "../caching/cache-manager";
 import { IdentityManager } from "../identity/identity-manager";
 import { ApiClient } from "../networking/api-client";
-import {
-  featureFlagsByKeyAtom,
-  normalizeFeatureFlagKeys,
-} from "../reactivity/client-state";
+import { featureFlagsByKeyAtom, normalizeFeatureFlagKeys } from "../reactivity/client-state";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 
 export interface FeatureFlagsResult {
@@ -41,10 +38,7 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
       const atomRegistry = yield* AtomRegistry.AtomRegistry;
       const identityManager = yield* IdentityManager;
 
-      const publishResult = (
-        flagKeys: string[] | undefined,
-        result: FeatureFlagsResult
-      ) => {
+      const publishResult = (flagKeys: string[] | undefined, result: FeatureFlagsResult) => {
         const normalizedKey = normalizeFeatureFlagKeys(flagKeys);
         const current = atomRegistry.get(featureFlagsByKeyAtom);
         atomRegistry.set(featureFlagsByKeyAtom, {
@@ -82,7 +76,7 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
 
       return { getFeatureFlags } as const;
     }),
-  }
+  },
 ) {
   static readonly layer = Layer.effect(this, this.make);
 }
diff --git a/libraries/react-native/src/core/identity/identity-manager.ts b/libraries/react-native/src/core/identity/identity-manager.ts
index c96a2b8b9..c56ea19da 100644
--- a/libraries/react-native/src/core/identity/identity-manager.ts
+++ b/libraries/react-native/src/core/identity/identity-manager.ts
@@ -4,10 +4,7 @@ import { AtomRegistry } from "effect/unstable/reactivity";
 import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../constants";
 import { CacheManager } from "../caching/cache-manager";
 import { ApiClient } from "../networking/api-client";
-import {
-  currentPersonAtom,
-  featureFlagsByKeyAtom,
-} from "../reactivity/client-state";
+import { currentPersonAtom, featureFlagsByKeyAtom } from "../reactivity/client-state";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 import { PersonInfoManager } from "./person-info-manager";
 
@@ -44,7 +41,7 @@ const make = Effect.gen(function* effect() {
     options: {
       email?: string;
       name?: string;
-    }
+    },
   ) =>
     Effect.gen(function* identify() {
       const currentDistinctId = yield* getDistinctId();
@@ -86,11 +83,8 @@ const make = Effect.gen(function* effect() {
   const generateAnonymousDistinctId = () =>
     `${ANONYMOUS_DISTINCT_ID_PREFIX}${Math.random().toString(36).slice(2, 15)}`;
   const getDistinctIdFromCache = () =>
-    cacheManager
-      .get<string>(CACHE_KEY)
-      .pipe(Effect.map((distinctId) => distinctId?.value ?? null));
-  const setDistinctIdInCache = (distinctId: string) =>
-    cacheManager.set(CACHE_KEY, distinctId);
+    cacheManager.get<string>(CACHE_KEY).pipe(Effect.map((distinctId) => distinctId?.value ?? null));
+  const setDistinctIdInCache = (distinctId: string) => cacheManager.set(CACHE_KEY, distinctId);
 
   return {
     getDistinctId,
@@ -101,11 +95,11 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class IdentityManager extends Context.Service<IdentityManager, Effect.Success<typeof make>>()("rn-voidhash/IdentityManager") {
+export class IdentityManager extends Context.Service<
+  IdentityManager,
+  Effect.Success<typeof make>
+>()("rn-voidhash/IdentityManager") {
   static Default = Layer.effect(IdentityManager, make).pipe(
-    Layer.provide(Layer.mergeAll(
-      CacheManager.Default,
-      PersonInfoManager.Default,
-    ))
-  )
+    Layer.provide(Layer.mergeAll(CacheManager.Default, PersonInfoManager.Default)),
+  );
 }
diff --git a/libraries/react-native/src/core/identity/person-attribute-manager.ts b/libraries/react-native/src/core/identity/person-attribute-manager.ts
index e881ff54a..8da6d1ed3 100644
--- a/libraries/react-native/src/core/identity/person-attribute-manager.ts
+++ b/libraries/react-native/src/core/identity/person-attribute-manager.ts
@@ -48,10 +48,7 @@ const make = Effect.gen(function* effect() {
    * forwarded as `traits`. `setOnce`/`clientEventId` are intentionally omitted
    * — the server treats them as optional.
    */
-  const syncPersonAttributes = (
-    distinctId: string,
-    attributes: PersonAttributes
-  ) =>
+  const syncPersonAttributes = (distinctId: string, attributes: PersonAttributes) =>
     Effect.gen(function* syncPersonAttributes() {
       const { email, name, traits } = splitReservedAttributes(attributes);
       const commonHeaders = yield* getCommonSdkHeaders();
@@ -78,8 +75,11 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class PersonAttributeManager extends Context.Service<PersonAttributeManager, Effect.Success<typeof make>>()("rn-voidhash/PersonAttributeManager") {
+export class PersonAttributeManager extends Context.Service<
+  PersonAttributeManager,
+  Effect.Success<typeof make>
+>()("rn-voidhash/PersonAttributeManager") {
   static Default = Layer.effect(PersonAttributeManager, make).pipe(
-    Layer.provide(CacheManager.Default)
-  )
+    Layer.provide(CacheManager.Default),
+  );
 }
diff --git a/libraries/react-native/src/core/identity/person-info-manager.ts b/libraries/react-native/src/core/identity/person-info-manager.ts
index bf624b90c..d49cd2c09 100644
--- a/libraries/react-native/src/core/identity/person-info-manager.ts
+++ b/libraries/react-native/src/core/identity/person-info-manager.ts
@@ -9,8 +9,7 @@ const make = Effect.gen(function* effect() {
   const cacheManager = yield* CacheManager;
   const apiClient = yield* ApiClient;
 
-  const generatePersonCacheKey = (distinctId: string) =>
-    `person:${distinctId}`;
+  const generatePersonCacheKey = (distinctId: string) => `person:${distinctId}`;
 
   const getPersonFromCache = (distinctId: string) =>
     cacheManager.get<SdkPerson>(generatePersonCacheKey(distinctId));
@@ -40,11 +39,7 @@ const make = Effect.gen(function* effect() {
             "x-distinct-id": distinctId,
           },
         })
-        .pipe(
-          Effect.catchTag("ApiSdkPersonNotFoundError", () =>
-            Effect.succeed(null)
-          )
-        );
+        .pipe(Effect.catchTag("ApiSdkPersonNotFoundError", () => Effect.succeed(null)));
       if (result === null) {
         return null;
       }
@@ -52,10 +47,7 @@ const make = Effect.gen(function* effect() {
       return result;
     });
 
-  const getPerson = (
-    distinctId: string,
-    cachePolicy: "cache" | "fetch" | "fetch-while-stale"
-  ) =>
+  const getPerson = (distinctId: string, cachePolicy: "cache" | "fetch" | "fetch-while-stale") =>
     Effect.gen(function* getPerson() {
       if (cachePolicy === "cache") {
         const personFromCache = yield* getPersonFromCache(distinctId);
@@ -88,8 +80,9 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class PersonInfoManager extends Context.Service<PersonInfoManager, Effect.Success<typeof make>>()("rn-voidhash/PersonInfoManager") {
-  static Default = Layer.effect(PersonInfoManager, make).pipe(
-    Layer.provide(CacheManager.Default)
-  )
+export class PersonInfoManager extends Context.Service<
+  PersonInfoManager,
+  Effect.Success<typeof make>
+>()("rn-voidhash/PersonInfoManager") {
+  static Default = Layer.effect(PersonInfoManager, make).pipe(Layer.provide(CacheManager.Default));
 }
diff --git a/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts b/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
index f126ada15..9d4c160e6 100644
--- a/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
+++ b/libraries/react-native/src/core/lifecycle/lifecycle-adapter.ts
@@ -18,7 +18,7 @@ export class LifecycleAdapter extends Context.Service<
   LifecycleAdapter,
   {
     readonly subscribe: (
-      listener: (nextState: string, previousState: string | null) => void
+      listener: (nextState: string, previousState: string | null) => void,
     ) => Effect.Effect<LifecycleSubscription | null>;
   }
 >()("rn-voidhash/LifecycleAdapter") {}
diff --git a/libraries/react-native/src/core/lifecycle/lifecycle-service.ts b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
index 6d4c2f808..0de168ad7 100644
--- a/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
+++ b/libraries/react-native/src/core/lifecycle/lifecycle-service.ts
@@ -16,7 +16,7 @@ export class LifecycleService extends Context.Service<LifecycleService>()(
       const adapter = yield* LifecycleAdapter;
 
       const setupAutomaticLifecycleEvents = (
-        captureEvent: (eventName: string) => void
+        captureEvent: (eventName: string) => void,
       ): Effect.Effect<LifecycleSubscription | null> =>
         adapter.subscribe((nextState, previousState) => {
           if (nextState === "background" && previousState !== "background") {
@@ -24,18 +24,14 @@ export class LifecycleService extends Context.Service<LifecycleService>()(
             return;
           }
 
-          if (
-            nextState === "active" &&
-            previousState !== null &&
-            previousState !== "active"
-          ) {
+          if (nextState === "active" && previousState !== null && previousState !== "active") {
             captureEvent(AUTOMATIC_EVENTS.APP_BECAME_ACTIVE);
           }
         });
 
       return { setupAutomaticLifecycleEvents } as const;
     }),
-  }
+  },
 ) {
   static readonly layer = Layer.effect(this, this.make);
 }
diff --git a/libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts b/libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts
index 66eda9e19..5b26de9f7 100644
--- a/libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts
+++ b/libraries/react-native/src/core/lifecycle/react-native-lifecycle-adapter.ts
@@ -8,7 +8,7 @@ interface ReactNativeAppState {
   readonly currentState?: AppLifecycleState;
   addEventListener: (
     eventType: "change",
-    listener: (nextState: AppLifecycleState) => void
+    listener: (nextState: AppLifecycleState) => void,
   ) => LifecycleSubscription;
 }
 
diff --git a/libraries/react-native/src/core/logging/logger.ts b/libraries/react-native/src/core/logging/logger.ts
index 2b9b80937..8c060a460 100644
--- a/libraries/react-native/src/core/logging/logger.ts
+++ b/libraries/react-native/src/core/logging/logger.ts
@@ -181,11 +181,7 @@ export class Logger {
   }
 
   // Convenience method for logging errors with stack traces
-  errorWithStack(
-    message: string,
-    error: Error,
-    data?: Record<string, unknown>
-  ): void {
+  errorWithStack(message: string, error: Error, data?: Record<string, unknown>): void {
     this.log(LogLevel.ERROR, message, {
       ...data,
       error: {
@@ -200,7 +196,7 @@ export class Logger {
   child(additionalContext: string): Logger {
     const childLogger = new Logger(
       this.context ? `${this.context}.${additionalContext}` : additionalContext,
-      this.level
+      this.level,
     );
 
     // Copy handlers from parent
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index 86216232e..5b344ceff 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -62,7 +62,7 @@ interface ReactNativeSdkHeaders {
 }
 
 const normalizeFeatureFlagsResponse = (
-  response: SdkFeatureFlagsResponse
+  response: SdkFeatureFlagsResponse,
 ): ReactNativeFeatureFlagsResponse => ({
   flags: response.flags.map((flag) => ({
     enabled: flag.enabled,
@@ -88,7 +88,7 @@ const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
     getSchema: (request: { headers: ReactNativeSdkHeaders }) =>
       Effect.map(
         client.sdkGetSchema(request.headers as SdkGetSchemaParams),
-        (response): RuntimeSchema => response as unknown as RuntimeSchema
+        (response): RuntimeSchema => response as unknown as RuntimeSchema,
       ),
     evaluateFeatureFlags: (request: {
       headers: ReactNativeSdkHeaders;
@@ -99,22 +99,16 @@ const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
           params: request.headers as SdkEvaluateFeatureFlagsParams,
           payload: request.payload,
         }),
-        normalizeFeatureFlagsResponse
+        normalizeFeatureFlagsResponse,
       ),
     getPerson: (request: { headers: ReactNativeSdkHeaders }) =>
       client.sdkGetPerson(request.headers as SdkGetPersonParams),
-    identify: (request: {
-      headers: ReactNativeSdkHeaders;
-      payload: SdkIdentifyBody;
-    }) =>
+    identify: (request: { headers: ReactNativeSdkHeaders; payload: SdkIdentifyBody }) =>
       client.sdkIdentifyPerson({
         params: request.headers as SdkIdentifyPersonParams,
         payload: request.payload,
       }),
-    resolvePaywall: (request: {
-      headers: ReactNativeSdkHeaders;
-      payload: SdkResolvePaywallBody;
-    }) =>
+    resolvePaywall: (request: { headers: ReactNativeSdkHeaders; payload: SdkResolvePaywallBody }) =>
       client.sdkResolvePaywall({
         params: request.headers as Parameters<typeof client.sdkResolvePaywall>[0]["params"],
         payload: request.payload,
@@ -148,22 +142,24 @@ const make = Effect.gen(function* effect() {
             Effect.succeed(
               withHttpDebugLogging(client).pipe(
                 HttpClient.mapRequest((request) =>
-                  HttpClientRequest.prependUrl(request, sdkConfiguration.baseUrl)
-                )
-              )
+                  HttpClientRequest.prependUrl(request, sdkConfiguration.baseUrl),
+                ),
+              ),
             )
         : (client) =>
             Effect.succeed(
               client.pipe(
                 HttpClient.mapRequest((request) =>
-                  HttpClientRequest.prependUrl(request, sdkConfiguration.baseUrl)
-                )
-              )
+                  HttpClientRequest.prependUrl(request, sdkConfiguration.baseUrl),
+                ),
+              ),
             ),
-    })
+    }),
   );
 });
 
-export class ApiClient extends Context.Service<ApiClient, Effect.Success<typeof make>>()("rn-voidhash/ApiClient") {
-  static Default = Layer.effect(ApiClient, make)
+export class ApiClient extends Context.Service<ApiClient, Effect.Success<typeof make>>()(
+  "rn-voidhash/ApiClient",
+) {
+  static Default = Layer.effect(ApiClient, make);
 }
diff --git a/libraries/react-native/src/core/networking/http-debug-client.ts b/libraries/react-native/src/core/networking/http-debug-client.ts
index 725521af9..d8b4a0e9b 100644
--- a/libraries/react-native/src/core/networking/http-debug-client.ts
+++ b/libraries/react-native/src/core/networking/http-debug-client.ts
@@ -21,9 +21,7 @@ const isRecord = (value: unknown): value is Record<string, unknown> =>
 const isSensitiveHeader = (name: string) =>
   SENSITIVE_HEADER_PATTERNS.some((pattern) => pattern.test(name));
 
-const sanitizeHeaders = (
-  headers: Record<string, string>
-): Record<string, string> => {
+const sanitizeHeaders = (headers: Record<string, string>): Record<string, string> => {
   const sanitized: Record<string, string> = {};
 
   for (const [name, value] of Object.entries(headers)) {
@@ -98,8 +96,7 @@ const summarizeBody = (body: unknown) => {
   }
 
   if (body._tag === "Uint8Array") {
-    const contentType =
-      typeof body.contentType === "string" ? body.contentType : undefined;
+    const contentType = typeof body.contentType === "string" ? body.contentType : undefined;
     const bytes = body.body;
 
     if (!(bytes instanceof Uint8Array)) {
@@ -113,9 +110,7 @@ const summarizeBody = (body: unknown) => {
     return {
       contentLength: bytes.byteLength,
       contentType: contentType ?? null,
-      preview: isTextLikeContentType(contentType)
-        ? decodeUtf8Preview(bytes)
-        : "<binary payload>",
+      preview: isTextLikeContentType(contentType) ? decodeUtf8Preview(bytes) : "<binary payload>",
       type: "Uint8Array",
     };
   }
@@ -170,7 +165,7 @@ export const withHttpDebugLogging = (client: HttpClient.HttpClient) =>
               method: request.method,
               status: response.status,
               url: request.url,
-            })
+            }),
           ),
           Effect.tapError((error) =>
             Console.error("[voidhash:http] error", {
@@ -178,9 +173,9 @@ export const withHttpDebugLogging = (client: HttpClient.HttpClient) =>
               error: summarizeError(error),
               method: request.method,
               url: request.url,
-            })
-          )
+            }),
+          ),
         );
       });
-    })
+    }),
   );
diff --git a/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts b/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
index 985eb068f..9ff5384ef 100644
--- a/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
@@ -27,23 +27,20 @@ import { PaymentAdapter } from "./payment-adapter";
 
 export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
   acknowledgePurchase(
-    transaction: Transaction
+    transaction: Transaction,
   ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never> {
     return Effect.gen(function* acknowledgePurchase() {
       if (!Storekit) {
         return yield* Effect.fail(
           new FailedToAcknowledgePurchaseError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
       yield* Effect.tryPromise({
         catch: (error) => {
-          if (
-            error instanceof Error &&
-            error.message.startsWith("TRANSACTION_NOT_FOUND")
-          ) {
+          if (error instanceof Error && error.message.startsWith("TRANSACTION_NOT_FOUND")) {
             return new FailedToAcknowledgePurchaseError({
               cause: new Error("Transaction not found"),
               message: "Failed to acknowledge purchase",
@@ -64,7 +61,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
   buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
     product: TSubscriptionProduct,
     quantity = 1,
-    appAccountToken?: string
+    appAccountToken?: string,
   ): Effect.Effect<
     Transaction,
     | UserCancelledError
@@ -79,7 +76,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new NativeAdapterNotInitializedError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -116,13 +113,10 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
             message: "Failed to buy product",
           });
         },
-        try: () =>
-          Storekit!.buyProduct(product.id, appAccountToken || "", quantity),
+        try: () => Storekit!.buyProduct(product.id, appAccountToken || "", quantity),
       });
 
-      return yield* Effect.succeed(
-        mapStorekitTransactionToTransaction(nativeTransaction)
-      );
+      return yield* Effect.succeed(mapStorekitTransactionToTransaction(nativeTransaction));
     });
   },
 
@@ -132,7 +126,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new FailedToEndNativeAdapterError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -149,7 +143,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new FailedToEndNativeAdapterError({
             message: "Failed to end native adapter",
-          })
+          }),
         );
       }
 
@@ -157,17 +151,13 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
     });
   },
 
-  getPendingTransactions(): Effect.Effect<
-    Transaction[],
-    GetPendingTransactionsError,
-    never
-  > {
+  getPendingTransactions(): Effect.Effect<Transaction[], GetPendingTransactionsError, never> {
     return Effect.gen(function* getPendingTransactions() {
       if (!Storekit) {
         return yield* Effect.fail(
           new GetPendingTransactionsError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -180,25 +170,19 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         try: () => Storekit!.getPendingTransactions(),
       });
 
-      return yield* Effect.succeed(
-        nativeTransactions.map(mapStorekitTransactionToTransaction)
-      );
+      return yield* Effect.succeed(nativeTransactions.map(mapStorekitTransactionToTransaction));
     });
   },
 
   getProducts(
-    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-  ): Effect.Effect<
-    Product[],
-    NativeAdapterNotInitializedError | FailedToGetProductsError,
-    never
-  > {
+    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
+  ): Effect.Effect<Product[], NativeAdapterNotInitializedError | FailedToGetProductsError, never> {
     return Effect.gen(function* getProducts() {
       if (!Storekit) {
         return yield* Effect.fail(
           new NativeAdapterNotInitializedError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -218,10 +202,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
             slug: productDefinition.slug,
           };
         })
-        .filter(
-          (slugIdPair): slugIdPair is { slug: string; id: string } =>
-            slugIdPair !== null
-        );
+        .filter((slugIdPair): slugIdPair is { slug: string; id: string } => slugIdPair !== null);
 
       Effect.logDebug("Getting products from App Store", {
         productIds: productIds.map(({ id }) => id),
@@ -229,10 +210,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
 
       const nativeProducts = yield* Effect.tryPromise({
         catch: (error) => {
-          if (
-            error instanceof Error &&
-            error.message.startsWith("STOREKIT_NOT_INITIALIZED")
-          ) {
+          if (error instanceof Error && error.message.startsWith("STOREKIT_NOT_INITIALIZED")) {
             Effect.logError("Failed to get products from App Store", {
               error: error as Error,
             });
@@ -261,28 +239,27 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         nativeProducts
           .map((nativeProduct) => {
             const matched = productDefinitionsArray.find(
-              (productDefinition) =>
-                getProductId(productDefinition) === nativeProduct.id
+              (productDefinition) => getProductId(productDefinition) === nativeProduct.id,
             );
             if (!matched) {
               return null;
             }
             return mapStorekitProductToProduct(matched, nativeProduct);
           })
-          .filter((p): p is Product => p !== null)
+          .filter((p): p is Product => p !== null),
       );
     });
   },
 
   getPurchaseHistory(
-    onlyIncludeActiveItems = false
+    onlyIncludeActiveItems = false,
   ): Effect.Effect<Transaction[], GetPurchaseHistoryError, never> {
     return Effect.gen(function* getPurchaseHistory() {
       if (!Storekit) {
         return yield* Effect.fail(
           new GetPurchaseHistoryError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -295,29 +272,26 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         try: () => Storekit!.getPurchasedItems(onlyIncludeActiveItems),
       });
 
-      return yield* Effect.succeed(
-        nativeTransactions.map(mapStorekitTransactionToTransaction)
-      );
+      return yield* Effect.succeed(nativeTransactions.map(mapStorekitTransactionToTransaction));
     });
   },
 
   initConnection(
-    onPurchase?: (transaction: Transaction) => void
+    onPurchase?: (transaction: Transaction) => void,
   ): Effect.Effect<void, FailedToInitializeNativeAdapterError, never> {
     return Effect.gen(function* initConnection() {
       if (!Storekit) {
         return yield* Effect.fail(
           new FailedToInitializeNativeAdapterError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
       Effect.logDebug("Initializing App Store connection");
       const onTransaction = onPurchase
         ? (nativeTransaction: StorekitTransaction) => {
-            const transaction =
-              mapStorekitTransactionToTransaction(nativeTransaction);
+            const transaction = mapStorekitTransactionToTransaction(nativeTransaction);
             onPurchase(transaction);
           }
         : undefined;
@@ -336,7 +310,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new FailedToInitializeNativeAdapterError({
             message: "Failed to initialize native adapter",
-          })
+          }),
         );
       }
 
@@ -354,7 +328,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new FailedToPresentCodeRedemptionSheetError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -371,17 +345,13 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
     });
   },
 
-  showManageSubscriptions(): Effect.Effect<
-    void,
-    FailedToShowManageSubscriptionsError,
-    never
-  > {
+  showManageSubscriptions(): Effect.Effect<void, FailedToShowManageSubscriptionsError, never> {
     return Effect.gen(function* showManageSubscriptions() {
       if (!Storekit) {
         return yield* Effect.fail(
           new FailedToShowManageSubscriptionsError({
             message: "StoreKit is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -402,7 +372,7 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
 // Helper functions for mapping StoreKit objects to our domain objects
 function mapStorekitProductToProduct(
   productDefinition: RuntimeProductDefinition,
-  nativeProduct: StorekitProduct
+  nativeProduct: StorekitProduct,
 ): Product {
   return new Product(
     nativeProduct.id,
@@ -414,13 +384,11 @@ function mapStorekitProductToProduct(
     nativeProduct.price,
     nativeProduct.currency,
     nativeProduct.type,
-    "ios"
+    "ios",
   );
 }
 
-function mapStorekitTransactionToTransaction(
-  nativeTransaction: StorekitTransaction
-): Transaction {
+function mapStorekitTransactionToTransaction(nativeTransaction: StorekitTransaction): Transaction {
   return new Transaction(
     nativeTransaction.id,
     nativeTransaction.transactionId,
@@ -436,6 +404,6 @@ function mapStorekitTransactionToTransaction(
       originalTransactionId: nativeTransaction.originalTransactionIdentifierIos,
       price: nativeTransaction.priceIos,
       receipt: nativeTransaction.transactionReceipt,
-    }
+    },
   );
 }
diff --git a/libraries/react-native/src/core/payment-adapters/errors.ts b/libraries/react-native/src/core/payment-adapters/errors.ts
index 2d00f68f7..220a88ca6 100644
--- a/libraries/react-native/src/core/payment-adapters/errors.ts
+++ b/libraries/react-native/src/core/payment-adapters/errors.ts
@@ -1,36 +1,32 @@
 import { Data } from "effect";
 
 export class NativeAdapterNotInitializedError extends Data.TaggedError(
-  "NativeAdapterNotInitializedError"
+  "NativeAdapterNotInitializedError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
 export class FailedToInitializeNativeAdapterError extends Data.TaggedError(
-  "FailedToInitializeNativeAdapterError"
+  "FailedToInitializeNativeAdapterError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
 export class FailedToEndNativeAdapterError extends Data.TaggedError(
-  "FailedToEndNativeAdapterError"
+  "FailedToEndNativeAdapterError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class FailedToGetProductsError extends Data.TaggedError(
-  "FailedToGetProductsError"
-)<{
+export class FailedToGetProductsError extends Data.TaggedError("FailedToGetProductsError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class FailedToBuyProductError extends Data.TaggedError(
-  "FailedToBuyProductError"
-)<{
+export class FailedToBuyProductError extends Data.TaggedError("FailedToBuyProductError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
@@ -40,50 +36,42 @@ export class UserCancelledError extends Data.TaggedError("UserCancelledError")<{
   readonly cause?: unknown;
 }> {}
 
-export class PurchasePendingError extends Data.TaggedError(
-  "PurchasePendingError"
-)<{
+export class PurchasePendingError extends Data.TaggedError("PurchasePendingError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
 export class FailedToAcknowledgePurchaseError extends Data.TaggedError(
-  "FailedToAcknowledgePurchaseError"
+  "FailedToAcknowledgePurchaseError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class GetPurchaseHistoryError extends Data.TaggedError(
-  "GetPurchaseHistoryError"
-)<{
+export class GetPurchaseHistoryError extends Data.TaggedError("GetPurchaseHistoryError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class GetPendingTransactionsError extends Data.TaggedError(
-  "GetPendingTransactionsError"
-)<{
+export class GetPendingTransactionsError extends Data.TaggedError("GetPendingTransactionsError")<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
 export class FailedToPresentCodeRedemptionSheetError extends Data.TaggedError(
-  "FailedToPresentCodeRedemptionSheetError"
+  "FailedToPresentCodeRedemptionSheetError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
 export class FailedToShowManageSubscriptionsError extends Data.TaggedError(
-  "FailedToShowManageSubscriptionsError"
+  "FailedToShowManageSubscriptionsError",
 )<{
   readonly message: string;
   readonly cause?: unknown;
 }> {}
 
-export class ProductNotFoundError extends Data.TaggedError(
-  "ProductNotFoundError"
-)<{
+export class ProductNotFoundError extends Data.TaggedError("ProductNotFoundError")<{
   readonly message: string;
 }> {}
diff --git a/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts b/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
index ca1921ff7..09c405a39 100644
--- a/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
@@ -25,14 +25,14 @@ import { PaymentAdapter } from "./payment-adapter";
 
 export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
   acknowledgePurchase(
-    transaction: Transaction
+    transaction: Transaction,
   ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never> {
     return Effect.gen(function* acknowledgePurchase() {
       if (!GoogleBilling) {
         return yield* Effect.fail(
           new FailedToAcknowledgePurchaseError({
             message: "Google Billing is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -44,7 +44,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new FailedToAcknowledgePurchaseError({
             message: "Purchase token is required for acknowledgment",
-          })
+          }),
         );
       }
 
@@ -54,8 +54,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
             cause: error,
             message: "Failed to acknowledge purchase",
           }),
-        try: () =>
-          GoogleBilling!.acknowledgePurchase(transaction.purchaseToken!),
+        try: () => GoogleBilling!.acknowledgePurchase(transaction.purchaseToken!),
       });
 
       if (result.responseCode !== 0) {
@@ -63,7 +62,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
           new FailedToAcknowledgePurchaseError({
             cause: new Error(result.message),
             message: "Failed to acknowledge purchase",
-          })
+          }),
         );
       }
 
@@ -77,7 +76,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
   buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
     product: TSubscriptionProduct,
     _quantity = 1,
-    appAccountToken?: string
+    appAccountToken?: string,
   ): Effect.Effect<
     Transaction,
     | UserCancelledError
@@ -92,15 +91,14 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new NativeAdapterNotInitializedError({
             message: "Google Billing is not available on this platform",
-          })
+          }),
         );
       }
 
       Effect.logDebug("Attempting to buy product", { productId: product.id });
 
       // Determine product type based on the product's type field
-      const productType: "inapp" | "subs" =
-        product.type === "subs" ? "subs" : "inapp";
+      const productType: "inapp" | "subs" = product.type === "subs" ? "subs" : "inapp";
 
       const nativePurchases = yield* Effect.tryPromise({
         catch: (error) => {
@@ -152,13 +150,11 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         return yield* Effect.fail(
           new FailedToBuyProductError({
             message: "No purchase returned from Google Billing",
-          })
+          }),
         );
       }
 
-      const transaction = mapGoogleBillingPurchaseToTransaction(
-        nativePurchases[0]
-      );
+      const transaction = mapGoogleBillingPurchaseToTransaction(nativePurchases[0]);
       Effect.logDebug("Purchase successful", {
         transactionId: transaction.id,
       });
@@ -178,32 +174,22 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
     });
   },
 
-  getPendingTransactions(): Effect.Effect<
-    Transaction[],
-    GetPendingTransactionsError,
-    never
-  > {
+  getPendingTransactions(): Effect.Effect<Transaction[], GetPendingTransactionsError, never> {
     // Google Billing doesn't have a direct equivalent to pending transactions
     // Pending transactions are typically handled through the purchase callback
-    Effect.logDebug(
-      "Getting pending transactions (Google Play returns empty array)"
-    );
+    Effect.logDebug("Getting pending transactions (Google Play returns empty array)");
     return Effect.succeed([]);
   },
 
   getProducts(
-    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-  ): Effect.Effect<
-    Product[],
-    NativeAdapterNotInitializedError | FailedToGetProductsError,
-    never
-  > {
+    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
+  ): Effect.Effect<Product[], NativeAdapterNotInitializedError | FailedToGetProductsError, never> {
     return Effect.gen(function* getProducts() {
       if (!GoogleBilling) {
         return yield* Effect.fail(
           new NativeAdapterNotInitializedError({
             message: "Google Billing is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -224,7 +210,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         try: () =>
           GoogleBilling!.getItemsByType(
             "inapp",
-            productIds.map((pair) => pair.id)
+            productIds.map((pair) => pair.id),
           ),
       });
 
@@ -237,7 +223,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         try: () =>
           GoogleBilling!.getItemsByType(
             "subs",
-            productIds.map((pair) => pair.id)
+            productIds.map((pair) => pair.id),
           ),
       });
 
@@ -246,22 +232,22 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         allProducts.map((nativeProduct) =>
           mapGoogleBillingProductToProduct(
             productIds.find((pair) => pair.id === nativeProduct.id)?.slug ?? "",
-            nativeProduct
-          )
-        )
+            nativeProduct,
+          ),
+        ),
       );
     });
   },
 
   getPurchaseHistory(
-    onlyIncludeActiveItems = false
+    onlyIncludeActiveItems = false,
   ): Effect.Effect<Transaction[], GetPurchaseHistoryError, never> {
     return Effect.gen(function* getPurchaseHistory() {
       if (!GoogleBilling) {
         return yield* Effect.fail(
           new GetPurchaseHistoryError({
             message: "Google Billing is not available on this platform",
-          })
+          }),
         );
       }
 
@@ -287,13 +273,13 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
 
       const allPurchases = [...inappPurchases, ...subsPurchases];
       const transactions = allPurchases.map((purchase) =>
-        mapGoogleBillingPurchaseToTransaction(purchase)
+        mapGoogleBillingPurchaseToTransaction(purchase),
       );
 
       if (onlyIncludeActiveItems) {
         const activeTransactions = transactions.filter(
           // TODO: Check if this is the correct way to do this
-          (t) => t.isAutoRenewing || t.productId.includes("inapp")
+          (t) => t.isAutoRenewing || t.productId.includes("inapp"),
         );
         Effect.logDebug("Filtered active transactions", {
           count: activeTransactions.length,
@@ -309,21 +295,20 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
   },
 
   initConnection(
-    onPurchase?: (transaction: Transaction) => void
+    onPurchase?: (transaction: Transaction) => void,
   ): Effect.Effect<void, FailedToInitializeNativeAdapterError, never> {
     return Effect.gen(function* initConnection() {
       if (!GoogleBilling) {
         return yield* Effect.fail(
           new FailedToInitializeNativeAdapterError({
             message: "Google Billing is not available on this platform",
-          })
+          }),
         );
       }
 
       const onPurchaseCallback = onPurchase
         ? (nativePurchase: GoogleBillingPurchase) => {
-            const transaction =
-              mapGoogleBillingPurchaseToTransaction(nativePurchase);
+            const transaction = mapGoogleBillingPurchaseToTransaction(nativePurchase);
             onPurchase(transaction);
           }
         : undefined;
@@ -345,7 +330,7 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
 // Helper functions for mapping Google Billing objects to our domain objects
 function mapGoogleBillingProductToProduct(
   slug: string,
-  nativeProduct: GoogleBillingProductDetail
+  nativeProduct: GoogleBillingProductDetail,
 ): Product {
   return new Product(
     nativeProduct.id,
@@ -357,13 +342,11 @@ function mapGoogleBillingProductToProduct(
     Number.parseFloat(nativeProduct.displayPrice.replaceAll(/[^0-9.]/g, "")), // Extract numeric price
     nativeProduct.currency,
     nativeProduct.type,
-    "android"
+    "android",
   );
 }
 
-function mapGoogleBillingPurchaseToTransaction(
-  nativePurchase: GoogleBillingPurchase
-): Transaction {
+function mapGoogleBillingPurchaseToTransaction(nativePurchase: GoogleBillingPurchase): Transaction {
   return new Transaction(
     nativePurchase.id,
     nativePurchase.orderId || nativePurchase.purchaseToken,
@@ -376,7 +359,7 @@ function mapGoogleBillingPurchaseToTransaction(
       isAutoRenewing: nativePurchase.isAutoRenewing,
       purchaseToken: nativePurchase.purchaseToken,
       receipt: nativePurchase.originalJson,
-    }
+    },
   );
 }
 
diff --git a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
index 8de9d1727..a783800ef 100644
--- a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
@@ -23,7 +23,7 @@ export class PaymentAdapter extends Context.Service<
   PaymentAdapter,
   {
     initConnection(
-      onPurchase?: (transaction: Transaction) => void
+      onPurchase?: (transaction: Transaction) => void,
     ): Effect.Effect<void, FailedToInitializeNativeAdapterError>;
 
     endConnection(): Effect.Effect<void, FailedToEndNativeAdapterError, never>;
@@ -35,17 +35,13 @@ export class PaymentAdapter extends Context.Service<
      * from the definition's `configuration.providers.*`.
      */
     getProducts(
-      productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-    ): Effect.Effect<
-      Product[],
-      NativeAdapterNotInitializedError | FailedToGetProductsError,
-      never
-    >;
+      productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
+    ): Effect.Effect<Product[], NativeAdapterNotInitializedError | FailedToGetProductsError, never>;
 
     buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
       product: TSubscriptionProduct,
       quantity?: number,
-      appAccountToken?: string
+      appAccountToken?: string,
     ): Effect.Effect<
       Transaction,
       | UserCancelledError
@@ -57,18 +53,14 @@ export class PaymentAdapter extends Context.Service<
     >;
 
     acknowledgePurchase(
-      transaction: Transaction
+      transaction: Transaction,
     ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never>;
 
     getPurchaseHistory(
-      onlyIncludeActiveItems?: boolean
+      onlyIncludeActiveItems?: boolean,
     ): Effect.Effect<Transaction[], GetPurchaseHistoryError, never>;
 
-    getPendingTransactions(): Effect.Effect<
-      Transaction[],
-      GetPendingTransactionsError,
-      never
-    >;
+    getPendingTransactions(): Effect.Effect<Transaction[], GetPendingTransactionsError, never>;
 
     // Platform specific methods
     presentCodeRedemptionSheet?(): Effect.Effect<
@@ -77,10 +69,6 @@ export class PaymentAdapter extends Context.Service<
       never
     >;
 
-    showManageSubscriptions?(): Effect.Effect<
-      void,
-      FailedToShowManageSubscriptionsError,
-      never
-    >;
+    showManageSubscriptions?(): Effect.Effect<void, FailedToShowManageSubscriptionsError, never>;
   }
 >()("rn-voidhash/PaymentAdapter") {}
diff --git a/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts b/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
index 5d018b07d..d7192ce20 100644
--- a/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
+++ b/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
@@ -6,9 +6,7 @@ import type {
 import type { SubscriptionProduct } from "../entities/product";
 import type { PaywallReleaseRuntime } from "./paywall-service";
 
-const PERIOD_BY_NORMALIZED_INTERVAL: Readonly<
-  Record<string, PaywallRuntimeConfigProductPeriod>
-> = {
+const PERIOD_BY_NORMALIZED_INTERVAL: Readonly<Record<string, PaywallRuntimeConfigProductPeriod>> = {
   // ISO-8601 billing periods (Play Billing `billingPeriod`).
   p1m: "month",
   p1y: "year",
@@ -47,16 +45,13 @@ function mapProductToRuntimeConfigProduct(
     id: product.id,
     slug: product.slug,
     displayName: product.displayName,
-    description:
-      product.description.length > 0 ? product.description : undefined,
+    description: product.description.length > 0 ? product.description : undefined,
     price: Number.isFinite(product.price) ? product.price : undefined,
     priceString: product.displayPrice,
     currencyCode: product.currency.length > 0 ? product.currency : undefined,
     // `interval` is only present when the adapter produced a full
     // SubscriptionProduct; plain Product instances leave it undefined.
-    period: mapStoreIntervalToPeriod(
-      (product as Partial<SubscriptionProduct>).interval,
-    ),
+    period: mapStoreIntervalToPeriod((product as Partial<SubscriptionProduct>).interval),
     // Trial metadata isn't surfaced by the current native adapters yet.
     trialPeriod: undefined,
   };
diff --git a/libraries/react-native/src/core/paywalls/paywall-service.ts b/libraries/react-native/src/core/paywalls/paywall-service.ts
index c3ebeaf07..f0a96b035 100644
--- a/libraries/react-native/src/core/paywalls/paywall-service.ts
+++ b/libraries/react-native/src/core/paywalls/paywall-service.ts
@@ -11,17 +11,13 @@ import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
  * `runtime` block for code releases (`null`/absent for visual-editor
  * releases). Passed through from the server response untouched.
  */
-export type ResolvedPaywallRelease = NonNullable<
-  SdkResolvedPaywall["showing"]["paywallRelease"]
->;
+export type ResolvedPaywallRelease = NonNullable<SdkResolvedPaywall["showing"]["paywallRelease"]>;
 
 /**
  * The §6 runtime block of a code-release paywall: content-addressed identity,
  * the product slugs the paywall uses and the author-configured variables.
  */
-export type PaywallReleaseRuntime = NonNullable<
-  ResolvedPaywallRelease["runtime"]
->;
+export type PaywallReleaseRuntime = NonNullable<ResolvedPaywallRelease["runtime"]>;
 
 /**
  * Resolves the currently assigned paywall for a location slug. Stateless;
diff --git a/libraries/react-native/src/core/platform/platform-provider.ts b/libraries/react-native/src/core/platform/platform-provider.ts
index bddaebe03..6651d2b0e 100644
--- a/libraries/react-native/src/core/platform/platform-provider.ts
+++ b/libraries/react-native/src/core/platform/platform-provider.ts
@@ -12,4 +12,6 @@ export interface PlatformInfo {
   isDebugBuild: boolean;
   platform: "ios" | "android" | "unknown";
 }
-export class PlatformProvider extends Context.Service<PlatformProvider, PlatformInfo>()("rn-voidhash/PlatformProvider") {}
+export class PlatformProvider extends Context.Service<PlatformProvider, PlatformInfo>()(
+  "rn-voidhash/PlatformProvider",
+) {}
diff --git a/libraries/react-native/src/core/products/product-service.ts b/libraries/react-native/src/core/products/product-service.ts
index cc465e50b..1cfa1728c 100644
--- a/libraries/react-native/src/core/products/product-service.ts
+++ b/libraries/react-native/src/core/products/product-service.ts
@@ -4,10 +4,7 @@ import { CacheManager } from "../caching/cache-manager";
 import type { Product, SubscriptionProduct } from "../entities/product";
 import { PaymentAdapter } from "../payment-adapters/payment-adapter";
 import type { ProductSlug } from "../schema/registry";
-import type {
-  RuntimeProductDefinition,
-  RuntimeSchema,
-} from "../schema/runtime";
+import type { RuntimeProductDefinition, RuntimeSchema } from "../schema/runtime";
 
 /**
  * Map of product slugs to the resolved native subscription product (or `null`
@@ -19,19 +16,17 @@ export type ProductsBySlug = Record<ProductSlug, SubscriptionProduct | null>;
 const NATIVE_PRODUCTS_CACHE_TTL_MS = 1000 * 60 * 60 * 24;
 
 const generateCacheKeyFromProductDefinitions = (
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
 ) => `native-products:${JSON.stringify(productDefinitions)}`;
 
 const mapNativeProductsToProductMap = (
   productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
-  nativeProducts: Product[]
+  nativeProducts: Product[],
 ): ProductsBySlug => {
   const productMap = {} as Record<string, SubscriptionProduct | null>;
 
   for (const slug of Object.keys(productDefinitions)) {
-    const nativeProduct = nativeProducts.find(
-      (candidate) => candidate.slug === slug
-    );
+    const nativeProduct = nativeProducts.find((candidate) => candidate.slug === slug);
     productMap[slug] = (nativeProduct as SubscriptionProduct | undefined) ?? null;
   }
 
@@ -51,11 +46,10 @@ export class ProductService extends Context.Service<ProductService>()(
       const paymentAdapter = yield* PaymentAdapter;
 
       const loadProductsCached = (
-        productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+        productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
       ) =>
         Effect.gen(function* () {
-          const cacheKey =
-            generateCacheKeyFromProductDefinitions(productDefinitions);
+          const cacheKey = generateCacheKeyFromProductDefinitions(productDefinitions);
           const cached = yield* cacheManager.get<Product[]>(cacheKey);
           if (cached && !(cached.isStale || cached.isExpired)) {
             yield* Effect.logDebug("Products fetched from cache", {
@@ -64,8 +58,7 @@ export class ProductService extends Context.Service<ProductService>()(
             return cached.value;
           }
 
-          const nativeProducts =
-            yield* paymentAdapter.getProducts(productDefinitions);
+          const nativeProducts = yield* paymentAdapter.getProducts(productDefinitions);
           yield* Effect.logDebug("Products fetched from native adapter", {
             products: nativeProducts,
           });
@@ -81,15 +74,12 @@ export class ProductService extends Context.Service<ProductService>()(
         Effect.gen(function* () {
           const productDefinitions = schema.products;
           const nativeProducts = yield* loadProductsCached(productDefinitions);
-          return mapNativeProductsToProductMap(
-            productDefinitions,
-            nativeProducts
-          );
+          return mapNativeProductsToProductMap(productDefinitions, nativeProducts);
         });
 
       return { getProducts } as const;
     }),
-  }
+  },
 ) {
   static readonly layer = Layer.effect(this, this.make);
 }
diff --git a/libraries/react-native/src/core/reactivity/client-state.ts b/libraries/react-native/src/core/reactivity/client-state.ts
index 002681e74..97a5e05f2 100644
--- a/libraries/react-native/src/core/reactivity/client-state.ts
+++ b/libraries/react-native/src/core/reactivity/client-state.ts
@@ -10,8 +10,7 @@ export type { FeatureFlagsResult };
  * Reactive store of the currently identified person. Written by the
  * person/identity facade paths and read by `useCurrentPerson`.
  */
-export const currentPersonAtom: Atom.Writable<SdkPerson | null> =
-  Atom.make<SdkPerson | null>(null);
+export const currentPersonAtom: Atom.Writable<SdkPerson | null> = Atom.make<SdkPerson | null>(null);
 
 /**
  * Reactive store of the runtime schema fetched at init time and refreshed
@@ -22,8 +21,9 @@ export const currentPersonAtom: Atom.Writable<SdkPerson | null> =
  * publishes — the cached value first, then the freshly refreshed value
  * when the background fetch lands. The two values are usually identical.
  */
-export const schemaAtom: Atom.Writable<RuntimeSchema | null> =
-  Atom.make<RuntimeSchema | null>(null);
+export const schemaAtom: Atom.Writable<RuntimeSchema | null> = Atom.make<RuntimeSchema | null>(
+  null,
+);
 
 /**
  * Reactive store of feature flag results, keyed by their normalized flag-key
@@ -31,9 +31,8 @@ export const schemaAtom: Atom.Writable<RuntimeSchema | null> =
  * request set in its own slot prevents one hook's fetch from overwriting the
  * value of another hook that asked for a different set of flags.
  */
-export const featureFlagsByKeyAtom: Atom.Writable<
-  Readonly<Record<string, FeatureFlagsResult>>
-> = Atom.make<Readonly<Record<string, FeatureFlagsResult>>>({});
+export const featureFlagsByKeyAtom: Atom.Writable<Readonly<Record<string, FeatureFlagsResult>>> =
+  Atom.make<Readonly<Record<string, FeatureFlagsResult>>>({});
 
 /**
  * Normalizes a feature-flag request signature so that any callers asking for
@@ -41,9 +40,7 @@ export const featureFlagsByKeyAtom: Atom.Writable<
  * sort a copy because the caller's array is part of their input and must not
  * be mutated.
  */
-export const normalizeFeatureFlagKeys = (
-  flagKeys?: readonly string[]
-): string => {
+export const normalizeFeatureFlagKeys = (flagKeys?: readonly string[]): string => {
   if (!flagKeys || flagKeys.length === 0) {
     return "all";
   }
@@ -54,7 +51,7 @@ const featureFlagsForNormalizedKeyAtom = Atom.family((normalizedKey: string) =>
   Atom.make((get): FeatureFlagsResult | null => {
     const byKey = get(featureFlagsByKeyAtom);
     return byKey[normalizedKey] ?? null;
-  })
+  }),
 );
 
 /**
diff --git a/libraries/react-native/src/core/schema/registry.ts b/libraries/react-native/src/core/schema/registry.ts
index 6bd84a522..30acffee9 100644
--- a/libraries/react-native/src/core/schema/registry.ts
+++ b/libraries/react-native/src/core/schema/registry.ts
@@ -27,17 +27,16 @@ export interface VoidhashRegisterShape {
   };
 }
 
-type Resolve<K extends keyof VoidhashRegisterShape["schema"]> =
-  VoidhashRegister extends {
-    schema: { [P in K]: infer V extends string };
-  }
-    ? // When the augmentation declares an empty union (`never`) — e.g. the
-      // placeholder `voidhash.gen.d.ts` written before the first real
-      // generation — fall back to `string` so user code still compiles.
-      [V] extends [never]
-      ? string
-      : V
-    : string;
+type Resolve<K extends keyof VoidhashRegisterShape["schema"]> = VoidhashRegister extends {
+  schema: { [P in K]: infer V extends string };
+}
+  ? // When the augmentation declares an empty union (`never`) — e.g. the
+    // placeholder `voidhash.gen.d.ts` written before the first real
+    // generation — fall back to `string` so user code still compiles.
+    [V] extends [never]
+    ? string
+    : V
+  : string;
 
 /** Resolves to the literal union of product slugs declared on the server, or `string` when the .d.ts isn't loaded. */
 export type ProductSlug = Resolve<"products">;
diff --git a/libraries/react-native/src/core/schema/schema-manager.ts b/libraries/react-native/src/core/schema/schema-manager.ts
index db38415e7..1d7e093f4 100644
--- a/libraries/react-native/src/core/schema/schema-manager.ts
+++ b/libraries/react-native/src/core/schema/schema-manager.ts
@@ -22,10 +22,7 @@ const generateSchemaCacheKey = (appVersion: string) => `schema:${appVersion}`;
 
 const toFetchError = (cause: unknown): FailedToFetchSchemaError => {
   const errorCause = cause instanceof Error ? cause : new Error(String(cause));
-  return new FailedToFetchSchemaError(
-    "Failed to fetch schema at init",
-    errorCause
-  );
+  return new FailedToFetchSchemaError("Failed to fetch schema at init", errorCause);
 };
 
 interface ResolveSchemaArgs {
@@ -45,119 +42,103 @@ interface ResolveSchemaArgs {
  * cached schema — using a separate cache key per version makes upgrades
  * safe by forcing a fresh fetch on the first launch of a new build.
  */
-export class SchemaManager extends Context.Service<SchemaManager>()(
-  "rn-voidhash/SchemaManager",
-  {
-    make: Effect.gen(function* () {
-      const cacheManager = yield* CacheManager;
-      const apiClient = yield* ApiClient;
-      const platformProvider = yield* PlatformProvider;
-      const atomRegistry = yield* AtomRegistry.AtomRegistry;
-
-      const publishSchema = (schema: RuntimeSchema) => {
-        atomRegistry.set(schemaAtom, schema);
-      };
-
-      const fetchFromServer = (distinctId: string) =>
-        Effect.gen(function* () {
-          const commonHeaders = yield* getCommonSdkHeaders();
-          return yield* apiClient.sdk.getSchema({
-            headers: {
-              ...commonHeaders,
-              "x-distinct-id": distinctId,
-            },
-          });
+export class SchemaManager extends Context.Service<SchemaManager>()("rn-voidhash/SchemaManager", {
+  make: Effect.gen(function* () {
+    const cacheManager = yield* CacheManager;
+    const apiClient = yield* ApiClient;
+    const platformProvider = yield* PlatformProvider;
+    const atomRegistry = yield* AtomRegistry.AtomRegistry;
+
+    const publishSchema = (schema: RuntimeSchema) => {
+      atomRegistry.set(schemaAtom, schema);
+    };
+
+    const fetchFromServer = (distinctId: string) =>
+      Effect.gen(function* () {
+        const commonHeaders = yield* getCommonSdkHeaders();
+        return yield* apiClient.sdk.getSchema({
+          headers: {
+            ...commonHeaders,
+            "x-distinct-id": distinctId,
+          },
         });
+      });
 
-      const cacheAndPublish = (cacheKey: string, schema: RuntimeSchema) =>
-        Effect.gen(function* () {
-          yield* cacheManager.set(cacheKey, schema, {
-            ttl: SCHEMA_CACHE_TTL_MS,
-          });
-          publishSchema(schema);
+    const cacheAndPublish = (cacheKey: string, schema: RuntimeSchema) =>
+      Effect.gen(function* () {
+        yield* cacheManager.set(cacheKey, schema, {
+          ttl: SCHEMA_CACHE_TTL_MS,
         });
-
-      /**
-       * Fork a background refresh that outlives `init()`'s scope.
-       * `forkDetach` decouples the fiber from the caller scope so a cache
-       * hit on init returns synchronously while the refresh still completes
-       * later. Long-term, the proper shape is a scoped consumer fiber
-       * backed by a queue (see `analytics/service.ts` for that pattern);
-       * `forkDetach` is the lightweight equivalent for a single-shot
-       * request.
-       */
-      const scheduleBackgroundRefresh = (
-        cacheKey: string,
-        distinctId: string
-      ) =>
-        fetchFromServer(distinctId).pipe(
-          Effect.tap((schema) => cacheAndPublish(cacheKey, schema)),
-          Effect.catch((cause) =>
-            Effect.logDebug(
-              "[voidhash] schema background refresh failed",
-              { cause }
-            )
-          ),
-          // `startImmediately: true` so the fiber runs without waiting for
-          // the next yield point — important because `resolveSchema`
-          // returns synchronously after this and the caller may not yield
-          // again for some time.
-          Effect.forkDetach({ startImmediately: true })
-        );
-
-      const resolveSchema = ({
-        distinctId,
-        internalSchema,
-      }: ResolveSchemaArgs) =>
-        Effect.gen(function* () {
-          // Test/internal escape hatch — never hit the cache or network.
-          if (internalSchema) {
-            publishSchema(internalSchema);
-            return internalSchema;
-          }
-
-          const { appVersion } = platformProvider;
-
-          // No app version means we can't safely key the cache (features in
-          // a future build could reference items missing from the cached
-          // schema). Skip the cache entirely and always fetch synchronously;
-          // a failure is fatal.
-          if (!appVersion) {
-            yield* Effect.logWarning(
-              "[voidhash] No appVersion available — skipping schema cache and fetching synchronously."
-            );
-            const schema = yield* fetchFromServer(distinctId).pipe(
-              Effect.mapError(toFetchError)
-            );
-            publishSchema(schema);
-            return schema;
-          }
-
-          const cacheKey = generateSchemaCacheKey(appVersion);
-          const cached = yield* cacheManager.get<RuntimeSchema>(cacheKey);
-
-          // Cache hit: serve immediately and unconditionally revalidate in
-          // the background. `CacheManager.get` already drops expired
-          // entries before returning, so any non-null hit is fresh enough
-          // to serve.
-          if (cached) {
-            publishSchema(cached.value);
-            yield* scheduleBackgroundRefresh(cacheKey, distinctId);
-            return cached.value;
-          }
-
-          // Cache miss (including expired-and-dropped entries). Synchronous
-          // fetch — failures are fatal.
-          const schema = yield* fetchFromServer(distinctId).pipe(
-            Effect.mapError(toFetchError)
+        publishSchema(schema);
+      });
+
+    /**
+     * Fork a background refresh that outlives `init()`'s scope.
+     * `forkDetach` decouples the fiber from the caller scope so a cache
+     * hit on init returns synchronously while the refresh still completes
+     * later. Long-term, the proper shape is a scoped consumer fiber
+     * backed by a queue (see `analytics/service.ts` for that pattern);
+     * `forkDetach` is the lightweight equivalent for a single-shot
+     * request.
+     */
+    const scheduleBackgroundRefresh = (cacheKey: string, distinctId: string) =>
+      fetchFromServer(distinctId).pipe(
+        Effect.tap((schema) => cacheAndPublish(cacheKey, schema)),
+        Effect.catch((cause) =>
+          Effect.logDebug("[voidhash] schema background refresh failed", { cause }),
+        ),
+        // `startImmediately: true` so the fiber runs without waiting for
+        // the next yield point — important because `resolveSchema`
+        // returns synchronously after this and the caller may not yield
+        // again for some time.
+        Effect.forkDetach({ startImmediately: true }),
+      );
+
+    const resolveSchema = ({ distinctId, internalSchema }: ResolveSchemaArgs) =>
+      Effect.gen(function* () {
+        // Test/internal escape hatch — never hit the cache or network.
+        if (internalSchema) {
+          publishSchema(internalSchema);
+          return internalSchema;
+        }
+
+        const { appVersion } = platformProvider;
+
+        // No app version means we can't safely key the cache (features in
+        // a future build could reference items missing from the cached
+        // schema). Skip the cache entirely and always fetch synchronously;
+        // a failure is fatal.
+        if (!appVersion) {
+          yield* Effect.logWarning(
+            "[voidhash] No appVersion available — skipping schema cache and fetching synchronously.",
           );
-          yield* cacheAndPublish(cacheKey, schema);
+          const schema = yield* fetchFromServer(distinctId).pipe(Effect.mapError(toFetchError));
+          publishSchema(schema);
           return schema;
-        });
-
-      return { resolveSchema } as const;
-    }),
-  }
-) {
+        }
+
+        const cacheKey = generateSchemaCacheKey(appVersion);
+        const cached = yield* cacheManager.get<RuntimeSchema>(cacheKey);
+
+        // Cache hit: serve immediately and unconditionally revalidate in
+        // the background. `CacheManager.get` already drops expired
+        // entries before returning, so any non-null hit is fresh enough
+        // to serve.
+        if (cached) {
+          publishSchema(cached.value);
+          yield* scheduleBackgroundRefresh(cacheKey, distinctId);
+          return cached.value;
+        }
+
+        // Cache miss (including expired-and-dropped entries). Synchronous
+        // fetch — failures are fatal.
+        const schema = yield* fetchFromServer(distinctId).pipe(Effect.mapError(toFetchError));
+        yield* cacheAndPublish(cacheKey, schema);
+        return schema;
+      });
+
+    return { resolveSchema } as const;
+  }),
+}) {
   static readonly layer = Layer.effect(this, this.make);
 }
diff --git a/libraries/react-native/src/core/sdk-configuration.ts b/libraries/react-native/src/core/sdk-configuration.ts
index 7687e655e..1622cadb9 100644
--- a/libraries/react-native/src/core/sdk-configuration.ts
+++ b/libraries/react-native/src/core/sdk-configuration.ts
@@ -1,9 +1,12 @@
 import { Context } from "effect";
 
-export class SdkConfiguration extends Context.Service<SdkConfiguration, {
+export class SdkConfiguration extends Context.Service<
+  SdkConfiguration,
+  {
     readonly baseUrl: string;
     readonly debug: boolean;
     readonly ingestUrl: string | undefined;
     readonly publishableKey: string;
     readonly readOnly: boolean;
-  }>()("rn-voidhash/SdkConfiguration") {}
+  }
+>()("rn-voidhash/SdkConfiguration") {}
diff --git a/libraries/react-native/src/core/testing/payment-adapter.ts b/libraries/react-native/src/core/testing/payment-adapter.ts
index 649c81c54..a02c192d2 100644
--- a/libraries/react-native/src/core/testing/payment-adapter.ts
+++ b/libraries/react-native/src/core/testing/payment-adapter.ts
@@ -22,7 +22,7 @@ import type { RuntimeProductDefinition } from "../schema/runtime";
 
 export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
   acknowledgePurchase(
-    transaction: Transaction
+    transaction: Transaction,
   ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never> {
     Effect.logDebug("TestPaymentAdapter: Acknowledging purchase", {
       transactionId: transaction.id,
@@ -33,7 +33,7 @@ export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
   buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
     product: TSubscriptionProduct,
     quantity = 1,
-    _appAccountToken?: string
+    _appAccountToken?: string,
   ): Effect.Effect<
     Transaction,
     | UserCancelledError
@@ -57,8 +57,8 @@ export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
         quantity,
         false,
         "ios",
-        {}
-      )
+        {},
+      ),
     );
   },
 
@@ -67,22 +67,14 @@ export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
     return Effect.void;
   },
 
-  getPendingTransactions(): Effect.Effect<
-    Transaction[],
-    GetPendingTransactionsError,
-    never
-  > {
+  getPendingTransactions(): Effect.Effect<Transaction[], GetPendingTransactionsError, never> {
     Effect.logDebug("TestPaymentAdapter: Getting pending transactions");
     return Effect.succeed([]);
   },
 
   getProducts(
-    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
-  ): Effect.Effect<
-    Product[],
-    NativeAdapterNotInitializedError | FailedToGetProductsError,
-    never
-  > {
+    productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
+  ): Effect.Effect<Product[], NativeAdapterNotInitializedError | FailedToGetProductsError, never> {
     const productDefinitionsArray = Object.values(productDefinitions);
 
     Effect.logDebug("TestPaymentAdapter: Getting products", {
@@ -102,21 +94,21 @@ export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
             100,
             "USD",
             "subscription",
-            "ios"
-          )
-      )
+            "ios",
+          ),
+      ),
     );
   },
 
   getPurchaseHistory(
-    _onlyIncludeActiveItems = false
+    _onlyIncludeActiveItems = false,
   ): Effect.Effect<Transaction[], GetPurchaseHistoryError, never> {
     Effect.logDebug("TestPaymentAdapter: Getting purchase history");
     return Effect.succeed([]);
   },
 
   initConnection(
-    _onPurchase?: (transaction: Transaction) => void
+    _onPurchase?: (transaction: Transaction) => void,
   ): Effect.Effect<void, FailedToInitializeNativeAdapterError, never> {
     Effect.logDebug("TestPaymentAdapter: Initializing connection");
     return Effect.void;
@@ -131,11 +123,7 @@ export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
     return Effect.void;
   },
 
-  showManageSubscriptions(): Effect.Effect<
-    void,
-    FailedToShowManageSubscriptionsError,
-    never
-  > {
+  showManageSubscriptions(): Effect.Effect<void, FailedToShowManageSubscriptionsError, never> {
     Effect.logDebug("TestPaymentAdapter: Showing manage subscriptions");
     return Effect.void;
   },
diff --git a/libraries/react-native/src/core/testing/test-platform-provider.ts b/libraries/react-native/src/core/testing/test-platform-provider.ts
index 93d243c38..4d7696977 100644
--- a/libraries/react-native/src/core/testing/test-platform-provider.ts
+++ b/libraries/react-native/src/core/testing/test-platform-provider.ts
@@ -1,9 +1,6 @@
 import { Layer } from "effect";
 
-import {
-  type PlatformInfo,
-  PlatformProvider,
-} from "../platform/platform-provider";
+import { type PlatformInfo, PlatformProvider } from "../platform/platform-provider";
 
 const defaultTestPlatformInfo: PlatformInfo = {
   appBuild: "100",
@@ -22,9 +19,7 @@ const defaultTestPlatformInfo: PlatformInfo = {
   systemVersion: "1.0.0",
 };
 
-export const ReactNativePlatformProvider = (
-  platformInfo: Partial<PlatformInfo> = {}
-) =>
+export const ReactNativePlatformProvider = (platformInfo: Partial<PlatformInfo> = {}) =>
   Layer.succeed(PlatformProvider, {
     ...defaultTestPlatformInfo,
     ...platformInfo,
diff --git a/libraries/react-native/src/core/transactions/transaction-service.ts b/libraries/react-native/src/core/transactions/transaction-service.ts
index 64cb8211f..d8480ff89 100644
--- a/libraries/react-native/src/core/transactions/transaction-service.ts
+++ b/libraries/react-native/src/core/transactions/transaction-service.ts
@@ -7,10 +7,7 @@ import { PersonInfoManager } from "../identity/person-info-manager";
 import { IdentityManager } from "../identity/identity-manager";
 import { ApiClient } from "../networking/api-client";
 import { PaymentAdapter } from "../payment-adapters/payment-adapter";
-import type {
-  RuntimeProductDefinition,
-  RuntimeSchema,
-} from "../schema/runtime";
+import type { RuntimeProductDefinition, RuntimeSchema } from "../schema/runtime";
 import { SdkConfiguration } from "../sdk-configuration";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
 
@@ -24,34 +21,29 @@ const getProcessedTransactionCacheKey = (transactionProcessingKey: string) =>
 
 const resolveTransactionProductSlug = (
   transaction: Transaction,
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
 ) => {
-  const matchedProduct = Object.values(productDefinitions).find(
-    (productDefinition) => {
-      if (productDefinition.slug === transaction.productId) {
-        return true;
-      }
-
-      const provider =
-        transaction.platform === "ios"
-          ? productDefinition.configuration.providers.appleAppStore
-          : productDefinition.configuration.providers.googlePlay;
-
-      return provider?.productId === transaction.productId;
+  const matchedProduct = Object.values(productDefinitions).find((productDefinition) => {
+    if (productDefinition.slug === transaction.productId) {
+      return true;
     }
-  );
+
+    const provider =
+      transaction.platform === "ios"
+        ? productDefinition.configuration.providers.appleAppStore
+        : productDefinition.configuration.providers.googlePlay;
+
+    return provider?.productId === transaction.productId;
+  });
 
   return matchedProduct?.slug ?? transaction.productId;
 };
 
 const mapTransactionToSyncPayload = (
   transaction: Transaction,
-  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
 ) => {
-  const productSlug = resolveTransactionProductSlug(
-    transaction,
-    productDefinitions
-  );
+  const productSlug = resolveTransactionProductSlug(transaction, productDefinitions);
 
   if (transaction.platform === "ios") {
     return {
@@ -95,27 +87,16 @@ export class TransactionService extends Context.Service<TransactionService>()(
 
       const inFlightKeys = new Set<string>();
 
-      const processObservedTransaction = (
-        transaction: Transaction,
-        schema: RuntimeSchema
-      ) =>
+      const processObservedTransaction = (transaction: Transaction, schema: RuntimeSchema) =>
         Effect.gen(function* () {
-          const transactionProcessingKey =
-            buildTransactionProcessingKey(transaction);
+          const transactionProcessingKey = buildTransactionProcessingKey(transaction);
           if (inFlightKeys.has(transactionProcessingKey)) {
             return;
           }
 
-          const processedCacheKey = getProcessedTransactionCacheKey(
-            transactionProcessingKey
-          );
-          const cachedTransaction =
-            yield* cacheManager.get<boolean>(processedCacheKey);
-          if (
-            cachedTransaction &&
-            !cachedTransaction.isExpired &&
-            cachedTransaction.value
-          ) {
+          const processedCacheKey = getProcessedTransactionCacheKey(transactionProcessingKey);
+          const cachedTransaction = yield* cacheManager.get<boolean>(processedCacheKey);
+          if (cachedTransaction && !cachedTransaction.isExpired && cachedTransaction.value) {
             return;
           }
 
@@ -124,7 +105,7 @@ export class TransactionService extends Context.Service<TransactionService>()(
               "Skipping observed Android transaction without purchase token",
               {
                 transactionId: transaction.transactionId,
-              }
+              },
             );
             return;
           }
@@ -139,10 +120,7 @@ export class TransactionService extends Context.Service<TransactionService>()(
                 ...commonHeaders,
                 "x-distinct-id": distinctId,
               },
-              payload: mapTransactionToSyncPayload(
-                transaction,
-                schema.products
-              ),
+              payload: mapTransactionToSyncPayload(transaction, schema.products),
             });
 
             yield* cacheManager.set(processedCacheKey, true, {
@@ -159,22 +137,14 @@ export class TransactionService extends Context.Service<TransactionService>()(
 
       const reconcileObservedTransactions = (schema: RuntimeSchema) =>
         Effect.gen(function* () {
-          const [pendingTransactions, purchasedTransactions] = yield* Effect.all(
-            [
-              paymentAdapter.getPendingTransactions(),
-              paymentAdapter.getPurchaseHistory(true),
-            ]
-          );
+          const [pendingTransactions, purchasedTransactions] = yield* Effect.all([
+            paymentAdapter.getPendingTransactions(),
+            paymentAdapter.getPurchaseHistory(true),
+          ]);
 
           const observedTransactionsByKey = new Map<string, Transaction>();
-          for (const transaction of [
-            ...pendingTransactions,
-            ...purchasedTransactions,
-          ]) {
-            observedTransactionsByKey.set(
-              buildTransactionProcessingKey(transaction),
-              transaction
-            );
+          for (const transaction of [...pendingTransactions, ...purchasedTransactions]) {
+            observedTransactionsByKey.set(buildTransactionProcessingKey(transaction), transaction);
           }
 
           for (const transaction of observedTransactionsByKey.values()) {
@@ -183,8 +153,8 @@ export class TransactionService extends Context.Service<TransactionService>()(
                 Effect.logWarning("Failed to process observed transaction", {
                   error,
                   transactionId: transaction.transactionId,
-                })
-              )
+                }),
+              ),
             );
           }
         });
@@ -202,9 +172,8 @@ export class TransactionService extends Context.Service<TransactionService>()(
           yield* personInfoManager.getPerson(distinctId, "fetch");
         });
 
-      const startTransactionObserver = (
-        onPurchase?: (transaction: Transaction) => void
-      ) => paymentAdapter.initConnection(onPurchase);
+      const startTransactionObserver = (onPurchase?: (transaction: Transaction) => void) =>
+        paymentAdapter.initConnection(onPurchase);
 
       const endConnection = () => paymentAdapter.endConnection();
 
@@ -217,7 +186,7 @@ export class TransactionService extends Context.Service<TransactionService>()(
         startTransactionObserver,
       } as const;
     }),
-  }
+  },
 ) {
   static readonly layer = Layer.effect(this, this.make);
 }
diff --git a/libraries/react-native/src/core/types.ts b/libraries/react-native/src/core/types.ts
index 1fea0fba2..5d98fcdf8 100644
--- a/libraries/react-native/src/core/types.ts
+++ b/libraries/react-native/src/core/types.ts
@@ -53,7 +53,7 @@ export type MaybeUrl = string | URL;
  */
 export type FetchEsque = (
   input: RequestInfo | MaybeUrl,
-  init?: RequestInit | RequestInitEsque
+  init?: RequestInit | RequestInitEsque,
 ) => Promise<ResponseEsque>;
 
 // API
diff --git a/libraries/react-native/src/core/utils.ts b/libraries/react-native/src/core/utils.ts
index 36dc284b2..aaec127a5 100644
--- a/libraries/react-native/src/core/utils.ts
+++ b/libraries/react-native/src/core/utils.ts
@@ -2,9 +2,7 @@
 
 import type { ResponseEsque } from "./types";
 
-export async function safeParseJSON<T>(
-  input: ResponseEsque
-): Promise<T | Error> {
+export async function safeParseJSON<T>(input: ResponseEsque): Promise<T | Error> {
   const text = await input.text();
   try {
     return JSON.parse(text) as T;
@@ -13,10 +11,7 @@ export async function safeParseJSON<T>(
   }
 }
 
-export function expoRouterWithVoidhashCallback(options: {
-  path: string;
-  initial: boolean;
-}) {
+export function expoRouterWithVoidhashCallback(options: { path: string; initial: boolean }) {
   if (options.path.includes("voidhash/callback")) {
     return null;
   }
diff --git a/libraries/react-native/src/core/utils/get-common-sdk-headers.ts b/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
index 932e90d3e..3d9e7f5de 100644
--- a/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
+++ b/libraries/react-native/src/core/utils/get-common-sdk-headers.ts
@@ -49,9 +49,7 @@ export const getCommonSdkHeaders = (): Effect.Effect<
 
     const { locales } = platformProvider;
     const preferredLocales =
-      locales.length > 0
-        ? locales.map((locale) => locale.languageTag).join(",")
-        : undefined;
+      locales.length > 0 ? locales.map((locale) => locale.languageTag).join(",") : undefined;
     const clientLocale = locales[0]?.languageTag ?? undefined;
 
     return {
diff --git a/libraries/react-native/src/errors.ts b/libraries/react-native/src/errors.ts
index 647c396c2..39c253e4b 100644
--- a/libraries/react-native/src/errors.ts
+++ b/libraries/react-native/src/errors.ts
@@ -13,9 +13,7 @@ export class FailedToFetchSchemaError extends VoidhashError {}
 
 export class NotInitializedError extends VoidhashError {
   constructor() {
-    super(
-      "Voidhash Client was not initialized. Call init() before calling this method."
-    );
+    super("Voidhash Client was not initialized. Call init() before calling this method.");
   }
 }
 
@@ -42,9 +40,7 @@ export class PurchaseCancelledError extends VoidhashError {}
 
 export class ReadOnlyModePurchaseNotAllowedError extends VoidhashError {
   constructor() {
-    super(
-      "Read-only mode is enabled. Purchasing is disabled for observer-only operation."
-    );
+    super("Read-only mode is enabled. Purchasing is disabled for observer-only operation.");
   }
 }
 
diff --git a/libraries/react-native/src/internal/paywall-bridge/parser.ts b/libraries/react-native/src/internal/paywall-bridge/parser.ts
index 7b4ec335d..ada3427f8 100644
--- a/libraries/react-native/src/internal/paywall-bridge/parser.ts
+++ b/libraries/react-native/src/internal/paywall-bridge/parser.ts
@@ -15,7 +15,7 @@ export class PaywallBridgeParseError extends Error {
   constructor(
     readonly code: PaywallBridgeParseErrorCode,
     message: string,
-    readonly causeValue?: unknown
+    readonly causeValue?: unknown,
   ) {
     super(message);
     this.name = "PaywallBridgeParseError";
@@ -39,7 +39,7 @@ function isRecord(value: unknown): value is Record<string, unknown> {
 function getRequiredString(
   value: unknown,
   fieldName: string,
-  type: PaywallBridgeActionType
+  type: PaywallBridgeActionType,
 ): string {
   if (typeof value === "string" && value.length > 0) {
     return value;
@@ -47,24 +47,16 @@ function getRequiredString(
   throw new PaywallBridgeParseError(
     "INVALID_PAYLOAD",
     `Invalid paywall bridge payload for '${type}': '${fieldName}' must be a non-empty string`,
-    value
+    value,
   );
 }
 
-function validatePayload(
-  type: PaywallBridgeActionType,
-  payload: unknown
-): void {
+function validatePayload(type: PaywallBridgeActionType, payload: unknown): void {
   if (payload === undefined || payload === null) {
-    if (
-      type === "purchase" ||
-      type === "openExternal" ||
-      type === "event" ||
-      type === "log"
-    ) {
+    if (type === "purchase" || type === "openExternal" || type === "event" || type === "log") {
       throw new PaywallBridgeParseError(
         "INVALID_PAYLOAD",
-        `Invalid paywall bridge payload for '${type}': payload is required`
+        `Invalid paywall bridge payload for '${type}': payload is required`,
       );
     }
     return;
@@ -74,7 +66,7 @@ function validatePayload(
     throw new PaywallBridgeParseError(
       "INVALID_PAYLOAD",
       `Invalid paywall bridge payload for '${type}': payload must be an object`,
-      payload
+      payload,
     );
   }
 
@@ -95,7 +87,7 @@ function validatePayload(
       throw new PaywallBridgeParseError(
         "INVALID_PAYLOAD",
         "Invalid paywall bridge payload for 'event': 'properties' must be an object when present",
-        payload.properties
+        payload.properties,
       );
     }
     return;
@@ -105,16 +97,11 @@ function validatePayload(
     const level = payload.level;
     const message = payload.message;
 
-    if (
-      level !== "debug" &&
-      level !== "info" &&
-      level !== "warn" &&
-      level !== "error"
-    ) {
+    if (level !== "debug" && level !== "info" && level !== "warn" && level !== "error") {
       throw new PaywallBridgeParseError(
         "INVALID_PAYLOAD",
         "Invalid paywall bridge payload for 'log': 'level' must be debug|info|warn|error",
-        level
+        level,
       );
     }
 
@@ -130,7 +117,7 @@ export function parsePaywallBridgeEnvelope(raw: string): PaywallBridgeEnvelope {
     throw new PaywallBridgeParseError(
       "INVALID_JSON",
       "Invalid paywall bridge payload: failed to parse JSON",
-      error
+      error,
     );
   }
 
@@ -138,7 +125,7 @@ export function parsePaywallBridgeEnvelope(raw: string): PaywallBridgeEnvelope {
     throw new PaywallBridgeParseError(
       "INVALID_ENVELOPE",
       "Invalid paywall bridge payload: expected object envelope",
-      parsed
+      parsed,
     );
   }
 
@@ -146,7 +133,7 @@ export function parsePaywallBridgeEnvelope(raw: string): PaywallBridgeEnvelope {
     throw new PaywallBridgeParseError(
       "UNSUPPORTED_VERSION",
       `Unsupported paywall bridge version: ${String(parsed.version)}`,
-      parsed.version
+      parsed.version,
     );
   }
 
@@ -154,7 +141,7 @@ export function parsePaywallBridgeEnvelope(raw: string): PaywallBridgeEnvelope {
     throw new PaywallBridgeParseError(
       "UNSUPPORTED_TYPE",
       `Unsupported paywall bridge message type: ${String(parsed.type)}`,
-      parsed.type
+      parsed.type,
     );
   }
 
@@ -165,7 +152,7 @@ export function parsePaywallBridgeEnvelope(raw: string): PaywallBridgeEnvelope {
     throw new PaywallBridgeParseError(
       "INVALID_ENVELOPE",
       "Invalid paywall bridge payload: 'requestId' must be a non-empty string when present",
-      parsed.requestId
+      parsed.requestId,
     );
   }
 
diff --git a/libraries/react-native/src/internal/paywall-bridge/protocol.ts b/libraries/react-native/src/internal/paywall-bridge/protocol.ts
index 64409054b..91f4e6cb2 100644
--- a/libraries/react-native/src/internal/paywall-bridge/protocol.ts
+++ b/libraries/react-native/src/internal/paywall-bridge/protocol.ts
@@ -13,8 +13,7 @@ export const PAYWALL_BRIDGE_VERSION = 1 as const;
 const toAsciiSafeJson = (value: unknown): string =>
   JSON.stringify(value).replace(
     /[\u0080-\uffff]/g,
-    (character) =>
-      `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`,
+    (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`,
   );
 
 export type PaywallBridgeActionType =
@@ -26,45 +25,38 @@ export type PaywallBridgeActionType =
   | "event"
   | "log";
 
-export interface PaywallBridgeBaseEnvelope<
-  TType extends PaywallBridgeActionType,
-> {
+export interface PaywallBridgeBaseEnvelope<TType extends PaywallBridgeActionType> {
   version: typeof PAYWALL_BRIDGE_VERSION;
   type: TType;
   requestId?: string;
 }
 
-export interface PaywallBridgeReadyEnvelope
-  extends PaywallBridgeBaseEnvelope<"ready"> {
+export interface PaywallBridgeReadyEnvelope extends PaywallBridgeBaseEnvelope<"ready"> {
   payload?: {
     templateVersion?: string;
   };
 }
 
-export interface PaywallBridgeCloseEnvelope
-  extends PaywallBridgeBaseEnvelope<"close"> {
+export interface PaywallBridgeCloseEnvelope extends PaywallBridgeBaseEnvelope<"close"> {
   payload?: {
     reason?: string;
   };
 }
 
-export interface PaywallBridgePurchaseEnvelope
-  extends PaywallBridgeBaseEnvelope<"purchase"> {
+export interface PaywallBridgePurchaseEnvelope extends PaywallBridgeBaseEnvelope<"purchase"> {
   payload: {
     productId: string;
     paywallProductId?: string;
   };
 }
 
-export interface PaywallBridgeRestoreEnvelope
-  extends PaywallBridgeBaseEnvelope<"restore"> {
+export interface PaywallBridgeRestoreEnvelope extends PaywallBridgeBaseEnvelope<"restore"> {
   payload?: {
     source?: string;
   };
 }
 
-export interface PaywallBridgeOpenExternalEnvelope
-  extends PaywallBridgeBaseEnvelope<"openExternal"> {
+export interface PaywallBridgeOpenExternalEnvelope extends PaywallBridgeBaseEnvelope<"openExternal"> {
   payload: {
     url: string;
   };
@@ -75,16 +67,14 @@ export interface PaywallBridgeOpenExternalEnvelope
  * Fire-and-forget: the SDK routes it to analytics capture and never sends a
  * response envelope.
  */
-export interface PaywallBridgeEventEnvelope
-  extends PaywallBridgeBaseEnvelope<"event"> {
+export interface PaywallBridgeEventEnvelope extends PaywallBridgeBaseEnvelope<"event"> {
   payload: {
     name: string;
     properties?: Record<string, unknown>;
   };
 }
 
-export interface PaywallBridgeLogEnvelope
-  extends PaywallBridgeBaseEnvelope<"log"> {
+export interface PaywallBridgeLogEnvelope extends PaywallBridgeBaseEnvelope<"log"> {
   payload: {
     level: "debug" | "info" | "warn" | "error";
     message: string;
@@ -139,11 +129,7 @@ export function createPaywallBridgeSuccessResponse(
 }
 
 /** Billing period of a {@link PaywallRuntimeConfigProduct} (contract §7.1). */
-export type PaywallRuntimeConfigProductPeriod =
-  | "month"
-  | "year"
-  | "week"
-  | "lifetime";
+export type PaywallRuntimeConfigProductPeriod = "month" | "year" | "week" | "lifetime";
 
 /**
  * A purchasable product surfaced to a paywall bundle, per deploy-contract
diff --git a/libraries/react-native/src/internal/webview/PaywallWebView.tsx b/libraries/react-native/src/internal/webview/PaywallWebView.tsx
index 52bd02444..08bdaeac3 100644
--- a/libraries/react-native/src/internal/webview/PaywallWebView.tsx
+++ b/libraries/react-native/src/internal/webview/PaywallWebView.tsx
@@ -6,30 +6,17 @@ import React, {
   useRef,
   useState,
 } from "react";
-import {
-  ActivityIndicator,
-  Linking,
-  Platform,
-  Text,
-  View,
-} from "react-native";
+import { ActivityIndicator, Linking, Platform, Text, View } from "react-native";
 
 import type {
   PaywallWebViewErrorEvent,
   PaywallWebViewNavigationEvent,
   PaywallWebViewShouldStartLoadRequest,
 } from "../../specs/PaywallWebView.nitro";
-import {
-  PaywallWebViewHost,
-  type PaywallWebViewHostRef,
-} from "./PaywallWebViewHost";
+import { PaywallWebViewHost, type PaywallWebViewHostRef } from "./PaywallWebViewHost";
 import { styles } from "./styles";
 import type { PaywallWebViewImperativeRef, PaywallWebViewProps } from "./types";
-import {
-  createNativeEvent,
-  normalizeSource,
-  wrapNitroCallback,
-} from "./utils";
+import { createNativeEvent, normalizeSource, wrapNitroCallback } from "./utils";
 import { compileWhitelist, passesWhitelist } from "./whitelist";
 
 const defaultOriginWhitelist = ["http://*", "https://*"];
@@ -45,11 +32,7 @@ function defaultRenderLoading() {
   );
 }
 
-function defaultRenderError(
-  domain: string | undefined,
-  code: number,
-  description: string
-) {
+function defaultRenderError(domain: string | undefined, code: number, description: string) {
   return (
     <View style={styles.loadingOrErrorView}>
       <Text style={styles.errorTextTitle}>Error loading page</Text>
@@ -60,10 +43,7 @@ function defaultRenderError(
   );
 }
 
-export const PaywallWebView = forwardRef<
-  PaywallWebViewImperativeRef,
-  PaywallWebViewProps
->(
+export const PaywallWebView = forwardRef<PaywallWebViewImperativeRef, PaywallWebViewProps>(
   (
     {
       source,
@@ -115,29 +95,21 @@ export const PaywallWebView = forwardRef<
       renderLoading,
       renderError,
     },
-    ref
+    ref,
   ) => {
     // Nitro Views rely on Fabric/New Architecture.
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     if ((globalThis as any).nativeFabricUIManager == null) {
-      throw new Error(
-        "PaywallWebView requires React Native New Architecture (Fabric) enabled."
-      );
+      throw new Error("PaywallWebView requires React Native New Architecture (Fabric) enabled.");
     }
 
     const hybridViewRef = useRef<PaywallWebViewHostRef | null>(null);
-    const [viewState, setViewState] = useState<ViewState>(
-      startInLoadingState ? "LOADING" : "IDLE"
-    );
-    const [lastErrorEvent, setLastErrorEvent] =
-      useState<PaywallWebViewErrorEvent | null>(null);
+    const [viewState, setViewState] = useState<ViewState>(startInLoadingState ? "LOADING" : "IDLE");
+    const [lastErrorEvent, setLastErrorEvent] = useState<PaywallWebViewErrorEvent | null>(null);
     const startUrl = useRef<string | null>(null);
 
     const sourceNormalized = useMemo(() => normalizeSource(source), [source]);
-    const compiledWhitelist = useMemo(
-      () => compileWhitelist(originWhitelist),
-      [originWhitelist]
-    );
+    const compiledWhitelist = useMemo(() => compileWhitelist(originWhitelist), [originWhitelist]);
 
     const onHybridRef = useCallback((hybridRef: PaywallWebViewHostRef) => {
       hybridViewRef.current = hybridRef;
@@ -148,7 +120,7 @@ export const PaywallWebView = forwardRef<
         startUrl.current = event.url;
         onLoadStart?.(createNativeEvent(event));
       },
-      [onLoadStart]
+      [onLoadStart],
     );
 
     const onLoadingFinish = useCallback(
@@ -160,7 +132,7 @@ export const PaywallWebView = forwardRef<
           setViewState("IDLE");
         }
       },
-      [onLoad, onLoadEnd]
+      [onLoad, onLoadEnd],
     );
 
     const onLoadingError = useCallback(
@@ -169,7 +141,7 @@ export const PaywallWebView = forwardRef<
         setViewState("ERROR");
         setLastErrorEvent(event);
       },
-      [onError]
+      [onError],
     );
 
     const onLoadingProgress = useCallback(
@@ -179,7 +151,7 @@ export const PaywallWebView = forwardRef<
         }
         onLoadProgress?.(createNativeEvent(event));
       },
-      [onLoadProgress]
+      [onLoadProgress],
     );
 
     const onShouldStartLoad = useCallback(
@@ -206,7 +178,7 @@ export const PaywallWebView = forwardRef<
 
         return true;
       },
-      [compiledWhitelist, onShouldStartLoadWithRequest]
+      [compiledWhitelist, onShouldStartLoadWithRequest],
     );
 
     useImperativeHandle(
@@ -247,7 +219,7 @@ export const PaywallWebView = forwardRef<
           hybridViewRef.current?.stopLoading();
         },
       }),
-      []
+      [],
     );
 
     let otherView: React.ReactElement | null = null;
@@ -257,7 +229,7 @@ export const PaywallWebView = forwardRef<
       otherView = (renderError ?? defaultRenderError)(
         lastErrorEvent.domain,
         lastErrorEvent.code,
-        lastErrorEvent.description
+        lastErrorEvent.description,
       );
     }
 
@@ -283,7 +255,9 @@ export const PaywallWebView = forwardRef<
           incognito={incognito}
           injectedJavaScript={injectedJavaScript}
           injectedJavaScriptBeforeContentLoaded={injectedJavaScriptBeforeContentLoaded}
-          injectedJavaScriptBeforeContentLoadedForMainFrameOnly={injectedJavaScriptBeforeContentLoadedForMainFrameOnly}
+          injectedJavaScriptBeforeContentLoadedForMainFrameOnly={
+            injectedJavaScriptBeforeContentLoadedForMainFrameOnly
+          }
           injectedJavaScriptForMainFrameOnly={injectedJavaScriptForMainFrameOnly}
           javaScriptEnabled={javaScriptEnabled}
           mediaPlaybackRequiresUserAction={mediaPlaybackRequiresUserAction}
@@ -295,21 +269,21 @@ export const PaywallWebView = forwardRef<
               ? (event: any) => {
                   onContentProcessDidTerminate(createNativeEvent(event));
                 }
-              : undefined
+              : undefined,
           )}
           onFileDownload={wrapNitroCallback(
             onFileDownload
               ? (event: any) => {
                   onFileDownload(createNativeEvent(event));
                 }
-              : undefined
+              : undefined,
           )}
           onHttpError={wrapNitroCallback(
             onHttpError
               ? (event: any) => {
                   onHttpError(createNativeEvent(event));
                 }
-              : undefined
+              : undefined,
           )}
           onLoadingError={wrapNitroCallback(onLoadingError)}
           onLoadingFinish={wrapNitroCallback(onLoadingFinish)}
@@ -320,21 +294,21 @@ export const PaywallWebView = forwardRef<
               ? (event: any) => {
                   onMessage(createNativeEvent(event));
                 }
-              : undefined
+              : undefined,
           )}
           onOpenWindow={wrapNitroCallback(
             onOpenWindow
               ? (event: any) => {
                   onOpenWindow(createNativeEvent(event));
                 }
-              : undefined
+              : undefined,
           )}
           onRenderProcessGone={wrapNitroCallback(
             onRenderProcessGone
               ? (event: any) => {
                   onRenderProcessGone(createNativeEvent(event));
                 }
-              : undefined
+              : undefined,
           )}
           onShouldStartLoadWithRequest={wrapNitroCallback(onShouldStartLoad as any)}
           originWhitelist={originWhitelist}
@@ -353,7 +327,7 @@ export const PaywallWebView = forwardRef<
         {otherView}
       </View>
     );
-  }
+  },
 );
 
 PaywallWebView.displayName = "PaywallWebView";
diff --git a/libraries/react-native/src/internal/webview/PaywallWebViewHost.ts b/libraries/react-native/src/internal/webview/PaywallWebViewHost.ts
index 74a6cd228..60a688f06 100644
--- a/libraries/react-native/src/internal/webview/PaywallWebViewHost.ts
+++ b/libraries/react-native/src/internal/webview/PaywallWebViewHost.ts
@@ -1,20 +1,14 @@
 import { getHostComponent, type HybridRef } from "react-native-nitro-modules";
 
-import type {
-  PaywallWebViewMethods,
-  PaywallWebViewProps,
-} from "../../specs/PaywallWebView.nitro";
+import type { PaywallWebViewMethods, PaywallWebViewProps } from "../../specs/PaywallWebView.nitro";
 
 // We intentionally use require() to avoid requiring resolveJsonModule in this package tsconfig.
 // biome-ignore lint/suspicious/noExplicitAny: generated JSON view config type is inferred at runtime.
 const PaywallWebViewConfig: any = require("../../../nitrogen/generated/shared/json/PaywallWebViewConfig.json");
 
-export const PaywallWebViewHost = getHostComponent<
-  PaywallWebViewProps,
-  PaywallWebViewMethods
->("PaywallWebView", () => PaywallWebViewConfig);
+export const PaywallWebViewHost = getHostComponent<PaywallWebViewProps, PaywallWebViewMethods>(
+  "PaywallWebView",
+  () => PaywallWebViewConfig,
+);
 
-export type PaywallWebViewHostRef = HybridRef<
-  PaywallWebViewProps,
-  PaywallWebViewMethods
->;
+export type PaywallWebViewHostRef = HybridRef<PaywallWebViewProps, PaywallWebViewMethods>;
diff --git a/libraries/react-native/src/internal/webview/types.ts b/libraries/react-native/src/internal/webview/types.ts
index 7b0e85712..d62052330 100644
--- a/libraries/react-native/src/internal/webview/types.ts
+++ b/libraries/react-native/src/internal/webview/types.ts
@@ -21,43 +21,41 @@ export interface NativeEvent<TEvent> {
 }
 
 export type PaywallWebViewNavigationEventHandler = (
-  event: NativeEvent<PaywallWebViewNavigationEvent>
+  event: NativeEvent<PaywallWebViewNavigationEvent>,
 ) => void;
 
 export type PaywallWebViewProgressEventHandler = (
-  event: NativeEvent<PaywallWebViewProgressEvent>
+  event: NativeEvent<PaywallWebViewProgressEvent>,
 ) => void;
 
 export type PaywallWebViewMessageEventHandler = (
-  event: NativeEvent<PaywallWebViewMessageEvent>
+  event: NativeEvent<PaywallWebViewMessageEvent>,
 ) => void;
 
 export type PaywallWebViewErrorEventHandler = (
-  event: NativeEvent<PaywallWebViewErrorEvent>
+  event: NativeEvent<PaywallWebViewErrorEvent>,
 ) => void;
 
 export type PaywallWebViewHttpErrorEventHandler = (
-  event: NativeEvent<PaywallWebViewHttpErrorEvent>
+  event: NativeEvent<PaywallWebViewHttpErrorEvent>,
 ) => void;
 
 export type PaywallWebViewOpenWindowEventHandler = (
-  event: NativeEvent<PaywallWebViewOpenWindowEvent>
+  event: NativeEvent<PaywallWebViewOpenWindowEvent>,
 ) => void;
 
 export type PaywallWebViewFileDownloadEventHandler = (
-  event: NativeEvent<PaywallWebViewFileDownloadEvent>
+  event: NativeEvent<PaywallWebViewFileDownloadEvent>,
 ) => void;
 
 export type PaywallWebViewRenderProcessGoneEventHandler = (
-  event: NativeEvent<PaywallWebViewRenderProcessGoneEvent>
+  event: NativeEvent<PaywallWebViewRenderProcessGoneEvent>,
 ) => void;
 
-export type PaywallWebViewBaseEventHandler = (
-  event: NativeEvent<PaywallWebViewBaseEvent>
-) => void;
+export type PaywallWebViewBaseEventHandler = (event: NativeEvent<PaywallWebViewBaseEvent>) => void;
 
 export type PaywallWebViewShouldStartLoadWithRequest = (
-  event: PaywallWebViewShouldStartLoadRequest
+  event: PaywallWebViewShouldStartLoadRequest,
 ) => boolean;
 
 export interface PaywallWebViewImperativeRef {
@@ -134,9 +132,5 @@ export interface PaywallWebViewProps {
 
   startInLoadingState?: boolean;
   renderLoading?: () => ReactElement;
-  renderError?: (
-    domain: string | undefined,
-    code: number,
-    description: string
-  ) => ReactElement;
+  renderError?: (domain: string | undefined, code: number, description: string) => ReactElement;
 }
diff --git a/libraries/react-native/src/internal/webview/utils.ts b/libraries/react-native/src/internal/webview/utils.ts
index 0f4f9dd07..00c0e505c 100644
--- a/libraries/react-native/src/internal/webview/utils.ts
+++ b/libraries/react-native/src/internal/webview/utils.ts
@@ -2,7 +2,7 @@ import type { PaywallWebViewSource } from "../../specs/PaywallWebView.nitro";
 import type { PaywallWebViewProps } from "./types";
 
 export function wrapNitroCallback<T extends Function | undefined>(
-  callback: T
+  callback: T,
 ): { f: T } | undefined {
   if (!callback) {
     return undefined;
@@ -12,7 +12,7 @@ export function wrapNitroCallback<T extends Function | undefined>(
 }
 
 export function normalizeSource(
-  source?: PaywallWebViewProps["source"]
+  source?: PaywallWebViewProps["source"],
 ): PaywallWebViewSource | undefined {
   if (!source || typeof source === "number") {
     return undefined;
diff --git a/libraries/react-native/src/internal/webview/whitelist.ts b/libraries/react-native/src/internal/webview/whitelist.ts
index 5ba2d3b9b..7892db2d6 100644
--- a/libraries/react-native/src/internal/webview/whitelist.ts
+++ b/libraries/react-native/src/internal/webview/whitelist.ts
@@ -15,10 +15,7 @@ export function compileWhitelist(originWhitelist: readonly string[]): string[] {
   return ["about:blank", ...originWhitelist].map(originWhitelistToRegex);
 }
 
-export function passesWhitelist(
-  compiledWhitelist: readonly string[],
-  url: string
-): boolean {
+export function passesWhitelist(compiledWhitelist: readonly string[], url: string): boolean {
   const origin = extractOrigin(url);
   return compiledWhitelist.some((pattern) => new RegExp(pattern).test(origin));
 }
diff --git a/libraries/react-native/src/metro/index.ts b/libraries/react-native/src/metro/index.ts
index 65cd4c4f1..547dddb6b 100644
--- a/libraries/react-native/src/metro/index.ts
+++ b/libraries/react-native/src/metro/index.ts
@@ -47,7 +47,7 @@ interface ChildProcessModule {
     options: {
       env: Record<string, string | undefined>;
       stdio: "inherit";
-    }
+    },
   ): ChildProcessLike;
 }
 
@@ -109,7 +109,7 @@ function startWatcher(options: WithVoidhashOptions) {
       // biome-ignore lint/suspicious/noConsole: dev-time diagnostic
       console.warn(
         `[voidhash/metro] Failed to spawn '${binary} ${args.join(" ")}': ${error.message}. ` +
-          "Ensure voidhash-cli is installed in this project."
+          "Ensure voidhash-cli is installed in this project.",
       );
       activeChildProcess = null;
     });
@@ -124,7 +124,7 @@ function startWatcher(options: WithVoidhashOptions) {
     console.warn(
       `[voidhash/metro] Could not start types watcher: ${
         error instanceof Error ? error.message : String(error)
-      }`
+      }`,
     );
     activeChildProcess = null;
   }
@@ -137,7 +137,7 @@ function startWatcher(options: WithVoidhashOptions) {
  */
 export function withVoidhash<TConfig extends MetroConfig>(
   metroConfig: TConfig,
-  options: WithVoidhashOptions = {}
+  options: WithVoidhashOptions = {},
 ): TConfig {
   // Kick the watcher off lazily so that simply *importing* this module from a
   // non-dev context doesn't spawn a background process.
diff --git a/libraries/react-native/src/nitro.ts b/libraries/react-native/src/nitro.ts
index a98f9eb5d..94082d2bc 100644
--- a/libraries/react-native/src/nitro.ts
+++ b/libraries/react-native/src/nitro.ts
@@ -11,15 +11,11 @@ export const Storekit: StorekitSpec | undefined = Platform.select({
 })?.();
 
 export const GoogleBilling: GoogleBillingSpec | undefined = Platform.select({
-  android: () =>
-    NitroModules.createHybridObject<GoogleBillingSpec>("GoogleBilling"),
+  android: () => NitroModules.createHybridObject<GoogleBillingSpec>("GoogleBilling"),
   ios: undefined,
 })?.();
 
-export const PaywallPresenter: PaywallPresenterSpec | undefined =
-  Platform.select({
-    android: () =>
-      NitroModules.createHybridObject<PaywallPresenterSpec>("PaywallPresenter"),
-    ios: () =>
-      NitroModules.createHybridObject<PaywallPresenterSpec>("PaywallPresenter"),
-  })?.();
+export const PaywallPresenter: PaywallPresenterSpec | undefined = Platform.select({
+  android: () => NitroModules.createHybridObject<PaywallPresenterSpec>("PaywallPresenter"),
+  ios: () => NitroModules.createHybridObject<PaywallPresenterSpec>("PaywallPresenter"),
+})?.();
diff --git a/libraries/react-native/src/react/hooks/use-async-function.ts b/libraries/react-native/src/react/hooks/use-async-function.ts
index 447cf65bc..48e1834fc 100644
--- a/libraries/react-native/src/react/hooks/use-async-function.ts
+++ b/libraries/react-native/src/react/hooks/use-async-function.ts
@@ -24,7 +24,7 @@ type UseAsyncFunctionReturn<T> = State<T> & {
 
 function useAsyncFunction<T = unknown>(
   asyncFn: () => Promise<T>,
-  options?: UseAsyncFunctionOptions
+  options?: UseAsyncFunctionOptions,
 ): UseAsyncFunctionReturn<T> {
   // Used to prevent state update if the component is unmounted
   const cancelRequest = useRef<boolean>(false);
@@ -78,7 +78,7 @@ function useAsyncFunction<T = unknown>(
 
       dispatch({
         payload: new UnknownVoidhashError(
-          error instanceof Error ? error : new Error(error as string)
+          error instanceof Error ? error : new Error(error as string),
         ),
         type: "error",
       });
diff --git a/libraries/react-native/src/react/hooks/use-atom-value.ts b/libraries/react-native/src/react/hooks/use-atom-value.ts
index 7419b47fb..1236ade2d 100644
--- a/libraries/react-native/src/react/hooks/use-atom-value.ts
+++ b/libraries/react-native/src/react/hooks/use-atom-value.ts
@@ -13,10 +13,7 @@ const storeRegistry = new WeakMap<
   WeakMap<Atom.Atom<unknown>, AtomStore<unknown>>
 >();
 
-function getStore<A>(
-  registry: AtomRegistry.AtomRegistry,
-  atom: Atom.Atom<A>
-): AtomStore<A> {
+function getStore<A>(registry: AtomRegistry.AtomRegistry, atom: Atom.Atom<A>): AtomStore<A> {
   let stores = storeRegistry.get(registry);
   if (stores === undefined) {
     stores = new WeakMap();
@@ -43,10 +40,7 @@ function getStore<A>(
  * to the SDK so we don't pull in `@effect/atom-react` (which targets a newer
  * React peer range than this package currently supports).
  */
-export function useAtomValue<A>(
-  registry: AtomRegistry.AtomRegistry,
-  atom: Atom.Atom<A>
-): A {
+export function useAtomValue<A>(registry: AtomRegistry.AtomRegistry, atom: Atom.Atom<A>): A {
   const store = getStore(registry, atom);
   const value = React.useSyncExternalStore(store.subscribe, store.snapshot);
 
diff --git a/libraries/react-native/src/react/hooks/use-feature-flags.ts b/libraries/react-native/src/react/hooks/use-feature-flags.ts
index 24167448f..393c81a92 100644
--- a/libraries/react-native/src/react/hooks/use-feature-flags.ts
+++ b/libraries/react-native/src/react/hooks/use-feature-flags.ts
@@ -8,15 +8,12 @@ import { useAtomValue } from "./use-atom-value";
 
 export function featureFlagsHookFactory(
   client: VoidhashClient,
-  vhContext: React.Context<VoidhashContext | null>
+  vhContext: React.Context<VoidhashContext | null>,
 ) {
   function useFeatureFlags(flagKeys?: string[]) {
     const voidhashContext = React.useContext(vhContext);
 
-    const fetchFlags = useCallback(
-      () => client.getFeatureFlags(flagKeys),
-      [flagKeys]
-    );
+    const fetchFlags = useCallback(() => client.getFeatureFlags(flagKeys), [flagKeys]);
 
     const { isLoading, error, refetch } = useAsyncFunction(fetchFlags, {
       enabled: voidhashContext?.isInitialized,
@@ -30,9 +27,8 @@ export function featureFlagsHookFactory(
     const flags = useAtomValue(client.internal_getAtomRegistry(), flagsAtom);
 
     const isEnabled = useCallback(
-      (key: string) =>
-        flags?.flags.find((f) => f.key === key)?.enabled ?? false,
-      [flags]
+      (key: string) => flags?.flags.find((f) => f.key === key)?.enabled ?? false,
+      [flags],
     );
 
     const getVariant = useCallback(
@@ -46,14 +42,14 @@ export function featureFlagsHookFactory(
             }
           : null;
       },
-      [flags]
+      [flags],
     );
 
     const data = useMemo(
       () => ({
         flags: flags?.flags ?? [],
       }),
-      [flags]
+      [flags],
     );
 
     return {
diff --git a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
index aa8fdcb27..c1ef1becd 100644
--- a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
+++ b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
@@ -58,10 +58,7 @@ function normalizeLocation(locationSlug: string): string {
 }
 
 function getResolvedPaywallEntry(
-  resolvedPaywall:
-    | Awaited<ReturnType<VoidhashClient["getPaywallForLocation"]>>
-    | null
-    | undefined,
+  resolvedPaywall: Awaited<ReturnType<VoidhashClient["getPaywallForLocation"]>> | null | undefined,
 ): ResolvedPaywallEntry | null {
   if (!resolvedPaywall) {
     return null;
@@ -117,9 +114,7 @@ interface PaywallPresenterBridgeAdapter {
 
 /** `Platform.OS` narrowed to the contract §7.1 platform union. */
 function getBridgePlatform(): "ios" | "android" | undefined {
-  return Platform.OS === "ios" || Platform.OS === "android"
-    ? Platform.OS
-    : undefined;
+  return Platform.OS === "ios" || Platform.OS === "android" ? Platform.OS : undefined;
 }
 
 /**
@@ -144,8 +139,7 @@ async function sendConfigureMessage(options: {
   }
 
   try {
-    const runtimeConfig =
-      await client.internal_buildPaywallRuntimeConfig(runtime);
+    const runtimeConfig = await client.internal_buildPaywallRuntimeConfig(runtime);
     presenter.postMessage(
       locationKey,
       createPaywallBridgeConfigureMessage(runtimeConfig, requestId),
@@ -168,10 +162,7 @@ async function sendConfigureMessage(options: {
       );
     } catch (fallbackError) {
       // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
-      console.warn(
-        "[voidhash] failed to send fallback paywall configure message",
-        fallbackError,
-      );
+      console.warn("[voidhash] failed to send fallback paywall configure message", fallbackError);
     }
   }
 }
@@ -184,24 +175,15 @@ async function handlePaywallBridgeEvent(options: {
   presenter: PaywallPresenterBridgeAdapter;
   rawBridgeEvent: string;
 }) {
-  const {
-    client,
-    locationKey,
-    openExternalUrl,
-    paywallOptions,
-    presenter,
-    rawBridgeEvent,
-  } = options;
+  const { client, locationKey, openExternalUrl, paywallOptions, presenter, rawBridgeEvent } =
+    options;
 
   let bridgeEvent: ReturnType<typeof parsePaywallBridgeEnvelope>;
   try {
     bridgeEvent = parsePaywallBridgeEnvelope(rawBridgeEvent);
   } catch (error) {
     // biome-ignore lint/suspicious/noConsole: This warning is intentionally surfaced in all environments.
-    console.warn(
-      "[voidhash] ignoring unparseable paywall bridge message",
-      error,
-    );
+    console.warn("[voidhash] ignoring unparseable paywall bridge message", error);
     return;
   }
 
@@ -261,10 +243,7 @@ async function handlePaywallBridgeEvent(options: {
   try {
     if (bridgeEvent.type === "purchase") {
       const products = await client.getProducts();
-      const product = findProductByBridgeProductId(
-        products,
-        bridgeEvent.payload.productId,
-      );
+      const product = findProductByBridgeProductId(products, bridgeEvent.payload.productId);
 
       if (!product) {
         const productNotFoundMessage = `Product not found: ${bridgeEvent.payload.productId}`;
@@ -372,14 +351,9 @@ async function showResolvedPaywall(options: {
 }): Promise<boolean> {
   const { client, htmlUrl, locationKey, onBridgeEvent, presenter } = options;
 
-  const shown = await presenter.show(
-    locationKey,
-    htmlUrl,
-    onBridgeEvent,
-    () => {
-      inFlightActionByLocation.delete(locationKey);
-    },
-  );
+  const shown = await presenter.show(locationKey, htmlUrl, onBridgeEvent, () => {
+    inFlightActionByLocation.delete(locationKey);
+  });
 
   if (shown) {
     void sendConfigureMessage({
@@ -488,13 +462,7 @@ export function paywallByLocationHookFactory(
         },
         presenter: PaywallPresenter,
       });
-    }, [
-      client,
-      handleBridgeEvent,
-      locationKey,
-      preloadPaywall,
-      voidhashContext?.isInitialized,
-    ]);
+    }, [client, handleBridgeEvent, locationKey, preloadPaywall, voidhashContext?.isInitialized]);
 
     useEffect(() => {
       incrementActiveHookCount(locationKey);
@@ -515,14 +483,11 @@ export function paywallByLocationHookFactory(
 
       void preloadPaywall();
 
-      const appStateSubscription = AppState.addEventListener(
-        "change",
-        (nextState) => {
-          if (nextState === "active") {
-            void preloadPaywall();
-          }
-        },
-      );
+      const appStateSubscription = AppState.addEventListener("change", (nextState) => {
+        if (nextState === "active") {
+          void preloadPaywall();
+        }
+      });
 
       return () => {
         appStateSubscription.remove();
diff --git a/libraries/react-native/src/react/hooks/use-person.ts b/libraries/react-native/src/react/hooks/use-person.ts
index 27f6549eb..0148749ce 100644
--- a/libraries/react-native/src/react/hooks/use-person.ts
+++ b/libraries/react-native/src/react/hooks/use-person.ts
@@ -8,24 +8,18 @@ import { useAtomValue } from "./use-atom-value";
 
 export function currentPersonHookFactory(
   client: VoidhashClient,
-  vhContext: React.Context<VoidhashContext | null>
+  vhContext: React.Context<VoidhashContext | null>,
 ) {
   function useCurrentPerson() {
     const voidhashContext = React.useContext(vhContext);
 
-    const getPersonCallback = useCallback(
-      () => client.getCurrentPerson(),
-      []
-    );
+    const getPersonCallback = useCallback(() => client.getCurrentPerson(), []);
 
     const { isLoading, error, refetch } = useAsyncFunction(getPersonCallback, {
       enabled: voidhashContext?.isInitialized,
     });
 
-    const person = useAtomValue(
-      client.internal_getAtomRegistry(),
-      currentPersonAtom
-    );
+    const person = useAtomValue(client.internal_getAtomRegistry(), currentPersonAtom);
 
     // Preserve the previous return shape: `data` spreads the person fields,
     // so callers reading e.g. `data.email` keep working and `null` becomes
diff --git a/libraries/react-native/src/react/hooks/use-products.ts b/libraries/react-native/src/react/hooks/use-products.ts
index de9505e19..78fcae3af 100644
--- a/libraries/react-native/src/react/hooks/use-products.ts
+++ b/libraries/react-native/src/react/hooks/use-products.ts
@@ -8,7 +8,7 @@ import useAsyncFunction from "./use-async-function";
 
 export function productsHookFactory(
   client: VoidhashClient,
-  vhContext: React.Context<VoidhashContext | null>
+  vhContext: React.Context<VoidhashContext | null>,
 ) {
   function useProducts() {
     const voidhashContext = React.useContext(vhContext);
@@ -29,21 +29,21 @@ export function productsHookFactory(
           return null;
         }
         // ProductSlug is `string` at runtime; the index access is safe.
-        return (products as Record<string, SubscriptionProduct | null>)[
-          String(productSlug)
-        ] ?? null;
+        return (
+          (products as Record<string, SubscriptionProduct | null>)[String(productSlug)] ?? null
+        );
       },
-      [products]
+      [products],
     );
 
     const toList = useCallback(
       (): SubscriptionProduct[] =>
         products
           ? (Object.values(products) as Array<SubscriptionProduct | null>).filter(
-              (product): product is SubscriptionProduct => product !== null
+              (product): product is SubscriptionProduct => product !== null,
             )
           : [],
-      [products]
+      [products],
     );
 
     const data = useMemo(
@@ -52,7 +52,7 @@ export function productsHookFactory(
         get: getProduct,
         toList,
       }),
-      [products, getProduct, toList]
+      [products, getProduct, toList],
     );
 
     return {
diff --git a/libraries/react-native/src/react/hooks/use-purchase.ts b/libraries/react-native/src/react/hooks/use-purchase.ts
index 725fbbd0a..2d22f22ba 100644
--- a/libraries/react-native/src/react/hooks/use-purchase.ts
+++ b/libraries/react-native/src/react/hooks/use-purchase.ts
@@ -23,7 +23,7 @@ export function purchaseHookFactory(client: VoidhashClient) {
           onSuccess?: () => void;
           onError?: (error: Error) => void;
           onSettled?: () => void;
-        }
+        },
       ) => {
         setIsLoading(true);
         setError(null);
@@ -49,7 +49,7 @@ export function purchaseHookFactory(client: VoidhashClient) {
             hookOptions?.onSettled?.();
           });
       },
-      [hookOptions]
+      [hookOptions],
     );
 
     return {
diff --git a/libraries/react-native/src/specs/PaywallPresenter.nitro.ts b/libraries/react-native/src/specs/PaywallPresenter.nitro.ts
index 5927651fd..45f14e01f 100644
--- a/libraries/react-native/src/specs/PaywallPresenter.nitro.ts
+++ b/libraries/react-native/src/specs/PaywallPresenter.nitro.ts
@@ -9,7 +9,7 @@ export interface PaywallPresenter extends HybridObject<{
     locationSlug: string,
     htmlUrl: string,
     onBridgeEvent?: (rawEvent: string) => void,
-    onDismiss?: () => void
+    onDismiss?: () => void,
   ): Promise<boolean>;
   dismiss(): Promise<void>;
   release(locationSlug: string): void;
diff --git a/libraries/react-native/src/specs/PaywallWebView.nitro.ts b/libraries/react-native/src/specs/PaywallWebView.nitro.ts
index 1d2aa27ed..139aa6835 100644
--- a/libraries/react-native/src/specs/PaywallWebView.nitro.ts
+++ b/libraries/react-native/src/specs/PaywallWebView.nitro.ts
@@ -13,10 +13,7 @@ export type PaywallWebViewNavigationType =
   | "formresubmit"
   | "other";
 
-export type PaywallWebViewMixedContentMode =
-  | "never"
-  | "always"
-  | "compatibility";
+export type PaywallWebViewMixedContentMode = "never" | "always" | "compatibility";
 
 export type PaywallWebViewOverScrollModeType = "always" | "content" | "never";
 
@@ -67,8 +64,7 @@ export interface PaywallWebViewNavigationEvent extends PaywallWebViewBaseEvent {
   mainDocumentURL?: string;
 }
 
-export interface PaywallWebViewShouldStartLoadRequest
-  extends PaywallWebViewNavigationEvent {
+export interface PaywallWebViewShouldStartLoadRequest extends PaywallWebViewNavigationEvent {
   isTopFrame: boolean;
 }
 
@@ -161,9 +157,7 @@ export interface PaywallWebViewProps extends HybridViewProps {
   onFileDownload?: (event: PaywallWebViewFileDownloadEvent) => void;
   onRenderProcessGone?: (event: PaywallWebViewRenderProcessGoneEvent) => void;
   onContentProcessDidTerminate?: (event: PaywallWebViewBaseEvent) => void;
-  onShouldStartLoadWithRequest?: Sync<
-    (event: PaywallWebViewShouldStartLoadRequest) => boolean
-  >;
+  onShouldStartLoadWithRequest?: Sync<(event: PaywallWebViewShouldStartLoadRequest) => boolean>;
 }
 
 export interface PaywallWebViewMethods extends HybridViewMethods {
@@ -180,7 +174,4 @@ export interface PaywallWebViewMethods extends HybridViewMethods {
   clearCache(includeDiskFiles: boolean): void;
 }
 
-export type PaywallWebView = HybridView<
-  PaywallWebViewProps,
-  PaywallWebViewMethods
->;
+export type PaywallWebView = HybridView<PaywallWebViewProps, PaywallWebViewMethods>;
diff --git a/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts b/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts
index 429ebf6a6..ea4402ff2 100644
--- a/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts
@@ -1,11 +1,11 @@
 // Credits: A lot of this was inspired by https://github.com/hyochan/expo-iap
-import type { HybridObject } from 'react-native-nitro-modules';
+import type { HybridObject } from "react-native-nitro-modules";
 
-import type { GoogleBillingAcknowledgeResult } from './GoogleBillingAcknowledgeResult.nitro';
-import type { GoogleBillingProductDetail } from './GoogleBillingProductDetail.nitro';
-import type { GoogleBillingPurchase } from './GoogleBillingPurchase.nitro';
+import type { GoogleBillingAcknowledgeResult } from "./GoogleBillingAcknowledgeResult.nitro";
+import type { GoogleBillingProductDetail } from "./GoogleBillingProductDetail.nitro";
+import type { GoogleBillingPurchase } from "./GoogleBillingPurchase.nitro";
 
-export type GoogleBillingProductType = 'inapp' | 'subs';
+export type GoogleBillingProductType = "inapp" | "subs";
 
 // export interface GoogleBillingConsumeResult {
 //   readonly responseCode: number;
@@ -26,22 +26,16 @@ export interface GoogleBillingBuyItemByTypeParams {
   readonly isOfferPersonalized?: boolean;
 }
 
-export interface GoogleBilling extends HybridObject<{ android: 'kotlin' }> {
-  initConnection(
-    onPurchase?: (purchase: GoogleBillingPurchase) => void
-  ): Promise<boolean>;
+export interface GoogleBilling extends HybridObject<{ android: "kotlin" }> {
+  initConnection(onPurchase?: (purchase: GoogleBillingPurchase) => void): Promise<boolean>;
   endConnection(): Promise<boolean>;
   getItemsByType(
     type: GoogleBillingProductType,
-    skus: string[]
+    skus: string[],
   ): Promise<GoogleBillingProductDetail[]>;
-  buyItemByType(
-    params: GoogleBillingBuyItemByTypeParams
-  ): Promise<GoogleBillingPurchase[]>;
+  buyItemByType(params: GoogleBillingBuyItemByTypeParams): Promise<GoogleBillingPurchase[]>;
   acknowledgePurchase(token: string): Promise<GoogleBillingAcknowledgeResult>;
-  getAvailableItemsByType(
-    type: GoogleBillingProductType
-  ): Promise<GoogleBillingPurchase[]>;
+  getAvailableItemsByType(type: GoogleBillingProductType): Promise<GoogleBillingPurchase[]>;
   // Consume a product (for consumable items)
   // consumeProduct(token: string): Promise<GoogleBillingConsumeResult>;
 
diff --git a/libraries/react-native/src/specs/android/GoogleBillingAcknowledgeResult.nitro.ts b/libraries/react-native/src/specs/android/GoogleBillingAcknowledgeResult.nitro.ts
index 98a37c1da..de2b53f03 100644
--- a/libraries/react-native/src/specs/android/GoogleBillingAcknowledgeResult.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBillingAcknowledgeResult.nitro.ts
@@ -1,7 +1,6 @@
-import type { HybridObject } from 'react-native-nitro-modules';
+import type { HybridObject } from "react-native-nitro-modules";
 
-export interface GoogleBillingAcknowledgeResult
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingAcknowledgeResult extends HybridObject<{ android: "kotlin" }> {
   readonly responseCode: number;
   readonly debugMessage?: string;
   readonly code: string;
diff --git a/libraries/react-native/src/specs/android/GoogleBillingConsumeResult.nitro.ts b/libraries/react-native/src/specs/android/GoogleBillingConsumeResult.nitro.ts
index 156fff32d..58bcbdb52 100644
--- a/libraries/react-native/src/specs/android/GoogleBillingConsumeResult.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBillingConsumeResult.nitro.ts
@@ -1,7 +1,6 @@
-import type { HybridObject } from 'react-native-nitro-modules';
+import type { HybridObject } from "react-native-nitro-modules";
 
-export interface GoogleBillingConsumeResult
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingConsumeResult extends HybridObject<{ android: "kotlin" }> {
   readonly responseCode: number;
   readonly debugMessage?: string;
   readonly code: string;
diff --git a/libraries/react-native/src/specs/android/GoogleBillingOneTimePurchaseOfferDetails.nitro.ts b/libraries/react-native/src/specs/android/GoogleBillingOneTimePurchaseOfferDetails.nitro.ts
index e6fd0449c..2efb5a852 100644
--- a/libraries/react-native/src/specs/android/GoogleBillingOneTimePurchaseOfferDetails.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBillingOneTimePurchaseOfferDetails.nitro.ts
@@ -1,7 +1,8 @@
-import type { HybridObject } from 'react-native-nitro-modules';
+import type { HybridObject } from "react-native-nitro-modules";
 
-export interface GoogleBillingOneTimePurchaseOfferDetails
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingOneTimePurchaseOfferDetails extends HybridObject<{
+  android: "kotlin";
+}> {
   readonly priceCurrencyCode: string;
   readonly formattedPrice: string;
   readonly priceAmountMicros: string;
diff --git a/libraries/react-native/src/specs/android/GoogleBillingProductDetail.nitro.ts b/libraries/react-native/src/specs/android/GoogleBillingProductDetail.nitro.ts
index ae6276bfb..7604ea875 100644
--- a/libraries/react-native/src/specs/android/GoogleBillingProductDetail.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBillingProductDetail.nitro.ts
@@ -1,10 +1,9 @@
-import type { HybridObject } from 'react-native-nitro-modules';
+import type { HybridObject } from "react-native-nitro-modules";
 
-import type { GoogleBillingOneTimePurchaseOfferDetails } from './GoogleBillingOneTimePurchaseOfferDetails.nitro';
-import type { GoogleBillingSubscriptionOfferDetails } from './GoogleBillingSubscriptionOfferDetails.nitro';
+import type { GoogleBillingOneTimePurchaseOfferDetails } from "./GoogleBillingOneTimePurchaseOfferDetails.nitro";
+import type { GoogleBillingSubscriptionOfferDetails } from "./GoogleBillingSubscriptionOfferDetails.nitro";
 
-export interface GoogleBillingProductDetail
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingProductDetail extends HybridObject<{ android: "kotlin" }> {
   readonly id: string;
   readonly title: string;
   readonly description: string;
@@ -13,8 +12,6 @@ export interface GoogleBillingProductDetail
   readonly platform: string;
   readonly currency: string;
   readonly displayPrice: string;
-  readonly subscriptionOfferDetails?:
-    | GoogleBillingSubscriptionOfferDetails[]
-    | null;
+  readonly subscriptionOfferDetails?: GoogleBillingSubscriptionOfferDetails[] | null;
   readonly oneTimePurchaseOfferDetails?: GoogleBillingOneTimePurchaseOfferDetails | null;
 }
diff --git a/libraries/react-native/src/specs/android/GoogleBillingPurchase.nitro.ts b/libraries/react-native/src/specs/android/GoogleBillingPurchase.nitro.ts
index e8b00d15b..4082ec750 100644
--- a/libraries/react-native/src/specs/android/GoogleBillingPurchase.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBillingPurchase.nitro.ts
@@ -1,7 +1,6 @@
-import type { HybridObject } from 'react-native-nitro-modules';
+import type { HybridObject } from "react-native-nitro-modules";
 
-export interface GoogleBillingPurchase
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingPurchase extends HybridObject<{ android: "kotlin" }> {
   readonly id: string;
   readonly ids: string[];
   readonly orderId?: string;
diff --git a/libraries/react-native/src/specs/android/GoogleBillingSubscriptionOfferDetails.nitro.ts b/libraries/react-native/src/specs/android/GoogleBillingSubscriptionOfferDetails.nitro.ts
index 6e14a6d88..a2031f670 100644
--- a/libraries/react-native/src/specs/android/GoogleBillingSubscriptionOfferDetails.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBillingSubscriptionOfferDetails.nitro.ts
@@ -1,7 +1,6 @@
-import type { HybridObject } from 'react-native-nitro-modules';
+import type { HybridObject } from "react-native-nitro-modules";
 
-export interface GoogleBillingPricingPhase
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingPricingPhase extends HybridObject<{ android: "kotlin" }> {
   readonly formattedPrice: string;
   readonly priceCurrencyCode: string;
   readonly billingPeriod: string;
@@ -10,13 +9,11 @@ export interface GoogleBillingPricingPhase
   readonly recurrenceMode: number;
 }
 
-export interface GoogleBillingPricingPhases
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingPricingPhases extends HybridObject<{ android: "kotlin" }> {
   readonly pricingPhaseList: GoogleBillingPricingPhase[];
 }
 
-export interface GoogleBillingSubscriptionOfferDetails
-  extends HybridObject<{ android: 'kotlin' }> {
+export interface GoogleBillingSubscriptionOfferDetails extends HybridObject<{ android: "kotlin" }> {
   readonly basePlanId: string;
   readonly offerId?: string;
   readonly offerToken: string;
diff --git a/libraries/react-native/src/specs/ios/Storekit.nitro.ts b/libraries/react-native/src/specs/ios/Storekit.nitro.ts
index 6e573a20f..30651414b 100644
--- a/libraries/react-native/src/specs/ios/Storekit.nitro.ts
+++ b/libraries/react-native/src/specs/ios/Storekit.nitro.ts
@@ -5,18 +5,14 @@ import type { StorekitProduct } from "./StorekitProduct.nitro";
 import type { StorekitTransaction } from "./StorekitTransaction.nitro";
 
 export interface Storekit extends HybridObject<{ ios: "swift" }> {
-  initConnection(
-    onTransaction?: (transaction: StorekitTransaction) => void
-  ): Promise<boolean>;
+  initConnection(onTransaction?: (transaction: StorekitTransaction) => void): Promise<boolean>;
   endConnection(): Promise<boolean>;
-  getPurchasedItems(
-    onlyIncludeActiveItems: boolean
-  ): Promise<StorekitTransaction[]>;
+  getPurchasedItems(onlyIncludeActiveItems: boolean): Promise<StorekitTransaction[]>;
   getItems(skus: string[]): Promise<StorekitProduct[]>;
   buyProduct(
     sku: string,
     appAccountToken: string,
-    quantity: number
+    quantity: number,
     // offer?: Record<string, string>
   ): Promise<StorekitTransaction>;
   finishTransaction(transactionId: string): Promise<void>;
diff --git a/libraries/react-native/src/specs/ios/StorekitProductSubscriptionPeriod.nitro.ts b/libraries/react-native/src/specs/ios/StorekitProductSubscriptionPeriod.nitro.ts
index 43490615c..e7765f327 100644
--- a/libraries/react-native/src/specs/ios/StorekitProductSubscriptionPeriod.nitro.ts
+++ b/libraries/react-native/src/specs/ios/StorekitProductSubscriptionPeriod.nitro.ts
@@ -1,10 +1,6 @@
 import type { HybridObject } from "react-native-nitro-modules";
 
-export type StorekitProductSubscriptionPeriodUnit =
-  | "DAY"
-  | "WEEK"
-  | "MONTH"
-  | "YEAR";
+export type StorekitProductSubscriptionPeriodUnit = "DAY" | "WEEK" | "MONTH" | "YEAR";
 
 export interface StorekitProductSubscriptionPeriod extends HybridObject<{
   ios: "swift";
diff --git a/libraries/react-native/sst-env.d.ts b/libraries/react-native/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/libraries/react-native/sst-env.d.ts
+++ b/libraries/react-native/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/libraries/react-native/tests/client.test.ts b/libraries/react-native/tests/client.test.ts
index 04f5e0a45..be6134b56 100644
--- a/libraries/react-native/tests/client.test.ts
+++ b/libraries/react-native/tests/client.test.ts
@@ -23,9 +23,7 @@ vi.mock("../src/core/platform/react-native-platform-provider", async () => {
   const { Layer } = await vi.importActual<typeof import("effect")>("effect");
   const { PlatformProvider } = await vi.importActual<
     typeof import("../src/core/platform/platform-provider")
-  >(
-    "../src/core/platform/platform-provider"
-  );
+  >("../src/core/platform/platform-provider");
   return {
     ReactNativePlatformProvider: Layer.succeed(PlatformProvider, {
       appBuild: "100",
@@ -43,10 +41,7 @@ vi.mock("../src/core/platform/react-native-platform-provider", async () => {
 });
 
 import { VoidhashClient } from "../src/client";
-import {
-  ReadOnlyModePurchaseNotAllowedError,
-  VoidhashError,
-} from "../src/errors";
+import { ReadOnlyModePurchaseNotAllowedError, VoidhashError } from "../src/errors";
 import { createTestSchema } from "./helpers/test-schema";
 
 function createClient(readOnly = false, unstableSwallowErrors = false) {
@@ -61,7 +56,7 @@ function createClient(readOnly = false, unstableSwallowErrors = false) {
     AtomRegistry.make(),
     "ios",
     false,
-    createTestSchema()
+    createTestSchema(),
   );
 }
 
@@ -83,7 +78,7 @@ describe("VoidhashClient", () => {
       await expect(client.flush()).resolves.toBeUndefined();
       expect(warnSpy).toHaveBeenCalledWith(
         "[voidhash] swallowed error in flush",
-        expect.any(VoidhashError)
+        expect.any(VoidhashError),
       );
 
       warnSpy.mockRestore();
@@ -103,11 +98,11 @@ describe("VoidhashClient", () => {
       };
 
       await expect(
-        client.identify("new-user", { email: "new@voidhash.test" })
+        client.identify("new-user", { email: "new@voidhash.test" }),
       ).resolves.toBeUndefined();
       expect(warnSpy).toHaveBeenCalledWith(
         "[voidhash] swallowed error in identify",
-        expect.any(VoidhashError)
+        expect.any(VoidhashError),
       );
       warnSpy.mockRestore();
     });
@@ -128,7 +123,7 @@ describe("VoidhashClient", () => {
       await expect(client.restorePurchases()).resolves.toBeUndefined();
       expect(warnSpy).toHaveBeenCalledWith(
         "[voidhash] swallowed error in restorePurchases",
-        expect.any(VoidhashError)
+        expect.any(VoidhashError),
       );
       warnSpy.mockRestore();
     });
@@ -150,7 +145,7 @@ describe("VoidhashClient", () => {
       expect(client.isInitialized).toBe(false);
       expect(warnSpy).toHaveBeenCalledWith(
         "[voidhash] swallowed error in init",
-        expect.any(VoidhashError)
+        expect.any(VoidhashError),
       );
       warnSpy.mockRestore();
     });
@@ -162,11 +157,11 @@ describe("VoidhashClient", () => {
       const client = createClient(false, true);
 
       await expect(
-        client.identify("new-user", { email: "new@voidhash.test" })
+        client.identify("new-user", { email: "new@voidhash.test" }),
       ).resolves.toBeUndefined();
       expect(warnSpy).toHaveBeenCalledWith(
         "[voidhash] swallowed error in identify",
-        expect.any(VoidhashError)
+        expect.any(VoidhashError),
       );
       warnSpy.mockRestore();
     });
@@ -184,7 +179,7 @@ describe("VoidhashClient", () => {
       await expect(client.getProducts()).rejects.toEqual(
         expect.objectContaining<Partial<VoidhashError>>({
           message: expect.stringContaining("FAILED_TO_GET_PRODUCTS"),
-        })
+        }),
       );
     });
 
@@ -203,12 +198,12 @@ describe("VoidhashClient", () => {
           {
             id: "monthly-id",
           } as never,
-          {}
-        )
+          {},
+        ),
       ).rejects.toEqual(
         expect.objectContaining<Partial<VoidhashError>>({
           message: expect.stringContaining("FAILED_TO_PURCHASE"),
-        })
+        }),
       );
     });
   });
@@ -229,8 +224,8 @@ describe("VoidhashClient", () => {
           {
             id: "monthly-id",
           } as never,
-          {}
-        )
+          {},
+        ),
       ).rejects.toBeInstanceOf(ReadOnlyModePurchaseNotAllowedError);
     });
 
@@ -249,8 +244,8 @@ describe("VoidhashClient", () => {
           {
             id: "monthly-id",
           } as never,
-          {}
-        )
+          {},
+        ),
       ).rejects.toBeInstanceOf(ReadOnlyModePurchaseNotAllowedError);
     });
   });
diff --git a/libraries/react-native/tests/core/cache-manager.test.ts b/libraries/react-native/tests/core/cache-manager.test.ts
index ab44304e2..5fd360f31 100644
--- a/libraries/react-native/tests/core/cache-manager.test.ts
+++ b/libraries/react-native/tests/core/cache-manager.test.ts
@@ -14,23 +14,18 @@ describe("CacheManager", () => {
   it("returns value and metadata for set/get", async () => {
     const cache = createInMemoryCacheAdapter();
     const runtime = ManagedRuntime.make(
-      pipe(
-        CacheManager.Default,
-        Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))
-      )
+      pipe(CacheManager.Default, Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))),
     );
 
     try {
       await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("person:1", { id: "1" }, { staleTime: 1000, ttl: 1000 })
-        )
+          manager.set("person:1", { id: "1" }, { staleTime: 1000, ttl: 1000 }),
+        ),
       );
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.get<{ id: string }>("person:1")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.get<{ id: string }>("person:1")),
       );
 
       expect(result).not.toBeNull();
@@ -46,24 +41,19 @@ describe("CacheManager", () => {
   it("returns null and deletes expired entries", async () => {
     const cache = createInMemoryCacheAdapter();
     const runtime = ManagedRuntime.make(
-      pipe(
-        CacheManager.Default,
-        Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))
-      )
+      pipe(CacheManager.Default, Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))),
     );
 
     try {
       await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("person:expired", { id: "expired" }, { ttl: 1 })
-        )
+          manager.set("person:expired", { id: "expired" }, { ttl: 1 }),
+        ),
       );
       await wait(5);
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.get<{ id: string }>("person:expired")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.get<{ id: string }>("person:expired")),
       );
 
       expect(result).toBeNull();
@@ -76,24 +66,19 @@ describe("CacheManager", () => {
   it("marks stale entries as stale while still returning value", async () => {
     const cache = createInMemoryCacheAdapter();
     const runtime = ManagedRuntime.make(
-      pipe(
-        CacheManager.Default,
-        Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))
-      )
+      pipe(CacheManager.Default, Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))),
     );
 
     try {
       await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          manager.set("person:stale", { id: "stale" }, { staleTime: 1, ttl: 1000 })
-        )
+          manager.set("person:stale", { id: "stale" }, { staleTime: 1, ttl: 1000 }),
+        ),
       );
       await wait(5);
 
       const result = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.get<{ id: string }>("person:stale")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.get<{ id: string }>("person:stale")),
       );
 
       expect(result).not.toBeNull();
@@ -108,31 +93,24 @@ describe("CacheManager", () => {
   it("clear removes tracked keys and cache index", async () => {
     const cache = createInMemoryCacheAdapter();
     const runtime = ManagedRuntime.make(
-      pipe(
-        CacheManager.Default,
-        Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))
-      )
+      pipe(CacheManager.Default, Layer.provideMerge(Layer.succeed(CacheAdapter, cache.adapter))),
     );
 
     try {
       await runtime.runPromise(
         Effect.flatMap(CacheManager, (manager) =>
-          Effect.all([
-            manager.set("k1", "v1"),
-            manager.set("k2", "v2"),
-            manager.clear(),
-          ])
-        )
+          Effect.all([manager.set("k1", "v1"), manager.set("k2", "v2"), manager.clear()]),
+        ),
       );
 
       const keys = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
+        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys()),
       );
       const k1 = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k1"))
+        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k1")),
       );
       const k2 = await runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k2"))
+        Effect.flatMap(CacheManager, (manager) => manager.get<string>("k2")),
       );
 
       expect(keys).toEqual([]);
diff --git a/libraries/react-native/tests/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
index b60a90a5c..ad3bb1598 100644
--- a/libraries/react-native/tests/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -1,10 +1,7 @@
 import { Cause, Effect, Exit } from "effect";
 import { vi } from "vitest";
 
-import {
-  type AnalyticsIngestEvent,
-  VoidhashEffectClient,
-} from "../../src/client-effect";
+import { type AnalyticsIngestEvent, VoidhashEffectClient } from "../../src/client-effect";
 import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../src/constants";
 import { CacheManager } from "../../src/core/caching/cache-manager";
 import { Product, SubscriptionProduct } from "../../src/core/entities/product";
@@ -39,23 +36,21 @@ describe("VoidhashEffectClient", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-before-init"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-before-init")),
       );
 
       const initializedClient = await harness.runtime.runPromise(
         VoidhashEffectClient.makeUnitializedClient().init({
           distinctId: "user-after-init",
           internalSchema: schema,
-        })
+        }),
       );
 
       expect(initializedClient).toHaveProperty("getProducts");
       // Init no longer auto-syncs attributes; identify is the only POST.
       expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(0);
       expect(apiDouble.state.identifyCalls).toHaveLength(1);
-      expect(apiDouble.state.identifyCalls[0]?.headers["x-distinct-id"]).toBe(
-        "cached-before-init"
-      );
+      expect(apiDouble.state.identifyCalls[0]?.headers["x-distinct-id"]).toBe("cached-before-init");
       expect(apiDouble.state.identifyCalls[0]?.payload).toMatchObject({
         distinctId: "user-after-init",
       });
@@ -79,16 +74,14 @@ describe("VoidhashEffectClient", () => {
       await harness.runtime.runPromise(
         VoidhashEffectClient.makeUnitializedClient().init({
           internalSchema: schema,
-        })
+        }),
       );
 
       expect(apiDouble.state.identifyCalls).toHaveLength(0);
       // No implicit attribute sync at init.
       expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(0);
       expect(apiDouble.state.getPersonCalls).toHaveLength(1);
-      const distinctId = String(
-        apiDouble.state.getPersonCalls[0]?.headers["x-distinct-id"]
-      );
+      const distinctId = String(apiDouble.state.getPersonCalls[0]?.headers["x-distinct-id"]);
       expect(distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
     } finally {
       await harness.runtime.dispose();
@@ -113,7 +106,7 @@ describe("VoidhashEffectClient", () => {
       const exit = await harness.runtime.runPromiseExit(
         VoidhashEffectClient.makeUnitializedClient().init({
           internalSchema: schema,
-        })
+        }),
       );
 
       expect(Exit.isSuccess(exit)).toBe(true);
@@ -140,7 +133,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeUnitializedClient().init({})
+        VoidhashEffectClient.makeUnitializedClient().init({}),
       );
 
       expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
@@ -164,7 +157,7 @@ describe("VoidhashEffectClient", () => {
 
     try {
       const exit = await harness.runtime.runPromiseExit(
-        VoidhashEffectClient.makeUnitializedClient().init({})
+        VoidhashEffectClient.makeUnitializedClient().init({}),
       );
 
       expect(Exit.isFailure(exit)).toBe(true);
@@ -190,7 +183,7 @@ describe("VoidhashEffectClient", () => {
       999,
       "USD",
       "subscription",
-      "ios"
+      "ios",
     );
     const apiDouble = createApiClientDouble();
     const paymentDouble = createPaymentAdapterDouble({
@@ -203,7 +196,7 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
 
     try {
@@ -241,22 +234,20 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "feature-user"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "feature-user")),
       );
 
       const inputKeys = ["b", "a"];
       const inputSnapshot = [...inputKeys];
 
-      const first = await harness.runtime.runPromise(
-        initializedClient.getFeatureFlags(inputKeys)
-      );
+      const first = await harness.runtime.runPromise(initializedClient.getFeatureFlags(inputKeys));
       const second = await harness.runtime.runPromise(
-        initializedClient.getFeatureFlags(["a", "b"])
+        initializedClient.getFeatureFlags(["a", "b"]),
       );
 
       expect(first.flags).toHaveLength(1);
@@ -268,12 +259,8 @@ describe("VoidhashEffectClient", () => {
       expect(inputKeys).toEqual(inputSnapshot);
 
       // Both reversed and original orders observe the same atom slot.
-      const publishedForBA = harness.atomRegistry.get(
-        featureFlagsForKeysAtom(["b", "a"])
-      );
-      const publishedForAB = harness.atomRegistry.get(
-        featureFlagsForKeysAtom(["a", "b"])
-      );
+      const publishedForBA = harness.atomRegistry.get(featureFlagsForKeysAtom(["b", "a"]));
+      const publishedForAB = harness.atomRegistry.get(featureFlagsForKeysAtom(["a", "b"]));
       expect(publishedForBA).toEqual(first);
       expect(publishedForAB).toEqual(first);
     } finally {
@@ -283,19 +270,31 @@ describe("VoidhashEffectClient", () => {
 
   it("maintains separate atom entries for distinct flag-key requests", async () => {
     const schema = createTestSchema();
-    const responses: Record<string, { flags: Array<{ enabled: boolean; key: string; payload: unknown; variantKey: string | null }> }> = {
+    const responses: Record<
+      string,
+      {
+        flags: Array<{
+          enabled: boolean;
+          key: string;
+          payload: unknown;
+          variantKey: string | null;
+        }>;
+      }
+    > = {
       a: { flags: [{ enabled: true, key: "a", payload: null, variantKey: null }] },
       b: { flags: [{ enabled: false, key: "b", payload: null, variantKey: null }] },
     };
     const apiDouble = createApiClientDouble();
-    (apiDouble.apiClient as {
-      sdk: {
-        evaluateFeatureFlags: (request: {
-          headers: Record<string, unknown>;
-          payload?: { flagKeys?: string[] };
-        }) => unknown;
-      };
-    }).sdk.evaluateFeatureFlags = (request) => {
+    (
+      apiDouble.apiClient as {
+        sdk: {
+          evaluateFeatureFlags: (request: {
+            headers: Record<string, unknown>;
+            payload?: { flagKeys?: string[] };
+          }) => unknown;
+        };
+      }
+    ).sdk.evaluateFeatureFlags = (request) => {
       apiDouble.state.evaluateFeatureFlagsCalls.push(request);
       const key = request.payload?.flagKeys?.[0] ?? "all";
       return Effect.succeed(responses[key] ?? { flags: [] });
@@ -309,7 +308,7 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
 
     try {
@@ -337,27 +336,21 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.set("distinctId", "fetched-person")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "fetched-person")),
       );
 
       // First call fetches and publishes the network result.
-      await harness.runtime.runPromise(
-        initializedClient.getCurrentPerson(true)
-      );
+      await harness.runtime.runPromise(initializedClient.getCurrentPerson(true));
       expect(harness.atomRegistry.get(currentPersonAtom)).toEqual(fetched);
 
       // Reset atom then verify a cached read still publishes back.
       harness.atomRegistry.set(currentPersonAtom, null);
-      await harness.runtime.runPromise(
-        initializedClient.getCurrentPerson()
-      );
+      await harness.runtime.runPromise(initializedClient.getCurrentPerson());
       expect(harness.atomRegistry.get(currentPersonAtom)).toEqual(fetched);
     } finally {
       await harness.runtime.dispose();
@@ -379,14 +372,12 @@ describe("VoidhashEffectClient", () => {
       await harness.runtime.runPromise(
         VoidhashEffectClient.makeUnitializedClient().init({
           internalSchema: schema,
-        })
+        }),
       );
 
       const published = harness.atomRegistry.get(currentPersonAtom);
       expect(published).not.toBeNull();
-      expect(
-        published?.distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)
-      ).toBe(true);
+      expect(published?.distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
     } finally {
       await harness.runtime.dispose();
     }
@@ -404,7 +395,7 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
@@ -413,7 +404,7 @@ describe("VoidhashEffectClient", () => {
             email: "person@voidhash.test",
             name: "A Person",
             plan: "pro",
-          })
+          }),
         );
 
         // Rides the analytics queue; no network sync.
@@ -438,32 +429,28 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager, (manager) =>
-            manager.set("distinctId", "sync-user")
-          )
+          Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "sync-user")),
         );
 
         const result = await harness.runtime.runPromise(
           initializedClient.setPersonAttributesSync({
             email: "sync@voidhash.test",
             plan: "pro",
-          })
+          }),
         );
 
         expect(result).toEqual(synced);
         expect(apiDouble.state.syncPersonAttributesCalls).toHaveLength(1);
-        expect(
-          apiDouble.state.syncPersonAttributesCalls[0]?.headers["x-distinct-id"]
-        ).toBe("sync-user");
+        expect(apiDouble.state.syncPersonAttributesCalls[0]?.headers["x-distinct-id"]).toBe(
+          "sync-user",
+        );
         // Reserved keys map to dedicated fields; custom keys go to traits.
-        expect(
-          apiDouble.state.syncPersonAttributesCalls[0]?.payload
-        ).toMatchObject({
+        expect(apiDouble.state.syncPersonAttributesCalls[0]?.payload).toMatchObject({
           email: "sync@voidhash.test",
           traits: { plan: "pro" },
         });
@@ -475,8 +462,7 @@ describe("VoidhashEffectClient", () => {
   });
 
   describe("identify and reset flush analytics first", () => {
-    const acceptedResponse = () =>
-      new Response(null, { status: 202, statusText: "Accepted" });
+    const acceptedResponse = () => new Response(null, { status: 202, statusText: "Accepted" });
 
     it("identify flushes queued events under the pre-switch distinct id", async () => {
       const originalFetch = global.fetch;
@@ -494,22 +480,18 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager, (manager) =>
-            manager.set("distinctId", "pre-switch-user")
-          )
+          Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "pre-switch-user")),
         );
 
         harness.runtime.runSync(initializedClient.capture("pre-identify-event"));
         expect(initializedClient.getAnalyticsQueueLength()).toBe(1);
 
-        await harness.runtime.runPromise(
-          initializedClient.identify("new-user", {})
-        );
+        await harness.runtime.runPromise(initializedClient.identify("new-user", {}));
 
         // The queued event was flushed before the identity switch.
         expect(initializedClient.getAnalyticsQueueLength()).toBe(0);
@@ -539,14 +521,12 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager, (manager) =>
-            manager.set("distinctId", "pre-reset-user")
-          )
+          Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "pre-reset-user")),
         );
 
         harness.runtime.runSync(initializedClient.capture("pre-reset-event"));
@@ -577,16 +557,16 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
 
     try {
       await expect(
-        harness.runtime.runPromise(initializedClient.iosPresentCodeRedemptionSheet())
+        harness.runtime.runPromise(initializedClient.iosPresentCodeRedemptionSheet()),
       ).rejects.toThrow("Present code redemption sheet is not supported on this platform");
 
       await expect(
-        harness.runtime.runPromise(initializedClient.iosShowManageSubscriptions())
+        harness.runtime.runPromise(initializedClient.iosShowManageSubscriptions()),
       ).rejects.toThrow("Show manage subscriptions is not supported on this platform");
     } finally {
       await harness.runtime.dispose();
@@ -604,7 +584,7 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
     const monthlyProduct = new SubscriptionProduct(
       "monthly-id",
@@ -617,14 +597,14 @@ describe("VoidhashEffectClient", () => {
       "USD",
       "subscription",
       "ios",
-      "month"
+      "month",
     );
 
     try {
       await harness.runtime.runPromise(
         initializedClient.purchase(monthlyProduct, {
           method: "native",
-        })
+        }),
       );
 
       expect(paymentDouble.state.buyProductCalls).toHaveLength(1);
@@ -647,13 +627,11 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
 
     try {
-      await harness.runtime.runPromise(
-        initializedClient.startTransactionObserver()
-      );
+      await harness.runtime.runPromise(initializedClient.startTransactionObserver());
 
       expect(paymentDouble.state.initConnectionCalls).toBe(1);
     } finally {
@@ -673,7 +651,7 @@ describe("VoidhashEffectClient", () => {
       readOnly: true,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
     const transaction = new Transaction(
       "tx-id",
@@ -682,18 +660,14 @@ describe("VoidhashEffectClient", () => {
       1_700_000_000_000,
       1,
       false,
-      "ios"
+      "ios",
     );
 
     try {
-      await harness.runtime.runPromise(
-        initializedClient.processObservedTransaction(transaction)
-      );
+      await harness.runtime.runPromise(initializedClient.processObservedTransaction(transaction));
 
       expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
-      expect(apiDouble.state.syncTransactionCalls[0]?.headers["x-observer-mode"]).toBe(
-        "true"
-      );
+      expect(apiDouble.state.syncTransactionCalls[0]?.headers["x-observer-mode"]).toBe("true");
       expect(paymentDouble.state.acknowledgePurchaseCalls).toHaveLength(0);
     } finally {
       await harness.runtime.dispose();
@@ -711,7 +685,7 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
     const transaction = new Transaction(
       "tx-id",
@@ -720,16 +694,12 @@ describe("VoidhashEffectClient", () => {
       1_700_000_000_000,
       1,
       false,
-      "ios"
+      "ios",
     );
 
     try {
-      await harness.runtime.runPromise(
-        initializedClient.processObservedTransaction(transaction)
-      );
-      await harness.runtime.runPromise(
-        initializedClient.processObservedTransaction(transaction)
-      );
+      await harness.runtime.runPromise(initializedClient.processObservedTransaction(transaction));
+      await harness.runtime.runPromise(initializedClient.processObservedTransaction(transaction));
 
       expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
     } finally {
@@ -747,7 +717,7 @@ describe("VoidhashEffectClient", () => {
       1_700_000_000_000,
       1,
       false,
-      "ios"
+      "ios",
     );
     const paymentDouble = createPaymentAdapterDouble({
       pendingTransactions: [transaction],
@@ -760,13 +730,11 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
 
     try {
-      await harness.runtime.runPromise(
-        initializedClient.reconcileObservedTransactions()
-      );
+      await harness.runtime.runPromise(initializedClient.reconcileObservedTransactions());
 
       expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
     } finally {
@@ -787,7 +755,7 @@ describe("VoidhashEffectClient", () => {
       paymentAdapter: paymentDouble.paymentAdapter,
     });
     const initializedClient = await harness.runtime.runPromise(
-      VoidhashEffectClient.makeInitializedClient({ schema })
+      VoidhashEffectClient.makeInitializedClient({ schema }),
     );
     const transaction = new Transaction(
       "tx-id",
@@ -796,14 +764,12 @@ describe("VoidhashEffectClient", () => {
       1_700_000_000_000,
       1,
       false,
-      "ios"
+      "ios",
     );
 
     try {
       await expect(
-        harness.runtime.runPromise(
-          initializedClient.processObservedTransaction(transaction)
-        )
+        harness.runtime.runPromise(initializedClient.processObservedTransaction(transaction)),
       ).rejects.toThrow("syncTransaction failed");
 
       expect(paymentDouble.state.acknowledgePurchaseCalls).toHaveLength(0);
@@ -856,29 +822,25 @@ describe("VoidhashEffectClient", () => {
         publishableKey: "pk_analytics",
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager, (manager) =>
-            manager.set("distinctId", "analytics-user")
-          )
-        );
-        await harness.runtime.runPromise(
-          initializedClient.sendAnalyticsEvents(analyticsEvents)
+          Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "analytics-user")),
         );
+        await harness.runtime.runPromise(initializedClient.sendAnalyticsEvents(analyticsEvents));
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
-        expect(String(fetchMock.mock.calls[0]?.[0])).toBe(
-          "https://api.voidhash.test/i/v1/batch"
-        );
+        expect(String(fetchMock.mock.calls[0]?.[0])).toBe("https://api.voidhash.test/i/v1/batch");
 
         const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
         expect(request?.method).toBe("POST");
-        expect(request?.headers).toEqual(expect.objectContaining({
-          "content-type": "application/json",
-        }));
+        expect(request?.headers).toEqual(
+          expect.objectContaining({
+            "content-type": "application/json",
+          }),
+        );
         expect(JSON.parse(decodeRequestBody(request?.body))).toMatchObject({
           events: [
             {
@@ -917,18 +879,14 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
-        await harness.runtime.runPromise(
-          initializedClient.sendAnalyticsEvents(analyticsEvents)
-        );
+        await harness.runtime.runPromise(initializedClient.sendAnalyticsEvents(analyticsEvents));
 
         expect(fetchMock).toHaveBeenCalledTimes(1);
-        expect(String(fetchMock.mock.calls[0]?.[0])).toBe(
-          "http://localhost:8083/i/v1/batch"
-        );
+        expect(String(fetchMock.mock.calls[0]?.[0])).toBe("http://localhost:8083/i/v1/batch");
       } finally {
         global.fetch = originalFetch;
         await harness.runtime.dispose();
@@ -937,12 +895,13 @@ describe("VoidhashEffectClient", () => {
 
     it("does not inline retry failed analytics delivery", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = vi.fn()
-        .mockResolvedValueOnce(new Response(JSON.stringify({ error: "try again" }), {
+      const fetchMock = vi.fn().mockResolvedValueOnce(
+        new Response(JSON.stringify({ error: "try again" }), {
           headers: { "content-type": "application/json" },
           status: 503,
           statusText: "Service Unavailable",
-        }));
+        }),
+      );
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -957,13 +916,13 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
-        await expect(harness.runtime.runPromise(
-          initializedClient.sendAnalyticsEvents(analyticsEvents)
-        )).rejects.toThrow("Analytics ingest request failed: 503");
+        await expect(
+          harness.runtime.runPromise(initializedClient.sendAnalyticsEvents(analyticsEvents)),
+        ).rejects.toThrow("Analytics ingest request failed: 503");
         expect(fetchMock).toHaveBeenCalledTimes(1);
       } finally {
         global.fetch = originalFetch;
@@ -984,12 +943,12 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
         harness.runtime.runSync(
-          initializedClient.capture("cta-button-clicked", { button_name: "Get Started" })
+          initializedClient.capture("cta-button-clicked", { button_name: "Get Started" }),
         );
 
         expect(initializedClient.getAnalyticsQueueLength()).toBe(1);
@@ -1015,7 +974,7 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
       let flushTriggered = false;
       initializedClient.setAnalyticsFlushCallback(() => {
@@ -1058,7 +1017,7 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
       let flushTriggered = false;
       initializedClient.setAnalyticsFlushCallback(() => {
@@ -1080,21 +1039,23 @@ describe("VoidhashEffectClient", () => {
 
     it("keeps batch in queue when flush is retryably rate limited", async () => {
       const originalFetch = global.fetch;
-      const fetchMock = vi.fn().mockResolvedValueOnce(new Response(
-        JSON.stringify({
-          code: "rate_limited",
-          error: "request rate limit exceeded",
-          retry_after_ms: 2000,
-        }),
-        {
-          headers: {
-            "content-type": "application/json",
-            "retry-after": "2",
+      const fetchMock = vi.fn().mockResolvedValueOnce(
+        new Response(
+          JSON.stringify({
+            code: "rate_limited",
+            error: "request rate limit exceeded",
+            retry_after_ms: 2000,
+          }),
+          {
+            headers: {
+              "content-type": "application/json",
+              "retry-after": "2",
+            },
+            status: 429,
+            statusText: "Too Many Requests",
           },
-          status: 429,
-          statusText: "Too Many Requests",
-        }
-      ));
+        ),
+      );
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -1109,7 +1070,7 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
@@ -1129,34 +1090,39 @@ describe("VoidhashEffectClient", () => {
       vi.useFakeTimers();
 
       const originalFetch = global.fetch;
-      const fetchMock = vi.fn()
-        .mockResolvedValueOnce(new Response(
-          JSON.stringify({
-            code: "rate_limited",
-            error: "request rate limit exceeded",
-            retry_after_ms: 2000,
-          }),
-          {
-            headers: {
-              "content-type": "application/json",
-              "retry-after": "2",
+      const fetchMock = vi
+        .fn()
+        .mockResolvedValueOnce(
+          new Response(
+            JSON.stringify({
+              code: "rate_limited",
+              error: "request rate limit exceeded",
+              retry_after_ms: 2000,
+            }),
+            {
+              headers: {
+                "content-type": "application/json",
+                "retry-after": "2",
+              },
+              status: 429,
+              statusText: "Too Many Requests",
             },
-            status: 429,
-            statusText: "Too Many Requests",
-          }
-        ))
-        .mockResolvedValueOnce(new Response(
-          JSON.stringify({
-            accepted: 1,
-            rejected: 0,
-            request_id: "req_after_backoff",
-          }),
-          {
-            headers: { "content-type": "application/json" },
-            status: 202,
-            statusText: "Accepted",
-          }
-        ));
+          ),
+        )
+        .mockResolvedValueOnce(
+          new Response(
+            JSON.stringify({
+              accepted: 1,
+              rejected: 0,
+              request_id: "req_after_backoff",
+            }),
+            {
+              headers: { "content-type": "application/json" },
+              status: 202,
+              statusText: "Accepted",
+            },
+          ),
+        );
       global.fetch = fetchMock as unknown as typeof global.fetch;
 
       const schema = createTestSchema();
@@ -1171,7 +1137,7 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
@@ -1213,22 +1179,21 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
-        await harness.runtime.runPromise(
-          initializedClient.captureAutomaticStartupEvents()
-        );
+        await harness.runtime.runPromise(initializedClient.captureAutomaticStartupEvents());
         expect(initializedClient.getAnalyticsQueueLength()).toBe(2);
 
         await harness.runtime.runPromise(initializedClient.flush());
 
         const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
         const payload = JSON.parse(decodeRequestBody(request?.body));
-        expect(
-          payload.events.map((event: { event: string }) => event.event)
-        ).toEqual(["$app_installed", "$app_opened"]);
+        expect(payload.events.map((event: { event: string }) => event.event)).toEqual([
+          "$app_installed",
+          "$app_opened",
+        ]);
       } finally {
         global.fetch = originalFetch;
         await harness.runtime.dispose();
@@ -1251,7 +1216,7 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
@@ -1261,22 +1226,21 @@ describe("VoidhashEffectClient", () => {
             manager.set("voidhash:analytics:last-seen-app-release", {
               appBuild: "0",
               appVersion: "0.0.1",
-            })
-          )
+            }),
+          ),
         );
 
-        await harness.runtime.runPromise(
-          initializedClient.captureAutomaticStartupEvents()
-        );
+        await harness.runtime.runPromise(initializedClient.captureAutomaticStartupEvents());
         expect(initializedClient.getAnalyticsQueueLength()).toBe(2);
 
         await harness.runtime.runPromise(initializedClient.flush());
 
         const request = fetchMock.mock.calls[0]?.[1] as RequestInit | undefined;
         const payload = JSON.parse(decodeRequestBody(request?.body));
-        expect(
-          payload.events.map((event: { event: string }) => event.event)
-        ).toEqual(["$app_updated", "$app_opened"]);
+        expect(payload.events.map((event: { event: string }) => event.event)).toEqual([
+          "$app_updated",
+          "$app_opened",
+        ]);
       } finally {
         global.fetch = originalFetch;
         await harness.runtime.dispose();
@@ -1296,7 +1260,7 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
       const capturedEvents: string[] = [];
 
@@ -1304,7 +1268,7 @@ describe("VoidhashEffectClient", () => {
         const subscription = harness.runtime.runSync(
           initializedClient.setupAutomaticLifecycleEvents((eventName) => {
             capturedEvents.push(eventName);
-          })
+          }),
         );
 
         // The test might return null if react-native AppState is not available in test env
@@ -1335,14 +1299,12 @@ describe("VoidhashEffectClient", () => {
         paymentAdapter: paymentDouble.paymentAdapter,
       });
       const initializedClient = await harness.runtime.runPromise(
-        VoidhashEffectClient.makeInitializedClient({ schema })
+        VoidhashEffectClient.makeInitializedClient({ schema }),
       );
 
       try {
         await harness.runtime.runPromise(
-          Effect.flatMap(CacheManager, (manager) =>
-            manager.set("distinctId", "user-signing-out")
-          )
+          Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "user-signing-out")),
         );
 
         await harness.runtime.runPromise(initializedClient.signOut());
diff --git a/libraries/react-native/tests/core/identity-manager.test.ts b/libraries/react-native/tests/core/identity-manager.test.ts
index 6adec767e..3341f3328 100644
--- a/libraries/react-native/tests/core/identity-manager.test.ts
+++ b/libraries/react-native/tests/core/identity-manager.test.ts
@@ -4,10 +4,7 @@ import { ANONYMOUS_DISTINCT_ID_PREFIX } from "../../src/constants";
 import { CacheManager } from "../../src/core/caching/cache-manager";
 import { PersonInfoManager } from "../../src/core/identity/person-info-manager";
 import { IdentityManager } from "../../src/core/identity/identity-manager";
-import {
-  currentPersonAtom,
-  featureFlagsByKeyAtom,
-} from "../../src/core/reactivity/client-state";
+import { currentPersonAtom, featureFlagsByKeyAtom } from "../../src/core/reactivity/client-state";
 import {
   createApiClientDouble,
   createEffectTestHarness,
@@ -30,11 +27,11 @@ describe("IdentityManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-user"))
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "cached-user")),
       );
 
       const distinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId()),
       );
 
       expect(distinctId).toBe("cached-user");
@@ -55,10 +52,10 @@ describe("IdentityManager", () => {
 
     try {
       const distinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctId()),
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache()),
       );
 
       expect(distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)).toBe(true);
@@ -85,9 +82,7 @@ describe("IdentityManager", () => {
       });
 
       await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.set("distinctId", "old-user")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "old-user")),
       );
 
       await harness.runtime.runPromise(
@@ -95,17 +90,15 @@ describe("IdentityManager", () => {
           manager.identify("new-user", {
             email: "new@voidhash.test",
             name: "New User",
-          })
-        )
+          }),
+        ),
       );
 
       const cachedDistinctId = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache()),
       );
       const cachedPerson = await harness.runtime.runPromise(
-        Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPersonFromCache("new-user")
-        )
+        Effect.flatMap(PersonInfoManager, (manager) => manager.getPersonFromCache("new-user")),
       );
 
       // identify no longer auto-syncs attributes — only the identify POST runs.
@@ -142,10 +135,7 @@ describe("IdentityManager", () => {
 
     try {
       // Seed reactive state so we can assert reset clears it.
-      harness.atomRegistry.set(
-        currentPersonAtom,
-        createSdkPerson("signed-in-user")
-      );
+      harness.atomRegistry.set(currentPersonAtom, createSdkPerson("signed-in-user"));
       harness.atomRegistry.set(featureFlagsByKeyAtom, {
         all: { flags: [] },
       });
@@ -155,19 +145,19 @@ describe("IdentityManager", () => {
           Effect.all([
             manager.set("distinctId", "signed-in-user"),
             manager.set("person:some-user", { id: "some-user" }),
-          ])
-        )
+          ]),
+        ),
       );
 
       await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.reset())
+        Effect.flatMap(IdentityManager, (manager) => manager.reset()),
       );
 
       const distinctIdFromCache = await harness.runtime.runPromise(
-        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache())
+        Effect.flatMap(IdentityManager, (manager) => manager.getDistinctIdFromCache()),
       );
       const cacheKeys = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys())
+        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys()),
       );
 
       // reset no longer auto-syncs attributes.
diff --git a/libraries/react-native/tests/core/paywall-runtime-config.test.ts b/libraries/react-native/tests/core/paywall-runtime-config.test.ts
index 4f4e2e27d..6d450135b 100644
--- a/libraries/react-native/tests/core/paywall-runtime-config.test.ts
+++ b/libraries/react-native/tests/core/paywall-runtime-config.test.ts
@@ -31,9 +31,7 @@ function makeSubscriptionProduct(overrides: {
   );
 }
 
-function makeRuntime(
-  overrides: Partial<PaywallReleaseRuntime> = {},
-): PaywallReleaseRuntime {
+function makeRuntime(overrides: Partial<PaywallReleaseRuntime> = {}): PaywallReleaseRuntime {
   return {
     contentHash: "abc123",
     productSlugs: ["yearly", "monthly"],
@@ -130,9 +128,7 @@ describe("buildPaywallRuntimeConfig", () => {
     });
 
     expect(skipped).toEqual(["missing", "unknown"]);
-    expect(config.products.map((product) => product.id)).toEqual([
-      "store_monthly",
-    ]);
+    expect(config.products.map((product) => product.id)).toEqual(["store_monthly"]);
     expect(config.defaultSelectedProductId).toBe("store_monthly");
   });
 
diff --git a/libraries/react-native/tests/core/person-info-manager.test.ts b/libraries/react-native/tests/core/person-info-manager.test.ts
index bcffff756..3fa93731c 100644
--- a/libraries/react-native/tests/core/person-info-manager.test.ts
+++ b/libraries/react-native/tests/core/person-info-manager.test.ts
@@ -30,15 +30,11 @@ describe("PersonInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.cache("cached-user", person)
-        )
+        Effect.flatMap(PersonInfoManager, (manager) => manager.cache("cached-user", person)),
       );
 
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPerson("cached-user", "cache")
-        )
+        Effect.flatMap(PersonInfoManager, (manager) => manager.getPerson("cached-user", "cache")),
       );
 
       expect(result).toEqual(person);
@@ -62,14 +58,10 @@ describe("PersonInfoManager", () => {
 
     try {
       const result = await harness.runtime.runPromise(
-        Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPerson("fetched-user", "fetch")
-        )
+        Effect.flatMap(PersonInfoManager, (manager) => manager.getPerson("fetched-user", "fetch")),
       );
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPersonFromCache("fetched-user")
-        )
+        Effect.flatMap(PersonInfoManager, (manager) => manager.getPersonFromCache("fetched-user")),
       );
 
       if (result === null) {
@@ -97,13 +89,13 @@ describe("PersonInfoManager", () => {
     try {
       const result = await harness.runtime.runPromise(
         Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPerson("brand-new-user", "fetch")
-        )
+          manager.getPerson("brand-new-user", "fetch"),
+        ),
       );
       const cached = await harness.runtime.runPromise(
         Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPersonFromCache("brand-new-user")
-        )
+          manager.getPersonFromCache("brand-new-user"),
+        ),
       );
 
       expect(result).toBeNull();
@@ -128,13 +120,13 @@ describe("PersonInfoManager", () => {
 
     try {
       await harness.runtime.runPromise(
-        Effect.flatMap(PersonInfoManager, (manager) => manager.cache("fresh-user", person))
+        Effect.flatMap(PersonInfoManager, (manager) => manager.cache("fresh-user", person)),
       );
 
       const result = await harness.runtime.runPromise(
         Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPerson("fresh-user", "fetch-while-stale")
-        )
+          manager.getPerson("fresh-user", "fetch-while-stale"),
+        ),
       );
 
       expect(result).toEqual(person);
@@ -164,15 +156,15 @@ describe("PersonInfoManager", () => {
           manager.set("person:stale-user", stalePerson, {
             staleTime: 1,
             ttl: 1000,
-          })
-        )
+          }),
+        ),
       );
       await wait(5);
 
       const result = await harness.runtime.runPromise(
         Effect.flatMap(PersonInfoManager, (manager) =>
-          manager.getPerson("stale-user", "fetch-while-stale")
-        )
+          manager.getPerson("stale-user", "fetch-while-stale"),
+        ),
       );
 
       expect(apiDouble.state.getPersonCalls).toHaveLength(1);
diff --git a/libraries/react-native/tests/core/schema-manager.test.ts b/libraries/react-native/tests/core/schema-manager.test.ts
index 4b184bf97..ec0911c79 100644
--- a/libraries/react-native/tests/core/schema-manager.test.ts
+++ b/libraries/react-native/tests/core/schema-manager.test.ts
@@ -21,7 +21,7 @@ import { createTestSchema } from "../helpers/test-schema";
  */
 const waitFor = async (
   predicate: () => boolean,
-  options: { timeoutMs?: number; intervalMs?: number } = {}
+  options: { timeoutMs?: number; intervalMs?: number } = {},
 ) => {
   const timeoutMs = options.timeoutMs ?? 1_000;
   const intervalMs = options.intervalMs ?? 5;
@@ -33,13 +33,8 @@ const waitFor = async (
   throw new Error(`waitFor timed out after ${timeoutMs}ms`);
 };
 
-const resolveSchemaEffect = (args: {
-  distinctId: string;
-  internalSchema?: RuntimeSchema;
-}) =>
-  Effect.flatMap(SchemaManager, (manager) =>
-    manager.resolveSchema(args)
-  );
+const resolveSchemaEffect = (args: { distinctId: string; internalSchema?: RuntimeSchema }) =>
+  Effect.flatMap(SchemaManager, (manager) => manager.resolveSchema(args));
 
 const createAltSchema = (): RuntimeSchema => ({
   version: "sha256:alt",
@@ -65,7 +60,7 @@ describe("SchemaManager", () => {
         resolveSchemaEffect({
           distinctId: "user-1",
           internalSchema,
-        })
+        }),
       );
 
       expect(result).toEqual(internalSchema);
@@ -73,9 +68,7 @@ describe("SchemaManager", () => {
       expect(harness.atomRegistry.get(schemaAtom)).toEqual(internalSchema);
       // Cache should still be empty because we bypassed it entirely.
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.get<RuntimeSchema>("schema:1.0.0")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.get<RuntimeSchema>("schema:1.0.0")),
       );
       expect(cached).toBeNull();
     } finally {
@@ -96,7 +89,7 @@ describe("SchemaManager", () => {
 
     try {
       const result = await harness.runtime.runPromise(
-        resolveSchemaEffect({ distinctId: "user-1" })
+        resolveSchemaEffect({ distinctId: "user-1" }),
       );
 
       expect(result).toEqual(remoteSchema);
@@ -104,9 +97,7 @@ describe("SchemaManager", () => {
       expect(harness.atomRegistry.get(schemaAtom)).toEqual(remoteSchema);
 
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.get<RuntimeSchema>("schema:1.0.0")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.get<RuntimeSchema>("schema:1.0.0")),
       );
       expect(cached?.value).toEqual(remoteSchema);
     } finally {
@@ -135,12 +126,12 @@ describe("SchemaManager", () => {
         Effect.flatMap(CacheManager, (manager) =>
           manager.set("schema:1.0.0", cachedSchema, {
             ttl: 1000 * 60 * 60 * 24 * 30,
-          })
-        )
+          }),
+        ),
       );
 
       const result = await harness.runtime.runPromise(
-        resolveSchemaEffect({ distinctId: "user-1" })
+        resolveSchemaEffect({ distinctId: "user-1" }),
       );
 
       // The synchronous return value is the cached schema — what the
@@ -154,15 +145,13 @@ describe("SchemaManager", () => {
       await waitFor(
         () =>
           apiDouble.state.getSchemaCalls.length === 1 &&
-          harness.atomRegistry.get(schemaAtom) === refreshedSchema
+          harness.atomRegistry.get(schemaAtom) === refreshedSchema,
       );
       expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
       expect(harness.atomRegistry.get(schemaAtom)).toEqual(refreshedSchema);
 
       const cached = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.get<RuntimeSchema>("schema:1.0.0")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.get<RuntimeSchema>("schema:1.0.0")),
       );
       expect(cached?.value).toEqual(refreshedSchema);
     } finally {
@@ -185,7 +174,7 @@ describe("SchemaManager", () => {
 
     try {
       const exit = await harness.runtime.runPromiseExit(
-        resolveSchemaEffect({ distinctId: "user-1" })
+        resolveSchemaEffect({ distinctId: "user-1" }),
       );
 
       expect(Exit.isFailure(exit)).toBe(true);
@@ -219,21 +208,19 @@ describe("SchemaManager", () => {
         Effect.flatMap(CacheManager, (manager) =>
           manager.set("schema:1.0.0", previousVersionSchema, {
             ttl: 1000 * 60 * 60 * 24 * 30,
-          })
-        )
+          }),
+        ),
       );
 
       const result = await harness.runtime.runPromise(
-        resolveSchemaEffect({ distinctId: "user-1" })
+        resolveSchemaEffect({ distinctId: "user-1" }),
       );
 
       expect(result).toEqual(remoteSchema);
       expect(apiDouble.state.getSchemaCalls).toHaveLength(1);
 
       const cachedForNewVersion = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.get<RuntimeSchema>("schema:2.0.0")
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.get<RuntimeSchema>("schema:2.0.0")),
       );
       expect(cachedForNewVersion?.value).toEqual(remoteSchema);
     } finally {
@@ -255,7 +242,7 @@ describe("SchemaManager", () => {
 
     try {
       const result = await harness.runtime.runPromise(
-        resolveSchemaEffect({ distinctId: "user-1" })
+        resolveSchemaEffect({ distinctId: "user-1" }),
       );
 
       expect(result).toEqual(remoteSchema);
@@ -264,13 +251,9 @@ describe("SchemaManager", () => {
 
       // No cache key should have been written.
       const cacheKeys = await harness.runtime.runPromise(
-        Effect.flatMap(CacheManager, (manager) =>
-          manager.getCacheKeys()
-        )
+        Effect.flatMap(CacheManager, (manager) => manager.getCacheKeys()),
       );
-      expect(
-        cacheKeys.some((key) => key.startsWith("schema:"))
-      ).toBe(false);
+      expect(cacheKeys.some((key) => key.startsWith("schema:"))).toBe(false);
     } finally {
       await harness.runtime.dispose();
     }
@@ -290,7 +273,7 @@ describe("SchemaManager", () => {
 
     try {
       const exit = await harness.runtime.runPromiseExit(
-        resolveSchemaEffect({ distinctId: "user-1" })
+        resolveSchemaEffect({ distinctId: "user-1" }),
       );
 
       expect(Exit.isFailure(exit)).toBe(true);
diff --git a/libraries/react-native/tests/helpers/effect-test-harness.ts b/libraries/react-native/tests/helpers/effect-test-harness.ts
index 5b1b18bd3..443d50b54 100644
--- a/libraries/react-native/tests/helpers/effect-test-harness.ts
+++ b/libraries/react-native/tests/helpers/effect-test-harness.ts
@@ -103,7 +103,7 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
                 variantKey: "on",
               },
             ],
-          }
+          },
         );
       },
       getPerson: (request: ApiSdkCall) => {
@@ -118,24 +118,18 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
           });
         }
         const distinctId = String(request.headers["x-distinct-id"]);
-        return Effect.succeed(
-          options.getPersonResult ?? createSdkPerson(distinctId)
-        );
+        return Effect.succeed(options.getPersonResult ?? createSdkPerson(distinctId));
       },
       identify: (request: ApiSdkCall) => {
         state.identifyCalls.push(request);
         const distinctId = String(request.payload?.distinctId ?? "identified-user");
-        return Effect.succeed(
-          options.identifyResult ?? createSdkPerson(distinctId)
-        );
+        return Effect.succeed(options.identifyResult ?? createSdkPerson(distinctId));
       },
       resolvePaywall: () => Effect.succeed(null),
       syncPersonAttributes: (request: ApiSdkCall) => {
         state.syncPersonAttributesCalls.push(request);
         const distinctId = String(request.headers["x-distinct-id"]);
-        return Effect.succeed(
-          options.syncPersonAttributesResult ?? createSdkPerson(distinctId)
-        );
+        return Effect.succeed(options.syncPersonAttributesResult ?? createSdkPerson(distinctId));
       },
       syncTransaction: (request: ApiSdkCall) => {
         state.syncTransactionCalls.push(request);
@@ -170,9 +164,7 @@ export interface PaymentAdapterDoubleOptions {
   products?: Product[];
 }
 
-export function createPaymentAdapterDouble(
-  options: PaymentAdapterDoubleOptions = {}
-) {
+export function createPaymentAdapterDouble(options: PaymentAdapterDoubleOptions = {}) {
   const state: PaymentAdapterDoubleState = {
     acknowledgePurchaseCalls: [],
     buyProductCalls: [],
@@ -191,23 +183,14 @@ export function createPaymentAdapterDouble(
       state.buyProductCalls.push(product);
       return Effect.succeed(
         options.buyProductTransaction ??
-          new Transaction(
-            "tx-id",
-            "tx-id",
-            product.slug,
-            Date.now(),
-            1,
-            false,
-            "ios"
-          )
+          new Transaction("tx-id", "tx-id", product.slug, Date.now(), 1, false, "ios"),
       );
     },
     endConnection: () => {
       state.endConnectionCalls += 1;
       return Effect.void;
     },
-    getPendingTransactions: () =>
-      Effect.succeed(options.pendingTransactions ?? []),
+    getPendingTransactions: () => Effect.succeed(options.pendingTransactions ?? []),
     getProducts: () => {
       state.getProductsCalls += 1;
       return Effect.succeed(options.products ?? []);
@@ -308,22 +291,17 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
     Layer.provideMerge(IdentityManager.Default),
     Layer.provideMerge(CacheManager.Default),
     Layer.provideMerge(Layer.succeed(CacheAdapter, options.cacheAdapter)),
-    Layer.provideMerge(
-      Layer.succeed(ApiClient, options.apiClient as typeof ApiClient.Service)
-    ),
+    Layer.provideMerge(Layer.succeed(ApiClient, options.apiClient as typeof ApiClient.Service)),
     Layer.provideMerge(FetchHttpClient.layer),
     Layer.provideMerge(
-      Layer.succeed(
-        PaymentAdapter,
-        options.paymentAdapter as typeof PaymentAdapter.Service
-      )
+      Layer.succeed(PaymentAdapter, options.paymentAdapter as typeof PaymentAdapter.Service),
     ),
     Layer.provideMerge(Layer.succeed(AtomRegistry.AtomRegistry, atomRegistry)),
     Layer.provideMerge(
       Layer.succeed(PlatformProvider, {
         ...defaultPlatformInfo,
         ...options.platform,
-      })
+      }),
     ),
     Layer.provideMerge(
       Layer.succeed(SdkConfiguration, {
@@ -332,14 +310,11 @@ export function createEffectTestHarness(options: EffectTestHarnessOptions) {
         ingestUrl: options.ingestUrl,
         publishableKey: options.publishableKey ?? "pk_test",
         readOnly: options.readOnly ?? false,
-      })
-    )
+      }),
+    ),
   );
   const layer = options.fetch
-    ? pipe(
-        baseLayer,
-        Layer.provideMerge(Layer.succeed(FetchHttpClient.Fetch, options.fetch))
-      )
+    ? pipe(baseLayer, Layer.provideMerge(Layer.succeed(FetchHttpClient.Fetch, options.fetch)))
     : baseLayer;
 
   return {
diff --git a/libraries/react-native/tests/helpers/effect-vitest.ts b/libraries/react-native/tests/helpers/effect-vitest.ts
index 2aeeb1562..893aa53b9 100644
--- a/libraries/react-native/tests/helpers/effect-vitest.ts
+++ b/libraries/react-native/tests/helpers/effect-vitest.ts
@@ -2,8 +2,6 @@ import { makeMethods } from "@effect/vitest";
 import { it as vitestIt } from "vitest";
 
 export { beforeEach, describe, expect } from "vitest";
-const makeVitestMethods = makeMethods as unknown as (
-	it: typeof vitestIt
-) => typeof vitestIt;
+const makeVitestMethods = makeMethods as unknown as (it: typeof vitestIt) => typeof vitestIt;
 
 export const it = makeVitestMethods(vitestIt);
diff --git a/libraries/react-native/tests/internal/paywall-bridge-configure.test.ts b/libraries/react-native/tests/internal/paywall-bridge-configure.test.ts
index 90401e676..189882f0a 100644
--- a/libraries/react-native/tests/internal/paywall-bridge-configure.test.ts
+++ b/libraries/react-native/tests/internal/paywall-bridge-configure.test.ts
@@ -32,9 +32,7 @@ describe("paywall bridge configure interop", () => {
       defaultSelectedProductId: "store_yearly",
     };
 
-    const parsed = parseInboundEnvelope(
-      createPaywallBridgeConfigureMessage(config, "req_ready"),
-    );
+    const parsed = parseInboundEnvelope(createPaywallBridgeConfigureMessage(config, "req_ready"));
 
     expect(parsed).not.toBeNull();
     expect(parsed?.type).toBe("configure");
@@ -55,9 +53,7 @@ describe("paywall bridge configure interop", () => {
       variables: {},
     };
 
-    const parsed = parseInboundEnvelope(
-      createPaywallBridgeConfigureMessage(config),
-    );
+    const parsed = parseInboundEnvelope(createPaywallBridgeConfigureMessage(config));
 
     expect(parsed?.type).toBe("configure");
     if (parsed?.type !== "configure") {
@@ -73,10 +69,7 @@ describe("paywall bridge configure interop", () => {
     // and the page decodes with `atob`, which yields one LATIN-1 character per
     // byte. Simulate that lossy leg: utf8 → base64 → latin1.
     const throughNativeDelivery = (message: string): string =>
-      Buffer.from(
-        Buffer.from(message, "utf8").toString("base64"),
-        "base64",
-      ).toString("latin1");
+      Buffer.from(Buffer.from(message, "utf8").toString("base64"), "base64").toString("latin1");
 
     const config: PaywallRuntimeConfig = {
       products: [
@@ -105,9 +98,7 @@ describe("paywall bridge configure interop", () => {
     }
     expect(parsed.payload.products[0]?.priceString).toBe("59,99 €");
     expect(parsed.payload.products[0]?.displayName).toBe("Année Pro");
-    expect(parsed.payload.products[0]?.description).toBe(
-      "Meilleure offre — 7 jours d'essai",
-    );
+    expect(parsed.payload.products[0]?.description).toBe("Meilleure offre — 7 jours d'essai");
     expect(parsed.payload.variables.headline).toBe("Débloquez tout 😀");
   });
 });
diff --git a/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts b/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
index d6b0fed40..c21a0ea5c 100644
--- a/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
+++ b/libraries/react-native/tests/internal/paywall-bridge-parser.test.ts
@@ -1,9 +1,6 @@
 // The real `@voidhash/paywalls` runtime encoder — round-tripping its output
 // through this parser proves the two packages agree on the wire format.
-import {
-  createEventEnvelope,
-  serializeEnvelope,
-} from "../../../paywalls/src/runtime/envelope";
+import { createEventEnvelope, serializeEnvelope } from "../../../paywalls/src/runtime/envelope";
 import {
   PaywallBridgeParseError,
   parsePaywallBridgeEnvelope,
@@ -19,7 +16,7 @@ describe("parsePaywallBridgeEnvelope", () => {
         },
         type: "purchase",
         version: 1,
-      })
+      }),
     );
 
     expect(parsed.type).toBe("purchase");
@@ -34,8 +31,8 @@ describe("parsePaywallBridgeEnvelope", () => {
         JSON.stringify({
           type: "ready",
           version: 99,
-        })
-      )
+        }),
+      ),
     ).toThrow(PaywallBridgeParseError);
   });
 
@@ -48,8 +45,8 @@ describe("parsePaywallBridgeEnvelope", () => {
           },
           type: "purchase",
           version: 1,
-        })
-      )
+        }),
+      ),
     ).toThrow(PaywallBridgeParseError);
   });
 
@@ -62,7 +59,7 @@ describe("parsePaywallBridgeEnvelope", () => {
         },
         type: "event",
         version: 1,
-      })
+      }),
     );
 
     expect(parsed.type).toBe("event");
@@ -80,7 +77,7 @@ describe("parsePaywallBridgeEnvelope", () => {
         },
         type: "event",
         version: 1,
-      })
+      }),
     );
 
     expect(parsed.type).toBe("event");
@@ -96,8 +93,8 @@ describe("parsePaywallBridgeEnvelope", () => {
           payload: { properties: {} },
           type: "event",
           version: 1,
-        })
-      )
+        }),
+      ),
     ).toThrow(PaywallBridgeParseError);
   });
 
@@ -108,14 +105,14 @@ describe("parsePaywallBridgeEnvelope", () => {
           payload: { name: "cta_seen", properties: "nope" },
           type: "event",
           version: 1,
-        })
-      )
+        }),
+      ),
     ).toThrow(PaywallBridgeParseError);
   });
 
   it("round-trips the paywalls runtime's createEventEnvelope output", () => {
     const parsed = parsePaywallBridgeEnvelope(
-      serializeEnvelope(createEventEnvelope("cta_seen", { screen: "home" }))
+      serializeEnvelope(createEventEnvelope("cta_seen", { screen: "home" })),
     );
 
     expect(parsed).toMatchObject({
diff --git a/libraries/react-native/tests/internal/webview-utils.test.ts b/libraries/react-native/tests/internal/webview-utils.test.ts
index 0bdefcd06..5c0fbad99 100644
--- a/libraries/react-native/tests/internal/webview-utils.test.ts
+++ b/libraries/react-native/tests/internal/webview-utils.test.ts
@@ -1,8 +1,5 @@
 import { describe, expect, it } from "../helpers/effect-vitest";
-import {
-  normalizeSource,
-  wrapNitroCallback,
-} from "../../src/internal/webview/utils";
+import { normalizeSource, wrapNitroCallback } from "../../src/internal/webview/utils";
 
 describe("webview utils", () => {
   it("wraps callbacks in Nitro callback object", () => {
diff --git a/libraries/react-native/tests/internal/whitelist.test.ts b/libraries/react-native/tests/internal/whitelist.test.ts
index 67c766fb7..b0e594c3e 100644
--- a/libraries/react-native/tests/internal/whitelist.test.ts
+++ b/libraries/react-native/tests/internal/whitelist.test.ts
@@ -4,9 +4,7 @@ import { describe, expect, it } from "../helpers/effect-vitest";
 describe("webview whitelist", () => {
   it("allows whitelisted https origin", () => {
     const compiled = compileWhitelist(["https://*.voidhash.com"]);
-    expect(passesWhitelist(compiled, "https://pay.voidhash.com/checkout")).toBe(
-      true
-    );
+    expect(passesWhitelist(compiled, "https://pay.voidhash.com/checkout")).toBe(true);
   });
 
   it("blocks non-whitelisted origin", () => {
@@ -16,8 +14,6 @@ describe("webview whitelist", () => {
 
   it("blocks origin that only matches as prefix", () => {
     const compiled = compileWhitelist(["https://*.voidhash.com"]);
-    expect(
-      passesWhitelist(compiled, "https://pay.voidhash.com.evil.tld")
-    ).toBe(false);
+    expect(passesWhitelist(compiled, "https://pay.voidhash.com.evil.tld")).toBe(false);
   });
 });
diff --git a/libraries/react-native/tests/react/use-paywall-by-location.test.tsx b/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
index 311dbeb17..6f4c571b2 100644
--- a/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
+++ b/libraries/react-native/tests/react/use-paywall-by-location.test.tsx
@@ -1,10 +1,7 @@
 import { type Mocked, vi } from "vitest";
 // The real `@voidhash/paywalls` runtime encoder, used to prove the SDK handles
 // the exact wire bytes a deployed bundle emits.
-import {
-  createEventEnvelope,
-  serializeEnvelope,
-} from "../../../paywalls/src/runtime/envelope";
+import { createEventEnvelope, serializeEnvelope } from "../../../paywalls/src/runtime/envelope";
 import type { VoidhashClient } from "../../src/client";
 import {
   __internal_handlePaywallBridgeEventForTests,
@@ -81,10 +78,9 @@ describe("usePaywallByLocation bridge coordinator", () => {
       }),
     });
 
-    expect(client.purchase).toHaveBeenCalledWith(
-      expect.objectContaining({ id: "prod_monthly" }),
-      { method: "native" },
-    );
+    expect(client.purchase).toHaveBeenCalledWith(expect.objectContaining({ id: "prod_monthly" }), {
+      method: "native",
+    });
     expect(presenter.postMessage).toHaveBeenCalled();
     expect(presenter.dismiss).toHaveBeenCalled();
     expect(openExternalUrl).not.toHaveBeenCalled();
@@ -157,9 +153,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
       }),
     });
 
-    const response = JSON.parse(
-      presenter.postMessage.mock.calls[0][1] as string,
-    );
+    const response = JSON.parse(presenter.postMessage.mock.calls[0][1] as string);
     expect(response.payload.status).toBe("error");
     expect(presenter.dismiss).not.toHaveBeenCalled();
   });
@@ -299,9 +293,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
     const presenter = createPresenterMock();
     const onError = vi.fn();
 
-    client.restorePurchases.mockRejectedValue(
-      new Error("restore failed") as never,
-    );
+    client.restorePurchases.mockRejectedValue(new Error("restore failed") as never);
 
     await __internal_handlePaywallBridgeEventForTests({
       client,
@@ -386,9 +378,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
       htmlUrl: "https://cdn.example/p/5b00934c/index.html",
       runtime,
     });
-    client.internal_buildPaywallRuntimeConfig.mockResolvedValue(
-      runtimeConfig as never,
-    );
+    client.internal_buildPaywallRuntimeConfig.mockResolvedValue(runtimeConfig as never);
 
     await __internal_handlePaywallBridgeEventForTests({
       client,
@@ -402,13 +392,9 @@ describe("usePaywallByLocation bridge coordinator", () => {
       }),
     });
 
-    expect(client.internal_buildPaywallRuntimeConfig).toHaveBeenCalledWith(
-      runtime,
-    );
+    expect(client.internal_buildPaywallRuntimeConfig).toHaveBeenCalledWith(runtime);
     expect(presenter.postMessage).toHaveBeenCalledTimes(1);
-    const envelope = JSON.parse(
-      presenter.postMessage.mock.calls[0][1] as string,
-    );
+    const envelope = JSON.parse(presenter.postMessage.mock.calls[0][1] as string);
     expect(envelope).toEqual({
       version: 1,
       type: "configure",
@@ -440,9 +426,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
         variables: { accentColor: "#16a34a" },
       },
     });
-    client.internal_buildPaywallRuntimeConfig.mockResolvedValue(
-      runtimeConfig as never,
-    );
+    client.internal_buildPaywallRuntimeConfig.mockResolvedValue(runtimeConfig as never);
 
     // Simulates the native presenters in the preload-then-show flow: the
     // bundle's one-shot `ready` fired during preload, before show() attached
@@ -464,12 +448,8 @@ describe("usePaywallByLocation bridge coordinator", () => {
     expect(shown).toBe(true);
     expect(onBridgeEvent).not.toHaveBeenCalled();
     // The post-show configure is fire-and-forget; wait for it to land.
-    await vi.waitFor(() =>
-      expect(presenter.postMessage).toHaveBeenCalledTimes(1),
-    );
-    const envelope = JSON.parse(
-      presenter.postMessage.mock.calls[0][1] as string,
-    );
+    await vi.waitFor(() => expect(presenter.postMessage).toHaveBeenCalledTimes(1));
+    const envelope = JSON.parse(presenter.postMessage.mock.calls[0][1] as string);
     expect(envelope.type).toBe("configure");
     expect(envelope.payload).toEqual(runtimeConfig);
   });
@@ -579,9 +559,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
 
     expect(warnSpy).toHaveBeenCalled();
     expect(presenter.postMessage).toHaveBeenCalledTimes(1);
-    const envelope = JSON.parse(
-      presenter.postMessage.mock.calls[0][1] as string,
-    );
+    const envelope = JSON.parse(presenter.postMessage.mock.calls[0][1] as string);
     expect(envelope).toEqual({
       version: 1,
       type: "configure",
@@ -694,9 +672,7 @@ describe("usePaywallByLocation bridge coordinator", () => {
       }),
     });
 
-    const busyResponse = JSON.parse(
-      presenter.postMessage.mock.calls[0][1] as string,
-    );
+    const busyResponse = JSON.parse(presenter.postMessage.mock.calls[0][1] as string);
     expect(busyResponse.payload.error.code).toBe("ACTION_BUSY");
     expect(onError).toHaveBeenCalledWith(expect.any(Error), {
       action: "purchase",
diff --git a/libraries/react-native/vitest.setup.ts b/libraries/react-native/vitest.setup.ts
index d6fed5219..121ead8bf 100644
--- a/libraries/react-native/vitest.setup.ts
+++ b/libraries/react-native/vitest.setup.ts
@@ -4,15 +4,15 @@ import { expect } from "vitest";
 expect.addEqualityTesters([]);
 
 if (typeof globalThis.crypto !== "object") {
-	Object.defineProperty(globalThis, "crypto", {
-		value: {},
-		writable: true,
-	});
+  Object.defineProperty(globalThis, "crypto", {
+    value: {},
+    writable: true,
+  });
 }
 
 if (typeof globalThis.crypto.randomUUID !== "function") {
-	Object.defineProperty(globalThis.crypto, "randomUUID", {
-		value: randomUUID,
-		writable: true,
-	});
+  Object.defineProperty(globalThis.crypto, "randomUUID", {
+    value: randomUUID,
+    writable: true,
+  });
 }
diff --git a/libraries/react-native/vitest.unit.mts b/libraries/react-native/vitest.unit.mts
index fcd14fed8..9fe91c04b 100644
--- a/libraries/react-native/vitest.unit.mts
+++ b/libraries/react-native/vitest.unit.mts
@@ -4,13 +4,13 @@ import tsconfigPaths from "vite-tsconfig-paths";
 import { defineConfig } from "vitest/config";
 
 export default defineConfig({
-	plugins: [tsconfigPaths(), react(), reactNative()],
-	test: {
-		environment: "node",
-		exclude: ["./node_modules/**", "./build/**", "./lib/**"],
-		globals: false,
-		include: ["./tests/**/*.test.{ts,tsx}"],
-		reporters: ["verbose"],
-		setupFiles: ["./vitest.setup.ts"],
-	},
+  plugins: [tsconfigPaths(), react(), reactNative()],
+  test: {
+    environment: "node",
+    exclude: ["./node_modules/**", "./build/**", "./lib/**"],
+    globals: false,
+    include: ["./tests/**/*.test.{ts,tsx}"],
+    reporters: ["verbose"],
+    setupFiles: ["./vitest.setup.ts"],
+  },
 });
diff --git a/libraries/web/package.json b/libraries/web/package.json
index 789fcfbf5..ac73f9467 100644
--- a/libraries/web/package.json
+++ b/libraries/web/package.json
@@ -4,12 +4,12 @@
   "private": false,
   "description": "Browser-first Voidhash SDK.",
   "keywords": [
-    "voidhash",
-    "sdk",
-    "web",
     "browser",
+    "payments",
     "react",
-    "payments"
+    "sdk",
+    "voidhash",
+    "web"
   ],
   "homepage": "https://voidhash.com/docs",
   "bugs": {
@@ -22,18 +22,14 @@
     "url": "https://github.com/voidhashcom/voidhash",
     "directory": "libraries/web"
   },
-  "type": "module",
   "files": [
     "dist"
   ],
+  "type": "module",
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.ts",
-  "sideEffects": false,
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
-  },
   "exports": {
     ".": {
       "import": {
@@ -56,6 +52,10 @@
       }
     }
   },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "scripts": {
     "build": "rm -rf ./dist && tsx build.ts",
     "typecheck": "tsgo --noEmit",
@@ -79,9 +79,9 @@
     "vitest": "^3.2.4"
   },
   "peerDependencies": {
-    "react": "*",
     "@effect/platform": "catalog:",
-    "effect": "catalog:"
+    "effect": "catalog:",
+    "react": "*"
   },
   "peerDependenciesMeta": {
     "react": {
diff --git a/libraries/web/src/client-effect.ts b/libraries/web/src/client-effect.ts
index b9197c714..6d74c57cb 100644
--- a/libraries/web/src/client-effect.ts
+++ b/libraries/web/src/client-effect.ts
@@ -20,18 +20,14 @@ import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
 import { IdentityManager } from "./core/identity/identity-manager";
 import { ApiClient } from "./core/networking/api-client";
 import { EventCaptureApiClient } from "./core/networking/event-capture-api-client";
-import {
-  BrowserPlatformProviderLayer,
-} from "./core/platform/platform-provider";
+import { BrowserPlatformProviderLayer } from "./core/platform/platform-provider";
 import { SdkConfiguration } from "./core/sdk-configuration";
 
 const DEFAULT_BASE_URL = "https://api.voidhash.com";
 
 const assertPositiveInteger = (name: string, value: number) => {
   if (!Number.isInteger(value) || value < 1) {
-    throw new VoidhashConfigurationError(
-      `${name} must be a positive integer.`
-    );
+    throw new VoidhashConfigurationError(`${name} must be a positive integer.`);
   }
 };
 
@@ -48,14 +44,9 @@ const deriveAnalyticsBaseUrl = (baseUrl: string, override?: string) => {
   return url.toString();
 };
 
-export const resolveVoidhashConfig = (
-  options: VoidhashClientOptions
-): ResolvedVoidhashConfig => {
+export const resolveVoidhashConfig = (options: VoidhashClientOptions): ResolvedVoidhashConfig => {
   const baseUrl = new URL(options.baseUrl ?? DEFAULT_BASE_URL).toString();
-  const analyticsBaseUrl = deriveAnalyticsBaseUrl(
-    baseUrl,
-    options.analytics?.baseUrl
-  );
+  const analyticsBaseUrl = deriveAnalyticsBaseUrl(baseUrl, options.analytics?.baseUrl);
   const maxBatchSize = options.analytics?.maxBatchSize ?? 20;
   const maxBatchBytes = options.analytics?.maxBatchBytes ?? 262_144;
   const maxQueueSize = options.analytics?.maxQueueSize ?? 1_000;
@@ -95,10 +86,7 @@ export const resolveVoidhashConfig = (
   };
 };
 
-export const CreateEffectRuntime = (
-  config: ResolvedVoidhashConfig,
-  eventBus: EventBus
-) =>
+export const CreateEffectRuntime = (config: ResolvedVoidhashConfig, eventBus: EventBus) =>
   ManagedRuntime.make(
     Layer.fresh(
       pipe(
@@ -111,15 +99,15 @@ export const CreateEffectRuntime = (
         Layer.provideMerge(
           Layer.effect(
             FetchHttpClient.Fetch,
-            Effect.sync(() => globalThis.fetch)
-          ).pipe(Layer.provideMerge(FetchHttpClient.layer))
+            Effect.sync(() => globalThis.fetch),
+          ).pipe(Layer.provideMerge(FetchHttpClient.layer)),
         ),
         Layer.provideMerge(createBrowserCacheAdapterLayer()),
         Layer.provideMerge(BrowserPlatformProviderLayer),
         Layer.provideMerge(Layer.succeed(EventBusProvider, eventBus)),
-        Layer.provideMerge(Layer.succeed(SdkConfiguration, config))
-      )
-    )
+        Layer.provideMerge(Layer.succeed(SdkConfiguration, config)),
+      ),
+    ),
   );
 
 // Effects that run against the runtime
@@ -131,17 +119,12 @@ export const initializeEffect = (initialDistinctId?: string) =>
 
 // Drain the analytics queue so any pending events are attributed to the
 // current distinct id before it is switched out by identify/reset.
-const flushAnalyticsForIdentitySwitch = Effect.gen(
-  function* flushForIdentitySwitch() {
-    const analyticsService = yield* AnalyticsService;
-    yield* analyticsService.flush();
-  }
-);
+const flushAnalyticsForIdentitySwitch = Effect.gen(function* flushForIdentitySwitch() {
+  const analyticsService = yield* AnalyticsService;
+  yield* analyticsService.flush();
+});
 
-export const identifyEffect = (
-  distinctId: string,
-  traits?: VoidhashTraits
-) =>
+export const identifyEffect = (distinctId: string, traits?: VoidhashTraits) =>
   Effect.gen(function* identify() {
     const identityManager = yield* IdentityManager;
     const featureFlags = yield* FeatureFlagService;
@@ -180,9 +163,7 @@ const splitPersonAttributes = (attributes: VoidhashPersonAttributes) => {
  * Enqueues a `$set` analytics event that updates the current person profile.
  * Fire-and-forget: the event is queued and flushed by the normal pipeline.
  */
-export const setPersonAttributesEffect = (
-  attributes: VoidhashPersonAttributes
-) =>
+export const setPersonAttributesEffect = (attributes: VoidhashPersonAttributes) =>
   Effect.gen(function* setPersonAttributes() {
     const analyticsService = yield* AnalyticsService;
     const { email, name, traits } = splitPersonAttributes(attributes);
@@ -202,7 +183,7 @@ export const setPersonAttributesEffect = (
  * resulting person snapshot.
  */
 export const setPersonAttributesSyncEffect = (
-  attributes: VoidhashPersonAttributes
+  attributes: VoidhashPersonAttributes,
 ): Effect.Effect<SdkPerson, unknown, IdentityManager> =>
   Effect.gen(function* setPersonAttributesSync() {
     const identityManager = yield* IdentityManager;
@@ -217,15 +198,11 @@ export const setPersonAttributesSyncEffect = (
 export const trackEffect = (
   eventName: string,
   properties?: Record<string, unknown>,
-  options?: VoidhashTrackOptions
+  options?: VoidhashTrackOptions,
 ) =>
   Effect.gen(function* track() {
     const analyticsService = yield* AnalyticsService;
-    const queueLength = yield* analyticsService.enqueue(
-      eventName,
-      properties,
-      options
-    );
+    const queueLength = yield* analyticsService.enqueue(eventName, properties, options);
     if (queueLength !== undefined && queueLength >= 20) {
       yield* analyticsService.flush();
     }
diff --git a/libraries/web/src/client.ts b/libraries/web/src/client.ts
index 32a620c21..902385dc0 100644
--- a/libraries/web/src/client.ts
+++ b/libraries/web/src/client.ts
@@ -35,8 +35,7 @@ import type {
 type ClientState = "destroyed" | "idle" | "initializing" | "ready";
 
 const toError = (errorCode: string, cause: unknown) => {
-  const error =
-    cause instanceof Error ? cause : new Error(String(cause));
+  const error = cause instanceof Error ? cause : new Error(String(cause));
   return new VoidhashError(`${errorCode}: ${error.message}`, {
     cause: error,
   });
@@ -61,7 +60,10 @@ export class VoidhashWebClient {
   }
 
   // biome-ignore lint/suspicious/noExplicitAny: Effect requires service type parameter
-  private async runEffect<T>(effect: Effect.Effect<T, unknown, any>, errorCode: string): Promise<T> {
+  private async runEffect<T>(
+    effect: Effect.Effect<T, unknown, any>,
+    errorCode: string,
+  ): Promise<T> {
     const result = await this.runtime.runPromiseExit(effect);
     if (Exit.isSuccess(result)) return result.value;
     throw toError(errorCode, Cause.squash(result.cause));
@@ -86,17 +88,21 @@ export class VoidhashWebClient {
     this.initializePromise = (async () => {
       const distinctId = await this.runEffect(
         initializeEffect(config.distinctId),
-        "FAILED_TO_INITIALIZE"
+        "FAILED_TO_INITIALIZE",
       );
 
       // Grab service references for sync access
       this.featureFlagService = await this.runEffect(
-        Effect.gen(function* () { return yield* FeatureFlagService; }),
-        "FAILED_TO_INITIALIZE"
+        Effect.gen(function* () {
+          return yield* FeatureFlagService;
+        }),
+        "FAILED_TO_INITIALIZE",
       );
       this.identityManagerService = await this.runEffect(
-        Effect.gen(function* () { return yield* IdentityManager; }),
-        "FAILED_TO_INITIALIZE"
+        Effect.gen(function* () {
+          return yield* IdentityManager;
+        }),
+        "FAILED_TO_INITIALIZE",
       );
 
       if (config.analytics.enabled) {
@@ -117,10 +123,7 @@ export class VoidhashWebClient {
       this.attachBrowserListeners(config);
 
       if (config.featureFlags.prefetchOnInit) {
-        await this.runEffect(
-          getFeatureFlagsEffect(),
-          "FAILED_TO_PREFETCH_FLAGS"
-        );
+        await this.runEffect(getFeatureFlagsEffect(), "FAILED_TO_PREFETCH_FLAGS");
       }
 
       this.eventBus.emit("initialized", { distinctId });
@@ -178,26 +181,17 @@ export class VoidhashWebClient {
 
   async getFeatureFlags(keys?: string[]) {
     this.ensureReady();
-    return this.runEffect(
-      getFeatureFlagsEffect(keys),
-      "FAILED_TO_GET_FEATURE_FLAGS"
-    );
+    return this.runEffect(getFeatureFlagsEffect(keys), "FAILED_TO_GET_FEATURE_FLAGS");
   }
 
   async refreshFeatureFlags(keys?: string[]) {
     this.ensureReady();
-    return this.runEffect(
-      refreshFeatureFlagsEffect(keys),
-      "FAILED_TO_REFRESH_FEATURE_FLAGS"
-    );
+    return this.runEffect(refreshFeatureFlagsEffect(keys), "FAILED_TO_REFRESH_FEATURE_FLAGS");
   }
 
   async identify(externalUserId: string, traits?: VoidhashTraits) {
     this.ensureReady();
-    await this.runEffect(
-      identifyEffect(externalUserId, traits),
-      "FAILED_TO_IDENTIFY"
-    );
+    await this.runEffect(identifyEffect(externalUserId, traits), "FAILED_TO_IDENTIFY");
   }
 
   async reset() {
@@ -213,10 +207,7 @@ export class VoidhashWebClient {
    */
   async setPersonAttributes(attributes: VoidhashPersonAttributes) {
     this.ensureReady();
-    await this.runEffect(
-      setPersonAttributesEffect(attributes),
-      "FAILED_TO_SET_PERSON_ATTRIBUTES"
-    );
+    await this.runEffect(setPersonAttributesEffect(attributes), "FAILED_TO_SET_PERSON_ATTRIBUTES");
   }
 
   /**
@@ -227,31 +218,26 @@ export class VoidhashWebClient {
     this.ensureReady();
     return this.runEffect(
       setPersonAttributesSyncEffect(attributes),
-      "FAILED_TO_SET_PERSON_ATTRIBUTES_SYNC"
+      "FAILED_TO_SET_PERSON_ATTRIBUTES_SYNC",
     );
   }
 
   async track(
     eventName: string,
     properties?: Record<string, unknown>,
-    options?: VoidhashTrackOptions
+    options?: VoidhashTrackOptions,
   ) {
     this.ensureReady();
-    await this.runEffect(
-      trackEffect(eventName, properties, options),
-      "FAILED_TO_TRACK"
-    );
+    await this.runEffect(trackEffect(eventName, properties, options), "FAILED_TO_TRACK");
   }
 
   async page(
     pageName?: string,
     properties?: Record<string, unknown>,
-    options?: VoidhashTrackOptions
+    options?: VoidhashTrackOptions,
   ) {
     this.ensureReady();
-    const pageProperties = pageName
-      ? { ...properties, page_name: pageName }
-      : properties;
+    const pageProperties = pageName ? { ...properties, page_name: pageName } : properties;
     await this.track("page", pageProperties, options);
   }
 
@@ -262,14 +248,14 @@ export class VoidhashWebClient {
 
   on<TEvent extends VoidhashEventName>(
     eventName: TEvent,
-    handler: (payload: VoidhashEventMap[TEvent]) => void
+    handler: (payload: VoidhashEventMap[TEvent]) => void,
   ) {
     return this.eventBus.on(eventName, handler);
   }
 
   off<TEvent extends VoidhashEventName>(
     eventName: TEvent,
-    handler: (payload: VoidhashEventMap[TEvent]) => void
+    handler: (payload: VoidhashEventMap[TEvent]) => void,
   ) {
     this.eventBus.off(eventName, handler);
   }
@@ -279,7 +265,7 @@ export class VoidhashWebClient {
 
     this.inFlightFlush = this.runEffect(
       flushAnalyticsEffect(),
-      "FAILED_TO_FLUSH_ANALYTICS"
+      "FAILED_TO_FLUSH_ANALYTICS",
     ).finally(() => {
       this.inFlightFlush = null;
     });
@@ -304,19 +290,15 @@ export class VoidhashWebClient {
 
     const onlineHandler = () => {
       if (config.featureFlags.refreshOnOnline) {
-        void this.runEffect(
-          refreshTrackedKeySetsEffect(),
-          "FAILED_TO_REFRESH_FLAGS"
-        ).catch(() => {});
+        void this.runEffect(refreshTrackedKeySetsEffect(), "FAILED_TO_REFRESH_FLAGS").catch(
+          () => {},
+        );
       }
     };
 
     const pageHideHandler = () => {
       if (config.analytics.enabled) {
-        void this.runEffect(
-          flushAnalyticsKeepaliveEffect(),
-          "FAILED_TO_FLUSH"
-        ).catch(() => {});
+        void this.runEffect(flushAnalyticsKeepaliveEffect(), "FAILED_TO_FLUSH").catch(() => {});
       }
     };
 
@@ -326,26 +308,21 @@ export class VoidhashWebClient {
         typeof document !== "undefined" &&
         document.visibilityState === "visible"
       ) {
-        void this.runEffect(
-          refreshTrackedKeySetsEffect(),
-          "FAILED_TO_REFRESH_FLAGS"
-        ).catch(() => {});
+        void this.runEffect(refreshTrackedKeySetsEffect(), "FAILED_TO_REFRESH_FLAGS").catch(
+          () => {},
+        );
       }
     };
 
     window.addEventListener("online", onlineHandler);
     window.addEventListener("pagehide", pageHideHandler);
-    this.listeners.push(() =>
-      window.removeEventListener("online", onlineHandler)
-    );
-    this.listeners.push(() =>
-      window.removeEventListener("pagehide", pageHideHandler)
-    );
+    this.listeners.push(() => window.removeEventListener("online", onlineHandler));
+    this.listeners.push(() => window.removeEventListener("pagehide", pageHideHandler));
 
     if (typeof document !== "undefined") {
       document.addEventListener("visibilitychange", visibilityHandler);
       this.listeners.push(() =>
-        document.removeEventListener("visibilitychange", visibilityHandler)
+        document.removeEventListener("visibilitychange", visibilityHandler),
       );
     }
   }
diff --git a/libraries/web/src/core/analytics/analytics-context.ts b/libraries/web/src/core/analytics/analytics-context.ts
index 1ddebdb6f..a4990d2ae 100644
--- a/libraries/web/src/core/analytics/analytics-context.ts
+++ b/libraries/web/src/core/analytics/analytics-context.ts
@@ -8,7 +8,7 @@ import { BrowserPlatformProvider } from "../platform/browser-platform-provider";
 import type { AnalyticsRequestEvent } from "./contracts";
 
 const normalizeAnalyticsValue = (
-  value: unknown
+  value: unknown,
 ): EventContextField | EventPropertiesField | undefined => {
   if (
     value === null ||
@@ -34,7 +34,7 @@ const normalizeAnalyticsValue = (
       Object.entries(value).flatMap(([key, entry]) => {
         const normalized = normalizeAnalyticsValue(entry);
         return typeof normalized === "undefined" ? [] : [[key, normalized]];
-      })
+      }),
     );
   }
 
@@ -42,13 +42,13 @@ const normalizeAnalyticsValue = (
 };
 
 const normalizeAnalyticsRecord = (
-  entries: Record<string, unknown>
+  entries: Record<string, unknown>,
 ): Record<string, EventContextField | EventPropertiesField> =>
   Object.fromEntries(
     Object.entries(entries).flatMap(([key, value]) => {
       const normalized = normalizeAnalyticsValue(value);
       return typeof normalized === "undefined" ? [] : [[key, normalized]];
-    })
+    }),
   );
 
 const createEventId = (platform: BrowserPlatformProvider) =>
@@ -59,7 +59,7 @@ export const createAnalyticsEvent = (
   distinctId: string,
   eventName: string,
   properties?: Record<string, unknown>,
-  options?: VoidhashTrackOptions
+  options?: VoidhashTrackOptions,
 ): AnalyticsRequestEvent => ({
   context: normalizeAnalyticsRecord(platform.buildAnalyticsContext()),
   distinct_id: distinctId,
diff --git a/libraries/web/src/core/analytics/analytics-service.ts b/libraries/web/src/core/analytics/analytics-service.ts
index 22ca16d23..0b108c18b 100644
--- a/libraries/web/src/core/analytics/analytics-service.ts
+++ b/libraries/web/src/core/analytics/analytics-service.ts
@@ -8,20 +8,12 @@ import { IdentityManager } from "../identity/identity-manager";
 import { PlatformProvider } from "../platform/platform-provider";
 import { SdkConfiguration } from "../sdk-configuration";
 import { createAnalyticsEvent } from "./analytics-context";
-import type {
-  AnalyticsRequestEvent,
-  QueuedAnalyticsEvent,
-} from "./contracts";
+import type { AnalyticsRequestEvent, QueuedAnalyticsEvent } from "./contracts";
 
 const QUEUE_KEY = "analytics:queue";
 const MAX_INGEST_BATCH_SIZE = 100;
-const RETRYABLE_ERROR_CODES = new Set([
-  "rate_limited",
-  "dependency_unavailable",
-  "internal_error",
-]);
-const getBackoffMs = (attempts: number) =>
-  Math.min(1000 * 2 ** Math.max(attempts - 1, 0), 30_000);
+const RETRYABLE_ERROR_CODES = new Set(["rate_limited", "dependency_unavailable", "internal_error"]);
+const getBackoffMs = (attempts: number) => Math.min(1000 * 2 ** Math.max(attempts - 1, 0), 30_000);
 
 const estimateEventBytes = (event: QueuedAnalyticsEvent) =>
   new TextEncoder().encode(JSON.stringify(event.payload)).byteLength;
@@ -38,8 +30,7 @@ const extractCaptureError = (input: {
     if (typeof err.code === "string") {
       return {
         code: err.code,
-        retry_after_ms:
-          typeof err.retry_after_ms === "number" ? err.retry_after_ms : undefined,
+        retry_after_ms: typeof err.retry_after_ms === "number" ? err.retry_after_ms : undefined,
       };
     }
   }
@@ -78,8 +69,7 @@ const make = Effect.gen(function* effect() {
   const loadQueue = () =>
     Effect.gen(function* loadQueue() {
       if (isLoaded) return;
-      const cached =
-        yield* cacheManager.get<QueuedAnalyticsEvent[]>(QUEUE_KEY);
+      const cached = yield* cacheManager.get<QueuedAnalyticsEvent[]>(QUEUE_KEY);
       events = cached?.value ?? [];
       isLoaded = true;
     });
@@ -91,21 +81,15 @@ const make = Effect.gen(function* effect() {
     events = events.filter((event) => !ids.has(event.id));
   };
 
-  const postponeEvents = (
-    ids: ReadonlySet<string>,
-    nextAvailableAt: number
-  ) => {
+  const postponeEvents = (ids: ReadonlySet<string>, nextAvailableAt: number) => {
     events = events.map((event) =>
       ids.has(event.id)
         ? { ...event, attempts: event.attempts + 1, availableAt: nextAvailableAt }
-        : event
+        : event,
     );
   };
 
-  const peekBatch = (input: {
-    maxBatchBytes: number;
-    maxBatchSize: number;
-  }) => {
+  const peekBatch = (input: { maxBatchBytes: number; maxBatchSize: number }) => {
     const now = Date.now();
     const dueEvents = events.filter((event) => event.availableAt <= now);
     if (dueEvents.length === 0) return [];
@@ -126,9 +110,7 @@ const make = Effect.gen(function* effect() {
     return selected;
   };
 
-  const sendBatchViaClient = (
-    batchEvents: ReadonlyArray<AnalyticsRequestEvent>
-  ) =>
+  const sendBatchViaClient = (batchEvents: ReadonlyArray<AnalyticsRequestEvent>) =>
     Effect.tryPromise({
       try: async () => {
         const response = await fetch(new URL("/batch", config.analytics.baseUrl), {
@@ -157,9 +139,7 @@ const make = Effect.gen(function* effect() {
     });
 
   // Raw fetch fallback — only used for keepalive on pagehide
-  const sendBatchKeepalive = (
-    batchEvents: ReadonlyArray<AnalyticsRequestEvent>
-  ) =>
+  const sendBatchKeepalive = (batchEvents: ReadonlyArray<AnalyticsRequestEvent>) =>
     Effect.tryPromise({
       try: () =>
         fetch(new URL("/batch", config.analytics.baseUrl), {
@@ -178,7 +158,7 @@ const make = Effect.gen(function* effect() {
   // Core flush logic
   const sendBatch = (
     batch: ReadonlyArray<QueuedAnalyticsEvent>,
-    options?: { keepalive?: boolean }
+    options?: { keepalive?: boolean },
   ): Effect.Effect<AnalyticsFlushResult | null> =>
     Effect.gen(function* sendBatchEffect() {
       if (batch.length === 0) return null;
@@ -191,9 +171,7 @@ const make = Effect.gen(function* effect() {
 
       // keepalive sends use raw fetch (best-effort, fire-and-forget)
       if (options?.keepalive) {
-        const result = yield* Effect.exit(
-          sendBatchKeepalive(batchPayloads)
-        );
+        const result = yield* Effect.exit(sendBatchKeepalive(batchPayloads));
         if (result._tag === "Success") {
           dropEvents(ids);
           yield* persistQueue();
@@ -201,9 +179,7 @@ const make = Effect.gen(function* effect() {
         return null;
       }
 
-      const result = yield* Effect.exit(
-        sendBatchViaClient(batchPayloads)
-      );
+      const result = yield* Effect.exit(sendBatchViaClient(batchPayloads));
 
       if (result._tag === "Success") {
         if (result.value.status === 202) {
@@ -213,10 +189,7 @@ const make = Effect.gen(function* effect() {
             typeof (result.value.data as CaptureAcceptedResponse).accepted !== "number" ||
             typeof (result.value.data as CaptureAcceptedResponse).rejected !== "number"
           ) {
-            postponeEvents(
-              ids,
-              Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
-            );
+            postponeEvents(ids, Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1));
             yield* persistQueue();
             return null;
           }
@@ -244,8 +217,7 @@ const make = Effect.gen(function* effect() {
         if (error && RETRYABLE_ERROR_CODES.has(error.code)) {
           postponeEvents(
             ids,
-            Date.now() +
-              (error.retry_after_ms ?? getBackoffMs((batch[0]?.attempts ?? 0) + 1))
+            Date.now() + (error.retry_after_ms ?? getBackoffMs((batch[0]?.attempts ?? 0) + 1)),
           );
           yield* persistQueue();
           return null;
@@ -262,17 +234,14 @@ const make = Effect.gen(function* effect() {
         }
       }
 
-      postponeEvents(
-        ids,
-        Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1)
-      );
+      postponeEvents(ids, Date.now() + getBackoffMs((batch[0]?.attempts ?? 0) + 1));
       yield* persistQueue();
       return null;
     });
 
   const handlePayloadTooLarge = (
     batch: ReadonlyArray<QueuedAnalyticsEvent>,
-    options?: { keepalive?: boolean }
+    options?: { keepalive?: boolean },
   ): Effect.Effect<AnalyticsFlushResult | null> =>
     Effect.gen(function* handlePayloadTooLargeEffect() {
       if (batch.length === 1) {
@@ -306,7 +275,7 @@ const make = Effect.gen(function* effect() {
       eventId?: string;
       sessionId?: string;
       timestamp?: string;
-    }
+    },
   ) =>
     Effect.gen(function* enqueue() {
       yield* loadQueue();
@@ -314,13 +283,7 @@ const make = Effect.gen(function* effect() {
       const distinctId = identityManager.getDistinctId();
       if (!distinctId) return;
 
-      const event = createAnalyticsEvent(
-        platform,
-        distinctId,
-        eventName,
-        properties,
-        options
-      );
+      const event = createAnalyticsEvent(platform, distinctId, eventName, properties, options);
 
       events.push({
         attempts: 0,
@@ -329,10 +292,7 @@ const make = Effect.gen(function* effect() {
         payload: event,
       });
 
-      const droppedCount = Math.max(
-        events.length - config.analytics.maxQueueSize,
-        0
-      );
+      const droppedCount = Math.max(events.length - config.analytics.maxQueueSize, 0);
       if (droppedCount > 0) {
         events.splice(0, droppedCount);
         eventBus.emit("error", {
@@ -345,17 +305,12 @@ const make = Effect.gen(function* effect() {
       return events.length;
     });
 
-  const flush = (options?: {
-    keepalive?: boolean;
-  }): Effect.Effect<AnalyticsFlushResult | null> =>
+  const flush = (options?: { keepalive?: boolean }): Effect.Effect<AnalyticsFlushResult | null> =>
     Effect.gen(function* flushEffect() {
       yield* loadQueue();
       const batch = peekBatch({
         maxBatchBytes: config.analytics.maxBatchBytes,
-        maxBatchSize: Math.min(
-          config.analytics.maxBatchSize,
-          MAX_INGEST_BATCH_SIZE
-        ),
+        maxBatchSize: Math.min(config.analytics.maxBatchSize, MAX_INGEST_BATCH_SIZE),
       });
       if (batch.length === 0) return null;
       return yield* sendBatch(batch, options);
diff --git a/libraries/web/src/core/analytics/contracts.ts b/libraries/web/src/core/analytics/contracts.ts
index 10d20adca..de75188c6 100644
--- a/libraries/web/src/core/analytics/contracts.ts
+++ b/libraries/web/src/core/analytics/contracts.ts
@@ -1,7 +1,4 @@
-import type {
-  CaptureBatchRequest,
-  CaptureEvent,
-} from "@voidhash/generated-clients/event-capture";
+import type { CaptureBatchRequest, CaptureEvent } from "@voidhash/generated-clients/event-capture";
 
 import type { AnalyticsFlushResult } from "../../types";
 
diff --git a/libraries/web/src/core/caching/adapters/browser-cache-adapter.ts b/libraries/web/src/core/caching/adapters/browser-cache-adapter.ts
index d71544f2f..fc0c5a686 100644
--- a/libraries/web/src/core/caching/adapters/browser-cache-adapter.ts
+++ b/libraries/web/src/core/caching/adapters/browser-cache-adapter.ts
@@ -100,5 +100,5 @@ const detectLocalStorage = (): Storage | null => {
 export const createBrowserCacheAdapterLayer = () =>
   Layer.effect(
     CacheAdapter,
-    Effect.sync(() => makeBrowserCacheAdapter())
+    Effect.sync(() => makeBrowserCacheAdapter()),
   );
diff --git a/libraries/web/src/core/caching/cache-manager.ts b/libraries/web/src/core/caching/cache-manager.ts
index dc241e444..79c0d5ebc 100644
--- a/libraries/web/src/core/caching/cache-manager.ts
+++ b/libraries/web/src/core/caching/cache-manager.ts
@@ -66,13 +66,9 @@ const make = Effect.gen(function* effect() {
 
       const cachedValue = JSON.parse(rawValue) as CacheEnvelope<T>;
       const isExpired =
-        typeof cachedValue.expiresAt === "number"
-          ? cachedValue.expiresAt < Date.now()
-          : false;
+        typeof cachedValue.expiresAt === "number" ? cachedValue.expiresAt < Date.now() : false;
       const isStale =
-        typeof cachedValue.staleAt === "number"
-          ? cachedValue.staleAt < Date.now()
-          : false;
+        typeof cachedValue.staleAt === "number" ? cachedValue.staleAt < Date.now() : false;
 
       if (isExpired) {
         yield* deleteValue(key);
@@ -88,11 +84,7 @@ const make = Effect.gen(function* effect() {
       } as CacheHit<T>;
     });
 
-  const setValue = <T>(
-    key: string,
-    value: T,
-    options?: { staleTime?: number; ttl?: number }
-  ) =>
+  const setValue = <T>(key: string, value: T, options?: { staleTime?: number; ttl?: number }) =>
     Effect.gen(function* setValue() {
       const storageKey = buildStorageKey(key);
       const envelope: CacheEnvelope<T> = {
@@ -147,9 +139,8 @@ const make = Effect.gen(function* effect() {
   } as const;
 });
 
-export class CacheManager extends Context.Service<
-  CacheManager,
-  Effect.Success<typeof make>
->()("web-voidhash/CacheManager") {
+export class CacheManager extends Context.Service<CacheManager, Effect.Success<typeof make>>()(
+  "web-voidhash/CacheManager",
+) {
   static Default = Layer.effect(CacheManager, make);
 }
diff --git a/libraries/web/src/core/event-bus.ts b/libraries/web/src/core/event-bus.ts
index c82510c8d..d7cc268d9 100644
--- a/libraries/web/src/core/event-bus.ts
+++ b/libraries/web/src/core/event-bus.ts
@@ -4,9 +4,7 @@ import type { VoidhashEventMap, VoidhashEventName } from "../types";
 
 export class EventBus {
   private listeners: {
-    [TEvent in VoidhashEventName]: Set<
-      (payload: VoidhashEventMap[TEvent]) => void
-    >;
+    [TEvent in VoidhashEventName]: Set<(payload: VoidhashEventMap[TEvent]) => void>;
   } = {
     "analytics-flush-needed": new Set(),
     "analytics-flushed": new Set(),
@@ -17,10 +15,7 @@ export class EventBus {
     initialized: new Set(),
   };
 
-  emit<TEvent extends VoidhashEventName>(
-    event: TEvent,
-    payload: VoidhashEventMap[TEvent]
-  ) {
+  emit<TEvent extends VoidhashEventName>(event: TEvent, payload: VoidhashEventMap[TEvent]) {
     for (const listener of this.listeners[event] ?? []) {
       listener(payload);
     }
@@ -28,14 +23,14 @@ export class EventBus {
 
   off<TEvent extends VoidhashEventName>(
     event: TEvent,
-    listener: (payload: VoidhashEventMap[TEvent]) => void
+    listener: (payload: VoidhashEventMap[TEvent]) => void,
   ) {
     this.listeners[event]?.delete(listener);
   }
 
   on<TEvent extends VoidhashEventName>(
     event: TEvent,
-    listener: (payload: VoidhashEventMap[TEvent]) => void
+    listener: (payload: VoidhashEventMap[TEvent]) => void,
   ) {
     this.listeners[event]?.add(listener);
 
@@ -45,7 +40,6 @@ export class EventBus {
   }
 }
 
-export class EventBusProvider extends Context.Service<
-  EventBusProvider,
-  EventBus
->()("web-voidhash/EventBusProvider") {}
+export class EventBusProvider extends Context.Service<EventBusProvider, EventBus>()(
+  "web-voidhash/EventBusProvider",
+) {}
diff --git a/libraries/web/src/core/feature-flags/feature-flag-service.ts b/libraries/web/src/core/feature-flags/feature-flag-service.ts
index 9705dec85..3c73f243f 100644
--- a/libraries/web/src/core/feature-flags/feature-flag-service.ts
+++ b/libraries/web/src/core/feature-flags/feature-flag-service.ts
@@ -1,9 +1,6 @@
 import { Effect, Layer, Context } from "effect";
 
-import type {
-  FeatureFlagEntry,
-  FeatureFlagsResult,
-} from "../../types";
+import type { FeatureFlagEntry, FeatureFlagsResult } from "../../types";
 import { CacheManager } from "../caching/cache-manager";
 import { EventBusProvider } from "../event-bus";
 import { IdentityManager } from "../identity/identity-manager";
@@ -45,15 +42,13 @@ const make = Effect.gen(function* effect() {
   };
 
   // Sync accessors (plain functions, not Effects)
-  const isEnabled = (key: string) =>
-    latestFlags.get(key)?.enabled ?? false;
+  const isEnabled = (key: string) => latestFlags.get(key)?.enabled ?? false;
 
-  const getVariant = (key: string) =>
-    latestFlags.get(key) ?? null;
+  const getVariant = (key: string) => latestFlags.get(key) ?? null;
 
   const getOrRefreshFeatureFlags = (
     keys: ReadonlyArray<string> | undefined,
-    forceRefresh: boolean
+    forceRefresh: boolean,
   ) =>
     Effect.gen(function* getOrRefreshFeatureFlags() {
       const distinctId = identityManager.getDistinctId();
@@ -66,17 +61,14 @@ const make = Effect.gen(function* effect() {
       trackedKeySets.add(serializedKeys);
 
       if (!forceRefresh) {
-        const cached =
-          yield* cacheManager.get<FeatureFlagsResult>(cacheKey);
+        const cached = yield* cacheManager.get<FeatureFlagsResult>(cacheKey);
         if (cached && !cached.isExpired && !cached.isStale) {
           rememberFlags(cached.value.flags);
           return cached.value;
         }
       }
 
-      const payload = keys
-        ? { flagKeys: [...keys] as string[] }
-        : {};
+      const payload = keys ? { flagKeys: [...keys] as string[] } : {};
       const result = yield* apiClient.sdk.evaluateFeatureFlags({
         headers: buildHeaders(distinctId),
         payload,
@@ -90,8 +82,7 @@ const make = Effect.gen(function* effect() {
       return result;
     });
 
-  const getFeatureFlags = (keys?: ReadonlyArray<string>) =>
-    getOrRefreshFeatureFlags(keys, false);
+  const getFeatureFlags = (keys?: ReadonlyArray<string>) => getOrRefreshFeatureFlags(keys, false);
 
   const refreshFeatureFlags = (keys?: ReadonlyArray<string>) =>
     getOrRefreshFeatureFlags(keys, true);
@@ -102,11 +93,9 @@ const make = Effect.gen(function* effect() {
 
       yield* Effect.all(
         [...trackedKeySets].map((serializedKeys) =>
-          refreshFeatureFlags(
-            serializedKeys === "all" ? undefined : serializedKeys.split(",")
-          )
+          refreshFeatureFlags(serializedKeys === "all" ? undefined : serializedKeys.split(",")),
         ),
-        { concurrency: "unbounded" }
+        { concurrency: "unbounded" },
       );
     });
 
diff --git a/libraries/web/src/core/identity/identity-manager.ts b/libraries/web/src/core/identity/identity-manager.ts
index ce8d13d89..8cfdc0be6 100644
--- a/libraries/web/src/core/identity/identity-manager.ts
+++ b/libraries/web/src/core/identity/identity-manager.ts
@@ -53,11 +53,7 @@ const make = Effect.gen(function* effect() {
 
       yield* cacheManager.set(DISTINCT_ID_KEY, currentDistinctId);
 
-      if (
-        initialDistinctId &&
-        cached?.value &&
-        cached.value !== initialDistinctId
-      ) {
+      if (initialDistinctId && cached?.value && cached.value !== initialDistinctId) {
         yield* identify(initialDistinctId);
         return currentDistinctId;
       }
@@ -76,9 +72,7 @@ const make = Effect.gen(function* effect() {
       const normalizedTraits = normalizeTraits(traits);
       yield* apiClient.sdk.identify({
         headers: buildHeaders(previousDistinctId),
-        payload: normalizedTraits
-          ? { distinctId, traits: normalizedTraits }
-          : { distinctId },
+        payload: normalizedTraits ? { distinctId, traits: normalizedTraits } : { distinctId },
       });
 
       yield* cacheManager.set(DISTINCT_ID_KEY, distinctId);
diff --git a/libraries/web/src/core/networking/api-client.ts b/libraries/web/src/core/networking/api-client.ts
index 40808735f..b7ba9e68e 100644
--- a/libraries/web/src/core/networking/api-client.ts
+++ b/libraries/web/src/core/networking/api-client.ts
@@ -48,7 +48,7 @@ interface WebSdkHeaders {
 }
 
 const normalizeFeatureFlagsResponse = (
-  response: SdkFeatureFlagsResponse
+  response: SdkFeatureFlagsResponse,
 ): WebFeatureFlagsResponse => ({
   flags: response.flags.map((flag) => ({
     enabled: flag.enabled,
@@ -69,22 +69,16 @@ const bindWebSdkClient = (client: VoidhashCoreClient) => ({
           params: request.headers as SdkEvaluateFeatureFlagsParams,
           payload: request.payload,
         }),
-        normalizeFeatureFlagsResponse
+        normalizeFeatureFlagsResponse,
       ),
     getPerson: (request: { headers: WebSdkHeaders }) =>
       client.sdkGetPerson(request.headers as SdkGetPersonParams),
-    identify: (request: {
-      headers: WebSdkHeaders;
-      payload: SdkIdentifyBody;
-    }) =>
+    identify: (request: { headers: WebSdkHeaders; payload: SdkIdentifyBody }) =>
       client.sdkIdentifyPerson({
         params: request.headers as SdkIdentifyPersonParams,
         payload: request.payload,
       }),
-    resolvePaywall: (request: {
-      headers: WebSdkHeaders;
-      payload: SdkResolvePaywallBody;
-    }) =>
+    resolvePaywall: (request: { headers: WebSdkHeaders; payload: SdkResolvePaywallBody }) =>
       client.sdkResolvePaywall({
         params: request.headers as Parameters<typeof client.sdkResolvePaywall>[0]["params"],
         payload: request.payload,
@@ -109,17 +103,16 @@ const make = Effect.gen(function* effect() {
         Effect.succeed(
           client.pipe(
             HttpClient.mapRequest((request) =>
-              HttpClientRequest.prependUrl(request, config.baseUrl)
-            )
-          )
+              HttpClientRequest.prependUrl(request, config.baseUrl),
+            ),
+          ),
         ),
-    })
+    }),
   );
 });
 
-export class ApiClient extends Context.Service<
-  ApiClient,
-  Effect.Success<typeof make>
->()("web-voidhash/ApiClient") {
+export class ApiClient extends Context.Service<ApiClient, Effect.Success<typeof make>>()(
+  "web-voidhash/ApiClient",
+) {
   static Default = Layer.effect(ApiClient, make);
 }
diff --git a/libraries/web/src/core/networking/event-capture-api-client.ts b/libraries/web/src/core/networking/event-capture-api-client.ts
index 0791b31e2..3609d7a0f 100644
--- a/libraries/web/src/core/networking/event-capture-api-client.ts
+++ b/libraries/web/src/core/networking/event-capture-api-client.ts
@@ -15,9 +15,9 @@ const make = Effect.gen(function* effect() {
       Effect.succeed(
         client.pipe(
           HttpClient.mapRequest((request) =>
-            HttpClientRequest.prependUrl(request, config.analytics.baseUrl)
-          )
-        )
+            HttpClientRequest.prependUrl(request, config.analytics.baseUrl),
+          ),
+        ),
       ),
   });
 });
diff --git a/libraries/web/src/core/networking/json-compatible-api.ts b/libraries/web/src/core/networking/json-compatible-api.ts
index 837e9e28b..cfb759583 100644
--- a/libraries/web/src/core/networking/json-compatible-api.ts
+++ b/libraries/web/src/core/networking/json-compatible-api.ts
@@ -1,14 +1,11 @@
 import { Schema } from "effect";
 import type { HttpApi, HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
 
-const cloneWithPrototype = <T extends object>(
-  value: T,
-  properties: Record<string, unknown>
-): T =>
+const cloneWithPrototype = <T extends object>(value: T, properties: Record<string, unknown>): T =>
   Object.assign(Object.create(Object.getPrototypeOf(value)), value, properties) as T;
 
 const mapPayloadSchemas = (
-  payload: HttpApiEndpoint.AnyWithProps["payload"]
+  payload: HttpApiEndpoint.AnyWithProps["payload"],
 ): HttpApiEndpoint.AnyWithProps["payload"] =>
   new Map(
     Array.from(payload.entries(), ([contentType, value]) => [
@@ -17,22 +14,22 @@ const mapPayloadSchemas = (
         ...value,
         schemas: value.schemas.map((schema) => Schema.toCodecJson(schema)) as typeof value.schemas,
       },
-    ])
+    ]),
   );
 
 const mapEndpoint = <TEndpoint extends HttpApiEndpoint.AnyWithProps>(
-  endpoint: TEndpoint
+  endpoint: TEndpoint,
 ): TEndpoint =>
   cloneWithPrototype(endpoint, {
     error: new Set(
-      Array.from(endpoint.error, (schema) => Schema.toCodecJson(schema))
+      Array.from(endpoint.error, (schema) => Schema.toCodecJson(schema)),
     ) as TEndpoint["error"],
     headers: endpoint.headers ? Schema.toCodecJson(endpoint.headers) : undefined,
     params: endpoint.params ? Schema.toCodecJson(endpoint.params) : undefined,
     payload: mapPayloadSchemas(endpoint.payload) as TEndpoint["payload"],
     query: endpoint.query ? Schema.toCodecJson(endpoint.query) : undefined,
     success: new Set(
-      Array.from(endpoint.success, (schema) => Schema.toCodecJson(schema))
+      Array.from(endpoint.success, (schema) => Schema.toCodecJson(schema)),
     ) as TEndpoint["success"],
   });
 
@@ -42,16 +39,15 @@ const mapGroup = <TGroup extends HttpApiGroup.AnyWithProps>(group: TGroup): TGro
       Object.entries(group.endpoints).map(([endpointName, endpoint]) => [
         endpointName,
         mapEndpoint(endpoint as HttpApiEndpoint.AnyWithProps),
-      ])
+      ]),
     ) as TGroup["endpoints"],
   });
 
 export const toJsonCompatibleApi = <TApi extends HttpApi.Any>(api: TApi): TApi =>
   cloneWithPrototype(api, {
     groups: Object.fromEntries(
-      Object.entries((api as TApi & { groups: Record<string, HttpApiGroup.AnyWithProps> }).groups).map(([groupName, group]) => [
-        groupName,
-        mapGroup(group as HttpApiGroup.AnyWithProps),
-      ])
+      Object.entries(
+        (api as TApi & { groups: Record<string, HttpApiGroup.AnyWithProps> }).groups,
+      ).map(([groupName, group]) => [groupName, mapGroup(group as HttpApiGroup.AnyWithProps)]),
     ),
   });
diff --git a/libraries/web/src/core/platform/browser-platform-provider.ts b/libraries/web/src/core/platform/browser-platform-provider.ts
index 67275c93d..ea15b6933 100644
--- a/libraries/web/src/core/platform/browser-platform-provider.ts
+++ b/libraries/web/src/core/platform/browser-platform-provider.ts
@@ -1,9 +1,7 @@
 import { SDK_VERSION } from "../constants";
 
 const trimUndefined = (entries: Record<string, unknown>) =>
-  Object.fromEntries(
-    Object.entries(entries).filter(([, value]) => typeof value !== "undefined")
-  );
+  Object.fromEntries(Object.entries(entries).filter(([, value]) => typeof value !== "undefined"));
 
 const safeUrl = (value: string | undefined) => {
   if (!value) {
@@ -40,18 +38,13 @@ export class BrowserPlatformProvider {
     }
 
     const hostname = window.location.hostname;
-    return (
-      hostname === "localhost" ||
-      hostname === "127.0.0.1" ||
-      hostname.endsWith(".local")
-    );
+    return hostname === "localhost" || hostname === "127.0.0.1" || hostname.endsWith(".local");
   }
 
   buildAnalyticsContext() {
     const currentUrl = this.getCurrentUrl();
     const referrerUrl = this.getReferrerUrl();
-    const navigatorRef =
-      typeof navigator !== "undefined" ? navigator : undefined;
+    const navigatorRef = typeof navigator !== "undefined" ? navigator : undefined;
     const screenRef = typeof screen !== "undefined" ? screen : undefined;
     const viewport =
       typeof window !== "undefined"
@@ -63,8 +56,7 @@ export class BrowserPlatformProvider {
 
     return trimUndefined({
       locale: navigatorRef?.language,
-      page_title:
-        typeof document !== "undefined" ? document.title || undefined : undefined,
+      page_title: typeof document !== "undefined" ? document.title || undefined : undefined,
       referrer_origin: referrerUrl?.origin,
       referrer_path: referrerUrl?.pathname,
       screen_height: screenRef?.height,
@@ -84,8 +76,7 @@ export class BrowserPlatformProvider {
     observerMode: boolean;
     publishableKey: string;
   }): Record<string, string | undefined> {
-    const navigatorRef =
-      typeof navigator !== "undefined" ? navigator : undefined;
+    const navigatorRef = typeof navigator !== "undefined" ? navigator : undefined;
 
     return {
       "x-client-bundle-id": "",
diff --git a/libraries/web/src/core/platform/platform-provider.ts b/libraries/web/src/core/platform/platform-provider.ts
index b85d92145..0c1bebaf3 100644
--- a/libraries/web/src/core/platform/platform-provider.ts
+++ b/libraries/web/src/core/platform/platform-provider.ts
@@ -2,12 +2,11 @@ import { Layer, Context } from "effect";
 
 import { BrowserPlatformProvider } from "./browser-platform-provider";
 
-export class PlatformProvider extends Context.Service<
-  PlatformProvider,
-  BrowserPlatformProvider
->()("web-voidhash/PlatformProvider") {}
+export class PlatformProvider extends Context.Service<PlatformProvider, BrowserPlatformProvider>()(
+  "web-voidhash/PlatformProvider",
+) {}
 
 export const BrowserPlatformProviderLayer = Layer.succeed(
   PlatformProvider,
-  new BrowserPlatformProvider()
+  new BrowserPlatformProvider(),
 );
diff --git a/libraries/web/src/core/sdk-configuration.ts b/libraries/web/src/core/sdk-configuration.ts
index 90cd26c77..9c4a204c7 100644
--- a/libraries/web/src/core/sdk-configuration.ts
+++ b/libraries/web/src/core/sdk-configuration.ts
@@ -2,7 +2,6 @@ import { Context } from "effect";
 
 import type { ResolvedVoidhashConfig } from "../types";
 
-export class SdkConfiguration extends Context.Service<
-  SdkConfiguration,
-  ResolvedVoidhashConfig
->()("web-voidhash/SdkConfiguration") {}
+export class SdkConfiguration extends Context.Service<SdkConfiguration, ResolvedVoidhashConfig>()(
+  "web-voidhash/SdkConfiguration",
+) {}
diff --git a/libraries/web/src/react/hooks/use-analytics.ts b/libraries/web/src/react/hooks/use-analytics.ts
index 57ad3a799..6871629d4 100644
--- a/libraries/web/src/react/hooks/use-analytics.ts
+++ b/libraries/web/src/react/hooks/use-analytics.ts
@@ -12,14 +12,14 @@ export const useAnalytics = () => {
       page: (
         pageName?: string,
         properties?: Record<string, unknown>,
-        options?: { eventId?: string; sessionId?: string; timestamp?: string }
+        options?: { eventId?: string; sessionId?: string; timestamp?: string },
       ) => client.page(pageName, properties, options),
       track: (
         eventName: string,
         properties?: Record<string, unknown>,
-        options?: { eventId?: string; sessionId?: string; timestamp?: string }
+        options?: { eventId?: string; sessionId?: string; timestamp?: string },
       ) => client.track(eventName, properties, options),
     }),
-    [client]
+    [client],
   );
 };
diff --git a/libraries/web/src/react/hooks/use-feature-flags.ts b/libraries/web/src/react/hooks/use-feature-flags.ts
index 1dd979e84..8d3ff95d5 100644
--- a/libraries/web/src/react/hooks/use-feature-flags.ts
+++ b/libraries/web/src/react/hooks/use-feature-flags.ts
@@ -14,12 +14,12 @@ export const useFeatureFlags = (keys?: string[]) => {
   const serializedKeys = React.useMemo(() => serializeKeys(keys), [keys]);
   const resolvedKeys = React.useMemo(
     () => (serializedKeys === "all" ? undefined : serializedKeys.split(",")),
-    [serializedKeys]
+    [serializedKeys],
   );
 
   const updateData = React.useCallback((nextData: FeatureFlagsResult) => {
     setData((previous) =>
-      JSON.stringify(previous) === JSON.stringify(nextData) ? previous : nextData
+      JSON.stringify(previous) === JSON.stringify(nextData) ? previous : nextData,
     );
   }, []);
 
@@ -31,8 +31,7 @@ export const useFeatureFlags = (keys?: string[]) => {
       updateData(nextData);
       return nextData;
     } catch (cause) {
-      const nextError =
-        cause instanceof Error ? cause : new Error("Failed to refresh flags.");
+      const nextError = cause instanceof Error ? cause : new Error("Failed to refresh flags.");
       setError(nextError);
       throw nextError;
     } finally {
@@ -58,9 +57,7 @@ export const useFeatureFlags = (keys?: string[]) => {
       })
       .catch((cause) => {
         if (isMounted) {
-          setError(
-            cause instanceof Error ? cause : new Error("Failed to load flags.")
-          );
+          setError(cause instanceof Error ? cause : new Error("Failed to load flags."));
         }
       })
       .finally(() => {
@@ -84,12 +81,12 @@ export const useFeatureFlags = (keys?: string[]) => {
 
   const isEnabled = React.useCallback(
     (key: string) => data.flags.find((flag) => flag.key === key)?.enabled ?? false,
-    [data.flags]
+    [data.flags],
   );
 
   const getVariant = React.useCallback(
     (key: string) => data.flags.find((flag) => flag.key === key) ?? null,
-    [data.flags]
+    [data.flags],
   );
 
   return {
diff --git a/libraries/web/src/react/provider.tsx b/libraries/web/src/react/provider.tsx
index 45e741642..eed7d5cb9 100644
--- a/libraries/web/src/react/provider.tsx
+++ b/libraries/web/src/react/provider.tsx
@@ -26,8 +26,7 @@ export interface VoidhashReactContextValue {
   readonly isInitialized: boolean;
 }
 
-export const VoidhashReactContext =
-  createContext<VoidhashReactContextValue | null>(null);
+export const VoidhashReactContext = createContext<VoidhashReactContextValue | null>(null);
 
 export function VoidhashProvider(props: ProviderWithClient | ProviderWithConfig) {
   const clientRef = useRef<VoidhashWebClient | null>(null);
@@ -81,12 +80,10 @@ export function VoidhashProvider(props: ProviderWithClient | ProviderWithConfig)
       distinctId,
       isInitialized,
     }),
-    [client, distinctId, isInitialized]
+    [client, distinctId, isInitialized],
   );
 
   return (
-    <VoidhashReactContext.Provider value={value}>
-      {props.children}
-    </VoidhashReactContext.Provider>
+    <VoidhashReactContext.Provider value={value}>{props.children}</VoidhashReactContext.Provider>
   );
 }
diff --git a/libraries/web/src/types.ts b/libraries/web/src/types.ts
index 001d749e2..a7c1b7ad2 100644
--- a/libraries/web/src/types.ts
+++ b/libraries/web/src/types.ts
@@ -83,12 +83,7 @@ export interface AnalyticsPartialRejectionEvent extends AnalyticsFlushResult {}
 export interface VoidhashErrorEvent {
   readonly error?: unknown;
   readonly message: string;
-  readonly source:
-    | "analytics"
-    | "client"
-    | "feature-flags"
-    | "identity"
-    | "storage";
+  readonly source: "analytics" | "client" | "feature-flags" | "identity" | "storage";
 }
 
 export interface VoidhashEventMap {
diff --git a/libraries/web/sst-env.d.ts b/libraries/web/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/libraries/web/sst-env.d.ts
+++ b/libraries/web/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/libraries/web/tests/analytics.test.ts b/libraries/web/tests/analytics.test.ts
index 824d78430..a86355df4 100644
--- a/libraries/web/tests/analytics.test.ts
+++ b/libraries/web/tests/analytics.test.ts
@@ -25,7 +25,7 @@ describe("analytics delivery", () => {
               code: "dependency_unavailable",
               error: "try again",
             },
-            503
+            503,
           );
         }
 
@@ -34,7 +34,7 @@ describe("analytics delivery", () => {
             accepted: 1,
             rejected: 0,
           },
-          202
+          202,
         );
       }
 
@@ -76,7 +76,7 @@ describe("analytics delivery", () => {
               code: "payload_too_large",
               error: "payload too large",
             },
-            413
+            413,
           );
         }
 
@@ -85,7 +85,7 @@ describe("analytics delivery", () => {
             accepted: 1,
             rejected: 0,
           },
-          202
+          202,
         );
       }
 
@@ -130,7 +130,7 @@ describe("analytics delivery", () => {
             429,
             {
               "retry-after": "2",
-            }
+            },
           );
         }
 
@@ -139,7 +139,7 @@ describe("analytics delivery", () => {
             accepted: 1,
             rejected: 0,
           },
-          202
+          202,
         );
       }
 
diff --git a/libraries/web/tests/client.test.ts b/libraries/web/tests/client.test.ts
index c3bca7010..66a25b6c7 100644
--- a/libraries/web/tests/client.test.ts
+++ b/libraries/web/tests/client.test.ts
@@ -1,9 +1,6 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
-import {
-  VoidhashNotInitializedError,
-  createVoidhashClient,
-} from "../src/index";
+import { VoidhashNotInitializedError, createVoidhashClient } from "../src/index";
 import { createJsonResponse, flushMicrotasks, installFetchMock } from "./helpers";
 
 describe("VoidhashWebClient", () => {
@@ -20,9 +17,7 @@ describe("VoidhashWebClient", () => {
       publishableKey: "vh_pk_test",
     });
 
-    await expect(client.getFeatureFlags()).rejects.toBeInstanceOf(
-      VoidhashNotInitializedError
-    );
+    await expect(client.getFeatureFlags()).rejects.toBeInstanceOf(VoidhashNotInitializedError);
   });
 
   it("initializes, fetches flags, derives analytics url, and flushes events", async () => {
@@ -46,7 +41,7 @@ describe("VoidhashWebClient", () => {
             accepted: 1,
             rejected: 0,
           },
-          202
+          202,
         );
       }
 
@@ -134,9 +129,7 @@ describe("VoidhashWebClient", () => {
     await client.reset();
 
     // No person-attributes sync endpoint is hit during identify/reset anymore.
-    expect(
-      calls.some((call) => call.url.includes("sync-person-attributes"))
-    ).toBe(false);
+    expect(calls.some((call) => call.url.includes("sync-person-attributes"))).toBe(false);
 
     const identifyCall = calls.find((call) => call.url.endsWith("/sdk/identify"));
     expect(JSON.parse(identifyCall?.body ?? "{}")).toEqual({
@@ -150,9 +143,7 @@ describe("VoidhashWebClient", () => {
     // The queued event flushed before the identity switch, attributed to the
     // original anonymous distinct id.
     const batchCall = calls.find((call) => call.url.endsWith("/batch"));
-    expect(JSON.parse(batchCall?.body ?? "{}").events?.[0]?.distinct_id).toBe(
-      initialDistinctId
-    );
+    expect(JSON.parse(batchCall?.body ?? "{}").events?.[0]?.distinct_id).toBe(initialDistinctId);
 
     expect(client.getDistinctId()).toMatch(/^vh:anon:/);
 
@@ -237,9 +228,7 @@ describe("VoidhashWebClient", () => {
       name: "Ada",
     });
 
-    const syncCall = calls.find((call) =>
-      call.url.endsWith("/sdk/person/traits")
-    );
+    const syncCall = calls.find((call) => call.url.endsWith("/sdk/person/traits"));
     expect(syncCall?.headers["x-distinct-id"]).toBe(distinctId);
     expect(JSON.parse(syncCall?.body ?? "{}")).toEqual({
       email: "ada@example.com",
diff --git a/libraries/web/tests/helpers.ts b/libraries/web/tests/helpers.ts
index 33f6f6aef..49eebad24 100644
--- a/libraries/web/tests/helpers.ts
+++ b/libraries/web/tests/helpers.ts
@@ -10,7 +10,7 @@ export interface FetchCall {
 export const createJsonResponse = (
   body: Record<string, unknown>,
   status = 200,
-  headers?: Record<string, string>
+  headers?: Record<string, string>,
 ) =>
   new Response(JSON.stringify(body), {
     headers: {
@@ -26,9 +26,7 @@ export const flushMicrotasks = async (times = 4) => {
   }
 };
 
-export const installFetchMock = (
-  handler: (call: FetchCall) => Promise<Response> | Response
-) => {
+export const installFetchMock = (handler: (call: FetchCall) => Promise<Response> | Response) => {
   const calls: FetchCall[] = [];
   const fetchMock = vi.fn(async (input: URL | RequestInfo, init?: RequestInit) => {
     let url: string;
diff --git a/libraries/web/tests/react.test.tsx b/libraries/web/tests/react.test.tsx
index c91534d50..78f07c258 100644
--- a/libraries/web/tests/react.test.tsx
+++ b/libraries/web/tests/react.test.tsx
@@ -8,8 +8,7 @@ describe("react integration", () => {
   afterEach(() => {
     vi.unstubAllGlobals();
     localStorage.clear();
-    delete (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean })
-      .IS_REACT_ACT_ENVIRONMENT;
+    delete (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT;
   });
 
   it("keeps the root entry importable without react", async () => {
@@ -19,31 +18,29 @@ describe("react integration", () => {
   });
 
   it("renders provider and hooks safely", async () => {
-    (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT =
-      true;
-    vi.stubGlobal("fetch", vi.fn(async (input: URL | RequestInfo) => {
-      const url = input.toString();
-      if (url.endsWith("/sdk/evaluate-flags")) {
-        return createJsonResponse({
-          flags: [
-            {
-              enabled: true,
-              key: "new-nav",
-              payload: null,
-              variantKey: "on",
-            },
-          ],
-        });
-      }
+    (globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
+    vi.stubGlobal(
+      "fetch",
+      vi.fn(async (input: URL | RequestInfo) => {
+        const url = input.toString();
+        if (url.endsWith("/sdk/evaluate-flags")) {
+          return createJsonResponse({
+            flags: [
+              {
+                enabled: true,
+                key: "new-nav",
+                payload: null,
+                variantKey: "on",
+              },
+            ],
+          });
+        }
 
-      return createJsonResponse({});
-    }));
+        return createJsonResponse({});
+      }),
+    );
 
-    const {
-      VoidhashProvider,
-      useFeatureFlags,
-      useVoidhash,
-    } = await import("../src/react/index");
+    const { VoidhashProvider, useFeatureFlags, useVoidhash } = await import("../src/react/index");
 
     const container = document.createElement("div");
     const root = createRoot(container);
@@ -72,7 +69,7 @@ describe("react integration", () => {
           }}
         >
           <TestComponent />
-        </VoidhashProvider>
+        </VoidhashProvider>,
       );
     });
     await act(async () => {
@@ -81,15 +78,11 @@ describe("react integration", () => {
       await Promise.resolve();
     });
 
-    expect(container.querySelector('[data-testid="ready"]')?.textContent).toBe(
-      "true"
-    );
-    expect(
-      container.querySelector('[data-testid="distinct-id"]')?.textContent
-    ).toMatch(/^vh:anon:/);
-    expect(container.querySelector('[data-testid="flag"]')?.textContent).toBe(
-      "true"
+    expect(container.querySelector('[data-testid="ready"]')?.textContent).toBe("true");
+    expect(container.querySelector('[data-testid="distinct-id"]')?.textContent).toMatch(
+      /^vh:anon:/,
     );
+    expect(container.querySelector('[data-testid="flag"]')?.textContent).toBe("true");
 
     await act(async () => {
       root.unmount();
diff --git a/package.json b/package.json
index 581fb9037..d4e07b2f8 100644
--- a/package.json
+++ b/package.json
@@ -49,8 +49,8 @@
   },
   "dependencies": {
     "@effect/language-service": "catalog:",
-    "@typescript/native-preview": "7.0.0-dev.20260210.1",
     "@types/node": "^24.10.4",
+    "@typescript/native-preview": "7.0.0-dev.20260210.1",
     "bumpp": "^10.3.2",
     "cross-env": "^7.0.3",
     "drizzle-kit": "^0.31.8",
@@ -70,10 +70,10 @@
     "react": "19.1.0",
     "react-dom": "19.1.0"
   },
+  "packageManager": "pnpm@10.19.0",
   "pnpm": {
     "overrides": {
       "effect": "4.0.0-beta.84"
     }
-  },
-  "packageManager": "pnpm@10.19.0"
+  }
 }
diff --git a/packages/generated-clients/openapi/core.json b/packages/generated-clients/openapi/core.json
index 735c243a5..1155fae19 100644
--- a/packages/generated-clients/openapi/core.json
+++ b/packages/generated-clients/openapi/core.json
@@ -1 +1,4514 @@
-{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/api/v1/auth/session":{"get":{"tags":["auth"],"operationId":"auth.session","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"method":{"anyOf":[{"type":"string","enum":["api-key"]},{"type":"string","enum":["publishable-key"]},{"type":"string","enum":["secret-key"]}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","organizationId","slug"],"additionalProperties":false}}},"required":["method","name","organizations","projects"],"additionalProperties":false}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Error","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}}}}}}},"/api/v1/api-keys":{"post":{"tags":["api_keys"],"operationId":"api_keys.createSecretKey","parameters":[],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSecretKeyBody"}}},"required":true}},"get":{"tags":["api_keys"],"operationId":"api_keys.listApiKeys","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ApiKey"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}":{"get":{"tags":["api_keys"],"operationId":"api_keys.getApiKeyById","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ApiKeyNotFoundError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}},"delete":{"tags":["api_keys"],"operationId":"api_keys.deleteApiKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ApiKeyNotFoundError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/api-keys/{apiKeyId}/rotate":{"post":{"tags":["api_keys"],"operationId":"api_keys.rotateSecretKey","parameters":[{"name":"apiKeyId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"ApiKeyWithRawKey","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ApiKeyWithRawKey"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/ApiKeyNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ApiKeyNotFoundError"}}}},"500":{"description":"Api/ApiKeyServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ApiKeyServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons":{"post":{"tags":["persons"],"operationId":"persons.createPerson","parameters":[],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"Api/PersonInvalidAnonymousIdError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonInvalidAnonymousIdError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreatePersonBody"}}},"required":true}},"get":{"tags":["persons"],"operationId":"persons.listPersons","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Person"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/{personId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonById","parameters":[{"name":"personId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_PersonNotFoundError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/persons/by-distinct-id/{distinctId}":{"get":{"tags":["persons"],"operationId":"persons.getPersonByDistinctId","parameters":[{"name":"distinctId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Person","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Person"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/PersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_PersonNotFoundError"}}}},"500":{"description":"Api/PersonServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PersonServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/organizations":{"post":{"tags":["organizations"],"operationId":"organizations.createOrganization","parameters":[],"security":[],"responses":{"200":{"description":"Organization","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Organization"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/OrganizationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_OrganizationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateOrganizationBody"}}},"required":true}}},"/api/v1/perks":{"get":{"tags":["perks"],"operationId":"perks.listPerks","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Perk"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/paywall-locations":{"get":{"tags":["paywall_locations"],"operationId":"paywall_locations.listPaywallLocations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaywallLocation"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PaywallLocationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PaywallLocationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/schema":{"get":{"tags":["schema"],"operationId":"schema.getSchema","parameters":[],"security":[],"responses":{"200":{"description":"ProjectSchemaResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProjectSchemaResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/SchemaServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SchemaServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/schema/version":{"get":{"tags":["schema"],"operationId":"schema.getSchemaVersion","parameters":[],"security":[],"responses":{"200":{"description":"SchemaVersion","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SchemaVersion"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/SchemaServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SchemaServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/projects":{"post":{"tags":["projects"],"operationId":"projects.createProject","parameters":[],"security":[],"responses":{"200":{"description":"Project","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Project"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/AuthenticationError | Api/ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateProjectBody"}}},"required":true}}},"/api/v1/projects/{organizationId}":{"get":{"tags":["projects"],"operationId":"projects.listProjects","parameters":[{"name":"organizationId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Project"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ProjectServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProjectServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/products":{"get":{"tags":["products"],"operationId":"products.listProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Product"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/product-perks/by-product-id/{productId}":{"get":{"tags":["product_perks"],"operationId":"product_perks.listProductPerksByProductId","parameters":[{"name":"productId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ProductPerk"}}}}},"400":{"description":"Api/ProductPerkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProductPerkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/ProductPerkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_ProductPerkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/person":{"get":{"tags":["sdk"],"operationId":"sdk.getPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"Api/SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonNotFoundError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/sdk/identify":{"post":{"tags":["sdk"],"operationId":"sdk.identifyPerson","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"Api/SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonNotFoundError"}}}},"409":{"description":"Api/SdkPersonAlreadyIdentifiedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonAlreadyIdentifiedError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkIdentifyBody"}}},"required":true}}},"/api/v1/sdk/person/traits":{"post":{"tags":["sdk"],"operationId":"sdk.syncPersonAttributes","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkPerson","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkPerson"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"404":{"description":"Api/SdkPersonNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_SdkPersonNotFoundError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncPersonAttributesBody"}}},"required":true}}},"/api/v1/sdk/sync-transaction":{"post":{"tags":["sdk"],"operationId":"sdk.syncTransaction","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkSyncTransactionResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSyncTransactionResponse"}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"platform":{"anyOf":[{"type":"string","enum":["ios"]},{"type":"string","enum":["android"]}]},"productSlug":{"type":"string"},"purchaseDate":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"purchaseToken":{"anyOf":[{"type":"string"},{"type":"null"}]},"quantity":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"receipt":{"anyOf":[{"type":"string"},{"type":"null"}]},"transactionId":{"type":"string"}},"required":["platform","productSlug","purchaseDate","quantity","transactionId"],"additionalProperties":false}}},"required":true}}},"/api/v1/sdk/evaluate-flags":{"post":{"tags":["sdk"],"operationId":"sdk.evaluateFeatureFlags","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkFeatureFlagsResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkFeatureFlagsResponse"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EvaluateFeatureFlagsBody"}}},"required":true}}},"/api/v1/sdk/resolve-paywall":{"post":{"tags":["sdk"],"operationId":"sdk.resolvePaywall","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/SdkResolvedPaywall"},{"type":"null"}]}}}},"400":{"description":"Api/SdkValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_SdkValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"500":{"description":"Api/AuthenticationError | Api/SdkServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SdkServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkResolvePaywallBody"}}},"required":true}}},"/api/v1/sdk/schema":{"get":{"tags":["sdk"],"operationId":"sdk.getSchema","parameters":[{"name":"x-distinct-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-publishable-key","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-bundle-id","in":"header","schema":{"type":"string"},"required":true},{"name":"x-client-locale","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-client-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-is-backgrounded","in":"header","schema":{"type":"string","enum":["false"]},"required":true},{"name":"x-is-debug-build","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-nonce","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-observer-mode","in":"header","schema":{"anyOf":[{"type":"string","enum":["true"]},{"type":"string","enum":["false"]}]},"required":true},{"name":"x-platform","in":"header","schema":{"type":"string"},"required":true},{"name":"x-platform-brand","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-device","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-flavor","in":"header","schema":{"anyOf":[{"type":"string","enum":["native"]},{"type":"string","enum":["browser"]}]},"required":true},{"name":"x-platform-flavor-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-platform-version","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-preferred-locales","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false},{"name":"x-sdk","in":"header","schema":{"anyOf":[{"type":"string","enum":["react-native"]},{"type":"string","enum":["web"]}]},"required":true},{"name":"x-sdk-version","in":"header","schema":{"type":"string"},"required":true},{"name":"x-storefront","in":"header","schema":{"anyOf":[{"type":"string"},{"type":"null"}]},"required":false}],"security":[],"responses":{"200":{"description":"SdkSchema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SdkSchema"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/AuthenticationError | Api/SchemaServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_SchemaServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/users/current":{"get":{"tags":["users"],"operationId":"users.getUser","parameters":[],"security":[],"responses":{"200":{"description":"User","content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"500":{"description":"Api/AuthenticationError | Api/UserServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_UserServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-configurations":{"get":{"tags":["payment_provider_configurations"],"operationId":"payment_provider_configurations.listPaymentProviderConfigurations","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderConfiguration"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PaymentProviderConfigurationServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PaymentProviderConfigurationServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/payment-provider-products":{"get":{"tags":["payment_provider_products"],"operationId":"payment_provider_products.listPaymentProviderProducts","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/PaymentProviderProduct"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/PaymentProviderProductServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_PaymentProviderProductServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints":{"post":{"tags":["webhooks"],"operationId":"webhooks.createWebhookEndpoint","parameters":[],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"Api/WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateWebhookEndpointBody"}}},"required":true}},"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookEndpoints","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEndpoint"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}},"patch":{"tags":["webhooks"],"operationId":"webhooks.updateWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"Api/WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}},"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateWebhookEndpointBody"}}},"required":true}},"delete":{"tags":["webhooks"],"operationId":"webhooks.deleteWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"204":{"description":"<No Content>"},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/rotate-secret":{"post":{"tags":["webhooks"],"operationId":"webhooks.rotateWebhookSecret","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookEndpoint","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookEndpoint"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/endpoints/{endpointId}/test":{"post":{"tags":["webhooks"],"operationId":"webhooks.testWebhookEndpoint","parameters":[{"name":"endpointId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookEndpointNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookEndpointNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries":{"get":{"tags":["webhooks"],"operationId":"webhooks.listWebhookDeliveries","parameters":[],"security":[],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDelivery"}}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}":{"get":{"tags":["webhooks"],"operationId":"webhooks.getWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDeliveryWithAttempts","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDeliveryWithAttempts"}}}},"400":{"description":"The request or response did not match the expected schema","content":{"application/json":{"schema":{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookDeliveryNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}},"/api/v1/webhooks/deliveries/{deliveryId}/retry":{"post":{"tags":["webhooks"],"operationId":"webhooks.retryWebhookDelivery","parameters":[{"name":"deliveryId","in":"path","schema":{"type":"string"},"required":true}],"security":[],"responses":{"200":{"description":"WebhookDelivery","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookDelivery"}}}},"400":{"description":"Api/WebhookValidationError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookValidationError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"403":{"description":"Api/ActionForbiddenError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_ActionForbiddenError"}}}},"404":{"description":"Api/WebhookDeliveryNotFoundError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Api_WebhookDeliveryNotFoundError"}}}},"500":{"description":"Api/WebhookServiceError","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/Api_WebhookServiceError"},{"anyOf":[{"$ref":"#/components/schemas/Api_AuthenticationError"},{"$ref":"#/components/schemas/Api_NotAuthenticatedError"}]}]}}}}}}}},"components":{"schemas":{"Api_ActionForbiddenError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ActionForbiddenError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"Api_AuthenticationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/AuthenticationError"]},"cause":{"type":"string"},"message":{"type":"string"}},"required":["_tag","cause","message"],"additionalProperties":false},"Api_NotAuthenticatedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/NotAuthenticatedError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreateSecretKeyBody":{"type":"object","properties":{"name":{"type":"string"},"projectId":{"type":"string"}},"required":["name","projectId"],"additionalProperties":false},"ApiKeyWithRawKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"type":"string"}},"required":["end","id","isPublic","name","prefix","projectId","rawKey"],"additionalProperties":false},"Api_ApiKeyServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ApiKeyServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ApiKey":{"type":"object","properties":{"end":{"type":"string"},"id":{"type":"string"},"isPublic":{"type":"boolean"},"name":{"type":"string"},"prefix":{"type":"string"},"projectId":{"type":"string"},"rawKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["end","id","isPublic","name","prefix","projectId"],"additionalProperties":false},"Api_ApiKeyNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ApiKeyNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CreatePersonBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Person":{"type":"object","properties":{"personId":{"type":"string"},"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["personId","distinctId","email","name"],"additionalProperties":false},"Api_PersonInvalidAnonymousIdError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PersonInvalidAnonymousIdError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"Api_PersonServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PersonServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_PersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PersonNotFoundError"]},"id":{"type":"string","allOf":[{"minLength":1}]}},"required":["_tag","id"],"additionalProperties":false},"CreateOrganizationBody":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"Organization":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"Api_OrganizationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/OrganizationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Perk":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","projectId","slug"],"additionalProperties":false},"Api_PerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaywallLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"}},"required":["description","id","name","projectId","slug"],"additionalProperties":false},"Api_PaywallLocationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PaywallLocationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SchemaLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["description","name","slug"],"additionalProperties":false},"SchemaPerk":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false},"SchemaProductProvider":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"providerId":{"anyOf":[{"type":"string","enum":["appleAppStore"]},{"type":"string","enum":["googlePlay"]}]}},"required":["configuration","providerId"],"additionalProperties":false},"SchemaProduct":{"type":"object","properties":{"name":{"type":"string"},"perks":{"type":"array","items":{"type":"string"}},"providers":{"type":"array","items":{"$ref":"#/components/schemas/SchemaProductProvider"}},"slug":{"type":"string"},"type":{"type":"string","enum":["subscription"]}},"required":["name","perks","providers","slug","type"],"additionalProperties":false},"ProjectSchemaResponse":{"type":"object","properties":{"enabledProviders":{"type":"array","items":{"anyOf":[{"type":"string","enum":["appleAppStore"]},{"type":"string","enum":["googlePlay"]}]}},"locations":{"type":"array","items":{"$ref":"#/components/schemas/SchemaLocation"}},"perks":{"type":"array","items":{"$ref":"#/components/schemas/SchemaPerk"}},"products":{"type":"array","items":{"$ref":"#/components/schemas/SchemaProduct"}},"version":{"type":"string"}},"required":["enabledProviders","locations","perks","products","version"],"additionalProperties":false},"Api_SchemaServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SchemaServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"SchemaVersion":{"type":"object","properties":{"version":{"type":"string"}},"required":["version"],"additionalProperties":false},"CreateProjectBody":{"type":"object","properties":{"name":{"type":"string"},"organizationId":{"type":"string"}},"required":["name","organizationId"],"additionalProperties":false},"Project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"Api_ProjectServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProjectServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Product":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"slug":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["one-time"]},{"type":"string","enum":["one-time-consumable"]}]}},"required":["id","name","projectId","slug","type"],"additionalProperties":false},"Api_ProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"ProductPerk":{"type":"object","properties":{"id":{"type":"string"},"perkId":{"type":"string"},"productId":{"type":"string"}},"required":["id","perkId","productId"],"additionalProperties":false},"Api_ProductPerkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProductPerkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_ProductPerkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/ProductPerkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkEntitlementGrant":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"perkId":{"type":"string"},"source":{"anyOf":[{"type":"string","enum":["subscription"]},{"type":"string","enum":["purchase"]},{"type":"string","enum":["manual"]}]},"sourceId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["expired"]}]}},"required":["expiresAt","perkId","source","sourceId","sourcePersonId","status"],"additionalProperties":false},"SdkPurchaseHistoryEntry":{"type":"object","properties":{"createdAt":{"type":"string"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"providerKey":{"type":"string"},"purchaseId":{"type":"string"},"sourcePersonId":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["one_time"]},{"type":"string","enum":["subscription"]}]}},"required":["createdAt","productId","providerKey","purchaseId","sourcePersonId","type"],"additionalProperties":false},"SdkCurrentSubscription":{"type":"object","properties":{"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"type":"string","enum":["none"]},{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["past_due"]},{"type":"string","enum":["trialing"]}]},"subscriptionId":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["expiresAt","productId","status","subscriptionId"],"additionalProperties":false},"SdkSubscriptionHistoryEntry":{"type":"object","properties":{"canceledAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"expiresAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"isTrial":{"type":"boolean"},"productId":{"anyOf":[{"type":"string"},{"type":"null"}]},"sourcePersonId":{"type":"string"},"startsAt":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["canceled"]},{"type":"string","enum":["expired"]},{"type":"string","enum":["trialing"]},{"type":"string","enum":["past_due"]}]},"subscriptionId":{"type":"string"}},"required":["canceledAt","expiresAt","isTrial","productId","sourcePersonId","startsAt","status","subscriptionId"],"additionalProperties":false},"SdkPerson":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"entitlements":{"type":"object","properties":{"grants":{"type":"array","items":{"$ref":"#/components/schemas/SdkEntitlementGrant"}}},"required":["grants"],"additionalProperties":false},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"personId":{"type":"string"},"purchases":{"type":"object","properties":{"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkPurchaseHistoryEntry"}}},"required":["history"],"additionalProperties":false},"snapshotContext":{"type":"object","properties":{"includedPersonIds":{"type":"array","items":{"type":"string"}},"migrationJobId":{"anyOf":[{"type":"string"},{"type":"null"}]},"mode":{"anyOf":[{"type":"string","enum":["persisted"]},{"type":"string","enum":["temporary_pending_transfer"]}]}},"required":["includedPersonIds","migrationJobId","mode"],"additionalProperties":false},"subscriptions":{"type":"object","properties":{"current":{"anyOf":[{"$ref":"#/components/schemas/SdkCurrentSubscription"},{"type":"null"}]},"history":{"type":"array","items":{"$ref":"#/components/schemas/SdkSubscriptionHistoryEntry"}}},"required":["current","history"],"additionalProperties":false}},"required":["distinctId","email","entitlements","name","personId","purchases","snapshotContext","subscriptions"],"additionalProperties":false},"Api_SdkServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_SdkPersonNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkPersonNotFoundError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"Api_SdkValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"SdkIdentifyBody":{"type":"object","properties":{"distinctId":{"type":"string"},"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"required":["distinctId"],"additionalProperties":false},"Api_SdkPersonAlreadyIdentifiedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/SdkPersonAlreadyIdentifiedError"]},"distinctId":{"type":"string"}},"required":["_tag","distinctId"],"additionalProperties":false},"SdkSyncPersonAttributesBody":{"type":"object","properties":{"email":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"traits":{"anyOf":[{"type":"object","additionalProperties":{"anyOf":[{"type":"string"},{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"boolean"},{"type":"null"}]}},{"type":"null"}]}},"additionalProperties":false},"SdkSyncTransactionResponse":{"type":"object","properties":{"accepted":{"type":"boolean"}},"required":["accepted"],"additionalProperties":false},"EvaluateFeatureFlagsBody":{"type":"object","properties":{"flagKeys":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]}},"additionalProperties":false},"SdkFeatureFlagResult":{"type":"object","properties":{"enabled":{"type":"boolean"},"key":{"type":"string"},"payload":{"anyOf":[{"type":"null"},{"type":"null"}]},"variantKey":{"anyOf":[{"type":"string"},{"type":"null"}]}},"required":["enabled","key","payload","variantKey"],"additionalProperties":false},"SdkFeatureFlagsResponse":{"type":"object","properties":{"flags":{"type":"array","items":{"$ref":"#/components/schemas/SdkFeatureFlagResult"}}},"required":["flags"],"additionalProperties":false},"SdkResolvePaywallBody":{"type":"object","properties":{"locationSlug":{"type":"string"}},"required":["locationSlug"],"additionalProperties":false},"SdkResolvedPaywallShowing":{"type":"object","properties":{"id":{"type":"string"},"paywall":{"anyOf":[{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},{"type":"null"}]},"paywallId":{"anyOf":[{"type":"string"},{"type":"null"}]},"paywallRelease":{"anyOf":[{"type":"object","properties":{"htmlUrl":{"type":"string"},"publishedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"releaseId":{"type":"string"},"version":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]}},"required":["htmlUrl","publishedAt","releaseId","version"],"additionalProperties":false},{"type":"null"}]},"paywallReleaseId":{"anyOf":[{"type":"string"},{"type":"null"}]},"startedAt":{"type":"string"},"type":{"anyOf":[{"type":"string","enum":["paywall_release"]},{"type":"string","enum":["feature_flag"]}]}},"required":["id","paywall","paywallId","paywallRelease","paywallReleaseId","startedAt","type"],"additionalProperties":false},"SdkResolvedPaywall":{"type":"object","properties":{"location":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","name","slug"],"additionalProperties":false},"showing":{"$ref":"#/components/schemas/SdkResolvedPaywallShowing"}},"required":["location","showing"],"additionalProperties":false},"SdkSchemaLocation":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["description","name","slug"],"additionalProperties":false},"SdkSchemaPerk":{"type":"object","properties":{"name":{"type":"string"},"slug":{"type":"string"}},"required":["name","slug"],"additionalProperties":false},"SdkSchemaProduct":{"type":"object","properties":{"configuration":{"type":"object","properties":{"perks":{"type":"object","additionalProperties":{"type":"boolean","enum":[true]}},"providers":{"type":"object","properties":{"appleAppStore":{"anyOf":[{"type":"object","additionalProperties":{"type":"null"}},{"type":"null"}]},"googlePlay":{"anyOf":[{"type":"object","additionalProperties":{"type":"null"}},{"type":"null"}]}},"additionalProperties":false}},"required":["perks","providers"],"additionalProperties":false},"properties":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"],"additionalProperties":false},"slug":{"type":"string"},"type":{"type":"string","enum":["subscription"]}},"required":["configuration","properties","slug","type"],"additionalProperties":false},"SdkSchema":{"type":"object","properties":{"locations":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/SdkSchemaLocation"}},"perks":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/SdkSchemaPerk"}},"products":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/SdkSchemaProduct"}},"version":{"type":"string"}},"required":["locations","perks","products","version"],"additionalProperties":false},"User":{"type":"object","properties":{"createdAt":{"type":"string"},"email":{"type":"string"},"emailVerified":{"type":"boolean"},"id":{"type":"string"},"image":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizations":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","slug"],"additionalProperties":false}},"projects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"logo":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"organizationId":{"type":"string"},"slug":{"type":"string"}},"required":["id","logo","name","organizationId","slug"],"additionalProperties":false}},"updatedAt":{"type":"string"}},"required":["createdAt","email","emailVerified","id","image","name","organizations","projects","updatedAt"],"additionalProperties":false},"Api_UserServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/UserServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderConfiguration":{"type":"object","properties":{"enabled":{"type":"boolean"},"id":{"type":"string"},"name":{"type":"string"},"projectId":{"type":"string"},"providerId":{"type":"string"}},"required":["enabled","id","name","projectId","providerId"],"additionalProperties":false},"Api_PaymentProviderConfigurationServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PaymentProviderConfigurationServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"PaymentProviderProduct":{"type":"object","properties":{"configuration":{"type":"object","additionalProperties":{"type":"null"}},"id":{"type":"string"},"paymentProviderConfigurationId":{"type":"string"},"productId":{"type":"string"},"providerId":{"type":"string"}},"required":["configuration","id","paymentProviderConfigurationId","productId","providerId"],"additionalProperties":false},"Api_PaymentProviderProductServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/PaymentProviderProductServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"CreateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"url":{"type":"string"}},"required":["events","name","url"],"additionalProperties":false},"WebhookEndpoint":{"type":"object","properties":{"consecutiveFailures":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"description":{"anyOf":[{"type":"string"},{"type":"null"}]},"events":{"type":"array","items":{"anyOf":[{"type":"string","enum":["person.created"]},{"type":"string","enum":["person.updated"]},{"type":"string","enum":["person.deleted"]},{"type":"string","enum":["subscription.created"]},{"type":"string","enum":["subscription.renewed"]},{"type":"string","enum":["subscription.cancelled"]},{"type":"string","enum":["subscription.expired"]},{"type":"string","enum":["purchase.completed"]},{"type":"string","enum":["purchase.refunded"]}]}},"id":{"type":"string"},"lastSuccessAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"name":{"type":"string"},"projectId":{"type":"string"},"secret":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]},{"type":"string","enum":["failed"]}]},"url":{"type":"string"}},"required":["consecutiveFailures","createdAt","description","events","id","lastSuccessAt","name","projectId","secret","status","url"],"additionalProperties":false},"Api_WebhookValidationError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookValidationError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"Api_WebhookServiceError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookServiceError"]},"cause":{"type":"string"}},"required":["_tag","cause"],"additionalProperties":false},"Api_WebhookEndpointNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookEndpointNotFoundError"]},"endpointId":{"type":"string"}},"required":["_tag","endpointId"],"additionalProperties":false},"UpdateWebhookEndpointBody":{"type":"object","properties":{"description":{"anyOf":[{"anyOf":[{"type":"string"},{"type":"null"}]},{"type":"null"}]},"events":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}]},"name":{"anyOf":[{"type":"string"},{"type":"null"}]},"status":{"anyOf":[{"anyOf":[{"type":"string","enum":["active"]},{"type":"string","enum":["disabled"]}]},{"type":"null"}]},"url":{"anyOf":[{"type":"string"},{"type":"null"}]}},"additionalProperties":false},"WebhookDelivery":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"WebhookDeliveryAttempt":{"type":"object","properties":{"attemptNumber":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"durationMs":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"errorMessage":{"anyOf":[{"type":"string"},{"type":"null"}]},"id":{"type":"string"},"responseBody":{"anyOf":[{"type":"string"},{"type":"null"}]},"statusCode":{"anyOf":[{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},{"type":"null"}]},"succeeded":{"type":"boolean"}},"required":["attemptNumber","createdAt","durationMs","errorMessage","id","responseBody","statusCode","succeeded"],"additionalProperties":false},"WebhookDeliveryWithAttempts":{"type":"object","properties":{"attemptCount":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"attempts":{"type":"array","items":{"$ref":"#/components/schemas/WebhookDeliveryAttempt"}},"completedAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"createdAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"eventOccurredAt":{"type":"string"},"eventType":{"type":"string"},"id":{"type":"string"},"maxAttempts":{"anyOf":[{"type":"number"},{"type":"string","enum":["NaN"]},{"type":"string","enum":["Infinity"]},{"type":"string","enum":["-Infinity"]}]},"nextAttemptAt":{"anyOf":[{"type":"string"},{"type":"null"}]},"payload":{"type":"null"},"projectId":{"type":"string"},"status":{"anyOf":[{"type":"string","enum":["pending"]},{"type":"string","enum":["in_progress"]},{"type":"string","enum":["succeeded"]},{"type":"string","enum":["failed"]},{"type":"string","enum":["exhausted"]}]},"webhookEndpointId":{"type":"string"}},"required":["attemptCount","attempts","completedAt","createdAt","eventOccurredAt","eventType","id","maxAttempts","nextAttemptAt","payload","projectId","status","webhookEndpointId"],"additionalProperties":false},"Api_WebhookDeliveryNotFoundError":{"type":"object","properties":{"_tag":{"type":"string","enum":["Api/WebhookDeliveryNotFoundError"]},"deliveryId":{"type":"string"}},"required":["_tag","deliveryId"],"additionalProperties":false}},"securitySchemes":{}},"security":[],"tags":[{"name":"auth"},{"name":"api_keys"},{"name":"persons"},{"name":"organizations"},{"name":"perks"},{"name":"paywall_locations"},{"name":"schema"},{"name":"projects"},{"name":"products"},{"name":"product_perks"},{"name":"sdk"},{"name":"users"},{"name":"payment_provider_configurations"},{"name":"payment_provider_products"},{"name":"webhooks"}]}
+{
+  "openapi": "3.1.0",
+  "info": { "title": "Api", "version": "0.0.1" },
+  "paths": {
+    "/api/v1/auth/session": {
+      "get": {
+        "tags": ["auth"],
+        "operationId": "auth.session",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "method": {
+                      "anyOf": [
+                        { "type": "string", "enum": ["api-key"] },
+                        { "type": "string", "enum": ["publishable-key"] },
+                        { "type": "string", "enum": ["secret-key"] }
+                      ]
+                    },
+                    "name": { "type": "string" },
+                    "organizations": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": { "type": "string" },
+                          "name": { "type": "string" },
+                          "slug": { "type": "string" }
+                        },
+                        "required": ["id", "name", "slug"],
+                        "additionalProperties": false
+                      }
+                    },
+                    "projects": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": { "type": "string" },
+                          "name": { "type": "string" },
+                          "organizationId": { "type": "string" },
+                          "slug": { "type": "string" }
+                        },
+                        "required": ["id", "name", "organizationId", "slug"],
+                        "additionalProperties": false
+                      }
+                    }
+                  },
+                  "required": ["method", "name", "organizations", "projects"],
+                  "additionalProperties": false
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys": {
+      "post": {
+        "tags": ["api_keys"],
+        "operationId": "api_keys.createSecretKey",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/ApiKeyWithRawKey" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ApiKeyServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": { "schema": { "$ref": "#/components/schemas/CreateSecretKeyBody" } }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": ["api_keys"],
+        "operationId": "api_keys.listApiKeys",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": { "type": "array", "items": { "$ref": "#/components/schemas/ApiKey" } }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ApiKeyServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}": {
+      "get": {
+        "tags": ["api_keys"],
+        "operationId": "api_keys.getApiKeyById",
+        "parameters": [
+          { "name": "apiKeyId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ApiKey",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/ApiKey" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ApiKeyNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ApiKeyServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "tags": ["api_keys"],
+        "operationId": "api_keys.deleteApiKey",
+        "parameters": [
+          { "name": "apiKeyId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "204": { "description": "<No Content>" },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ApiKeyNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ApiKeyServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}/rotate": {
+      "post": {
+        "tags": ["api_keys"],
+        "operationId": "api_keys.rotateSecretKey",
+        "parameters": [
+          { "name": "apiKeyId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/ApiKeyWithRawKey" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ApiKeyNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ApiKeyServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/persons": {
+      "post": {
+        "tags": ["persons"],
+        "operationId": "persons.createPerson",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Person",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/Person" } }
+            }
+          },
+          "400": {
+            "description": "Api/PersonInvalidAnonymousIdError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PersonInvalidAnonymousIdError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PersonServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": { "schema": { "$ref": "#/components/schemas/CreatePersonBody" } }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": ["persons"],
+        "operationId": "persons.listPersons",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": { "type": "array", "items": { "$ref": "#/components/schemas/Person" } }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PersonServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/persons/{personId}": {
+      "get": {
+        "tags": ["persons"],
+        "operationId": "persons.getPersonById",
+        "parameters": [
+          { "name": "personId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Person",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/Person" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/PersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_PersonNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PersonServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/persons/by-distinct-id/{distinctId}": {
+      "get": {
+        "tags": ["persons"],
+        "operationId": "persons.getPersonByDistinctId",
+        "parameters": [
+          { "name": "distinctId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Person",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/Person" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/PersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_PersonNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PersonServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/organizations": {
+      "post": {
+        "tags": ["organizations"],
+        "operationId": "organizations.createOrganization",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Organization",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/Organization" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/OrganizationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_OrganizationServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/CreateOrganizationBody" }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/perks": {
+      "get": {
+        "tags": ["perks"],
+        "operationId": "perks.listPerks",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": { "type": "array", "items": { "$ref": "#/components/schemas/Perk" } }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PerkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/paywall-locations": {
+      "get": {
+        "tags": ["paywall_locations"],
+        "operationId": "paywall_locations.listPaywallLocations",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": { "$ref": "#/components/schemas/PaywallLocation" }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaywallLocationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PaywallLocationServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/schema": {
+      "get": {
+        "tags": ["schema"],
+        "operationId": "schema.getSchema",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ProjectSchemaResponse",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/ProjectSchemaResponse" }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/SchemaServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_SchemaServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/schema/version": {
+      "get": {
+        "tags": ["schema"],
+        "operationId": "schema.getSchemaVersion",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SchemaVersion",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/SchemaVersion" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/SchemaServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_SchemaServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/projects": {
+      "post": {
+        "tags": ["projects"],
+        "operationId": "projects.createProject",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Project",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/Project" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_ProjectServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": { "schema": { "$ref": "#/components/schemas/CreateProjectBody" } }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/projects/{organizationId}": {
+      "get": {
+        "tags": ["projects"],
+        "operationId": "projects.listProjects",
+        "parameters": [
+          {
+            "name": "organizationId",
+            "in": "path",
+            "schema": { "type": "string" },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": { "type": "array", "items": { "$ref": "#/components/schemas/Project" } }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ProjectServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/products": {
+      "get": {
+        "tags": ["products"],
+        "operationId": "products.listProducts",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": { "type": "array", "items": { "$ref": "#/components/schemas/Product" } }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ProductServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/product-perks/by-product-id/{productId}": {
+      "get": {
+        "tags": ["product_perks"],
+        "operationId": "product_perks.listProductPerksByProductId",
+        "parameters": [
+          { "name": "productId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": { "$ref": "#/components/schemas/ProductPerk" }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/ProductPerkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ProductPerkValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ProductPerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_ProductPerkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/person": {
+      "get": {
+        "tags": ["sdk"],
+        "operationId": "sdk.getPerson",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": { "type": "string", "enum": ["false"] },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["native"] },
+                { "type": "string", "enum": ["browser"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["react-native"] },
+                { "type": "string", "enum": ["web"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkPerson",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/SdkPerson" } }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_SdkValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/SdkPersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_SdkPersonNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_SdkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/identify": {
+      "post": {
+        "tags": ["sdk"],
+        "operationId": "sdk.identifyPerson",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": { "type": "string", "enum": ["false"] },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["native"] },
+                { "type": "string", "enum": ["browser"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["react-native"] },
+                { "type": "string", "enum": ["web"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkPerson",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/SdkPerson" } }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_SdkValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/SdkPersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_SdkPersonNotFoundError" }
+              }
+            }
+          },
+          "409": {
+            "description": "Api/SdkPersonAlreadyIdentifiedError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_SdkPersonAlreadyIdentifiedError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_SdkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": { "schema": { "$ref": "#/components/schemas/SdkIdentifyBody" } }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/person/traits": {
+      "post": {
+        "tags": ["sdk"],
+        "operationId": "sdk.syncPersonAttributes",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": { "type": "string", "enum": ["false"] },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["native"] },
+                { "type": "string", "enum": ["browser"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["react-native"] },
+                { "type": "string", "enum": ["web"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkPerson",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/SdkPerson" } }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_SdkValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/SdkPersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_SdkPersonNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_SdkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/SdkSyncPersonAttributesBody" }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/sync-transaction": {
+      "post": {
+        "tags": ["sdk"],
+        "operationId": "sdk.syncTransaction",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": { "type": "string", "enum": ["false"] },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["native"] },
+                { "type": "string", "enum": ["browser"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["react-native"] },
+                { "type": "string", "enum": ["web"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkSyncTransactionResponse",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/SdkSyncTransactionResponse" }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_SdkValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_SdkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "platform": {
+                    "anyOf": [
+                      { "type": "string", "enum": ["ios"] },
+                      { "type": "string", "enum": ["android"] }
+                    ]
+                  },
+                  "productSlug": { "type": "string" },
+                  "purchaseDate": {
+                    "anyOf": [
+                      { "type": "number" },
+                      { "type": "string", "enum": ["NaN"] },
+                      { "type": "string", "enum": ["Infinity"] },
+                      { "type": "string", "enum": ["-Infinity"] }
+                    ]
+                  },
+                  "purchaseToken": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+                  "quantity": {
+                    "anyOf": [
+                      { "type": "number" },
+                      { "type": "string", "enum": ["NaN"] },
+                      { "type": "string", "enum": ["Infinity"] },
+                      { "type": "string", "enum": ["-Infinity"] }
+                    ]
+                  },
+                  "receipt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+                  "transactionId": { "type": "string" }
+                },
+                "required": [
+                  "platform",
+                  "productSlug",
+                  "purchaseDate",
+                  "quantity",
+                  "transactionId"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/evaluate-flags": {
+      "post": {
+        "tags": ["sdk"],
+        "operationId": "sdk.evaluateFeatureFlags",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": { "type": "string", "enum": ["false"] },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["native"] },
+                { "type": "string", "enum": ["browser"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["react-native"] },
+                { "type": "string", "enum": ["web"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkFeatureFlagsResponse",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/SdkFeatureFlagsResponse" }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_SdkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/EvaluateFeatureFlagsBody" }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/resolve-paywall": {
+      "post": {
+        "tags": ["sdk"],
+        "operationId": "sdk.resolvePaywall",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": { "type": "string", "enum": ["false"] },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["native"] },
+                { "type": "string", "enum": ["browser"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["react-native"] },
+                { "type": "string", "enum": ["web"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/SdkResolvedPaywall" },
+                    { "type": "null" }
+                  ]
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_SdkValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_SdkServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/SdkResolvePaywallBody" }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/schema": {
+      "get": {
+        "tags": ["sdk"],
+        "operationId": "sdk.getSchema",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": { "type": "string", "enum": ["false"] },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["true"] },
+                { "type": "string", "enum": ["false"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["native"] },
+                { "type": "string", "enum": ["browser"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                { "type": "string", "enum": ["react-native"] },
+                { "type": "string", "enum": ["web"] }
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": { "type": "string" },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkSchema",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/SdkSchema" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SchemaServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_SchemaServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/users/current": {
+      "get": {
+        "tags": ["users"],
+        "operationId": "users.getUser",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "User",
+            "content": { "application/json": { "schema": { "$ref": "#/components/schemas/User" } } }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/UserServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                    { "$ref": "#/components/schemas/Api_UserServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-configurations": {
+      "get": {
+        "tags": ["payment_provider_configurations"],
+        "operationId": "payment_provider_configurations.listPaymentProviderConfigurations",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": { "$ref": "#/components/schemas/PaymentProviderConfiguration" }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaymentProviderConfigurationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PaymentProviderConfigurationServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-products": {
+      "get": {
+        "tags": ["payment_provider_products"],
+        "operationId": "payment_provider_products.listPaymentProviderProducts",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": { "$ref": "#/components/schemas/PaymentProviderProduct" }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaymentProviderProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_PaymentProviderProductServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints": {
+      "post": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.createWebhookEndpoint",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/WebhookEndpoint" } }
+            }
+          },
+          "400": {
+            "description": "Api/WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/CreateWebhookEndpointBody" }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.listWebhookEndpoints",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": { "$ref": "#/components/schemas/WebhookEndpoint" }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}": {
+      "get": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.getWebhookEndpoint",
+        "parameters": [
+          { "name": "endpointId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/WebhookEndpoint" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "patch": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.updateWebhookEndpoint",
+        "parameters": [
+          { "name": "endpointId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/WebhookEndpoint" } }
+            }
+          },
+          "400": {
+            "description": "Api/WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/UpdateWebhookEndpointBody" }
+            }
+          },
+          "required": true
+        }
+      },
+      "delete": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.deleteWebhookEndpoint",
+        "parameters": [
+          { "name": "endpointId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "204": { "description": "<No Content>" },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/rotate-secret": {
+      "post": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.rotateWebhookSecret",
+        "parameters": [
+          { "name": "endpointId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/WebhookEndpoint" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/test": {
+      "post": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.testWebhookEndpoint",
+        "parameters": [
+          { "name": "endpointId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/WebhookDelivery" } }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries": {
+      "get": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.listWebhookDeliveries",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": { "$ref": "#/components/schemas/WebhookDelivery" }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}": {
+      "get": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.getWebhookDelivery",
+        "parameters": [
+          { "name": "deliveryId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookDeliveryWithAttempts",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/WebhookDeliveryWithAttempts" }
+              }
+            }
+          },
+          "400": {
+            "description": "The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_WebhookDeliveryNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}/retry": {
+      "post": {
+        "tags": ["webhooks"],
+        "operationId": "webhooks.retryWebhookDelivery",
+        "parameters": [
+          { "name": "deliveryId", "in": "path", "schema": { "type": "string" }, "required": true }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": { "schema": { "$ref": "#/components/schemas/WebhookDelivery" } }
+            }
+          },
+          "400": {
+            "description": "Api/WebhookValidationError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookValidationError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_ActionForbiddenError" }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/Api_WebhookDeliveryNotFoundError" }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/Api_WebhookServiceError" },
+                    {
+                      "anyOf": [
+                        { "$ref": "#/components/schemas/Api_AuthenticationError" },
+                        { "$ref": "#/components/schemas/Api_NotAuthenticatedError" }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "Api_ActionForbiddenError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/ActionForbiddenError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "Api_AuthenticationError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/AuthenticationError"] },
+          "cause": { "type": "string" },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "cause", "message"],
+        "additionalProperties": false
+      },
+      "Api_NotAuthenticatedError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/NotAuthenticatedError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "effect_HttpApiSchemaError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["HttpApiSchemaError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "CreateSecretKeyBody": {
+        "type": "object",
+        "properties": { "name": { "type": "string" }, "projectId": { "type": "string" } },
+        "required": ["name", "projectId"],
+        "additionalProperties": false
+      },
+      "ApiKeyWithRawKey": {
+        "type": "object",
+        "properties": {
+          "end": { "type": "string" },
+          "id": { "type": "string" },
+          "isPublic": { "type": "boolean" },
+          "name": { "type": "string" },
+          "prefix": { "type": "string" },
+          "projectId": { "type": "string" },
+          "rawKey": { "type": "string" }
+        },
+        "required": ["end", "id", "isPublic", "name", "prefix", "projectId", "rawKey"],
+        "additionalProperties": false
+      },
+      "Api_ApiKeyServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/ApiKeyServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "ApiKey": {
+        "type": "object",
+        "properties": {
+          "end": { "type": "string" },
+          "id": { "type": "string" },
+          "isPublic": { "type": "boolean" },
+          "name": { "type": "string" },
+          "prefix": { "type": "string" },
+          "projectId": { "type": "string" },
+          "rawKey": { "anyOf": [{ "type": "string" }, { "type": "null" }] }
+        },
+        "required": ["end", "id", "isPublic", "name", "prefix", "projectId"],
+        "additionalProperties": false
+      },
+      "Api_ApiKeyNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/ApiKeyNotFoundError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "CreatePersonBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": { "type": "string" },
+          "email": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }
+        },
+        "required": ["distinctId"],
+        "additionalProperties": false
+      },
+      "Person": {
+        "type": "object",
+        "properties": {
+          "personId": { "type": "string" },
+          "distinctId": { "type": "string" },
+          "email": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }
+        },
+        "required": ["personId", "distinctId", "email", "name"],
+        "additionalProperties": false
+      },
+      "Api_PersonInvalidAnonymousIdError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/PersonInvalidAnonymousIdError"] },
+          "id": { "type": "string", "allOf": [{ "minLength": 1 }] }
+        },
+        "required": ["_tag", "id"],
+        "additionalProperties": false
+      },
+      "Api_PersonServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/PersonServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "Api_PersonNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/PersonNotFoundError"] },
+          "id": { "type": "string", "allOf": [{ "minLength": 1 }] }
+        },
+        "required": ["_tag", "id"],
+        "additionalProperties": false
+      },
+      "CreateOrganizationBody": {
+        "type": "object",
+        "properties": { "name": { "type": "string" } },
+        "required": ["name"],
+        "additionalProperties": false
+      },
+      "Organization": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "slug": { "type": "string" }
+        },
+        "required": ["id", "name", "slug"],
+        "additionalProperties": false
+      },
+      "Api_OrganizationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/OrganizationServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "Perk": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "projectId": { "type": "string" },
+          "slug": { "type": "string" }
+        },
+        "required": ["id", "name", "projectId", "slug"],
+        "additionalProperties": false
+      },
+      "Api_PerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/PerkServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "PaywallLocation": {
+        "type": "object",
+        "properties": {
+          "description": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "projectId": { "type": "string" },
+          "slug": { "type": "string" }
+        },
+        "required": ["description", "id", "name", "projectId", "slug"],
+        "additionalProperties": false
+      },
+      "Api_PaywallLocationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/PaywallLocationServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "SchemaLocation": {
+        "type": "object",
+        "properties": {
+          "description": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "type": "string" },
+          "slug": { "type": "string" }
+        },
+        "required": ["description", "name", "slug"],
+        "additionalProperties": false
+      },
+      "SchemaPerk": {
+        "type": "object",
+        "properties": { "name": { "type": "string" }, "slug": { "type": "string" } },
+        "required": ["name", "slug"],
+        "additionalProperties": false
+      },
+      "SchemaProductProvider": {
+        "type": "object",
+        "properties": {
+          "configuration": { "type": "object", "additionalProperties": { "type": "null" } },
+          "providerId": {
+            "anyOf": [
+              { "type": "string", "enum": ["appleAppStore"] },
+              { "type": "string", "enum": ["googlePlay"] }
+            ]
+          }
+        },
+        "required": ["configuration", "providerId"],
+        "additionalProperties": false
+      },
+      "SchemaProduct": {
+        "type": "object",
+        "properties": {
+          "name": { "type": "string" },
+          "perks": { "type": "array", "items": { "type": "string" } },
+          "providers": {
+            "type": "array",
+            "items": { "$ref": "#/components/schemas/SchemaProductProvider" }
+          },
+          "slug": { "type": "string" },
+          "type": { "type": "string", "enum": ["subscription"] }
+        },
+        "required": ["name", "perks", "providers", "slug", "type"],
+        "additionalProperties": false
+      },
+      "ProjectSchemaResponse": {
+        "type": "object",
+        "properties": {
+          "enabledProviders": {
+            "type": "array",
+            "items": {
+              "anyOf": [
+                { "type": "string", "enum": ["appleAppStore"] },
+                { "type": "string", "enum": ["googlePlay"] }
+              ]
+            }
+          },
+          "locations": {
+            "type": "array",
+            "items": { "$ref": "#/components/schemas/SchemaLocation" }
+          },
+          "perks": { "type": "array", "items": { "$ref": "#/components/schemas/SchemaPerk" } },
+          "products": {
+            "type": "array",
+            "items": { "$ref": "#/components/schemas/SchemaProduct" }
+          },
+          "version": { "type": "string" }
+        },
+        "required": ["enabledProviders", "locations", "perks", "products", "version"],
+        "additionalProperties": false
+      },
+      "Api_SchemaServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/SchemaServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "SchemaVersion": {
+        "type": "object",
+        "properties": { "version": { "type": "string" } },
+        "required": ["version"],
+        "additionalProperties": false
+      },
+      "CreateProjectBody": {
+        "type": "object",
+        "properties": { "name": { "type": "string" }, "organizationId": { "type": "string" } },
+        "required": ["name", "organizationId"],
+        "additionalProperties": false
+      },
+      "Project": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "slug": { "type": "string" }
+        },
+        "required": ["id", "name", "slug"],
+        "additionalProperties": false
+      },
+      "Api_ProjectServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/ProjectServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "Product": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "projectId": { "type": "string" },
+          "slug": { "type": "string" },
+          "type": {
+            "anyOf": [
+              { "type": "string", "enum": ["subscription"] },
+              { "type": "string", "enum": ["one-time"] },
+              { "type": "string", "enum": ["one-time-consumable"] }
+            ]
+          }
+        },
+        "required": ["id", "name", "projectId", "slug", "type"],
+        "additionalProperties": false
+      },
+      "Api_ProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/ProductServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "ProductPerk": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "perkId": { "type": "string" },
+          "productId": { "type": "string" }
+        },
+        "required": ["id", "perkId", "productId"],
+        "additionalProperties": false
+      },
+      "Api_ProductPerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/ProductPerkServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "Api_ProductPerkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/ProductPerkValidationError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "SdkEntitlementGrant": {
+        "type": "object",
+        "properties": {
+          "expiresAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "perkId": { "type": "string" },
+          "source": {
+            "anyOf": [
+              { "type": "string", "enum": ["subscription"] },
+              { "type": "string", "enum": ["purchase"] },
+              { "type": "string", "enum": ["manual"] }
+            ]
+          },
+          "sourceId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "sourcePersonId": { "type": "string" },
+          "status": {
+            "anyOf": [
+              { "type": "string", "enum": ["active"] },
+              { "type": "string", "enum": ["expired"] }
+            ]
+          }
+        },
+        "required": ["expiresAt", "perkId", "source", "sourceId", "sourcePersonId", "status"],
+        "additionalProperties": false
+      },
+      "SdkPurchaseHistoryEntry": {
+        "type": "object",
+        "properties": {
+          "createdAt": { "type": "string" },
+          "productId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "providerKey": { "type": "string" },
+          "purchaseId": { "type": "string" },
+          "sourcePersonId": { "type": "string" },
+          "type": {
+            "anyOf": [
+              { "type": "string", "enum": ["one_time"] },
+              { "type": "string", "enum": ["subscription"] }
+            ]
+          }
+        },
+        "required": [
+          "createdAt",
+          "productId",
+          "providerKey",
+          "purchaseId",
+          "sourcePersonId",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCurrentSubscription": {
+        "type": "object",
+        "properties": {
+          "expiresAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "productId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "status": {
+            "anyOf": [
+              { "type": "string", "enum": ["none"] },
+              { "type": "string", "enum": ["active"] },
+              { "type": "string", "enum": ["canceled"] },
+              { "type": "string", "enum": ["past_due"] },
+              { "type": "string", "enum": ["trialing"] }
+            ]
+          },
+          "subscriptionId": { "anyOf": [{ "type": "string" }, { "type": "null" }] }
+        },
+        "required": ["expiresAt", "productId", "status", "subscriptionId"],
+        "additionalProperties": false
+      },
+      "SdkSubscriptionHistoryEntry": {
+        "type": "object",
+        "properties": {
+          "canceledAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "expiresAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "isTrial": { "type": "boolean" },
+          "productId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "sourcePersonId": { "type": "string" },
+          "startsAt": { "type": "string" },
+          "status": {
+            "anyOf": [
+              { "type": "string", "enum": ["active"] },
+              { "type": "string", "enum": ["canceled"] },
+              { "type": "string", "enum": ["expired"] },
+              { "type": "string", "enum": ["trialing"] },
+              { "type": "string", "enum": ["past_due"] }
+            ]
+          },
+          "subscriptionId": { "type": "string" }
+        },
+        "required": [
+          "canceledAt",
+          "expiresAt",
+          "isTrial",
+          "productId",
+          "sourcePersonId",
+          "startsAt",
+          "status",
+          "subscriptionId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkPerson": {
+        "type": "object",
+        "properties": {
+          "distinctId": { "type": "string" },
+          "email": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "entitlements": {
+            "type": "object",
+            "properties": {
+              "grants": {
+                "type": "array",
+                "items": { "$ref": "#/components/schemas/SdkEntitlementGrant" }
+              }
+            },
+            "required": ["grants"],
+            "additionalProperties": false
+          },
+          "name": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "personId": { "type": "string" },
+          "purchases": {
+            "type": "object",
+            "properties": {
+              "history": {
+                "type": "array",
+                "items": { "$ref": "#/components/schemas/SdkPurchaseHistoryEntry" }
+              }
+            },
+            "required": ["history"],
+            "additionalProperties": false
+          },
+          "snapshotContext": {
+            "type": "object",
+            "properties": {
+              "includedPersonIds": { "type": "array", "items": { "type": "string" } },
+              "migrationJobId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+              "mode": {
+                "anyOf": [
+                  { "type": "string", "enum": ["persisted"] },
+                  { "type": "string", "enum": ["temporary_pending_transfer"] }
+                ]
+              }
+            },
+            "required": ["includedPersonIds", "migrationJobId", "mode"],
+            "additionalProperties": false
+          },
+          "subscriptions": {
+            "type": "object",
+            "properties": {
+              "current": {
+                "anyOf": [
+                  { "$ref": "#/components/schemas/SdkCurrentSubscription" },
+                  { "type": "null" }
+                ]
+              },
+              "history": {
+                "type": "array",
+                "items": { "$ref": "#/components/schemas/SdkSubscriptionHistoryEntry" }
+              }
+            },
+            "required": ["current", "history"],
+            "additionalProperties": false
+          }
+        },
+        "required": [
+          "distinctId",
+          "email",
+          "entitlements",
+          "name",
+          "personId",
+          "purchases",
+          "snapshotContext",
+          "subscriptions"
+        ],
+        "additionalProperties": false
+      },
+      "Api_SdkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/SdkServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "Api_SdkPersonNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/SdkPersonNotFoundError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "Api_SdkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/SdkValidationError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "SdkIdentifyBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": { "type": "string" },
+          "email": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    { "type": "string" },
+                    {
+                      "anyOf": [
+                        { "type": "number" },
+                        { "type": "string", "enum": ["NaN"] },
+                        { "type": "string", "enum": ["Infinity"] },
+                        { "type": "string", "enum": ["-Infinity"] }
+                      ]
+                    },
+                    { "type": "boolean" },
+                    { "type": "null" }
+                  ]
+                }
+              },
+              { "type": "null" }
+            ]
+          }
+        },
+        "required": ["distinctId"],
+        "additionalProperties": false
+      },
+      "Api_SdkPersonAlreadyIdentifiedError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/SdkPersonAlreadyIdentifiedError"] },
+          "distinctId": { "type": "string" }
+        },
+        "required": ["_tag", "distinctId"],
+        "additionalProperties": false
+      },
+      "SdkSyncPersonAttributesBody": {
+        "type": "object",
+        "properties": {
+          "email": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    { "type": "string" },
+                    {
+                      "anyOf": [
+                        { "type": "number" },
+                        { "type": "string", "enum": ["NaN"] },
+                        { "type": "string", "enum": ["Infinity"] },
+                        { "type": "string", "enum": ["-Infinity"] }
+                      ]
+                    },
+                    { "type": "boolean" },
+                    { "type": "null" }
+                  ]
+                }
+              },
+              { "type": "null" }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkSyncTransactionResponse": {
+        "type": "object",
+        "properties": { "accepted": { "type": "boolean" } },
+        "required": ["accepted"],
+        "additionalProperties": false
+      },
+      "EvaluateFeatureFlagsBody": {
+        "type": "object",
+        "properties": {
+          "flagKeys": {
+            "anyOf": [{ "type": "array", "items": { "type": "string" } }, { "type": "null" }]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagResult": {
+        "type": "object",
+        "properties": {
+          "enabled": { "type": "boolean" },
+          "key": { "type": "string" },
+          "payload": { "anyOf": [{ "type": "null" }, { "type": "null" }] },
+          "variantKey": { "anyOf": [{ "type": "string" }, { "type": "null" }] }
+        },
+        "required": ["enabled", "key", "payload", "variantKey"],
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagsResponse": {
+        "type": "object",
+        "properties": {
+          "flags": {
+            "type": "array",
+            "items": { "$ref": "#/components/schemas/SdkFeatureFlagResult" }
+          }
+        },
+        "required": ["flags"],
+        "additionalProperties": false
+      },
+      "SdkResolvePaywallBody": {
+        "type": "object",
+        "properties": { "locationSlug": { "type": "string" } },
+        "required": ["locationSlug"],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywallShowing": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "paywall": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "id": { "type": "string" },
+                  "name": { "type": "string" },
+                  "slug": { "type": "string" }
+                },
+                "required": ["id", "name", "slug"],
+                "additionalProperties": false
+              },
+              { "type": "null" }
+            ]
+          },
+          "paywallId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "paywallRelease": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "htmlUrl": { "type": "string" },
+                  "publishedAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+                  "releaseId": { "type": "string" },
+                  "version": {
+                    "anyOf": [
+                      { "type": "number" },
+                      { "type": "string", "enum": ["NaN"] },
+                      { "type": "string", "enum": ["Infinity"] },
+                      { "type": "string", "enum": ["-Infinity"] }
+                    ]
+                  }
+                },
+                "required": ["htmlUrl", "publishedAt", "releaseId", "version"],
+                "additionalProperties": false
+              },
+              { "type": "null" }
+            ]
+          },
+          "paywallReleaseId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "startedAt": { "type": "string" },
+          "type": {
+            "anyOf": [
+              { "type": "string", "enum": ["paywall_release"] },
+              { "type": "string", "enum": ["feature_flag"] }
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "paywall",
+          "paywallId",
+          "paywallRelease",
+          "paywallReleaseId",
+          "startedAt",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywall": {
+        "type": "object",
+        "properties": {
+          "location": {
+            "type": "object",
+            "properties": {
+              "id": { "type": "string" },
+              "name": { "type": "string" },
+              "slug": { "type": "string" }
+            },
+            "required": ["id", "name", "slug"],
+            "additionalProperties": false
+          },
+          "showing": { "$ref": "#/components/schemas/SdkResolvedPaywallShowing" }
+        },
+        "required": ["location", "showing"],
+        "additionalProperties": false
+      },
+      "SdkSchemaLocation": {
+        "type": "object",
+        "properties": {
+          "description": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "type": "string" },
+          "slug": { "type": "string" }
+        },
+        "required": ["description", "name", "slug"],
+        "additionalProperties": false
+      },
+      "SdkSchemaPerk": {
+        "type": "object",
+        "properties": { "name": { "type": "string" }, "slug": { "type": "string" } },
+        "required": ["name", "slug"],
+        "additionalProperties": false
+      },
+      "SdkSchemaProduct": {
+        "type": "object",
+        "properties": {
+          "configuration": {
+            "type": "object",
+            "properties": {
+              "perks": {
+                "type": "object",
+                "additionalProperties": { "type": "boolean", "enum": [true] }
+              },
+              "providers": {
+                "type": "object",
+                "properties": {
+                  "appleAppStore": {
+                    "anyOf": [
+                      { "type": "object", "additionalProperties": { "type": "null" } },
+                      { "type": "null" }
+                    ]
+                  },
+                  "googlePlay": {
+                    "anyOf": [
+                      { "type": "object", "additionalProperties": { "type": "null" } },
+                      { "type": "null" }
+                    ]
+                  }
+                },
+                "additionalProperties": false
+              }
+            },
+            "required": ["perks", "providers"],
+            "additionalProperties": false
+          },
+          "properties": {
+            "type": "object",
+            "properties": { "name": { "type": "string" } },
+            "required": ["name"],
+            "additionalProperties": false
+          },
+          "slug": { "type": "string" },
+          "type": { "type": "string", "enum": ["subscription"] }
+        },
+        "required": ["configuration", "properties", "slug", "type"],
+        "additionalProperties": false
+      },
+      "SdkSchema": {
+        "type": "object",
+        "properties": {
+          "locations": {
+            "type": "object",
+            "additionalProperties": { "$ref": "#/components/schemas/SdkSchemaLocation" }
+          },
+          "perks": {
+            "type": "object",
+            "additionalProperties": { "$ref": "#/components/schemas/SdkSchemaPerk" }
+          },
+          "products": {
+            "type": "object",
+            "additionalProperties": { "$ref": "#/components/schemas/SdkSchemaProduct" }
+          },
+          "version": { "type": "string" }
+        },
+        "required": ["locations", "perks", "products", "version"],
+        "additionalProperties": false
+      },
+      "User": {
+        "type": "object",
+        "properties": {
+          "createdAt": { "type": "string" },
+          "email": { "type": "string" },
+          "emailVerified": { "type": "boolean" },
+          "id": { "type": "string" },
+          "image": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "type": "string" },
+          "organizations": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": { "type": "string" },
+                "logo": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+                "name": { "type": "string" },
+                "slug": { "type": "string" }
+              },
+              "required": ["id", "logo", "name", "slug"],
+              "additionalProperties": false
+            }
+          },
+          "projects": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": { "type": "string" },
+                "logo": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+                "name": { "type": "string" },
+                "organizationId": { "type": "string" },
+                "slug": { "type": "string" }
+              },
+              "required": ["id", "logo", "name", "organizationId", "slug"],
+              "additionalProperties": false
+            }
+          },
+          "updatedAt": { "type": "string" }
+        },
+        "required": [
+          "createdAt",
+          "email",
+          "emailVerified",
+          "id",
+          "image",
+          "name",
+          "organizations",
+          "projects",
+          "updatedAt"
+        ],
+        "additionalProperties": false
+      },
+      "Api_UserServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/UserServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "PaymentProviderConfiguration": {
+        "type": "object",
+        "properties": {
+          "enabled": { "type": "boolean" },
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "projectId": { "type": "string" },
+          "providerId": { "type": "string" }
+        },
+        "required": ["enabled", "id", "name", "projectId", "providerId"],
+        "additionalProperties": false
+      },
+      "Api_PaymentProviderConfigurationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/PaymentProviderConfigurationServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "PaymentProviderProduct": {
+        "type": "object",
+        "properties": {
+          "configuration": { "type": "object", "additionalProperties": { "type": "null" } },
+          "id": { "type": "string" },
+          "paymentProviderConfigurationId": { "type": "string" },
+          "productId": { "type": "string" },
+          "providerId": { "type": "string" }
+        },
+        "required": [
+          "configuration",
+          "id",
+          "paymentProviderConfigurationId",
+          "productId",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaymentProviderProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/PaymentProviderProductServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "CreateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "events": { "type": "array", "items": { "type": "string" } },
+          "name": { "type": "string" },
+          "url": { "type": "string" }
+        },
+        "required": ["events", "name", "url"],
+        "additionalProperties": false
+      },
+      "WebhookEndpoint": {
+        "type": "object",
+        "properties": {
+          "consecutiveFailures": {
+            "anyOf": [
+              { "type": "number" },
+              { "type": "string", "enum": ["NaN"] },
+              { "type": "string", "enum": ["Infinity"] },
+              { "type": "string", "enum": ["-Infinity"] }
+            ]
+          },
+          "createdAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "description": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "events": {
+            "type": "array",
+            "items": {
+              "anyOf": [
+                { "type": "string", "enum": ["person.created"] },
+                { "type": "string", "enum": ["person.updated"] },
+                { "type": "string", "enum": ["person.deleted"] },
+                { "type": "string", "enum": ["subscription.created"] },
+                { "type": "string", "enum": ["subscription.renewed"] },
+                { "type": "string", "enum": ["subscription.cancelled"] },
+                { "type": "string", "enum": ["subscription.expired"] },
+                { "type": "string", "enum": ["purchase.completed"] },
+                { "type": "string", "enum": ["purchase.refunded"] }
+              ]
+            }
+          },
+          "id": { "type": "string" },
+          "lastSuccessAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "name": { "type": "string" },
+          "projectId": { "type": "string" },
+          "secret": { "type": "string" },
+          "status": {
+            "anyOf": [
+              { "type": "string", "enum": ["active"] },
+              { "type": "string", "enum": ["disabled"] },
+              { "type": "string", "enum": ["failed"] }
+            ]
+          },
+          "url": { "type": "string" }
+        },
+        "required": [
+          "consecutiveFailures",
+          "createdAt",
+          "description",
+          "events",
+          "id",
+          "lastSuccessAt",
+          "name",
+          "projectId",
+          "secret",
+          "status",
+          "url"
+        ],
+        "additionalProperties": false
+      },
+      "Api_WebhookValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/WebhookValidationError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "Api_WebhookServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/WebhookServiceError"] },
+          "cause": { "type": "string" }
+        },
+        "required": ["_tag", "cause"],
+        "additionalProperties": false
+      },
+      "Api_WebhookEndpointNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/WebhookEndpointNotFoundError"] },
+          "endpointId": { "type": "string" }
+        },
+        "required": ["_tag", "endpointId"],
+        "additionalProperties": false
+      },
+      "UpdateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [{ "anyOf": [{ "type": "string" }, { "type": "null" }] }, { "type": "null" }]
+          },
+          "events": {
+            "anyOf": [{ "type": "array", "items": { "type": "string" } }, { "type": "null" }]
+          },
+          "name": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "status": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  { "type": "string", "enum": ["active"] },
+                  { "type": "string", "enum": ["disabled"] }
+                ]
+              },
+              { "type": "null" }
+            ]
+          },
+          "url": { "anyOf": [{ "type": "string" }, { "type": "null" }] }
+        },
+        "additionalProperties": false
+      },
+      "WebhookDelivery": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              { "type": "number" },
+              { "type": "string", "enum": ["NaN"] },
+              { "type": "string", "enum": ["Infinity"] },
+              { "type": "string", "enum": ["-Infinity"] }
+            ]
+          },
+          "completedAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "createdAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "eventOccurredAt": { "type": "string" },
+          "eventType": { "type": "string" },
+          "id": { "type": "string" },
+          "maxAttempts": {
+            "anyOf": [
+              { "type": "number" },
+              { "type": "string", "enum": ["NaN"] },
+              { "type": "string", "enum": ["Infinity"] },
+              { "type": "string", "enum": ["-Infinity"] }
+            ]
+          },
+          "nextAttemptAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "payload": { "type": "null" },
+          "projectId": { "type": "string" },
+          "status": {
+            "anyOf": [
+              { "type": "string", "enum": ["pending"] },
+              { "type": "string", "enum": ["in_progress"] },
+              { "type": "string", "enum": ["succeeded"] },
+              { "type": "string", "enum": ["failed"] },
+              { "type": "string", "enum": ["exhausted"] }
+            ]
+          },
+          "webhookEndpointId": { "type": "string" }
+        },
+        "required": [
+          "attemptCount",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryAttempt": {
+        "type": "object",
+        "properties": {
+          "attemptNumber": {
+            "anyOf": [
+              { "type": "number" },
+              { "type": "string", "enum": ["NaN"] },
+              { "type": "string", "enum": ["Infinity"] },
+              { "type": "string", "enum": ["-Infinity"] }
+            ]
+          },
+          "createdAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "durationMs": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  { "type": "number" },
+                  { "type": "string", "enum": ["NaN"] },
+                  { "type": "string", "enum": ["Infinity"] },
+                  { "type": "string", "enum": ["-Infinity"] }
+                ]
+              },
+              { "type": "null" }
+            ]
+          },
+          "errorMessage": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "id": { "type": "string" },
+          "responseBody": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "statusCode": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  { "type": "number" },
+                  { "type": "string", "enum": ["NaN"] },
+                  { "type": "string", "enum": ["Infinity"] },
+                  { "type": "string", "enum": ["-Infinity"] }
+                ]
+              },
+              { "type": "null" }
+            ]
+          },
+          "succeeded": { "type": "boolean" }
+        },
+        "required": [
+          "attemptNumber",
+          "createdAt",
+          "durationMs",
+          "errorMessage",
+          "id",
+          "responseBody",
+          "statusCode",
+          "succeeded"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryWithAttempts": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              { "type": "number" },
+              { "type": "string", "enum": ["NaN"] },
+              { "type": "string", "enum": ["Infinity"] },
+              { "type": "string", "enum": ["-Infinity"] }
+            ]
+          },
+          "attempts": {
+            "type": "array",
+            "items": { "$ref": "#/components/schemas/WebhookDeliveryAttempt" }
+          },
+          "completedAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "createdAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "eventOccurredAt": { "type": "string" },
+          "eventType": { "type": "string" },
+          "id": { "type": "string" },
+          "maxAttempts": {
+            "anyOf": [
+              { "type": "number" },
+              { "type": "string", "enum": ["NaN"] },
+              { "type": "string", "enum": ["Infinity"] },
+              { "type": "string", "enum": ["-Infinity"] }
+            ]
+          },
+          "nextAttemptAt": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
+          "payload": { "type": "null" },
+          "projectId": { "type": "string" },
+          "status": {
+            "anyOf": [
+              { "type": "string", "enum": ["pending"] },
+              { "type": "string", "enum": ["in_progress"] },
+              { "type": "string", "enum": ["succeeded"] },
+              { "type": "string", "enum": ["failed"] },
+              { "type": "string", "enum": ["exhausted"] }
+            ]
+          },
+          "webhookEndpointId": { "type": "string" }
+        },
+        "required": [
+          "attemptCount",
+          "attempts",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_WebhookDeliveryNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["Api/WebhookDeliveryNotFoundError"] },
+          "deliveryId": { "type": "string" }
+        },
+        "required": ["_tag", "deliveryId"],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {}
+  },
+  "security": [],
+  "tags": [
+    { "name": "auth" },
+    { "name": "api_keys" },
+    { "name": "persons" },
+    { "name": "organizations" },
+    { "name": "perks" },
+    { "name": "paywall_locations" },
+    { "name": "schema" },
+    { "name": "projects" },
+    { "name": "products" },
+    { "name": "product_perks" },
+    { "name": "sdk" },
+    { "name": "users" },
+    { "name": "payment_provider_configurations" },
+    { "name": "payment_provider_products" },
+    { "name": "webhooks" }
+  ]
+}
diff --git a/packages/generated-clients/openapi/event-capture.json b/packages/generated-clients/openapi/event-capture.json
index 0cc0bf2f5..7baa97abb 100644
--- a/packages/generated-clients/openapi/event-capture.json
+++ b/packages/generated-clients/openapi/event-capture.json
@@ -1 +1,380 @@
-{"openapi":"3.1.0","info":{"title":"Api","version":"0.0.1"},"paths":{"/i/v1/capture":{"post":{"tags":["event_capture"],"operationId":"event_capture.capture","parameters":[],"security":[],"responses":{"200":{"description":"CaptureAcceptedResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureAcceptedResponse"}}}},"400":{"description":"CaptureInvalidRequestError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/CaptureInvalidRequestError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"401":{"description":"CaptureUnauthorizedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureUnauthorizedError"}}}},"413":{"description":"CapturePayloadTooLargeError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CapturePayloadTooLargeError"}}}},"429":{"description":"CaptureRateLimitedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureRateLimitedError"}}}},"500":{"description":"CaptureInternalServerError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureInternalServerError"}}}},"503":{"description":"CaptureDependencyUnavailableError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureDependencyUnavailableError"}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"uuid":{"type":"string","allOf":[{"minLength":1}]},"event":{"type":"string","allOf":[{"minLength":1}]},"context":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}},"properties":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}},"distinct_id":{"type":"string","allOf":[{"minLength":1}]},"session_id":{"anyOf":[{"type":"string","allOf":[{"minLength":1}]},{"type":"null"}]},"timestamp":{"anyOf":[{"type":"string","allOf":[{"format":"date-time"}]},{"type":"null"}]},"sent_at":{"type":"string","allOf":[{"format":"date-time"}]},"token":{"type":"string","allOf":[{"minLength":1}]}},"required":["uuid","event","context","properties","distinct_id","sent_at","token"],"additionalProperties":false}}},"required":true}}},"/i/v1/batch":{"post":{"tags":["event_capture"],"operationId":"event_capture.batch","parameters":[],"security":[],"responses":{"200":{"description":"CaptureAcceptedResponse","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureAcceptedResponse"}}}},"400":{"description":"CaptureInvalidRequestError | The request or response did not match the expected schema","content":{"application/json":{"schema":{"anyOf":[{"$ref":"#/components/schemas/CaptureInvalidRequestError"},{"$ref":"#/components/schemas/effect_HttpApiSchemaError"}]}}}},"401":{"description":"CaptureUnauthorizedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureUnauthorizedError"}}}},"413":{"description":"CapturePayloadTooLargeError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CapturePayloadTooLargeError"}}}},"429":{"description":"CaptureRateLimitedError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureRateLimitedError"}}}},"500":{"description":"CaptureInternalServerError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureInternalServerError"}}}},"503":{"description":"CaptureDependencyUnavailableError","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CaptureDependencyUnavailableError"}}}}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"events":{"type":"array","prefixItems":[{"type":"object","properties":{"uuid":{"type":"string","allOf":[{"minLength":1}]},"event":{"type":"string","allOf":[{"minLength":1}]},"context":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}},"properties":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}},"distinct_id":{"type":"string","allOf":[{"minLength":1}]},"session_id":{"anyOf":[{"type":"string","allOf":[{"minLength":1}]},{"type":"null"}]},"timestamp":{"anyOf":[{"type":"string","allOf":[{"format":"date-time"}]},{"type":"null"}]}},"required":["uuid","event","context","properties","distinct_id"],"additionalProperties":false}],"minItems":1,"items":{"type":"object","properties":{"uuid":{"type":"string","allOf":[{"minLength":1}]},"event":{"type":"string","allOf":[{"minLength":1}]},"context":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}},"properties":{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}},"distinct_id":{"type":"string","allOf":[{"minLength":1}]},"session_id":{"anyOf":[{"type":"string","allOf":[{"minLength":1}]},{"type":"null"}]},"timestamp":{"anyOf":[{"type":"string","allOf":[{"format":"date-time"}]},{"type":"null"}]}},"required":["uuid","event","context","properties","distinct_id"],"additionalProperties":false}},"sent_at":{"type":"string","allOf":[{"format":"date-time"}]},"token":{"type":"string","allOf":[{"minLength":1}]}},"required":["events","sent_at","token"],"additionalProperties":false}}},"required":true}}}},"components":{"schemas":{"Union_":{"anyOf":[{"type":"string"},{"type":"number"},{"type":"boolean"},{"type":"null"},{"type":"array","items":{"$ref":"#/components/schemas/Union_"}},{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_"}}]},"Union_1":{"anyOf":[{"type":"string"},{"type":"number"},{"type":"boolean"},{"type":"null"},{"type":"array","items":{"$ref":"#/components/schemas/Union_1"}},{"type":"object","additionalProperties":{"$ref":"#/components/schemas/Union_1"}}]},"CaptureAcceptedResponse":{"type":"object","properties":{"accepted":{"type":"integer"},"rejected":{"type":"integer"}},"required":["accepted","rejected"],"additionalProperties":false},"CaptureInvalidRequestError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureInvalidRequestError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["invalid_request"]}},"required":["_tag","error","code"],"additionalProperties":false},"effect_HttpApiSchemaError":{"type":"object","properties":{"_tag":{"type":"string","enum":["HttpApiSchemaError"]},"message":{"type":"string"}},"required":["_tag","message"],"additionalProperties":false},"CaptureUnauthorizedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureUnauthorizedError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["unauthorized"]}},"required":["_tag","error","code"],"additionalProperties":false},"CapturePayloadTooLargeError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CapturePayloadTooLargeError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["payload_too_large"]}},"required":["_tag","error","code"],"additionalProperties":false},"CaptureRateLimitedError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureRateLimitedError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["rate_limited"]},"retry_after_ms":{"anyOf":[{"type":"integer"},{"type":"null"}]}},"required":["_tag","error","code"],"additionalProperties":false},"CaptureDependencyUnavailableError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureDependencyUnavailableError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["dependency_unavailable"]}},"required":["_tag","error","code"],"additionalProperties":false},"CaptureInternalServerError":{"type":"object","properties":{"_tag":{"type":"string","enum":["CaptureInternalServerError"]},"error":{"type":"string","allOf":[{"minLength":1}]},"code":{"type":"string","enum":["internal_error"]}},"required":["_tag","error","code"],"additionalProperties":false}},"securitySchemes":{}},"security":[],"tags":[{"name":"event_capture"}]}
+{
+  "openapi": "3.1.0",
+  "info": { "title": "Api", "version": "0.0.1" },
+  "paths": {
+    "/i/v1/capture": {
+      "post": {
+        "tags": ["event_capture"],
+        "operationId": "event_capture.capture",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureAcceptedResponse" }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/CaptureInvalidRequestError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureUnauthorizedError" }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CapturePayloadTooLargeError" }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureRateLimitedError" }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureInternalServerError" }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureDependencyUnavailableError" }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "uuid": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                  "event": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                  "context": {
+                    "type": "object",
+                    "additionalProperties": { "$ref": "#/components/schemas/Union_" }
+                  },
+                  "properties": {
+                    "type": "object",
+                    "additionalProperties": { "$ref": "#/components/schemas/Union_1" }
+                  },
+                  "distinct_id": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                  "session_id": {
+                    "anyOf": [
+                      { "type": "string", "allOf": [{ "minLength": 1 }] },
+                      { "type": "null" }
+                    ]
+                  },
+                  "timestamp": {
+                    "anyOf": [
+                      { "type": "string", "allOf": [{ "format": "date-time" }] },
+                      { "type": "null" }
+                    ]
+                  },
+                  "sent_at": { "type": "string", "allOf": [{ "format": "date-time" }] },
+                  "token": { "type": "string", "allOf": [{ "minLength": 1 }] }
+                },
+                "required": [
+                  "uuid",
+                  "event",
+                  "context",
+                  "properties",
+                  "distinct_id",
+                  "sent_at",
+                  "token"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/i/v1/batch": {
+      "post": {
+        "tags": ["event_capture"],
+        "operationId": "event_capture.batch",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureAcceptedResponse" }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError | The request or response did not match the expected schema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    { "$ref": "#/components/schemas/CaptureInvalidRequestError" },
+                    { "$ref": "#/components/schemas/effect_HttpApiSchemaError" }
+                  ]
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureUnauthorizedError" }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CapturePayloadTooLargeError" }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureRateLimitedError" }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureInternalServerError" }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": { "$ref": "#/components/schemas/CaptureDependencyUnavailableError" }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "events": {
+                    "type": "array",
+                    "prefixItems": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "uuid": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                          "event": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                          "context": {
+                            "type": "object",
+                            "additionalProperties": { "$ref": "#/components/schemas/Union_" }
+                          },
+                          "properties": {
+                            "type": "object",
+                            "additionalProperties": { "$ref": "#/components/schemas/Union_1" }
+                          },
+                          "distinct_id": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                          "session_id": {
+                            "anyOf": [
+                              { "type": "string", "allOf": [{ "minLength": 1 }] },
+                              { "type": "null" }
+                            ]
+                          },
+                          "timestamp": {
+                            "anyOf": [
+                              { "type": "string", "allOf": [{ "format": "date-time" }] },
+                              { "type": "null" }
+                            ]
+                          }
+                        },
+                        "required": ["uuid", "event", "context", "properties", "distinct_id"],
+                        "additionalProperties": false
+                      }
+                    ],
+                    "minItems": 1,
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "uuid": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                        "event": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                        "context": {
+                          "type": "object",
+                          "additionalProperties": { "$ref": "#/components/schemas/Union_" }
+                        },
+                        "properties": {
+                          "type": "object",
+                          "additionalProperties": { "$ref": "#/components/schemas/Union_1" }
+                        },
+                        "distinct_id": { "type": "string", "allOf": [{ "minLength": 1 }] },
+                        "session_id": {
+                          "anyOf": [
+                            { "type": "string", "allOf": [{ "minLength": 1 }] },
+                            { "type": "null" }
+                          ]
+                        },
+                        "timestamp": {
+                          "anyOf": [
+                            { "type": "string", "allOf": [{ "format": "date-time" }] },
+                            { "type": "null" }
+                          ]
+                        }
+                      },
+                      "required": ["uuid", "event", "context", "properties", "distinct_id"],
+                      "additionalProperties": false
+                    }
+                  },
+                  "sent_at": { "type": "string", "allOf": [{ "format": "date-time" }] },
+                  "token": { "type": "string", "allOf": [{ "minLength": 1 }] }
+                },
+                "required": ["events", "sent_at", "token"],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "Union_": {
+        "anyOf": [
+          { "type": "string" },
+          { "type": "number" },
+          { "type": "boolean" },
+          { "type": "null" },
+          { "type": "array", "items": { "$ref": "#/components/schemas/Union_" } },
+          { "type": "object", "additionalProperties": { "$ref": "#/components/schemas/Union_" } }
+        ]
+      },
+      "Union_1": {
+        "anyOf": [
+          { "type": "string" },
+          { "type": "number" },
+          { "type": "boolean" },
+          { "type": "null" },
+          { "type": "array", "items": { "$ref": "#/components/schemas/Union_1" } },
+          { "type": "object", "additionalProperties": { "$ref": "#/components/schemas/Union_1" } }
+        ]
+      },
+      "CaptureAcceptedResponse": {
+        "type": "object",
+        "properties": { "accepted": { "type": "integer" }, "rejected": { "type": "integer" } },
+        "required": ["accepted", "rejected"],
+        "additionalProperties": false
+      },
+      "CaptureInvalidRequestError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["CaptureInvalidRequestError"] },
+          "error": { "type": "string", "allOf": [{ "minLength": 1 }] },
+          "code": { "type": "string", "enum": ["invalid_request"] }
+        },
+        "required": ["_tag", "error", "code"],
+        "additionalProperties": false
+      },
+      "effect_HttpApiSchemaError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["HttpApiSchemaError"] },
+          "message": { "type": "string" }
+        },
+        "required": ["_tag", "message"],
+        "additionalProperties": false
+      },
+      "CaptureUnauthorizedError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["CaptureUnauthorizedError"] },
+          "error": { "type": "string", "allOf": [{ "minLength": 1 }] },
+          "code": { "type": "string", "enum": ["unauthorized"] }
+        },
+        "required": ["_tag", "error", "code"],
+        "additionalProperties": false
+      },
+      "CapturePayloadTooLargeError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["CapturePayloadTooLargeError"] },
+          "error": { "type": "string", "allOf": [{ "minLength": 1 }] },
+          "code": { "type": "string", "enum": ["payload_too_large"] }
+        },
+        "required": ["_tag", "error", "code"],
+        "additionalProperties": false
+      },
+      "CaptureRateLimitedError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["CaptureRateLimitedError"] },
+          "error": { "type": "string", "allOf": [{ "minLength": 1 }] },
+          "code": { "type": "string", "enum": ["rate_limited"] },
+          "retry_after_ms": { "anyOf": [{ "type": "integer" }, { "type": "null" }] }
+        },
+        "required": ["_tag", "error", "code"],
+        "additionalProperties": false
+      },
+      "CaptureDependencyUnavailableError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["CaptureDependencyUnavailableError"] },
+          "error": { "type": "string", "allOf": [{ "minLength": 1 }] },
+          "code": { "type": "string", "enum": ["dependency_unavailable"] }
+        },
+        "required": ["_tag", "error", "code"],
+        "additionalProperties": false
+      },
+      "CaptureInternalServerError": {
+        "type": "object",
+        "properties": {
+          "_tag": { "type": "string", "enum": ["CaptureInternalServerError"] },
+          "error": { "type": "string", "allOf": [{ "minLength": 1 }] },
+          "code": { "type": "string", "enum": ["internal_error"] }
+        },
+        "required": ["_tag", "error", "code"],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {}
+  },
+  "security": [],
+  "tags": [{ "name": "event_capture" }]
+}
diff --git a/packages/generated-clients/openapi/preview/core.json b/packages/generated-clients/openapi/preview/core.json
index e8aefec47..2ee44721b 100644
--- a/packages/generated-clients/openapi/preview/core.json
+++ b/packages/generated-clients/openapi/preview/core.json
@@ -7,9 +7,7 @@
   "paths": {
     "/api/v1/auth/session": {
       "get": {
-        "tags": [
-          "auth"
-        ],
+        "tags": ["auth"],
         "operationId": "auth.session",
         "parameters": [],
         "security": [
@@ -38,21 +36,15 @@
                       "anyOf": [
                         {
                           "type": "string",
-                          "enum": [
-                            "api-key"
-                          ]
+                          "enum": ["api-key"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "publishable-key"
-                          ]
+                          "enum": ["publishable-key"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "secret-key"
-                          ]
+                          "enum": ["secret-key"]
                         }
                       ]
                     },
@@ -74,11 +66,7 @@
                             "type": "string"
                           }
                         },
-                        "required": [
-                          "id",
-                          "name",
-                          "slug"
-                        ],
+                        "required": ["id", "name", "slug"],
                         "additionalProperties": false
                       }
                     },
@@ -100,22 +88,12 @@
                             "type": "string"
                           }
                         },
-                        "required": [
-                          "id",
-                          "name",
-                          "organizationId",
-                          "slug"
-                        ],
+                        "required": ["id", "name", "organizationId", "slug"],
                         "additionalProperties": false
                       }
                     }
                   },
-                  "required": [
-                    "method",
-                    "name",
-                    "organizations",
-                    "projects"
-                  ],
+                  "required": ["method", "name", "organizations", "projects"],
                   "additionalProperties": false
                 }
               }
@@ -163,9 +141,7 @@
     },
     "/api/v1/api-keys": {
       "post": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.createSecretKey",
         "parameters": [],
         "security": [
@@ -250,9 +226,7 @@
         }
       },
       "get": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.listApiKeys",
         "parameters": [],
         "security": [
@@ -332,9 +306,7 @@
     },
     "/api/v1/api-keys/{apiKeyId}": {
       "get": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.getApiKeyById",
         "parameters": [
           {
@@ -428,9 +400,7 @@
         }
       },
       "delete": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.deleteApiKey",
         "parameters": [
           {
@@ -519,9 +489,7 @@
     },
     "/api/v1/api-keys/{apiKeyId}/rotate": {
       "post": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.rotateSecretKey",
         "parameters": [
           {
@@ -617,9 +585,7 @@
     },
     "/api/v1/customers": {
       "post": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.createCustomer",
         "parameters": [],
         "security": [
@@ -711,9 +677,7 @@
         }
       },
       "get": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.listCustomers",
         "parameters": [],
         "security": [
@@ -793,9 +757,7 @@
     },
     "/api/v1/customers/{customerId}": {
       "get": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.getCustomerById",
         "parameters": [
           {
@@ -891,9 +853,7 @@
     },
     "/api/v1/customers/by-distinct-id/{distinctId}": {
       "get": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.byDistinctId",
         "parameters": [
           {
@@ -989,9 +949,7 @@
     },
     "/api/v1/organizations": {
       "post": {
-        "tags": [
-          "organizations"
-        ],
+        "tags": ["organizations"],
         "operationId": "organizations.createOrganization",
         "parameters": [],
         "security": [
@@ -1068,9 +1026,7 @@
     },
     "/api/v1/perks": {
       "get": {
-        "tags": [
-          "perks"
-        ],
+        "tags": ["perks"],
         "operationId": "perks.listPerks",
         "parameters": [],
         "security": [
@@ -1150,9 +1106,7 @@
     },
     "/api/v1/paywall-locations": {
       "get": {
-        "tags": [
-          "paywall_locations"
-        ],
+        "tags": ["paywall_locations"],
         "operationId": "paywall_locations.listPaywallLocations",
         "parameters": [],
         "security": [
@@ -1232,9 +1186,7 @@
     },
     "/api/v1/projects": {
       "post": {
-        "tags": [
-          "projects"
-        ],
+        "tags": ["projects"],
         "operationId": "projects.createProject",
         "parameters": [],
         "security": [
@@ -1324,9 +1276,7 @@
     },
     "/api/v1/projects/{organizationId}": {
       "get": {
-        "tags": [
-          "projects"
-        ],
+        "tags": ["projects"],
         "operationId": "projects.listProjects",
         "parameters": [
           {
@@ -1415,9 +1365,7 @@
     },
     "/api/v1/products": {
       "get": {
-        "tags": [
-          "products"
-        ],
+        "tags": ["products"],
         "operationId": "products.listProducts",
         "parameters": [],
         "security": [
@@ -1497,9 +1445,7 @@
     },
     "/api/v1/product-perks/by-product-id/{productId}": {
       "get": {
-        "tags": [
-          "product_perks"
-        ],
+        "tags": ["product_perks"],
         "operationId": "product_perks.listProductPerksByProductId",
         "parameters": [
           {
@@ -1595,9 +1541,7 @@
     },
     "/api/v1/sdk/get-customer": {
       "get": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.getCustomer",
         "parameters": [
           {
@@ -1659,9 +1603,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -1672,15 +1614,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -1708,15 +1646,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -1767,15 +1701,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -1833,15 +1763,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -1955,9 +1881,7 @@
     },
     "/api/v1/sdk/identify": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.identify",
         "parameters": [
           {
@@ -2019,9 +1943,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -2032,15 +1954,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2068,15 +1986,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2127,15 +2041,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -2193,15 +2103,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -2325,9 +2231,7 @@
     },
     "/api/v1/sdk/sync-customer-attributes": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.syncCustomerAttributes",
         "parameters": [
           {
@@ -2389,9 +2293,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -2402,15 +2304,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2438,15 +2336,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2497,15 +2391,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -2563,15 +2453,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -2685,9 +2571,7 @@
     },
     "/api/v1/sdk/sync-transaction": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.syncTransaction",
         "parameters": [
           {
@@ -2749,9 +2633,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -2762,15 +2644,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2798,15 +2676,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2857,15 +2731,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -2923,15 +2793,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -3041,15 +2907,11 @@
                     "anyOf": [
                       {
                         "type": "string",
-                        "enum": [
-                          "ios"
-                        ]
+                        "enum": ["ios"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "android"
-                        ]
+                        "enum": ["android"]
                       }
                     ]
                   },
@@ -3063,21 +2925,15 @@
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "NaN"
-                        ]
+                        "enum": ["NaN"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "Infinity"
-                        ]
+                        "enum": ["Infinity"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "-Infinity"
-                        ]
+                        "enum": ["-Infinity"]
                       }
                     ]
                   },
@@ -3098,21 +2954,15 @@
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "NaN"
-                        ]
+                        "enum": ["NaN"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "Infinity"
-                        ]
+                        "enum": ["Infinity"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "-Infinity"
-                        ]
+                        "enum": ["-Infinity"]
                       }
                     ]
                   },
@@ -3130,13 +2980,7 @@
                     "type": "string"
                   }
                 },
-                "required": [
-                  "platform",
-                  "productId",
-                  "purchaseDate",
-                  "quantity",
-                  "transactionId"
-                ],
+                "required": ["platform", "productId", "purchaseDate", "quantity", "transactionId"],
                 "additionalProperties": false
               }
             }
@@ -3147,9 +2991,7 @@
     },
     "/api/v1/sdk/evaluate-flags": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.evaluateFeatureFlags",
         "parameters": [
           {
@@ -3211,9 +3053,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -3224,15 +3064,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3260,15 +3096,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3319,15 +3151,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -3385,15 +3213,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -3500,9 +3324,7 @@
     },
     "/api/v1/sdk/resolve-paywall": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.resolvePaywall",
         "parameters": [
           {
@@ -3564,9 +3386,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -3577,15 +3397,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3613,15 +3429,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3672,15 +3484,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -3738,15 +3546,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -3867,9 +3671,7 @@
     },
     "/api/v1/users/current": {
       "get": {
-        "tags": [
-          "users"
-        ],
+        "tags": ["users"],
         "operationId": "users.getUser",
         "parameters": [],
         "security": [
@@ -3939,9 +3741,7 @@
     },
     "/api/v1/payment-provider-configurations": {
       "get": {
-        "tags": [
-          "payment_provider_configurations"
-        ],
+        "tags": ["payment_provider_configurations"],
         "operationId": "payment_provider_configurations.listPaymentProviderConfigurations",
         "parameters": [],
         "security": [
@@ -4021,9 +3821,7 @@
     },
     "/api/v1/payment-provider-products": {
       "get": {
-        "tags": [
-          "payment_provider_products"
-        ],
+        "tags": ["payment_provider_products"],
         "operationId": "payment_provider_products.listPaymentProviderProducts",
         "parameters": [],
         "security": [
@@ -4103,9 +3901,7 @@
     },
     "/api/v1/changesets/deploy": {
       "post": {
-        "tags": [
-          "changesets"
-        ],
+        "tags": ["changesets"],
         "operationId": "changesets.deployChangeset",
         "parameters": [],
         "security": [
@@ -4195,9 +3991,7 @@
     },
     "/api/v1/webhooks/endpoints": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.createWebhookEndpoint",
         "parameters": [],
         "security": [
@@ -4289,9 +4083,7 @@
         }
       },
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.listWebhookEndpoints",
         "parameters": [],
         "security": [
@@ -4371,9 +4163,7 @@
     },
     "/api/v1/webhooks/endpoints/{endpointId}": {
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.getWebhookEndpoint",
         "parameters": [
           {
@@ -4467,9 +4257,7 @@
         }
       },
       "patch": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.updateWebhookEndpoint",
         "parameters": [
           {
@@ -4580,9 +4368,7 @@
         }
       },
       "delete": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.deleteWebhookEndpoint",
         "parameters": [
           {
@@ -4671,9 +4457,7 @@
     },
     "/api/v1/webhooks/endpoints/{endpointId}/rotate-secret": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.rotateWebhookSecret",
         "parameters": [
           {
@@ -4769,9 +4553,7 @@
     },
     "/api/v1/webhooks/endpoints/{endpointId}/test": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.testWebhookEndpoint",
         "parameters": [
           {
@@ -4867,9 +4649,7 @@
     },
     "/api/v1/webhooks/deliveries": {
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.listWebhookDeliveries",
         "parameters": [],
         "security": [
@@ -4949,9 +4729,7 @@
     },
     "/api/v1/webhooks/deliveries/{deliveryId}": {
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.getWebhookDelivery",
         "parameters": [
           {
@@ -5047,9 +4825,7 @@
     },
     "/api/v1/webhooks/deliveries/{deliveryId}/retry": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.retryWebhookDelivery",
         "parameters": [
           {
@@ -5158,18 +4934,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ActionForbiddenError"
-            ]
+            "enum": ["ActionForbiddenError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "AuthenticationError": {
@@ -5177,9 +4948,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "AuthenticationError"
-            ]
+            "enum": ["AuthenticationError"]
           },
           "cause": {
             "type": "string"
@@ -5188,11 +4957,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause",
-          "message"
-        ],
+        "required": ["_tag", "cause", "message"],
         "additionalProperties": false
       },
       "NotAuthenticatedError": {
@@ -5200,18 +4965,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "NotAuthenticatedError"
-            ]
+            "enum": ["NotAuthenticatedError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "effect_HttpApiSchemaError": {
@@ -5219,18 +4979,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "HttpApiSchemaError"
-            ]
+            "enum": ["HttpApiSchemaError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "CreateSecretKeyBody": {
@@ -5243,10 +4998,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "name",
-          "projectId"
-        ],
+        "required": ["name", "projectId"],
         "additionalProperties": false
       },
       "ApiKeyWithRawKey": {
@@ -5274,15 +5026,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "end",
-          "id",
-          "isPublic",
-          "name",
-          "prefix",
-          "projectId",
-          "rawKey"
-        ],
+        "required": ["end", "id", "isPublic", "name", "prefix", "projectId", "rawKey"],
         "additionalProperties": false
       },
       "ApiKeyServiceError": {
@@ -5290,18 +5034,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ApiKeyServiceError"
-            ]
+            "enum": ["ApiKeyServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "ApiKey": {
@@ -5336,14 +5075,7 @@
             ]
           }
         },
-        "required": [
-          "end",
-          "id",
-          "isPublic",
-          "name",
-          "prefix",
-          "projectId"
-        ],
+        "required": ["end", "id", "isPublic", "name", "prefix", "projectId"],
         "additionalProperties": false
       },
       "ApiKeyNotFoundError": {
@@ -5351,18 +5083,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ApiKeyNotFoundError"
-            ]
+            "enum": ["ApiKeyNotFoundError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "CreateCustomerBody": {
@@ -5392,9 +5119,7 @@
             ]
           }
         },
-        "required": [
-          "distinctId"
-        ],
+        "required": ["distinctId"],
         "additionalProperties": false
       },
       "Customer": {
@@ -5427,12 +5152,7 @@
             ]
           }
         },
-        "required": [
-          "customerId",
-          "distinctId",
-          "email",
-          "name"
-        ],
+        "required": ["customerId", "distinctId", "email", "name"],
         "additionalProperties": false
       },
       "CustomerInvalidAnonymousIdError": {
@@ -5440,9 +5160,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CustomerInvalidAnonymousIdError"
-            ]
+            "enum": ["CustomerInvalidAnonymousIdError"]
           },
           "id": {
             "type": "string",
@@ -5453,10 +5171,7 @@
             ]
           }
         },
-        "required": [
-          "_tag",
-          "id"
-        ],
+        "required": ["_tag", "id"],
         "additionalProperties": false
       },
       "CustomerServiceError": {
@@ -5464,18 +5179,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CustomerServiceError"
-            ]
+            "enum": ["CustomerServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "CustomerNotFoundError": {
@@ -5483,9 +5193,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CustomerNotFoundError"
-            ]
+            "enum": ["CustomerNotFoundError"]
           },
           "id": {
             "type": "string",
@@ -5496,10 +5204,7 @@
             ]
           }
         },
-        "required": [
-          "_tag",
-          "id"
-        ],
+        "required": ["_tag", "id"],
         "additionalProperties": false
       },
       "CreateOrganizationBody": {
@@ -5509,9 +5214,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "name"
-        ],
+        "required": ["name"],
         "additionalProperties": false
       },
       "Organization": {
@@ -5527,11 +5230,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "name",
-          "slug"
-        ],
+        "required": ["id", "name", "slug"],
         "additionalProperties": false
       },
       "OrganizationServiceError": {
@@ -5539,18 +5238,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "OrganizationServiceError"
-            ]
+            "enum": ["OrganizationServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "Perk": {
@@ -5569,12 +5263,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "name",
-          "projectId",
-          "slug"
-        ],
+        "required": ["id", "name", "projectId", "slug"],
         "additionalProperties": false
       },
       "PerkServiceError": {
@@ -5582,18 +5271,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PerkServiceError"
-            ]
+            "enum": ["PerkServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "PaywallLocation": {
@@ -5622,13 +5306,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "description",
-          "id",
-          "name",
-          "projectId",
-          "slug"
-        ],
+        "required": ["description", "id", "name", "projectId", "slug"],
         "additionalProperties": false
       },
       "PaywallLocationServiceError": {
@@ -5636,18 +5314,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PaywallLocationServiceError"
-            ]
+            "enum": ["PaywallLocationServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "CreateProjectBody": {
@@ -5660,10 +5333,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "name",
-          "organizationId"
-        ],
+        "required": ["name", "organizationId"],
         "additionalProperties": false
       },
       "Project": {
@@ -5679,11 +5349,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "name",
-          "slug"
-        ],
+        "required": ["id", "name", "slug"],
         "additionalProperties": false
       },
       "ProjectServiceError": {
@@ -5691,18 +5357,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProjectServiceError"
-            ]
+            "enum": ["ProjectServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "Product": {
@@ -5724,32 +5385,20 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "subscription"
-                ]
+                "enum": ["subscription"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "one-time"
-                ]
+                "enum": ["one-time"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "one-time-consumable"
-                ]
+                "enum": ["one-time-consumable"]
               }
             ]
           }
         },
-        "required": [
-          "id",
-          "name",
-          "projectId",
-          "slug",
-          "type"
-        ],
+        "required": ["id", "name", "projectId", "slug", "type"],
         "additionalProperties": false
       },
       "ProductServiceError": {
@@ -5757,18 +5406,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProductServiceError"
-            ]
+            "enum": ["ProductServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "ProductPerk": {
@@ -5784,11 +5428,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "perkId",
-          "productId"
-        ],
+        "required": ["id", "perkId", "productId"],
         "additionalProperties": false
       },
       "ProductPerkServiceError": {
@@ -5796,18 +5436,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProductPerkServiceError"
-            ]
+            "enum": ["ProductPerkServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "ProductPerkValidationError": {
@@ -5815,18 +5450,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProductPerkValidationError"
-            ]
+            "enum": ["ProductPerkValidationError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "SdkCustomer": {
@@ -5859,12 +5489,7 @@
             ]
           }
         },
-        "required": [
-          "customerId",
-          "distinctId",
-          "email",
-          "name"
-        ],
+        "required": ["customerId", "distinctId", "email", "name"],
         "additionalProperties": false
       },
       "SdkServiceError": {
@@ -5872,18 +5497,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkServiceError"
-            ]
+            "enum": ["SdkServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "SdkCustomerNotFoundError": {
@@ -5891,18 +5511,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkCustomerNotFoundError"
-            ]
+            "enum": ["SdkCustomerNotFoundError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "SdkValidationError": {
@@ -5910,18 +5525,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkValidationError"
-            ]
+            "enum": ["SdkValidationError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "SdkIdentifyBody": {
@@ -5966,21 +5576,15 @@
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "NaN"
-                          ]
+                          "enum": ["NaN"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "Infinity"
-                          ]
+                          "enum": ["Infinity"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "-Infinity"
-                          ]
+                          "enum": ["-Infinity"]
                         }
                       ]
                     },
@@ -5999,9 +5603,7 @@
             ]
           }
         },
-        "required": [
-          "distinctId"
-        ],
+        "required": ["distinctId"],
         "additionalProperties": false
       },
       "SdkCustomerAlreadyIdentifiedError": {
@@ -6009,18 +5611,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkCustomerAlreadyIdentifiedError"
-            ]
+            "enum": ["SdkCustomerAlreadyIdentifiedError"]
           },
           "distinctId": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "distinctId"
-        ],
+        "required": ["_tag", "distinctId"],
         "additionalProperties": false
       },
       "SdkSyncCustomerAttributesBody": {
@@ -6062,21 +5659,15 @@
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "NaN"
-                          ]
+                          "enum": ["NaN"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "Infinity"
-                          ]
+                          "enum": ["Infinity"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "-Infinity"
-                          ]
+                          "enum": ["-Infinity"]
                         }
                       ]
                     },
@@ -6104,9 +5695,7 @@
             "type": "boolean"
           }
         },
-        "required": [
-          "accepted"
-        ],
+        "required": ["accepted"],
         "additionalProperties": false
       },
       "EvaluateFeatureFlagsBody": {
@@ -6158,12 +5747,7 @@
             ]
           }
         },
-        "required": [
-          "enabled",
-          "key",
-          "payload",
-          "variantKey"
-        ],
+        "required": ["enabled", "key", "payload", "variantKey"],
         "additionalProperties": false
       },
       "SdkFeatureFlagsResponse": {
@@ -6176,9 +5760,7 @@
             }
           }
         },
-        "required": [
-          "flags"
-        ],
+        "required": ["flags"],
         "additionalProperties": false
       },
       "SdkResolvePaywallBody": {
@@ -6188,9 +5770,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "locationSlug"
-        ],
+        "required": ["locationSlug"],
         "additionalProperties": false
       },
       "SdkResolvedPaywallShowing": {
@@ -6214,11 +5794,7 @@
                     "type": "string"
                   }
                 },
-                "required": [
-                  "id",
-                  "name",
-                  "slug"
-                ],
+                "required": ["id", "name", "slug"],
                 "additionalProperties": false
               },
               {
@@ -6264,31 +5840,20 @@
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "NaN"
-                        ]
+                        "enum": ["NaN"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "Infinity"
-                        ]
+                        "enum": ["Infinity"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "-Infinity"
-                        ]
+                        "enum": ["-Infinity"]
                       }
                     ]
                   }
                 },
-                "required": [
-                  "htmlUrl",
-                  "publishedAt",
-                  "releaseId",
-                  "version"
-                ],
+                "required": ["htmlUrl", "publishedAt", "releaseId", "version"],
                 "additionalProperties": false
               },
               {
@@ -6313,15 +5878,11 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "paywall_release"
-                ]
+                "enum": ["paywall_release"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "feature_flag"
-                ]
+                "enum": ["feature_flag"]
               }
             ]
           }
@@ -6353,21 +5914,14 @@
                 "type": "string"
               }
             },
-            "required": [
-              "id",
-              "name",
-              "slug"
-            ],
+            "required": ["id", "name", "slug"],
             "additionalProperties": false
           },
           "showing": {
             "$ref": "#/components/schemas/SdkResolvedPaywallShowing"
           }
         },
-        "required": [
-          "location",
-          "showing"
-        ],
+        "required": ["location", "showing"],
         "additionalProperties": false
       },
       "User": {
@@ -6423,12 +5977,7 @@
                   "type": "string"
                 }
               },
-              "required": [
-                "id",
-                "logo",
-                "name",
-                "slug"
-              ],
+              "required": ["id", "logo", "name", "slug"],
               "additionalProperties": false
             }
           },
@@ -6460,13 +6009,7 @@
                   "type": "string"
                 }
               },
-              "required": [
-                "id",
-                "logo",
-                "name",
-                "organizationId",
-                "slug"
-              ],
+              "required": ["id", "logo", "name", "organizationId", "slug"],
               "additionalProperties": false
             }
           },
@@ -6492,18 +6035,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "UserServiceError"
-            ]
+            "enum": ["UserServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "PaymentProviderConfiguration": {
@@ -6525,13 +6063,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "enabled",
-          "id",
-          "name",
-          "projectId",
-          "providerId"
-        ],
+        "required": ["enabled", "id", "name", "projectId", "providerId"],
         "additionalProperties": false
       },
       "PaymentProviderConfigurationServiceError": {
@@ -6539,18 +6071,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PaymentProviderConfigurationServiceError"
-            ]
+            "enum": ["PaymentProviderConfigurationServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "PaymentProviderProduct": {
@@ -6589,18 +6116,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PaymentProviderProductServiceError"
-            ]
+            "enum": ["PaymentProviderProductServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "DeployChangesetBody": {
@@ -6618,9 +6140,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-paywall-location"
-                          ]
+                          "enum": ["create-paywall-location"]
                         },
                         "key": {
                           "type": "string"
@@ -6652,18 +6172,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6671,9 +6184,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-paywall-location"
-                          ]
+                          "enum": ["update-paywall-location"]
                         },
                         "key": {
                           "type": "string"
@@ -6705,18 +6216,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6724,9 +6228,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "archive-paywall-location"
-                          ]
+                          "enum": ["archive-paywall-location"]
                         },
                         "key": {
                           "type": "string"
@@ -6738,17 +6240,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "slug"
-                          ],
+                          "required": ["slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6756,9 +6252,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-perk"
-                          ]
+                          "enum": ["create-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6773,18 +6267,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6792,9 +6279,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-perk"
-                          ]
+                          "enum": ["update-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6809,18 +6294,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6828,9 +6306,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-perk"
-                          ]
+                          "enum": ["delete-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6842,17 +6318,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "slug"
-                          ],
+                          "required": ["slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6860,9 +6330,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-product"
-                          ]
+                          "enum": ["create-product"]
                         },
                         "key": {
                           "type": "string"
@@ -6877,18 +6345,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6896,9 +6357,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-product"
-                          ]
+                          "enum": ["update-product"]
                         },
                         "key": {
                           "type": "string"
@@ -6913,18 +6372,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6932,9 +6384,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-product"
-                          ]
+                          "enum": ["delete-product"]
                         },
                         "key": {
                           "type": "string"
@@ -6946,17 +6396,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "slug"
-                          ],
+                          "required": ["slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6964,9 +6408,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-product-perk"
-                          ]
+                          "enum": ["create-product-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6981,18 +6423,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "perkSlug",
-                            "productSlug"
-                          ],
+                          "required": ["perkSlug", "productSlug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7000,9 +6435,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-product-perk"
-                          ]
+                          "enum": ["delete-product-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -7017,18 +6450,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "perkSlug",
-                            "productSlug"
-                          ],
+                          "required": ["perkSlug", "productSlug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7036,9 +6462,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-payment-provider-product"
-                          ]
+                          "enum": ["create-payment-provider-product"]
                         },
                         "key": {
                           "type": "string"
@@ -7059,19 +6483,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "configuration",
-                            "productSlug",
-                            "providerId"
-                          ],
+                          "required": ["configuration", "productSlug", "providerId"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7079,9 +6495,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-payment-provider-product"
-                          ]
+                          "enum": ["update-payment-provider-product"]
                         },
                         "key": {
                           "type": "string"
@@ -7102,19 +6516,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "configuration",
-                            "productSlug",
-                            "providerId"
-                          ],
+                          "required": ["configuration", "productSlug", "providerId"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7122,9 +6528,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-payment-provider-product"
-                          ]
+                          "enum": ["delete-payment-provider-product"]
                         },
                         "key": {
                           "type": "string"
@@ -7139,33 +6543,22 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "productSlug",
-                            "providerId"
-                          ],
+                          "required": ["productSlug", "providerId"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     }
                   ]
                 }
               }
             },
-            "required": [
-              "changes"
-            ],
+            "required": ["changes"],
             "additionalProperties": false
           }
         },
-        "required": [
-          "changeset"
-        ],
+        "required": ["changeset"],
         "additionalProperties": false
       },
       "DeployChangesetResponse": {
@@ -7175,9 +6568,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "deploymentId"
-        ],
+        "required": ["deploymentId"],
         "additionalProperties": false
       },
       "ChangesetDeploymentServiceError": {
@@ -7185,18 +6576,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ChangesetDeploymentServiceError"
-            ]
+            "enum": ["ChangesetDeploymentServiceError"]
           },
           "cause": {
             "type": "null"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "CreateWebhookEndpointBody": {
@@ -7225,11 +6611,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "events",
-          "name",
-          "url"
-        ],
+        "required": ["events", "name", "url"],
         "additionalProperties": false
       },
       "WebhookEndpoint": {
@@ -7242,21 +6624,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7286,57 +6662,39 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "customer.created"
-                  ]
+                  "enum": ["customer.created"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "customer.updated"
-                  ]
+                  "enum": ["customer.updated"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "customer.deleted"
-                  ]
+                  "enum": ["customer.deleted"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.created"
-                  ]
+                  "enum": ["subscription.created"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.renewed"
-                  ]
+                  "enum": ["subscription.renewed"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.cancelled"
-                  ]
+                  "enum": ["subscription.cancelled"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.expired"
-                  ]
+                  "enum": ["subscription.expired"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "purchase.completed"
-                  ]
+                  "enum": ["purchase.completed"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "purchase.refunded"
-                  ]
+                  "enum": ["purchase.refunded"]
                 }
               ]
             }
@@ -7367,21 +6725,15 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "active"
-                ]
+                "enum": ["active"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "disabled"
-                ]
+                "enum": ["disabled"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "failed"
-                ]
+                "enum": ["failed"]
               }
             ]
           },
@@ -7409,18 +6761,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookValidationError"
-            ]
+            "enum": ["WebhookValidationError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "WebhookServiceError": {
@@ -7428,18 +6775,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookServiceError"
-            ]
+            "enum": ["WebhookServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "WebhookEndpointNotFoundError": {
@@ -7447,18 +6789,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookEndpointNotFoundError"
-            ]
+            "enum": ["WebhookEndpointNotFoundError"]
           },
           "endpointId": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "endpointId"
-        ],
+        "required": ["_tag", "endpointId"],
         "additionalProperties": false
       },
       "UpdateWebhookEndpointBody": {
@@ -7510,15 +6847,11 @@
                 "anyOf": [
                   {
                     "type": "string",
-                    "enum": [
-                      "active"
-                    ]
+                    "enum": ["active"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "disabled"
-                    ]
+                    "enum": ["disabled"]
                   }
                 ]
               },
@@ -7550,21 +6883,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7604,21 +6931,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7642,33 +6963,23 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "pending"
-                ]
+                "enum": ["pending"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "in_progress"
-                ]
+                "enum": ["in_progress"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "succeeded"
-                ]
+                "enum": ["succeeded"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "failed"
-                ]
+                "enum": ["failed"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "exhausted"
-                ]
+                "enum": ["exhausted"]
               }
             ]
           },
@@ -7702,21 +7013,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7739,21 +7044,15 @@
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "NaN"
-                    ]
+                    "enum": ["NaN"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "Infinity"
-                    ]
+                    "enum": ["Infinity"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "-Infinity"
-                    ]
+                    "enum": ["-Infinity"]
                   }
                 ]
               },
@@ -7794,21 +7093,15 @@
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "NaN"
-                    ]
+                    "enum": ["NaN"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "Infinity"
-                    ]
+                    "enum": ["Infinity"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "-Infinity"
-                    ]
+                    "enum": ["-Infinity"]
                   }
                 ]
               },
@@ -7843,21 +7136,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7903,21 +7190,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7941,33 +7222,23 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "pending"
-                ]
+                "enum": ["pending"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "in_progress"
-                ]
+                "enum": ["in_progress"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "succeeded"
-                ]
+                "enum": ["succeeded"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "failed"
-                ]
+                "enum": ["failed"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "exhausted"
-                ]
+                "enum": ["exhausted"]
               }
             ]
           },
@@ -7997,18 +7268,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookDeliveryNotFoundError"
-            ]
+            "enum": ["WebhookDeliveryNotFoundError"]
           },
           "deliveryId": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "deliveryId"
-        ],
+        "required": ["_tag", "deliveryId"],
         "additionalProperties": false
       }
     },
diff --git a/packages/generated-clients/openapi/preview/event-capture.json b/packages/generated-clients/openapi/preview/event-capture.json
index a219e4a0b..a044bcac1 100644
--- a/packages/generated-clients/openapi/preview/event-capture.json
+++ b/packages/generated-clients/openapi/preview/event-capture.json
@@ -7,9 +7,7 @@
   "paths": {
     "/capture": {
       "post": {
-        "tags": [
-          "event_capture"
-        ],
+        "tags": ["event_capture"],
         "operationId": "event_capture.capture",
         "parameters": [],
         "security": [],
@@ -200,9 +198,7 @@
     },
     "/batch": {
       "post": {
-        "tags": [
-          "event_capture"
-        ],
+        "tags": ["event_capture"],
         "operationId": "event_capture.batch",
         "parameters": [],
         "security": [],
@@ -364,13 +360,7 @@
                             ]
                           }
                         },
-                        "required": [
-                          "uuid",
-                          "event",
-                          "context",
-                          "properties",
-                          "distinct_id"
-                        ],
+                        "required": ["uuid", "event", "context", "properties", "distinct_id"],
                         "additionalProperties": false
                       }
                     ],
@@ -445,13 +435,7 @@
                           ]
                         }
                       },
-                      "required": [
-                        "uuid",
-                        "event",
-                        "context",
-                        "properties",
-                        "distinct_id"
-                      ],
+                      "required": ["uuid", "event", "context", "properties", "distinct_id"],
                       "additionalProperties": false
                     }
                   },
@@ -472,11 +456,7 @@
                     ]
                   }
                 },
-                "required": [
-                  "events",
-                  "sent_at",
-                  "token"
-                ],
+                "required": ["events", "sent_at", "token"],
                 "additionalProperties": false
               }
             }
@@ -554,10 +534,7 @@
             "type": "integer"
           }
         },
-        "required": [
-          "accepted",
-          "rejected"
-        ],
+        "required": ["accepted", "rejected"],
         "additionalProperties": false
       },
       "CaptureInvalidRequestError": {
@@ -565,9 +542,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureInvalidRequestError"
-            ]
+            "enum": ["CaptureInvalidRequestError"]
           },
           "error": {
             "type": "string",
@@ -579,16 +554,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "invalid_request"
-            ]
+            "enum": ["invalid_request"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "effect_HttpApiSchemaError": {
@@ -596,18 +565,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "HttpApiSchemaError"
-            ]
+            "enum": ["HttpApiSchemaError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "CaptureUnauthorizedError": {
@@ -615,9 +579,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureUnauthorizedError"
-            ]
+            "enum": ["CaptureUnauthorizedError"]
           },
           "error": {
             "type": "string",
@@ -629,16 +591,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "unauthorized"
-            ]
+            "enum": ["unauthorized"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CapturePayloadTooLargeError": {
@@ -646,9 +602,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CapturePayloadTooLargeError"
-            ]
+            "enum": ["CapturePayloadTooLargeError"]
           },
           "error": {
             "type": "string",
@@ -660,16 +614,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "payload_too_large"
-            ]
+            "enum": ["payload_too_large"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CaptureRateLimitedError": {
@@ -677,9 +625,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureRateLimitedError"
-            ]
+            "enum": ["CaptureRateLimitedError"]
           },
           "error": {
             "type": "string",
@@ -691,9 +637,7 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "rate_limited"
-            ]
+            "enum": ["rate_limited"]
           },
           "retry_after_ms": {
             "anyOf": [
@@ -706,11 +650,7 @@
             ]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CaptureDependencyUnavailableError": {
@@ -718,9 +658,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureDependencyUnavailableError"
-            ]
+            "enum": ["CaptureDependencyUnavailableError"]
           },
           "error": {
             "type": "string",
@@ -732,16 +670,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "dependency_unavailable"
-            ]
+            "enum": ["dependency_unavailable"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CaptureInternalServerError": {
@@ -749,9 +681,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureInternalServerError"
-            ]
+            "enum": ["CaptureInternalServerError"]
           },
           "error": {
             "type": "string",
@@ -763,16 +693,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "internal_error"
-            ]
+            "enum": ["internal_error"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       }
     },
diff --git a/packages/generated-clients/openapi/production/core.json b/packages/generated-clients/openapi/production/core.json
index e8aefec47..2ee44721b 100644
--- a/packages/generated-clients/openapi/production/core.json
+++ b/packages/generated-clients/openapi/production/core.json
@@ -7,9 +7,7 @@
   "paths": {
     "/api/v1/auth/session": {
       "get": {
-        "tags": [
-          "auth"
-        ],
+        "tags": ["auth"],
         "operationId": "auth.session",
         "parameters": [],
         "security": [
@@ -38,21 +36,15 @@
                       "anyOf": [
                         {
                           "type": "string",
-                          "enum": [
-                            "api-key"
-                          ]
+                          "enum": ["api-key"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "publishable-key"
-                          ]
+                          "enum": ["publishable-key"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "secret-key"
-                          ]
+                          "enum": ["secret-key"]
                         }
                       ]
                     },
@@ -74,11 +66,7 @@
                             "type": "string"
                           }
                         },
-                        "required": [
-                          "id",
-                          "name",
-                          "slug"
-                        ],
+                        "required": ["id", "name", "slug"],
                         "additionalProperties": false
                       }
                     },
@@ -100,22 +88,12 @@
                             "type": "string"
                           }
                         },
-                        "required": [
-                          "id",
-                          "name",
-                          "organizationId",
-                          "slug"
-                        ],
+                        "required": ["id", "name", "organizationId", "slug"],
                         "additionalProperties": false
                       }
                     }
                   },
-                  "required": [
-                    "method",
-                    "name",
-                    "organizations",
-                    "projects"
-                  ],
+                  "required": ["method", "name", "organizations", "projects"],
                   "additionalProperties": false
                 }
               }
@@ -163,9 +141,7 @@
     },
     "/api/v1/api-keys": {
       "post": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.createSecretKey",
         "parameters": [],
         "security": [
@@ -250,9 +226,7 @@
         }
       },
       "get": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.listApiKeys",
         "parameters": [],
         "security": [
@@ -332,9 +306,7 @@
     },
     "/api/v1/api-keys/{apiKeyId}": {
       "get": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.getApiKeyById",
         "parameters": [
           {
@@ -428,9 +400,7 @@
         }
       },
       "delete": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.deleteApiKey",
         "parameters": [
           {
@@ -519,9 +489,7 @@
     },
     "/api/v1/api-keys/{apiKeyId}/rotate": {
       "post": {
-        "tags": [
-          "api_keys"
-        ],
+        "tags": ["api_keys"],
         "operationId": "api_keys.rotateSecretKey",
         "parameters": [
           {
@@ -617,9 +585,7 @@
     },
     "/api/v1/customers": {
       "post": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.createCustomer",
         "parameters": [],
         "security": [
@@ -711,9 +677,7 @@
         }
       },
       "get": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.listCustomers",
         "parameters": [],
         "security": [
@@ -793,9 +757,7 @@
     },
     "/api/v1/customers/{customerId}": {
       "get": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.getCustomerById",
         "parameters": [
           {
@@ -891,9 +853,7 @@
     },
     "/api/v1/customers/by-distinct-id/{distinctId}": {
       "get": {
-        "tags": [
-          "customers"
-        ],
+        "tags": ["customers"],
         "operationId": "customers.byDistinctId",
         "parameters": [
           {
@@ -989,9 +949,7 @@
     },
     "/api/v1/organizations": {
       "post": {
-        "tags": [
-          "organizations"
-        ],
+        "tags": ["organizations"],
         "operationId": "organizations.createOrganization",
         "parameters": [],
         "security": [
@@ -1068,9 +1026,7 @@
     },
     "/api/v1/perks": {
       "get": {
-        "tags": [
-          "perks"
-        ],
+        "tags": ["perks"],
         "operationId": "perks.listPerks",
         "parameters": [],
         "security": [
@@ -1150,9 +1106,7 @@
     },
     "/api/v1/paywall-locations": {
       "get": {
-        "tags": [
-          "paywall_locations"
-        ],
+        "tags": ["paywall_locations"],
         "operationId": "paywall_locations.listPaywallLocations",
         "parameters": [],
         "security": [
@@ -1232,9 +1186,7 @@
     },
     "/api/v1/projects": {
       "post": {
-        "tags": [
-          "projects"
-        ],
+        "tags": ["projects"],
         "operationId": "projects.createProject",
         "parameters": [],
         "security": [
@@ -1324,9 +1276,7 @@
     },
     "/api/v1/projects/{organizationId}": {
       "get": {
-        "tags": [
-          "projects"
-        ],
+        "tags": ["projects"],
         "operationId": "projects.listProjects",
         "parameters": [
           {
@@ -1415,9 +1365,7 @@
     },
     "/api/v1/products": {
       "get": {
-        "tags": [
-          "products"
-        ],
+        "tags": ["products"],
         "operationId": "products.listProducts",
         "parameters": [],
         "security": [
@@ -1497,9 +1445,7 @@
     },
     "/api/v1/product-perks/by-product-id/{productId}": {
       "get": {
-        "tags": [
-          "product_perks"
-        ],
+        "tags": ["product_perks"],
         "operationId": "product_perks.listProductPerksByProductId",
         "parameters": [
           {
@@ -1595,9 +1541,7 @@
     },
     "/api/v1/sdk/get-customer": {
       "get": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.getCustomer",
         "parameters": [
           {
@@ -1659,9 +1603,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -1672,15 +1614,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -1708,15 +1646,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -1767,15 +1701,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -1833,15 +1763,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -1955,9 +1881,7 @@
     },
     "/api/v1/sdk/identify": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.identify",
         "parameters": [
           {
@@ -2019,9 +1943,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -2032,15 +1954,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2068,15 +1986,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2127,15 +2041,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -2193,15 +2103,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -2325,9 +2231,7 @@
     },
     "/api/v1/sdk/sync-customer-attributes": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.syncCustomerAttributes",
         "parameters": [
           {
@@ -2389,9 +2293,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -2402,15 +2304,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2438,15 +2336,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2497,15 +2391,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -2563,15 +2453,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -2685,9 +2571,7 @@
     },
     "/api/v1/sdk/sync-transaction": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.syncTransaction",
         "parameters": [
           {
@@ -2749,9 +2633,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -2762,15 +2644,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2798,15 +2676,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -2857,15 +2731,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -2923,15 +2793,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -3041,15 +2907,11 @@
                     "anyOf": [
                       {
                         "type": "string",
-                        "enum": [
-                          "ios"
-                        ]
+                        "enum": ["ios"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "android"
-                        ]
+                        "enum": ["android"]
                       }
                     ]
                   },
@@ -3063,21 +2925,15 @@
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "NaN"
-                        ]
+                        "enum": ["NaN"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "Infinity"
-                        ]
+                        "enum": ["Infinity"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "-Infinity"
-                        ]
+                        "enum": ["-Infinity"]
                       }
                     ]
                   },
@@ -3098,21 +2954,15 @@
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "NaN"
-                        ]
+                        "enum": ["NaN"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "Infinity"
-                        ]
+                        "enum": ["Infinity"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "-Infinity"
-                        ]
+                        "enum": ["-Infinity"]
                       }
                     ]
                   },
@@ -3130,13 +2980,7 @@
                     "type": "string"
                   }
                 },
-                "required": [
-                  "platform",
-                  "productId",
-                  "purchaseDate",
-                  "quantity",
-                  "transactionId"
-                ],
+                "required": ["platform", "productId", "purchaseDate", "quantity", "transactionId"],
                 "additionalProperties": false
               }
             }
@@ -3147,9 +2991,7 @@
     },
     "/api/v1/sdk/evaluate-flags": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.evaluateFeatureFlags",
         "parameters": [
           {
@@ -3211,9 +3053,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -3224,15 +3064,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3260,15 +3096,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3319,15 +3151,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -3385,15 +3213,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -3500,9 +3324,7 @@
     },
     "/api/v1/sdk/resolve-paywall": {
       "post": {
-        "tags": [
-          "sdk"
-        ],
+        "tags": ["sdk"],
         "operationId": "sdk.resolvePaywall",
         "parameters": [
           {
@@ -3564,9 +3386,7 @@
             "in": "header",
             "schema": {
               "type": "string",
-              "enum": [
-                "false"
-              ]
+              "enum": ["false"]
             },
             "required": true
           },
@@ -3577,15 +3397,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3613,15 +3429,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "true"
-                  ]
+                  "enum": ["true"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "false"
-                  ]
+                  "enum": ["false"]
                 }
               ]
             },
@@ -3672,15 +3484,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "native"
-                  ]
+                  "enum": ["native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "browser"
-                  ]
+                  "enum": ["browser"]
                 }
               ]
             },
@@ -3738,15 +3546,11 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "react-native"
-                  ]
+                  "enum": ["react-native"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "web"
-                  ]
+                  "enum": ["web"]
                 }
               ]
             },
@@ -3867,9 +3671,7 @@
     },
     "/api/v1/users/current": {
       "get": {
-        "tags": [
-          "users"
-        ],
+        "tags": ["users"],
         "operationId": "users.getUser",
         "parameters": [],
         "security": [
@@ -3939,9 +3741,7 @@
     },
     "/api/v1/payment-provider-configurations": {
       "get": {
-        "tags": [
-          "payment_provider_configurations"
-        ],
+        "tags": ["payment_provider_configurations"],
         "operationId": "payment_provider_configurations.listPaymentProviderConfigurations",
         "parameters": [],
         "security": [
@@ -4021,9 +3821,7 @@
     },
     "/api/v1/payment-provider-products": {
       "get": {
-        "tags": [
-          "payment_provider_products"
-        ],
+        "tags": ["payment_provider_products"],
         "operationId": "payment_provider_products.listPaymentProviderProducts",
         "parameters": [],
         "security": [
@@ -4103,9 +3901,7 @@
     },
     "/api/v1/changesets/deploy": {
       "post": {
-        "tags": [
-          "changesets"
-        ],
+        "tags": ["changesets"],
         "operationId": "changesets.deployChangeset",
         "parameters": [],
         "security": [
@@ -4195,9 +3991,7 @@
     },
     "/api/v1/webhooks/endpoints": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.createWebhookEndpoint",
         "parameters": [],
         "security": [
@@ -4289,9 +4083,7 @@
         }
       },
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.listWebhookEndpoints",
         "parameters": [],
         "security": [
@@ -4371,9 +4163,7 @@
     },
     "/api/v1/webhooks/endpoints/{endpointId}": {
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.getWebhookEndpoint",
         "parameters": [
           {
@@ -4467,9 +4257,7 @@
         }
       },
       "patch": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.updateWebhookEndpoint",
         "parameters": [
           {
@@ -4580,9 +4368,7 @@
         }
       },
       "delete": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.deleteWebhookEndpoint",
         "parameters": [
           {
@@ -4671,9 +4457,7 @@
     },
     "/api/v1/webhooks/endpoints/{endpointId}/rotate-secret": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.rotateWebhookSecret",
         "parameters": [
           {
@@ -4769,9 +4553,7 @@
     },
     "/api/v1/webhooks/endpoints/{endpointId}/test": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.testWebhookEndpoint",
         "parameters": [
           {
@@ -4867,9 +4649,7 @@
     },
     "/api/v1/webhooks/deliveries": {
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.listWebhookDeliveries",
         "parameters": [],
         "security": [
@@ -4949,9 +4729,7 @@
     },
     "/api/v1/webhooks/deliveries/{deliveryId}": {
       "get": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.getWebhookDelivery",
         "parameters": [
           {
@@ -5047,9 +4825,7 @@
     },
     "/api/v1/webhooks/deliveries/{deliveryId}/retry": {
       "post": {
-        "tags": [
-          "webhooks"
-        ],
+        "tags": ["webhooks"],
         "operationId": "webhooks.retryWebhookDelivery",
         "parameters": [
           {
@@ -5158,18 +4934,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ActionForbiddenError"
-            ]
+            "enum": ["ActionForbiddenError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "AuthenticationError": {
@@ -5177,9 +4948,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "AuthenticationError"
-            ]
+            "enum": ["AuthenticationError"]
           },
           "cause": {
             "type": "string"
@@ -5188,11 +4957,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause",
-          "message"
-        ],
+        "required": ["_tag", "cause", "message"],
         "additionalProperties": false
       },
       "NotAuthenticatedError": {
@@ -5200,18 +4965,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "NotAuthenticatedError"
-            ]
+            "enum": ["NotAuthenticatedError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "effect_HttpApiSchemaError": {
@@ -5219,18 +4979,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "HttpApiSchemaError"
-            ]
+            "enum": ["HttpApiSchemaError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "CreateSecretKeyBody": {
@@ -5243,10 +4998,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "name",
-          "projectId"
-        ],
+        "required": ["name", "projectId"],
         "additionalProperties": false
       },
       "ApiKeyWithRawKey": {
@@ -5274,15 +5026,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "end",
-          "id",
-          "isPublic",
-          "name",
-          "prefix",
-          "projectId",
-          "rawKey"
-        ],
+        "required": ["end", "id", "isPublic", "name", "prefix", "projectId", "rawKey"],
         "additionalProperties": false
       },
       "ApiKeyServiceError": {
@@ -5290,18 +5034,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ApiKeyServiceError"
-            ]
+            "enum": ["ApiKeyServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "ApiKey": {
@@ -5336,14 +5075,7 @@
             ]
           }
         },
-        "required": [
-          "end",
-          "id",
-          "isPublic",
-          "name",
-          "prefix",
-          "projectId"
-        ],
+        "required": ["end", "id", "isPublic", "name", "prefix", "projectId"],
         "additionalProperties": false
       },
       "ApiKeyNotFoundError": {
@@ -5351,18 +5083,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ApiKeyNotFoundError"
-            ]
+            "enum": ["ApiKeyNotFoundError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "CreateCustomerBody": {
@@ -5392,9 +5119,7 @@
             ]
           }
         },
-        "required": [
-          "distinctId"
-        ],
+        "required": ["distinctId"],
         "additionalProperties": false
       },
       "Customer": {
@@ -5427,12 +5152,7 @@
             ]
           }
         },
-        "required": [
-          "customerId",
-          "distinctId",
-          "email",
-          "name"
-        ],
+        "required": ["customerId", "distinctId", "email", "name"],
         "additionalProperties": false
       },
       "CustomerInvalidAnonymousIdError": {
@@ -5440,9 +5160,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CustomerInvalidAnonymousIdError"
-            ]
+            "enum": ["CustomerInvalidAnonymousIdError"]
           },
           "id": {
             "type": "string",
@@ -5453,10 +5171,7 @@
             ]
           }
         },
-        "required": [
-          "_tag",
-          "id"
-        ],
+        "required": ["_tag", "id"],
         "additionalProperties": false
       },
       "CustomerServiceError": {
@@ -5464,18 +5179,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CustomerServiceError"
-            ]
+            "enum": ["CustomerServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "CustomerNotFoundError": {
@@ -5483,9 +5193,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CustomerNotFoundError"
-            ]
+            "enum": ["CustomerNotFoundError"]
           },
           "id": {
             "type": "string",
@@ -5496,10 +5204,7 @@
             ]
           }
         },
-        "required": [
-          "_tag",
-          "id"
-        ],
+        "required": ["_tag", "id"],
         "additionalProperties": false
       },
       "CreateOrganizationBody": {
@@ -5509,9 +5214,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "name"
-        ],
+        "required": ["name"],
         "additionalProperties": false
       },
       "Organization": {
@@ -5527,11 +5230,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "name",
-          "slug"
-        ],
+        "required": ["id", "name", "slug"],
         "additionalProperties": false
       },
       "OrganizationServiceError": {
@@ -5539,18 +5238,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "OrganizationServiceError"
-            ]
+            "enum": ["OrganizationServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "Perk": {
@@ -5569,12 +5263,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "name",
-          "projectId",
-          "slug"
-        ],
+        "required": ["id", "name", "projectId", "slug"],
         "additionalProperties": false
       },
       "PerkServiceError": {
@@ -5582,18 +5271,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PerkServiceError"
-            ]
+            "enum": ["PerkServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "PaywallLocation": {
@@ -5622,13 +5306,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "description",
-          "id",
-          "name",
-          "projectId",
-          "slug"
-        ],
+        "required": ["description", "id", "name", "projectId", "slug"],
         "additionalProperties": false
       },
       "PaywallLocationServiceError": {
@@ -5636,18 +5314,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PaywallLocationServiceError"
-            ]
+            "enum": ["PaywallLocationServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "CreateProjectBody": {
@@ -5660,10 +5333,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "name",
-          "organizationId"
-        ],
+        "required": ["name", "organizationId"],
         "additionalProperties": false
       },
       "Project": {
@@ -5679,11 +5349,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "name",
-          "slug"
-        ],
+        "required": ["id", "name", "slug"],
         "additionalProperties": false
       },
       "ProjectServiceError": {
@@ -5691,18 +5357,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProjectServiceError"
-            ]
+            "enum": ["ProjectServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "Product": {
@@ -5724,32 +5385,20 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "subscription"
-                ]
+                "enum": ["subscription"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "one-time"
-                ]
+                "enum": ["one-time"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "one-time-consumable"
-                ]
+                "enum": ["one-time-consumable"]
               }
             ]
           }
         },
-        "required": [
-          "id",
-          "name",
-          "projectId",
-          "slug",
-          "type"
-        ],
+        "required": ["id", "name", "projectId", "slug", "type"],
         "additionalProperties": false
       },
       "ProductServiceError": {
@@ -5757,18 +5406,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProductServiceError"
-            ]
+            "enum": ["ProductServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "ProductPerk": {
@@ -5784,11 +5428,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "id",
-          "perkId",
-          "productId"
-        ],
+        "required": ["id", "perkId", "productId"],
         "additionalProperties": false
       },
       "ProductPerkServiceError": {
@@ -5796,18 +5436,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProductPerkServiceError"
-            ]
+            "enum": ["ProductPerkServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "ProductPerkValidationError": {
@@ -5815,18 +5450,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ProductPerkValidationError"
-            ]
+            "enum": ["ProductPerkValidationError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "SdkCustomer": {
@@ -5859,12 +5489,7 @@
             ]
           }
         },
-        "required": [
-          "customerId",
-          "distinctId",
-          "email",
-          "name"
-        ],
+        "required": ["customerId", "distinctId", "email", "name"],
         "additionalProperties": false
       },
       "SdkServiceError": {
@@ -5872,18 +5497,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkServiceError"
-            ]
+            "enum": ["SdkServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "SdkCustomerNotFoundError": {
@@ -5891,18 +5511,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkCustomerNotFoundError"
-            ]
+            "enum": ["SdkCustomerNotFoundError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "SdkValidationError": {
@@ -5910,18 +5525,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkValidationError"
-            ]
+            "enum": ["SdkValidationError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "SdkIdentifyBody": {
@@ -5966,21 +5576,15 @@
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "NaN"
-                          ]
+                          "enum": ["NaN"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "Infinity"
-                          ]
+                          "enum": ["Infinity"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "-Infinity"
-                          ]
+                          "enum": ["-Infinity"]
                         }
                       ]
                     },
@@ -5999,9 +5603,7 @@
             ]
           }
         },
-        "required": [
-          "distinctId"
-        ],
+        "required": ["distinctId"],
         "additionalProperties": false
       },
       "SdkCustomerAlreadyIdentifiedError": {
@@ -6009,18 +5611,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "SdkCustomerAlreadyIdentifiedError"
-            ]
+            "enum": ["SdkCustomerAlreadyIdentifiedError"]
           },
           "distinctId": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "distinctId"
-        ],
+        "required": ["_tag", "distinctId"],
         "additionalProperties": false
       },
       "SdkSyncCustomerAttributesBody": {
@@ -6062,21 +5659,15 @@
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "NaN"
-                          ]
+                          "enum": ["NaN"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "Infinity"
-                          ]
+                          "enum": ["Infinity"]
                         },
                         {
                           "type": "string",
-                          "enum": [
-                            "-Infinity"
-                          ]
+                          "enum": ["-Infinity"]
                         }
                       ]
                     },
@@ -6104,9 +5695,7 @@
             "type": "boolean"
           }
         },
-        "required": [
-          "accepted"
-        ],
+        "required": ["accepted"],
         "additionalProperties": false
       },
       "EvaluateFeatureFlagsBody": {
@@ -6158,12 +5747,7 @@
             ]
           }
         },
-        "required": [
-          "enabled",
-          "key",
-          "payload",
-          "variantKey"
-        ],
+        "required": ["enabled", "key", "payload", "variantKey"],
         "additionalProperties": false
       },
       "SdkFeatureFlagsResponse": {
@@ -6176,9 +5760,7 @@
             }
           }
         },
-        "required": [
-          "flags"
-        ],
+        "required": ["flags"],
         "additionalProperties": false
       },
       "SdkResolvePaywallBody": {
@@ -6188,9 +5770,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "locationSlug"
-        ],
+        "required": ["locationSlug"],
         "additionalProperties": false
       },
       "SdkResolvedPaywallShowing": {
@@ -6214,11 +5794,7 @@
                     "type": "string"
                   }
                 },
-                "required": [
-                  "id",
-                  "name",
-                  "slug"
-                ],
+                "required": ["id", "name", "slug"],
                 "additionalProperties": false
               },
               {
@@ -6264,31 +5840,20 @@
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "NaN"
-                        ]
+                        "enum": ["NaN"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "Infinity"
-                        ]
+                        "enum": ["Infinity"]
                       },
                       {
                         "type": "string",
-                        "enum": [
-                          "-Infinity"
-                        ]
+                        "enum": ["-Infinity"]
                       }
                     ]
                   }
                 },
-                "required": [
-                  "htmlUrl",
-                  "publishedAt",
-                  "releaseId",
-                  "version"
-                ],
+                "required": ["htmlUrl", "publishedAt", "releaseId", "version"],
                 "additionalProperties": false
               },
               {
@@ -6313,15 +5878,11 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "paywall_release"
-                ]
+                "enum": ["paywall_release"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "feature_flag"
-                ]
+                "enum": ["feature_flag"]
               }
             ]
           }
@@ -6353,21 +5914,14 @@
                 "type": "string"
               }
             },
-            "required": [
-              "id",
-              "name",
-              "slug"
-            ],
+            "required": ["id", "name", "slug"],
             "additionalProperties": false
           },
           "showing": {
             "$ref": "#/components/schemas/SdkResolvedPaywallShowing"
           }
         },
-        "required": [
-          "location",
-          "showing"
-        ],
+        "required": ["location", "showing"],
         "additionalProperties": false
       },
       "User": {
@@ -6423,12 +5977,7 @@
                   "type": "string"
                 }
               },
-              "required": [
-                "id",
-                "logo",
-                "name",
-                "slug"
-              ],
+              "required": ["id", "logo", "name", "slug"],
               "additionalProperties": false
             }
           },
@@ -6460,13 +6009,7 @@
                   "type": "string"
                 }
               },
-              "required": [
-                "id",
-                "logo",
-                "name",
-                "organizationId",
-                "slug"
-              ],
+              "required": ["id", "logo", "name", "organizationId", "slug"],
               "additionalProperties": false
             }
           },
@@ -6492,18 +6035,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "UserServiceError"
-            ]
+            "enum": ["UserServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "PaymentProviderConfiguration": {
@@ -6525,13 +6063,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "enabled",
-          "id",
-          "name",
-          "projectId",
-          "providerId"
-        ],
+        "required": ["enabled", "id", "name", "projectId", "providerId"],
         "additionalProperties": false
       },
       "PaymentProviderConfigurationServiceError": {
@@ -6539,18 +6071,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PaymentProviderConfigurationServiceError"
-            ]
+            "enum": ["PaymentProviderConfigurationServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "PaymentProviderProduct": {
@@ -6589,18 +6116,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "PaymentProviderProductServiceError"
-            ]
+            "enum": ["PaymentProviderProductServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "DeployChangesetBody": {
@@ -6618,9 +6140,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-paywall-location"
-                          ]
+                          "enum": ["create-paywall-location"]
                         },
                         "key": {
                           "type": "string"
@@ -6652,18 +6172,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6671,9 +6184,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-paywall-location"
-                          ]
+                          "enum": ["update-paywall-location"]
                         },
                         "key": {
                           "type": "string"
@@ -6705,18 +6216,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6724,9 +6228,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "archive-paywall-location"
-                          ]
+                          "enum": ["archive-paywall-location"]
                         },
                         "key": {
                           "type": "string"
@@ -6738,17 +6240,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "slug"
-                          ],
+                          "required": ["slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6756,9 +6252,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-perk"
-                          ]
+                          "enum": ["create-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6773,18 +6267,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6792,9 +6279,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-perk"
-                          ]
+                          "enum": ["update-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6809,18 +6294,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6828,9 +6306,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-perk"
-                          ]
+                          "enum": ["delete-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6842,17 +6318,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "slug"
-                          ],
+                          "required": ["slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6860,9 +6330,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-product"
-                          ]
+                          "enum": ["create-product"]
                         },
                         "key": {
                           "type": "string"
@@ -6877,18 +6345,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6896,9 +6357,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-product"
-                          ]
+                          "enum": ["update-product"]
                         },
                         "key": {
                           "type": "string"
@@ -6913,18 +6372,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "name",
-                            "slug"
-                          ],
+                          "required": ["name", "slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6932,9 +6384,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-product"
-                          ]
+                          "enum": ["delete-product"]
                         },
                         "key": {
                           "type": "string"
@@ -6946,17 +6396,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "slug"
-                          ],
+                          "required": ["slug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -6964,9 +6408,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-product-perk"
-                          ]
+                          "enum": ["create-product-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -6981,18 +6423,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "perkSlug",
-                            "productSlug"
-                          ],
+                          "required": ["perkSlug", "productSlug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7000,9 +6435,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-product-perk"
-                          ]
+                          "enum": ["delete-product-perk"]
                         },
                         "key": {
                           "type": "string"
@@ -7017,18 +6450,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "perkSlug",
-                            "productSlug"
-                          ],
+                          "required": ["perkSlug", "productSlug"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7036,9 +6462,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "create-payment-provider-product"
-                          ]
+                          "enum": ["create-payment-provider-product"]
                         },
                         "key": {
                           "type": "string"
@@ -7059,19 +6483,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "configuration",
-                            "productSlug",
-                            "providerId"
-                          ],
+                          "required": ["configuration", "productSlug", "providerId"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7079,9 +6495,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "update-payment-provider-product"
-                          ]
+                          "enum": ["update-payment-provider-product"]
                         },
                         "key": {
                           "type": "string"
@@ -7102,19 +6516,11 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "configuration",
-                            "productSlug",
-                            "providerId"
-                          ],
+                          "required": ["configuration", "productSlug", "providerId"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     },
                     {
@@ -7122,9 +6528,7 @@
                       "properties": {
                         "changeType": {
                           "type": "string",
-                          "enum": [
-                            "delete-payment-provider-product"
-                          ]
+                          "enum": ["delete-payment-provider-product"]
                         },
                         "key": {
                           "type": "string"
@@ -7139,33 +6543,22 @@
                               "type": "string"
                             }
                           },
-                          "required": [
-                            "productSlug",
-                            "providerId"
-                          ],
+                          "required": ["productSlug", "providerId"],
                           "additionalProperties": false
                         }
                       },
-                      "required": [
-                        "changeType",
-                        "key",
-                        "payload"
-                      ],
+                      "required": ["changeType", "key", "payload"],
                       "additionalProperties": false
                     }
                   ]
                 }
               }
             },
-            "required": [
-              "changes"
-            ],
+            "required": ["changes"],
             "additionalProperties": false
           }
         },
-        "required": [
-          "changeset"
-        ],
+        "required": ["changeset"],
         "additionalProperties": false
       },
       "DeployChangesetResponse": {
@@ -7175,9 +6568,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "deploymentId"
-        ],
+        "required": ["deploymentId"],
         "additionalProperties": false
       },
       "ChangesetDeploymentServiceError": {
@@ -7185,18 +6576,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "ChangesetDeploymentServiceError"
-            ]
+            "enum": ["ChangesetDeploymentServiceError"]
           },
           "cause": {
             "type": "null"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "CreateWebhookEndpointBody": {
@@ -7225,11 +6611,7 @@
             "type": "string"
           }
         },
-        "required": [
-          "events",
-          "name",
-          "url"
-        ],
+        "required": ["events", "name", "url"],
         "additionalProperties": false
       },
       "WebhookEndpoint": {
@@ -7242,21 +6624,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7286,57 +6662,39 @@
               "anyOf": [
                 {
                   "type": "string",
-                  "enum": [
-                    "customer.created"
-                  ]
+                  "enum": ["customer.created"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "customer.updated"
-                  ]
+                  "enum": ["customer.updated"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "customer.deleted"
-                  ]
+                  "enum": ["customer.deleted"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.created"
-                  ]
+                  "enum": ["subscription.created"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.renewed"
-                  ]
+                  "enum": ["subscription.renewed"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.cancelled"
-                  ]
+                  "enum": ["subscription.cancelled"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "subscription.expired"
-                  ]
+                  "enum": ["subscription.expired"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "purchase.completed"
-                  ]
+                  "enum": ["purchase.completed"]
                 },
                 {
                   "type": "string",
-                  "enum": [
-                    "purchase.refunded"
-                  ]
+                  "enum": ["purchase.refunded"]
                 }
               ]
             }
@@ -7367,21 +6725,15 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "active"
-                ]
+                "enum": ["active"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "disabled"
-                ]
+                "enum": ["disabled"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "failed"
-                ]
+                "enum": ["failed"]
               }
             ]
           },
@@ -7409,18 +6761,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookValidationError"
-            ]
+            "enum": ["WebhookValidationError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "WebhookServiceError": {
@@ -7428,18 +6775,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookServiceError"
-            ]
+            "enum": ["WebhookServiceError"]
           },
           "cause": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "cause"
-        ],
+        "required": ["_tag", "cause"],
         "additionalProperties": false
       },
       "WebhookEndpointNotFoundError": {
@@ -7447,18 +6789,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookEndpointNotFoundError"
-            ]
+            "enum": ["WebhookEndpointNotFoundError"]
           },
           "endpointId": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "endpointId"
-        ],
+        "required": ["_tag", "endpointId"],
         "additionalProperties": false
       },
       "UpdateWebhookEndpointBody": {
@@ -7510,15 +6847,11 @@
                 "anyOf": [
                   {
                     "type": "string",
-                    "enum": [
-                      "active"
-                    ]
+                    "enum": ["active"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "disabled"
-                    ]
+                    "enum": ["disabled"]
                   }
                 ]
               },
@@ -7550,21 +6883,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7604,21 +6931,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7642,33 +6963,23 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "pending"
-                ]
+                "enum": ["pending"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "in_progress"
-                ]
+                "enum": ["in_progress"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "succeeded"
-                ]
+                "enum": ["succeeded"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "failed"
-                ]
+                "enum": ["failed"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "exhausted"
-                ]
+                "enum": ["exhausted"]
               }
             ]
           },
@@ -7702,21 +7013,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7739,21 +7044,15 @@
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "NaN"
-                    ]
+                    "enum": ["NaN"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "Infinity"
-                    ]
+                    "enum": ["Infinity"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "-Infinity"
-                    ]
+                    "enum": ["-Infinity"]
                   }
                 ]
               },
@@ -7794,21 +7093,15 @@
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "NaN"
-                    ]
+                    "enum": ["NaN"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "Infinity"
-                    ]
+                    "enum": ["Infinity"]
                   },
                   {
                     "type": "string",
-                    "enum": [
-                      "-Infinity"
-                    ]
+                    "enum": ["-Infinity"]
                   }
                 ]
               },
@@ -7843,21 +7136,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7903,21 +7190,15 @@
               },
               {
                 "type": "string",
-                "enum": [
-                  "NaN"
-                ]
+                "enum": ["NaN"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "Infinity"
-                ]
+                "enum": ["Infinity"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "-Infinity"
-                ]
+                "enum": ["-Infinity"]
               }
             ]
           },
@@ -7941,33 +7222,23 @@
             "anyOf": [
               {
                 "type": "string",
-                "enum": [
-                  "pending"
-                ]
+                "enum": ["pending"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "in_progress"
-                ]
+                "enum": ["in_progress"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "succeeded"
-                ]
+                "enum": ["succeeded"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "failed"
-                ]
+                "enum": ["failed"]
               },
               {
                 "type": "string",
-                "enum": [
-                  "exhausted"
-                ]
+                "enum": ["exhausted"]
               }
             ]
           },
@@ -7997,18 +7268,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "WebhookDeliveryNotFoundError"
-            ]
+            "enum": ["WebhookDeliveryNotFoundError"]
           },
           "deliveryId": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "deliveryId"
-        ],
+        "required": ["_tag", "deliveryId"],
         "additionalProperties": false
       }
     },
diff --git a/packages/generated-clients/openapi/production/event-capture.json b/packages/generated-clients/openapi/production/event-capture.json
index a219e4a0b..a044bcac1 100644
--- a/packages/generated-clients/openapi/production/event-capture.json
+++ b/packages/generated-clients/openapi/production/event-capture.json
@@ -7,9 +7,7 @@
   "paths": {
     "/capture": {
       "post": {
-        "tags": [
-          "event_capture"
-        ],
+        "tags": ["event_capture"],
         "operationId": "event_capture.capture",
         "parameters": [],
         "security": [],
@@ -200,9 +198,7 @@
     },
     "/batch": {
       "post": {
-        "tags": [
-          "event_capture"
-        ],
+        "tags": ["event_capture"],
         "operationId": "event_capture.batch",
         "parameters": [],
         "security": [],
@@ -364,13 +360,7 @@
                             ]
                           }
                         },
-                        "required": [
-                          "uuid",
-                          "event",
-                          "context",
-                          "properties",
-                          "distinct_id"
-                        ],
+                        "required": ["uuid", "event", "context", "properties", "distinct_id"],
                         "additionalProperties": false
                       }
                     ],
@@ -445,13 +435,7 @@
                           ]
                         }
                       },
-                      "required": [
-                        "uuid",
-                        "event",
-                        "context",
-                        "properties",
-                        "distinct_id"
-                      ],
+                      "required": ["uuid", "event", "context", "properties", "distinct_id"],
                       "additionalProperties": false
                     }
                   },
@@ -472,11 +456,7 @@
                     ]
                   }
                 },
-                "required": [
-                  "events",
-                  "sent_at",
-                  "token"
-                ],
+                "required": ["events", "sent_at", "token"],
                 "additionalProperties": false
               }
             }
@@ -554,10 +534,7 @@
             "type": "integer"
           }
         },
-        "required": [
-          "accepted",
-          "rejected"
-        ],
+        "required": ["accepted", "rejected"],
         "additionalProperties": false
       },
       "CaptureInvalidRequestError": {
@@ -565,9 +542,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureInvalidRequestError"
-            ]
+            "enum": ["CaptureInvalidRequestError"]
           },
           "error": {
             "type": "string",
@@ -579,16 +554,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "invalid_request"
-            ]
+            "enum": ["invalid_request"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "effect_HttpApiSchemaError": {
@@ -596,18 +565,13 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "HttpApiSchemaError"
-            ]
+            "enum": ["HttpApiSchemaError"]
           },
           "message": {
             "type": "string"
           }
         },
-        "required": [
-          "_tag",
-          "message"
-        ],
+        "required": ["_tag", "message"],
         "additionalProperties": false
       },
       "CaptureUnauthorizedError": {
@@ -615,9 +579,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureUnauthorizedError"
-            ]
+            "enum": ["CaptureUnauthorizedError"]
           },
           "error": {
             "type": "string",
@@ -629,16 +591,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "unauthorized"
-            ]
+            "enum": ["unauthorized"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CapturePayloadTooLargeError": {
@@ -646,9 +602,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CapturePayloadTooLargeError"
-            ]
+            "enum": ["CapturePayloadTooLargeError"]
           },
           "error": {
             "type": "string",
@@ -660,16 +614,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "payload_too_large"
-            ]
+            "enum": ["payload_too_large"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CaptureRateLimitedError": {
@@ -677,9 +625,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureRateLimitedError"
-            ]
+            "enum": ["CaptureRateLimitedError"]
           },
           "error": {
             "type": "string",
@@ -691,9 +637,7 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "rate_limited"
-            ]
+            "enum": ["rate_limited"]
           },
           "retry_after_ms": {
             "anyOf": [
@@ -706,11 +650,7 @@
             ]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CaptureDependencyUnavailableError": {
@@ -718,9 +658,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureDependencyUnavailableError"
-            ]
+            "enum": ["CaptureDependencyUnavailableError"]
           },
           "error": {
             "type": "string",
@@ -732,16 +670,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "dependency_unavailable"
-            ]
+            "enum": ["dependency_unavailable"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       },
       "CaptureInternalServerError": {
@@ -749,9 +681,7 @@
         "properties": {
           "_tag": {
             "type": "string",
-            "enum": [
-              "CaptureInternalServerError"
-            ]
+            "enum": ["CaptureInternalServerError"]
           },
           "error": {
             "type": "string",
@@ -763,16 +693,10 @@
           },
           "code": {
             "type": "string",
-            "enum": [
-              "internal_error"
-            ]
+            "enum": ["internal_error"]
           }
         },
-        "required": [
-          "_tag",
-          "error",
-          "code"
-        ],
+        "required": ["_tag", "error", "code"],
         "additionalProperties": false
       }
     },
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
index 6c8acea43..6143fcd99 100644
--- a/packages/generated-clients/src/core/generated.ts
+++ b/packages/generated-clients/src/core/generated.ts
@@ -1,343 +1,400 @@
-import type * as HttpClient from "effect/unstable/http/HttpClient"
-import * as HttpClientError from "effect/unstable/http/HttpClientError"
-import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest"
-import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse"
-import * as Data from "effect/Data"
-import * as Effect from "effect/Effect"
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import * as HttpClientError from "effect/unstable/http/HttpClientError";
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
+import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
 
-export type AuthSession200MethodEnum = "secret-key"
+export type AuthSession200MethodEnum = "secret-key";
 
 export interface AuthSession200 {
-  readonly "method": AuthSession200MethodEnum | AuthSession200MethodEnum | AuthSession200MethodEnum;
-  readonly "name": string;
-  readonly "organizations": ReadonlyArray<{
-  readonly "id": string;
-  readonly "name": string;
-  readonly "slug": string
-}>;
-  readonly "projects": ReadonlyArray<{
-  readonly "id": string;
-  readonly "name": string;
-  readonly "organizationId": string;
-  readonly "slug": string
-}>
-}
-
-export type EffectHttpApiSchemaErrorTag = "HttpApiSchemaError"
+  readonly method: AuthSession200MethodEnum | AuthSession200MethodEnum | AuthSession200MethodEnum;
+  readonly name: string;
+  readonly organizations: ReadonlyArray<{
+    readonly id: string;
+    readonly name: string;
+    readonly slug: string;
+  }>;
+  readonly projects: ReadonlyArray<{
+    readonly id: string;
+    readonly name: string;
+    readonly organizationId: string;
+    readonly slug: string;
+  }>;
+}
+
+export type EffectHttpApiSchemaErrorTag = "HttpApiSchemaError";
 
 export interface EffectHttpApiSchemaError {
-  readonly "_tag": EffectHttpApiSchemaErrorTag;
-  readonly "message": string
+  readonly _tag: EffectHttpApiSchemaErrorTag;
+  readonly message: string;
 }
 
-export type ApiActionForbiddenErrorTag = "Api/ActionForbiddenError"
+export type ApiActionForbiddenErrorTag = "Api/ActionForbiddenError";
 
 export interface ApiActionForbiddenError {
-  readonly "_tag": ApiActionForbiddenErrorTag;
-  readonly "message": string
+  readonly _tag: ApiActionForbiddenErrorTag;
+  readonly message: string;
 }
 
-export type ApiAuthenticationErrorTag = "Api/AuthenticationError"
+export type ApiAuthenticationErrorTag = "Api/AuthenticationError";
 
 export interface ApiAuthenticationError {
-  readonly "_tag": ApiAuthenticationErrorTag;
-  readonly "cause": string;
-  readonly "message": string
+  readonly _tag: ApiAuthenticationErrorTag;
+  readonly cause: string;
+  readonly message: string;
 }
 
-export type ApiNotAuthenticatedErrorTag = "Api/NotAuthenticatedError"
+export type ApiNotAuthenticatedErrorTag = "Api/NotAuthenticatedError";
 
 export interface ApiNotAuthenticatedError {
-  readonly "_tag": ApiNotAuthenticatedErrorTag;
-  readonly "message": string
+  readonly _tag: ApiNotAuthenticatedErrorTag;
+  readonly message: string;
 }
 
-export type AuthSession500 = ApiAuthenticationError | ApiNotAuthenticatedError
+export type AuthSession500 = ApiAuthenticationError | ApiNotAuthenticatedError;
 
 export interface ApiKey {
-  readonly "end": string;
-  readonly "id": string;
-  readonly "isPublic": boolean;
-  readonly "name": string;
-  readonly "prefix": string;
-  readonly "projectId": string;
-  readonly "rawKey"?: string | null | undefined
+  readonly end: string;
+  readonly id: string;
+  readonly isPublic: boolean;
+  readonly name: string;
+  readonly prefix: string;
+  readonly projectId: string;
+  readonly rawKey?: string | null | undefined;
 }
 
-export type ApiKeysListApiKeys200 = ReadonlyArray<ApiKey>
+export type ApiKeysListApiKeys200 = ReadonlyArray<ApiKey>;
 
-export type ApiApiKeyServiceErrorTag = "Api/ApiKeyServiceError"
+export type ApiApiKeyServiceErrorTag = "Api/ApiKeyServiceError";
 
 export interface ApiApiKeyServiceError {
-  readonly "_tag": ApiApiKeyServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiApiKeyServiceErrorTag;
+  readonly cause: string;
 }
 
-export type ApiKeysListApiKeys500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ApiKeysListApiKeys500 =
+  | ApiApiKeyServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface CreateSecretKeyBody {
-  readonly "name": string;
-  readonly "projectId": string
+  readonly name: string;
+  readonly projectId: string;
 }
 
 export interface ApiKeyWithRawKey {
-  readonly "end": string;
-  readonly "id": string;
-  readonly "isPublic": boolean;
-  readonly "name": string;
-  readonly "prefix": string;
-  readonly "projectId": string;
-  readonly "rawKey": string
+  readonly end: string;
+  readonly id: string;
+  readonly isPublic: boolean;
+  readonly name: string;
+  readonly prefix: string;
+  readonly projectId: string;
+  readonly rawKey: string;
 }
 
-export type ApiKeysCreateSecretKey500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ApiKeysCreateSecretKey500 =
+  | ApiApiKeyServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type ApiApiKeyNotFoundErrorTag = "Api/ApiKeyNotFoundError"
+export type ApiApiKeyNotFoundErrorTag = "Api/ApiKeyNotFoundError";
 
 export interface ApiApiKeyNotFoundError {
-  readonly "_tag": ApiApiKeyNotFoundErrorTag;
-  readonly "message": string
+  readonly _tag: ApiApiKeyNotFoundErrorTag;
+  readonly message: string;
 }
 
-export type ApiKeysGetApiKeyById500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ApiKeysGetApiKeyById500 =
+  | ApiApiKeyServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type ApiKeysDeleteApiKey500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ApiKeysDeleteApiKey500 =
+  | ApiApiKeyServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type ApiKeysRotateSecretKey500 = ApiApiKeyServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ApiKeysRotateSecretKey500 =
+  | ApiApiKeyServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface Person {
-  readonly "personId": string;
-  readonly "distinctId": string;
-  readonly "email": string | null;
-  readonly "name": string | null
+  readonly personId: string;
+  readonly distinctId: string;
+  readonly email: string | null;
+  readonly name: string | null;
 }
 
-export type PersonsListPersons200 = ReadonlyArray<Person>
+export type PersonsListPersons200 = ReadonlyArray<Person>;
 
-export type ApiPersonServiceErrorTag = "Api/PersonServiceError"
+export type ApiPersonServiceErrorTag = "Api/PersonServiceError";
 
 export interface ApiPersonServiceError {
-  readonly "_tag": ApiPersonServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiPersonServiceErrorTag;
+  readonly cause: string;
 }
 
-export type PersonsListPersons500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PersonsListPersons500 =
+  | ApiPersonServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface CreatePersonBody {
-  readonly "distinctId": string;
-  readonly "email"?: string | null | undefined;
-  readonly "name"?: string | null | undefined
+  readonly distinctId: string;
+  readonly email?: string | null | undefined;
+  readonly name?: string | null | undefined;
 }
 
-export type ApiPersonInvalidAnonymousIdErrorTag = "Api/PersonInvalidAnonymousIdError"
+export type ApiPersonInvalidAnonymousIdErrorTag = "Api/PersonInvalidAnonymousIdError";
 
 export interface ApiPersonInvalidAnonymousIdError {
-  readonly "_tag": ApiPersonInvalidAnonymousIdErrorTag;
-  readonly "id": string
+  readonly _tag: ApiPersonInvalidAnonymousIdErrorTag;
+  readonly id: string;
 }
 
-export type PersonsCreatePerson400 = ApiPersonInvalidAnonymousIdError | EffectHttpApiSchemaError
+export type PersonsCreatePerson400 = ApiPersonInvalidAnonymousIdError | EffectHttpApiSchemaError;
 
-export type PersonsCreatePerson500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PersonsCreatePerson500 =
+  | ApiPersonServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type ApiPersonNotFoundErrorTag = "Api/PersonNotFoundError"
+export type ApiPersonNotFoundErrorTag = "Api/PersonNotFoundError";
 
 export interface ApiPersonNotFoundError {
-  readonly "_tag": ApiPersonNotFoundErrorTag;
-  readonly "id": string
+  readonly _tag: ApiPersonNotFoundErrorTag;
+  readonly id: string;
 }
 
-export type PersonsGetPersonById500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PersonsGetPersonById500 =
+  | ApiPersonServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type PersonsGetPersonByDistinctId500 = ApiPersonServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PersonsGetPersonByDistinctId500 =
+  | ApiPersonServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface CreateOrganizationBody {
-  readonly "name": string
+  readonly name: string;
 }
 
 export interface Organization {
-  readonly "id": string;
-  readonly "name": string;
-  readonly "slug": string
+  readonly id: string;
+  readonly name: string;
+  readonly slug: string;
 }
 
-export type ApiOrganizationServiceErrorTag = "Api/OrganizationServiceError"
+export type ApiOrganizationServiceErrorTag = "Api/OrganizationServiceError";
 
 export interface ApiOrganizationServiceError {
-  readonly "_tag": ApiOrganizationServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiOrganizationServiceErrorTag;
+  readonly cause: string;
 }
 
-export type OrganizationsCreateOrganization500 = ApiOrganizationServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type OrganizationsCreateOrganization500 =
+  | ApiOrganizationServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface Perk {
-  readonly "id": string;
-  readonly "name": string;
-  readonly "projectId": string;
-  readonly "slug": string
+  readonly id: string;
+  readonly name: string;
+  readonly projectId: string;
+  readonly slug: string;
 }
 
-export type PerksListPerks200 = ReadonlyArray<Perk>
+export type PerksListPerks200 = ReadonlyArray<Perk>;
 
-export type ApiPerkServiceErrorTag = "Api/PerkServiceError"
+export type ApiPerkServiceErrorTag = "Api/PerkServiceError";
 
 export interface ApiPerkServiceError {
-  readonly "_tag": ApiPerkServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiPerkServiceErrorTag;
+  readonly cause: string;
 }
 
-export type PerksListPerks500 = ApiPerkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PerksListPerks500 =
+  | ApiPerkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface PaywallLocation {
-  readonly "description": string | null;
-  readonly "id": string;
-  readonly "name": string;
-  readonly "projectId": string;
-  readonly "slug": string
+  readonly description: string | null;
+  readonly id: string;
+  readonly name: string;
+  readonly projectId: string;
+  readonly slug: string;
 }
 
-export type PaywallLocationsListPaywallLocations200 = ReadonlyArray<PaywallLocation>
+export type PaywallLocationsListPaywallLocations200 = ReadonlyArray<PaywallLocation>;
 
-export type ApiPaywallLocationServiceErrorTag = "Api/PaywallLocationServiceError"
+export type ApiPaywallLocationServiceErrorTag = "Api/PaywallLocationServiceError";
 
 export interface ApiPaywallLocationServiceError {
-  readonly "_tag": ApiPaywallLocationServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiPaywallLocationServiceErrorTag;
+  readonly cause: string;
 }
 
-export type PaywallLocationsListPaywallLocations500 = ApiPaywallLocationServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PaywallLocationsListPaywallLocations500 =
+  | ApiPaywallLocationServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface SchemaLocation {
-  readonly "description": string | null;
-  readonly "name": string;
-  readonly "slug": string
+  readonly description: string | null;
+  readonly name: string;
+  readonly slug: string;
 }
 
 export interface SchemaPerk {
-  readonly "name": string;
-  readonly "slug": string
+  readonly name: string;
+  readonly slug: string;
 }
 
-export type SchemaProductProviderProviderIdEnum = "googlePlay"
+export type SchemaProductProviderProviderIdEnum = "googlePlay";
 
 export interface SchemaProductProvider {
-  readonly "configuration": Record<string, unknown>;
-  readonly "providerId": SchemaProductProviderProviderIdEnum | SchemaProductProviderProviderIdEnum
+  readonly configuration: Record<string, unknown>;
+  readonly providerId: SchemaProductProviderProviderIdEnum | SchemaProductProviderProviderIdEnum;
 }
 
-export type SchemaProductType = "subscription"
+export type SchemaProductType = "subscription";
 
 export interface SchemaProduct {
-  readonly "name": string;
-  readonly "perks": ReadonlyArray<string>;
-  readonly "providers": ReadonlyArray<SchemaProductProvider>;
-  readonly "slug": string;
-  readonly "type": SchemaProductType
+  readonly name: string;
+  readonly perks: ReadonlyArray<string>;
+  readonly providers: ReadonlyArray<SchemaProductProvider>;
+  readonly slug: string;
+  readonly type: SchemaProductType;
 }
 
 export interface ProjectSchemaResponse {
-  readonly "enabledProviders": ReadonlyArray<"appleAppStore" | "googlePlay">;
-  readonly "locations": ReadonlyArray<SchemaLocation>;
-  readonly "perks": ReadonlyArray<SchemaPerk>;
-  readonly "products": ReadonlyArray<SchemaProduct>;
-  readonly "version": string
+  readonly enabledProviders: ReadonlyArray<"appleAppStore" | "googlePlay">;
+  readonly locations: ReadonlyArray<SchemaLocation>;
+  readonly perks: ReadonlyArray<SchemaPerk>;
+  readonly products: ReadonlyArray<SchemaProduct>;
+  readonly version: string;
 }
 
-export type ApiSchemaServiceErrorTag = "Api/SchemaServiceError"
+export type ApiSchemaServiceErrorTag = "Api/SchemaServiceError";
 
 export interface ApiSchemaServiceError {
-  readonly "_tag": ApiSchemaServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiSchemaServiceErrorTag;
+  readonly cause: string;
 }
 
-export type SchemaGetSchema500 = ApiSchemaServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SchemaGetSchema500 =
+  | ApiSchemaServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface SchemaVersion {
-  readonly "version": string
+  readonly version: string;
 }
 
-export type SchemaGetSchemaVersion500 = ApiSchemaServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SchemaGetSchemaVersion500 =
+  | ApiSchemaServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface CreateProjectBody {
-  readonly "name": string;
-  readonly "organizationId": string
+  readonly name: string;
+  readonly organizationId: string;
 }
 
 export interface Project {
-  readonly "id": string;
-  readonly "name": string;
-  readonly "slug": string
+  readonly id: string;
+  readonly name: string;
+  readonly slug: string;
 }
 
-export type ApiProjectServiceErrorTag = "Api/ProjectServiceError"
+export type ApiProjectServiceErrorTag = "Api/ProjectServiceError";
 
 export interface ApiProjectServiceError {
-  readonly "_tag": ApiProjectServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiProjectServiceErrorTag;
+  readonly cause: string;
 }
 
-export type ProjectsCreateProject500 = ApiAuthenticationError | ApiProjectServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ProjectsCreateProject500 =
+  | ApiAuthenticationError
+  | ApiProjectServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type ProjectsListProjects200 = ReadonlyArray<Project>
+export type ProjectsListProjects200 = ReadonlyArray<Project>;
 
-export type ProjectsListProjects500 = ApiProjectServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ProjectsListProjects500 =
+  | ApiProjectServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type ProductTypeEnum = "one-time-consumable"
+export type ProductTypeEnum = "one-time-consumable";
 
 export interface Product {
-  readonly "id": string;
-  readonly "name": string;
-  readonly "projectId": string;
-  readonly "slug": string;
-  readonly "type": ProductTypeEnum | ProductTypeEnum | ProductTypeEnum
+  readonly id: string;
+  readonly name: string;
+  readonly projectId: string;
+  readonly slug: string;
+  readonly type: ProductTypeEnum | ProductTypeEnum | ProductTypeEnum;
 }
 
-export type ProductsListProducts200 = ReadonlyArray<Product>
+export type ProductsListProducts200 = ReadonlyArray<Product>;
 
-export type ApiProductServiceErrorTag = "Api/ProductServiceError"
+export type ApiProductServiceErrorTag = "Api/ProductServiceError";
 
 export interface ApiProductServiceError {
-  readonly "_tag": ApiProductServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiProductServiceErrorTag;
+  readonly cause: string;
 }
 
-export type ProductsListProducts500 = ApiProductServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ProductsListProducts500 =
+  | ApiProductServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface ProductPerk {
-  readonly "id": string;
-  readonly "perkId": string;
-  readonly "productId": string
+  readonly id: string;
+  readonly perkId: string;
+  readonly productId: string;
 }
 
-export type ProductPerksListProductPerksByProductId200 = ReadonlyArray<ProductPerk>
+export type ProductPerksListProductPerksByProductId200 = ReadonlyArray<ProductPerk>;
 
-export type ApiProductPerkValidationErrorTag = "Api/ProductPerkValidationError"
+export type ApiProductPerkValidationErrorTag = "Api/ProductPerkValidationError";
 
 export interface ApiProductPerkValidationError {
-  readonly "_tag": ApiProductPerkValidationErrorTag;
-  readonly "message": string
+  readonly _tag: ApiProductPerkValidationErrorTag;
+  readonly message: string;
 }
 
-export type ProductPerksListProductPerksByProductId400 = ApiProductPerkValidationError | EffectHttpApiSchemaError
+export type ProductPerksListProductPerksByProductId400 =
+  | ApiProductPerkValidationError
+  | EffectHttpApiSchemaError;
 
-export type ApiProductPerkServiceErrorTag = "Api/ProductPerkServiceError"
+export type ApiProductPerkServiceErrorTag = "Api/ProductPerkServiceError";
 
 export interface ApiProductPerkServiceError {
-  readonly "_tag": ApiProductPerkServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiProductPerkServiceErrorTag;
+  readonly cause: string;
 }
 
-export type ProductPerksListProductPerksByProductId500 = ApiProductPerkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type ProductPerksListProductPerksByProductId500 =
+  | ApiProductPerkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type SdkGetPersonParamsXIsBackgrounded = "false"
+export type SdkGetPersonParamsXIsBackgrounded = "false";
 
-export type SdkGetPersonParamsXIsDebugBuildEnum = "false"
+export type SdkGetPersonParamsXIsDebugBuildEnum = "false";
 
-export type SdkGetPersonParamsXObserverModeEnum = "false"
+export type SdkGetPersonParamsXObserverModeEnum = "false";
 
-export type SdkGetPersonParamsXPlatformFlavorEnum = "browser"
+export type SdkGetPersonParamsXPlatformFlavorEnum = "browser";
 
-export type SdkGetPersonParamsXSdkEnum = "web"
+export type SdkGetPersonParamsXSdkEnum = "web";
 
 export interface SdkGetPersonParams {
   readonly "x-distinct-id": string;
@@ -346,125 +403,148 @@ export interface SdkGetPersonParams {
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
   readonly "x-is-backgrounded": SdkGetPersonParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkGetPersonParamsXIsDebugBuildEnum | SdkGetPersonParamsXIsDebugBuildEnum;
+  readonly "x-is-debug-build":
+    | SdkGetPersonParamsXIsDebugBuildEnum
+    | SdkGetPersonParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkGetPersonParamsXObserverModeEnum | SdkGetPersonParamsXObserverModeEnum;
+  readonly "x-observer-mode":
+    | SdkGetPersonParamsXObserverModeEnum
+    | SdkGetPersonParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkGetPersonParamsXPlatformFlavorEnum | SdkGetPersonParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor":
+    | SdkGetPersonParamsXPlatformFlavorEnum
+    | SdkGetPersonParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
   readonly "x-sdk": SdkGetPersonParamsXSdkEnum | SdkGetPersonParamsXSdkEnum;
   readonly "x-sdk-version": string;
-  readonly "x-storefront"?: string | null | undefined
+  readonly "x-storefront"?: string | null | undefined;
 }
 
-export type SdkEntitlementGrantSourceEnum = "manual"
+export type SdkEntitlementGrantSourceEnum = "manual";
 
-export type SdkEntitlementGrantStatusEnum = "expired"
+export type SdkEntitlementGrantStatusEnum = "expired";
 
 export interface SdkEntitlementGrant {
-  readonly "expiresAt": string | null;
-  readonly "perkId": string;
-  readonly "source": SdkEntitlementGrantSourceEnum | SdkEntitlementGrantSourceEnum | SdkEntitlementGrantSourceEnum;
-  readonly "sourceId": string | null;
-  readonly "sourcePersonId": string;
-  readonly "status": SdkEntitlementGrantStatusEnum | SdkEntitlementGrantStatusEnum
+  readonly expiresAt: string | null;
+  readonly perkId: string;
+  readonly source:
+    | SdkEntitlementGrantSourceEnum
+    | SdkEntitlementGrantSourceEnum
+    | SdkEntitlementGrantSourceEnum;
+  readonly sourceId: string | null;
+  readonly sourcePersonId: string;
+  readonly status: SdkEntitlementGrantStatusEnum | SdkEntitlementGrantStatusEnum;
 }
 
-export type SdkPurchaseHistoryEntryTypeEnum = "subscription"
+export type SdkPurchaseHistoryEntryTypeEnum = "subscription";
 
 export interface SdkPurchaseHistoryEntry {
-  readonly "createdAt": string;
-  readonly "productId": string | null;
-  readonly "providerKey": string;
-  readonly "purchaseId": string;
-  readonly "sourcePersonId": string;
-  readonly "type": SdkPurchaseHistoryEntryTypeEnum | SdkPurchaseHistoryEntryTypeEnum
+  readonly createdAt: string;
+  readonly productId: string | null;
+  readonly providerKey: string;
+  readonly purchaseId: string;
+  readonly sourcePersonId: string;
+  readonly type: SdkPurchaseHistoryEntryTypeEnum | SdkPurchaseHistoryEntryTypeEnum;
 }
 
-export type SdkPersonSnapshotContextModeEnum = "temporary_pending_transfer"
+export type SdkPersonSnapshotContextModeEnum = "temporary_pending_transfer";
 
-export type SdkCurrentSubscriptionStatusEnum = "trialing"
+export type SdkCurrentSubscriptionStatusEnum = "trialing";
 
 export interface SdkCurrentSubscription {
-  readonly "expiresAt": string | null;
-  readonly "productId": string | null;
-  readonly "status": SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum | SdkCurrentSubscriptionStatusEnum;
-  readonly "subscriptionId": string | null
+  readonly expiresAt: string | null;
+  readonly productId: string | null;
+  readonly status:
+    | SdkCurrentSubscriptionStatusEnum
+    | SdkCurrentSubscriptionStatusEnum
+    | SdkCurrentSubscriptionStatusEnum
+    | SdkCurrentSubscriptionStatusEnum
+    | SdkCurrentSubscriptionStatusEnum;
+  readonly subscriptionId: string | null;
 }
 
-export type SdkSubscriptionHistoryEntryStatusEnum = "past_due"
+export type SdkSubscriptionHistoryEntryStatusEnum = "past_due";
 
 export interface SdkSubscriptionHistoryEntry {
-  readonly "canceledAt": string | null;
-  readonly "expiresAt": string | null;
-  readonly "isTrial": boolean;
-  readonly "productId": string | null;
-  readonly "sourcePersonId": string;
-  readonly "startsAt": string;
-  readonly "status": SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum | SdkSubscriptionHistoryEntryStatusEnum;
-  readonly "subscriptionId": string
+  readonly canceledAt: string | null;
+  readonly expiresAt: string | null;
+  readonly isTrial: boolean;
+  readonly productId: string | null;
+  readonly sourcePersonId: string;
+  readonly startsAt: string;
+  readonly status:
+    | SdkSubscriptionHistoryEntryStatusEnum
+    | SdkSubscriptionHistoryEntryStatusEnum
+    | SdkSubscriptionHistoryEntryStatusEnum
+    | SdkSubscriptionHistoryEntryStatusEnum
+    | SdkSubscriptionHistoryEntryStatusEnum;
+  readonly subscriptionId: string;
 }
 
 export interface SdkPerson {
-  readonly "distinctId": string;
-  readonly "email": string | null;
-  readonly "entitlements": {
-  readonly "grants": ReadonlyArray<SdkEntitlementGrant>
-};
-  readonly "name": string | null;
-  readonly "personId": string;
-  readonly "purchases": {
-  readonly "history": ReadonlyArray<SdkPurchaseHistoryEntry>
-};
-  readonly "snapshotContext": {
-  readonly "includedPersonIds": ReadonlyArray<string>;
-  readonly "migrationJobId": string | null;
-  readonly "mode": SdkPersonSnapshotContextModeEnum | SdkPersonSnapshotContextModeEnum
-};
-  readonly "subscriptions": {
-  readonly "current": SdkCurrentSubscription | null;
-  readonly "history": ReadonlyArray<SdkSubscriptionHistoryEntry>
-}
-}
-
-export type ApiSdkValidationErrorTag = "Api/SdkValidationError"
+  readonly distinctId: string;
+  readonly email: string | null;
+  readonly entitlements: {
+    readonly grants: ReadonlyArray<SdkEntitlementGrant>;
+  };
+  readonly name: string | null;
+  readonly personId: string;
+  readonly purchases: {
+    readonly history: ReadonlyArray<SdkPurchaseHistoryEntry>;
+  };
+  readonly snapshotContext: {
+    readonly includedPersonIds: ReadonlyArray<string>;
+    readonly migrationJobId: string | null;
+    readonly mode: SdkPersonSnapshotContextModeEnum | SdkPersonSnapshotContextModeEnum;
+  };
+  readonly subscriptions: {
+    readonly current: SdkCurrentSubscription | null;
+    readonly history: ReadonlyArray<SdkSubscriptionHistoryEntry>;
+  };
+}
+
+export type ApiSdkValidationErrorTag = "Api/SdkValidationError";
 
 export interface ApiSdkValidationError {
-  readonly "_tag": ApiSdkValidationErrorTag;
-  readonly "message": string
+  readonly _tag: ApiSdkValidationErrorTag;
+  readonly message: string;
 }
 
-export type SdkGetPerson400 = ApiSdkValidationError | EffectHttpApiSchemaError
+export type SdkGetPerson400 = ApiSdkValidationError | EffectHttpApiSchemaError;
 
-export type ApiSdkPersonNotFoundErrorTag = "Api/SdkPersonNotFoundError"
+export type ApiSdkPersonNotFoundErrorTag = "Api/SdkPersonNotFoundError";
 
 export interface ApiSdkPersonNotFoundError {
-  readonly "_tag": ApiSdkPersonNotFoundErrorTag;
-  readonly "message": string
+  readonly _tag: ApiSdkPersonNotFoundErrorTag;
+  readonly message: string;
 }
 
-export type ApiSdkServiceErrorTag = "Api/SdkServiceError"
+export type ApiSdkServiceErrorTag = "Api/SdkServiceError";
 
 export interface ApiSdkServiceError {
-  readonly "_tag": ApiSdkServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiSdkServiceErrorTag;
+  readonly cause: string;
 }
 
-export type SdkGetPerson500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SdkGetPerson500 =
+  | ApiAuthenticationError
+  | ApiSdkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type SdkIdentifyPersonParamsXIsBackgrounded = "false"
+export type SdkIdentifyPersonParamsXIsBackgrounded = "false";
 
-export type SdkIdentifyPersonParamsXIsDebugBuildEnum = "false"
+export type SdkIdentifyPersonParamsXIsDebugBuildEnum = "false";
 
-export type SdkIdentifyPersonParamsXObserverModeEnum = "false"
+export type SdkIdentifyPersonParamsXObserverModeEnum = "false";
 
-export type SdkIdentifyPersonParamsXPlatformFlavorEnum = "browser"
+export type SdkIdentifyPersonParamsXPlatformFlavorEnum = "browser";
 
-export type SdkIdentifyPersonParamsXSdkEnum = "web"
+export type SdkIdentifyPersonParamsXSdkEnum = "web";
 
 export interface SdkIdentifyPersonParams {
   readonly "x-distinct-id": string;
@@ -473,48 +553,58 @@ export interface SdkIdentifyPersonParams {
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
   readonly "x-is-backgrounded": SdkIdentifyPersonParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkIdentifyPersonParamsXIsDebugBuildEnum | SdkIdentifyPersonParamsXIsDebugBuildEnum;
+  readonly "x-is-debug-build":
+    | SdkIdentifyPersonParamsXIsDebugBuildEnum
+    | SdkIdentifyPersonParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkIdentifyPersonParamsXObserverModeEnum | SdkIdentifyPersonParamsXObserverModeEnum;
+  readonly "x-observer-mode":
+    | SdkIdentifyPersonParamsXObserverModeEnum
+    | SdkIdentifyPersonParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkIdentifyPersonParamsXPlatformFlavorEnum | SdkIdentifyPersonParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor":
+    | SdkIdentifyPersonParamsXPlatformFlavorEnum
+    | SdkIdentifyPersonParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
   readonly "x-sdk": SdkIdentifyPersonParamsXSdkEnum | SdkIdentifyPersonParamsXSdkEnum;
   readonly "x-sdk-version": string;
-  readonly "x-storefront"?: string | null | undefined
+  readonly "x-storefront"?: string | null | undefined;
 }
 
 export interface SdkIdentifyBody {
-  readonly "distinctId": string;
-  readonly "email"?: string | null | undefined;
-  readonly "name"?: string | null | undefined;
-  readonly "traits"?: Record<string, unknown> | null | undefined
+  readonly distinctId: string;
+  readonly email?: string | null | undefined;
+  readonly name?: string | null | undefined;
+  readonly traits?: Record<string, unknown> | null | undefined;
 }
 
-export type SdkIdentifyPerson400 = ApiSdkValidationError | EffectHttpApiSchemaError
+export type SdkIdentifyPerson400 = ApiSdkValidationError | EffectHttpApiSchemaError;
 
-export type ApiSdkPersonAlreadyIdentifiedErrorTag = "Api/SdkPersonAlreadyIdentifiedError"
+export type ApiSdkPersonAlreadyIdentifiedErrorTag = "Api/SdkPersonAlreadyIdentifiedError";
 
 export interface ApiSdkPersonAlreadyIdentifiedError {
-  readonly "_tag": ApiSdkPersonAlreadyIdentifiedErrorTag;
-  readonly "distinctId": string
+  readonly _tag: ApiSdkPersonAlreadyIdentifiedErrorTag;
+  readonly distinctId: string;
 }
 
-export type SdkIdentifyPerson500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SdkIdentifyPerson500 =
+  | ApiAuthenticationError
+  | ApiSdkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type SdkSyncPersonAttributesParamsXIsBackgrounded = "false"
+export type SdkSyncPersonAttributesParamsXIsBackgrounded = "false";
 
-export type SdkSyncPersonAttributesParamsXIsDebugBuildEnum = "false"
+export type SdkSyncPersonAttributesParamsXIsDebugBuildEnum = "false";
 
-export type SdkSyncPersonAttributesParamsXObserverModeEnum = "false"
+export type SdkSyncPersonAttributesParamsXObserverModeEnum = "false";
 
-export type SdkSyncPersonAttributesParamsXPlatformFlavorEnum = "browser"
+export type SdkSyncPersonAttributesParamsXPlatformFlavorEnum = "browser";
 
-export type SdkSyncPersonAttributesParamsXSdkEnum = "web"
+export type SdkSyncPersonAttributesParamsXSdkEnum = "web";
 
 export interface SdkSyncPersonAttributesParams {
   readonly "x-distinct-id": string;
@@ -523,42 +613,52 @@ export interface SdkSyncPersonAttributesParams {
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
   readonly "x-is-backgrounded": SdkSyncPersonAttributesParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkSyncPersonAttributesParamsXIsDebugBuildEnum | SdkSyncPersonAttributesParamsXIsDebugBuildEnum;
+  readonly "x-is-debug-build":
+    | SdkSyncPersonAttributesParamsXIsDebugBuildEnum
+    | SdkSyncPersonAttributesParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkSyncPersonAttributesParamsXObserverModeEnum | SdkSyncPersonAttributesParamsXObserverModeEnum;
+  readonly "x-observer-mode":
+    | SdkSyncPersonAttributesParamsXObserverModeEnum
+    | SdkSyncPersonAttributesParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkSyncPersonAttributesParamsXPlatformFlavorEnum | SdkSyncPersonAttributesParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor":
+    | SdkSyncPersonAttributesParamsXPlatformFlavorEnum
+    | SdkSyncPersonAttributesParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
   readonly "x-sdk": SdkSyncPersonAttributesParamsXSdkEnum | SdkSyncPersonAttributesParamsXSdkEnum;
   readonly "x-sdk-version": string;
-  readonly "x-storefront"?: string | null | undefined
+  readonly "x-storefront"?: string | null | undefined;
 }
 
 export interface SdkSyncPersonAttributesBody {
-  readonly "email"?: string | null | undefined;
-  readonly "name"?: string | null | undefined;
-  readonly "traits"?: Record<string, unknown> | null | undefined;
-  readonly "setOnce"?: Record<string, unknown> | null | undefined;
-  readonly "clientEventId"?: string | null | undefined
+  readonly email?: string | null | undefined;
+  readonly name?: string | null | undefined;
+  readonly traits?: Record<string, unknown> | null | undefined;
+  readonly setOnce?: Record<string, unknown> | null | undefined;
+  readonly clientEventId?: string | null | undefined;
 }
 
-export type SdkSyncPersonAttributes400 = ApiSdkValidationError | EffectHttpApiSchemaError
+export type SdkSyncPersonAttributes400 = ApiSdkValidationError | EffectHttpApiSchemaError;
 
-export type SdkSyncPersonAttributes500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SdkSyncPersonAttributes500 =
+  | ApiAuthenticationError
+  | ApiSdkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type SdkSyncTransactionParamsXIsBackgrounded = "false"
+export type SdkSyncTransactionParamsXIsBackgrounded = "false";
 
-export type SdkSyncTransactionParamsXIsDebugBuildEnum = "false"
+export type SdkSyncTransactionParamsXIsDebugBuildEnum = "false";
 
-export type SdkSyncTransactionParamsXObserverModeEnum = "false"
+export type SdkSyncTransactionParamsXObserverModeEnum = "false";
 
-export type SdkSyncTransactionParamsXPlatformFlavorEnum = "browser"
+export type SdkSyncTransactionParamsXPlatformFlavorEnum = "browser";
 
-export type SdkSyncTransactionParamsXSdkEnum = "web"
+export type SdkSyncTransactionParamsXSdkEnum = "web";
 
 export interface SdkSyncTransactionParams {
   readonly "x-distinct-id": string;
@@ -567,54 +667,72 @@ export interface SdkSyncTransactionParams {
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
   readonly "x-is-backgrounded": SdkSyncTransactionParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkSyncTransactionParamsXIsDebugBuildEnum | SdkSyncTransactionParamsXIsDebugBuildEnum;
+  readonly "x-is-debug-build":
+    | SdkSyncTransactionParamsXIsDebugBuildEnum
+    | SdkSyncTransactionParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkSyncTransactionParamsXObserverModeEnum | SdkSyncTransactionParamsXObserverModeEnum;
+  readonly "x-observer-mode":
+    | SdkSyncTransactionParamsXObserverModeEnum
+    | SdkSyncTransactionParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkSyncTransactionParamsXPlatformFlavorEnum | SdkSyncTransactionParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor":
+    | SdkSyncTransactionParamsXPlatformFlavorEnum
+    | SdkSyncTransactionParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
   readonly "x-sdk": SdkSyncTransactionParamsXSdkEnum | SdkSyncTransactionParamsXSdkEnum;
   readonly "x-sdk-version": string;
-  readonly "x-storefront"?: string | null | undefined
+  readonly "x-storefront"?: string | null | undefined;
 }
 
-export type SdkSyncTransactionRequestPlatformEnum = "android"
+export type SdkSyncTransactionRequestPlatformEnum = "android";
 
-export type SdkSyncTransactionRequestPurchaseDateEnum = "-Infinity"
+export type SdkSyncTransactionRequestPurchaseDateEnum = "-Infinity";
 
-export type SdkSyncTransactionRequestQuantityEnum = "-Infinity"
+export type SdkSyncTransactionRequestQuantityEnum = "-Infinity";
 
 export interface SdkSyncTransactionRequest {
-  readonly "platform": SdkSyncTransactionRequestPlatformEnum | SdkSyncTransactionRequestPlatformEnum;
-  readonly "productSlug": string;
-  readonly "purchaseDate": number | SdkSyncTransactionRequestPurchaseDateEnum | SdkSyncTransactionRequestPurchaseDateEnum | SdkSyncTransactionRequestPurchaseDateEnum;
-  readonly "purchaseToken"?: string | null | undefined;
-  readonly "quantity": number | SdkSyncTransactionRequestQuantityEnum | SdkSyncTransactionRequestQuantityEnum | SdkSyncTransactionRequestQuantityEnum;
-  readonly "receipt"?: string | null | undefined;
-  readonly "transactionId": string
+  readonly platform: SdkSyncTransactionRequestPlatformEnum | SdkSyncTransactionRequestPlatformEnum;
+  readonly productSlug: string;
+  readonly purchaseDate:
+    | number
+    | SdkSyncTransactionRequestPurchaseDateEnum
+    | SdkSyncTransactionRequestPurchaseDateEnum
+    | SdkSyncTransactionRequestPurchaseDateEnum;
+  readonly purchaseToken?: string | null | undefined;
+  readonly quantity:
+    | number
+    | SdkSyncTransactionRequestQuantityEnum
+    | SdkSyncTransactionRequestQuantityEnum
+    | SdkSyncTransactionRequestQuantityEnum;
+  readonly receipt?: string | null | undefined;
+  readonly transactionId: string;
 }
 
 export interface SdkSyncTransactionResponse {
-  readonly "accepted": boolean
+  readonly accepted: boolean;
 }
 
-export type SdkSyncTransaction400 = ApiSdkValidationError | EffectHttpApiSchemaError
+export type SdkSyncTransaction400 = ApiSdkValidationError | EffectHttpApiSchemaError;
 
-export type SdkSyncTransaction500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SdkSyncTransaction500 =
+  | ApiAuthenticationError
+  | ApiSdkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type SdkEvaluateFeatureFlagsParamsXIsBackgrounded = "false"
+export type SdkEvaluateFeatureFlagsParamsXIsBackgrounded = "false";
 
-export type SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum = "false"
+export type SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum = "false";
 
-export type SdkEvaluateFeatureFlagsParamsXObserverModeEnum = "false"
+export type SdkEvaluateFeatureFlagsParamsXObserverModeEnum = "false";
 
-export type SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum = "browser"
+export type SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum = "browser";
 
-export type SdkEvaluateFeatureFlagsParamsXSdkEnum = "web"
+export type SdkEvaluateFeatureFlagsParamsXSdkEnum = "web";
 
 export interface SdkEvaluateFeatureFlagsParams {
   readonly "x-distinct-id": string;
@@ -623,46 +741,56 @@ export interface SdkEvaluateFeatureFlagsParams {
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
   readonly "x-is-backgrounded": SdkEvaluateFeatureFlagsParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum | SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum;
+  readonly "x-is-debug-build":
+    | SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum
+    | SdkEvaluateFeatureFlagsParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkEvaluateFeatureFlagsParamsXObserverModeEnum | SdkEvaluateFeatureFlagsParamsXObserverModeEnum;
+  readonly "x-observer-mode":
+    | SdkEvaluateFeatureFlagsParamsXObserverModeEnum
+    | SdkEvaluateFeatureFlagsParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum | SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor":
+    | SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum
+    | SdkEvaluateFeatureFlagsParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
   readonly "x-sdk": SdkEvaluateFeatureFlagsParamsXSdkEnum | SdkEvaluateFeatureFlagsParamsXSdkEnum;
   readonly "x-sdk-version": string;
-  readonly "x-storefront"?: string | null | undefined
+  readonly "x-storefront"?: string | null | undefined;
 }
 
 export interface EvaluateFeatureFlagsBody {
-  readonly "flagKeys"?: ReadonlyArray<string> | null | undefined
+  readonly flagKeys?: ReadonlyArray<string> | null | undefined;
 }
 
 export interface SdkFeatureFlagResult {
-  readonly "enabled": boolean;
-  readonly "key": string;
-  readonly "variantKey": string | null
+  readonly enabled: boolean;
+  readonly key: string;
+  readonly variantKey: string | null;
 }
 
 export interface SdkFeatureFlagsResponse {
-  readonly "flags": ReadonlyArray<SdkFeatureFlagResult>
+  readonly flags: ReadonlyArray<SdkFeatureFlagResult>;
 }
 
-export type SdkEvaluateFeatureFlags500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SdkEvaluateFeatureFlags500 =
+  | ApiAuthenticationError
+  | ApiSdkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type SdkResolvePaywallParamsXIsBackgrounded = "false"
+export type SdkResolvePaywallParamsXIsBackgrounded = "false";
 
-export type SdkResolvePaywallParamsXIsDebugBuildEnum = "false"
+export type SdkResolvePaywallParamsXIsDebugBuildEnum = "false";
 
-export type SdkResolvePaywallParamsXObserverModeEnum = "false"
+export type SdkResolvePaywallParamsXObserverModeEnum = "false";
 
-export type SdkResolvePaywallParamsXPlatformFlavorEnum = "browser"
+export type SdkResolvePaywallParamsXPlatformFlavorEnum = "browser";
 
-export type SdkResolvePaywallParamsXSdkEnum = "web"
+export type SdkResolvePaywallParamsXSdkEnum = "web";
 
 export interface SdkResolvePaywallParams {
   readonly "x-distinct-id": string;
@@ -671,80 +799,93 @@ export interface SdkResolvePaywallParams {
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
   readonly "x-is-backgrounded": SdkResolvePaywallParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkResolvePaywallParamsXIsDebugBuildEnum | SdkResolvePaywallParamsXIsDebugBuildEnum;
+  readonly "x-is-debug-build":
+    | SdkResolvePaywallParamsXIsDebugBuildEnum
+    | SdkResolvePaywallParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkResolvePaywallParamsXObserverModeEnum | SdkResolvePaywallParamsXObserverModeEnum;
+  readonly "x-observer-mode":
+    | SdkResolvePaywallParamsXObserverModeEnum
+    | SdkResolvePaywallParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkResolvePaywallParamsXPlatformFlavorEnum | SdkResolvePaywallParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor":
+    | SdkResolvePaywallParamsXPlatformFlavorEnum
+    | SdkResolvePaywallParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
   readonly "x-sdk": SdkResolvePaywallParamsXSdkEnum | SdkResolvePaywallParamsXSdkEnum;
   readonly "x-sdk-version": string;
-  readonly "x-storefront"?: string | null | undefined
+  readonly "x-storefront"?: string | null | undefined;
 }
 
 export interface SdkResolvePaywallBody {
-  readonly "locationSlug": string
+  readonly locationSlug: string;
 }
 
-export type SdkResolvedPaywallShowingPaywallReleaseEnumVersionEnum = "-Infinity"
+export type SdkResolvedPaywallShowingPaywallReleaseEnumVersionEnum = "-Infinity";
 
-export type SdkResolvedPaywallShowingTypeEnum = "feature_flag"
+export type SdkResolvedPaywallShowingTypeEnum = "feature_flag";
 
 export interface SdkResolvedPaywallShowing {
-  readonly "id": string;
-  readonly "paywall": {
-  readonly "id": string;
-  readonly "name": string;
-  readonly "slug": string
-} | null;
-  readonly "paywallId": string | null;
-  readonly "paywallRelease": {
-  readonly "htmlUrl": string;
-  readonly "publishedAt": string | null;
-  readonly "releaseId": string;
-  readonly "version": number | "NaN" | "Infinity" | "-Infinity";
-  // extended by hand for paywall-deploy contract §6 (code-release runtime block); keep when regenerating.
-  // Optional/nullable on purpose: old servers omit it (visual-editor releases send null) and the
-  // client decodes responses with a plain JSON cast, so absence must remain valid.
-  readonly "runtime"?: {
-  readonly "contentHash": string;
-  readonly "productSlugs": ReadonlyArray<string>;
-  readonly "variables": Readonly<Record<string, string | number | boolean>>
-} | null | undefined
-} | null;
-  readonly "paywallReleaseId": string | null;
-  readonly "startedAt": string;
-  readonly "type": SdkResolvedPaywallShowingTypeEnum | SdkResolvedPaywallShowingTypeEnum
+  readonly id: string;
+  readonly paywall: {
+    readonly id: string;
+    readonly name: string;
+    readonly slug: string;
+  } | null;
+  readonly paywallId: string | null;
+  readonly paywallRelease: {
+    readonly htmlUrl: string;
+    readonly publishedAt: string | null;
+    readonly releaseId: string;
+    readonly version: number | "NaN" | "Infinity" | "-Infinity";
+    // extended by hand for paywall-deploy contract §6 (code-release runtime block); keep when regenerating.
+    // Optional/nullable on purpose: old servers omit it (visual-editor releases send null) and the
+    // client decodes responses with a plain JSON cast, so absence must remain valid.
+    readonly runtime?:
+      | {
+          readonly contentHash: string;
+          readonly productSlugs: ReadonlyArray<string>;
+          readonly variables: Readonly<Record<string, string | number | boolean>>;
+        }
+      | null
+      | undefined;
+  } | null;
+  readonly paywallReleaseId: string | null;
+  readonly startedAt: string;
+  readonly type: SdkResolvedPaywallShowingTypeEnum | SdkResolvedPaywallShowingTypeEnum;
 }
 
 export interface SdkResolvedPaywall {
-  readonly "location": {
-  readonly "id": string;
-  readonly "name": string;
-  readonly "slug": string
-};
-  readonly "showing": SdkResolvedPaywallShowing
+  readonly location: {
+    readonly id: string;
+    readonly name: string;
+    readonly slug: string;
+  };
+  readonly showing: SdkResolvedPaywallShowing;
 }
 
-export type SdkResolvePaywall200 = SdkResolvedPaywall | null
+export type SdkResolvePaywall200 = SdkResolvedPaywall | null;
 
-export type SdkResolvePaywall400 = ApiSdkValidationError | EffectHttpApiSchemaError
+export type SdkResolvePaywall400 = ApiSdkValidationError | EffectHttpApiSchemaError;
 
-export type SdkResolvePaywall500 = ApiAuthenticationError | ApiSdkServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SdkResolvePaywall500 =
+  | ApiAuthenticationError
+  | ApiSdkServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type SdkGetSchemaParamsXIsBackgrounded = "false"
+export type SdkGetSchemaParamsXIsBackgrounded = "false";
 
-export type SdkGetSchemaParamsXIsDebugBuildEnum = "false"
+export type SdkGetSchemaParamsXIsDebugBuildEnum = "false";
 
-export type SdkGetSchemaParamsXObserverModeEnum = "false"
+export type SdkGetSchemaParamsXObserverModeEnum = "false";
 
-export type SdkGetSchemaParamsXPlatformFlavorEnum = "browser"
+export type SdkGetSchemaParamsXPlatformFlavorEnum = "browser";
 
-export type SdkGetSchemaParamsXSdkEnum = "web"
+export type SdkGetSchemaParamsXSdkEnum = "web";
 
 export interface SdkGetSchemaParams {
   readonly "x-distinct-id": string;
@@ -753,258 +894,374 @@ export interface SdkGetSchemaParams {
   readonly "x-client-locale"?: string | null | undefined;
   readonly "x-client-version"?: string | null | undefined;
   readonly "x-is-backgrounded": SdkGetSchemaParamsXIsBackgrounded;
-  readonly "x-is-debug-build": SdkGetSchemaParamsXIsDebugBuildEnum | SdkGetSchemaParamsXIsDebugBuildEnum;
+  readonly "x-is-debug-build":
+    | SdkGetSchemaParamsXIsDebugBuildEnum
+    | SdkGetSchemaParamsXIsDebugBuildEnum;
   readonly "x-nonce"?: string | null | undefined;
-  readonly "x-observer-mode": SdkGetSchemaParamsXObserverModeEnum | SdkGetSchemaParamsXObserverModeEnum;
+  readonly "x-observer-mode":
+    | SdkGetSchemaParamsXObserverModeEnum
+    | SdkGetSchemaParamsXObserverModeEnum;
   readonly "x-platform": string;
   readonly "x-platform-brand"?: string | null | undefined;
   readonly "x-platform-device"?: string | null | undefined;
-  readonly "x-platform-flavor": SdkGetSchemaParamsXPlatformFlavorEnum | SdkGetSchemaParamsXPlatformFlavorEnum;
+  readonly "x-platform-flavor":
+    | SdkGetSchemaParamsXPlatformFlavorEnum
+    | SdkGetSchemaParamsXPlatformFlavorEnum;
   readonly "x-platform-flavor-version"?: string | null | undefined;
   readonly "x-platform-version"?: string | null | undefined;
   readonly "x-preferred-locales"?: string | null | undefined;
   readonly "x-sdk": SdkGetSchemaParamsXSdkEnum | SdkGetSchemaParamsXSdkEnum;
   readonly "x-sdk-version": string;
-  readonly "x-storefront"?: string | null | undefined
+  readonly "x-storefront"?: string | null | undefined;
 }
 
 export interface SdkSchema {
-  readonly "locations": Record<string, unknown>;
-  readonly "perks": Record<string, unknown>;
-  readonly "products": Record<string, unknown>;
-  readonly "version": string
+  readonly locations: Record<string, unknown>;
+  readonly perks: Record<string, unknown>;
+  readonly products: Record<string, unknown>;
+  readonly version: string;
 }
 
-export type SdkGetSchema500 = ApiAuthenticationError | ApiSchemaServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type SdkGetSchema500 =
+  | ApiAuthenticationError
+  | ApiSchemaServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface User {
-  readonly "createdAt": string;
-  readonly "email": string;
-  readonly "emailVerified": boolean;
-  readonly "id": string;
-  readonly "image": string | null;
-  readonly "name": string;
-  readonly "organizations": ReadonlyArray<{
-  readonly "id": string;
-  readonly "logo": string | null;
-  readonly "name": string;
-  readonly "slug": string
-}>;
-  readonly "projects": ReadonlyArray<{
-  readonly "id": string;
-  readonly "logo": string | null;
-  readonly "name": string;
-  readonly "organizationId": string;
-  readonly "slug": string
-}>;
-  readonly "updatedAt": string
-}
-
-export type ApiUserServiceErrorTag = "Api/UserServiceError"
+  readonly createdAt: string;
+  readonly email: string;
+  readonly emailVerified: boolean;
+  readonly id: string;
+  readonly image: string | null;
+  readonly name: string;
+  readonly organizations: ReadonlyArray<{
+    readonly id: string;
+    readonly logo: string | null;
+    readonly name: string;
+    readonly slug: string;
+  }>;
+  readonly projects: ReadonlyArray<{
+    readonly id: string;
+    readonly logo: string | null;
+    readonly name: string;
+    readonly organizationId: string;
+    readonly slug: string;
+  }>;
+  readonly updatedAt: string;
+}
+
+export type ApiUserServiceErrorTag = "Api/UserServiceError";
 
 export interface ApiUserServiceError {
-  readonly "_tag": ApiUserServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiUserServiceErrorTag;
+  readonly cause: string;
 }
 
-export type UsersGetUser500 = ApiAuthenticationError | ApiUserServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type UsersGetUser500 =
+  | ApiAuthenticationError
+  | ApiUserServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface PaymentProviderConfiguration {
-  readonly "enabled": boolean;
-  readonly "id": string;
-  readonly "name": string;
-  readonly "projectId": string;
-  readonly "providerId": string
+  readonly enabled: boolean;
+  readonly id: string;
+  readonly name: string;
+  readonly projectId: string;
+  readonly providerId: string;
 }
 
-export type PaymentProviderConfigurationsListPaymentProviderConfigurations200 = ReadonlyArray<PaymentProviderConfiguration>
+export type PaymentProviderConfigurationsListPaymentProviderConfigurations200 =
+  ReadonlyArray<PaymentProviderConfiguration>;
 
-export type ApiPaymentProviderConfigurationServiceErrorTag = "Api/PaymentProviderConfigurationServiceError"
+export type ApiPaymentProviderConfigurationServiceErrorTag =
+  "Api/PaymentProviderConfigurationServiceError";
 
 export interface ApiPaymentProviderConfigurationServiceError {
-  readonly "_tag": ApiPaymentProviderConfigurationServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiPaymentProviderConfigurationServiceErrorTag;
+  readonly cause: string;
 }
 
-export type PaymentProviderConfigurationsListPaymentProviderConfigurations500 = ApiPaymentProviderConfigurationServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PaymentProviderConfigurationsListPaymentProviderConfigurations500 =
+  | ApiPaymentProviderConfigurationServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface PaymentProviderProduct {
-  readonly "configuration": Record<string, unknown>;
-  readonly "id": string;
-  readonly "paymentProviderConfigurationId": string;
-  readonly "productId": string;
-  readonly "providerId": string
+  readonly configuration: Record<string, unknown>;
+  readonly id: string;
+  readonly paymentProviderConfigurationId: string;
+  readonly productId: string;
+  readonly providerId: string;
 }
 
-export type PaymentProviderProductsListPaymentProviderProducts200 = ReadonlyArray<PaymentProviderProduct>
+export type PaymentProviderProductsListPaymentProviderProducts200 =
+  ReadonlyArray<PaymentProviderProduct>;
 
-export type ApiPaymentProviderProductServiceErrorTag = "Api/PaymentProviderProductServiceError"
+export type ApiPaymentProviderProductServiceErrorTag = "Api/PaymentProviderProductServiceError";
 
 export interface ApiPaymentProviderProductServiceError {
-  readonly "_tag": ApiPaymentProviderProductServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiPaymentProviderProductServiceErrorTag;
+  readonly cause: string;
 }
 
-export type PaymentProviderProductsListPaymentProviderProducts500 = ApiPaymentProviderProductServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type PaymentProviderProductsListPaymentProviderProducts500 =
+  | ApiPaymentProviderProductServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type WebhookEndpointConsecutiveFailuresEnum = "-Infinity"
+export type WebhookEndpointConsecutiveFailuresEnum = "-Infinity";
 
-export type WebhookEndpointStatusEnum = "failed"
+export type WebhookEndpointStatusEnum = "failed";
 
 export interface WebhookEndpoint {
-  readonly "consecutiveFailures": number | WebhookEndpointConsecutiveFailuresEnum | WebhookEndpointConsecutiveFailuresEnum | WebhookEndpointConsecutiveFailuresEnum;
-  readonly "createdAt": string | null;
-  readonly "description": string | null;
-  readonly "events": ReadonlyArray<"person.created" | "person.updated" | "person.deleted" | "subscription.created" | "subscription.renewed" | "subscription.cancelled" | "subscription.expired" | "purchase.completed" | "purchase.refunded">;
-  readonly "id": string;
-  readonly "lastSuccessAt": string | null;
-  readonly "name": string;
-  readonly "projectId": string;
-  readonly "secret": string;
-  readonly "status": WebhookEndpointStatusEnum | WebhookEndpointStatusEnum | WebhookEndpointStatusEnum;
-  readonly "url": string
-}
-
-export type WebhooksListWebhookEndpoints200 = ReadonlyArray<WebhookEndpoint>
-
-export type ApiWebhookServiceErrorTag = "Api/WebhookServiceError"
+  readonly consecutiveFailures:
+    | number
+    | WebhookEndpointConsecutiveFailuresEnum
+    | WebhookEndpointConsecutiveFailuresEnum
+    | WebhookEndpointConsecutiveFailuresEnum;
+  readonly createdAt: string | null;
+  readonly description: string | null;
+  readonly events: ReadonlyArray<
+    | "person.created"
+    | "person.updated"
+    | "person.deleted"
+    | "subscription.created"
+    | "subscription.renewed"
+    | "subscription.cancelled"
+    | "subscription.expired"
+    | "purchase.completed"
+    | "purchase.refunded"
+  >;
+  readonly id: string;
+  readonly lastSuccessAt: string | null;
+  readonly name: string;
+  readonly projectId: string;
+  readonly secret: string;
+  readonly status:
+    | WebhookEndpointStatusEnum
+    | WebhookEndpointStatusEnum
+    | WebhookEndpointStatusEnum;
+  readonly url: string;
+}
+
+export type WebhooksListWebhookEndpoints200 = ReadonlyArray<WebhookEndpoint>;
+
+export type ApiWebhookServiceErrorTag = "Api/WebhookServiceError";
 
 export interface ApiWebhookServiceError {
-  readonly "_tag": ApiWebhookServiceErrorTag;
-  readonly "cause": string
+  readonly _tag: ApiWebhookServiceErrorTag;
+  readonly cause: string;
 }
 
-export type WebhooksListWebhookEndpoints500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksListWebhookEndpoints500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export interface CreateWebhookEndpointBody {
-  readonly "description"?: string | null | undefined;
-  readonly "events": ReadonlyArray<string>;
-  readonly "name": string;
-  readonly "url": string
+  readonly description?: string | null | undefined;
+  readonly events: ReadonlyArray<string>;
+  readonly name: string;
+  readonly url: string;
 }
 
-export type ApiWebhookValidationErrorTag = "Api/WebhookValidationError"
+export type ApiWebhookValidationErrorTag = "Api/WebhookValidationError";
 
 export interface ApiWebhookValidationError {
-  readonly "_tag": ApiWebhookValidationErrorTag;
-  readonly "message": string
+  readonly _tag: ApiWebhookValidationErrorTag;
+  readonly message: string;
 }
 
-export type WebhooksCreateWebhookEndpoint400 = ApiWebhookValidationError | EffectHttpApiSchemaError
+export type WebhooksCreateWebhookEndpoint400 = ApiWebhookValidationError | EffectHttpApiSchemaError;
 
-export type WebhooksCreateWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksCreateWebhookEndpoint500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type ApiWebhookEndpointNotFoundErrorTag = "Api/WebhookEndpointNotFoundError"
+export type ApiWebhookEndpointNotFoundErrorTag = "Api/WebhookEndpointNotFoundError";
 
 export interface ApiWebhookEndpointNotFoundError {
-  readonly "_tag": ApiWebhookEndpointNotFoundErrorTag;
-  readonly "endpointId": string
+  readonly _tag: ApiWebhookEndpointNotFoundErrorTag;
+  readonly endpointId: string;
 }
 
-export type WebhooksGetWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksGetWebhookEndpoint500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type WebhooksDeleteWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksDeleteWebhookEndpoint500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type UpdateWebhookEndpointBodyStatusEnum = "disabled"
+export type UpdateWebhookEndpointBodyStatusEnum = "disabled";
 
 export interface UpdateWebhookEndpointBody {
-  readonly "description"?: string | null | null | undefined;
-  readonly "events"?: ReadonlyArray<string> | null | undefined;
-  readonly "name"?: string | null | undefined;
-  readonly "status"?: UpdateWebhookEndpointBodyStatusEnum | UpdateWebhookEndpointBodyStatusEnum | null | undefined;
-  readonly "url"?: string | null | undefined
+  readonly description?: string | null | null | undefined;
+  readonly events?: ReadonlyArray<string> | null | undefined;
+  readonly name?: string | null | undefined;
+  readonly status?:
+    | UpdateWebhookEndpointBodyStatusEnum
+    | UpdateWebhookEndpointBodyStatusEnum
+    | null
+    | undefined;
+  readonly url?: string | null | undefined;
 }
 
-export type WebhooksUpdateWebhookEndpoint400 = ApiWebhookValidationError | EffectHttpApiSchemaError
+export type WebhooksUpdateWebhookEndpoint400 = ApiWebhookValidationError | EffectHttpApiSchemaError;
 
-export type WebhooksUpdateWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksUpdateWebhookEndpoint500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type WebhooksRotateWebhookSecret500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksRotateWebhookSecret500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type WebhookDeliveryAttemptCountEnum = "-Infinity"
+export type WebhookDeliveryAttemptCountEnum = "-Infinity";
 
-export type WebhookDeliveryMaxAttemptsEnum = "-Infinity"
+export type WebhookDeliveryMaxAttemptsEnum = "-Infinity";
 
-export type WebhookDeliveryStatusEnum = "exhausted"
+export type WebhookDeliveryStatusEnum = "exhausted";
 
 export interface WebhookDelivery {
-  readonly "attemptCount": number | WebhookDeliveryAttemptCountEnum | WebhookDeliveryAttemptCountEnum | WebhookDeliveryAttemptCountEnum;
-  readonly "completedAt": string | null;
-  readonly "createdAt": string | null;
-  readonly "eventOccurredAt": string;
-  readonly "eventType": string;
-  readonly "id": string;
-  readonly "maxAttempts": number | WebhookDeliveryMaxAttemptsEnum | WebhookDeliveryMaxAttemptsEnum | WebhookDeliveryMaxAttemptsEnum;
-  readonly "nextAttemptAt": string | null;
-  readonly "payload": null;
-  readonly "projectId": string;
-  readonly "status": WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum | WebhookDeliveryStatusEnum;
-  readonly "webhookEndpointId": string
-}
-
-export type WebhooksTestWebhookEndpoint500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
-
-export type WebhooksListWebhookDeliveries200 = ReadonlyArray<WebhookDelivery>
-
-export type WebhooksListWebhookDeliveries500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
-
-export type WebhookDeliveryWithAttemptsAttemptCountEnum = "-Infinity"
-
-export type WebhookDeliveryAttemptAttemptNumberEnum = "-Infinity"
-
-export type WebhookDeliveryAttemptDurationMsEnum = "-Infinity"
-
-export type WebhookDeliveryAttemptStatusCodeEnum = "-Infinity"
+  readonly attemptCount:
+    | number
+    | WebhookDeliveryAttemptCountEnum
+    | WebhookDeliveryAttemptCountEnum
+    | WebhookDeliveryAttemptCountEnum;
+  readonly completedAt: string | null;
+  readonly createdAt: string | null;
+  readonly eventOccurredAt: string;
+  readonly eventType: string;
+  readonly id: string;
+  readonly maxAttempts:
+    | number
+    | WebhookDeliveryMaxAttemptsEnum
+    | WebhookDeliveryMaxAttemptsEnum
+    | WebhookDeliveryMaxAttemptsEnum;
+  readonly nextAttemptAt: string | null;
+  readonly payload: null;
+  readonly projectId: string;
+  readonly status:
+    | WebhookDeliveryStatusEnum
+    | WebhookDeliveryStatusEnum
+    | WebhookDeliveryStatusEnum
+    | WebhookDeliveryStatusEnum
+    | WebhookDeliveryStatusEnum;
+  readonly webhookEndpointId: string;
+}
+
+export type WebhooksTestWebhookEndpoint500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
+
+export type WebhooksListWebhookDeliveries200 = ReadonlyArray<WebhookDelivery>;
+
+export type WebhooksListWebhookDeliveries500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
+
+export type WebhookDeliveryWithAttemptsAttemptCountEnum = "-Infinity";
+
+export type WebhookDeliveryAttemptAttemptNumberEnum = "-Infinity";
+
+export type WebhookDeliveryAttemptDurationMsEnum = "-Infinity";
+
+export type WebhookDeliveryAttemptStatusCodeEnum = "-Infinity";
 
 export interface WebhookDeliveryAttempt {
-  readonly "attemptNumber": number | WebhookDeliveryAttemptAttemptNumberEnum | WebhookDeliveryAttemptAttemptNumberEnum | WebhookDeliveryAttemptAttemptNumberEnum;
-  readonly "createdAt": string | null;
-  readonly "durationMs": number | WebhookDeliveryAttemptDurationMsEnum | WebhookDeliveryAttemptDurationMsEnum | WebhookDeliveryAttemptDurationMsEnum | null;
-  readonly "errorMessage": string | null;
-  readonly "id": string;
-  readonly "responseBody": string | null;
-  readonly "statusCode": number | WebhookDeliveryAttemptStatusCodeEnum | WebhookDeliveryAttemptStatusCodeEnum | WebhookDeliveryAttemptStatusCodeEnum | null;
-  readonly "succeeded": boolean
-}
-
-export type WebhookDeliveryWithAttemptsMaxAttemptsEnum = "-Infinity"
-
-export type WebhookDeliveryWithAttemptsStatusEnum = "exhausted"
+  readonly attemptNumber:
+    | number
+    | WebhookDeliveryAttemptAttemptNumberEnum
+    | WebhookDeliveryAttemptAttemptNumberEnum
+    | WebhookDeliveryAttemptAttemptNumberEnum;
+  readonly createdAt: string | null;
+  readonly durationMs:
+    | number
+    | WebhookDeliveryAttemptDurationMsEnum
+    | WebhookDeliveryAttemptDurationMsEnum
+    | WebhookDeliveryAttemptDurationMsEnum
+    | null;
+  readonly errorMessage: string | null;
+  readonly id: string;
+  readonly responseBody: string | null;
+  readonly statusCode:
+    | number
+    | WebhookDeliveryAttemptStatusCodeEnum
+    | WebhookDeliveryAttemptStatusCodeEnum
+    | WebhookDeliveryAttemptStatusCodeEnum
+    | null;
+  readonly succeeded: boolean;
+}
+
+export type WebhookDeliveryWithAttemptsMaxAttemptsEnum = "-Infinity";
+
+export type WebhookDeliveryWithAttemptsStatusEnum = "exhausted";
 
 export interface WebhookDeliveryWithAttempts {
-  readonly "attemptCount": number | WebhookDeliveryWithAttemptsAttemptCountEnum | WebhookDeliveryWithAttemptsAttemptCountEnum | WebhookDeliveryWithAttemptsAttemptCountEnum;
-  readonly "attempts": ReadonlyArray<WebhookDeliveryAttempt>;
-  readonly "completedAt": string | null;
-  readonly "createdAt": string | null;
-  readonly "eventOccurredAt": string;
-  readonly "eventType": string;
-  readonly "id": string;
-  readonly "maxAttempts": number | WebhookDeliveryWithAttemptsMaxAttemptsEnum | WebhookDeliveryWithAttemptsMaxAttemptsEnum | WebhookDeliveryWithAttemptsMaxAttemptsEnum;
-  readonly "nextAttemptAt": string | null;
-  readonly "payload": null;
-  readonly "projectId": string;
-  readonly "status": WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum | WebhookDeliveryWithAttemptsStatusEnum;
-  readonly "webhookEndpointId": string
-}
-
-export type ApiWebhookDeliveryNotFoundErrorTag = "Api/WebhookDeliveryNotFoundError"
+  readonly attemptCount:
+    | number
+    | WebhookDeliveryWithAttemptsAttemptCountEnum
+    | WebhookDeliveryWithAttemptsAttemptCountEnum
+    | WebhookDeliveryWithAttemptsAttemptCountEnum;
+  readonly attempts: ReadonlyArray<WebhookDeliveryAttempt>;
+  readonly completedAt: string | null;
+  readonly createdAt: string | null;
+  readonly eventOccurredAt: string;
+  readonly eventType: string;
+  readonly id: string;
+  readonly maxAttempts:
+    | number
+    | WebhookDeliveryWithAttemptsMaxAttemptsEnum
+    | WebhookDeliveryWithAttemptsMaxAttemptsEnum
+    | WebhookDeliveryWithAttemptsMaxAttemptsEnum;
+  readonly nextAttemptAt: string | null;
+  readonly payload: null;
+  readonly projectId: string;
+  readonly status:
+    | WebhookDeliveryWithAttemptsStatusEnum
+    | WebhookDeliveryWithAttemptsStatusEnum
+    | WebhookDeliveryWithAttemptsStatusEnum
+    | WebhookDeliveryWithAttemptsStatusEnum
+    | WebhookDeliveryWithAttemptsStatusEnum;
+  readonly webhookEndpointId: string;
+}
+
+export type ApiWebhookDeliveryNotFoundErrorTag = "Api/WebhookDeliveryNotFoundError";
 
 export interface ApiWebhookDeliveryNotFoundError {
-  readonly "_tag": ApiWebhookDeliveryNotFoundErrorTag;
-  readonly "deliveryId": string
+  readonly _tag: ApiWebhookDeliveryNotFoundErrorTag;
+  readonly deliveryId: string;
 }
 
-export type WebhooksGetWebhookDelivery500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksGetWebhookDelivery500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
-export type WebhooksRetryWebhookDelivery400 = ApiWebhookValidationError | EffectHttpApiSchemaError
+export type WebhooksRetryWebhookDelivery400 = ApiWebhookValidationError | EffectHttpApiSchemaError;
 
-export type WebhooksRetryWebhookDelivery500 = ApiWebhookServiceError | ApiAuthenticationError | ApiNotAuthenticatedError
+export type WebhooksRetryWebhookDelivery500 =
+  | ApiWebhookServiceError
+  | ApiAuthenticationError
+  | ApiNotAuthenticatedError;
 
 export const make = (
-  httpClient: HttpClient.HttpClient, 
+  httpClient: HttpClient.HttpClient,
   options: {
-    readonly transformClient?: ((client: HttpClient.HttpClient) => Effect.Effect<HttpClient.HttpClient>) | undefined
-  } = {}
+    readonly transformClient?:
+      | ((client: HttpClient.HttpClient) => Effect.Effect<HttpClient.HttpClient>)
+      | undefined;
+  } = {},
 ): VoidhashCoreClient => {
   const unexpectedStatus = (response: HttpClientResponse.HttpClientResponse) =>
     Effect.flatMap(
@@ -1016,259 +1273,898 @@ export const make = (
               request: response.request,
               response,
               description:
-                typeof description === "string"
-                  ? description
-                  : JSON.stringify(description),
+                typeof description === "string" ? description : JSON.stringify(description),
             }),
           }),
         ),
-    )
+    );
   const withResponse: <A, E>(
     f: (response: HttpClientResponse.HttpClientResponse) => Effect.Effect<A, E>,
-  ) => (
-    request: HttpClientRequest.HttpClientRequest,
-  ) => Effect.Effect<any, any> = options.transformClient
-    ? (f) => (request) =>
-        Effect.flatMap(
-          Effect.flatMap(options.transformClient!(httpClient), (client) =>
-            client.execute(request),
-          ),
-          f,
-        )
-    : (f) => (request) => Effect.flatMap(httpClient.execute(request), f)
+  ) => (request: HttpClientRequest.HttpClientRequest) => Effect.Effect<any, any> =
+    options.transformClient
+      ? (f) => (request) =>
+          Effect.flatMap(
+            Effect.flatMap(options.transformClient!(httpClient), (client) =>
+              client.execute(request),
+            ),
+            f,
+          )
+      : (f) => (request) => Effect.flatMap(httpClient.execute(request), f);
   const decodeSuccess = <A>(response: HttpClientResponse.HttpClientResponse) =>
-    response.json as Effect.Effect<A, HttpClientError.HttpClientError>
-  const decodeVoid = (_response: HttpClientResponse.HttpClientResponse) =>
-    Effect.void
+    response.json as Effect.Effect<A, HttpClientError.HttpClientError>;
+  const decodeVoid = (_response: HttpClientResponse.HttpClientResponse) => Effect.void;
   const decodeError =
     <Tag extends string, E>(tag: Tag) =>
     (
       response: HttpClientResponse.HttpClientResponse,
-    ): Effect.Effect<
-      never,
-      VoidhashCoreClientError<Tag, E> | HttpClientError.HttpClientError
-    > =>
-      Effect.flatMap(
-        response.json as Effect.Effect<E, HttpClientError.HttpClientError>,
-        (cause) => Effect.fail(VoidhashCoreClientError(tag, cause, response)),
-      )
-  const onRequest = (
-    successCodes: ReadonlyArray<string>,
-    errorCodes?: Record<string, string>,
-  ) => {
-    const cases: any = { orElse: unexpectedStatus }
+    ): Effect.Effect<never, VoidhashCoreClientError<Tag, E> | HttpClientError.HttpClientError> =>
+      Effect.flatMap(response.json as Effect.Effect<E, HttpClientError.HttpClientError>, (cause) =>
+        Effect.fail(VoidhashCoreClientError(tag, cause, response)),
+      );
+  const onRequest = (successCodes: ReadonlyArray<string>, errorCodes?: Record<string, string>) => {
+    const cases: any = { orElse: unexpectedStatus };
     for (const code of successCodes) {
-      cases[code] = decodeSuccess
+      cases[code] = decodeSuccess;
     }
     if (errorCodes) {
       for (const [code, tag] of Object.entries(errorCodes)) {
-        cases[code] = decodeError(tag)
+        cases[code] = decodeError(tag);
       }
     }
     if (successCodes.length === 0) {
-      cases["2xx"] = decodeVoid
+      cases["2xx"] = decodeVoid;
     }
-    return withResponse(HttpClientResponse.matchStatus(cases) as any)
-  }
+    return withResponse(HttpClientResponse.matchStatus(cases) as any);
+  };
   return {
     httpClient,
-    "authSession": () => HttpClientRequest.get(`/api/v1/auth/session`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"AuthSession500"})
-  ),
-  "apiKeysListApiKeys": () => HttpClientRequest.get(`/api/v1/api-keys`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ApiKeysListApiKeys500"})
-  ),
-  "apiKeysCreateSecretKey": (options) => HttpClientRequest.post(`/api/v1/api-keys`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ApiKeysCreateSecretKey500"})
-  ),
-  "apiKeysGetApiKeyById": (apiKeyId) => HttpClientRequest.get(`/api/v1/api-keys/${apiKeyId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiApiKeyNotFoundError","500":"ApiKeysGetApiKeyById500"})
-  ),
-  "apiKeysDeleteApiKey": (apiKeyId) => HttpClientRequest.delete(`/api/v1/api-keys/${apiKeyId}`).pipe(
-    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiApiKeyNotFoundError","500":"ApiKeysDeleteApiKey500"})
-  ),
-  "apiKeysRotateSecretKey": (apiKeyId) => HttpClientRequest.post(`/api/v1/api-keys/${apiKeyId}/rotate`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiApiKeyNotFoundError","500":"ApiKeysRotateSecretKey500"})
-  ),
-  "personsListPersons": () => HttpClientRequest.get(`/api/v1/persons`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PersonsListPersons500"})
-  ),
-  "personsCreatePerson": (options) => HttpClientRequest.post(`/api/v1/persons`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"PersonsCreatePerson400","403":"ApiActionForbiddenError","500":"PersonsCreatePerson500"})
-  ),
-  "personsGetPersonById": (personId) => HttpClientRequest.get(`/api/v1/persons/${personId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiPersonNotFoundError","500":"PersonsGetPersonById500"})
-  ),
-  "personsGetPersonByDistinctId": (distinctId) => HttpClientRequest.get(`/api/v1/persons/by-distinct-id/${distinctId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiPersonNotFoundError","500":"PersonsGetPersonByDistinctId500"})
-  ),
-  "organizationsCreateOrganization": (options) => HttpClientRequest.post(`/api/v1/organizations`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"OrganizationsCreateOrganization500"})
-  ),
-  "perksListPerks": () => HttpClientRequest.get(`/api/v1/perks`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PerksListPerks500"})
-  ),
-  "paywallLocationsListPaywallLocations": () => HttpClientRequest.get(`/api/v1/paywall-locations`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PaywallLocationsListPaywallLocations500"})
-  ),
-  "schemaGetSchema": () => HttpClientRequest.get(`/api/v1/schema`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"SchemaGetSchema500"})
-  ),
-  "schemaGetSchemaVersion": () => HttpClientRequest.get(`/api/v1/schema/version`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"SchemaGetSchemaVersion500"})
-  ),
-  "projectsCreateProject": (options) => HttpClientRequest.post(`/api/v1/projects`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ProjectsCreateProject500"})
-  ),
-  "projectsListProjects": (organizationId) => HttpClientRequest.get(`/api/v1/projects/${organizationId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ProjectsListProjects500"})
-  ),
-  "productsListProducts": () => HttpClientRequest.get(`/api/v1/products`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"ProductsListProducts500"})
-  ),
-  "productPerksListProductPerksByProductId": (productId) => HttpClientRequest.get(`/api/v1/product-perks/by-product-id/${productId}`).pipe(
-    onRequest(["2xx"], {"400":"ProductPerksListProductPerksByProductId400","403":"ApiActionForbiddenError","500":"ProductPerksListProductPerksByProductId500"})
-  ),
-  "sdkGetPerson": (options) => HttpClientRequest.get(`/api/v1/sdk/person`).pipe(
-    HttpClientRequest.setHeaders({ "x-distinct-id": options?.["x-distinct-id"] ?? undefined, "x-publishable-key": options?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options?.["x-client-locale"] ?? undefined, "x-client-version": options?.["x-client-version"] ?? undefined, "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined, "x-nonce": options?.["x-nonce"] ?? undefined, "x-observer-mode": options?.["x-observer-mode"] ?? undefined, "x-platform": options?.["x-platform"] ?? undefined, "x-platform-brand": options?.["x-platform-brand"] ?? undefined, "x-platform-device": options?.["x-platform-device"] ?? undefined, "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options?.["x-platform-version"] ?? undefined, "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined, "x-sdk": options?.["x-sdk"] ?? undefined, "x-sdk-version": options?.["x-sdk-version"] ?? undefined, "x-storefront": options?.["x-storefront"] ?? undefined }),
-    onRequest(["2xx"], {"400":"SdkGetPerson400","404":"ApiSdkPersonNotFoundError","500":"SdkGetPerson500"})
-  ),
-  "sdkIdentifyPerson": (options) => HttpClientRequest.post(`/api/v1/sdk/identify`).pipe(
-    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
-    HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkIdentifyPerson400","404":"ApiSdkPersonNotFoundError","409":"ApiSdkPersonAlreadyIdentifiedError","500":"SdkIdentifyPerson500"})
-  ),
-  "sdkSyncPersonAttributes": (options) => HttpClientRequest.post(`/api/v1/sdk/person/traits`).pipe(
-    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
-    HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkSyncPersonAttributes400","404":"ApiSdkPersonNotFoundError","500":"SdkSyncPersonAttributes500"})
-  ),
-  "sdkSyncTransaction": (options) => HttpClientRequest.post(`/api/v1/sdk/sync-transaction`).pipe(
-    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
-    HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkSyncTransaction400","500":"SdkSyncTransaction500"})
-  ),
-  "sdkEvaluateFeatureFlags": (options) => HttpClientRequest.post(`/api/v1/sdk/evaluate-flags`).pipe(
-    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
-    HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"SdkEvaluateFeatureFlags500"})
-  ),
-  "sdkResolvePaywall": (options) => HttpClientRequest.post(`/api/v1/sdk/resolve-paywall`).pipe(
-    HttpClientRequest.setHeaders({ "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined, "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options.params?.["x-client-locale"] ?? undefined, "x-client-version": options.params?.["x-client-version"] ?? undefined, "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined, "x-nonce": options.params?.["x-nonce"] ?? undefined, "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined, "x-platform": options.params?.["x-platform"] ?? undefined, "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined, "x-platform-device": options.params?.["x-platform-device"] ?? undefined, "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options.params?.["x-platform-version"] ?? undefined, "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined, "x-sdk": options.params?.["x-sdk"] ?? undefined, "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined, "x-storefront": options.params?.["x-storefront"] ?? undefined }),
-    HttpClientRequest.bodyJsonUnsafe(options.payload),
-    onRequest(["2xx"], {"400":"SdkResolvePaywall400","500":"SdkResolvePaywall500"})
-  ),
-  "sdkGetSchema": (options) => HttpClientRequest.get(`/api/v1/sdk/schema`).pipe(
-    HttpClientRequest.setHeaders({ "x-distinct-id": options?.["x-distinct-id"] ?? undefined, "x-publishable-key": options?.["x-publishable-key"] ?? undefined, "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined, "x-client-locale": options?.["x-client-locale"] ?? undefined, "x-client-version": options?.["x-client-version"] ?? undefined, "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined, "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined, "x-nonce": options?.["x-nonce"] ?? undefined, "x-observer-mode": options?.["x-observer-mode"] ?? undefined, "x-platform": options?.["x-platform"] ?? undefined, "x-platform-brand": options?.["x-platform-brand"] ?? undefined, "x-platform-device": options?.["x-platform-device"] ?? undefined, "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined, "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined, "x-platform-version": options?.["x-platform-version"] ?? undefined, "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined, "x-sdk": options?.["x-sdk"] ?? undefined, "x-sdk-version": options?.["x-sdk-version"] ?? undefined, "x-storefront": options?.["x-storefront"] ?? undefined }),
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"SdkGetSchema500"})
-  ),
-  "usersGetUser": () => HttpClientRequest.get(`/api/v1/users/current`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","500":"UsersGetUser500"})
-  ),
-  "paymentProviderConfigurationsListPaymentProviderConfigurations": () => HttpClientRequest.get(`/api/v1/payment-provider-configurations`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PaymentProviderConfigurationsListPaymentProviderConfigurations500"})
-  ),
-  "paymentProviderProductsListPaymentProviderProducts": () => HttpClientRequest.get(`/api/v1/payment-provider-products`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"PaymentProviderProductsListPaymentProviderProducts500"})
-  ),
-  "webhooksListWebhookEndpoints": () => HttpClientRequest.get(`/api/v1/webhooks/endpoints`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"WebhooksListWebhookEndpoints500"})
-  ),
-  "webhooksCreateWebhookEndpoint": (options) => HttpClientRequest.post(`/api/v1/webhooks/endpoints`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"WebhooksCreateWebhookEndpoint400","403":"ApiActionForbiddenError","500":"WebhooksCreateWebhookEndpoint500"})
-  ),
-  "webhooksGetWebhookEndpoint": (endpointId) => HttpClientRequest.get(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksGetWebhookEndpoint500"})
-  ),
-  "webhooksDeleteWebhookEndpoint": (endpointId) => HttpClientRequest.delete(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
-    onRequest([], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksDeleteWebhookEndpoint500"})
-  ),
-  "webhooksUpdateWebhookEndpoint": (endpointId, options) => HttpClientRequest.patch(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"WebhooksUpdateWebhookEndpoint400","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksUpdateWebhookEndpoint500"})
-  ),
-  "webhooksRotateWebhookSecret": (endpointId) => HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/rotate-secret`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksRotateWebhookSecret500"})
-  ),
-  "webhooksTestWebhookEndpoint": (endpointId) => HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/test`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookEndpointNotFoundError","500":"WebhooksTestWebhookEndpoint500"})
-  ),
-  "webhooksListWebhookDeliveries": () => HttpClientRequest.get(`/api/v1/webhooks/deliveries`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","500":"WebhooksListWebhookDeliveries500"})
-  ),
-  "webhooksGetWebhookDelivery": (deliveryId) => HttpClientRequest.get(`/api/v1/webhooks/deliveries/${deliveryId}`).pipe(
-    onRequest(["2xx"], {"400":"EffectHttpApiSchemaError","403":"ApiActionForbiddenError","404":"ApiWebhookDeliveryNotFoundError","500":"WebhooksGetWebhookDelivery500"})
-  ),
-  "webhooksRetryWebhookDelivery": (deliveryId) => HttpClientRequest.post(`/api/v1/webhooks/deliveries/${deliveryId}/retry`).pipe(
-    onRequest(["2xx"], {"400":"WebhooksRetryWebhookDelivery400","403":"ApiActionForbiddenError","404":"ApiWebhookDeliveryNotFoundError","500":"WebhooksRetryWebhookDelivery500"})
-  )
-  }
-}
+    authSession: () =>
+      HttpClientRequest.get(`/api/v1/auth/session`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "AuthSession500",
+        }),
+      ),
+    apiKeysListApiKeys: () =>
+      HttpClientRequest.get(`/api/v1/api-keys`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "ApiKeysListApiKeys500",
+        }),
+      ),
+    apiKeysCreateSecretKey: (options) =>
+      HttpClientRequest.post(`/api/v1/api-keys`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "ApiKeysCreateSecretKey500",
+        }),
+      ),
+    apiKeysGetApiKeyById: (apiKeyId) =>
+      HttpClientRequest.get(`/api/v1/api-keys/${apiKeyId}`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiApiKeyNotFoundError",
+          "500": "ApiKeysGetApiKeyById500",
+        }),
+      ),
+    apiKeysDeleteApiKey: (apiKeyId) =>
+      HttpClientRequest.delete(`/api/v1/api-keys/${apiKeyId}`).pipe(
+        onRequest([], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiApiKeyNotFoundError",
+          "500": "ApiKeysDeleteApiKey500",
+        }),
+      ),
+    apiKeysRotateSecretKey: (apiKeyId) =>
+      HttpClientRequest.post(`/api/v1/api-keys/${apiKeyId}/rotate`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiApiKeyNotFoundError",
+          "500": "ApiKeysRotateSecretKey500",
+        }),
+      ),
+    personsListPersons: () =>
+      HttpClientRequest.get(`/api/v1/persons`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "PersonsListPersons500",
+        }),
+      ),
+    personsCreatePerson: (options) =>
+      HttpClientRequest.post(`/api/v1/persons`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "PersonsCreatePerson400",
+          "403": "ApiActionForbiddenError",
+          "500": "PersonsCreatePerson500",
+        }),
+      ),
+    personsGetPersonById: (personId) =>
+      HttpClientRequest.get(`/api/v1/persons/${personId}`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiPersonNotFoundError",
+          "500": "PersonsGetPersonById500",
+        }),
+      ),
+    personsGetPersonByDistinctId: (distinctId) =>
+      HttpClientRequest.get(`/api/v1/persons/by-distinct-id/${distinctId}`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiPersonNotFoundError",
+          "500": "PersonsGetPersonByDistinctId500",
+        }),
+      ),
+    organizationsCreateOrganization: (options) =>
+      HttpClientRequest.post(`/api/v1/organizations`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "500": "OrganizationsCreateOrganization500",
+        }),
+      ),
+    perksListPerks: () =>
+      HttpClientRequest.get(`/api/v1/perks`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "PerksListPerks500",
+        }),
+      ),
+    paywallLocationsListPaywallLocations: () =>
+      HttpClientRequest.get(`/api/v1/paywall-locations`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "PaywallLocationsListPaywallLocations500",
+        }),
+      ),
+    schemaGetSchema: () =>
+      HttpClientRequest.get(`/api/v1/schema`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "SchemaGetSchema500",
+        }),
+      ),
+    schemaGetSchemaVersion: () =>
+      HttpClientRequest.get(`/api/v1/schema/version`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "SchemaGetSchemaVersion500",
+        }),
+      ),
+    projectsCreateProject: (options) =>
+      HttpClientRequest.post(`/api/v1/projects`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "ProjectsCreateProject500",
+        }),
+      ),
+    projectsListProjects: (organizationId) =>
+      HttpClientRequest.get(`/api/v1/projects/${organizationId}`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "ProjectsListProjects500",
+        }),
+      ),
+    productsListProducts: () =>
+      HttpClientRequest.get(`/api/v1/products`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "ProductsListProducts500",
+        }),
+      ),
+    productPerksListProductPerksByProductId: (productId) =>
+      HttpClientRequest.get(`/api/v1/product-perks/by-product-id/${productId}`).pipe(
+        onRequest(["2xx"], {
+          "400": "ProductPerksListProductPerksByProductId400",
+          "403": "ApiActionForbiddenError",
+          "500": "ProductPerksListProductPerksByProductId500",
+        }),
+      ),
+    sdkGetPerson: (options) =>
+      HttpClientRequest.get(`/api/v1/sdk/person`).pipe(
+        HttpClientRequest.setHeaders({
+          "x-distinct-id": options?.["x-distinct-id"] ?? undefined,
+          "x-publishable-key": options?.["x-publishable-key"] ?? undefined,
+          "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined,
+          "x-client-locale": options?.["x-client-locale"] ?? undefined,
+          "x-client-version": options?.["x-client-version"] ?? undefined,
+          "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined,
+          "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined,
+          "x-nonce": options?.["x-nonce"] ?? undefined,
+          "x-observer-mode": options?.["x-observer-mode"] ?? undefined,
+          "x-platform": options?.["x-platform"] ?? undefined,
+          "x-platform-brand": options?.["x-platform-brand"] ?? undefined,
+          "x-platform-device": options?.["x-platform-device"] ?? undefined,
+          "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined,
+          "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined,
+          "x-platform-version": options?.["x-platform-version"] ?? undefined,
+          "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined,
+          "x-sdk": options?.["x-sdk"] ?? undefined,
+          "x-sdk-version": options?.["x-sdk-version"] ?? undefined,
+          "x-storefront": options?.["x-storefront"] ?? undefined,
+        }),
+        onRequest(["2xx"], {
+          "400": "SdkGetPerson400",
+          "404": "ApiSdkPersonNotFoundError",
+          "500": "SdkGetPerson500",
+        }),
+      ),
+    sdkIdentifyPerson: (options) =>
+      HttpClientRequest.post(`/api/v1/sdk/identify`).pipe(
+        HttpClientRequest.setHeaders({
+          "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined,
+          "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined,
+          "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined,
+          "x-client-locale": options.params?.["x-client-locale"] ?? undefined,
+          "x-client-version": options.params?.["x-client-version"] ?? undefined,
+          "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined,
+          "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined,
+          "x-nonce": options.params?.["x-nonce"] ?? undefined,
+          "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined,
+          "x-platform": options.params?.["x-platform"] ?? undefined,
+          "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined,
+          "x-platform-device": options.params?.["x-platform-device"] ?? undefined,
+          "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined,
+          "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined,
+          "x-platform-version": options.params?.["x-platform-version"] ?? undefined,
+          "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined,
+          "x-sdk": options.params?.["x-sdk"] ?? undefined,
+          "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined,
+          "x-storefront": options.params?.["x-storefront"] ?? undefined,
+        }),
+        HttpClientRequest.bodyJsonUnsafe(options.payload),
+        onRequest(["2xx"], {
+          "400": "SdkIdentifyPerson400",
+          "404": "ApiSdkPersonNotFoundError",
+          "409": "ApiSdkPersonAlreadyIdentifiedError",
+          "500": "SdkIdentifyPerson500",
+        }),
+      ),
+    sdkSyncPersonAttributes: (options) =>
+      HttpClientRequest.post(`/api/v1/sdk/person/traits`).pipe(
+        HttpClientRequest.setHeaders({
+          "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined,
+          "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined,
+          "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined,
+          "x-client-locale": options.params?.["x-client-locale"] ?? undefined,
+          "x-client-version": options.params?.["x-client-version"] ?? undefined,
+          "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined,
+          "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined,
+          "x-nonce": options.params?.["x-nonce"] ?? undefined,
+          "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined,
+          "x-platform": options.params?.["x-platform"] ?? undefined,
+          "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined,
+          "x-platform-device": options.params?.["x-platform-device"] ?? undefined,
+          "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined,
+          "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined,
+          "x-platform-version": options.params?.["x-platform-version"] ?? undefined,
+          "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined,
+          "x-sdk": options.params?.["x-sdk"] ?? undefined,
+          "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined,
+          "x-storefront": options.params?.["x-storefront"] ?? undefined,
+        }),
+        HttpClientRequest.bodyJsonUnsafe(options.payload),
+        onRequest(["2xx"], {
+          "400": "SdkSyncPersonAttributes400",
+          "404": "ApiSdkPersonNotFoundError",
+          "500": "SdkSyncPersonAttributes500",
+        }),
+      ),
+    sdkSyncTransaction: (options) =>
+      HttpClientRequest.post(`/api/v1/sdk/sync-transaction`).pipe(
+        HttpClientRequest.setHeaders({
+          "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined,
+          "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined,
+          "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined,
+          "x-client-locale": options.params?.["x-client-locale"] ?? undefined,
+          "x-client-version": options.params?.["x-client-version"] ?? undefined,
+          "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined,
+          "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined,
+          "x-nonce": options.params?.["x-nonce"] ?? undefined,
+          "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined,
+          "x-platform": options.params?.["x-platform"] ?? undefined,
+          "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined,
+          "x-platform-device": options.params?.["x-platform-device"] ?? undefined,
+          "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined,
+          "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined,
+          "x-platform-version": options.params?.["x-platform-version"] ?? undefined,
+          "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined,
+          "x-sdk": options.params?.["x-sdk"] ?? undefined,
+          "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined,
+          "x-storefront": options.params?.["x-storefront"] ?? undefined,
+        }),
+        HttpClientRequest.bodyJsonUnsafe(options.payload),
+        onRequest(["2xx"], { "400": "SdkSyncTransaction400", "500": "SdkSyncTransaction500" }),
+      ),
+    sdkEvaluateFeatureFlags: (options) =>
+      HttpClientRequest.post(`/api/v1/sdk/evaluate-flags`).pipe(
+        HttpClientRequest.setHeaders({
+          "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined,
+          "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined,
+          "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined,
+          "x-client-locale": options.params?.["x-client-locale"] ?? undefined,
+          "x-client-version": options.params?.["x-client-version"] ?? undefined,
+          "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined,
+          "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined,
+          "x-nonce": options.params?.["x-nonce"] ?? undefined,
+          "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined,
+          "x-platform": options.params?.["x-platform"] ?? undefined,
+          "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined,
+          "x-platform-device": options.params?.["x-platform-device"] ?? undefined,
+          "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined,
+          "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined,
+          "x-platform-version": options.params?.["x-platform-version"] ?? undefined,
+          "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined,
+          "x-sdk": options.params?.["x-sdk"] ?? undefined,
+          "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined,
+          "x-storefront": options.params?.["x-storefront"] ?? undefined,
+        }),
+        HttpClientRequest.bodyJsonUnsafe(options.payload),
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "500": "SdkEvaluateFeatureFlags500",
+        }),
+      ),
+    sdkResolvePaywall: (options) =>
+      HttpClientRequest.post(`/api/v1/sdk/resolve-paywall`).pipe(
+        HttpClientRequest.setHeaders({
+          "x-distinct-id": options.params?.["x-distinct-id"] ?? undefined,
+          "x-publishable-key": options.params?.["x-publishable-key"] ?? undefined,
+          "x-client-bundle-id": options.params?.["x-client-bundle-id"] ?? undefined,
+          "x-client-locale": options.params?.["x-client-locale"] ?? undefined,
+          "x-client-version": options.params?.["x-client-version"] ?? undefined,
+          "x-is-backgrounded": options.params?.["x-is-backgrounded"] ?? undefined,
+          "x-is-debug-build": options.params?.["x-is-debug-build"] ?? undefined,
+          "x-nonce": options.params?.["x-nonce"] ?? undefined,
+          "x-observer-mode": options.params?.["x-observer-mode"] ?? undefined,
+          "x-platform": options.params?.["x-platform"] ?? undefined,
+          "x-platform-brand": options.params?.["x-platform-brand"] ?? undefined,
+          "x-platform-device": options.params?.["x-platform-device"] ?? undefined,
+          "x-platform-flavor": options.params?.["x-platform-flavor"] ?? undefined,
+          "x-platform-flavor-version": options.params?.["x-platform-flavor-version"] ?? undefined,
+          "x-platform-version": options.params?.["x-platform-version"] ?? undefined,
+          "x-preferred-locales": options.params?.["x-preferred-locales"] ?? undefined,
+          "x-sdk": options.params?.["x-sdk"] ?? undefined,
+          "x-sdk-version": options.params?.["x-sdk-version"] ?? undefined,
+          "x-storefront": options.params?.["x-storefront"] ?? undefined,
+        }),
+        HttpClientRequest.bodyJsonUnsafe(options.payload),
+        onRequest(["2xx"], { "400": "SdkResolvePaywall400", "500": "SdkResolvePaywall500" }),
+      ),
+    sdkGetSchema: (options) =>
+      HttpClientRequest.get(`/api/v1/sdk/schema`).pipe(
+        HttpClientRequest.setHeaders({
+          "x-distinct-id": options?.["x-distinct-id"] ?? undefined,
+          "x-publishable-key": options?.["x-publishable-key"] ?? undefined,
+          "x-client-bundle-id": options?.["x-client-bundle-id"] ?? undefined,
+          "x-client-locale": options?.["x-client-locale"] ?? undefined,
+          "x-client-version": options?.["x-client-version"] ?? undefined,
+          "x-is-backgrounded": options?.["x-is-backgrounded"] ?? undefined,
+          "x-is-debug-build": options?.["x-is-debug-build"] ?? undefined,
+          "x-nonce": options?.["x-nonce"] ?? undefined,
+          "x-observer-mode": options?.["x-observer-mode"] ?? undefined,
+          "x-platform": options?.["x-platform"] ?? undefined,
+          "x-platform-brand": options?.["x-platform-brand"] ?? undefined,
+          "x-platform-device": options?.["x-platform-device"] ?? undefined,
+          "x-platform-flavor": options?.["x-platform-flavor"] ?? undefined,
+          "x-platform-flavor-version": options?.["x-platform-flavor-version"] ?? undefined,
+          "x-platform-version": options?.["x-platform-version"] ?? undefined,
+          "x-preferred-locales": options?.["x-preferred-locales"] ?? undefined,
+          "x-sdk": options?.["x-sdk"] ?? undefined,
+          "x-sdk-version": options?.["x-sdk-version"] ?? undefined,
+          "x-storefront": options?.["x-storefront"] ?? undefined,
+        }),
+        onRequest(["2xx"], { "400": "EffectHttpApiSchemaError", "500": "SdkGetSchema500" }),
+      ),
+    usersGetUser: () =>
+      HttpClientRequest.get(`/api/v1/users/current`).pipe(
+        onRequest(["2xx"], { "400": "EffectHttpApiSchemaError", "500": "UsersGetUser500" }),
+      ),
+    paymentProviderConfigurationsListPaymentProviderConfigurations: () =>
+      HttpClientRequest.get(`/api/v1/payment-provider-configurations`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "PaymentProviderConfigurationsListPaymentProviderConfigurations500",
+        }),
+      ),
+    paymentProviderProductsListPaymentProviderProducts: () =>
+      HttpClientRequest.get(`/api/v1/payment-provider-products`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "PaymentProviderProductsListPaymentProviderProducts500",
+        }),
+      ),
+    webhooksListWebhookEndpoints: () =>
+      HttpClientRequest.get(`/api/v1/webhooks/endpoints`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "WebhooksListWebhookEndpoints500",
+        }),
+      ),
+    webhooksCreateWebhookEndpoint: (options) =>
+      HttpClientRequest.post(`/api/v1/webhooks/endpoints`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "WebhooksCreateWebhookEndpoint400",
+          "403": "ApiActionForbiddenError",
+          "500": "WebhooksCreateWebhookEndpoint500",
+        }),
+      ),
+    webhooksGetWebhookEndpoint: (endpointId) =>
+      HttpClientRequest.get(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiWebhookEndpointNotFoundError",
+          "500": "WebhooksGetWebhookEndpoint500",
+        }),
+      ),
+    webhooksDeleteWebhookEndpoint: (endpointId) =>
+      HttpClientRequest.delete(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
+        onRequest([], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiWebhookEndpointNotFoundError",
+          "500": "WebhooksDeleteWebhookEndpoint500",
+        }),
+      ),
+    webhooksUpdateWebhookEndpoint: (endpointId, options) =>
+      HttpClientRequest.patch(`/api/v1/webhooks/endpoints/${endpointId}`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "WebhooksUpdateWebhookEndpoint400",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiWebhookEndpointNotFoundError",
+          "500": "WebhooksUpdateWebhookEndpoint500",
+        }),
+      ),
+    webhooksRotateWebhookSecret: (endpointId) =>
+      HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/rotate-secret`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiWebhookEndpointNotFoundError",
+          "500": "WebhooksRotateWebhookSecret500",
+        }),
+      ),
+    webhooksTestWebhookEndpoint: (endpointId) =>
+      HttpClientRequest.post(`/api/v1/webhooks/endpoints/${endpointId}/test`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiWebhookEndpointNotFoundError",
+          "500": "WebhooksTestWebhookEndpoint500",
+        }),
+      ),
+    webhooksListWebhookDeliveries: () =>
+      HttpClientRequest.get(`/api/v1/webhooks/deliveries`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "500": "WebhooksListWebhookDeliveries500",
+        }),
+      ),
+    webhooksGetWebhookDelivery: (deliveryId) =>
+      HttpClientRequest.get(`/api/v1/webhooks/deliveries/${deliveryId}`).pipe(
+        onRequest(["2xx"], {
+          "400": "EffectHttpApiSchemaError",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiWebhookDeliveryNotFoundError",
+          "500": "WebhooksGetWebhookDelivery500",
+        }),
+      ),
+    webhooksRetryWebhookDelivery: (deliveryId) =>
+      HttpClientRequest.post(`/api/v1/webhooks/deliveries/${deliveryId}/retry`).pipe(
+        onRequest(["2xx"], {
+          "400": "WebhooksRetryWebhookDelivery400",
+          "403": "ApiActionForbiddenError",
+          "404": "ApiWebhookDeliveryNotFoundError",
+          "500": "WebhooksRetryWebhookDelivery500",
+        }),
+      ),
+  };
+};
 
 export interface VoidhashCoreClient {
-  readonly httpClient: HttpClient.HttpClient
-  readonly "authSession": () => Effect.Effect<AuthSession200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"AuthSession500", AuthSession500>>
-  readonly "apiKeysListApiKeys": () => Effect.Effect<ApiKeysListApiKeys200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiKeysListApiKeys500", ApiKeysListApiKeys500>>
-  readonly "apiKeysCreateSecretKey": (options: CreateSecretKeyBody) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiKeysCreateSecretKey500", ApiKeysCreateSecretKey500>>
-  readonly "apiKeysGetApiKeyById": (apiKeyId: string) => Effect.Effect<ApiKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysGetApiKeyById500", ApiKeysGetApiKeyById500>>
-  readonly "apiKeysDeleteApiKey": (apiKeyId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysDeleteApiKey500", ApiKeysDeleteApiKey500>>
-  readonly "apiKeysRotateSecretKey": (apiKeyId: string) => Effect.Effect<ApiKeyWithRawKey, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError> | VoidhashCoreClientError<"ApiKeysRotateSecretKey500", ApiKeysRotateSecretKey500>>
-  readonly "personsListPersons": () => Effect.Effect<PersonsListPersons200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PersonsListPersons500", PersonsListPersons500>>
-  readonly "personsCreatePerson": (options: CreatePersonBody) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"PersonsCreatePerson400", PersonsCreatePerson400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PersonsCreatePerson500", PersonsCreatePerson500>>
-  readonly "personsGetPersonById": (personId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiPersonNotFoundError", ApiPersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonById500", PersonsGetPersonById500>>
-  readonly "personsGetPersonByDistinctId": (distinctId: string) => Effect.Effect<Person, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiPersonNotFoundError", ApiPersonNotFoundError> | VoidhashCoreClientError<"PersonsGetPersonByDistinctId500", PersonsGetPersonByDistinctId500>>
-  readonly "organizationsCreateOrganization": (options: CreateOrganizationBody) => Effect.Effect<Organization, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"OrganizationsCreateOrganization500", OrganizationsCreateOrganization500>>
-  readonly "perksListPerks": () => Effect.Effect<PerksListPerks200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PerksListPerks500", PerksListPerks500>>
-  readonly "paywallLocationsListPaywallLocations": () => Effect.Effect<PaywallLocationsListPaywallLocations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PaywallLocationsListPaywallLocations500", PaywallLocationsListPaywallLocations500>>
-  readonly "schemaGetSchema": () => Effect.Effect<ProjectSchemaResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"SchemaGetSchema500", SchemaGetSchema500>>
-  readonly "schemaGetSchemaVersion": () => Effect.Effect<SchemaVersion, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"SchemaGetSchemaVersion500", SchemaGetSchemaVersion500>>
-  readonly "projectsCreateProject": (options: CreateProjectBody) => Effect.Effect<Project, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProjectsCreateProject500", ProjectsCreateProject500>>
-  readonly "projectsListProjects": (organizationId: string) => Effect.Effect<ProjectsListProjects200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProjectsListProjects500", ProjectsListProjects500>>
-  readonly "productsListProducts": () => Effect.Effect<ProductsListProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProductsListProducts500", ProductsListProducts500>>
-  readonly "productPerksListProductPerksByProductId": (productId: string) => Effect.Effect<ProductPerksListProductPerksByProductId200, HttpClientError.HttpClientError | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId400", ProductPerksListProductPerksByProductId400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ProductPerksListProductPerksByProductId500", ProductPerksListProductPerksByProductId500>>
-  readonly "sdkGetPerson": (options: SdkGetPersonParams) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkGetPerson400", SdkGetPerson400> | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError> | VoidhashCoreClientError<"SdkGetPerson500", SdkGetPerson500>>
-  readonly "sdkIdentifyPerson": (options: { readonly params: SdkIdentifyPersonParams; readonly payload: SdkIdentifyBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkIdentifyPerson400", SdkIdentifyPerson400> | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError> | VoidhashCoreClientError<"ApiSdkPersonAlreadyIdentifiedError", ApiSdkPersonAlreadyIdentifiedError> | VoidhashCoreClientError<"SdkIdentifyPerson500", SdkIdentifyPerson500>>
-  readonly "sdkSyncPersonAttributes": (options: { readonly params: SdkSyncPersonAttributesParams; readonly payload: SdkSyncPersonAttributesBody }) => Effect.Effect<SdkPerson, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncPersonAttributes400", SdkSyncPersonAttributes400> | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError> | VoidhashCoreClientError<"SdkSyncPersonAttributes500", SdkSyncPersonAttributes500>>
-  readonly "sdkSyncTransaction": (options: { readonly params: SdkSyncTransactionParams; readonly payload: SdkSyncTransactionRequest }) => Effect.Effect<SdkSyncTransactionResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkSyncTransaction400", SdkSyncTransaction400> | VoidhashCoreClientError<"SdkSyncTransaction500", SdkSyncTransaction500>>
-  readonly "sdkEvaluateFeatureFlags": (options: { readonly params: SdkEvaluateFeatureFlagsParams; readonly payload: EvaluateFeatureFlagsBody }) => Effect.Effect<SdkFeatureFlagsResponse, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"SdkEvaluateFeatureFlags500", SdkEvaluateFeatureFlags500>>
-  readonly "sdkResolvePaywall": (options: { readonly params: SdkResolvePaywallParams; readonly payload: SdkResolvePaywallBody }) => Effect.Effect<SdkResolvePaywall200, HttpClientError.HttpClientError | VoidhashCoreClientError<"SdkResolvePaywall400", SdkResolvePaywall400> | VoidhashCoreClientError<"SdkResolvePaywall500", SdkResolvePaywall500>>
-  readonly "sdkGetSchema": (options: SdkGetSchemaParams) => Effect.Effect<SdkSchema, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"SdkGetSchema500", SdkGetSchema500>>
-  readonly "usersGetUser": () => Effect.Effect<User, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"UsersGetUser500", UsersGetUser500>>
-  readonly "paymentProviderConfigurationsListPaymentProviderConfigurations": () => Effect.Effect<PaymentProviderConfigurationsListPaymentProviderConfigurations200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderConfigurationsListPaymentProviderConfigurations500", PaymentProviderConfigurationsListPaymentProviderConfigurations500>>
-  readonly "paymentProviderProductsListPaymentProviderProducts": () => Effect.Effect<PaymentProviderProductsListPaymentProviderProducts200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"PaymentProviderProductsListPaymentProviderProducts500", PaymentProviderProductsListPaymentProviderProducts500>>
-  readonly "webhooksListWebhookEndpoints": () => Effect.Effect<WebhooksListWebhookEndpoints200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookEndpoints500", WebhooksListWebhookEndpoints500>>
-  readonly "webhooksCreateWebhookEndpoint": (options: CreateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint400", WebhooksCreateWebhookEndpoint400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint500", WebhooksCreateWebhookEndpoint500>>
-  readonly "webhooksGetWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookEndpoint500", WebhooksGetWebhookEndpoint500>>
-  readonly "webhooksDeleteWebhookEndpoint": (endpointId: string) => Effect.Effect<void, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksDeleteWebhookEndpoint500", WebhooksDeleteWebhookEndpoint500>>
-  readonly "webhooksUpdateWebhookEndpoint": (endpointId: string, options: UpdateWebhookEndpointBody) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint400", WebhooksUpdateWebhookEndpoint400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint500", WebhooksUpdateWebhookEndpoint500>>
-  readonly "webhooksRotateWebhookSecret": (endpointId: string) => Effect.Effect<WebhookEndpoint, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksRotateWebhookSecret500", WebhooksRotateWebhookSecret500>>
-  readonly "webhooksTestWebhookEndpoint": (endpointId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError> | VoidhashCoreClientError<"WebhooksTestWebhookEndpoint500", WebhooksTestWebhookEndpoint500>>
-  readonly "webhooksListWebhookDeliveries": () => Effect.Effect<WebhooksListWebhookDeliveries200, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"WebhooksListWebhookDeliveries500", WebhooksListWebhookDeliveries500>>
-  readonly "webhooksGetWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDeliveryWithAttempts, HttpClientError.HttpClientError | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookDeliveryNotFoundError", ApiWebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksGetWebhookDelivery500", WebhooksGetWebhookDelivery500>>
-  readonly "webhooksRetryWebhookDelivery": (deliveryId: string) => Effect.Effect<WebhookDelivery, HttpClientError.HttpClientError | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery400", WebhooksRetryWebhookDelivery400> | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError> | VoidhashCoreClientError<"ApiWebhookDeliveryNotFoundError", ApiWebhookDeliveryNotFoundError> | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery500", WebhooksRetryWebhookDelivery500>>
+  readonly httpClient: HttpClient.HttpClient;
+  readonly authSession: () => Effect.Effect<
+    AuthSession200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"AuthSession500", AuthSession500>
+  >;
+  readonly apiKeysListApiKeys: () => Effect.Effect<
+    ApiKeysListApiKeys200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiKeysListApiKeys500", ApiKeysListApiKeys500>
+  >;
+  readonly apiKeysCreateSecretKey: (
+    options: CreateSecretKeyBody,
+  ) => Effect.Effect<
+    ApiKeyWithRawKey,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiKeysCreateSecretKey500", ApiKeysCreateSecretKey500>
+  >;
+  readonly apiKeysGetApiKeyById: (
+    apiKeyId: string,
+  ) => Effect.Effect<
+    ApiKey,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError>
+    | VoidhashCoreClientError<"ApiKeysGetApiKeyById500", ApiKeysGetApiKeyById500>
+  >;
+  readonly apiKeysDeleteApiKey: (
+    apiKeyId: string,
+  ) => Effect.Effect<
+    void,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError>
+    | VoidhashCoreClientError<"ApiKeysDeleteApiKey500", ApiKeysDeleteApiKey500>
+  >;
+  readonly apiKeysRotateSecretKey: (
+    apiKeyId: string,
+  ) => Effect.Effect<
+    ApiKeyWithRawKey,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiApiKeyNotFoundError", ApiApiKeyNotFoundError>
+    | VoidhashCoreClientError<"ApiKeysRotateSecretKey500", ApiKeysRotateSecretKey500>
+  >;
+  readonly personsListPersons: () => Effect.Effect<
+    PersonsListPersons200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"PersonsListPersons500", PersonsListPersons500>
+  >;
+  readonly personsCreatePerson: (
+    options: CreatePersonBody,
+  ) => Effect.Effect<
+    Person,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"PersonsCreatePerson400", PersonsCreatePerson400>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"PersonsCreatePerson500", PersonsCreatePerson500>
+  >;
+  readonly personsGetPersonById: (
+    personId: string,
+  ) => Effect.Effect<
+    Person,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiPersonNotFoundError", ApiPersonNotFoundError>
+    | VoidhashCoreClientError<"PersonsGetPersonById500", PersonsGetPersonById500>
+  >;
+  readonly personsGetPersonByDistinctId: (
+    distinctId: string,
+  ) => Effect.Effect<
+    Person,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiPersonNotFoundError", ApiPersonNotFoundError>
+    | VoidhashCoreClientError<"PersonsGetPersonByDistinctId500", PersonsGetPersonByDistinctId500>
+  >;
+  readonly organizationsCreateOrganization: (
+    options: CreateOrganizationBody,
+  ) => Effect.Effect<
+    Organization,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<
+        "OrganizationsCreateOrganization500",
+        OrganizationsCreateOrganization500
+      >
+  >;
+  readonly perksListPerks: () => Effect.Effect<
+    PerksListPerks200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"PerksListPerks500", PerksListPerks500>
+  >;
+  readonly paywallLocationsListPaywallLocations: () => Effect.Effect<
+    PaywallLocationsListPaywallLocations200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<
+        "PaywallLocationsListPaywallLocations500",
+        PaywallLocationsListPaywallLocations500
+      >
+  >;
+  readonly schemaGetSchema: () => Effect.Effect<
+    ProjectSchemaResponse,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"SchemaGetSchema500", SchemaGetSchema500>
+  >;
+  readonly schemaGetSchemaVersion: () => Effect.Effect<
+    SchemaVersion,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"SchemaGetSchemaVersion500", SchemaGetSchemaVersion500>
+  >;
+  readonly projectsCreateProject: (
+    options: CreateProjectBody,
+  ) => Effect.Effect<
+    Project,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ProjectsCreateProject500", ProjectsCreateProject500>
+  >;
+  readonly projectsListProjects: (
+    organizationId: string,
+  ) => Effect.Effect<
+    ProjectsListProjects200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ProjectsListProjects500", ProjectsListProjects500>
+  >;
+  readonly productsListProducts: () => Effect.Effect<
+    ProductsListProducts200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ProductsListProducts500", ProductsListProducts500>
+  >;
+  readonly productPerksListProductPerksByProductId: (
+    productId: string,
+  ) => Effect.Effect<
+    ProductPerksListProductPerksByProductId200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<
+        "ProductPerksListProductPerksByProductId400",
+        ProductPerksListProductPerksByProductId400
+      >
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<
+        "ProductPerksListProductPerksByProductId500",
+        ProductPerksListProductPerksByProductId500
+      >
+  >;
+  readonly sdkGetPerson: (
+    options: SdkGetPersonParams,
+  ) => Effect.Effect<
+    SdkPerson,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"SdkGetPerson400", SdkGetPerson400>
+    | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError>
+    | VoidhashCoreClientError<"SdkGetPerson500", SdkGetPerson500>
+  >;
+  readonly sdkIdentifyPerson: (options: {
+    readonly params: SdkIdentifyPersonParams;
+    readonly payload: SdkIdentifyBody;
+  }) => Effect.Effect<
+    SdkPerson,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"SdkIdentifyPerson400", SdkIdentifyPerson400>
+    | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError>
+    | VoidhashCoreClientError<
+        "ApiSdkPersonAlreadyIdentifiedError",
+        ApiSdkPersonAlreadyIdentifiedError
+      >
+    | VoidhashCoreClientError<"SdkIdentifyPerson500", SdkIdentifyPerson500>
+  >;
+  readonly sdkSyncPersonAttributes: (options: {
+    readonly params: SdkSyncPersonAttributesParams;
+    readonly payload: SdkSyncPersonAttributesBody;
+  }) => Effect.Effect<
+    SdkPerson,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"SdkSyncPersonAttributes400", SdkSyncPersonAttributes400>
+    | VoidhashCoreClientError<"ApiSdkPersonNotFoundError", ApiSdkPersonNotFoundError>
+    | VoidhashCoreClientError<"SdkSyncPersonAttributes500", SdkSyncPersonAttributes500>
+  >;
+  readonly sdkSyncTransaction: (options: {
+    readonly params: SdkSyncTransactionParams;
+    readonly payload: SdkSyncTransactionRequest;
+  }) => Effect.Effect<
+    SdkSyncTransactionResponse,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"SdkSyncTransaction400", SdkSyncTransaction400>
+    | VoidhashCoreClientError<"SdkSyncTransaction500", SdkSyncTransaction500>
+  >;
+  readonly sdkEvaluateFeatureFlags: (options: {
+    readonly params: SdkEvaluateFeatureFlagsParams;
+    readonly payload: EvaluateFeatureFlagsBody;
+  }) => Effect.Effect<
+    SdkFeatureFlagsResponse,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"SdkEvaluateFeatureFlags500", SdkEvaluateFeatureFlags500>
+  >;
+  readonly sdkResolvePaywall: (options: {
+    readonly params: SdkResolvePaywallParams;
+    readonly payload: SdkResolvePaywallBody;
+  }) => Effect.Effect<
+    SdkResolvePaywall200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"SdkResolvePaywall400", SdkResolvePaywall400>
+    | VoidhashCoreClientError<"SdkResolvePaywall500", SdkResolvePaywall500>
+  >;
+  readonly sdkGetSchema: (
+    options: SdkGetSchemaParams,
+  ) => Effect.Effect<
+    SdkSchema,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"SdkGetSchema500", SdkGetSchema500>
+  >;
+  readonly usersGetUser: () => Effect.Effect<
+    User,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"UsersGetUser500", UsersGetUser500>
+  >;
+  readonly paymentProviderConfigurationsListPaymentProviderConfigurations: () => Effect.Effect<
+    PaymentProviderConfigurationsListPaymentProviderConfigurations200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<
+        "PaymentProviderConfigurationsListPaymentProviderConfigurations500",
+        PaymentProviderConfigurationsListPaymentProviderConfigurations500
+      >
+  >;
+  readonly paymentProviderProductsListPaymentProviderProducts: () => Effect.Effect<
+    PaymentProviderProductsListPaymentProviderProducts200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<
+        "PaymentProviderProductsListPaymentProviderProducts500",
+        PaymentProviderProductsListPaymentProviderProducts500
+      >
+  >;
+  readonly webhooksListWebhookEndpoints: () => Effect.Effect<
+    WebhooksListWebhookEndpoints200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"WebhooksListWebhookEndpoints500", WebhooksListWebhookEndpoints500>
+  >;
+  readonly webhooksCreateWebhookEndpoint: (
+    options: CreateWebhookEndpointBody,
+  ) => Effect.Effect<
+    WebhookEndpoint,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint400", WebhooksCreateWebhookEndpoint400>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"WebhooksCreateWebhookEndpoint500", WebhooksCreateWebhookEndpoint500>
+  >;
+  readonly webhooksGetWebhookEndpoint: (
+    endpointId: string,
+  ) => Effect.Effect<
+    WebhookEndpoint,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError>
+    | VoidhashCoreClientError<"WebhooksGetWebhookEndpoint500", WebhooksGetWebhookEndpoint500>
+  >;
+  readonly webhooksDeleteWebhookEndpoint: (
+    endpointId: string,
+  ) => Effect.Effect<
+    void,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError>
+    | VoidhashCoreClientError<"WebhooksDeleteWebhookEndpoint500", WebhooksDeleteWebhookEndpoint500>
+  >;
+  readonly webhooksUpdateWebhookEndpoint: (
+    endpointId: string,
+    options: UpdateWebhookEndpointBody,
+  ) => Effect.Effect<
+    WebhookEndpoint,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint400", WebhooksUpdateWebhookEndpoint400>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError>
+    | VoidhashCoreClientError<"WebhooksUpdateWebhookEndpoint500", WebhooksUpdateWebhookEndpoint500>
+  >;
+  readonly webhooksRotateWebhookSecret: (
+    endpointId: string,
+  ) => Effect.Effect<
+    WebhookEndpoint,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError>
+    | VoidhashCoreClientError<"WebhooksRotateWebhookSecret500", WebhooksRotateWebhookSecret500>
+  >;
+  readonly webhooksTestWebhookEndpoint: (
+    endpointId: string,
+  ) => Effect.Effect<
+    WebhookDelivery,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiWebhookEndpointNotFoundError", ApiWebhookEndpointNotFoundError>
+    | VoidhashCoreClientError<"WebhooksTestWebhookEndpoint500", WebhooksTestWebhookEndpoint500>
+  >;
+  readonly webhooksListWebhookDeliveries: () => Effect.Effect<
+    WebhooksListWebhookDeliveries200,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"WebhooksListWebhookDeliveries500", WebhooksListWebhookDeliveries500>
+  >;
+  readonly webhooksGetWebhookDelivery: (
+    deliveryId: string,
+  ) => Effect.Effect<
+    WebhookDeliveryWithAttempts,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"EffectHttpApiSchemaError", EffectHttpApiSchemaError>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiWebhookDeliveryNotFoundError", ApiWebhookDeliveryNotFoundError>
+    | VoidhashCoreClientError<"WebhooksGetWebhookDelivery500", WebhooksGetWebhookDelivery500>
+  >;
+  readonly webhooksRetryWebhookDelivery: (
+    deliveryId: string,
+  ) => Effect.Effect<
+    WebhookDelivery,
+    | HttpClientError.HttpClientError
+    | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery400", WebhooksRetryWebhookDelivery400>
+    | VoidhashCoreClientError<"ApiActionForbiddenError", ApiActionForbiddenError>
+    | VoidhashCoreClientError<"ApiWebhookDeliveryNotFoundError", ApiWebhookDeliveryNotFoundError>
+    | VoidhashCoreClientError<"WebhooksRetryWebhookDelivery500", WebhooksRetryWebhookDelivery500>
+  >;
 }
 
 export interface VoidhashCoreClientError<Tag extends string, E> extends Error {
-  readonly _tag: Tag
-  readonly request: HttpClientRequest.HttpClientRequest
-  readonly response: HttpClientResponse.HttpClientResponse
-  readonly data: E
-  readonly message: string
+  readonly _tag: Tag;
+  readonly request: HttpClientRequest.HttpClientRequest;
+  readonly response: HttpClientResponse.HttpClientResponse;
+  readonly data: E;
+  readonly message: string;
 }
 
 class VoidhashCoreClientErrorImpl extends Data.Error<{
-  _tag: string
-  data: any
-  message: string
-  request: HttpClientRequest.HttpClientRequest
-  response: HttpClientResponse.HttpClientResponse
+  _tag: string;
+  data: any;
+  message: string;
+  request: HttpClientRequest.HttpClientRequest;
+  response: HttpClientResponse.HttpClientResponse;
 }> {
-  name = "VoidhashCoreClientError"
+  name = "VoidhashCoreClientError";
 }
 
 export const VoidhashCoreClientError = <Tag extends string, E>(
@@ -1282,4 +2178,4 @@ export const VoidhashCoreClientError = <Tag extends string, E>(
     message: JSON.stringify(data),
     response,
     request: response.request,
-  }) as any
+  }) as any;
diff --git a/packages/generated-clients/src/event-capture/generated.ts b/packages/generated-clients/src/event-capture/generated.ts
index ba2ab714d..37ba34cf8 100644
--- a/packages/generated-clients/src/event-capture/generated.ts
+++ b/packages/generated-clients/src/event-capture/generated.ts
@@ -1,118 +1,120 @@
-import type * as HttpClient from "effect/unstable/http/HttpClient"
-import * as HttpClientError from "effect/unstable/http/HttpClientError"
-import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest"
-import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse"
-import * as Data from "effect/Data"
-import * as Effect from "effect/Effect"
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import * as HttpClientError from "effect/unstable/http/HttpClientError";
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
+import * as HttpClientResponse from "effect/unstable/http/HttpClientResponse";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
 
 export interface EventCaptureCaptureRequest {
-  readonly "uuid": string;
-  readonly "event": string;
-  readonly "context": Record<string, unknown>;
-  readonly "properties": Record<string, unknown>;
-  readonly "distinct_id": string;
-  readonly "session_id"?: string | null | undefined;
-  readonly "timestamp"?: string | null | undefined;
-  readonly "sent_at": string;
-  readonly "token": string
+  readonly uuid: string;
+  readonly event: string;
+  readonly context: Record<string, unknown>;
+  readonly properties: Record<string, unknown>;
+  readonly distinct_id: string;
+  readonly session_id?: string | null | undefined;
+  readonly timestamp?: string | null | undefined;
+  readonly sent_at: string;
+  readonly token: string;
 }
 
 export interface CaptureAcceptedResponse {
-  readonly "accepted": number;
-  readonly "rejected": number
+  readonly accepted: number;
+  readonly rejected: number;
 }
 
-export type CaptureInvalidRequestErrorTag = "CaptureInvalidRequestError"
+export type CaptureInvalidRequestErrorTag = "CaptureInvalidRequestError";
 
-export type CaptureInvalidRequestErrorCode = "invalid_request"
+export type CaptureInvalidRequestErrorCode = "invalid_request";
 
 export interface CaptureInvalidRequestError {
-  readonly "_tag": CaptureInvalidRequestErrorTag;
-  readonly "error": string;
-  readonly "code": CaptureInvalidRequestErrorCode
+  readonly _tag: CaptureInvalidRequestErrorTag;
+  readonly error: string;
+  readonly code: CaptureInvalidRequestErrorCode;
 }
 
-export type EffectHttpApiSchemaErrorTag = "HttpApiSchemaError"
+export type EffectHttpApiSchemaErrorTag = "HttpApiSchemaError";
 
 export interface EffectHttpApiSchemaError {
-  readonly "_tag": EffectHttpApiSchemaErrorTag;
-  readonly "message": string
+  readonly _tag: EffectHttpApiSchemaErrorTag;
+  readonly message: string;
 }
 
-export type EventCaptureCapture400 = CaptureInvalidRequestError | EffectHttpApiSchemaError
+export type EventCaptureCapture400 = CaptureInvalidRequestError | EffectHttpApiSchemaError;
 
-export type CaptureUnauthorizedErrorTag = "CaptureUnauthorizedError"
+export type CaptureUnauthorizedErrorTag = "CaptureUnauthorizedError";
 
-export type CaptureUnauthorizedErrorCode = "unauthorized"
+export type CaptureUnauthorizedErrorCode = "unauthorized";
 
 export interface CaptureUnauthorizedError {
-  readonly "_tag": CaptureUnauthorizedErrorTag;
-  readonly "error": string;
-  readonly "code": CaptureUnauthorizedErrorCode
+  readonly _tag: CaptureUnauthorizedErrorTag;
+  readonly error: string;
+  readonly code: CaptureUnauthorizedErrorCode;
 }
 
-export type CapturePayloadTooLargeErrorTag = "CapturePayloadTooLargeError"
+export type CapturePayloadTooLargeErrorTag = "CapturePayloadTooLargeError";
 
-export type CapturePayloadTooLargeErrorCode = "payload_too_large"
+export type CapturePayloadTooLargeErrorCode = "payload_too_large";
 
 export interface CapturePayloadTooLargeError {
-  readonly "_tag": CapturePayloadTooLargeErrorTag;
-  readonly "error": string;
-  readonly "code": CapturePayloadTooLargeErrorCode
+  readonly _tag: CapturePayloadTooLargeErrorTag;
+  readonly error: string;
+  readonly code: CapturePayloadTooLargeErrorCode;
 }
 
-export type CaptureRateLimitedErrorTag = "CaptureRateLimitedError"
+export type CaptureRateLimitedErrorTag = "CaptureRateLimitedError";
 
-export type CaptureRateLimitedErrorCode = "rate_limited"
+export type CaptureRateLimitedErrorCode = "rate_limited";
 
 export interface CaptureRateLimitedError {
-  readonly "_tag": CaptureRateLimitedErrorTag;
-  readonly "error": string;
-  readonly "code": CaptureRateLimitedErrorCode;
-  readonly "retry_after_ms"?: number | null | undefined
+  readonly _tag: CaptureRateLimitedErrorTag;
+  readonly error: string;
+  readonly code: CaptureRateLimitedErrorCode;
+  readonly retry_after_ms?: number | null | undefined;
 }
 
-export type CaptureInternalServerErrorTag = "CaptureInternalServerError"
+export type CaptureInternalServerErrorTag = "CaptureInternalServerError";
 
-export type CaptureInternalServerErrorCode = "internal_error"
+export type CaptureInternalServerErrorCode = "internal_error";
 
 export interface CaptureInternalServerError {
-  readonly "_tag": CaptureInternalServerErrorTag;
-  readonly "error": string;
-  readonly "code": CaptureInternalServerErrorCode
+  readonly _tag: CaptureInternalServerErrorTag;
+  readonly error: string;
+  readonly code: CaptureInternalServerErrorCode;
 }
 
-export type CaptureDependencyUnavailableErrorTag = "CaptureDependencyUnavailableError"
+export type CaptureDependencyUnavailableErrorTag = "CaptureDependencyUnavailableError";
 
-export type CaptureDependencyUnavailableErrorCode = "dependency_unavailable"
+export type CaptureDependencyUnavailableErrorCode = "dependency_unavailable";
 
 export interface CaptureDependencyUnavailableError {
-  readonly "_tag": CaptureDependencyUnavailableErrorTag;
-  readonly "error": string;
-  readonly "code": CaptureDependencyUnavailableErrorCode
+  readonly _tag: CaptureDependencyUnavailableErrorTag;
+  readonly error: string;
+  readonly code: CaptureDependencyUnavailableErrorCode;
 }
 
 export interface EventCaptureBatchRequest {
-  readonly "events": ReadonlyArray<{
-  readonly "uuid": string;
-  readonly "event": string;
-  readonly "context": Record<string, unknown>;
-  readonly "properties": Record<string, unknown>;
-  readonly "distinct_id": string;
-  readonly "session_id"?: string | null | undefined;
-  readonly "timestamp"?: string | null | undefined
-}>;
-  readonly "sent_at": string;
-  readonly "token": string
+  readonly events: ReadonlyArray<{
+    readonly uuid: string;
+    readonly event: string;
+    readonly context: Record<string, unknown>;
+    readonly properties: Record<string, unknown>;
+    readonly distinct_id: string;
+    readonly session_id?: string | null | undefined;
+    readonly timestamp?: string | null | undefined;
+  }>;
+  readonly sent_at: string;
+  readonly token: string;
 }
 
-export type EventCaptureBatch400 = CaptureInvalidRequestError | EffectHttpApiSchemaError
+export type EventCaptureBatch400 = CaptureInvalidRequestError | EffectHttpApiSchemaError;
 
 export const make = (
-  httpClient: HttpClient.HttpClient, 
+  httpClient: HttpClient.HttpClient,
   options: {
-    readonly transformClient?: ((client: HttpClient.HttpClient) => Effect.Effect<HttpClient.HttpClient>) | undefined
-  } = {}
+    readonly transformClient?:
+      | ((client: HttpClient.HttpClient) => Effect.Effect<HttpClient.HttpClient>)
+      | undefined;
+  } = {},
 ): VoidhashEventCaptureClient => {
   const unexpectedStatus = (response: HttpClientResponse.HttpClientResponse) =>
     Effect.flatMap(
@@ -124,30 +126,26 @@ export const make = (
               request: response.request,
               response,
               description:
-                typeof description === "string"
-                  ? description
-                  : JSON.stringify(description),
+                typeof description === "string" ? description : JSON.stringify(description),
             }),
           }),
         ),
-    )
+    );
   const withResponse: <A, E>(
     f: (response: HttpClientResponse.HttpClientResponse) => Effect.Effect<A, E>,
-  ) => (
-    request: HttpClientRequest.HttpClientRequest,
-  ) => Effect.Effect<any, any> = options.transformClient
-    ? (f) => (request) =>
-        Effect.flatMap(
-          Effect.flatMap(options.transformClient!(httpClient), (client) =>
-            client.execute(request),
-          ),
-          f,
-        )
-    : (f) => (request) => Effect.flatMap(httpClient.execute(request), f)
+  ) => (request: HttpClientRequest.HttpClientRequest) => Effect.Effect<any, any> =
+    options.transformClient
+      ? (f) => (request) =>
+          Effect.flatMap(
+            Effect.flatMap(options.transformClient!(httpClient), (client) =>
+              client.execute(request),
+            ),
+            f,
+          )
+      : (f) => (request) => Effect.flatMap(httpClient.execute(request), f);
   const decodeSuccess = <A>(response: HttpClientResponse.HttpClientResponse) =>
-    response.json as Effect.Effect<A, HttpClientError.HttpClientError>
-  const decodeVoid = (_response: HttpClientResponse.HttpClientResponse) =>
-    Effect.void
+    response.json as Effect.Effect<A, HttpClientError.HttpClientError>;
+  const decodeVoid = (_response: HttpClientResponse.HttpClientResponse) => Effect.void;
   const decodeError =
     <Tag extends string, E>(tag: Tag) =>
     (
@@ -156,63 +154,103 @@ export const make = (
       never,
       VoidhashEventCaptureClientError<Tag, E> | HttpClientError.HttpClientError
     > =>
-      Effect.flatMap(
-        response.json as Effect.Effect<E, HttpClientError.HttpClientError>,
-        (cause) => Effect.fail(VoidhashEventCaptureClientError(tag, cause, response)),
-      )
-  const onRequest = (
-    successCodes: ReadonlyArray<string>,
-    errorCodes?: Record<string, string>,
-  ) => {
-    const cases: any = { orElse: unexpectedStatus }
+      Effect.flatMap(response.json as Effect.Effect<E, HttpClientError.HttpClientError>, (cause) =>
+        Effect.fail(VoidhashEventCaptureClientError(tag, cause, response)),
+      );
+  const onRequest = (successCodes: ReadonlyArray<string>, errorCodes?: Record<string, string>) => {
+    const cases: any = { orElse: unexpectedStatus };
     for (const code of successCodes) {
-      cases[code] = decodeSuccess
+      cases[code] = decodeSuccess;
     }
     if (errorCodes) {
       for (const [code, tag] of Object.entries(errorCodes)) {
-        cases[code] = decodeError(tag)
+        cases[code] = decodeError(tag);
       }
     }
     if (successCodes.length === 0) {
-      cases["2xx"] = decodeVoid
+      cases["2xx"] = decodeVoid;
     }
-    return withResponse(HttpClientResponse.matchStatus(cases) as any)
-  }
+    return withResponse(HttpClientResponse.matchStatus(cases) as any);
+  };
   return {
     httpClient,
-    "eventCaptureCapture": (options) => HttpClientRequest.post(`/i/v1/capture`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EventCaptureCapture400","401":"CaptureUnauthorizedError","413":"CapturePayloadTooLargeError","429":"CaptureRateLimitedError","500":"CaptureInternalServerError","503":"CaptureDependencyUnavailableError"})
-  ),
-  "eventCaptureBatch": (options) => HttpClientRequest.post(`/i/v1/batch`).pipe(
-    HttpClientRequest.bodyJsonUnsafe(options),
-    onRequest(["2xx"], {"400":"EventCaptureBatch400","401":"CaptureUnauthorizedError","413":"CapturePayloadTooLargeError","429":"CaptureRateLimitedError","500":"CaptureInternalServerError","503":"CaptureDependencyUnavailableError"})
-  )
-  }
-}
+    eventCaptureCapture: (options) =>
+      HttpClientRequest.post(`/i/v1/capture`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "EventCaptureCapture400",
+          "401": "CaptureUnauthorizedError",
+          "413": "CapturePayloadTooLargeError",
+          "429": "CaptureRateLimitedError",
+          "500": "CaptureInternalServerError",
+          "503": "CaptureDependencyUnavailableError",
+        }),
+      ),
+    eventCaptureBatch: (options) =>
+      HttpClientRequest.post(`/i/v1/batch`).pipe(
+        HttpClientRequest.bodyJsonUnsafe(options),
+        onRequest(["2xx"], {
+          "400": "EventCaptureBatch400",
+          "401": "CaptureUnauthorizedError",
+          "413": "CapturePayloadTooLargeError",
+          "429": "CaptureRateLimitedError",
+          "500": "CaptureInternalServerError",
+          "503": "CaptureDependencyUnavailableError",
+        }),
+      ),
+  };
+};
 
 export interface VoidhashEventCaptureClient {
-  readonly httpClient: HttpClient.HttpClient
-  readonly "eventCaptureCapture": (options: EventCaptureCaptureRequest) => Effect.Effect<CaptureAcceptedResponse, HttpClientError.HttpClientError | VoidhashEventCaptureClientError<"EventCaptureCapture400", EventCaptureCapture400> | VoidhashEventCaptureClientError<"CaptureUnauthorizedError", CaptureUnauthorizedError> | VoidhashEventCaptureClientError<"CapturePayloadTooLargeError", CapturePayloadTooLargeError> | VoidhashEventCaptureClientError<"CaptureRateLimitedError", CaptureRateLimitedError> | VoidhashEventCaptureClientError<"CaptureInternalServerError", CaptureInternalServerError> | VoidhashEventCaptureClientError<"CaptureDependencyUnavailableError", CaptureDependencyUnavailableError>>
-  readonly "eventCaptureBatch": (options: EventCaptureBatchRequest) => Effect.Effect<CaptureAcceptedResponse, HttpClientError.HttpClientError | VoidhashEventCaptureClientError<"EventCaptureBatch400", EventCaptureBatch400> | VoidhashEventCaptureClientError<"CaptureUnauthorizedError", CaptureUnauthorizedError> | VoidhashEventCaptureClientError<"CapturePayloadTooLargeError", CapturePayloadTooLargeError> | VoidhashEventCaptureClientError<"CaptureRateLimitedError", CaptureRateLimitedError> | VoidhashEventCaptureClientError<"CaptureInternalServerError", CaptureInternalServerError> | VoidhashEventCaptureClientError<"CaptureDependencyUnavailableError", CaptureDependencyUnavailableError>>
+  readonly httpClient: HttpClient.HttpClient;
+  readonly eventCaptureCapture: (
+    options: EventCaptureCaptureRequest,
+  ) => Effect.Effect<
+    CaptureAcceptedResponse,
+    | HttpClientError.HttpClientError
+    | VoidhashEventCaptureClientError<"EventCaptureCapture400", EventCaptureCapture400>
+    | VoidhashEventCaptureClientError<"CaptureUnauthorizedError", CaptureUnauthorizedError>
+    | VoidhashEventCaptureClientError<"CapturePayloadTooLargeError", CapturePayloadTooLargeError>
+    | VoidhashEventCaptureClientError<"CaptureRateLimitedError", CaptureRateLimitedError>
+    | VoidhashEventCaptureClientError<"CaptureInternalServerError", CaptureInternalServerError>
+    | VoidhashEventCaptureClientError<
+        "CaptureDependencyUnavailableError",
+        CaptureDependencyUnavailableError
+      >
+  >;
+  readonly eventCaptureBatch: (
+    options: EventCaptureBatchRequest,
+  ) => Effect.Effect<
+    CaptureAcceptedResponse,
+    | HttpClientError.HttpClientError
+    | VoidhashEventCaptureClientError<"EventCaptureBatch400", EventCaptureBatch400>
+    | VoidhashEventCaptureClientError<"CaptureUnauthorizedError", CaptureUnauthorizedError>
+    | VoidhashEventCaptureClientError<"CapturePayloadTooLargeError", CapturePayloadTooLargeError>
+    | VoidhashEventCaptureClientError<"CaptureRateLimitedError", CaptureRateLimitedError>
+    | VoidhashEventCaptureClientError<"CaptureInternalServerError", CaptureInternalServerError>
+    | VoidhashEventCaptureClientError<
+        "CaptureDependencyUnavailableError",
+        CaptureDependencyUnavailableError
+      >
+  >;
 }
 
 export interface VoidhashEventCaptureClientError<Tag extends string, E> extends Error {
-  readonly _tag: Tag
-  readonly request: HttpClientRequest.HttpClientRequest
-  readonly response: HttpClientResponse.HttpClientResponse
-  readonly data: E
-  readonly message: string
+  readonly _tag: Tag;
+  readonly request: HttpClientRequest.HttpClientRequest;
+  readonly response: HttpClientResponse.HttpClientResponse;
+  readonly data: E;
+  readonly message: string;
 }
 
 class VoidhashEventCaptureClientErrorImpl extends Data.Error<{
-  _tag: string
-  data: any
-  message: string
-  request: HttpClientRequest.HttpClientRequest
-  response: HttpClientResponse.HttpClientResponse
+  _tag: string;
+  data: any;
+  message: string;
+  request: HttpClientRequest.HttpClientRequest;
+  response: HttpClientResponse.HttpClientResponse;
 }> {
-  name = "VoidhashEventCaptureClientError"
+  name = "VoidhashEventCaptureClientError";
 }
 
 export const VoidhashEventCaptureClientError = <Tag extends string, E>(
@@ -226,4 +264,4 @@ export const VoidhashEventCaptureClientError = <Tag extends string, E>(
     message: JSON.stringify(data),
     response,
     request: response.request,
-  }) as any
+  }) as any;
diff --git a/packages/generated-clients/sst-env.d.ts b/packages/generated-clients/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/packages/generated-clients/sst-env.d.ts
+++ b/packages/generated-clients/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/packages/shared/src/auth.ts b/packages/shared/src/auth.ts
index 67a7b05d9..bb408f977 100644
--- a/packages/shared/src/auth.ts
+++ b/packages/shared/src/auth.ts
@@ -124,9 +124,9 @@ export type PublishableKeySession = typeof PublishableKeySessionSchema.Type;
 //   readonly cookie: null;
 // };
 
-export type AnyAuthSession =
-  | UserSession
-  | SecretKeySession
-  | PublishableKeySession;
+export type AnyAuthSession = UserSession | SecretKeySession | PublishableKeySession;
 
-export class AuthSession extends Context.Service<AuthSession, UserSession | SecretKeySession | PublishableKeySession>()("shared/auth/AuthSession") {}
+export class AuthSession extends Context.Service<
+  AuthSession,
+  UserSession | SecretKeySession | PublishableKeySession
+>()("shared/auth/AuthSession") {}
diff --git a/packages/shared/src/deploy-changeset.ts b/packages/shared/src/deploy-changeset.ts
index 04487fb49..600e96ada 100644
--- a/packages/shared/src/deploy-changeset.ts
+++ b/packages/shared/src/deploy-changeset.ts
@@ -178,7 +178,7 @@ export function sortChangeset(changeset: typeof ChangesetSchema.Type) {
   const sortedChangeset = [...changeset.changes].sort(
     (a, b) =>
       sortedChangeTypesByPriority.indexOf(a.changeType) -
-      sortedChangeTypesByPriority.indexOf(b.changeType)
+      sortedChangeTypesByPriority.indexOf(b.changeType),
   );
 
   return sortedChangeset;
diff --git a/packages/shared/sst-env.d.ts b/packages/shared/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/packages/shared/sst-env.d.ts
+++ b/packages/shared/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/packages/tsconfig/sst-env.d.ts b/packages/tsconfig/sst-env.d.ts
index 9111ecdfa..f2ed71576 100644
--- a/packages/tsconfig/sst-env.d.ts
+++ b/packages/tsconfig/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/scripts/generate-node-grouped-client.mjs b/scripts/generate-node-grouped-client.mjs
index 989a4459c..d1272b9f8 100644
--- a/scripts/generate-node-grouped-client.mjs
+++ b/scripts/generate-node-grouped-client.mjs
@@ -8,7 +8,7 @@ const [specPathArg, outputPathArg] = process.argv.slice(2);
 
 if (!specPathArg || !outputPathArg) {
   console.error(
-    "Usage: node ./scripts/generate-node-grouped-client.mjs <core-openapi.json> <output-file>"
+    "Usage: node ./scripts/generate-node-grouped-client.mjs <core-openapi.json> <output-file>",
   );
   process.exit(1);
 }
@@ -18,16 +18,14 @@ const outputPath = path.resolve(outputPathArg);
 mkdirSync(path.dirname(outputPath), { recursive: true });
 const spec = JSON.parse(readFileSync(specPath, "utf8"));
 
-const camelCase = (value) =>
-  value.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
+const camelCase = (value) => value.replace(/_([a-z])/g, (_, char) => char.toUpperCase());
 
 const pascalCase = (value) => {
   const camel = camelCase(value);
   return camel.charAt(0).toUpperCase() + camel.slice(1);
 };
 
-const toMethodName = (groupName, methodName) =>
-  `${camelCase(groupName)}${pascalCase(methodName)}`;
+const toMethodName = (groupName, methodName) => `${camelCase(groupName)}${pascalCase(methodName)}`;
 
 const toTypeLiteral = (schema) => {
   if (!schema) {
@@ -138,7 +136,7 @@ for (const [routePath, pathItem] of Object.entries(spec.paths)) {
 
     const methodName = toMethodName(groupName, memberName);
     const parameters = [...(pathItem.parameters ?? []), ...(operation.parameters ?? [])].filter(
-      (parameter) => parameter.in !== "header"
+      (parameter) => parameter.in !== "header",
     );
     const parameterNames = parameters.map((parameter) => parameter.name);
     const parameterTypes = parameters.map((parameter) => toTypeLiteral(parameter.schema));
diff --git a/scripts/generate-openapi-clients.mjs b/scripts/generate-openapi-clients.mjs
index f1be75d2d..9cd708ef2 100644
--- a/scripts/generate-openapi-clients.mjs
+++ b/scripts/generate-openapi-clients.mjs
@@ -13,7 +13,10 @@ const generatedClientsRoot = path.join(repoRoot, "packages/generated-clients");
 const nodeGeneratedRoot = path.join(repoRoot, "libraries/node/src/generated");
 const openapiRoot = path.join(generatedClientsRoot, "openapi");
 
-const rawHost = process.argv.slice(2).find((arg) => arg !== "--")?.trim();
+const rawHost = process.argv
+  .slice(2)
+  .find((arg) => arg !== "--")
+  ?.trim();
 
 if (!rawHost) {
   console.error(
diff --git a/scripts/publish-pr-packages.mjs b/scripts/publish-pr-packages.mjs
index 8f8a2d680..bc048c845 100644
--- a/scripts/publish-pr-packages.mjs
+++ b/scripts/publish-pr-packages.mjs
@@ -121,9 +121,7 @@ const branch = requireEnv("BRANCH");
 // Trim: the server does a strict `Bearer ${token}` string compare, so a
 // trailing newline in the GitHub secret (common when a token is piped in from
 // a file) would otherwise 401 every upload.
-const token = (
-  dryRun ? process.env.PR_PACKAGE_TOKEN : requireEnv("PR_PACKAGE_TOKEN")
-)?.trim();
+const token = (dryRun ? process.env.PR_PACKAGE_TOKEN : requireEnv("PR_PACKAGE_TOKEN"))?.trim();
 const host = process.env.PR_PACKAGE_HOST || "pkg.voidha.sh";
 const ttl = process.env.PR_PACKAGE_TTL || "";
 const prNumber = process.env.PR_NUMBER || "";
@@ -153,11 +151,7 @@ group(`Rewrite manifests (version + workspace deps @ ${shortSha})`, () => {
 
     // devDependencies are skipped: consumers never install them, and
     // `pnpm pack` substitutes their workspace ranges with local versions.
-    for (const field of [
-      "dependencies",
-      "optionalDependencies",
-      "peerDependencies",
-    ]) {
+    for (const field of ["dependencies", "optionalDependencies", "peerDependencies"]) {
       for (const [depName, range] of Object.entries(manifest[field] ?? {})) {
         if (!range.startsWith("workspace:")) {
           continue;
@@ -210,19 +204,16 @@ for (const pkg of PACKAGES) {
       return;
     }
 
-    const response = await fetch(
-      `https://${host}/projects/${pkg.project}/packages`,
-      {
-        method: "PUT",
-        headers: {
-          authorization: `Bearer ${token}`,
-          "x-tags": JSON.stringify(tags),
-          ...(ttl ? { "x-ttl": ttl } : {}),
-          "content-type": "application/gzip",
-        },
-        body: fs.readFileSync(path.join(destination, tarball)),
+    const response = await fetch(`https://${host}/projects/${pkg.project}/packages`, {
+      method: "PUT",
+      headers: {
+        authorization: `Bearer ${token}`,
+        "x-tags": JSON.stringify(tags),
+        ...(ttl ? { "x-ttl": ttl } : {}),
+        "content-type": "application/gzip",
       },
-    );
+      body: fs.readFileSync(path.join(destination, tarball)),
+    });
     if (!response.ok) {
       throw new Error(
         `Upload of ${pkg.name} failed: ${response.status} ${response.statusText}\n${await response.text()}`,
@@ -235,23 +226,12 @@ for (const pkg of PACKAGES) {
 }
 
 // ── 4. Install instructions (PR comment / step summary) ──────────────
-const lines = [
-  "<!-- pr-packages -->",
-  "",
-  `Install the packages built from ${shortSha}:`,
-  "",
-];
+const lines = ["<!-- pr-packages -->", "", `Install the packages built from ${shortSha}:`, ""];
 for (const pkg of PACKAGES) {
   if (pkg.internal) {
     continue;
   }
-  lines.push(
-    `**${pkg.name}**`,
-    "```sh",
-    `pnpm add ${pkg.name}@${installUrl(pkg)}`,
-    "```",
-    "",
-  );
+  lines.push(`**${pkg.name}**`, "```sh", `pnpm add ${pkg.name}@${installUrl(pkg)}`, "```", "");
 }
 lines.push(
   "Internal workspace deps (generated-clients, shared, studio) are published at the same sha and resolved automatically.",
diff --git a/sst-env.d.ts b/sst-env.d.ts
index 64441936d..eec65b9bd 100644
--- a/sst-env.d.ts
+++ b/sst-env.d.ts
@@ -6,5 +6,5 @@
 
 /// <reference path="../../sst-env.d.ts" />
 
-import "sst"
-export {}
\ No newline at end of file
+import "sst";
+export {};
diff --git a/turbo.json b/turbo.json
index 88a02aacd..c2ce05444 100644
--- a/turbo.json
+++ b/turbo.json
@@ -1,56 +1,56 @@
 {
-	"$schema": "https://turborepo.org/schema.json",
-	"tasks": {
-		"dev": {
-			"cache": false,
-			"persistent": true
-		},
-		"build": {
-			"dependsOn": ["^build"],
-			"outputs": ["dist/**", ".next/*", "!.next/cache/**"],
-			"env": [
-				"NEXT_PUBLIC_APP_NAME",
-				"NEXT_PUBLIC_APP_DOMAIN",
-				"NEXT_PUBLIC_VERCEL_ENV",
-				"BETTER_AUTH_SECRET",
-				"DATABASE_HOST",
-				"DATABASE_USERNAME",
-				"DATABASE_PASSWORD",
-				"DATABASE_NAME",
-				"VOIDHASH_SECRET_KEY",
-				"POLAR_ACCESS_TOKEN",
-				"GITHUB_CLIENT_ID",
-				"GITHUB_CLIENT_SECRET",
-				"AXIOM_TOKEN",
-				"AXIOM_LOGS_DATASET",
-				"AXIOM_LOG_LEVEL"
-			]
-		},
-		"clean": {},
-		"format": {},
-		"lint": {},
-		"knip": {
-			"cache": true
-		},
-		"start": {
-			"cache": false
-		},
-		"test": {
-			"dependsOn": ["build"],
-			"outputs": []
-		},
-		"typecheck": {
-			"outputs": [],
-			"cache": false
-		},
-		"deploy": {
-			"cache": false
-		},
-		"migrate": {
-			"cache": false
-		},
-		"generate": {
-			"cache": false
-		}
-	}
+  "$schema": "https://turborepo.org/schema.json",
+  "tasks": {
+    "dev": {
+      "cache": false,
+      "persistent": true
+    },
+    "build": {
+      "dependsOn": ["^build"],
+      "outputs": ["dist/**", ".next/*", "!.next/cache/**"],
+      "env": [
+        "NEXT_PUBLIC_APP_NAME",
+        "NEXT_PUBLIC_APP_DOMAIN",
+        "NEXT_PUBLIC_VERCEL_ENV",
+        "BETTER_AUTH_SECRET",
+        "DATABASE_HOST",
+        "DATABASE_USERNAME",
+        "DATABASE_PASSWORD",
+        "DATABASE_NAME",
+        "VOIDHASH_SECRET_KEY",
+        "POLAR_ACCESS_TOKEN",
+        "GITHUB_CLIENT_ID",
+        "GITHUB_CLIENT_SECRET",
+        "AXIOM_TOKEN",
+        "AXIOM_LOGS_DATASET",
+        "AXIOM_LOG_LEVEL"
+      ]
+    },
+    "clean": {},
+    "format": {},
+    "lint": {},
+    "knip": {
+      "cache": true
+    },
+    "start": {
+      "cache": false
+    },
+    "test": {
+      "dependsOn": ["build"],
+      "outputs": []
+    },
+    "typecheck": {
+      "outputs": [],
+      "cache": false
+    },
+    "deploy": {
+      "cache": false
+    },
+    "migrate": {
+      "cache": false
+    },
+    "generate": {
+      "cache": false
+    }
+  }
 }

From dc3e170de3ed06bf04ab0a4d09a6d99ca5bf1946 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 3 Jul 2026 23:48:22 +0200
Subject: [PATCH 028/129] wip

---
 apps/cli/src/domain/services/paywall-build.ts |   82 +-
 .../services/paywall-panel-bundle.test.ts     |   41 +
 docs/specs/paywall-deploy-contract.md         |    2 +
 libraries/paywalls/README.md                  |  167 ++-
 libraries/paywalls/build.ts                   |  231 +++-
 libraries/paywalls/package.json               |   79 +-
 libraries/paywalls/src/authoring/actions.ts   |    6 +-
 .../src/authoring/define-component.tsx        |   44 +-
 libraries/paywalls/src/compose/ast.ts         |  132 +++
 .../paywalls/src/compose/author-surface.ts    |   70 ++
 libraries/paywalls/src/compose/component.ts   |  227 ++++
 libraries/paywalls/src/compose/error.ts       |   17 +
 .../paywalls/src/compose/generate-dts.ts      |  202 ++++
 libraries/paywalls/src/compose/grammar.ts     |   87 ++
 libraries/paywalls/src/compose/index.ts       |   85 ++
 libraries/paywalls/src/compose/parser.ts      | 1036 +++++++++++++++++
 libraries/paywalls/src/compose/printer.ts     |  433 +++++++
 .../paywalls/src/compose/style-attr-types.ts  |   71 ++
 libraries/paywalls/src/index.ts               |   69 +-
 .../paywalls/src/internal/action-brand.ts     |   44 +
 libraries/paywalls/src/jsx-dev-runtime.ts     |    7 +
 libraries/paywalls/src/jsx-runtime.ts         |    8 +
 libraries/paywalls/src/panel.ts               |   43 -
 libraries/paywalls/src/panel/context.ts       |  106 ++
 libraries/paywalls/src/panel/index.ts         |   81 ++
 libraries/paywalls/src/panel/intent.ts        |   51 +
 libraries/paywalls/src/panel/intrinsics.ts    |   50 +
 .../paywalls/src/panel/monaco-surface.ts      |    9 +
 libraries/paywalls/src/panel/primitives.tsx   |  389 +++++++
 libraries/paywalls/src/panel/reconciler.tsx   |  214 ++++
 libraries/paywalls/src/panel/runtime.tsx      |   33 +
 libraries/paywalls/src/panel/serialize.ts     |  185 +++
 libraries/paywalls/src/panel/session.tsx      |  441 +++++++
 .../paywalls/src/sandbox/component-message.ts |   41 +
 libraries/paywalls/src/sandbox/host-data.ts   |   49 +
 libraries/paywalls/src/sandbox/index.tsx      |   58 +
 .../paywalls/src/sandbox/monaco-surface.ts    |   12 +
 .../paywalls/src/sandbox/render-component.tsx |  137 +++
 libraries/paywalls/src/schema/index.ts        |  129 ++
 libraries/paywalls/src/schema/panel-tree.ts   |  706 +++++++++++
 .../paywalls/src/schema/style-registry.ts     |  529 +++++++++
 libraries/paywalls/src/schema/style.ts        |  146 ++-
 .../paywalls/src/schema/validate-panel.ts     |  242 ++++
 libraries/paywalls/src/schema/validate.ts     |  547 +++++++++
 libraries/paywalls/src/style/resolve.ts       |  196 +++-
 .../src/tree-renderer/react-reconciler.d.ts   |   10 +
 .../src/tree-renderer/render-to-node-tree.tsx |   48 +-
 .../paywalls/src/tree-renderer/tree-host.ts   |   10 +-
 .../paywalls/tests/compose-invariants.test.ts |  336 ++++++
 .../tests/compose-surface-types.test.ts       |   80 ++
 libraries/paywalls/tests/compose.test.ts      |  538 +++++++++
 .../paywalls/tests/panel-dispatch.test.tsx    |  176 +++
 .../paywalls/tests/panel-intents.test.tsx     |  138 +++
 .../paywalls/tests/panel-reconciler.test.tsx  |  220 ++++
 libraries/paywalls/tests/panel-tree.test.ts   |  700 +++++++++++
 libraries/paywalls/tests/render.test.tsx      |    4 +-
 .../paywalls/tests/sandbox-bundle.test.ts     |  119 ++
 libraries/paywalls/tests/sandbox.test.tsx     |  187 +++
 .../tests/style-vocabulary-lock.test.ts       |  412 +++++++
 libraries/paywalls/tests/style.test.ts        |  251 +++-
 libraries/paywalls/tests/tree.test.tsx        |   31 +-
 libraries/paywalls/tests/types.test.ts        |    6 +-
 libraries/paywalls/tests/validate.test.ts     |   83 ++
 libraries/paywalls/tests/validate.test.tsx    |  363 ++++++
 pnpm-lock.yaml                                |    3 +
 65 files changed, 10961 insertions(+), 288 deletions(-)
 create mode 100644 apps/cli/tests/domain/services/paywall-panel-bundle.test.ts
 create mode 100644 libraries/paywalls/src/compose/ast.ts
 create mode 100644 libraries/paywalls/src/compose/author-surface.ts
 create mode 100644 libraries/paywalls/src/compose/component.ts
 create mode 100644 libraries/paywalls/src/compose/error.ts
 create mode 100644 libraries/paywalls/src/compose/generate-dts.ts
 create mode 100644 libraries/paywalls/src/compose/grammar.ts
 create mode 100644 libraries/paywalls/src/compose/index.ts
 create mode 100644 libraries/paywalls/src/compose/parser.ts
 create mode 100644 libraries/paywalls/src/compose/printer.ts
 create mode 100644 libraries/paywalls/src/compose/style-attr-types.ts
 create mode 100644 libraries/paywalls/src/jsx-dev-runtime.ts
 create mode 100644 libraries/paywalls/src/jsx-runtime.ts
 delete mode 100644 libraries/paywalls/src/panel.ts
 create mode 100644 libraries/paywalls/src/panel/context.ts
 create mode 100644 libraries/paywalls/src/panel/index.ts
 create mode 100644 libraries/paywalls/src/panel/intent.ts
 create mode 100644 libraries/paywalls/src/panel/intrinsics.ts
 create mode 100644 libraries/paywalls/src/panel/monaco-surface.ts
 create mode 100644 libraries/paywalls/src/panel/primitives.tsx
 create mode 100644 libraries/paywalls/src/panel/reconciler.tsx
 create mode 100644 libraries/paywalls/src/panel/runtime.tsx
 create mode 100644 libraries/paywalls/src/panel/serialize.ts
 create mode 100644 libraries/paywalls/src/panel/session.tsx
 create mode 100644 libraries/paywalls/src/sandbox/component-message.ts
 create mode 100644 libraries/paywalls/src/sandbox/host-data.ts
 create mode 100644 libraries/paywalls/src/sandbox/index.tsx
 create mode 100644 libraries/paywalls/src/sandbox/monaco-surface.ts
 create mode 100644 libraries/paywalls/src/sandbox/render-component.tsx
 create mode 100644 libraries/paywalls/src/schema/index.ts
 create mode 100644 libraries/paywalls/src/schema/panel-tree.ts
 create mode 100644 libraries/paywalls/src/schema/style-registry.ts
 create mode 100644 libraries/paywalls/src/schema/validate-panel.ts
 create mode 100644 libraries/paywalls/src/schema/validate.ts
 create mode 100644 libraries/paywalls/tests/compose-invariants.test.ts
 create mode 100644 libraries/paywalls/tests/compose-surface-types.test.ts
 create mode 100644 libraries/paywalls/tests/compose.test.ts
 create mode 100644 libraries/paywalls/tests/panel-dispatch.test.tsx
 create mode 100644 libraries/paywalls/tests/panel-intents.test.tsx
 create mode 100644 libraries/paywalls/tests/panel-reconciler.test.tsx
 create mode 100644 libraries/paywalls/tests/panel-tree.test.ts
 create mode 100644 libraries/paywalls/tests/sandbox-bundle.test.ts
 create mode 100644 libraries/paywalls/tests/sandbox.test.tsx
 create mode 100644 libraries/paywalls/tests/style-vocabulary-lock.test.ts
 create mode 100644 libraries/paywalls/tests/validate.test.ts
 create mode 100644 libraries/paywalls/tests/validate.test.tsx

diff --git a/apps/cli/src/domain/services/paywall-build.ts b/apps/cli/src/domain/services/paywall-build.ts
index a6421500f..441c35686 100644
--- a/apps/cli/src/domain/services/paywall-build.ts
+++ b/apps/cli/src/domain/services/paywall-build.ts
@@ -529,6 +529,62 @@ const componentBuildOptions = (voidhashDir: string): esbuild.BuildOptions => ({
   write: false,
 });
 
+/**
+ * The exact module specifiers the studio panel sandbox's `require` shim
+ * resolves (`@voidhash/paywalls/sandbox`'s `modules` map). A panel bundle MUST
+ * leave every one of these external so the shim satisfies it at evaluation
+ * time; a bundled copy would ship a second React/SDK instance and break hooks.
+ * Kept an explicit list (not the runtime's `@voidhash/paywalls/*` glob) so it
+ * mirrors the shim's keys one-for-one.
+ */
+export const PANEL_SANDBOX_EXTERNALS = [
+  "react",
+  "react/jsx-runtime",
+  "react/jsx-dev-runtime",
+  "@voidhash/paywalls",
+  "@voidhash/paywalls/panel",
+  "@voidhash/paywalls/jsx-runtime",
+  "@voidhash/paywalls/jsx-dev-runtime",
+];
+
+/**
+ * esbuild settings for the panel bundle. It mirrors the studio's BROWSER
+ * compile pipeline (`code-mode/compile-pipeline.ts`) exactly so the emitted
+ * module is byte-compatible with what the panel sandbox evaluates:
+ *
+ * - `format: "cjs"` — the sandbox runs it via `new Function("require",
+ *   "module", "exports", code)` and reads `module.exports.default`, so ES
+ *   module syntax cannot be used.
+ * - `jsxImportSource: "@voidhash/paywalls"` — JSX compiles to
+ *   `require("@voidhash/paywalls/jsx-runtime")`, which the shim resolves to the
+ *   sandbox's single shared React (matching the browser transform).
+ * - externals = {@link PANEL_SANDBOX_EXTERNALS}, the shim's module keys.
+ */
+const panelBuildOptions = (voidhashDir: string): esbuild.BuildOptions => ({
+  bundle: true,
+  define: { "process.env.NODE_ENV": '"production"' },
+  external: [...PANEL_SANDBOX_EXTERNALS],
+  format: "cjs",
+  jsx: "automatic",
+  jsxImportSource: "@voidhash/paywalls",
+  loader: COMPONENT_ASSET_LOADERS,
+  logLevel: "silent",
+  minify: true,
+  platform: "browser",
+  plugins: [closedImportsPlugin(voidhashDir)],
+  target: ["es2020"],
+  write: false,
+});
+
+/**
+ * Whether a component definition declares a custom editor panel — decided the
+ * SAME way the studio's browser pipeline does (`@voidhash/paywalls`'s
+ * `definitionHasPanel`): a live `panel` FUNCTION, not merely a present key.
+ * Only a `hasPanel` component emits/uploads the `panel.js` artifact.
+ */
+export const definitionHasPanel = (definition: { readonly panel?: unknown }): boolean =>
+  typeof definition.panel === "function";
+
 const firstJsOutput = (result: esbuild.BuildResult): Uint8Array => {
   const file = (result.outputFiles ?? []).find((f) => f.path.endsWith(".js"));
   if (!file) {
@@ -555,8 +611,14 @@ const bundleComponentRuntime = (
   });
 
 /**
- * Bundles a component's custom editor panel: an ESM module whose default
- * export is the definition's `panel` element tree.
+ * Bundles a component's custom editor panel: the WHOLE definition module as a
+ * single CJS module whose `default` export is the `defineComponent({ … })`
+ * definition — identical in shape to what the studio's browser compile
+ * pipeline produces. The panel sandbox evaluates this module, reads the
+ * definition off `module.exports.default`, and drives `definition.panel` live;
+ * it needs the full definition (props + panel + render), not the panel tree
+ * alone. Uses {@link panelBuildOptions} (CJS, `@voidhash/paywalls` JSX, shim
+ * externals) so the byte output matches the sandbox's require shim exactly.
  */
 const bundleComponentPanel = (
   voidhashDir: string,
@@ -566,16 +628,9 @@ const bundleComponentPanel = (
     try: async () =>
       firstJsOutput(
         await esbuild.build({
-          ...componentBuildOptions(voidhashDir),
+          ...panelBuildOptions(voidhashDir),
+          entryPoints: [componentAbsPath],
           outdir: "out",
-          stdin: {
-            contents: `import definition from ${JSON.stringify(componentAbsPath)};
-export default definition.panel;
-`,
-            loader: "ts",
-            resolveDir: dirname(componentAbsPath),
-            sourcefile: "voidhash-panel-entry.ts",
-          },
         }),
       ),
     catch: bundleFailure(`panel of component ${basename(componentAbsPath)}`),
@@ -877,8 +932,11 @@ export const buildPaywalls = ({
           runtimeBytes,
         );
 
+        // Emit + upload the panel.js artifact ONLY for a component with a live
+        // `panel` function (the same `hasPanel` test the browser pipeline uses),
+        // per the reserved `artifacts.panel` contract field.
         let panel: DeployArtifact | null = null;
-        if (definition.panel !== undefined && definition.panel !== null) {
+        if (definitionHasPanel(definition)) {
           const panelBytes = yield* bundleComponentPanel(voidhashDir, file);
           panel = yield* writeArtifact(projectRoot, join(componentOutDir, "panel.js"), panelBytes);
         }
diff --git a/apps/cli/tests/domain/services/paywall-panel-bundle.test.ts b/apps/cli/tests/domain/services/paywall-panel-bundle.test.ts
new file mode 100644
index 000000000..f61546fc5
--- /dev/null
+++ b/apps/cli/tests/domain/services/paywall-panel-bundle.test.ts
@@ -0,0 +1,41 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  definitionHasPanel,
+  PANEL_SANDBOX_EXTERNALS,
+} from "../../../src/domain/services/paywall-build";
+
+describe("definitionHasPanel", () => {
+  it("is true only for a live panel FUNCTION (matching the browser pipeline)", () => {
+    expect(definitionHasPanel({ panel: () => null })).toBe(true);
+  });
+
+  it("is false for a present-but-non-function panel, or an absent one", () => {
+    // A JSX element / object is NOT a panel function — the browser sandbox's
+    // `definitionHasPanel` (`typeof panel === "function"`) also rejects these.
+    expect(definitionHasPanel({ panel: { type: "panel" } })).toBe(false);
+    expect(definitionHasPanel({ panel: null })).toBe(false);
+    expect(definitionHasPanel({ panel: undefined })).toBe(false);
+    expect(definitionHasPanel({})).toBe(false);
+  });
+});
+
+describe("PANEL_SANDBOX_EXTERNALS", () => {
+  it("mirrors the studio panel sandbox require-shim module keys one-for-one", () => {
+    // Source of truth: `@voidhash/paywalls/sandbox`'s `modules` map keys (the
+    // specifiers the panel sandbox's require shim resolves). A panel bundle
+    // must leave EXACTLY these external so the shim satisfies every require and
+    // no second React/SDK instance is bundled.
+    expect([...PANEL_SANDBOX_EXTERNALS].sort()).toEqual(
+      [
+        "@voidhash/paywalls",
+        "@voidhash/paywalls/jsx-dev-runtime",
+        "@voidhash/paywalls/jsx-runtime",
+        "@voidhash/paywalls/panel",
+        "react",
+        "react/jsx-dev-runtime",
+        "react/jsx-runtime",
+      ].sort(),
+    );
+  });
+});
diff --git a/docs/specs/paywall-deploy-contract.md b/docs/specs/paywall-deploy-contract.md
index bff4aa9c7..daba11df7 100644
--- a/docs/specs/paywall-deploy-contract.md
+++ b/docs/specs/paywall-deploy-contract.md
@@ -184,6 +184,8 @@ The component SSR-ed at CLI build time against the preview state's fixtures, ren
 
 Node shapes: `view|pressable|scroll` have `style` + `children[]`; `text` has `style` + `text` (string); `image` has `style` + `src` + optional `resizeMode` (`"cover" | "contain" | "stretch" | "center"` — exactly these four values); `slot` has nothing else (at most one in the tree); `placeholder` has `reason`. `pressable` additionally has optional `action` (string — the declared action name it fires). No other keys; servers MUST reject unknown node types and unknown keys.
 
+**Determinism ("poster frame").** A preview tree is a deterministic snapshot of the component, not a live render. It is produced by running the component with **real hooks** (`useState`/`useEffect`/… execute) under a frozen environment — `Date.now`, `Math.random`, `performance.now`, and `requestAnimationFrame` are pinned to fixed values — and read back after exactly one settle budget: one passive-effect flush (`react-reconciler`'s `flushPassiveEffects()`) followed by one macrotask tick. Whatever tree is committed at that point is the artifact. A component that has not stabilized within that single budget (e.g. it schedules further state updates on a timer or keeps chasing `requestAnimationFrame`) is **out of contract** — its captured tree is whatever the frozen clock produced at the tick, and reproducibility is not guaranteed. This is a semantics clarification of how the existing `treeVersion: 1` artifact is produced, not a format change; `treeVersion` is unchanged.
+
 ### 3.1 Style subset
 
 Keys limited to the RN-compatible vocabulary: flexbox (`flex`, `flexDirection`, `alignItems`, `alignSelf`, `justifyContent`, `flexWrap`, `gap`, `rowGap`, `columnGap`, `flexGrow`, `flexShrink`, `flexBasis`), box (`width`, `height`, `minWidth`, `minHeight`, `maxWidth`, `maxHeight`, `padding[Top|Bottom|Left|Right|Horizontal|Vertical]`, `margin[…same…]`, `aspectRatio`), border (`borderWidth`, `borderColor`, `borderRadius` + per-corner variants, `borderStyle`), visual (`backgroundColor`, `opacity`, `overflow`), position (`position`, `top`, `right`, `bottom`, `left`, `zIndex`), text-only (`color`, `fontSize`, `fontWeight`, `fontStyle`, `lineHeight`, `letterSpacing`, `textAlign`, `textTransform`, `textDecorationLine`, `fontFamily`). Values: numbers, strings (colors, `"50%"`); no arbitrary CSS.
diff --git a/libraries/paywalls/README.md b/libraries/paywalls/README.md
index 2deb8fa8d..8b187ec62 100644
--- a/libraries/paywalls/README.md
+++ b/libraries/paywalls/README.md
@@ -22,11 +22,30 @@ import { createPaywall, View, Text, Pressable, usePaywallActions } from "@voidha
 function Body() {
   const { purchase } = usePaywallActions();
   return (
-    <View style={{ flex: 1, padding: 24, justifyContent: "flex-end" }}>
+    <View
+      style={{
+        flex: 1,
+        paddingTop: 24,
+        paddingRight: 24,
+        paddingBottom: 24,
+        paddingLeft: 24,
+        justifyContent: "flex-end",
+      }}
+    >
       <Text style={{ fontSize: 28, fontWeight: "700" }}>Go Pro</Text>
       <Pressable
         onPress={() => purchase()}
-        style={{ backgroundColor: "#16a34a", padding: 16, borderRadius: 12 }}
+        style={{
+          backgroundColor: "#16a34a",
+          paddingTop: 16,
+          paddingRight: 16,
+          paddingBottom: 16,
+          paddingLeft: 16,
+          borderTopLeftRadius: 12,
+          borderTopRightRadius: 12,
+          borderBottomRightRadius: 12,
+          borderBottomLeftRadius: 12,
+        }}
       >
         <Text style={{ color: "white", textAlign: "center" }}>Subscribe</Text>
       </Pressable>
@@ -91,6 +110,75 @@ that forward to the consumer prop of the same name. `extractComponentManifest(de
 emits the §2 manifest JSON (props, actions, slot usage, preview states,
 host data).
 
+## Custom editor panels
+
+A component may declare an optional `panel` to replace the visual editor's
+default prop rows with a bespoke layout. It is a pure function
+`(ctx) => ReactNode` built from `Panel.*` primitives (from
+`@voidhash/paywalls/panel`):
+
+```tsx
+import { defineComponent, Text } from "@voidhash/paywalls";
+import { Panel } from "@voidhash/paywalls/panel";
+
+export const definition = defineComponent({
+  id: "feature-card",
+  props: (p) => ({
+    title: p.string().default("Feature"),
+    subtitle: p.string().default("Describe it"),
+    highlighted: p.boolean().default(false),
+    variant: p.select(["solid", "outline"]).default("solid"),
+  }),
+  panel: (ctx) => (
+    <Panel>
+      <Panel.Section title="Content">
+        <Panel.Field label="Title">
+          <Panel.TextField
+            kind="text"
+            value={ctx.props.title.value ?? ""}
+            onCommit={(value) => ctx.props.title.set(value, { gesture: "commit" })}
+          />
+        </Panel.Field>
+        <Panel.PropField name="subtitle" />
+      </Panel.Section>
+      <Panel.Section title="Style">
+        <Panel.DefaultProps exclude={["title", "subtitle"]} />
+      </Panel.Section>
+    </Panel>
+  ),
+  render: (ctx) => <Text>{ctx.props.title}</Text>,
+});
+```
+
+`ctx.props.<name>` is a **`PanelPropHandle`** — the read/write surface over the
+currently-selected instance(s):
+
+- `value` — the host's current value (resolved to the bound variable's value
+  when `bound`), `undefined` when unset.
+- `mixed` — `true` across a multi-selection whose instances hold differing
+  values (render a "Mixed" affordance, not one node's value).
+- `bound` — `true` when a variable drives the prop; the host owns bind/unbind
+  chrome and a guest `set` on a bound prop is dropped.
+- `set(value, { gesture })` — writes a new value. `gesture: "live"` is a
+  transient drag value (no undo entry); `gesture: "commit"` (the default) is the
+  final value on release and pushes **one** undo entry.
+- `reset()` — restores the prop to its declared default.
+
+Compose custom rows with two host-expansion nodes so you never re-implement the
+built-in editors: `<Panel.PropField name="…" />` renders the host's default
+editor for a single prop inside your own `Panel.Section`, and
+`<Panel.DefaultProps exclude={[…]} />` renders the default rows for every
+remaining prop (above, the title/subtitle are laid out by hand and the rest fall
+through to `DefaultProps`). Omitting `panel` entirely yields the default panel:
+one host-rendered row per manifest prop.
+
+**Security.** A panel never runs in the editor's context. Its compiled module is
+evaluated in a locked-down sandbox and it emits only serializable *intents* — a
+panel function and its React tree never cross the boundary. Only validated data
+crosses: prop values in, `set-prop`/`reset-prop` intents out (each re-validated
+against the manifest by the host). Events are addressed purely by
+`(nodeId, name)`; no callbacks or object references are transported.
+
 ## Primitives
 
 `View`, `Text`, `Pressable`, `ScrollView`, `Image`, `Slot` — RN-style props
@@ -124,7 +212,78 @@ the same envelopes are posted to the parent frame as
   a paywall to a DOM container via `react-dom`; used by the deployed WebView
   bundle. Reads the injected config and applies `configure` messages.
 - `renderToNodeTree(element, { config, state })` (from
-  `@voidhash/paywalls/tree`, **Node-only**) — renders components (hooks
-  included) to the §3 preview node tree via a custom `react-reconciler` host.
+  `@voidhash/paywalls/tree`) — renders components (real hooks included) to the
+  §3 preview node tree via a custom `react-reconciler` host. **This is the one
+  render-to-preview-tree path** — the CLI runs it in Node, the studio sandbox
+  runs the same code (bundled with react) inside its iframe. It is **async**:
+  the reconciler commits, one passive-effect flush + one macrotask tick settle
+  the tree, then the committed `PaywallNodeTree` is read back. `<Slot/>` becomes
+  a `{ type: "slot" }` node; components that never stabilize within that one
+  settle budget are out of contract (see the deploy contract §3).
 - `@voidhash/paywalls/panel` — data-only `Panel` primitives for future custom
   editor panels (inert in Phase 1).
+
+## Wire schema — `@voidhash/paywalls/schema`
+
+The single source of the deploy-contract wire types (§2 component manifest, §3
+preview node tree, §3.1 `PaywallStyle`) plus their version constants
+(`treeVersion`, `manifestVersion`) and **dependency-free** runtime validators
+— no `effect`, no `react`, safe to import anywhere including the server trust
+boundary:
+
+- `parsePreviewTree(json)` / `parseComponentManifest(json)` — decode + validate,
+  returning a `ParseResult` (rejecting unknown node types / keys per §3).
+- `countSlotNodes(tree)` — enforce the at-most-one-`<Slot/>` rule.
+- `PAYWALL_STYLE_KEYS` (a `ReadonlySet<string>`) and `PAYWALL_STYLE_KEY_LIST`
+  (the ordered array it derives from, tied to `PaywallStyle`'s keys) — the §3.1
+  style-key allowlist.
+- `PREVIEW_STATE_PATTERN` — the `state`-name regex.
+
+The closed mono mirrors these with effect-Schema validators and a contract test
+that locks the two in lock-step (version equality, style-key-set equality,
+fixture round-trip).
+
+## Composition — `@voidhash/paywalls/compose`
+
+The constrained-JSX composition surface for `.paywall.tsx` files that compose
+paywalls out of screens, layout, and deployed components. Two audiences share
+this entry, and it is **mimic-free** (never imports the document model):
+
+- **Authors** import the inert author surface — `paywall`, `Screen`, `View`,
+  `Text`, `Component`, `variable`, `product`, `purchase`, `closePaywall`,
+  `none`, `payload`. These are analyzed, never executed.
+- **Tooling** imports the toolchain: `parseComposition` (a TS-parser whitelist
+  grammar → the public serializable `CompositionAST`), the deterministic
+  `printComposition` (AST → source; round-trip = reconcile no-op),
+  `generateComposeDts` (Monaco ambient types), the registry vocabulary, and the
+  `CompositionAST` node types. `CompositionError` carries grammar diagnostics.
+
+The mimic snapshot ↔ AST lift/lower and CRDT reconcile stay in the closed
+`paywall-composition` bridge, driven by this AST.
+
+## Studio sandbox — `@voidhash/paywalls/sandbox`
+
+Dev-only, for the studio's in-browser render iframe (not part of any shipped
+paywall bundle):
+
+- `renderComponentToTree(definition, { state, props, hostData })` — render one
+  component's preview state to a §3 node tree, built on `renderToNodeTree`.
+- `extractComponentManifest(definition)` — the §2 manifest for a component.
+- `modules` / `SANDBOX_GLOBAL_NAME` — the `require`-shim module registry (maps
+  `@voidhash/paywalls`, `@voidhash/paywalls/jsx-runtime`, `react`,
+  `react/jsx-runtime` onto one shared React) and the IIFE global name.
+- `./sandbox-bundle` — the prebuilt IIFE bundle text (react + react-reconciler
+  - tree + schema + author surface) the studio evals inside the iframe.
+- `./sandbox-dts` — the Monaco ambient `.d.ts` text, **generated from the real
+  `.d.ts`** at build time (never hand-written), so editor types can't drift.
+
+The sandbox bootstrap freezes `Date.now` / `Math.random` / `performance.now` /
+`requestAnimationFrame` so preview trees are deterministic "poster frames".
+
+## JSX runtime — `@voidhash/paywalls/jsx-runtime`
+
+`@voidhash/paywalls/jsx-runtime` and `@voidhash/paywalls/jsx-dev-runtime`
+re-export `react/jsx-runtime` so `jsxImportSource: "@voidhash/paywalls"` resolves
+everywhere (sandbox, CLI, user projects) — author code imports only
+`@voidhash/paywalls`. The root entry also re-exports React's hooks (`useState`,
+`useEffect`, `useMemo`, `useCallback`, `useRef`) for the same reason.
diff --git a/libraries/paywalls/build.ts b/libraries/paywalls/build.ts
index d0226c3d6..4b0386bc8 100644
--- a/libraries/paywalls/build.ts
+++ b/libraries/paywalls/build.ts
@@ -1,22 +1,52 @@
+import * as esbuild from "esbuild";
+import { readFileSync, rmSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
 import * as tsup from "tsup";
 
-const main = async () => {
+const rootDir = path.dirname(fileURLToPath(import.meta.url));
+const distDir = path.join(rootDir, "dist");
+
+/** IIFE global the sandbox bundle assigns its exports to (keep in sync with `src/sandbox`). */
+const SANDBOX_GLOBAL_NAME = "__VOIDHASH_PAYWALLS_SANDBOX__";
+
+/**
+ * Builds every published entry with tsup (types + cjs/esm). The `sandbox` and
+ * `monaco-surface` entries keep react/react-reconciler external like the rest;
+ * the browser IIFE that bundles them IN is produced separately below.
+ */
+const buildEntries = async (): Promise<void> => {
   await tsup.build({
     dts: true,
     entryPoints: {
+      // Composition grammar/AST/printer/dts + inert author surface. Mimic-free;
+      // imports `typescript` (external) for the whitelist parser.
+      compose: "./src/compose/index.ts",
       dom: "./src/dom.tsx",
       index: "./src/index.ts",
-      panel: "./src/panel.ts",
+      "jsx-dev-runtime": "./src/jsx-dev-runtime.ts",
+      "jsx-runtime": "./src/jsx-runtime.ts",
+      panel: "./src/panel/index.ts",
+      // Node-importable sandbox surface (renderComponentToTree etc.); the
+      // browser IIFE is bundled separately.
+      sandbox: "./src/sandbox/index.tsx",
+      // Dependency-free wire-format entry: nothing here imports react, so it
+      // stays out of the shared chunk and carries no react at runtime.
+      schema: "./src/schema/index.ts",
       tree: "./src/tree.ts",
     },
     external: [
       "react",
       "react-dom",
       "react/jsx-runtime",
-      // Node-only dependency of the `tree` entry; never reaches the browser
-      // entries because nothing outside `src/tree-renderer` imports it.
+      "react/jsx-dev-runtime",
+      // Node-only dependency of the `tree`/`sandbox` entries; never reaches the
+      // browser entries because nothing outside `src/tree-renderer` imports it.
       "react-reconciler",
       "react-reconciler/constants",
+      // The composition parser imports the TypeScript compiler; keep it external
+      // (consumers provide it as an optional peer) instead of inlining ~10MB.
+      "typescript",
     ],
     format: ["cjs", "esm"],
     outDir: "./dist",
@@ -43,6 +73,199 @@ const main = async () => {
   });
 };
 
+/**
+ * Bundles `src/sandbox/index.tsx` into a self-contained browser IIFE with
+ * react + react-reconciler bundled IN, assigning its exports to
+ * {@link SANDBOX_GLOBAL_NAME}. The studio evals this once inside its sandbox
+ * iframe. Minified, production react (dev-only warnings/checks dropped), no
+ * network — everything the compiled component needs comes from this global.
+ */
+const buildSandboxIife = async (): Promise<string> => {
+  const result = await esbuild.build({
+    bundle: true,
+    define: { "process.env.NODE_ENV": '"production"' },
+    entryPoints: [path.join(rootDir, "src/sandbox/index.tsx")],
+    // esbuild emits `"use strict"; var <name> = (…)()`. Under a strict-mode
+    // indirect `eval` (the sandbox path) a top-level `var` does NOT attach to
+    // the global object, so we explicitly assign the global in a footer that
+    // runs in the same scope.
+    footer: {
+      js: `if(typeof globalThis!=="undefined"){globalThis.${SANDBOX_GLOBAL_NAME}=${SANDBOX_GLOBAL_NAME};}`,
+    },
+    format: "iife",
+    globalName: SANDBOX_GLOBAL_NAME,
+    jsx: "automatic",
+    minify: true,
+    platform: "browser",
+    sourcemap: false,
+    target: "es2022",
+    treeShaking: true,
+    write: false,
+  });
+  if (result.errors.length > 0) {
+    throw new Error(`sandbox IIFE build failed:\n${JSON.stringify(result.errors, null, 2)}`);
+  }
+  const bundle = result.outputFiles[0]!.text;
+  writeFileSync(path.join(distDir, "sandbox.global.js"), bundle);
+  return bundle;
+};
+
+/**
+ * Emits `dist/sandbox-bundle.{mjs,cjs,d.ts}` — a node-importable module
+ * exporting the sandbox IIFE bundle text. Mirrors how the retired
+ * `paywall-sdk/host` shipped its runtime string, so the studio can pass it into
+ * the iframe without a separate asset fetch.
+ */
+const writeSandboxBundleModule = (bundle: string): void => {
+  const banner = "// AUTO-GENERATED by build.ts — the sandbox IIFE bundle text. Do not edit.\n";
+  const globalDecl = `export const SANDBOX_GLOBAL_NAME = ${JSON.stringify(SANDBOX_GLOBAL_NAME)};\n`;
+  const bundleDecl = `export const sandboxRuntimeBundle = ${JSON.stringify(bundle)};\n`;
+  writeFileSync(path.join(distDir, "sandbox-bundle.mjs"), banner + globalDecl + bundleDecl);
+  writeFileSync(
+    path.join(distDir, "sandbox-bundle.cjs"),
+    `${banner}"use strict";\nObject.defineProperty(exports, "__esModule", { value: true });\nexports.SANDBOX_GLOBAL_NAME = ${JSON.stringify(SANDBOX_GLOBAL_NAME)};\nexports.sandboxRuntimeBundle = ${JSON.stringify(bundle)};\n`,
+  );
+  writeFileSync(
+    path.join(distDir, "sandbox-bundle.d.ts"),
+    "export declare const SANDBOX_GLOBAL_NAME: string;\nexport declare const sandboxRuntimeBundle: string;\n",
+  );
+};
+
+/**
+ * Bundles one author-surface entry into ONE self-contained `.d.ts` (a dedicated
+ * `splitting: false` dts build inlines every referenced chunk into a single
+ * file, unlike the shared-chunk main build). Emitted into `dist/monaco/` and
+ * returned as text for {@link toAmbientModuleBody}.
+ */
+const buildSelfContainedDts = async (name: string, entry: string): Promise<string> => {
+  const outDir = path.join(distDir, "monaco");
+  await tsup.build({
+    dts: { only: true },
+    entryPoints: { [name]: entry },
+    external: ["react", "react-dom", "react/jsx-runtime", "react/jsx-dev-runtime"],
+    format: ["esm"],
+    outDir,
+    // No shared chunks: force rollup-dts to inline all referenced types into a
+    // single self-contained declaration file we can wrap in a module.
+    splitting: false,
+    target: "es2022",
+  });
+  const dts = readFileSync(path.join(outDir, `${name}.d.ts`), "utf8");
+  // The single-file dts is a build intermediate — don't ship it in the package.
+  rmSync(outDir, { force: true, recursive: true });
+  return dts;
+};
+
+// Minimal React type stub prepended to each ambient module body — authors only
+// need the paywall surface to type-check; react internals are intentionally
+// opaque. Shared by every `@voidhash/paywalls*` ambient block.
+const REACT_STUB = [
+  "  // Minimal React type stubs — authors only need the paywall surface to",
+  "  // type-check; react internals are intentionally opaque here.",
+  "  type ReactNode = any;",
+  "  type CSSProperties = Record<string, string | number>;",
+  "  type ReactProvider<T> = (props: { value: T; children?: ReactNode }) => ReactNode;",
+  "  export function useState<S>(initial: S | (() => S)): [S, (next: S | ((prev: S) => S)) => void];",
+  "  export function useEffect(effect: () => void | (() => void), deps?: readonly unknown[]): void;",
+  "  export function useMemo<T>(factory: () => T, deps?: readonly unknown[]): T;",
+  "  export function useCallback<T>(callback: T, deps?: readonly unknown[]): T;",
+  "  export function useRef<T>(initial: T): { current: T };",
+].join("\n");
+
+// Names the react stub supplies; drop any duplicate re-export of them so an
+// ambient module has a single definition per identifier.
+const STUBBED_HOOKS = new Set(["useState", "useEffect", "useMemo", "useCallback", "useRef"]);
+
+/**
+ * Turns a self-contained declaration file into the BODY of a `declare module`
+ * ambient block: drops the `react` imports/re-exports (the {@link REACT_STUB}
+ * supplies the hooks and `ReactNode`/`CSSProperties`), strips `export` on nested
+ * `declare` statements (illegal inside an ambient module body), rewrites the few
+ * `react.*` qualified references onto the local stubs, and re-indents.
+ */
+const toAmbientModuleBody = (raw: string): string =>
+  raw
+    .split("\n")
+    .filter((line) => {
+      const trimmed = line.trim();
+      // Drop every react import/re-export — the stubs above supply the hooks
+      // and ReactNode/CSSProperties; everything else is inlined already.
+      if (/\bfrom\s+["']react(\/[^"']+)?["'];?$/.test(trimmed)) {
+        return false;
+      }
+      return true;
+    })
+    // `declare` is illegal inside an already-ambient module body; strip it.
+    .map((line) => line.replace(/^(\s*)declare\s+/, "$1"))
+    // Neutralize `react.*` qualified references the inlined chunks may still
+    // carry (e.g. `react.ReactNode`), pointing them at the local stubs.
+    .map((line) =>
+      line
+        .replace(/\breact\.ReactNode\b/g, "ReactNode")
+        .replace(/\breact\.CSSProperties\b/g, "CSSProperties")
+        .replace(/\breact\.Provider\b/g, "ReactProvider"),
+    )
+    // Drop bare re-export lines that only re-export the stubbed hook names
+    // (leaves the local `export {…}` block that re-exports the real surface).
+    .filter((line) => {
+      const match = line.match(/^export\s*\{([^}]*)\}\s*;?\s*$/);
+      if (!match) {
+        return true;
+      }
+      const names = match[1]!.split(",").map((n) =>
+        n
+          .trim()
+          .split(/\s+as\s+/)[0]!
+          .trim(),
+      );
+      return !names.every((name) => STUBBED_HOOKS.has(name));
+    })
+    .map((line) => (line.length > 0 ? `  ${line}` : line))
+    .join("\n");
+
+/**
+ * Assembles the `sandboxDts` string Monaco loads via `addExtraLib`: the
+ * `@voidhash/paywalls` ambient module (component authoring), the
+ * `@voidhash/paywalls/panel` ambient module (editor-panel authoring), and the
+ * jsx-runtime shim — each self-contained.
+ */
+const writeSandboxDtsModule = (surfaceRaw: string, panelRaw: string): void => {
+  const surfaceBody = toAmbientModuleBody(surfaceRaw);
+  const panelBody = toAmbientModuleBody(panelRaw);
+
+  const dts = [
+    `declare module "@voidhash/paywalls" {\n${REACT_STUB}\n\n${surfaceBody}\n}`,
+    `declare module "@voidhash/paywalls/panel" {\n${REACT_STUB}\n\n${panelBody}\n}`,
+    `declare module "@voidhash/paywalls/jsx-runtime" {\n  export const Fragment: unknown;\n  export function jsx(type: unknown, props: unknown, key?: unknown): unknown;\n  export function jsxs(type: unknown, props: unknown, key?: unknown): unknown;\n}`,
+  ].join("\n\n") + "\n";
+
+  const banner = "// AUTO-GENERATED by build.ts from the real .d.ts — do not edit.\n";
+  writeFileSync(
+    path.join(distDir, "sandbox-dts.mjs"),
+    `${banner}export const sandboxDts = ${JSON.stringify(dts)};\n`,
+  );
+  writeFileSync(
+    path.join(distDir, "sandbox-dts.cjs"),
+    `${banner}"use strict";\nObject.defineProperty(exports, "__esModule", { value: true });\nexports.sandboxDts = ${JSON.stringify(dts)};\n`,
+  );
+  writeFileSync(
+    path.join(distDir, "sandbox-dts.d.ts"),
+    "export declare const sandboxDts: string;\n",
+  );
+};
+
+const main = async (): Promise<void> => {
+  await buildEntries();
+  const bundle = await buildSandboxIife();
+  writeSandboxBundleModule(bundle);
+  const surfaceDts = await buildSelfContainedDts(
+    "monaco-surface",
+    "./src/sandbox/monaco-surface.ts",
+  );
+  const panelDts = await buildSelfContainedDts("panel-surface", "./src/panel/monaco-surface.ts");
+  writeSandboxDtsModule(surfaceDts, panelDts);
+};
+
 main().catch((error) => {
   // biome-ignore lint/suspicious/noConsole: Build script should print the failure.
   console.error(error);
diff --git a/libraries/paywalls/package.json b/libraries/paywalls/package.json
index 5e68038b0..b0eac4b1a 100644
--- a/libraries/paywalls/package.json
+++ b/libraries/paywalls/package.json
@@ -69,6 +69,76 @@
         "types": "./dist/panel.d.ts",
         "default": "./dist/panel.cjs"
       }
+    },
+    "./schema": {
+      "import": {
+        "types": "./dist/schema.d.ts",
+        "default": "./dist/schema.mjs"
+      },
+      "require": {
+        "types": "./dist/schema.d.ts",
+        "default": "./dist/schema.cjs"
+      }
+    },
+    "./compose": {
+      "import": {
+        "types": "./dist/compose.d.ts",
+        "default": "./dist/compose.mjs"
+      },
+      "require": {
+        "types": "./dist/compose.d.ts",
+        "default": "./dist/compose.cjs"
+      }
+    },
+    "./jsx-runtime": {
+      "import": {
+        "types": "./dist/jsx-runtime.d.ts",
+        "default": "./dist/jsx-runtime.mjs"
+      },
+      "require": {
+        "types": "./dist/jsx-runtime.d.ts",
+        "default": "./dist/jsx-runtime.cjs"
+      }
+    },
+    "./jsx-dev-runtime": {
+      "import": {
+        "types": "./dist/jsx-dev-runtime.d.ts",
+        "default": "./dist/jsx-dev-runtime.mjs"
+      },
+      "require": {
+        "types": "./dist/jsx-dev-runtime.d.ts",
+        "default": "./dist/jsx-dev-runtime.cjs"
+      }
+    },
+    "./sandbox": {
+      "import": {
+        "types": "./dist/sandbox.d.ts",
+        "default": "./dist/sandbox.mjs"
+      },
+      "require": {
+        "types": "./dist/sandbox.d.ts",
+        "default": "./dist/sandbox.cjs"
+      }
+    },
+    "./sandbox-bundle": {
+      "import": {
+        "types": "./dist/sandbox-bundle.d.ts",
+        "default": "./dist/sandbox-bundle.mjs"
+      },
+      "require": {
+        "types": "./dist/sandbox-bundle.d.ts",
+        "default": "./dist/sandbox-bundle.cjs"
+      }
+    },
+    "./sandbox-dts": {
+      "import": {
+        "types": "./dist/sandbox-dts.d.ts",
+        "default": "./dist/sandbox-dts.mjs"
+      },
+      "require": {
+        "types": "./dist/sandbox-dts.d.ts",
+        "default": "./dist/sandbox-dts.cjs"
+      }
     }
   },
   "publishConfig": {
@@ -88,6 +158,7 @@
     "@types/react": "catalog:",
     "@types/react-dom": "catalog:",
     "@voidhash/tsconfig": "workspace:*",
+    "esbuild": "^0.25.10",
     "react": "catalog:",
     "react-dom": "catalog:",
     "tsup": "^6.1.3",
@@ -97,6 +168,12 @@
   },
   "peerDependencies": {
     "react": ">=18",
-    "react-dom": ">=18"
+    "react-dom": ">=18",
+    "typescript": ">=5"
+  },
+  "peerDependenciesMeta": {
+    "typescript": {
+      "optional": true
+    }
   }
 }
diff --git a/libraries/paywalls/src/authoring/actions.ts b/libraries/paywalls/src/authoring/actions.ts
index e1965f34e..d744a6254 100644
--- a/libraries/paywalls/src/authoring/actions.ts
+++ b/libraries/paywalls/src/authoring/actions.ts
@@ -5,7 +5,7 @@
  * action is a typed callback that invokes the consumer-passed prop of the
  * same name (e.g. action `onSelect` → component prop `onSelect`).
  */
-import { brandActionCallback } from "../internal/action-brand";
+import { brandActionCallback, recordActionInvocation } from "../internal/action-brand";
 import type { ManifestActionPayloadKind } from "../schema/component-manifest";
 
 /** Describes one scalar field of an action payload. */
@@ -103,6 +103,10 @@ export const buildActionCallbacks = <A extends ActionMap>(
   const callbacks: Record<string, (payload?: unknown) => void> = {};
   for (const name of Object.keys(actionMap)) {
     callbacks[name] = brandActionCallback((payload?: unknown) => {
+      // Let the preview tree host learn this action's name when it probes an
+      // inline handler (`onPress={() => actions.onSelect(…)}`). No-op outside a
+      // recording scope, so real presses are unaffected.
+      recordActionInvocation(name);
       const handler = getHandlers()[name];
       if (typeof handler === "function") {
         handler(payload);
diff --git a/libraries/paywalls/src/authoring/define-component.tsx b/libraries/paywalls/src/authoring/define-component.tsx
index f6afd3ebd..cc8b98e61 100644
--- a/libraries/paywalls/src/authoring/define-component.tsx
+++ b/libraries/paywalls/src/authoring/define-component.tsx
@@ -1,5 +1,12 @@
 import { type ReactNode, useMemo, useRef } from "react";
 
+import type {
+  PanelContext,
+  PanelProps,
+  PanelPropHandle,
+  PanelReadonlyPropHandle,
+  PanelRefPropHandle,
+} from "../panel/context";
 import { SlotProvider } from "../primitives/slot";
 import type { PaywallProduct, PaywallVariables } from "../runtime/config";
 import {
@@ -14,6 +21,7 @@ import {
   applyPropDefaults,
   type InferExternalProps,
   type InferProps,
+  type PropBuilder,
   type PropFactory,
   type PropMap,
   propFactory,
@@ -57,6 +65,33 @@ export interface PaywallComponentMeta {
   readonly description?: string;
 }
 
+/**
+ * The refined `ctx.props` handle for one declared prop, chosen by its kind: a
+ * `ref` prop becomes a {@link PanelRefPropHandle}, a `component` prop a
+ * read-only handle, everything else a writable {@link PanelPropHandle} typed to
+ * the prop's value.
+ */
+type PanelPropHandleFor<B> = B extends PropBuilder<infer T, boolean, boolean, infer K>
+  ? K extends "ref"
+    ? PanelRefPropHandle
+    : K extends "component"
+      ? PanelReadonlyPropHandle<T>
+      : PanelPropHandle<T>
+  : never;
+
+/** The `ctx.props` bag for a panel, refined against the component's prop map. */
+export type PanelPropsFor<M extends PropMap> = {
+  readonly [K in keyof M]: PanelPropHandleFor<M[K]>;
+} & PanelProps;
+
+/**
+ * A component's custom editor panel: a function of a {@link PanelContext}
+ * refined against the component's declared props. Compose it from the `Panel.*`
+ * primitives (`@voidhash/paywalls/panel`); the reconciler serializes the
+ * returned element into a data-only {@link PanelTree}.
+ */
+export type ComponentPanel<M extends PropMap> = (ctx: PanelContext<PanelPropsFor<M>>) => ReactNode;
+
 export interface DefineComponentInput<M extends PropMap, A extends ActionMap> {
   /** Stable component slug (`^[a-z0-9][a-z0-9-]{0,63}$`), e.g. "product-option". */
   readonly id: string;
@@ -70,10 +105,11 @@ export interface DefineComponentInput<M extends PropMap, A extends ActionMap> {
   /** Named preview states the CLI renders to §3 node trees at build time. */
   readonly previews?: Readonly<Record<string, ComponentPreviewState<M>>>;
   /**
-   * Custom editor panel (data-only `@voidhash/paywalls/panel` elements).
-   * Accepted but inert in Phase 1.
+   * Custom editor panel: `(ctx) => ReactNode` built from the `Panel.*`
+   * primitives. Runs in a {@link createPanelSession}; omit it for the default
+   * host-generated panel.
    */
-  readonly panel?: ReactNode;
+  readonly panel?: ComponentPanel<M>;
   /** The component template. Receives fully-typed props and action callbacks. */
   readonly render: (ctx: ComponentRenderContext<M, A>) => ReactNode;
 }
@@ -91,7 +127,7 @@ export interface ComponentDefinition<M extends PropMap, A extends ActionMap> {
   /** The resolved action builders, keyed by name. */
   readonly actions: A;
   readonly previews: Readonly<Record<string, ComponentPreviewState<M>>>;
-  readonly panel?: ReactNode;
+  readonly panel?: ComponentPanel<M>;
   /** The original template function (used for declarative slot detection). */
   readonly render: (ctx: ComponentRenderContext<M, A>) => ReactNode;
   /** The renderable React component. */
diff --git a/libraries/paywalls/src/compose/ast.ts b/libraries/paywalls/src/compose/ast.ts
new file mode 100644
index 000000000..282b4e787
--- /dev/null
+++ b/libraries/paywalls/src/compose/ast.ts
@@ -0,0 +1,132 @@
+/**
+ * The public, serializable composition AST — the seam between the OSS authoring
+ * half (parser/printer) and the closed mimic bridge (lowerer/lifter).
+ *
+ * `parseComposition` produces a `CompositionAST` from source; the closed
+ * `lowerAst` turns it into a `PaywallDesignerDocumentInput`. Conversely the
+ * closed `liftSnapshot` produces a `CompositionAST` from a decoded mimic
+ * snapshot and `printComposition` serializes it back to source.
+ *
+ * The AST carries exactly the information the grammar expresses — node
+ * structure, styles, interactions, variables, component props/action bindings —
+ * as plain data (no mimic envelopes, no react). Node ids/positions are NOT part
+ * of the AST: the lowerer assigns them positionally (matching today's scheme)
+ * and the printer never emits them.
+ */
+
+/** Declared variable type. */
+export type CompositionVariableType = "string" | "number" | "boolean" | "product";
+
+/** A paywall-scoped variable declaration. */
+export interface CompositionVariable {
+  readonly name: string;
+  readonly type: CompositionVariableType;
+  /** The declared default value. Absent ⇒ the type's zero value. */
+  readonly defaultValue?: string | number | boolean;
+}
+
+/**
+ * A JSON-ish structured style value: a plain object or array whose leaves are
+ * scalars (or further nested objects/arrays). Structured style fields like
+ * `backgroundGradient` / `backgroundImage` carry these; scalar fields do not.
+ */
+export type CompositionStyleObject =
+  | { readonly [key: string]: CompositionStyleValue }
+  | readonly CompositionStyleValue[];
+
+/**
+ * A style value: a literal string / number / boolean, or a JSON-ish structured
+ * object/array (for structured background fields). Structured values are plain
+ * JSON — no identifiers, spreads, or computed keys.
+ */
+export type CompositionStyleValue = string | number | boolean | CompositionStyleObject;
+
+/** A product source used by an action. */
+export type CompositionProductSource =
+  | { readonly kind: "literal"; readonly productId: string }
+  | { readonly kind: "variable"; readonly variableName: string }
+  /** `payload("field")` — only valid inside a component action binding. */
+  | { readonly kind: "payload"; readonly field: string };
+
+/** A scalar value carried by a set-variable action. */
+export type CompositionScalarSource =
+  | { readonly kind: "literal-string"; readonly value: string }
+  | { readonly kind: "literal-number"; readonly value: number }
+  | { readonly kind: "literal-boolean"; readonly value: boolean }
+  | { readonly kind: "literal-product"; readonly productId: string }
+  | { readonly kind: "variable"; readonly variableName: string }
+  | { readonly kind: "payload"; readonly field: string };
+
+/** An action bound to an interaction or a component action slot. */
+export type CompositionAction =
+  | { readonly kind: "close-paywall" }
+  | { readonly kind: "none" }
+  | { readonly kind: "purchase"; readonly product: CompositionProductSource }
+  | {
+      readonly kind: "set-variable";
+      readonly variableName: string;
+      readonly value: CompositionScalarSource;
+    };
+
+/** A value bound to a component prop: a literal or a variable reference. */
+export type CompositionPropValue =
+  | { readonly kind: "literal-string"; readonly value: string }
+  | { readonly kind: "literal-number"; readonly value: number }
+  | { readonly kind: "literal-boolean"; readonly value: boolean }
+  | { readonly kind: "literal-product"; readonly productId: string }
+  | { readonly kind: "literal-string-array"; readonly value: readonly string[] }
+  | { readonly kind: "literal-number-array"; readonly value: readonly number[] }
+  | { readonly kind: "literal-boolean-array"; readonly value: readonly boolean[] }
+  | { readonly kind: "variable"; readonly variableName: string };
+
+/** A component prop binding (prop name → value). */
+export interface CompositionPropBinding {
+  readonly name: string;
+  readonly value: CompositionPropValue;
+}
+
+/** A component action binding (action name → action). */
+export interface CompositionActionBinding {
+  readonly name: string;
+  readonly action: CompositionAction;
+}
+
+/** A node interaction (trigger → action). Only `click` (onPress) today. */
+export interface CompositionInteraction {
+  readonly trigger: "click";
+  readonly action: CompositionAction;
+}
+
+/** A layout element: `<Screen>` / `<View>` / `<Text>`. */
+export interface CompositionElementNode {
+  readonly kind: "element";
+  readonly type: "screen" | "view" | "text";
+  /** Node display name (`name=` attribute), or absent (⇒ default). */
+  readonly name?: string;
+  /** Style field name → value. Field names are the exact mimic style fields. */
+  readonly style: Readonly<Record<string, CompositionStyleValue>>;
+  readonly interactions: readonly CompositionInteraction[];
+  /** `text` nodes carry text content; layout nodes carry children. */
+  readonly text?: string;
+  readonly children: readonly CompositionNode[];
+}
+
+/** A code-component instance: `<SomeComponent …>`. */
+export interface CompositionComponentNode {
+  readonly kind: "component";
+  /** The registry tag this instance referenced (printer/lowerer identity). */
+  readonly tag: string;
+  /** Node display name (`name=` attribute), or absent (⇒ default). */
+  readonly name?: string;
+  readonly props: readonly CompositionPropBinding[];
+  readonly actionBindings: readonly CompositionActionBinding[];
+  readonly children: readonly CompositionNode[];
+}
+
+export type CompositionNode = CompositionElementNode | CompositionComponentNode;
+
+/** A parsed composition: its root screen and paywall-level variable declarations. */
+export interface CompositionAST {
+  readonly variables: readonly CompositionVariable[];
+  readonly root: CompositionElementNode;
+}
diff --git a/libraries/paywalls/src/compose/author-surface.ts b/libraries/paywalls/src/compose/author-surface.ts
new file mode 100644
index 000000000..16bcaefe5
--- /dev/null
+++ b/libraries/paywalls/src/compose/author-surface.ts
@@ -0,0 +1,70 @@
+/**
+ * Authoring surface for `.paywall.tsx` composition files
+ * (`import { … } from "@voidhash/paywalls/compose"`).
+ *
+ * These declarations exist for editor tooling and type-checking only. The
+ * composition parser never *executes* a paywall file — it parses the source and
+ * lowers the closed grammar into a {@link CompositionAST}. The runtime bodies
+ * here are intentionally inert.
+ *
+ * The `Screen`/`View`/`Text` tags carry PRECISE per-node prop types
+ * ({@link ScreenProps}/{@link ViewProps}/{@link TextProps}), derived from the
+ * shared style registry, so an unknown attribute or a wrong-typed value errors
+ * at type-check time rather than only at parse/encode time. The type-only import
+ * from `./style-attr-types` erases, so this module stays runtime-inert and the
+ * compose graph stays react/mimic-free.
+ *
+ * NOTE: this covers the current Phase 1 subset (Screen/View/Text, styles,
+ * variables, node interactions, and component props/actions). States and
+ * Shape/Path are a documented next increment.
+ */
+import type { ScreenProps, TextProps, ViewProps } from "./style-attr-types";
+
+export interface VariableHandle<T> {
+  /** Marks this identifier as a variable reference; not called at runtime. */
+  readonly __type: T;
+  /** Build a set-variable action bound to this variable. */
+  set(value: T): Action;
+}
+
+export interface ProductRef {
+  readonly __product: true;
+}
+
+export interface Action {
+  readonly __action: true;
+}
+
+type Node = unknown;
+
+/** Declare the paywall composition. Its callback is analyzed, never run. */
+export declare function paywall(build: () => Node): Node;
+
+export declare const Screen: (props: ScreenProps) => Node;
+export declare const View: (props: ViewProps) => Node;
+export declare const Text: (props: TextProps) => Node;
+
+export declare const variable: {
+  string(name: string, opts?: { default?: string }): VariableHandle<string>;
+  number(name: string, opts?: { default?: number }): VariableHandle<number>;
+  boolean(name: string, opts?: { default?: boolean }): VariableHandle<boolean>;
+  product(name: string): VariableHandle<ProductRef>;
+};
+
+/** Reference a catalog product by id. */
+export declare function product(id: string): ProductRef;
+
+/** Built-in actions for node interactions. */
+export declare function purchase(product: ProductRef | VariableHandle<ProductRef>): Action;
+export declare function closePaywall(): Action;
+
+/** An explicit no-op action binding for a component action (does nothing). */
+export declare function none(): Action;
+
+/**
+ * Read a field of the payload emitted by a component action, for use inside that
+ * action's binding — e.g. `onSelect={selected.set(payload("product"))}`. Only
+ * valid within a component action binding; the field must be declared by the
+ * component's action.
+ */
+export declare function payload(field: string): any;
diff --git a/libraries/paywalls/src/compose/component.ts b/libraries/paywalls/src/compose/component.ts
new file mode 100644
index 000000000..d9a34bdef
--- /dev/null
+++ b/libraries/paywalls/src/compose/component.ts
@@ -0,0 +1,227 @@
+/**
+ * Code-component instance support for the composition format.
+ *
+ * The base grammar (Screen/View/Text) is self-contained, but a `<Component>`
+ * element has no meaning without knowing which component it refers to and what
+ * props/actions that component declares. That knowledge lives in the caller's
+ * mimic document (the `codeComponent` definitions + their compiled manifests),
+ * so it is threaded into the parser/printer as a {@link CompositionRegistry}
+ * rather than hardcoded here.
+ *
+ * The composition manifest types are derived from `@voidhash/paywalls/schema`'s
+ * §2 {@link ComponentManifest} rather than re-declared: every shared field's
+ * type traces back to the schema manifest by construction. This makes a real
+ * `ComponentManifest` assignable to {@link CompositionComponentManifest} by
+ * type, not by convention — a shape change in the schema is either inherited
+ * here automatically or surfaces as a compile error, never silent drift.
+ */
+
+import type {
+  ComponentManifest,
+  ManifestAction,
+  ManifestArrayProp,
+  ManifestProp,
+  ManifestPropKind,
+  ManifestRefProp,
+  ManifestSelectProp,
+} from "../schema/component-manifest";
+
+/** Prop kinds a component manifest can declare (the §2 manifest prop kinds). */
+export type CompositionPropKind = ManifestPropKind;
+
+/**
+ * The subset of a manifest prop definition the composition layer consumes: an
+ * all-optional projection of the {@link ManifestProp} union whose field types
+ * are single-sourced from that union's members, so they cannot drift from the
+ * schema. `item` recurses to this projected type (the composition-level view of
+ * {@link ManifestArrayProp}'s `item`) rather than the schema's `ManifestArrayItem`.
+ */
+export interface CompositionPropDef {
+  readonly kind: ManifestProp["kind"];
+  readonly refType?: ManifestRefProp["refType"];
+  readonly options?: ManifestSelectProp["options"];
+  readonly optional?: ManifestProp["optional"];
+  readonly item?: CompositionPropDef;
+}
+
+/**
+ * The manifest action definition the composition layer consumes. Identical to
+ * the schema's {@link ManifestAction}, so it is aliased directly.
+ */
+export type CompositionActionDef = ManifestAction;
+
+/**
+ * The manifest keys the composition layer reads, resolved off the real
+ * {@link ComponentManifest} so a rename in the schema drops them here and trips
+ * the {@link _CompositionManifestKeysExist} guard below.
+ */
+type CompositionManifestKey = Extract<keyof ComponentManifest, "props" | "actions" | "slot">;
+
+/**
+ * The subset of a component's {@link ComponentManifest} (`@voidhash/paywalls/schema`)
+ * the composition layer needs. The field-key set is single-sourced from the
+ * schema manifest ({@link CompositionManifestKey}) and `slot` reuses the
+ * manifest's own type via `Pick`; only the record value types are the wider
+ * composition projection ({@link CompositionPropDef} / {@link CompositionActionDef}),
+ * since a composition manifest is a real manifest read through a looser lens. A
+ * real `ComponentManifest` is assignable to this by construction (asserted by
+ * {@link _ManifestIsCompositionManifest}), so callers pass it directly.
+ */
+export interface CompositionComponentManifest
+  extends Partial<Pick<ComponentManifest, Extract<CompositionManifestKey, "slot">>> {
+  readonly props: Readonly<Record<string, CompositionPropDef>>;
+  readonly actions?: Readonly<Record<string, CompositionActionDef>>;
+}
+
+/** Resolves to `T` only when it is exactly `true`; used to force a compile error on drift. */
+type Assert<T extends true> = T;
+
+/**
+ * Compile-time guards for the invariant downstream callers rely on: the projected
+ * manifest keys still exist on the schema {@link ComponentManifest} (else
+ * {@link CompositionManifestKey} loses them), and a real §2 `ComponentManifest`
+ * is assignable to {@link CompositionComponentManifest}. Purely type-level (no
+ * runtime output); either alias fails to resolve if the corresponding shape drifts.
+ */
+type _CompositionManifestKeysExist = Assert<
+  [CompositionManifestKey] extends ["props" | "actions" | "slot"]
+    ? ["props" | "actions" | "slot"] extends [CompositionManifestKey]
+      ? true
+      : false
+    : false
+>;
+type _ManifestIsCompositionManifest = Assert<
+  ComponentManifest extends CompositionComponentManifest ? true : false
+>;
+
+/**
+ * A component available to a composition: its JSX tag, the identity fields
+ * written onto the lowered `component` node, and its manifest (for validating
+ * and printing props/actions).
+ */
+export interface CompositionComponent {
+  /** JSX tag used in source (a valid PascalCase identifier). */
+  readonly tag: string;
+  readonly manifest: CompositionComponentManifest;
+  /** `"local"` (in-document `codeComponent`) or `"catalog"` (deployed artifact). */
+  readonly source: "local" | "catalog";
+  /** `codeComponent` node id when `source` is `"local"`. */
+  readonly localComponentId?: string;
+  readonly componentSlug: string;
+  readonly componentVersion: number;
+  readonly contentHash: string;
+}
+
+/** The set of components a composition may reference. */
+export interface CompositionRegistry {
+  readonly components: readonly CompositionComponent[];
+}
+
+/** Index a registry by JSX tag (parser lookup: source tag → component). */
+export function registryByTag(registry: CompositionRegistry): Map<string, CompositionComponent> {
+  const byTag = new Map<string, CompositionComponent>();
+  for (const component of registry.components) {
+    byTag.set(component.tag, component);
+  }
+  return byTag;
+}
+
+/**
+ * Resolve the registry component a `component` AST node refers to (printer
+ * lookup). Local instances match by `localComponentId`; catalog instances by
+ * `componentSlug`.
+ */
+export function resolveComponentForNode(
+  registry: CompositionRegistry,
+  data: {
+    readonly componentSource?: string;
+    readonly localComponentId?: string;
+    readonly componentSlug?: string;
+  },
+): CompositionComponent | undefined {
+  if (data.componentSource === "local") {
+    return registry.components.find(
+      (component) =>
+        component.source === "local" && component.localComponentId === data.localComponentId,
+    );
+  }
+  return registry.components.find(
+    (component) => component.source !== "local" && component.componentSlug === data.componentSlug,
+  );
+}
+
+/**
+ * The scalar value discriminator key for a prop kind, or `null` for kinds with
+ * no direct scalar representation (`array` uses {@link arrayItemKey}; `component`
+ * has no representable binding value).
+ */
+export function scalarPropValueKey(
+  kind: CompositionPropKind,
+): "string" | "number" | "boolean" | "product" | null {
+  switch (kind) {
+    case "string":
+    case "select":
+    case "image":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "ref":
+      return "product";
+    default:
+      return null;
+  }
+}
+
+/** The array value discriminator key for an array prop's scalar item kind. */
+export function arrayItemKey(
+  itemKind: CompositionPropKind | undefined,
+): "string-array" | "number-array" | "boolean-array" | null {
+  switch (itemKind) {
+    case "string":
+    case "select":
+    case "image":
+      return "string-array";
+    case "number":
+      return "number-array";
+    case "boolean":
+      return "boolean-array";
+    default:
+      return null;
+  }
+}
+
+/**
+ * The variable type a prop of the given kind can be bound to via a
+ * variable-reference (so `title={someStringVar}` type-checks). Kinds with no
+ * bindable variable type (array/component) return `null`.
+ */
+export function variableTypeForPropKind(
+  kind: CompositionPropKind,
+): "string" | "number" | "boolean" | "product" | null {
+  switch (kind) {
+    case "string":
+    case "select":
+    case "image":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "ref":
+      return "product";
+    default:
+      return null;
+  }
+}
+
+/** Derive a stable PascalCase JSX tag from a component slug or name. */
+export function defaultComponentTag(source: string): string {
+  const parts = source.split(/[^A-Za-z0-9]+/).filter(Boolean);
+  const pascal = parts.map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join("");
+  if (pascal.length === 0) {
+    return "Component";
+  }
+  return /^[A-Za-z]/.test(pascal) ? pascal : `Component${pascal}`;
+}
diff --git a/libraries/paywalls/src/compose/error.ts b/libraries/paywalls/src/compose/error.ts
new file mode 100644
index 000000000..a1c3c9583
--- /dev/null
+++ b/libraries/paywalls/src/compose/error.ts
@@ -0,0 +1,17 @@
+/** Thrown when a composition file contains a construct outside the closed grammar. */
+export class CompositionError extends Error {
+  constructor(
+    message: string,
+    /** 0-based source line (from the TypeScript parser), when known. */
+    readonly line?: number,
+    /** 0-based source column, when known. */
+    readonly column?: number,
+  ) {
+    super(
+      line !== undefined && column !== undefined
+        ? `${message} (line ${line + 1}, col ${column + 1})`
+        : message,
+    );
+    this.name = "CompositionError";
+  }
+}
diff --git a/libraries/paywalls/src/compose/generate-dts.ts b/libraries/paywalls/src/compose/generate-dts.ts
new file mode 100644
index 000000000..955b6a04a
--- /dev/null
+++ b/libraries/paywalls/src/compose/generate-dts.ts
@@ -0,0 +1,202 @@
+import {
+  NODE_STYLE_ENTRIES,
+  STYLE_FIELD_TYPES,
+  type StyleFieldName,
+  type StyleValueDescriptor,
+} from "../schema/style-registry";
+import type { CompositionPropDef, CompositionRegistry } from "./component";
+
+/**
+ * Generates the `@voidhash/paywalls/compose` authoring surface as a `.d.ts`
+ * string for the in-browser Monaco editor.
+ *
+ * The built-in tag declarations (`Screen`/`View`/`Text`) are generated from the
+ * shared `../schema/style-registry` value-type descriptors — the SAME source the
+ * static author surface (`./style-attr-types` + `./author-surface`) derives its
+ * types from — with the style fields nested inside a single `style?: { … }` member
+ * (converging with the code-component authoring look), so the ambient d.ts and the
+ * real surface cannot drift; a
+ * `base-module-sync` test locks this. Monaco has no access to package-internal
+ * type imports, so every descriptor is rendered to an inline literal type here
+ * (the module is a self-contained ambient `declare module`).
+ *
+ * The non-tag declarations (`paywall`, `variable`, the marker helpers, and the
+ * `Action`/`ProductRef`/`VariableHandle` types) mirror `./author-surface` as
+ * literal strings — they have no registry to derive from, and the sync test
+ * still asserts every author-surface symbol appears in the generated output.
+ */
+
+/** The `Action`/`ProductRef`/`VariableHandle` types + inert markers, verbatim. */
+const HELPER_MODULE = `
+  export interface VariableHandle<T> {
+    readonly __type: T;
+    set(value: T): Action;
+  }
+  export interface ProductRef {
+    readonly __product: true;
+  }
+  export interface Action {
+    readonly __action: true;
+  }
+  type Node = unknown;
+  export function paywall(build: () => Node): Node;
+  export const variable: {
+    string(name: string, opts?: { default?: string }): VariableHandle<string>;
+    number(name: string, opts?: { default?: number }): VariableHandle<number>;
+    boolean(name: string, opts?: { default?: boolean }): VariableHandle<boolean>;
+    product(name: string): VariableHandle<ProductRef>;
+  };
+  export function product(id: string): ProductRef;
+  export function purchase(product: ProductRef | VariableHandle<ProductRef>): Action;
+  export function closePaywall(): Action;
+  export function none(): Action;
+  export function payload(field: string): any;`;
+
+/** The structured background value shapes, inlined so the ambient module is self-contained. */
+const STRUCTURED_TYPES = `
+  interface StyleGradientValue {
+    kind: "linear" | "radial";
+    startX: number;
+    startY: number;
+    endX: number;
+    endY: number;
+    stops: { color: string; position: number }[];
+  }
+  interface StyleImageValue {
+    url: string;
+    resizeMode: "cover" | "contain" | "stretch" | "center";
+  }`;
+
+/**
+ * Generate the ambient `.d.ts` for the composition authoring surface: the
+ * helper/marker declarations, the generated built-in tag declarations, and a
+ * typed JSX tag per registry component so Monaco offers real prop/action
+ * completions and diagnostics.
+ */
+export function generateComposeDts(registry?: CompositionRegistry): string {
+  const builtins = [
+    tagDeclaration("Screen", "screen", { onPress: false, textChild: false }),
+    tagDeclaration("View", "view", { onPress: true, textChild: false }),
+    tagDeclaration("Text", "text", { onPress: false, textChild: true }),
+  ].join("\n");
+  const components = (registry?.components ?? [])
+    .map((component) => componentDeclaration(component.tag, component.manifest))
+    .join("\n");
+  const body = `${HELPER_MODULE}\n${STRUCTURED_TYPES}\n${builtins}${
+    components.length > 0 ? `\n${components}` : ""
+  }`;
+  return `declare module "@voidhash/paywalls/compose" {${body}\n}\n`;
+}
+
+interface TagShape {
+  /** Whether the node accepts an `onPress` action attribute (`<View>` only). */
+  readonly onPress: boolean;
+  /** Whether children are a literal string (`<Text>`) vs element children. */
+  readonly textChild: boolean;
+}
+
+/**
+ * Render a built-in tag declaration from its per-node style entries + shape. The
+ * style fields are nested inside a single `style?: { … }` member (converging with
+ * the code-component authoring look); `name?`/`onPress?`/`children?` stay siblings.
+ */
+function tagDeclaration(tag: string, node: keyof typeof NODE_STYLE_ENTRIES, shape: TagShape): string {
+  const styleMembers: string[] = [];
+  for (const entry of NODE_STYLE_ENTRIES[node]) {
+    const descriptor = STYLE_FIELD_TYPES[entry.field as StyleFieldName];
+    styleMembers.push(`        ${entry.field}?: ${descriptorTsType(descriptor)};`);
+  }
+  const members: string[] = [`      style?: {\n${styleMembers.join("\n")}\n      };`];
+  members.push(`      name?: string;`);
+  if (shape.onPress) {
+    members.push(`      onPress?: Action;`);
+  }
+  members.push(shape.textChild ? `      children?: string;` : `      children?: Node | Node[];`);
+  return `  export const ${tag}: (props: {\n${members.join("\n")}\n  }) => Node;`;
+}
+
+/** Render a value-type descriptor to its inline TS type string. */
+function descriptorTsType(descriptor: StyleValueDescriptor): string {
+  switch (descriptor.kind) {
+    case "number":
+      return "number";
+    case "color":
+    case "string":
+      return "string";
+    case "boolean":
+      return "boolean";
+    case "dimension":
+      return 'number | "auto"';
+    case "enum":
+      return descriptor.values.map((value) => JSON.stringify(value)).join(" | ");
+    case "gradient":
+      return "StyleGradientValue";
+    case "image":
+      return "StyleImageValue";
+  }
+}
+
+function componentDeclaration(
+  tag: string,
+  manifest: {
+    props: Readonly<Record<string, CompositionPropDef>>;
+    actions?: Readonly<Record<string, unknown>>;
+    slot?: boolean;
+  },
+): string {
+  const members: string[] = [];
+  for (const [name, def] of Object.entries(manifest.props)) {
+    members.push(`      ${propMember(name, def)}`);
+  }
+  for (const name of Object.keys(manifest.actions ?? {})) {
+    members.push(`      ${jsxName(name)}?: Action;`);
+  }
+  members.push(`      name?: string;`);
+  if (manifest.slot) {
+    members.push(`      children?: Node | Node[];`);
+  }
+  return `  export const ${tag}: (props: {\n${members.join("\n")}\n  }) => Node;`;
+}
+
+function propMember(name: string, def: CompositionPropDef): string {
+  const optional = def.optional === false ? "" : "?";
+  return `${jsxName(name)}${optional}: ${propTsType(def)};`;
+}
+
+function propTsType(def: CompositionPropDef): string {
+  switch (def.kind) {
+    case "string":
+    case "image":
+      return "string | VariableHandle<string>";
+    case "select":
+      return def.options && def.options.length > 0
+        ? `(${def.options.map((o) => JSON.stringify(o)).join(" | ")}) | VariableHandle<string>`
+        : "string | VariableHandle<string>";
+    case "number":
+      return "number | VariableHandle<number>";
+    case "boolean":
+      return "boolean | VariableHandle<boolean>";
+    case "ref":
+      return "ProductRef | VariableHandle<ProductRef>";
+    case "array":
+      return `(${scalarTsType(def.item?.kind)})[]`;
+    case "component":
+      return "Node";
+  }
+}
+
+function scalarTsType(kind: CompositionPropDef["kind"] | undefined): string {
+  switch (kind) {
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    default:
+      return "string";
+  }
+}
+
+/** Quote a prop/action name that isn't a bare JS identifier (defensive). */
+function jsxName(name: string): string {
+  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
+}
diff --git a/libraries/paywalls/src/compose/grammar.ts b/libraries/paywalls/src/compose/grammar.ts
new file mode 100644
index 000000000..2c2ebb138
--- /dev/null
+++ b/libraries/paywalls/src/compose/grammar.ts
@@ -0,0 +1,87 @@
+/**
+ * The composition grammar's style/tag vocabulary.
+ *
+ * The closed `paywall-composition` package used to introspect the real mimic
+ * node schemas (`ViewNode`/`ScreenNode`/`TextNode`) to discover the legal style
+ * fields and their defaults. The OSS grammar must be mimic-free, so the
+ * vocabulary is single-sourced from the dependency-free `../schema/style-registry`
+ * (per-node ORDERED field lists with defaults, derived once from the mimic node
+ * schemas). Importing that registry keeps this module mimic/react/runtime-free.
+ * A mono-side contract test
+ * (`paywall-composition/src/vocabulary-contract.test.ts`) asserts the derived
+ * `NODE_STYLE_VOCABULARY` matches the live mimic node schemas so drift is caught
+ * at CI time.
+ */
+import { NODE_DEFAULT_NAMES, NODE_STYLE_ENTRIES } from "../schema/style-registry";
+
+/**
+ * The subset of mimic node types the composition format currently round-trips.
+ * Shape/Path/Component follow the same mechanics and are a documented next
+ * increment.
+ */
+export type CompositionNodeType = "screen" | "view" | "text";
+
+export const TAG_TO_TYPE: Record<string, CompositionNodeType> = {
+  Screen: "screen",
+  View: "view",
+  Text: "text",
+};
+
+export const TYPE_TO_TAG: Record<CompositionNodeType, string> = {
+  screen: "Screen",
+  view: "View",
+  text: "Text",
+};
+
+/**
+ * The style vocabulary of a node type: the set of legal style field names, the
+ * default value for each (values equal to a default are omitted on print), and
+ * the default display name. Encoded explicitly — mirrors the mimic node schema
+ * (see the module doc). The `styleFields` array order is the mimic schema field
+ * order and must be preserved: the printer emits attributes in this order.
+ */
+export interface NodeStyleVocabulary {
+  readonly styleFields: readonly string[];
+  readonly defaultStyle: Readonly<Record<string, unknown>>;
+  readonly defaultName: string;
+}
+
+/**
+ * Ground-truth per-node style vocabulary, derived from the shared
+ * `../schema/style-registry` per-node ordered field lists (themselves derived
+ * once from the mimic node schemas — `prim.data.schema.fields.style.fields` for
+ * the field set + order and `prim.data.decode(prim.data.encode({}))` for
+ * defaults). Kept in lockstep with mimic by the mono vocabulary contract test.
+ * A field entry with no `default` contributes to `styleFields` (fixing its
+ * printer position) but is omitted from `defaultStyle`.
+ */
+const buildVocabulary = (type: CompositionNodeType): NodeStyleVocabulary => {
+  const entries = NODE_STYLE_ENTRIES[type];
+  const defaultStyle: Record<string, unknown> = {};
+  for (const entry of entries) {
+    if ("default" in entry) {
+      defaultStyle[entry.field] = entry.default;
+    }
+  }
+  return {
+    styleFields: entries.map((entry) => entry.field),
+    defaultStyle,
+    defaultName: NODE_DEFAULT_NAMES[type],
+  };
+};
+
+export const NODE_STYLE_VOCABULARY: Record<CompositionNodeType, NodeStyleVocabulary> = {
+  screen: buildVocabulary("screen"),
+  view: buildVocabulary("view"),
+  text: buildVocabulary("text"),
+};
+
+/** The legal style field set for a node type (from {@link NODE_STYLE_VOCABULARY}). */
+export function styleFieldsOf(type: CompositionNodeType): ReadonlySet<string> {
+  return new Set(NODE_STYLE_VOCABULARY[type].styleFields);
+}
+
+/** Resolve a source attribute name to a style field, or null if not a style. */
+export function styleFieldFor(type: CompositionNodeType, attr: string): string | null {
+  return styleFieldsOf(type).has(attr) ? attr : null;
+}
diff --git a/libraries/paywalls/src/compose/index.ts b/libraries/paywalls/src/compose/index.ts
new file mode 100644
index 000000000..07bf94a6b
--- /dev/null
+++ b/libraries/paywalls/src/compose/index.ts
@@ -0,0 +1,85 @@
+/**
+ * `@voidhash/paywalls/compose` — the composition authoring surface + toolchain.
+ *
+ * Two audiences share this entry:
+ *
+ * - **Paywall authors** write `.paywall.tsx` files that
+ *   `import { paywall, Screen, View, Text, variable, product, purchase,
+ *   closePaywall, none, payload } from "@voidhash/paywalls/compose"`. Those are
+ *   the inert author surface (analyzed, never executed).
+ * - **Tooling** (the closed mimic bridge, the studio) imports the grammar
+ *   `parseComposition`, the deterministic `printComposition`, the public
+ *   {@link CompositionAST}, the registry vocabulary, and `generateComposeDts`.
+ *
+ * This entry is mimic-free: it never imports the mimic document model. The
+ * mimic snapshot↔AST lift/lower lives in the closed `paywall-composition`
+ * bridge, driven by this AST.
+ */
+
+// Author surface (inert; for author files and type-checking).
+export {
+  closePaywall,
+  none,
+  paywall,
+  payload,
+  product,
+  purchase,
+  Screen,
+  Text,
+  variable,
+  View,
+  type Action,
+  type ProductRef,
+  type VariableHandle,
+} from "./author-surface";
+
+// Public serializable AST (the OSS ↔ closed-bridge seam).
+export type {
+  CompositionAction,
+  CompositionActionBinding,
+  CompositionAST,
+  CompositionComponentNode,
+  CompositionElementNode,
+  CompositionInteraction,
+  CompositionNode,
+  CompositionProductSource,
+  CompositionPropBinding,
+  CompositionPropValue,
+  CompositionScalarSource,
+  CompositionStyleValue,
+  CompositionVariable,
+  CompositionVariableType,
+} from "./ast";
+
+// Grammar / parser / printer.
+export { CompositionError } from "./error";
+export { parseComposition, type ParseCompositionOptions } from "./parser";
+export { printComposition, type PrintCompositionOptions } from "./printer";
+export {
+  NODE_STYLE_VOCABULARY,
+  styleFieldFor,
+  styleFieldsOf,
+  TAG_TO_TYPE,
+  TYPE_TO_TAG,
+  type CompositionNodeType,
+  type NodeStyleVocabulary,
+} from "./grammar";
+
+// Component/registry vocabulary (prop/action kinds from `../schema`).
+export {
+  arrayItemKey,
+  defaultComponentTag,
+  registryByTag,
+  resolveComponentForNode,
+  scalarPropValueKey,
+  variableTypeForPropKind,
+  type CompositionActionDef,
+  type CompositionComponent,
+  type CompositionComponentManifest,
+  type CompositionPropDef,
+  type CompositionPropKind,
+  type CompositionRegistry,
+} from "./component";
+
+// Monaco `.d.ts` generation.
+export { generateComposeDts } from "./generate-dts";
diff --git a/libraries/paywalls/src/compose/parser.ts b/libraries/paywalls/src/compose/parser.ts
new file mode 100644
index 000000000..9b210c7f1
--- /dev/null
+++ b/libraries/paywalls/src/compose/parser.ts
@@ -0,0 +1,1036 @@
+import ts from "typescript";
+
+import type {
+  CompositionAction,
+  CompositionActionBinding,
+  CompositionAST,
+  CompositionComponentNode,
+  CompositionElementNode,
+  CompositionInteraction,
+  CompositionNode,
+  CompositionProductSource,
+  CompositionPropBinding,
+  CompositionPropValue,
+  CompositionScalarSource,
+  CompositionStyleValue,
+  CompositionVariable,
+  CompositionVariableType,
+} from "./ast";
+import {
+  arrayItemKey,
+  registryByTag,
+  variableTypeForPropKind,
+  type CompositionActionDef,
+  type CompositionComponent,
+  type CompositionPropDef,
+  type CompositionRegistry,
+} from "./component";
+import { CompositionError } from "./error";
+import {
+  styleFieldFor,
+  styleFieldsOf,
+  TAG_TO_TYPE,
+  type CompositionNodeType,
+} from "./grammar";
+
+/** Options for {@link parseComposition}. */
+export interface ParseCompositionOptions {
+  /** Source file name used in error positions. Defaults to `paywall.tsx`. */
+  readonly fileName?: string;
+  /** Components a `<Component>` element may reference. Absent ⇒ layout-only grammar. */
+  readonly registry?: CompositionRegistry;
+}
+
+/**
+ * Parse a `.paywall.tsx` composition source into a public {@link CompositionAST}.
+ *
+ * The source is parsed with the real TypeScript/JSX parser; a whitelist walk
+ * then lowers the closed element + expression grammar into AST nodes. Any
+ * construct outside the grammar (arbitrary calls, member access, control flow,
+ * template interpolation, …) raises a {@link CompositionError} — nothing is ever
+ * executed. Mimic-free: the mimic document lowering lives in the closed
+ * `paywall-composition` bridge, driven by this AST.
+ */
+export function parseComposition(
+  source: string,
+  options: ParseCompositionOptions = {},
+): CompositionAST {
+  const parser = new Parser(source, options.fileName ?? "paywall.tsx", options.registry);
+  return parser.parse();
+}
+
+interface VarInfo {
+  readonly name: string;
+  readonly type: CompositionVariableType;
+  /** Resolved declared default (undefined for product). */
+  readonly defaultValue?: string | number | boolean;
+}
+
+const IDENTIFIER_PATTERN = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+
+class Parser {
+  private readonly sf: ts.SourceFile;
+  private readonly varsByBinding = new Map<string, VarInfo>();
+  private readonly seenVariableNames = new Set<string>();
+  private readonly componentsByTag: Map<string, CompositionComponent>;
+
+  constructor(source: string, fileName: string, registry?: CompositionRegistry) {
+    this.sf = ts.createSourceFile(
+      fileName,
+      source,
+      ts.ScriptTarget.Latest,
+      true,
+      ts.ScriptKind.TSX,
+    );
+    this.componentsByTag = registry ? registryByTag(registry) : new Map();
+  }
+
+  parse(): CompositionAST {
+    const paywallCall = this.findPaywallCall();
+    const arrow = this.expectArrow(paywallCall);
+    const rootJsx = this.readBodyAndVariables(arrow);
+
+    const tag = this.tagName(rootJsx);
+    if (tag !== "Screen") {
+      throw this.error(rootJsx, `A paywall must return a <Screen>, got <${tag}>`);
+    }
+
+    const root = this.lowerElement(rootJsx);
+    if (root.kind !== "element") {
+      throw this.error(rootJsx, "A paywall must return a <Screen>");
+    }
+    return {
+      variables: [...this.varsByBinding.values()].map((info) => ({
+        name: info.name,
+        type: info.type,
+        ...(info.defaultValue !== undefined ? { defaultValue: info.defaultValue } : {}),
+      })),
+      root,
+    };
+  }
+
+  // ---- top-level structure ------------------------------------------------
+
+  private findPaywallCall(): ts.CallExpression {
+    for (const statement of this.sf.statements) {
+      if (ts.isExportAssignment(statement) && !statement.isExportEquals) {
+        const expr = statement.expression;
+        if (
+          ts.isCallExpression(expr) &&
+          ts.isIdentifier(expr.expression) &&
+          expr.expression.text === "paywall"
+        ) {
+          return expr;
+        }
+        throw this.error(expr, "Default export must be paywall(() => <Screen/>)");
+      }
+    }
+    throw this.error(this.sf, "Missing `export default paywall(() => …)`");
+  }
+
+  private expectArrow(call: ts.CallExpression): ts.ArrowFunction {
+    const [arg] = call.arguments;
+    if (!arg || !ts.isArrowFunction(arg) || call.arguments.length !== 1) {
+      throw this.error(call, "paywall() takes a single arrow function");
+    }
+    return arg;
+  }
+
+  private readBodyAndVariables(arrow: ts.ArrowFunction): ts.JsxElement | ts.JsxSelfClosingElement {
+    const body = arrow.body;
+    if (ts.isBlock(body)) {
+      let jsx: ts.JsxElement | ts.JsxSelfClosingElement | undefined;
+      for (const statement of body.statements) {
+        if (ts.isVariableStatement(statement)) {
+          this.readVariableStatement(statement);
+          continue;
+        }
+        if (ts.isReturnStatement(statement) && statement.expression) {
+          jsx = this.unwrapJsx(statement.expression);
+          continue;
+        }
+        throw this.error(statement, "Only variable declarations and a return are allowed here");
+      }
+      if (!jsx) {
+        throw this.error(body, "paywall body must return a <Screen>");
+      }
+      return jsx;
+    }
+    return this.unwrapJsx(body);
+  }
+
+  private readVariableStatement(statement: ts.VariableStatement): void {
+    if ((statement.declarationList.flags & ts.NodeFlags.Const) === 0) {
+      throw this.error(statement, "Variable declarations must be `const`");
+    }
+    for (const decl of statement.declarationList.declarations) {
+      if (!ts.isIdentifier(decl.name) || !decl.initializer) {
+        throw this.error(decl, "Expected `const name = variable.<type>(...)`");
+      }
+      const info = this.readVariableInitializer(decl.initializer);
+      // The variable name is its identity and, on print, its JS binding
+      // identifier — so it must be a unique, valid identifier or the round-trip
+      // breaks (duplicate ids / illegal duplicate `const`).
+      if (!IDENTIFIER_PATTERN.test(info.name)) {
+        throw this.error(decl, `Variable name "${info.name}" must be a valid identifier`);
+      }
+      if (this.seenVariableNames.has(info.name)) {
+        throw this.error(decl, `Duplicate variable name "${info.name}"`);
+      }
+      this.seenVariableNames.add(info.name);
+      this.varsByBinding.set(decl.name.text, info);
+    }
+  }
+
+  private readVariableInitializer(expr: ts.Expression): VarInfo {
+    if (
+      !ts.isCallExpression(expr) ||
+      !ts.isPropertyAccessExpression(expr.expression) ||
+      !ts.isIdentifier(expr.expression.expression) ||
+      expr.expression.expression.text !== "variable"
+    ) {
+      throw this.error(expr, 'Expected `variable.<type>("name", opts?)`');
+    }
+    const type = expr.expression.name.text;
+    if (type !== "string" && type !== "number" && type !== "boolean" && type !== "product") {
+      throw this.error(expr, `Unknown variable type "${type}"`);
+    }
+    const [nameArg, optsArg] = expr.arguments;
+    if (!nameArg || !ts.isStringLiteral(nameArg)) {
+      throw this.error(expr, "variable() requires a string name");
+    }
+    const name = nameArg.text;
+    return { name, type, defaultValue: this.readVariableDefault(type, optsArg) };
+  }
+
+  private readVariableDefault(
+    type: CompositionVariableType,
+    optsArg: ts.Expression | undefined,
+  ): string | number | boolean | undefined {
+    if (!optsArg) {
+      // `product` has no default value; the scalar types use their zero value.
+      return type === "product" ? undefined : defaultVariableValue(type);
+    }
+    if (!ts.isObjectLiteralExpression(optsArg)) {
+      throw this.error(optsArg, "variable() options must be an object literal");
+    }
+    // A product variable accepts no options — any provided `default` (or any
+    // other key) is rejected here, matching the grammar's author surface which
+    // gives `variable.product` no options parameter.
+    for (const prop of optsArg.properties) {
+      if (
+        !ts.isPropertyAssignment(prop) ||
+        !ts.isIdentifier(prop.name) ||
+        prop.name.text !== "default"
+      ) {
+        throw this.error(prop, 'Only a "default" option is supported');
+      }
+      const init = prop.initializer;
+      if (type === "string" && ts.isStringLiteral(init)) {
+        return init.text;
+      }
+      if (type === "number" && ts.isNumericLiteral(init)) {
+        return Number(init.text);
+      }
+      const bool = readBooleanLiteral(init);
+      if (type === "boolean" && bool !== undefined) {
+        return bool;
+      }
+      throw this.error(init, `Invalid default for a ${type} variable`);
+    }
+    return type === "product" ? undefined : defaultVariableValue(type);
+  }
+
+  // ---- element lowering ---------------------------------------------------
+
+  private lowerElement(el: ts.JsxElement | ts.JsxSelfClosingElement): CompositionNode {
+    const tag = this.tagName(el);
+    const type = TAG_TO_TYPE[tag];
+    if (!type) {
+      const component = this.componentsByTag.get(tag);
+      if (component) {
+        return this.lowerComponent(el, component);
+      }
+      throw this.error(el, `Unknown element <${tag}>`);
+    }
+
+    let name: string | undefined;
+    const style: Record<string, CompositionStyleValue> = {};
+    const interactions: CompositionInteraction[] = [];
+
+    for (const attr of this.attributesOf(el)) {
+      const attrName = attr.name.getText(this.sf);
+      if (attrName === "name") {
+        name = this.expectStringAttr(attr);
+        continue;
+      }
+      if (attrName === "onPress") {
+        if (type !== "view") {
+          throw this.error(attr, "onPress is only supported on <View>");
+        }
+        interactions.push({ trigger: "click", action: this.readAction(this.expectExpr(attr)) });
+        continue;
+      }
+      if (attrName === "style") {
+        this.readStyleObject(attr, type, style);
+        continue;
+      }
+      // A former FLAT style attribute is now a hard error that guides the author
+      // to the single `style={{ … }}` object; any other unknown attribute keeps
+      // the generic message.
+      if (styleFieldFor(type, attrName)) {
+        throw this.error(
+          attr,
+          `Style attributes are now written in a single style={{ … }} object — move "${attrName}" into style`,
+        );
+      }
+      throw this.error(attr, `Unknown attribute "${attrName}" on <${this.tagName2(type)}>`);
+    }
+
+    const node: CompositionElementNode = {
+      kind: "element",
+      type,
+      ...(name !== undefined ? { name } : {}),
+      style,
+      interactions,
+      ...(type === "text"
+        ? { text: this.readTextContent(el), children: [] }
+        : { children: this.lowerChildren(el) }),
+    };
+    return node;
+  }
+
+  private lowerChildren(el: ts.JsxElement | ts.JsxSelfClosingElement): CompositionNode[] {
+    const children: CompositionNode[] = [];
+    if (ts.isJsxSelfClosingElement(el)) {
+      return children;
+    }
+    for (const child of el.children) {
+      if (ts.isJsxText(child)) {
+        if (child.text.trim().length > 0) {
+          throw this.error(child, "Text must be wrapped in a <Text> element");
+        }
+        continue;
+      }
+      if (ts.isJsxExpression(child)) {
+        if (child.expression) {
+          throw this.error(child, "Expressions are not allowed as layout children");
+        }
+        continue; // {/* comment */}
+      }
+      if (ts.isJsxElement(child) || ts.isJsxSelfClosingElement(child)) {
+        children.push(this.lowerElement(child));
+        continue;
+      }
+      throw this.error(child, "Unsupported child");
+    }
+    return children;
+  }
+
+  private readTextContent(el: ts.JsxElement | ts.JsxSelfClosingElement): string {
+    if (ts.isJsxSelfClosingElement(el)) {
+      return "";
+    }
+    const parts: string[] = [];
+    for (const child of el.children) {
+      if (ts.isJsxText(child)) {
+        const trimmed = child.text.trim();
+        if (trimmed.length > 0) {
+          parts.push(trimmed);
+        }
+        continue;
+      }
+      if (ts.isJsxExpression(child)) {
+        if (!child.expression) {
+          continue; // {/* comment */}
+        }
+        // A single string-literal expression is the printer's escape hatch for
+        // text with whitespace or JSX-special characters — exact, not trimmed.
+        if (ts.isStringLiteral(child.expression)) {
+          return child.expression.text;
+        }
+        throw this.error(
+          child,
+          "Variable-bound text is not yet supported — bind through a code component instead",
+        );
+      }
+      throw this.error(child, "<Text> may only contain literal text");
+    }
+    return parts.join(" ");
+  }
+
+  // ---- code-component instances -------------------------------------------
+
+  /**
+   * Lower a `<Component …>` element to a `component` AST node. The tag resolves
+   * to a registry entry; attributes map to `props` (manifest prop names) or
+   * `actionBindings` (manifest action names); children are slot content.
+   */
+  private lowerComponent(
+    el: ts.JsxElement | ts.JsxSelfClosingElement,
+    component: CompositionComponent,
+  ): CompositionComponentNode {
+    const manifest = component.manifest;
+    let name: string | undefined;
+    const propByName = new Map<string, CompositionPropValue>();
+    const actionByName = new Map<string, CompositionAction>();
+
+    for (const attr of this.attributesOf(el)) {
+      const attrName = attr.name.getText(this.sf);
+      // `name` is the reserved instance display-name attribute — UNLESS the
+      // component declares a prop literally named "name", in which case the
+      // functional prop wins the single `name=` slot (a manifest prop named
+      // "name" is legal and must not be silently dropped).
+      if (attrName === "name" && manifest.props["name"] === undefined) {
+        name = this.expectStringAttr(attr);
+        continue;
+      }
+      const actionDef = manifest.actions?.[attrName];
+      if (actionDef) {
+        actionByName.set(attrName, this.readComponentAction(this.expectExpr(attr), actionDef));
+        continue;
+      }
+      const propDef = manifest.props[attrName];
+      if (propDef) {
+        propByName.set(attrName, this.readPropBinding(attr, propDef, attrName));
+        continue;
+      }
+      throw this.error(attr, `Unknown prop "${attrName}" on <${component.tag}>`);
+    }
+
+    // Emit props/actionBindings in MANIFEST declaration order (not source
+    // order), matching the printer. This keeps the stored order canonical so a
+    // no-op round-trip reconciles to zero commands regardless of the order the
+    // author wrote the attributes in.
+    const props: CompositionPropBinding[] = Object.keys(manifest.props)
+      .filter((propName) => propByName.has(propName))
+      .map((propName) => ({ name: propName, value: propByName.get(propName)! }));
+    const actionBindings: CompositionActionBinding[] = Object.keys(manifest.actions ?? {})
+      .filter((actionName) => actionByName.has(actionName))
+      .map((actionName) => ({ name: actionName, action: actionByName.get(actionName)! }));
+
+    const children = this.lowerChildren(el);
+    if (children.length > 0 && !manifest.slot) {
+      throw this.error(el, `<${component.tag}> does not declare a slot and cannot have children`);
+    }
+
+    return {
+      kind: "component",
+      tag: component.tag,
+      ...(name !== undefined ? { name } : {}),
+      props,
+      actionBindings,
+      children,
+    };
+  }
+
+  /** A component prop binding: a variable reference (`prop={someVar}`) or a literal. */
+  private readPropBinding(
+    attr: ts.JsxAttribute,
+    propDef: CompositionPropDef,
+    propName: string,
+  ): CompositionPropValue {
+    const init = attr.initializer;
+    if (init && ts.isJsxExpression(init) && init.expression && ts.isIdentifier(init.expression)) {
+      const variable = this.resolveVar(init.expression);
+      const expected = variableTypeForPropKind(propDef.kind);
+      if (!expected) {
+        throw this.error(
+          attr,
+          `Prop "${propName}" of kind ${propDef.kind} cannot be bound to a variable`,
+        );
+      }
+      if (variable.type !== expected) {
+        throw this.error(
+          attr,
+          `Prop "${propName}" expects a ${expected} variable but "${variable.name}" is a ${variable.type}`,
+        );
+      }
+      return { kind: "variable", variableName: variable.name };
+    }
+    return this.readPropValue(attr, propDef, propName);
+  }
+
+  private readPropValue(
+    attr: ts.JsxAttribute,
+    propDef: CompositionPropDef,
+    propName: string,
+  ): CompositionPropValue {
+    switch (propDef.kind) {
+      case "string":
+      case "select":
+      case "image": {
+        const value = this.expectStringValue(attr);
+        if (propDef.kind === "select" && propDef.options && !propDef.options.includes(value)) {
+          throw this.error(attr, `"${value}" is not a valid option for "${propName}"`);
+        }
+        return { kind: "literal-string", value };
+      }
+      case "number":
+        return { kind: "literal-number", value: this.expectNumberValue(attr) };
+      case "boolean":
+        return { kind: "literal-boolean", value: this.expectBooleanValue(attr) };
+      case "ref":
+        return {
+          kind: "literal-product",
+          productId: this.readProductLiteral(this.expectExpr(attr)),
+        };
+      case "array": {
+        const key = arrayItemKey(propDef.item?.kind);
+        if (!key || !propDef.item) {
+          throw this.error(attr, `Array prop "${propName}" has an unsupported item kind`);
+        }
+        const value = this.readArrayLiteral(attr, propDef.item.kind, propName);
+        if (key === "number-array") {
+          return { kind: "literal-number-array", value: value as number[] };
+        }
+        if (key === "boolean-array") {
+          return { kind: "literal-boolean-array", value: value as boolean[] };
+        }
+        return { kind: "literal-string-array", value: value as string[] };
+      }
+      case "component":
+        throw this.error(
+          attr,
+          `Component-valued prop "${propName}" is not supported in composition`,
+        );
+    }
+  }
+
+  /** Read an action bound to a component action (extends node actions with `none`/`payload`). */
+  private readComponentAction(
+    expr: ts.Expression,
+    actionDef: CompositionActionDef,
+  ): CompositionAction {
+    if (!ts.isCallExpression(expr)) {
+      throw this.error(
+        expr,
+        "Expected an action, e.g. purchase(...), closePaywall(), none(), or x.set(...)",
+      );
+    }
+    if (ts.isIdentifier(expr.expression)) {
+      const fn = expr.expression.text;
+      if (fn === "closePaywall") {
+        return { kind: "close-paywall" };
+      }
+      if (fn === "none") {
+        return { kind: "none" };
+      }
+      if (fn === "purchase") {
+        return {
+          kind: "purchase",
+          product: this.readComponentProductSource(this.singleArg(expr), actionDef),
+        };
+      }
+      throw this.error(expr, `Unknown action "${fn}"`);
+    }
+    if (
+      ts.isPropertyAccessExpression(expr.expression) &&
+      ts.isIdentifier(expr.expression.expression) &&
+      expr.expression.name.text === "set"
+    ) {
+      const variable = this.resolveVar(expr.expression.expression);
+      return {
+        kind: "set-variable",
+        variableName: variable.name,
+        value: this.readComponentActionValueSource(this.singleArg(expr), variable.type, actionDef),
+      };
+    }
+    throw this.error(expr, "Unsupported action expression");
+  }
+
+  private readComponentProductSource(
+    expr: ts.Expression,
+    actionDef: CompositionActionDef,
+  ): CompositionProductSource {
+    const field = this.readPayloadAccess(expr, actionDef);
+    if (field) {
+      return { kind: "payload", field };
+    }
+    if (ts.isIdentifier(expr)) {
+      const variable = this.resolveVar(expr);
+      if (variable.type !== "product") {
+        throw this.error(expr, `Variable "${variable.name}" is not a product`);
+      }
+      return { kind: "variable", variableName: variable.name };
+    }
+    return { kind: "literal", productId: this.readProductLiteral(expr) };
+  }
+
+  private readComponentActionValueSource(
+    expr: ts.Expression,
+    expectedType: CompositionVariableType,
+    actionDef: CompositionActionDef,
+  ): CompositionScalarSource {
+    const field = this.readPayloadAccess(expr, actionDef);
+    if (field) {
+      return { kind: "payload", field };
+    }
+    return this.readScalarSourceCommon(expr, expectedType);
+  }
+
+  /** Recognize `payload("field")` and validate the field against the action's payload. */
+  private readPayloadAccess(expr: ts.Expression, actionDef: CompositionActionDef): string | null {
+    if (
+      !ts.isCallExpression(expr) ||
+      !ts.isIdentifier(expr.expression) ||
+      expr.expression.text !== "payload"
+    ) {
+      return null;
+    }
+    const arg = this.singleArg(expr);
+    if (!ts.isStringLiteral(arg)) {
+      throw this.error(expr, "payload() requires a string field name");
+    }
+    if (!(arg.text in actionDef.payload)) {
+      throw this.error(expr, `Unknown payload field "${arg.text}"`);
+    }
+    return arg.text;
+  }
+
+  // ---- actions ------------------------------------------------------------
+
+  private readAction(expr: ts.Expression): CompositionAction {
+    if (!ts.isCallExpression(expr)) {
+      throw this.error(expr, "Expected an action, e.g. purchase(...), closePaywall(), or none()");
+    }
+    if (ts.isIdentifier(expr.expression)) {
+      const fn = expr.expression.text;
+      if (fn === "closePaywall") {
+        return { kind: "close-paywall" };
+      }
+      // Mirror `readComponentAction`: a designer-authored `<View onPress>` with a
+      // fresh (`{type:"none"}`) interaction lifts + prints to `onPress={none()}`,
+      // so the node-level grammar must parse `none()` back for the round trip.
+      if (fn === "none") {
+        return { kind: "none" };
+      }
+      if (fn === "purchase") {
+        return { kind: "purchase", product: this.readProductSource(this.singleArg(expr)) };
+      }
+      throw this.error(expr, `Unknown action "${fn}"`);
+    }
+    if (
+      ts.isPropertyAccessExpression(expr.expression) &&
+      ts.isIdentifier(expr.expression.expression) &&
+      expr.expression.name.text === "set"
+    ) {
+      const variable = this.resolveVar(expr.expression.expression);
+      return {
+        kind: "set-variable",
+        variableName: variable.name,
+        value: this.readActionValueSource(this.singleArg(expr), variable.type),
+      };
+    }
+    throw this.error(expr, "Unsupported action expression");
+  }
+
+  private readProductSource(expr: ts.Expression): CompositionProductSource {
+    if (ts.isIdentifier(expr)) {
+      const variable = this.resolveVar(expr);
+      if (variable.type !== "product") {
+        throw this.error(expr, `Variable "${variable.name}" is not a product`);
+      }
+      return { kind: "variable", variableName: variable.name };
+    }
+    return { kind: "literal", productId: this.readProductLiteral(expr) };
+  }
+
+  private readActionValueSource(
+    expr: ts.Expression,
+    expectedType: CompositionVariableType,
+  ): CompositionScalarSource {
+    return this.readScalarSourceCommon(expr, expectedType);
+  }
+
+  /** Shared scalar source reading for node + component set-variable actions. */
+  private readScalarSourceCommon(
+    expr: ts.Expression,
+    expectedType: CompositionVariableType,
+  ): CompositionScalarSource {
+    if (ts.isIdentifier(expr)) {
+      const variable = this.resolveVar(expr);
+      this.expectType(expr, variable.type, expectedType);
+      return { kind: "variable", variableName: variable.name };
+    }
+    if (
+      ts.isCallExpression(expr) &&
+      ts.isIdentifier(expr.expression) &&
+      expr.expression.text === "product"
+    ) {
+      this.expectType(expr, "product", expectedType);
+      return { kind: "literal-product", productId: this.readProductLiteral(expr) };
+    }
+    if (ts.isStringLiteral(expr)) {
+      this.expectType(expr, "string", expectedType);
+      return { kind: "literal-string", value: expr.text };
+    }
+    const num = readNumericLiteral(expr);
+    if (num !== undefined) {
+      this.expectType(expr, "number", expectedType);
+      return { kind: "literal-number", value: num };
+    }
+    const bool = readBooleanLiteral(expr);
+    if (bool !== undefined) {
+      this.expectType(expr, "boolean", expectedType);
+      return { kind: "literal-boolean", value: bool };
+    }
+    throw this.error(expr, "Unsupported action value");
+  }
+
+  /** Reject a set-variable value whose type doesn't match the target variable. */
+  private expectType(
+    node: ts.Node,
+    actual: CompositionVariableType,
+    expected: CompositionVariableType,
+  ): void {
+    if (actual !== expected) {
+      throw this.error(node, `Expected a ${expected} value but got ${actual}`);
+    }
+  }
+
+  private readProductLiteral(expr: ts.Expression): string {
+    if (
+      !ts.isCallExpression(expr) ||
+      !ts.isIdentifier(expr.expression) ||
+      expr.expression.text !== "product"
+    ) {
+      throw this.error(expr, 'Expected product("id")');
+    }
+    const [arg] = expr.arguments;
+    if (!arg || !ts.isStringLiteral(arg)) {
+      throw this.error(expr, "product() requires a string id");
+    }
+    return arg.text;
+  }
+
+  // ---- value readers ------------------------------------------------------
+
+  /**
+   * Read a `style={{ … }}` attribute into the node's style record. The initializer
+   * must be a JSX expression wrapping an object literal; each property's key must
+   * be a legal style field for this node type (else a did-you-mean error), and its
+   * value is read with {@link readJsonLiteral} (scalars incl. negative numbers,
+   * strings, booleans, and nested gradient/image objects/arrays). Duplicate keys,
+   * spreads, shorthands, and computed property names are hard errors. An empty
+   * object (`style={{}}`) is legal and contributes nothing.
+   */
+  private readStyleObject(
+    attr: ts.JsxAttribute,
+    type: CompositionNodeType,
+    style: Record<string, CompositionStyleValue>,
+  ): void {
+    const init = attr.initializer;
+    if (!init || !ts.isJsxExpression(init) || !init.expression) {
+      throw this.error(attr, "style expects an object literal, e.g. style={{ paddingTop: 16 }}");
+    }
+    const expr = init.expression;
+    if (!ts.isObjectLiteralExpression(expr)) {
+      throw this.error(expr, "style expects an object literal, e.g. style={{ paddingTop: 16 }}");
+    }
+    const fields = styleFieldsOf(type);
+    for (const property of expr.properties) {
+      if (!ts.isPropertyAssignment(property)) {
+        throw this.error(
+          property,
+          "Only plain key: value style properties are allowed — no shorthands, spreads, or methods",
+        );
+      }
+      const nameNode = property.name;
+      let key: string;
+      if (ts.isIdentifier(nameNode) || ts.isStringLiteral(nameNode)) {
+        key = nameNode.text;
+      } else {
+        throw this.error(nameNode, "Style keys must be plain identifiers or string literals");
+      }
+      if (!fields.has(key)) {
+        throw this.error(nameNode, this.unknownStyleKeyMessage(key, type));
+      }
+      if (Object.hasOwn(style, key)) {
+        throw this.error(nameNode, `Duplicate style key "${key}"`);
+      }
+      style[key] = this.readJsonLiteral(property.initializer);
+    }
+  }
+
+  /** An "unknown style key" message with a nearest-field did-you-mean suggestion. */
+  private unknownStyleKeyMessage(key: string, type: CompositionNodeType): string {
+    const suggestion = nearestField(key, [...styleFieldsOf(type)]);
+    const base = `Unknown style key "${key}" on <${this.tagName2(type)}>`;
+    return suggestion ? `${base} — did you mean "${suggestion}"?` : base;
+  }
+
+  /**
+   * Reads a JSON-literal expression (object/array/string/number/boolean, nested)
+   * into plain data. Rejects anything non-literal — identifiers, spreads,
+   * computed/shorthand keys, method/accessor members, function calls — with a
+   * clear error so structured style values stay serializable JSON.
+   */
+  private readJsonLiteral(expr: ts.Expression): CompositionStyleValue {
+    if (ts.isStringLiteral(expr)) {
+      return expr.text;
+    }
+    const num = readNumericLiteral(expr);
+    if (num !== undefined) {
+      return num;
+    }
+    const bool = readBooleanLiteral(expr);
+    if (bool !== undefined) {
+      return bool;
+    }
+    if (ts.isArrayLiteralExpression(expr)) {
+      return expr.elements.map((element) => {
+        if (ts.isSpreadElement(element)) {
+          throw this.error(element, "Spread elements are not allowed in a style value");
+        }
+        return this.readJsonLiteral(element);
+      });
+    }
+    if (ts.isObjectLiteralExpression(expr)) {
+      const out: Record<string, CompositionStyleValue> = {};
+      for (const property of expr.properties) {
+        if (!ts.isPropertyAssignment(property)) {
+          throw this.error(
+            property,
+            "Only plain key: value properties are allowed in a style value",
+          );
+        }
+        const nameNode = property.name;
+        let key: string;
+        if (ts.isIdentifier(nameNode)) {
+          key = nameNode.text;
+        } else if (ts.isStringLiteral(nameNode)) {
+          key = nameNode.text;
+        } else {
+          throw this.error(nameNode, "Style value keys must be plain identifiers or strings");
+        }
+        out[key] = this.readJsonLiteral(property.initializer);
+      }
+      return out;
+    }
+    throw this.error(
+      expr,
+      "Style values may only contain literal strings, numbers, booleans, objects, and arrays",
+    );
+  }
+
+  /** The expression inside a `{…}` attribute initializer, or undefined. */
+  private attrExpr(attr: ts.JsxAttribute): ts.Expression | undefined {
+    const init = attr.initializer;
+    return init && ts.isJsxExpression(init) && init.expression ? init.expression : undefined;
+  }
+
+  private expectStringValue(attr: ts.JsxAttribute): string {
+    const init = attr.initializer;
+    if (init && ts.isStringLiteral(init)) {
+      return init.text;
+    }
+    const expr = this.attrExpr(attr);
+    if (expr && ts.isStringLiteral(expr)) {
+      return expr.text;
+    }
+    throw this.error(attr, `Prop "${attr.name.getText(this.sf)}" expects a string`);
+  }
+
+  private expectNumberValue(attr: ts.JsxAttribute): number {
+    const expr = this.attrExpr(attr);
+    if (expr) {
+      const num = readNumericLiteral(expr);
+      if (num !== undefined) {
+        return num;
+      }
+    }
+    throw this.error(attr, `Prop "${attr.name.getText(this.sf)}" expects a number`);
+  }
+
+  private expectBooleanValue(attr: ts.JsxAttribute): boolean {
+    if (!attr.initializer) {
+      return true; // bare flag, e.g. featured
+    }
+    const expr = this.attrExpr(attr);
+    if (expr) {
+      const bool = readBooleanLiteral(expr);
+      if (bool !== undefined) {
+        return bool;
+      }
+    }
+    throw this.error(attr, `Prop "${attr.name.getText(this.sf)}" expects a boolean`);
+  }
+
+  private readArrayLiteral(
+    attr: ts.JsxAttribute,
+    itemKind: CompositionPropDef["kind"],
+    propName: string,
+  ): (string | number | boolean)[] {
+    const expr = this.attrExpr(attr);
+    if (!expr || !ts.isArrayLiteralExpression(expr)) {
+      throw this.error(attr, `Prop "${propName}" expects an array literal`);
+    }
+    return expr.elements.map((element) => {
+      if (itemKind === "number") {
+        const num = readNumericLiteral(element);
+        if (num !== undefined) {
+          return num;
+        }
+        throw this.error(element, `Array items in "${propName}" must be numbers`);
+      }
+      if (itemKind === "boolean") {
+        const bool = readBooleanLiteral(element);
+        if (bool !== undefined) {
+          return bool;
+        }
+        throw this.error(element, `Array items in "${propName}" must be booleans`);
+      }
+      if (ts.isStringLiteral(element)) {
+        return element.text;
+      }
+      throw this.error(element, `Array items in "${propName}" must be strings`);
+    });
+  }
+
+  private resolveVar(ident: ts.Identifier): VarInfo {
+    const info = this.varsByBinding.get(ident.text);
+    if (!info) {
+      throw this.error(ident, `Unknown variable "${ident.text}"`);
+    }
+    return info;
+  }
+
+  // ---- small helpers ------------------------------------------------------
+
+  private singleArg(call: ts.CallExpression): ts.Expression {
+    const [arg] = call.arguments;
+    if (!arg || call.arguments.length !== 1) {
+      throw this.error(call, "Expected exactly one argument");
+    }
+    return arg;
+  }
+
+  private expectExpr(attr: ts.JsxAttribute): ts.Expression {
+    if (
+      !attr.initializer ||
+      !ts.isJsxExpression(attr.initializer) ||
+      !attr.initializer.expression
+    ) {
+      throw this.error(attr, `Attribute "${attr.name.getText(this.sf)}" expects an expression`);
+    }
+    return attr.initializer.expression;
+  }
+
+  private expectStringAttr(attr: ts.JsxAttribute): string {
+    if (attr.initializer && ts.isStringLiteral(attr.initializer)) {
+      return attr.initializer.text;
+    }
+    throw this.error(attr, `Attribute "${attr.name.getText(this.sf)}" expects a string`);
+  }
+
+  private tagName(el: ts.JsxElement | ts.JsxSelfClosingElement): string {
+    const tagNode = ts.isJsxElement(el) ? el.openingElement.tagName : el.tagName;
+    return tagNode.getText(this.sf);
+  }
+
+  private tagName2(type: CompositionNodeType): string {
+    return type.charAt(0).toUpperCase() + type.slice(1);
+  }
+
+  private attributesOf(el: ts.JsxElement | ts.JsxSelfClosingElement): ts.JsxAttribute[] {
+    const attrs = ts.isJsxElement(el) ? el.openingElement.attributes : el.attributes;
+    return attrs.properties.map((prop) => {
+      if (!ts.isJsxAttribute(prop)) {
+        throw this.error(prop, "Spread attributes are not allowed");
+      }
+      return prop;
+    });
+  }
+
+  private unwrapJsx(expr: ts.Expression): ts.JsxElement | ts.JsxSelfClosingElement {
+    let current = expr;
+    while (ts.isParenthesizedExpression(current)) {
+      current = current.expression;
+    }
+    if (ts.isJsxElement(current) || ts.isJsxSelfClosingElement(current)) {
+      return current;
+    }
+    throw this.error(expr, "Expected a JSX element");
+  }
+
+  private error(node: ts.Node, message: string): CompositionError {
+    const pos = this.sf.getLineAndCharacterOfPosition(node.getStart(this.sf));
+    return new CompositionError(message, pos.line, pos.character);
+  }
+}
+
+/**
+ * The nearest field name to `key` by Levenshtein edit distance, for a
+ * did-you-mean suggestion. Returns the closest candidate only when the distance
+ * is small relative to the key length (a distant typo gets no suggestion).
+ */
+function nearestField(key: string, candidates: readonly string[]): string | undefined {
+  let best: string | undefined;
+  let bestDistance = Infinity;
+  for (const candidate of candidates) {
+    const distance = editDistance(key, candidate);
+    if (distance < bestDistance) {
+      bestDistance = distance;
+      best = candidate;
+    }
+  }
+  // Only suggest when the edit distance is at most a third of the key length
+  // (rounded up, minimum 2) — enough to catch a transposition or a dropped/extra
+  // character, but not to guess wildly for an unrelated word.
+  const threshold = Math.max(2, Math.ceil(key.length / 3));
+  return best !== undefined && bestDistance <= threshold ? best : undefined;
+}
+
+/** Iterative Levenshtein edit distance between two strings. */
+function editDistance(a: string, b: string): number {
+  const rows = a.length + 1;
+  const cols = b.length + 1;
+  let prev = Array.from({ length: cols }, (_, index) => index);
+  for (let i = 1; i < rows; i += 1) {
+    const current = [i, ...new Array<number>(cols - 1).fill(0)];
+    for (let j = 1; j < cols; j += 1) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      current[j] = Math.min(prev[j]! + 1, current[j - 1]! + 1, prev[j - 1]! + cost);
+    }
+    prev = current;
+  }
+  return prev[cols - 1]!;
+}
+
+function readBooleanLiteral(expr: ts.Expression): boolean | undefined {
+  if (expr.kind === ts.SyntaxKind.TrueKeyword) {
+    return true;
+  }
+  if (expr.kind === ts.SyntaxKind.FalseKeyword) {
+    return false;
+  }
+  return undefined;
+}
+
+/** A numeric literal, including a negated one (`-4` parses as unary minus). */
+function readNumericLiteral(expr: ts.Expression): number | undefined {
+  if (ts.isNumericLiteral(expr)) {
+    return Number(expr.text);
+  }
+  if (ts.isPrefixUnaryExpression(expr) && ts.isNumericLiteral(expr.operand)) {
+    if (expr.operator === ts.SyntaxKind.MinusToken) {
+      return -Number(expr.operand.text);
+    }
+    if (expr.operator === ts.SyntaxKind.PlusToken) {
+      return Number(expr.operand.text);
+    }
+  }
+  return undefined;
+}
+
+function defaultVariableValue(type: "string" | "number" | "boolean"): string | number | boolean {
+  switch (type) {
+    case "string":
+      return "";
+    case "number":
+      return 0;
+    case "boolean":
+      return false;
+  }
+}
diff --git a/libraries/paywalls/src/compose/printer.ts b/libraries/paywalls/src/compose/printer.ts
new file mode 100644
index 000000000..e17ac2c61
--- /dev/null
+++ b/libraries/paywalls/src/compose/printer.ts
@@ -0,0 +1,433 @@
+import type {
+  CompositionAction,
+  CompositionActionBinding,
+  CompositionAST,
+  CompositionComponentNode,
+  CompositionElementNode,
+  CompositionInteraction,
+  CompositionNode,
+  CompositionProductSource,
+  CompositionPropBinding,
+  CompositionScalarSource,
+  CompositionStyleValue,
+  CompositionVariable,
+} from "./ast";
+import type { CompositionComponent, CompositionRegistry } from "./component";
+import { NODE_STYLE_VOCABULARY, TYPE_TO_TAG, type CompositionNodeType } from "./grammar";
+
+/** Options for {@link printComposition}. */
+export interface PrintCompositionOptions {
+  /** Components referenced by `component` nodes. Required to print such nodes. */
+  readonly registry?: CompositionRegistry;
+}
+
+/**
+ * Serialize a {@link CompositionAST} back into deterministic `.paywall.tsx`
+ * source.
+ *
+ * Deterministic: style keys are emitted in schema field order, values equal to
+ * the schema default are omitted, and identifiers are derived from stable
+ * variable names — so parsing the printed source reconstructs an equivalent AST
+ * and a no-op round-trip reconciles to zero commands.
+ */
+export function printComposition(ast: CompositionAST, options?: PrintCompositionOptions): string {
+  const printer = new Printer(options?.registry);
+
+  // Identifiers are disambiguated so two variable names that sanitize to the
+  // same JS identifier never emit a duplicate `const` (parser-authored names
+  // are already unique + valid, so this is a no-op for them).
+  const usedIdents = new Set<string>();
+  const variables: VarBinding[] = ast.variables.map((v) => {
+    const base = identifierFor(v.name);
+    let ident = base;
+    for (let n = 2; usedIdents.has(ident); n += 1) {
+      ident = `${base}_${n}`;
+    }
+    usedIdents.add(ident);
+    return { ident, variable: v };
+  });
+  printer.registerVariables(variables);
+
+  const screenJsx = printer.element(ast.root, 4);
+  const varLines = variables.map((v) => `  ${printer.variableDeclaration(v)}`);
+
+  const body = [...varLines, "", "  return (", screenJsx, "  );"].join("\n");
+
+  return [printer.imports(), "", "export default paywall(() => {", body, "});", ""].join("\n");
+}
+
+interface VarBinding {
+  readonly ident: string;
+  readonly variable: CompositionVariable;
+}
+
+class Printer {
+  private readonly identByName = new Map<string, string>();
+  private readonly usedTags = new Set<string>();
+  private readonly usedHelpers = new Set<string>();
+  private readonly registry?: CompositionRegistry;
+
+  constructor(registry?: CompositionRegistry) {
+    this.registry = registry;
+  }
+
+  registerVariables(vars: readonly VarBinding[]): void {
+    for (const v of vars) {
+      this.identByName.set(v.variable.name, v.ident);
+      this.usedHelpers.add("variable");
+    }
+  }
+
+  imports(): string {
+    const names = ["paywall", ...[...this.usedHelpers].sort(), ...[...this.usedTags].sort()];
+    return `import { ${names.join(", ")} } from "@voidhash/paywalls/compose";`;
+  }
+
+  variableDeclaration(v: VarBinding): string {
+    const opts = this.variableOptions(v.variable);
+    return `const ${v.ident} = variable.${v.variable.type}(${JSON.stringify(v.variable.name)}${opts});`;
+  }
+
+  private variableOptions(v: CompositionVariable): string {
+    if (v.type === "product") {
+      return "";
+    }
+    const value = v.defaultValue;
+    const isDefault =
+      (v.type === "string" && value === "") ||
+      (v.type === "number" && value === 0) ||
+      (v.type === "boolean" && value === false);
+    return isDefault ? "" : `, { default: ${JSON.stringify(value)} }`;
+  }
+
+  element(node: CompositionNode, indentCols: number): string {
+    if (node.kind === "component") {
+      return this.componentElement(node, indentCols);
+    }
+    const type = node.type;
+    // Guard against ASTs built outside the parser/lifter: an unknown type would
+    // otherwise surface as an opaque TypeError on the vocabulary lookup below.
+    if (!Object.hasOwn(NODE_STYLE_VOCABULARY, type)) {
+      throw new Error(
+        `Cannot print a "${type}" node: the composition grammar only represents ` +
+          `${Object.keys(NODE_STYLE_VOCABULARY).join("/")} nodes`,
+      );
+    }
+    const tag = TYPE_TO_TAG[type];
+    this.usedTags.add(tag);
+
+    const attrs = this.attributes(node, type);
+    const pad = " ".repeat(indentCols);
+
+    if (type === "text") {
+      const text = node.text ?? "";
+      const open = attrs.length > 0 ? `<${tag} ${attrs.join(" ")}>` : `<${tag}>`;
+      return `${pad}${open}${renderTextChild(text)}</${tag}>`;
+    }
+
+    const children = node.children.map((child) => this.element(child, indentCols + 2));
+    if (children.length === 0) {
+      const inner = attrs.length > 0 ? `<${tag} ${attrs.join(" ")} />` : `<${tag} />`;
+      return `${pad}${inner}`;
+    }
+    const open = attrs.length > 0 ? `<${tag} ${attrs.join(" ")}>` : `<${tag}>`;
+    return [`${pad}${open}`, ...children, `${pad}</${tag}>`].join("\n");
+  }
+
+  private attributes(node: CompositionElementNode, type: CompositionNodeType): string[] {
+    const attrs: string[] = [];
+    const meta = NODE_STYLE_VOCABULARY[type];
+
+    if (node.name !== undefined && node.name !== meta.defaultName) {
+      attrs.push(formatStringAttr("name", node.name));
+    }
+
+    const styleAttr = this.styleAttribute(node.style, type);
+    if (styleAttr) {
+      attrs.push(styleAttr);
+    }
+
+    if (type === "view") {
+      const onPress = this.onPress(node.interactions);
+      if (onPress) {
+        attrs.push(onPress);
+      }
+    }
+    return attrs;
+  }
+
+  /**
+   * The single `style={{ … }}` attribute for a node, or null when no non-default
+   * field survives (so an all-default element prints no style attribute at all).
+   * Fields are emitted in registry `styleFields` order; a field equal to its
+   * schema default is omitted. The object body is single-line, produced by
+   * {@link formatStyleExpr}.
+   */
+  private styleAttribute(
+    style: Readonly<Record<string, CompositionStyleValue>>,
+    type: CompositionNodeType,
+  ): string | null {
+    const meta = NODE_STYLE_VOCABULARY[type];
+    const entries: [string, CompositionStyleValue][] = [];
+
+    for (const field of meta.styleFields) {
+      if (!(field in style)) {
+        continue;
+      }
+      const value = style[field];
+      if (value === undefined) {
+        continue;
+      }
+      if (field in meta.defaultStyle && deepEqual(value, meta.defaultStyle[field])) {
+        continue;
+      }
+      entries.push([field, value]);
+    }
+
+    if (entries.length === 0) {
+      return null;
+    }
+    const body = entries.map(([key, value]) => `${styleKey(key)}: ${formatStyleExpr(value)}`).join(", ");
+    return `style={{ ${body} }}`;
+  }
+
+  private onPress(interactions: readonly CompositionInteraction[]): string | null {
+    const click = interactions.find((i) => i.trigger === "click");
+    if (!click) {
+      return null;
+    }
+    const expr = this.actionExpr(click.action);
+    return expr ? `onPress={${expr}}` : null;
+  }
+
+  private actionExpr(action: CompositionAction): string | null {
+    switch (action.kind) {
+      case "close-paywall":
+        this.usedHelpers.add("closePaywall");
+        return "closePaywall()";
+      case "none":
+        this.usedHelpers.add("none");
+        return "none()";
+      case "purchase":
+        this.usedHelpers.add("purchase");
+        return `purchase(${this.productSource(action.product)})`;
+      case "set-variable": {
+        const ident = this.identByName.get(action.variableName) ?? action.variableName;
+        return `${ident}.set(${this.actionValueSource(action.value)})`;
+      }
+    }
+  }
+
+  private productSource(source: CompositionProductSource): string {
+    if (source.kind === "variable") {
+      return this.identByName.get(source.variableName) ?? source.variableName;
+    }
+    if (source.kind === "payload") {
+      this.usedHelpers.add("payload");
+      return `payload(${JSON.stringify(source.field)})`;
+    }
+    this.usedHelpers.add("product");
+    return `product(${JSON.stringify(source.productId)})`;
+  }
+
+  private actionValueSource(source: CompositionScalarSource): string {
+    if (source.kind === "variable") {
+      return this.identByName.get(source.variableName) ?? source.variableName;
+    }
+    if (source.kind === "payload") {
+      this.usedHelpers.add("payload");
+      return `payload(${JSON.stringify(source.field)})`;
+    }
+    if (source.kind === "literal-product") {
+      this.usedHelpers.add("product");
+      // A parser-authored product literal always carries a productId. An ABSENT
+      // productId ("no product selected") only arises in a designer-authored
+      // document; it collapses to product("") here and round-trips faithfully
+      // only once designer-doc fidelity lands (Phase 2 voidhash.lock).
+      return `product(${JSON.stringify(source.productId)})`;
+    }
+    return JSON.stringify(source.value);
+  }
+
+  // ---- code-component instances -------------------------------------------
+
+  private componentElement(node: CompositionComponentNode, indentCols: number): string {
+    // The AST carries the referenced tag directly, which is the authoritative
+    // registry key on print — resolve by tag against the registry.
+    const resolved = this.registry?.components.find((c) => c.tag === node.tag);
+    if (!resolved) {
+      throw new Error(`Cannot print a component instance: no registry entry for tag "${node.tag}"`);
+    }
+    this.usedTags.add(resolved.tag);
+    const tag = resolved.tag;
+    const attrs = this.componentAttributes(node, resolved);
+    const pad = " ".repeat(indentCols);
+
+    const children = node.children.map((child) => this.element(child, indentCols + 2));
+    if (children.length === 0) {
+      const inner = attrs.length > 0 ? `<${tag} ${attrs.join(" ")} />` : `<${tag} />`;
+      return `${pad}${inner}`;
+    }
+    const open = attrs.length > 0 ? `<${tag} ${attrs.join(" ")}>` : `<${tag}>`;
+    return [`${pad}${open}`, ...children, `${pad}</${tag}>`].join("\n");
+  }
+
+  private componentAttributes(
+    node: CompositionComponentNode,
+    component: CompositionComponent,
+  ): string[] {
+    const attrs: string[] = [];
+
+    // Skip the reserved display-name attribute when the component declares a
+    // prop literally named "name" (that prop owns the `name=` attribute instead).
+    if (
+      component.manifest.props["name"] === undefined &&
+      node.name !== undefined &&
+      node.name !== "Component"
+    ) {
+      attrs.push(formatStringAttr("name", node.name));
+    }
+
+    // Props in manifest order (deterministic; unknown/stale props are dropped).
+    const propByName = new Map<string, CompositionPropBinding["value"]>();
+    for (const binding of node.props) {
+      propByName.set(binding.name, binding.value);
+    }
+    for (const propName of Object.keys(component.manifest.props)) {
+      const binding = propByName.get(propName);
+      if (binding !== undefined) {
+        const printed = this.propAttr(propName, binding);
+        if (printed) {
+          attrs.push(printed);
+        }
+      }
+    }
+
+    // Action bindings in manifest order.
+    const actionByName = new Map<string, CompositionActionBinding["action"]>();
+    for (const binding of node.actionBindings) {
+      actionByName.set(binding.name, binding.action);
+    }
+    for (const actionName of Object.keys(component.manifest.actions ?? {})) {
+      const action = actionByName.get(actionName);
+      if (action !== undefined) {
+        const expr = this.actionExpr(action);
+        if (expr) {
+          attrs.push(`${actionName}={${expr}}`);
+        }
+      }
+    }
+    return attrs;
+  }
+
+  private propAttr(propName: string, binding: CompositionPropBinding["value"]): string | null {
+    switch (binding.kind) {
+      case "variable": {
+        const ident = this.identByName.get(binding.variableName) ?? binding.variableName;
+        return `${propName}={${ident}}`;
+      }
+      case "literal-string":
+        return formatStringAttr(propName, binding.value);
+      case "literal-number":
+        return `${propName}={${binding.value}}`;
+      case "literal-boolean":
+        return binding.value ? propName : `${propName}={false}`;
+      case "literal-product":
+        this.usedHelpers.add("product");
+        return `${propName}={product(${JSON.stringify(binding.productId)})}`;
+      case "literal-string-array":
+      case "literal-number-array":
+      case "literal-boolean-array":
+        return `${propName}={${JSON.stringify(binding.value)}}`;
+    }
+  }
+}
+
+/**
+ * Format a string as a JSX attribute value. A plain string with no JSX-special
+ * characters uses the readable `="…"` form; anything else — including chars that
+ * `JSON.stringify` escapes but a double-quoted JSX attribute does NOT un-escape
+ * (quote, backslash, tab, CR, newline) — goes through a `{"…"}` expression the
+ * parser reads back byte-for-byte. A raw `="…"` there would corrupt the value.
+ */
+function formatStringAttr(name: string, value: string): string {
+  const needsExpression = /["\\<>{}\n\r\t]/.test(value);
+  return needsExpression
+    ? `${name}={${JSON.stringify(value)}}`
+    : `${name}=${JSON.stringify(value)}`;
+}
+
+/** A style object key: a bare identifier, or a quoted string for a non-identifier (defensive). */
+function styleKey(key: string): string {
+  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);
+}
+
+/**
+ * Formats a JSON-ish structured style value as a JSX expression. Object keys are
+ * emitted in insertion order (the printer only ever prints values whose key
+ * order matches the canonical field order of the type), mirroring the readable
+ * `{ key: value, … }` / `[a, b]` forms authors write by hand.
+ */
+function formatStyleExpr(value: CompositionStyleValue): string {
+  if (typeof value === "string") {
+    return JSON.stringify(value);
+  }
+  if (typeof value === "number" || typeof value === "boolean") {
+    return String(value);
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map((item) => formatStyleExpr(item)).join(", ")}]`;
+  }
+  const entries = Object.entries(value as Record<string, CompositionStyleValue>);
+  if (entries.length === 0) {
+    return "{}";
+  }
+  const body = entries.map(([key, item]) => `${styleKey(key)}: ${formatStyleExpr(item)}`).join(", ");
+  return `{ ${body} }`;
+}
+
+/** Structural deep-equality for JSON-ish style values (scalars, arrays, objects). */
+function deepEqual(a: unknown, b: unknown): boolean {
+  if (a === b) {
+    return true;
+  }
+  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) {
+    return false;
+  }
+  if (Array.isArray(a) || Array.isArray(b)) {
+    if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length) {
+      return false;
+    }
+    return a.every((item, index) => deepEqual(item, b[index]));
+  }
+  const aKeys = Object.keys(a as Record<string, unknown>);
+  const bKeys = Object.keys(b as Record<string, unknown>);
+  if (aKeys.length !== bKeys.length) {
+    return false;
+  }
+  return aKeys.every(
+    (key) =>
+      Object.hasOwn(b as Record<string, unknown>, key) &&
+      deepEqual((a as Record<string, unknown>)[key], (b as Record<string, unknown>)[key]),
+  );
+}
+
+/**
+ * Renders text as a JSX child. Plain, already-trimmed text with no JSX-special
+ * characters is emitted verbatim; anything else (braces / angle brackets /
+ * newlines, or significant leading/trailing whitespace, or empty) goes through a
+ * string-literal expression the parser reads back byte-for-byte.
+ */
+function renderTextChild(text: string): string {
+  const needsExpression = /[{}<>\n]/.test(text) || text.trim() !== text || text.length === 0;
+  return needsExpression ? `{${JSON.stringify(text)}}` : text;
+}
+
+/** A valid JS identifier from a variable name, or a deterministic sanitization. */
+function identifierFor(name: string): string {
+  if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name)) {
+    return name;
+  }
+  const cleaned = name.replace(/[^A-Za-z0-9_$]/g, "_");
+  return /^[A-Za-z_$]/.test(cleaned) ? cleaned : `_${cleaned}`;
+}
diff --git a/libraries/paywalls/src/compose/style-attr-types.ts b/libraries/paywalls/src/compose/style-attr-types.ts
new file mode 100644
index 000000000..17cdfb5d6
--- /dev/null
+++ b/libraries/paywalls/src/compose/style-attr-types.ts
@@ -0,0 +1,71 @@
+/**
+ * Precise static prop types for the compose author surface's built-in tags.
+ *
+ * These are TYPE-ONLY: every import erases, so this module adds nothing to the
+ * compose runtime graph (which must stay react/mimic-free). The per-node style
+ * fields are authored inside a single `style={{ … }}` object (converging with the
+ * code-component authoring look) and are derived from the shared
+ * `../schema/style-registry` value-type descriptors, so a typo'd style key or a
+ * wrong-typed value on `<Screen>`/`<View>`/`<Text>` errors at type-check time
+ * (Monaco + real tsc), not only at parse/encode time. Non-style attributes
+ * (`name`, `onPress`, children) are siblings of `style`, from the PARSER's
+ * accepted surface, not the style registry:
+ *
+ * - `name` — an optional display-name string on every node (parser: any node).
+ * - `onPress` — a bound {@link Action}, `<View>` only (parser rejects it on
+ *   Screen/Text).
+ * - children — layout nodes take element children; `<Text>` takes a literal
+ *   string (its content is JSX text).
+ */
+import type {
+  NODE_STYLE_ENTRIES,
+  StyleFieldName,
+  StyleFieldValue,
+} from "../schema/style-registry";
+import type { Action } from "./author-surface";
+
+/** The composition node the caller of {@link NodeStyleProps} is typing. */
+type NodeKind = keyof typeof NODE_STYLE_ENTRIES;
+
+/** The union of style field names a node type's entry list carries. */
+type NodeStyleFieldName<K extends NodeKind> = (typeof NODE_STYLE_ENTRIES)[K][number]["field"] &
+  StyleFieldName;
+
+/**
+ * The style fields accepted by a node type inside its `style={{ … }}` object: one
+ * optional key per registry field, typed by that field's descriptor. All optional
+ * — every style field has a schema default, so omitting it is legal.
+ */
+export type NodeStyleProps<K extends NodeKind> = {
+  readonly [F in NodeStyleFieldName<K>]?: StyleFieldValue<F>;
+};
+
+/** A layout child of `<Screen>`/`<View>`: another built-in or component node. */
+type LayoutChild = unknown;
+
+/**
+ * `<Screen>` props: a single `style` object + optional name + element children.
+ * Style fields are authored inside `style={{ … }}`, converging with the
+ * code-component authoring look.
+ */
+export type ScreenProps = {
+  readonly style?: NodeStyleProps<"screen">;
+  readonly name?: string;
+  readonly children?: LayoutChild | readonly LayoutChild[];
+};
+
+/** `<View>` props: a `style` object + optional name + `onPress` action + element children. */
+export type ViewProps = {
+  readonly style?: NodeStyleProps<"view">;
+  readonly name?: string;
+  /** A node interaction bound to press/click. `<View>` only. */
+  readonly onPress?: Action;
+  readonly children?: LayoutChild | readonly LayoutChild[];
+};
+
+/** `<Text>` props: a `style` object + optional name + a literal string child (its content). */
+export type TextProps = {
+  readonly style?: NodeStyleProps<"text">;
+  readonly name?: string;
+  readonly children?: string;
+};
diff --git a/libraries/paywalls/src/index.ts b/libraries/paywalls/src/index.ts
index bb944c80f..17782fea7 100644
--- a/libraries/paywalls/src/index.ts
+++ b/libraries/paywalls/src/index.ts
@@ -32,12 +32,14 @@ export {
 } from "./authoring/create-paywall";
 export {
   type ComponentDefinition,
+  type ComponentPanel,
   type ComponentPreviewState,
   type ComponentRenderContext,
   type DefineComponentInput,
   defineComponent,
   type InferComponentProps,
   isComponentDefinition,
+  type PanelPropsFor,
   type PaywallComponent,
   type PaywallComponentMeta,
 } from "./authoring/define-component";
@@ -163,9 +165,59 @@ export {
   type PaywallTextNode,
   type PaywallViewNode,
 } from "./schema/node-tree";
+export {
+  type ActionEditorFieldNode,
+  type AlignmentGridNode,
+  type ButtonNode,
+  type CalloutNode,
+  type ColorFieldNode,
+  type ColorPickerNode,
+  type ColumnNode,
+  type DefaultPropsNode,
+  type DimensionFieldNode,
+  type FieldNode,
+  type FillFieldNode,
+  type GradientStopsNode,
+  type IconName,
+  type ImageFieldNode,
+  type MenuNode,
+  PANEL_CAPS,
+  PANEL_ICON_NAME_LIST,
+  PANEL_NODE_SPECS,
+  PANEL_TREE_VERSION,
+  type PanelJsonValue,
+  type PanelNode,
+  type PanelNodeBase,
+  type PanelNodeSpec,
+  type PanelNodeType,
+  type PanelRootNode,
+  type PanelTree,
+  type PopoverContentNode,
+  type PopoverNode,
+  type PopoverTriggerNode,
+  type PropFieldNode,
+  type ResetAffordanceNode,
+  type RowNode,
+  type SectionActionsNode,
+  type SectionNode,
+  type SelectFieldNode,
+  type SliderFieldNode,
+  type SubsectionNode,
+  type SwatchNode,
+  type SwitchFieldNode,
+  type TextFieldNode,
+  type TextNode,
+  type ToggleGroupNode,
+  type VariableFieldNode,
+} from "./schema/panel-tree";
+export {
+  PANEL_ICON_NAMES,
+  type ParsePanelResult,
+  parsePanelTree,
+} from "./schema/validate-panel";
 // ── Schema (shared wire types) ───────────────────────────────────────────────
 export {
-  PAYWALL_STYLE_KEYS,
+  PAYWALL_STYLE_KEY_LIST,
   type PaywallAlignItems,
   type PaywallAlignSelf,
   type PaywallDimension,
@@ -175,5 +227,20 @@ export {
   type PaywallStyle,
   type StyleProp,
 } from "./schema/style";
+export {
+  countSlotNodes,
+  PAYWALL_STYLE_KEYS,
+  type ParseResult,
+  parseComponentManifest,
+  parsePreviewTree,
+  PREVIEW_STATE_PATTERN,
+} from "./schema/validate";
 // ── Style ────────────────────────────────────────────────────────────────────
 export { flattenStyle, resolveStyle } from "./style/resolve";
+/**
+ * React hooks re-exported so authored paywall code needs only
+ * `@voidhash/paywalls` imports — never a direct `react` import. They ARE
+ * React's own hooks (paywall components are real React); this re-export keeps
+ * a single, stable author-facing import surface.
+ */
+export { useCallback, useEffect, useMemo, useRef, useState } from "react";
diff --git a/libraries/paywalls/src/internal/action-brand.ts b/libraries/paywalls/src/internal/action-brand.ts
index 34c277e60..1eb181ed0 100644
--- a/libraries/paywalls/src/internal/action-brand.ts
+++ b/libraries/paywalls/src/internal/action-brand.ts
@@ -31,3 +31,47 @@ export const getActionName = (callback: unknown): string | undefined => {
   }
   return (callback as BrandedCallback)[ACTION_NAME_BRAND];
 };
+
+// ── Inline-handler action capture ──────────────────────────────────────────
+//
+// A direct binding (`onPress={actions.onSelect}`) carries the brand, but the
+// idiomatic inline handler (`onPress={() => actions.onSelect({ … })}`) is a
+// fresh arrow that does not. To record which action such a handler fires, the
+// preview tree host invokes it once inside `withActionRecording`: the first
+// branded action callback that runs reports its name here. This runs ONLY in
+// the preview-tree renderer (never on a real device), and the branded
+// callbacks are side-effect-free in preview (no consumer handler is attached).
+
+let activeRecorder: { name: string | undefined } | null = null;
+
+/**
+ * Notifies the active recorder (if any) that a branded action callback with
+ * `actionName` was invoked. Called by the branded callbacks in
+ * `buildActionCallbacks`. Records only the first name so the outermost action
+ * an inline handler fires wins.
+ */
+export const recordActionInvocation = (actionName: string): void => {
+  if (activeRecorder !== null && activeRecorder.name === undefined) {
+    activeRecorder.name = actionName;
+  }
+};
+
+/**
+ * Invokes `handler` once with a recording scope active and returns the name of
+ * the first branded action it fired, or `undefined`. Nesting is supported (the
+ * previous recorder is restored). Handler exceptions are swallowed — a preview
+ * probe must never fail the render.
+ */
+export const captureInlineActionName = (handler: () => void): string | undefined => {
+  const previous = activeRecorder;
+  const recorder: { name: string | undefined } = { name: undefined };
+  activeRecorder = recorder;
+  try {
+    handler();
+  } catch {
+    // A probing invocation's side effects/failures are irrelevant to the tree.
+  } finally {
+    activeRecorder = previous;
+  }
+  return recorder.name;
+};
diff --git a/libraries/paywalls/src/jsx-dev-runtime.ts b/libraries/paywalls/src/jsx-dev-runtime.ts
new file mode 100644
index 000000000..cb12921af
--- /dev/null
+++ b/libraries/paywalls/src/jsx-dev-runtime.ts
@@ -0,0 +1,7 @@
+/**
+ * `@voidhash/paywalls/jsx-dev-runtime` — the development counterpart of
+ * `./jsx-runtime`, re-exporting React's dev JSX runtime so tooling that emits
+ * `jsxDEV` calls (dev builds under `jsxImportSource: "@voidhash/paywalls"`)
+ * resolves correctly.
+ */
+export { Fragment, jsxDEV } from "react/jsx-dev-runtime";
diff --git a/libraries/paywalls/src/jsx-runtime.ts b/libraries/paywalls/src/jsx-runtime.ts
new file mode 100644
index 000000000..80f805dfb
--- /dev/null
+++ b/libraries/paywalls/src/jsx-runtime.ts
@@ -0,0 +1,8 @@
+/**
+ * `@voidhash/paywalls/jsx-runtime` — re-exports React's automatic JSX runtime
+ * so `jsxImportSource: "@voidhash/paywalls"` resolves everywhere (studio
+ * sandbox, CLI, user projects). Paywall primitives are plain React components,
+ * so the runtime is React's own — this entry only spares author toolchains a
+ * separate `react` mapping.
+ */
+export { Fragment, jsx, jsxs } from "react/jsx-runtime";
diff --git a/libraries/paywalls/src/panel.ts b/libraries/paywalls/src/panel.ts
deleted file mode 100644
index 5e4438af6..000000000
--- a/libraries/paywalls/src/panel.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-/**
- * `@voidhash/paywalls/panel` — data-only editor panel primitives.
- *
- * Phase 1 stub: a `defineComponent({ panel: <Panel>…</Panel> })` declaration
- * is accepted and carried on the definition, but no panel behaviour is emitted
- * yet. The elements are inert (they render `null`) — a later phase compiles
- * them to a JSON panel specification, so no author JS ever runs in the editor.
- */
-import type { ReactNode } from "react";
-
-export interface PanelProps {
-  children?: ReactNode;
-}
-
-export interface PanelSectionProps {
-  title?: string;
-  children?: ReactNode;
-}
-
-export interface PanelFieldProps {
-  /** The declared prop this field edits. */
-  name: string;
-  label?: string;
-  children?: ReactNode;
-}
-
-const PanelRoot = (_props: PanelProps): ReactNode => null;
-PanelRoot.displayName = "Panel";
-
-const PanelSection = (_props: PanelSectionProps): ReactNode => null;
-PanelSection.displayName = "Panel.Section";
-
-const PanelField = (_props: PanelFieldProps): ReactNode => null;
-PanelField.displayName = "Panel.Field";
-
-/**
- * Root of a component's custom editor panel. Compose with `Panel.Section` and
- * `Panel.Field`; the structure is data-only and renders nothing at runtime.
- */
-export const Panel = Object.assign(PanelRoot, {
-  Field: PanelField,
-  Section: PanelSection,
-});
diff --git a/libraries/paywalls/src/panel/context.ts b/libraries/paywalls/src/panel/context.ts
new file mode 100644
index 000000000..f3711db4f
--- /dev/null
+++ b/libraries/paywalls/src/panel/context.ts
@@ -0,0 +1,106 @@
+/**
+ * The `PanelContext` an editor-panel definition receives — the author-facing
+ * read/write surface over the component's currently-selected props, the
+ * selection, and the injected host data.
+ *
+ * A panel definition is a pure function `(ctx) => ReactNode`: it reads
+ * `ctx.props.<name>.value` to render controls and calls `ctx.props.<name>.set`
+ * / `.reset` / `.cancel` from event handlers. Those calls never mutate host
+ * state directly — they emit serializable {@link PanelIntent}s the host
+ * reduces. The context is rebuilt from a fresh {@link PanelSessionInputs}
+ * snapshot on every host update, so `value`/`mixed`/`bound` always reflect the
+ * host's current truth.
+ */
+import type { PaywallProduct, PaywallVariables } from "../runtime/config";
+import type { PropKind } from "../authoring/props";
+
+/** How a `set` write should be treated by the host's undo/gesture model. */
+export type PanelGesture = "live" | "commit";
+
+/** Options accepted by a {@link PanelPropHandle} `set`. */
+export interface PanelSetOptions {
+  /**
+   * `"live"` — a transient value during a drag (no undo entry); `"commit"` —
+   * the final value on release (pushes one undo entry). Defaults to
+   * `"commit"`.
+   */
+  readonly gesture?: PanelGesture;
+}
+
+/**
+ * The read/write handle for a single declared prop. `value` is the host's
+ * current value (resolved to the bound variable's value when `bound`), `mixed`
+ * is true across a multi-selection with differing values, and `bound` is true
+ * when the prop is driven by a variable (host owns bind/unbind chrome; guest
+ * `set` on a bound prop is dropped).
+ */
+export interface PanelPropHandle<T = unknown> {
+  readonly value: T | undefined;
+  readonly mixed: boolean;
+  readonly bound: boolean;
+  /** The declared prop kind, so a panel can branch on it without host data. */
+  readonly kind: PropKind;
+  /** Writes a new value, emitting a `set-prop` intent (dropped when `bound`). */
+  set(value: T, options?: PanelSetOptions): void;
+  /** Discards an in-flight live gesture, emitting a `gesture-discard` intent. */
+  cancel(): void;
+  /** Resets the prop to its default, emitting a `reset-prop` intent. */
+  reset(): void;
+}
+
+/**
+ * The handle for a `p.ref("product")` prop: the host-resolved product value,
+ * its id, and a `set(productId)` that rebinds the reference.
+ */
+export interface PanelRefPropHandle {
+  readonly value: PaywallProduct | undefined;
+  readonly productId: string | undefined;
+  readonly mixed: boolean;
+  readonly kind: "ref";
+  set(productId: string): void;
+}
+
+/**
+ * A read-only handle for props the host owns entirely (component/slot props):
+ * the panel may read the value but cannot write it.
+ */
+export interface PanelReadonlyPropHandle<T = unknown> {
+  readonly value: T | undefined;
+  readonly mixed: boolean;
+  readonly kind: PropKind;
+}
+
+/** The current selection the panel edits. */
+export interface PanelSelection {
+  /** How many instances are selected (1 = single, >1 = multi/mixed). */
+  readonly count: number;
+}
+
+/** Injected, serializable host data a panel reads (products, variables). */
+export interface PanelData {
+  readonly products: ReadonlyArray<PaywallProduct>;
+  readonly variables: PaywallVariables;
+}
+
+/**
+ * The default, loosely-typed `ctx.props` bag: one handle per declared prop.
+ * `defineComponent` refines this against the component's prop map (see
+ * {@link ../panel/index}). A ref prop resolves to {@link PanelRefPropHandle}, a
+ * component prop to a read-only handle, everything else to a writable
+ * {@link PanelPropHandle}.
+ */
+export type PanelProps = Record<
+  string,
+  PanelPropHandle | PanelRefPropHandle | PanelReadonlyPropHandle
+>;
+
+/**
+ * The context object a panel definition receives. `props` is refined per the
+ * component's manifest by `defineComponent`; `selection` and `data` are
+ * host-filled.
+ */
+export interface PanelContext<P extends PanelProps = PanelProps> {
+  readonly props: P;
+  readonly selection: PanelSelection;
+  readonly data: PanelData;
+}
diff --git a/libraries/paywalls/src/panel/index.ts b/libraries/paywalls/src/panel/index.ts
new file mode 100644
index 000000000..27a13f80b
--- /dev/null
+++ b/libraries/paywalls/src/panel/index.ts
@@ -0,0 +1,81 @@
+/**
+ * `@voidhash/paywalls/panel` — the editor-panel authoring surface and reconciler.
+ *
+ * A panel definition is `(ctx: PanelContext) => ReactNode` built from the
+ * `Panel.*` primitives. A {@link createPanelSession} mounts it with a custom
+ * `react-reconciler` host that serializes each commit into the closed
+ * {@link PanelTree} wire format — functions never cross the boundary; fired
+ * events are addressed by `(nodeId, eventName)` and routed back through
+ * {@link PanelSession.dispatchEvent}. Author `ctx.props.*` writes emit
+ * {@link PanelIntent}s the host reduces.
+ *
+ * Built-in designer panels run a session in-process; code-component panels run
+ * one inside the sandbox iframe.
+ */
+export type {
+  PanelContext,
+  PanelData,
+  PanelGesture,
+  PanelProps,
+  PanelPropHandle,
+  PanelReadonlyPropHandle,
+  PanelRefPropHandle,
+  PanelSelection,
+  PanelSetOptions,
+} from "./context";
+export type {
+  GestureCommitIntent,
+  GestureDiscardIntent,
+  PanelIntent,
+  ResetPropIntent,
+  SetPropIntent,
+  SetRefIntent,
+} from "./intent";
+export { PANEL_ELEMENT_TO_TYPE, PANEL_ELEMENT_TYPES } from "./intrinsics";
+export {
+  Panel,
+  type PanelActionEditorFieldProps,
+  type PanelAlignmentGridProps,
+  type PanelButtonProps,
+  type PanelCalloutProps,
+  type PanelColorFieldProps,
+  type PanelColorPickerProps,
+  type PanelColumnProps,
+  type PanelDefaultPropsProps,
+  type PanelDimensionFieldProps,
+  type PanelFieldProps,
+  type PanelFillFieldProps,
+  type PanelGradientStopsProps,
+  type PanelImageFieldProps,
+  type PanelMenuProps,
+  type PanelOption,
+  type PanelPopoverContentProps,
+  type PanelPopoverProps,
+  type PanelPopoverTriggerProps,
+  type PanelProductFieldProps,
+  type PanelPropFieldProps,
+  type PanelResetAffordanceProps,
+  type PanelRootProps,
+  type PanelRowProps,
+  type PanelSectionActionsProps,
+  type PanelSectionProps,
+  type PanelSelectFieldProps,
+  type PanelSliderFieldProps,
+  type PanelSubsectionProps,
+  type PanelSwatchProps,
+  type PanelSwitchFieldProps,
+  type PanelTextFieldProps,
+  type PanelTextProps,
+  type PanelToggleGroupProps,
+  type PanelTrailingMenu,
+  type PanelVariableFieldProps,
+} from "./primitives";
+export { PanelRuntimeProvider, type PanelRuntimeProviderProps, usePanelContext } from "./runtime";
+export {
+  type CreatePanelSessionOptions,
+  createPanelSession,
+  type PanelPropInput,
+  type PanelSession,
+  type PanelSessionCallbacks,
+  type PanelSessionInputs,
+} from "./session";
diff --git a/libraries/paywalls/src/panel/intent.ts b/libraries/paywalls/src/panel/intent.ts
new file mode 100644
index 000000000..71d2733ac
--- /dev/null
+++ b/libraries/paywalls/src/panel/intent.ts
@@ -0,0 +1,51 @@
+/**
+ * The serializable intents a panel definition emits when the author calls
+ * `ctx.props.<name>.set` / `.cancel` / `.reset`. Like the {@link PanelTree}
+ * event channel, intents never carry functions — the host receives them,
+ * validates them against the component manifest, and reduces them into document
+ * mutations. `set-prop` values are {@link PanelJsonValue}s bounded by
+ * {@link PANEL_CAPS.intentBytes}.
+ */
+import type { PanelJsonValue } from "../schema/panel-tree";
+import type { PanelGesture } from "./context";
+
+/** Write a new value to a prop (transient during a drag, or final on commit). */
+export interface SetPropIntent {
+  readonly type: "set-prop";
+  readonly name: string;
+  readonly value: PanelJsonValue;
+  readonly gesture: PanelGesture;
+}
+
+/** Rebind a `p.ref` prop to a different runtime entity. */
+export interface SetRefIntent {
+  readonly type: "set-ref";
+  readonly name: string;
+  readonly productId: string;
+}
+
+/** Reset a prop to its declared default. */
+export interface ResetPropIntent {
+  readonly type: "reset-prop";
+  readonly name: string;
+}
+
+/** Commit the in-flight gesture (the last `live` value becomes final). */
+export interface GestureCommitIntent {
+  readonly type: "gesture-commit";
+  readonly name: string;
+}
+
+/** Discard the in-flight gesture (revert to the value before it started). */
+export interface GestureDiscardIntent {
+  readonly type: "gesture-discard";
+  readonly name: string;
+}
+
+/** The closed union of every intent a panel emits. */
+export type PanelIntent =
+  | SetPropIntent
+  | SetRefIntent
+  | ResetPropIntent
+  | GestureCommitIntent
+  | GestureDiscardIntent;
diff --git a/libraries/paywalls/src/panel/intrinsics.ts b/libraries/paywalls/src/panel/intrinsics.ts
new file mode 100644
index 000000000..9e916d25c
--- /dev/null
+++ b/libraries/paywalls/src/panel/intrinsics.ts
@@ -0,0 +1,50 @@
+/**
+ * The intrinsic element names the panel reconciler understands — one per
+ * authorable {@link PanelNodeType}. Each `Panel.*` primitive lowers to the
+ * matching `vh-panel-*` intrinsic (mirroring how the preview tree host lowers
+ * to `vh-view`, `vh-text`, … in `tree-renderer/tree-host.ts`); the serializer
+ * maps the intrinsic back to its wire node `type`.
+ */
+import type { PanelNodeType } from "../schema/panel-tree";
+
+/** Wire node type → intrinsic element name. */
+export const PANEL_ELEMENT_TYPES = {
+  panel: "vh-panel",
+  section: "vh-panel-section",
+  sectionActions: "vh-panel-section-actions",
+  subsection: "vh-panel-subsection",
+  row: "vh-panel-row",
+  column: "vh-panel-column",
+  field: "vh-panel-field",
+  text: "vh-panel-text",
+  callout: "vh-panel-callout",
+  popover: "vh-panel-popover",
+  popoverTrigger: "vh-panel-popover-trigger",
+  popoverContent: "vh-panel-popover-content",
+  menu: "vh-panel-menu",
+  textField: "vh-panel-text-field",
+  selectField: "vh-panel-select-field",
+  toggleGroup: "vh-panel-toggle-group",
+  switchField: "vh-panel-switch-field",
+  button: "vh-panel-button",
+  sliderField: "vh-panel-slider-field",
+  resetAffordance: "vh-panel-reset-affordance",
+  colorField: "vh-panel-color-field",
+  colorPicker: "vh-panel-color-picker",
+  gradientStops: "vh-panel-gradient-stops",
+  swatch: "vh-panel-swatch",
+  imageField: "vh-panel-image-field",
+  alignmentGrid: "vh-panel-alignment-grid",
+  dimensionField: "vh-panel-dimension-field",
+  fillField: "vh-panel-fill-field",
+  variableField: "vh-panel-variable-field",
+  actionEditorField: "vh-panel-action-editor-field",
+  productField: "vh-panel-product-field",
+  propField: "vh-panel-prop-field",
+  defaultProps: "vh-panel-default-props",
+} as const satisfies Record<PanelNodeType, string>;
+
+/** Intrinsic element name → wire node type, derived from {@link PANEL_ELEMENT_TYPES}. */
+export const PANEL_ELEMENT_TO_TYPE: Readonly<Record<string, PanelNodeType>> = Object.fromEntries(
+  Object.entries(PANEL_ELEMENT_TYPES).map(([type, element]) => [element, type as PanelNodeType]),
+);
diff --git a/libraries/paywalls/src/panel/monaco-surface.ts b/libraries/paywalls/src/panel/monaco-surface.ts
new file mode 100644
index 000000000..149497065
--- /dev/null
+++ b/libraries/paywalls/src/panel/monaco-surface.ts
@@ -0,0 +1,9 @@
+/**
+ * The author-facing surface Monaco type-checks editor-panel authoring against.
+ *
+ * Mirrors `sandbox/monaco-surface.ts`: a thin re-export of the
+ * `@voidhash/paywalls/panel` entry so `build.ts` can bundle ONE self-contained
+ * `.d.ts` and post-process it into a `declare module "@voidhash/paywalls/panel"`
+ * ambient block. Never imported at runtime — a dts entry only.
+ */
+export * from "./index";
diff --git a/libraries/paywalls/src/panel/primitives.tsx b/libraries/paywalls/src/panel/primitives.tsx
new file mode 100644
index 000000000..43b443e70
--- /dev/null
+++ b/libraries/paywalls/src/panel/primitives.tsx
@@ -0,0 +1,389 @@
+/**
+ * `Panel.*` — the thin, typed author-facing components for building an editor
+ * panel. Each one lowers to a `vh-panel-*` intrinsic the panel reconciler
+ * serializes into a {@link PanelNode}. Data props are typed from the wire
+ * contract ({@link PANEL_NODE_SPECS}); event props are typed callbacks whose
+ * names must be in the node type's event allowlist — the serializer records
+ * each present function prop's name into the node's `events`.
+ *
+ * These render nothing themselves: `createElement(intrinsic, props, children)`
+ * hands the props straight to the reconciler, which owns serialization. Text
+ * for `Panel.Text`/`Panel.Callout` is authored via the `content`/`message`
+ * prop (not JSX children) per the wire contract.
+ */
+import { createElement, type ReactNode } from "react";
+
+import type { IconName, PanelJsonValue } from "../schema/panel-tree";
+import { PANEL_ELEMENT_TYPES } from "./intrinsics";
+
+// ── Shared value vocabularies (mirror the host component prop unions) ─────────
+
+type GapToken = "none" | "xs" | "sm" | "md" | "lg";
+type WidthToken = "auto" | "full" | "half";
+type AlignToken = "start" | "center" | "end" | "stretch";
+type JustifyToken = "start" | "center" | "end" | "between";
+type TextVariant = "label" | "body" | "caption" | "heading";
+type Tone = "default" | "muted" | "info" | "warning" | "error";
+type ButtonVariant = "default" | "outline" | "ghost" | "destructive";
+type ButtonSize = "sm" | "icon-sm" | "default";
+
+/** A `{ value, label?, icon?, disabled? }` option for selects/toggles/menus. */
+export interface PanelOption {
+  readonly value: string;
+  readonly label?: string;
+  readonly icon?: IconName;
+  readonly disabled?: boolean;
+}
+
+/**
+ * A `textField.trailingMenu` value: the trailing dropdown's `items` plus an
+ * optional currently-selected `value`. This is the wire shape the serializer and
+ * host both use (the `Auto`/`Fixed` line-height toggle is the first real use).
+ */
+export interface PanelTrailingMenu {
+  readonly items: ReadonlyArray<PanelOption>;
+  readonly value?: string;
+}
+
+/** Common children container prop. */
+interface WithChildren {
+  children?: ReactNode;
+}
+
+// ── Chrome / layout ──────────────────────────────────────────────────────────
+
+export interface PanelRootProps extends WithChildren {}
+export interface PanelSectionProps extends WithChildren {
+  title?: string;
+  collapsible?: boolean;
+  defaultCollapsed?: boolean;
+  onToggle?: (collapsed: boolean) => void;
+}
+export interface PanelSectionActionsProps extends WithChildren {}
+export interface PanelSubsectionProps extends WithChildren {
+  title?: string;
+}
+export interface PanelRowProps extends WithChildren {
+  gap?: GapToken;
+  width?: WidthToken;
+  align?: AlignToken;
+  justify?: JustifyToken;
+}
+export interface PanelColumnProps extends WithChildren {
+  gap?: GapToken;
+  width?: WidthToken;
+  align?: AlignToken;
+}
+export interface PanelFieldProps extends WithChildren {
+  label?: string;
+  icon?: IconName;
+}
+export interface PanelTextProps {
+  content?: string;
+  variant?: TextVariant;
+  tone?: Tone;
+}
+export interface PanelCalloutProps {
+  message?: string;
+  tone?: Tone;
+}
+export interface PanelPopoverProps extends WithChildren {
+  open?: boolean;
+  onOpenChange?: (open: boolean) => void;
+}
+export interface PanelPopoverTriggerProps extends WithChildren {}
+export interface PanelPopoverContentProps extends WithChildren {
+  align?: "start" | "center" | "end";
+  side?: "top" | "right" | "bottom" | "left";
+}
+export interface PanelMenuProps {
+  items?: ReadonlyArray<PanelOption>;
+  value?: string;
+  align?: "start" | "center" | "end";
+  onSelect?: (value: string) => void;
+}
+
+// ── Controls ─────────────────────────────────────────────────────────────────
+
+export interface PanelTextFieldProps {
+  kind?: "text" | "number";
+  value?: string | number;
+  mixed?: boolean;
+  placeholder?: string;
+  min?: number;
+  max?: number;
+  step?: number;
+  icon?: IconName;
+  disabled?: boolean;
+  trailingMenu?: PanelTrailingMenu;
+  onChange?: (value: string) => void;
+  onCommit?: (value: string) => void;
+  onTrailingSelect?: (value: string) => void;
+}
+export interface PanelSelectFieldProps {
+  value?: string;
+  options?: ReadonlyArray<PanelOption>;
+  placeholder?: string;
+  mixed?: boolean;
+  disabled?: boolean;
+  onChange?: (value: string) => void;
+}
+export interface PanelToggleGroupProps {
+  value?: string;
+  options?: ReadonlyArray<PanelOption>;
+  mixed?: boolean;
+  disabled?: boolean;
+  onChange?: (value: string) => void;
+}
+export interface PanelSwitchFieldProps {
+  checked?: boolean;
+  mixed?: boolean;
+  label?: string;
+  disabled?: boolean;
+  onChange?: (checked: boolean) => void;
+}
+export interface PanelButtonProps {
+  label?: string;
+  icon?: IconName;
+  variant?: ButtonVariant;
+  size?: ButtonSize;
+  disabled?: boolean;
+  onClick?: () => void;
+}
+export interface PanelSliderFieldProps {
+  value?: number;
+  min?: number;
+  max?: number;
+  step?: number;
+  mixed?: boolean;
+  disabled?: boolean;
+  onChange?: (value: number) => void;
+  onCommit?: (value: number) => void;
+}
+export interface PanelResetAffordanceProps extends WithChildren {
+  show?: boolean;
+  label?: string;
+  onReset?: () => void;
+}
+
+// ── Composites ───────────────────────────────────────────────────────────────
+
+export interface PanelColorFieldProps {
+  value?: string;
+  mixed?: boolean;
+  mixedLabel?: string;
+  disabled?: boolean;
+  onChange?: (value: string) => void;
+  onDragStart?: () => void;
+  onCommit?: (value: string) => void;
+  onDiscard?: () => void;
+}
+export interface PanelColorPickerProps {
+  color?: string;
+  opacity?: number;
+  onColorChange?: (color: string) => void;
+  onOpacityChange?: (opacity: number) => void;
+  onDragStart?: () => void;
+  onDragEnd?: () => void;
+  onDiscard?: () => void;
+}
+export interface PanelGradientStopsProps {
+  stops?: PanelJsonValue;
+  selectedStopId?: string;
+  onSelect?: (stopId: string) => void;
+  onAddStop?: (position: number) => void;
+  onMoveStop?: (stopId: string, position: number) => void;
+  onRemoveStop?: (stopId: string) => void;
+  onDragStart?: () => void;
+  onDragEnd?: () => void;
+  onDiscard?: () => void;
+}
+export interface PanelSwatchProps {
+  color?: string;
+  imageUrl?: string;
+}
+export interface PanelImageFieldProps {
+  url?: string;
+  resizeMode?: "cover" | "contain" | "stretch" | "center";
+  onPick?: () => void;
+  onResizeModeChange?: (mode: string) => void;
+  onClear?: () => void;
+}
+export interface PanelAlignmentGridProps {
+  flexDirection?: string;
+  alignItems?: string;
+  justifyContent?: string;
+  mixed?: boolean;
+  onChange?: (value: PanelJsonValue) => void;
+}
+export interface PanelDimensionFieldProps {
+  axis?: "width" | "height";
+  mode?: string;
+  value?: number;
+  label?: string;
+  mixed?: boolean;
+  disabled?: boolean;
+  computed?: number;
+  onChange?: (value: number) => void;
+  onCommit?: (value: number) => void;
+  onModeChange?: (mode: string) => void;
+}
+export interface PanelFillFieldProps {
+  label?: string;
+  backgroundType?: string;
+  isTypeMixed?: boolean;
+  backgroundColor?: string;
+  gradient?: PanelJsonValue;
+  selectedStopIndex?: number;
+  image?: PanelJsonValue;
+  open?: boolean;
+  onTypeChange?: (type: string) => void;
+  onColorChange?: (color: string) => void;
+  onGradientChange?: (gradient: PanelJsonValue) => void;
+  onStopColorChange?: (index: number, color: string) => void;
+  onStopPositionChange?: (index: number, position: number) => void;
+  onAddStop?: () => void;
+  onAddStopAt?: (position: number) => void;
+  onRemoveStop?: (index: number) => void;
+  onSelectStop?: (index: number) => void;
+  onImageUrlChange?: (url: string) => void;
+  onImageResizeModeChange?: (mode: string) => void;
+  onGestureStart?: () => void;
+  onCommit?: () => void;
+  onDiscard?: () => void;
+  onOpenChange?: (open: boolean) => void;
+}
+export interface PanelVariableFieldProps {
+  variableId?: string;
+  variableName?: string;
+  variableType?: string;
+  allowedKinds?: ReadonlyArray<string>;
+  label?: string;
+  onBind?: (variableId: string) => void;
+  onUnbind?: () => void;
+  onCreate?: (name: string) => void;
+}
+export interface PanelActionEditorFieldProps {
+  value?: PanelJsonValue;
+  /** Serializable variable list offered to set-variable targets and value pickers. */
+  variables?: PanelJsonValue;
+  /** Product-typed subset of `variables`, offered to purchase-product. */
+  productVariables?: PanelJsonValue;
+  /** Payload field names of the emitting component action (enables "From action payload"). */
+  payloadFields?: ReadonlyArray<string>;
+  onChange?: (value: PanelJsonValue) => void;
+}
+export interface PanelProductFieldProps {
+  productId?: string;
+  placeholder?: string;
+  disabled?: boolean;
+  label?: string;
+  onChange?: (productId: string) => void;
+}
+export interface PanelPropFieldProps {
+  name: string;
+}
+export interface PanelDefaultPropsProps {
+  exclude?: ReadonlyArray<string>;
+}
+
+// ── Component factory ────────────────────────────────────────────────────────
+
+/** Builds a thin primitive lowering to `intrinsic`, with a stable displayName. */
+const primitive = <P extends object>(intrinsic: string, displayName: string) => {
+  const Component = (props: P): ReactNode => {
+    const { children, ...rest } = props as P & { children?: ReactNode };
+    return createElement(intrinsic, rest, children);
+  };
+  Component.displayName = displayName;
+  return Component;
+};
+
+const PanelRoot = primitive<PanelRootProps>(PANEL_ELEMENT_TYPES.panel, "Panel");
+
+/**
+ * Root of a component's custom editor panel. Compose the `Panel.*` children to
+ * describe the panel; the reconciler serializes it into a {@link PanelTree}.
+ */
+export const Panel = Object.assign(PanelRoot, {
+  Section: primitive<PanelSectionProps>(PANEL_ELEMENT_TYPES.section, "Panel.Section"),
+  SectionActions: primitive<PanelSectionActionsProps>(
+    PANEL_ELEMENT_TYPES.sectionActions,
+    "Panel.SectionActions",
+  ),
+  Subsection: primitive<PanelSubsectionProps>(PANEL_ELEMENT_TYPES.subsection, "Panel.Subsection"),
+  Row: primitive<PanelRowProps>(PANEL_ELEMENT_TYPES.row, "Panel.Row"),
+  Column: primitive<PanelColumnProps>(PANEL_ELEMENT_TYPES.column, "Panel.Column"),
+  Field: primitive<PanelFieldProps>(PANEL_ELEMENT_TYPES.field, "Panel.Field"),
+  Text: primitive<PanelTextProps>(PANEL_ELEMENT_TYPES.text, "Panel.Text"),
+  Callout: primitive<PanelCalloutProps>(PANEL_ELEMENT_TYPES.callout, "Panel.Callout"),
+  Popover: primitive<PanelPopoverProps>(PANEL_ELEMENT_TYPES.popover, "Panel.Popover"),
+  PopoverTrigger: primitive<PanelPopoverTriggerProps>(
+    PANEL_ELEMENT_TYPES.popoverTrigger,
+    "Panel.PopoverTrigger",
+  ),
+  PopoverContent: primitive<PanelPopoverContentProps>(
+    PANEL_ELEMENT_TYPES.popoverContent,
+    "Panel.PopoverContent",
+  ),
+  Menu: primitive<PanelMenuProps>(PANEL_ELEMENT_TYPES.menu, "Panel.Menu"),
+  TextField: primitive<PanelTextFieldProps>(PANEL_ELEMENT_TYPES.textField, "Panel.TextField"),
+  SelectField: primitive<PanelSelectFieldProps>(
+    PANEL_ELEMENT_TYPES.selectField,
+    "Panel.SelectField",
+  ),
+  ToggleGroup: primitive<PanelToggleGroupProps>(
+    PANEL_ELEMENT_TYPES.toggleGroup,
+    "Panel.ToggleGroup",
+  ),
+  SwitchField: primitive<PanelSwitchFieldProps>(
+    PANEL_ELEMENT_TYPES.switchField,
+    "Panel.SwitchField",
+  ),
+  Button: primitive<PanelButtonProps>(PANEL_ELEMENT_TYPES.button, "Panel.Button"),
+  SliderField: primitive<PanelSliderFieldProps>(
+    PANEL_ELEMENT_TYPES.sliderField,
+    "Panel.SliderField",
+  ),
+  ResetAffordance: primitive<PanelResetAffordanceProps>(
+    PANEL_ELEMENT_TYPES.resetAffordance,
+    "Panel.ResetAffordance",
+  ),
+  ColorField: primitive<PanelColorFieldProps>(PANEL_ELEMENT_TYPES.colorField, "Panel.ColorField"),
+  ColorPicker: primitive<PanelColorPickerProps>(
+    PANEL_ELEMENT_TYPES.colorPicker,
+    "Panel.ColorPicker",
+  ),
+  GradientStops: primitive<PanelGradientStopsProps>(
+    PANEL_ELEMENT_TYPES.gradientStops,
+    "Panel.GradientStops",
+  ),
+  Swatch: primitive<PanelSwatchProps>(PANEL_ELEMENT_TYPES.swatch, "Panel.Swatch"),
+  ImageField: primitive<PanelImageFieldProps>(PANEL_ELEMENT_TYPES.imageField, "Panel.ImageField"),
+  AlignmentGrid: primitive<PanelAlignmentGridProps>(
+    PANEL_ELEMENT_TYPES.alignmentGrid,
+    "Panel.AlignmentGrid",
+  ),
+  DimensionField: primitive<PanelDimensionFieldProps>(
+    PANEL_ELEMENT_TYPES.dimensionField,
+    "Panel.DimensionField",
+  ),
+  FillField: primitive<PanelFillFieldProps>(PANEL_ELEMENT_TYPES.fillField, "Panel.FillField"),
+  VariableField: primitive<PanelVariableFieldProps>(
+    PANEL_ELEMENT_TYPES.variableField,
+    "Panel.VariableField",
+  ),
+  ActionEditorField: primitive<PanelActionEditorFieldProps>(
+    PANEL_ELEMENT_TYPES.actionEditorField,
+    "Panel.ActionEditorField",
+  ),
+  ProductField: primitive<PanelProductFieldProps>(
+    PANEL_ELEMENT_TYPES.productField,
+    "Panel.ProductField",
+  ),
+  PropField: primitive<PanelPropFieldProps>(PANEL_ELEMENT_TYPES.propField, "Panel.PropField"),
+  DefaultProps: primitive<PanelDefaultPropsProps>(
+    PANEL_ELEMENT_TYPES.defaultProps,
+    "Panel.DefaultProps",
+  ),
+});
diff --git a/libraries/paywalls/src/panel/reconciler.tsx b/libraries/paywalls/src/panel/reconciler.tsx
new file mode 100644
index 000000000..f07be7ed4
--- /dev/null
+++ b/libraries/paywalls/src/panel/reconciler.tsx
@@ -0,0 +1,214 @@
+/**
+ * The long-lived panel reconciler: a `react-reconciler` mutation-mode host that
+ * keeps ONE container per session (unlike the one-shot preview renderer in
+ * `tree-renderer/render-to-node-tree`). It assigns each host instance a stable
+ * monotonic numeric id and registers it in a `Map` so:
+ *
+ * - re-renders reuse instances (mutation mode) → ids are stable while a node is
+ *   mounted (the host gets stable React keys for free), and
+ * - {@link dispatchEvent} can look up a live instance by id and read its
+ *   CURRENT handler prop.
+ *
+ * On every commit it schedules ONE microtask that serializes the tree and
+ * emits it (coalescing multiple synchronous commits into a single emission).
+ * Event dispatch runs the handler at discrete priority via the reconciler's
+ * `flushSyncFromReconciler`, so a `setState` inside the handler is committed —
+ * and the resulting tree emitted — before `dispatchEvent` returns.
+ */
+import { type ReactNode } from "react";
+import createReconciler from "react-reconciler";
+// The explicit ".js" matters: react-reconciler ships no `exports` map.
+import { ConcurrentRoot, DefaultEventPriority } from "react-reconciler/constants.js";
+
+/** A live host instance in the panel tree. */
+export interface PanelInstance {
+  readonly tag: "instance";
+  readonly id: number;
+  readonly type: string;
+  props: Record<string, unknown>;
+  children: PanelChild[];
+}
+
+/** A child in the panel tree: another instance or raw text (invalid, dropped). */
+export type PanelChild = PanelInstance | string;
+
+interface TextInstance {
+  readonly tag: "text";
+  readonly id: number;
+  text: string;
+}
+
+interface PanelContainer {
+  children: PanelChild[];
+}
+
+const noop = (): void => {
+  // intentionally empty
+};
+
+const removeFrom = (list: PanelChild[], child: PanelChild): void => {
+  const index = list.indexOf(child);
+  if (index >= 0) list.splice(index, 1);
+};
+
+const insertInto = (list: PanelChild[], child: PanelChild, before: PanelChild): void => {
+  removeFrom(list, child);
+  const index = list.indexOf(before);
+  list.splice(index < 0 ? list.length : index, 0, child);
+};
+
+// React 19 asserts host context is non-null; a shared sentinel stands in.
+const HOST_CONTEXT: Record<string, never> = {};
+
+/**
+ * Builds a fresh reconciler + container with its own instance registry and id
+ * counter. Each session gets its own so concurrent sessions never share ids or
+ * priority state.
+ */
+export const createPanelReconciler = () => {
+  const container: PanelContainer = { children: [] };
+  const instances = new Map<number, PanelInstance>();
+  let nextId = 0;
+  let currentUpdatePriority = 0;
+
+  // A text instance never becomes a panel node; keep its text as a raw-string
+  // child so the serializer can warn+drop it. (Panel authors use props, not
+  // JSX text.)
+  const toChild = (child: PanelChild | TextInstance): PanelChild =>
+    typeof child === "object" && "tag" in child && child.tag === "text"
+      ? (child as TextInstance).text
+      : (child as PanelChild);
+
+  // Filled by `attach`; the container commit hook forwards to it.
+  let onCommit: () => void = noop;
+
+  const reconciler = createReconciler<PanelContainer>({
+    supportsMutation: true,
+    supportsPersistence: false,
+    supportsHydration: false,
+    isPrimaryRenderer: true,
+    warnsIfNotActing: false,
+    noTimeout: -1,
+    scheduleTimeout: setTimeout,
+    cancelTimeout: clearTimeout,
+    supportsMicrotasks: true,
+    scheduleMicrotask: queueMicrotask,
+
+    createInstance: (type: string, props: Record<string, unknown>): PanelInstance => {
+      const instance: PanelInstance = {
+        tag: "instance",
+        id: nextId++,
+        type,
+        props,
+        children: [],
+      };
+      instances.set(instance.id, instance);
+      return instance;
+    },
+    createTextInstance: (text: string): TextInstance => ({ tag: "text", id: nextId++, text }),
+    shouldSetTextContent: () => false,
+    finalizeInitialChildren: () => false,
+    getRootHostContext: () => HOST_CONTEXT,
+    getChildHostContext: (parentContext: unknown) => parentContext,
+    getPublicInstance: (instance: unknown) => instance,
+
+    appendInitialChild: (parent: PanelInstance, child: PanelChild | TextInstance) => {
+      parent.children.push(toChild(child));
+    },
+    appendChild: (parent: PanelInstance, child: PanelChild | TextInstance) => {
+      parent.children.push(toChild(child));
+    },
+    appendChildToContainer: (c: PanelContainer, child: PanelChild | TextInstance) => {
+      c.children.push(toChild(child));
+    },
+    insertBefore: (
+      parent: PanelInstance,
+      child: PanelChild | TextInstance,
+      before: PanelChild | TextInstance,
+    ) => {
+      insertInto(parent.children, toChild(child), toChild(before));
+    },
+    insertInContainerBefore: (
+      c: PanelContainer,
+      child: PanelChild | TextInstance,
+      before: PanelChild | TextInstance,
+    ) => {
+      insertInto(c.children, toChild(child), toChild(before));
+    },
+    removeChild: (parent: PanelInstance, child: PanelChild | TextInstance) => {
+      removeFrom(parent.children, toChild(child));
+    },
+    removeChildFromContainer: (c: PanelContainer, child: PanelChild | TextInstance) => {
+      removeFrom(c.children, toChild(child));
+    },
+    clearContainer: (c: PanelContainer) => {
+      c.children = [];
+    },
+    commitUpdate: (
+      instance: PanelInstance,
+      _type: string,
+      _prev: Record<string, unknown>,
+      next: Record<string, unknown>,
+    ) => {
+      instance.props = next;
+    },
+    commitTextUpdate: (instance: TextInstance, _old: string, next: string) => {
+      instance.text = next;
+    },
+    resetTextContent: noop,
+
+    prepareForCommit: () => null,
+    resetAfterCommit: () => {
+      onCommit();
+    },
+    preparePortalMount: noop,
+    hideInstance: noop,
+    unhideInstance: noop,
+    hideTextInstance: noop,
+    unhideTextInstance: noop,
+    // Drop detached instances from the registry so a stale event can never
+    // resolve to an unmounted node (its id is also freed for reuse-safety: the
+    // monotonic counter never reissues it while mounted).
+    detachDeletedInstance: (instance: PanelInstance | TextInstance) => {
+      instances.delete(instance.id);
+    },
+    commitMount: noop,
+    getInstanceFromNode: () => null,
+    getInstanceFromScope: () => null,
+    prepareScopeUpdate: noop,
+    beforeActiveInstanceBlur: noop,
+    afterActiveInstanceBlur: noop,
+
+    setCurrentUpdatePriority: (priority: number) => {
+      currentUpdatePriority = priority;
+    },
+    getCurrentUpdatePriority: () => currentUpdatePriority,
+    resolveUpdatePriority: () =>
+      currentUpdatePriority !== 0 ? currentUpdatePriority : DefaultEventPriority,
+    getCurrentEventPriority: () => DefaultEventPriority,
+    shouldAttemptEagerTransition: () => false,
+    requestPostPaintCallback: noop,
+    trackSchedulerEvent: noop,
+    resolveEventType: () => null,
+    resolveEventTimeStamp: () => -1.1,
+
+    maySuspendCommit: () => false,
+    preloadInstance: () => true,
+    startSuspendingCommit: noop,
+    suspendInstance: noop,
+    waitForCommitToBeReady: () => null,
+    NotPendingTransition: null,
+    resetFormInstance: noop,
+  });
+
+  const attach = (handlers: { onCommit: () => void }): void => {
+    onCommit = handlers.onCommit;
+  };
+
+  return { reconciler, container, instances, attach, ConcurrentRoot };
+};
+
+/** Renders `element` into the session container. */
+export type PanelReconcilerHandle = ReturnType<typeof createPanelReconciler>;
+
+export type { ReactNode };
diff --git a/libraries/paywalls/src/panel/runtime.tsx b/libraries/paywalls/src/panel/runtime.tsx
new file mode 100644
index 000000000..5c0732101
--- /dev/null
+++ b/libraries/paywalls/src/panel/runtime.tsx
@@ -0,0 +1,33 @@
+/**
+ * The React context that carries a {@link PanelContext} to the rendered panel
+ * definition. The session rebuilds the context from a fresh
+ * {@link PanelSessionInputs} snapshot on every host update and passes it here;
+ * the definition reads it via {@link usePanelContext}.
+ */
+import { createContext, type ReactNode, useContext } from "react";
+
+import type { PanelContext, PanelProps } from "./context";
+
+const PanelRuntimeContext = createContext<PanelContext | null>(null);
+
+export interface PanelRuntimeProviderProps {
+  value: PanelContext;
+  children: ReactNode;
+}
+
+/** Provides the {@link PanelContext} to a panel definition subtree. */
+export const PanelRuntimeProvider = ({ value, children }: PanelRuntimeProviderProps): ReactNode => (
+  <PanelRuntimeContext.Provider value={value}>{children}</PanelRuntimeContext.Provider>
+);
+
+/**
+ * Reads the active {@link PanelContext}. Available to a panel definition and
+ * any hooks it composes; throws outside a {@link PanelRuntimeProvider}.
+ */
+export const usePanelContext = <P extends PanelProps = PanelProps>(): PanelContext<P> => {
+  const value = useContext(PanelRuntimeContext);
+  if (value === null) {
+    throw new Error("usePanelContext must be used inside a panel session");
+  }
+  return value as PanelContext<P>;
+};
diff --git a/libraries/paywalls/src/panel/serialize.ts b/libraries/paywalls/src/panel/serialize.ts
new file mode 100644
index 000000000..adaf3d0eb
--- /dev/null
+++ b/libraries/paywalls/src/panel/serialize.ts
@@ -0,0 +1,185 @@
+/**
+ * Serializes the panel reconciler's live instance tree into the {@link PanelTree}
+ * wire format. Mirrors the discipline of `tree-renderer/render-to-node-tree`'s
+ * serializer: it maps each `vh-panel-*` intrinsic instance back to its wire
+ * node `type`, splits props into serializable data props and event names, and
+ * enforces the closed vocabulary — anything a definition emits outside it is
+ * dropped (with a dev-mode warning) rather than trusted, because the tree
+ * crosses a trust boundary and the host validates it strictly.
+ *
+ * Function-valued props are NOT serialized: a function whose name is in the
+ * node type's event allowlist becomes an entry in `events`; a function outside
+ * the allowlist is dropped with a warning. Non-clonable, non-function values
+ * (symbols, class instances, `undefined`) are dropped; strings/numbers/booleans
+ * /null/plain-objects/arrays pass through.
+ */
+import {
+  PANEL_NODE_SPECS,
+  type PanelJsonValue,
+  type PanelNode,
+  type PanelNodeType,
+  type PanelRootNode,
+} from "../schema/panel-tree";
+import { PANEL_ELEMENT_TO_TYPE } from "./intrinsics";
+import type { PanelInstance } from "./reconciler";
+
+const isDev = process.env.NODE_ENV !== "production";
+
+const warn = (message: string): void => {
+  if (isDev) {
+    // biome-ignore lint/suspicious/noConsole: dev-only diagnostic for panel authors.
+    console.warn(`[@voidhash/paywalls/panel] ${message}`);
+  }
+};
+
+/** Per-type allowed prop-key sets, derived from {@link PANEL_NODE_SPECS}. */
+const NODE_PROP_KEYS: Record<string, ReadonlySet<string>> = Object.fromEntries(
+  Object.entries(PANEL_NODE_SPECS).map(([type, spec]) => [type, new Set(spec.props)]),
+);
+
+/** Per-type allowed event-name sets, derived from {@link PANEL_NODE_SPECS}. */
+const NODE_EVENT_NAMES: Record<string, ReadonlySet<string>> = Object.fromEntries(
+  Object.entries(PANEL_NODE_SPECS).map(([type, spec]) => [type, new Set(spec.events)]),
+);
+
+/**
+ * Recursively coerces an arbitrary prop value into a {@link PanelJsonValue},
+ * dropping anything non-clonable. Returns `undefined` for a value that cannot
+ * be represented (which the caller omits from `props`).
+ */
+const toJsonValue = (value: unknown, keyPath: string): PanelJsonValue | undefined => {
+  if (value === null) return null;
+  const t = typeof value;
+  if (t === "string" || t === "boolean") return value as PanelJsonValue;
+  if (t === "number") return Number.isFinite(value as number) ? (value as number) : undefined;
+  if (Array.isArray(value)) {
+    const out: PanelJsonValue[] = [];
+    for (let i = 0; i < value.length; i++) {
+      const item = toJsonValue(value[i], `${keyPath}[${i}]`);
+      // Preserve positional arrays: an unrepresentable item becomes null rather
+      // than shifting indices.
+      out.push(item === undefined ? null : item);
+    }
+    return out;
+  }
+  if (t === "object") {
+    // Reject class instances / exotic objects — only plain objects clone safely.
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== Object.prototype && proto !== null) {
+      warn(`prop "${keyPath}" is a non-plain object and was dropped`);
+      return undefined;
+    }
+    const out: Record<string, PanelJsonValue> = {};
+    for (const [key, child] of Object.entries(value as Record<string, unknown>)) {
+      const coerced = toJsonValue(child, `${keyPath}.${key}`);
+      if (coerced !== undefined) {
+        out[key] = coerced;
+      }
+    }
+    return out;
+  }
+  // function / symbol / bigint / undefined — not representable.
+  return undefined;
+};
+
+/**
+ * Serializes one instance's props into `{ props, events }`, enforcing the
+ * node type's closed prop-key and event-name allowlists.
+ */
+const serializeProps = (
+  type: PanelNodeType,
+  props: Record<string, unknown>,
+): { props: Record<string, PanelJsonValue>; events: string[] } => {
+  const allowedProps = NODE_PROP_KEYS[type]!;
+  const allowedEvents = NODE_EVENT_NAMES[type]!;
+  const outProps: Record<string, PanelJsonValue> = {};
+  const events: string[] = [];
+
+  for (const [key, value] of Object.entries(props)) {
+    if (key === "children") continue;
+    if (typeof value === "function") {
+      if (allowedEvents.has(key)) {
+        events.push(key);
+      } else {
+        warn(`function prop "${key}" on <${type}> is not a known event and was dropped`);
+      }
+      continue;
+    }
+    if (value === undefined) continue;
+    if (!allowedProps.has(key)) {
+      warn(`prop "${key}" on <${type}> is not in its allowlist and was dropped`);
+      continue;
+    }
+    const coerced = toJsonValue(value, key);
+    if (coerced !== undefined) {
+      outProps[key] = coerced;
+    }
+  }
+
+  return { props: outProps, events };
+};
+
+/** Serializes one instance and its descendants into a {@link PanelNode}. */
+const serializeInstance = (instance: PanelInstance): PanelNode => {
+  const type = PANEL_ELEMENT_TO_TYPE[instance.type];
+  if (type === undefined) {
+    // Unreachable through the typed primitives; guard for raw-intrinsic authors.
+    warn(`unknown panel element "${instance.type}" was replaced with an empty callout`);
+    return { type: "callout", id: instance.id, props: {}, events: [] };
+  }
+  const spec = PANEL_NODE_SPECS[type];
+  const { props, events } = serializeProps(type, instance.props);
+  const node: {
+    type: PanelNodeType;
+    id: number;
+    props: Record<string, PanelJsonValue>;
+    events: string[];
+    children?: PanelNode[];
+  } = { type, id: instance.id, props, events };
+  if (spec.children) {
+    node.children = serializeChildren(instance.children);
+  } else if (instance.children.length > 0) {
+    warn(`<${type}> does not accept children; ${instance.children.length} dropped`);
+  }
+  return node as PanelNode;
+};
+
+const serializeChildren = (children: ReadonlyArray<PanelInstance | string>): PanelNode[] => {
+  const out: PanelNode[] = [];
+  for (const child of children) {
+    if (typeof child === "string") {
+      // Raw JSX text (e.g. a bare string) is not a panel element — text belongs
+      // in a `content`/`message` prop per the wire contract.
+      if (child.trim().length > 0) {
+        warn(`raw text child "${child.trim().slice(0, 24)}…" is not a panel element and was dropped`);
+      }
+      continue;
+    }
+    out.push(serializeInstance(child));
+  }
+  return out;
+};
+
+/**
+ * Serializes the container's children into the root. Exactly one `panel` child
+ * is expected; `onInvalidRoot` is called (with a reason) when the shape is
+ * wrong so the session can emit its fallback tree.
+ */
+export const serializeRoot = (
+  children: ReadonlyArray<PanelInstance | string>,
+  onInvalidRoot: (reason: string) => PanelRootNode,
+): PanelRootNode => {
+  const elements = children.filter(
+    (child): child is PanelInstance => typeof child !== "string",
+  );
+  if (elements.length !== 1) {
+    return onInvalidRoot(
+      elements.length === 0 ? "panel rendered nothing" : "panel has more than one root element",
+    );
+  }
+  const only = elements[0]!;
+  if (PANEL_ELEMENT_TO_TYPE[only.type] !== "panel") {
+    return onInvalidRoot("panel root must be a <Panel> element");
+  }
+  return serializeInstance(only) as PanelRootNode;
+};
diff --git a/libraries/paywalls/src/panel/session.tsx b/libraries/paywalls/src/panel/session.tsx
new file mode 100644
index 000000000..9139efefb
--- /dev/null
+++ b/libraries/paywalls/src/panel/session.tsx
@@ -0,0 +1,441 @@
+/**
+ * A long-lived editor-panel session: mounts a panel definition into the
+ * persistent {@link createPanelReconciler} container, keeps it re-rendering as
+ * the host pushes fresh {@link PanelSessionInputs}, serializes each commit into
+ * a {@link PanelTree}, and routes author `ctx.props.*` writes to
+ * {@link PanelIntent}s.
+ *
+ * Built-in designer panels run this in-process (trusted, synchronous) and code
+ * panels run it inside a sandboxed iframe; both drive it through the same
+ * {@link PanelSession} handle. Event dispatch runs at discrete priority so an
+ * in-handler `setState` is committed and its tree emitted before
+ * `dispatchEvent` returns — what makes 60fps in-process drags possible.
+ */
+import { Component, type ReactNode } from "react";
+
+import {
+  PANEL_CAPS,
+  PANEL_TREE_VERSION,
+  type PanelJsonValue,
+  type PanelRootNode,
+  type PanelTree,
+} from "../schema/panel-tree";
+import type {
+  PanelContext,
+  PanelData,
+  PanelProps,
+  PanelPropHandle,
+  PanelReadonlyPropHandle,
+  PanelRefPropHandle,
+  PanelSelection,
+  PanelSetOptions,
+} from "./context";
+import type { PanelIntent } from "./intent";
+import { Panel } from "./primitives";
+import { createPanelReconciler } from "./reconciler";
+import { PanelRuntimeProvider } from "./runtime";
+import { serializeRoot } from "./serialize";
+
+const isDev = process.env.NODE_ENV !== "production";
+
+const warn = (message: string): void => {
+  if (isDev) {
+    // biome-ignore lint/suspicious/noConsole: dev-only diagnostic for panel authors.
+    console.warn(`[@voidhash/paywalls/panel] ${message}`);
+  }
+};
+
+// ── Session inputs (the host-computed snapshot) ──────────────────────────────
+
+/** The per-prop snapshot the host computes for one declared prop. */
+export interface PanelPropInput {
+  /** The prop's current value (resolved to the bound variable's value). */
+  readonly value?: PanelJsonValue;
+  /** True across a multi-selection with differing values for this prop. */
+  readonly mixed?: boolean;
+  /** True when the prop is driven by a variable (host owns bind/unbind). */
+  readonly bound?: boolean;
+  /** The declared prop kind (`"string"`, `"ref"`, `"component"`, …). */
+  readonly kind: string;
+  /** For a `ref` prop: the referenced entity id. */
+  readonly productId?: string;
+}
+
+/**
+ * The serializable snapshot the host recomputes and hands to the session on
+ * every update. The session builds the {@link PanelContext} from it (plus the
+ * intent sink for writes).
+ */
+export interface PanelSessionInputs {
+  /** One entry per declared prop, keyed by prop name. */
+  readonly props: Readonly<Record<string, PanelPropInput>>;
+  /** The current selection the panel edits. */
+  readonly selection: PanelSelection;
+  /** Injected host data (products, variables). */
+  readonly data: PanelData;
+}
+
+// ── Session config ───────────────────────────────────────────────────────────
+
+/** The callbacks a session reports through. */
+export interface PanelSessionCallbacks {
+  /** Called with the serialized tree and a monotonically increasing revision. */
+  onTree(tree: PanelTree, revision: number): void;
+  /** Called when the definition render throws (before the fallback tree emits). */
+  onError(error: unknown): void;
+}
+
+/** Configuration for {@link createPanelSession}. */
+export interface CreatePanelSessionOptions<P extends PanelProps = PanelProps> {
+  /** The panel definition: `(ctx) => ReactNode`. */
+  readonly render: (ctx: PanelContext<P>) => ReactNode;
+  /** The initial host snapshot (see {@link update} for later ones). */
+  readonly initialInputs: PanelSessionInputs;
+  readonly callbacks: PanelSessionCallbacks;
+  /** Where `ctx.props.*` writes go. Built-in hosts reduce these synchronously. */
+  readonly intentSink?: (intents: ReadonlyArray<PanelIntent>) => void;
+  /**
+   * Lets a trusted built-in host re-wrap providers (a zustand store context,
+   * theme, …) around the definition. Applied inside the panel runtime provider.
+   */
+  readonly wrap?: (children: ReactNode) => ReactNode;
+}
+
+/** The handle the host drives a session through. */
+export interface PanelSession {
+  /** Pushes a fresh host snapshot; triggers a re-render + tree emission. */
+  update(inputs: PanelSessionInputs): void;
+  /**
+   * Dispatches a fired event to the live node's current handler. Returns true
+   * when a handler ran, false for a stale/unknown `(nodeId, name)`.
+   */
+  dispatchEvent(nodeId: number, name: string, args: ReadonlyArray<unknown>): boolean;
+  /** The most recently emitted tree (or the empty-panel fallback). */
+  getTree(): PanelTree;
+  /** Unmounts the definition and releases the container. */
+  dispose(): void;
+}
+
+// ── Error boundary ───────────────────────────────────────────────────────────
+
+interface BoundaryProps {
+  onError: (error: unknown) => void;
+  children: ReactNode;
+}
+interface BoundaryState {
+  failed: boolean;
+}
+
+/**
+ * Catches a throwing definition render. On failure it reports the error through
+ * `onError` (so the host can surface it) and renders a generic fallback panel —
+ * a root `<Panel>` with a single neutral error `callout`. The author's error
+ * text never enters the tree (it goes through `onError` only); the serializer
+ * turns the fallback panel into the wire tree like any other render.
+ */
+class PanelErrorBoundary extends Component<BoundaryProps, BoundaryState> {
+  state: BoundaryState = { failed: false };
+
+  static getDerivedStateFromError(): BoundaryState {
+    return { failed: true };
+  }
+
+  componentDidCatch(error: unknown): void {
+    this.props.onError(error);
+  }
+
+  render(): ReactNode {
+    if (this.state.failed) {
+      return (
+        <Panel>
+          <Panel.Callout message="This panel failed to render." tone="error" />
+        </Panel>
+      );
+    }
+    return this.props.children;
+  }
+}
+
+// ── Definition host ──────────────────────────────────────────────────────────
+
+interface DefinitionHostProps<P extends PanelProps> {
+  render: (ctx: PanelContext<P>) => ReactNode;
+  ctx: PanelContext<P>;
+}
+
+/**
+ * Invokes the panel definition INSIDE React's render phase, so the definition
+ * may use hooks (`useState`, `useEffect`, timers). Calling `render(ctx)` eagerly
+ * outside a component would break the rules of hooks.
+ */
+const PanelDefinitionHost = <P extends PanelProps>({
+  render,
+  ctx,
+}: DefinitionHostProps<P>): ReactNode => render(ctx);
+
+// ── Fallback trees ───────────────────────────────────────────────────────────
+
+// Fallback trees replace the WHOLE tree (they never mix with reconciler-minted
+// ids), so small fixed non-negative ids stay unique and satisfy the wire
+// contract (ids must be non-negative integers, unique within a tree).
+
+/** A root `panel` containing a single error `callout` — leaks no author text. */
+const errorFallbackRoot = (): PanelRootNode => ({
+  type: "panel",
+  id: 0,
+  props: {},
+  events: [],
+  children: [
+    {
+      type: "callout",
+      id: 1,
+      props: { message: "This panel failed to render.", tone: "error" },
+      events: [],
+    },
+  ],
+});
+
+/** An empty root `panel`, used before the first commit and for empty renders. */
+const emptyRoot = (): PanelRootNode => ({
+  type: "panel",
+  id: 0,
+  props: {},
+  events: [],
+  children: [],
+});
+
+// ── Context construction ─────────────────────────────────────────────────────
+
+const byteSize = (value: PanelJsonValue): number => {
+  const json = JSON.stringify(value);
+  return typeof TextEncoder !== "undefined"
+    ? new TextEncoder().encode(json).length
+    : json.length;
+};
+
+/**
+ * Builds the {@link PanelContext} from a host snapshot. Prop handles capture the
+ * `emit` sink so `set`/`cancel`/`reset` produce intents. A `bound` prop's `set`
+ * is dropped (host owns binding); an oversized `set-prop` value is dropped.
+ */
+const buildContext = <P extends PanelProps>(
+  inputs: PanelSessionInputs,
+  emit: (intents: ReadonlyArray<PanelIntent>) => void,
+): PanelContext<P> => {
+  const props: Record<string, unknown> = {};
+
+  for (const [name, input] of Object.entries(inputs.props)) {
+    const kind = input.kind;
+    if (kind === "ref") {
+      const product = inputs.data.products.find((p) => p.id === input.productId);
+      const handle: PanelRefPropHandle = {
+        value: product,
+        productId: input.productId,
+        mixed: input.mixed ?? false,
+        kind: "ref",
+        set: (productId: string) => {
+          emit([{ type: "set-ref", name, productId }]);
+        },
+      };
+      props[name] = handle;
+      continue;
+    }
+    if (kind === "component") {
+      const handle: PanelReadonlyPropHandle = {
+        value: input.value,
+        mixed: input.mixed ?? false,
+        kind: "component",
+      };
+      props[name] = handle;
+      continue;
+    }
+
+    const bound = input.bound ?? false;
+    const handle: PanelPropHandle = {
+      value: input.value,
+      mixed: input.mixed ?? false,
+      bound,
+      // Safe: PropKind is a closed string union; the host supplies a legal kind.
+      kind: kind as PanelPropHandle["kind"],
+      set: (value: PanelJsonValue, options?: PanelSetOptions) => {
+        if (bound) {
+          warn(`prop "${name}" is bound to a variable; set() is ignored`);
+          return;
+        }
+        if (byteSize(value) > PANEL_CAPS.intentBytes) {
+          warn(`prop "${name}" set() value exceeds ${PANEL_CAPS.intentBytes} bytes and was dropped`);
+          return;
+        }
+        emit([{ type: "set-prop", name, value, gesture: options?.gesture ?? "commit" }]);
+      },
+      cancel: () => {
+        emit([{ type: "gesture-discard", name }]);
+      },
+      reset: () => {
+        emit([{ type: "reset-prop", name }]);
+      },
+    };
+    props[name] = handle;
+  }
+
+  return {
+    props: props as P,
+    selection: inputs.selection,
+    data: inputs.data,
+  };
+};
+
+// ── Session ──────────────────────────────────────────────────────────────────
+
+/**
+ * Creates a long-lived panel session. React state, effects, and timers all work
+ * for the session's lifetime; call {@link PanelSession.dispose} to tear it down.
+ */
+export const createPanelSession = <P extends PanelProps = PanelProps>(
+  options: CreatePanelSessionOptions<P>,
+): PanelSession => {
+  const { reconciler, container, instances, attach, ConcurrentRoot } = createPanelReconciler();
+
+  let inputs = options.initialInputs;
+  let revision = 0;
+  let lastTree: PanelTree = { version: PANEL_TREE_VERSION, root: emptyRoot() };
+  let disposed = false;
+
+  // Microtask coalescing: a commit bumps `commitGeneration`; the scheduled
+  // emit runs only if it is still the latest generation when it fires. Setting
+  // `pendingEmit` lets `dispatchEvent` flush the emission synchronously instead
+  // (draining what the microtask would have done, so the tree is observable
+  // before dispatch returns).
+  let commitGeneration = 0;
+  let pendingEmit = false;
+
+  const emitIntents = (intents: ReadonlyArray<PanelIntent>): void => {
+    if (intents.length === 0) return;
+    options.intentSink?.(intents);
+  };
+
+  const serialize = (): PanelTree => {
+    const root = serializeRoot(container.children, (reason) => {
+      warn(reason);
+      return emptyRoot();
+    });
+    return { version: PANEL_TREE_VERSION, root };
+  };
+
+  // Delivers the pending emission to `onTree`. `lastTree` is already fresh (the
+  // commit hook re-serializes synchronously), so `getTree()` never lags — this
+  // only fires the (coalesced) notification.
+  const flushEmit = (): void => {
+    if (!pendingEmit || disposed) return;
+    pendingEmit = false;
+    revision += 1;
+    options.callbacks.onTree(lastTree, revision);
+  };
+
+  // Runs synchronously on every commit: refresh `lastTree` immediately, then
+  // coalesce the `onTree` notification into ONE microtask (latest wins). A
+  // synchronous `flushEmit()` (after an event dispatch) drains it early.
+  const scheduleEmit = (): void => {
+    if (disposed) return;
+    lastTree = serialize();
+    pendingEmit = true;
+    const generation = ++commitGeneration;
+    queueMicrotask(() => {
+      if (generation !== commitGeneration) return;
+      flushEmit();
+    });
+  };
+
+  attach({ onCommit: scheduleEmit });
+
+  const root = reconciler.createContainer(
+    container,
+    ConcurrentRoot,
+    null,
+    false,
+    null,
+    "vhp",
+    (error: unknown) => {
+      // An uncaught error escaping the boundary (e.g. thrown in a passive
+      // effect, which boundaries don't catch): report it and emit the neutral
+      // error fallback so the host still gets a tree.
+      if (disposed) return;
+      options.callbacks.onError(error);
+      lastTree = { version: PANEL_TREE_VERSION, root: errorFallbackRoot() };
+      pendingEmit = true;
+      flushEmit();
+    },
+    () => {
+      // onCaughtError: the boundary already reports through componentDidCatch.
+    },
+    () => {
+      // onRecoverableError: hydration-only; unused here.
+    },
+    null,
+  );
+
+  const renderTree = (): void => {
+    const ctx = buildContext<P>(inputs, emitIntents);
+    // The definition is rendered as a component (not called eagerly) so it may
+    // use hooks. `wrap` lets a trusted host inject providers around it.
+    const definition = <PanelDefinitionHost render={options.render} ctx={ctx} />;
+    const wrapped = options.wrap ? options.wrap(definition) : definition;
+    const element = (
+      <PanelErrorBoundary onError={options.callbacks.onError}>
+        <PanelRuntimeProvider value={ctx}>{wrapped}</PanelRuntimeProvider>
+      </PanelErrorBoundary>
+    );
+    // Flush the render synchronously (initial mount and updates alike) so the
+    // committed tree is serialized on the same tick a host `update()` returns —
+    // a ConcurrentRoot would otherwise defer the mount to a later task.
+    reconciler.flushSyncFromReconciler(() => {
+      reconciler.updateContainer(element, root, null, null);
+    });
+  };
+
+  renderTree();
+  // Emit the first tree synchronously so `getTree()` is valid immediately and
+  // the host renders without waiting a microtask.
+  flushEmit();
+
+  const update = (next: PanelSessionInputs): void => {
+    if (disposed) return;
+    inputs = next;
+    renderTree();
+  };
+
+  const dispatchEvent = (
+    nodeId: number,
+    name: string,
+    args: ReadonlyArray<unknown>,
+  ): boolean => {
+    if (disposed) return false;
+    const instance = instances.get(nodeId);
+    if (instance === undefined) return false;
+    const handler = instance.props[name];
+    if (typeof handler !== "function") return false;
+
+    // Run the handler at discrete priority: `flushSyncFromReconciler` sets the
+    // update priority to Discrete, runs the handler (any `setState` schedules a
+    // sync update), then synchronously flushes all pending sync work before
+    // returning — so the commit (and its `scheduleEmit`) has already run.
+    reconciler.flushSyncFromReconciler(() => {
+      (handler as (...a: ReadonlyArray<unknown>) => void)(...args);
+    });
+    // Drain a still-pending emission synchronously so the resulting tree is
+    // observable via `onTree`/`getTree` before this returns.
+    flushEmit();
+    return true;
+  };
+
+  const getTree = (): PanelTree => lastTree;
+
+  const dispose = (): void => {
+    if (disposed) return;
+    disposed = true;
+    reconciler.updateContainer(null, root, null, null);
+    instances.clear();
+  };
+
+  return { update, dispatchEvent, getTree, dispose };
+};
diff --git a/libraries/paywalls/src/sandbox/component-message.ts b/libraries/paywalls/src/sandbox/component-message.ts
new file mode 100644
index 000000000..3619b0211
--- /dev/null
+++ b/libraries/paywalls/src/sandbox/component-message.ts
@@ -0,0 +1,41 @@
+/**
+ * Builds the component-description message the sandbox posts to the host after
+ * loading a compiled component. It carries the strict §2 {@link ComponentManifest}
+ * plus a sibling `hasPanel` boolean — whether the definition declared a custom
+ * editor panel (`defineComponent({ panel })`).
+ *
+ * `hasPanel` is deliberately kept OUT of {@link ComponentManifest} (the strict,
+ * server-validated wire contract): it is host-only preview metadata, read as a
+ * sibling of `manifest`, so adding it never widens the validated schema. A
+ * panel definition is a live function that never crosses the sandbox boundary;
+ * only this flag does, and the host then drives it through a panel session
+ * inside the sandbox.
+ */
+import type { ActionMap } from "../authoring/actions";
+import type { ComponentDefinition } from "../authoring/define-component";
+import { extractComponentManifest } from "../authoring/manifest";
+import type { PropMap } from "../authoring/props";
+import type { ComponentManifest } from "../schema/component-manifest";
+
+/** Whether a definition declared a custom editor panel. */
+export const definitionHasPanel = <M extends PropMap, A extends ActionMap>(
+  definition: ComponentDefinition<M, A>,
+): boolean => typeof definition.panel === "function";
+
+/** The manifest-plus-`hasPanel` message the sandbox posts alongside previews. */
+export interface ComponentDescription {
+  readonly manifest: ComponentManifest;
+  /** Sibling of `manifest`; NOT part of the strict manifest schema. */
+  readonly hasPanel: boolean;
+}
+
+/**
+ * Extracts the §2 manifest and the sibling `hasPanel` flag from a definition.
+ * The host posts this as the component-description message.
+ */
+export const describeComponent = <M extends PropMap, A extends ActionMap>(
+  definition: ComponentDefinition<M, A>,
+): ComponentDescription => ({
+  manifest: extractComponentManifest(definition),
+  hasPanel: definitionHasPanel(definition),
+});
diff --git a/libraries/paywalls/src/sandbox/host-data.ts b/libraries/paywalls/src/sandbox/host-data.ts
new file mode 100644
index 000000000..03f670e13
--- /dev/null
+++ b/libraries/paywalls/src/sandbox/host-data.ts
@@ -0,0 +1,49 @@
+/**
+ * The design-time host data a component renders against in the studio sandbox.
+ *
+ * This is the sandbox's fixture vocabulary: mock products plus presentation
+ * context (locale, platform, status). Preview states override it per
+ * `defineComponent({ previews: { <state>: { data } } })`. It is intentionally a
+ * simpler shape than the full runtime {@link PaywallRuntimeConfig} — the
+ * sandbox maps it into a runtime config before rendering.
+ */
+
+/**
+ * A resolved product as delivered to components in the studio preview. On a
+ * device the native SDK supplies richer {@link PaywallProduct} values; the
+ * sandbox mocks the fields authors commonly read.
+ */
+export interface SandboxProduct {
+  readonly id: string;
+  readonly displayName: string;
+  readonly priceString: string;
+  readonly trialPeriod?: string;
+}
+
+/** Author-configurable values the dashboard/experiments override at runtime. */
+export type SandboxVariables = Readonly<Record<string, string | number | boolean>>;
+
+/**
+ * Host data injected into a component render in the studio preview. Mock
+ * values, overridable per preview state via `defineComponent({ previews })`.
+ */
+export interface SandboxHostData {
+  readonly products: ReadonlyArray<SandboxProduct>;
+  readonly selectedProductId: string | null;
+  /** Author variables (`usePaywallVariables`), overridable per preview state. */
+  readonly variables: SandboxVariables;
+  readonly locale: string;
+  readonly platform: "ios" | "android" | "web";
+}
+
+/** Default mock host data used when a preview fixture supplies none. */
+export const defaultHostData = (): SandboxHostData => ({
+  locale: "en-US",
+  platform: "ios",
+  products: [
+    { displayName: "Yearly", id: "yearly", priceString: "$39.99", trialPeriod: "7 days" },
+    { displayName: "Monthly", id: "monthly", priceString: "$4.99" },
+  ],
+  selectedProductId: "yearly",
+  variables: {},
+});
diff --git a/libraries/paywalls/src/sandbox/index.tsx b/libraries/paywalls/src/sandbox/index.tsx
new file mode 100644
index 000000000..73435adc0
--- /dev/null
+++ b/libraries/paywalls/src/sandbox/index.tsx
@@ -0,0 +1,58 @@
+/**
+ * `@voidhash/paywalls/sandbox` — the studio's in-browser render surface.
+ *
+ * The studio bundles this entry (with react + react-reconciler + the author
+ * surface bundled IN) into a single IIFE global, evals it once inside a
+ * sandboxed iframe, then runs a compiled component (CJS) through a `require`
+ * shim that maps every module specifier the author could import onto a sub-
+ * object of {@link modules}. It renders each preview state to a §3 node tree
+ * via the real reconciler path — the same `renderToNodeTree` the CLI runs.
+ *
+ * The bundle IIFE (`dist/sandbox.global.js`) is produced by `build.ts`; the
+ * node-importable bundle text is `./sandbox-bundle` (a generated string) and
+ * the Monaco ambient types are `sandboxDts` (also generated, from the real
+ * `.d.ts`).
+ */
+import * as React from "react";
+import * as ReactJsxDevRuntime from "react/jsx-dev-runtime";
+import * as ReactJsxRuntime from "react/jsx-runtime";
+
+import * as authorSurface from "../index";
+import * as panelSurface from "../panel/index";
+
+export { extractComponentManifest } from "../authoring/manifest";
+// The panel authoring + session surface, so a future dedicated panel-sandbox
+// document can drive `createPanelSession` inside the same iframe global.
+export { createPanelSession, Panel } from "../panel/index";
+export {
+  type ComponentDescription,
+  definitionHasPanel,
+  describeComponent,
+} from "./component-message";
+export {
+  defaultHostData,
+  type SandboxHostData,
+  type SandboxProduct,
+  type SandboxVariables,
+} from "./host-data";
+export { renderComponentToTree, type RenderComponentInputs } from "./render-component";
+
+/**
+ * The module registry the sandbox `require` shim resolves against. Author code
+ * imports only these specifiers; the shim maps each to the matching sub-object
+ * so the iframe never loads real ES modules. `@voidhash/paywalls` and `react`
+ * alias to the same objects the author surface exposes (paywall primitives are
+ * real React), so a single shared React powers hooks and reconciliation.
+ */
+export const modules: Readonly<Record<string, unknown>> = {
+  "@voidhash/paywalls": authorSurface,
+  "@voidhash/paywalls/panel": panelSurface,
+  "@voidhash/paywalls/jsx-runtime": ReactJsxRuntime,
+  "@voidhash/paywalls/jsx-dev-runtime": ReactJsxDevRuntime,
+  react: React,
+  "react/jsx-runtime": ReactJsxRuntime,
+  "react/jsx-dev-runtime": ReactJsxDevRuntime,
+};
+
+/** The IIFE global name the sandbox bundle assigns its exports to. */
+export const SANDBOX_GLOBAL_NAME = "__VOIDHASH_PAYWALLS_SANDBOX__";
diff --git a/libraries/paywalls/src/sandbox/monaco-surface.ts b/libraries/paywalls/src/sandbox/monaco-surface.ts
new file mode 100644
index 000000000..169b40018
--- /dev/null
+++ b/libraries/paywalls/src/sandbox/monaco-surface.ts
@@ -0,0 +1,12 @@
+/**
+ * The exact author-facing surface Monaco type-checks component source against.
+ *
+ * It re-exports the `@voidhash/paywalls` `.` entry (everything a component may
+ * import) so `build.ts` can bundle a single self-contained `.d.ts` from it and
+ * post-process that into the `declare module "@voidhash/paywalls"` ambient
+ * `sandboxDts` string Monaco loads. Keeping this a thin re-export means the
+ * editor types are generated from the real API and never drift by hand.
+ *
+ * This module is never imported at runtime — it exists only as a dts entry.
+ */
+export * from "../index";
diff --git a/libraries/paywalls/src/sandbox/render-component.tsx b/libraries/paywalls/src/sandbox/render-component.tsx
new file mode 100644
index 000000000..411f7ba75
--- /dev/null
+++ b/libraries/paywalls/src/sandbox/render-component.tsx
@@ -0,0 +1,137 @@
+/**
+ * Component-level bridge between a {@link ComponentDefinition} and the §3
+ * preview node tree, built on the real react-reconciler `renderToNodeTree`.
+ *
+ * The studio sandbox calls {@link renderComponentToTree} once per preview
+ * state. Unlike a raw `renderToNodeTree(element)` call it also: resolves the
+ * definition's declared prop defaults, mocks `p.ref("product")` props from the
+ * supplied host data, maps the sandbox {@link SandboxHostData} fixture into a
+ * runtime config (so `usePaywallProducts` etc. resolve), and enforces the
+ * "at most one `<Slot/>`" contract by collapsing violations to a placeholder.
+ *
+ * Actions serialize with no extra wiring here: the component produced by
+ * `defineComponent` already brands its action callbacks (see
+ * `internal/action-brand.ts`), and the tree host records the branded name onto
+ * pressable nodes.
+ */
+import { createElement, type ReactNode } from "react";
+
+import type { ActionMap } from "../authoring/actions";
+import type { ComponentDefinition } from "../authoring/define-component";
+import type { PropMap } from "../authoring/props";
+import type { PaywallProduct, PaywallRuntimeConfig } from "../runtime/config";
+import { countSlotNodes } from "../schema/validate";
+import type { PaywallNode, PaywallNodeTree } from "../schema/node-tree";
+import { PAYWALL_TREE_VERSION } from "../schema/node-tree";
+import { renderToNodeTree } from "../tree-renderer/render-to-node-tree";
+import type { SandboxHostData, SandboxProduct } from "./host-data";
+import { defaultHostData } from "./host-data";
+
+/** Inputs one preview state renders with. Mirrors the studio sandbox protocol. */
+export interface RenderComponentInputs {
+  /** The preview-state name recorded on the emitted tree. */
+  readonly state: string;
+  /** Explicit prop values, merged over the definition's declared defaults. */
+  readonly props?: Record<string, unknown>;
+  /** Host data (mock products/status). Defaults to {@link defaultHostData}. */
+  readonly hostData?: SandboxHostData;
+}
+
+/**
+ * Maps a sandbox mock product onto the runtime {@link PaywallProduct} shape.
+ * A fixture may supply a full `PaywallProduct` (its `data.products` are typed
+ * as such), so any already-present runtime fields (`slug`, `price`, `period`,
+ * …) pass through; `slug` falls back to the id when the mock omits it.
+ */
+const toRuntimeProduct = (product: SandboxProduct): PaywallProduct => {
+  const extra = product as Partial<PaywallProduct>;
+  return {
+    ...extra,
+    id: product.id,
+    slug: extra.slug ?? product.id,
+    displayName: product.displayName,
+    priceString: product.priceString,
+    ...(product.trialPeriod !== undefined ? { trialPeriod: product.trialPeriod } : {}),
+  };
+};
+
+/** Lowers sandbox host data into the runtime config the paywall hooks read. */
+const toRuntimeConfig = (hostData: SandboxHostData): PaywallRuntimeConfig => ({
+  products: hostData.products.map(toRuntimeProduct),
+  variables: hostData.variables ?? {},
+  locale: hostData.locale,
+  platform: hostData.platform,
+  ...(hostData.selectedProductId != null
+    ? { defaultSelectedProductId: hostData.selectedProductId }
+    : {}),
+});
+
+/**
+ * Resolves the props passed to the component instance: declared defaults are
+ * filled, an unset `p.ref("product")` prop is mocked from the first host
+ * product (so product-driven previews render), and any extra provided props
+ * pass through untouched.
+ */
+const resolveProps = <M extends PropMap, A extends ActionMap>(
+  definition: ComponentDefinition<M, A>,
+  provided: Record<string, unknown> | undefined,
+  products: ReadonlyArray<PaywallProduct>,
+): Record<string, unknown> => {
+  const result: Record<string, unknown> = {};
+  for (const [name, builder] of Object.entries(definition.props)) {
+    const schema = builder.schema;
+    let value = provided?.[name];
+    if (value === undefined && schema.hasDefault) {
+      value = schema.defaultValue;
+    }
+    if (value === undefined && schema.kind === "ref" && schema.refType === "product") {
+      value = products[0];
+    }
+    if (value !== undefined) {
+      result[name] = value;
+    }
+  }
+  if (provided) {
+    for (const [key, value] of Object.entries(provided)) {
+      if (!(key in result)) {
+        result[key] = value;
+      }
+    }
+  }
+  return result;
+};
+
+const placeholderTree = (state: string, reason: string): PaywallNodeTree => ({
+  treeVersion: PAYWALL_TREE_VERSION,
+  state,
+  root: { type: "placeholder", reason },
+});
+
+/**
+ * Renders a component definition to a §3 preview node tree via the real
+ * reconciler render path. Async because `renderToNodeTree` mounts, flushes
+ * passive effects, and settles one macrotask before serializing.
+ *
+ * A render that produces more than one `<Slot/>` collapses to a placeholder
+ * (the contract allows at most one); everything else — a throwing render, an
+ * empty render — is already turned into a placeholder by `renderToNodeTree`.
+ */
+export const renderComponentToTree = async <M extends PropMap, A extends ActionMap>(
+  definition: ComponentDefinition<M, A>,
+  inputs: RenderComponentInputs,
+): Promise<PaywallNodeTree> => {
+  const hostData = inputs.hostData ?? defaultHostData();
+  const config = toRuntimeConfig(hostData);
+  const props = resolveProps(definition, inputs.props, config.products);
+
+  // Props are resolved dynamically (defaults + provided + product mocks), so
+  // the component is invoked through its untyped call signature.
+  const Component = definition.component as (props: Record<string, unknown>) => ReactNode;
+  const element = createElement(Component, props);
+  const tree = await renderToNodeTree(element, { config, state: inputs.state });
+
+  if (countSlotNodes(tree.root as PaywallNode) > 1) {
+    return placeholderTree(inputs.state, "a component may declare at most one <Slot />");
+  }
+  return tree;
+};
diff --git a/libraries/paywalls/src/schema/index.ts b/libraries/paywalls/src/schema/index.ts
new file mode 100644
index 000000000..ef00a3ac1
--- /dev/null
+++ b/libraries/paywalls/src/schema/index.ts
@@ -0,0 +1,129 @@
+/**
+ * `@voidhash/paywalls/schema` — the shared wire-format contract for paywall
+ * deploys: the §2 component manifest, §3 preview node tree, §3.1 style subset
+ * types, their version constants, and **dependency-free** runtime validators.
+ *
+ * This entry pulls in NO `react` and NO `effect`, so it is safe to import from
+ * a build tool, a server trust boundary, or a browser sandbox alike. The
+ * voidhash server's effect-Schema decoders mirror these validators exactly and
+ * a contract test locks the two together.
+ */
+export {
+  COMPONENT_MANIFEST_VERSION,
+  type ComponentManifest,
+  type ManifestAction,
+  type ManifestActionPayloadKind,
+  type ManifestArrayItem,
+  type ManifestArrayProp,
+  type ManifestBooleanProp,
+  type ManifestComponentProp,
+  type ManifestHostData,
+  type ManifestImageProp,
+  type ManifestNumberProp,
+  type ManifestProp,
+  type ManifestPropEditor,
+  type ManifestPropKind,
+  type ManifestRefProp,
+  type ManifestRefType,
+  type ManifestSelectProp,
+  type ManifestStringProp,
+} from "./component-manifest";
+export {
+  PAYWALL_TREE_VERSION,
+  type PaywallImageNode,
+  type PaywallNode,
+  type PaywallNodeResizeMode,
+  type PaywallNodeTree,
+  type PaywallPlaceholderNode,
+  type PaywallPressableNode,
+  type PaywallScrollNode,
+  type PaywallSlotNode,
+  type PaywallTextNode,
+  type PaywallViewNode,
+} from "./node-tree";
+export {
+  type ActionEditorFieldNode,
+  type AlignmentGridNode,
+  type ButtonNode,
+  type CalloutNode,
+  type ColorFieldNode,
+  type ColorPickerNode,
+  type ColumnNode,
+  type DefaultPropsNode,
+  type DimensionFieldNode,
+  type FieldNode,
+  type FillFieldNode,
+  type GradientStopsNode,
+  type IconName,
+  type ImageFieldNode,
+  type MenuNode,
+  PANEL_CAPS,
+  PANEL_ICON_NAME_LIST,
+  PANEL_NODE_SPECS,
+  PANEL_TREE_VERSION,
+  type PanelJsonValue,
+  type PanelNode,
+  type PanelNodeBase,
+  type PanelNodeSpec,
+  type PanelNodeType,
+  type PanelRootNode,
+  type PanelTree,
+  type PopoverContentNode,
+  type PopoverNode,
+  type PopoverTriggerNode,
+  type ProductFieldNode,
+  type PropFieldNode,
+  type ResetAffordanceNode,
+  type RowNode,
+  type SectionActionsNode,
+  type SectionNode,
+  type SelectFieldNode,
+  type SliderFieldNode,
+  type SubsectionNode,
+  type SwatchNode,
+  type SwitchFieldNode,
+  type TextFieldNode,
+  type TextNode,
+  type ToggleGroupNode,
+  type VariableFieldNode,
+} from "./panel-tree";
+export {
+  NODE_STYLE_ENTRIES,
+  STYLE_FIELD_TYPES,
+  type StyleFieldEntry,
+  type StyleFieldName,
+  type StyleFieldValue,
+  type StyleGradientValue,
+  type StyleImageValue,
+  type StyleValueDescriptor,
+  type StyleValueTypeOf,
+} from "./style-registry";
+export {
+  PAYWALL_STYLE_KEY_LIST,
+  type PaywallAlignItems,
+  type PaywallAlignSelf,
+  type PaywallBackgroundGradient,
+  type PaywallBackgroundImage,
+  type PaywallBackgroundType,
+  type PaywallDimension,
+  type PaywallFlexDirection,
+  type PaywallFontWeight,
+  type PaywallGradientStop,
+  type PaywallJustifyContent,
+  type PaywallStyle,
+  type StyleProp,
+} from "./style";
+export {
+  countSlotNodes,
+  DEPLOY_SLUG_PATTERN,
+  PAYWALL_STYLE_KEYS,
+  type ParseResult,
+  parseComponentManifest,
+  parsePreviewTree,
+  PREVIEW_STATE_PATTERN,
+} from "./validate";
+export {
+  PANEL_ICON_NAMES,
+  type ParsePanelResult,
+  parsePanelTree,
+} from "./validate-panel";
diff --git a/libraries/paywalls/src/schema/panel-tree.ts b/libraries/paywalls/src/schema/panel-tree.ts
new file mode 100644
index 000000000..34c7796d0
--- /dev/null
+++ b/libraries/paywalls/src/schema/panel-tree.ts
@@ -0,0 +1,706 @@
+/**
+ * The editor **PanelTree** wire format — the serializable description of a
+ * designer right-panel that a code component (or a built-in panel) renders.
+ *
+ * Author JS runs only inside a sandboxed iframe: a custom react-reconciler
+ * turns the author's panel component into this closed, JSON-safe tree and posts
+ * it to the host. The host (Studio designer) renders it with real kit
+ * components. **Functions never cross the boundary** — every interactive node
+ * carries an `events` array of the event names present on it, and the host
+ * addresses a fired event by `(nodeId, eventName)`. Only schema-validated data
+ * crosses back to the sandbox.
+ *
+ * This module is intentionally **dependency-free** (mirrors `node-tree.ts`): no
+ * `react`, no `effect`, type-only and self-contained, so it is safe to import
+ * from the sandbox, the host, or the server trust boundary alike. The closed
+ * vocabulary is expressed as data ({@link PANEL_NODE_SPECS}) so the
+ * dependency-free validator ({@link ../schema/validate-panel}) can enforce it
+ * without importing runtime.
+ */
+
+/** Wire version of the panel tree envelope. */
+export const PANEL_TREE_VERSION = 1 as const;
+
+/** A JSON-safe value: what may appear inside any panel node's `props`. */
+export type PanelJsonValue =
+  | null
+  | boolean
+  | number
+  | string
+  | ReadonlyArray<PanelJsonValue>
+  | { readonly [key: string]: PanelJsonValue };
+
+/**
+ * Resource caps for a serialized panel tree. The host and the validator reject
+ * a tree that exceeds any of these before it is rendered — a malicious or buggy
+ * author cannot exhaust host resources through the panel channel.
+ */
+export const PANEL_CAPS = {
+  /** Max serialized tree size, in bytes (256 KB). */
+  treeBytes: 262144,
+  /** Max total node count in a tree. */
+  nodes: 2000,
+  /** Max nesting depth (root = depth 1). */
+  depth: 32,
+  /** Max length of any string value inside `props`. */
+  stringLength: 4096,
+  /** Max options on a `selectField` / `toggleGroup` / `menu`. */
+  options: 256,
+  /** Max stops on a `gradientStops` composite. */
+  gradientStops: 64,
+  /** Max event names on a single node. */
+  eventsPerNode: 8,
+  /** Max serialized size of an event intent payload, in bytes (32 KB). */
+  intentBytes: 32768,
+} as const;
+
+/**
+ * The CLOSED set of icon tokens a panel may reference. The host maps each token
+ * to a concrete lucide (or letter-glyph) component; authors can never inject
+ * SVG or an arbitrary icon name. Derived from the tokens the built-in designer
+ * right-panel sections actually use, plus the letter glyphs (`w`, `h`, `a`)
+ * rendered as bold letters in dimension/typography inputs and the rotate/flip
+ * variants used by the fill and layout controls.
+ */
+export type IconName =
+  | "w"
+  | "h"
+  | "a"
+  | "plus"
+  | "minus"
+  | "x"
+  | "trash"
+  | "pencil"
+  | "search"
+  | "settings"
+  | "info"
+  | "alert"
+  | "image"
+  | "imagePlus"
+  | "pipette"
+  | "percent"
+  | "diamond"
+  | "square"
+  | "squareDashed"
+  | "squareRoundCorner"
+  | "squareRoundCornerTopLeft"
+  | "squareRoundCornerBottomLeft"
+  | "squareRoundCornerBottomRight"
+  | "squareDashedTopSolid"
+  | "squareDashedTopSolidLeft"
+  | "squareDashedTopSolidRight"
+  | "squareDashedTopSolidBottom"
+  | "type"
+  | "component"
+  | "code"
+  | "eye"
+  | "paintbrush"
+  | "chevronDown"
+  | "chevronRight"
+  | "chevronUp"
+  | "arrowDown"
+  | "arrowRight"
+  | "arrowUpCircle"
+  | "rotateCw"
+  | "rotateCcw"
+  | "flipHorizontal"
+  | "undo"
+  | "redo"
+  | "save"
+  | "fullscreen"
+  | "scan"
+  | "vault"
+  | "panelLeftDashed"
+  | "panelRightDashed"
+  | "panelTopDashed"
+  | "panelBottomDashed"
+  | "panelLeftRightDashed"
+  | "panelTopBottomDashed"
+  | "betweenHorizontalStart"
+  | "user"
+  | "users"
+  | "externalLink"
+  | "mousePointer";
+
+/** Every icon token as a runtime list; the validator derives its `Set` from it. */
+export const PANEL_ICON_NAME_LIST = [
+  "w",
+  "h",
+  "a",
+  "plus",
+  "minus",
+  "x",
+  "trash",
+  "pencil",
+  "search",
+  "settings",
+  "info",
+  "alert",
+  "image",
+  "imagePlus",
+  "pipette",
+  "percent",
+  "diamond",
+  "square",
+  "squareDashed",
+  "squareRoundCorner",
+  "squareRoundCornerTopLeft",
+  "squareRoundCornerBottomLeft",
+  "squareRoundCornerBottomRight",
+  "squareDashedTopSolid",
+  "squareDashedTopSolidLeft",
+  "squareDashedTopSolidRight",
+  "squareDashedTopSolidBottom",
+  "type",
+  "component",
+  "code",
+  "eye",
+  "paintbrush",
+  "chevronDown",
+  "chevronRight",
+  "chevronUp",
+  "arrowDown",
+  "arrowRight",
+  "arrowUpCircle",
+  "rotateCw",
+  "rotateCcw",
+  "flipHorizontal",
+  "undo",
+  "redo",
+  "save",
+  "fullscreen",
+  "scan",
+  "vault",
+  "panelLeftDashed",
+  "panelRightDashed",
+  "panelTopDashed",
+  "panelBottomDashed",
+  "panelLeftRightDashed",
+  "panelTopBottomDashed",
+  "betweenHorizontalStart",
+  "user",
+  "users",
+  "externalLink",
+  "mousePointer",
+] as const satisfies ReadonlyArray<IconName>;
+
+/**
+ * The base shape shared by every panel node: a discriminating string `type`, a
+ * reconciler instance `id` (a non-negative integer, unique in the tree, stable
+ * while the node is mounted), a per-type `props` bag of {@link PanelJsonValue}s,
+ * and the `events` present on the node (a subset of the type's event allowlist).
+ * Container types add `children`.
+ */
+export interface PanelNodeBase {
+  readonly type: string;
+  readonly id: number;
+  readonly props: { readonly [key: string]: PanelJsonValue };
+  readonly events: ReadonlyArray<string>;
+  readonly children?: ReadonlyArray<PanelNode>;
+}
+
+// =============================================================================
+// Chrome / layout
+// =============================================================================
+
+/** Root of a panel. Exactly one per tree; the only valid tree root. */
+export interface PanelRootNode extends PanelNodeBase {
+  readonly type: "panel";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/**
+ * A titled, host-collapsible section. `sectionActions` header affordances
+ * (+/−) live as a child node, not as props.
+ */
+export interface SectionNode extends PanelNodeBase {
+  readonly type: "section";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** Slot for a section header's +/− buttons; children are `button`s. */
+export interface SectionActionsNode extends PanelNodeBase {
+  readonly type: "sectionActions";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** A nested grouping inside a `section`. */
+export interface SubsectionNode extends PanelNodeBase {
+  readonly type: "subsection";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** A horizontal flow container. Gap/width come from a small token set. */
+export interface RowNode extends PanelNodeBase {
+  readonly type: "row";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** A vertical flow container. Gap/width come from a small token set. */
+export interface ColumnNode extends PanelNodeBase {
+  readonly type: "column";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** A labeled row: a `label`, an optional leading `icon`, and control children. */
+export interface FieldNode extends PanelNodeBase {
+  readonly type: "field";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** Static text with a small set of `variant` tokens. Childless. */
+export interface TextNode extends PanelNodeBase {
+  readonly type: "text";
+}
+
+/** A message banner with a `tone` token. Childless. */
+export interface CalloutNode extends PanelNodeBase {
+  readonly type: "callout";
+}
+
+/** A host-anchored Radix popover. `open` optional (controlled); `onOpenChange`. */
+export interface PopoverNode extends PanelNodeBase {
+  readonly type: "popover";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** The clickable anchor of a `popover`. */
+export interface PopoverTriggerNode extends PanelNodeBase {
+  readonly type: "popoverTrigger";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** The floating body of a `popover`. */
+export interface PopoverContentNode extends PanelNodeBase {
+  readonly type: "popoverContent";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+/** A dropdown menu of selectable `items`; fires `onSelect` with the value. */
+export interface MenuNode extends PanelNodeBase {
+  readonly type: "menu";
+}
+
+// =============================================================================
+// Controls
+// =============================================================================
+
+/**
+ * A text / number input. `kind` picks the mode; number kind adds `min`/`max`/
+ * `step`. `mixed` renders the multi-selection dash. `onChange` fires live,
+ * `onCommit` on blur/enter. An optional `trailingMenu` (line-height Auto/Fixed)
+ * fires `onTrailingSelect`.
+ */
+export interface TextFieldNode extends PanelNodeBase {
+  readonly type: "textField";
+}
+
+/** A single-select dropdown over `options` (`{value,label,icon?,disabled?}`). */
+export interface SelectFieldNode extends PanelNodeBase {
+  readonly type: "selectField";
+}
+
+/** A segmented control over `options` (`{value,label?,icon?}`); single value. */
+export interface ToggleGroupNode extends PanelNodeBase {
+  readonly type: "toggleGroup";
+}
+
+/** A boolean switch with optional `label`. */
+export interface SwitchFieldNode extends PanelNodeBase {
+  readonly type: "switchField";
+}
+
+/** A clickable button with `label`/`icon` and `variant`/`size` tokens. */
+export interface ButtonNode extends PanelNodeBase {
+  readonly type: "button";
+}
+
+/** A range slider; `onChange` live, `onCommit` on release. */
+export interface SliderFieldNode extends PanelNodeBase {
+  readonly type: "sliderField";
+}
+
+/** Wraps children with a host reset affordance shown when `show` is true. */
+export interface ResetAffordanceNode extends PanelNodeBase {
+  readonly type: "resetAffordance";
+  readonly children: ReadonlyArray<PanelNode>;
+}
+
+// =============================================================================
+// Composites (host-integrated designer widgets)
+// =============================================================================
+
+/** A color input (host `ColorInput`): value + gesture-aware change events. */
+export interface ColorFieldNode extends PanelNodeBase {
+  readonly type: "colorField";
+}
+
+/** An inline color picker body (host `ColorPickerContent`). */
+export interface ColorPickerNode extends PanelNodeBase {
+  readonly type: "colorPicker";
+}
+
+/** A gradient stop bar (host `GradientStopBar`) over `stops` + `selectedStopId`. */
+export interface GradientStopsNode extends PanelNodeBase {
+  readonly type: "gradientStops";
+}
+
+/** A small color/image preview chip. Childless. */
+export interface SwatchNode extends PanelNodeBase {
+  readonly type: "swatch";
+}
+
+/** An image field; the host owns the asset picker dialog. */
+export interface ImageFieldNode extends PanelNodeBase {
+  readonly type: "imageField";
+}
+
+/** A 3×3 flex alignment grid (host `FlexAlignmentInput`). */
+export interface AlignmentGridNode extends PanelNodeBase {
+  readonly type: "alignmentGrid";
+}
+
+/**
+ * A width/height dimension input incl. the fill/hug/custom menu. Mode
+ * derivation stays author-side; the wire carries `mode`/`value`/`label`/`mixed`
+ * plus events.
+ */
+export interface DimensionFieldNode extends PanelNodeBase {
+  readonly type: "dimensionField";
+}
+
+/** The fill row + fill editor popover as one composite (host fill widget). */
+export interface FillFieldNode extends PanelNodeBase {
+  readonly type: "fillField";
+}
+
+/**
+ * A variable binding editor (host `VariableInput`). The host emits a single
+ * change carrying the new `{type,value}` binding; `onBind`/`onUnbind`/`onCreate`
+ * are the addressable intents the host reduces that change to.
+ */
+export interface VariableFieldNode extends PanelNodeBase {
+  readonly type: "variableField";
+}
+
+/**
+ * An action editor whose `value` is a plain-JSON action object. `variables` /
+ * `productVariables` carry the selection-scoped variable lists the editor offers
+ * (serializable {@link LabeledVariable}-shaped objects), and `payloadFields`
+ * enables "From action payload" value sources when the emitting component action
+ * exposes payload fields.
+ */
+export interface ActionEditorFieldNode extends PanelNodeBase {
+  readonly type: "actionEditorField";
+}
+
+/**
+ * A literal product-value editor (host `ProductInput`): a searchable product
+ * combobox that resolves the org's products host-side. `onChange` fires with the
+ * picked product id (`""` when cleared). Purpose: editing a `product`-typed
+ * variable's literal value, where a raw text field would not resolve a product
+ * name.
+ */
+export interface ProductFieldNode extends PanelNodeBase {
+  readonly type: "productField";
+}
+
+/**
+ * Host-expanded full default row for a single component prop, addressed by
+ * `name`. Childless; the host expands it from the component manifest.
+ */
+export interface PropFieldNode extends PanelNodeBase {
+  readonly type: "propField";
+}
+
+/**
+ * Host-expanded whole auto-generated prop list, minus any names in `exclude`.
+ * Childless; the host expands it from the component manifest.
+ */
+export interface DefaultPropsNode extends PanelNodeBase {
+  readonly type: "defaultProps";
+}
+
+/** The closed union of every panel node in the v1 vocabulary. */
+export type PanelNode =
+  | PanelRootNode
+  | SectionNode
+  | SectionActionsNode
+  | SubsectionNode
+  | RowNode
+  | ColumnNode
+  | FieldNode
+  | TextNode
+  | CalloutNode
+  | PopoverNode
+  | PopoverTriggerNode
+  | PopoverContentNode
+  | MenuNode
+  | TextFieldNode
+  | SelectFieldNode
+  | ToggleGroupNode
+  | SwitchFieldNode
+  | ButtonNode
+  | SliderFieldNode
+  | ResetAffordanceNode
+  | ColorFieldNode
+  | ColorPickerNode
+  | GradientStopsNode
+  | SwatchNode
+  | ImageFieldNode
+  | AlignmentGridNode
+  | DimensionFieldNode
+  | FillFieldNode
+  | VariableFieldNode
+  | ActionEditorFieldNode
+  | ProductFieldNode
+  | PropFieldNode
+  | DefaultPropsNode;
+
+/** A serialized panel tree envelope (what the sandbox posts to the host). */
+export interface PanelTree {
+  readonly version: typeof PANEL_TREE_VERSION;
+  readonly root: PanelRootNode;
+}
+
+/**
+ * The closed v1 spec for one node type, consumed by the dependency-free
+ * validator: which `props` keys are allowed, which `events` names are allowed,
+ * and whether the type may carry `children`.
+ */
+export interface PanelNodeSpec {
+  readonly props: ReadonlyArray<string>;
+  readonly events: ReadonlyArray<string>;
+  readonly children: boolean;
+}
+
+/**
+ * The single source of truth for the v1 panel vocabulary. Each entry lists the
+ * closed set of prop KEYS and event names the node accepts and whether it takes
+ * children. Values inside `props` stay loosely typed as {@link PanelJsonValue}
+ * on the wire — the host enforces value-level shape when it renders — but the
+ * KEYS are closed here and the validator rejects anything outside them.
+ *
+ * Composite prop keys mirror the serializable subset of the corresponding host
+ * component's props (callbacks and ReactNodes are dropped; each callback
+ * becomes an entry in `events`).
+ */
+export const PANEL_NODE_SPECS = {
+  // ── Chrome / layout ────────────────────────────────────────────────────────
+  panel: {
+    props: [],
+    events: [],
+    children: true,
+  },
+  section: {
+    props: ["title", "collapsible", "defaultCollapsed"],
+    events: ["onToggle"],
+    children: true,
+  },
+  sectionActions: {
+    props: [],
+    events: [],
+    children: true,
+  },
+  subsection: {
+    props: ["title"],
+    events: [],
+    children: true,
+  },
+  row: {
+    props: ["gap", "width", "align", "justify"],
+    events: [],
+    children: true,
+  },
+  column: {
+    props: ["gap", "width", "align"],
+    events: [],
+    children: true,
+  },
+  field: {
+    props: ["label", "icon"],
+    events: [],
+    children: true,
+  },
+  text: {
+    props: ["content", "variant", "tone"],
+    events: [],
+    children: false,
+  },
+  callout: {
+    props: ["message", "tone"],
+    events: [],
+    children: false,
+  },
+  popover: {
+    props: ["open"],
+    events: ["onOpenChange"],
+    children: true,
+  },
+  popoverTrigger: {
+    props: [],
+    events: [],
+    children: true,
+  },
+  popoverContent: {
+    props: ["align", "side"],
+    events: [],
+    children: true,
+  },
+  menu: {
+    props: ["items", "value", "align"],
+    events: ["onSelect"],
+    children: false,
+  },
+
+  // ── Controls ───────────────────────────────────────────────────────────────
+  textField: {
+    props: [
+      "kind",
+      "value",
+      "mixed",
+      "placeholder",
+      "min",
+      "max",
+      "step",
+      "icon",
+      "disabled",
+      "trailingMenu",
+    ],
+    events: ["onChange", "onCommit", "onTrailingSelect"],
+    children: false,
+  },
+  selectField: {
+    props: ["value", "options", "placeholder", "mixed", "disabled"],
+    events: ["onChange"],
+    children: false,
+  },
+  toggleGroup: {
+    props: ["value", "options", "mixed", "disabled"],
+    events: ["onChange"],
+    children: false,
+  },
+  switchField: {
+    props: ["checked", "mixed", "label", "disabled"],
+    events: ["onChange"],
+    children: false,
+  },
+  button: {
+    props: ["label", "icon", "variant", "size", "disabled"],
+    events: ["onClick"],
+    children: false,
+  },
+  sliderField: {
+    props: ["value", "min", "max", "step", "mixed", "disabled"],
+    events: ["onChange", "onCommit"],
+    children: false,
+  },
+  resetAffordance: {
+    props: ["show", "label"],
+    events: ["onReset"],
+    children: true,
+  },
+
+  // ── Composites ─────────────────────────────────────────────────────────────
+  colorField: {
+    props: ["value", "mixed", "mixedLabel", "disabled"],
+    events: ["onChange", "onDragStart", "onCommit", "onDiscard"],
+    children: false,
+  },
+  colorPicker: {
+    props: ["color", "opacity"],
+    events: ["onColorChange", "onOpacityChange", "onDragStart", "onDragEnd", "onDiscard"],
+    children: false,
+  },
+  gradientStops: {
+    props: ["stops", "selectedStopId"],
+    events: [
+      "onSelect",
+      "onAddStop",
+      "onMoveStop",
+      "onRemoveStop",
+      "onDragStart",
+      "onDragEnd",
+      "onDiscard",
+    ],
+    children: false,
+  },
+  swatch: {
+    props: ["color", "imageUrl"],
+    events: [],
+    children: false,
+  },
+  imageField: {
+    props: ["url", "resizeMode"],
+    events: ["onPick", "onResizeModeChange", "onClear"],
+    children: false,
+  },
+  alignmentGrid: {
+    props: ["flexDirection", "alignItems", "justifyContent", "mixed"],
+    events: ["onChange"],
+    children: false,
+  },
+  dimensionField: {
+    props: ["axis", "mode", "value", "label", "mixed", "disabled", "computed"],
+    events: ["onChange", "onCommit", "onModeChange"],
+    children: false,
+  },
+  fillField: {
+    props: [
+      "label",
+      "backgroundType",
+      "isTypeMixed",
+      "backgroundColor",
+      "gradient",
+      "selectedStopIndex",
+      "image",
+      "open",
+    ],
+    events: [
+      "onTypeChange",
+      "onColorChange",
+      "onGradientChange",
+      "onStopColorChange",
+      "onStopPositionChange",
+      "onAddStop",
+      "onAddStopAt",
+      "onRemoveStop",
+      "onSelectStop",
+      "onImageUrlChange",
+      "onImageResizeModeChange",
+      "onGestureStart",
+      "onCommit",
+      "onDiscard",
+      "onOpenChange",
+    ],
+    children: false,
+  },
+  variableField: {
+    props: ["variableId", "variableName", "variableType", "allowedKinds", "label"],
+    events: ["onBind", "onUnbind", "onCreate"],
+    children: false,
+  },
+  actionEditorField: {
+    props: ["value", "variables", "productVariables", "payloadFields"],
+    events: ["onChange"],
+    children: false,
+  },
+  productField: {
+    props: ["productId", "placeholder", "disabled", "label"],
+    events: ["onChange"],
+    children: false,
+  },
+  propField: {
+    props: ["name"],
+    events: [],
+    children: false,
+  },
+  defaultProps: {
+    props: ["exclude"],
+    events: [],
+    children: false,
+  },
+} as const satisfies Record<string, PanelNodeSpec>;
+
+/** The literal union of every valid node `type`. */
+export type PanelNodeType = keyof typeof PANEL_NODE_SPECS;
diff --git a/libraries/paywalls/src/schema/style-registry.ts b/libraries/paywalls/src/schema/style-registry.ts
new file mode 100644
index 000000000..42d0ad9d2
--- /dev/null
+++ b/libraries/paywalls/src/schema/style-registry.ts
@@ -0,0 +1,529 @@
+/**
+ * The single source of truth for the paywall style vocabulary.
+ *
+ * Consumers derive their tables from the ordered lists + descriptors below so
+ * they can never drift apart or from this registry:
+ *
+ * - `./style.ts` derives {@link WIRE_STYLE_ORDER} → `PAYWALL_STYLE_KEY_LIST`,
+ *   the §3.1 deploy wire contract (the `PaywallStyle` type is locked against
+ *   this list in both directions, so a key can be added or removed in exactly
+ *   one place).
+ * - `../compose/grammar.ts` derives the per-node ordered lists →
+ *   `NODE_STYLE_VOCABULARY`, the printer-significant compose grammar (field
+ *   ORDER and default VALUES both change the printed source, so each is pinned
+ *   here).
+ * - `../compose/style-attr-types.ts` derives the precise static TS types of the
+ *   compose author surface (`<Screen>`/`<View>`/`<Text>` `style={{ … }}` objects), and
+ *   `../compose/generate-dts.ts` renders the same descriptors to the ambient
+ *   `.d.ts` strings Monaco loads — both from {@link STYLE_FIELD_TYPES}, so a
+ *   field's accepted value type is single-sourced too.
+ *
+ * The two sets are intentionally different: the compose grammar mirrors the
+ * closed mimic designer-document node schemas (which carry designer-only fields
+ * such as `x`/`y`, `backgroundEnabled`, `shadow*`, `safeArea*`, `display`),
+ * while the wire contract carries RN layout fields the grammar does not yet
+ * round-trip (`position`/`top`/`right`/`bottom`/`left`, `aspectRatio`,
+ * `flexWrap`, `fontStyle`, `textTransform`, `textDecorationLine`, `fontFamily`).
+ *
+ * This module has ZERO imports and pulls in no react/effect/mimic — it is safe
+ * to import from the dependency-free `./schema` entry and the mimic-free
+ * `../compose` grammar alike.
+ */
+
+/**
+ * A per-node style field with its printer default. `default` is omitted for the
+ * few fields that appear in a node's style vocabulary but carry no schema
+ * default (`minWidth`/`maxWidth`/`minHeight`/`maxHeight`/`flex`); their presence
+ * in the ordered list still fixes their printer position.
+ */
+export interface StyleFieldEntry {
+  readonly field: string;
+  readonly default?: unknown;
+}
+
+/**
+ * A runtime value-type descriptor for a style field. It is the single source
+ * that drives BOTH the static TS types of the compose author surface
+ * (`../compose/style-attr-types`) and the `.d.ts` strings the Monaco editor
+ * consumes (`../compose/generate-dts`). Descriptors are chosen to be at least as
+ * wide as the closed mimic node schema accepts (`packages/mimic-schema` style
+ * properties) — a too-narrow type would reject a legal document, so where a
+ * field is stored as a plain number in the schema but the §3.1 wire contract
+ * widens it (e.g. `gap`), the descriptor takes the wider form.
+ *
+ * - `number` — a numeric value (device-independent pixels, opacity, weight, …).
+ * - `color` — an RGBA color string (rendered as `string`; kept distinct so the
+ *   surface can be tightened later without touching call sites).
+ * - `string` — an arbitrary string (e.g. `fontFamily`).
+ * - `boolean` — a bare-flag boolean (`safeAreaTop`, `backgroundEnabled`, …).
+ * - `dimension` — `number | "auto"` (the closed `width`/`height`/`flexBasis`).
+ * - `enum` — one of a fixed set of string literals.
+ * - `gradient` / `image` — the structured background shapes.
+ */
+export type StyleValueDescriptor =
+  | { readonly kind: "number" }
+  | { readonly kind: "color" }
+  | { readonly kind: "string" }
+  | { readonly kind: "boolean" }
+  | { readonly kind: "dimension" }
+  | { readonly kind: "enum"; readonly values: readonly string[] }
+  | { readonly kind: "gradient" }
+  | { readonly kind: "image" };
+
+/**
+ * The value-type descriptor for every style field the compose grammar accepts,
+ * keyed by field name. A field name maps to ONE descriptor across all node types
+ * (verified against the mimic node schemas), so a single map is sufficient; the
+ * per-node entry lists reference these by field name. `width`/`height` take the
+ * `dimension` form because the `view` schema accepts `number | "auto"` — the
+ * `screen` schema stores plain numbers, so `dimension` is conservatively wide
+ * there (a legal screen width is still a number).
+ *
+ * ZERO imports: rendered to both TS types and d.ts strings downstream.
+ */
+export const STYLE_FIELD_TYPES = {
+  // Position (compose-only; plain numbers in the schema)
+  x: { kind: "number" },
+  y: { kind: "number" },
+
+  // Spacing
+  paddingTop: { kind: "number" },
+  paddingRight: { kind: "number" },
+  paddingBottom: { kind: "number" },
+  paddingLeft: { kind: "number" },
+  marginTop: { kind: "number" },
+  marginRight: { kind: "number" },
+  marginBottom: { kind: "number" },
+  marginLeft: { kind: "number" },
+  gap: { kind: "number" },
+
+  // Layout enums
+  justifyContent: {
+    kind: "enum",
+    values: [
+      "flex-start",
+      "center",
+      "flex-end",
+      "space-between",
+      "space-around",
+      "space-evenly",
+    ],
+  },
+  alignItems: {
+    kind: "enum",
+    values: ["flex-start", "center", "flex-end", "stretch", "baseline"],
+  },
+  flexDirection: { kind: "enum", values: ["row", "column"] },
+  alignSelf: {
+    kind: "enum",
+    values: ["auto", "flex-start", "center", "flex-end", "stretch", "baseline"],
+  },
+
+  // Flex child
+  flex: { kind: "number" },
+  flexGrow: { kind: "number" },
+  flexShrink: { kind: "number" },
+  flexBasis: { kind: "dimension" },
+
+  // Dimensions + constraints
+  width: { kind: "dimension" },
+  height: { kind: "dimension" },
+  minWidth: { kind: "number" },
+  maxWidth: { kind: "number" },
+  minHeight: { kind: "number" },
+  maxHeight: { kind: "number" },
+
+  // Background
+  backgroundColor: { kind: "color" },
+  backgroundEnabled: { kind: "boolean" },
+  backgroundType: { kind: "enum", values: ["solid", "gradient", "image"] },
+  backgroundGradient: { kind: "gradient" },
+  backgroundImage: { kind: "image" },
+
+  // Border
+  borderTopWidth: { kind: "number" },
+  borderRightWidth: { kind: "number" },
+  borderBottomWidth: { kind: "number" },
+  borderLeftWidth: { kind: "number" },
+  borderColor: { kind: "color" },
+  borderStyle: { kind: "enum", values: ["solid", "dashed", "dotted"] },
+  borderEnabled: { kind: "boolean" },
+  borderTopLeftRadius: { kind: "number" },
+  borderTopRightRadius: { kind: "number" },
+  borderBottomRightRadius: { kind: "number" },
+  borderBottomLeftRadius: { kind: "number" },
+
+  // Visual
+  opacity: { kind: "number" },
+  overflow: { kind: "enum", values: ["visible", "hidden", "scroll"] },
+  zIndex: { kind: "number" },
+  display: { kind: "enum", values: ["flex", "none"] },
+
+  // Shadow (compose-only)
+  shadowEnabled: { kind: "boolean" },
+  shadowColor: { kind: "color" },
+  shadowOffsetX: { kind: "number" },
+  shadowOffsetY: { kind: "number" },
+  shadowRadius: { kind: "number" },
+  shadowOpacity: { kind: "number" },
+
+  // Safe area (compose-only)
+  safeAreaTop: { kind: "boolean" },
+  safeAreaBottom: { kind: "boolean" },
+
+  // Typography (text)
+  fontSize: { kind: "number" },
+  fontWeight: {
+    kind: "enum",
+    values: ["100", "200", "300", "400", "500", "600", "700", "800", "900"],
+  },
+  color: { kind: "color" },
+  textAlign: { kind: "enum", values: ["left", "center", "right", "justify"] },
+  lineHeight: { kind: "number" },
+  letterSpacing: { kind: "number" },
+} as const satisfies Readonly<Record<string, StyleValueDescriptor>>;
+
+/** The set of style field names carrying a descriptor. */
+export type StyleFieldName = keyof typeof STYLE_FIELD_TYPES;
+
+/**
+ * The §3.1 wire-contract style keys, in `PaywallStyle` declaration order. This
+ * is the exact content and order `PAYWALL_STYLE_KEY_LIST` exposes.
+ */
+export const WIRE_STYLE_ORDER = [
+  "flex",
+  "flexDirection",
+  "alignItems",
+  "alignSelf",
+  "justifyContent",
+  "flexWrap",
+  "gap",
+  "flexGrow",
+  "flexShrink",
+  "flexBasis",
+  "width",
+  "height",
+  "minWidth",
+  "minHeight",
+  "maxWidth",
+  "maxHeight",
+  "paddingTop",
+  "paddingBottom",
+  "paddingLeft",
+  "paddingRight",
+  "marginTop",
+  "marginBottom",
+  "marginLeft",
+  "marginRight",
+  "aspectRatio",
+  "borderTopWidth",
+  "borderRightWidth",
+  "borderBottomWidth",
+  "borderLeftWidth",
+  "borderColor",
+  "borderTopLeftRadius",
+  "borderTopRightRadius",
+  "borderBottomLeftRadius",
+  "borderBottomRightRadius",
+  "borderStyle",
+  "backgroundColor",
+  "backgroundType",
+  "backgroundGradient",
+  "backgroundImage",
+  "opacity",
+  "overflow",
+  "position",
+  "top",
+  "right",
+  "bottom",
+  "left",
+  "zIndex",
+  "color",
+  "fontSize",
+  "fontWeight",
+  "fontStyle",
+  "lineHeight",
+  "letterSpacing",
+  "textAlign",
+  "textTransform",
+  "textDecorationLine",
+  "fontFamily",
+] as const;
+
+/** The wire-contract style key type, derived from {@link WIRE_STYLE_ORDER}. */
+export type WireStyleKey = (typeof WIRE_STYLE_ORDER)[number];
+
+/**
+ * The canonical designer gradient default shared by the screen and view node
+ * schemas (a top-to-bottom white→transparent linear gradient).
+ */
+const DEFAULT_GRADIENT = {
+  kind: "linear",
+  startX: 0.5,
+  startY: 0,
+  endX: 0.5,
+  endY: 1,
+  stops: [
+    { color: "rgba(255, 255, 255, 1)", position: 0 },
+    { color: "rgba(255, 255, 255, 0)", position: 1 },
+  ],
+} as const;
+
+/** The canonical designer image-background default (empty, cover). */
+const DEFAULT_IMAGE = { url: "", resizeMode: "cover" } as const;
+
+/**
+ * The `screen` node style vocabulary, in mimic-schema field order with per-field
+ * defaults. The order and defaults are printer-significant (see the module doc).
+ */
+export const SCREEN_STYLE_ENTRIES = [
+  { field: "x", default: 0 },
+  { field: "y", default: 0 },
+  { field: "width", default: 375 },
+  { field: "height", default: 812 },
+  { field: "minWidth" },
+  { field: "maxWidth" },
+  { field: "minHeight" },
+  { field: "maxHeight" },
+  { field: "paddingTop", default: 0 },
+  { field: "paddingRight", default: 0 },
+  { field: "paddingBottom", default: 0 },
+  { field: "paddingLeft", default: 0 },
+  { field: "marginTop", default: 0 },
+  { field: "marginRight", default: 0 },
+  { field: "marginBottom", default: 0 },
+  { field: "marginLeft", default: 0 },
+  { field: "gap", default: 0 },
+  { field: "justifyContent", default: "flex-start" },
+  { field: "alignItems", default: "flex-start" },
+  { field: "flexDirection", default: "column" },
+  { field: "backgroundColor", default: "rgba(255, 255, 255, 1)" },
+  { field: "backgroundEnabled", default: true },
+  { field: "backgroundType", default: "solid" },
+  { field: "backgroundGradient", default: DEFAULT_GRADIENT },
+  { field: "backgroundImage", default: DEFAULT_IMAGE },
+  { field: "borderTopWidth", default: 0 },
+  { field: "borderRightWidth", default: 0 },
+  { field: "borderBottomWidth", default: 0 },
+  { field: "borderLeftWidth", default: 0 },
+  { field: "borderColor", default: "rgba(0, 0, 0, 1)" },
+  { field: "borderStyle", default: "solid" },
+  { field: "borderEnabled", default: false },
+  { field: "opacity", default: 1 },
+  { field: "overflow", default: "visible" },
+  { field: "zIndex", default: 0 },
+  { field: "display", default: "flex" },
+  { field: "shadowEnabled", default: false },
+  { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
+  { field: "shadowOffsetX", default: 0 },
+  { field: "shadowOffsetY", default: 0 },
+  { field: "shadowRadius", default: 0 },
+  { field: "shadowOpacity", default: 1 },
+  { field: "safeAreaTop", default: false },
+  { field: "safeAreaBottom", default: false },
+  { field: "flex" },
+  { field: "flexGrow", default: 0 },
+  { field: "flexShrink", default: 1 },
+  { field: "flexBasis", default: "auto" },
+  { field: "alignSelf", default: "auto" },
+] as const satisfies readonly StyleFieldEntry[];
+
+/**
+ * The `view` node style vocabulary, in mimic-schema field order with per-field
+ * defaults. Order and defaults are printer-significant.
+ */
+export const VIEW_STYLE_ENTRIES = [
+  { field: "paddingTop", default: 0 },
+  { field: "paddingRight", default: 0 },
+  { field: "paddingBottom", default: 0 },
+  { field: "paddingLeft", default: 0 },
+  { field: "marginTop", default: 0 },
+  { field: "marginRight", default: 0 },
+  { field: "marginBottom", default: 0 },
+  { field: "marginLeft", default: 0 },
+  { field: "gap", default: 0 },
+  { field: "justifyContent", default: "flex-start" },
+  { field: "alignItems", default: "flex-start" },
+  { field: "flexDirection", default: "column" },
+  { field: "width", default: 100 },
+  { field: "height", default: 100 },
+  { field: "minWidth" },
+  { field: "maxWidth" },
+  { field: "minHeight" },
+  { field: "maxHeight" },
+  { field: "backgroundColor", default: "rgba(255, 255, 255, 1)" },
+  { field: "backgroundEnabled", default: false },
+  { field: "backgroundType", default: "solid" },
+  { field: "backgroundGradient", default: DEFAULT_GRADIENT },
+  { field: "backgroundImage", default: DEFAULT_IMAGE },
+  { field: "borderTopWidth", default: 0 },
+  { field: "borderRightWidth", default: 0 },
+  { field: "borderBottomWidth", default: 0 },
+  { field: "borderLeftWidth", default: 0 },
+  { field: "borderColor", default: "rgba(0, 0, 0, 1)" },
+  { field: "borderStyle", default: "solid" },
+  { field: "borderEnabled", default: false },
+  { field: "borderTopLeftRadius", default: 0 },
+  { field: "borderTopRightRadius", default: 0 },
+  { field: "borderBottomRightRadius", default: 0 },
+  { field: "borderBottomLeftRadius", default: 0 },
+  { field: "opacity", default: 1 },
+  { field: "overflow", default: "visible" },
+  { field: "zIndex", default: 0 },
+  { field: "display", default: "flex" },
+  { field: "shadowEnabled", default: false },
+  { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
+  { field: "shadowOffsetX", default: 0 },
+  { field: "shadowOffsetY", default: 0 },
+  { field: "shadowRadius", default: 0 },
+  { field: "shadowOpacity", default: 1 },
+  { field: "safeAreaTop", default: false },
+  { field: "safeAreaBottom", default: false },
+  { field: "flex" },
+  { field: "flexGrow", default: 0 },
+  { field: "flexShrink", default: 1 },
+  { field: "flexBasis", default: "auto" },
+  { field: "alignSelf", default: "auto" },
+] as const satisfies readonly StyleFieldEntry[];
+
+/**
+ * The `text` node style vocabulary, in mimic-schema field order with per-field
+ * defaults. Order and defaults are printer-significant.
+ */
+export const TEXT_STYLE_ENTRIES = [
+  { field: "marginTop", default: 0 },
+  { field: "marginRight", default: 0 },
+  { field: "marginBottom", default: 0 },
+  { field: "marginLeft", default: 0 },
+  { field: "minWidth" },
+  { field: "maxWidth" },
+  { field: "minHeight" },
+  { field: "maxHeight" },
+  { field: "fontSize", default: 16 },
+  { field: "fontWeight", default: "400" },
+  { field: "color", default: "rgba(0, 0, 0, 1)" },
+  { field: "textAlign", default: "left" },
+  { field: "lineHeight", default: 1.5 },
+  { field: "letterSpacing", default: 0 },
+  { field: "borderTopWidth", default: 0 },
+  { field: "borderRightWidth", default: 0 },
+  { field: "borderBottomWidth", default: 0 },
+  { field: "borderLeftWidth", default: 0 },
+  { field: "borderColor", default: "rgba(0, 0, 0, 1)" },
+  { field: "borderStyle", default: "solid" },
+  { field: "borderEnabled", default: false },
+  { field: "opacity", default: 1 },
+  { field: "overflow", default: "visible" },
+  { field: "zIndex", default: 0 },
+  { field: "display", default: "flex" },
+  { field: "shadowEnabled", default: false },
+  { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
+  { field: "shadowOffsetX", default: 0 },
+  { field: "shadowOffsetY", default: 0 },
+  { field: "shadowRadius", default: 0 },
+  { field: "shadowOpacity", default: 1 },
+  { field: "flex" },
+  { field: "flexGrow", default: 0 },
+  { field: "flexShrink", default: 1 },
+  { field: "flexBasis", default: "auto" },
+  { field: "alignSelf", default: "auto" },
+] as const satisfies readonly StyleFieldEntry[];
+
+/** The per-node ordered style-field registries, keyed by composition node type. */
+export const NODE_STYLE_ENTRIES = {
+  screen: SCREEN_STYLE_ENTRIES,
+  view: VIEW_STYLE_ENTRIES,
+  text: TEXT_STYLE_ENTRIES,
+} as const;
+
+/** The default display name emitted for each composition node type. */
+export const NODE_DEFAULT_NAMES = {
+  screen: "Screen",
+  view: "View",
+  text: "Text",
+} as const;
+
+// ---- descriptor → static type derivation --------------------------------
+
+/**
+ * The structured gradient background value shape (mirrors the mimic
+ * `backgroundGradient` schema). Exposed for the compose author surface so a
+ * `backgroundGradient={…}` attribute type-checks against the real shape.
+ */
+export interface StyleGradientValue {
+  readonly kind: "linear" | "radial";
+  readonly startX: number;
+  readonly startY: number;
+  readonly endX: number;
+  readonly endY: number;
+  readonly stops: readonly { readonly color: string; readonly position: number }[];
+}
+
+/** The structured image background value shape (mirrors the mimic schema). */
+export interface StyleImageValue {
+  readonly url: string;
+  readonly resizeMode: "cover" | "contain" | "stretch" | "center";
+}
+
+/** Map a value-type descriptor to the static TS type it accepts. */
+export type StyleValueTypeOf<D extends StyleValueDescriptor> = D extends { kind: "number" }
+  ? number
+  : D extends { kind: "color" }
+    ? string
+    : D extends { kind: "string" }
+      ? string
+      : D extends { kind: "boolean" }
+        ? boolean
+        : D extends { kind: "dimension" }
+          ? number | "auto"
+          : D extends { kind: "enum"; values: readonly (infer V)[] }
+            ? V
+            : D extends { kind: "gradient" }
+              ? StyleGradientValue
+              : D extends { kind: "image" }
+                ? StyleImageValue
+                : never;
+
+/** The accepted static value type for a style field, by field name. */
+export type StyleFieldValue<K extends StyleFieldName> = StyleValueTypeOf<(typeof STYLE_FIELD_TYPES)[K]>;
+
+// ---- compile-time locks --------------------------------------------------
+
+/** Resolves to `T` only when it is exactly `true`; forces a compile error otherwise. */
+type AssertTrue<T extends true> = T;
+
+/**
+ * Every field named in the per-node entry lists must carry a descriptor in
+ * {@link STYLE_FIELD_TYPES}; otherwise the compose author surface would have no
+ * type for it. This resolves to `true` only when the union of all entry field
+ * names is a subset of the descriptor key set.
+ */
+type _AllEntryFieldsHaveDescriptor = AssertTrue<
+  (typeof NODE_STYLE_ENTRIES)[keyof typeof NODE_STYLE_ENTRIES][number]["field"] extends StyleFieldName
+    ? true
+    : false
+>;
+
+/**
+ * Every per-field `default` in the entry lists must satisfy that field's own
+ * descriptor-derived type, so the registry can never ship a default the author
+ * surface would reject. `EntryDefaultOk` is `true` for an entry with no default
+ * (its type-position is fixed but it carries no value) or one whose default is
+ * assignable to {@link StyleFieldValue}. Distributing over the entry union and
+ * requiring the whole distribution to be exactly `true` fails the assert if any
+ * single entry's default is off.
+ */
+type EntryDefaultOk<E> = E extends { field: infer F; default: infer D }
+  ? F extends StyleFieldName
+    ? D extends StyleFieldValue<F>
+      ? true
+      : false
+    : false
+  : true;
+type AllEntries = (typeof NODE_STYLE_ENTRIES)[keyof typeof NODE_STYLE_ENTRIES][number];
+type _AllDefaultsSatisfyDescriptor = AssertTrue<
+  EntryDefaultOk<AllEntries> extends true ? true : false
+>;
+
+// Force tsc to evaluate the locks (unused type aliases are otherwise erased).
+export type _StyleRegistryLocks = [_AllEntryFieldsHaveDescriptor, _AllDefaultsSatisfyDescriptor];
diff --git a/libraries/paywalls/src/schema/style.ts b/libraries/paywalls/src/schema/style.ts
index 81595f3ab..e34752e1f 100644
--- a/libraries/paywalls/src/schema/style.ts
+++ b/libraries/paywalls/src/schema/style.ts
@@ -4,7 +4,14 @@
  * `React.CSSProperties`) on primitive props enforces the subset at compile
  * time, so authored paywalls stay renderable on the DOM today and on native
  * views later.
+ *
+ * The {@link PaywallStyle} interface is hand-written for documentation and DX,
+ * but its key set is single-sourced from `./style-registry`: {@link
+ * PAYWALL_STYLE_KEY_LIST} is derived from `WIRE_STYLE_ORDER`, and the two
+ * compile-time locks at the bottom of this file fail `tsc` if the interface and
+ * the registry's wire-field set drift in either direction.
  */
+import { WIRE_STYLE_ORDER, type WireStyleKey } from "./style-registry";
 
 /** A length value: device-independent pixels or a string (e.g. `"50%"`). */
 export type PaywallDimension = number | string;
@@ -23,6 +30,36 @@ export type PaywallJustifyContent =
   | "space-around"
   | "space-evenly";
 
+/** Which background fill a node renders. `backgroundEnabled` gates all three. */
+export type PaywallBackgroundType = "solid" | "gradient" | "image";
+
+/** A single gradient color stop: an RGBA color at a `0..1` position along the line. */
+export interface PaywallGradientStop {
+  color: string;
+  position: number;
+}
+
+/**
+ * A gradient background. Geometry is a two-point line in normalized node space
+ * (`0..1` typical, not clamped): `start` → `end`. Maps directly onto
+ * expo-linear-gradient `start`/`end` on native; a radial gradient's radius is
+ * the euclidean distance from start to end.
+ */
+export interface PaywallBackgroundGradient {
+  kind: "linear" | "radial";
+  startX: number;
+  startY: number;
+  endX: number;
+  endY: number;
+  stops: PaywallGradientStop[];
+}
+
+/** An image background. An empty `url` renders as transparent. */
+export interface PaywallBackgroundImage {
+  url: string;
+  resizeMode: "cover" | "contain" | "stretch" | "center";
+}
+
 export type PaywallFontWeight =
   | number
   | "normal"
@@ -51,8 +88,6 @@ export interface PaywallStyle {
   justifyContent?: PaywallJustifyContent;
   flexWrap?: "wrap" | "nowrap" | "wrap-reverse";
   gap?: PaywallDimension;
-  rowGap?: PaywallDimension;
-  columnGap?: PaywallDimension;
   flexGrow?: number;
   flexShrink?: number;
   flexBasis?: PaywallDimension;
@@ -64,26 +99,22 @@ export interface PaywallStyle {
   minHeight?: PaywallDimension;
   maxWidth?: PaywallDimension;
   maxHeight?: PaywallDimension;
-  padding?: PaywallDimension;
   paddingTop?: PaywallDimension;
   paddingBottom?: PaywallDimension;
   paddingLeft?: PaywallDimension;
   paddingRight?: PaywallDimension;
-  paddingHorizontal?: PaywallDimension;
-  paddingVertical?: PaywallDimension;
-  margin?: PaywallDimension;
   marginTop?: PaywallDimension;
   marginBottom?: PaywallDimension;
   marginLeft?: PaywallDimension;
   marginRight?: PaywallDimension;
-  marginHorizontal?: PaywallDimension;
-  marginVertical?: PaywallDimension;
   aspectRatio?: number | string;
 
   // Border
-  borderWidth?: number;
+  borderTopWidth?: number;
+  borderRightWidth?: number;
+  borderBottomWidth?: number;
+  borderLeftWidth?: number;
   borderColor?: string;
-  borderRadius?: number;
   borderTopLeftRadius?: number;
   borderTopRightRadius?: number;
   borderBottomLeftRadius?: number;
@@ -92,6 +123,9 @@ export interface PaywallStyle {
 
   // Visual
   backgroundColor?: string;
+  backgroundType?: PaywallBackgroundType;
+  backgroundGradient?: PaywallBackgroundGradient;
+  backgroundImage?: PaywallBackgroundImage;
   opacity?: number;
   overflow?: "visible" | "hidden" | "scroll";
 
@@ -117,73 +151,16 @@ export interface PaywallStyle {
 }
 
 /**
- * Every key allowed by the §3.1 subset, as a runtime value. The tree renderer
- * filters serialized styles down to this list so an out-of-contract key (e.g.
- * smuggled in through a cast) never reaches a preview tree the server would
- * reject.
+ * The §3.1 style vocabulary as a runtime list, single-sourced from the
+ * `./style-registry` `WIRE_STYLE_ORDER` (content AND order). The two locks below
+ * tie it to the {@link PaywallStyle} type in both directions — a key added to or
+ * removed from either side fails to compile. The `./schema` entry derives its
+ * {@link PAYWALL_STYLE_KEYS} `Set` from this list so the runtime key set and the
+ * type never drift, and the tree renderer filters serialized styles down to
+ * these keys so an out-of-contract key (e.g. smuggled in through a cast) never
+ * reaches a preview tree the server would reject.
  */
-export const PAYWALL_STYLE_KEYS = [
-  "flex",
-  "flexDirection",
-  "alignItems",
-  "alignSelf",
-  "justifyContent",
-  "flexWrap",
-  "gap",
-  "rowGap",
-  "columnGap",
-  "flexGrow",
-  "flexShrink",
-  "flexBasis",
-  "width",
-  "height",
-  "minWidth",
-  "minHeight",
-  "maxWidth",
-  "maxHeight",
-  "padding",
-  "paddingTop",
-  "paddingBottom",
-  "paddingLeft",
-  "paddingRight",
-  "paddingHorizontal",
-  "paddingVertical",
-  "margin",
-  "marginTop",
-  "marginBottom",
-  "marginLeft",
-  "marginRight",
-  "marginHorizontal",
-  "marginVertical",
-  "aspectRatio",
-  "borderWidth",
-  "borderColor",
-  "borderRadius",
-  "borderTopLeftRadius",
-  "borderTopRightRadius",
-  "borderBottomLeftRadius",
-  "borderBottomRightRadius",
-  "borderStyle",
-  "backgroundColor",
-  "opacity",
-  "overflow",
-  "position",
-  "top",
-  "right",
-  "bottom",
-  "left",
-  "zIndex",
-  "color",
-  "fontSize",
-  "fontWeight",
-  "fontStyle",
-  "lineHeight",
-  "letterSpacing",
-  "textAlign",
-  "textTransform",
-  "textDecorationLine",
-  "fontFamily",
-] as const satisfies ReadonlyArray<keyof PaywallStyle>;
+export const PAYWALL_STYLE_KEY_LIST = WIRE_STYLE_ORDER;
 
 /**
  * A style prop may be a single object, a (possibly nested) array of objects,
@@ -191,3 +168,20 @@ export const PAYWALL_STYLE_KEYS = [
  * ignored so `style={[base, condition && override]}` works as expected.
  */
 export type StyleProp = PaywallStyle | false | null | undefined | ReadonlyArray<StyleProp>;
+
+// Bidirectional compile-time lock between the hand-written PaywallStyle
+// interface and the registry's wire-field set. `AssertKeysEqual<A, B>` resolves
+// to `never` (a type error where used) unless A and B are the exact same key
+// set: the first mapped type surfaces a key present in A but missing from B, the
+// second the reverse. Assigning the result to a `[]` const forces tsc to
+// evaluate it, so a key added to or dropped from EITHER the interface or
+// `WIRE_STYLE_ORDER` (without matching the other) fails the build here.
+type MissingKeys<From, In> = { [K in keyof From]: K extends In ? never : K }[keyof From];
+type AssertKeysEqual<A, B> = MissingKeys<A, B> extends never
+  ? MissingKeys<Record<B & PropertyKey, unknown>, keyof A> extends never
+    ? true
+    : never
+  : never;
+
+const _wireMatchesInterface: AssertKeysEqual<Required<PaywallStyle>, WireStyleKey> = true;
+void _wireMatchesInterface;
diff --git a/libraries/paywalls/src/schema/validate-panel.ts b/libraries/paywalls/src/schema/validate-panel.ts
new file mode 100644
index 000000000..f19f46172
--- /dev/null
+++ b/libraries/paywalls/src/schema/validate-panel.ts
@@ -0,0 +1,242 @@
+/**
+ * Dependency-free runtime validator for the editor {@link PanelTree} wire
+ * format. Mirrors {@link parsePreviewTree} in `./validate` — same result shape,
+ * same strictness discipline, no `effect`, no `react`.
+ *
+ * The panel channel is a trust boundary: author JS produces this tree inside a
+ * sandbox and the host renders it with real components. Everything outside the
+ * closed v1 vocabulary is rejected — unknown node types, unknown prop keys per
+ * type, event names outside a type's allowlist, children on childless types,
+ * duplicate or malformed `id`s, and any resource cap in {@link PANEL_CAPS}.
+ */
+import {
+  PANEL_CAPS,
+  PANEL_ICON_NAME_LIST,
+  PANEL_NODE_SPECS,
+  PANEL_TREE_VERSION,
+  type PanelTree,
+} from "./panel-tree";
+
+/** Discriminated result of {@link parsePanelTree}. */
+export type ParsePanelResult =
+  | { readonly ok: true; readonly tree: PanelTree }
+  | { readonly ok: false; readonly error: string };
+
+/** Icon tokens as a runtime `Set`, single-sourced from {@link PANEL_ICON_NAME_LIST}. */
+export const PANEL_ICON_NAMES: ReadonlySet<string> = new Set(PANEL_ICON_NAME_LIST);
+
+const isPlainObject = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null && !Array.isArray(value);
+
+/** Per-type allowed prop-key sets, derived from {@link PANEL_NODE_SPECS}. */
+const NODE_PROP_KEYS: Record<string, ReadonlySet<string>> = Object.fromEntries(
+  Object.entries(PANEL_NODE_SPECS).map(([type, spec]) => [type, new Set(spec.props)]),
+);
+
+/** Per-type allowed event-name sets, derived from {@link PANEL_NODE_SPECS}. */
+const NODE_EVENT_NAMES: Record<string, ReadonlySet<string>> = Object.fromEntries(
+  Object.entries(PANEL_NODE_SPECS).map(([type, spec]) => [type, new Set(spec.events)]),
+);
+
+/**
+ * Recursively checks any nested `props` value against the string-length,
+ * options-count, and gradient-stops caps. `keyForCap` names the array key that
+ * carries an options/stops cap so nested arrays under it are counted.
+ */
+const checkValueCaps = (value: unknown, path: string, keyForCap: string | null): string | null => {
+  if (typeof value === "string") {
+    if (value.length > PANEL_CAPS.stringLength) {
+      return `${path} string exceeds ${PANEL_CAPS.stringLength} chars`;
+    }
+    return null;
+  }
+  if (Array.isArray(value)) {
+    if (keyForCap === "options" && value.length > PANEL_CAPS.options) {
+      return `${path} exceeds ${PANEL_CAPS.options} options`;
+    }
+    if (keyForCap === "stops" && value.length > PANEL_CAPS.gradientStops) {
+      return `${path} exceeds ${PANEL_CAPS.gradientStops} gradient stops`;
+    }
+    for (let i = 0; i < value.length; i++) {
+      const error = checkValueCaps(value[i], `${path}[${i}]`, keyForCap);
+      if (error !== null) return error;
+    }
+    return null;
+  }
+  if (isPlainObject(value)) {
+    for (const [key, child] of Object.entries(value)) {
+      const error = checkValueCaps(child, `${path}.${key}`, key);
+      if (error !== null) return error;
+    }
+    return null;
+  }
+  return null;
+};
+
+/**
+ * Validates one node in place, threading `depth`, the running node `count`, and
+ * the set of ids seen so far. Returns the first error message, or `null`.
+ */
+const validateNode = (
+  node: unknown,
+  path: string,
+  depth: number,
+  state: { count: number; readonly ids: Set<number> },
+): string | null => {
+  if (depth > PANEL_CAPS.depth) {
+    return `${path} exceeds max depth ${PANEL_CAPS.depth}`;
+  }
+  if (!isPlainObject(node)) {
+    return `${path} must be an object`;
+  }
+
+  state.count += 1;
+  if (state.count > PANEL_CAPS.nodes) {
+    return `tree exceeds ${PANEL_CAPS.nodes} nodes`;
+  }
+
+  const type = node.type;
+  if (typeof type !== "string" || !(type in PANEL_NODE_SPECS)) {
+    return `${path}.type "${String(type)}" is not a known panel node type`;
+  }
+  const spec = PANEL_NODE_SPECS[type as keyof typeof PANEL_NODE_SPECS];
+
+  const { id } = node;
+  if (typeof id !== "number" || !Number.isInteger(id) || id < 0) {
+    return `${path}.id must be a non-negative integer`;
+  }
+  if (state.ids.has(id)) {
+    return `${path}.id ${id} is duplicated`;
+  }
+  state.ids.add(id);
+
+  const allowedTopKeys = new Set(["type", "id", "props", "events", "children"]);
+  for (const key of Object.keys(node)) {
+    if (!allowedTopKeys.has(key)) {
+      return `${path} (${type}) has unknown key "${key}"`;
+    }
+  }
+
+  // props
+  if (!isPlainObject(node.props)) {
+    return `${path}.props must be an object`;
+  }
+  const allowedProps = NODE_PROP_KEYS[type]!;
+  for (const [key, value] of Object.entries(node.props)) {
+    if (!allowedProps.has(key)) {
+      return `${path} (${type}) has unknown prop "${key}"`;
+    }
+    if (key === "icon" && value !== undefined && value !== null) {
+      if (typeof value !== "string" || !PANEL_ICON_NAMES.has(value)) {
+        return `${path}.props.icon "${String(value)}" is not a known icon token`;
+      }
+    }
+    const capError = checkValueCaps(value, `${path}.props.${key}`, key);
+    if (capError !== null) return capError;
+  }
+
+  // events
+  if (!Array.isArray(node.events)) {
+    return `${path}.events must be an array`;
+  }
+  if (node.events.length > PANEL_CAPS.eventsPerNode) {
+    return `${path}.events exceeds ${PANEL_CAPS.eventsPerNode} events`;
+  }
+  const allowedEvents = NODE_EVENT_NAMES[type]!;
+  const seenEvents = new Set<string>();
+  for (const event of node.events) {
+    if (typeof event !== "string") {
+      return `${path}.events must contain only strings`;
+    }
+    if (!allowedEvents.has(event)) {
+      return `${path} (${type}) has event "${event}" not in its allowlist`;
+    }
+    if (seenEvents.has(event)) {
+      return `${path}.events has duplicate event "${event}"`;
+    }
+    seenEvents.add(event);
+  }
+
+  // children
+  if (spec.children) {
+    if (!Array.isArray(node.children)) {
+      return `${path}.children must be an array`;
+    }
+    for (let i = 0; i < node.children.length; i++) {
+      const error = validateNode(node.children[i], `${path}.children[${i}]`, depth + 1, state);
+      if (error !== null) return error;
+    }
+  } else if (node.children !== undefined) {
+    return `${path} (${type}) does not allow children`;
+  }
+
+  return null;
+};
+
+/**
+ * Strictly validates an unknown value (or serialized string) as a
+ * {@link PanelTree}. Enforces envelope `version`, a `panel` root, the closed
+ * per-type prop/event vocabulary, unique non-negative-integer ids, and every
+ * cap in {@link PANEL_CAPS}. When given a string, the raw byte length is
+ * pre-checked against the tree-byte cap before parsing.
+ */
+export const parsePanelTree = (input: unknown): ParsePanelResult => {
+  let value: unknown = input;
+  if (typeof input === "string") {
+    if (byteLength(input) > PANEL_CAPS.treeBytes) {
+      return { ok: false, error: `tree exceeds ${PANEL_CAPS.treeBytes} bytes` };
+    }
+    try {
+      value = JSON.parse(input);
+    } catch {
+      return { ok: false, error: "tree is not valid JSON" };
+    }
+  }
+
+  if (!isPlainObject(value)) {
+    return { ok: false, error: "tree must be an object" };
+  }
+  for (const key of Object.keys(value)) {
+    if (key !== "version" && key !== "root") {
+      return { ok: false, error: `tree has unknown key "${key}"` };
+    }
+  }
+  if (value.version !== PANEL_TREE_VERSION) {
+    return { ok: false, error: `tree.version must be ${PANEL_TREE_VERSION}` };
+  }
+  if (!isPlainObject(value.root)) {
+    return { ok: false, error: "tree.root must be an object" };
+  }
+  if (value.root.type !== "panel") {
+    return { ok: false, error: 'tree.root.type must be "panel"' };
+  }
+
+  const state = { count: 0, ids: new Set<number>() };
+  const error = validateNode(value.root, "tree.root", 1, state);
+  if (error !== null) {
+    return { ok: false, error };
+  }
+  return { ok: true, tree: value as unknown as PanelTree };
+};
+
+/**
+ * UTF-8 byte length of a string without depending on `Buffer` or `TextEncoder`
+ * availability (both may be absent in a bare sandbox global scope): prefer
+ * `TextEncoder`, fall back to a manual code-point count.
+ */
+const byteLength = (input: string): number => {
+  if (typeof TextEncoder !== "undefined") {
+    return new TextEncoder().encode(input).length;
+  }
+  let bytes = 0;
+  for (let i = 0; i < input.length; i++) {
+    const code = input.charCodeAt(i);
+    if (code < 0x80) bytes += 1;
+    else if (code < 0x800) bytes += 2;
+    else if (code >= 0xd800 && code <= 0xdbff) {
+      bytes += 4;
+      i++;
+    } else bytes += 3;
+  }
+  return bytes;
+};
diff --git a/libraries/paywalls/src/schema/validate.ts b/libraries/paywalls/src/schema/validate.ts
new file mode 100644
index 000000000..31d46bc4d
--- /dev/null
+++ b/libraries/paywalls/src/schema/validate.ts
@@ -0,0 +1,547 @@
+/**
+ * Dependency-free runtime validators for the paywall deploy wire formats.
+ *
+ * These mirror the effect-Schema decoders the voidhash server applies as its
+ * trust boundary (`packages/core/src/services/paywallDeploys/PaywallDeployManifest.ts`)
+ * so the CLI, studio sandbox, and any other JS consumer can validate the same
+ * §2 component manifests and §3 preview trees WITHOUT pulling in `effect`.
+ * Every constraint here is intentionally identical to that server decoder —
+ * the mono's contract test locks the two together.
+ *
+ * Strictness follows `docs/specs/paywall-deploy-contract.md` §2/§3/§3.1:
+ * unknown node types, unknown keys, and out-of-vocabulary style keys are all
+ * rejected. No `effect`, no `react`.
+ */
+import { PAYWALL_TREE_VERSION, type PaywallNode, type PaywallNodeTree } from "./node-tree";
+import {
+  COMPONENT_MANIFEST_VERSION,
+  type ComponentManifest,
+  type ManifestAction,
+  type ManifestArrayItem,
+  type ManifestProp,
+} from "./component-manifest";
+import { PAYWALL_STYLE_KEY_LIST } from "./style";
+
+/** Discriminated result of a validator: parsed value or a list of error messages. */
+export type ParseResult<T> = { ok: true; value: T } | { ok: false; errors: ReadonlyArray<string> };
+
+/**
+ * The §3.1 style vocabulary as a runtime `Set`, single-sourced from
+ * {@link PAYWALL_STYLE_KEY_LIST} (which is itself tied to the `PaywallStyle`
+ * type). Any style key outside this set is rejected by {@link parsePreviewTree}.
+ */
+export const PAYWALL_STYLE_KEYS: ReadonlySet<string> = new Set(PAYWALL_STYLE_KEY_LIST);
+
+/** `components[].previews[].state` / §3 tree `state` constraint (contract §1.1). */
+export const PREVIEW_STATE_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
+
+/**
+ * §2 component `id` slug constraint (contract §1.1). Mirrors the server's
+ * `DeploySlug` — the server decodes `ComponentManifest.id` with this exact
+ * pattern, so an id with uppercase, underscores, or length &gt; 64 is rejected
+ * at the trust boundary.
+ */
+export const DEPLOY_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/;
+
+const NODE_TYPES = new Set(["view", "text", "image", "pressable", "scroll", "slot", "placeholder"]);
+const RESIZE_MODES = new Set(["cover", "contain", "stretch", "center"]);
+const PROP_KINDS = new Set([
+  "string",
+  "number",
+  "boolean",
+  "select",
+  "image",
+  "ref",
+  "component",
+  "array",
+]);
+const ACTION_PAYLOAD_KINDS = new Set(["string", "number", "boolean"]);
+const HOST_DATA_VALUES = new Set(["products"]);
+
+const isPlainObject = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null && !Array.isArray(value);
+
+const isScalar = (value: unknown): value is string | number | boolean =>
+  typeof value === "string" || typeof value === "number" || typeof value === "boolean";
+
+/** Keys present on `value` that are not in `allowed`. */
+const unknownKeys = (value: Record<string, unknown>, allowed: ReadonlySet<string>): string[] =>
+  Object.keys(value).filter((key) => !allowed.has(key));
+
+// =============================================================================
+// §3 Preview node tree
+// =============================================================================
+
+const STYLE_VALUE_LABEL = "a number or string";
+
+const BACKGROUND_TYPES = new Set(["solid", "gradient", "image"]);
+const GRADIENT_KINDS = new Set(["linear", "radial"]);
+
+const isFiniteNumber = (value: unknown): value is number =>
+  typeof value === "number" && Number.isFinite(value);
+
+/** Structurally validates a `backgroundGradient` style value (contract §3.1). */
+const validateBackgroundGradient = (value: unknown, path: string, errors: string[]): void => {
+  if (!isPlainObject(value)) {
+    errors.push(`${path} must be an object`);
+    return;
+  }
+  for (const key of unknownKeys(value, new Set(["kind", "startX", "startY", "endX", "endY", "stops"]))) {
+    errors.push(`${path} has unknown key "${key}"`);
+  }
+  if (typeof value.kind !== "string" || !GRADIENT_KINDS.has(value.kind)) {
+    errors.push(`${path}.kind must be one of linear, radial`);
+  }
+  for (const coord of ["startX", "startY", "endX", "endY"] as const) {
+    if (!isFiniteNumber(value[coord])) {
+      errors.push(`${path}.${coord} must be a finite number`);
+    }
+  }
+  if (!Array.isArray(value.stops)) {
+    errors.push(`${path}.stops must be an array`);
+  } else {
+    value.stops.forEach((stop, index) => {
+      const stopPath = `${path}.stops[${index}]`;
+      if (!isPlainObject(stop)) {
+        errors.push(`${stopPath} must be an object`);
+        return;
+      }
+      for (const key of unknownKeys(stop, new Set(["color", "position"]))) {
+        errors.push(`${stopPath} has unknown key "${key}"`);
+      }
+      if (typeof stop.color !== "string") {
+        errors.push(`${stopPath}.color must be a string`);
+      }
+      if (!isFiniteNumber(stop.position)) {
+        errors.push(`${stopPath}.position must be a finite number`);
+      }
+    });
+  }
+};
+
+/** Structurally validates a `backgroundImage` style value (contract §3.1). */
+const validateBackgroundImage = (value: unknown, path: string, errors: string[]): void => {
+  if (!isPlainObject(value)) {
+    errors.push(`${path} must be an object`);
+    return;
+  }
+  for (const key of unknownKeys(value, new Set(["url", "resizeMode"]))) {
+    errors.push(`${path} has unknown key "${key}"`);
+  }
+  if (typeof value.url !== "string") {
+    errors.push(`${path}.url must be a string`);
+  }
+  if (typeof value.resizeMode !== "string" || !RESIZE_MODES.has(value.resizeMode)) {
+    errors.push(`${path}.resizeMode must be one of cover, contain, stretch, center`);
+  }
+};
+
+const validateStyle = (style: unknown, path: string, errors: string[]): void => {
+  if (!isPlainObject(style)) {
+    errors.push(`${path}.style must be an object`);
+    return;
+  }
+  for (const [key, value] of Object.entries(style)) {
+    if (!PAYWALL_STYLE_KEYS.has(key)) {
+      errors.push(`${path}.style has unknown key "${key}"`);
+      continue;
+    }
+    // The structured background keys carry object values; everything else in the
+    // §3.1 vocabulary is a number or string (colors, "50%"); no arbitrary CSS.
+    if (key === "backgroundType") {
+      if (typeof value !== "string" || !BACKGROUND_TYPES.has(value)) {
+        errors.push(`${path}.style.backgroundType must be one of solid, gradient, image`);
+      }
+    } else if (key === "backgroundGradient") {
+      validateBackgroundGradient(value, `${path}.style.backgroundGradient`, errors);
+    } else if (key === "backgroundImage") {
+      validateBackgroundImage(value, `${path}.style.backgroundImage`, errors);
+    } else if (typeof value !== "number" && typeof value !== "string") {
+      errors.push(`${path}.style.${key} must be ${STYLE_VALUE_LABEL}`);
+    }
+  }
+};
+
+const NODE_KEYS: Record<string, ReadonlySet<string>> = {
+  view: new Set(["type", "style", "children"]),
+  scroll: new Set(["type", "style", "children"]),
+  pressable: new Set(["type", "style", "children", "action"]),
+  text: new Set(["type", "style", "text"]),
+  image: new Set(["type", "style", "src", "resizeMode"]),
+  slot: new Set(["type"]),
+  placeholder: new Set(["type", "reason"]),
+};
+
+const validateNode = (node: unknown, path: string, errors: string[]): void => {
+  if (!isPlainObject(node)) {
+    errors.push(`${path} must be an object`);
+    return;
+  }
+  const type = node.type;
+  if (typeof type !== "string" || !NODE_TYPES.has(type)) {
+    errors.push(`${path}.type "${String(type)}" is not a known node type`);
+    return;
+  }
+  for (const key of unknownKeys(node, NODE_KEYS[type]!)) {
+    errors.push(`${path} (${type}) has unknown key "${key}"`);
+  }
+
+  switch (type) {
+    case "view":
+    case "scroll":
+    case "pressable": {
+      validateStyle(node.style, path, errors);
+      if (!Array.isArray(node.children)) {
+        errors.push(`${path}.children must be an array`);
+      } else {
+        node.children.forEach((child, index) =>
+          validateNode(child, `${path}.children[${index}]`, errors),
+        );
+      }
+      if (type === "pressable" && node.action !== undefined && typeof node.action !== "string") {
+        errors.push(`${path}.action must be a string`);
+      }
+      return;
+    }
+    case "text": {
+      validateStyle(node.style, path, errors);
+      if (typeof node.text !== "string") {
+        errors.push(`${path}.text must be a string`);
+      }
+      return;
+    }
+    case "image": {
+      validateStyle(node.style, path, errors);
+      if (typeof node.src !== "string") {
+        errors.push(`${path}.src must be a string`);
+      }
+      if (node.resizeMode !== undefined && !RESIZE_MODES.has(node.resizeMode as string)) {
+        errors.push(
+          `${path}.resizeMode "${String(node.resizeMode)}" must be one of cover, contain, stretch, center`,
+        );
+      }
+      return;
+    }
+    case "placeholder": {
+      if (typeof node.reason !== "string") {
+        errors.push(`${path}.reason must be a string`);
+      }
+      return;
+    }
+    // `slot` carries nothing else; the unknown-key check above is sufficient.
+  }
+};
+
+/**
+ * Strictly validates an unknown value as a §3 {@link PaywallNodeTree}. Rejects
+ * unknown node types, unknown keys on any node, out-of-vocabulary style keys,
+ * a `treeVersion` other than the current one, and a `state` that violates the
+ * §1.1 pattern. Returns the value narrowed to `PaywallNodeTree` on success.
+ */
+export const parsePreviewTree = (input: unknown): ParseResult<PaywallNodeTree> => {
+  const errors: string[] = [];
+  if (!isPlainObject(input)) {
+    return { ok: false, errors: ["tree must be an object"] };
+  }
+  for (const key of unknownKeys(input, new Set(["treeVersion", "state", "root"]))) {
+    errors.push(`tree has unknown key "${key}"`);
+  }
+  if (input.treeVersion !== PAYWALL_TREE_VERSION) {
+    errors.push(`tree.treeVersion must be ${PAYWALL_TREE_VERSION}`);
+  }
+  if (typeof input.state !== "string") {
+    errors.push("tree.state must be a string");
+  } else if (!PREVIEW_STATE_PATTERN.test(input.state)) {
+    errors.push(`tree.state "${input.state}" does not match ${PREVIEW_STATE_PATTERN}`);
+  }
+  if (input.root === undefined) {
+    errors.push("tree.root is required");
+  } else {
+    validateNode(input.root, "tree.root", errors);
+  }
+  return errors.length === 0
+    ? { ok: true, value: input as unknown as PaywallNodeTree }
+    : { ok: false, errors };
+};
+
+/**
+ * Counts `slot` marker nodes anywhere in a §3 preview tree. The contract
+ * allows at most one; server finalize rejects trees where this exceeds 1.
+ */
+export const countSlotNodes = (node: PaywallNode): number => {
+  switch (node.type) {
+    case "slot":
+      return 1;
+    case "view":
+    case "pressable":
+    case "scroll":
+      return node.children.reduce((count, child) => count + countSlotNodes(child), 0);
+    default:
+      return 0;
+  }
+};
+
+// =============================================================================
+// §2 Component manifest
+// =============================================================================
+
+// The `ref` and `component` prop schemas on the server carry NO `default` field
+// (only `label`/`description`/`optional`), so their default is fixed at "—".
+// Splitting the base key sets keeps a present `default` out of those two kinds,
+// matching the server decoder which rejects it as an excess property.
+const PROP_META_KEYS = ["kind", "label", "description", "optional"];
+const PROP_COMMON_KEYS = [...PROP_META_KEYS, "default"];
+
+/** Keys allowed on a prop definition of the given kind (contract §2). */
+const propKeysFor = (kind: string): ReadonlySet<string> => {
+  switch (kind) {
+    case "string":
+      return new Set([...PROP_COMMON_KEYS, "editor"]);
+    case "select":
+      return new Set([...PROP_COMMON_KEYS, "options"]);
+    case "ref":
+      return new Set([...PROP_META_KEYS, "refType"]);
+    case "component":
+      return new Set(PROP_META_KEYS);
+    case "array":
+      return new Set([...PROP_COMMON_KEYS, "item"]);
+    default:
+      return new Set(PROP_COMMON_KEYS);
+  }
+};
+
+const validateCommonPropFields = (
+  prop: Record<string, unknown>,
+  path: string,
+  errors: string[],
+): void => {
+  if (prop.label !== undefined && typeof prop.label !== "string") {
+    errors.push(`${path}.label must be a string`);
+  }
+  if (prop.description !== undefined && typeof prop.description !== "string") {
+    errors.push(`${path}.description must be a string`);
+  }
+  if (prop.optional !== undefined && typeof prop.optional !== "boolean") {
+    errors.push(`${path}.optional must be a boolean`);
+  }
+};
+
+/**
+ * Validates one prop definition. `asItem` marks an array element, which the
+ * server validates identically to a top-level prop except that its `kind` may
+ * not itself be `array`.
+ */
+const validateProp = (
+  prop: unknown,
+  path: string,
+  errors: string[],
+  options: { readonly asItem: boolean },
+): void => {
+  if (!isPlainObject(prop)) {
+    errors.push(`${path} must be an object`);
+    return;
+  }
+  const kind = prop.kind;
+  if (typeof kind !== "string" || !PROP_KINDS.has(kind)) {
+    errors.push(`${path}.kind "${String(kind)}" is not a known prop kind`);
+    return;
+  }
+  if (options.asItem && kind === "array") {
+    errors.push(`${path}.item kind must not be "array" (§2: array item is a non-array kind)`);
+    return;
+  }
+  for (const key of unknownKeys(prop, propKeysFor(kind))) {
+    errors.push(`${path} (${kind}) has unknown key "${key}"`);
+  }
+  // The server's `ArrayItemSchema` reuses the full per-kind prop structs, so an
+  // array item accepts and TYPE-CHECKS the same common fields (label/
+  // description/optional) and per-kind `default` as a top-level prop — the only
+  // item-specific constraint is that its kind may not be `array` (handled
+  // above). Validate them for items too, mirroring the server exactly.
+  validateCommonPropFields(prop, path, errors);
+
+  switch (kind) {
+    case "string": {
+      if (prop.editor !== undefined && prop.editor !== "color") {
+        errors.push(`${path}.editor must be "color"`);
+      }
+      if (prop.default !== undefined && typeof prop.default !== "string") {
+        errors.push(`${path}.default must be a string`);
+      }
+      return;
+    }
+    case "number": {
+      if (prop.default !== undefined && typeof prop.default !== "number") {
+        errors.push(`${path}.default must be a number`);
+      }
+      return;
+    }
+    case "boolean": {
+      if (prop.default !== undefined && typeof prop.default !== "boolean") {
+        errors.push(`${path}.default must be a boolean`);
+      }
+      return;
+    }
+    case "select": {
+      if (
+        !Array.isArray(prop.options) ||
+        prop.options.length === 0 ||
+        !prop.options.every((option) => typeof option === "string")
+      ) {
+        errors.push(`${path}.options must be a non-empty array of strings`);
+      }
+      if (prop.default !== undefined && typeof prop.default !== "string") {
+        errors.push(`${path}.default must be a string`);
+      }
+      return;
+    }
+    case "image": {
+      if (prop.default !== undefined && typeof prop.default !== "string") {
+        errors.push(`${path}.default must be a string`);
+      }
+      return;
+    }
+    case "ref": {
+      if (prop.refType !== "product") {
+        errors.push(`${path}.refType must be "product"`);
+      }
+      return;
+    }
+    case "component":
+      return;
+    case "array": {
+      validateProp(prop.item, `${path}.item`, errors, { asItem: true });
+      if (prop.default !== undefined) {
+        if (!Array.isArray(prop.default) || !prop.default.every(isScalar)) {
+          errors.push(`${path}.default must be an array of string|number|boolean`);
+        }
+      }
+      return;
+    }
+  }
+};
+
+const validateAction = (action: unknown, path: string, errors: string[]): void => {
+  if (!isPlainObject(action)) {
+    errors.push(`${path} must be an object`);
+    return;
+  }
+  for (const key of unknownKeys(action, new Set(["payload"]))) {
+    errors.push(`${path} has unknown key "${key}"`);
+  }
+  if (!isPlainObject(action.payload)) {
+    errors.push(`${path}.payload must be an object`);
+    return;
+  }
+  for (const [field, spec] of Object.entries(action.payload)) {
+    const fieldPath = `${path}.payload.${field}`;
+    if (!isPlainObject(spec)) {
+      errors.push(`${fieldPath} must be an object`);
+      continue;
+    }
+    for (const key of unknownKeys(spec, new Set(["kind"]))) {
+      errors.push(`${fieldPath} has unknown key "${key}"`);
+    }
+    if (typeof spec.kind !== "string" || !ACTION_PAYLOAD_KINDS.has(spec.kind)) {
+      errors.push(`${fieldPath}.kind must be one of string, number, boolean`);
+    }
+  }
+};
+
+const MANIFEST_KEYS = new Set([
+  "manifestVersion",
+  "id",
+  "title",
+  "description",
+  "props",
+  "actions",
+  "slot",
+  "previewStates",
+  "hostData",
+]);
+
+/**
+ * Strictly validates an unknown value as a §2 {@link ComponentManifest}.
+ * Mirrors the server decoder: unknown top-level keys, unknown per-prop keys,
+ * unknown prop/action kinds, empty `select` options, array items that are
+ * themselves arrays, `editor` on a non-string prop, malformed action payload
+ * kinds, non-boolean `slot`, empty `previewStates`, and out-of-subset
+ * `hostData` are all rejected.
+ */
+export const parseComponentManifest = (input: unknown): ParseResult<ComponentManifest> => {
+  const errors: string[] = [];
+  if (!isPlainObject(input)) {
+    return { ok: false, errors: ["manifest must be an object"] };
+  }
+  for (const key of unknownKeys(input, MANIFEST_KEYS)) {
+    errors.push(`manifest has unknown key "${key}"`);
+  }
+  if (input.manifestVersion !== COMPONENT_MANIFEST_VERSION) {
+    errors.push(`manifest.manifestVersion must be ${COMPONENT_MANIFEST_VERSION}`);
+  }
+  if (typeof input.id !== "string" || !DEPLOY_SLUG_PATTERN.test(input.id)) {
+    errors.push(`manifest.id "${String(input.id)}" must match ${DEPLOY_SLUG_PATTERN}`);
+  }
+  if (input.title !== undefined && typeof input.title !== "string") {
+    errors.push("manifest.title must be a string");
+  }
+  if (input.description !== undefined && typeof input.description !== "string") {
+    errors.push("manifest.description must be a string");
+  }
+
+  if (!isPlainObject(input.props)) {
+    errors.push("manifest.props must be an object");
+  } else {
+    for (const [name, prop] of Object.entries(input.props)) {
+      validateProp(prop, `manifest.props.${name}`, errors, { asItem: false });
+    }
+  }
+
+  if (input.actions !== undefined) {
+    if (!isPlainObject(input.actions)) {
+      errors.push("manifest.actions must be an object");
+    } else {
+      for (const [name, action] of Object.entries(input.actions)) {
+        validateAction(action, `manifest.actions.${name}`, errors);
+      }
+    }
+  }
+
+  if (input.slot !== undefined && typeof input.slot !== "boolean") {
+    errors.push("manifest.slot must be a boolean");
+  }
+
+  if (input.previewStates !== undefined) {
+    if (
+      !Array.isArray(input.previewStates) ||
+      input.previewStates.length === 0 ||
+      !input.previewStates.every((state) => typeof state === "string")
+    ) {
+      errors.push("manifest.previewStates must be a non-empty array of strings");
+    } else {
+      for (const state of input.previewStates) {
+        if (!PREVIEW_STATE_PATTERN.test(state)) {
+          errors.push(`manifest.previewStates: "${state}" does not match ${PREVIEW_STATE_PATTERN}`);
+        }
+      }
+    }
+  }
+
+  if (input.hostData !== undefined) {
+    if (!Array.isArray(input.hostData)) {
+      errors.push("manifest.hostData must be an array");
+    } else {
+      for (const value of input.hostData) {
+        if (typeof value !== "string" || !HOST_DATA_VALUES.has(value)) {
+          errors.push(`manifest.hostData: "${String(value)}" is not a known host data value`);
+        }
+      }
+    }
+  }
+
+  return errors.length === 0
+    ? { ok: true, value: input as unknown as ComponentManifest }
+    : { ok: false, errors };
+};
+
+export type { ManifestAction, ManifestArrayItem, ManifestProp };
diff --git a/libraries/paywalls/src/style/resolve.ts b/libraries/paywalls/src/style/resolve.ts
index 0cb5d8acb..d00e4c991 100644
--- a/libraries/paywalls/src/style/resolve.ts
+++ b/libraries/paywalls/src/style/resolve.ts
@@ -1,6 +1,12 @@
 import type { CSSProperties } from "react";
 
-import type { PaywallStyle, StyleProp } from "../schema/style";
+import type {
+  PaywallBackgroundGradient,
+  PaywallBackgroundImage,
+  PaywallGradientStop,
+  PaywallStyle,
+  StyleProp,
+} from "../schema/style";
 
 /**
  * Flattens a (possibly nested, possibly falsy) {@link StyleProp} into a single
@@ -23,50 +29,137 @@ export const flattenStyle = (style: StyleProp): PaywallStyle => {
 
 /**
  * §3.1 keys that are CSS shorthands on the DOM. Committed later in an inline
- * style object they reset their longhands (`padding` clears `paddingLeft`,
- * `gap` clears `rowGap`, …), whereas React Native gives longhands precedence
- * within one object regardless of declaration order. {@link resolveStyle}
- * therefore emits these keys before everything else.
+ * style object they reset their longhands (`flex` clears `flexGrow`/
+ * `flexShrink`/`flexBasis`), whereas React Native gives longhands precedence
+ * within one object regardless of declaration order. The vocabulary carries no
+ * shorthand spacing/border keys (per-side longhands only), so `flex` and `gap`
+ * are the only shorthands that remain — {@link resolveStyle} emits them before
+ * everything else.
  */
-const CSS_SHORTHAND_KEYS = [
-  "flex",
-  "gap",
-  "padding",
-  "margin",
-  "borderRadius",
-] as const satisfies ReadonlyArray<keyof PaywallStyle>;
+const CSS_SHORTHAND_KEYS = ["flex", "gap"] as const satisfies ReadonlyArray<keyof PaywallStyle>;
 
 const isCssShorthandKey = (key: string): boolean =>
   (CSS_SHORTHAND_KEYS as ReadonlyArray<string>).includes(key);
 
+const RESIZE_MODE_TO_BACKGROUND_SIZE: Record<PaywallBackgroundImage["resizeMode"], string> = {
+  center: "auto",
+  contain: "contain",
+  cover: "cover",
+  stretch: "100% 100%",
+};
+
+/**
+ * Style keys the DOM renderer consumes to derive the background CSS rather than
+ * passing them through. `backgroundColor` is the exception: `solid` (and every
+ * disabled/degenerate case) resolves back to it.
+ */
+const BACKGROUND_DERIVED_KEYS = ["backgroundType", "backgroundGradient", "backgroundImage"] as const;
+
+/**
+ * Builds an inline SVG whose gradient uses `objectBoundingBox` units, so the
+ * two-point normalized geometry (`0..1` node space) maps exactly onto the
+ * element regardless of its aspect ratio. `preserveAspectRatio="none"` lets the
+ * 1×1 viewBox stretch to fill. Intentionally byte-compatible with the mono
+ * web-core renderer's helper.
+ */
+const buildGradientSvg = (
+  gradient: PaywallBackgroundGradient,
+  stops: readonly PaywallGradientStop[],
+): string => {
+  const stopEls = stops
+    .map((stop) => `<stop offset='${stop.position}' stop-color='${stop.color}'/>`)
+    .join("");
+
+  const def =
+    gradient.kind === "radial"
+      ? (() => {
+          const r = Math.hypot(gradient.endX - gradient.startX, gradient.endY - gradient.startY);
+          return `<radialGradient id='g' cx='${gradient.startX}' cy='${gradient.startY}' r='${r}'>${stopEls}</radialGradient>`;
+        })()
+      : `<linearGradient id='g' x1='${gradient.startX}' y1='${gradient.startY}' x2='${gradient.endX}' y2='${gradient.endY}'>${stopEls}</linearGradient>`;
+
+  return `<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${def}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`;
+};
+
+/**
+ * Lowers a node's non-solid background (`gradient` / `image`) onto the CSS
+ * background quad. Called only once `resolveStyle` has decided the type is
+ * renderable; a type that resolves to nothing renderable falls back to
+ * `transparent`.
+ *
+ * - `gradient` → an SVG data-URI `backgroundImage`, so the two-point normalized
+ *   geometry stays exact independent of aspect ratio. Stops are sorted by
+ *   position; a single stop degrades to that solid color, zero stops to
+ *   `transparent`.
+ * - `image` → `backgroundImage: url(...)` with the resize mode mapped to
+ *   `backgroundSize`. An empty url resolves to `transparent`.
+ *
+ * Byte-compatible with the mono web-core renderer's helper (which additionally
+ * gates on `backgroundEnabled`, a field the OSS preview-tree style omits).
+ */
+const buildBackgroundStyles = (style: PaywallStyle): CSSProperties => {
+  const type = style.backgroundType ?? "solid";
+
+  if (type === "gradient") {
+    const gradient = style.backgroundGradient;
+    const stops = (gradient?.stops ?? []).slice().sort((a, b) => a.position - b.position);
+    if (!gradient || stops.length === 0) {
+      return { backgroundColor: "transparent" };
+    }
+    if (stops.length === 1) {
+      return { backgroundColor: stops[0]!.color };
+    }
+    const svg = buildGradientSvg(gradient, stops);
+    return {
+      backgroundImage: `url("data:image/svg+xml,${encodeURIComponent(svg)}")`,
+      backgroundRepeat: "no-repeat",
+      backgroundSize: "100% 100%",
+    };
+  }
+
+  if (type === "image") {
+    const url = style.backgroundImage?.url ?? "";
+    if (url === "") {
+      return { backgroundColor: "transparent" };
+    }
+    const resizeMode = style.backgroundImage?.resizeMode ?? "cover";
+    // encodeURI leaves the double-quote untouched; escape it too so it cannot
+    // break out of the quoted `url("…")` token.
+    const safeUrl = encodeURI(url).replace(/"/g, "%22");
+    return {
+      backgroundImage: `url("${safeUrl}")`,
+      backgroundPosition: "center",
+      backgroundRepeat: "no-repeat",
+      backgroundSize: RESIZE_MODE_TO_BACKGROUND_SIZE[resizeMode],
+    };
+  }
+
+  // solid
+  return { backgroundColor: style.backgroundColor };
+};
+
 /**
  * Lowers a {@link StyleProp} onto the web target as plain
- * {@link CSSProperties}. Transforms applied:
+ * {@link CSSProperties}. The vocabulary is the RN-expanded subset (no shorthand
+ * spacing/border keys: only `paddingLeft`/`paddingTop`/… and per-edge border
+ * widths), so most keys pass through untouched — React appends `px` to unitless
+ * length values when committing to the DOM. Three transforms remain:
  *
- * - keys are emitted in deterministic specificity order — CSS shorthands
- *   (`flex`, `gap`, `padding`, `margin`, `borderRadius`) first, then the
- *   `paddingHorizontal`/`paddingVertical`/`marginHorizontal`/`marginVertical`
- *   expansions into their physical edges, then explicit edges/corners — so
- *   React Native's "longhand wins within one object" semantics hold on the
- *   DOM independent of the author's key order.
+ * - CSS shorthands (`flex`, `gap`) are emitted before everything else, so
+ *   React Native's "longhand wins within one object" semantics hold on the DOM
+ *   independent of the author's key order (a later shorthand would otherwise
+ *   reset its longhands, e.g. `flex` clobbering `flexGrow`).
  * - numeric `lineHeight` becomes `"<n>px"` (RN treats it as pixels; React
  *   would otherwise emit a unitless multiplier).
  * - `borderStyle: "solid"` is defaulted when a border width/color is set
  *   without one (RN renders solid borders implicitly).
- *
- * Everything else passes through untouched — React appends `px` to unitless
- * length values when committing to the DOM.
+ * - a `backgroundType` of `gradient`/`image` is lowered onto the CSS background
+ *   quad (SVG data-URI or `url(...)`); the structured `backgroundGradient` /
+ *   `backgroundImage` fields never reach the DOM as raw CSS.
  */
 export const resolveStyle = (style: StyleProp): CSSProperties => {
   const flat = flattenStyle(style);
-  const {
-    paddingHorizontal,
-    paddingVertical,
-    marginHorizontal,
-    marginVertical,
-    lineHeight,
-    ...rest
-  } = flat;
+  const { lineHeight, ...rest } = flat;
 
   const out: Record<string, unknown> = {};
 
@@ -76,39 +169,34 @@ export const resolveStyle = (style: StyleProp): CSSProperties => {
     }
   }
 
-  if (paddingHorizontal !== undefined) {
-    out.paddingLeft = paddingHorizontal;
-    out.paddingRight = paddingHorizontal;
-  }
-  if (paddingVertical !== undefined) {
-    out.paddingTop = paddingVertical;
-    out.paddingBottom = paddingVertical;
-  }
-  if (marginHorizontal !== undefined) {
-    out.marginLeft = marginHorizontal;
-    out.marginRight = marginHorizontal;
-  }
-  if (marginVertical !== undefined) {
-    out.marginTop = marginVertical;
-    out.marginBottom = marginVertical;
-  }
-
-  // Explicit edges/corners (and every other longhand) land last, so they win
-  // over both the shorthands above and the Horizontal/Vertical expansions.
   for (const [key, value] of Object.entries(rest)) {
-    if (value === undefined || isCssShorthandKey(key)) {
+    if (
+      value === undefined ||
+      isCssShorthandKey(key) ||
+      (BACKGROUND_DERIVED_KEYS as ReadonlyArray<string>).includes(key)
+    ) {
       continue;
     }
     out[key] = value;
   }
 
+  // A gradient/image background type is lowered onto the CSS background quad,
+  // overriding the pass-through `backgroundColor`. A `solid` (or absent) type
+  // leaves `backgroundColor` untouched — legacy behavior.
+  if (flat.backgroundType === "gradient" || flat.backgroundType === "image") {
+    delete out.backgroundColor;
+    Object.assign(out, buildBackgroundStyles(flat));
+  }
+
   if (lineHeight !== undefined) {
     out.lineHeight = typeof lineHeight === "number" ? `${lineHeight}px` : lineHeight;
   }
-  if (
-    (flat.borderWidth !== undefined || flat.borderColor !== undefined) &&
-    flat.borderStyle === undefined
-  ) {
+  const hasBorderWidth =
+    flat.borderTopWidth !== undefined ||
+    flat.borderRightWidth !== undefined ||
+    flat.borderBottomWidth !== undefined ||
+    flat.borderLeftWidth !== undefined;
+  if ((hasBorderWidth || flat.borderColor !== undefined) && flat.borderStyle === undefined) {
     out.borderStyle = "solid";
   }
 
diff --git a/libraries/paywalls/src/tree-renderer/react-reconciler.d.ts b/libraries/paywalls/src/tree-renderer/react-reconciler.d.ts
index 579237b03..6ff4660c9 100644
--- a/libraries/paywalls/src/tree-renderer/react-reconciler.d.ts
+++ b/libraries/paywalls/src/tree-renderer/react-reconciler.d.ts
@@ -29,6 +29,16 @@ declare module "react-reconciler" {
       callback?: (() => void) | null,
     ): number;
     flushPassiveEffects(): boolean;
+    /**
+     * Runs `fn` at discrete (highest, "2") update priority with transitions
+     * disabled, then synchronously flushes all pending sync work before
+     * returning. Any `setState` inside `fn` is committed before this returns —
+     * the mechanism the long-lived panel session uses to make an event
+     * handler's state update observable before `dispatchEvent` returns.
+     */
+    flushSyncFromReconciler<R>(fn: () => R): R;
+    /** Flushes any pending synchronous work across all roots. */
+    flushSyncWork(): boolean;
   }
 
   /**
diff --git a/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
index 14dc7d057..c2a1968a1 100644
--- a/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
+++ b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
@@ -11,6 +11,7 @@ import createReconciler from "react-reconciler";
 // ESM resolution of the bare "react-reconciler/constants" specifier fails.
 import { ConcurrentRoot, DefaultEventPriority } from "react-reconciler/constants.js";
 
+import { captureInlineActionName } from "../internal/action-brand";
 import { RendererProvider } from "../primitives/host-context";
 import type { PaywallBridge } from "../runtime/bridge";
 import { normalizeRuntimeConfig, type PaywallRuntimeConfig } from "../runtime/config";
@@ -21,7 +22,7 @@ import {
   type PaywallNodeResizeMode,
   type PaywallNodeTree,
 } from "../schema/node-tree";
-import { PAYWALL_STYLE_KEYS, type PaywallStyle, type StyleProp } from "../schema/style";
+import { PAYWALL_STYLE_KEY_LIST, type PaywallStyle, type StyleProp } from "../schema/style";
 import { flattenStyle } from "../style/resolve";
 import { TREE_ELEMENT_TYPES, treeHostComponents } from "./tree-host";
 
@@ -176,7 +177,7 @@ const reconciler = createReconciler<TreeContainer>({
 
 // ── Serialization ────────────────────────────────────────────────────────────
 
-const ALLOWED_STYLE_KEYS = new Set<string>(PAYWALL_STYLE_KEYS);
+const ALLOWED_STYLE_KEYS = new Set<string>(PAYWALL_STYLE_KEY_LIST);
 
 const sanitizeStyle = (style: unknown): PaywallStyle => {
   const flat = flattenStyle(style as StyleProp);
@@ -208,6 +209,26 @@ const RESIZE_MODES: ReadonlyArray<PaywallNodeResizeMode> = [
   "center",
 ];
 
+/**
+ * Resolves the declared action a pressable fires, for serialization. A direct
+ * `onPress={actions.onSelect}` binding already carries its name in `action`.
+ * An inline handler (`onPress={() => actions.onSelect(…)}`) is an unbranded
+ * arrow, so it is probed once (its branded action callbacks report their name).
+ *
+ * This runs at serialize time — AFTER the reconciler has committed and passive
+ * effects have flushed — so a probe that triggers an author `setState` merely
+ * schedules a concurrent update that never commits before the tree is read
+ * synchronously and the container is unmounted. Probing during render (where
+ * such an update would re-commit and mutate the tree) is unsafe and avoided.
+ */
+const resolvePressableAction = (props: Record<string, unknown>): string | undefined => {
+  if (typeof props.action === "string") {
+    return props.action;
+  }
+  const onPress = props.onPress;
+  return typeof onPress === "function" ? captureInlineActionName(onPress as () => void) : undefined;
+};
+
 const serializeChildren = (children: ReadonlyArray<TreeChild>): PaywallNode[] =>
   children.map(serializeChild);
 
@@ -225,12 +246,12 @@ const serializeChild = (child: TreeChild): PaywallNode => {
         children: serializeChildren(child.children),
       };
     case TREE_ELEMENT_TYPES.pressable: {
-      const action = child.props.action;
+      const action = resolvePressableAction(child.props);
       return {
         type: "pressable",
         style,
         children: serializeChildren(child.children),
-        ...(typeof action === "string" ? { action } : {}),
+        ...(action !== undefined ? { action } : {}),
       };
     }
     case TREE_ELEMENT_TYPES.scroll:
@@ -370,11 +391,20 @@ export const renderToNodeTree = async (
     reconciler.updateContainer(wrapped, root, null, () => resolve());
   });
   // Let passive effects (and any state updates they schedule) settle before
-  // reading the committed tree.
-  reconciler.flushPassiveEffects();
-  await new Promise<void>((resolve) => {
-    setTimeout(resolve, 0);
-  });
+  // reading the committed tree. A passive effect's `setState` schedules a commit
+  // handled by the shared React scheduler asynchronously; a single `setTimeout`
+  // can read the tree before that commit lands when another reconciler (a live
+  // panel session, another concurrent render) contends for the scheduler.
+  // Interleave a passive-effect flush with a macrotask and stop only once two
+  // consecutive flushes report no work — settling then waits for the async
+  // commit deterministically rather than racing one timer. Bounded.
+  for (let i = 0; i < 20; i++) {
+    const flushed = reconciler.flushPassiveEffects();
+    await new Promise<void>((resolve) => {
+      setTimeout(resolve, 0);
+    });
+    if (!flushed && !reconciler.flushPassiveEffects()) break;
+  }
 
   const tree: PaywallNodeTree = {
     treeVersion: PAYWALL_TREE_VERSION,
diff --git a/libraries/paywalls/src/tree-renderer/tree-host.ts b/libraries/paywalls/src/tree-renderer/tree-host.ts
index 0574edc1a..f8cf1685f 100644
--- a/libraries/paywalls/src/tree-renderer/tree-host.ts
+++ b/libraries/paywalls/src/tree-renderer/tree-host.ts
@@ -38,10 +38,16 @@ const TreeView = ({ style, children }: ViewProps): ReactNode =>
 const TreeText = ({ style, children }: TextProps): ReactNode =>
   createElement(TREE_ELEMENT_TYPES.text, { style }, children);
 
-const TreePressable = ({ style, children, actionName }: PressableHostProps): ReactNode =>
+const TreePressable = ({ style, children, actionName, onPress }: PressableHostProps): ReactNode =>
+  // `actionName` (a direct `onPress={actions.onSelect}` binding) carries the
+  // action name safely. The raw `onPress` is forwarded untouched so the
+  // serializer can probe an inline handler (`onPress={() => actions.onSelect(…)}`)
+  // for its action name AFTER the render has committed — never during render,
+  // where invoking the author's handler could schedule state updates and
+  // corrupt the tree (see `resolvePressableAction`).
   createElement(
     TREE_ELEMENT_TYPES.pressable,
-    { action: actionName, style },
+    { action: actionName, onPress, style },
     typeof children === "function" ? children({ pressed: false }) : children,
   );
 
diff --git a/libraries/paywalls/tests/compose-invariants.test.ts b/libraries/paywalls/tests/compose-invariants.test.ts
new file mode 100644
index 000000000..ca0520183
--- /dev/null
+++ b/libraries/paywalls/tests/compose-invariants.test.ts
@@ -0,0 +1,336 @@
+import { readdirSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import ts from "typescript";
+import { describe, expect, test } from "vitest";
+
+import { generateComposeDts, parseComposition, printComposition } from "../src/compose/index";
+
+const COMPOSE_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), "../src/compose");
+
+/**
+ * Part 1a — the parser keys off JSX tag names and call identifiers, NOT imports
+ * (it ignores import declarations entirely). So a `.paywall.tsx` importing the
+ * tags from the package ROOT, or from nowhere at all, must parse to the exact
+ * same AST as the canonical `@voidhash/paywalls/compose` header — and all three
+ * print back the one normalized compose header (the printer regenerates it
+ * one-way regardless of what the author wrote).
+ */
+describe("import-agnostic parse (printer normalizes headers one-way)", () => {
+  const BODY = `
+export default paywall(() => {
+  const selected = variable.product("selectedProduct");
+  return (
+    <Screen name="Main" style={{ backgroundColor: "rgba(10, 10, 20, 1)" }}>
+      <View name="CTA" onPress={purchase(selected)}>
+        <Text style={{ fontSize: 18 }}>Continue</Text>
+      </View>
+    </Screen>
+  );
+});`;
+
+  const CANONICAL_HEADER = `import { paywall, Screen, View, Text, variable, product, purchase } from "@voidhash/paywalls/compose";`;
+  const ROOT_HEADER = `import { paywall, Screen, View, Text, variable, product, purchase } from "@voidhash/paywalls";`;
+
+  test("root-package import and no import at all parse identically to the compose header", () => {
+    const fromCompose = parseComposition(`${CANONICAL_HEADER}\n${BODY}`);
+    const fromRoot = parseComposition(`${ROOT_HEADER}\n${BODY}`);
+    const fromNothing = parseComposition(BODY);
+    expect(fromRoot).toEqual(fromCompose);
+    expect(fromNothing).toEqual(fromCompose);
+  });
+
+  test("all three print back the canonical @voidhash/paywalls/compose header", () => {
+    const printedFromRoot = printComposition(parseComposition(`${ROOT_HEADER}\n${BODY}`));
+    const printedFromNothing = printComposition(parseComposition(BODY));
+    const header = 'from "@voidhash/paywalls/compose"';
+    expect(printedFromRoot.split("\n")[0]).toContain(header);
+    expect(printedFromNothing.split("\n")[0]).toContain(header);
+    // Neither may leak the package-root specifier the author wrote.
+    expect(printedFromRoot.split("\n")[0]).not.toMatch(/from "@voidhash\/paywalls"\s*;/);
+  });
+});
+
+/**
+ * Part 1b — the generated ambient d.ts and the real author surface are derived
+ * from the same registry descriptors (tags) or mirror the same source (helpers),
+ * so every symbol `author-surface.ts` exports must appear in the generated
+ * module. This catches a symbol added to the surface but not the d.ts.
+ */
+describe("generateComposeDts ↔ author-surface sync", () => {
+  /**
+   * Symbols DECLARED in the generated ambient module that are intentionally NOT
+   * author-surface exports, so the reverse (dts → surface) direction below does
+   * not spuriously fail. Keep this minimal — each entry needs a reason.
+   */
+  const DTS_ONLY = new Set([
+    // Internal `type Node = unknown;` alias, unexported on both sides.
+    "Node",
+    // Structured background value shapes inlined into the ambient module (Monaco
+    // can't reach the package-internal `./style-attr-types` import); on the real
+    // surface these live in that type-only module, not as named surface exports.
+    "StyleGradientValue",
+    "StyleImageValue",
+  ]);
+
+  test("every author-surface export appears in the generated module", () => {
+    const surface = readFileSync(path.join(COMPOSE_DIR, "author-surface.ts"), "utf8");
+    const dts = generateComposeDts();
+    const exported = surfaceExportNames(surface);
+    // Sanity: the surface really does export the symbols we expect to check.
+    expect(exported).toEqual(
+      expect.arrayContaining([
+        "VariableHandle",
+        "ProductRef",
+        "Action",
+        "paywall",
+        "Screen",
+        "View",
+        "Text",
+        "variable",
+        "product",
+        "purchase",
+        "closePaywall",
+        "none",
+        "payload",
+      ]),
+    );
+    for (const name of exported) {
+      // Word-boundary match so a symbol isn't spuriously "found" as a substring
+      // of a longer identifier (e.g. `product` inside `ProductRef`).
+      const found = new RegExp(`\\b${name}\\b`).test(dts);
+      expect(found, `generated dts is missing author-surface symbol "${name}"`).toBe(true);
+    }
+  });
+
+  test("every symbol declared in the generated module is an author-surface export", () => {
+    const surface = readFileSync(path.join(COMPOSE_DIR, "author-surface.ts"), "utf8");
+    const dts = generateComposeDts();
+    const surfaceExports = new Set(surfaceExportNames(surface));
+    for (const name of declaredNames(dts)) {
+      if (DTS_ONLY.has(name)) continue;
+      expect(
+        surfaceExports.has(name),
+        `generated dts declares "${name}" but the author surface does not export it ` +
+          `(add it to author-surface.ts, or to DTS_ONLY with a reason if generated-only)`,
+      ).toBe(true);
+    }
+  });
+
+  test("the generated built-in tags carry precise (non-loose) prop types", () => {
+    const dts = generateComposeDts();
+    // The old loose surface typed tags as `(props: Record<string, unknown>)`.
+    expect(dts).not.toContain("Record<string, unknown>");
+    // A representative descriptor-derived signature is present.
+    expect(dts).toContain(`flexDirection?: "row" | "column";`);
+    expect(dts).toContain(`gap?: number;`);
+    expect(dts).toContain(`onPress?: Action;`);
+    expect(dts).toContain(`backgroundGradient?: StyleGradientValue;`);
+  });
+});
+
+/**
+ * Part 1c — the compose module graph must never pull in react or the runtime
+ * primitives; it is a mimic/react-free authoring + serialization surface. A
+ * source-level import scan (robust to comments and strings via the TS scanner)
+ * asserts no `src/compose/**` file imports a forbidden specifier.
+ */
+describe("compose graph is react/runtime-free", () => {
+  const FORBIDDEN = [
+    "react",
+    "react-dom",
+    "react-reconciler",
+    "../primitives",
+    "../jsx-runtime",
+    "../renderer",
+    "../tree-renderer",
+    "../style",
+  ];
+
+  test("no src/compose file imports react / primitives / runtime", () => {
+    for (const file of composeSourceFiles()) {
+      const specifiers = importSpecifiers(readFileSync(file, "utf8"), file);
+      for (const specifier of specifiers) {
+        for (const forbidden of FORBIDDEN) {
+          // Every forbidden entry is banned both exactly and as a path prefix, so
+          // a deep import (`../style/resolve`, `react-dom/client`, …) is caught,
+          // not just the bare specifier.
+          const hit = specifier === forbidden || specifier.startsWith(`${forbidden}/`);
+          expect(hit, `${path.basename(file)} imports forbidden "${specifier}"`).toBe(false);
+        }
+      }
+    }
+  });
+});
+
+/**
+ * Part 2 (substance) — the generated ambient d.ts actually rejects unknown style
+ * keys and wrong-typed values, and accepts a well-typed composition. Style fields
+ * are nested under `style`; `name`/`onPress`/children are siblings. We exercise the
+ * generated declarations as plain calls (`Screen({...})`) so the check is about the
+ * prop object type, free of JSX-factory plumbing.
+ */
+describe("generated dts type-checks the style={{ … }} surface", () => {
+  const dts = generateComposeDts();
+
+  // Each case spins up a full in-process `ts.createProgram`, which is slow (~2s
+  // solo) and can exceed vitest's 5s default under concurrent scheduling in the
+  // full suite; a generous explicit timeout keeps them robust to that.
+  const TYPECHECK_TIMEOUT = 30_000;
+
+  test(
+    "a well-typed composition surface compiles clean",
+    () => {
+      const good = `
+import { Screen, View, Text, variable, purchase } from "@voidhash/paywalls/compose";
+const p = variable.product("p");
+Screen({ style: { backgroundColor: "rgba(0,0,0,1)", gap: 8, flexDirection: "column", safeAreaTop: true } });
+View({ onPress: purchase(p), style: { width: "auto", opacity: 0.5, backgroundType: "gradient",
+  backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(0,0,0,1)", position: 0 }] } } });
+Text({ style: { fontSize: 16, textAlign: "center", fontWeight: "700" }, children: "Hi" });
+`;
+      expect(typeCheck(dts, good)).toEqual([]);
+    },
+    TYPECHECK_TIMEOUT,
+  );
+
+  test(
+    "a style-key typo and wrong-typed values inside style error",
+    () => {
+      const bad = `
+import { View, Text } from "@voidhash/paywalls/compose";
+View({ style: { paddingTp: 4 } });
+View({ style: { flexDirection: "diagonal" } });
+View({ style: { gap: "lots" } });
+View({ onPress: "nope" });
+Text({ style: { fontSze: 9 } });
+`;
+      const messages = typeCheck(dts, bad);
+      expect(messages.some((m) => /paddingTp/.test(m) && /paddingTop/.test(m))).toBe(true);
+      // Enum-union member order is TS-version-dependent; match order-agnostically.
+      expect(
+        messages.some((m) => /"diagonal"/.test(m) && /"row"/.test(m) && /"column"/.test(m)),
+      ).toBe(true);
+      expect(messages.some((m) => /'string' is not assignable to type 'number'/.test(m))).toBe(true);
+      expect(messages.some((m) => /is not assignable to type 'Action'/.test(m))).toBe(true);
+      expect(messages.some((m) => /fontSze/.test(m))).toBe(true);
+    },
+    TYPECHECK_TIMEOUT,
+  );
+
+  test(
+    "a flat style attribute (sibling of style) is rejected",
+    () => {
+      const flat = `
+import { View } from "@voidhash/paywalls/compose";
+View({ gap: 8 });
+`;
+      const messages = typeCheck(dts, flat);
+      expect(messages.some((m) => /gap/.test(m))).toBe(true);
+    },
+    TYPECHECK_TIMEOUT,
+  );
+});
+
+// ---- helpers -------------------------------------------------------------
+
+/** All `.ts`/`.tsx` files under `src/compose` (test uses the real graph). */
+function composeSourceFiles(): string[] {
+  return readdirSync(COMPOSE_DIR)
+    .filter((name) => name.endsWith(".ts") || name.endsWith(".tsx"))
+    .map((name) => path.join(COMPOSE_DIR, name));
+}
+
+/** Export names declared by a module, via the TS scanner (comment/string-safe). */
+function surfaceExportNames(source: string): string[] {
+  const sf = ts.createSourceFile("surface.ts", source, ts.ScriptTarget.Latest, true);
+  const names: string[] = [];
+  const visit = (node: ts.Node): void => {
+    if (
+      (ts.isFunctionDeclaration(node) ||
+        ts.isInterfaceDeclaration(node) ||
+        ts.isTypeAliasDeclaration(node)) &&
+      node.name &&
+      hasExport(node)
+    ) {
+      names.push(node.name.text);
+    }
+    if (ts.isVariableStatement(node) && hasExport(node)) {
+      for (const decl of node.declarationList.declarations) {
+        if (ts.isIdentifier(decl.name)) {
+          names.push(decl.name.text);
+        }
+      }
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sf);
+  return names;
+}
+
+function hasExport(node: ts.Node): boolean {
+  return (ts.getCombinedModifierFlags(node as ts.Declaration) & ts.ModifierFlags.Export) !== 0;
+}
+
+/**
+ * The top-level symbol names DECLARED in the generated ambient d.ts string
+ * (`(export)? (declare)? const|function|interface|type <name>`). A regex
+ * extraction is sufficient here — the generated source is a self-contained,
+ * machine-emitted ambient module with no comments or nested declarations to
+ * confuse it. Used by the reverse (dts → surface) sync direction.
+ */
+function declaredNames(dts: string): string[] {
+  const decl = /(?:export\s+)?(?:declare\s+)?(?:const|function|interface|type)\s+([A-Za-z_$][A-Za-z0-9_$]*)/g;
+  const names = new Set<string>();
+  for (const match of dts.matchAll(decl)) {
+    if (match[1]) {
+      names.add(match[1]);
+    }
+  }
+  return [...names];
+}
+
+/** The import module specifiers of a source file, via the TS parser. */
+function importSpecifiers(source: string, fileName: string): string[] {
+  const sf = ts.createSourceFile(fileName, source, ts.ScriptTarget.Latest, true, ts.ScriptKind.TSX);
+  const specifiers: string[] = [];
+  for (const statement of sf.statements) {
+    if (
+      (ts.isImportDeclaration(statement) || ts.isExportDeclaration(statement)) &&
+      statement.moduleSpecifier &&
+      ts.isStringLiteral(statement.moduleSpecifier)
+    ) {
+      specifiers.push(statement.moduleSpecifier.text);
+    }
+  }
+  return specifiers;
+}
+
+/**
+ * Compile an author file against the generated ambient d.ts and return the
+ * semantic diagnostic messages. The author file uses the tags as plain calls,
+ * so no JSX runtime / factory is involved.
+ */
+function typeCheck(dts: string, author: string): string[] {
+  const files: Record<string, string> = { "/lib.d.ts": dts, "/author.ts": author };
+  const opts: ts.CompilerOptions = {
+    noEmit: true,
+    strict: true,
+    moduleResolution: ts.ModuleResolutionKind.Bundler,
+    module: ts.ModuleKind.ESNext,
+    target: ts.ScriptTarget.ES2022,
+    skipLibCheck: true,
+  };
+  const host = ts.createCompilerHost(opts);
+  const original = host.getSourceFile.bind(host);
+  host.getSourceFile = (name, lang, onError) =>
+    files[name] ? ts.createSourceFile(name, files[name], lang, true) : original(name, lang, onError);
+  host.fileExists = (f) => f in files || ts.sys.fileExists(f);
+  host.readFile = (f) => files[f] ?? ts.sys.readFile(f);
+  const program = ts.createProgram(["/lib.d.ts", "/author.ts"], opts, host);
+  const sf = program.getSourceFile("/author.ts")!;
+  return program
+    .getSemanticDiagnostics(sf)
+    .map((d) => ts.flattenDiagnosticMessageText(d.messageText, " "));
+}
diff --git a/libraries/paywalls/tests/compose-surface-types.test.ts b/libraries/paywalls/tests/compose-surface-types.test.ts
new file mode 100644
index 000000000..f55498c8a
--- /dev/null
+++ b/libraries/paywalls/tests/compose-surface-types.test.ts
@@ -0,0 +1,80 @@
+import { expectTypeOf, test } from "vitest";
+
+import type { ScreenProps, TextProps, ViewProps } from "../src/compose/style-attr-types";
+
+/**
+ * Type-level substance check for the precise `style={{ … }}` surface. Style fields
+ * are nested under `style`; `name`/`onPress`/children are siblings. These
+ * assertions are enforced by `tsgo` (the `typecheck` script includes `tests/`):
+ * each `@ts-expect-error` fails the build if the surface stops rejecting the
+ * erroneous usage, and the positive cases fail if a legal value is rejected.
+ */
+
+// --- valid: well-typed style + siblings on each node ----------------------
+const _screen: ScreenProps = {
+  name: "Main",
+  style: {
+    gap: 8,
+    flexDirection: "column",
+    backgroundColor: "rgba(0, 0, 0, 1)",
+    width: "auto",
+    safeAreaTop: true,
+    backgroundType: "gradient",
+    backgroundGradient: {
+      kind: "linear",
+      startX: 0,
+      startY: 0,
+      endX: 1,
+      endY: 1,
+      stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }],
+    },
+  },
+};
+void _screen;
+
+const _text: TextProps = {
+  style: { fontSize: 16, fontWeight: "700", textAlign: "center" },
+  children: "Hi",
+};
+void _text;
+
+// --- invalid: unknown key inside style is rejected ------------------------
+// @ts-expect-error unknown style key on <View>
+const _typo: ViewProps = { style: { paddingTp: 4 } };
+void _typo;
+
+// --- invalid: wrong value type on a numeric field -------------------------
+// @ts-expect-error gap is a number, not a string
+const _gap: ViewProps = { style: { gap: "lots" } };
+void _gap;
+
+// --- invalid: value outside a field's enum --------------------------------
+// @ts-expect-error flexDirection only accepts "row" | "column"
+const _dir: ViewProps = { style: { flexDirection: "diagonal" } };
+void _dir;
+
+// --- invalid: a style field written FLAT (as a sibling) is rejected --------
+// @ts-expect-error style fields live inside style={{ … }}, not as a flat attribute
+const _flat: ViewProps = { gap: 8 };
+void _flat;
+
+// --- invalid: onPress must be an Action, and only on <View> ---------------
+// @ts-expect-error onPress must be an Action marker, not a string
+const _press: ViewProps = { onPress: "nope" };
+void _press;
+
+// @ts-expect-error onPress is a <View>-only attribute, not on <Screen>
+const _screenPress: ScreenProps = { name: "S", onPress: {} as import("../src/compose/author-surface").Action };
+void _screenPress;
+
+// --- invalid: a style-key typo inside <Text> style ------------------------
+// @ts-expect-error fontSize typo on <Text>
+const _textTypo: TextProps = { style: { fontSze: 9 } };
+void _textTypo;
+
+test("compose surface types compile (see @ts-expect-error assertions)", () => {
+  expectTypeOf<NonNullable<ViewProps["style"]>["gap"]>().toEqualTypeOf<number | undefined>();
+  expectTypeOf<NonNullable<ScreenProps["style"]>["flexDirection"]>().toEqualTypeOf<
+    "row" | "column" | undefined
+  >();
+});
diff --git a/libraries/paywalls/tests/compose.test.ts b/libraries/paywalls/tests/compose.test.ts
new file mode 100644
index 000000000..516f816c6
--- /dev/null
+++ b/libraries/paywalls/tests/compose.test.ts
@@ -0,0 +1,538 @@
+import { describe, expect, test } from "vitest";
+
+import {
+  CompositionError,
+  parseComposition,
+  printComposition,
+  type CompositionRegistry,
+} from "../src/compose/index";
+
+/**
+ * Pure (mimic-free) round-trip: parse → print is a stable fixpoint, and the
+ * printed source re-parses to an identical print. The mimic reconcile-to-zero
+ * assertions live in the closed `paywall-composition` bridge tests, which lower
+ * the AST to a document and diff. Here we prove the AST↔source half is lossless
+ * and deterministic.
+ */
+const roundtrip = (source: string, registry?: CompositionRegistry): string => {
+  const opts = registry ? { registry } : undefined;
+  const printed1 = printComposition(parseComposition(source, opts), opts);
+  const printed2 = printComposition(parseComposition(printed1, opts), opts);
+  expect(printed2).toBe(printed1);
+  return printed1;
+};
+
+const FIXTURE = `
+import { paywall, Screen, View, Text, variable, product, purchase, closePaywall } from "@voidhash/paywalls/compose";
+
+export default paywall(() => {
+  const selected = variable.product("selectedProduct");
+  const promo = variable.boolean("promo", { default: true });
+
+  return (
+    <Screen name="Main" style={{ backgroundColor: "rgba(10, 10, 20, 1)", safeAreaTop: true }}>
+      <View name="Header" style={{ flexDirection: "row", justifyContent: "space-between", paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }}>
+        <Text style={{ fontSize: 28, color: "rgba(255, 255, 255, 1)" }}>Unlock Pro</Text>
+        <View name="Close" onPress={closePaywall()} />
+      </View>
+      <View name="CTA" style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }} onPress={purchase(selected)}>
+        <Text style={{ fontSize: 18 }}>Continue</Text>
+      </View>
+      <View name="Pick" onPress={selected.set(product("yearly"))} />
+    </Screen>
+  );
+});
+`;
+
+describe("composition grammar + printer (pure)", () => {
+  test("parses the fixture into a well-formed AST", () => {
+    const ast = parseComposition(FIXTURE);
+    expect(ast.root.type).toBe("screen");
+    expect(ast.variables.map((v) => v.name).sort()).toEqual(["promo", "selectedProduct"]);
+    const header = ast.root.children[0]!;
+    expect(header.kind).toBe("element");
+    if (header.kind === "element") {
+      expect(header.type).toBe("view");
+      expect(header.style["flexDirection"]).toBe("row");
+      expect(header.style["paddingTop"]).toBe(16);
+      expect(header.style["paddingLeft"]).toBe(16);
+    }
+  });
+
+  test("parse → print is a stable, idempotent fixpoint", () => {
+    roundtrip(FIXTURE);
+  });
+
+  test("printed source is stable and readable", () => {
+    const printed = printComposition(parseComposition(FIXTURE));
+    expect(printed).toContain('const selectedProduct = variable.product("selectedProduct")');
+    expect(printed).toContain('const promo = variable.boolean("promo", { default: true })');
+    expect(printed).toContain(
+      "style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }}",
+    );
+    expect(printed).toContain("onPress={closePaywall()}");
+    expect(printed).toContain("onPress={purchase(selectedProduct)}");
+    expect(printed).toContain('onPress={selectedProduct.set(product("yearly"))}');
+    expect(printed.split("\n")[0]).toContain('from "@voidhash/paywalls/compose"');
+  });
+
+  test("a scalar edit in printed source re-parses+re-prints with only that change", () => {
+    const printed = printComposition(parseComposition(FIXTURE));
+    const edited = printed.replace("Continue", "Subscribe");
+    const reprinted = printComposition(parseComposition(edited));
+    expect(reprinted).toContain("Subscribe");
+    expect(reprinted).not.toContain(">Continue<");
+  });
+});
+
+describe("round-trip fidelity — escaping + numeric edge cases", () => {
+  test("negative numeric style values round-trip (unary minus)", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="M" style={{ marginTop: -4 }} /></Screen>));`;
+    expect(printComposition(parseComposition(src))).toContain("style={{ marginTop: -4 }}");
+    roundtrip(src);
+  });
+
+  test("text with JSX-special characters round-trips via a string literal", () => {
+    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><Text>{"save > 50% {today}"}</Text></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    expect(printed).toContain('{"save > 50% {today}"}');
+    roundtrip(src);
+  });
+
+  test("text with significant whitespace round-trips exactly", () => {
+    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><Text>{"  spaced  "}</Text></Screen>));`;
+    roundtrip(src);
+  });
+
+  test("<View onPress={none()}> round-trips (fresh designer interaction)", () => {
+    // A designer-authored `<View>` with a fresh (`{type:"none"}`) click
+    // interaction lifts + prints to `onPress={none()}`; the node-level grammar
+    // must parse it back or the code-mode round trip breaks.
+    const src = `import { paywall, Screen, View, none } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="F" onPress={none()} /></Screen>));`;
+    const ast = parseComposition(src);
+    const view = ast.root.children[0]!;
+    expect(view.kind).toBe("element");
+    if (view.kind === "element") {
+      expect(view.interactions).toEqual([{ trigger: "click", action: { kind: "none" } }]);
+    }
+    const printed = printComposition(ast);
+    expect(printed).toContain("onPress={none()}");
+    roundtrip(src);
+  });
+});
+
+describe("grammar rejects", () => {
+  test("rejects duplicate variable names", () => {
+    const src = `import { paywall, Screen, variable } from "@voidhash/paywalls/compose";
+export default paywall(() => {
+  const a = variable.string("dup");
+  const b = variable.number("dup");
+  return (<Screen name="S" />);
+});`;
+    expect(() => parseComposition(src)).toThrow(CompositionError);
+  });
+
+  test("rejects non-identifier variable names", () => {
+    const src = `import { paywall, Screen, variable } from "@voidhash/paywalls/compose";
+export default paywall(() => {
+  const a = variable.string("has trial");
+  return (<Screen name="S" />);
+});`;
+    expect(() => parseComposition(src)).toThrow(CompositionError);
+  });
+
+  test("rejects options on a product variable", () => {
+    const src = `import { paywall, Screen, variable } from "@voidhash/paywalls/compose";
+export default paywall(() => {
+  const p = (variable as any).product("p", { default: "x" });
+  return (<Screen name="S" />);
+});`;
+    expect(() => parseComposition(src)).toThrow(CompositionError);
+  });
+
+  test("rejects a type-mismatched set-variable value", () => {
+    const src = `import { paywall, Screen, View, variable } from "@voidhash/paywalls/compose";
+export default paywall(() => {
+  const p = variable.product("p");
+  return (<Screen><View name="F" onPress={p.set("not-a-product")} /></Screen>);
+});`;
+    expect(() => parseComposition(src)).toThrow(CompositionError);
+  });
+
+  // NOTE: `<View style={{ gap: "lots" }} />` (string on a numeric field) is
+  // accepted by the pure grammar — the parser has no notion of a style field's
+  // value TYPE. It is rejected by the mimic schema encode gate in the closed
+  // `lowerAst`, so that rejection test lives in the mono `paywall-composition`
+  // bridge tests, not here.
+
+  const rejects = (body: string): void => {
+    const source = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";\nexport default paywall(() => (${body}));`;
+    expect(() => parseComposition(source)).toThrow(CompositionError);
+  };
+
+  test("rejects .map() control flow", () => {
+    rejects("<Screen>{items.map((x) => <Text>{x}</Text>)}</Screen>");
+  });
+
+  test("rejects a ternary inside a style value", () => {
+    rejects("<Screen><View style={{ paddingTop: cond ? 1 : 2 }} /></Screen>");
+  });
+
+  test("rejects the removed padding shorthand (unknown style key)", () => {
+    rejects("<Screen><View style={{ padding: 16 }} /></Screen>");
+  });
+
+  test("rejects a removed style alias (unknown style key)", () => {
+    rejects('<Screen><View style={{ bg: "rgba(0, 0, 0, 1)" }} /></Screen>');
+  });
+
+  test("rejects unknown elements", () => {
+    rejects("<Screen><Widget /></Screen>");
+  });
+
+  test("rejects spread attributes", () => {
+    rejects("<Screen><View {...rest} /></Screen>");
+  });
+
+  test("rejects variable-bound text (needs a code component)", () => {
+    rejects("<Screen><Text>{someVar}</Text></Screen>");
+  });
+
+  test("rejects a text attribute on <Text> (content is JSX children)", () => {
+    rejects('<Screen><Text text="Hi" /></Screen>');
+  });
+
+  test("rejects onPress on non-view nodes", () => {
+    rejects("<Screen onPress={closePaywall()}><Text>Hi</Text></Screen>");
+  });
+
+  test("CompositionError carries 0-based line/column", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><Widget /></Screen>));`;
+    try {
+      parseComposition(src);
+      throw new Error("expected throw");
+    } catch (error) {
+      expect(error).toBeInstanceOf(CompositionError);
+      const e = error as CompositionError;
+      expect(e.line).toBe(1); // 0-based: second line
+      expect(typeof e.column).toBe("number");
+    }
+  });
+});
+
+describe("code-component instances (pure)", () => {
+  const registry: CompositionRegistry = {
+    components: [
+      {
+        tag: "ProductOption",
+        source: "local",
+        localComponentId: "cc_1",
+        componentSlug: "product-option",
+        componentVersion: 0,
+        contentHash: "",
+        manifest: {
+          slot: true,
+          props: {
+            title: { kind: "string" },
+            price: { kind: "number" },
+            featured: { kind: "boolean" },
+            plan: { kind: "select", options: ["monthly", "yearly"] },
+            product: { kind: "ref", refType: "product" },
+            features: { kind: "array", item: { kind: "string" } },
+          },
+          actions: {
+            onSelect: { payload: { productId: { kind: "string" } } },
+          },
+        },
+      },
+    ],
+  };
+
+  const CFIXTURE = `
+import { paywall, Screen, View, Text, variable, product, purchase, payload, ProductOption } from "@voidhash/paywalls/compose";
+
+export default paywall(() => {
+  const selected = variable.product("selectedProduct");
+
+  return (
+    <Screen name="Main" style={{ backgroundColor: "rgba(10, 10, 20, 1)" }}>
+      <ProductOption name="Yearly" title="Yearly Plan" price={99} featured plan="yearly" product={selected} features={["Unlimited", "Priority"]} onSelect={purchase(payload("productId"))}>
+        <Text style={{ fontSize: 14 }}>Best value</Text>
+      </ProductOption>
+    </Screen>
+  );
+});
+`;
+
+  test("parses a <Component> into a well-formed component AST node", () => {
+    const ast = parseComposition(CFIXTURE, { registry });
+    const component = ast.root.children[0]!;
+    expect(component.kind).toBe("component");
+    if (component.kind !== "component") return;
+    expect(component.tag).toBe("ProductOption");
+    expect(component.name).toBe("Yearly");
+    const props = Object.fromEntries(component.props.map((p) => [p.name, p.value]));
+    expect(props["title"]).toEqual({ kind: "literal-string", value: "Yearly Plan" });
+    expect(props["price"]).toEqual({ kind: "literal-number", value: 99 });
+    expect(props["featured"]).toEqual({ kind: "literal-boolean", value: true });
+    expect(props["plan"]).toEqual({ kind: "literal-string", value: "yearly" });
+    expect(props["product"]).toEqual({ kind: "variable", variableName: "selectedProduct" });
+    expect(props["features"]).toEqual({
+      kind: "literal-string-array",
+      value: ["Unlimited", "Priority"],
+    });
+    expect(component.actionBindings[0]).toEqual({
+      name: "onSelect",
+      action: { kind: "purchase", product: { kind: "payload", field: "productId" } },
+    });
+  });
+
+  test("component instance round-trips (parse↔print fixpoint)", () => {
+    roundtrip(CFIXTURE, registry);
+  });
+
+  test("props parse in manifest order regardless of source attribute order", () => {
+    const inOrder = `import { paywall, Screen, ProductOption } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen name="Main"><ProductOption title="X" price={99} featured plan="yearly" /></Screen>));`;
+    const outOfOrder = `import { paywall, Screen, ProductOption } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen name="Main"><ProductOption plan="yearly" price={99} featured title="X" /></Screen>));`;
+    const a = parseComposition(inOrder, { registry });
+    const b = parseComposition(outOfOrder, { registry });
+    const nameOrder = (ast: typeof a) => {
+      const c = ast.root.children[0]!;
+      return c.kind === "component" ? c.props.map((p) => p.name) : [];
+    };
+    expect(nameOrder(a)).toEqual(nameOrder(b));
+    expect(printComposition(a, { registry })).toBe(printComposition(b, { registry }));
+  });
+
+  test("a string prop containing a tab round-trips exactly (expression form)", () => {
+    const src = `import { paywall, Screen, ProductOption } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen name="Main"><ProductOption title={"a\\tb"} /></Screen>));`;
+    const printed = printComposition(parseComposition(src, { registry }), { registry });
+    expect(printed).toContain('title={"a\\tb"}');
+    roundtrip(src, registry);
+  });
+
+  test("rejects an unknown prop", () => {
+    const src = CFIXTURE.replace('title="Yearly Plan"', 'bogus="x" title="Yearly Plan"');
+    expect(() => parseComposition(src, { registry })).toThrow(/Unknown prop "bogus"/);
+  });
+
+  test("without a registry, a component tag is an unknown element", () => {
+    expect(() => parseComposition(CFIXTURE)).toThrow(/Unknown element <ProductOption>/);
+  });
+
+  test('a manifest prop literally named "name" is not swallowed by the display-name attribute', () => {
+    const nameRegistry: CompositionRegistry = {
+      components: [
+        {
+          tag: "Widget",
+          source: "local",
+          localComponentId: "cc_w",
+          componentSlug: "widget",
+          componentVersion: 0,
+          contentHash: "",
+          manifest: { slot: false, props: { name: { kind: "string" } }, actions: {} },
+        },
+      ],
+    };
+    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen name="Main"><Widget name="Buy now" /></Screen>));`;
+    const ast = parseComposition(src, { registry: nameRegistry });
+    const widget = ast.root.children[0]!;
+    expect(widget.kind).toBe("component");
+    if (widget.kind !== "component") return;
+    expect(widget.name).toBeUndefined();
+    expect(widget.props).toEqual([
+      { name: "name", value: { kind: "literal-string", value: "Buy now" } },
+    ]);
+    roundtrip(src, nameRegistry);
+  });
+});
+
+describe("structured background style values (gradient + image)", () => {
+  test("a non-default gradient parses into JSON style data", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (
+  <Screen>
+    <View name="Card" style={{ backgroundType: "gradient", backgroundGradient: { kind: "radial", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(255, 0, 0, 1)", position: 0 }, { color: "rgba(0, 0, 255, 1)", position: 1 }] } }} />
+  </Screen>
+));`;
+    const ast = parseComposition(src);
+    const card = ast.root.children[0]!;
+    expect(card.kind).toBe("element");
+    if (card.kind !== "element") return;
+    expect(card.style["backgroundType"]).toBe("gradient");
+    expect(card.style["backgroundGradient"]).toEqual({
+      kind: "radial",
+      startX: 0,
+      startY: 0,
+      endX: 1,
+      endY: 1,
+      stops: [
+        { color: "rgba(255, 0, 0, 1)", position: 0 },
+        { color: "rgba(0, 0, 255, 1)", position: 1 },
+      ],
+    });
+  });
+
+  test("a non-default gradient prints as a deterministic JSX object expression", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="Card" style={{ backgroundType: "gradient", backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(255, 0, 0, 1)", position: 0 }, { color: "rgba(0, 0, 255, 1)", position: 1 }] } }} /></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    expect(printed).toContain(
+      'style={{ backgroundType: "gradient", backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(255, 0, 0, 1)", position: 0 }, { color: "rgba(0, 0, 255, 1)", position: 1 }] } }}',
+    );
+    roundtrip(src);
+  });
+
+  test("an image background round-trips", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="Hero" style={{ backgroundType: "image", backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" } }} /></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    expect(printed).toContain(
+      'style={{ backgroundType: "image", backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" } }}',
+    );
+    roundtrip(src);
+  });
+
+  test("the default gradient + image values are omitted on print", () => {
+    // The View defaults carry backgroundType "solid" plus the canonical gradient
+    // and image defaults; setting them explicitly must print nothing for them —
+    // so the all-default element prints no style attribute at all.
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="Plain" style={{ backgroundType: "solid", backgroundGradient: { kind: "linear", startX: 0.5, startY: 0, endX: 0.5, endY: 1, stops: [{ color: "rgba(255, 255, 255, 1)", position: 0 }, { color: "rgba(255, 255, 255, 0)", position: 1 }] }, backgroundImage: { url: "", resizeMode: "cover" } }} /></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    expect(printed).not.toContain("backgroundType");
+    expect(printed).not.toContain("backgroundGradient");
+    expect(printed).not.toContain("backgroundImage");
+    expect(printed).not.toContain("style=");
+    roundtrip(src);
+  });
+
+  test("rejects a non-literal style value (identifier)", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+const x = 1;
+export default paywall(() => (<Screen><View name="Bad" style={{ backgroundImage: { url: x, resizeMode: "cover" } }} /></Screen>));`;
+    expect(() => parseComposition(src)).toThrow();
+  });
+
+  test("rejects a spread inside a style value", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+const base = {};
+export default paywall(() => (<Screen><View name="Bad" style={{ backgroundImage: { ...base, resizeMode: "cover" } }} /></Screen>));`;
+    expect(() => parseComposition(src)).toThrow();
+  });
+});
+
+describe("style={{ … }} object grammar", () => {
+  const parse = (body: string) => {
+    const source = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";\nexport default paywall(() => (${body}));`;
+    return parseComposition(source);
+  };
+  const messageOf = (body: string): string => {
+    try {
+      parse(body);
+    } catch (error) {
+      if (error instanceof CompositionError) {
+        return error.message;
+      }
+      throw error;
+    }
+    throw new Error("expected a CompositionError");
+  };
+
+  test("style={{}} parses as an empty style (legal)", () => {
+    const ast = parse('<Screen><View name="Empty" style={{}} /></Screen>');
+    const view = ast.root.children[0]!;
+    expect(view.kind).toBe("element");
+    if (view.kind === "element") {
+      expect(view.style).toEqual({});
+    }
+  });
+
+  test("a former FLAT style attribute is a migration error guiding to style={{ … }}", () => {
+    const message = messageOf('<Screen><View paddingTop={16} /></Screen>');
+    expect(message).toContain("style={{");
+    expect(message).toContain('"paddingTop"');
+  });
+
+  test("a duplicate style key is a hard error", () => {
+    const message = messageOf('<Screen><View style={{ paddingTop: 8, paddingTop: 16 }} /></Screen>');
+    expect(message).toContain('Duplicate style key "paddingTop"');
+  });
+
+  test("an unknown style key errors with a did-you-mean suggestion", () => {
+    const message = messageOf('<Screen><View style={{ paddingTp: 4 }} /></Screen>');
+    expect(message).toContain('Unknown style key "paddingTp"');
+    expect(message).toContain('did you mean "paddingTop"');
+  });
+
+  test("a shorthand property inside style is rejected", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+const paddingTop = 4;
+export default paywall(() => (<Screen><View style={{ paddingTop }} /></Screen>));`;
+    expect(() => parseComposition(src)).toThrow(CompositionError);
+  });
+
+  test("a spread property inside style is rejected", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+const base = {};
+export default paywall(() => (<Screen><View style={{ ...base }} /></Screen>));`;
+    expect(() => parseComposition(src)).toThrow(CompositionError);
+  });
+
+  test("a computed property name inside style is rejected", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+const key = "paddingTop";
+export default paywall(() => (<Screen><View style={{ [key]: 4 }} /></Screen>));`;
+    expect(() => parseComposition(src)).toThrow(CompositionError);
+  });
+
+  test("a style attribute on a component tag is an unknown-attribute error", () => {
+    const registry: CompositionRegistry = {
+      components: [
+        {
+          tag: "Widget",
+          source: "local",
+          localComponentId: "cc_w",
+          componentSlug: "widget",
+          componentVersion: 0,
+          contentHash: "",
+          manifest: { slot: false, props: {}, actions: {} },
+        },
+      ],
+    };
+    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen name="Main"><Widget style={{ paddingTop: 4 }} /></Screen>));`;
+    expect(() => parseComposition(src, { registry })).toThrow(/Unknown prop "style"/);
+  });
+
+  test("fixpoint: mixed style values (negative number, JSX-special string, gradient, boolean) + an all-default element", () => {
+    const src = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";
+export default paywall(() => (
+  <Screen style={{ safeAreaTop: true, backgroundType: "gradient", backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }] } }}>
+    <View name="Neg" style={{ marginTop: -4 }} />
+    <Text>{"save > 50% {today}"}</Text>
+    <View name="Default" />
+  </Screen>
+));`;
+    const printed = printComposition(parseComposition(src));
+    // Fixpoint: print → parse → print is byte-identical.
+    expect(printComposition(parseComposition(printed))).toBe(printed);
+    expect(printed).toContain("style={{ marginTop: -4 }}");
+    expect(printed).toContain('{"save > 50% {today}"}');
+    expect(printed).toContain("safeAreaTop: true");
+    expect(printed).toContain(
+      'backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }] }',
+    );
+    // The all-default View prints with no style attribute.
+    expect(printed).toContain('<View name="Default" />');
+  });
+});
diff --git a/libraries/paywalls/tests/panel-dispatch.test.tsx b/libraries/paywalls/tests/panel-dispatch.test.tsx
new file mode 100644
index 000000000..f17a8d4c5
--- /dev/null
+++ b/libraries/paywalls/tests/panel-dispatch.test.tsx
@@ -0,0 +1,176 @@
+import { useState } from "react";
+import { describe, expect, it, vi } from "vitest";
+
+import { createPanelSession, Panel, type PanelSessionInputs } from "../src/panel/index";
+import type { PanelTree } from "../src/schema/panel-tree";
+import { parsePanelTree } from "../src/schema/validate-panel";
+
+const emptyInputs: PanelSessionInputs = {
+  props: {},
+  selection: { count: 1 },
+  data: { products: [], variables: {} },
+};
+
+const findNode = (
+  tree: PanelTree,
+  type: string,
+): { id: number; props: Record<string, unknown>; events: ReadonlyArray<string> } | undefined => {
+  const walk = (node: {
+    type: string;
+    id: number;
+    props: Record<string, unknown>;
+    events: ReadonlyArray<string>;
+    children?: ReadonlyArray<unknown>;
+  }): ReturnType<typeof findNode> => {
+    if (node.type === type) return node;
+    for (const child of node.children ?? []) {
+      const hit = walk(child as never);
+      if (hit) return hit;
+    }
+    return undefined;
+  };
+  return walk(tree.root as never);
+};
+
+describe("panel dispatch — discrete synchronous flush", () => {
+  it("reflects a handler's setState in an onTree emission before dispatchEvent returns", () => {
+    const emissions: Array<{ label: unknown; revision: number }> = [];
+    const session = createPanelSession({
+      render: () => {
+        const [n, setN] = useState(0);
+        return (
+          <Panel>
+            <Panel.Button label={`n=${n}`} onClick={() => setN((v) => v + 1)} />
+          </Panel>
+        );
+      },
+      initialInputs: emptyInputs,
+      callbacks: {
+        onTree: (tree, revision) => {
+          emissions.push({ label: findNode(tree, "button")!.props.label, revision });
+        },
+        onError: () => {},
+      },
+    });
+
+    const buttonId = findNode(session.getTree(), "button")!.id;
+    const emissionsBefore = emissions.length;
+
+    // Fire the click. The setState inside must be committed AND its tree
+    // emitted before this call returns — the in-process 60fps-drag guarantee.
+    const ran = session.dispatchEvent(buttonId, "onClick", []);
+    expect(ran).toBe(true);
+
+    // A new emission already arrived (synchronously), showing n=1.
+    expect(emissions.length).toBe(emissionsBefore + 1);
+    expect(emissions[emissions.length - 1]!.label).toBe("n=1");
+    // And getTree() reflects it immediately.
+    expect(findNode(session.getTree(), "button")!.props.label).toBe("n=1");
+    session.dispose();
+  });
+
+  it("reads the CURRENT handler, not a captured one, across re-renders", () => {
+    let clicks = 0;
+    const session = createPanelSession({
+      render: (ctx) => (
+        <Panel>
+          <Panel.Button label={`c=${ctx.selection.count}`} onClick={() => (clicks += ctx.selection.count)} />
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: { onTree: () => {}, onError: () => {} },
+    });
+    const id = findNode(session.getTree(), "button")!.id;
+    // Re-render with a new closure (count 5). Dispatch must use the latest one.
+    session.update({ ...emptyInputs, selection: { count: 5 } });
+    session.dispatchEvent(id, "onClick", []);
+    expect(clicks).toBe(5);
+    session.dispose();
+  });
+
+  it("drops a stale dispatch (unknown node id) without throwing", () => {
+    const session = createPanelSession({
+      render: () => (
+        <Panel>
+          <Panel.Button label="x" onClick={() => {}} />
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: { onTree: () => {}, onError: () => {} },
+    });
+    expect(session.dispatchEvent(9999, "onClick", [])).toBe(false);
+    session.dispose();
+  });
+
+  it("drops a dispatch for a name that is not currently a function prop", () => {
+    const session = createPanelSession({
+      render: () => (
+        <Panel>
+          <Panel.Button label="x" onClick={() => {}} />
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: { onTree: () => {}, onError: () => {} },
+    });
+    const id = findNode(session.getTree(), "button")!.id;
+    // `onToggle` is not a prop on this button.
+    expect(session.dispatchEvent(id, "onToggle", [])).toBe(false);
+    session.dispose();
+  });
+
+  it("drops a dispatch to a node that has unmounted", () => {
+    const session = createPanelSession<Record<string, never>>({
+      render: (ctx) => (
+        <Panel>
+          {ctx.selection.count > 0 ? <Panel.Button label="a" onClick={() => {}} /> : null}
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: { onTree: () => {}, onError: () => {} },
+    });
+    const id = findNode(session.getTree(), "button")!.id;
+    session.update({ ...emptyInputs, selection: { count: 0 } });
+    // The node id is stale now; dispatch is silently dropped.
+    expect(session.dispatchEvent(id, "onClick", [])).toBe(false);
+    session.dispose();
+  });
+});
+
+describe("panel session — error boundary", () => {
+  it("reports onError and emits a generic fallback callout tree", () => {
+    const onError = vi.fn();
+    const trees: PanelTree[] = [];
+    const session = createPanelSession({
+      render: () => {
+        throw new Error("author secret: boom");
+      },
+      initialInputs: emptyInputs,
+      callbacks: {
+        onTree: (tree) => trees.push(tree),
+        onError,
+      },
+    });
+    expect(onError).toHaveBeenCalled();
+    // The error text never enters the tree; a neutral error callout does.
+    const tree = session.getTree();
+    const callout = findNode(tree, "callout")!;
+    expect(callout.props.tone).toBe("error");
+    expect(JSON.stringify(tree)).not.toContain("author secret");
+    expect(tree.root.type).toBe("panel");
+    // The fallback tree must survive the strict host validator (non-negative ids).
+    expect(parsePanelTree(JSON.stringify(tree)).ok).toBe(true);
+    session.dispose();
+  });
+
+  it("emits a valid empty-panel tree before the first commit / for empty renders", () => {
+    const session = createPanelSession({
+      render: () => null,
+      initialInputs: emptyInputs,
+      callbacks: { onTree: () => {}, onError: () => {} },
+    });
+    const tree = session.getTree();
+    expect(tree.root.type).toBe("panel");
+    expect(parsePanelTree(JSON.stringify(tree)).ok).toBe(true);
+    session.dispose();
+  });
+});
diff --git a/libraries/paywalls/tests/panel-intents.test.tsx b/libraries/paywalls/tests/panel-intents.test.tsx
new file mode 100644
index 000000000..da61e43a8
--- /dev/null
+++ b/libraries/paywalls/tests/panel-intents.test.tsx
@@ -0,0 +1,138 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  createPanelSession,
+  Panel,
+  type PanelContext,
+  type PanelIntent,
+  type PanelProps,
+  type PanelPropHandle,
+  type PanelRefPropHandle,
+  type PanelSessionInputs,
+} from "../src/panel/index";
+import { PANEL_CAPS } from "../src/schema/panel-tree";
+
+/**
+ * Builds a session that captures the ctx handed to the definition + intents.
+ * `P` names the concrete `ctx.props` shape so tests read handles without union
+ * narrowing gymnastics.
+ */
+const makeIntentSession = <P extends PanelProps>(
+  inputs: PanelSessionInputs,
+): { intents: PanelIntent[]; ctx: PanelContext<P>; dispose: () => void } => {
+  const intents: PanelIntent[] = [];
+  let captured!: PanelContext<P>;
+  const session = createPanelSession<P>({
+    render: (ctx) => {
+      captured = ctx;
+      return <Panel />;
+    },
+    initialInputs: inputs,
+    callbacks: { onTree: () => {}, onError: () => {} },
+    intentSink: (batch) => intents.push(...batch),
+  });
+  return { intents, ctx: captured, dispose: () => session.dispose() };
+};
+
+describe("panel intents — set/reset/cancel", () => {
+  it("emits a live set-prop then a commit set-prop", () => {
+    const { intents, ctx, dispose } = makeIntentSession<{ accentColor: PanelPropHandle<string> }>({
+      props: { accentColor: { kind: "string", value: "#000" } },
+      selection: { count: 1 },
+      data: { products: [], variables: {} },
+    });
+    ctx.props.accentColor.set("#111", { gesture: "live" });
+    ctx.props.accentColor.set("#222", { gesture: "commit" });
+    expect(intents).toEqual([
+      { type: "set-prop", name: "accentColor", value: "#111", gesture: "live" },
+      { type: "set-prop", name: "accentColor", value: "#222", gesture: "commit" },
+    ]);
+    dispose();
+  });
+
+  it("defaults the gesture to commit", () => {
+    const { intents, ctx, dispose } = makeIntentSession<{ title: PanelPropHandle<string> }>({
+      props: { title: { kind: "string", value: "x" } },
+      selection: { count: 1 },
+      data: { products: [], variables: {} },
+    });
+    ctx.props.title.set("y");
+    expect(intents[0]).toEqual({
+      type: "set-prop",
+      name: "title",
+      value: "y",
+      gesture: "commit",
+    });
+    dispose();
+  });
+
+  it("emits reset-prop and gesture-discard", () => {
+    const { intents, ctx, dispose } = makeIntentSession<{ size: PanelPropHandle<number> }>({
+      props: { size: { kind: "number", value: 12 } },
+      selection: { count: 1 },
+      data: { products: [], variables: {} },
+    });
+    ctx.props.size.reset();
+    ctx.props.size.cancel();
+    expect(intents).toEqual([
+      { type: "reset-prop", name: "size" },
+      { type: "gesture-discard", name: "size" },
+    ]);
+    dispose();
+  });
+
+  it("drops a set() on a bound prop (host owns binding)", () => {
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+    const { intents, ctx, dispose } = makeIntentSession<{ accentColor: PanelPropHandle<string> }>({
+      props: { accentColor: { kind: "string", value: "#abc", bound: true } },
+      selection: { count: 1 },
+      data: { products: [], variables: {} },
+    });
+    expect(ctx.props.accentColor.bound).toBe(true);
+    ctx.props.accentColor.set("#def");
+    expect(intents).toEqual([]);
+    expect(warn).toHaveBeenCalled();
+    warn.mockRestore();
+    dispose();
+  });
+
+  it("drops an oversized set-prop value", () => {
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+    const { intents, ctx, dispose } = makeIntentSession<{ blob: PanelPropHandle<string> }>({
+      props: { blob: { kind: "string", value: "" } },
+      selection: { count: 1 },
+      data: { products: [], variables: {} },
+    });
+    ctx.props.blob.set("x".repeat(PANEL_CAPS.intentBytes + 1));
+    expect(intents).toEqual([]);
+    expect(warn).toHaveBeenCalled();
+    warn.mockRestore();
+    dispose();
+  });
+
+  it("resolves a ref handle to the product and emits set-ref", () => {
+    const product = { id: "p1", slug: "p1", displayName: "Pro", priceString: "$9" };
+    const { intents, ctx, dispose } = makeIntentSession<{ product: PanelRefPropHandle }>({
+      props: { product: { kind: "ref", productId: "p1" } },
+      selection: { count: 1 },
+      data: { products: [product], variables: {} },
+    });
+    expect(ctx.props.product.value).toEqual(product);
+    expect(ctx.props.product.productId).toBe("p1");
+    ctx.props.product.set("p2");
+    expect(intents).toEqual([{ type: "set-ref", name: "product", productId: "p2" }]);
+    dispose();
+  });
+
+  it("exposes a read-only component handle with no writer", () => {
+    const { ctx, dispose } = makeIntentSession({
+      props: { slot: { kind: "component", value: null } },
+      selection: { count: 1 },
+      data: { products: [], variables: {} },
+    });
+    const handle = ctx.props.slot!;
+    expect(handle.kind).toBe("component");
+    expect("set" in handle).toBe(false);
+    dispose();
+  });
+});
diff --git a/libraries/paywalls/tests/panel-reconciler.test.tsx b/libraries/paywalls/tests/panel-reconciler.test.tsx
new file mode 100644
index 000000000..b31424d42
--- /dev/null
+++ b/libraries/paywalls/tests/panel-reconciler.test.tsx
@@ -0,0 +1,220 @@
+import { describe, expect, it, vi } from "vitest";
+
+import {
+  createPanelSession,
+  Panel,
+  type PanelSessionInputs,
+} from "../src/panel/index";
+import type { PanelTree } from "../src/schema/panel-tree";
+import { parsePanelTree } from "../src/schema/validate-panel";
+
+/** A collector that records every emitted `(tree, revision)`. */
+const makeCollector = () => {
+  const trees: Array<{ tree: PanelTree; revision: number }> = [];
+  const errors: unknown[] = [];
+  return {
+    trees,
+    errors,
+    callbacks: {
+      onTree: (tree: PanelTree, revision: number) => {
+        trees.push({ tree, revision });
+      },
+      onError: (error: unknown) => {
+        errors.push(error);
+      },
+    },
+    last: () => trees[trees.length - 1]!,
+  };
+};
+
+const emptyInputs: PanelSessionInputs = {
+  props: {},
+  selection: { count: 1 },
+  data: { products: [], variables: {} },
+};
+
+/** Finds the first node of `type` in a tree, depth-first. */
+const findNode = (
+  tree: PanelTree,
+  type: string,
+): { id: number; props: Record<string, unknown>; events: ReadonlyArray<string> } | undefined => {
+  const walk = (node: {
+    type: string;
+    id: number;
+    props: Record<string, unknown>;
+    events: ReadonlyArray<string>;
+    children?: ReadonlyArray<unknown>;
+  }): ReturnType<typeof findNode> => {
+    if (node.type === type) return node;
+    for (const child of node.children ?? []) {
+      const hit = walk(child as never);
+      if (hit) return hit;
+    }
+    return undefined;
+  };
+  return walk(tree.root as never);
+};
+
+describe("panel reconciler — serialization", () => {
+  it("serializes a fixture using every primitive into a valid PanelTree", () => {
+    const collector = makeCollector();
+    const session = createPanelSession({
+      render: () => (
+        <Panel>
+          <Panel.Section title="Layout" collapsible defaultCollapsed onToggle={() => {}}>
+            <Panel.SectionActions>
+              <Panel.Button icon="plus" onClick={() => {}} />
+            </Panel.SectionActions>
+            <Panel.Subsection title="Spacing">
+              <Panel.Row gap="sm" width="full" align="center" justify="between">
+                <Panel.Column gap="xs" width="half" align="start">
+                  <Panel.Field label="Name" icon="type">
+                    <Panel.TextField kind="text" value="hi" onChange={() => {}} onCommit={() => {}} />
+                  </Panel.Field>
+                  <Panel.Text content="Hello" variant="label" tone="muted" />
+                  <Panel.Callout message="Note" tone="info" />
+                </Panel.Column>
+              </Panel.Row>
+            </Panel.Subsection>
+            <Panel.Popover open onOpenChange={() => {}}>
+              <Panel.PopoverTrigger>
+                <Panel.Button label="Open" onClick={() => {}} />
+              </Panel.PopoverTrigger>
+              <Panel.PopoverContent align="start" side="bottom">
+                <Panel.Menu items={[{ value: "a", label: "A" }]} value="a" onSelect={() => {}} />
+                <Panel.SelectField
+                  value="a"
+                  options={[{ value: "a" }]}
+                  onChange={() => {}}
+                />
+                <Panel.ToggleGroup value="a" options={[{ value: "a" }]} onChange={() => {}} />
+                <Panel.SwitchField checked label="On" onChange={() => {}} />
+                <Panel.SliderField value={5} min={0} max={10} onChange={() => {}} onCommit={() => {}} />
+                <Panel.ResetAffordance show label="Reset" onReset={() => {}}>
+                  <Panel.ColorField value="#fff" onChange={() => {}} onCommit={() => {}} />
+                </Panel.ResetAffordance>
+                <Panel.ColorPicker color="#fff" opacity={1} onColorChange={() => {}} />
+                <Panel.GradientStops
+                  stops={[{ id: "s1", pos: 0, value: "#000" }]}
+                  selectedStopId="s1"
+                  onSelect={() => {}}
+                />
+                <Panel.Swatch color="#fff" />
+                <Panel.ImageField url="u" resizeMode="cover" onPick={() => {}} />
+                <Panel.AlignmentGrid flexDirection="row" onChange={() => {}} />
+                <Panel.DimensionField axis="width" value={100} onChange={() => {}} />
+                <Panel.FillField label="Fill" backgroundType="color" onColorChange={() => {}} />
+                <Panel.VariableField variableName="v" onBind={() => {}} />
+                <Panel.ActionEditorField value={{ kind: "close" }} onChange={() => {}} />
+                <Panel.PropField name="accentColor" />
+                <Panel.DefaultProps exclude={["accentColor"]} />
+              </Panel.PopoverContent>
+            </Panel.Popover>
+          </Panel.Section>
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: collector.callbacks,
+    });
+
+    const tree = session.getTree();
+    // Round-trip through the strict wire validator (serialize → JSON → parse).
+    const result = parsePanelTree(JSON.stringify(tree));
+    expect(result.ok).toBe(true);
+
+    // Events split out of props: the section's onToggle became an event name.
+    const section = findNode(tree, "section")!;
+    expect(section.events).toContain("onToggle");
+    expect("onToggle" in section.props).toBe(false);
+    session.dispose();
+  });
+
+  it("drops a function prop outside the event allowlist with a warning", () => {
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+    const collector = makeCollector();
+    // `onBogus` is not in <button>'s event allowlist; the primitive is typed
+    // so it is passed through an untyped element to reach the serializer.
+    const bogusProps = { label: "x", onBogus: () => {} };
+    const session = createPanelSession({
+      render: () => <Panel>{Panel.Button(bogusProps as never)}</Panel>,
+      initialInputs: emptyInputs,
+      callbacks: collector.callbacks,
+    });
+    const button = findNode(session.getTree(), "button")!;
+    expect(button.events).not.toContain("onBogus");
+    expect(warn).toHaveBeenCalled();
+    warn.mockRestore();
+    session.dispose();
+  });
+});
+
+describe("panel reconciler — updates & ids", () => {
+  it("keeps a node's id stable across re-render when props change", () => {
+    const collector = makeCollector();
+    const session = createPanelSession({
+      render: (ctx) => (
+        <Panel>
+          <Panel.Section title={`T-${ctx.selection.count}`}>
+            <Panel.Button label={`stable-${ctx.selection.count}`} onClick={() => {}} />
+          </Panel.Section>
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: collector.callbacks,
+    });
+    const before = findNode(session.getTree(), "button")!;
+    // A prop change on the button (label) — mutation mode reuses the instance.
+    session.update({ ...emptyInputs, selection: { count: 9 } });
+    const after = findNode(session.getTree(), "button")!;
+    expect(after.props.label).toBe("stable-9");
+    expect(after.id).toBe(before.id);
+    session.dispose();
+  });
+
+  it("mints a fresh id when a node unmounts and remounts", () => {
+    const collector = makeCollector();
+    const session = createPanelSession<Record<string, never>>({
+      render: (ctx) => (
+        <Panel>
+          {ctx.selection.count > 0 ? <Panel.Button label="a" onClick={() => {}} /> : null}
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: collector.callbacks,
+    });
+    const firstId = findNode(session.getTree(), "button")!.id;
+    // Unmount the button.
+    session.update({ ...emptyInputs, selection: { count: 0 } });
+    expect(findNode(session.getTree(), "button")).toBeUndefined();
+    // Remount it.
+    session.update({ ...emptyInputs, selection: { count: 1 } });
+    const secondId = findNode(session.getTree(), "button")!.id;
+    expect(secondId).not.toBe(firstId);
+    session.dispose();
+  });
+});
+
+describe("panel reconciler — microtask coalescing", () => {
+  it("emits once for two synchronous updates in one tick", async () => {
+    const collector = makeCollector();
+    const session = createPanelSession({
+      render: (ctx) => (
+        <Panel>
+          <Panel.Text content={`count=${ctx.selection.count}`} />
+        </Panel>
+      ),
+      initialInputs: emptyInputs,
+      callbacks: collector.callbacks,
+    });
+    const baseRevisions = collector.trees.length;
+    // Two synchronous host updates before the microtask drains.
+    session.update({ ...emptyInputs, selection: { count: 2 } });
+    session.update({ ...emptyInputs, selection: { count: 3 } });
+    await Promise.resolve();
+    await Promise.resolve();
+    // Exactly one new emission, reflecting the latest (count=3).
+    expect(collector.trees.length).toBe(baseRevisions + 1);
+    expect(findNode(collector.last().tree, "text")!.props.content).toBe("count=3");
+    session.dispose();
+  });
+});
diff --git a/libraries/paywalls/tests/panel-tree.test.ts b/libraries/paywalls/tests/panel-tree.test.ts
new file mode 100644
index 000000000..96ffb9d7b
--- /dev/null
+++ b/libraries/paywalls/tests/panel-tree.test.ts
@@ -0,0 +1,700 @@
+import { describe, expect, test } from "vitest";
+
+import { PANEL_CAPS, PANEL_NODE_SPECS, PANEL_TREE_VERSION } from "../src/schema/panel-tree";
+import { parsePanelTree } from "../src/schema/validate-panel";
+
+/**
+ * A running id counter so every fixture node gets a unique id without the
+ * fixtures having to hand-thread integers. Reset per builder call.
+ */
+let nextId = 0;
+const id = () => nextId++;
+
+/**
+ * A fully-populated valid panel tree containing EVERY node type in the v1
+ * vocabulary, with a realistic prop/event population per type. This doubles as
+ * the host-contract fixture, so it stays exhaustive.
+ */
+const fullTree = () => {
+  nextId = 0;
+  return {
+    version: PANEL_TREE_VERSION,
+    root: {
+      type: "panel",
+      id: id(),
+      props: {},
+      events: [],
+      children: [
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Layout", collapsible: true, defaultCollapsed: false },
+          events: ["onToggle"],
+          children: [
+            {
+              type: "sectionActions",
+              id: id(),
+              props: {},
+              events: [],
+              children: [
+                {
+                  type: "button",
+                  id: id(),
+                  props: { icon: "plus", variant: "ghost", size: "icon-sm" },
+                  events: ["onClick"],
+                },
+              ],
+            },
+            {
+              type: "subsection",
+              id: id(),
+              props: { title: "Size" },
+              events: [],
+              children: [
+                {
+                  type: "row",
+                  id: id(),
+                  props: { gap: "sm", width: "full", align: "center", justify: "between" },
+                  events: [],
+                  children: [
+                    {
+                      type: "column",
+                      id: id(),
+                      props: { gap: "xs", width: "auto", align: "start" },
+                      events: [],
+                      children: [
+                        {
+                          type: "field",
+                          id: id(),
+                          props: { label: "Width", icon: "w" },
+                          events: [],
+                          children: [
+                            {
+                              type: "dimensionField",
+                              id: id(),
+                              props: {
+                                axis: "width",
+                                mode: "custom",
+                                value: 240,
+                                label: "Width",
+                                mixed: false,
+                                disabled: false,
+                                computed: 240,
+                              },
+                              events: ["onChange", "onCommit", "onModeChange"],
+                            },
+                          ],
+                        },
+                        {
+                          type: "field",
+                          id: id(),
+                          props: { label: "Align", icon: "a" },
+                          events: [],
+                          children: [
+                            {
+                              type: "alignmentGrid",
+                              id: id(),
+                              props: {
+                                flexDirection: "row",
+                                alignItems: "center",
+                                justifyContent: "space-between",
+                                mixed: false,
+                              },
+                              events: ["onChange"],
+                            },
+                          ],
+                        },
+                      ],
+                    },
+                  ],
+                },
+              ],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Content", collapsible: true },
+          events: ["onToggle"],
+          children: [
+            {
+              type: "text",
+              id: id(),
+              props: { content: "Edit the paywall.", variant: "muted", tone: "neutral" },
+              events: [],
+            },
+            {
+              type: "callout",
+              id: id(),
+              props: { message: "Product is unset.", tone: "warning" },
+              events: [],
+            },
+            {
+              type: "textField",
+              id: id(),
+              props: {
+                kind: "number",
+                value: 16,
+                mixed: false,
+                placeholder: "size",
+                min: 0,
+                max: 200,
+                step: 1,
+                icon: "type",
+                disabled: false,
+                trailingMenu: {
+                  items: [
+                    { value: "auto", label: "Auto" },
+                    { value: "fixed", label: "Fixed" },
+                  ],
+                  value: "auto",
+                },
+              },
+              events: ["onChange", "onCommit", "onTrailingSelect"],
+            },
+            {
+              type: "selectField",
+              id: id(),
+              props: {
+                value: "cover",
+                options: [
+                  { value: "cover", label: "Cover", icon: "image" },
+                  { value: "contain", label: "Contain", disabled: false },
+                ],
+                placeholder: "mode",
+                mixed: false,
+                disabled: false,
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "toggleGroup",
+              id: id(),
+              props: {
+                value: "left",
+                options: [
+                  { value: "left", icon: "arrowRight" },
+                  { value: "center", label: "Center" },
+                ],
+                mixed: false,
+                disabled: false,
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "switchField",
+              id: id(),
+              props: { checked: true, mixed: false, label: "Visible", disabled: false },
+              events: ["onChange"],
+            },
+            {
+              type: "sliderField",
+              id: id(),
+              props: { value: 50, min: 0, max: 100, step: 1, mixed: false, disabled: false },
+              events: ["onChange", "onCommit"],
+            },
+            {
+              type: "resetAffordance",
+              id: id(),
+              props: { show: true, label: "Reset" },
+              events: ["onReset"],
+              children: [
+                {
+                  type: "text",
+                  id: id(),
+                  props: { content: "overridden" },
+                  events: [],
+                },
+              ],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Fill" },
+          events: [],
+          children: [
+            {
+              type: "field",
+              id: id(),
+              props: { label: "Fill" },
+              events: [],
+              children: [
+                {
+                  type: "swatch",
+                  id: id(),
+                  props: { color: "rgba(0,0,0,1)", imageUrl: null },
+                  events: [],
+                },
+                {
+                  type: "fillField",
+                  id: id(),
+                  props: {
+                    label: "Fill",
+                    backgroundType: "gradient",
+                    isTypeMixed: false,
+                    backgroundColor: "rgba(0,0,0,1)",
+                    gradient: {
+                      kind: "linear",
+                      startX: 0,
+                      startY: 0,
+                      endX: 1,
+                      endY: 1,
+                      stops: [
+                        { color: "rgba(0,0,0,1)", position: 0 },
+                        { color: "rgba(255,255,255,1)", position: 1 },
+                      ],
+                    },
+                    selectedStopIndex: 0,
+                    image: { url: "", resizeMode: "cover" },
+                    open: false,
+                  },
+                  events: [
+                    "onTypeChange",
+                    "onColorChange",
+                    "onGradientChange",
+                    "onAddStopAt",
+                    "onSelectStop",
+                    "onCommit",
+                    "onDiscard",
+                    "onOpenChange",
+                  ],
+                },
+              ],
+            },
+            {
+              type: "popover",
+              id: id(),
+              props: { open: false },
+              events: ["onOpenChange"],
+              children: [
+                {
+                  type: "popoverTrigger",
+                  id: id(),
+                  props: {},
+                  events: [],
+                  children: [
+                    {
+                      type: "button",
+                      id: id(),
+                      props: { label: "Edit fill", icon: "paintbrush", variant: "secondary" },
+                      events: ["onClick"],
+                    },
+                  ],
+                },
+                {
+                  type: "popoverContent",
+                  id: id(),
+                  props: { align: "start", side: "bottom" },
+                  events: [],
+                  children: [
+                    {
+                      type: "colorField",
+                      id: id(),
+                      props: { value: "rgba(0,0,0,1)", mixed: false, disabled: false },
+                      events: ["onChange", "onDragStart", "onCommit", "onDiscard"],
+                    },
+                    {
+                      type: "colorPicker",
+                      id: id(),
+                      props: { color: "000000", opacity: 100 },
+                      events: [
+                        "onColorChange",
+                        "onOpacityChange",
+                        "onDragStart",
+                        "onDragEnd",
+                        "onDiscard",
+                      ],
+                    },
+                    {
+                      type: "gradientStops",
+                      id: id(),
+                      props: {
+                        stops: [
+                          { id: 0, position: 0, color: "rgba(0,0,0,1)" },
+                          { id: 1, position: 1, color: "rgba(255,255,255,1)" },
+                        ],
+                        selectedStopId: 0,
+                      },
+                      events: [
+                        "onSelect",
+                        "onAddStop",
+                        "onMoveStop",
+                        "onRemoveStop",
+                        "onDragStart",
+                        "onDragEnd",
+                      ],
+                    },
+                    {
+                      type: "imageField",
+                      id: id(),
+                      props: { url: "", resizeMode: "cover" },
+                      events: ["onPick", "onResizeModeChange", "onClear"],
+                    },
+                  ],
+                },
+              ],
+            },
+            {
+              type: "menu",
+              id: id(),
+              props: {
+                items: [
+                  { value: "solid", label: "Solid" },
+                  { value: "gradient", label: "Gradient", disabled: false },
+                ],
+                value: "solid",
+                align: "end",
+              },
+              events: ["onSelect"],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Binding" },
+          events: [],
+          children: [
+            {
+              type: "variableField",
+              id: id(),
+              props: {
+                variableId: "var_1",
+                variableName: "isPro",
+                variableType: "boolean",
+                allowedKinds: ["boolean"],
+                label: "Visible when",
+              },
+              events: ["onBind", "onUnbind", "onCreate"],
+            },
+            {
+              type: "actionEditorField",
+              id: id(),
+              props: {
+                value: {
+                  type: "set-variable",
+                  payload: {
+                    variableId: "var_1",
+                    newValue: { type: "literal", value: { key: "boolean", value: true } },
+                  },
+                },
+                variables: [
+                  { id: "var_1", name: "isPro", value: { key: "boolean", value: true } },
+                ],
+                productVariables: [
+                  {
+                    id: "var_2",
+                    name: "plan",
+                    ownerLabel: "Root",
+                    aliasId: "alias_2",
+                    value: { key: "product", value: { productId: "prod_1" } },
+                  },
+                ],
+                payloadFields: ["productId"],
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "productField",
+              id: id(),
+              props: {
+                productId: "prod_1",
+                placeholder: "Select product…",
+                disabled: false,
+                label: "Product",
+              },
+              events: ["onChange"],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Component" },
+          events: [],
+          children: [
+            {
+              type: "propField",
+              id: id(),
+              props: { name: "heading" },
+              events: [],
+            },
+            {
+              type: "defaultProps",
+              id: id(),
+              props: { exclude: ["heading", "product"] },
+              events: [],
+            },
+          ],
+        },
+      ],
+    },
+  };
+};
+
+describe("parsePanelTree — valid contract fixture", () => {
+  test("a fully-populated tree with every node type parses ok", () => {
+    const result = parsePanelTree(fullTree());
+    expect(result).toEqual({ ok: true, tree: fullTree() });
+  });
+
+  test("the fixture exercises every node type in the vocabulary", () => {
+    const seen = new Set<string>();
+    const walk = (node: { type: string; children?: unknown[] }) => {
+      seen.add(node.type);
+      for (const child of node.children ?? []) {
+        walk(child as { type: string; children?: unknown[] });
+      }
+    };
+    walk(fullTree().root);
+    for (const type of Object.keys(PANEL_NODE_SPECS)) {
+      expect(seen.has(type), `fixture is missing node type "${type}"`).toBe(true);
+    }
+  });
+
+  test("accepts a serialized JSON string", () => {
+    const result = parsePanelTree(JSON.stringify(fullTree()));
+    expect(result.ok).toBe(true);
+  });
+});
+
+describe("parsePanelTree — rejections", () => {
+  test("rejects an unknown node type", () => {
+    const tree = fullTree();
+    (tree.root.children[0] as { type: string }).type = "mysteryNode";
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+  });
+
+  test("rejects an unknown prop key", () => {
+    const tree = fullTree();
+    (tree.root.children[0] as { props: Record<string, unknown> }).props.bogus = 1;
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+  });
+
+  test("rejects an event name not in the type's allowlist", () => {
+    const tree = fullTree();
+    (tree.root.children[0] as { events: string[] }).events = ["onToggle", "onHack"];
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+  });
+
+  test("rejects duplicate ids", () => {
+    const tree = fullTree();
+    (tree.root.children[0] as { id: number }).id = tree.root.id;
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/duplicated/);
+  });
+
+  test("rejects a negative id", () => {
+    const tree = fullTree();
+    (tree.root.children[0] as { id: number }).id = -1;
+    expect(parsePanelTree(tree).ok).toBe(false);
+  });
+
+  test("rejects a non-integer id", () => {
+    const tree = fullTree();
+    (tree.root.children[0] as { id: number }).id = 1.5;
+    expect(parsePanelTree(tree).ok).toBe(false);
+  });
+
+  test("rejects children on a childless type", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "text", id: 1, props: { content: "x" }, events: [], children: [] },
+        ],
+      },
+    };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/does not allow children/);
+  });
+
+  test("rejects a root that is not a panel", () => {
+    const tree = { version: PANEL_TREE_VERSION, root: { type: "section", id: 0, props: {}, events: [], children: [] } };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+  });
+
+  test("rejects a version mismatch", () => {
+    const tree = fullTree();
+    (tree as { version: number }).version = 999;
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/version/);
+  });
+
+  test("rejects an unknown icon token", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [{ type: "button", id: 1, props: { icon: "skull" }, events: ["onClick"] }],
+      },
+    };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/icon token/);
+  });
+
+  test("rejects a top-level envelope key that is not version/root", () => {
+    const tree = { ...fullTree(), extra: 1 };
+    expect(parsePanelTree(tree).ok).toBe(false);
+  });
+
+  test("rejects malformed JSON strings", () => {
+    expect(parsePanelTree("{ not json").ok).toBe(false);
+  });
+});
+
+describe("parsePanelTree — caps", () => {
+  test("rejects a tree exceeding the node cap", () => {
+    const children = Array.from({ length: PANEL_CAPS.nodes + 1 }, (_, i) => ({
+      type: "text",
+      id: i + 1,
+      props: {},
+      events: [],
+    }));
+    const tree = { version: PANEL_TREE_VERSION, root: { type: "panel", id: 0, props: {}, events: [], children } };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/nodes/);
+  });
+
+  test("rejects a tree exceeding the depth cap", () => {
+    let nodeId = 0;
+    const buildNested = (remaining: number): Record<string, unknown> => ({
+      type: "column",
+      id: nodeId++,
+      props: {},
+      events: [],
+      children: remaining > 0 ? [buildNested(remaining - 1)] : [],
+    });
+    const root = {
+      type: "panel",
+      id: nodeId++,
+      props: {},
+      events: [],
+      children: [buildNested(PANEL_CAPS.depth + 2)],
+    };
+    const result = parsePanelTree({ version: PANEL_TREE_VERSION, root });
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/depth/);
+  });
+
+  test("rejects a string value exceeding the string cap", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "text", id: 1, props: { content: "x".repeat(PANEL_CAPS.stringLength + 1) }, events: [] },
+        ],
+      },
+    };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/chars/);
+  });
+
+  test("rejects options exceeding the options cap", () => {
+    const options = Array.from({ length: PANEL_CAPS.options + 1 }, (_, i) => ({
+      value: `o${i}`,
+      label: `Option ${i}`,
+    }));
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "selectField", id: 1, props: { value: "o0", options }, events: ["onChange"] },
+        ],
+      },
+    };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/options/);
+  });
+
+  test("rejects gradient stops exceeding the stops cap", () => {
+    const stops = Array.from({ length: PANEL_CAPS.gradientStops + 1 }, (_, i) => ({
+      id: i,
+      position: i / (PANEL_CAPS.gradientStops + 1),
+      color: "rgba(0,0,0,1)",
+    }));
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "gradientStops", id: 1, props: { stops, selectedStopId: 0 }, events: ["onSelect"] },
+        ],
+      },
+    };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/gradient stops/);
+  });
+
+  test("rejects a node exceeding the events-per-node cap", () => {
+    const events = Array.from({ length: PANEL_CAPS.eventsPerNode + 1 }, (_, i) => `e${i}`);
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [{ type: "fillField", id: 1, props: {}, events }],
+      },
+    };
+    const result = parsePanelTree(tree);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/events/);
+  });
+
+  test("rejects a serialized string exceeding the byte cap", () => {
+    const huge = `{"padding":"${"a".repeat(PANEL_CAPS.treeBytes + 10)}"}`;
+    const result = parsePanelTree(huge);
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/bytes/);
+  });
+});
+
+describe("PANEL_CAPS", () => {
+  test("has the contract-mandated values", () => {
+    expect(PANEL_CAPS).toEqual({
+      treeBytes: 262144,
+      nodes: 2000,
+      depth: 32,
+      stringLength: 4096,
+      options: 256,
+      gradientStops: 64,
+      eventsPerNode: 8,
+      intentBytes: 32768,
+    });
+  });
+});
diff --git a/libraries/paywalls/tests/render.test.tsx b/libraries/paywalls/tests/render.test.tsx
index 0fbce3f90..3ca103f86 100644
--- a/libraries/paywalls/tests/render.test.tsx
+++ b/libraries/paywalls/tests/render.test.tsx
@@ -21,7 +21,7 @@ const Card = defineComponent({
     title: p.string().label("Title").default("Untitled"),
   }),
   render: ({ props }) => (
-    <View style={{ padding: 16 }}>
+    <View style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }}>
       <Text>Card {props.title}</Text>
       <Slot />
     </View>
@@ -42,7 +42,7 @@ describe("DOM paywall rendering", () => {
     const paywall = createPaywall({
       title: "Onboarding",
       render: (
-        <View style={{ paddingHorizontal: 24 }}>
+        <View style={{ paddingLeft: 24, paddingRight: 24 }}>
           <Pressable>
             <Text>Hello World</Text>
           </Pressable>
diff --git a/libraries/paywalls/tests/sandbox-bundle.test.ts b/libraries/paywalls/tests/sandbox-bundle.test.ts
new file mode 100644
index 000000000..f823c8ae3
--- /dev/null
+++ b/libraries/paywalls/tests/sandbox-bundle.test.ts
@@ -0,0 +1,119 @@
+import { existsSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import * as esbuild from "esbuild";
+import { describe, expect, it } from "vitest";
+
+import { parseComponentManifest, parsePreviewTree } from "../src/schema/validate";
+
+const distDir = path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "dist");
+const bundleModule = path.join(distDir, "sandbox-bundle.mjs");
+const dtsModule = path.join(distDir, "sandbox-dts.mjs");
+
+// These tests exercise the *built* IIFE + generated dts, so they only run after
+// `pnpm build`. Skipped (not failed) when dist is absent so `vitest` alone
+// stays green; the gate runs build first.
+const built = existsSync(bundleModule) && existsSync(dtsModule);
+const describeBuilt = built ? describe : describe.skip;
+
+const SOURCE = `import { defineComponent, View, Text, Pressable, Slot, usePaywallProducts, useState, useEffect } from "@voidhash/paywalls";
+
+export default defineComponent({
+  id: "product-option",
+  props: (p) => ({
+    accentColor: p.string().editor("color").default("#16a34a"),
+  }),
+  actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
+  previews: { default: {}, trial: {} },
+  render: ({ props, actions }) => {
+    const products = usePaywallProducts();
+    const product = products[0];
+    const [n, setN] = useState(0);
+    useEffect(() => { setN(1); }, []);
+    return (
+      <Pressable onPress={actions.onSelect} style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16, backgroundColor: props.accentColor }}>
+        <View style={{ gap: 4 }}>
+          <Text style={{ color: "white" }}>{product.displayName} {n}</Text>
+        </View>
+        <Slot />
+      </Pressable>
+    );
+  },
+});
+`;
+
+interface SandboxSurface {
+  modules: Record<string, unknown>;
+  extractComponentManifest: (definition: unknown) => unknown;
+  renderComponentToTree: (
+    definition: unknown,
+    inputs: { state: string; props?: Record<string, unknown>; hostData?: unknown },
+  ) => Promise<unknown>;
+  defaultHostData: () => unknown;
+}
+
+describeBuilt("sandbox IIFE (node integration, mirrors the studio sandbox path)", () => {
+  it("evals the bundle, runs compiled CJS through the require shim, renders valid trees", async () => {
+    const { sandboxRuntimeBundle, SANDBOX_GLOBAL_NAME } = (await import(bundleModule)) as {
+      sandboxRuntimeBundle: string;
+      SANDBOX_GLOBAL_NAME: string;
+    };
+
+    // Eval the IIFE into a fresh global, exactly like the iframe bootstrap.
+    const globalObject = globalThis as Record<string, unknown>;
+    // biome-ignore lint/security/noGlobalEval: exercising the sandbox's eval path
+    (0, eval)(sandboxRuntimeBundle);
+    const sandbox = globalObject[SANDBOX_GLOBAL_NAME] as SandboxSurface;
+    expect(sandbox).toBeDefined();
+    expect(typeof sandbox.renderComponentToTree).toBe("function");
+
+    const compiled = await esbuild.transform(SOURCE, {
+      format: "cjs",
+      jsx: "automatic",
+      jsxImportSource: "@voidhash/paywalls",
+      loader: "tsx",
+      target: "es2022",
+    });
+
+    // The require shim the studio installs: every author-importable specifier
+    // maps onto a sub-object of the sandbox global's `modules`.
+    const requireShim = (specifier: string): unknown => {
+      const mod = sandbox.modules[specifier];
+      if (mod === undefined) {
+        throw new Error(`unmapped module "${specifier}"`);
+      }
+      return mod;
+    };
+    const moduleObj = { exports: {} as Record<string, unknown> };
+    // biome-ignore lint/security/noGlobalEval: executing our own compiled fixture
+    new Function("require", "module", "exports", compiled.code)(
+      requireShim,
+      moduleObj,
+      moduleObj.exports,
+    );
+    const definition = moduleObj.exports.default ?? moduleObj.exports.definition;
+    expect(definition).toBeDefined();
+
+    const manifest = sandbox.extractComponentManifest(definition);
+    expect(parseComponentManifest(manifest).ok).toBe(true);
+
+    const hostData = sandbox.defaultHostData();
+    const tree = await sandbox.renderComponentToTree(definition, { hostData, state: "default" });
+    const parsed = parsePreviewTree(tree);
+    expect(parsed.ok).toBe(true);
+    // Products + settled effect both flowed through the real reconciler.
+    expect(JSON.stringify(tree)).toContain("Yearly 1");
+  });
+});
+
+describeBuilt("generated Monaco dts", () => {
+  it("is a self-contained ambient module with the key author identifiers", async () => {
+    const { sandboxDts } = (await import(dtsModule)) as { sandboxDts: string };
+    expect(sandboxDts).toContain('declare module "@voidhash/paywalls"');
+    for (const identifier of ["defineComponent", "useState", "View", "Slot", "Pressable", "Text"]) {
+      expect(sandboxDts).toContain(identifier);
+    }
+    // The react imports must have been stripped (self-contained ambient module).
+    expect(sandboxDts).not.toMatch(/from ["']react["']/);
+  });
+});
diff --git a/libraries/paywalls/tests/sandbox.test.tsx b/libraries/paywalls/tests/sandbox.test.tsx
new file mode 100644
index 000000000..3c22a68fd
--- /dev/null
+++ b/libraries/paywalls/tests/sandbox.test.tsx
@@ -0,0 +1,187 @@
+import { useEffect, useState } from "react";
+import { describe, expect, it } from "vitest";
+
+import { defineComponent, Pressable, Slot, Text, usePaywallVariables, View } from "../src/index";
+import { Panel } from "../src/panel/index";
+import { parseComponentManifest, parsePreviewTree } from "../src/schema/validate";
+import {
+  defaultHostData,
+  definitionHasPanel,
+  describeComponent,
+  extractComponentManifest,
+  renderComponentToTree,
+} from "../src/sandbox";
+
+/**
+ * A fixture exercising the determinism-sensitive surface: `useState` +
+ * `useEffect` (a settled state update), a branded `Pressable` action, a
+ * `<Slot/>`, and two preview states.
+ */
+const definition = defineComponent({
+  id: "product-option",
+  props: (p) => ({
+    accentColor: p.string().editor("color").default("#16a34a"),
+  }),
+  actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
+  previews: {
+    default: {},
+    trial: { props: { accentColor: "#2563eb" } },
+  },
+  render: ({ props, actions }) => {
+    const [count, setCount] = useState(0);
+    useEffect(() => {
+      // A one-shot state update that must settle before serialization.
+      setCount(1);
+    }, []);
+    return (
+      <Pressable
+        onPress={actions.onSelect}
+        style={{
+          paddingTop: 16,
+          paddingRight: 16,
+          paddingBottom: 16,
+          paddingLeft: 16,
+          borderTopLeftRadius: 12,
+          borderTopRightRadius: 12,
+          borderBottomRightRadius: 12,
+          borderBottomLeftRadius: 12,
+          backgroundColor: props.accentColor,
+        }}
+      >
+        <View style={{ gap: 4 }}>
+          <Text style={{ color: "white", fontWeight: "700" }}>Selected {count}</Text>
+        </View>
+        <Slot />
+      </Pressable>
+    );
+  },
+});
+
+describe("sandbox renderComponentToTree", () => {
+  it("renders a deterministic, byte-identical tree across two runs", async () => {
+    const hostData = defaultHostData();
+    const first = await renderComponentToTree(definition, { hostData, state: "default" });
+    const second = await renderComponentToTree(definition, { hostData, state: "default" });
+    expect(JSON.stringify(first)).toBe(JSON.stringify(second));
+  });
+
+  it("settles a useEffect-driven state update before serializing", async () => {
+    const tree = await renderComponentToTree(definition, { state: "default" });
+    expect(JSON.stringify(tree)).toContain("Selected 1");
+  });
+
+  it("records the branded action name and emits the slot marker", async () => {
+    const tree = await renderComponentToTree(definition, { state: "default" });
+    const result = parsePreviewTree(tree);
+    expect(result.ok).toBe(true);
+    if (tree.root.type !== "pressable") {
+      throw new Error("expected a pressable root");
+    }
+    expect(tree.root.action).toBe("onSelect");
+    expect(JSON.stringify(tree)).toContain('"type":"slot"');
+  });
+
+  it("records the action name for the idiomatic inline-arrow handler", async () => {
+    const inlineDefinition = defineComponent({
+      id: "inline-action",
+      actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
+      render: ({ actions }) => (
+        <Pressable onPress={() => actions.onSelect({ productId: "p1" })}>
+          <Text>Buy</Text>
+        </Pressable>
+      ),
+    });
+    const tree = await renderComponentToTree(inlineDefinition, { state: "default" });
+    if (tree.root.type !== "pressable") {
+      throw new Error("expected a pressable root");
+    }
+    // The inline arrow is unbranded; the tree host probes it to record the name.
+    expect(tree.root.action).toBe("onSelect");
+
+    // The probe must not perturb the committed tree — still byte-stable.
+    const again = await renderComponentToTree(inlineDefinition, { state: "default" });
+    expect(JSON.stringify(tree)).toBe(JSON.stringify(again));
+  });
+
+  it("stays deterministic when an inline handler also updates state", async () => {
+    // The action probe must NOT run the author's setState during the committed
+    // render — otherwise the counter compounds and differs run-to-run.
+    const stateful = defineComponent({
+      id: "stateful-press",
+      actions: (a) => ({ onSelect: a.action() }),
+      render: ({ actions }) => {
+        const [n, setN] = useState(0);
+        return (
+          <Pressable
+            onPress={() => {
+              setN((v) => v + 1);
+              actions.onSelect();
+            }}
+          >
+            <Text>n={n}</Text>
+          </Pressable>
+        );
+      },
+    });
+    const first = await renderComponentToTree(stateful, { state: "default" });
+    const second = await renderComponentToTree(stateful, { state: "default" });
+    expect(JSON.stringify(first)).toBe(JSON.stringify(second));
+    if (first.root.type !== "pressable" || first.root.children[0]?.type !== "text") {
+      throw new Error("expected a pressable wrapping text");
+    }
+    // The counter reflects the initial render only — the probe left no trace.
+    expect(first.root.children[0].text).toBe("n=0");
+    expect(first.root.action).toBe("onSelect");
+  });
+
+  it("flows preview-state variables into usePaywallVariables", async () => {
+    const withVars = defineComponent({
+      id: "with-vars",
+      render: () => {
+        const variables = usePaywallVariables();
+        return <Text>{String(variables.headline ?? "NONE")}</Text>;
+      },
+    });
+    const hostData = { ...defaultHostData(), variables: { headline: "FromFixture" } };
+    const tree = await renderComponentToTree(withVars, { hostData, state: "default" });
+    if (tree.root.type !== "text") {
+      throw new Error("expected a text root");
+    }
+    expect(tree.root.text).toBe("FromFixture");
+  });
+
+  it("extracts a manifest matching the definition", () => {
+    const manifest = extractComponentManifest(definition);
+    expect(manifest.id).toBe("product-option");
+    expect(manifest.slot).toBe(true);
+    expect(manifest.previewStates).toEqual(["default", "trial"]);
+    expect(Object.keys(manifest.actions)).toEqual(["onSelect"]);
+  });
+
+  it("reports hasPanel=false and keeps it OUT of the strict manifest", () => {
+    expect(definitionHasPanel(definition)).toBe(false);
+    const message = describeComponent(definition);
+    expect(message.hasPanel).toBe(false);
+    // The manifest itself carries no `hasPanel`; it is a sibling of `manifest`
+    // and the strict validator accepts the manifest as-is.
+    expect("hasPanel" in message.manifest).toBe(false);
+    expect(parseComponentManifest(message.manifest).ok).toBe(true);
+  });
+
+  it("reports hasPanel=true when the definition declares a panel", () => {
+    const withPanel = defineComponent({
+      id: "with-panel",
+      props: (p) => ({ accentColor: p.string().editor("color").default("#000") }),
+      panel: (ctx) => (
+        <Panel>
+          <Panel.Section title="Style">
+            <Panel.PropField name="accentColor" />
+          </Panel.Section>
+        </Panel>
+      ),
+      render: () => <Text>x</Text>,
+    });
+    expect(definitionHasPanel(withPanel)).toBe(true);
+    expect(describeComponent(withPanel).hasPanel).toBe(true);
+  });
+});
diff --git a/libraries/paywalls/tests/style-vocabulary-lock.test.ts b/libraries/paywalls/tests/style-vocabulary-lock.test.ts
new file mode 100644
index 000000000..9cc2765d2
--- /dev/null
+++ b/libraries/paywalls/tests/style-vocabulary-lock.test.ts
@@ -0,0 +1,412 @@
+import { describe, expect, it } from "vitest";
+
+import { NODE_STYLE_VOCABULARY, type CompositionNodeType } from "../src/compose/index";
+import { PAYWALL_STYLE_KEY_LIST } from "../src/schema/index";
+
+/**
+ * Equivalence lock for the single-sourced style vocabulary.
+ *
+ * Both tables (`PAYWALL_STYLE_KEY_LIST` — the wire contract — and
+ * `NODE_STYLE_VOCABULARY` — the printer-significant per-node compose grammar)
+ * are now derived from one style-field registry (`src/schema/style-registry.ts`).
+ * This test hardcodes their EXACT pre-refactor values so the derivation is
+ * provably output-identical: field order and every default value are locked, as
+ * is the content and order of the wire key list. A drift in either derivation
+ * fails here.
+ */
+
+const EXPECTED_STYLE_KEY_LIST = [
+  "flex",
+  "flexDirection",
+  "alignItems",
+  "alignSelf",
+  "justifyContent",
+  "flexWrap",
+  "gap",
+  "flexGrow",
+  "flexShrink",
+  "flexBasis",
+  "width",
+  "height",
+  "minWidth",
+  "minHeight",
+  "maxWidth",
+  "maxHeight",
+  "paddingTop",
+  "paddingBottom",
+  "paddingLeft",
+  "paddingRight",
+  "marginTop",
+  "marginBottom",
+  "marginLeft",
+  "marginRight",
+  "aspectRatio",
+  "borderTopWidth",
+  "borderRightWidth",
+  "borderBottomWidth",
+  "borderLeftWidth",
+  "borderColor",
+  "borderTopLeftRadius",
+  "borderTopRightRadius",
+  "borderBottomLeftRadius",
+  "borderBottomRightRadius",
+  "borderStyle",
+  "backgroundColor",
+  "backgroundType",
+  "backgroundGradient",
+  "backgroundImage",
+  "opacity",
+  "overflow",
+  "position",
+  "top",
+  "right",
+  "bottom",
+  "left",
+  "zIndex",
+  "color",
+  "fontSize",
+  "fontWeight",
+  "fontStyle",
+  "lineHeight",
+  "letterSpacing",
+  "textAlign",
+  "textTransform",
+  "textDecorationLine",
+  "fontFamily",
+];
+
+const CANONICAL_GRADIENT = {
+  kind: "linear",
+  startX: 0.5,
+  startY: 0,
+  endX: 0.5,
+  endY: 1,
+  stops: [
+    { color: "rgba(255, 255, 255, 1)", position: 0 },
+    { color: "rgba(255, 255, 255, 0)", position: 1 },
+  ],
+};
+
+const EXPECTED_SCREEN = {
+  styleFields: [
+    "x",
+    "y",
+    "width",
+    "height",
+    "minWidth",
+    "maxWidth",
+    "minHeight",
+    "maxHeight",
+    "paddingTop",
+    "paddingRight",
+    "paddingBottom",
+    "paddingLeft",
+    "marginTop",
+    "marginRight",
+    "marginBottom",
+    "marginLeft",
+    "gap",
+    "justifyContent",
+    "alignItems",
+    "flexDirection",
+    "backgroundColor",
+    "backgroundEnabled",
+    "backgroundType",
+    "backgroundGradient",
+    "backgroundImage",
+    "borderTopWidth",
+    "borderRightWidth",
+    "borderBottomWidth",
+    "borderLeftWidth",
+    "borderColor",
+    "borderStyle",
+    "borderEnabled",
+    "opacity",
+    "overflow",
+    "zIndex",
+    "display",
+    "shadowEnabled",
+    "shadowColor",
+    "shadowOffsetX",
+    "shadowOffsetY",
+    "shadowRadius",
+    "shadowOpacity",
+    "safeAreaTop",
+    "safeAreaBottom",
+    "flex",
+    "flexGrow",
+    "flexShrink",
+    "flexBasis",
+    "alignSelf",
+  ],
+  defaultStyle: {
+    x: 0,
+    y: 0,
+    width: 375,
+    height: 812,
+    paddingTop: 0,
+    paddingRight: 0,
+    paddingBottom: 0,
+    paddingLeft: 0,
+    marginTop: 0,
+    marginRight: 0,
+    marginBottom: 0,
+    marginLeft: 0,
+    gap: 0,
+    justifyContent: "flex-start",
+    alignItems: "flex-start",
+    flexDirection: "column",
+    backgroundColor: "rgba(255, 255, 255, 1)",
+    backgroundEnabled: true,
+    backgroundType: "solid",
+    backgroundGradient: CANONICAL_GRADIENT,
+    backgroundImage: { url: "", resizeMode: "cover" },
+    borderTopWidth: 0,
+    borderRightWidth: 0,
+    borderBottomWidth: 0,
+    borderLeftWidth: 0,
+    borderColor: "rgba(0, 0, 0, 1)",
+    borderStyle: "solid",
+    borderEnabled: false,
+    opacity: 1,
+    overflow: "visible",
+    zIndex: 0,
+    display: "flex",
+    shadowEnabled: false,
+    shadowColor: "rgba(0, 0, 0, 1)",
+    shadowOffsetX: 0,
+    shadowOffsetY: 0,
+    shadowRadius: 0,
+    shadowOpacity: 1,
+    safeAreaTop: false,
+    safeAreaBottom: false,
+    flexGrow: 0,
+    flexShrink: 1,
+    flexBasis: "auto",
+    alignSelf: "auto",
+  },
+  defaultName: "Screen",
+};
+
+const EXPECTED_VIEW = {
+  styleFields: [
+    "paddingTop",
+    "paddingRight",
+    "paddingBottom",
+    "paddingLeft",
+    "marginTop",
+    "marginRight",
+    "marginBottom",
+    "marginLeft",
+    "gap",
+    "justifyContent",
+    "alignItems",
+    "flexDirection",
+    "width",
+    "height",
+    "minWidth",
+    "maxWidth",
+    "minHeight",
+    "maxHeight",
+    "backgroundColor",
+    "backgroundEnabled",
+    "backgroundType",
+    "backgroundGradient",
+    "backgroundImage",
+    "borderTopWidth",
+    "borderRightWidth",
+    "borderBottomWidth",
+    "borderLeftWidth",
+    "borderColor",
+    "borderStyle",
+    "borderEnabled",
+    "borderTopLeftRadius",
+    "borderTopRightRadius",
+    "borderBottomRightRadius",
+    "borderBottomLeftRadius",
+    "opacity",
+    "overflow",
+    "zIndex",
+    "display",
+    "shadowEnabled",
+    "shadowColor",
+    "shadowOffsetX",
+    "shadowOffsetY",
+    "shadowRadius",
+    "shadowOpacity",
+    "safeAreaTop",
+    "safeAreaBottom",
+    "flex",
+    "flexGrow",
+    "flexShrink",
+    "flexBasis",
+    "alignSelf",
+  ],
+  defaultStyle: {
+    paddingTop: 0,
+    paddingRight: 0,
+    paddingBottom: 0,
+    paddingLeft: 0,
+    marginTop: 0,
+    marginRight: 0,
+    marginBottom: 0,
+    marginLeft: 0,
+    gap: 0,
+    justifyContent: "flex-start",
+    alignItems: "flex-start",
+    flexDirection: "column",
+    width: 100,
+    height: 100,
+    backgroundColor: "rgba(255, 255, 255, 1)",
+    backgroundEnabled: false,
+    backgroundType: "solid",
+    backgroundGradient: CANONICAL_GRADIENT,
+    backgroundImage: { url: "", resizeMode: "cover" },
+    borderTopWidth: 0,
+    borderRightWidth: 0,
+    borderBottomWidth: 0,
+    borderLeftWidth: 0,
+    borderColor: "rgba(0, 0, 0, 1)",
+    borderStyle: "solid",
+    borderEnabled: false,
+    borderTopLeftRadius: 0,
+    borderTopRightRadius: 0,
+    borderBottomRightRadius: 0,
+    borderBottomLeftRadius: 0,
+    opacity: 1,
+    overflow: "visible",
+    zIndex: 0,
+    display: "flex",
+    shadowEnabled: false,
+    shadowColor: "rgba(0, 0, 0, 1)",
+    shadowOffsetX: 0,
+    shadowOffsetY: 0,
+    shadowRadius: 0,
+    shadowOpacity: 1,
+    safeAreaTop: false,
+    safeAreaBottom: false,
+    flexGrow: 0,
+    flexShrink: 1,
+    flexBasis: "auto",
+    alignSelf: "auto",
+  },
+  defaultName: "View",
+};
+
+const EXPECTED_TEXT = {
+  styleFields: [
+    "marginTop",
+    "marginRight",
+    "marginBottom",
+    "marginLeft",
+    "minWidth",
+    "maxWidth",
+    "minHeight",
+    "maxHeight",
+    "fontSize",
+    "fontWeight",
+    "color",
+    "textAlign",
+    "lineHeight",
+    "letterSpacing",
+    "borderTopWidth",
+    "borderRightWidth",
+    "borderBottomWidth",
+    "borderLeftWidth",
+    "borderColor",
+    "borderStyle",
+    "borderEnabled",
+    "opacity",
+    "overflow",
+    "zIndex",
+    "display",
+    "shadowEnabled",
+    "shadowColor",
+    "shadowOffsetX",
+    "shadowOffsetY",
+    "shadowRadius",
+    "shadowOpacity",
+    "flex",
+    "flexGrow",
+    "flexShrink",
+    "flexBasis",
+    "alignSelf",
+  ],
+  defaultStyle: {
+    marginTop: 0,
+    marginRight: 0,
+    marginBottom: 0,
+    marginLeft: 0,
+    fontSize: 16,
+    fontWeight: "400",
+    color: "rgba(0, 0, 0, 1)",
+    textAlign: "left",
+    lineHeight: 1.5,
+    letterSpacing: 0,
+    borderTopWidth: 0,
+    borderRightWidth: 0,
+    borderBottomWidth: 0,
+    borderLeftWidth: 0,
+    borderColor: "rgba(0, 0, 0, 1)",
+    borderStyle: "solid",
+    borderEnabled: false,
+    opacity: 1,
+    overflow: "visible",
+    zIndex: 0,
+    display: "flex",
+    shadowEnabled: false,
+    shadowColor: "rgba(0, 0, 0, 1)",
+    shadowOffsetX: 0,
+    shadowOffsetY: 0,
+    shadowRadius: 0,
+    shadowOpacity: 1,
+    flexGrow: 0,
+    flexShrink: 1,
+    flexBasis: "auto",
+    alignSelf: "auto",
+  },
+  defaultName: "Text",
+};
+
+interface ExpectedNodeVocabulary {
+  styleFields: string[];
+  defaultStyle: Record<string, unknown>;
+  defaultName: string;
+}
+
+const EXPECTED_VOCABULARY: Record<CompositionNodeType, ExpectedNodeVocabulary> = {
+  screen: EXPECTED_SCREEN,
+  view: EXPECTED_VIEW,
+  text: EXPECTED_TEXT,
+};
+
+describe("PAYWALL_STYLE_KEY_LIST (wire contract lock)", () => {
+  it("matches the locked content AND order exactly", () => {
+    expect([...PAYWALL_STYLE_KEY_LIST]).toEqual(EXPECTED_STYLE_KEY_LIST);
+  });
+});
+
+describe("NODE_STYLE_VOCABULARY (compose grammar lock)", () => {
+  for (const type of ["screen", "view", "text"] as const) {
+    describe(type, () => {
+      it("preserves the printer-significant styleFields order", () => {
+        expect([...NODE_STYLE_VOCABULARY[type].styleFields]).toEqual(
+          EXPECTED_VOCABULARY[type].styleFields,
+        );
+      });
+
+      it("preserves every default value (and the exact default key set)", () => {
+        expect(NODE_STYLE_VOCABULARY[type].defaultStyle).toEqual(
+          EXPECTED_VOCABULARY[type].defaultStyle,
+        );
+        expect(Object.keys(NODE_STYLE_VOCABULARY[type].defaultStyle)).toEqual(
+          Object.keys(EXPECTED_VOCABULARY[type].defaultStyle),
+        );
+      });
+
+      it("preserves the default node name", () => {
+        expect(NODE_STYLE_VOCABULARY[type].defaultName).toBe(EXPECTED_VOCABULARY[type].defaultName);
+      });
+    });
+  }
+});
diff --git a/libraries/paywalls/tests/style.test.ts b/libraries/paywalls/tests/style.test.ts
index c703a0059..567d02647 100644
--- a/libraries/paywalls/tests/style.test.ts
+++ b/libraries/paywalls/tests/style.test.ts
@@ -11,21 +11,27 @@ describe("flattenStyle", () => {
 
   it("flattens nested arrays with later entries winning", () => {
     expect(
-      flattenStyle([{ padding: 4, opacity: 1 }, [{ padding: 8 }, false, [{ opacity: 0.5 }]], null]),
-    ).toEqual({ padding: 8, opacity: 0.5 });
+      flattenStyle([
+        { paddingLeft: 4, opacity: 1 },
+        [{ paddingLeft: 8 }, false, [{ opacity: 0.5 }]],
+        null,
+      ]),
+    ).toEqual({ paddingLeft: 8, opacity: 0.5 });
   });
 
   it("supports the conditional-entry idiom", () => {
     const selected = false;
-    expect(flattenStyle([{ borderWidth: 1 }, selected && { borderWidth: 2 }])).toEqual({
-      borderWidth: 1,
+    expect(flattenStyle([{ borderTopWidth: 1 }, selected && { borderTopWidth: 2 }])).toEqual({
+      borderTopWidth: 1,
     });
   });
 });
 
 describe("resolveStyle", () => {
-  it("expands paddingHorizontal/Vertical into physical edges", () => {
-    expect(resolveStyle({ paddingHorizontal: 16, paddingVertical: 8 })).toEqual({
+  it("passes the RN-expanded edge fields through untouched", () => {
+    expect(
+      resolveStyle({ paddingLeft: 16, paddingRight: 16, paddingTop: 8, paddingBottom: 8 }),
+    ).toEqual({
       paddingLeft: 16,
       paddingRight: 16,
       paddingTop: 8,
@@ -33,29 +39,6 @@ describe("resolveStyle", () => {
     });
   });
 
-  it("expands marginHorizontal/Vertical into physical edges", () => {
-    expect(resolveStyle({ marginHorizontal: 12, marginVertical: 6 })).toEqual({
-      marginLeft: 12,
-      marginRight: 12,
-      marginTop: 6,
-      marginBottom: 6,
-    });
-  });
-
-  it("lets explicit physical edges win over shorthands", () => {
-    expect(resolveStyle({ paddingHorizontal: 16, paddingLeft: 4 })).toEqual({
-      paddingLeft: 4,
-      paddingRight: 16,
-    });
-  });
-
-  it("expands shorthands provided across array entries", () => {
-    expect(resolveStyle([{ paddingHorizontal: 16 }, { paddingRight: 2 }])).toEqual({
-      paddingLeft: 16,
-      paddingRight: 2,
-    });
-  });
-
   it("converts numeric lineHeight to pixels (RN semantics)", () => {
     expect(resolveStyle({ lineHeight: 20 })).toEqual({ lineHeight: "20px" });
     expect(resolveStyle({ lineHeight: "1.5em" })).toEqual({
@@ -63,14 +46,14 @@ describe("resolveStyle", () => {
     });
   });
 
-  it("defaults borderStyle to solid when a border is set without one", () => {
-    expect(resolveStyle({ borderWidth: 2, borderColor: "#fff" })).toEqual({
-      borderWidth: 2,
+  it("defaults borderStyle to solid when a per-edge border width is set without one", () => {
+    expect(resolveStyle({ borderTopWidth: 2, borderColor: "#fff" })).toEqual({
+      borderTopWidth: 2,
       borderColor: "#fff",
       borderStyle: "solid",
     });
-    expect(resolveStyle({ borderWidth: 2, borderStyle: "dashed" })).toEqual({
-      borderWidth: 2,
+    expect(resolveStyle({ borderLeftWidth: 2, borderStyle: "dashed" })).toEqual({
+      borderLeftWidth: 2,
       borderStyle: "dashed",
     });
   });
@@ -84,41 +67,187 @@ describe("resolveStyle", () => {
   });
 
   // RN gives longhands precedence within one object regardless of key order;
-  // on the DOM a CSS shorthand committed later resets its longhands. The
-  // resolver must therefore emit shorthands first.
-  it("emits padding before an earlier-declared paddingLeft", () => {
-    const resolved = resolveStyle({ paddingLeft: 8, padding: 16 });
-    expect(resolved).toEqual({ padding: 16, paddingLeft: 8 });
-    expect(Object.keys(resolved)).toEqual(["padding", "paddingLeft"]);
+  // on the DOM a CSS shorthand committed later resets its longhands (`flex`
+  // expands to flex-grow/flex-shrink/flex-basis). The resolver must therefore
+  // emit `flex` (and `gap`) before their longhands.
+  it("emits flex before an earlier-declared flexGrow", () => {
+    const resolved = resolveStyle({ flexGrow: 2, flex: 1 });
+    expect(resolved).toEqual({ flex: 1, flexGrow: 2 });
+    expect(Object.keys(resolved)).toEqual(["flex", "flexGrow"]);
   });
 
-  it("emits borderRadius before an earlier-declared corner radius", () => {
-    const resolved = resolveStyle({ borderTopLeftRadius: 4, borderRadius: 8 });
-    expect(resolved).toEqual({ borderRadius: 8, borderTopLeftRadius: 4 });
-    expect(Object.keys(resolved)).toEqual(["borderRadius", "borderTopLeftRadius"]);
+  it("keeps flex winning when the shorthand arrives in a later array entry", () => {
+    const resolved = resolveStyle([{ flexGrow: 2 }, { flex: 1 }]);
+    expect(resolved).toEqual({ flex: 1, flexGrow: 2 });
+    expect(Object.keys(resolved)).toEqual(["flex", "flexGrow"]);
   });
 
-  it("keeps an explicit corner winning when the shorthand arrives in a later array entry", () => {
-    const resolved = resolveStyle([{ borderTopLeftRadius: 4 }, { borderRadius: 8 }]);
-    expect(resolved).toEqual({ borderRadius: 8, borderTopLeftRadius: 4 });
-    expect(Object.keys(resolved)).toEqual(["borderRadius", "borderTopLeftRadius"]);
+  it("lets later array entries win per-key", () => {
+    expect(resolveStyle([{ paddingLeft: 16 }, { paddingRight: 2 }])).toEqual({
+      paddingLeft: 16,
+      paddingRight: 2,
+    });
+    expect(resolveStyle([{ paddingLeft: 16 }, { paddingLeft: 4 }])).toEqual({
+      paddingLeft: 4,
+    });
   });
+});
 
-  it("emits gap before rowGap/columnGap and flex before its longhands", () => {
-    expect(Object.keys(resolveStyle({ rowGap: 4, gap: 8 }))).toEqual(["gap", "rowGap"]);
-    expect(Object.keys(resolveStyle({ flexGrow: 2, flex: 1 }))).toEqual(["flex", "flexGrow"]);
+describe("resolveStyle — structured backgrounds", () => {
+  it("leaves backgroundColor pass-through for a solid or absent type", () => {
+    expect(resolveStyle({ backgroundColor: "#000" })).toEqual({ backgroundColor: "#000" });
+    expect(resolveStyle({ backgroundColor: "#000", backgroundType: "solid" })).toEqual({
+      backgroundColor: "#000",
+    });
   });
 
-  it("emits Horizontal/Vertical expansions after the plain shorthand", () => {
-    expect(Object.keys(resolveStyle({ paddingHorizontal: 8, padding: 16 }))).toEqual([
-      "padding",
-      "paddingLeft",
-      "paddingRight",
-    ]);
-    expect(resolveStyle({ paddingHorizontal: 8, padding: 16 })).toEqual({
-      padding: 16,
-      paddingLeft: 8,
-      paddingRight: 8,
+  it("never leaks the structured background fields as raw CSS", () => {
+    const out = resolveStyle({
+      backgroundColor: "#000",
+      backgroundType: "solid",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0.5,
+        startY: 0,
+        endX: 0.5,
+        endY: 1,
+        stops: [{ color: "rgba(0,0,0,1)", position: 0 }],
+      },
+      backgroundImage: { url: "", resizeMode: "cover" },
     });
+    expect(out).toEqual({ backgroundColor: "#000" });
+  });
+
+  it("lowers a two-stop linear gradient to an SVG data-URI background", () => {
+    const out = resolveStyle({
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+        stops: [
+          { color: "rgba(255, 0, 0, 1)", position: 0 },
+          { color: "rgba(0, 0, 255, 1)", position: 1 },
+        ],
+      },
+    });
+    const svg =
+      "<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'>" +
+      "<defs><linearGradient id='g' x1='0' y1='0' x2='1' y2='1'>" +
+      "<stop offset='0' stop-color='rgba(255, 0, 0, 1)'/>" +
+      "<stop offset='1' stop-color='rgba(0, 0, 255, 1)'/>" +
+      "</linearGradient></defs><rect width='1' height='1' fill='url(#g)'/></svg>";
+    expect(out).toEqual({
+      backgroundImage: `url("data:image/svg+xml,${encodeURIComponent(svg)}")`,
+      backgroundRepeat: "no-repeat",
+      backgroundSize: "100% 100%",
+    });
+  });
+
+  it("sorts gradient stops by position and degrades a single stop to a solid color", () => {
+    const sorted = resolveStyle({
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 0,
+        endY: 1,
+        stops: [
+          { color: "rgba(0, 0, 255, 1)", position: 1 },
+          { color: "rgba(255, 0, 0, 1)", position: 0 },
+        ],
+      },
+    }) as Record<string, string>;
+    expect(decodeURIComponent(sorted.backgroundImage!)).toContain(
+      "<stop offset='0' stop-color='rgba(255, 0, 0, 1)'/><stop offset='1' stop-color='rgba(0, 0, 255, 1)'/>",
+    );
+
+    expect(
+      resolveStyle({
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "linear",
+          startX: 0,
+          startY: 0,
+          endX: 0,
+          endY: 1,
+          stops: [{ color: "rgba(1, 2, 3, 1)", position: 0.5 }],
+        },
+      }),
+    ).toEqual({ backgroundColor: "rgba(1, 2, 3, 1)" });
+  });
+
+  it("emits a radial gradient with r = hypot(end - start)", () => {
+    const out = resolveStyle({
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "radial",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 0,
+        stops: [
+          { color: "rgba(0, 0, 0, 1)", position: 0 },
+          { color: "rgba(255, 255, 255, 1)", position: 1 },
+        ],
+      },
+    }) as Record<string, string>;
+    expect(decodeURIComponent(out.backgroundImage!)).toContain(
+      "<radialGradient id='g' cx='0' cy='0' r='1'>",
+    );
+  });
+
+  it("falls back to transparent for a gradient with zero stops", () => {
+    expect(
+      resolveStyle({
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "linear",
+          startX: 0,
+          startY: 0,
+          endX: 0,
+          endY: 1,
+          stops: [],
+        },
+      }),
+    ).toEqual({ backgroundColor: "transparent" });
+  });
+
+  it("lowers an image background with the resize-mode → backgroundSize mapping", () => {
+    expect(
+      resolveStyle({
+        backgroundType: "image",
+        backgroundImage: { url: "https://cdn.test/bg.png", resizeMode: "contain" },
+      }),
+    ).toEqual({
+      backgroundImage: 'url("https://cdn.test/bg.png")',
+      backgroundPosition: "center",
+      backgroundRepeat: "no-repeat",
+      backgroundSize: "contain",
+    });
+    expect(
+      resolveStyle({
+        backgroundType: "image",
+        backgroundImage: { url: "https://cdn.test/bg.png", resizeMode: "stretch" },
+      }),
+    ).toMatchObject({ backgroundSize: "100% 100%" });
+    expect(
+      resolveStyle({
+        backgroundType: "image",
+        backgroundImage: { url: "https://cdn.test/bg.png", resizeMode: "center" },
+      }),
+    ).toMatchObject({ backgroundSize: "auto" });
+  });
+
+  it("falls back to transparent for an image background with an empty url", () => {
+    expect(
+      resolveStyle({
+        backgroundType: "image",
+        backgroundImage: { url: "", resizeMode: "cover" },
+      }),
+    ).toEqual({ backgroundColor: "transparent" });
   });
 });
diff --git a/libraries/paywalls/tests/tree.test.tsx b/libraries/paywalls/tests/tree.test.tsx
index 8eda33d0d..a39bf832c 100644
--- a/libraries/paywalls/tests/tree.test.tsx
+++ b/libraries/paywalls/tests/tree.test.tsx
@@ -33,7 +33,7 @@ const monthly: PaywallProduct = {
 describe("renderToNodeTree", () => {
   it("serializes primitives to §3 nodes with the style subset intact", async () => {
     const tree = await renderToNodeTree(
-      <View style={{ flexDirection: "row", padding: 16 }}>
+      <View style={{ flexDirection: "row", paddingTop: 16, paddingLeft: 16 }}>
         <Text style={{ color: "#fff" }}>Yearly</Text>
         <Image resizeMode="cover" source="https://cdn.test/hero.png" style={{}} />
       </View>,
@@ -44,7 +44,7 @@ describe("renderToNodeTree", () => {
       state: "default",
       root: {
         type: "view",
-        style: { flexDirection: "row", padding: 16 },
+        style: { flexDirection: "row", paddingTop: 16, paddingLeft: 16 },
         children: [
           { type: "text", style: { color: "#fff" }, text: "Yearly" },
           {
@@ -58,13 +58,21 @@ describe("renderToNodeTree", () => {
     });
   });
 
-  it("keeps paddingHorizontal/Vertical shorthands (allowed by §3.1)", async () => {
+  it("keeps the RN-expanded edge fields and drops out-of-contract shorthands", async () => {
     const tree = await renderToNodeTree(
-      <View style={[{ paddingHorizontal: 24 }, { marginVertical: 8 }]} />,
+      // `padding` / `marginVertical` are no longer in the contract; a value
+      // smuggled through a cast must be filtered out of the serialized style.
+      <View
+        style={[
+          { paddingLeft: 24, paddingRight: 24 },
+          { marginTop: 8, marginBottom: 8 },
+          { padding: 99, marginVertical: 99 } as never,
+        ]}
+      />,
     );
     expect(tree.root).toEqual({
       type: "view",
-      style: { paddingHorizontal: 24, marginVertical: 8 },
+      style: { paddingLeft: 24, paddingRight: 24, marginTop: 8, marginBottom: 8 },
       children: [],
     });
   });
@@ -152,7 +160,7 @@ describe("renderToNodeTree", () => {
     });
   });
 
-  it("records the action name on pressables bound to declared actions", async () => {
+  it("records the action name for both direct and inline-arrow action bindings", async () => {
     const definition = defineComponent({
       id: "selectable",
       actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
@@ -170,14 +178,15 @@ describe("renderToNodeTree", () => {
     const Selectable = definition.component;
 
     const tree = await renderToNodeTree(<Selectable />);
+    // A direct binding carries the brand; an inline arrow is probed once by the
+    // tree host and reports the same action — both record it.
     expect(tree.root).toMatchObject({
       type: "view",
-      children: [{ type: "pressable", action: "onSelect" }, { type: "pressable" }],
+      children: [
+        { type: "pressable", action: "onSelect" },
+        { type: "pressable", action: "onSelect" },
+      ],
     });
-    if (tree.root.type !== "view") {
-      throw new Error("expected a view root");
-    }
-    expect(tree.root.children[1]).not.toHaveProperty("action");
   });
 
   it("serializes scroll views and preserves contentContainerStyle as a view", async () => {
diff --git a/libraries/paywalls/tests/types.test.ts b/libraries/paywalls/tests/types.test.ts
index 957a613b3..64b8cf828 100644
--- a/libraries/paywalls/tests/types.test.ts
+++ b/libraries/paywalls/tests/types.test.ts
@@ -13,7 +13,7 @@ import {
   type InferComponentProps,
   type InferExternalProps,
   type InferProps,
-  type PAYWALL_STYLE_KEYS,
+  type PAYWALL_STYLE_KEY_LIST,
   type PaywallProduct,
   type PaywallStyle,
 } from "../src/index";
@@ -136,8 +136,8 @@ describe("defineComponent end-to-end typing", () => {
 });
 
 describe("PaywallStyle subset", () => {
-  it("PAYWALL_STYLE_KEYS covers every PaywallStyle key", () => {
-    type Listed = (typeof PAYWALL_STYLE_KEYS)[number];
+  it("PAYWALL_STYLE_KEY_LIST covers every PaywallStyle key", () => {
+    type Listed = (typeof PAYWALL_STYLE_KEY_LIST)[number];
     expectTypeOf<Exclude<keyof PaywallStyle, Listed>>().toEqualTypeOf<never>();
     expectTypeOf<Exclude<Listed, keyof PaywallStyle>>().toEqualTypeOf<never>();
   });
diff --git a/libraries/paywalls/tests/validate.test.ts b/libraries/paywalls/tests/validate.test.ts
new file mode 100644
index 000000000..9965b2c30
--- /dev/null
+++ b/libraries/paywalls/tests/validate.test.ts
@@ -0,0 +1,83 @@
+import { describe, expect, test } from "vitest";
+
+import { parseComponentManifest } from "../src/schema/validate";
+
+/**
+ * A minimal valid §2 manifest builder. Tests spread over it and override the
+ * one field under test so each fixture isolates a single rejection reason.
+ */
+const validManifest = () => ({
+  manifestVersion: 1,
+  id: "pro-card",
+  props: {
+    heading: { kind: "string", optional: false },
+    product: { kind: "ref", refType: "product", optional: false },
+    child: { kind: "component", optional: true },
+    bullets: { kind: "array", item: { kind: "string" }, optional: true },
+  },
+});
+
+describe("component manifest validator — prop `default` allowance", () => {
+  test("accepts `default` on string/number/boolean/select/image/array props", () => {
+    const manifest = {
+      manifestVersion: 1,
+      id: "c",
+      props: {
+        s: { kind: "string", default: "x" },
+        n: { kind: "number", default: 3 },
+        b: { kind: "boolean", default: true },
+        sel: { kind: "select", options: ["a", "b"], default: "a" },
+        img: { kind: "image", default: "https://x/y.png" },
+        arr: { kind: "array", item: { kind: "string" }, default: ["a"] },
+      },
+    };
+    expect(parseComponentManifest(manifest).ok).toBe(true);
+  });
+
+  test("rejects `default` on a ref prop (server has no default field for ref)", () => {
+    const manifest = {
+      ...validManifest(),
+      props: { product: { kind: "ref", refType: "product", default: "p" } },
+    };
+    expect(parseComponentManifest(manifest).ok).toBe(false);
+  });
+
+  test("rejects `default` on a component prop (server has no default field for component)", () => {
+    const manifest = {
+      ...validManifest(),
+      props: { child: { kind: "component", default: "z" } },
+    };
+    expect(parseComponentManifest(manifest).ok).toBe(false);
+  });
+});
+
+describe("component manifest validator — array item common fields", () => {
+  test("accepts well-typed common fields on an array item (mirrors the server)", () => {
+    const manifest = {
+      ...validManifest(),
+      props: {
+        bullets: {
+          kind: "array",
+          item: { kind: "string", label: "L", description: "D", optional: true, default: "x" },
+        },
+      },
+    };
+    expect(parseComponentManifest(manifest).ok).toBe(true);
+  });
+
+  test("rejects a malformed common field on an array item (non-boolean `optional`)", () => {
+    const manifest = {
+      ...validManifest(),
+      props: { bullets: { kind: "array", item: { kind: "string", optional: "yes" } } },
+    };
+    expect(parseComponentManifest(manifest).ok).toBe(false);
+  });
+
+  test("rejects a wrong-typed `default` on an array item", () => {
+    const manifest = {
+      ...validManifest(),
+      props: { bullets: { kind: "array", item: { kind: "number", default: "not-a-number" } } },
+    };
+    expect(parseComponentManifest(manifest).ok).toBe(false);
+  });
+});
diff --git a/libraries/paywalls/tests/validate.test.tsx b/libraries/paywalls/tests/validate.test.tsx
new file mode 100644
index 000000000..92b6abe1a
--- /dev/null
+++ b/libraries/paywalls/tests/validate.test.tsx
@@ -0,0 +1,363 @@
+import { describe, expect, expectTypeOf, it } from "vitest";
+
+import {
+  defineComponent,
+  extractComponentManifest,
+  Image,
+  type PaywallProduct,
+  type PaywallStyle,
+  Pressable,
+  Slot,
+  Text,
+  View,
+} from "../src/index";
+import {
+  countSlotNodes,
+  PAYWALL_STYLE_KEY_LIST,
+  PAYWALL_STYLE_KEYS,
+  parseComponentManifest,
+  parsePreviewTree,
+} from "../src/schema";
+import { renderToNodeTree } from "../src/tree";
+
+const yearly: PaywallProduct = {
+  id: "com.app.yearly",
+  slug: "yearly",
+  displayName: "Yearly",
+  priceString: "$59.99",
+};
+
+const fullComponent = defineComponent({
+  id: "product-option",
+  title: "Product Option",
+  props: (p) => ({
+    product: p.ref("product").label("Product"),
+    selected: p.boolean().default(false),
+    accentColor: p.string().editor("color").default("#16a34a"),
+    badge: p.component().optional(),
+    features: p.array(p.string()).optional(),
+    plan: p.select(["monthly", "yearly"]).optional(),
+  }),
+  actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
+  previews: { default: { data: { products: [yearly] } } },
+  render: ({ props, actions }) => (
+    <Pressable onPress={() => actions.onSelect({ productId: props.product.id })}>
+      <Text>{props.product.displayName}</Text>
+      <Image resizeMode="cover" source="https://cdn.test/hero.png" style={{}} />
+      <Slot />
+    </Pressable>
+  ),
+});
+
+describe("parsePreviewTree", () => {
+  it("accepts a golden tree rendered by renderToNodeTree", async () => {
+    const tree = await renderToNodeTree(
+      <View style={{ flexDirection: "row", padding: 16 }}>
+        <Text style={{ color: "#fff" }}>Yearly</Text>
+        <Image resizeMode="cover" source="https://cdn.test/hero.png" style={{}} />
+      </View>,
+    );
+    const result = parsePreviewTree(tree);
+    expect(result.ok).toBe(true);
+    if (result.ok) {
+      expect(result.value).toBe(tree);
+    }
+  });
+
+  it("accepts every §3 node type in one hand-built fixture", () => {
+    const tree = {
+      treeVersion: 1,
+      state: "default",
+      root: {
+        type: "view",
+        style: {},
+        children: [
+          { type: "text", style: { color: "#fff" }, text: "Yearly" },
+          { type: "image", style: {}, src: "https://x", resizeMode: "contain" },
+          { type: "pressable", style: {}, action: "onSelect", children: [] },
+          { type: "scroll", style: {}, children: [] },
+          { type: "slot" },
+          { type: "placeholder", reason: "render returned null" },
+        ],
+      },
+    };
+    expect(parsePreviewTree(tree).ok).toBe(true);
+  });
+
+  it("rejects an unknown node type", () => {
+    const result = parsePreviewTree({
+      treeVersion: 1,
+      state: "default",
+      root: { type: "canvas", style: {}, children: [] },
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.includes("not a known node type"))).toBe(true);
+    }
+  });
+
+  it("rejects an unknown key on a node", () => {
+    const result = parsePreviewTree({
+      treeVersion: 1,
+      state: "default",
+      root: { type: "text", style: {}, text: "hi", onClick: "nope" },
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.includes('unknown key "onClick"'))).toBe(true);
+    }
+  });
+
+  it("rejects an out-of-vocabulary style key", () => {
+    const result = parsePreviewTree({
+      treeVersion: 1,
+      state: "default",
+      root: { type: "view", style: { transform: "scale(2)" }, children: [] },
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.includes('unknown key "transform"'))).toBe(true);
+    }
+  });
+
+  it("rejects a bad resizeMode and a wrong treeVersion and a malformed state", () => {
+    expect(
+      parsePreviewTree({
+        treeVersion: 1,
+        state: "default",
+        root: { type: "image", style: {}, src: "x", resizeMode: "fill" },
+      }).ok,
+    ).toBe(false);
+    expect(parsePreviewTree({ treeVersion: 2, state: "default", root: { type: "slot" } }).ok).toBe(
+      false,
+    );
+    expect(
+      parsePreviewTree({ treeVersion: 1, state: "bad state!", root: { type: "slot" } }).ok,
+    ).toBe(false);
+  });
+
+  it("accepts the structured background style keys", () => {
+    const result = parsePreviewTree({
+      treeVersion: 1,
+      state: "default",
+      root: {
+        type: "view",
+        style: {
+          backgroundType: "gradient",
+          backgroundGradient: {
+            kind: "radial",
+            startX: 0,
+            startY: 0,
+            endX: 1,
+            endY: 1,
+            stops: [
+              { color: "rgba(255, 0, 0, 1)", position: 0 },
+              { color: "rgba(0, 0, 255, 1)", position: 1 },
+            ],
+          },
+          backgroundImage: { url: "https://cdn.test/bg.png", resizeMode: "contain" },
+        },
+        children: [],
+      },
+    });
+    expect(result.ok).toBe(true);
+  });
+
+  it("rejects a malformed backgroundType, gradient, and image", () => {
+    expect(
+      parsePreviewTree({
+        treeVersion: 1,
+        state: "default",
+        root: { type: "view", style: { backgroundType: "swirl" }, children: [] },
+      }).ok,
+    ).toBe(false);
+    expect(
+      parsePreviewTree({
+        treeVersion: 1,
+        state: "default",
+        root: {
+          type: "view",
+          style: { backgroundGradient: { kind: "conic", startX: 0, startY: 0, endX: 1, endY: 1, stops: [] } },
+          children: [],
+        },
+      }).ok,
+    ).toBe(false);
+    expect(
+      parsePreviewTree({
+        treeVersion: 1,
+        state: "default",
+        root: {
+          type: "view",
+          style: { backgroundImage: { url: "x", resizeMode: "fill" } },
+          children: [],
+        },
+      }).ok,
+    ).toBe(false);
+  });
+
+  it("rejects a non-finite gradient coordinate and a non-string stop color", () => {
+    const bad = parsePreviewTree({
+      treeVersion: 1,
+      state: "default",
+      root: {
+        type: "view",
+        style: {
+          backgroundGradient: {
+            kind: "linear",
+            startX: Number.NaN,
+            startY: 0,
+            endX: 1,
+            endY: 1,
+            stops: [{ color: 123, position: 0 }],
+          },
+        },
+        children: [],
+      },
+    });
+    expect(bad.ok).toBe(false);
+    if (!bad.ok) {
+      expect(bad.errors.some((e) => e.includes("startX must be a finite number"))).toBe(true);
+      expect(bad.errors.some((e) => e.includes("color must be a string"))).toBe(true);
+    }
+  });
+});
+
+describe("countSlotNodes", () => {
+  it("counts the single slot marker in a rendered component tree", async () => {
+    const Card = fullComponent.component;
+    const tree = await renderToNodeTree(<Card product={yearly} />);
+    expect(countSlotNodes(tree.root)).toBe(1);
+  });
+
+  it("returns 0 for a slotless tree and counts nested slots", () => {
+    expect(countSlotNodes({ type: "text", style: {}, text: "x" })).toBe(0);
+    expect(
+      countSlotNodes({
+        type: "view",
+        style: {},
+        children: [{ type: "scroll", style: {}, children: [{ type: "slot" }] }, { type: "slot" }],
+      }),
+    ).toBe(2);
+  });
+});
+
+describe("parseComponentManifest", () => {
+  it("accepts a golden manifest extracted from a full-surface component", () => {
+    const manifest = extractComponentManifest(fullComponent);
+    const result = parseComponentManifest(manifest);
+    expect(result.ok).toBe(true);
+    if (result.ok) {
+      expect(result.value).toBe(manifest);
+    }
+  });
+
+  it("rejects an unknown top-level key", () => {
+    const result = parseComponentManifest({
+      manifestVersion: 1,
+      id: "x",
+      props: {},
+      extra: true,
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.includes('unknown key "extra"'))).toBe(true);
+    }
+  });
+
+  it("rejects an unknown prop kind and empty select options", () => {
+    expect(
+      parseComponentManifest({
+        manifestVersion: 1,
+        id: "x",
+        props: { a: { kind: "date", optional: false } },
+      }).ok,
+    ).toBe(false);
+    expect(
+      parseComponentManifest({
+        manifestVersion: 1,
+        id: "x",
+        props: { a: { kind: "select", options: [], optional: false } },
+      }).ok,
+    ).toBe(false);
+  });
+
+  it("rejects editor on a non-string prop", () => {
+    const result = parseComponentManifest({
+      manifestVersion: 1,
+      id: "x",
+      props: { a: { kind: "number", editor: "color", optional: false } },
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.includes('unknown key "editor"'))).toBe(true);
+    }
+  });
+
+  it("rejects an array item that is itself an array", () => {
+    const result = parseComponentManifest({
+      manifestVersion: 1,
+      id: "x",
+      props: { a: { kind: "array", item: { kind: "array" }, optional: false } },
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.includes('must not be "array"'))).toBe(true);
+    }
+  });
+
+  it("rejects a bad action payload kind, non-boolean slot, empty previewStates, bad hostData", () => {
+    expect(
+      parseComponentManifest({
+        manifestVersion: 1,
+        id: "x",
+        props: {},
+        actions: { onSelect: { payload: { id: { kind: "object" } } } },
+      }).ok,
+    ).toBe(false);
+    expect(parseComponentManifest({ manifestVersion: 1, id: "x", props: {}, slot: "yes" }).ok).toBe(
+      false,
+    );
+    expect(
+      parseComponentManifest({ manifestVersion: 1, id: "x", props: {}, previewStates: [] }).ok,
+    ).toBe(false);
+    expect(
+      parseComponentManifest({ manifestVersion: 1, id: "x", props: {}, hostData: ["secrets"] }).ok,
+    ).toBe(false);
+  });
+
+  it("rejects an id that violates the slug pattern (mirrors server DeploySlug)", () => {
+    expect(parseComponentManifest({ manifestVersion: 1, id: "Product_Option", props: {} }).ok).toBe(
+      false,
+    );
+    expect(parseComponentManifest({ manifestVersion: 1, id: "", props: {} }).ok).toBe(false);
+    expect(parseComponentManifest({ manifestVersion: 1, id: "ok-slug-1", props: {} }).ok).toBe(
+      true,
+    );
+  });
+
+  it("rejects a wrong manifestVersion and a bad refType", () => {
+    expect(parseComponentManifest({ manifestVersion: 2, id: "x", props: {} }).ok).toBe(false);
+    expect(
+      parseComponentManifest({
+        manifestVersion: 1,
+        id: "x",
+        props: { a: { kind: "ref", refType: "user", optional: false } },
+      }).ok,
+    ).toBe(false);
+  });
+});
+
+describe("PAYWALL_STYLE_KEYS", () => {
+  it("matches the PaywallStyle type keys exactly at runtime", () => {
+    expect(PAYWALL_STYLE_KEYS.size).toBe(PAYWALL_STYLE_KEY_LIST.length);
+    for (const key of PAYWALL_STYLE_KEY_LIST) {
+      expect(PAYWALL_STYLE_KEYS.has(key)).toBe(true);
+    }
+  });
+
+  it("the source list is exhaustive over PaywallStyle at the type level", () => {
+    type Listed = (typeof PAYWALL_STYLE_KEY_LIST)[number];
+    expectTypeOf<Exclude<keyof PaywallStyle, Listed>>().toEqualTypeOf<never>();
+    expectTypeOf<Exclude<Listed, keyof PaywallStyle>>().toEqualTypeOf<never>();
+  });
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 363d385c7..73f66b85a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -316,6 +316,9 @@ importers:
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
+      esbuild:
+        specifier: ^0.25.10
+        version: 0.25.12
       react:
         specifier: 19.1.0
         version: 19.1.0

From f1b25a9789e9b9bf741dc1ffd56c16a89a84aba3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 4 Jul 2026 12:13:18 +0200
Subject: [PATCH 029/129] feat: absolute positioning

---
 .../paywalls/src/schema/style-registry.ts     | 17 ++++++++
 libraries/paywalls/tests/compose.test.ts      | 40 +++++++++++++++++++
 .../tests/style-vocabulary-lock.test.ts       | 20 ++++++++++
 libraries/paywalls/tests/style.test.ts        | 20 ++++++++++
 4 files changed, 97 insertions(+)

diff --git a/libraries/paywalls/src/schema/style-registry.ts b/libraries/paywalls/src/schema/style-registry.ts
index 42d0ad9d2..230d676df 100644
--- a/libraries/paywalls/src/schema/style-registry.ts
+++ b/libraries/paywalls/src/schema/style-registry.ts
@@ -159,6 +159,13 @@ export const STYLE_FIELD_TYPES = {
   zIndex: { kind: "number" },
   display: { kind: "enum", values: ["flex", "none"] },
 
+  // Position (RN absolute/relative flow; offsets are `number | "auto"`)
+  position: { kind: "enum", values: ["absolute", "relative"] },
+  top: { kind: "dimension" },
+  right: { kind: "dimension" },
+  bottom: { kind: "dimension" },
+  left: { kind: "dimension" },
+
   // Shadow (compose-only)
   shadowEnabled: { kind: "boolean" },
   shadowColor: { kind: "color" },
@@ -370,6 +377,11 @@ export const VIEW_STYLE_ENTRIES = [
   { field: "opacity", default: 1 },
   { field: "overflow", default: "visible" },
   { field: "zIndex", default: 0 },
+  { field: "position", default: "relative" },
+  { field: "left", default: "auto" },
+  { field: "top", default: "auto" },
+  { field: "right", default: "auto" },
+  { field: "bottom", default: "auto" },
   { field: "display", default: "flex" },
   { field: "shadowEnabled", default: false },
   { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
@@ -415,6 +427,11 @@ export const TEXT_STYLE_ENTRIES = [
   { field: "opacity", default: 1 },
   { field: "overflow", default: "visible" },
   { field: "zIndex", default: 0 },
+  { field: "position", default: "relative" },
+  { field: "left", default: "auto" },
+  { field: "top", default: "auto" },
+  { field: "right", default: "auto" },
+  { field: "bottom", default: "auto" },
   { field: "display", default: "flex" },
   { field: "shadowEnabled", default: false },
   { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
diff --git a/libraries/paywalls/tests/compose.test.ts b/libraries/paywalls/tests/compose.test.ts
index 516f816c6..8393e84ce 100644
--- a/libraries/paywalls/tests/compose.test.ts
+++ b/libraries/paywalls/tests/compose.test.ts
@@ -107,6 +107,46 @@ export default paywall(() => (<Screen><Text>{"  spaced  "}</Text></Screen>));`;
     roundtrip(src);
   });
 
+  test("absolute position + offsets round-trip (emitted in registry order)", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="Badge" style={{ position: "absolute", top: 10, left: 20 }} /></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    // Registry style order emits position, then left, then top.
+    expect(printed).toContain('style={{ position: "absolute", left: 20, top: 10 }}');
+    roundtrip(src);
+  });
+
+  test('the default position: "relative" (and "auto" offsets) are omitted on print', () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="Flow" style={{ position: "relative", top: "auto", left: 4 }} /></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    // Only the non-default offset survives; the default position/offset are dropped.
+    expect(printed).toContain("style={{ left: 4 }}");
+    expect(printed).not.toContain("position:");
+    expect(printed).not.toContain('top: "auto"');
+    roundtrip(src);
+  });
+
+  test("<Text> absolute position + offsets round-trip (emitted in registry order)", () => {
+    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><Text style={{ position: "absolute", top: 10, left: 20 }}>Badge</Text></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    // Registry style order emits position, then left, then top.
+    expect(printed).toContain('style={{ position: "absolute", left: 20, top: 10 }}');
+    roundtrip(src);
+  });
+
+  test('<Text> default position: "relative" (and "auto" offsets) are omitted on print', () => {
+    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><Text style={{ position: "relative", top: "auto", left: 4 }}>Flow</Text></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    // Only the non-default offset survives; the default position/offset are dropped.
+    expect(printed).toContain("style={{ left: 4 }}");
+    expect(printed).not.toContain("position:");
+    expect(printed).not.toContain('top: "auto"');
+    roundtrip(src);
+  });
+
   test("<View onPress={none()}> round-trips (fresh designer interaction)", () => {
     // A designer-authored `<View>` with a fresh (`{type:"none"}`) click
     // interaction lifts + prints to `onPress={none()}`; the node-level grammar
diff --git a/libraries/paywalls/tests/style-vocabulary-lock.test.ts b/libraries/paywalls/tests/style-vocabulary-lock.test.ts
index 9cc2765d2..5eb49381a 100644
--- a/libraries/paywalls/tests/style-vocabulary-lock.test.ts
+++ b/libraries/paywalls/tests/style-vocabulary-lock.test.ts
@@ -227,6 +227,11 @@ const EXPECTED_VIEW = {
     "opacity",
     "overflow",
     "zIndex",
+    "position",
+    "left",
+    "top",
+    "right",
+    "bottom",
     "display",
     "shadowEnabled",
     "shadowColor",
@@ -276,6 +281,11 @@ const EXPECTED_VIEW = {
     opacity: 1,
     overflow: "visible",
     zIndex: 0,
+    position: "relative",
+    left: "auto",
+    top: "auto",
+    right: "auto",
+    bottom: "auto",
     display: "flex",
     shadowEnabled: false,
     shadowColor: "rgba(0, 0, 0, 1)",
@@ -319,6 +329,11 @@ const EXPECTED_TEXT = {
     "opacity",
     "overflow",
     "zIndex",
+    "position",
+    "left",
+    "top",
+    "right",
+    "bottom",
     "display",
     "shadowEnabled",
     "shadowColor",
@@ -353,6 +368,11 @@ const EXPECTED_TEXT = {
     opacity: 1,
     overflow: "visible",
     zIndex: 0,
+    position: "relative",
+    left: "auto",
+    top: "auto",
+    right: "auto",
+    bottom: "auto",
     display: "flex",
     shadowEnabled: false,
     shadowColor: "rgba(0, 0, 0, 1)",
diff --git a/libraries/paywalls/tests/style.test.ts b/libraries/paywalls/tests/style.test.ts
index 567d02647..cbf0e775d 100644
--- a/libraries/paywalls/tests/style.test.ts
+++ b/libraries/paywalls/tests/style.test.ts
@@ -66,6 +66,26 @@ describe("resolveStyle", () => {
     });
   });
 
+  it("passes absolute position and numeric offsets through (React appends px)", () => {
+    expect(resolveStyle({ position: "absolute", top: 10, left: 20 })).toEqual({
+      position: "absolute",
+      top: 10,
+      left: 20,
+    });
+  });
+
+  it('passes "auto" offsets and relative position through untouched', () => {
+    expect(
+      resolveStyle({ position: "relative", top: "auto", right: "auto", bottom: 0, left: "auto" }),
+    ).toEqual({
+      position: "relative",
+      top: "auto",
+      right: "auto",
+      bottom: 0,
+      left: "auto",
+    });
+  });
+
   // RN gives longhands precedence within one object regardless of key order;
   // on the DOM a CSS shorthand committed later resets its longhands (`flex`
   // expands to flex-grow/flex-shrink/flex-basis). The resolver must therefore

From 85b485eb184f602b3686a073e3714a0164a24a5f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 5 Jul 2026 22:45:13 +0200
Subject: [PATCH 030/129] wip

---
 libraries/paywalls/src/authoring/manifest.ts  | 17 ++++
 libraries/paywalls/src/compose/ast.ts         | 19 +++-
 libraries/paywalls/src/compose/component.ts   | 35 ++++++-
 .../paywalls/src/compose/generate-dts.ts      |  5 +-
 libraries/paywalls/src/compose/index.ts       |  1 +
 libraries/paywalls/src/compose/parser.ts      | 16 ++++
 libraries/paywalls/src/compose/printer.ts     | 10 ++
 .../paywalls/src/compose/style-attr-types.ts  |  5 +
 libraries/paywalls/tests/compose.test.ts      | 93 +++++++++++++++++++
 libraries/paywalls/tests/manifest.test.tsx    | 23 +++++
 10 files changed, 218 insertions(+), 6 deletions(-)

diff --git a/libraries/paywalls/src/authoring/manifest.ts b/libraries/paywalls/src/authoring/manifest.ts
index 9963c8e8d..a7a3641a2 100644
--- a/libraries/paywalls/src/authoring/manifest.ts
+++ b/libraries/paywalls/src/authoring/manifest.ts
@@ -24,6 +24,21 @@ const serializableDefault = (value: unknown): unknown => {
   return;
 };
 
+/**
+ * Rejects a prop or action literally named `id`. `id` is hard-reserved for node
+ * identity in the composition grammar (emitted/consumed as the inline `id`
+ * attribute), so a same-named manifest slot is unrepresentable. Caught here at
+ * authoring time for a friendly early error; the registry re-checks defensively.
+ */
+const assertReservedPropName = (componentId: string, name: string): void => {
+  if (name === "id") {
+    throw new Error(
+      `Component "${componentId}": "id" is reserved for node identity and cannot ` +
+        "be used as a prop or action name.",
+    );
+  }
+};
+
 const isEmptySelect = (schema: PropSchema | undefined): boolean =>
   schema?.kind === "select" && (schema.options === undefined || schema.options.length === 0);
 
@@ -113,12 +128,14 @@ export const extractComponentManifest = <M extends PropMap, A extends ActionMap>
 ): ComponentManifest => {
   const props: Record<string, ManifestProp> = {};
   for (const [name, builder] of Object.entries(definition.props)) {
+    assertReservedPropName(definition.id, name);
     assertSelectHasOptions(definition.id, name, builder.schema);
     props[name] = toManifestProp(builder.schema);
   }
 
   const actions: Record<string, ManifestAction> = {};
   for (const [name, builder] of Object.entries(definition.actions)) {
+    assertReservedPropName(definition.id, name);
     const payload: Record<string, { kind: "string" | "number" | "boolean" }> = {};
     for (const [field, fieldBuilder] of Object.entries(builder.payloadShape ?? {})) {
       payload[field] = { kind: fieldBuilder.kind };
diff --git a/libraries/paywalls/src/compose/ast.ts b/libraries/paywalls/src/compose/ast.ts
index 282b4e787..deb9eae43 100644
--- a/libraries/paywalls/src/compose/ast.ts
+++ b/libraries/paywalls/src/compose/ast.ts
@@ -9,9 +9,11 @@
  *
  * The AST carries exactly the information the grammar expresses — node
  * structure, styles, interactions, variables, component props/action bindings —
- * as plain data (no mimic envelopes, no react). Node ids/positions are NOT part
- * of the AST: the lowerer assigns them positionally (matching today's scheme)
- * and the printer never emits them.
+ * as plain data (no mimic envelopes, no react). Element nodes carry an optional
+ * inline `id`: the printer emits it (first attribute) when present and the
+ * parser reads it back, so a mimic node's identity survives a code round-trip.
+ * `id` is absent for hand-authored, id-free source (the lowerer mints one). Node
+ * positions are NOT part of the AST.
  */
 
 /** Declared variable type. */
@@ -101,6 +103,12 @@ export interface CompositionInteraction {
 export interface CompositionElementNode {
   readonly kind: "element";
   readonly type: "screen" | "view" | "text";
+  /**
+   * The mimic node id, carried inline as the reserved `id` attribute. Present
+   * when lifted from (or authored against) a real document; absent for id-free
+   * hand-authored source, in which case the lowerer mints a fresh id.
+   */
+  readonly id?: string;
   /** Node display name (`name=` attribute), or absent (⇒ default). */
   readonly name?: string;
   /** Style field name → value. Field names are the exact mimic style fields. */
@@ -116,6 +124,11 @@ export interface CompositionComponentNode {
   readonly kind: "component";
   /** The registry tag this instance referenced (printer/lowerer identity). */
   readonly tag: string;
+  /**
+   * The mimic node id, carried inline as the reserved `id` attribute (same
+   * semantics as {@link CompositionElementNode.id}).
+   */
+  readonly id?: string;
   /** Node display name (`name=` attribute), or absent (⇒ default). */
   readonly name?: string;
   readonly props: readonly CompositionPropBinding[];
diff --git a/libraries/paywalls/src/compose/component.ts b/libraries/paywalls/src/compose/component.ts
index d9a34bdef..14c9013a3 100644
--- a/libraries/paywalls/src/compose/component.ts
+++ b/libraries/paywalls/src/compose/component.ts
@@ -117,15 +117,48 @@ export interface CompositionRegistry {
   readonly components: readonly CompositionComponent[];
 }
 
-/** Index a registry by JSX tag (parser lookup: source tag → component). */
+/**
+ * Index a registry by JSX tag (parser lookup: source tag → component).
+ *
+ * This is the funnel every registry-consuming parse passes through, so it is
+ * also where the hard-reserved-`id` invariant is enforced: `id` is always a
+ * node id, never a prop slot, so a component manifest declaring a prop literally
+ * named "id" is rejected here (losing that slot would silently break identity
+ * for the component's instances). See {@link assertNoReservedIdProp}.
+ */
 export function registryByTag(registry: CompositionRegistry): Map<string, CompositionComponent> {
   const byTag = new Map<string, CompositionComponent>();
   for (const component of registry.components) {
+    assertNoReservedIdProp(component.tag, component.manifest);
     byTag.set(component.tag, component);
   }
   return byTag;
 }
 
+/**
+ * Reject a component manifest that declares a prop (or action) named `id`. `id`
+ * is hard-reserved for node identity in the composition grammar, so a manifest
+ * slot of the same name is unrepresentable — fail loudly at registry
+ * construction rather than silently dropping the slot on every instance.
+ */
+export function assertNoReservedIdProp(
+  tag: string,
+  manifest: CompositionComponentManifest,
+): void {
+  if (Object.hasOwn(manifest.props, "id")) {
+    throw new Error(
+      `Component "${tag}" declares a prop named "id", which is reserved for node ` +
+        `identity in the composition grammar. Rename the prop.`,
+    );
+  }
+  if (manifest.actions && Object.hasOwn(manifest.actions, "id")) {
+    throw new Error(
+      `Component "${tag}" declares an action named "id", which is reserved for node ` +
+        `identity in the composition grammar. Rename the action.`,
+    );
+  }
+}
+
 /**
  * Resolve the registry component a `component` AST node refers to (printer
  * lookup). Local instances match by `localComponentId`; catalog instances by
diff --git a/libraries/paywalls/src/compose/generate-dts.ts b/libraries/paywalls/src/compose/generate-dts.ts
index 955b6a04a..e5a70d7fa 100644
--- a/libraries/paywalls/src/compose/generate-dts.ts
+++ b/libraries/paywalls/src/compose/generate-dts.ts
@@ -106,7 +106,8 @@ function tagDeclaration(tag: string, node: keyof typeof NODE_STYLE_ENTRIES, shap
     const descriptor = STYLE_FIELD_TYPES[entry.field as StyleFieldName];
     styleMembers.push(`        ${entry.field}?: ${descriptorTsType(descriptor)};`);
   }
-  const members: string[] = [`      style?: {\n${styleMembers.join("\n")}\n      };`];
+  const members: string[] = [`      id?: string;`];
+  members.push(`      style?: {\n${styleMembers.join("\n")}\n      };`);
   members.push(`      name?: string;`);
   if (shape.onPress) {
     members.push(`      onPress?: Action;`);
@@ -144,7 +145,7 @@ function componentDeclaration(
     slot?: boolean;
   },
 ): string {
-  const members: string[] = [];
+  const members: string[] = [`      id?: string;`];
   for (const [name, def] of Object.entries(manifest.props)) {
     members.push(`      ${propMember(name, def)}`);
   }
diff --git a/libraries/paywalls/src/compose/index.ts b/libraries/paywalls/src/compose/index.ts
index 07bf94a6b..47b48c8b9 100644
--- a/libraries/paywalls/src/compose/index.ts
+++ b/libraries/paywalls/src/compose/index.ts
@@ -68,6 +68,7 @@ export {
 // Component/registry vocabulary (prop/action kinds from `../schema`).
 export {
   arrayItemKey,
+  assertNoReservedIdProp,
   defaultComponentTag,
   registryByTag,
   resolveComponentForNode,
diff --git a/libraries/paywalls/src/compose/parser.ts b/libraries/paywalls/src/compose/parser.ts
index 9b210c7f1..2befff970 100644
--- a/libraries/paywalls/src/compose/parser.ts
+++ b/libraries/paywalls/src/compose/parser.ts
@@ -254,12 +254,18 @@ class Parser {
       throw this.error(el, `Unknown element <${tag}>`);
     }
 
+    let id: string | undefined;
     let name: string | undefined;
     const style: Record<string, CompositionStyleValue> = {};
     const interactions: CompositionInteraction[] = [];
 
     for (const attr of this.attributesOf(el)) {
       const attrName = attr.name.getText(this.sf);
+      // `id` is HARD-reserved: it always maps to the node id, never a prop.
+      if (attrName === "id") {
+        id = this.expectStringAttr(attr);
+        continue;
+      }
       if (attrName === "name") {
         name = this.expectStringAttr(attr);
         continue;
@@ -290,6 +296,7 @@ class Parser {
     const node: CompositionElementNode = {
       kind: "element",
       type,
+      ...(id !== undefined ? { id } : {}),
       ...(name !== undefined ? { name } : {}),
       style,
       interactions,
@@ -371,12 +378,20 @@ class Parser {
     component: CompositionComponent,
   ): CompositionComponentNode {
     const manifest = component.manifest;
+    let id: string | undefined;
     let name: string | undefined;
     const propByName = new Map<string, CompositionPropValue>();
     const actionByName = new Map<string, CompositionAction>();
 
     for (const attr of this.attributesOf(el)) {
       const attrName = attr.name.getText(this.sf);
+      // `id` is HARD-reserved on component tags too: it is unconditionally the
+      // node id, never a prop. Unlike `name`, a manifest prop literally named
+      // "id" cannot win the slot — the registry rejects such manifests up front.
+      if (attrName === "id") {
+        id = this.expectStringAttr(attr);
+        continue;
+      }
       // `name` is the reserved instance display-name attribute — UNLESS the
       // component declares a prop literally named "name", in which case the
       // functional prop wins the single `name=` slot (a manifest prop named
@@ -417,6 +432,7 @@ class Parser {
     return {
       kind: "component",
       tag: component.tag,
+      ...(id !== undefined ? { id } : {}),
       ...(name !== undefined ? { name } : {}),
       props,
       actionBindings,
diff --git a/libraries/paywalls/src/compose/printer.ts b/libraries/paywalls/src/compose/printer.ts
index e17ac2c61..c0be5164a 100644
--- a/libraries/paywalls/src/compose/printer.ts
+++ b/libraries/paywalls/src/compose/printer.ts
@@ -138,6 +138,11 @@ class Printer {
     const attrs: string[] = [];
     const meta = NODE_STYLE_VOCABULARY[type];
 
+    // `id` is emitted first (when present) so identity is stable + greppable.
+    if (node.id !== undefined) {
+      attrs.push(formatStringAttr("id", node.id));
+    }
+
     if (node.name !== undefined && node.name !== meta.defaultName) {
       attrs.push(formatStringAttr("name", node.name));
     }
@@ -278,6 +283,11 @@ class Printer {
   ): string[] {
     const attrs: string[] = [];
 
+    // `id` is emitted first (when present), matching built-in elements.
+    if (node.id !== undefined) {
+      attrs.push(formatStringAttr("id", node.id));
+    }
+
     // Skip the reserved display-name attribute when the component declares a
     // prop literally named "name" (that prop owns the `name=` attribute instead).
     if (
diff --git a/libraries/paywalls/src/compose/style-attr-types.ts b/libraries/paywalls/src/compose/style-attr-types.ts
index 17cdfb5d6..42bd67dd9 100644
--- a/libraries/paywalls/src/compose/style-attr-types.ts
+++ b/libraries/paywalls/src/compose/style-attr-types.ts
@@ -11,6 +11,8 @@
  * (`name`, `onPress`, children) are siblings of `style`, from the PARSER's
  * accepted surface, not the style registry:
  *
+ * - `id` — the optional inline node id on every node (parser: any node); the
+ *   printer emits it and the lowerer consumes it to preserve identity.
  * - `name` — an optional display-name string on every node (parser: any node).
  * - `onPress` — a bound {@link Action}, `<View>` only (parser rejects it on
  *   Screen/Text).
@@ -49,6 +51,7 @@ type LayoutChild = unknown;
  * code-component authoring look.
  */
 export type ScreenProps = {
+  readonly id?: string;
   readonly style?: NodeStyleProps<"screen">;
   readonly name?: string;
   readonly children?: LayoutChild | readonly LayoutChild[];
@@ -56,6 +59,7 @@ export type ScreenProps = {
 
 /** `<View>` props: a `style` object + optional name + `onPress` action + element children. */
 export type ViewProps = {
+  readonly id?: string;
   readonly style?: NodeStyleProps<"view">;
   readonly name?: string;
   /** A node interaction bound to press/click. `<View>` only. */
@@ -65,6 +69,7 @@ export type ViewProps = {
 
 /** `<Text>` props: a `style` object + optional name + a literal string child (its content). */
 export type TextProps = {
+  readonly id?: string;
   readonly style?: NodeStyleProps<"text">;
   readonly name?: string;
   readonly children?: string;
diff --git a/libraries/paywalls/tests/compose.test.ts b/libraries/paywalls/tests/compose.test.ts
index 8393e84ce..4afe39c84 100644
--- a/libraries/paywalls/tests/compose.test.ts
+++ b/libraries/paywalls/tests/compose.test.ts
@@ -396,6 +396,99 @@ export default paywall(() => (<Screen name="Main"><Widget name="Buy now" /></Scr
   });
 });
 
+describe("inline id attributes (node identity)", () => {
+  test("parses id on built-in tags into the AST id field", () => {
+    const src = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";
+export default paywall(() => (
+  <Screen id="scr1">
+    <View id="v1" name="CTA">
+      <Text id="t1">Continue</Text>
+    </View>
+  </Screen>
+));`;
+    const ast = parseComposition(src);
+    expect(ast.root.id).toBe("scr1");
+    const view = ast.root.children[0]!;
+    expect(view.kind).toBe("element");
+    if (view.kind !== "element") return;
+    expect(view.id).toBe("v1");
+    expect(view.name).toBe("CTA");
+    expect(view.children[0]!.id).toBe("t1");
+  });
+
+  test("prints id as the first attribute on every element", () => {
+    const src = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";
+export default paywall(() => (
+  <Screen id="scr1" name="Main">
+    <View id="v1" name="CTA" style={{ gap: 12 }}>
+      <Text id="t1">Continue</Text>
+    </View>
+  </Screen>
+));`;
+    const printed = printComposition(parseComposition(src));
+    expect(printed).toContain('<Screen id="scr1" name="Main">');
+    expect(printed).toContain('<View id="v1" name="CTA" style={{ gap: 12 }}>');
+    expect(printed).toContain('<Text id="t1">Continue</Text>');
+    roundtrip(src);
+  });
+
+  test("elements without ids print unchanged", () => {
+    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><View name="M" style={{ gap: 4 }} /></Screen>));`;
+    const printed = printComposition(parseComposition(src));
+    expect(printed).toContain("<Screen>");
+    expect(printed).toContain('<View name="M" style={{ gap: 4 }} />');
+    expect(printed).not.toContain("id=");
+    roundtrip(src);
+  });
+
+  test("id is hard-reserved on component tags (never a prop)", () => {
+    const registry: CompositionRegistry = {
+      components: [
+        {
+          tag: "Widget",
+          source: "local",
+          localComponentId: "cc_w",
+          componentSlug: "widget",
+          componentVersion: 0,
+          contentHash: "",
+          manifest: { slot: false, props: { title: { kind: "string" } }, actions: {} },
+        },
+      ],
+    };
+    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen id="s"><Widget id="w1" title="Hi" /></Screen>));`;
+    const ast = parseComposition(src, { registry });
+    const widget = ast.root.children[0]!;
+    expect(widget.kind).toBe("component");
+    if (widget.kind !== "component") return;
+    expect(widget.id).toBe("w1");
+    expect(widget.props).toEqual([{ name: "title", value: { kind: "literal-string", value: "Hi" } }]);
+    const printed = printComposition(ast, { registry });
+    expect(printed).toContain('<Widget id="w1" title="Hi" />');
+    roundtrip(src, registry);
+  });
+
+  test("a manifest prop named id is rejected at registry construction", () => {
+    const registry: CompositionRegistry = {
+      components: [
+        {
+          tag: "Widget",
+          source: "local",
+          localComponentId: "cc_w",
+          componentSlug: "widget",
+          componentVersion: 0,
+          contentHash: "",
+          manifest: { slot: false, props: { id: { kind: "string" } }, actions: {} },
+        },
+      ],
+    };
+    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
+export default paywall(() => (<Screen><Widget id="w1" /></Screen>));`;
+    expect(() => parseComposition(src, { registry })).toThrow(/reserved for node identity/);
+  });
+});
+
 describe("structured background style values (gradient + image)", () => {
   test("a non-default gradient parses into JSON style data", () => {
     const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
diff --git a/libraries/paywalls/tests/manifest.test.tsx b/libraries/paywalls/tests/manifest.test.tsx
index f7ade49e6..c83baee24 100644
--- a/libraries/paywalls/tests/manifest.test.tsx
+++ b/libraries/paywalls/tests/manifest.test.tsx
@@ -226,6 +226,29 @@ describe("extractComponentManifest", () => {
     );
   });
 
+  it('rejects a prop named "id" (reserved for node identity)', () => {
+    const definition = defineComponent({
+      id: "reserved-id-prop",
+      props: (p) => ({ id: p.string() }),
+      render: () => <View />,
+    });
+    expect(() => extractComponentManifest(definition)).toThrow(
+      /"id" is reserved for node identity/,
+    );
+  });
+
+  it('rejects an action named "id" (reserved for node identity)', () => {
+    const definition = defineComponent({
+      id: "reserved-id-action",
+      props: (p) => ({ title: p.string() }),
+      actions: (a) => ({ id: a.action({}) }),
+      render: () => <View />,
+    });
+    expect(() => extractComponentManifest(definition)).toThrow(
+      /"id" is reserved for node identity/,
+    );
+  });
+
   it("keeps explicit optional() and default() both consumer-optional", () => {
     const definition = defineComponent({
       id: "optionality",

From 96a2de882af1d48dfdc2516fd7564d9e19103652 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 9 Jul 2026 21:24:25 +0200
Subject: [PATCH 031/129] feat: remove compose surface, document-first
 authoring

Deletes the composition-as-code grammar/parser/printer surface from
@voidhash/paywalls; authoring is now document-first (manifest extraction
+ schema validation only).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 libraries/paywalls/build.ts                   |    6 -
 libraries/paywalls/package.json               |   18 +-
 .../paywalls/src/authoring/compose-values.ts  |   81 ++
 .../src/authoring/define-component.tsx        |   87 +-
 .../paywalls/src/authoring/define-paywall.ts  |   47 +
 libraries/paywalls/src/authoring/manifest.ts  |   24 +-
 libraries/paywalls/src/authoring/screen.tsx   |   32 +
 libraries/paywalls/src/compose/ast.ts         |  145 ---
 .../paywalls/src/compose/author-surface.ts    |   70 --
 libraries/paywalls/src/compose/component.ts   |  260 ----
 libraries/paywalls/src/compose/error.ts       |   17 -
 .../paywalls/src/compose/generate-dts.ts      |  203 ----
 libraries/paywalls/src/compose/grammar.ts     |   87 --
 libraries/paywalls/src/compose/index.ts       |   86 --
 libraries/paywalls/src/compose/parser.ts      | 1052 -----------------
 libraries/paywalls/src/compose/printer.ts     |  443 -------
 .../paywalls/src/compose/style-attr-types.ts  |   76 --
 libraries/paywalls/src/index.ts               |   21 +
 libraries/paywalls/src/primitives/types.ts    |   14 +
 .../paywalls/src/schema/component-manifest.ts |   12 +-
 libraries/paywalls/src/schema/index.ts        |   11 -
 .../paywalls/src/schema/style-registry.ts     |  479 +-------
 libraries/paywalls/src/schema/validate.ts     |    8 +-
 .../callable-component-manifest.test.tsx      |  111 ++
 .../paywalls/tests/compose-invariants.test.ts |  336 ------
 .../tests/compose-surface-types.test.ts       |   80 --
 libraries/paywalls/tests/compose.test.ts      |  671 -----------
 libraries/paywalls/tests/manifest.test.tsx    |   18 +-
 libraries/paywalls/tests/render.test.tsx      |    1 -
 .../paywalls/tests/sandbox-bundle.test.ts     |   16 +-
 libraries/paywalls/tests/sandbox.test.tsx     |   10 +-
 .../tests/style-vocabulary-lock.test.ts       |  364 +-----
 libraries/paywalls/tests/tree.test.tsx        |    3 -
 libraries/paywalls/tests/types.test.ts        |    1 -
 libraries/paywalls/tests/validate.test.ts     |    6 +-
 libraries/paywalls/tests/validate.test.tsx    |   59 +-
 36 files changed, 459 insertions(+), 4496 deletions(-)
 create mode 100644 libraries/paywalls/src/authoring/compose-values.ts
 create mode 100644 libraries/paywalls/src/authoring/define-paywall.ts
 create mode 100644 libraries/paywalls/src/authoring/screen.tsx
 delete mode 100644 libraries/paywalls/src/compose/ast.ts
 delete mode 100644 libraries/paywalls/src/compose/author-surface.ts
 delete mode 100644 libraries/paywalls/src/compose/component.ts
 delete mode 100644 libraries/paywalls/src/compose/error.ts
 delete mode 100644 libraries/paywalls/src/compose/generate-dts.ts
 delete mode 100644 libraries/paywalls/src/compose/grammar.ts
 delete mode 100644 libraries/paywalls/src/compose/index.ts
 delete mode 100644 libraries/paywalls/src/compose/parser.ts
 delete mode 100644 libraries/paywalls/src/compose/printer.ts
 delete mode 100644 libraries/paywalls/src/compose/style-attr-types.ts
 create mode 100644 libraries/paywalls/tests/callable-component-manifest.test.tsx
 delete mode 100644 libraries/paywalls/tests/compose-invariants.test.ts
 delete mode 100644 libraries/paywalls/tests/compose-surface-types.test.ts
 delete mode 100644 libraries/paywalls/tests/compose.test.ts

diff --git a/libraries/paywalls/build.ts b/libraries/paywalls/build.ts
index 4b0386bc8..c60545e59 100644
--- a/libraries/paywalls/build.ts
+++ b/libraries/paywalls/build.ts
@@ -19,9 +19,6 @@ const buildEntries = async (): Promise<void> => {
   await tsup.build({
     dts: true,
     entryPoints: {
-      // Composition grammar/AST/printer/dts + inert author surface. Mimic-free;
-      // imports `typescript` (external) for the whitelist parser.
-      compose: "./src/compose/index.ts",
       dom: "./src/dom.tsx",
       index: "./src/index.ts",
       "jsx-dev-runtime": "./src/jsx-dev-runtime.ts",
@@ -44,9 +41,6 @@ const buildEntries = async (): Promise<void> => {
       // browser entries because nothing outside `src/tree-renderer` imports it.
       "react-reconciler",
       "react-reconciler/constants",
-      // The composition parser imports the TypeScript compiler; keep it external
-      // (consumers provide it as an optional peer) instead of inlining ~10MB.
-      "typescript",
     ],
     format: ["cjs", "esm"],
     outDir: "./dist",
diff --git a/libraries/paywalls/package.json b/libraries/paywalls/package.json
index b0eac4b1a..14dde44a1 100644
--- a/libraries/paywalls/package.json
+++ b/libraries/paywalls/package.json
@@ -80,16 +80,6 @@
         "default": "./dist/schema.cjs"
       }
     },
-    "./compose": {
-      "import": {
-        "types": "./dist/compose.d.ts",
-        "default": "./dist/compose.mjs"
-      },
-      "require": {
-        "types": "./dist/compose.d.ts",
-        "default": "./dist/compose.cjs"
-      }
-    },
     "./jsx-runtime": {
       "import": {
         "types": "./dist/jsx-runtime.d.ts",
@@ -168,12 +158,6 @@
   },
   "peerDependencies": {
     "react": ">=18",
-    "react-dom": ">=18",
-    "typescript": ">=5"
-  },
-  "peerDependenciesMeta": {
-    "typescript": {
-      "optional": true
-    }
+    "react-dom": ">=18"
   }
 }
diff --git a/libraries/paywalls/src/authoring/compose-values.ts b/libraries/paywalls/src/authoring/compose-values.ts
new file mode 100644
index 000000000..4640ac7f0
--- /dev/null
+++ b/libraries/paywalls/src/authoring/compose-values.ts
@@ -0,0 +1,81 @@
+/**
+ * The inert author-surface markers, exported from the package ROOT
+ * (`@voidhash/paywalls`).
+ *
+ * Code-component source imports these symbols so it type-checks and a real
+ * tsc/bundler pass succeeds. The runtime bodies are intentionally inert:
+ * `variable.*`/`product`/`purchase`/… return opaque marker objects whose only
+ * job is to exist and carry an action binding. Their TYPES
+ * ({@link VariableHandle}/{@link ProductRef}/{@link Action}) carry the precise
+ * author-surface shapes so completions and diagnostics work in Monaco and real
+ * tsc.
+ */
+
+/**
+ * A paywall-scoped variable reference, produced by `variable.<type>(name)`. At
+ * runtime the handle is an inert marker (never dereferenced); its `.set(value)`
+ * builds a set-variable action.
+ */
+export interface VariableHandle<T> {
+  /** Marks this identifier as a variable reference; not read at runtime. */
+  readonly __type: T;
+  /** Build a set-variable action bound to this variable. */
+  set(value: T): Action;
+}
+
+/** A catalog product reference, produced by `product(id)`. Inert marker. */
+export interface ProductRef {
+  readonly __product: true;
+}
+
+/** A bound node/component interaction, produced by the action helpers. Inert marker. */
+export interface Action {
+  readonly __action: true;
+}
+
+/** The shared inert action marker returned by every action helper. */
+const ACTION_MARKER: Action = { __action: true };
+
+/** Build an inert {@link VariableHandle} marker for a declared variable. */
+const makeVariableHandle = <T>(): VariableHandle<T> => ({
+  __type: undefined as T,
+  set: () => ACTION_MARKER,
+});
+
+/**
+ * Declares a paywall-scoped variable. The parser recognizes the `variable.*(…)`
+ * call and its declared default; the returned handle is inert.
+ */
+export const variable: {
+  string(name: string, opts?: { default?: string }): VariableHandle<string>;
+  number(name: string, opts?: { default?: number }): VariableHandle<number>;
+  boolean(name: string, opts?: { default?: boolean }): VariableHandle<boolean>;
+  product(name: string): VariableHandle<ProductRef>;
+} = {
+  string: () => makeVariableHandle<string>(),
+  number: () => makeVariableHandle<number>(),
+  boolean: () => makeVariableHandle<boolean>(),
+  product: () => makeVariableHandle<ProductRef>(),
+};
+
+/** References a catalog product by id. Inert marker. */
+export const product = (_id: string): ProductRef => ({ __product: true });
+
+/** A purchase action for a product (or product variable). Inert marker. */
+export const purchase = (_product: ProductRef | VariableHandle<ProductRef>): Action => ACTION_MARKER;
+
+/** A close-paywall action. Inert marker. */
+export const closePaywall = (): Action => ACTION_MARKER;
+
+/** An explicit no-op action binding (does nothing). Inert marker. */
+export const none = (): Action => ACTION_MARKER;
+
+/**
+ * Reads a field of the payload emitted by a component action, for use inside
+ * that action's binding — e.g. `onSelect={selected.set(payload("product"))}`.
+ * Only valid within a component action binding; the field must be declared by
+ * the component's action. Inert marker (typed `any` so it slots into any
+ * expected value position).
+ */
+// biome-ignore lint/suspicious/noExplicitAny: payload slots into any action value position.
+export const payload = (_field: string): any => undefined;
diff --git a/libraries/paywalls/src/authoring/define-component.tsx b/libraries/paywalls/src/authoring/define-component.tsx
index cc8b98e61..e9f6897f9 100644
--- a/libraries/paywalls/src/authoring/define-component.tsx
+++ b/libraries/paywalls/src/authoring/define-component.tsx
@@ -17,6 +17,7 @@ import {
   buildActionCallbacks,
   type InferActions,
 } from "./actions";
+import type { Action, VariableHandle } from "./compose-values";
 import {
   applyPropDefaults,
   type InferExternalProps,
@@ -25,6 +26,7 @@ import {
   type PropFactory,
   type PropMap,
   propFactory,
+  type PropValueOf,
 } from "./props";
 
 /** Fixtures one preview state renders against (contract §2 `previewStates`). */
@@ -60,7 +62,6 @@ export type PaywallComponent<M extends PropMap, A extends ActionMap> = (
 /** Identity metadata attached to every component definition. */
 export interface PaywallComponentMeta {
   readonly kind: "component";
-  readonly id: string;
   readonly title?: string;
   readonly description?: string;
 }
@@ -92,10 +93,30 @@ export type PanelPropsFor<M extends PropMap> = {
  */
 export type ComponentPanel<M extends PropMap> = (ctx: PanelContext<PanelPropsFor<M>>) => ReactNode;
 
+/**
+ * The widened prop surface for a component instance placed in a paywall
+ * document. Each declared prop accepts its literal value OR a matching
+ * {@link VariableHandle}; each declared action accepts a real handler OR an
+ * {@link Action} marker (e.g. `purchase(…)`); plus the reserved `id`/`name` node
+ * attributes and, when the component renders a `<Slot/>`, `children`.
+ *
+ * This is intentionally wider than {@link InferComponentProps} (the runtime
+ * consumer surface) so that a component instance whose `title` binds to a
+ * variable and `onSelect` binds to `purchase(p)` type-checks. Slotting is not
+ * knowable from the types alone, so `children` is always permitted here.
+ */
+export type ComposeComponentProps<M extends PropMap, A extends ActionMap> = {
+  [K in keyof M]?: PropValueOf<M[K]> | VariableHandle<PropValueOf<M[K]>>;
+} & {
+  [K in keyof A]?: (ActionHandlerProps<A>[K] extends infer H ? H : never) | Action;
+} & {
+  readonly id?: string;
+  readonly name?: string;
+  readonly children?: ReactNode;
+};
+
 export interface DefineComponentInput<M extends PropMap, A extends ActionMap> {
-  /** Stable component slug (`^[a-z0-9][a-z0-9-]{0,63}$`), e.g. "product-option". */
-  readonly id: string;
-  /** Display name shown in the editor. */
+  /** Display name shown in the editor / catalog. */
   readonly title?: string;
   readonly description?: string;
   /** Declares the component's editable props using the `p` builder factory. */
@@ -114,12 +135,8 @@ export interface DefineComponentInput<M extends PropMap, A extends ActionMap> {
   readonly render: (ctx: ComponentRenderContext<M, A>) => ReactNode;
 }
 
-/**
- * A reusable paywall component definition: the renderable React component plus
- * everything the CLI needs to emit the §2 manifest and §3 preview trees.
- */
-export interface ComponentDefinition<M extends PropMap, A extends ActionMap> {
-  readonly id: string;
+/** The metadata fields attached to a component definition (everything but the call signature). */
+export interface ComponentDefinitionFields<M extends PropMap, A extends ActionMap> {
   readonly title?: string;
   readonly description?: string;
   /** The resolved prop builders, keyed by name. */
@@ -130,17 +147,40 @@ export interface ComponentDefinition<M extends PropMap, A extends ActionMap> {
   readonly panel?: ComponentPanel<M>;
   /** The original template function (used for declarative slot detection). */
   readonly render: (ctx: ComponentRenderContext<M, A>) => ReactNode;
-  /** The renderable React component. */
+  /**
+   * The renderable React component. Alias of the definition's own call
+   * signature — kept because the sandbox/render pipelines reference `.component`
+   * explicitly. Prefer calling the definition directly (`<X/>`) in composition
+   * code.
+   */
   readonly component: PaywallComponent<M, A>;
   readonly __voidhash: PaywallComponentMeta;
 }
 
+/**
+ * A reusable paywall component definition: a CALLABLE React component (so
+ * `import X from "./components/x"; <X/>` works as a real module and typechecks
+ * against the widened prop surface) carrying all the metadata needed to extract
+ * the §2 manifest and render §3 preview trees.
+ *
+ * The call signature accepts {@link ComposeComponentProps} (widened to accept
+ * variable/action bindings); {@link renderComponentToTree} and other runtime
+ * consumers invoke `.component` (the same function) with resolved runtime props.
+ */
+export type ComponentDefinition<M extends PropMap, A extends ActionMap> = ((
+  props: ComposeComponentProps<M, A>,
+) => ReactNode) &
+  ComponentDefinitionFields<M, A>;
+
 /**
  * Defines a reusable, code-driven paywall component.
  *
+ * A component file default-exports the definition. The component is stored as
+ * real source in a `codeComponent` node of the paywall document, compiled
+ * in-browser (esbuild-wasm) and referenced from component instances by node id.
+ *
  * ```tsx
- * export const definition = defineComponent({
- *   id: "product-option",
+ * export default defineComponent({
  *   props: (p) => ({
  *     product: p.ref("product"),
  *     accentColor: p.string().editor("color").default("#16a34a"),
@@ -153,7 +193,6 @@ export interface ComponentDefinition<M extends PropMap, A extends ActionMap> {
  *     </Pressable>
  *   ),
  * });
- * export const ProductOption = definition.component;
  * ```
  */
 export const defineComponent = <
@@ -177,33 +216,39 @@ export const defineComponent = <
     const props = applyPropDefaults(propMap, rest);
     return <SlotProvider value={children ?? null}>{render({ actions, props })}</SlotProvider>;
   };
-  Component.displayName = input.title ?? input.id;
+  Component.displayName = input.title ?? "Component";
 
-  return {
+  // The definition IS the React component (so `import X from "./x"; <X/>` works
+  // as a real module) with all metadata assigned onto the same function. The
+  // runtime component's typed prop surface differs from the widened call
+  // signature `ComponentDefinition` advertises, so the assembled object is cast
+  // to the definition type — both surfaces are backed by this one function.
+  const fields: ComponentDefinitionFields<M, A> = {
     __voidhash: {
       kind: "component",
-      id: input.id,
       title: input.title,
       description: input.description,
     },
     actions: actionMap,
     component: Component,
     description: input.description,
-    id: input.id,
     panel: input.panel,
     previews: input.previews ?? {},
     props: propMap,
     render,
     title: input.title,
   };
+  return Object.assign(Component, fields) as unknown as ComponentDefinition<M, A>;
 };
 
-/** Type guard for a {@link ComponentDefinition}. */
+/**
+ * Type guard for a {@link ComponentDefinition}. A definition is now a callable
+ * function carrying `__voidhash.kind === "component"` and a `render` template.
+ */
 export const isComponentDefinition = (
   value: unknown,
 ): value is ComponentDefinition<PropMap, ActionMap> =>
-  typeof value === "object" &&
-  value !== null &&
+  typeof value === "function" &&
   (value as { __voidhash?: PaywallComponentMeta }).__voidhash?.kind === "component" &&
   typeof (value as { render?: unknown }).render === "function" &&
   typeof (value as { component?: unknown }).component === "function";
diff --git a/libraries/paywalls/src/authoring/define-paywall.ts b/libraries/paywalls/src/authoring/define-paywall.ts
new file mode 100644
index 000000000..7a0ea65af
--- /dev/null
+++ b/libraries/paywalls/src/authoring/define-paywall.ts
@@ -0,0 +1,47 @@
+import type { ReactNode } from "react";
+
+/** Identity metadata attached to every paywall composition definition. */
+export interface PaywallCompositionMeta {
+  readonly kind: "paywall-composition";
+}
+
+/**
+ * The input to {@link definePaywall}: exactly a `render` callback returning the
+ * paywall's `<Screen>`. A plain object type (no index signature) so any unknown
+ * key is an excess-property error at author time.
+ */
+export interface DefinePaywallInput {
+  /** Returns the paywall's root `<Screen>` element; run in previews. */
+  readonly render: () => ReactNode;
+}
+
+/**
+ * An inert paywall-definition shape: identity metadata plus a `render` callback.
+ *
+ * Paywalls are authored as mimic documents (visually and via schema-validated
+ * edit ops), not as code — this shape is retained only as a stable, inert
+ * author/runtime surface for rendering a `render` callback in previews.
+ */
+export interface PaywallCompositionDefinition {
+  readonly __voidhash: PaywallCompositionMeta;
+  readonly render: () => ReactNode;
+}
+
+/**
+ * Wraps a `render` callback as an inert {@link PaywallCompositionDefinition}.
+ * The returned value is plain data; nothing parses it. Retained as a stable
+ * export; paywalls are authored as documents, not code.
+ */
+export const definePaywall = (input: DefinePaywallInput): PaywallCompositionDefinition => ({
+  __voidhash: { kind: "paywall-composition" },
+  render: input.render,
+});
+
+/** Type guard for a {@link PaywallCompositionDefinition}. */
+export const isPaywallCompositionDefinition = (
+  value: unknown,
+): value is PaywallCompositionDefinition =>
+  typeof value === "object" &&
+  value !== null &&
+  (value as { __voidhash?: PaywallCompositionMeta }).__voidhash?.kind === "paywall-composition" &&
+  typeof (value as { render?: unknown }).render === "function";
diff --git a/libraries/paywalls/src/authoring/manifest.ts b/libraries/paywalls/src/authoring/manifest.ts
index a7a3641a2..47f8fb916 100644
--- a/libraries/paywalls/src/authoring/manifest.ts
+++ b/libraries/paywalls/src/authoring/manifest.ts
@@ -26,14 +26,14 @@ const serializableDefault = (value: unknown): unknown => {
 
 /**
  * Rejects a prop or action literally named `id`. `id` is hard-reserved for node
- * identity in the composition grammar (emitted/consumed as the inline `id`
- * attribute), so a same-named manifest slot is unrepresentable. Caught here at
- * authoring time for a friendly early error; the registry re-checks defensively.
+ * identity in the paywall document, so a same-named manifest slot is
+ * unrepresentable. Caught here at authoring time for a friendly early error; the
+ * registry re-checks defensively.
  */
-const assertReservedPropName = (componentId: string, name: string): void => {
+const assertReservedPropName = (componentLabel: string, name: string): void => {
   if (name === "id") {
     throw new Error(
-      `Component "${componentId}": "id" is reserved for node identity and cannot ` +
+      `Component "${componentLabel}": "id" is reserved for node identity and cannot ` +
         "be used as a prop or action name.",
     );
   }
@@ -48,13 +48,13 @@ const isEmptySelect = (schema: PropSchema | undefined): boolean =>
  * select props and `p.array(p.select([]))` items.
  */
 const assertSelectHasOptions = (
-  componentId: string,
+  componentLabel: string,
   propName: string,
   schema: PropSchema,
 ): void => {
   if (isEmptySelect(schema) || (schema.kind === "array" && isEmptySelect(schema.item))) {
     throw new Error(
-      `Component "${componentId}": prop "${propName}" declares p.select([]) ` +
+      `Component "${componentLabel}": prop "${propName}" declares p.select([]) ` +
         "with no options — select props need at least one option.",
     );
   }
@@ -126,16 +126,19 @@ const detectProductHookUsage = (render: (ctx: never) => unknown): boolean =>
 export const extractComponentManifest = <M extends PropMap, A extends ActionMap>(
   definition: ComponentDefinition<M, A>,
 ): ComponentManifest => {
+  // `id` is gone from component definitions (identity is the file path); error
+  // messages fall back to the display title, then a generic label.
+  const label = definition.title ?? "component";
   const props: Record<string, ManifestProp> = {};
   for (const [name, builder] of Object.entries(definition.props)) {
-    assertReservedPropName(definition.id, name);
-    assertSelectHasOptions(definition.id, name, builder.schema);
+    assertReservedPropName(label, name);
+    assertSelectHasOptions(label, name, builder.schema);
     props[name] = toManifestProp(builder.schema);
   }
 
   const actions: Record<string, ManifestAction> = {};
   for (const [name, builder] of Object.entries(definition.actions)) {
-    assertReservedPropName(definition.id, name);
+    assertReservedPropName(label, name);
     const payload: Record<string, { kind: "string" | "number" | "boolean" }> = {};
     for (const [field, fieldBuilder] of Object.entries(builder.payloadShape ?? {})) {
       payload[field] = { kind: fieldBuilder.kind };
@@ -153,7 +156,6 @@ export const extractComponentManifest = <M extends PropMap, A extends ActionMap>
 
   return {
     manifestVersion: COMPONENT_MANIFEST_VERSION,
-    id: definition.id,
     ...(definition.title !== undefined ? { title: definition.title } : {}),
     ...(definition.description !== undefined ? { description: definition.description } : {}),
     props,
diff --git a/libraries/paywalls/src/authoring/screen.tsx b/libraries/paywalls/src/authoring/screen.tsx
new file mode 100644
index 000000000..22b958171
--- /dev/null
+++ b/libraries/paywalls/src/authoring/screen.tsx
@@ -0,0 +1,32 @@
+import type { ReactNode } from "react";
+
+import { View } from "../primitives/components";
+import type { PaywallStyle } from "../schema/style";
+
+/**
+ * The `<Screen>` style object type — the shared §3.1 wire style shape. A typo'd
+ * key or wrong-typed value errors at type-check time.
+ */
+export type ScreenStyle = PaywallStyle;
+
+/** Props accepted by the root `<Screen>` of a paywall composition. */
+export interface ScreenProps {
+  /** Optional inline node id (identity is otherwise the file/path). */
+  readonly id?: string;
+  /** Optional display name (`name=` attribute). */
+  readonly name?: string;
+  /** The screen's style object; see {@link ScreenStyle}. */
+  readonly style?: ScreenStyle;
+  readonly children?: ReactNode;
+}
+
+/**
+ * The root layout primitive for a paywall preview. It is a REAL component that
+ * lays out its children as a full-bleed flex column (adequate for preview
+ * surfaces). The `id`/`name` annotations are inert metadata the runtime renderer
+ * ignores.
+ */
+export const Screen = ({ style, children }: ScreenProps): ReactNode => (
+  <View style={{ flex: 1, ...(style as Record<string, unknown>) }}>{children}</View>
+);
+Screen.displayName = "Screen";
diff --git a/libraries/paywalls/src/compose/ast.ts b/libraries/paywalls/src/compose/ast.ts
deleted file mode 100644
index deb9eae43..000000000
--- a/libraries/paywalls/src/compose/ast.ts
+++ /dev/null
@@ -1,145 +0,0 @@
-/**
- * The public, serializable composition AST — the seam between the OSS authoring
- * half (parser/printer) and the closed mimic bridge (lowerer/lifter).
- *
- * `parseComposition` produces a `CompositionAST` from source; the closed
- * `lowerAst` turns it into a `PaywallDesignerDocumentInput`. Conversely the
- * closed `liftSnapshot` produces a `CompositionAST` from a decoded mimic
- * snapshot and `printComposition` serializes it back to source.
- *
- * The AST carries exactly the information the grammar expresses — node
- * structure, styles, interactions, variables, component props/action bindings —
- * as plain data (no mimic envelopes, no react). Element nodes carry an optional
- * inline `id`: the printer emits it (first attribute) when present and the
- * parser reads it back, so a mimic node's identity survives a code round-trip.
- * `id` is absent for hand-authored, id-free source (the lowerer mints one). Node
- * positions are NOT part of the AST.
- */
-
-/** Declared variable type. */
-export type CompositionVariableType = "string" | "number" | "boolean" | "product";
-
-/** A paywall-scoped variable declaration. */
-export interface CompositionVariable {
-  readonly name: string;
-  readonly type: CompositionVariableType;
-  /** The declared default value. Absent ⇒ the type's zero value. */
-  readonly defaultValue?: string | number | boolean;
-}
-
-/**
- * A JSON-ish structured style value: a plain object or array whose leaves are
- * scalars (or further nested objects/arrays). Structured style fields like
- * `backgroundGradient` / `backgroundImage` carry these; scalar fields do not.
- */
-export type CompositionStyleObject =
-  | { readonly [key: string]: CompositionStyleValue }
-  | readonly CompositionStyleValue[];
-
-/**
- * A style value: a literal string / number / boolean, or a JSON-ish structured
- * object/array (for structured background fields). Structured values are plain
- * JSON — no identifiers, spreads, or computed keys.
- */
-export type CompositionStyleValue = string | number | boolean | CompositionStyleObject;
-
-/** A product source used by an action. */
-export type CompositionProductSource =
-  | { readonly kind: "literal"; readonly productId: string }
-  | { readonly kind: "variable"; readonly variableName: string }
-  /** `payload("field")` — only valid inside a component action binding. */
-  | { readonly kind: "payload"; readonly field: string };
-
-/** A scalar value carried by a set-variable action. */
-export type CompositionScalarSource =
-  | { readonly kind: "literal-string"; readonly value: string }
-  | { readonly kind: "literal-number"; readonly value: number }
-  | { readonly kind: "literal-boolean"; readonly value: boolean }
-  | { readonly kind: "literal-product"; readonly productId: string }
-  | { readonly kind: "variable"; readonly variableName: string }
-  | { readonly kind: "payload"; readonly field: string };
-
-/** An action bound to an interaction or a component action slot. */
-export type CompositionAction =
-  | { readonly kind: "close-paywall" }
-  | { readonly kind: "none" }
-  | { readonly kind: "purchase"; readonly product: CompositionProductSource }
-  | {
-      readonly kind: "set-variable";
-      readonly variableName: string;
-      readonly value: CompositionScalarSource;
-    };
-
-/** A value bound to a component prop: a literal or a variable reference. */
-export type CompositionPropValue =
-  | { readonly kind: "literal-string"; readonly value: string }
-  | { readonly kind: "literal-number"; readonly value: number }
-  | { readonly kind: "literal-boolean"; readonly value: boolean }
-  | { readonly kind: "literal-product"; readonly productId: string }
-  | { readonly kind: "literal-string-array"; readonly value: readonly string[] }
-  | { readonly kind: "literal-number-array"; readonly value: readonly number[] }
-  | { readonly kind: "literal-boolean-array"; readonly value: readonly boolean[] }
-  | { readonly kind: "variable"; readonly variableName: string };
-
-/** A component prop binding (prop name → value). */
-export interface CompositionPropBinding {
-  readonly name: string;
-  readonly value: CompositionPropValue;
-}
-
-/** A component action binding (action name → action). */
-export interface CompositionActionBinding {
-  readonly name: string;
-  readonly action: CompositionAction;
-}
-
-/** A node interaction (trigger → action). Only `click` (onPress) today. */
-export interface CompositionInteraction {
-  readonly trigger: "click";
-  readonly action: CompositionAction;
-}
-
-/** A layout element: `<Screen>` / `<View>` / `<Text>`. */
-export interface CompositionElementNode {
-  readonly kind: "element";
-  readonly type: "screen" | "view" | "text";
-  /**
-   * The mimic node id, carried inline as the reserved `id` attribute. Present
-   * when lifted from (or authored against) a real document; absent for id-free
-   * hand-authored source, in which case the lowerer mints a fresh id.
-   */
-  readonly id?: string;
-  /** Node display name (`name=` attribute), or absent (⇒ default). */
-  readonly name?: string;
-  /** Style field name → value. Field names are the exact mimic style fields. */
-  readonly style: Readonly<Record<string, CompositionStyleValue>>;
-  readonly interactions: readonly CompositionInteraction[];
-  /** `text` nodes carry text content; layout nodes carry children. */
-  readonly text?: string;
-  readonly children: readonly CompositionNode[];
-}
-
-/** A code-component instance: `<SomeComponent …>`. */
-export interface CompositionComponentNode {
-  readonly kind: "component";
-  /** The registry tag this instance referenced (printer/lowerer identity). */
-  readonly tag: string;
-  /**
-   * The mimic node id, carried inline as the reserved `id` attribute (same
-   * semantics as {@link CompositionElementNode.id}).
-   */
-  readonly id?: string;
-  /** Node display name (`name=` attribute), or absent (⇒ default). */
-  readonly name?: string;
-  readonly props: readonly CompositionPropBinding[];
-  readonly actionBindings: readonly CompositionActionBinding[];
-  readonly children: readonly CompositionNode[];
-}
-
-export type CompositionNode = CompositionElementNode | CompositionComponentNode;
-
-/** A parsed composition: its root screen and paywall-level variable declarations. */
-export interface CompositionAST {
-  readonly variables: readonly CompositionVariable[];
-  readonly root: CompositionElementNode;
-}
diff --git a/libraries/paywalls/src/compose/author-surface.ts b/libraries/paywalls/src/compose/author-surface.ts
deleted file mode 100644
index 16bcaefe5..000000000
--- a/libraries/paywalls/src/compose/author-surface.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-/**
- * Authoring surface for `.paywall.tsx` composition files
- * (`import { … } from "@voidhash/paywalls/compose"`).
- *
- * These declarations exist for editor tooling and type-checking only. The
- * composition parser never *executes* a paywall file — it parses the source and
- * lowers the closed grammar into a {@link CompositionAST}. The runtime bodies
- * here are intentionally inert.
- *
- * The `Screen`/`View`/`Text` tags carry PRECISE per-node prop types
- * ({@link ScreenProps}/{@link ViewProps}/{@link TextProps}), derived from the
- * shared style registry, so an unknown attribute or a wrong-typed value errors
- * at type-check time rather than only at parse/encode time. The type-only import
- * from `./style-attr-types` erases, so this module stays runtime-inert and the
- * compose graph stays react/mimic-free.
- *
- * NOTE: this covers the current Phase 1 subset (Screen/View/Text, styles,
- * variables, node interactions, and component props/actions). States and
- * Shape/Path are a documented next increment.
- */
-import type { ScreenProps, TextProps, ViewProps } from "./style-attr-types";
-
-export interface VariableHandle<T> {
-  /** Marks this identifier as a variable reference; not called at runtime. */
-  readonly __type: T;
-  /** Build a set-variable action bound to this variable. */
-  set(value: T): Action;
-}
-
-export interface ProductRef {
-  readonly __product: true;
-}
-
-export interface Action {
-  readonly __action: true;
-}
-
-type Node = unknown;
-
-/** Declare the paywall composition. Its callback is analyzed, never run. */
-export declare function paywall(build: () => Node): Node;
-
-export declare const Screen: (props: ScreenProps) => Node;
-export declare const View: (props: ViewProps) => Node;
-export declare const Text: (props: TextProps) => Node;
-
-export declare const variable: {
-  string(name: string, opts?: { default?: string }): VariableHandle<string>;
-  number(name: string, opts?: { default?: number }): VariableHandle<number>;
-  boolean(name: string, opts?: { default?: boolean }): VariableHandle<boolean>;
-  product(name: string): VariableHandle<ProductRef>;
-};
-
-/** Reference a catalog product by id. */
-export declare function product(id: string): ProductRef;
-
-/** Built-in actions for node interactions. */
-export declare function purchase(product: ProductRef | VariableHandle<ProductRef>): Action;
-export declare function closePaywall(): Action;
-
-/** An explicit no-op action binding for a component action (does nothing). */
-export declare function none(): Action;
-
-/**
- * Read a field of the payload emitted by a component action, for use inside that
- * action's binding — e.g. `onSelect={selected.set(payload("product"))}`. Only
- * valid within a component action binding; the field must be declared by the
- * component's action.
- */
-export declare function payload(field: string): any;
diff --git a/libraries/paywalls/src/compose/component.ts b/libraries/paywalls/src/compose/component.ts
deleted file mode 100644
index 14c9013a3..000000000
--- a/libraries/paywalls/src/compose/component.ts
+++ /dev/null
@@ -1,260 +0,0 @@
-/**
- * Code-component instance support for the composition format.
- *
- * The base grammar (Screen/View/Text) is self-contained, but a `<Component>`
- * element has no meaning without knowing which component it refers to and what
- * props/actions that component declares. That knowledge lives in the caller's
- * mimic document (the `codeComponent` definitions + their compiled manifests),
- * so it is threaded into the parser/printer as a {@link CompositionRegistry}
- * rather than hardcoded here.
- *
- * The composition manifest types are derived from `@voidhash/paywalls/schema`'s
- * §2 {@link ComponentManifest} rather than re-declared: every shared field's
- * type traces back to the schema manifest by construction. This makes a real
- * `ComponentManifest` assignable to {@link CompositionComponentManifest} by
- * type, not by convention — a shape change in the schema is either inherited
- * here automatically or surfaces as a compile error, never silent drift.
- */
-
-import type {
-  ComponentManifest,
-  ManifestAction,
-  ManifestArrayProp,
-  ManifestProp,
-  ManifestPropKind,
-  ManifestRefProp,
-  ManifestSelectProp,
-} from "../schema/component-manifest";
-
-/** Prop kinds a component manifest can declare (the §2 manifest prop kinds). */
-export type CompositionPropKind = ManifestPropKind;
-
-/**
- * The subset of a manifest prop definition the composition layer consumes: an
- * all-optional projection of the {@link ManifestProp} union whose field types
- * are single-sourced from that union's members, so they cannot drift from the
- * schema. `item` recurses to this projected type (the composition-level view of
- * {@link ManifestArrayProp}'s `item`) rather than the schema's `ManifestArrayItem`.
- */
-export interface CompositionPropDef {
-  readonly kind: ManifestProp["kind"];
-  readonly refType?: ManifestRefProp["refType"];
-  readonly options?: ManifestSelectProp["options"];
-  readonly optional?: ManifestProp["optional"];
-  readonly item?: CompositionPropDef;
-}
-
-/**
- * The manifest action definition the composition layer consumes. Identical to
- * the schema's {@link ManifestAction}, so it is aliased directly.
- */
-export type CompositionActionDef = ManifestAction;
-
-/**
- * The manifest keys the composition layer reads, resolved off the real
- * {@link ComponentManifest} so a rename in the schema drops them here and trips
- * the {@link _CompositionManifestKeysExist} guard below.
- */
-type CompositionManifestKey = Extract<keyof ComponentManifest, "props" | "actions" | "slot">;
-
-/**
- * The subset of a component's {@link ComponentManifest} (`@voidhash/paywalls/schema`)
- * the composition layer needs. The field-key set is single-sourced from the
- * schema manifest ({@link CompositionManifestKey}) and `slot` reuses the
- * manifest's own type via `Pick`; only the record value types are the wider
- * composition projection ({@link CompositionPropDef} / {@link CompositionActionDef}),
- * since a composition manifest is a real manifest read through a looser lens. A
- * real `ComponentManifest` is assignable to this by construction (asserted by
- * {@link _ManifestIsCompositionManifest}), so callers pass it directly.
- */
-export interface CompositionComponentManifest
-  extends Partial<Pick<ComponentManifest, Extract<CompositionManifestKey, "slot">>> {
-  readonly props: Readonly<Record<string, CompositionPropDef>>;
-  readonly actions?: Readonly<Record<string, CompositionActionDef>>;
-}
-
-/** Resolves to `T` only when it is exactly `true`; used to force a compile error on drift. */
-type Assert<T extends true> = T;
-
-/**
- * Compile-time guards for the invariant downstream callers rely on: the projected
- * manifest keys still exist on the schema {@link ComponentManifest} (else
- * {@link CompositionManifestKey} loses them), and a real §2 `ComponentManifest`
- * is assignable to {@link CompositionComponentManifest}. Purely type-level (no
- * runtime output); either alias fails to resolve if the corresponding shape drifts.
- */
-type _CompositionManifestKeysExist = Assert<
-  [CompositionManifestKey] extends ["props" | "actions" | "slot"]
-    ? ["props" | "actions" | "slot"] extends [CompositionManifestKey]
-      ? true
-      : false
-    : false
->;
-type _ManifestIsCompositionManifest = Assert<
-  ComponentManifest extends CompositionComponentManifest ? true : false
->;
-
-/**
- * A component available to a composition: its JSX tag, the identity fields
- * written onto the lowered `component` node, and its manifest (for validating
- * and printing props/actions).
- */
-export interface CompositionComponent {
-  /** JSX tag used in source (a valid PascalCase identifier). */
-  readonly tag: string;
-  readonly manifest: CompositionComponentManifest;
-  /** `"local"` (in-document `codeComponent`) or `"catalog"` (deployed artifact). */
-  readonly source: "local" | "catalog";
-  /** `codeComponent` node id when `source` is `"local"`. */
-  readonly localComponentId?: string;
-  readonly componentSlug: string;
-  readonly componentVersion: number;
-  readonly contentHash: string;
-}
-
-/** The set of components a composition may reference. */
-export interface CompositionRegistry {
-  readonly components: readonly CompositionComponent[];
-}
-
-/**
- * Index a registry by JSX tag (parser lookup: source tag → component).
- *
- * This is the funnel every registry-consuming parse passes through, so it is
- * also where the hard-reserved-`id` invariant is enforced: `id` is always a
- * node id, never a prop slot, so a component manifest declaring a prop literally
- * named "id" is rejected here (losing that slot would silently break identity
- * for the component's instances). See {@link assertNoReservedIdProp}.
- */
-export function registryByTag(registry: CompositionRegistry): Map<string, CompositionComponent> {
-  const byTag = new Map<string, CompositionComponent>();
-  for (const component of registry.components) {
-    assertNoReservedIdProp(component.tag, component.manifest);
-    byTag.set(component.tag, component);
-  }
-  return byTag;
-}
-
-/**
- * Reject a component manifest that declares a prop (or action) named `id`. `id`
- * is hard-reserved for node identity in the composition grammar, so a manifest
- * slot of the same name is unrepresentable — fail loudly at registry
- * construction rather than silently dropping the slot on every instance.
- */
-export function assertNoReservedIdProp(
-  tag: string,
-  manifest: CompositionComponentManifest,
-): void {
-  if (Object.hasOwn(manifest.props, "id")) {
-    throw new Error(
-      `Component "${tag}" declares a prop named "id", which is reserved for node ` +
-        `identity in the composition grammar. Rename the prop.`,
-    );
-  }
-  if (manifest.actions && Object.hasOwn(manifest.actions, "id")) {
-    throw new Error(
-      `Component "${tag}" declares an action named "id", which is reserved for node ` +
-        `identity in the composition grammar. Rename the action.`,
-    );
-  }
-}
-
-/**
- * Resolve the registry component a `component` AST node refers to (printer
- * lookup). Local instances match by `localComponentId`; catalog instances by
- * `componentSlug`.
- */
-export function resolveComponentForNode(
-  registry: CompositionRegistry,
-  data: {
-    readonly componentSource?: string;
-    readonly localComponentId?: string;
-    readonly componentSlug?: string;
-  },
-): CompositionComponent | undefined {
-  if (data.componentSource === "local") {
-    return registry.components.find(
-      (component) =>
-        component.source === "local" && component.localComponentId === data.localComponentId,
-    );
-  }
-  return registry.components.find(
-    (component) => component.source !== "local" && component.componentSlug === data.componentSlug,
-  );
-}
-
-/**
- * The scalar value discriminator key for a prop kind, or `null` for kinds with
- * no direct scalar representation (`array` uses {@link arrayItemKey}; `component`
- * has no representable binding value).
- */
-export function scalarPropValueKey(
-  kind: CompositionPropKind,
-): "string" | "number" | "boolean" | "product" | null {
-  switch (kind) {
-    case "string":
-    case "select":
-    case "image":
-      return "string";
-    case "number":
-      return "number";
-    case "boolean":
-      return "boolean";
-    case "ref":
-      return "product";
-    default:
-      return null;
-  }
-}
-
-/** The array value discriminator key for an array prop's scalar item kind. */
-export function arrayItemKey(
-  itemKind: CompositionPropKind | undefined,
-): "string-array" | "number-array" | "boolean-array" | null {
-  switch (itemKind) {
-    case "string":
-    case "select":
-    case "image":
-      return "string-array";
-    case "number":
-      return "number-array";
-    case "boolean":
-      return "boolean-array";
-    default:
-      return null;
-  }
-}
-
-/**
- * The variable type a prop of the given kind can be bound to via a
- * variable-reference (so `title={someStringVar}` type-checks). Kinds with no
- * bindable variable type (array/component) return `null`.
- */
-export function variableTypeForPropKind(
-  kind: CompositionPropKind,
-): "string" | "number" | "boolean" | "product" | null {
-  switch (kind) {
-    case "string":
-    case "select":
-    case "image":
-      return "string";
-    case "number":
-      return "number";
-    case "boolean":
-      return "boolean";
-    case "ref":
-      return "product";
-    default:
-      return null;
-  }
-}
-
-/** Derive a stable PascalCase JSX tag from a component slug or name. */
-export function defaultComponentTag(source: string): string {
-  const parts = source.split(/[^A-Za-z0-9]+/).filter(Boolean);
-  const pascal = parts.map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join("");
-  if (pascal.length === 0) {
-    return "Component";
-  }
-  return /^[A-Za-z]/.test(pascal) ? pascal : `Component${pascal}`;
-}
diff --git a/libraries/paywalls/src/compose/error.ts b/libraries/paywalls/src/compose/error.ts
deleted file mode 100644
index a1c3c9583..000000000
--- a/libraries/paywalls/src/compose/error.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-/** Thrown when a composition file contains a construct outside the closed grammar. */
-export class CompositionError extends Error {
-  constructor(
-    message: string,
-    /** 0-based source line (from the TypeScript parser), when known. */
-    readonly line?: number,
-    /** 0-based source column, when known. */
-    readonly column?: number,
-  ) {
-    super(
-      line !== undefined && column !== undefined
-        ? `${message} (line ${line + 1}, col ${column + 1})`
-        : message,
-    );
-    this.name = "CompositionError";
-  }
-}
diff --git a/libraries/paywalls/src/compose/generate-dts.ts b/libraries/paywalls/src/compose/generate-dts.ts
deleted file mode 100644
index e5a70d7fa..000000000
--- a/libraries/paywalls/src/compose/generate-dts.ts
+++ /dev/null
@@ -1,203 +0,0 @@
-import {
-  NODE_STYLE_ENTRIES,
-  STYLE_FIELD_TYPES,
-  type StyleFieldName,
-  type StyleValueDescriptor,
-} from "../schema/style-registry";
-import type { CompositionPropDef, CompositionRegistry } from "./component";
-
-/**
- * Generates the `@voidhash/paywalls/compose` authoring surface as a `.d.ts`
- * string for the in-browser Monaco editor.
- *
- * The built-in tag declarations (`Screen`/`View`/`Text`) are generated from the
- * shared `../schema/style-registry` value-type descriptors — the SAME source the
- * static author surface (`./style-attr-types` + `./author-surface`) derives its
- * types from — with the style fields nested inside a single `style?: { … }` member
- * (converging with the code-component authoring look), so the ambient d.ts and the
- * real surface cannot drift; a
- * `base-module-sync` test locks this. Monaco has no access to package-internal
- * type imports, so every descriptor is rendered to an inline literal type here
- * (the module is a self-contained ambient `declare module`).
- *
- * The non-tag declarations (`paywall`, `variable`, the marker helpers, and the
- * `Action`/`ProductRef`/`VariableHandle` types) mirror `./author-surface` as
- * literal strings — they have no registry to derive from, and the sync test
- * still asserts every author-surface symbol appears in the generated output.
- */
-
-/** The `Action`/`ProductRef`/`VariableHandle` types + inert markers, verbatim. */
-const HELPER_MODULE = `
-  export interface VariableHandle<T> {
-    readonly __type: T;
-    set(value: T): Action;
-  }
-  export interface ProductRef {
-    readonly __product: true;
-  }
-  export interface Action {
-    readonly __action: true;
-  }
-  type Node = unknown;
-  export function paywall(build: () => Node): Node;
-  export const variable: {
-    string(name: string, opts?: { default?: string }): VariableHandle<string>;
-    number(name: string, opts?: { default?: number }): VariableHandle<number>;
-    boolean(name: string, opts?: { default?: boolean }): VariableHandle<boolean>;
-    product(name: string): VariableHandle<ProductRef>;
-  };
-  export function product(id: string): ProductRef;
-  export function purchase(product: ProductRef | VariableHandle<ProductRef>): Action;
-  export function closePaywall(): Action;
-  export function none(): Action;
-  export function payload(field: string): any;`;
-
-/** The structured background value shapes, inlined so the ambient module is self-contained. */
-const STRUCTURED_TYPES = `
-  interface StyleGradientValue {
-    kind: "linear" | "radial";
-    startX: number;
-    startY: number;
-    endX: number;
-    endY: number;
-    stops: { color: string; position: number }[];
-  }
-  interface StyleImageValue {
-    url: string;
-    resizeMode: "cover" | "contain" | "stretch" | "center";
-  }`;
-
-/**
- * Generate the ambient `.d.ts` for the composition authoring surface: the
- * helper/marker declarations, the generated built-in tag declarations, and a
- * typed JSX tag per registry component so Monaco offers real prop/action
- * completions and diagnostics.
- */
-export function generateComposeDts(registry?: CompositionRegistry): string {
-  const builtins = [
-    tagDeclaration("Screen", "screen", { onPress: false, textChild: false }),
-    tagDeclaration("View", "view", { onPress: true, textChild: false }),
-    tagDeclaration("Text", "text", { onPress: false, textChild: true }),
-  ].join("\n");
-  const components = (registry?.components ?? [])
-    .map((component) => componentDeclaration(component.tag, component.manifest))
-    .join("\n");
-  const body = `${HELPER_MODULE}\n${STRUCTURED_TYPES}\n${builtins}${
-    components.length > 0 ? `\n${components}` : ""
-  }`;
-  return `declare module "@voidhash/paywalls/compose" {${body}\n}\n`;
-}
-
-interface TagShape {
-  /** Whether the node accepts an `onPress` action attribute (`<View>` only). */
-  readonly onPress: boolean;
-  /** Whether children are a literal string (`<Text>`) vs element children. */
-  readonly textChild: boolean;
-}
-
-/**
- * Render a built-in tag declaration from its per-node style entries + shape. The
- * style fields are nested inside a single `style?: { … }` member (converging with
- * the code-component authoring look); `name?`/`onPress?`/`children?` stay siblings.
- */
-function tagDeclaration(tag: string, node: keyof typeof NODE_STYLE_ENTRIES, shape: TagShape): string {
-  const styleMembers: string[] = [];
-  for (const entry of NODE_STYLE_ENTRIES[node]) {
-    const descriptor = STYLE_FIELD_TYPES[entry.field as StyleFieldName];
-    styleMembers.push(`        ${entry.field}?: ${descriptorTsType(descriptor)};`);
-  }
-  const members: string[] = [`      id?: string;`];
-  members.push(`      style?: {\n${styleMembers.join("\n")}\n      };`);
-  members.push(`      name?: string;`);
-  if (shape.onPress) {
-    members.push(`      onPress?: Action;`);
-  }
-  members.push(shape.textChild ? `      children?: string;` : `      children?: Node | Node[];`);
-  return `  export const ${tag}: (props: {\n${members.join("\n")}\n  }) => Node;`;
-}
-
-/** Render a value-type descriptor to its inline TS type string. */
-function descriptorTsType(descriptor: StyleValueDescriptor): string {
-  switch (descriptor.kind) {
-    case "number":
-      return "number";
-    case "color":
-    case "string":
-      return "string";
-    case "boolean":
-      return "boolean";
-    case "dimension":
-      return 'number | "auto"';
-    case "enum":
-      return descriptor.values.map((value) => JSON.stringify(value)).join(" | ");
-    case "gradient":
-      return "StyleGradientValue";
-    case "image":
-      return "StyleImageValue";
-  }
-}
-
-function componentDeclaration(
-  tag: string,
-  manifest: {
-    props: Readonly<Record<string, CompositionPropDef>>;
-    actions?: Readonly<Record<string, unknown>>;
-    slot?: boolean;
-  },
-): string {
-  const members: string[] = [`      id?: string;`];
-  for (const [name, def] of Object.entries(manifest.props)) {
-    members.push(`      ${propMember(name, def)}`);
-  }
-  for (const name of Object.keys(manifest.actions ?? {})) {
-    members.push(`      ${jsxName(name)}?: Action;`);
-  }
-  members.push(`      name?: string;`);
-  if (manifest.slot) {
-    members.push(`      children?: Node | Node[];`);
-  }
-  return `  export const ${tag}: (props: {\n${members.join("\n")}\n  }) => Node;`;
-}
-
-function propMember(name: string, def: CompositionPropDef): string {
-  const optional = def.optional === false ? "" : "?";
-  return `${jsxName(name)}${optional}: ${propTsType(def)};`;
-}
-
-function propTsType(def: CompositionPropDef): string {
-  switch (def.kind) {
-    case "string":
-    case "image":
-      return "string | VariableHandle<string>";
-    case "select":
-      return def.options && def.options.length > 0
-        ? `(${def.options.map((o) => JSON.stringify(o)).join(" | ")}) | VariableHandle<string>`
-        : "string | VariableHandle<string>";
-    case "number":
-      return "number | VariableHandle<number>";
-    case "boolean":
-      return "boolean | VariableHandle<boolean>";
-    case "ref":
-      return "ProductRef | VariableHandle<ProductRef>";
-    case "array":
-      return `(${scalarTsType(def.item?.kind)})[]`;
-    case "component":
-      return "Node";
-  }
-}
-
-function scalarTsType(kind: CompositionPropDef["kind"] | undefined): string {
-  switch (kind) {
-    case "number":
-      return "number";
-    case "boolean":
-      return "boolean";
-    default:
-      return "string";
-  }
-}
-
-/** Quote a prop/action name that isn't a bare JS identifier (defensive). */
-function jsxName(name: string): string {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
-}
diff --git a/libraries/paywalls/src/compose/grammar.ts b/libraries/paywalls/src/compose/grammar.ts
deleted file mode 100644
index 2c2ebb138..000000000
--- a/libraries/paywalls/src/compose/grammar.ts
+++ /dev/null
@@ -1,87 +0,0 @@
-/**
- * The composition grammar's style/tag vocabulary.
- *
- * The closed `paywall-composition` package used to introspect the real mimic
- * node schemas (`ViewNode`/`ScreenNode`/`TextNode`) to discover the legal style
- * fields and their defaults. The OSS grammar must be mimic-free, so the
- * vocabulary is single-sourced from the dependency-free `../schema/style-registry`
- * (per-node ORDERED field lists with defaults, derived once from the mimic node
- * schemas). Importing that registry keeps this module mimic/react/runtime-free.
- * A mono-side contract test
- * (`paywall-composition/src/vocabulary-contract.test.ts`) asserts the derived
- * `NODE_STYLE_VOCABULARY` matches the live mimic node schemas so drift is caught
- * at CI time.
- */
-import { NODE_DEFAULT_NAMES, NODE_STYLE_ENTRIES } from "../schema/style-registry";
-
-/**
- * The subset of mimic node types the composition format currently round-trips.
- * Shape/Path/Component follow the same mechanics and are a documented next
- * increment.
- */
-export type CompositionNodeType = "screen" | "view" | "text";
-
-export const TAG_TO_TYPE: Record<string, CompositionNodeType> = {
-  Screen: "screen",
-  View: "view",
-  Text: "text",
-};
-
-export const TYPE_TO_TAG: Record<CompositionNodeType, string> = {
-  screen: "Screen",
-  view: "View",
-  text: "Text",
-};
-
-/**
- * The style vocabulary of a node type: the set of legal style field names, the
- * default value for each (values equal to a default are omitted on print), and
- * the default display name. Encoded explicitly — mirrors the mimic node schema
- * (see the module doc). The `styleFields` array order is the mimic schema field
- * order and must be preserved: the printer emits attributes in this order.
- */
-export interface NodeStyleVocabulary {
-  readonly styleFields: readonly string[];
-  readonly defaultStyle: Readonly<Record<string, unknown>>;
-  readonly defaultName: string;
-}
-
-/**
- * Ground-truth per-node style vocabulary, derived from the shared
- * `../schema/style-registry` per-node ordered field lists (themselves derived
- * once from the mimic node schemas — `prim.data.schema.fields.style.fields` for
- * the field set + order and `prim.data.decode(prim.data.encode({}))` for
- * defaults). Kept in lockstep with mimic by the mono vocabulary contract test.
- * A field entry with no `default` contributes to `styleFields` (fixing its
- * printer position) but is omitted from `defaultStyle`.
- */
-const buildVocabulary = (type: CompositionNodeType): NodeStyleVocabulary => {
-  const entries = NODE_STYLE_ENTRIES[type];
-  const defaultStyle: Record<string, unknown> = {};
-  for (const entry of entries) {
-    if ("default" in entry) {
-      defaultStyle[entry.field] = entry.default;
-    }
-  }
-  return {
-    styleFields: entries.map((entry) => entry.field),
-    defaultStyle,
-    defaultName: NODE_DEFAULT_NAMES[type],
-  };
-};
-
-export const NODE_STYLE_VOCABULARY: Record<CompositionNodeType, NodeStyleVocabulary> = {
-  screen: buildVocabulary("screen"),
-  view: buildVocabulary("view"),
-  text: buildVocabulary("text"),
-};
-
-/** The legal style field set for a node type (from {@link NODE_STYLE_VOCABULARY}). */
-export function styleFieldsOf(type: CompositionNodeType): ReadonlySet<string> {
-  return new Set(NODE_STYLE_VOCABULARY[type].styleFields);
-}
-
-/** Resolve a source attribute name to a style field, or null if not a style. */
-export function styleFieldFor(type: CompositionNodeType, attr: string): string | null {
-  return styleFieldsOf(type).has(attr) ? attr : null;
-}
diff --git a/libraries/paywalls/src/compose/index.ts b/libraries/paywalls/src/compose/index.ts
deleted file mode 100644
index 47b48c8b9..000000000
--- a/libraries/paywalls/src/compose/index.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-/**
- * `@voidhash/paywalls/compose` — the composition authoring surface + toolchain.
- *
- * Two audiences share this entry:
- *
- * - **Paywall authors** write `.paywall.tsx` files that
- *   `import { paywall, Screen, View, Text, variable, product, purchase,
- *   closePaywall, none, payload } from "@voidhash/paywalls/compose"`. Those are
- *   the inert author surface (analyzed, never executed).
- * - **Tooling** (the closed mimic bridge, the studio) imports the grammar
- *   `parseComposition`, the deterministic `printComposition`, the public
- *   {@link CompositionAST}, the registry vocabulary, and `generateComposeDts`.
- *
- * This entry is mimic-free: it never imports the mimic document model. The
- * mimic snapshot↔AST lift/lower lives in the closed `paywall-composition`
- * bridge, driven by this AST.
- */
-
-// Author surface (inert; for author files and type-checking).
-export {
-  closePaywall,
-  none,
-  paywall,
-  payload,
-  product,
-  purchase,
-  Screen,
-  Text,
-  variable,
-  View,
-  type Action,
-  type ProductRef,
-  type VariableHandle,
-} from "./author-surface";
-
-// Public serializable AST (the OSS ↔ closed-bridge seam).
-export type {
-  CompositionAction,
-  CompositionActionBinding,
-  CompositionAST,
-  CompositionComponentNode,
-  CompositionElementNode,
-  CompositionInteraction,
-  CompositionNode,
-  CompositionProductSource,
-  CompositionPropBinding,
-  CompositionPropValue,
-  CompositionScalarSource,
-  CompositionStyleValue,
-  CompositionVariable,
-  CompositionVariableType,
-} from "./ast";
-
-// Grammar / parser / printer.
-export { CompositionError } from "./error";
-export { parseComposition, type ParseCompositionOptions } from "./parser";
-export { printComposition, type PrintCompositionOptions } from "./printer";
-export {
-  NODE_STYLE_VOCABULARY,
-  styleFieldFor,
-  styleFieldsOf,
-  TAG_TO_TYPE,
-  TYPE_TO_TAG,
-  type CompositionNodeType,
-  type NodeStyleVocabulary,
-} from "./grammar";
-
-// Component/registry vocabulary (prop/action kinds from `../schema`).
-export {
-  arrayItemKey,
-  assertNoReservedIdProp,
-  defaultComponentTag,
-  registryByTag,
-  resolveComponentForNode,
-  scalarPropValueKey,
-  variableTypeForPropKind,
-  type CompositionActionDef,
-  type CompositionComponent,
-  type CompositionComponentManifest,
-  type CompositionPropDef,
-  type CompositionPropKind,
-  type CompositionRegistry,
-} from "./component";
-
-// Monaco `.d.ts` generation.
-export { generateComposeDts } from "./generate-dts";
diff --git a/libraries/paywalls/src/compose/parser.ts b/libraries/paywalls/src/compose/parser.ts
deleted file mode 100644
index 2befff970..000000000
--- a/libraries/paywalls/src/compose/parser.ts
+++ /dev/null
@@ -1,1052 +0,0 @@
-import ts from "typescript";
-
-import type {
-  CompositionAction,
-  CompositionActionBinding,
-  CompositionAST,
-  CompositionComponentNode,
-  CompositionElementNode,
-  CompositionInteraction,
-  CompositionNode,
-  CompositionProductSource,
-  CompositionPropBinding,
-  CompositionPropValue,
-  CompositionScalarSource,
-  CompositionStyleValue,
-  CompositionVariable,
-  CompositionVariableType,
-} from "./ast";
-import {
-  arrayItemKey,
-  registryByTag,
-  variableTypeForPropKind,
-  type CompositionActionDef,
-  type CompositionComponent,
-  type CompositionPropDef,
-  type CompositionRegistry,
-} from "./component";
-import { CompositionError } from "./error";
-import {
-  styleFieldFor,
-  styleFieldsOf,
-  TAG_TO_TYPE,
-  type CompositionNodeType,
-} from "./grammar";
-
-/** Options for {@link parseComposition}. */
-export interface ParseCompositionOptions {
-  /** Source file name used in error positions. Defaults to `paywall.tsx`. */
-  readonly fileName?: string;
-  /** Components a `<Component>` element may reference. Absent ⇒ layout-only grammar. */
-  readonly registry?: CompositionRegistry;
-}
-
-/**
- * Parse a `.paywall.tsx` composition source into a public {@link CompositionAST}.
- *
- * The source is parsed with the real TypeScript/JSX parser; a whitelist walk
- * then lowers the closed element + expression grammar into AST nodes. Any
- * construct outside the grammar (arbitrary calls, member access, control flow,
- * template interpolation, …) raises a {@link CompositionError} — nothing is ever
- * executed. Mimic-free: the mimic document lowering lives in the closed
- * `paywall-composition` bridge, driven by this AST.
- */
-export function parseComposition(
-  source: string,
-  options: ParseCompositionOptions = {},
-): CompositionAST {
-  const parser = new Parser(source, options.fileName ?? "paywall.tsx", options.registry);
-  return parser.parse();
-}
-
-interface VarInfo {
-  readonly name: string;
-  readonly type: CompositionVariableType;
-  /** Resolved declared default (undefined for product). */
-  readonly defaultValue?: string | number | boolean;
-}
-
-const IDENTIFIER_PATTERN = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
-
-class Parser {
-  private readonly sf: ts.SourceFile;
-  private readonly varsByBinding = new Map<string, VarInfo>();
-  private readonly seenVariableNames = new Set<string>();
-  private readonly componentsByTag: Map<string, CompositionComponent>;
-
-  constructor(source: string, fileName: string, registry?: CompositionRegistry) {
-    this.sf = ts.createSourceFile(
-      fileName,
-      source,
-      ts.ScriptTarget.Latest,
-      true,
-      ts.ScriptKind.TSX,
-    );
-    this.componentsByTag = registry ? registryByTag(registry) : new Map();
-  }
-
-  parse(): CompositionAST {
-    const paywallCall = this.findPaywallCall();
-    const arrow = this.expectArrow(paywallCall);
-    const rootJsx = this.readBodyAndVariables(arrow);
-
-    const tag = this.tagName(rootJsx);
-    if (tag !== "Screen") {
-      throw this.error(rootJsx, `A paywall must return a <Screen>, got <${tag}>`);
-    }
-
-    const root = this.lowerElement(rootJsx);
-    if (root.kind !== "element") {
-      throw this.error(rootJsx, "A paywall must return a <Screen>");
-    }
-    return {
-      variables: [...this.varsByBinding.values()].map((info) => ({
-        name: info.name,
-        type: info.type,
-        ...(info.defaultValue !== undefined ? { defaultValue: info.defaultValue } : {}),
-      })),
-      root,
-    };
-  }
-
-  // ---- top-level structure ------------------------------------------------
-
-  private findPaywallCall(): ts.CallExpression {
-    for (const statement of this.sf.statements) {
-      if (ts.isExportAssignment(statement) && !statement.isExportEquals) {
-        const expr = statement.expression;
-        if (
-          ts.isCallExpression(expr) &&
-          ts.isIdentifier(expr.expression) &&
-          expr.expression.text === "paywall"
-        ) {
-          return expr;
-        }
-        throw this.error(expr, "Default export must be paywall(() => <Screen/>)");
-      }
-    }
-    throw this.error(this.sf, "Missing `export default paywall(() => …)`");
-  }
-
-  private expectArrow(call: ts.CallExpression): ts.ArrowFunction {
-    const [arg] = call.arguments;
-    if (!arg || !ts.isArrowFunction(arg) || call.arguments.length !== 1) {
-      throw this.error(call, "paywall() takes a single arrow function");
-    }
-    return arg;
-  }
-
-  private readBodyAndVariables(arrow: ts.ArrowFunction): ts.JsxElement | ts.JsxSelfClosingElement {
-    const body = arrow.body;
-    if (ts.isBlock(body)) {
-      let jsx: ts.JsxElement | ts.JsxSelfClosingElement | undefined;
-      for (const statement of body.statements) {
-        if (ts.isVariableStatement(statement)) {
-          this.readVariableStatement(statement);
-          continue;
-        }
-        if (ts.isReturnStatement(statement) && statement.expression) {
-          jsx = this.unwrapJsx(statement.expression);
-          continue;
-        }
-        throw this.error(statement, "Only variable declarations and a return are allowed here");
-      }
-      if (!jsx) {
-        throw this.error(body, "paywall body must return a <Screen>");
-      }
-      return jsx;
-    }
-    return this.unwrapJsx(body);
-  }
-
-  private readVariableStatement(statement: ts.VariableStatement): void {
-    if ((statement.declarationList.flags & ts.NodeFlags.Const) === 0) {
-      throw this.error(statement, "Variable declarations must be `const`");
-    }
-    for (const decl of statement.declarationList.declarations) {
-      if (!ts.isIdentifier(decl.name) || !decl.initializer) {
-        throw this.error(decl, "Expected `const name = variable.<type>(...)`");
-      }
-      const info = this.readVariableInitializer(decl.initializer);
-      // The variable name is its identity and, on print, its JS binding
-      // identifier — so it must be a unique, valid identifier or the round-trip
-      // breaks (duplicate ids / illegal duplicate `const`).
-      if (!IDENTIFIER_PATTERN.test(info.name)) {
-        throw this.error(decl, `Variable name "${info.name}" must be a valid identifier`);
-      }
-      if (this.seenVariableNames.has(info.name)) {
-        throw this.error(decl, `Duplicate variable name "${info.name}"`);
-      }
-      this.seenVariableNames.add(info.name);
-      this.varsByBinding.set(decl.name.text, info);
-    }
-  }
-
-  private readVariableInitializer(expr: ts.Expression): VarInfo {
-    if (
-      !ts.isCallExpression(expr) ||
-      !ts.isPropertyAccessExpression(expr.expression) ||
-      !ts.isIdentifier(expr.expression.expression) ||
-      expr.expression.expression.text !== "variable"
-    ) {
-      throw this.error(expr, 'Expected `variable.<type>("name", opts?)`');
-    }
-    const type = expr.expression.name.text;
-    if (type !== "string" && type !== "number" && type !== "boolean" && type !== "product") {
-      throw this.error(expr, `Unknown variable type "${type}"`);
-    }
-    const [nameArg, optsArg] = expr.arguments;
-    if (!nameArg || !ts.isStringLiteral(nameArg)) {
-      throw this.error(expr, "variable() requires a string name");
-    }
-    const name = nameArg.text;
-    return { name, type, defaultValue: this.readVariableDefault(type, optsArg) };
-  }
-
-  private readVariableDefault(
-    type: CompositionVariableType,
-    optsArg: ts.Expression | undefined,
-  ): string | number | boolean | undefined {
-    if (!optsArg) {
-      // `product` has no default value; the scalar types use their zero value.
-      return type === "product" ? undefined : defaultVariableValue(type);
-    }
-    if (!ts.isObjectLiteralExpression(optsArg)) {
-      throw this.error(optsArg, "variable() options must be an object literal");
-    }
-    // A product variable accepts no options — any provided `default` (or any
-    // other key) is rejected here, matching the grammar's author surface which
-    // gives `variable.product` no options parameter.
-    for (const prop of optsArg.properties) {
-      if (
-        !ts.isPropertyAssignment(prop) ||
-        !ts.isIdentifier(prop.name) ||
-        prop.name.text !== "default"
-      ) {
-        throw this.error(prop, 'Only a "default" option is supported');
-      }
-      const init = prop.initializer;
-      if (type === "string" && ts.isStringLiteral(init)) {
-        return init.text;
-      }
-      if (type === "number" && ts.isNumericLiteral(init)) {
-        return Number(init.text);
-      }
-      const bool = readBooleanLiteral(init);
-      if (type === "boolean" && bool !== undefined) {
-        return bool;
-      }
-      throw this.error(init, `Invalid default for a ${type} variable`);
-    }
-    return type === "product" ? undefined : defaultVariableValue(type);
-  }
-
-  // ---- element lowering ---------------------------------------------------
-
-  private lowerElement(el: ts.JsxElement | ts.JsxSelfClosingElement): CompositionNode {
-    const tag = this.tagName(el);
-    const type = TAG_TO_TYPE[tag];
-    if (!type) {
-      const component = this.componentsByTag.get(tag);
-      if (component) {
-        return this.lowerComponent(el, component);
-      }
-      throw this.error(el, `Unknown element <${tag}>`);
-    }
-
-    let id: string | undefined;
-    let name: string | undefined;
-    const style: Record<string, CompositionStyleValue> = {};
-    const interactions: CompositionInteraction[] = [];
-
-    for (const attr of this.attributesOf(el)) {
-      const attrName = attr.name.getText(this.sf);
-      // `id` is HARD-reserved: it always maps to the node id, never a prop.
-      if (attrName === "id") {
-        id = this.expectStringAttr(attr);
-        continue;
-      }
-      if (attrName === "name") {
-        name = this.expectStringAttr(attr);
-        continue;
-      }
-      if (attrName === "onPress") {
-        if (type !== "view") {
-          throw this.error(attr, "onPress is only supported on <View>");
-        }
-        interactions.push({ trigger: "click", action: this.readAction(this.expectExpr(attr)) });
-        continue;
-      }
-      if (attrName === "style") {
-        this.readStyleObject(attr, type, style);
-        continue;
-      }
-      // A former FLAT style attribute is now a hard error that guides the author
-      // to the single `style={{ … }}` object; any other unknown attribute keeps
-      // the generic message.
-      if (styleFieldFor(type, attrName)) {
-        throw this.error(
-          attr,
-          `Style attributes are now written in a single style={{ … }} object — move "${attrName}" into style`,
-        );
-      }
-      throw this.error(attr, `Unknown attribute "${attrName}" on <${this.tagName2(type)}>`);
-    }
-
-    const node: CompositionElementNode = {
-      kind: "element",
-      type,
-      ...(id !== undefined ? { id } : {}),
-      ...(name !== undefined ? { name } : {}),
-      style,
-      interactions,
-      ...(type === "text"
-        ? { text: this.readTextContent(el), children: [] }
-        : { children: this.lowerChildren(el) }),
-    };
-    return node;
-  }
-
-  private lowerChildren(el: ts.JsxElement | ts.JsxSelfClosingElement): CompositionNode[] {
-    const children: CompositionNode[] = [];
-    if (ts.isJsxSelfClosingElement(el)) {
-      return children;
-    }
-    for (const child of el.children) {
-      if (ts.isJsxText(child)) {
-        if (child.text.trim().length > 0) {
-          throw this.error(child, "Text must be wrapped in a <Text> element");
-        }
-        continue;
-      }
-      if (ts.isJsxExpression(child)) {
-        if (child.expression) {
-          throw this.error(child, "Expressions are not allowed as layout children");
-        }
-        continue; // {/* comment */}
-      }
-      if (ts.isJsxElement(child) || ts.isJsxSelfClosingElement(child)) {
-        children.push(this.lowerElement(child));
-        continue;
-      }
-      throw this.error(child, "Unsupported child");
-    }
-    return children;
-  }
-
-  private readTextContent(el: ts.JsxElement | ts.JsxSelfClosingElement): string {
-    if (ts.isJsxSelfClosingElement(el)) {
-      return "";
-    }
-    const parts: string[] = [];
-    for (const child of el.children) {
-      if (ts.isJsxText(child)) {
-        const trimmed = child.text.trim();
-        if (trimmed.length > 0) {
-          parts.push(trimmed);
-        }
-        continue;
-      }
-      if (ts.isJsxExpression(child)) {
-        if (!child.expression) {
-          continue; // {/* comment */}
-        }
-        // A single string-literal expression is the printer's escape hatch for
-        // text with whitespace or JSX-special characters — exact, not trimmed.
-        if (ts.isStringLiteral(child.expression)) {
-          return child.expression.text;
-        }
-        throw this.error(
-          child,
-          "Variable-bound text is not yet supported — bind through a code component instead",
-        );
-      }
-      throw this.error(child, "<Text> may only contain literal text");
-    }
-    return parts.join(" ");
-  }
-
-  // ---- code-component instances -------------------------------------------
-
-  /**
-   * Lower a `<Component …>` element to a `component` AST node. The tag resolves
-   * to a registry entry; attributes map to `props` (manifest prop names) or
-   * `actionBindings` (manifest action names); children are slot content.
-   */
-  private lowerComponent(
-    el: ts.JsxElement | ts.JsxSelfClosingElement,
-    component: CompositionComponent,
-  ): CompositionComponentNode {
-    const manifest = component.manifest;
-    let id: string | undefined;
-    let name: string | undefined;
-    const propByName = new Map<string, CompositionPropValue>();
-    const actionByName = new Map<string, CompositionAction>();
-
-    for (const attr of this.attributesOf(el)) {
-      const attrName = attr.name.getText(this.sf);
-      // `id` is HARD-reserved on component tags too: it is unconditionally the
-      // node id, never a prop. Unlike `name`, a manifest prop literally named
-      // "id" cannot win the slot — the registry rejects such manifests up front.
-      if (attrName === "id") {
-        id = this.expectStringAttr(attr);
-        continue;
-      }
-      // `name` is the reserved instance display-name attribute — UNLESS the
-      // component declares a prop literally named "name", in which case the
-      // functional prop wins the single `name=` slot (a manifest prop named
-      // "name" is legal and must not be silently dropped).
-      if (attrName === "name" && manifest.props["name"] === undefined) {
-        name = this.expectStringAttr(attr);
-        continue;
-      }
-      const actionDef = manifest.actions?.[attrName];
-      if (actionDef) {
-        actionByName.set(attrName, this.readComponentAction(this.expectExpr(attr), actionDef));
-        continue;
-      }
-      const propDef = manifest.props[attrName];
-      if (propDef) {
-        propByName.set(attrName, this.readPropBinding(attr, propDef, attrName));
-        continue;
-      }
-      throw this.error(attr, `Unknown prop "${attrName}" on <${component.tag}>`);
-    }
-
-    // Emit props/actionBindings in MANIFEST declaration order (not source
-    // order), matching the printer. This keeps the stored order canonical so a
-    // no-op round-trip reconciles to zero commands regardless of the order the
-    // author wrote the attributes in.
-    const props: CompositionPropBinding[] = Object.keys(manifest.props)
-      .filter((propName) => propByName.has(propName))
-      .map((propName) => ({ name: propName, value: propByName.get(propName)! }));
-    const actionBindings: CompositionActionBinding[] = Object.keys(manifest.actions ?? {})
-      .filter((actionName) => actionByName.has(actionName))
-      .map((actionName) => ({ name: actionName, action: actionByName.get(actionName)! }));
-
-    const children = this.lowerChildren(el);
-    if (children.length > 0 && !manifest.slot) {
-      throw this.error(el, `<${component.tag}> does not declare a slot and cannot have children`);
-    }
-
-    return {
-      kind: "component",
-      tag: component.tag,
-      ...(id !== undefined ? { id } : {}),
-      ...(name !== undefined ? { name } : {}),
-      props,
-      actionBindings,
-      children,
-    };
-  }
-
-  /** A component prop binding: a variable reference (`prop={someVar}`) or a literal. */
-  private readPropBinding(
-    attr: ts.JsxAttribute,
-    propDef: CompositionPropDef,
-    propName: string,
-  ): CompositionPropValue {
-    const init = attr.initializer;
-    if (init && ts.isJsxExpression(init) && init.expression && ts.isIdentifier(init.expression)) {
-      const variable = this.resolveVar(init.expression);
-      const expected = variableTypeForPropKind(propDef.kind);
-      if (!expected) {
-        throw this.error(
-          attr,
-          `Prop "${propName}" of kind ${propDef.kind} cannot be bound to a variable`,
-        );
-      }
-      if (variable.type !== expected) {
-        throw this.error(
-          attr,
-          `Prop "${propName}" expects a ${expected} variable but "${variable.name}" is a ${variable.type}`,
-        );
-      }
-      return { kind: "variable", variableName: variable.name };
-    }
-    return this.readPropValue(attr, propDef, propName);
-  }
-
-  private readPropValue(
-    attr: ts.JsxAttribute,
-    propDef: CompositionPropDef,
-    propName: string,
-  ): CompositionPropValue {
-    switch (propDef.kind) {
-      case "string":
-      case "select":
-      case "image": {
-        const value = this.expectStringValue(attr);
-        if (propDef.kind === "select" && propDef.options && !propDef.options.includes(value)) {
-          throw this.error(attr, `"${value}" is not a valid option for "${propName}"`);
-        }
-        return { kind: "literal-string", value };
-      }
-      case "number":
-        return { kind: "literal-number", value: this.expectNumberValue(attr) };
-      case "boolean":
-        return { kind: "literal-boolean", value: this.expectBooleanValue(attr) };
-      case "ref":
-        return {
-          kind: "literal-product",
-          productId: this.readProductLiteral(this.expectExpr(attr)),
-        };
-      case "array": {
-        const key = arrayItemKey(propDef.item?.kind);
-        if (!key || !propDef.item) {
-          throw this.error(attr, `Array prop "${propName}" has an unsupported item kind`);
-        }
-        const value = this.readArrayLiteral(attr, propDef.item.kind, propName);
-        if (key === "number-array") {
-          return { kind: "literal-number-array", value: value as number[] };
-        }
-        if (key === "boolean-array") {
-          return { kind: "literal-boolean-array", value: value as boolean[] };
-        }
-        return { kind: "literal-string-array", value: value as string[] };
-      }
-      case "component":
-        throw this.error(
-          attr,
-          `Component-valued prop "${propName}" is not supported in composition`,
-        );
-    }
-  }
-
-  /** Read an action bound to a component action (extends node actions with `none`/`payload`). */
-  private readComponentAction(
-    expr: ts.Expression,
-    actionDef: CompositionActionDef,
-  ): CompositionAction {
-    if (!ts.isCallExpression(expr)) {
-      throw this.error(
-        expr,
-        "Expected an action, e.g. purchase(...), closePaywall(), none(), or x.set(...)",
-      );
-    }
-    if (ts.isIdentifier(expr.expression)) {
-      const fn = expr.expression.text;
-      if (fn === "closePaywall") {
-        return { kind: "close-paywall" };
-      }
-      if (fn === "none") {
-        return { kind: "none" };
-      }
-      if (fn === "purchase") {
-        return {
-          kind: "purchase",
-          product: this.readComponentProductSource(this.singleArg(expr), actionDef),
-        };
-      }
-      throw this.error(expr, `Unknown action "${fn}"`);
-    }
-    if (
-      ts.isPropertyAccessExpression(expr.expression) &&
-      ts.isIdentifier(expr.expression.expression) &&
-      expr.expression.name.text === "set"
-    ) {
-      const variable = this.resolveVar(expr.expression.expression);
-      return {
-        kind: "set-variable",
-        variableName: variable.name,
-        value: this.readComponentActionValueSource(this.singleArg(expr), variable.type, actionDef),
-      };
-    }
-    throw this.error(expr, "Unsupported action expression");
-  }
-
-  private readComponentProductSource(
-    expr: ts.Expression,
-    actionDef: CompositionActionDef,
-  ): CompositionProductSource {
-    const field = this.readPayloadAccess(expr, actionDef);
-    if (field) {
-      return { kind: "payload", field };
-    }
-    if (ts.isIdentifier(expr)) {
-      const variable = this.resolveVar(expr);
-      if (variable.type !== "product") {
-        throw this.error(expr, `Variable "${variable.name}" is not a product`);
-      }
-      return { kind: "variable", variableName: variable.name };
-    }
-    return { kind: "literal", productId: this.readProductLiteral(expr) };
-  }
-
-  private readComponentActionValueSource(
-    expr: ts.Expression,
-    expectedType: CompositionVariableType,
-    actionDef: CompositionActionDef,
-  ): CompositionScalarSource {
-    const field = this.readPayloadAccess(expr, actionDef);
-    if (field) {
-      return { kind: "payload", field };
-    }
-    return this.readScalarSourceCommon(expr, expectedType);
-  }
-
-  /** Recognize `payload("field")` and validate the field against the action's payload. */
-  private readPayloadAccess(expr: ts.Expression, actionDef: CompositionActionDef): string | null {
-    if (
-      !ts.isCallExpression(expr) ||
-      !ts.isIdentifier(expr.expression) ||
-      expr.expression.text !== "payload"
-    ) {
-      return null;
-    }
-    const arg = this.singleArg(expr);
-    if (!ts.isStringLiteral(arg)) {
-      throw this.error(expr, "payload() requires a string field name");
-    }
-    if (!(arg.text in actionDef.payload)) {
-      throw this.error(expr, `Unknown payload field "${arg.text}"`);
-    }
-    return arg.text;
-  }
-
-  // ---- actions ------------------------------------------------------------
-
-  private readAction(expr: ts.Expression): CompositionAction {
-    if (!ts.isCallExpression(expr)) {
-      throw this.error(expr, "Expected an action, e.g. purchase(...), closePaywall(), or none()");
-    }
-    if (ts.isIdentifier(expr.expression)) {
-      const fn = expr.expression.text;
-      if (fn === "closePaywall") {
-        return { kind: "close-paywall" };
-      }
-      // Mirror `readComponentAction`: a designer-authored `<View onPress>` with a
-      // fresh (`{type:"none"}`) interaction lifts + prints to `onPress={none()}`,
-      // so the node-level grammar must parse `none()` back for the round trip.
-      if (fn === "none") {
-        return { kind: "none" };
-      }
-      if (fn === "purchase") {
-        return { kind: "purchase", product: this.readProductSource(this.singleArg(expr)) };
-      }
-      throw this.error(expr, `Unknown action "${fn}"`);
-    }
-    if (
-      ts.isPropertyAccessExpression(expr.expression) &&
-      ts.isIdentifier(expr.expression.expression) &&
-      expr.expression.name.text === "set"
-    ) {
-      const variable = this.resolveVar(expr.expression.expression);
-      return {
-        kind: "set-variable",
-        variableName: variable.name,
-        value: this.readActionValueSource(this.singleArg(expr), variable.type),
-      };
-    }
-    throw this.error(expr, "Unsupported action expression");
-  }
-
-  private readProductSource(expr: ts.Expression): CompositionProductSource {
-    if (ts.isIdentifier(expr)) {
-      const variable = this.resolveVar(expr);
-      if (variable.type !== "product") {
-        throw this.error(expr, `Variable "${variable.name}" is not a product`);
-      }
-      return { kind: "variable", variableName: variable.name };
-    }
-    return { kind: "literal", productId: this.readProductLiteral(expr) };
-  }
-
-  private readActionValueSource(
-    expr: ts.Expression,
-    expectedType: CompositionVariableType,
-  ): CompositionScalarSource {
-    return this.readScalarSourceCommon(expr, expectedType);
-  }
-
-  /** Shared scalar source reading for node + component set-variable actions. */
-  private readScalarSourceCommon(
-    expr: ts.Expression,
-    expectedType: CompositionVariableType,
-  ): CompositionScalarSource {
-    if (ts.isIdentifier(expr)) {
-      const variable = this.resolveVar(expr);
-      this.expectType(expr, variable.type, expectedType);
-      return { kind: "variable", variableName: variable.name };
-    }
-    if (
-      ts.isCallExpression(expr) &&
-      ts.isIdentifier(expr.expression) &&
-      expr.expression.text === "product"
-    ) {
-      this.expectType(expr, "product", expectedType);
-      return { kind: "literal-product", productId: this.readProductLiteral(expr) };
-    }
-    if (ts.isStringLiteral(expr)) {
-      this.expectType(expr, "string", expectedType);
-      return { kind: "literal-string", value: expr.text };
-    }
-    const num = readNumericLiteral(expr);
-    if (num !== undefined) {
-      this.expectType(expr, "number", expectedType);
-      return { kind: "literal-number", value: num };
-    }
-    const bool = readBooleanLiteral(expr);
-    if (bool !== undefined) {
-      this.expectType(expr, "boolean", expectedType);
-      return { kind: "literal-boolean", value: bool };
-    }
-    throw this.error(expr, "Unsupported action value");
-  }
-
-  /** Reject a set-variable value whose type doesn't match the target variable. */
-  private expectType(
-    node: ts.Node,
-    actual: CompositionVariableType,
-    expected: CompositionVariableType,
-  ): void {
-    if (actual !== expected) {
-      throw this.error(node, `Expected a ${expected} value but got ${actual}`);
-    }
-  }
-
-  private readProductLiteral(expr: ts.Expression): string {
-    if (
-      !ts.isCallExpression(expr) ||
-      !ts.isIdentifier(expr.expression) ||
-      expr.expression.text !== "product"
-    ) {
-      throw this.error(expr, 'Expected product("id")');
-    }
-    const [arg] = expr.arguments;
-    if (!arg || !ts.isStringLiteral(arg)) {
-      throw this.error(expr, "product() requires a string id");
-    }
-    return arg.text;
-  }
-
-  // ---- value readers ------------------------------------------------------
-
-  /**
-   * Read a `style={{ … }}` attribute into the node's style record. The initializer
-   * must be a JSX expression wrapping an object literal; each property's key must
-   * be a legal style field for this node type (else a did-you-mean error), and its
-   * value is read with {@link readJsonLiteral} (scalars incl. negative numbers,
-   * strings, booleans, and nested gradient/image objects/arrays). Duplicate keys,
-   * spreads, shorthands, and computed property names are hard errors. An empty
-   * object (`style={{}}`) is legal and contributes nothing.
-   */
-  private readStyleObject(
-    attr: ts.JsxAttribute,
-    type: CompositionNodeType,
-    style: Record<string, CompositionStyleValue>,
-  ): void {
-    const init = attr.initializer;
-    if (!init || !ts.isJsxExpression(init) || !init.expression) {
-      throw this.error(attr, "style expects an object literal, e.g. style={{ paddingTop: 16 }}");
-    }
-    const expr = init.expression;
-    if (!ts.isObjectLiteralExpression(expr)) {
-      throw this.error(expr, "style expects an object literal, e.g. style={{ paddingTop: 16 }}");
-    }
-    const fields = styleFieldsOf(type);
-    for (const property of expr.properties) {
-      if (!ts.isPropertyAssignment(property)) {
-        throw this.error(
-          property,
-          "Only plain key: value style properties are allowed — no shorthands, spreads, or methods",
-        );
-      }
-      const nameNode = property.name;
-      let key: string;
-      if (ts.isIdentifier(nameNode) || ts.isStringLiteral(nameNode)) {
-        key = nameNode.text;
-      } else {
-        throw this.error(nameNode, "Style keys must be plain identifiers or string literals");
-      }
-      if (!fields.has(key)) {
-        throw this.error(nameNode, this.unknownStyleKeyMessage(key, type));
-      }
-      if (Object.hasOwn(style, key)) {
-        throw this.error(nameNode, `Duplicate style key "${key}"`);
-      }
-      style[key] = this.readJsonLiteral(property.initializer);
-    }
-  }
-
-  /** An "unknown style key" message with a nearest-field did-you-mean suggestion. */
-  private unknownStyleKeyMessage(key: string, type: CompositionNodeType): string {
-    const suggestion = nearestField(key, [...styleFieldsOf(type)]);
-    const base = `Unknown style key "${key}" on <${this.tagName2(type)}>`;
-    return suggestion ? `${base} — did you mean "${suggestion}"?` : base;
-  }
-
-  /**
-   * Reads a JSON-literal expression (object/array/string/number/boolean, nested)
-   * into plain data. Rejects anything non-literal — identifiers, spreads,
-   * computed/shorthand keys, method/accessor members, function calls — with a
-   * clear error so structured style values stay serializable JSON.
-   */
-  private readJsonLiteral(expr: ts.Expression): CompositionStyleValue {
-    if (ts.isStringLiteral(expr)) {
-      return expr.text;
-    }
-    const num = readNumericLiteral(expr);
-    if (num !== undefined) {
-      return num;
-    }
-    const bool = readBooleanLiteral(expr);
-    if (bool !== undefined) {
-      return bool;
-    }
-    if (ts.isArrayLiteralExpression(expr)) {
-      return expr.elements.map((element) => {
-        if (ts.isSpreadElement(element)) {
-          throw this.error(element, "Spread elements are not allowed in a style value");
-        }
-        return this.readJsonLiteral(element);
-      });
-    }
-    if (ts.isObjectLiteralExpression(expr)) {
-      const out: Record<string, CompositionStyleValue> = {};
-      for (const property of expr.properties) {
-        if (!ts.isPropertyAssignment(property)) {
-          throw this.error(
-            property,
-            "Only plain key: value properties are allowed in a style value",
-          );
-        }
-        const nameNode = property.name;
-        let key: string;
-        if (ts.isIdentifier(nameNode)) {
-          key = nameNode.text;
-        } else if (ts.isStringLiteral(nameNode)) {
-          key = nameNode.text;
-        } else {
-          throw this.error(nameNode, "Style value keys must be plain identifiers or strings");
-        }
-        out[key] = this.readJsonLiteral(property.initializer);
-      }
-      return out;
-    }
-    throw this.error(
-      expr,
-      "Style values may only contain literal strings, numbers, booleans, objects, and arrays",
-    );
-  }
-
-  /** The expression inside a `{…}` attribute initializer, or undefined. */
-  private attrExpr(attr: ts.JsxAttribute): ts.Expression | undefined {
-    const init = attr.initializer;
-    return init && ts.isJsxExpression(init) && init.expression ? init.expression : undefined;
-  }
-
-  private expectStringValue(attr: ts.JsxAttribute): string {
-    const init = attr.initializer;
-    if (init && ts.isStringLiteral(init)) {
-      return init.text;
-    }
-    const expr = this.attrExpr(attr);
-    if (expr && ts.isStringLiteral(expr)) {
-      return expr.text;
-    }
-    throw this.error(attr, `Prop "${attr.name.getText(this.sf)}" expects a string`);
-  }
-
-  private expectNumberValue(attr: ts.JsxAttribute): number {
-    const expr = this.attrExpr(attr);
-    if (expr) {
-      const num = readNumericLiteral(expr);
-      if (num !== undefined) {
-        return num;
-      }
-    }
-    throw this.error(attr, `Prop "${attr.name.getText(this.sf)}" expects a number`);
-  }
-
-  private expectBooleanValue(attr: ts.JsxAttribute): boolean {
-    if (!attr.initializer) {
-      return true; // bare flag, e.g. featured
-    }
-    const expr = this.attrExpr(attr);
-    if (expr) {
-      const bool = readBooleanLiteral(expr);
-      if (bool !== undefined) {
-        return bool;
-      }
-    }
-    throw this.error(attr, `Prop "${attr.name.getText(this.sf)}" expects a boolean`);
-  }
-
-  private readArrayLiteral(
-    attr: ts.JsxAttribute,
-    itemKind: CompositionPropDef["kind"],
-    propName: string,
-  ): (string | number | boolean)[] {
-    const expr = this.attrExpr(attr);
-    if (!expr || !ts.isArrayLiteralExpression(expr)) {
-      throw this.error(attr, `Prop "${propName}" expects an array literal`);
-    }
-    return expr.elements.map((element) => {
-      if (itemKind === "number") {
-        const num = readNumericLiteral(element);
-        if (num !== undefined) {
-          return num;
-        }
-        throw this.error(element, `Array items in "${propName}" must be numbers`);
-      }
-      if (itemKind === "boolean") {
-        const bool = readBooleanLiteral(element);
-        if (bool !== undefined) {
-          return bool;
-        }
-        throw this.error(element, `Array items in "${propName}" must be booleans`);
-      }
-      if (ts.isStringLiteral(element)) {
-        return element.text;
-      }
-      throw this.error(element, `Array items in "${propName}" must be strings`);
-    });
-  }
-
-  private resolveVar(ident: ts.Identifier): VarInfo {
-    const info = this.varsByBinding.get(ident.text);
-    if (!info) {
-      throw this.error(ident, `Unknown variable "${ident.text}"`);
-    }
-    return info;
-  }
-
-  // ---- small helpers ------------------------------------------------------
-
-  private singleArg(call: ts.CallExpression): ts.Expression {
-    const [arg] = call.arguments;
-    if (!arg || call.arguments.length !== 1) {
-      throw this.error(call, "Expected exactly one argument");
-    }
-    return arg;
-  }
-
-  private expectExpr(attr: ts.JsxAttribute): ts.Expression {
-    if (
-      !attr.initializer ||
-      !ts.isJsxExpression(attr.initializer) ||
-      !attr.initializer.expression
-    ) {
-      throw this.error(attr, `Attribute "${attr.name.getText(this.sf)}" expects an expression`);
-    }
-    return attr.initializer.expression;
-  }
-
-  private expectStringAttr(attr: ts.JsxAttribute): string {
-    if (attr.initializer && ts.isStringLiteral(attr.initializer)) {
-      return attr.initializer.text;
-    }
-    throw this.error(attr, `Attribute "${attr.name.getText(this.sf)}" expects a string`);
-  }
-
-  private tagName(el: ts.JsxElement | ts.JsxSelfClosingElement): string {
-    const tagNode = ts.isJsxElement(el) ? el.openingElement.tagName : el.tagName;
-    return tagNode.getText(this.sf);
-  }
-
-  private tagName2(type: CompositionNodeType): string {
-    return type.charAt(0).toUpperCase() + type.slice(1);
-  }
-
-  private attributesOf(el: ts.JsxElement | ts.JsxSelfClosingElement): ts.JsxAttribute[] {
-    const attrs = ts.isJsxElement(el) ? el.openingElement.attributes : el.attributes;
-    return attrs.properties.map((prop) => {
-      if (!ts.isJsxAttribute(prop)) {
-        throw this.error(prop, "Spread attributes are not allowed");
-      }
-      return prop;
-    });
-  }
-
-  private unwrapJsx(expr: ts.Expression): ts.JsxElement | ts.JsxSelfClosingElement {
-    let current = expr;
-    while (ts.isParenthesizedExpression(current)) {
-      current = current.expression;
-    }
-    if (ts.isJsxElement(current) || ts.isJsxSelfClosingElement(current)) {
-      return current;
-    }
-    throw this.error(expr, "Expected a JSX element");
-  }
-
-  private error(node: ts.Node, message: string): CompositionError {
-    const pos = this.sf.getLineAndCharacterOfPosition(node.getStart(this.sf));
-    return new CompositionError(message, pos.line, pos.character);
-  }
-}
-
-/**
- * The nearest field name to `key` by Levenshtein edit distance, for a
- * did-you-mean suggestion. Returns the closest candidate only when the distance
- * is small relative to the key length (a distant typo gets no suggestion).
- */
-function nearestField(key: string, candidates: readonly string[]): string | undefined {
-  let best: string | undefined;
-  let bestDistance = Infinity;
-  for (const candidate of candidates) {
-    const distance = editDistance(key, candidate);
-    if (distance < bestDistance) {
-      bestDistance = distance;
-      best = candidate;
-    }
-  }
-  // Only suggest when the edit distance is at most a third of the key length
-  // (rounded up, minimum 2) — enough to catch a transposition or a dropped/extra
-  // character, but not to guess wildly for an unrelated word.
-  const threshold = Math.max(2, Math.ceil(key.length / 3));
-  return best !== undefined && bestDistance <= threshold ? best : undefined;
-}
-
-/** Iterative Levenshtein edit distance between two strings. */
-function editDistance(a: string, b: string): number {
-  const rows = a.length + 1;
-  const cols = b.length + 1;
-  let prev = Array.from({ length: cols }, (_, index) => index);
-  for (let i = 1; i < rows; i += 1) {
-    const current = [i, ...new Array<number>(cols - 1).fill(0)];
-    for (let j = 1; j < cols; j += 1) {
-      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
-      current[j] = Math.min(prev[j]! + 1, current[j - 1]! + 1, prev[j - 1]! + cost);
-    }
-    prev = current;
-  }
-  return prev[cols - 1]!;
-}
-
-function readBooleanLiteral(expr: ts.Expression): boolean | undefined {
-  if (expr.kind === ts.SyntaxKind.TrueKeyword) {
-    return true;
-  }
-  if (expr.kind === ts.SyntaxKind.FalseKeyword) {
-    return false;
-  }
-  return undefined;
-}
-
-/** A numeric literal, including a negated one (`-4` parses as unary minus). */
-function readNumericLiteral(expr: ts.Expression): number | undefined {
-  if (ts.isNumericLiteral(expr)) {
-    return Number(expr.text);
-  }
-  if (ts.isPrefixUnaryExpression(expr) && ts.isNumericLiteral(expr.operand)) {
-    if (expr.operator === ts.SyntaxKind.MinusToken) {
-      return -Number(expr.operand.text);
-    }
-    if (expr.operator === ts.SyntaxKind.PlusToken) {
-      return Number(expr.operand.text);
-    }
-  }
-  return undefined;
-}
-
-function defaultVariableValue(type: "string" | "number" | "boolean"): string | number | boolean {
-  switch (type) {
-    case "string":
-      return "";
-    case "number":
-      return 0;
-    case "boolean":
-      return false;
-  }
-}
diff --git a/libraries/paywalls/src/compose/printer.ts b/libraries/paywalls/src/compose/printer.ts
deleted file mode 100644
index c0be5164a..000000000
--- a/libraries/paywalls/src/compose/printer.ts
+++ /dev/null
@@ -1,443 +0,0 @@
-import type {
-  CompositionAction,
-  CompositionActionBinding,
-  CompositionAST,
-  CompositionComponentNode,
-  CompositionElementNode,
-  CompositionInteraction,
-  CompositionNode,
-  CompositionProductSource,
-  CompositionPropBinding,
-  CompositionScalarSource,
-  CompositionStyleValue,
-  CompositionVariable,
-} from "./ast";
-import type { CompositionComponent, CompositionRegistry } from "./component";
-import { NODE_STYLE_VOCABULARY, TYPE_TO_TAG, type CompositionNodeType } from "./grammar";
-
-/** Options for {@link printComposition}. */
-export interface PrintCompositionOptions {
-  /** Components referenced by `component` nodes. Required to print such nodes. */
-  readonly registry?: CompositionRegistry;
-}
-
-/**
- * Serialize a {@link CompositionAST} back into deterministic `.paywall.tsx`
- * source.
- *
- * Deterministic: style keys are emitted in schema field order, values equal to
- * the schema default are omitted, and identifiers are derived from stable
- * variable names — so parsing the printed source reconstructs an equivalent AST
- * and a no-op round-trip reconciles to zero commands.
- */
-export function printComposition(ast: CompositionAST, options?: PrintCompositionOptions): string {
-  const printer = new Printer(options?.registry);
-
-  // Identifiers are disambiguated so two variable names that sanitize to the
-  // same JS identifier never emit a duplicate `const` (parser-authored names
-  // are already unique + valid, so this is a no-op for them).
-  const usedIdents = new Set<string>();
-  const variables: VarBinding[] = ast.variables.map((v) => {
-    const base = identifierFor(v.name);
-    let ident = base;
-    for (let n = 2; usedIdents.has(ident); n += 1) {
-      ident = `${base}_${n}`;
-    }
-    usedIdents.add(ident);
-    return { ident, variable: v };
-  });
-  printer.registerVariables(variables);
-
-  const screenJsx = printer.element(ast.root, 4);
-  const varLines = variables.map((v) => `  ${printer.variableDeclaration(v)}`);
-
-  const body = [...varLines, "", "  return (", screenJsx, "  );"].join("\n");
-
-  return [printer.imports(), "", "export default paywall(() => {", body, "});", ""].join("\n");
-}
-
-interface VarBinding {
-  readonly ident: string;
-  readonly variable: CompositionVariable;
-}
-
-class Printer {
-  private readonly identByName = new Map<string, string>();
-  private readonly usedTags = new Set<string>();
-  private readonly usedHelpers = new Set<string>();
-  private readonly registry?: CompositionRegistry;
-
-  constructor(registry?: CompositionRegistry) {
-    this.registry = registry;
-  }
-
-  registerVariables(vars: readonly VarBinding[]): void {
-    for (const v of vars) {
-      this.identByName.set(v.variable.name, v.ident);
-      this.usedHelpers.add("variable");
-    }
-  }
-
-  imports(): string {
-    const names = ["paywall", ...[...this.usedHelpers].sort(), ...[...this.usedTags].sort()];
-    return `import { ${names.join(", ")} } from "@voidhash/paywalls/compose";`;
-  }
-
-  variableDeclaration(v: VarBinding): string {
-    const opts = this.variableOptions(v.variable);
-    return `const ${v.ident} = variable.${v.variable.type}(${JSON.stringify(v.variable.name)}${opts});`;
-  }
-
-  private variableOptions(v: CompositionVariable): string {
-    if (v.type === "product") {
-      return "";
-    }
-    const value = v.defaultValue;
-    const isDefault =
-      (v.type === "string" && value === "") ||
-      (v.type === "number" && value === 0) ||
-      (v.type === "boolean" && value === false);
-    return isDefault ? "" : `, { default: ${JSON.stringify(value)} }`;
-  }
-
-  element(node: CompositionNode, indentCols: number): string {
-    if (node.kind === "component") {
-      return this.componentElement(node, indentCols);
-    }
-    const type = node.type;
-    // Guard against ASTs built outside the parser/lifter: an unknown type would
-    // otherwise surface as an opaque TypeError on the vocabulary lookup below.
-    if (!Object.hasOwn(NODE_STYLE_VOCABULARY, type)) {
-      throw new Error(
-        `Cannot print a "${type}" node: the composition grammar only represents ` +
-          `${Object.keys(NODE_STYLE_VOCABULARY).join("/")} nodes`,
-      );
-    }
-    const tag = TYPE_TO_TAG[type];
-    this.usedTags.add(tag);
-
-    const attrs = this.attributes(node, type);
-    const pad = " ".repeat(indentCols);
-
-    if (type === "text") {
-      const text = node.text ?? "";
-      const open = attrs.length > 0 ? `<${tag} ${attrs.join(" ")}>` : `<${tag}>`;
-      return `${pad}${open}${renderTextChild(text)}</${tag}>`;
-    }
-
-    const children = node.children.map((child) => this.element(child, indentCols + 2));
-    if (children.length === 0) {
-      const inner = attrs.length > 0 ? `<${tag} ${attrs.join(" ")} />` : `<${tag} />`;
-      return `${pad}${inner}`;
-    }
-    const open = attrs.length > 0 ? `<${tag} ${attrs.join(" ")}>` : `<${tag}>`;
-    return [`${pad}${open}`, ...children, `${pad}</${tag}>`].join("\n");
-  }
-
-  private attributes(node: CompositionElementNode, type: CompositionNodeType): string[] {
-    const attrs: string[] = [];
-    const meta = NODE_STYLE_VOCABULARY[type];
-
-    // `id` is emitted first (when present) so identity is stable + greppable.
-    if (node.id !== undefined) {
-      attrs.push(formatStringAttr("id", node.id));
-    }
-
-    if (node.name !== undefined && node.name !== meta.defaultName) {
-      attrs.push(formatStringAttr("name", node.name));
-    }
-
-    const styleAttr = this.styleAttribute(node.style, type);
-    if (styleAttr) {
-      attrs.push(styleAttr);
-    }
-
-    if (type === "view") {
-      const onPress = this.onPress(node.interactions);
-      if (onPress) {
-        attrs.push(onPress);
-      }
-    }
-    return attrs;
-  }
-
-  /**
-   * The single `style={{ … }}` attribute for a node, or null when no non-default
-   * field survives (so an all-default element prints no style attribute at all).
-   * Fields are emitted in registry `styleFields` order; a field equal to its
-   * schema default is omitted. The object body is single-line, produced by
-   * {@link formatStyleExpr}.
-   */
-  private styleAttribute(
-    style: Readonly<Record<string, CompositionStyleValue>>,
-    type: CompositionNodeType,
-  ): string | null {
-    const meta = NODE_STYLE_VOCABULARY[type];
-    const entries: [string, CompositionStyleValue][] = [];
-
-    for (const field of meta.styleFields) {
-      if (!(field in style)) {
-        continue;
-      }
-      const value = style[field];
-      if (value === undefined) {
-        continue;
-      }
-      if (field in meta.defaultStyle && deepEqual(value, meta.defaultStyle[field])) {
-        continue;
-      }
-      entries.push([field, value]);
-    }
-
-    if (entries.length === 0) {
-      return null;
-    }
-    const body = entries.map(([key, value]) => `${styleKey(key)}: ${formatStyleExpr(value)}`).join(", ");
-    return `style={{ ${body} }}`;
-  }
-
-  private onPress(interactions: readonly CompositionInteraction[]): string | null {
-    const click = interactions.find((i) => i.trigger === "click");
-    if (!click) {
-      return null;
-    }
-    const expr = this.actionExpr(click.action);
-    return expr ? `onPress={${expr}}` : null;
-  }
-
-  private actionExpr(action: CompositionAction): string | null {
-    switch (action.kind) {
-      case "close-paywall":
-        this.usedHelpers.add("closePaywall");
-        return "closePaywall()";
-      case "none":
-        this.usedHelpers.add("none");
-        return "none()";
-      case "purchase":
-        this.usedHelpers.add("purchase");
-        return `purchase(${this.productSource(action.product)})`;
-      case "set-variable": {
-        const ident = this.identByName.get(action.variableName) ?? action.variableName;
-        return `${ident}.set(${this.actionValueSource(action.value)})`;
-      }
-    }
-  }
-
-  private productSource(source: CompositionProductSource): string {
-    if (source.kind === "variable") {
-      return this.identByName.get(source.variableName) ?? source.variableName;
-    }
-    if (source.kind === "payload") {
-      this.usedHelpers.add("payload");
-      return `payload(${JSON.stringify(source.field)})`;
-    }
-    this.usedHelpers.add("product");
-    return `product(${JSON.stringify(source.productId)})`;
-  }
-
-  private actionValueSource(source: CompositionScalarSource): string {
-    if (source.kind === "variable") {
-      return this.identByName.get(source.variableName) ?? source.variableName;
-    }
-    if (source.kind === "payload") {
-      this.usedHelpers.add("payload");
-      return `payload(${JSON.stringify(source.field)})`;
-    }
-    if (source.kind === "literal-product") {
-      this.usedHelpers.add("product");
-      // A parser-authored product literal always carries a productId. An ABSENT
-      // productId ("no product selected") only arises in a designer-authored
-      // document; it collapses to product("") here and round-trips faithfully
-      // only once designer-doc fidelity lands (Phase 2 voidhash.lock).
-      return `product(${JSON.stringify(source.productId)})`;
-    }
-    return JSON.stringify(source.value);
-  }
-
-  // ---- code-component instances -------------------------------------------
-
-  private componentElement(node: CompositionComponentNode, indentCols: number): string {
-    // The AST carries the referenced tag directly, which is the authoritative
-    // registry key on print — resolve by tag against the registry.
-    const resolved = this.registry?.components.find((c) => c.tag === node.tag);
-    if (!resolved) {
-      throw new Error(`Cannot print a component instance: no registry entry for tag "${node.tag}"`);
-    }
-    this.usedTags.add(resolved.tag);
-    const tag = resolved.tag;
-    const attrs = this.componentAttributes(node, resolved);
-    const pad = " ".repeat(indentCols);
-
-    const children = node.children.map((child) => this.element(child, indentCols + 2));
-    if (children.length === 0) {
-      const inner = attrs.length > 0 ? `<${tag} ${attrs.join(" ")} />` : `<${tag} />`;
-      return `${pad}${inner}`;
-    }
-    const open = attrs.length > 0 ? `<${tag} ${attrs.join(" ")}>` : `<${tag}>`;
-    return [`${pad}${open}`, ...children, `${pad}</${tag}>`].join("\n");
-  }
-
-  private componentAttributes(
-    node: CompositionComponentNode,
-    component: CompositionComponent,
-  ): string[] {
-    const attrs: string[] = [];
-
-    // `id` is emitted first (when present), matching built-in elements.
-    if (node.id !== undefined) {
-      attrs.push(formatStringAttr("id", node.id));
-    }
-
-    // Skip the reserved display-name attribute when the component declares a
-    // prop literally named "name" (that prop owns the `name=` attribute instead).
-    if (
-      component.manifest.props["name"] === undefined &&
-      node.name !== undefined &&
-      node.name !== "Component"
-    ) {
-      attrs.push(formatStringAttr("name", node.name));
-    }
-
-    // Props in manifest order (deterministic; unknown/stale props are dropped).
-    const propByName = new Map<string, CompositionPropBinding["value"]>();
-    for (const binding of node.props) {
-      propByName.set(binding.name, binding.value);
-    }
-    for (const propName of Object.keys(component.manifest.props)) {
-      const binding = propByName.get(propName);
-      if (binding !== undefined) {
-        const printed = this.propAttr(propName, binding);
-        if (printed) {
-          attrs.push(printed);
-        }
-      }
-    }
-
-    // Action bindings in manifest order.
-    const actionByName = new Map<string, CompositionActionBinding["action"]>();
-    for (const binding of node.actionBindings) {
-      actionByName.set(binding.name, binding.action);
-    }
-    for (const actionName of Object.keys(component.manifest.actions ?? {})) {
-      const action = actionByName.get(actionName);
-      if (action !== undefined) {
-        const expr = this.actionExpr(action);
-        if (expr) {
-          attrs.push(`${actionName}={${expr}}`);
-        }
-      }
-    }
-    return attrs;
-  }
-
-  private propAttr(propName: string, binding: CompositionPropBinding["value"]): string | null {
-    switch (binding.kind) {
-      case "variable": {
-        const ident = this.identByName.get(binding.variableName) ?? binding.variableName;
-        return `${propName}={${ident}}`;
-      }
-      case "literal-string":
-        return formatStringAttr(propName, binding.value);
-      case "literal-number":
-        return `${propName}={${binding.value}}`;
-      case "literal-boolean":
-        return binding.value ? propName : `${propName}={false}`;
-      case "literal-product":
-        this.usedHelpers.add("product");
-        return `${propName}={product(${JSON.stringify(binding.productId)})}`;
-      case "literal-string-array":
-      case "literal-number-array":
-      case "literal-boolean-array":
-        return `${propName}={${JSON.stringify(binding.value)}}`;
-    }
-  }
-}
-
-/**
- * Format a string as a JSX attribute value. A plain string with no JSX-special
- * characters uses the readable `="…"` form; anything else — including chars that
- * `JSON.stringify` escapes but a double-quoted JSX attribute does NOT un-escape
- * (quote, backslash, tab, CR, newline) — goes through a `{"…"}` expression the
- * parser reads back byte-for-byte. A raw `="…"` there would corrupt the value.
- */
-function formatStringAttr(name: string, value: string): string {
-  const needsExpression = /["\\<>{}\n\r\t]/.test(value);
-  return needsExpression
-    ? `${name}={${JSON.stringify(value)}}`
-    : `${name}=${JSON.stringify(value)}`;
-}
-
-/** A style object key: a bare identifier, or a quoted string for a non-identifier (defensive). */
-function styleKey(key: string): string {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);
-}
-
-/**
- * Formats a JSON-ish structured style value as a JSX expression. Object keys are
- * emitted in insertion order (the printer only ever prints values whose key
- * order matches the canonical field order of the type), mirroring the readable
- * `{ key: value, … }` / `[a, b]` forms authors write by hand.
- */
-function formatStyleExpr(value: CompositionStyleValue): string {
-  if (typeof value === "string") {
-    return JSON.stringify(value);
-  }
-  if (typeof value === "number" || typeof value === "boolean") {
-    return String(value);
-  }
-  if (Array.isArray(value)) {
-    return `[${value.map((item) => formatStyleExpr(item)).join(", ")}]`;
-  }
-  const entries = Object.entries(value as Record<string, CompositionStyleValue>);
-  if (entries.length === 0) {
-    return "{}";
-  }
-  const body = entries.map(([key, item]) => `${styleKey(key)}: ${formatStyleExpr(item)}`).join(", ");
-  return `{ ${body} }`;
-}
-
-/** Structural deep-equality for JSON-ish style values (scalars, arrays, objects). */
-function deepEqual(a: unknown, b: unknown): boolean {
-  if (a === b) {
-    return true;
-  }
-  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) {
-    return false;
-  }
-  if (Array.isArray(a) || Array.isArray(b)) {
-    if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length) {
-      return false;
-    }
-    return a.every((item, index) => deepEqual(item, b[index]));
-  }
-  const aKeys = Object.keys(a as Record<string, unknown>);
-  const bKeys = Object.keys(b as Record<string, unknown>);
-  if (aKeys.length !== bKeys.length) {
-    return false;
-  }
-  return aKeys.every(
-    (key) =>
-      Object.hasOwn(b as Record<string, unknown>, key) &&
-      deepEqual((a as Record<string, unknown>)[key], (b as Record<string, unknown>)[key]),
-  );
-}
-
-/**
- * Renders text as a JSX child. Plain, already-trimmed text with no JSX-special
- * characters is emitted verbatim; anything else (braces / angle brackets /
- * newlines, or significant leading/trailing whitespace, or empty) goes through a
- * string-literal expression the parser reads back byte-for-byte.
- */
-function renderTextChild(text: string): string {
-  const needsExpression = /[{}<>\n]/.test(text) || text.trim() !== text || text.length === 0;
-  return needsExpression ? `{${JSON.stringify(text)}}` : text;
-}
-
-/** A valid JS identifier from a variable name, or a deterministic sanitization. */
-function identifierFor(name: string): string {
-  if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name)) {
-    return name;
-  }
-  const cleaned = name.replace(/[^A-Za-z0-9_$]/g, "_");
-  return /^[A-Za-z_$]/.test(cleaned) ? cleaned : `_${cleaned}`;
-}
diff --git a/libraries/paywalls/src/compose/style-attr-types.ts b/libraries/paywalls/src/compose/style-attr-types.ts
deleted file mode 100644
index 42bd67dd9..000000000
--- a/libraries/paywalls/src/compose/style-attr-types.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-/**
- * Precise static prop types for the compose author surface's built-in tags.
- *
- * These are TYPE-ONLY: every import erases, so this module adds nothing to the
- * compose runtime graph (which must stay react/mimic-free). The per-node style
- * fields are authored inside a single `style={{ … }}` object (converging with the
- * code-component authoring look) and are derived from the shared
- * `../schema/style-registry` value-type descriptors, so a typo'd style key or a
- * wrong-typed value on `<Screen>`/`<View>`/`<Text>` errors at type-check time
- * (Monaco + real tsc), not only at parse/encode time. Non-style attributes
- * (`name`, `onPress`, children) are siblings of `style`, from the PARSER's
- * accepted surface, not the style registry:
- *
- * - `id` — the optional inline node id on every node (parser: any node); the
- *   printer emits it and the lowerer consumes it to preserve identity.
- * - `name` — an optional display-name string on every node (parser: any node).
- * - `onPress` — a bound {@link Action}, `<View>` only (parser rejects it on
- *   Screen/Text).
- * - children — layout nodes take element children; `<Text>` takes a literal
- *   string (its content is JSX text).
- */
-import type {
-  NODE_STYLE_ENTRIES,
-  StyleFieldName,
-  StyleFieldValue,
-} from "../schema/style-registry";
-import type { Action } from "./author-surface";
-
-/** The composition node the caller of {@link NodeStyleProps} is typing. */
-type NodeKind = keyof typeof NODE_STYLE_ENTRIES;
-
-/** The union of style field names a node type's entry list carries. */
-type NodeStyleFieldName<K extends NodeKind> = (typeof NODE_STYLE_ENTRIES)[K][number]["field"] &
-  StyleFieldName;
-
-/**
- * The style fields accepted by a node type inside its `style={{ … }}` object: one
- * optional key per registry field, typed by that field's descriptor. All optional
- * — every style field has a schema default, so omitting it is legal.
- */
-export type NodeStyleProps<K extends NodeKind> = {
-  readonly [F in NodeStyleFieldName<K>]?: StyleFieldValue<F>;
-};
-
-/** A layout child of `<Screen>`/`<View>`: another built-in or component node. */
-type LayoutChild = unknown;
-
-/**
- * `<Screen>` props: a single `style` object + optional name + element children.
- * Style fields are authored inside `style={{ … }}`, converging with the
- * code-component authoring look.
- */
-export type ScreenProps = {
-  readonly id?: string;
-  readonly style?: NodeStyleProps<"screen">;
-  readonly name?: string;
-  readonly children?: LayoutChild | readonly LayoutChild[];
-};
-
-/** `<View>` props: a `style` object + optional name + `onPress` action + element children. */
-export type ViewProps = {
-  readonly id?: string;
-  readonly style?: NodeStyleProps<"view">;
-  readonly name?: string;
-  /** A node interaction bound to press/click. `<View>` only. */
-  readonly onPress?: Action;
-  readonly children?: LayoutChild | readonly LayoutChild[];
-};
-
-/** `<Text>` props: a `style` object + optional name + a literal string child (its content). */
-export type TextProps = {
-  readonly id?: string;
-  readonly style?: NodeStyleProps<"text">;
-  readonly name?: string;
-  readonly children?: string;
-};
diff --git a/libraries/paywalls/src/index.ts b/libraries/paywalls/src/index.ts
index 17782fea7..6d349c190 100644
--- a/libraries/paywalls/src/index.ts
+++ b/libraries/paywalls/src/index.ts
@@ -21,6 +21,17 @@ export {
   type InferActions,
 } from "./authoring/actions";
 // ── Authoring API ────────────────────────────────────────────────────────────
+export {
+  type Action,
+  closePaywall,
+  none,
+  payload,
+  product,
+  type ProductRef,
+  purchase,
+  variable,
+  type VariableHandle,
+} from "./authoring/compose-values";
 export {
   type CreatePaywallInput,
   createPaywall,
@@ -32,9 +43,11 @@ export {
 } from "./authoring/create-paywall";
 export {
   type ComponentDefinition,
+  type ComponentDefinitionFields,
   type ComponentPanel,
   type ComponentPreviewState,
   type ComponentRenderContext,
+  type ComposeComponentProps,
   type DefineComponentInput,
   defineComponent,
   type InferComponentProps,
@@ -43,7 +56,15 @@ export {
   type PaywallComponent,
   type PaywallComponentMeta,
 } from "./authoring/define-component";
+export {
+  type DefinePaywallInput,
+  definePaywall,
+  isPaywallCompositionDefinition,
+  type PaywallCompositionDefinition,
+  type PaywallCompositionMeta,
+} from "./authoring/define-paywall";
 export { extractComponentManifest } from "./authoring/manifest";
+export { type ScreenProps, type ScreenStyle, Screen } from "./authoring/screen";
 export {
   type AnyPropBuilder,
   type InferExternalProps,
diff --git a/libraries/paywalls/src/primitives/types.ts b/libraries/paywalls/src/primitives/types.ts
index bb9875623..07c4745ee 100644
--- a/libraries/paywalls/src/primitives/types.ts
+++ b/libraries/paywalls/src/primitives/types.ts
@@ -1,5 +1,6 @@
 import type { ReactNode } from "react";
 
+import type { Action } from "../authoring/compose-values";
 import type { StyleProp } from "../schema/style";
 
 /** Interaction state passed to a {@link PressableProps} render-prop child. */
@@ -16,6 +17,15 @@ export type ResizeMode = "cover" | "contain" | "stretch" | "center";
 export interface ViewProps {
   style?: StyleProp;
   children?: ReactNode;
+  /** Inert node id annotation; the runtime renderer ignores it. */
+  id?: string;
+  /** Inert node display-name annotation; the runtime renderer ignores it. */
+  name?: string;
+  /**
+   * Inert bound-interaction annotation ({@link Action} marker); the runtime
+   * renderer ignores it (real presses use {@link PressableProps.onPress}).
+   */
+  onPress?: Action;
   /** Stable identifier for testing / analytics targeting. */
   testID?: string;
   /** Accessibility label surfaced to screen readers. */
@@ -25,6 +35,10 @@ export interface ViewProps {
 export interface TextProps {
   style?: StyleProp;
   children?: ReactNode;
+  /** Inert node id annotation; ignored by the runtime renderer. */
+  id?: string;
+  /** Inert node display-name annotation; ignored by the runtime renderer. */
+  name?: string;
   /** Truncate to N lines with an ellipsis. `0`/undefined means unlimited. */
   numberOfLines?: number;
   testID?: string;
diff --git a/libraries/paywalls/src/schema/component-manifest.ts b/libraries/paywalls/src/schema/component-manifest.ts
index 8864ab3ad..a18a23107 100644
--- a/libraries/paywalls/src/schema/component-manifest.ts
+++ b/libraries/paywalls/src/schema/component-manifest.ts
@@ -4,8 +4,15 @@
  * bundle. Servers validate uploaded manifests against exactly these shapes.
  */
 
-/** Wire version of the component manifest format. */
-export const COMPONENT_MANIFEST_VERSION = 1 as const;
+/**
+ * Wire version of the component manifest format.
+ *
+ * v2 dropped the manifest `id` field: a component is identified by its relative
+ * file path in the paywall document (the import specifier), not by an embedded
+ * slug. A v1 (or any id-bearing) manifest is rejected by
+ * {@link parseComponentManifest}.
+ */
+export const COMPONENT_MANIFEST_VERSION = 2 as const;
 
 /** Editor kinds a component prop can map to. */
 export type ManifestPropKind =
@@ -97,7 +104,6 @@ export type ManifestHostData = "products";
 
 export interface ComponentManifest {
   readonly manifestVersion: typeof COMPONENT_MANIFEST_VERSION;
-  readonly id: string;
   readonly title?: string;
   readonly description?: string;
   readonly props: Readonly<Record<string, ManifestProp>>;
diff --git a/libraries/paywalls/src/schema/index.ts b/libraries/paywalls/src/schema/index.ts
index ef00a3ac1..15a8fec19 100644
--- a/libraries/paywalls/src/schema/index.ts
+++ b/libraries/paywalls/src/schema/index.ts
@@ -87,17 +87,6 @@ export {
   type ToggleGroupNode,
   type VariableFieldNode,
 } from "./panel-tree";
-export {
-  NODE_STYLE_ENTRIES,
-  STYLE_FIELD_TYPES,
-  type StyleFieldEntry,
-  type StyleFieldName,
-  type StyleFieldValue,
-  type StyleGradientValue,
-  type StyleImageValue,
-  type StyleValueDescriptor,
-  type StyleValueTypeOf,
-} from "./style-registry";
 export {
   PAYWALL_STYLE_KEY_LIST,
   type PaywallAlignItems,
diff --git a/libraries/paywalls/src/schema/style-registry.ts b/libraries/paywalls/src/schema/style-registry.ts
index 230d676df..00ec7d19c 100644
--- a/libraries/paywalls/src/schema/style-registry.ts
+++ b/libraries/paywalls/src/schema/style-registry.ts
@@ -1,197 +1,13 @@
 /**
- * The single source of truth for the paywall style vocabulary.
+ * The single source of truth for the §3.1 deploy wire-contract style keys.
  *
- * Consumers derive their tables from the ordered lists + descriptors below so
- * they can never drift apart or from this registry:
- *
- * - `./style.ts` derives {@link WIRE_STYLE_ORDER} → `PAYWALL_STYLE_KEY_LIST`,
- *   the §3.1 deploy wire contract (the `PaywallStyle` type is locked against
- *   this list in both directions, so a key can be added or removed in exactly
- *   one place).
- * - `../compose/grammar.ts` derives the per-node ordered lists →
- *   `NODE_STYLE_VOCABULARY`, the printer-significant compose grammar (field
- *   ORDER and default VALUES both change the printed source, so each is pinned
- *   here).
- * - `../compose/style-attr-types.ts` derives the precise static TS types of the
- *   compose author surface (`<Screen>`/`<View>`/`<Text>` `style={{ … }}` objects), and
- *   `../compose/generate-dts.ts` renders the same descriptors to the ambient
- *   `.d.ts` strings Monaco loads — both from {@link STYLE_FIELD_TYPES}, so a
- *   field's accepted value type is single-sourced too.
- *
- * The two sets are intentionally different: the compose grammar mirrors the
- * closed mimic designer-document node schemas (which carry designer-only fields
- * such as `x`/`y`, `backgroundEnabled`, `shadow*`, `safeArea*`, `display`),
- * while the wire contract carries RN layout fields the grammar does not yet
- * round-trip (`position`/`top`/`right`/`bottom`/`left`, `aspectRatio`,
- * `flexWrap`, `fontStyle`, `textTransform`, `textDecorationLine`, `fontFamily`).
+ * `./style.ts` derives {@link WIRE_STYLE_ORDER} → `PAYWALL_STYLE_KEY_LIST`, the
+ * §3.1 deploy wire contract (the `PaywallStyle` type is locked against this list
+ * in both directions, so a key can be added or removed in exactly one place).
  *
  * This module has ZERO imports and pulls in no react/effect/mimic — it is safe
- * to import from the dependency-free `./schema` entry and the mimic-free
- * `../compose` grammar alike.
- */
-
-/**
- * A per-node style field with its printer default. `default` is omitted for the
- * few fields that appear in a node's style vocabulary but carry no schema
- * default (`minWidth`/`maxWidth`/`minHeight`/`maxHeight`/`flex`); their presence
- * in the ordered list still fixes their printer position.
- */
-export interface StyleFieldEntry {
-  readonly field: string;
-  readonly default?: unknown;
-}
-
-/**
- * A runtime value-type descriptor for a style field. It is the single source
- * that drives BOTH the static TS types of the compose author surface
- * (`../compose/style-attr-types`) and the `.d.ts` strings the Monaco editor
- * consumes (`../compose/generate-dts`). Descriptors are chosen to be at least as
- * wide as the closed mimic node schema accepts (`packages/mimic-schema` style
- * properties) — a too-narrow type would reject a legal document, so where a
- * field is stored as a plain number in the schema but the §3.1 wire contract
- * widens it (e.g. `gap`), the descriptor takes the wider form.
- *
- * - `number` — a numeric value (device-independent pixels, opacity, weight, …).
- * - `color` — an RGBA color string (rendered as `string`; kept distinct so the
- *   surface can be tightened later without touching call sites).
- * - `string` — an arbitrary string (e.g. `fontFamily`).
- * - `boolean` — a bare-flag boolean (`safeAreaTop`, `backgroundEnabled`, …).
- * - `dimension` — `number | "auto"` (the closed `width`/`height`/`flexBasis`).
- * - `enum` — one of a fixed set of string literals.
- * - `gradient` / `image` — the structured background shapes.
+ * to import from the dependency-free `./schema` entry.
  */
-export type StyleValueDescriptor =
-  | { readonly kind: "number" }
-  | { readonly kind: "color" }
-  | { readonly kind: "string" }
-  | { readonly kind: "boolean" }
-  | { readonly kind: "dimension" }
-  | { readonly kind: "enum"; readonly values: readonly string[] }
-  | { readonly kind: "gradient" }
-  | { readonly kind: "image" };
-
-/**
- * The value-type descriptor for every style field the compose grammar accepts,
- * keyed by field name. A field name maps to ONE descriptor across all node types
- * (verified against the mimic node schemas), so a single map is sufficient; the
- * per-node entry lists reference these by field name. `width`/`height` take the
- * `dimension` form because the `view` schema accepts `number | "auto"` — the
- * `screen` schema stores plain numbers, so `dimension` is conservatively wide
- * there (a legal screen width is still a number).
- *
- * ZERO imports: rendered to both TS types and d.ts strings downstream.
- */
-export const STYLE_FIELD_TYPES = {
-  // Position (compose-only; plain numbers in the schema)
-  x: { kind: "number" },
-  y: { kind: "number" },
-
-  // Spacing
-  paddingTop: { kind: "number" },
-  paddingRight: { kind: "number" },
-  paddingBottom: { kind: "number" },
-  paddingLeft: { kind: "number" },
-  marginTop: { kind: "number" },
-  marginRight: { kind: "number" },
-  marginBottom: { kind: "number" },
-  marginLeft: { kind: "number" },
-  gap: { kind: "number" },
-
-  // Layout enums
-  justifyContent: {
-    kind: "enum",
-    values: [
-      "flex-start",
-      "center",
-      "flex-end",
-      "space-between",
-      "space-around",
-      "space-evenly",
-    ],
-  },
-  alignItems: {
-    kind: "enum",
-    values: ["flex-start", "center", "flex-end", "stretch", "baseline"],
-  },
-  flexDirection: { kind: "enum", values: ["row", "column"] },
-  alignSelf: {
-    kind: "enum",
-    values: ["auto", "flex-start", "center", "flex-end", "stretch", "baseline"],
-  },
-
-  // Flex child
-  flex: { kind: "number" },
-  flexGrow: { kind: "number" },
-  flexShrink: { kind: "number" },
-  flexBasis: { kind: "dimension" },
-
-  // Dimensions + constraints
-  width: { kind: "dimension" },
-  height: { kind: "dimension" },
-  minWidth: { kind: "number" },
-  maxWidth: { kind: "number" },
-  minHeight: { kind: "number" },
-  maxHeight: { kind: "number" },
-
-  // Background
-  backgroundColor: { kind: "color" },
-  backgroundEnabled: { kind: "boolean" },
-  backgroundType: { kind: "enum", values: ["solid", "gradient", "image"] },
-  backgroundGradient: { kind: "gradient" },
-  backgroundImage: { kind: "image" },
-
-  // Border
-  borderTopWidth: { kind: "number" },
-  borderRightWidth: { kind: "number" },
-  borderBottomWidth: { kind: "number" },
-  borderLeftWidth: { kind: "number" },
-  borderColor: { kind: "color" },
-  borderStyle: { kind: "enum", values: ["solid", "dashed", "dotted"] },
-  borderEnabled: { kind: "boolean" },
-  borderTopLeftRadius: { kind: "number" },
-  borderTopRightRadius: { kind: "number" },
-  borderBottomRightRadius: { kind: "number" },
-  borderBottomLeftRadius: { kind: "number" },
-
-  // Visual
-  opacity: { kind: "number" },
-  overflow: { kind: "enum", values: ["visible", "hidden", "scroll"] },
-  zIndex: { kind: "number" },
-  display: { kind: "enum", values: ["flex", "none"] },
-
-  // Position (RN absolute/relative flow; offsets are `number | "auto"`)
-  position: { kind: "enum", values: ["absolute", "relative"] },
-  top: { kind: "dimension" },
-  right: { kind: "dimension" },
-  bottom: { kind: "dimension" },
-  left: { kind: "dimension" },
-
-  // Shadow (compose-only)
-  shadowEnabled: { kind: "boolean" },
-  shadowColor: { kind: "color" },
-  shadowOffsetX: { kind: "number" },
-  shadowOffsetY: { kind: "number" },
-  shadowRadius: { kind: "number" },
-  shadowOpacity: { kind: "number" },
-
-  // Safe area (compose-only)
-  safeAreaTop: { kind: "boolean" },
-  safeAreaBottom: { kind: "boolean" },
-
-  // Typography (text)
-  fontSize: { kind: "number" },
-  fontWeight: {
-    kind: "enum",
-    values: ["100", "200", "300", "400", "500", "600", "700", "800", "900"],
-  },
-  color: { kind: "color" },
-  textAlign: { kind: "enum", values: ["left", "center", "right", "justify"] },
-  lineHeight: { kind: "number" },
-  letterSpacing: { kind: "number" },
-} as const satisfies Readonly<Record<string, StyleValueDescriptor>>;
-
-/** The set of style field names carrying a descriptor. */
-export type StyleFieldName = keyof typeof STYLE_FIELD_TYPES;
 
 /**
  * The §3.1 wire-contract style keys, in `PaywallStyle` declaration order. This
@@ -259,288 +75,3 @@ export const WIRE_STYLE_ORDER = [
 
 /** The wire-contract style key type, derived from {@link WIRE_STYLE_ORDER}. */
 export type WireStyleKey = (typeof WIRE_STYLE_ORDER)[number];
-
-/**
- * The canonical designer gradient default shared by the screen and view node
- * schemas (a top-to-bottom white→transparent linear gradient).
- */
-const DEFAULT_GRADIENT = {
-  kind: "linear",
-  startX: 0.5,
-  startY: 0,
-  endX: 0.5,
-  endY: 1,
-  stops: [
-    { color: "rgba(255, 255, 255, 1)", position: 0 },
-    { color: "rgba(255, 255, 255, 0)", position: 1 },
-  ],
-} as const;
-
-/** The canonical designer image-background default (empty, cover). */
-const DEFAULT_IMAGE = { url: "", resizeMode: "cover" } as const;
-
-/**
- * The `screen` node style vocabulary, in mimic-schema field order with per-field
- * defaults. The order and defaults are printer-significant (see the module doc).
- */
-export const SCREEN_STYLE_ENTRIES = [
-  { field: "x", default: 0 },
-  { field: "y", default: 0 },
-  { field: "width", default: 375 },
-  { field: "height", default: 812 },
-  { field: "minWidth" },
-  { field: "maxWidth" },
-  { field: "minHeight" },
-  { field: "maxHeight" },
-  { field: "paddingTop", default: 0 },
-  { field: "paddingRight", default: 0 },
-  { field: "paddingBottom", default: 0 },
-  { field: "paddingLeft", default: 0 },
-  { field: "marginTop", default: 0 },
-  { field: "marginRight", default: 0 },
-  { field: "marginBottom", default: 0 },
-  { field: "marginLeft", default: 0 },
-  { field: "gap", default: 0 },
-  { field: "justifyContent", default: "flex-start" },
-  { field: "alignItems", default: "flex-start" },
-  { field: "flexDirection", default: "column" },
-  { field: "backgroundColor", default: "rgba(255, 255, 255, 1)" },
-  { field: "backgroundEnabled", default: true },
-  { field: "backgroundType", default: "solid" },
-  { field: "backgroundGradient", default: DEFAULT_GRADIENT },
-  { field: "backgroundImage", default: DEFAULT_IMAGE },
-  { field: "borderTopWidth", default: 0 },
-  { field: "borderRightWidth", default: 0 },
-  { field: "borderBottomWidth", default: 0 },
-  { field: "borderLeftWidth", default: 0 },
-  { field: "borderColor", default: "rgba(0, 0, 0, 1)" },
-  { field: "borderStyle", default: "solid" },
-  { field: "borderEnabled", default: false },
-  { field: "opacity", default: 1 },
-  { field: "overflow", default: "visible" },
-  { field: "zIndex", default: 0 },
-  { field: "display", default: "flex" },
-  { field: "shadowEnabled", default: false },
-  { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
-  { field: "shadowOffsetX", default: 0 },
-  { field: "shadowOffsetY", default: 0 },
-  { field: "shadowRadius", default: 0 },
-  { field: "shadowOpacity", default: 1 },
-  { field: "safeAreaTop", default: false },
-  { field: "safeAreaBottom", default: false },
-  { field: "flex" },
-  { field: "flexGrow", default: 0 },
-  { field: "flexShrink", default: 1 },
-  { field: "flexBasis", default: "auto" },
-  { field: "alignSelf", default: "auto" },
-] as const satisfies readonly StyleFieldEntry[];
-
-/**
- * The `view` node style vocabulary, in mimic-schema field order with per-field
- * defaults. Order and defaults are printer-significant.
- */
-export const VIEW_STYLE_ENTRIES = [
-  { field: "paddingTop", default: 0 },
-  { field: "paddingRight", default: 0 },
-  { field: "paddingBottom", default: 0 },
-  { field: "paddingLeft", default: 0 },
-  { field: "marginTop", default: 0 },
-  { field: "marginRight", default: 0 },
-  { field: "marginBottom", default: 0 },
-  { field: "marginLeft", default: 0 },
-  { field: "gap", default: 0 },
-  { field: "justifyContent", default: "flex-start" },
-  { field: "alignItems", default: "flex-start" },
-  { field: "flexDirection", default: "column" },
-  { field: "width", default: 100 },
-  { field: "height", default: 100 },
-  { field: "minWidth" },
-  { field: "maxWidth" },
-  { field: "minHeight" },
-  { field: "maxHeight" },
-  { field: "backgroundColor", default: "rgba(255, 255, 255, 1)" },
-  { field: "backgroundEnabled", default: false },
-  { field: "backgroundType", default: "solid" },
-  { field: "backgroundGradient", default: DEFAULT_GRADIENT },
-  { field: "backgroundImage", default: DEFAULT_IMAGE },
-  { field: "borderTopWidth", default: 0 },
-  { field: "borderRightWidth", default: 0 },
-  { field: "borderBottomWidth", default: 0 },
-  { field: "borderLeftWidth", default: 0 },
-  { field: "borderColor", default: "rgba(0, 0, 0, 1)" },
-  { field: "borderStyle", default: "solid" },
-  { field: "borderEnabled", default: false },
-  { field: "borderTopLeftRadius", default: 0 },
-  { field: "borderTopRightRadius", default: 0 },
-  { field: "borderBottomRightRadius", default: 0 },
-  { field: "borderBottomLeftRadius", default: 0 },
-  { field: "opacity", default: 1 },
-  { field: "overflow", default: "visible" },
-  { field: "zIndex", default: 0 },
-  { field: "position", default: "relative" },
-  { field: "left", default: "auto" },
-  { field: "top", default: "auto" },
-  { field: "right", default: "auto" },
-  { field: "bottom", default: "auto" },
-  { field: "display", default: "flex" },
-  { field: "shadowEnabled", default: false },
-  { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
-  { field: "shadowOffsetX", default: 0 },
-  { field: "shadowOffsetY", default: 0 },
-  { field: "shadowRadius", default: 0 },
-  { field: "shadowOpacity", default: 1 },
-  { field: "safeAreaTop", default: false },
-  { field: "safeAreaBottom", default: false },
-  { field: "flex" },
-  { field: "flexGrow", default: 0 },
-  { field: "flexShrink", default: 1 },
-  { field: "flexBasis", default: "auto" },
-  { field: "alignSelf", default: "auto" },
-] as const satisfies readonly StyleFieldEntry[];
-
-/**
- * The `text` node style vocabulary, in mimic-schema field order with per-field
- * defaults. Order and defaults are printer-significant.
- */
-export const TEXT_STYLE_ENTRIES = [
-  { field: "marginTop", default: 0 },
-  { field: "marginRight", default: 0 },
-  { field: "marginBottom", default: 0 },
-  { field: "marginLeft", default: 0 },
-  { field: "minWidth" },
-  { field: "maxWidth" },
-  { field: "minHeight" },
-  { field: "maxHeight" },
-  { field: "fontSize", default: 16 },
-  { field: "fontWeight", default: "400" },
-  { field: "color", default: "rgba(0, 0, 0, 1)" },
-  { field: "textAlign", default: "left" },
-  { field: "lineHeight", default: 1.5 },
-  { field: "letterSpacing", default: 0 },
-  { field: "borderTopWidth", default: 0 },
-  { field: "borderRightWidth", default: 0 },
-  { field: "borderBottomWidth", default: 0 },
-  { field: "borderLeftWidth", default: 0 },
-  { field: "borderColor", default: "rgba(0, 0, 0, 1)" },
-  { field: "borderStyle", default: "solid" },
-  { field: "borderEnabled", default: false },
-  { field: "opacity", default: 1 },
-  { field: "overflow", default: "visible" },
-  { field: "zIndex", default: 0 },
-  { field: "position", default: "relative" },
-  { field: "left", default: "auto" },
-  { field: "top", default: "auto" },
-  { field: "right", default: "auto" },
-  { field: "bottom", default: "auto" },
-  { field: "display", default: "flex" },
-  { field: "shadowEnabled", default: false },
-  { field: "shadowColor", default: "rgba(0, 0, 0, 1)" },
-  { field: "shadowOffsetX", default: 0 },
-  { field: "shadowOffsetY", default: 0 },
-  { field: "shadowRadius", default: 0 },
-  { field: "shadowOpacity", default: 1 },
-  { field: "flex" },
-  { field: "flexGrow", default: 0 },
-  { field: "flexShrink", default: 1 },
-  { field: "flexBasis", default: "auto" },
-  { field: "alignSelf", default: "auto" },
-] as const satisfies readonly StyleFieldEntry[];
-
-/** The per-node ordered style-field registries, keyed by composition node type. */
-export const NODE_STYLE_ENTRIES = {
-  screen: SCREEN_STYLE_ENTRIES,
-  view: VIEW_STYLE_ENTRIES,
-  text: TEXT_STYLE_ENTRIES,
-} as const;
-
-/** The default display name emitted for each composition node type. */
-export const NODE_DEFAULT_NAMES = {
-  screen: "Screen",
-  view: "View",
-  text: "Text",
-} as const;
-
-// ---- descriptor → static type derivation --------------------------------
-
-/**
- * The structured gradient background value shape (mirrors the mimic
- * `backgroundGradient` schema). Exposed for the compose author surface so a
- * `backgroundGradient={…}` attribute type-checks against the real shape.
- */
-export interface StyleGradientValue {
-  readonly kind: "linear" | "radial";
-  readonly startX: number;
-  readonly startY: number;
-  readonly endX: number;
-  readonly endY: number;
-  readonly stops: readonly { readonly color: string; readonly position: number }[];
-}
-
-/** The structured image background value shape (mirrors the mimic schema). */
-export interface StyleImageValue {
-  readonly url: string;
-  readonly resizeMode: "cover" | "contain" | "stretch" | "center";
-}
-
-/** Map a value-type descriptor to the static TS type it accepts. */
-export type StyleValueTypeOf<D extends StyleValueDescriptor> = D extends { kind: "number" }
-  ? number
-  : D extends { kind: "color" }
-    ? string
-    : D extends { kind: "string" }
-      ? string
-      : D extends { kind: "boolean" }
-        ? boolean
-        : D extends { kind: "dimension" }
-          ? number | "auto"
-          : D extends { kind: "enum"; values: readonly (infer V)[] }
-            ? V
-            : D extends { kind: "gradient" }
-              ? StyleGradientValue
-              : D extends { kind: "image" }
-                ? StyleImageValue
-                : never;
-
-/** The accepted static value type for a style field, by field name. */
-export type StyleFieldValue<K extends StyleFieldName> = StyleValueTypeOf<(typeof STYLE_FIELD_TYPES)[K]>;
-
-// ---- compile-time locks --------------------------------------------------
-
-/** Resolves to `T` only when it is exactly `true`; forces a compile error otherwise. */
-type AssertTrue<T extends true> = T;
-
-/**
- * Every field named in the per-node entry lists must carry a descriptor in
- * {@link STYLE_FIELD_TYPES}; otherwise the compose author surface would have no
- * type for it. This resolves to `true` only when the union of all entry field
- * names is a subset of the descriptor key set.
- */
-type _AllEntryFieldsHaveDescriptor = AssertTrue<
-  (typeof NODE_STYLE_ENTRIES)[keyof typeof NODE_STYLE_ENTRIES][number]["field"] extends StyleFieldName
-    ? true
-    : false
->;
-
-/**
- * Every per-field `default` in the entry lists must satisfy that field's own
- * descriptor-derived type, so the registry can never ship a default the author
- * surface would reject. `EntryDefaultOk` is `true` for an entry with no default
- * (its type-position is fixed but it carries no value) or one whose default is
- * assignable to {@link StyleFieldValue}. Distributing over the entry union and
- * requiring the whole distribution to be exactly `true` fails the assert if any
- * single entry's default is off.
- */
-type EntryDefaultOk<E> = E extends { field: infer F; default: infer D }
-  ? F extends StyleFieldName
-    ? D extends StyleFieldValue<F>
-      ? true
-      : false
-    : false
-  : true;
-type AllEntries = (typeof NODE_STYLE_ENTRIES)[keyof typeof NODE_STYLE_ENTRIES][number];
-type _AllDefaultsSatisfyDescriptor = AssertTrue<
-  EntryDefaultOk<AllEntries> extends true ? true : false
->;
-
-// Force tsc to evaluate the locks (unused type aliases are otherwise erased).
-export type _StyleRegistryLocks = [_AllEntryFieldsHaveDescriptor, _AllDefaultsSatisfyDescriptor];
diff --git a/libraries/paywalls/src/schema/validate.ts b/libraries/paywalls/src/schema/validate.ts
index 31d46bc4d..b0a1aaee1 100644
--- a/libraries/paywalls/src/schema/validate.ts
+++ b/libraries/paywalls/src/schema/validate.ts
@@ -450,7 +450,6 @@ const validateAction = (action: unknown, path: string, errors: string[]): void =
 
 const MANIFEST_KEYS = new Set([
   "manifestVersion",
-  "id",
   "title",
   "description",
   "props",
@@ -466,7 +465,9 @@ const MANIFEST_KEYS = new Set([
  * unknown prop/action kinds, empty `select` options, array items that are
  * themselves arrays, `editor` on a non-string prop, malformed action payload
  * kinds, non-boolean `slot`, empty `previewStates`, and out-of-subset
- * `hostData` are all rejected.
+ * `hostData` are all rejected. A v1 (or otherwise id-bearing) manifest fails
+ * the `manifestVersion` / unknown-key checks: `id` is no longer a manifest
+ * field (a component is identified by its file path in the paywall document).
  */
 export const parseComponentManifest = (input: unknown): ParseResult<ComponentManifest> => {
   const errors: string[] = [];
@@ -479,9 +480,6 @@ export const parseComponentManifest = (input: unknown): ParseResult<ComponentMan
   if (input.manifestVersion !== COMPONENT_MANIFEST_VERSION) {
     errors.push(`manifest.manifestVersion must be ${COMPONENT_MANIFEST_VERSION}`);
   }
-  if (typeof input.id !== "string" || !DEPLOY_SLUG_PATTERN.test(input.id)) {
-    errors.push(`manifest.id "${String(input.id)}" must match ${DEPLOY_SLUG_PATTERN}`);
-  }
   if (input.title !== undefined && typeof input.title !== "string") {
     errors.push("manifest.title must be a string");
   }
diff --git a/libraries/paywalls/tests/callable-component-manifest.test.tsx b/libraries/paywalls/tests/callable-component-manifest.test.tsx
new file mode 100644
index 000000000..14f86865c
--- /dev/null
+++ b/libraries/paywalls/tests/callable-component-manifest.test.tsx
@@ -0,0 +1,111 @@
+import { createElement } from "react";
+import { describe, expect, test } from "vitest";
+
+import {
+  defineComponent,
+  extractComponentManifest,
+  Pressable,
+  Slot,
+  Text,
+  View,
+} from "../src/index";
+import { renderComponentToTree } from "../src/sandbox";
+import { parseComponentManifest } from "../src/schema/validate";
+import { renderToNodeTree } from "../src/tree-renderer/render-to-node-tree";
+import { COMPONENT_MANIFEST_VERSION } from "../src/schema/component-manifest";
+
+describe("PROBE 4: callable defineComponent", () => {
+  const def = defineComponent({
+    title: "Row",
+    props: (p) => ({ label: p.string().default("hi") }),
+    actions: (a) => ({ onSelect: a.action({ id: a.string() }) }),
+    previews: { default: {} },
+    render: ({ props }) => (
+      <Pressable>
+        <Text>{props.label}</Text>
+        <Slot />
+      </Pressable>
+    ),
+  });
+
+  test("Object.assign preserves all metadata fields", () => {
+    expect(typeof def).toBe("function");
+    expect(def.__voidhash.kind).toBe("component");
+    expect(def.title).toBe("Row");
+    expect(typeof def.render).toBe("function");
+    expect(typeof def.component).toBe("function");
+    expect(Object.keys(def.props)).toEqual(["label"]);
+    expect(Object.keys(def.actions)).toEqual(["onSelect"]);
+    expect(def.previews.default).toBeDefined();
+  });
+
+  test(".component and the callable definition are the same function", () => {
+    expect(def.component).toBe(def as unknown);
+  });
+
+  test("rendering via the callable definition directly matches rendering via .component", async () => {
+    const Callable = def as unknown as (p: Record<string, unknown>) => unknown;
+    const Component = def.component as unknown as (p: Record<string, unknown>) => unknown;
+
+    const viaCallable = await renderToNodeTree(
+      createElement(Callable as never, { label: "X" }),
+      { config: { products: [], variables: {} }, state: "s" },
+    );
+    const viaComponent = await renderToNodeTree(
+      createElement(Component as never, { label: "X" }),
+      { config: { products: [], variables: {} }, state: "s" },
+    );
+    expect(viaCallable).toEqual(viaComponent);
+  });
+
+  test("renderComponentToTree (uses .component) still renders", async () => {
+    const tree = await renderComponentToTree(def, { state: "default" });
+    expect(tree.state).toBe("default");
+    expect(tree.root).toBeDefined();
+    // Not a placeholder (single slot, valid render).
+    expect((tree.root as { type?: string }).type).not.toBe("placeholder");
+  });
+
+  test("extractComponentManifest is v2 (no id) and re-validates", () => {
+    const m = extractComponentManifest(def);
+    expect(m.manifestVersion).toBe(COMPONENT_MANIFEST_VERSION);
+    expect((m as unknown as Record<string, unknown>)["id"]).toBeUndefined();
+    const parsed = parseComponentManifest(m);
+    expect(parsed.ok).toBe(true);
+  });
+});
+
+describe("PROBE 5: manifest v2 validator", () => {
+  const validV2 = {
+    manifestVersion: 2,
+    props: {},
+    actions: {},
+    slot: false,
+    previewStates: ["default"],
+    hostData: [],
+  };
+
+  test("accepts a legit v2 manifest", () => {
+    expect(parseComponentManifest(validV2).ok).toBe(true);
+  });
+
+  test("rejects a v1 manifest", () => {
+    const v1 = { ...validV2, manifestVersion: 1 };
+    const r = parseComponentManifest(v1);
+    expect(r.ok).toBe(false);
+  });
+
+  test("rejects an id-bearing v2 manifest", () => {
+    const withId = { ...validV2, id: "some-slug" };
+    const r = parseComponentManifest(withId);
+    expect(r.ok).toBe(false);
+    if (!r.ok) {
+      expect(r.errors.some((e) => e.includes("id"))).toBe(true);
+    }
+  });
+
+  test("rejects a v1 id-bearing manifest (both signals)", () => {
+    const legacy = { ...validV2, manifestVersion: 1, id: "legacy" };
+    expect(parseComponentManifest(legacy).ok).toBe(false);
+  });
+});
diff --git a/libraries/paywalls/tests/compose-invariants.test.ts b/libraries/paywalls/tests/compose-invariants.test.ts
deleted file mode 100644
index ca0520183..000000000
--- a/libraries/paywalls/tests/compose-invariants.test.ts
+++ /dev/null
@@ -1,336 +0,0 @@
-import { readdirSync, readFileSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-import ts from "typescript";
-import { describe, expect, test } from "vitest";
-
-import { generateComposeDts, parseComposition, printComposition } from "../src/compose/index";
-
-const COMPOSE_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), "../src/compose");
-
-/**
- * Part 1a — the parser keys off JSX tag names and call identifiers, NOT imports
- * (it ignores import declarations entirely). So a `.paywall.tsx` importing the
- * tags from the package ROOT, or from nowhere at all, must parse to the exact
- * same AST as the canonical `@voidhash/paywalls/compose` header — and all three
- * print back the one normalized compose header (the printer regenerates it
- * one-way regardless of what the author wrote).
- */
-describe("import-agnostic parse (printer normalizes headers one-way)", () => {
-  const BODY = `
-export default paywall(() => {
-  const selected = variable.product("selectedProduct");
-  return (
-    <Screen name="Main" style={{ backgroundColor: "rgba(10, 10, 20, 1)" }}>
-      <View name="CTA" onPress={purchase(selected)}>
-        <Text style={{ fontSize: 18 }}>Continue</Text>
-      </View>
-    </Screen>
-  );
-});`;
-
-  const CANONICAL_HEADER = `import { paywall, Screen, View, Text, variable, product, purchase } from "@voidhash/paywalls/compose";`;
-  const ROOT_HEADER = `import { paywall, Screen, View, Text, variable, product, purchase } from "@voidhash/paywalls";`;
-
-  test("root-package import and no import at all parse identically to the compose header", () => {
-    const fromCompose = parseComposition(`${CANONICAL_HEADER}\n${BODY}`);
-    const fromRoot = parseComposition(`${ROOT_HEADER}\n${BODY}`);
-    const fromNothing = parseComposition(BODY);
-    expect(fromRoot).toEqual(fromCompose);
-    expect(fromNothing).toEqual(fromCompose);
-  });
-
-  test("all three print back the canonical @voidhash/paywalls/compose header", () => {
-    const printedFromRoot = printComposition(parseComposition(`${ROOT_HEADER}\n${BODY}`));
-    const printedFromNothing = printComposition(parseComposition(BODY));
-    const header = 'from "@voidhash/paywalls/compose"';
-    expect(printedFromRoot.split("\n")[0]).toContain(header);
-    expect(printedFromNothing.split("\n")[0]).toContain(header);
-    // Neither may leak the package-root specifier the author wrote.
-    expect(printedFromRoot.split("\n")[0]).not.toMatch(/from "@voidhash\/paywalls"\s*;/);
-  });
-});
-
-/**
- * Part 1b — the generated ambient d.ts and the real author surface are derived
- * from the same registry descriptors (tags) or mirror the same source (helpers),
- * so every symbol `author-surface.ts` exports must appear in the generated
- * module. This catches a symbol added to the surface but not the d.ts.
- */
-describe("generateComposeDts ↔ author-surface sync", () => {
-  /**
-   * Symbols DECLARED in the generated ambient module that are intentionally NOT
-   * author-surface exports, so the reverse (dts → surface) direction below does
-   * not spuriously fail. Keep this minimal — each entry needs a reason.
-   */
-  const DTS_ONLY = new Set([
-    // Internal `type Node = unknown;` alias, unexported on both sides.
-    "Node",
-    // Structured background value shapes inlined into the ambient module (Monaco
-    // can't reach the package-internal `./style-attr-types` import); on the real
-    // surface these live in that type-only module, not as named surface exports.
-    "StyleGradientValue",
-    "StyleImageValue",
-  ]);
-
-  test("every author-surface export appears in the generated module", () => {
-    const surface = readFileSync(path.join(COMPOSE_DIR, "author-surface.ts"), "utf8");
-    const dts = generateComposeDts();
-    const exported = surfaceExportNames(surface);
-    // Sanity: the surface really does export the symbols we expect to check.
-    expect(exported).toEqual(
-      expect.arrayContaining([
-        "VariableHandle",
-        "ProductRef",
-        "Action",
-        "paywall",
-        "Screen",
-        "View",
-        "Text",
-        "variable",
-        "product",
-        "purchase",
-        "closePaywall",
-        "none",
-        "payload",
-      ]),
-    );
-    for (const name of exported) {
-      // Word-boundary match so a symbol isn't spuriously "found" as a substring
-      // of a longer identifier (e.g. `product` inside `ProductRef`).
-      const found = new RegExp(`\\b${name}\\b`).test(dts);
-      expect(found, `generated dts is missing author-surface symbol "${name}"`).toBe(true);
-    }
-  });
-
-  test("every symbol declared in the generated module is an author-surface export", () => {
-    const surface = readFileSync(path.join(COMPOSE_DIR, "author-surface.ts"), "utf8");
-    const dts = generateComposeDts();
-    const surfaceExports = new Set(surfaceExportNames(surface));
-    for (const name of declaredNames(dts)) {
-      if (DTS_ONLY.has(name)) continue;
-      expect(
-        surfaceExports.has(name),
-        `generated dts declares "${name}" but the author surface does not export it ` +
-          `(add it to author-surface.ts, or to DTS_ONLY with a reason if generated-only)`,
-      ).toBe(true);
-    }
-  });
-
-  test("the generated built-in tags carry precise (non-loose) prop types", () => {
-    const dts = generateComposeDts();
-    // The old loose surface typed tags as `(props: Record<string, unknown>)`.
-    expect(dts).not.toContain("Record<string, unknown>");
-    // A representative descriptor-derived signature is present.
-    expect(dts).toContain(`flexDirection?: "row" | "column";`);
-    expect(dts).toContain(`gap?: number;`);
-    expect(dts).toContain(`onPress?: Action;`);
-    expect(dts).toContain(`backgroundGradient?: StyleGradientValue;`);
-  });
-});
-
-/**
- * Part 1c — the compose module graph must never pull in react or the runtime
- * primitives; it is a mimic/react-free authoring + serialization surface. A
- * source-level import scan (robust to comments and strings via the TS scanner)
- * asserts no `src/compose/**` file imports a forbidden specifier.
- */
-describe("compose graph is react/runtime-free", () => {
-  const FORBIDDEN = [
-    "react",
-    "react-dom",
-    "react-reconciler",
-    "../primitives",
-    "../jsx-runtime",
-    "../renderer",
-    "../tree-renderer",
-    "../style",
-  ];
-
-  test("no src/compose file imports react / primitives / runtime", () => {
-    for (const file of composeSourceFiles()) {
-      const specifiers = importSpecifiers(readFileSync(file, "utf8"), file);
-      for (const specifier of specifiers) {
-        for (const forbidden of FORBIDDEN) {
-          // Every forbidden entry is banned both exactly and as a path prefix, so
-          // a deep import (`../style/resolve`, `react-dom/client`, …) is caught,
-          // not just the bare specifier.
-          const hit = specifier === forbidden || specifier.startsWith(`${forbidden}/`);
-          expect(hit, `${path.basename(file)} imports forbidden "${specifier}"`).toBe(false);
-        }
-      }
-    }
-  });
-});
-
-/**
- * Part 2 (substance) — the generated ambient d.ts actually rejects unknown style
- * keys and wrong-typed values, and accepts a well-typed composition. Style fields
- * are nested under `style`; `name`/`onPress`/children are siblings. We exercise the
- * generated declarations as plain calls (`Screen({...})`) so the check is about the
- * prop object type, free of JSX-factory plumbing.
- */
-describe("generated dts type-checks the style={{ … }} surface", () => {
-  const dts = generateComposeDts();
-
-  // Each case spins up a full in-process `ts.createProgram`, which is slow (~2s
-  // solo) and can exceed vitest's 5s default under concurrent scheduling in the
-  // full suite; a generous explicit timeout keeps them robust to that.
-  const TYPECHECK_TIMEOUT = 30_000;
-
-  test(
-    "a well-typed composition surface compiles clean",
-    () => {
-      const good = `
-import { Screen, View, Text, variable, purchase } from "@voidhash/paywalls/compose";
-const p = variable.product("p");
-Screen({ style: { backgroundColor: "rgba(0,0,0,1)", gap: 8, flexDirection: "column", safeAreaTop: true } });
-View({ onPress: purchase(p), style: { width: "auto", opacity: 0.5, backgroundType: "gradient",
-  backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(0,0,0,1)", position: 0 }] } } });
-Text({ style: { fontSize: 16, textAlign: "center", fontWeight: "700" }, children: "Hi" });
-`;
-      expect(typeCheck(dts, good)).toEqual([]);
-    },
-    TYPECHECK_TIMEOUT,
-  );
-
-  test(
-    "a style-key typo and wrong-typed values inside style error",
-    () => {
-      const bad = `
-import { View, Text } from "@voidhash/paywalls/compose";
-View({ style: { paddingTp: 4 } });
-View({ style: { flexDirection: "diagonal" } });
-View({ style: { gap: "lots" } });
-View({ onPress: "nope" });
-Text({ style: { fontSze: 9 } });
-`;
-      const messages = typeCheck(dts, bad);
-      expect(messages.some((m) => /paddingTp/.test(m) && /paddingTop/.test(m))).toBe(true);
-      // Enum-union member order is TS-version-dependent; match order-agnostically.
-      expect(
-        messages.some((m) => /"diagonal"/.test(m) && /"row"/.test(m) && /"column"/.test(m)),
-      ).toBe(true);
-      expect(messages.some((m) => /'string' is not assignable to type 'number'/.test(m))).toBe(true);
-      expect(messages.some((m) => /is not assignable to type 'Action'/.test(m))).toBe(true);
-      expect(messages.some((m) => /fontSze/.test(m))).toBe(true);
-    },
-    TYPECHECK_TIMEOUT,
-  );
-
-  test(
-    "a flat style attribute (sibling of style) is rejected",
-    () => {
-      const flat = `
-import { View } from "@voidhash/paywalls/compose";
-View({ gap: 8 });
-`;
-      const messages = typeCheck(dts, flat);
-      expect(messages.some((m) => /gap/.test(m))).toBe(true);
-    },
-    TYPECHECK_TIMEOUT,
-  );
-});
-
-// ---- helpers -------------------------------------------------------------
-
-/** All `.ts`/`.tsx` files under `src/compose` (test uses the real graph). */
-function composeSourceFiles(): string[] {
-  return readdirSync(COMPOSE_DIR)
-    .filter((name) => name.endsWith(".ts") || name.endsWith(".tsx"))
-    .map((name) => path.join(COMPOSE_DIR, name));
-}
-
-/** Export names declared by a module, via the TS scanner (comment/string-safe). */
-function surfaceExportNames(source: string): string[] {
-  const sf = ts.createSourceFile("surface.ts", source, ts.ScriptTarget.Latest, true);
-  const names: string[] = [];
-  const visit = (node: ts.Node): void => {
-    if (
-      (ts.isFunctionDeclaration(node) ||
-        ts.isInterfaceDeclaration(node) ||
-        ts.isTypeAliasDeclaration(node)) &&
-      node.name &&
-      hasExport(node)
-    ) {
-      names.push(node.name.text);
-    }
-    if (ts.isVariableStatement(node) && hasExport(node)) {
-      for (const decl of node.declarationList.declarations) {
-        if (ts.isIdentifier(decl.name)) {
-          names.push(decl.name.text);
-        }
-      }
-    }
-    ts.forEachChild(node, visit);
-  };
-  visit(sf);
-  return names;
-}
-
-function hasExport(node: ts.Node): boolean {
-  return (ts.getCombinedModifierFlags(node as ts.Declaration) & ts.ModifierFlags.Export) !== 0;
-}
-
-/**
- * The top-level symbol names DECLARED in the generated ambient d.ts string
- * (`(export)? (declare)? const|function|interface|type <name>`). A regex
- * extraction is sufficient here — the generated source is a self-contained,
- * machine-emitted ambient module with no comments or nested declarations to
- * confuse it. Used by the reverse (dts → surface) sync direction.
- */
-function declaredNames(dts: string): string[] {
-  const decl = /(?:export\s+)?(?:declare\s+)?(?:const|function|interface|type)\s+([A-Za-z_$][A-Za-z0-9_$]*)/g;
-  const names = new Set<string>();
-  for (const match of dts.matchAll(decl)) {
-    if (match[1]) {
-      names.add(match[1]);
-    }
-  }
-  return [...names];
-}
-
-/** The import module specifiers of a source file, via the TS parser. */
-function importSpecifiers(source: string, fileName: string): string[] {
-  const sf = ts.createSourceFile(fileName, source, ts.ScriptTarget.Latest, true, ts.ScriptKind.TSX);
-  const specifiers: string[] = [];
-  for (const statement of sf.statements) {
-    if (
-      (ts.isImportDeclaration(statement) || ts.isExportDeclaration(statement)) &&
-      statement.moduleSpecifier &&
-      ts.isStringLiteral(statement.moduleSpecifier)
-    ) {
-      specifiers.push(statement.moduleSpecifier.text);
-    }
-  }
-  return specifiers;
-}
-
-/**
- * Compile an author file against the generated ambient d.ts and return the
- * semantic diagnostic messages. The author file uses the tags as plain calls,
- * so no JSX runtime / factory is involved.
- */
-function typeCheck(dts: string, author: string): string[] {
-  const files: Record<string, string> = { "/lib.d.ts": dts, "/author.ts": author };
-  const opts: ts.CompilerOptions = {
-    noEmit: true,
-    strict: true,
-    moduleResolution: ts.ModuleResolutionKind.Bundler,
-    module: ts.ModuleKind.ESNext,
-    target: ts.ScriptTarget.ES2022,
-    skipLibCheck: true,
-  };
-  const host = ts.createCompilerHost(opts);
-  const original = host.getSourceFile.bind(host);
-  host.getSourceFile = (name, lang, onError) =>
-    files[name] ? ts.createSourceFile(name, files[name], lang, true) : original(name, lang, onError);
-  host.fileExists = (f) => f in files || ts.sys.fileExists(f);
-  host.readFile = (f) => files[f] ?? ts.sys.readFile(f);
-  const program = ts.createProgram(["/lib.d.ts", "/author.ts"], opts, host);
-  const sf = program.getSourceFile("/author.ts")!;
-  return program
-    .getSemanticDiagnostics(sf)
-    .map((d) => ts.flattenDiagnosticMessageText(d.messageText, " "));
-}
diff --git a/libraries/paywalls/tests/compose-surface-types.test.ts b/libraries/paywalls/tests/compose-surface-types.test.ts
deleted file mode 100644
index f55498c8a..000000000
--- a/libraries/paywalls/tests/compose-surface-types.test.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import { expectTypeOf, test } from "vitest";
-
-import type { ScreenProps, TextProps, ViewProps } from "../src/compose/style-attr-types";
-
-/**
- * Type-level substance check for the precise `style={{ … }}` surface. Style fields
- * are nested under `style`; `name`/`onPress`/children are siblings. These
- * assertions are enforced by `tsgo` (the `typecheck` script includes `tests/`):
- * each `@ts-expect-error` fails the build if the surface stops rejecting the
- * erroneous usage, and the positive cases fail if a legal value is rejected.
- */
-
-// --- valid: well-typed style + siblings on each node ----------------------
-const _screen: ScreenProps = {
-  name: "Main",
-  style: {
-    gap: 8,
-    flexDirection: "column",
-    backgroundColor: "rgba(0, 0, 0, 1)",
-    width: "auto",
-    safeAreaTop: true,
-    backgroundType: "gradient",
-    backgroundGradient: {
-      kind: "linear",
-      startX: 0,
-      startY: 0,
-      endX: 1,
-      endY: 1,
-      stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }],
-    },
-  },
-};
-void _screen;
-
-const _text: TextProps = {
-  style: { fontSize: 16, fontWeight: "700", textAlign: "center" },
-  children: "Hi",
-};
-void _text;
-
-// --- invalid: unknown key inside style is rejected ------------------------
-// @ts-expect-error unknown style key on <View>
-const _typo: ViewProps = { style: { paddingTp: 4 } };
-void _typo;
-
-// --- invalid: wrong value type on a numeric field -------------------------
-// @ts-expect-error gap is a number, not a string
-const _gap: ViewProps = { style: { gap: "lots" } };
-void _gap;
-
-// --- invalid: value outside a field's enum --------------------------------
-// @ts-expect-error flexDirection only accepts "row" | "column"
-const _dir: ViewProps = { style: { flexDirection: "diagonal" } };
-void _dir;
-
-// --- invalid: a style field written FLAT (as a sibling) is rejected --------
-// @ts-expect-error style fields live inside style={{ … }}, not as a flat attribute
-const _flat: ViewProps = { gap: 8 };
-void _flat;
-
-// --- invalid: onPress must be an Action, and only on <View> ---------------
-// @ts-expect-error onPress must be an Action marker, not a string
-const _press: ViewProps = { onPress: "nope" };
-void _press;
-
-// @ts-expect-error onPress is a <View>-only attribute, not on <Screen>
-const _screenPress: ScreenProps = { name: "S", onPress: {} as import("../src/compose/author-surface").Action };
-void _screenPress;
-
-// --- invalid: a style-key typo inside <Text> style ------------------------
-// @ts-expect-error fontSize typo on <Text>
-const _textTypo: TextProps = { style: { fontSze: 9 } };
-void _textTypo;
-
-test("compose surface types compile (see @ts-expect-error assertions)", () => {
-  expectTypeOf<NonNullable<ViewProps["style"]>["gap"]>().toEqualTypeOf<number | undefined>();
-  expectTypeOf<NonNullable<ScreenProps["style"]>["flexDirection"]>().toEqualTypeOf<
-    "row" | "column" | undefined
-  >();
-});
diff --git a/libraries/paywalls/tests/compose.test.ts b/libraries/paywalls/tests/compose.test.ts
deleted file mode 100644
index 4afe39c84..000000000
--- a/libraries/paywalls/tests/compose.test.ts
+++ /dev/null
@@ -1,671 +0,0 @@
-import { describe, expect, test } from "vitest";
-
-import {
-  CompositionError,
-  parseComposition,
-  printComposition,
-  type CompositionRegistry,
-} from "../src/compose/index";
-
-/**
- * Pure (mimic-free) round-trip: parse → print is a stable fixpoint, and the
- * printed source re-parses to an identical print. The mimic reconcile-to-zero
- * assertions live in the closed `paywall-composition` bridge tests, which lower
- * the AST to a document and diff. Here we prove the AST↔source half is lossless
- * and deterministic.
- */
-const roundtrip = (source: string, registry?: CompositionRegistry): string => {
-  const opts = registry ? { registry } : undefined;
-  const printed1 = printComposition(parseComposition(source, opts), opts);
-  const printed2 = printComposition(parseComposition(printed1, opts), opts);
-  expect(printed2).toBe(printed1);
-  return printed1;
-};
-
-const FIXTURE = `
-import { paywall, Screen, View, Text, variable, product, purchase, closePaywall } from "@voidhash/paywalls/compose";
-
-export default paywall(() => {
-  const selected = variable.product("selectedProduct");
-  const promo = variable.boolean("promo", { default: true });
-
-  return (
-    <Screen name="Main" style={{ backgroundColor: "rgba(10, 10, 20, 1)", safeAreaTop: true }}>
-      <View name="Header" style={{ flexDirection: "row", justifyContent: "space-between", paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }}>
-        <Text style={{ fontSize: 28, color: "rgba(255, 255, 255, 1)" }}>Unlock Pro</Text>
-        <View name="Close" onPress={closePaywall()} />
-      </View>
-      <View name="CTA" style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }} onPress={purchase(selected)}>
-        <Text style={{ fontSize: 18 }}>Continue</Text>
-      </View>
-      <View name="Pick" onPress={selected.set(product("yearly"))} />
-    </Screen>
-  );
-});
-`;
-
-describe("composition grammar + printer (pure)", () => {
-  test("parses the fixture into a well-formed AST", () => {
-    const ast = parseComposition(FIXTURE);
-    expect(ast.root.type).toBe("screen");
-    expect(ast.variables.map((v) => v.name).sort()).toEqual(["promo", "selectedProduct"]);
-    const header = ast.root.children[0]!;
-    expect(header.kind).toBe("element");
-    if (header.kind === "element") {
-      expect(header.type).toBe("view");
-      expect(header.style["flexDirection"]).toBe("row");
-      expect(header.style["paddingTop"]).toBe(16);
-      expect(header.style["paddingLeft"]).toBe(16);
-    }
-  });
-
-  test("parse → print is a stable, idempotent fixpoint", () => {
-    roundtrip(FIXTURE);
-  });
-
-  test("printed source is stable and readable", () => {
-    const printed = printComposition(parseComposition(FIXTURE));
-    expect(printed).toContain('const selectedProduct = variable.product("selectedProduct")');
-    expect(printed).toContain('const promo = variable.boolean("promo", { default: true })');
-    expect(printed).toContain(
-      "style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }}",
-    );
-    expect(printed).toContain("onPress={closePaywall()}");
-    expect(printed).toContain("onPress={purchase(selectedProduct)}");
-    expect(printed).toContain('onPress={selectedProduct.set(product("yearly"))}');
-    expect(printed.split("\n")[0]).toContain('from "@voidhash/paywalls/compose"');
-  });
-
-  test("a scalar edit in printed source re-parses+re-prints with only that change", () => {
-    const printed = printComposition(parseComposition(FIXTURE));
-    const edited = printed.replace("Continue", "Subscribe");
-    const reprinted = printComposition(parseComposition(edited));
-    expect(reprinted).toContain("Subscribe");
-    expect(reprinted).not.toContain(">Continue<");
-  });
-});
-
-describe("round-trip fidelity — escaping + numeric edge cases", () => {
-  test("negative numeric style values round-trip (unary minus)", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="M" style={{ marginTop: -4 }} /></Screen>));`;
-    expect(printComposition(parseComposition(src))).toContain("style={{ marginTop: -4 }}");
-    roundtrip(src);
-  });
-
-  test("text with JSX-special characters round-trips via a string literal", () => {
-    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><Text>{"save > 50% {today}"}</Text></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    expect(printed).toContain('{"save > 50% {today}"}');
-    roundtrip(src);
-  });
-
-  test("text with significant whitespace round-trips exactly", () => {
-    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><Text>{"  spaced  "}</Text></Screen>));`;
-    roundtrip(src);
-  });
-
-  test("absolute position + offsets round-trip (emitted in registry order)", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="Badge" style={{ position: "absolute", top: 10, left: 20 }} /></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    // Registry style order emits position, then left, then top.
-    expect(printed).toContain('style={{ position: "absolute", left: 20, top: 10 }}');
-    roundtrip(src);
-  });
-
-  test('the default position: "relative" (and "auto" offsets) are omitted on print', () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="Flow" style={{ position: "relative", top: "auto", left: 4 }} /></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    // Only the non-default offset survives; the default position/offset are dropped.
-    expect(printed).toContain("style={{ left: 4 }}");
-    expect(printed).not.toContain("position:");
-    expect(printed).not.toContain('top: "auto"');
-    roundtrip(src);
-  });
-
-  test("<Text> absolute position + offsets round-trip (emitted in registry order)", () => {
-    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><Text style={{ position: "absolute", top: 10, left: 20 }}>Badge</Text></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    // Registry style order emits position, then left, then top.
-    expect(printed).toContain('style={{ position: "absolute", left: 20, top: 10 }}');
-    roundtrip(src);
-  });
-
-  test('<Text> default position: "relative" (and "auto" offsets) are omitted on print', () => {
-    const src = `import { paywall, Screen, Text } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><Text style={{ position: "relative", top: "auto", left: 4 }}>Flow</Text></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    // Only the non-default offset survives; the default position/offset are dropped.
-    expect(printed).toContain("style={{ left: 4 }}");
-    expect(printed).not.toContain("position:");
-    expect(printed).not.toContain('top: "auto"');
-    roundtrip(src);
-  });
-
-  test("<View onPress={none()}> round-trips (fresh designer interaction)", () => {
-    // A designer-authored `<View>` with a fresh (`{type:"none"}`) click
-    // interaction lifts + prints to `onPress={none()}`; the node-level grammar
-    // must parse it back or the code-mode round trip breaks.
-    const src = `import { paywall, Screen, View, none } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="F" onPress={none()} /></Screen>));`;
-    const ast = parseComposition(src);
-    const view = ast.root.children[0]!;
-    expect(view.kind).toBe("element");
-    if (view.kind === "element") {
-      expect(view.interactions).toEqual([{ trigger: "click", action: { kind: "none" } }]);
-    }
-    const printed = printComposition(ast);
-    expect(printed).toContain("onPress={none()}");
-    roundtrip(src);
-  });
-});
-
-describe("grammar rejects", () => {
-  test("rejects duplicate variable names", () => {
-    const src = `import { paywall, Screen, variable } from "@voidhash/paywalls/compose";
-export default paywall(() => {
-  const a = variable.string("dup");
-  const b = variable.number("dup");
-  return (<Screen name="S" />);
-});`;
-    expect(() => parseComposition(src)).toThrow(CompositionError);
-  });
-
-  test("rejects non-identifier variable names", () => {
-    const src = `import { paywall, Screen, variable } from "@voidhash/paywalls/compose";
-export default paywall(() => {
-  const a = variable.string("has trial");
-  return (<Screen name="S" />);
-});`;
-    expect(() => parseComposition(src)).toThrow(CompositionError);
-  });
-
-  test("rejects options on a product variable", () => {
-    const src = `import { paywall, Screen, variable } from "@voidhash/paywalls/compose";
-export default paywall(() => {
-  const p = (variable as any).product("p", { default: "x" });
-  return (<Screen name="S" />);
-});`;
-    expect(() => parseComposition(src)).toThrow(CompositionError);
-  });
-
-  test("rejects a type-mismatched set-variable value", () => {
-    const src = `import { paywall, Screen, View, variable } from "@voidhash/paywalls/compose";
-export default paywall(() => {
-  const p = variable.product("p");
-  return (<Screen><View name="F" onPress={p.set("not-a-product")} /></Screen>);
-});`;
-    expect(() => parseComposition(src)).toThrow(CompositionError);
-  });
-
-  // NOTE: `<View style={{ gap: "lots" }} />` (string on a numeric field) is
-  // accepted by the pure grammar — the parser has no notion of a style field's
-  // value TYPE. It is rejected by the mimic schema encode gate in the closed
-  // `lowerAst`, so that rejection test lives in the mono `paywall-composition`
-  // bridge tests, not here.
-
-  const rejects = (body: string): void => {
-    const source = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";\nexport default paywall(() => (${body}));`;
-    expect(() => parseComposition(source)).toThrow(CompositionError);
-  };
-
-  test("rejects .map() control flow", () => {
-    rejects("<Screen>{items.map((x) => <Text>{x}</Text>)}</Screen>");
-  });
-
-  test("rejects a ternary inside a style value", () => {
-    rejects("<Screen><View style={{ paddingTop: cond ? 1 : 2 }} /></Screen>");
-  });
-
-  test("rejects the removed padding shorthand (unknown style key)", () => {
-    rejects("<Screen><View style={{ padding: 16 }} /></Screen>");
-  });
-
-  test("rejects a removed style alias (unknown style key)", () => {
-    rejects('<Screen><View style={{ bg: "rgba(0, 0, 0, 1)" }} /></Screen>');
-  });
-
-  test("rejects unknown elements", () => {
-    rejects("<Screen><Widget /></Screen>");
-  });
-
-  test("rejects spread attributes", () => {
-    rejects("<Screen><View {...rest} /></Screen>");
-  });
-
-  test("rejects variable-bound text (needs a code component)", () => {
-    rejects("<Screen><Text>{someVar}</Text></Screen>");
-  });
-
-  test("rejects a text attribute on <Text> (content is JSX children)", () => {
-    rejects('<Screen><Text text="Hi" /></Screen>');
-  });
-
-  test("rejects onPress on non-view nodes", () => {
-    rejects("<Screen onPress={closePaywall()}><Text>Hi</Text></Screen>");
-  });
-
-  test("CompositionError carries 0-based line/column", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><Widget /></Screen>));`;
-    try {
-      parseComposition(src);
-      throw new Error("expected throw");
-    } catch (error) {
-      expect(error).toBeInstanceOf(CompositionError);
-      const e = error as CompositionError;
-      expect(e.line).toBe(1); // 0-based: second line
-      expect(typeof e.column).toBe("number");
-    }
-  });
-});
-
-describe("code-component instances (pure)", () => {
-  const registry: CompositionRegistry = {
-    components: [
-      {
-        tag: "ProductOption",
-        source: "local",
-        localComponentId: "cc_1",
-        componentSlug: "product-option",
-        componentVersion: 0,
-        contentHash: "",
-        manifest: {
-          slot: true,
-          props: {
-            title: { kind: "string" },
-            price: { kind: "number" },
-            featured: { kind: "boolean" },
-            plan: { kind: "select", options: ["monthly", "yearly"] },
-            product: { kind: "ref", refType: "product" },
-            features: { kind: "array", item: { kind: "string" } },
-          },
-          actions: {
-            onSelect: { payload: { productId: { kind: "string" } } },
-          },
-        },
-      },
-    ],
-  };
-
-  const CFIXTURE = `
-import { paywall, Screen, View, Text, variable, product, purchase, payload, ProductOption } from "@voidhash/paywalls/compose";
-
-export default paywall(() => {
-  const selected = variable.product("selectedProduct");
-
-  return (
-    <Screen name="Main" style={{ backgroundColor: "rgba(10, 10, 20, 1)" }}>
-      <ProductOption name="Yearly" title="Yearly Plan" price={99} featured plan="yearly" product={selected} features={["Unlimited", "Priority"]} onSelect={purchase(payload("productId"))}>
-        <Text style={{ fontSize: 14 }}>Best value</Text>
-      </ProductOption>
-    </Screen>
-  );
-});
-`;
-
-  test("parses a <Component> into a well-formed component AST node", () => {
-    const ast = parseComposition(CFIXTURE, { registry });
-    const component = ast.root.children[0]!;
-    expect(component.kind).toBe("component");
-    if (component.kind !== "component") return;
-    expect(component.tag).toBe("ProductOption");
-    expect(component.name).toBe("Yearly");
-    const props = Object.fromEntries(component.props.map((p) => [p.name, p.value]));
-    expect(props["title"]).toEqual({ kind: "literal-string", value: "Yearly Plan" });
-    expect(props["price"]).toEqual({ kind: "literal-number", value: 99 });
-    expect(props["featured"]).toEqual({ kind: "literal-boolean", value: true });
-    expect(props["plan"]).toEqual({ kind: "literal-string", value: "yearly" });
-    expect(props["product"]).toEqual({ kind: "variable", variableName: "selectedProduct" });
-    expect(props["features"]).toEqual({
-      kind: "literal-string-array",
-      value: ["Unlimited", "Priority"],
-    });
-    expect(component.actionBindings[0]).toEqual({
-      name: "onSelect",
-      action: { kind: "purchase", product: { kind: "payload", field: "productId" } },
-    });
-  });
-
-  test("component instance round-trips (parse↔print fixpoint)", () => {
-    roundtrip(CFIXTURE, registry);
-  });
-
-  test("props parse in manifest order regardless of source attribute order", () => {
-    const inOrder = `import { paywall, Screen, ProductOption } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen name="Main"><ProductOption title="X" price={99} featured plan="yearly" /></Screen>));`;
-    const outOfOrder = `import { paywall, Screen, ProductOption } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen name="Main"><ProductOption plan="yearly" price={99} featured title="X" /></Screen>));`;
-    const a = parseComposition(inOrder, { registry });
-    const b = parseComposition(outOfOrder, { registry });
-    const nameOrder = (ast: typeof a) => {
-      const c = ast.root.children[0]!;
-      return c.kind === "component" ? c.props.map((p) => p.name) : [];
-    };
-    expect(nameOrder(a)).toEqual(nameOrder(b));
-    expect(printComposition(a, { registry })).toBe(printComposition(b, { registry }));
-  });
-
-  test("a string prop containing a tab round-trips exactly (expression form)", () => {
-    const src = `import { paywall, Screen, ProductOption } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen name="Main"><ProductOption title={"a\\tb"} /></Screen>));`;
-    const printed = printComposition(parseComposition(src, { registry }), { registry });
-    expect(printed).toContain('title={"a\\tb"}');
-    roundtrip(src, registry);
-  });
-
-  test("rejects an unknown prop", () => {
-    const src = CFIXTURE.replace('title="Yearly Plan"', 'bogus="x" title="Yearly Plan"');
-    expect(() => parseComposition(src, { registry })).toThrow(/Unknown prop "bogus"/);
-  });
-
-  test("without a registry, a component tag is an unknown element", () => {
-    expect(() => parseComposition(CFIXTURE)).toThrow(/Unknown element <ProductOption>/);
-  });
-
-  test('a manifest prop literally named "name" is not swallowed by the display-name attribute', () => {
-    const nameRegistry: CompositionRegistry = {
-      components: [
-        {
-          tag: "Widget",
-          source: "local",
-          localComponentId: "cc_w",
-          componentSlug: "widget",
-          componentVersion: 0,
-          contentHash: "",
-          manifest: { slot: false, props: { name: { kind: "string" } }, actions: {} },
-        },
-      ],
-    };
-    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen name="Main"><Widget name="Buy now" /></Screen>));`;
-    const ast = parseComposition(src, { registry: nameRegistry });
-    const widget = ast.root.children[0]!;
-    expect(widget.kind).toBe("component");
-    if (widget.kind !== "component") return;
-    expect(widget.name).toBeUndefined();
-    expect(widget.props).toEqual([
-      { name: "name", value: { kind: "literal-string", value: "Buy now" } },
-    ]);
-    roundtrip(src, nameRegistry);
-  });
-});
-
-describe("inline id attributes (node identity)", () => {
-  test("parses id on built-in tags into the AST id field", () => {
-    const src = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";
-export default paywall(() => (
-  <Screen id="scr1">
-    <View id="v1" name="CTA">
-      <Text id="t1">Continue</Text>
-    </View>
-  </Screen>
-));`;
-    const ast = parseComposition(src);
-    expect(ast.root.id).toBe("scr1");
-    const view = ast.root.children[0]!;
-    expect(view.kind).toBe("element");
-    if (view.kind !== "element") return;
-    expect(view.id).toBe("v1");
-    expect(view.name).toBe("CTA");
-    expect(view.children[0]!.id).toBe("t1");
-  });
-
-  test("prints id as the first attribute on every element", () => {
-    const src = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";
-export default paywall(() => (
-  <Screen id="scr1" name="Main">
-    <View id="v1" name="CTA" style={{ gap: 12 }}>
-      <Text id="t1">Continue</Text>
-    </View>
-  </Screen>
-));`;
-    const printed = printComposition(parseComposition(src));
-    expect(printed).toContain('<Screen id="scr1" name="Main">');
-    expect(printed).toContain('<View id="v1" name="CTA" style={{ gap: 12 }}>');
-    expect(printed).toContain('<Text id="t1">Continue</Text>');
-    roundtrip(src);
-  });
-
-  test("elements without ids print unchanged", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="M" style={{ gap: 4 }} /></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    expect(printed).toContain("<Screen>");
-    expect(printed).toContain('<View name="M" style={{ gap: 4 }} />');
-    expect(printed).not.toContain("id=");
-    roundtrip(src);
-  });
-
-  test("id is hard-reserved on component tags (never a prop)", () => {
-    const registry: CompositionRegistry = {
-      components: [
-        {
-          tag: "Widget",
-          source: "local",
-          localComponentId: "cc_w",
-          componentSlug: "widget",
-          componentVersion: 0,
-          contentHash: "",
-          manifest: { slot: false, props: { title: { kind: "string" } }, actions: {} },
-        },
-      ],
-    };
-    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen id="s"><Widget id="w1" title="Hi" /></Screen>));`;
-    const ast = parseComposition(src, { registry });
-    const widget = ast.root.children[0]!;
-    expect(widget.kind).toBe("component");
-    if (widget.kind !== "component") return;
-    expect(widget.id).toBe("w1");
-    expect(widget.props).toEqual([{ name: "title", value: { kind: "literal-string", value: "Hi" } }]);
-    const printed = printComposition(ast, { registry });
-    expect(printed).toContain('<Widget id="w1" title="Hi" />');
-    roundtrip(src, registry);
-  });
-
-  test("a manifest prop named id is rejected at registry construction", () => {
-    const registry: CompositionRegistry = {
-      components: [
-        {
-          tag: "Widget",
-          source: "local",
-          localComponentId: "cc_w",
-          componentSlug: "widget",
-          componentVersion: 0,
-          contentHash: "",
-          manifest: { slot: false, props: { id: { kind: "string" } }, actions: {} },
-        },
-      ],
-    };
-    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><Widget id="w1" /></Screen>));`;
-    expect(() => parseComposition(src, { registry })).toThrow(/reserved for node identity/);
-  });
-});
-
-describe("structured background style values (gradient + image)", () => {
-  test("a non-default gradient parses into JSON style data", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (
-  <Screen>
-    <View name="Card" style={{ backgroundType: "gradient", backgroundGradient: { kind: "radial", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(255, 0, 0, 1)", position: 0 }, { color: "rgba(0, 0, 255, 1)", position: 1 }] } }} />
-  </Screen>
-));`;
-    const ast = parseComposition(src);
-    const card = ast.root.children[0]!;
-    expect(card.kind).toBe("element");
-    if (card.kind !== "element") return;
-    expect(card.style["backgroundType"]).toBe("gradient");
-    expect(card.style["backgroundGradient"]).toEqual({
-      kind: "radial",
-      startX: 0,
-      startY: 0,
-      endX: 1,
-      endY: 1,
-      stops: [
-        { color: "rgba(255, 0, 0, 1)", position: 0 },
-        { color: "rgba(0, 0, 255, 1)", position: 1 },
-      ],
-    });
-  });
-
-  test("a non-default gradient prints as a deterministic JSX object expression", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="Card" style={{ backgroundType: "gradient", backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(255, 0, 0, 1)", position: 0 }, { color: "rgba(0, 0, 255, 1)", position: 1 }] } }} /></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    expect(printed).toContain(
-      'style={{ backgroundType: "gradient", backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(255, 0, 0, 1)", position: 0 }, { color: "rgba(0, 0, 255, 1)", position: 1 }] } }}',
-    );
-    roundtrip(src);
-  });
-
-  test("an image background round-trips", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="Hero" style={{ backgroundType: "image", backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" } }} /></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    expect(printed).toContain(
-      'style={{ backgroundType: "image", backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" } }}',
-    );
-    roundtrip(src);
-  });
-
-  test("the default gradient + image values are omitted on print", () => {
-    // The View defaults carry backgroundType "solid" plus the canonical gradient
-    // and image defaults; setting them explicitly must print nothing for them —
-    // so the all-default element prints no style attribute at all.
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen><View name="Plain" style={{ backgroundType: "solid", backgroundGradient: { kind: "linear", startX: 0.5, startY: 0, endX: 0.5, endY: 1, stops: [{ color: "rgba(255, 255, 255, 1)", position: 0 }, { color: "rgba(255, 255, 255, 0)", position: 1 }] }, backgroundImage: { url: "", resizeMode: "cover" } }} /></Screen>));`;
-    const printed = printComposition(parseComposition(src));
-    expect(printed).not.toContain("backgroundType");
-    expect(printed).not.toContain("backgroundGradient");
-    expect(printed).not.toContain("backgroundImage");
-    expect(printed).not.toContain("style=");
-    roundtrip(src);
-  });
-
-  test("rejects a non-literal style value (identifier)", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-const x = 1;
-export default paywall(() => (<Screen><View name="Bad" style={{ backgroundImage: { url: x, resizeMode: "cover" } }} /></Screen>));`;
-    expect(() => parseComposition(src)).toThrow();
-  });
-
-  test("rejects a spread inside a style value", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-const base = {};
-export default paywall(() => (<Screen><View name="Bad" style={{ backgroundImage: { ...base, resizeMode: "cover" } }} /></Screen>));`;
-    expect(() => parseComposition(src)).toThrow();
-  });
-});
-
-describe("style={{ … }} object grammar", () => {
-  const parse = (body: string) => {
-    const source = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";\nexport default paywall(() => (${body}));`;
-    return parseComposition(source);
-  };
-  const messageOf = (body: string): string => {
-    try {
-      parse(body);
-    } catch (error) {
-      if (error instanceof CompositionError) {
-        return error.message;
-      }
-      throw error;
-    }
-    throw new Error("expected a CompositionError");
-  };
-
-  test("style={{}} parses as an empty style (legal)", () => {
-    const ast = parse('<Screen><View name="Empty" style={{}} /></Screen>');
-    const view = ast.root.children[0]!;
-    expect(view.kind).toBe("element");
-    if (view.kind === "element") {
-      expect(view.style).toEqual({});
-    }
-  });
-
-  test("a former FLAT style attribute is a migration error guiding to style={{ … }}", () => {
-    const message = messageOf('<Screen><View paddingTop={16} /></Screen>');
-    expect(message).toContain("style={{");
-    expect(message).toContain('"paddingTop"');
-  });
-
-  test("a duplicate style key is a hard error", () => {
-    const message = messageOf('<Screen><View style={{ paddingTop: 8, paddingTop: 16 }} /></Screen>');
-    expect(message).toContain('Duplicate style key "paddingTop"');
-  });
-
-  test("an unknown style key errors with a did-you-mean suggestion", () => {
-    const message = messageOf('<Screen><View style={{ paddingTp: 4 }} /></Screen>');
-    expect(message).toContain('Unknown style key "paddingTp"');
-    expect(message).toContain('did you mean "paddingTop"');
-  });
-
-  test("a shorthand property inside style is rejected", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-const paddingTop = 4;
-export default paywall(() => (<Screen><View style={{ paddingTop }} /></Screen>));`;
-    expect(() => parseComposition(src)).toThrow(CompositionError);
-  });
-
-  test("a spread property inside style is rejected", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-const base = {};
-export default paywall(() => (<Screen><View style={{ ...base }} /></Screen>));`;
-    expect(() => parseComposition(src)).toThrow(CompositionError);
-  });
-
-  test("a computed property name inside style is rejected", () => {
-    const src = `import { paywall, Screen, View } from "@voidhash/paywalls/compose";
-const key = "paddingTop";
-export default paywall(() => (<Screen><View style={{ [key]: 4 }} /></Screen>));`;
-    expect(() => parseComposition(src)).toThrow(CompositionError);
-  });
-
-  test("a style attribute on a component tag is an unknown-attribute error", () => {
-    const registry: CompositionRegistry = {
-      components: [
-        {
-          tag: "Widget",
-          source: "local",
-          localComponentId: "cc_w",
-          componentSlug: "widget",
-          componentVersion: 0,
-          contentHash: "",
-          manifest: { slot: false, props: {}, actions: {} },
-        },
-      ],
-    };
-    const src = `import { paywall, Screen, Widget } from "@voidhash/paywalls/compose";
-export default paywall(() => (<Screen name="Main"><Widget style={{ paddingTop: 4 }} /></Screen>));`;
-    expect(() => parseComposition(src, { registry })).toThrow(/Unknown prop "style"/);
-  });
-
-  test("fixpoint: mixed style values (negative number, JSX-special string, gradient, boolean) + an all-default element", () => {
-    const src = `import { paywall, Screen, View, Text } from "@voidhash/paywalls/compose";
-export default paywall(() => (
-  <Screen style={{ safeAreaTop: true, backgroundType: "gradient", backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }] } }}>
-    <View name="Neg" style={{ marginTop: -4 }} />
-    <Text>{"save > 50% {today}"}</Text>
-    <View name="Default" />
-  </Screen>
-));`;
-    const printed = printComposition(parseComposition(src));
-    // Fixpoint: print → parse → print is byte-identical.
-    expect(printComposition(parseComposition(printed))).toBe(printed);
-    expect(printed).toContain("style={{ marginTop: -4 }}");
-    expect(printed).toContain('{"save > 50% {today}"}');
-    expect(printed).toContain("safeAreaTop: true");
-    expect(printed).toContain(
-      'backgroundGradient: { kind: "linear", startX: 0, startY: 0, endX: 1, endY: 1, stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }] }',
-    );
-    // The all-default View prints with no style attribute.
-    expect(printed).toContain('<View name="Default" />');
-  });
-});
diff --git a/libraries/paywalls/tests/manifest.test.tsx b/libraries/paywalls/tests/manifest.test.tsx
index c83baee24..8f3243701 100644
--- a/libraries/paywalls/tests/manifest.test.tsx
+++ b/libraries/paywalls/tests/manifest.test.tsx
@@ -21,7 +21,6 @@ const yearly: PaywallProduct = {
 describe("extractComponentManifest", () => {
   it("emits the contract §2 manifest for a full-surface component", () => {
     const definition = defineComponent({
-      id: "product-option",
       title: "Product Option",
       description: "A selectable product row.",
       props: (p) => ({
@@ -48,8 +47,7 @@ describe("extractComponentManifest", () => {
     });
 
     expect(extractComponentManifest(definition)).toEqual({
-      manifestVersion: 1,
-      id: "product-option",
+      manifestVersion: 2,
       title: "Product Option",
       description: "A selectable product row.",
       props: {
@@ -85,7 +83,6 @@ describe("extractComponentManifest", () => {
 
   it("reports slot: false and empty hostData for a plain component", () => {
     const definition = defineComponent({
-      id: "title-block",
       props: (p) => ({ title: p.string() }),
       render: ({ props }) => (
         <View>
@@ -104,7 +101,6 @@ describe("extractComponentManifest", () => {
 
   it("reports hostData products when a prop is ref('product')", () => {
     const definition = defineComponent({
-      id: "with-ref",
       props: (p) => ({ product: p.ref("product") }),
       render: ({ props }) => <Text>{props.product.displayName}</Text>,
     });
@@ -113,7 +109,6 @@ describe("extractComponentManifest", () => {
 
   it("reports hostData products when a preview declares product data", () => {
     const definition = defineComponent({
-      id: "with-preview-products",
       previews: { default: { data: { products: [yearly] } } },
       render: () => <View />,
     });
@@ -122,7 +117,6 @@ describe("extractComponentManifest", () => {
 
   it("reports hostData products when the template reads products via a runtime hook", () => {
     const definition = defineComponent({
-      id: "with-products-hook",
       render: () => {
         const products = usePaywallProducts();
         return <Text>{products.length}</Text>;
@@ -133,7 +127,6 @@ describe("extractComponentManifest", () => {
 
   it("emits payload-less actions as empty payload objects", () => {
     const definition = defineComponent({
-      id: "with-bare-action",
       actions: (a) => ({ onDismiss: a.action() }),
       render: ({ actions }) => <Pressable onPress={actions.onDismiss} />,
     });
@@ -144,7 +137,6 @@ describe("extractComponentManifest", () => {
 
   it("omits non-serializable defaults from the manifest", () => {
     const definition = defineComponent({
-      id: "with-node-default",
       props: (p) => ({ badge: p.component().default(<Text>hi</Text>) }),
       render: ({ props }) => <View>{props.badge}</View>,
     });
@@ -156,7 +148,6 @@ describe("extractComponentManifest", () => {
 
   it("emits the contract §2 per-kind table for every builder combination", () => {
     const definition = defineComponent({
-      id: "per-kind",
       props: (p) => ({
         headline: p.string().editor("color").default("#16a34a"),
         count: p.number().default(3),
@@ -206,7 +197,7 @@ describe("extractComponentManifest", () => {
 
   it("rejects p.select([]) with an error naming the component and prop", () => {
     const definition = defineComponent({
-      id: "broken-select",
+      title: "broken-select",
       props: (p) => ({ plan: p.select([]) }),
       render: () => <View />,
     });
@@ -217,7 +208,7 @@ describe("extractComponentManifest", () => {
 
   it("rejects p.array(p.select([])) items the same way", () => {
     const definition = defineComponent({
-      id: "broken-array-select",
+      title: "broken-array-select",
       props: (p) => ({ plans: p.array(p.select([])) }),
       render: () => <View />,
     });
@@ -228,7 +219,6 @@ describe("extractComponentManifest", () => {
 
   it('rejects a prop named "id" (reserved for node identity)', () => {
     const definition = defineComponent({
-      id: "reserved-id-prop",
       props: (p) => ({ id: p.string() }),
       render: () => <View />,
     });
@@ -239,7 +229,6 @@ describe("extractComponentManifest", () => {
 
   it('rejects an action named "id" (reserved for node identity)', () => {
     const definition = defineComponent({
-      id: "reserved-id-action",
       props: (p) => ({ title: p.string() }),
       actions: (a) => ({ id: a.action({}) }),
       render: () => <View />,
@@ -251,7 +240,6 @@ describe("extractComponentManifest", () => {
 
   it("keeps explicit optional() and default() both consumer-optional", () => {
     const definition = defineComponent({
-      id: "optionality",
       props: (p) => ({
         required: p.string(),
         optional: p.string().optional(),
diff --git a/libraries/paywalls/tests/render.test.tsx b/libraries/paywalls/tests/render.test.tsx
index 3ca103f86..d66c640e3 100644
--- a/libraries/paywalls/tests/render.test.tsx
+++ b/libraries/paywalls/tests/render.test.tsx
@@ -16,7 +16,6 @@ import {
 } from "../src/index";
 
 const Card = defineComponent({
-  id: "card",
   props: (p) => ({
     title: p.string().label("Title").default("Untitled"),
   }),
diff --git a/libraries/paywalls/tests/sandbox-bundle.test.ts b/libraries/paywalls/tests/sandbox-bundle.test.ts
index f823c8ae3..6691ae0df 100644
--- a/libraries/paywalls/tests/sandbox-bundle.test.ts
+++ b/libraries/paywalls/tests/sandbox-bundle.test.ts
@@ -19,7 +19,6 @@ const describeBuilt = built ? describe : describe.skip;
 const SOURCE = `import { defineComponent, View, Text, Pressable, Slot, usePaywallProducts, useState, useEffect } from "@voidhash/paywalls";
 
 export default defineComponent({
-  id: "product-option",
   props: (p) => ({
     accentColor: p.string().editor("color").default("#16a34a"),
   }),
@@ -110,7 +109,20 @@ describeBuilt("generated Monaco dts", () => {
   it("is a self-contained ambient module with the key author identifiers", async () => {
     const { sandboxDts } = (await import(dtsModule)) as { sandboxDts: string };
     expect(sandboxDts).toContain('declare module "@voidhash/paywalls"');
-    for (const identifier of ["defineComponent", "useState", "View", "Slot", "Pressable", "Text"]) {
+    // The ONE root module now covers BOTH file kinds: component authoring
+    // (defineComponent + primitives + hooks) and paywall composition
+    // (definePaywall + Screen + variable + the compose helpers).
+    for (const identifier of [
+      "defineComponent",
+      "definePaywall",
+      "Screen",
+      "variable",
+      "useState",
+      "View",
+      "Slot",
+      "Pressable",
+      "Text",
+    ]) {
       expect(sandboxDts).toContain(identifier);
     }
     // The react imports must have been stripped (self-contained ambient module).
diff --git a/libraries/paywalls/tests/sandbox.test.tsx b/libraries/paywalls/tests/sandbox.test.tsx
index 3c22a68fd..9da086c8d 100644
--- a/libraries/paywalls/tests/sandbox.test.tsx
+++ b/libraries/paywalls/tests/sandbox.test.tsx
@@ -18,7 +18,7 @@ import {
  * `<Slot/>`, and two preview states.
  */
 const definition = defineComponent({
-  id: "product-option",
+  title: "Product Option",
   props: (p) => ({
     accentColor: p.string().editor("color").default("#16a34a"),
   }),
@@ -83,7 +83,6 @@ describe("sandbox renderComponentToTree", () => {
 
   it("records the action name for the idiomatic inline-arrow handler", async () => {
     const inlineDefinition = defineComponent({
-      id: "inline-action",
       actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
       render: ({ actions }) => (
         <Pressable onPress={() => actions.onSelect({ productId: "p1" })}>
@@ -107,7 +106,6 @@ describe("sandbox renderComponentToTree", () => {
     // The action probe must NOT run the author's setState during the committed
     // render — otherwise the counter compounds and differs run-to-run.
     const stateful = defineComponent({
-      id: "stateful-press",
       actions: (a) => ({ onSelect: a.action() }),
       render: ({ actions }) => {
         const [n, setN] = useState(0);
@@ -136,7 +134,6 @@ describe("sandbox renderComponentToTree", () => {
 
   it("flows preview-state variables into usePaywallVariables", async () => {
     const withVars = defineComponent({
-      id: "with-vars",
       render: () => {
         const variables = usePaywallVariables();
         return <Text>{String(variables.headline ?? "NONE")}</Text>;
@@ -152,7 +149,9 @@ describe("sandbox renderComponentToTree", () => {
 
   it("extracts a manifest matching the definition", () => {
     const manifest = extractComponentManifest(definition);
-    expect(manifest.id).toBe("product-option");
+    // Manifest v2 carries no `id` (identity is the component's file path); the
+    // optional display title survives.
+    expect(manifest.title).toBe("Product Option");
     expect(manifest.slot).toBe(true);
     expect(manifest.previewStates).toEqual(["default", "trial"]);
     expect(Object.keys(manifest.actions)).toEqual(["onSelect"]);
@@ -170,7 +169,6 @@ describe("sandbox renderComponentToTree", () => {
 
   it("reports hasPanel=true when the definition declares a panel", () => {
     const withPanel = defineComponent({
-      id: "with-panel",
       props: (p) => ({ accentColor: p.string().editor("color").default("#000") }),
       panel: (ctx) => (
         <Panel>
diff --git a/libraries/paywalls/tests/style-vocabulary-lock.test.ts b/libraries/paywalls/tests/style-vocabulary-lock.test.ts
index 5eb49381a..2f508f3f1 100644
--- a/libraries/paywalls/tests/style-vocabulary-lock.test.ts
+++ b/libraries/paywalls/tests/style-vocabulary-lock.test.ts
@@ -1,18 +1,14 @@
 import { describe, expect, it } from "vitest";
 
-import { NODE_STYLE_VOCABULARY, type CompositionNodeType } from "../src/compose/index";
 import { PAYWALL_STYLE_KEY_LIST } from "../src/schema/index";
 
 /**
- * Equivalence lock for the single-sourced style vocabulary.
+ * Content-and-order lock for the §3.1 wire-contract style keys.
  *
- * Both tables (`PAYWALL_STYLE_KEY_LIST` — the wire contract — and
- * `NODE_STYLE_VOCABULARY` — the printer-significant per-node compose grammar)
- * are now derived from one style-field registry (`src/schema/style-registry.ts`).
- * This test hardcodes their EXACT pre-refactor values so the derivation is
- * provably output-identical: field order and every default value are locked, as
- * is the content and order of the wire key list. A drift in either derivation
- * fails here.
+ * `PAYWALL_STYLE_KEY_LIST` is derived from the single style-field registry
+ * (`src/schema/style-registry.ts` `WIRE_STYLE_ORDER`). This test hardcodes its
+ * EXACT value so the derivation can never silently drift — a reorder, added, or
+ * removed key fails here.
  */
 
 const EXPECTED_STYLE_KEY_LIST = [
@@ -75,358 +71,8 @@ const EXPECTED_STYLE_KEY_LIST = [
   "fontFamily",
 ];
 
-const CANONICAL_GRADIENT = {
-  kind: "linear",
-  startX: 0.5,
-  startY: 0,
-  endX: 0.5,
-  endY: 1,
-  stops: [
-    { color: "rgba(255, 255, 255, 1)", position: 0 },
-    { color: "rgba(255, 255, 255, 0)", position: 1 },
-  ],
-};
-
-const EXPECTED_SCREEN = {
-  styleFields: [
-    "x",
-    "y",
-    "width",
-    "height",
-    "minWidth",
-    "maxWidth",
-    "minHeight",
-    "maxHeight",
-    "paddingTop",
-    "paddingRight",
-    "paddingBottom",
-    "paddingLeft",
-    "marginTop",
-    "marginRight",
-    "marginBottom",
-    "marginLeft",
-    "gap",
-    "justifyContent",
-    "alignItems",
-    "flexDirection",
-    "backgroundColor",
-    "backgroundEnabled",
-    "backgroundType",
-    "backgroundGradient",
-    "backgroundImage",
-    "borderTopWidth",
-    "borderRightWidth",
-    "borderBottomWidth",
-    "borderLeftWidth",
-    "borderColor",
-    "borderStyle",
-    "borderEnabled",
-    "opacity",
-    "overflow",
-    "zIndex",
-    "display",
-    "shadowEnabled",
-    "shadowColor",
-    "shadowOffsetX",
-    "shadowOffsetY",
-    "shadowRadius",
-    "shadowOpacity",
-    "safeAreaTop",
-    "safeAreaBottom",
-    "flex",
-    "flexGrow",
-    "flexShrink",
-    "flexBasis",
-    "alignSelf",
-  ],
-  defaultStyle: {
-    x: 0,
-    y: 0,
-    width: 375,
-    height: 812,
-    paddingTop: 0,
-    paddingRight: 0,
-    paddingBottom: 0,
-    paddingLeft: 0,
-    marginTop: 0,
-    marginRight: 0,
-    marginBottom: 0,
-    marginLeft: 0,
-    gap: 0,
-    justifyContent: "flex-start",
-    alignItems: "flex-start",
-    flexDirection: "column",
-    backgroundColor: "rgba(255, 255, 255, 1)",
-    backgroundEnabled: true,
-    backgroundType: "solid",
-    backgroundGradient: CANONICAL_GRADIENT,
-    backgroundImage: { url: "", resizeMode: "cover" },
-    borderTopWidth: 0,
-    borderRightWidth: 0,
-    borderBottomWidth: 0,
-    borderLeftWidth: 0,
-    borderColor: "rgba(0, 0, 0, 1)",
-    borderStyle: "solid",
-    borderEnabled: false,
-    opacity: 1,
-    overflow: "visible",
-    zIndex: 0,
-    display: "flex",
-    shadowEnabled: false,
-    shadowColor: "rgba(0, 0, 0, 1)",
-    shadowOffsetX: 0,
-    shadowOffsetY: 0,
-    shadowRadius: 0,
-    shadowOpacity: 1,
-    safeAreaTop: false,
-    safeAreaBottom: false,
-    flexGrow: 0,
-    flexShrink: 1,
-    flexBasis: "auto",
-    alignSelf: "auto",
-  },
-  defaultName: "Screen",
-};
-
-const EXPECTED_VIEW = {
-  styleFields: [
-    "paddingTop",
-    "paddingRight",
-    "paddingBottom",
-    "paddingLeft",
-    "marginTop",
-    "marginRight",
-    "marginBottom",
-    "marginLeft",
-    "gap",
-    "justifyContent",
-    "alignItems",
-    "flexDirection",
-    "width",
-    "height",
-    "minWidth",
-    "maxWidth",
-    "minHeight",
-    "maxHeight",
-    "backgroundColor",
-    "backgroundEnabled",
-    "backgroundType",
-    "backgroundGradient",
-    "backgroundImage",
-    "borderTopWidth",
-    "borderRightWidth",
-    "borderBottomWidth",
-    "borderLeftWidth",
-    "borderColor",
-    "borderStyle",
-    "borderEnabled",
-    "borderTopLeftRadius",
-    "borderTopRightRadius",
-    "borderBottomRightRadius",
-    "borderBottomLeftRadius",
-    "opacity",
-    "overflow",
-    "zIndex",
-    "position",
-    "left",
-    "top",
-    "right",
-    "bottom",
-    "display",
-    "shadowEnabled",
-    "shadowColor",
-    "shadowOffsetX",
-    "shadowOffsetY",
-    "shadowRadius",
-    "shadowOpacity",
-    "safeAreaTop",
-    "safeAreaBottom",
-    "flex",
-    "flexGrow",
-    "flexShrink",
-    "flexBasis",
-    "alignSelf",
-  ],
-  defaultStyle: {
-    paddingTop: 0,
-    paddingRight: 0,
-    paddingBottom: 0,
-    paddingLeft: 0,
-    marginTop: 0,
-    marginRight: 0,
-    marginBottom: 0,
-    marginLeft: 0,
-    gap: 0,
-    justifyContent: "flex-start",
-    alignItems: "flex-start",
-    flexDirection: "column",
-    width: 100,
-    height: 100,
-    backgroundColor: "rgba(255, 255, 255, 1)",
-    backgroundEnabled: false,
-    backgroundType: "solid",
-    backgroundGradient: CANONICAL_GRADIENT,
-    backgroundImage: { url: "", resizeMode: "cover" },
-    borderTopWidth: 0,
-    borderRightWidth: 0,
-    borderBottomWidth: 0,
-    borderLeftWidth: 0,
-    borderColor: "rgba(0, 0, 0, 1)",
-    borderStyle: "solid",
-    borderEnabled: false,
-    borderTopLeftRadius: 0,
-    borderTopRightRadius: 0,
-    borderBottomRightRadius: 0,
-    borderBottomLeftRadius: 0,
-    opacity: 1,
-    overflow: "visible",
-    zIndex: 0,
-    position: "relative",
-    left: "auto",
-    top: "auto",
-    right: "auto",
-    bottom: "auto",
-    display: "flex",
-    shadowEnabled: false,
-    shadowColor: "rgba(0, 0, 0, 1)",
-    shadowOffsetX: 0,
-    shadowOffsetY: 0,
-    shadowRadius: 0,
-    shadowOpacity: 1,
-    safeAreaTop: false,
-    safeAreaBottom: false,
-    flexGrow: 0,
-    flexShrink: 1,
-    flexBasis: "auto",
-    alignSelf: "auto",
-  },
-  defaultName: "View",
-};
-
-const EXPECTED_TEXT = {
-  styleFields: [
-    "marginTop",
-    "marginRight",
-    "marginBottom",
-    "marginLeft",
-    "minWidth",
-    "maxWidth",
-    "minHeight",
-    "maxHeight",
-    "fontSize",
-    "fontWeight",
-    "color",
-    "textAlign",
-    "lineHeight",
-    "letterSpacing",
-    "borderTopWidth",
-    "borderRightWidth",
-    "borderBottomWidth",
-    "borderLeftWidth",
-    "borderColor",
-    "borderStyle",
-    "borderEnabled",
-    "opacity",
-    "overflow",
-    "zIndex",
-    "position",
-    "left",
-    "top",
-    "right",
-    "bottom",
-    "display",
-    "shadowEnabled",
-    "shadowColor",
-    "shadowOffsetX",
-    "shadowOffsetY",
-    "shadowRadius",
-    "shadowOpacity",
-    "flex",
-    "flexGrow",
-    "flexShrink",
-    "flexBasis",
-    "alignSelf",
-  ],
-  defaultStyle: {
-    marginTop: 0,
-    marginRight: 0,
-    marginBottom: 0,
-    marginLeft: 0,
-    fontSize: 16,
-    fontWeight: "400",
-    color: "rgba(0, 0, 0, 1)",
-    textAlign: "left",
-    lineHeight: 1.5,
-    letterSpacing: 0,
-    borderTopWidth: 0,
-    borderRightWidth: 0,
-    borderBottomWidth: 0,
-    borderLeftWidth: 0,
-    borderColor: "rgba(0, 0, 0, 1)",
-    borderStyle: "solid",
-    borderEnabled: false,
-    opacity: 1,
-    overflow: "visible",
-    zIndex: 0,
-    position: "relative",
-    left: "auto",
-    top: "auto",
-    right: "auto",
-    bottom: "auto",
-    display: "flex",
-    shadowEnabled: false,
-    shadowColor: "rgba(0, 0, 0, 1)",
-    shadowOffsetX: 0,
-    shadowOffsetY: 0,
-    shadowRadius: 0,
-    shadowOpacity: 1,
-    flexGrow: 0,
-    flexShrink: 1,
-    flexBasis: "auto",
-    alignSelf: "auto",
-  },
-  defaultName: "Text",
-};
-
-interface ExpectedNodeVocabulary {
-  styleFields: string[];
-  defaultStyle: Record<string, unknown>;
-  defaultName: string;
-}
-
-const EXPECTED_VOCABULARY: Record<CompositionNodeType, ExpectedNodeVocabulary> = {
-  screen: EXPECTED_SCREEN,
-  view: EXPECTED_VIEW,
-  text: EXPECTED_TEXT,
-};
-
 describe("PAYWALL_STYLE_KEY_LIST (wire contract lock)", () => {
   it("matches the locked content AND order exactly", () => {
     expect([...PAYWALL_STYLE_KEY_LIST]).toEqual(EXPECTED_STYLE_KEY_LIST);
   });
 });
-
-describe("NODE_STYLE_VOCABULARY (compose grammar lock)", () => {
-  for (const type of ["screen", "view", "text"] as const) {
-    describe(type, () => {
-      it("preserves the printer-significant styleFields order", () => {
-        expect([...NODE_STYLE_VOCABULARY[type].styleFields]).toEqual(
-          EXPECTED_VOCABULARY[type].styleFields,
-        );
-      });
-
-      it("preserves every default value (and the exact default key set)", () => {
-        expect(NODE_STYLE_VOCABULARY[type].defaultStyle).toEqual(
-          EXPECTED_VOCABULARY[type].defaultStyle,
-        );
-        expect(Object.keys(NODE_STYLE_VOCABULARY[type].defaultStyle)).toEqual(
-          Object.keys(EXPECTED_VOCABULARY[type].defaultStyle),
-        );
-      });
-
-      it("preserves the default node name", () => {
-        expect(NODE_STYLE_VOCABULARY[type].defaultName).toBe(EXPECTED_VOCABULARY[type].defaultName);
-      });
-    });
-  }
-});
diff --git a/libraries/paywalls/tests/tree.test.tsx b/libraries/paywalls/tests/tree.test.tsx
index a39bf832c..d3590d83a 100644
--- a/libraries/paywalls/tests/tree.test.tsx
+++ b/libraries/paywalls/tests/tree.test.tsx
@@ -118,7 +118,6 @@ describe("renderToNodeTree", () => {
 
   it("emits a slot marker for an empty Slot in a component preview", async () => {
     const definition = defineComponent({
-      id: "card",
       props: (p) => ({ title: p.string().default("Untitled") }),
       render: ({ props }) => (
         <View>
@@ -139,7 +138,6 @@ describe("renderToNodeTree", () => {
 
   it("renders consumer children in place of the slot marker", async () => {
     const definition = defineComponent({
-      id: "card",
       render: () => (
         <View>
           <Slot />
@@ -162,7 +160,6 @@ describe("renderToNodeTree", () => {
 
   it("records the action name for both direct and inline-arrow action bindings", async () => {
     const definition = defineComponent({
-      id: "selectable",
       actions: (a) => ({ onSelect: a.action({ productId: a.string() }) }),
       render: ({ actions }) => (
         <View>
diff --git a/libraries/paywalls/tests/types.test.ts b/libraries/paywalls/tests/types.test.ts
index 64b8cf828..c336aa429 100644
--- a/libraries/paywalls/tests/types.test.ts
+++ b/libraries/paywalls/tests/types.test.ts
@@ -117,7 +117,6 @@ describe("InferActions", () => {
 describe("defineComponent end-to-end typing", () => {
   it("types the render context and the produced component", () => {
     const definition = defineComponent({
-      id: "typed",
       props: () => propMap,
       actions: () => actionMap,
       render: ({ props, actions }) => {
diff --git a/libraries/paywalls/tests/validate.test.ts b/libraries/paywalls/tests/validate.test.ts
index 9965b2c30..62d9906a0 100644
--- a/libraries/paywalls/tests/validate.test.ts
+++ b/libraries/paywalls/tests/validate.test.ts
@@ -7,8 +7,7 @@ import { parseComponentManifest } from "../src/schema/validate";
  * one field under test so each fixture isolates a single rejection reason.
  */
 const validManifest = () => ({
-  manifestVersion: 1,
-  id: "pro-card",
+  manifestVersion: 2,
   props: {
     heading: { kind: "string", optional: false },
     product: { kind: "ref", refType: "product", optional: false },
@@ -20,8 +19,7 @@ const validManifest = () => ({
 describe("component manifest validator — prop `default` allowance", () => {
   test("accepts `default` on string/number/boolean/select/image/array props", () => {
     const manifest = {
-      manifestVersion: 1,
-      id: "c",
+      manifestVersion: 2,
       props: {
         s: { kind: "string", default: "x" },
         n: { kind: "number", default: 3 },
diff --git a/libraries/paywalls/tests/validate.test.tsx b/libraries/paywalls/tests/validate.test.tsx
index 92b6abe1a..877a4ddd3 100644
--- a/libraries/paywalls/tests/validate.test.tsx
+++ b/libraries/paywalls/tests/validate.test.tsx
@@ -28,7 +28,6 @@ const yearly: PaywallProduct = {
 };
 
 const fullComponent = defineComponent({
-  id: "product-option",
   title: "Product Option",
   props: (p) => ({
     product: p.ref("product").label("Product"),
@@ -253,8 +252,7 @@ describe("parseComponentManifest", () => {
 
   it("rejects an unknown top-level key", () => {
     const result = parseComponentManifest({
-      manifestVersion: 1,
-      id: "x",
+      manifestVersion: 2,
       props: {},
       extra: true,
     });
@@ -264,18 +262,31 @@ describe("parseComponentManifest", () => {
     }
   });
 
+  it("rejects a v1 (id-bearing) manifest — id is no longer a manifest field", () => {
+    // Manifest v2 dropped `id` (identity is the component's file path). A legacy
+    // v1 manifest fails on BOTH the version check and the unknown `id` key.
+    const result = parseComponentManifest({
+      manifestVersion: 1,
+      id: "product-option",
+      props: {},
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.includes("manifestVersion must be 2"))).toBe(true);
+      expect(result.errors.some((e) => e.includes('unknown key "id"'))).toBe(true);
+    }
+  });
+
   it("rejects an unknown prop kind and empty select options", () => {
     expect(
       parseComponentManifest({
-        manifestVersion: 1,
-        id: "x",
+        manifestVersion: 2,
         props: { a: { kind: "date", optional: false } },
       }).ok,
     ).toBe(false);
     expect(
       parseComponentManifest({
-        manifestVersion: 1,
-        id: "x",
+        manifestVersion: 2,
         props: { a: { kind: "select", options: [], optional: false } },
       }).ok,
     ).toBe(false);
@@ -283,8 +294,7 @@ describe("parseComponentManifest", () => {
 
   it("rejects editor on a non-string prop", () => {
     const result = parseComponentManifest({
-      manifestVersion: 1,
-      id: "x",
+      manifestVersion: 2,
       props: { a: { kind: "number", editor: "color", optional: false } },
     });
     expect(result.ok).toBe(false);
@@ -295,8 +305,7 @@ describe("parseComponentManifest", () => {
 
   it("rejects an array item that is itself an array", () => {
     const result = parseComponentManifest({
-      manifestVersion: 1,
-      id: "x",
+      manifestVersion: 2,
       props: { a: { kind: "array", item: { kind: "array" }, optional: false } },
     });
     expect(result.ok).toBe(false);
@@ -308,39 +317,27 @@ describe("parseComponentManifest", () => {
   it("rejects a bad action payload kind, non-boolean slot, empty previewStates, bad hostData", () => {
     expect(
       parseComponentManifest({
-        manifestVersion: 1,
-        id: "x",
+        manifestVersion: 2,
         props: {},
         actions: { onSelect: { payload: { id: { kind: "object" } } } },
       }).ok,
     ).toBe(false);
-    expect(parseComponentManifest({ manifestVersion: 1, id: "x", props: {}, slot: "yes" }).ok).toBe(
+    expect(parseComponentManifest({ manifestVersion: 2, props: {}, slot: "yes" }).ok).toBe(false);
+    expect(parseComponentManifest({ manifestVersion: 2, props: {}, previewStates: [] }).ok).toBe(
       false,
     );
-    expect(
-      parseComponentManifest({ manifestVersion: 1, id: "x", props: {}, previewStates: [] }).ok,
-    ).toBe(false);
-    expect(
-      parseComponentManifest({ manifestVersion: 1, id: "x", props: {}, hostData: ["secrets"] }).ok,
-    ).toBe(false);
-  });
-
-  it("rejects an id that violates the slug pattern (mirrors server DeploySlug)", () => {
-    expect(parseComponentManifest({ manifestVersion: 1, id: "Product_Option", props: {} }).ok).toBe(
+    expect(parseComponentManifest({ manifestVersion: 2, props: {}, hostData: ["secrets"] }).ok).toBe(
       false,
     );
-    expect(parseComponentManifest({ manifestVersion: 1, id: "", props: {} }).ok).toBe(false);
-    expect(parseComponentManifest({ manifestVersion: 1, id: "ok-slug-1", props: {} }).ok).toBe(
-      true,
-    );
   });
 
   it("rejects a wrong manifestVersion and a bad refType", () => {
-    expect(parseComponentManifest({ manifestVersion: 2, id: "x", props: {} }).ok).toBe(false);
+    // v1 and v3 are both wrong; only v2 is accepted.
+    expect(parseComponentManifest({ manifestVersion: 1, props: {} }).ok).toBe(false);
+    expect(parseComponentManifest({ manifestVersion: 3, props: {} }).ok).toBe(false);
     expect(
       parseComponentManifest({
-        manifestVersion: 1,
-        id: "x",
+        manifestVersion: 2,
         props: { a: { kind: "ref", refType: "user", optional: false } },
       }).ok,
     ).toBe(false);

From 4930a6fdd46010ceaaec3a0e7c6de92fa5cae804 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 9 Jul 2026 21:26:47 +0200
Subject: [PATCH 032/129] feat: PropBuilder.localizable() + manifest
 localizable flag

Components declare which string/image props carry localizable content:

  props: (p) => ({
    title: p.string().label("Title").localizable(),
    heroImage: p.image().localizable(),
  })

- PropBuilder.localizable(), this-constrained to string/image kinds
  (same trick as .editor()); return type re-narrows to the receiver's
  concrete kind so chaining order doesn't matter
- ManifestPropBase.localizable?: boolean, emitted only when true so
  non-localizable manifests stay byte-identical
- parseComponentManifest accepts the key on string/image props only

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 libraries/paywalls/src/authoring/manifest.ts  |  1 +
 libraries/paywalls/src/authoring/props.ts     | 16 +++++++
 .../paywalls/src/schema/component-manifest.ts |  2 +
 libraries/paywalls/src/schema/validate.ts     |  9 +++-
 libraries/paywalls/tests/manifest.test.tsx    | 47 +++++++++++++++++++
 libraries/paywalls/tests/types.test.ts        | 28 +++++++++++
 libraries/paywalls/tests/validate.test.tsx    | 32 +++++++++++++
 7 files changed, 134 insertions(+), 1 deletion(-)

diff --git a/libraries/paywalls/src/authoring/manifest.ts b/libraries/paywalls/src/authoring/manifest.ts
index 47f8fb916..8dff9a02e 100644
--- a/libraries/paywalls/src/authoring/manifest.ts
+++ b/libraries/paywalls/src/authoring/manifest.ts
@@ -77,6 +77,7 @@ const toManifestProp = (schema: PropSchema): ManifestProp => {
     ...(schema.label !== undefined ? { label: schema.label } : {}),
     ...(defaultValue !== undefined ? { default: defaultValue } : {}),
     ...(schema.editor !== undefined ? { editor: schema.editor } : {}),
+    ...(schema.localizable ? { localizable: true } : {}),
     // A prop with a default is omittable for consumers, so the manifest
     // reports it as optional even without an explicit `.optional()`.
     optional: schema.optional || schema.hasDefault,
diff --git a/libraries/paywalls/src/authoring/props.ts b/libraries/paywalls/src/authoring/props.ts
index 3154d902d..f63d9bcb6 100644
--- a/libraries/paywalls/src/authoring/props.ts
+++ b/libraries/paywalls/src/authoring/props.ts
@@ -26,6 +26,7 @@ export interface PropSchema {
   readonly options?: ReadonlyArray<string>;
   readonly refType?: ManifestRefType;
   readonly item?: PropSchema;
+  readonly localizable?: boolean;
 }
 
 /**
@@ -83,6 +84,21 @@ export class PropBuilder<
     return new PropBuilder({ ...this.schema, editor });
   }
 
+  /**
+   * Marks the prop as translatable per locale. Only `"string"` and `"image"`
+   * props carry localizable content (contract §2) — the `this` constraint makes
+   * the method uncallable on any other prop kind. The returned builder keeps the
+   * receiver's concrete kind so later kind-specific chaining (e.g. string-only
+   * `.editor()`) still works.
+   */
+  localizable(
+    this: PropBuilder<T, Opt, Def, "string" | "image">,
+  ): PropBuilder<T, Opt, Def, K> {
+    // The returned builder preserves the receiver's concrete kind `K`, which the
+    // `this` constraint widens to the localizable union; the cast re-narrows it.
+    return new PropBuilder({ ...this.schema, localizable: true }) as PropBuilder<T, Opt, Def, K>;
+  }
+
   /** Marks the prop as omittable; the template receives `T | undefined`. */
   optional(): PropBuilder<T, true, Def, K> {
     return new PropBuilder({ ...this.schema, optional: true });
diff --git a/libraries/paywalls/src/schema/component-manifest.ts b/libraries/paywalls/src/schema/component-manifest.ts
index a18a23107..130b9bf2c 100644
--- a/libraries/paywalls/src/schema/component-manifest.ts
+++ b/libraries/paywalls/src/schema/component-manifest.ts
@@ -36,6 +36,8 @@ interface ManifestPropBase {
   readonly default?: unknown;
   readonly editor?: ManifestPropEditor;
   readonly optional: boolean;
+  /** Whether this prop's value is translated per locale (`"string"`/`"image"` only). */
+  readonly localizable?: boolean;
 }
 
 export interface ManifestStringProp extends ManifestPropBase {
diff --git a/libraries/paywalls/src/schema/validate.ts b/libraries/paywalls/src/schema/validate.ts
index b0a1aaee1..e93844f02 100644
--- a/libraries/paywalls/src/schema/validate.ts
+++ b/libraries/paywalls/src/schema/validate.ts
@@ -296,7 +296,9 @@ const PROP_COMMON_KEYS = [...PROP_META_KEYS, "default"];
 const propKeysFor = (kind: string): ReadonlySet<string> => {
   switch (kind) {
     case "string":
-      return new Set([...PROP_COMMON_KEYS, "editor"]);
+      return new Set([...PROP_COMMON_KEYS, "editor", "localizable"]);
+    case "image":
+      return new Set([...PROP_COMMON_KEYS, "localizable"]);
     case "select":
       return new Set([...PROP_COMMON_KEYS, "options"]);
     case "ref":
@@ -324,6 +326,11 @@ const validateCommonPropFields = (
   if (prop.optional !== undefined && typeof prop.optional !== "boolean") {
     errors.push(`${path}.optional must be a boolean`);
   }
+  // `localizable` is only an allowed key on string/image props (see
+  // `propKeysFor`); its value, when present, must be a boolean.
+  if (prop.localizable !== undefined && typeof prop.localizable !== "boolean") {
+    errors.push(`${path}.localizable must be a boolean`);
+  }
 };
 
 /**
diff --git a/libraries/paywalls/tests/manifest.test.tsx b/libraries/paywalls/tests/manifest.test.tsx
index 8f3243701..bb21eaea5 100644
--- a/libraries/paywalls/tests/manifest.test.tsx
+++ b/libraries/paywalls/tests/manifest.test.tsx
@@ -256,4 +256,51 @@ describe("extractComponentManifest", () => {
       optional: true,
     });
   });
+
+  it("emits localizable: true for string/image props marked .localizable()", () => {
+    const definition = defineComponent({
+      props: (p) => ({
+        title: p.string().label("Title").localizable(),
+        hero: p.image().localizable(),
+        subtitle: p.string(),
+      }),
+      render: () => <View />,
+    });
+
+    const manifest = extractComponentManifest(definition);
+    expect(manifest.props.title).toEqual({
+      kind: "string",
+      label: "Title",
+      localizable: true,
+      optional: false,
+    });
+    expect(manifest.props.hero).toEqual({
+      kind: "image",
+      localizable: true,
+      optional: false,
+    });
+    // Props without .localizable() carry no `localizable` key at all.
+    expect(manifest.props.subtitle).toEqual({ kind: "string", optional: false });
+    expect("localizable" in manifest.props.subtitle!).toBe(false);
+  });
+
+  it("is order-independent: .localizable() before or after other chains", () => {
+    const definition = defineComponent({
+      props: (p) => ({
+        before: p.string().localizable().default("hi").label("Before"),
+        after: p.string().label("After").default("hi").localizable(),
+      }),
+      render: () => <View />,
+    });
+
+    const manifest = extractComponentManifest(definition);
+    const expected = {
+      kind: "string",
+      localizable: true,
+      default: "hi",
+      optional: true,
+    };
+    expect(manifest.props.before).toEqual({ ...expected, label: "Before" });
+    expect(manifest.props.after).toEqual({ ...expected, label: "After" });
+  });
 });
diff --git a/libraries/paywalls/tests/types.test.ts b/libraries/paywalls/tests/types.test.ts
index c336aa429..1a8ce1593 100644
--- a/libraries/paywalls/tests/types.test.ts
+++ b/libraries/paywalls/tests/types.test.ts
@@ -65,6 +65,34 @@ describe("PropBuilder.editor() (contract §2: string props only)", () => {
   });
 });
 
+describe("PropBuilder.localizable() (contract §2: string/image props only)", () => {
+  it("is callable on string/image builders and uncallable on every other kind", () => {
+    // Callable on both localizable kinds.
+    expectTypeOf(p.string().localizable()).not.toBeNever();
+    expectTypeOf(p.image().localizable()).not.toBeNever();
+
+    // Chaining keeps working in any order and preserves the concrete kind, so
+    // string-only `.editor()` still resolves after `.localizable()`.
+    expectTypeOf(p.string().localizable().label("Title").default("Hi")).not.toBeNever();
+    expectTypeOf(p.string().label("Title").localizable()).not.toBeNever();
+    expectTypeOf(p.string().localizable().editor("color")).not.toBeNever();
+    expectTypeOf(p.image().default("https://cdn.test/x.png").localizable()).not.toBeNever();
+
+    // @ts-expect-error localizable() is a string/image-only marker
+    p.number().localizable();
+    // @ts-expect-error localizable() is a string/image-only marker
+    p.boolean().localizable();
+    // @ts-expect-error localizable() is a string/image-only marker
+    p.select(["a", "b"]).localizable();
+    // @ts-expect-error localizable() is a string/image-only marker
+    p.ref("product").localizable();
+    // @ts-expect-error localizable() is a string/image-only marker
+    p.component().localizable();
+    // @ts-expect-error localizable() is a string/image-only marker
+    p.array(p.string()).localizable();
+  });
+});
+
 describe("InferProps (template-facing)", () => {
   it("infers value types and optionality", () => {
     expectTypeOf<Props["required"]>().toEqualTypeOf<string>();
diff --git a/libraries/paywalls/tests/validate.test.tsx b/libraries/paywalls/tests/validate.test.tsx
index 877a4ddd3..7abf4daa9 100644
--- a/libraries/paywalls/tests/validate.test.tsx
+++ b/libraries/paywalls/tests/validate.test.tsx
@@ -303,6 +303,38 @@ describe("parseComponentManifest", () => {
     }
   });
 
+  it("accepts localizable on string and image props", () => {
+    expect(
+      parseComponentManifest({
+        manifestVersion: 2,
+        props: {
+          title: { kind: "string", localizable: true, optional: false },
+          hero: { kind: "image", localizable: true, optional: false },
+        },
+      }).ok,
+    ).toBe(true);
+  });
+
+  it("rejects localizable on a non-string/image prop and a non-boolean value", () => {
+    const wrongKind = parseComponentManifest({
+      manifestVersion: 2,
+      props: { a: { kind: "number", localizable: true, optional: false } },
+    });
+    expect(wrongKind.ok).toBe(false);
+    if (!wrongKind.ok) {
+      expect(wrongKind.errors.some((e) => e.includes('unknown key "localizable"'))).toBe(true);
+    }
+
+    const wrongType = parseComponentManifest({
+      manifestVersion: 2,
+      props: { a: { kind: "string", localizable: "yes", optional: false } },
+    });
+    expect(wrongType.ok).toBe(false);
+    if (!wrongType.ok) {
+      expect(wrongType.errors.some((e) => e.includes("localizable must be a boolean"))).toBe(true);
+    }
+  });
+
   it("rejects an array item that is itself an array", () => {
     const result = parseComponentManifest({
       manifestVersion: 2,

From 85c40dad67a0b769b0ca76ce52634c1cb84ea363 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 9 Jul 2026 23:20:00 +0200
Subject: [PATCH 033/129] feat(paywalls): add mobile-first motion primitives

---
 libraries/paywalls/src/index.ts               |  42 +++
 libraries/paywalls/src/motion/animation.ts    | 144 ++++++++
 libraries/paywalls/src/motion/context.tsx     |  49 +++
 libraries/paywalls/src/motion/drag.ts         |  52 +++
 libraries/paywalls/src/motion/hooks.ts        | 107 ++++++
 libraries/paywalls/src/motion/platform.tsx    |  31 ++
 libraries/paywalls/src/motion/ref.ts          |   7 +
 libraries/paywalls/src/motion/resolve.ts      |  70 ++++
 libraries/paywalls/src/motion/scroll.ts       | 184 ++++++++++
 libraries/paywalls/src/motion/transform.ts    |  35 ++
 libraries/paywalls/src/motion/types.ts        | 239 +++++++++++++
 libraries/paywalls/src/motion/value.ts        |  65 ++++
 .../paywalls/src/primitives/components.tsx    |  33 +-
 .../paywalls/src/primitives/host-context.tsx  |  12 +-
 libraries/paywalls/src/primitives/types.ts    |  51 ++-
 libraries/paywalls/src/renderer/dom-drag.ts   | 193 +++++++++++
 libraries/paywalls/src/renderer/dom-host.tsx  | 317 +++++++++++-------
 libraries/paywalls/src/renderer/dom-motion.ts | 284 ++++++++++++++++
 libraries/paywalls/src/schema/node-tree.ts    |   9 +-
 .../src/tree-renderer/render-to-node-tree.tsx |  40 ++-
 .../paywalls/src/tree-renderer/tree-host.ts   |  52 ++-
 libraries/paywalls/src/tree.ts                |   2 +
 libraries/paywalls/tests/motion.test.ts       |  65 ++++
 libraries/paywalls/tests/tree.test.tsx        |  34 +-
 libraries/paywalls/tests/types.test.ts        |  15 +
 25 files changed, 1953 insertions(+), 179 deletions(-)
 create mode 100644 libraries/paywalls/src/motion/animation.ts
 create mode 100644 libraries/paywalls/src/motion/context.tsx
 create mode 100644 libraries/paywalls/src/motion/drag.ts
 create mode 100644 libraries/paywalls/src/motion/hooks.ts
 create mode 100644 libraries/paywalls/src/motion/platform.tsx
 create mode 100644 libraries/paywalls/src/motion/ref.ts
 create mode 100644 libraries/paywalls/src/motion/resolve.ts
 create mode 100644 libraries/paywalls/src/motion/scroll.ts
 create mode 100644 libraries/paywalls/src/motion/transform.ts
 create mode 100644 libraries/paywalls/src/motion/types.ts
 create mode 100644 libraries/paywalls/src/motion/value.ts
 create mode 100644 libraries/paywalls/src/renderer/dom-drag.ts
 create mode 100644 libraries/paywalls/src/renderer/dom-motion.ts
 create mode 100644 libraries/paywalls/tests/motion.test.ts

diff --git a/libraries/paywalls/src/index.ts b/libraries/paywalls/src/index.ts
index 7248d5657..b4984eb68 100644
--- a/libraries/paywalls/src/index.ts
+++ b/libraries/paywalls/src/index.ts
@@ -81,6 +81,48 @@ export type {
   ViewProps,
 } from "./primitives/types";
 export { domHostComponents } from "./renderer/dom-host";
+// ── Motion ─────────────────────────────────────────────────────────────────
+export { MotionConfig, useMotionConfig, useReducedMotion } from "./motion/context";
+export { domMotionPlatformAdapter, staticMotionPlatformAdapter, useMotionPlatform } from "./motion/platform";
+export { useMotionValue, useMotionValueEvent, useSpring, useTransform, useVelocity } from "./motion/hooks";
+export { useDragControls } from "./motion/drag";
+export { useMotionRef } from "./motion/ref";
+export { useInView, useScroll } from "./motion/scroll";
+export { compileMotionCss, compileMotionTransform } from "./motion/transform";
+export { motionValue, type MotionValue, type MotionValueEventName } from "./motion/value";
+export {
+  MOTION_STYLE_KEYS,
+  type AnimationControls,
+  type DragAxis,
+  type DragConstraints,
+  type DragControls,
+  type DragInfo,
+  type DraggableMotionProps,
+  type MotionConfigProps,
+  type MotionGestureEvent,
+  type MotionLayoutBox,
+  type MotionNodeHandle,
+  type MotionPlatformAdapter,
+  type MotionRef,
+  type MotionScrollMetrics,
+  type MotionStyle,
+  type MotionStyleKey,
+  type MotionStyleObject,
+  type MotionStyleProp,
+  type MotionTarget,
+  type MotionTransformOrigin,
+  type MotionVisualProps,
+  type PressableMotionProps,
+  type ReducedMotion,
+  type ResolvedMotionStyle,
+  type ScrollMotionValues,
+  type ScrollViewHandle,
+  type Transition,
+  type TransitionByKey,
+  type UseScrollOptions,
+  type VariantLabel,
+  type ViewportOptions,
+} from "./motion/types";
 // ── Renderer / runtime ───────────────────────────────────────────────────────
 export {
   PaywallRenderer,
diff --git a/libraries/paywalls/src/motion/animation.ts b/libraries/paywalls/src/motion/animation.ts
new file mode 100644
index 000000000..ebe1006a8
--- /dev/null
+++ b/libraries/paywalls/src/motion/animation.ts
@@ -0,0 +1,144 @@
+import type { MotionValue } from "./value";
+import type { MotionPlatformAdapter, Transition } from "./types";
+
+/** A deterministic frame source used by animation contract tests and platform adapters. */
+export interface FrameDriver {
+  now(): number;
+  requestFrame(callback: (time: number) => void): number;
+  cancelFrame(frame: number): void;
+}
+
+/** Creates a manual frame driver. Advance it explicitly with `step`. */
+export const createManualFrameDriver = (): FrameDriver & { step(time: number): void } => {
+  let now = 0;
+  let nextId = 0;
+  const callbacks = new Map<number, (time: number) => void>();
+  return {
+    now: () => now,
+    requestFrame: (callback) => {
+      nextId += 1;
+      callbacks.set(nextId, callback);
+      return nextId;
+    },
+    cancelFrame: (frame) => {
+      callbacks.delete(frame);
+    },
+    step: (time) => {
+      now = time;
+      const frameCallbacks = [...callbacks.values()];
+      callbacks.clear();
+      for (const callback of frameCallbacks) {
+        callback(time);
+      }
+    },
+  };
+};
+
+/** Browser-safe default frame driver. It does not read browser globals at module evaluation. */
+export const defaultFrameDriver: FrameDriver = {
+  now: () => (typeof performance === "undefined" ? Date.now() : performance.now()),
+  requestFrame: (callback) =>
+    typeof requestAnimationFrame === "undefined"
+      ? setTimeout(() => callback(Date.now()), 16) as unknown as number
+      : requestAnimationFrame(callback),
+  cancelFrame: (frame) => {
+    if (typeof cancelAnimationFrame === "undefined") {
+      clearTimeout(frame);
+    } else {
+      cancelAnimationFrame(frame);
+    }
+  },
+};
+
+/** Converts a renderer adapter into the generic animation frame driver. */
+export const frameDriverFromAdapter = (adapter: MotionPlatformAdapter): FrameDriver => adapter;
+
+const ease = (value: number, definition: Transition["ease"]): number => {
+  switch (definition) {
+    case "easeIn":
+      return value * value;
+    case "easeOut":
+      return 1 - (1 - value) * (1 - value);
+    case "easeInOut":
+      return value < 0.5 ? 2 * value * value : 1 - (-2 * value + 2) ** 2 / 2;
+    default:
+      return value;
+  }
+};
+
+/** Starts an interruptible numeric tween or spring and returns its cancellation function. */
+export const animateMotionValue = (
+  value: MotionValue<number>,
+  target: number,
+  transition: Transition = {},
+  driver: FrameDriver = defaultFrameDriver,
+  reducedMotion = false,
+  onComplete?: () => void,
+): (() => void) => {
+  if (reducedMotion || Object.is(value.get(), target)) {
+    value.set(target);
+    onComplete?.();
+    return () => undefined;
+  }
+
+  let cancelled = false;
+  let frame: number | undefined;
+  const from = value.get();
+  const startedAt = driver.now() + (transition.delay ?? 0) * 1000;
+  const type = transition.type ?? "tween";
+  const duration = Math.max(0.001, transition.duration ?? 0.3) * 1000;
+  let position = from;
+  let velocity = transition.velocity ?? 0;
+  let previousTime = startedAt;
+
+  const finish = () => {
+    value.set(target);
+    onComplete?.();
+  };
+
+  const tick = (time: number) => {
+    if (cancelled) {
+      return;
+    }
+    if (time < startedAt) {
+      frame = driver.requestFrame(tick);
+      return;
+    }
+    if (type === "tween") {
+      const progress = Math.min(1, (time - startedAt) / duration);
+      value.set(from + (target - from) * ease(progress, transition.ease));
+      if (progress >= 1) {
+        finish();
+      } else {
+        frame = driver.requestFrame(tick);
+      }
+      return;
+    }
+
+    const delta = Math.min(0.064, Math.max(0.001, (time - previousTime) / 1000));
+    previousTime = time;
+    const stiffness = transition.stiffness ?? 170;
+    const damping = transition.damping ?? 26;
+    const mass = transition.mass ?? 1;
+    const acceleration = (stiffness * (target - position) - damping * velocity) / mass;
+    velocity += acceleration * delta;
+    position += velocity * delta;
+    value.set(position);
+    if (
+      Math.abs(target - position) <= (transition.restDelta ?? 0.01) &&
+      Math.abs(velocity) <= (transition.restSpeed ?? 0.01)
+    ) {
+      finish();
+    } else {
+      frame = driver.requestFrame(tick);
+    }
+  };
+
+  frame = driver.requestFrame(tick);
+  return () => {
+    cancelled = true;
+    if (frame !== undefined) {
+      driver.cancelFrame(frame);
+    }
+  };
+};
diff --git a/libraries/paywalls/src/motion/context.tsx b/libraries/paywalls/src/motion/context.tsx
new file mode 100644
index 000000000..e992a1920
--- /dev/null
+++ b/libraries/paywalls/src/motion/context.tsx
@@ -0,0 +1,49 @@
+import { createContext, type ReactNode, useContext, useMemo } from "react";
+
+import type { MotionConfigProps, ReducedMotion, Transition, TransitionByKey } from "./types";
+import { useMotionPlatform } from "./platform";
+
+interface MotionConfigSnapshot {
+  readonly reducedMotion: ReducedMotion;
+  readonly transition: Transition | TransitionByKey | undefined;
+}
+
+const DEFAULT_CONFIG: MotionConfigSnapshot = {
+  reducedMotion: "user",
+  transition: undefined,
+};
+
+const MotionConfigContext = createContext<MotionConfigSnapshot>(DEFAULT_CONFIG);
+
+/** Configures inherited transition defaults and reduced-motion behaviour. */
+export const MotionConfig = ({
+  children,
+  reducedMotion,
+  transition,
+}: MotionConfigProps): ReactNode => {
+  const parent = useContext(MotionConfigContext);
+  const value = useMemo<MotionConfigSnapshot>(
+    () => ({
+      reducedMotion: reducedMotion ?? parent.reducedMotion,
+      transition: transition ?? parent.transition,
+    }),
+    [parent, reducedMotion, transition],
+  );
+  return <MotionConfigContext.Provider value={value}>{children}</MotionConfigContext.Provider>;
+};
+
+/** Returns inherited motion configuration for adapter implementations. */
+export const useMotionConfig = (): MotionConfigSnapshot => useContext(MotionConfigContext);
+
+/** Returns the resolved reduced-motion policy for the current motion subtree. */
+export const useReducedMotion = (): boolean => {
+  const { reducedMotion } = useMotionConfig();
+  const platform = useMotionPlatform();
+  if (reducedMotion === "always") {
+    return true;
+  }
+  if (reducedMotion === "never") {
+    return false;
+  }
+  return platform.prefersReducedMotion();
+};
diff --git a/libraries/paywalls/src/motion/drag.ts b/libraries/paywalls/src/motion/drag.ts
new file mode 100644
index 000000000..8ff06f6e9
--- /dev/null
+++ b/libraries/paywalls/src/motion/drag.ts
@@ -0,0 +1,52 @@
+import { useRef } from "react";
+
+import type { DragAxis, DragControls, MotionGestureEvent } from "./types";
+
+interface DragStartOptions {
+  readonly snapToCursor?: boolean;
+  readonly distanceThreshold?: number;
+}
+
+type DragStarter = (event: MotionGestureEvent, options: DragStartOptions | undefined) => void;
+
+class DragControlsImpl implements DragControls {
+  #starter: DragStarter | undefined;
+
+  register(starter: DragStarter | undefined): void {
+    this.#starter = starter;
+  }
+
+  start(event: MotionGestureEvent, options?: DragStartOptions): void {
+    this.#starter?.(event, options);
+  }
+}
+
+/** Creates controls that can start a draggable primitive from a separate handle. */
+export const useDragControls = (): DragControls => {
+  const controls = useRef<DragControlsImpl | null>(null);
+  if (controls.current === null) controls.current = new DragControlsImpl();
+  return controls.current;
+};
+
+/** Determines drag-versus-scroll ownership after a direction has been established. */
+export const resolveDragGestureWinner = (input: {
+  readonly drag: DragAxis | undefined;
+  readonly direction: "x" | "y";
+  readonly scrollAxis: "x" | "y" | undefined;
+  readonly gesturePriority?: "auto" | "drag";
+}): "drag" | "scroll" | "none" => {
+  if (!input.drag || (input.drag !== true && input.drag !== input.direction)) return "none";
+  if (!input.scrollAxis || input.scrollAxis !== input.direction || input.gesturePriority === "drag") {
+    return "drag";
+  }
+  return "scroll";
+};
+
+/** Internal registration hook shared by the DOM drag adapter and public controls. */
+export const useDragControlRegistration = (
+  controls: DragControls | undefined,
+  starter: DragStarter | undefined,
+): void => {
+  const concrete = controls instanceof DragControlsImpl ? controls : undefined;
+  concrete?.register(starter);
+};
diff --git a/libraries/paywalls/src/motion/hooks.ts b/libraries/paywalls/src/motion/hooks.ts
new file mode 100644
index 000000000..178ce0e00
--- /dev/null
+++ b/libraries/paywalls/src/motion/hooks.ts
@@ -0,0 +1,107 @@
+import { useEffect, useMemo, useRef } from "react";
+
+import { animateMotionValue } from "./animation";
+import type { MotionValue } from "./value";
+import { motionValue } from "./value";
+import type { Transition } from "./types";
+
+/** Creates one stable mutable motion value for the lifetime of a component. */
+export const useMotionValue = <T,>(initial: T): MotionValue<T> => {
+  const value = useRef<MotionValue<T> | null>(null);
+  if (value.current === null) {
+    value.current = motionValue(initial);
+  }
+  return value.current;
+};
+
+/** Derives a motion value with a mapping function without subscribing React to frames. */
+export function useTransform<T, U>(
+  source: MotionValue<T>,
+  transformer: (value: T) => U,
+): MotionValue<U>;
+/** Maps a numeric motion value from one range to another. */
+export function useTransform(
+  source: MotionValue<number>,
+  inputRange: ReadonlyArray<number>,
+  outputRange: ReadonlyArray<number>,
+): MotionValue<number>;
+export function useTransform<T, U>(
+  source: MotionValue<T>,
+  transformerOrInputRange: ((value: T) => U) | ReadonlyArray<number>,
+  outputRange?: ReadonlyArray<number>,
+): MotionValue<U> {
+  const transformer = useMemo(() => {
+    if (typeof transformerOrInputRange === "function") {
+      return transformerOrInputRange;
+    }
+    const input = transformerOrInputRange;
+    const output = outputRange ?? [];
+    return ((value: T): U => {
+      const number = value as unknown as number;
+      if (input.length < 2 || output.length !== input.length) {
+        return output[0] as U;
+      }
+      let index = input.length - 2;
+      for (let candidate = 0; candidate < input.length - 1; candidate += 1) {
+        if (number <= input[candidate + 1]!) {
+          index = candidate;
+          break;
+        }
+      }
+      const start = input[index]!;
+      const end = input[index + 1]!;
+      const progress = end === start ? 0 : Math.min(1, Math.max(0, (number - start) / (end - start)));
+      return (output[index]! + (output[index + 1]! - output[index]!) * progress) as U;
+    }) as (value: T) => U;
+  }, [outputRange, transformerOrInputRange]);
+  const value = useMotionValue(transformer(source.get()));
+
+  useEffect(() => source.on("change", (next) => value.set(transformer(next))), [source, transformer, value]);
+  return value;
+}
+
+/** Smooths a numeric source with an interruptible spring, without React frame updates. */
+export const useSpring = (
+  source: MotionValue<number>,
+  transition: Transition = {},
+): MotionValue<number> => {
+  const value = useMotionValue(source.get());
+  useEffect(() => {
+    let stop: () => void = () => undefined;
+    const unsubscribe = source.on("change", (next) => {
+      stop();
+      stop = animateMotionValue(value, next, { ...transition, type: "spring" });
+    });
+    return () => {
+      stop();
+      unsubscribe();
+    };
+  }, [source, transition, value]);
+  return value;
+};
+
+/** Derives velocity in logical units per second from a numeric motion value. */
+export const useVelocity = (source: MotionValue<number>): MotionValue<number> => {
+  const velocity = useMotionValue(0);
+  useEffect(() => {
+    let time = typeof performance === "undefined" ? Date.now() : performance.now();
+    let previous = source.get();
+    return source.on("change", (next) => {
+      const nextTime = typeof performance === "undefined" ? Date.now() : performance.now();
+      const elapsed = Math.max(1, nextTime - time);
+      velocity.set(((next - previous) / elapsed) * 1000);
+      previous = next;
+      time = nextTime;
+    });
+  }, [source, velocity]);
+  return velocity;
+};
+
+/** Subscribes to motion values without coupling changes to a React render. */
+export const useMotionValueEvent = <T,>(
+  value: MotionValue<T>,
+  eventName: "change" | "renderRequest",
+  listener: (value: T) => void,
+): void => {
+  useEffect(() => value.on(eventName, listener), [eventName, listener, value]);
+};
diff --git a/libraries/paywalls/src/motion/platform.tsx b/libraries/paywalls/src/motion/platform.tsx
new file mode 100644
index 000000000..6b58ea96f
--- /dev/null
+++ b/libraries/paywalls/src/motion/platform.tsx
@@ -0,0 +1,31 @@
+import { createContext, useContext } from "react";
+
+import type { MotionPlatformAdapter } from "./types";
+
+/** DOM/WebView implementation of the platform clock and accessibility preference boundary. */
+export const domMotionPlatformAdapter: MotionPlatformAdapter = {
+  cancelFrame: (frame) => {
+    if (typeof cancelAnimationFrame === "undefined") clearTimeout(frame);
+    else cancelAnimationFrame(frame);
+  },
+  now: () => (typeof performance === "undefined" ? Date.now() : performance.now()),
+  prefersReducedMotion: () =>
+    typeof window !== "undefined" && window.matchMedia?.("(prefers-reduced-motion: reduce)").matches === true,
+  requestFrame: (callback) =>
+    typeof requestAnimationFrame === "undefined"
+      ? setTimeout(() => callback(Date.now()), 16) as unknown as number
+      : requestAnimationFrame(callback),
+};
+
+/** Static tree implementation: it never schedules motion or observes input. */
+export const staticMotionPlatformAdapter: MotionPlatformAdapter = {
+  cancelFrame: () => undefined,
+  now: () => 0,
+  prefersReducedMotion: () => true,
+  requestFrame: () => 0,
+};
+
+export const MotionPlatformContext = createContext<MotionPlatformAdapter>(domMotionPlatformAdapter);
+
+/** Returns the platform adapter installed by the active renderer. */
+export const useMotionPlatform = (): MotionPlatformAdapter => useContext(MotionPlatformContext);
diff --git a/libraries/paywalls/src/motion/ref.ts b/libraries/paywalls/src/motion/ref.ts
new file mode 100644
index 000000000..d8c6c7cd2
--- /dev/null
+++ b/libraries/paywalls/src/motion/ref.ts
@@ -0,0 +1,7 @@
+import { useRef } from "react";
+
+import type { MotionNodeHandle, MotionRef } from "./types";
+
+/** Creates a renderer-neutral ref for a motion-capable primitive. */
+export const useMotionRef = <T extends MotionNodeHandle = MotionNodeHandle>(): MotionRef<T> =>
+  useRef<T | null>(null);
diff --git a/libraries/paywalls/src/motion/resolve.ts b/libraries/paywalls/src/motion/resolve.ts
new file mode 100644
index 000000000..9664fdc99
--- /dev/null
+++ b/libraries/paywalls/src/motion/resolve.ts
@@ -0,0 +1,70 @@
+import { flattenStyle } from "../style/resolve";
+import { isMotionValue } from "./value";
+import {
+  MOTION_STYLE_KEYS,
+  type AnimationControls,
+  type MotionStyleProp,
+  type MotionTarget,
+  type MotionVisualProps,
+  type ResolvedMotionStyle,
+  type VariantLabel,
+} from "./types";
+
+const isAnimationControls = (value: unknown): value is AnimationControls =>
+  typeof value === "object" && value !== null && "start" in value && "stop" in value;
+
+/** Resolves an inline target or one or more named variants. */
+export const resolveMotionDefinition = (
+  definition: MotionTarget | VariantLabel | AnimationControls | false | undefined,
+  variants: MotionVisualProps["variants"],
+): MotionTarget | undefined => {
+  if (!definition || isAnimationControls(definition)) {
+    return undefined;
+  }
+  const labels =
+    typeof definition === "string"
+      ? [definition]
+      : Array.isArray(definition)
+        ? definition
+        : undefined;
+  if (!labels) return definition as MotionTarget;
+  return labels.reduce<MotionTarget>((target, label) => ({
+    ...target,
+    ...variants?.[label],
+  }), {});
+};
+
+/** Resolves literal motion style values, deliberately excluding live values from static artifacts. */
+export const resolveLiteralMotionStyle = (style: MotionStyleProp | undefined): ResolvedMotionStyle => {
+  const flat = flattenStyle(style as never) as Record<string, unknown>;
+  const out: Record<string, unknown> = {};
+  for (const key of MOTION_STYLE_KEYS) {
+    const value = flat[key];
+    if (value !== undefined && !isMotionValue(value)) {
+      out[key] = value;
+    }
+  }
+  return out as ResolvedMotionStyle;
+};
+
+/** Resolves a primitive's deterministic rest visual state for static hosts. */
+export const resolveMotionRestStyle = (
+  props: Pick<MotionVisualProps, "animate" | "initial" | "variants">,
+  style: MotionStyleProp | undefined,
+): ResolvedMotionStyle => {
+  const animate = resolveMotionDefinition(props.animate, props.variants);
+  const initial = resolveMotionDefinition(props.initial, props.variants);
+  return {
+    ...resolveLiteralMotionStyle(style),
+    ...(animate ?? initial),
+  };
+};
+
+/** Resolves the visual state that should be mounted before an enter animation begins. */
+export const resolveMotionInitialStyle = (
+  props: Pick<MotionVisualProps, "animate" | "initial" | "variants">,
+  style: MotionStyleProp | undefined,
+): ResolvedMotionStyle => ({
+  ...resolveLiteralMotionStyle(style),
+  ...resolveMotionDefinition(props.initial, props.variants),
+});
diff --git a/libraries/paywalls/src/motion/scroll.ts b/libraries/paywalls/src/motion/scroll.ts
new file mode 100644
index 000000000..6a964b907
--- /dev/null
+++ b/libraries/paywalls/src/motion/scroll.ts
@@ -0,0 +1,184 @@
+import { useEffect, useState } from "react";
+
+import { useMotionValue } from "./hooks";
+import type {
+  MotionLayoutBox,
+  MotionNodeHandle,
+  MotionRef,
+  MotionScrollMetrics,
+  ScrollMotionValues,
+  ScrollViewHandle,
+  UseScrollOptions,
+  ViewportOptions,
+} from "./types";
+
+const clamp = (value: number): number => Math.min(1, Math.max(0, value));
+
+const rootMetrics = (): MotionScrollMetrics => {
+  if (typeof window === "undefined" || typeof document === "undefined") {
+    return { contentHeight: 0, contentWidth: 0, viewportHeight: 0, viewportWidth: 0, x: 0, y: 0 };
+  }
+  const root = document.documentElement;
+  return {
+    contentHeight: Math.max(root.scrollHeight, document.body?.scrollHeight ?? 0),
+    contentWidth: Math.max(root.scrollWidth, document.body?.scrollWidth ?? 0),
+    viewportHeight: window.innerHeight,
+    viewportWidth: window.innerWidth,
+    x: window.scrollX,
+    y: window.scrollY,
+  };
+};
+
+const parseAnchor = (value: string, size: number): number => {
+  if (value === "start") return 0;
+  if (value === "center") return size / 2;
+  if (value === "end") return size;
+  if (value.endsWith("%")) return (Number.parseFloat(value) / 100) * size;
+  const parsed = Number.parseFloat(value);
+  return Number.isFinite(parsed) ? parsed : 0;
+};
+
+const targetProgress = (
+  metrics: MotionScrollMetrics,
+  target: MotionLayoutBox,
+  container: MotionLayoutBox | null,
+  axis: "x" | "y",
+  offsets: readonly [string, string],
+): number => {
+  const isX = axis === "x";
+  const targetStart = isX ? target.x : target.y;
+  const targetSize = isX ? target.width : target.height;
+  const containerStart = container ? (isX ? container.x : container.y) : 0;
+  const viewportSize = isX ? metrics.viewportWidth : metrics.viewportHeight;
+  const scroll = isX ? metrics.x : metrics.y;
+  const points = offsets.map((offset) => {
+    const [targetAnchor = "start", containerAnchor = "start"] = offset.trim().split(/\s+/);
+    return targetStart - containerStart + parseAnchor(targetAnchor, targetSize) - parseAnchor(containerAnchor, viewportSize);
+  });
+  const span = points[1]! - points[0]!;
+  return span === 0 ? 0 : clamp((scroll - points[0]!) / span);
+};
+
+/** Tracks root or nested-scroll positions and progress in logical pixels. */
+export const useScroll = (options: UseScrollOptions = {}): ScrollMotionValues => {
+  const scrollX = useMotionValue(0);
+  const scrollY = useMotionValue(0);
+  const scrollXProgress = useMotionValue(0);
+  const scrollYProgress = useMotionValue(0);
+  const axis = options.axis ?? "y";
+  const offsets = options.offset ?? ["start end", "end start"];
+
+  useEffect(() => {
+    const container = options.container?.current;
+    const target = options.target?.current;
+    let pending = false;
+    let frame: number | undefined;
+    const read = () => {
+      pending = false;
+      const metrics = container?.getScrollMetrics() ?? rootMetrics();
+      scrollX.set(metrics.x);
+      scrollY.set(metrics.y);
+      const containerBox = container?.measure() ?? null;
+      const targetBox = target?.measure() ?? null;
+      if (targetBox) {
+        const progress = targetProgress(metrics, targetBox, containerBox, axis, offsets);
+        if (axis === "x") scrollXProgress.set(progress);
+        else scrollYProgress.set(progress);
+      } else {
+        scrollXProgress.set(
+          metrics.contentWidth <= metrics.viewportWidth
+            ? 0
+            : clamp(metrics.x / (metrics.contentWidth - metrics.viewportWidth)),
+        );
+        scrollYProgress.set(
+          metrics.contentHeight <= metrics.viewportHeight
+            ? 0
+            : clamp(metrics.y / (metrics.contentHeight - metrics.viewportHeight)),
+        );
+      }
+    };
+    const schedule = () => {
+      if (pending) return;
+      pending = true;
+      if (typeof requestAnimationFrame === "undefined") {
+        queueMicrotask(read);
+      } else {
+        frame = requestAnimationFrame(read);
+      }
+    };
+    read();
+    const subscriptions = [
+      container?.subscribeScroll(schedule),
+      options.trackLayout ? container?.subscribeLayout(schedule) : undefined,
+      options.trackLayout ? target?.subscribeLayout(schedule) : undefined,
+    ].filter((unsubscribe): unsubscribe is () => void => unsubscribe !== undefined);
+    if (!container && typeof window !== "undefined") {
+      window.addEventListener("scroll", schedule, { passive: true });
+      window.addEventListener("resize", schedule);
+      subscriptions.push(() => {
+        window.removeEventListener("scroll", schedule);
+        window.removeEventListener("resize", schedule);
+      });
+    }
+    return () => {
+      if (frame !== undefined && typeof cancelAnimationFrame !== "undefined") cancelAnimationFrame(frame);
+      subscriptions.forEach((unsubscribe) => unsubscribe());
+    };
+  }, [axis, offsets, options.container, options.target, options.trackLayout, scrollX, scrollXProgress, scrollY, scrollYProgress]);
+
+  return { scrollX, scrollXProgress, scrollY, scrollYProgress };
+};
+
+const intersectionRatio = (target: MotionLayoutBox, root: MotionLayoutBox): number => {
+  const left = Math.max(target.x, root.x);
+  const top = Math.max(target.y, root.y);
+  const right = Math.min(target.x + target.width, root.x + root.width);
+  const bottom = Math.min(target.y + target.height, root.y + root.height);
+  const area = Math.max(0, right - left) * Math.max(0, bottom - top);
+  const targetArea = target.width * target.height;
+  return targetArea === 0 ? 0 : area / targetArea;
+};
+
+/** Returns whether a motion node is in view, updating only when the boolean changes. */
+export const useInView = (
+  ref: MotionRef<MotionNodeHandle>,
+  options: ViewportOptions = {},
+): boolean => {
+  const [inView, setInView] = useState(false);
+  const [hasEntered, setHasEntered] = useState(false);
+
+  useEffect(() => {
+    const target = ref.current;
+    const root = options.root?.current;
+    if (!target) return;
+    const threshold = options.amount === "all" ? 1 : options.amount === "some" ? 0.01 : options.amount ?? 0;
+    const read = () => {
+      const targetBox = target.measure();
+      const rootBox = root?.measure() ?? (typeof window === "undefined"
+        ? null
+        : { height: window.innerHeight, width: window.innerWidth, x: 0, y: 0 });
+      if (!targetBox || !rootBox) return;
+      const next = intersectionRatio(targetBox, rootBox) >= threshold;
+      if (options.once && hasEntered) return;
+      setInView(next);
+      if (next) setHasEntered(true);
+    };
+    read();
+    const unsubscribes = [target.subscribeLayout(read), root?.subscribeLayout(read)].filter(
+      (unsubscribe): unsubscribe is () => void => unsubscribe !== undefined,
+    );
+    if (root && "subscribeScroll" in root) {
+      unsubscribes.push((root as unknown as ScrollViewHandle).subscribeScroll(read));
+    } else if (!root && typeof window !== "undefined") {
+      window.addEventListener("scroll", read, { passive: true });
+      window.addEventListener("resize", read);
+      unsubscribes.push(() => {
+        window.removeEventListener("scroll", read);
+        window.removeEventListener("resize", read);
+      });
+    }
+    return () => unsubscribes.forEach((unsubscribe) => unsubscribe());
+  }, [hasEntered, options.amount, options.once, options.root, ref]);
+
+  return inView;
+};
diff --git a/libraries/paywalls/src/motion/transform.ts b/libraries/paywalls/src/motion/transform.ts
new file mode 100644
index 000000000..26493c27b
--- /dev/null
+++ b/libraries/paywalls/src/motion/transform.ts
@@ -0,0 +1,35 @@
+import type { ResolvedMotionStyle } from "./types";
+
+/** Compiles a resolved motion transform in the canonical cross-renderer order. */
+export const compileMotionTransform = (style: ResolvedMotionStyle): string | undefined => {
+  const transforms: string[] = [];
+  if (style.x !== undefined || style.y !== undefined) {
+    transforms.push(`translate3d(${style.x ?? 0}px, ${style.y ?? 0}px, 0)`);
+  }
+  if (style.rotate !== undefined) {
+    transforms.push(`rotate(${style.rotate}deg)`);
+  }
+  if (style.scale !== undefined) {
+    transforms.push(`scale(${style.scale})`);
+  }
+  if (style.scaleX !== undefined) {
+    transforms.push(`scaleX(${style.scaleX})`);
+  }
+  if (style.scaleY !== undefined) {
+    transforms.push(`scaleY(${style.scaleY})`);
+  }
+  return transforms.length === 0 ? undefined : transforms.join(" ");
+};
+
+/** Lowers resolved motion into the narrow visual CSS output owned by adapters. */
+export const compileMotionCss = (style: ResolvedMotionStyle): Record<string, string | number> => {
+  const transform = compileMotionTransform(style);
+  return {
+    ...(style.opacity === undefined ? {} : { opacity: style.opacity }),
+    ...(style.backgroundColor === undefined ? {} : { backgroundColor: style.backgroundColor }),
+    ...(transform === undefined ? {} : { transform }),
+    ...(style.transformOrigin === undefined
+      ? {}
+      : { transformOrigin: `${style.transformOrigin.x * 100}% ${style.transformOrigin.y * 100}%` }),
+  };
+};
diff --git a/libraries/paywalls/src/motion/types.ts b/libraries/paywalls/src/motion/types.ts
new file mode 100644
index 000000000..e7d5dcfe4
--- /dev/null
+++ b/libraries/paywalls/src/motion/types.ts
@@ -0,0 +1,239 @@
+import type { PaywallStyle } from "../schema/style";
+import type { MotionValue } from "./value";
+
+/** The compositor-safe keys supported by the first motion release. */
+export const MOTION_STYLE_KEYS = [
+  "x",
+  "y",
+  "scale",
+  "scaleX",
+  "scaleY",
+  "rotate",
+  "opacity",
+  "backgroundColor",
+  "transformOrigin",
+] as const;
+
+export type MotionStyleKey = (typeof MOTION_STYLE_KEYS)[number];
+
+/** A logical transform origin, expressed as fractions of the rendered box. */
+export interface MotionTransformOrigin {
+  readonly x: number;
+  readonly y: number;
+}
+
+/** A serializable, resolved visual state. This is the only motion data in preview trees. */
+export interface ResolvedMotionStyle {
+  readonly x?: number;
+  readonly y?: number;
+  readonly scale?: number;
+  readonly scaleX?: number;
+  readonly scaleY?: number;
+  readonly rotate?: number;
+  readonly opacity?: number;
+  readonly backgroundColor?: string;
+  readonly transformOrigin?: MotionTransformOrigin;
+}
+
+type MotionValueOr<T> = T | MotionValue<T>;
+
+/** Motion values that may be supplied through a primitive's `style` prop. */
+export interface MotionStyle {
+  readonly x?: MotionValueOr<number>;
+  readonly y?: MotionValueOr<number>;
+  readonly scale?: MotionValueOr<number>;
+  readonly scaleX?: MotionValueOr<number>;
+  readonly scaleY?: MotionValueOr<number>;
+  readonly rotate?: MotionValueOr<number>;
+  readonly opacity?: MotionValueOr<number>;
+  readonly backgroundColor?: MotionValueOr<string>;
+  readonly transformOrigin?: MotionValueOr<MotionTransformOrigin>;
+}
+
+/** The RN-compatible static style plus the limited motion output vocabulary. */
+export type MotionStyleObject = Omit<PaywallStyle, keyof MotionStyle> & MotionStyle;
+
+export type MotionStyleProp =
+  | MotionStyleObject
+  | false
+  | null
+  | undefined
+  | ReadonlyArray<MotionStyleProp>;
+
+/** A named visual state used by `variants`, `animate`, and interaction props. */
+export type MotionTarget = ResolvedMotionStyle;
+
+export type VariantLabel = string | ReadonlyArray<string>;
+
+export type EasingDefinition = "linear" | "easeIn" | "easeOut" | "easeInOut";
+
+/** Parameters shared by tween and spring motion transitions. */
+export interface Transition {
+  readonly type?: "tween" | "spring";
+  readonly delay?: number;
+  readonly duration?: number;
+  readonly ease?: EasingDefinition;
+  readonly stiffness?: number;
+  readonly damping?: number;
+  readonly mass?: number;
+  readonly velocity?: number;
+  readonly restDelta?: number;
+  readonly restSpeed?: number;
+}
+
+/** A transition with optional per-motion-key overrides. */
+export type TransitionByKey = Transition &
+  Partial<Record<MotionStyleKey | "default", Transition>>;
+
+/** A future-compatible imperative animation controller. */
+export interface AnimationControls {
+  start(definition: MotionTarget | VariantLabel): void;
+  stop(): void;
+}
+
+/** Geometry options shared by `whileInView` and `useInView`. */
+export interface ViewportOptions {
+  readonly once?: boolean;
+  readonly amount?: number | "some" | "all";
+  readonly margin?: string;
+  readonly root?: MotionRef<MotionNodeHandle>;
+}
+
+/** Common visual props accepted by every renderable primitive. */
+export interface MotionVisualProps {
+  readonly initial?: false | MotionTarget | VariantLabel;
+  readonly animate?: MotionTarget | VariantLabel | AnimationControls;
+  readonly variants?: Readonly<Record<string, MotionTarget>>;
+  readonly transition?: Transition | TransitionByKey;
+  readonly whileInView?: MotionTarget | VariantLabel;
+  readonly viewport?: ViewportOptions;
+  readonly onAnimationStart?: (definition: MotionTarget | VariantLabel) => void;
+  readonly onAnimationComplete?: (definition: MotionTarget | VariantLabel) => void;
+}
+
+/** Motion interactions supplied only by `Pressable`. */
+export interface PressableMotionProps {
+  readonly whilePress?: MotionTarget | VariantLabel;
+  readonly whileFocus?: MotionTarget | VariantLabel;
+}
+
+export type DragAxis = true | "x" | "y";
+
+/** A layout box in logical pixels. */
+export interface MotionLayoutBox {
+  readonly x: number;
+  readonly y: number;
+  readonly width: number;
+  readonly height: number;
+}
+
+/** Platform-neutral pointer data delivered to drag callbacks and controls. */
+export interface MotionGestureEvent {
+  readonly point: { readonly x: number; readonly y: number };
+  readonly pointerId: number;
+  readonly timeStamp: number;
+}
+
+/** Platform-neutral drag data in logical pixels. */
+export interface DragInfo {
+  readonly point: { readonly x: number; readonly y: number };
+  readonly delta: { readonly x: number; readonly y: number };
+  readonly offset: { readonly x: number; readonly y: number };
+  readonly velocity: { readonly x: number; readonly y: number };
+}
+
+/** Explicit logical bounds for a draggable element. */
+export interface DragConstraints {
+  readonly left?: number;
+  readonly right?: number;
+  readonly top?: number;
+  readonly bottom?: number;
+}
+
+/** Renderer-neutral node registration used by refs, scroll, and constraints. */
+export interface MotionNodeHandle {
+  measure(): MotionLayoutBox | null;
+  subscribeLayout(listener: () => void): () => void;
+}
+
+/** A node handle that can provide logical scroll metrics and events. */
+export interface ScrollViewHandle extends MotionNodeHandle {
+  getScrollMetrics(): MotionScrollMetrics;
+  scrollTo(offset: { readonly x?: number; readonly y?: number }): void;
+  subscribeScroll(listener: () => void): () => void;
+}
+
+/** Scroll offsets and dimensions, all in logical pixels. */
+export interface MotionScrollMetrics {
+  readonly x: number;
+  readonly y: number;
+  readonly viewportWidth: number;
+  readonly viewportHeight: number;
+  readonly contentWidth: number;
+  readonly contentHeight: number;
+}
+
+/** A renderer-neutral mutable ref populated by motion-capable primitives. */
+export interface MotionRef<T extends MotionNodeHandle = MotionNodeHandle> {
+  current: T | null;
+}
+
+/** Options for tracking a root or nested scroll container. */
+export interface UseScrollOptions {
+  readonly container?: MotionRef<ScrollViewHandle>;
+  readonly target?: MotionRef<MotionNodeHandle>;
+  readonly axis?: "x" | "y";
+  readonly offset?: readonly [string, string];
+  readonly trackLayout?: boolean;
+}
+
+/** Scroll motion values. Both axes are returned for composability. */
+export interface ScrollMotionValues {
+  readonly scrollX: MotionValue<number>;
+  readonly scrollY: MotionValue<number>;
+  readonly scrollXProgress: MotionValue<number>;
+  readonly scrollYProgress: MotionValue<number>;
+}
+
+/** Imperative controls associated with one draggable primitive. */
+export interface DragControls {
+  start(
+    event: MotionGestureEvent,
+    options?: { readonly snapToCursor?: boolean; readonly distanceThreshold?: number },
+  ): void;
+}
+
+/** Touch-first drag props accepted only by View, Image, and Pressable. */
+export interface DraggableMotionProps {
+  readonly drag?: DragAxis;
+  readonly dragConstraints?: DragConstraints | MotionRef<MotionNodeHandle>;
+  readonly dragElastic?: boolean | number;
+  readonly dragMomentum?: boolean;
+  readonly dragTransition?: Transition;
+  readonly dragDirectionLock?: boolean;
+  readonly dragListener?: boolean;
+  readonly dragControls?: DragControls;
+  readonly gesturePriority?: "auto" | "drag";
+  readonly whileDrag?: MotionTarget | VariantLabel;
+  readonly onDragStart?: (event: MotionGestureEvent, info: DragInfo) => void;
+  readonly onDrag?: (event: MotionGestureEvent, info: DragInfo) => void;
+  readonly onDragEnd?: (event: MotionGestureEvent, info: DragInfo) => void;
+}
+
+/** Reduced-motion policy inherited by a `MotionConfig` subtree. */
+export type ReducedMotion = "user" | "always" | "never";
+
+/** Configuration inherited by a motion subtree. */
+export interface MotionConfigProps {
+  readonly reducedMotion?: ReducedMotion;
+  readonly transition?: Transition | TransitionByKey;
+  readonly children?: import("react").ReactNode;
+}
+
+/** The small platform boundary motion needs from a host renderer. */
+export interface MotionPlatformAdapter {
+  requestFrame(callback: (time: number) => void): number;
+  cancelFrame(frame: number): void;
+  now(): number;
+  prefersReducedMotion(): boolean;
+}
diff --git a/libraries/paywalls/src/motion/value.ts b/libraries/paywalls/src/motion/value.ts
new file mode 100644
index 000000000..88aebd826
--- /dev/null
+++ b/libraries/paywalls/src/motion/value.ts
@@ -0,0 +1,65 @@
+/** Events emitted by a mutable motion value. */
+export type MotionValueEventName = "change" | "renderRequest";
+
+/** A mutable external value that can update visual output without a React render. */
+export interface MotionValue<T> {
+  get(): T;
+  getPrevious(): T;
+  set(value: T): void;
+  on(eventName: MotionValueEventName, listener: (value: T) => void): () => void;
+}
+
+class MotionValueImpl<T> implements MotionValue<T> {
+  #current: T;
+  #previous: T;
+  #listeners = new Map<MotionValueEventName, Set<(value: T) => void>>();
+
+  constructor(initial: T) {
+    this.#current = initial;
+    this.#previous = initial;
+  }
+
+  get(): T {
+    return this.#current;
+  }
+
+  getPrevious(): T {
+    return this.#previous;
+  }
+
+  set(value: T): void {
+    if (Object.is(value, this.#current)) {
+      return;
+    }
+    this.#previous = this.#current;
+    this.#current = value;
+    for (const eventName of ["change", "renderRequest"] as const) {
+      for (const listener of this.#listeners.get(eventName) ?? []) {
+        listener(value);
+      }
+    }
+  }
+
+  on(eventName: MotionValueEventName, listener: (value: T) => void): () => void {
+    const listeners = this.#listeners.get(eventName) ?? new Set<(value: T) => void>();
+    listeners.add(listener);
+    this.#listeners.set(eventName, listeners);
+    return () => {
+      listeners.delete(listener);
+      if (listeners.size === 0) {
+        this.#listeners.delete(eventName);
+      }
+    };
+  }
+}
+
+/** Creates a mutable motion value. Its updates never schedule React state. */
+export const motionValue = <T>(initial: T): MotionValue<T> => new MotionValueImpl(initial);
+
+/** Returns whether `value` implements the motion-value protocol. */
+export const isMotionValue = (value: unknown): value is MotionValue<unknown> =>
+  typeof value === "object" &&
+  value !== null &&
+  "get" in value &&
+  "set" in value &&
+  "on" in value;
diff --git a/libraries/paywalls/src/primitives/components.tsx b/libraries/paywalls/src/primitives/components.tsx
index 8b1390d3e..6598072ab 100644
--- a/libraries/paywalls/src/primitives/components.tsx
+++ b/libraries/paywalls/src/primitives/components.tsx
@@ -1,6 +1,7 @@
-import type { ReactNode } from "react";
+import { forwardRef, type ReactNode } from "react";
 
 import { getActionName } from "../internal/action-brand";
+import type { MotionNodeHandle, ScrollViewHandle } from "../motion/types";
 import { useHost } from "./host-context";
 import type {
   ImageProps,
@@ -17,16 +18,16 @@ import type {
  */
 
 /** A generic flexbox container (column layout by default), like RN `View`. */
-export const View = (props: ViewProps): ReactNode => {
+export const View = forwardRef<MotionNodeHandle, ViewProps>((props, ref): ReactNode => {
   const HostView = useHost().View;
-  return <HostView {...props} />;
-};
+  return <HostView {...props} ref={ref} />;
+});
 
 /** Displays text, like RN `Text`. */
-export const Text = (props: TextProps): ReactNode => {
+export const Text = forwardRef<MotionNodeHandle, TextProps>((props, ref): ReactNode => {
   const HostText = useHost().Text;
-  return <HostText {...props} />;
-};
+  return <HostText {...props} ref={ref} />;
+});
 
 /**
  * A tappable surface, like RN `Pressable`. Use `onPress` for actions. When
@@ -34,20 +35,20 @@ export const Text = (props: TextProps): ReactNode => {
  * `onPress={actions.onSelect}`), the action name is forwarded to the host so
  * preview trees can record which action the pressable fires.
  */
-export const Pressable = (props: PressableProps): ReactNode => {
+export const Pressable = forwardRef<MotionNodeHandle, PressableProps>((props, ref): ReactNode => {
   const HostPressable = useHost().Pressable;
   const actionName = getActionName(props.onPress);
-  return <HostPressable {...props} actionName={actionName} />;
-};
+  return <HostPressable {...props} actionName={actionName} ref={ref} />;
+});
 
 /** A scrollable container, like RN `ScrollView`. */
-export const ScrollView = (props: ScrollViewProps): ReactNode => {
+export const ScrollView = forwardRef<ScrollViewHandle, ScrollViewProps>((props, ref): ReactNode => {
   const HostScrollView = useHost().ScrollView;
-  return <HostScrollView {...props} />;
-};
+  return <HostScrollView {...props} ref={ref} />;
+});
 
 /** Displays an image from a URL or `{ uri }` source, like RN `Image`. */
-export const Image = (props: ImageProps): ReactNode => {
+export const Image = forwardRef<MotionNodeHandle, ImageProps>((props, ref): ReactNode => {
   const HostImage = useHost().Image;
-  return <HostImage {...props} />;
-};
+  return <HostImage {...props} ref={ref} />;
+});
diff --git a/libraries/paywalls/src/primitives/host-context.tsx b/libraries/paywalls/src/primitives/host-context.tsx
index 29fca99dc..cd2d5a9f7 100644
--- a/libraries/paywalls/src/primitives/host-context.tsx
+++ b/libraries/paywalls/src/primitives/host-context.tsx
@@ -1,6 +1,11 @@
 import { createContext, type ReactNode, useContext } from "react";
 
 import { domHostComponents } from "../renderer/dom-host";
+import {
+  domMotionPlatformAdapter,
+  MotionPlatformContext,
+} from "../motion/platform";
+import type { MotionPlatformAdapter } from "../motion/types";
 import type { HostComponents } from "./types";
 
 /**
@@ -19,6 +24,8 @@ export const useHost = (): HostComponents => useContext(HostContext);
 
 export interface RendererProviderProps {
   host?: HostComponents;
+  /** Platform clock, measurement, and accessibility capability adapter. */
+  motion?: MotionPlatformAdapter;
   children: ReactNode;
 }
 
@@ -28,7 +35,10 @@ export interface RendererProviderProps {
  */
 export const RendererProvider = ({
   host = domHostComponents,
+  motion = domMotionPlatformAdapter,
   children,
 }: RendererProviderProps): ReactNode => (
-  <HostContext.Provider value={host}>{children}</HostContext.Provider>
+  <MotionPlatformContext.Provider value={motion}>
+    <HostContext.Provider value={host}>{children}</HostContext.Provider>
+  </MotionPlatformContext.Provider>
 );
diff --git a/libraries/paywalls/src/primitives/types.ts b/libraries/paywalls/src/primitives/types.ts
index bb9875623..2baeff939 100644
--- a/libraries/paywalls/src/primitives/types.ts
+++ b/libraries/paywalls/src/primitives/types.ts
@@ -1,5 +1,17 @@
-import type { ReactNode } from "react";
+import type {
+  ComponentType,
+  ReactNode,
+  RefAttributes,
+} from "react";
 
+import type {
+  DraggableMotionProps,
+  MotionNodeHandle,
+  MotionStyleProp,
+  MotionVisualProps,
+  PressableMotionProps,
+  ScrollViewHandle,
+} from "../motion/types";
 import type { StyleProp } from "../schema/style";
 
 /** Interaction state passed to a {@link PressableProps} render-prop child. */
@@ -13,8 +25,8 @@ export type ImageSource = string | { readonly uri: string };
 /** How an {@link ImageProps} image fills its frame. Mirrors RN `resizeMode`. */
 export type ResizeMode = "cover" | "contain" | "stretch" | "center";
 
-export interface ViewProps {
-  style?: StyleProp;
+export interface ViewProps extends MotionVisualProps, DraggableMotionProps {
+  style?: MotionStyleProp;
   children?: ReactNode;
   /** Stable identifier for testing / analytics targeting. */
   testID?: string;
@@ -22,8 +34,8 @@ export interface ViewProps {
   accessibilityLabel?: string;
 }
 
-export interface TextProps {
-  style?: StyleProp;
+export interface TextProps extends MotionVisualProps {
+  style?: MotionStyleProp;
   children?: ReactNode;
   /** Truncate to N lines with an ellipsis. `0`/undefined means unlimited. */
   numberOfLines?: number;
@@ -31,8 +43,11 @@ export interface TextProps {
   accessibilityLabel?: string;
 }
 
-export interface PressableProps {
-  style?: StyleProp;
+export interface PressableProps
+  extends MotionVisualProps,
+    PressableMotionProps,
+    DraggableMotionProps {
+  style?: MotionStyleProp;
   /** Static children, or a render-prop receiving the {@link PressableState}. */
   children?: ReactNode | ((state: PressableState) => ReactNode);
   /**
@@ -49,8 +64,8 @@ export interface PressableProps {
   accessibilityLabel?: string;
 }
 
-export interface ScrollViewProps {
-  style?: StyleProp;
+export interface ScrollViewProps extends MotionVisualProps {
+  style?: MotionStyleProp;
   /** Style applied to the inner content wrapper (RN `contentContainerStyle`). */
   contentContainerStyle?: StyleProp;
   /** Scroll on the x-axis instead of the y-axis. */
@@ -59,8 +74,8 @@ export interface ScrollViewProps {
   testID?: string;
 }
 
-export interface ImageProps {
-  style?: StyleProp;
+export interface ImageProps extends MotionVisualProps, DraggableMotionProps {
+  style?: MotionStyleProp;
   source: ImageSource;
   resizeMode?: ResizeMode;
   accessibilityLabel?: string;
@@ -86,6 +101,10 @@ export interface SlotHostProps {
   fallback?: ReactNode;
 }
 
+type MotionHostComponent<Props, Handle extends MotionNodeHandle> = ComponentType<
+  Props & RefAttributes<Handle>
+>;
+
 /**
  * The set of host components a renderer must provide. The abstract primitives
  * exported from `@voidhash/paywalls` resolve their implementation from the
@@ -93,10 +112,10 @@ export interface SlotHostProps {
  * target the DOM, the preview node tree, and native views later.
  */
 export interface HostComponents {
-  View: (props: ViewProps) => ReactNode;
-  Text: (props: TextProps) => ReactNode;
-  Pressable: (props: PressableHostProps) => ReactNode;
-  ScrollView: (props: ScrollViewProps) => ReactNode;
-  Image: (props: ImageProps) => ReactNode;
+  View: MotionHostComponent<ViewProps, MotionNodeHandle>;
+  Text: MotionHostComponent<TextProps, MotionNodeHandle>;
+  Pressable: MotionHostComponent<PressableHostProps, MotionNodeHandle>;
+  ScrollView: MotionHostComponent<ScrollViewProps, ScrollViewHandle>;
+  Image: MotionHostComponent<ImageProps, MotionNodeHandle>;
   Slot: (props: SlotHostProps) => ReactNode;
 }
diff --git a/libraries/paywalls/src/renderer/dom-drag.ts b/libraries/paywalls/src/renderer/dom-drag.ts
new file mode 100644
index 000000000..18f6b6f8b
--- /dev/null
+++ b/libraries/paywalls/src/renderer/dom-drag.ts
@@ -0,0 +1,193 @@
+import { type PointerEvent, type RefObject, useRef } from "react";
+
+import { resolveDragGestureWinner, useDragControlRegistration } from "../motion/drag";
+import type {
+  DragConstraints,
+  DragInfo,
+  DraggableMotionProps,
+  MotionGestureEvent,
+  MotionNodeHandle,
+} from "../motion/types";
+import type { DomMotionController } from "./dom-motion";
+
+type DomElement = HTMLDivElement | HTMLImageElement;
+
+interface DragSession {
+  readonly pointerId: number;
+  readonly point: { readonly x: number; readonly y: number };
+  readonly origin: { readonly x: number; readonly y: number };
+  readonly constraints: DragConstraints | undefined;
+  lastPoint: { readonly x: number; readonly y: number };
+  lastTime: number;
+  lockedAxis: "x" | "y" | undefined;
+  won: boolean;
+}
+
+export interface DomDragHandlers {
+  readonly touchAction: "none" | "pan-x" | "pan-y" | "manipulation";
+  onPointerDown(event: PointerEvent<HTMLElement>): void;
+  onPointerMove(event: PointerEvent<HTMLElement>): void;
+  onPointerUp(event: PointerEvent<HTMLElement>): void;
+  onPointerCancel(event: PointerEvent<HTMLElement>): void;
+}
+
+const pointFromEvent = (event: PointerEvent<HTMLElement>): MotionGestureEvent => ({
+  point: { x: event.clientX, y: event.clientY },
+  pointerId: event.pointerId,
+  timeStamp: event.timeStamp,
+});
+
+const nearestScrollAxis = (element: HTMLElement): "x" | "y" | undefined => {
+  const scroll = element.parentElement?.closest<HTMLElement>("[data-vh-scroll-axis]");
+  const axis = scroll?.dataset.vhScrollAxis;
+  return axis === "x" || axis === "y" ? axis : undefined;
+};
+
+const constraintsFor = (
+  constraints: DraggableMotionProps["dragConstraints"],
+  node: MotionNodeHandle,
+  origin: { readonly x: number; readonly y: number },
+): DragConstraints | undefined => {
+  if (!constraints) return undefined;
+  if ("current" in constraints) {
+    const bounds = constraints.current?.measure();
+    const box = node.measure();
+    if (!bounds || !box) return undefined;
+    return {
+      left: origin.x + bounds.x - box.x,
+      right: origin.x + bounds.x + bounds.width - (box.x + box.width),
+      top: origin.y + bounds.y - box.y,
+      bottom: origin.y + bounds.y + bounds.height - (box.y + box.height),
+    };
+  }
+  return constraints;
+};
+
+const elastic = (value: number, min: number | undefined, max: number | undefined, amount: boolean | number | undefined): number => {
+  const factor = amount === false ? 0 : typeof amount === "number" ? amount : 0.35;
+  if (min !== undefined && value < min) return min + (value - min) * factor;
+  if (max !== undefined && value > max) return max + (value - max) * factor;
+  return value;
+};
+
+const dragInfo = (
+  session: DragSession,
+  point: { readonly x: number; readonly y: number },
+  timeStamp: number,
+): DragInfo => {
+  const delta = { x: point.x - session.lastPoint.x, y: point.y - session.lastPoint.y };
+  const offset = { x: point.x - session.point.x, y: point.y - session.point.y };
+  const elapsed = Math.max(1, timeStamp - session.lastTime);
+  return { delta, offset, point, velocity: { x: (delta.x / elapsed) * 1000, y: (delta.y / elapsed) * 1000 } };
+};
+
+/** Maps pointer streams to the shared drag semantics without exposing DOM events publicly. */
+export const useDomDrag = (
+  elementRef: RefObject<DomElement | null>,
+  node: MotionNodeHandle,
+  props: DraggableMotionProps,
+  controller: DomMotionController,
+  callbacks: { readonly onStart?: () => void; readonly onEnd?: () => void } = {},
+): DomDragHandlers => {
+  const session = useRef<DragSession | null>(null);
+  const startFromControls = (event: MotionGestureEvent) => {
+    if (!props.drag) return;
+    const origin = controller.getVisualStyle();
+    session.current = {
+      constraints: constraintsFor(props.dragConstraints, node, { x: origin.x ?? 0, y: origin.y ?? 0 }),
+      lastPoint: event.point,
+      lastTime: event.timeStamp,
+      lockedAxis: undefined,
+      origin: { x: origin.x ?? 0, y: origin.y ?? 0 },
+      point: event.point,
+      pointerId: event.pointerId,
+      won: true,
+    };
+    callbacks.onStart?.();
+    props.onDragStart?.(event, { delta: { x: 0, y: 0 }, offset: { x: 0, y: 0 }, point: event.point, velocity: { x: 0, y: 0 } });
+  };
+  useDragControlRegistration(props.dragControls, props.dragListener === false ? startFromControls : undefined);
+
+  const finish = (event: PointerEvent<HTMLElement>) => {
+    const current = session.current;
+    session.current = null;
+    if (!current?.won) return;
+    const normalized = pointFromEvent(event);
+    const info = dragInfo(current, normalized.point, normalized.timeStamp);
+    props.onDragEnd?.(normalized, info);
+    callbacks.onEnd?.();
+    if (props.dragMomentum !== false) {
+      const target = {
+        x: elastic(
+          current.origin.x + info.offset.x + info.velocity.x * 0.2,
+          current.constraints?.left,
+          current.constraints?.right,
+          false,
+        ),
+        y: elastic(
+          current.origin.y + info.offset.y + info.velocity.y * 0.2,
+          current.constraints?.top,
+          current.constraints?.bottom,
+          false,
+        ),
+      };
+      controller.animateTo(target, { type: "spring", ...(props.dragTransition ?? {}) });
+    }
+  };
+
+  return {
+    touchAction: !props.drag ? "manipulation" : props.drag === "x" ? "pan-y" : props.drag === "y" ? "pan-x" : "none",
+    onPointerDown: (event) => {
+      if (!props.drag || props.dragListener === false) return;
+      controller.stop();
+      const origin = controller.getVisualStyle();
+      session.current = {
+        constraints: constraintsFor(props.dragConstraints, node, { x: origin.x ?? 0, y: origin.y ?? 0 }),
+        lastPoint: { x: event.clientX, y: event.clientY },
+        lastTime: event.timeStamp,
+        lockedAxis: undefined,
+        origin: { x: origin.x ?? 0, y: origin.y ?? 0 },
+        point: { x: event.clientX, y: event.clientY },
+        pointerId: event.pointerId,
+        won: false,
+      };
+    },
+    onPointerMove: (event) => {
+      const current = session.current;
+      if (!current || current.pointerId !== event.pointerId || !props.drag) return;
+      const normalized = pointFromEvent(event);
+      const info = dragInfo(current, normalized.point, normalized.timeStamp);
+      const movement = Math.hypot(info.offset.x, info.offset.y);
+      const direction = Math.abs(info.offset.x) >= Math.abs(info.offset.y) ? "x" : "y";
+      current.lockedAxis ??= props.dragDirectionLock ? direction : undefined;
+      if (!current.won) {
+        if (movement < 3) return;
+        const winner = resolveDragGestureWinner({
+          direction: current.lockedAxis ?? direction,
+          drag: props.drag,
+          gesturePriority: props.gesturePriority,
+          scrollAxis: nearestScrollAxis(event.currentTarget),
+        });
+        if (winner !== "drag") {
+          session.current = null;
+          return;
+        }
+        current.won = true;
+        event.currentTarget.setPointerCapture?.(event.pointerId);
+        callbacks.onStart?.();
+        props.onDragStart?.(normalized, info);
+      }
+      event.preventDefault();
+      const xOffset = current.lockedAxis === "y" ? 0 : info.offset.x;
+      const yOffset = current.lockedAxis === "x" ? 0 : info.offset.y;
+      const x = elastic(current.origin.x + xOffset, current.constraints?.left, current.constraints?.right, props.dragElastic);
+      const y = elastic(current.origin.y + yOffset, current.constraints?.top, current.constraints?.bottom, props.dragElastic);
+      controller.setVisualStyle({ x, y });
+      props.onDrag?.(normalized, info);
+      current.lastPoint = normalized.point;
+      current.lastTime = normalized.timeStamp;
+    },
+    onPointerUp: finish,
+    onPointerCancel: finish,
+  };
+};
diff --git a/libraries/paywalls/src/renderer/dom-host.tsx b/libraries/paywalls/src/renderer/dom-host.tsx
index a027e7602..141800e44 100644
--- a/libraries/paywalls/src/renderer/dom-host.tsx
+++ b/libraries/paywalls/src/renderer/dom-host.tsx
@@ -1,10 +1,17 @@
 import {
+  forwardRef,
   type CSSProperties,
   type KeyboardEvent,
   type ReactNode,
+  type RefObject,
+  useImperativeHandle,
+  useRef,
   useState,
 } from "react";
 
+import { useMotionRef } from "../motion/ref";
+import { useInView } from "../motion/scroll";
+import { MOTION_STYLE_KEYS, type MotionNodeHandle, type MotionStyleProp, type ScrollViewHandle } from "../motion/types";
 import type {
   HostComponents,
   ImageProps,
@@ -16,14 +23,11 @@ import type {
   TextProps,
   ViewProps,
 } from "../primitives/types";
-import { resolveStyle } from "../style/resolve";
-
-/**
- * Flexbox defaults that mirror React Native's `View` reset. Authoring code is
- * written with RN layout expectations (column flow, no implicit shrink, border
- * box), so the DOM renderer re-creates them rather than inheriting the
- * browser's block-layout defaults.
- */
+import type { StyleProp } from "../schema/style";
+import { flattenStyle, resolveStyle } from "../style/resolve";
+import { useDomDrag } from "./dom-drag";
+import { useDomMotion, useDomNodeHandle } from "./dom-motion";
+
 const VIEW_BASE: CSSProperties = {
   alignItems: "stretch",
   boxSizing: "border-box",
@@ -47,10 +51,7 @@ const TEXT_BASE: CSSProperties = {
   wordWrap: "break-word",
 };
 
-const RESIZE_MODE_TO_OBJECT_FIT: Record<
-  ResizeMode,
-  CSSProperties["objectFit"]
-> = {
+const RESIZE_MODE_TO_OBJECT_FIT: Record<ResizeMode, CSSProperties["objectFit"]> = {
   center: "none",
   contain: "contain",
   cover: "cover",
@@ -71,62 +72,90 @@ const lineClampStyle = (numberOfLines?: number): CSSProperties =>
       }
     : {};
 
-const DomView = ({
-  style,
-  children,
-  testID,
-  accessibilityLabel,
-}: ViewProps): ReactNode => (
-  <div
-    aria-label={accessibilityLabel}
-    data-testid={testID}
-    style={{ ...VIEW_BASE, ...resolveStyle(style) }}
-  >
-    {children}
-  </div>
-);
-
-const DomText = ({
-  style,
-  children,
-  numberOfLines,
-  testID,
-  accessibilityLabel,
-}: TextProps): ReactNode => (
-  <div
-    aria-label={accessibilityLabel}
-    data-testid={testID}
-    style={{
-      ...TEXT_BASE,
-      ...lineClampStyle(numberOfLines),
-      ...resolveStyle(style),
-    }}
-  >
-    {children}
-  </div>
-);
-
-const DomPressable = ({
-  style,
-  children,
-  onPress,
-  disabled,
-  testID,
-  accessibilityLabel,
-}: PressableHostProps): ReactNode => {
-  const [pressed, setPressed] = useState(false);
+const resolveStaticStyle = (style: MotionStyleProp | undefined): CSSProperties => {
+  const flat = { ...(flattenStyle(style as never) as Record<string, unknown>) };
+  for (const key of MOTION_STYLE_KEYS) delete flat[key];
+  return resolveStyle(flat as StyleProp);
+};
+
+const useViewMotion = (
+  elementRef: RefObject<HTMLDivElement | HTMLImageElement | null>,
+  props: ViewProps | TextProps | ImageProps | PressableHostProps | ScrollViewProps,
+  handle: MotionNodeHandle,
+  state: { readonly pressed?: boolean; readonly focused?: boolean; readonly dragging?: boolean } = {},
+) => {
+  const motionRef = useMotionRef<MotionNodeHandle>();
+  motionRef.current = handle;
+  const inView = useInView(motionRef, props.viewport);
+  return useDomMotion(elementRef, props, { ...state, inView });
+};
+
+const DomView = forwardRef<MotionNodeHandle, ViewProps>((props, ref): ReactNode => {
+  const elementRef = useRef<HTMLDivElement | null>(null);
+  const handle = useDomNodeHandle(elementRef);
+  useImperativeHandle(ref, () => handle, [handle]);
+  const [dragging, setDragging] = useState(false);
+  const motion = useViewMotion(elementRef, props, handle, { dragging });
+  const drag = useDomDrag(elementRef, handle, props, motion, {
+    onEnd: () => setDragging(false),
+    onStart: () => setDragging(true),
+  });
+
+  return (
+    <div
+      aria-label={props.accessibilityLabel}
+      data-testid={props.testID}
+      onPointerCancel={drag.onPointerCancel}
+      onPointerDown={drag.onPointerDown}
+      onPointerMove={drag.onPointerMove}
+      onPointerUp={drag.onPointerUp}
+      ref={elementRef}
+      style={{ ...VIEW_BASE, ...resolveStaticStyle(props.style), ...motion.staticStyle, touchAction: drag.touchAction }}
+    >
+      {props.children}
+    </div>
+  );
+});
+
+const DomText = forwardRef<MotionNodeHandle, TextProps>((props, ref): ReactNode => {
+  const elementRef = useRef<HTMLDivElement | null>(null);
+  const handle = useDomNodeHandle(elementRef);
+  useImperativeHandle(ref, () => handle, [handle]);
+  const motion = useViewMotion(elementRef, props, handle);
+  return (
+    <div
+      aria-label={props.accessibilityLabel}
+      data-testid={props.testID}
+      ref={elementRef}
+      style={{ ...TEXT_BASE, ...lineClampStyle(props.numberOfLines), ...resolveStaticStyle(props.style), ...motion.staticStyle }}
+    >
+      {props.children}
+    </div>
+  );
+});
 
+const DomPressable = forwardRef<MotionNodeHandle, PressableHostProps>((props, ref): ReactNode => {
+  const elementRef = useRef<HTMLDivElement | null>(null);
+  const handle = useDomNodeHandle(elementRef);
+  useImperativeHandle(ref, () => handle, [handle]);
+  const [pressed, setPressed] = useState(false);
+  const [focused, setFocused] = useState(false);
+  const [dragging, setDragging] = useState(false);
+  const cancelledPress = useRef(false);
+  const motion = useViewMotion(elementRef, props, handle, { dragging, focused, pressed });
+  const drag = useDomDrag(elementRef, handle, props, motion, {
+    onEnd: () => setDragging(false),
+    onStart: () => {
+      cancelledPress.current = true;
+      setDragging(true);
+      setPressed(false);
+    },
+  });
   const handleActivate = () => {
-    if (disabled) {
-      return;
-    }
-    onPress?.();
+    if (!props.disabled) props.onPress?.();
   };
-
   const handleKeyDown = (event: KeyboardEvent<HTMLDivElement>) => {
-    if (disabled) {
-      return;
-    }
+    if (props.disabled) return;
     if (event.key === "Enter" || event.key === " ") {
       event.preventDefault();
       handleActivate();
@@ -135,86 +164,122 @@ const DomPressable = ({
 
   return (
     <div
-      aria-disabled={disabled || undefined}
-      aria-label={accessibilityLabel}
+      aria-disabled={props.disabled || undefined}
+      aria-label={props.accessibilityLabel}
       data-pressed={pressed || undefined}
-      data-testid={testID}
-      onClick={handleActivate}
+      data-testid={props.testID}
+      onBlur={() => setFocused(false)}
+      onClick={(event) => {
+        if (cancelledPress.current) {
+          cancelledPress.current = false;
+          event.preventDefault();
+          return;
+        }
+        handleActivate();
+      }}
+      onFocus={() => setFocused(true)}
       onKeyDown={handleKeyDown}
-      onPointerCancel={() => setPressed(false)}
-      onPointerDown={() => setPressed(true)}
+      onPointerCancel={(event) => {
+        setPressed(false);
+        drag.onPointerCancel(event);
+      }}
+      onPointerDown={(event) => {
+        if (!props.disabled) setPressed(true);
+        drag.onPointerDown(event);
+      }}
       onPointerLeave={() => setPressed(false)}
-      onPointerUp={() => setPressed(false)}
+      onPointerMove={drag.onPointerMove}
+      onPointerUp={(event) => {
+        setPressed(false);
+        drag.onPointerUp(event);
+      }}
+      ref={elementRef}
       role="button"
       style={{
         ...VIEW_BASE,
-        cursor: disabled ? "default" : "pointer",
-        opacity: disabled ? 0.5 : 1,
-        touchAction: "manipulation",
+        cursor: props.disabled ? "default" : "pointer",
+        opacity: props.disabled ? 0.5 : undefined,
+        touchAction: drag.touchAction,
         userSelect: "none",
-        ...resolveStyle(style),
+        ...resolveStaticStyle(props.style),
+        ...motion.staticStyle,
       }}
-      tabIndex={disabled ? -1 : 0}
+      tabIndex={props.disabled ? -1 : 0}
     >
-      {typeof children === "function" ? children({ pressed }) : children}
+      {typeof props.children === "function" ? props.children({ pressed }) : props.children}
     </div>
   );
-};
+});
 
-const DomScrollView = ({
-  style,
-  contentContainerStyle,
-  horizontal,
-  children,
-  testID,
-}: ScrollViewProps): ReactNode => (
-  <div
-    data-testid={testID}
-    style={{
-      ...VIEW_BASE,
-      flexDirection: horizontal ? "row" : "column",
-      overflowX: horizontal ? "auto" : "hidden",
-      overflowY: horizontal ? "hidden" : "auto",
-      WebkitOverflowScrolling: "touch",
-      ...resolveStyle(style),
-    }}
-  >
+const DomScrollView = forwardRef<ScrollViewHandle, ScrollViewProps>((props, ref): ReactNode => {
+  const elementRef = useRef<HTMLDivElement | null>(null);
+  const handle = useDomNodeHandle<ScrollViewHandle>(elementRef, true);
+  useImperativeHandle(ref, () => handle, [handle]);
+  const motion = useViewMotion(elementRef, props, handle);
+  return (
     <div
+      data-testid={props.testID}
+      data-vh-scroll-axis={props.horizontal ? "x" : "y"}
+      ref={elementRef}
       style={{
         ...VIEW_BASE,
-        flexDirection: horizontal ? "row" : "column",
-        flexGrow: 1,
-        flexShrink: 0,
-        ...resolveStyle(contentContainerStyle),
+        flexDirection: props.horizontal ? "row" : "column",
+        overflowX: props.horizontal ? "auto" : "hidden",
+        overflowY: props.horizontal ? "hidden" : "auto",
+        WebkitOverflowScrolling: "touch",
+        ...resolveStaticStyle(props.style),
+        ...motion.staticStyle,
       }}
     >
-      {children}
+      <div
+        style={{
+          ...VIEW_BASE,
+          flexDirection: props.horizontal ? "row" : "column",
+          flexGrow: 1,
+          flexShrink: 0,
+          ...resolveStyle(props.contentContainerStyle),
+        }}
+      >
+        {props.children}
+      </div>
     </div>
-  </div>
-);
-
-const DomImage = ({
-  style,
-  source,
-  resizeMode = "cover",
-  accessibilityLabel,
-  testID,
-}: ImageProps): ReactNode => (
-  <img
-    alt={accessibilityLabel ?? ""}
-    data-testid={testID}
-    src={resolveImageSource(source)}
-    style={{
-      boxSizing: "border-box",
-      display: "block",
-      objectFit: RESIZE_MODE_TO_OBJECT_FIT[resizeMode],
-      ...resolveStyle(style),
-    }}
-  />
-);
-
-const DomSlot = ({ children, fallback }: SlotHostProps): ReactNode =>
-  children ?? fallback ?? null;
+  );
+});
+
+const DomImage = forwardRef<MotionNodeHandle, ImageProps>((props, ref): ReactNode => {
+  const elementRef = useRef<HTMLImageElement | null>(null);
+  const handle = useDomNodeHandle(elementRef);
+  useImperativeHandle(ref, () => handle, [handle]);
+  const [dragging, setDragging] = useState(false);
+  const motion = useViewMotion(elementRef, props, handle, { dragging });
+  const drag = useDomDrag(elementRef, handle, props, motion, {
+    onEnd: () => setDragging(false),
+    onStart: () => setDragging(true),
+  });
+  return (
+    <img
+      alt={props.accessibilityLabel ?? ""}
+      data-testid={props.testID}
+      draggable={false}
+      onPointerCancel={drag.onPointerCancel}
+      onPointerDown={drag.onPointerDown}
+      onPointerMove={drag.onPointerMove}
+      onPointerUp={drag.onPointerUp}
+      ref={elementRef}
+      src={resolveImageSource(props.source)}
+      style={{
+        boxSizing: "border-box",
+        display: "block",
+        objectFit: RESIZE_MODE_TO_OBJECT_FIT[props.resizeMode ?? "cover"],
+        touchAction: drag.touchAction,
+        ...resolveStaticStyle(props.style),
+        ...motion.staticStyle,
+      }}
+    />
+  );
+});
+
+const DomSlot = ({ children, fallback }: SlotHostProps): ReactNode => children ?? fallback ?? null;
 
 /** The DOM implementation of the {@link HostComponents} contract. */
 export const domHostComponents: HostComponents = {
diff --git a/libraries/paywalls/src/renderer/dom-motion.ts b/libraries/paywalls/src/renderer/dom-motion.ts
new file mode 100644
index 000000000..9376ee22e
--- /dev/null
+++ b/libraries/paywalls/src/renderer/dom-motion.ts
@@ -0,0 +1,284 @@
+import { type RefObject, useEffect, useMemo, useRef } from "react";
+
+import { animateMotionValue, frameDriverFromAdapter } from "../motion/animation";
+import { useMotionConfig, useReducedMotion } from "../motion/context";
+import { useMotionPlatform } from "../motion/platform";
+import { resolveMotionDefinition, resolveMotionInitialStyle, resolveMotionRestStyle } from "../motion/resolve";
+import { compileMotionCss } from "../motion/transform";
+import { isMotionValue, motionValue } from "../motion/value";
+import type {
+  MotionLayoutBox,
+  MotionNodeHandle,
+  MotionScrollMetrics,
+  MotionStyleKey,
+  MotionStyleProp,
+  MotionVisualProps,
+  ResolvedMotionStyle,
+  ScrollViewHandle,
+  Transition,
+} from "../motion/types";
+import { flattenStyle } from "../style/resolve";
+
+type DomElement = HTMLDivElement | HTMLImageElement;
+
+const layoutListeners = new Map<Element, Set<() => void>>();
+let resizeObserver: ResizeObserver | undefined;
+
+const observeLayout = (element: Element, listener: () => void): (() => void) => {
+  const listeners = layoutListeners.get(element) ?? new Set<() => void>();
+  listeners.add(listener);
+  layoutListeners.set(element, listeners);
+  if (typeof ResizeObserver !== "undefined") {
+    resizeObserver ??= new ResizeObserver((entries) => {
+      for (const entry of entries) {
+        for (const callback of layoutListeners.get(entry.target) ?? []) callback();
+      }
+    });
+    resizeObserver.observe(element);
+  }
+  return () => {
+    listeners.delete(listener);
+    if (listeners.size === 0) {
+      layoutListeners.delete(element);
+      resizeObserver?.unobserve(element);
+    }
+  };
+};
+
+const measureUntransformed = (element: HTMLElement): MotionLayoutBox => {
+  let x = 0;
+  let y = 0;
+  let current: HTMLElement | null = element;
+  while (current) {
+    x += current.offsetLeft;
+    y += current.offsetTop;
+    current = current.offsetParent as HTMLElement | null;
+  }
+  return { height: element.offsetHeight, width: element.offsetWidth, x, y };
+};
+
+/** Builds a renderer-neutral node handle over a DOM element without exporting the DOM node. */
+export const useDomNodeHandle = <T extends MotionNodeHandle = MotionNodeHandle>(
+  elementRef: RefObject<DomElement | null>,
+  scrollable = false,
+): T => {
+  const handle = useMemo(() => {
+    const base: MotionNodeHandle = {
+      measure: () => {
+        const element = elementRef.current;
+        return element ? measureUntransformed(element) : null;
+      },
+      subscribeLayout: (listener) => {
+        const element = elementRef.current;
+        return element ? observeLayout(element, listener) : () => undefined;
+      },
+    };
+    if (!scrollable) return base as T;
+    const scroll: ScrollViewHandle = {
+      ...base,
+      getScrollMetrics: () => {
+        const element = elementRef.current;
+        if (!element) {
+          return { contentHeight: 0, contentWidth: 0, viewportHeight: 0, viewportWidth: 0, x: 0, y: 0 };
+        }
+        return {
+          contentHeight: element.scrollHeight,
+          contentWidth: element.scrollWidth,
+          viewportHeight: element.clientHeight,
+          viewportWidth: element.clientWidth,
+          x: element.scrollLeft,
+          y: element.scrollTop,
+        };
+      },
+      scrollTo: (offset) => {
+        elementRef.current?.scrollTo({ left: offset.x, top: offset.y });
+      },
+      subscribeScroll: (listener) => {
+        const element = elementRef.current;
+        if (!element) return () => undefined;
+        element.addEventListener("scroll", listener, { passive: true });
+        return () => element.removeEventListener("scroll", listener);
+      },
+    };
+    return scroll as unknown as T;
+  }, [elementRef, scrollable]);
+  return handle;
+};
+
+const motionValuesFromStyle = (style: MotionStyleProp | undefined): Partial<Record<MotionStyleKey, ReturnType<typeof motionValue>>> => {
+  const flat = flattenStyle(style as never) as Record<string, unknown>;
+  const values: Partial<Record<MotionStyleKey, ReturnType<typeof motionValue>>> = {};
+  for (const key of ["x", "y", "scale", "scaleX", "scaleY", "rotate", "opacity", "backgroundColor", "transformOrigin"] as const) {
+    if (isMotionValue(flat[key])) values[key] = flat[key] as ReturnType<typeof motionValue>;
+  }
+  return values;
+};
+
+const transitionFor = (
+  transition: Transition | Record<string, Transition | undefined> | undefined,
+  key: MotionStyleKey,
+): Transition => {
+  if (!transition) return {};
+  const keyed = transition as Record<string, Transition | undefined>;
+  return keyed[key] ?? keyed.default ?? transition;
+};
+
+const mergeTarget = (
+  props: MotionVisualProps,
+  rest: ResolvedMotionStyle,
+  state: { readonly inView?: boolean; readonly pressed?: boolean; readonly focused?: boolean; readonly dragging?: boolean },
+): ResolvedMotionStyle => {
+  const target = { ...rest };
+  const definitions = [
+    state.inView ? props.whileInView : undefined,
+    state.pressed ? (props as MotionVisualProps & { whilePress?: MotionVisualProps["whileInView"] }).whilePress : undefined,
+    state.focused ? (props as MotionVisualProps & { whileFocus?: MotionVisualProps["whileInView"] }).whileFocus : undefined,
+    state.dragging ? (props as MotionVisualProps & { whileDrag?: MotionVisualProps["whileInView"] }).whileDrag : undefined,
+  ];
+  for (const definition of definitions) {
+    Object.assign(target, resolveMotionDefinition(definition, props.variants));
+  }
+  return target;
+};
+
+const writeMotionStyle = (element: DomElement, style: ResolvedMotionStyle): void => {
+  const css = compileMotionCss(style);
+  element.style.opacity = css.opacity === undefined ? "" : String(css.opacity);
+  element.style.backgroundColor = css.backgroundColor === undefined ? "" : String(css.backgroundColor);
+  element.style.transform = css.transform === undefined ? "" : String(css.transform);
+  element.style.transformOrigin = css.transformOrigin === undefined ? "" : String(css.transformOrigin);
+};
+
+export interface DomMotionController {
+  readonly staticStyle: Record<string, string | number>;
+  getVisualStyle(): ResolvedMotionStyle;
+  setVisualStyle(style: Partial<ResolvedMotionStyle>): void;
+  animateTo(style: Partial<ResolvedMotionStyle>, transition?: Transition): void;
+  stop(): void;
+}
+
+/** Imperatively binds a primitive's motion props to one mounted DOM node. */
+export const useDomMotion = (
+  elementRef: RefObject<DomElement | null>,
+  props: MotionVisualProps & { readonly style?: MotionStyleProp },
+  state: { readonly inView?: boolean; readonly pressed?: boolean; readonly focused?: boolean; readonly dragging?: boolean } = {},
+): DomMotionController => {
+  const config = useMotionConfig();
+  const platform = useMotionPlatform();
+  const reducedMotion = useReducedMotion();
+  const rest = resolveMotionRestStyle(props, props.style);
+  const initial = resolveMotionInitialStyle(props, props.style);
+  const target = mergeTarget(props, rest, state);
+  const visual = useRef<ResolvedMotionStyle>(rest);
+  const stops = useRef<ReadonlyArray<() => void>>([]);
+  const liveValues = motionValuesFromStyle(props.style);
+
+  const controller = useMemo<DomMotionController>(
+    () => ({
+      staticStyle: compileMotionCss(rest),
+      getVisualStyle: () => visual.current,
+      setVisualStyle: (patch) => {
+        visual.current = { ...visual.current, ...patch };
+        const element = elementRef.current;
+        if (element) writeMotionStyle(element, visual.current);
+      },
+      animateTo: (patch, transition = {}) => {
+        stops.current.forEach((stop) => stop());
+        const target = { ...visual.current, ...patch };
+        const disposers: Array<() => void> = [];
+        for (const [key, next] of Object.entries(target) as Array<[MotionStyleKey, ResolvedMotionStyle[MotionStyleKey]]>) {
+          const current = visual.current[key];
+          if (typeof current === "number" && typeof next === "number") {
+            const value = motionValue(current);
+            disposers.push(value.on("change", (updated) => controller.setVisualStyle({ [key]: updated })));
+            disposers.push(animateMotionValue(value, next, transition));
+          } else {
+            controller.setVisualStyle({ [key]: next });
+          }
+        }
+        stops.current = disposers;
+      },
+      stop: () => {
+        stops.current.forEach((stop) => stop());
+        stops.current = [];
+      },
+    }),
+    [elementRef, rest],
+  );
+
+  useEffect(() => {
+    controller.stop();
+    const element = elementRef.current;
+    if (!element) return;
+    const start = props.initial === false ? rest : initial;
+    visual.current = start;
+    writeMotionStyle(element, start);
+    const transition = props.transition ?? config.transition;
+    const disposers: Array<() => void> = [];
+    let completed = false;
+    const animationDefinition =
+      props.animate && typeof props.animate === "object" && "start" in props.animate
+        ? target
+        : props.animate ?? target;
+    const finish = () => {
+      if (completed) return;
+      completed = true;
+      props.onAnimationComplete?.(animationDefinition);
+    };
+    props.onAnimationStart?.(animationDefinition);
+    const numericKeys = Object.entries(target).filter(
+      ([key, next]) => typeof next === "number" && typeof start[key as MotionStyleKey] === "number",
+    ) as Array<[MotionStyleKey, number]>;
+    if (reducedMotion || numericKeys.length === 0) {
+      visual.current = target;
+      writeMotionStyle(element, target);
+      finish();
+    } else {
+      let remaining = numericKeys.length;
+      for (const [key, next] of numericKeys) {
+        const value = motionValue(start[key] as number);
+        disposers.push(value.on("change", (current) => controller.setVisualStyle({ [key]: current })));
+        disposers.push(
+          animateMotionValue(
+            value,
+            next,
+            transitionFor(transition, key),
+            frameDriverFromAdapter(platform),
+            false,
+            () => {
+              remaining -= 1;
+              if (remaining === 0) {
+                visual.current = target;
+                writeMotionStyle(element, target);
+                finish();
+              }
+            },
+          ),
+        );
+      }
+      for (const [key, next] of Object.entries(target) as Array<[MotionStyleKey, ResolvedMotionStyle[MotionStyleKey]]>) {
+        if (typeof next !== "number" || typeof start[key] !== "number") {
+          controller.setVisualStyle({ [key]: next });
+        }
+      }
+    }
+    stops.current = disposers;
+    return () => {
+      disposers.forEach((dispose) => dispose());
+      if (stops.current === disposers) stops.current = [];
+    };
+  }, [config.transition, controller, initial, platform, props, reducedMotion, rest, target]);
+
+  useEffect(() => {
+    const unsubs = Object.entries(liveValues).map(([key, value]) =>
+      value.on("change", (next) => {
+        if (target[key as MotionStyleKey] === undefined && !reducedMotion) {
+          controller.setVisualStyle({ [key]: next });
+        }
+      }),
+    );
+    return () => unsubs.forEach((unsubscribe) => unsubscribe());
+  }, [controller, liveValues, reducedMotion, target]);
+
+  return controller;
+};
diff --git a/libraries/paywalls/src/schema/node-tree.ts b/libraries/paywalls/src/schema/node-tree.ts
index 0689cd96a..3a20e5543 100644
--- a/libraries/paywalls/src/schema/node-tree.ts
+++ b/libraries/paywalls/src/schema/node-tree.ts
@@ -4,9 +4,10 @@
  * Servers validate uploaded trees against exactly these shapes.
  */
 import type { PaywallStyle } from "./style";
+import type { ResolvedMotionStyle } from "../motion/types";
 
 /** Wire version of the preview node tree format. */
-export const PAYWALL_TREE_VERSION = 1 as const;
+export const PAYWALL_TREE_VERSION = 2 as const;
 
 /** How an image node fills its frame. Mirrors RN `resizeMode`. */
 export type PaywallNodeResizeMode = "cover" | "contain" | "stretch" | "center";
@@ -14,12 +15,15 @@ export type PaywallNodeResizeMode = "cover" | "contain" | "stretch" | "center";
 export interface PaywallViewNode {
   readonly type: "view";
   readonly style: PaywallStyle;
+  /** Resolved rest visual output only; never a transition, callback, or live value. */
+  readonly motion?: ResolvedMotionStyle;
   readonly children: ReadonlyArray<PaywallNode>;
 }
 
 export interface PaywallPressableNode {
   readonly type: "pressable";
   readonly style: PaywallStyle;
+  readonly motion?: ResolvedMotionStyle;
   readonly children: ReadonlyArray<PaywallNode>;
   /** The declared action name this pressable fires, when known. */
   readonly action?: string;
@@ -28,18 +32,21 @@ export interface PaywallPressableNode {
 export interface PaywallScrollNode {
   readonly type: "scroll";
   readonly style: PaywallStyle;
+  readonly motion?: ResolvedMotionStyle;
   readonly children: ReadonlyArray<PaywallNode>;
 }
 
 export interface PaywallTextNode {
   readonly type: "text";
   readonly style: PaywallStyle;
+  readonly motion?: ResolvedMotionStyle;
   readonly text: string;
 }
 
 export interface PaywallImageNode {
   readonly type: "image";
   readonly style: PaywallStyle;
+  readonly motion?: ResolvedMotionStyle;
   readonly src: string;
   readonly resizeMode?: PaywallNodeResizeMode;
 }
diff --git a/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
index 81ac0b034..b9dccb329 100644
--- a/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
+++ b/libraries/paywalls/src/tree-renderer/render-to-node-tree.tsx
@@ -27,6 +27,8 @@ import {
   type PaywallNodeResizeMode,
   type PaywallNodeTree,
 } from "../schema/node-tree";
+import { MOTION_STYLE_KEYS, type ResolvedMotionStyle } from "../motion/types";
+import { isMotionValue } from "../motion/value";
 import {
   PAYWALL_STYLE_KEYS,
   type PaywallStyle,
@@ -34,6 +36,7 @@ import {
 } from "../schema/style";
 import { flattenStyle } from "../style/resolve";
 import { TREE_ELEMENT_TYPES, treeHostComponents } from "./tree-host";
+import { staticMotionPlatformAdapter } from "../motion/platform";
 
 // ── Instance model ───────────────────────────────────────────────────────────
 
@@ -211,13 +214,39 @@ const sanitizeStyle = (style: unknown): PaywallStyle => {
   const flat = flattenStyle(style as StyleProp);
   const out: Record<string, unknown> = {};
   for (const [key, value] of Object.entries(flat)) {
-    if (value !== undefined && value !== null && ALLOWED_STYLE_KEYS.has(key)) {
+    if (
+      value !== undefined &&
+      value !== null &&
+      !isMotionValue(value) &&
+      ALLOWED_STYLE_KEYS.has(key)
+    ) {
       out[key] = value;
     }
   }
   return out as PaywallStyle;
 };
 
+const sanitizeMotion = (motion: unknown): ResolvedMotionStyle | undefined => {
+  if (typeof motion !== "object" || motion === null) return undefined;
+  const candidate = motion as Record<string, unknown>;
+  const out: Record<string, unknown> = {};
+  for (const key of MOTION_STYLE_KEYS) {
+    const value = candidate[key];
+    if (
+      (typeof value === "number" && Number.isFinite(value)) ||
+      (key === "backgroundColor" && typeof value === "string") ||
+      (key === "transformOrigin" &&
+        typeof value === "object" &&
+        value !== null &&
+        typeof (value as Record<string, unknown>).x === "number" &&
+        typeof (value as Record<string, unknown>).y === "number")
+    ) {
+      out[key] = value;
+    }
+  }
+  return Object.keys(out).length === 0 ? undefined : (out as ResolvedMotionStyle);
+};
+
 const collectText = (children: ReadonlyArray<TreeChild>): string => {
   let text = "";
   for (const child of children) {
@@ -246,11 +275,13 @@ const serializeChild = (child: TreeChild): PaywallNode => {
     return { type: "text", style: {}, text: child.text };
   }
   const style = sanitizeStyle(child.props.style);
+  const motion = sanitizeMotion(child.props.motion);
   switch (child.type) {
     case TREE_ELEMENT_TYPES.view:
       return {
         type: "view",
         style,
+        ...(motion ? { motion } : {}),
         children: serializeChildren(child.children),
       };
     case TREE_ELEMENT_TYPES.pressable: {
@@ -258,6 +289,7 @@ const serializeChild = (child: TreeChild): PaywallNode => {
       return {
         type: "pressable",
         style,
+        ...(motion ? { motion } : {}),
         children: serializeChildren(child.children),
         ...(typeof action === "string" ? { action } : {}),
       };
@@ -266,10 +298,11 @@ const serializeChild = (child: TreeChild): PaywallNode => {
       return {
         type: "scroll",
         style,
+        ...(motion ? { motion } : {}),
         children: serializeChildren(child.children),
       };
     case TREE_ELEMENT_TYPES.text:
-      return { type: "text", style, text: collectText(child.children) };
+      return { type: "text", style, ...(motion ? { motion } : {}), text: collectText(child.children) };
     case TREE_ELEMENT_TYPES.image: {
       const resizeMode = child.props.resizeMode as
         | PaywallNodeResizeMode
@@ -277,6 +310,7 @@ const serializeChild = (child: TreeChild): PaywallNode => {
       return {
         type: "image",
         style,
+        ...(motion ? { motion } : {}),
         src: typeof child.props.src === "string" ? child.props.src : "",
         ...(resizeMode && RESIZE_MODES.includes(resizeMode)
           ? { resizeMode }
@@ -395,7 +429,7 @@ export const renderToNodeTree = async (
   );
 
   const wrapped = (
-    <RendererProvider host={treeHostComponents}>
+    <RendererProvider host={treeHostComponents} motion={staticMotionPlatformAdapter}>
       <PaywallRuntimeProvider
         bridge={silentBridge}
         config={normalizeRuntimeConfig(options.config)}
diff --git a/libraries/paywalls/src/tree-renderer/tree-host.ts b/libraries/paywalls/src/tree-renderer/tree-host.ts
index 3470f7409..2e879a5af 100644
--- a/libraries/paywalls/src/tree-renderer/tree-host.ts
+++ b/libraries/paywalls/src/tree-renderer/tree-host.ts
@@ -4,8 +4,11 @@
  * reconciler turns into §3 nodes. Interaction state is static: pressables
  * render their non-pressed children, scroll views render flat.
  */
-import { createElement, type ReactNode } from "react";
+import { createElement, forwardRef, type ReactNode } from "react";
 
+import { resolveMotionRestStyle } from "../motion/resolve";
+import type { MotionNodeHandle, MotionStyleProp, MotionVisualProps, ScrollViewHandle } from "../motion/types";
+import { staticMotionPlatformAdapter } from "../motion/platform";
 import type {
   HostComponents,
   ImageProps,
@@ -33,34 +36,47 @@ export const TREE_ELEMENT_TYPES = {
 const hasStyleKeys = (style: StyleProp): boolean =>
   Object.keys(flattenStyle(style)).length > 0;
 
-const TreeView = ({ style, children }: ViewProps): ReactNode =>
-  createElement(TREE_ELEMENT_TYPES.view, { style }, children);
+const withMotion = <Props extends MotionVisualProps & { style?: MotionStyleProp }>(props: Props) => {
+  const motion = resolveMotionRestStyle(props, props.style);
+  return Object.keys(motion).length === 0 ? {} : { motion };
+};
+
+const TreeView = forwardRef<MotionNodeHandle, ViewProps>(({ style, children, ...props }, _ref): ReactNode =>
+  createElement(TREE_ELEMENT_TYPES.view, { style, ...withMotion({ ...props, style }) }, children),
+);
 
-const TreeText = ({ style, children }: TextProps): ReactNode =>
-  createElement(TREE_ELEMENT_TYPES.text, { style }, children);
+const TreeText = forwardRef<MotionNodeHandle, TextProps>(({ style, children, ...props }, _ref): ReactNode =>
+  createElement(TREE_ELEMENT_TYPES.text, { style, ...withMotion({ ...props, style }) }, children),
+);
 
-const TreePressable = ({
+const TreePressable = forwardRef<MotionNodeHandle, PressableHostProps>(({
   style,
   children,
   actionName,
-}: PressableHostProps): ReactNode =>
+  ...props
+}, _ref): ReactNode =>
   createElement(
     TREE_ELEMENT_TYPES.pressable,
-    { action: actionName, style },
+    { action: actionName, style, ...withMotion({ ...props, style }) },
     typeof children === "function" ? children({ pressed: false }) : children,
-  );
+  ),
+);
 
-const TreeScrollView = ({
+const TreeScrollView = forwardRef<ScrollViewHandle, ScrollViewProps>(({
   style,
   contentContainerStyle,
   horizontal,
   children,
-}: ScrollViewProps): ReactNode =>
+  ...props
+}, _ref): ReactNode =>
   createElement(
     TREE_ELEMENT_TYPES.scroll,
     // §3 scroll nodes carry no `horizontal` key; the axis is expressed
     // through the style subset instead.
-    { style: horizontal ? [{ flexDirection: "row" as const }, style] : style },
+    {
+      style: horizontal ? [{ flexDirection: "row" as const }, style] : style,
+      ...withMotion({ ...props, style }),
+    },
     // RN's contentContainerStyle has no §3 equivalent — preserve it as an
     // inner view when it actually styles something.
     hasStyleKeys(contentContainerStyle)
@@ -70,14 +86,17 @@ const TreeScrollView = ({
           children,
         )
       : children,
-  );
+  ),
+);
 
-const TreeImage = ({ style, source, resizeMode }: ImageProps): ReactNode =>
+const TreeImage = forwardRef<MotionNodeHandle, ImageProps>(({ style, source, resizeMode, ...props }, _ref): ReactNode =>
   createElement(TREE_ELEMENT_TYPES.image, {
+    ...withMotion({ ...props, style }),
     resizeMode,
     src: resolveImageSource(source),
     style,
-  });
+  }),
+);
 
 const TreeSlot = ({ children }: SlotHostProps): ReactNode =>
   // No consumer children → emit the slot marker so the editor knows where to
@@ -93,3 +112,6 @@ export const treeHostComponents: HostComponents = {
   Text: TreeText,
   View: TreeView,
 };
+
+/** The tree host's synchronous rest-state adapter. It never schedules live animation. */
+export { staticMotionPlatformAdapter };
diff --git a/libraries/paywalls/src/tree.ts b/libraries/paywalls/src/tree.ts
index 97d03495d..4036b1730 100644
--- a/libraries/paywalls/src/tree.ts
+++ b/libraries/paywalls/src/tree.ts
@@ -20,11 +20,13 @@ export {
   type PaywallTextNode,
   type PaywallViewNode,
 } from "./schema/node-tree";
+export type { ResolvedMotionStyle } from "./motion/types";
 export {
   type RenderToNodeTreeOptions,
   renderToNodeTree,
 } from "./tree-renderer/render-to-node-tree";
 export {
   TREE_ELEMENT_TYPES,
+  staticMotionPlatformAdapter,
   treeHostComponents,
 } from "./tree-renderer/tree-host";
diff --git a/libraries/paywalls/tests/motion.test.ts b/libraries/paywalls/tests/motion.test.ts
new file mode 100644
index 000000000..c5da73ffa
--- /dev/null
+++ b/libraries/paywalls/tests/motion.test.ts
@@ -0,0 +1,65 @@
+import { describe, expect, it } from "vitest";
+
+import { createManualFrameDriver, animateMotionValue } from "../src/motion/animation";
+import { resolveDragGestureWinner } from "../src/motion/drag";
+import { resolveMotionRestStyle } from "../src/motion/resolve";
+import { compileMotionCss, compileMotionTransform } from "../src/motion/transform";
+import { motionValue } from "../src/motion/value";
+
+describe("motion values", () => {
+  it("keeps previous values and reports updates without React state", () => {
+    const value = motionValue(1);
+    const values: number[] = [];
+    const unsubscribe = value.on("change", (next) => values.push(next));
+    value.set(4);
+    value.set(4);
+    value.set(9);
+    unsubscribe();
+
+    expect(value.get()).toBe(9);
+    expect(value.getPrevious()).toBe(4);
+    expect(values).toEqual([4, 9]);
+  });
+
+  it("supports interruptible manual-clock tween animation", () => {
+    const driver = createManualFrameDriver();
+    const value = motionValue(0);
+    const stop = animateMotionValue(value, 10, { duration: 0.1 }, driver);
+    driver.step(0);
+    driver.step(50);
+    expect(value.get()).toBe(5);
+    stop();
+    driver.step(100);
+    expect(value.get()).toBe(5);
+  });
+});
+
+describe("motion visual output", () => {
+  it("uses one canonical transform order", () => {
+    expect(compileMotionTransform({ rotate: 12, scale: 1.1, scaleX: 0.9, x: 8, y: -4 })).toBe(
+      "translate3d(8px, -4px, 0) rotate(12deg) scale(1.1) scaleX(0.9)",
+    );
+    expect(compileMotionCss({ transformOrigin: { x: 0.25, y: 1 } })).toEqual({
+      transformOrigin: "25% 100%",
+    });
+  });
+
+  it("gives animate variants precedence over literal motion style", () => {
+    expect(
+      resolveMotionRestStyle(
+        { animate: "open", variants: { open: { opacity: 1, y: 0 } } },
+        { opacity: 0.5, x: 8, y: 24 },
+      ),
+    ).toEqual({ opacity: 1, x: 8, y: 0 });
+  });
+});
+
+describe("drag arbitration", () => {
+  it("keeps a horizontal card draggable in a vertical scroll and reserves matching axes by default", () => {
+    expect(resolveDragGestureWinner({ direction: "x", drag: "x", scrollAxis: "y" })).toBe("drag");
+    expect(resolveDragGestureWinner({ direction: "y", drag: "y", scrollAxis: "y" })).toBe("scroll");
+    expect(
+      resolveDragGestureWinner({ direction: "y", drag: "y", gesturePriority: "drag", scrollAxis: "y" }),
+    ).toBe("drag");
+  });
+});
diff --git a/libraries/paywalls/tests/tree.test.tsx b/libraries/paywalls/tests/tree.test.tsx
index bc33d3168..3a2cb70bd 100644
--- a/libraries/paywalls/tests/tree.test.tsx
+++ b/libraries/paywalls/tests/tree.test.tsx
@@ -5,6 +5,7 @@ import { describe, expect, it } from "vitest";
 import {
   defineComponent,
   Image,
+  motionValue,
   type PaywallProduct,
   Pressable,
   ScrollView,
@@ -44,7 +45,7 @@ describe("renderToNodeTree", () => {
     );
 
     expect(tree).toEqual({
-      treeVersion: 1,
+      treeVersion: 2,
       state: "default",
       root: {
         type: "view",
@@ -62,6 +63,37 @@ describe("renderToNodeTree", () => {
     });
   });
 
+  it("serializes only a resolved rest visual state for motion-capable primitives", async () => {
+    const liveOpacity = motionValue(0.2);
+    const tree = await renderToNodeTree(
+      <View
+        animate="visible"
+        initial={{ opacity: 0, y: 16 }}
+        style={{ scale: 0.96, x: 12, opacity: liveOpacity }}
+        variants={{ visible: { opacity: 1, y: 0 } }}
+        whileInView={{ y: -20 }}
+      />,
+    );
+
+    expect(tree.root).toEqual({
+      type: "view",
+      style: {},
+      motion: { opacity: 1, scale: 0.96, x: 12, y: 0 },
+      children: [],
+    });
+    expect(JSON.stringify(tree)).not.toContain("whileInView");
+  });
+
+  it("uses initial when a component has no animate target", async () => {
+    const tree = await renderToNodeTree(<Text initial={{ opacity: 0, y: 12 }}>Loading</Text>);
+    expect(tree.root).toEqual({
+      type: "text",
+      style: {},
+      motion: { opacity: 0, y: 12 },
+      text: "Loading",
+    });
+  });
+
   it("keeps paddingHorizontal/Vertical shorthands (allowed by §3.1)", async () => {
     const tree = await renderToNodeTree(
       <View style={[{ paddingHorizontal: 24 }, { marginVertical: 8 }]} />,
diff --git a/libraries/paywalls/tests/types.test.ts b/libraries/paywalls/tests/types.test.ts
index dcd573119..3fd8383c3 100644
--- a/libraries/paywalls/tests/types.test.ts
+++ b/libraries/paywalls/tests/types.test.ts
@@ -16,6 +16,9 @@ import {
   type PAYWALL_STYLE_KEYS,
   type PaywallProduct,
   type PaywallStyle,
+  type ScrollViewProps,
+  type TextProps,
+  type ViewProps,
 } from "../src/index";
 
 const p = propFactory;
@@ -154,3 +157,15 @@ describe("PaywallStyle subset", () => {
     void bad;
   });
 });
+
+describe("motion primitive support matrix", () => {
+  it("keeps drag off Text and ScrollView while exposing it on View", () => {
+    expectTypeOf<ViewProps>().toMatchTypeOf<{ drag?: "x" | "y" | true }>();
+    // @ts-expect-error Text is visual but never draggable.
+    const text: TextProps = { drag: "x" };
+    // @ts-expect-error ScrollView is a scroll source and animation target, never draggable.
+    const scroll: ScrollViewProps = { drag: "y" };
+    void text;
+    void scroll;
+  });
+});

From 27c198d5e98021451194507b69ff87ca7063cb74 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 10:20:21 +0200
Subject: [PATCH 034/129] docs(legal): draft multi-license policy

---
 CONTRIBUTING.md                            |   6 +
 CONTRIBUTOR_LICENSE_AGREEMENT.md           | 121 ++++
 LICENSE.md                                 | 681 +--------------------
 LICENSES/AGPL-3.0-only.txt                 | 661 ++++++++++++++++++++
 LICENSES/MIT.txt                           |  21 +
 LICENSES/Voidhash-Enterprise-DRAFT.md      | 115 ++++
 README.md                                  |  13 +-
 apps/cli/package.json                      |   1 +
 examples/react-native-example/package.json |   1 +
 packages/generated-clients/package.json    |   1 +
 packages/shared/package.json               |   1 +
 packages/tsconfig/package.json             |   1 +
 12 files changed, 971 insertions(+), 652 deletions(-)
 create mode 100644 CONTRIBUTOR_LICENSE_AGREEMENT.md
 create mode 100644 LICENSES/AGPL-3.0-only.txt
 create mode 100644 LICENSES/MIT.txt
 create mode 100644 LICENSES/Voidhash-Enterprise-DRAFT.md

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index c7042443d..4af4268fe 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -2,6 +2,12 @@
 
 Thanks for taking the time to improve voidhash! This is a small document to get you started.
 
+Before a contribution can be merged, the contributor must accept the
+Voidhash Contributor License Agreement through the configured acceptance
+process. The current [CLA draft](CONTRIBUTOR_LICENSE_AGREEMENT.md) is awaiting
+legal approval; external contributions must not be merged until the approved
+agreement and its blocking check are live.
+
 Please refer to the [getting-started documentation](https://voidhash.com/docs/contribute/getting-started) specific to contributing for more information.
 
 ## Security Issues
diff --git a/CONTRIBUTOR_LICENSE_AGREEMENT.md b/CONTRIBUTOR_LICENSE_AGREEMENT.md
new file mode 100644
index 000000000..6bd2b8a7a
--- /dev/null
+++ b/CONTRIBUTOR_LICENSE_AGREEMENT.md
@@ -0,0 +1,121 @@
+# Voidhash Contributor License Agreement
+
+> Draft for legal review. This agreement must be approved by counsel and wired
+> to the chosen CLA acceptance process before external contributions are
+> merged.
+
+Thank you for contributing to projects managed by Voidhash s.r.o. This
+Contributor License Agreement (the "Agreement") records the rights you grant
+for contributions and protects your continued ownership of them. It is a
+legally binding agreement; please read it carefully before accepting it.
+
+## 1. Definitions
+
+"You" means the individual accepting this Agreement or the legal entity on
+whose behalf it is accepted. If You are a legal entity, You includes entities
+that You control, that control You, or that are under common control with You.
+"Control" means ownership of more than 50 percent of the voting interests or
+the power to direct management or policies.
+
+"Contribution" means an original work of authorship, including source code,
+documentation, designs, or modifications to existing material, that You
+intentionally submit to Voidhash for inclusion in a Voidhash-managed project.
+
+"Submit" means any electronic, written, or verbal communication sent to a
+Voidhash-managed source-control system, issue tracker, mailing list, or other
+channel for the purpose of discussing or improving a project. Communication
+conspicuously marked "Not a Contribution" is excluded.
+
+"Material" means the project to which You Submit a Contribution.
+
+## 2. Copyright license
+
+You retain ownership of Your Contribution and may use or license it for any
+other purpose.
+
+You grant Voidhash a perpetual, worldwide, non-exclusive, transferable,
+royalty-free, irrevocable copyright license, with the right to sublicense
+through multiple tiers, to use, reproduce, modify, prepare derivative works of,
+publicly display, publicly perform, make available, distribute, and otherwise
+exploit Your Contribution as part of any Voidhash product or project.
+
+This grant permits Voidhash to license Your Contribution under open-source,
+source-available, commercial, or proprietary terms. If Voidhash includes Your
+Contribution in Material that was publicly available on the Submission date,
+Voidhash will also continue to make that Contribution available under the
+license that applied to that Material on the Submission date.
+
+## 3. Patent license
+
+You grant Voidhash and recipients of software distributed by Voidhash a
+perpetual, worldwide, non-exclusive, royalty-free, irrevocable patent license
+to make, have made, use, offer to sell, sell, import, and otherwise transfer the
+Contribution and the Material, but only for patent claims You can license that
+are necessarily infringed by Your Contribution alone or by its combination
+with the Material to which it was Submitted.
+
+If You or an entity acting on Your behalf initiates patent litigation alleging
+that a Contribution or Material incorporating it infringes a patent, the patent
+licenses granted to that entity under this section terminate on the filing date
+of that claim.
+
+## 4. Moral rights
+
+To the maximum extent permitted by applicable law, You waive and agree not to
+assert moral rights in Your Contribution against Voidhash, its successors, or
+its licensees. Where a waiver is not permitted, You grant the permissions
+needed for Voidhash to exercise the rights in this Agreement.
+
+## 5. Your representations
+
+You represent that:
+
+1. You have the legal authority to enter into this Agreement and grant these
+   rights;
+2. each Contribution is Your original creation, except for third-party material
+   that You identify as described below;
+3. if an employer or another party has rights in Your Contribution, that party
+   has authorized the Contribution or waived those rights; and
+4. You will disclose any third-party license, patent, or other restriction of
+   which You are aware and will clearly identify the source and license of any
+   third-party material.
+
+## 6. No support or warranty
+
+You are not required to provide support for Your Contribution. Unless You agree
+otherwise in writing or applicable law requires it, You provide each
+Contribution "AS IS", WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT,
+MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.
+
+## 7. Project discretion
+
+Voidhash is not required to use or distribute any Contribution. Except for the
+rights granted in this Agreement, You reserve all rights in Your Contribution.
+
+## 8. General terms
+
+This Agreement applies to Contributions Submitted after You accept it and to
+earlier Contributions You identify when accepting it. It may be accepted by an
+electronic record that identifies You and the account used to Submit the
+Contribution.
+
+This Agreement is governed by the laws of the Czech Republic, excluding its
+conflict-of-law rules. Courts with subject-matter jurisdiction in Prague, Czech
+Republic, have exclusive jurisdiction over disputes arising from this
+Agreement. If a provision is unenforceable, it will be limited to the minimum
+extent necessary and the remaining provisions will continue in effect.
+
+This Agreement is the entire agreement concerning Contributions between You
+and Voidhash and may be amended only in a writing accepted by both parties.
+
+## Acceptance record
+
+- Full legal name:
+- GitHub username:
+- Email address:
+- Acting as: individual / authorized representative of a legal entity
+- Legal entity, if applicable:
+- Earlier Contributions covered, if any:
+- Date:
+- Signature or electronic acceptance:
diff --git a/LICENSE.md b/LICENSE.md
index ef2d9cee1..8111c03df 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -1,663 +1,42 @@
-Copyright (c) 2025-present Voidhash s.r.o.
-
-                    GNU AFFERO GENERAL PUBLIC LICENSE
-                       Version 3, 19 November 2007
-
-Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
-Everyone is permitted to copy and distribute verbatim copies
-of this license document, but changing it is not allowed.
-
-                            Preamble
-
-The GNU Affero General Public License is a free, copyleft license for
-software and other kinds of works, specifically designed to ensure
-cooperation with the community in the case of network server software.
-
-The licenses for most software and other practical works are designed
-to take away your freedom to share and change the works. By contrast,
-our General Public Licenses are intended to guarantee your freedom to
-share and change all versions of a program--to make sure it remains free
-software for all its users.
-
-When we speak of free software, we are referring to freedom, not
-price. Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-them if you wish), that you receive source code or can get it if you
-want it, that you can change the software or use pieces of it in new
-free programs, and that you know you can do these things.
-
-Developers that use our General Public Licenses protect your rights
-with two steps: (1) assert copyright on the software, and (2) offer
-you this License which gives you legal permission to copy, distribute
-and/or modify the software.
-
-A secondary benefit of defending all users' freedom is that
-improvements made in alternate versions of the program, if they
-receive widespread use, become available for other developers to
-incorporate. Many developers of free software are heartened and
-encouraged by the resulting cooperation. However, in the case of
-software used on network servers, this result may fail to come about.
-The GNU General Public License permits making a modified version and
-letting the public access it on a server without ever releasing its
-source code to the public.
-
-The GNU Affero General Public License is designed specifically to
-ensure that, in such cases, the modified source code becomes available
-to the community. It requires the operator of a network server to
-provide the source code of the modified version running there to the
-users of that server. Therefore, public use of a modified version, on
-a publicly accessible server, gives the public access to the source
-code of the modified version.
-
-An older license, called the Affero General Public License and
-published by Affero, was designed to accomplish similar goals. This is
-a different license, not a version of the Affero GPL, but Affero has
-released a new version of the Affero GPL which permits relicensing under
-this license.
-
-The precise terms and conditions for copying, distribution and
-modification follow.
-
-                       TERMS AND CONDITIONS
-
-0. Definitions.
-
-"This License" refers to version 3 of the GNU Affero General Public License.
-
-"Copyright" also means copyright-like laws that apply to other kinds of
-works, such as semiconductor masks.
-
-"The Program" refers to any copyrightable work licensed under this
-License. Each licensee is addressed as "you". "Licensees" and
-"recipients" may be individuals or organizations.
-
-To "modify" a work means to copy from or adapt all or part of the work
-in a fashion requiring copyright permission, other than the making of an
-exact copy. The resulting work is called a "modified version" of the
-earlier work or a work "based on" the earlier work.
-
-A "covered work" means either the unmodified Program or a work based
-on the Program.
-
-To "propagate" a work means to do anything with it that, without
-permission, would make you directly or secondarily liable for
-infringement under applicable copyright law, except executing it on a
-computer or modifying a private copy. Propagation includes copying,
-distribution (with or without modification), making available to the
-public, and in some countries other activities as well.
-
-To "convey" a work means any kind of propagation that enables other
-parties to make or receive copies. Mere interaction with a user through
-a computer network, with no transfer of a copy, is not conveying.
-
-An interactive user interface displays "Appropriate Legal Notices"
-to the extent that it includes a convenient and prominently visible
-feature that (1) displays an appropriate copyright notice, and (2)
-tells the user that there is no warranty for the work (except to the
-extent that warranties are provided), that licensees may convey the
-work under this License, and how to view a copy of this License. If
-the interface presents a list of user commands or options, such as a
-menu, a prominent item in the list meets this criterion.
-
-1. Source Code.
-
-The "source code" for a work means the preferred form of the work
-for making modifications to it. "Object code" means any non-source
-form of a work.
-
-A "Standard Interface" means an interface that either is an official
-standard defined by a recognized standards body, or, in the case of
-interfaces specified for a particular programming language, one that
-is widely used among developers working in that language.
-
-The "System Libraries" of an executable work include anything, other
-than the work as a whole, that (a) is included in the normal form of
-packaging a Major Component, but which is not part of that Major
-Component, and (b) serves only to enable use of the work with that
-Major Component, or to implement a Standard Interface for which an
-implementation is available to the public in source code form. A
-"Major Component", in this context, means a major essential component
-(kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to
-produce the work, or an object code interpreter used to run it.
-
-The "Corresponding Source" for a work in object code form means all
-the source code needed to generate, install, and (for an executable
-work) run the object code and to modify the work, including scripts to
-control those activities. However, it does not include the work's
-System Libraries, or general-purpose tools or generally available free
-programs which are used unmodified in performing those activities but
-which are not part of the work. For example, Corresponding Source
-includes interface definition files associated with source files for
-the work, and the source code for shared libraries and dynamically
-linked subprograms that the work is specifically designed to require,
-such as by intimate data communication or control flow between those
-subprograms and other parts of the work.
-
-The Corresponding Source need not include anything that users
-can regenerate automatically from other parts of the Corresponding
-Source.
-
-The Corresponding Source for a work in source code form is that
-same work.
-
-2. Basic Permissions.
-
-All rights granted under this License are granted for the term of
-copyright on the Program, and are irrevocable provided the stated
-conditions are met. This License explicitly affirms your unlimited
-permission to run the unmodified Program. The output from running a
-covered work is covered by this License only if the output, given its
-content, constitutes a covered work. This License acknowledges your
-rights of fair use or other equivalent, as provided by copyright law.
-
-You may make, run and propagate covered works that you do not
-convey, without conditions so long as your license otherwise remains
-in force. You may convey covered works to others for the sole purpose
-of having them make modifications exclusively for you, or provide you
-with facilities for running those works, provided that you comply with
-the terms of this License in conveying all material for which you do
-not control copyright. Those thus making or running the covered works
-for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of
-your copyrighted material outside their relationship with you.
-
-Conveying under any other circumstances is permitted solely under
-the conditions stated below. Sublicensing is not allowed; section 10
-makes it unnecessary.
-
-3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
-No covered work shall be deemed part of an effective technological
-measure under any applicable law fulfilling obligations under article
-11 of the WIPO copyright treaty adopted on 20 December 1996, or
-similar laws prohibiting or restricting circumvention of such
-measures.
-
-When you convey a covered work, you waive any legal power to forbid
-circumvention of technological measures to the extent such circumvention
-is effected by exercising rights under this License with respect to
-the covered work, and you disclaim any intention to limit operation or
-modification of the work as a means of enforcing, against the work's
-users, your or third parties' legal rights to forbid circumvention of
-technological measures.
-
-4. Conveying Verbatim Copies.
-
-You may convey verbatim copies of the Program's source code as you
-receive it, in any medium, provided that you conspicuously and
-appropriately publish on each copy an appropriate copyright notice;
-keep intact all notices stating that this License and any
-non-permissive terms added in accord with section 7 apply to the code;
-keep intact all notices of the absence of any warranty; and give all
-recipients a copy of this License along with the Program.
-
-You may charge any price or no price for each copy that you convey,
-and you may offer support or warranty protection for a fee.
-
-5. Conveying Modified Source Versions.
-
-You may convey a work based on the Program, or the modifications to
-produce it from the Program, in the form of source code under the
-terms of section 4, provided that you also meet all of these conditions:
-
-    a) The work must carry prominent notices stating that you modified
-    it, and giving a relevant date.
-
-    b) The work must carry prominent notices stating that it is
-    released under this License and any conditions added under section
-    7.  This requirement modifies the requirement in section 4 to
-    "keep intact all notices".
-
-    c) You must license the entire work, as a whole, under this
-    License to anyone who comes into possession of a copy.  This
-    License will therefore apply, along with any applicable section 7
-    additional terms, to the whole of the work, and all its parts,
-    regardless of how they are packaged.  This License gives no
-    permission to license the work in any other way, but it does not
-    invalidate such permission if you have separately received it.
-
-    d) If the work has interactive user interfaces, each must display
-    Appropriate Legal Notices; however, if the Program has interactive
-    interfaces that do not display Appropriate Legal Notices, your
-    work need not make them do so.
-
-A compilation of a covered work with other separate and independent
-works, which are not by their nature extensions of the covered work,
-and which are not combined with it such as to form a larger program,
-in or on a volume of a storage or distribution medium, is called an
-"aggregate" if the compilation and its resulting copyright are not
-used to limit the access or legal rights of the compilation's users
-beyond what the individual works permit. Inclusion of a covered work
-in an aggregate does not cause this License to apply to the other
-parts of the aggregate.
-
-6. Conveying Non-Source Forms.
-
-You may convey a covered work in object code form under the terms
-of sections 4 and 5, provided that you also convey the
-machine-readable Corresponding Source under the terms of this License,
-in one of these ways:
-
-    a) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by the
-    Corresponding Source fixed on a durable physical medium
-    customarily used for software interchange.
-
-    b) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by a
-    written offer, valid for at least three years and valid for as
-    long as you offer spare parts or customer support for that product
-    model, to give anyone who possesses the object code either (1) a
-    copy of the Corresponding Source for all the software in the
-    product that is covered by this License, on a durable physical
-    medium customarily used for software interchange, for a price no
-    more than your reasonable cost of physically performing this
-    conveying of source, or (2) access to copy the
-    Corresponding Source from a network server at no charge.
-
-    c) Convey individual copies of the object code with a copy of the
-    written offer to provide the Corresponding Source.  This
-    alternative is allowed only occasionally and noncommercially, and
-    only if you received the object code with such an offer, in accord
-    with subsection 6b.
-
-    d) Convey the object code by offering access from a designated
-    place (gratis or for a charge), and offer equivalent access to the
-    Corresponding Source in the same way through the same place at no
-    further charge.  You need not require recipients to copy the
-    Corresponding Source along with the object code.  If the place to
-    copy the object code is a network server, the Corresponding Source
-    may be on a different server (operated by you or a third party)
-    that supports equivalent copying facilities, provided you maintain
-    clear directions next to the object code saying where to find the
-    Corresponding Source.  Regardless of what server hosts the
-    Corresponding Source, you remain obligated to ensure that it is
-    available for as long as needed to satisfy these requirements.
-
-    e) Convey the object code using peer-to-peer transmission, provided
-    you inform other peers where the object code and Corresponding
-    Source of the work are being offered to the general public at no
-    charge under subsection 6d.
-
-A separable portion of the object code, whose source code is excluded
-from the Corresponding Source as a System Library, need not be
-included in conveying the object code work.
+# Voidhash licensing
 
-A "User Product" is either (1) a "consumer product", which means any
-tangible personal property which is normally used for personal, family,
-or household purposes, or (2) anything designed or sold for incorporation
-into a dwelling. In determining whether a product is a consumer product,
-doubtful cases shall be resolved in favor of coverage. For a particular
-product received by a particular user, "normally used" refers to a
-typical or common use of that class of product, regardless of the status
-of the particular user or of the way in which the particular user
-actually uses, or expects or is expected to use, the product. A product
-is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent
-the only significant mode of use of the product.
-
-"Installation Information" for a User Product means any methods,
-procedures, authorization keys, or other information required to install
-and execute modified versions of a covered work in that User Product from
-a modified version of its Corresponding Source. The information must
-suffice to ensure that the continued functioning of the modified object
-code is in no case prevented or interfered with solely because
-modification has been made.
-
-If you convey an object code work under this section in, or with, or
-specifically for use in, a User Product, and the conveying occurs as
-part of a transaction in which the right of possession and use of the
-User Product is transferred to the recipient in perpetuity or for a
-fixed term (regardless of how the transaction is characterized), the
-Corresponding Source conveyed under this section must be accompanied
-by the Installation Information. But this requirement does not apply
-if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has
-been installed in ROM).
-
-The requirement to provide Installation Information does not include a
-requirement to continue to provide support service, warranty, or updates
-for a work that has been modified or installed by the recipient, or for
-the User Product in which it has been modified or installed. Access to a
-network may be denied when the modification itself materially and
-adversely affects the operation of the network or violates the rules and
-protocols for communication across the network.
-
-Corresponding Source conveyed, and Installation Information provided,
-in accord with this section must be in a format that is publicly
-documented (and with an implementation available to the public in
-source code form), and must require no special password or key for
-unpacking, reading or copying.
-
-7. Additional Terms.
-
-"Additional permissions" are terms that supplement the terms of this
-License by making exceptions from one or more of its conditions.
-Additional permissions that are applicable to the entire Program shall
-be treated as though they were included in this License, to the extent
-that they are valid under applicable law. If additional permissions
-apply only to part of the Program, that part may be used separately
-under those permissions, but the entire Program remains governed by
-this License without regard to the additional permissions.
-
-When you convey a copy of a covered work, you may at your option
-remove any additional permissions from that copy, or from any part of
-it. (Additional permissions may be written to require their own
-removal in certain cases when you modify the work.) You may place
-additional permissions on material, added by you to a covered work,
-for which you have or can give appropriate copyright permission.
-
-Notwithstanding any other provision of this License, for material you
-add to a covered work, you may (if authorized by the copyright holders of
-that material) supplement the terms of this License with terms:
-
-    a) Disclaiming warranty or limiting liability differently from the
-    terms of sections 15 and 16 of this License; or
-
-    b) Requiring preservation of specified reasonable legal notices or
-    author attributions in that material or in the Appropriate Legal
-    Notices displayed by works containing it; or
-
-    c) Prohibiting misrepresentation of the origin of that material, or
-    requiring that modified versions of such material be marked in
-    reasonable ways as different from the original version; or
-
-    d) Limiting the use for publicity purposes of names of licensors or
-    authors of the material; or
-
-    e) Declining to grant rights under trademark law for use of some
-    trade names, trademarks, or service marks; or
-
-    f) Requiring indemnification of licensors and authors of that
-    material by anyone who conveys the material (or modified versions of
-    it) with contractual assumptions of liability to the recipient, for
-    any liability that these contractual assumptions directly impose on
-    those licensors and authors.
-
-All other non-permissive additional terms are considered "further
-restrictions" within the meaning of section 10. If the Program as you
-received it, or any part of it, contains a notice stating that it is
-governed by this License along with a term that is a further
-restriction, you may remove that term. If a license document contains
-a further restriction but permits relicensing or conveying under this
-License, you may add to a covered work material governed by the terms
-of that license document, provided that the further restriction does
-not survive such relicensing or conveying.
-
-If you add terms to a covered work in accord with this section, you
-must place, in the relevant source files, a statement of the
-additional terms that apply to those files, or a notice indicating
-where to find the applicable terms.
-
-Additional terms, permissive or non-permissive, may be stated in the
-form of a separately written license, or stated as exceptions;
-the above requirements apply either way.
-
-8. Termination.
-
-You may not propagate or modify a covered work except as expressly
-provided under this License. Any attempt otherwise to propagate or
-modify it is void, and will automatically terminate your rights under
-this License (including any patent licenses granted under the third
-paragraph of section 11).
-
-However, if you cease all violation of this License, then your
-license from a particular copyright holder is reinstated (a)
-provisionally, unless and until the copyright holder explicitly and
-finally terminates your license, and (b) permanently, if the copyright
-holder fails to notify you of the violation by some reasonable means
-prior to 60 days after the cessation.
-
-Moreover, your license from a particular copyright holder is
-reinstated permanently if the copyright holder notifies you of the
-violation by some reasonable means, this is the first time you have
-received notice of violation of this License (for any work) from that
-copyright holder, and you cure the violation prior to 30 days after
-your receipt of the notice.
-
-Termination of your rights under this section does not terminate the
-licenses of parties who have received copies or rights from you under
-this License. If your rights have been terminated and not permanently
-reinstated, you do not qualify to receive new licenses for the same
-material under section 10.
-
-9. Acceptance Not Required for Having Copies.
-
-You are not required to accept this License in order to receive or
-run a copy of the Program. Ancillary propagation of a covered work
-occurring solely as a consequence of using peer-to-peer transmission
-to receive a copy likewise does not require acceptance. However,
-nothing other than this License grants you permission to propagate or
-modify any covered work. These actions infringe copyright if you do
-not accept this License. Therefore, by modifying or propagating a
-covered work, you indicate your acceptance of this License to do so.
-
-10. Automatic Licensing of Downstream Recipients.
-
-Each time you convey a covered work, the recipient automatically
-receives a license from the original licensors, to run, modify and
-propagate that work, subject to this License. You are not responsible
-for enforcing compliance by third parties with this License.
-
-An "entity transaction" is a transaction transferring control of an
-organization, or substantially all assets of one, or subdividing an
-organization, or merging organizations. If propagation of a covered
-work results from an entity transaction, each party to that
-transaction who receives a copy of the work also receives whatever
-licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the
-Corresponding Source of the work from the predecessor in interest, if
-the predecessor has it or can get it with reasonable efforts.
-
-You may not impose any further restrictions on the exercise of the
-rights granted or affirmed under this License. For example, you may
-not impose a license fee, royalty, or other charge for exercise of
-rights granted under this License, and you may not initiate litigation
-(including a cross-claim or counterclaim in a lawsuit) alleging that
-any patent claim is infringed by making, using, selling, offering for
-sale, or importing the Program or any portion of it.
-
-11. Patents.
-
-A "contributor" is a copyright holder who authorizes use under this
-License of the Program or a work on which the Program is based. The
-work thus licensed is called the contributor's "contributor version".
-
-A contributor's "essential patent claims" are all patent claims
-owned or controlled by the contributor, whether already acquired or
-hereafter acquired, that would be infringed by some manner, permitted
-by this License, of making, using, or selling its contributor version,
-but do not include claims that would be infringed only as a
-consequence of further modification of the contributor version. For
-purposes of this definition, "control" includes the right to grant
-patent sublicenses in a manner consistent with the requirements of
-this License.
-
-Each contributor grants you a non-exclusive, worldwide, royalty-free
-patent license under the contributor's essential patent claims, to
-make, use, sell, offer for sale, import and otherwise run, modify and
-propagate the contents of its contributor version.
-
-In the following three paragraphs, a "patent license" is any express
-agreement or commitment, however denominated, not to enforce a patent
-(such as an express permission to practice a patent or covenant not to
-sue for patent infringement). To "grant" such a patent license to a
-party means to make such an agreement or commitment not to enforce a
-patent against the party.
-
-If you convey a covered work, knowingly relying on a patent license,
-and the Corresponding Source of the work is not available for anyone
-to copy, free of charge and under the terms of this License, through a
-publicly available network server or other readily accessible means,
-then you must either (1) cause the Corresponding Source to be so
-available, or (2) arrange to deprive yourself of the benefit of the
-patent license for this particular work, or (3) arrange, in a manner
-consistent with the requirements of this License, to extend the patent
-license to downstream recipients. "Knowingly relying" means you have
-actual knowledge that, but for the patent license, your conveying the
-covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that
-country that you have reason to believe are valid.
-
-If, pursuant to or in connection with a single transaction or
-arrangement, you convey, or propagate by procuring conveyance of, a
-covered work, and grant a patent license to some of the parties
-receiving the covered work authorizing them to use, propagate, modify
-or convey a specific copy of the covered work, then the patent license
-you grant is automatically extended to all recipients of the covered
-work and works based on it.
-
-A patent license is "discriminatory" if it does not include within
-the scope of its coverage, prohibits the exercise of, or is
-conditioned on the non-exercise of one or more of the rights that are
-specifically granted under this License. You may not convey a covered
-work if you are a party to an arrangement with a third party that is
-in the business of distributing software, under which you make payment
-to the third party based on the extent of your activity of conveying
-the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory
-patent license (a) in connection with copies of the covered work
-conveyed by you (or copies made from those copies), or (b) primarily
-for and in connection with specific products or compilations that
-contain the covered work, unless you entered into that arrangement,
-or that patent license was granted, prior to 28 March 2007.
-
-Nothing in this License shall be construed as excluding or limiting
-any implied license or other defenses to infringement that may
-otherwise be available to you under applicable patent law.
-
-12. No Surrender of Others' Freedom.
-
-If conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License. If you cannot convey a
-covered work so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you may
-not convey it at all. For example, if you agree to terms that obligate you
-to collect a royalty for further conveying from those to whom you convey
-the Program, the only way you could satisfy both those terms and this
-License would be to refrain entirely from conveying the Program.
-
-13. Remote Network Interaction; Use with the GNU General Public License.
-
-Notwithstanding any other provision of this License, if you modify the
-Program, your modified version must prominently offer all users
-interacting with it remotely through a computer network (if your version
-supports such interaction) an opportunity to receive the Corresponding
-Source of your version by providing access to the Corresponding Source
-from a network server at no charge, through some standard or customary
-means of facilitating copying of software. This Corresponding Source
-shall include the Corresponding Source for any work covered by version 3
-of the GNU General Public License that is incorporated pursuant to the
-following paragraph.
-
-Notwithstanding any other provision of this License, you have
-permission to link or combine any covered work with a work licensed
-under version 3 of the GNU General Public License into a single
-combined work, and to convey the resulting work. The terms of this
-License will continue to apply to the part which is the covered work,
-but the work with which it is combined will remain governed by version
-3 of the GNU General Public License.
-
-14. Revised Versions of this License.
-
-The Free Software Foundation may publish revised and/or new versions of
-the GNU Affero General Public License from time to time. Such new versions
-will be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-Each version is given a distinguishing version number. If the
-Program specifies that a certain numbered version of the GNU Affero General
-Public License "or any later version" applies to it, you have the
-option of following the terms and conditions either of that numbered
-version or of any later version published by the Free Software
-Foundation. If the Program does not specify a version number of the
-GNU Affero General Public License, you may choose any version ever published
-by the Free Software Foundation.
-
-If the Program specifies that a proxy can decide which future
-versions of the GNU Affero General Public License can be used, that proxy's
-public statement of acceptance of a version permanently authorizes you
-to choose that version for the Program.
-
-Later license versions may give you additional or different
-permissions. However, no additional obligations are imposed on any
-author or copyright holder as a result of your choosing to follow a
-later version.
-
-15. Disclaimer of Warranty.
-
-THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
-16. Limitation of Liability.
-
-IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.
-
-17. Interpretation of Sections 15 and 16.
-
-If the disclaimer of warranty and limitation of liability provided
-above cannot be given local legal effect according to their terms,
-reviewing courts shall apply local law that most closely approximates
-an absolute waiver of all civil liability in connection with the
-Program, unless a warranty or assumption of liability accompanies a
-copy of the Program in return for a fee.
+Copyright (c) 2025-present Voidhash s.r.o.
 
-                     END OF TERMS AND CONDITIONS
+This repository uses license zones. The license for a file is determined by the
+closest license notice in its directory, the package metadata, or an SPDX
+license identifier in the file. A more specific notice takes precedence over
+this repository-level map.
 
-            How to Apply These Terms to Your New Programs
+## Current public code
 
-If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
+The code currently published in this repository is licensed under the MIT
+License unless a more specific license notice says otherwise. This includes the
+SDKs and other customer-facing packages in `libraries/`, `packages/`, `apps/`,
+and `examples/`.
 
-To do so, attach the following notices to the program. It is safest
-to attach them to the start of each source file to most effectively
-state the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
+The full MIT License is in [LICENSES/MIT.txt](LICENSES/MIT.txt).
 
-    <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
+## Future service code
 
-    This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Affero General Public License as published
-    by the Free Software Foundation, either version 3 of the License, or
-    (at your option) any later version.
+Voidhash service and self-hosting code will be licensed under the GNU Affero
+General Public License, version 3 only (`AGPL-3.0-only`), when that code is
+published in this repository. The full license is in
+[LICENSES/AGPL-3.0-only.txt](LICENSES/AGPL-3.0-only.txt).
 
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU Affero General Public License for more details.
+Backend packages are not part of the public repository yet. They remain planned
+for publication under `AGPL-3.0-only` after the alpha and beta security gates
+described in the open-source unification plan are complete.
 
-    You should have received a copy of the GNU Affero General Public License
-    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+## Enterprise code
 
-Also add information on how to contact you by electronic and paper mail.
+Any future `ee/` directory will be source-available and will not be open source.
+It will be governed by a separate Voidhash Enterprise License. A counsel-review
+draft is maintained in
+[LICENSES/Voidhash-Enterprise-DRAFT.md](LICENSES/Voidhash-Enterprise-DRAFT.md),
+but it does not apply to any code unless a file or directory expressly says so.
 
-If your software can interact with users remotely through a computer
-network, you should also make sure that it provides a way for users to
-get its source. For example, if your program is a web application, its
-interface could display a "Source" link that leads users to an archive
-of the code. There are many ways you could offer source, and different
-solutions will be better for different programs; see section 13 for the
-specific requirements.
+Third-party components remain under their respective licenses. Their notices
+take precedence for those components.
 
-You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU AGPL, see
-<https://www.gnu.org/licenses/>.
+Questions about commercial licensing may be sent to support@voidhash.com. No
+pricing terms are stated or implied by this file.
diff --git a/LICENSES/AGPL-3.0-only.txt b/LICENSES/AGPL-3.0-only.txt
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/LICENSES/AGPL-3.0-only.txt
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/LICENSES/MIT.txt b/LICENSES/MIT.txt
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/LICENSES/MIT.txt
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/LICENSES/Voidhash-Enterprise-DRAFT.md b/LICENSES/Voidhash-Enterprise-DRAFT.md
new file mode 100644
index 000000000..a959c907a
--- /dev/null
+++ b/LICENSES/Voidhash-Enterprise-DRAFT.md
@@ -0,0 +1,115 @@
+# Voidhash Enterprise License
+
+> Draft for legal review. This draft is not yet in effect and does not grant
+> rights in any software unless Voidhash s.r.o. expressly designates that
+> software as governed by this license after the draft is approved.
+
+Copyright (c) 2025-present Voidhash s.r.o. All rights reserved.
+
+## 1. Acceptance and scope
+
+This license governs only software that expressly identifies the Voidhash
+Enterprise License as its license (the "Enterprise Software"). By exercising
+any permission granted below, you agree to these terms.
+
+## 2. Evaluation and development license
+
+Voidhash s.r.o. ("Voidhash") grants you a non-exclusive, worldwide,
+non-transferable, non-sublicensable, royalty-free license to copy, run, and
+modify the Enterprise Software solely for evaluation, development, and testing
+in a non-production environment.
+
+This permission does not include production use, providing the Enterprise
+Software to third parties as a hosted or managed service, or distributing the
+Enterprise Software except as expressly allowed by section 4.
+
+## 3. Production use
+
+You may use the Enterprise Software in production only while you and every
+entity on whose behalf you use it:
+
+1. have a current written commercial agreement with Voidhash that authorizes
+   that use;
+2. comply with that agreement; and
+3. where the Enterprise Software implements license-key enforcement, use a
+   valid license key issued by Voidhash for the authorized deployment.
+
+The commercial agreement controls if it conflicts with this license.
+
+## 4. Modifications and patches
+
+Subject to sections 2 and 3, you may modify the Enterprise Software and publish
+patches that describe your modifications. You may not distribute a complete or
+substantial copy of the Enterprise Software, whether modified or unmodified,
+unless a written agreement with Voidhash expressly permits it.
+
+Your modifications remain yours. You grant Voidhash a perpetual, worldwide,
+non-exclusive, royalty-free license to use, reproduce, modify, distribute,
+sublicense, and otherwise exploit any patch you intentionally submit to a
+Voidhash-managed repository for inclusion in the Enterprise Software.
+
+## 5. Restrictions
+
+Except where a written agreement with Voidhash expressly permits it, you may
+not:
+
+- use the Enterprise Software in production;
+- sell, sublicense, or distribute the Enterprise Software;
+- provide the Enterprise Software or a substantial set of its functionality to
+  third parties as a hosted or managed service;
+- remove, disable, avoid, or circumvent license-key functionality or a feature
+  protected by it; or
+- remove or obscure copyright, license, attribution, or other proprietary
+  notices.
+
+## 6. Third-party software
+
+Third-party components incorporated into or distributed with the Enterprise
+Software remain governed by their respective licenses. This license does not
+limit rights granted under those licenses.
+
+## 7. No implied rights
+
+Voidhash and its licensors retain all rights not expressly granted by this
+license. This license grants no rights in any name, logo, service mark, or other
+brand identifier except as required by applicable law to describe the origin of
+the Enterprise Software.
+
+## 8. Termination and cure
+
+Your rights under this license terminate automatically if you violate its
+terms. If Voidhash notifies you of a first violation and you cure it within 30
+days after receiving notice, your rights are reinstated retroactively. A later
+violation after reinstatement terminates your rights permanently unless
+Voidhash agrees otherwise in writing.
+
+Sections 4 through 10 survive termination to the extent necessary to give them
+effect.
+
+## 9. Disclaimer of warranty
+
+TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE ENTERPRISE SOFTWARE IS PROVIDED
+"AS IS" AND WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, WHETHER EXPRESS,
+IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF TITLE, NON-INFRINGEMENT,
+MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.
+
+## 10. Limitation of liability
+
+TO THE MAXIMUM EXTENT PERMITTED BY LAW, VOIDHASH AND ITS LICENSORS WILL NOT BE
+LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR
+PUNITIVE DAMAGES, OR FOR ANY LOSS OF USE, DATA, BUSINESS, REVENUE, OR PROFITS,
+ARISING FROM OR RELATED TO THE ENTERPRISE SOFTWARE OR THIS LICENSE, UNDER ANY
+LEGAL THEORY, EVEN IF ADVISED OF THE POSSIBILITY OF THOSE DAMAGES.
+
+## 11. Definitions
+
+"Production" means use to operate a business, provide a service to internal or
+external users, process live data, or support any activity other than
+evaluation, development, or testing.
+
+"You" means the individual or legal entity exercising rights under this
+license and any entity it controls, is controlled by, or is under common
+control with. "Control" means ownership of more than 50 percent of the voting
+interests or the power to direct management or policies.
+
+Questions about commercial authorization may be sent to support@voidhash.com.
diff --git a/README.md b/README.md
index 75ba56d74..2552c92d3 100644
--- a/README.md
+++ b/README.md
@@ -29,6 +29,13 @@
   </p>
 </p>
 
+> [!IMPORTANT]
+> This repository currently contains the open-source SDKs, CLI, Studio, and
+> integration packages. The backend is not public yet. It remains planned for
+> publication under AGPL-3.0-only after alpha and beta security validation; the
+> repository must not be described as the fully open or self-hostable platform
+> until that publication is complete.
+
 ## ✨ Features
 
 - **🏪 Multi-Platform Support** - Seamless integration with Google Play and App Store
@@ -58,7 +65,11 @@ We welcome contributions! Please see our [Contributing Guide](CONTRIBUTING.md) f
 
 ## 📄 License
 
-Licensed under the AGPL-3.0 License. See [LICENSE.md](LICENSE.md) for more information.
+This repository uses explicit license zones. The code currently published here
+is MIT-licensed unless a more specific notice says otherwise. Future service
+and self-hosting code will use AGPL-3.0-only, and future `ee/` code will have a
+separate source-available enterprise license. See [LICENSE.md](LICENSE.md) for
+the authoritative map and full texts.
 
 ## 🔗 Links
 
diff --git a/apps/cli/package.json b/apps/cli/package.json
index 9afda4460..4328b9e91 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -1,6 +1,7 @@
 {
   "name": "voidhash-cli",
   "version": "0.0.1-alpha.1",
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "https://github.com/voidhashcom/voidhash",
diff --git a/examples/react-native-example/package.json b/examples/react-native-example/package.json
index 63c052b44..bea426d0e 100644
--- a/examples/react-native-example/package.json
+++ b/examples/react-native-example/package.json
@@ -1,6 +1,7 @@
 {
   "name": "@voidhash/react-native-voidhash-example",
   "version": "1.0.0",
+  "license": "MIT",
   "private": true,
   "main": "expo-router/entry",
   "scripts": {
diff --git a/packages/generated-clients/package.json b/packages/generated-clients/package.json
index 2e9083ee4..c138a5723 100644
--- a/packages/generated-clients/package.json
+++ b/packages/generated-clients/package.json
@@ -1,6 +1,7 @@
 {
   "name": "@voidhash/generated-clients",
   "version": "0.0.1-alpha.1",
+  "license": "MIT",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/shared/package.json b/packages/shared/package.json
index ba8a07623..193ddeb1a 100644
--- a/packages/shared/package.json
+++ b/packages/shared/package.json
@@ -1,6 +1,7 @@
 {
   "name": "@voidhash/shared",
   "version": "0.0.1-alpha.1",
+  "license": "MIT",
   "private": true,
   "repository": {
     "type": "git",
diff --git a/packages/tsconfig/package.json b/packages/tsconfig/package.json
index a51303f72..b9c90786a 100644
--- a/packages/tsconfig/package.json
+++ b/packages/tsconfig/package.json
@@ -1,6 +1,7 @@
 {
   "name": "@voidhash/tsconfig",
   "version": "0.0.1-alpha.1",
+  "license": "MIT",
   "private": true,
   "files": [
     "*.json"

From ba85fe2747527aef63a3d03a82ab45b246e08819 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 10:27:33 +0200
Subject: [PATCH 035/129] docs(legal): define agreement parties

---
 CONTRIBUTOR_LICENSE_AGREEMENT.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/CONTRIBUTOR_LICENSE_AGREEMENT.md b/CONTRIBUTOR_LICENSE_AGREEMENT.md
index 6bd2b8a7a..d2ab4eade 100644
--- a/CONTRIBUTOR_LICENSE_AGREEMENT.md
+++ b/CONTRIBUTOR_LICENSE_AGREEMENT.md
@@ -4,9 +4,9 @@
 > to the chosen CLA acceptance process before external contributions are
 > merged.
 
-Thank you for contributing to projects managed by Voidhash s.r.o. This
-Contributor License Agreement (the "Agreement") records the rights you grant
-for contributions and protects your continued ownership of them. It is a
+Thank you for contributing to projects managed by Voidhash s.r.o. ("Voidhash").
+This Contributor License Agreement (the "Agreement") records the rights you
+grant for contributions and protects your continued ownership of them. It is a
 legally binding agreement; please read it carefully before accepting it.
 
 ## 1. Definitions

From 796cc910fb90d361e96585491cdd4173e206daa1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 13:45:12 +0200
Subject: [PATCH 036/129] docs(legal): approve contribution and enterprise
 terms

---
 CONTRIBUTING.md                                   | 15 +++++++++------
 CONTRIBUTOR_LICENSE_AGREEMENT.md                  |  4 ----
 LICENSE.md                                        |  7 +++----
 ...Enterprise-DRAFT.md => Voidhash-Enterprise.md} |  4 ----
 4 files changed, 12 insertions(+), 18 deletions(-)
 rename LICENSES/{Voidhash-Enterprise-DRAFT.md => Voidhash-Enterprise.md} (95%)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 4af4268fe..d2ef5d058 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,12 +1,15 @@
 # Contributing to voidhash
 
-Thanks for taking the time to improve voidhash! This is a small document to get you started.
+Thanks for taking the time to improve voidhash!
 
-Before a contribution can be merged, the contributor must accept the
-Voidhash Contributor License Agreement through the configured acceptance
-process. The current [CLA draft](CONTRIBUTOR_LICENSE_AGREEMENT.md) is awaiting
-legal approval; external contributions must not be merged until the approved
-agreement and its blocking check are live.
+During the repository unification, pull requests are limited to repository
+collaborators and external patches are not yet accepted. Issues and private
+security reports remain welcome.
+
+Before external contributions reopen, Voidhash will enable an acceptance
+process for the [Contributor License Agreement](CONTRIBUTOR_LICENSE_AGREEMENT.md).
+Every external contributor will need to accept that agreement before a
+contribution can be merged.
 
 Please refer to the [getting-started documentation](https://voidhash.com/docs/contribute/getting-started) specific to contributing for more information.
 
diff --git a/CONTRIBUTOR_LICENSE_AGREEMENT.md b/CONTRIBUTOR_LICENSE_AGREEMENT.md
index d2ab4eade..cc76b0e04 100644
--- a/CONTRIBUTOR_LICENSE_AGREEMENT.md
+++ b/CONTRIBUTOR_LICENSE_AGREEMENT.md
@@ -1,9 +1,5 @@
 # Voidhash Contributor License Agreement
 
-> Draft for legal review. This agreement must be approved by counsel and wired
-> to the chosen CLA acceptance process before external contributions are
-> merged.
-
 Thank you for contributing to projects managed by Voidhash s.r.o. ("Voidhash").
 This Contributor License Agreement (the "Agreement") records the rights you
 grant for contributions and protects your continued ownership of them. It is a
diff --git a/LICENSE.md b/LICENSE.md
index 8111c03df..9f2b38794 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -30,10 +30,9 @@ described in the open-source unification plan are complete.
 ## Enterprise code
 
 Any future `ee/` directory will be source-available and will not be open source.
-It will be governed by a separate Voidhash Enterprise License. A counsel-review
-draft is maintained in
-[LICENSES/Voidhash-Enterprise-DRAFT.md](LICENSES/Voidhash-Enterprise-DRAFT.md),
-but it does not apply to any code unless a file or directory expressly says so.
+It will be governed by the
+[Voidhash Enterprise License](LICENSES/Voidhash-Enterprise.md), but that license
+does not apply to any code unless a file or directory expressly says so.
 
 Third-party components remain under their respective licenses. Their notices
 take precedence for those components.
diff --git a/LICENSES/Voidhash-Enterprise-DRAFT.md b/LICENSES/Voidhash-Enterprise.md
similarity index 95%
rename from LICENSES/Voidhash-Enterprise-DRAFT.md
rename to LICENSES/Voidhash-Enterprise.md
index a959c907a..be0be621c 100644
--- a/LICENSES/Voidhash-Enterprise-DRAFT.md
+++ b/LICENSES/Voidhash-Enterprise.md
@@ -1,9 +1,5 @@
 # Voidhash Enterprise License
 
-> Draft for legal review. This draft is not yet in effect and does not grant
-> rights in any software unless Voidhash s.r.o. expressly designates that
-> software as governed by this license after the draft is approved.
-
 Copyright (c) 2025-present Voidhash s.r.o. All rights reserved.
 
 ## 1. Acceptance and scope

From 6a4cc8fea6f574c7a173aa2753651061b90632da Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 11:00:11 +0200
Subject: [PATCH 037/129] fix(security): remediate dependency advisories

---
 apps/cli/package.json           |    2 +-
 libraries/node/package.json     |    2 +-
 libraries/paywalls/package.json |    2 +-
 libraries/web/package.json      |    2 +-
 package.json                    |   49 +-
 pnpm-lock.yaml                  | 6234 +++++++++++--------------------
 pnpm-workspace.yaml             |    4 +-
 7 files changed, 2201 insertions(+), 4094 deletions(-)

diff --git a/apps/cli/package.json b/apps/cli/package.json
index 4328b9e91..1acd74153 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -54,6 +54,6 @@
     "tsup": "^6.1.3",
     "tsx": "^4.19.3",
     "vite-tsconfig-paths": "^5.1.4",
-    "vitest": "^3.0.9"
+    "vitest": "^3.2.7"
   }
 }
diff --git a/libraries/node/package.json b/libraries/node/package.json
index b3facef88..951dc88f1 100644
--- a/libraries/node/package.json
+++ b/libraries/node/package.json
@@ -72,7 +72,7 @@
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
     "vite-tsconfig-paths": "catalog:",
-    "vitest": "^3.2.4"
+    "vitest": "^3.2.7"
   },
   "peerDependencies": {
     "@effect/platform": "catalog:",
diff --git a/libraries/paywalls/package.json b/libraries/paywalls/package.json
index 14dde44a1..91001d9ba 100644
--- a/libraries/paywalls/package.json
+++ b/libraries/paywalls/package.json
@@ -154,7 +154,7 @@
     "tsup": "^6.1.3",
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
-    "vitest": "^3.0.9"
+    "vitest": "^3.2.7"
   },
   "peerDependencies": {
     "react": ">=18",
diff --git a/libraries/web/package.json b/libraries/web/package.json
index ac73f9467..b9ba9fec4 100644
--- a/libraries/web/package.json
+++ b/libraries/web/package.json
@@ -76,7 +76,7 @@
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
     "vite-tsconfig-paths": "catalog:",
-    "vitest": "^3.2.4"
+    "vitest": "^3.2.7"
   },
   "peerDependencies": {
     "@effect/platform": "catalog:",
diff --git a/package.json b/package.json
index d4e07b2f8..8adf1e7e6 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,7 @@
       "@effect/platform-bun": "4.0.0-beta.84",
       "@effect/language-service": "^0.86.2",
       "@effect/vitest": "4.0.0-beta.84",
-      "better-auth": "^1.4.18"
+      "better-auth": "^1.6.23"
     }
   },
   "type": "module",
@@ -57,7 +57,7 @@
     "simple-git-hooks": "^2.13.1",
     "taze": "^0.18.0",
     "tinyglobby": "^0.2.15",
-    "turbo": "^2.7.2",
+    "turbo": "^2.9.14",
     "typescript": "5.6.3"
   },
   "devDependencies": {
@@ -73,7 +73,50 @@
   "packageManager": "pnpm@10.19.0",
   "pnpm": {
     "overrides": {
-      "effect": "4.0.0-beta.84"
+      "@babel/plugin-transform-modules-systemjs@<=7.29.3": "7.29.4",
+      "@babel/core@<=7.29.0": "7.29.6",
+      "@esbuild-kit/core-utils>esbuild": "0.25.0",
+      "@expo/metro-config>postcss": "8.5.10",
+      "@isaacs/brace-expansion@<=5.0.0": "5.0.1",
+      "@tanstack/react-start@>=1.0.0 <1.167.30": "1.167.30",
+      "@tootallnate/once@<2.0.1": "2.0.1",
+      "@xmldom/xmldom@<0.8.13": "0.8.13",
+      "ajv@>=7.0.0-alpha.0 <8.18.0": "8.18.0",
+      "brace-expansion@<1.1.13": "1.1.13",
+      "brace-expansion@>=2.0.0 <2.0.3": "2.0.3",
+      "defu@<=6.1.4": "6.1.7",
+      "drizzle-orm@<0.45.2": "0.45.2",
+      "effect": "4.0.0-beta.84",
+      "fast-uri@<=3.1.1": "3.1.3",
+      "fdir>picomatch": "4.0.4",
+      "flatted@<=3.4.1": "3.4.2",
+      "form-data@>=4.0.0 <4.0.6": "4.0.6",
+      "h3-v2": "npm:h3@2.0.1-rc.18",
+      "js-yaml@<3.15.0": "3.15.0",
+      "js-yaml@>=4.0.0 <=4.1.1": "4.2.0",
+      "kysely": "0.28.17",
+      "lodash@>=4.0.0 <=4.17.23": "4.18.0",
+      "minimatch@<3.1.4": "3.1.4",
+      "minimatch@>=9.0.0 <9.0.7": "9.0.7",
+      "minimatch@>=10.0.0 <10.2.3": "10.2.3",
+      "next@>=16.0.0-beta.0 <16.2.6": "16.2.6",
+      "node-forge@<1.4.0": "1.4.0",
+      "picomatch@<2.3.2": "2.3.2",
+      "picomatch@>=3.0.0 <3.0.2": "3.0.2",
+      "picomatch@>=4.0.0 <4.0.4": "4.0.4",
+      "postcss@<8.5.10": "8.5.10",
+      "rollup@>=4 <4.59.0": "4.59.0",
+      "shell-quote@>=1.1.0 <=1.8.3": "1.10.0",
+      "tar@>=7 <7.5.11": "7.5.19",
+      "undici@>=6 <6.27.0": "6.27.0",
+      "vite@>=7 <=7.3.4": "7.3.5",
+      "vite>esbuild": "0.28.1",
+      "vitest@>=3 <3.2.6": "3.2.7",
+      "ws@>=6 <6.2.4": "6.2.4",
+      "ws@>=7 <7.5.11": "7.5.11",
+      "ws@>=8 <8.21.0": "8.21.0",
+      "xcode>uuid": "11.1.1",
+      "yaml@>=2.0.0 <2.8.3": "2.8.3"
     }
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 73f66b85a..6286628c2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -22,8 +22,8 @@ catalogs:
       specifier: ^5.1.1
       version: 5.2.0
     better-auth:
-      specifier: ^1.4.18
-      version: 1.4.18
+      specifier: ^1.6.23
+      version: 1.6.23
     vite-tsconfig-paths:
       specifier: ^5.1.4
       version: 5.1.4
@@ -31,7 +31,50 @@ catalogs:
 overrides:
   react: 19.1.0
   react-dom: 19.1.0
+  '@babel/plugin-transform-modules-systemjs@<=7.29.3': 7.29.4
+  '@babel/core@<=7.29.0': 7.29.6
+  '@esbuild-kit/core-utils>esbuild': 0.25.0
+  '@expo/metro-config>postcss': 8.5.10
+  '@isaacs/brace-expansion@<=5.0.0': 5.0.1
+  '@tanstack/react-start@>=1.0.0 <1.167.30': 1.167.30
+  '@tootallnate/once@<2.0.1': 2.0.1
+  '@xmldom/xmldom@<0.8.13': 0.8.13
+  ajv@>=7.0.0-alpha.0 <8.18.0: 8.18.0
+  brace-expansion@<1.1.13: 1.1.13
+  brace-expansion@>=2.0.0 <2.0.3: 2.0.3
+  defu@<=6.1.4: 6.1.7
+  drizzle-orm@<0.45.2: 0.45.2
   effect: 4.0.0-beta.84
+  fast-uri@<=3.1.1: 3.1.3
+  fdir>picomatch: 4.0.4
+  flatted@<=3.4.1: 3.4.2
+  form-data@>=4.0.0 <4.0.6: 4.0.6
+  h3-v2: npm:h3@2.0.1-rc.18
+  js-yaml@<3.15.0: 3.15.0
+  js-yaml@>=4.0.0 <=4.1.1: 4.2.0
+  kysely: 0.28.17
+  lodash@>=4.0.0 <=4.17.23: 4.18.0
+  minimatch@<3.1.4: 3.1.4
+  minimatch@>=9.0.0 <9.0.7: 9.0.7
+  minimatch@>=10.0.0 <10.2.3: 10.2.3
+  next@>=16.0.0-beta.0 <16.2.6: 16.2.6
+  node-forge@<1.4.0: 1.4.0
+  picomatch@<2.3.2: 2.3.2
+  picomatch@>=3.0.0 <3.0.2: 3.0.2
+  picomatch@>=4.0.0 <4.0.4: 4.0.4
+  postcss@<8.5.10: 8.5.10
+  rollup@>=4 <4.59.0: 4.59.0
+  shell-quote@>=1.1.0 <=1.8.3: 1.10.0
+  tar@>=7 <7.5.11: 7.5.19
+  undici@>=6 <6.27.0: 6.27.0
+  vite@>=7 <=7.3.4: 7.3.5
+  vite>esbuild: 0.28.1
+  vitest@>=3 <3.2.6: 3.2.7
+  ws@>=6 <6.2.4: 6.2.4
+  ws@>=7 <7.5.11: 7.5.11
+  ws@>=8 <8.21.0: 8.21.0
+  xcode>uuid: 11.1.1
+  yaml@>=2.0.0 <2.8.3: 2.8.3
 
 importers:
 
@@ -65,8 +108,8 @@ importers:
         specifier: ^0.2.15
         version: 0.2.15
       turbo:
-        specifier: ^2.7.2
-        version: 2.7.2
+        specifier: ^2.9.14
+        version: 2.10.4
       typescript:
         specifier: 5.6.3
         version: 5.6.3
@@ -79,7 +122,7 @@ importers:
         version: 8.0.0
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3)
 
   apps/cli:
     dependencies:
@@ -97,7 +140,7 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4)
+        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -119,7 +162,7 @@ importers:
         version: 0.64.1
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.4)
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/react-native':
         specifier: workspace:*
         version: link:../../libraries/react-native
@@ -131,25 +174,25 @@ importers:
         version: 10.0.0
       tsup:
         specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
+        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
-        specifier: ^3.0.9
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   apps/studio:
     dependencies:
       '@tailwindcss/vite':
         specifier: ^4.1.13
-        version: 4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitejs/plugin-react':
         specifier: ^5.2.0
-        version: 5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -163,8 +206,8 @@ importers:
         specifier: ^4.1.13
         version: 4.3.0
       vite:
-        specifier: ^7.0.0
-        version: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+        specifier: 7.3.5
+        version: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
@@ -183,10 +226,10 @@ importers:
     dependencies:
       '@expo/metro-runtime':
         specifier: ~6.1.2
-        version: 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-native-async-storage/async-storage':
         specifier: ^2.1.2
-        version: 2.2.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+        version: 2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -195,31 +238,31 @@ importers:
         version: link:../../libraries/react-native
       expo:
         specifier: ^54.0.33
-        version: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-constants:
         specifier: ~18.0.13
-        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       expo-dev-client:
         specifier: ~6.0.18
         version: 6.0.20(expo@54.0.33)
       expo-linking:
         specifier: ~8.0.9
-        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-localization:
         specifier: ~17.0.7
         version: 17.0.8(expo@54.0.33)(react@19.1.0)
       expo-router:
         specifier: ~6.0.23
-        version: 6.0.23(a9179ff0b15fe10f2a71d6f189aa330e)
+        version: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
       expo-splash-screen:
         specifier: ~31.0.11
         version: 31.0.13(expo@54.0.33)
       expo-status-bar:
         specifier: ~3.0.8
-        version: 3.0.9(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 3.0.9(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-system-ui:
         specifier: ~6.0.8
-        version: 6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
+        version: 6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       fast-text-encoding:
         specifier: ^1.0.6
         version: 1.0.6
@@ -228,26 +271,26 @@ importers:
         version: 19.1.0
       react-native:
         specifier: 0.81.5
-        version: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+        version: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       react-native-nitro-modules:
         specifier: 0.26.4
-        version: 0.26.4(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react-native-reanimated:
         specifier: ~4.1.1
-        version: 4.1.6(@babel/core@7.28.5)(react-native-worklets@0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react-native-safe-area-context:
         specifier: ~5.6.0
-        version: 5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react-native-screens:
         specifier: ~4.16.0
-        version: 4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react-native-svg:
         specifier: 15.12.1
-        version: 15.12.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 15.12.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     devDependencies:
       '@babel/core':
-        specifier: ^7.20.0
-        version: 7.28.5
+        specifier: 7.29.6
+        version: 7.29.6
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
@@ -256,7 +299,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.6.1)
@@ -287,7 +330,7 @@ importers:
         version: 4.0.0-beta.84
       tsup:
         specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
+        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -296,10 +339,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
-        specifier: ^3.2.4
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/paywalls:
     dependencies:
@@ -327,7 +370,7 @@ importers:
         version: 19.1.0(react@19.1.0)
       tsup:
         specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
+        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -335,14 +378,14 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
       vitest:
-        specifier: ^3.0.9
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/react-native:
     dependencies:
       '@react-native-async-storage/async-storage':
         specifier: ^1.24.0 || ^2.0.0
-        version: 2.2.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+        version: 2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       '@voidhash/generated-clients':
         specifier: workspace:*
         version: link:../../packages/generated-clients
@@ -355,55 +398,55 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))
+        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
       '@vitejs/plugin-react':
         specifier: 'catalog:'
-        version: 5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
       expo:
         specifier: 54.0.33
-        version: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-constants:
         specifier: ~18.0.13
-        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       expo-linking:
         specifier: ~8.0.9
-        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
-        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react:
         specifier: 19.1.0
         version: 19.1.0
       react-native:
         specifier: 0.81.5
-        version: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+        version: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       react-native-nitro-modules:
         specifier: 0.26.4
-        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       typescript:
         specifier: 5.9.3
         version: 5.9.3
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^4.1.6
-        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   libraries/web:
     dependencies:
@@ -437,7 +480,7 @@ importers:
         version: 19.1.0(react@19.1.0)
       tsup:
         specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.6)(typescript@5.6.3)
+        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -446,10 +489,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
-        specifier: ^3.2.4
-        version: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/generated-clients:
     dependencies:
@@ -501,23 +544,19 @@ packages:
     engines: {node: '>=6.9.0'}
     hasBin: true
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/code-frame@7.10.4':
     resolution: {integrity: sha512-vG6SvB6oYEhvgisZNFRmRCUkLz11c7rp+tbNTynGqc6mS1d5ATd/sGyV6W0KZZnXRKMTzZDRgQT3Ou9jhpAfUg==}
 
-  '@babel/code-frame@7.26.2':
-    resolution: {integrity: sha512-RJlIHRueQgwWitWgF8OdFYGZX328Ax5BCemNGlqHfplnRT9ESi8JkFlvaVYbS+UubVY6dpv87Fs2u5M29iNFVQ==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/code-frame@7.27.1':
-    resolution: {integrity: sha512-cjQ7ZlQ0Mv3b47hABuTevyTuYN4i+loJKGeV9flcCgIK37cCXRh+L1bd3iBHlynerhQ7BhCkn2BPbQUL+rGqFg==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/code-frame@7.29.0':
     resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/code-frame@7.29.7':
+    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/compat-data@7.28.5':
     resolution: {integrity: sha512-6uFXyCayocRbqhZOB+6XcuZbkMNimwfVGFji8CTZnCzOHVGvDqzvitu1re2AU5LROliz7eQPhB8CpAMvnx9EjA==}
     engines: {node: '>=6.9.0'}
@@ -526,22 +565,18 @@ packages:
     resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/core@7.28.5':
-    resolution: {integrity: sha512-e7jT4DxYvIDLk1ZHmU/m/mB19rex9sv0c2ftBtjSBv+kVM/902eh0fINUzD7UwLLNR+jU585GxUJ8/EBfAM5fw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/core@7.29.0':
-    resolution: {integrity: sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/generator@7.28.5':
-    resolution: {integrity: sha512-3EwLFhZ38J4VyIP6WNtt2kUdW9dokXA9Cr4IVIFHuCpZ3H8/YFOl5JjZHisrn1fATPBmKKqXzDFvh9fUwHz6CQ==}
+  '@babel/core@7.29.6':
+    resolution: {integrity: sha512-QdxmAo/ikZqqRGA8s43ww8lcql6naWRvEz0FFrl6MIlc7Gi6TroXnSdWa5U/kq6fzcpqpHesicQxFZIieZbyIA==}
     engines: {node: '>=6.9.0'}
 
   '@babel/generator@7.29.1':
     resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/generator@7.29.7':
+    resolution: {integrity: sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-annotate-as-pure@7.27.3':
     resolution: {integrity: sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg==}
     engines: {node: '>=6.9.0'}
@@ -558,24 +593,24 @@ packages:
     resolution: {integrity: sha512-q3WC4JfdODypvxArsJQROfupPBq9+lMwjKq7C33GhbFYJsufD0yd/ziwD+hJucLeWsnFPWZjsU2DNFqBPE7jwQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-create-class-features-plugin@7.28.6':
     resolution: {integrity: sha512-dTOdvsjnG3xNT9Y0AUg1wAl38y+4Rl4sf9caSQZOXdNqVn+H+HbbJ4IyyHaIqNR6SW9oJpA/RuRjsjCw2IdIow==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-create-regexp-features-plugin@7.28.5':
     resolution: {integrity: sha512-N1EhvLtHzOvj7QQOUCCS3NrPJP8c5W6ZXCHDn7Yialuy1iu4r5EmIYkXlKNqT99Ciw+W0mDqWoR6HWMZlFP3hw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-define-polyfill-provider@0.6.5':
     resolution: {integrity: sha512-uJnGFcPsWQK8fvjgGP5LZUZZsYGIoPeRjSF5PGwrelYgq7Q15/Ft9NGFp1zglwgIv//W0uG4BevRuSJRyylZPg==}
     peerDependencies:
-      '@babel/core': ^7.4.0 || ^8.0.0-0 <8.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-globals@7.28.0':
     resolution: {integrity: sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==}
@@ -597,13 +632,13 @@ packages:
     resolution: {integrity: sha512-gytXUbs8k2sXS9PnQptz5o0QnpLL51SwASIORY6XaBKF88nsOT0Zw9szLqlSGQDP/4TljBAD5y98p2U1fqkdsw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-module-transforms@7.28.6':
     resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-optimise-call-expression@7.27.1':
     resolution: {integrity: sha512-URMGH08NzYFhubNSGJrpUEphGKQwMQYBySzat5cAByY1/YgIRkULnIy3tAMeszlL/so2HbeilYloUmSpd7GdVw==}
@@ -621,19 +656,19 @@ packages:
     resolution: {integrity: sha512-7fiA521aVw8lSPeI4ZOD3vRFkoqkJcS+z4hFo82bFSH/2tNd6eJ5qCVMS5OzDmZh/kaHQeBaeyxK6wljcPtveA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-replace-supers@7.27.1':
     resolution: {integrity: sha512-7EHz6qDZc8RYS5ElPoShMheWvEgERonFCs7IAonWLLUTXW59DP14bCZt89/GKyreYn8g3S83m21FelHKbeDCKA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-replace-supers@7.28.6':
     resolution: {integrity: sha512-mq8e+laIk94/yFec3DxSjCRD2Z0TAjhVbEJY3UQrlwVo15Lmt7C2wAUbK4bjnTs4APkwsYLTahXRraQXhb1WCg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
     resolution: {integrity: sha512-Tub4ZKEXqbPjXgWLl2+3JpQAYBJ8+ikpQ2Ocj/q/r0LwE3UhENh7EUabyHjz2kCEsrRY83ew2DQdHluuiDQFzg==}
@@ -643,10 +678,18 @@ packages:
     resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-string-parser@7.29.7':
+    resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-validator-identifier@7.28.5':
     resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-validator-identifier@7.29.7':
+    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-validator-option@7.27.1':
     resolution: {integrity: sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==}
     engines: {node: '>=6.9.0'}
@@ -655,25 +698,21 @@ packages:
     resolution: {integrity: sha512-zdf983tNfLZFletc0RRXYrHrucBEg95NIFMkn6K9dbeMYnsgHaSBGcQqdsCSStG2PYwRre0Qc2NNSCXbG+xc6g==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helpers@7.28.4':
-    resolution: {integrity: sha512-HFN59MmQXGHVyYadKLVumYsA9dBFun/ldYxipEjzA4196jpLZd8UjEEBLkbEkvfYreDqJhZxYAWFPtrfhNpj4w==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helpers@7.28.6':
-    resolution: {integrity: sha512-xOBvwq86HHdB7WUDTfKfT/Vuxh7gElQ+Sfti2Cy6yIWNW05P8iUslOVcZ4/sKbE+/jQaukQAdz/gf3724kYdqw==}
+  '@babel/helpers@7.29.7':
+    resolution: {integrity: sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==}
     engines: {node: '>=6.9.0'}
 
   '@babel/highlight@7.25.9':
     resolution: {integrity: sha512-llL88JShoCsth8fF8R4SJnIn+WLvR6ccFxu1H3FlMhDontdcmZWf2HgIZ7AIqV3Xcck1idlohrN4EUBQz6klbw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/parser@7.28.5':
-    resolution: {integrity: sha512-KKBU1VGYR7ORr3At5HAtUQ+TV3SzRCXmA/8OdDZiLDBIZxVyzXuztPjfLd3BV1PRAQGCMWWSHYhL0F8d5uHBDQ==}
+  '@babel/parser@7.29.0':
+    resolution: {integrity: sha512-IyDgFV5GeDUVX4YdF/3CPULtVGSXXMLh1xVIgdCgxApktqnQV0r7/8Nqthg+8YLGaAtdyIlo2qIdZrbCv4+7ww==}
     engines: {node: '>=6.0.0'}
     hasBin: true
 
-  '@babel/parser@7.29.0':
-    resolution: {integrity: sha512-IyDgFV5GeDUVX4YdF/3CPULtVGSXXMLh1xVIgdCgxApktqnQV0r7/8Nqthg+8YLGaAtdyIlo2qIdZrbCv4+7ww==}
+  '@babel/parser@7.29.7':
+    resolution: {integrity: sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==}
     engines: {node: '>=6.0.0'}
     hasBin: true
 
@@ -681,594 +720,594 @@ packages:
     resolution: {integrity: sha512-87GDMS3tsmMSi/3bWOte1UblL+YUTFMV8SZPZ2eSEL17s74Cw/l63rR6NmGVKMYW2GYi85nE+/d6Hw5N0bEk2Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.27.1':
     resolution: {integrity: sha512-qNeq3bCKnGgLkEXUuFry6dPlGfCdQNZbn7yUAPCInwAJHMU7THJfrBSozkcWq5sNM6RcF3S8XyQL2A52KNR9IA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.27.1':
     resolution: {integrity: sha512-g4L7OYun04N1WyqMNjldFwlfPCLVkgB54A/YCXICZYBsvJJE3kByKv9c9+R/nAfmIfjl2rKYLNyMHboYbZaWaA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1':
     resolution: {integrity: sha512-oO02gcONcD5O1iTLi/6frMJBIwWEHceWGSGqrpCmEL8nogiS6J9PBlE48CaK20/Jx1LuRml9aDftLgdjXT8+Cw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.13.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.28.3':
     resolution: {integrity: sha512-b6YTX108evsvE4YgWyQ921ZAFFQm3Bn+CA3+ZXlNVnPhx+UfsVURoPjfGAPCjBgrqo30yX/C2nZGX96DxvR9Iw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-proposal-decorators@7.28.0':
     resolution: {integrity: sha512-zOiZqvANjWDUaUS9xMxbMcK/Zccztbe/6ikvUXaG9nsPH3w6qh5UaPGAnirI/WhIbZ8m3OHU0ReyPrknG+ZKeg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-proposal-export-default-from@7.27.1':
     resolution: {integrity: sha512-hjlsMBl1aJc5lp8MoCDEZCiYzlgdRAShOjAfRw6X+GlpLpUPU7c3XNLsKFZbQk/1cRzBlJ7CXg3xJAJMrFa1Uw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2':
     resolution: {integrity: sha512-SOSkfJDddaM7mak6cPEpswyTRnuRltl429hMraQEglW+OkovnCzsiszTmsrlY//qLFjCpQDFRvjdm2wA5pPm9w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-async-generators@7.8.4':
     resolution: {integrity: sha512-tycmZxkGfZaxhMRbXlPXuVFpdWlXpir2W4AMhSJgRKzk/eDlIXOhb2LHWoLpDF7TEHylV5zNhykX6KAgHJmTNw==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-bigint@7.8.3':
     resolution: {integrity: sha512-wnTnFlG+YxQm3vDxpGE57Pj0srRU4sHE/mDkt1qv2YJJSeUAec2ma4WLUnUPeKjyrfntVwe/N6dCXpU+zL3Npg==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-class-properties@7.12.13':
     resolution: {integrity: sha512-fm4idjKla0YahUNgFNLCB0qySdsoPiZP3iQE3rky0mBUtMZ23yDJ9SJdg6dXTSDnulOVqiF3Hgr9nbXvXTQZYA==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-class-static-block@7.14.5':
     resolution: {integrity: sha512-b+YyPmr6ldyNnM6sqYeMWE+bgJcJpO6yS4QD7ymxgH34GBPNDM/THBh8iunyvKIZztiwLH4CJZ0RxTk9emgpjw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-decorators@7.27.1':
     resolution: {integrity: sha512-YMq8Z87Lhl8EGkmb0MwYkt36QnxC+fzCgrl66ereamPlYToRpIk5nUjKUY3QKLWq8mwUB1BgbeXcTJhZOCDg5A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-dynamic-import@7.8.3':
     resolution: {integrity: sha512-5gdGbFon+PszYzqs83S3E5mpi7/y/8M9eC90MRTZfduQOYW76ig6SOSPNe41IG5LoP3FGBn2N0RjVDSQiS94kQ==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-export-default-from@7.27.1':
     resolution: {integrity: sha512-eBC/3KSekshx19+N40MzjWqJd7KTEdOoLesAfa4IDFI8eRz5a47i5Oszus6zG/cwIXN63YhgLOMSSNJx49sENg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-flow@7.27.1':
     resolution: {integrity: sha512-p9OkPbZ5G7UT1MofwYFigGebnrzGJacoBSQM0/6bi/PUMVE+qlWDD/OalvQKbwgQzU6dl0xAv6r4X7Jme0RYxA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-import-assertions@7.27.1':
     resolution: {integrity: sha512-UT/Jrhw57xg4ILHLFnzFpPDlMbcdEicaAtjPQpbj9wa8T4r5KVWCimHcL/460g8Ht0DMxDyjsLgiWSkVjnwPFg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-import-attributes@7.27.1':
     resolution: {integrity: sha512-oFT0FrKHgF53f4vOsZGi2Hh3I35PfSmVs4IBFLFj4dnafP+hIWDLg3VyKmUHfLoLHlyxY4C7DGtmHuJgn+IGww==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-import-meta@7.10.4':
     resolution: {integrity: sha512-Yqfm+XDx0+Prh3VSeEQCPU81yC+JWZ2pDPFSS4ZdpfZhp4MkFMaDC1UqseovEKwSUpnIL7+vK+Clp7bfh0iD7g==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-json-strings@7.8.3':
     resolution: {integrity: sha512-lY6kdGpWHvjoe2vk4WrAapEuBR69EMxZl+RoGRhrFGNYVK8mOPAW8VfbT/ZgrFbXlDNiiaxQnAtgVCZ6jv30EA==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-jsx@7.27.1':
     resolution: {integrity: sha512-y8YTNIeKoyhGd9O0Jiyzyyqk8gdjnumGTQPsz0xOZOQ2RmkVJeZ1vmmfIvFEKqucBG6axJGBZDE/7iI5suUI/w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-jsx@7.28.6':
     resolution: {integrity: sha512-wgEmr06G6sIpqr8YDwA2dSRTE3bJ+V0IfpzfSY3Lfgd7YWOaAdlykvJi13ZKBt8cZHfgH1IXN+CL656W3uUa4w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-logical-assignment-operators@7.10.4':
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3':
     resolution: {integrity: sha512-aSff4zPII1u2QD7y+F8oDsz19ew4IGEJg9SVW+bqwpwtfFleiQDMdzA/R+UlWDzfnHFCxxleFT0PMIrR36XLNQ==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-numeric-separator@7.10.4':
     resolution: {integrity: sha512-9H6YdfkcK/uOnY/K7/aA2xpzaAgkQn37yzWUMRK7OaPOqOpGS1+n0H5hxT9AUw9EsSjPW8SVyMJwYRtWs3X3ug==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-object-rest-spread@7.8.3':
     resolution: {integrity: sha512-XoqMijGZb9y3y2XskN+P1wUGiVwWZ5JmoDRwx5+3GmEplNyVM2s2Dg8ILFQm8rWM48orGy5YpI5Bl8U1y7ydlA==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-optional-catch-binding@7.8.3':
     resolution: {integrity: sha512-6VPD0Pc1lpTqw0aKoeRTMiB+kWhAoT24PA+ksWSBrFtl5SIRVpZlwN3NNPQjehA2E/91FV3RjLWoVTglWcSV3Q==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-optional-chaining@7.8.3':
     resolution: {integrity: sha512-KoK9ErH1MBlCPxV0VANkXW2/dw4vlbGDrFgz8bmUsBGYkFRcbRwMh6cIJubdPrkxRwuGdtCk0v/wPTKbQgBjkg==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-private-property-in-object@7.14.5':
     resolution: {integrity: sha512-0wVnp9dxJ72ZUJDV27ZfbSj6iHLoytYZmh3rFcxNnvsJF3ktkzLDZPy/mA17HGsaQT3/DQsWYX1f1QGWkCoVUg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-top-level-await@7.14.5':
     resolution: {integrity: sha512-hx++upLv5U1rgYfwe1xBQUhRmU41NEvpUvrp8jkrSCdvGSnM5/qdRMtylJ6PG5OFkBaHkbTAKTnd3/YyESRHFw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-typescript@7.27.1':
     resolution: {integrity: sha512-xfYCBMxveHrRMnAWl1ZlPXOZjzkN82THFvLhQhFXFt81Z5HnN+EtUkZhv/zcKpmT3fzmWZB0ywiBrbC3vogbwQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-typescript@7.28.6':
     resolution: {integrity: sha512-+nDNmQye7nlnuuHDboPbGm00Vqg3oO8niRRL27/4LYHUsHYh0zJ1xWOz0uRwNFmM1Avzk8wZbc6rdiYhomzv/A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-syntax-unicode-sets-regex@7.18.6':
     resolution: {integrity: sha512-727YkEAPwSIQTv5im8QHz3upqp92JTWhidIC81Tdx4VJYIte/VndKf1qKrfnnhPLiPghStWfvC/iFaMCQu7Nqg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-arrow-functions@7.27.1':
     resolution: {integrity: sha512-8Z4TGic6xW70FKThA5HYEKKyBpOOsucTOD1DjU3fZxDg+K3zBJcXMFnt/4yQiZnf5+MiOMSXQ9PaEK/Ilh1DeA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-async-generator-functions@7.28.0':
     resolution: {integrity: sha512-BEOdvX4+M765icNPZeidyADIvQ1m1gmunXufXxvRESy/jNNyfovIqUyE7MVgGBjWktCoJlzvFA1To2O4ymIO3Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-async-to-generator@7.27.1':
     resolution: {integrity: sha512-NREkZsZVJS4xmTr8qzE5y8AfIPqsdQfRuUiLRTEzb7Qii8iFWCyDKaUV2c0rCuh4ljDZ98ALHP/PetiBV2nddA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-block-scoped-functions@7.27.1':
     resolution: {integrity: sha512-cnqkuOtZLapWYZUYM5rVIdv1nXYuFVIltZ6ZJ7nIj585QsjKM5dhL2Fu/lICXZ1OyIAFc7Qy+bvDAtTXqGrlhg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-block-scoping@7.28.5':
     resolution: {integrity: sha512-45DmULpySVvmq9Pj3X9B+62Xe+DJGov27QravQJU1LLcapR6/10i+gYVAucGGJpHBp5mYxIMK4nDAT/QDLr47g==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-class-properties@7.27.1':
     resolution: {integrity: sha512-D0VcalChDMtuRvJIu3U/fwWjf8ZMykz5iZsg77Nuj821vCKI3zCyRLwRdWbsuJ/uRwZhZ002QtCqIkwC/ZkvbA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-class-static-block@7.28.3':
     resolution: {integrity: sha512-LtPXlBbRoc4Njl/oh1CeD/3jC+atytbnf/UqLoqTDcEYGUPj022+rvfkbDYieUrSj3CaV4yHDByPE+T2HwfsJg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.12.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-classes@7.28.4':
     resolution: {integrity: sha512-cFOlhIYPBv/iBoc+KS3M6et2XPtbT2HiCRfBXWtfpc9OAyostldxIf9YAYB6ypURBBbx+Qv6nyrLzASfJe+hBA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-computed-properties@7.27.1':
     resolution: {integrity: sha512-lj9PGWvMTVksbWiDT2tW68zGS/cyo4AkZ/QTp0sQT0mjPopCmrSkzxeXkznjqBxzDI6TclZhOJbBmbBLjuOZUw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-destructuring@7.28.5':
     resolution: {integrity: sha512-Kl9Bc6D0zTUcFUvkNuQh4eGXPKKNDOJQXVyyM4ZAQPMveniJdxi8XMJwLo+xSoW3MIq81bD33lcUe9kZpl0MCw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-dotall-regex@7.27.1':
     resolution: {integrity: sha512-gEbkDVGRvjj7+T1ivxrfgygpT7GUd4vmODtYpbs0gZATdkX8/iSnOtZSxiZnsgm1YjTgjI6VKBGSJJevkrclzw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-duplicate-keys@7.27.1':
     resolution: {integrity: sha512-MTyJk98sHvSs+cvZ4nOauwTTG1JeonDjSGvGGUNHreGQns+Mpt6WX/dVzWBHgg+dYZhkC4X+zTDfkTU+Vy9y7Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.27.1':
     resolution: {integrity: sha512-hkGcueTEzuhB30B3eJCbCYeCaaEQOmQR0AdvzpD4LoN0GXMWzzGSuRrxR2xTnCrvNbVwK9N6/jQ92GSLfiZWoQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-dynamic-import@7.27.1':
     resolution: {integrity: sha512-MHzkWQcEmjzzVW9j2q8LGjwGWpG2mjwaaB0BNQwst3FIjqsg8Ct/mIZlvSPJvfi9y2AC8mi/ktxbFVL9pZ1I4A==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-explicit-resource-management@7.28.0':
     resolution: {integrity: sha512-K8nhUcn3f6iB+P3gwCv/no7OdzOZQcKchW6N389V6PD8NUWKZHzndOd9sPDVbMoBsbmjMqlB4L9fm+fEFNVlwQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-exponentiation-operator@7.28.5':
     resolution: {integrity: sha512-D4WIMaFtwa2NizOp+dnoFjRez/ClKiC2BqqImwKd1X28nqBtZEyCYJ2ozQrrzlxAFrcrjxo39S6khe9RNDlGzw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-export-namespace-from@7.27.1':
     resolution: {integrity: sha512-tQvHWSZ3/jH2xuq/vZDy0jNn+ZdXJeM8gHvX4lnJmsc3+50yPlWdZXIc5ay+umX+2/tJIqHqiEqcJvxlmIvRvQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-flow-strip-types@7.27.1':
     resolution: {integrity: sha512-G5eDKsu50udECw7DL2AcsysXiQyB7Nfg521t2OAJ4tbfTJ27doHLeF/vlI1NZGlLdbb/v+ibvtL1YBQqYOwJGg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-for-of@7.27.1':
     resolution: {integrity: sha512-BfbWFFEJFQzLCQ5N8VocnCtA8J1CLkNTe2Ms2wocj75dd6VpiqS5Z5quTYcUoo4Yq+DN0rtikODccuv7RU81sw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-function-name@7.27.1':
     resolution: {integrity: sha512-1bQeydJF9Nr1eBCMMbC+hdwmRlsv5XYOMu03YSWFwNs0HsAmtSxxF1fyuYPqemVldVyFmlCU7w8UE14LupUSZQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-json-strings@7.27.1':
     resolution: {integrity: sha512-6WVLVJiTjqcQauBhn1LkICsR2H+zm62I3h9faTDKt1qP4jn2o72tSvqMwtGFKGTpojce0gJs+76eZ2uCHRZh0Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-literals@7.27.1':
     resolution: {integrity: sha512-0HCFSepIpLTkLcsi86GG3mTUzxV5jpmbv97hTETW3yzrAij8aqlD36toB1D0daVFJM8NK6GvKO0gslVQmm+zZA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-logical-assignment-operators@7.28.5':
     resolution: {integrity: sha512-axUuqnUTBuXyHGcJEVVh9pORaN6wC5bYfE7FGzPiaWa3syib9m7g+/IT/4VgCOe2Upef43PHzeAvcrVek6QuuA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-member-expression-literals@7.27.1':
     resolution: {integrity: sha512-hqoBX4dcZ1I33jCSWcXrP+1Ku7kdqXf1oeah7ooKOIiAdKQ+uqftgCFNOSzA5AMS2XIHEYeGFg4cKRCdpxzVOQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-modules-amd@7.27.1':
     resolution: {integrity: sha512-iCsytMg/N9/oFq6n+gFTvUYDZQOMK5kEdeYxmxt91fcJGycfxVP9CnrxoliM0oumFERba2i8ZtwRUCMhvP1LnA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-modules-commonjs@7.27.1':
     resolution: {integrity: sha512-OJguuwlTYlN0gBZFRPqwOGNWssZjfIUdS7HMYtN8c1KmwpwHFBwTeFZrg9XZa+DFTitWOW5iTAG7tyCUPsCCyw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-modules-commonjs@7.28.6':
     resolution: {integrity: sha512-jppVbf8IV9iWWwWTQIxJMAJCWBuuKx71475wHwYytrRGQ2CWiDvYlADQno3tcYpS/T2UUWFQp3nVtYfK/YBQrA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
-  '@babel/plugin-transform-modules-systemjs@7.28.5':
-    resolution: {integrity: sha512-vn5Jma98LCOeBy/KpeQhXcV2WZgaRUtjwQmjoBuLNlOmkg0fB5pdvYVeWRYI69wWKwK2cD1QbMiUQnoujWvrew==}
+  '@babel/plugin-transform-modules-systemjs@7.29.4':
+    resolution: {integrity: sha512-N7QmZ0xRZfjHOfZeQLJjwgX2zS9pdGHSVl/cjSGlo4dXMqvurfxXDMKY4RqEKzPozV78VMcd0lxyG13mlbKc4w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-modules-umd@7.27.1':
     resolution: {integrity: sha512-iQBE/xC5BV1OxJbp6WG7jq9IWiD+xxlZhLrdwpPkTX3ydmXdvoCpyfJN7acaIBZaOqTfr76pgzqBJflNbeRK+w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-named-capturing-groups-regex@7.27.1':
     resolution: {integrity: sha512-SstR5JYy8ddZvD6MhV0tM/j16Qds4mIpJTOd1Yu9J9pJjH93bxHECF7pgtc28XvkzTD6Pxcm/0Z73Hvk7kb3Ng==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-new-target@7.27.1':
     resolution: {integrity: sha512-f6PiYeqXQ05lYq3TIfIDu/MtliKUbNwkGApPUvyo6+tc7uaR4cPjPe7DFPr15Uyycg2lZU6btZ575CuQoYh7MQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-nullish-coalescing-operator@7.27.1':
     resolution: {integrity: sha512-aGZh6xMo6q9vq1JGcw58lZ1Z0+i0xB2x0XaauNIUXd6O1xXc3RwoWEBlsTQrY4KQ9Jf0s5rgD6SiNkaUdJegTA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-numeric-separator@7.27.1':
     resolution: {integrity: sha512-fdPKAcujuvEChxDBJ5c+0BTaS6revLV7CJL08e4m3de8qJfNIuCc2nc7XJYOjBoTMJeqSmwXJ0ypE14RCjLwaw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-object-rest-spread@7.28.4':
     resolution: {integrity: sha512-373KA2HQzKhQCYiRVIRr+3MjpCObqzDlyrM6u4I201wL8Mp2wHf7uB8GhDwis03k2ti8Zr65Zyyqs1xOxUF/Ew==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-object-super@7.27.1':
     resolution: {integrity: sha512-SFy8S9plRPbIcxlJ8A6mT/CxFdJx/c04JEctz4jf8YZaVS2px34j7NXRrlGlHkN/M2gnpL37ZpGRGVFLd3l8Ng==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-optional-catch-binding@7.27.1':
     resolution: {integrity: sha512-txEAEKzYrHEX4xSZN4kJ+OfKXFVSWKB2ZxM9dpcE3wT7smwkNmXo5ORRlVzMVdJbD+Q8ILTgSD7959uj+3Dm3Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-optional-chaining@7.27.1':
     resolution: {integrity: sha512-BQmKPPIuc8EkZgNKsv0X4bPmOoayeu4F1YCwx2/CfmDSXDbp7GnzlUH+/ul5VGfRg1AoFPsrIThlEBj2xb4CAg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-optional-chaining@7.28.5':
     resolution: {integrity: sha512-N6fut9IZlPnjPwgiQkXNhb+cT8wQKFlJNqcZkWlcTqkcqx6/kU4ynGmLFoa4LViBSirn05YAwk+sQBbPfxtYzQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-parameters@7.27.7':
     resolution: {integrity: sha512-qBkYTYCb76RRxUM6CcZA5KRu8K4SM8ajzVeUgVdMVO9NN9uI/GaVmBg/WKJJGnNokV9SY8FxNOVWGXzqzUidBg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-private-methods@7.27.1':
     resolution: {integrity: sha512-10FVt+X55AjRAYI9BrdISN9/AQWHqldOeZDUoLyif1Kn05a56xVBXb8ZouL8pZ9jem8QpXaOt8TS7RHUIS+GPA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-private-property-in-object@7.27.1':
     resolution: {integrity: sha512-5J+IhqTi1XPa0DXF83jYOaARrX+41gOewWbkPyjMNRDqgOCqdffGh8L3f/Ek5utaEBZExjSAzcyjmV9SSAWObQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-property-literals@7.27.1':
     resolution: {integrity: sha512-oThy3BCuCha8kDZ8ZkgOg2exvPYUlprMukKQXI1r1pJ47NCvxfkEy8vK+r/hT9nF0Aa4H1WUPZZjHTFtAhGfmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-react-display-name@7.28.0':
     resolution: {integrity: sha512-D6Eujc2zMxKjfa4Zxl4GHMsmhKKZ9VpcqIchJLvwTxad9zWIYulwYItBovpDOoNLISpcZSXoDJ5gaGbQUDqViA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-react-jsx-development@7.27.1':
     resolution: {integrity: sha512-ykDdF5yI4f1WrAolLqeF3hmYU12j9ntLQl/AOG1HAS21jxyg1Q0/J/tpREuYLfatGdGmXp/3yS0ZA76kOlVq9Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-react-jsx-self@7.27.1':
     resolution: {integrity: sha512-6UzkCs+ejGdZ5mFFC/OCUrv028ab2fp1znZmCZjAOBKiBK2jXD1O+BPSfX8X2qjJ75fZBMSnQn3Rq2mrBJK2mw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-react-jsx-source@7.27.1':
     resolution: {integrity: sha512-zbwoTsBruTeKB9hSq73ha66iFeJHuaFkUbwvqElnygoNbj/jHRsSeokowZFN3CZ64IvEqcmmkVe89OPXc7ldAw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-react-jsx@7.27.1':
     resolution: {integrity: sha512-2KH4LWGSrJIkVf5tSiBFYuXDAoWRq2MMwgivCf+93dd0GQi8RXLjKA/0EvRnVV5G0hrHczsquXuD01L8s6dmBw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-react-pure-annotations@7.27.1':
     resolution: {integrity: sha512-JfuinvDOsD9FVMTHpzA/pBLisxpv1aSf+OIV8lgH3MuWrks19R27e6a6DipIg4aX1Zm9Wpb04p8wljfKrVSnPA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-regenerator@7.28.4':
     resolution: {integrity: sha512-+ZEdQlBoRg9m2NnzvEeLgtvBMO4tkFBw5SQIUgLICgTrumLoU7lr+Oghi6km2PFj+dbUt2u1oby2w3BDO9YQnA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-regexp-modifiers@7.27.1':
     resolution: {integrity: sha512-TtEciroaiODtXvLZv4rmfMhkCv8jx3wgKpL68PuiPh2M4fvz5jhsA7697N1gMvkvr/JTF13DrFYyEbY9U7cVPA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-reserved-words@7.27.1':
     resolution: {integrity: sha512-V2ABPHIJX4kC7HegLkYoDpfg9PVmuWy/i6vUM5eGK22bx4YVFD3M5F0QQnWQoDs6AGsUWTVOopBiMFQgHaSkVw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-runtime@7.28.5':
     resolution: {integrity: sha512-20NUVgOrinudkIBzQ2bNxP08YpKprUkRTiRSd2/Z5GOdPImJGkoN4Z7IQe1T5AdyKI1i5L6RBmluqdSzvaq9/w==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-shorthand-properties@7.27.1':
     resolution: {integrity: sha512-N/wH1vcn4oYawbJ13Y/FxcQrWk63jhfNa7jef0ih7PHSIHX2LB7GWE1rkPrOnka9kwMxb6hMl19p7lidA+EHmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-spread@7.27.1':
     resolution: {integrity: sha512-kpb3HUqaILBJcRFVhFUs6Trdd4mkrzcGXss+6/mxUd273PfbWqSDHRzMT2234gIg2QYfAjvXLSquP1xECSg09Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-sticky-regex@7.27.1':
     resolution: {integrity: sha512-lhInBO5bi/Kowe2/aLdBAawijx+q1pQzicSgnkB6dUPc1+RC8QmJHKf2OjvU+NZWitguJHEaEmbV6VWEouT58g==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-template-literals@7.27.1':
     resolution: {integrity: sha512-fBJKiV7F2DxZUkg5EtHKXQdbsbURW3DZKQUWphDum0uRP6eHGGa/He9mc0mypL680pb+e/lDIthRohlv8NCHkg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-typeof-symbol@7.27.1':
     resolution: {integrity: sha512-RiSILC+nRJM7FY5srIyc4/fGIwUhyDuuBSdWn4y6yT6gm652DpCHZjIipgn6B7MQ1ITOUnAKWixEUjQRIBIcLw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-typescript@7.28.5':
     resolution: {integrity: sha512-x2Qa+v/CuEoX7Dr31iAfr0IhInrVOWZU/2vJMJ00FOR/2nM0BcBEclpaf9sWCDc+v5e9dMrhSH8/atq/kX7+bA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-typescript@7.28.6':
     resolution: {integrity: sha512-0YWL2RFxOqEm9Efk5PvreamxPME8OyY0wM5wh5lHjF+VtVhdneCWGzZeSqzOfiobVqQaNCd2z0tQvnI9DaPWPw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-unicode-escapes@7.27.1':
     resolution: {integrity: sha512-Ysg4v6AmF26k9vpfFuTZg8HRfVWzsh1kVfowA23y9j/Gu6dOuahdUVhkLqpObp3JIv27MLSii6noRnuKN8H0Mg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-unicode-property-regex@7.27.1':
     resolution: {integrity: sha512-uW20S39PnaTImxp39O5qFlHLS9LJEmANjMG7SxIhap8rCHqu0Ik+tLEPX5DKmHn6CsWQ7j3lix2tFOa5YtL12Q==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-unicode-regex@7.27.1':
     resolution: {integrity: sha512-xvINq24TRojDuyt6JGtHmkVkrfVV3FPT16uytxImLeBZqW3/H52yN+kM1MGuyPkIQxrzKwPHs5U/MP3qKyzkGw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/plugin-transform-unicode-sets-regex@7.27.1':
     resolution: {integrity: sha512-EtkOujbc4cgvb0mlpQefi4NTPBzhSIevblFevACNLUspmrALgmEBdL/XfnyyITfd8fKBZrZys92zOWcik7j9Tw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   '@babel/preset-env@7.28.5':
     resolution: {integrity: sha512-S36mOoi1Sb6Fz98fBfE+UZSpYw5mJm0NUHtIKrOuNcqeFauy1J6dIvXm2KRVKobOSaGq4t/hBXdN4HGU3wL9Wg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/preset-modules@0.1.6-no-external-plugins':
     resolution: {integrity: sha512-HrcgcIESLm9aIR842yhJ5RWan/gebQUJ6E/E5+rf0y9o6oj7w0Br+sWuL6kEQ/o/AdfvR1Je9jG18/gnpwjEyA==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0 || ^8.0.0-0 <8.0.0
+      '@babel/core': 7.29.6
 
   '@babel/preset-react@7.28.5':
     resolution: {integrity: sha512-Z3J8vhRq7CeLjdC58jLv4lnZ5RKFUJWqH5emvxmv9Hv3BD1T9R/Im713R4MTKwvFaV74ejZ3sM01LyEKk4ugNQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/preset-typescript@7.27.1':
     resolution: {integrity: sha512-l7WfQfX0WK4M0v2RudjuQK4u99BS6yLHYEmdtVPP7lKV013zr9DygFuWNlnbvQ9LR+LS0Egz/XAvGx5U9MX0fQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/preset-typescript@7.28.5':
     resolution: {integrity: sha512-+bQy5WOI2V6LJZpPVxY+yp66XdZ2yifu0Mc1aP5CQKgjn4QM5IN2i5fAZ4xKop47pr8rpVhiAeu+nDQa12C8+g==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
 
   '@babel/runtime@7.28.4':
     resolution: {integrity: sha512-Q/N6JNWvIvPnLDvjlE1OUBLPQHH6l3CltCEsHIujp45zQUSSh8K+gHnaEX45yAT1nyngnINhvWtzN+Nb9D8RAQ==}
@@ -1282,6 +1321,10 @@ packages:
     resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/template@7.29.7':
+    resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/traverse@7.28.5':
     resolution: {integrity: sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ==}
     engines: {node: '>=6.9.0'}
@@ -1298,29 +1341,91 @@ packages:
     resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/types@7.29.7':
+    resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
+    engines: {node: '>=6.9.0'}
+
   '@bcoe/v8-coverage@0.2.3':
     resolution: {integrity: sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==}
 
-  '@better-auth/core@1.4.18':
-    resolution: {integrity: sha512-q+awYgC7nkLEBdx2sW0iJjkzgSHlIxGnOpsN1r/O1+a4m7osJNHtfK2mKJSL1I+GfNyIlxJF8WvD/NLuYMpmcg==}
+  '@better-auth/core@1.6.23':
+    resolution: {integrity: sha512-beEhOs0uVeOxYOZKUfIEBd/nQV2Bd4/6wyLxZ0OFkn6CMTK2Vi+hXuZLnyPBeB6RdHpebEoJWiHqwHxBIxgPDQ==}
     peerDependencies:
-      '@better-auth/utils': 0.3.0
-      '@better-fetch/fetch': 1.1.21
-      better-call: 1.1.8
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.1
+      '@cloudflare/workers-types': '>=4'
+      '@opentelemetry/api': ^1.9.0
+      better-call: 1.3.7
       jose: ^6.1.0
-      kysely: ^0.28.5
+      kysely: 0.28.17
       nanostores: ^1.0.1
+    peerDependenciesMeta:
+      '@cloudflare/workers-types':
+        optional: true
+      '@opentelemetry/api':
+        optional: true
+
+  '@better-auth/drizzle-adapter@1.6.23':
+    resolution: {integrity: sha512-2+/PTVfIP9E7iz6af8TB3lhnowHUj9ljC66kECmHaFEdUqPgzHoWux9epotKwO7XDg2ui4ttWQ8CMeNFLvQeKQ==}
+    peerDependencies:
+      '@better-auth/core': ^1.6.23
+      '@better-auth/utils': 0.4.2
+      drizzle-orm: ^0.45.2
+    peerDependenciesMeta:
+      drizzle-orm:
+        optional: true
+
+  '@better-auth/kysely-adapter@1.6.23':
+    resolution: {integrity: sha512-zbNJsMbG09exfkGyvFqBLLqWoMPAUWjxCuUnEK5AsjbYoZeIjj/QGZgdf4CapVWryKxjA9Q6Jlr6fbiPpC3VAg==}
+    peerDependencies:
+      '@better-auth/core': ^1.6.23
+      '@better-auth/utils': 0.4.2
+      kysely: 0.28.17
+    peerDependenciesMeta:
+      kysely:
+        optional: true
+
+  '@better-auth/memory-adapter@1.6.23':
+    resolution: {integrity: sha512-krIiR0pIVkaKlAzm690n5bcMW4NGbqeMg0HQSD9fz/KcQF/eWLqcq9gG/BhHTj2i/y96qH+W5JWPmaSOS5iTgQ==}
+    peerDependencies:
+      '@better-auth/core': ^1.6.23
+      '@better-auth/utils': 0.4.2
+
+  '@better-auth/mongo-adapter@1.6.23':
+    resolution: {integrity: sha512-7+QdevitGlKBbP6JbiSk5SBnzPsKV/mDrQBGBn8hwByQLeJwqpqbuBPw7ZI8vzUlFfAAnyFiqwP3Eb8mxnp7pA==}
+    peerDependencies:
+      '@better-auth/core': ^1.6.23
+      '@better-auth/utils': 0.4.2
+      mongodb: ^6.0.0 || ^7.0.0
+    peerDependenciesMeta:
+      mongodb:
+        optional: true
+
+  '@better-auth/prisma-adapter@1.6.23':
+    resolution: {integrity: sha512-2qSdzidq4tkb1eS5TTqb4Nzg0mdZWm3Qky9SYeXeb8PpVQbC2sxqJhEM5mK7y12uU6I8hc64wO9f7AFVNL+6UQ==}
+    peerDependencies:
+      '@better-auth/core': ^1.6.23
+      '@better-auth/utils': 0.4.2
+      '@prisma/client': ^5.0.0 || ^6.0.0 || ^7.0.0
+      prisma: ^5.0.0 || ^6.0.0 || ^7.0.0
+    peerDependenciesMeta:
+      '@prisma/client':
+        optional: true
+      prisma:
+        optional: true
 
-  '@better-auth/telemetry@1.4.18':
-    resolution: {integrity: sha512-e5rDF8S4j3Um/0LIVATL2in9dL4lfO2fr2v1Wio4qTMRbfxqnUDTa+6SZtwdeJrbc4O+a3c+IyIpjG9Q/6GpfQ==}
+  '@better-auth/telemetry@1.6.23':
+    resolution: {integrity: sha512-/R2Kb+z2BpDOOWwVHqOk+c0VNpuwfCv4Hp5Yr9003WIZPax/zyNraGLB9CFE8qF2gZW8Dsz419k4I8CPrGzpDA==}
     peerDependencies:
-      '@better-auth/core': 1.4.18
+      '@better-auth/core': ^1.6.23
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.1
 
-  '@better-auth/utils@0.3.0':
-    resolution: {integrity: sha512-W+Adw6ZA6mgvnSnhOki270rwJ42t4XzSK6YWGF//BbVXL6SwCLWfyzBc1lN2m/4RM28KubdBKQ4X5VMoLRNPQw==}
+  '@better-auth/utils@0.4.2':
+    resolution: {integrity: sha512-AUxrvu+HaaODsUyzDxFgwd/8RZ1yZaYo42LXKSrU2oGgR38pS1ij8nqQKNgtTWoYGpNevNXtCfgTy6loHveW9A==}
 
-  '@better-fetch/fetch@1.1.21':
-    resolution: {integrity: sha512-/ImESw0sskqlVR94jB+5+Pxjf+xBwDZF/N5+y2/q4EqD7IARUTSpPfIo8uf39SYpCxyOCtbyYpUrZ3F/k0zT4A==}
+  '@better-fetch/fetch@1.3.1':
+    resolution: {integrity: sha512-ABkD1WhyfPZprKRQI3bhATjeiFuNWC9PXhfGWqL+sg/gKrM977oFrYkdb4msM3hgUGonr7KlOsOFT5TU2rht9g==}
 
   '@biomejs/biome@2.3.11':
     resolution: {integrity: sha512-/zt+6qazBWguPG6+eWmiELqO+9jRsMZ/DBU3lfuU2ngtIQYzymocHhKiZRyrbra4aCOoyTg/BmY+6WH5mv9xmQ==}
@@ -1410,7 +1515,7 @@ packages:
     resolution: {integrity: sha512-TNeqfWnX34CSArTXcRPwUh7g7evQU8qEJniD7XKUj+Yv79qV9BfRC+SA2V2u2gUcZoaks9RC1K2Ha49UOUz52Q==}
     peerDependencies:
       effect: 4.0.0-beta.84
-      vitest: ^3.0.0 || ^4.0.0
+      vitest: 3.2.7
 
   '@emnapi/core@1.7.1':
     resolution: {integrity: sha512-o1uhUASyo921r2XtHYOHy7gdkGLge8ghBEQHMWmyJFoXlpU58kIrhhN3w26lpQb6dspetweapMn2CSNwQ8I4wg==}
@@ -1418,9 +1523,6 @@ packages:
   '@emnapi/runtime@1.7.1':
     resolution: {integrity: sha512-PVtJr5CmLwYAU9PZDMITZoR5iAOShYREoR45EyyLrbntV50mdePTgUn4AmOw90Ifcj+x2kRjdzr1HP3RrNiHGA==}
 
-  '@emnapi/runtime@1.8.1':
-    resolution: {integrity: sha512-mehfKSMWjjNol8659Z8KxEMrdSJDDot5SXMq00dM8BN4o+CLNXQ0xH2V7EchNHV4RmbZLmmPdEaXZc5H2FXmDg==}
-
   '@emnapi/wasi-threads@1.1.0':
     resolution: {integrity: sha512-WI0DdZ8xFSbgMjR1sFsKABJ/C5OnRrjT06JXbZKexJGrDuPTzZdDYfFlsgcCXCyf+suG5QU2e/y1Wo2V/OapLQ==}
 
@@ -1432,6 +1534,12 @@ packages:
     resolution: {integrity: sha512-FxEMIkJKnodyA1OaCUoEvbYRkoZlLZ4d/eXFu9Fh8CbBBgP5EmZxrfTRyN0qpXZ4vOvqnE5YdRdcrmUUXuU+dA==}
     deprecated: 'Merged into tsx: https://tsx.is'
 
+  '@esbuild/aix-ppc64@0.25.0':
+    resolution: {integrity: sha512-O7vun9Sf8DFjH2UtqK8Ku3LkquL9SZL8OLY1T5NZkA34+wG3OQF7cl4Ql8vdNzM6fzBbYfLaiRLIOZ+2FOCgBQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
   '@esbuild/aix-ppc64@0.25.12':
     resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
     engines: {node: '>=18'}
@@ -1450,15 +1558,21 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
+  '@esbuild/aix-ppc64@0.28.1':
+    resolution: {integrity: sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
   '@esbuild/android-arm64@0.17.19':
     resolution: {integrity: sha512-KBMWvEZooR7+kzY0BtbTQn0OAYY7CsiydT63pVEaPtVYF0hXbUaOyZog37DKxK7NF3XacBJOpYT4adIJh+avxA==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm64@0.18.20':
-    resolution: {integrity: sha512-Nz4rJcchGDtENV0eMKUNa6L12zz2zBDXuhj/Vjh18zGqB44Bi7MBMSXjgunJgjRhCmKOjnPuZp4Mb6OKqtMHLQ==}
-    engines: {node: '>=12'}
+  '@esbuild/android-arm64@0.25.0':
+    resolution: {integrity: sha512-grvv8WncGjDSyUBjN9yHXNt+cq0snxXbDxy5pJtzMKGmmpPxeAmAhWxXI+01lU5rwZomDgD3kJwulEnhTRUd6g==}
+    engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
 
@@ -1480,15 +1594,21 @@ packages:
     cpu: [arm64]
     os: [android]
 
+  '@esbuild/android-arm64@0.28.1':
+    resolution: {integrity: sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
   '@esbuild/android-arm@0.17.19':
     resolution: {integrity: sha512-rIKddzqhmav7MSmoFCmDIb6e2W57geRsM94gV2l38fzhXMwq7hZoClug9USI2pFRGL06f4IOPHHpFNOkWieR8A==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-arm@0.18.20':
-    resolution: {integrity: sha512-fyi7TDI/ijKKNZTUJAQqiG5T7YjJXgnzkURqmGj13C6dCqckZBLdl4h7bkhHt/t0WP+zO9/zwroDvANaOqO5Sw==}
-    engines: {node: '>=12'}
+  '@esbuild/android-arm@0.25.0':
+    resolution: {integrity: sha512-PTyWCYYiU0+1eJKmw21lWtC+d08JDZPQ5g+kFyxP0V+es6VPPSUhM6zk8iImp2jbV6GwjX4pap0JFbUQN65X1g==}
+    engines: {node: '>=18'}
     cpu: [arm]
     os: [android]
 
@@ -1510,15 +1630,21 @@ packages:
     cpu: [arm]
     os: [android]
 
+  '@esbuild/android-arm@0.28.1':
+    resolution: {integrity: sha512-0k2F129Xdio1TdJfzJ8sy1Q47vUD2NnwdhiAf7drUN1EBTfPf4hsFCtmMgu/6m8JSzsBrlmVjudMBQqOfG8usQ==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
   '@esbuild/android-x64@0.17.19':
     resolution: {integrity: sha512-uUTTc4xGNDT7YSArp/zbtmbhO0uEEK9/ETW29Wk1thYUJBz3IVnvgEiEwEa9IeLyvnpKrWK64Utw2bgUmDveww==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [android]
 
-  '@esbuild/android-x64@0.18.20':
-    resolution: {integrity: sha512-8GDdlePJA8D6zlZYJV/jnrRAi6rOiNaCC/JclcXpB+KIuvfBN4owLtgzY2bsxnx666XjJx2kDPUmnTtR8qKQUg==}
-    engines: {node: '>=12'}
+  '@esbuild/android-x64@0.25.0':
+    resolution: {integrity: sha512-m/ix7SfKG5buCnxasr52+LI78SQ+wgdENi9CqyCXwjVR2X4Jkz+BpC3le3AoBPYTC9NHklwngVXvbJ9/Akhrfg==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [android]
 
@@ -1540,15 +1666,21 @@ packages:
     cpu: [x64]
     os: [android]
 
+  '@esbuild/android-x64@0.28.1':
+    resolution: {integrity: sha512-dbwY7ltSMDWsRatcRpCnES4F+im88OCUgGZjy52shC7GqHRE/cYlxNbB4Z4UpJswpcc4Qxd2oE/ufM0p61IKng==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
   '@esbuild/darwin-arm64@0.17.19':
     resolution: {integrity: sha512-80wEoCfF/hFKM6WE1FyBHc9SfUblloAWx6FJkFWTWiCoht9Mc0ARGEM47e67W9rI09YoUxJL68WHfDRYEAvOhg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-arm64@0.18.20':
-    resolution: {integrity: sha512-bxRHW5kHU38zS2lPTPOyuyTm+S+eobPUnTNkdJEfAddYgEcll4xkT8DB9d2008DtTbl7uJag2HuE5NZAZgnNEA==}
-    engines: {node: '>=12'}
+  '@esbuild/darwin-arm64@0.25.0':
+    resolution: {integrity: sha512-mVwdUb5SRkPayVadIOI78K7aAnPamoeFR2bT5nszFUZ9P8UpK4ratOdYbZZXYSqPKMHfS1wdHCJk1P1EZpRdvw==}
+    engines: {node: '>=18'}
     cpu: [arm64]
     os: [darwin]
 
@@ -1570,15 +1702,21 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
+  '@esbuild/darwin-arm64@0.28.1':
+    resolution: {integrity: sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
   '@esbuild/darwin-x64@0.17.19':
     resolution: {integrity: sha512-IJM4JJsLhRYr9xdtLytPLSH9k/oxR3boaUIYiHkAawtwNOXKE8KoU8tMvryogdcT8AU+Bflmh81Xn6Q0vTZbQw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.18.20':
-    resolution: {integrity: sha512-pc5gxlMDxzm513qPGbCbDukOdsGtKhfxD1zJKXjCCcU7ju50O7MeAZ8c4krSJcOIJGFR+qx21yMMVYwiQvyTyQ==}
-    engines: {node: '>=12'}
+  '@esbuild/darwin-x64@0.25.0':
+    resolution: {integrity: sha512-DgDaYsPWFTS4S3nWpFcMn/33ZZwAAeAFKNHNa1QN0rI4pUjgqf0f7ONmXf6d22tqTY+H9FNdgeaAa+YIFUn2Rg==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [darwin]
 
@@ -1600,15 +1738,21 @@ packages:
     cpu: [x64]
     os: [darwin]
 
+  '@esbuild/darwin-x64@0.28.1':
+    resolution: {integrity: sha512-zfdzgK9ACBNZLI/CyHTOx81SyNbM6YXn7rxSgX97VjyiPl9W1i4Ka4fgKECEoFCKGpvBj5qArWIGgQjOwkgskQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
   '@esbuild/freebsd-arm64@0.17.19':
     resolution: {integrity: sha512-pBwbc7DufluUeGdjSU5Si+P3SoMF5DQ/F/UmTSb8HXO80ZEAJmrykPyzo1IfNbAoaqw48YRpv8shwd1NoI0jcQ==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-arm64@0.18.20':
-    resolution: {integrity: sha512-yqDQHy4QHevpMAaxhhIwYPMv1NECwOvIpGCZkECn8w2WFHXjEwrBn3CeNIYsibZ/iZEUemj++M26W3cNR5h+Tw==}
-    engines: {node: '>=12'}
+  '@esbuild/freebsd-arm64@0.25.0':
+    resolution: {integrity: sha512-VN4ocxy6dxefN1MepBx/iD1dH5K8qNtNe227I0mnTRjry8tj5MRk4zprLEdG8WPyAPb93/e4pSgi1SoHdgOa4w==}
+    engines: {node: '>=18'}
     cpu: [arm64]
     os: [freebsd]
 
@@ -1630,15 +1774,21 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
+  '@esbuild/freebsd-arm64@0.28.1':
+    resolution: {integrity: sha512-wG2EA8ENdEI0qhkSZMjfqrdY+ziCYCPMmtZjjIwOmXFjmyzEHn+UUxk5of+SYsjtfs3VpnlC7QLzSI5hY/rOAw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
   '@esbuild/freebsd-x64@0.17.19':
     resolution: {integrity: sha512-4lu+n8Wk0XlajEhbEffdy2xy53dpR06SlzvhGByyg36qJw6Kpfk7cp45DR/62aPH9mtJRmIyrXAS5UWBrJT6TQ==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.18.20':
-    resolution: {integrity: sha512-tgWRPPuQsd3RmBZwarGVHZQvtzfEBOreNuxEMKFcd5DaDn2PbBxfwLcj4+aenoh7ctXcbXmOQIn8HI6mCSw5MQ==}
-    engines: {node: '>=12'}
+  '@esbuild/freebsd-x64@0.25.0':
+    resolution: {integrity: sha512-mrSgt7lCh07FY+hDD1TxiTyIHyttn6vnjesnPoVDNmDfOmggTLXRv8Id5fNZey1gl/V2dyVK1VXXqVsQIiAk+A==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [freebsd]
 
@@ -1660,15 +1810,21 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
+  '@esbuild/freebsd-x64@0.28.1':
+    resolution: {integrity: sha512-i7dZ9vQgnvSCzi/rYCXNgtF/U+eKZNJBzu3eTQbRgHnM7tNSizLOkRFAl3qzVc/Op/u5YkHHa4pf/3DOYHthLQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
   '@esbuild/linux-arm64@0.17.19':
     resolution: {integrity: sha512-ct1Tg3WGwd3P+oZYqic+YZF4snNl2bsnMKRkb3ozHmnM0dGWuxcPTTntAF6bOP0Sp4x0PjSF+4uHQ1xvxfRKqg==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm64@0.18.20':
-    resolution: {integrity: sha512-2YbscF+UL7SQAVIpnWvYwM+3LskyDmPhe31pE7/aoTMFKKzIc9lLbyGUpmmb8a8AixOL61sQ/mFh3jEjHYFvdA==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-arm64@0.25.0':
+    resolution: {integrity: sha512-9QAQjTWNDM/Vk2bgBl17yWuZxZNQIF0OUUuPZRKoDtqF2k4EtYbpyiG5/Dk7nqeK6kIJWPYldkOcBqjXjrUlmg==}
+    engines: {node: '>=18'}
     cpu: [arm64]
     os: [linux]
 
@@ -1690,15 +1846,21 @@ packages:
     cpu: [arm64]
     os: [linux]
 
+  '@esbuild/linux-arm64@0.28.1':
+    resolution: {integrity: sha512-yHs+0uc8+nvEAfAfxrWQKK5peSNzBc4PegcMO0EJ2hT71uA7vB8Ihg2e77R2P7SG5uYjPbHlLLmve4LLLRCf0g==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
   '@esbuild/linux-arm@0.17.19':
     resolution: {integrity: sha512-cdmT3KxjlOQ/gZ2cjfrQOtmhG4HJs6hhvm3mWSRDPtZ/lP5oe8FWceS10JaSJC13GBd4eH/haHnqf7hhGNLerA==}
     engines: {node: '>=12'}
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-arm@0.18.20':
-    resolution: {integrity: sha512-/5bHkMWnq1EgKr1V+Ybz3s1hWXok7mDFUMQ4cG10AfW3wL02PSZi5kFpYKrptDsgb2WAJIvRcDm+qIvXf/apvg==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-arm@0.25.0':
+    resolution: {integrity: sha512-vkB3IYj2IDo3g9xX7HqhPYxVkNQe8qTK55fraQyTzTX/fxaDtXiEnavv9geOsonh2Fd2RMB+i5cbhu2zMNWJwg==}
+    engines: {node: '>=18'}
     cpu: [arm]
     os: [linux]
 
@@ -1720,15 +1882,21 @@ packages:
     cpu: [arm]
     os: [linux]
 
+  '@esbuild/linux-arm@0.28.1':
+    resolution: {integrity: sha512-qVXBOHQS+d5Y722GwJzJUtOLlX7km3CraOaGormF1pDtPd2C/l1SHRPgjLunLGe51Sh5YYWKMFDyV4SxgMQYTQ==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
   '@esbuild/linux-ia32@0.17.19':
     resolution: {integrity: sha512-w4IRhSy1VbsNxHRQpeGCHEmibqdTUx61Vc38APcsRbuVgK0OPEnQ0YD39Brymn96mOx48Y2laBQGqgZ0j9w6SQ==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.18.20':
-    resolution: {integrity: sha512-P4etWwq6IsReT0E1KHU40bOnzMHoH73aXp96Fs8TIT6z9Hu8G6+0SHSw9i2isWrD2nbx2qo5yUqACgdfVGx7TA==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-ia32@0.25.0':
+    resolution: {integrity: sha512-43ET5bHbphBegyeqLb7I1eYn2P/JYGNmzzdidq/w0T8E2SsYL1U6un2NFROFRg1JZLTzdCoRomg8Rvf9M6W6Gg==}
+    engines: {node: '>=18'}
     cpu: [ia32]
     os: [linux]
 
@@ -1750,15 +1918,21 @@ packages:
     cpu: [ia32]
     os: [linux]
 
+  '@esbuild/linux-ia32@0.28.1':
+    resolution: {integrity: sha512-d1z4ZuP0ajrfz/FhGT4vv278rX8KnPPJx8i5+AtK7TYbx9Le9F1hyzurZpkEyjkGa9dUGhQow4C1NmeGvqxN2w==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
   '@esbuild/linux-loong64@0.17.19':
     resolution: {integrity: sha512-2iAngUbBPMq439a+z//gE+9WBldoMp1s5GWsUSgqHLzLJ9WoZLZhpwWuym0u0u/4XmZ3gpHmzV84PonE+9IIdQ==}
     engines: {node: '>=12'}
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.18.20':
-    resolution: {integrity: sha512-nXW8nqBTrOpDLPgPY9uV+/1DjxoQ7DoB2N8eocyq8I9XuqJ7BiAMDMf9n1xZM9TgW0J8zrquIb/A7s3BJv7rjg==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-loong64@0.25.0':
+    resolution: {integrity: sha512-fC95c/xyNFueMhClxJmeRIj2yrSMdDfmqJnyOY4ZqsALkDrrKJfIg5NTMSzVBr5YW1jf+l7/cndBfP3MSDpoHw==}
+    engines: {node: '>=18'}
     cpu: [loong64]
     os: [linux]
 
@@ -1780,15 +1954,21 @@ packages:
     cpu: [loong64]
     os: [linux]
 
+  '@esbuild/linux-loong64@0.28.1':
+    resolution: {integrity: sha512-M5sRjUVZrkm1OAPR3dlOYzNmN+loZKGVi1VUQGrwuqLcbR6qeAz+famMhjASeH3YVKvZz+zT1jlh/keC3Rj/lg==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
   '@esbuild/linux-mips64el@0.17.19':
     resolution: {integrity: sha512-LKJltc4LVdMKHsrFe4MGNPp0hqDFA1Wpt3jE1gEyM3nKUvOiO//9PheZZHfYRfYl6AwdTH4aTcXSqBerX0ml4A==}
     engines: {node: '>=12'}
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.18.20':
-    resolution: {integrity: sha512-d5NeaXZcHp8PzYy5VnXV3VSd2D328Zb+9dEq5HE6bw6+N86JVPExrA6O68OPwobntbNJ0pzCpUFZTo3w0GyetQ==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-mips64el@0.25.0':
+    resolution: {integrity: sha512-nkAMFju7KDW73T1DdH7glcyIptm95a7Le8irTQNO/qtkoyypZAnjchQgooFUDQhNAy4iu08N79W4T4pMBwhPwQ==}
+    engines: {node: '>=18'}
     cpu: [mips64el]
     os: [linux]
 
@@ -1810,15 +1990,21 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
+  '@esbuild/linux-mips64el@0.28.1':
+    resolution: {integrity: sha512-mRObBZeHh2OxcBFPWE/FjylkRgZdYuiTR3vaTozquCGOH14iP9oN4x4Ge81CoIDYQrXmIxpFumJBu5MtZpnQJQ==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
   '@esbuild/linux-ppc64@0.17.19':
     resolution: {integrity: sha512-/c/DGybs95WXNS8y3Ti/ytqETiW7EU44MEKuCAcpPto3YjQbyK3IQVKfF6nbghD7EcLUGl0NbiL5Rt5DMhn5tg==}
     engines: {node: '>=12'}
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.18.20':
-    resolution: {integrity: sha512-WHPyeScRNcmANnLQkq6AfyXRFr5D6N2sKgkFo2FqguP44Nw2eyDlbTdZwd9GYk98DZG9QItIiTlFLHJHjxP3FA==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-ppc64@0.25.0':
+    resolution: {integrity: sha512-NhyOejdhRGS8Iwv+KKR2zTq2PpysF9XqY+Zk77vQHqNbo/PwZCzB5/h7VGuREZm1fixhs4Q/qWRSi5zmAiO4Fw==}
+    engines: {node: '>=18'}
     cpu: [ppc64]
     os: [linux]
 
@@ -1840,15 +2026,21 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
+  '@esbuild/linux-ppc64@0.28.1':
+    resolution: {integrity: sha512-slScBsMAb3GFDcdrCgLwZtPYRoH2H/youv10QiZyRjmsP48fznoveWytSgCI/R0ZcUgpc0ZhIUEx6LHts8yrfQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
   '@esbuild/linux-riscv64@0.17.19':
     resolution: {integrity: sha512-FC3nUAWhvFoutlhAkgHf8f5HwFWUL6bYdvLc/TTuxKlvLi3+pPzdZiFKSWz/PF30TB1K19SuCxDTI5KcqASJqA==}
     engines: {node: '>=12'}
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.18.20':
-    resolution: {integrity: sha512-WSxo6h5ecI5XH34KC7w5veNnKkju3zBRLEQNY7mv5mtBmrP/MjNBCAlsM2u5hDBlS3NGcTQpoBvRzqBcRtpq1A==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-riscv64@0.25.0':
+    resolution: {integrity: sha512-5S/rbP5OY+GHLC5qXp1y/Mx//e92L1YDqkiBbO9TQOvuFXM+iDqUNG5XopAnXoRH3FjIUDkeGcY1cgNvnXp/kA==}
+    engines: {node: '>=18'}
     cpu: [riscv64]
     os: [linux]
 
@@ -1870,15 +2062,21 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
+  '@esbuild/linux-riscv64@0.28.1':
+    resolution: {integrity: sha512-kw0owk1o0GFETUJyW0jc0G4Yzs0BHZn0JDZ8JRT088vjJYX777BAs1fDGxAC+q831qOs2DTC96mNsG2opdfyyQ==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
   '@esbuild/linux-s390x@0.17.19':
     resolution: {integrity: sha512-IbFsFbxMWLuKEbH+7sTkKzL6NJmG2vRyy6K7JJo55w+8xDk7RElYn6xvXtDW8HCfoKBFK69f3pgBJSUSQPr+4Q==}
     engines: {node: '>=12'}
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.18.20':
-    resolution: {integrity: sha512-+8231GMs3mAEth6Ja1iK0a1sQ3ohfcpzpRLH8uuc5/KVDFneH6jtAJLFGafpzpMRO6DzJ6AvXKze9LfFMrIHVQ==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-s390x@0.25.0':
+    resolution: {integrity: sha512-XM2BFsEBz0Fw37V0zU4CXfcfuACMrppsMFKdYY2WuTS3yi8O1nFOhil/xhKTmE1nPmVyvQJjJivgDT+xh8pXJA==}
+    engines: {node: '>=18'}
     cpu: [s390x]
     os: [linux]
 
@@ -1900,15 +2098,21 @@ packages:
     cpu: [s390x]
     os: [linux]
 
+  '@esbuild/linux-s390x@0.28.1':
+    resolution: {integrity: sha512-/lAIjX8aYFRByhh6L5rYtPEDRqa9de/4V/juOXcta5frjvzXO4/sqEtyytse0g3zZFuWu5cDN0MkLz2qRDD2Ag==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
   '@esbuild/linux-x64@0.17.19':
     resolution: {integrity: sha512-68ngA9lg2H6zkZcyp22tsVt38mlhWde8l3eJLWkyLrp4HwMUr3c1s/M2t7+kHIhvMjglIBrFpncX1SzMckomGw==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/linux-x64@0.18.20':
-    resolution: {integrity: sha512-UYqiqemphJcNsFEskc73jQ7B9jgwjWrSayxawS6UVFZGWrAAtkzjxSqnoclCXxWtfwLdzU+vTpcNYhpn43uP1w==}
-    engines: {node: '>=12'}
+  '@esbuild/linux-x64@0.25.0':
+    resolution: {integrity: sha512-9yl91rHw/cpwMCNytUDxwj2XjFpxML0y9HAOH9pNVQDpQrBxHy01Dx+vaMu0N1CKa/RzBD2hB4u//nfc+Sd3Cw==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [linux]
 
@@ -1930,6 +2134,18 @@ packages:
     cpu: [x64]
     os: [linux]
 
+  '@esbuild/linux-x64@0.28.1':
+    resolution: {integrity: sha512-u/anNYF2mmVOEDwLtnQ1wOr3EZ9sTNGLWrsYGYwHWzGA3Si84IOkHXlbWTD1NB+9/1lcnweYKO54uhxZydNzfA==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
+  '@esbuild/netbsd-arm64@0.25.0':
+    resolution: {integrity: sha512-RuG4PSMPFfrkH6UwCAqBzauBWTygTvb1nxWasEJooGSJ/NwRw7b2HOwyRTQIU97Hq37l3npXoZGYMy3b3xYvPw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
   '@esbuild/netbsd-arm64@0.25.12':
     resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
     engines: {node: '>=18'}
@@ -1948,15 +2164,21 @@ packages:
     cpu: [arm64]
     os: [netbsd]
 
+  '@esbuild/netbsd-arm64@0.28.1':
+    resolution: {integrity: sha512-oks0DYbLwWMmaakTsCb+zL4E+aHRVLom9IJZOAthMQEPiQmydXHkziYEsGYRx0uNV/IjEKGAV941JzH02pflqw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
   '@esbuild/netbsd-x64@0.17.19':
     resolution: {integrity: sha512-CwFq42rXCR8TYIjIfpXCbRX0rp1jo6cPIUPSaWwzbVI4aOfX96OXY8M6KNmtPcg7QjYeDmN+DD0Wp3LaBOLf4Q==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.18.20':
-    resolution: {integrity: sha512-iO1c++VP6xUBUmltHZoMtCUdPlnPGdBom6IrO4gyKPFFVBKioIImVooR5I83nTew5UOYrk3gIJhbZh8X44y06A==}
-    engines: {node: '>=12'}
+  '@esbuild/netbsd-x64@0.25.0':
+    resolution: {integrity: sha512-jl+qisSB5jk01N5f7sPCsBENCOlPiS/xptD5yxOx2oqQfyourJwIKLRA2yqWdifj3owQZCL2sn6o08dBzZGQzA==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [netbsd]
 
@@ -1978,6 +2200,18 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
+  '@esbuild/netbsd-x64@0.28.1':
+    resolution: {integrity: sha512-aeL6lAnN89Hz43Mlh1G8ARasbuoYvSITDEx0tHh5b7jJnHcssqgjy9Yx430GDpmCa6OyrKoS0aNRjKundRizGg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@esbuild/openbsd-arm64@0.25.0':
+    resolution: {integrity: sha512-21sUNbq2r84YE+SJDfaQRvdgznTD8Xc0oc3p3iW/a1EVWeNj/SdUCbm5U0itZPQYRuRTW20fPMWMpcrciH2EJw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
   '@esbuild/openbsd-arm64@0.25.12':
     resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
     engines: {node: '>=18'}
@@ -1996,15 +2230,21 @@ packages:
     cpu: [arm64]
     os: [openbsd]
 
+  '@esbuild/openbsd-arm64@0.28.1':
+    resolution: {integrity: sha512-MEFJe5C3R8pwXdZ5Y21oo6m7ePiS0d9pWucn99O/wvyJZChoIQKrQDxKrGeW8F5+T0okTHesAmDeiHDTIq0V/Q==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
   '@esbuild/openbsd-x64@0.17.19':
     resolution: {integrity: sha512-cnq5brJYrSZ2CF6c35eCmviIN3k3RczmHz8eYaVlNasVqsNY+JKohZU5MKmaOI+KkllCdzOKKdPs762VCPC20g==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.18.20':
-    resolution: {integrity: sha512-e5e4YSsuQfX4cxcygw/UCPIEP6wbIL+se3sxPdCiMbFLBWu0eiZOJ7WoD+ptCLrmjZBK1Wk7I6D/I3NglUGOxg==}
-    engines: {node: '>=12'}
+  '@esbuild/openbsd-x64@0.25.0':
+    resolution: {integrity: sha512-2gwwriSMPcCFRlPlKx3zLQhfN/2WjJ2NSlg5TKLQOJdV0mSxIcYNTMhk3H3ulL/cak+Xj0lY1Ym9ysDV1igceg==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [openbsd]
 
@@ -2026,6 +2266,12 @@ packages:
     cpu: [x64]
     os: [openbsd]
 
+  '@esbuild/openbsd-x64@0.28.1':
+    resolution: {integrity: sha512-i/ZLIOafE0Z8cI/XANJAixoJL/uRAoS2xOA3rb0xN+KK0K177cMAsQYkzHtBrtMXAKuAc7HGgcWiZ/sRC1Nxgw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
   '@esbuild/openharmony-arm64@0.25.12':
     resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
     engines: {node: '>=18'}
@@ -2044,15 +2290,21 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
+  '@esbuild/openharmony-arm64@0.28.1':
+    resolution: {integrity: sha512-ge+Z7EXFNt2BO1oAMsVpiQ8EwndV9i1xXerAeTIK7AtPs3bKFXQM7nlRxDSIUIMeueR1CNXxqztLzdNeReKBJg==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
   '@esbuild/sunos-x64@0.17.19':
     resolution: {integrity: sha512-vCRT7yP3zX+bKWFeP/zdS6SqdWB8OIpaRq/mbXQxTGHnIxspRtigpkUcDMlSCOejlHowLqII7K2JKevwyRP2rg==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/sunos-x64@0.18.20':
-    resolution: {integrity: sha512-kDbFRFp0YpTQVVrqUd5FTYmWo45zGaXe0X8E1G/LKFC0v8x0vWrhOWSLITcCn63lmZIxfOMXtCfti/RxN/0wnQ==}
-    engines: {node: '>=12'}
+  '@esbuild/sunos-x64@0.25.0':
+    resolution: {integrity: sha512-bxI7ThgLzPrPz484/S9jLlvUAHYMzy6I0XiU1ZMeAEOBcS0VePBFxh1JjTQt3Xiat5b6Oh4x7UC7IwKQKIJRIg==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [sunos]
 
@@ -2074,15 +2326,21 @@ packages:
     cpu: [x64]
     os: [sunos]
 
+  '@esbuild/sunos-x64@0.28.1':
+    resolution: {integrity: sha512-BEjgtECkL3vY+SaSQ6nzVfiALUeFxpawyp8Jmf5PtYhf1Ug40N1h/hxlhts+f1FvSvarEigdxS3BlSMI2PJLcQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
   '@esbuild/win32-arm64@0.17.19':
     resolution: {integrity: sha512-yYx+8jwowUstVdorcMdNlzklLYhPxjniHWFKgRqH7IFlUEa0Umu3KuYplf1HUZZ422e3NU9F4LGb+4O0Kdcaag==}
     engines: {node: '>=12'}
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-arm64@0.18.20':
-    resolution: {integrity: sha512-ddYFR6ItYgoaq4v4JmQQaAI5s7npztfV4Ag6NrhiaW0RrnOXqBkgwZLofVTlq1daVTQNhtI5oieTvkRPfZrePg==}
-    engines: {node: '>=12'}
+  '@esbuild/win32-arm64@0.25.0':
+    resolution: {integrity: sha512-ZUAc2YK6JW89xTbXvftxdnYy3m4iHIkDtK3CLce8wg8M2L+YZhIvO1DKpxrd0Yr59AeNNkTiic9YLf6FTtXWMw==}
+    engines: {node: '>=18'}
     cpu: [arm64]
     os: [win32]
 
@@ -2104,15 +2362,21 @@ packages:
     cpu: [arm64]
     os: [win32]
 
+  '@esbuild/win32-arm64@0.28.1':
+    resolution: {integrity: sha512-lCv9eK/H6ZJWbE7bh2nw54CZ9M2nupBxJcTsdk/QQnWkdSjKGuxmmH8/GWrlT1eMmZfn4dGcCjRte397WqfQXA==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
   '@esbuild/win32-ia32@0.17.19':
     resolution: {integrity: sha512-eggDKanJszUtCdlVs0RB+h35wNlb5v4TWEkq4vZcmVt5u/HiDZrTXe2bWFQUez3RgNHwx/x4sk5++4NSSicKkw==}
     engines: {node: '>=12'}
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.18.20':
-    resolution: {integrity: sha512-Wv7QBi3ID/rROT08SABTS7eV4hX26sVduqDOTe1MvGMjNd3EjOz4b7zeexIR62GTIEKrfJXKL9LFxTYgkyeu7g==}
-    engines: {node: '>=12'}
+  '@esbuild/win32-ia32@0.25.0':
+    resolution: {integrity: sha512-eSNxISBu8XweVEWG31/JzjkIGbGIJN/TrRoiSVZwZ6pkC6VX4Im/WV2cz559/TXLcYbcrDN8JtKgd9DJVIo8GA==}
+    engines: {node: '>=18'}
     cpu: [ia32]
     os: [win32]
 
@@ -2134,15 +2398,21 @@ packages:
     cpu: [ia32]
     os: [win32]
 
+  '@esbuild/win32-ia32@0.28.1':
+    resolution: {integrity: sha512-zvb/mB2bSCoJOpoCBgYKKpX6YM6mJBlBUVUtVj41DlZJVEB6/0CKlRYxP5wWl1C1ILiCoAU5wZZ4q1P3qeS6Eg==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
   '@esbuild/win32-x64@0.17.19':
     resolution: {integrity: sha512-lAhycmKnVOuRYNtRtatQR1LPQf2oYCkRGkSFnseDAKPl8lu5SOsK/e1sXe5a0Pc5kHIHe6P2I/ilntNv2xf3cA==}
     engines: {node: '>=12'}
     cpu: [x64]
     os: [win32]
 
-  '@esbuild/win32-x64@0.18.20':
-    resolution: {integrity: sha512-kTdfRcSiDfQca/y9QIkng02avJ+NCaQvrMejlsB3RRv5sE9rRoeBPISaZpKxHELzRxZyLvNts1P27W3wV+8geQ==}
-    engines: {node: '>=12'}
+  '@esbuild/win32-x64@0.25.0':
+    resolution: {integrity: sha512-ZENoHJBxA20C2zFzh6AI4fT6RraMzjYw4xKWemRTRmRVtN9c5DcH9r/f2ihEkMjOW5eGgrwCslG/+Y/3bL+DHQ==}
+    engines: {node: '>=18'}
     cpu: [x64]
     os: [win32]
 
@@ -2164,6 +2434,12 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@esbuild/win32-x64@0.28.1':
+    resolution: {integrity: sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
   '@eslint-community/eslint-utils@4.9.0':
     resolution: {integrity: sha512-ayVFHdtZ+hsq1t2Dy24wCmGXGe4q9Gu3smhLYALJrr473ZH27MsnSL+LKUlimp4BWJqMDMLmPpx/Q9R3OAlL4g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -2338,173 +2614,28 @@ packages:
     resolution: {integrity: sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==}
     engines: {node: '>=18.18'}
 
-  '@img/colour@1.1.0':
-    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
-    engines: {node: '>=18'}
-
-  '@img/sharp-darwin-arm64@0.34.5':
-    resolution: {integrity: sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-darwin-x64@0.34.5':
-    resolution: {integrity: sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [darwin]
+  '@ioredis/commands@1.5.0':
+    resolution: {integrity: sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==}
 
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
-    resolution: {integrity: sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==}
-    cpu: [arm64]
-    os: [darwin]
+  '@isaacs/fs-minipass@4.0.1':
+    resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
+    engines: {node: '>=18.0.0'}
 
-  '@img/sharp-libvips-darwin-x64@1.2.4':
-    resolution: {integrity: sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==}
-    cpu: [x64]
-    os: [darwin]
+  '@isaacs/ttlcache@1.4.1':
+    resolution: {integrity: sha512-RQgQ4uQ+pLbqXfOmieB91ejmLwvSgv9nLx6sT6sD83s7umBypgg+OIBOBbEUiJXrfpnp9j0mRhYYdzp9uqq3lA==}
+    engines: {node: '>=12'}
 
-  '@img/sharp-libvips-linux-arm64@1.2.4':
-    resolution: {integrity: sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==}
-    cpu: [arm64]
-    os: [linux]
+  '@istanbuljs/load-nyc-config@1.1.0':
+    resolution: {integrity: sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==}
+    engines: {node: '>=8'}
 
-  '@img/sharp-libvips-linux-arm@1.2.4':
-    resolution: {integrity: sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==}
-    cpu: [arm]
-    os: [linux]
+  '@istanbuljs/schema@0.1.3':
+    resolution: {integrity: sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==}
+    engines: {node: '>=8'}
 
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
-    resolution: {integrity: sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
-    resolution: {integrity: sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-s390x@1.2.4':
-    resolution: {integrity: sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==}
-    cpu: [s390x]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-x64@1.2.4':
-    resolution: {integrity: sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
-    resolution: {integrity: sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
-    resolution: {integrity: sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-linux-arm64@0.34.5':
-    resolution: {integrity: sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-linux-arm@0.34.5':
-    resolution: {integrity: sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm]
-    os: [linux]
-
-  '@img/sharp-linux-ppc64@0.34.5':
-    resolution: {integrity: sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@img/sharp-linux-riscv64@0.34.5':
-    resolution: {integrity: sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@img/sharp-linux-s390x@0.34.5':
-    resolution: {integrity: sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [s390x]
-    os: [linux]
-
-  '@img/sharp-linux-x64@0.34.5':
-    resolution: {integrity: sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-linuxmusl-arm64@0.34.5':
-    resolution: {integrity: sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-linuxmusl-x64@0.34.5':
-    resolution: {integrity: sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-wasm32@0.34.5':
-    resolution: {integrity: sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [wasm32]
-
-  '@img/sharp-win32-arm64@0.34.5':
-    resolution: {integrity: sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [win32]
-
-  '@img/sharp-win32-ia32@0.34.5':
-    resolution: {integrity: sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [ia32]
-    os: [win32]
-
-  '@img/sharp-win32-x64@0.34.5':
-    resolution: {integrity: sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [win32]
-
-  '@ioredis/commands@1.5.0':
-    resolution: {integrity: sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==}
-
-  '@isaacs/balanced-match@4.0.1':
-    resolution: {integrity: sha512-yzMTt9lEb8Gv7zRioUilSglI0c0smZ9k5D65677DLWLtWJaXIS3CqcGyUFByYKlnUj6TkjLVs54fBl6+TiGQDQ==}
-    engines: {node: 20 || >=22}
-
-  '@isaacs/brace-expansion@5.0.0':
-    resolution: {integrity: sha512-ZT55BDLV0yv0RBm2czMiZ+SqCGO7AvmOM3G/w2xhVPH+te0aKgFjmBvGlL1dH+ql2tgGO3MVrbb3jCKyvpgnxA==}
-    engines: {node: 20 || >=22}
-
-  '@isaacs/fs-minipass@4.0.1':
-    resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
-    engines: {node: '>=18.0.0'}
-
-  '@isaacs/ttlcache@1.4.1':
-    resolution: {integrity: sha512-RQgQ4uQ+pLbqXfOmieB91ejmLwvSgv9nLx6sT6sD83s7umBypgg+OIBOBbEUiJXrfpnp9j0mRhYYdzp9uqq3lA==}
-    engines: {node: '>=12'}
-
-  '@istanbuljs/load-nyc-config@1.1.0':
-    resolution: {integrity: sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==}
-    engines: {node: '>=8'}
-
-  '@istanbuljs/schema@0.1.3':
-    resolution: {integrity: sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==}
-    engines: {node: '>=8'}
-
-  '@jest/console@29.7.0':
-    resolution: {integrity: sha512-5Ni4CU7XHQi32IJ398EEP4RrB8eV09sXP2ROqD4bksHrnTree52PsxvX8tpL8LvTZ3pFzXyPbNQReSN41CAhOg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+  '@jest/console@29.7.0':
+    resolution: {integrity: sha512-5Ni4CU7XHQi32IJ398EEP4RrB8eV09sXP2ROqD4bksHrnTree52PsxvX8tpL8LvTZ3pFzXyPbNQReSN41CAhOg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
 
   '@jest/core@29.7.0':
     resolution: {integrity: sha512-n7aeXWKMnGtDA48y8TLWJPJmLmmZ642Ceo78cYWEpiD7FzDgmNDV/GCVRorPABdXLJZ/9wzzgZAlHjXjxDHGsg==}
@@ -2666,57 +2797,6 @@ packages:
   '@napi-rs/wasm-runtime@0.2.12':
     resolution: {integrity: sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==}
 
-  '@next/env@16.0.0':
-    resolution: {integrity: sha512-s5j2iFGp38QsG1LWRQaE2iUY3h1jc014/melHFfLdrsMJPqxqDQwWNwyQTcNoUSGZlCVZuM7t7JDMmSyRilsnA==}
-
-  '@next/swc-darwin-arm64@16.0.0':
-    resolution: {integrity: sha512-/CntqDCnk5w2qIwMiF0a9r6+9qunZzFmU0cBX4T82LOflE72zzH6gnOjCwUXYKOBlQi8OpP/rMj8cBIr18x4TA==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@next/swc-darwin-x64@16.0.0':
-    resolution: {integrity: sha512-hB4GZnJGKa8m4efvTGNyii6qs76vTNl+3dKHTCAUaksN6KjYy4iEO3Q5ira405NW2PKb3EcqWiRaL9DrYJfMHg==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@next/swc-linux-arm64-gnu@16.0.0':
-    resolution: {integrity: sha512-E2IHMdE+C1k+nUgndM13/BY/iJY9KGCphCftMh7SXWcaQqExq/pJU/1Hgn8n/tFwSoLoYC/yUghOv97tAsIxqg==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@next/swc-linux-arm64-musl@16.0.0':
-    resolution: {integrity: sha512-xzgl7c7BVk4+7PDWldU+On2nlwnGgFqJ1siWp3/8S0KBBLCjonB6zwJYPtl4MUY7YZJrzzumdUpUoquu5zk8vg==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@next/swc-linux-x64-gnu@16.0.0':
-    resolution: {integrity: sha512-sdyOg4cbiCw7YUr0F/7ya42oiVBXLD21EYkSwN+PhE4csJH4MSXUsYyslliiiBwkM+KsuQH/y9wuxVz6s7Nstg==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-
-  '@next/swc-linux-x64-musl@16.0.0':
-    resolution: {integrity: sha512-IAXv3OBYqVaNOgyd3kxR4L3msuhmSy1bcchPHxDOjypG33i2yDWvGBwFD94OuuTjjTt/7cuIKtAmoOOml6kfbg==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-
-  '@next/swc-win32-arm64-msvc@16.0.0':
-    resolution: {integrity: sha512-bmo3ncIJKUS9PWK1JD9pEVv0yuvp1KPuOsyJTHXTv8KDrEmgV/K+U0C75rl9rhIaODcS7JEb6/7eJhdwXI0XmA==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@next/swc-win32-x64-msvc@16.0.0':
-    resolution: {integrity: sha512-O1cJbT+lZp+cTjYyZGiDwsOjO3UHHzSqobkPNipdlnnuPb1swfcuY6r3p8dsKU4hAIEO4cO67ZCfVVH/M1ETXA==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [win32]
-
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
     resolution: {integrity: sha512-s88O1aVtXftvp5bCPB7WnmXc5IwOZZ7YPuwNPt+GtOOXpPvad1LfbmjYv+qII7zP6RU2QGnqve27dnLycEnyEQ==}
 
@@ -2744,37 +2824,18 @@ packages:
     resolution: {integrity: sha512-nn5ozdjYQpUCZlWGuxcJY/KpxkWQs4DcbMCmKojjyrYDEAGy4Ce19NN4v5MduafTwJlbKc99UA8YhSVqq9yPZA==}
     engines: {node: '>=12.4.0'}
 
-  '@oozcitak/dom@2.0.2':
-    resolution: {integrity: sha512-GjpKhkSYC3Mj4+lfwEyI1dqnsKTgwGy48ytZEhm4A/xnH/8z9M3ZVXKr/YGQi3uCLs1AEBS+x5T2JPiueEDW8w==}
-    engines: {node: '>=20.0'}
-
-  '@oozcitak/infra@2.0.2':
-    resolution: {integrity: sha512-2g+E7hoE2dgCz/APPOEK5s3rMhJvNxSMBrP+U+j1OWsIbtSpWxxlUjq1lU8RIsFJNYv7NMlnVsCuHcUzJW+8vA==}
-    engines: {node: '>=20.0'}
-
-  '@oozcitak/url@3.0.0':
-    resolution: {integrity: sha512-ZKfET8Ak1wsLAiLWNfFkZc/BraDccuTJKR6svTYc7sVjbR+Iu0vtXdiDMY4o6jaFl5TW2TlS7jbLl4VovtAJWQ==}
-    engines: {node: '>=20.0'}
-
-  '@oozcitak/util@10.0.0':
-    resolution: {integrity: sha512-hAX0pT/73190NLqBPPWSdBVGtbY6VOhWYK3qqHqtXQ1gK7kS2yz4+ivsN07hpJ6I3aeMtKP6J6npsEKOAzuTLA==}
-    engines: {node: '>=20.0'}
-
   '@opentelemetry/api@1.9.0':
     resolution: {integrity: sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==}
     engines: {node: '>=8.0.0'}
 
+  '@opentelemetry/semantic-conventions@1.43.0':
+    resolution: {integrity: sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==}
+    engines: {node: '>=14'}
+
   '@pkgr/core@0.2.9':
     resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
 
-  '@planetscale/database@1.19.0':
-    resolution: {integrity: sha512-Tv4jcFUFAFjOWrGSio49H6R2ijALv0ZzVBfJKIdm+kl9X046Fh4LLawrF9OMsglVbK6ukqMJsUCeucGAFTBcMA==}
-    engines: {node: '>=16'}
-
-  '@polka/url@1.0.0-next.29':
-    resolution: {integrity: sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==}
-
   '@radix-ui/primitive@1.1.3':
     resolution: {integrity: sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg==}
 
@@ -3020,13 +3081,13 @@ packages:
     resolution: {integrity: sha512-UoI/x/5tCmi+pZ3c1+Ypr1DaRMDLI3y+Q70pVLLVgrnC3DHsHRIbHcCHIeG/IJvoeFqFM2sTdhSOLJrf8lOPrA==}
     engines: {node: '>= 20.19.4'}
     peerDependencies:
-      '@babel/core': '*'
+      '@babel/core': 7.29.6
 
   '@react-native/codegen@0.81.5':
     resolution: {integrity: sha512-a2TDA03Up8lpSa9sh5VRGCQDXgCTOyDOFH+aqyinxp1HChG8uk89/G+nkJ9FPd0rqgi25eCTR16TWdS3b+fA6g==}
     engines: {node: '>= 20.19.4'}
     peerDependencies:
-      '@babel/core': '*'
+      '@babel/core': 7.29.6
 
   '@react-native/community-cli-plugin@0.81.5':
     resolution: {integrity: sha512-yWRlmEOtcyvSZ4+OvqPabt+NS36vg0K/WADTQLhrYrm9qdZSuXmq8PmdJWz/68wAqKQ+4KTILiq2kjRQwnyhQw==}
@@ -3117,119 +3178,131 @@ packages:
   '@react-navigation/routers@7.5.3':
     resolution: {integrity: sha512-1tJHg4KKRJuQ1/EvJxatrMef3NZXEPzwUIUZ3n1yJ2t7Q97siwRtbynRpQG9/69ebbtiZ8W3ScOZF/OmhvM4Rg==}
 
-  '@rolldown/pluginutils@1.0.0-beta.40':
-    resolution: {integrity: sha512-s3GeJKSQOwBlzdUrj4ISjJj5SfSh+aqn0wjOar4Bx95iV1ETI7F6S/5hLcfAxZ9kXDcyrAkxPlqmd1ZITttf+w==}
-
   '@rolldown/pluginutils@1.0.0-rc.3':
     resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
 
-  '@rollup/rollup-android-arm-eabi@4.54.0':
-    resolution: {integrity: sha512-OywsdRHrFvCdvsewAInDKCNyR3laPA2mc9bRYJ6LBp5IyvF3fvXbbNR0bSzHlZVFtn6E0xw2oZlyjg4rKCVcng==}
+  '@rollup/rollup-android-arm-eabi@4.59.0':
+    resolution: {integrity: sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==}
     cpu: [arm]
     os: [android]
 
-  '@rollup/rollup-android-arm64@4.54.0':
-    resolution: {integrity: sha512-Skx39Uv+u7H224Af+bDgNinitlmHyQX1K/atIA32JP3JQw6hVODX5tkbi2zof/E69M1qH2UoN3Xdxgs90mmNYw==}
+  '@rollup/rollup-android-arm64@4.59.0':
+    resolution: {integrity: sha512-hZ+Zxj3SySm4A/DylsDKZAeVg0mvi++0PYVceVyX7hemkw7OreKdCvW2oQ3T1FMZvCaQXqOTHb8qmBShoqk69Q==}
     cpu: [arm64]
     os: [android]
 
-  '@rollup/rollup-darwin-arm64@4.54.0':
-    resolution: {integrity: sha512-k43D4qta/+6Fq+nCDhhv9yP2HdeKeP56QrUUTW7E6PhZP1US6NDqpJj4MY0jBHlJivVJD5P8NxrjuobZBJTCRw==}
+  '@rollup/rollup-darwin-arm64@4.59.0':
+    resolution: {integrity: sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==}
     cpu: [arm64]
     os: [darwin]
 
-  '@rollup/rollup-darwin-x64@4.54.0':
-    resolution: {integrity: sha512-cOo7biqwkpawslEfox5Vs8/qj83M/aZCSSNIWpVzfU2CYHa2G3P1UN5WF01RdTHSgCkri7XOlTdtk17BezlV3A==}
+  '@rollup/rollup-darwin-x64@4.59.0':
+    resolution: {integrity: sha512-ZW2KkwlS4lwTv7ZVsYDiARfFCnSGhzYPdiOU4IM2fDbL+QGlyAbjgSFuqNRbSthybLbIJ915UtZBtmuLrQAT/w==}
     cpu: [x64]
     os: [darwin]
 
-  '@rollup/rollup-freebsd-arm64@4.54.0':
-    resolution: {integrity: sha512-miSvuFkmvFbgJ1BevMa4CPCFt5MPGw094knM64W9I0giUIMMmRYcGW/JWZDriaw/k1kOBtsWh1z6nIFV1vPNtA==}
+  '@rollup/rollup-freebsd-arm64@4.59.0':
+    resolution: {integrity: sha512-EsKaJ5ytAu9jI3lonzn3BgG8iRBjV4LxZexygcQbpiU0wU0ATxhNVEpXKfUa0pS05gTcSDMKpn3Sx+QB9RlTTA==}
     cpu: [arm64]
     os: [freebsd]
 
-  '@rollup/rollup-freebsd-x64@4.54.0':
-    resolution: {integrity: sha512-KGXIs55+b/ZfZsq9aR026tmr/+7tq6VG6MsnrvF4H8VhwflTIuYh+LFUlIsRdQSgrgmtM3fVATzEAj4hBQlaqQ==}
+  '@rollup/rollup-freebsd-x64@4.59.0':
+    resolution: {integrity: sha512-d3DuZi2KzTMjImrxoHIAODUZYoUUMsuUiY4SRRcJy6NJoZ6iIqWnJu9IScV9jXysyGMVuW+KNzZvBLOcpdl3Vg==}
     cpu: [x64]
     os: [freebsd]
 
-  '@rollup/rollup-linux-arm-gnueabihf@4.54.0':
-    resolution: {integrity: sha512-EHMUcDwhtdRGlXZsGSIuXSYwD5kOT9NVnx9sqzYiwAc91wfYOE1g1djOEDseZJKKqtHAHGwnGPQu3kytmfaXLQ==}
+  '@rollup/rollup-linux-arm-gnueabihf@4.59.0':
+    resolution: {integrity: sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==}
     cpu: [arm]
     os: [linux]
 
-  '@rollup/rollup-linux-arm-musleabihf@4.54.0':
-    resolution: {integrity: sha512-+pBrqEjaakN2ySv5RVrj/qLytYhPKEUwk+e3SFU5jTLHIcAtqh2rLrd/OkbNuHJpsBgxsD8ccJt5ga/SeG0JmA==}
+  '@rollup/rollup-linux-arm-musleabihf@4.59.0':
+    resolution: {integrity: sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==}
     cpu: [arm]
     os: [linux]
 
-  '@rollup/rollup-linux-arm64-gnu@4.54.0':
-    resolution: {integrity: sha512-NSqc7rE9wuUaRBsBp5ckQ5CVz5aIRKCwsoa6WMF7G01sX3/qHUw/z4pv+D+ahL1EIKy6Enpcnz1RY8pf7bjwng==}
+  '@rollup/rollup-linux-arm64-gnu@4.59.0':
+    resolution: {integrity: sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==}
     cpu: [arm64]
     os: [linux]
 
-  '@rollup/rollup-linux-arm64-musl@4.54.0':
-    resolution: {integrity: sha512-gr5vDbg3Bakga5kbdpqx81m2n9IX8M6gIMlQQIXiLTNeQW6CucvuInJ91EuCJ/JYvc+rcLLsDFcfAD1K7fMofg==}
+  '@rollup/rollup-linux-arm64-musl@4.59.0':
+    resolution: {integrity: sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==}
     cpu: [arm64]
     os: [linux]
 
-  '@rollup/rollup-linux-loong64-gnu@4.54.0':
-    resolution: {integrity: sha512-gsrtB1NA3ZYj2vq0Rzkylo9ylCtW/PhpLEivlgWe0bpgtX5+9j9EZa0wtZiCjgu6zmSeZWyI/e2YRX1URozpIw==}
+  '@rollup/rollup-linux-loong64-gnu@4.59.0':
+    resolution: {integrity: sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==}
+    cpu: [loong64]
+    os: [linux]
+
+  '@rollup/rollup-linux-loong64-musl@4.59.0':
+    resolution: {integrity: sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==}
     cpu: [loong64]
     os: [linux]
 
-  '@rollup/rollup-linux-ppc64-gnu@4.54.0':
-    resolution: {integrity: sha512-y3qNOfTBStmFNq+t4s7Tmc9hW2ENtPg8FeUD/VShI7rKxNW7O4fFeaYbMsd3tpFlIg1Q8IapFgy7Q9i2BqeBvA==}
+  '@rollup/rollup-linux-ppc64-gnu@4.59.0':
+    resolution: {integrity: sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@rollup/rollup-linux-ppc64-musl@4.59.0':
+    resolution: {integrity: sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==}
     cpu: [ppc64]
     os: [linux]
 
-  '@rollup/rollup-linux-riscv64-gnu@4.54.0':
-    resolution: {integrity: sha512-89sepv7h2lIVPsFma8iwmccN7Yjjtgz0Rj/Ou6fEqg3HDhpCa+Et+YSufy27i6b0Wav69Qv4WBNl3Rs6pwhebQ==}
+  '@rollup/rollup-linux-riscv64-gnu@4.59.0':
+    resolution: {integrity: sha512-NDYMpsXYJJaj+I7UdwIuHHNxXZ/b/N2hR15NyH3m2qAtb/hHPA4g4SuuvrdxetTdndfj9b1WOmy73kcPRoERUg==}
     cpu: [riscv64]
     os: [linux]
 
-  '@rollup/rollup-linux-riscv64-musl@4.54.0':
-    resolution: {integrity: sha512-ZcU77ieh0M2Q8Ur7D5X7KvK+UxbXeDHwiOt/CPSBTI1fBmeDMivW0dPkdqkT4rOgDjrDDBUed9x4EgraIKoR2A==}
+  '@rollup/rollup-linux-riscv64-musl@4.59.0':
+    resolution: {integrity: sha512-nLckB8WOqHIf1bhymk+oHxvM9D3tyPndZH8i8+35p/1YiVoVswPid2yLzgX7ZJP0KQvnkhM4H6QZ5m0LzbyIAg==}
     cpu: [riscv64]
     os: [linux]
 
-  '@rollup/rollup-linux-s390x-gnu@4.54.0':
-    resolution: {integrity: sha512-2AdWy5RdDF5+4YfG/YesGDDtbyJlC9LHmL6rZw6FurBJ5n4vFGupsOBGfwMRjBYH7qRQowT8D/U4LoSvVwOhSQ==}
+  '@rollup/rollup-linux-s390x-gnu@4.59.0':
+    resolution: {integrity: sha512-oF87Ie3uAIvORFBpwnCvUzdeYUqi2wY6jRFWJAy1qus/udHFYIkplYRW+wo+GRUP4sKzYdmE1Y3+rY5Gc4ZO+w==}
     cpu: [s390x]
     os: [linux]
 
-  '@rollup/rollup-linux-x64-gnu@4.54.0':
-    resolution: {integrity: sha512-WGt5J8Ij/rvyqpFexxk3ffKqqbLf9AqrTBbWDk7ApGUzaIs6V+s2s84kAxklFwmMF/vBNGrVdYgbblCOFFezMQ==}
+  '@rollup/rollup-linux-x64-gnu@4.59.0':
+    resolution: {integrity: sha512-3AHmtQq/ppNuUspKAlvA8HtLybkDflkMuLK4DPo77DfthRb71V84/c4MlWJXixZz4uruIH4uaa07IqoAkG64fg==}
     cpu: [x64]
     os: [linux]
 
-  '@rollup/rollup-linux-x64-musl@4.54.0':
-    resolution: {integrity: sha512-JzQmb38ATzHjxlPHuTH6tE7ojnMKM2kYNzt44LO/jJi8BpceEC8QuXYA908n8r3CNuG/B3BV8VR3Hi1rYtmPiw==}
+  '@rollup/rollup-linux-x64-musl@4.59.0':
+    resolution: {integrity: sha512-2UdiwS/9cTAx7qIUZB/fWtToJwvt0Vbo0zmnYt7ED35KPg13Q0ym1g442THLC7VyI6JfYTP4PiSOWyoMdV2/xg==}
     cpu: [x64]
     os: [linux]
 
-  '@rollup/rollup-openharmony-arm64@4.54.0':
-    resolution: {integrity: sha512-huT3fd0iC7jigGh7n3q/+lfPcXxBi+om/Rs3yiFxjvSxbSB6aohDFXbWvlspaqjeOh+hx7DDHS+5Es5qRkWkZg==}
+  '@rollup/rollup-openbsd-x64@4.59.0':
+    resolution: {integrity: sha512-M3bLRAVk6GOwFlPTIxVBSYKUaqfLrn8l0psKinkCFxl4lQvOSz8ZrKDz2gxcBwHFpci0B6rttydI4IpS4IS/jQ==}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@rollup/rollup-openharmony-arm64@4.59.0':
+    resolution: {integrity: sha512-tt9KBJqaqp5i5HUZzoafHZX8b5Q2Fe7UjYERADll83O4fGqJ49O1FsL6LpdzVFQcpwvnyd0i+K/VSwu/o/nWlA==}
     cpu: [arm64]
     os: [openharmony]
 
-  '@rollup/rollup-win32-arm64-msvc@4.54.0':
-    resolution: {integrity: sha512-c2V0W1bsKIKfbLMBu/WGBz6Yci8nJ/ZJdheE0EwB73N3MvHYKiKGs3mVilX4Gs70eGeDaMqEob25Tw2Gb9Nqyw==}
+  '@rollup/rollup-win32-arm64-msvc@4.59.0':
+    resolution: {integrity: sha512-V5B6mG7OrGTwnxaNUzZTDTjDS7F75PO1ae6MJYdiMu60sq0CqN5CVeVsbhPxalupvTX8gXVSU9gq+Rx1/hvu6A==}
     cpu: [arm64]
     os: [win32]
 
-  '@rollup/rollup-win32-ia32-msvc@4.54.0':
-    resolution: {integrity: sha512-woEHgqQqDCkAzrDhvDipnSirm5vxUXtSKDYTVpZG3nUdW/VVB5VdCYA2iReSj/u3yCZzXID4kuKG7OynPnB3WQ==}
+  '@rollup/rollup-win32-ia32-msvc@4.59.0':
+    resolution: {integrity: sha512-UKFMHPuM9R0iBegwzKF4y0C4J9u8C6MEJgFuXTBerMk7EJ92GFVFYBfOZaSGLu6COf7FxpQNqhNS4c4icUPqxA==}
     cpu: [ia32]
     os: [win32]
 
-  '@rollup/rollup-win32-x64-gnu@4.54.0':
-    resolution: {integrity: sha512-dzAc53LOuFvHwbCEOS0rPbXp6SIhAf2txMP5p6mGyOXXw5mWY8NGGbPMPrs4P1WItkfApDathBj/NzMLUZ9rtQ==}
+  '@rollup/rollup-win32-x64-gnu@4.59.0':
+    resolution: {integrity: sha512-laBkYlSS1n2L8fSo1thDNGrCTQMmxjYY5G0WFWjFFYZkKPjsMBsgJfGf4TLxXrF6RyhI60L8TMOjBMvXiTcxeA==}
     cpu: [x64]
     os: [win32]
 
-  '@rollup/rollup-win32-x64-msvc@4.54.0':
-    resolution: {integrity: sha512-hYT5d3YNdSh3mbCU1gwQyPgQd3T2ne0A3KG8KSBdav5TiBg6eInVmV+TeR5uHufiIgSFg0XsOWGW5/RhNcSvPg==}
+  '@rollup/rollup-win32-x64-msvc@4.59.0':
+    resolution: {integrity: sha512-2HRCml6OztYXyJXAvdDXPKcawukWY2GpR5/nxKp4iBgiO3wcoEGkAaqctIbZcNB6KlUQBIqt8VYkNSj2397EfA==}
     cpu: [x64]
     os: [win32]
 
@@ -3254,15 +3327,12 @@ packages:
     peerDependencies:
       react: 19.1.0
       react-native: '>=0.72'
-      vite: '>=6'
+      vite: 7.3.5
       vitest: '>=4'
 
   '@standard-schema/spec@1.1.0':
     resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
 
-  '@swc/helpers@0.5.15':
-    resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
-
   '@tailwindcss/node@4.3.0':
     resolution: {integrity: sha512-aFb4gUhFOgdh9AXo4IzBEOzBkkAxm9VigwDJnMIYv3lcfXCJVesNfbEaBl4BNgVRyid92AmdviqwBUBRKSeY3g==}
 
@@ -3351,118 +3421,7 @@ packages:
   '@tailwindcss/vite@4.3.0':
     resolution: {integrity: sha512-t6J3OrB5Fc0ExuhohouH0fWUGMYL6PTLhW+E7zIk/pdbnJARZDCwjBznFnkh5ynRnIRSI4YjtTH0t6USjJISrw==}
     peerDependencies:
-      vite: ^5.2.0 || ^6 || ^7 || ^8
-
-  '@tanstack/directive-functions-plugin@1.142.1':
-    resolution: {integrity: sha512-k4HhAaitobp+z2pXBkmoWgE8Ollhx7fQXpVL+PQ7HeHZc2PilrQtC3ysxvoPunufrztIxweSE9HAWkZ2AFNaLw==}
-    engines: {node: '>=12'}
-    peerDependencies:
-      vite: '>=6.0.0 || >=7.0.0'
-
-  '@tanstack/history@1.141.0':
-    resolution: {integrity: sha512-LS54XNyxyTs5m/pl1lkwlg7uZM3lvsv2FIIV1rsJgnfwVCnI+n4ZGZ2CcjNT13BPu/3hPP+iHmliBSscJxW5FQ==}
-    engines: {node: '>=12'}
-
-  '@tanstack/react-router@1.142.8':
-    resolution: {integrity: sha512-ZwCLlgiOxjkxL84En4pAARL/SXGfVIvdIAxL3jVm6UanmNPw+Wiy7ka7Wnv6xb58FhuFb5yITj69C/a73tfjVw==}
-    engines: {node: '>=12'}
-    peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
-
-  '@tanstack/react-start-client@1.142.8':
-    resolution: {integrity: sha512-qIvstfSih7IkM1Ot6zmg4Rzu0KslvsknNLMx23nTM8DzuDtjrjMt37/pP41gCiAf1bLEIwQSqznQ/wxFgbRN7A==}
-    engines: {node: '>=22.12.0'}
-    peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
-
-  '@tanstack/react-start-server@1.142.8':
-    resolution: {integrity: sha512-kxYphTVvNYqAVrs5R0Fe8QfJYwZuj9VdTJA+sQjXPut+VIPIujWQXF5pLsCQflB0bFWkKqZnXfcVR5/JkoGioQ==}
-    engines: {node: '>=22.12.0'}
-    peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
-
-  '@tanstack/react-start@1.142.8':
-    resolution: {integrity: sha512-uRwGoDFmKk2qUdYsr/kyqk53WvRmUTMXWOjWkYsbPbmuPKZx8MGzH2hl2Pdx8rVyUxA7P553ms/BLXppD4f+9g==}
-    engines: {node: '>=22.12.0'}
-    peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
-      vite: '>=7.0.0'
-
-  '@tanstack/react-store@0.8.1':
-    resolution: {integrity: sha512-XItJt+rG8c5Wn/2L/bnxys85rBpm0BfMbhb4zmPVLXAKY9POrp1xd6IbU4PKoOI+jSEGc3vntPRfLGSgXfE2Ig==}
-    peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
-
-  '@tanstack/router-core@1.142.8':
-    resolution: {integrity: sha512-eP36Kq3g7TRG+9yzgEtE5DNBXsnAwPkZWUmEjg5lqSOLZlZdhfxDngdXJqY98vEuogd2wkXmGlatxdatoYTjJA==}
-    engines: {node: '>=12'}
-
-  '@tanstack/router-generator@1.142.8':
-    resolution: {integrity: sha512-E23Gt4d7WREWaPD5cwcL8dEHQP+mRSTogVqeaMV/IJxUuNXB07QrfOXgqPLhIK8rBMGQO8oLww/0t52eLKnttA==}
-    engines: {node: '>=12'}
-
-  '@tanstack/router-plugin@1.142.8':
-    resolution: {integrity: sha512-nEhbHcTohNr5m1+OvbEJ09VFa98OTgFnVoloOb5sKjBcnM9ToKYHbmLXPMwPO/wqn5ZKBS5JzSVFswg2V4fgKQ==}
-    engines: {node: '>=12'}
-    peerDependencies:
-      '@rsbuild/core': '>=1.0.2'
-      '@tanstack/react-router': ^1.142.8
-      vite: '>=5.0.0 || >=6.0.0 || >=7.0.0'
-      vite-plugin-solid: ^2.11.10
-      webpack: '>=5.92.0'
-    peerDependenciesMeta:
-      '@rsbuild/core':
-        optional: true
-      '@tanstack/react-router':
-        optional: true
-      vite:
-        optional: true
-      vite-plugin-solid:
-        optional: true
-      webpack:
-        optional: true
-
-  '@tanstack/router-utils@1.141.0':
-    resolution: {integrity: sha512-/eFGKCiix1SvjxwgzrmH4pHjMiMxc+GA4nIbgEkG2RdAJqyxLcRhd7RPLG0/LZaJ7d0ad3jrtRqsHLv2152Vbw==}
-    engines: {node: '>=12'}
-
-  '@tanstack/router-utils@1.161.4':
-    resolution: {integrity: sha512-r8TpjyIZoqrXXaf2DDyjd44gjGBoyE+/oEaaH68yLI9ySPO1gUWmQENZ1MZnmBnpUGN24NOZxdjDLc8npK0SAw==}
-    engines: {node: '>=20.19'}
-
-  '@tanstack/server-functions-plugin@1.142.1':
-    resolution: {integrity: sha512-ltTOj6dIDlRV3M8+PzontDYFMnIQ+icUnD+OKzIRfKo6bbvC0qvy8ttuWmVJxmqHy9xsWgkNt4gZrKVjtWXIhQ==}
-    engines: {node: '>=12'}
-
-  '@tanstack/start-client-core@1.142.8':
-    resolution: {integrity: sha512-U30jiKdkL+PFdysu0fCCwDH1eL1YrTIg24qbqEJOk4LMTkcv0L05KCGfxCX5khT6E90cGQsIiYdIeugIxHgklQ==}
-    engines: {node: '>=22.12.0'}
-
-  '@tanstack/start-plugin-core@1.142.8':
-    resolution: {integrity: sha512-R4YV1uTSQUakhd4jROL56Ri5gBOR2c4ilCwdT+jB0yKs7IA8QynBmmyfvDfZ4U7faZimwBCgOcQdgGljp3Ab3Q==}
-    engines: {node: '>=22.12.0'}
-    peerDependencies:
-      vite: '>=7.0.0'
-
-  '@tanstack/start-server-core@1.142.8':
-    resolution: {integrity: sha512-MUoAjgNOf0vi8i1jeCN63BWZiu6vRYNIghzBu1zAYLhQjMRd9GTUI9z43bVybTst0/tJVB8gezsr2jvhtDodQw==}
-    engines: {node: '>=22.12.0'}
-
-  '@tanstack/start-storage-context@1.142.8':
-    resolution: {integrity: sha512-tB8oZLvTn3Ry3BM2d3jk+lOaI9ZYFR7N8EmjL6urmIWqgMqzuhgFuz+xqq2XveoPBdaSLeY5N6RsONH4tV4+dA==}
-    engines: {node: '>=22.12.0'}
-
-  '@tanstack/store@0.8.1':
-    resolution: {integrity: sha512-PtOisLjUZPz5VyPRSCGjNOlwTvabdTBQ2K80DpVL1chGVr35WRxfeavAPdNq6pm/t7F8GhoR2qtmkkqtCEtHYw==}
-
-  '@tanstack/virtual-file-routes@1.141.0':
-    resolution: {integrity: sha512-CJrWtr6L9TVzEImm9S7dQINx+xJcYP/aDkIi6gnaWtIgbZs1pnzsE0yJc2noqXZ+yAOqLx3TBGpBEs9tS0P9/A==}
-    engines: {node: '>=12'}
+      vite: 7.3.5
 
   '@testing-library/react-native@13.3.3':
     resolution: {integrity: sha512-k6Mjsd9dbZgvY4Bl7P1NIpePQNi+dfYtlJ5voi9KQlynxSyQkfOgJmYGCYmw/aSgH/rUcFvG8u5gd4npzgRDyg==}
@@ -3476,8 +3435,8 @@ packages:
       jest:
         optional: true
 
-  '@tootallnate/once@2.0.0':
-    resolution: {integrity: sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A==}
+  '@tootallnate/once@2.0.1':
+    resolution: {integrity: sha512-HqmEUIGRJ5fSXchkVgR5F7qn48bDBzv0kWj/Kfu5e6uci4UlEeng4331LnBkWffb++Ei3FOVLxo8JJWMFBDMeQ==}
     engines: {node: '>= 10'}
 
   '@ts-morph/common@0.26.1':
@@ -3486,6 +3445,36 @@ packages:
   '@tsconfig/node18@18.2.6':
     resolution: {integrity: sha512-eAWQzAjPj18tKnDzmWstz4OyWewLUNBm9tdoN9LayzoboRktYx3Enk1ZXPmThj55L7c4VWYq/Bzq0A51znZfhw==}
 
+  '@turbo/darwin-64@2.10.4':
+    resolution: {integrity: sha512-m1MUEI4MJ69r5CwfMYxmHi0H0rrgiYCBOp0tgBZ9x/YVvOb5uu/lRIDyDwdtH054R2yWeQaIigUGu6aCX9f8cA==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@turbo/darwin-arm64@2.10.4':
+    resolution: {integrity: sha512-VQ1Yxs5zkPT+2z7t1P4mvn6JmcKLkOCAsPuK9XbOvuVj0DlTlETfIXNisX0771v/vTWHOQqiwoGi+TtAUq8efw==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@turbo/linux-64@2.10.4':
+    resolution: {integrity: sha512-IzV1QovmwX7mfGnVinmE++2IB8tbeo38weltiuH5zNqwCTBjLs/DytyRKx+bmnhHdXIq9SheR8p0Nip/LBUPHg==}
+    cpu: [x64]
+    os: [linux]
+
+  '@turbo/linux-arm64@2.10.4':
+    resolution: {integrity: sha512-rfujSQkP5aYiRn0PgTM7F00WkJCP/bKDVZbOx3WmrZwa/vHA0bplhCl328kpX7VI9HH2vI90ISGwuSVgJgoqTw==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@turbo/windows-64@2.10.4':
+    resolution: {integrity: sha512-NnspP7Wd5fa3Wwnqv9bKfhegqZzuHBgbPxdZU/idTLQcazx/vgKu95JlCx2YHY0hdvKCnPcARrDwM+KEUmaO7A==}
+    cpu: [x64]
+    os: [win32]
+
+  '@turbo/windows-arm64@2.10.4':
+    resolution: {integrity: sha512-Iv02YgOpaEShc2OkG7mgCJ2pEw1RUKiKbs0h8W5wAf4jZ5vpmraTEjuGTgHRuOORQnC1GN3KHo5WB+hu1abRMA==}
+    cpu: [arm64]
+    os: [win32]
+
   '@tybys/wasm-util@0.10.1':
     resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==}
 
@@ -3778,19 +3767,19 @@ packages:
     resolution: {integrity: sha512-YmKkfhOAi3wsB1PhJq5Scj3GXMn3WvtQ/JC0xoopuHoXSdmtdStOpFrYaT1kie2YgFBcIe64ROzMYRjCrYOdYw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     peerDependencies:
-      vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
+      vite: 7.3.5
 
-  '@vitest/expect@3.2.4':
-    resolution: {integrity: sha512-Io0yyORnB6sikFlt8QW5K7slY4OjqNX9jmJQ02QDda8lyM6B5oNgVWoSoKPac8/kgnCUzuHQKrSLtu/uOqqrig==}
+  '@vitest/expect@3.2.7':
+    resolution: {integrity: sha512-E8eBXaKibuvH2pSZErOjdVb5vF4PbKYcrnluBTYxEk1l/VhhwZg1kZQsdtjq+CsF5CFydf2Rdkz7jDHKSisi3w==}
 
   '@vitest/expect@4.1.6':
     resolution: {integrity: sha512-7EHDquPthALSV0jhhjgEW8FXaviMx7rSqu8W6oqCoAuOhKov814P99QDV1pxMA3QPv21YudvJngIhjrNI4opLg==}
 
-  '@vitest/mocker@3.2.4':
-    resolution: {integrity: sha512-46ryTE9RZO/rfDd7pEqFl7etuyzekzEhUbTW3BvmeO/BcCMEgq59BKhek3dXDWgAj4oMK6OZi+vRr1wPW6qjEQ==}
+  '@vitest/mocker@3.2.7':
+    resolution: {integrity: sha512-Trr0hYO9CM3Wj6ksWHRhK9IZpIY6wTMO5u/MqXurMxT57sWBaOPEtP3Oq60ihZuh5JsiagKfz95OcxdEP6dBrA==}
     peerDependencies:
       msw: ^2.4.9
-      vite: ^5.0.0 || ^6.0.0 || ^7.0.0-0
+      vite: 7.3.5
     peerDependenciesMeta:
       msw:
         optional: true
@@ -3801,52 +3790,46 @@ packages:
     resolution: {integrity: sha512-MCFc63czMjEInOlcY2cpQCvCN+KgbAn+60xu9cMgP4sKaLC5JNAKw7JH8QdAnoAC88hW1IiSNZ+GgVXlN1UcMQ==}
     peerDependencies:
       msw: ^2.4.9
-      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
+      vite: 7.3.5
     peerDependenciesMeta:
       msw:
         optional: true
       vite:
         optional: true
 
-  '@vitest/pretty-format@3.2.4':
-    resolution: {integrity: sha512-IVNZik8IVRJRTr9fxlitMKeJeXFFFN0JaB9PHPGQ8NKQbGpfjlTx9zO4RefN8gp7eqjNy8nyK3NZmBzOPeIxtA==}
+  '@vitest/pretty-format@3.2.7':
+    resolution: {integrity: sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==}
 
   '@vitest/pretty-format@4.1.6':
     resolution: {integrity: sha512-h5SxD/IzNhZYnrSZRsUZQIC+vD0GY8cUvq0iwsmkFKixRCKLLWqCXa/FIQ4S1R+sI+PGoojkHsdNrbZiM9Qpgw==}
 
-  '@vitest/runner@3.2.4':
-    resolution: {integrity: sha512-oukfKT9Mk41LreEW09vt45f8wx7DordoWUZMYdY/cyAk7w5TWkTRCNZYF7sX7n2wB7jyGAl74OxgwhPgKaqDMQ==}
+  '@vitest/runner@3.2.7':
+    resolution: {integrity: sha512-sB9y4ovltoQP+WaUPwmSxO9WIg9Ig694Di5PalVPsYHklAdE027mehpWF2SQSVq+k6sFgaivbTjTJwZLSHbedA==}
 
   '@vitest/runner@4.1.6':
     resolution: {integrity: sha512-nOPCmn2+yD0ZNmKdsXGv/UxMMWbMuKeD6GyYncNwdkYDxpQvrPSKYj2rWuDjC2Y4b6w6hjip5dBKFzEUuZe3vA==}
 
-  '@vitest/snapshot@3.2.4':
-    resolution: {integrity: sha512-dEYtS7qQP2CjU27QBC5oUOxLE/v5eLkGqPE0ZKEIDGMs4vKWe7IjgLOeauHsR0D5YuuycGRO5oSRXnwnmA78fQ==}
+  '@vitest/snapshot@3.2.7':
+    resolution: {integrity: sha512-7C+MwShwtBSI5Buwoyg3s/iY1eHL9PKAf+O1wVh/TdnjXUtkoL/9YQtre90i4MtNXM6edP1wJ2zOBpfCyhIS7g==}
 
   '@vitest/snapshot@4.1.6':
     resolution: {integrity: sha512-YhsdE6xAVfTDmzjxL2ZDUvjj+ZsgyOKe+TdQzqkD72wIOmHka8NuGQ6NpTNZv9D2Z63fbwWKJPeVpEw4EQgYxw==}
 
-  '@vitest/spy@3.2.4':
-    resolution: {integrity: sha512-vAfasCOe6AIK70iP5UD11Ac4siNUNJ9i/9PZ3NKx07sG6sUxeag1LWdNrMWeKKYBLlzuK+Gn65Yd5nyL6ds+nw==}
+  '@vitest/spy@3.2.7':
+    resolution: {integrity: sha512-Q2eQGI6d2L/hBtZ0qNuKcAGid68XK6cv1xsoaIma6PaJhHPoqcEJhYpXZ/5myCMqkNgtP6UKuBhbc0nHKnrkuQ==}
 
   '@vitest/spy@4.1.6':
     resolution: {integrity: sha512-JFKxMx6udhwKh/Ldo270e17QX710vgunMkuPAvXjHSvC6oqLWAHhVhjg/I71q0u0CBSErIODV1Kjv0FQNSWjdg==}
 
-  '@vitest/ui@3.2.4':
-    resolution: {integrity: sha512-hGISOaP18plkzbWEcP/QvtRW1xDXF2+96HbEX6byqQhAUbiS5oH6/9JwW+QsQCIYON2bI6QZBF+2PvOmrRZ9wA==}
-    peerDependencies:
-      vitest: 3.2.4
-
-  '@vitest/utils@3.2.4':
-    resolution: {integrity: sha512-fB2V0JFrQSMsCo9HiSq3Ezpdv4iYaXRG1Sx8edX3MwxfyNn83mKiGzOcH+Fkxt4MHxr3y42fQi1oeAInqgX2QA==}
+  '@vitest/utils@3.2.7':
+    resolution: {integrity: sha512-x6BDOd7dyo3PFLY3I9/HJ25X/6OurhGXk2/B9gOZNPF7XDVjeBK4k01lQE5uvDpbuheErh91qYuE1E2OEjK3Rw==}
 
   '@vitest/utils@4.1.6':
     resolution: {integrity: sha512-FxIY+U81R3LGKCxaHHFRQ5+g6/iRgGLmeHWdp2Amj4ljQRrEIWHmZyDfDYBRZlpyqA7qKxtS9DD1dhk8RnRIVQ==}
 
-  '@xmldom/xmldom@0.8.11':
-    resolution: {integrity: sha512-cQzWCtO6C8TQiYl1ruKNn2U6Ao4o4WBBcbL61yJl84x+j5sOWWFU9X7DpND8XZG3daDppSsigMdfAIl2upQBRw==}
+  '@xmldom/xmldom@0.8.13':
+    resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
     engines: {node: '>=10.0.0'}
-    deprecated: this version has critical issues, please update to the latest version
 
   abab@2.0.6:
     resolution: {integrity: sha512-j2afSsaIENvHZN2B8GOpF566vZ5WVk5opAiMTvWgaQT8DkbOqsTfvNAvHoRGU2zzP8cPoqys+xHTRDWW8L+/BA==}
@@ -3893,8 +3876,8 @@ packages:
   ajv@6.12.6:
     resolution: {integrity: sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==}
 
-  ajv@8.17.1:
-    resolution: {integrity: sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==}
+  ajv@8.18.0:
+    resolution: {integrity: sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==}
 
   anser@1.4.10:
     resolution: {integrity: sha512-hCv9AqTQ8ycjpSd3upOJd7vFwW1JaoYQ7tpham03GJ1ca8/65rqn0RpaWpItOAd6ylW9wAw6luXYPJIyPFVOww==}
@@ -4001,10 +3984,6 @@ packages:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
 
-  ast-types@0.16.1:
-    resolution: {integrity: sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==}
-    engines: {node: '>=4'}
-
   async-function@1.0.0:
     resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
     engines: {node: '>= 0.4'}
@@ -4023,14 +4002,11 @@ packages:
     resolution: {integrity: sha512-NZKeq9AfyQvEeNlN0zSYAaWrmBffJh3IELMZfRpJVWgrpEbtEpnjvzqBPf+mxoI287JohRDoa+/nsfqqiZmF6g==}
     engines: {node: '>= 6.0.0'}
 
-  babel-dead-code-elimination@1.0.12:
-    resolution: {integrity: sha512-GERT7L2TiYcYDtYk1IpD+ASAYXjKbLTDPhBtYj7X1NuRMDTMtAx9kyBenub1Ev41lo91OHCKdmP+egTDmfQ7Ig==}
-
   babel-jest@29.7.0:
     resolution: {integrity: sha512-BrvGY3xZSwEcCzKvKsCi2GgHqDqsYkOP4/by5xCgIwGXQxIEh+8ew3gmrE1y7XRR6LHZIj6yLYnUi/mm2KXKBg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
-      '@babel/core': ^7.8.0
+      '@babel/core': 7.29.6
 
   babel-plugin-dynamic-import-node@2.3.3:
     resolution: {integrity: sha512-jZVI+s9Zg3IqA/kdi0i6UDCybUI3aSBLnglhYbSSjKlV7yF1F/5LWv8MakQmvYpnbJDS6fcBL2KzHSxNCMtWSQ==}
@@ -4046,17 +4022,17 @@ packages:
   babel-plugin-polyfill-corejs2@0.4.14:
     resolution: {integrity: sha512-Co2Y9wX854ts6U8gAAPXfn0GmAyctHuK8n0Yhfjd6t30g7yvKjspvvOo9yG+z52PZRgFErt7Ka2pYnXCjLKEpg==}
     peerDependencies:
-      '@babel/core': ^7.4.0 || ^8.0.0-0 <8.0.0
+      '@babel/core': 7.29.6
 
   babel-plugin-polyfill-corejs3@0.13.0:
     resolution: {integrity: sha512-U+GNwMdSFgzVmfhNm8GJUX88AadB3uo9KpJqS3FaqNIPKgySuvMb+bHPsOmmuWyIcuqZj/pzt1RUIUZns4y2+A==}
     peerDependencies:
-      '@babel/core': ^7.4.0 || ^8.0.0-0 <8.0.0
+      '@babel/core': 7.29.6
 
   babel-plugin-polyfill-regenerator@0.6.5:
     resolution: {integrity: sha512-ISqQ2frbiNU9vIJkzg7dlPpznPZ4jOiUQ1uSmB0fEHeowtN3COYRsXr/xexn64NpU13P06jc/L5TgiJXOgrbEg==}
     peerDependencies:
-      '@babel/core': ^7.4.0 || ^8.0.0-0 <8.0.0
+      '@babel/core': 7.29.6
 
   babel-plugin-react-compiler@1.0.0:
     resolution: {integrity: sha512-Ixm8tFfoKKIPYdCCKYTsqv+Fd4IJ0DQqMyEimo+pxUOMUR9cVPlwTrFt9Avu+3cb6Zp3mAzl+t1MrG2fxxKsxw==}
@@ -4073,7 +4049,7 @@ packages:
   babel-preset-current-node-syntax@1.2.0:
     resolution: {integrity: sha512-E/VlAEzRrsLEb2+dv8yp3bo4scof3l9nR4lrld+Iy5NyVqgVYUJnDAmunkhPMisRI32Qc4iRiz425d8vM++2fg==}
     peerDependencies:
-      '@babel/core': ^7.0.0 || ^8.0.0-0
+      '@babel/core': 7.29.6
 
   babel-preset-expo@54.0.10:
     resolution: {integrity: sha512-wTt7POavLFypLcPW/uC5v8y+mtQKDJiyGLzYCjqr9tx0Qc3vCXcDKk1iCFIj/++Iy5CWhhTflEa7VvVPNWeCfw==}
@@ -4091,11 +4067,15 @@ packages:
     resolution: {integrity: sha512-0B3bhxR6snWXJZtR/RliHTDPRgn1sNHOR0yVtq/IiQFyuOVjFS+wuio/R4gSNkyYmKmJB4wGZv2NZanmKmTnNA==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     peerDependencies:
-      '@babel/core': ^7.0.0
+      '@babel/core': 7.29.6
 
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
 
+  balanced-match@4.0.4:
+    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
+    engines: {node: 18 || 20 || >=22}
+
   base64-js@1.5.1:
     resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
 
@@ -4103,27 +4083,27 @@ packages:
     resolution: {integrity: sha512-Sg0xJUNDU1sJNGdfGWhVHX0kkZ+HWcvmVymJbj6NSgZZmW/8S9Y2HQ5euytnIgakgxN6papOAWiwDo1ctFDcoQ==}
     hasBin: true
 
-  better-auth@1.4.18:
-    resolution: {integrity: sha512-bnyifLWBPcYVltH3RhS7CM62MoelEqC6Q+GnZwfiDWNfepXoQZBjEvn4urcERC7NTKgKq5zNBM8rvPvRBa6xcg==}
+  better-auth@1.6.23:
+    resolution: {integrity: sha512-4vOaRd9UiKGKm9R+ej0jjU1es3MiJIiNc9Qq3VCnYqOZ4/nb5272QqTxWYoDxyUXl5x6A2x2we5KZKQO9teTQQ==}
     peerDependencies:
       '@lynx-js/react': '*'
       '@prisma/client': ^5.0.0 || ^6.0.0 || ^7.0.0
       '@sveltejs/kit': ^2.0.0
-      '@tanstack/react-start': ^1.0.0
+      '@tanstack/react-start': 1.167.30
       '@tanstack/solid-start': ^1.0.0
       better-sqlite3: ^12.0.0
       drizzle-kit: '>=0.31.4'
-      drizzle-orm: '>=0.41.0'
+      drizzle-orm: ^0.45.2
       mongodb: ^6.0.0 || ^7.0.0
       mysql2: ^3.0.0
-      next: ^14.0.0 || ^15.0.0 || ^16.0.0
+      next: 16.2.6
       pg: ^8.0.0
       prisma: ^5.0.0 || ^6.0.0 || ^7.0.0
       react: 19.1.0
       react-dom: 19.1.0
       solid-js: ^1.0.0
       svelte: ^4.0.0 || ^5.0.0
-      vitest: ^2.0.0 || ^3.0.0 || ^4.0.0
+      vitest: 3.2.7
       vue: ^3.0.0
     peerDependenciesMeta:
       '@lynx-js/react':
@@ -4165,8 +4145,8 @@ packages:
       vue:
         optional: true
 
-  better-call@1.1.8:
-    resolution: {integrity: sha512-XMQ2rs6FNXasGNfMjzbyroSwKwYbZ/T3IxruSS6U2MJRsSYh3wYtG3o6H00ZlKZ/C/UPOAD97tqgQJNsxyeTXw==}
+  better-call@1.3.7:
+    resolution: {integrity: sha512-Al51/hjp2SSp6CRTa3F2ptcx4yQVS1xWKoY6jcVXqNYOap6mHFP2jUBn5EwIL4iIed1/Sq4hlQ+Umm6EflZG+w==}
     peerDependencies:
       zod: ^4.0.0
     peerDependenciesMeta:
@@ -4199,11 +4179,12 @@ packages:
     resolution: {integrity: sha512-apC2+fspHGI3mMKj+dGevkGo/tCqVB8jMb6i+OX+E29p0Iposz07fABkRIfVUPNd5A5VbuOz1bZbnmkKLYF+wQ==}
     engines: {node: '>= 5.10.0'}
 
-  brace-expansion@1.1.12:
-    resolution: {integrity: sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==}
+  brace-expansion@1.1.13:
+    resolution: {integrity: sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==}
 
-  brace-expansion@2.0.2:
-    resolution: {integrity: sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==}
+  brace-expansion@5.0.7:
+    resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
+    engines: {node: 18 || 20 || >=22}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -4287,9 +4268,6 @@ packages:
   caniuse-lite@1.0.30001761:
     resolution: {integrity: sha512-JF9ptu1vP2coz98+5051jZ4PwQgd2ni8A+gYSN7EA7dPKIMf0pDlSUxhdmVOaV3/fYK5uWBkgSXJaRLr4+3A6g==}
 
-  caniuse-lite@1.0.30001775:
-    resolution: {integrity: sha512-s3Qv7Lht9zbVKE9XoTyRG6wVDCKdtOFIjBGg3+Yhn6JaytuNKPIjBMTMIY1AnOH3seL5mvF+x33oGAyK3hVt3A==}
-
   chai@5.3.3:
     resolution: {integrity: sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==}
     engines: {node: '>=18'}
@@ -4326,13 +4304,6 @@ packages:
     resolution: {integrity: sha512-OAlb+T7V4Op9OwdkjmguYRqncdlx5JiofwOAUkmTF+jNdHwzTaTs4sRAGpzLF3oOz5xAyDGrPgeIDFQmDOTiJw==}
     engines: {node: '>= 16'}
 
-  cheerio-select@2.1.0:
-    resolution: {integrity: sha512-9v9kG0LvzrlcungtnJtpGNxY+fzECQKhK4EGJX2vByejiMX84MFNQw4UxPJl3bFbTMw+Dfs37XaIkCwTZfLh4g==}
-
-  cheerio@1.2.0:
-    resolution: {integrity: sha512-WDrybc/gKFpTYQutKIK6UvfcuxijIZfMfXaYm8NMsPQxSYvf+13fXUJ4rztGGbJcBQ/GF55gvrZ0Bc0bj/mqvg==}
-    engines: {node: '>=20.18.1'}
-
   chokidar@3.6.0:
     resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==}
     engines: {node: '>= 8.10.0'}
@@ -4471,9 +4442,6 @@ packages:
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
-  cookie-es@2.0.0:
-    resolution: {integrity: sha512-RAj4E421UYRgqokKUmotqAwuplYw15qtdXfY+hGzgCJ/MBjCVZcSoHK/kH9kocfjRjcDME7IiDWR/1WX1TM2Pg==}
-
   core-js-compat@3.47.0:
     resolution: {integrity: sha512-IGfuznZ/n7Kp9+nypamBhvwdwLsW6KC8IOaURw2doAK5e98AG3acVLdh0woOnEqCfUtS+Vu882JE4k/DAm3ItQ==}
 
@@ -4605,8 +4573,8 @@ packages:
     resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
     engines: {node: '>= 0.4'}
 
-  defu@6.1.4:
-    resolution: {integrity: sha512-mEQCMmwJu317oSz8CwdIOdwf3xMif1ttiM8LTufzc3g6kR+9Pe236twL8j3IYT1F7GfRgGcW6MWxzZjLIkuHIg==}
+  defu@6.1.7:
+    resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
 
   delayed-stream@1.0.0:
     resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
@@ -4642,10 +4610,6 @@ packages:
     resolution: {integrity: sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
 
-  diff@8.0.3:
-    resolution: {integrity: sha512-qejHi7bcSD4hQAZE0tNAawRK1ZtafHDmMTMkrrIGgSLl7hTnQHmKCeB45xAcbfTqK2zowkM3j3bHt/4b/ARbYQ==}
-    engines: {node: '>=0.3.1'}
-
   dir-glob@3.0.1:
     resolution: {integrity: sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA==}
     engines: {node: '>=8'}
@@ -4704,98 +4668,6 @@ packages:
     resolution: {integrity: sha512-O9EC/miwdnRDY10qRxM8P3Pg8hXe3LyU4ZipReKOgTwn4OqANmftj8XJz1UPUAS6NMHf0E2htjsbQujUTkncCg==}
     hasBin: true
 
-  drizzle-orm@0.45.1:
-    resolution: {integrity: sha512-Te0FOdKIistGNPMq2jscdqngBRfBpC8uMFVwqjf6gtTVJHIQ/dosgV/CLBU2N4ZJBsXL5savCba9b0YJskKdcA==}
-    peerDependencies:
-      '@aws-sdk/client-rds-data': '>=3'
-      '@cloudflare/workers-types': '>=4'
-      '@electric-sql/pglite': '>=0.2.0'
-      '@libsql/client': '>=0.10.0'
-      '@libsql/client-wasm': '>=0.10.0'
-      '@neondatabase/serverless': '>=0.10.0'
-      '@op-engineering/op-sqlite': '>=2'
-      '@opentelemetry/api': ^1.4.1
-      '@planetscale/database': '>=1.13'
-      '@prisma/client': '*'
-      '@tidbcloud/serverless': '*'
-      '@types/better-sqlite3': '*'
-      '@types/pg': '*'
-      '@types/sql.js': '*'
-      '@upstash/redis': '>=1.34.7'
-      '@vercel/postgres': '>=0.8.0'
-      '@xata.io/client': '*'
-      better-sqlite3: '>=7'
-      bun-types: '*'
-      expo-sqlite: '>=14.0.0'
-      gel: '>=2'
-      knex: '*'
-      kysely: '*'
-      mysql2: '>=2'
-      pg: '>=8'
-      postgres: '>=3'
-      prisma: '*'
-      sql.js: '>=1'
-      sqlite3: '>=5'
-    peerDependenciesMeta:
-      '@aws-sdk/client-rds-data':
-        optional: true
-      '@cloudflare/workers-types':
-        optional: true
-      '@electric-sql/pglite':
-        optional: true
-      '@libsql/client':
-        optional: true
-      '@libsql/client-wasm':
-        optional: true
-      '@neondatabase/serverless':
-        optional: true
-      '@op-engineering/op-sqlite':
-        optional: true
-      '@opentelemetry/api':
-        optional: true
-      '@planetscale/database':
-        optional: true
-      '@prisma/client':
-        optional: true
-      '@tidbcloud/serverless':
-        optional: true
-      '@types/better-sqlite3':
-        optional: true
-      '@types/pg':
-        optional: true
-      '@types/sql.js':
-        optional: true
-      '@upstash/redis':
-        optional: true
-      '@vercel/postgres':
-        optional: true
-      '@xata.io/client':
-        optional: true
-      better-sqlite3:
-        optional: true
-      bun-types:
-        optional: true
-      expo-sqlite:
-        optional: true
-      gel:
-        optional: true
-      knex:
-        optional: true
-      kysely:
-        optional: true
-      mysql2:
-        optional: true
-      pg:
-        optional: true
-      postgres:
-        optional: true
-      prisma:
-        optional: true
-      sql.js:
-        optional: true
-      sqlite3:
-        optional: true
-
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
@@ -4824,9 +4696,6 @@ packages:
     resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
     engines: {node: '>= 0.8'}
 
-  encoding-sniffer@0.2.1:
-    resolution: {integrity: sha512-5gvq20T6vfpekVtqrYQsSCFZ1wEg5+wW0/QaZMWkFr6BqD3NfKs0rLCx4rrVlSWJeZb5NBJgVLswK/w2MWU+Gw==}
-
   enhanced-resolve@5.18.4:
     resolution: {integrity: sha512-LgQMM4WXU3QI+SYgEc2liRgznaD5ojbmY3sb8LxyguVkIg5FxdpTkvk72te2R38/TGKxH634oLxXRGY6d7AP+Q==}
     engines: {node: '>=10.13.0'}
@@ -4843,10 +4712,6 @@ packages:
     resolution: {integrity: sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==}
     engines: {node: '>=0.12'}
 
-  entities@7.0.1:
-    resolution: {integrity: sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==}
-    engines: {node: '>=0.12'}
-
   env-editor@0.4.2:
     resolution: {integrity: sha512-ObFo8v4rQJAE59M69QzwloxPZtd33TpYEIjtKD1rrFDcM1Gd7IkDxEBU+HriziN6HSHQnBJi8Dmy+JWkav5HKA==}
     engines: {node: '>=8'}
@@ -4905,9 +4770,9 @@ packages:
     engines: {node: '>=12'}
     hasBin: true
 
-  esbuild@0.18.20:
-    resolution: {integrity: sha512-ceqxoedUrcayh7Y7ZX6NdbbDzGROiyVBgC4PriJThBKSVPWnnFHZAkfI1lJT8QFkOwH4qOS2SJkS4wvpGl8BpA==}
-    engines: {node: '>=12'}
+  esbuild@0.25.0:
+    resolution: {integrity: sha512-BXq5mqc8ltbaN34cDqWuYKyNhX8D/Z0J1xdtdQ8UcIIIyJyz+ZMKUt58tF3SrZ85jcfN/PZYhjR5uDQAYNVbuw==}
+    engines: {node: '>=18'}
     hasBin: true
 
   esbuild@0.25.12:
@@ -4925,6 +4790,11 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
+  esbuild@0.28.1:
+    resolution: {integrity: sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   escalade@3.2.0:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
@@ -5359,8 +5229,8 @@ packages:
   fast-text-encoding@1.0.6:
     resolution: {integrity: sha512-VhXlQgj9ioXCqGstD37E/HBeqEGV/qOD/kmbVG8h5xKBYvM1L3lR1Zn4555cQ8GkYbJa8aJSipLPndE1k6zK2w==}
 
-  fast-uri@3.1.0:
-    resolution: {integrity: sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==}
+  fast-uri@3.1.3:
+    resolution: {integrity: sha512-i70LwGWUduXqzicKXWshooq+sWL1K3WUU5rKZNG/0i3a1OSoX3HqhH5WbWwTmqWfor4urUakGPiRQcleRZTwOg==}
 
   fastq@1.19.1:
     resolution: {integrity: sha512-GwLTyxkCXjXbxqIhTsMI2Nui8huMPtnxg7krajPJAjnEG/iiOS7i+zCtWGZR9G0NBKbXKh6X9m9UIsYX/N6vvQ==}
@@ -5372,14 +5242,11 @@ packages:
     resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
     engines: {node: '>=12.0.0'}
     peerDependencies:
-      picomatch: ^3 || ^4
+      picomatch: 4.0.4
     peerDependenciesMeta:
       picomatch:
         optional: true
 
-  fflate@0.8.2:
-    resolution: {integrity: sha512-cPJU47OaAoCbg0pBvzsgpTPhmhqI5eJjh/JIu8tPj5q+T7iLvW/JAYUqmE7KOB4R1ZyEhzBaIQpQpardBF5z8A==}
-
   file-entry-cache@8.0.0:
     resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
     engines: {node: '>=16.0.0'}
@@ -5411,11 +5278,8 @@ packages:
     resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
     engines: {node: '>=16'}
 
-  flatted@3.3.3:
-    resolution: {integrity: sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==}
-
-  flatted@3.3.4:
-    resolution: {integrity: sha512-3+mMldrTAPdta5kjX2G2J7iX4zxtnwpdA8Tr2ZSjkyPSanvbZAcy6flmtnXbEybHrDcU9641lxrMfFuUxVz9vA==}
+  flatted@3.4.2:
+    resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
 
   flow-enums-runtime@0.0.6:
     resolution: {integrity: sha512-3PYnM29RFXwvAN6Pc/scUfkI7RwhQ/xqyLUyPNlXUp9S40zI8nup9tUSrTLSVnWGBN38FNiGWbwZOB6uR4OGdw==}
@@ -5432,8 +5296,8 @@ packages:
     resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==}
     engines: {node: '>= 0.4'}
 
-  form-data@4.0.5:
-    resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==}
+  form-data@4.0.6:
+    resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
     engines: {node: '>= 6'}
 
   freeport-async@2.0.0:
@@ -5565,15 +5429,6 @@ packages:
   graceful-fs@4.2.11:
     resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
 
-  h3@2.0.1-rc.6:
-    resolution: {integrity: sha512-kKLFVFNJlDVTbQjakz1ZTFSHB9+oi9+Khf0v7xQsUKU3iOqu2qmrFzTD56YsDvvj2nBgqVDphGRXB2VRursw4w==}
-    engines: {node: '>=20.11.1'}
-    peerDependencies:
-      crossws: ^0.4.1
-    peerDependenciesMeta:
-      crossws:
-        optional: true
-
   has-bigints@1.1.0:
     resolution: {integrity: sha512-R3pbpkcIqv2Pm3dUwgjclDRVmWpTJW2DcMzcIhEXEx1oh/CEMObMm3KLmRJOdvhM7o4uQBnwr8pzRK2sJWIqfg==}
     engines: {node: '>= 0.4'}
@@ -5605,6 +5460,10 @@ packages:
     resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==}
     engines: {node: '>= 0.4'}
 
+  hasown@2.0.4:
+    resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
+    engines: {node: '>= 0.4'}
+
   hermes-estree@0.29.1:
     resolution: {integrity: sha512-jl+x31n4/w+wEqm0I2r4CMimukLbLQEYpisys5oCre611CI5fc9TxhqkBBCJ1edDG4Kza0f7CgNz8xVMLZQOmQ==}
 
@@ -5634,9 +5493,6 @@ packages:
   html-escaper@2.0.2:
     resolution: {integrity: sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==}
 
-  htmlparser2@10.1.0:
-    resolution: {integrity: sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==}
-
   http-errors@2.0.1:
     resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
     engines: {node: '>= 0.8'}
@@ -5873,10 +5729,6 @@ packages:
   isarray@2.0.5:
     resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
 
-  isbot@5.1.35:
-    resolution: {integrity: sha512-waFfC72ZNfwLLuJ2iLaoVaqcNo+CAaLR7xCpAn0Y5WfGzkNHv7ZN39Vbi1y+kb+Zs46XHOX3tZNExroFUPX+Kg==}
-    engines: {node: '>=18'}
-
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
@@ -6094,12 +5946,12 @@ packages:
   js-tokens@9.0.1:
     resolution: {integrity: sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==}
 
-  js-yaml@3.14.2:
-    resolution: {integrity: sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==}
+  js-yaml@3.15.0:
+    resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==}
     hasBin: true
 
-  js-yaml@4.1.1:
-    resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
+  js-yaml@4.2.0:
+    resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
     hasBin: true
 
   jsc-safe-url@0.2.4:
@@ -6160,8 +6012,8 @@ packages:
   kubernetes-types@1.30.0:
     resolution: {integrity: sha512-Dew1okvhM/SQcIa2rcgujNndZwU8VnSapDgdxlYoB84ZlpAD43U6KLAFqYo17ykSFGHNPrg0qry0bP+GJd9v7Q==}
 
-  kysely@0.28.9:
-    resolution: {integrity: sha512-3BeXMoiOhpOwu62CiVpO6lxfq4eS6KMYfQdMsN/2kUCRNuF2YiEr7u0HLHaQU+O4Xu8YXE3bHVkwaQ85i72EuA==}
+  kysely@0.28.17:
+    resolution: {integrity: sha512-nbD8lB9EB3wNdMhOCdx5Li8DxnLbvKByylRLcJ1h+4SkrowVeECAyZlyiKMThF7xFdRz0jSQ2MoJr+wXux2y0Q==}
     engines: {node: '>=20.0.0'}
 
   lan-network@0.1.7:
@@ -6359,8 +6211,9 @@ packages:
   lodash.throttle@4.1.1:
     resolution: {integrity: sha512-wIkUCfVKpVsWo3JSZlc+8MB5it+2AN5W8J7YVMST30UrvcQNZ1Okbj+rbVniijTWE6FGYy4XJq/rHkas8qJMLQ==}
 
-  lodash@4.17.21:
-    resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==}
+  lodash@4.18.0:
+    resolution: {integrity: sha512-l1mfj2atMqndAHI3ls7XqPxEjV2J9ZkcNyHpoZA3r2T1LLwDB69jgkMWh71YKwhBbK0G2f4WSn05ahmQXVxupA==}
+    deprecated: Bad release. Please use lodash@4.17.21 instead.
 
   log-symbols@2.2.0:
     resolution: {integrity: sha512-VeIAFslyIerEJLXHziedo2basKbMKtTw3vfn5IzG0XTjhAVEJyNHnL2p7vc+wBDSdQuUpNw3M2u6xb9QsAY5Eg==}
@@ -6527,15 +6380,15 @@ packages:
     resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
     engines: {node: '>=4'}
 
-  minimatch@10.1.1:
-    resolution: {integrity: sha512-enIvLvRAFZYXJzkCYG5RKmPfrFArdLv+R+lbQ53BmIMLIry74bjKzX6iHAm8WYamJkhSSEabrWN5D97XnKObjQ==}
-    engines: {node: 20 || >=22}
+  minimatch@10.2.3:
+    resolution: {integrity: sha512-Rwi3pnapEqirPSbWbrZaa6N3nmqq4Xer/2XooiOKyV3q12ML06f7MOuc5DVH8ONZIFhwIYQ3yzPH4nt7iWHaTg==}
+    engines: {node: 18 || 20 || >=22}
 
-  minimatch@3.1.2:
-    resolution: {integrity: sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==}
+  minimatch@3.1.4:
+    resolution: {integrity: sha512-twmL+S8+7yIsE9wsqgzU3E8/LumN3M3QELrBZ20OdmQ9jB2JvW5oZtBEmft84k/Gs5CG9mqtWc6Y9vW+JEzGxw==}
 
-  minimatch@9.0.5:
-    resolution: {integrity: sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==}
+  minimatch@9.0.7:
+    resolution: {integrity: sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==}
     engines: {node: '>=16 || 14 >=14.17'}
 
   minimist@1.2.8:
@@ -6554,10 +6407,6 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
-  mrmime@2.0.1:
-    resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
-    engines: {node: '>=10'}
-
   ms@2.0.0:
     resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
 
@@ -6602,8 +6451,8 @@ packages:
     engines: {node: ^18 || >=20}
     hasBin: true
 
-  nanostores@1.1.0:
-    resolution: {integrity: sha512-yJBmDJr18xy47dbNVlHcgdPrulSn1nhSE6Ns9vTG+Nx9VPT6iV1MD6aQFp/t52zpf82FhLLTXAXr30NuCnxvwA==}
+  nanostores@1.4.0:
+    resolution: {integrity: sha512-i0tloweeudshAEuddpDxcg9Ik6pkPfVsHIgKyf143JrgG7/MOh0+q7BypdLXZPoOP7fOYt1eTcwGkyiVmhJFkA==}
     engines: {node: ^20.0.0 || >=22.0.0}
 
   napi-postinstall@0.3.4:
@@ -6625,28 +6474,6 @@ packages:
   nested-error-stacks@2.0.1:
     resolution: {integrity: sha512-SrQrok4CATudVzBS7coSz26QRSmlK9TzzoFbeKfcPBUFPjcQM9Rqvr/DlJkOrwI/0KcgvMub1n1g5Jt9EgRn4A==}
 
-  next@16.0.0:
-    resolution: {integrity: sha512-nYohiNdxGu4OmBzggxy9rczmjIGI+TpR5vbKTsE1HqYwNm1B+YSiugSrFguX6omMOKnDHAmBPY4+8TNJk0Idyg==}
-    engines: {node: '>=20.9.0'}
-    deprecated: This version has a security vulnerability. Please upgrade to a patched version. See https://nextjs.org/blog/CVE-2025-66478 for more details.
-    hasBin: true
-    peerDependencies:
-      '@opentelemetry/api': ^1.1.0
-      '@playwright/test': ^1.51.1
-      babel-plugin-react-compiler: '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-      sass: ^1.3.0
-    peerDependenciesMeta:
-      '@opentelemetry/api':
-        optional: true
-      '@playwright/test':
-        optional: true
-      babel-plugin-react-compiler:
-        optional: true
-      sass:
-        optional: true
-
   nitro-codegen@0.26.4:
     resolution: {integrity: sha512-qTOvyfE6+kz0wuqPpRlKc6F6ZNOI3elK7ltOTvxMZSG3Y8tt43UrV5xkp4XgL9Jc1P90iBLU6mDYRiNqoNA2+g==}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
@@ -6655,8 +6482,8 @@ packages:
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
-  node-forge@1.3.3:
-    resolution: {integrity: sha512-rLvcdSyRCyouf6jcOIPe/BgwG/d7hKjzMKOas33/pHEr6gbq18IK9zV7DiPvzsz0oBJPme6qr6H6kGZuI9/DZg==}
+  node-forge@1.4.0:
+    resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
     engines: {node: '>= 6.13.0'}
 
   node-gyp-build-optional-packages@5.2.2:
@@ -6825,12 +6652,6 @@ packages:
     resolution: {integrity: sha512-Nt/a5SfCLiTnQAjx3fHlqp8hRgTL3z7kTQZzvIMS9uCAepnCyjpdEc6M/sz69WqMBdaDBw9sF1F1UaHROYzGkQ==}
     engines: {node: '>=10'}
 
-  parse5-htmlparser2-tree-adapter@7.1.0:
-    resolution: {integrity: sha512-ruw5xyKs6lrpo9x9rCZqZZnIUntICjQAd0Wsmp396Ul9lN/h+ifgVV1x1gZHi8euej6wTfpqX8j+BFQxF0NS/g==}
-
-  parse5-parser-stream@7.1.2:
-    resolution: {integrity: sha512-JyeQc9iwFLn5TbvvqACIF/VXG6abODeB3Fwmv/TGdLk2LfbWkaySGY72at4+Ty7EkPZj854u4CrICqNk2qIbow==}
-
   parse5@7.3.0:
     resolution: {integrity: sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==}
 
@@ -6877,16 +6698,16 @@ packages:
   picocolors@1.1.1:
     resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
 
-  picomatch@2.3.1:
-    resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==}
+  picomatch@2.3.2:
+    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
     engines: {node: '>=8.6'}
 
-  picomatch@3.0.1:
-    resolution: {integrity: sha512-I3EurrIQMlRc9IaAZnqRR044Phh2DXY+55o7uJ0V+hYZAcQYSuFWsc9q5PvyDHUSCe1Qxn/iBz+78s86zWnGag==}
+  picomatch@3.0.2:
+    resolution: {integrity: sha512-cfDHL6LStTEKlNilboNtobT/kEa30PtAf2Q1OgszfrG/rpVl1xaFWT9ktfkS306GmHgmnad1Sw4wabhlvFtsTw==}
     engines: {node: '>=10'}
 
-  picomatch@4.0.3:
-    resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==}
+  picomatch@4.0.4:
+    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
     engines: {node: '>=12'}
 
   pify@4.0.1:
@@ -6924,7 +6745,7 @@ packages:
     resolution: {integrity: sha512-6DiM4E7v4coTE4uzA8U//WhtPwyhiim3eyjEMFCnUpzbrkK9wJHgKDT2mR+HbtSrd/NubVaYTOpSpjUl8NQeRg==}
     engines: {node: '>= 10'}
     peerDependencies:
-      postcss: '>=8.0.9'
+      postcss: 8.5.10
       ts-node: '>=9.0.0'
     peerDependenciesMeta:
       postcss:
@@ -6932,16 +6753,8 @@ packages:
       ts-node:
         optional: true
 
-  postcss@8.4.31:
-    resolution: {integrity: sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==}
-    engines: {node: ^10 || ^12 || >=14}
-
-  postcss@8.4.49:
-    resolution: {integrity: sha512-OCVPnIObs4N29kxTjzLfUryOkvZEq+pf8jTF0lg8E7uETuWHA+v7j3c/xJmiqpX450191LlmZfUKkXxkTry7nA==}
-    engines: {node: ^10 || ^12 || >=14}
-
-  postcss@8.5.6:
-    resolution: {integrity: sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==}
+  postcss@8.5.10:
+    resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==}
     engines: {node: ^10 || ^12 || >=14}
 
   prelude-ls@1.2.1:
@@ -7082,7 +6895,7 @@ packages:
   react-native-reanimated@4.1.6:
     resolution: {integrity: sha512-F+ZJBYiok/6Jzp1re75F/9aLzkgoQCOh4yxrnwATa8392RvM3kx+fiXXFvwcgE59v48lMwd9q0nzF1oJLXpfxQ==}
     peerDependencies:
-      '@babel/core': ^7.0.0-0
+      '@babel/core': 7.29.6
       react: 19.1.0
       react-native: '*'
       react-native-worklets: '>=0.5.0'
@@ -7108,7 +6921,7 @@ packages:
   react-native-worklets@0.7.1:
     resolution: {integrity: sha512-KNsvR48ULg73QhTlmwPbdJLPsWcyBotrGPsrDRDswb5FYpQaJEThUKc2ncXE4UM5dn/ewLoQHjSjLaKUVPxPhA==}
     peerDependencies:
-      '@babel/core': '*'
+      '@babel/core': 7.29.6
       react: 19.1.0
       react-native: '*'
 
@@ -7184,10 +6997,6 @@ packages:
     resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
     engines: {node: '>= 20.19.0'}
 
-  recast@0.23.11:
-    resolution: {integrity: sha512-YTUo+Flmw4ZXiWfQKGcwwc11KnoRAYgzAE2E7mXKCjSviTKShtxBsN6YUUBB2gtaBzKzeKunxhUwNHQuRryhWA==}
-    engines: {node: '>= 4'}
-
   redent@3.0.0:
     resolution: {integrity: sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==}
     engines: {node: '>=8'}
@@ -7307,8 +7116,8 @@ packages:
     engines: {node: '>=14.18.0', npm: '>=8.0.0'}
     hasBin: true
 
-  rollup@4.54.0:
-    resolution: {integrity: sha512-3nk8Y3a9Ea8szgKhinMlGMhGMw89mqule3KWczxhIzqudyHdCIOHw8WJlj/r329fACjKLEh13ZSk7oE22kyeIw==}
+  rollup@4.59.0:
+    resolution: {integrity: sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
@@ -7388,16 +7197,6 @@ packages:
     resolution: {integrity: sha512-ghgmKt5o4Tly5yEG/UJp8qTd0AN7Xalw4XBtDEKP655B699qMEtra1WlXeE6WIvdEG481JvRxULKsInq/iNysw==}
     engines: {node: '>=0.10.0'}
 
-  seroval-plugins@1.5.0:
-    resolution: {integrity: sha512-EAHqADIQondwRZIdeW2I636zgsODzoBDwb3PT/+7TLDWyw1Dy/Xv7iGUIEXXav7usHDE9HVhOU61irI3EnyyHA==}
-    engines: {node: '>=10'}
-    peerDependencies:
-      seroval: ^1.0
-
-  seroval@1.5.0:
-    resolution: {integrity: sha512-OE4cvmJ1uSPrKorFIH9/w/Qwuvi/IMcGbv5RKgcJ/zjA/IohDLU6SVaxFN9FwajbP7nsX0dQqMDes1whk3y+yw==}
-    engines: {node: '>=10'}
-
   serve-static@1.16.3:
     resolution: {integrity: sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==}
     engines: {node: '>= 0.8.0'}
@@ -7405,8 +7204,8 @@ packages:
   server-only@0.0.1:
     resolution: {integrity: sha512-qepMx2JxAa5jjfzxG79yPPq+8BuFToHd1hm7kI+Z4zAq1ftQiP7HcxMhDDItrbtwVeLg/cY2JnKnrcFkmiswNA==}
 
-  set-cookie-parser@2.7.2:
-    resolution: {integrity: sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==}
+  set-cookie-parser@3.1.2:
+    resolution: {integrity: sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==}
 
   set-function-length@1.2.2:
     resolution: {integrity: sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg==}
@@ -7430,10 +7229,6 @@ packages:
   shallowequal@1.1.0:
     resolution: {integrity: sha512-y0m1JoUZSlPAjXVtPPW70aZWfIL/dSP7AFkRnniLCrK/8MDKog3TySTBmckD+RObVxH0v4Tox67+F14PdED2oQ==}
 
-  sharp@0.34.5:
-    resolution: {integrity: sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -7442,8 +7237,8 @@ packages:
     resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
     engines: {node: '>=8'}
 
-  shell-quote@1.8.3:
-    resolution: {integrity: sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==}
+  shell-quote@1.10.0:
+    resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==}
     engines: {node: '>= 0.4'}
 
   side-channel-list@1.0.0:
@@ -7478,10 +7273,6 @@ packages:
   simple-swizzle@0.2.4:
     resolution: {integrity: sha512-nAu1WFPQSMNr2Zn9PGSZK9AGn4t/y97lEm+MXTtUDwfP0ksAIX4nO+6ruD9Jwut4C49SB1Ws+fbXsm/yScWOHw==}
 
-  sirv@3.0.2:
-    resolution: {integrity: sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==}
-    engines: {node: '>=18'}
-
   sisteransi@1.0.5:
     resolution: {integrity: sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==}
 
@@ -7523,10 +7314,6 @@ packages:
     resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
     engines: {node: '>=0.10.0'}
 
-  source-map@0.7.6:
-    resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
-    engines: {node: '>= 12'}
-
   source-map@0.8.0-beta.0:
     resolution: {integrity: sha512-2ymg6oRBpebeZi9UUNsgQ89bhx01TcTkmNTGnNO88imTmbSgy4nfujrgVEFKWpMTEGA11EDkTt7mqObTPdigIA==}
     engines: {node: '>= 8'}
@@ -7543,11 +7330,6 @@ packages:
     resolution: {integrity: sha512-qC9iz2FlN7DQl3+wjwn3802RTyjCx7sDvfQEXchwa6CWOx07/WVfh91gBmQ9fahw8snwGEWU3xGzOt4tFyHLxg==}
     engines: {node: '>= 0.6'}
 
-  srvx@0.9.8:
-    resolution: {integrity: sha512-RZaxTKJEE/14HYn8COLuUOJAt0U55N9l1Xf6jj+T0GoA01EUH1Xz5JtSUOI+EHn+AEgPCVn7gk6jHJffrr06fQ==}
-    engines: {node: '>=20.16.0'}
-    hasBin: true
-
   stable-hash@0.0.5:
     resolution: {integrity: sha512-+L3ccpzibovGXFK+Ap/f8LOS0ahMrHTf3xu7mMLSpEGU0EO9ucaysSylKo9eRDFNhWve/y275iPmIZ4z39a9iA==}
 
@@ -7676,19 +7458,6 @@ packages:
   structured-headers@0.4.1:
     resolution: {integrity: sha512-0MP/Cxx5SzeeZ10p/bZI0S6MpgD+yxAhi1BOQ34jgnMXsCq3j1t6tQnZu+KdlL7dvJTLT3g9xN8tl10TqgFMcg==}
 
-  styled-jsx@5.1.6:
-    resolution: {integrity: sha512-qSVyDTeMotdvQYoHWLNGwRFJHC+i+ZvdBRYosOFgC+Wg1vx4frN2/RG/NA7SYqqvKNLf39P2LSRA2pu6n0XYZA==}
-    engines: {node: '>= 12.0.0'}
-    peerDependencies:
-      '@babel/core': '*'
-      babel-plugin-macros: '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@babel/core':
-        optional: true
-      babel-plugin-macros:
-        optional: true
-
   sucrase@3.35.1:
     resolution: {integrity: sha512-DhuTmvZWux4H1UOnWMB3sk0sbaCVOoQZjv8u1rDoTV0HTdGem9hkAZtl4JZy8P2z4Bg0nT+YMeOFyVr4zcG5Tw==}
     engines: {node: '>=16 || 14 >=14.17'}
@@ -7732,10 +7501,9 @@ packages:
     resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
     engines: {node: '>=6'}
 
-  tar@7.5.2:
-    resolution: {integrity: sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==}
+  tar@7.5.19:
+    resolution: {integrity: sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==}
     engines: {node: '>=18'}
-    deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
 
   taze@0.18.0:
     resolution: {integrity: sha512-aL8g+4tZvfhsn147u9dRP2eUE2MV+HfJe1sAtSJp46b0Gd8AjyqlJ2uDwnJfM1XNv301Mvh98RkXQw27sco5tQ==}
@@ -7768,12 +7536,6 @@ packages:
   throat@5.0.0:
     resolution: {integrity: sha512-fcwX4mndzpLQKBS1DVYhGAcYaYt7vsHNIvQV+WXMvnow5cgjPphq5CaayLaGsjRdSCKZFNGt7/GYAuXaNOiYCA==}
 
-  tiny-invariant@1.3.3:
-    resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
-
-  tiny-warning@1.0.3:
-    resolution: {integrity: sha512-lBN9zLN/oAf68o3zNXYrdCt1kP8WsiGW8Oo2ka41b2IM5JL/S1CTyX1rW0mb/zSuJun0ZUrDxx4sqvYS2FWzPA==}
-
   tinybench@2.9.0:
     resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}
 
@@ -7819,10 +7581,6 @@ packages:
     resolution: {integrity: sha512-EBJnVBr3dTXdA89WVFoAIPUqkBjxPMwRqsfuo1r240tKFHXv3zgca4+NJib/h6TyvGF7vOawz0jGuryJCdNHrw==}
     engines: {node: '>=20'}
 
-  totalist@3.0.1:
-    resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==}
-    engines: {node: '>=6'}
-
   tough-cookie@4.1.4:
     resolution: {integrity: sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==}
     engines: {node: '>=6'}
@@ -7857,7 +7615,7 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
     peerDependencies:
-      '@babel/core': '>=7.0.0-beta.0 <8'
+      '@babel/core': 7.29.6
       '@jest/types': ^29.0.0
       babel-jest: ^29.0.0
       esbuild: '*'
@@ -7879,6 +7637,7 @@ packages:
   tsconfck@3.1.6:
     resolution: {integrity: sha512-ks6Vjr/jEw0P1gmOVwutM3B7fWxoWBL2KRDb1JfqGVawBmO5UsvmWOQFGHBPl5yxYz4eERr19E6L7NMv+Fej4w==}
     engines: {node: ^18 || >=20}
+    deprecated: unmaintained
     hasBin: true
     peerDependencies:
       typescript: ^5.0.0
@@ -7898,7 +7657,7 @@ packages:
     hasBin: true
     peerDependencies:
       '@swc/core': ^1
-      postcss: ^8.4.12
+      postcss: 8.5.10
       typescript: '>=4.1.0'
     peerDependenciesMeta:
       '@swc/core':
@@ -7913,38 +7672,8 @@ packages:
     engines: {node: '>=18.0.0'}
     hasBin: true
 
-  turbo-darwin-64@2.7.2:
-    resolution: {integrity: sha512-dxY3X6ezcT5vm3coK6VGixbrhplbQMwgNsCsvZamS/+/6JiebqW9DKt4NwpgYXhDY2HdH00I7FWs3wkVuan4rA==}
-    cpu: [x64]
-    os: [darwin]
-
-  turbo-darwin-arm64@2.7.2:
-    resolution: {integrity: sha512-1bXmuwPLqNFt3mzrtYcVx1sdJ8UYb124Bf48nIgcpMCGZy3kDhgxNv1503kmuK/37OGOZbsWSQFU4I08feIuSg==}
-    cpu: [arm64]
-    os: [darwin]
-
-  turbo-linux-64@2.7.2:
-    resolution: {integrity: sha512-kP+TiiMaiPugbRlv57VGLfcjFNsFbo8H64wMBCPV2270Or2TpDCBULMzZrvEsvWFjT3pBFvToYbdp8/Kw0jAQg==}
-    cpu: [x64]
-    os: [linux]
-
-  turbo-linux-arm64@2.7.2:
-    resolution: {integrity: sha512-VDJwQ0+8zjAfbyY6boNaWfP6RIez4ypKHxwkuB6SrWbOSk+vxTyW5/hEjytTwK8w/TsbKVcMDyvpora8tEsRFw==}
-    cpu: [arm64]
-    os: [linux]
-
-  turbo-windows-64@2.7.2:
-    resolution: {integrity: sha512-rPjqQXVnI6A6oxgzNEE8DNb6Vdj2Wwyhfv3oDc+YM3U9P7CAcBIlKv/868mKl4vsBtz4ouWpTQNXG8vljgJO+w==}
-    cpu: [x64]
-    os: [win32]
-
-  turbo-windows-arm64@2.7.2:
-    resolution: {integrity: sha512-tcnHvBhO515OheIFWdxA+qUvZzNqqcHbLVFc1+n+TJ1rrp8prYicQtbtmsiKgMvr/54jb9jOabU62URAobnB7g==}
-    cpu: [arm64]
-    os: [win32]
-
-  turbo@2.7.2:
-    resolution: {integrity: sha512-5JIA5aYBAJSAhrhbyag1ZuMSgUZnHtI+Sq3H8D3an4fL8PeF+L1yYvbEJg47akP1PFfATMf5ehkqFnxfkmuwZQ==}
+  turbo@2.10.4:
+    resolution: {integrity: sha512-GQpduILaKjoaGljw097ScsSyKTtZSY7cZ3bJktzfTkPMyCf3ShKLuXK2IaOEN2Plziml+ArR7WJ1m+V4VbnaKQ==}
     hasBin: true
 
   type-check@0.4.0:
@@ -7992,9 +7721,6 @@ packages:
   ufo@1.6.1:
     resolution: {integrity: sha512-9a4/uxlTWJ4+a5i0ooc1rU7C7YOw3wT+UGqdeNNHWnOF9qcMBgLRS+4IYUqbczewFx4mLEig6gawh7X6mFlEkA==}
 
-  ufo@1.6.3:
-    resolution: {integrity: sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==}
-
   ultracite@5.0.39:
     resolution: {integrity: sha512-yyrftv3h7aIGEWYVfRGWn8fBB6vbCjmTK57LQr48uZsB1r/xs1vEHlwdZe4m7xfH5Bmch6xf7q9aylh0vVtkrQ==}
     hasBin: true
@@ -8012,14 +7738,10 @@ packages:
   undici-types@7.18.2:
     resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
 
-  undici@6.22.0:
-    resolution: {integrity: sha512-hU/10obOIu62MGYjdskASR3CUAiYaFTtC9Pa6vHyf//mAipSvSQg6od2CnJswq7fvzNS3zJhxoRkgNVaHurWKw==}
+  undici@6.27.0:
+    resolution: {integrity: sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==}
     engines: {node: '>=18.17'}
 
-  undici@7.22.0:
-    resolution: {integrity: sha512-RqslV2Us5BrllB+JeiZnK4peryVTndy9Dnqq62S3yYRRTj0tFQCwEniUy2167skdGOy3vqRzEvl1Dm4sV2ReDg==}
-    engines: {node: '>=20.18.1'}
-
   undici@8.5.0:
     resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==}
     engines: {node: '>=22.19.0'}
@@ -8052,10 +7774,6 @@ packages:
     resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
     engines: {node: '>= 0.8'}
 
-  unplugin@2.3.11:
-    resolution: {integrity: sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww==}
-    engines: {node: '>=18.12.0'}
-
   unrs-resolver@1.11.1:
     resolution: {integrity: sha512-bSjt9pjaEBnNiGgc9rUiHGKv5l4/TGzDmYw3RhnkJGtLhbnnA/5qJj7x3dNDCRx/PJxu774LlH8lCOlB4hEfKg==}
 
@@ -8105,13 +7823,12 @@ packages:
     resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
     engines: {node: '>= 0.4.0'}
 
-  uuid@14.0.1:
-    resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
+  uuid@11.1.1:
+    resolution: {integrity: sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==}
     hasBin: true
 
-  uuid@7.0.3:
-    resolution: {integrity: sha512-DPSke0pXhTZgoF/d+WSt2QaKMCFSfx7QegxEWT+JOuHF5aWrKEn0G+ztjuJg/gG8/ItK+rbPCD/yNv8yyih6Cg==}
-    deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
+  uuid@14.0.1:
+    resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
     hasBin: true
 
   v8-to-istanbul@9.3.0:
@@ -8140,13 +7857,13 @@ packages:
   vite-tsconfig-paths@5.1.4:
     resolution: {integrity: sha512-cYj0LRuLV2c2sMqhqhGpaO3LretdtMn/BVX4cPLanIZuwwrkVl+lK84E/miEXkCHWXuq65rhNN4rXsBcOB3S4w==}
     peerDependencies:
-      vite: '*'
+      vite: 7.3.5
     peerDependenciesMeta:
       vite:
         optional: true
 
-  vite@7.3.0:
-    resolution: {integrity: sha512-dZwN5L1VlUBewiP6H9s2+B3e3Jg96D0vzN+Ry73sOefebhYr9f94wwkMNN/9ouoU8pV1BqA1d1zGk8928cx0rg==}
+  vite@7.3.5:
+    resolution: {integrity: sha512-KuOaNhcnGFN2zIPGA7wRmzF+lJA1sea7rHq17aiJ++9lzY1WWG6Jpwqwe1KNbRVPIqHmr8GLYx7jbrQcN/7/ww==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
@@ -8160,7 +7877,7 @@ packages:
       sugarss: ^5.0.0
       terser: ^5.16.0
       tsx: ^4.8.1
-      yaml: ^2.4.2
+      yaml: 2.8.3
     peerDependenciesMeta:
       '@types/node':
         optional: true
@@ -8185,24 +7902,16 @@ packages:
       yaml:
         optional: true
 
-  vitefu@1.1.2:
-    resolution: {integrity: sha512-zpKATdUbzbsycPFBN71nS2uzBUQiVnFoOrr2rvqv34S1lcAgMKKkjWleLGeiJlZ8lwCXvtWaRn7R3ZC16SYRuw==}
-    peerDependencies:
-      vite: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-beta.0
-    peerDependenciesMeta:
-      vite:
-        optional: true
-
-  vitest@3.2.4:
-    resolution: {integrity: sha512-LUCP5ev3GURDysTWiP47wRRUpLKMOfPh+yKTx3kVIEiu5KOMeqzpnYNsKyOoVrULivR8tLcks4+lga33Whn90A==}
+  vitest@3.2.7:
+    resolution: {integrity: sha512-KrxIJ62Fd89gfysR4WotlgZABiz2dqFPgqGzX7s+CwsqLFomRH7777ZcrOD6+WVAh7khPQP41A+BKbpcJFrdEg==}
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
     hasBin: true
     peerDependencies:
       '@edge-runtime/vm': '*'
       '@types/debug': ^4.1.12
       '@types/node': ^18.0.0 || ^20.0.0 || >=22.0.0
-      '@vitest/browser': 3.2.4
-      '@vitest/ui': 3.2.4
+      '@vitest/browser': 3.2.7
+      '@vitest/ui': 3.2.7
       happy-dom: '*'
       jsdom: '*'
     peerDependenciesMeta:
@@ -8237,7 +7946,7 @@ packages:
       '@vitest/ui': 4.1.6
       happy-dom: '*'
       jsdom: '*'
-      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
+      vite: 7.3.5
     peerDependenciesMeta:
       '@edge-runtime/vm':
         optional: true
@@ -8292,19 +8001,11 @@ packages:
     resolution: {integrity: sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==}
     engines: {node: '>=12'}
 
-  webpack-virtual-modules@0.6.2:
-    resolution: {integrity: sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ==}
-
   whatwg-encoding@2.0.0:
     resolution: {integrity: sha512-p41ogyeMUrw3jWclHWTQg1k05DSVXPLcVxRTYsXUk+ZooOCZLcoYgPZ/HL/D/N+uQPOtcp1me1WhBEaX02mhWg==}
     engines: {node: '>=12'}
     deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation
 
-  whatwg-encoding@3.1.1:
-    resolution: {integrity: sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==}
-    engines: {node: '>=18'}
-    deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation
-
   whatwg-fetch@3.6.20:
     resolution: {integrity: sha512-EqhiFU6daOA8kpjOWTL0olhVOF3i7OrFzSYiGsEMB8GcXS+RrzauAERX65xMeNWVqxA6HXH2m69Z9LaKKdisfg==}
 
@@ -8312,10 +8013,6 @@ packages:
     resolution: {integrity: sha512-nt+N2dzIutVRxARx1nghPKGv1xHikU7HKdfafKkLNLindmPU/ch3U31NOCGGA/dmPcmb1VlofO0vnKAcsm0o/Q==}
     engines: {node: '>=12'}
 
-  whatwg-mimetype@4.0.0:
-    resolution: {integrity: sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==}
-    engines: {node: '>=18'}
-
   whatwg-url-without-unicode@8.0.0-3:
     resolution: {integrity: sha512-HoKuzZrUlgpz35YO27XgD28uh/WJH4B0+3ttFqRo//lmq+9T/mIOJ6kqmINI9HpUpz1imRC/nR/lxKpJiv0uig==}
     engines: {node: '>=10'}
@@ -8371,8 +8068,8 @@ packages:
     resolution: {integrity: sha512-7KxauUdBmSdWnmpaGFg+ppNjKF8uNLry8LyzjauQDOVONfFLNKrKvQOxZ/VuTIcS/gge/YNahf5RIIQWTSarlg==}
     engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0}
 
-  ws@6.2.3:
-    resolution: {integrity: sha512-jmTjYU0j60B+vHey6TfR3Z7RD61z/hmxBS3VMSGIrroOWXQEneK1zNuotOUrGyBHQj0yrpsLHPWtigEFd13ndA==}
+  ws@6.2.4:
+    resolution: {integrity: sha512-PNIUUyLI5YpkJZj60YBzX1o0ByQ4ovvfmq9N/Kig/PAYbVlGyz4R6G0SEWrD0O9acc0sT2+IdMBVLFv8FSi0Nw==}
     peerDependencies:
       bufferutil: ^4.0.1
       utf-8-validate: ^5.0.2
@@ -8382,8 +8079,8 @@ packages:
       utf-8-validate:
         optional: true
 
-  ws@7.5.10:
-    resolution: {integrity: sha512-+dbF1tHwZpXcbOJdVOkzLDxZP1ailvSxM6ZweXTegylPny803bFhA+vqBYw4s31NSAk4S2Qz+AKXK9a4wkdjcQ==}
+  ws@7.5.11:
+    resolution: {integrity: sha512-zS54Oen9bITtp7kp2XM3AydrCIq1D+HwJOuH+c+e4LfpL/lotP5osijd+UoMnxwAam1GN8R4KtLAyIrIcBNpiA==}
     engines: {node: '>=8.3.0'}
     peerDependencies:
       bufferutil: ^4.0.1
@@ -8394,30 +8091,6 @@ packages:
       utf-8-validate:
         optional: true
 
-  ws@8.18.3:
-    resolution: {integrity: sha512-PEIGCY5tSlUt50cqyMXfCzX+oOPqN0vuGqWzbcJ2xvnkzkq46oOpz7dQaTDBdfICb4N14+GARUDw2XV2N4tvzg==}
-    engines: {node: '>=10.0.0'}
-    peerDependencies:
-      bufferutil: ^4.0.1
-      utf-8-validate: '>=5.0.2'
-    peerDependenciesMeta:
-      bufferutil:
-        optional: true
-      utf-8-validate:
-        optional: true
-
-  ws@8.19.0:
-    resolution: {integrity: sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==}
-    engines: {node: '>=10.0.0'}
-    peerDependencies:
-      bufferutil: ^4.0.1
-      utf-8-validate: '>=5.0.2'
-    peerDependenciesMeta:
-      bufferutil:
-        optional: true
-      utf-8-validate:
-        optional: true
-
   ws@8.21.0:
     resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
     engines: {node: '>=10.0.0'}
@@ -8442,10 +8115,6 @@ packages:
     resolution: {integrity: sha512-eLTh0kA8uHceqesPqSE+VvO1CDDJWMwlQfB6LuN6T8w6MaDJ8Txm8P7s5cHD0miF0V+GGTZrDQfxPZQVsur33w==}
     engines: {node: '>=4.0.0'}
 
-  xmlbuilder2@4.0.3:
-    resolution: {integrity: sha512-bx8Q1STctnNaaDymWnkfQLKofs0mGNN7rLLapJlGuV3VlvegD7Ls4ggMjE3aUSWItCCzU0PEv45lI87iSigiCA==}
-    engines: {node: '>=20.0'}
-
   xmlbuilder@11.0.1:
     resolution: {integrity: sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==}
     engines: {node: '>=4.0'}
@@ -8472,8 +8141,8 @@ packages:
     resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
     engines: {node: '>= 6'}
 
-  yaml@2.8.2:
-    resolution: {integrity: sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==}
+  yaml@2.8.3:
+    resolution: {integrity: sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==}
     engines: {node: '>= 14.6'}
     hasBin: true
 
@@ -8494,9 +8163,6 @@ packages:
     resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
     engines: {node: '>=10'}
 
-  zod@3.25.76:
-    resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
-
   zod@4.3.6:
     resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
 
@@ -8508,9 +8174,9 @@ snapshots:
 
   '@antfu/utils@8.1.1': {}
 
-  '@babel/cli@7.28.3(@babel/core@7.29.0)':
+  '@babel/cli@7.28.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@jridgewell/trace-mapping': 0.3.31
       commander: 6.2.1
       convert-source-map: 2.0.0
@@ -8526,22 +8192,15 @@ snapshots:
     dependencies:
       '@babel/highlight': 7.25.9
 
-  '@babel/code-frame@7.26.2':
-    dependencies:
-      '@babel/helper-validator-identifier': 7.28.5
-      js-tokens: 4.0.0
-      picocolors: 1.1.1
-    optional: true
-
-  '@babel/code-frame@7.27.1':
+  '@babel/code-frame@7.29.0':
     dependencies:
       '@babel/helper-validator-identifier': 7.28.5
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
-  '@babel/code-frame@7.29.0':
+  '@babel/code-frame@7.29.7':
     dependencies:
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
@@ -8549,34 +8208,14 @@ snapshots:
 
   '@babel/compat-data@7.29.0': {}
 
-  '@babel/core@7.28.5':
-    dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/generator': 7.28.5
-      '@babel/helper-compilation-targets': 7.27.2
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.28.5)
-      '@babel/helpers': 7.28.4
-      '@babel/parser': 7.28.5
-      '@babel/template': 7.27.2
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
-      '@jridgewell/remapping': 2.3.5
-      convert-source-map: 2.0.0
-      debug: 4.4.3
-      gensync: 1.0.0-beta.2
-      json5: 2.2.3
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/core@7.29.0':
+  '@babel/core@7.29.6':
     dependencies:
       '@babel/code-frame': 7.29.0
-      '@babel/generator': 7.29.1
+      '@babel/generator': 7.29.7
       '@babel/helper-compilation-targets': 7.28.6
-      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0)
-      '@babel/helpers': 7.28.6
-      '@babel/parser': 7.29.0
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
+      '@babel/helpers': 7.29.7
+      '@babel/parser': 7.29.7
       '@babel/template': 7.28.6
       '@babel/traverse': 7.29.0
       '@babel/types': 7.29.0
@@ -8589,25 +8228,25 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/generator@7.28.5':
+  '@babel/generator@7.29.1':
     dependencies:
-      '@babel/parser': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
       '@jridgewell/gen-mapping': 0.3.13
       '@jridgewell/trace-mapping': 0.3.31
       jsesc: 3.1.0
 
-  '@babel/generator@7.29.1':
+  '@babel/generator@7.29.7':
     dependencies:
-      '@babel/parser': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
       '@jridgewell/gen-mapping': 0.3.13
       '@jridgewell/trace-mapping': 0.3.31
       jsesc: 3.1.0
 
   '@babel/helper-annotate-as-pure@7.27.3':
     dependencies:
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.0
 
   '@babel/helper-compilation-targets@7.27.2':
     dependencies:
@@ -8625,87 +8264,42 @@ snapshots:
       lru-cache: 5.1.1
       semver: 6.3.1
 
-  '@babel/helper-create-class-features-plugin@7.28.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-member-expression-to-functions': 7.28.5
-      '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.28.5)
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/traverse': 7.28.5
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-create-class-features-plugin@7.28.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-member-expression-to-functions': 7.28.5
-      '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.0)
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/traverse': 7.28.5
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-create-class-features-plugin@7.28.6(@babel/core@7.28.5)':
+  '@babel/helper-create-class-features-plugin@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-member-expression-to-functions': 7.28.5
       '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/helper-replace-supers': 7.28.6(@babel/core@7.28.5)
+      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.6)
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
       '@babel/traverse': 7.29.0
       semver: 6.3.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-create-class-features-plugin@7.28.6(@babel/core@7.29.0)':
+  '@babel/helper-create-class-features-plugin@7.28.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-member-expression-to-functions': 7.28.5
       '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/helper-replace-supers': 7.28.6(@babel/core@7.29.0)
+      '@babel/helper-replace-supers': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
       '@babel/traverse': 7.29.0
       semver: 6.3.1
     transitivePeerDependencies:
       - supports-color
-    optional: true
 
-  '@babel/helper-create-regexp-features-plugin@7.28.5(@babel/core@7.28.5)':
+  '@babel/helper-create-regexp-features-plugin@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       regexpu-core: 6.4.0
       semver: 6.3.1
 
-  '@babel/helper-create-regexp-features-plugin@7.28.5(@babel/core@7.29.0)':
+  '@babel/helper-define-polyfill-provider@0.6.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-annotate-as-pure': 7.27.3
-      regexpu-core: 6.4.0
-      semver: 6.3.1
-
-  '@babel/helper-define-polyfill-provider@0.6.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-compilation-targets': 7.28.6
-      '@babel/helper-plugin-utils': 7.28.6
-      debug: 4.4.3
-      lodash.debounce: 4.0.8
-      resolve: 1.22.11
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-define-polyfill-provider@0.6.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-compilation-targets': 7.28.6
       '@babel/helper-plugin-utils': 7.28.6
       debug: 4.4.3
@@ -8737,36 +8331,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-module-transforms@7.28.3(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-imports': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
-      '@babel/traverse': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-module-transforms@7.28.3(@babel/core@7.29.0)':
+  '@babel/helper-module-transforms@7.28.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-module-imports': 7.27.1
       '@babel/helper-validator-identifier': 7.28.5
-      '@babel/traverse': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-module-transforms@7.28.6(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-imports': 7.28.6
-      '@babel/helper-validator-identifier': 7.28.5
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.0)':
+  '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-module-imports': 7.28.6
       '@babel/helper-validator-identifier': 7.28.5
       '@babel/traverse': 7.29.0
@@ -8781,60 +8357,32 @@ snapshots:
 
   '@babel/helper-plugin-utils@7.28.6': {}
 
-  '@babel/helper-remap-async-to-generator@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-wrap-function': 7.28.3
-      '@babel/traverse': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-remap-async-to-generator@7.27.1(@babel/core@7.29.0)':
+  '@babel/helper-remap-async-to-generator@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-wrap-function': 7.28.3
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-replace-supers@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-member-expression-to-functions': 7.28.5
-      '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/traverse': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-replace-supers@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-member-expression-to-functions': 7.28.5
-      '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/traverse': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-replace-supers@7.28.6(@babel/core@7.28.5)':
+  '@babel/helper-replace-supers@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-member-expression-to-functions': 7.28.5
       '@babel/helper-optimise-call-expression': 7.27.1
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-replace-supers@7.28.6(@babel/core@7.29.0)':
+  '@babel/helper-replace-supers@7.28.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-member-expression-to-functions': 7.28.5
       '@babel/helper-optimise-call-expression': 7.27.1
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
-    optional: true
 
   '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
     dependencies:
@@ -8845,8 +8393,12 @@ snapshots:
 
   '@babel/helper-string-parser@7.27.1': {}
 
+  '@babel/helper-string-parser@7.29.7': {}
+
   '@babel/helper-validator-identifier@7.28.5': {}
 
+  '@babel/helper-validator-identifier@7.29.7': {}
+
   '@babel/helper-validator-option@7.27.1': {}
 
   '@babel/helper-wrap-function@7.28.3':
@@ -8857,15 +8409,10 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helpers@7.28.4':
-    dependencies:
-      '@babel/template': 7.27.2
-      '@babel/types': 7.28.5
-
-  '@babel/helpers@7.28.6':
+  '@babel/helpers@7.29.7':
     dependencies:
-      '@babel/template': 7.28.6
-      '@babel/types': 7.29.0
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.7
 
   '@babel/highlight@7.25.9':
     dependencies:
@@ -8874,1205 +8421,735 @@ snapshots:
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
-  '@babel/parser@7.28.5':
-    dependencies:
-      '@babel/types': 7.28.5
-
   '@babel/parser@7.29.0':
     dependencies:
       '@babel/types': 7.29.0
 
-  '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.28.5(@babel/core@7.29.0)':
+  '@babel/parser@7.29.7':
+    dependencies:
+      '@babel/types': 7.29.7
+
+  '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.28.3(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/traverse': 7.28.5
+      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-proposal-decorators@7.28.0(@babel/core@7.28.5)':
+  '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.28.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-syntax-decorators': 7.27.1(@babel/core@7.28.5)
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-proposal-decorators@7.28.0(@babel/core@7.29.0)':
+  '@babel/plugin-proposal-decorators@7.28.0(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-syntax-decorators': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-syntax-decorators': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-proposal-export-default-from@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-proposal-export-default-from@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-proposal-export-default-from@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/core': 7.29.6
 
-  '@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
+      '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-async-generators@7.8.4(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-bigint@7.8.3(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-decorators@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/core': 7.29.6
+      '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-dynamic-import@7.8.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/core': 7.29.6
+      '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-class-properties@7.12.13(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-export-default-from@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/core': 7.29.6
+      '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-flow@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-class-static-block@7.14.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-decorators@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-decorators@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-dynamic-import@7.8.3(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-dynamic-import@7.8.3(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-export-default-from@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-export-default-from@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-flow@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-flow@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-import-assertions@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-import-assertions@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-import-attributes@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-import-attributes@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-import-attributes@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-jsx@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-jsx@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-jsx@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
-    optional: true
 
-  '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-object-rest-spread@7.8.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-optional-catch-binding@7.8.3(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-top-level-await@7.14.5(@babel/core@7.29.0)':
+  '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-syntax-unicode-sets-regex@7.18.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-    optional: true
-
-  '@babel/plugin-syntax-unicode-sets-regex@7.18.6(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-arrow-functions@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-arrow-functions@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-arrow-functions@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-async-generator-functions@7.28.0(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.28.5)
-      '@babel/traverse': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-async-generator-functions@7.28.0(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.0)
-      '@babel/traverse': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-async-to-generator@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-async-generator-functions@7.28.0(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-imports': 7.27.1
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.28.5)
+      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.6)
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-async-to-generator@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-async-to-generator@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-module-imports': 7.27.1
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-block-scoped-functions@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-block-scoping@7.28.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-block-scoping@7.28.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-class-properties@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.28.5)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-class-properties@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-block-scoped-functions@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
 
-  '@babel/plugin-transform-class-static-block@7.28.3(@babel/core@7.28.5)':
+  '@babel/plugin-transform-block-scoping@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
 
-  '@babel/plugin-transform-class-static-block@7.28.3(@babel/core@7.29.0)':
+  '@babel/plugin-transform-class-properties@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-classes@7.28.4(@babel/core@7.28.5)':
+  '@babel/plugin-transform-class-static-block@7.28.3(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-compilation-targets': 7.27.2
-      '@babel/helper-globals': 7.28.0
+      '@babel/core': 7.29.6
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.28.5)
-      '@babel/traverse': 7.28.5
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-classes@7.28.4(@babel/core@7.29.0)':
+  '@babel/plugin-transform-classes@7.28.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/helper-compilation-targets': 7.28.6
       '@babel/helper-globals': 7.28.0
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.0)
-      '@babel/traverse': 7.28.5
+      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.6)
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-computed-properties@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/template': 7.27.2
-
-  '@babel/plugin-transform-computed-properties@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/template': 7.27.2
-
-  '@babel/plugin-transform-destructuring@7.28.5(@babel/core@7.28.5)':
+  '@babel/plugin-transform-computed-properties@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/traverse': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
+      '@babel/template': 7.28.6
 
-  '@babel/plugin-transform-destructuring@7.28.5(@babel/core@7.29.0)':
+  '@babel/plugin-transform-destructuring@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-dotall-regex@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-dotall-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-duplicate-keys@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-duplicate-keys@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-dynamic-import@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-dynamic-import@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-explicit-resource-management@7.28.0(@babel/core@7.29.0)':
+  '@babel/plugin-transform-explicit-resource-management@7.28.0(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-exponentiation-operator@7.28.5(@babel/core@7.29.0)':
+  '@babel/plugin-transform-exponentiation-operator@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-export-namespace-from@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-export-namespace-from@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-export-namespace-from@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-flow-strip-types@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
+      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.29.6)
 
-  '@babel/plugin-transform-flow-strip-types@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-for-of@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.28.5)
-
-  '@babel/plugin-transform-flow-strip-types@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.29.0)
-
-  '@babel/plugin-transform-for-of@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-for-of@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-function-name@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-function-name@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-compilation-targets': 7.27.2
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/traverse': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-function-name@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/core': 7.29.6
+      '@babel/helper-compilation-targets': 7.28.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-json-strings@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-literals@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-json-strings@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-literals@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-logical-assignment-operators@7.28.5(@babel/core@7.28.5)':
+  '@babel/plugin-transform-logical-assignment-operators@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-logical-assignment-operators@7.28.5(@babel/core@7.29.0)':
+  '@babel/plugin-transform-member-expression-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-member-expression-literals@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-modules-amd@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-modules-amd@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-modules-commonjs@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-modules-commonjs@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
+      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-modules-commonjs@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-modules-commonjs@7.28.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
-      '@babel/helper-plugin-utils': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-modules-commonjs@7.28.6(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.28.6
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-modules-commonjs@7.28.6(@babel/core@7.29.0)':
+  '@babel/plugin-transform-modules-systemjs@7.29.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.28.6
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@babel/plugin-transform-modules-systemjs@7.28.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
-      '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-validator-identifier': 7.28.5
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-modules-umd@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-modules-umd@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-named-capturing-groups-regex@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-named-capturing-groups-regex@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-new-target@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-nullish-coalescing-operator@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-nullish-coalescing-operator@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-named-capturing-groups-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-numeric-separator@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-new-target@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-numeric-separator@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-nullish-coalescing-operator@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-object-rest-spread@7.28.4(@babel/core@7.28.5)':
+  '@babel/plugin-transform-numeric-separator@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.28.5)
-      '@babel/traverse': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
 
-  '@babel/plugin-transform-object-rest-spread@7.28.4(@babel/core@7.29.0)':
+  '@babel/plugin-transform-object-rest-spread@7.28.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-compilation-targets': 7.27.2
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.6)
       '@babel/traverse': 7.28.5
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-object-super@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-object-super@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.0)
+      '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-optional-catch-binding@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-optional-catch-binding@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-optional-catch-binding@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-optional-chaining@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-optional-chaining@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-optional-chaining@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
-    optional: true
 
-  '@babel/plugin-transform-optional-chaining@7.28.5(@babel/core@7.28.5)':
+  '@babel/plugin-transform-optional-chaining@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-optional-chaining@7.28.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-parameters@7.27.7(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-parameters@7.27.7(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-private-methods@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-parameters@7.27.7(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
 
-  '@babel/plugin-transform-private-methods@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-private-methods@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-private-property-in-object@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-private-property-in-object@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-private-property-in-object@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-property-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
 
-  '@babel/plugin-transform-property-literals@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-react-display-name@7.28.0(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-react-display-name@7.28.0(@babel/core@7.28.5)':
+  '@babel/plugin-transform-react-jsx-development@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-react-display-name@7.28.0(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-react-jsx-development@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-react-jsx-development@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-transform-react-jsx@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-module-imports': 7.27.1
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/types': 7.28.5
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-react-jsx@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-react-jsx@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-module-imports': 7.27.1
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.0)
-      '@babel/types': 7.28.5
+      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.6)
+      '@babel/types': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-react-pure-annotations@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-react-pure-annotations@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-react-pure-annotations@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-regenerator@7.28.4(@babel/core@7.28.5)':
+  '@babel/plugin-transform-regenerator@7.28.4(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-regenerator@7.28.4(@babel/core@7.29.0)':
+  '@babel/plugin-transform-regexp-modifiers@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-regexp-modifiers@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-reserved-words@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-reserved-words@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-runtime@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-runtime@7.28.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-module-imports': 7.27.1
       '@babel/helper-plugin-utils': 7.27.1
-      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.28.5)
-      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.28.5)
-      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.28.5)
+      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.29.6)
+      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.29.6)
+      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.29.6)
       semver: 6.3.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-runtime@7.28.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-module-imports': 7.27.1
-      '@babel/helper-plugin-utils': 7.27.1
-      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.29.0)
-      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.29.0)
-      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.29.0)
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-shorthand-properties@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-shorthand-properties@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-spread@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-shorthand-properties@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-    transitivePeerDependencies:
-      - supports-color
 
-  '@babel/plugin-transform-spread@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-spread@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-sticky-regex@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-sticky-regex@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-template-literals@7.27.1(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-
-  '@babel/plugin-transform-template-literals@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-sticky-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-typeof-symbol@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-template-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-typescript@7.28.5(@babel/core@7.28.5)':
+  '@babel/plugin-transform-typeof-symbol@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.28.5)
-    transitivePeerDependencies:
-      - supports-color
 
-  '@babel/plugin-transform-typescript@7.28.5(@babel/core@7.29.0)':
+  '@babel/plugin-transform-typescript@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-typescript@7.28.6(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-create-class-features-plugin': 7.28.6(@babel/core@7.28.5)
-      '@babel/helper-plugin-utils': 7.28.6
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.28.5)
+      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-typescript@7.28.6(@babel/core@7.29.0)':
+  '@babel/plugin-transform-typescript@7.28.6(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-create-class-features-plugin': 7.28.6(@babel/core@7.29.0)
+      '@babel/helper-create-class-features-plugin': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
-    optional: true
-
-  '@babel/plugin-transform-unicode-escapes@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-unicode-property-regex@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-unicode-escapes@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-unicode-regex@7.27.1(@babel/core@7.28.5)':
+  '@babel/plugin-transform-unicode-property-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.28.5)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-unicode-regex@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-unicode-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/plugin-transform-unicode-sets-regex@7.27.1(@babel/core@7.29.0)':
+  '@babel/plugin-transform-unicode-sets-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
 
-  '@babel/preset-env@7.28.5(@babel/core@7.29.0)':
+  '@babel/preset-env@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/compat-data': 7.28.5
-      '@babel/core': 7.29.0
-      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/core': 7.29.6
+      '@babel/helper-compilation-targets': 7.28.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-bugfix-firefox-class-in-computed-class-key': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-bugfix-safari-class-field-initializer-scope': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly': 7.28.3(@babel/core@7.29.0)
-      '@babel/plugin-proposal-private-property-in-object': 7.21.0-placeholder-for-preset-env.2(@babel/core@7.29.0)
-      '@babel/plugin-syntax-import-assertions': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-unicode-sets-regex': 7.18.6(@babel/core@7.29.0)
-      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.29.0)
-      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-block-scoped-functions': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.0)
-      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-dotall-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-duplicate-keys': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-duplicate-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-dynamic-import': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-explicit-resource-management': 7.28.0(@babel/core@7.29.0)
-      '@babel/plugin-transform-exponentiation-operator': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-json-strings': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-member-expression-literals': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-amd': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-systemjs': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-umd': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-new-target': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-object-super': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-property-literals': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-regexp-modifiers': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-reserved-words': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-typeof-symbol': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-unicode-escapes': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-unicode-property-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-unicode-sets-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/preset-modules': 0.1.6-no-external-plugins(@babel/core@7.29.0)
-      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.29.0)
-      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.29.0)
-      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.29.0)
+      '@babel/plugin-bugfix-firefox-class-in-computed-class-key': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-bugfix-safari-class-field-initializer-scope': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly': 7.28.3(@babel/core@7.29.6)
+      '@babel/plugin-proposal-private-property-in-object': 7.21.0-placeholder-for-preset-env.2(@babel/core@7.29.6)
+      '@babel/plugin-syntax-import-assertions': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-unicode-sets-regex': 7.18.6(@babel/core@7.29.6)
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-block-scoped-functions': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.6)
+      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-dotall-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-duplicate-keys': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-duplicate-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-dynamic-import': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-explicit-resource-management': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-transform-exponentiation-operator': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-json-strings': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-member-expression-literals': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-amd': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-systemjs': 7.29.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-umd': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-new-target': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-object-super': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-property-literals': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-regexp-modifiers': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-reserved-words': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-typeof-symbol': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-unicode-escapes': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-unicode-property-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-unicode-sets-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/preset-modules': 0.1.6-no-external-plugins(@babel/core@7.29.6)
+      babel-plugin-polyfill-corejs2: 0.4.14(@babel/core@7.29.6)
+      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@7.29.6)
+      babel-plugin-polyfill-regenerator: 0.6.5(@babel/core@7.29.6)
       core-js-compat: 3.47.0
       semver: 6.3.1
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/preset-modules@0.1.6-no-external-plugins(@babel/core@7.29.0)':
+  '@babel/preset-modules@0.1.6-no-external-plugins(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.0
       esutils: 2.0.3
 
-  '@babel/preset-react@7.28.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-jsx-development': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-pure-annotations': 7.27.1(@babel/core@7.28.5)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/preset-react@7.28.5(@babel/core@7.29.0)':
+  '@babel/preset-react@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx-development': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-pure-annotations': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-development': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-pure-annotations': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/preset-typescript@7.27.1(@babel/core@7.28.5)':
+  '@babel/preset-typescript@7.27.1(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-commonjs': 7.28.6(@babel/core@7.28.5)
-      '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.28.5)
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.28.6(@babel/core@7.29.6)
+      '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/preset-typescript@7.27.1(@babel/core@7.29.0)':
+  '@babel/preset-typescript@7.28.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-      '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-commonjs': 7.28.6(@babel/core@7.29.0)
-      '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.29.0)
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@babel/preset-typescript@7.28.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.28.5)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/preset-typescript@7.28.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.29.0)
+      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
@@ -10080,24 +9157,30 @@ snapshots:
 
   '@babel/template@7.27.2':
     dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/parser': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/code-frame': 7.29.0
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
 
   '@babel/template@7.28.6':
     dependencies:
       '@babel/code-frame': 7.29.0
-      '@babel/parser': 7.29.0
+      '@babel/parser': 7.29.7
       '@babel/types': 7.29.0
 
+  '@babel/template@7.29.7':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+
   '@babel/traverse@7.28.5':
     dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/generator': 7.28.5
+      '@babel/code-frame': 7.29.0
+      '@babel/generator': 7.29.1
       '@babel/helper-globals': 7.28.0
-      '@babel/parser': 7.28.5
-      '@babel/template': 7.27.2
-      '@babel/types': 7.28.5
+      '@babel/parser': 7.29.0
+      '@babel/template': 7.28.6
+      '@babel/types': 7.29.0
       debug: 4.4.3
     transitivePeerDependencies:
       - supports-color
@@ -10105,9 +9188,9 @@ snapshots:
   '@babel/traverse@7.29.0':
     dependencies:
       '@babel/code-frame': 7.29.0
-      '@babel/generator': 7.29.1
+      '@babel/generator': 7.29.7
       '@babel/helper-globals': 7.28.0
-      '@babel/parser': 7.29.0
+      '@babel/parser': 7.29.7
       '@babel/template': 7.28.6
       '@babel/types': 7.29.0
       debug: 4.4.3
@@ -10121,31 +9204,68 @@ snapshots:
 
   '@babel/types@7.29.0':
     dependencies:
-      '@babel/helper-string-parser': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-string-parser': 7.27.1
+      '@babel/helper-validator-identifier': 7.28.5
+
+  '@babel/types@7.29.7':
+    dependencies:
+      '@babel/helper-string-parser': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
+
+  '@bcoe/v8-coverage@0.2.3': {}
+
+  '@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)':
+    dependencies:
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.1
+      '@opentelemetry/semantic-conventions': 1.43.0
+      '@standard-schema/spec': 1.1.0
+      better-call: 1.3.7(zod@4.3.6)
+      jose: 6.1.3
+      kysely: 0.28.17
+      nanostores: 1.4.0
+      zod: 4.3.6
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+
+  '@better-auth/drizzle-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+    dependencies:
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+
+  '@better-auth/kysely-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)':
+    dependencies:
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+    optionalDependencies:
+      kysely: 0.28.17
+
+  '@better-auth/memory-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+    dependencies:
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
 
-  '@bcoe/v8-coverage@0.2.3': {}
+  '@better-auth/mongo-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+    dependencies:
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
 
-  '@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)':
+  '@better-auth/prisma-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/utils': 0.3.0
-      '@better-fetch/fetch': 1.1.21
-      '@standard-schema/spec': 1.1.0
-      better-call: 1.1.8(zod@4.3.6)
-      jose: 6.1.3
-      kysely: 0.28.9
-      nanostores: 1.1.0
-      zod: 4.3.6
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
 
-  '@better-auth/telemetry@1.4.18(@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0))':
+  '@better-auth/telemetry@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)':
     dependencies:
-      '@better-auth/core': 1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)
-      '@better-auth/utils': 0.3.0
-      '@better-fetch/fetch': 1.1.21
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.1
 
-  '@better-auth/utils@0.3.0': {}
+  '@better-auth/utils@0.4.2':
+    dependencies:
+      '@noble/hashes': 2.0.1
 
-  '@better-fetch/fetch@1.1.21': {}
+  '@better-fetch/fetch@1.3.1': {}
 
   '@biomejs/biome@2.3.11':
     optionalDependencies:
@@ -10224,15 +9344,15 @@ snapshots:
       msgpackr: 1.11.8
       multipasta: 0.2.7
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.4)':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   '@emnapi/core@1.7.1':
     dependencies:
@@ -10245,11 +9365,6 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@emnapi/runtime@1.8.1':
-    dependencies:
-      tslib: 2.8.1
-    optional: true
-
   '@emnapi/wasi-threads@1.1.0':
     dependencies:
       tslib: 2.8.1
@@ -10257,7 +9372,7 @@ snapshots:
 
   '@esbuild-kit/core-utils@3.3.2':
     dependencies:
-      esbuild: 0.18.20
+      esbuild: 0.25.0
       source-map-support: 0.5.21
 
   '@esbuild-kit/esm-loader@2.6.5':
@@ -10265,6 +9380,9 @@ snapshots:
       '@esbuild-kit/core-utils': 3.3.2
       get-tsconfig: 4.13.0
 
+  '@esbuild/aix-ppc64@0.25.0':
+    optional: true
+
   '@esbuild/aix-ppc64@0.25.12':
     optional: true
 
@@ -10274,10 +9392,13 @@ snapshots:
   '@esbuild/aix-ppc64@0.27.7':
     optional: true
 
+  '@esbuild/aix-ppc64@0.28.1':
+    optional: true
+
   '@esbuild/android-arm64@0.17.19':
     optional: true
 
-  '@esbuild/android-arm64@0.18.20':
+  '@esbuild/android-arm64@0.25.0':
     optional: true
 
   '@esbuild/android-arm64@0.25.12':
@@ -10289,10 +9410,13 @@ snapshots:
   '@esbuild/android-arm64@0.27.7':
     optional: true
 
+  '@esbuild/android-arm64@0.28.1':
+    optional: true
+
   '@esbuild/android-arm@0.17.19':
     optional: true
 
-  '@esbuild/android-arm@0.18.20':
+  '@esbuild/android-arm@0.25.0':
     optional: true
 
   '@esbuild/android-arm@0.25.12':
@@ -10304,10 +9428,13 @@ snapshots:
   '@esbuild/android-arm@0.27.7':
     optional: true
 
+  '@esbuild/android-arm@0.28.1':
+    optional: true
+
   '@esbuild/android-x64@0.17.19':
     optional: true
 
-  '@esbuild/android-x64@0.18.20':
+  '@esbuild/android-x64@0.25.0':
     optional: true
 
   '@esbuild/android-x64@0.25.12':
@@ -10319,10 +9446,13 @@ snapshots:
   '@esbuild/android-x64@0.27.7':
     optional: true
 
+  '@esbuild/android-x64@0.28.1':
+    optional: true
+
   '@esbuild/darwin-arm64@0.17.19':
     optional: true
 
-  '@esbuild/darwin-arm64@0.18.20':
+  '@esbuild/darwin-arm64@0.25.0':
     optional: true
 
   '@esbuild/darwin-arm64@0.25.12':
@@ -10334,10 +9464,13 @@ snapshots:
   '@esbuild/darwin-arm64@0.27.7':
     optional: true
 
+  '@esbuild/darwin-arm64@0.28.1':
+    optional: true
+
   '@esbuild/darwin-x64@0.17.19':
     optional: true
 
-  '@esbuild/darwin-x64@0.18.20':
+  '@esbuild/darwin-x64@0.25.0':
     optional: true
 
   '@esbuild/darwin-x64@0.25.12':
@@ -10349,10 +9482,13 @@ snapshots:
   '@esbuild/darwin-x64@0.27.7':
     optional: true
 
+  '@esbuild/darwin-x64@0.28.1':
+    optional: true
+
   '@esbuild/freebsd-arm64@0.17.19':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.18.20':
+  '@esbuild/freebsd-arm64@0.25.0':
     optional: true
 
   '@esbuild/freebsd-arm64@0.25.12':
@@ -10364,10 +9500,13 @@ snapshots:
   '@esbuild/freebsd-arm64@0.27.7':
     optional: true
 
+  '@esbuild/freebsd-arm64@0.28.1':
+    optional: true
+
   '@esbuild/freebsd-x64@0.17.19':
     optional: true
 
-  '@esbuild/freebsd-x64@0.18.20':
+  '@esbuild/freebsd-x64@0.25.0':
     optional: true
 
   '@esbuild/freebsd-x64@0.25.12':
@@ -10379,10 +9518,13 @@ snapshots:
   '@esbuild/freebsd-x64@0.27.7':
     optional: true
 
+  '@esbuild/freebsd-x64@0.28.1':
+    optional: true
+
   '@esbuild/linux-arm64@0.17.19':
     optional: true
 
-  '@esbuild/linux-arm64@0.18.20':
+  '@esbuild/linux-arm64@0.25.0':
     optional: true
 
   '@esbuild/linux-arm64@0.25.12':
@@ -10394,10 +9536,13 @@ snapshots:
   '@esbuild/linux-arm64@0.27.7':
     optional: true
 
+  '@esbuild/linux-arm64@0.28.1':
+    optional: true
+
   '@esbuild/linux-arm@0.17.19':
     optional: true
 
-  '@esbuild/linux-arm@0.18.20':
+  '@esbuild/linux-arm@0.25.0':
     optional: true
 
   '@esbuild/linux-arm@0.25.12':
@@ -10409,10 +9554,13 @@ snapshots:
   '@esbuild/linux-arm@0.27.7':
     optional: true
 
+  '@esbuild/linux-arm@0.28.1':
+    optional: true
+
   '@esbuild/linux-ia32@0.17.19':
     optional: true
 
-  '@esbuild/linux-ia32@0.18.20':
+  '@esbuild/linux-ia32@0.25.0':
     optional: true
 
   '@esbuild/linux-ia32@0.25.12':
@@ -10424,10 +9572,13 @@ snapshots:
   '@esbuild/linux-ia32@0.27.7':
     optional: true
 
+  '@esbuild/linux-ia32@0.28.1':
+    optional: true
+
   '@esbuild/linux-loong64@0.17.19':
     optional: true
 
-  '@esbuild/linux-loong64@0.18.20':
+  '@esbuild/linux-loong64@0.25.0':
     optional: true
 
   '@esbuild/linux-loong64@0.25.12':
@@ -10439,10 +9590,13 @@ snapshots:
   '@esbuild/linux-loong64@0.27.7':
     optional: true
 
+  '@esbuild/linux-loong64@0.28.1':
+    optional: true
+
   '@esbuild/linux-mips64el@0.17.19':
     optional: true
 
-  '@esbuild/linux-mips64el@0.18.20':
+  '@esbuild/linux-mips64el@0.25.0':
     optional: true
 
   '@esbuild/linux-mips64el@0.25.12':
@@ -10454,10 +9608,13 @@ snapshots:
   '@esbuild/linux-mips64el@0.27.7':
     optional: true
 
+  '@esbuild/linux-mips64el@0.28.1':
+    optional: true
+
   '@esbuild/linux-ppc64@0.17.19':
     optional: true
 
-  '@esbuild/linux-ppc64@0.18.20':
+  '@esbuild/linux-ppc64@0.25.0':
     optional: true
 
   '@esbuild/linux-ppc64@0.25.12':
@@ -10469,10 +9626,13 @@ snapshots:
   '@esbuild/linux-ppc64@0.27.7':
     optional: true
 
+  '@esbuild/linux-ppc64@0.28.1':
+    optional: true
+
   '@esbuild/linux-riscv64@0.17.19':
     optional: true
 
-  '@esbuild/linux-riscv64@0.18.20':
+  '@esbuild/linux-riscv64@0.25.0':
     optional: true
 
   '@esbuild/linux-riscv64@0.25.12':
@@ -10484,10 +9644,13 @@ snapshots:
   '@esbuild/linux-riscv64@0.27.7':
     optional: true
 
+  '@esbuild/linux-riscv64@0.28.1':
+    optional: true
+
   '@esbuild/linux-s390x@0.17.19':
     optional: true
 
-  '@esbuild/linux-s390x@0.18.20':
+  '@esbuild/linux-s390x@0.25.0':
     optional: true
 
   '@esbuild/linux-s390x@0.25.12':
@@ -10499,10 +9662,13 @@ snapshots:
   '@esbuild/linux-s390x@0.27.7':
     optional: true
 
+  '@esbuild/linux-s390x@0.28.1':
+    optional: true
+
   '@esbuild/linux-x64@0.17.19':
     optional: true
 
-  '@esbuild/linux-x64@0.18.20':
+  '@esbuild/linux-x64@0.25.0':
     optional: true
 
   '@esbuild/linux-x64@0.25.12':
@@ -10514,6 +9680,12 @@ snapshots:
   '@esbuild/linux-x64@0.27.7':
     optional: true
 
+  '@esbuild/linux-x64@0.28.1':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.25.0':
+    optional: true
+
   '@esbuild/netbsd-arm64@0.25.12':
     optional: true
 
@@ -10523,10 +9695,13 @@ snapshots:
   '@esbuild/netbsd-arm64@0.27.7':
     optional: true
 
+  '@esbuild/netbsd-arm64@0.28.1':
+    optional: true
+
   '@esbuild/netbsd-x64@0.17.19':
     optional: true
 
-  '@esbuild/netbsd-x64@0.18.20':
+  '@esbuild/netbsd-x64@0.25.0':
     optional: true
 
   '@esbuild/netbsd-x64@0.25.12':
@@ -10538,6 +9713,12 @@ snapshots:
   '@esbuild/netbsd-x64@0.27.7':
     optional: true
 
+  '@esbuild/netbsd-x64@0.28.1':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.25.0':
+    optional: true
+
   '@esbuild/openbsd-arm64@0.25.12':
     optional: true
 
@@ -10547,10 +9728,13 @@ snapshots:
   '@esbuild/openbsd-arm64@0.27.7':
     optional: true
 
+  '@esbuild/openbsd-arm64@0.28.1':
+    optional: true
+
   '@esbuild/openbsd-x64@0.17.19':
     optional: true
 
-  '@esbuild/openbsd-x64@0.18.20':
+  '@esbuild/openbsd-x64@0.25.0':
     optional: true
 
   '@esbuild/openbsd-x64@0.25.12':
@@ -10562,6 +9746,9 @@ snapshots:
   '@esbuild/openbsd-x64@0.27.7':
     optional: true
 
+  '@esbuild/openbsd-x64@0.28.1':
+    optional: true
+
   '@esbuild/openharmony-arm64@0.25.12':
     optional: true
 
@@ -10571,10 +9758,13 @@ snapshots:
   '@esbuild/openharmony-arm64@0.27.7':
     optional: true
 
+  '@esbuild/openharmony-arm64@0.28.1':
+    optional: true
+
   '@esbuild/sunos-x64@0.17.19':
     optional: true
 
-  '@esbuild/sunos-x64@0.18.20':
+  '@esbuild/sunos-x64@0.25.0':
     optional: true
 
   '@esbuild/sunos-x64@0.25.12':
@@ -10586,10 +9776,13 @@ snapshots:
   '@esbuild/sunos-x64@0.27.7':
     optional: true
 
+  '@esbuild/sunos-x64@0.28.1':
+    optional: true
+
   '@esbuild/win32-arm64@0.17.19':
     optional: true
 
-  '@esbuild/win32-arm64@0.18.20':
+  '@esbuild/win32-arm64@0.25.0':
     optional: true
 
   '@esbuild/win32-arm64@0.25.12':
@@ -10601,10 +9794,13 @@ snapshots:
   '@esbuild/win32-arm64@0.27.7':
     optional: true
 
+  '@esbuild/win32-arm64@0.28.1':
+    optional: true
+
   '@esbuild/win32-ia32@0.17.19':
     optional: true
 
-  '@esbuild/win32-ia32@0.18.20':
+  '@esbuild/win32-ia32@0.25.0':
     optional: true
 
   '@esbuild/win32-ia32@0.25.12':
@@ -10616,10 +9812,13 @@ snapshots:
   '@esbuild/win32-ia32@0.27.7':
     optional: true
 
+  '@esbuild/win32-ia32@0.28.1':
+    optional: true
+
   '@esbuild/win32-x64@0.17.19':
     optional: true
 
-  '@esbuild/win32-x64@0.18.20':
+  '@esbuild/win32-x64@0.25.0':
     optional: true
 
   '@esbuild/win32-x64@0.25.12':
@@ -10631,6 +9830,9 @@ snapshots:
   '@esbuild/win32-x64@0.27.7':
     optional: true
 
+  '@esbuild/win32-x64@0.28.1':
+    optional: true
+
   '@eslint-community/eslint-utils@4.9.0(eslint@9.39.2(jiti@2.6.1))':
     dependencies:
       eslint: 9.39.2(jiti@2.6.1)
@@ -10642,7 +9844,7 @@ snapshots:
     dependencies:
       '@eslint/object-schema': 2.1.7
       debug: 4.4.3
-      minimatch: 3.1.2
+      minimatch: 3.1.4
     transitivePeerDependencies:
       - supports-color
 
@@ -10662,8 +9864,8 @@ snapshots:
       globals: 14.0.0
       ignore: 5.3.2
       import-fresh: 3.3.1
-      js-yaml: 4.1.1
-      minimatch: 3.1.2
+      js-yaml: 4.2.0
+      minimatch: 3.1.4
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
       - supports-color
@@ -10677,82 +9879,7 @@ snapshots:
       '@eslint/core': 0.17.0
       levn: 0.4.1
 
-  '@expo/cli@54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))':
-    dependencies:
-      '@0no-co/graphql.web': 1.2.0
-      '@expo/code-signing-certificates': 0.0.6
-      '@expo/config': 12.0.13
-      '@expo/config-plugins': 54.0.4
-      '@expo/devcert': 1.2.1
-      '@expo/env': 2.0.8
-      '@expo/image-utils': 0.8.8
-      '@expo/json-file': 10.0.8
-      '@expo/metro': 54.2.0
-      '@expo/metro-config': 54.0.14(expo@54.0.33)
-      '@expo/osascript': 2.3.8
-      '@expo/package-manager': 1.9.10
-      '@expo/plist': 0.4.8
-      '@expo/prebuild-config': 54.0.8(expo@54.0.33)
-      '@expo/schema-utils': 0.1.8
-      '@expo/spawn-async': 1.7.2
-      '@expo/ws-tunnel': 1.0.6
-      '@expo/xcpretty': 4.3.2
-      '@react-native/dev-middleware': 0.81.5
-      '@urql/core': 5.2.0
-      '@urql/exchange-retry': 1.3.2(@urql/core@5.2.0)
-      accepts: 1.3.8
-      arg: 5.0.2
-      better-opn: 3.0.2
-      bplist-creator: 0.1.0
-      bplist-parser: 0.3.2
-      chalk: 4.1.2
-      ci-info: 3.9.0
-      compression: 1.8.1
-      connect: 3.7.0
-      debug: 4.4.3
-      env-editor: 0.4.2
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-server: 1.0.5
-      freeport-async: 2.0.0
-      getenv: 2.0.0
-      glob: 13.0.0
-      lan-network: 0.1.7
-      minimatch: 9.0.5
-      node-forge: 1.3.3
-      npm-package-arg: 11.0.3
-      ora: 3.4.0
-      picomatch: 3.0.1
-      pretty-bytes: 5.6.0
-      pretty-format: 29.7.0
-      progress: 2.0.3
-      prompts: 2.4.2
-      qrcode-terminal: 0.11.0
-      require-from-string: 2.0.2
-      requireg: 0.2.2
-      resolve: 1.22.11
-      resolve-from: 5.0.0
-      resolve.exports: 2.0.3
-      semver: 7.7.3
-      send: 0.19.2
-      slugify: 1.6.6
-      source-map-support: 0.5.21
-      stacktrace-parser: 0.1.11
-      structured-headers: 0.4.1
-      tar: 7.5.2
-      terminal-link: 2.1.1
-      undici: 6.22.0
-      wrap-ansi: 7.0.0
-      ws: 8.18.3
-    optionalDependencies:
-      expo-router: 6.0.23(a9179ff0b15fe10f2a71d6f189aa330e)
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-    transitivePeerDependencies:
-      - bufferutil
-      - graphql
-      - supports-color
-      - utf-8-validate
-
-  '@expo/cli@54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))':
+  '@expo/cli@54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))':
     dependencies:
       '@0no-co/graphql.web': 1.2.0
       '@expo/code-signing-certificates': 0.0.6
@@ -10786,17 +9913,17 @@ snapshots:
       connect: 3.7.0
       debug: 4.4.3
       env-editor: 0.4.2
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-server: 1.0.5
       freeport-async: 2.0.0
       getenv: 2.0.0
       glob: 13.0.0
       lan-network: 0.1.7
-      minimatch: 9.0.5
-      node-forge: 1.3.3
+      minimatch: 9.0.7
+      node-forge: 1.4.0
       npm-package-arg: 11.0.3
       ora: 3.4.0
-      picomatch: 3.0.1
+      picomatch: 3.0.2
       pretty-bytes: 5.6.0
       pretty-format: 29.7.0
       progress: 2.0.3
@@ -10807,20 +9934,20 @@ snapshots:
       resolve: 1.22.11
       resolve-from: 5.0.0
       resolve.exports: 2.0.3
-      semver: 7.7.3
+      semver: 7.7.4
       send: 0.19.2
       slugify: 1.6.6
       source-map-support: 0.5.21
       stacktrace-parser: 0.1.11
       structured-headers: 0.4.1
-      tar: 7.5.2
+      tar: 7.5.19
       terminal-link: 2.1.1
-      undici: 6.22.0
+      undici: 6.27.0
       wrap-ansi: 7.0.0
-      ws: 8.18.3
+      ws: 8.21.0
     optionalDependencies:
-      expo-router: 6.0.23(9c9430879de51b484c3e68e2beaf4aeb)
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      expo-router: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - bufferutil
       - graphql
@@ -10829,7 +9956,7 @@ snapshots:
 
   '@expo/code-signing-certificates@0.0.6':
     dependencies:
-      node-forge: 1.3.3
+      node-forge: 1.4.0
 
   '@expo/config-plugins@54.0.4':
     dependencies:
@@ -10842,7 +9969,7 @@ snapshots:
       getenv: 2.0.0
       glob: 13.0.0
       resolve-from: 5.0.0
-      semver: 7.7.3
+      semver: 7.7.4
       slash: 3.0.0
       slugify: 1.6.6
       xcode: 3.0.1
@@ -10877,19 +10004,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@expo/devtools@0.1.8(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      chalk: 4.1.2
-    optionalDependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-
-  '@expo/devtools@0.1.8(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@expo/devtools@0.1.8(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       chalk: 4.1.2
     optionalDependencies:
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
   '@expo/env@2.0.8':
     dependencies:
@@ -10910,10 +10030,10 @@ snapshots:
       getenv: 2.0.0
       glob: 13.0.0
       ignore: 5.3.2
-      minimatch: 9.0.5
+      minimatch: 9.0.7
       p-limit: 3.1.0
       resolve-from: 5.0.0
-      semver: 7.7.3
+      semver: 7.7.4
     transitivePeerDependencies:
       - supports-color
 
@@ -10926,7 +10046,7 @@ snapshots:
       parse-png: 2.1.0
       resolve-from: 5.0.0
       resolve-global: 1.0.0
-      semver: 7.7.3
+      semver: 7.7.4
       temp-dir: 2.0.0
       unique-string: 2.0.0
 
@@ -10937,9 +10057,9 @@ snapshots:
 
   '@expo/metro-config@54.0.14(expo@54.0.33)':
     dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/core': 7.28.5
-      '@babel/generator': 7.28.5
+      '@babel/code-frame': 7.29.0
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.1
       '@expo/config': 12.0.13
       '@expo/env': 2.0.8
       '@expo/json-file': 10.0.8
@@ -10955,40 +10075,27 @@ snapshots:
       hermes-parser: 0.29.1
       jsc-safe-url: 0.2.4
       lightningcss: 1.30.2
-      minimatch: 9.0.5
-      postcss: 8.4.49
+      minimatch: 9.0.7
+      postcss: 8.5.10
       resolve-from: 5.0.0
     optionalDependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - bufferutil
       - supports-color
       - utf-8-validate
 
-  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      anser: 1.4.10
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      pretty-format: 29.7.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      stacktrace-parser: 0.1.11
-      whatwg-fetch: 3.6.20
-    optionalDependencies:
-      react-dom: 19.1.1(react@19.1.0)
-
-  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       anser: 1.4.10
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       pretty-format: 29.7.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       stacktrace-parser: 0.1.11
       whatwg-fetch: 3.6.20
     optionalDependencies:
       react-dom: 19.1.1(react@19.1.0)
-    optional: true
 
   '@expo/metro@54.2.0':
     dependencies:
@@ -11031,7 +10138,7 @@ snapshots:
 
   '@expo/plist@0.4.8':
     dependencies:
-      '@xmldom/xmldom': 0.8.11
+      '@xmldom/xmldom': 0.8.13
       base64-js: 1.5.1
       xmlbuilder: 15.1.1
 
@@ -11044,9 +10151,9 @@ snapshots:
       '@expo/json-file': 10.0.8
       '@react-native/normalize-colors': 0.81.5
       debug: 4.4.3
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       resolve-from: 5.0.0
-      semver: 7.7.3
+      semver: 7.7.4
       xml2js: 0.6.0
     transitivePeerDependencies:
       - supports-color
@@ -11061,17 +10168,11 @@ snapshots:
 
   '@expo/sudo-prompt@9.3.2': {}
 
-  '@expo/vector-icons@15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@expo/vector-icons@15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
-      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-
-  '@expo/vector-icons@15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
   '@expo/ws-tunnel@1.0.6': {}
 
@@ -11080,7 +10181,7 @@ snapshots:
       '@babel/code-frame': 7.10.4
       chalk: 4.1.2
       find-up: 5.0.0
-      js-yaml: 4.1.1
+      js-yaml: 4.2.0
 
   '@humanfs/core@0.19.1': {}
 
@@ -11093,111 +10194,8 @@ snapshots:
 
   '@humanwhocodes/retry@0.4.3': {}
 
-  '@img/colour@1.1.0':
-    optional: true
-
-  '@img/sharp-darwin-arm64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
-    optional: true
-
-  '@img/sharp-darwin-x64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.2.4
-    optional: true
-
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-darwin-x64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-s390x@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-x64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
-    optional: true
-
-  '@img/sharp-linux-arm64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-arm@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-ppc64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-riscv64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-s390x@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-x64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.2.4
-    optional: true
-
-  '@img/sharp-linuxmusl-arm64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
-    optional: true
-
-  '@img/sharp-linuxmusl-x64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
-    optional: true
-
-  '@img/sharp-wasm32@0.34.5':
-    dependencies:
-      '@emnapi/runtime': 1.8.1
-    optional: true
-
-  '@img/sharp-win32-arm64@0.34.5':
-    optional: true
-
-  '@img/sharp-win32-ia32@0.34.5':
-    optional: true
-
-  '@img/sharp-win32-x64@0.34.5':
-    optional: true
-
   '@ioredis/commands@1.5.0': {}
 
-  '@isaacs/balanced-match@4.0.1': {}
-
-  '@isaacs/brace-expansion@5.0.0':
-    dependencies:
-      '@isaacs/balanced-match': 4.0.1
-
   '@isaacs/fs-minipass@4.0.1':
     dependencies:
       minipass: 7.1.2
@@ -11209,7 +10207,7 @@ snapshots:
       camelcase: 5.3.1
       find-up: 4.1.0
       get-package-type: 0.1.0
-      js-yaml: 3.14.2
+      js-yaml: 3.15.0
       resolve-from: 5.0.0
 
   '@istanbuljs/schema@0.1.3': {}
@@ -11361,7 +10359,7 @@ snapshots:
 
   '@jest/transform@29.7.0':
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       '@jest/types': 29.6.3
       '@jridgewell/trace-mapping': 0.3.31
       babel-plugin-istanbul: 6.1.1
@@ -11442,44 +10440,17 @@ snapshots:
   '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
-    optional: true
-
-  '@napi-rs/wasm-runtime@0.2.12':
-    dependencies:
-      '@emnapi/core': 1.7.1
-      '@emnapi/runtime': 1.7.1
-      '@tybys/wasm-util': 0.10.1
-    optional: true
-
-  '@next/env@16.0.0':
-    optional: true
-
-  '@next/swc-darwin-arm64@16.0.0':
-    optional: true
-
-  '@next/swc-darwin-x64@16.0.0':
-    optional: true
-
-  '@next/swc-linux-arm64-gnu@16.0.0':
-    optional: true
-
-  '@next/swc-linux-arm64-musl@16.0.0':
-    optional: true
-
-  '@next/swc-linux-x64-gnu@16.0.0':
-    optional: true
-
-  '@next/swc-linux-x64-musl@16.0.0':
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
     optional: true
 
-  '@next/swc-win32-arm64-msvc@16.0.0':
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
     optional: true
 
-  '@next/swc-win32-x64-msvc@16.0.0':
+  '@napi-rs/wasm-runtime@0.2.12':
+    dependencies:
+      '@emnapi/core': 1.7.1
+      '@emnapi/runtime': 1.7.1
+      '@tybys/wasm-util': 0.10.1
     optional: true
 
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
@@ -11503,37 +10474,12 @@ snapshots:
 
   '@nolyfill/is-core-module@1.0.39': {}
 
-  '@oozcitak/dom@2.0.2':
-    dependencies:
-      '@oozcitak/infra': 2.0.2
-      '@oozcitak/url': 3.0.0
-      '@oozcitak/util': 10.0.0
-    optional: true
-
-  '@oozcitak/infra@2.0.2':
-    dependencies:
-      '@oozcitak/util': 10.0.0
-    optional: true
-
-  '@oozcitak/url@3.0.0':
-    dependencies:
-      '@oozcitak/infra': 2.0.2
-      '@oozcitak/util': 10.0.0
-    optional: true
-
-  '@oozcitak/util@10.0.0':
-    optional: true
-
   '@opentelemetry/api@1.9.0':
     optional: true
 
-  '@pkgr/core@0.2.9': {}
-
-  '@planetscale/database@1.19.0':
-    optional: true
+  '@opentelemetry/semantic-conventions@1.43.0': {}
 
-  '@polka/url@1.0.0-next.29':
-    optional: true
+  '@pkgr/core@0.2.9': {}
 
   '@radix-ui/primitive@1.1.3': {}
 
@@ -11736,148 +10682,75 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))':
-    dependencies:
-      merge-options: 3.0.4
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-
-  '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))':
+  '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))':
     dependencies:
       merge-options: 3.0.4
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
   '@react-native/assets-registry@0.81.5': {}
 
-  '@react-native/babel-plugin-codegen@0.81.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/traverse': 7.28.5
-      '@react-native/codegen': 0.81.5(@babel/core@7.28.5)
-    transitivePeerDependencies:
-      - '@babel/core'
-      - supports-color
-
-  '@react-native/babel-plugin-codegen@0.81.5(@babel/core@7.29.0)':
+  '@react-native/babel-plugin-codegen@0.81.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/traverse': 7.28.5
-      '@react-native/codegen': 0.81.5(@babel/core@7.29.0)
+      '@babel/traverse': 7.29.0
+      '@react-native/codegen': 0.81.5(@babel/core@7.29.6)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
 
-  '@react-native/babel-preset@0.81.5(@babel/core@7.28.5)':
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-dynamic-import': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.28.5)
-      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.28.5)
-      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/template': 7.27.2
-      '@react-native/babel-plugin-codegen': 0.81.5(@babel/core@7.28.5)
-      babel-plugin-syntax-hermes-parser: 0.29.1
-      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.28.5)
-      react-refresh: 0.14.2
-    transitivePeerDependencies:
-      - supports-color
-
-  '@react-native/babel-preset@0.81.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-dynamic-import': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.29.0)
-      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.29.0)
-      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.0)
+  '@react-native/babel-preset@0.81.5(@babel/core@7.29.6)':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-dynamic-import': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-async-generator-functions': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-transform-async-to-generator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-block-scoping': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-computed-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-for-of': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-function-name': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-literals': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-logical-assignment-operators': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-numeric-separator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-optional-catch-binding': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-display-name': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-regenerator': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-spread': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.29.6)
+      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.6)
       '@babel/template': 7.27.2
-      '@react-native/babel-plugin-codegen': 0.81.5(@babel/core@7.29.0)
+      '@react-native/babel-plugin-codegen': 0.81.5(@babel/core@7.29.6)
       babel-plugin-syntax-hermes-parser: 0.29.1
-      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.0)
+      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.6)
       react-refresh: 0.14.2
     transitivePeerDependencies:
       - supports-color
 
-  '@react-native/codegen@0.81.5(@babel/core@7.28.5)':
+  '@react-native/codegen@0.81.5(@babel/core@7.29.6)':
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/parser': 7.28.5
-      glob: 7.2.3
-      hermes-parser: 0.29.1
-      invariant: 2.2.4
-      nullthrows: 1.1.1
-      yargs: 17.7.2
-
-  '@react-native/codegen@0.81.5(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/parser': 7.28.5
+      '@babel/core': 7.29.6
+      '@babel/parser': 7.29.0
       glob: 7.2.3
       hermes-parser: 0.29.1
       invariant: 2.2.4
@@ -11892,7 +10765,7 @@ snapshots:
       metro: 0.83.3
       metro-config: 0.83.3
       metro-core: 0.83.3
-      semver: 7.7.3
+      semver: 7.7.4
     transitivePeerDependencies:
       - bufferutil
       - supports-color
@@ -11912,7 +10785,7 @@ snapshots:
       nullthrows: 1.1.1
       open: 7.4.2
       serve-static: 1.16.3
-      ws: 6.2.3
+      ws: 6.2.4
     transitivePeerDependencies:
       - bufferutil
       - supports-color
@@ -11926,50 +10799,27 @@ snapshots:
 
   '@react-native/polyfills@2.0.0': {}
 
-  '@react-native/virtualized-lists@0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      invariant: 2.2.4
-      nullthrows: 1.1.1
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-    optionalDependencies:
-      '@types/react': 19.1.17
-
-  '@react-native/virtualized-lists@0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@react-native/virtualized-lists@0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       invariant: 2.2.4
       nullthrows: 1.1.1
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@react-navigation/bottom-tabs@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      color: 4.2.3
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      sf-symbols-typescript: 2.2.0
-    transitivePeerDependencies:
-      - '@react-native-masked-view/masked-view'
-
-  '@react-navigation/bottom-tabs@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@react-navigation/bottom-tabs@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       color: 4.2.3
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       sf-symbols-typescript: 2.2.0
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
-    optional: true
 
   '@react-navigation/core@7.13.7(react@19.1.0)':
     dependencies:
@@ -11983,150 +10833,119 @@ snapshots:
       use-latest-callback: 0.2.6(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
 
-  '@react-navigation/elements@2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      color: 4.2.3
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      use-latest-callback: 0.2.6(react@19.1.0)
-      use-sync-external-store: 1.6.0(react@19.1.0)
-
-  '@react-navigation/elements@2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@react-navigation/elements@2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       color: 4.2.3
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       use-latest-callback: 0.2.6(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
-    optional: true
-
-  '@react-navigation/native-stack@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      color: 4.2.3
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      sf-symbols-typescript: 2.2.0
-      warn-once: 0.1.1
-    transitivePeerDependencies:
-      - '@react-native-masked-view/masked-view'
 
-  '@react-navigation/native-stack@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@react-navigation/native-stack@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       color: 4.2.3
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       sf-symbols-typescript: 2.2.0
       warn-once: 0.1.1
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
-    optional: true
-
-  '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@react-navigation/core': 7.13.7(react@19.1.0)
-      escape-string-regexp: 4.0.0
-      fast-deep-equal: 3.1.3
-      nanoid: 3.3.11
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      use-latest-callback: 0.2.6(react@19.1.0)
 
-  '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@react-navigation/core': 7.13.7(react@19.1.0)
       escape-string-regexp: 4.0.0
       fast-deep-equal: 3.1.3
       nanoid: 3.3.11
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       use-latest-callback: 0.2.6(react@19.1.0)
-    optional: true
 
   '@react-navigation/routers@7.5.3':
     dependencies:
       nanoid: 3.3.11
 
-  '@rolldown/pluginutils@1.0.0-beta.40':
+  '@rolldown/pluginutils@1.0.0-rc.3': {}
+
+  '@rollup/rollup-android-arm-eabi@4.59.0':
     optional: true
 
-  '@rolldown/pluginutils@1.0.0-rc.3': {}
+  '@rollup/rollup-android-arm64@4.59.0':
+    optional: true
+
+  '@rollup/rollup-darwin-arm64@4.59.0':
+    optional: true
 
-  '@rollup/rollup-android-arm-eabi@4.54.0':
+  '@rollup/rollup-darwin-x64@4.59.0':
     optional: true
 
-  '@rollup/rollup-android-arm64@4.54.0':
+  '@rollup/rollup-freebsd-arm64@4.59.0':
     optional: true
 
-  '@rollup/rollup-darwin-arm64@4.54.0':
+  '@rollup/rollup-freebsd-x64@4.59.0':
     optional: true
 
-  '@rollup/rollup-darwin-x64@4.54.0':
+  '@rollup/rollup-linux-arm-gnueabihf@4.59.0':
     optional: true
 
-  '@rollup/rollup-freebsd-arm64@4.54.0':
+  '@rollup/rollup-linux-arm-musleabihf@4.59.0':
     optional: true
 
-  '@rollup/rollup-freebsd-x64@4.54.0':
+  '@rollup/rollup-linux-arm64-gnu@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-arm-gnueabihf@4.54.0':
+  '@rollup/rollup-linux-arm64-musl@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-arm-musleabihf@4.54.0':
+  '@rollup/rollup-linux-loong64-gnu@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-arm64-gnu@4.54.0':
+  '@rollup/rollup-linux-loong64-musl@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-arm64-musl@4.54.0':
+  '@rollup/rollup-linux-ppc64-gnu@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-loong64-gnu@4.54.0':
+  '@rollup/rollup-linux-ppc64-musl@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-ppc64-gnu@4.54.0':
+  '@rollup/rollup-linux-riscv64-gnu@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-riscv64-gnu@4.54.0':
+  '@rollup/rollup-linux-riscv64-musl@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-riscv64-musl@4.54.0':
+  '@rollup/rollup-linux-s390x-gnu@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-s390x-gnu@4.54.0':
+  '@rollup/rollup-linux-x64-gnu@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-x64-gnu@4.54.0':
+  '@rollup/rollup-linux-x64-musl@4.59.0':
     optional: true
 
-  '@rollup/rollup-linux-x64-musl@4.54.0':
+  '@rollup/rollup-openbsd-x64@4.59.0':
     optional: true
 
-  '@rollup/rollup-openharmony-arm64@4.54.0':
+  '@rollup/rollup-openharmony-arm64@4.59.0':
     optional: true
 
-  '@rollup/rollup-win32-arm64-msvc@4.54.0':
+  '@rollup/rollup-win32-arm64-msvc@4.59.0':
     optional: true
 
-  '@rollup/rollup-win32-ia32-msvc@4.54.0':
+  '@rollup/rollup-win32-ia32-msvc@4.59.0':
     optional: true
 
-  '@rollup/rollup-win32-x64-gnu@4.54.0':
+  '@rollup/rollup-win32-x64-gnu@4.59.0':
     optional: true
 
-  '@rollup/rollup-win32-x64-msvc@4.54.0':
+  '@rollup/rollup-win32-x64-msvc@4.59.0':
     optional: true
 
   '@rtsao/scc@1.1.0': {}
@@ -12143,25 +10962,20 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
-  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))':
+  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
     dependencies:
       '@react-native/polyfills': 2.0.0
       esbuild: 0.27.7
       flow-remove-types: 2.313.0
       pirates: 4.0.7
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   '@standard-schema/spec@1.1.0': {}
 
-  '@swc/helpers@0.5.15':
-    dependencies:
-      tslib: 2.8.1
-    optional: true
-
   '@tailwindcss/node@4.3.0':
     dependencies:
       '@jridgewell/remapping': 2.3.5
@@ -12223,291 +11037,66 @@ snapshots:
       '@tailwindcss/oxide-win32-arm64-msvc': 4.3.0
       '@tailwindcss/oxide-win32-x64-msvc': 4.3.0
 
-  '@tailwindcss/vite@4.3.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
+  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@tailwindcss/node': 4.3.0
       '@tailwindcss/oxide': 4.3.0
       tailwindcss: 4.3.0
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-
-  '@tanstack/directive-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/core': 7.29.0
-      '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
-      '@tanstack/router-utils': 1.141.0
-      babel-dead-code-elimination: 1.0.12
-      pathe: 2.0.3
-      tiny-invariant: 1.3.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@tanstack/history@1.141.0':
-    optional: true
-
-  '@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@tanstack/history': 1.141.0
-      '@tanstack/react-store': 0.8.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/router-core': 1.142.8
-      isbot: 5.1.35
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      tiny-invariant: 1.3.3
-      tiny-warning: 1.0.3
-    optional: true
-
-  '@tanstack/react-start-client@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/router-core': 1.142.8
-      '@tanstack/start-client-core': 1.142.8
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      tiny-invariant: 1.3.3
-      tiny-warning: 1.0.3
-    optional: true
-
-  '@tanstack/react-start-server@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@tanstack/history': 1.141.0
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/router-core': 1.142.8
-      '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-server-core': 1.142.8
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-    transitivePeerDependencies:
-      - crossws
-    optional: true
-
-  '@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start-client': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start-server': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/router-utils': 1.161.4
-      '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-plugin-core': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-      '@tanstack/start-server-core': 1.142.8
-      pathe: 2.0.3
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-    transitivePeerDependencies:
-      - '@rsbuild/core'
-      - crossws
-      - supports-color
-      - vite-plugin-solid
-      - webpack
-    optional: true
-
-  '@tanstack/react-store@0.8.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@tanstack/store': 0.8.1
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      use-sync-external-store: 1.6.0(react@19.1.0)
-    optional: true
-
-  '@tanstack/router-core@1.142.8':
-    dependencies:
-      '@tanstack/history': 1.141.0
-      '@tanstack/store': 0.8.1
-      cookie-es: 2.0.0
-      seroval: 1.5.0
-      seroval-plugins: 1.5.0(seroval@1.5.0)
-      tiny-invariant: 1.3.3
-      tiny-warning: 1.0.3
-    optional: true
-
-  '@tanstack/router-generator@1.142.8':
-    dependencies:
-      '@tanstack/router-core': 1.142.8
-      '@tanstack/router-utils': 1.141.0
-      '@tanstack/virtual-file-routes': 1.141.0
-      prettier: 3.8.1
-      recast: 0.23.11
-      source-map: 0.7.6
-      tsx: 4.21.0
-      zod: 3.25.76
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@tanstack/router-plugin@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
-      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
-      '@babel/template': 7.28.6
-      '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
-      '@tanstack/router-core': 1.142.8
-      '@tanstack/router-generator': 1.142.8
-      '@tanstack/router-utils': 1.141.0
-      '@tanstack/virtual-file-routes': 1.141.0
-      babel-dead-code-elimination: 1.0.12
-      chokidar: 3.6.0
-      unplugin: 2.3.11
-      zod: 3.25.76
-    optionalDependencies:
-      '@tanstack/react-router': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@tanstack/router-utils@1.141.0':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/generator': 7.29.1
-      '@babel/parser': 7.29.0
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
-      ansis: 4.2.0
-      diff: 8.0.3
-      pathe: 2.0.3
-      tinyglobby: 0.2.15
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@tanstack/router-utils@1.161.4':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/generator': 7.29.1
-      '@babel/parser': 7.29.0
-      '@babel/types': 7.29.0
-      ansis: 4.2.0
-      babel-dead-code-elimination: 1.0.12
-      diff: 8.0.3
-      pathe: 2.0.3
-      tinyglobby: 0.2.15
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@tanstack/server-functions-plugin@1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/core': 7.29.0
-      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
-      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.0)
-      '@babel/template': 7.28.6
-      '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
-      '@tanstack/directive-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-      babel-dead-code-elimination: 1.0.12
-      tiny-invariant: 1.3.3
-    transitivePeerDependencies:
-      - supports-color
-      - vite
-    optional: true
-
-  '@tanstack/start-client-core@1.142.8':
-    dependencies:
-      '@tanstack/router-core': 1.142.8
-      '@tanstack/start-storage-context': 1.142.8
-      seroval: 1.5.0
-      tiny-invariant: 1.3.3
-      tiny-warning: 1.0.3
-    optional: true
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@tanstack/start-plugin-core@1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      '@babel/code-frame': 7.26.2
-      '@babel/core': 7.29.0
-      '@babel/types': 7.29.0
-      '@rolldown/pluginutils': 1.0.0-beta.40
-      '@tanstack/router-core': 1.142.8
-      '@tanstack/router-generator': 1.142.8
-      '@tanstack/router-plugin': 1.142.8(@tanstack/react-router@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-      '@tanstack/router-utils': 1.141.0
-      '@tanstack/server-functions-plugin': 1.142.1(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-      '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-server-core': 1.142.8
-      babel-dead-code-elimination: 1.0.12
-      cheerio: 1.2.0
-      exsolve: 1.0.8
-      pathe: 2.0.3
-      srvx: 0.9.8
-      tinyglobby: 0.2.15
-      ufo: 1.6.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-      vitefu: 1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-      xmlbuilder2: 4.0.3
-      zod: 3.25.76
-    transitivePeerDependencies:
-      - '@rsbuild/core'
-      - '@tanstack/react-router'
-      - crossws
-      - supports-color
-      - vite-plugin-solid
-      - webpack
-    optional: true
-
-  '@tanstack/start-server-core@1.142.8':
-    dependencies:
-      '@tanstack/history': 1.141.0
-      '@tanstack/router-core': 1.142.8
-      '@tanstack/start-client-core': 1.142.8
-      '@tanstack/start-storage-context': 1.142.8
-      h3-v2: h3@2.0.1-rc.6
-      seroval: 1.5.0
-      tiny-invariant: 1.3.3
-    transitivePeerDependencies:
-      - crossws
-    optional: true
-
-  '@tanstack/start-storage-context@1.142.8':
-    dependencies:
-      '@tanstack/router-core': 1.142.8
-    optional: true
-
-  '@tanstack/store@0.8.1':
-    optional: true
-
-  '@tanstack/virtual-file-routes@1.141.0':
-    optional: true
-
-  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       jest-matcher-utils: 30.2.0
       picocolors: 1.1.1
       pretty-format: 30.2.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       react-test-renderer: 19.1.0(react@19.1.0)
       redent: 3.0.0
     optionalDependencies:
       jest: 29.7.0(@types/node@24.10.4)
 
-  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       jest-matcher-utils: 30.2.0
       picocolors: 1.1.1
       pretty-format: 30.2.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       react-test-renderer: 19.1.0(react@19.1.0)
       redent: 3.0.0
     optionalDependencies:
       jest: 29.7.0(@types/node@25.3.3)
     optional: true
 
-  '@tootallnate/once@2.0.0': {}
+  '@tootallnate/once@2.0.1': {}
 
   '@ts-morph/common@0.26.1':
     dependencies:
       fast-glob: 3.3.3
-      minimatch: 9.0.5
+      minimatch: 9.0.7
       path-browserify: 1.0.1
 
   '@tsconfig/node18@18.2.6': {}
 
+  '@turbo/darwin-64@2.10.4':
+    optional: true
+
+  '@turbo/darwin-arm64@2.10.4':
+    optional: true
+
+  '@turbo/linux-64@2.10.4':
+    optional: true
+
+  '@turbo/linux-arm64@2.10.4':
+    optional: true
+
+  '@turbo/windows-64@2.10.4':
+    optional: true
+
+  '@turbo/windows-arm64@2.10.4':
+    optional: true
+
   '@tybys/wasm-util@0.10.1':
     dependencies:
       tslib: 2.8.1
@@ -12678,7 +11267,7 @@ snapshots:
       '@typescript-eslint/types': 8.50.0
       '@typescript-eslint/visitor-keys': 8.50.0
       debug: 4.4.3
-      minimatch: 9.0.5
+      minimatch: 9.0.7
       semver: 7.7.3
       tinyglobby: 0.2.15
       ts-api-utils: 2.1.0(typescript@5.9.3)
@@ -12806,35 +11395,35 @@ snapshots:
       '@urql/core': 5.2.0
       wonka: 6.3.5
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.6)
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.6)
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitest/expect@3.2.4':
+  '@vitest/expect@3.2.7':
     dependencies:
       '@types/chai': 5.2.3
-      '@vitest/spy': 3.2.4
-      '@vitest/utils': 3.2.4
+      '@vitest/spy': 3.2.7
+      '@vitest/utils': 3.2.7
       chai: 5.3.3
       tinyrainbow: 2.0.0
 
@@ -12847,31 +11436,39 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
-  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
-      '@vitest/spy': 3.2.4
+      '@vitest/spy': 3.2.7
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@vitest/mocker@3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4))':
     dependencies:
-      '@vitest/spy': 3.2.4
+      '@vitest/spy': 3.2.7
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@vitest/mocker@4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))':
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@vitest/spy': 3.2.7
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+    optionalDependencies:
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  '@vitest/mocker@4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@vitest/spy': 4.1.6
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@vitest/pretty-format@3.2.4':
+  '@vitest/pretty-format@3.2.7':
     dependencies:
       tinyrainbow: 2.0.0
 
@@ -12879,9 +11476,9 @@ snapshots:
     dependencies:
       tinyrainbow: 3.1.0
 
-  '@vitest/runner@3.2.4':
+  '@vitest/runner@3.2.7':
     dependencies:
-      '@vitest/utils': 3.2.4
+      '@vitest/utils': 3.2.7
       pathe: 2.0.3
       strip-literal: 3.1.0
 
@@ -12890,9 +11487,9 @@ snapshots:
       '@vitest/utils': 4.1.6
       pathe: 2.0.3
 
-  '@vitest/snapshot@3.2.4':
+  '@vitest/snapshot@3.2.7':
     dependencies:
-      '@vitest/pretty-format': 3.2.4
+      '@vitest/pretty-format': 3.2.7
       magic-string: 0.30.21
       pathe: 2.0.3
 
@@ -12903,39 +11500,15 @@ snapshots:
       magic-string: 0.30.21
       pathe: 2.0.3
 
-  '@vitest/spy@3.2.4':
+  '@vitest/spy@3.2.7':
     dependencies:
       tinyspy: 4.0.4
 
   '@vitest/spy@4.1.6': {}
 
-  '@vitest/ui@3.2.4(vitest@3.2.4)':
-    dependencies:
-      '@vitest/utils': 3.2.4
-      fflate: 0.8.2
-      flatted: 3.3.4
-      pathe: 2.0.3
-      sirv: 3.0.2
-      tinyglobby: 0.2.15
-      tinyrainbow: 2.0.0
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-    optional: true
-
-  '@vitest/ui@3.2.4(vitest@4.1.6)':
-    dependencies:
-      '@vitest/utils': 3.2.4
-      fflate: 0.8.2
-      flatted: 3.3.4
-      pathe: 2.0.3
-      sirv: 3.0.2
-      tinyglobby: 0.2.15
-      tinyrainbow: 2.0.0
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-    optional: true
-
-  '@vitest/utils@3.2.4':
+  '@vitest/utils@3.2.7':
     dependencies:
-      '@vitest/pretty-format': 3.2.4
+      '@vitest/pretty-format': 3.2.7
       loupe: 3.2.1
       tinyrainbow: 2.0.0
 
@@ -12945,7 +11518,7 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
-  '@xmldom/xmldom@0.8.11': {}
+  '@xmldom/xmldom@0.8.13': {}
 
   abab@2.0.6: {}
 
@@ -12990,10 +11563,10 @@ snapshots:
       json-schema-traverse: 0.4.1
       uri-js: 4.4.1
 
-  ajv@8.17.1:
+  ajv@8.18.0:
     dependencies:
       fast-deep-equal: 3.1.3
-      fast-uri: 3.1.0
+      fast-uri: 3.1.3
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
@@ -13028,7 +11601,7 @@ snapshots:
   anymatch@3.1.3:
     dependencies:
       normalize-path: 3.0.0
-      picomatch: 2.3.1
+      picomatch: 2.3.2
 
   arg@5.0.2: {}
 
@@ -13117,11 +11690,6 @@ snapshots:
 
   assertion-error@2.0.1: {}
 
-  ast-types@0.16.1:
-    dependencies:
-      tslib: 2.8.1
-    optional: true
-
   async-function@1.0.0: {}
 
   async-limiter@1.0.1: {}
@@ -13132,39 +11700,16 @@ snapshots:
     dependencies:
       possible-typed-array-names: 1.1.0
 
-  aws-ssl-profiles@1.1.2:
-    optional: true
-
-  babel-dead-code-elimination@1.0.12:
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/parser': 7.29.0
-      '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  babel-jest@29.7.0(@babel/core@7.28.5):
-    dependencies:
-      '@babel/core': 7.28.5
-      '@jest/transform': 29.7.0
-      '@types/babel__core': 7.20.5
-      babel-plugin-istanbul: 6.1.1
-      babel-preset-jest: 29.6.3(@babel/core@7.28.5)
-      chalk: 4.1.2
-      graceful-fs: 4.2.11
-      slash: 3.0.0
-    transitivePeerDependencies:
-      - supports-color
+  aws-ssl-profiles@1.1.2:
+    optional: true
 
-  babel-jest@29.7.0(@babel/core@7.29.0):
+  babel-jest@29.7.0(@babel/core@7.29.6):
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@jest/transform': 29.7.0
       '@types/babel__core': 7.20.5
       babel-plugin-istanbul: 6.1.1
-      babel-preset-jest: 29.6.3(@babel/core@7.29.0)
+      babel-preset-jest: 29.6.3(@babel/core@7.29.6)
       chalk: 4.1.2
       graceful-fs: 4.2.11
       slash: 3.0.0
@@ -13192,51 +11737,27 @@ snapshots:
       '@types/babel__core': 7.20.5
       '@types/babel__traverse': 7.28.0
 
-  babel-plugin-polyfill-corejs2@0.4.14(@babel/core@7.28.5):
-    dependencies:
-      '@babel/compat-data': 7.28.5
-      '@babel/core': 7.28.5
-      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.28.5)
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  babel-plugin-polyfill-corejs2@0.4.14(@babel/core@7.29.0):
+  babel-plugin-polyfill-corejs2@0.4.14(@babel/core@7.29.6):
     dependencies:
       '@babel/compat-data': 7.28.5
-      '@babel/core': 7.29.0
-      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.6)
       semver: 6.3.1
     transitivePeerDependencies:
       - supports-color
 
-  babel-plugin-polyfill-corejs3@0.13.0(@babel/core@7.28.5):
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.28.5)
-      core-js-compat: 3.47.0
-    transitivePeerDependencies:
-      - supports-color
-
-  babel-plugin-polyfill-corejs3@0.13.0(@babel/core@7.29.0):
+  babel-plugin-polyfill-corejs3@0.13.0(@babel/core@7.29.6):
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.6)
       core-js-compat: 3.47.0
     transitivePeerDependencies:
       - supports-color
 
-  babel-plugin-polyfill-regenerator@0.6.5(@babel/core@7.28.5):
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.28.5)
-    transitivePeerDependencies:
-      - supports-color
-
-  babel-plugin-polyfill-regenerator@0.6.5(@babel/core@7.29.0):
+  babel-plugin-polyfill-regenerator@0.6.5(@babel/core@7.29.6):
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.0)
+      '@babel/core': 7.29.6
+      '@babel/helper-define-polyfill-provider': 0.6.5(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
@@ -13250,232 +11771,144 @@ snapshots:
     dependencies:
       hermes-parser: 0.29.1
 
-  babel-plugin-transform-flow-enums@0.0.2(@babel/core@7.28.5):
-    dependencies:
-      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.28.5)
-    transitivePeerDependencies:
-      - '@babel/core'
-
-  babel-plugin-transform-flow-enums@0.0.2(@babel/core@7.29.0):
-    dependencies:
-      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.29.0)
-    transitivePeerDependencies:
-      - '@babel/core'
-
-  babel-preset-current-node-syntax@1.2.0(@babel/core@7.28.5):
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/plugin-syntax-async-generators': 7.8.4(@babel/core@7.28.5)
-      '@babel/plugin-syntax-bigint': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-class-properties': 7.12.13(@babel/core@7.28.5)
-      '@babel/plugin-syntax-class-static-block': 7.14.5(@babel/core@7.28.5)
-      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-import-meta': 7.10.4(@babel/core@7.28.5)
-      '@babel/plugin-syntax-json-strings': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4(@babel/core@7.28.5)
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-numeric-separator': 7.10.4(@babel/core@7.28.5)
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.28.5)
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5(@babel/core@7.28.5)
-      '@babel/plugin-syntax-top-level-await': 7.14.5(@babel/core@7.28.5)
-
-  babel-preset-current-node-syntax@1.2.0(@babel/core@7.29.0):
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-syntax-async-generators': 7.8.4(@babel/core@7.29.0)
-      '@babel/plugin-syntax-bigint': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-class-properties': 7.12.13(@babel/core@7.29.0)
-      '@babel/plugin-syntax-class-static-block': 7.14.5(@babel/core@7.29.0)
-      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-import-meta': 7.10.4(@babel/core@7.29.0)
-      '@babel/plugin-syntax-json-strings': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4(@babel/core@7.29.0)
-      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-numeric-separator': 7.10.4(@babel/core@7.29.0)
-      '@babel/plugin-syntax-object-rest-spread': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-optional-catch-binding': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.29.0)
-      '@babel/plugin-syntax-private-property-in-object': 7.14.5(@babel/core@7.29.0)
-      '@babel/plugin-syntax-top-level-await': 7.14.5(@babel/core@7.29.0)
-
-  babel-preset-expo@54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2):
-    dependencies:
-      '@babel/helper-module-imports': 7.27.1
-      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.28.5)
-      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.28.5)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.28.5)
-      '@babel/preset-react': 7.28.5(@babel/core@7.28.5)
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.28.5)
-      '@react-native/babel-preset': 0.81.5(@babel/core@7.28.5)
-      babel-plugin-react-compiler: 1.0.0
-      babel-plugin-react-native-web: 0.21.2
-      babel-plugin-syntax-hermes-parser: 0.29.1
-      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.28.5)
-      debug: 4.4.3
-      react-refresh: 0.14.2
-      resolve-from: 5.0.0
-    optionalDependencies:
-      '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-    transitivePeerDependencies:
-      - '@babel/core'
-      - supports-color
-
-  babel-preset-expo@54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0):
+  babel-plugin-transform-flow-enums@0.0.2(@babel/core@7.29.6):
     dependencies:
-      '@babel/helper-module-imports': 7.27.1
-      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.28.5)
-      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.28.5)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.28.5)
-      '@babel/preset-react': 7.28.5(@babel/core@7.28.5)
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.28.5)
-      '@react-native/babel-preset': 0.81.5(@babel/core@7.28.5)
-      babel-plugin-react-compiler: 1.0.0
-      babel-plugin-react-native-web: 0.21.2
-      babel-plugin-syntax-hermes-parser: 0.29.1
-      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.28.5)
-      debug: 4.4.3
-      react-refresh: 0.18.0
-      resolve-from: 5.0.0
-    optionalDependencies:
-      '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@babel/plugin-syntax-flow': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - '@babel/core'
-      - supports-color
 
-  babel-preset-expo@54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2):
+  babel-preset-current-node-syntax@1.2.0(@babel/core@7.29.6):
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-syntax-async-generators': 7.8.4(@babel/core@7.29.6)
+      '@babel/plugin-syntax-bigint': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-class-properties': 7.12.13(@babel/core@7.29.6)
+      '@babel/plugin-syntax-class-static-block': 7.14.5(@babel/core@7.29.6)
+      '@babel/plugin-syntax-import-attributes': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-import-meta': 7.10.4(@babel/core@7.29.6)
+      '@babel/plugin-syntax-json-strings': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-logical-assignment-operators': 7.10.4(@babel/core@7.29.6)
+      '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-numeric-separator': 7.10.4(@babel/core@7.29.6)
+      '@babel/plugin-syntax-object-rest-spread': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-optional-catch-binding': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/core@7.29.6)
+      '@babel/plugin-syntax-private-property-in-object': 7.14.5(@babel/core@7.29.6)
+      '@babel/plugin-syntax-top-level-await': 7.14.5(@babel/core@7.29.6)
+
+  babel-preset-expo@54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2):
     dependencies:
       '@babel/helper-module-imports': 7.27.1
-      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.0)
-      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.0)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.0)
-      '@babel/preset-react': 7.28.5(@babel/core@7.29.0)
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
-      '@react-native/babel-preset': 0.81.5(@babel/core@7.29.0)
+      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.6)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.6)
+      '@babel/preset-react': 7.28.5(@babel/core@7.29.6)
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.6)
+      '@react-native/babel-preset': 0.81.5(@babel/core@7.29.6)
       babel-plugin-react-compiler: 1.0.0
       babel-plugin-react-native-web: 0.21.2
       babel-plugin-syntax-hermes-parser: 0.29.1
-      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.0)
+      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.6)
       debug: 4.4.3
       react-refresh: 0.14.2
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
 
-  babel-preset-expo@54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0):
+  babel-preset-expo@54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0):
     dependencies:
       '@babel/helper-module-imports': 7.27.1
-      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.0)
-      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.0)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.0)
-      '@babel/preset-react': 7.28.5(@babel/core@7.29.0)
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
-      '@react-native/babel-preset': 0.81.5(@babel/core@7.29.0)
+      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.6)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.6)
+      '@babel/preset-react': 7.28.5(@babel/core@7.29.6)
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.6)
+      '@react-native/babel-preset': 0.81.5(@babel/core@7.29.6)
       babel-plugin-react-compiler: 1.0.0
       babel-plugin-react-native-web: 0.21.2
       babel-plugin-syntax-hermes-parser: 0.29.1
-      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.0)
+      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.6)
       debug: 4.4.3
       react-refresh: 0.18.0
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
 
-  babel-preset-jest@29.6.3(@babel/core@7.28.5):
-    dependencies:
-      '@babel/core': 7.28.5
-      babel-plugin-jest-hoist: 29.6.3
-      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.28.5)
-
-  babel-preset-jest@29.6.3(@babel/core@7.29.0):
+  babel-preset-jest@29.6.3(@babel/core@7.29.6):
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       babel-plugin-jest-hoist: 29.6.3
-      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.0)
+      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.6)
 
   balanced-match@1.0.2: {}
 
+  balanced-match@4.0.4: {}
+
   base64-js@1.5.1: {}
 
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.4.18(@tanstack/react-start@1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)))(drizzle-kit@0.31.8)(drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0))(mysql2@3.16.0)(next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.4):
-    dependencies:
-      '@better-auth/core': 1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0)
-      '@better-auth/telemetry': 1.4.18(@better-auth/core@1.4.18(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.21)(better-call@1.1.8(zod@4.3.6))(jose@6.1.3)(kysely@0.28.9)(nanostores@1.1.0))
-      '@better-auth/utils': 0.3.0
-      '@better-fetch/fetch': 1.1.21
+  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+    dependencies:
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/kysely-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)
+      '@better-auth/memory-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/mongo-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/prisma-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/telemetry': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.1
       '@noble/ciphers': 2.1.1
       '@noble/hashes': 2.0.1
-      better-call: 1.1.8(zod@4.3.6)
-      defu: 6.1.4
+      better-call: 1.3.7(zod@4.3.6)
+      defu: 6.1.7
       jose: 6.1.3
-      kysely: 0.28.9
-      nanostores: 1.1.0
+      kysely: 0.28.17
+      nanostores: 1.4.0
       zod: 4.3.6
     optionalDependencies:
-      '@tanstack/react-start': 1.142.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
       drizzle-kit: 0.31.8
-      drizzle-orm: 0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0)
       mysql2: 3.16.0
-      next: 16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@cloudflare/workers-types'
+      - '@opentelemetry/api'
 
-  better-call@1.1.8(zod@4.3.6):
+  better-call@1.3.7(zod@4.3.6):
     dependencies:
-      '@better-auth/utils': 0.3.0
-      '@better-fetch/fetch': 1.1.21
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.1
       rou3: 0.7.12
-      set-cookie-parser: 2.7.2
+      set-cookie-parser: 3.1.2
     optionalDependencies:
       zod: 4.3.6
 
@@ -13501,14 +11934,14 @@ snapshots:
     dependencies:
       big-integer: 1.6.52
 
-  brace-expansion@1.1.12:
+  brace-expansion@1.1.13:
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
 
-  brace-expansion@2.0.2:
+  brace-expansion@5.0.7:
     dependencies:
-      balanced-match: 1.0.2
+      balanced-match: 4.0.4
 
   braces@3.0.3:
     dependencies:
@@ -13549,7 +11982,7 @@ snapshots:
       semver: 7.7.3
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      yaml: 2.8.2
+      yaml: 2.8.3
     transitivePeerDependencies:
       - magicast
 
@@ -13569,7 +12002,7 @@ snapshots:
     dependencies:
       chokidar: 5.0.0
       confbox: 0.2.2
-      defu: 6.1.4
+      defu: 6.1.7
       dotenv: 17.2.3
       exsolve: 1.0.8
       giget: 2.0.0
@@ -13607,9 +12040,6 @@ snapshots:
 
   caniuse-lite@1.0.30001761: {}
 
-  caniuse-lite@1.0.30001775:
-    optional: true
-
   chai@5.3.3:
     dependencies:
       assertion-error: 2.0.1
@@ -13644,31 +12074,6 @@ snapshots:
 
   check-error@2.1.1: {}
 
-  cheerio-select@2.1.0:
-    dependencies:
-      boolbase: 1.0.0
-      css-select: 5.2.2
-      css-what: 6.2.2
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
-      domutils: 3.2.2
-    optional: true
-
-  cheerio@1.2.0:
-    dependencies:
-      cheerio-select: 2.1.0
-      dom-serializer: 2.0.0
-      domhandler: 5.0.3
-      domutils: 3.2.2
-      encoding-sniffer: 0.2.1
-      htmlparser2: 10.1.0
-      parse5: 7.3.0
-      parse5-htmlparser2-tree-adapter: 7.1.0
-      parse5-parser-stream: 7.1.2
-      undici: 7.22.0
-      whatwg-mimetype: 4.0.0
-    optional: true
-
   chokidar@3.6.0:
     dependencies:
       anymatch: 3.1.3
@@ -13812,9 +12217,6 @@ snapshots:
 
   convert-source-map@2.0.0: {}
 
-  cookie-es@2.0.0:
-    optional: true
-
   core-js-compat@3.47.0:
     dependencies:
       browserslist: 4.28.1
@@ -13955,7 +12357,7 @@ snapshots:
       has-property-descriptors: 1.0.2
       object-keys: 1.1.1
 
-  defu@6.1.4: {}
+  defu@6.1.7: {}
 
   delayed-stream@1.0.0: {}
 
@@ -13975,9 +12377,6 @@ snapshots:
 
   diff-sequences@29.6.3: {}
 
-  diff@8.0.3:
-    optional: true
-
   dir-glob@3.0.1:
     dependencies:
       path-type: 4.0.0
@@ -14043,14 +12442,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  drizzle-orm@0.45.1(@opentelemetry/api@1.9.0)(@planetscale/database@1.19.0)(kysely@0.28.9)(mysql2@3.16.0):
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@planetscale/database': 1.19.0
-      kysely: 0.28.9
-      mysql2: 3.16.0
-    optional: true
-
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -14082,12 +12473,6 @@ snapshots:
 
   encodeurl@2.0.0: {}
 
-  encoding-sniffer@0.2.1:
-    dependencies:
-      iconv-lite: 0.6.3
-      whatwg-encoding: 3.1.1
-    optional: true
-
   enhanced-resolve@5.18.4:
     dependencies:
       graceful-fs: 4.2.11
@@ -14102,9 +12487,6 @@ snapshots:
 
   entities@6.0.1: {}
 
-  entities@7.0.1:
-    optional: true
-
   env-editor@0.4.2: {}
 
   error-ex@1.3.4:
@@ -14208,7 +12590,7 @@ snapshots:
       es-errors: 1.3.0
       get-intrinsic: 1.3.0
       has-tostringtag: 1.0.2
-      hasown: 2.0.2
+      hasown: 2.0.4
 
   es-shim-unscopables@1.1.0:
     dependencies:
@@ -14252,30 +12634,33 @@ snapshots:
       '@esbuild/win32-ia32': 0.17.19
       '@esbuild/win32-x64': 0.17.19
 
-  esbuild@0.18.20:
+  esbuild@0.25.0:
     optionalDependencies:
-      '@esbuild/android-arm': 0.18.20
-      '@esbuild/android-arm64': 0.18.20
-      '@esbuild/android-x64': 0.18.20
-      '@esbuild/darwin-arm64': 0.18.20
-      '@esbuild/darwin-x64': 0.18.20
-      '@esbuild/freebsd-arm64': 0.18.20
-      '@esbuild/freebsd-x64': 0.18.20
-      '@esbuild/linux-arm': 0.18.20
-      '@esbuild/linux-arm64': 0.18.20
-      '@esbuild/linux-ia32': 0.18.20
-      '@esbuild/linux-loong64': 0.18.20
-      '@esbuild/linux-mips64el': 0.18.20
-      '@esbuild/linux-ppc64': 0.18.20
-      '@esbuild/linux-riscv64': 0.18.20
-      '@esbuild/linux-s390x': 0.18.20
-      '@esbuild/linux-x64': 0.18.20
-      '@esbuild/netbsd-x64': 0.18.20
-      '@esbuild/openbsd-x64': 0.18.20
-      '@esbuild/sunos-x64': 0.18.20
-      '@esbuild/win32-arm64': 0.18.20
-      '@esbuild/win32-ia32': 0.18.20
-      '@esbuild/win32-x64': 0.18.20
+      '@esbuild/aix-ppc64': 0.25.0
+      '@esbuild/android-arm': 0.25.0
+      '@esbuild/android-arm64': 0.25.0
+      '@esbuild/android-x64': 0.25.0
+      '@esbuild/darwin-arm64': 0.25.0
+      '@esbuild/darwin-x64': 0.25.0
+      '@esbuild/freebsd-arm64': 0.25.0
+      '@esbuild/freebsd-x64': 0.25.0
+      '@esbuild/linux-arm': 0.25.0
+      '@esbuild/linux-arm64': 0.25.0
+      '@esbuild/linux-ia32': 0.25.0
+      '@esbuild/linux-loong64': 0.25.0
+      '@esbuild/linux-mips64el': 0.25.0
+      '@esbuild/linux-ppc64': 0.25.0
+      '@esbuild/linux-riscv64': 0.25.0
+      '@esbuild/linux-s390x': 0.25.0
+      '@esbuild/linux-x64': 0.25.0
+      '@esbuild/netbsd-arm64': 0.25.0
+      '@esbuild/netbsd-x64': 0.25.0
+      '@esbuild/openbsd-arm64': 0.25.0
+      '@esbuild/openbsd-x64': 0.25.0
+      '@esbuild/sunos-x64': 0.25.0
+      '@esbuild/win32-arm64': 0.25.0
+      '@esbuild/win32-ia32': 0.25.0
+      '@esbuild/win32-x64': 0.25.0
 
   esbuild@0.25.12:
     optionalDependencies:
@@ -14364,6 +12749,35 @@ snapshots:
       '@esbuild/win32-ia32': 0.27.7
       '@esbuild/win32-x64': 0.27.7
 
+  esbuild@0.28.1:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.28.1
+      '@esbuild/android-arm': 0.28.1
+      '@esbuild/android-arm64': 0.28.1
+      '@esbuild/android-x64': 0.28.1
+      '@esbuild/darwin-arm64': 0.28.1
+      '@esbuild/darwin-x64': 0.28.1
+      '@esbuild/freebsd-arm64': 0.28.1
+      '@esbuild/freebsd-x64': 0.28.1
+      '@esbuild/linux-arm': 0.28.1
+      '@esbuild/linux-arm64': 0.28.1
+      '@esbuild/linux-ia32': 0.28.1
+      '@esbuild/linux-loong64': 0.28.1
+      '@esbuild/linux-mips64el': 0.28.1
+      '@esbuild/linux-ppc64': 0.28.1
+      '@esbuild/linux-riscv64': 0.28.1
+      '@esbuild/linux-s390x': 0.28.1
+      '@esbuild/linux-x64': 0.28.1
+      '@esbuild/netbsd-arm64': 0.28.1
+      '@esbuild/netbsd-x64': 0.28.1
+      '@esbuild/openbsd-arm64': 0.28.1
+      '@esbuild/openbsd-x64': 0.28.1
+      '@esbuild/openharmony-arm64': 0.28.1
+      '@esbuild/sunos-x64': 0.28.1
+      '@esbuild/win32-arm64': 0.28.1
+      '@esbuild/win32-ia32': 0.28.1
+      '@esbuild/win32-x64': 0.28.1
+
   escalade@3.2.0: {}
 
   escape-html@1.0.3: {}
@@ -14501,7 +12915,7 @@ snapshots:
       hasown: 2.0.2
       is-core-module: 2.16.1
       is-glob: 4.0.3
-      minimatch: 3.1.2
+      minimatch: 3.1.4
       object.fromentries: 2.0.8
       object.groupby: 1.0.3
       object.values: 1.2.1
@@ -14525,7 +12939,7 @@ snapshots:
       globals: 15.15.0
       globrex: 0.1.2
       ignore: 5.3.2
-      semver: 7.7.3
+      semver: 7.7.4
       ts-declaration-location: 1.0.7(typescript@5.9.3)
     transitivePeerDependencies:
       - typescript
@@ -14536,7 +12950,7 @@ snapshots:
       eslint-plugin-es: 3.0.1(eslint@9.39.2(jiti@2.6.1))
       eslint-utils: 2.1.0
       ignore: 5.3.2
-      minimatch: 3.1.2
+      minimatch: 3.1.4
       resolve: 1.22.11
       semver: 6.3.1
 
@@ -14565,7 +12979,7 @@ snapshots:
       estraverse: 5.3.0
       hasown: 2.0.2
       jsx-ast-utils: 3.3.5
-      minimatch: 3.1.2
+      minimatch: 3.1.4
       object.entries: 1.1.9
       object.fromentries: 2.0.8
       object.values: 1.2.1
@@ -14623,7 +13037,7 @@ snapshots:
       is-glob: 4.0.3
       json-stable-stringify-without-jsonify: 1.0.1
       lodash.merge: 4.6.2
-      minimatch: 3.1.2
+      minimatch: 3.1.4
       natural-compare: 1.4.0
       optionator: 0.9.4
     optionalDependencies:
@@ -14685,47 +13099,28 @@ snapshots:
       jest-message-util: 29.7.0
       jest-util: 29.7.0
 
-  expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      '@expo/image-utils': 0.8.8
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       '@expo/image-utils': 0.8.8
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  expo-constants@18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)):
-    dependencies:
-      '@expo/config': 12.0.13
-      '@expo/env': 2.0.8
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - supports-color
 
-  expo-constants@18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)):
+  expo-constants@18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)):
     dependencies:
       '@expo/config': 12.0.13
       '@expo/env': 2.0.8
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - supports-color
 
   expo-dev-client@6.0.20(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-dev-launcher: 6.0.20(expo@54.0.33)
       expo-dev-menu: 7.0.18(expo@54.0.33)
       expo-dev-menu-interface: 2.0.0(expo@54.0.33)
@@ -14736,8 +13131,8 @@ snapshots:
 
   expo-dev-launcher@6.0.20(expo@54.0.33):
     dependencies:
-      ajv: 8.17.1
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      ajv: 8.18.0
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-dev-menu: 7.0.18(expo@54.0.33)
       expo-manifests: 1.0.10(expo@54.0.33)
     transitivePeerDependencies:
@@ -14745,98 +13140,76 @@ snapshots:
 
   expo-dev-menu-interface@2.0.0(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
 
   expo-dev-menu@7.0.18(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-dev-menu-interface: 2.0.0(expo@54.0.33)
 
-  expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)):
-    dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-
-  expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)):
-    dependencies:
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-
-  expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)):
     dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      fontfaceobserver: 2.3.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       fontfaceobserver: 2.3.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
   expo-json-utils@0.15.0: {}
 
   expo-keep-awake@15.0.8(expo@54.0.33)(react@19.1.0):
     dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-
-  expo-linking@8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      invariant: 2.2.4
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-    transitivePeerDependencies:
-      - expo
-      - supports-color
 
-  expo-linking@8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-linking@8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       invariant: 2.2.4
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - expo
       - supports-color
 
   expo-localization@17.0.8(expo@54.0.33)(react@19.1.0):
     dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       rtl-detect: 1.1.2
 
   expo-manifests@1.0.10(expo@54.0.33):
     dependencies:
       '@expo/config': 12.0.13
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-json-utils: 0.15.0
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.0)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@babel/cli': 7.28.3(@babel/core@7.29.0)
-      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.0)
-      '@babel/preset-env': 7.28.5(@babel/core@7.29.0)
-      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0)
+      '@babel/cli': 7.28.3(@babel/core@7.29.6)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/preset-env': 7.28.5(@babel/core@7.29.6)
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.6)
       '@expo/npm-proofread': 1.0.1
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
       eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3)
       glob: 13.0.0
-      jest-expo: 54.0.17(@babel/core@7.29.0)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      jest-expo: 54.0.17(@babel/core@7.29.6)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       jest-snapshot-prettier: prettier@2.8.8
       jest-watch-typeahead: 2.2.1(jest@29.7.0(@types/node@24.10.4))
       resolve-workspace-root: 2.0.0
-      ts-jest: 29.0.5(@babel/core@7.29.0)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3)
+      ts-jest: 29.0.5(@babel/core@7.29.6)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3)
       typescript: 5.9.3
     transitivePeerDependencies:
       - '@babel/core'
@@ -14869,76 +13242,27 @@ snapshots:
       require-from-string: 2.0.2
       resolve-from: 5.0.0
 
-  expo-modules-core@3.0.29(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-modules-core@3.0.29(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       invariant: 2.2.4
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  expo-modules-core@3.0.29(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-router@6.0.23(915cc1bcc1b7ce0da6289325fa4c723d):
     dependencies:
-      invariant: 2.2.4
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-
-  expo-router@6.0.23(9c9430879de51b484c3e68e2beaf4aeb):
-    dependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@expo/schema-utils': 0.1.8
-      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      client-only: 0.0.1
-      debug: 4.4.3
-      escape-string-regexp: 4.0.0
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
-      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-server: 1.0.5
-      fast-deep-equal: 3.1.3
-      invariant: 2.2.4
-      nanoid: 3.3.11
-      query-string: 7.1.3
-      react: 19.1.0
-      react-fast-compare: 3.2.2
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      semver: 7.6.3
-      server-only: 0.0.1
-      sf-symbols-typescript: 2.2.0
-      shallowequal: 1.1.0
-      use-latest-callback: 0.2.6(react@19.1.0)
-      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-    optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
-      react-dom: 19.1.1(react@19.1.0)
-      react-native-reanimated: 4.1.6(@babel/core@7.29.0)(react-native-worklets@0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-    transitivePeerDependencies:
-      - '@react-native-masked-view/masked-view'
-      - '@types/react'
-      - '@types/react-dom'
-      - supports-color
-    optional: true
-
-  expo-router@6.0.23(a9179ff0b15fe10f2a71d6f189aa330e):
-    dependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/schema-utils': 0.1.8
       '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-tabs': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       client-only: 0.0.1
       debug: 4.4.3
       escape-string-regexp: 4.0.0
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-server: 1.0.5
       fast-deep-equal: 3.1.3
       invariant: 2.2.4
@@ -14946,10 +13270,10 @@ snapshots:
       query-string: 7.1.3
       react: 19.1.0
       react-fast-compare: 3.2.2
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       semver: 7.6.3
       server-only: 0.0.1
       sf-symbols-typescript: 2.2.0
@@ -14957,9 +13281,9 @@ snapshots:
       use-latest-callback: 0.2.6(react@19.1.0)
       vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
     optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       react-dom: 19.1.1(react@19.1.0)
-      react-native-reanimated: 4.1.6(@babel/core@7.28.5)(react-native-worklets@0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
       - '@types/react'
@@ -14971,91 +13295,56 @@ snapshots:
   expo-splash-screen@31.0.13(expo@54.0.33):
     dependencies:
       '@expo/prebuild-config': 54.0.8(expo@54.0.33)
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - supports-color
 
-  expo-status-bar@3.0.9(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-status-bar@3.0.9(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
 
-  expo-system-ui@6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)):
+  expo-system-ui@6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)):
     dependencies:
       '@react-native/normalize-colors': 0.81.5
       debug: 4.4.3
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - supports-color
 
   expo-updates-interface@2.0.0(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-
-  expo@54.0.33(@babel/core@7.28.5)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      '@babel/runtime': 7.28.4
-      '@expo/cli': 54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      '@expo/config': 12.0.13
-      '@expo/config-plugins': 54.0.4
-      '@expo/devtools': 0.1.8(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@expo/fingerprint': 0.15.4
-      '@expo/metro': 54.2.0
-      '@expo/metro-config': 54.0.14(expo@54.0.33)
-      '@expo/vector-icons': 15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@ungap/structured-clone': 1.3.0
-      babel-preset-expo: 54.0.10(@babel/core@7.28.5)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2)
-      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))
-      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-keep-awake: 15.0.8(expo@54.0.33)(react@19.1.0)
-      expo-modules-autolinking: 3.0.24
-      expo-modules-core: 3.0.29(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      pretty-format: 29.7.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-refresh: 0.14.2
-      whatwg-url-without-unicode: 8.0.0-3
-    optionalDependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-    transitivePeerDependencies:
-      - '@babel/core'
-      - bufferutil
-      - expo-router
-      - graphql
-      - supports-color
-      - utf-8-validate
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
 
-  expo@54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo@54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/runtime': 7.28.4
-      '@expo/cli': 54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
+      '@expo/cli': 54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
       '@expo/config': 12.0.13
       '@expo/config-plugins': 54.0.4
-      '@expo/devtools': 0.1.8(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/devtools': 0.1.8(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/fingerprint': 0.15.4
       '@expo/metro': 54.2.0
       '@expo/metro-config': 54.0.14(expo@54.0.33)
-      '@expo/vector-icons': 15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/vector-icons': 15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@ungap/structured-clone': 1.3.0
-      babel-preset-expo: 54.0.10(@babel/core@7.29.0)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2)
-      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
-      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))
-      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2)
+      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-keep-awake: 15.0.8(expo@54.0.33)(react@19.1.0)
       expo-modules-autolinking: 3.0.24
-      expo-modules-core: 3.0.29(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-modules-core: 3.0.29(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       pretty-format: 29.7.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       react-refresh: 0.14.2
       whatwg-url-without-unicode: 8.0.0-3
     optionalDependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@babel/core'
       - bufferutil
@@ -15090,7 +13379,7 @@ snapshots:
 
   fast-text-encoding@1.0.6: {}
 
-  fast-uri@3.1.0: {}
+  fast-uri@3.1.3: {}
 
   fastq@1.19.1:
     dependencies:
@@ -15100,12 +13389,9 @@ snapshots:
     dependencies:
       bser: 2.1.1
 
-  fdir@6.5.0(picomatch@4.0.3):
+  fdir@6.5.0(picomatch@4.0.4):
     optionalDependencies:
-      picomatch: 4.0.3
-
-  fflate@0.8.2:
-    optional: true
+      picomatch: 4.0.4
 
   file-entry-cache@8.0.0:
     dependencies:
@@ -15143,13 +13429,10 @@ snapshots:
 
   flat-cache@4.0.1:
     dependencies:
-      flatted: 3.3.3
+      flatted: 3.4.2
       keyv: 4.5.4
 
-  flatted@3.3.3: {}
-
-  flatted@3.3.4:
-    optional: true
+  flatted@3.4.2: {}
 
   flow-enums-runtime@0.0.6: {}
 
@@ -15165,12 +13448,12 @@ snapshots:
     dependencies:
       is-callable: 1.2.7
 
-  form-data@4.0.5:
+  form-data@4.0.6:
     dependencies:
       asynckit: 0.4.0
       combined-stream: 1.0.8
       es-set-tostringtag: 2.1.0
-      hasown: 2.0.2
+      hasown: 2.0.4
       mime-types: 2.1.35
 
   freeport-async@2.0.0: {}
@@ -15248,7 +13531,7 @@ snapshots:
     dependencies:
       citty: 0.1.6
       consola: 3.4.2
-      defu: 6.1.4
+      defu: 6.1.7
       node-fetch-native: 1.6.7
       nypm: 0.6.2
       pathe: 2.0.3
@@ -15263,7 +13546,7 @@ snapshots:
 
   glob@13.0.0:
     dependencies:
-      minimatch: 10.1.1
+      minimatch: 10.2.3
       minipass: 7.1.2
       path-scurry: 2.0.1
 
@@ -15272,7 +13555,7 @@ snapshots:
       fs.realpath: 1.0.0
       inflight: 1.0.6
       inherits: 2.0.4
-      minimatch: 3.1.2
+      minimatch: 3.1.4
       once: 1.4.0
       path-is-absolute: 1.0.1
 
@@ -15306,12 +13589,6 @@ snapshots:
 
   graceful-fs@4.2.11: {}
 
-  h3@2.0.1-rc.6:
-    dependencies:
-      rou3: 0.7.12
-      srvx: 0.9.8
-    optional: true
-
   has-bigints@1.1.0: {}
 
   has-flag@3.0.0: {}
@@ -15336,6 +13613,10 @@ snapshots:
     dependencies:
       function-bind: 1.1.2
 
+  hasown@2.0.4:
+    dependencies:
+      function-bind: 1.1.2
+
   hermes-estree@0.29.1: {}
 
   hermes-estree@0.32.0: {}
@@ -15364,14 +13645,6 @@ snapshots:
 
   html-escaper@2.0.2: {}
 
-  htmlparser2@10.1.0:
-    dependencies:
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
-      domutils: 3.2.2
-      entities: 7.0.1
-    optional: true
-
   http-errors@2.0.1:
     dependencies:
       depd: 2.0.0
@@ -15382,7 +13655,7 @@ snapshots:
 
   http-proxy-agent@5.0.0:
     dependencies:
-      '@tootallnate/once': 2.0.0
+      '@tootallnate/once': 2.0.1
       agent-base: 6.0.2
       debug: 4.4.3
     transitivePeerDependencies:
@@ -15516,7 +13789,7 @@ snapshots:
 
   is-bun-module@2.0.0:
     dependencies:
-      semver: 7.7.3
+      semver: 7.7.4
 
   is-callable@1.2.7: {}
 
@@ -15624,16 +13897,13 @@ snapshots:
 
   isarray@2.0.5: {}
 
-  isbot@5.1.35:
-    optional: true
-
   isexe@2.0.0: {}
 
   istanbul-lib-coverage@3.2.2: {}
 
   istanbul-lib-instrument@5.2.1:
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@babel/parser': 7.29.0
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-coverage: 3.2.2
@@ -15643,8 +13913,8 @@ snapshots:
 
   istanbul-lib-instrument@6.0.3:
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/parser': 7.29.0
+      '@babel/core': 7.29.6
+      '@babel/parser': 7.29.7
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-coverage: 3.2.2
       semver: 7.7.4
@@ -15752,10 +14022,10 @@ snapshots:
 
   jest-config@29.7.0(@types/node@24.10.4):
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@jest/test-sequencer': 29.7.0
       '@jest/types': 29.6.3
-      babel-jest: 29.7.0(@babel/core@7.29.0)
+      babel-jest: 29.7.0(@babel/core@7.29.6)
       chalk: 4.1.2
       ci-info: 3.9.0
       deepmerge: 4.3.1
@@ -15782,10 +14052,10 @@ snapshots:
 
   jest-config@29.7.0(@types/node@25.3.3):
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@jest/test-sequencer': 29.7.0
       '@jest/types': 29.6.3
-      babel-jest: 29.7.0(@babel/core@7.29.0)
+      babel-jest: 29.7.0(@babel/core@7.29.6)
       chalk: 4.1.2
       ci-info: 3.9.0
       deepmerge: 4.3.1
@@ -15861,21 +14131,21 @@ snapshots:
       jest-mock: 29.7.0
       jest-util: 29.7.0
 
-  jest-expo@54.0.17(@babel/core@7.29.0)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  jest-expo@54.0.17(@babel/core@7.29.6)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       '@expo/config': 12.0.13
       '@expo/json-file': 10.0.8
       '@jest/create-cache-key-function': 29.7.0
       '@jest/globals': 29.7.0
-      babel-jest: 29.7.0(@babel/core@7.29.0)
-      expo: 54.0.33(@babel/core@7.29.0)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      babel-jest: 29.7.0(@babel/core@7.29.6)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       jest-environment-jsdom: 29.7.0
       jest-snapshot: 29.7.0
       jest-watch-select-projects: 2.0.0
       jest-watch-typeahead: 2.2.1(jest@29.7.0(@types/node@24.10.4))
       json5: 2.2.3
-      lodash: 4.17.21
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      lodash: 4.18.0
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       react-test-renderer: 19.1.0(react@19.1.0)
       server-only: 0.0.1
       stacktrace-js: 2.0.2
@@ -16023,15 +14293,15 @@ snapshots:
 
   jest-snapshot@29.7.0:
     dependencies:
-      '@babel/core': 7.29.0
-      '@babel/generator': 7.28.5
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.0)
-      '@babel/types': 7.28.5
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.1
+      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.6)
+      '@babel/types': 7.29.0
       '@jest/expect-utils': 29.7.0
       '@jest/transform': 29.7.0
       '@jest/types': 29.6.3
-      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.0)
+      babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.6)
       chalk: 4.1.2
       expect: 29.7.0
       graceful-fs: 4.2.11
@@ -16042,7 +14312,7 @@ snapshots:
       jest-util: 29.7.0
       natural-compare: 1.4.0
       pretty-format: 29.7.0
-      semver: 7.7.3
+      semver: 7.7.4
     transitivePeerDependencies:
       - supports-color
 
@@ -16053,7 +14323,7 @@ snapshots:
       chalk: 4.1.2
       ci-info: 3.9.0
       graceful-fs: 4.2.11
-      picomatch: 2.3.1
+      picomatch: 2.3.2
 
   jest-validate@29.7.0:
     dependencies:
@@ -16136,12 +14406,12 @@ snapshots:
 
   js-tokens@9.0.1: {}
 
-  js-yaml@3.14.2:
+  js-yaml@3.15.0:
     dependencies:
       argparse: 1.0.10
       esprima: 4.0.1
 
-  js-yaml@4.1.1:
+  js-yaml@4.2.0:
     dependencies:
       argparse: 2.0.1
 
@@ -16158,7 +14428,7 @@ snapshots:
       decimal.js: 10.6.0
       domexception: 4.0.0
       escodegen: 2.1.0
-      form-data: 4.0.5
+      form-data: 4.0.6
       html-encoding-sniffer: 3.0.0
       http-proxy-agent: 5.0.0
       https-proxy-agent: 5.0.1
@@ -16173,7 +14443,7 @@ snapshots:
       whatwg-encoding: 2.0.0
       whatwg-mimetype: 3.0.0
       whatwg-url: 11.0.0
-      ws: 8.19.0
+      ws: 8.21.0
       xml-name-validator: 4.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -16215,7 +14485,7 @@ snapshots:
 
   kubernetes-types@1.30.0: {}
 
-  kysely@0.28.9: {}
+  kysely@0.28.17: {}
 
   lan-network@0.1.7: {}
 
@@ -16359,7 +14629,7 @@ snapshots:
 
   lodash.throttle@4.1.1: {}
 
-  lodash@4.17.21: {}
+  lodash@4.18.0: {}
 
   log-symbols@2.2.0:
     dependencies:
@@ -16422,7 +14692,7 @@ snapshots:
 
   metro-babel-transformer@0.83.3:
     dependencies:
-      '@babel/core': 7.28.5
+      '@babel/core': 7.29.6
       flow-enums-runtime: 0.0.6
       hermes-parser: 0.32.0
       nullthrows: 1.1.1
@@ -16451,7 +14721,7 @@ snapshots:
       metro-cache: 0.83.3
       metro-core: 0.83.3
       metro-runtime: 0.83.3
-      yaml: 2.8.2
+      yaml: 2.8.3
     transitivePeerDependencies:
       - bufferutil
       - supports-color
@@ -16493,9 +14763,9 @@ snapshots:
 
   metro-source-map@0.83.3:
     dependencies:
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
       '@babel/traverse--for-generate-function-map': '@babel/traverse@7.29.0'
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.0
       flow-enums-runtime: 0.0.6
       invariant: 2.2.4
       metro-symbolicate: 0.83.3
@@ -16519,10 +14789,10 @@ snapshots:
 
   metro-transform-plugins@0.83.3:
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/generator': 7.28.5
-      '@babel/template': 7.27.2
-      '@babel/traverse': 7.28.5
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.1
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
       flow-enums-runtime: 0.0.6
       nullthrows: 1.1.1
     transitivePeerDependencies:
@@ -16530,10 +14800,10 @@ snapshots:
 
   metro-transform-worker@0.83.3:
     dependencies:
-      '@babel/core': 7.28.5
-      '@babel/generator': 7.28.5
-      '@babel/parser': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.1
+      '@babel/parser': 7.29.0
+      '@babel/types': 7.29.0
       flow-enums-runtime: 0.0.6
       metro: 0.83.3
       metro-babel-transformer: 0.83.3
@@ -16550,13 +14820,13 @@ snapshots:
 
   metro@0.83.3:
     dependencies:
-      '@babel/code-frame': 7.27.1
-      '@babel/core': 7.28.5
-      '@babel/generator': 7.28.5
-      '@babel/parser': 7.28.5
-      '@babel/template': 7.27.2
-      '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/code-frame': 7.29.0
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.1
+      '@babel/parser': 7.29.0
+      '@babel/template': 7.28.6
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.0
       accepts: 1.3.8
       chalk: 4.1.2
       ci-info: 2.0.0
@@ -16588,7 +14858,7 @@ snapshots:
       serialize-error: 2.1.0
       source-map: 0.5.7
       throat: 5.0.0
-      ws: 7.5.10
+      ws: 7.5.11
       yargs: 17.7.2
     transitivePeerDependencies:
       - bufferutil
@@ -16598,7 +14868,7 @@ snapshots:
   micromatch@4.0.8:
     dependencies:
       braces: 3.0.3
-      picomatch: 2.3.1
+      picomatch: 2.3.2
 
   mime-db@1.52.0: {}
 
@@ -16618,17 +14888,17 @@ snapshots:
 
   min-indent@1.0.1: {}
 
-  minimatch@10.1.1:
+  minimatch@10.2.3:
     dependencies:
-      '@isaacs/brace-expansion': 5.0.0
+      brace-expansion: 5.0.7
 
-  minimatch@3.1.2:
+  minimatch@3.1.4:
     dependencies:
-      brace-expansion: 1.1.12
+      brace-expansion: 1.1.13
 
-  minimatch@9.0.5:
+  minimatch@9.0.7:
     dependencies:
-      brace-expansion: 2.0.2
+      brace-expansion: 5.0.7
 
   minimist@1.2.8: {}
 
@@ -16640,9 +14910,6 @@ snapshots:
 
   mkdirp@1.0.4: {}
 
-  mrmime@2.0.1:
-    optional: true
-
   ms@2.0.0: {}
 
   ms@2.1.3: {}
@@ -16709,48 +14976,22 @@ snapshots:
 
   nanoid@5.1.6: {}
 
-  nanostores@1.1.0: {}
+  nanostores@1.4.0: {}
 
   napi-postinstall@0.3.4: {}
 
-  natural-compare@1.4.0: {}
-
-  negotiator@0.6.3: {}
-
-  negotiator@0.6.4: {}
-
-  nested-error-stacks@2.0.1: {}
-
-  next@16.0.0(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
-    dependencies:
-      '@next/env': 16.0.0
-      '@swc/helpers': 0.5.15
-      caniuse-lite: 1.0.30001775
-      postcss: 8.4.31
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      styled-jsx: 5.1.6(@babel/core@7.29.0)(react@19.1.0)
-    optionalDependencies:
-      '@next/swc-darwin-arm64': 16.0.0
-      '@next/swc-darwin-x64': 16.0.0
-      '@next/swc-linux-arm64-gnu': 16.0.0
-      '@next/swc-linux-arm64-musl': 16.0.0
-      '@next/swc-linux-x64-gnu': 16.0.0
-      '@next/swc-linux-x64-musl': 16.0.0
-      '@next/swc-win32-arm64-msvc': 16.0.0
-      '@next/swc-win32-x64-msvc': 16.0.0
-      '@opentelemetry/api': 1.9.0
-      babel-plugin-react-compiler: 1.0.0
-      sharp: 0.34.5
-    transitivePeerDependencies:
-      - '@babel/core'
-      - babel-plugin-macros
-    optional: true
-
-  nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  natural-compare@1.4.0: {}
+
+  negotiator@0.6.3: {}
+
+  negotiator@0.6.4: {}
+
+  nested-error-stacks@2.0.1: {}
+
+  nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       chalk: 5.6.2
-      react-native-nitro-modules: 0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-nitro-modules: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       ts-morph: 25.0.1
       yargs: 17.7.2
       zod: 4.3.6
@@ -16760,7 +15001,7 @@ snapshots:
 
   node-fetch-native@1.6.7: {}
 
-  node-forge@1.3.3: {}
+  node-forge@1.4.0: {}
 
   node-gyp-build-optional-packages@5.2.2:
     dependencies:
@@ -16779,7 +15020,7 @@ snapshots:
     dependencies:
       hosted-git-info: 7.0.2
       proc-log: 4.2.0
-      semver: 7.7.3
+      semver: 7.7.4
       validate-npm-package-name: 5.0.1
 
   npm-run-path@4.0.1:
@@ -16945,7 +15186,7 @@ snapshots:
 
   parse-json@5.2.0:
     dependencies:
-      '@babel/code-frame': 7.29.0
+      '@babel/code-frame': 7.29.7
       error-ex: 1.3.4
       json-parse-even-better-errors: 2.3.1
       lines-and-columns: 1.2.4
@@ -16954,17 +15195,6 @@ snapshots:
     dependencies:
       pngjs: 3.4.0
 
-  parse5-htmlparser2-tree-adapter@7.1.0:
-    dependencies:
-      domhandler: 5.0.3
-      parse5: 7.3.0
-    optional: true
-
-  parse5-parser-stream@7.1.2:
-    dependencies:
-      parse5: 7.3.0
-    optional: true
-
   parse5@7.3.0:
     dependencies:
       entities: 6.0.1
@@ -16996,11 +15226,11 @@ snapshots:
 
   picocolors@1.1.1: {}
 
-  picomatch@2.3.1: {}
+  picomatch@2.3.2: {}
 
-  picomatch@3.0.1: {}
+  picomatch@3.0.2: {}
 
-  picomatch@4.0.3: {}
+  picomatch@4.0.4: {}
 
   pify@4.0.1: {}
 
@@ -17022,7 +15252,7 @@ snapshots:
 
   plist@3.1.0:
     dependencies:
-      '@xmldom/xmldom': 0.8.11
+      '@xmldom/xmldom': 0.8.13
       base64-js: 1.5.1
       xmlbuilder: 15.1.1
 
@@ -17030,27 +15260,14 @@ snapshots:
 
   possible-typed-array-names@1.1.0: {}
 
-  postcss-load-config@3.1.4(postcss@8.5.6):
+  postcss-load-config@3.1.4(postcss@8.5.10):
     dependencies:
       lilconfig: 2.1.0
       yaml: 1.10.2
     optionalDependencies:
-      postcss: 8.5.6
-
-  postcss@8.4.31:
-    dependencies:
-      nanoid: 3.3.11
-      picocolors: 1.1.1
-      source-map-js: 1.2.1
-    optional: true
-
-  postcss@8.4.49:
-    dependencies:
-      nanoid: 3.3.11
-      picocolors: 1.1.1
-      source-map-js: 1.2.1
+      postcss: 8.5.10
 
-  postcss@8.5.6:
+  postcss@8.5.10:
     dependencies:
       nanoid: 3.3.11
       picocolors: 1.1.1
@@ -17132,7 +15349,7 @@ snapshots:
 
   rc9@2.1.2:
     dependencies:
-      defu: 6.1.4
+      defu: 6.1.7
       destr: 2.0.5
 
   rc@1.2.8:
@@ -17144,8 +15361,8 @@ snapshots:
 
   react-devtools-core@6.1.5:
     dependencies:
-      shell-quote: 1.8.3
-      ws: 7.5.10
+      shell-quote: 1.10.0
+      ws: 7.5.11
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
@@ -17172,182 +15389,79 @@ snapshots:
 
   react-is@19.2.3: {}
 
-  react-native-is-edge-to-edge@1.2.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-
-  react-native-is-edge-to-edge@1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-    optional: true
-
-  react-native-nitro-modules@0.26.4(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-
-  react-native-nitro-modules@0.26.4(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  react-native-is-edge-to-edge@1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  react-native-reanimated@4.1.6(@babel/core@7.28.5)(react-native-worklets@0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  react-native-nitro-modules@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@babel/core': 7.28.5
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-worklets: 0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      semver: 7.7.2
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  react-native-reanimated@4.1.6(@babel/core@7.29.0)(react-native-worklets@0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  react-native-reanimated@4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-worklets: 0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-worklets: 0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       semver: 7.7.2
-    optional: true
-
-  react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-
-  react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-    optional: true
 
-  react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
-      react-freeze: 1.0.4(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      warn-once: 0.1.1
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
       react-freeze: 1.0.4(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       warn-once: 0.1.1
-    optional: true
 
-  react-native-svg@15.12.1(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  react-native-svg@15.12.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       css-select: 5.2.2
       css-tree: 1.1.3
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       warn-once: 0.1.1
 
-  react-native-worklets@0.7.1(@babel/core@7.28.5)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      '@babel/core': 7.28.5
-      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.28.5)
-      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-optional-chaining': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.28.5)
-      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.28.5)
-      '@babel/preset-typescript': 7.27.1(@babel/core@7.28.5)
-      convert-source-map: 2.0.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0)
-      semver: 7.7.3
-    transitivePeerDependencies:
-      - supports-color
-
-  react-native-worklets@0.7.1(@babel/core@7.29.0)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.0)
-      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-optional-chaining': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.29.0)
-      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.0)
-      '@babel/preset-typescript': 7.27.1(@babel/core@7.29.0)
+  react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-optional-chaining': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/preset-typescript': 7.27.1(@babel/core@7.29.6)
       convert-source-map: 2.0.0
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0)
-      semver: 7.7.3
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0):
-    dependencies:
-      '@jest/create-cache-key-function': 29.7.0
-      '@react-native/assets-registry': 0.81.5
-      '@react-native/codegen': 0.81.5(@babel/core@7.28.5)
-      '@react-native/community-cli-plugin': 0.81.5
-      '@react-native/gradle-plugin': 0.81.5
-      '@react-native/js-polyfills': 0.81.5
-      '@react-native/normalize-colors': 0.81.5
-      '@react-native/virtualized-lists': 0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.28.5)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      abort-controller: 3.0.0
-      anser: 1.4.10
-      ansi-regex: 5.0.1
-      babel-jest: 29.7.0(@babel/core@7.28.5)
-      babel-plugin-syntax-hermes-parser: 0.29.1
-      base64-js: 1.5.1
-      commander: 12.1.0
-      flow-enums-runtime: 0.0.6
-      glob: 7.2.3
-      invariant: 2.2.4
-      jest-environment-node: 29.7.0
-      memoize-one: 5.2.1
-      metro-runtime: 0.83.3
-      metro-source-map: 0.83.3
-      nullthrows: 1.1.1
-      pretty-format: 29.7.0
-      promise: 8.3.0
-      react: 19.1.0
-      react-devtools-core: 6.1.5
-      react-refresh: 0.14.2
-      regenerator-runtime: 0.13.11
-      scheduler: 0.26.0
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       semver: 7.7.3
-      stacktrace-parser: 0.1.11
-      whatwg-fetch: 3.6.20
-      ws: 6.2.3
-      yargs: 17.7.2
-    optionalDependencies:
-      '@types/react': 19.1.17
     transitivePeerDependencies:
-      - '@babel/core'
-      - '@react-native-community/cli'
-      - '@react-native/metro-config'
-      - bufferutil
       - supports-color
-      - utf-8-validate
 
-  react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0):
+  react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0):
     dependencies:
       '@jest/create-cache-key-function': 29.7.0
       '@react-native/assets-registry': 0.81.5
-      '@react-native/codegen': 0.81.5(@babel/core@7.29.0)
+      '@react-native/codegen': 0.81.5(@babel/core@7.29.6)
       '@react-native/community-cli-plugin': 0.81.5
       '@react-native/gradle-plugin': 0.81.5
       '@react-native/js-polyfills': 0.81.5
       '@react-native/normalize-colors': 0.81.5
-      '@react-native/virtualized-lists': 0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.0)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-native/virtualized-lists': 0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       abort-controller: 3.0.0
       anser: 1.4.10
       ansi-regex: 5.0.1
-      babel-jest: 29.7.0(@babel/core@7.29.0)
+      babel-jest: 29.7.0(@babel/core@7.29.6)
       babel-plugin-syntax-hermes-parser: 0.29.1
       base64-js: 1.5.1
       commander: 12.1.0
@@ -17369,7 +15483,7 @@ snapshots:
       semver: 7.7.3
       stacktrace-parser: 0.1.11
       whatwg-fetch: 3.6.20
-      ws: 6.2.3
+      ws: 6.2.4
       yargs: 17.7.2
     optionalDependencies:
       '@types/react': 19.1.17
@@ -17427,19 +15541,10 @@ snapshots:
 
   readdirp@3.6.0:
     dependencies:
-      picomatch: 2.3.1
+      picomatch: 2.3.2
 
   readdirp@5.0.0: {}
 
-  recast@0.23.11:
-    dependencies:
-      ast-types: 0.16.1
-      esprima: 4.0.1
-      source-map: 0.6.1
-      tiny-invariant: 1.3.3
-      tslib: 2.8.1
-    optional: true
-
   redent@3.0.0:
     dependencies:
       indent-string: 4.0.0
@@ -17559,32 +15664,35 @@ snapshots:
     optionalDependencies:
       fsevents: 2.3.3
 
-  rollup@4.54.0:
+  rollup@4.59.0:
     dependencies:
       '@types/estree': 1.0.8
     optionalDependencies:
-      '@rollup/rollup-android-arm-eabi': 4.54.0
-      '@rollup/rollup-android-arm64': 4.54.0
-      '@rollup/rollup-darwin-arm64': 4.54.0
-      '@rollup/rollup-darwin-x64': 4.54.0
-      '@rollup/rollup-freebsd-arm64': 4.54.0
-      '@rollup/rollup-freebsd-x64': 4.54.0
-      '@rollup/rollup-linux-arm-gnueabihf': 4.54.0
-      '@rollup/rollup-linux-arm-musleabihf': 4.54.0
-      '@rollup/rollup-linux-arm64-gnu': 4.54.0
-      '@rollup/rollup-linux-arm64-musl': 4.54.0
-      '@rollup/rollup-linux-loong64-gnu': 4.54.0
-      '@rollup/rollup-linux-ppc64-gnu': 4.54.0
-      '@rollup/rollup-linux-riscv64-gnu': 4.54.0
-      '@rollup/rollup-linux-riscv64-musl': 4.54.0
-      '@rollup/rollup-linux-s390x-gnu': 4.54.0
-      '@rollup/rollup-linux-x64-gnu': 4.54.0
-      '@rollup/rollup-linux-x64-musl': 4.54.0
-      '@rollup/rollup-openharmony-arm64': 4.54.0
-      '@rollup/rollup-win32-arm64-msvc': 4.54.0
-      '@rollup/rollup-win32-ia32-msvc': 4.54.0
-      '@rollup/rollup-win32-x64-gnu': 4.54.0
-      '@rollup/rollup-win32-x64-msvc': 4.54.0
+      '@rollup/rollup-android-arm-eabi': 4.59.0
+      '@rollup/rollup-android-arm64': 4.59.0
+      '@rollup/rollup-darwin-arm64': 4.59.0
+      '@rollup/rollup-darwin-x64': 4.59.0
+      '@rollup/rollup-freebsd-arm64': 4.59.0
+      '@rollup/rollup-freebsd-x64': 4.59.0
+      '@rollup/rollup-linux-arm-gnueabihf': 4.59.0
+      '@rollup/rollup-linux-arm-musleabihf': 4.59.0
+      '@rollup/rollup-linux-arm64-gnu': 4.59.0
+      '@rollup/rollup-linux-arm64-musl': 4.59.0
+      '@rollup/rollup-linux-loong64-gnu': 4.59.0
+      '@rollup/rollup-linux-loong64-musl': 4.59.0
+      '@rollup/rollup-linux-ppc64-gnu': 4.59.0
+      '@rollup/rollup-linux-ppc64-musl': 4.59.0
+      '@rollup/rollup-linux-riscv64-gnu': 4.59.0
+      '@rollup/rollup-linux-riscv64-musl': 4.59.0
+      '@rollup/rollup-linux-s390x-gnu': 4.59.0
+      '@rollup/rollup-linux-x64-gnu': 4.59.0
+      '@rollup/rollup-linux-x64-musl': 4.59.0
+      '@rollup/rollup-openbsd-x64': 4.59.0
+      '@rollup/rollup-openharmony-arm64': 4.59.0
+      '@rollup/rollup-win32-arm64-msvc': 4.59.0
+      '@rollup/rollup-win32-ia32-msvc': 4.59.0
+      '@rollup/rollup-win32-x64-gnu': 4.59.0
+      '@rollup/rollup-win32-x64-msvc': 4.59.0
       fsevents: 2.3.3
 
   rou3@0.7.12: {}
@@ -17661,14 +15769,6 @@ snapshots:
 
   serialize-error@2.1.0: {}
 
-  seroval-plugins@1.5.0(seroval@1.5.0):
-    dependencies:
-      seroval: 1.5.0
-    optional: true
-
-  seroval@1.5.0:
-    optional: true
-
   serve-static@1.16.3:
     dependencies:
       encodeurl: 2.0.0
@@ -17680,7 +15780,7 @@ snapshots:
 
   server-only@0.0.1: {}
 
-  set-cookie-parser@2.7.2: {}
+  set-cookie-parser@3.1.2: {}
 
   set-function-length@1.2.2:
     dependencies:
@@ -17710,45 +15810,13 @@ snapshots:
 
   shallowequal@1.1.0: {}
 
-  sharp@0.34.5:
-    dependencies:
-      '@img/colour': 1.1.0
-      detect-libc: 2.1.2
-      semver: 7.7.4
-    optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.34.5
-      '@img/sharp-darwin-x64': 0.34.5
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
-      '@img/sharp-libvips-darwin-x64': 1.2.4
-      '@img/sharp-libvips-linux-arm': 1.2.4
-      '@img/sharp-libvips-linux-arm64': 1.2.4
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
-      '@img/sharp-libvips-linux-s390x': 1.2.4
-      '@img/sharp-libvips-linux-x64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
-      '@img/sharp-linux-arm': 0.34.5
-      '@img/sharp-linux-arm64': 0.34.5
-      '@img/sharp-linux-ppc64': 0.34.5
-      '@img/sharp-linux-riscv64': 0.34.5
-      '@img/sharp-linux-s390x': 0.34.5
-      '@img/sharp-linux-x64': 0.34.5
-      '@img/sharp-linuxmusl-arm64': 0.34.5
-      '@img/sharp-linuxmusl-x64': 0.34.5
-      '@img/sharp-wasm32': 0.34.5
-      '@img/sharp-win32-arm64': 0.34.5
-      '@img/sharp-win32-ia32': 0.34.5
-      '@img/sharp-win32-x64': 0.34.5
-    optional: true
-
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
 
   shebang-regex@3.0.0: {}
 
-  shell-quote@1.8.3: {}
+  shell-quote@1.10.0: {}
 
   side-channel-list@1.0.0:
     dependencies:
@@ -17794,13 +15862,6 @@ snapshots:
     dependencies:
       is-arrayish: 0.3.4
 
-  sirv@3.0.2:
-    dependencies:
-      '@polka/url': 1.0.0-next.29
-      mrmime: 2.0.1
-      totalist: 3.0.1
-    optional: true
-
   sisteransi@1.0.5: {}
 
   slash@2.0.0: {}
@@ -17829,9 +15890,6 @@ snapshots:
 
   source-map@0.6.1: {}
 
-  source-map@0.7.6:
-    optional: true
-
   source-map@0.8.0-beta.0:
     dependencies:
       whatwg-url: 7.1.0
@@ -17843,9 +15901,6 @@ snapshots:
   sqlstring@2.3.3:
     optional: true
 
-  srvx@0.9.8:
-    optional: true
-
   stable-hash@0.0.5: {}
 
   stack-generator@2.0.10:
@@ -17986,14 +16041,6 @@ snapshots:
 
   structured-headers@0.4.1: {}
 
-  styled-jsx@5.1.6(@babel/core@7.29.0)(react@19.1.0):
-    dependencies:
-      client-only: 0.0.1
-      react: 19.1.0
-    optionalDependencies:
-      '@babel/core': 7.29.0
-    optional: true
-
   sucrase@3.35.1:
     dependencies:
       '@jridgewell/gen-mapping': 0.3.13
@@ -18035,7 +16082,7 @@ snapshots:
 
   tapable@2.3.3: {}
 
-  tar@7.5.2:
+  tar@7.5.19:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
@@ -18046,7 +16093,7 @@ snapshots:
   taze@0.18.0:
     dependencies:
       '@antfu/ni': 0.23.2
-      js-yaml: 4.1.1
+      js-yaml: 4.2.0
       ofetch: 1.5.1
       package-manager-detector: 0.2.11
       tinyexec: 0.3.2
@@ -18073,7 +16120,7 @@ snapshots:
     dependencies:
       '@istanbuljs/schema': 0.1.3
       glob: 7.2.3
-      minimatch: 3.1.2
+      minimatch: 3.1.4
 
   thenify-all@1.6.0:
     dependencies:
@@ -18085,12 +16132,6 @@ snapshots:
 
   throat@5.0.0: {}
 
-  tiny-invariant@1.3.3:
-    optional: true
-
-  tiny-warning@1.0.3:
-    optional: true
-
   tinybench@2.9.0: {}
 
   tinyexec@0.3.2: {}
@@ -18099,8 +16140,8 @@ snapshots:
 
   tinyglobby@0.2.15:
     dependencies:
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
 
   tinypool@1.1.1: {}
 
@@ -18120,9 +16161,6 @@ snapshots:
 
   toml@4.1.1: {}
 
-  totalist@3.0.1:
-    optional: true
-
   tough-cookie@4.1.4:
     dependencies:
       psl: 1.15.0
@@ -18146,12 +16184,12 @@ snapshots:
 
   ts-declaration-location@1.0.7(typescript@5.9.3):
     dependencies:
-      picomatch: 4.0.3
+      picomatch: 4.0.4
       typescript: 5.9.3
 
   ts-interface-checker@0.1.13: {}
 
-  ts-jest@29.0.5(@babel/core@7.29.0)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.0))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3):
+  ts-jest@29.0.5(@babel/core@7.29.6)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3):
     dependencies:
       bs-logger: 0.2.6
       fast-json-stable-stringify: 2.1.0
@@ -18160,13 +16198,13 @@ snapshots:
       json5: 2.2.3
       lodash.memoize: 4.1.2
       make-error: 1.3.6
-      semver: 7.7.3
+      semver: 7.7.4
       typescript: 5.9.3
       yargs-parser: 21.1.1
     optionalDependencies:
-      '@babel/core': 7.29.0
+      '@babel/core': 7.29.6
       '@jest/types': 29.6.3
-      babel-jest: 29.7.0(@babel/core@7.29.0)
+      babel-jest: 29.7.0(@babel/core@7.29.6)
       esbuild: 0.25.12
 
   ts-morph@25.0.1:
@@ -18191,7 +16229,7 @@ snapshots:
 
   tslib@2.8.1: {}
 
-  tsup@6.7.0(postcss@8.5.6)(typescript@5.6.3):
+  tsup@6.7.0(postcss@8.5.10)(typescript@5.6.3):
     dependencies:
       bundle-require: 4.2.1(esbuild@0.17.19)
       cac: 6.7.14
@@ -18201,14 +16239,14 @@ snapshots:
       execa: 5.1.1
       globby: 11.1.0
       joycon: 3.1.1
-      postcss-load-config: 3.1.4(postcss@8.5.6)
+      postcss-load-config: 3.1.4(postcss@8.5.10)
       resolve-from: 5.0.0
       rollup: 3.29.5
       source-map: 0.8.0-beta.0
       sucrase: 3.35.1
       tree-kill: 1.2.2
     optionalDependencies:
-      postcss: 8.5.6
+      postcss: 8.5.10
       typescript: 5.6.3
     transitivePeerDependencies:
       - supports-color
@@ -18221,32 +16259,14 @@ snapshots:
     optionalDependencies:
       fsevents: 2.3.3
 
-  turbo-darwin-64@2.7.2:
-    optional: true
-
-  turbo-darwin-arm64@2.7.2:
-    optional: true
-
-  turbo-linux-64@2.7.2:
-    optional: true
-
-  turbo-linux-arm64@2.7.2:
-    optional: true
-
-  turbo-windows-64@2.7.2:
-    optional: true
-
-  turbo-windows-arm64@2.7.2:
-    optional: true
-
-  turbo@2.7.2:
+  turbo@2.10.4:
     optionalDependencies:
-      turbo-darwin-64: 2.7.2
-      turbo-darwin-arm64: 2.7.2
-      turbo-linux-64: 2.7.2
-      turbo-linux-arm64: 2.7.2
-      turbo-windows-64: 2.7.2
-      turbo-windows-arm64: 2.7.2
+      '@turbo/darwin-64': 2.10.4
+      '@turbo/darwin-arm64': 2.10.4
+      '@turbo/linux-64': 2.10.4
+      '@turbo/linux-arm64': 2.10.4
+      '@turbo/windows-64': 2.10.4
+      '@turbo/windows-arm64': 2.10.4
 
   type-check@0.4.0:
     dependencies:
@@ -18297,16 +16317,41 @@ snapshots:
 
   ufo@1.6.1: {}
 
-  ufo@1.6.3:
-    optional: true
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      '@clack/prompts': 0.11.0
+      commander: 14.0.2
+      deepmerge: 4.3.1
+      jsonc-parser: 3.3.1
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@edge-runtime/vm'
+      - '@types/debug'
+      - '@types/node'
+      - '@vitest/browser'
+      - '@vitest/ui'
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - lightningcss
+      - msw
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
 
-  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3):
     dependencies:
       '@clack/prompts': 0.11.0
       commander: 14.0.2
       deepmerge: 4.3.1
       jsonc-parser: 3.3.1
-      vitest: 3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3)
     transitivePeerDependencies:
       - '@edge-runtime/vm'
       - '@types/debug'
@@ -18338,7 +16383,7 @@ snapshots:
   unconfig@0.6.1:
     dependencies:
       '@antfu/utils': 8.1.1
-      defu: 6.1.4
+      defu: 6.1.7
       importx: 0.5.2
     transitivePeerDependencies:
       - supports-color
@@ -18348,10 +16393,7 @@ snapshots:
   undici-types@7.18.2:
     optional: true
 
-  undici@6.22.0: {}
-
-  undici@7.22.0:
-    optional: true
+  undici@6.27.0: {}
 
   undici@8.5.0: {}
 
@@ -18374,14 +16416,6 @@ snapshots:
 
   unpipe@1.0.0: {}
 
-  unplugin@2.3.11:
-    dependencies:
-      '@jridgewell/remapping': 2.3.5
-      acorn: 8.16.0
-      picomatch: 4.0.3
-      webpack-virtual-modules: 0.6.2
-    optional: true
-
   unrs-resolver@1.11.1:
     dependencies:
       napi-postinstall: 0.3.4
@@ -18446,9 +16480,9 @@ snapshots:
 
   utils-merge@1.0.1: {}
 
-  uuid@14.0.1: {}
+  uuid@11.1.1: {}
 
-  uuid@7.0.3: {}
+  uuid@14.0.1: {}
 
   v8-to-istanbul@9.3.0:
     dependencies:
@@ -18469,13 +16503,34 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
-  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
+  vite-node@3.2.4(@types/node@24.10.4):
+    dependencies:
+      cac: 6.7.14
+      debug: 4.4.3
+      es-module-lexer: 1.7.0
+      pathe: 2.0.3
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@types/node'
+      - jiti
+      - less
+      - lightningcss
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
+  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -18490,13 +16545,13 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
+  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -18511,35 +16566,35 @@ snapshots:
       - tsx
       - yaml
 
-  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
+  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.6.3)
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
+  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.9.3)
     optionalDependencies:
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
+  vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
-      esbuild: 0.27.7
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
-      postcss: 8.5.6
-      rollup: 4.54.0
+      esbuild: 0.28.1
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+      postcss: 8.5.10
+      rollup: 4.59.0
       tinyglobby: 0.2.15
     optionalDependencies:
       '@types/node': 24.10.4
@@ -18548,15 +16603,15 @@ snapshots:
       lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
-      yaml: 2.9.0
+      yaml: 2.8.3
 
-  vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
+  vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
-      esbuild: 0.27.7
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
-      postcss: 8.5.6
-      rollup: 4.54.0
+      esbuild: 0.28.1
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+      postcss: 8.5.10
+      rollup: 4.59.0
       tinyglobby: 0.2.15
     optionalDependencies:
       '@types/node': 25.3.3
@@ -18565,42 +16620,79 @@ snapshots:
       lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
-      yaml: 2.9.0
+      yaml: 2.8.3
 
-  vitefu@1.1.2(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      '@types/chai': 5.2.3
+      '@vitest/expect': 3.2.7
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/pretty-format': 3.2.7
+      '@vitest/runner': 3.2.7
+      '@vitest/snapshot': 3.2.7
+      '@vitest/spy': 3.2.7
+      '@vitest/utils': 3.2.7
+      chai: 5.3.3
+      debug: 4.4.3
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      std-env: 3.10.0
+      tinybench: 2.9.0
+      tinyexec: 0.3.2
+      tinyglobby: 0.2.15
+      tinypool: 1.1.1
+      tinyrainbow: 2.0.0
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      why-is-node-running: 2.3.0
     optionalDependencies:
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-    optional: true
+      '@types/debug': 4.1.12
+      '@types/node': 24.10.4
+      jsdom: 20.0.3
+    transitivePeerDependencies:
+      - jiti
+      - less
+      - lightningcss
+      - msw
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
 
-  vitest@3.2.4(@types/debug@4.1.12)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3):
     dependencies:
       '@types/chai': 5.2.3
-      '@vitest/expect': 3.2.4
-      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-      '@vitest/pretty-format': 3.2.4
-      '@vitest/runner': 3.2.4
-      '@vitest/snapshot': 3.2.4
-      '@vitest/spy': 3.2.4
-      '@vitest/utils': 3.2.4
+      '@vitest/expect': 3.2.7
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4))
+      '@vitest/pretty-format': 3.2.7
+      '@vitest/runner': 3.2.7
+      '@vitest/snapshot': 3.2.7
+      '@vitest/spy': 3.2.7
+      '@vitest/utils': 3.2.7
       chai: 5.3.3
       debug: 4.4.3
       expect-type: 1.3.0
       magic-string: 0.30.21
       pathe: 2.0.3
-      picomatch: 4.0.3
+      picomatch: 4.0.4
       std-env: 3.10.0
       tinybench: 2.9.0
       tinyexec: 0.3.2
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@24.10.4)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
       '@types/node': 24.10.4
-      '@vitest/ui': 3.2.4(vitest@4.1.6)
       jsdom: 20.0.3
     transitivePeerDependencies:
       - jiti
@@ -18616,35 +16708,34 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.4(@types/debug@4.1.12)(@types/node@25.3.3)(@vitest/ui@3.2.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
-      '@vitest/expect': 3.2.4
-      '@vitest/mocker': 3.2.4(vite@7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
-      '@vitest/pretty-format': 3.2.4
-      '@vitest/runner': 3.2.4
-      '@vitest/snapshot': 3.2.4
-      '@vitest/spy': 3.2.4
-      '@vitest/utils': 3.2.4
+      '@vitest/expect': 3.2.7
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/pretty-format': 3.2.7
+      '@vitest/runner': 3.2.7
+      '@vitest/snapshot': 3.2.7
+      '@vitest/spy': 3.2.7
+      '@vitest/utils': 3.2.7
       chai: 5.3.3
       debug: 4.4.3
       expect-type: 1.3.0
       magic-string: 0.30.21
       pathe: 2.0.3
-      picomatch: 4.0.3
+      picomatch: 4.0.4
       std-env: 3.10.0
       tinybench: 2.9.0
       tinyexec: 0.3.2
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.0(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
-      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
       '@types/node': 25.3.3
-      '@vitest/ui': 3.2.4(vitest@3.2.4)
       jsdom: 20.0.3
     transitivePeerDependencies:
       - jiti
@@ -18660,10 +16751,10 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(@vitest/ui@3.2.4)(jsdom@20.0.3)(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)):
+  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@vitest/expect': 4.1.6
-      '@vitest/mocker': 4.1.6(vite@7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 4.1.6
       '@vitest/runner': 4.1.6
       '@vitest/snapshot': 4.1.6
@@ -18674,18 +16765,17 @@ snapshots:
       magic-string: 0.30.21
       obug: 2.1.1
       pathe: 2.0.3
-      picomatch: 4.0.3
+      picomatch: 4.0.4
       std-env: 4.1.0
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.1.0
-      vite: 7.3.0(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.9.0)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
       '@types/node': 24.10.4
-      '@vitest/ui': 3.2.4(vitest@4.1.6)
       jsdom: 20.0.3
     transitivePeerDependencies:
       - msw
@@ -18714,25 +16804,14 @@ snapshots:
 
   webidl-conversions@7.0.0: {}
 
-  webpack-virtual-modules@0.6.2:
-    optional: true
-
   whatwg-encoding@2.0.0:
     dependencies:
       iconv-lite: 0.6.3
 
-  whatwg-encoding@3.1.1:
-    dependencies:
-      iconv-lite: 0.6.3
-    optional: true
-
   whatwg-fetch@3.6.20: {}
 
   whatwg-mimetype@3.0.0: {}
 
-  whatwg-mimetype@4.0.0:
-    optional: true
-
   whatwg-url-without-unicode@8.0.0-3:
     dependencies:
       buffer: 5.7.1
@@ -18817,22 +16896,18 @@ snapshots:
       imurmurhash: 0.1.4
       signal-exit: 3.0.7
 
-  ws@6.2.3:
+  ws@6.2.4:
     dependencies:
       async-limiter: 1.0.1
 
-  ws@7.5.10: {}
-
-  ws@8.18.3: {}
-
-  ws@8.19.0: {}
+  ws@7.5.11: {}
 
   ws@8.21.0: {}
 
   xcode@3.0.1:
     dependencies:
       simple-plist: 1.3.1
-      uuid: 7.0.3
+      uuid: 11.1.1
 
   xml-name-validator@4.0.0: {}
 
@@ -18841,14 +16916,6 @@ snapshots:
       sax: 1.4.3
       xmlbuilder: 11.0.1
 
-  xmlbuilder2@4.0.3:
-    dependencies:
-      '@oozcitak/dom': 2.0.2
-      '@oozcitak/infra': 2.0.2
-      '@oozcitak/util': 10.0.0
-      js-yaml: 4.1.1
-    optional: true
-
   xmlbuilder@11.0.1: {}
 
   xmlbuilder@15.1.1: {}
@@ -18863,7 +16930,7 @@ snapshots:
 
   yaml@1.10.2: {}
 
-  yaml@2.8.2: {}
+  yaml@2.8.3: {}
 
   yaml@2.9.0: {}
 
@@ -18881,7 +16948,4 @@ snapshots:
 
   yocto-queue@0.1.0: {}
 
-  zod@3.25.76:
-    optional: true
-
   zod@4.3.6: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 57f05a9db..12961fedd 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -54,7 +54,7 @@ catalog:
   "sonner": ^2.0.6
   tailwindcss: ^4.1.17
   "tw-animate-css": ^1.2.4
-  vite: ^7.3.1
+  vite: ^7.3.5
   "vite-tsconfig-paths": ^5.1.4
   wrangler: ^4.65.0
   zod: ^4.1.13
@@ -63,7 +63,7 @@ catalog:
   "@voidhash/mimic": v1.0.0-beta.16
   "@voidhash/mimic-react": v1.0.0-beta.16
   "@voidhash/mimic-effect": v1.0.0-beta.16
-  "better-auth": ^1.4.18
+  "better-auth": ^1.6.23
 
 catalogs:
   react18:

From aff4e7e5a841d15b8183154b7916fe777914056a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 11:00:11 +0200
Subject: [PATCH 038/129] ci(security): reject high-risk dependency advisories

---
 .github/workflows/security-audit.yml | 49 ++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 .github/workflows/security-audit.yml

diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
new file mode 100644
index 000000000..24a0958bd
--- /dev/null
+++ b/.github/workflows/security-audit.yml
@@ -0,0 +1,49 @@
+name: Security audit
+
+on:
+  push:
+    branches: [main, preview]
+    paths:
+      - package.json
+      - pnpm-lock.yaml
+      - pnpm-workspace.yaml
+      - apps/**/package.json
+      - examples/**/package.json
+      - libraries/**/package.json
+      - packages/**/package.json
+      - .github/workflows/security-audit.yml
+  pull_request:
+    paths:
+      - package.json
+      - pnpm-lock.yaml
+      - pnpm-workspace.yaml
+      - apps/**/package.json
+      - examples/**/package.json
+      - libraries/**/package.json
+      - packages/**/package.json
+      - .github/workflows/security-audit.yml
+
+permissions:
+  contents: read
+
+jobs:
+  production-dependencies:
+    name: Production dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.19.0
+          run_install: false
+
+      - name: Reject Critical and High advisories
+        run: pnpm audit --prod --audit-level high

From cde5a3193483db86269d3a22129e1df64c1977ef Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 11:27:33 +0200
Subject: [PATCH 039/129] fix(cli): migrate Better Auth API key plugin

---
 apps/cli/package.json                         |  1 +
 .../src/services/auth/utils/better-auth.ts    |  4 ++--
 package.json                                  |  1 +
 pnpm-lock.yaml                                | 22 +++++++++++++++++++
 pnpm-workspace.yaml                           |  1 +
 5 files changed, 27 insertions(+), 2 deletions(-)

diff --git a/apps/cli/package.json b/apps/cli/package.json
index 1acd74153..32f376c5e 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -33,6 +33,7 @@
     "test:watch": "vitest -c vitest.unit.mts"
   },
   "dependencies": {
+    "@better-auth/api-key": "catalog:",
     "@effect/platform-node": "4.0.0-beta.84",
     "@voidhash/generated-clients": "workspace:*",
     "@voidhash/shared": "workspace:*",
diff --git a/apps/cli/src/services/auth/utils/better-auth.ts b/apps/cli/src/services/auth/utils/better-auth.ts
index 751354378..4df81b91a 100644
--- a/apps/cli/src/services/auth/utils/better-auth.ts
+++ b/apps/cli/src/services/auth/utils/better-auth.ts
@@ -1,6 +1,6 @@
+import { apiKeyClient } from "@better-auth/api-key/client";
 import { createAuthClient } from "better-auth/client";
-import { apiKeyClient } from "better-auth/client/plugins";
-import { Data, Effect, Layer, Context } from "effect";
+import { Context, Data, Effect, Layer } from "effect";
 
 import { CliConfig } from "../../../domain/services/cli-config";
 
diff --git a/package.json b/package.json
index 8adf1e7e6..a87556e04 100644
--- a/package.json
+++ b/package.json
@@ -28,6 +28,7 @@
       "@effect/platform-bun": "4.0.0-beta.84",
       "@effect/language-service": "^0.86.2",
       "@effect/vitest": "4.0.0-beta.84",
+      "@better-auth/api-key": "^1.6.23",
       "better-auth": "^1.6.23"
     }
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6286628c2..9c6b99794 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,6 +6,9 @@ settings:
 
 catalogs:
   default:
+    '@better-auth/api-key':
+      specifier: ^1.6.23
+      version: 1.6.23
     '@effect/language-service':
       specifier: ^0.64.1
       version: 0.64.1
@@ -126,6 +129,9 @@ importers:
 
   apps/cli:
     dependencies:
+      '@better-auth/api-key':
+        specifier: 'catalog:'
+        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
       '@effect/platform-node':
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -1348,6 +1354,14 @@ packages:
   '@bcoe/v8-coverage@0.2.3':
     resolution: {integrity: sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==}
 
+  '@better-auth/api-key@1.6.23':
+    resolution: {integrity: sha512-HQMTv1GkY5FzE8BlUXdNhuKPBPUvusBYlAtIQElQjfsmGiPiBie7BdzuhcbXhAqJerunU299yvEge2WlZusp+Q==}
+    peerDependencies:
+      '@better-auth/core': ^1.6.23
+      '@better-auth/utils': 0.4.2
+      better-auth: ^1.6.23
+      better-call: 1.3.7
+
   '@better-auth/core@1.6.23':
     resolution: {integrity: sha512-beEhOs0uVeOxYOZKUfIEBd/nQV2Bd4/6wyLxZ0OFkn6CMTK2Vi+hXuZLnyPBeB6RdHpebEoJWiHqwHxBIxgPDQ==}
     peerDependencies:
@@ -9214,6 +9228,14 @@ snapshots:
 
   '@bcoe/v8-coverage@0.2.3': {}
 
+  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
+    dependencies:
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      better-call: 1.3.7(zod@4.3.6)
+      zod: 4.3.6
+
   '@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)':
     dependencies:
       '@better-auth/utils': 0.4.2
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 12961fedd..bc9d6183e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -5,6 +5,7 @@ packages:
   - examples/*
 
 catalog:
+  "@better-auth/api-key": ^1.6.23
   # Effect ecosystem
   "@effect/cli": ^0.73.0
   "@effect/rpc": ^0.73.0

From aa82d3ec4d69edcd6aa9f5e9b20b07fdc8be52b7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 11:22:34 +0200
Subject: [PATCH 040/129] ci(oss): add validation and secret scanning gates

---
 .github/workflows/ci.yml              | 44 +++++++++++++++++++++++++
 .github/workflows/secret-scanning.yml | 46 +++++++++++++++++++++++++++
 2 files changed, 90 insertions(+)
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 .github/workflows/secret-scanning.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 000000000..19bbe0b18
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,44 @@
+name: Repository CI
+
+on:
+  push:
+    branches: [main, preview]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: repository-ci-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  validate:
+    name: Validate
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.19.0
+          run_install: false
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build
+        run: pnpm build
+
+      - name: Typecheck
+        run: pnpm typecheck
+
+      - name: Test
+        run: pnpm test
diff --git a/.github/workflows/secret-scanning.yml b/.github/workflows/secret-scanning.yml
new file mode 100644
index 000000000..d074990f0
--- /dev/null
+++ b/.github/workflows/secret-scanning.yml
@@ -0,0 +1,46 @@
+name: Secret scanning
+
+on:
+  push:
+    branches: [main, preview]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: secret-scanning-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  gitleaks:
+    name: Gitleaks
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout full history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Scan the published tree
+        run: >-
+          docker run --rm
+          --volume "$GITHUB_WORKSPACE:/repo:ro"
+          ghcr.io/gitleaks/gitleaks@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f
+          dir /repo --redact --no-banner --exit-code 1
+
+  trufflehog:
+    name: TruffleHog
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout full history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Scan verified secrets in published history
+        run: >-
+          docker run --rm
+          --volume "$GITHUB_WORKSPACE:/repo:ro"
+          ghcr.io/trufflesecurity/trufflehog:3.95.9@sha256:59b244249d1a1aef4baa24fe73d3c931616264482580d806d77f6c74d26b3e42
+          git file:///repo --fail --only-verified --no-update

From 798f1bb894d897355836f34c34b58e3323067f64 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 11:30:17 +0200
Subject: [PATCH 041/129] test(cli): allow compiler checks on shared runners

---
 apps/cli/vitest.unit.mts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/cli/vitest.unit.mts b/apps/cli/vitest.unit.mts
index aae86c8c7..a5126899b 100644
--- a/apps/cli/vitest.unit.mts
+++ b/apps/cli/vitest.unit.mts
@@ -7,5 +7,6 @@ export default defineConfig({
     exclude: ["./node_modules/**"],
     include: ["./tests/**/*.test.ts"],
     reporters: ["verbose"],
+    testTimeout: 15_000,
   },
 });

From 9ba07faa5030ace92c07a28f052fb01ba00d46d6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 12:57:00 +0200
Subject: [PATCH 042/129] relocate shared TypeScript presets

---
 apps/cli/package.json                         |   2 +-
 libraries/node/package.json                   |   2 +-
 libraries/paywalls/package.json               |   2 +-
 libraries/web/package.json                    |   2 +-
 packages/tsconfig/alchemy-base.json           |   8 +
 .../internal-package-typescript-6.json        |  11 +
 .../tsconfig/react-library-typescript-6.json  |  12 +
 packages/tsconfig/sst-env.d.ts                |  10 -
 packages/tsconfig/typescript-6.json           |  21 +
 pnpm-lock.yaml                                | 469 +++++-------------
 10 files changed, 171 insertions(+), 368 deletions(-)
 create mode 100644 packages/tsconfig/alchemy-base.json
 create mode 100644 packages/tsconfig/internal-package-typescript-6.json
 create mode 100644 packages/tsconfig/react-library-typescript-6.json
 delete mode 100644 packages/tsconfig/sst-env.d.ts
 create mode 100644 packages/tsconfig/typescript-6.json

diff --git a/apps/cli/package.json b/apps/cli/package.json
index 32f376c5e..3240ff38c 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -52,7 +52,7 @@
     "@voidhash/tsconfig": "workspace:*",
     "dotenv-cli": "^10.0.0",
     "esbuild": "^0.25.10",
-    "tsup": "^6.1.3",
+    "tsup": "^8.5.1",
     "tsx": "^4.19.3",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.2.7"
diff --git a/libraries/node/package.json b/libraries/node/package.json
index 951dc88f1..d211e2ff7 100644
--- a/libraries/node/package.json
+++ b/libraries/node/package.json
@@ -68,7 +68,7 @@
     "@effect/platform": "catalog:",
     "@voidhash/tsconfig": "workspace:*",
     "effect": "catalog:",
-    "tsup": "^6.1.3",
+    "tsup": "^8.5.1",
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
     "vite-tsconfig-paths": "catalog:",
diff --git a/libraries/paywalls/package.json b/libraries/paywalls/package.json
index 91001d9ba..f22c2ae84 100644
--- a/libraries/paywalls/package.json
+++ b/libraries/paywalls/package.json
@@ -151,7 +151,7 @@
     "esbuild": "^0.25.10",
     "react": "catalog:",
     "react-dom": "catalog:",
-    "tsup": "^6.1.3",
+    "tsup": "^8.5.1",
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
     "vitest": "^3.2.7"
diff --git a/libraries/web/package.json b/libraries/web/package.json
index b9ba9fec4..eb2e9bc47 100644
--- a/libraries/web/package.json
+++ b/libraries/web/package.json
@@ -72,7 +72,7 @@
     "jsdom": "^20.0.3",
     "react": "catalog:",
     "react-dom": "catalog:",
-    "tsup": "^6.1.3",
+    "tsup": "^8.5.1",
     "tsx": "^4.19.3",
     "typescript": "5.6.3",
     "vite-tsconfig-paths": "catalog:",
diff --git a/packages/tsconfig/alchemy-base.json b/packages/tsconfig/alchemy-base.json
new file mode 100644
index 000000000..151a54aca
--- /dev/null
+++ b/packages/tsconfig/alchemy-base.json
@@ -0,0 +1,8 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "./typescript-6.json",
+  "compilerOptions": {
+    "resolveJsonModule": true,
+    "strict": true
+  }
+}
diff --git a/packages/tsconfig/internal-package-typescript-6.json b/packages/tsconfig/internal-package-typescript-6.json
new file mode 100644
index 000000000..806a3a3c3
--- /dev/null
+++ b/packages/tsconfig/internal-package-typescript-6.json
@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "./typescript-6.json",
+  "compilerOptions": {
+    "declaration": true,
+    "declarationMap": true,
+    "emitDeclarationOnly": true,
+    "noEmit": false,
+    "outDir": "${configDir}/dist"
+  }
+}
diff --git a/packages/tsconfig/react-library-typescript-6.json b/packages/tsconfig/react-library-typescript-6.json
new file mode 100644
index 000000000..b0f3c6dd5
--- /dev/null
+++ b/packages/tsconfig/react-library-typescript-6.json
@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "display": "React Library (TypeScript 6)",
+  "extends": "./typescript-6.json",
+  "compilerOptions": {
+    "lib": ["ES2015", "DOM"],
+    "module": "ESNext",
+    "target": "ES2022",
+    "jsx": "react-jsx",
+    "noEmit": true
+  }
+}
diff --git a/packages/tsconfig/sst-env.d.ts b/packages/tsconfig/sst-env.d.ts
deleted file mode 100644
index f2ed71576..000000000
--- a/packages/tsconfig/sst-env.d.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-/* This file is auto-generated by SST. Do not edit. */
-/* tslint:disable */
-/* eslint-disable */
-/* deno-fmt-ignore-file */
-/* biome-ignore-all lint: auto-generated */
-
-/// <reference path="../../../../sst-env.d.ts" />
-
-import "sst";
-export {};
diff --git a/packages/tsconfig/typescript-6.json b/packages/tsconfig/typescript-6.json
new file mode 100644
index 000000000..1cdd0367a
--- /dev/null
+++ b/packages/tsconfig/typescript-6.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "compilerOptions": {
+    "target": "ESNext",
+    "lib": ["ESNext", "DOM"],
+    "module": "Preserve",
+    "moduleResolution": "Bundler",
+    "moduleDetection": "force",
+    "esModuleInterop": true,
+    "jsx": "react-jsx",
+    "allowJs": true,
+    "allowImportingTsExtensions": true,
+    "rewriteRelativeImportExtensions": true,
+    "verbatimModuleSyntax": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "skipLibCheck": true
+  },
+  "exclude": ["node_modules", "build", "dist", ".next", ".expo"]
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9c6b99794..5ef9140a9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -179,8 +179,8 @@ importers:
         specifier: ^10.0.0
         version: 10.0.0
       tsup:
-        specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
+        specifier: ^8.5.1
+        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -335,8 +335,8 @@ importers:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
       tsup:
-        specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
+        specifier: ^8.5.1
+        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -375,8 +375,8 @@ importers:
         specifier: 19.1.0
         version: 19.1.0(react@19.1.0)
       tsup:
-        specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
+        specifier: ^8.5.1
+        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -485,8 +485,8 @@ importers:
         specifier: 19.1.0
         version: 19.1.0(react@19.1.0)
       tsup:
-        specifier: ^6.1.3
-        version: 6.7.0(postcss@8.5.10)(typescript@5.6.3)
+        specifier: ^8.5.1
+        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -1578,12 +1578,6 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/android-arm64@0.17.19':
-    resolution: {integrity: sha512-KBMWvEZooR7+kzY0BtbTQn0OAYY7CsiydT63pVEaPtVYF0hXbUaOyZog37DKxK7NF3XacBJOpYT4adIJh+avxA==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [android]
-
   '@esbuild/android-arm64@0.25.0':
     resolution: {integrity: sha512-grvv8WncGjDSyUBjN9yHXNt+cq0snxXbDxy5pJtzMKGmmpPxeAmAhWxXI+01lU5rwZomDgD3kJwulEnhTRUd6g==}
     engines: {node: '>=18'}
@@ -1614,12 +1608,6 @@ packages:
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm@0.17.19':
-    resolution: {integrity: sha512-rIKddzqhmav7MSmoFCmDIb6e2W57geRsM94gV2l38fzhXMwq7hZoClug9USI2pFRGL06f4IOPHHpFNOkWieR8A==}
-    engines: {node: '>=12'}
-    cpu: [arm]
-    os: [android]
-
   '@esbuild/android-arm@0.25.0':
     resolution: {integrity: sha512-PTyWCYYiU0+1eJKmw21lWtC+d08JDZPQ5g+kFyxP0V+es6VPPSUhM6zk8iImp2jbV6GwjX4pap0JFbUQN65X1g==}
     engines: {node: '>=18'}
@@ -1650,12 +1638,6 @@ packages:
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-x64@0.17.19':
-    resolution: {integrity: sha512-uUTTc4xGNDT7YSArp/zbtmbhO0uEEK9/ETW29Wk1thYUJBz3IVnvgEiEwEa9IeLyvnpKrWK64Utw2bgUmDveww==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [android]
-
   '@esbuild/android-x64@0.25.0':
     resolution: {integrity: sha512-m/ix7SfKG5buCnxasr52+LI78SQ+wgdENi9CqyCXwjVR2X4Jkz+BpC3le3AoBPYTC9NHklwngVXvbJ9/Akhrfg==}
     engines: {node: '>=18'}
@@ -1686,12 +1668,6 @@ packages:
     cpu: [x64]
     os: [android]
 
-  '@esbuild/darwin-arm64@0.17.19':
-    resolution: {integrity: sha512-80wEoCfF/hFKM6WE1FyBHc9SfUblloAWx6FJkFWTWiCoht9Mc0ARGEM47e67W9rI09YoUxJL68WHfDRYEAvOhg==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [darwin]
-
   '@esbuild/darwin-arm64@0.25.0':
     resolution: {integrity: sha512-mVwdUb5SRkPayVadIOI78K7aAnPamoeFR2bT5nszFUZ9P8UpK4ratOdYbZZXYSqPKMHfS1wdHCJk1P1EZpRdvw==}
     engines: {node: '>=18'}
@@ -1722,12 +1698,6 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.17.19':
-    resolution: {integrity: sha512-IJM4JJsLhRYr9xdtLytPLSH9k/oxR3boaUIYiHkAawtwNOXKE8KoU8tMvryogdcT8AU+Bflmh81Xn6Q0vTZbQw==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [darwin]
-
   '@esbuild/darwin-x64@0.25.0':
     resolution: {integrity: sha512-DgDaYsPWFTS4S3nWpFcMn/33ZZwAAeAFKNHNa1QN0rI4pUjgqf0f7ONmXf6d22tqTY+H9FNdgeaAa+YIFUn2Rg==}
     engines: {node: '>=18'}
@@ -1758,12 +1728,6 @@ packages:
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/freebsd-arm64@0.17.19':
-    resolution: {integrity: sha512-pBwbc7DufluUeGdjSU5Si+P3SoMF5DQ/F/UmTSb8HXO80ZEAJmrykPyzo1IfNbAoaqw48YRpv8shwd1NoI0jcQ==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [freebsd]
-
   '@esbuild/freebsd-arm64@0.25.0':
     resolution: {integrity: sha512-VN4ocxy6dxefN1MepBx/iD1dH5K8qNtNe227I0mnTRjry8tj5MRk4zprLEdG8WPyAPb93/e4pSgi1SoHdgOa4w==}
     engines: {node: '>=18'}
@@ -1794,12 +1758,6 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.17.19':
-    resolution: {integrity: sha512-4lu+n8Wk0XlajEhbEffdy2xy53dpR06SlzvhGByyg36qJw6Kpfk7cp45DR/62aPH9mtJRmIyrXAS5UWBrJT6TQ==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [freebsd]
-
   '@esbuild/freebsd-x64@0.25.0':
     resolution: {integrity: sha512-mrSgt7lCh07FY+hDD1TxiTyIHyttn6vnjesnPoVDNmDfOmggTLXRv8Id5fNZey1gl/V2dyVK1VXXqVsQIiAk+A==}
     engines: {node: '>=18'}
@@ -1830,12 +1788,6 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/linux-arm64@0.17.19':
-    resolution: {integrity: sha512-ct1Tg3WGwd3P+oZYqic+YZF4snNl2bsnMKRkb3ozHmnM0dGWuxcPTTntAF6bOP0Sp4x0PjSF+4uHQ1xvxfRKqg==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [linux]
-
   '@esbuild/linux-arm64@0.25.0':
     resolution: {integrity: sha512-9QAQjTWNDM/Vk2bgBl17yWuZxZNQIF0OUUuPZRKoDtqF2k4EtYbpyiG5/Dk7nqeK6kIJWPYldkOcBqjXjrUlmg==}
     engines: {node: '>=18'}
@@ -1866,12 +1818,6 @@ packages:
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm@0.17.19':
-    resolution: {integrity: sha512-cdmT3KxjlOQ/gZ2cjfrQOtmhG4HJs6hhvm3mWSRDPtZ/lP5oe8FWceS10JaSJC13GBd4eH/haHnqf7hhGNLerA==}
-    engines: {node: '>=12'}
-    cpu: [arm]
-    os: [linux]
-
   '@esbuild/linux-arm@0.25.0':
     resolution: {integrity: sha512-vkB3IYj2IDo3g9xX7HqhPYxVkNQe8qTK55fraQyTzTX/fxaDtXiEnavv9geOsonh2Fd2RMB+i5cbhu2zMNWJwg==}
     engines: {node: '>=18'}
@@ -1902,12 +1848,6 @@ packages:
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.17.19':
-    resolution: {integrity: sha512-w4IRhSy1VbsNxHRQpeGCHEmibqdTUx61Vc38APcsRbuVgK0OPEnQ0YD39Brymn96mOx48Y2laBQGqgZ0j9w6SQ==}
-    engines: {node: '>=12'}
-    cpu: [ia32]
-    os: [linux]
-
   '@esbuild/linux-ia32@0.25.0':
     resolution: {integrity: sha512-43ET5bHbphBegyeqLb7I1eYn2P/JYGNmzzdidq/w0T8E2SsYL1U6un2NFROFRg1JZLTzdCoRomg8Rvf9M6W6Gg==}
     engines: {node: '>=18'}
@@ -1938,12 +1878,6 @@ packages:
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.17.19':
-    resolution: {integrity: sha512-2iAngUbBPMq439a+z//gE+9WBldoMp1s5GWsUSgqHLzLJ9WoZLZhpwWuym0u0u/4XmZ3gpHmzV84PonE+9IIdQ==}
-    engines: {node: '>=12'}
-    cpu: [loong64]
-    os: [linux]
-
   '@esbuild/linux-loong64@0.25.0':
     resolution: {integrity: sha512-fC95c/xyNFueMhClxJmeRIj2yrSMdDfmqJnyOY4ZqsALkDrrKJfIg5NTMSzVBr5YW1jf+l7/cndBfP3MSDpoHw==}
     engines: {node: '>=18'}
@@ -1974,12 +1908,6 @@ packages:
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.17.19':
-    resolution: {integrity: sha512-LKJltc4LVdMKHsrFe4MGNPp0hqDFA1Wpt3jE1gEyM3nKUvOiO//9PheZZHfYRfYl6AwdTH4aTcXSqBerX0ml4A==}
-    engines: {node: '>=12'}
-    cpu: [mips64el]
-    os: [linux]
-
   '@esbuild/linux-mips64el@0.25.0':
     resolution: {integrity: sha512-nkAMFju7KDW73T1DdH7glcyIptm95a7Le8irTQNO/qtkoyypZAnjchQgooFUDQhNAy4iu08N79W4T4pMBwhPwQ==}
     engines: {node: '>=18'}
@@ -2010,12 +1938,6 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.17.19':
-    resolution: {integrity: sha512-/c/DGybs95WXNS8y3Ti/ytqETiW7EU44MEKuCAcpPto3YjQbyK3IQVKfF6nbghD7EcLUGl0NbiL5Rt5DMhn5tg==}
-    engines: {node: '>=12'}
-    cpu: [ppc64]
-    os: [linux]
-
   '@esbuild/linux-ppc64@0.25.0':
     resolution: {integrity: sha512-NhyOejdhRGS8Iwv+KKR2zTq2PpysF9XqY+Zk77vQHqNbo/PwZCzB5/h7VGuREZm1fixhs4Q/qWRSi5zmAiO4Fw==}
     engines: {node: '>=18'}
@@ -2046,12 +1968,6 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.17.19':
-    resolution: {integrity: sha512-FC3nUAWhvFoutlhAkgHf8f5HwFWUL6bYdvLc/TTuxKlvLi3+pPzdZiFKSWz/PF30TB1K19SuCxDTI5KcqASJqA==}
-    engines: {node: '>=12'}
-    cpu: [riscv64]
-    os: [linux]
-
   '@esbuild/linux-riscv64@0.25.0':
     resolution: {integrity: sha512-5S/rbP5OY+GHLC5qXp1y/Mx//e92L1YDqkiBbO9TQOvuFXM+iDqUNG5XopAnXoRH3FjIUDkeGcY1cgNvnXp/kA==}
     engines: {node: '>=18'}
@@ -2082,12 +1998,6 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.17.19':
-    resolution: {integrity: sha512-IbFsFbxMWLuKEbH+7sTkKzL6NJmG2vRyy6K7JJo55w+8xDk7RElYn6xvXtDW8HCfoKBFK69f3pgBJSUSQPr+4Q==}
-    engines: {node: '>=12'}
-    cpu: [s390x]
-    os: [linux]
-
   '@esbuild/linux-s390x@0.25.0':
     resolution: {integrity: sha512-XM2BFsEBz0Fw37V0zU4CXfcfuACMrppsMFKdYY2WuTS3yi8O1nFOhil/xhKTmE1nPmVyvQJjJivgDT+xh8pXJA==}
     engines: {node: '>=18'}
@@ -2118,12 +2028,6 @@ packages:
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-x64@0.17.19':
-    resolution: {integrity: sha512-68ngA9lg2H6zkZcyp22tsVt38mlhWde8l3eJLWkyLrp4HwMUr3c1s/M2t7+kHIhvMjglIBrFpncX1SzMckomGw==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [linux]
-
   '@esbuild/linux-x64@0.25.0':
     resolution: {integrity: sha512-9yl91rHw/cpwMCNytUDxwj2XjFpxML0y9HAOH9pNVQDpQrBxHy01Dx+vaMu0N1CKa/RzBD2hB4u//nfc+Sd3Cw==}
     engines: {node: '>=18'}
@@ -2184,12 +2088,6 @@ packages:
     cpu: [arm64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.17.19':
-    resolution: {integrity: sha512-CwFq42rXCR8TYIjIfpXCbRX0rp1jo6cPIUPSaWwzbVI4aOfX96OXY8M6KNmtPcg7QjYeDmN+DD0Wp3LaBOLf4Q==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [netbsd]
-
   '@esbuild/netbsd-x64@0.25.0':
     resolution: {integrity: sha512-jl+qisSB5jk01N5f7sPCsBENCOlPiS/xptD5yxOx2oqQfyourJwIKLRA2yqWdifj3owQZCL2sn6o08dBzZGQzA==}
     engines: {node: '>=18'}
@@ -2250,12 +2148,6 @@ packages:
     cpu: [arm64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.17.19':
-    resolution: {integrity: sha512-cnq5brJYrSZ2CF6c35eCmviIN3k3RczmHz8eYaVlNasVqsNY+JKohZU5MKmaOI+KkllCdzOKKdPs762VCPC20g==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [openbsd]
-
   '@esbuild/openbsd-x64@0.25.0':
     resolution: {integrity: sha512-2gwwriSMPcCFRlPlKx3zLQhfN/2WjJ2NSlg5TKLQOJdV0mSxIcYNTMhk3H3ulL/cak+Xj0lY1Ym9ysDV1igceg==}
     engines: {node: '>=18'}
@@ -2310,12 +2202,6 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
-  '@esbuild/sunos-x64@0.17.19':
-    resolution: {integrity: sha512-vCRT7yP3zX+bKWFeP/zdS6SqdWB8OIpaRq/mbXQxTGHnIxspRtigpkUcDMlSCOejlHowLqII7K2JKevwyRP2rg==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [sunos]
-
   '@esbuild/sunos-x64@0.25.0':
     resolution: {integrity: sha512-bxI7ThgLzPrPz484/S9jLlvUAHYMzy6I0XiU1ZMeAEOBcS0VePBFxh1JjTQt3Xiat5b6Oh4x7UC7IwKQKIJRIg==}
     engines: {node: '>=18'}
@@ -2346,12 +2232,6 @@ packages:
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/win32-arm64@0.17.19':
-    resolution: {integrity: sha512-yYx+8jwowUstVdorcMdNlzklLYhPxjniHWFKgRqH7IFlUEa0Umu3KuYplf1HUZZ422e3NU9F4LGb+4O0Kdcaag==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [win32]
-
   '@esbuild/win32-arm64@0.25.0':
     resolution: {integrity: sha512-ZUAc2YK6JW89xTbXvftxdnYy3m4iHIkDtK3CLce8wg8M2L+YZhIvO1DKpxrd0Yr59AeNNkTiic9YLf6FTtXWMw==}
     engines: {node: '>=18'}
@@ -2382,12 +2262,6 @@ packages:
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.17.19':
-    resolution: {integrity: sha512-eggDKanJszUtCdlVs0RB+h35wNlb5v4TWEkq4vZcmVt5u/HiDZrTXe2bWFQUez3RgNHwx/x4sk5++4NSSicKkw==}
-    engines: {node: '>=12'}
-    cpu: [ia32]
-    os: [win32]
-
   '@esbuild/win32-ia32@0.25.0':
     resolution: {integrity: sha512-eSNxISBu8XweVEWG31/JzjkIGbGIJN/TrRoiSVZwZ6pkC6VX4Im/WV2cz559/TXLcYbcrDN8JtKgd9DJVIo8GA==}
     engines: {node: '>=18'}
@@ -2418,12 +2292,6 @@ packages:
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-x64@0.17.19':
-    resolution: {integrity: sha512-lAhycmKnVOuRYNtRtatQR1LPQf2oYCkRGkSFnseDAKPl8lu5SOsK/e1sXe5a0Pc5kHIHe6P2I/ilntNv2xf3cA==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [win32]
-
   '@esbuild/win32-x64@0.25.0':
     resolution: {integrity: sha512-ZENoHJBxA20C2zFzh6AI4fT6RraMzjYw4xKWemRTRmRVtN9c5DcH9r/f2ihEkMjOW5eGgrwCslG/+Y/3bL+DHQ==}
     engines: {node: '>=18'}
@@ -3963,10 +3831,6 @@ packages:
     resolution: {integrity: sha512-FmeCCAenzH0KH381SPT5FZmiA/TmpndpcaShhfgEN9eCVjnFBqq3l1xrI42y8+PPLI6hypzou4GXw00WHmPBLQ==}
     engines: {node: '>= 0.4'}
 
-  array-union@2.1.0:
-    resolution: {integrity: sha512-HGyxoOTYUyCM6stUe6EJgnd4EoewAI7zMdfqO+kGjnlZmBDz/cR5pf8r/cR4Wq60sL/p0IkcjUEEPwS3GFrIyw==}
-    engines: {node: '>=8'}
-
   array.prototype.findlast@1.2.5:
     resolution: {integrity: sha512-CVvd6FHg1Z3POpBLxO6E6zr+rSKEQ9L6rZHAaY7lLfhKsWYUBBOuMs0e9o24oopj6H+geRCX0YJ+TJLBK2eHyQ==}
     engines: {node: '>= 0.4'}
@@ -4227,12 +4091,6 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  bundle-require@4.2.1:
-    resolution: {integrity: sha512-7Q/6vkyYAwOmQNRw75x+4yRtZCZJXUDmHHlFdkiV0wgv/reNjtJwpu1jPJ0w2kbEpIM0uoKI3S4/f39dU7AjSA==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-    peerDependencies:
-      esbuild: '>=0.17'
-
   bundle-require@5.1.0:
     resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -4322,6 +4180,10 @@ packages:
     resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==}
     engines: {node: '>= 8.10.0'}
 
+  chokidar@4.0.3:
+    resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==}
+    engines: {node: '>= 14.16.0'}
+
   chokidar@5.0.0:
     resolution: {integrity: sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==}
     engines: {node: '>= 20.19.0'}
@@ -4442,6 +4304,9 @@ packages:
   concat-map@0.0.1:
     resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
 
+  confbox@0.1.8:
+    resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
+
   confbox@0.2.2:
     resolution: {integrity: sha512-1NB+BKqhtNipMsov4xI/NnhCKp9XG9NamYp5PVm9klAT0fsrNPjaFICsCFhNhwZJKNh7zB/3q8qXz0E9oaMNtQ==}
 
@@ -4624,10 +4489,6 @@ packages:
     resolution: {integrity: sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
 
-  dir-glob@3.0.1:
-    resolution: {integrity: sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA==}
-    engines: {node: '>=8'}
-
   doctrine@2.1.0:
     resolution: {integrity: sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==}
     engines: {node: '>=0.10.0'}
@@ -4779,11 +4640,6 @@ packages:
     peerDependencies:
       esbuild: '>=0.12 <1'
 
-  esbuild@0.17.19:
-    resolution: {integrity: sha512-XQ0jAPFkK/u3LcVRcvVHQcTIqD6E2H1fvZMA5dQPSOWb3suUbWbfbRf94pjc0bNzRYLfIrDRQXr7X+LHIm5oHw==}
-    engines: {node: '>=12'}
-    hasBin: true
-
   esbuild@0.25.0:
     resolution: {integrity: sha512-BXq5mqc8ltbaN34cDqWuYKyNhX8D/Z0J1xdtdQ8UcIIIyJyz+ZMKUt58tF3SrZ85jcfN/PZYhjR5uDQAYNVbuw==}
     engines: {node: '>=18'}
@@ -5288,6 +5144,9 @@ packages:
     resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
     engines: {node: '>=10'}
 
+  fix-dts-default-cjs-exports@1.0.1:
+    resolution: {integrity: sha512-pVIECanWFC61Hzl2+oOCtoJ3F17kglZC/6N94eRWycFgBH35hHx0Li604ZIzhseh97mf2p0cv7vVrOZGoqhlEg==}
+
   flat-cache@4.0.1:
     resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
     engines: {node: '>=16'}
@@ -5429,10 +5288,6 @@ packages:
     resolution: {integrity: sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ==}
     engines: {node: '>= 0.4'}
 
-  globby@11.1.0:
-    resolution: {integrity: sha512-jhIXaOzy1sb8IyocaruWSn1TjmnBVs8Ayhcy83rmxNJ8q2uWKCAj3CnJY+KpGSXCueAPc0i05kVvVKtP1t9S3g==}
-    engines: {node: '>=10'}
-
   globrex@0.1.2:
     resolution: {integrity: sha512-uHJgbwAMwNFf5mLst7IWLNg14x1CkeqglJb/K3doi4dw6q2IvAAmM/Y81kevy83wP+Sst+nutFTYOGg3d1lsxg==}
 
@@ -6185,9 +6040,9 @@ packages:
     resolution: {integrity: sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==}
     engines: {node: '>= 12.0.0'}
 
-  lilconfig@2.1.0:
-    resolution: {integrity: sha512-utWOt/GHzuUxnLKxB6dk81RoOeoNeHgbrXiuGk4yyF5qlRz+iIVWu56E2fqGHFrXz0QNUhLB/8nKqvRH66JKGQ==}
-    engines: {node: '>=10'}
+  lilconfig@3.1.3:
+    resolution: {integrity: sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw==}
+    engines: {node: '>=14'}
 
   lines-and-columns@1.2.4:
     resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==}
@@ -6219,9 +6074,6 @@ packages:
   lodash.merge@4.6.2:
     resolution: {integrity: sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==}
 
-  lodash.sortby@4.7.0:
-    resolution: {integrity: sha512-HDWXG8isMntAyRF5vZ7xKuEvOhT4AhlRt/3czTSjvGUxjYCBVRQY48ViDHyfYz9VIoBkW4TMGQNapx+l3RUwdA==}
-
   lodash.throttle@4.1.1:
     resolution: {integrity: sha512-wIkUCfVKpVsWo3JSZlc+8MB5it+2AN5W8J7YVMST30UrvcQNZ1Okbj+rbVniijTWE6FGYy4XJq/rHkas8qJMLQ==}
 
@@ -6421,6 +6273,9 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
+  mlly@1.8.2:
+    resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
+
   ms@2.0.0:
     resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
 
@@ -6695,10 +6550,6 @@ packages:
     resolution: {integrity: sha512-oWyT4gICAu+kaA7QWk/jvCHWarMKNs6pXOGWKDTr7cw4IGcUbW+PeTfbaQiLGheFRpjo6O9J0PmyMfQPjH71oA==}
     engines: {node: 20 || >=22}
 
-  path-type@4.0.0:
-    resolution: {integrity: sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==}
-    engines: {node: '>=8'}
-
   pathe@2.0.3:
     resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
 
@@ -6740,6 +6591,9 @@ packages:
     resolution: {integrity: sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==}
     engines: {node: '>=8'}
 
+  pkg-types@1.3.1:
+    resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
+
   pkg-types@2.3.0:
     resolution: {integrity: sha512-SIqCzDRg0s9npO5XQ3tNZioRY1uK06lA41ynBC1YmFTmnY6FjUjVt6s4LoADmwoig1qqD0oK8h1p/8mlMx8Oig==}
 
@@ -6755,16 +6609,22 @@ packages:
     resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
     engines: {node: '>= 0.4'}
 
-  postcss-load-config@3.1.4:
-    resolution: {integrity: sha512-6DiM4E7v4coTE4uzA8U//WhtPwyhiim3eyjEMFCnUpzbrkK9wJHgKDT2mR+HbtSrd/NubVaYTOpSpjUl8NQeRg==}
-    engines: {node: '>= 10'}
+  postcss-load-config@6.0.1:
+    resolution: {integrity: sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g==}
+    engines: {node: '>= 18'}
     peerDependencies:
+      jiti: '>=1.21.0'
       postcss: 8.5.10
-      ts-node: '>=9.0.0'
+      tsx: ^4.8.1
+      yaml: 2.8.3
     peerDependenciesMeta:
+      jiti:
+        optional: true
       postcss:
         optional: true
-      ts-node:
+      tsx:
+        optional: true
+      yaml:
         optional: true
 
   postcss@8.5.10:
@@ -7007,6 +6867,10 @@ packages:
     resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==}
     engines: {node: '>=8.10.0'}
 
+  readdirp@4.1.2:
+    resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==}
+    engines: {node: '>= 14.18.0'}
+
   readdirp@5.0.0:
     resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
     engines: {node: '>= 20.19.0'}
@@ -7125,11 +6989,6 @@ packages:
     deprecated: Rimraf versions prior to v4 are no longer supported
     hasBin: true
 
-  rollup@3.29.5:
-    resolution: {integrity: sha512-GVsDdsbJzzy4S/v3dqWPJ7EfvZJfCHiDqe80IyrF59LYuP+e6U1LJoUqeuqRbwAWoMNoXivMNeNAOf5E22VA1w==}
-    engines: {node: '>=14.18.0', npm: '>=8.0.0'}
-    hasBin: true
-
   rollup@4.59.0:
     resolution: {integrity: sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
@@ -7328,10 +7187,9 @@ packages:
     resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
     engines: {node: '>=0.10.0'}
 
-  source-map@0.8.0-beta.0:
-    resolution: {integrity: sha512-2ymg6oRBpebeZi9UUNsgQ89bhx01TcTkmNTGnNO88imTmbSgy4nfujrgVEFKWpMTEGA11EDkTt7mqObTPdigIA==}
-    engines: {node: '>= 8'}
-    deprecated: The work that was done in this beta branch won't be included in future versions
+  source-map@0.7.6:
+    resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
+    engines: {node: '>= 12'}
 
   split-on-first@1.1.0:
     resolution: {integrity: sha512-43ZssAJaMusuKWL8sKUBQXHWOpq8d6CfN/u1p4gUzfJkM05C8rxTmYrkIPTXapZpORA6LkkzcUulJ8FqA7Uudw==}
@@ -7599,9 +7457,6 @@ packages:
     resolution: {integrity: sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==}
     engines: {node: '>=6'}
 
-  tr46@1.0.1:
-    resolution: {integrity: sha512-dTpowEjclQ7Kgx5SdBkqRzVhERQXov8/l9Ft9dVM9fmg0W0KQSVaXX9T4i6twCPNtYiZM53lpSSUAwJbFPOHxA==}
-
   tr46@3.0.0:
     resolution: {integrity: sha512-l7FvfAHlcmulp8kr+flpQZmVwtu7nfRV7NZujtN0OqES8EL4O4e0qqzL0DC5gAvx/ZC/9lk6rhcUwYvkBnBnYA==}
     engines: {node: '>=12'}
@@ -7665,15 +7520,18 @@ packages:
   tslib@2.8.1:
     resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
 
-  tsup@6.7.0:
-    resolution: {integrity: sha512-L3o8hGkaHnu5TdJns+mCqFsDBo83bJ44rlK7e6VdanIvpea4ArPcU3swWGsLVbXak1PqQx/V+SSmFPujBK+zEQ==}
-    engines: {node: '>=14.18'}
+  tsup@8.5.1:
+    resolution: {integrity: sha512-xtgkqwdhpKWr3tKPmCkvYmS9xnQK3m3XgxZHwSUjvfTjp7YfXe5tT3GgWi0F2N+ZSMsOeWeZFh7ZZFg5iPhing==}
+    engines: {node: '>=18'}
     hasBin: true
     peerDependencies:
+      '@microsoft/api-extractor': ^7.36.0
       '@swc/core': ^1
       postcss: 8.5.10
-      typescript: '>=4.1.0'
+      typescript: '>=4.5.0'
     peerDependenciesMeta:
+      '@microsoft/api-extractor':
+        optional: true
       '@swc/core':
         optional: true
       postcss:
@@ -7735,6 +7593,9 @@ packages:
   ufo@1.6.1:
     resolution: {integrity: sha512-9a4/uxlTWJ4+a5i0ooc1rU7C7YOw3wT+UGqdeNNHWnOF9qcMBgLRS+4IYUqbczewFx4mLEig6gawh7X6mFlEkA==}
 
+  ufo@1.6.4:
+    resolution: {integrity: sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA==}
+
   ultracite@5.0.39:
     resolution: {integrity: sha512-yyrftv3h7aIGEWYVfRGWn8fBB6vbCjmTK57LQr48uZsB1r/xs1vEHlwdZe4m7xfH5Bmch6xf7q9aylh0vVtkrQ==}
     hasBin: true
@@ -8004,9 +7865,6 @@ packages:
   wcwidth@1.0.1:
     resolution: {integrity: sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==}
 
-  webidl-conversions@4.0.2:
-    resolution: {integrity: sha512-YQ+BmxuTgd6UXZW3+ICGfyqRyHXVlD5GtQr5+qjiNW7bF0cqrzX500HVXPBOvgXb5YnzDd+h0zqyv61KUD7+Sg==}
-
   webidl-conversions@5.0.0:
     resolution: {integrity: sha512-VlZwKPCkYKxQgeSbH5EyngOmRp7Ww7I9rQLERETtf5ofd9pGeswWiOtogpEO850jziPRarreGxn5QIiTqpb2wA==}
     engines: {node: '>=8'}
@@ -8035,9 +7893,6 @@ packages:
     resolution: {integrity: sha512-RKT8HExMpoYx4igMiVMY83lN6UeITKJlBQ+vR/8ZJ8OCdSiN3RwCq+9gH0+Xzj0+5IrM6i4j/6LuvzbZIQgEcQ==}
     engines: {node: '>=12'}
 
-  whatwg-url@7.1.0:
-    resolution: {integrity: sha512-WUu7Rg1DroM7oQvGWfOiAK21n74Gg+T4elXEQYkOhtyLeWiJFoOGLXPKI/9gzIie9CtwVLm8wtw6YJdKyxSjeg==}
-
   which-boxed-primitive@1.1.1:
     resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
     engines: {node: '>= 0.4'}
@@ -8151,10 +8006,6 @@ packages:
     resolution: {integrity: sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==}
     engines: {node: '>=18'}
 
-  yaml@1.10.2:
-    resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
-    engines: {node: '>= 6'}
-
   yaml@2.8.3:
     resolution: {integrity: sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==}
     engines: {node: '>= 14.6'}
@@ -9417,9 +9268,6 @@ snapshots:
   '@esbuild/aix-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm64@0.17.19':
-    optional: true
-
   '@esbuild/android-arm64@0.25.0':
     optional: true
 
@@ -9435,9 +9283,6 @@ snapshots:
   '@esbuild/android-arm64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm@0.17.19':
-    optional: true
-
   '@esbuild/android-arm@0.25.0':
     optional: true
 
@@ -9453,9 +9298,6 @@ snapshots:
   '@esbuild/android-arm@0.28.1':
     optional: true
 
-  '@esbuild/android-x64@0.17.19':
-    optional: true
-
   '@esbuild/android-x64@0.25.0':
     optional: true
 
@@ -9471,9 +9313,6 @@ snapshots:
   '@esbuild/android-x64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-arm64@0.17.19':
-    optional: true
-
   '@esbuild/darwin-arm64@0.25.0':
     optional: true
 
@@ -9489,9 +9328,6 @@ snapshots:
   '@esbuild/darwin-arm64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-x64@0.17.19':
-    optional: true
-
   '@esbuild/darwin-x64@0.25.0':
     optional: true
 
@@ -9507,9 +9343,6 @@ snapshots:
   '@esbuild/darwin-x64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.17.19':
-    optional: true
-
   '@esbuild/freebsd-arm64@0.25.0':
     optional: true
 
@@ -9525,9 +9358,6 @@ snapshots:
   '@esbuild/freebsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-x64@0.17.19':
-    optional: true
-
   '@esbuild/freebsd-x64@0.25.0':
     optional: true
 
@@ -9543,9 +9373,6 @@ snapshots:
   '@esbuild/freebsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm64@0.17.19':
-    optional: true
-
   '@esbuild/linux-arm64@0.25.0':
     optional: true
 
@@ -9561,9 +9388,6 @@ snapshots:
   '@esbuild/linux-arm64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm@0.17.19':
-    optional: true
-
   '@esbuild/linux-arm@0.25.0':
     optional: true
 
@@ -9579,9 +9403,6 @@ snapshots:
   '@esbuild/linux-arm@0.28.1':
     optional: true
 
-  '@esbuild/linux-ia32@0.17.19':
-    optional: true
-
   '@esbuild/linux-ia32@0.25.0':
     optional: true
 
@@ -9597,9 +9418,6 @@ snapshots:
   '@esbuild/linux-ia32@0.28.1':
     optional: true
 
-  '@esbuild/linux-loong64@0.17.19':
-    optional: true
-
   '@esbuild/linux-loong64@0.25.0':
     optional: true
 
@@ -9615,9 +9433,6 @@ snapshots:
   '@esbuild/linux-loong64@0.28.1':
     optional: true
 
-  '@esbuild/linux-mips64el@0.17.19':
-    optional: true
-
   '@esbuild/linux-mips64el@0.25.0':
     optional: true
 
@@ -9633,9 +9448,6 @@ snapshots:
   '@esbuild/linux-mips64el@0.28.1':
     optional: true
 
-  '@esbuild/linux-ppc64@0.17.19':
-    optional: true
-
   '@esbuild/linux-ppc64@0.25.0':
     optional: true
 
@@ -9651,9 +9463,6 @@ snapshots:
   '@esbuild/linux-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/linux-riscv64@0.17.19':
-    optional: true
-
   '@esbuild/linux-riscv64@0.25.0':
     optional: true
 
@@ -9669,9 +9478,6 @@ snapshots:
   '@esbuild/linux-riscv64@0.28.1':
     optional: true
 
-  '@esbuild/linux-s390x@0.17.19':
-    optional: true
-
   '@esbuild/linux-s390x@0.25.0':
     optional: true
 
@@ -9687,9 +9493,6 @@ snapshots:
   '@esbuild/linux-s390x@0.28.1':
     optional: true
 
-  '@esbuild/linux-x64@0.17.19':
-    optional: true
-
   '@esbuild/linux-x64@0.25.0':
     optional: true
 
@@ -9720,9 +9523,6 @@ snapshots:
   '@esbuild/netbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/netbsd-x64@0.17.19':
-    optional: true
-
   '@esbuild/netbsd-x64@0.25.0':
     optional: true
 
@@ -9753,9 +9553,6 @@ snapshots:
   '@esbuild/openbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/openbsd-x64@0.17.19':
-    optional: true
-
   '@esbuild/openbsd-x64@0.25.0':
     optional: true
 
@@ -9783,9 +9580,6 @@ snapshots:
   '@esbuild/openharmony-arm64@0.28.1':
     optional: true
 
-  '@esbuild/sunos-x64@0.17.19':
-    optional: true
-
   '@esbuild/sunos-x64@0.25.0':
     optional: true
 
@@ -9801,9 +9595,6 @@ snapshots:
   '@esbuild/sunos-x64@0.28.1':
     optional: true
 
-  '@esbuild/win32-arm64@0.17.19':
-    optional: true
-
   '@esbuild/win32-arm64@0.25.0':
     optional: true
 
@@ -9819,9 +9610,6 @@ snapshots:
   '@esbuild/win32-arm64@0.28.1':
     optional: true
 
-  '@esbuild/win32-ia32@0.17.19':
-    optional: true
-
   '@esbuild/win32-ia32@0.25.0':
     optional: true
 
@@ -9837,9 +9625,6 @@ snapshots:
   '@esbuild/win32-ia32@0.28.1':
     optional: true
 
-  '@esbuild/win32-x64@0.17.19':
-    optional: true
-
   '@esbuild/win32-x64@0.25.0':
     optional: true
 
@@ -11655,8 +11440,6 @@ snapshots:
       is-string: 1.1.1
       math-intrinsics: 1.1.0
 
-  array-union@2.1.0: {}
-
   array.prototype.findlast@1.2.5:
     dependencies:
       call-bind: 1.0.8
@@ -11940,7 +11723,8 @@ snapshots:
 
   big-integer@1.6.52: {}
 
-  binary-extensions@2.3.0: {}
+  binary-extensions@2.3.0:
+    optional: true
 
   boolbase@1.0.0: {}
 
@@ -12008,14 +11792,14 @@ snapshots:
     transitivePeerDependencies:
       - magicast
 
-  bundle-require@4.2.1(esbuild@0.17.19):
+  bundle-require@5.1.0(esbuild@0.25.12):
     dependencies:
-      esbuild: 0.17.19
+      esbuild: 0.25.12
       load-tsconfig: 0.2.5
 
-  bundle-require@5.1.0(esbuild@0.25.12):
+  bundle-require@5.1.0(esbuild@0.27.7):
     dependencies:
-      esbuild: 0.25.12
+      esbuild: 0.27.7
       load-tsconfig: 0.2.5
 
   bytes@3.1.2: {}
@@ -12107,6 +11891,11 @@ snapshots:
       readdirp: 3.6.0
     optionalDependencies:
       fsevents: 2.3.3
+    optional: true
+
+  chokidar@4.0.3:
+    dependencies:
+      readdirp: 4.1.2
 
   chokidar@5.0.0:
     dependencies:
@@ -12224,6 +12013,8 @@ snapshots:
 
   concat-map@0.0.1: {}
 
+  confbox@0.1.8: {}
+
   confbox@0.2.2: {}
 
   connect@3.7.0:
@@ -12399,10 +12190,6 @@ snapshots:
 
   diff-sequences@29.6.3: {}
 
-  dir-glob@3.0.1:
-    dependencies:
-      path-type: 4.0.0
-
   doctrine@2.1.0:
     dependencies:
       esutils: 2.0.3
@@ -12631,31 +12418,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  esbuild@0.17.19:
-    optionalDependencies:
-      '@esbuild/android-arm': 0.17.19
-      '@esbuild/android-arm64': 0.17.19
-      '@esbuild/android-x64': 0.17.19
-      '@esbuild/darwin-arm64': 0.17.19
-      '@esbuild/darwin-x64': 0.17.19
-      '@esbuild/freebsd-arm64': 0.17.19
-      '@esbuild/freebsd-x64': 0.17.19
-      '@esbuild/linux-arm': 0.17.19
-      '@esbuild/linux-arm64': 0.17.19
-      '@esbuild/linux-ia32': 0.17.19
-      '@esbuild/linux-loong64': 0.17.19
-      '@esbuild/linux-mips64el': 0.17.19
-      '@esbuild/linux-ppc64': 0.17.19
-      '@esbuild/linux-riscv64': 0.17.19
-      '@esbuild/linux-s390x': 0.17.19
-      '@esbuild/linux-x64': 0.17.19
-      '@esbuild/netbsd-x64': 0.17.19
-      '@esbuild/openbsd-x64': 0.17.19
-      '@esbuild/sunos-x64': 0.17.19
-      '@esbuild/win32-arm64': 0.17.19
-      '@esbuild/win32-ia32': 0.17.19
-      '@esbuild/win32-x64': 0.17.19
-
   esbuild@0.25.0:
     optionalDependencies:
       '@esbuild/aix-ppc64': 0.25.0
@@ -13449,6 +13211,12 @@ snapshots:
       locate-path: 6.0.0
       path-exists: 4.0.0
 
+  fix-dts-default-cjs-exports@1.0.1:
+    dependencies:
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      rollup: 4.59.0
+
   flat-cache@4.0.1:
     dependencies:
       flatted: 3.4.2
@@ -13596,15 +13364,6 @@ snapshots:
       define-properties: 1.2.1
       gopd: 1.2.0
 
-  globby@11.1.0:
-    dependencies:
-      array-union: 2.1.0
-      dir-glob: 3.0.1
-      fast-glob: 3.3.3
-      ignore: 5.3.2
-      merge2: 1.4.1
-      slash: 3.0.0
-
   globrex@0.1.2: {}
 
   gopd@1.2.0: {}
@@ -13803,6 +13562,7 @@ snapshots:
   is-binary-path@2.1.0:
     dependencies:
       binary-extensions: 2.3.0
+    optional: true
 
   is-boolean-object@1.2.2:
     dependencies:
@@ -14623,7 +14383,7 @@ snapshots:
       lightningcss-win32-arm64-msvc: 1.32.0
       lightningcss-win32-x64-msvc: 1.32.0
 
-  lilconfig@2.1.0: {}
+  lilconfig@3.1.3: {}
 
   lines-and-columns@1.2.4: {}
 
@@ -14647,8 +14407,6 @@ snapshots:
 
   lodash.merge@4.6.2: {}
 
-  lodash.sortby@4.7.0: {}
-
   lodash.throttle@4.1.1: {}
 
   lodash@4.18.0: {}
@@ -14932,6 +14690,13 @@ snapshots:
 
   mkdirp@1.0.4: {}
 
+  mlly@1.8.2:
+    dependencies:
+      acorn: 8.16.0
+      pathe: 2.0.3
+      pkg-types: 1.3.1
+      ufo: 1.6.4
+
   ms@2.0.0: {}
 
   ms@2.1.3: {}
@@ -15238,8 +15003,6 @@ snapshots:
       lru-cache: 11.2.4
       minipass: 7.1.2
 
-  path-type@4.0.0: {}
-
   pathe@2.0.3: {}
 
   pathval@2.0.1: {}
@@ -15266,6 +15029,12 @@ snapshots:
     dependencies:
       find-up: 4.1.0
 
+  pkg-types@1.3.1:
+    dependencies:
+      confbox: 0.1.8
+      mlly: 1.8.2
+      pathe: 2.0.3
+
   pkg-types@2.3.0:
     dependencies:
       confbox: 0.2.2
@@ -15282,12 +15051,14 @@ snapshots:
 
   possible-typed-array-names@1.1.0: {}
 
-  postcss-load-config@3.1.4(postcss@8.5.10):
+  postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
-      lilconfig: 2.1.0
-      yaml: 1.10.2
+      lilconfig: 3.1.3
     optionalDependencies:
+      jiti: 2.6.1
       postcss: 8.5.10
+      tsx: 4.21.0
+      yaml: 2.8.3
 
   postcss@8.5.10:
     dependencies:
@@ -15564,6 +15335,9 @@ snapshots:
   readdirp@3.6.0:
     dependencies:
       picomatch: 2.3.2
+    optional: true
+
+  readdirp@4.1.2: {}
 
   readdirp@5.0.0: {}
 
@@ -15682,10 +15456,6 @@ snapshots:
     dependencies:
       glob: 7.2.3
 
-  rollup@3.29.5:
-    optionalDependencies:
-      fsevents: 2.3.3
-
   rollup@4.59.0:
     dependencies:
       '@types/estree': 1.0.8
@@ -15912,9 +15682,7 @@ snapshots:
 
   source-map@0.6.1: {}
 
-  source-map@0.8.0-beta.0:
-    dependencies:
-      whatwg-url: 7.1.0
+  source-map@0.7.6: {}
 
   split-on-first@1.1.0: {}
 
@@ -16190,10 +15958,6 @@ snapshots:
       universalify: 0.2.0
       url-parse: 1.5.10
 
-  tr46@1.0.1:
-    dependencies:
-      punycode: 2.3.1
-
   tr46@3.0.0:
     dependencies:
       punycode: 2.3.1
@@ -16251,28 +16015,33 @@ snapshots:
 
   tslib@2.8.1: {}
 
-  tsup@6.7.0(postcss@8.5.10)(typescript@5.6.3):
+  tsup@8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
     dependencies:
-      bundle-require: 4.2.1(esbuild@0.17.19)
+      bundle-require: 5.1.0(esbuild@0.27.7)
       cac: 6.7.14
-      chokidar: 3.6.0
+      chokidar: 4.0.3
+      consola: 3.4.2
       debug: 4.4.3
-      esbuild: 0.17.19
-      execa: 5.1.1
-      globby: 11.1.0
+      esbuild: 0.27.7
+      fix-dts-default-cjs-exports: 1.0.1
       joycon: 3.1.1
-      postcss-load-config: 3.1.4(postcss@8.5.10)
+      picocolors: 1.1.1
+      postcss-load-config: 6.0.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3)
       resolve-from: 5.0.0
-      rollup: 3.29.5
-      source-map: 0.8.0-beta.0
+      rollup: 4.59.0
+      source-map: 0.7.6
       sucrase: 3.35.1
+      tinyexec: 0.3.2
+      tinyglobby: 0.2.15
       tree-kill: 1.2.2
     optionalDependencies:
       postcss: 8.5.10
       typescript: 5.6.3
     transitivePeerDependencies:
+      - jiti
       - supports-color
-      - ts-node
+      - tsx
+      - yaml
 
   tsx@4.21.0:
     dependencies:
@@ -16339,6 +16108,8 @@ snapshots:
 
   ufo@1.6.1: {}
 
+  ufo@1.6.4: {}
+
   ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@clack/prompts': 0.11.0
@@ -16820,8 +16591,6 @@ snapshots:
     dependencies:
       defaults: 1.0.4
 
-  webidl-conversions@4.0.2: {}
-
   webidl-conversions@5.0.0: {}
 
   webidl-conversions@7.0.0: {}
@@ -16845,12 +16614,6 @@ snapshots:
       tr46: 3.0.0
       webidl-conversions: 7.0.0
 
-  whatwg-url@7.1.0:
-    dependencies:
-      lodash.sortby: 4.7.0
-      tr46: 1.0.1
-      webidl-conversions: 4.0.2
-
   which-boxed-primitive@1.1.1:
     dependencies:
       is-bigint: 1.1.0
@@ -16950,8 +16713,6 @@ snapshots:
 
   yallist@5.0.0: {}
 
-  yaml@1.10.2: {}
-
   yaml@2.8.3: {}
 
   yaml@2.9.0: {}

From fe31c759c05113bd808b6e932d5692e4ea7d74fa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 13:57:38 +0200
Subject: [PATCH 043/129] build(oss): relocate shared lib

---
 packages/lib/LICENSE.md                       |  21 ++
 packages/lib/package.json                     |  27 +++
 packages/lib/src/constants/blacklists.ts      |  22 ++
 packages/lib/src/constants/currencies.ts      | 216 ++++++++++++++++++
 packages/lib/src/constants/domains.ts         |  63 +++++
 packages/lib/src/constants/feedback.ts        | 111 +++++++++
 packages/lib/src/constants/index.ts           |  10 +
 packages/lib/src/constants/permissions.ts     |  12 +
 packages/lib/src/constants/persons.ts         |   1 +
 packages/lib/src/constants/products.ts        |  13 ++
 packages/lib/src/constants/purchases.ts       |   6 +
 .../lib/src/constants/storefront-vat-rates.ts |  70 ++++++
 packages/lib/src/constants/subscriptions.ts   |   6 +
 packages/lib/src/index.ts                     |   1 +
 packages/lib/tsconfig.json                    |  10 +
 pnpm-lock.yaml                                |  13 ++
 pnpm-workspace.yaml                           |   4 +
 17 files changed, 606 insertions(+)
 create mode 100644 packages/lib/LICENSE.md
 create mode 100644 packages/lib/package.json
 create mode 100644 packages/lib/src/constants/blacklists.ts
 create mode 100644 packages/lib/src/constants/currencies.ts
 create mode 100644 packages/lib/src/constants/domains.ts
 create mode 100644 packages/lib/src/constants/feedback.ts
 create mode 100644 packages/lib/src/constants/index.ts
 create mode 100644 packages/lib/src/constants/permissions.ts
 create mode 100644 packages/lib/src/constants/persons.ts
 create mode 100644 packages/lib/src/constants/products.ts
 create mode 100644 packages/lib/src/constants/purchases.ts
 create mode 100644 packages/lib/src/constants/storefront-vat-rates.ts
 create mode 100644 packages/lib/src/constants/subscriptions.ts
 create mode 100644 packages/lib/src/index.ts
 create mode 100644 packages/lib/tsconfig.json

diff --git a/packages/lib/LICENSE.md b/packages/lib/LICENSE.md
new file mode 100644
index 000000000..cc433146c
--- /dev/null
+++ b/packages/lib/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/lib/package.json b/packages/lib/package.json
new file mode 100644
index 000000000..212eab6c3
--- /dev/null
+++ b/packages/lib/package.json
@@ -0,0 +1,27 @@
+{
+  "name": "@voidhash/lib",
+  "version": "0.0.1-alpha.1",
+  "license": "MIT",
+  "private": true,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/lib"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./constants": "./src/constants/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "5.6.3"
+  },
+  "peerDependencies": {
+    "effect": "catalog:"
+  }
+}
diff --git a/packages/lib/src/constants/blacklists.ts b/packages/lib/src/constants/blacklists.ts
new file mode 100644
index 000000000..d2b2ea242
--- /dev/null
+++ b/packages/lib/src/constants/blacklists.ts
@@ -0,0 +1,22 @@
+export const ID_BLACKLIST = [
+  "no_user",
+  "null",
+  "none",
+  "nil",
+  "(null)",
+  "NaN",
+  "\u0000",
+  "",
+  "unidentified",
+  "undefined",
+  "unknown",
+  "anonymous",
+  "guest",
+  "-1",
+  "0",
+  "[]",
+  "{}",
+  "[object Object]",
+];
+
+export const SLUG_BLACKLIST = [...ID_BLACKLIST, "~", "login", "sign-up", "auth"];
diff --git a/packages/lib/src/constants/currencies.ts b/packages/lib/src/constants/currencies.ts
new file mode 100644
index 000000000..13ebb88cc
--- /dev/null
+++ b/packages/lib/src/constants/currencies.ts
@@ -0,0 +1,216 @@
+import { Effect, Schema } from "effect";
+
+export const CURRENCIES = {
+  AED: "United Arab Emirates Dirham",
+  AFN: "Afghanistan Afghani",
+  ALL: "Albania Lek",
+  AMD: "Armenia Dram",
+  ANG: "Netherlands Antilles Guilder",
+  AOA: "Angola Kwanza",
+  ARS: "Argentina Peso",
+  AUD: "Australia Dollar",
+  AWG: "Aruba Guilder",
+  AZN: "Azerbaijan New Manat",
+  BAM: "Bosnia and Herzegovina Convertible Marka",
+  BBD: "Barbados Dollar",
+  BDT: "Bangladesh Taka",
+  BGN: "Bulgaria Lev",
+  BHD: "Bahrain Dinar",
+  BIF: "Burundi Franc",
+  BMD: "Bermuda Dollar",
+  BND: "Brunei Darussalam Dollar",
+  BOB: "Bolivia Bolíviano",
+  BOV: "Bolivia Mvdol", // Fund code
+  BRL: "Brazil Real",
+  BSD: "Bahamas Dollar",
+  BTN: "Bhutan Ngultrum",
+  BWP: "Botswana Pula",
+  BYN: "Belarus Ruble",
+  BYR: "Belarus Ruble (old)",
+  BZD: "Belize Dollar",
+  CAD: "Canada Dollar",
+  CDF: "Congo/Kinshasa Franc",
+  CHE: "Switzerland WIR Euro", // Complementary currency
+  CHF: "Switzerland Franc",
+  CHW: "Switzerland WIR Franc", // Complementary currency
+  CLF: "Chile Unidad de Fomento", // Fund code
+  CLP: "Chile Peso",
+  CNY: "China Yuan Renminbi",
+  COP: "Colombia Peso",
+  COU: "Colombia Unidad de Valor Real", // Fund code
+  CRC: "Costa Rica Colon",
+  CUC: "Cuba Convertible Peso", // Being phased out/largely replaced by CUP
+  CUP: "Cuba Peso",
+  CVE: "Cape Verde Escudo",
+  CZK: "Czech Republic Koruna",
+  DJF: "Djibouti Franc",
+  DKK: "Denmark Krone",
+  DOP: "Dominican Republic Peso",
+  DZD: "Algeria Dinar",
+  EGP: "Egypt Pound",
+  ERN: "Eritrea Nakfa",
+  ETB: "Ethiopia Birr",
+  EUR: "Euro",
+  FJD: "Fiji Dollar",
+  FKP: "Falkland Islands Pound",
+  GBP: "United Kingdom Pound",
+  GEL: "Georgia Lari",
+  GHS: "Ghana Cedi",
+  GIP: "Gibraltar Pound",
+  GMD: "Gambia Dalasi",
+  GNF: "Guinea Franc",
+  GTQ: "Guatemala Quetzal",
+  GYD: "Guyana Dollar",
+  HKD: "Hong Kong Dollar",
+  HNL: "Honduras Lempira",
+  HRK: "Croatia Kuna (historical, replaced by EUR)",
+  HTG: "Haiti Gourde",
+  HUF: "Hungary Forint",
+  IDR: "Indonesia Rupiah",
+  ILS: "Israel Shekel",
+  IMP: "Isle of Man Pound", // Local issue, pegged to GBP
+  INR: "India Rupee",
+  IQD: "Iraq Dinar",
+  IRR: "Iran Rial",
+  ISK: "Iceland Krona",
+  JEP: "Jersey Pound", // Local issue, pegged to GBP
+  JMD: "Jamaica Dollar",
+  JOD: "Jordan Dinar",
+  JPY: "Japan Yen",
+  KES: "Kenya Shilling",
+  KGS: "Kyrgyzstan Som",
+  KHR: "Cambodia Riel",
+  KMF: "Comoros Franc",
+  KPW: "North Korea Won",
+  KRW: "South Korea Won",
+  KWD: "Kuwait Dinar",
+  KYD: "Cayman Islands Dollar",
+  KZT: "Kazakhstan Tenge",
+  LAK: "Laos Kip",
+  LBP: "Lebanon Pound",
+  LKR: "Sri Lanka Rupee",
+  LRD: "Liberia Dollar",
+  LSL: "Lesotho Loti",
+  LYD: "Libya Dinar",
+  MAD: "Morocco Dirham",
+  MDL: "Moldova Leu",
+  MGA: "Madagascar Ariary",
+  MKD: "Macedonia Denar",
+  MMK: "Myanmar Kyat",
+  MNT: "Mongolia Tughrik",
+  MOP: "Macau Pataca",
+  MRU: "Mauritania Ouguiya",
+  MRO: "Mauritania Ouguiya (old)",
+  MUR: "Mauritius Rupee",
+  MVR: "Maldives Rufiyaa",
+  MWK: "Malawi Kwacha",
+  MXN: "Mexico Peso",
+  MXV: "Mexico Unidad de Inversion (UDI)", // Fund code
+  MYR: "Malaysia Ringgit",
+  MZN: "Mozambique Metical",
+  NAD: "Namibia Dollar",
+  NGN: "Nigeria Naira",
+  NIO: "Nicaragua Cordoba",
+  NOK: "Norway Krone",
+  NPR: "Nepal Rupee",
+  NZD: "New Zealand Dollar",
+  OMR: "Oman Rial",
+  PAB: "Panama Balboa",
+  PEN: "Peru Sol",
+  PGK: "Papua New Guinea Kina",
+  PHP: "Philippines Peso",
+  PKR: "Pakistan Rupee",
+  PLN: "Poland Zloty",
+  PYG: "Paraguay Guarani",
+  QAR: "Qatar Riyal",
+  RON: "Romania New Leu",
+  RSD: "Serbia Dinar",
+  RUB: "Russia Ruble",
+  RWF: "Rwanda Franc",
+  SAR: "Saudi Arabia Riyal",
+  SBD: "Solomon Islands Dollar",
+  SCR: "Seychelles Rupee",
+  SDG: "Sudan Pound",
+  SEK: "Sweden Krona",
+  SGD: "Singapore Dollar",
+  SHP: "Saint Helena Pound",
+  SLE: "Sierra Leone Leone",
+  SLL: "Sierra Leone Leone (old)",
+  SOS: "Somalia Shilling",
+  SSP: "South Sudan Pound",
+  STN: "São Tomé and Príncipe Dobra",
+  STD: "São Tomé and Príncipe Dobra (old)",
+  SVC: "El Salvador Colon (historical, USD is primary currency)",
+  SYP: "Syria Pound",
+  SZL: "Eswatini Lilangeni",
+  THB: "Thailand Baht",
+  TJS: "Tajikistan Somoni",
+  TMT: "Turkmenistan Manat",
+  TND: "Tunisia Dinar",
+  TOP: "Tonga Pa'anga",
+  TRY: "Turkey Lira",
+  TTD: "Trinidad and Tobago Dollar",
+  TVD: "Tuvalu Dollar", // Pegged to AUD
+  TWD: "Taiwan New Dollar",
+  TZS: "Tanzania Shilling",
+  UAH: "Ukraine Hryvnia",
+  UGX: "Uganda Shilling",
+  USD: "United States Dollar",
+  USN: "United States Dollar (Next day)", // Fund code
+  USS: "United States Dollar (Same day)", // Fund code, deprecated
+  UYI: "Uruguay Peso en Unidades Indexadas", // Fund code
+  UYU: "Uruguay Peso",
+  UYW: "Unidad Previsional", // Fund code (Uruguay)
+  UZS: "Uzbekistan Som",
+  VED: "Venezuela Bolívar Digital",
+  VEF: "Venezuela Bolívar (old)",
+  VES: "Venezuela Bolívar Soberano (old)",
+  VND: "Viet Nam Dong",
+  VUV: "Vanuatu Vatu",
+  WST: "Samoa Tala",
+  XAF: "Communauté Financière Africaine BEAC Franc", // CFA Franc BEAC
+  XAG: "Silver", // Precious metal
+  XAU: "Gold", // Precious metal
+  XBA: "European Composite Unit (EURCO)", // Bond market unit
+  XBB: "European Monetary Unit (E.M.U.-6)", // Bond market unit
+  XBC: "European Unit of Account (XBC)", // Bond market unit
+  XBD: "European Unit of Account (XBD)", // Bond market unit
+  XCD: "East Caribbean Dollar",
+  XDR: "International Monetary Fund Special Drawing Rights",
+  XOF: "Communauté Financière Africaine BCEAO Franc", // CFA Franc BCEAO
+  XPD: "Palladium", // Precious metal
+  XPF: "Comptoirs Français du Pacifique CFP Franc", // CFP Franc
+  XPT: "Platinum", // Precious metal
+  XSU: "SUCRE", // Regional currency
+  XTS: "Testing Currency Code", // For testing purposes
+  XUA: "ADB Unit of Account", // African Development Bank
+  XXX: "No Currency", // For transactions where no currency is involved
+  YER: "Yemen Rial",
+  ZAR: "South Africa Rand",
+  ZMW: "Zambia Kwacha",
+  ZWL: "Zimbabwe Dollar (historical, replaced by ZiG)",
+} as const;
+
+export type ISO4217CurrencyCode = keyof typeof CURRENCIES;
+
+export class InvalidISO4217CurrencyCodeError extends Schema.TaggedErrorClass<InvalidISO4217CurrencyCodeError>(
+  "InvalidISO4217CurrencyCodeError",
+)("InvalidISO4217CurrencyCodeError", {
+  code: Schema.String,
+  message: Schema.String,
+}) {}
+
+/** Parses and validates an ISO 4217 currency code. */
+export const parseISO4217CurrencyCode = (currency: string) =>
+  Effect.gen(function* () {
+    if (currency in CURRENCIES) {
+      return currency as ISO4217CurrencyCode;
+    }
+
+    return yield* Effect.fail(
+      new InvalidISO4217CurrencyCodeError({
+        code: "INVALID_ISO_4217_CURRENCY_CODE",
+        message: `Invalid ISO 4217 currency code: ${currency}`,
+      }),
+    );
+  });
diff --git a/packages/lib/src/constants/domains.ts b/packages/lib/src/constants/domains.ts
new file mode 100644
index 000000000..d0f0c3daf
--- /dev/null
+++ b/packages/lib/src/constants/domains.ts
@@ -0,0 +1,63 @@
+export type VercelEnv = "production" | "preview" | "development";
+
+export type DomainConfig = {
+  appDomain?: string;
+  vercelEnv?: string;
+};
+
+const normalizeVercelEnv = (vercelEnv?: string): VercelEnv | undefined => {
+  if (vercelEnv === "production" || vercelEnv === "preview" || vercelEnv === "development") {
+    return vercelEnv;
+  }
+
+  return undefined;
+};
+
+/** Resolves the browser-facing application origin for a deployment. */
+export const resolveFrontendOrigin = ({
+  appDomain,
+  vercelEnv,
+}: DomainConfig): string | undefined => {
+  const normalizedEnv = normalizeVercelEnv(vercelEnv);
+
+  if (normalizedEnv === "development") {
+    return "http://localhost:3000";
+  }
+
+  if (!appDomain) {
+    return undefined;
+  }
+
+  return `https://${appDomain}`;
+};
+
+/** Resolves the API origin for a deployment. */
+export const resolveApiOrigin = ({ appDomain, vercelEnv }: DomainConfig): string | undefined => {
+  const normalizedEnv = normalizeVercelEnv(vercelEnv);
+
+  if (normalizedEnv === "development") {
+    return "http://localhost:8787";
+  }
+
+  if (!appDomain) {
+    return undefined;
+  }
+
+  return `https://api.${appDomain}`;
+};
+
+/** Returns the application hostnames accepted for a deployment. */
+export const resolveAppHostnames = (config: DomainConfig): Set<string> => {
+  const hostnames = new Set(["localhost:3000", "localhost"]);
+  const frontendOrigin = resolveFrontendOrigin(config);
+
+  if (frontendOrigin) {
+    hostnames.add(new URL(frontendOrigin).host);
+  }
+
+  if (config.appDomain) {
+    hostnames.add(config.appDomain);
+  }
+
+  return hostnames;
+};
diff --git a/packages/lib/src/constants/feedback.ts b/packages/lib/src/constants/feedback.ts
new file mode 100644
index 000000000..649203cce
--- /dev/null
+++ b/packages/lib/src/constants/feedback.ts
@@ -0,0 +1,111 @@
+/**
+ * Shared enums for the in-app feedback widget. The customer-facing popover,
+ * stored feedback record, notification relay, and moderation UI all read these
+ * so the label/value mapping lives in exactly one place.
+ */
+
+/**
+ * Which product area the feedback is about. Stored verbatim as a slug
+ * (varchar). These are product areas, not feedback *types* (bug/idea) — so the
+ * inbox can be triaged by the surface a user is talking about. Extend this list
+ * as the product grows; keep slugs ≤ 32 chars (the column limit).
+ */
+export const FeedbackTopic = {
+  Analytics: "analytics",
+  Paywalls: "paywalls",
+  Products: "products",
+  Persons: "persons",
+  FeatureFlags: "feature_flags",
+  Experiments: "experiments",
+  PaymentProviders: "payment_providers",
+  Webhooks: "webhooks",
+  Sdk: "sdk",
+  Billing: "billing",
+  Dashboard: "dashboard",
+  Other: "other",
+} as const;
+
+export type FeedbackTopicValue = (typeof FeedbackTopic)[keyof typeof FeedbackTopic];
+
+/** The ordered list of topic values, for building the topic select. */
+export const FeedbackTopicValues = [
+  FeedbackTopic.Analytics,
+  FeedbackTopic.Paywalls,
+  FeedbackTopic.Products,
+  FeedbackTopic.Persons,
+  FeedbackTopic.FeatureFlags,
+  FeedbackTopic.Experiments,
+  FeedbackTopic.PaymentProviders,
+  FeedbackTopic.Webhooks,
+  FeedbackTopic.Sdk,
+  FeedbackTopic.Billing,
+  FeedbackTopic.Dashboard,
+  FeedbackTopic.Other,
+] as const;
+
+export const FeedbackTopicLabels: Record<FeedbackTopicValue, string> = {
+  [FeedbackTopic.Analytics]: "Analytics",
+  [FeedbackTopic.Paywalls]: "Paywalls",
+  [FeedbackTopic.Products]: "Products & Catalog",
+  [FeedbackTopic.Persons]: "Persons & Identity",
+  [FeedbackTopic.FeatureFlags]: "Feature Flags",
+  [FeedbackTopic.Experiments]: "A/B Tests",
+  [FeedbackTopic.PaymentProviders]: "Payment Providers",
+  [FeedbackTopic.Webhooks]: "Webhooks & API",
+  [FeedbackTopic.Sdk]: "SDKs",
+  [FeedbackTopic.Billing]: "Billing",
+  [FeedbackTopic.Dashboard]: "Dashboard (UI, Navigation)",
+  [FeedbackTopic.Other]: "Other",
+} as const;
+
+/**
+ * Sentiment on an ordinal 1–4 scale (stored as `smallint`). The UI renders each
+ * level with a lucide icon (frown → annoyed → smile → laugh); the numeric value
+ * keeps ordering/aggregation cheap and decouples storage from the icon set.
+ */
+export const FeedbackSentiment = {
+  Frown: 1,
+  Annoyed: 2,
+  Smile: 3,
+  Laugh: 4,
+} as const;
+
+export type FeedbackSentimentValue = (typeof FeedbackSentiment)[keyof typeof FeedbackSentiment];
+
+export const FeedbackSentimentValues = [
+  FeedbackSentiment.Frown,
+  FeedbackSentiment.Annoyed,
+  FeedbackSentiment.Smile,
+  FeedbackSentiment.Laugh,
+] as const;
+
+export const FeedbackSentimentLabels: Record<FeedbackSentimentValue, string> = {
+  [FeedbackSentiment.Frown]: "Very unhappy",
+  [FeedbackSentiment.Annoyed]: "Unhappy",
+  [FeedbackSentiment.Smile]: "Happy",
+  [FeedbackSentiment.Laugh]: "Very happy",
+} as const;
+
+/**
+ * Triage state for a stored feedback item, driven from the moderation inbox.
+ * `New` is the default on insert; the inbox transitions it to `Read`/`Archived`.
+ */
+export const FeedbackStatus = {
+  New: 0,
+  Read: 1,
+  Archived: 2,
+} as const;
+
+export type FeedbackStatusValue = (typeof FeedbackStatus)[keyof typeof FeedbackStatus];
+
+export const FeedbackStatusValues = [
+  FeedbackStatus.New,
+  FeedbackStatus.Read,
+  FeedbackStatus.Archived,
+] as const;
+
+export const FeedbackStatusLabels: Record<FeedbackStatusValue, string> = {
+  [FeedbackStatus.New]: "New",
+  [FeedbackStatus.Read]: "Read",
+  [FeedbackStatus.Archived]: "Archived",
+} as const;
diff --git a/packages/lib/src/constants/index.ts b/packages/lib/src/constants/index.ts
new file mode 100644
index 000000000..14fe6fb1c
--- /dev/null
+++ b/packages/lib/src/constants/index.ts
@@ -0,0 +1,10 @@
+export * from "./blacklists.ts";
+export * from "./currencies.ts";
+export * from "./feedback.ts";
+export * from "./persons.ts";
+export * from "./domains.ts";
+export * from "./permissions.ts";
+export * from "./products.ts";
+export * from "./purchases.ts";
+export * from "./storefront-vat-rates.ts";
+export * from "./subscriptions.ts";
diff --git a/packages/lib/src/constants/permissions.ts b/packages/lib/src/constants/permissions.ts
new file mode 100644
index 000000000..1ee18292d
--- /dev/null
+++ b/packages/lib/src/constants/permissions.ts
@@ -0,0 +1,12 @@
+export const OrganizationPermissions = {
+  all: "organization:all",
+} as const;
+
+export type OrganizationPermission =
+  (typeof OrganizationPermissions)[keyof typeof OrganizationPermissions];
+
+export const ProjectPermissions = {
+  all: "project:all",
+} as const;
+
+export type ProjectPermission = (typeof ProjectPermissions)[keyof typeof ProjectPermissions];
diff --git a/packages/lib/src/constants/persons.ts b/packages/lib/src/constants/persons.ts
new file mode 100644
index 000000000..e7446a7a6
--- /dev/null
+++ b/packages/lib/src/constants/persons.ts
@@ -0,0 +1 @@
+export const ANONYMOUS_USER_ID_PREFIX = "vh:anon:";
diff --git a/packages/lib/src/constants/products.ts b/packages/lib/src/constants/products.ts
new file mode 100644
index 000000000..18da5f799
--- /dev/null
+++ b/packages/lib/src/constants/products.ts
@@ -0,0 +1,13 @@
+export const ProductType = {
+  OneTime: 2,
+  OneTimeConsumable: 3,
+  Subscription: 1,
+} as const;
+
+export type ProductTypeValue = (typeof ProductType)[keyof typeof ProductType];
+
+export const ProductTypeLabels: Record<ProductTypeValue, string> = {
+  [ProductType.Subscription]: "Subscription",
+  [ProductType.OneTime]: "Non-consumable",
+  [ProductType.OneTimeConsumable]: "Consumable",
+} as const;
diff --git a/packages/lib/src/constants/purchases.ts b/packages/lib/src/constants/purchases.ts
new file mode 100644
index 000000000..5805c8f12
--- /dev/null
+++ b/packages/lib/src/constants/purchases.ts
@@ -0,0 +1,6 @@
+export const PurchaseType = {
+  OneTime: 1,
+  OneTimeConsumable: 2,
+} as const;
+
+export type PurchaseTypeValue = (typeof PurchaseType)[keyof typeof PurchaseType];
diff --git a/packages/lib/src/constants/storefront-vat-rates.ts b/packages/lib/src/constants/storefront-vat-rates.ts
new file mode 100644
index 000000000..0df267d8d
--- /dev/null
+++ b/packages/lib/src/constants/storefront-vat-rates.ts
@@ -0,0 +1,70 @@
+/**
+ * Estimated VAT / GST / sales-tax rates by storefront, keyed by ISO 3166
+ * alpha-3 country code (Apple's `storefront` JWS field shape, e.g., `"USA"`,
+ * `"DEU"`).
+ *
+ * Values are expressed as basis points (`1500` = 15.00%) so commission and
+ * tax math stays in integer space alongside the existing minor-unit amounts
+ * on `transaction`.
+ *
+ * Rates cover regions where Apple is the merchant of record and the JWS
+ * `price` therefore includes consumption tax that Apple later withholds —
+ * i.e. EU member states, UK, Switzerland, Norway, Japan, Australia. Tax for
+ * unlisted countries defaults to `0` (US sales tax handled per-state by
+ * Apple's reporting layer, not the JWS).
+ *
+ * This table is intentionally approximate. Authoritative tax accounting
+ * happens against Apple's monthly App Store Connect financial reports; this
+ * exists so the JWS-driven analytics path can populate a reasonable
+ * `taxAmount` field for live dashboards.
+ */
+export const STOREFRONT_VAT_RATES_BPS: Readonly<Record<string, number>> = {
+  // European Union — standard VAT rates (2026 reference).
+  AUT: 2000, // Austria
+  BEL: 2100, // Belgium
+  BGR: 2000, // Bulgaria
+  CYP: 1900, // Cyprus
+  CZE: 2100, // Czechia
+  DEU: 1900, // Germany
+  DNK: 2500, // Denmark
+  ESP: 2100, // Spain
+  EST: 2200, // Estonia
+  FIN: 2550, // Finland
+  FRA: 2000, // France
+  GRC: 2400, // Greece
+  HRV: 2500, // Croatia
+  HUN: 2700, // Hungary
+  IRL: 2300, // Ireland
+  ITA: 2200, // Italy
+  LTU: 2100, // Lithuania
+  LUX: 1700, // Luxembourg
+  LVA: 2100, // Latvia
+  MLT: 1800, // Malta
+  NLD: 2100, // Netherlands
+  POL: 2300, // Poland
+  PRT: 2300, // Portugal
+  ROU: 2100, // Romania (raised from 19%)
+  SVK: 2300, // Slovakia
+  SVN: 2200, // Slovenia
+  SWE: 2500, // Sweden
+
+  // Other Apple-merchant-of-record markets.
+  AUS: 1000, // Australia GST
+  CHE: 810, // Switzerland VAT
+  GBR: 2000, // United Kingdom VAT
+  ISL: 2400, // Iceland VAT
+  JPN: 1000, // Japan consumption tax
+  LIE: 810, // Liechtenstein VAT (matches Switzerland)
+  NOR: 2500, // Norway VAT
+  NZL: 1500, // New Zealand GST
+} as const;
+
+/**
+ * Looks up the estimated tax rate (in basis points) for an Apple storefront
+ * country. Returns `0` when the storefront is unknown or omitted.
+ */
+export const getStorefrontVatRateBps = (storefront: string | undefined | null): number => {
+  if (!storefront) return 0;
+  const upper = storefront.toUpperCase();
+  return STOREFRONT_VAT_RATES_BPS[upper] ?? 0;
+};
diff --git a/packages/lib/src/constants/subscriptions.ts b/packages/lib/src/constants/subscriptions.ts
new file mode 100644
index 000000000..edeb60de3
--- /dev/null
+++ b/packages/lib/src/constants/subscriptions.ts
@@ -0,0 +1,6 @@
+export const SubscriptionStatus = {
+  Active: 1,
+  Canceled: 2,
+} as const;
+
+export type SubscriptionStatusValue = (typeof SubscriptionStatus)[keyof typeof SubscriptionStatus];
diff --git a/packages/lib/src/index.ts b/packages/lib/src/index.ts
new file mode 100644
index 000000000..c631f397c
--- /dev/null
+++ b/packages/lib/src/index.ts
@@ -0,0 +1 @@
+export * from "./constants/index.ts";
diff --git a/packages/lib/tsconfig.json b/packages/lib/tsconfig.json
new file mode 100644
index 000000000..764908027
--- /dev/null
+++ b/packages/lib/tsconfig.json
@@ -0,0 +1,10 @@
+{
+  "extends": "@voidhash/tsconfig/base.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"],
+  "compilerOptions": {
+    "allowImportingTsExtensions": true,
+    "declaration": false,
+    "lib": ["ES2022", "DOM"]
+  }
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5ef9140a9..46a464c79 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -513,6 +513,19 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
 
+  packages/lib:
+    dependencies:
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 5.6.3
+        version: 5.6.3
+
   packages/shared:
     dependencies:
       effect:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index bc9d6183e..5c7599b0e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -83,3 +83,7 @@ onlyBuiltDependencies:
   - sharp
   - simple-git-hooks
   - unrs-resolver
+
+# CI and the private superproject install explicitly before running tasks.
+# Never mutate this standalone workspace implicitly from a nested task.
+verifyDepsBeforeRun: false

From 7c19a044544670e4b77f96a0b1c7d4dc9f85d198 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 14:08:55 +0200
Subject: [PATCH 044/129] build(oss): relocate App Store server SDK

---
 .github/workflows/secret-scanning.yml         |   2 +-
 .gitleaks.toml                                |  24 +
 packages/app-store-server-sdk/LICENSE.md      |  22 +
 .../THIRD_PARTY_NOTICES.md                    |  24 +
 packages/app-store-server-sdk/package.json    |  41 +
 .../src/client/AppStoreServerSdkClient.ts     | 841 +++++++++++++++
 .../app-store-server-sdk/src/client/auth.ts   | 206 ++++
 .../app-store-server-sdk/src/client/index.ts  |  14 +
 .../src/errors/api-errors.ts                  | 260 +++++
 .../src/errors/client-errors.ts               |  48 +
 .../app-store-server-sdk/src/errors/index.ts  |  36 +
 .../src/errors/verification-errors.ts         |  64 ++
 packages/app-store-server-sdk/src/index.ts    |  22 +
 .../src/internal/bytes.ts                     | 100 ++
 .../src/receipts/index.ts                     | 322 ++++++
 .../src/schemas/advanced-commerce.ts          | 614 +++++++++++
 .../src/schemas/app-transaction.ts            |  56 +
 .../app-store-server-sdk/src/schemas/enums.ts | 795 ++++++++++++++
 .../src/schemas/helper-validation.ts          |  42 +
 .../app-store-server-sdk/src/schemas/index.ts |  53 +
 .../src/schemas/notifications.ts              | 171 +++
 .../src/schemas/realtime.ts                   | 137 +++
 .../src/schemas/renewals.ts                   | 113 ++
 .../src/schemas/requests.ts                   | 264 +++++
 .../src/schemas/responses.ts                  | 434 ++++++++
 .../src/schemas/transactions.ts               | 142 +++
 packages/app-store-server-sdk/src/sdk.ts      |  27 +
 .../src/signatures/index.ts                   |  87 ++
 .../src/verification/SignedDataVerifier.ts    | 354 +++++++
 .../src/verification/certificate-chain.ts     | 183 ++++
 .../src/verification/index.ts                 |   9 +
 .../tests/advanced-commerce.test.ts           | 562 ++++++++++
 .../tests/api-client.test.ts                  | 978 ++++++++++++++++++
 .../tests/import-ban.test.ts                  |  65 ++
 .../tests/jws-signature-tamper.test.ts        |  61 ++
 .../tests/jws-verification.test.ts            | 171 +++
 .../tests/realtime.test.ts                    | 171 +++
 .../tests/receipts.test.ts                    |  60 ++
 .../mock_signed_data/legacyTransaction        |   1 +
 .../mock_signed_data/missingX5CHeaderClaim    |   1 +
 .../resources/mock_signed_data/renewalInfo    |   1 +
 .../mock_signed_data/testNotification         |   1 +
 .../mock_signed_data/transactionInfo          |   1 +
 .../resources/mock_signed_data/wrongBundleId  |   1 +
 .../models/advancedCommerceDescriptors.json   |   4 +
 .../models/advancedCommerceOffer.json         |   6 +
 ...cedCommerceOneTimeChargeCreateRequest.json |  14 +
 .../advancedCommerceOneTimeChargeItem.json    |   6 +
 .../models/advancedCommerceRequestInfo.json   |   5 +
 .../advancedCommerceRequestRefundItem.json    |   7 +
 .../advancedCommerceRequestRefundRequest.json |  22 +
 ...advancedCommerceRequestRefundResponse.json |   3 +
 ...ncedCommerceSubscriptionCancelRequest.json |   6 +
 ...cedCommerceSubscriptionCancelResponse.json |   4 +
 ...SubscriptionChangeMetadataDescriptors.json |   5 +
 ...ommerceSubscriptionChangeMetadataItem.json |   7 +
 ...erceSubscriptionChangeMetadataRequest.json |  14 +
 ...rceSubscriptionChangeMetadataResponse.json |   4 +
 ...dvancedCommerceSubscriptionCreateItem.json |   6 +
 ...ncedCommerceSubscriptionCreateRequest.json |  28 +
 ...ommerceSubscriptionMigrateDescriptors.json |   4 +
 ...vancedCommerceSubscriptionMigrateItem.json |   5 +
 ...ommerceSubscriptionMigrateRenewalItem.json |   5 +
 ...cedCommerceSubscriptionMigrateRequest.json |  18 +
 ...edCommerceSubscriptionMigrateResponse.json |   4 +
 ...ncedCommerceSubscriptionModifyAddItem.json |   6 +
 ...dCommerceSubscriptionModifyChangeItem.json |   9 +
 ...CommerceSubscriptionModifyDescriptors.json |   5 +
 ...ommerceSubscriptionModifyInAppRequest.json |  14 +
 ...ommerceSubscriptionModifyPeriodChange.json |   4 +
 ...dCommerceSubscriptionModifyRemoveItem.json |   3 +
 ...edCommerceSubscriptionPriceChangeItem.json |   5 +
 ...ommerceSubscriptionPriceChangeRequest.json |  12 +
 ...mmerceSubscriptionPriceChangeResponse.json |   4 +
 ...rceSubscriptionReactivateInAppRequest.json |  11 +
 ...cedCommerceSubscriptionReactivateItem.json |   3 +
 ...ncedCommerceSubscriptionRevokeRequest.json |   9 +
 ...cedCommerceSubscriptionRevokeResponse.json |   4 +
 .../tests/resources/models/apiException.json  |   4 +
 .../models/apiTooManyRequestsException.json   |   4 +
 .../resources/models/apiUnknownError.json     |   4 +
 .../tests/resources/models/appData.json       |   6 +
 .../resources/models/appTransaction.json      |  15 +
 .../appTransactionDoesNotExistError.json      |   4 +
 .../models/appTransactionInfoResponse.json    |   3 +
 .../models/decodedRealtimeRequest.json        |   9 +
 ...alDateForAllActiveSubscribersResponse.json |   3 +
 ...extendSubscriptionRenewalDateResponse.json |   6 +
 .../familyTransactionNotSupportedError.json   |   4 +
 .../getAllSubscriptionStatusesResponse.json   |  35 +
 .../models/getDefaultMessageResponse.json     |   3 +
 .../models/getImageListResponse.json          |   9 +
 .../models/getMessageListResponse.json        |   8 +
 .../getNotificationHistoryResponse.json       |  27 +
 .../models/getRealtimeUrlResponse.json        |   3 +
 .../models/getRefundHistoryResponse.json      |   8 +
 ...criptionRenewalDateExtensionsResponse.json |   7 +
 .../getTestNotificationStatusResponse.json    |  12 +
 .../invalidAppAccountTokenUUIDError.json      |   4 +
 .../models/invalidTransactionIdError.json     |   4 +
 .../models/lookupOrderIdResponse.json         |   7 +
 .../models/performanceTestResponse.json       |  10 +
 .../models/performanceTestResultResponse.json |  24 +
 .../requestTestNotificationResponse.json      |   3 +
 .../signedConsumptionRequestNotification.json |  16 +
 ...gnedExternalPurchaseTokenNotification.json |  13 +
 ...ernalPurchaseTokenSandboxNotification.json |  13 +
 .../resources/models/signedNotification.json  |  16 +
 .../resources/models/signedRenewalInfo.json   |  60 ++
 .../signedRescindConsentNotification.json     |  12 +
 .../models/signedSummaryNotification.json     |  21 +
 .../resources/models/signedTransaction.json   |  66 ++
 .../signedTransactionWithRevocation.json      |  32 +
 .../models/transactionHistoryResponse.json    |  11 +
 ...istoryResponseWithMalformedAppAppleId.json |  11 +
 ...storyResponseWithMalformedEnvironment.json |  11 +
 .../models/transactionIdNotFoundError.json    |   4 +
 ...transactionIdNotOriginalTransactionId.json |   4 +
 .../models/transactionInfoResponse.json       |   3 +
 .../resources/xcode/xcode-app-receipt-empty   |   1 +
 .../xcode/xcode-app-receipt-with-transaction  |   1 +
 .../xcode/xcode-signed-app-transaction        |   1 +
 .../resources/xcode/xcode-signed-renewal-info |   1 +
 .../resources/xcode/xcode-signed-transaction  |   1 +
 .../tests/schemas.test.ts                     | 168 +++
 .../tests/signatures.test.ts                  | 164 +++
 .../tests/transaction-decoding.test.ts        | 397 +++++++
 packages/app-store-server-sdk/tests/util.ts   | 252 +++++
 .../tests/verification.test.ts                | 170 +++
 packages/app-store-server-sdk/tsconfig.json   |  10 +
 packages/app-store-server-sdk/vitest.unit.mts |   9 +
 .../workerd-smoke/run-smoke.mjs               | 136 +++
 .../workerd-smoke/worker.ts                   |  50 +
 pnpm-lock.yaml                                | 196 ++++
 134 files changed, 9922 insertions(+), 1 deletion(-)
 create mode 100644 .gitleaks.toml
 create mode 100644 packages/app-store-server-sdk/LICENSE.md
 create mode 100644 packages/app-store-server-sdk/THIRD_PARTY_NOTICES.md
 create mode 100644 packages/app-store-server-sdk/package.json
 create mode 100644 packages/app-store-server-sdk/src/client/AppStoreServerSdkClient.ts
 create mode 100644 packages/app-store-server-sdk/src/client/auth.ts
 create mode 100644 packages/app-store-server-sdk/src/client/index.ts
 create mode 100644 packages/app-store-server-sdk/src/errors/api-errors.ts
 create mode 100644 packages/app-store-server-sdk/src/errors/client-errors.ts
 create mode 100644 packages/app-store-server-sdk/src/errors/index.ts
 create mode 100644 packages/app-store-server-sdk/src/errors/verification-errors.ts
 create mode 100644 packages/app-store-server-sdk/src/index.ts
 create mode 100644 packages/app-store-server-sdk/src/internal/bytes.ts
 create mode 100644 packages/app-store-server-sdk/src/receipts/index.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/advanced-commerce.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/app-transaction.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/enums.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/helper-validation.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/index.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/notifications.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/realtime.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/renewals.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/requests.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/responses.ts
 create mode 100644 packages/app-store-server-sdk/src/schemas/transactions.ts
 create mode 100644 packages/app-store-server-sdk/src/sdk.ts
 create mode 100644 packages/app-store-server-sdk/src/signatures/index.ts
 create mode 100644 packages/app-store-server-sdk/src/verification/SignedDataVerifier.ts
 create mode 100644 packages/app-store-server-sdk/src/verification/certificate-chain.ts
 create mode 100644 packages/app-store-server-sdk/src/verification/index.ts
 create mode 100644 packages/app-store-server-sdk/tests/advanced-commerce.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/api-client.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/import-ban.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/jws-signature-tamper.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/jws-verification.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/realtime.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/receipts.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/resources/mock_signed_data/legacyTransaction
 create mode 100644 packages/app-store-server-sdk/tests/resources/mock_signed_data/missingX5CHeaderClaim
 create mode 100644 packages/app-store-server-sdk/tests/resources/mock_signed_data/renewalInfo
 create mode 100644 packages/app-store-server-sdk/tests/resources/mock_signed_data/testNotification
 create mode 100644 packages/app-store-server-sdk/tests/resources/mock_signed_data/transactionInfo
 create mode 100644 packages/app-store-server-sdk/tests/resources/mock_signed_data/wrongBundleId
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceDescriptors.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceOffer.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeCreateRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestInfo.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataDescriptors.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateDescriptors.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRenewalItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyAddItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyChangeItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyDescriptors.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyInAppRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyPeriodChange.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyRemoveItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateInAppRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateItem.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/apiException.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/apiTooManyRequestsException.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/apiUnknownError.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/appData.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/appTransaction.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/appTransactionDoesNotExistError.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/appTransactionInfoResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/decodedRealtimeRequest.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/extendRenewalDateForAllActiveSubscribersResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/extendSubscriptionRenewalDateResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/familyTransactionNotSupportedError.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getAllSubscriptionStatusesResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getDefaultMessageResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getImageListResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getMessageListResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getNotificationHistoryResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getRealtimeUrlResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getRefundHistoryResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getStatusOfSubscriptionRenewalDateExtensionsResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/getTestNotificationStatusResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/invalidAppAccountTokenUUIDError.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/invalidTransactionIdError.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/lookupOrderIdResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/performanceTestResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/performanceTestResultResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/requestTestNotificationResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedConsumptionRequestNotification.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenNotification.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenSandboxNotification.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedNotification.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedRenewalInfo.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedRescindConsentNotification.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedSummaryNotification.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedTransaction.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/signedTransactionWithRevocation.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedAppAppleId.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedEnvironment.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/transactionIdNotFoundError.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/transactionIdNotOriginalTransactionId.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/models/transactionInfoResponse.json
 create mode 100644 packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-empty
 create mode 100644 packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-with-transaction
 create mode 100644 packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-app-transaction
 create mode 100644 packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-renewal-info
 create mode 100644 packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-transaction
 create mode 100644 packages/app-store-server-sdk/tests/schemas.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/signatures.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/transaction-decoding.test.ts
 create mode 100644 packages/app-store-server-sdk/tests/util.ts
 create mode 100644 packages/app-store-server-sdk/tests/verification.test.ts
 create mode 100644 packages/app-store-server-sdk/tsconfig.json
 create mode 100644 packages/app-store-server-sdk/vitest.unit.mts
 create mode 100644 packages/app-store-server-sdk/workerd-smoke/run-smoke.mjs
 create mode 100644 packages/app-store-server-sdk/workerd-smoke/worker.ts

diff --git a/.github/workflows/secret-scanning.yml b/.github/workflows/secret-scanning.yml
index d074990f0..578f29500 100644
--- a/.github/workflows/secret-scanning.yml
+++ b/.github/workflows/secret-scanning.yml
@@ -27,7 +27,7 @@ jobs:
           docker run --rm
           --volume "$GITHUB_WORKSPACE:/repo:ro"
           ghcr.io/gitleaks/gitleaks@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f
-          dir /repo --redact --no-banner --exit-code 1
+          dir /repo --config /repo/.gitleaks.toml --redact --no-banner --exit-code 1
 
   trufflehog:
     name: TruffleHog
diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 000000000..d98f1173f
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,24 @@
+[extend]
+useDefault = true
+
+[[allowlists]]
+description = "UUID-shaped App Store SDK test tokens"
+condition = "AND"
+targetRules = ["generic-api-key"]
+regexTarget = "secret"
+regexes = ['''(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$''']
+paths = ['''(?:^|/)packages/app-store-server-sdk/tests/''']
+
+[[allowlists]]
+description = "Byte-identical public fixtures from Apple's App Store Server Library"
+targetRules = ["jwt"]
+paths = [
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/mock_signed_data/missingX5CHeaderClaim$''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/mock_signed_data/renewalInfo$''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/mock_signed_data/testNotification$''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/mock_signed_data/transactionInfo$''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/mock_signed_data/wrongBundleId$''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-app-transaction$''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-renewal-info$''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-transaction$''',
+]
diff --git a/packages/app-store-server-sdk/LICENSE.md b/packages/app-store-server-sdk/LICENSE.md
new file mode 100644
index 000000000..81b21521f
--- /dev/null
+++ b/packages/app-store-server-sdk/LICENSE.md
@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2025 Voidhash s.r.o.
+Copyright (c) 2023 Apple Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/app-store-server-sdk/THIRD_PARTY_NOTICES.md b/packages/app-store-server-sdk/THIRD_PARTY_NOTICES.md
new file mode 100644
index 000000000..092544a0c
--- /dev/null
+++ b/packages/app-store-server-sdk/THIRD_PARTY_NOTICES.md
@@ -0,0 +1,24 @@
+# Third-party notices
+
+Portions of this package and its test fixtures are derived from Apple's
+[App Store Server Library for Node.js](https://github.com/apple/app-store-server-library-node).
+
+Copyright (c) 2023 Apple Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/app-store-server-sdk/package.json b/packages/app-store-server-sdk/package.json
new file mode 100644
index 000000000..c70402f1d
--- /dev/null
+++ b/packages/app-store-server-sdk/package.json
@@ -0,0 +1,41 @@
+{
+  "name": "@voidhash/app-store-server-sdk",
+  "version": "0.0.1-alpha.1",
+  "license": "MIT",
+  "private": true,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/app-store-server-sdk"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./client": "./src/client/index.ts",
+    "./verification": "./src/verification/index.ts",
+    "./signatures": "./src/signatures/index.ts",
+    "./receipts": "./src/receipts/index.ts",
+    "./schemas": "./src/schemas/index.ts",
+    "./errors": "./src/errors/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vitest run -c vitest.unit.mts",
+    "test:watch": "vitest -c vitest.unit.mts",
+    "test:workers": "node workerd-smoke/run-smoke.mjs"
+  },
+  "dependencies": {
+    "@peculiar/x509": "^2.0.0",
+    "jose": "^6.0.11",
+    "reflect-metadata": "^0.2.2"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "5.9.3",
+    "vitest": "^3.2.7"
+  },
+  "peerDependencies": {
+    "effect": "4.0.0-beta.84"
+  }
+}
diff --git a/packages/app-store-server-sdk/src/client/AppStoreServerSdkClient.ts b/packages/app-store-server-sdk/src/client/AppStoreServerSdkClient.ts
new file mode 100644
index 000000000..54ee24737
--- /dev/null
+++ b/packages/app-store-server-sdk/src/client/AppStoreServerSdkClient.ts
@@ -0,0 +1,841 @@
+import { Effect, Option, Schema } from "effect";
+import { HttpBody, HttpClient, HttpClientRequest } from "effect/unstable/http";
+import type { HttpClientError } from "effect/unstable/http";
+import { createAppStoreApiError, type AppStoreApiError } from "../errors/api-errors.ts";
+import {
+  AppStoreJwtError,
+  AppStoreNetworkError,
+  AppStoreParseError,
+  AppStoreSchemaError,
+  type AppStoreClientError,
+} from "../errors/client-errors.ts";
+import { AppStoreServerSdk } from "../sdk.ts";
+import { Environment, GetTransactionHistoryVersion } from "../schemas/enums.ts";
+import { createBearerToken, type BearerTokenConfig } from "./auth.ts";
+import {
+  type ConsumptionRequest,
+  ConsumptionRequestSchema,
+  type ConsumptionRequestV1,
+  ConsumptionRequestV1Schema,
+  type DefaultConfigurationRequest,
+  DefaultConfigurationRequestSchema,
+  type ExtendRenewalDateRequest,
+  ExtendRenewalDateRequestSchema,
+  type MassExtendRenewalDateRequest,
+  MassExtendRenewalDateRequestSchema,
+  type NotificationHistoryRequest,
+  NotificationHistoryRequestSchema,
+  type PerformanceTestRequest,
+  PerformanceTestRequestSchema,
+  type TransactionHistoryRequest,
+  type UpdateAppAccountTokenRequest,
+  UpdateAppAccountTokenRequestSchema,
+  type UploadMessageRequestBody,
+  UploadMessageRequestBodySchema,
+} from "../schemas/requests.ts";
+import { RealtimeUrlRequestSchema, type RealtimeUrlRequest } from "../schemas/realtime.ts";
+import {
+  type AppTransactionInfoResponse,
+  AppTransactionInfoResponseSchema,
+  type CheckTestNotificationResponse,
+  CheckTestNotificationResponseSchema,
+  type DefaultConfigurationResponse,
+  DefaultConfigurationResponseSchema,
+  type ExtendRenewalDateResponse,
+  ExtendRenewalDateResponseSchema,
+  type GetImageListResponse,
+  GetImageListResponseSchema,
+  type GetMessageListResponse,
+  GetMessageListResponseSchema,
+  type HistoryResponse,
+  HistoryResponseSchema,
+  type MassExtendRenewalDateResponse,
+  MassExtendRenewalDateResponseSchema,
+  type MassExtendRenewalDateStatusResponse,
+  MassExtendRenewalDateStatusResponseSchema,
+  type NotificationHistoryResponse,
+  NotificationHistoryResponseSchema,
+  type OrderLookupResponse,
+  OrderLookupResponseSchema,
+  type PerformanceTestResponse,
+  PerformanceTestResponseSchema,
+  type PerformanceTestResultResponse,
+  PerformanceTestResultResponseSchema,
+  type RealtimeUrlResponse,
+  RealtimeUrlResponseSchema,
+  type RefundHistoryResponse,
+  RefundHistoryResponseSchema,
+  type SendTestNotificationResponse,
+  SendTestNotificationResponseSchema,
+  type StatusResponse,
+  StatusResponseSchema,
+  type TransactionInfoResponse,
+  TransactionInfoResponseSchema,
+} from "../schemas/responses.ts";
+import { type Status } from "../schemas/enums.ts";
+
+/**
+ * Configuration for a per-tenant {@link AppStoreServerSdkClient}. Combines the
+ * App Store Connect credentials needed to mint bearer tokens with the target
+ * environment.
+ */
+export interface AppStoreServerSdkClientConfig extends BearerTokenConfig {
+  readonly environment: (typeof Environment)[keyof typeof Environment];
+}
+
+const PRODUCTION_URL = "https://api.storekit.itunes.apple.com";
+const SANDBOX_URL = "https://api.storekit-sandbox.itunes.apple.com";
+const LOCAL_TESTING_URL = "https://local-testing-base-url";
+const USER_AGENT = "app-store-server-sdk-effect/1.0.0";
+
+type DecodableSchema<T> = Schema.Top & {
+  readonly Type: T;
+  readonly DecodingServices: never;
+};
+
+type EncodableSchema<T> = DecodableSchema<T> & {
+  readonly Encoded: unknown;
+  readonly EncodingServices: never;
+};
+
+/**
+ * Combined error type for all App Store client operations. Note: the HTTP
+ * client dependency is absorbed by the parent {@link AppStoreServerSdk}, so
+ * client methods return `Effect<T, AppStoreError>` rather than
+ * `Effect<T, AppStoreError, HttpClient>`.
+ */
+export type AppStoreError = AppStoreClientError | AppStoreApiError;
+
+export type {
+  ConsumptionRequest,
+  ConsumptionRequestV1,
+  DefaultConfigurationRequest,
+  ExtendRenewalDateRequest,
+  MassExtendRenewalDateRequest,
+  NotificationHistoryRequest,
+  PerformanceTestRequest,
+  RealtimeUrlRequest,
+  TransactionHistoryRequest,
+  UpdateAppAccountTokenRequest,
+  UploadMessageRequestBody,
+};
+
+/**
+ * Per-tenant App Store Server API client. Construct via
+ * {@link AppStoreServerSdkClient.make}.
+ */
+export interface AppStoreServerSdkClient {
+  // Transaction endpoints
+  readonly getTransactionInfo: (
+    transactionId: string,
+  ) => Effect.Effect<TransactionInfoResponse, AppStoreError>;
+
+  readonly getTransactionHistory: (
+    transactionId: string,
+    revision: Option.Option<string>,
+    request: TransactionHistoryRequest,
+    version: Option.Option<
+      (typeof GetTransactionHistoryVersion)[keyof typeof GetTransactionHistoryVersion]
+    >,
+  ) => Effect.Effect<HistoryResponse, AppStoreError>;
+
+  readonly getRefundHistory: (
+    transactionId: string,
+    revision: Option.Option<string>,
+  ) => Effect.Effect<RefundHistoryResponse, AppStoreError>;
+
+  readonly lookUpOrderId: (orderId: string) => Effect.Effect<OrderLookupResponse, AppStoreError>;
+
+  readonly setAppAccountToken: (
+    originalTransactionId: string,
+    request: UpdateAppAccountTokenRequest,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  readonly getAppTransactionInfo: (
+    transactionId: string,
+  ) => Effect.Effect<AppTransactionInfoResponse, AppStoreError>;
+
+  // Subscription endpoints
+  readonly getAllSubscriptionStatuses: (
+    transactionId: string,
+    status: Option.Option<Status[]>,
+  ) => Effect.Effect<StatusResponse, AppStoreError>;
+
+  readonly extendSubscriptionRenewalDate: (
+    originalTransactionId: string,
+    request: ExtendRenewalDateRequest,
+  ) => Effect.Effect<ExtendRenewalDateResponse, AppStoreError>;
+
+  readonly extendRenewalDateForAllActiveSubscribers: (
+    request: MassExtendRenewalDateRequest,
+  ) => Effect.Effect<MassExtendRenewalDateResponse, AppStoreError>;
+
+  readonly getStatusOfSubscriptionRenewalDateExtensions: (
+    requestIdentifier: string,
+    productId: string,
+  ) => Effect.Effect<MassExtendRenewalDateStatusResponse, AppStoreError>;
+
+  // Consumption endpoints
+  readonly sendConsumptionInformation: (
+    transactionId: string,
+    request: ConsumptionRequest,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  /** @deprecated Use {@link sendConsumptionInformation}. */
+  readonly sendConsumptionData: (
+    transactionId: string,
+    request: ConsumptionRequestV1,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  /** Marks a transaction as finished. */
+  readonly finishTransaction: (transactionId: string) => Effect.Effect<void, AppStoreError>;
+
+  // Notification endpoints
+  readonly requestTestNotification: () => Effect.Effect<
+    SendTestNotificationResponse,
+    AppStoreError
+  >;
+
+  readonly getTestNotificationStatus: (
+    testNotificationToken: string,
+  ) => Effect.Effect<CheckTestNotificationResponse, AppStoreError>;
+
+  readonly getNotificationHistory: (
+    paginationToken: Option.Option<string>,
+    request: NotificationHistoryRequest,
+  ) => Effect.Effect<NotificationHistoryResponse, AppStoreError>;
+
+  // Messaging endpoints
+  readonly uploadImage: (
+    imageIdentifier: string,
+    image: Uint8Array,
+    imageSize: Option.Option<string>,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  readonly deleteImage: (imageIdentifier: string) => Effect.Effect<void, AppStoreError>;
+
+  readonly getImageList: () => Effect.Effect<GetImageListResponse, AppStoreError>;
+
+  readonly uploadMessage: (
+    messageIdentifier: string,
+    request: UploadMessageRequestBody,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  readonly deleteMessage: (messageIdentifier: string) => Effect.Effect<void, AppStoreError>;
+
+  readonly getMessageList: () => Effect.Effect<GetMessageListResponse, AppStoreError>;
+
+  readonly configureDefaultMessage: (
+    productId: string,
+    locale: string,
+    request: DefaultConfigurationRequest,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  readonly deleteDefaultMessage: (
+    productId: string,
+    locale: string,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  readonly getDefaultMessage: (
+    productId: string,
+    locale: string,
+  ) => Effect.Effect<DefaultConfigurationResponse, AppStoreError>;
+
+  // Realtime URL endpoints
+  readonly configureRealtimeURL: (
+    request: RealtimeUrlRequest,
+  ) => Effect.Effect<void, AppStoreError>;
+
+  readonly deleteRealtimeURL: () => Effect.Effect<void, AppStoreError>;
+
+  readonly getRealtimeURL: () => Effect.Effect<RealtimeUrlResponse, AppStoreError>;
+
+  // Performance test endpoints
+  readonly initiatePerformanceTest: (
+    request: PerformanceTestRequest,
+  ) => Effect.Effect<PerformanceTestResponse, AppStoreError>;
+
+  readonly getPerformanceTestResults: (
+    requestId: string,
+  ) => Effect.Effect<PerformanceTestResultResponse, AppStoreError>;
+}
+
+const getBaseUrl = (environment: (typeof Environment)[keyof typeof Environment]) => {
+  switch (environment) {
+    case Environment.PRODUCTION:
+      return PRODUCTION_URL;
+    case Environment.SANDBOX:
+      return SANDBOX_URL;
+    case Environment.LOCAL_TESTING:
+      return LOCAL_TESTING_URL;
+    case Environment.XCODE:
+      throw new Error("Xcode is not a supported environment for an AppStoreServerSdkClient");
+    default:
+      return PRODUCTION_URL;
+  }
+};
+
+const appendQueryParamOption = <T>(
+  queryParams: Record<string, string[]>,
+  key: string,
+  value: Option.Option<T>,
+  map: (value: T) => string[] = (item) => [String(item)],
+) => {
+  if (Option.isSome(value)) {
+    queryParams[key] = map(value.value);
+  }
+};
+
+const optionFromRecord = (
+  queryParams: Record<string, string[]>,
+): Option.Option<Record<string, string[]>> =>
+  Object.keys(queryParams).length > 0 ? Option.some(queryParams) : Option.none();
+
+const asOption = <T>(value: Option.Option<T> | T | null | undefined): Option.Option<T> =>
+  Option.isOption(value) ? value : Option.fromNullishOr(value);
+
+const toJsonValue = (value: unknown): unknown => {
+  if (Option.isOption(value)) {
+    return Option.match(value, {
+      onNone: () => undefined,
+      onSome: toJsonValue,
+    });
+  }
+  if (Array.isArray(value)) {
+    return value.map(toJsonValue);
+  }
+  if (typeof value === "object" && value !== null) {
+    return Object.fromEntries(
+      Object.entries(value)
+        .map(([key, item]) => [key, toJsonValue(item)] as const)
+        .filter(([, item]) => item !== undefined),
+    );
+  }
+  return value;
+};
+
+const encodeRequestBody = <T>(request: T, schema: EncodableSchema<T>): Effect.Effect<unknown> =>
+  Schema.encodeUnknownEffect(schema)(request).pipe(
+    Effect.catch(() => Effect.sync(() => toJsonValue(request))),
+  );
+
+export const AppStoreServerSdkClient = {
+  /**
+   * Build a per-tenant App Store Server API client over the shared
+   * {@link AppStoreServerSdk}. Captures the credentials in closure; methods
+   * regenerate a fresh bearer token per request (Apple mandates 5-minute
+   * token expiry, so caching across requests provides little benefit).
+   */
+  make: (
+    sdk: typeof AppStoreServerSdk.Service,
+    config: AppStoreServerSdkClientConfig,
+  ): AppStoreServerSdkClient => {
+    const baseUrl = getBaseUrl(config.environment);
+    const httpClient = sdk.httpClient;
+
+    const makeRequest = <T>(
+      path: string,
+      method: "GET" | "POST" | "PUT" | "DELETE",
+      queryParams: Option.Option<Record<string, string[]>>,
+      body: Option.Option<unknown>,
+      responseSchema: Option.Option<DecodableSchema<T>>,
+      contentType: Option.Option<string>,
+    ): Effect.Effect<T, AppStoreError> =>
+      Effect.gen(function* () {
+        const bearerToken = yield* createBearerToken(config).pipe(
+          Effect.mapError(
+            (e) =>
+              new AppStoreJwtError({
+                message: e.message,
+                cause: Option.some(e),
+              }),
+          ),
+        );
+
+        let url = `${baseUrl}${path}`;
+        if (Option.isSome(queryParams)) {
+          const params = new URLSearchParams();
+          for (const [key, values] of Object.entries(queryParams.value)) {
+            for (const value of values) {
+              params.append(key, value);
+            }
+          }
+          url = `${url}?${params.toString()}`;
+        }
+
+        let bodyOption: HttpBody.HttpBody = HttpBody.empty;
+        if (Option.isSome(body)) {
+          if (body.value instanceof Uint8Array) {
+            bodyOption = HttpBody.uint8Array(
+              body.value,
+              Option.getOrElse(contentType, () => "image/png"),
+            );
+          } else {
+            bodyOption = HttpBody.jsonUnsafe(body.value);
+          }
+        }
+
+        const request = HttpClientRequest.make(method)(url, {
+          headers: {
+            Authorization: `Bearer ${bearerToken}`,
+            "User-Agent": USER_AGENT,
+            Accept: "application/json",
+          },
+          body: bodyOption,
+        });
+
+        const response = yield* httpClient.execute(request).pipe(
+          Effect.mapError(
+            (e: HttpClientError.HttpClientError) =>
+              new AppStoreNetworkError({
+                message: `HTTP request failed: ${e.message}`,
+                cause: Option.some(e),
+              }),
+          ),
+        );
+
+        if (response.status >= 200 && response.status < 300) {
+          if (Option.isNone(responseSchema)) {
+            return undefined as T;
+          }
+
+          const json = yield* response.json.pipe(
+            Effect.mapError(
+              () =>
+                new AppStoreParseError({
+                  httpStatusCode: response.status,
+                  message: "Failed to parse response JSON",
+                }),
+            ),
+          );
+
+          const parsed = yield* Schema.decodeUnknownEffect(responseSchema.value)(json).pipe(
+            Effect.mapError(
+              (_e: Schema.SchemaError) =>
+                new AppStoreSchemaError({
+                  httpStatusCode: response.status,
+                  message: "Unexpected response body format",
+                }),
+            ),
+          );
+
+          return parsed;
+        }
+
+        const errorBody = yield* response.json.pipe(Effect.catch(() => Effect.succeed({})));
+
+        const errorCode = Option.fromNullishOr(
+          typeof errorBody === "object" && errorBody !== null && "errorCode" in errorBody
+            ? (errorBody.errorCode as number)
+            : undefined,
+        );
+        const errorMessage = Option.fromNullishOr(
+          typeof errorBody === "object" && errorBody !== null && "errorMessage" in errorBody
+            ? (errorBody.errorMessage as string)
+            : undefined,
+        );
+
+        return yield* Effect.fail(createAppStoreApiError(response.status, errorCode, errorMessage));
+      });
+
+    return {
+      // Transaction endpoints
+      getTransactionInfo: (transactionId) =>
+        makeRequest(
+          `/inApps/v1/transactions/${transactionId}`,
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(TransactionInfoResponseSchema),
+          Option.none(),
+        ),
+
+      getTransactionHistory: (transactionId, revision, request, version) => {
+        const queryParams: Record<string, string[]> = {};
+        const revisionOption = asOption(revision);
+        const versionOption = asOption(version);
+        appendQueryParamOption(queryParams, "revision", revisionOption);
+        appendQueryParamOption(queryParams, "startDate", asOption(request.startDate));
+        appendQueryParamOption(queryParams, "endDate", asOption(request.endDate));
+        appendQueryParamOption(queryParams, "productId", asOption(request.productIds), (values) => [
+          ...values,
+        ]);
+        appendQueryParamOption(
+          queryParams,
+          "productType",
+          asOption(request.productTypes),
+          (values) => [...values],
+        );
+        appendQueryParamOption(queryParams, "sort", asOption(request.sort));
+        appendQueryParamOption(
+          queryParams,
+          "subscriptionGroupIdentifier",
+          asOption(request.subscriptionGroupIdentifiers),
+          (values) => [...values],
+        );
+        appendQueryParamOption(
+          queryParams,
+          "inAppOwnershipType",
+          asOption(request.inAppOwnershipType),
+        );
+        appendQueryParamOption(queryParams, "revoked", asOption(request.revoked));
+        const historyVersion = Option.getOrElse(
+          versionOption,
+          () => GetTransactionHistoryVersion.V1,
+        );
+
+        return makeRequest(
+          `/inApps/${historyVersion}/history/${transactionId}`,
+          "GET",
+          optionFromRecord(queryParams),
+          Option.none(),
+          Option.some(HistoryResponseSchema),
+          Option.none(),
+        );
+      },
+
+      getRefundHistory: (transactionId, revision) => {
+        const queryParams: Record<string, string[]> = {};
+        appendQueryParamOption(queryParams, "revision", asOption(revision));
+
+        return makeRequest(
+          `/inApps/v2/refund/lookup/${transactionId}`,
+          "GET",
+          optionFromRecord(queryParams),
+          Option.none(),
+          Option.some(RefundHistoryResponseSchema),
+          Option.none(),
+        );
+      },
+
+      lookUpOrderId: (orderId) =>
+        makeRequest(
+          `/inApps/v1/lookup/${orderId}`,
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(OrderLookupResponseSchema),
+          Option.none(),
+        ),
+
+      setAppAccountToken: (originalTransactionId, request) =>
+        encodeRequestBody(request, UpdateAppAccountTokenRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              `/inApps/v1/transactions/${originalTransactionId}/appAccountToken`,
+              "PUT",
+              Option.none(),
+              Option.some(body),
+              Option.none(),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      getAppTransactionInfo: (transactionId) =>
+        makeRequest(
+          `/inApps/v1/transactions/appTransactions/${transactionId}`,
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(AppTransactionInfoResponseSchema),
+          Option.none(),
+        ),
+
+      // Subscription endpoints
+      getAllSubscriptionStatuses: (transactionId, status) => {
+        const queryParams: Record<string, string[]> = {};
+        appendQueryParamOption(queryParams, "status", asOption(status), (values) =>
+          values.map((s) => s.toString()),
+        );
+
+        return makeRequest(
+          `/inApps/v1/subscriptions/${transactionId}`,
+          "GET",
+          optionFromRecord(queryParams),
+          Option.none(),
+          Option.some(StatusResponseSchema),
+          Option.none(),
+        );
+      },
+
+      extendSubscriptionRenewalDate: (originalTransactionId, request) =>
+        encodeRequestBody(request, ExtendRenewalDateRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              `/inApps/v1/subscriptions/extend/${originalTransactionId}`,
+              "PUT",
+              Option.none(),
+              Option.some(body),
+              Option.some(ExtendRenewalDateResponseSchema),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      extendRenewalDateForAllActiveSubscribers: (request) =>
+        encodeRequestBody(request, MassExtendRenewalDateRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              "/inApps/v1/subscriptions/extend/mass",
+              "POST",
+              Option.none(),
+              Option.some(body),
+              Option.some(MassExtendRenewalDateResponseSchema),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      getStatusOfSubscriptionRenewalDateExtensions: (requestIdentifier, productId) =>
+        makeRequest(
+          `/inApps/v1/subscriptions/extend/mass/${productId}/${requestIdentifier}`,
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(MassExtendRenewalDateStatusResponseSchema),
+          Option.none(),
+        ),
+
+      // Consumption endpoints
+      sendConsumptionInformation: (transactionId, request) =>
+        encodeRequestBody(request, ConsumptionRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              `/inApps/v2/transactions/consumption/${transactionId}`,
+              "PUT",
+              Option.none(),
+              Option.some(body),
+              Option.none(),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      sendConsumptionData: (transactionId, request) =>
+        encodeRequestBody(request, ConsumptionRequestV1Schema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              `/inApps/v1/transactions/consumption/${transactionId}`,
+              "PUT",
+              Option.none(),
+              Option.some(body),
+              Option.none(),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      finishTransaction: (transactionId) =>
+        makeRequest(
+          `/inApps/v1/transactions/${transactionId}/finish`,
+          "POST",
+          Option.none(),
+          Option.none(),
+          Option.none(),
+          Option.none(),
+        ),
+
+      // Notification endpoints
+      requestTestNotification: () =>
+        makeRequest(
+          "/inApps/v1/notifications/test",
+          "POST",
+          Option.none(),
+          Option.none(),
+          Option.some(SendTestNotificationResponseSchema),
+          Option.none(),
+        ),
+
+      getTestNotificationStatus: (testNotificationToken) =>
+        makeRequest(
+          `/inApps/v1/notifications/test/${testNotificationToken}`,
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(CheckTestNotificationResponseSchema),
+          Option.none(),
+        ),
+
+      getNotificationHistory: (paginationToken, request) => {
+        const queryParams: Record<string, string[]> = {};
+        appendQueryParamOption(queryParams, "paginationToken", asOption(paginationToken));
+
+        return encodeRequestBody(request, NotificationHistoryRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              "/inApps/v1/notifications/history",
+              "POST",
+              optionFromRecord(queryParams),
+              Option.some(body),
+              Option.some(NotificationHistoryResponseSchema),
+              Option.some("application/json"),
+            ),
+          ),
+        );
+      },
+
+      // Messaging endpoints
+      uploadImage: (imageIdentifier, image, imageSize) => {
+        const queryParams: Record<string, string[]> = {};
+        appendQueryParamOption(queryParams, "imageSize", asOption(imageSize));
+        return makeRequest(
+          `/inApps/v1/messaging/image/${imageIdentifier}`,
+          "PUT",
+          optionFromRecord(queryParams),
+          Option.some(image),
+          Option.none(),
+          Option.some("image/png"),
+        );
+      },
+
+      deleteImage: (imageIdentifier) =>
+        makeRequest(
+          `/inApps/v1/messaging/image/${imageIdentifier}`,
+          "DELETE",
+          Option.none(),
+          Option.none(),
+          Option.none(),
+          Option.none(),
+        ),
+
+      getImageList: () =>
+        makeRequest(
+          "/inApps/v1/messaging/image/list",
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(GetImageListResponseSchema),
+          Option.none(),
+        ),
+
+      uploadMessage: (messageIdentifier, request) =>
+        encodeRequestBody(request, UploadMessageRequestBodySchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              `/inApps/v1/messaging/message/${messageIdentifier}`,
+              "PUT",
+              Option.none(),
+              Option.some(body),
+              Option.none(),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      deleteMessage: (messageIdentifier) =>
+        makeRequest(
+          `/inApps/v1/messaging/message/${messageIdentifier}`,
+          "DELETE",
+          Option.none(),
+          Option.none(),
+          Option.none(),
+          Option.none(),
+        ),
+
+      getMessageList: () =>
+        makeRequest(
+          "/inApps/v1/messaging/message/list",
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(GetMessageListResponseSchema),
+          Option.none(),
+        ),
+
+      configureDefaultMessage: (productId, locale, request) =>
+        encodeRequestBody(request, DefaultConfigurationRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              `/inApps/v1/messaging/default/${productId}/${locale}`,
+              "PUT",
+              Option.none(),
+              Option.some(body),
+              Option.none(),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      deleteDefaultMessage: (productId, locale) =>
+        makeRequest(
+          `/inApps/v1/messaging/default/${productId}/${locale}`,
+          "DELETE",
+          Option.none(),
+          Option.none(),
+          Option.none(),
+          Option.none(),
+        ),
+
+      getDefaultMessage: (productId, locale) =>
+        makeRequest(
+          `/inApps/v1/messaging/default/${productId}/${locale}`,
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(DefaultConfigurationResponseSchema),
+          Option.none(),
+        ),
+
+      // Realtime URL endpoints
+      configureRealtimeURL: (request) =>
+        encodeRequestBody(request, RealtimeUrlRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              "/inApps/v1/messaging/realtime/url",
+              "PUT",
+              Option.none(),
+              Option.some(body),
+              Option.none(),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      deleteRealtimeURL: () =>
+        makeRequest(
+          "/inApps/v1/messaging/realtime/url",
+          "DELETE",
+          Option.none(),
+          Option.none(),
+          Option.none(),
+          Option.none(),
+        ),
+
+      getRealtimeURL: () =>
+        makeRequest(
+          "/inApps/v1/messaging/realtime/url",
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(RealtimeUrlResponseSchema),
+          Option.none(),
+        ),
+
+      // Performance test endpoints
+      initiatePerformanceTest: (request) =>
+        encodeRequestBody(request, PerformanceTestRequestSchema).pipe(
+          Effect.flatMap((body) =>
+            makeRequest(
+              "/inApps/v1/messaging/performanceTest",
+              "POST",
+              Option.none(),
+              Option.some(body),
+              Option.some(PerformanceTestResponseSchema),
+              Option.some("application/json"),
+            ),
+          ),
+        ),
+
+      getPerformanceTestResults: (requestId) =>
+        makeRequest(
+          `/inApps/v1/messaging/performanceTest/result/${requestId}`,
+          "GET",
+          Option.none(),
+          Option.none(),
+          Option.some(PerformanceTestResultResponseSchema),
+          Option.none(),
+        ),
+    };
+  },
+};
diff --git a/packages/app-store-server-sdk/src/client/auth.ts b/packages/app-store-server-sdk/src/client/auth.ts
new file mode 100644
index 000000000..6c6e15358
--- /dev/null
+++ b/packages/app-store-server-sdk/src/client/auth.ts
@@ -0,0 +1,206 @@
+import { Effect, Option } from "effect";
+import { decodeJwt, importPKCS8, SignJWT } from "jose";
+import { JwtCreationError } from "../errors/index.ts";
+import { bytesToBase64, utf8ToBytes } from "../internal/bytes.ts";
+
+const asOption = <T>(value: Option.Option<T> | T | null | undefined): Option.Option<T> =>
+  Option.isOption(value) ? value : Option.fromNullishOr(value);
+
+const ES256_ALG = "ES256";
+
+/**
+ * Configuration for creating App Store Server API bearer tokens.
+ */
+export interface BearerTokenConfig {
+  /** Your private key downloaded from App Store Connect (ES256). */
+  signingKey: string;
+  /** Your private key ID from App Store Connect. */
+  keyId: string;
+  /** Your issuer ID from the Keys page in App Store Connect. */
+  issuerId: string;
+  /** Your app's bundle ID. */
+  bundleId: string;
+}
+
+/**
+ * Creates a bearer token for App Store Server API authentication.
+ *
+ * The token is a JWT signed with ES256 algorithm and has a 5-minute expiration.
+ *
+ * @param config - The configuration for token creation
+ * @returns An Effect that produces the bearer token string
+ */
+export const createBearerToken = (
+  config: BearerTokenConfig,
+): Effect.Effect<string, JwtCreationError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const key = await importPKCS8(config.signingKey, ES256_ALG);
+      return await new SignJWT({ bid: config.bundleId })
+        .setProtectedHeader({ alg: ES256_ALG, kid: config.keyId, typ: "JWT" })
+        .setIssuer(config.issuerId)
+        .setAudience("appstoreconnect-v1")
+        .setIssuedAt()
+        .setExpirationTime("5m")
+        .sign(key);
+    },
+    catch: (error) =>
+      new JwtCreationError({
+        message: `Failed to create bearer token: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Configuration for creating promotional offer signatures.
+ */
+export interface PromotionalOfferSignatureConfig {
+  /** Your private key downloaded from App Store Connect (ES256). */
+  signingKey: string;
+  /** Your private key ID from App Store Connect. */
+  keyId: string;
+  /** Your issuer ID from the Keys page in App Store Connect. */
+  issuerId: string;
+  /** Your app's bundle ID. */
+  bundleId: string;
+}
+
+/**
+ * Creates a V2 promotional offer signature.
+ *
+ * @param config - The configuration for signature creation
+ * @param productId - The product identifier
+ * @param offerIdentifier - The offer identifier
+ * @param transactionId - Original transaction ID for upgrades, when present.
+ * @returns An Effect that produces the signature string
+ */
+export const createPromotionalOfferV2Signature = (
+  config: PromotionalOfferSignatureConfig,
+  productId: string,
+  offerIdentifier: string,
+  transactionId: Option.Option<string>,
+): Effect.Effect<string, JwtCreationError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const nonce = globalThis.crypto.randomUUID();
+      const payload: Record<string, unknown> = {
+        bid: config.bundleId,
+        nonce,
+        productId,
+        offerIdentifier,
+      };
+
+      const transactionIdOption = asOption(transactionId);
+      if (Option.isSome(transactionIdOption)) {
+        payload.transactionId = transactionIdOption.value;
+      }
+
+      const key = await importPKCS8(config.signingKey, ES256_ALG);
+      return await new SignJWT(payload)
+        .setProtectedHeader({ alg: ES256_ALG, kid: config.keyId, typ: "JWT" })
+        .setIssuer(config.issuerId)
+        .setAudience("promotional-offer")
+        .setIssuedAt()
+        .sign(key);
+    },
+    catch: (error) =>
+      new JwtCreationError({
+        message: `Failed to create promotional offer V2 signature: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Creates an introductory offer eligibility signature.
+ *
+ * @param config - The configuration for signature creation
+ * @param productId - The product identifier
+ * @param allowIntroductoryOffer - Whether the introductory offer should be allowed
+ * @param transactionId - The original transaction ID
+ * @returns An Effect that produces the signature string
+ */
+export const createIntroductoryOfferEligibilitySignature = (
+  config: PromotionalOfferSignatureConfig,
+  productId: string,
+  allowIntroductoryOffer: boolean,
+  transactionId: string,
+): Effect.Effect<string, JwtCreationError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const nonce = globalThis.crypto.randomUUID();
+      const payload = {
+        bid: config.bundleId,
+        nonce,
+        productId,
+        allowIntroductoryOffer,
+        transactionId,
+      };
+
+      const key = await importPKCS8(config.signingKey, ES256_ALG);
+      return await new SignJWT(payload)
+        .setProtectedHeader({ alg: ES256_ALG, kid: config.keyId, typ: "JWT" })
+        .setIssuer(config.issuerId)
+        .setAudience("introductory-offer-eligibility")
+        .setIssuedAt()
+        .sign(key);
+    },
+    catch: (error) =>
+      new JwtCreationError({
+        message: `Failed to create introductory offer eligibility signature: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Creates an advanced commerce in-app signature.
+ *
+ * @param config - The configuration for signature creation
+ * @param requestPayload - The request payload to sign (will be serialized and base64 encoded)
+ * @returns An Effect that produces the signature string
+ */
+export const createAdvancedCommerceInAppSignature = (
+  config: PromotionalOfferSignatureConfig,
+  requestPayload: Record<string, unknown>,
+): Effect.Effect<string, JwtCreationError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const nonce = globalThis.crypto.randomUUID();
+      const requestJson = JSON.stringify(requestPayload);
+      const payload = {
+        bid: config.bundleId,
+        nonce,
+        request: bytesToBase64(utf8ToBytes(requestJson)),
+      };
+
+      const key = await importPKCS8(config.signingKey, ES256_ALG);
+      return await new SignJWT(payload)
+        .setProtectedHeader({ alg: ES256_ALG, kid: config.keyId, typ: "JWT" })
+        .setIssuer(config.issuerId)
+        .setAudience("advanced-commerce-api")
+        .setIssuedAt()
+        .sign(key);
+    },
+    catch: (error) =>
+      new JwtCreationError({
+        message: `Failed to create advanced commerce in-app signature: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Decodes a JWT without verification (for inspection purposes).
+ *
+ * @param token - The JWT token to decode
+ * @returns The decoded payload
+ */
+export const decodeJwtWithoutVerification = (
+  token: string,
+): Effect.Effect<unknown, JwtCreationError> =>
+  Effect.try({
+    try: () => decodeJwt(token),
+    catch: (error) =>
+      new JwtCreationError({
+        message: `Failed to decode JWT: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
diff --git a/packages/app-store-server-sdk/src/client/index.ts b/packages/app-store-server-sdk/src/client/index.ts
new file mode 100644
index 000000000..e9dd014e0
--- /dev/null
+++ b/packages/app-store-server-sdk/src/client/index.ts
@@ -0,0 +1,14 @@
+export {
+  createBearerToken,
+  createPromotionalOfferV2Signature,
+  createIntroductoryOfferEligibilitySignature,
+  createAdvancedCommerceInAppSignature,
+  decodeJwtWithoutVerification,
+  type BearerTokenConfig,
+  type PromotionalOfferSignatureConfig,
+} from "./auth.ts";
+
+export {
+  AppStoreServerSdkClient,
+  type AppStoreServerSdkClientConfig,
+} from "./AppStoreServerSdkClient.ts";
diff --git a/packages/app-store-server-sdk/src/errors/api-errors.ts b/packages/app-store-server-sdk/src/errors/api-errors.ts
new file mode 100644
index 000000000..a6362cd94
--- /dev/null
+++ b/packages/app-store-server-sdk/src/errors/api-errors.ts
@@ -0,0 +1,260 @@
+import { Option, Schema } from "effect";
+
+/**
+ * Error codes that App Store Server API responses return.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/error_codes
+ */
+export const APIErrorCode = {
+  GENERAL_BAD_REQUEST: 4000000,
+  INVALID_APP_IDENTIFIER: 4000002,
+  INVALID_REQUEST_REVISION: 4000005,
+  INVALID_TRANSACTION_ID: 4000006,
+  INVALID_ORIGINAL_TRANSACTION_ID: 4000008,
+  INVALID_EXTEND_BY_DAYS: 4000009,
+  INVALID_EXTEND_REASON_CODE: 4000010,
+  INVALID_REQUEST_IDENTIFIER: 4000011,
+  START_DATE_TOO_FAR_IN_PAST: 4000012,
+  START_DATE_AFTER_END_DATE: 4000013,
+  INVALID_PAGINATION_TOKEN: 4000014,
+  INVALID_START_DATE: 4000015,
+  INVALID_END_DATE: 4000016,
+  PAGINATION_TOKEN_EXPIRED: 4000017,
+  INVALID_NOTIFICATION_TYPE: 4000018,
+  MULTIPLE_FILTERS_SUPPLIED: 4000019,
+  INVALID_TEST_NOTIFICATION_TOKEN: 4000020,
+  INVALID_SORT: 4000021,
+  INVALID_PRODUCT_TYPE: 4000022,
+  INVALID_PRODUCT_ID: 4000023,
+  INVALID_SUBSCRIPTION_GROUP_IDENTIFIER: 4000024,
+  /** @deprecated */
+  INVALID_EXCLUDE_REVOKED: 4000025,
+  INVALID_IN_APP_OWNERSHIP_TYPE: 4000026,
+  INVALID_EMPTY_STOREFRONT_COUNTRY_CODE_LIST: 4000027,
+  INVALID_STOREFRONT_COUNTRY_CODE: 4000028,
+  INVALID_REVOKED: 4000030,
+  INVALID_STATUS: 4000031,
+  INVALID_ACCOUNT_TENURE: 4000032,
+  INVALID_APP_ACCOUNT_TOKEN: 4000033,
+  INVALID_CONSUMPTION_STATUS: 4000034,
+  INVALID_CUSTOMER_CONSENTED: 4000035,
+  INVALID_DELIVERY_STATUS: 4000036,
+  INVALID_LIFETIME_DOLLARS_PURCHASED: 4000037,
+  INVALID_LIFETIME_DOLLARS_REFUNDED: 4000038,
+  INVALID_PLATFORM: 4000039,
+  INVALID_PLAY_TIME: 4000040,
+  INVALID_SAMPLE_CONTENT_PROVIDED: 4000041,
+  INVALID_USER_STATUS: 4000042,
+  /** @deprecated */
+  INVALID_TRANSACTION_NOT_CONSUMABLE: 4000043,
+  INVALID_TRANSACTION_TYPE_NOT_SUPPORTED: 4000047,
+  APP_TRANSACTION_ID_NOT_SUPPORTED_ERROR: 4000048,
+  INVALID_IMAGE: 4000161,
+  HEADER_TOO_LONG: 4000162,
+  BODY_TOO_LONG: 4000163,
+  INVALID_LOCALE: 4000164,
+  ALT_TEXT_TOO_LONG: 4000175,
+  INVALID_APP_ACCOUNT_TOKEN_UUID_ERROR: 4000183,
+  FAMILY_TRANSACTION_NOT_SUPPORTED_ERROR: 4000185,
+  TRANSACTION_ID_IS_NOT_ORIGINAL_TRANSACTION_ID_ERROR: 4000187,
+  SUBSCRIPTION_EXTENSION_INELIGIBLE: 4030004,
+  SUBSCRIPTION_MAX_EXTENSION: 4030005,
+  FAMILY_SHARED_SUBSCRIPTION_EXTENSION_INELIGIBLE: 4030007,
+  MAXIMUM_NUMBER_OF_IMAGES_REACHED: 4030014,
+  MAXIMUM_NUMBER_OF_MESSAGES_REACHED: 4030016,
+  MESSAGE_NOT_APPROVED: 4030017,
+  IMAGE_NOT_APPROVED: 4030018,
+  IMAGE_IN_USE: 4030019,
+  ACCOUNT_NOT_FOUND: 4040001,
+  ACCOUNT_NOT_FOUND_RETRYABLE: 4040002,
+  APP_NOT_FOUND: 4040003,
+  APP_NOT_FOUND_RETRYABLE: 4040004,
+  ORIGINAL_TRANSACTION_ID_NOT_FOUND: 4040005,
+  ORIGINAL_TRANSACTION_ID_NOT_FOUND_RETRYABLE: 4040006,
+  SERVER_NOTIFICATION_URL_NOT_FOUND: 4040007,
+  TEST_NOTIFICATION_NOT_FOUND: 4040008,
+  STATUS_REQUEST_NOT_FOUND: 4040009,
+  TRANSACTION_ID_NOT_FOUND: 4040010,
+  IMAGE_NOT_FOUND: 4040014,
+  MESSAGE_NOT_FOUND: 4040015,
+  APP_TRANSACTION_DOES_NOT_EXIST_ERROR: 4040019,
+  IMAGE_ALREADY_EXISTS: 4090000,
+  MESSAGE_ALREADY_EXISTS: 4090001,
+  RATE_LIMIT_EXCEEDED: 4290000,
+  GENERAL_INTERNAL: 5000000,
+  GENERAL_INTERNAL_RETRYABLE: 5000001,
+} as const;
+
+export type APIErrorCode = (typeof APIErrorCode)[keyof typeof APIErrorCode];
+
+export const APIErrorCodeSchema = Schema.Union(
+  Object.values(APIErrorCode).map((code) => Schema.Literal(code)),
+);
+
+/**
+ * Validation errors (4000xxx) - invalid parameters, IDs, formats.
+ */
+export class AppStoreValidationError extends Schema.TaggedErrorClass<AppStoreValidationError>(
+  "AppStoreValidationError",
+)("AppStoreValidationError", {
+  httpStatusCode: Schema.Number,
+  apiError: Schema.Option(Schema.Number),
+  errorMessage: Schema.Option(Schema.String),
+}) {}
+
+/**
+ * Not found errors (4040xxx) - resource doesn't exist.
+ */
+export class AppStoreNotFoundError extends Schema.TaggedErrorClass<AppStoreNotFoundError>(
+  "AppStoreNotFoundError",
+)("AppStoreNotFoundError", {
+  httpStatusCode: Schema.Number,
+  apiError: Schema.Option(Schema.Number),
+  errorMessage: Schema.Option(Schema.String),
+}) {
+  get isRetryable(): boolean {
+    return (
+      Option.contains(this.apiError, APIErrorCode.ACCOUNT_NOT_FOUND_RETRYABLE) ||
+      Option.contains(this.apiError, APIErrorCode.APP_NOT_FOUND_RETRYABLE) ||
+      Option.contains(this.apiError, APIErrorCode.ORIGINAL_TRANSACTION_ID_NOT_FOUND_RETRYABLE)
+    );
+  }
+}
+
+/**
+ * Subscription extension errors (4030004-4030007).
+ */
+export class AppStoreSubscriptionExtensionError extends Schema.TaggedErrorClass<AppStoreSubscriptionExtensionError>(
+  "AppStoreSubscriptionExtensionError",
+)("AppStoreSubscriptionExtensionError", {
+  httpStatusCode: Schema.Number,
+  apiError: Schema.Option(Schema.Number),
+  errorMessage: Schema.Option(Schema.String),
+}) {}
+
+/**
+ * Messaging errors (4030014-4030019).
+ */
+export class AppStoreMessagingError extends Schema.TaggedErrorClass<AppStoreMessagingError>(
+  "AppStoreMessagingError",
+)("AppStoreMessagingError", {
+  httpStatusCode: Schema.Number,
+  apiError: Schema.Option(Schema.Number),
+  errorMessage: Schema.Option(Schema.String),
+}) {}
+
+/**
+ * Conflict errors (4090xxx) - resource already exists.
+ */
+export class AppStoreConflictError extends Schema.TaggedErrorClass<AppStoreConflictError>(
+  "AppStoreConflictError",
+)("AppStoreConflictError", {
+  httpStatusCode: Schema.Number,
+  apiError: Schema.Option(Schema.Number),
+  errorMessage: Schema.Option(Schema.String),
+}) {}
+
+/**
+ * Unauthorized (HTTP 401). Returned by Apple when the bearer token is missing,
+ * malformed, or signed with a key that is not authorised for the bundle/issuer.
+ * Apple does not assign a specific `errorCode` for this case, so we key off the
+ * HTTP status alone.
+ */
+export class AppStoreUnauthorizedError extends Schema.TaggedErrorClass<AppStoreUnauthorizedError>(
+  "AppStoreUnauthorizedError",
+)("AppStoreUnauthorizedError", {
+  httpStatusCode: Schema.Number,
+  errorMessage: Schema.Option(Schema.String),
+}) {}
+
+/**
+ * Rate limit exceeded (4290000).
+ */
+export class AppStoreRateLimitError extends Schema.TaggedErrorClass<AppStoreRateLimitError>(
+  "AppStoreRateLimitError",
+)("AppStoreRateLimitError", {
+  httpStatusCode: Schema.Number,
+  errorMessage: Schema.Option(Schema.String),
+}) {}
+
+/**
+ * Internal server errors (5000xxx).
+ */
+export class AppStoreInternalError extends Schema.TaggedErrorClass<AppStoreInternalError>(
+  "AppStoreInternalError",
+)("AppStoreInternalError", {
+  httpStatusCode: Schema.Number,
+  apiError: Schema.Option(Schema.Number),
+  errorMessage: Schema.Option(Schema.String),
+}) {
+  get isRetryable(): boolean {
+    return Option.contains(this.apiError, APIErrorCode.GENERAL_INTERNAL_RETRYABLE);
+  }
+}
+
+/**
+ * Union type for all App Store API errors.
+ */
+export type AppStoreApiError =
+  | AppStoreValidationError
+  | AppStoreSubscriptionExtensionError
+  | AppStoreMessagingError
+  | AppStoreNotFoundError
+  | AppStoreConflictError
+  | AppStoreUnauthorizedError
+  | AppStoreRateLimitError
+  | AppStoreInternalError;
+
+/**
+ * Factory function to create the appropriate API error type based on error code.
+ */
+export function createAppStoreApiError(
+  httpStatusCode: number,
+  apiError: Option.Option<number>,
+  errorMessage: Option.Option<string>,
+): AppStoreApiError {
+  // Unauthorized (401) — Apple does not assign a dedicated errorCode for this.
+  if (httpStatusCode === 401) {
+    return new AppStoreUnauthorizedError({ httpStatusCode, errorMessage });
+  }
+
+  // Rate limit
+  if (Option.contains(apiError, APIErrorCode.RATE_LIMIT_EXCEEDED)) {
+    return new AppStoreRateLimitError({ httpStatusCode, errorMessage });
+  }
+
+  // Not found (404xxxx)
+  if (Option.exists(apiError, (code) => code >= 4040001 && code <= 4040019)) {
+    return new AppStoreNotFoundError({ httpStatusCode, apiError, errorMessage });
+  }
+
+  // Subscription extension (4030004-4030007)
+  if (Option.exists(apiError, (code) => code >= 4030004 && code <= 4030007)) {
+    return new AppStoreSubscriptionExtensionError({
+      httpStatusCode,
+      apiError,
+      errorMessage,
+    });
+  }
+
+  // Messaging (4030014-4030019)
+  if (Option.exists(apiError, (code) => code >= 4030014 && code <= 4030019)) {
+    return new AppStoreMessagingError({
+      httpStatusCode,
+      apiError,
+      errorMessage,
+    });
+  }
+
+  // Conflict (409xxxx)
+  if (Option.exists(apiError, (code) => code >= 4090000 && code <= 4090001)) {
+    return new AppStoreConflictError({ httpStatusCode, apiError, errorMessage });
+  }
+
+  // Internal server (5000xxx)
+  if (Option.exists(apiError, (code) => code >= 5000000 && code <= 5000001)) {
+    return new AppStoreInternalError({ httpStatusCode, apiError, errorMessage });
+  }
+
+  // Default: validation error (covers all 4000xxx codes and unknown)
+  return new AppStoreValidationError({ httpStatusCode, apiError, errorMessage });
+}
diff --git a/packages/app-store-server-sdk/src/errors/client-errors.ts b/packages/app-store-server-sdk/src/errors/client-errors.ts
new file mode 100644
index 000000000..5cbb5d108
--- /dev/null
+++ b/packages/app-store-server-sdk/src/errors/client-errors.ts
@@ -0,0 +1,48 @@
+import { Schema } from "effect";
+
+/**
+ * Error when JWT/bearer token creation fails.
+ */
+export class AppStoreJwtError extends Schema.TaggedErrorClass<AppStoreJwtError>("AppStoreJwtError")(
+  "AppStoreJwtError",
+  {
+    message: Schema.String,
+    cause: Schema.OptionFromOptionalKey(Schema.Unknown),
+  },
+) {}
+
+/**
+ * Error when HTTP request fails (network error).
+ */
+export class AppStoreNetworkError extends Schema.TaggedErrorClass<AppStoreNetworkError>(
+  "AppStoreNetworkError",
+)("AppStoreNetworkError", {
+  message: Schema.String,
+  cause: Schema.OptionFromOptionalKey(Schema.Unknown),
+}) {}
+
+/**
+ * Error when response body cannot be parsed as JSON.
+ */
+export class AppStoreParseError extends Schema.TaggedErrorClass<AppStoreParseError>(
+  "AppStoreParseError",
+)("AppStoreParseError", {
+  httpStatusCode: Schema.Number,
+  message: Schema.String,
+}) {}
+
+/**
+ * Error when response body doesn't match expected schema.
+ */
+export class AppStoreSchemaError extends Schema.TaggedErrorClass<AppStoreSchemaError>(
+  "AppStoreSchemaError",
+)("AppStoreSchemaError", {
+  httpStatusCode: Schema.Number,
+  message: Schema.String,
+}) {}
+
+export type AppStoreClientError =
+  | AppStoreJwtError
+  | AppStoreNetworkError
+  | AppStoreParseError
+  | AppStoreSchemaError;
diff --git a/packages/app-store-server-sdk/src/errors/index.ts b/packages/app-store-server-sdk/src/errors/index.ts
new file mode 100644
index 000000000..6517b6c8c
--- /dev/null
+++ b/packages/app-store-server-sdk/src/errors/index.ts
@@ -0,0 +1,36 @@
+export {
+  APIErrorCode,
+  type APIErrorCode as APIErrorCodeType,
+  APIErrorCodeSchema,
+  AppStoreValidationError,
+  AppStoreNotFoundError,
+  AppStoreSubscriptionExtensionError,
+  AppStoreMessagingError,
+  AppStoreConflictError,
+  AppStoreUnauthorizedError,
+  AppStoreRateLimitError,
+  AppStoreInternalError,
+  type AppStoreApiError,
+  createAppStoreApiError,
+} from "./api-errors.ts";
+
+export {
+  AppStoreJwtError,
+  AppStoreNetworkError,
+  AppStoreParseError,
+  AppStoreSchemaError,
+  type AppStoreClientError,
+} from "./client-errors.ts";
+
+export type AppStoreError =
+  | import("./api-errors.ts").AppStoreApiError
+  | import("./client-errors.ts").AppStoreClientError;
+
+export {
+  VerificationStatus,
+  type VerificationStatus as VerificationStatusType,
+  VerificationStatusSchema,
+  VerificationError,
+  JwtCreationError,
+  CertificateError,
+} from "./verification-errors.ts";
diff --git a/packages/app-store-server-sdk/src/errors/verification-errors.ts b/packages/app-store-server-sdk/src/errors/verification-errors.ts
new file mode 100644
index 000000000..b3a1a4992
--- /dev/null
+++ b/packages/app-store-server-sdk/src/errors/verification-errors.ts
@@ -0,0 +1,64 @@
+import { Schema } from "effect";
+
+/**
+ * Status codes for JWS verification operations.
+ */
+export const VerificationStatus = {
+  OK: "OK",
+  VERIFICATION_FAILURE: "VERIFICATION_FAILURE",
+  RETRYABLE_VERIFICATION_FAILURE: "RETRYABLE_VERIFICATION_FAILURE",
+  INVALID_APP_IDENTIFIER: "INVALID_APP_IDENTIFIER",
+  INVALID_ENVIRONMENT: "INVALID_ENVIRONMENT",
+  INVALID_CHAIN_LENGTH: "INVALID_CHAIN_LENGTH",
+  INVALID_CERTIFICATE: "INVALID_CERTIFICATE",
+  FAILURE: "FAILURE",
+} as const;
+
+export type VerificationStatus = (typeof VerificationStatus)[keyof typeof VerificationStatus];
+
+export const VerificationStatusSchema = Schema.Union([
+  Schema.Literal(VerificationStatus.OK),
+  Schema.Literal(VerificationStatus.VERIFICATION_FAILURE),
+  Schema.Literal(VerificationStatus.RETRYABLE_VERIFICATION_FAILURE),
+  Schema.Literal(VerificationStatus.INVALID_APP_IDENTIFIER),
+  Schema.Literal(VerificationStatus.INVALID_ENVIRONMENT),
+  Schema.Literal(VerificationStatus.INVALID_CHAIN_LENGTH),
+  Schema.Literal(VerificationStatus.INVALID_CERTIFICATE),
+  Schema.Literal(VerificationStatus.FAILURE),
+]);
+
+/**
+ * Error thrown when JWS verification fails.
+ */
+export class VerificationError extends Schema.TaggedErrorClass<VerificationError>(
+  "VerificationError",
+)("VerificationError", {
+  status: VerificationStatusSchema,
+  cause: Schema.OptionFromOptionalKey(Schema.Unknown),
+}) {
+  get isRetryable(): boolean {
+    return this.status === VerificationStatus.RETRYABLE_VERIFICATION_FAILURE;
+  }
+}
+
+/**
+ * Error thrown when JWT token creation fails.
+ */
+export class JwtCreationError extends Schema.TaggedErrorClass<JwtCreationError>("JwtCreationError")(
+  "JwtCreationError",
+  {
+    message: Schema.String,
+    cause: Schema.OptionFromOptionalKey(Schema.Unknown),
+  },
+) {}
+
+/**
+ * Error thrown when certificate operations fail.
+ */
+export class CertificateError extends Schema.TaggedErrorClass<CertificateError>("CertificateError")(
+  "CertificateError",
+  {
+    message: Schema.String,
+    cause: Schema.OptionFromOptionalKey(Schema.Unknown),
+  },
+) {}
diff --git a/packages/app-store-server-sdk/src/index.ts b/packages/app-store-server-sdk/src/index.ts
new file mode 100644
index 000000000..300b785f4
--- /dev/null
+++ b/packages/app-store-server-sdk/src/index.ts
@@ -0,0 +1,22 @@
+// Main package exports
+
+// Shared SDK handle
+export { AppStoreServerSdk } from "./sdk.ts";
+
+// Errors
+export * from "./errors/index.ts";
+
+// Schemas
+export * from "./schemas/index.ts";
+
+// Client
+export * from "./client/index.ts";
+
+// Verification
+export * from "./verification/index.ts";
+
+// Signatures
+export * from "./signatures/index.ts";
+
+// Receipts
+export * from "./receipts/index.ts";
diff --git a/packages/app-store-server-sdk/src/internal/bytes.ts b/packages/app-store-server-sdk/src/internal/bytes.ts
new file mode 100644
index 000000000..fa199ddb7
--- /dev/null
+++ b/packages/app-store-server-sdk/src/internal/bytes.ts
@@ -0,0 +1,100 @@
+/**
+ * WebCrypto-only byte/encoding helpers.
+ *
+ * This module deliberately avoids Node's `Buffer` so the SDK runs unchanged on
+ * Cloudflare Workers (workerd). All helpers use `atob`/`btoa`, `TextEncoder`/
+ * `TextDecoder`, and `Uint8Array`, which are available on both Node 18+ and
+ * workerd.
+ */
+
+/** Decode a standard (non-url) base64 string into raw bytes. */
+export const base64ToBytes = (base64: string): Uint8Array => {
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+};
+
+/** Encode raw bytes as a standard (non-url) base64 string. */
+export const bytesToBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i] as number);
+  }
+  return btoa(binary);
+};
+
+const HEX_ALPHABET = "0123456789abcdef";
+
+/** Encode raw bytes as a lowercase hex string. */
+export const bytesToHex = (bytes: Uint8Array): string => {
+  let hex = "";
+  for (let i = 0; i < bytes.length; i++) {
+    const byte = bytes[i] as number;
+    hex += HEX_ALPHABET.charAt(byte >> 4) + HEX_ALPHABET.charAt(byte & 0x0f);
+  }
+  return hex;
+};
+
+/** Decode a hex string into raw bytes. Trailing odd nibble is ignored. */
+export const hexToBytes = (hex: string): Uint8Array => {
+  const bytes = new Uint8Array(hex.length >> 1);
+  for (let i = 0; i < bytes.length; i++) {
+    bytes[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  }
+  return bytes;
+};
+
+/** UTF-8 encode a string to bytes. */
+export const utf8ToBytes = (text: string): Uint8Array => new TextEncoder().encode(text);
+
+/** UTF-8 decode bytes to a string. */
+export const bytesToUtf8 = (bytes: Uint8Array): string => new TextDecoder().decode(bytes);
+
+/**
+ * Convert a fixed-width IEEE-P1363 ECDSA signature (`r‖s`, the format emitted by
+ * `crypto.subtle.sign({name:"ECDSA"})`) into the ASN.1 DER `Ecdsa-Sig-Value`
+ * encoding (`SEQUENCE { INTEGER r, INTEGER s }`).
+ *
+ * Apple's legacy V1 promotional-offer signature is the DER form — the same bytes
+ * Node's `crypto.createSign(...).sign(key)` produced — so this conversion is
+ * required to keep the signature byte-compatible after the port to WebCrypto.
+ * Conflating the raw and DER encodings is the classic ECDSA-on-Workers bug.
+ */
+export const rawEcdsaSignatureToDer = (raw: Uint8Array): Uint8Array => {
+  const halfLength = raw.length / 2;
+  const toDerInteger = (bytes: Uint8Array): Uint8Array => {
+    // Strip leading zero bytes (but keep at least one byte).
+    let start = 0;
+    while (start < bytes.length - 1 && bytes[start] === 0) {
+      start++;
+    }
+    let trimmed = bytes.slice(start);
+    // DER INTEGERs are signed: prepend 0x00 when the high bit is set so the
+    // value isn't misread as negative.
+    if ((trimmed[0] as number) & 0x80) {
+      const padded = new Uint8Array(trimmed.length + 1);
+      padded.set(trimmed, 1);
+      trimmed = padded;
+    }
+    const encoded = new Uint8Array(trimmed.length + 2);
+    encoded[0] = 0x02; // INTEGER tag
+    encoded[1] = trimmed.length;
+    encoded.set(trimmed, 2);
+    return encoded;
+  };
+
+  const r = toDerInteger(raw.slice(0, halfLength));
+  const s = toDerInteger(raw.slice(halfLength));
+  const body = new Uint8Array(r.length + s.length);
+  body.set(r, 0);
+  body.set(s, r.length);
+
+  const der = new Uint8Array(body.length + 2);
+  der[0] = 0x30; // SEQUENCE tag
+  der[1] = body.length;
+  der.set(body, 2);
+  return der;
+};
diff --git a/packages/app-store-server-sdk/src/receipts/index.ts b/packages/app-store-server-sdk/src/receipts/index.ts
new file mode 100644
index 000000000..459643c54
--- /dev/null
+++ b/packages/app-store-server-sdk/src/receipts/index.ts
@@ -0,0 +1,322 @@
+import { Effect, Option, Schema } from "effect";
+import { base64ToBytes, bytesToHex, bytesToUtf8, hexToBytes } from "../internal/bytes.ts";
+
+/**
+ * Error thrown when receipt parsing fails.
+ */
+export class ReceiptParseError extends Schema.TaggedErrorClass<ReceiptParseError>(
+  "ReceiptParseError",
+)("ReceiptParseError", {
+  message: Schema.String,
+  cause: Schema.OptionFromOptionalKey(Schema.Unknown),
+}) {}
+
+// ASN.1 attribute type identifiers used inside Apple App Receipts.
+const IN_APP_TYPE_ID = 17;
+const TRANSACTION_IDENTIFIER_TYPE_ID = 1703;
+const ORIGINAL_TRANSACTION_IDENTIFIER_TYPE_ID = 1705;
+
+interface Asn1Parsed {
+  readonly tag: number;
+  readonly value: string; // hex
+  readonly end: number; // position after the value, in hex chars
+}
+
+/**
+ * Parses a single ASN.1 DER/BER element from the hex string at `offset`.
+ *
+ * Supports BER indefinite-length encoding (`0x80`): the contents are scanned
+ * recursively for the matching `0x00 0x00` end-of-contents marker, then the
+ * returned `end` skips past that marker. Apple's Xcode-generated receipts use
+ * indefinite-length encoding at several nesting levels, so this is required.
+ */
+const parseAsn1 = (hex: string, offset: number): Option.Option<Asn1Parsed> => {
+  if (offset + 4 > hex.length) return Option.none();
+
+  const tag = Number.parseInt(hex.slice(offset, offset + 2), 16);
+  let cursor = offset + 2;
+
+  const firstLenByte = Number.parseInt(hex.slice(cursor, cursor + 2), 16);
+  cursor += 2;
+
+  if (firstLenByte === 0x80) {
+    const contentStart = cursor;
+    let scan = cursor;
+    while (scan + 4 <= hex.length) {
+      if (hex.slice(scan, scan + 4) === "0000") {
+        return Option.some({ tag, value: hex.slice(contentStart, scan), end: scan + 4 });
+      }
+      const inner = parseAsn1(hex, scan);
+      if (Option.isNone(inner)) return Option.none();
+      scan = inner.value.end;
+    }
+    return Option.none();
+  }
+
+  let length: number;
+  if (firstLenByte <= 0x7f) {
+    length = firstLenByte;
+  } else {
+    const numOctets = firstLenByte & 0x7f;
+    if (cursor + numOctets * 2 > hex.length) return Option.none();
+    length = Number.parseInt(hex.slice(cursor, cursor + numOctets * 2), 16);
+    cursor += numOctets * 2;
+  }
+
+  const valueEnd = cursor + length * 2;
+  if (valueEnd > hex.length) return Option.none();
+  return Option.some({ tag, value: hex.slice(cursor, valueEnd), end: valueEnd });
+};
+
+/**
+ * Navigates to the value at a structural path within ASN.1 hex data.
+ *
+ * The path starts inside the top-level SEQUENCE/SET at `hex`; each element is
+ * the zero-based child index to descend into.
+ */
+const navigateToPath = (hex: string, path: readonly number[]): Option.Option<string> => {
+  const outer = parseAsn1(hex, 0);
+  if (Option.isNone(outer)) return Option.none();
+  let current = outer.value.value;
+  for (const targetIndex of path) {
+    let offset = 0;
+    let count = 0;
+    while (count < targetIndex) {
+      const parsed = parseAsn1(current, offset);
+      if (Option.isNone(parsed)) return Option.none();
+      offset = parsed.value.end;
+      count++;
+    }
+    const node = parseAsn1(current, offset);
+    if (Option.isNone(node)) return Option.none();
+    current = node.value.value;
+  }
+  return Option.some(current);
+};
+
+/**
+ * Reads the integer payload of an INTEGER element.
+ */
+const readInteger = (hex: string): number => Number.parseInt(hex, 16);
+
+/**
+ * Reads the UTF-8 string payload of an OCTET STRING wrapping a UTF8String.
+ */
+const readUtf8FromOctet = (octetValue: string): Option.Option<string> => {
+  const inner = parseAsn1(octetValue, 0);
+  if (Option.isNone(inner)) return Option.none();
+  return Option.some(bytesToUtf8(hexToBytes(inner.value.value)));
+};
+
+/**
+ * Iterates through a SET-of-SEQUENCE structure looking for the attribute
+ * with the given type id. Returns the OCTET STRING value (still hex-encoded).
+ */
+const findAttribute = (setHex: string, typeId: number): Option.Option<string> => {
+  let offset = 0;
+  while (offset < setHex.length) {
+    const seq = parseAsn1(setHex, offset);
+    if (Option.isNone(seq)) break;
+    const typeNode = parseAsn1(seq.value.value, 0);
+    if (Option.isNone(typeNode)) break;
+    if (readInteger(typeNode.value.value) === typeId) {
+      // attribute is { type, version, value }
+      const versionNode = parseAsn1(seq.value.value, typeNode.value.end);
+      if (Option.isNone(versionNode)) return Option.none();
+      const valueNode = parseAsn1(seq.value.value, versionNode.value.end);
+      if (Option.isNone(valueNode)) return Option.none();
+      return Option.some(valueNode.value.value);
+    }
+    offset = seq.value.end;
+  }
+  return Option.none();
+};
+
+/**
+ * Iterates through all attributes of the given type, applying the callback to
+ * each value. Returns the first present callback result.
+ */
+const forEachAttribute = <T>(
+  setHex: string,
+  typeId: number,
+  fn: (valueHex: string) => Option.Option<T>,
+): Option.Option<T> => {
+  let offset = 0;
+  while (offset < setHex.length) {
+    const seq = parseAsn1(setHex, offset);
+    if (Option.isNone(seq)) break;
+    const typeNode = parseAsn1(seq.value.value, 0);
+    if (Option.isSome(typeNode) && readInteger(typeNode.value.value) === typeId) {
+      const versionNode = parseAsn1(seq.value.value, typeNode.value.end);
+      if (Option.isSome(versionNode)) {
+        const valueNode = parseAsn1(seq.value.value, versionNode.value.end);
+        if (Option.isSome(valueNode)) {
+          const result = fn(valueNode.value.value);
+          if (Option.isSome(result)) return result;
+        }
+      }
+    }
+    offset = seq.value.end;
+  }
+  return Option.none();
+};
+
+/**
+ * Loads the inner ReceiptAttribute SET from a base64-encoded app receipt.
+ * Returns the hex-encoded concatenation of receipt attribute SEQUENCEs (the
+ * SET's value), ready to be iterated directly.
+ */
+const loadReceiptInfo = (appReceipt: string): Option.Option<string> => {
+  const hex = bytesToHex(base64ToBytes(appReceipt));
+  let receiptInfo = navigateToPath(hex, [1, 0, 2, 1, 0]);
+  if (Option.isNone(receiptInfo)) return Option.none();
+  let receiptInfoValue = receiptInfo.value;
+  // Xcode wraps the SET in an extra OCTET STRING — unwrap it.
+  if (receiptInfoValue.length > 2 && receiptInfoValue.startsWith("04")) {
+    const unwrapped = parseAsn1(receiptInfoValue, 0);
+    if (Option.isSome(unwrapped)) receiptInfoValue = unwrapped.value.value;
+  }
+  // Descend one more level to get the contents of the SET (its child sequences).
+  const setParsed = parseAsn1(receiptInfoValue, 0);
+  return Option.isSome(setParsed)
+    ? Option.some(setParsed.value.value)
+    : Option.some(receiptInfoValue);
+};
+
+/**
+ * Extracts a transaction ID from an encoded App Receipt. NO validation is
+ * performed; data returned should only be used to call the App Store Server
+ * API.
+ *
+ * @param appReceipt - The unmodified app receipt (base64 encoded)
+ * @returns A transaction id from the first in-app purchase, or `Option.none()` if none.
+ */
+export const extractTransactionIdFromAppReceipt = (
+  appReceipt: string,
+): Effect.Effect<Option.Option<string>, ReceiptParseError> =>
+  Effect.try({
+    try: () => {
+      const receiptInfo = loadReceiptInfo(appReceipt);
+      if (Option.isNone(receiptInfo)) return Option.none();
+
+      return forEachAttribute(receiptInfo.value, IN_APP_TYPE_ID, (inAppValue) => {
+        // The in-app value itself is an OCTET STRING wrapping another SET.
+        const parsedInnerSet = parseAsn1(inAppValue, 0);
+        const innerSet = Option.isSome(parsedInnerSet) ? parsedInnerSet.value.value : inAppValue;
+        const idValue = Option.orElse(findAttribute(innerSet, TRANSACTION_IDENTIFIER_TYPE_ID), () =>
+          findAttribute(innerSet, ORIGINAL_TRANSACTION_IDENTIFIER_TYPE_ID),
+        );
+        if (Option.isNone(idValue)) return Option.none();
+        return readUtf8FromOctet(idValue.value);
+      });
+    },
+    catch: (error) =>
+      new ReceiptParseError({
+        message: `Failed to parse app receipt: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Extracts a transaction ID from an encoded transactional receipt (legacy
+ * format). NO validation is performed.
+ *
+ * @param transactionReceipt - The unmodified transaction receipt (base64 encoded)
+ * @returns A transaction id, or `Option.none()` if no transactionId is found.
+ */
+export const extractTransactionIdFromTransactionReceipt = (
+  transactionReceipt: string,
+): Effect.Effect<Option.Option<string>, ReceiptParseError> =>
+  Effect.try({
+    try: () => {
+      const topLevel = bytesToUtf8(base64ToBytes(transactionReceipt));
+
+      const topLevelRegex = /"purchase-info"\s*=\s*"([a-zA-Z0-9+/=]+)";/;
+      const topLevelMatch = topLevel.match(topLevelRegex);
+      if (!topLevelMatch || topLevelMatch.length !== 2) return Option.none();
+
+      const purchaseInfoBase64 = topLevelMatch[1];
+      if (!purchaseInfoBase64) return Option.none();
+
+      const purchaseInfo = bytesToUtf8(base64ToBytes(purchaseInfoBase64));
+
+      const purchaseInfoRegex = /"transaction-id"\s*=\s*"([a-zA-Z0-9+/=]+)";/;
+      const purchaseInfoMatch = purchaseInfo.match(purchaseInfoRegex);
+      if (!purchaseInfoMatch || purchaseInfoMatch.length !== 2) return Option.none();
+
+      return Option.fromNullishOr(purchaseInfoMatch[1]);
+    },
+    catch: (error) =>
+      new ReceiptParseError({
+        message: `Failed to parse transaction receipt: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Extracts a transaction ID from a receipt of either supported format.
+ */
+export const extractTransactionIdFromReceipt = (
+  encodedReceipt: string,
+): Effect.Effect<Option.Option<string>, ReceiptParseError> =>
+  Effect.gen(function* () {
+    const fromApp = yield* extractTransactionIdFromAppReceipt(encodedReceipt).pipe(
+      Effect.catch(() => Effect.succeed(Option.none())),
+    );
+    if (Option.isSome(fromApp)) return fromApp;
+
+    const fromTxn = yield* extractTransactionIdFromTransactionReceipt(encodedReceipt).pipe(
+      Effect.catch(() => Effect.succeed(Option.none())),
+    );
+    return fromTxn;
+  });
+
+/**
+ * Extracts every in-app transaction ID found in an App Receipt. Returns the
+ * IDs in document order; if the receipt is a legacy transaction receipt, a
+ * single-element array is returned.
+ */
+export const extractAllTransactionIdsFromReceipt = (
+  encodedReceipt: string,
+): Effect.Effect<string[], ReceiptParseError> =>
+  Effect.gen(function* () {
+    const ids: string[] = [];
+    const receiptInfo = loadReceiptInfo(encodedReceipt);
+    if (Option.isSome(receiptInfo)) {
+      let offset = 0;
+      while (offset < receiptInfo.value.length) {
+        const seq = parseAsn1(receiptInfo.value, offset);
+        if (Option.isNone(seq)) break;
+        const typeNode = parseAsn1(seq.value.value, 0);
+        if (Option.isSome(typeNode) && readInteger(typeNode.value.value) === IN_APP_TYPE_ID) {
+          const versionNode = parseAsn1(seq.value.value, typeNode.value.end);
+          if (Option.isSome(versionNode)) {
+            const valueNode = parseAsn1(seq.value.value, versionNode.value.end);
+            if (Option.isSome(valueNode)) {
+              const parsedInnerSet = parseAsn1(valueNode.value.value, 0);
+              const innerSet = Option.isSome(parsedInnerSet)
+                ? parsedInnerSet.value.value
+                : valueNode.value.value;
+              const idValue = Option.orElse(
+                findAttribute(innerSet, TRANSACTION_IDENTIFIER_TYPE_ID),
+                () => findAttribute(innerSet, ORIGINAL_TRANSACTION_IDENTIFIER_TYPE_ID),
+              );
+              if (Option.isSome(idValue)) {
+                const idString = readUtf8FromOctet(idValue.value);
+                if (Option.isSome(idString)) ids.push(idString.value);
+              }
+            }
+          }
+        }
+        offset = seq.value.end;
+      }
+      if (ids.length > 0) return ids;
+    }
+
+    // Fallback to legacy transactional receipt format.
+    const legacy = yield* extractTransactionIdFromTransactionReceipt(encodedReceipt).pipe(
+      Effect.catch(() => Effect.succeed(Option.none())),
+    );
+    if (Option.isSome(legacy)) ids.push(legacy.value);
+    return ids;
+  });
diff --git a/packages/app-store-server-sdk/src/schemas/advanced-commerce.ts b/packages/app-store-server-sdk/src/schemas/advanced-commerce.ts
new file mode 100644
index 000000000..6d2ef1c4f
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/advanced-commerce.ts
@@ -0,0 +1,614 @@
+import { Schema } from "effect";
+import {
+  AdvancedCommerceEffectiveSchema,
+  AdvancedCommerceOfferPeriodSchema,
+  AdvancedCommerceOfferReasonSchema,
+  AdvancedCommercePeriodSchema,
+  AdvancedCommercePriceIncreaseInfoStatusSchema,
+  AdvancedCommerceReasonSchema,
+  AdvancedCommerceRefundReasonSchema,
+  AdvancedCommerceRefundTypeSchema,
+  AutoRenewStatusSchema,
+  RenewalBillingPlanTypeSchema,
+} from "./enums.ts";
+
+/**
+ * The display name and description of a subscription product.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/descriptors
+ */
+export const AdvancedCommerceDescriptorsSchema = Schema.Struct({
+  description: Schema.String,
+  displayName: Schema.String,
+});
+
+export type AdvancedCommerceDescriptors = Schema.Schema.Type<
+  typeof AdvancedCommerceDescriptorsSchema
+>;
+
+/**
+ * Discount offer for an auto-renewable subscription via Advanced Commerce API.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/offer
+ */
+export const AdvancedCommerceOfferSchema = Schema.Struct({
+  period: Schema.Union([AdvancedCommerceOfferPeriodSchema, Schema.String]),
+  periodCount: Schema.Number,
+  price: Schema.Number,
+  reason: Schema.Union([AdvancedCommerceOfferReasonSchema, Schema.String]),
+});
+
+export type AdvancedCommerceOffer = Schema.Schema.Type<typeof AdvancedCommerceOfferSchema>;
+
+/**
+ * Metadata included in every Advanced Commerce request.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/requestinfo
+ */
+export const AdvancedCommerceRequestInfoSchema = Schema.Struct({
+  appAccountToken: Schema.OptionFromOptionalKey(Schema.String),
+  consistencyToken: Schema.OptionFromOptionalKey(Schema.String),
+  requestReferenceId: Schema.String,
+});
+
+export type AdvancedCommerceRequestInfo = Schema.Schema.Type<
+  typeof AdvancedCommerceRequestInfoSchema
+>;
+
+/** Base shape for items identified by SKU. */
+export const AdvancedCommerceBaseItemSchema = Schema.Struct({
+  SKU: Schema.String,
+});
+
+/** Item with description and display name extension. */
+export const AdvancedCommerceItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+});
+
+/**
+ * One-time charge product details.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/onetimechargeitem
+ */
+export const AdvancedCommerceOneTimeChargeItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+  price: Schema.Number,
+});
+
+export type AdvancedCommerceOneTimeChargeItem = Schema.Schema.Type<
+  typeof AdvancedCommerceOneTimeChargeItemSchema
+>;
+
+/**
+ * Subscription item used in create requests.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptioncreateitem
+ */
+export const AdvancedCommerceSubscriptionCreateItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+  offer: Schema.OptionFromOptionalKey(AdvancedCommerceOfferSchema),
+  price: Schema.Number,
+});
+
+export type AdvancedCommerceSubscriptionCreateItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionCreateItemSchema
+>;
+
+/**
+ * Refund target item.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/refunditem
+ */
+export const AdvancedCommerceRequestRefundItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  refundReason: Schema.Union([AdvancedCommerceRefundReasonSchema, Schema.String]),
+  refundType: Schema.Union([AdvancedCommerceRefundTypeSchema, Schema.String]),
+  revoke: Schema.OptionFromOptionalKey(Schema.Boolean),
+  refundAmount: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type AdvancedCommerceRequestRefundItem = Schema.Schema.Type<
+  typeof AdvancedCommerceRequestRefundItemSchema
+>;
+
+/**
+ * Price-increase information for an Advanced Commerce subscription renewal.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/advancedcommercepriceincreaseinfo
+ */
+export const AdvancedCommercePriceIncreaseInfoSchema = Schema.Struct({
+  dependentSKUs: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+  price: Schema.OptionFromOptionalKey(Schema.Number),
+  status: Schema.OptionFromOptionalKey(
+    Schema.Union([AdvancedCommercePriceIncreaseInfoStatusSchema, Schema.String]),
+  ),
+});
+
+export type AdvancedCommercePriceIncreaseInfo = Schema.Schema.Type<
+  typeof AdvancedCommercePriceIncreaseInfoSchema
+>;
+
+/**
+ * Refund detail attached to a transaction item.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/advancedcommercerefund
+ */
+export const AdvancedCommerceRefundSchema = Schema.Struct({
+  refundAmount: Schema.OptionFromOptionalKey(Schema.Number),
+  refundDate: Schema.OptionFromOptionalKey(Schema.Number),
+  refundReason: Schema.OptionFromOptionalKey(
+    Schema.Union([AdvancedCommerceRefundReasonSchema, Schema.String]),
+  ),
+  refundType: Schema.OptionFromOptionalKey(
+    Schema.Union([AdvancedCommerceRefundTypeSchema, Schema.String]),
+  ),
+});
+
+export type AdvancedCommerceRefund = Schema.Schema.Type<typeof AdvancedCommerceRefundSchema>;
+
+/**
+ * Renewal item for Advanced Commerce renewals.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/advancedcommercerenewalitem
+ */
+export const AdvancedCommerceRenewalItemSchema = Schema.Struct({
+  SKU: Schema.OptionFromOptionalKey(Schema.String),
+  description: Schema.OptionFromOptionalKey(Schema.String),
+  displayName: Schema.OptionFromOptionalKey(Schema.String),
+  offer: Schema.OptionFromOptionalKey(AdvancedCommerceOfferSchema),
+  price: Schema.OptionFromOptionalKey(Schema.Number),
+  priceIncreaseInfo: Schema.OptionFromOptionalKey(AdvancedCommercePriceIncreaseInfoSchema),
+});
+
+export type AdvancedCommerceRenewalItem = Schema.Schema.Type<
+  typeof AdvancedCommerceRenewalItemSchema
+>;
+
+/**
+ * Transaction item for Advanced Commerce transactions.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/advancedcommercetransactionitem
+ */
+export const AdvancedCommerceTransactionItemSchema = Schema.Struct({
+  SKU: Schema.OptionFromOptionalKey(Schema.String),
+  description: Schema.OptionFromOptionalKey(Schema.String),
+  displayName: Schema.OptionFromOptionalKey(Schema.String),
+  offer: Schema.OptionFromOptionalKey(AdvancedCommerceOfferSchema),
+  price: Schema.OptionFromOptionalKey(Schema.Number),
+  refunds: Schema.OptionFromOptionalKey(Schema.Array(AdvancedCommerceRefundSchema)),
+  revocationDate: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type AdvancedCommerceTransactionItem = Schema.Schema.Type<
+  typeof AdvancedCommerceTransactionItemSchema
+>;
+
+/**
+ * Renewal info for Advanced Commerce subscriptions, embedded in JWSRenewalInfoDecodedPayload.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/advancedcommercerenewalinfo
+ */
+export const AdvancedCommerceRenewalInfoSchema = Schema.Struct({
+  consistencyToken: Schema.OptionFromOptionalKey(Schema.String),
+  descriptors: Schema.OptionFromOptionalKey(AdvancedCommerceDescriptorsSchema),
+  items: Schema.OptionFromOptionalKey(Schema.Array(AdvancedCommerceRenewalItemSchema)),
+  period: Schema.OptionFromOptionalKey(Schema.Union([AdvancedCommercePeriodSchema, Schema.String])),
+  requestReferenceId: Schema.OptionFromOptionalKey(Schema.String),
+  taxCode: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type AdvancedCommerceRenewalInfo = Schema.Schema.Type<
+  typeof AdvancedCommerceRenewalInfoSchema
+>;
+
+/**
+ * Transaction info for Advanced Commerce transactions, embedded in JWSTransactionDecodedPayload.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/advancedcommercetransactioninfo
+ */
+export const AdvancedCommerceTransactionInfoSchema = Schema.Struct({
+  descriptors: Schema.OptionFromOptionalKey(AdvancedCommerceDescriptorsSchema),
+  estimatedTax: Schema.OptionFromOptionalKey(Schema.Number),
+  items: Schema.OptionFromOptionalKey(Schema.Array(AdvancedCommerceTransactionItemSchema)),
+  period: Schema.OptionFromOptionalKey(Schema.Union([AdvancedCommercePeriodSchema, Schema.String])),
+  requestReferenceId: Schema.OptionFromOptionalKey(Schema.String),
+  taxCode: Schema.OptionFromOptionalKey(Schema.String),
+  taxExclusivePrice: Schema.OptionFromOptionalKey(Schema.Number),
+  taxRate: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type AdvancedCommerceTransactionInfo = Schema.Schema.Type<
+  typeof AdvancedCommerceTransactionInfoSchema
+>;
+
+/**
+ * Renewal commitment info attached to renewal payload.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/renewalcommitmentinfo
+ */
+export const RenewalCommitmentInfoSchema = Schema.Struct({
+  commitmentAutoRenewProductId: Schema.OptionFromOptionalKey(Schema.String),
+  commitmentAutoRenewStatus: Schema.OptionFromOptionalKey(
+    Schema.Union([AutoRenewStatusSchema, Schema.Number]),
+  ),
+  commitmentRenewalBillingPlanType: Schema.OptionFromOptionalKey(
+    Schema.Union([RenewalBillingPlanTypeSchema, Schema.String]),
+  ),
+  commitmentRenewalDate: Schema.OptionFromOptionalKey(Schema.Number),
+  commitmentRenewalPrice: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type RenewalCommitmentInfo = Schema.Schema.Type<typeof RenewalCommitmentInfoSchema>;
+
+/**
+ * Transaction-level commitment information.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/transactioncommitmentinfo
+ */
+export const TransactionCommitmentInfoSchema = Schema.Struct({
+  billingPeriodNumber: Schema.OptionFromOptionalKey(Schema.Number),
+  commitmentExpiresDate: Schema.OptionFromOptionalKey(Schema.Number),
+  commitmentPrice: Schema.OptionFromOptionalKey(Schema.Number),
+  totalBillingPeriods: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type TransactionCommitmentInfo = Schema.Schema.Type<typeof TransactionCommitmentInfoSchema>;
+
+// ===== Modify/Migrate item schemas =====
+
+/**
+ * Item added to a subscription via the modify endpoint.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmodifyadditem
+ */
+export const AdvancedCommerceSubscriptionModifyAddItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+  offer: Schema.OptionFromOptionalKey(AdvancedCommerceOfferSchema),
+  price: Schema.Number,
+});
+
+export type AdvancedCommerceSubscriptionModifyAddItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionModifyAddItemSchema
+>;
+
+/**
+ * Item swapped within a subscription via the modify endpoint.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmodifychangeitem
+ */
+export const AdvancedCommerceSubscriptionModifyChangeItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+  currentSKU: Schema.String,
+  offer: Schema.OptionFromOptionalKey(AdvancedCommerceOfferSchema),
+  price: Schema.Number,
+  effective: Schema.Union([AdvancedCommerceEffectiveSchema, Schema.String]),
+  reason: Schema.Union([AdvancedCommerceReasonSchema, Schema.String]),
+});
+
+export type AdvancedCommerceSubscriptionModifyChangeItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionModifyChangeItemSchema
+>;
+
+/**
+ * Item removed from a subscription via the modify endpoint.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmodifyremoveitem
+ */
+export const AdvancedCommerceSubscriptionModifyRemoveItemSchema = Schema.Struct({
+  SKU: Schema.String,
+});
+
+export type AdvancedCommerceSubscriptionModifyRemoveItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionModifyRemoveItemSchema
+>;
+
+/**
+ * Period change request for modifying a subscription.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmodifyperiodchange
+ */
+export const AdvancedCommerceSubscriptionModifyPeriodChangeSchema = Schema.Struct({
+  period: Schema.Union([AdvancedCommercePeriodSchema, Schema.String]),
+  effective: Schema.Union([AdvancedCommerceEffectiveSchema, Schema.String]),
+});
+
+export type AdvancedCommerceSubscriptionModifyPeriodChange = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionModifyPeriodChangeSchema
+>;
+
+/**
+ * Descriptors used when modifying subscription metadata.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmodifydescriptors
+ */
+export const AdvancedCommerceSubscriptionModifyDescriptorsSchema = Schema.Struct({
+  description: Schema.String,
+  displayName: Schema.String,
+  effective: Schema.Union([AdvancedCommerceEffectiveSchema, Schema.String]),
+});
+
+export type AdvancedCommerceSubscriptionModifyDescriptors = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionModifyDescriptorsSchema
+>;
+
+/**
+ * Descriptors used when changing subscription metadata.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionchangemetadatadescriptors
+ */
+export const AdvancedCommerceSubscriptionChangeMetadataDescriptorsSchema = Schema.Struct({
+  description: Schema.String,
+  displayName: Schema.String,
+  effective: Schema.Union([AdvancedCommerceEffectiveSchema, Schema.String]),
+});
+
+export type AdvancedCommerceSubscriptionChangeMetadataDescriptors = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionChangeMetadataDescriptorsSchema
+>;
+
+/**
+ * Descriptors used during a subscription migration.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmigratedescriptors
+ */
+export const AdvancedCommerceSubscriptionMigrateDescriptorsSchema = Schema.Struct({
+  description: Schema.String,
+  displayName: Schema.String,
+});
+
+export type AdvancedCommerceSubscriptionMigrateDescriptors = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionMigrateDescriptorsSchema
+>;
+
+/**
+ * Subscription metadata change item.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionchangemetadataitem
+ */
+export const AdvancedCommerceSubscriptionChangeMetadataItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+  currentSKU: Schema.String,
+  effective: Schema.Union([AdvancedCommerceEffectiveSchema, Schema.String]),
+});
+
+export type AdvancedCommerceSubscriptionChangeMetadataItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionChangeMetadataItemSchema
+>;
+
+/**
+ * Reactivate subscription item.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionreactivateitem
+ */
+export const AdvancedCommerceSubscriptionReactivateItemSchema = Schema.Struct({
+  SKU: Schema.String,
+});
+
+export type AdvancedCommerceSubscriptionReactivateItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionReactivateItemSchema
+>;
+
+/**
+ * Migrate item for subscription migrations.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmigrateitem
+ */
+export const AdvancedCommerceSubscriptionMigrateItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+});
+
+export type AdvancedCommerceSubscriptionMigrateItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionMigrateItemSchema
+>;
+
+/**
+ * Migrate renewal item.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionmigraterenewalitem
+ */
+export const AdvancedCommerceSubscriptionMigrateRenewalItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  description: Schema.String,
+  displayName: Schema.String,
+});
+
+export type AdvancedCommerceSubscriptionMigrateRenewalItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionMigrateRenewalItemSchema
+>;
+
+/**
+ * Price change item.
+ * @see https://developer.apple.com/documentation/advancedcommerceapi/subscriptionpricechangeitem
+ */
+export const AdvancedCommerceSubscriptionPriceChangeItemSchema = Schema.Struct({
+  SKU: Schema.String,
+  price: Schema.Number,
+  dependentSKUs: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+  effective: Schema.OptionFromOptionalKey(
+    Schema.Union([AdvancedCommerceEffectiveSchema, Schema.String]),
+  ),
+});
+
+export type AdvancedCommerceSubscriptionPriceChangeItem = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionPriceChangeItemSchema
+>;
+
+// ===== Requests =====
+
+const acRequestBase = {
+  requestInfo: AdvancedCommerceRequestInfoSchema,
+  storefront: Schema.OptionFromOptionalKey(Schema.String),
+};
+
+export const AdvancedCommerceOneTimeChargeCreateRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  operation: Schema.OptionFromOptionalKey(Schema.Literal("CREATE_ONE_TIME_CHARGE")),
+  version: Schema.OptionFromOptionalKey(Schema.Literal("1")),
+  currency: Schema.String,
+  item: AdvancedCommerceOneTimeChargeItemSchema,
+  taxCode: Schema.String,
+});
+
+export type AdvancedCommerceOneTimeChargeCreateRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceOneTimeChargeCreateRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionCreateRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  operation: Schema.OptionFromOptionalKey(Schema.Literal("CREATE_SUBSCRIPTION")),
+  version: Schema.OptionFromOptionalKey(Schema.Literal("1")),
+  currency: Schema.String,
+  descriptors: AdvancedCommerceDescriptorsSchema,
+  items: Schema.NonEmptyArray(AdvancedCommerceSubscriptionCreateItemSchema),
+  period: Schema.Union([AdvancedCommercePeriodSchema, Schema.String]),
+  previousTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+  taxCode: Schema.String,
+});
+
+export type AdvancedCommerceSubscriptionCreateRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionCreateRequestSchema
+>;
+
+export const AdvancedCommerceRequestRefundRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  items: Schema.NonEmptyArray(AdvancedCommerceRequestRefundItemSchema),
+  refundRiskingPreference: Schema.OptionFromOptionalKey(Schema.Boolean),
+  currency: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type AdvancedCommerceRequestRefundRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceRequestRefundRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionCancelRequestSchema = Schema.Struct({
+  ...acRequestBase,
+});
+
+export type AdvancedCommerceSubscriptionCancelRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionCancelRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionRevokeRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  refundRiskingPreference: Schema.OptionFromOptionalKey(Schema.Boolean),
+  refundReason: Schema.OptionFromOptionalKey(
+    Schema.Union([AdvancedCommerceRefundReasonSchema, Schema.String]),
+  ),
+  refundType: Schema.OptionFromOptionalKey(
+    Schema.Union([AdvancedCommerceRefundTypeSchema, Schema.String]),
+  ),
+});
+
+export type AdvancedCommerceSubscriptionRevokeRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionRevokeRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionPriceChangeRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  items: Schema.NonEmptyArray(AdvancedCommerceSubscriptionPriceChangeItemSchema),
+  currency: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type AdvancedCommerceSubscriptionPriceChangeRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionPriceChangeRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionChangeMetadataRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  items: Schema.OptionFromOptionalKey(
+    Schema.Array(AdvancedCommerceSubscriptionChangeMetadataItemSchema),
+  ),
+  descriptors: Schema.OptionFromOptionalKey(
+    AdvancedCommerceSubscriptionChangeMetadataDescriptorsSchema,
+  ),
+});
+
+export type AdvancedCommerceSubscriptionChangeMetadataRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionChangeMetadataRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionMigrateRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  descriptors: AdvancedCommerceSubscriptionMigrateDescriptorsSchema,
+  items: Schema.NonEmptyArray(AdvancedCommerceSubscriptionMigrateItemSchema),
+  taxCode: Schema.String,
+  targetProductId: Schema.String,
+  retainBillingCycle: Schema.OptionFromOptionalKey(Schema.Boolean),
+});
+
+export type AdvancedCommerceSubscriptionMigrateRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionMigrateRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionModifyInAppRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  operation: Schema.OptionFromOptionalKey(Schema.Literal("MODIFY_SUBSCRIPTION")),
+  version: Schema.OptionFromOptionalKey(Schema.Literal("1")),
+  currency: Schema.String,
+  descriptors: Schema.OptionFromOptionalKey(AdvancedCommerceSubscriptionModifyDescriptorsSchema),
+  taxCode: Schema.String,
+  transactionId: Schema.String,
+  retainBillingCycle: Schema.OptionFromOptionalKey(Schema.Boolean),
+  addItems: Schema.OptionFromOptionalKey(
+    Schema.Array(AdvancedCommerceSubscriptionModifyAddItemSchema),
+  ),
+  changeItems: Schema.OptionFromOptionalKey(
+    Schema.Array(AdvancedCommerceSubscriptionModifyChangeItemSchema),
+  ),
+  removeItems: Schema.OptionFromOptionalKey(
+    Schema.Array(AdvancedCommerceSubscriptionModifyRemoveItemSchema),
+  ),
+  periodChange: Schema.OptionFromOptionalKey(AdvancedCommerceSubscriptionModifyPeriodChangeSchema),
+});
+
+export type AdvancedCommerceSubscriptionModifyInAppRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionModifyInAppRequestSchema
+>;
+
+export const AdvancedCommerceSubscriptionReactivateInAppRequestSchema = Schema.Struct({
+  ...acRequestBase,
+  operation: Schema.OptionFromOptionalKey(Schema.Literal("REACTIVATE_SUBSCRIPTION")),
+  version: Schema.OptionFromOptionalKey(Schema.Literal("1")),
+  items: Schema.NonEmptyArray(AdvancedCommerceSubscriptionReactivateItemSchema),
+  transactionId: Schema.String,
+});
+
+export type AdvancedCommerceSubscriptionReactivateInAppRequest = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionReactivateInAppRequestSchema
+>;
+
+// ===== Responses =====
+
+const acResponseFields = {
+  signedRenewalInfo: Schema.OptionFromOptionalKey(Schema.String),
+  signedTransactionInfo: Schema.OptionFromOptionalKey(Schema.String),
+};
+
+export const AdvancedCommerceRequestRefundResponseSchema = Schema.Struct({ ...acResponseFields });
+export type AdvancedCommerceRequestRefundResponse = Schema.Schema.Type<
+  typeof AdvancedCommerceRequestRefundResponseSchema
+>;
+
+export const AdvancedCommerceSubscriptionCancelResponseSchema = Schema.Struct({
+  ...acResponseFields,
+});
+export type AdvancedCommerceSubscriptionCancelResponse = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionCancelResponseSchema
+>;
+
+export const AdvancedCommerceSubscriptionRevokeResponseSchema = Schema.Struct({
+  ...acResponseFields,
+});
+export type AdvancedCommerceSubscriptionRevokeResponse = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionRevokeResponseSchema
+>;
+
+export const AdvancedCommerceSubscriptionPriceChangeResponseSchema = Schema.Struct({
+  ...acResponseFields,
+});
+export type AdvancedCommerceSubscriptionPriceChangeResponse = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionPriceChangeResponseSchema
+>;
+
+export const AdvancedCommerceSubscriptionChangeMetadataResponseSchema = Schema.Struct({
+  ...acResponseFields,
+});
+export type AdvancedCommerceSubscriptionChangeMetadataResponse = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionChangeMetadataResponseSchema
+>;
+
+export const AdvancedCommerceSubscriptionMigrateResponseSchema = Schema.Struct({
+  ...acResponseFields,
+});
+export type AdvancedCommerceSubscriptionMigrateResponse = Schema.Schema.Type<
+  typeof AdvancedCommerceSubscriptionMigrateResponseSchema
+>;
diff --git a/packages/app-store-server-sdk/src/schemas/app-transaction.ts b/packages/app-store-server-sdk/src/schemas/app-transaction.ts
new file mode 100644
index 000000000..089cdbf1d
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/app-transaction.ts
@@ -0,0 +1,56 @@
+import { Schema } from "effect";
+import { EnvironmentSchema, PurchasePlatformSchema } from "./enums.ts";
+
+/**
+ * Decoded payload of a signed App Transaction.
+ * @see https://developer.apple.com/documentation/storekit/apptransaction
+ */
+export const AppTransactionSchema = Schema.Struct({
+  /** The environment in which the transaction was generated. */
+  receiptType: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** The unique identifier the App Store uses to identify the app. */
+  appAppleId: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The bundle identifier of the app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The version of the app. */
+  applicationVersion: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The version external identifier of the app. */
+  versionExternalIdentifier: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The date that the App Store signed the JWS app transaction (Unix timestamp in ms). */
+  receiptCreationDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The date the customer originally purchased the app from the App Store. */
+  originalPurchaseDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The version of the app the user originally purchased. */
+  originalApplicationVersion: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Base64 device verification value. */
+  deviceVerification: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** UUID used to compute the device verification value. */
+  deviceVerificationNonce: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The date the customer placed an order for the app pre-release. */
+  preorderDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The unique identifier of the app download transaction. */
+  appTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Platform on which the customer originally purchased the app. */
+  originalPlatform: Schema.OptionFromOptionalKey(
+    Schema.Union([PurchasePlatformSchema, Schema.String]),
+  ),
+});
+
+export type AppTransaction = Schema.Schema.Type<typeof AppTransactionSchema>;
+
+/**
+ * Decode an AppTransaction payload from an unknown value.
+ */
+export const decodeAppTransaction = Schema.decodeUnknownEffect(AppTransactionSchema);
diff --git a/packages/app-store-server-sdk/src/schemas/enums.ts b/packages/app-store-server-sdk/src/schemas/enums.ts
new file mode 100644
index 000000000..33fd454b3
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/enums.ts
@@ -0,0 +1,795 @@
+import { Schema } from "effect";
+
+// ===== Environment =====
+export const Environment = {
+  SANDBOX: "Sandbox",
+  PRODUCTION: "Production",
+  XCODE: "Xcode",
+  LOCAL_TESTING: "LocalTesting",
+} as const;
+
+export type Environment = (typeof Environment)[keyof typeof Environment];
+
+export const EnvironmentSchema = Schema.Union([
+  Schema.Literal(Environment.SANDBOX),
+  Schema.Literal(Environment.PRODUCTION),
+  Schema.Literal(Environment.XCODE),
+  Schema.Literal(Environment.LOCAL_TESTING),
+]);
+
+// ===== Status (subscription status) =====
+export const Status = {
+  ACTIVE: 1,
+  EXPIRED: 2,
+  BILLING_RETRY: 3,
+  BILLING_GRACE_PERIOD: 4,
+  REVOKED: 5,
+} as const;
+
+export type Status = (typeof Status)[keyof typeof Status];
+
+export const StatusSchema = Schema.Union([
+  Schema.Literal(Status.ACTIVE),
+  Schema.Literal(Status.EXPIRED),
+  Schema.Literal(Status.BILLING_RETRY),
+  Schema.Literal(Status.BILLING_GRACE_PERIOD),
+  Schema.Literal(Status.REVOKED),
+]);
+
+// ===== Type (product type) =====
+export const Type = {
+  AUTO_RENEWABLE_SUBSCRIPTION: "Auto-Renewable Subscription",
+  NON_CONSUMABLE: "Non-Consumable",
+  CONSUMABLE: "Consumable",
+  NON_RENEWING_SUBSCRIPTION: "Non-Renewing Subscription",
+} as const;
+
+export type Type = (typeof Type)[keyof typeof Type];
+
+export const TypeSchema = Schema.Union([
+  Schema.Literal(Type.AUTO_RENEWABLE_SUBSCRIPTION),
+  Schema.Literal(Type.NON_CONSUMABLE),
+  Schema.Literal(Type.CONSUMABLE),
+  Schema.Literal(Type.NON_RENEWING_SUBSCRIPTION),
+]);
+
+// ===== ProductType (for transaction history requests) =====
+export const ProductType = {
+  AUTO_RENEWABLE: "AUTO_RENEWABLE",
+  NON_RENEWABLE: "NON_RENEWABLE",
+  CONSUMABLE: "CONSUMABLE",
+  NON_CONSUMABLE: "NON_CONSUMABLE",
+} as const;
+
+export type ProductType = (typeof ProductType)[keyof typeof ProductType];
+
+export const ProductTypeSchema = Schema.Union([
+  Schema.Literal(ProductType.AUTO_RENEWABLE),
+  Schema.Literal(ProductType.NON_RENEWABLE),
+  Schema.Literal(ProductType.CONSUMABLE),
+  Schema.Literal(ProductType.NON_CONSUMABLE),
+]);
+
+// ===== Order (sort order) =====
+export const Order = {
+  ASCENDING: "ASCENDING",
+  DESCENDING: "DESCENDING",
+} as const;
+
+export type Order = (typeof Order)[keyof typeof Order];
+
+export const OrderSchema = Schema.Union([
+  Schema.Literal(Order.ASCENDING),
+  Schema.Literal(Order.DESCENDING),
+]);
+
+// ===== NotificationTypeV2 =====
+export const NotificationTypeV2 = {
+  SUBSCRIBED: "SUBSCRIBED",
+  DID_CHANGE_RENEWAL_PREF: "DID_CHANGE_RENEWAL_PREF",
+  DID_CHANGE_RENEWAL_STATUS: "DID_CHANGE_RENEWAL_STATUS",
+  OFFER_REDEEMED: "OFFER_REDEEMED",
+  DID_RENEW: "DID_RENEW",
+  EXPIRED: "EXPIRED",
+  DID_FAIL_TO_RENEW: "DID_FAIL_TO_RENEW",
+  GRACE_PERIOD_EXPIRED: "GRACE_PERIOD_EXPIRED",
+  PRICE_INCREASE: "PRICE_INCREASE",
+  REFUND: "REFUND",
+  REFUND_DECLINED: "REFUND_DECLINED",
+  CONSUMPTION_REQUEST: "CONSUMPTION_REQUEST",
+  RENEWAL_EXTENDED: "RENEWAL_EXTENDED",
+  REVOKE: "REVOKE",
+  TEST: "TEST",
+  RENEWAL_EXTENSION: "RENEWAL_EXTENSION",
+  REFUND_REVERSED: "REFUND_REVERSED",
+  EXTERNAL_PURCHASE_TOKEN: "EXTERNAL_PURCHASE_TOKEN",
+  ONE_TIME_CHARGE: "ONE_TIME_CHARGE",
+  RESCIND_CONSENT: "RESCIND_CONSENT",
+} as const;
+
+export type NotificationTypeV2 = (typeof NotificationTypeV2)[keyof typeof NotificationTypeV2];
+
+export const NotificationTypeV2Schema = Schema.Union(
+  Object.values(NotificationTypeV2).map((v) => Schema.Literal(v)),
+);
+
+// ===== Subtype =====
+export const Subtype = {
+  INITIAL_BUY: "INITIAL_BUY",
+  RESUBSCRIBE: "RESUBSCRIBE",
+  DOWNGRADE: "DOWNGRADE",
+  UPGRADE: "UPGRADE",
+  AUTO_RENEW_ENABLED: "AUTO_RENEW_ENABLED",
+  AUTO_RENEW_DISABLED: "AUTO_RENEW_DISABLED",
+  VOLUNTARY: "VOLUNTARY",
+  BILLING_RETRY: "BILLING_RETRY",
+  PRICE_INCREASE: "PRICE_INCREASE",
+  GRACE_PERIOD: "GRACE_PERIOD",
+  PENDING: "PENDING",
+  ACCEPTED: "ACCEPTED",
+  BILLING_RECOVERY: "BILLING_RECOVERY",
+  PRODUCT_NOT_FOR_SALE: "PRODUCT_NOT_FOR_SALE",
+  SUMMARY: "SUMMARY",
+  FAILURE: "FAILURE",
+  UNREPORTED: "UNREPORTED",
+} as const;
+
+export type Subtype = (typeof Subtype)[keyof typeof Subtype];
+
+export const SubtypeSchema = Schema.Union(Object.values(Subtype).map((v) => Schema.Literal(v)));
+
+// ===== OfferType =====
+export const OfferType = {
+  INTRODUCTORY_OFFER: 1,
+  PROMOTIONAL_OFFER: 2,
+  OFFER_CODE: 3,
+  WIN_BACK_OFFER: 4,
+} as const;
+
+export type OfferType = (typeof OfferType)[keyof typeof OfferType];
+
+export const OfferTypeSchema = Schema.Union([
+  Schema.Literal(OfferType.INTRODUCTORY_OFFER),
+  Schema.Literal(OfferType.PROMOTIONAL_OFFER),
+  Schema.Literal(OfferType.OFFER_CODE),
+  Schema.Literal(OfferType.WIN_BACK_OFFER),
+]);
+
+// ===== OfferDiscountType =====
+export const OfferDiscountType = {
+  FREE_TRIAL: "FREE_TRIAL",
+  PAY_AS_YOU_GO: "PAY_AS_YOU_GO",
+  PAY_UP_FRONT: "PAY_UP_FRONT",
+  ONE_TIME: "ONE_TIME",
+} as const;
+
+export type OfferDiscountType = (typeof OfferDiscountType)[keyof typeof OfferDiscountType];
+
+export const OfferDiscountTypeSchema = Schema.Union([
+  Schema.Literal(OfferDiscountType.FREE_TRIAL),
+  Schema.Literal(OfferDiscountType.PAY_AS_YOU_GO),
+  Schema.Literal(OfferDiscountType.PAY_UP_FRONT),
+  Schema.Literal(OfferDiscountType.ONE_TIME),
+]);
+
+// ===== AutoRenewStatus =====
+export const AutoRenewStatus = {
+  OFF: 0,
+  ON: 1,
+} as const;
+
+export type AutoRenewStatus = (typeof AutoRenewStatus)[keyof typeof AutoRenewStatus];
+
+export const AutoRenewStatusSchema = Schema.Union([
+  Schema.Literal(AutoRenewStatus.OFF),
+  Schema.Literal(AutoRenewStatus.ON),
+]);
+
+// ===== ExpirationIntent =====
+export const ExpirationIntent = {
+  CUSTOMER_CANCELLED: 1,
+  BILLING_ERROR: 2,
+  CUSTOMER_DID_NOT_CONSENT_TO_PRICE_INCREASE: 3,
+  PRODUCT_NOT_AVAILABLE: 4,
+  OTHER: 5,
+} as const;
+
+export type ExpirationIntent = (typeof ExpirationIntent)[keyof typeof ExpirationIntent];
+
+export const ExpirationIntentSchema = Schema.Union([
+  Schema.Literal(ExpirationIntent.CUSTOMER_CANCELLED),
+  Schema.Literal(ExpirationIntent.BILLING_ERROR),
+  Schema.Literal(ExpirationIntent.CUSTOMER_DID_NOT_CONSENT_TO_PRICE_INCREASE),
+  Schema.Literal(ExpirationIntent.PRODUCT_NOT_AVAILABLE),
+  Schema.Literal(ExpirationIntent.OTHER),
+]);
+
+// ===== PriceIncreaseStatus =====
+export const PriceIncreaseStatus = {
+  CUSTOMER_HAS_NOT_RESPONDED: 0,
+  CUSTOMER_CONSENTED_OR_WAS_NOTIFIED_WITHOUT_NEEDING_CONSENT: 1,
+} as const;
+
+export type PriceIncreaseStatus = (typeof PriceIncreaseStatus)[keyof typeof PriceIncreaseStatus];
+
+export const PriceIncreaseStatusSchema = Schema.Union([
+  Schema.Literal(PriceIncreaseStatus.CUSTOMER_HAS_NOT_RESPONDED),
+  Schema.Literal(PriceIncreaseStatus.CUSTOMER_CONSENTED_OR_WAS_NOTIFIED_WITHOUT_NEEDING_CONSENT),
+]);
+
+// ===== TransactionReason =====
+export const TransactionReason = {
+  PURCHASE: "PURCHASE",
+  RENEWAL: "RENEWAL",
+} as const;
+
+export type TransactionReason = (typeof TransactionReason)[keyof typeof TransactionReason];
+
+export const TransactionReasonSchema = Schema.Union([
+  Schema.Literal(TransactionReason.PURCHASE),
+  Schema.Literal(TransactionReason.RENEWAL),
+]);
+
+// ===== RevocationReason =====
+export const RevocationReason = {
+  REFUNDED_DUE_TO_ISSUE: 1,
+  REFUNDED_FOR_OTHER_REASON: 0,
+} as const;
+
+export type RevocationReason = (typeof RevocationReason)[keyof typeof RevocationReason];
+
+export const RevocationReasonSchema = Schema.Union([
+  Schema.Literal(RevocationReason.REFUNDED_DUE_TO_ISSUE),
+  Schema.Literal(RevocationReason.REFUNDED_FOR_OTHER_REASON),
+]);
+
+// ===== RevocationType =====
+export const RevocationType = {
+  REFUND_FULL: "REFUND_FULL",
+  REFUND_PRORATED: "REFUND_PRORATED",
+  FAMILY_REVOKE: "FAMILY_REVOKE",
+} as const;
+
+export type RevocationType = (typeof RevocationType)[keyof typeof RevocationType];
+
+export const RevocationTypeSchema = Schema.Union([
+  Schema.Literal(RevocationType.REFUND_FULL),
+  Schema.Literal(RevocationType.REFUND_PRORATED),
+  Schema.Literal(RevocationType.FAMILY_REVOKE),
+]);
+
+// ===== InAppOwnershipType =====
+export const InAppOwnershipType = {
+  FAMILY_SHARED: "FAMILY_SHARED",
+  PURCHASED: "PURCHASED",
+} as const;
+
+export type InAppOwnershipType = (typeof InAppOwnershipType)[keyof typeof InAppOwnershipType];
+
+export const InAppOwnershipTypeSchema = Schema.Union([
+  Schema.Literal(InAppOwnershipType.FAMILY_SHARED),
+  Schema.Literal(InAppOwnershipType.PURCHASED),
+]);
+
+// ===== Platform (consumption) =====
+export const Platform = {
+  UNDECLARED: 0,
+  APPLE: 1,
+  NON_APPLE: 2,
+} as const;
+
+export type Platform = (typeof Platform)[keyof typeof Platform];
+
+export const PlatformSchema = Schema.Union([
+  Schema.Literal(Platform.UNDECLARED),
+  Schema.Literal(Platform.APPLE),
+  Schema.Literal(Platform.NON_APPLE),
+]);
+
+// ===== PurchasePlatform =====
+export const PurchasePlatform = {
+  IOS: "iOS",
+  MAC_OS: "macOS",
+  TV_OS: "tvOS",
+  VISION_OS: "visionOS",
+} as const;
+
+export type PurchasePlatform = (typeof PurchasePlatform)[keyof typeof PurchasePlatform];
+
+export const PurchasePlatformSchema = Schema.Union([
+  Schema.Literal(PurchasePlatform.IOS),
+  Schema.Literal(PurchasePlatform.MAC_OS),
+  Schema.Literal(PurchasePlatform.TV_OS),
+  Schema.Literal(PurchasePlatform.VISION_OS),
+]);
+
+// ===== AccountTenure =====
+export const AccountTenure = {
+  UNDECLARED: 0,
+  ZERO_TO_THREE_DAYS: 1,
+  THREE_DAYS_TO_TEN_DAYS: 2,
+  TEN_DAYS_TO_THIRTY_DAYS: 3,
+  THIRTY_DAYS_TO_NINETY_DAYS: 4,
+  NINETY_DAYS_TO_ONE_HUNDRED_EIGHTY_DAYS: 5,
+  ONE_HUNDRED_EIGHTY_DAYS_TO_THREE_HUNDRED_SIXTY_FIVE_DAYS: 6,
+  GREATER_THAN_THREE_HUNDRED_SIXTY_FIVE_DAYS: 7,
+} as const;
+
+export type AccountTenure = (typeof AccountTenure)[keyof typeof AccountTenure];
+
+export const AccountTenureSchema = Schema.Union(
+  Object.values(AccountTenure).map((v) => Schema.Literal(v)),
+);
+
+// ===== PlayTime =====
+export const PlayTime = {
+  UNDECLARED: 0,
+  ZERO_TO_FIVE_MINUTES: 1,
+  FIVE_TO_SIXTY_MINUTES: 2,
+  ONE_TO_SIX_HOURS: 3,
+  SIX_HOURS_TO_TWENTY_FOUR_HOURS: 4,
+  ONE_DAY_TO_FOUR_DAYS: 5,
+  FOUR_DAYS_TO_SIXTEEN_DAYS: 6,
+  OVER_SIXTEEN_DAYS: 7,
+} as const;
+
+export type PlayTime = (typeof PlayTime)[keyof typeof PlayTime];
+
+export const PlayTimeSchema = Schema.Union(Object.values(PlayTime).map((v) => Schema.Literal(v)));
+
+// ===== ConsumptionStatus =====
+export const ConsumptionStatus = {
+  UNDECLARED: 0,
+  NOT_CONSUMED: 1,
+  PARTIALLY_CONSUMED: 2,
+  FULLY_CONSUMED: 3,
+} as const;
+
+export type ConsumptionStatus = (typeof ConsumptionStatus)[keyof typeof ConsumptionStatus];
+
+export const ConsumptionStatusSchema = Schema.Union([
+  Schema.Literal(ConsumptionStatus.UNDECLARED),
+  Schema.Literal(ConsumptionStatus.NOT_CONSUMED),
+  Schema.Literal(ConsumptionStatus.PARTIALLY_CONSUMED),
+  Schema.Literal(ConsumptionStatus.FULLY_CONSUMED),
+]);
+
+// ===== DeliveryStatus (V2) =====
+export const DeliveryStatus = {
+  DELIVERED: "DELIVERED",
+  UNDELIVERED_QUALITY_ISSUE: "UNDELIVERED_QUALITY_ISSUE",
+  UNDELIVERED_WRONG_ITEM: "UNDELIVERED_WRONG_ITEM",
+  UNDELIVERED_SERVER_OUTAGE: "UNDELIVERED_SERVER_OUTAGE",
+  UNDELIVERED_OTHER: "UNDELIVERED_OTHER",
+} as const;
+
+export type DeliveryStatus = (typeof DeliveryStatus)[keyof typeof DeliveryStatus];
+
+export const DeliveryStatusSchema = Schema.Union([
+  Schema.Literal(DeliveryStatus.DELIVERED),
+  Schema.Literal(DeliveryStatus.UNDELIVERED_QUALITY_ISSUE),
+  Schema.Literal(DeliveryStatus.UNDELIVERED_WRONG_ITEM),
+  Schema.Literal(DeliveryStatus.UNDELIVERED_SERVER_OUTAGE),
+  Schema.Literal(DeliveryStatus.UNDELIVERED_OTHER),
+]);
+
+// ===== DeliveryStatusV1 (deprecated) =====
+export const DeliveryStatusV1 = {
+  DELIVERED_AND_WORKING_PROPERLY: 0,
+  DID_NOT_DELIVER_DUE_TO_QUALITY_ISSUE: 1,
+  DELIVERED_WRONG_ITEM: 2,
+  DID_NOT_DELIVER_DUE_TO_SERVER_OUTAGE: 3,
+  DID_NOT_DELIVER_DUE_TO_IN_GAME_CURRENCY_CHANGE: 4,
+  DID_NOT_DELIVER_FOR_OTHER_REASON: 5,
+} as const;
+
+export type DeliveryStatusV1 = (typeof DeliveryStatusV1)[keyof typeof DeliveryStatusV1];
+
+export const DeliveryStatusV1Schema = Schema.Union(
+  Object.values(DeliveryStatusV1).map((v) => Schema.Literal(v)),
+);
+
+// ===== RefundPreference (V2) =====
+export const RefundPreference = {
+  DECLINE: "DECLINE",
+  GRANT_FULL: "GRANT_FULL",
+  GRANT_PRORATED: "GRANT_PRORATED",
+} as const;
+
+export type RefundPreference = (typeof RefundPreference)[keyof typeof RefundPreference];
+
+export const RefundPreferenceSchema = Schema.Union([
+  Schema.Literal(RefundPreference.DECLINE),
+  Schema.Literal(RefundPreference.GRANT_FULL),
+  Schema.Literal(RefundPreference.GRANT_PRORATED),
+]);
+
+// ===== RefundPreferenceV1 (deprecated) =====
+export const RefundPreferenceV1 = {
+  UNDECLARED: 0,
+  PREFER_GRANT: 1,
+  PREFER_DECLINE: 2,
+  NO_PREFERENCE: 3,
+} as const;
+
+export type RefundPreferenceV1 = (typeof RefundPreferenceV1)[keyof typeof RefundPreferenceV1];
+
+export const RefundPreferenceV1Schema = Schema.Union([
+  Schema.Literal(RefundPreferenceV1.UNDECLARED),
+  Schema.Literal(RefundPreferenceV1.PREFER_GRANT),
+  Schema.Literal(RefundPreferenceV1.PREFER_DECLINE),
+  Schema.Literal(RefundPreferenceV1.NO_PREFERENCE),
+]);
+
+// ===== UserStatus =====
+export const UserStatus = {
+  UNDECLARED: 0,
+  ACTIVE: 1,
+  SUSPENDED: 2,
+  TERMINATED: 3,
+  LIMITED_ACCESS: 4,
+} as const;
+
+export type UserStatus = (typeof UserStatus)[keyof typeof UserStatus];
+
+export const UserStatusSchema = Schema.Union([
+  Schema.Literal(UserStatus.UNDECLARED),
+  Schema.Literal(UserStatus.ACTIVE),
+  Schema.Literal(UserStatus.SUSPENDED),
+  Schema.Literal(UserStatus.TERMINATED),
+  Schema.Literal(UserStatus.LIMITED_ACCESS),
+]);
+
+// ===== SendAttemptResult =====
+export const SendAttemptResult = {
+  SUCCESS: "SUCCESS",
+  TIMED_OUT: "TIMED_OUT",
+  TLS_ISSUE: "TLS_ISSUE",
+  CIRCULAR_REDIRECT: "CIRCULAR_REDIRECT",
+  NO_RESPONSE: "NO_RESPONSE",
+  SOCKET_ISSUE: "SOCKET_ISSUE",
+  UNSUPPORTED_CHARSET: "UNSUPPORTED_CHARSET",
+  INVALID_RESPONSE: "INVALID_RESPONSE",
+  PREMATURE_CLOSE: "PREMATURE_CLOSE",
+  UNSUCCESSFUL_HTTP_RESPONSE_CODE: "UNSUCCESSFUL_HTTP_RESPONSE_CODE",
+  OTHER: "OTHER",
+} as const;
+
+export type SendAttemptResult = (typeof SendAttemptResult)[keyof typeof SendAttemptResult];
+
+export const SendAttemptResultSchema = Schema.Union(
+  Object.values(SendAttemptResult).map((v) => Schema.Literal(v)),
+);
+
+// ===== OrderLookupStatus =====
+export const OrderLookupStatus = {
+  VALID: 0,
+  INVALID: 1,
+} as const;
+
+export type OrderLookupStatus = (typeof OrderLookupStatus)[keyof typeof OrderLookupStatus];
+
+export const OrderLookupStatusSchema = Schema.Union([
+  Schema.Literal(OrderLookupStatus.VALID),
+  Schema.Literal(OrderLookupStatus.INVALID),
+]);
+
+// ===== ExtendReasonCode =====
+export const ExtendReasonCode = {
+  UNDECLARED: 0,
+  CUSTOMER_SATISFACTION: 1,
+  OTHER: 2,
+  SERVICE_ISSUE_OR_OUTAGE: 3,
+} as const;
+
+export type ExtendReasonCode = (typeof ExtendReasonCode)[keyof typeof ExtendReasonCode];
+
+export const ExtendReasonCodeSchema = Schema.Union([
+  Schema.Literal(ExtendReasonCode.UNDECLARED),
+  Schema.Literal(ExtendReasonCode.CUSTOMER_SATISFACTION),
+  Schema.Literal(ExtendReasonCode.OTHER),
+  Schema.Literal(ExtendReasonCode.SERVICE_ISSUE_OR_OUTAGE),
+]);
+
+// ===== ImageState =====
+export const ImageState = {
+  PENDING_REVIEW: "PENDING_REVIEW",
+  APPROVED: "APPROVED",
+  REJECTED: "REJECTED",
+} as const;
+
+export type ImageState = (typeof ImageState)[keyof typeof ImageState];
+
+export const ImageStateSchema = Schema.Union([
+  Schema.Literal(ImageState.PENDING_REVIEW),
+  Schema.Literal(ImageState.APPROVED),
+  Schema.Literal(ImageState.REJECTED),
+]);
+
+// ===== MessageState =====
+export const MessageState = {
+  PENDING_REVIEW: "PENDING_REVIEW",
+  APPROVED: "APPROVED",
+  REJECTED: "REJECTED",
+} as const;
+
+export type MessageState = (typeof MessageState)[keyof typeof MessageState];
+
+export const MessageStateSchema = Schema.Union([
+  Schema.Literal(MessageState.PENDING_REVIEW),
+  Schema.Literal(MessageState.APPROVED),
+  Schema.Literal(MessageState.REJECTED),
+]);
+
+// ===== LifetimeDollarsPurchased =====
+export const LifetimeDollarsPurchased = {
+  UNDECLARED: 0,
+  ZERO_DOLLARS: 1,
+  ONE_CENT_TO_FORTY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 2,
+  FIFTY_DOLLARS_TO_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 3,
+  ONE_HUNDRED_DOLLARS_TO_FOUR_HUNDRED_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 4,
+  FIVE_HUNDRED_DOLLARS_TO_NINE_HUNDRED_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 5,
+  ONE_THOUSAND_DOLLARS_TO_ONE_THOUSAND_NINE_HUNDRED_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 6,
+  TWO_THOUSAND_DOLLARS_OR_GREATER: 7,
+} as const;
+
+export type LifetimeDollarsPurchased =
+  (typeof LifetimeDollarsPurchased)[keyof typeof LifetimeDollarsPurchased];
+
+export const LifetimeDollarsPurchasedSchema = Schema.Union(
+  Object.values(LifetimeDollarsPurchased).map((v) => Schema.Literal(v)),
+);
+
+// ===== LifetimeDollarsRefunded =====
+export const LifetimeDollarsRefunded = {
+  UNDECLARED: 0,
+  ZERO_DOLLARS: 1,
+  ONE_CENT_TO_FORTY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 2,
+  FIFTY_DOLLARS_TO_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 3,
+  ONE_HUNDRED_DOLLARS_TO_FOUR_HUNDRED_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 4,
+  FIVE_HUNDRED_DOLLARS_TO_NINE_HUNDRED_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 5,
+  ONE_THOUSAND_DOLLARS_TO_ONE_THOUSAND_NINE_HUNDRED_NINETY_NINE_DOLLARS_AND_NINETY_NINE_CENTS: 6,
+  TWO_THOUSAND_DOLLARS_OR_GREATER: 7,
+} as const;
+
+export type LifetimeDollarsRefunded =
+  (typeof LifetimeDollarsRefunded)[keyof typeof LifetimeDollarsRefunded];
+
+export const LifetimeDollarsRefundedSchema = Schema.Union(
+  Object.values(LifetimeDollarsRefunded).map((v) => Schema.Literal(v)),
+);
+
+// ===== ConsumptionRequestReason =====
+export const ConsumptionRequestReason = {
+  UNINTENDED_PURCHASE: "UNINTENDED_PURCHASE",
+  FULFILLMENT_ISSUE: "FULFILLMENT_ISSUE",
+  UNSATISFIED_WITH_PURCHASE: "UNSATISFIED_WITH_PURCHASE",
+  LEGAL: "LEGAL",
+  OTHER: "OTHER",
+} as const;
+
+export type ConsumptionRequestReason =
+  (typeof ConsumptionRequestReason)[keyof typeof ConsumptionRequestReason];
+
+export const ConsumptionRequestReasonSchema = Schema.Union([
+  Schema.Literal(ConsumptionRequestReason.UNINTENDED_PURCHASE),
+  Schema.Literal(ConsumptionRequestReason.FULFILLMENT_ISSUE),
+  Schema.Literal(ConsumptionRequestReason.UNSATISFIED_WITH_PURCHASE),
+  Schema.Literal(ConsumptionRequestReason.LEGAL),
+  Schema.Literal(ConsumptionRequestReason.OTHER),
+]);
+
+// ===== GetTransactionHistoryVersion =====
+export const GetTransactionHistoryVersion = {
+  /** @deprecated */
+  V1: "v1",
+  V2: "v2",
+} as const;
+
+export type GetTransactionHistoryVersion =
+  (typeof GetTransactionHistoryVersion)[keyof typeof GetTransactionHistoryVersion];
+
+export const GetTransactionHistoryVersionSchema = Schema.Union([
+  Schema.Literal(GetTransactionHistoryVersion.V1),
+  Schema.Literal(GetTransactionHistoryVersion.V2),
+]);
+
+// ===== ImageSize =====
+export const ImageSize = {
+  FULL_SIZE: "FULL_SIZE",
+} as const;
+
+export type ImageSize = (typeof ImageSize)[keyof typeof ImageSize];
+
+export const ImageSizeSchema = Schema.Union([Schema.Literal(ImageSize.FULL_SIZE)]);
+
+// ===== HeaderPosition =====
+export const HeaderPosition = {
+  ABOVE_IMAGE: "ABOVE_IMAGE",
+  BELOW_IMAGE: "BELOW_IMAGE",
+} as const;
+
+export type HeaderPosition = (typeof HeaderPosition)[keyof typeof HeaderPosition];
+
+export const HeaderPositionSchema = Schema.Union([
+  Schema.Literal(HeaderPosition.ABOVE_IMAGE),
+  Schema.Literal(HeaderPosition.BELOW_IMAGE),
+]);
+
+// ===== BillingPlanType =====
+export const BillingPlanType = {
+  BILLED_UPFRONT: "BILLED_UPFRONT",
+  MONTHLY: "MONTHLY",
+} as const;
+
+export type BillingPlanType = (typeof BillingPlanType)[keyof typeof BillingPlanType];
+
+export const BillingPlanTypeSchema = Schema.Union([
+  Schema.Literal(BillingPlanType.BILLED_UPFRONT),
+  Schema.Literal(BillingPlanType.MONTHLY),
+]);
+
+// ===== RenewalBillingPlanType =====
+export const RenewalBillingPlanType = {
+  BILLED_UPFRONT: "BILLED_UPFRONT",
+  MONTHLY: "MONTHLY",
+} as const;
+
+export type RenewalBillingPlanType =
+  (typeof RenewalBillingPlanType)[keyof typeof RenewalBillingPlanType];
+
+export const RenewalBillingPlanTypeSchema = Schema.Union([
+  Schema.Literal(RenewalBillingPlanType.BILLED_UPFRONT),
+  Schema.Literal(RenewalBillingPlanType.MONTHLY),
+]);
+
+// ===== PerformanceTestStatus =====
+export const PerformanceTestStatus = {
+  PENDING: "PENDING",
+  IN_PROGRESS: "IN_PROGRESS",
+  COMPLETED: "COMPLETED",
+} as const;
+
+export type PerformanceTestStatus =
+  (typeof PerformanceTestStatus)[keyof typeof PerformanceTestStatus];
+
+export const PerformanceTestStatusSchema = Schema.Union([
+  Schema.Literal(PerformanceTestStatus.PENDING),
+  Schema.Literal(PerformanceTestStatus.IN_PROGRESS),
+  Schema.Literal(PerformanceTestStatus.COMPLETED),
+]);
+
+// ===== PerformanceTestResult =====
+export const PerformanceTestResult = {
+  PASS: "PASS",
+  FAIL: "FAIL",
+} as const;
+
+export type PerformanceTestResult =
+  (typeof PerformanceTestResult)[keyof typeof PerformanceTestResult];
+
+export const PerformanceTestResultSchema = Schema.Union([
+  Schema.Literal(PerformanceTestResult.PASS),
+  Schema.Literal(PerformanceTestResult.FAIL),
+]);
+
+// ===== AdvancedCommercePeriod =====
+export const AdvancedCommercePeriod = {
+  P1W: "P1W",
+  P1M: "P1M",
+  P2M: "P2M",
+  P3M: "P3M",
+  P6M: "P6M",
+  P1Y: "P1Y",
+} as const;
+
+export type AdvancedCommercePeriod =
+  (typeof AdvancedCommercePeriod)[keyof typeof AdvancedCommercePeriod];
+
+export const AdvancedCommercePeriodSchema = Schema.Union(
+  Object.values(AdvancedCommercePeriod).map((v) => Schema.Literal(v)),
+);
+
+// ===== AdvancedCommerceOfferPeriod =====
+export const AdvancedCommerceOfferPeriod = {
+  P3D: "P3D",
+  P1W: "P1W",
+  P2W: "P2W",
+  P1M: "P1M",
+  P2M: "P2M",
+  P3M: "P3M",
+} as const;
+
+export type AdvancedCommerceOfferPeriod =
+  (typeof AdvancedCommerceOfferPeriod)[keyof typeof AdvancedCommerceOfferPeriod];
+
+export const AdvancedCommerceOfferPeriodSchema = Schema.Union(
+  Object.values(AdvancedCommerceOfferPeriod).map((v) => Schema.Literal(v)),
+);
+
+// ===== AdvancedCommerceOfferReason =====
+export const AdvancedCommerceOfferReason = {
+  ACQUISITION: "ACQUISITION",
+  WIN_BACK: "WIN_BACK",
+  RETENTION: "RETENTION",
+} as const;
+
+export type AdvancedCommerceOfferReason =
+  (typeof AdvancedCommerceOfferReason)[keyof typeof AdvancedCommerceOfferReason];
+
+export const AdvancedCommerceOfferReasonSchema = Schema.Union(
+  Object.values(AdvancedCommerceOfferReason).map((v) => Schema.Literal(v)),
+);
+
+// ===== AdvancedCommerceReason =====
+export const AdvancedCommerceReason = {
+  UPGRADE: "UPGRADE",
+  DOWNGRADE: "DOWNGRADE",
+  APPLY_OFFER: "APPLY_OFFER",
+} as const;
+
+export type AdvancedCommerceReason =
+  (typeof AdvancedCommerceReason)[keyof typeof AdvancedCommerceReason];
+
+export const AdvancedCommerceReasonSchema = Schema.Union(
+  Object.values(AdvancedCommerceReason).map((v) => Schema.Literal(v)),
+);
+
+// ===== AdvancedCommerceRefundReason =====
+export const AdvancedCommerceRefundReason = {
+  UNINTENDED_PURCHASE: "UNINTENDED_PURCHASE",
+  FULFILLMENT_ISSUE: "FULFILLMENT_ISSUE",
+  UNSATISFIED_WITH_PURCHASE: "UNSATISFIED_WITH_PURCHASE",
+  LEGAL: "LEGAL",
+  OTHER: "OTHER",
+  MODIFY_ITEMS_REFUND: "MODIFY_ITEMS_REFUND",
+  SIMULATE_REFUND_DECLINE: "SIMULATE_REFUND_DECLINE",
+} as const;
+
+export type AdvancedCommerceRefundReason =
+  (typeof AdvancedCommerceRefundReason)[keyof typeof AdvancedCommerceRefundReason];
+
+export const AdvancedCommerceRefundReasonSchema = Schema.Union(
+  Object.values(AdvancedCommerceRefundReason).map((v) => Schema.Literal(v)),
+);
+
+// ===== AdvancedCommerceRefundType =====
+export const AdvancedCommerceRefundType = {
+  FULL: "FULL",
+  PRORATED: "PRORATED",
+  CUSTOM: "CUSTOM",
+} as const;
+
+export type AdvancedCommerceRefundType =
+  (typeof AdvancedCommerceRefundType)[keyof typeof AdvancedCommerceRefundType];
+
+export const AdvancedCommerceRefundTypeSchema = Schema.Union(
+  Object.values(AdvancedCommerceRefundType).map((v) => Schema.Literal(v)),
+);
+
+// ===== AdvancedCommerceEffective =====
+export const AdvancedCommerceEffective = {
+  IMMEDIATELY: "IMMEDIATELY",
+  NEXT_BILL_CYCLE: "NEXT_BILL_CYCLE",
+} as const;
+
+export type AdvancedCommerceEffective =
+  (typeof AdvancedCommerceEffective)[keyof typeof AdvancedCommerceEffective];
+
+export const AdvancedCommerceEffectiveSchema = Schema.Union(
+  Object.values(AdvancedCommerceEffective).map((v) => Schema.Literal(v)),
+);
+
+// ===== AdvancedCommercePriceIncreaseInfoStatus =====
+export const AdvancedCommercePriceIncreaseInfoStatus = {
+  SCHEDULED: "SCHEDULED",
+  PENDING: "PENDING",
+  ACCEPTED: "ACCEPTED",
+} as const;
+
+export type AdvancedCommercePriceIncreaseInfoStatus =
+  (typeof AdvancedCommercePriceIncreaseInfoStatus)[keyof typeof AdvancedCommercePriceIncreaseInfoStatus];
+
+export const AdvancedCommercePriceIncreaseInfoStatusSchema = Schema.Union(
+  Object.values(AdvancedCommercePriceIncreaseInfoStatus).map((v) => Schema.Literal(v)),
+);
diff --git a/packages/app-store-server-sdk/src/schemas/helper-validation.ts b/packages/app-store-server-sdk/src/schemas/helper-validation.ts
new file mode 100644
index 000000000..b2dd77798
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/helper-validation.ts
@@ -0,0 +1,42 @@
+/**
+ * Field-length and shape constraints used by the Advanced Commerce API schemas.
+ * Mirrors the validators in Apple's reference Node library so the same inputs
+ * accepted upstream pass our schema validation.
+ */
+export const HelperValidationUtils = {
+  MAXIMUM_DESCRIPTION_LENGTH: 45 as const,
+  MAXIMUM_DISPLAY_NAME_LENGTH: 30 as const,
+  MAXIMUM_SKU_LENGTH: 128 as const,
+  MIN_PERIOD: 1 as const,
+  MAX_PERIOD: 12 as const,
+
+  validateDescription(description: unknown): boolean {
+    return (
+      typeof description === "string" &&
+      description.length <= HelperValidationUtils.MAXIMUM_DESCRIPTION_LENGTH
+    );
+  },
+
+  validateDisplayName(displayName: unknown): boolean {
+    return (
+      typeof displayName === "string" &&
+      displayName.length <= HelperValidationUtils.MAXIMUM_DISPLAY_NAME_LENGTH
+    );
+  },
+
+  validateSku(sku: unknown): boolean {
+    return typeof sku === "string" && sku.length <= HelperValidationUtils.MAXIMUM_SKU_LENGTH;
+  },
+
+  validatePeriodCount(periodCount: unknown): boolean {
+    return (
+      typeof periodCount === "number" &&
+      periodCount >= HelperValidationUtils.MIN_PERIOD &&
+      periodCount <= HelperValidationUtils.MAX_PERIOD
+    );
+  },
+
+  validateItems(list: unknown): boolean {
+    return Array.isArray(list) && list.length > 0 && list.every((item) => item != null);
+  },
+} as const;
diff --git a/packages/app-store-server-sdk/src/schemas/index.ts b/packages/app-store-server-sdk/src/schemas/index.ts
new file mode 100644
index 000000000..70bcd8dfe
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/index.ts
@@ -0,0 +1,53 @@
+// Enums
+export * from "./enums.ts";
+
+// Transaction schemas
+export {
+  JWSTransactionDecodedPayloadSchema,
+  type JWSTransactionDecodedPayload,
+  decodeJWSTransactionDecodedPayload,
+} from "./transactions.ts";
+
+// Renewal schemas
+export {
+  JWSRenewalInfoDecodedPayloadSchema,
+  type JWSRenewalInfoDecodedPayload,
+  decodeJWSRenewalInfoDecodedPayload,
+} from "./renewals.ts";
+
+// Notification schemas
+export {
+  DataSchema,
+  type Data,
+  SummarySchema,
+  type Summary,
+  ExternalPurchaseTokenSchema,
+  type ExternalPurchaseToken,
+  AppDataSchema,
+  type AppData,
+  ResponseBodyV2DecodedPayloadSchema,
+  type ResponseBodyV2DecodedPayload,
+  decodeResponseBodyV2DecodedPayload,
+  ResponseBodyV2Schema,
+  type ResponseBodyV2,
+} from "./notifications.ts";
+
+// App transaction
+export {
+  AppTransactionSchema,
+  type AppTransaction,
+  decodeAppTransaction,
+} from "./app-transaction.ts";
+
+// Realtime
+export * from "./realtime.ts";
+
+// Advanced Commerce
+export * from "./advanced-commerce.ts";
+
+// Validation helpers (used to validate Advanced Commerce request payloads)
+export * from "./helper-validation.ts";
+
+// Request and response schemas (to be added)
+export * from "./requests.ts";
+export * from "./responses.ts";
diff --git a/packages/app-store-server-sdk/src/schemas/notifications.ts b/packages/app-store-server-sdk/src/schemas/notifications.ts
new file mode 100644
index 000000000..213ef2ddc
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/notifications.ts
@@ -0,0 +1,171 @@
+import { Schema } from "effect";
+import {
+  ConsumptionRequestReasonSchema,
+  EnvironmentSchema,
+  NotificationTypeV2Schema,
+  StatusSchema,
+  SubtypeSchema,
+} from "./enums.ts";
+
+/**
+ * The app metadata and the signed renewal and transaction information.
+ * @see https://developer.apple.com/documentation/appstoreservernotifications/data
+ */
+export const DataSchema = Schema.Struct({
+  /** The server environment that the notification applies to. */
+  environment: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** The unique identifier of an app in the App Store. */
+  appAppleId: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The bundle identifier of an app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The version of the build that identifies an iteration of the bundle. */
+  bundleVersion: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Transaction information signed by the App Store, in JWS format. */
+  signedTransactionInfo: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Subscription renewal information signed by the App Store, in JWS format. */
+  signedRenewalInfo: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The status of an auto-renewable subscription. */
+  status: Schema.OptionFromOptionalKey(Schema.Union([StatusSchema, Schema.Number])),
+
+  /** The reason the customer requested the refund. */
+  consumptionRequestReason: Schema.OptionFromOptionalKey(
+    Schema.Union([ConsumptionRequestReasonSchema, Schema.String]),
+  ),
+});
+
+export type Data = Schema.Schema.Type<typeof DataSchema>;
+
+/**
+ * The payload data for a subscription-renewal-date extension notification.
+ * @see https://developer.apple.com/documentation/appstoreservernotifications/summary
+ */
+export const SummarySchema = Schema.Struct({
+  /** The server environment that the notification applies to. */
+  environment: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** The unique identifier of an app in the App Store. */
+  appAppleId: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The bundle identifier of an app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier for the product. */
+  productId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** A unique identifier to track each subscription-renewal-date extension request. */
+  requestIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** A list of storefront country codes to limit the storefronts for the extension. */
+  storefrontCountryCodes: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+
+  /** The count of subscriptions that successfully receive a renewal-date extension. */
+  succeededCount: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The count of subscriptions that fail to receive a renewal-date extension. */
+  failedCount: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type Summary = Schema.Schema.Type<typeof SummarySchema>;
+
+/**
+ * The payload data that contains an external purchase token.
+ * @see https://developer.apple.com/documentation/appstoreservernotifications/externalpurchasetoken
+ */
+export const ExternalPurchaseTokenSchema = Schema.Struct({
+  /** The field that uniquely identifies the external purchase token. */
+  externalPurchaseId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The Unix timestamp in milliseconds when the system created the token. */
+  tokenCreationDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The unique identifier of an app in the App Store. */
+  appAppleId: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The bundle identifier of an app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type ExternalPurchaseToken = Schema.Schema.Type<typeof ExternalPurchaseTokenSchema>;
+
+/**
+ * The object that contains the app metadata and signed app transaction information.
+ * @see https://developer.apple.com/documentation/appstoreservernotifications/appdata
+ */
+export const AppDataSchema = Schema.Struct({
+  /** The unique identifier of the app that the notification applies to. */
+  appAppleId: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The bundle identifier of the app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The server environment that the notification applies to. */
+  environment: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** App transaction information signed by the App Store, in JWS format. */
+  signedAppTransactionInfo: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type AppData = Schema.Schema.Type<typeof AppDataSchema>;
+
+/**
+ * A decoded payload containing the version 2 notification data.
+ * @see https://developer.apple.com/documentation/appstoreservernotifications/responsebodyv2decodedpayload
+ */
+export const ResponseBodyV2DecodedPayloadSchema = Schema.Struct({
+  /** The in-app purchase event for which the App Store sends this notification. */
+  notificationType: Schema.OptionFromOptionalKey(
+    Schema.Union([NotificationTypeV2Schema, Schema.String]),
+  ),
+
+  /** Additional information that identifies the notification event. */
+  subtype: Schema.OptionFromOptionalKey(Schema.Union([SubtypeSchema, Schema.String])),
+
+  /** A unique identifier for the notification. */
+  notificationUUID: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The object that contains the app metadata and signed renewal and transaction information. */
+  data: Schema.OptionFromOptionalKey(DataSchema),
+
+  /** A string that indicates the notification's version number. */
+  version: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The Unix timestamp in milliseconds that the App Store signed the JWS data. */
+  signedDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The summary data for subscription-renewal-date extension notifications. */
+  summary: Schema.OptionFromOptionalKey(SummarySchema),
+
+  /** The external purchase token data. */
+  externalPurchaseToken: Schema.OptionFromOptionalKey(ExternalPurchaseTokenSchema),
+
+  /** The app metadata and signed app transaction information (for RESCIND_CONSENT). */
+  appData: Schema.OptionFromOptionalKey(AppDataSchema),
+});
+
+export type ResponseBodyV2DecodedPayload = Schema.Schema.Type<
+  typeof ResponseBodyV2DecodedPayloadSchema
+>;
+
+/**
+ * Decode a ResponseBodyV2DecodedPayload from an unknown value.
+ */
+export const decodeResponseBodyV2DecodedPayload = Schema.decodeUnknownEffect(
+  ResponseBodyV2DecodedPayloadSchema,
+);
+
+/**
+ * The raw signed notification payload received from Apple.
+ * @see https://developer.apple.com/documentation/appstoreservernotifications/responsebodyv2
+ */
+export const ResponseBodyV2Schema = Schema.Struct({
+  /** A cryptographically signed payload, in JWS format. */
+  signedPayload: Schema.String,
+});
+
+export type ResponseBodyV2 = Schema.Schema.Type<typeof ResponseBodyV2Schema>;
diff --git a/packages/app-store-server-sdk/src/schemas/realtime.ts b/packages/app-store-server-sdk/src/schemas/realtime.ts
new file mode 100644
index 000000000..a786ef41a
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/realtime.ts
@@ -0,0 +1,137 @@
+import { Schema } from "effect";
+import { BillingPlanTypeSchema, EnvironmentSchema } from "./enums.ts";
+
+/**
+ * Decoded request body the App Store sends to your real-time retention message endpoint.
+ * @see https://developer.apple.com/documentation/retentionmessaging/decodedrealtimerequestbody
+ */
+export const DecodedRealtimeRequestBodySchema = Schema.Struct({
+  /** Original transaction identifier of the customer's subscription. */
+  originalTransactionId: Schema.String,
+
+  /** Unique identifier of the app in the App Store. */
+  appAppleId: Schema.Number,
+
+  /** Unique identifier of the auto-renewable subscription. */
+  productId: Schema.String,
+
+  /** Device's locale. */
+  userLocale: Schema.String,
+
+  /** UUID identifying the request. */
+  requestIdentifier: Schema.String,
+
+  /** Unix time (ms) when the App Store signed the JWS. */
+  signedDate: Schema.Number,
+
+  /** Server environment. */
+  environment: Schema.Union([EnvironmentSchema, Schema.String]),
+});
+
+export type DecodedRealtimeRequestBody = Schema.Schema.Type<
+  typeof DecodedRealtimeRequestBodySchema
+>;
+
+export const decodeRealtimeRequest = Schema.decodeUnknownEffect(DecodedRealtimeRequestBodySchema);
+
+// ===== Realtime response body =====
+
+/**
+ * Plain message displayed to the customer for retention.
+ * @see https://developer.apple.com/documentation/retentionmessaging/message
+ */
+export const MessageSchema = Schema.Struct({
+  messageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type Message = Schema.Schema.Type<typeof MessageSchema>;
+
+/**
+ * Switch-plan message and the suggested product.
+ * @see https://developer.apple.com/documentation/retentionmessaging/alternateproduct
+ */
+export const AlternateProductSchema = Schema.Struct({
+  messageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+  productId: Schema.OptionFromOptionalKey(Schema.String),
+  billingPlanType: Schema.OptionFromOptionalKey(
+    Schema.Union([BillingPlanTypeSchema, Schema.String]),
+  ),
+});
+
+export type AlternateProduct = Schema.Schema.Type<typeof AlternateProductSchema>;
+
+/**
+ * Promotional offer V1 signature.
+ * @see https://developer.apple.com/documentation/retentionmessaging/promotionaloffersignaturev1
+ */
+export const PromotionalOfferSignatureV1Schema = Schema.Struct({
+  encodedSignature: Schema.String,
+  productId: Schema.String,
+  nonce: Schema.String,
+  timestamp: Schema.Number,
+  keyId: Schema.String,
+  offerIdentifier: Schema.String,
+  appAccountToken: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type PromotionalOfferSignatureV1 = Schema.Schema.Type<
+  typeof PromotionalOfferSignatureV1Schema
+>;
+
+/**
+ * Promotional offer message returned to the customer.
+ * @see https://developer.apple.com/documentation/retentionmessaging/promotionaloffer
+ */
+export const PromotionalOfferSchema = Schema.Struct({
+  messageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+  promotionalOfferSignatureV2: Schema.OptionFromOptionalKey(Schema.String),
+  promotionalOfferSignatureV1: Schema.OptionFromOptionalKey(PromotionalOfferSignatureV1Schema),
+});
+
+export type PromotionalOffer = Schema.Schema.Type<typeof PromotionalOfferSchema>;
+
+/**
+ * Advanced Commerce real-time offer/recommendation payload.
+ * @see https://developer.apple.com/documentation/retentionmessaging/advancedcommerceinfo
+ */
+export const RealtimeAdvancedCommerceInfoSchema = Schema.Struct({
+  messageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+  advancedCommerceData: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type RealtimeAdvancedCommerceInfo = Schema.Schema.Type<
+  typeof RealtimeAdvancedCommerceInfoSchema
+>;
+
+/**
+ * Response your endpoint returns to the App Store to choose a retention message.
+ * @see https://developer.apple.com/documentation/retentionmessaging/realtimeresponsebody
+ */
+export const RealtimeResponseBodySchema = Schema.Struct({
+  message: Schema.OptionFromOptionalKey(MessageSchema),
+  alternateProduct: Schema.OptionFromOptionalKey(AlternateProductSchema),
+  promotionalOffer: Schema.OptionFromOptionalKey(PromotionalOfferSchema),
+  advancedCommerceInfo: Schema.OptionFromOptionalKey(RealtimeAdvancedCommerceInfoSchema),
+});
+
+export type RealtimeResponseBody = Schema.Schema.Type<typeof RealtimeResponseBodySchema>;
+
+/**
+ * Request your endpoint receives from the App Store to display a retention message.
+ * @see https://developer.apple.com/documentation/retentionmessaging/realtimerequestbody
+ */
+export const RealtimeRequestBodySchema = Schema.Struct({
+  signedPayload: Schema.String,
+});
+
+export type RealtimeRequestBody = Schema.Schema.Type<typeof RealtimeRequestBodySchema>;
+
+/**
+ * Request body for configuring or updating the realtime URL.
+ * @see https://developer.apple.com/documentation/retentionmessaging/realtimeurlrequest
+ */
+export const RealtimeUrlRequestSchema = Schema.Struct({
+  realtimeURL: Schema.String,
+});
+
+export type RealtimeUrlRequest = Schema.Schema.Type<typeof RealtimeUrlRequestSchema>;
diff --git a/packages/app-store-server-sdk/src/schemas/renewals.ts b/packages/app-store-server-sdk/src/schemas/renewals.ts
new file mode 100644
index 000000000..3255ba699
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/renewals.ts
@@ -0,0 +1,113 @@
+import { Schema } from "effect";
+import {
+  AdvancedCommerceRenewalInfoSchema,
+  RenewalCommitmentInfoSchema,
+} from "./advanced-commerce.ts";
+import {
+  AutoRenewStatusSchema,
+  EnvironmentSchema,
+  ExpirationIntentSchema,
+  OfferDiscountTypeSchema,
+  OfferTypeSchema,
+  PriceIncreaseStatusSchema,
+  RenewalBillingPlanTypeSchema,
+} from "./enums.ts";
+
+/**
+ * A decoded payload containing subscription renewal information for an auto-renewable subscription.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/jwsrenewalinfodecodedpayload
+ */
+export const JWSRenewalInfoDecodedPayloadSchema = Schema.Struct({
+  /** The reason the subscription expired. */
+  expirationIntent: Schema.OptionFromOptionalKey(
+    Schema.Union([ExpirationIntentSchema, Schema.Number]),
+  ),
+
+  /** The original transaction identifier of a purchase. */
+  originalTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The product identifier of the product that will renew at the next billing period. */
+  autoRenewProductId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier for the product. */
+  productId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The renewal status of the auto-renewable subscription. */
+  autoRenewStatus: Schema.OptionFromOptionalKey(
+    Schema.Union([AutoRenewStatusSchema, Schema.Number]),
+  ),
+
+  /** Whether the App Store is attempting to automatically renew an expired subscription. */
+  isInBillingRetryPeriod: Schema.OptionFromOptionalKey(Schema.Boolean),
+
+  /** The status indicating whether the subscription is subject to a price increase. */
+  priceIncreaseStatus: Schema.OptionFromOptionalKey(
+    Schema.Union([PriceIncreaseStatusSchema, Schema.Number]),
+  ),
+
+  /** The time when the billing grace period expires (Unix timestamp in milliseconds). */
+  gracePeriodExpiresDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The type of subscription offer. */
+  offerType: Schema.OptionFromOptionalKey(Schema.Union([OfferTypeSchema, Schema.Number])),
+
+  /** The offer code or promotional offer identifier. */
+  offerIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The time the App Store signed the JWS data (Unix timestamp in milliseconds). */
+  signedDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The server environment, either sandbox or production. */
+  environment: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** The earliest start date of a subscription in a series (Unix timestamp in milliseconds). */
+  recentSubscriptionStartDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The time when the most recent subscription purchase expires (Unix timestamp in milliseconds). */
+  renewalDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The currency code for the renewal price. */
+  currency: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The renewal price, in milliunits, of the subscription. */
+  renewalPrice: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The payment mode for the offer. */
+  offerDiscountType: Schema.OptionFromOptionalKey(
+    Schema.Union([OfferDiscountTypeSchema, Schema.String]),
+  ),
+
+  /** An array of win-back offer identifiers the customer is eligible to redeem. */
+  eligibleWinBackOfferIds: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+
+  /** The UUID that maps a customer's in-app purchase with its resulting transaction. */
+  appAccountToken: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier of the app download transaction. */
+  appTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The duration of the offer. */
+  offerPeriod: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Advanced Commerce renewal info, present only for Advanced Commerce subscriptions. */
+  advancedCommerceInfo: Schema.OptionFromOptionalKey(AdvancedCommerceRenewalInfoSchema),
+
+  /** Renewal commitment information. */
+  commitmentInfo: Schema.OptionFromOptionalKey(RenewalCommitmentInfoSchema),
+
+  /** Renewal billing plan type. */
+  renewalBillingPlanType: Schema.OptionFromOptionalKey(
+    Schema.Union([RenewalBillingPlanTypeSchema, Schema.String]),
+  ),
+});
+
+export type JWSRenewalInfoDecodedPayload = Schema.Schema.Type<
+  typeof JWSRenewalInfoDecodedPayloadSchema
+>;
+
+/**
+ * Decode a JWSRenewalInfoDecodedPayload from an unknown value.
+ */
+export const decodeJWSRenewalInfoDecodedPayload = Schema.decodeUnknownEffect(
+  JWSRenewalInfoDecodedPayloadSchema,
+);
diff --git a/packages/app-store-server-sdk/src/schemas/requests.ts b/packages/app-store-server-sdk/src/schemas/requests.ts
new file mode 100644
index 000000000..21b879496
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/requests.ts
@@ -0,0 +1,264 @@
+import { Schema } from "effect";
+import {
+  AccountTenureSchema,
+  ConsumptionStatusSchema,
+  DeliveryStatusSchema,
+  DeliveryStatusV1Schema,
+  ExtendReasonCodeSchema,
+  HeaderPositionSchema,
+  InAppOwnershipTypeSchema,
+  LifetimeDollarsPurchasedSchema,
+  LifetimeDollarsRefundedSchema,
+  NotificationTypeV2Schema,
+  OrderSchema,
+  PlatformSchema,
+  PlayTimeSchema,
+  ProductTypeSchema,
+  RefundPreferenceSchema,
+  RefundPreferenceV1Schema,
+  SubtypeSchema,
+  UserStatusSchema,
+} from "./enums.ts";
+
+/**
+ * Request body for transaction history.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/transactionhistoryrequest
+ */
+export const TransactionHistoryRequestSchema = Schema.Struct({
+  /** The start date of the timespan (Unix timestamp in milliseconds). */
+  startDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The end date of the timespan (Unix timestamp in milliseconds). */
+  endDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** An array of product identifiers to include. */
+  productIds: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+
+  /** An array of product types to include. */
+  productTypes: Schema.OptionFromOptionalKey(Schema.Array(ProductTypeSchema)),
+
+  /** Sort order for the transaction history records. */
+  sort: Schema.OptionFromOptionalKey(OrderSchema),
+
+  /** An array of subscription group identifiers to include. */
+  subscriptionGroupIdentifiers: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+
+  /** Filter by the in-app ownership type. */
+  inAppOwnershipType: Schema.OptionFromOptionalKey(InAppOwnershipTypeSchema),
+
+  /** Whether to include only revoked transactions. */
+  revoked: Schema.OptionFromOptionalKey(Schema.Boolean),
+});
+
+export type TransactionHistoryRequest = Schema.Schema.Type<typeof TransactionHistoryRequestSchema>;
+
+/**
+ * Request body for extending a subscription renewal date.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/extendrenewaldaterequest
+ */
+export const ExtendRenewalDateRequestSchema = Schema.Struct({
+  /** The number of days to extend (maximum: 90). */
+  extendByDays: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The reason code for the extension. */
+  extendReasonCode: Schema.OptionFromOptionalKey(ExtendReasonCodeSchema),
+
+  /** A unique identifier to track the extension request. */
+  requestIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type ExtendRenewalDateRequest = Schema.Schema.Type<typeof ExtendRenewalDateRequestSchema>;
+
+/**
+ * Request body for mass extending subscription renewal dates.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/massextendrenewaldaterequest
+ */
+export const MassExtendRenewalDateRequestSchema = Schema.Struct({
+  /** The number of days to extend (maximum: 90). */
+  extendByDays: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The reason code for the extension. */
+  extendReasonCode: Schema.OptionFromOptionalKey(ExtendReasonCodeSchema),
+
+  /** A unique identifier to track the extension request. */
+  requestIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** A list of storefront country codes to limit the extension. */
+  storefrontCountryCodes: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+
+  /** The product identifier for the subscription. */
+  productId: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type MassExtendRenewalDateRequest = Schema.Schema.Type<
+  typeof MassExtendRenewalDateRequestSchema
+>;
+
+/**
+ * Request body for consumption information (V2).
+ * @see https://developer.apple.com/documentation/appstoreserverapi/consumptionrequest
+ */
+export const ConsumptionRequestSchema = Schema.Struct({
+  /** Whether the customer consented to provide consumption data. */
+  customerConsented: Schema.Boolean,
+
+  /** The percentage, in milliunits, of the purchase the customer consumed. */
+  consumptionPercentage: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** Whether the app successfully delivered the purchase. */
+  deliveryStatus: Schema.Union([DeliveryStatusSchema, Schema.String]),
+
+  /** Your preferred outcome for the refund request. */
+  refundPreference: Schema.OptionFromOptionalKey(
+    Schema.Union([RefundPreferenceSchema, Schema.String]),
+  ),
+
+  /** Whether you provided a free sample or trial prior to purchase. */
+  sampleContentProvided: Schema.Boolean,
+});
+
+export type ConsumptionRequest = Schema.Schema.Type<typeof ConsumptionRequestSchema>;
+
+/**
+ * Request body for notification history.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/notificationhistoryrequest
+ */
+export const NotificationHistoryRequestSchema = Schema.Struct({
+  /** The start date of the timespan (Unix timestamp in milliseconds). */
+  startDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The end date of the timespan (Unix timestamp in milliseconds). */
+  endDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** Filter by notification type. */
+  notificationType: Schema.OptionFromOptionalKey(NotificationTypeV2Schema),
+
+  /** Filter by notification subtype. */
+  notificationSubtype: Schema.OptionFromOptionalKey(SubtypeSchema),
+
+  /** Filter by a specific transaction. */
+  transactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Request only notifications that haven't reached your server. */
+  onlyFailures: Schema.OptionFromOptionalKey(Schema.Boolean),
+});
+
+export type NotificationHistoryRequest = Schema.Schema.Type<
+  typeof NotificationHistoryRequestSchema
+>;
+
+/**
+ * Request body for updating an app account token.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/updateappaccounttokenrequest
+ */
+export const UpdateAppAccountTokenRequestSchema = Schema.Struct({
+  /** The app account token UUID value. */
+  appAccountToken: Schema.String,
+});
+
+export type UpdateAppAccountTokenRequest = Schema.Schema.Type<
+  typeof UpdateAppAccountTokenRequestSchema
+>;
+
+/**
+ * Request body for configuring a default retention message.
+ * @see https://developer.apple.com/documentation/retentionmessaging/defaultconfigurationrequest
+ */
+export const DefaultConfigurationRequestSchema = Schema.Struct({
+  /** The message identifier to configure as the default. */
+  messageIdentifier: Schema.String,
+});
+
+export type DefaultConfigurationRequest = Schema.Schema.Type<
+  typeof DefaultConfigurationRequestSchema
+>;
+
+/**
+ * Image attached to a retention message or bullet point.
+ * @see https://developer.apple.com/documentation/retentionmessaging/uploadmessageimage
+ */
+export const UploadMessageImageSchema = Schema.Struct({
+  /** The image identifier. */
+  imageIdentifier: Schema.String,
+  /** Alternative text for the image. */
+  altText: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type UploadMessageImage = Schema.Schema.Type<typeof UploadMessageImageSchema>;
+
+/**
+ * Bullet point displayed within a retention message.
+ * @see https://developer.apple.com/documentation/retentionmessaging/bulletpoint
+ */
+export const BulletPointSchema = Schema.Struct({
+  /** The bullet point text. */
+  text: Schema.String,
+  /** The image identifier shown next to the bullet point. */
+  imageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+  /** Alternative text for the bullet point image. */
+  altText: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type BulletPoint = Schema.Schema.Type<typeof BulletPointSchema>;
+
+/**
+ * Request body for uploading a retention message. Apple's payload mixes
+ * single-locale fields and a multi-locale `messages` array; both are accepted.
+ * @see https://developer.apple.com/documentation/retentionmessaging/uploadmessagerequestbody
+ */
+export const UploadMessageRequestBodySchema = Schema.Struct({
+  /** The header text. */
+  header: Schema.OptionFromOptionalKey(Schema.String),
+  /** The body text. */
+  body: Schema.OptionFromOptionalKey(Schema.String),
+  /** The header position relative to the image. */
+  headerPosition: Schema.OptionFromOptionalKey(Schema.Union([HeaderPositionSchema, Schema.String])),
+  /** Image attached to the message. */
+  image: Schema.OptionFromOptionalKey(UploadMessageImageSchema),
+  /** Bullet points displayed in the message. */
+  bulletPoints: Schema.OptionFromOptionalKey(Schema.Array(BulletPointSchema)),
+  /** Optional multi-locale variants of the message. */
+  messages: Schema.OptionFromOptionalKey(
+    Schema.Array(
+      Schema.Struct({
+        locale: Schema.String,
+        header: Schema.OptionFromOptionalKey(Schema.String),
+        body: Schema.String,
+        image: Schema.OptionFromOptionalKey(UploadMessageImageSchema),
+      }),
+    ),
+  ),
+});
+
+export type UploadMessageRequestBody = Schema.Schema.Type<typeof UploadMessageRequestBodySchema>;
+
+/**
+ * Request body for the deprecated V1 consumption endpoint.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/consumptionrequestv1
+ */
+export const ConsumptionRequestV1Schema = Schema.Struct({
+  customerConsented: Schema.Boolean,
+  consumptionStatus: Schema.Union([ConsumptionStatusSchema, Schema.Number]),
+  platform: Schema.Union([PlatformSchema, Schema.Number]),
+  sampleContentProvided: Schema.Boolean,
+  deliveryStatus: Schema.Union([DeliveryStatusV1Schema, Schema.Number]),
+  appAccountToken: Schema.String,
+  accountTenure: Schema.Union([AccountTenureSchema, Schema.Number]),
+  playTime: Schema.Union([PlayTimeSchema, Schema.Number]),
+  lifetimeDollarsRefunded: Schema.Union([LifetimeDollarsRefundedSchema, Schema.Number]),
+  lifetimeDollarsPurchased: Schema.Union([LifetimeDollarsPurchasedSchema, Schema.Number]),
+  userStatus: Schema.Union([UserStatusSchema, Schema.Number]),
+  refundPreference: Schema.Union([RefundPreferenceV1Schema, Schema.Number]),
+});
+
+export type ConsumptionRequestV1 = Schema.Schema.Type<typeof ConsumptionRequestV1Schema>;
+
+/**
+ * Request body for initiating a performance test.
+ * @see https://developer.apple.com/documentation/retentionmessaging/performancetestrequest
+ */
+export const PerformanceTestRequestSchema = Schema.Struct({
+  originalTransactionId: Schema.String,
+});
+
+export type PerformanceTestRequest = Schema.Schema.Type<typeof PerformanceTestRequestSchema>;
diff --git a/packages/app-store-server-sdk/src/schemas/responses.ts b/packages/app-store-server-sdk/src/schemas/responses.ts
new file mode 100644
index 000000000..5b8b0609f
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/responses.ts
@@ -0,0 +1,434 @@
+import { Schema } from "effect";
+import {
+  EnvironmentSchema,
+  ImageSizeSchema,
+  ImageStateSchema,
+  MessageStateSchema,
+  OrderLookupStatusSchema,
+  PerformanceTestResultSchema,
+  PerformanceTestStatusSchema,
+  SendAttemptResultSchema,
+  StatusSchema,
+} from "./enums.ts";
+
+/**
+ * Transaction info response containing signed transaction.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/transactioninforesponse
+ */
+export const TransactionInfoResponseSchema = Schema.Struct({
+  /** A signed transaction in JWS format. */
+  signedTransactionInfo: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type TransactionInfoResponse = Schema.Schema.Type<typeof TransactionInfoResponseSchema>;
+
+/**
+ * The most recent transaction info for a subscription.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/lasttransactionsitem
+ */
+export const LastTransactionsItemSchema = Schema.Struct({
+  /** The status of the auto-renewable subscription. */
+  status: Schema.OptionFromOptionalKey(Schema.Union([StatusSchema, Schema.Number])),
+
+  /** The original transaction identifier. */
+  originalTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Transaction information signed by the App Store, in JWS format. */
+  signedTransactionInfo: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Subscription renewal information signed by the App Store, in JWS format. */
+  signedRenewalInfo: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type LastTransactionsItem = Schema.Schema.Type<typeof LastTransactionsItemSchema>;
+
+/**
+ * Information for subscriptions in one subscription group.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/subscriptiongroupidentifieritem
+ */
+export const SubscriptionGroupIdentifierItemSchema = Schema.Struct({
+  /** The identifier of the subscription group. */
+  subscriptionGroupIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** An array of the most recent transaction info for subscriptions in the group. */
+  lastTransactions: Schema.OptionFromOptionalKey(Schema.Array(LastTransactionsItemSchema)),
+});
+
+export type SubscriptionGroupIdentifierItem = Schema.Schema.Type<
+  typeof SubscriptionGroupIdentifierItemSchema
+>;
+
+/**
+ * Status information for all of a customer's auto-renewable subscriptions.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/statusresponse
+ */
+export const StatusResponseSchema = Schema.Struct({
+  /** The server environment. */
+  environment: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** The bundle identifier of the app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier of the app in the App Store. */
+  appAppleId: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** An array of subscription group information. */
+  data: Schema.OptionFromOptionalKey(Schema.Array(SubscriptionGroupIdentifierItemSchema)),
+});
+
+export type StatusResponse = Schema.Schema.Type<typeof StatusResponseSchema>;
+
+/**
+ * The customer's transaction history for an app.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/historyresponse
+ */
+export const HistoryResponseSchema = Schema.Struct({
+  /** A token to request the next set of transactions. */
+  revision: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Whether the App Store has more transaction data. */
+  hasMore: Schema.OptionFromOptionalKey(Schema.Boolean),
+
+  /** The bundle identifier of the app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier of the app in the App Store. */
+  appAppleId: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The server environment. */
+  environment: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** An array of signed transactions in JWS format. */
+  signedTransactions: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+});
+
+export type HistoryResponse = Schema.Schema.Type<typeof HistoryResponseSchema>;
+
+/**
+ * Response for looking up an order.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/orderlookupresponse
+ */
+export const OrderLookupResponseSchema = Schema.Struct({
+  /** The status indicating whether the order ID is valid. */
+  status: Schema.OptionFromOptionalKey(Schema.Union([OrderLookupStatusSchema, Schema.Number])),
+
+  /** An array of signed transactions in JWS format. */
+  signedTransactions: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+});
+
+export type OrderLookupResponse = Schema.Schema.Type<typeof OrderLookupResponseSchema>;
+
+/**
+ * Response for extending a subscription renewal date.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/extendrenewaldateresponse
+ */
+export const ExtendRenewalDateResponseSchema = Schema.Struct({
+  /** The original transaction identifier. */
+  originalTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier of the subscription-renewal-date extension. */
+  webOrderLineItemId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Whether the renewal date extension was successful. */
+  success: Schema.OptionFromOptionalKey(Schema.Boolean),
+
+  /** The new subscription expiration date (Unix timestamp in milliseconds). */
+  effectiveDate: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type ExtendRenewalDateResponse = Schema.Schema.Type<typeof ExtendRenewalDateResponseSchema>;
+
+/**
+ * Response for mass extending subscription renewal dates.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/massextendrenewaldateresponse
+ */
+export const MassExtendRenewalDateResponseSchema = Schema.Struct({
+  /** A unique identifier for the request. */
+  requestIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type MassExtendRenewalDateResponse = Schema.Schema.Type<
+  typeof MassExtendRenewalDateResponseSchema
+>;
+
+/**
+ * Status of a mass extend renewal date request.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/massextendrenewaldatestatusresponse
+ */
+export const MassExtendRenewalDateStatusResponseSchema = Schema.Struct({
+  /** A unique identifier for the request. */
+  requestIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Whether the request completed processing. */
+  complete: Schema.OptionFromOptionalKey(Schema.Boolean),
+
+  /** The date the request was created (Unix timestamp in milliseconds). */
+  completeDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The number of subscriptions successfully extended. */
+  succeededCount: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The number of subscriptions that failed to extend. */
+  failedCount: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type MassExtendRenewalDateStatusResponse = Schema.Schema.Type<
+  typeof MassExtendRenewalDateStatusResponseSchema
+>;
+
+/**
+ * A notification history item.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/notificationhistoryresponseitem
+ */
+export const NotificationHistoryResponseItemSchema = Schema.Struct({
+  /** A signed payload in JWS format. */
+  signedPayload: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** An array of send attempt results. */
+  sendAttempts: Schema.OptionFromOptionalKey(
+    Schema.Array(
+      Schema.Struct({
+        /** The date of the send attempt (Unix timestamp in milliseconds). */
+        attemptDate: Schema.OptionFromOptionalKey(Schema.Number),
+        /** The result of the send attempt. */
+        sendAttemptResult: Schema.OptionFromOptionalKey(
+          Schema.Union([SendAttemptResultSchema, Schema.String]),
+        ),
+      }),
+    ),
+  ),
+});
+
+export type NotificationHistoryResponseItem = Schema.Schema.Type<
+  typeof NotificationHistoryResponseItemSchema
+>;
+
+/**
+ * Notification history response.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/notificationhistoryresponse
+ */
+export const NotificationHistoryResponseSchema = Schema.Struct({
+  /** A pagination token for the next set of results. */
+  paginationToken: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Whether the App Store has more notification history. */
+  hasMore: Schema.OptionFromOptionalKey(Schema.Boolean),
+
+  /** An array of notification history records. */
+  notificationHistory: Schema.OptionFromOptionalKey(
+    Schema.Array(NotificationHistoryResponseItemSchema),
+  ),
+});
+
+export type NotificationHistoryResponse = Schema.Schema.Type<
+  typeof NotificationHistoryResponseSchema
+>;
+
+/**
+ * Response for requesting a test notification.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/sendtestnotificationresponse
+ */
+export const SendTestNotificationResponseSchema = Schema.Struct({
+  /** The test notification token. */
+  testNotificationToken: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type SendTestNotificationResponse = Schema.Schema.Type<
+  typeof SendTestNotificationResponseSchema
+>;
+
+/**
+ * Response for checking test notification status.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/checktestnotificationresponse
+ */
+export const CheckTestNotificationResponseSchema = Schema.Struct({
+  /** The signed payload of the test notification in JWS format. */
+  signedPayload: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** An array of send attempt results. */
+  sendAttempts: Schema.OptionFromOptionalKey(
+    Schema.Array(
+      Schema.Struct({
+        /** The date of the send attempt (Unix timestamp in milliseconds). */
+        attemptDate: Schema.OptionFromOptionalKey(Schema.Number),
+        /** The result of the send attempt. */
+        sendAttemptResult: Schema.OptionFromOptionalKey(
+          Schema.Union([SendAttemptResultSchema, Schema.String]),
+        ),
+      }),
+    ),
+  ),
+});
+
+export type CheckTestNotificationResponse = Schema.Schema.Type<
+  typeof CheckTestNotificationResponseSchema
+>;
+
+/**
+ * Response for getting a refund history.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/refundhistoryresponse
+ */
+export const RefundHistoryResponseSchema = Schema.Struct({
+  /** A token to request the next set of transactions. */
+  revision: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Whether the App Store has more refund data. */
+  hasMore: Schema.OptionFromOptionalKey(Schema.Boolean),
+
+  /** An array of signed transactions in JWS format. */
+  signedTransactions: Schema.OptionFromOptionalKey(Schema.Array(Schema.String)),
+});
+
+export type RefundHistoryResponse = Schema.Schema.Type<typeof RefundHistoryResponseSchema>;
+
+/**
+ * Response for getting app transaction info.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/apptransactioninforesponse
+ */
+export const AppTransactionInfoResponseSchema = Schema.Struct({
+  /** A signed app transaction in JWS format. */
+  signedAppTransactionInfo: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type AppTransactionInfoResponse = Schema.Schema.Type<
+  typeof AppTransactionInfoResponseSchema
+>;
+
+/**
+ * An image list response item.
+ * @see https://developer.apple.com/documentation/retentionmessaging/getimagelistresponseitem
+ */
+export const GetImageListResponseItemSchema = Schema.Struct({
+  /** The image identifier. */
+  imageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The state of the image. */
+  imageState: Schema.OptionFromOptionalKey(Schema.Union([ImageStateSchema, Schema.String])),
+
+  /** The size of the image. */
+  imageSize: Schema.OptionFromOptionalKey(Schema.Union([ImageSizeSchema, Schema.String])),
+});
+
+export type GetImageListResponseItem = Schema.Schema.Type<typeof GetImageListResponseItemSchema>;
+
+/**
+ * Response for getting the image list.
+ * @see https://developer.apple.com/documentation/retentionmessaging/getimagelistresponse
+ */
+export const GetImageListResponseSchema = Schema.Struct({
+  /** An array of image identifiers and their state. */
+  imageIdentifiers: Schema.OptionFromOptionalKey(Schema.Array(GetImageListResponseItemSchema)),
+});
+
+export type GetImageListResponse = Schema.Schema.Type<typeof GetImageListResponseSchema>;
+
+/**
+ * A message list response item.
+ * @see https://developer.apple.com/documentation/retentionmessaging/getmessagelistresponseitem
+ */
+export const GetMessageListResponseItemSchema = Schema.Struct({
+  /** The message identifier. */
+  messageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The state of the message. */
+  messageState: Schema.OptionFromOptionalKey(Schema.Union([MessageStateSchema, Schema.String])),
+});
+
+export type GetMessageListResponseItem = Schema.Schema.Type<
+  typeof GetMessageListResponseItemSchema
+>;
+
+/**
+ * Response for getting the message list.
+ * @see https://developer.apple.com/documentation/retentionmessaging/getmessagelistresponse
+ */
+export const GetMessageListResponseSchema = Schema.Struct({
+  /** An array of message identifiers and their state. */
+  messageIdentifiers: Schema.OptionFromOptionalKey(Schema.Array(GetMessageListResponseItemSchema)),
+});
+
+export type GetMessageListResponse = Schema.Schema.Type<typeof GetMessageListResponseSchema>;
+
+/**
+ * Response for getting the default retention message for a product+locale.
+ * @see https://developer.apple.com/documentation/retentionmessaging/defaultconfigurationresponse
+ */
+export const DefaultConfigurationResponseSchema = Schema.Struct({
+  /** The configured default message identifier. */
+  messageIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type DefaultConfigurationResponse = Schema.Schema.Type<
+  typeof DefaultConfigurationResponseSchema
+>;
+
+/**
+ * Response for getting the configured realtime URL.
+ * @see https://developer.apple.com/documentation/retentionmessaging/realtimeurlresponse
+ */
+export const RealtimeUrlResponseSchema = Schema.Struct({
+  /** The currently configured realtime URL. */
+  realtimeURL: Schema.OptionFromOptionalKey(Schema.String),
+});
+
+export type RealtimeUrlResponse = Schema.Schema.Type<typeof RealtimeUrlResponseSchema>;
+
+/**
+ * Response time statistics returned by performance test endpoints.
+ * @see https://developer.apple.com/documentation/retentionmessaging/performancetestresponsetimes
+ */
+export const PerformanceTestResponseTimesSchema = Schema.Struct({
+  average: Schema.OptionFromOptionalKey(Schema.Number),
+  p50: Schema.OptionFromOptionalKey(Schema.Number),
+  p90: Schema.OptionFromOptionalKey(Schema.Number),
+  p95: Schema.OptionFromOptionalKey(Schema.Number),
+  p99: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type PerformanceTestResponseTimes = Schema.Schema.Type<
+  typeof PerformanceTestResponseTimesSchema
+>;
+
+/**
+ * Configuration parameters returned by the performance test endpoints.
+ * @see https://developer.apple.com/documentation/retentionmessaging/performancetestconfig
+ */
+export const PerformanceTestConfigSchema = Schema.Struct({
+  maxConcurrentRequests: Schema.OptionFromOptionalKey(Schema.Number),
+  totalRequests: Schema.OptionFromOptionalKey(Schema.Number),
+  totalDuration: Schema.OptionFromOptionalKey(Schema.Number),
+  responseTimeThreshold: Schema.OptionFromOptionalKey(Schema.Number),
+  successRateThreshold: Schema.OptionFromOptionalKey(Schema.Number),
+});
+
+export type PerformanceTestConfig = Schema.Schema.Type<typeof PerformanceTestConfigSchema>;
+
+/**
+ * Response for initiating a performance test.
+ * @see https://developer.apple.com/documentation/retentionmessaging/performancetestresponse
+ */
+export const PerformanceTestResponseSchema = Schema.Struct({
+  requestId: Schema.OptionFromOptionalKey(Schema.String),
+  config: PerformanceTestConfigSchema,
+  status: Schema.OptionFromOptionalKey(Schema.Union([PerformanceTestStatusSchema, Schema.String])),
+});
+
+export type PerformanceTestResponse = Schema.Schema.Type<typeof PerformanceTestResponseSchema>;
+
+/**
+ * Response for getting the results of a performance test.
+ * @see https://developer.apple.com/documentation/retentionmessaging/performancetestresultresponse
+ */
+export const PerformanceTestResultResponseSchema = Schema.Struct({
+  config: PerformanceTestConfigSchema,
+  target: Schema.OptionFromOptionalKey(Schema.String),
+  result: Schema.OptionFromOptionalKey(Schema.Union([PerformanceTestResultSchema, Schema.String])),
+  successRate: Schema.OptionFromOptionalKey(Schema.Number),
+  numPending: Schema.OptionFromOptionalKey(Schema.Number),
+  responseTimes: PerformanceTestResponseTimesSchema,
+  failures: Schema.OptionFromOptionalKey(Schema.Record(Schema.String, Schema.Number)),
+});
+
+export type PerformanceTestResultResponse = Schema.Schema.Type<
+  typeof PerformanceTestResultResponseSchema
+>;
diff --git a/packages/app-store-server-sdk/src/schemas/transactions.ts b/packages/app-store-server-sdk/src/schemas/transactions.ts
new file mode 100644
index 000000000..76dca680f
--- /dev/null
+++ b/packages/app-store-server-sdk/src/schemas/transactions.ts
@@ -0,0 +1,142 @@
+import { Schema } from "effect";
+import {
+  AdvancedCommerceTransactionInfoSchema,
+  TransactionCommitmentInfoSchema,
+} from "./advanced-commerce.ts";
+import {
+  BillingPlanTypeSchema,
+  EnvironmentSchema,
+  InAppOwnershipTypeSchema,
+  OfferDiscountTypeSchema,
+  OfferTypeSchema,
+  RevocationReasonSchema,
+  RevocationTypeSchema,
+  TransactionReasonSchema,
+  TypeSchema,
+} from "./enums.ts";
+
+/**
+ * A decoded payload containing transaction information.
+ * @see https://developer.apple.com/documentation/appstoreserverapi/jwstransactiondecodedpayload
+ */
+export const JWSTransactionDecodedPayloadSchema = Schema.Struct({
+  /** The original transaction identifier of a purchase. */
+  originalTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier for a transaction such as an in-app purchase, restored in-app purchase, or subscription renewal. */
+  transactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier of subscription-purchase events across devices, including renewals. */
+  webOrderLineItemId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The bundle identifier of an app. */
+  bundleId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The unique identifier for the product. */
+  productId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The identifier of the subscription group. */
+  subscriptionGroupIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The time that the App Store charged the user's account (Unix timestamp in milliseconds). */
+  purchaseDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The purchase date of the original transaction (Unix timestamp in milliseconds). */
+  originalPurchaseDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The expiration date of an auto-renewable subscription (Unix timestamp in milliseconds). */
+  expiresDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The number of consumable products purchased. */
+  quantity: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The type of the in-app purchase. */
+  type: Schema.OptionFromOptionalKey(Schema.Union([TypeSchema, Schema.String])),
+
+  /** The UUID that maps a customer's in-app purchase with its resulting transaction. */
+  appAccountToken: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** Whether the transaction was purchased by the user or via Family Sharing. */
+  inAppOwnershipType: Schema.OptionFromOptionalKey(
+    Schema.Union([InAppOwnershipTypeSchema, Schema.String]),
+  ),
+
+  /** The time the App Store signed the JWS data (Unix timestamp in milliseconds). */
+  signedDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The reason that the App Store refunded or revoked the transaction. */
+  revocationReason: Schema.OptionFromOptionalKey(
+    Schema.Union([RevocationReasonSchema, Schema.Number]),
+  ),
+
+  /** The time Apple Support refunded a transaction (Unix timestamp in milliseconds). */
+  revocationDate: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** Whether the user upgraded to another subscription. */
+  isUpgraded: Schema.OptionFromOptionalKey(Schema.Boolean),
+
+  /** The promotional offer type. */
+  offerType: Schema.OptionFromOptionalKey(Schema.Union([OfferTypeSchema, Schema.Number])),
+
+  /** The offer code or promotional offer identifier. */
+  offerIdentifier: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The server environment, either sandbox or production. */
+  environment: Schema.OptionFromOptionalKey(Schema.Union([EnvironmentSchema, Schema.String])),
+
+  /** The three-letter country or region code for the App Store storefront. */
+  storefront: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** An Apple-defined value that uniquely identifies the storefront. */
+  storefrontId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The reason for the purchase transaction. */
+  transactionReason: Schema.OptionFromOptionalKey(
+    Schema.Union([TransactionReasonSchema, Schema.String]),
+  ),
+
+  /** The three-letter ISO 4217 currency code. */
+  currency: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The price, in milliunits, of the in-app purchase. */
+  price: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** The payment mode for the offer. */
+  offerDiscountType: Schema.OptionFromOptionalKey(
+    Schema.Union([OfferDiscountTypeSchema, Schema.String]),
+  ),
+
+  /** The unique identifier of the app download transaction. */
+  appTransactionId: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The duration of the offer. */
+  offerPeriod: Schema.OptionFromOptionalKey(Schema.String),
+
+  /** The type of the refund or revocation. */
+  revocationType: Schema.OptionFromOptionalKey(Schema.Union([RevocationTypeSchema, Schema.String])),
+
+  /** The percentage, in milliunits, that has been refunded or revoked. */
+  revocationPercentage: Schema.OptionFromOptionalKey(Schema.Number),
+
+  /** Advanced Commerce transaction info, present only for Advanced Commerce subscriptions. */
+  advancedCommerceInfo: Schema.OptionFromOptionalKey(AdvancedCommerceTransactionInfoSchema),
+
+  /** Billing plan type for this transaction. */
+  billingPlanType: Schema.OptionFromOptionalKey(
+    Schema.Union([BillingPlanTypeSchema, Schema.String]),
+  ),
+
+  /** Commitment info for this transaction. */
+  commitmentInfo: Schema.OptionFromOptionalKey(TransactionCommitmentInfoSchema),
+});
+
+export type JWSTransactionDecodedPayload = Schema.Schema.Type<
+  typeof JWSTransactionDecodedPayloadSchema
+>;
+
+/**
+ * Decode a JWSTransactionDecodedPayload from an unknown value.
+ */
+export const decodeJWSTransactionDecodedPayload = Schema.decodeUnknownEffect(
+  JWSTransactionDecodedPayloadSchema,
+);
diff --git a/packages/app-store-server-sdk/src/sdk.ts b/packages/app-store-server-sdk/src/sdk.ts
new file mode 100644
index 000000000..06e44114b
--- /dev/null
+++ b/packages/app-store-server-sdk/src/sdk.ts
@@ -0,0 +1,27 @@
+import { Effect, Layer, Context } from "effect";
+import { HttpClient } from "effect/unstable/http";
+
+/**
+ * Shared App Store Server SDK handle. Holds the long-lived `HttpClient`
+ * instance so per-tenant clients and verifiers can close over a single HTTP
+ * connection pool instead of each building their own.
+ *
+ * Multi-tenant deployments provide `AppStoreServerSdk.layer` once at app boot
+ * (composed with `FetchHttpClient.layer` or a mock) and then create as many
+ * `AppStoreServerSdkClient` / `SignedDataVerifier` instances as needed via the
+ * synchronous `.make(sdk, config)` factories.
+ */
+export class AppStoreServerSdk extends Context.Service<
+  AppStoreServerSdk,
+  {
+    /** Shared HTTP client used by all `AppStoreServerSdkClient.make` instances. */
+    readonly httpClient: HttpClient.HttpClient;
+  }
+>()("AppStoreServerSdk") {
+  static layer = Layer.effect(AppStoreServerSdk)(
+    Effect.gen(function* () {
+      const httpClient = yield* HttpClient.HttpClient;
+      return AppStoreServerSdk.of({ httpClient });
+    }),
+  );
+}
diff --git a/packages/app-store-server-sdk/src/signatures/index.ts b/packages/app-store-server-sdk/src/signatures/index.ts
new file mode 100644
index 000000000..1c4602797
--- /dev/null
+++ b/packages/app-store-server-sdk/src/signatures/index.ts
@@ -0,0 +1,87 @@
+// Signature creation is handled in the client/auth.ts module
+// Re-export for convenience
+export {
+  createPromotionalOfferV2Signature,
+  createIntroductoryOfferEligibilitySignature,
+  createAdvancedCommerceInAppSignature,
+  type PromotionalOfferSignatureConfig,
+} from "../client/auth.ts";
+
+// V1 promotional offer signature (legacy SHA256-based).
+// Signed with raw WebCrypto ECDSA, then re-encoded to the ASN.1 DER form Apple
+// expects (see `rawEcdsaSignatureToDer`).
+
+import { Effect, Option } from "effect";
+import { importPKCS8 } from "jose";
+import { JwtCreationError } from "../errors/index.ts";
+import { bytesToBase64, rawEcdsaSignatureToDer, utf8ToBytes } from "../internal/bytes.ts";
+
+/**
+ * Special separator character used in V1 promotional offer signatures.
+ */
+const INVISIBLE_SEPARATOR = "\u2063";
+
+/**
+ * Configuration for V1 promotional offer signature creation.
+ */
+export interface PromotionalOfferV1SignatureConfig {
+  /** Your private key downloaded from App Store Connect. */
+  signingKey: string;
+  /** Your private key ID from App Store Connect. */
+  keyId: string;
+  /** Your app's bundle ID. */
+  bundleId: string;
+}
+
+/**
+ * Creates a V1 promotional offer signature (legacy).
+ *
+ * @param config - The configuration for signature creation
+ * @param productId - The product identifier
+ * @param offerId - The offer identifier
+ * @param appAccountToken - The app account token (UUID or empty string)
+ * @param nonce - A unique UUID for this signature
+ * @param timestamp - The timestamp in milliseconds
+ * @returns An Effect that produces the base64-encoded signature
+ */
+export const createPromotionalOfferV1Signature = (
+  config: PromotionalOfferV1SignatureConfig,
+  productId: string,
+  offerId: string,
+  appAccountToken: string,
+  nonce: string,
+  timestamp: number,
+): Effect.Effect<string, JwtCreationError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const payload = [
+        config.bundleId,
+        config.keyId,
+        productId,
+        offerId,
+        appAccountToken,
+        nonce.toLowerCase(),
+        timestamp.toString(),
+      ].join(INVISIBLE_SEPARATOR);
+
+      const key = await importPKCS8(config.signingKey, "ES256");
+      // `as BufferSource`: TextEncoder yields `Uint8Array<ArrayBufferLike>`,
+      // which the DOM lib's `BufferSource` (ArrayBuffer-backed) rejects at the
+      // type level even though it is valid at runtime.
+      const rawSignature = new Uint8Array(
+        await globalThis.crypto.subtle.sign(
+          { name: "ECDSA", hash: "SHA-256" },
+          key,
+          utf8ToBytes(payload) as BufferSource,
+        ),
+      );
+
+      // Apple expects the DER `Ecdsa-Sig-Value`, not WebCrypto's raw r‖s output.
+      return bytesToBase64(rawEcdsaSignatureToDer(rawSignature));
+    },
+    catch: (error) =>
+      new JwtCreationError({
+        message: `Failed to create V1 promotional offer signature: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
diff --git a/packages/app-store-server-sdk/src/verification/SignedDataVerifier.ts b/packages/app-store-server-sdk/src/verification/SignedDataVerifier.ts
new file mode 100644
index 000000000..b5e08fbed
--- /dev/null
+++ b/packages/app-store-server-sdk/src/verification/SignedDataVerifier.ts
@@ -0,0 +1,354 @@
+import { Effect, Option, Schema } from "effect";
+import { compactVerify, decodeJwt, decodeProtectedHeader } from "jose";
+import { CertificateError, VerificationError, VerificationStatus } from "../errors/index.ts";
+import { AppStoreServerSdk } from "../sdk.ts";
+import {
+  AppTransactionSchema,
+  DecodedRealtimeRequestBodySchema,
+  type AppTransaction,
+  type DecodedRealtimeRequestBody,
+  Environment,
+  JWSRenewalInfoDecodedPayloadSchema,
+  JWSTransactionDecodedPayloadSchema,
+  ResponseBodyV2DecodedPayloadSchema,
+  type JWSRenewalInfoDecodedPayload,
+  type JWSTransactionDecodedPayload,
+  type ResponseBodyV2DecodedPayload,
+} from "../schemas/index.ts";
+import {
+  extractCertificateChain,
+  getPublicKeyFromChain,
+  validateCertificateChain,
+  type CertificateChainValidationConfig,
+} from "./certificate-chain.ts";
+
+type DecodableSchema<T> = Schema.Top & {
+  readonly Type: T;
+  readonly DecodingServices: never;
+};
+
+/**
+ * Configuration for a per-tenant {@link SignedDataVerifier}.
+ */
+export interface SignedDataVerifierConfig {
+  /** Apple root certificates in PEM format. */
+  rootCertificates: string[];
+  /** Whether to enable online checks (OCSP). */
+  enableOnlineChecks: boolean;
+  /** The expected environment (Production, Sandbox, LocalTesting, Xcode). */
+  environment: (typeof Environment)[keyof typeof Environment];
+  /** Your app's bundle ID for validation. */
+  bundleId: string;
+  /**
+   * Your app's Apple ID. When provided in production, the verifier asserts
+   * decoded payloads match it; when omitted, the appAppleId check is skipped.
+   */
+  appAppleId: Option.Option<number>;
+  /**
+   * Optional override for notification verification — mirrors the upstream
+   * `verifyNotification(bundleId, appAppleId, environment)` hook so tests
+   * can inspect the extracted identifiers without running the strict checks.
+   * Throwing (or failing the returned Effect) signals verification failure.
+   */
+  verifyNotificationOverride: Option.Option<
+    (
+      bundleId: Option.Option<string>,
+      appAppleId: Option.Option<number>,
+      environment: Option.Option<string>,
+    ) => Effect.Effect<void, VerificationError> | void
+  >;
+}
+
+/**
+ * Per-tenant JWS signature verifier. Construct via {@link SignedDataVerifier.make}.
+ */
+export interface SignedDataVerifier {
+  /** Verify and decode a signed transaction. */
+  readonly verifyAndDecodeTransaction: (
+    signedTransaction: string,
+  ) => Effect.Effect<JWSTransactionDecodedPayload, VerificationError | CertificateError>;
+
+  /** Verify and decode signed renewal info. */
+  readonly verifyAndDecodeRenewalInfo: (
+    signedRenewalInfo: string,
+  ) => Effect.Effect<JWSRenewalInfoDecodedPayload, VerificationError | CertificateError>;
+
+  /** Verify and decode a signed notification. */
+  readonly verifyAndDecodeNotification: (
+    signedPayload: string,
+  ) => Effect.Effect<ResponseBodyV2DecodedPayload, VerificationError | CertificateError>;
+
+  /** Verify and decode a signed AppTransaction. */
+  readonly verifyAndDecodeAppTransaction: (
+    signedAppTransaction: string,
+  ) => Effect.Effect<AppTransaction, VerificationError | CertificateError>;
+
+  /** Verify and decode a signed realtime retention request. */
+  readonly verifyAndDecodeRealtimeRequest: (
+    signedPayload: string,
+  ) => Effect.Effect<DecodedRealtimeRequestBody, VerificationError | CertificateError>;
+}
+
+const makeVerificationError = (status: VerificationStatus): VerificationError =>
+  new VerificationError({ status, cause: Option.none() });
+
+const asOption = <T>(value: Option.Option<T> | T | null | undefined): Option.Option<T> =>
+  Option.isOption(value) ? value : Option.fromNullishOr(value);
+
+export const SignedDataVerifier = {
+  /**
+   * Build a per-tenant signature verifier. The {@link AppStoreServerSdk}
+   * parameter exists for API symmetry with {@link AppStoreServerSdkClient}; the
+   * verifier itself is pure (no HTTP), but accepting the SDK keeps room for
+   * future shared state (parsed-certificate cache, OCSP cache, etc.).
+   */
+  make: (
+    // The SDK handle is accepted for API symmetry with `AppStoreServerSdkClient`.
+    // It is unused today; reserved for future shared infrastructure.
+    _sdk: typeof AppStoreServerSdk.Service,
+    config: SignedDataVerifierConfig,
+  ): SignedDataVerifier => {
+    const appAppleIdConfig = asOption(config.appAppleId);
+    const verifyNotificationOverrideConfig = asOption(config.verifyNotificationOverride);
+
+    const skipSignatureValidation =
+      config.environment === Environment.XCODE || config.environment === Environment.LOCAL_TESTING;
+
+    const verifyAndDecodeJws = <T>(
+      signedData: string,
+      schema: DecodableSchema<T>,
+    ): Effect.Effect<T, VerificationError | CertificateError> =>
+      Effect.gen(function* () {
+        // Decode the protected header (for x5c) and the payload without
+        // verifying the signature yet — mirrors the previous jwt.decode step.
+        const header = yield* Effect.try({
+          try: () => decodeProtectedHeader(signedData),
+          catch: () => makeVerificationError(VerificationStatus.VERIFICATION_FAILURE),
+        });
+
+        const rawPayload = yield* Effect.try({
+          try: () => decodeJwt(signedData),
+          catch: () => makeVerificationError(VerificationStatus.VERIFICATION_FAILURE),
+        });
+
+        const payload = yield* Schema.decodeUnknownEffect(schema)(rawPayload).pipe(
+          Effect.mapError(() => makeVerificationError(VerificationStatus.VERIFICATION_FAILURE)),
+        );
+
+        // In LocalTesting / Xcode we skip the certificate chain check and JWS
+        // signature verification; the data isn't signed by Apple in those envs.
+        if (skipSignatureValidation) {
+          return payload;
+        }
+
+        const x5c = header.x5c;
+        if (!x5c || !Array.isArray(x5c) || x5c.length !== 3) {
+          return yield* Effect.fail(makeVerificationError(VerificationStatus.INVALID_CHAIN_LENGTH));
+        }
+
+        const certChain = yield* extractCertificateChain(x5c);
+
+        const chainConfig: CertificateChainValidationConfig = {
+          rootCertificates: config.rootCertificates,
+          enableOnlineChecks: config.enableOnlineChecks,
+          currentTime: Option.none(),
+        };
+
+        yield* validateCertificateChain(certChain, chainConfig);
+
+        const publicKey = yield* getPublicKeyFromChain(certChain);
+
+        // Verify the JWS signature against the leaf certificate's public key.
+        // `jose` enforces the ES256 algorithm via the imported CryptoKey.
+        yield* Effect.tryPromise({
+          try: () => compactVerify(signedData, publicKey),
+          catch: () => makeVerificationError(VerificationStatus.VERIFICATION_FAILURE),
+        });
+
+        return payload;
+      });
+
+    const checkBundle = (bundleId: Option.Option<string>): Effect.Effect<void, VerificationError> =>
+      Option.isSome(bundleId) && bundleId.value !== config.bundleId
+        ? Effect.fail(makeVerificationError(VerificationStatus.INVALID_APP_IDENTIFIER))
+        : Effect.void;
+
+    const checkEnvironment = (
+      environment: Option.Option<string>,
+    ): Effect.Effect<void, VerificationError> =>
+      Option.isSome(environment) && environment.value !== config.environment
+        ? Effect.fail(makeVerificationError(VerificationStatus.INVALID_ENVIRONMENT))
+        : Effect.void;
+
+    const validateTransactionPayload = (
+      payload: JWSTransactionDecodedPayload,
+    ): Effect.Effect<void, VerificationError> =>
+      Effect.gen(function* () {
+        yield* checkBundle(payload.bundleId);
+        yield* checkEnvironment(payload.environment);
+      });
+
+    const validateRenewalPayload = (
+      payload: JWSRenewalInfoDecodedPayload,
+    ): Effect.Effect<void, VerificationError> => checkEnvironment(payload.environment);
+
+    const validateAppTransactionPayload = (
+      payload: AppTransaction,
+    ): Effect.Effect<void, VerificationError> =>
+      Effect.gen(function* () {
+        yield* checkBundle(payload.bundleId);
+        if (
+          config.environment === Environment.PRODUCTION &&
+          Option.isSome(appAppleIdConfig) &&
+          Option.isSome(payload.appAppleId) &&
+          payload.appAppleId.value !== appAppleIdConfig.value
+        ) {
+          return yield* Effect.fail(
+            makeVerificationError(VerificationStatus.INVALID_APP_IDENTIFIER),
+          );
+        }
+        yield* checkEnvironment(payload.receiptType);
+      });
+
+    const validateRealtimePayload = (
+      payload: DecodedRealtimeRequestBody,
+    ): Effect.Effect<void, VerificationError> =>
+      Effect.gen(function* () {
+        if (
+          config.environment === Environment.PRODUCTION &&
+          Option.isSome(appAppleIdConfig) &&
+          payload.appAppleId !== appAppleIdConfig.value
+        ) {
+          return yield* Effect.fail(
+            makeVerificationError(VerificationStatus.INVALID_APP_IDENTIFIER),
+          );
+        }
+        yield* checkEnvironment(Option.some(payload.environment));
+      });
+
+    const runOverride = (
+      bundleId: Option.Option<string>,
+      appAppleId: Option.Option<number>,
+      environment: Option.Option<string>,
+    ): Effect.Effect<void, VerificationError> =>
+      Effect.suspend(() => {
+        if (Option.isNone(verifyNotificationOverrideConfig)) return Effect.void;
+        try {
+          const result = verifyNotificationOverrideConfig.value(bundleId, appAppleId, environment);
+          if (Effect.isEffect(result)) {
+            return result as Effect.Effect<void, VerificationError>;
+          }
+          return Effect.void;
+        } catch (e) {
+          if (e instanceof VerificationError) {
+            return Effect.fail(e);
+          }
+          return Effect.fail(makeVerificationError(VerificationStatus.INVALID_APP_IDENTIFIER));
+        }
+      });
+
+    const validateNotificationPayload = (
+      payload: ResponseBodyV2DecodedPayload,
+    ): Effect.Effect<void, VerificationError> =>
+      Effect.gen(function* () {
+        let appAppleId = Option.none<number>();
+        let bundleId = Option.none<string>();
+        let environment = Option.none<string>();
+        if (Option.isSome(payload.data)) {
+          appAppleId = payload.data.value.appAppleId;
+          bundleId = payload.data.value.bundleId;
+          environment = payload.data.value.environment;
+        } else if (Option.isSome(payload.summary)) {
+          appAppleId = payload.summary.value.appAppleId;
+          bundleId = payload.summary.value.bundleId;
+          environment = payload.summary.value.environment;
+        } else if (Option.isSome(payload.externalPurchaseToken)) {
+          appAppleId = payload.externalPurchaseToken.value.appAppleId;
+          bundleId = payload.externalPurchaseToken.value.bundleId;
+          environment = Option.map(
+            payload.externalPurchaseToken.value.externalPurchaseId,
+            (externalPurchaseId) =>
+              externalPurchaseId.startsWith("SANDBOX")
+                ? Environment.SANDBOX
+                : Environment.PRODUCTION,
+          );
+        } else if (Option.isSome(payload.appData)) {
+          appAppleId = payload.appData.value.appAppleId;
+          bundleId = payload.appData.value.bundleId;
+          environment = payload.appData.value.environment;
+        }
+
+        if (Option.isSome(verifyNotificationOverrideConfig)) {
+          yield* runOverride(bundleId, appAppleId, environment);
+          return;
+        }
+
+        if (Option.isNone(bundleId) || bundleId.value !== config.bundleId) {
+          return yield* Effect.fail(
+            makeVerificationError(VerificationStatus.INVALID_APP_IDENTIFIER),
+          );
+        }
+        if (
+          config.environment === Environment.PRODUCTION &&
+          Option.isSome(appAppleIdConfig) &&
+          (Option.isNone(appAppleId) || appAppleId.value !== appAppleIdConfig.value)
+        ) {
+          return yield* Effect.fail(
+            makeVerificationError(VerificationStatus.INVALID_APP_IDENTIFIER),
+          );
+        }
+        if (Option.isNone(environment) || environment.value !== config.environment) {
+          return yield* Effect.fail(makeVerificationError(VerificationStatus.INVALID_ENVIRONMENT));
+        }
+      });
+
+    return {
+      verifyAndDecodeTransaction: (signedTransaction) =>
+        Effect.gen(function* () {
+          const payload = yield* verifyAndDecodeJws(
+            signedTransaction,
+            JWSTransactionDecodedPayloadSchema,
+          );
+          yield* validateTransactionPayload(payload);
+          return payload;
+        }),
+
+      verifyAndDecodeRenewalInfo: (signedRenewalInfo) =>
+        Effect.gen(function* () {
+          const payload = yield* verifyAndDecodeJws(
+            signedRenewalInfo,
+            JWSRenewalInfoDecodedPayloadSchema,
+          );
+          yield* validateRenewalPayload(payload);
+          return payload;
+        }),
+
+      verifyAndDecodeNotification: (signedPayload) =>
+        Effect.gen(function* () {
+          const payload = yield* verifyAndDecodeJws(
+            signedPayload,
+            ResponseBodyV2DecodedPayloadSchema,
+          );
+          yield* validateNotificationPayload(payload);
+          return payload;
+        }),
+
+      verifyAndDecodeAppTransaction: (signedAppTransaction) =>
+        Effect.gen(function* () {
+          const payload = yield* verifyAndDecodeJws(signedAppTransaction, AppTransactionSchema);
+          yield* validateAppTransactionPayload(payload);
+          return payload;
+        }),
+
+      verifyAndDecodeRealtimeRequest: (signedPayload) =>
+        Effect.gen(function* () {
+          const payload = yield* verifyAndDecodeJws(
+            signedPayload,
+            DecodedRealtimeRequestBodySchema,
+          );
+          yield* validateRealtimePayload(payload);
+          return payload;
+        }),
+    };
+  },
+};
diff --git a/packages/app-store-server-sdk/src/verification/certificate-chain.ts b/packages/app-store-server-sdk/src/verification/certificate-chain.ts
new file mode 100644
index 000000000..81a362912
--- /dev/null
+++ b/packages/app-store-server-sdk/src/verification/certificate-chain.ts
@@ -0,0 +1,183 @@
+// `reflect-metadata` must be evaluated before `@peculiar/x509` (its `tsyringe`
+// dependency reads `Reflect.getMetadata` at module load). Listing it first here
+// guarantees that ordering. It is a pure-JS polyfill, safe on Cloudflare Workers.
+import "reflect-metadata";
+import * as x509 from "@peculiar/x509";
+import { Effect, Option } from "effect";
+import { CertificateError, VerificationError, VerificationStatus } from "../errors/index.ts";
+import { bytesToHex } from "../internal/bytes.ts";
+
+// Use the ambient WebCrypto implementation (workerd / Node global) for all
+// certificate signature checks, thumbprints, and public-key exports.
+x509.cryptoProvider.set(globalThis.crypto);
+
+// Apple-specific OIDs for certificate validation
+const APPLE_ROOT_CA_G3_OID = "1.2.840.113635.100.6.2.1";
+const APPLE_APP_STORE_OID = "1.2.840.113635.100.6.11.1";
+
+// Maximum clock skew allowed (60 seconds)
+const MAX_SKEW_MS = 60000;
+
+/**
+ * Configuration for certificate chain validation.
+ */
+export interface CertificateChainValidationConfig {
+  /** Apple root certificates (PEM format). */
+  rootCertificates: string[];
+  /** Whether to enable online checks (OCSP). */
+  enableOnlineChecks: boolean;
+  /** Current time for validation (defaults to now). */
+  currentTime: Option.Option<Date>;
+}
+
+const makeVerificationError = (status: VerificationStatus): VerificationError =>
+  new VerificationError({ status, cause: Option.none() });
+
+const asOption = <T>(value: Option.Option<T> | T | null | undefined): Option.Option<T> =>
+  Option.isOption(value) ? value : Option.fromNullishOr(value);
+
+/**
+ * Parses a PEM-encoded certificate.
+ */
+export const parseCertificate = (
+  pem: string,
+): Effect.Effect<x509.X509Certificate, CertificateError> =>
+  Effect.try({
+    try: () => new x509.X509Certificate(pem),
+    catch: (error) =>
+      new CertificateError({
+        message: `Failed to parse certificate: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Extracts the certificate chain from a JWS header's x5c field.
+ */
+export const extractCertificateChain = (
+  x5c: string[],
+): Effect.Effect<x509.X509Certificate[], CertificateError> =>
+  Effect.all(
+    x5c.map((cert) => {
+      const pem = `-----BEGIN CERTIFICATE-----\n${cert}\n-----END CERTIFICATE-----`;
+      return parseCertificate(pem);
+    }),
+  );
+
+/**
+ * Checks if a certificate carries a specific extension OID.
+ */
+const hasOid = (cert: x509.X509Certificate, oid: string): boolean =>
+  cert.getExtension(oid) !== null;
+
+/**
+ * Computes a certificate's SHA-256 thumbprint as a lowercase hex string.
+ */
+const getThumbprintHex = (cert: x509.X509Certificate): Effect.Effect<string, CertificateError> =>
+  Effect.tryPromise({
+    try: async () => bytesToHex(new Uint8Array(await cert.getThumbprint("SHA-256"))),
+    catch: (error) =>
+      new CertificateError({
+        message: `Failed to compute certificate thumbprint: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
+
+/**
+ * Verifies that `cert` was signed by `issuer`'s public key (signature only;
+ * validity-period checks are handled separately with clock skew). Resolves to
+ * `false` rather than failing so callers can map to a single verification
+ * status.
+ */
+const isSignedBy = (
+  cert: x509.X509Certificate,
+  issuer: x509.X509Certificate,
+): Effect.Effect<boolean> =>
+  Effect.tryPromise({
+    try: () => cert.verify({ publicKey: issuer, signatureOnly: true }),
+    catch: () => new Error("certificate signature verification failed"),
+  }).pipe(Effect.orElseSucceed(() => false));
+
+/**
+ * Validates the certificate chain.
+ *
+ * The chain should be: Leaf -> Intermediate -> Root
+ * with exactly 3 certificates.
+ */
+export const validateCertificateChain = (
+  chain: x509.X509Certificate[],
+  config: CertificateChainValidationConfig,
+): Effect.Effect<void, VerificationError | CertificateError> =>
+  Effect.gen(function* () {
+    // Check chain length (should be exactly 3)
+    if (chain.length !== 3) {
+      return yield* Effect.fail(makeVerificationError(VerificationStatus.INVALID_CHAIN_LENGTH));
+    }
+
+    // We've already verified length is 3, so these are safe
+    const leaf = chain[0] as x509.X509Certificate;
+    const intermediate = chain[1] as x509.X509Certificate;
+    const root = chain[2] as x509.X509Certificate;
+    const now = Option.getOrElse(asOption(config.currentTime), () => new Date());
+
+    // Validate certificate dates with clock skew
+    for (const cert of chain) {
+      const effectiveNotBefore = cert.notBefore.getTime() - MAX_SKEW_MS;
+      const effectiveNotAfter = cert.notAfter.getTime() + MAX_SKEW_MS;
+
+      if (now.getTime() < effectiveNotBefore || now.getTime() > effectiveNotAfter) {
+        return yield* Effect.fail(makeVerificationError(VerificationStatus.INVALID_CERTIFICATE));
+      }
+    }
+
+    // Verify root is in our trusted root certificates (by SHA-256 thumbprint)
+    const rootThumbprint = yield* getThumbprintHex(root);
+    let rootTrusted = false;
+    for (const trustedRootPem of config.rootCertificates) {
+      const trustedRoot = yield* parseCertificate(trustedRootPem);
+      const trustedThumbprint = yield* getThumbprintHex(trustedRoot);
+      if (rootThumbprint === trustedThumbprint) {
+        rootTrusted = true;
+        break;
+      }
+    }
+
+    if (!rootTrusted) {
+      return yield* Effect.fail(makeVerificationError(VerificationStatus.VERIFICATION_FAILURE));
+    }
+
+    if (!hasOid(leaf, APPLE_APP_STORE_OID) || !hasOid(intermediate, APPLE_ROOT_CA_G3_OID)) {
+      return yield* Effect.fail(makeVerificationError(VerificationStatus.VERIFICATION_FAILURE));
+    }
+
+    // Verify the chain signatures: leaf signed by intermediate, intermediate by root.
+    if (!(yield* isSignedBy(leaf, intermediate))) {
+      return yield* Effect.fail(makeVerificationError(VerificationStatus.VERIFICATION_FAILURE));
+    }
+
+    if (!(yield* isSignedBy(intermediate, root))) {
+      return yield* Effect.fail(makeVerificationError(VerificationStatus.VERIFICATION_FAILURE));
+    }
+  });
+
+/**
+ * Gets the leaf certificate's public key as a WebCrypto {@link CryptoKey},
+ * ready to pass to `jose.compactVerify`.
+ */
+export const getPublicKeyFromChain = (
+  chain: x509.X509Certificate[],
+): Effect.Effect<CryptoKey, CertificateError> =>
+  Effect.tryPromise({
+    try: async () => {
+      const leaf = chain[0];
+      if (leaf === undefined) {
+        throw new Error("Empty certificate chain");
+      }
+      return await leaf.publicKey.export();
+    },
+    catch: (error) =>
+      new CertificateError({
+        message: `Failed to get public key: ${error instanceof Error ? error.message : String(error)}`,
+        cause: Option.some(error),
+      }),
+  });
diff --git a/packages/app-store-server-sdk/src/verification/index.ts b/packages/app-store-server-sdk/src/verification/index.ts
new file mode 100644
index 000000000..2b15ab9d2
--- /dev/null
+++ b/packages/app-store-server-sdk/src/verification/index.ts
@@ -0,0 +1,9 @@
+export {
+  parseCertificate,
+  extractCertificateChain,
+  validateCertificateChain,
+  getPublicKeyFromChain,
+  type CertificateChainValidationConfig,
+} from "./certificate-chain.ts";
+
+export { SignedDataVerifier, type SignedDataVerifierConfig } from "./SignedDataVerifier.ts";
diff --git a/packages/app-store-server-sdk/tests/advanced-commerce.test.ts b/packages/app-store-server-sdk/tests/advanced-commerce.test.ts
new file mode 100644
index 000000000..701baadc8
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/advanced-commerce.test.ts
@@ -0,0 +1,562 @@
+import { describe, expect, it } from "vitest";
+import { Schema } from "effect";
+import { unwrapOptionsDeep } from "./util.ts";
+import {
+  AdvancedCommerceDescriptorsSchema,
+  AdvancedCommerceEffective,
+  AdvancedCommerceOfferPeriod,
+  AdvancedCommerceOfferReason,
+  AdvancedCommerceOfferSchema,
+  AdvancedCommerceOneTimeChargeCreateRequestSchema,
+  AdvancedCommerceOneTimeChargeItemSchema,
+  AdvancedCommercePeriod,
+  AdvancedCommercePriceIncreaseInfoStatus,
+  AdvancedCommerceReason,
+  AdvancedCommerceRequestInfoSchema,
+  AdvancedCommerceRequestRefundItemSchema,
+  AdvancedCommerceRequestRefundRequestSchema,
+  AdvancedCommerceRequestRefundResponseSchema,
+  AdvancedCommerceRefundReason,
+  AdvancedCommerceRefundType,
+  AdvancedCommerceSubscriptionCancelRequestSchema,
+  AdvancedCommerceSubscriptionCancelResponseSchema,
+  AdvancedCommerceSubscriptionChangeMetadataDescriptorsSchema,
+  AdvancedCommerceSubscriptionChangeMetadataItemSchema,
+  AdvancedCommerceSubscriptionChangeMetadataRequestSchema,
+  AdvancedCommerceSubscriptionChangeMetadataResponseSchema,
+  AdvancedCommerceSubscriptionCreateItemSchema,
+  AdvancedCommerceSubscriptionCreateRequestSchema,
+  AdvancedCommerceSubscriptionMigrateDescriptorsSchema,
+  AdvancedCommerceSubscriptionMigrateItemSchema,
+  AdvancedCommerceSubscriptionMigrateRenewalItemSchema,
+  AdvancedCommerceSubscriptionMigrateRequestSchema,
+  AdvancedCommerceSubscriptionMigrateResponseSchema,
+  AdvancedCommerceSubscriptionModifyAddItemSchema,
+  AdvancedCommerceSubscriptionModifyChangeItemSchema,
+  AdvancedCommerceSubscriptionModifyDescriptorsSchema,
+  AdvancedCommerceSubscriptionModifyInAppRequestSchema,
+  AdvancedCommerceSubscriptionModifyPeriodChangeSchema,
+  AdvancedCommerceSubscriptionModifyRemoveItemSchema,
+  AdvancedCommerceSubscriptionPriceChangeItemSchema,
+  AdvancedCommerceSubscriptionPriceChangeRequestSchema,
+  AdvancedCommerceSubscriptionPriceChangeResponseSchema,
+  AdvancedCommerceSubscriptionReactivateInAppRequestSchema,
+  AdvancedCommerceSubscriptionReactivateItemSchema,
+  AdvancedCommerceSubscriptionRevokeRequestSchema,
+  AdvancedCommerceSubscriptionRevokeResponseSchema,
+  BillingPlanType,
+  HelperValidationUtils,
+  RenewalBillingPlanType,
+} from "../src/schemas/index.ts";
+import { readFile } from "./util.ts";
+
+const decode = <S extends Schema.Top>(schema: S, path: string): S["Type"] =>
+  unwrapOptionsDeep(Schema.decodeUnknownSync(schema)(JSON.parse(readFile(path))));
+
+describe("AdvancedCommerce enums", () => {
+  it("exposes AdvancedCommercePeriod values", () => {
+    expect(AdvancedCommercePeriod.P1W).toBe("P1W");
+    expect(AdvancedCommercePeriod.P1M).toBe("P1M");
+    expect(AdvancedCommercePeriod.P2M).toBe("P2M");
+    expect(AdvancedCommercePeriod.P3M).toBe("P3M");
+    expect(AdvancedCommercePeriod.P6M).toBe("P6M");
+    expect(AdvancedCommercePeriod.P1Y).toBe("P1Y");
+  });
+
+  it("exposes AdvancedCommerceReason values", () => {
+    expect(AdvancedCommerceReason.UPGRADE).toBe("UPGRADE");
+    expect(AdvancedCommerceReason.DOWNGRADE).toBe("DOWNGRADE");
+    expect(AdvancedCommerceReason.APPLY_OFFER).toBe("APPLY_OFFER");
+  });
+
+  it("exposes AdvancedCommerceRefundReason values", () => {
+    expect(AdvancedCommerceRefundReason.UNINTENDED_PURCHASE).toBe("UNINTENDED_PURCHASE");
+    expect(AdvancedCommerceRefundReason.FULFILLMENT_ISSUE).toBe("FULFILLMENT_ISSUE");
+    expect(AdvancedCommerceRefundReason.UNSATISFIED_WITH_PURCHASE).toBe(
+      "UNSATISFIED_WITH_PURCHASE",
+    );
+    expect(AdvancedCommerceRefundReason.LEGAL).toBe("LEGAL");
+    expect(AdvancedCommerceRefundReason.OTHER).toBe("OTHER");
+    expect(AdvancedCommerceRefundReason.MODIFY_ITEMS_REFUND).toBe("MODIFY_ITEMS_REFUND");
+    expect(AdvancedCommerceRefundReason.SIMULATE_REFUND_DECLINE).toBe("SIMULATE_REFUND_DECLINE");
+  });
+
+  it("exposes AdvancedCommerceRefundType values", () => {
+    expect(AdvancedCommerceRefundType.FULL).toBe("FULL");
+    expect(AdvancedCommerceRefundType.PRORATED).toBe("PRORATED");
+    expect(AdvancedCommerceRefundType.CUSTOM).toBe("CUSTOM");
+  });
+
+  it("exposes AdvancedCommerceOfferPeriod values", () => {
+    expect(AdvancedCommerceOfferPeriod.P3D).toBe("P3D");
+    expect(AdvancedCommerceOfferPeriod.P1W).toBe("P1W");
+    expect(AdvancedCommerceOfferPeriod.P2W).toBe("P2W");
+    expect(AdvancedCommerceOfferPeriod.P1M).toBe("P1M");
+    expect(AdvancedCommerceOfferPeriod.P2M).toBe("P2M");
+    expect(AdvancedCommerceOfferPeriod.P3M).toBe("P3M");
+  });
+
+  it("exposes AdvancedCommerceOfferReason values", () => {
+    expect(AdvancedCommerceOfferReason.ACQUISITION).toBe("ACQUISITION");
+    expect(AdvancedCommerceOfferReason.WIN_BACK).toBe("WIN_BACK");
+    expect(AdvancedCommerceOfferReason.RETENTION).toBe("RETENTION");
+  });
+
+  it("exposes AdvancedCommerceEffective values", () => {
+    expect(AdvancedCommerceEffective.IMMEDIATELY).toBe("IMMEDIATELY");
+    expect(AdvancedCommerceEffective.NEXT_BILL_CYCLE).toBe("NEXT_BILL_CYCLE");
+  });
+
+  it("exposes AdvancedCommercePriceIncreaseInfoStatus values", () => {
+    expect(AdvancedCommercePriceIncreaseInfoStatus.SCHEDULED).toBe("SCHEDULED");
+    expect(AdvancedCommercePriceIncreaseInfoStatus.PENDING).toBe("PENDING");
+    expect(AdvancedCommercePriceIncreaseInfoStatus.ACCEPTED).toBe("ACCEPTED");
+  });
+
+  it("exposes BillingPlanType / RenewalBillingPlanType values", () => {
+    expect(BillingPlanType.BILLED_UPFRONT).toBe("BILLED_UPFRONT");
+    expect(BillingPlanType.MONTHLY).toBe("MONTHLY");
+    expect(RenewalBillingPlanType.BILLED_UPFRONT).toBe("BILLED_UPFRONT");
+    expect(RenewalBillingPlanType.MONTHLY).toBe("MONTHLY");
+  });
+});
+
+describe("HelperValidationUtils", () => {
+  it("validates description constraints", () => {
+    expect(HelperValidationUtils.validateDescription("Valid description")).toBe(true);
+    expect(HelperValidationUtils.validateDescription("A".repeat(45))).toBe(true);
+    expect(HelperValidationUtils.validateDescription("A".repeat(46))).toBe(false);
+    expect(HelperValidationUtils.validateDescription(null)).toBe(false);
+  });
+
+  it("validates displayName constraints", () => {
+    expect(HelperValidationUtils.validateDisplayName("Valid Name")).toBe(true);
+    expect(HelperValidationUtils.validateDisplayName("A".repeat(30))).toBe(true);
+    expect(HelperValidationUtils.validateDisplayName("A".repeat(31))).toBe(false);
+    expect(HelperValidationUtils.validateDisplayName(null)).toBe(false);
+  });
+
+  it("validates SKU constraints", () => {
+    expect(HelperValidationUtils.validateSku("valid.sku.123")).toBe(true);
+    expect(HelperValidationUtils.validateSku("A".repeat(128))).toBe(true);
+    expect(HelperValidationUtils.validateSku("A".repeat(129))).toBe(false);
+    expect(HelperValidationUtils.validateSku(null)).toBe(false);
+  });
+
+  it("validates periodCount constraints", () => {
+    expect(HelperValidationUtils.validatePeriodCount(1)).toBe(true);
+    expect(HelperValidationUtils.validatePeriodCount(6)).toBe(true);
+    expect(HelperValidationUtils.validatePeriodCount(12)).toBe(true);
+    expect(HelperValidationUtils.validatePeriodCount(0)).toBe(false);
+    expect(HelperValidationUtils.validatePeriodCount(13)).toBe(false);
+    expect(HelperValidationUtils.validatePeriodCount(null)).toBe(false);
+  });
+
+  it("validates non-empty items array", () => {
+    expect(HelperValidationUtils.validateItems([{ SKU: "sku1" }])).toBe(true);
+    expect(HelperValidationUtils.validateItems(null)).toBe(false);
+    expect(HelperValidationUtils.validateItems([])).toBe(false);
+    expect(HelperValidationUtils.validateItems([null])).toBe(false);
+  });
+});
+
+describe("AdvancedCommerce JSON model decoding", () => {
+  it("decodes AdvancedCommerceDescriptors", () => {
+    const descriptors = decode(
+      AdvancedCommerceDescriptorsSchema,
+      "tests/resources/models/advancedCommerceDescriptors.json",
+    );
+    expect(descriptors.description).toBe("description");
+    expect(descriptors.displayName).toBe("display name");
+  });
+
+  it("decodes AdvancedCommerceOneTimeChargeItem", () => {
+    const item = decode(
+      AdvancedCommerceOneTimeChargeItemSchema,
+      "tests/resources/models/advancedCommerceOneTimeChargeItem.json",
+    );
+    expect(item.description).toBe("description");
+    expect(item.displayName).toBe("display name");
+    expect(item.SKU).toBe("sku");
+    expect(item.price).toBe(15000);
+  });
+
+  it("decodes AdvancedCommerceSubscriptionCreateItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionCreateItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionCreateItem.json",
+    );
+    expect(item.description).toBe("description");
+    expect(item.displayName).toBe("display name");
+    expect(item.SKU).toBe("sku");
+    expect(item.price).toBe(20000);
+  });
+
+  it("decodes AdvancedCommerceRequestRefundItem", () => {
+    const item = decode(
+      AdvancedCommerceRequestRefundItemSchema,
+      "tests/resources/models/advancedCommerceRequestRefundItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+    expect(item.refundReason).toBe(AdvancedCommerceRefundReason.LEGAL);
+    expect(item.refundType).toBe(AdvancedCommerceRefundType.FULL);
+    expect(item.revoke).toBe(true);
+    expect(item.refundAmount).toBe(5000);
+  });
+
+  it("decodes AdvancedCommerceOffer", () => {
+    const offer = decode(
+      AdvancedCommerceOfferSchema,
+      "tests/resources/models/advancedCommerceOffer.json",
+    );
+    expect(offer.period).toBe(AdvancedCommerceOfferPeriod.P1W);
+    expect(offer.periodCount).toBe(3);
+    expect(offer.price).toBe(5000);
+    expect(offer.reason).toBe(AdvancedCommerceOfferReason.WIN_BACK);
+  });
+
+  it("decodes AdvancedCommerceOneTimeChargeCreateRequest", () => {
+    const request = decode(
+      AdvancedCommerceOneTimeChargeCreateRequestSchema,
+      "tests/resources/models/advancedCommerceOneTimeChargeCreateRequest.json",
+    );
+    expect(request.currency).toBe("USD");
+    expect(request.item).toBeTruthy();
+    expect(request.taxCode).toBe("taxCode");
+    expect(request.requestInfo).toBeTruthy();
+    expect(request.storefront).toBe("USA");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionCreateRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionCreateRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionCreateRequest.json",
+    );
+    expect(request.currency).toBe("USD");
+    expect(request.descriptors).toBeTruthy();
+    expect(request.items).toHaveLength(2);
+    expect(request.period).toBe(AdvancedCommercePeriod.P1M);
+    expect(request.taxCode).toBe("taxCode");
+    expect(request.storefront).toBe("USA");
+    expect(request.previousTransactionId).toBe("transactionId");
+  });
+
+  it("decodes AdvancedCommerceRequestRefundRequest", () => {
+    const request = decode(
+      AdvancedCommerceRequestRefundRequestSchema,
+      "tests/resources/models/advancedCommerceRequestRefundRequest.json",
+    );
+    expect(request.items).toHaveLength(2);
+    expect(request.refundRiskingPreference).toBe(true);
+    expect(request.requestInfo).toBeTruthy();
+    expect(request.currency).toBe("USD");
+    expect(request.storefront).toBe("USA");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionCancelRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionCancelRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionCancelRequest.json",
+    );
+    expect(request.requestInfo).toBeTruthy();
+    expect(request.storefront).toBe("USA");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionRevokeRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionRevokeRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionRevokeRequest.json",
+    );
+    expect(request.requestInfo).toBeTruthy();
+    expect(request.refundRiskingPreference).toBe(true);
+    expect(request.refundReason).toBe(AdvancedCommerceRefundReason.LEGAL);
+    expect(request.refundType).toBe(AdvancedCommerceRefundType.FULL);
+    expect(request.storefront).toBe("USA");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionPriceChangeRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionPriceChangeRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionPriceChangeRequest.json",
+    );
+    expect(request.items).toBeTruthy();
+    expect(request.requestInfo).toBeTruthy();
+    expect(request.currency).toBe("USD");
+  });
+
+  it("decodes AdvancedCommerceRequestRefundResponse", () => {
+    const response = decode(
+      AdvancedCommerceRequestRefundResponseSchema,
+      "tests/resources/models/advancedCommerceRequestRefundResponse.json",
+    );
+    expect(response.signedRenewalInfo).toBeFalsy();
+    expect(response.signedTransactionInfo).toBe("signed_transaction_info_value");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionCancelResponse", () => {
+    const response = decode(
+      AdvancedCommerceSubscriptionCancelResponseSchema,
+      "tests/resources/models/advancedCommerceSubscriptionCancelResponse.json",
+    );
+    expect(response.signedRenewalInfo).toBe("signed_renewal_info");
+    expect(response.signedTransactionInfo).toBe("signed_transaction_info");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionRevokeResponse", () => {
+    const response = decode(
+      AdvancedCommerceSubscriptionRevokeResponseSchema,
+      "tests/resources/models/advancedCommerceSubscriptionRevokeResponse.json",
+    );
+    expect(response.signedRenewalInfo).toBe("signed_renewal_info");
+    expect(response.signedTransactionInfo).toBe("signed_transaction_info");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionPriceChangeResponse", () => {
+    const response = decode(
+      AdvancedCommerceSubscriptionPriceChangeResponseSchema,
+      "tests/resources/models/advancedCommerceSubscriptionPriceChangeResponse.json",
+    );
+    expect(response.signedRenewalInfo).toBe("signed_renewal_info");
+    expect(response.signedTransactionInfo).toBe("signed_transaction_info");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionChangeMetadataResponse", () => {
+    const response = decode(
+      AdvancedCommerceSubscriptionChangeMetadataResponseSchema,
+      "tests/resources/models/advancedCommerceSubscriptionChangeMetadataResponse.json",
+    );
+    expect(response.signedRenewalInfo).toBe("signed_renewal_info");
+    expect(response.signedTransactionInfo).toBe("signed_transaction_info");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionMigrateRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionMigrateRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionMigrateRequest.json",
+    );
+    expect(request.descriptors).toBeTruthy();
+    expect(request.items).toBeTruthy();
+    expect(request.taxCode).toBe("taxCode");
+    expect(request.targetProductId).toBe("targetProductId");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionModifyInAppRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionModifyInAppRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionModifyInAppRequest.json",
+    );
+    expect(request.currency).toBe("USD");
+    expect(request.descriptors).toBeTruthy();
+    expect(request.taxCode).toBe("taxCode");
+    expect(request.transactionId).toBe("transactionId");
+    expect(request.retainBillingCycle).toBe(true);
+  });
+
+  it("decodes AdvancedCommerceSubscriptionReactivateInAppRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionReactivateInAppRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionReactivateInAppRequest.json",
+    );
+    expect(request.items).toBeTruthy();
+    expect(request.transactionId).toBe("transactionId");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionChangeMetadataRequest", () => {
+    const request = decode(
+      AdvancedCommerceSubscriptionChangeMetadataRequestSchema,
+      "tests/resources/models/advancedCommerceSubscriptionChangeMetadataRequest.json",
+    );
+    expect(request.items).toBeTruthy();
+    expect(request.requestInfo).toBeTruthy();
+  });
+
+  it("decodes AdvancedCommerceSubscriptionMigrateDescriptors", () => {
+    const descriptors = decode(
+      AdvancedCommerceSubscriptionMigrateDescriptorsSchema,
+      "tests/resources/models/advancedCommerceSubscriptionMigrateDescriptors.json",
+    );
+    expect(descriptors.description).toBe("description");
+    expect(descriptors.displayName).toBe("displayName");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionModifyDescriptors", () => {
+    const descriptors = decode(
+      AdvancedCommerceSubscriptionModifyDescriptorsSchema,
+      "tests/resources/models/advancedCommerceSubscriptionModifyDescriptors.json",
+    );
+    expect(descriptors.description).toBe("description");
+    expect(descriptors.displayName).toBe("displayName");
+    expect(descriptors.effective).toBe(AdvancedCommerceEffective.IMMEDIATELY);
+  });
+
+  it("decodes AdvancedCommerceSubscriptionChangeMetadataDescriptors", () => {
+    const descriptors = decode(
+      AdvancedCommerceSubscriptionChangeMetadataDescriptorsSchema,
+      "tests/resources/models/advancedCommerceSubscriptionChangeMetadataDescriptors.json",
+    );
+    expect(descriptors.description).toBe("description");
+    expect(descriptors.displayName).toBe("displayName");
+    expect(descriptors.effective).toBe(AdvancedCommerceEffective.IMMEDIATELY);
+  });
+
+  it("decodes AdvancedCommerceSubscriptionMigrateItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionMigrateItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionMigrateItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+    expect(item.description).toBe("description");
+    expect(item.displayName).toBe("displayName");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionMigrateRenewalItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionMigrateRenewalItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionMigrateRenewalItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionModifyAddItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionModifyAddItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionModifyAddItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+    expect(item.price).toBe(12000);
+  });
+
+  it("decodes AdvancedCommerceSubscriptionModifyChangeItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionModifyChangeItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionModifyChangeItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+    expect(item.currentSKU).toBe("currentSku");
+    expect(item.price).toBe(13000);
+    expect(item.effective).toBe(AdvancedCommerceEffective.IMMEDIATELY);
+    expect(item.reason).toBe(AdvancedCommerceReason.UPGRADE);
+  });
+
+  it("decodes AdvancedCommerceSubscriptionModifyRemoveItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionModifyRemoveItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionModifyRemoveItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionModifyPeriodChange", () => {
+    const change = decode(
+      AdvancedCommerceSubscriptionModifyPeriodChangeSchema,
+      "tests/resources/models/advancedCommerceSubscriptionModifyPeriodChange.json",
+    );
+    expect(change.period).toBe(AdvancedCommercePeriod.P3M);
+    expect(change.effective).toBe(AdvancedCommerceEffective.IMMEDIATELY);
+  });
+
+  it("decodes AdvancedCommerceSubscriptionPriceChangeItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionPriceChangeItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionPriceChangeItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+    expect(item.price).toBe(16000);
+    expect(item.dependentSKUs?.[0]).toBe("dependentSKU");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionReactivateItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionReactivateItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionReactivateItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionChangeMetadataItem", () => {
+    const item = decode(
+      AdvancedCommerceSubscriptionChangeMetadataItemSchema,
+      "tests/resources/models/advancedCommerceSubscriptionChangeMetadataItem.json",
+    );
+    expect(item.SKU).toBe("sku");
+    expect(item.currentSKU).toBe("currentSku");
+    expect(item.effective).toBe(AdvancedCommerceEffective.NEXT_BILL_CYCLE);
+  });
+
+  it("decodes AdvancedCommerceRequestInfo", () => {
+    const info = decode(
+      AdvancedCommerceRequestInfoSchema,
+      "tests/resources/models/advancedCommerceRequestInfo.json",
+    );
+    expect(info.requestReferenceId).toBe("550e8400-e29b-41d4-a716-446655440010");
+    expect(info.appAccountToken).toBe("660e8400-e29b-41d4-a716-446655440011");
+    expect(info.consistencyToken).toBe("consistency_token_value");
+  });
+
+  it("decodes AdvancedCommerceSubscriptionMigrateResponse", () => {
+    const response = decode(
+      AdvancedCommerceSubscriptionMigrateResponseSchema,
+      "tests/resources/models/advancedCommerceSubscriptionMigrateResponse.json",
+    );
+    expect(response.signedRenewalInfo).toBe("signed_renewal_info_value");
+    expect(response.signedTransactionInfo).toBe("signed_transaction_info_value");
+  });
+
+  it("preserves OneTimeChargeCreateRequest operation and version", () => {
+    const request = Schema.decodeUnknownSync(AdvancedCommerceOneTimeChargeCreateRequestSchema)({
+      ...JSON.parse(
+        readFile("tests/resources/models/advancedCommerceOneTimeChargeCreateRequest.json"),
+      ),
+      operation: "CREATE_ONE_TIME_CHARGE",
+      version: "1",
+    });
+
+    const serialized = JSON.parse(JSON.stringify(unwrapOptionsDeep(request)));
+    expect(serialized.operation).toBe("CREATE_ONE_TIME_CHARGE");
+    expect(serialized.version).toBe("1");
+  });
+
+  it("preserves SubscriptionCreateRequest operation and version", () => {
+    const request = Schema.decodeUnknownSync(AdvancedCommerceSubscriptionCreateRequestSchema)({
+      ...JSON.parse(
+        readFile("tests/resources/models/advancedCommerceSubscriptionCreateRequest.json"),
+      ),
+      operation: "CREATE_SUBSCRIPTION",
+      version: "1",
+    });
+
+    const serialized = JSON.parse(JSON.stringify(unwrapOptionsDeep(request)));
+    expect(serialized.operation).toBe("CREATE_SUBSCRIPTION");
+    expect(serialized.version).toBe("1");
+  });
+
+  it("preserves SubscriptionModifyInAppRequest operation and version", () => {
+    const request = Schema.decodeUnknownSync(AdvancedCommerceSubscriptionModifyInAppRequestSchema)({
+      ...JSON.parse(
+        readFile("tests/resources/models/advancedCommerceSubscriptionModifyInAppRequest.json"),
+      ),
+      operation: "MODIFY_SUBSCRIPTION",
+      version: "1",
+    });
+
+    const serialized = JSON.parse(JSON.stringify(unwrapOptionsDeep(request)));
+    expect(serialized.operation).toBe("MODIFY_SUBSCRIPTION");
+    expect(serialized.version).toBe("1");
+  });
+
+  it("preserves SubscriptionReactivateInAppRequest operation and version", () => {
+    const request = Schema.decodeUnknownSync(
+      AdvancedCommerceSubscriptionReactivateInAppRequestSchema,
+    )({
+      ...JSON.parse(
+        readFile("tests/resources/models/advancedCommerceSubscriptionReactivateInAppRequest.json"),
+      ),
+      operation: "REACTIVATE_SUBSCRIPTION",
+      version: "1",
+    });
+
+    const serialized = JSON.parse(JSON.stringify(unwrapOptionsDeep(request)));
+    expect(serialized.operation).toBe("REACTIVATE_SUBSCRIPTION");
+    expect(serialized.version).toBe("1");
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/api-client.test.ts b/packages/app-store-server-sdk/tests/api-client.test.ts
new file mode 100644
index 000000000..0d0687eb9
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/api-client.test.ts
@@ -0,0 +1,978 @@
+import { describe, expect, it } from "vitest";
+import { Cause, Effect } from "effect";
+import { AppStoreServerSdkClient } from "../src/client/index.ts";
+import { Environment, Status, GetTransactionHistoryVersion } from "../src/schemas/index.ts";
+import {
+  AppStoreInternalError,
+  AppStoreRateLimitError,
+  AppStoreValidationError,
+  AppStoreNotFoundError,
+  AppStoreSchemaError,
+} from "../src/errors/index.ts";
+import {
+  createMockSdk,
+  createMockHttpClient,
+  getClientWithMockedResponse,
+  getClientWithBody,
+  TEST_SIGNING_KEY,
+  unwrapOptionsDeep,
+} from "./util.ts";
+
+describe("The API client", () => {
+  it("calls getTransactionInfo", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/transactionInfoResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/transactions/1234");
+      },
+    );
+
+    const result = unwrapOptionsDeep(await Effect.runPromise(client.getTransactionInfo("1234")));
+    expect(result).toBeTruthy();
+    expect(result.signedTransactionInfo).toBe("signed_transaction_info_value");
+  });
+
+  it("calls getTransactionHistory V1", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/transactionHistoryResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toContain("/inApps/v1/history/1234");
+        expect(path).toContain("revision=revision_input");
+        expect(path).toContain("startDate=123455");
+        expect(path).toContain("endDate=123456");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getTransactionHistory(
+          "1234",
+          "revision_input",
+          {
+            startDate: 123455,
+            endDate: 123456,
+            productIds: ["com.example.1", "com.example.2"],
+            productTypes: ["CONSUMABLE", "AUTO_RENEWABLE"],
+            sort: "ASCENDING",
+            subscriptionGroupIdentifiers: ["sub_group_id", "sub_group_id_2"],
+            inAppOwnershipType: "FAMILY_SHARED",
+            revoked: false,
+          },
+          GetTransactionHistoryVersion.V1,
+        ),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.revision).toBe("revision_output");
+    expect(result.hasMore).toBe(true);
+    expect(result.bundleId).toBe("com.example");
+    expect(result.appAppleId).toBe(323232);
+    expect(result.environment).toBe(Environment.LOCAL_TESTING);
+    expect(result.signedTransactions).toEqual([
+      "signed_transaction_value",
+      "signed_transaction_value2",
+    ]);
+  });
+
+  it("calls getTransactionHistory V2", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/transactionHistoryResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toContain("/inApps/v2/history/1234");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getTransactionHistory(
+          "1234",
+          "revision_input",
+          {
+            startDate: 123455,
+            endDate: 123456,
+            productIds: ["com.example.1"],
+            sort: "ASCENDING",
+          },
+          GetTransactionHistoryVersion.V2,
+        ),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.revision).toBe("revision_output");
+  });
+
+  it("calls getAllSubscriptionStatuses", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getAllSubscriptionStatusesResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toContain("/inApps/v1/subscriptions/4321");
+        expect(path).toContain("status=2");
+        expect(path).toContain("status=1");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getAllSubscriptionStatuses("4321", [Status.EXPIRED, Status.ACTIVE]),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.environment).toBe(Environment.LOCAL_TESTING);
+    expect(result.bundleId).toBe("com.example");
+    expect(result.appAppleId).toBe(5454545);
+    expect(result.data).toHaveLength(2);
+    expect(result.data?.[0]?.subscriptionGroupIdentifier).toBe("sub_group_one");
+  });
+
+  it("calls getRefundHistory", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getRefundHistoryResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toContain("/inApps/v2/refund/lookup/555555");
+        expect(path).toContain("revision=revision_input");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(client.getRefundHistory("555555", "revision_input")),
+    );
+    expect(result).toBeTruthy();
+    expect(result.signedTransactions).toEqual(["signed_transaction_one", "signed_transaction_two"]);
+    expect(result.revision).toBe("revision_output");
+    expect(result.hasMore).toBe(true);
+  });
+
+  it("calls lookUpOrderId", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/lookupOrderIdResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/lookup/W002182");
+      },
+    );
+
+    const result = unwrapOptionsDeep(await Effect.runPromise(client.lookUpOrderId("W002182")));
+    expect(result).toBeTruthy();
+    expect(result.status).toBe(1);
+    expect(result.signedTransactions).toEqual(["signed_transaction_one", "signed_transaction_two"]);
+  });
+
+  it("calls extendSubscriptionRenewalDate", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/extendSubscriptionRenewalDateResponse.json",
+      200,
+      (path, method, body) => {
+        expect(method).toBe("PUT");
+        expect(path).toBe("/inApps/v1/subscriptions/extend/4124214");
+        expect(body).toBeTruthy();
+        const parsed = JSON.parse(body!);
+        expect(parsed.extendByDays).toBe(45);
+        expect(parsed.extendReasonCode).toBe(1);
+        expect(parsed.requestIdentifier).toBe("fdf964a4-233b-486c-aac1-97d8d52688ac");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.extendSubscriptionRenewalDate("4124214", {
+          extendByDays: 45,
+          extendReasonCode: 1,
+          requestIdentifier: "fdf964a4-233b-486c-aac1-97d8d52688ac",
+        }),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.originalTransactionId).toBe("2312412");
+    expect(result.webOrderLineItemId).toBe("9993");
+    expect(result.success).toBe(true);
+    expect(result.effectiveDate).toBe(1698148900000);
+  });
+
+  it("calls extendRenewalDateForAllActiveSubscribers", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/extendRenewalDateForAllActiveSubscribersResponse.json",
+      200,
+      (path, method, body) => {
+        expect(method).toBe("POST");
+        expect(path).toBe("/inApps/v1/subscriptions/extend/mass");
+        expect(body).toBeTruthy();
+        const parsed = JSON.parse(body!);
+        expect(parsed.extendByDays).toBe(45);
+        expect(parsed.extendReasonCode).toBe(1);
+        expect(parsed.requestIdentifier).toBe("fdf964a4-233b-486c-aac1-97d8d52688ac");
+        expect(parsed.storefrontCountryCodes).toEqual(["USA", "MEX"]);
+        expect(parsed.productId).toBe("com.example.productId");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.extendRenewalDateForAllActiveSubscribers({
+          extendByDays: 45,
+          extendReasonCode: 1,
+          requestIdentifier: "fdf964a4-233b-486c-aac1-97d8d52688ac",
+          storefrontCountryCodes: ["USA", "MEX"],
+          productId: "com.example.productId",
+        }),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.requestIdentifier).toBe("758883e8-151b-47b7-abd0-60c4d804c2f5");
+  });
+
+  it("calls getStatusOfSubscriptionRenewalDateExtensions", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getStatusOfSubscriptionRenewalDateExtensionsResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe(
+          "/inApps/v1/subscriptions/extend/mass/com.example.product/20fba8a0-2b80-4a7d-a17f-85c1854727f8",
+        );
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getStatusOfSubscriptionRenewalDateExtensions(
+          "20fba8a0-2b80-4a7d-a17f-85c1854727f8",
+          "com.example.product",
+        ),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.requestIdentifier).toBe("20fba8a0-2b80-4a7d-a17f-85c1854727f8");
+    expect(result.complete).toBe(true);
+    expect(result.completeDate).toBe(1698148900000);
+    expect(result.succeededCount).toBe(30);
+    expect(result.failedCount).toBe(2);
+  });
+
+  it("calls requestTestNotification", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/requestTestNotificationResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("POST");
+        expect(path).toBe("/inApps/v1/notifications/test");
+      },
+    );
+
+    const result = unwrapOptionsDeep(await Effect.runPromise(client.requestTestNotification()));
+    expect(result).toBeTruthy();
+    expect(result.testNotificationToken).toBe("ce3af791-365e-4c60-841b-1674b43c1609");
+  });
+
+  it("calls getTestNotificationStatus", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getTestNotificationStatusResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/notifications/test/8cd2974c-f905-492a-bf9a-b2f47c791d19");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getTestNotificationStatus("8cd2974c-f905-492a-bf9a-b2f47c791d19"),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.signedPayload).toBe("signed_payload");
+    expect(result.sendAttempts).toHaveLength(2);
+  });
+
+  it("calls getNotificationHistory", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getNotificationHistoryResponse.json",
+      200,
+      (path, method, body) => {
+        expect(method).toBe("POST");
+        expect(path).toContain("/inApps/v1/notifications/history");
+        expect(path).toContain("paginationToken=a036bc0e-52b8-4bee-82fc-8c24cb6715d6");
+        expect(body).toBeTruthy();
+        const parsed = JSON.parse(body!);
+        expect(parsed.startDate).toBe(1698148900000);
+        expect(parsed.endDate).toBe(1698148950000);
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getNotificationHistory("a036bc0e-52b8-4bee-82fc-8c24cb6715d6", {
+          startDate: 1698148900000,
+          endDate: 1698148950000,
+        }),
+      ),
+    );
+    expect(result).toBeTruthy();
+    expect(result.paginationToken).toBe("57715481-805a-4283-8499-1c19b5d6b20a");
+    expect(result.hasMore).toBe(true);
+    expect(result.notificationHistory).toHaveLength(2);
+  });
+
+  it("calls sendConsumptionInformation with all fields", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v2/transactions/consumption/49571273");
+      expect(body).toBeTruthy();
+      const parsed = JSON.parse(body!);
+      expect(parsed.customerConsented).toBe(true);
+      expect(parsed.consumptionPercentage).toBe(50000);
+      expect(parsed.deliveryStatus).toBe("DELIVERED");
+      expect(parsed.refundPreference).toBe("GRANT_FULL");
+      expect(parsed.sampleContentProvided).toBe(false);
+    });
+
+    await Effect.runPromise(
+      client.sendConsumptionInformation("49571273", {
+        customerConsented: true,
+        consumptionPercentage: 50000,
+        deliveryStatus: "DELIVERED",
+        refundPreference: "GRANT_FULL",
+        sampleContentProvided: false,
+      }),
+    );
+  });
+
+  it("calls sendConsumptionInformation with only required fields", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v2/transactions/consumption/49571273");
+      expect(body).toBeTruthy();
+      const parsed = JSON.parse(body!);
+      expect(parsed.customerConsented).toBe(true);
+      expect(parsed.deliveryStatus).toBe("UNDELIVERED_QUALITY_ISSUE");
+      expect(parsed.sampleContentProvided).toBe(true);
+      expect(parsed.consumptionPercentage).toBeUndefined();
+      expect(parsed.refundPreference).toBeUndefined();
+    });
+
+    await Effect.runPromise(
+      client.sendConsumptionInformation("49571273", {
+        customerConsented: true,
+        deliveryStatus: "UNDELIVERED_QUALITY_ISSUE",
+        sampleContentProvided: true,
+      }),
+    );
+  });
+
+  it("calls setAppAccountToken", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/transactions/49571273/appAccountToken");
+      expect(body).toBeTruthy();
+      const parsed = JSON.parse(body!);
+      expect(parsed.appAccountToken).toBe("7389a31a-fb6d-4569-a2a6-db7d85d84813");
+    });
+
+    await Effect.runPromise(
+      client.setAppAccountToken("49571273", {
+        appAccountToken: "7389a31a-fb6d-4569-a2a6-db7d85d84813",
+      }),
+    );
+  });
+
+  it("calls getAppTransactionInfo", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/appTransactionInfoResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/transactions/appTransactions/1234");
+      },
+    );
+
+    const result = unwrapOptionsDeep(await Effect.runPromise(client.getAppTransactionInfo("1234")));
+    expect(result).toBeTruthy();
+    expect(result.signedAppTransactionInfo).toBe("signed_app_transaction_info_value");
+  });
+
+  it("calls uploadImage", async () => {
+    const client = getClientWithBody("", 200, (path, method) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/messaging/image/a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+    });
+
+    await Effect.runPromise(
+      client.uploadImage("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890", new Uint8Array([1, 2, 3])),
+    );
+  });
+
+  it("calls deleteImage", async () => {
+    const client = getClientWithBody("", 200, (path, method) => {
+      expect(method).toBe("DELETE");
+      expect(path).toBe("/inApps/v1/messaging/image/a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+    });
+
+    await Effect.runPromise(client.deleteImage("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890"));
+  });
+
+  it("calls getImageList", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getImageListResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/messaging/image/list");
+      },
+    );
+
+    const result = unwrapOptionsDeep(await Effect.runPromise(client.getImageList()));
+    expect(result).toBeTruthy();
+    expect(result.imageIdentifiers).toHaveLength(1);
+    expect(result.imageIdentifiers?.[0]?.imageIdentifier).toBe(
+      "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890",
+    );
+    expect(result.imageIdentifiers?.[0]?.imageState).toBe("APPROVED");
+    expect(result.imageIdentifiers?.[0]?.imageSize).toBe("FULL_SIZE");
+  });
+
+  it("calls uploadMessage", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/messaging/message/a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+      const parsed = JSON.parse(body!);
+      expect(parsed.header).toBe("Header text");
+      expect(parsed.body).toBe("Body text");
+      expect(parsed.image).toBeUndefined();
+    });
+
+    await Effect.runPromise(
+      client.uploadMessage("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890", {
+        header: "Header text",
+        body: "Body text",
+      }),
+    );
+  });
+
+  it("calls uploadMessage with image", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/messaging/message/a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+      const parsed = JSON.parse(body!);
+      expect(parsed.header).toBe("Header text");
+      expect(parsed.body).toBe("Body text");
+      expect(parsed.image.imageIdentifier).toBe("b2c3d4e5-f6a7-8901-b2c3-d4e5f6a78901");
+      expect(parsed.image.altText).toBe("Alt text");
+    });
+
+    await Effect.runPromise(
+      client.uploadMessage("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890", {
+        header: "Header text",
+        body: "Body text",
+        image: {
+          imageIdentifier: "b2c3d4e5-f6a7-8901-b2c3-d4e5f6a78901",
+          altText: "Alt text",
+        },
+      }),
+    );
+  });
+
+  it("calls deleteMessage", async () => {
+    const client = getClientWithBody("", 200, (path, method) => {
+      expect(method).toBe("DELETE");
+      expect(path).toBe("/inApps/v1/messaging/message/a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+    });
+
+    await Effect.runPromise(client.deleteMessage("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890"));
+  });
+
+  it("calls getMessageList", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getMessageListResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/messaging/message/list");
+      },
+    );
+
+    const result = unwrapOptionsDeep(await Effect.runPromise(client.getMessageList()));
+    expect(result).toBeTruthy();
+    expect(result.messageIdentifiers).toHaveLength(1);
+    expect(result.messageIdentifiers?.[0]?.messageIdentifier).toBe(
+      "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890",
+    );
+    expect(result.messageIdentifiers?.[0]?.messageState).toBe("APPROVED");
+  });
+
+  it("calls configureDefaultMessage", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/messaging/default/com.example.product/en-US");
+      const parsed = JSON.parse(body!);
+      expect(parsed.messageIdentifier).toBe("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+    });
+
+    await Effect.runPromise(
+      client.configureDefaultMessage("com.example.product", "en-US", {
+        messageIdentifier: "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890",
+      }),
+    );
+  });
+
+  it("calls deleteDefaultMessage", async () => {
+    const client = getClientWithBody("", 200, (path, method) => {
+      expect(method).toBe("DELETE");
+      expect(path).toBe("/inApps/v1/messaging/default/com.example.product/en-US");
+    });
+
+    await Effect.runPromise(client.deleteDefaultMessage("com.example.product", "en-US"));
+  });
+
+  // Error handling tests
+  it("handles general internal error", async () => {
+    const client = getClientWithMockedResponse("tests/resources/models/apiException.json", 500);
+
+    const result = await Effect.runPromiseExit(client.getTransactionInfo("1234"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreInternalError;
+        expect(apiError._tag).toBe("AppStoreInternalError");
+        expect(apiError.httpStatusCode).toBe(500);
+        expect(apiError.apiError).toBe(5000000);
+        expect(apiError.errorMessage).toBe("An unknown error occurred.");
+      }
+    }
+  });
+
+  it("handles rate limit exceeded error", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/apiTooManyRequestsException.json",
+      429,
+    );
+
+    const result = await Effect.runPromiseExit(client.getTransactionInfo("1234"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreRateLimitError;
+        expect(apiError._tag).toBe("AppStoreRateLimitError");
+        expect(apiError.httpStatusCode).toBe(429);
+      }
+    }
+  });
+
+  it("handles unknown error code", async () => {
+    const client = getClientWithMockedResponse("tests/resources/models/apiUnknownError.json", 400);
+
+    const result = await Effect.runPromiseExit(client.getTransactionInfo("1234"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreValidationError;
+        expect(apiError._tag).toBe("AppStoreValidationError");
+        expect(apiError.httpStatusCode).toBe(400);
+        expect(apiError.apiError).toBe(9990000);
+        expect(apiError.errorMessage).toBe("Testing error.");
+      }
+    }
+  });
+
+  it("accepts unknown environment strings in transaction history responses", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/transactionHistoryResponseWithMalformedEnvironment.json",
+      200,
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getTransactionHistory(
+          "1234",
+          "revision_input",
+          {
+            productTypes: ["CONSUMABLE", "AUTO_RENEWABLE"],
+            endDate: 123456,
+            startDate: 123455,
+            revoked: false,
+            inAppOwnershipType: "FAMILY_SHARED",
+            productIds: ["com.example.1", "com.example.2"],
+            subscriptionGroupIdentifiers: ["sub_group_id", "sub_group_id_2"],
+            sort: "ASCENDING",
+          },
+          GetTransactionHistoryVersion.V2,
+        ),
+      ),
+    );
+    expect(result.environment).toBe("LocalTestingxxx");
+  });
+
+  it("rejects malformed appAppleId in transaction history responses", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/transactionHistoryResponseWithMalformedAppAppleId.json",
+      200,
+    );
+
+    const result = await Effect.runPromiseExit(
+      client.getTransactionHistory(
+        "1234",
+        "revision_input",
+        {
+          productTypes: ["CONSUMABLE", "AUTO_RENEWABLE"],
+          endDate: 123456,
+          startDate: 123455,
+          revoked: false,
+          inAppOwnershipType: "FAMILY_SHARED",
+          productIds: ["com.example.1", "com.example.2"],
+          subscriptionGroupIdentifiers: ["sub_group_id", "sub_group_id_2"],
+          sort: "ASCENDING",
+        },
+        GetTransactionHistoryVersion.V2,
+      ),
+    );
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreSchemaError;
+      expect(apiError._tag).toBe("AppStoreSchemaError");
+      expect(apiError.httpStatusCode).toBe(200);
+    }
+  });
+
+  it("handles invalid app account token UUID error", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/invalidAppAccountTokenUUIDError.json",
+      400,
+    );
+
+    const result = await Effect.runPromiseExit(
+      client.setAppAccountToken("49571273", {
+        appAccountToken: "abc",
+      }),
+    );
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreValidationError;
+        expect(apiError._tag).toBe("AppStoreValidationError");
+        expect(apiError.httpStatusCode).toBe(400);
+        expect(apiError.apiError).toBe(4000183);
+      }
+    }
+  });
+
+  it("handles family transaction not supported error", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/familyTransactionNotSupportedError.json",
+      400,
+    );
+
+    const result = await Effect.runPromiseExit(
+      client.setAppAccountToken("1234", {
+        appAccountToken: "7389a31a-fb6d-4569-a2a6-db7d85d84813",
+      }),
+    );
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreValidationError;
+        expect(apiError._tag).toBe("AppStoreValidationError");
+        expect(apiError.httpStatusCode).toBe(400);
+        expect(apiError.apiError).toBe(4000185);
+      }
+    }
+  });
+
+  it("handles transaction id not original transaction id error", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/transactionIdNotOriginalTransactionId.json",
+      400,
+    );
+
+    const result = await Effect.runPromiseExit(
+      client.setAppAccountToken("1234", {
+        appAccountToken: "7389a31a-fb6d-4569-a2a6-db7d85d84813",
+      }),
+    );
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreValidationError;
+        expect(apiError._tag).toBe("AppStoreValidationError");
+        expect(apiError.httpStatusCode).toBe(400);
+        expect(apiError.apiError).toBe(4000187);
+      }
+    }
+  });
+
+  it("handles invalid transaction id error for getAppTransactionInfo", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/invalidTransactionIdError.json",
+      400,
+    );
+
+    const result = await Effect.runPromiseExit(client.getAppTransactionInfo("invalid_id"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreValidationError;
+        expect(apiError._tag).toBe("AppStoreValidationError");
+      }
+    }
+  });
+
+  it("handles app transaction does not exist error", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/appTransactionDoesNotExistError.json",
+      404,
+    );
+
+    const result = await Effect.runPromiseExit(client.getAppTransactionInfo("5678"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreNotFoundError;
+        expect(apiError._tag).toBe("AppStoreNotFoundError");
+      }
+    }
+  });
+
+  it("handles transaction id not found error", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/transactionIdNotFoundError.json",
+      404,
+    );
+
+    const result = await Effect.runPromiseExit(client.getAppTransactionInfo("9999"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      {
+        const apiError = unwrapOptionsDeep(Cause.squash(result.cause)) as AppStoreNotFoundError;
+        expect(apiError._tag).toBe("AppStoreNotFoundError");
+      }
+    }
+  });
+
+  it("calls sendConsumptionData (V1)", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/transactions/consumption/49571273");
+      const parsed = JSON.parse(body!);
+      expect(parsed.customerConsented).toBe(true);
+      expect(parsed.consumptionStatus).toBe(1);
+      expect(parsed.platform).toBe(2);
+      expect(parsed.sampleContentProvided).toBe(false);
+      expect(parsed.deliveryStatus).toBe(3);
+      expect(parsed.appAccountToken).toBe("7389a31a-fb6d-4569-a2a6-db7d85d84813");
+      expect(parsed.accountTenure).toBe(4);
+      expect(parsed.playTime).toBe(5);
+      expect(parsed.lifetimeDollarsRefunded).toBe(6);
+      expect(parsed.lifetimeDollarsPurchased).toBe(7);
+      expect(parsed.userStatus).toBe(4);
+      expect(parsed.refundPreference).toBe(3);
+    });
+
+    await Effect.runPromise(
+      client.sendConsumptionData("49571273", {
+        customerConsented: true,
+        consumptionStatus: 1,
+        platform: 2,
+        sampleContentProvided: false,
+        deliveryStatus: 3,
+        appAccountToken: "7389a31a-fb6d-4569-a2a6-db7d85d84813",
+        accountTenure: 4,
+        playTime: 5,
+        lifetimeDollarsRefunded: 6,
+        lifetimeDollarsPurchased: 7,
+        userStatus: 4,
+        refundPreference: 3,
+      }),
+    );
+  });
+
+  it("calls finishTransaction", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("POST");
+      expect(path).toBe("/inApps/v1/transactions/1234/finish");
+      expect(body).toBeUndefined();
+    });
+
+    await Effect.runPromise(client.finishTransaction("1234"));
+  });
+
+  it("calls uploadImage with imageSize", async () => {
+    const client = getClientWithBody("", 200, (path, method) => {
+      expect(method).toBe("PUT");
+      expect(path).toContain("/inApps/v1/messaging/image/a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+      expect(path).toContain("imageSize=FULL_SIZE");
+    });
+
+    await Effect.runPromise(
+      client.uploadImage(
+        "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890",
+        new Uint8Array([1, 2, 3]),
+        "FULL_SIZE",
+      ),
+    );
+  });
+
+  it("calls getDefaultMessage", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getDefaultMessageResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/messaging/default/com.example.product/en-US");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(client.getDefaultMessage("com.example.product", "en-US")),
+    );
+    expect(result.messageIdentifier).toBe("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+  });
+
+  it("calls configureRealtimeURL", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/messaging/realtime/url");
+      const parsed = JSON.parse(body!);
+      expect(parsed.realtimeURL).toBe("https://example.com/realtime");
+    });
+
+    await Effect.runPromise(
+      client.configureRealtimeURL({ realtimeURL: "https://example.com/realtime" }),
+    );
+  });
+
+  it("calls deleteRealtimeURL", async () => {
+    const client = getClientWithBody("", 200, (path, method) => {
+      expect(method).toBe("DELETE");
+      expect(path).toBe("/inApps/v1/messaging/realtime/url");
+    });
+
+    await Effect.runPromise(client.deleteRealtimeURL());
+  });
+
+  it("calls getRealtimeURL", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/getRealtimeUrlResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe("/inApps/v1/messaging/realtime/url");
+      },
+    );
+
+    const result = unwrapOptionsDeep(await Effect.runPromise(client.getRealtimeURL()));
+    expect(result.realtimeURL).toBe("https://example.com/realtime");
+  });
+
+  it("calls initiatePerformanceTest", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/performanceTestResponse.json",
+      200,
+      (path, method, body) => {
+        expect(method).toBe("POST");
+        expect(path).toBe("/inApps/v1/messaging/performanceTest");
+        const parsed = JSON.parse(body!);
+        expect(parsed.originalTransactionId).toBe("70000500092808");
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.initiatePerformanceTest({ originalTransactionId: "70000500092808" }),
+      ),
+    );
+    expect(result.requestId).toBe("c4b87a1d-2e3f-4a5b-9c6d-7e8f9a0b1c2d");
+    expect(result.config?.maxConcurrentRequests).toBe(10);
+    expect(result.config?.totalRequests).toBe(100);
+    expect(result.config?.totalDuration).toBe(60000);
+    expect(result.config?.responseTimeThreshold).toBe(500);
+    expect(result.config?.successRateThreshold).toBe(95);
+  });
+
+  it("calls getPerformanceTestResults", async () => {
+    const client = getClientWithMockedResponse(
+      "tests/resources/models/performanceTestResultResponse.json",
+      200,
+      (path, method) => {
+        expect(method).toBe("GET");
+        expect(path).toBe(
+          "/inApps/v1/messaging/performanceTest/result/c4b87a1d-2e3f-4a5b-9c6d-7e8f9a0b1c2d",
+        );
+      },
+    );
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(
+        client.getPerformanceTestResults("c4b87a1d-2e3f-4a5b-9c6d-7e8f9a0b1c2d"),
+      ),
+    );
+    expect(result.config?.maxConcurrentRequests).toBe(10);
+    expect(result.target).toBe("https://example.com/retention");
+    expect(result.result).toBe("PASS");
+    expect(result.successRate).toBe(98);
+    expect(result.numPending).toBe(0);
+    expect(result.responseTimes?.average).toBe(120);
+    expect(result.responseTimes?.p50).toBe(100);
+    expect(result.responseTimes?.p90).toBe(200);
+    expect(result.responseTimes?.p95).toBe(250);
+    expect(result.responseTimes?.p99).toBe(400);
+    expect(result.failures?.TIMED_OUT).toBe(1);
+    expect(result.failures?.NO_RESPONSE).toBe(1);
+  });
+
+  it("calls uploadMessage with image and bullet points", async () => {
+    const client = getClientWithBody("", 200, (path, method, body) => {
+      expect(method).toBe("PUT");
+      expect(path).toBe("/inApps/v1/messaging/message/a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+      const parsed = JSON.parse(body!);
+      expect(parsed.header).toBe("Header text");
+      expect(parsed.body).toBe("Body text");
+      expect(parsed.headerPosition).toBe("ABOVE_IMAGE");
+      expect(parsed.image.imageIdentifier).toBe("b2c3d4e5-f6a7-8901-b2c3-d4e5f6a78901");
+      expect(parsed.image.altText).toBe("Alt text");
+      expect(parsed.bulletPoints).toHaveLength(1);
+      expect(parsed.bulletPoints[0].text).toBe("Bullet text");
+      expect(parsed.bulletPoints[0].imageIdentifier).toBe("c3d4e5f6-a7b8-9012-c3d4-e5f6a7b89012");
+      expect(parsed.bulletPoints[0].altText).toBe("Bullet alt text");
+    });
+
+    await Effect.runPromise(
+      client.uploadMessage("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890", {
+        header: "Header text",
+        body: "Body text",
+        headerPosition: "ABOVE_IMAGE",
+        image: {
+          imageIdentifier: "b2c3d4e5-f6a7-8901-b2c3-d4e5f6a78901",
+          altText: "Alt text",
+        },
+        bulletPoints: [
+          {
+            text: "Bullet text",
+            imageIdentifier: "c3d4e5f6-a7b8-9012-c3d4-e5f6a7b89012",
+            altText: "Bullet alt text",
+          },
+        ],
+      }),
+    );
+  });
+
+  it("throws when the XCODE environment is used for the API client", () => {
+    const sdk = createMockSdk(createMockHttpClient("", 200));
+    expect(() =>
+      AppStoreServerSdkClient.make(sdk, {
+        signingKey: TEST_SIGNING_KEY,
+        keyId: "keyId",
+        issuerId: "issuerId",
+        bundleId: "bundleId",
+        environment: Environment.XCODE,
+      }),
+    ).toThrow(/Xcode is not a supported environment/);
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/import-ban.test.ts b/packages/app-store-server-sdk/tests/import-ban.test.ts
new file mode 100644
index 000000000..8cf44e7d9
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/import-ban.test.ts
@@ -0,0 +1,65 @@
+import { describe, expect, it } from "vitest";
+import fs from "node:fs";
+import path from "node:path";
+
+/**
+ * Workers-compatibility gate.
+ *
+ * The shipped SDK source (`src/`) must run unchanged on Cloudflare Workers
+ * (workerd), which has no Node built-ins, no `Buffer`, and cannot load
+ * `jsonwebtoken`/`jsrsasign`. This test fails if any of those creep back in —
+ * the static guard the audit called for, runnable in the normal Node suite.
+ *
+ * Note: this scans `src/` only. Test files run on Node and may use `node:fs`,
+ * `Buffer`, etc.
+ */
+const SRC_DIR = path.join(process.cwd(), "src");
+
+const FORBIDDEN: ReadonlyArray<{ label: string; pattern: RegExp }> = [
+  { label: "node: builtin import", pattern: /\bfrom\s+["']node:[^"']+["']/ },
+  { label: "node: builtin require", pattern: /\brequire\(\s*["']node:[^"']+["']\)/ },
+  { label: "bare 'crypto' import", pattern: /\bfrom\s+["']crypto["']/ },
+  { label: "jsonwebtoken import", pattern: /\bfrom\s+["']jsonwebtoken["']/ },
+  { label: "jsrsasign import", pattern: /\bfrom\s+["']jsrsasign["']/ },
+  { label: "Buffer usage", pattern: /\bBuffer\s*[.(]/ },
+  { label: "new Buffer", pattern: /\bnew\s+Buffer\b/ },
+];
+
+const walk = (dir: string): string[] => {
+  const out: string[] = [];
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      out.push(...walk(full));
+    } else if (entry.isFile() && full.endsWith(".ts")) {
+      out.push(full);
+    }
+  }
+  return out;
+};
+
+describe("Workers compatibility: no Node-only APIs in src", () => {
+  it("has zero node:/Buffer/jsonwebtoken/jsrsasign references in shipped source", () => {
+    const files = walk(SRC_DIR);
+    expect(files.length).toBeGreaterThan(0);
+
+    const violations: string[] = [];
+    for (const file of files) {
+      const lines = fs.readFileSync(file, "utf-8").split("\n");
+      lines.forEach((line, index) => {
+        for (const { label, pattern } of FORBIDDEN) {
+          if (pattern.test(line)) {
+            violations.push(
+              `${path.relative(SRC_DIR, file)}:${index + 1} [${label}] ${line.trim()}`,
+            );
+          }
+        }
+      });
+    }
+
+    expect(
+      violations,
+      `Node-only APIs found in shipped src (these break on Cloudflare Workers):\n${violations.join("\n")}`,
+    ).toEqual([]);
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/jws-signature-tamper.test.ts b/packages/app-store-server-sdk/tests/jws-signature-tamper.test.ts
new file mode 100644
index 000000000..6d8d65747
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/jws-signature-tamper.test.ts
@@ -0,0 +1,61 @@
+import { describe, expect, it } from "vitest";
+import { Effect } from "effect";
+import { VerificationError, VerificationStatus } from "../src/errors/index.ts";
+import { Environment } from "../src/schemas/index.ts";
+import {
+  getSignedPayloadVerifierWithDefaultAppAppleId,
+  readFile,
+  unwrapOptionsDeep,
+} from "./util.ts";
+
+/**
+ * Negative tests for the real (non-skipped) JWS verification path — the
+ * "fail loud" guarantee. These run a genuinely Apple-signed fixture through the
+ * full WebCrypto path (jose `compactVerify` + `@peculiar/x509` chain) and then
+ * tamper with it: the verifier must reject any byte change, never silently
+ * decode unverified data. This is the test the audit flagged as missing (the
+ * existing suite only had a valid-signature positive case).
+ */
+const flipLastChar = (segment: string): string => {
+  const last = segment[segment.length - 1];
+  const replacement = last === "A" ? "B" : "A";
+  return segment.slice(0, -1) + replacement;
+};
+
+const tamperSegment = (jws: string, index: 1 | 2): string => {
+  const parts = jws.split(".");
+  parts[index] = flipLastChar(parts[index] as string);
+  return parts.join(".");
+};
+
+describe("JWS signature verification fails loud (WebCrypto path)", () => {
+  const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+    Environment.SANDBOX,
+    "com.example",
+  );
+  const validTransaction = readFile("tests/resources/mock_signed_data/transactionInfo");
+
+  it("accepts a genuinely Apple-signed transaction (sanity)", async () => {
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeTransaction(validTransaction)),
+    );
+    expect(result.environment).toBe(Environment.SANDBOX);
+  });
+
+  it("rejects a transaction whose signature byte was flipped", async () => {
+    const tampered = tamperSegment(validTransaction, 2);
+    const exit = await Effect.runPromiseExit(verifier.verifyAndDecodeTransaction(tampered));
+    expect(exit._tag).toBe("Failure");
+    if (exit._tag === "Failure" && exit.cause._tag === "Fail") {
+      const error = exit.cause.error as VerificationError;
+      expect(error._tag).toBe("VerificationError");
+      expect(error.status).toBe(VerificationStatus.VERIFICATION_FAILURE);
+    }
+  });
+
+  it("rejects a transaction whose payload was tampered", async () => {
+    const tampered = tamperSegment(validTransaction, 1);
+    const exit = await Effect.runPromiseExit(verifier.verifyAndDecodeTransaction(tampered));
+    expect(exit._tag).toBe("Failure");
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/jws-verification.test.ts b/packages/app-store-server-sdk/tests/jws-verification.test.ts
new file mode 100644
index 000000000..ad23f2dea
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/jws-verification.test.ts
@@ -0,0 +1,171 @@
+import { describe, expect, it } from "vitest";
+import { Cause, Effect } from "effect";
+import { extractCertificateChain, validateCertificateChain } from "../src/verification/index.ts";
+import { VerificationError, VerificationStatus, CertificateError } from "../src/errors/index.ts";
+
+const ROOT_CA_BASE64_ENCODED =
+  "MIIBgjCCASmgAwIBAgIJALUc5ALiH5pbMAoGCCqGSM49BAMDMDYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlDdXBlcnRpbm8wHhcNMjMwMTA1MjEzMDIyWhcNMzMwMTAyMjEzMDIyWjA2MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJQ3VwZXJ0aW5vMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEc+/Bl+gospo6tf9Z7io5tdKdrlN1YdVnqEhEDXDShzdAJPQijamXIMHf8xWWTa1zgoYTxOKpbuJtDplz1XriTaMgMB4wDAYDVR0TBAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwMDRwAwRAIgemWQXnMAdTad2JDJWng9U4uBBL5mA7WI05H7oH7c6iQCIHiRqMjNfzUAyiu9h6rOU/K+iTR0I/3Y/NSWsXHX+acc";
+
+const INTERMEDIATE_CA_BASE64_ENCODED =
+  "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";
+
+const LEAF_CERT_BASE64_ENCODED =
+  "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";
+
+const INTERMEDIATE_CA_INVALID_OID_BASE64_ENCODED =
+  "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";
+
+const LEAF_CERT_FOR_INTERMEDIATE_CA_INVALID_OID_BASE64_ENCODED =
+  "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";
+
+const LEAF_CERT_INVALID_OID_BASE64_ENCODED =
+  "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";
+
+const EFFECTIVE_DATE = new Date(1761962975000); // October 2025 — within the cert validity window
+
+const toPem = (base64: string): string =>
+  `-----BEGIN CERTIFICATE-----\n${base64}\n-----END CERTIFICATE-----`;
+
+const runVerify = (
+  rootBase64: string,
+  leafBase64: string,
+  intermediateBase64: string,
+  currentTime: Date = EFFECTIVE_DATE,
+): Promise<Cause.Cause<VerificationError | CertificateError> | "ok"> =>
+  Effect.gen(function* () {
+    const chain = yield* extractCertificateChain([leafBase64, intermediateBase64, rootBase64]);
+    yield* validateCertificateChain(chain, {
+      rootCertificates: [toPem(rootBase64)],
+      enableOnlineChecks: false,
+      currentTime,
+    });
+    return "ok" as const;
+  })
+    .pipe(Effect.runPromiseExit)
+    .then((exit) => (exit._tag === "Success" ? "ok" : exit.cause));
+
+describe("JWS Chain Verification", () => {
+  it("validates a valid chain", async () => {
+    const result = await runVerify(
+      ROOT_CA_BASE64_ENCODED,
+      LEAF_CERT_BASE64_ENCODED,
+      INTERMEDIATE_CA_BASE64_ENCODED,
+    );
+    expect(result).toBe("ok");
+  });
+
+  it("rejects a chain with an invalid intermediate OID", async () => {
+    const result = await runVerify(
+      ROOT_CA_BASE64_ENCODED,
+      LEAF_CERT_FOR_INTERMEDIATE_CA_INVALID_OID_BASE64_ENCODED,
+      INTERMEDIATE_CA_INVALID_OID_BASE64_ENCODED,
+    );
+    expect(result).not.toBe("ok");
+    if (result !== "ok") {
+      const err = Cause.squash(result) as VerificationError;
+      expect(err.status).toBe(VerificationStatus.VERIFICATION_FAILURE);
+    }
+  });
+
+  it("rejects a chain with an invalid leaf OID", async () => {
+    const result = await runVerify(
+      ROOT_CA_BASE64_ENCODED,
+      LEAF_CERT_INVALID_OID_BASE64_ENCODED,
+      INTERMEDIATE_CA_BASE64_ENCODED,
+    );
+    expect(result).not.toBe("ok");
+    if (result !== "ok") {
+      const err = Cause.squash(result) as VerificationError;
+      expect(err.status).toBe(VerificationStatus.VERIFICATION_FAILURE);
+    }
+  });
+
+  it("rejects an expired chain", async () => {
+    const result = await runVerify(
+      ROOT_CA_BASE64_ENCODED,
+      LEAF_CERT_BASE64_ENCODED,
+      INTERMEDIATE_CA_BASE64_ENCODED,
+      new Date(2280946846000), // far future, beyond cert validity
+    );
+    expect(result).not.toBe("ok");
+    if (result !== "ok") {
+      const err = Cause.squash(result) as VerificationError;
+      expect(err.status).toBe(VerificationStatus.INVALID_CERTIFICATE);
+    }
+  });
+
+  it("rejects a chain when root is not in trusted roots", async () => {
+    // The real Apple Root CA G3 — totally unrelated to the test chain,
+    // so fingerprint comparison must fail.
+    const otherRoot =
+      "MIICQzCCAcmgAwIBAgIILcX8iNLFS5UwCgYIKoZIzj0EAwMwZzEbMBkGA1UEAwwSQXBwbGUgUm9vdCBDQSAtIEczMSYwJAYDVQQLDB1BcHBsZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTETMBEGA1UECgwKQXBwbGUgSW5jLjELMAkGA1UEBhMCVVMwHhcNMTQwNDMwMTgxOTA2WhcNMzkwNDMwMTgxOTA2WjBnMRswGQYDVQQDDBJBcHBsZSBSb290IENBIC0gRzMxJjAkBgNVBAsMHUFwcGxlIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRMwEQYDVQQKDApBcHBsZSBJbmMuMQswCQYDVQQGEwJVUzB2MBAGByqGSM49AgEGBSuBBAAiA2IABJjpLz1AcqTtkyJygRMc3RCV8cWjTnHcFBbZDuWmBSp3ZHtfTjjTuxxEtX/1H7YyYl3J6YRbTzBPEVoA/VhYDKX1DyxNB0cTddqXl5dvMVztK517IDvYuVTZXpmkOlEKMaNCMEAwHQYDVR0OBBYEFLuw3qFYM4iapIqZ3r6966/ayySrMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMAoGCCqGSM49BAMDA2gAMGUCMQCD6cHEFl4aXTQY2e3v9GwOAEZLuN+yRhHFD/3meoyhpmvOwgPUnPWTxnS4at+qIxUCMG1mihDK1A3UT82NQz60imOlM27jbdoXt2QfyFMm+YhidDkLF1vLUagM6BgD56KyKA==";
+    const result = await runVerify(
+      otherRoot,
+      LEAF_CERT_BASE64_ENCODED,
+      INTERMEDIATE_CA_BASE64_ENCODED,
+    );
+    expect(result).not.toBe("ok");
+    if (result !== "ok") {
+      const err = Cause.squash(result) as VerificationError;
+      expect(err.status).toBe(VerificationStatus.VERIFICATION_FAILURE);
+    }
+  });
+
+  it("rejects an empty roots list", async () => {
+    const program = Effect.gen(function* () {
+      const chain = yield* extractCertificateChain([
+        LEAF_CERT_BASE64_ENCODED,
+        INTERMEDIATE_CA_BASE64_ENCODED,
+        ROOT_CA_BASE64_ENCODED,
+      ]);
+      yield* validateCertificateChain(chain, {
+        rootCertificates: [],
+        enableOnlineChecks: false,
+        currentTime: EFFECTIVE_DATE,
+      });
+    });
+    const exit = await Effect.runPromiseExit(program);
+    expect(exit._tag).toBe("Failure");
+    if (exit._tag === "Failure") {
+      const err = Cause.squash(exit.cause) as VerificationError;
+      expect(err.status).toBe(VerificationStatus.VERIFICATION_FAILURE);
+    }
+  });
+
+  it("rejects a chain of the wrong length", async () => {
+    const program = Effect.gen(function* () {
+      const chain = yield* extractCertificateChain([
+        LEAF_CERT_BASE64_ENCODED,
+        INTERMEDIATE_CA_BASE64_ENCODED,
+      ]);
+      yield* validateCertificateChain(chain, {
+        rootCertificates: [toPem(ROOT_CA_BASE64_ENCODED)],
+        enableOnlineChecks: false,
+        currentTime: EFFECTIVE_DATE,
+      });
+    });
+    const exit = await Effect.runPromiseExit(program);
+    expect(exit._tag).toBe("Failure");
+    if (exit._tag === "Failure") {
+      const err = Cause.squash(exit.cause) as VerificationError;
+      expect(err.status).toBe(VerificationStatus.INVALID_CHAIN_LENGTH);
+    }
+  });
+
+  it("rejects garbage root data", async () => {
+    const program = Effect.gen(function* () {
+      const chain = yield* extractCertificateChain([
+        LEAF_CERT_BASE64_ENCODED,
+        INTERMEDIATE_CA_BASE64_ENCODED,
+        ROOT_CA_BASE64_ENCODED,
+      ]);
+      yield* validateCertificateChain(chain, {
+        rootCertificates: ["not-a-cert"],
+        enableOnlineChecks: false,
+        currentTime: EFFECTIVE_DATE,
+      });
+    });
+    const exit = await Effect.runPromiseExit(program);
+    expect(exit._tag).toBe("Failure");
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/realtime.test.ts b/packages/app-store-server-sdk/tests/realtime.test.ts
new file mode 100644
index 000000000..735567a02
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/realtime.test.ts
@@ -0,0 +1,171 @@
+import { describe, expect, it } from "vitest";
+import { Effect, Schema } from "effect";
+import {
+  AlternateProductSchema,
+  AppDataSchema,
+  BillingPlanType,
+  Environment,
+  MessageSchema,
+  PromotionalOfferSchema,
+  PromotionalOfferSignatureV1Schema,
+  RealtimeAdvancedCommerceInfoSchema,
+  RealtimeResponseBodySchema,
+} from "../src/schemas/index.ts";
+import {
+  createSignedDataFromJson,
+  getDefaultSignedPayloadVerifier,
+  readFile,
+  unwrapOptionsDeep,
+} from "./util.ts";
+
+describe("DecodedRealtimeRequestBody", () => {
+  it("decodes a realtime request through the verifier", async () => {
+    const signed = createSignedDataFromJson("tests/resources/models/decodedRealtimeRequest.json");
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const request = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeRealtimeRequest(signed)),
+    );
+
+    expect(request.originalTransactionId).toBe("99371282");
+    expect(request.appAppleId).toBe(531412);
+    expect(request.productId).toBe("com.example.product");
+    expect(request.userLocale).toBe("en-US");
+    expect(request.requestIdentifier).toBe("3db5c98d-8acf-4e29-831e-8e1f82f9f6e9");
+    expect(request.environment).toBe(Environment.LOCAL_TESTING);
+    expect(request.signedDate).toBe(1698148900000);
+  });
+});
+
+describe("AppData", () => {
+  it("decodes an AppData payload", () => {
+    const json = JSON.parse(readFile("tests/resources/models/appData.json"));
+    const appData = unwrapOptionsDeep(Schema.decodeUnknownSync(AppDataSchema)(json));
+    expect(appData.appAppleId).toBe(987654321);
+    expect(appData.bundleId).toBe("com.example");
+    expect(appData.environment).toBe("Sandbox");
+    expect(appData.signedAppTransactionInfo).toBe("signed-app-transaction-info");
+  });
+
+  it("rejects an AppData payload with an invalid appAppleId type", () => {
+    expect(() =>
+      Schema.decodeUnknownSync(AppDataSchema)({
+        appAppleId: "not-a-number",
+        bundleId: "com.example",
+        environment: "Sandbox",
+        signedAppTransactionInfo: "signed-app-transaction-info",
+      }),
+    ).toThrow();
+  });
+});
+
+describe("RealtimeResponseBody", () => {
+  it("round-trips a message body", () => {
+    const responseBody = {
+      message: { messageIdentifier: "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890" },
+    };
+    const parsed = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(RealtimeResponseBodySchema)(
+        JSON.parse(JSON.stringify(responseBody)),
+      ),
+    );
+    expect(parsed.message?.messageIdentifier).toBe("a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890");
+    expect(parsed.alternateProduct).toBeUndefined();
+    expect(parsed.promotionalOffer).toBeUndefined();
+  });
+
+  it("round-trips an alternateProduct body", () => {
+    const responseBody = {
+      alternateProduct: {
+        messageIdentifier: "b2c3d4e5-f6a7-8901-b2c3-d4e5f6a78901",
+        productId: "com.example.alternate.product",
+        billingPlanType: BillingPlanType.MONTHLY,
+      },
+    };
+    const parsed = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(RealtimeResponseBodySchema)(
+        JSON.parse(JSON.stringify(responseBody)),
+      ),
+    );
+    expect(parsed.alternateProduct?.productId).toBe("com.example.alternate.product");
+    expect(parsed.alternateProduct?.billingPlanType).toBe(BillingPlanType.MONTHLY);
+  });
+
+  it("round-trips a promotionalOffer V2 body", () => {
+    const parsed = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(RealtimeResponseBodySchema)({
+        promotionalOffer: {
+          messageIdentifier: "c3d4e5f6-a789-0123-c3d4-e5f6a7890123",
+          promotionalOfferSignatureV2: "signature2",
+        },
+      }),
+    );
+    expect(parsed.promotionalOffer?.promotionalOfferSignatureV2).toBe("signature2");
+    expect(parsed.promotionalOffer?.promotionalOfferSignatureV1).toBeUndefined();
+  });
+
+  it("round-trips a promotionalOffer V1 body", () => {
+    const promotionalOffer = {
+      messageIdentifier: "d4e5f6a7-8901-2345-d4e5-f6a789012345",
+      promotionalOfferSignatureV1: {
+        encodedSignature: "base64encodedSignature",
+        productId: "com.example.product",
+        nonce: "e5f6a789-0123-4567-e5f6-a78901234567",
+        timestamp: 1698148900000,
+        keyId: "keyId123",
+        offerIdentifier: "offer123",
+        appAccountToken: "f6a78901-2345-6789-f6a7-890123456789",
+      },
+    };
+    const parsed = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(RealtimeResponseBodySchema)({
+        promotionalOffer,
+      }),
+    );
+    const v1 = parsed.promotionalOffer?.promotionalOfferSignatureV1;
+    expect(v1?.productId).toBe("com.example.product");
+    expect(v1?.offerIdentifier).toBe("offer123");
+    expect(v1?.nonce).toBe("e5f6a789-0123-4567-e5f6-a78901234567");
+    expect(v1?.timestamp).toBe(1698148900000);
+    expect(v1?.keyId).toBe("keyId123");
+    expect(v1?.appAccountToken).toBe("f6a78901-2345-6789-f6a7-890123456789");
+    expect(v1?.encodedSignature).toBe("base64encodedSignature");
+  });
+
+  it("round-trips an advancedCommerceInfo body", () => {
+    const acData = "eyJhbGciOiJFUzI1NiJ9.base64data";
+    const parsed = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(RealtimeResponseBodySchema)({
+        advancedCommerceInfo: {
+          messageIdentifier: "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890",
+          advancedCommerceData: acData,
+        },
+      }),
+    );
+    expect(parsed.advancedCommerceInfo?.advancedCommerceData).toBe(acData);
+  });
+
+  it("rejects unrelated extra signature fields under message schema", () => {
+    // Sanity check: each individual schema rejects unknown required fields where applicable.
+    expect(() =>
+      Schema.decodeUnknownSync(PromotionalOfferSignatureV1Schema)({
+        productId: "p",
+      }),
+    ).toThrow();
+  });
+
+  it("preserves field name shape in JSON.stringify output", () => {
+    const json = JSON.stringify({
+      message: { messageIdentifier: "12345678-1234-1234-1234-123456789012" },
+    } satisfies Schema.Schema.Type<typeof RealtimeResponseBodySchema>);
+    expect(json).toContain('"message"');
+    expect(json).toContain('"messageIdentifier"');
+    expect(json).toContain('"12345678-1234-1234-1234-123456789012"');
+  });
+
+  // Lint guard: keeps the imported schemas referenced.
+  void MessageSchema;
+  void AlternateProductSchema;
+  void PromotionalOfferSchema;
+  void RealtimeAdvancedCommerceInfoSchema;
+});
diff --git a/packages/app-store-server-sdk/tests/receipts.test.ts b/packages/app-store-server-sdk/tests/receipts.test.ts
new file mode 100644
index 000000000..de0af6d59
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/receipts.test.ts
@@ -0,0 +1,60 @@
+import { describe, it, expect } from "vitest";
+import { Effect, Option } from "effect";
+import { readFile } from "./util";
+import {
+  extractTransactionIdFromReceipt,
+  extractAllTransactionIdsFromReceipt,
+} from "../src/receipts/index.ts";
+
+describe("Receipt Utility Tests", () => {
+  it("should not extract a transaction id from an xcode receipt without a transaction", async () => {
+    const receipt = readFile("tests/resources/xcode/xcode-app-receipt-empty");
+
+    const result = await Effect.runPromise(
+      extractTransactionIdFromReceipt(receipt).pipe(
+        Effect.catch(() => Effect.succeed(Option.none())),
+      ),
+    );
+
+    expect(result).toEqual(Option.none());
+  });
+
+  it("should extract a transaction id from an xcode receipt with a transaction", async () => {
+    const receipt = readFile("tests/resources/xcode/xcode-app-receipt-with-transaction");
+
+    const result = await Effect.runPromise(
+      extractTransactionIdFromReceipt(receipt).pipe(
+        Effect.catch(() => Effect.succeed(Option.none())),
+      ),
+    );
+
+    expect(result).toEqual(Option.some("0"));
+  });
+
+  it("should extract a transaction id from a legacy transaction receipt", async () => {
+    const receipt = readFile("tests/resources/mock_signed_data/legacyTransaction");
+
+    const result = await Effect.runPromise(
+      extractTransactionIdFromReceipt(receipt).pipe(
+        Effect.catch(() => Effect.succeed(Option.none())),
+      ),
+    );
+
+    expect(result).toEqual(Option.some("33993399"));
+  });
+
+  it("should extract all transaction ids from a receipt with transactions", async () => {
+    const receipt = readFile("tests/resources/xcode/xcode-app-receipt-with-transaction");
+
+    const result = await Effect.runPromise(
+      extractAllTransactionIdsFromReceipt(receipt).pipe(
+        Effect.catch(() => Effect.succeed([] as string[])),
+      ),
+    );
+
+    expect(Array.isArray(result)).toBe(true);
+    if (result.length > 0) {
+      expect(result).toContain("0");
+    }
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/resources/mock_signed_data/legacyTransaction b/packages/app-store-server-sdk/tests/resources/mock_signed_data/legacyTransaction
new file mode 100644
index 000000000..534391da8
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/mock_signed_data/legacyTransaction
@@ -0,0 +1 @@
+ewoicHVyY2hhc2UtaW5mbyIgPSAiZXdvaWRISmhibk5oWTNScGIyNHRhV1FpSUQwZ0lqTXpPVGt6TXprNUlqc0tmUW89IjsKfQo=
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/mock_signed_data/missingX5CHeaderClaim b/packages/app-store-server-sdk/tests/resources/mock_signed_data/missingX5CHeaderClaim
new file mode 100644
index 000000000..b4112b4a0
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/mock_signed_data/missingX5CHeaderClaim
@@ -0,0 +1 @@
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.eyJkYXRhIjp7ImJ1bmRsZUlkIjoiY29tLmV4YW1wbGUifSwibm90aWZpY2F0aW9uVVVJRCI6IjlhZDU2YmQyLTBiYzYtNDJlMC1hZjI0LWZkOTk2ZDg3YTFlNiIsIm5vdGlmaWNhdGlvblR5cGUiOiJURVNUIn0.1TFhjDR4WwQJNgizVGYXz3WE3ajxTdH1wKLQQ71MtrkadSxxOo3yPo_6L9Z03unIU7YK-NRNzSIb5bh5WqTprQ
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/mock_signed_data/renewalInfo b/packages/app-store-server-sdk/tests/resources/mock_signed_data/renewalInfo
new file mode 100644
index 000000000..d14a20dc8
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/mock_signed_data/renewalInfo
@@ -0,0 +1 @@
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.eyJlbnZpcm9ubWVudCI6IlNhbmRib3giLCJzaWduZWREYXRlIjoxNjcyOTU2MTU0MDAwfQ.FbK2OL-t6l4892W7fzWyus_g9mIl2CzWLbVt7Kgcnt6zzVulF8bzovgpe0v_y490blROGixy8KDoe2dSU53-Xw
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/mock_signed_data/testNotification b/packages/app-store-server-sdk/tests/resources/mock_signed_data/testNotification
new file mode 100644
index 000000000..7bb78cf11
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/mock_signed_data/testNotification
@@ -0,0 +1 @@
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.eyJkYXRhIjp7ImFwcEFwcGxlSWQiOjEyMzQsImVudmlyb25tZW50IjoiU2FuZGJveCIsImJ1bmRsZUlkIjoiY29tLmV4YW1wbGUifSwibm90aWZpY2F0aW9uVVVJRCI6IjlhZDU2YmQyLTBiYzYtNDJlMC1hZjI0LWZkOTk2ZDg3YTFlNiIsInNpZ25lZERhdGUiOjE2ODEzMTQzMjQwMDAsIm5vdGlmaWNhdGlvblR5cGUiOiJURVNUIn0.VVXYwuNm2Y3XsOUva-BozqatRCsDuykA7xIe_CCRw6aIAAxJ1nb2sw871jfZ6dcgNhUuhoZ93hfbc1v_5zB7Og
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/mock_signed_data/transactionInfo b/packages/app-store-server-sdk/tests/resources/mock_signed_data/transactionInfo
new file mode 100644
index 000000000..3ddf0b022
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/mock_signed_data/transactionInfo
@@ -0,0 +1 @@
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.eyJlbnZpcm9ubWVudCI6IlNhbmRib3giLCJidW5kbGVJZCI6ImNvbS5leGFtcGxlIiwic2lnbmVkRGF0ZSI6MTY3Mjk1NjE1NDAwMH0.PnHWpeIJZ8f2Q218NSGLo_aR0IBEJvC6PxmxKXh-qfYTrZccx2suGl223OSNAX78e4Ylf2yJCG2N-FfU-NIhZQ
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/mock_signed_data/wrongBundleId b/packages/app-store-server-sdk/tests/resources/mock_signed_data/wrongBundleId
new file mode 100644
index 000000000..cc7091e66
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/mock_signed_data/wrongBundleId
@@ -0,0 +1 @@
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.eyJkYXRhIjp7ImJ1bmRsZUlkIjoiY29tLmV4YW1wbGUud3JvbmcifSwibm90aWZpY2F0aW9uVVVJRCI6IjlhZDU2YmQyLTBiYzYtNDJlMC1hZjI0LWZkOTk2ZDg3YTFlNiIsIm5vdGlmaWNhdGlvblR5cGUiOiJURVNUIn0.WWE31hTB_mcv2O_lf-xI-MNY3d8txc0MzpqFx4QnYDfFIxB95Lo2Fm3r46YSjLLdL7xCWdEJrJP5bHgRCejAGg
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceDescriptors.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceDescriptors.json
new file mode 100644
index 000000000..5fe14d4c7
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceDescriptors.json
@@ -0,0 +1,4 @@
+{
+  "description": "description",
+  "displayName": "display name"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOffer.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOffer.json
new file mode 100644
index 000000000..83a413fb9
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOffer.json
@@ -0,0 +1,6 @@
+{
+  "period": "P1W",
+  "periodCount": 3,
+  "price": 5000,
+  "reason": "WIN_BACK"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeCreateRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeCreateRequest.json
new file mode 100644
index 000000000..b81f27830
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeCreateRequest.json
@@ -0,0 +1,14 @@
+{
+  "currency": "USD",
+  "item": {
+    "description": "description",
+    "displayName": "display name",
+    "SKU": "sku",
+    "price": 10000
+  },
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440000"
+  },
+  "taxCode": "taxCode",
+  "storefront": "USA"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeItem.json
new file mode 100644
index 000000000..0849bf288
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceOneTimeChargeItem.json
@@ -0,0 +1,6 @@
+{
+  "description": "description",
+  "displayName": "display name",
+  "SKU": "sku",
+  "price": 15000
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestInfo.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestInfo.json
new file mode 100644
index 000000000..a57cbdca9
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestInfo.json
@@ -0,0 +1,5 @@
+{
+  "requestReferenceId": "550e8400-e29b-41d4-a716-446655440010",
+  "appAccountToken": "660e8400-e29b-41d4-a716-446655440011",
+  "consistencyToken": "consistency_token_value"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundItem.json
new file mode 100644
index 000000000..875107fad
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundItem.json
@@ -0,0 +1,7 @@
+{
+  "SKU": "sku",
+  "refundReason": "LEGAL",
+  "refundType": "FULL",
+  "revoke": true,
+  "refundAmount": 5000
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundRequest.json
new file mode 100644
index 000000000..6a58aa7a6
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundRequest.json
@@ -0,0 +1,22 @@
+{
+  "items": [
+    {
+      "SKU": "sku",
+      "refundReason": "LEGAL",
+      "refundType": "FULL",
+      "revoke": true
+    },
+    {
+      "SKU": "sku",
+      "refundReason": "OTHER",
+      "refundType": "PRORATED",
+      "revoke": false
+    }
+  ],
+  "refundRiskingPreference": true,
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440002"
+  },
+  "currency": "USD",
+  "storefront": "USA"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundResponse.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundResponse.json
new file mode 100644
index 000000000..0e4f409c9
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceRequestRefundResponse.json
@@ -0,0 +1,3 @@
+{
+  "signedTransactionInfo": "signed_transaction_info_value"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelRequest.json
new file mode 100644
index 000000000..9cbe08c5b
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelRequest.json
@@ -0,0 +1,6 @@
+{
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440003"
+  },
+  "storefront": "USA"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelResponse.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelResponse.json
new file mode 100644
index 000000000..6f14b309a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCancelResponse.json
@@ -0,0 +1,4 @@
+{
+  "signedRenewalInfo": "signed_renewal_info",
+  "signedTransactionInfo": "signed_transaction_info"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataDescriptors.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataDescriptors.json
new file mode 100644
index 000000000..b07d74000
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataDescriptors.json
@@ -0,0 +1,5 @@
+{
+  "effective": "IMMEDIATELY",
+  "description": "description",
+  "displayName": "displayName"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataItem.json
new file mode 100644
index 000000000..c498b6e52
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataItem.json
@@ -0,0 +1,7 @@
+{
+  "currentSKU": "currentSku",
+  "effective": "NEXT_BILL_CYCLE",
+  "description": "description",
+  "displayName": "displayName",
+  "SKU": "sku"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataRequest.json
new file mode 100644
index 000000000..20a1e396d
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataRequest.json
@@ -0,0 +1,14 @@
+{
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440009"
+  },
+  "items": [
+    {
+      "currentSKU": "currentSKU",
+      "effective": "IMMEDIATELY",
+      "description": "description",
+      "displayName": "display name",
+      "SKU": "sku"
+    }
+  ]
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataResponse.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataResponse.json
new file mode 100644
index 000000000..6f14b309a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionChangeMetadataResponse.json
@@ -0,0 +1,4 @@
+{
+  "signedRenewalInfo": "signed_renewal_info",
+  "signedTransactionInfo": "signed_transaction_info"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateItem.json
new file mode 100644
index 000000000..f1b00ea26
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateItem.json
@@ -0,0 +1,6 @@
+{
+  "description": "description",
+  "displayName": "display name",
+  "SKU": "sku",
+  "price": 20000
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateRequest.json
new file mode 100644
index 000000000..2b7a132ce
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionCreateRequest.json
@@ -0,0 +1,28 @@
+{
+  "currency": "USD",
+  "descriptors": {
+    "description": "description",
+    "displayName": "display name"
+  },
+  "items": [
+    {
+      "SKU": "sku",
+      "description": "description",
+      "displayName": "display name",
+      "price": 20000
+    },
+    {
+      "SKU": "sku",
+      "description": "description",
+      "displayName": "display name",
+      "price": 30000
+    }
+  ],
+  "period": "P1M",
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440001"
+  },
+  "taxCode": "taxCode",
+  "storefront": "USA",
+  "previousTransactionId": "transactionId"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateDescriptors.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateDescriptors.json
new file mode 100644
index 000000000..6d0bd6eed
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateDescriptors.json
@@ -0,0 +1,4 @@
+{
+  "description": "description",
+  "displayName": "displayName"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateItem.json
new file mode 100644
index 000000000..00fce710c
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateItem.json
@@ -0,0 +1,5 @@
+{
+  "SKU": "sku",
+  "description": "description",
+  "displayName": "displayName"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRenewalItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRenewalItem.json
new file mode 100644
index 000000000..00fce710c
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRenewalItem.json
@@ -0,0 +1,5 @@
+{
+  "SKU": "sku",
+  "description": "description",
+  "displayName": "displayName"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRequest.json
new file mode 100644
index 000000000..d670da51a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateRequest.json
@@ -0,0 +1,18 @@
+{
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440006"
+  },
+  "descriptors": {
+    "description": "description",
+    "displayName": "display name"
+  },
+  "items": [
+    {
+      "SKU": "sku",
+      "description": "description",
+      "displayName": "display name"
+    }
+  ],
+  "targetProductId": "targetProductId",
+  "taxCode": "taxCode"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateResponse.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateResponse.json
new file mode 100644
index 000000000..2b12972a2
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionMigrateResponse.json
@@ -0,0 +1,4 @@
+{
+  "signedRenewalInfo": "signed_renewal_info_value",
+  "signedTransactionInfo": "signed_transaction_info_value"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyAddItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyAddItem.json
new file mode 100644
index 000000000..935ffb420
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyAddItem.json
@@ -0,0 +1,6 @@
+{
+  "SKU": "sku",
+  "description": "description",
+  "displayName": "displayName",
+  "price": 12000
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyChangeItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyChangeItem.json
new file mode 100644
index 000000000..ac33673d0
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyChangeItem.json
@@ -0,0 +1,9 @@
+{
+  "currentSKU": "currentSku",
+  "description": "description",
+  "displayName": "displayName",
+  "effective": "IMMEDIATELY",
+  "price": 13000,
+  "reason": "UPGRADE",
+  "SKU": "sku"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyDescriptors.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyDescriptors.json
new file mode 100644
index 000000000..b07d74000
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyDescriptors.json
@@ -0,0 +1,5 @@
+{
+  "effective": "IMMEDIATELY",
+  "description": "description",
+  "displayName": "displayName"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyInAppRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyInAppRequest.json
new file mode 100644
index 000000000..0934cb8c8
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyInAppRequest.json
@@ -0,0 +1,14 @@
+{
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440007"
+  },
+  "transactionId": "transactionId",
+  "retainBillingCycle": true,
+  "descriptors": {
+    "effective": "IMMEDIATELY",
+    "description": "description",
+    "displayName": "display name"
+  },
+  "taxCode": "taxCode",
+  "currency": "USD"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyPeriodChange.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyPeriodChange.json
new file mode 100644
index 000000000..b46ebb585
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyPeriodChange.json
@@ -0,0 +1,4 @@
+{
+  "effective": "IMMEDIATELY",
+  "period": "P3M"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyRemoveItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyRemoveItem.json
new file mode 100644
index 000000000..c9767fb08
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionModifyRemoveItem.json
@@ -0,0 +1,3 @@
+{
+  "SKU": "sku"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeItem.json
new file mode 100644
index 000000000..8a4b90f05
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeItem.json
@@ -0,0 +1,5 @@
+{
+  "SKU": "sku",
+  "price": 16000,
+  "dependentSKUs": ["dependentSKU"]
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeRequest.json
new file mode 100644
index 000000000..fba8aded0
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeRequest.json
@@ -0,0 +1,12 @@
+{
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440005"
+  },
+  "items": [
+    {
+      "SKU": "sku123",
+      "price": 15000
+    }
+  ],
+  "currency": "USD"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeResponse.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeResponse.json
new file mode 100644
index 000000000..6f14b309a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionPriceChangeResponse.json
@@ -0,0 +1,4 @@
+{
+  "signedRenewalInfo": "signed_renewal_info",
+  "signedTransactionInfo": "signed_transaction_info"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateInAppRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateInAppRequest.json
new file mode 100644
index 000000000..408a99b31
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateInAppRequest.json
@@ -0,0 +1,11 @@
+{
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440008"
+  },
+  "transactionId": "transactionId",
+  "items": [
+    {
+      "SKU": "sku"
+    }
+  ]
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateItem.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateItem.json
new file mode 100644
index 000000000..c9767fb08
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionReactivateItem.json
@@ -0,0 +1,3 @@
+{
+  "SKU": "sku"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeRequest.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeRequest.json
new file mode 100644
index 000000000..d723be453
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeRequest.json
@@ -0,0 +1,9 @@
+{
+  "requestInfo": {
+    "requestReferenceId": "550e8400-e29b-41d4-a716-446655440004"
+  },
+  "refundRiskingPreference": true,
+  "refundReason": "LEGAL",
+  "refundType": "FULL",
+  "storefront": "USA"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeResponse.json b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeResponse.json
new file mode 100644
index 000000000..6f14b309a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/advancedCommerceSubscriptionRevokeResponse.json
@@ -0,0 +1,4 @@
+{
+  "signedRenewalInfo": "signed_renewal_info",
+  "signedTransactionInfo": "signed_transaction_info"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/apiException.json b/packages/app-store-server-sdk/tests/resources/models/apiException.json
new file mode 100644
index 000000000..a270c53fc
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/apiException.json
@@ -0,0 +1,4 @@
+{
+  "errorCode": 5000000,
+  "errorMessage": "An unknown error occurred."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/apiTooManyRequestsException.json b/packages/app-store-server-sdk/tests/resources/models/apiTooManyRequestsException.json
new file mode 100644
index 000000000..3b3cb9c93
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/apiTooManyRequestsException.json
@@ -0,0 +1,4 @@
+{
+  "errorCode": 4290000,
+  "errorMessage": "Rate limit exceeded."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/apiUnknownError.json b/packages/app-store-server-sdk/tests/resources/models/apiUnknownError.json
new file mode 100644
index 000000000..9377dd778
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/apiUnknownError.json
@@ -0,0 +1,4 @@
+{
+  "errorCode": 9990000,
+  "errorMessage": "Testing error."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/appData.json b/packages/app-store-server-sdk/tests/resources/models/appData.json
new file mode 100644
index 000000000..f4a745c3f
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/appData.json
@@ -0,0 +1,6 @@
+{
+  "appAppleId": 987654321,
+  "bundleId": "com.example",
+  "environment": "Sandbox",
+  "signedAppTransactionInfo": "signed-app-transaction-info"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/appTransaction.json b/packages/app-store-server-sdk/tests/resources/models/appTransaction.json
new file mode 100644
index 000000000..9313c31c8
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/appTransaction.json
@@ -0,0 +1,15 @@
+{
+  "receiptType": "LocalTesting",
+  "appAppleId": 531412,
+  "bundleId": "com.example",
+  "applicationVersion": "1.2.3",
+  "versionExternalIdentifier": 512,
+  "receiptCreationDate": 1698148900000,
+  "originalPurchaseDate": 1698148800000,
+  "originalApplicationVersion": "1.1.2",
+  "deviceVerification": "device_verification_value",
+  "deviceVerificationNonce": "48ccfa42-7431-4f22-9908-7e88983e105a",
+  "preorderDate": 1698148700000,
+  "appTransactionId": "71134",
+  "originalPlatform": "iOS"
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/appTransactionDoesNotExistError.json b/packages/app-store-server-sdk/tests/resources/models/appTransactionDoesNotExistError.json
new file mode 100644
index 000000000..a5730eaeb
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/appTransactionDoesNotExistError.json
@@ -0,0 +1,4 @@
+{
+   "errorCode": 4040019,
+   "errorMessage": "No AppTransaction exists for the customer."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/appTransactionInfoResponse.json b/packages/app-store-server-sdk/tests/resources/models/appTransactionInfoResponse.json
new file mode 100644
index 000000000..2cef03469
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/appTransactionInfoResponse.json
@@ -0,0 +1,3 @@
+{
+    "signedAppTransactionInfo": "signed_app_transaction_info_value"
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/decodedRealtimeRequest.json b/packages/app-store-server-sdk/tests/resources/models/decodedRealtimeRequest.json
new file mode 100644
index 000000000..e966f47a0
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/decodedRealtimeRequest.json
@@ -0,0 +1,9 @@
+{
+  "originalTransactionId": "99371282",
+  "appAppleId": 531412,
+  "productId": "com.example.product",
+  "userLocale": "en-US",
+  "requestIdentifier": "3db5c98d-8acf-4e29-831e-8e1f82f9f6e9",
+  "environment": "LocalTesting",
+  "signedDate": 1698148900000
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/extendRenewalDateForAllActiveSubscribersResponse.json b/packages/app-store-server-sdk/tests/resources/models/extendRenewalDateForAllActiveSubscribersResponse.json
new file mode 100644
index 000000000..21fd582de
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/extendRenewalDateForAllActiveSubscribersResponse.json
@@ -0,0 +1,3 @@
+{
+  "requestIdentifier": "758883e8-151b-47b7-abd0-60c4d804c2f5"
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/extendSubscriptionRenewalDateResponse.json b/packages/app-store-server-sdk/tests/resources/models/extendSubscriptionRenewalDateResponse.json
new file mode 100644
index 000000000..6c5f89f04
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/extendSubscriptionRenewalDateResponse.json
@@ -0,0 +1,6 @@
+{
+  "originalTransactionId": "2312412",
+  "webOrderLineItemId": "9993",
+  "success": true,
+  "effectiveDate": 1698148900000
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/familyTransactionNotSupportedError.json b/packages/app-store-server-sdk/tests/resources/models/familyTransactionNotSupportedError.json
new file mode 100644
index 000000000..54af67422
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/familyTransactionNotSupportedError.json
@@ -0,0 +1,4 @@
+{
+  "errorCode": 4000185,
+  "errorMessage": "Invalid request. Family Sharing transactions aren't supported by this endpoint."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/getAllSubscriptionStatusesResponse.json b/packages/app-store-server-sdk/tests/resources/models/getAllSubscriptionStatusesResponse.json
new file mode 100644
index 000000000..b5d139c1f
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getAllSubscriptionStatusesResponse.json
@@ -0,0 +1,35 @@
+{
+  "environment": "LocalTesting",
+  "bundleId": "com.example",
+  "appAppleId": 5454545,
+  "data": [
+    {
+      "subscriptionGroupIdentifier": "sub_group_one",
+      "lastTransactions": [
+        {
+          "status": 1,
+          "originalTransactionId": "3749183",
+          "signedTransactionInfo": "signed_transaction_one",
+          "signedRenewalInfo": "signed_renewal_one"
+        },
+        {
+          "status": 5,
+          "originalTransactionId": "5314314134",
+          "signedTransactionInfo": "signed_transaction_two",
+          "signedRenewalInfo": "signed_renewal_two"
+        }
+      ]
+    },
+    {
+      "subscriptionGroupIdentifier": "sub_group_two",
+      "lastTransactions": [
+        {
+          "status": 2,
+          "originalTransactionId": "3413453",
+          "signedTransactionInfo": "signed_transaction_three",
+          "signedRenewalInfo": "signed_renewal_three"
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/getDefaultMessageResponse.json b/packages/app-store-server-sdk/tests/resources/models/getDefaultMessageResponse.json
new file mode 100644
index 000000000..e3d2954b6
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getDefaultMessageResponse.json
@@ -0,0 +1,3 @@
+{
+  "messageIdentifier": "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/getImageListResponse.json b/packages/app-store-server-sdk/tests/resources/models/getImageListResponse.json
new file mode 100644
index 000000000..b668dd12f
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getImageListResponse.json
@@ -0,0 +1,9 @@
+{
+  "imageIdentifiers": [
+    {
+      "imageIdentifier": "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890",
+      "imageState": "APPROVED",
+      "imageSize": "FULL_SIZE"
+    }
+  ]
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/getMessageListResponse.json b/packages/app-store-server-sdk/tests/resources/models/getMessageListResponse.json
new file mode 100644
index 000000000..4ccd8feac
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getMessageListResponse.json
@@ -0,0 +1,8 @@
+{
+  "messageIdentifiers": [
+    {
+      "messageIdentifier": "a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890",
+      "messageState": "APPROVED"
+    }
+  ]
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/getNotificationHistoryResponse.json b/packages/app-store-server-sdk/tests/resources/models/getNotificationHistoryResponse.json
new file mode 100644
index 000000000..75c27b7e9
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getNotificationHistoryResponse.json
@@ -0,0 +1,27 @@
+{
+  "paginationToken": "57715481-805a-4283-8499-1c19b5d6b20a",
+  "hasMore": true,
+  "notificationHistory": [
+    {
+      "sendAttempts": [
+        {
+          "attemptDate": 1698148900000,
+          "sendAttemptResult": "NO_RESPONSE"
+        }, {
+          "attemptDate": 1698148950000,
+          "sendAttemptResult": "SUCCESS"
+        }
+      ],
+      "signedPayload": "signed_payload_one"
+    },
+    {
+      "sendAttempts": [
+        {
+          "attemptDate": 1698148800000,
+          "sendAttemptResult": "CIRCULAR_REDIRECT"
+        }
+      ],
+      "signedPayload": "signed_payload_two"
+    }
+  ]
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/getRealtimeUrlResponse.json b/packages/app-store-server-sdk/tests/resources/models/getRealtimeUrlResponse.json
new file mode 100644
index 000000000..699d7fb51
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getRealtimeUrlResponse.json
@@ -0,0 +1,3 @@
+{
+  "realtimeURL": "https://example.com/realtime"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/getRefundHistoryResponse.json b/packages/app-store-server-sdk/tests/resources/models/getRefundHistoryResponse.json
new file mode 100644
index 000000000..d1ff65a9c
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getRefundHistoryResponse.json
@@ -0,0 +1,8 @@
+{
+  "signedTransactions": [
+    "signed_transaction_one",
+    "signed_transaction_two"
+  ],
+  "revision": "revision_output",
+  "hasMore": true
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/getStatusOfSubscriptionRenewalDateExtensionsResponse.json b/packages/app-store-server-sdk/tests/resources/models/getStatusOfSubscriptionRenewalDateExtensionsResponse.json
new file mode 100644
index 000000000..9bd7ddc23
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getStatusOfSubscriptionRenewalDateExtensionsResponse.json
@@ -0,0 +1,7 @@
+{
+  "requestIdentifier": "20fba8a0-2b80-4a7d-a17f-85c1854727f8",
+  "complete": true,
+  "completeDate": 1698148900000,
+  "succeededCount": 30,
+  "failedCount": 2
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/getTestNotificationStatusResponse.json b/packages/app-store-server-sdk/tests/resources/models/getTestNotificationStatusResponse.json
new file mode 100644
index 000000000..9f83b901c
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/getTestNotificationStatusResponse.json
@@ -0,0 +1,12 @@
+{
+  "signedPayload": "signed_payload",
+  "sendAttempts": [
+    {
+      "attemptDate": 1698148900000,
+      "sendAttemptResult": "NO_RESPONSE"
+    }, {
+      "attemptDate": 1698148950000,
+      "sendAttemptResult": "SUCCESS"
+    }
+  ]
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/invalidAppAccountTokenUUIDError.json b/packages/app-store-server-sdk/tests/resources/models/invalidAppAccountTokenUUIDError.json
new file mode 100644
index 000000000..2045fed06
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/invalidAppAccountTokenUUIDError.json
@@ -0,0 +1,4 @@
+{
+  "errorCode": 4000183,
+  "errorMessage": "Invalid request. The app account token field must be a valid UUID."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/invalidTransactionIdError.json b/packages/app-store-server-sdk/tests/resources/models/invalidTransactionIdError.json
new file mode 100644
index 000000000..32fc281a3
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/invalidTransactionIdError.json
@@ -0,0 +1,4 @@
+{
+   "errorCode": 4000006,
+   "errorMessage": "Invalid transaction id."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/lookupOrderIdResponse.json b/packages/app-store-server-sdk/tests/resources/models/lookupOrderIdResponse.json
new file mode 100644
index 000000000..09a43d55a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/lookupOrderIdResponse.json
@@ -0,0 +1,7 @@
+{
+  "status": 1,
+  "signedTransactions": [
+    "signed_transaction_one",
+    "signed_transaction_two"
+  ]
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/performanceTestResponse.json b/packages/app-store-server-sdk/tests/resources/models/performanceTestResponse.json
new file mode 100644
index 000000000..099739944
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/performanceTestResponse.json
@@ -0,0 +1,10 @@
+{
+  "config": {
+    "maxConcurrentRequests": 10,
+    "totalRequests": 100,
+    "totalDuration": 60000,
+    "responseTimeThreshold": 500,
+    "successRateThreshold": 95
+  },
+  "requestId": "c4b87a1d-2e3f-4a5b-9c6d-7e8f9a0b1c2d"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/performanceTestResultResponse.json b/packages/app-store-server-sdk/tests/resources/models/performanceTestResultResponse.json
new file mode 100644
index 000000000..a2ac006ad
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/performanceTestResultResponse.json
@@ -0,0 +1,24 @@
+{
+  "config": {
+    "maxConcurrentRequests": 10,
+    "totalRequests": 100,
+    "totalDuration": 60000,
+    "responseTimeThreshold": 500,
+    "successRateThreshold": 95
+  },
+  "target": "https://example.com/retention",
+  "result": "PASS",
+  "successRate": 98,
+  "numPending": 0,
+  "responseTimes": {
+    "average": 120,
+    "p50": 100,
+    "p90": 200,
+    "p95": 250,
+    "p99": 400
+  },
+  "failures": {
+    "TIMED_OUT": 1,
+    "NO_RESPONSE": 1
+  }
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/requestTestNotificationResponse.json b/packages/app-store-server-sdk/tests/resources/models/requestTestNotificationResponse.json
new file mode 100644
index 000000000..3ecc9e218
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/requestTestNotificationResponse.json
@@ -0,0 +1,3 @@
+{
+  "testNotificationToken": "ce3af791-365e-4c60-841b-1674b43c1609"
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedConsumptionRequestNotification.json b/packages/app-store-server-sdk/tests/resources/models/signedConsumptionRequestNotification.json
new file mode 100644
index 000000000..fb6cf162e
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedConsumptionRequestNotification.json
@@ -0,0 +1,16 @@
+{
+    "notificationType": "CONSUMPTION_REQUEST",
+    "notificationUUID": "002e14d5-51f5-4503-b5a8-c3a1af68eb20",
+    "data": {
+      "environment": "LocalTesting",
+      "appAppleId": 41234,
+      "bundleId": "com.example",
+      "bundleVersion": "1.2.3",
+      "signedTransactionInfo": "signed_transaction_info_value",
+      "signedRenewalInfo": "signed_renewal_info_value",
+      "status": 1,
+      "consumptionRequestReason": "UNINTENDED_PURCHASE"
+    },
+    "version": "2.0",
+    "signedDate": 1698148900000
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenNotification.json b/packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenNotification.json
new file mode 100644
index 000000000..479785b16
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenNotification.json
@@ -0,0 +1,13 @@
+{
+    "notificationType": "EXTERNAL_PURCHASE_TOKEN",
+    "subtype": "UNREPORTED",
+    "notificationUUID": "002e14d5-51f5-4503-b5a8-c3a1af68eb20",
+    "version": "2.0",
+    "signedDate": 1698148900000,
+    "externalPurchaseToken": {
+      "externalPurchaseId": "b2158121-7af9-49d4-9561-1f588205523e",
+      "tokenCreationDate": 1698148950000,
+      "appAppleId": 55555,
+      "bundleId": "com.example"
+    }
+  }
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenSandboxNotification.json b/packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenSandboxNotification.json
new file mode 100644
index 000000000..509cdd646
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedExternalPurchaseTokenSandboxNotification.json
@@ -0,0 +1,13 @@
+{
+    "notificationType": "EXTERNAL_PURCHASE_TOKEN",
+    "subtype": "UNREPORTED",
+    "notificationUUID": "002e14d5-51f5-4503-b5a8-c3a1af68eb20",
+    "version": "2.0",
+    "signedDate": 1698148900000,
+    "externalPurchaseToken": {
+      "externalPurchaseId": "SANDBOX_b2158121-7af9-49d4-9561-1f588205523e",
+      "tokenCreationDate": 1698148950000,
+      "appAppleId": 55555,
+      "bundleId": "com.example"
+    }
+  }
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedNotification.json b/packages/app-store-server-sdk/tests/resources/models/signedNotification.json
new file mode 100644
index 000000000..bd473c442
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedNotification.json
@@ -0,0 +1,16 @@
+{
+  "notificationType": "SUBSCRIBED",
+  "subtype": "INITIAL_BUY",
+  "notificationUUID": "002e14d5-51f5-4503-b5a8-c3a1af68eb20",
+  "data": {
+    "environment": "LocalTesting",
+    "appAppleId": 41234,
+    "bundleId": "com.example",
+    "bundleVersion": "1.2.3",
+    "signedTransactionInfo": "signed_transaction_info_value",
+    "signedRenewalInfo": "signed_renewal_info_value",
+    "status": 1
+  },
+  "version": "2.0",
+  "signedDate": 1698148900000
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedRenewalInfo.json b/packages/app-store-server-sdk/tests/resources/models/signedRenewalInfo.json
new file mode 100644
index 000000000..1cbce07b9
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedRenewalInfo.json
@@ -0,0 +1,60 @@
+{
+  "expirationIntent": 1,
+  "originalTransactionId": "12345",
+  "autoRenewProductId": "com.example.product.2",
+  "productId": "com.example.product",
+  "autoRenewStatus": 1,
+  "isInBillingRetryPeriod": true,
+  "priceIncreaseStatus": 0,
+  "gracePeriodExpiresDate": 1698148900000,
+  "offerType": 2,
+  "offerIdentifier": "abc.123",
+  "signedDate": 1698148800000,
+  "environment": "LocalTesting",
+  "recentSubscriptionStartDate": 1698148800000,
+  "renewalDate": 1698148850000,
+  "renewalPrice": 9990,
+  "currency": "USD",
+  "offerDiscountType": "PAY_AS_YOU_GO",
+  "eligibleWinBackOfferIds": [
+    "eligible1",
+    "eligible2"
+  ],
+  "appTransactionId": "71134",
+  "offerPeriod": "P1Y",
+  "appAccountToken": "7e3fb20b-4cdb-47cc-936d-99d65f608138",
+  "advancedCommerceInfo": {
+    "consistencyToken": "token-abc-123",
+    "descriptors": {
+      "description": "Premium Plan",
+      "displayName": "Premium"
+    },
+    "items": [
+      {
+        "SKU": "com.example.sku.premium",
+        "description": "Premium feature",
+        "displayName": "Premium Feature",
+        "price": 9990,
+        "priceIncreaseInfo": {
+          "dependentSKUs": [
+            "com.example.sku.1",
+            "com.example.sku.2"
+          ],
+          "price": 12990,
+          "status": "PENDING"
+        }
+      }
+    ],
+    "period": "P1M",
+    "requestReferenceId": "ref-12345",
+    "taxCode": "TAX_CODE_1"
+  },
+  "commitmentInfo": {
+    "commitmentAutoRenewProductId": "com.example.product.commitment",
+    "commitmentAutoRenewStatus": 1,
+    "commitmentRenewalBillingPlanType": "MONTHLY",
+    "commitmentRenewalDate": 1698149500000,
+    "commitmentRenewalPrice": 9990
+  },
+  "renewalBillingPlanType": "MONTHLY"
+}
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedRescindConsentNotification.json b/packages/app-store-server-sdk/tests/resources/models/signedRescindConsentNotification.json
new file mode 100644
index 000000000..0624e9326
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedRescindConsentNotification.json
@@ -0,0 +1,12 @@
+{
+  "notificationType": "RESCIND_CONSENT",
+  "notificationUUID": "002e14d5-51f5-4503-b5a8-c3a1af68eb20",
+  "appData": {
+    "appAppleId": 41234,
+    "bundleId": "com.example",
+    "environment": "LocalTesting",
+    "signedAppTransactionInfo": "signed_app_transaction_info_value"
+  },
+  "version": "2.0",
+  "signedDate": 1698148900000
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedSummaryNotification.json b/packages/app-store-server-sdk/tests/resources/models/signedSummaryNotification.json
new file mode 100644
index 000000000..3a22ec098
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedSummaryNotification.json
@@ -0,0 +1,21 @@
+{
+  "notificationType": "RENEWAL_EXTENSION",
+  "subtype": "SUMMARY",
+  "notificationUUID": "002e14d5-51f5-4503-b5a8-c3a1af68eb20",
+  "version": "2.0",
+  "signedDate": 1698148900000,
+  "summary": {
+    "environment": "LocalTesting",
+    "appAppleId": 41234,
+    "bundleId": "com.example",
+    "productId": "com.example.product",
+    "requestIdentifier": "efb27071-45a4-4aca-9854-2a1e9146f265",
+    "storefrontCountryCodes": [
+      "CAN",
+      "USA",
+      "MEX"
+    ],
+    "succeededCount": 5,
+    "failedCount": 2
+  }
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedTransaction.json b/packages/app-store-server-sdk/tests/resources/models/signedTransaction.json
new file mode 100644
index 000000000..3d405b64a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedTransaction.json
@@ -0,0 +1,66 @@
+{
+  "transactionId":"23456",
+  "originalTransactionId":"12345",
+  "webOrderLineItemId":"34343",
+  "bundleId":"com.example",
+  "productId":"com.example.product",
+  "subscriptionGroupIdentifier":"55555",
+  "purchaseDate":1698148900000,
+  "originalPurchaseDate":1698148800000,
+  "expiresDate":1698149000000,
+  "quantity":1,
+  "type":"Auto-Renewable Subscription",
+  "appAccountToken": "7e3fb20b-4cdb-47cc-936d-99d65f608138",
+  "inAppOwnershipType":"PURCHASED",
+  "signedDate":1698148900000,
+  "revocationReason": 1,
+  "revocationDate": 1698148950000,
+  "isUpgraded": true,
+  "offerType":1,
+  "offerIdentifier": "abc.123",
+  "environment":"LocalTesting",
+  "transactionReason":"PURCHASE",
+  "storefront":"USA",
+  "storefrontId":"143441",
+  "price": 10990,
+  "currency": "USD",
+  "offerDiscountType": "PAY_AS_YOU_GO",
+  "appTransactionId": "71134",
+  "offerPeriod": "P1Y",
+  "advancedCommerceInfo": {
+    "descriptors": {
+      "description": "Premium Plan",
+      "displayName": "Premium"
+    },
+    "estimatedTax": 1500,
+    "items": [
+      {
+        "SKU": "com.example.sku.premium",
+        "description": "Premium feature",
+        "displayName": "Premium Feature",
+        "price": 9990,
+        "refunds": [
+          {
+            "refundAmount": 5000,
+            "refundDate": 1698149100000,
+            "refundReason": "FULFILLMENT_ISSUE",
+            "refundType": "PRORATED"
+          }
+        ],
+        "revocationDate": 1698149200000
+      }
+    ],
+    "period": "P1M",
+    "requestReferenceId": "ref-12345",
+    "taxCode": "TAX_CODE_1",
+    "taxExclusivePrice": 8490,
+    "taxRate": "0.15"
+  },
+  "billingPlanType": "MONTHLY",
+  "commitmentInfo": {
+    "billingPeriodNumber": 3,
+    "commitmentExpiresDate": 1698150000000,
+    "commitmentPrice": 119880,
+    "totalBillingPeriods": 12
+  }
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/signedTransactionWithRevocation.json b/packages/app-store-server-sdk/tests/resources/models/signedTransactionWithRevocation.json
new file mode 100644
index 000000000..3886b2e1a
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/signedTransactionWithRevocation.json
@@ -0,0 +1,32 @@
+{
+  "originalTransactionId": "12345",
+  "transactionId": "23456",
+  "webOrderLineItemId": "34343",
+  "bundleId": "com.example",
+  "productId": "com.example.product",
+  "subscriptionGroupIdentifier": "55555",
+  "purchaseDate": 1698148900000,
+  "originalPurchaseDate": 1698148800000,
+  "expiresDate": 1698149000000,
+  "quantity": 1,
+  "type": "Auto-Renewable Subscription",
+  "appAccountToken": "7e3fb20b-4cdb-47cc-936d-99d65f608138",
+  "inAppOwnershipType": "PURCHASED",
+  "signedDate": 1698148900000,
+  "revocationReason": 1,
+  "revocationDate": 1698148950000,
+  "isUpgraded": true,
+  "offerType": 1,
+  "offerIdentifier": "abc.123",
+  "environment": "LocalTesting",
+  "storefront": "USA",
+  "storefrontId": "143441",
+  "transactionReason": "PURCHASE",
+  "price": 10990,
+  "currency": "USD",
+  "offerDiscountType": "PAY_AS_YOU_GO",
+  "appTransactionId": "71134",
+  "offerPeriod": "P1Y",
+  "revocationType": "REFUND_PRORATED",
+  "revocationPercentage": 50000
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponse.json b/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponse.json
new file mode 100644
index 000000000..c5cc63839
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponse.json
@@ -0,0 +1,11 @@
+{
+  "revision": "revision_output",
+  "hasMore": true,
+  "bundleId": "com.example",
+  "appAppleId": 323232,
+  "environment": "LocalTesting",
+  "signedTransactions": [
+    "signed_transaction_value",
+    "signed_transaction_value2"
+  ]
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedAppAppleId.json b/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedAppAppleId.json
new file mode 100644
index 000000000..29cd990cf
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedAppAppleId.json
@@ -0,0 +1,11 @@
+{
+    "revision": "revision_output",
+    "hasMore": 1,
+    "bundleId": "com.example",
+    "appAppleId": "hi",
+    "environment": "LocalTesting",
+    "signedTransactions": [
+      "signed_transaction_value",
+      "signed_transaction_value2"
+    ]
+  }
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedEnvironment.json b/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedEnvironment.json
new file mode 100644
index 000000000..9d5d56dbf
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/transactionHistoryResponseWithMalformedEnvironment.json
@@ -0,0 +1,11 @@
+{
+    "revision": "revision_output",
+    "hasMore": true,
+    "bundleId": "com.example",
+    "appAppleId": 323232,
+    "environment": "LocalTestingxxx",
+    "signedTransactions": [
+      "signed_transaction_value",
+      "signed_transaction_value2"
+    ]
+  }
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/transactionIdNotFoundError.json b/packages/app-store-server-sdk/tests/resources/models/transactionIdNotFoundError.json
new file mode 100644
index 000000000..f445639bd
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/transactionIdNotFoundError.json
@@ -0,0 +1,4 @@
+{
+   "errorCode": 4040010,
+   "errorMessage": "Transaction id not found."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/transactionIdNotOriginalTransactionId.json b/packages/app-store-server-sdk/tests/resources/models/transactionIdNotOriginalTransactionId.json
new file mode 100644
index 000000000..02f33b186
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/transactionIdNotOriginalTransactionId.json
@@ -0,0 +1,4 @@
+{
+  "errorCode": 4000187,
+  "errorMessage": "Invalid request. The transaction ID provided is not an original transaction ID."
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/models/transactionInfoResponse.json b/packages/app-store-server-sdk/tests/resources/models/transactionInfoResponse.json
new file mode 100644
index 000000000..57d84e205
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/models/transactionInfoResponse.json
@@ -0,0 +1,3 @@
+{
+  "signedTransactionInfo": "signed_transaction_info_value"
+}
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-empty b/packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-empty
new file mode 100644
index 000000000..f5acce89d
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-empty
@@ -0,0 +1 @@
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
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-with-transaction b/packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-with-transaction
new file mode 100644
index 000000000..6b2d6e7ba
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/xcode/xcode-app-receipt-with-transaction
@@ -0,0 +1 @@
+MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwGggCSABIIBdjGCAXIwDwIBAAIBAQQHDAVYY29kZTALAgEBAgEBBAMCAQAwNQIBAgIBAQQtDCtjb20uZXhhbXBsZS5uYXR1cmVsYWIuYmFja3lhcmRiaXJkcy5leGFtcGxlMAsCAQMCAQEEAwwBMTAQAgEEAgEBBAjyv/X7DwAAADAcAgEFAgEBBBQWU6vLoHZxeVVlaOg/UEG2OOKahTAKAgEIAgEBBAIWADAeAgEMAgEBBBYWFDIwMjMtMTAtMTlUMDE6NDU6NDBaMIGRAgERAgEBBIGIMYGFMAwCAgalAgEBBAMCAQEwFwICBqYCAQEEDgwMcGFzcy5wcmVtaXVtMAwCAganAgEBBAMMATAwHwICBqgCAQEEFhYUMjAyMy0xMC0xOVQwMTo0NTozNlowHwICBqwCAQEEFhYUMjAyMy0xMS0xOVQwMTo0NTozNlowDAICBrcCAQEEAwIBATAeAgEVAgEBBBYWFDQwMDEtMDEtMDFUMDA6MDA6MDBaAAAAAAAAoIIDeDCCA3QwggJcoAMCAQICAQEwDQYJKoZIhvcNAQELBQAwXzERMA8GA1UEAwwIU3RvcmVLaXQxETAPBgNVBAoMCFN0b3JlS2l0MREwDwYDVQQLDAhTdG9yZUtpdDELMAkGA1UEBhMCVVMxFzAVBgkqhkiG9w0BCQEWCFN0b3JlS2l0MB4XDTIwMDQwMTE3NTIzNVoXDTQwMDMyNzE3NTIzNVowXzERMA8GA1UEAwwIU3RvcmVLaXQxETAPBgNVBAoMCFN0b3JlS2l0MREwDwYDVQQLDAhTdG9yZUtpdDELMAkGA1UEBhMCVVMxFzAVBgkqhkiG9w0BCQEWCFN0b3JlS2l0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23+QPCxzD9uXJkuTuwr4oSE+yGHZJMheH3U+2pPbMRqRgLm/5QzLPLsORGIm+gQptknnb+Ab5g1ozSVuw3YI9UoLrnp0PMSpC7PPYg/7tLz324ReKOtHDfHti6z1n7AJOKNue8smUAoa4YnRcnYLOUzLT27As1+3lbq5qF1KdKvvb0GlfgmNuj09zXBX2O3v1dp3yJMEHO8JiHhlzoHyjXLnBxpuJhL3MrENuziQawbE/A3llVDNkci6JfRYyYzhcdtKRfMtGZYDVoGmRO51d1tTz3isXbo+X1ArXCmM3cLXKhffIrTX5Hior6htp8HaaC1mzM8pC1As48L75l8SwQIDAQABozswOTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIChDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDAzANBgkqhkiG9w0BAQsFAAOCAQEAsgDgPPHo6WK9wNYdQJ5XuTiQd3ZS0qhLcG64Z5n7s4pVn+8dKLhfKtFznzVHN7tG03YQ8vBp7M1imXH5YIqESDjEvYtnJbmrbDNlrdjCmnhID+nMwScNxs9kPG2AWTOMyjYGKhEbjUnOCP9mwEcoS+tawSsJViylqgkDezIx3OiFeEjOwMUSEWoPDK4vBcpvemR/ICx15kyxEtP94x9eDX24WNegfOR/Y6uXmivDKtjQsuHVWg05G29nKKkSg9aHeG2ZvV6zCuCYzvbqw45taeu3QIE9hz1wUdHEXY2l3H9qWBreYHY3Uuz/rBldDBUvig/1icjXKx0e7CuRBac9TzGCAY8wggGLAgEBMGQwXzERMA8GA1UEAwwIU3RvcmVLaXQxETAPBgNVBAoMCFN0b3JlS2l0MREwDwYDVQQLDAhTdG9yZUtpdDELMAkGA1UEBhMCVVMxFzAVBgkqhkiG9w0BCQEWCFN0b3JlS2l0AgEBMA0GCWCGSAFlAwQCAQUAMA0GCSqGSIb3DQEBCwUABIIBAMNY9TpOCg59NnKdDA6Xc4D74lEaa+YwQqD/z8ajAGxpw3efoQRvx8Q1qR6IVs9BcRYGyJmsFrau19QeSIRjjqaxhV8ZbRFenWp0Yps6OCPVHw94Ej3AstAL/8WIArBM1OS6OZJESJdQz5xpwavWLGm1rU2730glMdHzHfm2h0wNp/0BKV0ugV9SRQN4RsyAMNS+rCO1mtSDI6nx8E+dEVMIa4mUg+yhXRlg6KzdzKWnr9vDtRVmhdq0ANfP+jfvncsyC+d/c3cAsXOK066hKFwYWTKaRZ7M2eXus5TcU83/aaovHyKVyKKCRnKuP7VPt9d5eWLSg/7v2ctHJtjmhqsAAAAAAAA=
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-app-transaction b/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-app-transaction
new file mode 100644
index 000000000..3d1132677
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-app-transaction
@@ -0,0 +1 @@
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.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.Dpdk_VsO2MUCevwyS407alJpPc1Nq_UIP9EiDHaQBxlyi35NFnsKUVNuFNcGWrGRCCImnb4QGBKHfQC2i4sPCg
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-renewal-info b/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-renewal-info
new file mode 100644
index 000000000..d18123c4f
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-renewal-info
@@ -0,0 +1 @@
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.eyJkZXZpY2VWZXJpZmljYXRpb24iOiJ1K1cxb1FUcXZGSE9RK1pCZTRRMHhQTUMyOGtxRUZ2YmJzRVBwTEtEVlJGdjFHSkdlZ21yTkhWb09ZTU9QdmIyIiwicHJvZHVjdElkIjoicGFzcy5wcmVtaXVtIiwiZGV2aWNlVmVyaWZpY2F0aW9uTm9uY2UiOiIzNDM5OTE5ZS04N2M5LTQ3YjYtYWVlZS0yODIzZjdhOWQzYzMiLCJyZW5ld2FsRGF0ZSI6MTcwMDM1ODMzNjA0OS43Mjk3LCJvcmlnaW5hbFRyYW5zYWN0aW9uSWQiOiIwIiwicmVjZW50U3Vic2NyaXB0aW9uU3RhcnREYXRlIjoxNjk3Njc5OTM2MDQ5LjcyOTcsImF1dG9SZW5ld1N0YXR1cyI6MSwic2lnbmVkRGF0ZSI6MTY5NzY3OTkzNjcxMS4wNzQ3LCJlbnZpcm9ubWVudCI6Ilhjb2RlIiwiYXV0b1JlbmV3UHJvZHVjdElkIjoicGFzcy5wcmVtaXVtIn0.WnT3aB9Lwjbr0ICUGn_5CdglzedVd7eOkrqirhcWFvwJZzN1FajuMV6gFEbgD82aL0Ix6HGZcwkNDlVNLvYOEQ
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-transaction b/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-transaction
new file mode 100644
index 000000000..6daf51797
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/resources/xcode/xcode-signed-transaction
@@ -0,0 +1 @@
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.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.rkJYnvujStteRkMHhoIR2ThmNFnyKcx5XxIakXYdh-1oKtEVEU5zQAiONaLDpBDO5JhLLrTbfp7LS5tMiqmgHw
\ No newline at end of file
diff --git a/packages/app-store-server-sdk/tests/schemas.test.ts b/packages/app-store-server-sdk/tests/schemas.test.ts
new file mode 100644
index 000000000..0a4fc14eb
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/schemas.test.ts
@@ -0,0 +1,168 @@
+import { describe, it, expect } from "vitest";
+import { Schema } from "effect";
+import { unwrapOptionsDeep } from "./util.ts";
+import {
+  Environment,
+  EnvironmentSchema,
+  Status,
+  StatusSchema,
+  NotificationTypeV2,
+  NotificationTypeV2Schema,
+  Type,
+  TypeSchema,
+  OfferType,
+  OfferTypeSchema,
+} from "../src/schemas/enums.ts";
+import {
+  TransactionInfoResponseSchema,
+  HistoryResponseSchema,
+  StatusResponseSchema,
+} from "../src/schemas/responses.ts";
+import { ResponseBodyV2Schema } from "../src/schemas/notifications.ts";
+
+describe("Enum Schema Tests", () => {
+  it("should decode Environment enum values", () => {
+    const result = unwrapOptionsDeep(Schema.decodeUnknownSync(EnvironmentSchema)("Production"));
+    expect(result).toBe(Environment.PRODUCTION);
+
+    const sandboxResult = unwrapOptionsDeep(Schema.decodeUnknownSync(EnvironmentSchema)("Sandbox"));
+    expect(sandboxResult).toBe(Environment.SANDBOX);
+  });
+
+  it("should decode Status enum values", () => {
+    const activeResult = unwrapOptionsDeep(Schema.decodeUnknownSync(StatusSchema)(1));
+    expect(activeResult).toBe(Status.ACTIVE);
+
+    const expiredResult = unwrapOptionsDeep(Schema.decodeUnknownSync(StatusSchema)(2));
+    expect(expiredResult).toBe(Status.EXPIRED);
+  });
+
+  it("should decode NotificationTypeV2 enum values", () => {
+    const subscribedResult = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(NotificationTypeV2Schema)("SUBSCRIBED"),
+    );
+    expect(subscribedResult).toBe(NotificationTypeV2.SUBSCRIBED);
+
+    const expiredResult = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(NotificationTypeV2Schema)("EXPIRED"),
+    );
+    expect(expiredResult).toBe(NotificationTypeV2.EXPIRED);
+  });
+
+  it("should decode Type enum values", () => {
+    const autoRenewableResult = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(TypeSchema)("Auto-Renewable Subscription"),
+    );
+    expect(autoRenewableResult).toBe(Type.AUTO_RENEWABLE_SUBSCRIPTION);
+
+    const consumableResult = unwrapOptionsDeep(Schema.decodeUnknownSync(TypeSchema)("Consumable"));
+    expect(consumableResult).toBe(Type.CONSUMABLE);
+  });
+
+  it("should decode OfferType enum values", () => {
+    const introductoryResult = unwrapOptionsDeep(Schema.decodeUnknownSync(OfferTypeSchema)(1));
+    expect(introductoryResult).toBe(OfferType.INTRODUCTORY_OFFER);
+
+    const promotionalResult = unwrapOptionsDeep(Schema.decodeUnknownSync(OfferTypeSchema)(2));
+    expect(promotionalResult).toBe(OfferType.PROMOTIONAL_OFFER);
+  });
+});
+
+describe("Response Schema Tests", () => {
+  it("should decode TransactionInfoResponse", () => {
+    const response = {
+      signedTransactionInfo: "some.signed.jwt",
+    };
+
+    const result = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(TransactionInfoResponseSchema)(response),
+    );
+    expect(result.signedTransactionInfo).toBe("some.signed.jwt");
+  });
+
+  it("should decode empty TransactionInfoResponse", () => {
+    const response = {};
+    const result = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(TransactionInfoResponseSchema)(response),
+    );
+    expect(result.signedTransactionInfo).toBeUndefined();
+  });
+
+  it("should decode HistoryResponse", () => {
+    const response = {
+      revision: "abc123",
+      hasMore: true,
+      bundleId: "com.example.app",
+      appAppleId: 12345,
+      environment: "Production",
+      signedTransactions: ["jwt1", "jwt2"],
+    };
+
+    const result = unwrapOptionsDeep(Schema.decodeUnknownSync(HistoryResponseSchema)(response));
+    expect(result.revision).toBe("abc123");
+    expect(result.hasMore).toBe(true);
+    expect(result.bundleId).toBe("com.example.app");
+    expect(result.appAppleId).toBe(12345);
+    expect(result.environment).toBe("Production");
+    expect(result.signedTransactions).toEqual(["jwt1", "jwt2"]);
+  });
+
+  it("should decode StatusResponse", () => {
+    const response = {
+      environment: "Sandbox",
+      bundleId: "com.example.app",
+      appAppleId: 12345,
+      data: [
+        {
+          subscriptionGroupIdentifier: "group1",
+          lastTransactions: [
+            {
+              status: 1,
+              originalTransactionId: "original123",
+              signedTransactionInfo: "signed.transaction.info",
+              signedRenewalInfo: "signed.renewal.info",
+            },
+          ],
+        },
+      ],
+    };
+
+    const result = unwrapOptionsDeep(Schema.decodeUnknownSync(StatusResponseSchema)(response));
+    expect(result.environment).toBe("Sandbox");
+    expect(result.bundleId).toBe("com.example.app");
+    expect(result.data?.length).toBe(1);
+    expect(result.data?.[0]?.subscriptionGroupIdentifier).toBe("group1");
+    expect(result.data?.[0]?.lastTransactions?.length).toBe(1);
+    expect(result.data?.[0]?.lastTransactions?.[0]?.status).toBe(1);
+  });
+});
+
+describe("Notification Schema Tests", () => {
+  it("should decode a ResponseBodyV2 signed payload", () => {
+    const result = Schema.decodeUnknownSync(ResponseBodyV2Schema)({
+      signedPayload: "aaa.bbb.ccc",
+    });
+
+    expect(result.signedPayload).toBe("aaa.bbb.ccc");
+  });
+
+  it("should accept any string signed payload", () => {
+    const result = Schema.decodeUnknownSync(ResponseBodyV2Schema)({
+      signedPayload: "plain-string",
+    });
+
+    expect(result.signedPayload).toBe("plain-string");
+  });
+
+  it("should reject a missing signed payload", () => {
+    expect(() => Schema.decodeUnknownSync(ResponseBodyV2Schema)({})).toThrow();
+  });
+
+  it("should reject a non-string signed payload", () => {
+    expect(() =>
+      Schema.decodeUnknownSync(ResponseBodyV2Schema)({
+        signedPayload: 123,
+      }),
+    ).toThrow();
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/signatures.test.ts b/packages/app-store-server-sdk/tests/signatures.test.ts
new file mode 100644
index 000000000..d581e0f16
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/signatures.test.ts
@@ -0,0 +1,164 @@
+import { describe, it, expect } from "vitest";
+import { Effect } from "effect";
+import { TEST_SIGNING_KEY } from "./util";
+import {
+  createPromotionalOfferV2Signature,
+  createIntroductoryOfferEligibilitySignature,
+  createAdvancedCommerceInAppSignature,
+} from "../src/signatures/index.ts";
+import { createPromotionalOfferV1Signature } from "../src/signatures/index.ts";
+
+describe("JWS Signature Creator Checks", () => {
+  it("should create a promotional offer V2 signature", async () => {
+    const config = {
+      signingKey: TEST_SIGNING_KEY,
+      keyId: "keyId",
+      issuerId: "issuerId",
+      bundleId: "bundleId",
+    };
+
+    const signature = await Effect.runPromise(
+      createPromotionalOfferV2Signature(config, "productId", "offerIdentifier", "transactionId"),
+    );
+
+    expect(signature).toBeTruthy();
+
+    const parts = signature.split(".");
+    expect(parts.length).toBe(3);
+
+    const header = JSON.parse(Buffer.from(parts[0]!, "base64url").toString());
+    const payload = JSON.parse(Buffer.from(parts[1]!, "base64url").toString());
+
+    // Header
+    expect(header.typ).toBe("JWT");
+    expect(header.alg).toBe("ES256");
+    expect(header.kid).toBe("keyId");
+
+    // Payload
+    expect(payload.iss).toBe("issuerId");
+    expect(payload.iat).toBeTruthy();
+    expect(payload.exp).toBeUndefined();
+    expect(payload.aud).toBe("promotional-offer");
+    expect(payload.bid).toBe("bundleId");
+    expect(payload.nonce).toBeTruthy();
+    expect(payload.productId).toBe("productId");
+    expect(payload.offerIdentifier).toBe("offerIdentifier");
+    expect(payload.transactionId).toBe("transactionId");
+  });
+
+  it("should create a promotional offer V2 signature without a transaction id", async () => {
+    const config = {
+      signingKey: TEST_SIGNING_KEY,
+      keyId: "keyId",
+      issuerId: "issuerId",
+      bundleId: "bundleId",
+    };
+
+    const signature = await Effect.runPromise(
+      createPromotionalOfferV2Signature(config, "productId", "offerIdentifier"),
+    );
+
+    const payload = JSON.parse(Buffer.from(signature.split(".")[1]!, "base64url").toString());
+    expect(payload.transactionId).toBeUndefined();
+  });
+
+  it("should create an introductory eligibility offer signature", async () => {
+    const config = {
+      signingKey: TEST_SIGNING_KEY,
+      keyId: "keyId",
+      issuerId: "issuerId",
+      bundleId: "bundleId",
+    };
+
+    const signature = await Effect.runPromise(
+      createIntroductoryOfferEligibilitySignature(config, "productId", true, "transactionId"),
+    );
+
+    expect(signature).toBeTruthy();
+
+    const parts = signature.split(".");
+    const header = JSON.parse(Buffer.from(parts[0]!, "base64url").toString());
+    const payload = JSON.parse(Buffer.from(parts[1]!, "base64url").toString());
+
+    // Header
+    expect(header.typ).toBe("JWT");
+    expect(header.alg).toBe("ES256");
+    expect(header.kid).toBe("keyId");
+
+    // Payload
+    expect(payload.iss).toBe("issuerId");
+    expect(payload.iat).toBeTruthy();
+    expect(payload.exp).toBeUndefined();
+    expect(payload.aud).toBe("introductory-offer-eligibility");
+    expect(payload.bid).toBe("bundleId");
+    expect(payload.nonce).toBeTruthy();
+    expect(payload.productId).toBe("productId");
+    expect(payload.allowIntroductoryOffer).toBe(true);
+    expect(payload.transactionId).toBe("transactionId");
+  });
+
+  it("should create an Advanced Commerce in app signature", async () => {
+    const config = {
+      signingKey: TEST_SIGNING_KEY,
+      keyId: "keyId",
+      issuerId: "issuerId",
+      bundleId: "bundleId",
+    };
+
+    const request = {
+      testValue: "testValue",
+    };
+
+    const signature = await Effect.runPromise(
+      createAdvancedCommerceInAppSignature(config, request),
+    );
+
+    expect(signature).toBeTruthy();
+
+    const parts = signature.split(".");
+    const header = JSON.parse(Buffer.from(parts[0]!, "base64url").toString());
+    const payload = JSON.parse(Buffer.from(parts[1]!, "base64url").toString());
+
+    // Header
+    expect(header.typ).toBe("JWT");
+    expect(header.alg).toBe("ES256");
+    expect(header.kid).toBe("keyId");
+
+    // Payload
+    expect(payload.iss).toBe("issuerId");
+    expect(payload.iat).toBeTruthy();
+    expect(payload.exp).toBeUndefined();
+    expect(payload.aud).toBe("advanced-commerce-api");
+    expect(payload.bid).toBe("bundleId");
+    expect(payload.nonce).toBeTruthy();
+
+    const parsedRequestJson = Buffer.from(payload.request, "base64").toString("utf-8");
+    const parsedRequest = JSON.parse(parsedRequestJson);
+    expect(parsedRequest.testValue).toBe("testValue");
+  });
+
+  it("should create a V1 promotional offer signature", async () => {
+    const config = {
+      signingKey: TEST_SIGNING_KEY,
+      keyId: "keyId",
+      bundleId: "bundleId",
+    };
+
+    const signature = await Effect.runPromise(
+      createPromotionalOfferV1Signature(
+        config,
+        "productId",
+        "offerId",
+        "appAccountToken",
+        "20fba8a0-2b80-4a7d-a17f-85c1854727f8",
+        1698148900000,
+      ),
+    );
+
+    // V1 signature is base64 encoded, not a JWT
+    expect(signature).toBeTruthy();
+    expect(signature.includes(".")).toBe(false);
+    // The output is valid base64
+    expect(() => Buffer.from(signature, "base64")).not.toThrow();
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/transaction-decoding.test.ts b/packages/app-store-server-sdk/tests/transaction-decoding.test.ts
new file mode 100644
index 000000000..9ddf0c833
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/transaction-decoding.test.ts
@@ -0,0 +1,397 @@
+import { describe, expect, it } from "vitest";
+import { Effect } from "effect";
+import { unwrapOptionsDeep } from "./util.ts";
+import {
+  AdvancedCommercePeriod,
+  AdvancedCommercePriceIncreaseInfoStatus,
+  AdvancedCommerceRefundReason,
+  AdvancedCommerceRefundType,
+  AutoRenewStatus,
+  BillingPlanType,
+  ConsumptionRequestReason,
+  Environment,
+  ExpirationIntent,
+  InAppOwnershipType,
+  JWSTransactionDecodedPayloadSchema,
+  NotificationTypeV2,
+  OfferDiscountType,
+  OfferType,
+  PriceIncreaseStatus,
+  PurchasePlatform,
+  RenewalBillingPlanType,
+  RevocationReason,
+  RevocationType,
+  Status,
+  Subtype,
+  TransactionReason,
+  Type,
+} from "../src/schemas/index.ts";
+import { Schema } from "effect";
+import {
+  createSignedDataFromJson,
+  getDefaultSignedPayloadVerifier,
+  getSignedPayloadVerifier,
+} from "./util.ts";
+
+describe("Testing decoding of signed data", () => {
+  it("should decode an app transaction", async () => {
+    const signedAppTransaction = createSignedDataFromJson(
+      "tests/resources/models/appTransaction.json",
+    );
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const appTransaction = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeAppTransaction(signedAppTransaction)),
+    );
+
+    expect(appTransaction.receiptType).toBe(Environment.LOCAL_TESTING);
+    expect(appTransaction.appAppleId).toBe(531412);
+    expect(appTransaction.bundleId).toBe("com.example");
+    expect(appTransaction.applicationVersion).toBe("1.2.3");
+    expect(appTransaction.versionExternalIdentifier).toBe(512);
+    expect(appTransaction.receiptCreationDate).toBe(1698148900000);
+    expect(appTransaction.originalPurchaseDate).toBe(1698148800000);
+    expect(appTransaction.originalApplicationVersion).toBe("1.1.2");
+    expect(appTransaction.deviceVerification).toBe("device_verification_value");
+    expect(appTransaction.deviceVerificationNonce).toBe("48ccfa42-7431-4f22-9908-7e88983e105a");
+    expect(appTransaction.preorderDate).toBe(1698148700000);
+    expect(appTransaction.appTransactionId).toBe("71134");
+    expect(appTransaction.originalPlatform).toBe(PurchasePlatform.IOS);
+  });
+
+  it("should decode a renewal info", async () => {
+    const signedRenewalInfo = createSignedDataFromJson(
+      "tests/resources/models/signedRenewalInfo.json",
+    );
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const renewalInfo = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeRenewalInfo(signedRenewalInfo)),
+    );
+
+    expect(renewalInfo.expirationIntent).toBe(ExpirationIntent.CUSTOMER_CANCELLED);
+    expect(renewalInfo.originalTransactionId).toBe("12345");
+    expect(renewalInfo.autoRenewProductId).toBe("com.example.product.2");
+    expect(renewalInfo.productId).toBe("com.example.product");
+    expect(renewalInfo.autoRenewStatus).toBe(AutoRenewStatus.ON);
+    expect(renewalInfo.isInBillingRetryPeriod).toBe(true);
+    expect(renewalInfo.priceIncreaseStatus).toBe(PriceIncreaseStatus.CUSTOMER_HAS_NOT_RESPONDED);
+    expect(renewalInfo.gracePeriodExpiresDate).toBe(1698148900000);
+    expect(renewalInfo.offerType).toBe(OfferType.PROMOTIONAL_OFFER);
+    expect(renewalInfo.offerIdentifier).toBe("abc.123");
+    expect(renewalInfo.signedDate).toBe(1698148800000);
+    expect(renewalInfo.environment).toBe(Environment.LOCAL_TESTING);
+    expect(renewalInfo.recentSubscriptionStartDate).toBe(1698148800000);
+    expect(renewalInfo.renewalDate).toBe(1698148850000);
+    expect(renewalInfo.renewalPrice).toBe(9990);
+    expect(renewalInfo.currency).toBe("USD");
+    expect(renewalInfo.offerDiscountType).toBe(OfferDiscountType.PAY_AS_YOU_GO);
+    expect(renewalInfo.eligibleWinBackOfferIds).toEqual(["eligible1", "eligible2"]);
+    expect(renewalInfo.appTransactionId).toBe("71134");
+    expect(renewalInfo.offerPeriod).toBe("P1Y");
+    expect(renewalInfo.appAccountToken).toBe("7e3fb20b-4cdb-47cc-936d-99d65f608138");
+
+    // Advanced Commerce
+    const ac = renewalInfo.advancedCommerceInfo;
+    expect(ac).toBeDefined();
+    expect(ac?.consistencyToken).toBe("token-abc-123");
+    expect(ac?.descriptors?.description).toBe("Premium Plan");
+    expect(ac?.descriptors?.displayName).toBe("Premium");
+    expect(ac?.period).toBe(AdvancedCommercePeriod.P1M);
+    expect(ac?.requestReferenceId).toBe("ref-12345");
+    expect(ac?.taxCode).toBe("TAX_CODE_1");
+    expect(ac?.items).toHaveLength(1);
+    const renewalItem = ac?.items?.[0];
+    expect(renewalItem?.SKU).toBe("com.example.sku.premium");
+    expect(renewalItem?.description).toBe("Premium feature");
+    expect(renewalItem?.displayName).toBe("Premium Feature");
+    expect(renewalItem?.price).toBe(9990);
+    expect(renewalItem?.priceIncreaseInfo?.dependentSKUs).toEqual([
+      "com.example.sku.1",
+      "com.example.sku.2",
+    ]);
+    expect(renewalItem?.priceIncreaseInfo?.price).toBe(12990);
+    expect(renewalItem?.priceIncreaseInfo?.status).toBe(
+      AdvancedCommercePriceIncreaseInfoStatus.PENDING,
+    );
+
+    // Commitment
+    const commitment = renewalInfo.commitmentInfo;
+    expect(commitment?.commitmentAutoRenewProductId).toBe("com.example.product.commitment");
+    expect(commitment?.commitmentAutoRenewStatus).toBe(AutoRenewStatus.ON);
+    expect(commitment?.commitmentRenewalBillingPlanType).toBe(RenewalBillingPlanType.MONTHLY);
+    expect(commitment?.commitmentRenewalDate).toBe(1698149500000);
+    expect(commitment?.commitmentRenewalPrice).toBe(9990);
+    expect(renewalInfo.renewalBillingPlanType).toBe(RenewalBillingPlanType.MONTHLY);
+  });
+
+  it("should decode a transaction info", async () => {
+    const signedTransaction = createSignedDataFromJson(
+      "tests/resources/models/signedTransaction.json",
+    );
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const transaction = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeTransaction(signedTransaction)),
+    );
+
+    expect(transaction.originalTransactionId).toBe("12345");
+    expect(transaction.transactionId).toBe("23456");
+    expect(transaction.webOrderLineItemId).toBe("34343");
+    expect(transaction.bundleId).toBe("com.example");
+    expect(transaction.productId).toBe("com.example.product");
+    expect(transaction.subscriptionGroupIdentifier).toBe("55555");
+    expect(transaction.originalPurchaseDate).toBe(1698148800000);
+    expect(transaction.purchaseDate).toBe(1698148900000);
+    expect(transaction.revocationDate).toBe(1698148950000);
+    expect(transaction.expiresDate).toBe(1698149000000);
+    expect(transaction.quantity).toBe(1);
+    expect(transaction.type).toBe(Type.AUTO_RENEWABLE_SUBSCRIPTION);
+    expect(transaction.appAccountToken).toBe("7e3fb20b-4cdb-47cc-936d-99d65f608138");
+    expect(transaction.inAppOwnershipType).toBe(InAppOwnershipType.PURCHASED);
+    expect(transaction.signedDate).toBe(1698148900000);
+    expect(transaction.revocationReason).toBe(RevocationReason.REFUNDED_DUE_TO_ISSUE);
+    expect(transaction.offerIdentifier).toBe("abc.123");
+    expect(transaction.isUpgraded).toBe(true);
+    expect(transaction.offerType).toBe(OfferType.INTRODUCTORY_OFFER);
+    expect(transaction.storefront).toBe("USA");
+    expect(transaction.storefrontId).toBe("143441");
+    expect(transaction.transactionReason).toBe(TransactionReason.PURCHASE);
+    expect(transaction.environment).toBe(Environment.LOCAL_TESTING);
+    expect(transaction.price).toBe(10990);
+    expect(transaction.currency).toBe("USD");
+    expect(transaction.offerDiscountType).toBe(OfferDiscountType.PAY_AS_YOU_GO);
+    expect(transaction.appTransactionId).toBe("71134");
+    expect(transaction.offerPeriod).toBe("P1Y");
+
+    const info = transaction.advancedCommerceInfo;
+    expect(info).toBeDefined();
+    expect(info?.descriptors?.description).toBe("Premium Plan");
+    expect(info?.descriptors?.displayName).toBe("Premium");
+    expect(info?.estimatedTax).toBe(1500);
+    expect(info?.period).toBe(AdvancedCommercePeriod.P1M);
+    expect(info?.requestReferenceId).toBe("ref-12345");
+    expect(info?.taxCode).toBe("TAX_CODE_1");
+    expect(info?.taxExclusivePrice).toBe(8490);
+    expect(info?.taxRate).toBe("0.15");
+    expect(info?.items).toHaveLength(1);
+    const item = info?.items?.[0];
+    expect(item?.SKU).toBe("com.example.sku.premium");
+    expect(item?.description).toBe("Premium feature");
+    expect(item?.displayName).toBe("Premium Feature");
+    expect(item?.price).toBe(9990);
+    expect(item?.revocationDate).toBe(1698149200000);
+    expect(item?.refunds).toHaveLength(1);
+    const refund = item?.refunds?.[0];
+    expect(refund?.refundAmount).toBe(5000);
+    expect(refund?.refundDate).toBe(1698149100000);
+    expect(refund?.refundReason).toBe(AdvancedCommerceRefundReason.FULFILLMENT_ISSUE);
+    expect(refund?.refundType).toBe(AdvancedCommerceRefundType.PRORATED);
+    expect(transaction.billingPlanType).toBe(BillingPlanType.MONTHLY);
+    const txnCommitment = transaction.commitmentInfo;
+    expect(txnCommitment?.billingPeriodNumber).toBe(3);
+    expect(txnCommitment?.commitmentExpiresDate).toBe(1698150000000);
+    expect(txnCommitment?.commitmentPrice).toBe(119880);
+    expect(txnCommitment?.totalBillingPeriods).toBe(12);
+  });
+
+  it("should decode a transaction with revocation", async () => {
+    const signedTransaction = createSignedDataFromJson(
+      "tests/resources/models/signedTransactionWithRevocation.json",
+    );
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const transaction = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeTransaction(signedTransaction)),
+    );
+
+    expect(transaction.originalTransactionId).toBe("12345");
+    expect(transaction.transactionId).toBe("23456");
+    expect(transaction.revocationDate).toBe(1698148950000);
+    expect(transaction.revocationReason).toBe(RevocationReason.REFUNDED_DUE_TO_ISSUE);
+    expect(transaction.revocationType).toBe(RevocationType.REFUND_PRORATED);
+    expect(transaction.revocationPercentage).toBe(50000);
+  });
+
+  it("should decode a signed notification", async () => {
+    const signedNotification = createSignedDataFromJson(
+      "tests/resources/models/signedNotification.json",
+    );
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const notification = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeNotification(signedNotification)),
+    );
+
+    expect(notification.notificationType).toBe(NotificationTypeV2.SUBSCRIBED);
+    expect(notification.subtype).toBe(Subtype.INITIAL_BUY);
+    expect(notification.notificationUUID).toBe("002e14d5-51f5-4503-b5a8-c3a1af68eb20");
+    expect(notification.version).toBe("2.0");
+    expect(notification.signedDate).toBe(1698148900000);
+    expect(notification.data).toBeTruthy();
+    expect(notification.summary).toBeFalsy();
+    expect(notification.externalPurchaseToken).toBeFalsy();
+    expect(notification.data?.environment).toBe(Environment.LOCAL_TESTING);
+    expect(notification.data?.appAppleId).toBe(41234);
+    expect(notification.data?.bundleId).toBe("com.example");
+    expect(notification.data?.bundleVersion).toBe("1.2.3");
+    expect(notification.data?.signedTransactionInfo).toBe("signed_transaction_info_value");
+    expect(notification.data?.signedRenewalInfo).toBe("signed_renewal_info_value");
+    expect(notification.data?.status).toBe(Status.ACTIVE);
+    expect(notification.data?.consumptionRequestReason).toBeFalsy();
+  });
+
+  it("should decode a signed CONSUMPTION_REQUEST notification", async () => {
+    const signedNotification = createSignedDataFromJson(
+      "tests/resources/models/signedConsumptionRequestNotification.json",
+    );
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const notification = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeNotification(signedNotification)),
+    );
+
+    expect(notification.notificationType).toBe(NotificationTypeV2.CONSUMPTION_REQUEST);
+    expect(notification.subtype).toBeFalsy();
+    expect(notification.data).toBeTruthy();
+    expect(notification.data?.consumptionRequestReason).toBe(
+      ConsumptionRequestReason.UNINTENDED_PURCHASE,
+    );
+  });
+
+  it("should decode a signed summary notification", async () => {
+    const signedNotification = createSignedDataFromJson(
+      "tests/resources/models/signedSummaryNotification.json",
+    );
+    const verifier = getDefaultSignedPayloadVerifier();
+
+    const notification = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeNotification(signedNotification)),
+    );
+
+    expect(notification.notificationType).toBe(NotificationTypeV2.RENEWAL_EXTENSION);
+    expect(notification.subtype).toBe(Subtype.SUMMARY);
+    expect(notification.data).toBeFalsy();
+    expect(notification.summary).toBeTruthy();
+    expect(notification.summary?.environment).toBe(Environment.LOCAL_TESTING);
+    expect(notification.summary?.appAppleId).toBe(41234);
+    expect(notification.summary?.bundleId).toBe("com.example");
+    expect(notification.summary?.productId).toBe("com.example.product");
+    expect(notification.summary?.requestIdentifier).toBe("efb27071-45a4-4aca-9854-2a1e9146f265");
+    expect(notification.summary?.storefrontCountryCodes).toEqual(["CAN", "USA", "MEX"]);
+    expect(notification.summary?.succeededCount).toBe(5);
+    expect(notification.summary?.failedCount).toBe(2);
+  });
+
+  it("should decode a signed external purchase token notification", async () => {
+    const signedNotification = createSignedDataFromJson(
+      "tests/resources/models/signedExternalPurchaseTokenNotification.json",
+    );
+
+    let observedBundleId: string | undefined;
+    let observedAppAppleId: number | undefined;
+    let observedEnvironment: string | undefined;
+    const verifier = getSignedPayloadVerifier(
+      // Use LOCAL_TESTING to skip cert/signature checks; the override receives
+      // the values extracted from the (Production) fixture payload.
+      Environment.LOCAL_TESTING,
+      "com.example",
+      55555,
+      (bundleId, appAppleId, environment) => {
+        observedBundleId = bundleId;
+        observedAppAppleId = appAppleId;
+        observedEnvironment = environment;
+      },
+    );
+
+    const notification = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeNotification(signedNotification)),
+    );
+
+    expect(observedBundleId).toBe("com.example");
+    expect(observedAppAppleId).toBe(55555);
+    expect(observedEnvironment).toBe(Environment.PRODUCTION);
+    expect(notification.notificationType).toBe(NotificationTypeV2.EXTERNAL_PURCHASE_TOKEN);
+    expect(notification.subtype).toBe(Subtype.UNREPORTED);
+    expect(notification.externalPurchaseToken?.externalPurchaseId).toBe(
+      "b2158121-7af9-49d4-9561-1f588205523e",
+    );
+    expect(notification.externalPurchaseToken?.tokenCreationDate).toBe(1698148950000);
+    expect(notification.externalPurchaseToken?.appAppleId).toBe(55555);
+    expect(notification.externalPurchaseToken?.bundleId).toBe("com.example");
+  });
+
+  it("should detect sandbox env from external purchase token externalPurchaseId prefix", async () => {
+    const signedNotification = createSignedDataFromJson(
+      "tests/resources/models/signedExternalPurchaseTokenSandboxNotification.json",
+    );
+
+    let observedEnvironment: string | undefined;
+    const verifier = getSignedPayloadVerifier(
+      Environment.LOCAL_TESTING,
+      "com.example",
+      55555,
+      (_bundleId, _appAppleId, environment) => {
+        observedEnvironment = environment;
+      },
+    );
+
+    const notification = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeNotification(signedNotification)),
+    );
+
+    expect(observedEnvironment).toBe(Environment.SANDBOX);
+    expect(notification.externalPurchaseToken?.externalPurchaseId).toBe(
+      "SANDBOX_b2158121-7af9-49d4-9561-1f588205523e",
+    );
+  });
+
+  it("should decode a signed RESCIND_CONSENT notification", async () => {
+    const signedNotification = createSignedDataFromJson(
+      "tests/resources/models/signedRescindConsentNotification.json",
+    );
+
+    let observedBundleId: string | undefined;
+    let observedAppAppleId: number | undefined;
+    let observedEnvironment: string | undefined;
+    const verifier = getSignedPayloadVerifier(
+      Environment.LOCAL_TESTING,
+      "com.example",
+      41234,
+      (bundleId, appAppleId, environment) => {
+        observedBundleId = bundleId;
+        observedAppAppleId = appAppleId;
+        observedEnvironment = environment;
+      },
+    );
+
+    const notification = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeNotification(signedNotification)),
+    );
+
+    expect(observedBundleId).toBe("com.example");
+    expect(observedAppAppleId).toBe(41234);
+    expect(observedEnvironment).toBe(Environment.LOCAL_TESTING);
+    expect(notification.notificationType).toBe(NotificationTypeV2.RESCIND_CONSENT);
+    expect(notification.appData?.environment).toBe(Environment.LOCAL_TESTING);
+    expect(notification.appData?.appAppleId).toBe(41234);
+    expect(notification.appData?.bundleId).toBe("com.example");
+    expect(notification.appData?.signedAppTransactionInfo).toBe(
+      "signed_app_transaction_info_value",
+    );
+  });
+
+  it("should accept revocationType as a string in transaction payloads", () => {
+    const transaction = unwrapOptionsDeep(
+      Schema.decodeUnknownSync(JWSTransactionDecodedPayloadSchema)({
+        originalTransactionId: "12345",
+        transactionId: "23456",
+        bundleId: "com.example",
+        productId: "com.example.product",
+        revocationType: "REFUND_FULL",
+      }),
+    );
+
+    expect(transaction.revocationType).toBe("REFUND_FULL");
+  });
+});
diff --git a/packages/app-store-server-sdk/tests/util.ts b/packages/app-store-server-sdk/tests/util.ts
new file mode 100644
index 000000000..ddb40f0fd
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/util.ts
@@ -0,0 +1,252 @@
+import fs from "node:fs";
+import path from "node:path";
+import { Effect, Option } from "effect";
+import { HttpClient, HttpClientResponse } from "effect/unstable/http";
+import { exportPKCS8, generateKeyPair } from "jose";
+import { Environment } from "../src/schemas/index.ts";
+import { AppStoreServerSdk } from "../src/sdk.ts";
+import { SignedDataVerifier } from "../src/verification/index.ts";
+import { AppStoreServerSdkClient } from "../src/client/index.ts";
+
+/**
+ * Read a file from the tests/resources directory.
+ */
+export const readFile = (filePath: string): string => {
+  const fullPath = path.join(process.cwd(), filePath);
+  return fs.readFileSync(fullPath, "utf-8");
+};
+
+/**
+ * Read a binary file from the tests/resources directory.
+ */
+export const readBinaryFile = (filePath: string): Buffer => {
+  const fullPath = path.join(process.cwd(), filePath);
+  return fs.readFileSync(fullPath);
+};
+
+export const unwrapOptionsDeep = <T>(value: T): T => {
+  if (Option.isOption(value)) {
+    return Option.match(value, {
+      onNone: () => undefined as T,
+      onSome: (some) => unwrapOptionsDeep(some) as T,
+    });
+  }
+  if (Array.isArray(value)) {
+    return value.map(unwrapOptionsDeep) as T;
+  }
+  if (typeof value === "object" && value !== null) {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, item]) => [key, unwrapOptionsDeep(item)]),
+    ) as T;
+  }
+  return value;
+};
+
+/** Ephemeral ES256 signing key used only by this test process. */
+export const TEST_SIGNING_KEY = await generateKeyPair("ES256", { extractable: true }).then(
+  ({ privateKey }) => exportPKCS8(privateKey),
+);
+
+/**
+ * Test root CA certificate 1 (base64 encoded DER format).
+ * Used by testNotification, transactionInfo mock files.
+ */
+export const ROOT_CA_BASE64_ENCODED_1 =
+  "MIIBXDCCAQICCQCfjTUGLDnR9jAKBggqhkjOPQQDAzA2MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJQ3VwZXJ0aW5vMB4XDTIzMDEwNDE2MjAzMloXDTMzMDEwMTE2MjAzMlowNjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCUN1cGVydGlubzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABHPvwZfoKLKaOrX/We4qObXSna5TdWHVZ6hIRA1w0oc3QCT0Io2plyDB3/MVlk2tc4KGE8TiqW7ibQ6Zc9V64k0wCgYIKoZIzj0EAwMDSAAwRQIhAMTHhWtbAQN0hSxIXcP4CKrDCH/gsxWpx6jTZLTeZ+FPAiB35nwk5q0zcIpefvYJ0MU/yGGHSWez0bq0pDYUO/nmDw==";
+
+/**
+ * Test root CA certificate 2 (base64 encoded DER format).
+ * Used by renewalInfo, wrongBundleId mock files.
+ */
+export const ROOT_CA_BASE64_ENCODED_2 =
+  "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";
+
+/**
+ * Build a mock `HttpClient.HttpClient` that returns predefined responses.
+ */
+export const createMockHttpClient = (
+  responseBody: string,
+  statusCode: number,
+  callback?: (
+    path: string,
+    method: string,
+    body: string | undefined,
+    headers: Record<string, string>,
+  ) => void,
+): HttpClient.HttpClient =>
+  HttpClient.make((request, url, _signal, _fiber) =>
+    Effect.sync(() => {
+      if (callback) {
+        let bodyString: string | undefined;
+        try {
+          if (request.body && "_tag" in request.body) {
+            const body = request.body as { _tag: string; body?: unknown };
+            if (body._tag === "Uint8Array" && body.body instanceof Uint8Array) {
+              bodyString = new TextDecoder().decode(body.body);
+            } else if (body._tag === "Raw") {
+              const rawBody = body.body;
+              if (typeof rawBody === "string") {
+                bodyString = rawBody;
+              } else if (rawBody instanceof Uint8Array) {
+                bodyString = new TextDecoder().decode(rawBody);
+              }
+            }
+          }
+        } catch {}
+
+        const pathAndQuery = url.pathname + url.search;
+        const headers: Record<string, string> = {};
+        try {
+          for (const [key, value] of request.headers) {
+            headers[key] = value;
+          }
+        } catch {}
+        callback(pathAndQuery, request.method, bodyString, headers);
+      }
+
+      const webRequest = new Request(url.toString());
+      const webResponse = new Response(responseBody, {
+        status: statusCode,
+        headers: { "Content-Type": "application/json" },
+      });
+
+      return HttpClientResponse.fromWeb(webRequest, webResponse);
+    }),
+  );
+
+/**
+ * Build an `AppStoreServerSdk` instance backed by a mock HttpClient. Use with
+ * `AppStoreServerSdkClient.make` and `SignedDataVerifier.make` in tests.
+ */
+export const createMockSdk = (
+  httpClient: HttpClient.HttpClient,
+): typeof AppStoreServerSdk.Service => AppStoreServerSdk.of({ httpClient });
+
+/**
+ * Convert base64-encoded DER certificate to PEM format.
+ */
+const toPem = (base64Der: string): string =>
+  `-----BEGIN CERTIFICATE-----\n${base64Der}\n-----END CERTIFICATE-----`;
+
+const noopMockSdk = createMockSdk(
+  HttpClient.make(() => Effect.die("HttpClient not configured for SignedDataVerifier tests")),
+);
+
+/**
+ * Build a `SignedDataVerifier` instance with the test root certificates.
+ *
+ * The optional `verifyNotificationOverride` callback mirrors the upstream
+ * library's `verifyNotification(bundleId, appAppleId, environment)` hook —
+ * useful when a fixture's expected env/appAppleId differs from the verifier's
+ * defaults and you only want to assert the extracted identifiers.
+ */
+export const getSignedPayloadVerifier = (
+  environment: (typeof Environment)[keyof typeof Environment],
+  bundleId: string,
+  appAppleId?: number,
+  verifyNotificationOverride?: (
+    bundleId: string | undefined,
+    appAppleId: number | undefined,
+    environment: string | undefined,
+  ) => void,
+): SignedDataVerifier =>
+  SignedDataVerifier.make(noopMockSdk, {
+    rootCertificates: [toPem(ROOT_CA_BASE64_ENCODED_1), toPem(ROOT_CA_BASE64_ENCODED_2)],
+    enableOnlineChecks: false,
+    environment,
+    bundleId,
+    appAppleId: Option.fromNullishOr(appAppleId),
+    verifyNotificationOverride: Option.fromNullishOr(
+      verifyNotificationOverride
+        ? (
+            bundleId: Option.Option<string>,
+            appAppleId: Option.Option<number>,
+            environment: Option.Option<string>,
+          ) =>
+            verifyNotificationOverride(
+              Option.getOrUndefined(bundleId),
+              Option.getOrUndefined(appAppleId),
+              Option.getOrUndefined(environment),
+            )
+        : undefined,
+    ),
+  });
+
+/**
+ * Build a `SignedDataVerifier` with the default test app Apple ID (1234).
+ */
+export const getSignedPayloadVerifierWithDefaultAppAppleId = (
+  environment: (typeof Environment)[keyof typeof Environment],
+  bundleId: string,
+): SignedDataVerifier => getSignedPayloadVerifier(environment, bundleId, 1234);
+
+/**
+ * Build a default `SignedDataVerifier` for `LOCAL_TESTING` of `com.example`.
+ */
+export const getDefaultSignedPayloadVerifier = (): SignedDataVerifier =>
+  getSignedPayloadVerifierWithDefaultAppAppleId(Environment.LOCAL_TESTING, "com.example");
+
+/**
+ * Create signed data from JSON for testing decoding.
+ *
+ * These fixtures are decoded by a verifier in `LocalTesting`/`Xcode` mode, which
+ * skips both the certificate-chain and JWS signature checks. A structurally
+ * valid JWS with a placeholder signature is therefore sufficient — no real
+ * signing key is needed, which keeps the test helper WebCrypto-free.
+ */
+export const createSignedDataFromJson = (filePath: string): string => {
+  const fileContents = readFile(filePath);
+  const header = Buffer.from(JSON.stringify({ alg: "ES256" })).toString("base64url");
+  const payload = Buffer.from(fileContents).toString("base64url");
+  const signature = Buffer.from("unsigned-local-testing-fixture").toString("base64url");
+  return `${header}.${payload}.${signature}`;
+};
+
+/**
+ * Build an `AppStoreServerSdkClient` backed by a mock HTTP response loaded
+ * from a file fixture.
+ */
+export const getClientWithMockedResponse = (
+  responseFilePath: string,
+  statusCode = 200,
+  callback?: (
+    path: string,
+    method: string,
+    body: string | undefined,
+    headers: Record<string, string>,
+  ) => void,
+): AppStoreServerSdkClient => {
+  const responseBody = readFile(responseFilePath);
+  const sdk = createMockSdk(createMockHttpClient(responseBody, statusCode, callback));
+  return AppStoreServerSdkClient.make(sdk, {
+    signingKey: TEST_SIGNING_KEY,
+    keyId: "keyId",
+    issuerId: "issuerId",
+    bundleId: "bundleId",
+    environment: Environment.LOCAL_TESTING,
+  });
+};
+
+/**
+ * Build an `AppStoreServerSdkClient` backed by a mock HTTP response from an
+ * inline body string.
+ */
+export const getClientWithBody = (
+  responseBody: string,
+  statusCode = 200,
+  callback?: (
+    path: string,
+    method: string,
+    body: string | undefined,
+    headers: Record<string, string>,
+  ) => void,
+): AppStoreServerSdkClient => {
+  const sdk = createMockSdk(createMockHttpClient(responseBody, statusCode, callback));
+  return AppStoreServerSdkClient.make(sdk, {
+    signingKey: TEST_SIGNING_KEY,
+    keyId: "keyId",
+    issuerId: "issuerId",
+    bundleId: "bundleId",
+    environment: Environment.LOCAL_TESTING,
+  });
+};
diff --git a/packages/app-store-server-sdk/tests/verification.test.ts b/packages/app-store-server-sdk/tests/verification.test.ts
new file mode 100644
index 000000000..cb9da1629
--- /dev/null
+++ b/packages/app-store-server-sdk/tests/verification.test.ts
@@ -0,0 +1,170 @@
+import { describe, expect, it } from "vitest";
+import { Effect } from "effect";
+import { VerificationError, VerificationStatus } from "../src/errors/index.ts";
+import { Environment } from "../src/schemas/index.ts";
+import {
+  readFile,
+  getSignedPayloadVerifierWithDefaultAppAppleId,
+  unwrapOptionsDeep,
+} from "./util.ts";
+
+describe("Decoding checks", () => {
+  it("should fail to verify with a missing x5c header", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.PRODUCTION,
+      "com.example",
+    );
+    const missingX5CHeaderClaim = readFile(
+      "tests/resources/mock_signed_data/missingX5CHeaderClaim",
+    );
+
+    const result = await Effect.runPromiseExit(
+      verifier.verifyAndDecodeNotification(missingX5CHeaderClaim),
+    );
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      const error = result.cause;
+      if (error._tag === "Fail") {
+        const verificationError = error.error as VerificationError;
+        expect(verificationError._tag).toBe("VerificationError");
+        expect(verificationError.status).toBe(VerificationStatus.INVALID_CHAIN_LENGTH);
+      }
+    }
+  });
+
+  it("should fail to verify with an invalid bundle id", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.SANDBOX,
+      "com.example",
+    );
+    const wrongBundleId = readFile("tests/resources/mock_signed_data/wrongBundleId");
+
+    const result = await Effect.runPromiseExit(verifier.verifyAndDecodeNotification(wrongBundleId));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      const error = result.cause;
+      if (error._tag === "Fail") {
+        const verificationError = error.error as VerificationError;
+        expect(verificationError._tag).toBe("VerificationError");
+        expect(verificationError.status).toBe(VerificationStatus.INVALID_APP_IDENTIFIER);
+      }
+    }
+  });
+
+  it("should fail to verify with an invalid bundle id for transaction", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.SANDBOX,
+      "com.example.x",
+    );
+    const transactionInfo = readFile("tests/resources/mock_signed_data/transactionInfo");
+
+    const result = await Effect.runPromiseExit(
+      verifier.verifyAndDecodeTransaction(transactionInfo),
+    );
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      const error = result.cause;
+      if (error._tag === "Fail") {
+        const verificationError = error.error as VerificationError;
+        expect(verificationError._tag).toBe("VerificationError");
+        expect(verificationError.status).toBe(VerificationStatus.INVALID_APP_IDENTIFIER);
+      }
+    }
+  });
+
+  it("should fail to verify with an invalid environment", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.PRODUCTION,
+      "com.example",
+    );
+    const testNotification = readFile("tests/resources/mock_signed_data/testNotification");
+
+    const result = await Effect.runPromiseExit(
+      verifier.verifyAndDecodeNotification(testNotification),
+    );
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      const error = result.cause;
+      if (error._tag === "Fail") {
+        const verificationError = error.error as VerificationError;
+        expect(verificationError._tag).toBe("VerificationError");
+        expect(verificationError.status).toBe(VerificationStatus.INVALID_ENVIRONMENT);
+      }
+    }
+  });
+
+  it("should fail to verify with a malformed JWT with too many parts", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.SANDBOX,
+      "com.example",
+    );
+
+    const result = await Effect.runPromiseExit(verifier.verifyAndDecodeNotification("a.b.c.d"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      const error = result.cause;
+      if (error._tag === "Fail") {
+        const verificationError = error.error as VerificationError;
+        expect(verificationError._tag).toBe("VerificationError");
+        expect(verificationError.status).toBe(VerificationStatus.VERIFICATION_FAILURE);
+      }
+    }
+  });
+
+  it("should fail to verify with a malformed JWT", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.SANDBOX,
+      "com.example",
+    );
+
+    const result = await Effect.runPromiseExit(verifier.verifyAndDecodeNotification("a.b.c"));
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      const error = result.cause;
+      if (error._tag === "Fail") {
+        const verificationError = error.error as VerificationError;
+        expect(verificationError._tag).toBe("VerificationError");
+        expect(verificationError.status).toBe(VerificationStatus.VERIFICATION_FAILURE);
+      }
+    }
+  });
+
+  it("should verify and decode a valid notification", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.SANDBOX,
+      "com.example",
+    );
+    const testNotification = readFile("tests/resources/mock_signed_data/testNotification");
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeNotification(testNotification)),
+    );
+    expect(result.notificationType).toBe("TEST");
+  });
+
+  it("should verify and decode valid renewal info", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.SANDBOX,
+      "com.example",
+    );
+    const renewalInfo = readFile("tests/resources/mock_signed_data/renewalInfo");
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeRenewalInfo(renewalInfo)),
+    );
+    expect(result.environment).toBe(Environment.SANDBOX);
+  });
+
+  it("should verify and decode valid transaction info", async () => {
+    const verifier = getSignedPayloadVerifierWithDefaultAppAppleId(
+      Environment.SANDBOX,
+      "com.example",
+    );
+    const transactionInfo = readFile("tests/resources/mock_signed_data/transactionInfo");
+
+    const result = unwrapOptionsDeep(
+      await Effect.runPromise(verifier.verifyAndDecodeTransaction(transactionInfo)),
+    );
+    expect(result.environment).toBe(Environment.SANDBOX);
+  });
+});
diff --git a/packages/app-store-server-sdk/tsconfig.json b/packages/app-store-server-sdk/tsconfig.json
new file mode 100644
index 000000000..764908027
--- /dev/null
+++ b/packages/app-store-server-sdk/tsconfig.json
@@ -0,0 +1,10 @@
+{
+  "extends": "@voidhash/tsconfig/base.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"],
+  "compilerOptions": {
+    "allowImportingTsExtensions": true,
+    "declaration": false,
+    "lib": ["ES2022", "DOM"]
+  }
+}
diff --git a/packages/app-store-server-sdk/vitest.unit.mts b/packages/app-store-server-sdk/vitest.unit.mts
new file mode 100644
index 000000000..8dde916c9
--- /dev/null
+++ b/packages/app-store-server-sdk/vitest.unit.mts
@@ -0,0 +1,9 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    exclude: ["./**/*.integration.test.ts", "./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/packages/app-store-server-sdk/workerd-smoke/run-smoke.mjs b/packages/app-store-server-sdk/workerd-smoke/run-smoke.mjs
new file mode 100644
index 000000000..9ab903739
--- /dev/null
+++ b/packages/app-store-server-sdk/workerd-smoke/run-smoke.mjs
@@ -0,0 +1,136 @@
+// Real Cloudflare Workers (workerd) smoke test for the App Store SDK verifier.
+//
+// Bundles `worker.ts` (which imports the ported verifier) with esbuild for the
+// workerd runtime, runs it inside an actual workerd instance via miniflare, and
+// asserts the full WebCrypto verification path works there:
+//   - a genuinely Apple-signed transaction verifies (ok: true)
+//   - a tampered signature is rejected (ok: false)
+//
+// This is the proof that the SDK runs on Workers, complementing the static
+// `import-ban.test.ts` gate. Run with `pnpm test:workers`.
+
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import esbuild from "esbuild";
+import { Miniflare } from "miniflare";
+
+const here = path.dirname(fileURLToPath(import.meta.url));
+const pkgRoot = path.resolve(here, "..");
+
+// Test root certificates (base64 DER) that the mock_signed_data fixtures chain
+// to — kept in sync with tests/util.ts.
+const ROOT_CA_BASE64_ENCODED_1 =
+  "MIIBXDCCAQICCQCfjTUGLDnR9jAKBggqhkjOPQQDAzA2MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UEBwwJQ3VwZXJ0aW5vMB4XDTIzMDEwNDE2MjAzMloXDTMzMDEwMTE2MjAzMlowNjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCUN1cGVydGlubzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABHPvwZfoKLKaOrX/We4qObXSna5TdWHVZ6hIRA1w0oc3QCT0Io2plyDB3/MVlk2tc4KGE8TiqW7ibQ6Zc9V64k0wCgYIKoZIzj0EAwMDSAAwRQIhAMTHhWtbAQN0hSxIXcP4CKrDCH/gsxWpx6jTZLTeZ+FPAiB35nwk5q0zcIpefvYJ0MU/yGGHSWez0bq0pDYUO/nmDw==";
+const ROOT_CA_BASE64_ENCODED_2 =
+  "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";
+
+const toPem = (base64) => `-----BEGIN CERTIFICATE-----\n${base64}\n-----END CERTIFICATE-----`;
+
+// Rewrite NodeNext `.js` specifiers to their sibling `.ts` source so esbuild can
+// bundle the TS package without a prior compile step. Bare deps (jose, peculiar,
+// effect, reflect-metadata) keep normal node_modules resolution.
+const tsResolvePlugin = {
+  name: "ts-js-resolve",
+  setup(build) {
+    build.onResolve({ filter: /\.js$/ }, (args) => {
+      if (args.kind === "entry-point" || !args.path.startsWith(".")) return undefined;
+      const tsPath = path.resolve(args.resolveDir, args.path).replace(/\.js$/, ".ts");
+      return existsSync(tsPath) ? { path: tsPath } : undefined;
+    });
+  },
+};
+
+const flipLastChar = (segment) => {
+  const last = segment[segment.length - 1];
+  return segment.slice(0, -1) + (last === "A" ? "B" : "A");
+};
+
+const main = async () => {
+  const result = await esbuild.build({
+    entryPoints: [path.join(here, "worker.ts")],
+    bundle: true,
+    write: false,
+    format: "esm",
+    target: "es2022",
+    platform: "browser",
+    conditions: ["workerd", "worker", "browser", "import", "module", "default"],
+    mainFields: ["module", "main"],
+    plugins: [tsResolvePlugin],
+    logLevel: "warning",
+  });
+
+  const code = result.outputFiles[0].text;
+
+  // Intentionally NO nodejs_compat flag: we want to prove the verifier runs in
+  // pure workerd, with no Node shims (no Buffer, no node: builtins).
+  const mf = new Miniflare({
+    modules: true,
+    compatibilityDate: "2025-01-01",
+    script: code,
+  });
+
+  let failures = 0;
+  const check = (label, condition, detail) => {
+    if (condition) {
+      console.log(`  ✓ ${label}`);
+    } else {
+      failures++;
+      console.log(`  ✗ ${label}${detail ? ` — ${detail}` : ""}`);
+    }
+  };
+
+  try {
+    const signedTransaction = readFileSync(
+      path.join(pkgRoot, "tests/resources/mock_signed_data/transactionInfo"),
+      "utf-8",
+    ).trim();
+
+    const baseBody = {
+      rootCertificates: [toPem(ROOT_CA_BASE64_ENCODED_1), toPem(ROOT_CA_BASE64_ENCODED_2)],
+      bundleId: "com.example",
+      environment: "Sandbox",
+    };
+
+    const post = async (body) => {
+      const res = await mf.dispatchFetch("http://smoke/", {
+        method: "POST",
+        body: JSON.stringify(body),
+      });
+      return res.json();
+    };
+
+    console.log("workerd smoke test (App Store SDK verifier):");
+
+    const valid = await post({ ...baseBody, signedTransaction });
+    check(
+      "runs inside workerd with WebCrypto",
+      valid.runtime?.subtle === "object",
+      JSON.stringify(valid.runtime),
+    );
+    check(
+      "does NOT rely on Node Buffer",
+      valid.runtime?.hasBuffer === false,
+      `Buffer present: ${valid.runtime?.hasBuffer}`,
+    );
+    check("verifies a genuinely Apple-signed transaction", valid.ok === true, valid.error);
+
+    const tamperedSignature = (() => {
+      const parts = signedTransaction.split(".");
+      parts[2] = flipLastChar(parts[2]);
+      return parts.join(".");
+    })();
+    const tampered = await post({ ...baseBody, signedTransaction: tamperedSignature });
+    check("rejects a tampered signature (fails loud)", tampered.ok === false, tampered.error);
+  } finally {
+    await mf.dispose();
+  }
+
+  if (failures > 0) {
+    console.error(`\nworkerd smoke test FAILED (${failures} check(s) failed)`);
+    process.exit(1);
+  }
+  console.log("\nworkerd smoke test PASSED — verifier runs on Cloudflare Workers.");
+};
+
+await main();
diff --git a/packages/app-store-server-sdk/workerd-smoke/worker.ts b/packages/app-store-server-sdk/workerd-smoke/worker.ts
new file mode 100644
index 000000000..ea4d24990
--- /dev/null
+++ b/packages/app-store-server-sdk/workerd-smoke/worker.ts
@@ -0,0 +1,50 @@
+/**
+ * Workers-runtime smoke-test entry point.
+ *
+ * This module is bundled by `run-smoke.mjs` and executed inside a real workerd
+ * instance (via miniflare) — NOT Node. It imports the actual ported verifier so
+ * the smoke test proves the full crypto path (jose `compactVerify` +
+ * `@peculiar/x509` chain validation + WebCrypto, including the `reflect-metadata`
+ * / `tsyringe` initialization peculiar relies on) runs on Cloudflare Workers.
+ */
+import { Effect, Option } from "effect";
+import { Environment } from "../src/schemas/index.js";
+import { SignedDataVerifier } from "../src/verification/index.js";
+
+interface VerifyRequest {
+  signedTransaction: string;
+  rootCertificates: string[];
+  bundleId: string;
+  environment: string;
+}
+
+export default {
+  async fetch(request: Request): Promise<Response> {
+    const runtime = {
+      subtle: typeof globalThis.crypto?.subtle,
+      randomUUID: typeof globalThis.crypto?.randomUUID,
+      hasBuffer: typeof (globalThis as { Buffer?: unknown }).Buffer !== "undefined",
+    };
+
+    try {
+      const body = (await request.json()) as VerifyRequest;
+
+      const verifier = SignedDataVerifier.make(null as never, {
+        rootCertificates: body.rootCertificates,
+        enableOnlineChecks: false,
+        environment: body.environment as (typeof Environment)[keyof typeof Environment],
+        bundleId: body.bundleId,
+        appAppleId: Option.none(),
+        verifyNotificationOverride: Option.none(),
+      });
+
+      const exit = await Effect.runPromiseExit(
+        verifier.verifyAndDecodeTransaction(body.signedTransaction),
+      );
+
+      return Response.json({ ok: exit._tag === "Success", runtime });
+    } catch (error) {
+      return Response.json({ ok: false, runtime, error: String(error) }, { status: 500 });
+    }
+  },
+};
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 46a464c79..199a95347 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -500,6 +500,31 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/app-store-server-sdk:
+    dependencies:
+      '@peculiar/x509':
+        specifier: ^2.0.0
+        version: 2.0.0
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      jose:
+        specifier: ^6.0.11
+        version: 6.1.3
+      reflect-metadata:
+        specifier: ^0.2.2
+        version: 0.2.2
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 5.9.3
+        version: 5.9.3
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/generated-clients:
     dependencies:
       effect:
@@ -2727,6 +2752,43 @@ packages:
     resolution: {integrity: sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==}
     engines: {node: '>=14'}
 
+  '@peculiar/asn1-cms@2.8.0':
+    resolution: {integrity: sha512-NgekZOrSJFSBFLFoLfwePguAWAx7z1+f2TEsWFUMyiqqfntZ4+S/S5hzqME3q4pCA0iOsFKdwiQ35dwY24eVqA==}
+
+  '@peculiar/asn1-csr@2.8.0':
+    resolution: {integrity: sha512-akbF8+uvleHs8sejNPQxwmVFuInAg6FMNHOwMILXfP518YfFJwdR3jr6oNUPOaEJfuEhn/vkNOCIT6ASUd4mbg==}
+
+  '@peculiar/asn1-ecc@2.8.0':
+    resolution: {integrity: sha512-ohwlk+u9Rv2NOAY1c6MfHj45ATVF8R1DUN/WCgABiRtLi2ZftlZWZX7KvpAbU8v9xPcmoILfELeEABj/rn18AQ==}
+
+  '@peculiar/asn1-pfx@2.8.0':
+    resolution: {integrity: sha512-5yof1ytoB++RQtaFbqSUJ8pxDJtZT6vbVqZ8XoJ61ph7UjNVvfFwAilnCodqkNsAodpy13gDhoxZXw00pghnyg==}
+
+  '@peculiar/asn1-pkcs8@2.8.0':
+    resolution: {integrity: sha512-qAKXtLpBEw9LqhKpjw3ajZSXlBur+ipW+y2ivVBQAG6F6qRx94yO+1ZR4mvw+YaCfKSaOzLeYEzsPaBp4SJELA==}
+
+  '@peculiar/asn1-pkcs9@2.8.0':
+    resolution: {integrity: sha512-b5nDWCnkV60+cQ141D6sVVwK9nz64R5n3zSVnklGd+ECdkW2Ol3U1a6yYFlalpSOaD557yuJB64A+q42jG7lUQ==}
+
+  '@peculiar/asn1-rsa@2.8.0':
+    resolution: {integrity: sha512-zHEUlCqB2mk7x2lxDwHHJy7hWZOPdGHVlsmITWKB5/PbQo61atbu9PJ/0r9dQNMwFzbKPXZ8uK8/91eUhRznSg==}
+
+  '@peculiar/asn1-schema@2.8.0':
+    resolution: {integrity: sha512-7YT0U/ze0tF2QOBbE15gKZwy5tvgGyLRiRHLzhlbOpf7BT032oBSd0haZqXn5W6l26WLlu3dyxzjM+2638/z2Q==}
+
+  '@peculiar/asn1-x509-attr@2.8.0':
+    resolution: {integrity: sha512-tHjkfS/qhMnmrlB2J9NhflQlQ7In3khO3CfmVrriOlpTeErY9ZIKOso1hQ5JQiyrJ7ShvqVPk7E5fQmbclkSKA==}
+
+  '@peculiar/asn1-x509@2.8.0':
+    resolution: {integrity: sha512-N0CMuhWUzsWEVq6F1q9X6+VKUnWzSW+cSVg+aPaGGwDdbFoFWTYgin5MHwXgpWd6y9COMBxnfy/Qc+Xc7F0Zwg==}
+
+  '@peculiar/utils@2.0.3':
+    resolution: {integrity: sha512-+oL3HPFRIZ1St2K50lWCXiioIgSoxzz7R1J3uF6neO2yl1sgmpgY6XXJH4BdpoDkMWznQTeYF6oWNDZLCdQ4eQ==}
+
+  '@peculiar/x509@2.0.0':
+    resolution: {integrity: sha512-r10lkuy6BNfRmyYdRAfgu6dq0HOmyIV2OLhXWE3gDEPBdX1b8miztJVyX/UxWhLwemNyDP3CLZHpDxDwSY0xaA==}
+    engines: {node: '>=20.0.0'}
+
   '@pkgr/core@0.2.9':
     resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
@@ -3871,6 +3933,10 @@ packages:
   asap@2.0.6:
     resolution: {integrity: sha512-BSHWgDSAiKs50o2Re8ppvp3seVHXSRM44cdSsT9FfNEUUZLOGWVCsiWaRPWM1Znn+mqZ1OfVZ3z3DWEzSp7hRA==}
 
+  asn1js@3.0.10:
+    resolution: {integrity: sha512-S2s3aOytiKdFRdulw2qPE51MzjzVOisppcVv7jVFR+Kw0kxwvFrDcYA0h7Ndqbmj0HkMIXYWaoj7fli8kgx1eg==}
+    engines: {node: '>=12.0.0'}
+
   assertion-error@2.0.1:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
@@ -6705,6 +6771,13 @@ packages:
   pure-rand@8.4.1:
     resolution: {integrity: sha512-c58R2+SPFcSIPXoU834QN/KPDDOSd8sXcSrqf6e83Me6Rrp1EYkxukkjXMVrKvKaADs1SOyNkWdfvLf6zY8qLQ==}
 
+  pvtsutils@1.3.6:
+    resolution: {integrity: sha512-PLgQXQ6H2FWCaeRak8vvk1GW462lMxB5s3Jm673N82zI4vqtVUPuZdffdZbPDFRoU8kAhItWFtPCWiPpp4/EDg==}
+
+  pvutils@1.1.5:
+    resolution: {integrity: sha512-KTqnxsgGiQ6ZAzZCVlJH5eOjSnvlyEgx1m8bkRJfOhmGRqfo5KLvmAlACQkrjEtOQ4B7wF9TdSLIs9O90MX9xA==}
+    engines: {node: '>=16.0.0'}
+
   qrcode-terminal@0.11.0:
     resolution: {integrity: sha512-Uu7ii+FQy4Qf82G4xu7ShHhjhGahEpCWc3x8UavY3CTcWV+ufmmCtwkr7ZKsX42jdL0kr1B5FKUeqJvAn51jzQ==}
     hasBin: true
@@ -6900,6 +6973,9 @@ packages:
     resolution: {integrity: sha512-DJnGAeenTdpMEH6uAJRK/uiyEIH9WVsUmoLwzudwGJUwZPp80PDBWPHXSAGNPwNvIXAbe7MSUB1zQFugFml66A==}
     engines: {node: '>=4'}
 
+  reflect-metadata@0.2.2:
+    resolution: {integrity: sha512-urBwgfrvVP/eAyXx4hluJivBKzuEbSQs9rKWCrCkbSxNv8mxPcUZKeuoF3Uy4mJl3Lwprp6yy5/39VWigZ4K6Q==}
+
   reflect.getprototypeof@1.0.10:
     resolution: {integrity: sha512-00o4I+DVrefhv+nX0ulyi3biSHCPDe+yLv5o/p6d/UVlirijB8E16FtfwSAi4g3tcqrQ4lRAqQSoFEZJehYEcw==}
     engines: {node: '>= 0.4'}
@@ -7530,6 +7606,9 @@ packages:
   tsconfig-paths@3.15.0:
     resolution: {integrity: sha512-2Ac2RgzDe/cn48GvOe3M+o82pEFewD3UPbyoUHHdKasHwJKjds4fLXWf/Ux5kATBKN20oaFGu+jbElp1pos0mg==}
 
+  tslib@1.14.1:
+    resolution: {integrity: sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==}
+
   tslib@2.8.1:
     resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
 
@@ -7557,6 +7636,10 @@ packages:
     engines: {node: '>=18.0.0'}
     hasBin: true
 
+  tsyringe@4.10.0:
+    resolution: {integrity: sha512-axr3IdNuVIxnaK5XGEUFTu3YmAQ6lllgrvqfEoR16g/HGnYY/6We4oWENtAnzK6/LpJ2ur9PAb80RBt7/U4ugw==}
+    engines: {node: '>= 6.0.0'}
+
   turbo@2.10.4:
     resolution: {integrity: sha512-GQpduILaKjoaGljw097ScsSyKTtZSY7cZ3bJktzfTkPMyCf3ShKLuXK2IaOEN2Plziml+ArR7WJ1m+V4VbnaKQ==}
     hasBin: true
@@ -10299,6 +10382,99 @@ snapshots:
 
   '@opentelemetry/semantic-conventions@1.43.0': {}
 
+  '@peculiar/asn1-cms@2.8.0':
+    dependencies:
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      '@peculiar/asn1-x509-attr': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-csr@2.8.0':
+    dependencies:
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-ecc@2.8.0':
+    dependencies:
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-pfx@2.8.0':
+    dependencies:
+      '@peculiar/asn1-cms': 2.8.0
+      '@peculiar/asn1-pkcs8': 2.8.0
+      '@peculiar/asn1-rsa': 2.8.0
+      '@peculiar/asn1-schema': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-pkcs8@2.8.0':
+    dependencies:
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-pkcs9@2.8.0':
+    dependencies:
+      '@peculiar/asn1-cms': 2.8.0
+      '@peculiar/asn1-pfx': 2.8.0
+      '@peculiar/asn1-pkcs8': 2.8.0
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      '@peculiar/asn1-x509-attr': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-rsa@2.8.0':
+    dependencies:
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-schema@2.8.0':
+    dependencies:
+      '@peculiar/utils': 2.0.3
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-x509-attr@2.8.0':
+    dependencies:
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/asn1-x509@2.8.0':
+    dependencies:
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/utils': 2.0.3
+      asn1js: 3.0.10
+      tslib: 2.8.1
+
+  '@peculiar/utils@2.0.3':
+    dependencies:
+      tslib: 2.8.1
+
+  '@peculiar/x509@2.0.0':
+    dependencies:
+      '@peculiar/asn1-cms': 2.8.0
+      '@peculiar/asn1-csr': 2.8.0
+      '@peculiar/asn1-ecc': 2.8.0
+      '@peculiar/asn1-pkcs9': 2.8.0
+      '@peculiar/asn1-rsa': 2.8.0
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      pvtsutils: 1.3.6
+      tslib: 2.8.1
+      tsyringe: 4.10.0
+
   '@pkgr/core@0.2.9': {}
 
   '@radix-ui/primitive@1.1.3': {}
@@ -11506,6 +11682,12 @@ snapshots:
 
   asap@2.0.6: {}
 
+  asn1js@3.0.10:
+    dependencies:
+      pvtsutils: 1.3.6
+      pvutils: 1.1.5
+      tslib: 2.8.1
+
   assertion-error@2.0.1: {}
 
   async-function@1.0.0: {}
@@ -15132,6 +15314,12 @@ snapshots:
 
   pure-rand@8.4.1: {}
 
+  pvtsutils@1.3.6:
+    dependencies:
+      tslib: 2.8.1
+
+  pvutils@1.1.5: {}
+
   qrcode-terminal@0.11.0: {}
 
   quansync@0.2.11: {}
@@ -15365,6 +15553,8 @@ snapshots:
     dependencies:
       redis-errors: 1.2.0
 
+  reflect-metadata@0.2.2: {}
+
   reflect.getprototypeof@1.0.10:
     dependencies:
       call-bind: 1.0.8
@@ -16026,6 +16216,8 @@ snapshots:
       minimist: 1.2.8
       strip-bom: 3.0.0
 
+  tslib@1.14.1: {}
+
   tslib@2.8.1: {}
 
   tsup@8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
@@ -16063,6 +16255,10 @@ snapshots:
     optionalDependencies:
       fsevents: 2.3.3
 
+  tsyringe@4.10.0:
+    dependencies:
+      tslib: 1.14.1
+
   turbo@2.10.4:
     optionalDependencies:
       '@turbo/darwin-64': 2.10.4

From 08ac363d8b008493057fb755ffcb3ca9e4829c00 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 14:11:58 +0200
Subject: [PATCH 045/129] build(oss): relocate Google Play server SDK

---
 packages/google-play-server-sdk/LICENSE.md    |  21 +
 packages/google-play-server-sdk/package.json  |  35 +
 .../src/client/GooglePlayApiClient.ts         | 807 ++++++++++++++++++
 .../google-play-server-sdk/src/client/auth.ts | 155 ++++
 .../src/client/index.ts                       |  18 +
 .../src/errors/api-errors.ts                  |  78 ++
 .../src/errors/client-errors.ts               |  84 ++
 .../src/errors/index.ts                       |  22 +
 packages/google-play-server-sdk/src/index.ts  |  19 +
 .../src/schemas/enums.ts                      |  95 +++
 .../src/schemas/index.ts                      | 121 +++
 .../src/schemas/monetization.ts               | 283 ++++++
 .../src/schemas/notifications.ts              |  63 ++
 .../src/schemas/purchases.ts                  | 253 ++++++
 .../tests/import-ban.test.ts                  |  67 ++
 .../tests/schemas.test.ts                     | 534 ++++++++++++
 packages/google-play-server-sdk/tsconfig.json |  10 +
 .../google-play-server-sdk/vitest.unit.mts    |   9 +
 pnpm-lock.yaml                                |  19 +
 19 files changed, 2693 insertions(+)
 create mode 100644 packages/google-play-server-sdk/LICENSE.md
 create mode 100644 packages/google-play-server-sdk/package.json
 create mode 100644 packages/google-play-server-sdk/src/client/GooglePlayApiClient.ts
 create mode 100644 packages/google-play-server-sdk/src/client/auth.ts
 create mode 100644 packages/google-play-server-sdk/src/client/index.ts
 create mode 100644 packages/google-play-server-sdk/src/errors/api-errors.ts
 create mode 100644 packages/google-play-server-sdk/src/errors/client-errors.ts
 create mode 100644 packages/google-play-server-sdk/src/errors/index.ts
 create mode 100644 packages/google-play-server-sdk/src/index.ts
 create mode 100644 packages/google-play-server-sdk/src/schemas/enums.ts
 create mode 100644 packages/google-play-server-sdk/src/schemas/index.ts
 create mode 100644 packages/google-play-server-sdk/src/schemas/monetization.ts
 create mode 100644 packages/google-play-server-sdk/src/schemas/notifications.ts
 create mode 100644 packages/google-play-server-sdk/src/schemas/purchases.ts
 create mode 100644 packages/google-play-server-sdk/tests/import-ban.test.ts
 create mode 100644 packages/google-play-server-sdk/tests/schemas.test.ts
 create mode 100644 packages/google-play-server-sdk/tsconfig.json
 create mode 100644 packages/google-play-server-sdk/vitest.unit.mts

diff --git a/packages/google-play-server-sdk/LICENSE.md b/packages/google-play-server-sdk/LICENSE.md
new file mode 100644
index 000000000..cc433146c
--- /dev/null
+++ b/packages/google-play-server-sdk/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/google-play-server-sdk/package.json b/packages/google-play-server-sdk/package.json
new file mode 100644
index 000000000..cb05d5197
--- /dev/null
+++ b/packages/google-play-server-sdk/package.json
@@ -0,0 +1,35 @@
+{
+  "name": "@voidhash/google-play-server-sdk",
+  "version": "0.0.1-alpha.1",
+  "license": "MIT",
+  "private": true,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/google-play-server-sdk"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./client": "./src/client/index.ts",
+    "./schemas": "./src/schemas/index.ts",
+    "./errors": "./src/errors/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vitest run -c vitest.unit.mts",
+    "test:watch": "vitest -c vitest.unit.mts"
+  },
+  "dependencies": {
+    "jose": "^6.0.11"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "5.9.3",
+    "vitest": "^3.2.7"
+  },
+  "peerDependencies": {
+    "effect": "4.0.0-beta.84"
+  }
+}
diff --git a/packages/google-play-server-sdk/src/client/GooglePlayApiClient.ts b/packages/google-play-server-sdk/src/client/GooglePlayApiClient.ts
new file mode 100644
index 000000000..8e676f293
--- /dev/null
+++ b/packages/google-play-server-sdk/src/client/GooglePlayApiClient.ts
@@ -0,0 +1,807 @@
+import { Effect, Schema } from "effect";
+
+import { GooglePlayGeneralError } from "../errors/client-errors.ts";
+import {
+  GooglePlayForbiddenError,
+  GooglePlayInvalidRequestError,
+  GooglePlayPurchaseNotFoundError,
+  GooglePlayRateLimitExceededError,
+  GooglePlaySubscriptionNotFoundError,
+  GooglePlayProductNotFoundError,
+  GooglePlayUnauthorizedError,
+} from "../errors/api-errors.ts";
+import * as Schemas from "../schemas/index.ts";
+import type { GooglePlayAuthClient } from "./auth.ts";
+import { createAuthClient, getAccessToken, createAuthHeaders } from "./auth.ts";
+
+const GOOGLE_PLAY_API_BASE = "https://androidpublisher.googleapis.com";
+
+const redactPurchaseTokens = (path: string): string =>
+  path.replace(/(\/tokens\/)[^/:?]+/g, "$1[redacted]");
+
+// ============================================================================
+// Result Types
+// ============================================================================
+
+export interface SubscriptionPurchaseV2Result {
+  subscriptionPurchase: Schemas.SubscriptionPurchaseV2Type;
+}
+
+export interface ProductPurchaseResult {
+  productPurchase: Schemas.ProductPurchaseType;
+}
+
+export interface ProductPurchaseV2Result {
+  productPurchase: Schemas.ProductPurchaseV2Type;
+}
+
+export interface VoidedPurchasesResult {
+  voidedPurchases: Schemas.VoidedPurchasesListResponseType;
+}
+
+export interface SubscriptionDeferResult {
+  newExpiryTimeMillis: string;
+}
+
+// ============================================================================
+// HTTP Request Helper
+// ============================================================================
+
+interface ApiRequestOptions {
+  method: "GET" | "POST" | "PATCH" | "DELETE";
+  path: string;
+  body?: unknown;
+  auth: GooglePlayAuthClient;
+  packageName: string;
+}
+
+const makeApiRequest = <T>(options: ApiRequestOptions) =>
+  Effect.gen(function* () {
+    const accessToken = yield* getAccessToken(options.auth);
+    const headers = createAuthHeaders(accessToken);
+    const url = `${GOOGLE_PLAY_API_BASE}${options.path}`;
+
+    yield* Effect.logDebug("Making Google Play API request", {
+      method: options.method,
+      path: redactPurchaseTokens(options.path),
+    });
+
+    return yield* Effect.tryPromise({
+      try: async () => {
+        const response = await fetch(url, {
+          method: options.method,
+          headers,
+          body: options.body ? JSON.stringify(options.body) : undefined,
+        });
+
+        // Handle empty responses (204, etc.)
+        if (response.status === 204 || response.headers.get("content-length") === "0") {
+          return {} as T;
+        }
+
+        const responseBody = await response.json();
+
+        if (!response.ok) {
+          throw {
+            status: response.status,
+            body: responseBody,
+            headers: response.headers,
+          };
+        }
+
+        return responseBody as T;
+      },
+      catch: (cause: unknown) => {
+        const error = cause as {
+          status?: number;
+          body?: { error?: { message?: string; code?: number } };
+          headers?: Headers;
+        };
+
+        const errorMessage = error.body?.error?.message ?? "Google Play API request failed";
+
+        if (error.status === 404) {
+          // Extract purchase token from path if available
+          const tokenMatch = options.path.match(/\/tokens\/([^/:]+)/);
+          const purchaseToken = tokenMatch?.[1] ?? "";
+
+          // Check if it's a subscription or product not found
+          if (options.path.includes("/subscriptions/")) {
+            const productMatch = options.path.match(/\/subscriptions\/([^/]+)/);
+            if (productMatch?.[1] && !options.path.includes("/purchases/subscriptions")) {
+              return new GooglePlaySubscriptionNotFoundError({
+                productId: productMatch[1],
+                packageName: options.packageName,
+              });
+            }
+          }
+
+          if (
+            options.path.includes("/oneTimeProducts/") ||
+            options.path.includes("/onetimeproducts/")
+          ) {
+            const productMatch = options.path.match(
+              /\/(?:oneTimeProducts|onetimeproducts)\/([^/]+)/,
+            );
+            if (productMatch?.[1]) {
+              return new GooglePlayProductNotFoundError({
+                productId: productMatch[1],
+                packageName: options.packageName,
+              });
+            }
+          }
+
+          return new GooglePlayPurchaseNotFoundError({
+            purchaseToken,
+            packageName: options.packageName,
+          });
+        }
+
+        if (error.status === 401) {
+          return new GooglePlayUnauthorizedError({
+            message: errorMessage,
+          });
+        }
+
+        if (error.status === 403) {
+          return new GooglePlayForbiddenError({
+            message: errorMessage,
+          });
+        }
+
+        if (error.status === 429) {
+          const retryAfter = error.headers?.get("Retry-After");
+          return new GooglePlayRateLimitExceededError({
+            message: errorMessage,
+            retryAfterSeconds: retryAfter ? Number.parseInt(retryAfter) : undefined,
+          });
+        }
+
+        if (error.status === 400) {
+          return new GooglePlayInvalidRequestError({
+            message: errorMessage,
+            details: error.body,
+          });
+        }
+
+        return new GooglePlayGeneralError({
+          message: errorMessage,
+          cause,
+        });
+      },
+    });
+  });
+
+// ============================================================================
+// Initialize SDK
+// ============================================================================
+
+export const initializeSdk = Effect.gen(function* initializeSdk() {
+  return Effect.fn("initializeSdk")(function* initializeSdk(input: {
+    serviceAccountKey: string;
+    packageName: string;
+  }) {
+    const auth = yield* createAuthClient({
+      serviceAccountKey: input.serviceAccountKey,
+    });
+
+    const basePath = `/androidpublisher/v3/applications/${input.packageName}`;
+
+    return {
+      // ======================================================================
+      // Subscriptions V2 - Purchase Verification
+      // ======================================================================
+
+      /**
+       * Gets subscription purchase metadata using subscriptions V2 API
+       * @param purchaseToken - The purchase token from the client
+       */
+      getSubscriptionV2: (purchaseToken: string) =>
+        Effect.gen(function* () {
+          yield* Effect.logDebug("Getting subscription V2");
+
+          const result = yield* makeApiRequest<Schemas.SubscriptionPurchaseV2Type>({
+            method: "GET",
+            path: `${basePath}/purchases/subscriptionsv2/tokens/${purchaseToken}`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.SubscriptionPurchaseV2)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Cancels a subscription at the end of the current billing period
+       * @param purchaseToken - The purchase token
+       */
+      cancelSubscription: (purchaseToken: string) =>
+        makeApiRequest<void>({
+          method: "POST",
+          path: `${basePath}/purchases/subscriptionsv2/tokens/${purchaseToken}:cancel`,
+          auth,
+          packageName: input.packageName,
+        }),
+
+      /**
+       * Revokes a subscription immediately
+       * @param purchaseToken - The purchase token
+       */
+      revokeSubscription: (purchaseToken: string) =>
+        makeApiRequest<void>({
+          method: "POST",
+          path: `${basePath}/purchases/subscriptionsv2/tokens/${purchaseToken}:revoke`,
+          auth,
+          packageName: input.packageName,
+        }),
+
+      // ======================================================================
+      // Subscriptions V1 - Legacy Operations
+      // ======================================================================
+
+      /**
+       * Acknowledges a subscription purchase
+       * @param subscriptionId - The subscription product ID
+       * @param purchaseToken - The purchase token
+       * @param developerPayload - Optional payload to attach
+       */
+      acknowledgeSubscription: (
+        subscriptionId: string,
+        purchaseToken: string,
+        developerPayload?: string,
+      ) =>
+        makeApiRequest<void>({
+          method: "POST",
+          path: `${basePath}/purchases/subscriptions/${subscriptionId}/tokens/${purchaseToken}:acknowledge`,
+          body: developerPayload ? { developerPayload } : undefined,
+          auth,
+          packageName: input.packageName,
+        }),
+
+      /**
+       * Defers subscription renewal to a later date
+       * @param subscriptionId - The subscription product ID
+       * @param purchaseToken - The purchase token
+       * @param expectedExpiryTimeMillis - Current expected expiry time (for validation)
+       * @param desiredExpiryTimeMillis - New desired expiry time
+       */
+      deferSubscription: (
+        subscriptionId: string,
+        purchaseToken: string,
+        expectedExpiryTimeMillis: string,
+        desiredExpiryTimeMillis: string,
+      ) =>
+        makeApiRequest<SubscriptionDeferResult>({
+          method: "POST",
+          path: `${basePath}/purchases/subscriptions/${subscriptionId}/tokens/${purchaseToken}:defer`,
+          body: {
+            deferralInfo: {
+              expectedExpiryTimeMillis,
+              desiredExpiryTimeMillis,
+            },
+          },
+          auth,
+          packageName: input.packageName,
+        }),
+
+      // ======================================================================
+      // Products V2 - Purchase Verification
+      // ======================================================================
+
+      /**
+       * Gets product purchase using products V2 API
+       * @param purchaseToken - The purchase token
+       */
+      getProductV2: (purchaseToken: string) =>
+        Effect.gen(function* () {
+          yield* Effect.logDebug("Getting product V2");
+
+          const result = yield* makeApiRequest<Schemas.ProductPurchaseV2Type>({
+            method: "GET",
+            path: `${basePath}/purchases/productsv2/tokens/${purchaseToken}`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.ProductPurchaseV2)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse product purchase V2 response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      // ======================================================================
+      // Products V1 - Legacy Operations
+      // ======================================================================
+
+      /**
+       * Gets product purchase status (legacy V1 API)
+       * @param productId - The product ID
+       * @param purchaseToken - The purchase token
+       */
+      getProduct: (productId: string, purchaseToken: string) =>
+        Effect.gen(function* () {
+          yield* Effect.logDebug("Getting product V1", {
+            productId,
+          });
+
+          const result = yield* makeApiRequest<Schemas.ProductPurchaseType>({
+            method: "GET",
+            path: `${basePath}/purchases/products/${productId}/tokens/${purchaseToken}`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.ProductPurchase)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse product purchase response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Acknowledges a product purchase
+       * @param productId - The product ID
+       * @param purchaseToken - The purchase token
+       * @param developerPayload - Optional payload to attach
+       */
+      acknowledgeProduct: (productId: string, purchaseToken: string, developerPayload?: string) =>
+        makeApiRequest<void>({
+          method: "POST",
+          path: `${basePath}/purchases/products/${productId}/tokens/${purchaseToken}:acknowledge`,
+          body: developerPayload ? { developerPayload } : undefined,
+          auth,
+          packageName: input.packageName,
+        }),
+
+      /**
+       * Consumes a product purchase (for consumable products)
+       * @param productId - The product ID
+       * @param purchaseToken - The purchase token
+       */
+      consumeProduct: (productId: string, purchaseToken: string) =>
+        makeApiRequest<void>({
+          method: "POST",
+          path: `${basePath}/purchases/products/${productId}/tokens/${purchaseToken}:consume`,
+          auth,
+          packageName: input.packageName,
+        }),
+
+      // ======================================================================
+      // Voided Purchases
+      // ======================================================================
+
+      /**
+       * Lists voided purchases (refunds, chargebacks)
+       * @param options - Optional filters
+       */
+      getVoidedPurchases: (options?: {
+        startTime?: string;
+        endTime?: string;
+        maxResults?: number;
+        token?: string;
+        type?: 0 | 1; // 0 = subscription, 1 = in-app product
+      }) =>
+        Effect.gen(function* () {
+          const params = new URLSearchParams();
+          if (options?.startTime) params.append("startTime", options.startTime);
+          if (options?.endTime) params.append("endTime", options.endTime);
+          if (options?.maxResults) params.append("maxResults", String(options.maxResults));
+          if (options?.token) params.append("token", options.token);
+          if (options?.type !== undefined) params.append("type", String(options.type));
+
+          const queryString = params.toString();
+          const path = `${basePath}/purchases/voidedpurchases${queryString ? `?${queryString}` : ""}`;
+
+          const result = yield* makeApiRequest<Schemas.VoidedPurchasesListResponseType>({
+            method: "GET",
+            path,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.VoidedPurchasesListResponse)(
+            result,
+          ).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse voided purchases response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      // ======================================================================
+      // Monetization - Subscriptions
+      // ======================================================================
+
+      /**
+       * Creates a new subscription product
+       * @param subscription - The subscription configuration
+       */
+      createSubscription: (subscription: Schemas.SubscriptionType) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.SubscriptionType>({
+            method: "POST",
+            path: `${basePath}/subscriptions?productId=${subscription.productId}`,
+            body: subscription,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.Subscription)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Gets a subscription product
+       * @param productId - The subscription product ID
+       */
+      getSubscription: (productId: string) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.SubscriptionType>({
+            method: "GET",
+            path: `${basePath}/subscriptions/${productId}`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.Subscription)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Lists all subscription products
+       * @param pageToken - Optional pagination token
+       * @param pageSize - Optional page size
+       */
+      listSubscriptions: (pageToken?: string, pageSize?: number) =>
+        Effect.gen(function* () {
+          const params = new URLSearchParams();
+          if (pageToken) params.append("pageToken", pageToken);
+          if (pageSize) params.append("pageSize", String(pageSize));
+
+          const queryString = params.toString();
+          const path = `${basePath}/subscriptions${queryString ? `?${queryString}` : ""}`;
+
+          const result = yield* makeApiRequest<Schemas.ListSubscriptionsResponseType>({
+            method: "GET",
+            path,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.ListSubscriptionsResponse)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscriptions list response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Updates a subscription product
+       * @param productId - The subscription product ID
+       * @param subscription - The updated subscription configuration
+       * @param updateMask - Fields to update (e.g., "listings,basePlans")
+       */
+      updateSubscription: (
+        productId: string,
+        subscription: Partial<Schemas.SubscriptionType>,
+        updateMask?: string,
+      ) =>
+        Effect.gen(function* () {
+          const params = new URLSearchParams();
+          if (updateMask) params.append("updateMask", updateMask);
+
+          const queryString = params.toString();
+          const path = `${basePath}/subscriptions/${productId}${queryString ? `?${queryString}` : ""}`;
+
+          const result = yield* makeApiRequest<Schemas.SubscriptionType>({
+            method: "PATCH",
+            path,
+            body: subscription,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.Subscription)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Deletes a subscription product
+       * @param productId - The subscription product ID
+       */
+      deleteSubscription: (productId: string) =>
+        makeApiRequest<void>({
+          method: "DELETE",
+          path: `${basePath}/subscriptions/${productId}`,
+          auth,
+          packageName: input.packageName,
+        }),
+
+      // ======================================================================
+      // Monetization - Base Plans
+      // ======================================================================
+
+      /**
+       * Activates a base plan
+       * @param productId - The subscription product ID
+       * @param basePlanId - The base plan ID
+       */
+      activateBasePlan: (productId: string, basePlanId: string) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.SubscriptionType>({
+            method: "POST",
+            path: `${basePath}/subscriptions/${productId}/basePlans/${basePlanId}:activate`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.Subscription)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Deactivates a base plan
+       * @param productId - The subscription product ID
+       * @param basePlanId - The base plan ID
+       */
+      deactivateBasePlan: (productId: string, basePlanId: string) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.SubscriptionType>({
+            method: "POST",
+            path: `${basePath}/subscriptions/${productId}/basePlans/${basePlanId}:deactivate`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.Subscription)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      // ======================================================================
+      // Monetization - Subscription Offers
+      // ======================================================================
+
+      /**
+       * Creates a subscription offer
+       * @param productId - The subscription product ID
+       * @param basePlanId - The base plan ID
+       * @param offer - The offer configuration
+       */
+      createSubscriptionOffer: (
+        productId: string,
+        basePlanId: string,
+        offer: Schemas.SubscriptionOfferType,
+      ) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.SubscriptionOfferType>({
+            method: "POST",
+            path: `${basePath}/subscriptions/${productId}/basePlans/${basePlanId}/offers?offerId=${offer.offerId}`,
+            body: offer,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.SubscriptionOffer)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription offer response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Activates a subscription offer
+       * @param productId - The subscription product ID
+       * @param basePlanId - The base plan ID
+       * @param offerId - The offer ID
+       */
+      activateSubscriptionOffer: (productId: string, basePlanId: string, offerId: string) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.SubscriptionOfferType>({
+            method: "POST",
+            path: `${basePath}/subscriptions/${productId}/basePlans/${basePlanId}/offers/${offerId}:activate`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.SubscriptionOffer)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription offer response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Deactivates a subscription offer
+       * @param productId - The subscription product ID
+       * @param basePlanId - The base plan ID
+       * @param offerId - The offer ID
+       */
+      deactivateSubscriptionOffer: (productId: string, basePlanId: string, offerId: string) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.SubscriptionOfferType>({
+            method: "POST",
+            path: `${basePath}/subscriptions/${productId}/basePlans/${basePlanId}/offers/${offerId}:deactivate`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.SubscriptionOffer)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse subscription offer response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      // ======================================================================
+      // Monetization - One-Time Products
+      // ======================================================================
+
+      /**
+       * Creates or updates a one-time product
+       * @param productId - The product ID
+       * @param product - The product configuration
+       */
+      createOneTimeProduct: (productId: string, product: Schemas.OneTimeProductType) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.OneTimeProductType>({
+            method: "PATCH",
+            path: `${basePath}/oneTimeProducts/${productId}`,
+            body: product,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.OneTimeProduct)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse one-time product response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Gets a one-time product
+       * @param productId - The product ID
+       */
+      getOneTimeProduct: (productId: string) =>
+        Effect.gen(function* () {
+          const result = yield* makeApiRequest<Schemas.OneTimeProductType>({
+            method: "GET",
+            path: `${basePath}/oneTimeProducts/${productId}`,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.OneTimeProduct)(result).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse one-time product response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Lists all one-time products
+       * @param pageToken - Optional pagination token
+       * @param pageSize - Optional page size
+       */
+      listOneTimeProducts: (pageToken?: string, pageSize?: number) =>
+        Effect.gen(function* () {
+          const params = new URLSearchParams();
+          if (pageToken) params.append("pageToken", pageToken);
+          if (pageSize) params.append("pageSize", String(pageSize));
+
+          const queryString = params.toString();
+          const path = `${basePath}/oneTimeProducts${queryString ? `?${queryString}` : ""}`;
+
+          const result = yield* makeApiRequest<Schemas.ListOneTimeProductsResponseType>({
+            method: "GET",
+            path,
+            auth,
+            packageName: input.packageName,
+          });
+
+          return yield* Schema.decodeUnknownEffect(Schemas.ListOneTimeProductsResponse)(
+            result,
+          ).pipe(
+            Effect.mapError(
+              (parseError) =>
+                new GooglePlayGeneralError({
+                  message: "Failed to parse one-time products list response",
+                  cause: parseError,
+                }),
+            ),
+          );
+        }),
+
+      /**
+       * Deletes a one-time product
+       * @param productId - The product ID
+       */
+      deleteOneTimeProduct: (productId: string) =>
+        makeApiRequest<void>({
+          method: "DELETE",
+          path: `${basePath}/oneTimeProducts/${productId}`,
+          auth,
+          packageName: input.packageName,
+        }),
+    };
+  });
+});
diff --git a/packages/google-play-server-sdk/src/client/auth.ts b/packages/google-play-server-sdk/src/client/auth.ts
new file mode 100644
index 000000000..afed40a43
--- /dev/null
+++ b/packages/google-play-server-sdk/src/client/auth.ts
@@ -0,0 +1,155 @@
+import { Effect, Schema } from "effect";
+import { SignJWT, importPKCS8 } from "jose";
+
+import { GooglePlayUnauthorizedError } from "../errors/api-errors.ts";
+import { GooglePlayGeneralError } from "../errors/client-errors.ts";
+
+const ANDROID_PUBLISHER_SCOPE = "https://www.googleapis.com/auth/androidpublisher";
+const DEFAULT_TOKEN_URI = "https://oauth2.googleapis.com/token";
+const JWT_BEARER_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:jwt-bearer";
+
+export interface GooglePlayAuthConfig {
+  /**
+   * Service account credentials JSON string
+   */
+  readonly serviceAccountKey: string;
+}
+
+/**
+ * An authenticated Google Play client handle. Holds a freshly minted OAuth2
+ * access token for the Android Publisher scope; the client closes over it for
+ * the lifetime of a single request/workflow task (token validity is one hour).
+ */
+export interface GooglePlayAuthClient {
+  readonly accessToken: string;
+}
+
+const serviceAccountSchema = Schema.Struct({
+  client_email: Schema.String.check(Schema.isMinLength(1)),
+  private_key: Schema.String.check(Schema.isMinLength(1)),
+  token_uri: Schema.optional(Schema.String),
+});
+
+const tokenResponseSchema = Schema.Struct({
+  access_token: Schema.String.check(Schema.isMinLength(1)),
+  expires_in: Schema.optional(Schema.Number),
+  token_type: Schema.optional(Schema.String),
+});
+
+const parseServiceAccount = (serviceAccountKey: string) =>
+  Effect.try({
+    try: () => JSON.parse(serviceAccountKey) as unknown,
+    catch: () =>
+      new GooglePlayUnauthorizedError({ message: "Invalid service account credentials JSON" }),
+  }).pipe(
+    Effect.flatMap((json) =>
+      Schema.decodeUnknownEffect(serviceAccountSchema)(json).pipe(
+        Effect.mapError(
+          (error) =>
+            new GooglePlayUnauthorizedError({
+              message: `Invalid service account credentials: ${error.message}`,
+            }),
+        ),
+      ),
+    ),
+  );
+
+/**
+ * Mints a Google OAuth2 access token for the Android Publisher scope using the
+ * service-account JWT-bearer grant. The assertion is signed with WebCrypto via
+ * `jose`, so this runs unchanged on Cloudflare Workers — there is no dependency
+ * on `google-auth-library` or `node:crypto`.
+ */
+const requestAccessToken = (serviceAccount: typeof serviceAccountSchema.Type) =>
+  Effect.gen(function* () {
+    const tokenUri = serviceAccount.token_uri ?? DEFAULT_TOKEN_URI;
+
+    const privateKey = yield* Effect.tryPromise({
+      try: () => importPKCS8(serviceAccount.private_key, "RS256"),
+      catch: (cause) =>
+        new GooglePlayUnauthorizedError({
+          message: `Failed to import service account private key: ${String(cause)}`,
+        }),
+    });
+
+    const assertion = yield* Effect.tryPromise({
+      try: () =>
+        new SignJWT({ scope: ANDROID_PUBLISHER_SCOPE })
+          .setProtectedHeader({ alg: "RS256", typ: "JWT" })
+          .setIssuer(serviceAccount.client_email)
+          .setSubject(serviceAccount.client_email)
+          .setAudience(tokenUri)
+          .setIssuedAt()
+          .setExpirationTime("1h")
+          .sign(privateKey),
+      catch: (cause) =>
+        new GooglePlayUnauthorizedError({
+          message: `Failed to sign service account JWT: ${String(cause)}`,
+        }),
+    });
+
+    const responseBody = yield* Effect.tryPromise({
+      try: async () => {
+        const response = await fetch(tokenUri, {
+          method: "POST",
+          headers: { "Content-Type": "application/x-www-form-urlencoded" },
+          body: new URLSearchParams({
+            assertion,
+            grant_type: JWT_BEARER_GRANT_TYPE,
+          }).toString(),
+        });
+
+        const json = (await response.json()) as unknown;
+        if (!response.ok) {
+          throw new GooglePlayUnauthorizedError({
+            message: `Google token endpoint returned ${response.status}: ${JSON.stringify(json)}`,
+          });
+        }
+
+        return json;
+      },
+      catch: (cause) =>
+        cause instanceof GooglePlayUnauthorizedError
+          ? cause
+          : new GooglePlayGeneralError({
+              message: "Failed to obtain Google Play access token",
+              cause,
+            }),
+    });
+
+    const parsed = yield* Schema.decodeUnknownEffect(tokenResponseSchema)(responseBody).pipe(
+      Effect.mapError(
+        (error) =>
+          new GooglePlayGeneralError({
+            message: `Unexpected Google token response: ${error.message}`,
+            cause: responseBody,
+          }),
+      ),
+    );
+
+    return parsed.access_token;
+  });
+
+/**
+ * Creates an authenticated Google Play client by minting an OAuth2 access token
+ * from the supplied service-account credentials JSON.
+ */
+export const createAuthClient = (config: GooglePlayAuthConfig) =>
+  Effect.gen(function* () {
+    const serviceAccount = yield* parseServiceAccount(config.serviceAccountKey);
+    const accessToken = yield* requestAccessToken(serviceAccount);
+    return { accessToken } satisfies GooglePlayAuthClient;
+  });
+
+/**
+ * Returns the access token from an authenticated client handle.
+ */
+export const getAccessToken = (client: GooglePlayAuthClient) => Effect.succeed(client.accessToken);
+
+/**
+ * Helper to create auth headers for API requests
+ */
+export const createAuthHeaders = (accessToken: string) => ({
+  Authorization: `Bearer ${accessToken}`,
+  "Content-Type": "application/json",
+});
diff --git a/packages/google-play-server-sdk/src/client/index.ts b/packages/google-play-server-sdk/src/client/index.ts
new file mode 100644
index 000000000..a37ece5c1
--- /dev/null
+++ b/packages/google-play-server-sdk/src/client/index.ts
@@ -0,0 +1,18 @@
+export {
+  initializeSdk,
+  type SubscriptionPurchaseV2Result,
+  type ProductPurchaseResult,
+  type ProductPurchaseV2Result,
+  type VoidedPurchasesResult,
+  type SubscriptionDeferResult,
+} from "./GooglePlayApiClient.ts";
+
+export {
+  createAuthClient,
+  getAccessToken,
+  createAuthHeaders,
+  type GooglePlayAuthConfig,
+} from "./auth.ts";
+
+// Re-export GooglePlayGeneralError for convenience
+export { GooglePlayGeneralError } from "../errors/client-errors.ts";
diff --git a/packages/google-play-server-sdk/src/errors/api-errors.ts b/packages/google-play-server-sdk/src/errors/api-errors.ts
new file mode 100644
index 000000000..e33184e5a
--- /dev/null
+++ b/packages/google-play-server-sdk/src/errors/api-errors.ts
@@ -0,0 +1,78 @@
+import { Schema } from "effect";
+
+/**
+ * Purchase or subscription not found (404)
+ */
+export class GooglePlayPurchaseNotFoundError extends Schema.TaggedErrorClass<GooglePlayPurchaseNotFoundError>(
+  "GooglePlayPurchaseNotFoundError",
+)("GooglePlayPurchaseNotFoundError", {
+  purchaseToken: Schema.String,
+  packageName: Schema.String,
+}) {}
+
+/**
+ * Unauthorized - Invalid credentials (401)
+ */
+export class GooglePlayUnauthorizedError extends Schema.TaggedErrorClass<GooglePlayUnauthorizedError>(
+  "GooglePlayUnauthorizedError",
+)("GooglePlayUnauthorizedError", {
+  message: Schema.String,
+}) {}
+
+/**
+ * Forbidden - Insufficient permissions (403)
+ */
+export class GooglePlayForbiddenError extends Schema.TaggedErrorClass<GooglePlayForbiddenError>(
+  "GooglePlayForbiddenError",
+)("GooglePlayForbiddenError", {
+  message: Schema.String,
+}) {}
+
+/**
+ * Rate limit exceeded (429)
+ */
+export class GooglePlayRateLimitExceededError extends Schema.TaggedErrorClass<GooglePlayRateLimitExceededError>(
+  "GooglePlayRateLimitExceededError",
+)("GooglePlayRateLimitExceededError", {
+  message: Schema.String,
+  retryAfterSeconds: Schema.optional(Schema.Number),
+}) {}
+
+/**
+ * Invalid request (400)
+ */
+export class GooglePlayInvalidRequestError extends Schema.TaggedErrorClass<GooglePlayInvalidRequestError>(
+  "GooglePlayInvalidRequestError",
+)("GooglePlayInvalidRequestError", {
+  message: Schema.String,
+  details: Schema.optional(Schema.Unknown),
+}) {}
+
+/**
+ * Subscription product not found in Google Play Console
+ */
+export class GooglePlaySubscriptionNotFoundError extends Schema.TaggedErrorClass<GooglePlaySubscriptionNotFoundError>(
+  "GooglePlaySubscriptionNotFoundError",
+)("GooglePlaySubscriptionNotFoundError", {
+  productId: Schema.String,
+  packageName: Schema.String,
+}) {}
+
+/**
+ * Product not found in Google Play Console
+ */
+export class GooglePlayProductNotFoundError extends Schema.TaggedErrorClass<GooglePlayProductNotFoundError>(
+  "GooglePlayProductNotFoundError",
+)("GooglePlayProductNotFoundError", {
+  productId: Schema.String,
+  packageName: Schema.String,
+}) {}
+
+/**
+ * Server API error from Google Play
+ */
+export class GooglePlayServerAPIError extends Schema.TaggedErrorClass<GooglePlayServerAPIError>(
+  "GooglePlayServerAPIError",
+)("GooglePlayServerAPIError", {
+  message: Schema.String,
+}) {}
diff --git a/packages/google-play-server-sdk/src/errors/client-errors.ts b/packages/google-play-server-sdk/src/errors/client-errors.ts
new file mode 100644
index 000000000..cfac487f3
--- /dev/null
+++ b/packages/google-play-server-sdk/src/errors/client-errors.ts
@@ -0,0 +1,84 @@
+import { Data, Schema } from "effect";
+
+/**
+ * General error from the Google Play Server API
+ */
+export class GooglePlayGeneralError extends Data.TaggedError("GooglePlayGeneralError")<{
+  readonly message: string;
+  readonly cause: unknown;
+}> {}
+
+/**
+ * Purchase has already been acknowledged
+ */
+export class GooglePlayPurchaseAlreadyAcknowledgedError extends Schema.TaggedErrorClass<GooglePlayPurchaseAlreadyAcknowledgedError>(
+  "GooglePlayPurchaseAlreadyAcknowledgedError",
+)("GooglePlayPurchaseAlreadyAcknowledgedError", {
+  purchaseToken: Schema.String,
+}) {}
+
+/**
+ * Purchase has already been consumed
+ */
+export class GooglePlayPurchaseAlreadyConsumedError extends Schema.TaggedErrorClass<GooglePlayPurchaseAlreadyConsumedError>(
+  "GooglePlayPurchaseAlreadyConsumedError",
+)("GooglePlayPurchaseAlreadyConsumedError", {
+  purchaseToken: Schema.String,
+}) {}
+
+/**
+ * Subscription has expired
+ */
+export class GooglePlaySubscriptionExpiredError extends Schema.TaggedErrorClass<GooglePlaySubscriptionExpiredError>(
+  "GooglePlaySubscriptionExpiredError",
+)("GooglePlaySubscriptionExpiredError", {
+  purchaseToken: Schema.String,
+  expiryTime: Schema.optional(Schema.String),
+}) {}
+
+/**
+ * Subscription has been canceled
+ */
+export class GooglePlaySubscriptionCanceledError extends Schema.TaggedErrorClass<GooglePlaySubscriptionCanceledError>(
+  "GooglePlaySubscriptionCanceledError",
+)("GooglePlaySubscriptionCanceledError", {
+  purchaseToken: Schema.String,
+}) {}
+
+/**
+ * Failed to verify RTDN notification signature
+ */
+export class GooglePlayNotificationVerificationError extends Schema.TaggedErrorClass<GooglePlayNotificationVerificationError>(
+  "GooglePlayNotificationVerificationError",
+)("GooglePlayNotificationVerificationError", {
+  message: Schema.String,
+}) {}
+
+/**
+ * Invalid or malformed RTDN notification
+ */
+export class GooglePlayInvalidNotificationError extends Schema.TaggedErrorClass<GooglePlayInvalidNotificationError>(
+  "GooglePlayInvalidNotificationError",
+)("GooglePlayInvalidNotificationError", {
+  message: Schema.String,
+  rawNotification: Schema.optional(Schema.Unknown),
+}) {}
+
+/**
+ * Product already exists in Google Play Console
+ */
+export class GooglePlayProductAlreadyExistsError extends Schema.TaggedErrorClass<GooglePlayProductAlreadyExistsError>(
+  "GooglePlayProductAlreadyExistsError",
+)("GooglePlayProductAlreadyExistsError", {
+  productId: Schema.String,
+  packageName: Schema.String,
+}) {}
+
+/**
+ * Transaction does not contain required product ID
+ */
+export class GooglePlayTransactionDoesNotContainProductIdError extends Schema.TaggedErrorClass<GooglePlayTransactionDoesNotContainProductIdError>(
+  "GooglePlayTransactionDoesNotContainProductIdError",
+)("GooglePlayTransactionDoesNotContainProductIdError", {
+  message: Schema.String,
+}) {}
diff --git a/packages/google-play-server-sdk/src/errors/index.ts b/packages/google-play-server-sdk/src/errors/index.ts
new file mode 100644
index 000000000..d4071607f
--- /dev/null
+++ b/packages/google-play-server-sdk/src/errors/index.ts
@@ -0,0 +1,22 @@
+export {
+  GooglePlayPurchaseNotFoundError,
+  GooglePlayUnauthorizedError,
+  GooglePlayForbiddenError,
+  GooglePlayRateLimitExceededError,
+  GooglePlayInvalidRequestError,
+  GooglePlaySubscriptionNotFoundError,
+  GooglePlayProductNotFoundError,
+  GooglePlayServerAPIError,
+} from "./api-errors.ts";
+
+export {
+  GooglePlayGeneralError,
+  GooglePlayPurchaseAlreadyAcknowledgedError,
+  GooglePlayPurchaseAlreadyConsumedError,
+  GooglePlaySubscriptionExpiredError,
+  GooglePlaySubscriptionCanceledError,
+  GooglePlayNotificationVerificationError,
+  GooglePlayInvalidNotificationError,
+  GooglePlayProductAlreadyExistsError,
+  GooglePlayTransactionDoesNotContainProductIdError,
+} from "./client-errors.ts";
diff --git a/packages/google-play-server-sdk/src/index.ts b/packages/google-play-server-sdk/src/index.ts
new file mode 100644
index 000000000..4d090ce65
--- /dev/null
+++ b/packages/google-play-server-sdk/src/index.ts
@@ -0,0 +1,19 @@
+// Client
+export {
+  initializeSdk,
+  createAuthClient,
+  getAccessToken,
+  createAuthHeaders,
+  type GooglePlayAuthConfig,
+  type SubscriptionPurchaseV2Result,
+  type ProductPurchaseResult,
+  type ProductPurchaseV2Result,
+  type VoidedPurchasesResult,
+  type SubscriptionDeferResult,
+} from "./client/index.ts";
+
+// Schemas
+export * from "./schemas/index.ts";
+
+// Errors
+export * from "./errors/index.ts";
diff --git a/packages/google-play-server-sdk/src/schemas/enums.ts b/packages/google-play-server-sdk/src/schemas/enums.ts
new file mode 100644
index 000000000..6517d0dd8
--- /dev/null
+++ b/packages/google-play-server-sdk/src/schemas/enums.ts
@@ -0,0 +1,95 @@
+import { Schema } from "effect";
+
+/**
+ * Subscription states from SubscriptionPurchaseV2
+ */
+export const SubscriptionState = Schema.Union([
+  Schema.Literal("SUBSCRIPTION_STATE_UNSPECIFIED"),
+  Schema.Literal("SUBSCRIPTION_STATE_PENDING"),
+  Schema.Literal("SUBSCRIPTION_STATE_ACTIVE"),
+  Schema.Literal("SUBSCRIPTION_STATE_PAUSED"),
+  Schema.Literal("SUBSCRIPTION_STATE_IN_GRACE_PERIOD"),
+  Schema.Literal("SUBSCRIPTION_STATE_ON_HOLD"),
+  Schema.Literal("SUBSCRIPTION_STATE_CANCELED"),
+  Schema.Literal("SUBSCRIPTION_STATE_EXPIRED"),
+  Schema.Literal("SUBSCRIPTION_STATE_PENDING_PURCHASE_CANCELED"),
+]);
+
+export type SubscriptionState = typeof SubscriptionState.Type;
+
+/**
+ * Acknowledgement states
+ */
+export const AcknowledgementState = Schema.Union([
+  Schema.Literal("ACKNOWLEDGEMENT_STATE_UNSPECIFIED"),
+  Schema.Literal("ACKNOWLEDGEMENT_STATE_PENDING"),
+  Schema.Literal("ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED"),
+]);
+
+export type AcknowledgementState = typeof AcknowledgementState.Type;
+
+/**
+ * Purchase states for products
+ */
+export const PurchaseState = Schema.Union([
+  Schema.Literal("PURCHASE_STATE_UNSPECIFIED"),
+  Schema.Literal("PURCHASED"),
+  Schema.Literal("CANCELLED"),
+  Schema.Literal("PENDING"),
+]);
+
+export type PurchaseState = typeof PurchaseState.Type;
+
+/**
+ * Consumption states for consumable products
+ */
+export const ConsumptionState = Schema.Union([
+  Schema.Literal("CONSUMPTION_STATE_UNSPECIFIED"),
+  Schema.Literal("CONSUMPTION_STATE_YET_TO_BE_CONSUMED"),
+  Schema.Literal("CONSUMPTION_STATE_CONSUMED"),
+]);
+
+export type ConsumptionState = typeof ConsumptionState.Type;
+
+/**
+ * Base plan states
+ */
+export const BasePlanState = Schema.Union([
+  Schema.Literal("STATE_UNSPECIFIED"),
+  Schema.Literal("DRAFT"),
+  Schema.Literal("ACTIVE"),
+  Schema.Literal("INACTIVE"),
+]);
+
+export type BasePlanState = typeof BasePlanState.Type;
+
+/**
+ * Subscription notification types (1-13)
+ */
+export const SubscriptionNotificationType = Schema.Union([
+  Schema.Literal(1), // SUBSCRIPTION_RECOVERED
+  Schema.Literal(2), // SUBSCRIPTION_RENEWED
+  Schema.Literal(3), // SUBSCRIPTION_CANCELED
+  Schema.Literal(4), // SUBSCRIPTION_PURCHASED
+  Schema.Literal(5), // SUBSCRIPTION_ON_HOLD
+  Schema.Literal(6), // SUBSCRIPTION_IN_GRACE_PERIOD
+  Schema.Literal(7), // SUBSCRIPTION_RESTARTED
+  Schema.Literal(8), // SUBSCRIPTION_PRICE_CHANGE_CONFIRMED
+  Schema.Literal(9), // SUBSCRIPTION_DEFERRED
+  Schema.Literal(10), // SUBSCRIPTION_PAUSED
+  Schema.Literal(11), // SUBSCRIPTION_PAUSE_SCHEDULE_CHANGED
+  Schema.Literal(12), // SUBSCRIPTION_REVOKED
+  Schema.Literal(13), // SUBSCRIPTION_EXPIRED
+]);
+
+export type SubscriptionNotificationType = typeof SubscriptionNotificationType.Type;
+
+/**
+ * One-time product notification types
+ */
+export const OneTimeProductNotificationType = Schema.Union([
+  Schema.Literal(1), // ONE_TIME_PRODUCT_PURCHASED
+  Schema.Literal(2), // ONE_TIME_PRODUCT_CANCELED
+]);
+
+export type OneTimeProductNotificationType = typeof OneTimeProductNotificationType.Type;
diff --git a/packages/google-play-server-sdk/src/schemas/index.ts b/packages/google-play-server-sdk/src/schemas/index.ts
new file mode 100644
index 000000000..b6afba711
--- /dev/null
+++ b/packages/google-play-server-sdk/src/schemas/index.ts
@@ -0,0 +1,121 @@
+// Enums
+export {
+  SubscriptionState,
+  type SubscriptionState as SubscriptionStateType,
+  AcknowledgementState,
+  type AcknowledgementState as AcknowledgementStateType,
+  PurchaseState,
+  type PurchaseState as PurchaseStateType,
+  ConsumptionState,
+  type ConsumptionState as ConsumptionStateType,
+  BasePlanState,
+  type BasePlanState as BasePlanStateType,
+  SubscriptionNotificationType,
+  type SubscriptionNotificationType as SubscriptionNotificationTypeValue,
+  OneTimeProductNotificationType,
+  type OneTimeProductNotificationType as OneTimeProductNotificationTypeValue,
+} from "./enums.ts";
+
+// Purchase verification schemas
+export {
+  AutoRenewingPlan,
+  type AutoRenewingPlan as AutoRenewingPlanType,
+  PrepaidPlan,
+  type PrepaidPlan as PrepaidPlanType,
+  OfferDetails,
+  type OfferDetails as OfferDetailsType,
+  SubscriptionPurchaseLineItem,
+  type SubscriptionPurchaseLineItem as SubscriptionPurchaseLineItemType,
+  ExternalAccountIdentifiers,
+  type ExternalAccountIdentifiers as ExternalAccountIdentifiersType,
+  CanceledStateContext,
+  type CanceledStateContext as CanceledStateContextType,
+  PausedStateContext,
+  type PausedStateContext as PausedStateContextType,
+  SubscribeWithGoogleInfo,
+  type SubscribeWithGoogleInfo as SubscribeWithGoogleInfoType,
+  TestPurchase,
+  type TestPurchase as TestPurchaseType,
+  SubscriptionPurchaseV2,
+  type SubscriptionPurchaseV2 as SubscriptionPurchaseV2Type,
+  ProductLineItem,
+  type ProductLineItem as ProductLineItemType,
+  PurchaseStateContext,
+  type PurchaseStateContext as PurchaseStateContextType,
+  TestPurchaseContext,
+  type TestPurchaseContext as TestPurchaseContextType,
+  ProductPurchaseV2,
+  type ProductPurchaseV2 as ProductPurchaseV2Type,
+  ProductPurchase,
+  type ProductPurchase as ProductPurchaseType,
+  VoidedPurchase,
+  type VoidedPurchase as VoidedPurchaseType,
+  PageInfo,
+  type PageInfo as PageInfoType,
+  TokenPagination,
+  type TokenPagination as TokenPaginationType,
+  VoidedPurchasesListResponse,
+  type VoidedPurchasesListResponse as VoidedPurchasesListResponseType,
+} from "./purchases.ts";
+
+// Notification schemas
+export {
+  SubscriptionNotification,
+  type SubscriptionNotification as SubscriptionNotificationPayload,
+  OneTimeProductNotification,
+  type OneTimeProductNotification as OneTimeProductNotificationPayload,
+  VoidedPurchaseNotification,
+  type VoidedPurchaseNotification as VoidedPurchaseNotificationPayload,
+  TestNotification,
+  type TestNotification as TestNotificationPayload,
+  DeveloperNotification,
+  type DeveloperNotification as DeveloperNotificationPayload,
+} from "./notifications.ts";
+
+// Monetization schemas
+export {
+  Money,
+  type Money as MoneyType,
+  Price,
+  type Price as PriceType,
+  RegionalBasePlanConfig,
+  type RegionalBasePlanConfig as RegionalBasePlanConfigType,
+  OfferTag,
+  type OfferTag as OfferTagType,
+  AutoRenewingBasePlanType,
+  type AutoRenewingBasePlanType as AutoRenewingBasePlanTypeSchema,
+  PrepaidBasePlanType,
+  type PrepaidBasePlanType as PrepaidBasePlanTypeSchema,
+  InstallmentsBasePlanType,
+  type InstallmentsBasePlanType as InstallmentsBasePlanTypeSchema,
+  OtherRegionsBasePlanConfig,
+  type OtherRegionsBasePlanConfig as OtherRegionsBasePlanConfigType,
+  BasePlan,
+  type BasePlan as BasePlanType,
+  SubscriptionListing,
+  type SubscriptionListing as SubscriptionListingType,
+  SubscriptionTaxAndComplianceSettings,
+  type SubscriptionTaxAndComplianceSettings as SubscriptionTaxAndComplianceSettingsType,
+  Subscription,
+  type Subscription as SubscriptionType,
+  ListSubscriptionsResponse,
+  type ListSubscriptionsResponse as ListSubscriptionsResponseType,
+  SubscriptionOfferPhase,
+  type SubscriptionOfferPhase as SubscriptionOfferPhaseType,
+  SubscriptionOfferTargeting,
+  type SubscriptionOfferTargeting as SubscriptionOfferTargetingType,
+  SubscriptionOffer,
+  type SubscriptionOffer as SubscriptionOfferType,
+  OneTimeProductListing,
+  type OneTimeProductListing as OneTimeProductListingType,
+  PurchaseOption,
+  type PurchaseOption as PurchaseOptionType,
+  OneTimeProduct,
+  type OneTimeProduct as OneTimeProductType,
+  ListOneTimeProductsResponse,
+  type ListOneTimeProductsResponse as ListOneTimeProductsResponseType,
+  GoogleApiErrorDetail,
+  type GoogleApiErrorDetail as GoogleApiErrorDetailType,
+  GoogleApiError,
+  type GoogleApiError as GoogleApiErrorType,
+} from "./monetization.ts";
diff --git a/packages/google-play-server-sdk/src/schemas/monetization.ts b/packages/google-play-server-sdk/src/schemas/monetization.ts
new file mode 100644
index 000000000..ab6ae8ad0
--- /dev/null
+++ b/packages/google-play-server-sdk/src/schemas/monetization.ts
@@ -0,0 +1,283 @@
+import { Schema } from "effect";
+
+import { BasePlanState } from "./enums.ts";
+
+/**
+ * Money amount
+ */
+export const Money = Schema.Struct({
+  currencyCode: Schema.optional(Schema.String),
+  units: Schema.optional(Schema.String),
+  nanos: Schema.optional(Schema.Number),
+});
+
+export type Money = typeof Money.Type;
+
+/**
+ * Price
+ */
+export const Price = Schema.Struct({
+  priceMicros: Schema.optional(Schema.String),
+  currency: Schema.optional(Schema.String),
+});
+
+export type Price = typeof Price.Type;
+
+/**
+ * Regional base plan config
+ */
+export const RegionalBasePlanConfig = Schema.Struct({
+  regionCode: Schema.String,
+  newSubscriberAvailability: Schema.optional(Schema.Boolean),
+  price: Schema.optional(Money),
+});
+
+export type RegionalBasePlanConfig = typeof RegionalBasePlanConfig.Type;
+
+/**
+ * Offer tag
+ */
+export const OfferTag = Schema.Struct({
+  tag: Schema.optional(Schema.String),
+});
+
+export type OfferTag = typeof OfferTag.Type;
+
+/**
+ * Auto renewing base plan type
+ */
+export const AutoRenewingBasePlanType = Schema.Struct({
+  billingPeriodDuration: Schema.optional(Schema.String), // ISO 8601
+  gracePeriodDuration: Schema.optional(Schema.String),
+  accountHoldDuration: Schema.optional(Schema.String),
+  resubscribeState: Schema.optional(Schema.String),
+  prorationMode: Schema.optional(Schema.String),
+  legacyCompatible: Schema.optional(Schema.Boolean),
+  legacyCompatibleSubscriptionOfferId: Schema.optional(Schema.String),
+});
+
+export type AutoRenewingBasePlanType = typeof AutoRenewingBasePlanType.Type;
+
+/**
+ * Prepaid base plan type
+ */
+export const PrepaidBasePlanType = Schema.Struct({
+  billingPeriodDuration: Schema.optional(Schema.String),
+  timeExtension: Schema.optional(Schema.String),
+});
+
+export type PrepaidBasePlanType = typeof PrepaidBasePlanType.Type;
+
+/**
+ * Installments base plan type
+ */
+export const InstallmentsBasePlanType = Schema.Struct({
+  billingPeriodDuration: Schema.optional(Schema.String),
+  committedPaymentsCount: Schema.optional(Schema.Number),
+  renewalType: Schema.optional(Schema.String),
+  gracePeriodDuration: Schema.optional(Schema.String),
+});
+
+export type InstallmentsBasePlanType = typeof InstallmentsBasePlanType.Type;
+
+/**
+ * Other regions base plan config
+ */
+export const OtherRegionsBasePlanConfig = Schema.Struct({
+  usdPrice: Schema.optional(Money),
+  eurPrice: Schema.optional(Money),
+  newSubscriberAvailability: Schema.optional(Schema.Boolean),
+});
+
+export type OtherRegionsBasePlanConfig = typeof OtherRegionsBasePlanConfig.Type;
+
+/**
+ * Base plan for subscriptions
+ */
+export const BasePlan = Schema.Struct({
+  basePlanId: Schema.String,
+  state: Schema.optional(BasePlanState),
+  autoRenewingBasePlanType: Schema.optional(AutoRenewingBasePlanType),
+  prepaidBasePlanType: Schema.optional(PrepaidBasePlanType),
+  installmentsBasePlanType: Schema.optional(InstallmentsBasePlanType),
+  regionalConfigs: Schema.optional(Schema.Array(RegionalBasePlanConfig)),
+  otherRegionsConfig: Schema.optional(OtherRegionsBasePlanConfig),
+  offerTags: Schema.optional(Schema.Array(OfferTag)),
+});
+
+export type BasePlan = typeof BasePlan.Type;
+
+/**
+ * Subscription listing (localized info)
+ */
+export const SubscriptionListing = Schema.Struct({
+  languageCode: Schema.String,
+  title: Schema.optional(Schema.String),
+  description: Schema.optional(Schema.String),
+  benefits: Schema.optional(Schema.Array(Schema.String)),
+});
+
+export type SubscriptionListing = typeof SubscriptionListing.Type;
+
+/**
+ * Subscription tax and compliance settings
+ */
+export const SubscriptionTaxAndComplianceSettings = Schema.Struct({
+  eeaWithdrawalRightType: Schema.optional(Schema.String),
+  isTokenizedDigitalAsset: Schema.optional(Schema.Boolean),
+  productTaxCategoryCode: Schema.optional(Schema.String),
+});
+
+export type SubscriptionTaxAndComplianceSettings = typeof SubscriptionTaxAndComplianceSettings.Type;
+
+/**
+ * Subscription product
+ */
+export const Subscription = Schema.Struct({
+  packageName: Schema.optional(Schema.String),
+  productId: Schema.String,
+  basePlans: Schema.optional(Schema.Array(BasePlan)),
+  listings: Schema.optional(Schema.Array(SubscriptionListing)),
+  taxAndComplianceSettings: Schema.optional(SubscriptionTaxAndComplianceSettings),
+  archived: Schema.optional(Schema.Boolean),
+  restrictedPaymentCountries: Schema.optional(
+    Schema.Struct({
+      regionCodes: Schema.optional(Schema.Array(Schema.String)),
+    }),
+  ),
+});
+
+export type Subscription = typeof Subscription.Type;
+
+/**
+ * List subscriptions response
+ */
+export const ListSubscriptionsResponse = Schema.Struct({
+  subscriptions: Schema.optional(Schema.Array(Subscription)),
+  nextPageToken: Schema.optional(Schema.String),
+});
+
+export type ListSubscriptionsResponse = typeof ListSubscriptionsResponse.Type;
+
+/**
+ * Subscription offer phase
+ */
+export const SubscriptionOfferPhase = Schema.Struct({
+  recurrenceCount: Schema.optional(Schema.Number),
+  duration: Schema.optional(Schema.String),
+  regionalConfigs: Schema.optional(
+    Schema.Array(
+      Schema.Struct({
+        regionCode: Schema.String,
+        price: Schema.optional(Money),
+        absoluteDiscount: Schema.optional(Money),
+        relativeDiscount: Schema.optional(Schema.Number),
+        free: Schema.optional(Schema.Unknown),
+      }),
+    ),
+  ),
+  otherRegionsConfig: Schema.optional(Schema.Unknown),
+});
+
+export type SubscriptionOfferPhase = typeof SubscriptionOfferPhase.Type;
+
+/**
+ * Subscription offer targeting
+ */
+export const SubscriptionOfferTargeting = Schema.Struct({
+  acquisitionRule: Schema.optional(Schema.Unknown),
+  upgradeRule: Schema.optional(Schema.Unknown),
+});
+
+export type SubscriptionOfferTargeting = typeof SubscriptionOfferTargeting.Type;
+
+/**
+ * Subscription offer
+ */
+export const SubscriptionOffer = Schema.Struct({
+  packageName: Schema.optional(Schema.String),
+  productId: Schema.optional(Schema.String),
+  basePlanId: Schema.optional(Schema.String),
+  offerId: Schema.String,
+  state: Schema.optional(Schema.String),
+  phases: Schema.optional(Schema.Array(SubscriptionOfferPhase)),
+  targeting: Schema.optional(SubscriptionOfferTargeting),
+  offerTags: Schema.optional(Schema.Array(OfferTag)),
+  regionalConfigs: Schema.optional(Schema.Array(Schema.Unknown)),
+  otherRegionsConfig: Schema.optional(Schema.Unknown),
+});
+
+export type SubscriptionOffer = typeof SubscriptionOffer.Type;
+
+/**
+ * One-time product listing
+ */
+export const OneTimeProductListing = Schema.Struct({
+  languageCode: Schema.String,
+  title: Schema.optional(Schema.String),
+  description: Schema.optional(Schema.String),
+  benefits: Schema.optional(Schema.Array(Schema.String)),
+});
+
+export type OneTimeProductListing = typeof OneTimeProductListing.Type;
+
+/**
+ * Purchase option for one-time products
+ */
+export const PurchaseOption = Schema.Struct({
+  purchaseOptionId: Schema.String,
+  state: Schema.optional(Schema.String),
+  regionalConfigs: Schema.optional(Schema.Array(Schema.Unknown)),
+  otherRegionsConfig: Schema.optional(Schema.Unknown),
+});
+
+export type PurchaseOption = typeof PurchaseOption.Type;
+
+/**
+ * One-time product
+ */
+export const OneTimeProduct = Schema.Struct({
+  packageName: Schema.optional(Schema.String),
+  productId: Schema.String,
+  listings: Schema.optional(Schema.Array(OneTimeProductListing)),
+  purchaseOptions: Schema.optional(Schema.Array(PurchaseOption)),
+  taxAndComplianceSettings: Schema.optional(Schema.Unknown),
+});
+
+export type OneTimeProduct = typeof OneTimeProduct.Type;
+
+/**
+ * List one-time products response
+ */
+export const ListOneTimeProductsResponse = Schema.Struct({
+  oneTimeProducts: Schema.optional(Schema.Array(OneTimeProduct)),
+  nextPageToken: Schema.optional(Schema.String),
+});
+
+export type ListOneTimeProductsResponse = typeof ListOneTimeProductsResponse.Type;
+
+/**
+ * Google API error details
+ */
+export const GoogleApiErrorDetail = Schema.Struct({
+  "@type": Schema.optional(Schema.String),
+  reason: Schema.optional(Schema.String),
+  domain: Schema.optional(Schema.String),
+  metadata: Schema.optional(Schema.Unknown),
+});
+
+export type GoogleApiErrorDetail = typeof GoogleApiErrorDetail.Type;
+
+/**
+ * Google API error response
+ */
+export const GoogleApiError = Schema.Struct({
+  error: Schema.Struct({
+    code: Schema.Number,
+    message: Schema.String,
+    status: Schema.optional(Schema.String),
+    details: Schema.optional(Schema.Array(GoogleApiErrorDetail)),
+  }),
+});
+
+export type GoogleApiError = typeof GoogleApiError.Type;
diff --git a/packages/google-play-server-sdk/src/schemas/notifications.ts b/packages/google-play-server-sdk/src/schemas/notifications.ts
new file mode 100644
index 000000000..745bedc06
--- /dev/null
+++ b/packages/google-play-server-sdk/src/schemas/notifications.ts
@@ -0,0 +1,63 @@
+import { Schema } from "effect";
+
+import { OneTimeProductNotificationType, SubscriptionNotificationType } from "./enums.ts";
+
+/**
+ * Subscription notification from RTDN
+ */
+export const SubscriptionNotification = Schema.Struct({
+  version: Schema.optional(Schema.String),
+  notificationType: SubscriptionNotificationType,
+  purchaseToken: Schema.String,
+  subscriptionId: Schema.String,
+});
+
+export type SubscriptionNotification = typeof SubscriptionNotification.Type;
+
+/**
+ * One-time product notification from RTDN
+ */
+export const OneTimeProductNotification = Schema.Struct({
+  version: Schema.optional(Schema.String),
+  notificationType: OneTimeProductNotificationType,
+  purchaseToken: Schema.String,
+  sku: Schema.String,
+});
+
+export type OneTimeProductNotification = typeof OneTimeProductNotification.Type;
+
+/**
+ * Voided purchase notification from RTDN
+ */
+export const VoidedPurchaseNotification = Schema.Struct({
+  purchaseToken: Schema.String,
+  orderId: Schema.optional(Schema.String),
+  productType: Schema.optional(Schema.Number), // 1=Subscription, 2=OneTime
+  refundType: Schema.optional(Schema.Number), // 1=FullRefund, 2=Revoke
+});
+
+export type VoidedPurchaseNotification = typeof VoidedPurchaseNotification.Type;
+
+/**
+ * Test notification from RTDN
+ */
+export const TestNotification = Schema.Struct({
+  version: Schema.optional(Schema.String),
+});
+
+export type TestNotification = typeof TestNotification.Type;
+
+/**
+ * Developer notification (root RTDN message)
+ */
+export const DeveloperNotification = Schema.Struct({
+  version: Schema.optional(Schema.String),
+  packageName: Schema.String,
+  eventTimeMillis: Schema.optional(Schema.String),
+  subscriptionNotification: Schema.optional(SubscriptionNotification),
+  oneTimeProductNotification: Schema.optional(OneTimeProductNotification),
+  voidedPurchaseNotification: Schema.optional(VoidedPurchaseNotification),
+  testNotification: Schema.optional(TestNotification),
+});
+
+export type DeveloperNotification = typeof DeveloperNotification.Type;
diff --git a/packages/google-play-server-sdk/src/schemas/purchases.ts b/packages/google-play-server-sdk/src/schemas/purchases.ts
new file mode 100644
index 000000000..07d740952
--- /dev/null
+++ b/packages/google-play-server-sdk/src/schemas/purchases.ts
@@ -0,0 +1,253 @@
+import { Schema } from "effect";
+
+import { AcknowledgementState, PurchaseState, SubscriptionState } from "./enums.ts";
+
+/**
+ * Auto renewing plan details
+ */
+export const AutoRenewingPlan = Schema.Struct({
+  autoRenewEnabled: Schema.optional(Schema.Boolean),
+  priceChangeDetails: Schema.optional(
+    Schema.Struct({
+      newPrice: Schema.optional(
+        Schema.Struct({
+          currencyCode: Schema.optional(Schema.String),
+          units: Schema.optional(Schema.String),
+          nanos: Schema.optional(Schema.Number),
+        }),
+      ),
+      expectedNewPriceChargeTime: Schema.optional(Schema.String),
+      priceChangeMode: Schema.optional(Schema.String),
+      priceChangeState: Schema.optional(Schema.String),
+    }),
+  ),
+});
+
+export type AutoRenewingPlan = typeof AutoRenewingPlan.Type;
+
+/**
+ * Prepaid plan details
+ */
+export const PrepaidPlan = Schema.Struct({
+  allowExtendAfterTime: Schema.optional(Schema.String),
+});
+
+export type PrepaidPlan = typeof PrepaidPlan.Type;
+
+/**
+ * Offer details for subscription line items
+ */
+export const OfferDetails = Schema.Struct({
+  basePlanId: Schema.optional(Schema.String),
+  offerId: Schema.optional(Schema.String),
+  offerTags: Schema.optional(Schema.Array(Schema.String)),
+});
+
+export type OfferDetails = typeof OfferDetails.Type;
+
+/**
+ * Subscription purchase line item
+ */
+export const SubscriptionPurchaseLineItem = Schema.Struct({
+  productId: Schema.optional(Schema.String),
+  expiryTime: Schema.optional(Schema.String),
+  autoRenewingPlan: Schema.optional(AutoRenewingPlan),
+  prepaidPlan: Schema.optional(PrepaidPlan),
+  offerDetails: Schema.optional(OfferDetails),
+  latestSuccessfulOrderId: Schema.optional(Schema.String),
+});
+
+export type SubscriptionPurchaseLineItem = typeof SubscriptionPurchaseLineItem.Type;
+
+/**
+ * External account identifiers
+ */
+export const ExternalAccountIdentifiers = Schema.Struct({
+  externalAccountId: Schema.optional(Schema.String),
+  obfuscatedExternalAccountId: Schema.optional(Schema.String),
+  obfuscatedExternalProfileId: Schema.optional(Schema.String),
+});
+
+export type ExternalAccountIdentifiers = typeof ExternalAccountIdentifiers.Type;
+
+/**
+ * Canceled state context
+ */
+export const CanceledStateContext = Schema.Struct({
+  userInitiatedCancellation: Schema.optional(Schema.Unknown),
+  systemInitiatedCancellation: Schema.optional(Schema.Unknown),
+  developerInitiatedCancellation: Schema.optional(Schema.Unknown),
+  replacementCancellation: Schema.optional(Schema.Unknown),
+});
+
+export type CanceledStateContext = typeof CanceledStateContext.Type;
+
+/**
+ * Paused state context
+ */
+export const PausedStateContext = Schema.Struct({
+  autoResumeTime: Schema.optional(Schema.String),
+});
+
+export type PausedStateContext = typeof PausedStateContext.Type;
+
+/**
+ * Subscribe with Google info
+ */
+export const SubscribeWithGoogleInfo = Schema.Struct({
+  emailAddress: Schema.optional(Schema.String),
+  givenName: Schema.optional(Schema.String),
+  familyName: Schema.optional(Schema.String),
+  profileId: Schema.optional(Schema.String),
+  profileName: Schema.optional(Schema.String),
+});
+
+export type SubscribeWithGoogleInfo = typeof SubscribeWithGoogleInfo.Type;
+
+/**
+ * Test purchase marker
+ */
+export const TestPurchase = Schema.Struct({});
+
+export type TestPurchase = typeof TestPurchase.Type;
+
+/**
+ * Subscription purchase V2 response
+ */
+export const SubscriptionPurchaseV2 = Schema.Struct({
+  kind: Schema.optional(Schema.String),
+  subscriptionState: Schema.optional(SubscriptionState),
+  acknowledgementState: Schema.optional(AcknowledgementState),
+  startTime: Schema.optional(Schema.String),
+  regionCode: Schema.optional(Schema.String),
+  latestOrderId: Schema.optional(Schema.String),
+  lineItems: Schema.optional(Schema.Array(SubscriptionPurchaseLineItem)),
+  linkedPurchaseToken: Schema.optional(Schema.String),
+  pausedStateContext: Schema.optional(PausedStateContext),
+  canceledStateContext: Schema.optional(CanceledStateContext),
+  testPurchase: Schema.optional(TestPurchase),
+  externalAccountIdentifiers: Schema.optional(ExternalAccountIdentifiers),
+  subscribeWithGoogleInfo: Schema.optional(SubscribeWithGoogleInfo),
+});
+
+export type SubscriptionPurchaseV2 = typeof SubscriptionPurchaseV2.Type;
+
+/**
+ * Product line item for product purchases V2
+ */
+export const ProductLineItem = Schema.Struct({
+  productId: Schema.optional(Schema.String),
+  offerDetails: Schema.optional(OfferDetails),
+  quantity: Schema.optional(Schema.Number),
+});
+
+export type ProductLineItem = typeof ProductLineItem.Type;
+
+/**
+ * Purchase state context for product purchases V2
+ */
+export const PurchaseStateContext = Schema.Struct({
+  purchaseState: Schema.optional(PurchaseState),
+});
+
+export type PurchaseStateContext = typeof PurchaseStateContext.Type;
+
+/**
+ * Test purchase context
+ */
+export const TestPurchaseContext = Schema.Struct({
+  testPurchaseType: Schema.optional(Schema.String),
+});
+
+export type TestPurchaseContext = typeof TestPurchaseContext.Type;
+
+/**
+ * Product purchase V2 response
+ */
+export const ProductPurchaseV2 = Schema.Struct({
+  kind: Schema.optional(Schema.String),
+  acknowledgementState: Schema.optional(AcknowledgementState),
+  orderId: Schema.optional(Schema.String),
+  productLineItem: Schema.optional(Schema.Array(ProductLineItem)),
+  purchaseCompletionTime: Schema.optional(Schema.String),
+  purchaseStateContext: Schema.optional(PurchaseStateContext),
+  regionCode: Schema.optional(Schema.String),
+  testPurchaseContext: Schema.optional(TestPurchaseContext),
+  obfuscatedExternalAccountId: Schema.optional(Schema.String),
+  obfuscatedExternalProfileId: Schema.optional(Schema.String),
+});
+
+export type ProductPurchaseV2 = typeof ProductPurchaseV2.Type;
+
+/**
+ * Legacy product purchase response (V1)
+ */
+export const ProductPurchase = Schema.Struct({
+  kind: Schema.optional(Schema.String),
+  purchaseState: Schema.optional(Schema.Number), // 0=Purchased, 1=Canceled, 2=Pending
+  acknowledgementState: Schema.optional(Schema.Number), // 0=Pending, 1=Acknowledged
+  consumptionState: Schema.optional(Schema.Number), // 0=YetToBeConsumed, 1=Consumed
+  orderId: Schema.optional(Schema.String),
+  purchaseTimeMillis: Schema.optional(Schema.String),
+  developerPayload: Schema.optional(Schema.String),
+  purchaseType: Schema.optional(Schema.Number), // 0=Test, 1=Promo, 2=Rewarded
+  productId: Schema.optional(Schema.String),
+  quantity: Schema.optional(Schema.Number),
+  obfuscatedExternalAccountId: Schema.optional(Schema.String),
+  obfuscatedExternalProfileId: Schema.optional(Schema.String),
+  regionCode: Schema.optional(Schema.String),
+  refundableQuantity: Schema.optional(Schema.Number),
+  purchaseToken: Schema.optional(Schema.String),
+});
+
+export type ProductPurchase = typeof ProductPurchase.Type;
+
+/**
+ * Voided purchase record
+ */
+export const VoidedPurchase = Schema.Struct({
+  purchaseToken: Schema.String,
+  purchaseTimeMillis: Schema.optional(Schema.String),
+  voidedTimeMillis: Schema.optional(Schema.String),
+  orderId: Schema.optional(Schema.String),
+  voidedSource: Schema.optional(Schema.Number), // 0=User, 1=Developer, 2=Google
+  voidedReason: Schema.optional(Schema.Number), // 0=Other, 1=Remorse, 2=NotReceived, 3=Defective, 4=Chargeback, 5=FriendlyFraud
+  kind: Schema.optional(Schema.String),
+  voidedQuantity: Schema.optional(Schema.Number),
+  productType: Schema.optional(Schema.Number), // 0=Subscription, 1=Product
+  refundType: Schema.optional(Schema.Number), // 0=FullRefund, 1=Revoke
+});
+
+export type VoidedPurchase = typeof VoidedPurchase.Type;
+
+/**
+ * Page info for paginated responses
+ */
+export const PageInfo = Schema.Struct({
+  totalResults: Schema.optional(Schema.Number),
+  resultPerPage: Schema.optional(Schema.Number),
+  startIndex: Schema.optional(Schema.Number),
+});
+
+export type PageInfo = typeof PageInfo.Type;
+
+/**
+ * Token pagination
+ */
+export const TokenPagination = Schema.Struct({
+  nextPageToken: Schema.optional(Schema.String),
+  previousPageToken: Schema.optional(Schema.String),
+});
+
+export type TokenPagination = typeof TokenPagination.Type;
+
+/**
+ * Voided purchases list response
+ */
+export const VoidedPurchasesListResponse = Schema.Struct({
+  voidedPurchases: Schema.optional(Schema.Array(VoidedPurchase)),
+  pageInfo: Schema.optional(PageInfo),
+  tokenPagination: Schema.optional(TokenPagination),
+});
+
+export type VoidedPurchasesListResponse = typeof VoidedPurchasesListResponse.Type;
diff --git a/packages/google-play-server-sdk/tests/import-ban.test.ts b/packages/google-play-server-sdk/tests/import-ban.test.ts
new file mode 100644
index 000000000..34d17aae2
--- /dev/null
+++ b/packages/google-play-server-sdk/tests/import-ban.test.ts
@@ -0,0 +1,67 @@
+import { describe, expect, it } from "vitest";
+import fs from "node:fs";
+import path from "node:path";
+
+/**
+ * Workers-compatibility gate.
+ *
+ * The shipped SDK source (`src/`) must run unchanged on Cloudflare Workers
+ * (workerd), which has no Node built-ins, no `Buffer`, and cannot load
+ * `google-auth-library`/`jsonwebtoken`/`jsrsasign`. Auth signs the
+ * service-account JWT with WebCrypto via `jose`; this static guard fails if any
+ * Node-only API creeps back in.
+ *
+ * Note: this scans `src/` only. Test files run on Node and may use `node:fs`,
+ * `Buffer`, etc.
+ */
+const SRC_DIR = path.join(process.cwd(), "src");
+
+const FORBIDDEN: ReadonlyArray<{ label: string; pattern: RegExp }> = [
+  { label: "node: builtin import", pattern: /\bfrom\s+["']node:[^"']+["']/ },
+  { label: "node: builtin require", pattern: /\brequire\(\s*["']node:[^"']+["']\)/ },
+  { label: "bare 'crypto' import", pattern: /\bfrom\s+["']crypto["']/ },
+  { label: "google-auth-library import", pattern: /\bfrom\s+["']google-auth-library["']/ },
+  { label: "jsonwebtoken import", pattern: /\bfrom\s+["']jsonwebtoken["']/ },
+  { label: "jsrsasign import", pattern: /\bfrom\s+["']jsrsasign["']/ },
+  { label: "Buffer usage", pattern: /\bBuffer\s*[.(]/ },
+  { label: "new Buffer", pattern: /\bnew\s+Buffer\b/ },
+];
+
+const walk = (dir: string): string[] => {
+  const out: string[] = [];
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      out.push(...walk(full));
+    } else if (entry.isFile() && full.endsWith(".ts")) {
+      out.push(full);
+    }
+  }
+  return out;
+};
+
+describe("Workers compatibility: no Node-only APIs in src", () => {
+  it("has zero node:/Buffer/google-auth-library/jsonwebtoken/jsrsasign references in shipped source", () => {
+    const files = walk(SRC_DIR);
+    expect(files.length).toBeGreaterThan(0);
+
+    const violations: string[] = [];
+    for (const file of files) {
+      const lines = fs.readFileSync(file, "utf-8").split("\n");
+      lines.forEach((line, index) => {
+        for (const { label, pattern } of FORBIDDEN) {
+          if (pattern.test(line)) {
+            violations.push(
+              `${path.relative(SRC_DIR, file)}:${index + 1} [${label}] ${line.trim()}`,
+            );
+          }
+        }
+      });
+    }
+
+    expect(
+      violations,
+      `Node-only APIs found in shipped src (these break on Cloudflare Workers):\n${violations.join("\n")}`,
+    ).toEqual([]);
+  });
+});
diff --git a/packages/google-play-server-sdk/tests/schemas.test.ts b/packages/google-play-server-sdk/tests/schemas.test.ts
new file mode 100644
index 000000000..cda8dd3ea
--- /dev/null
+++ b/packages/google-play-server-sdk/tests/schemas.test.ts
@@ -0,0 +1,534 @@
+/**
+ * Unit tests for Google Play API schemas
+ */
+
+import { Effect, Exit, Schema } from "effect";
+import { describe, expect, test } from "vitest";
+
+import {
+  SubscriptionState,
+  AcknowledgementState,
+  PurchaseState,
+  ConsumptionState,
+  SubscriptionPurchaseV2,
+  SubscriptionPurchaseLineItem,
+  ProductPurchaseV2,
+  ProductPurchase,
+  VoidedPurchase,
+  VoidedPurchasesListResponse,
+  DeveloperNotification,
+  SubscriptionNotification,
+  OneTimeProductNotification,
+  VoidedPurchaseNotification,
+  TestNotification,
+} from "../src/schemas";
+
+describe("Google Play API Schemas", () => {
+  describe("Enums", () => {
+    describe("SubscriptionState", () => {
+      test("should decode valid subscription states", async () => {
+        const validStates = [
+          "SUBSCRIPTION_STATE_UNSPECIFIED",
+          "SUBSCRIPTION_STATE_PENDING",
+          "SUBSCRIPTION_STATE_ACTIVE",
+          "SUBSCRIPTION_STATE_PAUSED",
+          "SUBSCRIPTION_STATE_IN_GRACE_PERIOD",
+          "SUBSCRIPTION_STATE_ON_HOLD",
+          "SUBSCRIPTION_STATE_CANCELED",
+          "SUBSCRIPTION_STATE_EXPIRED",
+          "SUBSCRIPTION_STATE_PENDING_PURCHASE_CANCELED",
+        ];
+
+        for (const state of validStates) {
+          const result = await Effect.runPromiseExit(
+            Schema.decodeUnknownEffect(SubscriptionState)(state),
+          );
+          expect(Exit.isSuccess(result)).toBe(true);
+        }
+      });
+
+      test("should fail for invalid subscription state", async () => {
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(SubscriptionState)("INVALID_STATE"),
+        );
+        expect(Exit.isFailure(result)).toBe(true);
+      });
+    });
+
+    describe("AcknowledgementState", () => {
+      test("should decode valid acknowledgement states", async () => {
+        const validStates = [
+          "ACKNOWLEDGEMENT_STATE_UNSPECIFIED",
+          "ACKNOWLEDGEMENT_STATE_PENDING",
+          "ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED",
+        ];
+
+        for (const state of validStates) {
+          const result = await Effect.runPromiseExit(
+            Schema.decodeUnknownEffect(AcknowledgementState)(state),
+          );
+          expect(Exit.isSuccess(result)).toBe(true);
+        }
+      });
+    });
+
+    describe("PurchaseState", () => {
+      test("should decode valid purchase states", async () => {
+        const validStates = ["PURCHASE_STATE_UNSPECIFIED", "PURCHASED", "PENDING", "CANCELLED"];
+
+        for (const state of validStates) {
+          const result = await Effect.runPromiseExit(
+            Schema.decodeUnknownEffect(PurchaseState)(state),
+          );
+          expect(Exit.isSuccess(result)).toBe(true);
+        }
+      });
+    });
+
+    describe("ConsumptionState", () => {
+      test("should decode valid consumption states", async () => {
+        const validStates = [
+          "CONSUMPTION_STATE_UNSPECIFIED",
+          "CONSUMPTION_STATE_YET_TO_BE_CONSUMED",
+          "CONSUMPTION_STATE_CONSUMED",
+        ];
+
+        for (const state of validStates) {
+          const result = await Effect.runPromiseExit(
+            Schema.decodeUnknownEffect(ConsumptionState)(state),
+          );
+          expect(Exit.isSuccess(result)).toBe(true);
+        }
+      });
+    });
+  });
+
+  describe("SubscriptionPurchaseLineItem", () => {
+    test("should decode minimal line item", async () => {
+      const lineItem = {
+        productId: "com.example.subscription.monthly",
+        expiryTime: "2024-12-31T23:59:59Z",
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(SubscriptionPurchaseLineItem)(lineItem),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.productId).toBe("com.example.subscription.monthly");
+        expect(result.value.expiryTime).toBe("2024-12-31T23:59:59Z");
+      }
+    });
+
+    test("should decode line item with all fields", async () => {
+      const lineItem = {
+        productId: "com.example.subscription.monthly",
+        expiryTime: "2024-12-31T23:59:59Z",
+        autoRenewingPlan: {
+          autoRenewEnabled: true,
+        },
+        offerDetails: {
+          offerId: "introductory_offer",
+          basePlanId: "monthly_plan",
+        },
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(SubscriptionPurchaseLineItem)(lineItem),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.autoRenewingPlan?.autoRenewEnabled).toBe(true);
+        expect(result.value.offerDetails?.offerId).toBe("introductory_offer");
+      }
+    });
+  });
+
+  describe("SubscriptionPurchaseV2", () => {
+    test("should decode minimal subscription purchase", async () => {
+      const purchase = {
+        subscriptionState: "SUBSCRIPTION_STATE_ACTIVE",
+        acknowledgementState: "ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED",
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(SubscriptionPurchaseV2)(purchase),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.subscriptionState).toBe("SUBSCRIPTION_STATE_ACTIVE");
+        expect(result.value.acknowledgementState).toBe("ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED");
+      }
+    });
+
+    test("should decode full subscription purchase", async () => {
+      const purchase = {
+        subscriptionState: "SUBSCRIPTION_STATE_ACTIVE",
+        acknowledgementState: "ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED",
+        lineItems: [
+          {
+            productId: "com.example.subscription.monthly",
+            expiryTime: "2024-12-31T23:59:59Z",
+          },
+        ],
+        startTime: "2024-01-01T00:00:00Z",
+        regionCode: "US",
+        latestOrderId: "GPA.1234-5678-9012-34567",
+        linkedPurchaseToken: "old_purchase_token",
+        kind: "androidpublisher#subscriptionPurchaseV2",
+        testPurchase: {},
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(SubscriptionPurchaseV2)(purchase),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.lineItems).toHaveLength(1);
+        expect(result.value.regionCode).toBe("US");
+        expect(result.value.latestOrderId).toBe("GPA.1234-5678-9012-34567");
+      }
+    });
+  });
+
+  describe("ProductPurchaseV2", () => {
+    test("should decode minimal product purchase", async () => {
+      const purchase = {
+        acknowledgementState: "ACKNOWLEDGEMENT_STATE_PENDING",
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(ProductPurchaseV2)(purchase),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.acknowledgementState).toBe("ACKNOWLEDGEMENT_STATE_PENDING");
+      }
+    });
+
+    test("should decode full product purchase", async () => {
+      const purchase = {
+        acknowledgementState: "ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED",
+        purchaseStateContext: {
+          purchaseState: "PURCHASED",
+        },
+        productLineItem: [
+          {
+            productId: "com.example.consumable.coins",
+            quantity: 100,
+          },
+        ],
+        orderId: "GPA.1234-5678-9012-34567",
+        purchaseCompletionTime: "2024-06-15T10:30:00Z",
+        regionCode: "US",
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(ProductPurchaseV2)(purchase),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.purchaseStateContext?.purchaseState).toBe("PURCHASED");
+        expect(result.value.productLineItem).toHaveLength(1);
+        expect(result.value.regionCode).toBe("US");
+      }
+    });
+  });
+
+  describe("ProductPurchase (Legacy)", () => {
+    test("should decode legacy product purchase", async () => {
+      const purchase = {
+        purchaseState: 0,
+        consumptionState: 1,
+        purchaseTimeMillis: "1718451000000",
+        orderId: "GPA.1234-5678-9012-34567",
+        kind: "androidpublisher#productPurchase",
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(ProductPurchase)(purchase),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.purchaseState).toBe(0);
+        expect(result.value.consumptionState).toBe(1);
+        expect(result.value.purchaseTimeMillis).toBe("1718451000000");
+      }
+    });
+
+    test("should handle developer payload", async () => {
+      const purchase = {
+        purchaseState: 0,
+        consumptionState: 0,
+        purchaseTimeMillis: "1718451000000",
+        developerPayload: "custom_user_data",
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(ProductPurchase)(purchase),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.developerPayload).toBe("custom_user_data");
+      }
+    });
+  });
+
+  describe("VoidedPurchase", () => {
+    test("should decode voided purchase", async () => {
+      const voidedPurchase = {
+        purchaseToken: "token123",
+        voidedTimeMillis: "1718451000000",
+        orderId: "GPA.1234-5678-9012-34567",
+        voidedSource: 0,
+        voidedReason: 1,
+        kind: "androidpublisher#voidedPurchase",
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(VoidedPurchase)(voidedPurchase),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.purchaseToken).toBe("token123");
+        expect(result.value.voidedSource).toBe(0);
+        expect(result.value.voidedReason).toBe(1);
+      }
+    });
+  });
+
+  describe("VoidedPurchasesListResponse", () => {
+    test("should decode voided purchases list", async () => {
+      const response = {
+        voidedPurchases: [
+          {
+            purchaseToken: "token1",
+            voidedTimeMillis: "1718451000000",
+            orderId: "order1",
+            voidedReason: 1,
+          },
+          {
+            purchaseToken: "token2",
+            voidedTimeMillis: "1718452000000",
+            orderId: "order2",
+            voidedReason: 2,
+          },
+        ],
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(VoidedPurchasesListResponse)(response),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.voidedPurchases).toHaveLength(2);
+      }
+    });
+
+    test("should decode response with pagination", async () => {
+      const response = {
+        voidedPurchases: [],
+        tokenPagination: {
+          nextPageToken: "next_token_123",
+        },
+      };
+
+      const result = await Effect.runPromiseExit(
+        Schema.decodeUnknownEffect(VoidedPurchasesListResponse)(response),
+      );
+
+      expect(Exit.isSuccess(result)).toBe(true);
+      if (Exit.isSuccess(result)) {
+        expect(result.value.tokenPagination?.nextPageToken).toBe("next_token_123");
+      }
+    });
+  });
+
+  describe("RTDN Notification Schemas", () => {
+    describe("SubscriptionNotification", () => {
+      test("should decode subscription notification", async () => {
+        const notification = {
+          version: "1.0",
+          notificationType: 4,
+          purchaseToken: "purchase_token_123",
+          subscriptionId: "com.example.subscription.monthly",
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(SubscriptionNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.notificationType).toBe(4);
+          expect(result.value.purchaseToken).toBe("purchase_token_123");
+          expect(result.value.subscriptionId).toBe("com.example.subscription.monthly");
+        }
+      });
+    });
+
+    describe("OneTimeProductNotification", () => {
+      test("should decode one-time product notification", async () => {
+        const notification = {
+          version: "1.0",
+          notificationType: 1,
+          purchaseToken: "purchase_token_456",
+          sku: "com.example.consumable.coins",
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(OneTimeProductNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.notificationType).toBe(1);
+          expect(result.value.sku).toBe("com.example.consumable.coins");
+        }
+      });
+    });
+
+    describe("VoidedPurchaseNotification", () => {
+      test("should decode voided purchase notification", async () => {
+        const notification = {
+          purchaseToken: "purchase_token_789",
+          orderId: "GPA.1234-5678-9012-34567",
+          productType: 1,
+          refundType: 1,
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(VoidedPurchaseNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.purchaseToken).toBe("purchase_token_789");
+          expect(result.value.productType).toBe(1);
+          expect(result.value.refundType).toBe(1);
+        }
+      });
+    });
+
+    describe("TestNotification", () => {
+      test("should decode test notification", async () => {
+        const notification = {
+          version: "1.0",
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(TestNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.version).toBe("1.0");
+        }
+      });
+    });
+
+    describe("DeveloperNotification", () => {
+      test("should decode subscription developer notification", async () => {
+        const notification = {
+          version: "1.0",
+          packageName: "com.example.app",
+          eventTimeMillis: "1718451000000",
+          subscriptionNotification: {
+            version: "1.0",
+            notificationType: 4,
+            purchaseToken: "purchase_token_123",
+            subscriptionId: "com.example.subscription.monthly",
+          },
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(DeveloperNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.packageName).toBe("com.example.app");
+          expect(result.value.subscriptionNotification).toBeDefined();
+          expect(result.value.oneTimeProductNotification).toBeUndefined();
+        }
+      });
+
+      test("should decode one-time product developer notification", async () => {
+        const notification = {
+          version: "1.0",
+          packageName: "com.example.app",
+          eventTimeMillis: "1718451000000",
+          oneTimeProductNotification: {
+            version: "1.0",
+            notificationType: 1,
+            purchaseToken: "purchase_token_456",
+            sku: "com.example.consumable.coins",
+          },
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(DeveloperNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.oneTimeProductNotification).toBeDefined();
+          expect(result.value.subscriptionNotification).toBeUndefined();
+        }
+      });
+
+      test("should decode test developer notification", async () => {
+        const notification = {
+          version: "1.0",
+          packageName: "com.example.app",
+          eventTimeMillis: "1718451000000",
+          testNotification: {
+            version: "1.0",
+          },
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(DeveloperNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.testNotification).toBeDefined();
+        }
+      });
+
+      test("should decode voided purchase developer notification", async () => {
+        const notification = {
+          version: "1.0",
+          packageName: "com.example.app",
+          eventTimeMillis: "1718451000000",
+          voidedPurchaseNotification: {
+            purchaseToken: "purchase_token_789",
+            orderId: "GPA.1234-5678-9012-34567",
+            productType: 1,
+            refundType: 1,
+          },
+        };
+
+        const result = await Effect.runPromiseExit(
+          Schema.decodeUnknownEffect(DeveloperNotification)(notification),
+        );
+
+        expect(Exit.isSuccess(result)).toBe(true);
+        if (Exit.isSuccess(result)) {
+          expect(result.value.voidedPurchaseNotification).toBeDefined();
+        }
+      });
+    });
+  });
+});
diff --git a/packages/google-play-server-sdk/tsconfig.json b/packages/google-play-server-sdk/tsconfig.json
new file mode 100644
index 000000000..764908027
--- /dev/null
+++ b/packages/google-play-server-sdk/tsconfig.json
@@ -0,0 +1,10 @@
+{
+  "extends": "@voidhash/tsconfig/base.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"],
+  "compilerOptions": {
+    "allowImportingTsExtensions": true,
+    "declaration": false,
+    "lib": ["ES2022", "DOM"]
+  }
+}
diff --git a/packages/google-play-server-sdk/vitest.unit.mts b/packages/google-play-server-sdk/vitest.unit.mts
new file mode 100644
index 000000000..8dde916c9
--- /dev/null
+++ b/packages/google-play-server-sdk/vitest.unit.mts
@@ -0,0 +1,9 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    exclude: ["./**/*.integration.test.ts", "./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 199a95347..8c97da105 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -538,6 +538,25 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
 
+  packages/google-play-server-sdk:
+    dependencies:
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      jose:
+        specifier: ^6.0.11
+        version: 6.1.3
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 5.9.3
+        version: 5.9.3
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/lib:
     dependencies:
       effect:

From 0315d28fa05eafcdc5c06ab10a3bbda59a68ec2b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 14:15:54 +0200
Subject: [PATCH 046/129] build(oss): relocate public API contracts

---
 packages/api-contracts/LICENSE.md             |  21 +
 packages/api-contracts/package.json           |  29 +
 packages/api-contracts/src/Api.ts             | 573 +++++++++++
 packages/api-contracts/src/Auth.ts            | 104 ++
 packages/api-contracts/src/EventCapture.ts    | 195 ++++
 packages/api-contracts/src/Middlewares.ts     |  12 +
 packages/api-contracts/src/Schema.ts          | 899 ++++++++++++++++++
 .../api-contracts/src/errors/Analytics.ts     |  28 +
 packages/api-contracts/src/errors/ApiKey.ts   |  19 +
 packages/api-contracts/src/errors/Billing.ts  |  28 +
 packages/api-contracts/src/errors/Common.ts   |  29 +
 .../api-contracts/src/errors/Organization.ts  |  19 +
 .../src/errors/PaymentProvider.ts             |  73 ++
 packages/api-contracts/src/errors/Paywall.ts  |  37 +
 .../api-contracts/src/errors/PaywallDeploy.ts |  87 ++
 .../src/errors/PaywallLocation.ts             |  10 +
 packages/api-contracts/src/errors/Perk.ts     |  32 +
 packages/api-contracts/src/errors/Person.ts   |  36 +
 packages/api-contracts/src/errors/Product.ts  |  32 +
 .../api-contracts/src/errors/ProductPerk.ts   |  19 +
 packages/api-contracts/src/errors/Project.ts  |  23 +
 .../src/errors/PushNotification.ts            |  61 ++
 packages/api-contracts/src/errors/Schema.ts   |  15 +
 packages/api-contracts/src/errors/Sdk.ts      |  41 +
 packages/api-contracts/src/errors/User.ts     |  10 +
 packages/api-contracts/src/errors/Webhook.ts  |  37 +
 packages/api-contracts/src/errors/index.ts    |  19 +
 packages/api-contracts/src/index.ts           |   4 +
 packages/api-contracts/tsconfig.json          |  11 +
 pnpm-lock.yaml                                |  13 +
 30 files changed, 2516 insertions(+)
 create mode 100644 packages/api-contracts/LICENSE.md
 create mode 100644 packages/api-contracts/package.json
 create mode 100644 packages/api-contracts/src/Api.ts
 create mode 100644 packages/api-contracts/src/Auth.ts
 create mode 100644 packages/api-contracts/src/EventCapture.ts
 create mode 100644 packages/api-contracts/src/Middlewares.ts
 create mode 100644 packages/api-contracts/src/Schema.ts
 create mode 100644 packages/api-contracts/src/errors/Analytics.ts
 create mode 100644 packages/api-contracts/src/errors/ApiKey.ts
 create mode 100644 packages/api-contracts/src/errors/Billing.ts
 create mode 100644 packages/api-contracts/src/errors/Common.ts
 create mode 100644 packages/api-contracts/src/errors/Organization.ts
 create mode 100644 packages/api-contracts/src/errors/PaymentProvider.ts
 create mode 100644 packages/api-contracts/src/errors/Paywall.ts
 create mode 100644 packages/api-contracts/src/errors/PaywallDeploy.ts
 create mode 100644 packages/api-contracts/src/errors/PaywallLocation.ts
 create mode 100644 packages/api-contracts/src/errors/Perk.ts
 create mode 100644 packages/api-contracts/src/errors/Person.ts
 create mode 100644 packages/api-contracts/src/errors/Product.ts
 create mode 100644 packages/api-contracts/src/errors/ProductPerk.ts
 create mode 100644 packages/api-contracts/src/errors/Project.ts
 create mode 100644 packages/api-contracts/src/errors/PushNotification.ts
 create mode 100644 packages/api-contracts/src/errors/Schema.ts
 create mode 100644 packages/api-contracts/src/errors/Sdk.ts
 create mode 100644 packages/api-contracts/src/errors/User.ts
 create mode 100644 packages/api-contracts/src/errors/Webhook.ts
 create mode 100644 packages/api-contracts/src/errors/index.ts
 create mode 100644 packages/api-contracts/src/index.ts
 create mode 100644 packages/api-contracts/tsconfig.json

diff --git a/packages/api-contracts/LICENSE.md b/packages/api-contracts/LICENSE.md
new file mode 100644
index 000000000..cc433146c
--- /dev/null
+++ b/packages/api-contracts/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/api-contracts/package.json b/packages/api-contracts/package.json
new file mode 100644
index 000000000..d67adc35a
--- /dev/null
+++ b/packages/api-contracts/package.json
@@ -0,0 +1,29 @@
+{
+  "name": "@voidhash/api-contracts",
+  "version": "0.0.1-alpha.1",
+  "license": "MIT",
+  "private": true,
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/api-contracts"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./errors": "./src/errors/index.ts",
+    "./event-capture": "./src/EventCapture.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "5.6.3"
+  },
+  "peerDependencies": {
+    "effect": "catalog:"
+  }
+}
diff --git a/packages/api-contracts/src/Api.ts b/packages/api-contracts/src/Api.ts
new file mode 100644
index 000000000..d43fbe58f
--- /dev/null
+++ b/packages/api-contracts/src/Api.ts
@@ -0,0 +1,573 @@
+import { Schema } from "effect";
+import { HttpApi, HttpApiEndpoint, HttpApiGroup, HttpApiSchema } from "effect/unstable/httpapi";
+
+import {
+  ApiActionForbiddenError,
+  ApiApiKeyNotFoundError,
+  ApiApiKeyServiceError,
+  ApiAuthenticationError,
+  ApiDeployBlobHashMismatchError,
+  ApiDeployBlobNotDeclaredError,
+  ApiIncompleteDeployError,
+  ApiOrganizationServiceError,
+  ApiPaymentProviderConfigurationServiceError,
+  ApiPaymentProviderProductServiceError,
+  ApiPaywallDeployNotFoundError,
+  ApiPaywallDeployNotPendingError,
+  ApiPaywallDeployServiceError,
+  ApiPaywallDeployUpgradeRequiredError,
+  ApiPaywallDeployValidationError,
+  ApiPaywallLocationServiceError,
+  ApiPerkServiceError,
+  ApiPersonInvalidAnonymousIdError,
+  ApiPersonNotFoundError,
+  ApiPersonServiceError,
+  ApiProductPerkServiceError,
+  ApiProductPerkValidationError,
+  ApiProductServiceError,
+  ApiProjectServiceError,
+  ApiPushDeviceNotFoundError,
+  ApiPushDeviceServiceError,
+  ApiPushDeviceValidationError,
+  ApiPushSendNotEnabledError,
+  ApiPushSendServiceError,
+  ApiSchemaServiceError,
+  ApiSdkPersonAlreadyIdentifiedError,
+  ApiSdkPersonNotFoundError,
+  ApiSdkServiceError,
+  ApiSdkValidationError,
+  ApiUserServiceError,
+  ApiWebhookDeliveryNotFoundError,
+  ApiWebhookEndpointNotFoundError,
+  ApiWebhookServiceError,
+  ApiWebhookValidationError,
+} from "./errors/index.ts";
+import { AuthMiddleware } from "./Middlewares.ts";
+import {
+  ApiKey,
+  ApiKeyWithRawKey,
+  CreateOrganizationBody,
+  CreatePaywallDeployResponse,
+  CreatePersonBody,
+  CreateProjectBody,
+  CreateSecretKeyBody,
+  CreateWebhookEndpointBody,
+  EvaluateFeatureFlagsBody,
+  FinalizePaywallDeployResponse,
+  Organization,
+  PaymentProviderConfiguration,
+  PaymentProviderProduct,
+  PaywallDeployBlobBody,
+  PaywallDeployManifestBody,
+  PaywallLocation,
+  Perk,
+  Person,
+  Product,
+  ProductPerk,
+  Project,
+  ProjectSchemaResponse,
+  RefreshDeviceBody,
+  RegisterDeviceBody,
+  RegisterDeviceResponse,
+  SchemaVersion,
+  SendNotificationBody,
+  SendNotificationResponse,
+  SdkFeatureFlagsResponse,
+  SdkHeaders,
+  SdkIdentifyBody,
+  SdkPerson,
+  SdkResolvePaywallBody,
+  SdkResolvedPaywall,
+  SdkSchema,
+  SdkSyncPersonAttributesBody,
+  SdkSyncTransactionBody,
+  SdkSyncTransactionResponse,
+  Session,
+  UnregisterDeviceBody,
+  UpdateWebhookEndpointBody,
+  UploadPaywallDeployBlobResponse,
+  User,
+  WebhookDelivery,
+  WebhookDeliveryWithAttempts,
+  WebhookEndpoint,
+} from "./Schema.ts";
+
+export const VoidhashV1Api = HttpApi.make("VoidhashV1Api")
+  .add(
+    HttpApiGroup.make("auth")
+      .add(
+        HttpApiEndpoint.get("session", "/session", {
+          success: Session,
+          error: [ApiActionForbiddenError],
+        }).middleware(AuthMiddleware),
+      )
+      .prefix("/auth"),
+  )
+  .add(
+    HttpApiGroup.make("api_keys")
+      .add(
+        HttpApiEndpoint.post("createSecretKey", "/", {
+          success: ApiKeyWithRawKey,
+          payload: CreateSecretKeyBody,
+          error: [ApiApiKeyServiceError, ApiActionForbiddenError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("listApiKeys", "/", {
+          success: Schema.Array(ApiKey),
+          error: [ApiApiKeyServiceError, ApiActionForbiddenError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("getApiKeyById", "/:apiKeyId", {
+          params: { apiKeyId: Schema.String },
+          success: ApiKey,
+          error: [ApiApiKeyServiceError, ApiApiKeyNotFoundError, ApiActionForbiddenError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("rotateSecretKey", "/:apiKeyId/rotate", {
+          params: { apiKeyId: Schema.String },
+          success: ApiKeyWithRawKey,
+          error: [ApiApiKeyServiceError, ApiApiKeyNotFoundError, ApiActionForbiddenError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.delete("deleteApiKey", "/:apiKeyId", {
+          params: { apiKeyId: Schema.String },
+          error: [ApiApiKeyServiceError, ApiApiKeyNotFoundError, ApiActionForbiddenError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/api-keys"),
+  )
+  .add(
+    HttpApiGroup.make("persons")
+      .add(
+        HttpApiEndpoint.post("createPerson", "/", {
+          payload: CreatePersonBody,
+          success: Person,
+          error: [ApiActionForbiddenError, ApiPersonInvalidAnonymousIdError, ApiPersonServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("listPersons", "/", {
+          success: Schema.Array(Person),
+          error: [ApiActionForbiddenError, ApiPersonServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("getPersonById", "/:personId", {
+          params: { personId: Schema.String },
+          success: Person,
+          error: [ApiActionForbiddenError, ApiPersonNotFoundError, ApiPersonServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("getPersonByDistinctId", "/by-distinct-id/:distinctId", {
+          params: { distinctId: Schema.String },
+          success: Person,
+          error: [ApiActionForbiddenError, ApiPersonNotFoundError, ApiPersonServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/persons"),
+  )
+  .add(
+    HttpApiGroup.make("notifications")
+      .add(
+        // Server-to-server push dispatch. Secret-key auth (server-side only —
+        // clients must never be able to push to arbitrary persons) and gated by
+        // the `notifications` internal feature flag.
+        HttpApiEndpoint.post("sendNotification", "/send", {
+          payload: SendNotificationBody,
+          success: SendNotificationResponse,
+          error: [
+            ApiActionForbiddenError,
+            ApiAuthenticationError,
+            ApiPushDeviceValidationError,
+            ApiPushSendNotEnabledError,
+            ApiPushSendServiceError,
+          ],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/notifications"),
+  )
+  .add(
+    HttpApiGroup.make("organizations")
+      .add(
+        HttpApiEndpoint.post("createOrganization", "/", {
+          payload: CreateOrganizationBody,
+          success: Organization,
+          error: [ApiOrganizationServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/organizations"),
+  )
+  .add(
+    HttpApiGroup.make("perks")
+      .add(
+        HttpApiEndpoint.get("listPerks", "/", {
+          success: Schema.Array(Perk),
+          error: [ApiActionForbiddenError, ApiPerkServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/perks"),
+  )
+  .add(
+    HttpApiGroup.make("paywall_deploys")
+      .add(
+        HttpApiEndpoint.post("createDeploy", "/", {
+          payload: PaywallDeployManifestBody,
+          success: CreatePaywallDeployResponse.pipe(HttpApiSchema.status(201)),
+          error: [
+            ApiActionForbiddenError,
+            ApiPaywallDeployServiceError,
+            ApiPaywallDeployUpgradeRequiredError,
+            ApiPaywallDeployValidationError,
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.put("uploadBlob", "/:deployId/blobs/:sha256", {
+          params: { deployId: Schema.String, sha256: Schema.String },
+          payload: PaywallDeployBlobBody,
+          success: UploadPaywallDeployBlobResponse,
+          error: [
+            ApiActionForbiddenError,
+            ApiDeployBlobHashMismatchError,
+            ApiDeployBlobNotDeclaredError,
+            ApiPaywallDeployNotFoundError,
+            ApiPaywallDeployNotPendingError,
+            ApiPaywallDeployServiceError,
+            // §1.1 size validation on the actual uploaded bytes (422).
+            ApiPaywallDeployValidationError,
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("finalizeDeploy", "/:deployId/finalize", {
+          params: { deployId: Schema.String },
+          success: FinalizePaywallDeployResponse,
+          error: [
+            ApiActionForbiddenError,
+            ApiIncompleteDeployError,
+            ApiPaywallDeployNotFoundError,
+            ApiPaywallDeployServiceError,
+            ApiPaywallDeployValidationError,
+          ],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/paywall-deploys"),
+  )
+  .add(
+    HttpApiGroup.make("paywall_locations")
+      .add(
+        HttpApiEndpoint.get("listPaywallLocations", "/", {
+          success: Schema.Array(PaywallLocation),
+          error: [ApiActionForbiddenError, ApiPaywallLocationServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/paywall-locations"),
+  )
+  .add(
+    HttpApiGroup.make("schema")
+      .add(
+        HttpApiEndpoint.get("getSchema", "/", {
+          success: ProjectSchemaResponse,
+          error: [ApiActionForbiddenError, ApiSchemaServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("getSchemaVersion", "/version", {
+          success: SchemaVersion,
+          error: [ApiActionForbiddenError, ApiSchemaServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/schema"),
+  )
+  .add(
+    HttpApiGroup.make("projects")
+      .add(
+        HttpApiEndpoint.post("createProject", "/", {
+          payload: CreateProjectBody,
+          success: Project,
+          error: [ApiActionForbiddenError, ApiAuthenticationError, ApiProjectServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("listProjects", "/:organizationId", {
+          params: { organizationId: Schema.String },
+          success: Schema.Array(Project),
+          error: [ApiActionForbiddenError, ApiProjectServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/projects"),
+  )
+  .add(
+    HttpApiGroup.make("products")
+      .add(
+        HttpApiEndpoint.get("listProducts", "/", {
+          success: Schema.Array(Product),
+          error: [ApiActionForbiddenError, ApiProductServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/products"),
+  )
+  .add(
+    HttpApiGroup.make("product_perks")
+      .add(
+        HttpApiEndpoint.get("listProductPerksByProductId", "/by-product-id/:productId", {
+          params: { productId: Schema.String },
+          success: Schema.Array(ProductPerk),
+          error: [
+            ApiActionForbiddenError,
+            ApiProductPerkServiceError,
+            ApiProductPerkValidationError,
+          ],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/product-perks"),
+  )
+  .add(
+    HttpApiGroup.make("sdk")
+      .add(
+        HttpApiEndpoint.get("getPerson", "/person", {
+          success: SdkPerson,
+          headers: SdkHeaders,
+          error: [
+            ApiAuthenticationError,
+            ApiSdkServiceError,
+            ApiSdkPersonNotFoundError,
+            ApiSdkValidationError,
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("identifyPerson", "/identify", {
+          payload: SdkIdentifyBody,
+          success: SdkPerson,
+          headers: SdkHeaders,
+          error: [
+            ApiAuthenticationError,
+            ApiSdkServiceError,
+            ApiSdkValidationError,
+            ApiSdkPersonAlreadyIdentifiedError,
+            ApiSdkPersonNotFoundError,
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("syncPersonAttributes", "/person/traits", {
+          payload: SdkSyncPersonAttributesBody,
+          success: SdkPerson,
+          headers: SdkHeaders,
+          error: [
+            ApiAuthenticationError,
+            ApiSdkPersonNotFoundError,
+            ApiSdkServiceError,
+            ApiSdkValidationError,
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("syncTransaction", "/sync-transaction", {
+          payload: SdkSyncTransactionBody,
+          success: SdkSyncTransactionResponse,
+          headers: SdkHeaders,
+          error: [ApiAuthenticationError, ApiSdkServiceError, ApiSdkValidationError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("evaluateFeatureFlags", "/evaluate-flags", {
+          payload: EvaluateFeatureFlagsBody,
+          success: SdkFeatureFlagsResponse,
+          headers: SdkHeaders,
+          error: [ApiAuthenticationError, ApiSdkServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("resolvePaywall", "/resolve-paywall", {
+          payload: SdkResolvePaywallBody,
+          success: Schema.NullOr(SdkResolvedPaywall),
+          headers: SdkHeaders,
+          error: [ApiAuthenticationError, ApiSdkServiceError, ApiSdkValidationError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("getSchema", "/schema", {
+          success: SdkSchema,
+          headers: SdkHeaders,
+          error: [ApiAuthenticationError, ApiSchemaServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("registerDevice", "/push-devices/register", {
+          payload: RegisterDeviceBody,
+          success: RegisterDeviceResponse,
+          headers: SdkHeaders,
+          error: [
+            ApiActionForbiddenError,
+            ApiAuthenticationError,
+            ApiPushDeviceServiceError,
+            ApiPushDeviceValidationError,
+            ApiPushDeviceNotFoundError,
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("refreshDevice", "/push-devices/refresh", {
+          payload: RefreshDeviceBody,
+          success: Schema.Void,
+          headers: SdkHeaders,
+          error: [
+            ApiActionForbiddenError,
+            ApiAuthenticationError,
+            ApiPushDeviceServiceError,
+            ApiPushDeviceValidationError,
+            ApiPushDeviceNotFoundError, // uniform: not-found OR not-owned
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("unregisterDevice", "/push-devices/unregister", {
+          payload: UnregisterDeviceBody,
+          success: Schema.Void,
+          headers: SdkHeaders,
+          error: [
+            ApiActionForbiddenError,
+            ApiAuthenticationError,
+            ApiPushDeviceServiceError,
+            ApiPushDeviceNotFoundError, // uniform: no existence oracle
+          ],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/sdk"),
+  )
+  .add(
+    HttpApiGroup.make("users")
+      .add(
+        HttpApiEndpoint.get("getUser", "/current", {
+          success: User,
+          error: [ApiAuthenticationError, ApiUserServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/users"),
+  )
+  .add(
+    HttpApiGroup.make("payment_provider_configurations")
+      .add(
+        HttpApiEndpoint.get("listPaymentProviderConfigurations", "/", {
+          success: Schema.Array(PaymentProviderConfiguration),
+          error: [ApiActionForbiddenError, ApiPaymentProviderConfigurationServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/payment-provider-configurations"),
+  )
+  .add(
+    HttpApiGroup.make("payment_provider_products")
+      .add(
+        HttpApiEndpoint.get("listPaymentProviderProducts", "/", {
+          success: Schema.Array(PaymentProviderProduct),
+          error: [ApiActionForbiddenError, ApiPaymentProviderProductServiceError],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/payment-provider-products"),
+  )
+  .add(
+    HttpApiGroup.make("webhooks")
+      .add(
+        HttpApiEndpoint.post("createWebhookEndpoint", "/endpoints", {
+          payload: CreateWebhookEndpointBody,
+          success: WebhookEndpoint,
+          error: [ApiActionForbiddenError, ApiWebhookValidationError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("listWebhookEndpoints", "/endpoints", {
+          success: Schema.Array(WebhookEndpoint),
+          error: [ApiActionForbiddenError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("getWebhookEndpoint", "/endpoints/:endpointId", {
+          params: { endpointId: Schema.String },
+          success: WebhookEndpoint,
+          error: [ApiActionForbiddenError, ApiWebhookEndpointNotFoundError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.patch("updateWebhookEndpoint", "/endpoints/:endpointId", {
+          params: { endpointId: Schema.String },
+          payload: UpdateWebhookEndpointBody,
+          success: WebhookEndpoint,
+          error: [
+            ApiActionForbiddenError,
+            ApiWebhookEndpointNotFoundError,
+            ApiWebhookValidationError,
+            ApiWebhookServiceError,
+          ],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.delete("deleteWebhookEndpoint", "/endpoints/:endpointId", {
+          params: { endpointId: Schema.String },
+          error: [ApiActionForbiddenError, ApiWebhookEndpointNotFoundError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("rotateWebhookSecret", "/endpoints/:endpointId/rotate-secret", {
+          params: { endpointId: Schema.String },
+          success: WebhookEndpoint,
+          error: [ApiActionForbiddenError, ApiWebhookEndpointNotFoundError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("testWebhookEndpoint", "/endpoints/:endpointId/test", {
+          params: { endpointId: Schema.String },
+          success: WebhookDelivery,
+          error: [ApiActionForbiddenError, ApiWebhookEndpointNotFoundError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("listWebhookDeliveries", "/deliveries", {
+          success: Schema.Array(WebhookDelivery),
+          error: [ApiActionForbiddenError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.get("getWebhookDelivery", "/deliveries/:deliveryId", {
+          params: { deliveryId: Schema.String },
+          success: WebhookDeliveryWithAttempts,
+          error: [ApiActionForbiddenError, ApiWebhookDeliveryNotFoundError, ApiWebhookServiceError],
+        }),
+      )
+      .add(
+        HttpApiEndpoint.post("retryWebhookDelivery", "/deliveries/:deliveryId/retry", {
+          params: { deliveryId: Schema.String },
+          success: WebhookDelivery,
+          error: [
+            ApiActionForbiddenError,
+            ApiWebhookDeliveryNotFoundError,
+            ApiWebhookValidationError,
+            ApiWebhookServiceError,
+          ],
+        }),
+      )
+      .middleware(AuthMiddleware)
+      .prefix("/webhooks"),
+  )
+  .prefix("/api/v1");
diff --git a/packages/api-contracts/src/Auth.ts b/packages/api-contracts/src/Auth.ts
new file mode 100644
index 000000000..96ef515c9
--- /dev/null
+++ b/packages/api-contracts/src/Auth.ts
@@ -0,0 +1,104 @@
+import { Schema, Context } from "effect";
+
+// ============================================================================
+// Session Sub-Schemas
+// ============================================================================
+
+export const ApiSessionOrganizationSchema = Schema.Struct({
+  id: Schema.String,
+  logo: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  permissions: Schema.Array(Schema.String),
+  slug: Schema.String,
+  workosOrganizationId: Schema.NullOr(Schema.String),
+});
+
+export const ApiSessionProjectSchema = Schema.Struct({
+  id: Schema.String,
+  logo: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  organizationId: Schema.String,
+  permissions: Schema.Array(Schema.String),
+  slug: Schema.String,
+});
+
+const ApiSessionOrganizationsSchema = Schema.Array(ApiSessionOrganizationSchema);
+const ApiSessionProjectsSchema = Schema.Array(ApiSessionProjectSchema);
+
+export const ApiSessionPersonSchema = Schema.Struct({
+  distinctId: Schema.String,
+});
+
+export const ApiSessionUserSchema = Schema.Struct({
+  createdAt: Schema.Date,
+  email: Schema.String,
+  emailVerified: Schema.Boolean,
+  id: Schema.String,
+  image: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  role: Schema.NullOr(Schema.String),
+  updatedAt: Schema.Date,
+  workosUserId: Schema.NullOr(Schema.String),
+});
+
+// ============================================================================
+// Session Type Schemas
+// ============================================================================
+
+export const ApiUserSessionSchema = Schema.Struct({
+  cookie: Schema.NullOr(Schema.String),
+  person: Schema.Null,
+  method: Schema.Literal("user"),
+  name: Schema.String,
+  organizations: ApiSessionOrganizationsSchema,
+  projects: ApiSessionProjectsSchema,
+  user: ApiSessionUserSchema,
+});
+
+export const ApiSecretKeySessionSchema = Schema.Struct({
+  cookie: Schema.Null,
+  person: Schema.Null,
+  method: Schema.Literal("secret-key"),
+  name: Schema.String,
+  organizations: ApiSessionOrganizationsSchema,
+  projects: ApiSessionProjectsSchema,
+  user: Schema.Null,
+});
+
+export const ApiPublishableKeySessionSchema = Schema.Struct({
+  cookie: Schema.Null,
+  person: ApiSessionPersonSchema,
+  method: Schema.Literal("publishable-key"),
+  name: Schema.String,
+  organizations: ApiSessionOrganizationsSchema,
+  projects: ApiSessionProjectsSchema,
+  user: Schema.Null,
+});
+
+// ============================================================================
+// Combined Auth Session Schema
+// ============================================================================
+
+export const ApiAuthSessionSchema = Schema.Union([
+  ApiUserSessionSchema,
+  ApiSecretKeySessionSchema,
+  ApiPublishableKeySessionSchema,
+]);
+
+// ============================================================================
+// Type Exports
+// ============================================================================
+
+export type ApiUserSession = typeof ApiUserSessionSchema.Type;
+export type ApiSecretKeySession = typeof ApiSecretKeySessionSchema.Type;
+export type ApiPublishableKeySession = typeof ApiPublishableKeySessionSchema.Type;
+export type AnyApiAuthSession = ApiUserSession | ApiSecretKeySession | ApiPublishableKeySession;
+
+// ============================================================================
+// Context Tag
+// ============================================================================
+
+export class ApiAuthSession extends Context.Service<
+  ApiAuthSession,
+  ApiUserSession | ApiSecretKeySession | ApiPublishableKeySession
+>()("api-spec/auth/ApiAuthSession") {}
diff --git a/packages/api-contracts/src/EventCapture.ts b/packages/api-contracts/src/EventCapture.ts
new file mode 100644
index 000000000..324646732
--- /dev/null
+++ b/packages/api-contracts/src/EventCapture.ts
@@ -0,0 +1,195 @@
+import { Schema, SchemaTransformation } from "effect";
+import { HttpApi, HttpApiEndpoint, HttpApiGroup, HttpApiSchema } from "effect/unstable/httpapi";
+
+const CaptureErrorResponseFields = {
+  error: Schema.NonEmptyString,
+};
+
+/**
+ * Accepts an ISO 8601 string from JSON input and decodes it to a valid `Date`.
+ * Required because `Schema.DateValid` only accepts `Date` instances; in
+ * `effect@4.0.0-beta.23`, `HttpApi` does not automatically apply
+ * `toCodecJson`, so JSON dates arrive as strings and fail the `instanceof Date`
+ * check.
+ */
+const DateValidFromString = Schema.String.pipe(
+  Schema.decodeTo(
+    Schema.DateValid,
+    SchemaTransformation.transform({
+      decode: (s: string) => new globalThis.Date(s),
+      encode: (d: globalThis.Date) => d.toISOString(),
+    }),
+  ),
+);
+
+// export { CaptureAcceptedResponse, CaptureBatchRequest, CaptureErrorCode, CaptureErrorResponse };
+// export { CaptureEvent, CaptureSdkRequestMetadata };
+export type EventPropertiesFieldPrimitive = string | number | boolean | null;
+export type EventPropertiesField =
+  | EventPropertiesFieldPrimitive
+  | ReadonlyArray<EventPropertiesField>
+  | {
+      readonly [key: string]: EventPropertiesField;
+    };
+
+export const EventPropertiesField: Schema.Codec<EventPropertiesField> = Schema.Union([
+  Schema.String,
+  Schema.Finite,
+  Schema.Boolean,
+  Schema.Null,
+  Schema.Array(Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesField)),
+  Schema.Record(
+    Schema.String,
+    Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesField),
+  ),
+]);
+export const EventPropertiesSchema = Schema.Record(Schema.String, EventPropertiesField);
+
+export type EventContextFieldPrimitive = string | number | boolean | null;
+export type EventContextField =
+  | EventContextFieldPrimitive
+  | ReadonlyArray<EventContextField>
+  | {
+      readonly [key: string]: EventContextField;
+    };
+export const EventContextField: Schema.Codec<EventContextField> = Schema.Union([
+  Schema.String,
+  Schema.Finite,
+  Schema.Boolean,
+  Schema.Null,
+  Schema.Array(Schema.suspend((): Schema.Codec<EventContextField> => EventContextField)),
+  Schema.Record(
+    Schema.String,
+    Schema.suspend((): Schema.Codec<EventContextField> => EventContextField),
+  ),
+]);
+export const EventContextSchema = Schema.Record(Schema.String, EventContextField);
+
+export const CaptureEvent = Schema.Struct({
+  uuid: Schema.NonEmptyString,
+  event: Schema.NonEmptyString,
+  context: EventContextSchema,
+  properties: EventPropertiesSchema,
+  distinct_id: Schema.NonEmptyString,
+  session_id: Schema.optional(Schema.NonEmptyString),
+  timestamp: Schema.optional(DateValidFromString),
+});
+
+export const CaptureSingleRequest = Schema.Struct({
+  ...CaptureEvent.fields,
+  sent_at: DateValidFromString,
+  token: Schema.NonEmptyString,
+});
+
+export const CaptureBatchRequest = Schema.Struct({
+  events: Schema.NonEmptyArray(CaptureEvent),
+  sent_at: DateValidFromString,
+  token: Schema.NonEmptyString,
+});
+
+export class CaptureAcceptedResponse extends Schema.Class<CaptureAcceptedResponse>(
+  "CaptureAcceptedResponse",
+)({
+  accepted: Schema.Int,
+  rejected: Schema.Int,
+}) {}
+
+const CaptureAcceptedApiResponse = CaptureAcceptedResponse.pipe(HttpApiSchema.status(202));
+
+export class CaptureInvalidRequestError extends Schema.TaggedErrorClass<CaptureInvalidRequestError>()(
+  "CaptureInvalidRequestError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("invalid_request"),
+  },
+  { httpApiStatus: 400 },
+) {}
+
+export class CaptureUnauthorizedError extends Schema.TaggedErrorClass<CaptureUnauthorizedError>()(
+  "CaptureUnauthorizedError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("unauthorized"),
+  },
+  { httpApiStatus: 401 },
+) {}
+
+export class CapturePayloadTooLargeError extends Schema.TaggedErrorClass<CapturePayloadTooLargeError>()(
+  "CapturePayloadTooLargeError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("payload_too_large"),
+  },
+  { httpApiStatus: 413 },
+) {}
+
+export class CaptureRateLimitedError extends Schema.TaggedErrorClass<CaptureRateLimitedError>()(
+  "CaptureRateLimitedError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("rate_limited"),
+    retry_after_ms: Schema.optional(Schema.Int),
+  },
+  { httpApiStatus: 429 },
+) {}
+
+export class CaptureDependencyUnavailableError extends Schema.TaggedErrorClass<CaptureDependencyUnavailableError>()(
+  "CaptureDependencyUnavailableError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("dependency_unavailable"),
+  },
+  { httpApiStatus: 503 },
+) {}
+
+export class CaptureInternalServerError extends Schema.TaggedErrorClass<CaptureInternalServerError>()(
+  "CaptureInternalServerError",
+  {
+    ...CaptureErrorResponseFields,
+    code: Schema.Literal("internal_error"),
+  },
+  { httpApiStatus: 500 },
+) {}
+
+export type CaptureErrorResponse =
+  | CaptureInvalidRequestError
+  | CaptureUnauthorizedError
+  | CapturePayloadTooLargeError
+  | CaptureRateLimitedError
+  | CaptureDependencyUnavailableError
+  | CaptureInternalServerError;
+
+export type CaptureErrorCode = CaptureErrorResponse["code"];
+
+export const EventCaptureApi = HttpApi.make("EventCaptureApi").add(
+  HttpApiGroup.make("event_capture")
+    .add(
+      HttpApiEndpoint.post("capture", "/capture", {
+        error: [
+          CaptureInvalidRequestError,
+          CaptureUnauthorizedError,
+          CapturePayloadTooLargeError,
+          CaptureRateLimitedError,
+          CaptureDependencyUnavailableError,
+          CaptureInternalServerError,
+        ],
+        payload: CaptureSingleRequest,
+        success: CaptureAcceptedApiResponse,
+      }),
+    )
+    .add(
+      HttpApiEndpoint.post("batch", "/batch", {
+        error: [
+          CaptureInvalidRequestError,
+          CaptureUnauthorizedError,
+          CapturePayloadTooLargeError,
+          CaptureRateLimitedError,
+          CaptureDependencyUnavailableError,
+          CaptureInternalServerError,
+        ],
+        payload: CaptureBatchRequest,
+        success: CaptureAcceptedApiResponse,
+      }),
+    )
+    .prefix("/i/v1"),
+);
diff --git a/packages/api-contracts/src/Middlewares.ts b/packages/api-contracts/src/Middlewares.ts
new file mode 100644
index 000000000..949a77645
--- /dev/null
+++ b/packages/api-contracts/src/Middlewares.ts
@@ -0,0 +1,12 @@
+import { Schema } from "effect";
+import { HttpApiMiddleware } from "effect/unstable/httpapi";
+
+import { ApiAuthSession } from "./Auth.ts";
+import { ApiAuthenticationError, ApiNotAuthenticatedError } from "./errors/index.ts";
+
+export class AuthMiddleware extends HttpApiMiddleware.Service<
+  AuthMiddleware,
+  { provides: ApiAuthSession }
+>()("Http/AuthenticationMiddleware", {
+  error: Schema.Union([ApiAuthenticationError, ApiNotAuthenticatedError]),
+}) {}
diff --git a/packages/api-contracts/src/Schema.ts b/packages/api-contracts/src/Schema.ts
new file mode 100644
index 000000000..e0ced8e14
--- /dev/null
+++ b/packages/api-contracts/src/Schema.ts
@@ -0,0 +1,899 @@
+import { Schema } from "effect";
+import { HttpApiSchema } from "effect/unstable/httpapi";
+
+export const PublishableKeyAuthHeaders = Schema.Struct({
+  "x-distinct-id": Schema.String,
+  "x-publishable-key": Schema.String,
+});
+
+export const ApiKeyAuthHeaders = Schema.Struct({
+  "x-api-key": Schema.String,
+});
+
+export const SecretKeyAuthHeaders = Schema.Struct({
+  "x-secret-key": Schema.String,
+});
+
+// ========================================================
+// Auth
+// ========================================================
+
+const SessionAuthMethods = Schema.Union([
+  Schema.Literal("api-key"),
+  Schema.Literal("publishable-key"),
+  Schema.Literal("secret-key"),
+]);
+
+export const Session = Schema.Struct({
+  method: SessionAuthMethods,
+  name: Schema.String,
+  organizations: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      name: Schema.String,
+      slug: Schema.String,
+    }),
+  ),
+  projects: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      name: Schema.String,
+      organizationId: Schema.String,
+      slug: Schema.String,
+    }),
+  ),
+});
+
+// ========================================================
+// API Keys
+// ========================================================
+
+export class ApiKey extends Schema.Class<ApiKey>("ApiKey")({
+  end: Schema.String,
+  id: Schema.String,
+  isPublic: Schema.Boolean,
+  name: Schema.String,
+  prefix: Schema.String,
+  projectId: Schema.String,
+  rawKey: Schema.optional(Schema.String),
+}) {}
+
+export class ApiKeyWithRawKey extends Schema.Class<ApiKeyWithRawKey>("ApiKeyWithRawKey")({
+  end: Schema.String,
+  id: Schema.String,
+  isPublic: Schema.Boolean,
+  name: Schema.String,
+  prefix: Schema.String,
+  projectId: Schema.String,
+  rawKey: Schema.String,
+}) {}
+
+export class CreateSecretKeyBody extends Schema.Class<CreateSecretKeyBody>("CreateSecretKeyBody")({
+  name: Schema.String,
+  projectId: Schema.String,
+}) {}
+
+export const ApiKeyIdParam = Schema.String;
+
+// ========================================================
+// Persons
+// ========================================================
+
+export class Person extends Schema.Class<Person>("Person")({
+  personId: Schema.String,
+  distinctId: Schema.String,
+  email: Schema.NullOr(Schema.String),
+  name: Schema.NullOr(Schema.String),
+}) {}
+
+export class CreatePersonBody extends Schema.Class<CreatePersonBody>("CreatePersonBody")({
+  distinctId: Schema.String,
+  email: Schema.optional(Schema.String),
+  name: Schema.optional(Schema.String),
+}) {}
+
+export const PersonIdParam = Schema.String;
+
+export const DistinctIdParam = Schema.String;
+
+// ========================================================
+// Organizations
+// ========================================================
+
+export class CreateOrganizationBody extends Schema.Class<CreateOrganizationBody>(
+  "CreateOrganizationBody",
+)({
+  name: Schema.String,
+}) {}
+
+export class Organization extends Schema.Class<Organization>("Organization")({
+  id: Schema.String,
+  name: Schema.String,
+  slug: Schema.String,
+}) {}
+
+// ========================================================
+// Perks
+// ========================================================
+
+export class Perk extends Schema.Class<Perk>("Perk")({
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  slug: Schema.String,
+}) {}
+
+// ========================================================
+// Paywall Locations
+// ========================================================
+
+export class PaywallLocation extends Schema.Class<PaywallLocation>("PaywallLocation")({
+  description: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  slug: Schema.String,
+}) {}
+
+// ========================================================
+// Products
+// ========================================================
+
+export const ProductType = Schema.Literals(["subscription", "one-time", "one-time-consumable"]);
+
+export class Product extends Schema.Class<Product>("Product")({
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  slug: Schema.String,
+  type: ProductType,
+}) {}
+
+// ========================================================
+// Product Perks
+// ========================================================
+
+export const ProductIdParam = Schema.String;
+
+export class ProductPerk extends Schema.Class<ProductPerk>("ProductPerk")({
+  id: Schema.String,
+  perkId: Schema.String,
+  productId: Schema.String,
+}) {}
+
+// ========================================================
+// Payment Provider Configurations
+// ========================================================
+
+export class PaymentProviderConfiguration extends Schema.Class<PaymentProviderConfiguration>(
+  "PaymentProviderConfiguration",
+)({
+  enabled: Schema.Boolean,
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  providerId: Schema.String,
+}) {}
+
+// ========================================================
+// Payment Provider Products
+// ========================================================
+
+export class PaymentProviderProduct extends Schema.Class<PaymentProviderProduct>(
+  "PaymentProviderProduct",
+)({
+  configuration: Schema.Record(Schema.String, Schema.Unknown),
+  id: Schema.String,
+  paymentProviderConfigurationId: Schema.String,
+  productId: Schema.String,
+  providerId: Schema.String,
+}) {}
+
+// ========================================================
+// Projects
+// ========================================================
+
+export class CreateProjectBody extends Schema.Class<CreateProjectBody>("CreateProjectBody")({
+  name: Schema.String,
+  organizationId: Schema.String,
+}) {}
+
+export class Project extends Schema.Class<Project>("Project")({
+  id: Schema.String,
+  name: Schema.String,
+  slug: Schema.String,
+}) {}
+
+export const OrganizationIdParam = Schema.String;
+
+// ========================================================
+// SDK
+// ========================================================
+
+const CommonSdkHeaders = Schema.Struct({
+  "x-client-bundle-id": Schema.String,
+  "x-client-locale": Schema.optional(Schema.String),
+  "x-client-version": Schema.optional(Schema.String),
+  "x-is-backgrounded": Schema.Literal("false"),
+  "x-is-debug-build": Schema.Literals(["true", "false"]),
+  "x-nonce": Schema.optional(Schema.String),
+  "x-observer-mode": Schema.Literals(["true", "false"]),
+  "x-platform": Schema.String,
+  "x-platform-brand": Schema.optional(Schema.String),
+  "x-platform-device": Schema.optional(Schema.String),
+  "x-platform-flavor": Schema.Literals(["native", "browser"]),
+  "x-platform-flavor-version": Schema.optional(Schema.String),
+  "x-platform-version": Schema.optional(Schema.String),
+  "x-preferred-locales": Schema.optional(Schema.String),
+  "x-sdk": Schema.Literals(["react-native", "web"]),
+  "x-sdk-version": Schema.String,
+  "x-storefront": Schema.optional(Schema.String),
+});
+
+export const SdkHeaders = Schema.Struct({
+  ...PublishableKeyAuthHeaders.fields,
+  ...CommonSdkHeaders.fields,
+});
+
+const SdkTraitValue = Schema.Union([Schema.String, Schema.Number, Schema.Boolean, Schema.Null]);
+
+const SdkTraits = Schema.Record(Schema.String, SdkTraitValue);
+
+// SDK Identify
+export class SdkIdentifyBody extends Schema.Class<SdkIdentifyBody>("SdkIdentifyBody")({
+  distinctId: Schema.String,
+  email: Schema.optional(Schema.String),
+  name: Schema.optional(Schema.String),
+  traits: Schema.optional(SdkTraits),
+}) {}
+
+// SDK Sync Person Attributes
+export class SdkSyncPersonAttributesBody extends Schema.Class<SdkSyncPersonAttributesBody>(
+  "SdkSyncPersonAttributesBody",
+)({
+  email: Schema.optional(Schema.String),
+  name: Schema.optional(Schema.String),
+  // `$set` semantics — newest write wins per key.
+  traits: Schema.optional(SdkTraits),
+  // `$set_once` semantics — earliest write wins; loses to any `$set`.
+  setOnce: Schema.optional(SdkTraits),
+  // Stable client-supplied id for deterministic LWW tie-break. Lets a sync
+  // write and its eventual async `$set` echo dedupe idempotently.
+  clientEventId: Schema.optional(Schema.String),
+}) {}
+
+// SDK Push device registration — exchange a platform credential for our UUID.
+// Routing is PROVIDER-driven, not platform-driven (see the token abstraction).
+export class RegisterDeviceBody extends Schema.Class<RegisterDeviceBody>("RegisterDeviceBody")({
+  platform: Schema.Literals(["ios", "android"]),
+  provider: Schema.Literals(["fcm", "apns"]),
+  // FCM registration token OR raw APNs device-token hex. Non-empty enforced at
+  // the contract boundary (the apns-requires-bundleId/environment rule is
+  // conditional, so it stays a server-side check in NotificationTokenService).
+  platformToken: Schema.String.check(Schema.isMinLength(1)),
+  bundleId: Schema.optional(Schema.String), // required for apns/ios
+  environment: Schema.optional(Schema.Literals(["sandbox", "production"])), // apns only
+  previousPushDeviceTokenId: Schema.optional(Schema.String), // eager-reap hint on reinstall
+}) {}
+
+// SDK Push device token rotation under the SAME UUID (same-install only).
+export class RefreshDeviceBody extends Schema.Class<RefreshDeviceBody>("RefreshDeviceBody")({
+  pushDeviceTokenId: Schema.String, // push_tok_* (OUR UUID)
+  platformToken: Schema.String.check(Schema.isMinLength(1)),
+}) {}
+
+// SDK Push device unregister.
+export class UnregisterDeviceBody extends Schema.Class<UnregisterDeviceBody>(
+  "UnregisterDeviceBody",
+)({
+  pushDeviceTokenId: Schema.String,
+}) {}
+
+// We hand back ONLY our opaque UUID, never the raw platform credential.
+export class RegisterDeviceResponse extends Schema.Class<RegisterDeviceResponse>(
+  "RegisterDeviceResponse",
+)({
+  pushDeviceTokenId: Schema.String, // push_tok_*
+}) {}
+
+// Server-to-server push dispatch: target one or more persons (by canonical
+// personId and/or distinctId) with a notification. Privileged — secret-key auth.
+export class SendNotificationBody extends Schema.Class<SendNotificationBody>(
+  "SendNotificationBody",
+)({
+  // Targeting — at least one of `personIds`/`distinctIds` must be non-empty
+  // (server-checked). Unmapped distinctIds are recorded, never fatal.
+  personIds: Schema.optional(Schema.Array(Schema.String)),
+  distinctIds: Schema.optional(Schema.Array(Schema.String)),
+  // Notification content (the unified cross-platform message).
+  title: Schema.String.check(Schema.isMinLength(1)),
+  body: Schema.String.check(Schema.isMinLength(1)),
+  data: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+  sound: Schema.optional(Schema.String),
+  badge: Schema.optional(Schema.Number),
+  priority: Schema.optional(Schema.Literals(["default", "high"])),
+  ttl: Schema.optional(Schema.Number), // seconds
+  channelId: Schema.optional(Schema.String), // android channel
+  collapseId: Schema.optional(Schema.String),
+  // Optional key collapsing retried sends into a single dispatch (per project).
+  idempotencyKey: Schema.optional(Schema.String),
+}) {}
+
+// The send is enqueued asynchronously; we return the tracking id + up-front counts.
+export class SendNotificationResponse extends Schema.Class<SendNotificationResponse>(
+  "SendNotificationResponse",
+)({
+  pushNotificationSendId: Schema.String, // push_send_*
+  deviceCount: Schema.Number,
+  status: Schema.Literals([
+    "pending",
+    "in_progress",
+    "succeeded",
+    "partial_failed",
+    "failed",
+    "no_recipients",
+  ]),
+  unresolvedDistinctIds: Schema.Array(Schema.String),
+}) {}
+
+export const SdkSyncTransactionBody = Schema.Struct({
+  // The deterministic account token (UUIDv5 of the distinctId) the client set
+  // as Apple's `appAccountToken` / Google's `obfuscatedAccountId`. Optional and
+  // advisory only — the server re-fetches and verifies the JWS from the store,
+  // so this is observability/diagnostics, never trusted for authorization.
+  appAccountToken: Schema.optional(Schema.String),
+  platform: Schema.Literals(["ios", "android"]),
+  productSlug: Schema.String,
+  purchaseDate: Schema.Number,
+  purchaseToken: Schema.optional(Schema.String),
+  quantity: Schema.Number,
+  receipt: Schema.optional(Schema.String),
+  transactionId: Schema.String,
+});
+
+export class SdkSyncTransactionResponse extends Schema.Class<SdkSyncTransactionResponse>(
+  "SdkSyncTransactionResponse",
+)({
+  accepted: Schema.Boolean,
+}) {}
+
+export const SdkSubscriptionHistoryStatus = Schema.Literals([
+  "active",
+  "canceled",
+  "expired",
+  "trialing",
+  "past_due",
+]);
+
+export const SdkSubscriptionCurrentStatus = Schema.Literals([
+  "none",
+  "active",
+  "canceled",
+  "past_due",
+  "trialing",
+]);
+
+export const SdkGrantStatus = Schema.Literals(["active", "expired"]);
+
+export const SdkGrantSource = Schema.Literals(["subscription", "purchase", "manual"]);
+
+export const SdkPurchaseHistoryType = Schema.Literals(["one_time", "subscription"]);
+
+export const SdkPersonSnapshotMode = Schema.Literals(["persisted", "temporary_pending_transfer"]);
+
+export class SdkEntitlementGrant extends Schema.Class<SdkEntitlementGrant>("SdkEntitlementGrant")({
+  expiresAt: Schema.NullOr(Schema.Date),
+  perkId: Schema.String,
+  source: SdkGrantSource,
+  sourceId: Schema.NullOr(Schema.String),
+  sourcePersonId: Schema.String,
+  status: SdkGrantStatus,
+}) {}
+
+export class SdkCurrentSubscription extends Schema.Class<SdkCurrentSubscription>(
+  "SdkCurrentSubscription",
+)({
+  expiresAt: Schema.NullOr(Schema.Date),
+  productId: Schema.NullOr(Schema.String),
+  status: SdkSubscriptionCurrentStatus,
+  subscriptionId: Schema.NullOr(Schema.String),
+}) {}
+
+export class SdkSubscriptionHistoryEntry extends Schema.Class<SdkSubscriptionHistoryEntry>(
+  "SdkSubscriptionHistoryEntry",
+)({
+  canceledAt: Schema.NullOr(Schema.Date),
+  expiresAt: Schema.NullOr(Schema.Date),
+  isTrial: Schema.Boolean,
+  productId: Schema.NullOr(Schema.String),
+  sourcePersonId: Schema.String,
+  startsAt: Schema.Date,
+  status: SdkSubscriptionHistoryStatus,
+  subscriptionId: Schema.String,
+}) {}
+
+export class SdkPurchaseHistoryEntry extends Schema.Class<SdkPurchaseHistoryEntry>(
+  "SdkPurchaseHistoryEntry",
+)({
+  createdAt: Schema.Date,
+  productId: Schema.NullOr(Schema.String),
+  providerKey: Schema.String,
+  purchaseId: Schema.String,
+  sourcePersonId: Schema.String,
+  type: SdkPurchaseHistoryType,
+}) {}
+
+export class SdkPerson extends Schema.Class<SdkPerson>("SdkPerson")({
+  distinctId: Schema.String,
+  email: Schema.NullOr(Schema.String),
+  entitlements: Schema.Struct({
+    grants: Schema.Array(SdkEntitlementGrant),
+  }),
+  name: Schema.NullOr(Schema.String),
+  personId: Schema.String,
+  purchases: Schema.Struct({
+    history: Schema.Array(SdkPurchaseHistoryEntry),
+  }),
+  snapshotContext: Schema.Struct({
+    includedPersonIds: Schema.Array(Schema.String),
+    migrationJobId: Schema.NullOr(Schema.String),
+    mode: SdkPersonSnapshotMode,
+  }),
+  subscriptions: Schema.Struct({
+    current: Schema.NullOr(SdkCurrentSubscription),
+    history: Schema.Array(SdkSubscriptionHistoryEntry),
+  }),
+}) {}
+
+// ========================================================
+// Consolidated schema (CLI + SDK)
+// ========================================================
+
+/**
+ * Provider IDs the consolidated schema surfaces. Mirrors `ProviderId` in
+ * the CLI's `apps/cli/src/domain/schema/normalized-schema.ts` — extending
+ * this is a coordinated client+server change.
+ */
+export const SchemaProviderId = Schema.Literals(["appleAppStore", "googlePlay"]);
+export type SchemaProviderId = typeof SchemaProviderId.Type;
+
+/**
+ * Free-form provider configuration blob — opaque to the schema. The CLI
+ * round-trips it as-is; the SDK reads provider-specific keys
+ * (`productId`, `basePlanId`, …) out of it at the native store boundary.
+ */
+const SchemaProviderConfiguration = Schema.Record(Schema.String, Schema.Unknown);
+
+export class SchemaPerk extends Schema.Class<SchemaPerk>("SchemaPerk")({
+  name: Schema.String,
+  slug: Schema.String,
+}) {}
+
+export class SchemaLocation extends Schema.Class<SchemaLocation>("SchemaLocation")({
+  description: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  slug: Schema.String,
+}) {}
+
+export class SchemaProductProvider extends Schema.Class<SchemaProductProvider>(
+  "SchemaProductProvider",
+)({
+  configuration: SchemaProviderConfiguration,
+  providerId: SchemaProviderId,
+}) {}
+
+export class SchemaProduct extends Schema.Class<SchemaProduct>("SchemaProduct")({
+  name: Schema.String,
+  /** Perk slugs (not IDs), ascending. */
+  perks: Schema.Array(Schema.String),
+  /** Per-provider mappings, sorted by `providerId`. */
+  providers: Schema.Array(SchemaProductProvider),
+  slug: Schema.String,
+  /**
+   * Today always `"subscription"` (matches the CLI's
+   * `NormalizedProductSchema`). Kept extensible at the TypeScript
+   * boundary so server-side widening doesn't immediately break clients
+   * — see the spec note in `feat/move-to-server-first`.
+   */
+  type: Schema.Literal("subscription"),
+}) {}
+
+/**
+ * Response shape for `GET /api/v1/schema` — the CLI-facing consolidated
+ * read. Named `ProjectSchemaResponse` (rather than just `Schema`) to
+ * avoid colliding with the `Schema` namespace re-exported from
+ * `effect`.
+ */
+export class ProjectSchemaResponse extends Schema.Class<ProjectSchemaResponse>(
+  "ProjectSchemaResponse",
+)({
+  enabledProviders: Schema.Array(SchemaProviderId),
+  locations: Schema.Array(SchemaLocation),
+  perks: Schema.Array(SchemaPerk),
+  products: Schema.Array(SchemaProduct),
+  /**
+   * `sha256:<hex>` content hash of the normalized projection. Identical
+   * to `GET /api/v1/schema/version`; used as the `ETag` for both
+   * endpoints.
+   */
+  version: Schema.String,
+}) {}
+
+/**
+ * Response shape for `GET /api/v1/schema/version` — the cheap version
+ * probe used by the CLI watch loop and the SDK's drift warning.
+ */
+export class SchemaVersion extends Schema.Class<SchemaVersion>("SchemaVersion")({
+  version: Schema.String,
+}) {}
+
+// ========================================================
+// SDK runtime schema (`GET /api/v1/sdk/schema`)
+// ========================================================
+
+/**
+ * Per-product `properties` block. Today this is just the human-readable
+ * name; kept as a struct to mirror `RuntimeProductDefinition` in the SDK
+ * (`libraries/react-native/src/core/schema/runtime.ts`) — extending it
+ * server-side is a coordinated SDK change.
+ */
+const SdkSchemaProductProperties = Schema.Struct({
+  name: Schema.String,
+});
+
+/**
+ * Per-product `configuration` block, split out of `properties` to match
+ * the SDK's existing internal shape (minimises the diff vs the old
+ * DSL-built product definitions).
+ */
+const SdkSchemaProductConfiguration = Schema.Struct({
+  /**
+   * Set-of-perk-slugs as a `{ slug: true }` record; matches
+   * `RuntimeProductDefinition.configuration.perks`.
+   */
+  perks: Schema.Record(Schema.String, Schema.Literal(true)),
+  /**
+   * Provider configurations keyed by provider ID. Optional per-provider
+   * because not every product has every provider configured.
+   */
+  providers: Schema.Struct({
+    appleAppStore: Schema.optional(SchemaProviderConfiguration),
+    googlePlay: Schema.optional(SchemaProviderConfiguration),
+  }),
+});
+
+export class SdkSchemaProduct extends Schema.Class<SdkSchemaProduct>("SdkSchemaProduct")({
+  configuration: SdkSchemaProductConfiguration,
+  properties: SdkSchemaProductProperties,
+  slug: Schema.String,
+  type: Schema.Literal("subscription"),
+}) {}
+
+export class SdkSchemaPerk extends Schema.Class<SdkSchemaPerk>("SdkSchemaPerk")({
+  name: Schema.String,
+  slug: Schema.String,
+}) {}
+
+export class SdkSchemaLocation extends Schema.Class<SdkSchemaLocation>("SdkSchemaLocation")({
+  description: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  slug: Schema.String,
+}) {}
+
+/**
+ * Response shape for `GET /api/v1/sdk/schema` — the runtime schema the
+ * SDK fetches on `Provider` mount. Mirrors `RuntimeSchema` in
+ * `libraries/react-native/src/core/schema/runtime.ts`.
+ *
+ * Differences from `Schema_` (CLI-facing): object-keyed by slug instead
+ * of arrays of objects (the SDK looks products up by slug at runtime),
+ * and `enabledProviders` is omitted (the SDK doesn't need it).
+ */
+export class SdkSchema extends Schema.Class<SdkSchema>("SdkSchema")({
+  locations: Schema.Record(Schema.String, SdkSchemaLocation),
+  perks: Schema.Record(Schema.String, SdkSchemaPerk),
+  products: Schema.Record(Schema.String, SdkSchemaProduct),
+  version: Schema.String,
+}) {}
+
+// ========================================================
+// User
+// ========================================================
+
+export class User extends Schema.Class<User>("User")({
+  createdAt: Schema.Date,
+  email: Schema.String,
+  emailVerified: Schema.Boolean,
+  id: Schema.String,
+  image: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  organizations: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      logo: Schema.NullOr(Schema.String),
+      name: Schema.String,
+      slug: Schema.String,
+      workosOrganizationId: Schema.NullOr(Schema.String),
+    }),
+  ),
+  projects: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      logo: Schema.NullOr(Schema.String),
+      name: Schema.String,
+      organizationId: Schema.String,
+      slug: Schema.String,
+    }),
+  ),
+  updatedAt: Schema.Date,
+}) {}
+
+// ========================================================
+// Webhooks
+// ========================================================
+
+export const WebhookEventType = Schema.Literals([
+  "person.created",
+  "person.updated",
+  "person.deleted",
+  "subscription.created",
+  "subscription.renewed",
+  "subscription.cancelled",
+  "subscription.expired",
+  "purchase.completed",
+  "purchase.refunded",
+]);
+
+export const WebhookEndpointStatus = Schema.Literals(["active", "disabled", "failed"]);
+
+export const WebhookDeliveryStatus = Schema.Literals([
+  "pending",
+  "in_progress",
+  "succeeded",
+  "failed",
+  "exhausted",
+]);
+
+export class WebhookEndpoint extends Schema.Class<WebhookEndpoint>("WebhookEndpoint")({
+  consecutiveFailures: Schema.Number,
+  createdAt: Schema.NullOr(Schema.Date),
+  description: Schema.NullOr(Schema.String),
+  events: Schema.Array(WebhookEventType),
+  id: Schema.String,
+  lastSuccessAt: Schema.NullOr(Schema.Date),
+  name: Schema.String,
+  projectId: Schema.String,
+  secret: Schema.String,
+  status: WebhookEndpointStatus,
+  url: Schema.String,
+}) {}
+
+export class CreateWebhookEndpointBody extends Schema.Class<CreateWebhookEndpointBody>(
+  "CreateWebhookEndpointBody",
+)({
+  description: Schema.optional(Schema.String),
+  events: Schema.Array(Schema.String),
+  name: Schema.String,
+  url: Schema.String,
+}) {}
+
+export class UpdateWebhookEndpointBody extends Schema.Class<UpdateWebhookEndpointBody>(
+  "UpdateWebhookEndpointBody",
+)({
+  description: Schema.optional(Schema.NullOr(Schema.String)),
+  events: Schema.optional(Schema.Array(Schema.String)),
+  name: Schema.optional(Schema.String),
+  status: Schema.optional(Schema.Literals(["active", "disabled"])),
+  url: Schema.optional(Schema.String),
+}) {}
+
+export const WebhookEndpointIdParam = Schema.String;
+
+export class WebhookDelivery extends Schema.Class<WebhookDelivery>("WebhookDelivery")({
+  attemptCount: Schema.Number,
+  completedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  eventOccurredAt: Schema.Date,
+  eventType: Schema.String,
+  id: Schema.String,
+  maxAttempts: Schema.Number,
+  nextAttemptAt: Schema.NullOr(Schema.Date),
+  payload: Schema.Unknown,
+  projectId: Schema.String,
+  status: WebhookDeliveryStatus,
+  webhookEndpointId: Schema.String,
+}) {}
+
+export class WebhookDeliveryAttempt extends Schema.Class<WebhookDeliveryAttempt>(
+  "WebhookDeliveryAttempt",
+)({
+  attemptNumber: Schema.Number,
+  createdAt: Schema.NullOr(Schema.Date),
+  durationMs: Schema.NullOr(Schema.Number),
+  errorMessage: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  responseBody: Schema.NullOr(Schema.String),
+  statusCode: Schema.NullOr(Schema.Number),
+  succeeded: Schema.Boolean,
+}) {}
+
+export class WebhookDeliveryWithAttempts extends Schema.Class<WebhookDeliveryWithAttempts>(
+  "WebhookDeliveryWithAttempts",
+)({
+  attemptCount: Schema.Number,
+  attempts: Schema.Array(WebhookDeliveryAttempt),
+  completedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  eventOccurredAt: Schema.Date,
+  eventType: Schema.String,
+  id: Schema.String,
+  maxAttempts: Schema.Number,
+  nextAttemptAt: Schema.NullOr(Schema.Date),
+  payload: Schema.Unknown,
+  projectId: Schema.String,
+  status: WebhookDeliveryStatus,
+  webhookEndpointId: Schema.String,
+}) {}
+
+export const WebhookDeliveryIdParam = Schema.String;
+
+// ========================================================
+// Feature Flags (SDK)
+// ========================================================
+
+export class EvaluateFeatureFlagsBody extends Schema.Class<EvaluateFeatureFlagsBody>(
+  "EvaluateFeatureFlagsBody",
+)({
+  flagKeys: Schema.optional(Schema.Array(Schema.String)),
+}) {}
+
+export class SdkFeatureFlagResult extends Schema.Class<SdkFeatureFlagResult>(
+  "SdkFeatureFlagResult",
+)({
+  enabled: Schema.Boolean,
+  key: Schema.String,
+  payload: Schema.NullOr(Schema.Unknown),
+  variantKey: Schema.NullOr(Schema.String),
+}) {}
+
+export class SdkFeatureFlagsResponse extends Schema.Class<SdkFeatureFlagsResponse>(
+  "SdkFeatureFlagsResponse",
+)({
+  flags: Schema.Array(SdkFeatureFlagResult),
+}) {}
+
+// ========================================================
+// Paywall Resolution (SDK)
+// ========================================================
+
+export class SdkResolvePaywallBody extends Schema.Class<SdkResolvePaywallBody>(
+  "SdkResolvePaywallBody",
+)({
+  locationSlug: Schema.String,
+}) {}
+
+const SdkResolvedPaywallShowingType = Schema.Literals(["paywall_release", "feature_flag"]);
+
+const SdkResolvedPaywallShowingPaywall = Schema.Struct({
+  id: Schema.String,
+  name: Schema.String,
+  slug: Schema.String,
+});
+
+/**
+ * Variable values a code-deployed paywall accepts (deploy contract §1):
+ * `string | number | boolean` only.
+ */
+const SdkPaywallRuntimeVariableValue = Schema.Union([Schema.String, Schema.Number, Schema.Boolean]);
+
+/**
+ * Code-deploy runtime block forwarded verbatim through resolve (deploy
+ * contract §6). `null` for visual-editor releases. The device SDK caches the
+ * bundle by `contentHash`, maps `productSlugs` through its native store
+ * metadata, and passes `variables` through unchanged.
+ */
+const SdkResolvedPaywallReleaseRuntime = Schema.Struct({
+  contentHash: Schema.String,
+  productSlugs: Schema.Array(Schema.String),
+  variables: Schema.Record(Schema.String, SdkPaywallRuntimeVariableValue),
+});
+
+const SdkResolvedPaywallShowingPaywallRelease = Schema.Struct({
+  htmlUrl: Schema.String,
+  publishedAt: Schema.NullOr(Schema.Date),
+  releaseId: Schema.String,
+  runtime: Schema.NullOr(SdkResolvedPaywallReleaseRuntime),
+  version: Schema.Number,
+});
+
+export class SdkResolvedPaywallShowing extends Schema.Class<SdkResolvedPaywallShowing>(
+  "SdkResolvedPaywallShowing",
+)({
+  id: Schema.String,
+  paywall: Schema.NullOr(SdkResolvedPaywallShowingPaywall),
+  paywallId: Schema.NullOr(Schema.String),
+  paywallRelease: Schema.NullOr(SdkResolvedPaywallShowingPaywallRelease),
+  paywallReleaseId: Schema.NullOr(Schema.String),
+  startedAt: Schema.Date,
+  type: SdkResolvedPaywallShowingType,
+}) {}
+
+export class SdkResolvedPaywall extends Schema.Class<SdkResolvedPaywall>("SdkResolvedPaywall")({
+  location: Schema.Struct({
+    id: Schema.String,
+    name: Schema.String,
+    slug: Schema.String,
+  }),
+  showing: SdkResolvedPaywallShowing,
+}) {}
+
+// ========================================================
+// Paywall Code Deploys (deploy contract §4)
+// ========================================================
+
+/**
+ * Request body for `POST /api/v1/paywall-deploys` — the §1 deploy manifest.
+ *
+ * Deliberately `Schema.Unknown` rather than a typed mirror of the manifest:
+ * the authoritative validation lives in `packages/core`
+ * (`PaywallDeployManifestSchema`, strict `onExcessProperty: "error"` decode)
+ * where an unknown `schemaVersion` must produce a dedicated 400
+ * "upgrade the CLI" error *before* full validation, and unknown keys must be
+ * rejected rather than silently stripped — both of which a typed HTTP-layer
+ * decode would preempt.
+ */
+export const PaywallDeployManifestBody = Schema.Unknown;
+
+/**
+ * Request body for `PUT /api/v1/paywall-deploys/:deployId/blobs/:sha256` —
+ * the raw `application/octet-stream` blob bytes (deploy contract §4.2).
+ */
+export const PaywallDeployBlobBody = Schema.Uint8Array.pipe(HttpApiSchema.asUint8Array());
+
+/** Response for `POST /api/v1/paywall-deploys` (deploy contract §4.1, 201). */
+export class CreatePaywallDeployResponse extends Schema.Class<CreatePaywallDeployResponse>(
+  "CreatePaywallDeployResponse",
+)({
+  deployId: Schema.String,
+  /** Manifest file hashes the server does not yet have stored for this project. */
+  missing: Schema.Array(Schema.String),
+}) {}
+
+/** Empty `200 {}` response for blob upload (deploy contract §4.2). */
+export class UploadPaywallDeployBlobResponse extends Schema.Class<UploadPaywallDeployBlobResponse>(
+  "UploadPaywallDeployBlobResponse",
+)({}) {}
+
+/** Per-paywall finalize summary (deploy contract §4.3). */
+export class FinalizedPaywallDeployPaywall extends Schema.Class<FinalizedPaywallDeployPaywall>(
+  "FinalizedPaywallDeployPaywall",
+)({
+  contentHash: Schema.String,
+  /** Manifest paywall id (slug). */
+  id: Schema.String,
+  paywallId: Schema.String,
+  releaseId: Schema.String,
+  url: Schema.String,
+  version: Schema.Number,
+}) {}
+
+/** Per-component finalize summary (deploy contract §4.3). */
+export class FinalizedPaywallDeployComponent extends Schema.Class<FinalizedPaywallDeployComponent>(
+  "FinalizedPaywallDeployComponent",
+)({
+  componentId: Schema.String,
+  contentHash: Schema.String,
+  /** Manifest component id (slug). */
+  id: Schema.String,
+  version: Schema.Number,
+}) {}
+
+/** Response for `POST /api/v1/paywall-deploys/:deployId/finalize` (§4.3). */
+export class FinalizePaywallDeployResponse extends Schema.Class<FinalizePaywallDeployResponse>(
+  "FinalizePaywallDeployResponse",
+)({
+  components: Schema.Array(FinalizedPaywallDeployComponent),
+  deployId: Schema.String,
+  paywalls: Schema.Array(FinalizedPaywallDeployPaywall),
+  status: Schema.Literal("ready"),
+}) {}
diff --git a/packages/api-contracts/src/errors/Analytics.ts b/packages/api-contracts/src/errors/Analytics.ts
new file mode 100644
index 000000000..3e18a0b6a
--- /dev/null
+++ b/packages/api-contracts/src/errors/Analytics.ts
@@ -0,0 +1,28 @@
+import { Schema } from "effect";
+
+/** Generic analytics service error */
+export class ApiAnalyticsServiceError extends Schema.TaggedErrorClass<ApiAnalyticsServiceError>()(
+  "Api/AnalyticsServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Invalid time range error */
+export class ApiInvalidTimeRangeError extends Schema.TaggedErrorClass<ApiInvalidTimeRangeError>()(
+  "Api/InvalidTimeRangeError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
+
+/** Invalid metric error */
+export class ApiInvalidMetricError extends Schema.TaggedErrorClass<ApiInvalidMetricError>()(
+  "Api/InvalidMetricError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
diff --git a/packages/api-contracts/src/errors/ApiKey.ts b/packages/api-contracts/src/errors/ApiKey.ts
new file mode 100644
index 000000000..92462d24e
--- /dev/null
+++ b/packages/api-contracts/src/errors/ApiKey.ts
@@ -0,0 +1,19 @@
+import { Schema } from "effect";
+
+/** Generic API key service error */
+export class ApiApiKeyServiceError extends Schema.TaggedErrorClass<ApiApiKeyServiceError>()(
+  "Api/ApiKeyServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** API key not found */
+export class ApiApiKeyNotFoundError extends Schema.TaggedErrorClass<ApiApiKeyNotFoundError>()(
+  "Api/ApiKeyNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
diff --git a/packages/api-contracts/src/errors/Billing.ts b/packages/api-contracts/src/errors/Billing.ts
new file mode 100644
index 000000000..dbf947e27
--- /dev/null
+++ b/packages/api-contracts/src/errors/Billing.ts
@@ -0,0 +1,28 @@
+import { Schema } from "effect";
+
+/** Generic billing service error */
+export class ApiBillingServiceError extends Schema.TaggedErrorClass<ApiBillingServiceError>()(
+  "Api/BillingServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Organization billing not found */
+export class ApiOrganizationBillingNotFoundError extends Schema.TaggedErrorClass<ApiOrganizationBillingNotFoundError>()(
+  "Api/OrganizationBillingNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Invalid billing tier error */
+export class ApiInvalidBillingTierError extends Schema.TaggedErrorClass<ApiInvalidBillingTierError>()(
+  "Api/InvalidBillingTierError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
diff --git a/packages/api-contracts/src/errors/Common.ts b/packages/api-contracts/src/errors/Common.ts
new file mode 100644
index 000000000..f89f015a8
--- /dev/null
+++ b/packages/api-contracts/src/errors/Common.ts
@@ -0,0 +1,29 @@
+import { Schema } from "effect";
+
+/** Action is forbidden due to insufficient permissions */
+export class ApiActionForbiddenError extends Schema.TaggedErrorClass<ApiActionForbiddenError>()(
+  "Api/ActionForbiddenError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 403 },
+) {}
+
+/** Authentication failed */
+export class ApiAuthenticationError extends Schema.TaggedErrorClass<ApiAuthenticationError>()(
+  "Api/AuthenticationError",
+  {
+    cause: Schema.String,
+    message: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** User is not authenticated */
+export class ApiNotAuthenticatedError extends Schema.TaggedErrorClass<ApiNotAuthenticatedError>()(
+  "Api/NotAuthenticatedError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 401 },
+) {}
diff --git a/packages/api-contracts/src/errors/Organization.ts b/packages/api-contracts/src/errors/Organization.ts
new file mode 100644
index 000000000..acb2831a9
--- /dev/null
+++ b/packages/api-contracts/src/errors/Organization.ts
@@ -0,0 +1,19 @@
+import { Schema } from "effect";
+
+/** Generic organization service error */
+export class ApiOrganizationServiceError extends Schema.TaggedErrorClass<ApiOrganizationServiceError>()(
+  "Api/OrganizationServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Organization not found */
+export class ApiOrganizationNotFoundError extends Schema.TaggedErrorClass<ApiOrganizationNotFoundError>()(
+  "Api/OrganizationNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
diff --git a/packages/api-contracts/src/errors/PaymentProvider.ts b/packages/api-contracts/src/errors/PaymentProvider.ts
new file mode 100644
index 000000000..a67516540
--- /dev/null
+++ b/packages/api-contracts/src/errors/PaymentProvider.ts
@@ -0,0 +1,73 @@
+import { Schema } from "effect";
+
+/** Generic payment provider configuration service error */
+export class ApiPaymentProviderConfigurationServiceError extends Schema.TaggedErrorClass<ApiPaymentProviderConfigurationServiceError>()(
+  "Api/PaymentProviderConfigurationServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Payment provider configuration not found */
+export class ApiPaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<ApiPaymentProviderConfigurationNotFoundError>()(
+  "Api/PaymentProviderConfigurationNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Payment provider configuration validation error */
+export class ApiPaymentProviderConfigurationValidationError extends Schema.TaggedErrorClass<ApiPaymentProviderConfigurationValidationError>()(
+  "Api/PaymentProviderConfigurationValidationError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
+
+/** Payment provider configuration key unavailable */
+export class ApiPaymentProviderConfigurationKeyUnavailableError extends Schema.TaggedErrorClass<ApiPaymentProviderConfigurationKeyUnavailableError>()(
+  "Api/PaymentProviderConfigurationKeyUnavailableError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
+
+/** Payment provider already exists */
+export class ApiPaymentProviderAlreadyExistsError extends Schema.TaggedErrorClass<ApiPaymentProviderAlreadyExistsError>()(
+  "Api/PaymentProviderAlreadyExistsError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 409 },
+) {}
+
+/** Generic payment provider product service error */
+export class ApiPaymentProviderProductServiceError extends Schema.TaggedErrorClass<ApiPaymentProviderProductServiceError>()(
+  "Api/PaymentProviderProductServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Payment provider product validation error */
+export class ApiPaymentProviderProductValidationError extends Schema.TaggedErrorClass<ApiPaymentProviderProductValidationError>()(
+  "Api/PaymentProviderProductValidationError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
+
+/** Payment provider product not found */
+export class ApiPaymentProviderProductNotFoundError extends Schema.TaggedErrorClass<ApiPaymentProviderProductNotFoundError>()(
+  "Api/PaymentProviderProductNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
diff --git a/packages/api-contracts/src/errors/Paywall.ts b/packages/api-contracts/src/errors/Paywall.ts
new file mode 100644
index 000000000..65fdc2152
--- /dev/null
+++ b/packages/api-contracts/src/errors/Paywall.ts
@@ -0,0 +1,37 @@
+import { Schema } from "effect";
+
+/** Generic paywall service error */
+export class ApiPaywallServiceError extends Schema.TaggedErrorClass<ApiPaywallServiceError>()(
+  "Api/PaywallServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Paywall not found */
+export class ApiPaywallNotFoundError extends Schema.TaggedErrorClass<ApiPaywallNotFoundError>()(
+  "Api/PaywallNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Paywall slug already exists */
+export class ApiPaywallSlugAlreadyExistsError extends Schema.TaggedErrorClass<ApiPaywallSlugAlreadyExistsError>()(
+  "Api/PaywallSlugAlreadyExistsError",
+  {
+    slug: Schema.String,
+  },
+  { httpApiStatus: 409 },
+) {}
+
+/** Paywall publish error */
+export class ApiPaywallPublishError extends Schema.TaggedErrorClass<ApiPaywallPublishError>()(
+  "Api/PaywallPublishError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
diff --git a/packages/api-contracts/src/errors/PaywallDeploy.ts b/packages/api-contracts/src/errors/PaywallDeploy.ts
new file mode 100644
index 000000000..6e813134e
--- /dev/null
+++ b/packages/api-contracts/src/errors/PaywallDeploy.ts
@@ -0,0 +1,87 @@
+import { Schema } from "effect";
+
+/** Generic paywall deploy service error */
+export class ApiPaywallDeployServiceError extends Schema.TaggedErrorClass<ApiPaywallDeployServiceError>()(
+  "Api/PaywallDeployServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/**
+ * The manifest declares a `schemaVersion` this server does not understand
+ * (deploy contract §4.1/§8). `message` carries the "upgrade voidhash-cli"
+ * hint verbatim from the service.
+ */
+export class ApiPaywallDeployUpgradeRequiredError extends Schema.TaggedErrorClass<ApiPaywallDeployUpgradeRequiredError>()(
+  "Api/PaywallDeployUpgradeRequiredError",
+  {
+    message: Schema.String,
+    schemaVersion: Schema.NullOr(Schema.Number),
+  },
+  { httpApiStatus: 400 },
+) {}
+
+/**
+ * The manifest (or a stored component manifest / preview tree) failed schema
+ * validation or a §1.1 constraint (deploy contract §4.3). `violations`
+ * carries the per-item details.
+ */
+export class ApiPaywallDeployValidationError extends Schema.TaggedErrorClass<ApiPaywallDeployValidationError>()(
+  "Api/PaywallDeployValidationError",
+  {
+    message: Schema.String,
+    violations: Schema.Array(Schema.String),
+  },
+  { httpApiStatus: 422 },
+) {}
+
+/** Paywall deploy not found */
+export class ApiPaywallDeployNotFoundError extends Schema.TaggedErrorClass<ApiPaywallDeployNotFoundError>()(
+  "Api/PaywallDeployNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Blob upload attempted against a deploy that is no longer pending */
+export class ApiPaywallDeployNotPendingError extends Schema.TaggedErrorClass<ApiPaywallDeployNotPendingError>()(
+  "Api/PaywallDeployNotPendingError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 409 },
+) {}
+
+/** Uploaded sha256 is not declared by the deploy's manifest (contract §4.2) */
+export class ApiDeployBlobNotDeclaredError extends Schema.TaggedErrorClass<ApiDeployBlobNotDeclaredError>()(
+  "Api/DeployBlobNotDeclaredError",
+  {
+    sha256: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Uploaded body does not hash to the declared sha256 (contract §4.2) */
+export class ApiDeployBlobHashMismatchError extends Schema.TaggedErrorClass<ApiDeployBlobHashMismatchError>()(
+  "Api/DeployBlobHashMismatchError",
+  {
+    actualSha256: Schema.String,
+    expectedSha256: Schema.String,
+  },
+  { httpApiStatus: 422 },
+) {}
+
+/**
+ * Finalize attempted while referenced blobs are still missing (contract
+ * §4.3). The deploy stays pending; the CLI uploads `missing` and retries.
+ */
+export class ApiIncompleteDeployError extends Schema.TaggedErrorClass<ApiIncompleteDeployError>()(
+  "Api/IncompleteDeployError",
+  {
+    missing: Schema.Array(Schema.String),
+  },
+  { httpApiStatus: 409 },
+) {}
diff --git a/packages/api-contracts/src/errors/PaywallLocation.ts b/packages/api-contracts/src/errors/PaywallLocation.ts
new file mode 100644
index 000000000..5469fedf0
--- /dev/null
+++ b/packages/api-contracts/src/errors/PaywallLocation.ts
@@ -0,0 +1,10 @@
+import { Schema } from "effect";
+
+/** Generic paywall location service error */
+export class ApiPaywallLocationServiceError extends Schema.TaggedErrorClass<ApiPaywallLocationServiceError>()(
+  "Api/PaywallLocationServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
diff --git a/packages/api-contracts/src/errors/Perk.ts b/packages/api-contracts/src/errors/Perk.ts
new file mode 100644
index 000000000..351a4b7e1
--- /dev/null
+++ b/packages/api-contracts/src/errors/Perk.ts
@@ -0,0 +1,32 @@
+import { Schema } from "effect";
+
+/** Generic perk service error */
+export class ApiPerkServiceError extends Schema.TaggedErrorClass<ApiPerkServiceError>()(
+  "Api/PerkServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Perk not found */
+export class ApiPerkNotFoundError extends Schema.TaggedErrorClass<ApiPerkNotFoundError>()(
+  "Api/PerkNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Perk slug already exists */
+export class ApiPerkSlugAlreadyExistsError extends Schema.TaggedErrorClass<ApiPerkSlugAlreadyExistsError>()(
+  "Api/PerkSlugAlreadyExistsError",
+  {
+    slug: Schema.String,
+  },
+  { httpApiStatus: 409 },
+) {
+  override toString(): string {
+    return `The following perk slug already exists: ${this.slug}`;
+  }
+}
diff --git a/packages/api-contracts/src/errors/Person.ts b/packages/api-contracts/src/errors/Person.ts
new file mode 100644
index 000000000..eca47ba10
--- /dev/null
+++ b/packages/api-contracts/src/errors/Person.ts
@@ -0,0 +1,36 @@
+import { Schema } from "effect";
+
+/** Generic person service error */
+export class ApiPersonServiceError extends Schema.TaggedErrorClass<ApiPersonServiceError>()(
+  "Api/PersonServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Person not found */
+export class ApiPersonNotFoundError extends Schema.TaggedErrorClass<ApiPersonNotFoundError>()(
+  "Api/PersonNotFoundError",
+  {
+    id: Schema.NonEmptyString,
+  },
+  { httpApiStatus: 404 },
+) {
+  override toString(): string {
+    return `The following person not found: ${this.id}`;
+  }
+}
+
+/** Anonymous ID is invalid */
+export class ApiPersonInvalidAnonymousIdError extends Schema.TaggedErrorClass<ApiPersonInvalidAnonymousIdError>()(
+  "Api/PersonInvalidAnonymousIdError",
+  {
+    id: Schema.NonEmptyString,
+  },
+  { httpApiStatus: 400 },
+) {
+  override toString(): string {
+    return `The following anonymous ID is invalid: ${this.id}`;
+  }
+}
diff --git a/packages/api-contracts/src/errors/Product.ts b/packages/api-contracts/src/errors/Product.ts
new file mode 100644
index 000000000..674e923e4
--- /dev/null
+++ b/packages/api-contracts/src/errors/Product.ts
@@ -0,0 +1,32 @@
+import { Schema } from "effect";
+
+/** Generic product service error */
+export class ApiProductServiceError extends Schema.TaggedErrorClass<ApiProductServiceError>()(
+  "Api/ProductServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Product not found */
+export class ApiProductNotFoundError extends Schema.TaggedErrorClass<ApiProductNotFoundError>()(
+  "Api/ProductNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Product slug already exists */
+export class ApiProductSlugAlreadyExistsError extends Schema.TaggedErrorClass<ApiProductSlugAlreadyExistsError>()(
+  "Api/ProductSlugAlreadyExistsError",
+  {
+    slug: Schema.String,
+  },
+  { httpApiStatus: 409 },
+) {
+  override toString(): string {
+    return `The following product slug already exists: ${this.slug}`;
+  }
+}
diff --git a/packages/api-contracts/src/errors/ProductPerk.ts b/packages/api-contracts/src/errors/ProductPerk.ts
new file mode 100644
index 000000000..75fc6b20c
--- /dev/null
+++ b/packages/api-contracts/src/errors/ProductPerk.ts
@@ -0,0 +1,19 @@
+import { Schema } from "effect";
+
+/** Generic product perk service error */
+export class ApiProductPerkServiceError extends Schema.TaggedErrorClass<ApiProductPerkServiceError>()(
+  "Api/ProductPerkServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Product perk validation error */
+export class ApiProductPerkValidationError extends Schema.TaggedErrorClass<ApiProductPerkValidationError>()(
+  "Api/ProductPerkValidationError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
diff --git a/packages/api-contracts/src/errors/Project.ts b/packages/api-contracts/src/errors/Project.ts
new file mode 100644
index 000000000..39a56f4e2
--- /dev/null
+++ b/packages/api-contracts/src/errors/Project.ts
@@ -0,0 +1,23 @@
+import { Schema } from "effect";
+
+/** Generic project service error */
+export class ApiProjectServiceError extends Schema.TaggedErrorClass<ApiProjectServiceError>()(
+  "Api/ProjectServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Project not found */
+export class ApiProjectNotFoundError extends Schema.TaggedErrorClass<ApiProjectNotFoundError>()(
+  "Api/ProjectNotFoundError",
+  {
+    projectId: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {
+  override toString(): string {
+    return `The following project not found: ${this.projectId}`;
+  }
+}
diff --git a/packages/api-contracts/src/errors/PushNotification.ts b/packages/api-contracts/src/errors/PushNotification.ts
new file mode 100644
index 000000000..ff365b8d9
--- /dev/null
+++ b/packages/api-contracts/src/errors/PushNotification.ts
@@ -0,0 +1,61 @@
+import { Schema } from "effect";
+
+/**
+ * Push-namespaced API errors (avoids colliding with the entrenched
+ * `paymentProviderNotification` webhook domain). Same shape as `errors/Sdk.ts`.
+ */
+
+/** Generic push-device service error. */
+export class ApiPushDeviceServiceError extends Schema.TaggedErrorClass<ApiPushDeviceServiceError>()(
+  "Api/PushDeviceServiceError",
+  { cause: Schema.String },
+  { httpApiStatus: 500 },
+) {}
+
+/** Invalid registration payload (bad provider/platform combo, malformed token). */
+export class ApiPushDeviceValidationError extends Schema.TaggedErrorClass<ApiPushDeviceValidationError>()(
+  "Api/PushDeviceValidationError",
+  { message: Schema.String },
+  { httpApiStatus: 400 },
+) {}
+
+/**
+ * UNIFORM 404 for both "no such token" AND "not your token" — refresh/unregister
+ * ownership failures map here so there is no existence oracle.
+ */
+export class ApiPushDeviceNotFoundError extends Schema.TaggedErrorClass<ApiPushDeviceNotFoundError>()(
+  "Api/PushDeviceNotFoundError",
+  { message: Schema.String },
+  { httpApiStatus: 404 },
+) {}
+
+/** Dashboard push-config service error (config RPC surface; wired in a later slice). */
+export class ApiPushNotificationConfigurationServiceError extends Schema.TaggedErrorClass<ApiPushNotificationConfigurationServiceError>()(
+  "Api/PushNotificationConfigurationServiceError",
+  { cause: Schema.String },
+  { httpApiStatus: 500 },
+) {}
+
+/** Dashboard push-config not-found (config RPC surface; wired in a later slice). */
+export class ApiPushNotificationConfigurationNotFoundError extends Schema.TaggedErrorClass<ApiPushNotificationConfigurationNotFoundError>()(
+  "Api/PushNotificationConfigurationNotFoundError",
+  { message: Schema.String },
+  { httpApiStatus: 404 },
+) {}
+
+/** Server-to-server push send failed (infrastructure / downstream). */
+export class ApiPushSendServiceError extends Schema.TaggedErrorClass<ApiPushSendServiceError>()(
+  "Api/PushSendServiceError",
+  { cause: Schema.String },
+  { httpApiStatus: 500 },
+) {}
+
+/**
+ * A send was attempted but the project has no enabled push provider — a
+ * precondition failure (configure FCM/APNs first), not a per-device error.
+ */
+export class ApiPushSendNotEnabledError extends Schema.TaggedErrorClass<ApiPushSendNotEnabledError>()(
+  "Api/PushSendNotEnabledError",
+  { message: Schema.String },
+  { httpApiStatus: 409 },
+) {}
diff --git a/packages/api-contracts/src/errors/Schema.ts b/packages/api-contracts/src/errors/Schema.ts
new file mode 100644
index 000000000..7896c4fb0
--- /dev/null
+++ b/packages/api-contracts/src/errors/Schema.ts
@@ -0,0 +1,15 @@
+import { Schema } from "effect";
+
+/**
+ * Catch-all error for the consolidated schema endpoints
+ * (`GET /api/v1/schema`, `GET /api/v1/schema/version`,
+ * `GET /api/v1/sdk/schema`). Wraps `DatabaseError` and similar
+ * infrastructure failures at the route boundary.
+ */
+export class ApiSchemaServiceError extends Schema.TaggedErrorClass<ApiSchemaServiceError>()(
+  "Api/SchemaServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
diff --git a/packages/api-contracts/src/errors/Sdk.ts b/packages/api-contracts/src/errors/Sdk.ts
new file mode 100644
index 000000000..652810474
--- /dev/null
+++ b/packages/api-contracts/src/errors/Sdk.ts
@@ -0,0 +1,41 @@
+import { Schema } from "effect";
+
+/** Generic SDK service error */
+export class ApiSdkServiceError extends Schema.TaggedErrorClass<ApiSdkServiceError>()(
+  "Api/SdkServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** SDK person not found */
+export class ApiSdkPersonNotFoundError extends Schema.TaggedErrorClass<ApiSdkPersonNotFoundError>()(
+  "Api/SdkPersonNotFoundError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** SDK person already identified */
+export class ApiSdkPersonAlreadyIdentifiedError extends Schema.TaggedErrorClass<ApiSdkPersonAlreadyIdentifiedError>()(
+  "Api/SdkPersonAlreadyIdentifiedError",
+  {
+    distinctId: Schema.String,
+  },
+  { httpApiStatus: 409 },
+) {
+  override toString(): string {
+    return `The following person was already identified: ${this.distinctId}`;
+  }
+}
+
+/** SDK validation error */
+export class ApiSdkValidationError extends Schema.TaggedErrorClass<ApiSdkValidationError>()(
+  "Api/SdkValidationError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
diff --git a/packages/api-contracts/src/errors/User.ts b/packages/api-contracts/src/errors/User.ts
new file mode 100644
index 000000000..f4f5489ee
--- /dev/null
+++ b/packages/api-contracts/src/errors/User.ts
@@ -0,0 +1,10 @@
+import { Schema } from "effect";
+
+/** Generic user service error */
+export class ApiUserServiceError extends Schema.TaggedErrorClass<ApiUserServiceError>()(
+  "Api/UserServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
diff --git a/packages/api-contracts/src/errors/Webhook.ts b/packages/api-contracts/src/errors/Webhook.ts
new file mode 100644
index 000000000..d5f2a26e5
--- /dev/null
+++ b/packages/api-contracts/src/errors/Webhook.ts
@@ -0,0 +1,37 @@
+import { Schema } from "effect";
+
+/** Generic webhook service error */
+export class ApiWebhookServiceError extends Schema.TaggedErrorClass<ApiWebhookServiceError>()(
+  "Api/WebhookServiceError",
+  {
+    cause: Schema.String,
+  },
+  { httpApiStatus: 500 },
+) {}
+
+/** Webhook endpoint not found */
+export class ApiWebhookEndpointNotFoundError extends Schema.TaggedErrorClass<ApiWebhookEndpointNotFoundError>()(
+  "Api/WebhookEndpointNotFoundError",
+  {
+    endpointId: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Webhook delivery not found */
+export class ApiWebhookDeliveryNotFoundError extends Schema.TaggedErrorClass<ApiWebhookDeliveryNotFoundError>()(
+  "Api/WebhookDeliveryNotFoundError",
+  {
+    deliveryId: Schema.String,
+  },
+  { httpApiStatus: 404 },
+) {}
+
+/** Webhook validation error */
+export class ApiWebhookValidationError extends Schema.TaggedErrorClass<ApiWebhookValidationError>()(
+  "Api/WebhookValidationError",
+  {
+    message: Schema.String,
+  },
+  { httpApiStatus: 400 },
+) {}
diff --git a/packages/api-contracts/src/errors/index.ts b/packages/api-contracts/src/errors/index.ts
new file mode 100644
index 000000000..8bc023782
--- /dev/null
+++ b/packages/api-contracts/src/errors/index.ts
@@ -0,0 +1,19 @@
+export * from "./Analytics.ts";
+export * from "./ApiKey.ts";
+export * from "./Billing.ts";
+export * from "./Common.ts";
+export * from "./Person.ts";
+export * from "./Organization.ts";
+export * from "./PaymentProvider.ts";
+export * from "./Paywall.ts";
+export * from "./PaywallDeploy.ts";
+export * from "./PaywallLocation.ts";
+export * from "./Perk.ts";
+export * from "./Product.ts";
+export * from "./ProductPerk.ts";
+export * from "./Project.ts";
+export * from "./PushNotification.ts";
+export * from "./Schema.ts";
+export * from "./Sdk.ts";
+export * from "./User.ts";
+export * from "./Webhook.ts";
diff --git a/packages/api-contracts/src/index.ts b/packages/api-contracts/src/index.ts
new file mode 100644
index 000000000..ff4296198
--- /dev/null
+++ b/packages/api-contracts/src/index.ts
@@ -0,0 +1,4 @@
+export * from "./Api.ts";
+export * from "./Auth.ts";
+export * from "./Middlewares.ts";
+export * from "./Schema.ts";
diff --git a/packages/api-contracts/tsconfig.json b/packages/api-contracts/tsconfig.json
new file mode 100644
index 000000000..077e79de1
--- /dev/null
+++ b/packages/api-contracts/tsconfig.json
@@ -0,0 +1,11 @@
+{
+  "extends": "@voidhash/tsconfig/base.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"],
+  "compilerOptions": {
+    "allowImportingTsExtensions": true,
+    "declaration": false,
+    "declarationMap": false,
+    "lib": ["ES2022", "DOM"]
+  }
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8c97da105..bd6470caa 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -500,6 +500,19 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/api-contracts:
+    dependencies:
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 5.6.3
+        version: 5.6.3
+
   packages/app-store-server-sdk:
     dependencies:
       '@peculiar/x509':

From 5cfc053d14eb7cf166e456795b088df5eb999f71 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 15:09:32 +0200
Subject: [PATCH 047/129] feat(platform): publish provider-neutral interfaces

---
 packages/platform/LICENSE.md             | 661 +++++++++++++++++++++++
 packages/platform/package.json           |  36 ++
 packages/platform/src/CronScheduler.ts   |  52 ++
 packages/platform/src/DurableEntity.ts   |  77 +++
 packages/platform/src/KeyValueStore.ts   |  79 +++
 packages/platform/src/Mailer.ts          |  49 ++
 packages/platform/src/ObjectStore.ts     |  56 ++
 packages/platform/src/PlatformRuntime.ts |  11 +
 packages/platform/src/Queue.ts           |  65 +++
 packages/platform/src/Screenshot.ts      |  33 ++
 packages/platform/src/Workflow.ts        | 125 +++++
 packages/platform/src/index.ts           |  68 +++
 packages/platform/tsconfig.json          |   5 +
 pnpm-lock.yaml                           |  19 +
 14 files changed, 1336 insertions(+)
 create mode 100644 packages/platform/LICENSE.md
 create mode 100644 packages/platform/package.json
 create mode 100644 packages/platform/src/CronScheduler.ts
 create mode 100644 packages/platform/src/DurableEntity.ts
 create mode 100644 packages/platform/src/KeyValueStore.ts
 create mode 100644 packages/platform/src/Mailer.ts
 create mode 100644 packages/platform/src/ObjectStore.ts
 create mode 100644 packages/platform/src/PlatformRuntime.ts
 create mode 100644 packages/platform/src/Queue.ts
 create mode 100644 packages/platform/src/Screenshot.ts
 create mode 100644 packages/platform/src/Workflow.ts
 create mode 100644 packages/platform/src/index.ts
 create mode 100644 packages/platform/tsconfig.json

diff --git a/packages/platform/LICENSE.md b/packages/platform/LICENSE.md
new file mode 100644
index 000000000..19bae3588
--- /dev/null
+++ b/packages/platform/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+Everyone is permitted to copy and distribute verbatim copies
+of this license document, but changing it is not allowed.
+
+                            Preamble
+
+The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works. By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+When we speak of free software, we are referring to freedom, not
+price. Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate. Many developers of free software are heartened and
+encouraged by the resulting cooperation. However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community. It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server. Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals. This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+0. Definitions.
+
+"This License" refers to version 3 of the GNU Affero General Public License.
+
+"Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+"The Program" refers to any copyrightable work licensed under this
+License. Each licensee is addressed as "you". "Licensees" and
+"recipients" may be individuals or organizations.
+
+To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy. The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy. Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies. Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License. If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+1. Source Code.
+
+The "source code" for a work means the preferred form of the work
+for making modifications to it. "Object code" means any non-source
+form of a work.
+
+A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form. A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities. However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work. For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+The Corresponding Source for a work in source code form is that
+same work.
+
+2. Basic Permissions.
+
+All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met. This License explicitly affirms your unlimited
+permission to run the unmodified Program. The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work. This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force. You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright. Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+Conveying under any other circumstances is permitted solely under
+the conditions stated below. Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+4. Conveying Verbatim Copies.
+
+You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+5. Conveying Modified Source Versions.
+
+You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit. Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+6. Conveying Non-Source Forms.
+
+You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling. In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage. For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product. A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+"Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source. The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information. But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed. Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+7. Additional Terms.
+
+"Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law. If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it. (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.) You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10. If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term. If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+8. Termination.
+
+You may not propagate or modify a covered work except as expressly
+provided under this License. Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License. If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+9. Acceptance Not Required for Having Copies.
+
+You are not required to accept this License in order to receive or
+run a copy of the Program. Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance. However,
+nothing other than this License grants you permission to propagate or
+modify any covered work. These actions infringe copyright if you do
+not accept this License. Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+10. Automatic Licensing of Downstream Recipients.
+
+Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License. You are not responsible
+for enforcing compliance by third parties with this License.
+
+An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations. If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License. For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+11. Patents.
+
+A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based. The
+work thus licensed is called the contributor's "contributor version".
+
+A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version. For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement). To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients. "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License. You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+12. No Surrender of Others' Freedom.
+
+If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License. If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all. For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+13. Remote Network Interaction; Use with the GNU General Public License.
+
+Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software. This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work. The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+14. Revised Versions of this License.
+
+The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time. Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number. If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation. If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+Later license versions may give you additional or different
+permissions. However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+15. Disclaimer of Warranty.
+
+THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+16. Limitation of Liability.
+
+IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+17. Interpretation of Sections 15 and 16.
+
+If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+To do so, attach the following notices to the program. It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source. For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code. There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/platform/package.json b/packages/platform/package.json
new file mode 100644
index 000000000..49d0c631d
--- /dev/null
+++ b/packages/platform/package.json
@@ -0,0 +1,36 @@
+{
+  "name": "@voidhash/platform",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/platform"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./CronScheduler": "./src/CronScheduler.ts",
+    "./DurableEntity": "./src/DurableEntity.ts",
+    "./KeyValueStore": "./src/KeyValueStore.ts",
+    "./Mailer": "./src/Mailer.ts",
+    "./ObjectStore": "./src/ObjectStore.ts",
+    "./PlatformRuntime": "./src/PlatformRuntime.ts",
+    "./Queue": "./src/Queue.ts",
+    "./Screenshot": "./src/Screenshot.ts",
+    "./Workflow": "./src/Workflow.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "effect": "4.0.0-beta.84",
+    "typescript": "6.0.3"
+  },
+  "peerDependencies": {
+    "effect": "4.0.0-beta.84"
+  }
+}
diff --git a/packages/platform/src/CronScheduler.ts b/packages/platform/src/CronScheduler.ts
new file mode 100644
index 000000000..7b491c3e8
--- /dev/null
+++ b/packages/platform/src/CronScheduler.ts
@@ -0,0 +1,52 @@
+import type { Effect } from "effect";
+import { Context, Schema } from "effect";
+
+import type { PlatformRuntime } from "./PlatformRuntime.ts";
+
+/** Stable failure raised by a scheduled-job driver. */
+export class CronSchedulerError extends Schema.TaggedErrorClass<CronSchedulerError>(
+  "CronSchedulerError",
+)("CronSchedulerError", {
+  cause: Schema.String,
+  jobName: Schema.String,
+  operation: Schema.String,
+}) {}
+
+/** Metadata passed to a scheduled job invocation. */
+export interface CronJobContext {
+  readonly scheduledTime: Date;
+  readonly catchUp: boolean;
+}
+
+/** A provider-neutral scheduled job definition. */
+export interface CronJob<R = never> {
+  readonly name: string;
+  readonly expression: string;
+  readonly timeZone?: string;
+  readonly leaseMillis?: number;
+  readonly run: (context: CronJobContext) => Effect.Effect<void, unknown, R>;
+}
+
+/** Polling policy for a long-running scheduled job. */
+export interface CronRunOptions {
+  readonly pollIntervalMillis?: number;
+}
+
+/** Provider-neutral persisted cron capabilities. */
+export interface CronSchedulerShape {
+  /** Claims and runs at most one due schedule slot. */
+  readonly tick: <R>(
+    job: CronJob<R>,
+    now?: Date,
+  ) => Effect.Effect<boolean, CronSchedulerError, PlatformRuntime | R>;
+  /** Polls a job until the enclosing Effect fiber is interrupted. */
+  readonly run: <R>(
+    job: CronJob<R>,
+    options?: CronRunOptions,
+  ) => Effect.Effect<never, CronSchedulerError, PlatformRuntime | R>;
+}
+
+/** Provider-neutral cron runtime used by application composition roots. */
+export class CronScheduler extends Context.Service<CronScheduler, CronSchedulerShape>()(
+  "@voidhash/platform/CronScheduler",
+) {}
diff --git a/packages/platform/src/DurableEntity.ts b/packages/platform/src/DurableEntity.ts
new file mode 100644
index 000000000..9c8014554
--- /dev/null
+++ b/packages/platform/src/DurableEntity.ts
@@ -0,0 +1,77 @@
+import { Context, type Effect } from "effect";
+
+/** Stable identity of one durable entity instance. */
+export interface DurableEntityAddress {
+  readonly type: string;
+  readonly id: string;
+}
+
+/** Runtime-neutral WebSocket session attached to an entity. */
+export interface DurableEntitySession {
+  readonly id: string;
+  readonly send: (message: string | Uint8Array) => Effect.Effect<void>;
+  readonly close: (code?: number, reason?: string) => Effect.Effect<void>;
+  readonly getAttachment: Effect.Effect<unknown | undefined>;
+  readonly setAttachment: (attachment: unknown) => Effect.Effect<void>;
+}
+
+/** Entity-local key-value storage. */
+export interface DurableEntityKeyValue {
+  readonly get: (key: string) => Effect.Effect<unknown | undefined>;
+  readonly put: (key: string, value: unknown) => Effect.Effect<void>;
+  readonly delete: (key: string) => Effect.Effect<void>;
+}
+
+/** Optional embedded SQL store supplied by adapters that support it. */
+export interface DurableEntitySql {
+  readonly execute: <Row extends Readonly<Record<string, unknown>>>(
+    statement: string,
+    bindings?: ReadonlyArray<unknown>,
+  ) => Effect.Effect<ReadonlyArray<Row>>;
+}
+
+/** One replaceable persisted alarm for an entity. */
+export interface DurableEntityAlarm {
+  readonly get: Effect.Effect<number | undefined>;
+  readonly set: (scheduledTime: number) => Effect.Effect<void>;
+  readonly delete: Effect.Effect<void>;
+}
+
+/** Live sessions currently attached to an entity instance. */
+export interface DurableEntitySessions {
+  readonly get: (sessionId: string) => Effect.Effect<DurableEntitySession | undefined>;
+  readonly list: Effect.Effect<ReadonlyArray<DurableEntitySession>>;
+  readonly attach: (session: DurableEntitySession) => Effect.Effect<void>;
+  readonly remove: (sessionId: string) => Effect.Effect<void>;
+}
+
+/** Capabilities visible while one entity operation holds its serialized turn. */
+export interface DurableEntityContext {
+  readonly address: DurableEntityAddress;
+  readonly keyValue: DurableEntityKeyValue;
+  readonly sql?: DurableEntitySql;
+  readonly alarm: DurableEntityAlarm;
+  readonly sessions: DurableEntitySessions;
+}
+
+/** First-party host contract for identity-addressed, serialized entity execution. */
+export interface DurableEntityHostShape {
+  readonly run: <A, E, R>(
+    address: DurableEntityAddress,
+    operation: (context: DurableEntityContext) => Effect.Effect<A, E, R>,
+  ) => Effect.Effect<A, E, R>;
+}
+
+/**
+ * Hosts durable entity operations without exposing Cloudflare or single-node
+ * runtime types to application code.
+ */
+export class DurableEntityHost extends Context.Service<DurableEntityHost, DurableEntityHostShape>()(
+  "@voidhash/platform/DurableEntityHost",
+) {}
+
+/** Creates a stable entity address in first-party vocabulary. */
+export const makeDurableEntityAddress = (type: string, id: string): DurableEntityAddress => ({
+  type,
+  id,
+});
diff --git a/packages/platform/src/KeyValueStore.ts b/packages/platform/src/KeyValueStore.ts
new file mode 100644
index 000000000..49cdc92b2
--- /dev/null
+++ b/packages/platform/src/KeyValueStore.ts
@@ -0,0 +1,79 @@
+import type { Effect, Option, Schema } from "effect";
+import { Context, Schema as EffectSchema } from "effect";
+
+import type { PlatformRuntime } from "./PlatformRuntime.ts";
+
+/** Stable failure raised by a platform key-value operation. */
+export class KeyValueStoreError extends EffectSchema.TaggedErrorClass<KeyValueStoreError>(
+  "KeyValueStoreError",
+)("KeyValueStoreError", {
+  cause: EffectSchema.String,
+  namespace: EffectSchema.String,
+  operation: EffectSchema.String,
+}) {}
+
+/** Optional expiry applied when a key-value entry is written. */
+export interface KeyValuePutOptions {
+  readonly ttlMillis?: number;
+}
+
+/** A typed key-value entry used by atomic bulk writes. */
+export interface KeyValueEntry<A> {
+  readonly key: string;
+  readonly value: A;
+}
+
+/** Provider-neutral typed key-value runtime. */
+export interface KeyValueStoreShape {
+  /** Reads and schema-decodes one unexpired value. */
+  readonly get: <A, I>(
+    namespace: string,
+    key: string,
+    schema: Schema.Codec<A, I>,
+  ) => Effect.Effect<Option.Option<A>, KeyValueStoreError, PlatformRuntime>;
+  /** Schema-encodes and writes one value. */
+  readonly put: <A, I>(
+    namespace: string,
+    key: string,
+    value: A,
+    schema: Schema.Codec<A, I>,
+    options?: KeyValuePutOptions,
+  ) => Effect.Effect<void, KeyValueStoreError, PlatformRuntime>;
+  /** Atomically schema-encodes and writes a value batch. */
+  readonly putMany: <A, I>(
+    namespace: string,
+    entries: ReadonlyArray<KeyValueEntry<A>>,
+    schema: Schema.Codec<A, I>,
+    options?: KeyValuePutOptions,
+  ) => Effect.Effect<void, KeyValueStoreError, PlatformRuntime>;
+  /** Returns the subset of keys that currently have unexpired values. */
+  readonly existingKeys: (
+    namespace: string,
+    keys: ReadonlyArray<string>,
+  ) => Effect.Effect<ReadonlySet<string>, KeyValueStoreError, PlatformRuntime>;
+  /** Deletes one key. */
+  readonly delete: (
+    namespace: string,
+    key: string,
+  ) => Effect.Effect<void, KeyValueStoreError, PlatformRuntime>;
+  /** Atomically deletes a key batch. */
+  readonly deleteMany: (
+    namespace: string,
+    keys: ReadonlyArray<string>,
+  ) => Effect.Effect<void, KeyValueStoreError, PlatformRuntime>;
+  /** Atomically increments an integer counter and returns its new value. */
+  readonly increment: (
+    namespace: string,
+    key: string,
+    options?: KeyValuePutOptions,
+  ) => Effect.Effect<number, KeyValueStoreError, PlatformRuntime>;
+  /** Deletes a bounded batch of expired entries and returns the deleted count. */
+  readonly pruneExpired: (
+    limit: number,
+  ) => Effect.Effect<number, KeyValueStoreError, PlatformRuntime>;
+}
+
+/** Provider-neutral key-value runtime used by application composition roots. */
+export class KeyValueStore extends Context.Service<KeyValueStore, KeyValueStoreShape>()(
+  "@voidhash/platform/KeyValueStore",
+) {}
diff --git a/packages/platform/src/Mailer.ts b/packages/platform/src/Mailer.ts
new file mode 100644
index 000000000..cf28e7418
--- /dev/null
+++ b/packages/platform/src/Mailer.ts
@@ -0,0 +1,49 @@
+import type { Effect } from "effect";
+import { Context, Schema } from "effect";
+
+import type { PlatformRuntime } from "./PlatformRuntime.ts";
+
+/** Stable failure raised by a mail-delivery adapter. */
+export class MailerError extends Schema.TaggedErrorClass<MailerError>("MailerError")(
+  "MailerError",
+  {
+    cause: Schema.String,
+    operation: Schema.String,
+  },
+) {}
+
+/** Structured email mailbox. */
+export interface MailAddress {
+  readonly address: string;
+  readonly name?: string;
+}
+
+/** Provider-neutral email message input. */
+export interface MailMessage {
+  readonly from?: MailAddress;
+  readonly to: ReadonlyArray<MailAddress>;
+  readonly cc?: ReadonlyArray<MailAddress>;
+  readonly bcc?: ReadonlyArray<MailAddress>;
+  readonly replyTo?: MailAddress;
+  readonly subject: string;
+  readonly text?: string;
+  readonly html?: string;
+  readonly headers?: Readonly<Record<string, string>>;
+}
+
+/** Delivery acknowledgement returned by the SMTP server. */
+export interface MailDeliveryResult {
+  readonly messageId: string;
+  readonly accepted: ReadonlyArray<string>;
+  readonly rejected: ReadonlyArray<string>;
+}
+
+/** Provider-neutral mail-delivery capabilities. */
+export interface MailerShape {
+  readonly send: (
+    message: MailMessage,
+  ) => Effect.Effect<MailDeliveryResult, MailerError, PlatformRuntime>;
+}
+
+/** Provider-neutral transactional email delivery service. */
+export class Mailer extends Context.Service<Mailer, MailerShape>()("@voidhash/platform/Mailer") {}
diff --git a/packages/platform/src/ObjectStore.ts b/packages/platform/src/ObjectStore.ts
new file mode 100644
index 000000000..d79d2e569
--- /dev/null
+++ b/packages/platform/src/ObjectStore.ts
@@ -0,0 +1,56 @@
+import type { Effect, Option } from "effect";
+import { Context, Schema } from "effect";
+
+import type { PlatformRuntime } from "./PlatformRuntime.ts";
+
+/** Stable failure raised by an object-storage adapter. */
+export class ObjectStoreError extends Schema.TaggedErrorClass<ObjectStoreError>("ObjectStoreError")(
+  "ObjectStoreError",
+  {
+    bucketName: Schema.String,
+    cause: Schema.String,
+    key: Schema.String,
+    operation: Schema.String,
+  },
+) {}
+
+/** Raw bytes and metadata returned for a stored object. */
+export interface StoredObject {
+  readonly body: Uint8Array;
+  readonly contentType: string | null;
+  readonly etag: string | null;
+  readonly size: number;
+}
+
+/** Metadata returned without downloading an object body. */
+export interface StoredObjectHead {
+  readonly contentType: string | null;
+  readonly etag: string | null;
+  readonly size: number;
+}
+
+/** Input for an idempotent object write. */
+export interface PutObjectInput {
+  readonly key: string;
+  readonly body: Uint8Array;
+  readonly contentType?: string;
+  readonly cacheControl?: string;
+}
+
+/** Provider-neutral object-storage capabilities for one bucket. */
+export interface ObjectStoreShape {
+  readonly bucketName: string;
+  readonly put: (input: PutObjectInput) => Effect.Effect<void, ObjectStoreError, PlatformRuntime>;
+  readonly get: (
+    key: string,
+  ) => Effect.Effect<Option.Option<StoredObject>, ObjectStoreError, PlatformRuntime>;
+  readonly head: (
+    key: string,
+  ) => Effect.Effect<Option.Option<StoredObjectHead>, ObjectStoreError, PlatformRuntime>;
+  readonly delete: (key: string) => Effect.Effect<void, ObjectStoreError, PlatformRuntime>;
+}
+
+/** Provider-neutral object store for a bucket selected by its live layer. */
+export class ObjectStore extends Context.Service<ObjectStore, ObjectStoreShape>()(
+  "@voidhash/platform/ObjectStore",
+) {}
diff --git a/packages/platform/src/PlatformRuntime.ts b/packages/platform/src/PlatformRuntime.ts
new file mode 100644
index 000000000..b1fd4922f
--- /dev/null
+++ b/packages/platform/src/PlatformRuntime.ts
@@ -0,0 +1,11 @@
+import { Context } from "effect";
+
+export type PlatformRuntimeShape = Readonly<Record<never, never>>;
+
+/**
+ * Marks effects that may only execute inside a configured platform runtime.
+ * Runtime adapters provide this service at their handler boundaries.
+ */
+export class PlatformRuntime extends Context.Service<PlatformRuntime, PlatformRuntimeShape>()(
+  "@voidhash/platform/PlatformRuntime",
+) {}
diff --git a/packages/platform/src/Queue.ts b/packages/platform/src/Queue.ts
new file mode 100644
index 000000000..084a34a0f
--- /dev/null
+++ b/packages/platform/src/Queue.ts
@@ -0,0 +1,65 @@
+import type { Effect, Schema } from "effect";
+import { Context, Schema as EffectSchema } from "effect";
+
+import type { PlatformRuntime } from "./PlatformRuntime.ts";
+
+/** Stable failure raised when a typed queue message cannot be published. */
+export class QueueProducerError extends EffectSchema.TaggedErrorClass<QueueProducerError>(
+  "QueueProducerError",
+)("QueueProducerError", {
+  cause: EffectSchema.String,
+  queueName: EffectSchema.String,
+}) {}
+
+/** Provider-neutral typed queue publisher. */
+export interface QueueProducer<A> {
+  /** Publishes one schema-encoded message. */
+  readonly publish: (message: A) => Effect.Effect<void, QueueProducerError, PlatformRuntime>;
+  /** Atomically publishes a schema-encoded message batch when the adapter supports it. */
+  readonly publishBatch: (
+    messages: ReadonlyArray<A>,
+  ) => Effect.Effect<void, QueueProducerError, PlatformRuntime>;
+}
+
+/** Stable failure raised by a queue consumer driver. */
+export class QueueConsumerError extends EffectSchema.TaggedErrorClass<QueueConsumerError>(
+  "QueueConsumerError",
+)("QueueConsumerError", {
+  cause: EffectSchema.String,
+  queueName: EffectSchema.String,
+}) {}
+
+/** Provider-neutral delivery and retry policy for a queue consumer. */
+export interface QueueConsumerOptions {
+  readonly batchSize?: number;
+  readonly maxRetries?: number;
+  readonly retryDelayMillis?: number;
+  readonly visibilityTimeoutMillis?: number;
+  readonly pollIntervalMillis?: number;
+  readonly deadLetterQueue?: string;
+}
+
+/** Runtime queue capabilities shared by cloud and single-node adapters. */
+export interface QueueDriverShape {
+  /** Creates a typed producer for a logical queue. */
+  readonly producer: <A, I>(queueName: string, schema: Schema.Codec<A, I>) => QueueProducer<A>;
+  /** Claims and handles at most one available batch, returning its claimed row count. */
+  readonly processBatch: <A, I, R>(
+    queueName: string,
+    schema: Schema.Codec<A, I>,
+    handleBatch: (messages: ReadonlyArray<A>) => Effect.Effect<void, unknown, R>,
+    options?: QueueConsumerOptions,
+  ) => Effect.Effect<number, QueueConsumerError, PlatformRuntime | R>;
+  /** Polls and handles batches until the enclosing Effect scope is interrupted. */
+  readonly consumeBatch: <A, I, R>(
+    queueName: string,
+    schema: Schema.Codec<A, I>,
+    handleBatch: (messages: ReadonlyArray<A>) => Effect.Effect<void, unknown, R>,
+    options?: QueueConsumerOptions,
+  ) => Effect.Effect<never, QueueConsumerError, PlatformRuntime | R>;
+}
+
+/** Provider-neutral queue runtime used by application composition roots. */
+export class QueueDriver extends Context.Service<QueueDriver, QueueDriverShape>()(
+  "@voidhash/platform/QueueDriver",
+) {}
diff --git a/packages/platform/src/Screenshot.ts b/packages/platform/src/Screenshot.ts
new file mode 100644
index 000000000..3b97620e0
--- /dev/null
+++ b/packages/platform/src/Screenshot.ts
@@ -0,0 +1,33 @@
+import type { Effect } from "effect";
+import { Context, Schema } from "effect";
+
+import type { PlatformRuntime } from "./PlatformRuntime.ts";
+
+/** Stable failure raised by an HTML screenshot adapter. */
+export class ScreenshotError extends Schema.TaggedErrorClass<ScreenshotError>("ScreenshotError")(
+  "ScreenshotError",
+  {
+    cause: Schema.String,
+    operation: Schema.String,
+  },
+) {}
+
+/** Viewport and document input for a PNG screenshot. */
+export interface ScreenshotOptions {
+  readonly html: string;
+  readonly width: number;
+  readonly height: number;
+  readonly deviceScaleFactor: number;
+}
+
+/** Provider-neutral HTML screenshot capabilities. */
+export interface ScreenshotShape {
+  readonly renderPng: (
+    options: ScreenshotOptions,
+  ) => Effect.Effect<Uint8Array, ScreenshotError, PlatformRuntime>;
+}
+
+/** Provider-neutral renderer for self-contained HTML documents. */
+export class Screenshot extends Context.Service<Screenshot, ScreenshotShape>()(
+  "@voidhash/platform/Screenshot",
+) {}
diff --git a/packages/platform/src/Workflow.ts b/packages/platform/src/Workflow.ts
new file mode 100644
index 000000000..4eb65f756
--- /dev/null
+++ b/packages/platform/src/Workflow.ts
@@ -0,0 +1,125 @@
+import type { Effect, Option, Scope } from "effect";
+import { Context, Schema } from "effect";
+
+import type { PlatformRuntime } from "./PlatformRuntime.ts";
+
+/** Stable failure raised by a durable workflow runtime. */
+export class WorkflowRunnerError extends Schema.TaggedErrorClass<WorkflowRunnerError>(
+  "WorkflowRunnerError",
+)("WorkflowRunnerError", {
+  cause: Schema.String,
+  operation: Schema.String,
+  workflowName: Schema.String,
+}) {}
+
+/** Provider-neutral durable workflow definition. */
+export interface WorkflowDefinition<
+  Name extends string,
+  Payload extends Schema.Struct.Fields,
+  Success extends Schema.Top,
+> {
+  readonly name: Name;
+  readonly payload: Payload;
+  readonly success: Success;
+  readonly idempotencyKey: (payload: Schema.Struct.Type<Payload>) => string;
+}
+
+/** Options for one durable workflow activity. */
+export interface WorkflowStepOptions<Success extends Schema.Top, R> {
+  readonly name: string;
+  readonly success: Success;
+  readonly execute: Effect.Effect<Success["Type"], unknown, R>;
+}
+
+/** Durable operations available while a workflow handler is running. */
+export interface WorkflowHandlerContext {
+  readonly executionId: string;
+  readonly step: <Success extends Schema.Top, R>(
+    options: WorkflowStepOptions<Success, R>,
+  ) => Effect.Effect<Success["Type"], WorkflowRunnerError, PlatformRuntime | R>;
+  readonly sleepUntil: (
+    name: string,
+    scheduledTime: Date,
+  ) => Effect.Effect<void, WorkflowRunnerError, PlatformRuntime>;
+}
+
+/** Persisted state returned when polling a workflow execution. */
+export type WorkflowExecutionResult<A> =
+  | { readonly status: "interrupted" }
+  | { readonly status: "suspended" }
+  | { readonly status: "succeeded"; readonly value: A }
+  | { readonly status: "failed"; readonly error: WorkflowRunnerError };
+
+/** Provider-neutral durable workflow capabilities. */
+export interface WorkflowRunnerShape {
+  readonly register: <
+    Name extends string,
+    Payload extends Schema.Struct.Fields,
+    Success extends Schema.Top,
+    R,
+  >(
+    workflow: WorkflowDefinition<Name, Payload, Success>,
+    handler: (
+      payload: Schema.Struct.Type<Payload>,
+      context: WorkflowHandlerContext,
+    ) => Effect.Effect<Success["Type"], unknown, R>,
+  ) => Effect.Effect<void, WorkflowRunnerError, Scope.Scope | PlatformRuntime | R>;
+  readonly dispatch: <
+    Name extends string,
+    Payload extends Schema.Struct.Fields,
+    Success extends Schema.Top,
+  >(
+    workflow: WorkflowDefinition<Name, Payload, Success>,
+    payload: Schema.Struct.Type<Payload>,
+  ) => Effect.Effect<string, WorkflowRunnerError, PlatformRuntime>;
+  readonly execute: <
+    Name extends string,
+    Payload extends Schema.Struct.Fields,
+    Success extends Schema.Top,
+  >(
+    workflow: WorkflowDefinition<Name, Payload, Success>,
+    payload: Schema.Struct.Type<Payload>,
+  ) => Effect.Effect<Success["Type"], WorkflowRunnerError, PlatformRuntime>;
+  readonly poll: <
+    Name extends string,
+    Payload extends Schema.Struct.Fields,
+    Success extends Schema.Top,
+  >(
+    workflow: WorkflowDefinition<Name, Payload, Success>,
+    executionId: string,
+  ) => Effect.Effect<
+    Option.Option<WorkflowExecutionResult<Success["Type"]>>,
+    WorkflowRunnerError,
+    PlatformRuntime
+  >;
+  readonly resume: <
+    Name extends string,
+    Payload extends Schema.Struct.Fields,
+    Success extends Schema.Top,
+  >(
+    workflow: WorkflowDefinition<Name, Payload, Success>,
+    executionId: string,
+  ) => Effect.Effect<void, WorkflowRunnerError, PlatformRuntime>;
+  readonly interrupt: <
+    Name extends string,
+    Payload extends Schema.Struct.Fields,
+    Success extends Schema.Top,
+  >(
+    workflow: WorkflowDefinition<Name, Payload, Success>,
+    executionId: string,
+  ) => Effect.Effect<void, WorkflowRunnerError, PlatformRuntime>;
+}
+
+/** Provider-neutral durable workflow runtime used by composition roots. */
+export class WorkflowRunner extends Context.Service<WorkflowRunner, WorkflowRunnerShape>()(
+  "@voidhash/platform/WorkflowRunner",
+) {}
+
+/** Defines a provider-neutral workflow while preserving schema inference. */
+export const defineWorkflow = <
+  const Name extends string,
+  Payload extends Schema.Struct.Fields,
+  Success extends Schema.Top,
+>(
+  definition: WorkflowDefinition<Name, Payload, Success>,
+): WorkflowDefinition<Name, Payload, Success> => definition;
diff --git a/packages/platform/src/index.ts b/packages/platform/src/index.ts
new file mode 100644
index 000000000..3e5d761a1
--- /dev/null
+++ b/packages/platform/src/index.ts
@@ -0,0 +1,68 @@
+export {
+  type CronJob,
+  type CronJobContext,
+  type CronRunOptions,
+  CronScheduler,
+  CronSchedulerError,
+  type CronSchedulerShape,
+} from "./CronScheduler.ts";
+export {
+  DurableEntityHost,
+  makeDurableEntityAddress,
+  type DurableEntityAddress,
+  type DurableEntityAlarm,
+  type DurableEntityContext,
+  type DurableEntityHostShape,
+  type DurableEntityKeyValue,
+  type DurableEntitySession,
+  type DurableEntitySessions,
+  type DurableEntitySql,
+} from "./DurableEntity.ts";
+export {
+  type KeyValueEntry,
+  type KeyValuePutOptions,
+  KeyValueStore,
+  KeyValueStoreError,
+  type KeyValueStoreShape,
+} from "./KeyValueStore.ts";
+export {
+  type MailAddress,
+  type MailDeliveryResult,
+  Mailer,
+  MailerError,
+  type MailerShape,
+  type MailMessage,
+} from "./Mailer.ts";
+export {
+  ObjectStore,
+  ObjectStoreError,
+  type ObjectStoreShape,
+  type PutObjectInput,
+  type StoredObject,
+  type StoredObjectHead,
+} from "./ObjectStore.ts";
+export { PlatformRuntime, type PlatformRuntimeShape } from "./PlatformRuntime.ts";
+export {
+  QueueConsumerError,
+  type QueueConsumerOptions,
+  QueueDriver,
+  type QueueDriverShape,
+  QueueProducerError,
+  type QueueProducer,
+} from "./Queue.ts";
+export {
+  Screenshot,
+  ScreenshotError,
+  type ScreenshotOptions,
+  type ScreenshotShape,
+} from "./Screenshot.ts";
+export {
+  defineWorkflow,
+  type WorkflowDefinition,
+  type WorkflowExecutionResult,
+  type WorkflowHandlerContext,
+  WorkflowRunner,
+  WorkflowRunnerError,
+  type WorkflowRunnerShape,
+  type WorkflowStepOptions,
+} from "./Workflow.ts";
diff --git a/packages/platform/tsconfig.json b/packages/platform/tsconfig.json
new file mode 100644
index 000000000..c530b0614
--- /dev/null
+++ b/packages/platform/tsconfig.json
@@ -0,0 +1,5 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index bd6470caa..0cd8fd517 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -583,6 +583,18 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
 
+  packages/platform:
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+
   packages/shared:
     dependencies:
       effect:
@@ -7718,6 +7730,11 @@ packages:
     engines: {node: '>=14.17'}
     hasBin: true
 
+  typescript@6.0.3:
+    resolution: {integrity: sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==}
+    engines: {node: '>=14.17'}
+    hasBin: true
+
   ufo@1.6.1:
     resolution: {integrity: sha512-9a4/uxlTWJ4+a5i0ooc1rU7C7YOw3wT+UGqdeNNHWnOF9qcMBgLRS+4IYUqbczewFx4mLEig6gawh7X6mFlEkA==}
 
@@ -16347,6 +16364,8 @@ snapshots:
 
   typescript@5.9.3: {}
 
+  typescript@6.0.3: {}
+
   ufo@1.6.1: {}
 
   ufo@1.6.4: {}

From d16d1fffa89ad462e7d4b7d454be959cf19e8e60 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 15:48:55 +0200
Subject: [PATCH 048/129] feat(ui): publish shared service components

---
 packages/ui/LICENSE.md                        |  661 +++
 packages/ui/THIRD_PARTY_NOTICES.md            |   25 +
 packages/ui/components.json                   |   21 +
 packages/ui/components/copy-text.tsx          |   33 +
 .../ui/components/data-table-skeleton.tsx     |   19 +
 packages/ui/components/error-card.tsx         |   30 +
 packages/ui/components/gradient-avatar.tsx    |  239 +
 packages/ui/components/info-tooltip.tsx       |   33 +
 packages/ui/components/logo.tsx               |   51 +
 packages/ui/components/page.tsx               |   36 +
 .../ui/components/settings-card-skeleton.tsx  |   42 +
 packages/ui/components/spinner.tsx            |   26 +
 .../ui/components/theme-provider-tanstack.tsx |  366 ++
 packages/ui/components/theme-provider.tsx     |   12 +
 packages/ui/components/theme-toggle.tsx       |   45 +
 packages/ui/components/ui/accordion.tsx       |   63 +
 packages/ui/components/ui/alert-dialog.tsx    |  180 +
 packages/ui/components/ui/alert.tsx           |   63 +
 packages/ui/components/ui/aspect-ratio.tsx    |    7 +
 packages/ui/components/ui/attachment.tsx      |  192 +
 packages/ui/components/ui/avatar.tsx          |   42 +
 packages/ui/components/ui/badge.tsx           |   45 +
 packages/ui/components/ui/breadcrumb.tsx      |  110 +
 packages/ui/components/ui/bubble.tsx          |  125 +
 packages/ui/components/ui/button.tsx          |   67 +
 packages/ui/components/ui/calendar.tsx        |   88 +
 packages/ui/components/ui/card.tsx            |  101 +
 packages/ui/components/ui/carousel.tsx        |  237 +
 packages/ui/components/ui/chart.tsx           |  326 ++
 packages/ui/components/ui/checkbox.tsx        |   30 +
 packages/ui/components/ui/collapsible.tsx     |   19 +
 packages/ui/components/ui/combobox.tsx        |  270 ++
 packages/ui/components/ui/command.tsx         |  149 +
 packages/ui/components/ui/context-menu.tsx    |  237 +
 packages/ui/components/ui/dialog.tsx          |  135 +
 packages/ui/components/ui/drawer.tsx          |  120 +
 packages/ui/components/ui/dropdown-menu.tsx   |  240 +
 packages/ui/components/ui/dropzone.tsx        |  106 +
 packages/ui/components/ui/field.tsx           |  222 +
 packages/ui/components/ui/form.tsx            |  154 +
 packages/ui/components/ui/hover-card.tsx      |   37 +
 packages/ui/components/ui/input-group.tsx     |  144 +
 packages/ui/components/ui/input-otp.tsx       |   73 +
 packages/ui/components/ui/input.tsx           |   38 +
 packages/ui/components/ui/label.tsx           |   21 +
 packages/ui/components/ui/marker.tsx          |   66 +
 packages/ui/components/ui/menubar.tsx         |  251 +
 .../ui/components/ui/message-scroller.tsx     |  130 +
 packages/ui/components/ui/message.tsx         |   85 +
 packages/ui/components/ui/navigation-menu.tsx |  162 +
 packages/ui/components/ui/pagination.tsx      |  106 +
 packages/ui/components/ui/popover.tsx         |   43 +
 packages/ui/components/ui/progress.tsx        |   27 +
 packages/ui/components/ui/radio-group.tsx     |   46 +
 packages/ui/components/ui/resizable.tsx       |   51 +
 packages/ui/components/ui/scroll-area.tsx     |  123 +
 packages/ui/components/ui/select.tsx          |  184 +
 packages/ui/components/ui/separator.tsx       |   26 +
 packages/ui/components/ui/sheet.tsx           |  135 +
 packages/ui/components/ui/sidebar.tsx         |  697 +++
 packages/ui/components/ui/skeleton.tsx        |   13 +
 packages/ui/components/ui/slider.tsx          |   59 +
 packages/ui/components/ui/sonner.tsx          |   23 +
 packages/ui/components/ui/switch.tsx          |   29 +
 packages/ui/components/ui/table.tsx           |  102 +
 packages/ui/components/ui/tabs.tsx            |   55 +
 packages/ui/components/ui/textarea.tsx        |   18 +
 packages/ui/components/ui/toggle-group.tsx    |  144 +
 packages/ui/components/ui/toggle.tsx          |   47 +
 packages/ui/components/ui/tooltip.tsx         |  139 +
 packages/ui/components/ui/underline-tabs.tsx  |   61 +
 packages/ui/hooks/use-confirmation-dialog.tsx |  103 +
 packages/ui/hooks/use-mobile.ts               |   21 +
 packages/ui/index.ts                          |   68 +
 packages/ui/lib/utils.ts                      |    6 +
 packages/ui/package.json                      |  113 +
 packages/ui/styles/brand-theme.css            |  892 ++++
 packages/ui/tsconfig.json                     |    8 +
 pnpm-lock.yaml                                | 4197 +++++++++++++----
 79 files changed, 12536 insertions(+), 974 deletions(-)
 create mode 100644 packages/ui/LICENSE.md
 create mode 100644 packages/ui/THIRD_PARTY_NOTICES.md
 create mode 100644 packages/ui/components.json
 create mode 100644 packages/ui/components/copy-text.tsx
 create mode 100644 packages/ui/components/data-table-skeleton.tsx
 create mode 100644 packages/ui/components/error-card.tsx
 create mode 100644 packages/ui/components/gradient-avatar.tsx
 create mode 100644 packages/ui/components/info-tooltip.tsx
 create mode 100644 packages/ui/components/logo.tsx
 create mode 100644 packages/ui/components/page.tsx
 create mode 100644 packages/ui/components/settings-card-skeleton.tsx
 create mode 100644 packages/ui/components/spinner.tsx
 create mode 100644 packages/ui/components/theme-provider-tanstack.tsx
 create mode 100644 packages/ui/components/theme-provider.tsx
 create mode 100644 packages/ui/components/theme-toggle.tsx
 create mode 100644 packages/ui/components/ui/accordion.tsx
 create mode 100644 packages/ui/components/ui/alert-dialog.tsx
 create mode 100644 packages/ui/components/ui/alert.tsx
 create mode 100644 packages/ui/components/ui/aspect-ratio.tsx
 create mode 100644 packages/ui/components/ui/attachment.tsx
 create mode 100644 packages/ui/components/ui/avatar.tsx
 create mode 100644 packages/ui/components/ui/badge.tsx
 create mode 100644 packages/ui/components/ui/breadcrumb.tsx
 create mode 100644 packages/ui/components/ui/bubble.tsx
 create mode 100644 packages/ui/components/ui/button.tsx
 create mode 100644 packages/ui/components/ui/calendar.tsx
 create mode 100644 packages/ui/components/ui/card.tsx
 create mode 100644 packages/ui/components/ui/carousel.tsx
 create mode 100644 packages/ui/components/ui/chart.tsx
 create mode 100644 packages/ui/components/ui/checkbox.tsx
 create mode 100644 packages/ui/components/ui/collapsible.tsx
 create mode 100644 packages/ui/components/ui/combobox.tsx
 create mode 100644 packages/ui/components/ui/command.tsx
 create mode 100644 packages/ui/components/ui/context-menu.tsx
 create mode 100644 packages/ui/components/ui/dialog.tsx
 create mode 100644 packages/ui/components/ui/drawer.tsx
 create mode 100644 packages/ui/components/ui/dropdown-menu.tsx
 create mode 100644 packages/ui/components/ui/dropzone.tsx
 create mode 100644 packages/ui/components/ui/field.tsx
 create mode 100644 packages/ui/components/ui/form.tsx
 create mode 100644 packages/ui/components/ui/hover-card.tsx
 create mode 100644 packages/ui/components/ui/input-group.tsx
 create mode 100644 packages/ui/components/ui/input-otp.tsx
 create mode 100644 packages/ui/components/ui/input.tsx
 create mode 100644 packages/ui/components/ui/label.tsx
 create mode 100644 packages/ui/components/ui/marker.tsx
 create mode 100644 packages/ui/components/ui/menubar.tsx
 create mode 100644 packages/ui/components/ui/message-scroller.tsx
 create mode 100644 packages/ui/components/ui/message.tsx
 create mode 100644 packages/ui/components/ui/navigation-menu.tsx
 create mode 100644 packages/ui/components/ui/pagination.tsx
 create mode 100644 packages/ui/components/ui/popover.tsx
 create mode 100644 packages/ui/components/ui/progress.tsx
 create mode 100644 packages/ui/components/ui/radio-group.tsx
 create mode 100644 packages/ui/components/ui/resizable.tsx
 create mode 100644 packages/ui/components/ui/scroll-area.tsx
 create mode 100644 packages/ui/components/ui/select.tsx
 create mode 100644 packages/ui/components/ui/separator.tsx
 create mode 100644 packages/ui/components/ui/sheet.tsx
 create mode 100644 packages/ui/components/ui/sidebar.tsx
 create mode 100644 packages/ui/components/ui/skeleton.tsx
 create mode 100644 packages/ui/components/ui/slider.tsx
 create mode 100644 packages/ui/components/ui/sonner.tsx
 create mode 100644 packages/ui/components/ui/switch.tsx
 create mode 100644 packages/ui/components/ui/table.tsx
 create mode 100644 packages/ui/components/ui/tabs.tsx
 create mode 100644 packages/ui/components/ui/textarea.tsx
 create mode 100644 packages/ui/components/ui/toggle-group.tsx
 create mode 100644 packages/ui/components/ui/toggle.tsx
 create mode 100644 packages/ui/components/ui/tooltip.tsx
 create mode 100644 packages/ui/components/ui/underline-tabs.tsx
 create mode 100644 packages/ui/hooks/use-confirmation-dialog.tsx
 create mode 100644 packages/ui/hooks/use-mobile.ts
 create mode 100644 packages/ui/index.ts
 create mode 100644 packages/ui/lib/utils.ts
 create mode 100644 packages/ui/package.json
 create mode 100644 packages/ui/styles/brand-theme.css
 create mode 100644 packages/ui/tsconfig.json

diff --git a/packages/ui/LICENSE.md b/packages/ui/LICENSE.md
new file mode 100644
index 000000000..19bae3588
--- /dev/null
+++ b/packages/ui/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+Everyone is permitted to copy and distribute verbatim copies
+of this license document, but changing it is not allowed.
+
+                            Preamble
+
+The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works. By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+When we speak of free software, we are referring to freedom, not
+price. Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate. Many developers of free software are heartened and
+encouraged by the resulting cooperation. However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community. It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server. Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals. This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+0. Definitions.
+
+"This License" refers to version 3 of the GNU Affero General Public License.
+
+"Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+"The Program" refers to any copyrightable work licensed under this
+License. Each licensee is addressed as "you". "Licensees" and
+"recipients" may be individuals or organizations.
+
+To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy. The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy. Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies. Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License. If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+1. Source Code.
+
+The "source code" for a work means the preferred form of the work
+for making modifications to it. "Object code" means any non-source
+form of a work.
+
+A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form. A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities. However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work. For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+The Corresponding Source for a work in source code form is that
+same work.
+
+2. Basic Permissions.
+
+All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met. This License explicitly affirms your unlimited
+permission to run the unmodified Program. The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work. This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force. You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright. Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+Conveying under any other circumstances is permitted solely under
+the conditions stated below. Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+4. Conveying Verbatim Copies.
+
+You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+5. Conveying Modified Source Versions.
+
+You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit. Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+6. Conveying Non-Source Forms.
+
+You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling. In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage. For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product. A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+"Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source. The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information. But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed. Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+7. Additional Terms.
+
+"Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law. If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it. (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.) You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10. If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term. If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+8. Termination.
+
+You may not propagate or modify a covered work except as expressly
+provided under this License. Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License. If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+9. Acceptance Not Required for Having Copies.
+
+You are not required to accept this License in order to receive or
+run a copy of the Program. Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance. However,
+nothing other than this License grants you permission to propagate or
+modify any covered work. These actions infringe copyright if you do
+not accept this License. Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+10. Automatic Licensing of Downstream Recipients.
+
+Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License. You are not responsible
+for enforcing compliance by third parties with this License.
+
+An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations. If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License. For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+11. Patents.
+
+A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based. The
+work thus licensed is called the contributor's "contributor version".
+
+A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version. For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement). To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients. "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License. You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+12. No Surrender of Others' Freedom.
+
+If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License. If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all. For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+13. Remote Network Interaction; Use with the GNU General Public License.
+
+Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software. This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work. The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+14. Revised Versions of this License.
+
+The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time. Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number. If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation. If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+Later license versions may give you additional or different
+permissions. However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+15. Disclaimer of Warranty.
+
+THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+16. Limitation of Liability.
+
+IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+17. Interpretation of Sections 15 and 16.
+
+If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+To do so, attach the following notices to the program. It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source. For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code. There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/ui/THIRD_PARTY_NOTICES.md b/packages/ui/THIRD_PARTY_NOTICES.md
new file mode 100644
index 000000000..5b0434afa
--- /dev/null
+++ b/packages/ui/THIRD_PARTY_NOTICES.md
@@ -0,0 +1,25 @@
+# Third-party notices
+
+`components/theme-provider-tanstack.tsx` is adapted from next-themes.
+
+MIT License
+
+Copyright (c) 2022 Paco Coursey
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/ui/components.json b/packages/ui/components.json
new file mode 100644
index 000000000..1b87c2bdd
--- /dev/null
+++ b/packages/ui/components.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://ui.shadcn.com/schema.json",
+  "style": "new-york",
+  "rsc": false,
+  "tsx": true,
+  "tailwind": {
+    "config": "",
+    "css": "styles/brand-theme.css",
+    "baseColor": "neutral",
+    "cssVariables": true,
+    "prefix": ""
+  },
+  "aliases": {
+    "components": "@/components",
+    "utils": "@/lib/utils",
+    "ui": "@/components/ui",
+    "lib": "@/lib",
+    "hooks": "@/hooks"
+  },
+  "iconLibrary": "lucide"
+}
diff --git a/packages/ui/components/copy-text.tsx b/packages/ui/components/copy-text.tsx
new file mode 100644
index 000000000..202a6eac0
--- /dev/null
+++ b/packages/ui/components/copy-text.tsx
@@ -0,0 +1,33 @@
+import { CopyIcon } from "lucide-react";
+import { toast } from "sonner";
+
+import { cn } from "../lib/utils";
+import { Button } from "./ui/button";
+import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "./ui/tooltip";
+
+export function CopyText({ text, className }: { text: string; className?: string }) {
+  const handleCopy = async (e: React.MouseEvent<HTMLButtonElement>) => {
+    e.preventDefault();
+    await navigator.clipboard.writeText(text);
+
+    toast.success("Copied to clipboard");
+  };
+
+  return (
+    <div className={cn("flex items-center space-x-4", className)}>
+      <span className="w-32 min-w-0 flex-1 whitespace-pre-wrap break-words ">{text}</span>
+      <TooltipProvider>
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <Button className="z-20" onClick={handleCopy} size="icon" variant="outline">
+              <CopyIcon className="h-4 w-4" />
+            </Button>
+          </TooltipTrigger>
+          <TooltipContent>
+            <p>Click to copy</p>
+          </TooltipContent>
+        </Tooltip>
+      </TooltipProvider>
+    </div>
+  );
+}
diff --git a/packages/ui/components/data-table-skeleton.tsx b/packages/ui/components/data-table-skeleton.tsx
new file mode 100644
index 000000000..9d15e7bcf
--- /dev/null
+++ b/packages/ui/components/data-table-skeleton.tsx
@@ -0,0 +1,19 @@
+import { Skeleton } from "./ui/skeleton";
+import { Table, TableCell, TableRow } from "./ui/table";
+
+export function DataTableSkeleton() {
+  return (
+    <div className="rounded-md border">
+      <Table>
+        {Array.from({ length: 10 }).map((_, index) => (
+          // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+          <TableRow key={index}>
+            <TableCell>
+              <Skeleton className="h-4 w-full" />
+            </TableCell>
+          </TableRow>
+        ))}
+      </Table>
+    </div>
+  );
+}
diff --git a/packages/ui/components/error-card.tsx b/packages/ui/components/error-card.tsx
new file mode 100644
index 000000000..fd5986e65
--- /dev/null
+++ b/packages/ui/components/error-card.tsx
@@ -0,0 +1,30 @@
+"use client";
+
+import { cn } from "../lib/utils";
+import { Logo } from "./logo";
+import { Button } from "./ui/button";
+
+export function ErrorCard({
+  title,
+  description,
+  onRetry,
+  className,
+}: {
+  title: string;
+  description: string;
+  className?: string;
+  onRetry: () => void;
+}) {
+  return (
+    <div className={cn("flex flex-1 flex-col items-center justify-center gap-6", className)}>
+      <a href="/">
+        <Logo />
+      </a>
+      <div className="flex flex-col items-center justify-center gap-3">
+        <h1 className="font-bold text-2xl">{title}</h1>
+        <p className="text-muted-foreground text-sm">{description}</p>
+      </div>
+      <Button onClick={onRetry}>Retry</Button>
+    </div>
+  );
+}
diff --git a/packages/ui/components/gradient-avatar.tsx b/packages/ui/components/gradient-avatar.tsx
new file mode 100644
index 000000000..89d774e88
--- /dev/null
+++ b/packages/ui/components/gradient-avatar.tsx
@@ -0,0 +1,239 @@
+import { cn } from "../lib/utils";
+import { Avatar, AvatarFallback, AvatarImage } from "./ui/avatar";
+
+function simpleHash(str: string): number {
+  let hash = 0;
+  for (let i = 0; i < str.length; i++) {
+    const char = str.codePointAt(i) ?? 0;
+    // biome-ignore lint/nursery/noBitwiseOperators: required
+    hash = (hash << 5) - hash + char;
+    // biome-ignore lint/style/useShorthandAssign: required
+    // biome-ignore lint/nursery/noBitwiseOperators: required
+    hash &= hash; // Convert to 32-bit integer
+  }
+  return Math.abs(hash);
+}
+
+/**
+ * Convert HSL to RGB
+ *
+ * @see {@link http://zh.wikipedia.org/wiki/HSL和HSV色彩空间} for further information.
+ * @param {Number} H Hue ∈ [0, 360)
+ * @param {Number} S Saturation ∈ [0, 1]
+ * @param {Number} L Lightness ∈ [0, 1]
+ * @returns {Array} R, G, B ∈ [0, 255]
+ */
+const HSL2RGB = (HBase: number, S: number, L: number) => {
+  const H = HBase / 360;
+
+  const q = L < 0.5 ? L * (1 + S) : L + S - L * S;
+  const p = 2 * L - q;
+
+  return [H + 1 / 3, H, H - 1 / 3].map((c) => {
+    let color = c; // To prevent parameter assignment
+    if (color < 0) {
+      color++;
+    }
+    if (color > 1) {
+      color--;
+    }
+    if (color < 1 / 6) {
+      color = p + (q - p) * 6 * color;
+    } else if (color < 0.5) {
+      color = q;
+    } else if (color < 2 / 3) {
+      color = p + (q - p) * 6 * (2 / 3 - color);
+    } else {
+      color = p;
+    }
+    return Math.round(color * 255);
+  });
+};
+
+/**
+ * Convert RGB Array to HEX
+ *
+ * @param {Array} RGBArray - [R, G, B]
+ * @returns {String} 6 digits hex starting with #
+ */
+const RGB2HEX = (RGBArray: number[]) => {
+  let hex = "#";
+  for (const value of RGBArray) {
+    if (value < 16) {
+      hex += 0;
+    }
+    hex += value.toString(16);
+  }
+  return hex;
+};
+
+class ColorHash {
+  L: number[];
+  S: number[];
+  hueRanges: { max: number; min: number }[];
+  // hash: (str: string) => number;
+
+  constructor(
+    options: {
+      lightness?: number | number[];
+      saturation?: number | number[];
+      hue?: number | { max: number; min: number } | { max: number; min: number }[];
+      hash?: string | ((str: string) => number);
+    } = {},
+  ) {
+    const [L, S] = [options.lightness, options.saturation].map((param) => {
+      const paramValue = param !== undefined ? param : [0.35, 0.5, 0.65]; // note that 3 is a prime
+      return Array.isArray(paramValue) ? paramValue.concat() : [paramValue];
+    });
+
+    // biome-ignore lint/style/noNonNullAssertion: required
+    this.L = L!;
+    // biome-ignore lint/style/noNonNullAssertion: required
+    this.S = S!;
+
+    if (typeof options.hue === "number") {
+      options.hue = { max: options.hue, min: options.hue };
+    }
+    if (typeof options.hue === "object" && !Array.isArray(options.hue)) {
+      options.hue = [options.hue];
+    }
+    if (typeof options.hue === "undefined") {
+      options.hue = [];
+    }
+    this.hueRanges = options.hue.map((range) => ({
+      max: typeof range.max === "undefined" ? 360 : range.max,
+      min: typeof range.min === "undefined" ? 0 : range.min,
+    }));
+  }
+
+  /**
+   * Returns the hash in [h, s, l].
+   * Note that H ∈ [0, 360); S ∈ [0, 1]; L ∈ [0, 1];
+   *
+   * @param {String} str string to hash
+   * @returns {Array} [h, s, l]
+   */
+  hsl(str: string): [number, number, number] {
+    let hash = simpleHash(str);
+    const hueResolution = 727;
+    let H: number;
+    // biome-ignore lint/style/useConst: let me live
+    let S: number;
+    // biome-ignore lint/style/useConst: let me live
+    let L: number;
+
+    if (this.hueRanges.length) {
+      // biome-ignore lint/style/noNonNullAssertion: required
+      const range = this.hueRanges[hash % this.hueRanges.length]!;
+      H =
+        (((hash / this.hueRanges.length) % hueResolution) * (range.max - range.min)) /
+          hueResolution +
+        range.min;
+    } else {
+      H = hash % 359;
+    }
+    hash = Math.ceil(hash / 360);
+    // biome-ignore lint/style/noNonNullAssertion: required
+    S = this.S[hash % this.S.length]!;
+    hash = Math.ceil(hash / this.S.length);
+    // biome-ignore lint/style/noNonNullAssertion: required
+    L = this.L[hash % this.L.length]!;
+
+    // biome-ignore lint/style/noNonNullAssertion: required
+    return [H, S!, L!];
+  }
+
+  /**
+   * Returns the hash in [r, g, b].
+   * Note that R, G, B ∈ [0, 255]
+   *
+   * @param {String} str string to hash
+   * @returns {Array} [r, g, b]
+   */
+  rgb(str: string) {
+    const hsl = this.hsl(str);
+    return HSL2RGB.apply(this, hsl);
+  }
+
+  /**
+   * Returns the hash in hex
+   *
+   * @param {String} str string to hash
+   * @returns {String} hex with #
+   */
+  hex(str: string) {
+    const rgb = this.rgb(str);
+    return RGB2HEX(rgb);
+  }
+
+  hexPair(str: string) {
+    const s1Hsl = this.hsl(str);
+    const s2Hsl = [(s1Hsl[0] + 87) % 360, s1Hsl[1], s1Hsl[2]];
+    const rgb1 = HSL2RGB.apply(this, s1Hsl);
+    const rgb2 = HSL2RGB.apply(this, s2Hsl as [number, number, number]);
+    const hex1 = RGB2HEX(rgb1);
+    const hex2 = RGB2HEX(rgb2);
+    return [hex1, hex2];
+  }
+}
+
+const colorHash = new ColorHash({ saturation: 1 });
+
+const stringToColours = (s: string): string[] => colorHash.hexPair(s);
+
+const generateColours = (s: string): [string, string] => {
+  const s1 = s.slice(0, s.length / 2);
+  const [c1, c2] = stringToColours(s1);
+  // biome-ignore lint/style/noNonNullAssertion: required
+  return [c1!, c2!];
+};
+
+const generateDataUrl = (s: string): string => {
+  const [c1, c2] = generateColours(s ?? "null");
+  const size = 256;
+  const svg = `
+<svg width="${size}" height="${size}" viewBox="0 0 ${size} ${size}" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <circle cx="${size / 2}" cy="${size / 2}" r="${size / 2}" fill="url(#gradient)" />
+  <defs>
+    <linearGradient id="gradient" x1="0" y1="0" x2="${size}" y2="${size}" gradientUnits="userSpaceOnUse">
+      <stop stop-color="${c1}" />
+      <stop offset="1" stop-color="${c2}" />
+    </linearGradient>
+  </defs>
+</svg>
+  `.trim();
+
+  return `data:image/svg+xml;base64,${btoa(svg)}`;
+};
+
+export function GradientAvatar({
+  src,
+  className,
+  alt,
+  fallback,
+  gradientUrl,
+}: {
+  src?: string;
+  className?: string;
+  alt: string;
+  fallback: string;
+  gradientUrl?: string;
+}) {
+  // Generate gradient data URL if no src or gradientUrl is provided
+  const avatarSrc = src ?? gradientUrl ?? generateDataUrl(fallback);
+
+  return (
+    // Avatars are always circular — force `rounded-full` to win over any
+    // `rounded-*` a call site passes (the root's `overflow-hidden` clips the
+    // image/gradient to the circle).
+    <Avatar className={cn(className, "rounded-full")}>
+      {src ? (
+        <AvatarImage alt={alt} src={avatarSrc} />
+      ) : (
+        // biome-ignore lint/performance/noImgElement: custom image loading
+        <img alt={alt} className="aspect-square size-full" src={avatarSrc} />
+      )}
+      <AvatarFallback>{fallback?.slice(0, 2)}</AvatarFallback>
+    </Avatar>
+  );
+}
diff --git a/packages/ui/components/info-tooltip.tsx b/packages/ui/components/info-tooltip.tsx
new file mode 100644
index 000000000..1e979791e
--- /dev/null
+++ b/packages/ui/components/info-tooltip.tsx
@@ -0,0 +1,33 @@
+"use client";
+
+import { Tooltip, TooltipContent, TooltipTrigger } from "@voidhash/ui";
+import { InfoIcon } from "lucide-react";
+import { useState } from "react";
+import { useDebouncedCallback } from "use-debounce";
+
+export function InfoTooltip({ info }: { info: string }) {
+  const [showAppUserIdTooltip, setShowAppUserIdTooltip] = useState(false);
+  const debouncedShowAppUserIdTooltip = useDebouncedCallback(
+    // function
+    (value: boolean) => {
+      setShowAppUserIdTooltip(value);
+    },
+    // delay in ms
+    40,
+  );
+  return (
+    <Tooltip open={showAppUserIdTooltip}>
+      <TooltipTrigger
+        onMouseEnter={() => debouncedShowAppUserIdTooltip(true)}
+        onMouseLeave={() => debouncedShowAppUserIdTooltip(false)}
+      >
+        <div className="p-px">
+          <InfoIcon className="h-4 w-4 text-muted-foreground" />
+        </div>
+      </TooltipTrigger>
+      <TooltipContent className="max-w-sm">
+        <p>{info}</p>
+      </TooltipContent>
+    </Tooltip>
+  );
+}
diff --git a/packages/ui/components/logo.tsx b/packages/ui/components/logo.tsx
new file mode 100644
index 000000000..fb02201c9
--- /dev/null
+++ b/packages/ui/components/logo.tsx
@@ -0,0 +1,51 @@
+import type { SVGProps } from "react";
+
+import { cn } from "../lib/utils";
+
+export const Logo = ({
+  className,
+  variant = "default",
+  color = "mono",
+}: SVGProps<SVGSVGElement> & {
+  variant?: "default" | "short" | "symbol";
+  color?: "dual-tone" | "mono";
+}) => {
+  const symbolColor = color === "dual-tone" ? "#005EFF" : "currentColor";
+
+  if (variant === "symbol") {
+    return (
+      <svg
+        className={cn("h-4 text-black dark:text-white", className)}
+        fill="none"
+        viewBox="0 0 120 61"
+        xmlns="http://www.w3.org/2000/svg"
+      >
+        <title>Voidhash</title>
+        <path
+          d="M60 30.5L90 0L120 0L120 30.5L90 30.5V61H60L60 30.5ZM0 30.5L30 30.5L30 0L60 0V30.5L30 61H0V30.5Z"
+          fill={symbolColor}
+        />
+      </svg>
+    );
+  }
+
+  // Default and short variants use the full logo
+  return (
+    <svg
+      className={cn("h-6 text-black dark:text-white", className)}
+      fill="none"
+      viewBox="0 0 414 78"
+      xmlns="http://www.w3.org/2000/svg"
+    >
+      <title>Voidhash</title>
+      <path
+        d="M60 39L90 8.5L120 8.5L120 39H90V69.5L60 69.5L60 39ZM0 39H30L30 8.5L60 8.5V39L30 69.5H0V39Z"
+        fill={symbolColor}
+      />
+      <path
+        d="M162.631 16.27L175.861 53.377L188.965 16.27H196.273L180.082 61H171.577L155.386 16.27H162.631ZM211.365 61.756C208.173 61.756 205.38 61.042 202.986 59.614C200.592 58.186 198.723 56.17 197.379 53.566C196.077 50.92 195.426 47.833 195.426 44.305C195.426 40.777 196.077 37.711 197.379 35.107C198.723 32.461 200.592 30.424 202.986 28.996C205.38 27.568 208.173 26.854 211.365 26.854C214.515 26.854 217.287 27.568 219.681 28.996C222.075 30.424 223.923 32.461 225.225 35.107C226.569 37.711 227.241 40.777 227.241 44.305C227.241 47.833 226.569 50.92 225.225 53.566C223.923 56.17 222.075 58.186 219.681 59.614C217.287 61.042 214.515 61.756 211.365 61.756ZM211.365 55.96C214.179 55.96 216.363 54.931 217.917 52.873C219.513 50.815 220.311 47.959 220.311 44.305C220.311 40.651 219.513 37.795 217.917 35.737C216.363 33.679 214.179 32.65 211.365 32.65C208.551 32.65 206.346 33.679 204.75 35.737C203.154 37.753 202.356 40.609 202.356 44.305C202.356 48.001 203.154 50.878 204.75 52.936C206.346 54.952 208.551 55.96 211.365 55.96ZM238.404 27.61V61H231.726V27.61H238.404ZM238.593 16.333V22.696H231.6V16.333H238.593ZM268.259 16.27H274.937V61H268.7L268.511 56.212C267.545 57.934 266.138 59.299 264.29 60.307C262.442 61.273 260.384 61.756 258.116 61.756C255.26 61.756 252.761 61.042 250.619 59.614C248.477 58.186 246.839 56.17 245.705 53.566C244.571 50.92 244.004 47.833 244.004 44.305C244.004 40.777 244.571 37.711 245.705 35.107C246.839 32.461 248.477 30.424 250.619 28.996C252.761 27.568 255.26 26.854 258.116 26.854C260.3 26.854 262.295 27.316 264.101 28.24C265.907 29.164 267.293 30.445 268.259 32.083V16.27ZM267.629 50.479C268.385 48.715 268.763 46.657 268.763 44.305C268.763 41.911 268.385 39.811 267.629 38.005C266.915 36.199 265.886 34.813 264.542 33.847C263.198 32.881 261.623 32.398 259.817 32.398C257.087 32.398 254.924 33.49 253.328 35.674C251.732 37.816 250.934 40.693 250.934 44.305C250.934 47.875 251.732 50.731 253.328 52.873C254.966 54.973 257.129 56.023 259.817 56.023C261.623 56.023 263.198 55.54 264.542 54.574C265.886 53.608 266.915 52.243 267.629 50.479ZM287.35 16.27V35.107L286.405 34.792C287.035 32.062 288.316 30.067 290.248 28.807C292.18 27.505 294.49 26.854 297.178 26.854C300.622 26.854 303.352 28.009 305.368 30.319C307.426 32.587 308.455 35.653 308.455 39.517V61H301.777V41.911C301.777 38.845 301.252 36.556 300.202 35.044C299.152 33.532 297.514 32.776 295.288 32.776C292.852 32.776 290.92 33.574 289.492 35.17C288.064 36.724 287.35 38.971 287.35 41.911V61H280.672V16.27H287.35ZM313.941 37.627C314.613 34.267 316.188 31.642 318.666 29.752C321.186 27.82 324.378 26.854 328.242 26.854C332.778 26.854 336.243 28.072 338.637 30.508C341.073 32.944 342.291 36.451 342.291 41.029V53.44C342.291 54.28 342.459 54.889 342.795 55.267C343.173 55.603 343.698 55.771 344.37 55.771H345.693V61H343.614L342.858 61.063C341.052 61.021 339.519 60.643 338.259 59.929C336.999 59.173 336.306 57.808 336.18 55.834C335.34 57.556 333.996 58.984 332.148 60.118C330.3 61.21 328.053 61.756 325.407 61.756C321.963 61.756 319.086 60.895 316.776 59.173C314.508 57.451 313.374 55.141 313.374 52.243C313.374 50.101 313.878 48.379 314.886 47.077C315.894 45.775 317.28 44.767 319.044 44.053C320.808 43.339 323.139 42.709 326.037 42.163L335.613 40.273C335.571 37.585 334.941 35.59 333.723 34.288C332.505 32.944 330.678 32.272 328.242 32.272C326.31 32.272 324.714 32.776 323.454 33.784C322.194 34.75 321.333 36.178 320.871 38.068L313.941 37.627ZM320.304 52.117C320.304 53.419 320.85 54.49 321.942 55.33C323.076 56.17 324.714 56.59 326.856 56.59C328.536 56.548 330.048 56.128 331.392 55.33C332.736 54.532 333.786 53.335 334.542 51.739C335.34 50.101 335.739 48.127 335.739 45.817V45.376L328.62 46.636C328.284 46.678 327.948 46.741 327.612 46.825C325.89 47.119 324.546 47.434 323.58 47.77C322.614 48.064 321.816 48.568 321.186 49.282C320.598 49.954 320.304 50.899 320.304 52.117ZM369.51 38.131C369.174 36.409 368.292 35.023 366.864 33.973C365.436 32.923 363.819 32.398 362.013 32.398C360.249 32.398 358.779 32.839 357.603 33.721C356.427 34.561 355.839 35.695 355.839 37.123C355.881 38.467 356.574 39.517 357.918 40.273C359.304 40.987 361.089 41.575 363.273 42.037C366.297 42.583 368.775 43.255 370.707 44.053C372.639 44.809 374.151 45.859 375.243 47.203C376.335 48.505 376.881 50.206 376.881 52.306C376.881 54.364 376.251 56.107 374.991 57.535C373.773 58.963 372.114 60.034 370.014 60.748C367.956 61.42 365.688 61.756 363.21 61.756C360.396 61.756 357.876 61.294 355.65 60.37C353.424 59.446 351.639 58.144 350.295 56.464C348.993 54.742 348.258 52.747 348.09 50.479L354.957 50.038C355.209 51.298 355.671 52.39 356.343 53.314C357.057 54.238 357.981 54.952 359.115 55.456C360.291 55.96 361.635 56.212 363.147 56.212C364.953 56.212 366.528 55.876 367.872 55.204C369.258 54.49 369.951 53.419 369.951 51.991C369.951 51.025 369.657 50.248 369.069 49.66C368.481 49.072 367.746 48.631 366.864 48.337C366.024 48.043 364.89 47.749 363.462 47.455C363.042 47.329 362.58 47.224 362.076 47.14C359.22 46.51 356.889 45.859 355.083 45.187C353.277 44.473 351.786 43.486 350.61 42.226C349.476 40.966 348.909 39.328 348.909 37.312C348.909 35.17 349.455 33.322 350.547 31.768C351.681 30.172 353.256 28.954 355.272 28.114C357.33 27.274 359.745 26.854 362.517 26.854C366.171 26.854 369.258 27.841 371.778 29.815C374.298 31.789 375.831 34.435 376.377 37.753L369.51 38.131ZM388.054 16.27V35.107L387.109 34.792C387.739 32.062 389.02 30.067 390.952 28.807C392.884 27.505 395.194 26.854 397.882 26.854C401.326 26.854 404.056 28.009 406.072 30.319C408.13 32.587 409.159 35.653 409.159 39.517V61H402.481V41.911C402.481 38.845 401.956 36.556 400.906 35.044C399.856 33.532 398.218 32.776 395.992 32.776C393.556 32.776 391.624 33.574 390.196 35.17C388.768 36.724 388.054 38.971 388.054 41.911V61H381.376V16.27H388.054Z"
+        fill="currentColor"
+      />
+    </svg>
+  );
+};
diff --git a/packages/ui/components/page.tsx b/packages/ui/components/page.tsx
new file mode 100644
index 000000000..515269003
--- /dev/null
+++ b/packages/ui/components/page.tsx
@@ -0,0 +1,36 @@
+import { cn } from "@voidhash/ui";
+
+export function Page({ children, className }: React.ComponentProps<"div">) {
+  return <div className={cn("flex-1", className)}>{children}</div>;
+}
+
+export type PageHeaderProps = {
+  children?: React.ReactNode;
+  rightActions?: React.ReactNode;
+  className?: string;
+};
+export function PageHeader({ rightActions, children, className }: PageHeaderProps) {
+  return (
+    <header
+      className={cn(
+        "flex items-center justify-between px-4 py-2 border-b border-border/60 sticky top-0 z-10 bg-background",
+        className,
+      )}
+    >
+      <div>{children}</div>
+      {rightActions && <div>{rightActions}</div>}
+    </header>
+  );
+}
+
+export type PageTitleProps = {
+  children?: React.ReactNode;
+  className?: string;
+};
+export function PageHeaderTitle({ children, className }: PageTitleProps) {
+  return <h1 className={cn("text-sm font-medium text-foreground py-2", className)}>{children}</h1>;
+}
+
+export function PageSection() {}
+
+export function PageSectionHeader() {}
diff --git a/packages/ui/components/settings-card-skeleton.tsx b/packages/ui/components/settings-card-skeleton.tsx
new file mode 100644
index 000000000..d698aac67
--- /dev/null
+++ b/packages/ui/components/settings-card-skeleton.tsx
@@ -0,0 +1,42 @@
+import { Card, CardContent, CardDescription, CardFooter, CardTitle } from "./ui/card";
+import { Skeleton } from "./ui/skeleton";
+
+export function SettingsCardSkeleton({
+  description = true,
+  footer = true,
+  content = false,
+  instructions = true,
+  action = true,
+}: {
+  description?: boolean;
+  footer?: boolean;
+  content?: boolean;
+  instructions?: boolean;
+  action?: boolean;
+}) {
+  return (
+    <Card className="mt-8">
+      <CardContent>
+        <CardTitle>
+          <Skeleton className="h-4 w-32" />
+        </CardTitle>
+        {description && (
+          <CardDescription>
+            <Skeleton className="h-4 w-48" />
+          </CardDescription>
+        )}
+        {content && <Skeleton className="mt-4 h-4 w-64" />}
+      </CardContent>
+      {footer && (
+        <CardFooter className="flex items-center justify-between">
+          <div>{instructions && <Skeleton className="h-4 w-24" />}</div>
+          {action && (
+            <div>
+              <Skeleton className="h-8 w-20" />
+            </div>
+          )}
+        </CardFooter>
+      )}
+    </Card>
+  );
+}
diff --git a/packages/ui/components/spinner.tsx b/packages/ui/components/spinner.tsx
new file mode 100644
index 000000000..b56af8f88
--- /dev/null
+++ b/packages/ui/components/spinner.tsx
@@ -0,0 +1,26 @@
+import type React from "react";
+
+import { cn } from "../lib/utils";
+
+export function Spinner({
+  className = "w-6 h-6",
+  pathClassName,
+  ...props
+}: React.HTMLAttributes<HTMLDivElement> & { pathClassName?: string }) {
+  return (
+    // biome-ignore lint/a11y/useSemanticElements: shadcn
+    <div aria-label="Loading..." role="status" {...props}>
+      <svg className={cn("animate-spin", "text-foreground", className)} viewBox="3 3 18 18">
+        <title>Loading...</title>
+        <path
+          className="fill-transparent"
+          d="M12 5C8.13401 5 5 8.13401 5 12C5 15.866 8.13401 19 12 19C15.866 19 19 15.866 19 12C19 8.13401 15.866 5 12 5ZM3 12C3 7.02944 7.02944 3 12 3C16.9706 3 21 7.02944 21 12C21 16.9706 16.9706 21 12 21C7.02944 21 3 16.9706 3 12Z"
+        />
+        <path
+          className={pathClassName ?? "fill-current"}
+          d="M16.9497 7.05015C14.2161 4.31648 9.78392 4.31648 7.05025 7.05015C6.65973 7.44067 6.02656 7.44067 5.63604 7.05015C5.24551 6.65962 5.24551 6.02646 5.63604 5.63593C9.15076 2.12121 14.8492 2.12121 18.364 5.63593C18.7545 6.02646 18.7545 6.65962 18.364 7.05015C17.9734 7.44067 17.3403 7.44067 16.9497 7.05015Z"
+        />
+      </svg>
+    </div>
+  );
+}
diff --git a/packages/ui/components/theme-provider-tanstack.tsx b/packages/ui/components/theme-provider-tanstack.tsx
new file mode 100644
index 000000000..af90e0454
--- /dev/null
+++ b/packages/ui/components/theme-provider-tanstack.tsx
@@ -0,0 +1,366 @@
+"use client";
+
+/*
+  This file is adapted from next-themes to work with tanstack start.
+  next-themes can be found at https://github.com/pacocoursey/next-themes under the MIT license.
+*/
+
+import * as React from "react";
+
+interface ValueObject {
+  [themeName: string]: string;
+}
+
+export interface UseThemeProps {
+  /** List of all available theme names */
+  themes: string[];
+  /** Forced theme name for the current page */
+  forcedTheme?: string | undefined;
+  /** Update the theme */
+  setTheme: React.Dispatch<React.SetStateAction<string>>;
+  /** Active theme name */
+  theme?: string | undefined;
+  /** If enableSystem is true, returns the System theme preference ("dark" or "light"), regardless what the active theme is */
+  systemTheme?: "dark" | "light" | undefined;
+}
+
+export type Attribute = `data-${string}` | "class";
+
+export interface ThemeProviderProps extends React.PropsWithChildren {
+  /** List of all available theme names */
+  themes?: string[] | undefined;
+  /** Forced theme name for the current page */
+  forcedTheme?: string | undefined;
+  /** Whether to switch between dark and light themes based on prefers-color-scheme */
+  enableSystem?: boolean | undefined;
+  /** Disable all CSS transitions when switching themes */
+  disableTransitionOnChange?: boolean | undefined;
+  /** Whether to indicate to browsers which color scheme is used (dark or light) for built-in UI like inputs and buttons */
+  enableColorScheme?: boolean | undefined;
+  /** Key used to store theme setting in localStorage */
+  storageKey?: string | undefined;
+  /** Default theme name (for v0.0.12 and lower the default was light). If `enableSystem` is false, the default theme is light */
+  defaultTheme?: string | undefined;
+  /** HTML attribute modified based on the active theme. Accepts `class`, `data-*` (meaning any data attribute, `data-mode`, `data-color`, etc.), or an array which could include both */
+  attribute?: Attribute | Attribute[] | undefined;
+  /** Mapping of theme name to HTML attribute value. Object where key is the theme name and value is the attribute value */
+  value?: ValueObject | undefined;
+  /** Nonce string to pass to the inline script for CSP headers */
+  nonce?: string | undefined;
+}
+
+const colorSchemes = new Set(["light", "dark"]);
+const MEDIA = "(prefers-color-scheme: dark)";
+const isServer = typeof window === "undefined";
+const ThemeContext = React.createContext<UseThemeProps | undefined>(undefined);
+// biome-ignore lint/suspicious/noEmptyBlockStatements: default value
+const defaultContext: UseThemeProps = { setTheme: (_) => {}, themes: [] };
+
+export const useTheme = () => React.useContext(ThemeContext) ?? defaultContext;
+
+export const ThemeProviderTanstack = (
+  props: ThemeProviderProps & { suppressHydrationWarning?: boolean },
+): React.ReactNode => {
+  const context = React.useContext(ThemeContext);
+
+  // Ignore nested context providers, just passthrough children
+  if (context) {
+    return props.children;
+  }
+  return <Theme {...props} />;
+};
+
+const defaultThemes = ["light", "dark"];
+
+const Theme = ({
+  forcedTheme,
+  disableTransitionOnChange = false,
+  enableSystem = true,
+  enableColorScheme = true,
+  storageKey = "theme",
+  themes = defaultThemes,
+  defaultTheme = enableSystem ? "system" : "light",
+  attribute = "data-theme",
+  value,
+  children,
+  nonce,
+}: ThemeProviderProps) => {
+  const [theme, setThemeState] = React.useState(() => getTheme(storageKey, defaultTheme));
+  const attrs = value ? Object.values(value) : themes;
+
+  // apply selected theme function (light, dark, system)
+  // biome-ignore lint/correctness/useExhaustiveDependencies: <explanation>
+  const applyTheme = React.useCallback((theme: string | undefined) => {
+    let resolved = theme;
+    if (!resolved) {
+      return;
+    }
+
+    // If theme is system, resolve it before setting theme
+    if (theme === "system" && enableSystem) {
+      resolved = getSystemTheme();
+    }
+
+    const name = value ? value[resolved] : resolved;
+    const enable = disableTransitionOnChange ? disableAnimation() : null;
+    const d = document.documentElement;
+
+    const handleAttribute = (attr: Attribute) => {
+      if (attr === "class") {
+        d.classList.remove(...attrs);
+        if (name) {
+          d.classList.add(name);
+        }
+      } else if (attr.startsWith("data-")) {
+        if (name) {
+          d.setAttribute(attr, name);
+        } else {
+          d.removeAttribute(attr);
+        }
+      }
+    };
+
+    if (Array.isArray(attribute)) {
+      attribute.forEach(handleAttribute);
+    } else {
+      handleAttribute(attribute);
+    }
+
+    if (enableColorScheme) {
+      const fallback = colorSchemes.has(defaultTheme) ? defaultTheme : null;
+      const colorScheme = colorSchemes.has(resolved) ? resolved : fallback;
+      // @ts-expect-error
+      d.style.colorScheme = colorScheme;
+    }
+
+    enable?.();
+  }, []);
+
+  // Set theme state and save to local storage
+  // biome-ignore lint/correctness/useExhaustiveDependencies: <explanation>
+  const setTheme = React.useCallback(
+    // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+    (value: any) => {
+      const newTheme = typeof value === "function" ? value(theme) : value;
+      setThemeState(newTheme);
+
+      // Save to storage
+      try {
+        localStorage.setItem(storageKey, newTheme);
+      } catch {
+        // Unsupported
+      }
+    },
+    [theme],
+  );
+
+  // biome-ignore lint/correctness/useExhaustiveDependencies: <explanation>
+  const handleMediaQuery = React.useCallback(
+    (e: MediaQueryListEvent | MediaQueryList) => {
+      getSystemTheme(e);
+
+      if (theme === "system" && enableSystem && !forcedTheme) {
+        applyTheme("system");
+      }
+    },
+    [theme, forcedTheme],
+  );
+
+  // Always listen to System preference
+  React.useEffect(() => {
+    const media = window.matchMedia(MEDIA);
+
+    // Intentionally use deprecated listener methods to support iOS & old browsers
+    media.addListener(handleMediaQuery);
+    handleMediaQuery(media);
+
+    return () => media.removeListener(handleMediaQuery);
+  }, [handleMediaQuery]);
+
+  // localStorage event handling, allow to sync theme changes between tabs
+  // biome-ignore lint/correctness/useExhaustiveDependencies: <explanation>
+  React.useEffect(() => {
+    const handleStorage = (e: StorageEvent) => {
+      if (e.key !== storageKey) {
+        return;
+      }
+
+      // If default theme set, use it if localstorage === null (happens on local storage manual deletion)
+      const theme = e.newValue || defaultTheme;
+      setTheme(theme);
+    };
+
+    window.addEventListener("storage", handleStorage);
+    return () => window.removeEventListener("storage", handleStorage);
+  }, [setTheme]);
+
+  // Whenever theme or forcedTheme changes, apply it
+  // biome-ignore lint/correctness/useExhaustiveDependencies: <explanation>
+  React.useEffect(() => {
+    applyTheme(forcedTheme ?? theme);
+  }, [forcedTheme, theme]);
+
+  const providerValue = React.useMemo(
+    () => ({
+      forcedTheme,
+      setTheme,
+      theme,
+      themes: enableSystem ? [...themes, "system"] : themes,
+    }),
+    [theme, setTheme, forcedTheme, enableSystem, themes],
+  );
+
+  return (
+    <ThemeContext.Provider value={providerValue}>
+      <ThemeScript
+        {...{
+          attribute,
+          defaultTheme,
+          enableColorScheme,
+          enableSystem,
+          forcedTheme,
+          nonce,
+          storageKey,
+          themes,
+          value,
+        }}
+      />
+      {children}
+    </ThemeContext.Provider>
+  );
+};
+
+const ThemeScript = React.memo(
+  ({
+    forcedTheme,
+    storageKey,
+    attribute,
+    enableSystem,
+    enableColorScheme,
+    defaultTheme,
+    value,
+    themes,
+    nonce,
+  }: Omit<ThemeProviderProps, "children"> & { defaultTheme: string }) => {
+    const scriptArgs = JSON.stringify([
+      attribute,
+      storageKey,
+      defaultTheme,
+      forcedTheme,
+      themes,
+      value,
+      enableSystem,
+      enableColorScheme,
+    ]).slice(1, -1);
+
+    return (
+      <script
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: Needed to inject script before hydration
+        dangerouslySetInnerHTML={{
+          __html: `(${script.toString()})(${scriptArgs})`,
+        }}
+        nonce={typeof window === "undefined" ? nonce : ""}
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: Needed to inject script before hydration
+        suppressHydrationWarning
+      />
+      // <></>
+    );
+  },
+);
+
+// Helpers
+const getTheme = (key: string, fallback?: string) => {
+  if (isServer) {
+    return;
+  }
+  let theme: string | undefined;
+  try {
+    theme = localStorage.getItem(key) || undefined;
+  } catch {
+    // Unsupported
+  }
+  return theme || fallback;
+};
+
+const disableAnimation = () => {
+  const css = document.createElement("style");
+  css.append(
+    document.createTextNode(
+      "*,*::before,*::after{-webkit-transition:none!important;-moz-transition:none!important;-o-transition:none!important;-ms-transition:none!important;transition:none!important}",
+    ),
+  );
+  document.head.append(css);
+
+  return () => {
+    // Force restyle
+    (() => window.getComputedStyle(document.body))();
+
+    // Wait for next tick before removing
+    setTimeout(() => {
+      document.head.removeChild(css);
+    }, 1);
+  };
+};
+
+const getSystemTheme = (e?: MediaQueryList | MediaQueryListEvent) => {
+  const event = e ?? window.matchMedia(MEDIA);
+  const isDark = event.matches;
+  const systemTheme = isDark ? "dark" : "light";
+  return systemTheme;
+};
+
+/*
+  This file is adapted from next-themes to work with tanstack start.
+  next-themes can be found at https://github.com/pacocoursey/next-themes under the MIT license.
+*/
+
+// biome-ignore lint/suspicious/noExplicitAny: <explanation>
+export const script: (...args: any[]) => void = (
+  attribute,
+  storageKey,
+  defaultTheme,
+  forcedTheme,
+  themes,
+  value,
+  enableSystem,
+  enableColorScheme,
+) => {
+  const el = document.documentElement;
+  const systemThemes = new Set(["light", "dark"]);
+  const isClass = attribute === "class";
+  const classes = isClass && value ? themes.map((t: string | number) => value[t] || t) : themes;
+
+  function updateDOM(theme: string) {
+    if (isClass) {
+      el.classList.remove(...classes);
+      el.classList.add(theme);
+    } else {
+      el.setAttribute(attribute, theme);
+    }
+
+    setColorScheme(theme);
+  }
+
+  function setColorScheme(theme: string) {
+    if (enableColorScheme && systemThemes.has(theme)) {
+      el.style.colorScheme = theme;
+    }
+  }
+
+  function getSystemTheme() {
+    return window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";
+  }
+
+  if (forcedTheme) {
+    updateDOM(forcedTheme);
+  } else {
+    try {
+      const themeName = localStorage.getItem(storageKey) || defaultTheme;
+      const isSystem = enableSystem && themeName === "system";
+      const theme = isSystem ? getSystemTheme() : themeName;
+      updateDOM(theme);
+    } catch {
+      //
+    }
+  }
+};
diff --git a/packages/ui/components/theme-provider.tsx b/packages/ui/components/theme-provider.tsx
new file mode 100644
index 000000000..8e594251b
--- /dev/null
+++ b/packages/ui/components/theme-provider.tsx
@@ -0,0 +1,12 @@
+"use client";
+
+import type * as React from "react";
+
+import { ThemeProvider as NextThemesProvider } from "next-themes";
+
+export function ThemeProvider({
+  children,
+  ...props
+}: React.ComponentProps<typeof NextThemesProvider>) {
+  return <NextThemesProvider {...props}>{children}</NextThemesProvider>;
+}
diff --git a/packages/ui/components/theme-toggle.tsx b/packages/ui/components/theme-toggle.tsx
new file mode 100644
index 000000000..dd08f9394
--- /dev/null
+++ b/packages/ui/components/theme-toggle.tsx
@@ -0,0 +1,45 @@
+import { Monitor, Moon, Sun } from "lucide-react";
+
+import { cn } from "../lib/utils";
+import { ToggleGroup, ToggleGroupItem } from "./ui/toggle-group";
+
+export function ThemeToggle({
+  theme,
+  setTheme,
+  className,
+}: {
+  theme: string;
+  setTheme: (theme: string) => void;
+  className?: string;
+}) {
+  return (
+    <ToggleGroup
+      className={cn("divide-x overflow-hidden rounded-full border border-border", className)}
+      onValueChange={(value) => setTheme(value)}
+      type="single"
+      value={theme}
+    >
+      <ToggleGroupItem
+        aria-label="Toggle system"
+        className={cn("h-6 p-0 px-2", theme === "system" && "bg-muted")}
+        value="system"
+      >
+        <Monitor className="size-4" />
+      </ToggleGroupItem>
+      <ToggleGroupItem
+        aria-label="Toggle light"
+        className={cn("h-6 p-0 px-2", theme === "light" && "bg-muted")}
+        value="light"
+      >
+        <Sun className="size-4" />
+      </ToggleGroupItem>
+      <ToggleGroupItem
+        aria-label="Toggle strikethrough"
+        className={cn("h-6 p-0 px-2", theme === "dark" && "bg-muted")}
+        value="dark"
+      >
+        <Moon className="size-4" />
+      </ToggleGroupItem>
+    </ToggleGroup>
+  );
+}
diff --git a/packages/ui/components/ui/accordion.tsx b/packages/ui/components/ui/accordion.tsx
new file mode 100644
index 000000000..f804c9ad9
--- /dev/null
+++ b/packages/ui/components/ui/accordion.tsx
@@ -0,0 +1,63 @@
+import type * as React from "react";
+
+import { Accordion as AccordionPrimitive } from "radix-ui";
+import { ChevronDownIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function Accordion({ ...props }: React.ComponentProps<typeof AccordionPrimitive.Root>) {
+  return <AccordionPrimitive.Root data-slot="accordion" {...props} />;
+}
+
+function AccordionItem({
+  className,
+  ...props
+}: React.ComponentProps<typeof AccordionPrimitive.Item>) {
+  return (
+    <AccordionPrimitive.Item
+      className={cn("border-b last:border-b-0", className)}
+      data-slot="accordion-item"
+      {...props}
+    />
+  );
+}
+
+function AccordionTrigger({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof AccordionPrimitive.Trigger>) {
+  return (
+    <AccordionPrimitive.Header className="flex">
+      <AccordionPrimitive.Trigger
+        className={cn(
+          "flex flex-1 items-start justify-between gap-4 rounded-md py-4 text-left font-medium text-sm outline-none transition-all hover:underline focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 [&[data-state=open]>svg]:rotate-180",
+          className,
+        )}
+        data-slot="accordion-trigger"
+        {...props}
+      >
+        {children}
+        <ChevronDownIcon className="pointer-events-none size-4 shrink-0 translate-y-0.5 text-muted-foreground transition-transform duration-200" />
+      </AccordionPrimitive.Trigger>
+    </AccordionPrimitive.Header>
+  );
+}
+
+function AccordionContent({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof AccordionPrimitive.Content>) {
+  return (
+    <AccordionPrimitive.Content
+      className="overflow-hidden text-sm data-[state=closed]:animate-accordion-up data-[state=open]:animate-accordion-down"
+      data-slot="accordion-content"
+      {...props}
+    >
+      <div className={cn("pt-0 pb-4", className)}>{children}</div>
+    </AccordionPrimitive.Content>
+  );
+}
+
+export { Accordion, AccordionItem, AccordionTrigger, AccordionContent };
diff --git a/packages/ui/components/ui/alert-dialog.tsx b/packages/ui/components/ui/alert-dialog.tsx
new file mode 100644
index 000000000..9bbeb2af9
--- /dev/null
+++ b/packages/ui/components/ui/alert-dialog.tsx
@@ -0,0 +1,180 @@
+import * as React from "react";
+import { AlertDialog as AlertDialogPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+import { Button } from "./button";
+
+function AlertDialog({ ...props }: React.ComponentProps<typeof AlertDialogPrimitive.Root>) {
+  return <AlertDialogPrimitive.Root data-slot="alert-dialog" {...props} />;
+}
+
+function AlertDialogTrigger({
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Trigger>) {
+  return <AlertDialogPrimitive.Trigger data-slot="alert-dialog-trigger" {...props} />;
+}
+
+function AlertDialogPortal({ ...props }: React.ComponentProps<typeof AlertDialogPrimitive.Portal>) {
+  return <AlertDialogPrimitive.Portal data-slot="alert-dialog-portal" {...props} />;
+}
+
+function AlertDialogOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Overlay>) {
+  return (
+    <AlertDialogPrimitive.Overlay
+      data-slot="alert-dialog-overlay"
+      className={cn(
+        "data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 bg-black/10 duration-100 supports-backdrop-filter:backdrop-blur-xs fixed inset-0 z-50",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogContent({
+  className,
+  size = "default",
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Content> & {
+  size?: "default" | "sm";
+}) {
+  return (
+    <AlertDialogPortal>
+      <AlertDialogOverlay />
+      <AlertDialogPrimitive.Content
+        data-slot="alert-dialog-content"
+        data-size={size}
+        className={cn(
+          "data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 bg-background ring-foreground/10 gap-4 rounded-xl p-4 ring-1 duration-100 data-[size=default]:max-w-xs data-[size=sm]:max-w-xs data-[size=default]:sm:max-w-sm group/alert-dialog-content fixed top-1/2 left-1/2 z-50 grid w-full -translate-x-1/2 -translate-y-1/2 outline-none",
+          className,
+        )}
+        {...props}
+      />
+    </AlertDialogPortal>
+  );
+}
+
+function AlertDialogHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="alert-dialog-header"
+      className={cn(
+        "grid grid-rows-[auto_1fr] place-items-center gap-1.5 text-center has-data-[slot=alert-dialog-media]:grid-rows-[auto_auto_1fr] has-data-[slot=alert-dialog-media]:gap-x-4 sm:group-data-[size=default]/alert-dialog-content:place-items-start sm:group-data-[size=default]/alert-dialog-content:text-left sm:group-data-[size=default]/alert-dialog-content:has-data-[slot=alert-dialog-media]:grid-rows-[auto_1fr]",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="alert-dialog-footer"
+      className={cn(
+        "bg-muted/50 -mx-4 -mb-4 rounded-b-xl border-t p-4 flex flex-col-reverse gap-2 group-data-[size=sm]/alert-dialog-content:grid group-data-[size=sm]/alert-dialog-content:grid-cols-2 sm:flex-row sm:justify-end",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogMedia({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="alert-dialog-media"
+      className={cn(
+        "bg-muted mb-2 inline-flex size-10 items-center justify-center rounded-md sm:group-data-[size=default]/alert-dialog-content:row-span-2 *:[svg:not([class*='size-'])]:size-6",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogTitle({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Title>) {
+  return (
+    <AlertDialogPrimitive.Title
+      data-slot="alert-dialog-title"
+      className={cn(
+        "text-sm font-medium sm:group-data-[size=default]/alert-dialog-content:group-has-data-[slot=alert-dialog-media]/alert-dialog-content:col-start-2",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Description>) {
+  return (
+    <AlertDialogPrimitive.Description
+      data-slot="alert-dialog-description"
+      className={cn(
+        "text-muted-foreground *:[a]:hover:text-foreground text-sm text-balance md:text-pretty *:[a]:underline *:[a]:underline-offset-3",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogAction({
+  className,
+  variant = "default",
+  size = "default",
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Action> &
+  Pick<React.ComponentProps<typeof Button>, "variant" | "size">) {
+  return (
+    <Button variant={variant} size={size} asChild>
+      <AlertDialogPrimitive.Action
+        data-slot="alert-dialog-action"
+        className={cn(className)}
+        {...props}
+      />
+    </Button>
+  );
+}
+
+function AlertDialogCancel({
+  className,
+  variant = "outline",
+  size = "default",
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Cancel> &
+  Pick<React.ComponentProps<typeof Button>, "variant" | "size">) {
+  return (
+    <Button variant={variant} size={size} asChild>
+      <AlertDialogPrimitive.Cancel
+        data-slot="alert-dialog-cancel"
+        className={cn(className)}
+        {...props}
+      />
+    </Button>
+  );
+}
+
+export {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogMedia,
+  AlertDialogOverlay,
+  AlertDialogPortal,
+  AlertDialogTitle,
+  AlertDialogTrigger,
+};
diff --git a/packages/ui/components/ui/alert.tsx b/packages/ui/components/ui/alert.tsx
new file mode 100644
index 000000000..6715c0daa
--- /dev/null
+++ b/packages/ui/components/ui/alert.tsx
@@ -0,0 +1,63 @@
+import type * as React from "react";
+
+import { type VariantProps, cva } from "class-variance-authority";
+
+import { cn } from "../../lib/utils";
+
+const alertVariants = cva(
+  "relative grid w-full grid-cols-[0_1fr] items-start gap-y-0.5 rounded-xl border px-4 py-3 text-sm has-[>svg]:grid-cols-[calc(var(--spacing)*4)_1fr] has-[>svg]:gap-x-3 [&>svg]:size-4 [&>svg]:translate-y-0.5 [&>svg]:text-current",
+  {
+    defaultVariants: {
+      variant: "default",
+    },
+    variants: {
+      variant: {
+        default: "bg-card text-card-foreground",
+        destructive:
+          "border-destructive bg-destructive/10 text-foreground *:data-[slot=alert-description]:text-muted-foreground [&>svg]:text-current",
+        success:
+          "border-success bg-success/10 text-foreground *:data-[slot=alert-description]:text-muted-foreground dark:border-success/60 [&>svg]:text-current",
+      },
+    },
+  },
+);
+
+function Alert({
+  className,
+  variant,
+  ...props
+}: React.ComponentProps<"div"> & VariantProps<typeof alertVariants>) {
+  return (
+    <div
+      className={cn(alertVariants({ variant }), className)}
+      data-slot="alert"
+      role="alert"
+      {...props}
+    />
+  );
+}
+
+function AlertTitle({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("col-start-2 line-clamp-1 min-h-4 font-semibold tracking-normal", className)}
+      data-slot="alert-title"
+      {...props}
+    />
+  );
+}
+
+function AlertDescription({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn(
+        "col-start-2 grid justify-items-start gap-1 text-muted-foreground text-sm [&_p]:leading-relaxed",
+        className,
+      )}
+      data-slot="alert-description"
+      {...props}
+    />
+  );
+}
+
+export { Alert, AlertTitle, AlertDescription };
diff --git a/packages/ui/components/ui/aspect-ratio.tsx b/packages/ui/components/ui/aspect-ratio.tsx
new file mode 100644
index 000000000..b66a572ca
--- /dev/null
+++ b/packages/ui/components/ui/aspect-ratio.tsx
@@ -0,0 +1,7 @@
+import { AspectRatio as AspectRatioPrimitive } from "radix-ui";
+
+function AspectRatio({ ...props }: React.ComponentProps<typeof AspectRatioPrimitive.Root>) {
+  return <AspectRatioPrimitive.Root data-slot="aspect-ratio" {...props} />;
+}
+
+export { AspectRatio };
diff --git a/packages/ui/components/ui/attachment.tsx b/packages/ui/components/ui/attachment.tsx
new file mode 100644
index 000000000..47d19ffb1
--- /dev/null
+++ b/packages/ui/components/ui/attachment.tsx
@@ -0,0 +1,192 @@
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+import { Slot } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+import { Button } from "./button";
+
+const attachmentVariants = cva(
+  "group/attachment relative flex w-fit max-w-full min-w-0 shrink-0 flex-wrap rounded-xl border bg-card text-card-foreground transition-colors focus-within:ring-1 focus-within:ring-ring/50 has-[>a,>button]:hover:bg-muted/50 data-[state=error]:border-destructive/30 data-[state=idle]:border-dashed",
+  {
+    variants: {
+      size: {
+        default:
+          "gap-2 text-sm has-data-[slot=attachment-content]:px-2.5 has-data-[slot=attachment-content]:py-2 has-data-[slot=attachment-media]:p-2",
+        sm: "gap-2.5 text-xs has-data-[slot=attachment-content]:px-2 has-data-[slot=attachment-content]:py-1.5 has-data-[slot=attachment-media]:p-1.5",
+        xs: "gap-1.5 rounded-lg text-xs has-data-[slot=attachment-content]:px-1.5 has-data-[slot=attachment-content]:py-1 has-data-[slot=attachment-media]:p-1",
+      },
+      orientation: {
+        horizontal: "min-w-40 items-center",
+        vertical: "w-24 flex-col has-data-[slot=attachment-content]:w-30",
+      },
+    },
+  },
+);
+
+function Attachment({
+  className,
+  state = "done",
+  size = "default",
+  orientation = "horizontal",
+  ...props
+}: React.ComponentProps<"div"> &
+  VariantProps<typeof attachmentVariants> & {
+    state?: "idle" | "uploading" | "processing" | "error" | "done";
+  }) {
+  return (
+    <div
+      data-slot="attachment"
+      data-state={state}
+      data-size={size}
+      data-orientation={orientation}
+      className={cn(attachmentVariants({ size, orientation }), className)}
+      {...props}
+    />
+  );
+}
+
+const attachmentMediaVariants = cva(
+  "relative flex aspect-square w-10 shrink-0 items-center justify-center overflow-hidden rounded-lg bg-muted text-foreground group-data-[orientation=vertical]/attachment:w-full group-data-[size=sm]/attachment:w-8 group-data-[size=xs]/attachment:w-7 group-data-[size=xs]/attachment:rounded-md group-data-[state=error]/attachment:bg-destructive/10 group-data-[state=error]/attachment:text-destructive group-data-[orientation=vertical]/attachment:*:data-[slot=spinner]:size-6! [&_svg]:pointer-events-none [&_svg:not([class*='size-'])]:size-4 group-data-[orientation=vertical]/attachment:[&_svg:not([class*='size-'])]:size-6 group-data-[size=xs]/attachment:[&_svg:not([class*='size-'])]:size-3.5",
+  {
+    variants: {
+      variant: {
+        icon: "",
+        image:
+          "opacity-60 group-data-[state=done]/attachment:opacity-100 group-data-[state=idle]/attachment:opacity-100 *:[img]:aspect-square *:[img]:w-full *:[img]:object-cover",
+      },
+    },
+    defaultVariants: {
+      variant: "icon",
+    },
+  },
+);
+
+function AttachmentMedia({
+  className,
+  variant = "icon",
+  ...props
+}: React.ComponentProps<"div"> & VariantProps<typeof attachmentMediaVariants>) {
+  return (
+    <div
+      data-slot="attachment-media"
+      data-variant={variant}
+      className={cn(attachmentMediaVariants({ variant }), className)}
+      {...props}
+    />
+  );
+}
+
+function AttachmentContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="attachment-content"
+      className={cn(
+        "max-w-full min-w-0 flex-1 leading-tight group-data-[orientation=vertical]/attachment:px-1",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AttachmentTitle({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="attachment-title"
+      className={cn(
+        "block max-w-full min-w-0 truncate font-medium group-data-[state=processing]/attachment:shimmer group-data-[state=uploading]/attachment:shimmer",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AttachmentDescription({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="attachment-description"
+      className={cn(
+        "mt-0.5 block min-w-0 truncate text-xs text-muted-foreground group-data-[state=error]/attachment:text-destructive/80",
+        "max-w-full",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AttachmentActions({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="attachment-actions"
+      className={cn(
+        "relative z-20 flex shrink-0 items-center group-data-[orientation=vertical]/attachment:absolute group-data-[orientation=vertical]/attachment:top-3 group-data-[orientation=vertical]/attachment:right-3 group-data-[orientation=vertical]/attachment:gap-1",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AttachmentAction({
+  className,
+  variant,
+  size = "icon-xs",
+  ...props
+}: React.ComponentProps<typeof Button>) {
+  return (
+    <Button
+      data-slot="attachment-action"
+      variant={variant ?? "ghost"}
+      size={size}
+      className={cn(className)}
+      {...props}
+    />
+  );
+}
+
+function AttachmentTrigger({
+  className,
+  asChild = false,
+  type,
+  ...props
+}: React.ComponentProps<"button"> & {
+  asChild?: boolean;
+}) {
+  const Comp = asChild ? Slot.Root : "button";
+
+  return (
+    <Comp
+      data-slot="attachment-trigger"
+      type={asChild ? undefined : (type ?? "button")}
+      className={cn("absolute inset-0 z-10 outline-none", className)}
+      {...props}
+    />
+  );
+}
+
+function AttachmentGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="attachment-group"
+      className={cn(
+        "flex min-w-0 scroll-fade-x snap-x snap-mandatory scroll-px-1 scrollbar-none gap-3 overflow-x-auto overscroll-x-contain py-1 *:data-[slot=attachment]:flex-none *:data-[slot=attachment]:snap-start",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export {
+  Attachment,
+  AttachmentGroup,
+  AttachmentMedia,
+  AttachmentContent,
+  AttachmentTitle,
+  AttachmentDescription,
+  AttachmentActions,
+  AttachmentAction,
+  AttachmentTrigger,
+};
diff --git a/packages/ui/components/ui/avatar.tsx b/packages/ui/components/ui/avatar.tsx
new file mode 100644
index 000000000..2247ff415
--- /dev/null
+++ b/packages/ui/components/ui/avatar.tsx
@@ -0,0 +1,42 @@
+"use client";
+
+import type * as React from "react";
+
+import { Avatar as AvatarPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function Avatar({ className, ...props }: React.ComponentProps<typeof AvatarPrimitive.Root>) {
+  return (
+    <AvatarPrimitive.Root
+      className={cn("relative flex size-8 shrink-0 overflow-hidden rounded-full", className)}
+      data-slot="avatar"
+      {...props}
+    />
+  );
+}
+
+function AvatarImage({ className, ...props }: React.ComponentProps<typeof AvatarPrimitive.Image>) {
+  return (
+    <AvatarPrimitive.Image
+      className={cn("aspect-square size-full", className)}
+      data-slot="avatar-image"
+      {...props}
+    />
+  );
+}
+
+function AvatarFallback({
+  className,
+  ...props
+}: React.ComponentProps<typeof AvatarPrimitive.Fallback>) {
+  return (
+    <AvatarPrimitive.Fallback
+      className={cn("flex size-full items-center justify-center rounded-full bg-muted", className)}
+      data-slot="avatar-fallback"
+      {...props}
+    />
+  );
+}
+
+export { Avatar, AvatarImage, AvatarFallback };
diff --git a/packages/ui/components/ui/badge.tsx b/packages/ui/components/ui/badge.tsx
new file mode 100644
index 000000000..0ce48b07e
--- /dev/null
+++ b/packages/ui/components/ui/badge.tsx
@@ -0,0 +1,45 @@
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+import { Slot } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+const badgeVariants = cva(
+  "h-5 gap-1 rounded-4xl border border-transparent px-2 py-0.5 text-xs font-medium transition-all has-data-[icon=inline-end]:pr-1.5 has-data-[icon=inline-start]:pl-1.5 [&>svg]:size-3! inline-flex items-center justify-center w-fit whitespace-nowrap shrink-0 [&>svg]:pointer-events-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive transition-colors overflow-hidden group/badge",
+  {
+    variants: {
+      variant: {
+        default: "bg-primary text-primary-foreground [a]:hover:bg-primary/80",
+        secondary: "bg-secondary text-secondary-foreground [a]:hover:bg-secondary/80",
+        destructive:
+          "bg-destructive/10 [a]:hover:bg-destructive/20 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 text-destructive dark:bg-destructive/20",
+        outline: "border-border text-foreground [a]:hover:bg-muted [a]:hover:text-muted-foreground",
+        ghost: "hover:bg-muted hover:text-muted-foreground dark:hover:bg-muted/50",
+        link: "text-primary underline-offset-4 hover:underline",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+    },
+  },
+);
+
+function Badge({
+  className,
+  variant = "default",
+  asChild = false,
+  ...props
+}: React.ComponentProps<"span"> & VariantProps<typeof badgeVariants> & { asChild?: boolean }) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "span";
+
+  return (
+    <Comp
+      data-slot="badge"
+      data-variant={variant}
+      className={cn(badgeVariants({ variant }), className)}
+      {...props}
+    />
+  );
+}
+
+export { Badge, badgeVariants };
diff --git a/packages/ui/components/ui/breadcrumb.tsx b/packages/ui/components/ui/breadcrumb.tsx
new file mode 100644
index 000000000..f3f175cb3
--- /dev/null
+++ b/packages/ui/components/ui/breadcrumb.tsx
@@ -0,0 +1,110 @@
+import * as React from "react";
+
+import { Slot } from "radix-ui";
+import { ChevronRight, MoreHorizontal } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+import { buttonVariants } from "./button";
+
+function Breadcrumb({ ...props }: React.ComponentProps<"nav">) {
+  return <nav aria-label="breadcrumb" data-slot="breadcrumb" {...props} />;
+}
+
+function BreadcrumbList({ className, ...props }: React.ComponentProps<"ol">) {
+  return (
+    <ol
+      className={cn(
+        "flex flex-wrap items-center gap-1 wrap-break-word text-muted-foreground text-sm sm:gap-1",
+        className,
+      )}
+      data-slot="breadcrumb-list"
+      {...props}
+    />
+  );
+}
+
+function BreadcrumbItem({ className, ...props }: React.ComponentProps<"li">) {
+  return (
+    <li
+      className={cn("inline-flex items-center gap-1.5", className)}
+      data-slot="breadcrumb-item"
+      {...props}
+    />
+  );
+}
+
+function BreadcrumbLink({
+  asChild,
+  className,
+  ...props
+}: React.ComponentProps<"a"> & {
+  asChild?: boolean;
+}) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "a";
+
+  return (
+    <Comp
+      className={cn(buttonVariants({ size: "sm", variant: "ghost" }), className)}
+      data-slot="breadcrumb-link"
+      {...props}
+    />
+  );
+}
+
+function BreadcrumbPage({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    // biome-ignore lint/a11y/useFocusableInteractive: shadcn
+    <span
+      aria-current="page"
+      aria-disabled="true"
+      className={cn(
+        buttonVariants({ size: "sm", variant: "ghost" }),
+        // The current page is not interactive, so suppress the hover affordance.
+        "text-foreground hover:bg-transparent dark:hover:bg-transparent",
+        className,
+      )}
+      data-slot="breadcrumb-page"
+      role="link"
+      {...props}
+    />
+  );
+}
+
+function BreadcrumbSeparator({ children, className, ...props }: React.ComponentProps<"li">) {
+  return (
+    <li
+      aria-hidden="true"
+      className={cn("[&>svg]:size-3.5", className)}
+      data-slot="breadcrumb-separator"
+      role="presentation"
+      {...props}
+    >
+      {children ?? <ChevronRight />}
+    </li>
+  );
+}
+
+function BreadcrumbEllipsis({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      aria-hidden="true"
+      className={cn("flex size-9 items-center justify-center", className)}
+      data-slot="breadcrumb-ellipsis"
+      role="presentation"
+      {...props}
+    >
+      <MoreHorizontal className="size-4" />
+      <span className="sr-only">More</span>
+    </span>
+  );
+}
+
+export {
+  Breadcrumb,
+  BreadcrumbList,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  BreadcrumbEllipsis,
+};
diff --git a/packages/ui/components/ui/bubble.tsx b/packages/ui/components/ui/bubble.tsx
new file mode 100644
index 000000000..c38caaff5
--- /dev/null
+++ b/packages/ui/components/ui/bubble.tsx
@@ -0,0 +1,125 @@
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+import { Slot } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function BubbleGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="bubble-group"
+      className={cn("flex min-w-0 flex-col gap-2", className)}
+      {...props}
+    />
+  );
+}
+
+const bubbleVariants = cva(
+  "group/bubble relative flex w-fit max-w-[80%] min-w-0 flex-col gap-1 group-data-[align=end]/message:self-end data-[align=end]:self-end data-[variant=ghost]:max-w-full",
+  {
+    variants: {
+      variant: {
+        default:
+          "*:data-[slot=bubble-content]:bg-primary *:data-[slot=bubble-content]:text-primary-foreground [&>[data-slot=bubble-content]:is(button,a):hover]:bg-primary/80",
+        secondary:
+          "*:data-[slot=bubble-content]:bg-secondary *:data-[slot=bubble-content]:text-secondary-foreground [&>[data-slot=bubble-content]:is(button,a):hover]:bg-[color-mix(in_oklch,var(--secondary),var(--foreground)_5%)]",
+        muted:
+          "*:data-[slot=bubble-content]:bg-muted [&>[data-slot=bubble-content]:is(button,a):hover]:bg-[color-mix(in_oklch,var(--muted),var(--foreground)_5%)]",
+        tinted:
+          "*:data-[slot=bubble-content]:bg-[oklch(from_var(--primary)_0.93_calc(c*0.4)_h)] *:data-[slot=bubble-content]:text-foreground dark:*:data-[slot=bubble-content]:bg-[oklch(from_var(--primary)_0.3_calc(c*0.4)_h)] [&>[data-slot=bubble-content]:is(button,a):hover]:bg-[oklch(from_var(--primary)_0.88_calc(c*0.5)_h)] dark:[&>[data-slot=bubble-content]:is(button,a):hover]:bg-[oklch(from_var(--primary)_0.35_calc(c*0.5)_h)]",
+        outline:
+          "*:data-[slot=bubble-content]:border-border *:data-[slot=bubble-content]:bg-background [&>[data-slot=bubble-content]:is(button,a):hover]:bg-muted [&>[data-slot=bubble-content]:is(button,a):hover]:text-foreground dark:[&>[data-slot=bubble-content]:is(button,a):hover]:bg-input/30",
+        ghost:
+          "border-none *:data-[slot=bubble-content]:rounded-none *:data-[slot=bubble-content]:bg-transparent *:data-[slot=bubble-content]:p-0 [&>[data-slot=bubble-content]:is(button,a):hover]:bg-muted [&>[data-slot=bubble-content]:is(button,a):hover]:text-foreground dark:[&>[data-slot=bubble-content]:is(button,a):hover]:bg-muted/50",
+        destructive:
+          "*:data-[slot=bubble-content]:bg-destructive/10 *:data-[slot=bubble-content]:text-destructive dark:*:data-[slot=bubble-content]:bg-destructive/20 [&>[data-slot=bubble-content]:is(button,a):hover]:bg-destructive/20 dark:[&>[data-slot=bubble-content]:is(button,a):hover]:bg-destructive/30",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+    },
+  },
+);
+
+function Bubble({
+  variant = "default",
+  align = "start",
+  className,
+  ...props
+}: React.ComponentProps<"div"> &
+  VariantProps<typeof bubbleVariants> & {
+    align?: "start" | "end";
+  }) {
+  return (
+    <div
+      data-slot="bubble"
+      data-variant={variant}
+      data-align={align}
+      className={cn(bubbleVariants({ variant }), className)}
+      {...props}
+    />
+  );
+}
+
+function BubbleContent({
+  asChild = false,
+  className,
+  ...props
+}: React.ComponentProps<"div"> & {
+  asChild?: boolean;
+}) {
+  const Comp = asChild ? Slot.Root : "div";
+
+  return (
+    <Comp
+      data-slot="bubble-content"
+      className={cn(
+        "w-fit max-w-full min-w-0 overflow-hidden rounded-xl border border-transparent px-3 py-2 text-sm leading-relaxed wrap-break-word group-data-[align=end]/bubble:self-end [button]:text-left [button,a]:transition-colors [button,a]:outline-none [button,a]:focus-visible:border-ring [button,a]:focus-visible:ring-3 [button,a]:focus-visible:ring-ring/50",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+const bubbleReactionsVariants = cva(
+  "absolute z-10 flex w-fit shrink-0 items-center justify-center gap-1 rounded-full bg-muted px-1.5 py-0.5 text-sm ring-3 ring-card has-[button]:p-0",
+  {
+    variants: {
+      side: {
+        top: "top-0 -translate-y-3/4",
+        bottom: "bottom-0 translate-y-3/4",
+      },
+      align: {
+        start: "left-3",
+        end: "right-3",
+      },
+    },
+    defaultVariants: {
+      side: "bottom",
+      align: "end",
+    },
+  },
+);
+
+function BubbleReactions({
+  side = "bottom",
+  align = "end",
+  className,
+  ...props
+}: React.ComponentProps<"div"> & {
+  align?: "start" | "end";
+  side?: "top" | "bottom";
+}) {
+  return (
+    <div
+      data-slot="bubble-reactions"
+      data-align={align}
+      data-side={side}
+      className={cn(bubbleReactionsVariants({ side, align }), className)}
+      {...props}
+    />
+  );
+}
+
+export { BubbleGroup, Bubble, BubbleContent, BubbleReactions };
diff --git a/packages/ui/components/ui/button.tsx b/packages/ui/components/ui/button.tsx
new file mode 100644
index 000000000..2d7b48520
--- /dev/null
+++ b/packages/ui/components/ui/button.tsx
@@ -0,0 +1,67 @@
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+import { Slot } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+const buttonVariants = cva(
+  "focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 rounded-lg border border-transparent bg-clip-padding text-sm font-medium focus-visible:ring-[3px] aria-invalid:ring-[3px] [&_svg:not([class*='size-'])]:size-4 inline-flex items-center justify-center whitespace-nowrap disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none shrink-0 [&_svg]:shrink-0 outline-none group/button select-none [&_svg]:opacity-70 [&_svg]:transition-opacity hover:[&_svg]:opacity-100",
+  {
+    variants: {
+      variant: {
+        default: "bg-primary text-primary-foreground hover:bg-blue-ribbon-500",
+        outline:
+          "border-border bg-background hover:bg-muted hover:text-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50 aria-expanded:bg-muted aria-expanded:text-foreground",
+        secondary:
+          "bg-secondary text-secondary-foreground hover:bg-secondary/80 aria-expanded:bg-secondary aria-expanded:text-secondary-foreground",
+        ghost:
+          "hover:bg-muted hover:text-foreground dark:hover:bg-muted/50 aria-expanded:bg-muted aria-expanded:text-foreground",
+        destructive:
+          "bg-destructive/10 hover:bg-destructive/20 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/20 text-destructive focus-visible:border-destructive/40 dark:hover:bg-destructive/30",
+        link: "text-primary underline-offset-4 hover:underline",
+      },
+      size: {
+        default:
+          "h-8 gap-1.5 px-2.5 has-data-[icon=inline-end]:pr-2 has-data-[icon=inline-start]:pl-2",
+        xs: "h-6 gap-1 rounded-[min(var(--radius-md),10px)] px-2 text-xs in-data-[slot=button-group]:rounded-lg has-data-[icon=inline-end]:pr-1.5 has-data-[icon=inline-start]:pl-1.5 [&_svg:not([class*='size-'])]:size-3",
+        sm: "h-7 gap-1 rounded-[min(var(--radius-md),12px)] px-2.5 text-[0.8rem] in-data-[slot=button-group]:rounded-lg has-data-[icon=inline-end]:pr-1.5 has-data-[icon=inline-start]:pl-1.5 [&_svg:not([class*='size-'])]:size-3.5",
+        lg: "h-9 gap-1.5 px-2.5 has-data-[icon=inline-end]:pr-3 has-data-[icon=inline-start]:pl-3",
+        icon: "size-8",
+        "icon-xs":
+          "size-6 rounded-[min(var(--radius-md),10px)] in-data-[slot=button-group]:rounded-lg [&_svg:not([class*='size-'])]:size-3",
+        "icon-sm":
+          "size-7 rounded-[min(var(--radius-md),12px)] in-data-[slot=button-group]:rounded-lg",
+        "icon-lg": "size-9",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+      size: "default",
+    },
+  },
+);
+
+function Button({
+  className,
+  variant = "default",
+  size = "default",
+  asChild = false,
+  ...props
+}: React.ComponentProps<"button"> &
+  VariantProps<typeof buttonVariants> & {
+    asChild?: boolean;
+  }) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "button";
+
+  return (
+    <Comp
+      data-slot="button"
+      data-variant={variant}
+      data-size={size}
+      className={cn(buttonVariants({ variant, size, className }))}
+      {...props}
+    />
+  );
+}
+
+export { Button, buttonVariants };
diff --git a/packages/ui/components/ui/calendar.tsx b/packages/ui/components/ui/calendar.tsx
new file mode 100644
index 000000000..902030437
--- /dev/null
+++ b/packages/ui/components/ui/calendar.tsx
@@ -0,0 +1,88 @@
+"use client";
+import type * as React from "react";
+
+import { ChevronDown, ChevronLeft, ChevronRight } from "lucide-react";
+import { DayPicker } from "react-day-picker";
+
+import { cn } from "../../lib/utils";
+import { buttonVariants } from "./button";
+
+function Calendar({
+  className,
+  classNames,
+  showOutsideDays = true,
+  ...props
+}: React.ComponentProps<typeof DayPicker>) {
+  return (
+    <DayPicker
+      className={cn(
+        "group/calendar bg-background p-2 [--cell-radius:var(--radius-md)] [--cell-size:1.75rem]",
+        className,
+      )}
+      classNames={{
+        vhidden: "sr-only",
+        months: "flex flex-col sm:flex-row gap-2",
+        month: "flex w-full flex-col gap-4",
+        caption: "relative flex h-(--cell-size) w-full items-center justify-center",
+        caption_dropdowns:
+          "flex h-(--cell-size) w-full items-center justify-center gap-1.5 px-(--cell-size) font-medium text-sm",
+        caption_label:
+          "flex items-center gap-1 rounded-(--cell-radius) font-medium text-sm select-none [&>svg]:size-3.5 [&>svg]:text-muted-foreground",
+        dropdown_month: "relative rounded-(--cell-radius)",
+        dropdown_year: "relative rounded-(--cell-radius)",
+        dropdown:
+          "absolute inset-0 h-full w-full cursor-pointer opacity-0 disabled:pointer-events-none disabled:opacity-0",
+        dropdown_icon: "ml-1 size-3.5 text-muted-foreground",
+        nav: "absolute inset-x-0 top-0 flex w-full items-center justify-between gap-1",
+        nav_button: cn(
+          buttonVariants({ variant: "outline" }),
+          "size-(--cell-size) bg-transparent p-0 opacity-50 hover:opacity-100",
+        ),
+        nav_button_previous: "absolute left-0",
+        nav_button_next: "absolute right-0",
+        table: "w-full border-collapse",
+        head_row: "flex",
+        head_cell:
+          "flex-1 rounded-(--cell-radius) font-normal text-[0.8rem] text-muted-foreground select-none",
+        row: "flex w-full mt-2",
+        cell: cn(
+          "relative aspect-square h-full w-full rounded-(--cell-radius) p-0 text-center text-sm select-none focus-within:relative focus-within:z-20 [&:has([aria-selected])]:bg-accent [&:has([aria-selected].day-range-end)]:rounded-r-(--cell-radius)",
+          props.mode === "range"
+            ? "[&:has(>.day-range-end)]:rounded-r-(--cell-radius) [&:has(>.day-range-start)]:rounded-l-(--cell-radius) first:[&:has([aria-selected])]:rounded-l-(--cell-radius) last:[&:has([aria-selected])]:rounded-r-(--cell-radius)"
+            : "[&:has([aria-selected])]:rounded-(--cell-radius)",
+        ),
+        day: cn(
+          buttonVariants({ variant: "ghost" }),
+          "relative z-10 size-(--cell-size) min-w-(--cell-size) border-0 p-0 font-normal leading-none aria-selected:opacity-100",
+        ),
+        day_range_start:
+          "day-range-start aria-selected:bg-primary aria-selected:text-primary-foreground",
+        day_range_end:
+          "day-range-end aria-selected:bg-primary aria-selected:text-primary-foreground",
+        day_selected:
+          "bg-primary text-primary-foreground hover:bg-primary hover:text-primary-foreground focus:bg-primary focus:text-primary-foreground",
+        day_today: "bg-accent text-accent-foreground",
+        day_outside: "day-outside text-muted-foreground aria-selected:text-muted-foreground",
+        day_disabled: "text-muted-foreground opacity-50",
+        day_range_middle: "aria-selected:bg-accent aria-selected:text-accent-foreground",
+        day_hidden: "invisible",
+        ...classNames,
+      }}
+      components={{
+        IconDropdown: ({ className, ...props }) => (
+          <ChevronDown className={cn("size-3.5", className)} {...props} />
+        ),
+        IconLeft: ({ className, ...props }) => (
+          <ChevronLeft className={cn("size-4", className)} {...props} />
+        ),
+        IconRight: ({ className, ...props }) => (
+          <ChevronRight className={cn("size-4", className)} {...props} />
+        ),
+      }}
+      showOutsideDays={showOutsideDays}
+      {...props}
+    />
+  );
+}
+
+export { Calendar };
diff --git a/packages/ui/components/ui/card.tsx b/packages/ui/components/ui/card.tsx
new file mode 100644
index 000000000..e322d734e
--- /dev/null
+++ b/packages/ui/components/ui/card.tsx
@@ -0,0 +1,101 @@
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+
+function Card({
+  className,
+  size = "default",
+  variant = "default",
+  ...props
+}: React.ComponentProps<"div"> & {
+  size?: "default" | "sm";
+  variant?: "default" | "destructive";
+}) {
+  return (
+    <div
+      data-slot="card"
+      data-size={size}
+      data-variant={variant}
+      className={cn(
+        "ring-border dark:bg-card/50 bg-muted/50 text-card-foreground overflow-hidden rounded-lg text-sm ring-1 has-[>img:first-child]:pt-0 data-[size=sm]:py-3 *:[img:first-child]:rounded-t-xl *:[img:last-child]:rounded-b-xl group/card flex flex-col",
+        variant === "destructive" && "ring-destructive/30 border-destructive/30",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-header"
+      className={cn(
+        "gap-x-1 rounded-t-xl px-2 py-2 pl-4 text-left group-data-[size=sm]/card:px-3 [.border-b]:pb-4 group-data-[size=sm]/card:[.border-b]:pb-3 group/card-header @container/card-header grid auto-rows-min has-data-[slot=card-action]:grid-cols-[1fr_auto] has-data-[slot=card-description]:grid-rows-[auto_auto]",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function CardTitle({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-title"
+      className={cn(
+        "text-sm leading-snug font-medium group-data-[size=sm]/card:text-sm min-h-8 flex items-center",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function CardDescription({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-description"
+      className={cn("text-muted-foreground text-sm", className)}
+      {...props}
+    />
+  );
+}
+
+function CardAction({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-action"
+      className={cn("col-start-2 row-span-2 row-start-1 self-start justify-self-end", className)}
+      {...props}
+    />
+  );
+}
+
+function CardContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-content"
+      className={cn(
+        "px-4 py-3 group-data-[size=sm]/card:px-3 rounded-lg bg-card ring-1 ring-border",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="card-footer"
+      className={cn(
+        "rounded-b-xl  px-2 pl-4 py-2 group-data-[size=sm]/card:p-3 flex items-center",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { Card, CardHeader, CardFooter, CardTitle, CardAction, CardDescription, CardContent };
diff --git a/packages/ui/components/ui/carousel.tsx b/packages/ui/components/ui/carousel.tsx
new file mode 100644
index 000000000..d4f307ad0
--- /dev/null
+++ b/packages/ui/components/ui/carousel.tsx
@@ -0,0 +1,237 @@
+"use client";
+
+import useEmblaCarousel, { type UseEmblaCarouselType } from "embla-carousel-react";
+import { ArrowLeft, ArrowRight } from "lucide-react";
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+import { Button } from "./button";
+
+type CarouselApi = UseEmblaCarouselType[1];
+type UseCarouselParameters = Parameters<typeof useEmblaCarousel>;
+type CarouselOptions = UseCarouselParameters[0];
+type CarouselPlugin = UseCarouselParameters[1];
+
+interface CarouselProps {
+  opts?: CarouselOptions;
+  plugins?: CarouselPlugin;
+  orientation?: "horizontal" | "vertical";
+  setApi?: (api: CarouselApi) => void;
+}
+
+type CarouselContextProps = {
+  carouselRef: ReturnType<typeof useEmblaCarousel>[0];
+  api: ReturnType<typeof useEmblaCarousel>[1];
+  scrollPrev: () => void;
+  scrollNext: () => void;
+  canScrollPrev: boolean;
+  canScrollNext: boolean;
+} & CarouselProps;
+
+const CarouselContext = React.createContext<CarouselContextProps | null>(null);
+
+function useCarousel() {
+  const context = React.useContext(CarouselContext);
+
+  if (!context) {
+    throw new Error("useCarousel must be used within a <Carousel />");
+  }
+
+  return context;
+}
+
+function Carousel({
+  orientation = "horizontal",
+  opts,
+  setApi,
+  plugins,
+  className,
+  children,
+  ...props
+}: React.ComponentProps<"div"> & CarouselProps) {
+  const [carouselRef, api] = useEmblaCarousel(
+    {
+      ...opts,
+      axis: orientation === "horizontal" ? "x" : "y",
+    },
+    plugins,
+  );
+  const [canScrollPrev, setCanScrollPrev] = React.useState(false);
+  const [canScrollNext, setCanScrollNext] = React.useState(false);
+
+  const onSelect = React.useCallback((api: CarouselApi) => {
+    if (!api) {
+      return;
+    }
+    setCanScrollPrev(api.canScrollPrev());
+    setCanScrollNext(api.canScrollNext());
+  }, []);
+
+  const scrollPrev = React.useCallback(() => {
+    api?.scrollPrev();
+  }, [api]);
+
+  const scrollNext = React.useCallback(() => {
+    api?.scrollNext();
+  }, [api]);
+
+  const handleKeyDown = React.useCallback(
+    (event: React.KeyboardEvent<HTMLDivElement>) => {
+      if (event.key === "ArrowLeft") {
+        event.preventDefault();
+        scrollPrev();
+      } else if (event.key === "ArrowRight") {
+        event.preventDefault();
+        scrollNext();
+      }
+    },
+    [scrollPrev, scrollNext],
+  );
+
+  React.useEffect(() => {
+    if (!(api && setApi)) {
+      return;
+    }
+    setApi(api);
+  }, [api, setApi]);
+
+  React.useEffect(() => {
+    if (!api) {
+      return;
+    }
+    onSelect(api);
+    api.on("reInit", onSelect);
+    api.on("select", onSelect);
+
+    return () => {
+      api?.off("select", onSelect);
+    };
+  }, [api, onSelect]);
+
+  return (
+    <CarouselContext.Provider
+      value={{
+        api,
+        canScrollNext,
+        canScrollPrev,
+        carouselRef,
+        opts,
+        orientation: orientation || (opts?.axis === "y" ? "vertical" : "horizontal"),
+        scrollNext,
+        scrollPrev,
+      }}
+    >
+      {/** biome-ignore lint/a11y/useSemanticElements: shadcn */}
+      <div
+        aria-roledescription="carousel"
+        className={cn("relative", className)}
+        data-slot="carousel"
+        onKeyDownCapture={handleKeyDown}
+        role="region"
+        {...props}
+      >
+        {children}
+      </div>
+    </CarouselContext.Provider>
+  );
+}
+
+function CarouselContent({ className, ...props }: React.ComponentProps<"div">) {
+  const { carouselRef, orientation } = useCarousel();
+
+  return (
+    <div className="overflow-hidden" data-slot="carousel-content" ref={carouselRef}>
+      <div
+        className={cn("flex", orientation === "horizontal" ? "-ml-4" : "-mt-4 flex-col", className)}
+        {...props}
+      />
+    </div>
+  );
+}
+
+function CarouselItem({ className, ...props }: React.ComponentProps<"div">) {
+  const { orientation } = useCarousel();
+
+  return (
+    <div
+      aria-roledescription="slide"
+      className={cn(
+        "min-w-0 shrink-0 grow-0 basis-full",
+        orientation === "horizontal" ? "pl-4" : "pt-4",
+        className,
+      )}
+      data-slot="carousel-item"
+      role="group"
+      {...props}
+    />
+  );
+}
+
+function CarouselPrevious({
+  className,
+  variant = "outline",
+  size = "icon",
+  ...props
+}: React.ComponentProps<typeof Button>) {
+  const { orientation, scrollPrev, canScrollPrev } = useCarousel();
+
+  return (
+    <Button
+      className={cn(
+        "absolute size-8 rounded-full",
+        orientation === "horizontal"
+          ? "-left-12 -translate-y-1/2 top-1/2"
+          : "-top-12 -translate-x-1/2 left-1/2 rotate-90",
+        className,
+      )}
+      data-slot="carousel-previous"
+      disabled={!canScrollPrev}
+      onClick={scrollPrev}
+      size={size}
+      variant={variant}
+      {...props}
+    >
+      <ArrowLeft />
+      <span className="sr-only">Previous slide</span>
+    </Button>
+  );
+}
+
+function CarouselNext({
+  className,
+  variant = "outline",
+  size = "icon",
+  ...props
+}: React.ComponentProps<typeof Button>) {
+  const { orientation, scrollNext, canScrollNext } = useCarousel();
+
+  return (
+    <Button
+      className={cn(
+        "absolute size-8 rounded-full",
+        orientation === "horizontal"
+          ? "-right-12 -translate-y-1/2 top-1/2"
+          : "-bottom-12 -translate-x-1/2 left-1/2 rotate-90",
+        className,
+      )}
+      data-slot="carousel-next"
+      disabled={!canScrollNext}
+      onClick={scrollNext}
+      size={size}
+      variant={variant}
+      {...props}
+    >
+      <ArrowRight />
+      <span className="sr-only">Next slide</span>
+    </Button>
+  );
+}
+
+export {
+  type CarouselApi,
+  Carousel,
+  CarouselContent,
+  CarouselItem,
+  CarouselPrevious,
+  CarouselNext,
+};
diff --git a/packages/ui/components/ui/chart.tsx b/packages/ui/components/ui/chart.tsx
new file mode 100644
index 000000000..cfa620455
--- /dev/null
+++ b/packages/ui/components/ui/chart.tsx
@@ -0,0 +1,326 @@
+"use client";
+import * as React from "react";
+import * as RechartsPrimitive from "recharts";
+
+import { cn } from "../../lib/utils";
+
+// Format: { THEME_NAME: CSS_SELECTOR }
+const THEMES = { dark: ".dark", light: "" } as const;
+
+export type ChartConfig = {
+  [k in string]: {
+    label?: React.ReactNode;
+    icon?: React.ComponentType;
+  } & (
+    | { color?: string; theme?: never }
+    | { color?: never; theme: Record<keyof typeof THEMES, string> }
+  );
+};
+
+interface ChartContextProps {
+  config: ChartConfig;
+}
+
+const ChartContext = React.createContext<ChartContextProps | null>(null);
+
+function useChart() {
+  const context = React.useContext(ChartContext);
+
+  if (!context) {
+    throw new Error("useChart must be used within a <ChartContainer />");
+  }
+
+  return context;
+}
+
+function ChartContainer({
+  id,
+  className,
+  children,
+  config,
+  ...props
+}: React.ComponentProps<"div"> & {
+  config: ChartConfig;
+  children: React.ComponentProps<typeof RechartsPrimitive.ResponsiveContainer>["children"];
+}) {
+  const uniqueId = React.useId();
+  const chartId = `chart-${id || uniqueId.replaceAll(":", "")}`;
+
+  return (
+    <ChartContext.Provider value={{ config }}>
+      <div
+        className={cn(
+          "flex aspect-video justify-center text-xs [&_.recharts-cartesian-axis-tick_text]:fill-muted-foreground [&_.recharts-cartesian-grid_line[stroke='#ccc']]:stroke-border/50 [&_.recharts-curve.recharts-tooltip-cursor]:stroke-border [&_.recharts-dot[stroke='#fff']]:stroke-transparent [&_.recharts-layer]:outline-hidden [&_.recharts-polar-grid_[stroke='#ccc']]:stroke-border [&_.recharts-radial-bar-background-sector]:fill-muted [&_.recharts-rectangle.recharts-tooltip-cursor]:fill-muted [&_.recharts-reference-line_[stroke='#ccc']]:stroke-border [&_.recharts-sector[stroke='#fff']]:stroke-transparent [&_.recharts-sector]:outline-hidden [&_.recharts-surface]:outline-hidden",
+          className,
+        )}
+        data-chart={chartId}
+        data-slot="chart"
+        {...props}
+      >
+        <ChartStyle config={config} id={chartId} />
+        <RechartsPrimitive.ResponsiveContainer>{children}</RechartsPrimitive.ResponsiveContainer>
+      </div>
+    </ChartContext.Provider>
+  );
+}
+
+const ChartStyle = ({ id, config }: { id: string; config: ChartConfig }) => {
+  const colorConfig = Object.entries(config).filter(([, config]) => config.theme || config.color);
+
+  if (!colorConfig.length) {
+    return null;
+  }
+
+  return (
+    <style
+      // biome-ignore lint/security/noDangerouslySetInnerHtml: shadcn, should be safe
+      dangerouslySetInnerHTML={{
+        __html: Object.entries(THEMES)
+          .map(
+            ([theme, prefix]) => `
+${prefix} [data-chart=${id}] {
+${colorConfig
+  .map(([key, itemConfig]) => {
+    const color = itemConfig.theme?.[theme as keyof typeof itemConfig.theme] || itemConfig.color;
+    return color ? `  --color-${key}: ${color};` : null;
+  })
+  .join("\n")}
+}
+`,
+          )
+          .join("\n"),
+      }}
+    />
+  );
+};
+
+const ChartTooltip = RechartsPrimitive.Tooltip;
+
+function ChartTooltipContent({
+  active,
+  payload,
+  className,
+  indicator = "dot",
+  hideLabel = false,
+  hideIndicator = false,
+  label,
+  labelFormatter,
+  labelClassName,
+  formatter,
+  color,
+  nameKey,
+  labelKey,
+}: React.ComponentProps<typeof RechartsPrimitive.Tooltip> &
+  React.ComponentProps<"div"> & {
+    hideLabel?: boolean;
+    hideIndicator?: boolean;
+    indicator?: "line" | "dot" | "dashed";
+    nameKey?: string;
+    labelKey?: string;
+  }) {
+  const { config } = useChart();
+
+  const tooltipLabel = React.useMemo(() => {
+    if (hideLabel || !payload?.length) {
+      return null;
+    }
+
+    const [item] = payload;
+    const key = `${labelKey || item?.dataKey || item?.name || "value"}`;
+    const itemConfig = getPayloadConfigFromPayload(config, item, key);
+    const value =
+      !labelKey && typeof label === "string"
+        ? config[label as keyof typeof config]?.label || label
+        : itemConfig?.label;
+
+    if (labelFormatter) {
+      return (
+        <div className={cn("font-medium", labelClassName)}>{labelFormatter(value, payload)}</div>
+      );
+    }
+
+    if (!value) {
+      return null;
+    }
+
+    return <div className={cn("font-medium", labelClassName)}>{value}</div>;
+  }, [label, labelFormatter, payload, hideLabel, labelClassName, config, labelKey]);
+
+  if (!(active && payload?.length)) {
+    return null;
+  }
+
+  const nestLabel = payload.length === 1 && indicator !== "dot";
+
+  return (
+    <div
+      className={cn(
+        "grid min-w-[8rem] items-start gap-1.5 rounded-lg border border-border/60 bg-background px-2.5 py-1.5 text-xs shadow-xl",
+        className,
+      )}
+    >
+      {nestLabel ? null : tooltipLabel}
+      <div className="grid gap-1.5">
+        {payload
+          .filter((item) => item.type !== "none")
+          .map((item, index) => {
+            const key = `${nameKey || item.name || item.dataKey || "value"}`;
+            const itemConfig = getPayloadConfigFromPayload(config, item, key);
+            const indicatorColor = color || item.payload.fill || item.color;
+
+            return (
+              <div
+                className={cn(
+                  "flex w-full flex-wrap items-stretch gap-2 [&>svg]:h-2.5 [&>svg]:w-2.5 [&>svg]:text-muted-foreground",
+                  indicator === "dot" && "items-center",
+                )}
+                key={item.dataKey}
+              >
+                {formatter && item?.value !== undefined && item.name ? (
+                  formatter(item.value, item.name, item, index, item.payload)
+                ) : (
+                  <>
+                    {itemConfig?.icon ? (
+                      <itemConfig.icon />
+                    ) : (
+                      !hideIndicator && (
+                        <div
+                          className={cn(
+                            "shrink-0 rounded-[2px] border-(--color-border) bg-(--color-bg)",
+                            {
+                              "h-2.5 w-2.5": indicator === "dot",
+                              "my-0.5": nestLabel && indicator === "dashed",
+                              "w-0 border-[1.5px] border-dashed bg-transparent":
+                                indicator === "dashed",
+                              "w-1": indicator === "line",
+                            },
+                          )}
+                          style={
+                            {
+                              "--color-bg": indicatorColor,
+                              "--color-border": indicatorColor,
+                            } as React.CSSProperties
+                          }
+                        />
+                      )
+                    )}
+                    <div
+                      className={cn(
+                        "flex flex-1 justify-between leading-none",
+                        nestLabel ? "items-end" : "items-center",
+                      )}
+                    >
+                      <div className="grid gap-1.5">
+                        {nestLabel ? tooltipLabel : null}
+                        <span className="text-muted-foreground">
+                          {itemConfig?.label || item.name}
+                        </span>
+                      </div>
+                      {item.value && (
+                        <span className="font-medium font-mono text-foreground tabular-nums">
+                          {item.value.toLocaleString()}
+                        </span>
+                      )}
+                    </div>
+                  </>
+                )}
+              </div>
+            );
+          })}
+      </div>
+    </div>
+  );
+}
+
+const ChartLegend = RechartsPrimitive.Legend;
+
+function ChartLegendContent({
+  className,
+  hideIcon = false,
+  payload,
+  verticalAlign = "bottom",
+  nameKey,
+}: React.ComponentProps<"div"> &
+  Pick<RechartsPrimitive.LegendProps, "payload" | "verticalAlign"> & {
+    hideIcon?: boolean;
+    nameKey?: string;
+  }) {
+  const { config } = useChart();
+
+  if (!payload?.length) {
+    return null;
+  }
+
+  return (
+    <div
+      className={cn(
+        "flex items-center justify-center gap-4",
+        verticalAlign === "top" ? "pb-3" : "pt-3",
+        className,
+      )}
+    >
+      {payload
+        .filter((item) => item.type !== "none")
+        .map((item) => {
+          const key = `${nameKey || item.dataKey || "value"}`;
+          const itemConfig = getPayloadConfigFromPayload(config, item, key);
+
+          return (
+            <div
+              className={cn(
+                "flex items-center gap-1.5 [&>svg]:h-3 [&>svg]:w-3 [&>svg]:text-muted-foreground",
+              )}
+              key={item.value}
+            >
+              {itemConfig?.icon && !hideIcon ? (
+                <itemConfig.icon />
+              ) : (
+                <div
+                  className="h-2 w-2 shrink-0 rounded-[2px]"
+                  style={{
+                    backgroundColor: item.color,
+                  }}
+                />
+              )}
+              {itemConfig?.label}
+            </div>
+          );
+        })}
+    </div>
+  );
+}
+
+// Helper to extract item config from a payload.
+function getPayloadConfigFromPayload(config: ChartConfig, payload: unknown, key: string) {
+  if (typeof payload !== "object" || payload === null) {
+    return;
+  }
+
+  const payloadPayload =
+    "payload" in payload && typeof payload.payload === "object" && payload.payload !== null
+      ? payload.payload
+      : undefined;
+
+  let configLabelKey: string = key;
+
+  if (key in payload && typeof payload[key as keyof typeof payload] === "string") {
+    configLabelKey = payload[key as keyof typeof payload] as string;
+  } else if (
+    payloadPayload &&
+    key in payloadPayload &&
+    typeof payloadPayload[key as keyof typeof payloadPayload] === "string"
+  ) {
+    configLabelKey = payloadPayload[key as keyof typeof payloadPayload] as string;
+  }
+
+  return configLabelKey in config ? config[configLabelKey] : config[key as keyof typeof config];
+}
+
+export {
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  ChartLegend,
+  ChartLegendContent,
+  ChartStyle,
+};
diff --git a/packages/ui/components/ui/checkbox.tsx b/packages/ui/components/ui/checkbox.tsx
new file mode 100644
index 000000000..27247e62f
--- /dev/null
+++ b/packages/ui/components/ui/checkbox.tsx
@@ -0,0 +1,30 @@
+"use client";
+
+import type * as React from "react";
+
+import { Checkbox as CheckboxPrimitive } from "radix-ui";
+import { CheckIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function Checkbox({ className, ...props }: React.ComponentProps<typeof CheckboxPrimitive.Root>) {
+  return (
+    <CheckboxPrimitive.Root
+      className={cn(
+        "peer size-4 shrink-0 rounded-[4px] border border-input shadow-xs outline-none transition-shadow focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 data-[state=checked]:border-primary data-[state=checked]:bg-primary data-[state=checked]:text-primary-foreground dark:bg-input/30 dark:data-[state=checked]:bg-primary dark:aria-invalid:ring-destructive/40",
+        className,
+      )}
+      data-slot="checkbox"
+      {...props}
+    >
+      <CheckboxPrimitive.Indicator
+        className="flex items-center justify-center text-current transition-none"
+        data-slot="checkbox-indicator"
+      >
+        <CheckIcon className="size-3.5" />
+      </CheckboxPrimitive.Indicator>
+    </CheckboxPrimitive.Root>
+  );
+}
+
+export { Checkbox };
diff --git a/packages/ui/components/ui/collapsible.tsx b/packages/ui/components/ui/collapsible.tsx
new file mode 100644
index 000000000..80463d3ea
--- /dev/null
+++ b/packages/ui/components/ui/collapsible.tsx
@@ -0,0 +1,19 @@
+import { Collapsible as CollapsiblePrimitive } from "radix-ui";
+
+function Collapsible({ ...props }: React.ComponentProps<typeof CollapsiblePrimitive.Root>) {
+  return <CollapsiblePrimitive.Root data-slot="collapsible" {...props} />;
+}
+
+function CollapsibleTrigger({
+  ...props
+}: React.ComponentProps<typeof CollapsiblePrimitive.CollapsibleTrigger>) {
+  return <CollapsiblePrimitive.CollapsibleTrigger data-slot="collapsible-trigger" {...props} />;
+}
+
+function CollapsibleContent({
+  ...props
+}: React.ComponentProps<typeof CollapsiblePrimitive.CollapsibleContent>) {
+  return <CollapsiblePrimitive.CollapsibleContent data-slot="collapsible-content" {...props} />;
+}
+
+export { Collapsible, CollapsibleTrigger, CollapsibleContent };
diff --git a/packages/ui/components/ui/combobox.tsx b/packages/ui/components/ui/combobox.tsx
new file mode 100644
index 000000000..11db954ff
--- /dev/null
+++ b/packages/ui/components/ui/combobox.tsx
@@ -0,0 +1,270 @@
+"use client";
+
+import * as React from "react";
+import { Combobox as ComboboxPrimitive } from "@base-ui/react";
+import { ChevronDownIcon, XIcon, CheckIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+import { Button } from "./button";
+import { InputGroup, InputGroupAddon, InputGroupButton, InputGroupInput } from "./input-group";
+
+const Combobox = ComboboxPrimitive.Root;
+
+function ComboboxValue({ ...props }: ComboboxPrimitive.Value.Props) {
+  return <ComboboxPrimitive.Value data-slot="combobox-value" {...props} />;
+}
+
+function ComboboxTrigger({ className, children, ...props }: ComboboxPrimitive.Trigger.Props) {
+  return (
+    <ComboboxPrimitive.Trigger
+      data-slot="combobox-trigger"
+      className={cn("[&_svg:not([class*='size-'])]:size-4", className)}
+      {...props}
+    >
+      {children}
+      <ChevronDownIcon className="text-muted-foreground size-4 pointer-events-none" />
+    </ComboboxPrimitive.Trigger>
+  );
+}
+
+function ComboboxClear({ className, ...props }: ComboboxPrimitive.Clear.Props) {
+  return (
+    <ComboboxPrimitive.Clear
+      data-slot="combobox-clear"
+      render={<InputGroupButton variant="ghost" size="icon-xs" />}
+      className={cn(className)}
+      {...props}
+    >
+      <XIcon className="pointer-events-none" />
+    </ComboboxPrimitive.Clear>
+  );
+}
+
+function ComboboxInput({
+  className,
+  children,
+  disabled = false,
+  showTrigger = true,
+  showClear = false,
+  ...props
+}: ComboboxPrimitive.Input.Props & {
+  showTrigger?: boolean;
+  showClear?: boolean;
+}) {
+  return (
+    <InputGroup className={cn("w-auto", className)}>
+      <ComboboxPrimitive.Input render={<InputGroupInput disabled={disabled} />} {...props} />
+      <InputGroupAddon align="inline-end">
+        {showTrigger && (
+          <InputGroupButton
+            size="icon-xs"
+            variant="ghost"
+            asChild
+            data-slot="input-group-button"
+            className="group-has-data-[slot=combobox-clear]/input-group:hidden data-pressed:bg-transparent"
+            disabled={disabled}
+          >
+            <ComboboxTrigger />
+          </InputGroupButton>
+        )}
+        {showClear && <ComboboxClear disabled={disabled} />}
+      </InputGroupAddon>
+      {children}
+    </InputGroup>
+  );
+}
+
+function ComboboxContent({
+  className,
+  side = "bottom",
+  sideOffset = 6,
+  align = "start",
+  alignOffset = 0,
+  anchor,
+  ...props
+}: ComboboxPrimitive.Popup.Props &
+  Pick<
+    ComboboxPrimitive.Positioner.Props,
+    "side" | "align" | "sideOffset" | "alignOffset" | "anchor"
+  >) {
+  return (
+    <ComboboxPrimitive.Portal>
+      <ComboboxPrimitive.Positioner
+        side={side}
+        sideOffset={sideOffset}
+        align={align}
+        alignOffset={alignOffset}
+        anchor={anchor}
+        className="isolate z-50"
+      >
+        <ComboboxPrimitive.Popup
+          data-slot="combobox-content"
+          data-chips={!!anchor}
+          className={cn(
+            "bg-popover/70 backdrop-blur-md text-popover-foreground data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 ring-foreground/10 *:data-[slot=input-group]:bg-input/30 *:data-[slot=input-group]:border-input/30 max-h-72 min-w-36 overflow-hidden rounded-lg shadow-md ring-1 duration-100 *:data-[slot=input-group]:m-1 *:data-[slot=input-group]:mb-0 *:data-[slot=input-group]:h-8 *:data-[slot=input-group]:shadow-none group/combobox-content relative max-h-(--available-height) w-(--anchor-width) max-w-(--available-width) min-w-[calc(var(--anchor-width)+--spacing(7))] origin-(--transform-origin) data-[chips=true]:min-w-(--anchor-width) data-closed:overflow-hidden",
+            className,
+          )}
+          {...props}
+        />
+      </ComboboxPrimitive.Positioner>
+    </ComboboxPrimitive.Portal>
+  );
+}
+
+function ComboboxList({ className, ...props }: ComboboxPrimitive.List.Props) {
+  return (
+    <ComboboxPrimitive.List
+      data-slot="combobox-list"
+      className={cn(
+        "no-scrollbar max-h-[min(calc(--spacing(72)---spacing(9)),calc(var(--available-height)---spacing(9)))] scroll-py-1 overflow-y-auto p-1 data-empty:p-0 overflow-y-auto overscroll-contain",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function ComboboxItem({ className, children, ...props }: ComboboxPrimitive.Item.Props) {
+  return (
+    <ComboboxPrimitive.Item
+      data-slot="combobox-item"
+      className={cn(
+        "data-highlighted:bg-primary data-highlighted:text-accent-foreground not-data-[variant=destructive]:data-highlighted:**:text-accent-foreground gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 relative flex w-full cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      {...props}
+    >
+      {children}
+      <ComboboxPrimitive.ItemIndicator
+        render={
+          <span className="pointer-events-none absolute right-2 flex size-4 items-center justify-center" />
+        }
+      >
+        <CheckIcon className="pointer-events-none" />
+      </ComboboxPrimitive.ItemIndicator>
+    </ComboboxPrimitive.Item>
+  );
+}
+
+function ComboboxGroup({ className, ...props }: ComboboxPrimitive.Group.Props) {
+  return (
+    <ComboboxPrimitive.Group data-slot="combobox-group" className={cn(className)} {...props} />
+  );
+}
+
+function ComboboxLabel({ className, ...props }: ComboboxPrimitive.GroupLabel.Props) {
+  return (
+    <ComboboxPrimitive.GroupLabel
+      data-slot="combobox-label"
+      className={cn("text-muted-foreground px-1.5 py-1 text-xs font-medium", className)}
+      {...props}
+    />
+  );
+}
+
+function ComboboxCollection({ ...props }: ComboboxPrimitive.Collection.Props) {
+  return <ComboboxPrimitive.Collection data-slot="combobox-collection" {...props} />;
+}
+
+function ComboboxEmpty({ className, ...props }: ComboboxPrimitive.Empty.Props) {
+  return (
+    <ComboboxPrimitive.Empty
+      data-slot="combobox-empty"
+      className={cn(
+        "text-muted-foreground hidden w-full justify-center py-2 text-center text-sm group-data-empty/combobox-content:flex",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function ComboboxSeparator({ className, ...props }: ComboboxPrimitive.Separator.Props) {
+  return (
+    <ComboboxPrimitive.Separator
+      data-slot="combobox-separator"
+      className={cn("bg-border -mx-1 my-1 h-px", className)}
+      {...props}
+    />
+  );
+}
+
+function ComboboxChips({
+  className,
+  ...props
+}: React.ComponentPropsWithRef<typeof ComboboxPrimitive.Chips> & ComboboxPrimitive.Chips.Props) {
+  return (
+    <ComboboxPrimitive.Chips
+      data-slot="combobox-chips"
+      className={cn(
+        "dark:bg-input/30 border-input focus-within:border-ring focus-within:ring-ring/50 has-aria-invalid:ring-destructive/20 dark:has-aria-invalid:ring-destructive/40 has-aria-invalid:border-destructive dark:has-aria-invalid:border-destructive/50 flex min-h-8 flex-wrap items-center gap-1 rounded-lg border bg-transparent bg-clip-padding px-2.5 py-1 text-sm transition-colors focus-within:ring-[3px] has-aria-invalid:ring-[3px] has-data-[slot=combobox-chip]:px-1",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function ComboboxChip({
+  className,
+  children,
+  showRemove = true,
+  ...props
+}: ComboboxPrimitive.Chip.Props & {
+  showRemove?: boolean;
+}) {
+  return (
+    <ComboboxPrimitive.Chip
+      data-slot="combobox-chip"
+      className={cn(
+        "bg-muted text-foreground flex h-[calc(--spacing(5.25))] w-fit items-center justify-center gap-1 rounded-sm px-1.5 text-xs font-medium whitespace-nowrap has-data-[slot=combobox-chip-remove]:pr-0 has-disabled:pointer-events-none has-disabled:cursor-not-allowed has-disabled:opacity-50",
+        className,
+      )}
+      {...props}
+    >
+      {children}
+      {showRemove && (
+        <ComboboxPrimitive.ChipRemove
+          render={<Button variant="ghost" size="icon-xs" />}
+          className="-ml-1 opacity-50 hover:opacity-100"
+          data-slot="combobox-chip-remove"
+        >
+          <XIcon className="pointer-events-none" />
+        </ComboboxPrimitive.ChipRemove>
+      )}
+    </ComboboxPrimitive.Chip>
+  );
+}
+
+function ComboboxChipsInput({ className, ...props }: ComboboxPrimitive.Input.Props) {
+  return (
+    <ComboboxPrimitive.Input
+      data-slot="combobox-chip-input"
+      className={cn("min-w-16 flex-1 outline-none", className)}
+      {...props}
+    />
+  );
+}
+
+function useComboboxAnchor() {
+  return React.useRef<HTMLDivElement | null>(null);
+}
+
+export {
+  Combobox,
+  ComboboxInput,
+  ComboboxContent,
+  ComboboxList,
+  ComboboxItem,
+  ComboboxGroup,
+  ComboboxLabel,
+  ComboboxCollection,
+  ComboboxEmpty,
+  ComboboxSeparator,
+  ComboboxChips,
+  ComboboxChip,
+  ComboboxChipsInput,
+  ComboboxTrigger,
+  ComboboxValue,
+  useComboboxAnchor,
+};
diff --git a/packages/ui/components/ui/command.tsx b/packages/ui/components/ui/command.tsx
new file mode 100644
index 000000000..e2d4cdd19
--- /dev/null
+++ b/packages/ui/components/ui/command.tsx
@@ -0,0 +1,149 @@
+"use client";
+
+import type * as React from "react";
+
+import { Command as CommandPrimitive } from "cmdk";
+import { SearchIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+import { Dialog, DialogContent, DialogDescription, DialogHeader, DialogTitle } from "./dialog";
+
+function Command({ className, ...props }: React.ComponentProps<typeof CommandPrimitive>) {
+  return (
+    <CommandPrimitive
+      className={cn(
+        "flex h-full w-full flex-col overflow-hidden rounded-md bg-popover text-popover-foreground",
+        className,
+      )}
+      data-slot="command"
+      {...props}
+    />
+  );
+}
+
+function CommandDialog({
+  title = "Command Palette",
+  description = "Search for a command to run...",
+  children,
+  ...props
+}: React.ComponentProps<typeof Dialog> & {
+  title?: string;
+  description?: string;
+}) {
+  return (
+    <Dialog {...props}>
+      <DialogContent className="overflow-hidden p-0">
+        <DialogHeader className="sr-only">
+          <DialogTitle>{title}</DialogTitle>
+          <DialogDescription>{description}</DialogDescription>
+        </DialogHeader>
+        <Command className="**:data-[slot=command-input-wrapper]:h-12 [&_[cmdk-group-heading]]:px-2 [&_[cmdk-group-heading]]:font-medium [&_[cmdk-group-heading]]:text-muted-foreground [&_[cmdk-group]:not([hidden])_~[cmdk-group]]:pt-0 [&_[cmdk-group]]:px-2 [&_[cmdk-input-wrapper]_svg]:h-5 [&_[cmdk-input-wrapper]_svg]:w-5 [&_[cmdk-input]]:h-12 [&_[cmdk-item]]:px-2 [&_[cmdk-item]]:py-3 [&_[cmdk-item]_svg]:h-5 [&_[cmdk-item]_svg]:w-5">
+          {children}
+        </Command>
+      </DialogContent>
+    </Dialog>
+  );
+}
+
+function CommandInput({
+  className,
+  ...props
+}: React.ComponentProps<typeof CommandPrimitive.Input>) {
+  return (
+    <div className="flex h-9 items-center gap-2 border-b px-3" data-slot="command-input-wrapper">
+      <SearchIcon className="size-4 shrink-0 opacity-50" />
+      <CommandPrimitive.Input
+        className={cn(
+          "flex h-10 w-full rounded-md bg-transparent py-3 text-sm outline-hidden placeholder:text-muted-foreground disabled:cursor-not-allowed disabled:opacity-50",
+          className,
+        )}
+        data-slot="command-input"
+        {...props}
+      />
+    </div>
+  );
+}
+
+function CommandList({ className, ...props }: React.ComponentProps<typeof CommandPrimitive.List>) {
+  return (
+    <CommandPrimitive.List
+      className={cn("max-h-[300px] scroll-py-1 overflow-y-auto overflow-x-hidden", className)}
+      data-slot="command-list"
+      {...props}
+    />
+  );
+}
+
+function CommandEmpty({ ...props }: React.ComponentProps<typeof CommandPrimitive.Empty>) {
+  return (
+    <CommandPrimitive.Empty
+      className="py-6 text-center text-sm"
+      data-slot="command-empty"
+      {...props}
+    />
+  );
+}
+
+function CommandGroup({
+  className,
+  ...props
+}: React.ComponentProps<typeof CommandPrimitive.Group>) {
+  return (
+    <CommandPrimitive.Group
+      className={cn(
+        "overflow-hidden p-1 text-foreground [&_[cmdk-group-heading]]:px-2 [&_[cmdk-group-heading]]:py-1.5 [&_[cmdk-group-heading]]:font-medium [&_[cmdk-group-heading]]:text-muted-foreground [&_[cmdk-group-heading]]:text-xs",
+        className,
+      )}
+      data-slot="command-group"
+      {...props}
+    />
+  );
+}
+
+function CommandSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof CommandPrimitive.Separator>) {
+  return (
+    <CommandPrimitive.Separator
+      className={cn("-mx-1 h-px bg-border", className)}
+      data-slot="command-separator"
+      {...props}
+    />
+  );
+}
+
+function CommandItem({ className, ...props }: React.ComponentProps<typeof CommandPrimitive.Item>) {
+  return (
+    <CommandPrimitive.Item
+      className={cn(
+        "relative flex cursor-default select-none items-center gap-2 rounded-sm px-2 py-1.5 text-sm outline-hidden data-[disabled=true]:pointer-events-none data-[selected=true]:bg-accent data-[selected=true]:text-accent-foreground data-[disabled=true]:opacity-50 [&_svg:not([class*='size-'])]:size-4 [&_svg:not([class*='text-'])]:text-muted-foreground [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        className,
+      )}
+      data-slot="command-item"
+      {...props}
+    />
+  );
+}
+
+function CommandShortcut({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      className={cn("ml-auto text-muted-foreground text-xs tracking-widest", className)}
+      data-slot="command-shortcut"
+      {...props}
+    />
+  );
+}
+
+export {
+  Command,
+  CommandDialog,
+  CommandInput,
+  CommandList,
+  CommandEmpty,
+  CommandGroup,
+  CommandItem,
+  CommandShortcut,
+  CommandSeparator,
+};
diff --git a/packages/ui/components/ui/context-menu.tsx b/packages/ui/components/ui/context-menu.tsx
new file mode 100644
index 000000000..25242c241
--- /dev/null
+++ b/packages/ui/components/ui/context-menu.tsx
@@ -0,0 +1,237 @@
+"use client";
+
+import type * as React from "react";
+
+import { ContextMenu as ContextMenuPrimitive } from "radix-ui";
+import { CheckIcon, ChevronRightIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function ContextMenu({ ...props }: React.ComponentProps<typeof ContextMenuPrimitive.Root>) {
+  return <ContextMenuPrimitive.Root data-slot="context-menu" {...props} />;
+}
+
+function ContextMenuTrigger({
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.Trigger>) {
+  return <ContextMenuPrimitive.Trigger data-slot="context-menu-trigger" {...props} />;
+}
+
+function ContextMenuGroup({ ...props }: React.ComponentProps<typeof ContextMenuPrimitive.Group>) {
+  return <ContextMenuPrimitive.Group data-slot="context-menu-group" {...props} />;
+}
+
+function ContextMenuPortal({ ...props }: React.ComponentProps<typeof ContextMenuPrimitive.Portal>) {
+  return <ContextMenuPrimitive.Portal data-slot="context-menu-portal" {...props} />;
+}
+
+function ContextMenuSub({ ...props }: React.ComponentProps<typeof ContextMenuPrimitive.Sub>) {
+  return <ContextMenuPrimitive.Sub data-slot="context-menu-sub" {...props} />;
+}
+
+function ContextMenuRadioGroup({
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.RadioGroup>) {
+  return <ContextMenuPrimitive.RadioGroup data-slot="context-menu-radio-group" {...props} />;
+}
+
+function ContextMenuSubTrigger({
+  className,
+  inset,
+  children,
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.SubTrigger> & {
+  inset?: boolean;
+}) {
+  return (
+    <ContextMenuPrimitive.SubTrigger
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground data-open:bg-accent data-open:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground gap-1.5 rounded-md px-1.5 py-1 text-sm [&_svg:not([class*='size-'])]:size-4 flex cursor-default items-center outline-hidden select-none data-[inset]:pl-8 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      data-inset={inset}
+      data-slot="context-menu-sub-trigger"
+      {...props}
+    >
+      {children}
+      <ChevronRightIcon className="ml-auto" />
+    </ContextMenuPrimitive.SubTrigger>
+  );
+}
+
+function ContextMenuSubContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.SubContent>) {
+  return (
+    <ContextMenuPrimitive.SubContent
+      className={cn(
+        "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 min-w-[96px] origin-(--radix-context-menu-content-transform-origin) overflow-hidden rounded-md ring-foreground/10 bg-popover p-1 text-popover-foreground shadow-lg ring-1 duration-100 data-[state=closed]:animate-out data-[state=open]:animate-in",
+        className,
+      )}
+      data-slot="context-menu-sub-content"
+      {...props}
+    />
+  );
+}
+
+function ContextMenuContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.Content>) {
+  return (
+    <ContextMenuPrimitive.Portal>
+      <ContextMenuPrimitive.Content
+        className={cn(
+          "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 max-h-(--radix-context-menu-content-available-height) min-w-[8rem] origin-(--radix-context-menu-content-transform-origin) overflow-y-auto overflow-x-hidden rounded-lg ring-foreground/10 bg-popover/70 backdrop-blur-md p-1 text-popover-foreground shadow-md ring-1 data-[state=closed]:overflow-hidden",
+          className,
+        )}
+        data-slot="context-menu-content"
+        {...props}
+      />
+    </ContextMenuPrimitive.Portal>
+  );
+}
+
+function ContextMenuItem({
+  className,
+  inset,
+  variant = "default",
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.Item> & {
+  inset?: boolean;
+  variant?: "default" | "destructive";
+}) {
+  return (
+    <ContextMenuPrimitive.Item
+      className={cn(
+        "focus:bg-primary focus:text-accent-foreground data-[variant=destructive]:text-destructive data-[variant=destructive]:focus:bg-destructive/10 dark:data-[variant=destructive]:focus:bg-destructive/20 data-[variant=destructive]:focus:text-destructive data-[variant=destructive]:*:[svg]:!text-destructive not-data-[variant=destructive]:focus:**:text-accent-foreground gap-1.5 rounded-md px-1.5 py-1 text-sm [&_svg:not([class*='size-'])]:size-4 group/context-menu-item relative flex cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 data-[inset]:pl-8 [&_svg:not([class*='text-'])]:text-muted-foreground [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      data-inset={inset}
+      data-slot="context-menu-item"
+      data-variant={variant}
+      {...props}
+    />
+  );
+}
+
+function ContextMenuCheckboxItem({
+  className,
+  children,
+  checked,
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.CheckboxItem>) {
+  return (
+    <ContextMenuPrimitive.CheckboxItem
+      checked={checked}
+      className={cn(
+        "focus:bg-primary whitespace-nowrap focus:text-accent-foreground focus:**:text-accent-foreground gap-1.5 rounded-md py-1 pl-8 pr-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 relative flex cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      data-slot="context-menu-checkbox-item"
+      {...props}
+    >
+      <span
+        className="pointer-events-none absolute left-2 flex items-center justify-center"
+        data-slot="context-menu-checkbox-item-indicator"
+      >
+        <ContextMenuPrimitive.ItemIndicator>
+          <CheckIcon />
+        </ContextMenuPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </ContextMenuPrimitive.CheckboxItem>
+  );
+}
+
+function ContextMenuRadioItem({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.RadioItem>) {
+  return (
+    <ContextMenuPrimitive.RadioItem
+      className={cn(
+        "focus:bg-primary focus:text-accent-foreground focus:**:text-accent-foreground gap-1.5 rounded-md py-1 pl-8 pr-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 relative flex cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      data-slot="context-menu-radio-item"
+      {...props}
+    >
+      <span
+        className="pointer-events-none absolute left-2 flex items-center justify-center"
+        data-slot="context-menu-radio-item-indicator"
+      >
+        <ContextMenuPrimitive.ItemIndicator>
+          <CheckIcon />
+        </ContextMenuPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </ContextMenuPrimitive.RadioItem>
+  );
+}
+
+function ContextMenuLabel({
+  className,
+  inset,
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.Label> & {
+  inset?: boolean;
+}) {
+  return (
+    <ContextMenuPrimitive.Label
+      className={cn(
+        "text-muted-foreground px-1.5 py-1 text-xs font-medium data-[inset]:pl-8",
+        className,
+      )}
+      data-inset={inset}
+      data-slot="context-menu-label"
+      {...props}
+    />
+  );
+}
+
+function ContextMenuSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof ContextMenuPrimitive.Separator>) {
+  return (
+    <ContextMenuPrimitive.Separator
+      className={cn("-mx-1 my-1 h-px bg-border", className)}
+      data-slot="context-menu-separator"
+      {...props}
+    />
+  );
+}
+
+function ContextMenuShortcut({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      className={cn(
+        "text-muted-foreground group-focus/context-menu-item:text-accent-foreground ml-auto text-xs tracking-widest",
+        className,
+      )}
+      data-slot="context-menu-shortcut"
+      {...props}
+    />
+  );
+}
+
+export {
+  ContextMenu,
+  ContextMenuTrigger,
+  ContextMenuContent,
+  ContextMenuItem,
+  ContextMenuCheckboxItem,
+  ContextMenuRadioItem,
+  ContextMenuLabel,
+  ContextMenuSeparator,
+  ContextMenuShortcut,
+  ContextMenuGroup,
+  ContextMenuPortal,
+  ContextMenuSub,
+  ContextMenuSubContent,
+  ContextMenuSubTrigger,
+  ContextMenuRadioGroup,
+};
diff --git a/packages/ui/components/ui/dialog.tsx b/packages/ui/components/ui/dialog.tsx
new file mode 100644
index 000000000..c76b16d03
--- /dev/null
+++ b/packages/ui/components/ui/dialog.tsx
@@ -0,0 +1,135 @@
+import type * as React from "react";
+
+import { Dialog as DialogPrimitive } from "radix-ui";
+import { XIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function Dialog({ ...props }: React.ComponentProps<typeof DialogPrimitive.Root>) {
+  return <DialogPrimitive.Root data-slot="dialog" {...props} />;
+}
+
+function DialogTrigger({ ...props }: React.ComponentProps<typeof DialogPrimitive.Trigger>) {
+  return <DialogPrimitive.Trigger data-slot="dialog-trigger" {...props} />;
+}
+
+function DialogPortal({ ...props }: React.ComponentProps<typeof DialogPrimitive.Portal>) {
+  return <DialogPrimitive.Portal data-slot="dialog-portal" {...props} />;
+}
+
+function DialogClose({ ...props }: React.ComponentProps<typeof DialogPrimitive.Close>) {
+  const { className, ...rest } = props;
+  return (
+    <DialogPrimitive.Close
+      className={cn("cursor-pointer", className)}
+      data-slot="dialog-close"
+      {...rest}
+    />
+  );
+}
+
+function DialogOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Overlay>) {
+  return (
+    <DialogPrimitive.Overlay
+      className={cn(
+        "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 fixed inset-0 z-50 bg-black/50 data-[state=closed]:animate-out data-[state=open]:animate-in",
+        className,
+      )}
+      data-slot="dialog-overlay"
+      {...props}
+    />
+  );
+}
+
+function DialogContent({
+  className,
+  children,
+  hideCloseButton,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Content> & {
+  hideCloseButton?: boolean;
+}) {
+  return (
+    <DialogPortal data-slot="dialog-portal">
+      <DialogOverlay />
+      <DialogPrimitive.Content
+        className={cn(
+          "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] translate-x-[-50%] translate-y-[-50%] gap-4 overflow-hidden rounded-xl border bg-background p-6 shadow-lg duration-200 data-[state=closed]:animate-out data-[state=open]:animate-in sm:max-w-lg",
+          className,
+        )}
+        data-slot="dialog-content"
+        {...props}
+      >
+        {children}
+        {!hideCloseButton && (
+          <DialogPrimitive.Close className="absolute top-4 right-4 cursor-pointer rounded-xs opacity-70 ring-offset-background transition-opacity hover:opacity-100 focus:outline-hidden focus:ring-2 focus:ring-ring focus:ring-offset-2 disabled:pointer-events-none data-[state=open]:bg-accent data-[state=open]:text-muted-foreground [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0">
+            <XIcon />
+            <span className="sr-only">Close</span>
+          </DialogPrimitive.Close>
+        )}
+      </DialogPrimitive.Content>
+    </DialogPortal>
+  );
+}
+
+function DialogHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("flex flex-col gap-2 text-center sm:text-left", className)}
+      data-slot="dialog-header"
+      {...props}
+    />
+  );
+}
+
+function DialogFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn(
+        "-mx-6 -mb-6 mt-6 flex flex-col-reverse gap-2 border-t border-border bg-card px-4 py-4 sm:flex-row sm:justify-end",
+        className,
+      )}
+      data-slot="dialog-footer"
+      {...props}
+    />
+  );
+}
+
+function DialogTitle({ className, ...props }: React.ComponentProps<typeof DialogPrimitive.Title>) {
+  return (
+    <DialogPrimitive.Title
+      className={cn("font-semibold leading-none", className)}
+      data-slot="dialog-title"
+      {...props}
+    />
+  );
+}
+
+function DialogDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Description>) {
+  return (
+    <DialogPrimitive.Description
+      className={cn("text-muted-foreground text-sm", className)}
+      data-slot="dialog-description"
+      {...props}
+    />
+  );
+}
+
+export {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogOverlay,
+  DialogPortal,
+  DialogTitle,
+  DialogTrigger,
+};
diff --git a/packages/ui/components/ui/drawer.tsx b/packages/ui/components/ui/drawer.tsx
new file mode 100644
index 000000000..fb7f89761
--- /dev/null
+++ b/packages/ui/components/ui/drawer.tsx
@@ -0,0 +1,120 @@
+import type * as React from "react";
+
+import { Drawer as DrawerPrimitive } from "vaul";
+
+import { cn } from "../../lib/utils";
+
+function Drawer({ ...props }: React.ComponentProps<typeof DrawerPrimitive.Root>) {
+  return <DrawerPrimitive.Root data-slot="drawer" {...props} />;
+}
+
+function DrawerTrigger({ ...props }: React.ComponentProps<typeof DrawerPrimitive.Trigger>) {
+  return <DrawerPrimitive.Trigger data-slot="drawer-trigger" {...props} />;
+}
+
+function DrawerPortal({ ...props }: React.ComponentProps<typeof DrawerPrimitive.Portal>) {
+  return <DrawerPrimitive.Portal data-slot="drawer-portal" {...props} />;
+}
+
+function DrawerClose({ ...props }: React.ComponentProps<typeof DrawerPrimitive.Close>) {
+  return <DrawerPrimitive.Close data-slot="drawer-close" {...props} />;
+}
+
+function DrawerOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof DrawerPrimitive.Overlay>) {
+  return (
+    <DrawerPrimitive.Overlay
+      className={cn(
+        "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 fixed inset-0 z-50 bg-black/50 data-[state=closed]:animate-out data-[state=open]:animate-in",
+        className,
+      )}
+      data-slot="drawer-overlay"
+      {...props}
+    />
+  );
+}
+
+function DrawerContent({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof DrawerPrimitive.Content>) {
+  return (
+    <DrawerPortal data-slot="drawer-portal">
+      <DrawerOverlay />
+      <DrawerPrimitive.Content
+        className={cn(
+          "group/drawer-content fixed z-50 flex h-auto flex-col bg-background",
+          "data-[vaul-drawer-direction=top]:inset-x-0 data-[vaul-drawer-direction=top]:top-0 data-[vaul-drawer-direction=top]:mb-24 data-[vaul-drawer-direction=top]:max-h-[80vh] data-[vaul-drawer-direction=top]:rounded-b-lg data-[vaul-drawer-direction=top]:border-b",
+          "data-[vaul-drawer-direction=bottom]:inset-x-0 data-[vaul-drawer-direction=bottom]:bottom-0 data-[vaul-drawer-direction=bottom]:mt-24 data-[vaul-drawer-direction=bottom]:max-h-[80vh] data-[vaul-drawer-direction=bottom]:rounded-t-lg data-[vaul-drawer-direction=bottom]:border-t",
+          "data-[vaul-drawer-direction=right]:inset-y-0 data-[vaul-drawer-direction=right]:right-0 data-[vaul-drawer-direction=right]:w-3/4 data-[vaul-drawer-direction=right]:border-l data-[vaul-drawer-direction=right]:sm:max-w-sm",
+          "data-[vaul-drawer-direction=left]:inset-y-0 data-[vaul-drawer-direction=left]:left-0 data-[vaul-drawer-direction=left]:w-3/4 data-[vaul-drawer-direction=left]:border-r data-[vaul-drawer-direction=left]:sm:max-w-sm",
+          className,
+        )}
+        data-slot="drawer-content"
+        {...props}
+      >
+        <div className="mx-auto mt-4 hidden h-2 w-[100px] shrink-0 rounded-full bg-muted group-data-[vaul-drawer-direction=bottom]/drawer-content:block" />
+        {children}
+      </DrawerPrimitive.Content>
+    </DrawerPortal>
+  );
+}
+
+function DrawerHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("flex flex-col gap-1.5 p-4", className)}
+      data-slot="drawer-header"
+      {...props}
+    />
+  );
+}
+
+function DrawerFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("mt-auto flex flex-col gap-2 p-4", className)}
+      data-slot="drawer-footer"
+      {...props}
+    />
+  );
+}
+
+function DrawerTitle({ className, ...props }: React.ComponentProps<typeof DrawerPrimitive.Title>) {
+  return (
+    <DrawerPrimitive.Title
+      className={cn("font-semibold text-foreground", className)}
+      data-slot="drawer-title"
+      {...props}
+    />
+  );
+}
+
+function DrawerDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof DrawerPrimitive.Description>) {
+  return (
+    <DrawerPrimitive.Description
+      className={cn("text-muted-foreground text-sm", className)}
+      data-slot="drawer-description"
+      {...props}
+    />
+  );
+}
+
+export {
+  Drawer,
+  DrawerPortal,
+  DrawerOverlay,
+  DrawerTrigger,
+  DrawerClose,
+  DrawerContent,
+  DrawerHeader,
+  DrawerFooter,
+  DrawerTitle,
+  DrawerDescription,
+};
diff --git a/packages/ui/components/ui/dropdown-menu.tsx b/packages/ui/components/ui/dropdown-menu.tsx
new file mode 100644
index 000000000..ce0fa09a1
--- /dev/null
+++ b/packages/ui/components/ui/dropdown-menu.tsx
@@ -0,0 +1,240 @@
+import * as React from "react";
+import { DropdownMenu as DropdownMenuPrimitive } from "radix-ui";
+import { CheckIcon, ChevronRightIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function DropdownMenu({ ...props }: React.ComponentProps<typeof DropdownMenuPrimitive.Root>) {
+  return <DropdownMenuPrimitive.Root data-slot="dropdown-menu" {...props} />;
+}
+
+function DropdownMenuPortal({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Portal>) {
+  return <DropdownMenuPrimitive.Portal data-slot="dropdown-menu-portal" {...props} />;
+}
+
+function DropdownMenuTrigger({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Trigger>) {
+  return <DropdownMenuPrimitive.Trigger data-slot="dropdown-menu-trigger" {...props} />;
+}
+
+function DropdownMenuContent({
+  className,
+  align = "start",
+  sideOffset = 4,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Content>) {
+  return (
+    <DropdownMenuPrimitive.Portal>
+      <DropdownMenuPrimitive.Content
+        data-slot="dropdown-menu-content"
+        sideOffset={sideOffset}
+        align={align}
+        className={cn(
+          "data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 ring-foreground/10 bg-popover/70 backdrop-blur-md text-popover-foreground min-w-32 rounded-lg p-1 shadow-md ring-1 duration-0 z-50 max-h-(--radix-dropdown-menu-content-available-height) w-(--radix-dropdown-menu-trigger-width) origin-(--radix-dropdown-menu-content-transform-origin) overflow-x-hidden overflow-y-auto data-[state=closed]:overflow-hidden",
+          className,
+        )}
+        {...props}
+      />
+    </DropdownMenuPrimitive.Portal>
+  );
+}
+
+function DropdownMenuGroup({ ...props }: React.ComponentProps<typeof DropdownMenuPrimitive.Group>) {
+  return <DropdownMenuPrimitive.Group data-slot="dropdown-menu-group" {...props} />;
+}
+
+function DropdownMenuItem({
+  className,
+  inset,
+  variant = "default",
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Item> & {
+  inset?: boolean;
+  variant?: "default" | "destructive";
+}) {
+  return (
+    <DropdownMenuPrimitive.Item
+      data-slot="dropdown-menu-item"
+      data-inset={inset}
+      data-variant={variant}
+      className={cn(
+        "focus:bg-primary focus:text-accent-foreground data-[variant=destructive]:text-destructive data-[variant=destructive]:focus:bg-destructive/10 dark:data-[variant=destructive]:focus:bg-destructive/20 data-[variant=destructive]:focus:text-destructive data-[variant=destructive]:*:[svg]:text-destructive not-data-[variant=destructive]:focus:**:text-accent-foreground gap-1.5 rounded-md px-1.5 py-1 text-sm [&_svg:not([class*='size-'])]:size-4 group/dropdown-menu-item relative flex cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 data-[inset]:pl-8 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function DropdownMenuCheckboxItem({
+  className,
+  children,
+  checked,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.CheckboxItem>) {
+  return (
+    <DropdownMenuPrimitive.CheckboxItem
+      data-slot="dropdown-menu-checkbox-item"
+      className={cn(
+        "focus:bg-primary whitespace-nowrap focus:text-accent-foreground focus:**:text-accent-foreground gap-1.5 rounded-md py-1 pl-8 pr-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 relative flex cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      checked={checked}
+      {...props}
+    >
+      <span
+        className="pointer-events-none absolute left-2 flex items-center justify-center"
+        data-slot="dropdown-menu-checkbox-item-indicator"
+      >
+        <DropdownMenuPrimitive.ItemIndicator>
+          <CheckIcon />
+        </DropdownMenuPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </DropdownMenuPrimitive.CheckboxItem>
+  );
+}
+
+function DropdownMenuRadioGroup({
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.RadioGroup>) {
+  return <DropdownMenuPrimitive.RadioGroup data-slot="dropdown-menu-radio-group" {...props} />;
+}
+
+function DropdownMenuRadioItem({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.RadioItem>) {
+  return (
+    <DropdownMenuPrimitive.RadioItem
+      data-slot="dropdown-menu-radio-item"
+      className={cn(
+        "focus:bg-primary focus:text-accent-foreground focus:**:text-accent-foreground gap-1.5 rounded-md py-1 pl-8 pr-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 relative flex cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      {...props}
+    >
+      <span
+        className="pointer-events-none absolute left-2 flex items-center justify-center"
+        data-slot="dropdown-menu-radio-item-indicator"
+      >
+        <DropdownMenuPrimitive.ItemIndicator>
+          <CheckIcon />
+        </DropdownMenuPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </DropdownMenuPrimitive.RadioItem>
+  );
+}
+
+function DropdownMenuLabel({
+  className,
+  inset,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Label> & {
+  inset?: boolean;
+}) {
+  return (
+    <DropdownMenuPrimitive.Label
+      data-slot="dropdown-menu-label"
+      data-inset={inset}
+      className={cn(
+        "text-muted-foreground px-1.5 py-1 text-xs font-medium data-[inset]:pl-8",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function DropdownMenuSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Separator>) {
+  return (
+    <DropdownMenuPrimitive.Separator
+      data-slot="dropdown-menu-separator"
+      className={cn("bg-border -mx-1 my-1 h-px", className)}
+      {...props}
+    />
+  );
+}
+
+function DropdownMenuShortcut({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="dropdown-menu-shortcut"
+      className={cn(
+        "text-muted-foreground group-focus/dropdown-menu-item:text-accent-foreground ml-auto text-xs tracking-widest",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function DropdownMenuSub({ ...props }: React.ComponentProps<typeof DropdownMenuPrimitive.Sub>) {
+  return <DropdownMenuPrimitive.Sub data-slot="dropdown-menu-sub" {...props} />;
+}
+
+function DropdownMenuSubTrigger({
+  className,
+  inset,
+  children,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.SubTrigger> & {
+  inset?: boolean;
+}) {
+  return (
+    <DropdownMenuPrimitive.SubTrigger
+      data-slot="dropdown-menu-sub-trigger"
+      data-inset={inset}
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground data-open:bg-accent data-open:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground gap-1.5 rounded-md px-1.5 py-1 text-sm [&_svg:not([class*='size-'])]:size-4 flex cursor-default items-center outline-hidden select-none data-[inset]:pl-8 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
+        className,
+      )}
+      {...props}
+    >
+      {children}
+      <ChevronRightIcon className="ml-auto" />
+    </DropdownMenuPrimitive.SubTrigger>
+  );
+}
+
+function DropdownMenuSubContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.SubContent>) {
+  return (
+    <DropdownMenuPrimitive.SubContent
+      data-slot="dropdown-menu-sub-content"
+      className={cn(
+        "data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 ring-foreground/10 bg-popover text-popover-foreground min-w-[96px] rounded-md p-1 shadow-lg ring-1 duration-100 z-50 origin-(--radix-dropdown-menu-content-transform-origin) overflow-hidden",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export {
+  DropdownMenu,
+  DropdownMenuPortal,
+  DropdownMenuTrigger,
+  DropdownMenuContent,
+  DropdownMenuGroup,
+  DropdownMenuLabel,
+  DropdownMenuItem,
+  DropdownMenuCheckboxItem,
+  DropdownMenuRadioGroup,
+  DropdownMenuRadioItem,
+  DropdownMenuSeparator,
+  DropdownMenuShortcut,
+  DropdownMenuSub,
+  DropdownMenuSubTrigger,
+  DropdownMenuSubContent,
+};
diff --git a/packages/ui/components/ui/dropzone.tsx b/packages/ui/components/ui/dropzone.tsx
new file mode 100644
index 000000000..633841714
--- /dev/null
+++ b/packages/ui/components/ui/dropzone.tsx
@@ -0,0 +1,106 @@
+/** biome-ignore-all lint/a11y/noStaticElementInteractions: shadcn */
+/** biome-ignore-all lint/nursery/noNoninteractiveElementInteractions: shadcn */
+import { UploadIcon } from "lucide-react";
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+
+interface DropzoneProps extends React.HTMLAttributes<HTMLDivElement> {
+  onFileChange: (file: File) => void;
+  accept?: string;
+  maxSize?: number;
+  multiple?: boolean;
+}
+
+export function Dropzone({
+  className,
+  onFileChange,
+  accept,
+  maxSize,
+  multiple = false,
+  ...props
+}: DropzoneProps) {
+  const [isDragging, setIsDragging] = React.useState(false);
+  const inputRef = React.useRef<HTMLInputElement>(null);
+
+  const handleDragEnter = (e: React.DragEvent) => {
+    e.preventDefault();
+    e.stopPropagation();
+    setIsDragging(true);
+  };
+
+  const handleDragLeave = (e: React.DragEvent) => {
+    e.preventDefault();
+    e.stopPropagation();
+    setIsDragging(false);
+  };
+
+  const handleDragOver = (e: React.DragEvent) => {
+    e.preventDefault();
+    e.stopPropagation();
+  };
+
+  const handleDrop = (e: React.DragEvent) => {
+    e.preventDefault();
+    e.stopPropagation();
+    setIsDragging(false);
+
+    const files = [...e.dataTransfer.files];
+    if (files.length > 0) {
+      const file = files[0];
+      if (maxSize && file && file.size > maxSize) {
+        return;
+      }
+      if (file) {
+        onFileChange(file);
+      }
+    }
+  };
+
+  const handleFileChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+    const { files } = e.target;
+    if (files && files.length > 0) {
+      const file = files[0];
+      if (maxSize && file && file.size > maxSize) {
+        return;
+      }
+      if (file) {
+        onFileChange(file);
+      }
+    }
+  };
+
+  return (
+    <div
+      className={cn(
+        "group relative isolate flex w-full cursor-pointer select-none flex-col items-center justify-center rounded-lg border border-dashed p-6 transition-colors focus-within:border-primary/50 focus-within:ring-3 focus-within:ring-ring/50",
+        isDragging ? "border-primary/50 bg-primary/5" : "border-border hover:border-primary/50",
+        className,
+      )}
+      onDragEnter={handleDragEnter}
+      onDragLeave={handleDragLeave}
+      onDragOver={handleDragOver}
+      onDrop={handleDrop}
+      // onClick={() => inputRef.current?.click()}
+      {...props}
+    >
+      <input
+        accept={accept}
+        className="absolute inset-0 top-0 left-0 h-full w-full cursor-pointer opacity-0"
+        multiple={multiple}
+        onChange={handleFileChange}
+        ref={inputRef}
+        type="file"
+      />
+      <UploadIcon className="mb-3 text-muted-foreground" />
+      <p className="text-center text-muted-foreground text-sm">
+        Drag and drop a file here, or click to select
+      </p>
+      {maxSize && (
+        <p className="mt-1 text-muted-foreground text-xs">
+          Max file size: {Math.round(maxSize / 1024 / 1024)}MB
+        </p>
+      )}
+    </div>
+  );
+}
diff --git a/packages/ui/components/ui/field.tsx b/packages/ui/components/ui/field.tsx
new file mode 100644
index 000000000..e7eb64ac6
--- /dev/null
+++ b/packages/ui/components/ui/field.tsx
@@ -0,0 +1,222 @@
+import { useMemo } from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+
+import { cn } from "../../lib/utils";
+import { Label } from "./label";
+import { Separator } from "./separator";
+
+function FieldSet({ className, ...props }: React.ComponentProps<"fieldset">) {
+  return (
+    <fieldset
+      data-slot="field-set"
+      className={cn(
+        "gap-4 has-[>[data-slot=checkbox-group]]:gap-3 has-[>[data-slot=radio-group]]:gap-3 flex flex-col",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function FieldLegend({
+  className,
+  variant = "legend",
+  ...props
+}: React.ComponentProps<"legend"> & { variant?: "legend" | "label" }) {
+  return (
+    <legend
+      data-slot="field-legend"
+      data-variant={variant}
+      className={cn(
+        "mb-1.5 font-medium data-[variant=label]:text-sm data-[variant=legend]:text-base",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function FieldGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="field-group"
+      className={cn(
+        "gap-5 data-[slot=checkbox-group]:gap-3 [&>[data-slot=field-group]]:gap-4 group/field-group @container/field-group flex w-full flex-col",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+const fieldVariants = cva("data-[invalid=true]:text-destructive gap-2 group/field flex w-full", {
+  variants: {
+    orientation: {
+      vertical: "flex-col [&>*]:w-full [&>.sr-only]:w-auto",
+      horizontal:
+        "flex-row items-center [&>[data-slot=field-label]]:flex-auto has-[>[data-slot=field-content]]:items-start has-[>[data-slot=field-content]]:[&>[role=checkbox],[role=radio]]:mt-px",
+      responsive:
+        "flex-col [&>*]:w-full [&>.sr-only]:w-auto @md/field-group:flex-row @md/field-group:items-center @md/field-group:[&>*]:w-auto @md/field-group:[&>[data-slot=field-label]]:flex-auto @md/field-group:has-[>[data-slot=field-content]]:items-start @md/field-group:has-[>[data-slot=field-content]]:[&>[role=checkbox],[role=radio]]:mt-px",
+    },
+  },
+  defaultVariants: {
+    orientation: "vertical",
+  },
+});
+
+function Field({
+  className,
+  orientation = "vertical",
+  ...props
+}: React.ComponentProps<"div"> & VariantProps<typeof fieldVariants>) {
+  return (
+    <div
+      role="group"
+      data-slot="field"
+      data-orientation={orientation}
+      className={cn(fieldVariants({ orientation }), className)}
+      {...props}
+    />
+  );
+}
+
+function FieldContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="field-content"
+      className={cn("gap-0.5 group/field-content flex flex-1 flex-col leading-snug", className)}
+      {...props}
+    />
+  );
+}
+
+function FieldLabel({ className, ...props }: React.ComponentProps<typeof Label>) {
+  return (
+    <Label
+      data-slot="field-label"
+      className={cn(
+        "has-data-checked:bg-primary/5 has-data-checked:border-primary dark:has-data-checked:bg-primary/10 gap-2 group-data-[disabled=true]/field:opacity-50 has-[>[data-slot=field]]:rounded-lg has-[>[data-slot=field]]:border [&>*]:data-[slot=field]:p-2.5 group/field-label peer/field-label flex w-fit leading-snug",
+        "has-[>[data-slot=field]]:w-full has-[>[data-slot=field]]:flex-col",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function FieldTitle({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="field-label"
+      className={cn(
+        "gap-2 text-sm font-medium group-data-[disabled=true]/field:opacity-50 flex w-fit items-center leading-snug",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function FieldDescription({ className, ...props }: React.ComponentProps<"p">) {
+  return (
+    <p
+      data-slot="field-description"
+      className={cn(
+        "text-muted-foreground text-left text-sm [[data-variant=legend]+&]:-mt-1.5 leading-normal font-normal group-has-[[data-orientation=horizontal]]/field:text-balance",
+        "last:mt-0 nth-last-2:-mt-1",
+        "[&>a:hover]:text-primary [&>a]:underline [&>a]:underline-offset-4",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function FieldSeparator({
+  children,
+  className,
+  ...props
+}: React.ComponentProps<"div"> & {
+  children?: React.ReactNode;
+}) {
+  return (
+    <div
+      data-slot="field-separator"
+      data-content={!!children}
+      className={cn(
+        "-my-2 h-5 text-sm group-data-[variant=outline]/field-group:-mb-2 relative",
+        className,
+      )}
+      {...props}
+    >
+      <Separator className="absolute inset-0 top-1/2" />
+      {children && (
+        <span
+          className="text-muted-foreground px-2 bg-background relative mx-auto block w-fit"
+          data-slot="field-separator-content"
+        >
+          {children}
+        </span>
+      )}
+    </div>
+  );
+}
+
+function FieldError({
+  className,
+  children,
+  errors,
+  ...props
+}: React.ComponentProps<"div"> & {
+  errors?: Array<{ message?: string } | undefined>;
+}) {
+  const content = useMemo(() => {
+    if (children) {
+      return children;
+    }
+
+    if (!errors?.length) {
+      return null;
+    }
+
+    const uniqueErrors = [...new Map(errors.map((error) => [error?.message, error])).values()];
+
+    if (uniqueErrors?.length == 1) {
+      return uniqueErrors[0]?.message;
+    }
+
+    return (
+      <ul className="ml-4 flex list-disc flex-col gap-1">
+        {uniqueErrors.map((error, index) => error?.message && <li key={index}>{error.message}</li>)}
+      </ul>
+    );
+  }, [children, errors]);
+
+  if (!content) {
+    return null;
+  }
+
+  return (
+    <div
+      role="alert"
+      data-slot="field-error"
+      className={cn("text-destructive text-sm font-normal", className)}
+      {...props}
+    >
+      {content}
+    </div>
+  );
+}
+
+export {
+  Field,
+  FieldLabel,
+  FieldDescription,
+  FieldError,
+  FieldGroup,
+  FieldLegend,
+  FieldSeparator,
+  FieldSet,
+  FieldContent,
+  FieldTitle,
+};
diff --git a/packages/ui/components/ui/form.tsx b/packages/ui/components/ui/form.tsx
new file mode 100644
index 000000000..437dd365f
--- /dev/null
+++ b/packages/ui/components/ui/form.tsx
@@ -0,0 +1,154 @@
+"use client";
+
+import type { Label as LabelPrimitive } from "radix-ui";
+
+import { Slot } from "radix-ui";
+import * as React from "react";
+import {
+  Controller,
+  type ControllerProps,
+  type FieldPath,
+  type FieldValues,
+  FormProvider,
+  useFormContext,
+  useFormState,
+} from "react-hook-form";
+
+import { cn } from "../../lib/utils";
+import { Label } from "./label";
+
+const Form = FormProvider;
+
+interface FormFieldContextValue<
+  TFieldValues extends FieldValues = FieldValues,
+  TName extends FieldPath<TFieldValues> = FieldPath<TFieldValues>,
+> {
+  name: TName;
+}
+
+const FormFieldContext = React.createContext<FormFieldContextValue>({} as FormFieldContextValue);
+
+const FormField = <
+  TFieldValues extends FieldValues = FieldValues,
+  TName extends FieldPath<TFieldValues> = FieldPath<TFieldValues>,
+>({
+  ...props
+}: ControllerProps<TFieldValues, TName>) => (
+  <FormFieldContext.Provider value={{ name: props.name }}>
+    <Controller {...props} />
+  </FormFieldContext.Provider>
+);
+
+const useFormField = () => {
+  const fieldContext = React.useContext(FormFieldContext);
+  const itemContext = React.useContext(FormItemContext);
+  const { getFieldState } = useFormContext();
+  const formState = useFormState({ name: fieldContext.name });
+  const fieldState = getFieldState(fieldContext.name, formState);
+
+  if (!fieldContext) {
+    throw new Error("useFormField should be used within <FormField>");
+  }
+
+  const { id } = itemContext;
+
+  return {
+    id,
+    name: fieldContext.name,
+    formItemId: `${id}-form-item`,
+    formDescriptionId: `${id}-form-item-description`,
+    formMessageId: `${id}-form-item-message`,
+    ...fieldState,
+  };
+};
+
+interface FormItemContextValue {
+  id: string;
+}
+
+const FormItemContext = React.createContext<FormItemContextValue>({} as FormItemContextValue);
+
+function FormItem({ className, ...props }: React.ComponentProps<"div">) {
+  const id = React.useId();
+
+  return (
+    <FormItemContext.Provider value={{ id }}>
+      <div className={cn("grid gap-2", className)} data-slot="form-item" {...props} />
+    </FormItemContext.Provider>
+  );
+}
+
+function FormLabel({ className, ...props }: React.ComponentProps<typeof LabelPrimitive.Root>) {
+  const { error, formItemId } = useFormField();
+
+  return (
+    <Label
+      className={cn(
+        "cursor-pointer text-muted-foreground data-[error=true]:text-destructive",
+        className,
+      )}
+      data-error={!!error}
+      data-slot="form-label"
+      htmlFor={formItemId}
+      {...props}
+    />
+  );
+}
+
+function FormControl({ ...props }: React.ComponentProps<typeof Slot.Root>) {
+  const { error, formItemId, formDescriptionId, formMessageId } = useFormField();
+
+  return (
+    <Slot.Root
+      aria-describedby={error ? `${formDescriptionId} ${formMessageId}` : `${formDescriptionId}`}
+      aria-invalid={!!error}
+      data-slot="form-control"
+      id={formItemId}
+      {...props}
+    />
+  );
+}
+
+function FormDescription({ className, ...props }: React.ComponentProps<"p">) {
+  const { formDescriptionId } = useFormField();
+
+  return (
+    <p
+      className={cn("text-muted-foreground text-sm", className)}
+      data-slot="form-description"
+      id={formDescriptionId}
+      {...props}
+    />
+  );
+}
+
+function FormMessage({ className, ...props }: React.ComponentProps<"p">) {
+  const { error, formMessageId } = useFormField();
+  const body = error ? String(error?.message ?? "") : props.children;
+
+  if (!body) {
+    return null;
+  }
+
+  return (
+    <p
+      className={cn("text-destructive text-sm", className)}
+      data-slot="form-message"
+      id={formMessageId}
+      {...props}
+    >
+      {body}
+    </p>
+  );
+}
+
+export {
+  useFormField,
+  Form,
+  FormItem,
+  FormLabel,
+  FormControl,
+  FormDescription,
+  FormMessage,
+  FormField,
+};
diff --git a/packages/ui/components/ui/hover-card.tsx b/packages/ui/components/ui/hover-card.tsx
new file mode 100644
index 000000000..bba6fe0ec
--- /dev/null
+++ b/packages/ui/components/ui/hover-card.tsx
@@ -0,0 +1,37 @@
+import type * as React from "react";
+
+import { HoverCard as HoverCardPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function HoverCard({ ...props }: React.ComponentProps<typeof HoverCardPrimitive.Root>) {
+  return <HoverCardPrimitive.Root data-slot="hover-card" {...props} />;
+}
+
+function HoverCardTrigger({ ...props }: React.ComponentProps<typeof HoverCardPrimitive.Trigger>) {
+  return <HoverCardPrimitive.Trigger data-slot="hover-card-trigger" {...props} />;
+}
+
+function HoverCardContent({
+  className,
+  align = "center",
+  sideOffset = 4,
+  ...props
+}: React.ComponentProps<typeof HoverCardPrimitive.Content>) {
+  return (
+    <HoverCardPrimitive.Portal data-slot="hover-card-portal">
+      <HoverCardPrimitive.Content
+        align={align}
+        className={cn(
+          "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-64 origin-(--radix-hover-card-content-transform-origin) rounded-md border bg-popover p-4 text-popover-foreground shadow-md outline-hidden data-[state=closed]:animate-out data-[state=open]:animate-in",
+          className,
+        )}
+        data-slot="hover-card-content"
+        sideOffset={sideOffset}
+        {...props}
+      />
+    </HoverCardPrimitive.Portal>
+  );
+}
+
+export { HoverCard, HoverCardTrigger, HoverCardContent };
diff --git a/packages/ui/components/ui/input-group.tsx b/packages/ui/components/ui/input-group.tsx
new file mode 100644
index 000000000..39eb367c3
--- /dev/null
+++ b/packages/ui/components/ui/input-group.tsx
@@ -0,0 +1,144 @@
+"use client";
+
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+
+import { cn } from "../../lib/utils";
+import { Button } from "./button";
+import { Input } from "./input";
+import { Textarea } from "./textarea";
+
+function InputGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="input-group"
+      role="group"
+      className={cn(
+        "border-input dark:bg-input/30 has-[[data-slot=input-group-control]:focus-visible]:border-ring has-[[data-slot=input-group-control]:focus-visible]:ring-ring/50 has-[[data-slot][aria-invalid=true]]:ring-destructive/20 has-[[data-slot][aria-invalid=true]]:border-destructive dark:has-[[data-slot][aria-invalid=true]]:ring-destructive/40 has-disabled:bg-input/50 dark:has-disabled:bg-input/80 h-8 rounded-lg border transition-colors has-disabled:opacity-50 has-[[data-slot=input-group-control]:focus-visible]:ring-[3px] has-[[data-slot][aria-invalid=true]]:ring-[3px] has-[>[data-align=block-end]]:h-auto has-[>[data-align=block-end]]:flex-col has-[>[data-align=block-start]]:h-auto has-[>[data-align=block-start]]:flex-col has-[>[data-align=block-end]]:[&>input]:pt-3 has-[>[data-align=block-start]]:[&>input]:pb-3 has-[>[data-align=inline-end]]:[&>input]:pr-1.5 has-[>[data-align=inline-start]]:[&>input]:pl-1.5 [[data-slot=combobox-content]_&]:focus-within:border-inherit [[data-slot=combobox-content]_&]:focus-within:ring-0 group/input-group relative flex w-full min-w-0 items-center outline-none has-[>textarea]:h-auto",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+const inputGroupAddonVariants = cva(
+  "text-muted-foreground h-auto gap-2 py-1.5 text-sm font-medium group-data-[disabled=true]/input-group:opacity-50 [&>kbd]:rounded-[calc(var(--radius)-5px)] [&>svg:not([class*='size-'])]:size-4 flex cursor-text items-center justify-center select-none",
+  {
+    variants: {
+      align: {
+        "inline-start": "pl-2 has-[>button]:ml-[-0.3rem] has-[>kbd]:ml-[-0.15rem] order-first",
+        "inline-end": "pr-2 has-[>button]:mr-[-0.3rem] has-[>kbd]:mr-[-0.15rem] order-last",
+        "block-start":
+          "px-2.5 pt-2 group-has-[>input]/input-group:pt-2 [.border-b]:pb-2 order-first w-full justify-start",
+        "block-end":
+          "px-2.5 pb-2 group-has-[>input]/input-group:pb-2 [.border-t]:pt-2 order-last w-full justify-start",
+      },
+    },
+    defaultVariants: {
+      align: "inline-start",
+    },
+  },
+);
+
+function InputGroupAddon({
+  className,
+  align = "inline-start",
+  ...props
+}: React.ComponentProps<"div"> & VariantProps<typeof inputGroupAddonVariants>) {
+  return (
+    <div
+      role="group"
+      data-slot="input-group-addon"
+      data-align={align}
+      className={cn(inputGroupAddonVariants({ align }), className)}
+      onClick={(e) => {
+        if ((e.target as HTMLElement).closest("button")) {
+          return;
+        }
+        e.currentTarget.parentElement?.querySelector("input")?.focus();
+      }}
+      {...props}
+    />
+  );
+}
+
+const inputGroupButtonVariants = cva("gap-2 text-sm shadow-none flex items-center", {
+  variants: {
+    size: {
+      xs: "h-6 gap-1 rounded-[calc(var(--radius)-3px)] px-1.5 [&>svg:not([class*='size-'])]:size-3.5",
+      sm: "",
+      "icon-xs": "size-6 rounded-[calc(var(--radius)-3px)] p-0 has-[>svg]:p-0",
+      "icon-sm": "size-8 p-0 has-[>svg]:p-0",
+    },
+  },
+  defaultVariants: {
+    size: "xs",
+  },
+});
+
+function InputGroupButton({
+  className,
+  type = "button",
+  variant = "ghost",
+  size = "xs",
+  ...props
+}: Omit<React.ComponentProps<typeof Button>, "size"> &
+  VariantProps<typeof inputGroupButtonVariants>) {
+  return (
+    <Button
+      type={type}
+      data-size={size}
+      variant={variant}
+      className={cn(inputGroupButtonVariants({ size }), className)}
+      {...props}
+    />
+  );
+}
+
+function InputGroupText({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      className={cn(
+        "text-muted-foreground gap-2 text-sm [&_svg:not([class*='size-'])]:size-4 flex items-center [&_svg]:pointer-events-none",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function InputGroupInput({ className, ...props }: React.ComponentProps<typeof Input>) {
+  return (
+    <Input
+      data-slot="input-group-control"
+      className={cn(
+        "rounded-none border-0 bg-transparent shadow-none ring-0 focus-visible:ring-0 disabled:bg-transparent aria-invalid:ring-0 dark:bg-transparent dark:disabled:bg-transparent flex-1",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function InputGroupTextarea({ className, ...props }: React.ComponentProps<"textarea">) {
+  return (
+    <Textarea
+      data-slot="input-group-control"
+      className={cn(
+        "rounded-none border-0 bg-transparent py-2 shadow-none ring-0 focus-visible:ring-0 disabled:bg-transparent aria-invalid:ring-0 dark:bg-transparent dark:disabled:bg-transparent flex-1 resize-none",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export {
+  InputGroup,
+  InputGroupAddon,
+  InputGroupButton,
+  InputGroupText,
+  InputGroupInput,
+  InputGroupTextarea,
+};
diff --git a/packages/ui/components/ui/input-otp.tsx b/packages/ui/components/ui/input-otp.tsx
new file mode 100644
index 000000000..cfcb03009
--- /dev/null
+++ b/packages/ui/components/ui/input-otp.tsx
@@ -0,0 +1,73 @@
+"use client";
+
+import { OTPInput, OTPInputContext } from "input-otp";
+import { MinusIcon } from "lucide-react";
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+
+function InputOTP({
+  className,
+  containerClassName,
+  ...props
+}: React.ComponentProps<typeof OTPInput> & {
+  containerClassName?: string;
+}) {
+  return (
+    <OTPInput
+      className={cn("disabled:cursor-not-allowed", className)}
+      containerClassName={cn("flex items-center gap-2 has-disabled:opacity-50", containerClassName)}
+      data-slot="input-otp"
+      {...props}
+    />
+  );
+}
+
+function InputOTPGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div className={cn("flex items-center", className)} data-slot="input-otp-group" {...props} />
+  );
+}
+
+function InputOTPSlot({
+  index,
+  className,
+  ...props
+}: React.ComponentProps<"div"> & {
+  index: number;
+}) {
+  const inputOTPContext = React.useContext(OTPInputContext);
+  const { char, hasFakeCaret, isActive } = inputOTPContext?.slots[index] ?? {};
+
+  return (
+    <div
+      className={cn(
+        "relative flex h-9 w-9 items-center justify-center border-input border-y border-r text-sm shadow-xs outline-none transition-all first:rounded-l-md first:border-l last:rounded-r-md aria-invalid:border-destructive data-[active=true]:z-10 data-[active=true]:border-ring data-[active=true]:ring-[3px] data-[active=true]:ring-ring/50 data-[active=true]:aria-invalid:border-destructive data-[active=true]:aria-invalid:ring-destructive/20 dark:bg-input/30 dark:data-[active=true]:aria-invalid:ring-destructive/40",
+        className,
+      )}
+      data-active={isActive}
+      data-slot="input-otp-slot"
+      {...props}
+    >
+      {char}
+      {hasFakeCaret && (
+        <div className="pointer-events-none absolute inset-0 flex items-center justify-center">
+          <div className="h-4 w-px animate-caret-blink bg-foreground duration-1000" />
+        </div>
+      )}
+    </div>
+  );
+}
+
+function InputOTPSeparator({ ...props }: React.ComponentProps<"div">) {
+  return (
+    // biome-ignore lint/a11y/useFocusableInteractive: shadcn
+    // biome-ignore lint/a11y/useSemanticElements: shadcn
+    // biome-ignore lint/a11y/useAriaPropsForRole: shadcn
+    <div data-slot="input-otp-separator" role="separator" {...props}>
+      <MinusIcon />
+    </div>
+  );
+}
+
+export { InputOTP, InputOTPGroup, InputOTPSlot, InputOTPSeparator };
diff --git a/packages/ui/components/ui/input.tsx b/packages/ui/components/ui/input.tsx
new file mode 100644
index 000000000..d13573cbe
--- /dev/null
+++ b/packages/ui/components/ui/input.tsx
@@ -0,0 +1,38 @@
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+
+import { cn } from "../../lib/utils";
+
+const inputVariants = cva(
+  "dark:bg-input/30 border-input focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 disabled:bg-input/50 dark:disabled:bg-input/80 rounded-lg border bg-transparent transition-colors file:font-medium focus-visible:ring-[3px] aria-invalid:ring-[3px] file:text-foreground placeholder:text-muted-foreground w-full min-w-0 outline-none file:inline-flex file:border-0 file:bg-transparent disabled:pointer-events-none disabled:cursor-not-allowed disabled:opacity-50",
+  {
+    variants: {
+      size: {
+        default: "h-8 px-2.5 py-1 text-base file:h-6 file:text-sm md:text-sm",
+        lg: "h-9 px-2.5 py-1 text-base file:h-7 file:text-sm md:text-sm",
+      },
+    },
+    defaultVariants: {
+      size: "default",
+    },
+  },
+);
+
+function Input({
+  className,
+  type,
+  size,
+  ...props
+}: Omit<React.ComponentProps<"input">, "size"> & VariantProps<typeof inputVariants>) {
+  return (
+    <input
+      type={type}
+      data-slot="input"
+      data-size={size ?? "default"}
+      className={cn(inputVariants({ size, className }))}
+      {...props}
+    />
+  );
+}
+
+export { Input, inputVariants };
diff --git a/packages/ui/components/ui/label.tsx b/packages/ui/components/ui/label.tsx
new file mode 100644
index 000000000..7805ed6b0
--- /dev/null
+++ b/packages/ui/components/ui/label.tsx
@@ -0,0 +1,21 @@
+"use client";
+
+import * as React from "react";
+import { Label as LabelPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function Label({ className, ...props }: React.ComponentProps<typeof LabelPrimitive.Root>) {
+  return (
+    <LabelPrimitive.Root
+      data-slot="label"
+      className={cn(
+        "gap-2 text-xs leading-none font-medium group-data-[disabled=true]:opacity-50 peer-disabled:opacity-50 flex items-center select-none group-data-[disabled=true]:pointer-events-none peer-disabled:cursor-not-allowed",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { Label };
diff --git a/packages/ui/components/ui/marker.tsx b/packages/ui/components/ui/marker.tsx
new file mode 100644
index 000000000..0e1b391d3
--- /dev/null
+++ b/packages/ui/components/ui/marker.tsx
@@ -0,0 +1,66 @@
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+import { Slot } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+const markerVariants = cva(
+  "group/marker relative flex min-h-4 w-full items-center gap-2 text-left text-sm text-muted-foreground [&_svg:not([class*='size-'])]:size-4 [a]:underline [a]:underline-offset-3 [a]:hover:text-foreground",
+  {
+    variants: {
+      variant: {
+        default: "",
+        separator:
+          "before:mr-1 before:h-px before:min-w-0 before:flex-1 before:bg-border after:ml-1 after:h-px after:min-w-0 after:flex-1 after:bg-border",
+        border: "border-b border-border pb-2",
+      },
+    },
+  },
+);
+
+function Marker({
+  className,
+  variant = "default",
+  asChild = false,
+  ...props
+}: React.ComponentProps<"div"> &
+  VariantProps<typeof markerVariants> & {
+    asChild?: boolean;
+  }) {
+  const Comp = asChild ? Slot.Root : "div";
+
+  return (
+    <Comp
+      data-slot="marker"
+      data-variant={variant}
+      className={cn(markerVariants({ variant, className }))}
+      {...props}
+    />
+  );
+}
+
+function MarkerIcon({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="marker-icon"
+      aria-hidden="true"
+      className={cn("size-4 shrink-0 [&_svg:not([class*='size-'])]:size-4", className)}
+      {...props}
+    />
+  );
+}
+
+function MarkerContent({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      data-slot="marker-content"
+      className={cn(
+        "min-w-0 wrap-break-word group-data-[variant=separator]/marker:flex-none group-data-[variant=separator]/marker:text-center *:[a]:underline *:[a]:underline-offset-3 *:[a]:hover:text-foreground",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { Marker, MarkerIcon, MarkerContent, markerVariants };
diff --git a/packages/ui/components/ui/menubar.tsx b/packages/ui/components/ui/menubar.tsx
new file mode 100644
index 000000000..1c680625e
--- /dev/null
+++ b/packages/ui/components/ui/menubar.tsx
@@ -0,0 +1,251 @@
+import type * as React from "react";
+
+import { Menubar as MenubarPrimitive } from "radix-ui";
+import { CheckIcon, ChevronRightIcon, CircleIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function Menubar({ className, ...props }: React.ComponentProps<typeof MenubarPrimitive.Root>) {
+  return (
+    <MenubarPrimitive.Root
+      className={cn(
+        "flex h-9 items-center gap-1 rounded-md border bg-background p-1 shadow-xs",
+        className,
+      )}
+      data-slot="menubar"
+      {...props}
+    />
+  );
+}
+
+function MenubarMenu({ ...props }: React.ComponentProps<typeof MenubarPrimitive.Menu>) {
+  return <MenubarPrimitive.Menu data-slot="menubar-menu" {...props} />;
+}
+
+function MenubarGroup({ ...props }: React.ComponentProps<typeof MenubarPrimitive.Group>) {
+  return <MenubarPrimitive.Group data-slot="menubar-group" {...props} />;
+}
+
+function MenubarPortal({ ...props }: React.ComponentProps<typeof MenubarPrimitive.Portal>) {
+  return <MenubarPrimitive.Portal data-slot="menubar-portal" {...props} />;
+}
+
+function MenubarRadioGroup({ ...props }: React.ComponentProps<typeof MenubarPrimitive.RadioGroup>) {
+  return <MenubarPrimitive.RadioGroup data-slot="menubar-radio-group" {...props} />;
+}
+
+function MenubarTrigger({
+  className,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.Trigger>) {
+  return (
+    <MenubarPrimitive.Trigger
+      className={cn(
+        "flex select-none items-center rounded-sm px-2 py-1 font-medium text-sm outline-hidden focus:bg-accent focus:text-accent-foreground data-[state=open]:bg-accent data-[state=open]:text-accent-foreground",
+        className,
+      )}
+      data-slot="menubar-trigger"
+      {...props}
+    />
+  );
+}
+
+function MenubarContent({
+  className,
+  align = "start",
+  alignOffset = -4,
+  sideOffset = 8,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.Content>) {
+  return (
+    <MenubarPortal>
+      <MenubarPrimitive.Content
+        align={align}
+        alignOffset={alignOffset}
+        className={cn(
+          "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 min-w-[12rem] origin-(--radix-menubar-content-transform-origin) overflow-hidden rounded-md border bg-popover p-1 text-popover-foreground shadow-md data-[state=open]:animate-in",
+          className,
+        )}
+        data-slot="menubar-content"
+        sideOffset={sideOffset}
+        {...props}
+      />
+    </MenubarPortal>
+  );
+}
+
+function MenubarItem({
+  className,
+  inset,
+  variant = "default",
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.Item> & {
+  inset?: boolean;
+  variant?: "default" | "destructive";
+}) {
+  return (
+    <MenubarPrimitive.Item
+      className={cn(
+        "data-[variant=destructive]:*:[svg]:!text-destructive relative flex cursor-default select-none items-center gap-2 rounded-sm px-2 py-1.5 text-sm outline-hidden focus:bg-accent focus:text-accent-foreground data-[disabled]:pointer-events-none data-[inset]:pl-8 data-[variant=destructive]:text-destructive data-[disabled]:opacity-50 data-[variant=destructive]:focus:bg-destructive/10 data-[variant=destructive]:focus:text-destructive dark:data-[variant=destructive]:focus:bg-destructive/20 [&_svg:not([class*='size-'])]:size-4 [&_svg:not([class*='text-'])]:text-muted-foreground [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        className,
+      )}
+      data-inset={inset}
+      data-slot="menubar-item"
+      data-variant={variant}
+      {...props}
+    />
+  );
+}
+
+function MenubarCheckboxItem({
+  className,
+  children,
+  checked,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.CheckboxItem>) {
+  return (
+    <MenubarPrimitive.CheckboxItem
+      checked={checked}
+      className={cn(
+        "relative flex cursor-default select-none items-center gap-2 rounded-xs py-1.5 pr-2 pl-8 text-sm outline-hidden focus:bg-accent focus:text-accent-foreground data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        className,
+      )}
+      data-slot="menubar-checkbox-item"
+      {...props}
+    >
+      <span className="pointer-events-none absolute left-2 flex size-3.5 items-center justify-center">
+        <MenubarPrimitive.ItemIndicator>
+          <CheckIcon className="size-4" />
+        </MenubarPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </MenubarPrimitive.CheckboxItem>
+  );
+}
+
+function MenubarRadioItem({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.RadioItem>) {
+  return (
+    <MenubarPrimitive.RadioItem
+      className={cn(
+        "relative flex cursor-default select-none items-center gap-2 rounded-xs py-1.5 pr-2 pl-8 text-sm outline-hidden focus:bg-accent focus:text-accent-foreground data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        className,
+      )}
+      data-slot="menubar-radio-item"
+      {...props}
+    >
+      <span className="pointer-events-none absolute left-2 flex size-3.5 items-center justify-center">
+        <MenubarPrimitive.ItemIndicator>
+          <CircleIcon className="size-2 fill-current" />
+        </MenubarPrimitive.ItemIndicator>
+      </span>
+      {children}
+    </MenubarPrimitive.RadioItem>
+  );
+}
+
+function MenubarLabel({
+  className,
+  inset,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.Label> & {
+  inset?: boolean;
+}) {
+  return (
+    <MenubarPrimitive.Label
+      className={cn("px-2 py-1.5 font-medium text-sm data-[inset]:pl-8", className)}
+      data-inset={inset}
+      data-slot="menubar-label"
+      {...props}
+    />
+  );
+}
+
+function MenubarSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.Separator>) {
+  return (
+    <MenubarPrimitive.Separator
+      className={cn("-mx-1 my-1 h-px bg-border", className)}
+      data-slot="menubar-separator"
+      {...props}
+    />
+  );
+}
+
+function MenubarShortcut({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      className={cn("ml-auto text-muted-foreground text-xs tracking-widest", className)}
+      data-slot="menubar-shortcut"
+      {...props}
+    />
+  );
+}
+
+function MenubarSub({ ...props }: React.ComponentProps<typeof MenubarPrimitive.Sub>) {
+  return <MenubarPrimitive.Sub data-slot="menubar-sub" {...props} />;
+}
+
+function MenubarSubTrigger({
+  className,
+  inset,
+  children,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.SubTrigger> & {
+  inset?: boolean;
+}) {
+  return (
+    <MenubarPrimitive.SubTrigger
+      className={cn(
+        "flex cursor-default select-none items-center rounded-sm px-2 py-1.5 text-sm outline-none focus:bg-accent focus:text-accent-foreground data-[state=open]:bg-accent data-[inset]:pl-8 data-[state=open]:text-accent-foreground",
+        className,
+      )}
+      data-inset={inset}
+      data-slot="menubar-sub-trigger"
+      {...props}
+    >
+      {children}
+      <ChevronRightIcon className="ml-auto h-4 w-4" />
+    </MenubarPrimitive.SubTrigger>
+  );
+}
+
+function MenubarSubContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof MenubarPrimitive.SubContent>) {
+  return (
+    <MenubarPrimitive.SubContent
+      className={cn(
+        "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 min-w-[8rem] origin-(--radix-menubar-content-transform-origin) overflow-hidden rounded-md border bg-popover p-1 text-popover-foreground shadow-lg data-[state=closed]:animate-out data-[state=open]:animate-in",
+        className,
+      )}
+      data-slot="menubar-sub-content"
+      {...props}
+    />
+  );
+}
+
+export {
+  Menubar,
+  MenubarPortal,
+  MenubarMenu,
+  MenubarTrigger,
+  MenubarContent,
+  MenubarGroup,
+  MenubarSeparator,
+  MenubarLabel,
+  MenubarItem,
+  MenubarShortcut,
+  MenubarCheckboxItem,
+  MenubarRadioGroup,
+  MenubarRadioItem,
+  MenubarSub,
+  MenubarSubTrigger,
+  MenubarSubContent,
+};
diff --git a/packages/ui/components/ui/message-scroller.tsx b/packages/ui/components/ui/message-scroller.tsx
new file mode 100644
index 000000000..95ac4911e
--- /dev/null
+++ b/packages/ui/components/ui/message-scroller.tsx
@@ -0,0 +1,130 @@
+"use client";
+
+import * as React from "react";
+import {
+  MessageScroller as MessageScrollerPrimitive,
+  useMessageScroller,
+  useMessageScrollerScrollable,
+  useMessageScrollerVisibility,
+} from "@shadcn/react/message-scroller";
+import { ArrowDownIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+import { Button } from "./button";
+
+function MessageScrollerProvider(
+  props: React.ComponentProps<typeof MessageScrollerPrimitive.Provider>,
+) {
+  return <MessageScrollerPrimitive.Provider {...props} />;
+}
+
+function MessageScroller({
+  className,
+  ...props
+}: React.ComponentProps<typeof MessageScrollerPrimitive.Root>) {
+  return (
+    <MessageScrollerPrimitive.Root
+      data-slot="message-scroller"
+      className={cn(
+        "group/message-scroller relative flex size-full min-h-0 flex-col overflow-hidden",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function MessageScrollerViewport({
+  className,
+  ...props
+}: React.ComponentProps<typeof MessageScrollerPrimitive.Viewport>) {
+  return (
+    <MessageScrollerPrimitive.Viewport
+      data-slot="message-scroller-viewport"
+      className={cn(
+        "size-full min-h-0 min-w-0 scroll-fade-b scrollbar-thin scrollbar-gutter-stable overflow-y-auto overscroll-contain contain-content data-autoscrolling:scrollbar-none",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function MessageScrollerContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof MessageScrollerPrimitive.Content>) {
+  return (
+    <MessageScrollerPrimitive.Content
+      data-slot="message-scroller-content"
+      className={cn("flex h-max min-h-full flex-col gap-8", className)}
+      {...props}
+    />
+  );
+}
+
+function MessageScrollerItem({
+  className,
+  scrollAnchor = false,
+  ...props
+}: React.ComponentProps<typeof MessageScrollerPrimitive.Item>) {
+  return (
+    <MessageScrollerPrimitive.Item
+      data-slot="message-scroller-item"
+      scrollAnchor={scrollAnchor}
+      className={cn(
+        "min-w-0 shrink-0 [contain-intrinsic-size:auto_10rem] [content-visibility:auto]",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function MessageScrollerButton({
+  direction = "end",
+  className,
+  children,
+  render,
+  variant = "secondary",
+  size = "icon-sm",
+  ...props
+}: React.ComponentProps<typeof MessageScrollerPrimitive.Button> &
+  Pick<React.ComponentProps<typeof Button>, "variant" | "size">) {
+  return (
+    <MessageScrollerPrimitive.Button
+      data-slot="message-scroller-button"
+      data-direction={direction}
+      data-variant={variant}
+      data-size={size}
+      direction={direction}
+      className={cn(
+        "absolute inset-s-1/2 -translate-x-1/2 border-border bg-background text-foreground transition-[translate,scale,opacity] duration-200 hover:bg-muted hover:text-foreground data-[active=false]:pointer-events-none data-[active=false]:scale-95 data-[active=false]:opacity-0 data-[active=false]:duration-400 data-[active=false]:ease-[cubic-bezier(0.7,0,0.84,0)] data-[active=true]:translate-y-0 data-[active=true]:scale-100 data-[active=true]:opacity-100 data-[active=true]:ease-[cubic-bezier(0.23,1,0.32,1)] data-[direction=end]:bottom-4 data-[direction=end]:data-[active=false]:translate-y-full data-[direction=start]:top-4 data-[direction=start]:data-[active=false]:-translate-y-full rtl:translate-x-1/2 data-[direction=start]:[&_svg]:rotate-180",
+        className,
+      )}
+      render={render ?? <Button variant={variant} size={size} />}
+      {...props}
+    >
+      {children ?? (
+        <>
+          <ArrowDownIcon />
+          <span className="sr-only">
+            {direction === "end" ? "Scroll to end" : "Scroll to start"}
+          </span>
+        </>
+      )}
+    </MessageScrollerPrimitive.Button>
+  );
+}
+
+export {
+  MessageScrollerProvider,
+  MessageScroller,
+  MessageScrollerViewport,
+  MessageScrollerContent,
+  MessageScrollerItem,
+  MessageScrollerButton,
+  useMessageScroller,
+  useMessageScrollerScrollable,
+  useMessageScrollerVisibility,
+};
diff --git a/packages/ui/components/ui/message.tsx b/packages/ui/components/ui/message.tsx
new file mode 100644
index 000000000..87302b4f1
--- /dev/null
+++ b/packages/ui/components/ui/message.tsx
@@ -0,0 +1,85 @@
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+
+function MessageGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="message-group"
+      className={cn("flex min-w-0 flex-col gap-2", className)}
+      {...props}
+    />
+  );
+}
+
+function Message({
+  className,
+  align = "start",
+  ...props
+}: React.ComponentProps<"div"> & { align?: "start" | "end" }) {
+  return (
+    <div
+      data-slot="message"
+      data-align={align}
+      className={cn(
+        "group/message relative flex w-full min-w-0 gap-2 text-sm data-[align=end]:flex-row-reverse",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function MessageAvatar({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="message-avatar"
+      className={cn(
+        "flex w-fit min-w-8 shrink-0 items-center justify-center self-end overflow-hidden rounded-full bg-muted group-has-data-[slot=message-footer]/message:-translate-y-8",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function MessageContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="message-content"
+      className={cn(
+        "flex w-full min-w-0 flex-col gap-2.5 wrap-break-word group-data-[align=end]/message:*:data-slot:self-end",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function MessageHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="message-header"
+      className={cn(
+        "flex max-w-full min-w-0 items-center px-3 text-xs font-medium text-muted-foreground group-has-data-[variant=ghost]/message:px-0",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function MessageFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="message-footer"
+      className={cn(
+        "flex max-w-full min-w-0 items-center px-3 text-xs font-medium text-muted-foreground group-has-data-[variant=ghost]/message:px-0 group-data-[align=end]/message:justify-end",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { MessageGroup, Message, MessageAvatar, MessageContent, MessageFooter, MessageHeader };
diff --git a/packages/ui/components/ui/navigation-menu.tsx b/packages/ui/components/ui/navigation-menu.tsx
new file mode 100644
index 000000000..e6e360f26
--- /dev/null
+++ b/packages/ui/components/ui/navigation-menu.tsx
@@ -0,0 +1,162 @@
+import type * as React from "react";
+
+import { NavigationMenu as NavigationMenuPrimitive } from "radix-ui";
+import { cva } from "class-variance-authority";
+import { ChevronDownIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function NavigationMenu({
+  className,
+  children,
+  viewport = true,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.Root> & {
+  viewport?: boolean;
+}) {
+  return (
+    <NavigationMenuPrimitive.Root
+      className={cn(
+        "group/navigation-menu relative flex max-w-max flex-1 items-center justify-center",
+        className,
+      )}
+      data-slot="navigation-menu"
+      data-viewport={viewport}
+      {...props}
+    >
+      {children}
+      {viewport && <NavigationMenuViewport />}
+    </NavigationMenuPrimitive.Root>
+  );
+}
+
+function NavigationMenuList({
+  className,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.List>) {
+  return (
+    <NavigationMenuPrimitive.List
+      className={cn("group flex flex-1 list-none items-center justify-center gap-1", className)}
+      data-slot="navigation-menu-list"
+      {...props}
+    />
+  );
+}
+
+function NavigationMenuItem({
+  className,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.Item>) {
+  return (
+    <NavigationMenuPrimitive.Item
+      className={cn("relative", className)}
+      data-slot="navigation-menu-item"
+      {...props}
+    />
+  );
+}
+
+const navigationMenuTriggerStyle = cva(
+  "group inline-flex h-9 w-max items-center justify-center rounded-md bg-background px-4 py-2 font-medium text-sm outline-ring/50 ring-ring/10 transition-[color,box-shadow] hover:bg-accent hover:text-accent-foreground focus:bg-accent focus:text-accent-foreground focus-visible:outline-1 focus-visible:ring-4 disabled:pointer-events-none disabled:opacity-50 data-[state=open]:bg-accent/50 data-[state=open]:text-accent-foreground data-[state=open]:focus:bg-accent data-[state=open]:hover:bg-accent dark:outline-ring/40 dark:ring-ring/20",
+);
+
+function NavigationMenuTrigger({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.Trigger>) {
+  return (
+    <NavigationMenuPrimitive.Trigger
+      className={cn(navigationMenuTriggerStyle(), "group", className)}
+      data-slot="navigation-menu-trigger"
+      {...props}
+    >
+      {children}{" "}
+      <ChevronDownIcon
+        aria-hidden="true"
+        className="relative top-[1px] ml-1 size-3 transition duration-75 group-data-[state=open]:rotate-180"
+      />
+    </NavigationMenuPrimitive.Trigger>
+  );
+}
+
+function NavigationMenuContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.Content>) {
+  return (
+    <NavigationMenuPrimitive.Content
+      className={cn(
+        "data-[motion^=from-]:fade-in data-[motion^=to-]:fade-out data-[motion=from-end]:slide-in-from-right-52 data-[motion=from-start]:slide-in-from-left-52 data-[motion=to-end]:slide-out-to-right-52 data-[motion=to-start]:slide-out-to-left-52 top-0 left-0 w-full p-2 pr-2.5 data-[motion^=from-]:animate-in data-[motion^=to-]:animate-out md:absolute md:w-auto",
+        "group-data-[viewport=false]/navigation-menu:data-[state=closed]:zoom-out-95 group-data-[viewport=false]/navigation-menu:data-[state=open]:zoom-in-95 group-data-[viewport=false]/navigation-menu:data-[state=open]:fade-in-0 group-data-[viewport=false]/navigation-menu:data-[state=closed]:fade-out-0 **:data-[slot=navigation-menu-link]:focus:outline-none **:data-[slot=navigation-menu-link]:focus:ring-0 group-data-[viewport=false]/navigation-menu:top-full group-data-[viewport=false]/navigation-menu:mt-1.5 group-data-[viewport=false]/navigation-menu:overflow-hidden group-data-[viewport=false]/navigation-menu:rounded-md group-data-[viewport=false]/navigation-menu:border group-data-[viewport=false]/navigation-menu:bg-popover group-data-[viewport=false]/navigation-menu:text-popover-foreground group-data-[viewport=false]/navigation-menu:shadow group-data-[viewport=false]/navigation-menu:duration-200 group-data-[viewport=false]/navigation-menu:data-[state=closed]:animate-out group-data-[viewport=false]/navigation-menu:data-[state=open]:animate-in",
+        className,
+      )}
+      data-slot="navigation-menu-content"
+      {...props}
+    />
+  );
+}
+
+function NavigationMenuViewport({
+  className,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.Viewport>) {
+  return (
+    <div className={cn("absolute top-full left-0 isolate z-50 flex justify-center")}>
+      <NavigationMenuPrimitive.Viewport
+        className={cn(
+          "data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-90 relative mt-1.5 h-[var(--radix-navigation-menu-viewport-height)] w-full origin-top-center overflow-hidden rounded-md border bg-popover text-popover-foreground shadow data-[state=closed]:animate-out data-[state=open]:animate-in md:w-[var(--radix-navigation-menu-viewport-width)]",
+          className,
+        )}
+        data-slot="navigation-menu-viewport"
+        {...props}
+      />
+    </div>
+  );
+}
+
+function NavigationMenuLink({
+  className,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.Link>) {
+  return (
+    <NavigationMenuPrimitive.Link
+      className={cn(
+        "flex flex-col gap-1 rounded-sm p-2 text-sm outline-ring/50 ring-ring/10 transition-[color,box-shadow] hover:bg-accent hover:text-accent-foreground focus:bg-accent focus:text-accent-foreground focus-visible:outline-1 focus-visible:ring-4 data-[active=true]:bg-accent/50 data-[active=true]:text-accent-foreground data-[active=true]:focus:bg-accent data-[active=true]:hover:bg-accent dark:outline-ring/40 dark:ring-ring/20 [&_svg:not([class*='size-'])]:size-4 [&_svg:not([class*='text-'])]:text-muted-foreground",
+        className,
+      )}
+      data-slot="navigation-menu-link"
+      {...props}
+    />
+  );
+}
+
+function NavigationMenuIndicator({
+  className,
+  ...props
+}: React.ComponentProps<typeof NavigationMenuPrimitive.Indicator>) {
+  return (
+    <NavigationMenuPrimitive.Indicator
+      className={cn(
+        "data-[state=hidden]:fade-out data-[state=visible]:fade-in top-full z-[1] flex h-1.5 items-end justify-center overflow-hidden data-[state=hidden]:animate-out data-[state=visible]:animate-in",
+        className,
+      )}
+      data-slot="navigation-menu-indicator"
+      {...props}
+    >
+      <div className="relative top-[60%] h-2 w-2 rotate-45 rounded-tl-sm bg-border shadow-md" />
+    </NavigationMenuPrimitive.Indicator>
+  );
+}
+
+export {
+  NavigationMenu,
+  NavigationMenuList,
+  NavigationMenuItem,
+  NavigationMenuContent,
+  NavigationMenuTrigger,
+  NavigationMenuLink,
+  NavigationMenuIndicator,
+  NavigationMenuViewport,
+  navigationMenuTriggerStyle,
+};
diff --git a/packages/ui/components/ui/pagination.tsx b/packages/ui/components/ui/pagination.tsx
new file mode 100644
index 000000000..0447aa5ce
--- /dev/null
+++ b/packages/ui/components/ui/pagination.tsx
@@ -0,0 +1,106 @@
+import type * as React from "react";
+
+import { ChevronLeftIcon, ChevronRightIcon, MoreHorizontalIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+import { type Button, buttonVariants } from "./button";
+
+function Pagination({ className, ...props }: React.ComponentProps<"nav">) {
+  return (
+    <nav
+      aria-label="pagination"
+      className={cn("mx-auto flex w-full justify-center", className)}
+      data-slot="pagination"
+      {...props}
+    />
+  );
+}
+
+function PaginationContent({ className, ...props }: React.ComponentProps<"ul">) {
+  return (
+    <ul
+      className={cn("flex flex-row items-center gap-1", className)}
+      data-slot="pagination-content"
+      {...props}
+    />
+  );
+}
+
+function PaginationItem({ ...props }: React.ComponentProps<"li">) {
+  return <li data-slot="pagination-item" {...props} />;
+}
+
+type PaginationLinkProps = {
+  isActive?: boolean;
+} & Pick<React.ComponentProps<typeof Button>, "size"> &
+  React.ComponentProps<"a">;
+
+function PaginationLink({ className, isActive, size = "icon", ...props }: PaginationLinkProps) {
+  return (
+    <a
+      aria-current={isActive ? "page" : undefined}
+      className={cn(
+        buttonVariants({
+          size,
+          variant: isActive ? "outline" : "ghost",
+        }),
+        className,
+      )}
+      data-active={isActive}
+      data-slot="pagination-link"
+      {...props}
+    />
+  );
+}
+
+function PaginationPrevious({ className, ...props }: React.ComponentProps<typeof PaginationLink>) {
+  return (
+    <PaginationLink
+      aria-label="Go to previous page"
+      className={cn("gap-1 px-2.5 sm:pl-2.5", className)}
+      size="default"
+      {...props}
+    >
+      <ChevronLeftIcon />
+      <span className="hidden sm:block">Previous</span>
+    </PaginationLink>
+  );
+}
+
+function PaginationNext({ className, ...props }: React.ComponentProps<typeof PaginationLink>) {
+  return (
+    <PaginationLink
+      aria-label="Go to next page"
+      className={cn("gap-1 px-2.5 sm:pr-2.5", className)}
+      size="default"
+      {...props}
+    >
+      <span className="hidden sm:block">Next</span>
+      <ChevronRightIcon />
+    </PaginationLink>
+  );
+}
+
+function PaginationEllipsis({ className, ...props }: React.ComponentProps<"span">) {
+  return (
+    <span
+      aria-hidden
+      className={cn("flex size-9 items-center justify-center", className)}
+      data-slot="pagination-ellipsis"
+      {...props}
+    >
+      <MoreHorizontalIcon className="size-4" />
+      <span className="sr-only">More pages</span>
+    </span>
+  );
+}
+
+export {
+  Pagination,
+  PaginationContent,
+  PaginationLink,
+  PaginationItem,
+  PaginationPrevious,
+  PaginationNext,
+  PaginationEllipsis,
+};
diff --git a/packages/ui/components/ui/popover.tsx b/packages/ui/components/ui/popover.tsx
new file mode 100644
index 000000000..43124faba
--- /dev/null
+++ b/packages/ui/components/ui/popover.tsx
@@ -0,0 +1,43 @@
+"use client";
+
+import type * as React from "react";
+
+import { Popover as PopoverPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function Popover({ ...props }: React.ComponentProps<typeof PopoverPrimitive.Root>) {
+  return <PopoverPrimitive.Root data-slot="popover" {...props} />;
+}
+
+function PopoverTrigger({ ...props }: React.ComponentProps<typeof PopoverPrimitive.Trigger>) {
+  return <PopoverPrimitive.Trigger data-slot="popover-trigger" {...props} />;
+}
+
+function PopoverContent({
+  className,
+  align = "start",
+  sideOffset = 4,
+  ...props
+}: React.ComponentProps<typeof PopoverPrimitive.Content>) {
+  return (
+    <PopoverPrimitive.Portal>
+      <PopoverPrimitive.Content
+        align={align}
+        className={cn(
+          "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-72 origin-(--radix-popover-content-transform-origin) rounded-md border bg-popover p-4 text-popover-foreground shadow-md duration-0 outline-hidden data-[state=closed]:animate-out data-[state=open]:animate-in",
+          className,
+        )}
+        data-slot="popover-content"
+        sideOffset={sideOffset}
+        {...props}
+      />
+    </PopoverPrimitive.Portal>
+  );
+}
+
+function PopoverAnchor({ ...props }: React.ComponentProps<typeof PopoverPrimitive.Anchor>) {
+  return <PopoverPrimitive.Anchor data-slot="popover-anchor" {...props} />;
+}
+
+export { Popover, PopoverTrigger, PopoverContent, PopoverAnchor };
diff --git a/packages/ui/components/ui/progress.tsx b/packages/ui/components/ui/progress.tsx
new file mode 100644
index 000000000..ec7e633c6
--- /dev/null
+++ b/packages/ui/components/ui/progress.tsx
@@ -0,0 +1,27 @@
+import type * as React from "react";
+
+import { Progress as ProgressPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function Progress({
+  className,
+  value,
+  ...props
+}: React.ComponentProps<typeof ProgressPrimitive.Root>) {
+  return (
+    <ProgressPrimitive.Root
+      className={cn("relative h-2 w-full overflow-hidden rounded-full bg-primary/20", className)}
+      data-slot="progress"
+      {...props}
+    >
+      <ProgressPrimitive.Indicator
+        className="h-full w-full flex-1 bg-primary transition-all"
+        data-slot="progress-indicator"
+        style={{ transform: `translateX(-${100 - (value || 0)}%)` }}
+      />
+    </ProgressPrimitive.Root>
+  );
+}
+
+export { Progress };
diff --git a/packages/ui/components/ui/radio-group.tsx b/packages/ui/components/ui/radio-group.tsx
new file mode 100644
index 000000000..095a73dd1
--- /dev/null
+++ b/packages/ui/components/ui/radio-group.tsx
@@ -0,0 +1,46 @@
+"use client";
+
+import type * as React from "react";
+
+import { RadioGroup as RadioGroupPrimitive } from "radix-ui";
+import { CircleIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function RadioGroup({
+  className,
+  ...props
+}: React.ComponentProps<typeof RadioGroupPrimitive.Root>) {
+  return (
+    <RadioGroupPrimitive.Root
+      className={cn("grid gap-3", className)}
+      data-slot="radio-group"
+      {...props}
+    />
+  );
+}
+
+function RadioGroupItem({
+  className,
+  ...props
+}: React.ComponentProps<typeof RadioGroupPrimitive.Item>) {
+  return (
+    <RadioGroupPrimitive.Item
+      className={cn(
+        "aspect-square size-4 shrink-0 cursor-pointer rounded-full border border-input text-primary shadow-xs outline-none transition-[color,box-shadow] focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:bg-input/30 dark:aria-invalid:ring-destructive/40",
+        className,
+      )}
+      data-slot="radio-group-item"
+      {...props}
+    >
+      <RadioGroupPrimitive.Indicator
+        className="relative flex items-center justify-center"
+        data-slot="radio-group-indicator"
+      >
+        <CircleIcon className="-translate-x-1/2 -translate-y-1/2 absolute top-1/2 left-1/2 size-2 fill-primary" />
+      </RadioGroupPrimitive.Indicator>
+    </RadioGroupPrimitive.Item>
+  );
+}
+
+export { RadioGroup, RadioGroupItem };
diff --git a/packages/ui/components/ui/resizable.tsx b/packages/ui/components/ui/resizable.tsx
new file mode 100644
index 000000000..d5b5e0932
--- /dev/null
+++ b/packages/ui/components/ui/resizable.tsx
@@ -0,0 +1,51 @@
+"use client";
+import type * as React from "react";
+
+import { GripVerticalIcon } from "lucide-react";
+import * as ResizablePrimitive from "react-resizable-panels";
+
+import { cn } from "../../lib/utils";
+
+function ResizablePanelGroup({
+  className,
+  ...props
+}: React.ComponentProps<typeof ResizablePrimitive.PanelGroup>) {
+  return (
+    <ResizablePrimitive.PanelGroup
+      className={cn("flex h-full w-full data-[panel-group-direction=vertical]:flex-col", className)}
+      data-slot="resizable-panel-group"
+      {...props}
+    />
+  );
+}
+
+function ResizablePanel({ ...props }: React.ComponentProps<typeof ResizablePrimitive.Panel>) {
+  return <ResizablePrimitive.Panel data-slot="resizable-panel" {...props} />;
+}
+
+function ResizableHandle({
+  withHandle,
+  className,
+  ...props
+}: React.ComponentProps<typeof ResizablePrimitive.PanelResizeHandle> & {
+  withHandle?: boolean;
+}) {
+  return (
+    <ResizablePrimitive.PanelResizeHandle
+      className={cn(
+        "after:-translate-x-1/2 data-[panel-group-direction=vertical]:after:-translate-y-1/2 relative flex w-px items-center justify-center bg-border after:absolute after:inset-y-0 after:left-1/2 after:w-1 focus-visible:outline-hidden focus-visible:ring-1 focus-visible:ring-ring focus-visible:ring-offset-1 data-[panel-group-direction=vertical]:h-px data-[panel-group-direction=vertical]:w-full data-[panel-group-direction=vertical]:after:left-0 data-[panel-group-direction=vertical]:after:h-1 data-[panel-group-direction=vertical]:after:w-full data-[panel-group-direction=vertical]:after:translate-x-0 [&[data-panel-group-direction=vertical]>div]:rotate-90",
+        className,
+      )}
+      data-slot="resizable-handle"
+      {...props}
+    >
+      {withHandle && (
+        <div className="z-10 flex h-4 w-3 items-center justify-center rounded-xs border bg-border">
+          <GripVerticalIcon className="size-2.5" />
+        </div>
+      )}
+    </ResizablePrimitive.PanelResizeHandle>
+  );
+}
+
+export { ResizablePanelGroup, ResizablePanel, ResizableHandle };
diff --git a/packages/ui/components/ui/scroll-area.tsx b/packages/ui/components/ui/scroll-area.tsx
new file mode 100644
index 000000000..bc74b32fa
--- /dev/null
+++ b/packages/ui/components/ui/scroll-area.tsx
@@ -0,0 +1,123 @@
+"use client";
+
+import { useCallback, useEffect, useRef, useState } from "react";
+
+import { ScrollArea as ScrollAreaPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function ScrollArea({
+  className,
+  children,
+  fadeHint,
+  ...props
+}: React.ComponentProps<typeof ScrollAreaPrimitive.Root> & {
+  fadeHint?: boolean;
+}) {
+  const viewportRef = useRef<HTMLDivElement>(null);
+  const [canScroll, setCanScroll] = useState({
+    top: false,
+    bottom: false,
+    left: false,
+    right: false,
+  });
+
+  const checkScroll = useCallback(() => {
+    const el = viewportRef.current;
+    if (!el) return;
+    const threshold = 10;
+    setCanScroll({
+      top: el.scrollTop > threshold,
+      bottom: el.scrollTop + el.clientHeight < el.scrollHeight - threshold,
+      left: el.scrollLeft > threshold,
+      right: el.scrollLeft + el.clientWidth < el.scrollWidth - threshold,
+    });
+  }, []);
+
+  useEffect(() => {
+    if (!fadeHint) return;
+    const el = viewportRef.current;
+    if (!el) return;
+    checkScroll();
+    el.addEventListener("scroll", checkScroll);
+    const observer = new ResizeObserver(checkScroll);
+    observer.observe(el);
+    return () => {
+      el.removeEventListener("scroll", checkScroll);
+      observer.disconnect();
+    };
+  }, [fadeHint, checkScroll]);
+
+  return (
+    <ScrollAreaPrimitive.Root
+      className={cn("relative", className)}
+      data-slot="scroll-area"
+      {...props}
+    >
+      <ScrollAreaPrimitive.Viewport
+        ref={viewportRef}
+        className="size-full rounded-[inherit] outline-ring/50 ring-ring/10 transition-[color,box-shadow] focus-visible:outline-1 focus-visible:ring-4 dark:outline-ring/40 dark:ring-ring/20"
+        data-slot="scroll-area-viewport"
+      >
+        {children}
+      </ScrollAreaPrimitive.Viewport>
+      <ScrollBar />
+      <ScrollAreaPrimitive.Corner />
+      {fadeHint && (
+        <>
+          <div
+            className={cn(
+              "pointer-events-none absolute inset-x-0 top-0 h-12 bg-linear-to-b from-background to-transparent transition-opacity",
+              canScroll.top ? "opacity-100" : "opacity-0",
+            )}
+          />
+          <div
+            className={cn(
+              "pointer-events-none absolute inset-x-0 bottom-0 h-12 bg-linear-to-t from-background to-transparent transition-opacity",
+              canScroll.bottom ? "opacity-100" : "opacity-0",
+            )}
+          />
+          <div
+            className={cn(
+              "pointer-events-none absolute inset-y-0 left-0 w-12 bg-linear-to-r from-background to-transparent transition-opacity",
+              canScroll.left ? "opacity-100" : "opacity-0",
+            )}
+          />
+          <div
+            className={cn(
+              "pointer-events-none absolute inset-y-0 right-0 w-12 bg-linear-to-l from-background to-transparent transition-opacity",
+              canScroll.right ? "opacity-100" : "opacity-0",
+            )}
+          />
+        </>
+      )}
+    </ScrollAreaPrimitive.Root>
+  );
+}
+
+function ScrollBar({
+  className,
+  orientation = "vertical",
+  ...props
+}: React.ComponentProps<typeof ScrollAreaPrimitive.ScrollAreaScrollbar>) {
+  return (
+    <ScrollAreaPrimitive.ScrollAreaScrollbar
+      className={cn(
+        "flex touch-none select-none p-px transition-colors",
+        orientation === "vertical" && "h-full w-2.5 border-l border-l-transparent",
+        orientation === "horizontal" && "h-2.5 flex-col border-t border-t-transparent",
+        className,
+      )}
+      data-slot="scroll-area-scrollbar"
+      orientation={orientation}
+      {...props}
+    >
+      <ScrollAreaPrimitive.ScrollAreaThumb
+        className="relative flex-1 rounded-full bg-border"
+        data-slot="scroll-area-thumb"
+      />
+    </ScrollAreaPrimitive.ScrollAreaScrollbar>
+  );
+}
+
+export { ScrollArea, ScrollBar };
diff --git a/packages/ui/components/ui/select.tsx b/packages/ui/components/ui/select.tsx
new file mode 100644
index 000000000..8ec184c99
--- /dev/null
+++ b/packages/ui/components/ui/select.tsx
@@ -0,0 +1,184 @@
+"use client";
+
+import * as React from "react";
+import { Select as SelectPrimitive } from "radix-ui";
+import { ChevronDownIcon, CheckIcon, ChevronUpIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function Select({ ...props }: React.ComponentProps<typeof SelectPrimitive.Root>) {
+  return <SelectPrimitive.Root data-slot="select" {...props} />;
+}
+
+function SelectGroup({ className, ...props }: React.ComponentProps<typeof SelectPrimitive.Group>) {
+  return (
+    <SelectPrimitive.Group
+      data-slot="select-group"
+      className={cn("scroll-my-1 p-1", className)}
+      {...props}
+    />
+  );
+}
+
+function SelectValue({ ...props }: React.ComponentProps<typeof SelectPrimitive.Value>) {
+  return <SelectPrimitive.Value data-slot="select-value" {...props} />;
+}
+
+function SelectTrigger({
+  className,
+  size = "default",
+  children,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Trigger> & {
+  size?: "sm" | "default";
+}) {
+  return (
+    <SelectPrimitive.Trigger
+      data-slot="select-trigger"
+      data-size={size}
+      className={cn(
+        "border-input data-[placeholder]:text-muted-foreground dark:bg-input/30 dark:hover:bg-input/50 focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 gap-1.5 rounded-lg border bg-transparent py-2 pr-2 pl-2.5 text-sm transition-colors select-none focus-visible:ring-[3px] aria-invalid:ring-[3px] data-[size=default]:h-8 data-[size=sm]:h-7 data-[size=sm]:rounded-[min(var(--radius-md),10px)] *:data-[slot=select-value]:flex *:data-[slot=select-value]:gap-1.5 [&_svg:not([class*='size-'])]:size-4 flex w-fit items-center justify-between whitespace-nowrap outline-none disabled:cursor-not-allowed disabled:opacity-50 *:data-[slot=select-value]:line-clamp-1 *:data-[slot=select-value]:flex *:data-[slot=select-value]:items-center [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        className,
+      )}
+      {...props}
+    >
+      {children}
+      <SelectPrimitive.Icon asChild>
+        <ChevronDownIcon className="text-muted-foreground size-4 pointer-events-none" />
+      </SelectPrimitive.Icon>
+    </SelectPrimitive.Trigger>
+  );
+}
+
+function SelectContent({
+  className,
+  children,
+  position = "item-aligned",
+  align = "center",
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Content>) {
+  return (
+    <SelectPrimitive.Portal>
+      <SelectPrimitive.Content
+        data-slot="select-content"
+        className={cn(
+          "bg-popover text-popover-foreground data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 ring-foreground/10 min-w-36 rounded-lg shadow-md ring-1 duration-100 relative z-50 max-h-(--radix-select-content-available-height) origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto",
+          position === "popper" &&
+            "data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1",
+          className,
+        )}
+        position={position}
+        align={align}
+        {...props}
+      >
+        <SelectScrollUpButton />
+        <SelectPrimitive.Viewport
+          data-position={position}
+          className={cn(
+            "data-[position=popper]:h-[var(--radix-select-trigger-height)] data-[position=popper]:w-full data-[position=popper]:min-w-[var(--radix-select-trigger-width)]",
+            position === "popper" && "",
+          )}
+        >
+          {children}
+        </SelectPrimitive.Viewport>
+        <SelectScrollDownButton />
+      </SelectPrimitive.Content>
+    </SelectPrimitive.Portal>
+  );
+}
+
+function SelectLabel({ className, ...props }: React.ComponentProps<typeof SelectPrimitive.Label>) {
+  return (
+    <SelectPrimitive.Label
+      data-slot="select-label"
+      className={cn("text-muted-foreground px-1.5 py-1 text-xs", className)}
+      {...props}
+    />
+  );
+}
+
+function SelectItem({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Item>) {
+  return (
+    <SelectPrimitive.Item
+      data-slot="select-item"
+      className={cn(
+        "focus:bg-accent focus:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2 relative flex w-full cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        className,
+      )}
+      {...props}
+    >
+      <span className="pointer-events-none absolute right-2 flex size-4 items-center justify-center">
+        <SelectPrimitive.ItemIndicator>
+          <CheckIcon className="pointer-events-none" />
+        </SelectPrimitive.ItemIndicator>
+      </span>
+      <SelectPrimitive.ItemText>{children}</SelectPrimitive.ItemText>
+    </SelectPrimitive.Item>
+  );
+}
+
+function SelectSeparator({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.Separator>) {
+  return (
+    <SelectPrimitive.Separator
+      data-slot="select-separator"
+      className={cn("bg-border -mx-1 my-1 h-px pointer-events-none", className)}
+      {...props}
+    />
+  );
+}
+
+function SelectScrollUpButton({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollUpButton>) {
+  return (
+    <SelectPrimitive.ScrollUpButton
+      data-slot="select-scroll-up-button"
+      className={cn(
+        "bg-popover z-10 flex cursor-default items-center justify-center py-1 [&_svg:not([class*='size-'])]:size-4",
+        className,
+      )}
+      {...props}
+    >
+      <ChevronUpIcon />
+    </SelectPrimitive.ScrollUpButton>
+  );
+}
+
+function SelectScrollDownButton({
+  className,
+  ...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollDownButton>) {
+  return (
+    <SelectPrimitive.ScrollDownButton
+      data-slot="select-scroll-down-button"
+      className={cn(
+        "bg-popover z-10 flex cursor-default items-center justify-center py-1 [&_svg:not([class*='size-'])]:size-4",
+        className,
+      )}
+      {...props}
+    >
+      <ChevronDownIcon />
+    </SelectPrimitive.ScrollDownButton>
+  );
+}
+
+export {
+  Select,
+  SelectContent,
+  SelectGroup,
+  SelectItem,
+  SelectLabel,
+  SelectScrollDownButton,
+  SelectScrollUpButton,
+  SelectSeparator,
+  SelectTrigger,
+  SelectValue,
+};
diff --git a/packages/ui/components/ui/separator.tsx b/packages/ui/components/ui/separator.tsx
new file mode 100644
index 000000000..5cf81fae3
--- /dev/null
+++ b/packages/ui/components/ui/separator.tsx
@@ -0,0 +1,26 @@
+import * as React from "react";
+import { Separator as SeparatorPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function Separator({
+  className,
+  orientation = "horizontal",
+  decorative = true,
+  ...props
+}: React.ComponentProps<typeof SeparatorPrimitive.Root>) {
+  return (
+    <SeparatorPrimitive.Root
+      data-slot="separator"
+      decorative={decorative}
+      orientation={orientation}
+      className={cn(
+        "bg-border shrink-0 data-[orientation=horizontal]:h-px data-[orientation=horizontal]:w-full data-[orientation=vertical]:w-px data-[orientation=vertical]:self-stretch",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { Separator };
diff --git a/packages/ui/components/ui/sheet.tsx b/packages/ui/components/ui/sheet.tsx
new file mode 100644
index 000000000..2a9dc2890
--- /dev/null
+++ b/packages/ui/components/ui/sheet.tsx
@@ -0,0 +1,135 @@
+import type * as React from "react";
+
+import { Dialog as SheetPrimitive } from "radix-ui";
+import { XIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+function Sheet({ ...props }: React.ComponentProps<typeof SheetPrimitive.Root>) {
+  return <SheetPrimitive.Root data-slot="sheet" {...props} />;
+}
+
+function SheetTrigger({ ...props }: React.ComponentProps<typeof SheetPrimitive.Trigger>) {
+  return <SheetPrimitive.Trigger data-slot="sheet-trigger" {...props} />;
+}
+
+function SheetClose({ ...props }: React.ComponentProps<typeof SheetPrimitive.Close>) {
+  return <SheetPrimitive.Close data-slot="sheet-close" {...props} />;
+}
+
+function SheetPortal({ ...props }: React.ComponentProps<typeof SheetPrimitive.Portal>) {
+  return <SheetPrimitive.Portal data-slot="sheet-portal" {...props} />;
+}
+
+function SheetOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Overlay>) {
+  return (
+    <SheetPrimitive.Overlay
+      className={cn(
+        "data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 fixed inset-0 z-50 bg-black/50 data-[state=closed]:animate-out data-[state=open]:animate-in",
+        className,
+      )}
+      data-slot="sheet-overlay"
+      {...props}
+    />
+  );
+}
+
+function SheetContent({
+  className,
+  children,
+  side = "right",
+  hideCloseButton = false,
+  hideOverlay = false,
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Content> & {
+  side?: "top" | "right" | "bottom" | "left";
+  hideCloseButton?: boolean;
+  hideOverlay?: boolean;
+}) {
+  return (
+    <SheetPortal>
+      {!hideOverlay && <SheetOverlay />}
+      <SheetPrimitive.Content
+        className={cn(
+          "fixed z-50 flex flex-col gap-4 bg-background shadow-lg transition ease-in-out data-[state=closed]:animate-out data-[state=open]:animate-in data-[state=closed]:duration-75 data-[state=open]:duration-75",
+          side === "right" &&
+            "data-[state=closed]:slide-out-to-right data-[state=open]:slide-in-from-right inset-y-0 right-0 h-full w-3/4 border-l sm:max-w-sm",
+          side === "left" &&
+            "data-[state=closed]:slide-out-to-left data-[state=open]:slide-in-from-left inset-y-0 left-0 h-full w-3/4 border-r sm:max-w-sm",
+          side === "top" &&
+            "data-[state=closed]:slide-out-to-top data-[state=open]:slide-in-from-top inset-x-0 top-0 h-auto border-b",
+          side === "bottom" &&
+            "data-[state=closed]:slide-out-to-bottom data-[state=open]:slide-in-from-bottom inset-x-0 bottom-0 h-auto border-t",
+          className,
+        )}
+        data-slot="sheet-content"
+        {...props}
+      >
+        {children}
+        {!hideCloseButton && (
+          <SheetPrimitive.Close className="absolute top-4 right-4 cursor-pointer rounded-xs opacity-70 ring-offset-background transition-opacity hover:opacity-100 focus:outline-hidden focus:ring-2 focus:ring-ring focus:ring-offset-2 disabled:pointer-events-none data-[state=open]:bg-secondary">
+            <XIcon className="size-4" />
+            <span className="sr-only">Close</span>
+          </SheetPrimitive.Close>
+        )}
+      </SheetPrimitive.Content>
+    </SheetPortal>
+  );
+}
+
+function SheetHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("flex flex-col gap-1.5 p-4", className)}
+      data-slot="sheet-header"
+      {...props}
+    />
+  );
+}
+
+function SheetFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("mt-auto flex flex-col gap-2 p-4", className)}
+      data-slot="sheet-footer"
+      {...props}
+    />
+  );
+}
+
+function SheetTitle({ className, ...props }: React.ComponentProps<typeof SheetPrimitive.Title>) {
+  return (
+    <SheetPrimitive.Title
+      className={cn("font-semibold text-foreground", className)}
+      data-slot="sheet-title"
+      {...props}
+    />
+  );
+}
+
+function SheetDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof SheetPrimitive.Description>) {
+  return (
+    <SheetPrimitive.Description
+      className={cn("text-muted-foreground text-sm", className)}
+      data-slot="sheet-description"
+      {...props}
+    />
+  );
+}
+
+export {
+  Sheet,
+  SheetTrigger,
+  SheetClose,
+  SheetContent,
+  SheetHeader,
+  SheetFooter,
+  SheetTitle,
+  SheetDescription,
+};
diff --git a/packages/ui/components/ui/sidebar.tsx b/packages/ui/components/ui/sidebar.tsx
new file mode 100644
index 000000000..79f649863
--- /dev/null
+++ b/packages/ui/components/ui/sidebar.tsx
@@ -0,0 +1,697 @@
+"use client";
+
+import { Slot } from "radix-ui";
+import { type VariantProps, cva } from "class-variance-authority";
+import { PanelLeftIcon } from "lucide-react";
+import * as React from "react";
+
+import { useIsMobile } from "../../hooks/use-mobile";
+import { cn } from "../../lib/utils";
+import { Button } from "./button";
+import { Input } from "./input";
+import { Separator } from "./separator";
+import { Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle } from "./sheet";
+import { Skeleton } from "./skeleton";
+import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "./tooltip";
+
+const SIDEBAR_COOKIE_NAME = "sidebar_state";
+const SIDEBAR_COOKIE_MAX_AGE = 60 * 60 * 24 * 7;
+const SIDEBAR_WIDTH = "16rem";
+const SIDEBAR_WIDTH_MOBILE = "18rem";
+const SIDEBAR_WIDTH_ICON = "3rem";
+const SIDEBAR_KEYBOARD_SHORTCUT = "b";
+
+interface SidebarContextProps {
+  state: "expanded" | "collapsed";
+  open: boolean;
+  setOpen: (open: boolean) => void;
+  openMobile: boolean;
+  setOpenMobile: (open: boolean) => void;
+  isMobile: boolean;
+  toggleSidebar: () => void;
+}
+
+const SidebarContext = React.createContext<SidebarContextProps | null>(null);
+
+function useSidebar() {
+  const context = React.useContext(SidebarContext);
+  if (!context) {
+    throw new Error("useSidebar must be used within a SidebarProvider.");
+  }
+
+  return context;
+}
+
+function SidebarProvider({
+  defaultOpen = true,
+  open: openProp,
+  onOpenChange: setOpenProp,
+  className,
+  style,
+  children,
+  ...props
+}: React.ComponentProps<"div"> & {
+  defaultOpen?: boolean;
+  open?: boolean;
+  onOpenChange?: (open: boolean) => void;
+}) {
+  const isMobile = useIsMobile();
+  const [openMobile, setOpenMobile] = React.useState(false);
+
+  // This is the internal state of the sidebar.
+  // We use openProp and setOpenProp for control from outside the component.
+  const [_open, _setOpen] = React.useState(defaultOpen);
+  const open = openProp ?? _open;
+  const setOpen = React.useCallback(
+    (value: boolean | ((value: boolean) => boolean)) => {
+      const openState = typeof value === "function" ? value(open) : value;
+      if (setOpenProp) {
+        setOpenProp(openState);
+      } else {
+        _setOpen(openState);
+      }
+
+      // This sets the cookie to keep the sidebar state.
+      // biome-ignore lint/suspicious/noDocumentCookie: shadcn
+      document.cookie = `${SIDEBAR_COOKIE_NAME}=${openState}; path=/; max-age=${SIDEBAR_COOKIE_MAX_AGE}`;
+    },
+    [setOpenProp, open],
+  );
+
+  // Helper to toggle the sidebar.
+  const toggleSidebar = React.useCallback(
+    () => (isMobile ? setOpenMobile((open) => !open) : setOpen((open) => !open)),
+    [isMobile, setOpen],
+  );
+
+  // Adds a keyboard shortcut to toggle the sidebar.
+  React.useEffect(() => {
+    const handleKeyDown = (event: KeyboardEvent) => {
+      if (event.key === SIDEBAR_KEYBOARD_SHORTCUT && (event.metaKey || event.ctrlKey)) {
+        event.preventDefault();
+        toggleSidebar();
+      }
+    };
+
+    window.addEventListener("keydown", handleKeyDown);
+    return () => window.removeEventListener("keydown", handleKeyDown);
+  }, [toggleSidebar]);
+
+  // We add a state so that we can do data-state="expanded" or "collapsed".
+  // This makes it easier to style the sidebar with Tailwind classes.
+  const state = open ? "expanded" : "collapsed";
+
+  const contextValue = React.useMemo<SidebarContextProps>(
+    () => ({
+      isMobile,
+      open,
+      openMobile,
+      setOpen,
+      setOpenMobile,
+      state,
+      toggleSidebar,
+    }),
+    [state, open, setOpen, isMobile, openMobile, toggleSidebar],
+  );
+
+  return (
+    <SidebarContext.Provider value={contextValue}>
+      <TooltipProvider delayDuration={0}>
+        <div
+          className={cn(
+            "group/sidebar-wrapper flex h-svh w-full has-data-[variant=inset]:bg-sidebar",
+            className,
+          )}
+          data-slot="sidebar-wrapper"
+          style={
+            {
+              "--sidebar-width": SIDEBAR_WIDTH,
+              "--sidebar-width-icon": SIDEBAR_WIDTH_ICON,
+              ...style,
+            } as React.CSSProperties
+          }
+          {...props}
+        >
+          {children}
+        </div>
+      </TooltipProvider>
+    </SidebarContext.Provider>
+  );
+}
+
+function Sidebar({
+  side = "left",
+  variant = "sidebar",
+  collapsible = "offcanvas",
+  className,
+  children,
+  ...props
+}: React.ComponentProps<"div"> & {
+  side?: "left" | "right";
+  variant?: "sidebar" | "floating" | "inset";
+  collapsible?: "offcanvas" | "icon" | "none";
+}) {
+  const { isMobile, state, openMobile, setOpenMobile } = useSidebar();
+
+  if (collapsible === "none") {
+    return (
+      <div
+        className={cn(
+          "flex h-screen w-(--sidebar-width) flex-col bg-sidebar text-sidebar-foreground",
+          className,
+        )}
+        data-slot="sidebar"
+        {...props}
+      >
+        {children}
+      </div>
+    );
+  }
+
+  if (isMobile) {
+    return (
+      <Sheet onOpenChange={setOpenMobile} open={openMobile} {...props}>
+        <SheetContent
+          className="z-50 w-(--sidebar-width) bg-sidebar p-0 text-sidebar-foreground [&>button]:hidden"
+          data-mobile="true"
+          data-sidebar="sidebar"
+          data-slot="sidebar"
+          side={side}
+          style={
+            {
+              "--sidebar-width": SIDEBAR_WIDTH_MOBILE,
+            } as React.CSSProperties
+          }
+        >
+          <SheetHeader className="sr-only">
+            <SheetTitle>Sidebar</SheetTitle>
+            <SheetDescription>Displays the mobile sidebar.</SheetDescription>
+          </SheetHeader>
+          <div className="flex h-full w-full flex-col">{children}</div>
+        </SheetContent>
+      </Sheet>
+    );
+  }
+
+  return (
+    <div
+      className="group peer hidden text-sidebar-foreground md:block"
+      data-collapsible={state === "collapsed" ? collapsible : ""}
+      data-side={side}
+      data-slot="sidebar"
+      data-state={state}
+      data-variant={variant}
+    >
+      {/* This is what handles the sidebar gap on desktop */}
+      <div
+        className={cn(
+          "relative w-(--sidebar-width) bg-transparent transition-[width] duration-75 ease-linear",
+          "group-data-[collapsible=offcanvas]:w-0",
+          "group-data-[side=right]:rotate-180",
+          variant === "floating" || variant === "inset"
+            ? "group-data-[collapsible=icon]:w-[calc(var(--sidebar-width-icon)+(--spacing(4)))]"
+            : "group-data-[collapsible=icon]:w-(--sidebar-width-icon)",
+        )}
+        data-slot="sidebar-gap"
+      />
+      <div
+        className={cn(
+          "fixed inset-y-0 z-10 hidden h-svh w-(--sidebar-width) transition-[left,right,width] duration-75 ease-linear md:flex",
+          side === "left"
+            ? "left-0 group-data-[collapsible=offcanvas]:left-[calc(var(--sidebar-width)*-1)]"
+            : "right-0 group-data-[collapsible=offcanvas]:right-[calc(var(--sidebar-width)*-1)]",
+          // Adjust the padding for floating and inset variants.
+          variant === "floating"
+            ? "p-2 group-data-[collapsible=icon]:w-[calc(var(--sidebar-width-icon)+(--spacing(4))+2px)]"
+            : variant === "inset"
+              ? "group-data-[collapsible=icon]:w-[calc(var(--sidebar-width-icon)+(--spacing(4))+2px)]"
+              : "group-data-[collapsible=icon]:w-(--sidebar-width-icon) group-data-[side=left]:border-r group-data-[side=right]:border-l",
+
+          className,
+        )}
+        data-slot="sidebar-container"
+        {...props}
+      >
+        <div
+          className="flex h-full w-full flex-col bg-sidebar group-data-[variant=floating]:rounded-lg group-data-[variant=floating]:border group-data-[variant=floating]:border-sidebar-border group-data-[variant=floating]:shadow-sm"
+          data-sidebar="sidebar"
+          data-slot="sidebar-inner"
+        >
+          {children}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function SidebarTrigger({ className, onClick, ...props }: React.ComponentProps<typeof Button>) {
+  const { toggleSidebar } = useSidebar();
+
+  return (
+    <Button
+      className={cn("size-7", className)}
+      data-sidebar="trigger"
+      data-slot="sidebar-trigger"
+      onClick={(event) => {
+        onClick?.(event);
+        toggleSidebar();
+      }}
+      size="icon"
+      variant="ghost"
+      {...props}
+    >
+      <PanelLeftIcon />
+      <span className="sr-only">Toggle Sidebar</span>
+    </Button>
+  );
+}
+
+function SidebarRail({ className, ...props }: React.ComponentProps<"button">) {
+  const { toggleSidebar } = useSidebar();
+
+  return (
+    <button
+      aria-label="Toggle Sidebar"
+      className={cn(
+        "-translate-x-1/2 group-data-[side=left]:-right-4 absolute inset-y-0 z-20 hidden w-4 transition-all ease-linear after:absolute after:inset-y-0 after:left-1/2 after:w-[2px] hover:after:bg-sidebar-border group-data-[side=right]:left-0 sm:flex",
+        "in-data-[side=left]:cursor-w-resize in-data-[side=right]:cursor-e-resize",
+        "[[data-side=left][data-state=collapsed]_&]:cursor-e-resize [[data-side=right][data-state=collapsed]_&]:cursor-w-resize",
+        "group-data-[collapsible=offcanvas]:translate-x-0 hover:group-data-[collapsible=offcanvas]:bg-sidebar group-data-[collapsible=offcanvas]:after:left-full",
+        "[[data-side=left][data-collapsible=offcanvas]_&]:-right-2",
+        "[[data-side=right][data-collapsible=offcanvas]_&]:-left-2",
+        className,
+      )}
+      data-sidebar="rail"
+      data-slot="sidebar-rail"
+      onClick={toggleSidebar}
+      tabIndex={-1}
+      title="Toggle Sidebar"
+      {...props}
+    />
+  );
+}
+
+function SidebarInset({ className, ...props }: React.ComponentProps<"main">) {
+  return (
+    <main
+      className={cn(
+        "relative flex w-full flex-1 flex-col bg-background",
+        "md:peer-data-[variant=inset]:peer-data-[state=collapsed]:ml-2 md:peer-data-[variant=inset]:m-2 md:peer-data-[variant=inset]:ml-0 md:peer-data-[variant=inset]:rounded-xl md:peer-data-[variant=inset]:shadow-sm peer-data-[variant=inset]:bg-background",
+        "overflow-y-auto border border-border/60",
+        className,
+      )}
+      data-slot="sidebar-inset"
+      {...props}
+    />
+  );
+}
+
+function SidebarInput({ className, ...props }: React.ComponentProps<typeof Input>) {
+  return (
+    <Input
+      className={cn("h-8 w-full bg-background shadow-none", className)}
+      data-sidebar="input"
+      data-slot="sidebar-input"
+      {...props}
+    />
+  );
+}
+
+function SidebarHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("flex flex-col gap-2 p-2", className)}
+      data-sidebar="header"
+      data-slot="sidebar-header"
+      {...props}
+    />
+  );
+}
+
+function SidebarFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("flex flex-col gap-2 p-2", className)}
+      data-sidebar="footer"
+      data-slot="sidebar-footer"
+      {...props}
+    />
+  );
+}
+
+function SidebarSeparator({ className, ...props }: React.ComponentProps<typeof Separator>) {
+  return (
+    <Separator
+      className={cn("mx-2 w-auto bg-sidebar-border", className)}
+      data-sidebar="separator"
+      data-slot="sidebar-separator"
+      {...props}
+    />
+  );
+}
+
+function SidebarContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn(
+        "flex min-h-0 flex-1 flex-col gap-2 overflow-auto group-data-[collapsible=icon]:overflow-hidden",
+        className,
+      )}
+      data-sidebar="content"
+      data-slot="sidebar-content"
+      {...props}
+    />
+  );
+}
+
+function SidebarGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("relative flex w-full min-w-0 flex-col p-2", className)}
+      data-sidebar="group"
+      data-slot="sidebar-group"
+      {...props}
+    />
+  );
+}
+
+function SidebarGroupLabel({
+  className,
+  asChild = false,
+  ...props
+}: React.ComponentProps<"div"> & { asChild?: boolean }) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "div";
+
+  return (
+    <Comp
+      className={cn(
+        "flex h-8 shrink-0 items-center rounded-md px-2 font-medium text-sidebar-foreground/70 text-xs outline-hidden ring-sidebar-ring transition-[margin,opacity] duration-75 ease-linear focus-visible:ring-2 [&>svg]:size-4 [&>svg]:shrink-0",
+        "group-data-[collapsible=icon]:-mt-8 group-data-[collapsible=icon]:opacity-0",
+        className,
+      )}
+      data-sidebar="group-label"
+      data-slot="sidebar-group-label"
+      {...props}
+    />
+  );
+}
+
+function SidebarGroupAction({
+  className,
+  asChild = false,
+  ...props
+}: React.ComponentProps<"button"> & { asChild?: boolean }) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "button";
+
+  return (
+    <Comp
+      className={cn(
+        "absolute top-3.5 right-3 flex aspect-square w-5 items-center justify-center rounded-md p-0 text-sidebar-foreground outline-hidden ring-sidebar-ring transition-transform hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:ring-2 [&>svg]:size-4 [&>svg]:shrink-0",
+        // Increases the hit area of the button on mobile.
+        "after:-inset-2 after:absolute md:after:hidden",
+        "group-data-[collapsible=icon]:hidden",
+        className,
+      )}
+      data-sidebar="group-action"
+      data-slot="sidebar-group-action"
+      {...props}
+    />
+  );
+}
+
+function SidebarGroupContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("w-full text-sm", className)}
+      data-sidebar="group-content"
+      data-slot="sidebar-group-content"
+      {...props}
+    />
+  );
+}
+
+function SidebarMenu({ className, ...props }: React.ComponentProps<"ul">) {
+  return (
+    <ul
+      className={cn("flex w-full min-w-0 flex-col gap-1", className)}
+      data-sidebar="menu"
+      data-slot="sidebar-menu"
+      {...props}
+    />
+  );
+}
+
+function SidebarMenuItem({ className, ...props }: React.ComponentProps<"li">) {
+  return (
+    <li
+      className={cn("group/menu-item relative", className)}
+      data-sidebar="menu-item"
+      data-slot="sidebar-menu-item"
+      {...props}
+    />
+  );
+}
+
+const sidebarMenuButtonVariants = cva(
+  "peer/menu-button flex w-full  items-center gap-3 text-muted-foreground overflow-hidden rounded-md p-2 text-left text-sm outline-hidden ring-sidebar-ring transition-[width,height,padding] hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:ring-2 active:bg-sidebar-accent active:text-sidebar-accent-foreground disabled:pointer-events-none disabled:opacity-50 group-has-data-[sidebar=menu-action]/menu-item:pr-8 aria-disabled:pointer-events-none aria-disabled:opacity-50 data-[active=true]:bg-sidebar-accent data-[active=true]:text-sidebar-accent-foreground data-[state=open]:hover:bg-sidebar-accent data-[state=open]:hover:text-sidebar-accent-foreground group-data-[collapsible=icon]:size-8! group-data-[collapsible=icon]:p-2! [&>span:last-child]:truncate [&>svg]:size-4 [&>svg]:shrink-0",
+  {
+    defaultVariants: {
+      size: "default",
+      variant: "default",
+    },
+    variants: {
+      size: {
+        default: "h-9 text-sm",
+        lg: "h-12 text-sm group-data-[collapsible=icon]:p-0!",
+        sm: "h-7 text-xs",
+      },
+      variant: {
+        default: "hover:bg-sidebar-accent hover:text-sidebar-accent-foreground",
+        outline:
+          "bg-background shadow-[0_0_0_1px_hsl(var(--sidebar-border))] hover:bg-sidebar-accent hover:text-sidebar-accent-foreground hover:shadow-[0_0_0_1px_hsl(var(--sidebar-accent))]",
+      },
+    },
+  },
+);
+
+function SidebarMenuButton({
+  asChild = false,
+  isActive = false,
+  variant = "default",
+  size = "default",
+  tooltip,
+  className,
+  ...props
+}: React.ComponentProps<"button"> & {
+  asChild?: boolean;
+  isActive?: boolean;
+  tooltip?: string | React.ComponentProps<typeof TooltipContent> | null;
+} & VariantProps<typeof sidebarMenuButtonVariants>) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "button";
+  const { isMobile, state } = useSidebar();
+
+  const button = (
+    <Comp
+      className={cn(sidebarMenuButtonVariants({ size, variant }), className)}
+      data-active={isActive}
+      data-sidebar="menu-button"
+      data-size={size}
+      data-slot="sidebar-menu-button"
+      {...props}
+    />
+  );
+
+  if (!tooltip) {
+    return button;
+  }
+
+  if (typeof tooltip === "string") {
+    tooltip = {
+      children: tooltip,
+    };
+  }
+
+  return (
+    <Tooltip>
+      <TooltipTrigger asChild>{button}</TooltipTrigger>
+      <TooltipContent
+        align="center"
+        hidden={state !== "collapsed" || isMobile}
+        side="right"
+        {...tooltip}
+      />
+    </Tooltip>
+  );
+}
+
+function SidebarMenuAction({
+  className,
+  asChild = false,
+  showOnHover = false,
+  parentHover = true,
+  ...props
+}: React.ComponentProps<"button"> & {
+  asChild?: boolean;
+  showOnHover?: boolean;
+  parentHover?: boolean;
+}) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "button";
+
+  return (
+    <Comp
+      className={cn(
+        "absolute top-1.5 right-1 flex aspect-square w-5 items-center justify-center rounded-md p-0 text-sidebar-foreground outline-hidden ring-sidebar-ring transition-transform focus-visible:ring-2 peer-hover/menu-button:text-sidebar-accent-foreground [&>svg]:size-4 [&>svg]:shrink-0",
+        parentHover &&
+          "group-hover/menu-item:bg-accent group-hover/menu-item:text-accent-foreground",
+        !parentHover && "hover:bg-sidebar-accent hover:text-sidebar-accent-foreground",
+        // Increases the hit area of the button on mobile.
+        "after:-inset-2 after:absolute md:after:hidden",
+        "peer-data-[size=sm]/menu-button:top-1",
+        "peer-data-[size=default]/menu-button:top-2",
+        "peer-data-[size=lg]/menu-button:top-2.5",
+        "group-data-[collapsible=icon]:hidden",
+        showOnHover &&
+          "group-focus-within/menu-item:opacity-100 group-hover/menu-item:opacity-100 data-[state=open]:opacity-100 peer-data-[active=true]/menu-button:text-sidebar-accent-foreground md:opacity-0",
+        className,
+      )}
+      data-sidebar="menu-action"
+      data-slot="sidebar-menu-action"
+      {...props}
+    />
+  );
+}
+
+function SidebarMenuBadge({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn(
+        "pointer-events-none absolute right-1 flex h-5 min-w-5 select-none items-center justify-center rounded-md px-1 font-medium text-sidebar-foreground text-xs tabular-nums",
+        "peer-hover/menu-button:text-sidebar-accent-foreground peer-data-[active=true]/menu-button:text-sidebar-accent-foreground",
+        "peer-data-[size=sm]/menu-button:top-1",
+        "peer-data-[size=default]/menu-button:top-1.5",
+        "peer-data-[size=lg]/menu-button:top-2.5",
+        "group-data-[collapsible=icon]:hidden",
+        className,
+      )}
+      data-sidebar="menu-badge"
+      data-slot="sidebar-menu-badge"
+      {...props}
+    />
+  );
+}
+
+function SidebarMenuSkeleton({
+  className,
+  showIcon = false,
+  ...props
+}: React.ComponentProps<"div"> & {
+  showIcon?: boolean;
+}) {
+  // Random width between 50 to 90%.
+  const width = React.useMemo(() => `${Math.floor(Math.random() * 40) + 50}%`, []);
+
+  return (
+    <div
+      className={cn("flex h-8 items-center gap-2 rounded-md px-2", className)}
+      data-sidebar="menu-skeleton"
+      data-slot="sidebar-menu-skeleton"
+      {...props}
+    >
+      {showIcon && <Skeleton className="size-4 rounded-md" data-sidebar="menu-skeleton-icon" />}
+      <Skeleton
+        className="h-4 max-w-(--skeleton-width) flex-1"
+        data-sidebar="menu-skeleton-text"
+        style={
+          {
+            "--skeleton-width": width,
+          } as React.CSSProperties
+        }
+      />
+    </div>
+  );
+}
+
+function SidebarMenuSub({ className, ...props }: React.ComponentProps<"ul">) {
+  return (
+    <ul
+      className={cn(
+        "mx-3.5 flex min-w-0 translate-x-px flex-col gap-1 border-border border-l px-2.5 py-0.5",
+        "group-data-[collapsible=icon]:hidden",
+        className,
+      )}
+      data-sidebar="menu-sub"
+      data-slot="sidebar-menu-sub"
+      {...props}
+    />
+  );
+}
+
+function SidebarMenuSubItem({ className, ...props }: React.ComponentProps<"li">) {
+  return (
+    <li
+      className={cn("group/menu-sub-item relative", className)}
+      data-sidebar="menu-sub-item"
+      data-slot="sidebar-menu-sub-item"
+      {...props}
+    />
+  );
+}
+
+function SidebarMenuSubButton({
+  asChild = false,
+  size = "md",
+  isActive = false,
+  className,
+  ...props
+}: React.ComponentProps<"a"> & {
+  asChild?: boolean;
+  size?: "sm" | "md";
+  isActive?: boolean;
+}) {
+  const Comp: React.ElementType = asChild ? Slot.Root : "a";
+
+  return (
+    <Comp
+      className={cn(
+        "-translate-x-px flex h-7 min-w-0 items-center gap-2 overflow-hidden rounded-md px-2 text-sidebar-foreground outline-hidden ring-sidebar-ring hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:ring-2 active:bg-sidebar-accent active:text-sidebar-accent-foreground disabled:pointer-events-none disabled:opacity-50 aria-disabled:pointer-events-none aria-disabled:opacity-50 [&>span:last-child]:truncate [&>svg]:size-4 [&>svg]:shrink-0 [&>svg]:text-sidebar-accent-foreground",
+        "data-[active=true]:bg-sidebar-accent data-[active=true]:text-sidebar-accent-foreground",
+        size === "sm" && "text-xs",
+        size === "md" && "text-sm",
+        "group-data-[collapsible=icon]:hidden",
+        className,
+      )}
+      data-active={isActive}
+      data-sidebar="menu-sub-button"
+      data-size={size}
+      data-slot="sidebar-menu-sub-button"
+      {...props}
+    />
+  );
+}
+
+export {
+  Sidebar,
+  SidebarContent,
+  SidebarFooter,
+  SidebarGroup,
+  SidebarGroupAction,
+  SidebarGroupContent,
+  SidebarGroupLabel,
+  SidebarHeader,
+  SidebarInput,
+  SidebarInset,
+  SidebarMenu,
+  SidebarMenuAction,
+  SidebarMenuBadge,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarMenuSkeleton,
+  SidebarMenuSub,
+  SidebarMenuSubButton,
+  SidebarMenuSubItem,
+  SidebarProvider,
+  SidebarRail,
+  SidebarSeparator,
+  SidebarTrigger,
+  useSidebar,
+};
diff --git a/packages/ui/components/ui/skeleton.tsx b/packages/ui/components/ui/skeleton.tsx
new file mode 100644
index 000000000..220b0ce33
--- /dev/null
+++ b/packages/ui/components/ui/skeleton.tsx
@@ -0,0 +1,13 @@
+import { cn } from "../../lib/utils";
+
+function Skeleton({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      className={cn("animate-pulse rounded-md bg-accent", className)}
+      data-slot="skeleton"
+      {...props}
+    />
+  );
+}
+
+export { Skeleton };
diff --git a/packages/ui/components/ui/slider.tsx b/packages/ui/components/ui/slider.tsx
new file mode 100644
index 000000000..f4489718a
--- /dev/null
+++ b/packages/ui/components/ui/slider.tsx
@@ -0,0 +1,59 @@
+"use client";
+
+import { Slider as SliderPrimitive } from "radix-ui";
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+
+function Slider({
+  className,
+  defaultValue,
+  value,
+  min = 0,
+  max = 100,
+  ...props
+}: React.ComponentProps<typeof SliderPrimitive.Root>) {
+  const _values = React.useMemo(
+    () => (Array.isArray(value) ? value : Array.isArray(defaultValue) ? defaultValue : [min, max]),
+    [value, defaultValue, min, max],
+  );
+
+  return (
+    <SliderPrimitive.Root
+      className={cn(
+        "relative flex w-full touch-none select-none items-center data-[orientation=vertical]:h-full data-[orientation=vertical]:min-h-44 data-[orientation=vertical]:w-auto data-[orientation=vertical]:flex-col data-[disabled]:opacity-50",
+        className,
+      )}
+      data-slot="slider"
+      defaultValue={defaultValue}
+      max={max}
+      min={min}
+      value={value}
+      {...props}
+    >
+      <SliderPrimitive.Track
+        className={cn(
+          "relative grow overflow-hidden rounded-full bg-muted data-[orientation=horizontal]:h-1.5 data-[orientation=vertical]:h-full data-[orientation=horizontal]:w-full data-[orientation=vertical]:w-1.5",
+        )}
+        data-slot="slider-track"
+      >
+        <SliderPrimitive.Range
+          className={cn(
+            "absolute bg-primary data-[orientation=horizontal]:h-full data-[orientation=vertical]:w-full",
+          )}
+          data-slot="slider-range"
+        />
+      </SliderPrimitive.Track>
+      {Array.from({ length: _values.length }, (_, index) => (
+        <SliderPrimitive.Thumb
+          className="block size-4 shrink-0 rounded-full border border-primary bg-background shadow-sm ring-ring/50 transition-[color,box-shadow] hover:ring-4 focus-visible:outline-hidden focus-visible:ring-4 disabled:pointer-events-none disabled:opacity-50"
+          data-slot="slider-thumb"
+          // biome-ignore lint/suspicious/noArrayIndexKey: shadcn
+          key={index}
+        />
+      ))}
+    </SliderPrimitive.Root>
+  );
+}
+
+export { Slider };
diff --git a/packages/ui/components/ui/sonner.tsx b/packages/ui/components/ui/sonner.tsx
new file mode 100644
index 000000000..e614430a4
--- /dev/null
+++ b/packages/ui/components/ui/sonner.tsx
@@ -0,0 +1,23 @@
+import { useTheme } from "next-themes";
+import { Toaster as Sonner, type ToasterProps } from "sonner";
+
+const Toaster = ({ ...props }: ToasterProps) => {
+  const { theme = "system" } = useTheme();
+
+  return (
+    <Sonner
+      className="toaster group"
+      style={
+        {
+          "--normal-bg": "var(--popover)",
+          "--normal-border": "var(--border)",
+          "--normal-text": "var(--popover-foreground)",
+        } as React.CSSProperties
+      }
+      theme={theme as ToasterProps["theme"]}
+      {...props}
+    />
+  );
+};
+
+export { Toaster };
diff --git a/packages/ui/components/ui/switch.tsx b/packages/ui/components/ui/switch.tsx
new file mode 100644
index 000000000..f8e51dab7
--- /dev/null
+++ b/packages/ui/components/ui/switch.tsx
@@ -0,0 +1,29 @@
+"use client";
+
+import type * as React from "react";
+
+import { Switch as SwitchPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function Switch({ className, ...props }: React.ComponentProps<typeof SwitchPrimitive.Root>) {
+  return (
+    <SwitchPrimitive.Root
+      className={cn(
+        "peer inline-flex h-[1.15rem] w-8 shrink-0 cursor-pointer items-center rounded-full border border-transparent shadow-xs outline-none transition-all focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 data-[state=checked]:bg-primary data-[state=unchecked]:bg-input dark:data-[state=unchecked]:bg-input/80",
+        className,
+      )}
+      data-slot="switch"
+      {...props}
+    >
+      <SwitchPrimitive.Thumb
+        className={cn(
+          "pointer-events-none block size-4 rounded-full bg-background ring-0 transition-transform data-[state=checked]:translate-x-[calc(100%-2px)] data-[state=unchecked]:translate-x-0 dark:data-[state=checked]:bg-success-foreground dark:data-[state=unchecked]:bg-foreground",
+        )}
+        data-slot="switch-thumb"
+      />
+    </SwitchPrimitive.Root>
+  );
+}
+
+export { Switch };
diff --git a/packages/ui/components/ui/table.tsx b/packages/ui/components/ui/table.tsx
new file mode 100644
index 000000000..4825bdfa2
--- /dev/null
+++ b/packages/ui/components/ui/table.tsx
@@ -0,0 +1,102 @@
+import type * as React from "react";
+
+import { cn } from "../../lib/utils";
+
+function Table({ className, ...props }: React.ComponentProps<"table">) {
+  return (
+    <div
+      className="ring-border bg-card relative w-full overflow-hidden rounded-lg ring-1"
+      data-slot="table-container"
+    >
+      <table
+        className={cn("w-full caption-bottom text-sm", className)}
+        data-slot="table"
+        {...props}
+      />
+    </div>
+  );
+}
+
+function TableHeader({ className, ...props }: React.ComponentProps<"thead">) {
+  return (
+    <thead
+      className={cn("bg-card/50 border-border border-b [&_tr]:border-0", className)}
+      data-slot="table-header"
+      {...props}
+    />
+  );
+}
+
+function TableBody({ className, ...props }: React.ComponentProps<"tbody">) {
+  return (
+    <tbody
+      className={cn("[&_tr:last-child]:border-0", className)}
+      data-slot="table-body"
+      {...props}
+    />
+  );
+}
+
+function TableFooter({ className, ...props }: React.ComponentProps<"tfoot">) {
+  return (
+    <tfoot
+      className={cn(
+        "border-border bg-card/50 border-t font-medium [&>tr]:last:border-b-0",
+        className,
+      )}
+      data-slot="table-footer"
+      {...props}
+    />
+  );
+}
+
+function TableRow({ className, ...props }: React.ComponentProps<"tr">) {
+  return (
+    <tr
+      className={cn(
+        "border-border/60 border-b transition-colors hover:bg-muted/40 data-[state=selected]:bg-muted",
+        className,
+      )}
+      data-slot="table-row"
+      {...props}
+    />
+  );
+}
+
+function TableHead({ className, ...props }: React.ComponentProps<"th">) {
+  return (
+    <th
+      className={cn(
+        "h-10 whitespace-nowrap px-4 text-left align-middle font-medium text-muted-foreground [&:has([role=checkbox])]:pr-0 [&>[role=checkbox]]:translate-y-[2px]",
+        className,
+      )}
+      data-slot="table-head"
+      {...props}
+    />
+  );
+}
+
+function TableCell({ className, ...props }: React.ComponentProps<"td">) {
+  return (
+    <td
+      className={cn(
+        "whitespace-nowrap px-4 py-2.5 align-middle [&:has([role=checkbox])]:pr-0 [&>[role=checkbox]]:translate-y-[2px]",
+        className,
+      )}
+      data-slot="table-cell"
+      {...props}
+    />
+  );
+}
+
+function TableCaption({ className, ...props }: React.ComponentProps<"caption">) {
+  return (
+    <caption
+      className={cn("mt-4 text-muted-foreground text-sm", className)}
+      data-slot="table-caption"
+      {...props}
+    />
+  );
+}
+
+export { Table, TableHeader, TableBody, TableFooter, TableHead, TableRow, TableCell, TableCaption };
diff --git a/packages/ui/components/ui/tabs.tsx b/packages/ui/components/ui/tabs.tsx
new file mode 100644
index 000000000..9fc12ca3b
--- /dev/null
+++ b/packages/ui/components/ui/tabs.tsx
@@ -0,0 +1,55 @@
+"use client";
+
+import type * as React from "react";
+
+import { Tabs as TabsPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function Tabs({ className, ...props }: React.ComponentProps<typeof TabsPrimitive.Root>) {
+  return (
+    <TabsPrimitive.Root
+      className={cn("flex flex-col gap-2", className)}
+      data-slot="tabs"
+      {...props}
+    />
+  );
+}
+
+function TabsList({ className, ...props }: React.ComponentProps<typeof TabsPrimitive.List>) {
+  return (
+    <TabsPrimitive.List
+      className={cn(
+        "inline-flex h-9 w-fit items-center justify-center rounded-lg bg-surface-muted p-[3px] text-muted-foreground",
+        className,
+      )}
+      data-slot="tabs-list"
+      {...props}
+    />
+  );
+}
+
+function TabsTrigger({ className, ...props }: React.ComponentProps<typeof TabsPrimitive.Trigger>) {
+  return (
+    <TabsPrimitive.Trigger
+      className={cn(
+        "inline-flex h-[calc(100%-1px)] flex-1 items-center justify-center gap-1.5 whitespace-nowrap rounded-md border border-transparent px-2 py-1 font-medium text-foreground text-sm transition-[color,box-shadow] focus-visible:border-ring focus-visible:outline-1 focus-visible:outline-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:bg-surface data-[state=active]:shadow-sm dark:text-muted-foreground dark:data-[state=active]:border-border dark:data-[state=active]:bg-surface dark:data-[state=active]:text-foreground [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        className,
+      )}
+      data-slot="tabs-trigger"
+      {...props}
+    />
+  );
+}
+
+function TabsContent({ className, ...props }: React.ComponentProps<typeof TabsPrimitive.Content>) {
+  return (
+    <TabsPrimitive.Content
+      className={cn("flex-1 outline-none", className)}
+      data-slot="tabs-content"
+      {...props}
+    />
+  );
+}
+
+export { Tabs, TabsList, TabsTrigger, TabsContent };
diff --git a/packages/ui/components/ui/textarea.tsx b/packages/ui/components/ui/textarea.tsx
new file mode 100644
index 000000000..fb1449af3
--- /dev/null
+++ b/packages/ui/components/ui/textarea.tsx
@@ -0,0 +1,18 @@
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+
+function Textarea({ className, ...props }: React.ComponentProps<"textarea">) {
+  return (
+    <textarea
+      data-slot="textarea"
+      className={cn(
+        "border-input dark:bg-input/30 focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 disabled:bg-input/50 dark:disabled:bg-input/80 rounded-lg border bg-transparent px-2.5 py-2 text-base transition-colors focus-visible:ring-[3px] aria-invalid:ring-[3px] md:text-sm placeholder:text-muted-foreground flex field-sizing-content min-h-16 w-full outline-none disabled:cursor-not-allowed disabled:opacity-50",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { Textarea };
diff --git a/packages/ui/components/ui/toggle-group.tsx b/packages/ui/components/ui/toggle-group.tsx
new file mode 100644
index 000000000..b7ba12b65
--- /dev/null
+++ b/packages/ui/components/ui/toggle-group.tsx
@@ -0,0 +1,144 @@
+"use client";
+
+import { ToggleGroup as ToggleGroupPrimitive } from "radix-ui";
+import type { VariantProps } from "class-variance-authority";
+import * as React from "react";
+
+import { cn } from "../../lib/utils";
+import { toggleVariants } from "./toggle";
+
+const ToggleGroupContext = React.createContext<
+  VariantProps<typeof toggleVariants> & {
+    spacing?: number;
+  }
+>({
+  size: "default",
+  spacing: 0,
+  variant: "default",
+});
+
+function ToggleGroup({
+  className,
+  indicatorClassName,
+  variant,
+  size,
+  spacing = 0,
+  children,
+  ...props
+}: React.ComponentProps<typeof ToggleGroupPrimitive.Root> &
+  VariantProps<typeof toggleVariants> & {
+    spacing?: number;
+    /**
+     * Classes merged into the sliding active indicator — e.g. `bg-primary` to
+     * recolor it or `duration-150` to retime its slide animation.
+     */
+    indicatorClassName?: string;
+  }) {
+  const containerRef = React.useRef<HTMLDivElement>(null);
+  const [indicator, setIndicator] = React.useState<{
+    left: number;
+    width: number;
+  } | null>(null);
+
+  const updateIndicator = React.useCallback(() => {
+    const container = containerRef.current;
+    if (!container) return;
+
+    const activeItem = container.querySelector<HTMLElement>('[data-state="on"]');
+    if (!activeItem) {
+      setIndicator(null);
+      return;
+    }
+
+    const containerRect = container.getBoundingClientRect();
+    const itemRect = activeItem.getBoundingClientRect();
+    const borderWidth = parseFloat(getComputedStyle(container).borderLeftWidth) || 0;
+
+    setIndicator({
+      left: itemRect.left - containerRect.left - borderWidth,
+      width: itemRect.width,
+    });
+  }, []);
+
+  React.useEffect(() => {
+    updateIndicator();
+
+    const container = containerRef.current;
+    if (!container) return;
+
+    const observer = new MutationObserver(updateIndicator);
+    observer.observe(container, {
+      attributes: true,
+      attributeFilter: ["data-state"],
+      subtree: true,
+    });
+
+    return () => observer.disconnect();
+  }, [updateIndicator]);
+
+  return (
+    <ToggleGroupPrimitive.Root
+      ref={containerRef}
+      className={cn(
+        "group/toggle-group relative flex w-fit items-center gap-[--spacing(var(--gap))] rounded-lg",
+        variant === "outline" && "border-input dark:bg-input/30 border bg-transparent shadow-xs",
+        className,
+      )}
+      data-size={size}
+      data-slot="toggle-group"
+      data-spacing={spacing}
+      data-variant={variant}
+      style={{ "--gap": spacing } as React.CSSProperties}
+      {...props}
+    >
+      {indicator && (
+        <div
+          className={cn(
+            "bg-accent absolute top-0 rounded-[calc(var(--radius-lg)-1px)] transition-all duration-200 ease-out",
+            indicatorClassName,
+          )}
+          style={{
+            height: "100%",
+            left: indicator.left,
+            width: indicator.width,
+          }}
+        />
+      )}
+      <ToggleGroupContext.Provider value={{ size, spacing, variant }}>
+        {children}
+      </ToggleGroupContext.Provider>
+    </ToggleGroupPrimitive.Root>
+  );
+}
+
+function ToggleGroupItem({
+  className,
+  children,
+  variant,
+  size,
+  ...props
+}: React.ComponentProps<typeof ToggleGroupPrimitive.Item> & VariantProps<typeof toggleVariants>) {
+  const context = React.useContext(ToggleGroupContext);
+
+  return (
+    <ToggleGroupPrimitive.Item
+      className={cn(
+        toggleVariants({
+          size: context.size || size,
+          variant: context.variant || variant,
+        }),
+        "relative z-10 w-auto min-w-0 shrink-0 rounded-[calc(var(--radius-lg)-1px)] border-none bg-transparent px-3 shadow-none hover:bg-accent dark:hover:bg-input/50 focus:z-20 focus-visible:z-20 data-[state=on]:bg-transparent data-[state=on]:text-accent-foreground",
+        className,
+      )}
+      data-size={context.size || size}
+      data-slot="toggle-group-item"
+      data-spacing={context.spacing}
+      data-variant={context.variant || variant}
+      {...props}
+    >
+      {children}
+    </ToggleGroupPrimitive.Item>
+  );
+}
+
+export { ToggleGroup, ToggleGroupItem };
diff --git a/packages/ui/components/ui/toggle.tsx b/packages/ui/components/ui/toggle.tsx
new file mode 100644
index 000000000..42308536e
--- /dev/null
+++ b/packages/ui/components/ui/toggle.tsx
@@ -0,0 +1,47 @@
+import type * as React from "react";
+
+import { Toggle as TogglePrimitive } from "radix-ui";
+import { type VariantProps, cva } from "class-variance-authority";
+
+import { cn } from "../../lib/utils";
+
+const toggleVariants = cva(
+  "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-lg font-medium text-sm outline-none transition-[color,box-shadow] hover:bg-muted hover:text-muted-foreground focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 data-[state=on]:bg-accent data-[state=on]:text-accent-foreground dark:aria-invalid:ring-destructive/40 [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+  {
+    defaultVariants: {
+      size: "default",
+      variant: "default",
+    },
+    variants: {
+      size: {
+        default: "h-8 min-w-8 px-2",
+        lg: "h-10 min-w-10 px-2.5",
+        sm: "h-7 min-w-7 px-1.5",
+      },
+      variant: {
+        default: "bg-transparent hover:bg-muted",
+        outline:
+          "border border-input bg-transparent shadow-xs hover:bg-accent hover:text-accent-foreground",
+        primary:
+          "bg-transparent hover:bg-muted data-[state=on]:bg-primary data-[state=on]:text-primary-foreground",
+      },
+    },
+  },
+);
+
+function Toggle({
+  className,
+  variant,
+  size,
+  ...props
+}: React.ComponentProps<typeof TogglePrimitive.Root> & VariantProps<typeof toggleVariants>) {
+  return (
+    <TogglePrimitive.Root
+      className={cn(toggleVariants({ className, size, variant }))}
+      data-slot="toggle"
+      {...props}
+    />
+  );
+}
+
+export { Toggle, toggleVariants };
diff --git a/packages/ui/components/ui/tooltip.tsx b/packages/ui/components/ui/tooltip.tsx
new file mode 100644
index 000000000..5d1fb6eed
--- /dev/null
+++ b/packages/ui/components/ui/tooltip.tsx
@@ -0,0 +1,139 @@
+import { Tooltip as TooltipPrimitive } from "@base-ui/react/tooltip";
+import { type ComponentProps, isValidElement, type ReactElement, type ReactNode } from "react";
+
+import { cn } from "../../lib/utils";
+
+const TooltipCreateHandle = TooltipPrimitive.createHandle;
+
+const TooltipRoot = TooltipPrimitive.Root;
+
+type TooltipProviderProps = ComponentProps<typeof TooltipPrimitive.Provider> & {
+  /** Backwards-compat alias for `delay` (matches the Radix `TooltipProvider` prop). */
+  delayDuration?: number;
+};
+
+/**
+ * Wraps Base UI's `TooltipProvider` to default the open delay to `0` (matching
+ * the previous Radix-based behavior) and accept the legacy `delayDuration` prop.
+ */
+function TooltipProvider({ delay, delayDuration, ...props }: TooltipProviderProps) {
+  return <TooltipPrimitive.Provider delay={delay ?? delayDuration ?? 0} {...props} />;
+}
+
+/**
+ * Tooltip root. Wraps children with a `TooltipProvider` so isolated tooltips
+ * work without an explicit root provider. When many tooltips share a parent,
+ * mount a `TooltipProvider` higher in the tree and use `TooltipRoot` directly.
+ */
+function Tooltip(props: ComponentProps<typeof TooltipPrimitive.Root>) {
+  return (
+    <TooltipProvider>
+      <TooltipPrimitive.Root data-slot="tooltip" {...props} />
+    </TooltipProvider>
+  );
+}
+
+type TooltipTriggerProps = ComponentProps<typeof TooltipPrimitive.Trigger> & {
+  /** Backwards-compat alias for `render` — composes the trigger with its child. */
+  asChild?: boolean;
+};
+
+function TooltipTrigger({ asChild, render, children, ...props }: TooltipTriggerProps) {
+  if (asChild && isValidElement(children)) {
+    return (
+      <TooltipPrimitive.Trigger
+        data-slot="tooltip-trigger"
+        render={children as ReactElement<Record<string, unknown>>}
+        {...props}
+      />
+    );
+  }
+  return (
+    <TooltipPrimitive.Trigger data-slot="tooltip-trigger" render={render} {...props}>
+      {children}
+    </TooltipPrimitive.Trigger>
+  );
+}
+
+type TooltipPopupProps = TooltipPrimitive.Popup.Props & {
+  align?: TooltipPrimitive.Positioner.Props["align"];
+  side?: TooltipPrimitive.Positioner.Props["side"];
+  sideOffset?: TooltipPrimitive.Positioner.Props["sideOffset"];
+  anchor?: TooltipPrimitive.Positioner.Props["anchor"];
+};
+
+function TooltipPopup({
+  className,
+  align = "center",
+  sideOffset = 4,
+  side = "top",
+  anchor,
+  children,
+  ...props
+}: TooltipPopupProps) {
+  return (
+    <TooltipPrimitive.Portal>
+      <TooltipPrimitive.Positioner
+        align={align}
+        anchor={anchor}
+        className="z-50 h-(--positioner-height) w-(--positioner-width) max-w-(--available-width) transition-[top,left,right,bottom,transform] data-instant:transition-none"
+        data-slot="tooltip-positioner"
+        side={side}
+        sideOffset={sideOffset}
+      >
+        <TooltipPrimitive.Popup
+          className={cn(
+            "relative flex h-(--popup-height,auto) w-(--popup-width,auto) origin-(--transform-origin) text-balance rounded-md border bg-popover not-dark:bg-clip-padding text-popover-foreground text-xs shadow-md/5 transition-[width,height,scale,opacity] before:pointer-events-none before:absolute before:inset-0 before:rounded-[calc(var(--radius-md)-1px)] before:shadow-[0_1px_--theme(--color-black/4%)] data-ending-style:scale-98 data-starting-style:scale-98 data-ending-style:opacity-0 data-starting-style:opacity-0 data-instant:duration-0 dark:before:shadow-[0_-1px_--theme(--color-white/6%)]",
+            className,
+          )}
+          data-slot="tooltip-popup"
+          {...props}
+        >
+          <TooltipPrimitive.Viewport
+            className="relative size-full overflow-clip px-(--viewport-inline-padding) py-1 [--viewport-inline-padding:--spacing(2)] data-instant:transition-none **:data-current:data-ending-style:opacity-0 **:data-current:data-starting-style:opacity-0 **:data-previous:data-ending-style:opacity-0 **:data-previous:data-starting-style:opacity-0 **:data-current:w-[calc(var(--popup-width)-2*var(--viewport-inline-padding)-2px)] **:data-previous:w-[calc(var(--popup-width)-2*var(--viewport-inline-padding)-2px)] **:data-previous:truncate **:data-current:opacity-100 **:data-previous:opacity-100 **:data-current:transition-opacity **:data-previous:transition-opacity"
+            data-slot="tooltip-viewport"
+          >
+            {children}
+          </TooltipPrimitive.Viewport>
+        </TooltipPrimitive.Popup>
+      </TooltipPrimitive.Positioner>
+    </TooltipPrimitive.Portal>
+  );
+}
+
+/**
+ * Backwards-compatible alias for {@link TooltipPopup}. New code should prefer
+ * `TooltipPopup` to match the upstream Base UI naming.
+ */
+const TooltipContent = TooltipPopup;
+
+/**
+ * Convenience wrapper for the common pattern of tooltipping an icon button.
+ * Internally composes `Tooltip` + `TooltipTrigger` + `TooltipPopup`.
+ */
+function IconButtonTooltip({
+  children,
+  label,
+  ...popupProps
+}: {
+  children: ReactElement<Record<string, unknown>>;
+  label: ReactNode;
+} & Omit<TooltipPopupProps, "children">) {
+  return (
+    <Tooltip>
+      <TooltipTrigger render={children} />
+      <TooltipPopup {...popupProps}>{label}</TooltipPopup>
+    </Tooltip>
+  );
+}
+
+export {
+  IconButtonTooltip,
+  Tooltip,
+  TooltipContent,
+  TooltipCreateHandle,
+  TooltipPopup,
+  TooltipProvider,
+  TooltipRoot,
+  TooltipTrigger,
+};
diff --git a/packages/ui/components/ui/underline-tabs.tsx b/packages/ui/components/ui/underline-tabs.tsx
new file mode 100644
index 000000000..2caae8508
--- /dev/null
+++ b/packages/ui/components/ui/underline-tabs.tsx
@@ -0,0 +1,61 @@
+"use client";
+
+import type * as React from "react";
+
+import { Tabs as TabsPrimitive } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+
+function UnderlineTabs({ className, ...props }: React.ComponentProps<typeof TabsPrimitive.Root>) {
+  return <TabsPrimitive.Root className={cn("flex w-full flex-col gap-2", className)} {...props} />;
+}
+
+function UnderlineTabsList({
+  className,
+  ...props
+}: React.ComponentProps<typeof TabsPrimitive.List>) {
+  return (
+    <TabsPrimitive.List
+      className={cn(
+        "inline-flex w-full items-center justify-start space-x-4 rounded-none border-b bg-background p-0",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function UnderlineTabsTrigger({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof TabsPrimitive.Trigger>) {
+  return (
+    <TabsPrimitive.Trigger
+      className={cn(
+        "inline-flex cursor-pointer items-center justify-center whitespace-nowrap rounded-none border-transparent border-b-2 bg-background py-3 font-medium text-muted-foreground text-sm ring-offset-background transition-all focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:border-accent-foreground data-[state=active]:text-foreground data-[state=active]:shadow-none",
+        className,
+      )}
+      {...props}
+    >
+      {children}
+    </TabsPrimitive.Trigger>
+  );
+}
+
+function UnderlineTabsContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof TabsPrimitive.Content>) {
+  return (
+    <TabsPrimitive.Content
+      className={cn(
+        "mt-2 ring-offset-background focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { UnderlineTabs, UnderlineTabsList, UnderlineTabsTrigger, UnderlineTabsContent };
diff --git a/packages/ui/hooks/use-confirmation-dialog.tsx b/packages/ui/hooks/use-confirmation-dialog.tsx
new file mode 100644
index 000000000..f43de66d3
--- /dev/null
+++ b/packages/ui/hooks/use-confirmation-dialog.tsx
@@ -0,0 +1,103 @@
+"use client";
+import { useCallback, useState } from "react";
+
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+} from "../components/ui/alert-dialog";
+import { Input } from "../components/ui/input";
+import { Label } from "../components/ui/label";
+
+export interface ConfirmDialogConfig {
+  title: string;
+  description: string;
+  confirmInput?: string;
+  confirmText?: string;
+  cancelText?: string;
+  variant?: "default" | "destructive";
+}
+// Custom hook to manage the confirmation dialog
+export function useConfirmDialog() {
+  const [isOpen, setIsOpen] = useState(false);
+  const [resolveCallback, setResolveCallback] = useState<((resolve: boolean) => void) | null>(null);
+  const [dialogConfig, setDialogConfig] = useState<ConfirmDialogConfig>({
+    cancelText: "Cancel",
+    confirmInput: undefined,
+    confirmText: "Confirm",
+    description: "",
+    title: "",
+  });
+
+  const openDialog = useCallback((config: ConfirmDialogConfig) => {
+    setIsOpen(true);
+    setDialogConfig(config);
+    return new Promise<boolean>((resolve) => {
+      setResolveCallback(() => resolve);
+    });
+  }, []);
+
+  const handleConfirm = useCallback(() => {
+    resolveCallback?.(true);
+    setIsOpen(false);
+  }, [resolveCallback]);
+
+  const handleCancel = useCallback(() => {
+    setIsOpen(false);
+    resolveCallback?.(false);
+  }, [resolveCallback]);
+
+  const ConfirmationDialog = useCallback(() => {
+    // biome-ignore lint/correctness/useHookAtTopLevel: Nested component
+    const [confirmInput, setConfirmInput] = useState<string | undefined>();
+    return (
+      <AlertDialog open={isOpen}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>{dialogConfig.title}</AlertDialogTitle>
+            <AlertDialogDescription>{dialogConfig.description}</AlertDialogDescription>
+          </AlertDialogHeader>
+          {dialogConfig.confirmInput && (
+            <div>
+              <p className="mb-4">
+                Please type <code className="mx-2 bg-slate-200">{dialogConfig.confirmInput}</code>{" "}
+                to confirm.
+              </p>
+              <Label className="sr-only" htmlFor="confirm-input">
+                Confirm input
+              </Label>
+              <Input
+                id="confirm-input"
+                onChange={(e) => setConfirmInput(e.currentTarget.value)}
+                placeholder={dialogConfig.confirmInput}
+                type="text"
+                value={confirmInput}
+              />
+            </div>
+          )}
+          <AlertDialogFooter>
+            <AlertDialogCancel onClick={handleCancel}>
+              {dialogConfig.cancelText ?? "Cancel"}
+            </AlertDialogCancel>
+            <AlertDialogAction
+              disabled={
+                (!!dialogConfig.confirmInput && confirmInput !== dialogConfig.confirmInput) ?? false
+              }
+              onClick={handleConfirm}
+              variant={dialogConfig.variant}
+            >
+              {dialogConfig.confirmText ?? "Confirm"}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    );
+  }, [isOpen, dialogConfig, handleConfirm, handleCancel]);
+
+  return { ConfirmationDialog, openDialog };
+}
diff --git a/packages/ui/hooks/use-mobile.ts b/packages/ui/hooks/use-mobile.ts
new file mode 100644
index 000000000..06211eaa0
--- /dev/null
+++ b/packages/ui/hooks/use-mobile.ts
@@ -0,0 +1,21 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+const MOBILE_BREAKPOINT = 768;
+
+export function useIsMobile() {
+  const [isMobile, setIsMobile] = useState<boolean | undefined>();
+
+  useEffect(() => {
+    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);
+    const onChange = () => {
+      setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
+    };
+    mql.addEventListener("change", onChange);
+    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
+    return () => mql.removeEventListener("change", onChange);
+  }, []);
+
+  return !!isMobile;
+}
diff --git a/packages/ui/index.ts b/packages/ui/index.ts
new file mode 100644
index 000000000..83459f79c
--- /dev/null
+++ b/packages/ui/index.ts
@@ -0,0 +1,68 @@
+export * from "./components/copy-text";
+export * from "./components/data-table-skeleton";
+export * from "./components/error-card";
+export * from "./components/gradient-avatar";
+export * from "./components/info-tooltip";
+export * from "./components/logo";
+export * from "./components/settings-card-skeleton";
+export * from "./components/spinner";
+export * from "./components/theme-provider";
+export * from "./components/theme-provider-tanstack";
+export * from "./components/theme-toggle";
+export * from "./components/page";
+export * from "./components/ui/accordion";
+export * from "./components/ui/alert";
+export * from "./components/ui/alert-dialog";
+export * from "./components/ui/attachment";
+export * from "./components/ui/avatar";
+export * from "./components/ui/badge";
+export * from "./components/ui/breadcrumb";
+export * from "./components/ui/bubble";
+export * from "./components/ui/button";
+export * from "./components/ui/calendar";
+export * from "./components/ui/card";
+export * from "./components/ui/carousel";
+export * from "./components/ui/chart";
+export * from "./components/ui/checkbox";
+export * from "./components/ui/collapsible";
+export * from "./components/ui/combobox";
+export * from "./components/ui/command";
+export * from "./components/ui/context-menu";
+export * from "./components/ui/dialog";
+export * from "./components/ui/drawer";
+export * from "./components/ui/dropdown-menu";
+export * from "./components/ui/dropzone";
+export * from "./components/ui/form";
+export * from "./components/ui/hover-card";
+export * from "./components/ui/input";
+export * from "./components/ui/input-otp";
+export * from "./components/ui/label";
+export * from "./components/ui/marker";
+export * from "./components/ui/menubar";
+export * from "./components/ui/message";
+export * from "./components/ui/message-scroller";
+export * from "./components/ui/navigation-menu";
+export * from "./components/ui/pagination";
+export * from "./components/ui/popover";
+export * from "./components/ui/progress";
+export * from "./components/ui/radio-group";
+export * from "./components/ui/resizable";
+export * from "./components/ui/scroll-area";
+export * from "./components/ui/select";
+export * from "./components/ui/separator";
+export * from "./components/ui/sheet";
+export * from "./components/ui/sidebar";
+export * from "./components/ui/skeleton";
+export * from "./components/ui/slider";
+export * from "./components/ui/sonner";
+export * from "./components/ui/switch";
+export * from "./components/ui/table";
+export * from "./components/ui/tabs";
+export * from "./components/ui/textarea";
+export * from "./components/ui/toggle";
+export * from "./components/ui/toggle-group";
+export * from "./components/ui/tooltip";
+export * from "./components/ui/underline-tabs";
+export * from "./hooks/use-confirmation-dialog";
+export * from "./hooks/use-mobile";
+export * from "./lib/utils";
diff --git a/packages/ui/lib/utils.ts b/packages/ui/lib/utils.ts
new file mode 100644
index 000000000..365058ceb
--- /dev/null
+++ b/packages/ui/lib/utils.ts
@@ -0,0 +1,6 @@
+import { type ClassValue, clsx } from "clsx";
+import { twMerge } from "tailwind-merge";
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs));
+}
diff --git a/packages/ui/package.json b/packages/ui/package.json
new file mode 100644
index 000000000..36a8a2d6c
--- /dev/null
+++ b/packages/ui/package.json
@@ -0,0 +1,113 @@
+{
+  "name": "@voidhash/ui",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/ui"
+  },
+  "type": "module",
+  "main": "./index.ts",
+  "exports": {
+    ".": "./index.ts",
+    "./styles/brand-theme.css": "./styles/brand-theme.css",
+    "./utils": "./lib/utils.ts",
+    "./alert": "./components/ui/alert.tsx",
+    "./button": "./components/ui/button.tsx",
+    "./card": "./components/ui/card.tsx",
+    "./gradient-avatar": "./components/gradient-avatar.tsx",
+    "./input": "./components/ui/input.tsx",
+    "./input-group": "./components/ui/input-group.tsx",
+    "./label": "./components/ui/label.tsx",
+    "./logo": "./components/logo.tsx",
+    "./sonner": "./components/ui/sonner.tsx",
+    "./accordion": "./components/ui/accordion.tsx",
+    "./alert-dialog": "./components/ui/alert-dialog.tsx",
+    "./avatar": "./components/ui/avatar.tsx",
+    "./badge": "./components/ui/badge.tsx",
+    "./breadcrumb": "./components/ui/breadcrumb.tsx",
+    "./calendar": "./components/ui/calendar.tsx",
+    "./carousel": "./components/ui/carousel.tsx",
+    "./collapsible": "./components/ui/collapsible.tsx",
+    "./command": "./components/ui/command.tsx",
+    "./context-menu": "./components/ui/context-menu.tsx",
+    "./dialog": "./components/ui/dialog.tsx",
+    "./drawer": "./components/ui/drawer.tsx",
+    "./dropdown-menu": "./components/ui/dropdown-menu.tsx",
+    "./form": "./components/ui/form.tsx",
+    "./hover-card": "./components/ui/hover-card.tsx",
+    "./chart": "./components/ui/chart.tsx",
+    "./checkbox": "./components/ui/checkbox.tsx",
+    "./input-otp": "./components/ui/input-otp.tsx",
+    "./menubar": "./components/ui/menubar.tsx",
+    "./attachment": "./components/ui/attachment.tsx",
+    "./bubble": "./components/ui/bubble.tsx",
+    "./marker": "./components/ui/marker.tsx",
+    "./message": "./components/ui/message.tsx",
+    "./message-scroller": "./components/ui/message-scroller.tsx",
+    "./navigation-menu": "./components/ui/navigation-menu.tsx",
+    "./pagination": "./components/ui/pagination.tsx",
+    "./popover": "./components/ui/popover.tsx",
+    "./progress": "./components/ui/progress.tsx",
+    "./radio-group": "./components/ui/radio-group.tsx",
+    "./resizable": "./components/ui/resizable.tsx",
+    "./scroll-area": "./components/ui/scroll-area.tsx",
+    "./select": "./components/ui/select.tsx",
+    "./separator": "./components/ui/separator.tsx",
+    "./sheet": "./components/ui/sheet.tsx",
+    "./sidebar": "./components/ui/sidebar.tsx",
+    "./skeleton": "./components/ui/skeleton.tsx",
+    "./slider": "./components/ui/slider.tsx",
+    "./switch": "./components/ui/switch.tsx",
+    "./table": "./components/ui/table.tsx",
+    "./tabs": "./components/ui/tabs.tsx",
+    "./textarea": "./components/ui/textarea.tsx",
+    "./toggle-group": "./components/ui/toggle-group.tsx",
+    "./toggle": "./components/ui/toggle.tsx",
+    "./tooltip": "./components/ui/tooltip.tsx",
+    "./copy-text": "./components/copy-text.tsx",
+    "./error-card": "./components/error-card.tsx",
+    "./theme-toggle": "./components/theme-toggle.tsx",
+    "./page": "./components/page.tsx"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@base-ui/react": "^1.1.0",
+    "@hookform/resolvers": "^5.1.1",
+    "@shadcn/react": "^0.2.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "cmdk": "1.1.1",
+    "color-hash": "^2.0.2",
+    "date-fns": "^4.1.0",
+    "embla-carousel-react": "^8.5.2",
+    "input-otp": "^1.4.2",
+    "lucide-react": "^0.555.0",
+    "next-themes": "^0.4.6",
+    "radix-ui": "^1.4.2",
+    "react-day-picker": "8.10.1",
+    "react-hook-form": "^7.60.0",
+    "react-resizable-panels": "^3.0.3",
+    "recharts": "^2.15.4",
+    "sonner": "^2.0.1",
+    "tailwind-merge": "^3.0.2",
+    "tw-animate-css": "^1.2.4",
+    "use-debounce": "^10.0.4",
+    "vaul": "^1.1.2",
+    "zod": "^4.1.13"
+  },
+  "devDependencies": {
+    "@types/react": "^19.1.5",
+    "@types/react-dom": "^19.1.5",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "6.0.3"
+  },
+  "peerDependencies": {
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0"
+  }
+}
diff --git a/packages/ui/styles/brand-theme.css b/packages/ui/styles/brand-theme.css
new file mode 100644
index 000000000..c43762d05
--- /dev/null
+++ b/packages/ui/styles/brand-theme.css
@@ -0,0 +1,892 @@
+:root {
+  --blue-ribbon-50: oklch(97.295% 0.015 235.373);
+  --blue-ribbon-100: oklch(93.472% 0.0345 241.45);
+  --blue-ribbon-200: oklch(89.067% 0.0616 236.65);
+  --blue-ribbon-300: oklch(82.718% 0.1007 235.68);
+  --blue-ribbon-400: oklch(74.721% 0.1439 241.184);
+  --blue-ribbon-500: oklch(65.85% 0.1869 252.234);
+  --blue-ribbon-600: oklch(58.909% 0.2254 259.018);
+  --blue-ribbon-700: oklch(54.879% 0.2498 261.783);
+  --blue-ribbon-800: oklch(45.539% 0.2033 262.222);
+  --blue-ribbon-900: oklch(40.363% 0.1564 260.949);
+  --blue-ribbon-950: oklch(29.273% 0.1003 262.384);
+  --electric-violet-50: oklch(96.258% 0.0204 298.197);
+  --electric-violet-100: oklch(93.325% 0.0371 299.201);
+  --electric-violet-200: oklch(87.505% 0.0696 296.852);
+  --electric-violet-300: oklch(78.105% 0.1268 296.798);
+  --electric-violet-400: oklch(66.864% 0.2003 296.397);
+  --electric-violet-500: oklch(57.122% 0.2646 294.401);
+  --electric-violet-600: oklch(53.469% 0.2881 293.207);
+  --electric-violet-700: oklch(49.784% 0.2798 291.125);
+  --electric-violet-800: oklch(45.362% 0.2564 289.89);
+  --electric-violet-900: oklch(38.586% 0.22 287.36);
+  --electric-violet-950: oklch(29.201% 0.1668 288.472);
+  --fuchsia-pink-50: oklch(97.344% 0.0207 320.986);
+  --fuchsia-pink-100: oklch(94.452% 0.0428 319.968);
+  --fuchsia-pink-200: oklch(88.804% 0.0905 320.891);
+  --fuchsia-pink-300: oklch(81.437% 0.163 322.909);
+  --fuchsia-pink-400: oklch(73.07% 0.2497 323.525);
+  --fuchsia-pink-500: oklch(66.846% 0.3006 321.513);
+  --fuchsia-pink-600: oklch(61.604% 0.2973 317.917);
+  --fuchsia-pink-700: oklch(54.183% 0.261 319.247);
+  --fuchsia-pink-800: oklch(47.114% 0.2248 320.15);
+  --fuchsia-pink-900: oklch(41.199% 0.1895 321.625);
+  --fuchsia-pink-950: oklch(31.354% 0.1488 322.091);
+  --radical-red-50: oklch(96.503% 0.0174 13.094);
+  --radical-red-100: oklch(93.3% 0.0344 11.139);
+  --radical-red-200: oklch(87.959% 0.0659 7.939);
+  --radical-red-300: oklch(78.869% 0.1255 10.448);
+  --radical-red-400: oklch(69.746% 0.1966 13.934);
+  --radical-red-500: oklch(64.406% 0.2433 18.763);
+  --radical-red-600: oklch(60.438% 0.2426 19.755);
+  --radical-red-700: oklch(55.641% 0.2233 19.56);
+  --radical-red-800: oklch(48.857% 0.1955 16.749);
+  --radical-red-900: oklch(43.516% 0.1728 14.472);
+  --radical-red-950: oklch(29.163% 0.1166 10.944);
+  --blaze-orange-50: oklch(98.13% 0.0175 81.333);
+  --blaze-orange-100: oklch(95.955% 0.0412 83.876);
+  --blaze-orange-200: oklch(91.099% 0.0804 78.721);
+  --blaze-orange-300: oklch(85.257% 0.124 73.941);
+  --blaze-orange-400: oklch(78.041% 0.1619 62.62);
+  --blaze-orange-500: oklch(73.057% 0.1855 52.095);
+  --blaze-orange-600: oklch(69.579% 0.2043 43.491);
+  --blaze-orange-700: oklch(57.927% 0.1781 40.787);
+  --blaze-orange-800: oklch(48.781% 0.1471 39.845);
+  --blaze-orange-900: oklch(42.404% 0.1208 41.255);
+  --blaze-orange-950: oklch(27.444% 0.079 39.939);
+  --amber-50: oklch(99.445% 0.0274 106.888);
+  --amber-100: oklch(97.81% 0.0692 104.075);
+  --amber-200: oklch(96.14% 0.1372 105.59);
+  --amber-300: oklch(93.314% 0.1762 102.995);
+  --amber-400: oklch(90.311% 0.183 98.368);
+  --amber-500: oklch(84.029% 0.1724 84.076);
+  --amber-600: oklch(72.591% 0.1559 71.424);
+  --amber-700: oklch(59.956% 0.1401 59.954);
+  --amber-800: oklch(50.862% 0.1206 56.393);
+  --amber-900: oklch(44.243% 0.1013 56.843);
+  --amber-950: oklch(29.902% 0.0727 56.532);
+  --pistachio-50: oklch(99.168% 0.0339 110.583);
+  --pistachio-100: oklch(98.034% 0.0724 114.355);
+  --pistachio-200: oklch(96.475% 0.1317 116.393);
+  --pistachio-300: oklch(94.487% 0.1888 119.27);
+  --pistachio-400: oklch(90.909% 0.2114 121.412);
+  --pistachio-500: oklch(83.15% 0.2044 123.551);
+  --pistachio-600: oklch(73.931% 0.1851 124.693);
+  --pistachio-700: oklch(57.116% 0.1414 124.883);
+  --pistachio-800: oklch(48.406% 0.1156 124.206);
+  --pistachio-900: oklch(42.799% 0.0987 124.914);
+  --pistachio-950: oklch(29.285% 0.0732 125.867);
+  --zinc-50: oklch(98.51% 0 89.876);
+  --zinc-100: oklch(96.743% 0 286.375);
+  --zinc-200: oklch(91.973% 0 286.32);
+  --zinc-300: oklch(87.111% 0 286.286);
+  --zinc-400: oklch(70.566% 0 286.025);
+  --zinc-500: oklch(55.237% 0 285.834);
+  --zinc-600: oklch(44.263% 0 285.647);
+  --zinc-700: oklch(37.072% 0 285.719);
+  --zinc-800: oklch(27.394% 0 286.033);
+  --zinc-900: oklch(21.033% 0 285.885);
+  --zinc-950: oklch(17.077% 0 285.823);
+  --black: oklch(0% 0 0);
+  --white: oklch(100% 0 0);
+  --background: var(--white);
+  --foreground: var(--zinc-900);
+  --surface: oklch(100% 0 0);
+  --surface-muted: var(--zinc-200);
+  --card: var(--white);
+  --card-foreground: var(--zinc-950);
+  --panel: var(--card);
+  --popover: oklch(100% 0 0);
+  --popover-foreground: var(--zinc-950);
+  --primary: var(--blue-ribbon-600);
+  --primary-foreground: oklch(100% 0 0);
+  --secondary: var(--zinc-100);
+  --secondary-foreground: var(--zinc-900);
+  --muted: var(--zinc-100);
+  --muted-foreground: var(--zinc-500);
+  --accent: var(--white);
+  --accent-foreground: var(--blue-ribbon-950);
+  --destructive: var(--radical-red-600);
+  --destructive-foreground: oklch(100% 0 0);
+  --success: var(--pistachio-600);
+  --success-foreground: var(--zinc-950);
+  --border: var(--zinc-200);
+  --input: var(--zinc-200);
+  --ring: var(--blue-ribbon-500);
+  --chart-1: var(--blue-ribbon-600);
+  --chart-2: var(--electric-violet-600);
+  --chart-3: var(--fuchsia-pink-600);
+  --chart-4: var(--amber-500);
+  --chart-5: var(--pistachio-500);
+  --radius: 0.625rem;
+  --sidebar: var(--zinc-100);
+  --sidebar-foreground: var(--zinc-950);
+  --sidebar-primary: var(--zinc-600);
+  --sidebar-primary-foreground: oklch(100% 0 0);
+  --sidebar-accent: var(--zinc-200);
+  --sidebar-accent-foreground: var(--zinc-950);
+  --sidebar-border: var(--zinc-200);
+  --sidebar-ring: var(--blue-ribbon-500);
+}
+
+.dark {
+  --background: var(--zinc-950);
+  --foreground: var(--zinc-50);
+  --surface: var(--zinc-900);
+  --surface-muted: var(--zinc-800);
+  --card: var(--zinc-900);
+  --card-foreground: var(--zinc-50);
+  --panel: #141414;
+  --popover: var(--zinc-950);
+  --popover-foreground: var(--zinc-50);
+  --primary: var(--blue-ribbon-600);
+  --primary-foreground: oklch(100% 0 0);
+  --secondary: var(--zinc-800);
+  --secondary-foreground: var(--zinc-50);
+  --muted: var(--zinc-800);
+  --muted-foreground: var(--zinc-400);
+  --accent: var(--zinc-800);
+  --accent-foreground: var(--zinc-50);
+  --destructive: var(--radical-red-500);
+  --destructive-foreground: oklch(100% 0 0);
+  --success: var(--pistachio-600);
+  --success-foreground: var(--zinc-950);
+  --border: var(--zinc-800);
+  --input: var(--zinc-800);
+  --ring: var(--blue-ribbon-500);
+  --chart-1: var(--blue-ribbon-600);
+  --chart-2: var(--electric-violet-600);
+  --chart-3: var(--fuchsia-pink-600);
+  --chart-4: var(--amber-500);
+  --chart-5: var(--pistachio-600);
+  --sidebar: var(--black);
+  --sidebar-foreground: var(--zinc-50);
+  --sidebar-primary: var(--zinc-500);
+  --sidebar-primary-foreground: oklch(100% 0 0);
+  --sidebar-accent: var(--zinc-900);
+  --sidebar-accent-foreground: var(--zinc-50);
+  --sidebar-border: var(--zinc-800);
+  --sidebar-ring: var(--blue-ribbon-500);
+}
+
+@theme inline {
+  --font-sans: "Geist Variable", sans-serif;
+  --font-mono: "Geist Mono Variable", monospace;
+  --color-blue-ribbon-50: var(--blue-ribbon-50);
+  --color-blue-ribbon-100: var(--blue-ribbon-100);
+  --color-blue-ribbon-200: var(--blue-ribbon-200);
+  --color-blue-ribbon-300: var(--blue-ribbon-300);
+  --color-blue-ribbon-400: var(--blue-ribbon-400);
+  --color-blue-ribbon-500: var(--blue-ribbon-500);
+  --color-blue-ribbon-600: var(--blue-ribbon-600);
+  --color-blue-ribbon-700: var(--blue-ribbon-700);
+  --color-blue-ribbon-800: var(--blue-ribbon-800);
+  --color-blue-ribbon-900: var(--blue-ribbon-900);
+  --color-blue-ribbon-950: var(--blue-ribbon-950);
+  --color-electric-violet-50: var(--electric-violet-50);
+  --color-electric-violet-100: var(--electric-violet-100);
+  --color-electric-violet-200: var(--electric-violet-200);
+  --color-electric-violet-300: var(--electric-violet-300);
+  --color-electric-violet-400: var(--electric-violet-400);
+  --color-electric-violet-500: var(--electric-violet-500);
+  --color-electric-violet-600: var(--electric-violet-600);
+  --color-electric-violet-700: var(--electric-violet-700);
+  --color-electric-violet-800: var(--electric-violet-800);
+  --color-electric-violet-900: var(--electric-violet-900);
+  --color-electric-violet-950: var(--electric-violet-950);
+  --color-fuchsia-pink-50: var(--fuchsia-pink-50);
+  --color-fuchsia-pink-100: var(--fuchsia-pink-100);
+  --color-fuchsia-pink-200: var(--fuchsia-pink-200);
+  --color-fuchsia-pink-300: var(--fuchsia-pink-300);
+  --color-fuchsia-pink-400: var(--fuchsia-pink-400);
+  --color-fuchsia-pink-500: var(--fuchsia-pink-500);
+  --color-fuchsia-pink-600: var(--fuchsia-pink-600);
+  --color-fuchsia-pink-700: var(--fuchsia-pink-700);
+  --color-fuchsia-pink-800: var(--fuchsia-pink-800);
+  --color-fuchsia-pink-900: var(--fuchsia-pink-900);
+  --color-fuchsia-pink-950: var(--fuchsia-pink-950);
+  --color-radical-red-50: var(--radical-red-50);
+  --color-radical-red-100: var(--radical-red-100);
+  --color-radical-red-200: var(--radical-red-200);
+  --color-radical-red-300: var(--radical-red-300);
+  --color-radical-red-400: var(--radical-red-400);
+  --color-radical-red-500: var(--radical-red-500);
+  --color-radical-red-600: var(--radical-red-600);
+  --color-radical-red-700: var(--radical-red-700);
+  --color-radical-red-800: var(--radical-red-800);
+  --color-radical-red-900: var(--radical-red-900);
+  --color-radical-red-950: var(--radical-red-950);
+  --color-blaze-orange-50: var(--blaze-orange-50);
+  --color-blaze-orange-100: var(--blaze-orange-100);
+  --color-blaze-orange-200: var(--blaze-orange-200);
+  --color-blaze-orange-300: var(--blaze-orange-300);
+  --color-blaze-orange-400: var(--blaze-orange-400);
+  --color-blaze-orange-500: var(--blaze-orange-500);
+  --color-blaze-orange-600: var(--blaze-orange-600);
+  --color-blaze-orange-700: var(--blaze-orange-700);
+  --color-blaze-orange-800: var(--blaze-orange-800);
+  --color-blaze-orange-900: var(--blaze-orange-900);
+  --color-blaze-orange-950: var(--blaze-orange-950);
+  --color-amber-50: var(--amber-50);
+  --color-amber-100: var(--amber-100);
+  --color-amber-200: var(--amber-200);
+  --color-amber-300: var(--amber-300);
+  --color-amber-400: var(--amber-400);
+  --color-amber-500: var(--amber-500);
+  --color-amber-600: var(--amber-600);
+  --color-amber-700: var(--amber-700);
+  --color-amber-800: var(--amber-800);
+  --color-amber-900: var(--amber-900);
+  --color-amber-950: var(--amber-950);
+  --color-pistachio-50: var(--pistachio-50);
+  --color-pistachio-100: var(--pistachio-100);
+  --color-pistachio-200: var(--pistachio-200);
+  --color-pistachio-300: var(--pistachio-300);
+  --color-pistachio-400: var(--pistachio-400);
+  --color-pistachio-500: var(--pistachio-500);
+  --color-pistachio-600: var(--pistachio-600);
+  --color-pistachio-700: var(--pistachio-700);
+  --color-pistachio-800: var(--pistachio-800);
+  --color-pistachio-900: var(--pistachio-900);
+  --color-pistachio-950: var(--pistachio-950);
+  --color-zinc-50: var(--zinc-50);
+  --color-zinc-100: var(--zinc-100);
+  --color-zinc-200: var(--zinc-200);
+  --color-zinc-300: var(--zinc-300);
+  --color-zinc-400: var(--zinc-400);
+  --color-zinc-500: var(--zinc-500);
+  --color-zinc-600: var(--zinc-600);
+  --color-zinc-700: var(--zinc-700);
+  --color-zinc-800: var(--zinc-800);
+  --color-zinc-900: var(--zinc-900);
+  --color-zinc-950: var(--zinc-950);
+  --color-brand-primary: var(--blue-ribbon-600);
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --color-surface: var(--surface);
+  --color-surface-muted: var(--surface-muted);
+  --color-card: var(--card);
+  --color-card-foreground: var(--card-foreground);
+  --color-panel: var(--panel);
+  --color-popover: var(--popover);
+  --color-popover-foreground: var(--popover-foreground);
+  --color-primary: var(--primary);
+  --color-primary-foreground: var(--primary-foreground);
+  --color-secondary: var(--secondary);
+  --color-secondary-foreground: var(--secondary-foreground);
+  --color-muted: var(--muted);
+  --color-muted-foreground: var(--muted-foreground);
+  --color-accent: var(--accent);
+  --color-accent-foreground: var(--accent-foreground);
+  --color-destructive: var(--destructive);
+  --color-destructive-foreground: var(--destructive-foreground);
+  --color-success: var(--success);
+  --color-success-foreground: var(--success-foreground);
+  --color-border: var(--border);
+  --color-input: var(--input);
+  --color-ring: var(--ring);
+  --color-chart-1: var(--chart-1);
+  --color-chart-2: var(--chart-2);
+  --color-chart-3: var(--chart-3);
+  --color-chart-4: var(--chart-4);
+  --color-chart-5: var(--chart-5);
+  --radius-sm: calc(var(--radius) - 4px);
+  --radius-md: calc(var(--radius) - 2px);
+  --radius-lg: var(--radius);
+  --radius-xl: calc(var(--radius) + 4px);
+  --radius-2xl: calc(var(--radius) + 8px);
+  --radius-3xl: calc(var(--radius) + 12px);
+  --radius-4xl: calc(var(--radius) + 16px);
+  --color-sidebar: var(--sidebar);
+  --color-sidebar-foreground: var(--sidebar-foreground);
+  --color-sidebar-primary: var(--sidebar-primary);
+  --color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+  --color-sidebar-accent: var(--sidebar-accent);
+  --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+  --color-sidebar-border: var(--sidebar-border);
+  --color-sidebar-ring: var(--sidebar-ring);
+  --animate-accordion-down: accordion-down 0.2s ease-out;
+  --animate-accordion-up: accordion-up 0.2s ease-out;
+
+  @keyframes accordion-down {
+    from {
+      height: 0;
+    }
+    to {
+      height: var(--radix-accordion-content-height);
+    }
+  }
+
+  @keyframes accordion-up {
+    from {
+      height: var(--radix-accordion-content-height);
+    }
+    to {
+      height: 0;
+    }
+  }
+
+  @keyframes designer-loading {
+    0% {
+      width: 0;
+    }
+    10% {
+      width: 70%;
+    }
+    100% {
+      width: 90%;
+    }
+  }
+}
+
+/* --- shadcn chat-component utilities (June 2026 release): scroll-fade + shimmer
+   families (verbatim from shadcn/tailwind.css) + scrollbar utilities used by
+   message-scroller/attachment. --- */
+
+/* scroll-fade */
+@property --scroll-fade-t {
+  syntax: "<length-percentage>";
+  inherits: false;
+  initial-value: 0px;
+}
+@property --scroll-fade-b {
+  syntax: "<length-percentage>";
+  inherits: false;
+  initial-value: 0px;
+}
+@property --scroll-fade-s {
+  syntax: "<length-percentage>";
+  inherits: false;
+  initial-value: 0px;
+}
+@property --scroll-fade-e {
+  syntax: "<length-percentage>";
+  inherits: false;
+  initial-value: 0px;
+}
+@property --scroll-fade-mask {
+  syntax: "*";
+  inherits: false;
+}
+
+@theme inline {
+  @keyframes scroll-fade-reveal-t {
+    from {
+      --scroll-fade-t: 0px;
+    }
+    to {
+      --scroll-fade-t: var(
+        --_scroll-fade-size-t,
+        var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+      );
+    }
+  }
+  @keyframes scroll-fade-reveal-b {
+    from {
+      --scroll-fade-b: var(
+        --_scroll-fade-size-b,
+        var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+      );
+    }
+    to {
+      --scroll-fade-b: 0px;
+    }
+  }
+  @keyframes scroll-fade-reveal-s {
+    from {
+      --scroll-fade-s: 0px;
+    }
+    to {
+      --scroll-fade-s: var(
+        --_scroll-fade-size-s,
+        var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+      );
+    }
+  }
+  @keyframes scroll-fade-reveal-e {
+    from {
+      --scroll-fade-e: var(
+        --_scroll-fade-size-e,
+        var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+      );
+    }
+    to {
+      --scroll-fade-e: 0px;
+    }
+  }
+}
+
+@utility scroll-fade {
+  --_scroll-fade-size-t: var(
+    --scroll-fade-t-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --_scroll-fade-size-b: var(
+    --scroll-fade-b-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-block: linear-gradient(
+    to bottom,
+    transparent 0,
+    #000 var(--scroll-fade-t, 0px),
+    #000 calc(100% - var(--scroll-fade-b, 0px)),
+    transparent 100%
+  );
+  -webkit-mask-image: var(--scroll-fade-mask, var(--scroll-fade-block));
+  mask-image: var(--scroll-fade-mask, var(--scroll-fade-block));
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation:
+      scroll-fade-reveal-t 1ms ease-in-out,
+      scroll-fade-reveal-b 1ms ease-in-out;
+    animation-timeline: scroll(self y), scroll(self y);
+    animation-range:
+      0 var(--scroll-fade-reveal, calc(var(--spacing) * 24)),
+      calc(100% - var(--scroll-fade-reveal, calc(var(--spacing) * 24))) 100%;
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-t: var(--_scroll-fade-size-t);
+    --scroll-fade-b: var(--_scroll-fade-size-b);
+  }
+}
+
+@utility scroll-fade-y {
+  --_scroll-fade-size-t: var(
+    --scroll-fade-t-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --_scroll-fade-size-b: var(
+    --scroll-fade-b-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-block: linear-gradient(
+    to bottom,
+    transparent 0,
+    #000 var(--scroll-fade-t, 0px),
+    #000 calc(100% - var(--scroll-fade-b, 0px)),
+    transparent 100%
+  );
+  -webkit-mask-image: var(--scroll-fade-mask, var(--scroll-fade-block));
+  mask-image: var(--scroll-fade-mask, var(--scroll-fade-block));
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation:
+      scroll-fade-reveal-t 1ms ease-in-out,
+      scroll-fade-reveal-b 1ms ease-in-out;
+    animation-timeline: scroll(self y), scroll(self y);
+    animation-range:
+      0 var(--scroll-fade-reveal, calc(var(--spacing) * 24)),
+      calc(100% - var(--scroll-fade-reveal, calc(var(--spacing) * 24))) 100%;
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-t: var(--_scroll-fade-size-t);
+    --scroll-fade-b: var(--_scroll-fade-size-b);
+  }
+}
+
+@utility scroll-fade-x {
+  --_scroll-fade-size-s: var(
+    --scroll-fade-s-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --_scroll-fade-size-e: var(
+    --scroll-fade-e-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-inline: linear-gradient(
+    to right,
+    transparent 0,
+    #000 var(--scroll-fade-s, 0px),
+    #000 calc(100% - var(--scroll-fade-e, 0px)),
+    transparent 100%
+  );
+  &:where([dir="rtl"], [dir="rtl"] *) {
+    --scroll-fade-inline: linear-gradient(
+      to left,
+      transparent 0,
+      #000 var(--scroll-fade-s, 0px),
+      #000 calc(100% - var(--scroll-fade-e, 0px)),
+      transparent 100%
+    );
+  }
+  -webkit-mask-image: var(--scroll-fade-mask, var(--scroll-fade-inline));
+  mask-image: var(--scroll-fade-mask, var(--scroll-fade-inline));
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation:
+      scroll-fade-reveal-s 1ms ease-in-out,
+      scroll-fade-reveal-e 1ms ease-in-out;
+    animation-timeline: scroll(self inline), scroll(self inline);
+    animation-range:
+      0 var(--scroll-fade-reveal, calc(var(--spacing) * 24)),
+      calc(100% - var(--scroll-fade-reveal, calc(var(--spacing) * 24))) 100%;
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-s: var(--_scroll-fade-size-s);
+    --scroll-fade-e: var(--_scroll-fade-size-e);
+  }
+}
+
+@utility scroll-fade-t {
+  --_scroll-fade-size-t: var(
+    --scroll-fade-t-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-mask: linear-gradient(
+    to bottom,
+    transparent 0,
+    #000 var(--scroll-fade-t, 0px),
+    #000 100%
+  );
+  -webkit-mask-image: var(--scroll-fade-mask);
+  mask-image: var(--scroll-fade-mask);
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation: scroll-fade-reveal-t 1ms ease-in-out;
+    animation-timeline: scroll(self y);
+    animation-range: 0 var(--scroll-fade-reveal, calc(var(--spacing) * 24));
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-t: var(--_scroll-fade-size-t);
+  }
+}
+
+@utility scroll-fade-b {
+  --_scroll-fade-size-b: var(
+    --scroll-fade-b-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-mask: linear-gradient(
+    to bottom,
+    #000 0,
+    #000 calc(100% - var(--scroll-fade-b, 0px)),
+    transparent 100%
+  );
+  -webkit-mask-image: var(--scroll-fade-mask);
+  mask-image: var(--scroll-fade-mask);
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation: scroll-fade-reveal-b 1ms ease-in-out;
+    animation-timeline: scroll(self y);
+    animation-range: calc(100% - var(--scroll-fade-reveal, calc(var(--spacing) * 24))) 100%;
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-b: var(--_scroll-fade-size-b);
+  }
+}
+
+@utility scroll-fade-l {
+  --_scroll-fade-size-s: var(
+    --scroll-fade-s-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-mask: linear-gradient(
+    to right,
+    transparent 0,
+    #000 var(--scroll-fade-s, 0px),
+    #000 100%
+  );
+  -webkit-mask-image: var(--scroll-fade-mask);
+  mask-image: var(--scroll-fade-mask);
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation: scroll-fade-reveal-s 1ms ease-in-out;
+    animation-timeline: scroll(self x);
+    animation-range: 0 var(--scroll-fade-reveal, calc(var(--spacing) * 24));
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-s: var(--_scroll-fade-size-s);
+  }
+}
+
+@utility scroll-fade-r {
+  --_scroll-fade-size-e: var(
+    --scroll-fade-e-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-mask: linear-gradient(
+    to right,
+    #000 0,
+    #000 calc(100% - var(--scroll-fade-e, 0px)),
+    transparent 100%
+  );
+  -webkit-mask-image: var(--scroll-fade-mask);
+  mask-image: var(--scroll-fade-mask);
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation: scroll-fade-reveal-e 1ms ease-in-out;
+    animation-timeline: scroll(self x);
+    animation-range: calc(100% - var(--scroll-fade-reveal, calc(var(--spacing) * 24))) 100%;
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-e: var(--_scroll-fade-size-e);
+  }
+}
+
+@utility scroll-fade-s {
+  --_scroll-fade-size-s: var(
+    --scroll-fade-s-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-mask: linear-gradient(
+    to right,
+    transparent 0,
+    #000 var(--scroll-fade-s, 0px),
+    #000 100%
+  );
+  &:where([dir="rtl"], [dir="rtl"] *) {
+    --scroll-fade-mask: linear-gradient(
+      to left,
+      transparent 0,
+      #000 var(--scroll-fade-s, 0px),
+      #000 100%
+    );
+  }
+  -webkit-mask-image: var(--scroll-fade-mask);
+  mask-image: var(--scroll-fade-mask);
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation: scroll-fade-reveal-s 1ms ease-in-out;
+    animation-timeline: scroll(self inline);
+    animation-range: 0 var(--scroll-fade-reveal, calc(var(--spacing) * 24));
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-s: var(--_scroll-fade-size-s);
+  }
+}
+
+@utility scroll-fade-e {
+  --_scroll-fade-size-e: var(
+    --scroll-fade-e-size,
+    var(--scroll-fade-size, min(12%, calc(var(--spacing) * 10)))
+  );
+  --scroll-fade-mask: linear-gradient(
+    to right,
+    #000 0,
+    #000 calc(100% - var(--scroll-fade-e, 0px)),
+    transparent 100%
+  );
+  &:where([dir="rtl"], [dir="rtl"] *) {
+    --scroll-fade-mask: linear-gradient(
+      to left,
+      #000 0,
+      #000 calc(100% - var(--scroll-fade-e, 0px)),
+      transparent 100%
+    );
+  }
+  -webkit-mask-image: var(--scroll-fade-mask);
+  mask-image: var(--scroll-fade-mask);
+  -webkit-mask-composite: source-in;
+  mask-composite: intersect;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+
+  @supports (animation-timeline: scroll()) {
+    animation: scroll-fade-reveal-e 1ms ease-in-out;
+    animation-timeline: scroll(self inline);
+    animation-range: calc(100% - var(--scroll-fade-reveal, calc(var(--spacing) * 24))) 100%;
+    animation-fill-mode: both;
+  }
+
+  @supports not (animation-timeline: scroll()) {
+    --scroll-fade-e: var(--_scroll-fade-size-e);
+  }
+}
+
+@utility scroll-fade-* {
+  --scroll-fade-size: calc(var(--spacing) * --value(integer));
+  --scroll-fade-size: --value([length], [percentage]);
+}
+
+@utility scroll-fade-t-* {
+  --scroll-fade-t-size: calc(var(--spacing) * --value(integer));
+  --scroll-fade-t-size: --value([length], [percentage]);
+}
+
+@utility scroll-fade-b-* {
+  --scroll-fade-b-size: calc(var(--spacing) * --value(integer));
+  --scroll-fade-b-size: --value([length], [percentage]);
+}
+
+@utility scroll-fade-s-* {
+  --scroll-fade-s-size: calc(var(--spacing) * --value(integer));
+  --scroll-fade-s-size: --value([length], [percentage]);
+}
+
+@utility scroll-fade-e-* {
+  --scroll-fade-e-size: calc(var(--spacing) * --value(integer));
+  --scroll-fade-e-size: --value([length], [percentage]);
+}
+
+@utility scroll-fade-none {
+  --scroll-fade-mask: none;
+}
+
+/* shimmer */
+@property --shimmer-angle {
+  syntax: "<angle>";
+  inherits: true;
+  initial-value: 20deg;
+}
+@property --shimmer-image {
+  syntax: "*";
+  inherits: false;
+}
+@property --shimmer-text-fill {
+  syntax: "*";
+  inherits: false;
+}
+
+@theme inline {
+  @keyframes tw-shimmer {
+    from {
+      background-position: 100% 0;
+    }
+    to {
+      background-position: 0 0;
+    }
+  }
+}
+
+@utility shimmer {
+  --_spread: var(--shimmer-spread, calc(3ch + 40px));
+  --_base: currentColor;
+  --_highlight: var(--shimmer-color, oklch(from currentColor l c h / calc(alpha* 0.2)));
+
+  background-image: var(
+    --shimmer-image,
+    linear-gradient(
+      calc(90deg + var(--shimmer-angle)),
+      var(--_base) calc(50% - var(--_spread)),
+      color-mix(in oklch, var(--_highlight), var(--_base) 50%) calc(50% - var(--_spread) * 0.5),
+      var(--_highlight) 50%,
+      color-mix(in oklch, var(--_highlight), var(--_base) 50%) calc(50% + var(--_spread) * 0.5),
+      var(--_base) calc(50% + var(--_spread))
+    )
+  );
+  background-repeat: no-repeat;
+  background-size: calc(200% + var(--_spread) * 2) 100%;
+  background-position: 0 0;
+  background-clip: text;
+  -webkit-background-clip: text;
+  -webkit-text-fill-color: var(--shimmer-text-fill, transparent);
+  animation: tw-shimmer var(--shimmer-duration, 2s) linear infinite;
+
+  @variant dark {
+    --_highlight: var(
+      --shimmer-color,
+      oklch(from currentColor max(0.8, calc(l + 0.4)) c h / calc(alpha + 0.4))
+    );
+  }
+
+  &:where([dir="rtl"], [dir="rtl"] *) {
+    animation-direction: reverse;
+  }
+}
+
+@utility shimmer-once {
+  animation-iteration-count: 1;
+}
+
+@utility shimmer-reverse {
+  animation-direction: reverse;
+}
+
+@utility shimmer-none {
+  --shimmer-image: none;
+  --shimmer-text-fill: currentColor;
+}
+
+@utility shimmer-color-* {
+  --shimmer-color: --value(--color, [color]);
+  --shimmer-color: color-mix(
+    in oklch,
+    --value(--color, [color]) calc(--modifier(integer) * 1%),
+    transparent
+  );
+}
+
+@utility shimmer-duration-* {
+  --shimmer-duration: calc(--value(integer) * 1ms);
+}
+
+@utility shimmer-spread-* {
+  --shimmer-spread: calc(var(--spacing) * --value(integer));
+  --shimmer-spread: --value([length], [percentage]);
+}
+
+@utility shimmer-angle-* {
+  --shimmer-angle: calc(--value(integer) * 1deg);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .shimmer {
+    animation: none;
+    background-image: none;
+    -webkit-text-fill-color: currentColor;
+  }
+}
+
+@utility scrollbar-thin {
+  scrollbar-width: thin;
+}
+
+@utility scrollbar-none {
+  scrollbar-width: none;
+
+  &::-webkit-scrollbar {
+    display: none;
+  }
+}
+
+@utility scrollbar-gutter-stable {
+  scrollbar-gutter: stable;
+}
diff --git a/packages/ui/tsconfig.json b/packages/ui/tsconfig.json
new file mode 100644
index 000000000..d1ad2b7f3
--- /dev/null
+++ b/packages/ui/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "@voidhash/tsconfig/react-library-typescript-6.json",
+  "include": ["."],
+  "exclude": ["dist", "build", "**/node_modules/**"],
+  "compilerOptions": {
+    "lib": ["ES2022", "DOM"]
+  }
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0cd8fd517..530c3338a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -305,7 +305,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.6.1)
@@ -610,6 +610,97 @@ importers:
 
   packages/tsconfig: {}
 
+  packages/ui:
+    dependencies:
+      '@base-ui/react':
+        specifier: ^1.1.0
+        version: 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@hookform/resolvers':
+        specifier: ^5.1.1
+        version: 5.4.0(react-hook-form@7.81.0(react@19.1.0))
+      '@shadcn/react':
+        specifier: ^0.2.0
+        version: 0.2.1(@types/react@19.1.17)(react@19.1.0)
+      class-variance-authority:
+        specifier: ^0.7.1
+        version: 0.7.1
+      clsx:
+        specifier: ^2.1.1
+        version: 2.1.1
+      cmdk:
+        specifier: 1.1.1
+        version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      color-hash:
+        specifier: ^2.0.2
+        version: 2.0.2
+      date-fns:
+        specifier: ^4.1.0
+        version: 4.4.0
+      embla-carousel-react:
+        specifier: ^8.5.2
+        version: 8.6.0(react@19.1.0)
+      input-otp:
+        specifier: ^1.4.2
+        version: 1.4.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      lucide-react:
+        specifier: ^0.555.0
+        version: 0.555.0(react@19.1.0)
+      next-themes:
+        specifier: ^0.4.6
+        version: 0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      radix-ui:
+        specifier: ^1.4.2
+        version: 1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react:
+        specifier: 19.1.0
+        version: 19.1.0
+      react-day-picker:
+        specifier: 8.10.1
+        version: 8.10.1(date-fns@4.4.0)(react@19.1.0)
+      react-dom:
+        specifier: 19.1.0
+        version: 19.1.0(react@19.1.0)
+      react-hook-form:
+        specifier: ^7.60.0
+        version: 7.81.0(react@19.1.0)
+      react-resizable-panels:
+        specifier: ^3.0.3
+        version: 3.0.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      recharts:
+        specifier: ^2.15.4
+        version: 2.15.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      sonner:
+        specifier: ^2.0.1
+        version: 2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      tailwind-merge:
+        specifier: ^3.0.2
+        version: 3.6.0
+      tw-animate-css:
+        specifier: ^1.2.4
+        version: 1.4.0
+      use-debounce:
+        specifier: ^10.0.4
+        version: 10.1.1(react@19.1.0)
+      vaul:
+        specifier: ^1.1.2
+        version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      zod:
+        specifier: ^4.1.13
+        version: 4.3.6
+    devDependencies:
+      '@types/react':
+        specifier: ^19.1.5
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: ^19.1.5
+        version: 19.2.3(@types/react@19.1.17)
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+
 packages:
 
   '@0no-co/graphql.web@1.2.0':
@@ -1401,6 +1492,10 @@ packages:
     resolution: {integrity: sha512-Q/N6JNWvIvPnLDvjlE1OUBLPQHH6l3CltCEsHIujp45zQUSSh8K+gHnaEX45yAT1nyngnINhvWtzN+Nb9D8RAQ==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/runtime@7.29.7':
+    resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/template@7.27.2':
     resolution: {integrity: sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw==}
     engines: {node: '>=6.9.0'}
@@ -1433,6 +1528,33 @@ packages:
     resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
     engines: {node: '>=6.9.0'}
 
+  '@base-ui/react@1.6.0':
+    resolution: {integrity: sha512-/jzjTWJYXhRFO45Bev9lc3cHbmjzCMpUqbMZ2AgKy/z25mY9B6shGSNcXcjQar9n5doM0KYW1W8fcFv2jZBuMw==}
+    engines: {node: '>=14.0.0'}
+    peerDependencies:
+      '@date-fns/tz': ^1.2.0
+      '@types/react': ^17 || ^18 || ^19
+      date-fns: ^4.0.0
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@date-fns/tz':
+        optional: true
+      '@types/react':
+        optional: true
+      date-fns:
+        optional: true
+
+  '@base-ui/utils@0.3.1':
+    resolution: {integrity: sha512-gFFiltORVmW/N6IILTGxizP3PBpVpysqML1ALY5Vk0mH+7faVkCknOU31goYHN5Aoek2dkjxva1XOD2Ce9WuIg==}
+    peerDependencies:
+      '@types/react': ^17 || ^18 || ^19
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
   '@bcoe/v8-coverage@0.2.3':
     resolution: {integrity: sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==}
 
@@ -2562,6 +2684,26 @@ packages:
     resolution: {integrity: sha512-ReZxZ8pdnoI3tP/dNnJdnmAk7uLT4FjsKDGW7YeDdvdOMz2XCQSmSCM9IWlrXuWtMF9zeSB6WJtEhCQ41gQOfw==}
     hasBin: true
 
+  '@floating-ui/core@1.8.0':
+    resolution: {integrity: sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ==}
+
+  '@floating-ui/dom@1.8.0':
+    resolution: {integrity: sha512-yXSrzeHZBTZadLOlfyhCkJHNeLJnHRnRInwdZ40L7ZiaAtrBwoYlsDrX3v5zB1Utk7CLfzcOVnVVWoXEky7Ceg==}
+
+  '@floating-ui/react-dom@2.1.9':
+    resolution: {integrity: sha512-JDjEFGCpImxDCA7JJKviA0M9+RtmJdj0m/NVU5IMgBK+AmZouAQQ7/+2GLH0GXXY0YMw9oXPB8hKdbPYg5QLYg==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
+  '@floating-ui/utils@0.2.12':
+    resolution: {integrity: sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww==}
+
+  '@hookform/resolvers@5.4.0':
+    resolution: {integrity: sha512-EIsqr/t/qbinPIhGjMdtvutIN1Kk4uwbROE9/UQ93CAVGR7GkA7Y92+fX80OzXi/OB67jVFYwKGO1WzkxmkFZw==}
+    peerDependencies:
+      react-hook-form: ^7.55.0
+
   '@humanfs/core@0.19.1':
     resolution: {integrity: sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==}
     engines: {node: '>=18.18.0'}
@@ -2837,11 +2979,17 @@ packages:
     resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
 
+  '@radix-ui/number@1.1.2':
+    resolution: {integrity: sha512-ceTwaxc4I5IOi97DgCotl3pqiyRGvffcc0oOsE2dQYaJOFIDsDt4VWG6xEbg1QePv9QWausCEIppud/tJ1wNig==}
+
   '@radix-ui/primitive@1.1.3':
     resolution: {integrity: sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg==}
 
-  '@radix-ui/react-collection@1.1.7':
-    resolution: {integrity: sha512-Fh9rGN0MoI4ZFUNyfFVNU4y9LUz93u9/0K+yLgA2bwRojxM8JU1DyvvMBabnZPBgMWREAJvU2jjVzq+LrFUglw==}
+  '@radix-ui/primitive@1.1.5':
+    resolution: {integrity: sha512-d86WIWFYNtGA0H/d8exstrTRTp7eWJYlYJbtNofxr/3ljupZYn6EFDG/Qgu/0Kc8v7yMUxySagqJsL1+PdYjWg==}
+
+  '@radix-ui/react-accessible-icon@1.1.11':
+    resolution: {integrity: sha512-HQDOFTKwSnmUij6l54wYJJtxTAnxI71+YJLOrjm2ladFB8HAV5Jt7hwaZPhWTGBkYoW4+ZAOfNZrLDh/qvxSYA==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2853,26 +3001,34 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-compose-refs@1.1.2':
-    resolution: {integrity: sha512-z4eqJvfiNnFMHIIvXP3CY57y2WJs5g2v3X0zm9mEJkrkNv4rDxu+sg9Jh8EkXyeqBkB7SOcboo9dMVqhyrACIg==}
+  '@radix-ui/react-accordion@1.2.16':
+    resolution: {integrity: sha512-BpZJNmetujnGgUI6OX0jEhEmlA46WPqgub8Rv09Kyquwd0cc1ndMKpiPYCjmBU6KSSRPAMtgLpEoZSG/tdNIWQ==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@radix-ui/react-context@1.1.2':
-    resolution: {integrity: sha512-jCi/QKUM2r1Ju5a3J64TH2A5SpKAgh0LpknyqdQ4m6DCV0xJ2HG1xARRwNGPQfi1SLdLWZ1OJz6F4OMBBNiGJA==}
+  '@radix-ui/react-alert-dialog@1.1.19':
+    resolution: {integrity: sha512-FA7n1f6D/DwGE0+AWxiY5LacNbbExQuEgMubeG06idEaH+mSLuf9dp/qBNqOnvbTQ+4gZ2ue1RATF1Ub91Mg5g==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@radix-ui/react-dialog@1.1.15':
-    resolution: {integrity: sha512-TCglVRtzlffRNxRMEyR36DGBLJpeusFcgMVD9PZEzAKnUs1lKCgX5u9BmC2Yg+LL9MgZDugFFs1Vl+Jp4t/PGw==}
+  '@radix-ui/react-arrow@1.1.11':
+    resolution: {integrity: sha512-Kdil9BB1rIFC/khmf4hC35bn8701AJcizTU7G7cUbEbk5XqqbjDuHW60uUfKqO5WojjZcbAW51Q7P0hRmMLw8A==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2884,17 +3040,21 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-direction@1.1.1':
-    resolution: {integrity: sha512-1UEWRX6jnOA2y4H5WczZ44gOOjTEmlqv1uNW4GAJEO5+bauCBhv8snY65Iw5/VOS/ghKN9gr2KjnLKxrsvoMVw==}
+  '@radix-ui/react-aspect-ratio@1.1.11':
+    resolution: {integrity: sha512-IUAhIVpBUvP5NNICjlaB1OFmtRLGqQqTF3ZOSGPoq3XeLXRFtHiWTRxSVEULgOd9GQR2c7tsYqDnhUennapZnw==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@radix-ui/react-dismissable-layer@1.1.11':
-    resolution: {integrity: sha512-Nqcp+t5cTB8BinFkZgXiMJniQH0PsUt2k51FUhbdfeKvc4ACcG2uQniY/8+h1Yv6Kza4Q7lD7PQV0z0oicE0Mg==}
+  '@radix-ui/react-avatar@1.2.2':
+    resolution: {integrity: sha512-sST0qh8GzOB7besQ3tMLWLyngnRuSk0gc/Hm+667KYKQFCt6Y6ZXv25WlqM7dIDK54ULCh5+CHmk4LIolzfz+A==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2906,17 +3066,21 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-focus-guards@1.1.3':
-    resolution: {integrity: sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==}
+  '@radix-ui/react-checkbox@1.3.7':
+    resolution: {integrity: sha512-JroKHfQBfh+fDuzpPsBC+pESkhuq8ql4hljTguz8MWnS35cISr3d/Jhl9kYrB44FlDtxCArYdDvTx+BSsJ64rQ==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@radix-ui/react-focus-scope@1.1.7':
-    resolution: {integrity: sha512-t2ODlkXBQyn7jkl6TNaw/MtVEVvIGelJDCG41Okq/KwUsJBwQ4XVZsHAVUkK4mBv3ewiAS3PGuUWuY2BoK4ZUw==}
+  '@radix-ui/react-collapsible@1.1.16':
+    resolution: {integrity: sha512-opfXRe6nnzyGmCDPx+l1Aqo/RbqWtQal2FnsBqF9hhePp6j0LsRoBaRxcMOlTv+uYTJVtWYZKg9t9wTe+BA/ZA==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2928,17 +3092,21 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-id@1.1.1':
-    resolution: {integrity: sha512-kGkGegYIdQsOb4XjsfM97rXsiHaBwco+hFI66oO4s9LU+PLAC5oJ7khdOVFxkhsmlbpUqDAvXw11CluXP+jkHg==}
+  '@radix-ui/react-collection@1.1.12':
+    resolution: {integrity: sha512-nb67INpE0IahJKN7EYPp9m9YGwYeKlnzxT3MwXVkgCskaSJia97kG4T0ywpjNUSSnoJk/uvk12V8vbrEHEj+/Q==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@radix-ui/react-portal@1.1.9':
-    resolution: {integrity: sha512-bpIxvq03if6UNwXZ+HTK71JLh4APvnXntDc6XOX8UVq4XQOVl7lwok0AvIl+b8zgCw3fSaVTZMpAPPagXbKmHQ==}
+  '@radix-ui/react-collection@1.1.7':
+    resolution: {integrity: sha512-Fh9rGN0MoI4ZFUNyfFVNU4y9LUz93u9/0K+yLgA2bwRojxM8JU1DyvvMBabnZPBgMWREAJvU2jjVzq+LrFUglw==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2950,8 +3118,26 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-presence@1.1.5':
-    resolution: {integrity: sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==}
+  '@radix-ui/react-compose-refs@1.1.2':
+    resolution: {integrity: sha512-z4eqJvfiNnFMHIIvXP3CY57y2WJs5g2v3X0zm9mEJkrkNv4rDxu+sg9Jh8EkXyeqBkB7SOcboo9dMVqhyrACIg==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-compose-refs@1.1.3':
+    resolution: {integrity: sha512-rYOP8OMnuuPMQF1uhPVlGNcCDlkokKqGFE3JcxFViIkAXP7EvFWUliJAstrapypaBLJNHbZL6jGhbVDGTwmVhA==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-context-menu@2.3.3':
+    resolution: {integrity: sha512-PS+gKE0z2prJ74Y0sM+brAGK4mYOHIR7TlcV5EJgUQ6E0xMvyswkK2X4yRqyganrzsRL+WCSKAPu0NQITICRWg==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2963,8 +3149,26 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-primitive@2.1.3':
-    resolution: {integrity: sha512-m9gTwRkhy2lvCPe6QJp4d3G1TYEUHn/FzJUtq9MjH46an1wJU+GdoGC5VLof8RX8Ft/DlpshApkhswDLZzHIcQ==}
+  '@radix-ui/react-context@1.1.2':
+    resolution: {integrity: sha512-jCi/QKUM2r1Ju5a3J64TH2A5SpKAgh0LpknyqdQ4m6DCV0xJ2HG1xARRwNGPQfi1SLdLWZ1OJz6F4OMBBNiGJA==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-context@1.2.0':
+    resolution: {integrity: sha512-fOE+JtN9rygNZkCnHRBEP0TAvLldlhyOxMsbwFvTP4nAs+nBmfnna+o/Zski2wkmY1YMrFC0aSzsHoLY47iLrg==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-dialog@1.1.15':
+    resolution: {integrity: sha512-TCglVRtzlffRNxRMEyR36DGBLJpeusFcgMVD9PZEzAKnUs1lKCgX5u9BmC2Yg+LL9MgZDugFFs1Vl+Jp4t/PGw==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2976,8 +3180,8 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-roving-focus@1.1.11':
-    resolution: {integrity: sha512-7A6S9jSgm/S+7MdtNDSb+IU859vQqJ/QAtcYQcfFC6W8RS4IxIZDldLR0xqCFZ6DCyrQLjLPsxtTNch5jVA4lA==}
+  '@radix-ui/react-dialog@1.1.19':
+    resolution: {integrity: sha512-+HhbN2+YtkRgVirjZ2afMeutQRuGOrdkWR5+EFC58SJojGmtyNQwYzgi6tHBpOxvFHefMtPeHdgtjz0BOGxFQg==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -2989,8 +3193,8 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-slot@1.2.0':
-    resolution: {integrity: sha512-ujc+V6r0HNDviYqIK3rW4ffgYiZ8g5DEHrGJVk4x7kTlLXRDILnKX9vAUYeIsLOoDpDJ0ujpqMkjH4w2ofuo6w==}
+  '@radix-ui/react-direction@1.1.1':
+    resolution: {integrity: sha512-1UEWRX6jnOA2y4H5WczZ44gOOjTEmlqv1uNW4GAJEO5+bauCBhv8snY65Iw5/VOS/ghKN9gr2KjnLKxrsvoMVw==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -2998,8 +3202,8 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-slot@1.2.3':
-    resolution: {integrity: sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==}
+  '@radix-ui/react-direction@1.1.2':
+    resolution: {integrity: sha512-C3vFhbyi4SW3PmbAi6Awpu4OzJtd0MxGurvSsYtr7p7nM8RNB3VAF3CUmnp2j50knpkrRcB7+ycVXzgLgF6yNA==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -3007,8 +3211,8 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-tabs@1.1.13':
-    resolution: {integrity: sha512-7xdcatg7/U+7+Udyoj2zodtI9H/IIopqo+YOIcZOq1nJwXWBZ9p8xiu5llXlekDbZkca79a/fozEYQXIA4sW6A==}
+  '@radix-ui/react-dismissable-layer@1.1.11':
+    resolution: {integrity: sha512-Nqcp+t5cTB8BinFkZgXiMJniQH0PsUt2k51FUhbdfeKvc4ACcG2uQniY/8+h1Yv6Kza4Q7lD7PQV0z0oicE0Mg==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
@@ -3020,26 +3224,34 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-use-callback-ref@1.1.1':
-    resolution: {integrity: sha512-FkBMwD+qbGQeMu1cOHnuGB6x4yzPjho8ap5WtbEJ26umhgqVXbhekKUQO+hZEL1vU92a3wHwdp0HAcqAUF5iDg==}
+  '@radix-ui/react-dismissable-layer@1.1.15':
+    resolution: {integrity: sha512-b0XaRlzn2QKuo10XyNgi2DAJDf5XC9d1nD3FJcuvCjbR7+4Ad28zmZsLsqx+hvDEzMnRuZaZxZm9gYObV6RmRA==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@radix-ui/react-use-controllable-state@1.2.2':
-    resolution: {integrity: sha512-BjasUjixPFdS+NKkypcyyN5Pmg83Olst0+c6vGov0diwTEo6mgdqVR6hxcEgFuh4QrAs7Rc+9KuGJ9TVCj0Zzg==}
+  '@radix-ui/react-dropdown-menu@2.1.20':
+    resolution: {integrity: sha512-slfm+rRaZRuQBvHq60lXvSVUPhid0IPtjSZzIuUlWZMUs01iYZNlGS3mJgRD3ChLQVBAYlKiL/tFyWGX+dz8Xw==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@radix-ui/react-use-effect-event@0.0.2':
-    resolution: {integrity: sha512-Qp8WbZOBe+blgpuUT+lw2xheLP8q0oatc9UpmiemEICxGvFLYmHm9QowVZGHtJlGbS6A6yJ3iViad/2cVjnOiA==}
+  '@radix-ui/react-focus-guards@1.1.3':
+    resolution: {integrity: sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -3047,8 +3259,8 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-use-escape-keydown@1.1.1':
-    resolution: {integrity: sha512-Il0+boE7w/XebUHyBjroE+DbByORGR9KKmITzbR7MyQ4akpORYP/ZmbhAr0DG7RmmBqoOnZdy2QlvajJ2QA59g==}
+  '@radix-ui/react-focus-guards@1.1.4':
+    resolution: {integrity: sha512-cot/aB/mOm0IYVYTTmQcEEK1M48lZWi8FlYe5nDPQQ8NYZUlXEFgncJ9p2Kzer3RKSrY7cTTpEMLZKNo9QoP5Q==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -3056,196 +3268,816 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-use-layout-effect@1.1.1':
-    resolution: {integrity: sha512-RbJRS4UWQFkzHTTwVymMTUv8EqYhOp8dOOviLj2ugtTiXRaRQS7GLGxZTLL1jWhMeoSCf5zmcZkqTl9IiYfXcQ==}
+  '@radix-ui/react-focus-scope@1.1.12':
+    resolution: {integrity: sha512-jjk/lqTeNL0azUx5ZYzVrl4NgaDIrdzTNE4mABV9yBFI7FQqN7pIgzV1bTleUezP2QiTGA1BFTqY8MegDgWX9A==}
     peerDependencies:
       '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@react-native-async-storage/async-storage@2.2.0':
-    resolution: {integrity: sha512-gvRvjR5JAaUZF8tv2Kcq/Gbt3JHwbKFYfmb445rhOj6NUMx3qPLixmDx5pZAyb9at1bYvJ4/eTUipU5aki45xw==}
-    peerDependencies:
-      react-native: ^0.0.0-0 || >=0.65 <1.0
-
-  '@react-native/assets-registry@0.81.5':
-    resolution: {integrity: sha512-705B6x/5Kxm1RKRvSv0ADYWm5JOnoiQ1ufW7h8uu2E6G9Of/eE6hP/Ivw3U5jI16ERqZxiKQwk34VJbB0niX9w==}
-    engines: {node: '>= 20.19.4'}
-
-  '@react-native/babel-plugin-codegen@0.81.5':
-    resolution: {integrity: sha512-oF71cIH6je3fSLi6VPjjC3Sgyyn57JLHXs+mHWc9MoCiJJcM4nqsS5J38zv1XQ8d3zOW2JtHro+LF0tagj2bfQ==}
-    engines: {node: '>= 20.19.4'}
-
-  '@react-native/babel-preset@0.81.5':
-    resolution: {integrity: sha512-UoI/x/5tCmi+pZ3c1+Ypr1DaRMDLI3y+Q70pVLLVgrnC3DHsHRIbHcCHIeG/IJvoeFqFM2sTdhSOLJrf8lOPrA==}
-    engines: {node: '>= 20.19.4'}
+  '@radix-ui/react-focus-scope@1.1.7':
+    resolution: {integrity: sha512-t2ODlkXBQyn7jkl6TNaw/MtVEVvIGelJDCG41Okq/KwUsJBwQ4XVZsHAVUkK4mBv3ewiAS3PGuUWuY2BoK4ZUw==}
     peerDependencies:
-      '@babel/core': 7.29.6
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@react-native/codegen@0.81.5':
-    resolution: {integrity: sha512-a2TDA03Up8lpSa9sh5VRGCQDXgCTOyDOFH+aqyinxp1HChG8uk89/G+nkJ9FPd0rqgi25eCTR16TWdS3b+fA6g==}
-    engines: {node: '>= 20.19.4'}
+  '@radix-ui/react-form@0.1.12':
+    resolution: {integrity: sha512-JTX94E4LDL91rzLg7X0mHPdxr0A8JEdVwZEmeOwZJSMDHCGW5DFtSlTSJozUyUs807IQmnvbfzKZFVCK5DmkqQ==}
     peerDependencies:
-      '@babel/core': 7.29.6
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@react-native/community-cli-plugin@0.81.5':
-    resolution: {integrity: sha512-yWRlmEOtcyvSZ4+OvqPabt+NS36vg0K/WADTQLhrYrm9qdZSuXmq8PmdJWz/68wAqKQ+4KTILiq2kjRQwnyhQw==}
-    engines: {node: '>= 20.19.4'}
+  '@radix-ui/react-hover-card@1.1.19':
+    resolution: {integrity: sha512-2KTgMLQtKvicznQgbindEI2RZ3QbDIwU5gabjUPwFJsormjGDz+rUvO4NANmYwzEEpTcTONUt33vBHIfTIVSfw==}
     peerDependencies:
-      '@react-native-community/cli': '*'
-      '@react-native/metro-config': '*'
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
     peerDependenciesMeta:
-      '@react-native-community/cli':
+      '@types/react':
         optional: true
-      '@react-native/metro-config':
+      '@types/react-dom':
         optional: true
 
-  '@react-native/debugger-frontend@0.81.5':
-    resolution: {integrity: sha512-bnd9FSdWKx2ncklOetCgrlwqSGhMHP2zOxObJbOWXoj7GHEmih4MKarBo5/a8gX8EfA1EwRATdfNBQ81DY+h+w==}
-    engines: {node: '>= 20.19.4'}
-
-  '@react-native/dev-middleware@0.81.5':
-    resolution: {integrity: sha512-WfPfZzboYgo/TUtysuD5xyANzzfka8Ebni6RIb2wDxhb56ERi7qDrE4xGhtPsjCL4pQBXSVxyIlCy0d8I6EgGA==}
-    engines: {node: '>= 20.19.4'}
-
-  '@react-native/gradle-plugin@0.81.5':
-    resolution: {integrity: sha512-hORRlNBj+ReNMLo9jme3yQ6JQf4GZpVEBLxmTXGGlIL78MAezDZr5/uq9dwElSbcGmLEgeiax6e174Fie6qPLg==}
-    engines: {node: '>= 20.19.4'}
-
-  '@react-native/js-polyfills@0.81.5':
-    resolution: {integrity: sha512-fB7M1CMOCIUudTRuj7kzxIBTVw2KXnsgbQ6+4cbqSxo8NmRRhA0Ul4ZUzZj3rFd3VznTL4Brmocv1oiN0bWZ8w==}
-    engines: {node: '>= 20.19.4'}
-
-  '@react-native/normalize-colors@0.81.5':
-    resolution: {integrity: sha512-0HuJ8YtqlTVRXGZuGeBejLE04wSQsibpTI+RGOyVqxZvgtlLLC/Ssw0UmbHhT4lYMp2fhdtvKZSs5emWB1zR/g==}
-
-  '@react-native/polyfills@2.0.0':
-    resolution: {integrity: sha512-K0aGNn1TjalKj+65D7ycc1//H9roAQ51GJVk5ZJQFb2teECGmzd86bYDC0aYdbRf7gtovescq4Zt6FR0tgXiHQ==}
-
-  '@react-native/virtualized-lists@0.81.5':
-    resolution: {integrity: sha512-UVXgV/db25OPIvwZySeToXD/9sKKhOdkcWmmf4Jh8iBZuyfML+/5CasaZ1E7Lqg6g3uqVQq75NqIwkYmORJMPw==}
-    engines: {node: '>= 20.19.4'}
+  '@radix-ui/react-id@1.1.1':
+    resolution: {integrity: sha512-kGkGegYIdQsOb4XjsfM97rXsiHaBwco+hFI66oO4s9LU+PLAC5oJ7khdOVFxkhsmlbpUqDAvXw11CluXP+jkHg==}
     peerDependencies:
-      '@types/react': ^19.1.0
+      '@types/react': '*'
       react: 19.1.0
-      react-native: '*'
     peerDependenciesMeta:
       '@types/react':
         optional: true
 
-  '@react-navigation/bottom-tabs@7.9.0':
-    resolution: {integrity: sha512-024FWdHp3ZsE5rP8tmGI4vh+1z3wg8u8E9Frep8eeGoYo1h9rQhvgofQDGxknmrKsb7t8o8Dim+IZSvl57cPFQ==}
+  '@radix-ui/react-id@1.1.2':
+    resolution: {integrity: sha512-orBC88futVpqCmhX1p4cvquNHsELQ+w+vBJnuj3ftETI5bJb0bZn3Tqu3SWN2IOcPycTnMGnhwoermvISt72sA==}
     peerDependencies:
-      '@react-navigation/native': ^7.1.26
+      '@types/react': '*'
       react: 19.1.0
-      react-native: '*'
-      react-native-safe-area-context: '>= 4.0.0'
-      react-native-screens: '>= 4.0.0'
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
 
-  '@react-navigation/core@7.13.7':
-    resolution: {integrity: sha512-k2ABo3250vq1ovOh/iVwXS6Hwr5PVRGXoPh/ewVFOOuEKTvOx9i//OBzt8EF+HokBxS2HBRlR2b+aCOmscRqBw==}
+  '@radix-ui/react-label@2.1.11':
+    resolution: {integrity: sha512-3PKvDDxOn62k0oV1n4QtNtD2vpu+zYjXR7ojLBPaO6SPvhy53yg0vAmgNeBQeJW5rV3dffoRG+HYfLBZuzw0CQ==}
     peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@react-navigation/elements@2.9.3':
-    resolution: {integrity: sha512-3+eyvWiVPIEf6tN9UdduhOEHcTuNe3R5WovgiVkfH9+jApHMTZDc2loePTpY/i2HDJhObhhChpJzO6BVjrpdYQ==}
+  '@radix-ui/react-menu@2.1.20':
+    resolution: {integrity: sha512-VsUrXxFe9d2ScbZF0fR/oPR1+qjyeLs5p0jzG8h90puMoA9bq4SirYlXbE+USRg9Q2qTeJSFNqjw2nts8jJe4w==}
     peerDependencies:
-      '@react-native-masked-view/masked-view': '>= 0.2.0'
-      '@react-navigation/native': ^7.1.26
+      '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
-      react-native: '*'
-      react-native-safe-area-context: '>= 4.0.0'
+      react-dom: 19.1.0
     peerDependenciesMeta:
-      '@react-native-masked-view/masked-view':
+      '@types/react':
+        optional: true
+      '@types/react-dom':
         optional: true
 
-  '@react-navigation/native-stack@7.9.0':
-    resolution: {integrity: sha512-C/mNPhI0Pnerl7C2cB+6fAkdgSmfKECMERrbyfjx3P6JmEuTC54o+GV1c62FUmlRaRUassVHbtw4EeaY2uLh0g==}
+  '@radix-ui/react-menubar@1.1.20':
+    resolution: {integrity: sha512-gzFZvybgmwYsFBWDqanycIoEYnhyk8MMnuLamdFVHUZYGp4COM+sqXiwbnn0VMWqGLeeU7GV7jm+dXRa+Wufag==}
     peerDependencies:
-      '@react-navigation/native': ^7.1.26
+      '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
-      react-native: '*'
-      react-native-safe-area-context: '>= 4.0.0'
-      react-native-screens: '>= 4.0.0'
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@react-navigation/native@7.1.26':
-    resolution: {integrity: sha512-RhKmeD0E2ejzKS6z8elAfdfwShpcdkYY8zJzvHYLq+wv183BBcElTeyMLcIX6wIn7QutXeI92Yi21t7aUWfqNQ==}
+  '@radix-ui/react-navigation-menu@1.2.18':
+    resolution: {integrity: sha512-K9HiuxZ6xCwSaHcIuUpxyhy4w5gpwzWjh9dHTSbMN3Ix4qAyVObS9RlU3zMycb0PO3v9Tpk0BXMwWvXOUbVXew==}
     peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
       react: 19.1.0
-      react-native: '*'
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@react-navigation/routers@7.5.3':
-    resolution: {integrity: sha512-1tJHg4KKRJuQ1/EvJxatrMef3NZXEPzwUIUZ3n1yJ2t7Q97siwRtbynRpQG9/69ebbtiZ8W3ScOZF/OmhvM4Rg==}
+  '@radix-ui/react-one-time-password-field@0.1.12':
+    resolution: {integrity: sha512-nQLu5OAcORDQp1EHAv6k3mJGV1hjMTw2NTGVAsGE1g/mWeNqAd1R5jyaAs3U+A8ZD/W8XNPY2yKT0ZdQnqo3NA==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rolldown/pluginutils@1.0.0-rc.3':
-    resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
+  '@radix-ui/react-password-toggle-field@0.1.7':
+    resolution: {integrity: sha512-gB1Mr8vzdv1XzDjrtJTXmL0JORRs1B4g7ngUs0F+H2VvMOwXTZMTmLCl0wZZ3m7ylX8TssI7NCvgiSHmLuTm/A==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-android-arm-eabi@4.59.0':
-    resolution: {integrity: sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==}
-    cpu: [arm]
-    os: [android]
+  '@radix-ui/react-popover@1.1.19':
+    resolution: {integrity: sha512-jkrTdQVxnIB8fpn0NyyxW9CTB5aCXZZelVz5z+Xmii6g5WxMqS3fInNslZ63puP39+Puu4jYohUK31y3dT87gQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-android-arm64@4.59.0':
-    resolution: {integrity: sha512-hZ+Zxj3SySm4A/DylsDKZAeVg0mvi++0PYVceVyX7hemkw7OreKdCvW2oQ3T1FMZvCaQXqOTHb8qmBShoqk69Q==}
-    cpu: [arm64]
-    os: [android]
+  '@radix-ui/react-popper@1.3.3':
+    resolution: {integrity: sha512-mS7dGpyjv6b+gsDjLF7e0ia1W4Im1B1hSCy2yuXlHuvnZxHKagfDaobt/KAKt27EpZMit2pss8eJBVyVjEWM+g==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-darwin-arm64@4.59.0':
-    resolution: {integrity: sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==}
-    cpu: [arm64]
-    os: [darwin]
+  '@radix-ui/react-portal@1.1.13':
+    resolution: {integrity: sha512-z3oXfmaHLJTF1wktbjgD6cn9jiEbq3WSondB10LIuIt2m2Ym4iJlrW04/euMwENDdWDdE7z+OuY7Qyp1YpRSwA==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-darwin-x64@4.59.0':
-    resolution: {integrity: sha512-ZW2KkwlS4lwTv7ZVsYDiARfFCnSGhzYPdiOU4IM2fDbL+QGlyAbjgSFuqNRbSthybLbIJ915UtZBtmuLrQAT/w==}
-    cpu: [x64]
-    os: [darwin]
+  '@radix-ui/react-portal@1.1.9':
+    resolution: {integrity: sha512-bpIxvq03if6UNwXZ+HTK71JLh4APvnXntDc6XOX8UVq4XQOVl7lwok0AvIl+b8zgCw3fSaVTZMpAPPagXbKmHQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-freebsd-arm64@4.59.0':
-    resolution: {integrity: sha512-EsKaJ5ytAu9jI3lonzn3BgG8iRBjV4LxZexygcQbpiU0wU0ATxhNVEpXKfUa0pS05gTcSDMKpn3Sx+QB9RlTTA==}
-    cpu: [arm64]
-    os: [freebsd]
+  '@radix-ui/react-presence@1.1.5':
+    resolution: {integrity: sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-freebsd-x64@4.59.0':
-    resolution: {integrity: sha512-d3DuZi2KzTMjImrxoHIAODUZYoUUMsuUiY4SRRcJy6NJoZ6iIqWnJu9IScV9jXysyGMVuW+KNzZvBLOcpdl3Vg==}
-    cpu: [x64]
-    os: [freebsd]
+  '@radix-ui/react-presence@1.1.7':
+    resolution: {integrity: sha512-zBZ4QM5XG3JRanDmqXYf3MD6th4AFXFmgU6KNMFzUaV6F3uw9I5/zjMUvFriSEn5ewo1nxuibvyxJdmLlDcslA==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-linux-arm-gnueabihf@4.59.0':
-    resolution: {integrity: sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==}
-    cpu: [arm]
-    os: [linux]
+  '@radix-ui/react-primitive@2.1.3':
+    resolution: {integrity: sha512-m9gTwRkhy2lvCPe6QJp4d3G1TYEUHn/FzJUtq9MjH46an1wJU+GdoGC5VLof8RX8Ft/DlpshApkhswDLZzHIcQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-linux-arm-musleabihf@4.59.0':
-    resolution: {integrity: sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==}
-    cpu: [arm]
-    os: [linux]
+  '@radix-ui/react-primitive@2.1.7':
+    resolution: {integrity: sha512-bC3NiwsprbxKjuon9l7X6BUTw7FPVzEYaL92MPEY5SCd/9hUTPXVFtVwRix7778wtRsVao+zE062gL79FZleeQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-linux-arm64-gnu@4.59.0':
-    resolution: {integrity: sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==}
-    cpu: [arm64]
-    os: [linux]
+  '@radix-ui/react-progress@1.1.12':
+    resolution: {integrity: sha512-ZPHyI0JyzoH/rP0tq2uRaIZTj/4s8+kAbqPz+e2N8+ejHvwPJ889dHhqn+vh7PNvNeq+boAoH9yzqeoShzwF2w==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-linux-arm64-musl@4.59.0':
-    resolution: {integrity: sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==}
-    cpu: [arm64]
-    os: [linux]
+  '@radix-ui/react-radio-group@1.4.3':
+    resolution: {integrity: sha512-WwZFjWV4s3aC1QtR3k04R+oANHtX2q6fgKlc7MCEiDNlnTxCZ3H8k3mHtEgVlOejystwk1WQgarQhNOQZ2bK1g==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-linux-loong64-gnu@4.59.0':
-    resolution: {integrity: sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==}
-    cpu: [loong64]
-    os: [linux]
+  '@radix-ui/react-roving-focus@1.1.11':
+    resolution: {integrity: sha512-7A6S9jSgm/S+7MdtNDSb+IU859vQqJ/QAtcYQcfFC6W8RS4IxIZDldLR0xqCFZ6DCyrQLjLPsxtTNch5jVA4lA==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-linux-loong64-musl@4.59.0':
-    resolution: {integrity: sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==}
-    cpu: [loong64]
-    os: [linux]
+  '@radix-ui/react-roving-focus@1.1.15':
+    resolution: {integrity: sha512-40svmmugfM3mUN7VUDGVE1tQGOhyi8enlGD0CNJEcMM36C1f71PKM21DFgNHUfem0XnA+d8H8oN3Z9ZpJjSslg==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
 
-  '@rollup/rollup-linux-ppc64-gnu@4.59.0':
-    resolution: {integrity: sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==}
-    cpu: [ppc64]
-    os: [linux]
+  '@radix-ui/react-scroll-area@1.2.14':
+    resolution: {integrity: sha512-bBODCWZK7JTbQLHs0uIP4f73wIWatakK4OS33UzkR1x897wu0PuO658a3f+6P2GEGyDzGYMuHRatMVoAk9WZTw==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-select@2.3.3':
+    resolution: {integrity: sha512-L5RQTXz6Anxsf9CCv+pTgiAsUpyVj7rJxsGtmhFaEOJ++cVfXucv4qWfsIO0AIB4NAhi3yovWGVMKKS1Xf1Wrg==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-separator@1.1.11':
+    resolution: {integrity: sha512-jRhe86+8PF7VZ1u14eOWVOuh2BuAhALg/FT1VcMC4OHedMTRUazDnDlKTt+yxo5cRNKHMfmvZ4sSQtWDeMV4CQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-slider@1.4.3':
+    resolution: {integrity: sha512-CWVVj+XaTom0SKCqw1EUgb0NuiLwS+N3OFG73mVEezKEjgNIvZiu0EevMelSSU+CbX3owbqJweG2gPU31WGC5A==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-slot@1.2.0':
+    resolution: {integrity: sha512-ujc+V6r0HNDviYqIK3rW4ffgYiZ8g5DEHrGJVk4x7kTlLXRDILnKX9vAUYeIsLOoDpDJ0ujpqMkjH4w2ofuo6w==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-slot@1.2.3':
+    resolution: {integrity: sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-slot@1.3.0':
+    resolution: {integrity: sha512-MojKku4U/miO8Av4Dkb+ctMAQx7JmY96LmtDQlAarCRtd7rN52QCSzBF+XAvr5S6coSVj9HEPBgHAHKEJVk/WA==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-switch@1.3.3':
+    resolution: {integrity: sha512-1+mlB4/lxJfk5tgJ4g+R5mUCbRpPE1T9+UsEyeLYbGgMtwiMgmuTnfKz4Mw1nHALHjuwyxw4MLd4cSHn6pNSlQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-tabs@1.1.13':
+    resolution: {integrity: sha512-7xdcatg7/U+7+Udyoj2zodtI9H/IIopqo+YOIcZOq1nJwXWBZ9p8xiu5llXlekDbZkca79a/fozEYQXIA4sW6A==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-tabs@1.1.17':
+    resolution: {integrity: sha512-nRyXnrAVCwjeXcHbvEbLS6ndbTeKHG1RqCP4A8Gw5L4cemDzPXdD8rAmr6wet0v57R69wGvuIIsFjHSVkZiMzQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-toast@1.2.19':
+    resolution: {integrity: sha512-SxfVZfVOibWKWdkf0Xx1awW2d09fQu4V4PXDY1j5hi4MVf7MWdJZqTBJMa1KWtOr1S6GGtCk02nniZ0Iia+dHw==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-toggle-group@1.1.15':
+    resolution: {integrity: sha512-gIC5Q+Xljg7lmUdzSuDoy0t97yZn1sZl00Ra37ZvKrYdWnQLU6sWLd09yG8cIB9jUAlQfHgJ2ACAG00MFwsqSQ==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-toggle@1.1.14':
+    resolution: {integrity: sha512-QI/hB65XKWACA66P64A+aHxtLUgHJeJLkaQa+awUNXT6T3swndtY5DojeHA+vldrTspMTtFBd7HfZ9QGbM1Qrw==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-toolbar@1.1.15':
+    resolution: {integrity: sha512-t/iEuVjUnXXtrsGK40AA43uIx37sn3AqZ7oAVnPICK6lFJP6dzMzWR3U9b6eCfFjb6wtSEqkJ9Rn9xDjiOx20g==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-tooltip@1.2.12':
+    resolution: {integrity: sha512-U3HoftgWnmla78vzQbLvKKb7bUYJxoiiqYFzp1wu/TBMyDqMZSuCl3aRICsD6EfVEwcJD2mumGDGUXLFVqQHKA==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/react-use-callback-ref@1.1.1':
+    resolution: {integrity: sha512-FkBMwD+qbGQeMu1cOHnuGB6x4yzPjho8ap5WtbEJ26umhgqVXbhekKUQO+hZEL1vU92a3wHwdp0HAcqAUF5iDg==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-callback-ref@1.1.2':
+    resolution: {integrity: sha512-xCso9j1/u8sEgP1RNHjFrXJLApL8LiqOkI1R4ywuN00rxWdYg4oQXuwKLS3i0j5NWLromUD27/4nlxj2UFVvIw==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-controllable-state@1.2.2':
+    resolution: {integrity: sha512-BjasUjixPFdS+NKkypcyyN5Pmg83Olst0+c6vGov0diwTEo6mgdqVR6hxcEgFuh4QrAs7Rc+9KuGJ9TVCj0Zzg==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-controllable-state@1.2.3':
+    resolution: {integrity: sha512-PLzC90MS+ReootmjC597dvopoelpZ8Q61HJkDXZSExitIq7PL55vHNnesAHwguHK0aPfBnpdNzQtv1uliaqQrA==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-effect-event@0.0.2':
+    resolution: {integrity: sha512-Qp8WbZOBe+blgpuUT+lw2xheLP8q0oatc9UpmiemEICxGvFLYmHm9QowVZGHtJlGbS6A6yJ3iViad/2cVjnOiA==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-effect-event@0.0.3':
+    resolution: {integrity: sha512-6c8ZqvPTWILEKnyVkP53EGRCcpnJiKTC21sS/6R1GF5xKyHJJWQEPfkqlcgUkdRQivd6tb23abUwe4ngWmY0JA==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-escape-keydown@1.1.1':
+    resolution: {integrity: sha512-Il0+boE7w/XebUHyBjroE+DbByORGR9KKmITzbR7MyQ4akpORYP/ZmbhAr0DG7RmmBqoOnZdy2QlvajJ2QA59g==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-escape-keydown@1.1.3':
+    resolution: {integrity: sha512-3wEkMiPHXha/2VadZ68rYBcmYnPINVGl4Y3gtcM7fKRjANk0OscK+cdqBgUWdozb7YJxsh0vefM7vgAMHXOjqg==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-is-hydrated@0.1.1':
+    resolution: {integrity: sha512-qwOiz4Tjo8CNnrOLAYUMXeZwDzXgXpvK4TKQPmWLECM9XoWvA6+0Z2/7Ag3A4ivjS4ovbLJPbskkxioFyBhr8A==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-layout-effect@1.1.1':
+    resolution: {integrity: sha512-RbJRS4UWQFkzHTTwVymMTUv8EqYhOp8dOOviLj2ugtTiXRaRQS7GLGxZTLL1jWhMeoSCf5zmcZkqTl9IiYfXcQ==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-layout-effect@1.1.2':
+    resolution: {integrity: sha512-jrBWOxZITuGcnjRCM2t2U5ZPkCLxD+Ym6DjfssS5haTj2iiak/DOb64JeN6OdLfLgptb6/e2kKR+ZuTrGoZTPA==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-previous@1.1.2':
+    resolution: {integrity: sha512-IGBQPtRFdhN6MQ8dbegVmBq1LVZluya3F1jWY+puIcQC3MHctRwTDSBWCkL/3ZcnMJLTMJ++Z+ktmvg0F89iCw==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-rect@1.1.2':
+    resolution: {integrity: sha512-d8a+bBY/FxikNPlgJJoaBHZX+zKVbWHYJGTLnLvveQgFSTntkGdEKv3JDtHrMS0DNYpllz2nRsTLGLKYttbpmw==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-use-size@1.1.2':
+    resolution: {integrity: sha512-giWQp+4mxjBPt4KZ0MmyuykFNWfbDxKt4x+fPkRYmgRFJSbCZFzUglvMb/Kjn38tm10YP4ufiQZDx3zna4LU6w==}
+    peerDependencies:
+      '@types/react': '*'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@radix-ui/react-visually-hidden@1.2.7':
+    resolution: {integrity: sha512-1wNZBggTDK3GRuuQ6nP4k2yi7a6l7I5qbMPbZcRsrGsGVead/f/d5FhEzUvqFs0bcrDLx7n1zKQ3JvLR6whaaw==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
+  '@radix-ui/rect@1.1.2':
+    resolution: {integrity: sha512-xnXE7wG13PI+cxieVssYXlQJuYVRhH9NBoxt3KNwzghDIA69GMm7d4wXRouHIYjE+KvS6U/MsMO73NdS2MH9ZA==}
+
+  '@react-native-async-storage/async-storage@2.2.0':
+    resolution: {integrity: sha512-gvRvjR5JAaUZF8tv2Kcq/Gbt3JHwbKFYfmb445rhOj6NUMx3qPLixmDx5pZAyb9at1bYvJ4/eTUipU5aki45xw==}
+    peerDependencies:
+      react-native: ^0.0.0-0 || >=0.65 <1.0
+
+  '@react-native/assets-registry@0.81.5':
+    resolution: {integrity: sha512-705B6x/5Kxm1RKRvSv0ADYWm5JOnoiQ1ufW7h8uu2E6G9Of/eE6hP/Ivw3U5jI16ERqZxiKQwk34VJbB0niX9w==}
+    engines: {node: '>= 20.19.4'}
+
+  '@react-native/babel-plugin-codegen@0.81.5':
+    resolution: {integrity: sha512-oF71cIH6je3fSLi6VPjjC3Sgyyn57JLHXs+mHWc9MoCiJJcM4nqsS5J38zv1XQ8d3zOW2JtHro+LF0tagj2bfQ==}
+    engines: {node: '>= 20.19.4'}
+
+  '@react-native/babel-preset@0.81.5':
+    resolution: {integrity: sha512-UoI/x/5tCmi+pZ3c1+Ypr1DaRMDLI3y+Q70pVLLVgrnC3DHsHRIbHcCHIeG/IJvoeFqFM2sTdhSOLJrf8lOPrA==}
+    engines: {node: '>= 20.19.4'}
+    peerDependencies:
+      '@babel/core': 7.29.6
+
+  '@react-native/codegen@0.81.5':
+    resolution: {integrity: sha512-a2TDA03Up8lpSa9sh5VRGCQDXgCTOyDOFH+aqyinxp1HChG8uk89/G+nkJ9FPd0rqgi25eCTR16TWdS3b+fA6g==}
+    engines: {node: '>= 20.19.4'}
+    peerDependencies:
+      '@babel/core': 7.29.6
+
+  '@react-native/community-cli-plugin@0.81.5':
+    resolution: {integrity: sha512-yWRlmEOtcyvSZ4+OvqPabt+NS36vg0K/WADTQLhrYrm9qdZSuXmq8PmdJWz/68wAqKQ+4KTILiq2kjRQwnyhQw==}
+    engines: {node: '>= 20.19.4'}
+    peerDependencies:
+      '@react-native-community/cli': '*'
+      '@react-native/metro-config': '*'
+    peerDependenciesMeta:
+      '@react-native-community/cli':
+        optional: true
+      '@react-native/metro-config':
+        optional: true
+
+  '@react-native/debugger-frontend@0.81.5':
+    resolution: {integrity: sha512-bnd9FSdWKx2ncklOetCgrlwqSGhMHP2zOxObJbOWXoj7GHEmih4MKarBo5/a8gX8EfA1EwRATdfNBQ81DY+h+w==}
+    engines: {node: '>= 20.19.4'}
+
+  '@react-native/dev-middleware@0.81.5':
+    resolution: {integrity: sha512-WfPfZzboYgo/TUtysuD5xyANzzfka8Ebni6RIb2wDxhb56ERi7qDrE4xGhtPsjCL4pQBXSVxyIlCy0d8I6EgGA==}
+    engines: {node: '>= 20.19.4'}
+
+  '@react-native/gradle-plugin@0.81.5':
+    resolution: {integrity: sha512-hORRlNBj+ReNMLo9jme3yQ6JQf4GZpVEBLxmTXGGlIL78MAezDZr5/uq9dwElSbcGmLEgeiax6e174Fie6qPLg==}
+    engines: {node: '>= 20.19.4'}
+
+  '@react-native/js-polyfills@0.81.5':
+    resolution: {integrity: sha512-fB7M1CMOCIUudTRuj7kzxIBTVw2KXnsgbQ6+4cbqSxo8NmRRhA0Ul4ZUzZj3rFd3VznTL4Brmocv1oiN0bWZ8w==}
+    engines: {node: '>= 20.19.4'}
+
+  '@react-native/normalize-colors@0.81.5':
+    resolution: {integrity: sha512-0HuJ8YtqlTVRXGZuGeBejLE04wSQsibpTI+RGOyVqxZvgtlLLC/Ssw0UmbHhT4lYMp2fhdtvKZSs5emWB1zR/g==}
+
+  '@react-native/polyfills@2.0.0':
+    resolution: {integrity: sha512-K0aGNn1TjalKj+65D7ycc1//H9roAQ51GJVk5ZJQFb2teECGmzd86bYDC0aYdbRf7gtovescq4Zt6FR0tgXiHQ==}
+
+  '@react-native/virtualized-lists@0.81.5':
+    resolution: {integrity: sha512-UVXgV/db25OPIvwZySeToXD/9sKKhOdkcWmmf4Jh8iBZuyfML+/5CasaZ1E7Lqg6g3uqVQq75NqIwkYmORJMPw==}
+    engines: {node: '>= 20.19.4'}
+    peerDependencies:
+      '@types/react': ^19.1.0
+      react: 19.1.0
+      react-native: '*'
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@react-navigation/bottom-tabs@7.9.0':
+    resolution: {integrity: sha512-024FWdHp3ZsE5rP8tmGI4vh+1z3wg8u8E9Frep8eeGoYo1h9rQhvgofQDGxknmrKsb7t8o8Dim+IZSvl57cPFQ==}
+    peerDependencies:
+      '@react-navigation/native': ^7.1.26
+      react: 19.1.0
+      react-native: '*'
+      react-native-safe-area-context: '>= 4.0.0'
+      react-native-screens: '>= 4.0.0'
+
+  '@react-navigation/core@7.13.7':
+    resolution: {integrity: sha512-k2ABo3250vq1ovOh/iVwXS6Hwr5PVRGXoPh/ewVFOOuEKTvOx9i//OBzt8EF+HokBxS2HBRlR2b+aCOmscRqBw==}
+    peerDependencies:
+      react: 19.1.0
+
+  '@react-navigation/elements@2.9.3':
+    resolution: {integrity: sha512-3+eyvWiVPIEf6tN9UdduhOEHcTuNe3R5WovgiVkfH9+jApHMTZDc2loePTpY/i2HDJhObhhChpJzO6BVjrpdYQ==}
+    peerDependencies:
+      '@react-native-masked-view/masked-view': '>= 0.2.0'
+      '@react-navigation/native': ^7.1.26
+      react: 19.1.0
+      react-native: '*'
+      react-native-safe-area-context: '>= 4.0.0'
+    peerDependenciesMeta:
+      '@react-native-masked-view/masked-view':
+        optional: true
+
+  '@react-navigation/native-stack@7.9.0':
+    resolution: {integrity: sha512-C/mNPhI0Pnerl7C2cB+6fAkdgSmfKECMERrbyfjx3P6JmEuTC54o+GV1c62FUmlRaRUassVHbtw4EeaY2uLh0g==}
+    peerDependencies:
+      '@react-navigation/native': ^7.1.26
+      react: 19.1.0
+      react-native: '*'
+      react-native-safe-area-context: '>= 4.0.0'
+      react-native-screens: '>= 4.0.0'
+
+  '@react-navigation/native@7.1.26':
+    resolution: {integrity: sha512-RhKmeD0E2ejzKS6z8elAfdfwShpcdkYY8zJzvHYLq+wv183BBcElTeyMLcIX6wIn7QutXeI92Yi21t7aUWfqNQ==}
+    peerDependencies:
+      react: 19.1.0
+      react-native: '*'
+
+  '@react-navigation/routers@7.5.3':
+    resolution: {integrity: sha512-1tJHg4KKRJuQ1/EvJxatrMef3NZXEPzwUIUZ3n1yJ2t7Q97siwRtbynRpQG9/69ebbtiZ8W3ScOZF/OmhvM4Rg==}
+
+  '@rolldown/pluginutils@1.0.0-rc.3':
+    resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
+
+  '@rollup/rollup-android-arm-eabi@4.59.0':
+    resolution: {integrity: sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==}
+    cpu: [arm]
+    os: [android]
+
+  '@rollup/rollup-android-arm64@4.59.0':
+    resolution: {integrity: sha512-hZ+Zxj3SySm4A/DylsDKZAeVg0mvi++0PYVceVyX7hemkw7OreKdCvW2oQ3T1FMZvCaQXqOTHb8qmBShoqk69Q==}
+    cpu: [arm64]
+    os: [android]
+
+  '@rollup/rollup-darwin-arm64@4.59.0':
+    resolution: {integrity: sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@rollup/rollup-darwin-x64@4.59.0':
+    resolution: {integrity: sha512-ZW2KkwlS4lwTv7ZVsYDiARfFCnSGhzYPdiOU4IM2fDbL+QGlyAbjgSFuqNRbSthybLbIJ915UtZBtmuLrQAT/w==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@rollup/rollup-freebsd-arm64@4.59.0':
+    resolution: {integrity: sha512-EsKaJ5ytAu9jI3lonzn3BgG8iRBjV4LxZexygcQbpiU0wU0ATxhNVEpXKfUa0pS05gTcSDMKpn3Sx+QB9RlTTA==}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@rollup/rollup-freebsd-x64@4.59.0':
+    resolution: {integrity: sha512-d3DuZi2KzTMjImrxoHIAODUZYoUUMsuUiY4SRRcJy6NJoZ6iIqWnJu9IScV9jXysyGMVuW+KNzZvBLOcpdl3Vg==}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@rollup/rollup-linux-arm-gnueabihf@4.59.0':
+    resolution: {integrity: sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==}
+    cpu: [arm]
+    os: [linux]
+
+  '@rollup/rollup-linux-arm-musleabihf@4.59.0':
+    resolution: {integrity: sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==}
+    cpu: [arm]
+    os: [linux]
+
+  '@rollup/rollup-linux-arm64-gnu@4.59.0':
+    resolution: {integrity: sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rollup/rollup-linux-arm64-musl@4.59.0':
+    resolution: {integrity: sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rollup/rollup-linux-loong64-gnu@4.59.0':
+    resolution: {integrity: sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==}
+    cpu: [loong64]
+    os: [linux]
+
+  '@rollup/rollup-linux-loong64-musl@4.59.0':
+    resolution: {integrity: sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==}
+    cpu: [loong64]
+    os: [linux]
+
+  '@rollup/rollup-linux-ppc64-gnu@4.59.0':
+    resolution: {integrity: sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==}
+    cpu: [ppc64]
+    os: [linux]
 
   '@rollup/rollup-linux-ppc64-musl@4.59.0':
     resolution: {integrity: sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==}
@@ -3310,6 +4142,17 @@ packages:
   '@rtsao/scc@1.1.0':
     resolution: {integrity: sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g==}
 
+  '@shadcn/react@0.2.1':
+    resolution: {integrity: sha512-5krgi3dRMKb5jH6a+qPzVJUy/54s0kKE4Rw4LjDfLqOdVQTWKUgxWf1kW8r912I0jX/Lzxqc+pgjkjWxUIK5BQ==}
+    peerDependencies:
+      '@types/react': '>=19'
+      react: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      react:
+        optional: true
+
   '@sinclair/typebox@0.27.8':
     resolution: {integrity: sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==}
 
@@ -3334,6 +4177,9 @@ packages:
   '@standard-schema/spec@1.1.0':
     resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
 
+  '@standard-schema/utils@0.3.0':
+    resolution: {integrity: sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g==}
+
   '@tailwindcss/node@4.3.0':
     resolution: {integrity: sha512-aFb4gUhFOgdh9AXo4IzBEOzBkkAxm9VigwDJnMIYv3lcfXCJVesNfbEaBl4BNgVRyid92AmdviqwBUBRKSeY3g==}
 
@@ -3494,6 +4340,33 @@ packages:
   '@types/chai@5.2.3':
     resolution: {integrity: sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==}
 
+  '@types/d3-array@3.2.2':
+    resolution: {integrity: sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw==}
+
+  '@types/d3-color@3.1.3':
+    resolution: {integrity: sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A==}
+
+  '@types/d3-ease@3.0.2':
+    resolution: {integrity: sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA==}
+
+  '@types/d3-interpolate@3.0.4':
+    resolution: {integrity: sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA==}
+
+  '@types/d3-path@3.1.1':
+    resolution: {integrity: sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg==}
+
+  '@types/d3-scale@4.0.9':
+    resolution: {integrity: sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw==}
+
+  '@types/d3-shape@3.1.8':
+    resolution: {integrity: sha512-lae0iWfcDeR7qt7rA88BNiqdvPS5pFVPpo5OfjElwNaT2yyekbM0C9vK+yqBqEmHr6lDkRnYNoTBYlAgJa7a4w==}
+
+  '@types/d3-time@3.0.4':
+    resolution: {integrity: sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g==}
+
+  '@types/d3-timer@3.0.2':
+    resolution: {integrity: sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==}
+
   '@types/debug@4.1.12':
     resolution: {integrity: sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==}
 
@@ -4336,6 +5209,9 @@ packages:
   cjs-module-lexer@1.4.3:
     resolution: {integrity: sha512-9z8TZaGM1pfswYeXrUpzPrkx8UnWYdhJclsiYMm6x/w5+nN+8Tf/LnAgfLGQCm59qAOxU8WwHEq2vNwF6i4j+Q==}
 
+  class-variance-authority@0.7.1:
+    resolution: {integrity: sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg==}
+
   cli-cursor@2.1.0:
     resolution: {integrity: sha512-8lgKz8LmCRYZZQDpRyT2m5rKJ08TnU4tR9FFFW2rxpxR1FzWi4PQ/NfyODchAatHaUgnSPVcx/R5w6NuTBzFiw==}
     engines: {node: '>=4'}
@@ -4355,10 +5231,20 @@ packages:
     resolution: {integrity: sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==}
     engines: {node: '>=0.8'}
 
+  clsx@2.1.1:
+    resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
+    engines: {node: '>=6'}
+
   cluster-key-slot@1.1.2:
     resolution: {integrity: sha512-RMr0FhtfXemyinomL4hrWcYJxmX6deFdCxpJzhDttxgO1+bcCnkk+9drydLVDmAMG7NE6aN/fl4F7ucU/90gAA==}
     engines: {node: '>=0.10.0'}
 
+  cmdk@1.1.1:
+    resolution: {integrity: sha512-Vsv7kFaXm+ptHDMZ7izaRsP70GgrW9NBNGswt9OZaVBLlE0SNpDq8eu/VGXyF9r7M0azK3Wy7OlYXsuyYLFzHg==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
   co@4.6.0:
     resolution: {integrity: sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==}
     engines: {iojs: '>= 1.0.0', node: '>= 0.12.0'}
@@ -4376,6 +5262,9 @@ packages:
     resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
     engines: {node: '>=7.0.0'}
 
+  color-hash@2.0.2:
+    resolution: {integrity: sha512-6exeENAqBTuIR1wIo36mR8xVVBv6l1hSLd7Qmvf6158Ld1L15/dbahR9VUOiX7GmGJBCnQyS0EY+I8x+wa7egg==}
+
   color-name@1.1.3:
     resolution: {integrity: sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==}
 
@@ -4489,6 +5378,50 @@ packages:
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
+  d3-array@3.2.4:
+    resolution: {integrity: sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==}
+    engines: {node: '>=12'}
+
+  d3-color@3.1.0:
+    resolution: {integrity: sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==}
+    engines: {node: '>=12'}
+
+  d3-ease@3.0.1:
+    resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==}
+    engines: {node: '>=12'}
+
+  d3-format@3.1.2:
+    resolution: {integrity: sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg==}
+    engines: {node: '>=12'}
+
+  d3-interpolate@3.0.1:
+    resolution: {integrity: sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==}
+    engines: {node: '>=12'}
+
+  d3-path@3.1.0:
+    resolution: {integrity: sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==}
+    engines: {node: '>=12'}
+
+  d3-scale@4.0.2:
+    resolution: {integrity: sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==}
+    engines: {node: '>=12'}
+
+  d3-shape@3.2.0:
+    resolution: {integrity: sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==}
+    engines: {node: '>=12'}
+
+  d3-time-format@4.1.0:
+    resolution: {integrity: sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg==}
+    engines: {node: '>=12'}
+
+  d3-time@3.1.0:
+    resolution: {integrity: sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q==}
+    engines: {node: '>=12'}
+
+  d3-timer@3.0.1:
+    resolution: {integrity: sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==}
+    engines: {node: '>=12'}
+
   data-urls@3.0.2:
     resolution: {integrity: sha512-Jy/tj3ldjZJo63sVAvg6LHt2mHvl4V6AgRAmNDtLdm7faqtsx+aJG42rsyCo9JCoRVKwPFzKlIPx3DIibwSIaQ==}
     engines: {node: '>=12'}
@@ -4505,6 +5438,9 @@ packages:
     resolution: {integrity: sha512-BS8PfmtDGnrgYdOonGZQdLZslWIeCGFP9tpan0hi1Co2Zr2NKADsvGYA8XxuG/4UWgJ6Cjtv+YJnB6MM69QGlQ==}
     engines: {node: '>= 0.4'}
 
+  date-fns@4.4.0:
+    resolution: {integrity: sha512-+1UMbeh68lH1SegH83CGWwpb6OHHbpSgr3+s5Eww5M4CAgswBpoWS0AjTOfEJ33HiYKz1hdj/KTFprzXHmq/6w==}
+
   debug@2.6.9:
     resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
     peerDependencies:
@@ -4530,6 +5466,9 @@ packages:
       supports-color:
         optional: true
 
+  decimal.js-light@2.5.1:
+    resolution: {integrity: sha512-qIMFpTMZmny+MMIitAB6D7iVPEorVw6YQRWkvarTkT4tBeSLLiHzcwj6q0MmYSFCiVpiqPJTJEYIrpcPzVEIvg==}
+
   decimal.js@10.6.0:
     resolution: {integrity: sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==}
 
@@ -4616,6 +5555,9 @@ packages:
     resolution: {integrity: sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==}
     engines: {node: '>=0.10.0'}
 
+  dom-helpers@5.2.1:
+    resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
+
   dom-serializer@2.0.0:
     resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
 
@@ -4679,6 +5621,19 @@ packages:
   electron-to-chromium@1.5.267:
     resolution: {integrity: sha512-0Drusm6MVRXSOJpGbaSVgcQsuB4hEkMpHXaVstcPmhu5LIedxs1xNK/nIxmQIU/RPC0+1/o0AVZfBTkTNJOdUw==}
 
+  embla-carousel-react@8.6.0:
+    resolution: {integrity: sha512-0/PjqU7geVmo6F734pmPqpyHqiM99olvyecY7zdweCw+6tKEXnrE90pBiBbMMU8s5tICemzpQ3hi5EpxzGW+JA==}
+    peerDependencies:
+      react: 19.1.0
+
+  embla-carousel-reactive-utils@8.6.0:
+    resolution: {integrity: sha512-fMVUDUEx0/uIEDM0Mz3dHznDhfX+znCCDCeIophYb1QGVM7YThSWX+wz11zlYwWFOr74b4QLGg0hrGPJeG2s4A==}
+    peerDependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel@8.6.0:
+    resolution: {integrity: sha512-SjWyZBHJPbqxHOzckOfo8lHisEaJWmwd23XppYFYVh10bU66/Pn5tkVkbkCMZVdbUE5eTCI2nD8OyIP4Z+uwkA==}
+
   emittery@0.13.1:
     resolution: {integrity: sha512-DeWwawk6r5yR9jFgnDKYt4sLS0LmHJJi3ZOnb5/JdbYwj3nW+FxQnHIjhBKz8YLC7oRNPVM9NQ47I3CVx34eqQ==}
     engines: {node: '>=12'}
@@ -5007,6 +5962,9 @@ packages:
     resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==}
     engines: {node: '>=6'}
 
+  eventemitter3@4.0.7:
+    resolution: {integrity: sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==}
+
   exec-async@2.2.0:
     resolution: {integrity: sha512-87OpwcEiMia/DeiKFzaQNBNFeN3XkkpYIh9FyOqq5mS2oKv3CBE67PXoEKcr6nodWdXNogTiQ0jE2NGuoffXPw==}
 
@@ -5209,6 +6167,10 @@ packages:
   fast-diff@1.3.0:
     resolution: {integrity: sha512-VxPP4NqbUjj6MaAOafWeUn2cXWLcCtljklUtZf0Ind4XQ+QPtmA0b18zZy0jIQx+ExRVCR/ZQpBmik5lXshNsw==}
 
+  fast-equals@5.4.1:
+    resolution: {integrity: sha512-DjlFSM5Pk9cGcL0q5QXl66eGzx0N6szNgaswwc5ZphlBohjTVJSnGgI+rJVOgOi65qUoQnDZN4nDqi33udtydQ==}
+    engines: {node: '>=6.0.0'}
+
   fast-glob@3.3.3:
     resolution: {integrity: sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==}
     engines: {node: '>=8.6.0'}
@@ -5563,10 +6525,20 @@ packages:
     resolution: {integrity: sha512-ifK0CgjALofS5bkrcTy4RaQ9Vx2Knf/eLeIO+NaswQEpH1UblrtTSCIvN71qQDMq0PeQ/SSPojvEJp9vvvfr+w==}
     engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
 
+  input-otp@1.4.2:
+    resolution: {integrity: sha512-l3jWwYNvrEa6NTCt7BECfCm48GvwuZzkoeG3gBL2w4CHeOXW3eKFmf9UNYkNfYc3mxMrthMnxjIE07MT0zLBQA==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
   internal-slot@1.1.0:
     resolution: {integrity: sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==}
     engines: {node: '>= 0.4'}
 
+  internmap@2.0.3:
+    resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==}
+    engines: {node: '>=12'}
+
   invariant@2.2.4:
     resolution: {integrity: sha512-phJfQVBuaJM5raOpJjSfkiD6BpbCE4Ns//LaXl6wGYtUBY83nWS6Rf9tXm2e8VaK60JEjYldbPif/A2B1C2gNA==}
 
@@ -6232,6 +7204,11 @@ packages:
     resolution: {integrity: sha512-DqC6n3QQ77zdFpCMASA1a3Jlb64Hv2N2DciFGkO/4L9+q/IpIAuRlKOvCXabtRW6cQf8usbmM6BE/TOPysCdIA==}
     engines: {bun: '>=1.0.0', deno: '>=1.30.0', node: '>=8.0.0'}
 
+  lucide-react@0.555.0:
+    resolution: {integrity: sha512-D8FvHUGbxWBRQM90NZeIyhAvkFfsh3u9ekrMvJ30Z6gnpBHS6HC6ldLg7tL45hwiIz/u66eKDtdA23gwwGsAHA==}
+    peerDependencies:
+      react: 19.1.0
+
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
@@ -6466,6 +7443,12 @@ packages:
   nested-error-stacks@2.0.1:
     resolution: {integrity: sha512-SrQrok4CATudVzBS7coSz26QRSmlK9TzzoFbeKfcPBUFPjcQM9Rqvr/DlJkOrwI/0KcgvMub1n1g5Jt9EgRn4A==}
 
+  next-themes@0.4.6:
+    resolution: {integrity: sha512-pZvgD5L0IEvX5/9GWyHMf3m8BKiVQwsCMHfoFosXtXBMnaS0ZnIJ9ST4b4NqLVKDEm8QBxoNNGNaBv2JNF6XNA==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
   nitro-codegen@0.26.4:
     resolution: {integrity: sha512-qTOvyfE6+kz0wuqPpRlKc6F6ZNOI3elK7ltOTvxMZSG3Y8tt43UrV5xkp4XgL9Jc1P90iBLU6mDYRiNqoNA2+g==}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
@@ -6842,6 +7825,19 @@ packages:
   queue@6.0.2:
     resolution: {integrity: sha512-iHZWu+q3IdFZFX36ro/lKBkSvfkztY5Y7HMiPlOUjhupPcG2JMfst2KKEpu5XndviX/3UhFbRngUPNKtgvtZiA==}
 
+  radix-ui@1.6.2:
+    resolution: {integrity: sha512-OwYUjzMwiInCUxgAWpPsavXC3Kh4iyi/49uU1/qZTG3RQDlvegyk1GOMiGvSkjua1RDb3JD3fo3eroL9FV4GQw==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
   range-parser@1.2.1:
     resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
     engines: {node: '>= 0.6'}
@@ -6853,6 +7849,12 @@ packages:
     resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
     hasBin: true
 
+  react-day-picker@8.10.1:
+    resolution: {integrity: sha512-TMx7fNbhLk15eqcMt+7Z7S2KF7mfTId/XJDjKE8f+IUcFn0l08/kI4FiYTL/0yuOLmEcbR4Fwe3GJf/NiiMnPA==}
+    peerDependencies:
+      date-fns: ^2.28.0 || ^3.0.0
+      react: 19.1.0
+
   react-devtools-core@6.1.5:
     resolution: {integrity: sha512-ePrwPfxAnB+7hgnEr8vpKxL9cmnp7F322t8oqcPshbIQQhDKgFDW4tjhF2wjVbdXF9O/nyuy3sQWd9JGpiLPvA==}
 
@@ -6875,6 +7877,12 @@ packages:
     peerDependencies:
       react: 19.1.0
 
+  react-hook-form@7.81.0:
+    resolution: {integrity: sha512-ocbmr2p5KBMoAfj4WCUvped33lVi1Kd5DuDUvQDnB6VEAacOjPI/jMbtDdbhco4y9ct4xUuCmMY0b/C9L0QHjw==}
+    engines: {node: '>=18.0.0'}
+    peerDependencies:
+      react: 19.1.0
+
   react-is@16.13.1:
     resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==}
 
@@ -6974,6 +7982,18 @@ packages:
       '@types/react':
         optional: true
 
+  react-resizable-panels@3.0.6:
+    resolution: {integrity: sha512-b3qKHQ3MLqOgSS+FRYKapNkJZf5EQzuf6+RLiq1/IlTHw99YrZ2NJZLk4hQIzTnnIkRg2LUqyVinu6YWWpUYew==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
+  react-smooth@4.0.4:
+    resolution: {integrity: sha512-gnGKTpYwqL0Iii09gHobNolvX4Kiq4PKx6eWBCYYix+8cdw+cGo3do906l1NBPKkSWx1DghC1dlWG9L2uGd61Q==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
   react-style-singleton@2.2.3:
     resolution: {integrity: sha512-b6jSvxvVnyptAiLjbkWLE/lOnR4lfTtDAl+eUC7RZy+QQWc6wRzIV2CE6xBuMmDxc2qIihtDCZD5NPOFl7fRBQ==}
     engines: {node: '>=10'}
@@ -6989,6 +8009,12 @@ packages:
     peerDependencies:
       react: 19.1.0
 
+  react-transition-group@4.4.5:
+    resolution: {integrity: sha512-pZcd1MCJoiKiBR2NRxeCRg13uCXbydPnmB4EOeRrY7480qNWO8IIgQG6zlDkm6uRMsURXPuKq0GWtiM59a5Q6g==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
   react@19.1.0:
     resolution: {integrity: sha512-FS+XFBNvn3GTAWq26joslQgWNoFu08F4kl0J4CgdNKADkdSGXQyTCnKteIAJy96Br6YbpEU1LSzV5dYtjMkMDg==}
     engines: {node: '>=0.10.0'}
@@ -7005,6 +8031,17 @@ packages:
     resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
     engines: {node: '>= 20.19.0'}
 
+  recharts-scale@0.4.5:
+    resolution: {integrity: sha512-kivNFO+0OcUNu7jQquLXAxz1FIwZj8nrj+YkOKc5694NbjCvcT6aSZiIzNzd2Kul4o4rTto8QVR9lMNtxD4G1w==}
+
+  recharts@2.15.4:
+    resolution: {integrity: sha512-UT/q6fwS3c1dHbXv2uFgYJ9BMFHu3fwnd7AYZaEQhXuYQ4hgsxLvsUXzGdKeZrW5xopzDCvuA2N41WJ88I7zIw==}
+    engines: {node: '>=14'}
+    deprecated: 1.x and 2.x branches are no longer active. Bump to Recharts v3 to receive latest features and bugfixes. See https://github.com/recharts/recharts/wiki/3.0-migration-guide
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
   redent@3.0.0:
     resolution: {integrity: sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==}
     engines: {node: '>=8'}
@@ -7071,6 +8108,9 @@ packages:
   requires-port@1.0.0:
     resolution: {integrity: sha512-KigOCHcocU3XODJxsu8i/j8T9tzT4adHiecwORRQ0ZZFcp7ahwXuRU1m+yuO90C5ZUyGeGfocHDI14M3L3yDAQ==}
 
+  reselect@5.2.0:
+    resolution: {integrity: sha512-AgZ3UOZm3YndfrJ4OYjgrT7bmCm/1iqkjvEfH/oYjzh6PD2qw4QuT3jjnXIrpdt4MTpMXclMT3lXbmRY+XRakw==}
+
   resolve-cwd@3.0.0:
     resolution: {integrity: sha512-OrZaX2Mb+rJCpH/6CpSqt9xFVpN++x01XnN2ie9g6P5/3xelLAkXWVADpdz1IHD/KFfEXyE6V0U01OQ3UO2rEg==}
     engines: {node: '>=8'}
@@ -7298,6 +8338,12 @@ packages:
     resolution: {integrity: sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw==}
     engines: {node: '>=8.0.0'}
 
+  sonner@2.0.7:
+    resolution: {integrity: sha512-W6ZN4p58k8aDKA4XPcx2hpIQXBRAgyiWVkYhT7CvK6D3iAu7xjvVyhQHg2/iaKJZ1XVJ4r7XuwGL+WGEK37i9w==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
   source-map-js@1.2.1:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
@@ -7495,6 +8541,9 @@ packages:
     resolution: {integrity: sha512-MeQTA1r0litLUf0Rp/iisCaL8761lKAZHaimlbGK4j0HysC4PLfqygQj9srcs0m2RdtDYnF8UuYyKpbjHYp7Jw==}
     engines: {node: ^14.18.0 || >=16.0.0}
 
+  tailwind-merge@3.6.0:
+    resolution: {integrity: sha512-uxL7qAVQriqRQPAyK3pj66VqskWqoZ37PW94jwOTwNfq/z9oyu1V+eqrZqtR2+fCiXdYOZe/Modt8GtvqNzu+w==}
+
   tailwindcss@4.3.0:
     resolution: {integrity: sha512-y6nxMGB1nMW9R6k96e5gdIFzcfL/gTJRNaqGes1YvkLnPVXzWgbqFF2yLC0T8G774n24cx3Pe8XrKoniCOAH+Q==}
 
@@ -7541,6 +8590,9 @@ packages:
   throat@5.0.0:
     resolution: {integrity: sha512-fcwX4mndzpLQKBS1DVYhGAcYaYt7vsHNIvQV+WXMvnow5cgjPphq5CaayLaGsjRdSCKZFNGt7/GYAuXaNOiYCA==}
 
+  tiny-invariant@1.3.3:
+    resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
+
   tinybench@2.9.0:
     resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}
 
@@ -7688,6 +8740,9 @@ packages:
     resolution: {integrity: sha512-GQpduILaKjoaGljw097ScsSyKTtZSY7cZ3bJktzfTkPMyCf3ShKLuXK2IaOEN2Plziml+ArR7WJ1m+V4VbnaKQ==}
     hasBin: true
 
+  tw-animate-css@1.4.0:
+    resolution: {integrity: sha512-7bziOlRqH0hJx80h/3mbicLW7o8qLsH5+RaLR2t+OHM3D0JlWGODQKQ4cxbK7WlvmUxpcj6Kgu6EKqjrGFe3QQ==}
+
   type-check@0.4.0:
     resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==}
     engines: {node: '>= 0.8.0'}
@@ -7819,6 +8874,12 @@ packages:
       '@types/react':
         optional: true
 
+  use-debounce@10.1.1:
+    resolution: {integrity: sha512-kvds8BHR2k28cFsxW8k3nc/tRga2rs1RHYCqmmGqb90MEeE++oALwzh2COiuBLO1/QXiOuShXoSN2ZpWnMmvuQ==}
+    engines: {node: '>= 16.0.0'}
+    peerDependencies:
+      react: 19.1.0
+
   use-latest-callback@0.2.6:
     resolution: {integrity: sha512-FvRG9i1HSo0wagmX63Vrm8SnlUU3LMM3WyZkQ76RnslpBrX694AdG4A0zQBx2B3ZifFA0yv/BaEHGBnEax5rZg==}
     peerDependencies:
@@ -7869,6 +8930,9 @@ packages:
       react: 19.1.0
       react-dom: 19.1.0
 
+  victory-vendor@36.9.2:
+    resolution: {integrity: sha512-PnpQQMuxlwYdocC8fIJqVXvkeViHYzotI+NJrCuav0ZYFoq912ZHBk3mCeuj+5/VpodOjPe1z0Fk2ihgzlXqjQ==}
+
   vite-node@3.2.4:
     resolution: {integrity: sha512-EbKSKh+bh1E1IFxeO0pg1n4dvoOTt0UDiXMd/qn++r98+jPO1xtJilvXldeuQ8giIB5IkpjCgMleHMNEsGH6pg==}
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
@@ -9165,6 +10229,8 @@ snapshots:
 
   '@babel/runtime@7.28.4': {}
 
+  '@babel/runtime@7.29.7': {}
+
   '@babel/template@7.27.2':
     dependencies:
       '@babel/code-frame': 7.29.0
@@ -9222,6 +10288,30 @@ snapshots:
       '@babel/helper-string-parser': 7.29.7
       '@babel/helper-validator-identifier': 7.29.7
 
+  '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@base-ui/utils': 0.3.1(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@floating-ui/utils': 0.2.12
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      use-sync-external-store: 1.6.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      date-fns: 4.4.0
+
+  '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@floating-ui/utils': 0.2.12
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      reselect: 5.2.0
+      use-sync-external-store: 1.6.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@bcoe/v8-coverage@0.2.3': {}
 
   '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
@@ -9569,1163 +10659,2006 @@ snapshots:
   '@esbuild/linux-loong64@0.25.12':
     optional: true
 
-  '@esbuild/linux-loong64@0.27.2':
+  '@esbuild/linux-loong64@0.27.2':
+    optional: true
+
+  '@esbuild/linux-loong64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-loong64@0.28.1':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.25.0':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.25.12':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.27.2':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.27.7':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.28.1':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.25.0':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.27.2':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.28.1':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.25.0':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.27.2':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.28.1':
+    optional: true
+
+  '@esbuild/linux-s390x@0.25.0':
+    optional: true
+
+  '@esbuild/linux-s390x@0.25.12':
+    optional: true
+
+  '@esbuild/linux-s390x@0.27.2':
+    optional: true
+
+  '@esbuild/linux-s390x@0.27.7':
+    optional: true
+
+  '@esbuild/linux-s390x@0.28.1':
+    optional: true
+
+  '@esbuild/linux-x64@0.25.0':
+    optional: true
+
+  '@esbuild/linux-x64@0.25.12':
+    optional: true
+
+  '@esbuild/linux-x64@0.27.2':
+    optional: true
+
+  '@esbuild/linux-x64@0.27.7':
+    optional: true
+
+  '@esbuild/linux-x64@0.28.1':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.25.0':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.27.2':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.28.1':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.25.0':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.27.2':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.27.7':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.28.1':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.25.0':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.25.12':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.27.2':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.27.7':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.28.1':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.25.0':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.25.12':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.27.2':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.27.7':
     optional: true
 
-  '@esbuild/linux-loong64@0.27.7':
+  '@esbuild/openbsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/linux-loong64@0.28.1':
+  '@esbuild/openharmony-arm64@0.25.12':
     optional: true
 
-  '@esbuild/linux-mips64el@0.25.0':
+  '@esbuild/openharmony-arm64@0.27.2':
     optional: true
 
-  '@esbuild/linux-mips64el@0.25.12':
+  '@esbuild/openharmony-arm64@0.27.7':
     optional: true
 
-  '@esbuild/linux-mips64el@0.27.2':
+  '@esbuild/openharmony-arm64@0.28.1':
     optional: true
 
-  '@esbuild/linux-mips64el@0.27.7':
+  '@esbuild/sunos-x64@0.25.0':
     optional: true
 
-  '@esbuild/linux-mips64el@0.28.1':
+  '@esbuild/sunos-x64@0.25.12':
     optional: true
 
-  '@esbuild/linux-ppc64@0.25.0':
+  '@esbuild/sunos-x64@0.27.2':
     optional: true
 
-  '@esbuild/linux-ppc64@0.25.12':
+  '@esbuild/sunos-x64@0.27.7':
     optional: true
 
-  '@esbuild/linux-ppc64@0.27.2':
+  '@esbuild/sunos-x64@0.28.1':
     optional: true
 
-  '@esbuild/linux-ppc64@0.27.7':
+  '@esbuild/win32-arm64@0.25.0':
     optional: true
 
-  '@esbuild/linux-ppc64@0.28.1':
+  '@esbuild/win32-arm64@0.25.12':
     optional: true
 
-  '@esbuild/linux-riscv64@0.25.0':
+  '@esbuild/win32-arm64@0.27.2':
     optional: true
 
-  '@esbuild/linux-riscv64@0.25.12':
+  '@esbuild/win32-arm64@0.27.7':
     optional: true
 
-  '@esbuild/linux-riscv64@0.27.2':
+  '@esbuild/win32-arm64@0.28.1':
     optional: true
 
-  '@esbuild/linux-riscv64@0.27.7':
+  '@esbuild/win32-ia32@0.25.0':
     optional: true
 
-  '@esbuild/linux-riscv64@0.28.1':
+  '@esbuild/win32-ia32@0.25.12':
     optional: true
 
-  '@esbuild/linux-s390x@0.25.0':
+  '@esbuild/win32-ia32@0.27.2':
     optional: true
 
-  '@esbuild/linux-s390x@0.25.12':
+  '@esbuild/win32-ia32@0.27.7':
     optional: true
 
-  '@esbuild/linux-s390x@0.27.2':
+  '@esbuild/win32-ia32@0.28.1':
     optional: true
 
-  '@esbuild/linux-s390x@0.27.7':
+  '@esbuild/win32-x64@0.25.0':
     optional: true
 
-  '@esbuild/linux-s390x@0.28.1':
+  '@esbuild/win32-x64@0.25.12':
     optional: true
 
-  '@esbuild/linux-x64@0.25.0':
+  '@esbuild/win32-x64@0.27.2':
     optional: true
 
-  '@esbuild/linux-x64@0.25.12':
+  '@esbuild/win32-x64@0.27.7':
     optional: true
 
-  '@esbuild/linux-x64@0.27.2':
+  '@esbuild/win32-x64@0.28.1':
     optional: true
 
-  '@esbuild/linux-x64@0.27.7':
-    optional: true
+  '@eslint-community/eslint-utils@4.9.0(eslint@9.39.2(jiti@2.6.1))':
+    dependencies:
+      eslint: 9.39.2(jiti@2.6.1)
+      eslint-visitor-keys: 3.4.3
+
+  '@eslint-community/regexpp@4.12.2': {}
+
+  '@eslint/config-array@0.21.1':
+    dependencies:
+      '@eslint/object-schema': 2.1.7
+      debug: 4.4.3
+      minimatch: 3.1.4
+    transitivePeerDependencies:
+      - supports-color
+
+  '@eslint/config-helpers@0.4.2':
+    dependencies:
+      '@eslint/core': 0.17.0
+
+  '@eslint/core@0.17.0':
+    dependencies:
+      '@types/json-schema': 7.0.15
+
+  '@eslint/eslintrc@3.3.3':
+    dependencies:
+      ajv: 6.12.6
+      debug: 4.4.3
+      espree: 10.4.0
+      globals: 14.0.0
+      ignore: 5.3.2
+      import-fresh: 3.3.1
+      js-yaml: 4.2.0
+      minimatch: 3.1.4
+      strip-json-comments: 3.1.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@eslint/js@9.39.2': {}
+
+  '@eslint/object-schema@2.1.7': {}
+
+  '@eslint/plugin-kit@0.4.1':
+    dependencies:
+      '@eslint/core': 0.17.0
+      levn: 0.4.1
+
+  '@expo/cli@54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))':
+    dependencies:
+      '@0no-co/graphql.web': 1.2.0
+      '@expo/code-signing-certificates': 0.0.6
+      '@expo/config': 12.0.13
+      '@expo/config-plugins': 54.0.4
+      '@expo/devcert': 1.2.1
+      '@expo/env': 2.0.8
+      '@expo/image-utils': 0.8.8
+      '@expo/json-file': 10.0.8
+      '@expo/metro': 54.2.0
+      '@expo/metro-config': 54.0.14(expo@54.0.33)
+      '@expo/osascript': 2.3.8
+      '@expo/package-manager': 1.9.10
+      '@expo/plist': 0.4.8
+      '@expo/prebuild-config': 54.0.8(expo@54.0.33)
+      '@expo/schema-utils': 0.1.8
+      '@expo/spawn-async': 1.7.2
+      '@expo/ws-tunnel': 1.0.6
+      '@expo/xcpretty': 4.3.2
+      '@react-native/dev-middleware': 0.81.5
+      '@urql/core': 5.2.0
+      '@urql/exchange-retry': 1.3.2(@urql/core@5.2.0)
+      accepts: 1.3.8
+      arg: 5.0.2
+      better-opn: 3.0.2
+      bplist-creator: 0.1.0
+      bplist-parser: 0.3.2
+      chalk: 4.1.2
+      ci-info: 3.9.0
+      compression: 1.8.1
+      connect: 3.7.0
+      debug: 4.4.3
+      env-editor: 0.4.2
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-server: 1.0.5
+      freeport-async: 2.0.0
+      getenv: 2.0.0
+      glob: 13.0.0
+      lan-network: 0.1.7
+      minimatch: 9.0.7
+      node-forge: 1.4.0
+      npm-package-arg: 11.0.3
+      ora: 3.4.0
+      picomatch: 3.0.2
+      pretty-bytes: 5.6.0
+      pretty-format: 29.7.0
+      progress: 2.0.3
+      prompts: 2.4.2
+      qrcode-terminal: 0.11.0
+      require-from-string: 2.0.2
+      requireg: 0.2.2
+      resolve: 1.22.11
+      resolve-from: 5.0.0
+      resolve.exports: 2.0.3
+      semver: 7.7.4
+      send: 0.19.2
+      slugify: 1.6.6
+      source-map-support: 0.5.21
+      stacktrace-parser: 0.1.11
+      structured-headers: 0.4.1
+      tar: 7.5.19
+      terminal-link: 2.1.1
+      undici: 6.27.0
+      wrap-ansi: 7.0.0
+      ws: 8.21.0
+    optionalDependencies:
+      expo-router: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+    transitivePeerDependencies:
+      - bufferutil
+      - graphql
+      - supports-color
+      - utf-8-validate
+
+  '@expo/code-signing-certificates@0.0.6':
+    dependencies:
+      node-forge: 1.4.0
+
+  '@expo/config-plugins@54.0.4':
+    dependencies:
+      '@expo/config-types': 54.0.10
+      '@expo/json-file': 10.0.8
+      '@expo/plist': 0.4.8
+      '@expo/sdk-runtime-versions': 1.0.0
+      chalk: 4.1.2
+      debug: 4.4.3
+      getenv: 2.0.0
+      glob: 13.0.0
+      resolve-from: 5.0.0
+      semver: 7.7.4
+      slash: 3.0.0
+      slugify: 1.6.6
+      xcode: 3.0.1
+      xml2js: 0.6.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@expo/config-types@54.0.10': {}
+
+  '@expo/config@12.0.13':
+    dependencies:
+      '@babel/code-frame': 7.10.4
+      '@expo/config-plugins': 54.0.4
+      '@expo/config-types': 54.0.10
+      '@expo/json-file': 10.0.8
+      deepmerge: 4.3.1
+      getenv: 2.0.0
+      glob: 13.0.0
+      require-from-string: 2.0.2
+      resolve-from: 5.0.0
+      resolve-workspace-root: 2.0.0
+      semver: 7.7.3
+      slugify: 1.6.6
+      sucrase: 3.35.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@expo/devcert@1.2.1':
+    dependencies:
+      '@expo/sudo-prompt': 9.3.2
+      debug: 3.2.7
+    transitivePeerDependencies:
+      - supports-color
+
+  '@expo/devtools@0.1.8(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      chalk: 4.1.2
+    optionalDependencies:
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+
+  '@expo/env@2.0.8':
+    dependencies:
+      chalk: 4.1.2
+      debug: 4.4.3
+      dotenv: 16.4.7
+      dotenv-expand: 11.0.7
+      getenv: 2.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@expo/fingerprint@0.15.4':
+    dependencies:
+      '@expo/spawn-async': 1.7.2
+      arg: 5.0.2
+      chalk: 4.1.2
+      debug: 4.4.3
+      getenv: 2.0.0
+      glob: 13.0.0
+      ignore: 5.3.2
+      minimatch: 9.0.7
+      p-limit: 3.1.0
+      resolve-from: 5.0.0
+      semver: 7.7.4
+    transitivePeerDependencies:
+      - supports-color
 
-  '@esbuild/linux-x64@0.28.1':
-    optional: true
+  '@expo/image-utils@0.8.8':
+    dependencies:
+      '@expo/spawn-async': 1.7.2
+      chalk: 4.1.2
+      getenv: 2.0.0
+      jimp-compact: 0.16.1
+      parse-png: 2.1.0
+      resolve-from: 5.0.0
+      resolve-global: 1.0.0
+      semver: 7.7.4
+      temp-dir: 2.0.0
+      unique-string: 2.0.0
 
-  '@esbuild/netbsd-arm64@0.25.0':
-    optional: true
+  '@expo/json-file@10.0.8':
+    dependencies:
+      '@babel/code-frame': 7.10.4
+      json5: 2.2.3
 
-  '@esbuild/netbsd-arm64@0.25.12':
-    optional: true
+  '@expo/metro-config@54.0.14(expo@54.0.33)':
+    dependencies:
+      '@babel/code-frame': 7.29.0
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.1
+      '@expo/config': 12.0.13
+      '@expo/env': 2.0.8
+      '@expo/json-file': 10.0.8
+      '@expo/metro': 54.2.0
+      '@expo/spawn-async': 1.7.2
+      browserslist: 4.28.1
+      chalk: 4.1.2
+      debug: 4.4.3
+      dotenv: 16.4.7
+      dotenv-expand: 11.0.7
+      getenv: 2.0.0
+      glob: 13.0.0
+      hermes-parser: 0.29.1
+      jsc-safe-url: 0.2.4
+      lightningcss: 1.30.2
+      minimatch: 9.0.7
+      postcss: 8.5.10
+      resolve-from: 5.0.0
+    optionalDependencies:
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
 
-  '@esbuild/netbsd-arm64@0.27.2':
-    optional: true
+  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      anser: 1.4.10
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      pretty-format: 29.7.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      stacktrace-parser: 0.1.11
+      whatwg-fetch: 3.6.20
+    optionalDependencies:
+      react-dom: 19.1.1(react@19.1.0)
 
-  '@esbuild/netbsd-arm64@0.27.7':
-    optional: true
+  '@expo/metro@54.2.0':
+    dependencies:
+      metro: 0.83.3
+      metro-babel-transformer: 0.83.3
+      metro-cache: 0.83.3
+      metro-cache-key: 0.83.3
+      metro-config: 0.83.3
+      metro-core: 0.83.3
+      metro-file-map: 0.83.3
+      metro-minify-terser: 0.83.3
+      metro-resolver: 0.83.3
+      metro-runtime: 0.83.3
+      metro-source-map: 0.83.3
+      metro-symbolicate: 0.83.3
+      metro-transform-plugins: 0.83.3
+      metro-transform-worker: 0.83.3
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
 
-  '@esbuild/netbsd-arm64@0.28.1':
-    optional: true
+  '@expo/npm-proofread@1.0.1':
+    dependencies:
+      semver: 5.7.2
 
-  '@esbuild/netbsd-x64@0.25.0':
-    optional: true
+  '@expo/osascript@2.3.8':
+    dependencies:
+      '@expo/spawn-async': 1.7.2
+      exec-async: 2.2.0
 
-  '@esbuild/netbsd-x64@0.25.12':
-    optional: true
+  '@expo/package-manager@1.9.10':
+    dependencies:
+      '@expo/json-file': 10.0.8
+      '@expo/spawn-async': 1.7.2
+      chalk: 4.1.2
+      npm-package-arg: 11.0.3
+      ora: 3.4.0
+      resolve-workspace-root: 2.0.0
 
-  '@esbuild/netbsd-x64@0.27.2':
-    optional: true
+  '@expo/plist@0.4.8':
+    dependencies:
+      '@xmldom/xmldom': 0.8.13
+      base64-js: 1.5.1
+      xmlbuilder: 15.1.1
 
-  '@esbuild/netbsd-x64@0.27.7':
-    optional: true
+  '@expo/prebuild-config@54.0.8(expo@54.0.33)':
+    dependencies:
+      '@expo/config': 12.0.13
+      '@expo/config-plugins': 54.0.4
+      '@expo/config-types': 54.0.10
+      '@expo/image-utils': 0.8.8
+      '@expo/json-file': 10.0.8
+      '@react-native/normalize-colors': 0.81.5
+      debug: 4.4.3
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      resolve-from: 5.0.0
+      semver: 7.7.4
+      xml2js: 0.6.0
+    transitivePeerDependencies:
+      - supports-color
 
-  '@esbuild/netbsd-x64@0.28.1':
-    optional: true
+  '@expo/schema-utils@0.1.8': {}
 
-  '@esbuild/openbsd-arm64@0.25.0':
-    optional: true
+  '@expo/sdk-runtime-versions@1.0.0': {}
 
-  '@esbuild/openbsd-arm64@0.25.12':
-    optional: true
+  '@expo/spawn-async@1.7.2':
+    dependencies:
+      cross-spawn: 7.0.6
 
-  '@esbuild/openbsd-arm64@0.27.2':
-    optional: true
+  '@expo/sudo-prompt@9.3.2': {}
 
-  '@esbuild/openbsd-arm64@0.27.7':
-    optional: true
+  '@expo/vector-icons@15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  '@esbuild/openbsd-arm64@0.28.1':
-    optional: true
+  '@expo/ws-tunnel@1.0.6': {}
 
-  '@esbuild/openbsd-x64@0.25.0':
-    optional: true
+  '@expo/xcpretty@4.3.2':
+    dependencies:
+      '@babel/code-frame': 7.10.4
+      chalk: 4.1.2
+      find-up: 5.0.0
+      js-yaml: 4.2.0
 
-  '@esbuild/openbsd-x64@0.25.12':
-    optional: true
+  '@floating-ui/core@1.8.0':
+    dependencies:
+      '@floating-ui/utils': 0.2.12
 
-  '@esbuild/openbsd-x64@0.27.2':
-    optional: true
+  '@floating-ui/dom@1.8.0':
+    dependencies:
+      '@floating-ui/core': 1.8.0
+      '@floating-ui/utils': 0.2.12
 
-  '@esbuild/openbsd-x64@0.27.7':
-    optional: true
+  '@floating-ui/react-dom@2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@floating-ui/dom': 1.8.0
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
 
-  '@esbuild/openbsd-x64@0.28.1':
-    optional: true
+  '@floating-ui/utils@0.2.12': {}
 
-  '@esbuild/openharmony-arm64@0.25.12':
-    optional: true
+  '@hookform/resolvers@5.4.0(react-hook-form@7.81.0(react@19.1.0))':
+    dependencies:
+      '@standard-schema/utils': 0.3.0
+      react-hook-form: 7.81.0(react@19.1.0)
 
-  '@esbuild/openharmony-arm64@0.27.2':
-    optional: true
+  '@humanfs/core@0.19.1': {}
 
-  '@esbuild/openharmony-arm64@0.27.7':
-    optional: true
+  '@humanfs/node@0.16.7':
+    dependencies:
+      '@humanfs/core': 0.19.1
+      '@humanwhocodes/retry': 0.4.3
 
-  '@esbuild/openharmony-arm64@0.28.1':
-    optional: true
+  '@humanwhocodes/module-importer@1.0.1': {}
 
-  '@esbuild/sunos-x64@0.25.0':
-    optional: true
+  '@humanwhocodes/retry@0.4.3': {}
 
-  '@esbuild/sunos-x64@0.25.12':
-    optional: true
+  '@ioredis/commands@1.5.0': {}
 
-  '@esbuild/sunos-x64@0.27.2':
-    optional: true
+  '@isaacs/fs-minipass@4.0.1':
+    dependencies:
+      minipass: 7.1.2
 
-  '@esbuild/sunos-x64@0.27.7':
-    optional: true
+  '@isaacs/ttlcache@1.4.1': {}
 
-  '@esbuild/sunos-x64@0.28.1':
-    optional: true
+  '@istanbuljs/load-nyc-config@1.1.0':
+    dependencies:
+      camelcase: 5.3.1
+      find-up: 4.1.0
+      get-package-type: 0.1.0
+      js-yaml: 3.15.0
+      resolve-from: 5.0.0
 
-  '@esbuild/win32-arm64@0.25.0':
-    optional: true
+  '@istanbuljs/schema@0.1.3': {}
 
-  '@esbuild/win32-arm64@0.25.12':
-    optional: true
+  '@jest/console@29.7.0':
+    dependencies:
+      '@jest/types': 29.6.3
+      '@types/node': 24.10.4
+      chalk: 4.1.2
+      jest-message-util: 29.7.0
+      jest-util: 29.7.0
+      slash: 3.0.0
 
-  '@esbuild/win32-arm64@0.27.2':
-    optional: true
+  '@jest/core@29.7.0':
+    dependencies:
+      '@jest/console': 29.7.0
+      '@jest/reporters': 29.7.0
+      '@jest/test-result': 29.7.0
+      '@jest/transform': 29.7.0
+      '@jest/types': 29.6.3
+      '@types/node': 24.10.4
+      ansi-escapes: 4.3.2
+      chalk: 4.1.2
+      ci-info: 3.9.0
+      exit: 0.1.2
+      graceful-fs: 4.2.11
+      jest-changed-files: 29.7.0
+      jest-config: 29.7.0(@types/node@24.10.4)
+      jest-haste-map: 29.7.0
+      jest-message-util: 29.7.0
+      jest-regex-util: 29.6.3
+      jest-resolve: 29.7.0
+      jest-resolve-dependencies: 29.7.0
+      jest-runner: 29.7.0
+      jest-runtime: 29.7.0
+      jest-snapshot: 29.7.0
+      jest-util: 29.7.0
+      jest-validate: 29.7.0
+      jest-watcher: 29.7.0
+      micromatch: 4.0.8
+      pretty-format: 29.7.0
+      slash: 3.0.0
+      strip-ansi: 6.0.1
+    transitivePeerDependencies:
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
 
-  '@esbuild/win32-arm64@0.27.7':
-    optional: true
+  '@jest/create-cache-key-function@29.7.0':
+    dependencies:
+      '@jest/types': 29.6.3
 
-  '@esbuild/win32-arm64@0.28.1':
-    optional: true
+  '@jest/diff-sequences@30.0.1': {}
 
-  '@esbuild/win32-ia32@0.25.0':
-    optional: true
+  '@jest/environment@29.7.0':
+    dependencies:
+      '@jest/fake-timers': 29.7.0
+      '@jest/types': 29.6.3
+      '@types/node': 24.10.4
+      jest-mock: 29.7.0
 
-  '@esbuild/win32-ia32@0.25.12':
-    optional: true
+  '@jest/expect-utils@29.7.0':
+    dependencies:
+      jest-get-type: 29.6.3
 
-  '@esbuild/win32-ia32@0.27.2':
-    optional: true
+  '@jest/expect@29.7.0':
+    dependencies:
+      expect: 29.7.0
+      jest-snapshot: 29.7.0
+    transitivePeerDependencies:
+      - supports-color
 
-  '@esbuild/win32-ia32@0.27.7':
-    optional: true
+  '@jest/fake-timers@29.7.0':
+    dependencies:
+      '@jest/types': 29.6.3
+      '@sinonjs/fake-timers': 10.3.0
+      '@types/node': 24.10.4
+      jest-message-util: 29.7.0
+      jest-mock: 29.7.0
+      jest-util: 29.7.0
 
-  '@esbuild/win32-ia32@0.28.1':
-    optional: true
+  '@jest/get-type@30.1.0': {}
 
-  '@esbuild/win32-x64@0.25.0':
-    optional: true
+  '@jest/globals@29.7.0':
+    dependencies:
+      '@jest/environment': 29.7.0
+      '@jest/expect': 29.7.0
+      '@jest/types': 29.6.3
+      jest-mock: 29.7.0
+    transitivePeerDependencies:
+      - supports-color
 
-  '@esbuild/win32-x64@0.25.12':
-    optional: true
+  '@jest/reporters@29.7.0':
+    dependencies:
+      '@bcoe/v8-coverage': 0.2.3
+      '@jest/console': 29.7.0
+      '@jest/test-result': 29.7.0
+      '@jest/transform': 29.7.0
+      '@jest/types': 29.6.3
+      '@jridgewell/trace-mapping': 0.3.31
+      '@types/node': 24.10.4
+      chalk: 4.1.2
+      collect-v8-coverage: 1.0.3
+      exit: 0.1.2
+      glob: 7.2.3
+      graceful-fs: 4.2.11
+      istanbul-lib-coverage: 3.2.2
+      istanbul-lib-instrument: 6.0.3
+      istanbul-lib-report: 3.0.1
+      istanbul-lib-source-maps: 4.0.1
+      istanbul-reports: 3.2.0
+      jest-message-util: 29.7.0
+      jest-util: 29.7.0
+      jest-worker: 29.7.0
+      slash: 3.0.0
+      string-length: 4.0.2
+      strip-ansi: 6.0.1
+      v8-to-istanbul: 9.3.0
+    transitivePeerDependencies:
+      - supports-color
 
-  '@esbuild/win32-x64@0.27.2':
-    optional: true
+  '@jest/schemas@29.6.3':
+    dependencies:
+      '@sinclair/typebox': 0.27.8
 
-  '@esbuild/win32-x64@0.27.7':
-    optional: true
+  '@jest/schemas@30.0.5':
+    dependencies:
+      '@sinclair/typebox': 0.34.41
 
-  '@esbuild/win32-x64@0.28.1':
-    optional: true
+  '@jest/source-map@29.6.3':
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      callsites: 3.1.0
+      graceful-fs: 4.2.11
 
-  '@eslint-community/eslint-utils@4.9.0(eslint@9.39.2(jiti@2.6.1))':
+  '@jest/test-result@29.7.0':
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
-      eslint-visitor-keys: 3.4.3
+      '@jest/console': 29.7.0
+      '@jest/types': 29.6.3
+      '@types/istanbul-lib-coverage': 2.0.6
+      collect-v8-coverage: 1.0.3
 
-  '@eslint-community/regexpp@4.12.2': {}
+  '@jest/test-sequencer@29.7.0':
+    dependencies:
+      '@jest/test-result': 29.7.0
+      graceful-fs: 4.2.11
+      jest-haste-map: 29.7.0
+      slash: 3.0.0
 
-  '@eslint/config-array@0.21.1':
+  '@jest/transform@29.7.0':
     dependencies:
-      '@eslint/object-schema': 2.1.7
-      debug: 4.4.3
-      minimatch: 3.1.4
+      '@babel/core': 7.29.6
+      '@jest/types': 29.6.3
+      '@jridgewell/trace-mapping': 0.3.31
+      babel-plugin-istanbul: 6.1.1
+      chalk: 4.1.2
+      convert-source-map: 2.0.0
+      fast-json-stable-stringify: 2.1.0
+      graceful-fs: 4.2.11
+      jest-haste-map: 29.7.0
+      jest-regex-util: 29.6.3
+      jest-util: 29.7.0
+      micromatch: 4.0.8
+      pirates: 4.0.7
+      slash: 3.0.0
+      write-file-atomic: 4.0.2
     transitivePeerDependencies:
       - supports-color
 
-  '@eslint/config-helpers@0.4.2':
+  '@jest/types@29.6.3':
     dependencies:
-      '@eslint/core': 0.17.0
+      '@jest/schemas': 29.6.3
+      '@types/istanbul-lib-coverage': 2.0.6
+      '@types/istanbul-reports': 3.0.4
+      '@types/node': 24.10.4
+      '@types/yargs': 17.0.35
+      chalk: 4.1.2
 
-  '@eslint/core@0.17.0':
+  '@jridgewell/gen-mapping@0.3.13':
     dependencies:
-      '@types/json-schema': 7.0.15
+      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/trace-mapping': 0.3.31
 
-  '@eslint/eslintrc@3.3.3':
+  '@jridgewell/remapping@2.3.5':
     dependencies:
-      ajv: 6.12.6
-      debug: 4.4.3
-      espree: 10.4.0
-      globals: 14.0.0
-      ignore: 5.3.2
-      import-fresh: 3.3.1
-      js-yaml: 4.2.0
-      minimatch: 3.1.4
-      strip-json-comments: 3.1.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@eslint/js@9.39.2': {}
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
 
-  '@eslint/object-schema@2.1.7': {}
+  '@jridgewell/resolve-uri@3.1.2': {}
 
-  '@eslint/plugin-kit@0.4.1':
+  '@jridgewell/source-map@0.3.11':
     dependencies:
-      '@eslint/core': 0.17.0
-      levn: 0.4.1
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
 
-  '@expo/cli@54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))':
-    dependencies:
-      '@0no-co/graphql.web': 1.2.0
-      '@expo/code-signing-certificates': 0.0.6
-      '@expo/config': 12.0.13
-      '@expo/config-plugins': 54.0.4
-      '@expo/devcert': 1.2.1
-      '@expo/env': 2.0.8
-      '@expo/image-utils': 0.8.8
-      '@expo/json-file': 10.0.8
-      '@expo/metro': 54.2.0
-      '@expo/metro-config': 54.0.14(expo@54.0.33)
-      '@expo/osascript': 2.3.8
-      '@expo/package-manager': 1.9.10
-      '@expo/plist': 0.4.8
-      '@expo/prebuild-config': 54.0.8(expo@54.0.33)
-      '@expo/schema-utils': 0.1.8
-      '@expo/spawn-async': 1.7.2
-      '@expo/ws-tunnel': 1.0.6
-      '@expo/xcpretty': 4.3.2
-      '@react-native/dev-middleware': 0.81.5
-      '@urql/core': 5.2.0
-      '@urql/exchange-retry': 1.3.2(@urql/core@5.2.0)
-      accepts: 1.3.8
-      arg: 5.0.2
-      better-opn: 3.0.2
-      bplist-creator: 0.1.0
-      bplist-parser: 0.3.2
-      chalk: 4.1.2
-      ci-info: 3.9.0
-      compression: 1.8.1
-      connect: 3.7.0
-      debug: 4.4.3
-      env-editor: 0.4.2
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-server: 1.0.5
-      freeport-async: 2.0.0
-      getenv: 2.0.0
-      glob: 13.0.0
-      lan-network: 0.1.7
-      minimatch: 9.0.7
-      node-forge: 1.4.0
-      npm-package-arg: 11.0.3
-      ora: 3.4.0
-      picomatch: 3.0.2
-      pretty-bytes: 5.6.0
-      pretty-format: 29.7.0
-      progress: 2.0.3
-      prompts: 2.4.2
-      qrcode-terminal: 0.11.0
-      require-from-string: 2.0.2
-      requireg: 0.2.2
-      resolve: 1.22.11
-      resolve-from: 5.0.0
-      resolve.exports: 2.0.3
-      semver: 7.7.4
-      send: 0.19.2
-      slugify: 1.6.6
-      source-map-support: 0.5.21
-      stacktrace-parser: 0.1.11
-      structured-headers: 0.4.1
-      tar: 7.5.19
-      terminal-link: 2.1.1
-      undici: 6.27.0
-      wrap-ansi: 7.0.0
-      ws: 8.21.0
-    optionalDependencies:
-      expo-router: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
-    transitivePeerDependencies:
-      - bufferutil
-      - graphql
-      - supports-color
-      - utf-8-validate
+  '@jridgewell/sourcemap-codec@1.5.5': {}
 
-  '@expo/code-signing-certificates@0.0.6':
+  '@jridgewell/trace-mapping@0.3.31':
     dependencies:
-      node-forge: 1.4.0
+      '@jridgewell/resolve-uri': 3.1.2
+      '@jridgewell/sourcemap-codec': 1.5.5
 
-  '@expo/config-plugins@54.0.4':
-    dependencies:
-      '@expo/config-types': 54.0.10
-      '@expo/json-file': 10.0.8
-      '@expo/plist': 0.4.8
-      '@expo/sdk-runtime-versions': 1.0.0
-      chalk: 4.1.2
-      debug: 4.4.3
-      getenv: 2.0.0
-      glob: 13.0.0
-      resolve-from: 5.0.0
-      semver: 7.7.4
-      slash: 3.0.0
-      slugify: 1.6.6
-      xcode: 3.0.1
-      xml2js: 0.6.0
-    transitivePeerDependencies:
-      - supports-color
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.3':
+    optional: true
 
-  '@expo/config-types@54.0.10': {}
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
+    optional: true
 
-  '@expo/config@12.0.13':
+  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.3':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.3':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.3':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.3':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
+    optional: true
+
+  '@napi-rs/wasm-runtime@0.2.12':
     dependencies:
-      '@babel/code-frame': 7.10.4
-      '@expo/config-plugins': 54.0.4
-      '@expo/config-types': 54.0.10
-      '@expo/json-file': 10.0.8
-      deepmerge: 4.3.1
-      getenv: 2.0.0
-      glob: 13.0.0
-      require-from-string: 2.0.2
-      resolve-from: 5.0.0
-      resolve-workspace-root: 2.0.0
-      semver: 7.7.3
-      slugify: 1.6.6
-      sucrase: 3.35.1
-    transitivePeerDependencies:
-      - supports-color
+      '@emnapi/core': 1.7.1
+      '@emnapi/runtime': 1.7.1
+      '@tybys/wasm-util': 0.10.1
+    optional: true
 
-  '@expo/devcert@1.2.1':
+  '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
+    optional: true
+
+  '@noble/ciphers@2.1.1': {}
+
+  '@noble/hashes@2.0.1': {}
+
+  '@nodelib/fs.scandir@2.1.5':
     dependencies:
-      '@expo/sudo-prompt': 9.3.2
-      debug: 3.2.7
-    transitivePeerDependencies:
-      - supports-color
+      '@nodelib/fs.stat': 2.0.5
+      run-parallel: 1.2.0
 
-  '@expo/devtools@0.1.8(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@nodelib/fs.stat@2.0.5': {}
+
+  '@nodelib/fs.walk@1.2.8':
     dependencies:
-      chalk: 4.1.2
-    optionalDependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      '@nodelib/fs.scandir': 2.1.5
+      fastq: 1.19.1
 
-  '@expo/env@2.0.8':
+  '@nolyfill/is-core-module@1.0.39': {}
+
+  '@opentelemetry/api@1.9.0':
+    optional: true
+
+  '@opentelemetry/semantic-conventions@1.43.0': {}
+
+  '@peculiar/asn1-cms@2.8.0':
     dependencies:
-      chalk: 4.1.2
-      debug: 4.4.3
-      dotenv: 16.4.7
-      dotenv-expand: 11.0.7
-      getenv: 2.0.0
-    transitivePeerDependencies:
-      - supports-color
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      '@peculiar/asn1-x509-attr': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/fingerprint@0.15.4':
+  '@peculiar/asn1-csr@2.8.0':
     dependencies:
-      '@expo/spawn-async': 1.7.2
-      arg: 5.0.2
-      chalk: 4.1.2
-      debug: 4.4.3
-      getenv: 2.0.0
-      glob: 13.0.0
-      ignore: 5.3.2
-      minimatch: 9.0.7
-      p-limit: 3.1.0
-      resolve-from: 5.0.0
-      semver: 7.7.4
-    transitivePeerDependencies:
-      - supports-color
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/image-utils@0.8.8':
+  '@peculiar/asn1-ecc@2.8.0':
     dependencies:
-      '@expo/spawn-async': 1.7.2
-      chalk: 4.1.2
-      getenv: 2.0.0
-      jimp-compact: 0.16.1
-      parse-png: 2.1.0
-      resolve-from: 5.0.0
-      resolve-global: 1.0.0
-      semver: 7.7.4
-      temp-dir: 2.0.0
-      unique-string: 2.0.0
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/json-file@10.0.8':
+  '@peculiar/asn1-pfx@2.8.0':
     dependencies:
-      '@babel/code-frame': 7.10.4
-      json5: 2.2.3
+      '@peculiar/asn1-cms': 2.8.0
+      '@peculiar/asn1-pkcs8': 2.8.0
+      '@peculiar/asn1-rsa': 2.8.0
+      '@peculiar/asn1-schema': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/metro-config@54.0.14(expo@54.0.33)':
+  '@peculiar/asn1-pkcs8@2.8.0':
     dependencies:
-      '@babel/code-frame': 7.29.0
-      '@babel/core': 7.29.6
-      '@babel/generator': 7.29.1
-      '@expo/config': 12.0.13
-      '@expo/env': 2.0.8
-      '@expo/json-file': 10.0.8
-      '@expo/metro': 54.2.0
-      '@expo/spawn-async': 1.7.2
-      browserslist: 4.28.1
-      chalk: 4.1.2
-      debug: 4.4.3
-      dotenv: 16.4.7
-      dotenv-expand: 11.0.7
-      getenv: 2.0.0
-      glob: 13.0.0
-      hermes-parser: 0.29.1
-      jsc-safe-url: 0.2.4
-      lightningcss: 1.30.2
-      minimatch: 9.0.7
-      postcss: 8.5.10
-      resolve-from: 5.0.0
-    optionalDependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-    transitivePeerDependencies:
-      - bufferutil
-      - supports-color
-      - utf-8-validate
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@peculiar/asn1-pkcs9@2.8.0':
     dependencies:
-      anser: 1.4.10
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      pretty-format: 29.7.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
-      stacktrace-parser: 0.1.11
-      whatwg-fetch: 3.6.20
-    optionalDependencies:
-      react-dom: 19.1.1(react@19.1.0)
+      '@peculiar/asn1-cms': 2.8.0
+      '@peculiar/asn1-pfx': 2.8.0
+      '@peculiar/asn1-pkcs8': 2.8.0
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      '@peculiar/asn1-x509-attr': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/metro@54.2.0':
+  '@peculiar/asn1-rsa@2.8.0':
     dependencies:
-      metro: 0.83.3
-      metro-babel-transformer: 0.83.3
-      metro-cache: 0.83.3
-      metro-cache-key: 0.83.3
-      metro-config: 0.83.3
-      metro-core: 0.83.3
-      metro-file-map: 0.83.3
-      metro-minify-terser: 0.83.3
-      metro-resolver: 0.83.3
-      metro-runtime: 0.83.3
-      metro-source-map: 0.83.3
-      metro-symbolicate: 0.83.3
-      metro-transform-plugins: 0.83.3
-      metro-transform-worker: 0.83.3
-    transitivePeerDependencies:
-      - bufferutil
-      - supports-color
-      - utf-8-validate
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/npm-proofread@1.0.1':
+  '@peculiar/asn1-schema@2.8.0':
     dependencies:
-      semver: 5.7.2
+      '@peculiar/utils': 2.0.3
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/osascript@2.3.8':
+  '@peculiar/asn1-x509-attr@2.8.0':
     dependencies:
-      '@expo/spawn-async': 1.7.2
-      exec-async: 2.2.0
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/package-manager@1.9.10':
+  '@peculiar/asn1-x509@2.8.0':
     dependencies:
-      '@expo/json-file': 10.0.8
-      '@expo/spawn-async': 1.7.2
-      chalk: 4.1.2
-      npm-package-arg: 11.0.3
-      ora: 3.4.0
-      resolve-workspace-root: 2.0.0
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/utils': 2.0.3
+      asn1js: 3.0.10
+      tslib: 2.8.1
 
-  '@expo/plist@0.4.8':
+  '@peculiar/utils@2.0.3':
     dependencies:
-      '@xmldom/xmldom': 0.8.13
-      base64-js: 1.5.1
-      xmlbuilder: 15.1.1
+      tslib: 2.8.1
 
-  '@expo/prebuild-config@54.0.8(expo@54.0.33)':
+  '@peculiar/x509@2.0.0':
     dependencies:
-      '@expo/config': 12.0.13
-      '@expo/config-plugins': 54.0.4
-      '@expo/config-types': 54.0.10
-      '@expo/image-utils': 0.8.8
-      '@expo/json-file': 10.0.8
-      '@react-native/normalize-colors': 0.81.5
-      debug: 4.4.3
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      resolve-from: 5.0.0
-      semver: 7.7.4
-      xml2js: 0.6.0
-    transitivePeerDependencies:
-      - supports-color
+      '@peculiar/asn1-cms': 2.8.0
+      '@peculiar/asn1-csr': 2.8.0
+      '@peculiar/asn1-ecc': 2.8.0
+      '@peculiar/asn1-pkcs9': 2.8.0
+      '@peculiar/asn1-rsa': 2.8.0
+      '@peculiar/asn1-schema': 2.8.0
+      '@peculiar/asn1-x509': 2.8.0
+      pvtsutils: 1.3.6
+      tslib: 2.8.1
+      tsyringe: 4.10.0
 
-  '@expo/schema-utils@0.1.8': {}
+  '@pkgr/core@0.2.9': {}
 
-  '@expo/sdk-runtime-versions@1.0.0': {}
+  '@radix-ui/number@1.1.2': {}
 
-  '@expo/spawn-async@1.7.2':
-    dependencies:
-      cross-spawn: 7.0.6
+  '@radix-ui/primitive@1.1.3': {}
 
-  '@expo/sudo-prompt@9.3.2': {}
+  '@radix-ui/primitive@1.1.5': {}
 
-  '@expo/vector-icons@15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@expo/ws-tunnel@1.0.6': {}
+  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@expo/xcpretty@4.3.2':
+  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@babel/code-frame': 7.10.4
-      chalk: 4.1.2
-      find-up: 5.0.0
-      js-yaml: 4.2.0
-
-  '@humanfs/core@0.19.1': {}
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@humanfs/node@0.16.7':
+  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@humanfs/core': 0.19.1
-      '@humanwhocodes/retry': 0.4.3
-
-  '@humanwhocodes/module-importer@1.0.1': {}
-
-  '@humanwhocodes/retry@0.4.3': {}
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@ioredis/commands@1.5.0': {}
+  '@radix-ui/react-aspect-ratio@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@isaacs/fs-minipass@4.0.1':
+  '@radix-ui/react-avatar@1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      minipass: 7.1.2
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@isaacs/ttlcache@1.4.1': {}
+  '@radix-ui/react-checkbox@1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@istanbuljs/load-nyc-config@1.1.0':
+  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      camelcase: 5.3.1
-      find-up: 4.1.0
-      get-package-type: 0.1.0
-      js-yaml: 3.15.0
-      resolve-from: 5.0.0
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@istanbuljs/schema@0.1.3': {}
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/console@29.7.0':
+  '@radix-ui/react-collection@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jest/types': 29.6.3
-      '@types/node': 24.10.4
-      chalk: 4.1.2
-      jest-message-util: 29.7.0
-      jest-util: 29.7.0
-      slash: 3.0.0
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/core@29.7.0':
+  '@radix-ui/react-compose-refs@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@jest/console': 29.7.0
-      '@jest/reporters': 29.7.0
-      '@jest/test-result': 29.7.0
-      '@jest/transform': 29.7.0
-      '@jest/types': 29.6.3
-      '@types/node': 24.10.4
-      ansi-escapes: 4.3.2
-      chalk: 4.1.2
-      ci-info: 3.9.0
-      exit: 0.1.2
-      graceful-fs: 4.2.11
-      jest-changed-files: 29.7.0
-      jest-config: 29.7.0(@types/node@24.10.4)
-      jest-haste-map: 29.7.0
-      jest-message-util: 29.7.0
-      jest-regex-util: 29.6.3
-      jest-resolve: 29.7.0
-      jest-resolve-dependencies: 29.7.0
-      jest-runner: 29.7.0
-      jest-runtime: 29.7.0
-      jest-snapshot: 29.7.0
-      jest-util: 29.7.0
-      jest-validate: 29.7.0
-      jest-watcher: 29.7.0
-      micromatch: 4.0.8
-      pretty-format: 29.7.0
-      slash: 3.0.0
-      strip-ansi: 6.0.1
-    transitivePeerDependencies:
-      - babel-plugin-macros
-      - supports-color
-      - ts-node
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/create-cache-key-function@29.7.0':
+  '@radix-ui/react-compose-refs@1.1.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@jest/types': 29.6.3
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/diff-sequences@30.0.1': {}
+  '@radix-ui/react-context-menu@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/environment@29.7.0':
+  '@radix-ui/react-context@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@jest/fake-timers': 29.7.0
-      '@jest/types': 29.6.3
-      '@types/node': 24.10.4
-      jest-mock: 29.7.0
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/expect-utils@29.7.0':
+  '@radix-ui/react-context@1.2.0(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      jest-get-type: 29.6.3
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/expect@29.7.0':
+  '@radix-ui/react-dialog@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      expect: 29.7.0
-      jest-snapshot: 29.7.0
-    transitivePeerDependencies:
-      - supports-color
+      '@radix-ui/primitive': 1.1.3
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/fake-timers@29.7.0':
+  '@radix-ui/react-dialog@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jest/types': 29.6.3
-      '@sinonjs/fake-timers': 10.3.0
-      '@types/node': 24.10.4
-      jest-message-util: 29.7.0
-      jest-mock: 29.7.0
-      jest-util: 29.7.0
+      '@radix-ui/primitive': 1.1.3
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/get-type@30.1.0': {}
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/globals@29.7.0':
+  '@radix-ui/react-direction@1.1.1(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@jest/environment': 29.7.0
-      '@jest/expect': 29.7.0
-      '@jest/types': 29.6.3
-      jest-mock: 29.7.0
-    transitivePeerDependencies:
-      - supports-color
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/reporters@29.7.0':
+  '@radix-ui/react-direction@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@bcoe/v8-coverage': 0.2.3
-      '@jest/console': 29.7.0
-      '@jest/test-result': 29.7.0
-      '@jest/transform': 29.7.0
-      '@jest/types': 29.6.3
-      '@jridgewell/trace-mapping': 0.3.31
-      '@types/node': 24.10.4
-      chalk: 4.1.2
-      collect-v8-coverage: 1.0.3
-      exit: 0.1.2
-      glob: 7.2.3
-      graceful-fs: 4.2.11
-      istanbul-lib-coverage: 3.2.2
-      istanbul-lib-instrument: 6.0.3
-      istanbul-lib-report: 3.0.1
-      istanbul-lib-source-maps: 4.0.1
-      istanbul-reports: 3.2.0
-      jest-message-util: 29.7.0
-      jest-util: 29.7.0
-      jest-worker: 29.7.0
-      slash: 3.0.0
-      string-length: 4.0.2
-      strip-ansi: 6.0.1
-      v8-to-istanbul: 9.3.0
-    transitivePeerDependencies:
-      - supports-color
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/schemas@29.6.3':
+  '@radix-ui/react-dismissable-layer@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@sinclair/typebox': 0.27.8
+      '@radix-ui/primitive': 1.1.3
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-escape-keydown': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/schemas@30.0.5':
+  '@radix-ui/react-dismissable-layer@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@sinclair/typebox': 0.34.41
+      '@radix-ui/primitive': 1.1.3
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-escape-keydown': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/source-map@29.6.3':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jridgewell/trace-mapping': 0.3.31
-      callsites: 3.1.0
-      graceful-fs: 4.2.11
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/test-result@29.7.0':
+  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jest/console': 29.7.0
-      '@jest/types': 29.6.3
-      '@types/istanbul-lib-coverage': 2.0.6
-      collect-v8-coverage: 1.0.3
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jest/test-sequencer@29.7.0':
+  '@radix-ui/react-focus-guards@1.1.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@jest/test-result': 29.7.0
-      graceful-fs: 4.2.11
-      jest-haste-map: 29.7.0
-      slash: 3.0.0
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/transform@29.7.0':
+  '@radix-ui/react-focus-guards@1.1.4(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@babel/core': 7.29.6
-      '@jest/types': 29.6.3
-      '@jridgewell/trace-mapping': 0.3.31
-      babel-plugin-istanbul: 6.1.1
-      chalk: 4.1.2
-      convert-source-map: 2.0.0
-      fast-json-stable-stringify: 2.1.0
-      graceful-fs: 4.2.11
-      jest-haste-map: 29.7.0
-      jest-regex-util: 29.6.3
-      jest-util: 29.7.0
-      micromatch: 4.0.8
-      pirates: 4.0.7
-      slash: 3.0.0
-      write-file-atomic: 4.0.2
-    transitivePeerDependencies:
-      - supports-color
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@jest/types@29.6.3':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jest/schemas': 29.6.3
-      '@types/istanbul-lib-coverage': 2.0.6
-      '@types/istanbul-reports': 3.0.4
-      '@types/node': 24.10.4
-      '@types/yargs': 17.0.35
-      chalk: 4.1.2
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jridgewell/gen-mapping@0.3.13':
+  '@radix-ui/react-focus-scope@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
-      '@jridgewell/trace-mapping': 0.3.31
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jridgewell/remapping@2.3.5':
+  '@radix-ui/react-focus-scope@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
-
-  '@jridgewell/resolve-uri@3.1.2': {}
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jridgewell/source-map@0.3.11':
+  '@radix-ui/react-form@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jridgewell/sourcemap-codec@1.5.5': {}
+  '@radix-ui/react-hover-card@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@jridgewell/trace-mapping@0.3.31':
+  '@radix-ui/react-id@1.1.1(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@jridgewell/resolve-uri': 3.1.2
-      '@jridgewell/sourcemap-codec': 1.5.5
-
-  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
-    optional: true
+      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@napi-rs/wasm-runtime@0.2.12':
+  '@radix-ui/react-id@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@emnapi/core': 1.7.1
-      '@emnapi/runtime': 1.7.1
-      '@tybys/wasm-util': 0.10.1
-    optional: true
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
-    optional: true
+  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@noble/ciphers@2.1.1': {}
+  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@noble/hashes@2.0.1': {}
+  '@radix-ui/react-menubar@1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@nodelib/fs.scandir@2.1.5':
-    dependencies:
-      '@nodelib/fs.stat': 2.0.5
-      run-parallel: 1.2.0
+  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@nodelib/fs.stat@2.0.5': {}
+  '@radix-ui/react-one-time-password-field@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/number': 1.1.2
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@nodelib/fs.walk@1.2.8':
+  '@radix-ui/react-password-toggle-field@0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@nodelib/fs.scandir': 2.1.5
-      fastq: 1.19.1
-
-  '@nolyfill/is-core-module@1.0.39': {}
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@opentelemetry/api@1.9.0':
-    optional: true
+  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@opentelemetry/semantic-conventions@1.43.0': {}
+  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/rect': 1.1.2
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-cms@2.8.0':
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      '@peculiar/asn1-x509-attr': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-csr@2.8.0':
+  '@radix-ui/react-portal@1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-ecc@2.8.0':
+  '@radix-ui/react-portal@1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-pfx@2.8.0':
+  '@radix-ui/react-presence@1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-cms': 2.8.0
-      '@peculiar/asn1-pkcs8': 2.8.0
-      '@peculiar/asn1-rsa': 2.8.0
-      '@peculiar/asn1-schema': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-pkcs8@2.8.0':
+  '@radix-ui/react-presence@1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-pkcs9@2.8.0':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-cms': 2.8.0
-      '@peculiar/asn1-pfx': 2.8.0
-      '@peculiar/asn1-pkcs8': 2.8.0
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      '@peculiar/asn1-x509-attr': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-rsa@2.8.0':
+  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-schema@2.8.0':
+  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/utils': 2.0.3
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-x509-attr@2.8.0':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/asn1-x509@2.8.0':
+  '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/utils': 2.0.3
-      asn1js: 3.0.10
-      tslib: 2.8.1
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/utils@2.0.3':
+  '@radix-ui/react-radio-group@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-roving-focus@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      tslib: 2.8.1
+      '@radix-ui/primitive': 1.1.3
+      '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@peculiar/x509@2.0.0':
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/number': 1.1.2
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/number': 1.1.2
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@peculiar/asn1-cms': 2.8.0
-      '@peculiar/asn1-csr': 2.8.0
-      '@peculiar/asn1-ecc': 2.8.0
-      '@peculiar/asn1-pkcs9': 2.8.0
-      '@peculiar/asn1-rsa': 2.8.0
-      '@peculiar/asn1-schema': 2.8.0
-      '@peculiar/asn1-x509': 2.8.0
-      pvtsutils: 1.3.6
-      tslib: 2.8.1
-      tsyringe: 4.10.0
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@pkgr/core@0.2.9': {}
+  '@radix-ui/react-slider@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/number': 1.1.2
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/primitive@1.1.3': {}
+  '@radix-ui/react-slot@1.2.0(@types/react@19.1.17)(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
 
-  '@radix-ui/react-collection@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-slot@1.2.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@radix-ui/react-slot@1.3.0(@types/react@19.1.17)(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@radix-ui/react-switch@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-tabs@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.3
       '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-compose-refs@1.1.2(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-context@1.1.2(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-toggle-group@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-dialog@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toggle@1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
-      aria-hidden: 1.2.6
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-direction@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-toolbar@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-dismissable-layer@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-escape-keydown': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-focus-guards@1.1.3(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-callback-ref@1.1.1(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-focus-scope@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-use-callback-ref@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-id@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-controllable-state@1.2.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
+      '@radix-ui/react-use-effect-event': 0.0.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-portal@1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-use-controllable-state@1.2.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-use-effect-event@0.0.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-use-effect-event@0.0.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-roving-focus@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-use-escape-keydown@1.1.1(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-slot@1.2.0(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-escape-keydown@1.1.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-slot@1.2.3(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-is-hydrated@0.1.1(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-tabs@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-use-layout-effect@1.1.1(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-use-callback-ref@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-layout-effect@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-controllable-state@1.2.2(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-previous@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-use-effect-event': 0.0.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-effect-event@0.0.2(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-rect@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/rect': 1.1.2
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-escape-keydown@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-size@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-layout-effect@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/rect@1.1.2': {}
 
   '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))':
     dependencies:
@@ -10995,6 +12928,11 @@ snapshots:
 
   '@rtsao/scc@1.1.0': {}
 
+  '@shadcn/react@0.2.1(@types/react@19.1.17)(react@19.1.0)':
+    optionalDependencies:
+      '@types/react': 19.1.17
+      react: 19.1.0
+
   '@sinclair/typebox@0.27.8': {}
 
   '@sinclair/typebox@0.34.41': {}
@@ -11021,6 +12959,8 @@ snapshots:
 
   '@standard-schema/spec@1.1.0': {}
 
+  '@standard-schema/utils@0.3.0': {}
+
   '@tailwindcss/node@4.3.0':
     dependencies:
       '@jridgewell/remapping': 2.3.5
@@ -11173,6 +13113,30 @@ snapshots:
       '@types/deep-eql': 4.0.2
       assertion-error: 2.0.1
 
+  '@types/d3-array@3.2.2': {}
+
+  '@types/d3-color@3.1.3': {}
+
+  '@types/d3-ease@3.0.2': {}
+
+  '@types/d3-interpolate@3.0.4':
+    dependencies:
+      '@types/d3-color': 3.1.3
+
+  '@types/d3-path@3.1.1': {}
+
+  '@types/d3-scale@4.0.9':
+    dependencies:
+      '@types/d3-time': 3.0.4
+
+  '@types/d3-shape@3.1.8':
+    dependencies:
+      '@types/d3-path': 3.1.1
+
+  '@types/d3-time@3.0.4': {}
+
+  '@types/d3-timer@3.0.2': {}
+
   '@types/debug@4.1.12':
     dependencies:
       '@types/ms': 2.1.0
@@ -11909,6 +13873,38 @@ snapshots:
       - '@babel/core'
       - supports-color
 
+  babel-preset-expo@54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0):
+    dependencies:
+      '@babel/helper-module-imports': 7.27.1
+      '@babel/plugin-proposal-decorators': 7.28.0(@babel/core@7.29.6)
+      '@babel/plugin-proposal-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-export-default-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-static-block': 7.28.3(@babel/core@7.29.6)
+      '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-flow-strip-types': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-object-rest-spread': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-methods': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-private-property-in-object': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-runtime': 7.28.5(@babel/core@7.29.6)
+      '@babel/preset-react': 7.28.5(@babel/core@7.29.6)
+      '@babel/preset-typescript': 7.28.5(@babel/core@7.29.6)
+      '@react-native/babel-preset': 0.81.5(@babel/core@7.29.6)
+      babel-plugin-react-compiler: 1.0.0
+      babel-plugin-react-native-web: 0.21.2
+      babel-plugin-syntax-hermes-parser: 0.29.1
+      babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.6)
+      debug: 4.4.3
+      react-refresh: 0.18.0
+      resolve-from: 5.0.0
+    optionalDependencies:
+      '@babel/runtime': 7.29.7
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@babel/core'
+      - supports-color
+
   babel-preset-jest@29.6.3(@babel/core@7.29.6):
     dependencies:
       '@babel/core': 7.29.6
@@ -12177,6 +14173,10 @@ snapshots:
 
   cjs-module-lexer@1.4.3: {}
 
+  class-variance-authority@0.7.1:
+    dependencies:
+      clsx: 2.1.1
+
   cli-cursor@2.1.0:
     dependencies:
       restore-cursor: 2.0.0
@@ -12193,8 +14193,22 @@ snapshots:
 
   clone@1.0.4: {}
 
+  clsx@2.1.1: {}
+
   cluster-key-slot@1.1.2: {}
 
+  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - '@types/react'
+      - '@types/react-dom'
+
   co@4.6.0: {}
 
   code-block-writer@13.0.3: {}
@@ -12209,6 +14223,8 @@ snapshots:
     dependencies:
       color-name: 1.1.4
 
+  color-hash@2.0.2: {}
+
   color-name@1.1.3: {}
 
   color-name@1.1.4: {}
@@ -12346,6 +14362,44 @@ snapshots:
 
   csstype@3.2.3: {}
 
+  d3-array@3.2.4:
+    dependencies:
+      internmap: 2.0.3
+
+  d3-color@3.1.0: {}
+
+  d3-ease@3.0.1: {}
+
+  d3-format@3.1.2: {}
+
+  d3-interpolate@3.0.1:
+    dependencies:
+      d3-color: 3.1.0
+
+  d3-path@3.1.0: {}
+
+  d3-scale@4.0.2:
+    dependencies:
+      d3-array: 3.2.4
+      d3-format: 3.1.2
+      d3-interpolate: 3.0.1
+      d3-time: 3.1.0
+      d3-time-format: 4.1.0
+
+  d3-shape@3.2.0:
+    dependencies:
+      d3-path: 3.1.0
+
+  d3-time-format@4.1.0:
+    dependencies:
+      d3-time: 3.1.0
+
+  d3-time@3.1.0:
+    dependencies:
+      d3-array: 3.2.4
+
+  d3-timer@3.0.1: {}
+
   data-urls@3.0.2:
     dependencies:
       abab: 2.0.6
@@ -12370,6 +14424,8 @@ snapshots:
       es-errors: 1.3.0
       is-data-view: 1.0.2
 
+  date-fns@4.4.0: {}
+
   debug@2.6.9:
     dependencies:
       ms: 2.0.0
@@ -12382,6 +14438,8 @@ snapshots:
     dependencies:
       ms: 2.1.3
 
+  decimal.js-light@2.5.1: {}
+
   decimal.js@10.6.0: {}
 
   decode-uri-component@0.2.2: {}
@@ -12438,6 +14496,11 @@ snapshots:
     dependencies:
       esutils: 2.0.3
 
+  dom-helpers@5.2.1:
+    dependencies:
+      '@babel/runtime': 7.28.4
+      csstype: 3.2.3
+
   dom-serializer@2.0.0:
     dependencies:
       domelementtype: 2.3.0
@@ -12518,6 +14581,18 @@ snapshots:
 
   electron-to-chromium@1.5.267: {}
 
+  embla-carousel-react@8.6.0(react@19.1.0):
+    dependencies:
+      embla-carousel: 8.6.0
+      embla-carousel-reactive-utils: 8.6.0(embla-carousel@8.6.0)
+      react: 19.1.0
+
+  embla-carousel-reactive-utils@8.6.0(embla-carousel@8.6.0):
+    dependencies:
+      embla-carousel: 8.6.0
+
+  embla-carousel@8.6.0: {}
+
   emittery@0.13.1: {}
 
   emoji-regex@8.0.0: {}
@@ -13101,6 +15176,8 @@ snapshots:
 
   event-target-shim@5.0.1: {}
 
+  eventemitter3@4.0.7: {}
+
   exec-async@2.2.0: {}
 
   execa@5.1.1:
@@ -13393,6 +15470,8 @@ snapshots:
 
   fast-diff@1.3.0: {}
 
+  fast-equals@5.4.1: {}
+
   fast-glob@3.3.3:
     dependencies:
       '@nodelib/fs.stat': 2.0.5
@@ -13757,12 +15836,19 @@ snapshots:
 
   ini@7.0.0: {}
 
+  input-otp@1.4.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   internal-slot@1.1.0:
     dependencies:
       es-errors: 1.3.0
       hasown: 2.0.2
       side-channel: 1.1.0
 
+  internmap@2.0.3: {}
+
   invariant@2.2.4:
     dependencies:
       loose-envify: 1.4.0
@@ -14679,6 +16765,10 @@ snapshots:
   lru.min@1.1.4:
     optional: true
 
+  lucide-react@0.555.0(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+
   magic-string@0.30.21:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -15019,6 +17109,11 @@ snapshots:
 
   nested-error-stacks@2.0.1: {}
 
+  next-themes@0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       chalk: 5.6.2
@@ -15388,6 +17483,69 @@ snapshots:
     dependencies:
       inherits: 2.0.4
 
+  radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-accessible-icon': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-alert-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-aspect-ratio': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-avatar': 1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-checkbox': 1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context-menu': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dropdown-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-form': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-hover-card': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menubar': 1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-one-time-password-field': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-password-toggle-field': 0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-progress': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-radio-group': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-select': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slider': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-switch': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toast': 1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toolbar': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tooltip': 1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-escape-keydown': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   range-parser@1.2.1: {}
 
   rc9@2.1.2:
@@ -15402,6 +17560,11 @@ snapshots:
       minimist: 1.2.8
       strip-json-comments: 2.0.1
 
+  react-day-picker@8.10.1(date-fns@4.4.0)(react@19.1.0):
+    dependencies:
+      date-fns: 4.4.0
+      react: 19.1.0
+
   react-devtools-core@6.1.5:
     dependencies:
       shell-quote: 1.10.0
@@ -15426,6 +17589,10 @@ snapshots:
     dependencies:
       react: 19.1.0
 
+  react-hook-form@7.81.0(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+
   react-is@16.13.1: {}
 
   react-is@18.3.1: {}
@@ -15566,6 +17733,19 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  react-resizable-panels@3.0.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
+  react-smooth@4.0.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      fast-equals: 5.4.1
+      prop-types: 15.8.1
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-transition-group: 4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+
   react-style-singleton@2.2.3(@types/react@19.1.17)(react@19.1.0):
     dependencies:
       get-nonce: 1.0.1
@@ -15580,6 +17760,15 @@ snapshots:
       react-is: 19.2.3
       scheduler: 0.26.0
 
+  react-transition-group@4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@babel/runtime': 7.28.4
+      dom-helpers: 5.2.1
+      loose-envify: 1.4.0
+      prop-types: 15.8.1
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   react@19.1.0: {}
 
   readdirp@3.6.0:
@@ -15591,6 +17780,23 @@ snapshots:
 
   readdirp@5.0.0: {}
 
+  recharts-scale@0.4.5:
+    dependencies:
+      decimal.js-light: 2.5.1
+
+  recharts@2.15.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      clsx: 2.1.1
+      eventemitter3: 4.0.7
+      lodash: 4.18.0
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-is: 18.3.1
+      react-smooth: 4.0.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      recharts-scale: 0.4.5
+      tiny-invariant: 1.3.3
+      victory-vendor: 36.9.2
+
   redent@3.0.0:
     dependencies:
       indent-string: 4.0.0
@@ -15663,6 +17869,8 @@ snapshots:
 
   requires-port@1.0.0: {}
 
+  reselect@5.2.0: {}
+
   resolve-cwd@3.0.0:
     dependencies:
       resolve-from: 5.0.0
@@ -15916,6 +18124,11 @@ snapshots:
 
   slugify@1.6.6: {}
 
+  sonner@2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.13:
@@ -16118,6 +18331,8 @@ snapshots:
     dependencies:
       '@pkgr/core': 0.2.9
 
+  tailwind-merge@3.6.0: {}
+
   tailwindcss@4.3.0: {}
 
   tapable@2.3.0: {}
@@ -16174,6 +18389,8 @@ snapshots:
 
   throat@5.0.0: {}
 
+  tiny-invariant@1.3.3: {}
+
   tinybench@2.9.0: {}
 
   tinyexec@0.3.2: {}
@@ -16317,6 +18534,8 @@ snapshots:
       '@turbo/windows-64': 2.10.4
       '@turbo/windows-arm64': 2.10.4
 
+  tw-animate-css@1.4.0: {}
+
   type-check@0.4.0:
     dependencies:
       prelude-ls: 1.2.1
@@ -16515,6 +18734,10 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  use-debounce@10.1.1(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+
   use-latest-callback@0.2.6(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -16547,6 +18770,15 @@ snapshots:
 
   vary@1.1.2: {}
 
+  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - '@types/react'
+      - '@types/react-dom'
+
   vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
       '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
@@ -16556,6 +18788,23 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
+  victory-vendor@36.9.2:
+    dependencies:
+      '@types/d3-array': 3.2.2
+      '@types/d3-ease': 3.0.2
+      '@types/d3-interpolate': 3.0.4
+      '@types/d3-scale': 4.0.9
+      '@types/d3-shape': 3.1.8
+      '@types/d3-time': 3.0.4
+      '@types/d3-timer': 3.0.2
+      d3-array: 3.2.4
+      d3-ease: 3.0.1
+      d3-interpolate: 3.0.1
+      d3-scale: 4.0.2
+      d3-shape: 3.2.0
+      d3-time: 3.1.0
+      d3-timer: 3.0.1
+
   vite-node@3.2.4(@types/node@24.10.4):
     dependencies:
       cac: 6.7.14

From b995f87781de9736fa93959c2e9cffee6e8edf54 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 15:55:14 +0200
Subject: [PATCH 049/129] test(sdk): use the shared Vite+ runner

---
 packages/app-store-server-sdk/package.json   |   7 +-
 packages/google-play-server-sdk/package.json |   7 +-
 pnpm-lock.yaml                               | 884 ++++++++++++++++++-
 3 files changed, 885 insertions(+), 13 deletions(-)

diff --git a/packages/app-store-server-sdk/package.json b/packages/app-store-server-sdk/package.json
index c70402f1d..73d0e6727 100644
--- a/packages/app-store-server-sdk/package.json
+++ b/packages/app-store-server-sdk/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@voidhash/app-store-server-sdk",
   "version": "0.0.1-alpha.1",
-  "license": "MIT",
   "private": true,
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "https://github.com/voidhashcom/voidhash",
@@ -21,8 +21,8 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "typecheck-go": "tsgo --noEmit",
-    "test": "vitest run -c vitest.unit.mts",
-    "test:watch": "vitest -c vitest.unit.mts",
+    "test": "vp test run -c vitest.unit.mts",
+    "test:watch": "vp test -c vitest.unit.mts",
     "test:workers": "node workerd-smoke/run-smoke.mjs"
   },
   "dependencies": {
@@ -33,6 +33,7 @@
   "devDependencies": {
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "5.9.3",
+    "vite-plus": "0.1.23",
     "vitest": "^3.2.7"
   },
   "peerDependencies": {
diff --git a/packages/google-play-server-sdk/package.json b/packages/google-play-server-sdk/package.json
index cb05d5197..b9d5de3b4 100644
--- a/packages/google-play-server-sdk/package.json
+++ b/packages/google-play-server-sdk/package.json
@@ -1,8 +1,8 @@
 {
   "name": "@voidhash/google-play-server-sdk",
   "version": "0.0.1-alpha.1",
-  "license": "MIT",
   "private": true,
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "https://github.com/voidhashcom/voidhash",
@@ -18,8 +18,8 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "typecheck-go": "tsgo --noEmit",
-    "test": "vitest run -c vitest.unit.mts",
-    "test:watch": "vitest -c vitest.unit.mts"
+    "test": "vp test run -c vitest.unit.mts",
+    "test:watch": "vp test -c vitest.unit.mts"
   },
   "dependencies": {
     "jose": "^6.0.11"
@@ -27,6 +27,7 @@
   "devDependencies": {
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "5.9.3",
+    "vite-plus": "0.1.23",
     "vitest": "^3.2.7"
   },
   "peerDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 530c3338a..94238f379 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -534,6 +534,9 @@ importers:
       typescript:
         specifier: 5.9.3
         version: 5.9.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -566,6 +569,9 @@ importers:
       typescript:
         specifier: 5.9.3
         version: 5.9.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -2938,6 +2944,275 @@ packages:
     resolution: {integrity: sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==}
     engines: {node: '>=14'}
 
+  '@oxc-project/runtime@0.133.0':
+    resolution: {integrity: sha512-PkvjA1Lq5++V5S1E6Patr92ZVcieE6EalDr1VJTqv4BnjZdOUC4W3p8k1wMXSd5/2aFP4b/A6N5sg2Bkzcr9vQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+
+  '@oxc-project/types@0.133.0':
+    resolution: {integrity: sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA==}
+
+  '@oxfmt/binding-android-arm-eabi@0.52.0':
+    resolution: {integrity: sha512-17EMSJnQ9g+upVHrAUYDMfH5lvRKQ9Nvg8WtEoH72oDr1VpWz+7/o3tD97U1EToen2YAQ/68JmtDYkQUi20dfQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [android]
+
+  '@oxfmt/binding-android-arm64@0.52.0':
+    resolution: {integrity: sha512-A2G1IdwGEW2lLJkIxcvuirRH1CzSl/e0NX11zTlW1gvxJThfwbI/BEoaKrTNpm7M2FchvIf6guvIQU7d5iz+OQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@oxfmt/binding-darwin-arm64@0.52.0':
+    resolution: {integrity: sha512-f9+bLvOYxy7NttCLFTvQ7afmqDOWY4wIP9xdvfj5trQ1qj6f2UFAGwZESlfsMjvJNTyRpXfIlOanCI9FOvoeQA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxfmt/binding-darwin-x64@0.52.0':
+    resolution: {integrity: sha512-YSTB9sJ5nnQd/Q0ddHkgof0ZCHPAnWZT1IW2SJ8omz7CP7KluJhO1fNHrpqdxCtpztJwSs4hY1uAee35wKxxaw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxfmt/binding-freebsd-x64@0.52.0':
+    resolution: {integrity: sha512-NIrRNTTPCs4UbmVs0bxLSCDlLCtIRMJIXklNKaXa5Oj2/K1UIMBvgE8+uPVo01Io3N9HF0+GAX+aAHjUgZS7vA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@oxfmt/binding-linux-arm-gnueabihf@0.52.0':
+    resolution: {integrity: sha512-JXUCde8mn3GpgQouz2PXUokgy/uT1QrRJBL2s983VWcSQp62wTFYiNXgTKdeo1Jgbr0IgUnKKvzIk/YBlj/nVQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxfmt/binding-linux-arm-musleabihf@0.52.0':
+    resolution: {integrity: sha512-psbUXaRZ+V8DaXz10Qf7LSHtdtdKAmC8fxXgeU608jjzrmWK4quamZMOpl6sf+dikoFHA85uE93Q0BqxrCdQrQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxfmt/binding-linux-arm64-gnu@0.52.0':
+    resolution: {integrity: sha512-Jw7MgWUU9lcLCcy82updISP3EthTlfvAwR6gWNxPzqly7+fLvOi2gHQE9xXQjpqaVLm/8P+gOzlv9ODuoVlaaw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@oxfmt/binding-linux-arm64-musl@0.52.0':
+    resolution: {integrity: sha512-wZg6bLjDvh2KibyI3QFUYo8GTXneIFsd0JvehtvJiUmQ8WRPERgxd/VM4ctWb86U5FT1FkqgS8/wZKVB+AZScg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@oxfmt/binding-linux-ppc64-gnu@0.52.0':
+    resolution: {integrity: sha512-IngE8uxhNvxcMrLjZNDo9xNLY7rEK33AKnaMd2B46he1e/mz2CfcW6If/U1wUjdRZddm1QzQaciqZkuMkdh1FA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@oxfmt/binding-linux-riscv64-gnu@0.52.0':
+    resolution: {integrity: sha512-H3+DdFMv/efN3Efmhsv18jDrpiWWqKG7wsfAlQBqAt6z/E2Bx+TwEj2Nowe51CPOWB8/mFBC2dAMSgVFLvvowA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@oxfmt/binding-linux-riscv64-musl@0.52.0':
+    resolution: {integrity: sha512-zji+1kb7lJKohSDjzC1IsS+K/cKRs1hdVf0ZH0VbdbiakmtLvN9twBoXo/k8VdjFax7kfo+DyPxS7vv52br1aw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@oxfmt/binding-linux-s390x-gnu@0.52.0':
+    resolution: {integrity: sha512-hcLBYedpCy7ToUvvBidWk7+11Yhg1oAZ4+6hKPic/mQI6NaqXJSXMps5nFlwUuX2ewhtLZZDPg63TI042qGKBg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+
+  '@oxfmt/binding-linux-x64-gnu@0.52.0':
+    resolution: {integrity: sha512-IDO2loXK2OtTOhSPchU9MW25mWL2QCDGdJbjN8MXKZVS80qXe5gMTwQWu/gMJ3juoBHbkuUZNB2N1LHzNT7DoA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@oxfmt/binding-linux-x64-musl@0.52.0':
+    resolution: {integrity: sha512-mAV2Hjn0SatJ+KoAzKUC3eJhdJ8wv+3m1KyuS0dTsbF0c5weq+QrCt/DRZZM+uj/XiKzCDEUKYsBF30e2qkcyw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@oxfmt/binding-openharmony-arm64@0.52.0':
+    resolution: {integrity: sha512-vd4npaUIwChxp7XzkqmepBWTT9YMcSe/NBApVGPC30/lLyOVaV3dvma1SKo03t8O73BPRAG7EyJzGlN5cJM5hQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@oxfmt/binding-win32-arm64-msvc@0.52.0':
+    resolution: {integrity: sha512-k2sz6gWQdMfh5HPpIS+Bw/0UEV/kaK2xuqJRrWL233sEHx9WLlsmvlPFM4HUNThkYbSN0U0vPW7LVKZWDS8hPQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxfmt/binding-win32-ia32-msvc@0.52.0':
+    resolution: {integrity: sha512-rhke69GTcArodLHpjMTfNnvjTEBryDeZcUCKK/VjXDMtfTULl6QRh0ymX5/hbCUv2WjYm9h/QbW++q2vE15gWQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@oxfmt/binding-win32-x64-msvc@0.52.0':
+    resolution: {integrity: sha512-q5xL7oeXkZdEtNZWBdvehJcmt+GRu9l2bK40yJs1jJXlqq+r0Hygb1rTjq+FM2o/2xyt4cufH6KRplHp3Jjsvw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@oxlint-tsgolint/darwin-arm64@0.23.0':
+    resolution: {integrity: sha512-gOs9PVr2wEg4ox9z0aJo+RKhhImW86YL5N6yav8BK/rgPsIrwN/igSZ+pbRr723NFvUNKde9fgMhRA6JrXAOZw==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxlint-tsgolint/darwin-x64@0.23.0':
+    resolution: {integrity: sha512-kjJ8B+7n4tB9VJdxS5A9GdJt6/bYpzbu4lXp2uO1S3sRmCB5gDEABlGoiePNApRWaW+xqL4b4xgiE727jSLhuA==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxlint-tsgolint/linux-arm64@0.23.0':
+    resolution: {integrity: sha512-6dCZuKNu135seMXilkRk9SpCx6i1XgmiipYGalLij5WVRX6ZYS8c4xI7preN/zv9fCXhsQclTIMDu2Y/cytTjw==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@oxlint-tsgolint/linux-x64@0.23.0':
+    resolution: {integrity: sha512-3bdilnyA7kmSTjK27rvjIjSxL5SIg3wt7vwNiRkouWB83ytssyKnuGvxSYJxgMEmFpSutzaBzcCUM2jDtPGcgA==}
+    cpu: [x64]
+    os: [linux]
+
+  '@oxlint-tsgolint/win32-arm64@0.23.0':
+    resolution: {integrity: sha512-j+OEp44SVYiQ+ZD+uttsX7u6L9SvmbbQ77SO1pSFCcJlsVMeCk8qZsjhKfGKuT/jIA+ipOJMVs/+pqUfObBWNw==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxlint-tsgolint/win32-x64@0.23.0':
+    resolution: {integrity: sha512-5MyjFuqf+g8OUPJBSGWHJtmoWnzFJYyOg4To9WMQshZYEWig/vtu7JtJ03VWnzHv9LJkAUeApY0gVCOywFR/iQ==}
+    cpu: [x64]
+    os: [win32]
+
+  '@oxlint/binding-android-arm-eabi@1.67.0':
+    resolution: {integrity: sha512-VrSi571rDv1N8HaEDM+DEX8nmT0y9jJo8tzzW13vsOWTx59xQczCIJx68n2zWOXRT5YKZsOZXp4qkHN/10x4mw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [android]
+
+  '@oxlint/binding-android-arm64@1.67.0':
+    resolution: {integrity: sha512-l6+NdYxMoRohix5r5bbigW16LPicceCwGcQ6LKKuE1kUdjgFfQolJjrJsQYPFetIs78Gxj/G/f5TEGoTCwj9nQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@oxlint/binding-darwin-arm64@1.67.0':
+    resolution: {integrity: sha512-jOzXxS1AxFxhImLIRbtGIMrEwaXcgMw3gR57WB1cRk8ai+vpr6726kxXqVvlNsrXtJ/FrmOm8RxlC0m8SW24Qg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@oxlint/binding-darwin-x64@1.67.0':
+    resolution: {integrity: sha512-3DFAVY94OqjIZHXIPz37yGRSWwOFTAqChQ64/M69GYLawzP0KiwdhDNfqdKKYT0bTR/DNxmMnQsj3ns+8+X/Lg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@oxlint/binding-freebsd-x64@1.67.0':
+    resolution: {integrity: sha512-e4dDKZuLu8TR9DEBssWSDahlPgZBwojTTHZUvnjBRJfJJbpxYCjfjKfi0Z1+CSLMiJBwI2yCDtRM1XJQaARjmg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@oxlint/binding-linux-arm-gnueabihf@1.67.0':
+    resolution: {integrity: sha512-BKytFdcQzbITV3xlnzDUDTEDtbUMCCiC4EaNTDZ4FyT8gdNvBC4gfiLucXp/sQl0XU3p7syTlorUWVVVBZab2g==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxlint/binding-linux-arm-musleabihf@1.67.0':
+    resolution: {integrity: sha512-XYAv0esBDX7BpTzRDjVX2Vdj+zndd8ll2dFQiaeQ6zTZr7A8GRDTN7fH3FP3jU+O0vCDx85oH/EtG7BzPgAXuw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@oxlint/binding-linux-arm64-gnu@1.67.0':
+    resolution: {integrity: sha512-zizRMjA0i6u/2B0evgda04iycu+MoNuf1pBy6Eh+1CjC5wMEG7qN5zdDKTCvFc0KSYSDM9QTG3gjZHirgtQuKg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@oxlint/binding-linux-arm64-musl@1.67.0':
+    resolution: {integrity: sha512-zB/Tf6sUjmmvvbva9Gj3JTJ8rJ9t4I8/U0o6vSRtd0DRIsIuyegBwJAzhSUFQHdMijIRJkW0exs/yBhpw2S20w==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@oxlint/binding-linux-ppc64-gnu@1.67.0':
+    resolution: {integrity: sha512-kgU40Gt74CK0TCsF51KZymkIwN9U0BajKsMijB52zPqOeZU9NAHkA/NSQkZDHEaCakx42DxhXkODiAqf2b4Gug==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@oxlint/binding-linux-riscv64-gnu@1.67.0':
+    resolution: {integrity: sha512-tOYhkk/iaG9aD3FvGpBFd1Lrw0x0RaVoJBxjUkfNzS50rC5NS5BteNCwgr8A2zCdADrIIoze6D7u6U5Ic++/iQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@oxlint/binding-linux-riscv64-musl@1.67.0':
+    resolution: {integrity: sha512-sEtywrPb+0b+tHYl1SDCrw903fiC4eyKoNqzP3v+f2JT3Xcv4NEYG+P8rj+eEnX7IWhqV/xj8/JmcmVj21CXaA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@oxlint/binding-linux-s390x-gnu@1.67.0':
+    resolution: {integrity: sha512-BvR8Moa0zCLxroOx4vZaZN9nUfwAUpSTwjZdxZyKy4bv3PrzrXrxKR/ZQ0L9wNSvlPhnMJeZfa3q5w6ZCTuN6Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+
+  '@oxlint/binding-linux-x64-gnu@1.67.0':
+    resolution: {integrity: sha512-mm2cxM6fksOpq6l0uFws8BUGKAR4dNa/cZCn37Npq7PFbhD5HDJqWfnoIvTaeRKMy5XdS2tO0MA0qbHDrnXAAA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@oxlint/binding-linux-x64-musl@1.67.0':
+    resolution: {integrity: sha512-WmbMuLapKyDlobMkXAaAL0Y+Uczh4LETfIfQsUpbId4Ip8Ai82/jqeYTOoUCkuuhBFapgqP253+d83tLKOksJg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@oxlint/binding-openharmony-arm64@1.67.0':
+    resolution: {integrity: sha512-9g/PqxYJelzzTAOR5Y+RiRqdeydhEuXv2KxNeFcAKQ7UsvnWSY1OP4MsuPMbTO2Pf70tz7mFhl1j13H3fyh+8g==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@oxlint/binding-win32-arm64-msvc@1.67.0':
+    resolution: {integrity: sha512-2VhwE6Gatb0vJGnN0TBuQMbKCOiZlSQ/zJvVWYLK4a9d4iDiJOen/yVQkGpmsJ90MuH66fzi0kEKI0jRQMDxGA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@oxlint/binding-win32-ia32-msvc@1.67.0':
+    resolution: {integrity: sha512-EQ3VExXfeM1InbE5+JjufhZZTWy+kHUwgt3yZR7gQ47Je/mE0WspQPan0OJznh493L5anM210YNJtH1PXjTSFg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@oxlint/binding-win32-x64-msvc@1.67.0':
+    resolution: {integrity: sha512-bw24y+/1MHS4QDkons3YyHkPT9uCMoLHHgQhb+mb8NOjTYwub1CZ+K9Ngr8aO5DMrDrkqHwTzlTwFP2vS8Y/ZQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@oxlint/plugins@1.61.0':
+    resolution: {integrity: sha512-nkOyZEF1vH527CkdQtOp1HMrVFEM4ResURvI2JFeGoup+h+43J/k/FgdOR9b9Isxg+Yae7qVDa7y3nssE8b3TQ==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
   '@peculiar/asn1-cms@2.8.0':
     resolution: {integrity: sha512-NgekZOrSJFSBFLFoLfwePguAWAx7z1+f2TEsWFUMyiqqfntZ4+S/S5hzqME3q4pCA0iOsFKdwiQ35dwY24eVqA==}
 
@@ -2979,6 +3254,9 @@ packages:
     resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
 
+  '@polka/url@1.0.0-next.29':
+    resolution: {integrity: sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==}
+
   '@radix-ui/number@1.1.2':
     resolution: {integrity: sha512-ceTwaxc4I5IOi97DgCotl3pqiyRGvffcc0oOsE2dQYaJOFIDsDt4VWG6xEbg1QePv9QWausCEIppud/tJ1wNig==}
 
@@ -4701,6 +4979,148 @@ packages:
   '@vitest/utils@4.1.6':
     resolution: {integrity: sha512-FxIY+U81R3LGKCxaHHFRQ5+g6/iRgGLmeHWdp2Amj4ljQRrEIWHmZyDfDYBRZlpyqA7qKxtS9DD1dhk8RnRIVQ==}
 
+  '@voidzero-dev/vite-plus-core@0.1.23':
+    resolution: {integrity: sha512-Twi+95cq1pObzkNR4u6lP7z4gPhtS0/vxeBAdbTvAeA12qlyyFED7mQZnAgaVIN3k1C1ve0997F3/ncUBAwQ8w==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      '@arethetypeswrong/core': ^0.18.1
+      '@tsdown/css': 0.22.0
+      '@tsdown/exe': 0.22.0
+      '@types/node': ^20.19.0 || >=22.12.0
+      '@vitejs/devtools': ^0.1.18
+      esbuild: ^0.27.0 || ^0.28.0
+      jiti: '>=1.21.0'
+      less: ^4.0.0
+      publint: ^0.3.8
+      sass: ^1.70.0
+      sass-embedded: ^1.70.0
+      stylus: '>=0.54.8'
+      sugarss: ^5.0.0
+      terser: ^5.16.0
+      tsx: ^4.8.1
+      typescript: ^5.0.0 || ^6.0.0
+      unplugin-unused: ^0.5.0
+      unrun: '*'
+      yaml: 2.8.3
+    peerDependenciesMeta:
+      '@arethetypeswrong/core':
+        optional: true
+      '@tsdown/css':
+        optional: true
+      '@tsdown/exe':
+        optional: true
+      '@types/node':
+        optional: true
+      '@vitejs/devtools':
+        optional: true
+      esbuild:
+        optional: true
+      jiti:
+        optional: true
+      less:
+        optional: true
+      publint:
+        optional: true
+      sass:
+        optional: true
+      sass-embedded:
+        optional: true
+      stylus:
+        optional: true
+      sugarss:
+        optional: true
+      terser:
+        optional: true
+      tsx:
+        optional: true
+      typescript:
+        optional: true
+      unplugin-unused:
+        optional: true
+      unrun:
+        optional: true
+      yaml:
+        optional: true
+
+  '@voidzero-dev/vite-plus-darwin-arm64@0.1.23':
+    resolution: {integrity: sha512-5tRAYzVHE6X+QK7MVE2URyubL5d9+wbXhepImVEwkdOhGThxsTiCchxzJrjeqVSFf0GT8eFC3URBuKTzWBD9NA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@voidzero-dev/vite-plus-darwin-x64@0.1.23':
+    resolution: {integrity: sha512-05qpV7lqe9iiyCIWKhdlwEiMG4NYPt/9FZa+fBvXo0YOV4JTC1yTUMWr1X4edzYJg7Y1Jdx06u3Tu2AJvGKwSw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@voidzero-dev/vite-plus-linux-arm64-gnu@0.1.23':
+    resolution: {integrity: sha512-qb5gUpBJovwfkDjHZKHy8LTh+69kQIKlIXVYLe8wVAw6+cEI4WNWPf6YHJdnPIKtOYsGNZ5vllFHbtT3i6uOfA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@voidzero-dev/vite-plus-linux-arm64-musl@0.1.23':
+    resolution: {integrity: sha512-mvB3XYltfUn55WdgRYZHDY+bgeOwrwsMhdftXDC8T7tIUglIxcuo3+xMOZOrbFFjJXNPelUjvU1R9ItAR8rY1w==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@voidzero-dev/vite-plus-linux-x64-gnu@0.1.23':
+    resolution: {integrity: sha512-Hf7phM8L2wUdLloQHbylRzmJEv9PIUCC5Yvdo1UycWyiEl99CUgAlrSmZyfkKxPh+MSFaa+xNwfXdf9zwXM8mg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
+    resolution: {integrity: sha512-YJ+OT7tddkUshfojk1jIyJcQHA3h5cMKSpCVVJcJwTCZNb9z9zRcjZCxGbwwTOqrV4PzP8TVy50aEEl0jP1lTg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@voidzero-dev/vite-plus-test@0.1.23':
+    resolution: {integrity: sha512-50NmnIMHsES5f+4iScEwqAR6LlsE1oP7n1HBxaYVX839tjMWCYHRUiBlBZFU+OoWwuFNq0I1ap0j0vamvJsYGg==}
+    engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
+    peerDependencies:
+      '@edge-runtime/vm': '*'
+      '@opentelemetry/api': ^1.9.0
+      '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
+      '@vitest/coverage-istanbul': 4.1.7
+      '@vitest/coverage-v8': 4.1.7
+      '@vitest/ui': 4.1.7
+      happy-dom: '*'
+      jsdom: '*'
+      vite: 7.3.5
+    peerDependenciesMeta:
+      '@edge-runtime/vm':
+        optional: true
+      '@opentelemetry/api':
+        optional: true
+      '@types/node':
+        optional: true
+      '@vitest/coverage-istanbul':
+        optional: true
+      '@vitest/coverage-v8':
+        optional: true
+      '@vitest/ui':
+        optional: true
+      happy-dom:
+        optional: true
+      jsdom:
+        optional: true
+
+  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.23':
+    resolution: {integrity: sha512-/y2Yz5/kbDv4VlgGHiCXNTZ2ZeIPjSo5iogytb3kX2skxaQi7JqAwxjYjfjSD6q6e6lFIyxNEX81BSbcbIFVXw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.23':
+    resolution: {integrity: sha512-YoHCatW5TBhQvIJU0ewA4TVGvznTfhLgjqHY8Pn3HVFNWhNO9DCOsP4ihpvKzYFS7F9dx0xmmAYXOH/suArDFQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
   '@xmldom/xmldom@0.8.13':
     resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
     engines: {node: '>=10.0.0'}
@@ -7376,6 +7796,10 @@ packages:
   mlly@1.8.2:
     resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
 
+  mrmime@2.0.1:
+    resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
+    engines: {node: '>=10'}
+
   ms@2.0.0:
     resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
 
@@ -7581,13 +8005,43 @@ packages:
     resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
     engines: {node: '>= 0.8.0'}
 
-  ora@3.4.0:
-    resolution: {integrity: sha512-eNwHudNbO1folBP3JsZ19v9azXWtQZjICdr3Q0TDPIaeBQ3mXLrh54wM+er0+hSp+dWKf+Z8KM58CYzEyIYxYg==}
-    engines: {node: '>=6'}
+  ora@3.4.0:
+    resolution: {integrity: sha512-eNwHudNbO1folBP3JsZ19v9azXWtQZjICdr3Q0TDPIaeBQ3mXLrh54wM+er0+hSp+dWKf+Z8KM58CYzEyIYxYg==}
+    engines: {node: '>=6'}
+
+  own-keys@1.0.1:
+    resolution: {integrity: sha512-qFOyK5PjiWZd+QQIh+1jhdb9LpxTF0qs7Pm8o5QHYZ0M3vKqSqzsZaEB6oWlxZ+q2sJBMI/Ktgd2N5ZwQoRHfg==}
+    engines: {node: '>= 0.4'}
+
+  oxfmt@0.52.0:
+    resolution: {integrity: sha512-nJlYM35F64zTDMecCNhoHNkf+D/eHv7xcjj9XDSj+bFAVtN93m7v8DQMdHd6nDG6Akf/kEYYHmDUBs2Dz27Sug==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      svelte: ^5.0.0
+      vite-plus: '*'
+    peerDependenciesMeta:
+      svelte:
+        optional: true
+      vite-plus:
+        optional: true
+
+  oxlint-tsgolint@0.23.0:
+    resolution: {integrity: sha512-3mBv3CoPbh8dFbzfDGIWa2ytZjn2v+3EX4aKRXjIhsoGFzG8GCjfRirz3rwZf1wYbZzsNLTSgpw8VjQuWdp/jA==}
+    hasBin: true
 
-  own-keys@1.0.1:
-    resolution: {integrity: sha512-qFOyK5PjiWZd+QQIh+1jhdb9LpxTF0qs7Pm8o5QHYZ0M3vKqSqzsZaEB6oWlxZ+q2sJBMI/Ktgd2N5ZwQoRHfg==}
-    engines: {node: '>= 0.4'}
+  oxlint@1.67.0:
+    resolution: {integrity: sha512-blwwaHPdoH8piQ5/z0KHeoHFR7FZgl12WluKJfu4qFLPkZl6mK04PkLE45Fw1NxfBRSlh40Gu7MkxHUw++ociQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+    peerDependencies:
+      oxlint-tsgolint: '>=0.22.1'
+      vite-plus: '*'
+    peerDependenciesMeta:
+      oxlint-tsgolint:
+        optional: true
+      vite-plus:
+        optional: true
 
   p-limit@2.3.0:
     resolution: {integrity: sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==}
@@ -7693,6 +8147,10 @@ packages:
     resolution: {integrity: sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==}
     engines: {node: '>= 6'}
 
+  pixelmatch@7.2.0:
+    resolution: {integrity: sha512-xhcb4yHu9sM/G7foGzoLtXYcC0zHEaOXXjRKhGup0fw78Nf2Tkiapv4EQyMzrbcmQPsllAI7DbFY2UT7PlI9Pg==}
+    hasBin: true
+
   pkg-dir@4.2.0:
     resolution: {integrity: sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==}
     engines: {node: '>=8'}
@@ -7711,6 +8169,10 @@ packages:
     resolution: {integrity: sha512-NCrCHhWmnQklfH4MtJMRjZ2a8c80qXeMlQMv2uVp9ISJMTt562SbGd6n2oq0PaPgKm7Z6pL9E2UlLIhC+SHL3w==}
     engines: {node: '>=4.0.0'}
 
+  pngjs@7.0.0:
+    resolution: {integrity: sha512-LKWqWJRhstyYo9pGvgor/ivk2w94eSjE3RGVuzLGlr3NmD8bf7RcYGze1mNdEHRP6TRP6rMuDHk5t44hnTRyow==}
+    engines: {node: '>=14.19.0'}
+
   possible-typed-array-names@1.1.0:
     resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
     engines: {node: '>= 0.4'}
@@ -8319,6 +8781,10 @@ packages:
   simple-swizzle@0.2.4:
     resolution: {integrity: sha512-nAu1WFPQSMNr2Zn9PGSZK9AGn4t/y97lEm+MXTtUDwfP0ksAIX4nO+6ruD9Jwut4C49SB1Ws+fbXsm/yScWOHw==}
 
+  sirv@3.0.2:
+    resolution: {integrity: sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==}
+    engines: {node: '>=18'}
+
   sisteransi@1.0.5:
     resolution: {integrity: sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==}
 
@@ -8611,6 +9077,10 @@ packages:
     resolution: {integrity: sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==}
     engines: {node: ^18.0.0 || >=20.0.0}
 
+  tinypool@2.1.0:
+    resolution: {integrity: sha512-Pugqs6M0m7Lv1I7FtxN4aoyToKg1C4tu+/381vH35y8oENM/Ai7f7C4StcoK4/+BSw9ebcS8jRiVrORFKCALLw==}
+    engines: {node: ^20.0.0 || >=22.0.0}
+
   tinyrainbow@2.0.0:
     resolution: {integrity: sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==}
     engines: {node: '>=14.0.0'}
@@ -8638,6 +9108,10 @@ packages:
     resolution: {integrity: sha512-EBJnVBr3dTXdA89WVFoAIPUqkBjxPMwRqsfuo1r240tKFHXv3zgca4+NJib/h6TyvGF7vOawz0jGuryJCdNHrw==}
     engines: {node: '>=20'}
 
+  totalist@3.0.1:
+    resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==}
+    engines: {node: '>=6'}
+
   tough-cookie@4.1.4:
     resolution: {integrity: sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==}
     engines: {node: '>=6'}
@@ -8938,6 +9412,11 @@ packages:
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
     hasBin: true
 
+  vite-plus@0.1.23:
+    resolution: {integrity: sha512-4VCb0L6uaN3dTvBD6u4Wk0MqhXIKvi2InyCRw+RkOQ0NEt7bgcF4xD9aJRakH0r0EW9MQKLUGjIUH25dtGjncA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+
   vite-tsconfig-paths@5.1.4:
     resolution: {integrity: sha512-cYj0LRuLV2c2sMqhqhGpaO3LretdtMn/BVX4cPLanIZuwwrkVl+lK84E/miEXkCHWXuq65rhNN4rXsBcOB3S4w==}
     peerDependencies:
@@ -10988,7 +11467,7 @@ snapshots:
       wrap-ansi: 7.0.0
       ws: 8.21.0
     optionalDependencies:
-      expo-router: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
+      expo-router: 6.0.23(70ed454dc246c77d537ead71b0fe3992)
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - bufferutil
@@ -11543,6 +12022,144 @@ snapshots:
 
   '@opentelemetry/semantic-conventions@1.43.0': {}
 
+  '@oxc-project/runtime@0.133.0': {}
+
+  '@oxc-project/types@0.133.0': {}
+
+  '@oxfmt/binding-android-arm-eabi@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-android-arm64@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-darwin-arm64@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-darwin-x64@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-freebsd-x64@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-arm-gnueabihf@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-arm-musleabihf@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-arm64-gnu@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-arm64-musl@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-ppc64-gnu@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-riscv64-gnu@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-riscv64-musl@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-s390x-gnu@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-x64-gnu@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-linux-x64-musl@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-openharmony-arm64@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-win32-arm64-msvc@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-win32-ia32-msvc@0.52.0':
+    optional: true
+
+  '@oxfmt/binding-win32-x64-msvc@0.52.0':
+    optional: true
+
+  '@oxlint-tsgolint/darwin-arm64@0.23.0':
+    optional: true
+
+  '@oxlint-tsgolint/darwin-x64@0.23.0':
+    optional: true
+
+  '@oxlint-tsgolint/linux-arm64@0.23.0':
+    optional: true
+
+  '@oxlint-tsgolint/linux-x64@0.23.0':
+    optional: true
+
+  '@oxlint-tsgolint/win32-arm64@0.23.0':
+    optional: true
+
+  '@oxlint-tsgolint/win32-x64@0.23.0':
+    optional: true
+
+  '@oxlint/binding-android-arm-eabi@1.67.0':
+    optional: true
+
+  '@oxlint/binding-android-arm64@1.67.0':
+    optional: true
+
+  '@oxlint/binding-darwin-arm64@1.67.0':
+    optional: true
+
+  '@oxlint/binding-darwin-x64@1.67.0':
+    optional: true
+
+  '@oxlint/binding-freebsd-x64@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-arm-gnueabihf@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-arm-musleabihf@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-arm64-gnu@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-arm64-musl@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-ppc64-gnu@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-riscv64-gnu@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-riscv64-musl@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-s390x-gnu@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-x64-gnu@1.67.0':
+    optional: true
+
+  '@oxlint/binding-linux-x64-musl@1.67.0':
+    optional: true
+
+  '@oxlint/binding-openharmony-arm64@1.67.0':
+    optional: true
+
+  '@oxlint/binding-win32-arm64-msvc@1.67.0':
+    optional: true
+
+  '@oxlint/binding-win32-ia32-msvc@1.67.0':
+    optional: true
+
+  '@oxlint/binding-win32-x64-msvc@1.67.0':
+    optional: true
+
+  '@oxlint/plugins@1.61.0': {}
+
   '@peculiar/asn1-cms@2.8.0':
     dependencies:
       '@peculiar/asn1-schema': 2.8.0
@@ -11638,6 +12255,8 @@ snapshots:
 
   '@pkgr/core@0.2.9': {}
 
+  '@polka/url@1.0.0-next.29': {}
+
   '@radix-ui/number@1.1.2': {}
 
   '@radix-ui/primitive@1.1.3': {}
@@ -13527,6 +14146,88 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 25.3.3
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 5.9.3
+      yaml: 2.8.3
+
+  '@voidzero-dev/vite-plus-darwin-arm64@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-darwin-x64@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-linux-arm64-gnu@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-linux-arm64-musl@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-linux-x64-gnu@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 25.3.3
+      jsdom: 20.0.3
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.23':
+    optional: true
+
   '@xmldom/xmldom@0.8.13': {}
 
   abab@2.0.6: {}
@@ -15353,6 +16054,49 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
+  expo-router@6.0.23(70ed454dc246c77d537ead71b0fe3992):
+    dependencies:
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/schema-utils': 0.1.8
+      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      client-only: 0.0.1
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-server: 1.0.5
+      fast-deep-equal: 3.1.3
+      invariant: 2.2.4
+      nanoid: 3.3.11
+      query-string: 7.1.3
+      react: 19.1.0
+      react-fast-compare: 3.2.2
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      semver: 7.6.3
+      server-only: 0.0.1
+      sf-symbols-typescript: 2.2.0
+      shallowequal: 1.1.0
+      use-latest-callback: 0.2.6(react@19.1.0)
+      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+    optionalDependencies:
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
+      react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
+      - '@types/react'
+      - '@types/react-dom'
+      - supports-color
+    optional: true
+
   expo-router@6.0.23(915cc1bcc1b7ce0da6289325fa4c723d):
     dependencies:
       '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -17031,6 +17775,8 @@ snapshots:
       pkg-types: 1.3.1
       ufo: 1.6.4
 
+  mrmime@2.0.1: {}
+
   ms@2.0.0: {}
 
   ms@2.1.3: {}
@@ -17282,6 +18028,64 @@ snapshots:
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxlint-tsgolint@0.23.0:
+    optionalDependencies:
+      '@oxlint-tsgolint/darwin-arm64': 0.23.0
+      '@oxlint-tsgolint/darwin-x64': 0.23.0
+      '@oxlint-tsgolint/linux-arm64': 0.23.0
+      '@oxlint-tsgolint/linux-x64': 0.23.0
+      '@oxlint-tsgolint/win32-arm64': 0.23.0
+      '@oxlint-tsgolint/win32-x64': 0.23.0
+
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   p-limit@2.3.0:
     dependencies:
       p-try: 2.2.0
@@ -17364,6 +18168,10 @@ snapshots:
 
   pirates@4.0.7: {}
 
+  pixelmatch@7.2.0:
+    dependencies:
+      pngjs: 7.0.0
+
   pkg-dir@4.2.0:
     dependencies:
       find-up: 4.1.0
@@ -17388,6 +18196,8 @@ snapshots:
 
   pngjs@3.4.0: {}
 
+  pngjs@7.0.0: {}
+
   possible-typed-array-names@1.1.0: {}
 
   postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3):
@@ -18114,6 +18924,12 @@ snapshots:
     dependencies:
       is-arrayish: 0.3.4
 
+  sirv@3.0.2:
+    dependencies:
+      '@polka/url': 1.0.0-next.29
+      mrmime: 2.0.1
+      totalist: 3.0.1
+
   sisteransi@1.0.5: {}
 
   slash@2.0.0: {}
@@ -18404,6 +19220,8 @@ snapshots:
 
   tinypool@1.1.1: {}
 
+  tinypool@2.1.0: {}
+
   tinyrainbow@2.0.0: {}
 
   tinyrainbow@3.1.0: {}
@@ -18420,6 +19238,8 @@ snapshots:
 
   toml@4.1.1: {}
 
+  totalist@3.0.1: {}
+
   tough-cookie@4.1.4:
     dependencies:
       psl: 1.15.0
@@ -18868,6 +19688,56 @@ snapshots:
       - tsx
       - yaml
 
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
   vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3

From e5e37ac0c25383de4aaa9f282297eafecd8875a2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 17:20:32 +0200
Subject: [PATCH 050/129] feat(mimic): publish core primitives

---
 packages/mimic-core/LICENSE.md                | 661 +++++++++++++++
 packages/mimic-core/README.md                 |   1 +
 packages/mimic-core/package.json              |  36 +
 packages/mimic-core/src/core/apply.ts         | 357 +++++++++
 packages/mimic-core/src/core/errors.ts        |  33 +
 packages/mimic-core/src/core/order.ts         | 120 +++
 packages/mimic-core/src/core/types.ts         | 215 +++++
 packages/mimic-core/src/core/validate.ts      | 103 +++
 packages/mimic-core/src/fractional/index.ts   | 567 +++++++++++++
 packages/mimic-core/src/index.ts              |  13 +
 packages/mimic-core/src/primitives/Array.ts   | 450 +++++++++++
 packages/mimic-core/src/primitives/Boolean.ts | 131 +++
 packages/mimic-core/src/primitives/Either.ts  | 150 ++++
 packages/mimic-core/src/primitives/Lazy.ts    |  59 ++
 packages/mimic-core/src/primitives/Literal.ts | 147 ++++
 packages/mimic-core/src/primitives/Number.ts  | 173 ++++
 packages/mimic-core/src/primitives/String.ts  | 179 +++++
 packages/mimic-core/src/primitives/Struct.ts  | 360 +++++++++
 packages/mimic-core/src/primitives/Tree.ts    | 695 ++++++++++++++++
 .../mimic-core/src/primitives/TreeNode.ts     | 120 +++
 packages/mimic-core/src/primitives/Union.ts   | 268 +++++++
 packages/mimic-core/src/primitives/index.ts   |  13 +
 packages/mimic-core/src/primitives/path.ts    | 156 ++++
 packages/mimic-core/src/primitives/session.ts |  48 ++
 packages/mimic-core/src/primitives/shared.ts  | 126 +++
 packages/mimic-core/src/primitives/value.ts   |  86 ++
 packages/mimic-core/src/schema/defaults.ts    |  32 +
 packages/mimic-core/src/schema/errors.ts      |  48 ++
 packages/mimic-core/src/schema/index.ts       |   8 +
 packages/mimic-core/src/schema/model.ts       |  60 ++
 .../mimic-core/src/schema/models/array.ts     |  84 ++
 .../mimic-core/src/schema/models/boolean.ts   |  34 +
 .../mimic-core/src/schema/models/either.ts    |  68 ++
 .../mimic-core/src/schema/models/literal.ts   |  74 ++
 .../mimic-core/src/schema/models/number.ts    |  77 ++
 .../mimic-core/src/schema/models/object.ts    | 112 +++
 .../mimic-core/src/schema/models/string.ts    |  84 ++
 packages/mimic-core/src/schema/models/tree.ts | 239 ++++++
 .../mimic-core/src/schema/models/union.ts     | 114 +++
 packages/mimic-core/src/schema/parse.ts       |  78 ++
 packages/mimic-core/src/schema/registry.ts    |  34 +
 packages/mimic-core/src/schema/serialize.ts   |   7 +
 packages/mimic-core/src/schema/shared.ts      | 305 +++++++
 packages/mimic-core/src/schema/types.ts       | 189 +++++
 packages/mimic-core/src/schema/validate.ts    |  36 +
 packages/mimic-core/tests/fixtures/README.md  |  19 +
 .../mimic-core/tests/fixtures/arrays.json     | 297 +++++++
 .../mimic-core/tests/fixtures/batches.json    | 176 ++++
 .../tests/fixtures/case.schema.json           | 500 ++++++++++++
 .../mimic-core/tests/fixtures/fractional.json |  57 ++
 packages/mimic-core/tests/fixtures/index.json |   4 +
 .../mimic-core/tests/fixtures/objects.json    | 152 ++++
 packages/mimic-core/tests/fixtures/trees.json | 453 +++++++++++
 .../mimic-core/tests/fixtures/values.json     | 103 +++
 .../mimic-core/tests/primitives/array.test.ts |  46 ++
 .../tests/primitives/boolean.test.ts          |  19 +
 .../tests/primitives/commands.test.ts         |  33 +
 .../tests/primitives/either.test.ts           |  23 +
 .../mimic-core/tests/primitives/lazy.test.ts  |  20 +
 .../tests/primitives/literal.test.ts          |  25 +
 .../tests/primitives/number.test.ts           |  19 +
 .../tests/primitives/schema-interop.test.ts   |  23 +
 .../tests/primitives/snapshot-types.test.ts   | 158 ++++
 .../tests/primitives/string.test.ts           |  36 +
 .../tests/primitives/struct.test.ts           | 134 ++++
 .../tests/primitives/tree-node.test.ts        |  17 +
 .../mimic-core/tests/primitives/tree.test.ts  |  49 ++
 .../mimic-core/tests/primitives/union.test.ts |  50 ++
 .../mimic-core/tests/schema/array.test.ts     | 146 ++++
 .../mimic-core/tests/schema/boolean.test.ts   |  62 ++
 .../mimic-core/tests/schema/either.test.ts    |  63 ++
 packages/mimic-core/tests/schema/helpers.ts   |  29 +
 .../mimic-core/tests/schema/literal.test.ts   |  73 ++
 .../mimic-core/tests/schema/number.test.ts    |  74 ++
 .../mimic-core/tests/schema/object.test.ts    | 181 +++++
 .../mimic-core/tests/schema/string.test.ts    | 104 +++
 packages/mimic-core/tests/schema/tree.test.ts | 261 ++++++
 .../mimic-core/tests/schema/union.test.ts     | 139 ++++
 .../tests/spec-core-fixtures.test.ts          |  72 ++
 .../tests/spec-fractional-fixtures.test.ts    |  90 +++
 packages/mimic-core/tsconfig.build.json       |  27 +
 packages/mimic-core/tsconfig.json             |   9 +
 packages/mimic-core/tsdown.config.ts          |  16 +
 packages/mimic-core/vitest.mts                |   9 +
 pnpm-lock.yaml                                | 757 +++++++++++++++++-
 85 files changed, 11460 insertions(+), 15 deletions(-)
 create mode 100644 packages/mimic-core/LICENSE.md
 create mode 100644 packages/mimic-core/README.md
 create mode 100644 packages/mimic-core/package.json
 create mode 100644 packages/mimic-core/src/core/apply.ts
 create mode 100644 packages/mimic-core/src/core/errors.ts
 create mode 100644 packages/mimic-core/src/core/order.ts
 create mode 100644 packages/mimic-core/src/core/types.ts
 create mode 100644 packages/mimic-core/src/core/validate.ts
 create mode 100644 packages/mimic-core/src/fractional/index.ts
 create mode 100644 packages/mimic-core/src/index.ts
 create mode 100644 packages/mimic-core/src/primitives/Array.ts
 create mode 100644 packages/mimic-core/src/primitives/Boolean.ts
 create mode 100644 packages/mimic-core/src/primitives/Either.ts
 create mode 100644 packages/mimic-core/src/primitives/Lazy.ts
 create mode 100644 packages/mimic-core/src/primitives/Literal.ts
 create mode 100644 packages/mimic-core/src/primitives/Number.ts
 create mode 100644 packages/mimic-core/src/primitives/String.ts
 create mode 100644 packages/mimic-core/src/primitives/Struct.ts
 create mode 100644 packages/mimic-core/src/primitives/Tree.ts
 create mode 100644 packages/mimic-core/src/primitives/TreeNode.ts
 create mode 100644 packages/mimic-core/src/primitives/Union.ts
 create mode 100644 packages/mimic-core/src/primitives/index.ts
 create mode 100644 packages/mimic-core/src/primitives/path.ts
 create mode 100644 packages/mimic-core/src/primitives/session.ts
 create mode 100644 packages/mimic-core/src/primitives/shared.ts
 create mode 100644 packages/mimic-core/src/primitives/value.ts
 create mode 100644 packages/mimic-core/src/schema/defaults.ts
 create mode 100644 packages/mimic-core/src/schema/errors.ts
 create mode 100644 packages/mimic-core/src/schema/index.ts
 create mode 100644 packages/mimic-core/src/schema/model.ts
 create mode 100644 packages/mimic-core/src/schema/models/array.ts
 create mode 100644 packages/mimic-core/src/schema/models/boolean.ts
 create mode 100644 packages/mimic-core/src/schema/models/either.ts
 create mode 100644 packages/mimic-core/src/schema/models/literal.ts
 create mode 100644 packages/mimic-core/src/schema/models/number.ts
 create mode 100644 packages/mimic-core/src/schema/models/object.ts
 create mode 100644 packages/mimic-core/src/schema/models/string.ts
 create mode 100644 packages/mimic-core/src/schema/models/tree.ts
 create mode 100644 packages/mimic-core/src/schema/models/union.ts
 create mode 100644 packages/mimic-core/src/schema/parse.ts
 create mode 100644 packages/mimic-core/src/schema/registry.ts
 create mode 100644 packages/mimic-core/src/schema/serialize.ts
 create mode 100644 packages/mimic-core/src/schema/shared.ts
 create mode 100644 packages/mimic-core/src/schema/types.ts
 create mode 100644 packages/mimic-core/src/schema/validate.ts
 create mode 100644 packages/mimic-core/tests/fixtures/README.md
 create mode 100644 packages/mimic-core/tests/fixtures/arrays.json
 create mode 100644 packages/mimic-core/tests/fixtures/batches.json
 create mode 100644 packages/mimic-core/tests/fixtures/case.schema.json
 create mode 100644 packages/mimic-core/tests/fixtures/fractional.json
 create mode 100644 packages/mimic-core/tests/fixtures/index.json
 create mode 100644 packages/mimic-core/tests/fixtures/objects.json
 create mode 100644 packages/mimic-core/tests/fixtures/trees.json
 create mode 100644 packages/mimic-core/tests/fixtures/values.json
 create mode 100644 packages/mimic-core/tests/primitives/array.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/boolean.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/commands.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/either.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/lazy.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/literal.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/number.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/schema-interop.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/snapshot-types.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/string.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/struct.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/tree-node.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/tree.test.ts
 create mode 100644 packages/mimic-core/tests/primitives/union.test.ts
 create mode 100644 packages/mimic-core/tests/schema/array.test.ts
 create mode 100644 packages/mimic-core/tests/schema/boolean.test.ts
 create mode 100644 packages/mimic-core/tests/schema/either.test.ts
 create mode 100644 packages/mimic-core/tests/schema/helpers.ts
 create mode 100644 packages/mimic-core/tests/schema/literal.test.ts
 create mode 100644 packages/mimic-core/tests/schema/number.test.ts
 create mode 100644 packages/mimic-core/tests/schema/object.test.ts
 create mode 100644 packages/mimic-core/tests/schema/string.test.ts
 create mode 100644 packages/mimic-core/tests/schema/tree.test.ts
 create mode 100644 packages/mimic-core/tests/schema/union.test.ts
 create mode 100644 packages/mimic-core/tests/spec-core-fixtures.test.ts
 create mode 100644 packages/mimic-core/tests/spec-fractional-fixtures.test.ts
 create mode 100644 packages/mimic-core/tsconfig.build.json
 create mode 100644 packages/mimic-core/tsconfig.json
 create mode 100644 packages/mimic-core/tsdown.config.ts
 create mode 100644 packages/mimic-core/vitest.mts

diff --git a/packages/mimic-core/LICENSE.md b/packages/mimic-core/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/mimic-core/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/mimic-core/README.md b/packages/mimic-core/README.md
new file mode 100644
index 000000000..cf6a64e48
--- /dev/null
+++ b/packages/mimic-core/README.md
@@ -0,0 +1 @@
+Core Mimic primitives shared across runtimes.
diff --git a/packages/mimic-core/package.json b/packages/mimic-core/package.json
new file mode 100644
index 000000000..d6845fae0
--- /dev/null
+++ b/packages/mimic-core/package.json
@@ -0,0 +1,36 @@
+{
+  "name": "@voidhash/mimic-core",
+  "version": "1.0.0-beta.19",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/mimic-core"
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "import": "./src/index.ts",
+      "require": "./src/index.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vp test run -c vitest.mts",
+    "test:watch": "vp test -c vitest.mts"
+  },
+  "devDependencies": {
+    "tsdown": "^0.18.2",
+    "typescript": "5.8.3",
+    "vite-plus": "0.1.23",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/mimic-core/src/core/apply.ts b/packages/mimic-core/src/core/apply.ts
new file mode 100644
index 000000000..9c4574f69
--- /dev/null
+++ b/packages/mimic-core/src/core/apply.ts
@@ -0,0 +1,357 @@
+import { ErrorCodes, makeCoreError } from "./errors.ts";
+import {
+  HiddenTreeRootId,
+  type ArrayItem,
+  type Command,
+  type Path,
+  type TreeNode,
+  type Value,
+  clonePath,
+  cloneValue,
+} from "./types.ts";
+import { compareArrayItems, compareTreeNodes } from "./order.ts";
+import { validateValue } from "./validate.ts";
+
+export const apply = (state: Value, command: Command): Value => {
+  validateValue(state);
+  const next = cloneValue(state);
+  applyInPlace(next, { ...command, path: clonePath(command.path) } as Command);
+  validateValue(next);
+  return next;
+};
+
+export const applyBatch = (state: Value, commands: readonly Command[]): Value => {
+  validateValue(state);
+  const next = cloneValue(state);
+  for (const command of commands) {
+    applyInPlace(next, { ...command, path: clonePath(command.path) } as Command);
+  }
+  validateValue(next);
+  return next;
+};
+
+const applyInPlace = (state: Value, command: Command): void => {
+  switch (command.kind) {
+    case "value.set":
+      applyValueSet(state, command.path, command.value);
+      return;
+    case "object.set":
+      applyObjectSet(state, command.path, command.key, command.value);
+      return;
+    case "object.delete":
+      applyObjectDelete(state, command.path, command.key);
+      return;
+    case "array.insert":
+      applyArrayInsert(state, command.path, command.item);
+      return;
+    case "array.move":
+      applyArrayMove(state, command.path, command.id, command.pos);
+      return;
+    case "array.delete":
+      applyArrayDelete(state, command.path, command.id);
+      return;
+    case "tree.insert":
+      applyTreeInsert(state, command.path, command.node);
+      return;
+    case "tree.move":
+      applyTreeMove(state, command.path, command.id, command.parent, command.pos);
+      return;
+    case "tree.delete":
+      applyTreeDelete(state, command.path, command.id);
+      return;
+  }
+};
+
+const applyValueSet = (state: Value, path: Path, value: Value): void => {
+  if (path.length === 0) {
+    replaceValue(state, cloneValue(value));
+    return;
+  }
+  mutateAtPath(state, path, (target) => {
+    replaceValue(target, cloneValue(value));
+  });
+};
+
+const applyObjectSet = (state: Value, path: Path, key: string, value: Value): void => {
+  if (!key) {
+    throw makeCoreError(ErrorCodes.InvalidCommand, "object.set requires key and value");
+  }
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "object") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "object command requires object target");
+    }
+    (target.fields as Record<string, Value>)[key] = cloneValue(value);
+  });
+};
+
+const applyObjectDelete = (state: Value, path: Path, key: string): void => {
+  if (!key) {
+    throw makeCoreError(ErrorCodes.InvalidCommand, "object.delete requires key");
+  }
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "object") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "object command requires object target");
+    }
+    if (!Object.hasOwn(target.fields, key)) {
+      throw makeCoreError(ErrorCodes.MissingField, "object field does not exist");
+    }
+    delete (target.fields as Record<string, Value>)[key];
+  });
+};
+
+const applyArrayInsert = (state: Value, path: Path, item: ArrayItem): void => {
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "array") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "array command requires array target");
+    }
+    for (const existing of target.items) {
+      if (existing.id === item.id) {
+        throw makeCoreError(ErrorCodes.DuplicateArrayItemId, "array item id already exists");
+      }
+      if (existing.pos === item.pos) {
+        throw makeCoreError(ErrorCodes.DuplicateArrayPos, "array item position already exists");
+      }
+    }
+    (target.items as ArrayItem[]).push({
+      id: item.id,
+      pos: item.pos,
+      value: cloneValue(item.value),
+    });
+    (target.items as ArrayItem[]).sort(compareArrayItems);
+  });
+};
+
+const applyArrayMove = (state: Value, path: Path, id: string, pos: string): void => {
+  if (!id || !pos) {
+    throw makeCoreError(ErrorCodes.InvalidCommand, "array.move requires id and pos");
+  }
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "array") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "array command requires array target");
+    }
+    let index = -1;
+    for (let i = 0; i < target.items.length; i += 1) {
+      const item = target.items[i];
+      if (item?.id === id) {
+        index = i;
+        continue;
+      }
+      if (item?.pos === pos) {
+        throw makeCoreError(ErrorCodes.DuplicateArrayPos, "array item position already exists");
+      }
+    }
+    if (index === -1) {
+      throw makeCoreError(ErrorCodes.MissingArrayItem, "array item does not exist");
+    }
+    (target.items as ArrayItem[])[index] = {
+      ...target.items[index]!,
+      pos,
+    };
+    (target.items as ArrayItem[]).sort(compareArrayItems);
+  });
+};
+
+const applyArrayDelete = (state: Value, path: Path, id: string): void => {
+  if (!id) {
+    throw makeCoreError(ErrorCodes.InvalidCommand, "array.delete requires id");
+  }
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "array") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "array command requires array target");
+    }
+    const index = findArrayItemIndex(target.items, id);
+    if (index === -1) {
+      throw makeCoreError(ErrorCodes.MissingArrayItem, "array item does not exist");
+    }
+    (target.items as ArrayItem[]).splice(index, 1);
+  });
+};
+
+const applyTreeInsert = (state: Value, path: Path, node: TreeNode): void => {
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "tree") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "tree command requires tree target");
+    }
+    if (node.id === HiddenTreeRootId) {
+      throw makeCoreError(
+        ErrorCodes.ReservedIdentifier,
+        "tree node id uses reserved root identifier",
+      );
+    }
+    if (node.value.kind !== "object") {
+      throw makeCoreError(ErrorCodes.TreeNodeValueMustBeObject, "tree node value must be object");
+    }
+    if (findTreeNodeIndex(target.nodes, node.id) !== -1) {
+      throw makeCoreError(ErrorCodes.DuplicateTreeNodeId, "tree node id already exists");
+    }
+    if (!treeParentExists(target.nodes, node.parent)) {
+      throw makeCoreError(ErrorCodes.InvalidTreeParent, "tree parent does not exist");
+    }
+    if (siblingTreePosExists(target.nodes, node.parent, node.pos, "")) {
+      throw makeCoreError(ErrorCodes.DuplicateTreePos, "tree sibling position already exists");
+    }
+
+    (target.nodes as TreeNode[]).push({
+      id: node.id,
+      parent: node.parent,
+      pos: node.pos,
+      value: cloneValue(node.value) as TreeNode["value"],
+    });
+    (target.nodes as TreeNode[]).sort(compareTreeNodes);
+  });
+};
+
+const applyTreeMove = (state: Value, path: Path, id: string, parent: string, pos: string): void => {
+  if (!id || !parent || !pos) {
+    throw makeCoreError(ErrorCodes.InvalidCommand, "tree.move requires id, parent, and pos");
+  }
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "tree") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "tree command requires tree target");
+    }
+
+    const index = findTreeNodeIndex(target.nodes, id);
+    if (index === -1) {
+      throw makeCoreError(ErrorCodes.MissingTreeNode, "tree node does not exist");
+    }
+    if (!treeParentExists(target.nodes, parent)) {
+      throw makeCoreError(ErrorCodes.InvalidTreeParent, "tree parent does not exist");
+    }
+    if (parent === id || isTreeDescendant(target.nodes, parent, id)) {
+      throw makeCoreError(ErrorCodes.TreeCycle, "tree move would create cycle");
+    }
+    if (siblingTreePosExists(target.nodes, parent, pos, id)) {
+      throw makeCoreError(ErrorCodes.DuplicateTreePos, "tree sibling position already exists");
+    }
+
+    (target.nodes as TreeNode[])[index] = {
+      ...target.nodes[index]!,
+      parent,
+      pos,
+    };
+    (target.nodes as TreeNode[]).sort(compareTreeNodes);
+  });
+};
+
+const applyTreeDelete = (state: Value, path: Path, id: string): void => {
+  if (!id) {
+    throw makeCoreError(ErrorCodes.InvalidCommand, "tree.delete requires id");
+  }
+  mutateAtPath(state, path, (target) => {
+    if (target.kind !== "tree") {
+      throw makeCoreError(ErrorCodes.TypeMismatch, "tree command requires tree target");
+    }
+    if (findTreeNodeIndex(target.nodes, id) === -1) {
+      throw makeCoreError(ErrorCodes.MissingTreeNode, "tree node does not exist");
+    }
+
+    const toDelete = new Set<string>([id]);
+    let changed = true;
+    while (changed) {
+      changed = false;
+      for (const node of target.nodes) {
+        if (toDelete.has(node.parent) && !toDelete.has(node.id)) {
+          toDelete.add(node.id);
+          changed = true;
+        }
+      }
+    }
+
+    const nextNodes = target.nodes.filter((node) => !toDelete.has(node.id));
+    (target.nodes as TreeNode[]).splice(0, target.nodes.length, ...nextNodes);
+  });
+};
+
+const mutateAtPath = (current: Value, path: Path, fn: (target: Value) => void): void => {
+  if (path.length === 0) {
+    fn(current);
+    return;
+  }
+
+  const segment = path[0]!;
+  const rest = path.slice(1);
+  switch (segment.kind) {
+    case "field":
+      if (current.kind !== "object") {
+        throw makeCoreError(ErrorCodes.TypeMismatch, "field path requires object");
+      }
+      if (!Object.hasOwn(current.fields, segment.key)) {
+        throw makeCoreError(ErrorCodes.MissingField, "field does not exist");
+      }
+      mutateAtPath(current.fields[segment.key] as Value, rest, fn);
+      return;
+    case "item":
+      if (current.kind !== "array") {
+        throw makeCoreError(ErrorCodes.TypeMismatch, "item path requires array");
+      }
+      {
+        const index = findArrayItemIndex(current.items, segment.id);
+        if (index === -1) {
+          throw makeCoreError(ErrorCodes.MissingArrayItem, "array item does not exist");
+        }
+        mutateAtPath(current.items[index]!.value, rest, fn);
+      }
+      return;
+    case "node":
+      if (current.kind !== "tree") {
+        throw makeCoreError(ErrorCodes.TypeMismatch, "node path requires tree");
+      }
+      {
+        const index = findTreeNodeIndex(current.nodes, segment.id);
+        if (index === -1) {
+          throw makeCoreError(ErrorCodes.MissingTreeNode, "tree node does not exist");
+        }
+        mutateAtPath(current.nodes[index]!.value, rest, fn);
+      }
+      return;
+  }
+};
+
+const replaceValue = (target: Value, next: Value): void => {
+  for (const key of Object.keys(target)) {
+    delete (target as unknown as Record<string, unknown>)[key];
+  }
+  Object.assign(target as unknown as Record<string, unknown>, next);
+};
+
+const findArrayItemIndex = (items: readonly ArrayItem[], id: string): number =>
+  items.findIndex((item) => item.id === id);
+
+const findTreeNodeIndex = (nodes: readonly TreeNode[], id: string): number =>
+  nodes.findIndex((node) => node.id === id);
+
+const treeParentExists = (nodes: readonly TreeNode[], parent: string): boolean =>
+  parent === HiddenTreeRootId || findTreeNodeIndex(nodes, parent) !== -1;
+
+const siblingTreePosExists = (
+  nodes: readonly TreeNode[],
+  parent: string,
+  pos: string,
+  excludeId: string,
+): boolean =>
+  nodes.some((node) => node.parent === parent && node.id !== excludeId && node.pos === pos);
+
+const isTreeDescendant = (
+  nodes: readonly TreeNode[],
+  candidateId: string,
+  ancestorId: string,
+): boolean => {
+  if (candidateId === HiddenTreeRootId) {
+    return false;
+  }
+  const byId = new Map(nodes.map((node) => [node.id, node]));
+  let currentId = candidateId;
+  while (true) {
+    const node = byId.get(currentId);
+    if (!node) {
+      return false;
+    }
+    if (node.parent === ancestorId) {
+      return true;
+    }
+    if (node.parent === HiddenTreeRootId) {
+      return false;
+    }
+    currentId = node.parent;
+  }
+};
diff --git a/packages/mimic-core/src/core/errors.ts b/packages/mimic-core/src/core/errors.ts
new file mode 100644
index 000000000..78bed2709
--- /dev/null
+++ b/packages/mimic-core/src/core/errors.ts
@@ -0,0 +1,33 @@
+export const ErrorCodes = {
+  InvalidCommand: "invalid_command",
+  InvalidPath: "invalid_path",
+  TypeMismatch: "type_mismatch",
+  MissingField: "missing_field",
+  MissingArrayItem: "missing_array_item",
+  MissingTreeNode: "missing_tree_node",
+  DuplicateArrayItemId: "duplicate_array_item_id",
+  DuplicateArrayPos: "duplicate_array_pos",
+  DuplicateTreeNodeId: "duplicate_tree_node_id",
+  DuplicateTreePos: "duplicate_tree_pos",
+  InvalidTreeParent: "invalid_tree_parent",
+  TreeCycle: "tree_cycle",
+  TreeNodeValueMustBeObject: "tree_node_value_must_be_object",
+  ReservedIdentifier: "reserved_identifier",
+} as const;
+
+export type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];
+
+export class CoreError extends Error {
+  readonly code: ErrorCode;
+
+  constructor(code: ErrorCode, message = "") {
+    super(message ? `${code}: ${message}` : code);
+    this.name = "CoreError";
+    this.code = code;
+  }
+}
+
+export const makeCoreError = (code: ErrorCode, message: string): CoreError =>
+  new CoreError(code, message);
+
+export const isCoreError = (value: unknown): value is CoreError => value instanceof CoreError;
diff --git a/packages/mimic-core/src/core/order.ts b/packages/mimic-core/src/core/order.ts
new file mode 100644
index 000000000..6923cc9db
--- /dev/null
+++ b/packages/mimic-core/src/core/order.ts
@@ -0,0 +1,120 @@
+import {
+  HiddenTreeRootId,
+  type ArrayItem,
+  type TreeNode,
+  type TreeValue,
+  type Value,
+} from "./types.ts";
+import { ErrorCodes, makeCoreError } from "./errors.ts";
+import { cloneValue } from "./types.ts";
+
+export const compareArrayItems = (a: ArrayItem, b: ArrayItem): number => {
+  if (a.pos < b.pos) return -1;
+  if (a.pos > b.pos) return 1;
+  if (a.id < b.id) return -1;
+  if (a.id > b.id) return 1;
+  return 0;
+};
+
+export const compareTreeSiblings = (a: TreeNode, b: TreeNode): number => {
+  if (a.pos < b.pos) return -1;
+  if (a.pos > b.pos) return 1;
+  if (a.id < b.id) return -1;
+  if (a.id > b.id) return 1;
+  return 0;
+};
+
+export const compareTreeNodes = (a: TreeNode, b: TreeNode): number => {
+  if (a.parent < b.parent) return -1;
+  if (a.parent > b.parent) return 1;
+  return compareTreeSiblings(a, b);
+};
+
+export const orderedArrayItems = (value: Value): ArrayItem[] => {
+  if (value.kind !== "array") {
+    throw makeCoreError(ErrorCodes.TypeMismatch, "ordered array items require array value");
+  }
+  return value.items
+    .map((item) => ({
+      id: item.id,
+      pos: item.pos,
+      value: cloneValue(item.value),
+    }))
+    .sort(compareArrayItems);
+};
+
+export const orderedTreeNodes = (value: Value): TreeNode[] => {
+  if (value.kind !== "tree") {
+    throw makeCoreError(ErrorCodes.TypeMismatch, "ordered tree nodes require tree value");
+  }
+  return value.nodes
+    .map((node) => ({
+      id: node.id,
+      parent: node.parent,
+      pos: node.pos,
+      value: cloneValue(node.value) as TreeNode["value"],
+    }))
+    .sort(compareTreeNodes);
+};
+
+export const orderedTreeChildren = (value: Value, parentId: string): TreeNode[] => {
+  if (value.kind !== "tree") {
+    throw makeCoreError(ErrorCodes.TypeMismatch, "ordered tree children require tree value");
+  }
+  if (
+    parentId !== HiddenTreeRootId &&
+    value.nodes.findIndex((node) => node.id === parentId) === -1
+  ) {
+    throw makeCoreError(ErrorCodes.MissingTreeNode, "tree parent does not exist");
+  }
+
+  return value.nodes
+    .filter((node) => node.parent === parentId)
+    .map((node) => ({
+      id: node.id,
+      parent: node.parent,
+      pos: node.pos,
+      value: cloneValue(node.value) as TreeNode["value"],
+    }))
+    .sort(compareTreeSiblings);
+};
+
+export const normalize = (value: Value): Value => {
+  const next = cloneValue(value);
+  normalizeInPlace(next);
+  return next;
+};
+
+const normalizeInPlace = (value: Value): void => {
+  switch (value.kind) {
+    case "string":
+    case "number":
+    case "boolean":
+      return;
+    case "object":
+      for (const [key, field] of Object.entries(value.fields)) {
+        normalizeInPlace(field);
+        (value.fields as Record<string, Value>)[key] = field;
+      }
+      return;
+    case "array":
+      for (const item of value.items) {
+        normalizeInPlace(item.value);
+      }
+      (value.items as ArrayItem[]).sort(compareArrayItems);
+      return;
+    case "tree":
+      for (const node of value.nodes) {
+        normalizeInPlace(node.value);
+      }
+      (value.nodes as TreeNode[]).sort(compareTreeNodes);
+      return;
+  }
+};
+
+export const asTreeValue = (value: Value): TreeValue => {
+  if (value.kind !== "tree") {
+    throw makeCoreError(ErrorCodes.TypeMismatch, "tree value required");
+  }
+  return value;
+};
diff --git a/packages/mimic-core/src/core/types.ts b/packages/mimic-core/src/core/types.ts
new file mode 100644
index 000000000..823912ef9
--- /dev/null
+++ b/packages/mimic-core/src/core/types.ts
@@ -0,0 +1,215 @@
+export const HiddenTreeRootId = "$root";
+
+export const ValueKinds = {
+  String: "string",
+  Number: "number",
+  Boolean: "boolean",
+  Object: "object",
+  Array: "array",
+  Tree: "tree",
+} as const;
+
+export type ValueKind = (typeof ValueKinds)[keyof typeof ValueKinds];
+
+export type Path = readonly PathSegment[];
+
+export const CommandKinds = {
+  ValueSet: "value.set",
+  ObjectSet: "object.set",
+  ObjectDelete: "object.delete",
+  ArrayInsert: "array.insert",
+  ArrayMove: "array.move",
+  ArrayDelete: "array.delete",
+  TreeInsert: "tree.insert",
+  TreeMove: "tree.move",
+  TreeDelete: "tree.delete",
+} as const;
+
+export type CommandKind = (typeof CommandKinds)[keyof typeof CommandKinds];
+
+export interface StringValue {
+  readonly kind: "string";
+  readonly value: string;
+}
+
+export interface NumberValue {
+  readonly kind: "number";
+  readonly value: number;
+}
+
+export interface BooleanValue {
+  readonly kind: "boolean";
+  readonly value: boolean;
+}
+
+export const stringValue = (value: string): StringValue => ({ kind: "string", value });
+export const numberValue = (value: number): NumberValue => ({ kind: "number", value });
+export const booleanValue = (value: boolean): BooleanValue => ({ kind: "boolean", value });
+
+export interface ObjectValue {
+  readonly kind: "object";
+  readonly fields: Readonly<Record<string, Value>>;
+}
+
+export interface FieldPathSegment {
+  readonly kind: "field";
+  readonly key: string;
+}
+
+export interface ObjectSetCommand {
+  readonly kind: "object.set";
+  readonly path: Path;
+  readonly key: string;
+  readonly value: Value;
+}
+
+export interface ObjectDeleteCommand {
+  readonly kind: "object.delete";
+  readonly path: Path;
+  readonly key: string;
+}
+
+export const objectValue = (fields: Readonly<Record<string, Value>> = {}): ObjectValue => ({
+  kind: "object",
+  fields,
+});
+
+export interface ArrayItem {
+  readonly id: string;
+  readonly pos: string;
+  readonly value: Value;
+}
+
+export interface ArrayValue {
+  readonly kind: "array";
+  readonly items: readonly ArrayItem[];
+}
+
+export interface ItemPathSegment {
+  readonly kind: "item";
+  readonly id: string;
+}
+
+export interface ArrayInsertCommand {
+  readonly kind: "array.insert";
+  readonly path: Path;
+  readonly item: ArrayItem;
+}
+
+export interface ArrayMoveCommand {
+  readonly kind: "array.move";
+  readonly path: Path;
+  readonly id: string;
+  readonly pos: string;
+}
+
+export interface ArrayDeleteCommand {
+  readonly kind: "array.delete";
+  readonly path: Path;
+  readonly id: string;
+}
+
+export const arrayValue = (items: readonly ArrayItem[] = []): ArrayValue => ({
+  kind: "array",
+  items,
+});
+
+export interface TreeNode {
+  readonly id: string;
+  readonly parent: string;
+  readonly pos: string;
+  readonly value: ObjectValue;
+}
+
+export interface TreeValue {
+  readonly kind: "tree";
+  readonly nodes: readonly TreeNode[];
+}
+
+export interface NodePathSegment {
+  readonly kind: "node";
+  readonly id: string;
+}
+
+export interface TreeInsertCommand {
+  readonly kind: "tree.insert";
+  readonly path: Path;
+  readonly node: TreeNode;
+}
+
+export interface TreeMoveCommand {
+  readonly kind: "tree.move";
+  readonly path: Path;
+  readonly id: string;
+  readonly parent: string;
+  readonly pos: string;
+}
+
+export interface TreeDeleteCommand {
+  readonly kind: "tree.delete";
+  readonly path: Path;
+  readonly id: string;
+}
+
+export const treeValue = (nodes: readonly TreeNode[] = []): TreeValue => ({
+  kind: "tree",
+  nodes,
+});
+
+export type Value = StringValue | NumberValue | BooleanValue | ObjectValue | ArrayValue | TreeValue;
+
+export type PathSegment = FieldPathSegment | ItemPathSegment | NodePathSegment;
+
+export interface ValueSetCommand {
+  readonly kind: "value.set";
+  readonly path: Path;
+  readonly value: Value;
+}
+
+export type Command =
+  | ValueSetCommand
+  | ObjectSetCommand
+  | ObjectDeleteCommand
+  | ArrayInsertCommand
+  | ArrayMoveCommand
+  | ArrayDeleteCommand
+  | TreeInsertCommand
+  | TreeMoveCommand
+  | TreeDeleteCommand;
+
+export const clonePath = (path: Path | undefined): Path => (path ? [...path] : []);
+
+export const cloneValue = (value: Value): Value => {
+  switch (value.kind) {
+    case "string":
+    case "number":
+    case "boolean":
+      return { ...value };
+    case "object": {
+      const fields: Record<string, Value> = {};
+      for (const [key, field] of Object.entries(value.fields)) {
+        fields[key] = cloneValue(field);
+      }
+      return { kind: "object", fields };
+    }
+    case "array":
+      return {
+        kind: "array",
+        items: value.items.map((item) => ({
+          id: item.id,
+          pos: item.pos,
+          value: cloneValue(item.value),
+        })),
+      };
+    case "tree":
+      return {
+        kind: "tree",
+        nodes: value.nodes.map((node) => ({
+          id: node.id,
+          parent: node.parent,
+          pos: node.pos,
+          value: cloneValue(node.value) as ObjectValue,
+        })),
+      };
+  }
+};
diff --git a/packages/mimic-core/src/core/validate.ts b/packages/mimic-core/src/core/validate.ts
new file mode 100644
index 000000000..2a4204175
--- /dev/null
+++ b/packages/mimic-core/src/core/validate.ts
@@ -0,0 +1,103 @@
+import { ErrorCodes, makeCoreError } from "./errors.ts";
+import { HiddenTreeRootId, type TreeNode, type Value } from "./types.ts";
+
+export const validateValue = (value: Value): void => {
+  switch (value.kind) {
+    case "string":
+    case "boolean":
+      return;
+    case "number":
+      if (Number.isNaN(value.value) || !Number.isFinite(value.value)) {
+        throw makeCoreError(ErrorCodes.InvalidCommand, "number must be finite");
+      }
+      return;
+    case "object":
+      for (const field of Object.values(value.fields)) {
+        validateValue(field);
+      }
+      return;
+    case "array": {
+      const ids = new Set<string>();
+      const positions = new Set<string>();
+
+      for (const item of value.items) {
+        if (ids.has(item.id)) {
+          throw makeCoreError(ErrorCodes.DuplicateArrayItemId, "duplicate array item id");
+        }
+        if (positions.has(item.pos)) {
+          throw makeCoreError(ErrorCodes.DuplicateArrayPos, "duplicate array position");
+        }
+        ids.add(item.id);
+        positions.add(item.pos);
+        validateValue(item.value);
+      }
+      return;
+    }
+    case "tree": {
+      const ids = new Set<string>();
+      const nodesById = new Map<string, TreeNode>();
+      const positionsByParent = new Map<string, Set<string>>();
+
+      for (const node of value.nodes) {
+        if (node.id === HiddenTreeRootId) {
+          throw makeCoreError(
+            ErrorCodes.ReservedIdentifier,
+            "tree node id uses reserved root identifier",
+          );
+        }
+        if (node.value.kind !== "object") {
+          throw makeCoreError(
+            ErrorCodes.TreeNodeValueMustBeObject,
+            "tree node value must be object",
+          );
+        }
+        if (ids.has(node.id)) {
+          throw makeCoreError(ErrorCodes.DuplicateTreeNodeId, "duplicate tree node id");
+        }
+        ids.add(node.id);
+        nodesById.set(node.id, node);
+
+        const parentPositions = positionsByParent.get(node.parent) ?? new Set<string>();
+        if (parentPositions.has(node.pos)) {
+          throw makeCoreError(ErrorCodes.DuplicateTreePos, "duplicate tree position");
+        }
+        parentPositions.add(node.pos);
+        positionsByParent.set(node.parent, parentPositions);
+
+        validateValue(node.value);
+      }
+
+      for (const node of value.nodes) {
+        if (node.parent !== HiddenTreeRootId && !nodesById.has(node.parent)) {
+          throw makeCoreError(ErrorCodes.InvalidTreeParent, "tree parent does not exist");
+        }
+      }
+
+      const visiting = new Set<string>();
+      const visited = new Set<string>();
+
+      const visit = (id: string): void => {
+        if (visiting.has(id)) {
+          throw makeCoreError(ErrorCodes.TreeCycle, "tree contains cycle");
+        }
+        if (visited.has(id)) {
+          return;
+        }
+
+        visiting.add(id);
+        const node = nodesById.get(id);
+        if (node && node.parent !== HiddenTreeRootId) {
+          visit(node.parent);
+        }
+        visiting.delete(id);
+        visited.add(id);
+      };
+
+      const idsInOrder = [...nodesById.keys()].sort();
+      for (const id of idsInOrder) {
+        visit(id);
+      }
+      return;
+    }
+  }
+};
diff --git a/packages/mimic-core/src/fractional/index.ts b/packages/mimic-core/src/fractional/index.ts
new file mode 100644
index 000000000..9bd027e37
--- /dev/null
+++ b/packages/mimic-core/src/fractional/index.ts
@@ -0,0 +1,567 @@
+export interface Charset {
+  readonly chars: string;
+  readonly byChar: Readonly<Record<string, number>>;
+  readonly byCode: Readonly<Record<number, string>>;
+  readonly length: number;
+  readonly first: string;
+  readonly last: string;
+  readonly firstPositive: string;
+  readonly mostPositive: string;
+  readonly firstNegative: string;
+  readonly mostNegative: string;
+  readonly jitterRange: number;
+  readonly paddingDict: Readonly<Record<number, number>>;
+}
+
+export interface CharsetOptions {
+  readonly chars: string;
+  readonly firstPositive: string;
+  readonly mostPositive: string;
+  readonly mostNegative: string;
+  readonly jitterRange?: number;
+}
+
+export interface RandomSource {
+  next(): number;
+}
+
+export class CryptoRandomSource implements RandomSource {
+  next(): number {
+    const cryptoObject = globalThis.crypto;
+    if (cryptoObject?.getRandomValues) {
+      const buffer = new Uint32Array(2);
+      cryptoObject.getRandomValues(buffer);
+      const high = buffer[0]! >>> 5;
+      const low = buffer[1]! >>> 6;
+      return (high * 67108864 + low) / 9007199254740992;
+    }
+    return Math.random();
+  }
+}
+
+export class Generator {
+  readonly charset: Charset;
+  readonly random?: RandomSource;
+  readonly useJitter: boolean;
+
+  constructor(options?: { charset?: Charset; random?: RandomSource; useJitter?: boolean }) {
+    this.charset = options?.charset ?? base62();
+    this.random = options?.random;
+    this.useJitter = options?.useJitter ?? true;
+  }
+
+  between(lower?: string, upper?: string): string {
+    if (this.useJitter) {
+      return generateJitteredKeyBetween(
+        lower,
+        upper,
+        this.charset,
+        this.random ?? new CryptoRandomSource(),
+      );
+    }
+    return generateKeyBetween(lower, upper, this.charset);
+  }
+}
+
+export const createCharset = (options: CharsetOptions): Charset => {
+  if (options.chars.length < 7) {
+    throw new Error("charSet must be at least 7 characters long");
+  }
+  const sorted = [...options.chars].sort().join("");
+  if (sorted !== options.chars) {
+    throw new Error("charSet must be sorted");
+  }
+
+  const byChar: Record<string, number> = {};
+  const byCode: Record<number, string> = {};
+  for (let index = 0; index < options.chars.length; index += 1) {
+    const char = options.chars[index]!;
+    byChar[char] = index;
+    byCode[index] = char;
+  }
+
+  const firstPositiveIndex = byChar[options.firstPositive];
+  const mostPositiveIndex = byChar[options.mostPositive];
+  const mostNegativeIndex = byChar[options.mostNegative];
+  if (firstPositiveIndex === undefined) throw new Error("invalid firstPositive");
+  if (mostPositiveIndex === undefined) throw new Error("invalid mostPositive");
+  if (mostNegativeIndex === undefined) throw new Error("invalid mostNegative");
+  if (mostPositiveIndex - firstPositiveIndex < 3) {
+    throw new Error("mostPositive must be at least 3 characters away from neutral");
+  }
+  if (firstPositiveIndex - mostNegativeIndex < 3) {
+    throw new Error("mostNegative must be at least 3 characters away from neutral");
+  }
+
+  const jitterRange = options.jitterRange ?? Math.floor(pow(options.chars.length, 3) / 5);
+  return {
+    chars: options.chars,
+    byChar,
+    byCode,
+    length: options.chars.length,
+    first: byCode[0]!,
+    last: byCode[options.chars.length - 1]!,
+    firstPositive: options.firstPositive,
+    mostPositive: options.mostPositive,
+    firstNegative: byCode[firstPositiveIndex - 1]!,
+    mostNegative: options.mostNegative,
+    jitterRange,
+    paddingDict: buildPaddingDict(jitterRange, options.chars.length),
+  };
+};
+
+const BASE62 = createCharset({
+  chars: "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",
+  firstPositive: "a",
+  mostPositive: "z",
+  mostNegative: "A",
+});
+
+export const base62 = (): Charset => BASE62;
+
+export const createDeterministicGenerator = (): Generator =>
+  new Generator({ charset: base62(), useJitter: false });
+
+export const createGenerator = (): Generator => new Generator({ charset: base62() });
+
+export const createGeneratorWithRandom = (random: RandomSource): Generator =>
+  new Generator({ charset: base62(), random, useJitter: true });
+
+export const startKey = (charset: Charset): string =>
+  `${charset.firstPositive}${charset.byCode[0]}`;
+
+export const validateOrderKey = (orderKey: string, charset: Charset): void => {
+  getIntegerPart(orderKey, charset);
+};
+
+export const generateKeyBetween = (
+  lower: string | undefined,
+  upper: string | undefined,
+  charset: Charset,
+): string => {
+  if (lower !== undefined) validateOrderKey(lower, charset);
+  if (upper !== undefined) validateOrderKey(upper, charset);
+  if (lower === undefined && upper === undefined) return startKey(charset);
+  if (lower === undefined) return decrementInteger(getIntegerPart(upper!, charset), charset);
+  if (upper === undefined) return incrementInteger(getIntegerPart(lower, charset), charset);
+  if (lower >= upper) throw new Error(`${lower} >= ${upper}`);
+  return midPoint(lower, upper, charset);
+};
+
+export const generateNKeysBetween = (
+  lower: string | undefined,
+  upper: string | undefined,
+  count: number,
+  charset: Charset,
+): string[] => {
+  if (count < 0) throw new Error("n must be >= 0");
+  if (count === 0) return [];
+  if (count === 1) return [generateKeyBetween(lower, upper, charset)];
+
+  if (upper === undefined) {
+    const first = generateKeyBetween(lower, upper, charset);
+    const result = [first];
+    let current = first;
+    for (let index = 0; index < count - 1; index += 1) {
+      current = generateKeyBetween(current, undefined, charset);
+      result.push(current);
+    }
+    return result;
+  }
+
+  if (lower === undefined) {
+    const first = generateKeyBetween(undefined, upper, charset);
+    const result = [first];
+    let current = first;
+    for (let index = 0; index < count - 1; index += 1) {
+      current = generateKeyBetween(undefined, current, charset);
+      result.push(current);
+    }
+    return result.reverse();
+  }
+
+  const mid = Math.floor(count / 2);
+  const midKey = generateKeyBetween(lower, upper, charset);
+  return [
+    ...generateNKeysBetween(lower, midKey, mid, charset),
+    midKey,
+    ...generateNKeysBetween(midKey, upper, count - mid - 1, charset),
+  ];
+};
+
+export const generateJitteredKeyBetween = (
+  lower: string | undefined,
+  upper: string | undefined,
+  charset: Charset,
+  random: RandomSource,
+): string => {
+  const key = generateKeyBetween(lower, upper, charset);
+  const paddingNeeded = paddingNeededForJitter(key, upper, charset);
+  if (paddingNeeded > 0) {
+    return padAndJitterString(key, paddingNeeded, charset, random);
+  }
+  return jitterString(key, charset, random);
+};
+
+export const generateNJitteredKeysBetween = (
+  lower: string | undefined,
+  upper: string | undefined,
+  count: number,
+  charset: Charset,
+  random: RandomSource,
+): string[] => {
+  if (count < 0) throw new Error("n must be >= 0");
+  if (count === 0) return [];
+  if (count === 1) {
+    return [generateJitteredKeyBetween(lower, upper, charset, random)];
+  }
+
+  if (upper === undefined) {
+    const first = generateJitteredKeyBetween(lower, upper, charset, random);
+    const result = [first];
+    let current = first;
+    for (let index = 0; index < count - 1; index += 1) {
+      current = generateJitteredKeyBetween(current, undefined, charset, random);
+      result.push(current);
+    }
+    return result;
+  }
+
+  if (lower === undefined) {
+    const first = generateJitteredKeyBetween(undefined, upper, charset, random);
+    const result = [first];
+    let current = first;
+    for (let index = 0; index < count - 1; index += 1) {
+      current = generateJitteredKeyBetween(undefined, current, charset, random);
+      result.push(current);
+    }
+    return result.reverse();
+  }
+
+  const mid = Math.floor(count / 2);
+  const midKey = generateJitteredKeyBetween(lower, upper, charset, random);
+  return [
+    ...generateNJitteredKeysBetween(lower, midKey, mid, charset, random),
+    midKey,
+    ...generateNJitteredKeysBetween(midKey, upper, count - mid - 1, charset, random),
+  ];
+};
+
+export const getIntegerPart = (orderKey: string, charset: Charset): string => {
+  const head = integerHead(orderKey, charset);
+  const length = integerLength(head, charset);
+  if (length > orderKey.length) {
+    throw new Error(`invalid order key length: ${orderKey}`);
+  }
+  return orderKey.slice(0, length);
+};
+
+export const incrementInteger = (integer: string, charset: Charset): string => {
+  validateInteger(integer, charset);
+  const [head, digits] = splitInteger(integer, charset);
+  const maxChar = charset.byCode[charset.length - 1]!;
+  if ([...digits].some((char) => char !== maxChar)) {
+    return `${head}${addOne(digits, charset)}`;
+  }
+  return startOnNewHead(incrementIntegerHead(head, charset), "lower", charset);
+};
+
+export const decrementInteger = (integer: string, charset: Charset): string => {
+  validateInteger(integer, charset);
+  const [head, digits] = splitInteger(integer, charset);
+  const minChar = charset.byCode[0]!;
+  if ([...digits].some((char) => char !== minChar)) {
+    return `${head}${subtractOne(digits, charset, false)}`;
+  }
+  return startOnNewHead(decrementIntegerHead(head, charset), "upper", charset);
+};
+
+export const midPoint = (lower: string, upper: string, charset: Charset): string => {
+  let [paddedLower, paddedUpper] = makeSameLength(lower, upper, "end", charset.first);
+  let distance = lexicalDistance(paddedLower, paddedUpper, charset);
+  if (distance === 1) {
+    paddedLower = `${paddedLower}${charset.first}`;
+    distance = charset.length;
+  }
+  const mid = encodeToCharset(Math.floor(distance / 2), charset);
+  return addCharsetKeys(paddedLower, mid, charset);
+};
+
+export const jitterString = (orderKey: string, charset: Charset, random: RandomSource): string => {
+  const randomValue = random.next();
+  if (randomValue < 0 || randomValue >= 1) {
+    throw new Error(`random value out of range: ${randomValue}`);
+  }
+  return addCharsetKeys(
+    orderKey,
+    encodeToCharset(Math.floor(randomValue * charset.jitterRange), charset),
+    charset,
+  );
+};
+
+export const padAndJitterString = (
+  orderKey: string,
+  numberOfChars: number,
+  charset: Charset,
+  random: RandomSource,
+): string => jitterString(`${orderKey}${charset.first.repeat(numberOfChars)}`, charset, random);
+
+export const paddingNeededForDistance = (distance: number, charset: Charset): number => {
+  const gap = charset.jitterRange - distance;
+  for (const [key, value] of Object.entries(charset.paddingDict)) {
+    if (value > gap) {
+      return Number(key);
+    }
+  }
+  return 0;
+};
+
+export const paddingNeededForJitter = (
+  orderKey: string,
+  upper: string | undefined,
+  charset: Charset,
+): number => {
+  const integer = getIntegerPart(orderKey, charset);
+  const nextInteger = incrementInteger(integer, charset);
+  let needed = 0;
+
+  if (upper !== undefined) {
+    const distanceToUpper = lexicalDistance(orderKey, upper, charset);
+    if (distanceToUpper < charset.jitterRange + 1) {
+      needed = Math.max(needed, paddingNeededForDistance(distanceToUpper, charset));
+    }
+  }
+
+  const distanceToNextInteger = lexicalDistance(orderKey, nextInteger, charset);
+  if (distanceToNextInteger < charset.jitterRange + 1) {
+    needed = Math.max(needed, paddingNeededForDistance(distanceToNextInteger, charset));
+  }
+
+  return needed;
+};
+
+const integerHead = (integer: string, charset: Charset): string => {
+  if (integer.length === 0) return "";
+  let index = 0;
+  if (integer[0] === charset.mostPositive) {
+    while (index < integer.length && integer[index] === charset.mostPositive) index += 1;
+  }
+  if (integer[0] === charset.mostNegative) {
+    while (index < integer.length && integer[index] === charset.mostNegative) index += 1;
+  }
+  if (index >= integer.length) return integer;
+  return integer.slice(0, index + 1);
+};
+
+const integerLengthFromSecondLevel = (
+  key: string,
+  direction: "positive" | "negative",
+  charset: Charset,
+): number => {
+  if (key.length === 0) return 0;
+  const firstChar = key[0]!;
+  if (firstChar > charset.mostPositive || firstChar < charset.mostNegative) {
+    throw new Error("invalid firstChar on key");
+  }
+  if (firstChar === charset.mostPositive && direction === "positive") {
+    return (
+      distanceBetween(firstChar, charset.mostNegative, charset) +
+      1 +
+      integerLengthFromSecondLevel(key.slice(1), direction, charset)
+    );
+  }
+  if (firstChar === charset.mostNegative && direction === "negative") {
+    return (
+      distanceBetween(firstChar, charset.mostPositive, charset) +
+      1 +
+      integerLengthFromSecondLevel(key.slice(1), direction, charset)
+    );
+  }
+  if (direction === "positive") {
+    return distanceBetween(firstChar, charset.mostNegative, charset) + 2;
+  }
+  return distanceBetween(firstChar, charset.mostPositive, charset) + 2;
+};
+
+const integerLength = (head: string, charset: Charset): number => {
+  if (head.length === 0) throw new Error("head cannot be empty");
+  const firstChar = head[0]!;
+  if (firstChar > charset.mostPositive || firstChar < charset.mostNegative) {
+    throw new Error("invalid firstChar on key");
+  }
+  if (firstChar === charset.mostPositive) {
+    return (
+      distanceBetween(firstChar, charset.firstPositive, charset) +
+      1 +
+      integerLengthFromSecondLevel(head.slice(1), "positive", charset)
+    );
+  }
+  if (firstChar === charset.mostNegative) {
+    return (
+      distanceBetween(firstChar, charset.firstNegative, charset) +
+      1 +
+      integerLengthFromSecondLevel(head.slice(1), "negative", charset)
+    );
+  }
+  if (firstChar >= charset.firstPositive) {
+    return distanceBetween(firstChar, charset.firstPositive, charset) + 2;
+  }
+  return distanceBetween(firstChar, charset.firstNegative, charset) + 2;
+};
+
+const validateInteger = (integer: string, charset: Charset): void => {
+  if (integerLength(integer, charset) !== integer.length) {
+    throw new Error(`invalid integer length: ${integer}`);
+  }
+};
+
+const splitInteger = (integer: string, charset: Charset): [string, string] => {
+  const head = integerHead(integer, charset);
+  return [head, integer.slice(head.length)];
+};
+
+const incrementIntegerHead = (head: string, charset: Charset): string => {
+  const inPositiveRange = head >= charset.firstPositive;
+  const nextHead = addOne(head, charset);
+  const headIsLimitMax = head.at(-1) === charset.mostPositive;
+  const nextHeadIsLimitMax = nextHead.at(-1) === charset.mostPositive;
+
+  if (inPositiveRange && nextHeadIsLimitMax) {
+    return `${nextHead}${charset.mostNegative}`;
+  }
+  if (!inPositiveRange && headIsLimitMax) {
+    return head.slice(0, -1);
+  }
+  return nextHead;
+};
+
+const decrementIntegerHead = (head: string, charset: Charset): string => {
+  const inPositiveRange = head >= charset.firstPositive;
+  const headIsLimitMin = head.at(-1) === charset.mostNegative;
+  if (inPositiveRange && headIsLimitMin) {
+    return subtractOne(head.slice(0, -1), charset, false);
+  }
+  if (!inPositiveRange && headIsLimitMin) {
+    return `${head}${charset.mostPositive}`;
+  }
+  return subtractOne(head, charset, false);
+};
+
+const startOnNewHead = (head: string, limit: "lower" | "upper", charset: Charset): string => {
+  const newLength = integerLength(head, charset);
+  const fillChar = limit === "upper" ? charset.last : charset.first;
+  return `${head}${fillChar.repeat(newLength - head.length)}`;
+};
+
+const distanceBetween = (a: string, b: string, charset: Charset): number => {
+  const indexA = charset.byChar[a];
+  const indexB = charset.byChar[b];
+  if (indexA === undefined || indexB === undefined) {
+    throw new Error("invalid character in distance calculation");
+  }
+  return Math.abs(indexA - indexB);
+};
+
+const makeSameLength = (
+  a: string,
+  b: string,
+  pad: "start" | "end",
+  fill: string,
+): [string, string] => {
+  const maxLength = Math.max(a.length, b.length);
+  if (pad === "start") {
+    return [fill.repeat(maxLength - a.length) + a, fill.repeat(maxLength - b.length) + b];
+  }
+  return [a + fill.repeat(maxLength - a.length), b + fill.repeat(maxLength - b.length)];
+};
+
+const encodeToCharset = (value: number, charset: Charset): string => {
+  if (value === 0) return charset.byCode[0]!;
+  let result = "";
+  let current = value;
+  while (current > 0) {
+    result = `${charset.byCode[current % charset.length]}${result}`;
+    current = Math.floor(current / charset.length);
+  }
+  return result;
+};
+
+const decodeCharsetToNumber = (key: string, charset: Charset): number => {
+  let result = 0;
+  for (let index = 0; index < key.length; index += 1) {
+    const power = key.length - index - 1;
+    result += charset.byChar[key[index]!]! * pow(charset.length, power);
+  }
+  return result;
+};
+
+const addCharsetKeys = (a: string, b: string, charset: Charset): string => {
+  const [paddedA, paddedB] = makeSameLength(a, b, "start", charset.first);
+  const result: string[] = [];
+  let carry = 0;
+  for (let index = paddedA.length - 1; index >= 0; index -= 1) {
+    const sum = charset.byChar[paddedA[index]!]! + charset.byChar[paddedB[index]!]! + carry;
+    carry = Math.floor(sum / charset.length);
+    result.push(charset.byCode[sum % charset.length]!);
+  }
+  if (carry > 0) {
+    result.push(charset.byCode[carry]!);
+  }
+  return result.reverse().join("");
+};
+
+const subtractCharsetKeys = (
+  a: string,
+  b: string,
+  charset: Charset,
+  stripLeadingZeros: boolean,
+): string => {
+  const [paddedA, paddedB] = makeSameLength(a, b, "start", charset.first);
+  const result: string[] = [];
+  let borrow = 0;
+  for (let index = paddedA.length - 1; index >= 0; index -= 1) {
+    let digitA = charset.byChar[paddedA[index]!]!;
+    const digitB = charset.byChar[paddedB[index]!]! + borrow;
+    if (digitA < digitB) {
+      borrow = 1;
+      digitA += charset.length;
+    } else {
+      borrow = 0;
+    }
+    result.push(charset.byCode[digitA - digitB]!);
+  }
+  if (borrow > 0) throw new Error("subtraction result is negative");
+  const normalized = result.reverse().join("");
+  if (!stripLeadingZeros) return normalized;
+  return normalized.replace(new RegExp(`^${charset.first}+`), "") || charset.first;
+};
+
+const addOne = (key: string, charset: Charset): string =>
+  addCharsetKeys(key, charset.byCode[1]!, charset);
+
+const subtractOne = (key: string, charset: Charset, stripLeadingZeros: boolean): string =>
+  subtractCharsetKeys(key, charset.byCode[1]!, charset, stripLeadingZeros);
+
+const lexicalDistance = (a: string, b: string, charset: Charset): number => {
+  const [paddedA, paddedB] = makeSameLength(a, b, "end", charset.first);
+  const [lower, upper] = paddedA > paddedB ? [paddedB, paddedA] : [paddedA, paddedB];
+  return decodeCharsetToNumber(subtractCharsetKeys(upper, lower, charset, true), charset);
+};
+
+function buildPaddingDict(jitterRange: number, charsetLength: number): Record<number, number> {
+  const padding: Record<number, number> = {};
+  for (let index = 0; index < 100; index += 1) {
+    const value = pow(charsetLength, index);
+    padding[index] = value;
+    if (value > jitterRange) break;
+  }
+  return padding;
+}
+
+function pow(base: number, exp: number): number {
+  let result = 1;
+  for (let index = 0; index < exp; index += 1) {
+    result *= base;
+  }
+  return result;
+}
diff --git a/packages/mimic-core/src/index.ts b/packages/mimic-core/src/index.ts
new file mode 100644
index 000000000..18cbb2d86
--- /dev/null
+++ b/packages/mimic-core/src/index.ts
@@ -0,0 +1,13 @@
+export * from "./core/apply.ts";
+export * from "./core/errors.ts";
+export * from "./core/order.ts";
+export * from "./core/types.ts";
+export * from "./core/validate.ts";
+export * from "./fractional/index.ts";
+export * from "./schema/index.ts";
+export * as Primitive from "./primitives/index.ts";
+// `shortId` is surfaced at the top level (not only under `Primitive`) because it
+// is the shared node-id generator consumed by the composition lowerer and the
+// mimic client's `nextTreeNodeId` — both mint the short ids that appear in
+// printed paywall source.
+export { shortId } from "./primitives/shared.ts";
diff --git a/packages/mimic-core/src/primitives/Array.ts b/packages/mimic-core/src/primitives/Array.ts
new file mode 100644
index 000000000..ac0a514dd
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Array.ts
@@ -0,0 +1,450 @@
+import {
+  arrayValue,
+  cloneValue,
+  type ArrayItem,
+  type ArrayValue,
+  type Path,
+  type Value,
+} from "../core/types.ts";
+import { createGenerator } from "../fractional/index.ts";
+import type { ArraySchema, ArrayValidator } from "../schema/types.ts";
+import {
+  getArrayAtPath,
+  getArrayItemById,
+  getArrayItemByIndex,
+  getNeighborPositionsForInsert,
+  getOrderedArrayItems,
+  normalizeIndex,
+} from "./path.ts";
+import {
+  PrimitiveError,
+  type AnyPrimitive,
+  type CommandSession,
+  type InferInput,
+  type InferProxy,
+  type InferSnapshot,
+  type MaybeUndefined,
+  type PrimitiveWithOptionalEncoding,
+  randomUuid,
+} from "./shared.ts";
+
+export interface ArrayEntrySnapshot<T> {
+  readonly id: string;
+  readonly pos: string;
+  readonly value: T;
+}
+
+export interface ArrayItemHandle<TElement extends AnyPrimitive> {
+  readonly id: string;
+  readonly pos: string;
+  readonly value: InferProxy<TElement>;
+  get(): InferSnapshot<TElement> | undefined;
+  remove(): void;
+  move(toIndex: number): void;
+  moveToPos(pos: string): void;
+}
+
+export interface ArrayProxy<TElement extends AnyPrimitive> {
+  readonly length: number;
+  get(): readonly ArrayEntrySnapshot<InferSnapshot<TElement>>[] | undefined;
+  set(values: readonly InferInput<TElement>[]): void;
+  push(value: InferInput<TElement>): ArrayItemHandle<TElement>;
+  insertAt(index: number, value: InferInput<TElement>): ArrayItemHandle<TElement>;
+  insertAtPos(pos: string, value: InferInput<TElement>): ArrayItemHandle<TElement>;
+  remove(id: string): void;
+  move(id: string, toIndex: number): void;
+  moveToPos(id: string, pos: string): void;
+  at(index: number): ArrayItemHandle<TElement> | undefined;
+  first(): ArrayItemHandle<TElement> | undefined;
+  last(): ArrayItemHandle<TElement> | undefined;
+  findById(id: string): ArrayItemHandle<TElement> | undefined;
+  find(
+    predicate: (
+      entry: ArrayItemHandle<TElement>,
+      index: number,
+      array: readonly ArrayItemHandle<TElement>[],
+    ) => boolean,
+  ): ArrayItemHandle<TElement> | undefined;
+  findIndex(
+    predicate: (
+      entry: ArrayItemHandle<TElement>,
+      index: number,
+      array: readonly ArrayItemHandle<TElement>[],
+    ) => boolean,
+  ): number;
+  map<TResult>(
+    fn: (
+      entry: ArrayItemHandle<TElement>,
+      index: number,
+      array: readonly ArrayItemHandle<TElement>[],
+    ) => TResult,
+  ): TResult[];
+  filter(
+    predicate: (
+      entry: ArrayItemHandle<TElement>,
+      index: number,
+      array: readonly ArrayItemHandle<TElement>[],
+    ) => boolean,
+  ): ArrayItemHandle<TElement>[];
+  some(
+    predicate: (
+      entry: ArrayItemHandle<TElement>,
+      index: number,
+      array: readonly ArrayItemHandle<TElement>[],
+    ) => boolean,
+  ): boolean;
+  every(
+    predicate: (
+      entry: ArrayItemHandle<TElement>,
+      index: number,
+      array: readonly ArrayItemHandle<TElement>[],
+    ) => boolean,
+  ): boolean;
+  forEach(
+    fn: (
+      entry: ArrayItemHandle<TElement>,
+      index: number,
+      array: readonly ArrayItemHandle<TElement>[],
+    ) => void,
+  ): void;
+  [Symbol.iterator](): Iterator<ArrayItemHandle<TElement>>;
+}
+
+interface ArrayPrimitiveSchema<TElement extends AnyPrimitive> {
+  readonly required: boolean;
+  readonly defaultValue: readonly InferInput<TElement>[] | undefined;
+  readonly element: TElement;
+  readonly validators: readonly ArrayValidator[];
+}
+
+export class ArrayPrimitive<
+  TElement extends AnyPrimitive,
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  readonly InferInput<TElement>[] | undefined,
+  MaybeUndefined<readonly ArrayEntrySnapshot<InferSnapshot<TElement>>[], TRequired, THasDefault>,
+  ArrayProxy<TElement>
+> {
+  readonly _tag = "ArrayPrimitive";
+  readonly _Input!: readonly InferInput<TElement>[] | undefined;
+  readonly _Snapshot!: MaybeUndefined<
+    readonly ArrayEntrySnapshot<InferSnapshot<TElement>>[],
+    TRequired,
+    THasDefault
+  >;
+  readonly _Proxy!: ArrayProxy<TElement>;
+
+  private readonly state: ArrayPrimitiveSchema<TElement>;
+  private encodedDefaultCache: { readonly value: ArrayValue | undefined } | undefined;
+
+  constructor(state: ArrayPrimitiveSchema<TElement>) {
+    this.state = state;
+  }
+
+  /**
+   * Lazily encodes the configured default value, memoizing on first use.
+   *
+   * `encodeEntries` assigns random fractional-index positions and item ids via
+   * the crypto RNG, which workerd forbids in global scope. Schemas are declared
+   * as module-level constants, so deferring this out of `.default()` keeps those
+   * declarations free of random I/O — the encode runs on first `schema`/`encode`
+   * access, which happens inside a request handler. The wrapper object lets a
+   * memoized `undefined` (no default) be distinguished from "not yet computed".
+   */
+  private encodedDefault(): ArrayValue | undefined {
+    if (this.encodedDefaultCache === undefined) {
+      this.encodedDefaultCache = {
+        value:
+          this.state.defaultValue === undefined
+            ? undefined
+            : this.encodeEntries(this.state.defaultValue),
+      };
+    }
+    return this.encodedDefaultCache.value;
+  }
+
+  get element(): TElement {
+    return this.state.element;
+  }
+
+  get schema(): ArraySchema {
+    const encodedDefault = this.encodedDefault();
+    return {
+      kind: "array" as const,
+      element: this.state.element.schema,
+      ...(this.state.required ? { required: true } : {}),
+      ...(encodedDefault !== undefined
+        ? { default: cloneValue(encodedDefault) as ArrayValue }
+        : {}),
+      ...(this.state.validators.length > 0 ? { validators: this.state.validators } : {}),
+    };
+  }
+
+  required(): ArrayPrimitive<TElement, true, THasDefault> {
+    return new ArrayPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(
+    defaultValue: readonly InferInput<TElement>[],
+  ): ArrayPrimitive<TElement, TRequired, true> {
+    return new ArrayPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  minLength(length: number): ArrayPrimitive<TElement, TRequired, THasDefault> {
+    return new ArrayPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "minLength", value: length }],
+    });
+  }
+
+  maxLength(length: number): ArrayPrimitive<TElement, TRequired, THasDefault> {
+    return new ArrayPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "maxLength", value: length }],
+    });
+  }
+
+  encode(input: readonly InferInput<TElement>[] | undefined): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Array value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    if (input === undefined) {
+      const encodedDefault = this.encodedDefault();
+      if (encodedDefault !== undefined) {
+        return cloneValue(encodedDefault);
+      }
+      if (this.state.required) {
+        throw new PrimitiveError("Array value is required");
+      }
+      return undefined;
+    }
+    if (!globalThis.Array.isArray(input)) {
+      throw new PrimitiveError("Expected array input");
+    }
+    return this.encodeEntries(input as readonly InferInput<TElement>[]);
+  }
+
+  decode(
+    value: Value | undefined,
+  ): readonly ArrayEntrySnapshot<InferSnapshot<TElement>>[] | undefined {
+    if (value?.kind !== "array") {
+      return undefined;
+    }
+    return getOrderedArrayItems(value).map((item) => ({
+      id: item.id,
+      pos: item.pos,
+      value: this.state.element.decode(item.value) as InferSnapshot<TElement>,
+    }));
+  }
+
+  createProxy(session: CommandSession, path: Path): ArrayProxy<TElement> {
+    const createHandle = (id: string): ArrayItemHandle<TElement> => ({
+      get id() {
+        return id;
+      },
+      get pos() {
+        return getArrayItemById(getArrayAtPath(session.current(), path), id)?.pos ?? "";
+      },
+      get value() {
+        return thisPrimitive.state.element.createProxy(session, [...path, { kind: "item", id }]);
+      },
+      get: () => {
+        const item = getArrayItemById(getArrayAtPath(session.current(), path), id);
+        return this.state.element.decode(item?.value) as InferSnapshot<TElement> | undefined;
+      },
+      remove: () => {
+        session.emit([{ kind: "array.delete", path, id }]);
+      },
+      move: (toIndex) => {
+        moveArrayItem(session, path, id, toIndex);
+      },
+      moveToPos: (pos) => {
+        session.emit([{ kind: "array.move", path, id, pos }]);
+      },
+    });
+
+    const createHandles = (): ArrayItemHandle<TElement>[] =>
+      getOrderedArrayItems(getArrayAtPath(session.current(), path)).map((item) =>
+        createHandle(item.id),
+      );
+
+    const thisPrimitive = this;
+    return {
+      get length() {
+        return getOrderedArrayItems(getArrayAtPath(session.current(), path)).length;
+      },
+      get: () => this.decode(getArrayAtPath(session.current(), path)),
+      set: (values) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(values) }]);
+      },
+      push: (value) => {
+        const items = getOrderedArrayItems(getArrayAtPath(session.current(), path));
+        const lower = items.length === 0 ? undefined : items[items.length - 1]?.pos;
+        const id = session.generator.nextArrayItemId(path);
+        const pos = session.generator.between(lower, undefined);
+        session.emit([
+          {
+            kind: "array.insert",
+            path,
+            item: { id, pos, value: this.state.element.encode(value) },
+          },
+        ]);
+        return createHandle(id);
+      },
+      insertAt: (index, value) => {
+        const items = getOrderedArrayItems(getArrayAtPath(session.current(), path));
+        const neighbors = getNeighborPositionsForInsert(
+          items.map((item) => item.pos),
+          index,
+        );
+        const id = session.generator.nextArrayItemId(path);
+        const pos = session.generator.between(neighbors.lower, neighbors.upper);
+        session.emit([
+          {
+            kind: "array.insert",
+            path,
+            item: { id, pos, value: this.state.element.encode(value) },
+          },
+        ]);
+        return createHandle(id);
+      },
+      insertAtPos: (pos, value) => {
+        const id = session.generator.nextArrayItemId(path);
+        session.emit([
+          {
+            kind: "array.insert",
+            path,
+            item: { id, pos, value: this.state.element.encode(value) },
+          },
+        ]);
+        return createHandle(id);
+      },
+      remove: (id) => {
+        session.emit([{ kind: "array.delete", path, id }]);
+      },
+      move: (id, toIndex) => {
+        moveArrayItem(session, path, id, toIndex);
+      },
+      moveToPos: (id, pos) => {
+        session.emit([{ kind: "array.move", path, id, pos }]);
+      },
+      at: (index) => {
+        const item = getArrayItemByIndex(getArrayAtPath(session.current(), path), index);
+        return item ? createHandle(item.id) : undefined;
+      },
+      first: () => {
+        const item = getArrayItemByIndex(getArrayAtPath(session.current(), path), 0);
+        return item ? createHandle(item.id) : undefined;
+      },
+      last: () => {
+        const items = getOrderedArrayItems(getArrayAtPath(session.current(), path));
+        const item = items[items.length - 1];
+        return item ? createHandle(item.id) : undefined;
+      },
+      findById: (id) => {
+        const item = getArrayItemById(getArrayAtPath(session.current(), path), id);
+        return item ? createHandle(item.id) : undefined;
+      },
+      find: (predicate) => {
+        const handles = createHandles();
+        return handles.find((entry, index, array) => predicate(entry, index, array));
+      },
+      findIndex: (predicate) => {
+        const handles = createHandles();
+        return handles.findIndex((entry, index, array) => predicate(entry, index, array));
+      },
+      map: (fn) => {
+        const handles = createHandles();
+        return handles.map((entry, index, array) => fn(entry, index, array));
+      },
+      filter: (predicate) => {
+        const handles = createHandles();
+        return handles.filter((entry, index, array) => predicate(entry, index, array));
+      },
+      some: (predicate) => {
+        const handles = createHandles();
+        return handles.some((entry, index, array) => predicate(entry, index, array));
+      },
+      every: (predicate) => {
+        const handles = createHandles();
+        return handles.every((entry, index, array) => predicate(entry, index, array));
+      },
+      forEach: (fn) => {
+        const handles = createHandles();
+        handles.forEach((entry, index, array) => fn(entry, index, array));
+      },
+      [Symbol.iterator]: () => createHandles()[Symbol.iterator](),
+    };
+  }
+
+  optional(stripDefaults: boolean): ArrayPrimitive<TElement, false, false> {
+    return new ArrayPrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+    });
+  }
+
+  private encodeEntries(values: readonly InferInput<TElement>[]): ArrayValue {
+    const generator = createGenerator();
+    const ids = new Set<string>();
+    let lower: string | undefined;
+    const items: ArrayItem[] = values.map((value) => {
+      const pos = generator.between(lower, undefined);
+      lower = pos;
+      let id = randomUuid();
+      while (ids.has(id)) {
+        id = randomUuid();
+      }
+      ids.add(id);
+      return {
+        id,
+        pos,
+        value: this.state.element.encode(value),
+      };
+    });
+    return arrayValue(items);
+  }
+}
+
+const moveArrayItem = (session: CommandSession, path: Path, id: string, toIndex: number): void => {
+  const items = getOrderedArrayItems(getArrayAtPath(session.current(), path));
+  const currentIndex = items.findIndex((item) => item.id === id);
+  if (currentIndex === -1) {
+    throw new PrimitiveError(`Array item "${id}" does not exist`);
+  }
+  const withoutItem = items.filter((item) => item.id !== id);
+  const normalized = normalizeIndex(toIndex, withoutItem.length + 1);
+  if (normalized === undefined && !(toIndex === withoutItem.length)) {
+    throw new PrimitiveError(`Index ${toIndex} is out of range`);
+  }
+  const insertionIndex = normalized ?? withoutItem.length;
+  const neighbors = getNeighborPositionsForInsert(
+    withoutItem.map((item) => item.pos),
+    insertionIndex,
+  );
+  const pos = session.generator.between(neighbors.lower, neighbors.upper);
+  session.emit([{ kind: "array.move", path, id, pos }]);
+};
+
+export const Array = <TElement extends AnyPrimitive>(
+  element: TElement,
+): ArrayPrimitive<TElement, false, false> =>
+  new ArrayPrimitive({
+    required: false,
+    defaultValue: undefined,
+    element,
+    validators: [],
+  });
diff --git a/packages/mimic-core/src/primitives/Boolean.ts b/packages/mimic-core/src/primitives/Boolean.ts
new file mode 100644
index 000000000..8c9a53abf
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Boolean.ts
@@ -0,0 +1,131 @@
+import { booleanValue, type Path, type Value } from "../core/types.ts";
+import type { BooleanSchema } from "../schema/types.ts";
+import { getValueAtPath } from "./path.ts";
+import {
+  PrimitiveError,
+  type CommandSession,
+  type MaybeUndefined,
+  type NeedsValue,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+
+type InferSetInput<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> = NeedsValue<boolean, TRequired, THasDefault>;
+
+export interface BooleanProxy<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> {
+  get(): MaybeUndefined<boolean, TRequired, THasDefault>;
+  set(value: InferSetInput<TRequired, THasDefault>): void;
+  update(value: InferSetInput<TRequired, THasDefault>): void;
+}
+
+interface BooleanPrimitiveSchema {
+  readonly required: boolean;
+  readonly defaultValue: boolean | undefined;
+}
+
+export class BooleanPrimitive<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  InferSetInput<TRequired, THasDefault>,
+  MaybeUndefined<boolean, TRequired, THasDefault>,
+  BooleanProxy<TRequired, THasDefault>
+> {
+  readonly _tag = "BooleanPrimitive";
+  readonly _Input!: InferSetInput<TRequired, THasDefault>;
+  readonly _Snapshot!: MaybeUndefined<boolean, TRequired, THasDefault>;
+  readonly _Proxy!: BooleanProxy<TRequired, THasDefault>;
+
+  private readonly state: BooleanPrimitiveSchema;
+
+  constructor(state: BooleanPrimitiveSchema) {
+    this.state = state;
+  }
+
+  get schema(): BooleanSchema {
+    return {
+      kind: "boolean" as const,
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.defaultValue !== undefined
+        ? { default: booleanValue(this.state.defaultValue) }
+        : {}),
+    };
+  }
+
+  required(): BooleanPrimitive<true, THasDefault> {
+    return new BooleanPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(defaultValue: boolean): BooleanPrimitive<TRequired, true> {
+    return new BooleanPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  optional(stripDefaults: boolean): BooleanPrimitive<false, false> {
+    return new BooleanPrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+    });
+  }
+
+  encode(input: InferSetInput<TRequired, THasDefault>): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Boolean value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    if (input === undefined) {
+      if (this.state.defaultValue !== undefined) {
+        return booleanValue(this.state.defaultValue);
+      }
+      if (this.state.required) {
+        throw new PrimitiveError("Boolean value is required");
+      }
+      return undefined;
+    }
+    if (typeof input !== "boolean") {
+      throw new PrimitiveError("Expected boolean input");
+    }
+    return booleanValue(input);
+  }
+
+  decode(value: Value | undefined): MaybeUndefined<boolean, TRequired, THasDefault> {
+    return (value?.kind === "boolean" ? value.value : undefined) as MaybeUndefined<
+      boolean,
+      TRequired,
+      THasDefault
+    >;
+  }
+
+  createProxy(session: CommandSession, path: Path): BooleanProxy<TRequired, THasDefault> {
+    return {
+      get: () => this.decode(getValueAtPath(session.current(), path)),
+      set: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      update: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+    };
+  }
+}
+
+export const Boolean = (): BooleanPrimitive<false, false> =>
+  new BooleanPrimitive({
+    required: false,
+    defaultValue: undefined,
+  });
diff --git a/packages/mimic-core/src/primitives/Either.ts b/packages/mimic-core/src/primitives/Either.ts
new file mode 100644
index 000000000..e88576a11
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Either.ts
@@ -0,0 +1,150 @@
+import { type Path, type Value } from "../core/types.ts";
+import { getValueAtPath } from "./path.ts";
+import {
+  PrimitiveError,
+  type AnyPrimitive,
+  type CommandSession,
+  type InferInput,
+  type InferSnapshot,
+  type MaybeUndefined,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+
+export type ScalarPrimitive = AnyPrimitive;
+
+export interface EitherProxy<TVariants extends readonly AnyPrimitive[]> {
+  get(): InferSnapshot<EitherPrimitive<TVariants>> | undefined;
+  set(value: InferInput<EitherPrimitive<TVariants>>): void;
+  update(value: InferInput<EitherPrimitive<TVariants>>): void;
+}
+
+interface EitherPrimitiveSchema<TVariants extends readonly AnyPrimitive[]> {
+  readonly required: boolean;
+  readonly defaultValue: InferInput<EitherPrimitive<TVariants>> | undefined;
+  readonly variants: TVariants;
+}
+
+export class EitherPrimitive<
+  TVariants extends readonly AnyPrimitive[],
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  InferInput<TVariants[number]> | undefined,
+  MaybeUndefined<Exclude<InferSnapshot<TVariants[number]>, undefined>, TRequired, THasDefault>,
+  EitherProxy<TVariants>
+> {
+  readonly _tag = "EitherPrimitive";
+  readonly _Input!: InferInput<TVariants[number]> | undefined;
+  readonly _Snapshot!: MaybeUndefined<
+    Exclude<InferSnapshot<TVariants[number]>, undefined>,
+    TRequired,
+    THasDefault
+  >;
+  readonly _Proxy!: EitherProxy<TVariants>;
+
+  private readonly state: EitherPrimitiveSchema<TVariants>;
+
+  constructor(state: EitherPrimitiveSchema<TVariants>) {
+    this.state = state;
+    if (state.variants.length === 0) {
+      throw new PrimitiveError("Either requires at least one variant");
+    }
+  }
+
+  get schema() {
+    return {
+      kind: "either" as const,
+      variants: this.state.variants.map((variant) => variant.schema),
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.defaultValue !== undefined
+        ? { default: this.encode(this.state.defaultValue) }
+        : {}),
+    };
+  }
+
+  required(): EitherPrimitive<TVariants, true, THasDefault> {
+    return new EitherPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(
+    defaultValue: InferInput<EitherPrimitive<TVariants>>,
+  ): EitherPrimitive<TVariants, TRequired, true> {
+    return new EitherPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  encode(input: InferInput<EitherPrimitive<TVariants>> | undefined): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Either value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    const effectiveInput = input === undefined ? this.state.defaultValue : input;
+    if (effectiveInput === undefined) {
+      if (this.state.required) {
+        throw new PrimitiveError("Either value is required");
+      }
+      return undefined;
+    }
+
+    for (const variant of this.state.variants) {
+      try {
+        const encoded = variant.encodeOptional(effectiveInput);
+        if (encoded !== undefined) {
+          return encoded;
+        }
+      } catch {
+        // try next variant
+      }
+    }
+
+    throw new PrimitiveError("Either input did not match any variant");
+  }
+
+  decode(value: Value | undefined): InferSnapshot<EitherPrimitive<TVariants>> | undefined {
+    for (const variant of this.state.variants) {
+      const decoded = variant.decode(value);
+      if (decoded !== undefined) {
+        return decoded as InferSnapshot<EitherPrimitive<TVariants>>;
+      }
+    }
+    return undefined;
+  }
+
+  createProxy(session: CommandSession, path: Path): EitherProxy<TVariants> {
+    return {
+      get: () => this.decode(getValueAtPath(session.current(), path)),
+      set: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      update: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+    };
+  }
+
+  optional(stripDefaults: boolean): EitherPrimitive<TVariants, false, false> {
+    return new EitherPrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+    });
+  }
+}
+
+export const Either = <TVariants extends readonly AnyPrimitive[]>(
+  ...variants: TVariants
+): EitherPrimitive<TVariants, false, false> =>
+  new EitherPrimitive({
+    required: false,
+    defaultValue: undefined,
+    variants,
+  });
diff --git a/packages/mimic-core/src/primitives/Lazy.ts b/packages/mimic-core/src/primitives/Lazy.ts
new file mode 100644
index 000000000..80d059f26
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Lazy.ts
@@ -0,0 +1,59 @@
+import type { Path, Value } from "../core/types.ts";
+import {
+  type AnyPrimitive,
+  type CommandSession,
+  type InferInput,
+  type InferProxy,
+  type InferSnapshot,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+
+export class LazyPrimitive<
+  TThunk extends () => AnyPrimitive,
+> implements PrimitiveWithOptionalEncoding<
+  InferInput<ReturnType<TThunk>>,
+  InferSnapshot<ReturnType<TThunk>>,
+  InferProxy<ReturnType<TThunk>>
+> {
+  readonly _tag = "LazyPrimitive";
+  readonly _Input!: InferInput<ReturnType<TThunk>>;
+  readonly _Snapshot!: InferSnapshot<ReturnType<TThunk>>;
+  readonly _Proxy!: InferProxy<ReturnType<TThunk>>;
+
+  private readonly thunk: TThunk;
+  private resolved?: ReturnType<TThunk>;
+
+  constructor(thunk: TThunk) {
+    this.thunk = thunk;
+  }
+
+  get schema() {
+    return this.resolve().schema;
+  }
+
+  encode(input: InferInput<ReturnType<TThunk>>): Value {
+    return this.resolve().encode(input);
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    return this.resolve().encodeOptional(input);
+  }
+
+  decode(value: Value | undefined): InferSnapshot<ReturnType<TThunk>> | undefined {
+    return this.resolve().decode(value);
+  }
+
+  createProxy(session: CommandSession, path: Path): InferProxy<ReturnType<TThunk>> {
+    return this.resolve().createProxy(session, path);
+  }
+
+  private resolve(): ReturnType<TThunk> {
+    if (this.resolved === undefined) {
+      this.resolved = this.thunk() as ReturnType<TThunk>;
+    }
+    return this.resolved as ReturnType<TThunk>;
+  }
+}
+
+export const Lazy = <TThunk extends () => AnyPrimitive>(thunk: TThunk): LazyPrimitive<TThunk> =>
+  new LazyPrimitive(thunk);
diff --git a/packages/mimic-core/src/primitives/Literal.ts b/packages/mimic-core/src/primitives/Literal.ts
new file mode 100644
index 000000000..9b7123f00
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Literal.ts
@@ -0,0 +1,147 @@
+import { type Path, type Value } from "../core/types.ts";
+import type { LiteralSchema } from "../schema/types.ts";
+import { encodeScalar } from "./value.ts";
+import { getValueAtPath } from "./path.ts";
+import {
+  PrimitiveError,
+  type CommandSession,
+  type MaybeUndefined,
+  type NeedsValue,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+
+export type LiteralValue = string | number | boolean;
+
+type InferSetInput<
+  T extends LiteralValue,
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> = NeedsValue<T, TRequired, THasDefault>;
+
+export interface LiteralProxy<
+  T extends LiteralValue,
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> {
+  get(): MaybeUndefined<T, TRequired, THasDefault>;
+  set(value: InferSetInput<T, TRequired, THasDefault>): void;
+  update(value: InferSetInput<T, TRequired, THasDefault>): void;
+}
+
+interface LiteralPrimitiveSchema<T extends LiteralValue> {
+  readonly required: boolean;
+  readonly defaultValue: T | undefined;
+  readonly literal: T;
+}
+
+export class LiteralPrimitive<
+  T extends LiteralValue,
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  InferSetInput<T, TRequired, THasDefault>,
+  MaybeUndefined<T, TRequired, THasDefault>,
+  LiteralProxy<T, TRequired, THasDefault>
+> {
+  readonly _tag = "LiteralPrimitive";
+  readonly _Input!: InferSetInput<T, TRequired, THasDefault>;
+  readonly _Snapshot!: MaybeUndefined<T, TRequired, THasDefault>;
+  readonly _Proxy!: LiteralProxy<T, TRequired, THasDefault>;
+
+  private readonly state: LiteralPrimitiveSchema<T>;
+
+  constructor(state: LiteralPrimitiveSchema<T>) {
+    this.state = state;
+  }
+
+  get literal(): T {
+    return this.state.literal;
+  }
+
+  get schema(): LiteralSchema {
+    return {
+      kind: "literal" as const,
+      value: this.state.literal,
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.defaultValue !== undefined
+        ? { default: encodeScalar(this.state.defaultValue) as LiteralSchema["default"] }
+        : {}),
+    };
+  }
+
+  required(): LiteralPrimitive<T, true, THasDefault> {
+    return new LiteralPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(defaultValue: T): LiteralPrimitive<T, TRequired, true> {
+    if (defaultValue !== this.state.literal) {
+      throw new PrimitiveError("Literal default must equal the literal value");
+    }
+    return new LiteralPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  optional(stripDefaults: boolean): LiteralPrimitive<T, false, false> {
+    return new LiteralPrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+    });
+  }
+
+  encode(input: InferSetInput<T, TRequired, THasDefault>): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Literal value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    const effectiveInput = input === undefined ? this.state.defaultValue : input;
+    if (effectiveInput === undefined) {
+      if (this.state.required) {
+        throw new PrimitiveError("Literal value is required");
+      }
+      return undefined;
+    }
+    if (effectiveInput !== this.state.literal) {
+      throw new PrimitiveError("Input does not match the literal value");
+    }
+    return encodeScalar(this.state.literal);
+  }
+
+  decode(value: Value | undefined): MaybeUndefined<T, TRequired, THasDefault> {
+    if (value === undefined) {
+      return undefined as MaybeUndefined<T, TRequired, THasDefault>;
+    }
+    if ("value" in value && value.value === this.state.literal) {
+      return this.state.literal as MaybeUndefined<T, TRequired, THasDefault>;
+    }
+    return undefined as MaybeUndefined<T, TRequired, THasDefault>;
+  }
+
+  createProxy(session: CommandSession, path: Path): LiteralProxy<T, TRequired, THasDefault> {
+    return {
+      get: () => this.decode(getValueAtPath(session.current(), path)),
+      set: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      update: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+    };
+  }
+}
+
+export const Literal = <T extends LiteralValue>(literal: T): LiteralPrimitive<T, false, false> =>
+  new LiteralPrimitive({
+    required: false,
+    defaultValue: undefined,
+    literal,
+  });
diff --git a/packages/mimic-core/src/primitives/Number.ts b/packages/mimic-core/src/primitives/Number.ts
new file mode 100644
index 000000000..ce0ddae53
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Number.ts
@@ -0,0 +1,173 @@
+import { numberValue, type Path, type Value } from "../core/types.ts";
+import type { NumberSchema, NumberValidator } from "../schema/types.ts";
+import { getValueAtPath } from "./path.ts";
+import {
+  PrimitiveError,
+  type CommandSession,
+  type MaybeUndefined,
+  type NeedsValue,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+
+type InferSetInput<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> = NeedsValue<number, TRequired, THasDefault>;
+
+export interface NumberProxy<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> {
+  get(): MaybeUndefined<number, TRequired, THasDefault>;
+  set(value: InferSetInput<TRequired, THasDefault>): void;
+  update(value: InferSetInput<TRequired, THasDefault>): void;
+}
+
+interface NumberPrimitiveSchema {
+  readonly required: boolean;
+  readonly defaultValue: number | undefined;
+  readonly validators: readonly NumberValidator[];
+}
+
+export class NumberPrimitive<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  InferSetInput<TRequired, THasDefault>,
+  MaybeUndefined<number, TRequired, THasDefault>,
+  NumberProxy<TRequired, THasDefault>
+> {
+  readonly _tag = "NumberPrimitive";
+  readonly _Input!: InferSetInput<TRequired, THasDefault>;
+  readonly _Snapshot!: MaybeUndefined<number, TRequired, THasDefault>;
+  readonly _Proxy!: NumberProxy<TRequired, THasDefault>;
+
+  private readonly state: NumberPrimitiveSchema;
+
+  constructor(state: NumberPrimitiveSchema) {
+    this.state = state;
+  }
+
+  get schema(): NumberSchema {
+    return {
+      kind: "number" as const,
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.defaultValue !== undefined
+        ? { default: numberValue(this.state.defaultValue) }
+        : {}),
+      ...(this.state.validators.length > 0 ? { validators: this.state.validators } : {}),
+    };
+  }
+
+  required(): NumberPrimitive<true, THasDefault> {
+    return new NumberPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(defaultValue: number): NumberPrimitive<TRequired, true> {
+    return new NumberPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  optional(stripDefaults: boolean): NumberPrimitive<false, false> {
+    return new NumberPrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+    });
+  }
+
+  min(value: number): NumberPrimitive<TRequired, THasDefault> {
+    return new NumberPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "min", value }],
+    });
+  }
+
+  max(value: number): NumberPrimitive<TRequired, THasDefault> {
+    return new NumberPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "max", value }],
+    });
+  }
+
+  positive(): NumberPrimitive<TRequired, THasDefault> {
+    return new NumberPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "positive" }],
+    });
+  }
+
+  negative(): NumberPrimitive<TRequired, THasDefault> {
+    return new NumberPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "negative" }],
+    });
+  }
+
+  int(): NumberPrimitive<TRequired, THasDefault> {
+    return new NumberPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "int" }],
+    });
+  }
+
+  encode(input: InferSetInput<TRequired, THasDefault>): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Number value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    if (input === undefined) {
+      if (this.state.defaultValue !== undefined) {
+        return numberValue(this.state.defaultValue);
+      }
+      if (this.state.required) {
+        throw new PrimitiveError("Number value is required");
+      }
+      return undefined;
+    }
+    if (
+      typeof input !== "number" ||
+      globalThis.Number.isNaN(input) ||
+      !globalThis.Number.isFinite(input)
+    ) {
+      throw new PrimitiveError("Expected finite number input");
+    }
+    return numberValue(input);
+  }
+
+  decode(value: Value | undefined): MaybeUndefined<number, TRequired, THasDefault> {
+    return (value?.kind === "number" ? value.value : undefined) as MaybeUndefined<
+      number,
+      TRequired,
+      THasDefault
+    >;
+  }
+
+  createProxy(session: CommandSession, path: Path): NumberProxy<TRequired, THasDefault> {
+    return {
+      get: () => this.decode(getValueAtPath(session.current(), path)),
+      set: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      update: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+    };
+  }
+}
+
+export const Number = (): NumberPrimitive<false, false> =>
+  new NumberPrimitive({
+    required: false,
+    defaultValue: undefined,
+    validators: [],
+  });
diff --git a/packages/mimic-core/src/primitives/String.ts b/packages/mimic-core/src/primitives/String.ts
new file mode 100644
index 000000000..f59107ede
--- /dev/null
+++ b/packages/mimic-core/src/primitives/String.ts
@@ -0,0 +1,179 @@
+import { stringValue, type Path, type Value } from "../core/types.ts";
+import type { StringSchema, StringValidator } from "../schema/types.ts";
+import { getValueAtPath } from "./path.ts";
+import {
+  PrimitiveError,
+  type CommandSession,
+  type MaybeUndefined,
+  type NeedsValue,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+
+type InferSetInput<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> = NeedsValue<string, TRequired, THasDefault>;
+
+export interface StringProxy<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> {
+  get(): MaybeUndefined<string, TRequired, THasDefault>;
+  set(value: InferSetInput<TRequired, THasDefault>): void;
+  update(value: InferSetInput<TRequired, THasDefault>): void;
+}
+
+interface StringPrimitiveSchema {
+  readonly required: boolean;
+  readonly defaultValue: string | undefined;
+  readonly validators: readonly StringValidator[];
+}
+
+export class StringPrimitive<
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  InferSetInput<TRequired, THasDefault>,
+  MaybeUndefined<string, TRequired, THasDefault>,
+  StringProxy<TRequired, THasDefault>
+> {
+  readonly _tag = "StringPrimitive";
+  readonly _Input!: InferSetInput<TRequired, THasDefault>;
+  readonly _Snapshot!: MaybeUndefined<string, TRequired, THasDefault>;
+  readonly _Proxy!: StringProxy<TRequired, THasDefault>;
+
+  private readonly state: StringPrimitiveSchema;
+
+  constructor(state: StringPrimitiveSchema) {
+    this.state = state;
+  }
+
+  get schema(): StringSchema {
+    return {
+      kind: "string" as const,
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.defaultValue !== undefined
+        ? { default: stringValue(this.state.defaultValue) }
+        : {}),
+      ...(this.state.validators.length > 0 ? { validators: this.state.validators } : {}),
+    };
+  }
+
+  required(): StringPrimitive<true, THasDefault> {
+    return new StringPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(defaultValue: string): StringPrimitive<TRequired, true> {
+    return new StringPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  optional(stripDefaults: boolean): StringPrimitive<false, false> {
+    return new StringPrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+    });
+  }
+
+  min(length: number): StringPrimitive<TRequired, THasDefault> {
+    return new StringPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "minLength", value: length }],
+    });
+  }
+
+  max(length: number): StringPrimitive<TRequired, THasDefault> {
+    return new StringPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "maxLength", value: length }],
+    });
+  }
+
+  length(exact: number): StringPrimitive<TRequired, THasDefault> {
+    return new StringPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "length", value: exact }],
+    });
+  }
+
+  regex(pattern: RegExp, _message?: string): StringPrimitive<TRequired, THasDefault> {
+    return new StringPrimitive({
+      ...this.state,
+      validators: [
+        ...this.state.validators,
+        { kind: "regex", pattern: pattern.source, flags: pattern.flags },
+      ],
+    });
+  }
+
+  email(): StringPrimitive<TRequired, THasDefault> {
+    return new StringPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "email" }],
+    });
+  }
+
+  url(): StringPrimitive<TRequired, THasDefault> {
+    return new StringPrimitive({
+      ...this.state,
+      validators: [...this.state.validators, { kind: "url" }],
+    });
+  }
+
+  encode(input: InferSetInput<TRequired, THasDefault>): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("String value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    if (input === undefined) {
+      if (this.state.defaultValue !== undefined) {
+        return stringValue(this.state.defaultValue);
+      }
+      if (this.state.required) {
+        throw new PrimitiveError("String value is required");
+      }
+      return undefined;
+    }
+    if (typeof input !== "string") {
+      throw new PrimitiveError("Expected string input");
+    }
+    return stringValue(input);
+  }
+
+  decode(value: Value | undefined): MaybeUndefined<string, TRequired, THasDefault> {
+    return (value?.kind === "string" ? value.value : undefined) as MaybeUndefined<
+      string,
+      TRequired,
+      THasDefault
+    >;
+  }
+
+  createProxy(session: CommandSession, path: Path): StringProxy<TRequired, THasDefault> {
+    return {
+      get: () => this.decode(getValueAtPath(session.current(), path)),
+      set: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      update: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+    };
+  }
+}
+
+export const String = (): StringPrimitive<false, false> =>
+  new StringPrimitive({
+    required: false,
+    defaultValue: undefined,
+    validators: [],
+  });
diff --git a/packages/mimic-core/src/primitives/Struct.ts b/packages/mimic-core/src/primitives/Struct.ts
new file mode 100644
index 000000000..28cb7c272
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Struct.ts
@@ -0,0 +1,360 @@
+import { objectValue, type ObjectValue, type Path, type Value } from "../core/types.ts";
+import type { ObjectSchema } from "../schema/types.ts";
+import { getObjectAtPath, getValueAtPath } from "./path.ts";
+import {
+  PrimitiveError,
+  type AnyPrimitive,
+  type CommandSession,
+  type InferInput,
+  type InferProxy,
+  type InferSnapshot,
+  type MaybeUndefined,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+
+type RequiredKey<TFields extends Record<string, AnyPrimitive>> = {
+  [K in keyof TFields]: TFields[K] extends { readonly _Input: infer TInput }
+    ? undefined extends TInput
+      ? never
+      : K
+    : never;
+}[keyof TFields];
+
+type OptionalKey<TFields extends Record<string, AnyPrimitive>> = Exclude<
+  keyof TFields,
+  RequiredKey<TFields>
+>;
+
+export type StructSetInput<TFields extends Record<string, AnyPrimitive>> = {
+  readonly [K in RequiredKey<TFields>]: InferInput<TFields[K]>;
+} & {
+  readonly [K in OptionalKey<TFields>]?: InferInput<TFields[K]>;
+};
+
+/**
+ * Keys of a struct that may be deleted via `update({ field: undefined })`:
+ * fields that are optional or carry a default (deleting a defaulted field
+ * re-materializes the default on the next validate). Deleting a required
+ * field without a default would make the document fail validation, so those
+ * keys never accept `undefined`.
+ */
+type DeletableKey<TFields extends Record<string, AnyPrimitive>> = {
+  [K in keyof TFields]: undefined extends InferInput<TFields[K]> ? K : never;
+}[keyof TFields];
+
+export type StructUpdateInput<TFields extends Record<string, AnyPrimitive>> = {
+  readonly [K in keyof TFields]?:
+    | (TFields[K] extends StructPrimitive<infer TNested, any, any>
+        ? StructUpdateInput<TNested>
+        : InferInput<TFields[K]>)
+    | (K extends DeletableKey<TFields> ? undefined : never);
+};
+
+/**
+ * Call-site validation for `update(...)`. Optional properties accept an
+ * explicit `undefined` even when their declared type excludes it (unless
+ * `exactOptionalPropertyTypes` is enabled), so {@link StructUpdateInput}
+ * alone cannot reject `update({ requiredNoDefault: undefined })`. This type
+ * maps any field explicitly set to `undefined` that is not deletable
+ * (required without a default) to `never`, failing the call regardless of
+ * compiler options. Recurses into nested struct updates.
+ */
+export type ValidatedStructUpdate<TFields extends Record<string, AnyPrimitive>, T> = {
+  [K in keyof T]: K extends keyof TFields ? ValidatedStructFieldUpdate<TFields[K], T[K]> : never;
+};
+
+type ValidatedStructFieldUpdate<TField extends AnyPrimitive, TValue> = [TField] extends [
+  StructPrimitive<infer TNested, any, any>,
+]
+  ? ValidatedStructUpdate<TNested, Exclude<TValue, undefined>> | DeletionOf<TField, TValue>
+  : undefined extends InferInput<TField>
+    ? TValue
+    : Exclude<TValue, undefined>;
+
+type DeletionOf<TField extends AnyPrimitive, TValue> =
+  undefined extends InferInput<TField> ? Extract<TValue, undefined> : never;
+
+type SnapshotOptionalKey<TFields extends Record<string, AnyPrimitive>> = {
+  [K in keyof TFields]: undefined extends InferSnapshot<TFields[K]> ? K : never;
+}[keyof TFields];
+
+/**
+ * Decoded shape of a struct. Fields whose primitive is `.required()` or
+ * carries a `.default()` snapshot as non-optional `T` (the runtime
+ * materializes defaults on every validate, so they are always present);
+ * only optional-without-default fields stay `?`/`| undefined`.
+ */
+export type StructSnapshot<TFields extends Record<string, AnyPrimitive>> = {
+  readonly [K in Exclude<keyof TFields, SnapshotOptionalKey<TFields>>]: InferSnapshot<TFields[K]>;
+} & {
+  readonly [K in SnapshotOptionalKey<TFields>]?: InferSnapshot<TFields[K]>;
+};
+
+/**
+ * Partial-update input of a struct primitive (the shape accepted by
+ * `proxy.update(...)`): every field optional, `undefined` deletes the field.
+ */
+export type InferUpdateInput<T extends AnyPrimitive> =
+  T extends StructPrimitive<infer TFields, any, any> ? StructUpdateInput<TFields> : never;
+
+export type StructProxy<
+  TFields extends Record<string, AnyPrimitive>,
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> = {
+  readonly [K in keyof TFields]: InferProxy<TFields[K]>;
+} & {
+  get(): MaybeUndefined<StructSnapshot<TFields>, TRequired, THasDefault>;
+  set(value: StructSetInput<TFields>): void;
+  update<T extends StructUpdateInput<TFields>>(value: T & ValidatedStructUpdate<TFields, T>): void;
+};
+
+interface StructPrimitiveSchema<TFields extends Record<string, AnyPrimitive>> {
+  readonly required: boolean;
+  readonly defaultValue: StructSetInput<TFields> | undefined;
+  readonly fields: TFields;
+}
+
+export class StructPrimitive<
+  TFields extends Record<string, AnyPrimitive>,
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  TRequired extends true ? StructSetInput<TFields> : StructSetInput<TFields> | undefined,
+  MaybeUndefined<StructSnapshot<TFields>, TRequired, THasDefault>,
+  StructProxy<TFields, TRequired, THasDefault>
+> {
+  readonly _tag = "StructPrimitive";
+  readonly _Input!: TRequired extends true
+    ? StructSetInput<TFields>
+    : StructSetInput<TFields> | undefined;
+  readonly _Snapshot!: MaybeUndefined<StructSnapshot<TFields>, TRequired, THasDefault>;
+  readonly _Proxy!: StructProxy<TFields, TRequired, THasDefault>;
+
+  private readonly state: StructPrimitiveSchema<TFields>;
+
+  constructor(state: StructPrimitiveSchema<TFields>) {
+    this.state = state;
+  }
+
+  get fields(): TFields {
+    return this.state.fields;
+  }
+
+  get schema(): ObjectSchema {
+    const fields: Record<string, AnyPrimitive["schema"]> = {};
+    for (const [key, primitive] of Object.entries(this.state.fields)) {
+      fields[key] = primitive.schema;
+    }
+    return {
+      kind: "object" as const,
+      fields,
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.defaultValue !== undefined
+        ? {
+            default: this.encode(this.state.defaultValue as StructSetInput<TFields>) as ObjectValue,
+          }
+        : {}),
+    };
+  }
+
+  required(): StructPrimitive<TFields, true, THasDefault> {
+    return new StructPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(defaultValue: StructSetInput<TFields>): StructPrimitive<TFields, TRequired, true> {
+    return new StructPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  /**
+   * Returns a new struct with the given fields added. The struct-level
+   * default is dropped (it no longer matches the widened field set), so the
+   * result is typed without a default — re-apply `.default(...)` if needed.
+   */
+  extend<TNewFields extends Record<string, AnyPrimitive>>(
+    newFields: TNewFields,
+  ): StructPrimitive<TFields & TNewFields, TRequired, false> {
+    return new StructPrimitive({
+      required: this.state.required,
+      defaultValue: undefined,
+      fields: {
+        ...this.state.fields,
+        ...newFields,
+      } as TFields & TNewFields,
+    });
+  }
+
+  /**
+   * Returns a new struct with every field made optional. The struct-level
+   * default is dropped at runtime, so the result is typed without a default —
+   * re-apply `.default(...)` if needed.
+   */
+  partial(options?: {
+    stripDefaults?: boolean;
+  }): StructPrimitive<{ [K in keyof TFields]: AnyPrimitive }, TRequired, false> {
+    const stripDefaults = options?.stripDefaults ?? false;
+    const fields: Record<string, AnyPrimitive> = {};
+    for (const [key, field] of Object.entries(this.state.fields)) {
+      fields[key] = makePrimitiveOptional(field, stripDefaults);
+    }
+    return new StructPrimitive({
+      required: this.state.required,
+      defaultValue: undefined,
+      fields: fields as { [K in keyof TFields]: AnyPrimitive },
+    });
+  }
+
+  optional(stripDefaults: boolean): StructPrimitive<TFields, false, false> {
+    // Recurse when stripping so nested struct/array fields lose their own
+    // defaults too. Without this, a fully-stripped partial (e.g. a state
+    // override schema) keeps nested field defaults, which re-materialize when
+    // the partial's own `.default({})` is validated on a serialize→parse
+    // round-trip — breaking schema idempotency.
+    const fields = stripDefaults
+      ? (Object.fromEntries(
+          Object.entries(this.state.fields).map(([key, field]) => [
+            key,
+            makePrimitiveOptional(field, true),
+          ]),
+        ) as TFields)
+      : this.state.fields;
+    return new StructPrimitive({
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+      fields,
+    });
+  }
+
+  encode(
+    input: TRequired extends true ? StructSetInput<TFields> : StructSetInput<TFields> | undefined,
+  ): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Struct value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    if (input === undefined) {
+      if (this.state.defaultValue !== undefined) {
+        return this.encode(this.state.defaultValue as StructSetInput<TFields>);
+      }
+      if (this.state.required) {
+        throw new PrimitiveError("Struct value is required");
+      }
+      return undefined;
+    }
+    if (typeof input !== "object" || input === null || Array.isArray(input)) {
+      throw new PrimitiveError("Expected object input");
+    }
+    const record = input as Record<string, unknown>;
+    const fields: Record<string, Value> = {};
+    for (const [key, primitive] of Object.entries(this.state.fields)) {
+      const encoded = primitive.encodeOptional(record[key]);
+      if (encoded !== undefined) {
+        fields[key] = encoded;
+      }
+    }
+    return objectValue(fields);
+  }
+
+  decode(
+    value: Value | undefined,
+  ): MaybeUndefined<StructSnapshot<TFields>, TRequired, THasDefault> {
+    if (value?.kind !== "object") {
+      return undefined as MaybeUndefined<StructSnapshot<TFields>, TRequired, THasDefault>;
+    }
+    const result: Record<string, unknown> = {};
+    for (const [key, primitive] of Object.entries(this.state.fields)) {
+      const decoded = primitive.decode(value.fields[key]);
+      if (decoded !== undefined) {
+        result[key] = decoded;
+      }
+    }
+    return result as MaybeUndefined<StructSnapshot<TFields>, TRequired, THasDefault>;
+  }
+
+  createProxy(session: CommandSession, path: Path): StructProxy<TFields, TRequired, THasDefault> {
+    const proxy = {
+      get: () => this.decode(getValueAtPath(session.current(), path)),
+      set: (value: StructSetInput<TFields>) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      update: (value: StructUpdateInput<TFields>) => {
+        emitStructUpdate(this.state.fields, session, path, value);
+      },
+    } as Record<string, unknown>;
+
+    for (const [key, primitive] of Object.entries(this.state.fields)) {
+      proxy[key] = primitive.createProxy(session, [...path, { kind: "field", key }]);
+    }
+
+    return proxy as StructProxy<TFields, TRequired, THasDefault>;
+  }
+}
+
+const emitStructUpdate = (
+  fields: Record<string, AnyPrimitive>,
+  session: CommandSession,
+  path: Path,
+  value: Record<string, unknown>,
+): void => {
+  for (const [key, next] of Object.entries(value)) {
+    const primitive = fields[key];
+    if (!primitive) {
+      continue;
+    }
+    if (next === undefined) {
+      const current = getObjectAtPath(session.current(), path);
+      if (current?.fields[key] !== undefined) {
+        session.emit([{ kind: "object.delete", path, key }]);
+      }
+      continue;
+    }
+
+    if (
+      primitive._tag === "StructPrimitive" &&
+      typeof next === "object" &&
+      next !== null &&
+      !Array.isArray(next)
+    ) {
+      (primitive as StructPrimitive<Record<string, AnyPrimitive>, any, any>)
+        .createProxy(session, [...path, { kind: "field", key }])
+        .update(next as Record<string, unknown>);
+      continue;
+    }
+
+    session.emit([
+      {
+        kind: "object.set",
+        path,
+        key,
+        value: primitive.encode(next as never),
+      },
+    ]);
+  }
+};
+
+const makePrimitiveOptional = (primitive: AnyPrimitive, stripDefaults: boolean): AnyPrimitive => {
+  const optional = (primitive as { optional?: (stripDefaults: boolean) => AnyPrimitive }).optional;
+  if (typeof optional === "function") {
+    return optional.call(primitive, stripDefaults);
+  }
+  return primitive;
+};
+
+export const Struct = <TFields extends Record<string, AnyPrimitive>>(
+  fields: TFields,
+): StructPrimitive<TFields, false, false> =>
+  new StructPrimitive({
+    required: false,
+    defaultValue: undefined,
+    fields,
+  });
diff --git a/packages/mimic-core/src/primitives/Tree.ts b/packages/mimic-core/src/primitives/Tree.ts
new file mode 100644
index 000000000..1658b397e
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Tree.ts
@@ -0,0 +1,695 @@
+import {
+  HiddenTreeRootId,
+  cloneValue,
+  objectValue,
+  stringValue,
+  treeValue,
+  type ObjectValue,
+  type Path,
+  type TreeNode,
+  type TreeValue,
+  type Value,
+} from "../core/types.ts";
+import { createGenerator } from "../fractional/index.ts";
+import type { ObjectSchema, TreeSchema } from "../schema/types.ts";
+import {
+  getNeighborPositionsForInsert,
+  getOrderedTreeChildren,
+  getTreeAtPath,
+  getTreeNodeById,
+  isTreeDescendant,
+  normalizeIndex,
+  treeNodePath,
+} from "./path.ts";
+import {
+  PrimitiveError,
+  type AnyPrimitive,
+  type CommandSession,
+  type InferInput,
+  type InferProxy,
+  type InferSnapshot,
+  type MaybeUndefined,
+  type PrimitiveWithOptionalEncoding,
+  shortId,
+} from "./shared.ts";
+import { type InferUpdateInput } from "./Struct.ts";
+import {
+  type AnyTreeNodePrimitive,
+  type InferTreeNodeChildren,
+  type InferTreeNodeData,
+  type InferTreeNodeType,
+  type TreeChildInsertInput,
+  type TreeNodeInput,
+  type TreeNodePrimitive,
+} from "./TreeNode.ts";
+
+export interface TreeNodeSnapshot<TNode extends AnyTreeNodePrimitive = AnyTreeNodePrimitive> {
+  readonly id: string;
+  readonly type: InferTreeNodeType<TNode>;
+  readonly parentId: string | null;
+  readonly pos: string;
+  readonly data: InferSnapshot<InferTreeNodeData<TNode>>;
+  readonly children: readonly TreeNodeSnapshot<InferTreeNodeChildren<TNode>>[];
+}
+
+type RootInput<TRoot extends AnyTreeNodePrimitive> = readonly TreeNodeInput<TRoot>[];
+
+export interface TypedNodeProxy<TNode extends AnyTreeNodePrimitive> {
+  readonly id: string;
+  readonly type: InferTreeNodeType<TNode>;
+  readonly pos: string;
+  readonly parentId: string | null;
+  readonly data: InferProxy<InferTreeNodeData<TNode>>;
+  readonly children: TreeChildrenProxy<InferTreeNodeChildren<TNode>>;
+  get(): TreeNodeSnapshot<TNode> | undefined;
+  update(value: InferUpdateInput<InferTreeNodeData<TNode>>): void;
+  remove(): void;
+  moveTo(target: TreeChildrenProxy<any>, index: number): void;
+  moveToPos(targetParentId: string, pos: string): void;
+  as<TExpected extends AnyTreeNodePrimitive>(node: TExpected): TypedNodeProxy<TExpected>;
+}
+
+export interface TreeChildrenProxy<TAllowed extends AnyTreeNodePrimitive> {
+  readonly length: number;
+  at(index: number): TypedNodeProxy<TAllowed> | undefined;
+  first(): TypedNodeProxy<TAllowed> | undefined;
+  last(): TypedNodeProxy<TAllowed> | undefined;
+  findById(id: string): TypedNodeProxy<TAllowed> | undefined;
+  insertAt(index: number, node: TreeChildInsertInput<TAllowed>): TypedNodeProxy<TAllowed>;
+  insertLast(node: TreeChildInsertInput<TAllowed>): TypedNodeProxy<TAllowed>;
+  insertAtPos(pos: string, node: TreeChildInsertInput<TAllowed>): TypedNodeProxy<TAllowed>;
+  find(
+    predicate: (
+      node: TypedNodeProxy<TAllowed>,
+      index: number,
+      collection: readonly TypedNodeProxy<TAllowed>[],
+    ) => boolean,
+  ): TypedNodeProxy<TAllowed> | undefined;
+  findIndex(
+    predicate: (
+      node: TypedNodeProxy<TAllowed>,
+      index: number,
+      collection: readonly TypedNodeProxy<TAllowed>[],
+    ) => boolean,
+  ): number;
+  map<TResult>(
+    fn: (
+      node: TypedNodeProxy<TAllowed>,
+      index: number,
+      collection: readonly TypedNodeProxy<TAllowed>[],
+    ) => TResult,
+  ): TResult[];
+  filter(
+    predicate: (
+      node: TypedNodeProxy<TAllowed>,
+      index: number,
+      collection: readonly TypedNodeProxy<TAllowed>[],
+    ) => boolean,
+  ): TypedNodeProxy<TAllowed>[];
+  some(
+    predicate: (
+      node: TypedNodeProxy<TAllowed>,
+      index: number,
+      collection: readonly TypedNodeProxy<TAllowed>[],
+    ) => boolean,
+  ): boolean;
+  every(
+    predicate: (
+      node: TypedNodeProxy<TAllowed>,
+      index: number,
+      collection: readonly TypedNodeProxy<TAllowed>[],
+    ) => boolean,
+  ): boolean;
+  forEach(
+    fn: (
+      node: TypedNodeProxy<TAllowed>,
+      index: number,
+      collection: readonly TypedNodeProxy<TAllowed>[],
+    ) => void,
+  ): void;
+  [Symbol.iterator](): Iterator<TypedNodeProxy<TAllowed>>;
+}
+
+export interface TreeProxy<TRoot extends AnyTreeNodePrimitive> {
+  get(): readonly TreeNodeSnapshot<TRoot>[] | undefined;
+  set(value: RootInput<TRoot>): void;
+  findByIdAcrossTree(id: string): TypedNodeProxy<any> | undefined;
+  readonly children: TreeChildrenProxy<TRoot>;
+}
+
+interface TreePrimitiveSchema<TRoot extends AnyTreeNodePrimitive> {
+  readonly required: boolean;
+  readonly defaultValue: RootInput<TRoot> | undefined;
+  readonly encodedDefault: TreeValue | undefined;
+  readonly root: TRoot;
+}
+
+export class TreePrimitive<
+  TRoot extends AnyTreeNodePrimitive,
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  RootInput<TRoot> | undefined,
+  MaybeUndefined<readonly TreeNodeSnapshot<TRoot>[], TRequired, THasDefault>,
+  TreeProxy<TRoot>
+> {
+  readonly _tag = "TreePrimitive";
+  readonly _Input!: RootInput<TRoot> | undefined;
+  readonly _Snapshot!: MaybeUndefined<readonly TreeNodeSnapshot<TRoot>[], TRequired, THasDefault>;
+  readonly _Proxy!: TreeProxy<TRoot>;
+
+  private readonly state: TreePrimitiveSchema<TRoot>;
+
+  constructor(state: TreePrimitiveSchema<TRoot>) {
+    this.state = state;
+  }
+
+  get schema(): TreeSchema {
+    const variants = buildTreeVariants(this.state.root);
+    return {
+      kind: "tree" as const,
+      discriminator: "type",
+      roots: [this.state.root.type],
+      variants,
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.encodedDefault !== undefined
+        ? { default: cloneValue(this.state.encodedDefault) as TreeValue }
+        : {}),
+    };
+  }
+
+  required(): TreePrimitive<TRoot, true, THasDefault> {
+    return new TreePrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(defaultValue: RootInput<TRoot>): TreePrimitive<TRoot, TRequired, true> {
+    return new TreePrimitive({
+      ...this.state,
+      defaultValue,
+      encodedDefault: this.encodeRoots(defaultValue),
+    });
+  }
+
+  encode(input: RootInput<TRoot> | undefined): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Tree value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    if (input === undefined) {
+      if (this.state.encodedDefault !== undefined) {
+        return cloneValue(this.state.encodedDefault);
+      }
+      if (this.state.required) {
+        throw new PrimitiveError("Tree value is required");
+      }
+      return undefined;
+    }
+    if (!Array.isArray(input)) {
+      throw new PrimitiveError("Expected tree root input array");
+    }
+    return this.encodeRoots(input as RootInput<TRoot>);
+  }
+
+  private encodeRoots(input: RootInput<TRoot>): TreeValue {
+    const nodes: TreeNode[] = [];
+    const indexByType = collectTreeNodeIndex(this.state.root);
+    const ids = new Set<string>([HiddenTreeRootId]);
+    let lowerRootPos: string | undefined;
+    const generator = createGenerator();
+
+    const visit = (
+      nodeInput: TreeNodeInput<AnyTreeNodePrimitive>,
+      parent: string,
+      allowed: readonly AnyTreeNodePrimitive[],
+      lower?: string,
+    ): string => {
+      const primitive = indexByType.get(nodeInput.type);
+      if (!primitive) {
+        throw new PrimitiveError(`Unknown tree node type "${nodeInput.type}"`);
+      }
+      if (!allowed.some((candidate) => candidate.type === primitive.type)) {
+        throw new PrimitiveError(`Node type "${nodeInput.type}" is not allowed here`);
+      }
+      const id = nodeInput.id ?? nextUniqueNodeId(ids);
+      if (ids.has(id)) {
+        throw new PrimitiveError(`Duplicate tree node id "${id}" in encoded input`);
+      }
+      ids.add(id);
+      const pos = generator.between(lower, undefined);
+      nodes.push({
+        id,
+        parent,
+        pos,
+        value: encodeTreeNodeObject(primitive, nodeInput),
+      });
+      let childLower: string | undefined;
+      for (const child of nodeInput.children ?? []) {
+        childLower = visit(
+          child as TreeNodeInput<AnyTreeNodePrimitive>,
+          id,
+          primitive.children,
+          childLower,
+        );
+      }
+      return pos;
+    };
+
+    for (const rootNode of input) {
+      lowerRootPos = visit(
+        rootNode as TreeNodeInput<AnyTreeNodePrimitive>,
+        HiddenTreeRootId,
+        [this.state.root],
+        lowerRootPos,
+      );
+    }
+
+    return treeValue(nodes);
+  }
+
+  decode(value: Value | undefined): readonly TreeNodeSnapshot<TRoot>[] | undefined {
+    if (value?.kind !== "tree") {
+      return undefined;
+    }
+    const index = collectTreeNodeIndex(this.state.root);
+    return buildTreeSnapshots(value, HiddenTreeRootId, index) as readonly TreeNodeSnapshot<TRoot>[];
+  }
+
+  createProxy(session: CommandSession, path: Path): TreeProxy<TRoot> {
+    const index = collectTreeNodeIndex(this.state.root);
+    return {
+      get: () => this.decode(getTreeAtPath(session.current(), path)),
+      set: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      findByIdAcrossTree: (id) => {
+        const tree = getTreeAtPath(session.current(), path);
+        const node = getTreeNodeById(tree, id);
+        if (!node) {
+          return undefined;
+        }
+        const typeValue = node.value.fields["type"];
+        const primitive = index.get(typeValue?.kind === "string" ? typeValue.value : "");
+        return primitive ? createTypedNodeProxy(session, path, index, primitive, id) : undefined;
+      },
+      children: createTreeChildrenProxy(session, path, index, HiddenTreeRootId, [this.state.root]),
+    };
+  }
+
+  optional(stripDefaults: boolean): TreePrimitive<TRoot, false, false> {
+    return new TreePrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+      encodedDefault: stripDefaults ? undefined : this.state.encodedDefault,
+    });
+  }
+}
+
+const createTreeChildrenProxy = <TAllowed extends AnyTreeNodePrimitive>(
+  session: CommandSession,
+  treePath: Path,
+  index: Map<string, AnyTreeNodePrimitive>,
+  parentId: string,
+  allowed: readonly AnyTreeNodePrimitive[],
+): TreeChildrenProxy<TAllowed> => {
+  const createHandles = (): TypedNodeProxy<TAllowed>[] =>
+    getOrderedTreeChildren(getTreeAtPath(session.current(), treePath), parentId)
+      .filter((node) => allowed.some((candidate) => candidate.type === readNodeType(node)))
+      .map(
+        (node) =>
+          createTypedNodeProxy(
+            session,
+            treePath,
+            index,
+            index.get(readNodeType(node))!,
+            node.id,
+          ) as TypedNodeProxy<TAllowed>,
+      );
+
+  const proxy = {
+    __parentId: parentId,
+    get length() {
+      return createHandles().length;
+    },
+    at: (indexValue: number) => {
+      const ordered = getOrderedTreeChildren(
+        getTreeAtPath(session.current(), treePath),
+        parentId,
+      ).filter((node) => allowed.some((candidate) => candidate.type === readNodeType(node)));
+      const normalized = normalizeIndex(indexValue, ordered.length);
+      const node = normalized === undefined ? undefined : ordered[normalized];
+      return node
+        ? (createTypedNodeProxy(
+            session,
+            treePath,
+            index,
+            index.get(readNodeType(node))!,
+            node.id,
+          ) as TypedNodeProxy<TAllowed>)
+        : undefined;
+    },
+    first: () => proxy.at(0),
+    last: () => {
+      const handles = createHandles();
+      return handles[handles.length - 1];
+    },
+    findById: (id: string) => {
+      const node = getOrderedTreeChildren(
+        getTreeAtPath(session.current(), treePath),
+        parentId,
+      ).find((entry) => entry.id === id);
+      if (!node) {
+        return undefined;
+      }
+      const primitive = index.get(readNodeType(node));
+      return primitive
+        ? (createTypedNodeProxy(
+            session,
+            treePath,
+            index,
+            primitive,
+            node.id,
+          ) as TypedNodeProxy<TAllowed>)
+        : undefined;
+    },
+    insertAt: (indexValue: number, nodeInput: TreeChildInsertInput<TAllowed>) => {
+      const tree = getTreeAtPath(session.current(), treePath);
+      const siblings = getOrderedTreeChildren(tree, parentId).filter((node) =>
+        allowed.some((candidate) => candidate.type === readNodeType(node)),
+      );
+      const neighbors = getNeighborPositionsForInsert(
+        siblings.map((sibling) => sibling.pos),
+        indexValue,
+      );
+      const primitive = resolveAllowedTreePrimitive(allowed, nodeInput["type"]);
+      const id = nodeInput.id ?? session.generator.nextTreeNodeId(treePath);
+      const pos = session.generator.between(neighbors.lower, neighbors.upper);
+      const node = {
+        id,
+        parent: parentId,
+        pos,
+        value: encodeTreeNodeObject(primitive, nodeInput as TreeNodeInput<AnyTreeNodePrimitive>),
+      };
+      session.emit([{ kind: "tree.insert", path: treePath, node }]);
+      return createTypedNodeProxy(
+        session,
+        treePath,
+        index,
+        primitive,
+        id,
+      ) as TypedNodeProxy<TAllowed>;
+    },
+    insertLast: (nodeInput: TreeChildInsertInput<TAllowed>) => {
+      const siblings = getOrderedTreeChildren(
+        getTreeAtPath(session.current(), treePath),
+        parentId,
+      ).filter((node) => allowed.some((candidate) => candidate.type === readNodeType(node)));
+      return proxy.insertAt(siblings.length, nodeInput);
+    },
+    insertAtPos: (pos: string, nodeInput: TreeChildInsertInput<TAllowed>) => {
+      const primitive = resolveAllowedTreePrimitive(allowed, nodeInput["type"]);
+      const id = nodeInput.id ?? session.generator.nextTreeNodeId(treePath);
+      const node = {
+        id,
+        parent: parentId,
+        pos,
+        value: encodeTreeNodeObject(primitive, nodeInput as TreeNodeInput<AnyTreeNodePrimitive>),
+      };
+      session.emit([{ kind: "tree.insert", path: treePath, node }]);
+      return createTypedNodeProxy(
+        session,
+        treePath,
+        index,
+        primitive,
+        id,
+      ) as TypedNodeProxy<TAllowed>;
+    },
+    find: (predicate: any) => {
+      const handles = createHandles();
+      return handles.find((node, idx, collection) => predicate(node, idx, collection));
+    },
+    findIndex: (predicate: any) => {
+      const handles = createHandles();
+      return handles.findIndex((node, idx, collection) => predicate(node, idx, collection));
+    },
+    map: (fn: any) => {
+      const handles = createHandles();
+      return handles.map((node, idx, collection) => fn(node, idx, collection));
+    },
+    filter: (predicate: any) => {
+      const handles = createHandles();
+      return handles.filter((node, idx, collection) => predicate(node, idx, collection));
+    },
+    some: (predicate: any) => {
+      const handles = createHandles();
+      return handles.some((node, idx, collection) => predicate(node, idx, collection));
+    },
+    every: (predicate: any) => {
+      const handles = createHandles();
+      return handles.every((node, idx, collection) => predicate(node, idx, collection));
+    },
+    forEach: (fn: any) => {
+      const handles = createHandles();
+      handles.forEach((node, idx, collection) => fn(node, idx, collection));
+    },
+    [Symbol.iterator]: () => createHandles()[Symbol.iterator](),
+  };
+
+  return proxy as TreeChildrenProxy<TAllowed>;
+};
+
+const createTypedNodeProxy = <TNode extends AnyTreeNodePrimitive>(
+  session: CommandSession,
+  treePath: Path,
+  index: Map<string, AnyTreeNodePrimitive>,
+  primitive: AnyTreeNodePrimitive,
+  id: string,
+): TypedNodeProxy<TNode> => {
+  const getNode = (): TreeNode | undefined =>
+    getTreeNodeById(getTreeAtPath(session.current(), treePath), id);
+
+  const getPrimitive = (): AnyTreeNodePrimitive => {
+    const node = getNode();
+    if (!node) {
+      return primitive;
+    }
+    return index.get(readNodeType(node)) ?? primitive;
+  };
+
+  return {
+    get id() {
+      return id;
+    },
+    get type() {
+      return getPrimitive().type as InferTreeNodeType<TNode>;
+    },
+    get pos() {
+      return getNode()?.pos ?? "";
+    },
+    get parentId() {
+      const parent = getNode()?.parent;
+      return parent === HiddenTreeRootId ? null : (parent ?? null);
+    },
+    get data() {
+      return getPrimitive().data.createProxy(session, treeNodePath(treePath, id)) as InferProxy<
+        InferTreeNodeData<TNode>
+      >;
+    },
+    get children() {
+      return createTreeChildrenProxy(
+        session,
+        treePath,
+        index,
+        id,
+        getPrimitive().children,
+      ) as TreeChildrenProxy<InferTreeNodeChildren<TNode>>;
+    },
+    get: () => {
+      const node = getNode();
+      if (!node) {
+        return undefined;
+      }
+      return buildTreeSnapshot(
+        node,
+        getTreeAtPath(session.current(), treePath)!,
+        index,
+      ) as TreeNodeSnapshot<TNode>;
+    },
+    update: (value) => {
+      getPrimitive()
+        .data.createProxy(session, treeNodePath(treePath, id))
+        .update(value as any);
+    },
+    remove: () => {
+      session.emit([{ kind: "tree.delete", path: treePath, id }]);
+    },
+    moveTo: (target, indexValue) => {
+      const targetParentId = (target as { __parentId?: string }).__parentId;
+      if (!targetParentId) {
+        throw new PrimitiveError("Target children collection is not movable");
+      }
+      const tree = getTreeAtPath(session.current(), treePath);
+      if (isTreeDescendant(tree, targetParentId, id)) {
+        throw new PrimitiveError("Tree move would create a cycle");
+      }
+      const siblings = getOrderedTreeChildren(tree, targetParentId).filter(
+        (node) => node.id !== id,
+      );
+      const neighbors = getNeighborPositionsForInsert(
+        siblings.map((sibling) => sibling.pos),
+        indexValue,
+      );
+      const pos = session.generator.between(neighbors.lower, neighbors.upper);
+      session.emit([{ kind: "tree.move", path: treePath, id, parent: targetParentId, pos }]);
+    },
+    moveToPos: (targetParentId, pos) => {
+      const tree = getTreeAtPath(session.current(), treePath);
+      if (isTreeDescendant(tree, targetParentId, id)) {
+        throw new PrimitiveError("Tree move would create a cycle");
+      }
+      session.emit([{ kind: "tree.move", path: treePath, id, parent: targetParentId, pos }]);
+    },
+    as: <TExpected extends AnyTreeNodePrimitive>(nodePrimitive: TExpected) => {
+      if (getPrimitive().type !== nodePrimitive.type) {
+        throw new PrimitiveError(
+          `Expected node type "${nodePrimitive.type}", got "${getPrimitive().type}"`,
+        );
+      }
+      return createTypedNodeProxy(
+        session,
+        treePath,
+        index,
+        nodePrimitive,
+        id,
+      ) as TypedNodeProxy<TExpected>;
+    },
+  };
+};
+
+const buildTreeVariants = (
+  root: AnyTreeNodePrimitive,
+): Record<string, { schema: ObjectSchema; children: readonly string[] }> => {
+  const nodes = collectTreeNodeIndex(root);
+  const variants: Record<string, { schema: ObjectSchema; children: readonly string[] }> = {};
+  for (const node of nodes.values()) {
+    const schema = node.data.schema;
+    if (schema.kind !== "object") {
+      throw new PrimitiveError("Tree node data must compile to an object schema");
+    }
+    variants[node.type] = {
+      schema: {
+        kind: "object",
+        fields: {
+          ...schema.fields,
+          type: { kind: "literal", value: node.type },
+        },
+      },
+      children: node.children.map((child) => child.type),
+    };
+  }
+  return variants;
+};
+
+const collectTreeNodeIndex = (root: AnyTreeNodePrimitive): Map<string, AnyTreeNodePrimitive> => {
+  const index = new Map<string, AnyTreeNodePrimitive>();
+  const visit = (node: AnyTreeNodePrimitive): void => {
+    const existing = index.get(node.type);
+    if (existing && existing !== node) {
+      throw new PrimitiveError(`Duplicate tree node type "${node.type}"`);
+    }
+    if (existing) {
+      return;
+    }
+    index.set(node.type, node);
+    for (const child of node.children) {
+      visit(child);
+    }
+  };
+  visit(root);
+  return index;
+};
+
+const encodeTreeNodeObject = (
+  primitive: AnyTreeNodePrimitive,
+  input: TreeNodeInput<AnyTreeNodePrimitive>,
+): ObjectValue => {
+  const encoded = primitive.data.encode(input as InferInput<typeof primitive.data>);
+  if (encoded.kind !== "object") {
+    throw new PrimitiveError("Tree node data must encode to an object");
+  }
+  return objectValue({
+    ...encoded.fields,
+    type: stringValue(primitive.type),
+  });
+};
+
+const readNodeType = (node: TreeNode): string => {
+  const typeValue = node.value.fields["type"];
+  if (typeValue?.kind !== "string") {
+    throw new PrimitiveError(`Tree node "${node.id}" is missing its type discriminator`);
+  }
+  return typeValue.value;
+};
+
+const buildTreeSnapshots = (
+  tree: TreeValue,
+  parent: string,
+  index: Map<string, AnyTreeNodePrimitive>,
+): readonly TreeNodeSnapshot<any>[] =>
+  getOrderedTreeChildren(tree, parent).map((node) => buildTreeSnapshot(node, tree, index));
+
+const buildTreeSnapshot = (
+  node: TreeNode,
+  tree: TreeValue,
+  index: Map<string, AnyTreeNodePrimitive>,
+): TreeNodeSnapshot<any> => {
+  const primitive = index.get(readNodeType(node));
+  if (!primitive) {
+    throw new PrimitiveError(`Unknown tree node type "${readNodeType(node)}"`);
+  }
+  return {
+    id: node.id,
+    type: primitive.type,
+    parentId: node.parent === HiddenTreeRootId ? null : node.parent,
+    pos: node.pos,
+    data: primitive.data.decode(node.value),
+    children: buildTreeSnapshots(tree, node.id, index),
+  };
+};
+
+const resolveAllowedTreePrimitive = (
+  allowed: readonly AnyTreeNodePrimitive[],
+  type: string,
+): AnyTreeNodePrimitive => {
+  const primitive = allowed.find((candidate) => candidate.type === type);
+  if (!primitive) {
+    throw new PrimitiveError(`Tree node type "${type}" is not allowed in this collection`);
+  }
+  return primitive;
+};
+
+export const Tree = <TRoot extends AnyTreeNodePrimitive>(options: {
+  root: TRoot;
+}): TreePrimitive<TRoot, false, false> =>
+  new TreePrimitive({
+    required: false,
+    defaultValue: undefined,
+    encodedDefault: undefined,
+    root: options.root,
+  });
+
+const nextUniqueNodeId = (existing: Set<string>): string => {
+  // Node ids appear in printed composition source, so they are short.
+  let id = shortId();
+  while (existing.has(id)) {
+    id = shortId();
+  }
+  return id;
+};
diff --git a/packages/mimic-core/src/primitives/TreeNode.ts b/packages/mimic-core/src/primitives/TreeNode.ts
new file mode 100644
index 000000000..5ecc74065
--- /dev/null
+++ b/packages/mimic-core/src/primitives/TreeNode.ts
@@ -0,0 +1,120 @@
+import type { AnyPrimitive, InferInput } from "./shared.ts";
+import type { StructPrimitive } from "./Struct.ts";
+
+const TreeNodeSelfSymbol = Symbol.for("TreeNode.Self");
+
+declare const SelfBrand: unique symbol;
+export interface TreeNodeSelfType {
+  readonly _tag: "TreeNodeSelf";
+  readonly _brand: typeof SelfBrand;
+}
+
+export const TreeNodeSelf: TreeNodeSelfType = {
+  _tag: "TreeNodeSelf",
+  _brand: TreeNodeSelfSymbol as unknown as typeof SelfBrand,
+} as TreeNodeSelfType;
+
+const isSelf = (value: unknown): value is TreeNodeSelfType =>
+  typeof value === "object" &&
+  value !== null &&
+  "_brand" in value &&
+  (value as TreeNodeSelfType)._brand === (TreeNodeSelfSymbol as unknown as typeof SelfBrand);
+
+export type TreeNodeChildrenInput =
+  | readonly (AnyTreeNodePrimitive | TreeNodeSelfType)[]
+  | (() => readonly (AnyTreeNodePrimitive | TreeNodeSelfType)[]);
+
+export type AnyTreeNodePrimitive = TreeNodePrimitive<
+  string,
+  StructPrimitive<Record<string, AnyPrimitive>, any, any>,
+  AnyTreeNodePrimitive
+>;
+
+type ResolveSelf<T, TSelf extends AnyTreeNodePrimitive> = T extends TreeNodeSelfType ? TSelf : T;
+
+type ResolveChildrenUnion<
+  TChildren,
+  TSelf extends AnyTreeNodePrimitive,
+> = TChildren extends readonly (infer U)[] ? ResolveSelf<U, TSelf> : never;
+
+export interface TreeNodeConfig<
+  TData extends StructPrimitive<Record<string, AnyPrimitive>, any, any>,
+  TChildren extends readonly (AnyTreeNodePrimitive | TreeNodeSelfType)[],
+> {
+  readonly data: TData;
+  readonly children: TChildren | (() => TChildren);
+}
+
+export class TreeNodePrimitive<
+  TType extends string,
+  TData extends StructPrimitive<Record<string, AnyPrimitive>, any, any>,
+  TChildren extends AnyTreeNodePrimitive = AnyTreeNodePrimitive,
+> {
+  readonly _tag = "TreeNodePrimitive";
+  readonly _Type!: TType;
+  readonly _Data!: TData;
+  readonly _Children!: TChildren;
+  readonly TSetInput!: TreeNodeInput<TreeNodePrimitive<TType, TData, TChildren>>;
+
+  readonly type: TType;
+  readonly data: TData;
+  private readonly childrenInput: TreeNodeChildrenInput;
+  private resolvedChildren?: readonly AnyTreeNodePrimitive[];
+
+  constructor(type: TType, data: TData, childrenInput: TreeNodeChildrenInput) {
+    this.type = type;
+    this.data = data;
+    this.childrenInput = childrenInput;
+  }
+
+  get children(): readonly AnyTreeNodePrimitive[] {
+    if (this.resolvedChildren === undefined) {
+      const resolved =
+        typeof this.childrenInput === "function" ? this.childrenInput() : this.childrenInput;
+      this.resolvedChildren = resolved.map((child) => (isSelf(child) ? this : child));
+    }
+    return this.resolvedChildren;
+  }
+
+  isChildAllowed(childType: string): boolean {
+    return this.children.some((child) => child.type === childType);
+  }
+}
+
+export type InferTreeNodeType<T extends AnyTreeNodePrimitive> =
+  T extends TreeNodePrimitive<infer TType, any, any> ? TType : never;
+
+export type InferTreeNodeData<T extends AnyTreeNodePrimitive> =
+  T extends TreeNodePrimitive<any, infer TData, any> ? TData : never;
+
+export type InferTreeNodeChildren<T extends AnyTreeNodePrimitive> =
+  T extends TreeNodePrimitive<any, any, infer TChildren> ? TChildren : never;
+
+export type TreeNodeInput<TNode extends AnyTreeNodePrimitive> = {
+  readonly type: InferTreeNodeType<TNode>;
+  readonly id?: string;
+  readonly children?: readonly TreeNodeInput<InferTreeNodeChildren<TNode>>[];
+} & (InferInput<InferTreeNodeData<TNode>> extends undefined
+  ? Record<string, never>
+  : NonNullable<InferInput<InferTreeNodeData<TNode>>>);
+
+export type TreeChildInsertInput<TAllowed extends AnyTreeNodePrimitive> =
+  TAllowed extends AnyTreeNodePrimitive ? TreeNodeInput<TAllowed> : never;
+
+export const TreeNode = <
+  TType extends string,
+  TData extends StructPrimitive<Record<string, AnyPrimitive>, any, any>,
+  const TChildren extends readonly (AnyTreeNodePrimitive | TreeNodeSelfType)[],
+>(
+  type: TType,
+  config: TreeNodeConfig<TData, TChildren>,
+): TreeNodePrimitive<
+  TType,
+  TData,
+  ResolveChildrenUnion<TChildren, TreeNodePrimitive<TType, TData, any>>
+> =>
+  new TreeNodePrimitive(type, config.data, config.children) as TreeNodePrimitive<
+    TType,
+    TData,
+    ResolveChildrenUnion<TChildren, TreeNodePrimitive<TType, TData, any>>
+  >;
diff --git a/packages/mimic-core/src/primitives/Union.ts b/packages/mimic-core/src/primitives/Union.ts
new file mode 100644
index 000000000..ab7b39a6e
--- /dev/null
+++ b/packages/mimic-core/src/primitives/Union.ts
@@ -0,0 +1,268 @@
+import {
+  objectValue,
+  stringValue,
+  type ObjectValue,
+  type Path,
+  type Value,
+} from "../core/types.ts";
+import type { ObjectSchema, UnionSchema } from "../schema/types.ts";
+import { getObjectAtPath, getValueAtPath } from "./path.ts";
+import {
+  PrimitiveError,
+  type AnyPrimitive,
+  type CommandSession,
+  type InferInput,
+  type InferProxy,
+  type InferSnapshot,
+  type MaybeUndefined,
+  type PrimitiveWithOptionalEncoding,
+} from "./shared.ts";
+import type { StructPrimitive } from "./Struct.ts";
+
+export type UnionVariants = Record<string, StructPrimitive<Record<string, AnyPrimitive>, any, any>>;
+
+export type InferUnionInput<TVariants extends UnionVariants> = {
+  [K in keyof TVariants]: InferInput<TVariants[K]> & Record<string, unknown>;
+}[keyof TVariants];
+
+export type InferUnionSnapshot<TVariants extends UnionVariants> = {
+  [K in keyof TVariants]: InferSnapshot<TVariants[K]> & Record<string, unknown>;
+}[keyof TVariants];
+
+export interface UnionProxy<TVariants extends UnionVariants, _TDiscriminator extends string> {
+  get(): InferUnionSnapshot<TVariants> | undefined;
+  set(value: InferUnionInput<TVariants>): void;
+  as<K extends keyof TVariants>(variant: K): InferProxy<TVariants[K]>;
+  match<R>(handlers: { [K in keyof TVariants]: (proxy: InferProxy<TVariants[K]>) => R }):
+    | R
+    | undefined;
+}
+
+interface UnionPrimitiveSchema<TVariants extends UnionVariants, TDiscriminator extends string> {
+  readonly required: boolean;
+  readonly defaultValue: InferUnionInput<TVariants> | undefined;
+  readonly discriminator: TDiscriminator;
+  readonly variants: TVariants;
+}
+
+export class UnionPrimitive<
+  TVariants extends UnionVariants,
+  TDiscriminator extends string = "type",
+  TRequired extends boolean = false,
+  THasDefault extends boolean = false,
+> implements PrimitiveWithOptionalEncoding<
+  InferUnionInput<TVariants> | undefined,
+  MaybeUndefined<InferUnionSnapshot<TVariants>, TRequired, THasDefault>,
+  UnionProxy<TVariants, TDiscriminator>
+> {
+  readonly _tag = "UnionPrimitive";
+  readonly _Input!: InferUnionInput<TVariants> | undefined;
+  readonly _Snapshot!: MaybeUndefined<InferUnionSnapshot<TVariants>, TRequired, THasDefault>;
+  readonly _Proxy!: UnionProxy<TVariants, TDiscriminator>;
+
+  private readonly state: UnionPrimitiveSchema<TVariants, TDiscriminator>;
+
+  constructor(state: UnionPrimitiveSchema<TVariants, TDiscriminator>) {
+    this.state = state;
+  }
+
+  get discriminator(): TDiscriminator {
+    return this.state.discriminator;
+  }
+
+  get variants(): TVariants {
+    return this.state.variants;
+  }
+
+  get schema(): UnionSchema {
+    const variants: Record<string, ObjectSchema> = {};
+    for (const [key, variant] of Object.entries(this.state.variants)) {
+      const schema = variant.schema;
+      if (schema.kind !== "object") {
+        throw new PrimitiveError("Union variants must compile to object schemas");
+      }
+      const fields = {
+        ...schema.fields,
+        [this.state.discriminator]: {
+          kind: "literal" as const,
+          value: key,
+        },
+      };
+      variants[key] = {
+        kind: "object",
+        fields,
+      } as ObjectSchema;
+    }
+    return {
+      kind: "union" as const,
+      discriminator: this.state.discriminator,
+      variants,
+      ...(this.state.required ? { required: true } : {}),
+      ...(this.state.defaultValue !== undefined
+        ? { default: this.encode(this.state.defaultValue) as ObjectValue }
+        : {}),
+    };
+  }
+
+  required(): UnionPrimitive<TVariants, TDiscriminator, true, THasDefault> {
+    return new UnionPrimitive({
+      ...this.state,
+      required: true,
+    });
+  }
+
+  default(
+    defaultValue: InferUnionInput<TVariants>,
+  ): UnionPrimitive<TVariants, TDiscriminator, TRequired, true> {
+    return new UnionPrimitive({
+      ...this.state,
+      defaultValue,
+    });
+  }
+
+  encode(input: InferUnionInput<TVariants> | undefined): Value {
+    const encoded = this.encodeOptional(input);
+    if (encoded === undefined) {
+      throw new PrimitiveError("Union value is undefined");
+    }
+    return encoded;
+  }
+
+  encodeOptional(input: unknown): Value | undefined {
+    const effectiveInput = input === undefined ? this.state.defaultValue : input;
+    if (effectiveInput === undefined) {
+      if (this.state.required) {
+        throw new PrimitiveError("Union value is required");
+      }
+      return undefined;
+    }
+    if (
+      typeof effectiveInput !== "object" ||
+      effectiveInput === null ||
+      Array.isArray(effectiveInput)
+    ) {
+      throw new PrimitiveError("Expected union input object");
+    }
+
+    const variantKey = this.resolveVariantKey(effectiveInput as Record<string, unknown>);
+    const variant = this.state.variants[variantKey];
+    if (!variant) {
+      throw new PrimitiveError(`Unknown union variant "${String(variantKey)}"`);
+    }
+
+    const encoded = variant.encode(effectiveInput as InferInput<typeof variant>);
+    if (encoded.kind !== "object") {
+      throw new PrimitiveError("Union variant must encode to an object value");
+    }
+    return objectValue({
+      ...encoded.fields,
+      [this.state.discriminator]: stringValue(String(variantKey)),
+    });
+  }
+
+  decode(value: Value | undefined): InferUnionSnapshot<TVariants> | undefined {
+    if (value?.kind !== "object") {
+      return undefined;
+    }
+    const variantKey = this.resolveVariantKeyFromObject(value);
+    if (!variantKey) {
+      return undefined;
+    }
+    const variant = this.state.variants[variantKey];
+    const decoded = variant?.decode(value);
+    if (decoded === undefined) {
+      return undefined;
+    }
+    return {
+      ...(decoded as object),
+      [this.state.discriminator]: variantKey,
+    } as InferUnionSnapshot<TVariants>;
+  }
+
+  createProxy(session: CommandSession, path: Path): UnionProxy<TVariants, TDiscriminator> {
+    return {
+      get: () => this.decode(getValueAtPath(session.current(), path)),
+      set: (value) => {
+        session.emit([{ kind: "value.set", path, value: this.encode(value) }]);
+      },
+      as: (variant) => {
+        const primitive = this.state.variants[String(variant)];
+        if (!primitive) {
+          throw new PrimitiveError(`Unknown union variant "${String(variant)}"`);
+        }
+        return primitive.createProxy(session, path) as InferProxy<TVariants[typeof variant]>;
+      },
+      match: (handlers) => {
+        const current = getObjectAtPath(session.current(), path);
+        const variantKey = current ? this.resolveVariantKeyFromObject(current) : undefined;
+        if (!variantKey) {
+          return undefined;
+        }
+        const handler = handlers[variantKey as keyof TVariants];
+        if (!handler) {
+          return undefined;
+        }
+        return handler(
+          this.state.variants[variantKey]!.createProxy(session, path) as InferProxy<
+            TVariants[keyof TVariants]
+          >,
+        );
+      },
+    };
+  }
+
+  optional(stripDefaults: boolean): UnionPrimitive<TVariants, TDiscriminator, false, false> {
+    return new UnionPrimitive({
+      ...this.state,
+      required: false,
+      defaultValue: stripDefaults ? undefined : this.state.defaultValue,
+    });
+  }
+
+  private resolveVariantKey(input: Record<string, unknown>): keyof TVariants {
+    const discriminatorValue = input[this.state.discriminator];
+    if (
+      typeof discriminatorValue === "string" &&
+      Object.prototype.hasOwnProperty.call(this.state.variants, discriminatorValue)
+    ) {
+      return discriminatorValue as keyof TVariants;
+    }
+
+    const candidates = Object.entries(this.state.variants)
+      .filter(([, variant]) => {
+        const variantFields = Object.keys(variant.fields);
+        return Object.keys(input).every(
+          (key) => key === this.state.discriminator || variantFields.includes(key),
+        );
+      })
+      .map(([key]) => key as keyof TVariants);
+
+    if (candidates.length === 1) {
+      return candidates[0]!;
+    }
+
+    throw new PrimitiveError("Unable to resolve union variant from input");
+  }
+
+  private resolveVariantKeyFromObject(value: ObjectValue): keyof TVariants | undefined {
+    const discriminator = value.fields[this.state.discriminator];
+    if (discriminator?.kind !== "string") {
+      return undefined;
+    }
+    if (!Object.prototype.hasOwnProperty.call(this.state.variants, discriminator.value)) {
+      return undefined;
+    }
+    return discriminator.value as keyof TVariants;
+  }
+}
+
+export const Union = <TVariants extends UnionVariants, TDiscriminator extends string = "type">(
+  variants: TVariants,
+  options?: { discriminator?: TDiscriminator },
+): UnionPrimitive<TVariants, TDiscriminator, false, false> =>
+  new UnionPrimitive({
+    required: false,
+    defaultValue: undefined,
+    discriminator: options?.discriminator ?? ("type" as TDiscriminator),
+    variants,
+  });
diff --git a/packages/mimic-core/src/primitives/index.ts b/packages/mimic-core/src/primitives/index.ts
new file mode 100644
index 000000000..430204074
--- /dev/null
+++ b/packages/mimic-core/src/primitives/index.ts
@@ -0,0 +1,13 @@
+export * from "./shared.ts";
+export * from "./session.ts";
+export * from "./String.ts";
+export * from "./Number.ts";
+export * from "./Boolean.ts";
+export * from "./Literal.ts";
+export * from "./Struct.ts";
+export * from "./Array.ts";
+export * from "./Either.ts";
+export * from "./Union.ts";
+export * from "./TreeNode.ts";
+export * from "./Tree.ts";
+export * from "./Lazy.ts";
diff --git a/packages/mimic-core/src/primitives/path.ts b/packages/mimic-core/src/primitives/path.ts
new file mode 100644
index 000000000..446fe1e92
--- /dev/null
+++ b/packages/mimic-core/src/primitives/path.ts
@@ -0,0 +1,156 @@
+import {
+  HiddenTreeRootId,
+  type ArrayItem,
+  type ArrayValue,
+  type ObjectValue,
+  type Path,
+  type TreeNode,
+  type TreeValue,
+  type Value,
+} from "../core/types.ts";
+import { PrimitiveError } from "./shared.ts";
+
+export const getValueAtPath = (root: Value, path: Path): Value | undefined => {
+  let current: Value | undefined = root;
+  for (const segment of path) {
+    if (current === undefined) {
+      return undefined;
+    }
+    switch (segment.kind) {
+      case "field":
+        if (current.kind !== "object") {
+          return undefined;
+        }
+        current = current.fields[segment.key];
+        break;
+      case "item":
+        if (current.kind !== "array") {
+          return undefined;
+        }
+        current = current.items.find((item) => item.id === segment.id)?.value;
+        break;
+      case "node":
+        if (current.kind !== "tree") {
+          return undefined;
+        }
+        current = current.nodes.find((node) => node.id === segment.id)?.value;
+        break;
+    }
+  }
+  return current;
+};
+
+export const getObjectAtPath = (root: Value, path: Path): ObjectValue | undefined => {
+  const value = getValueAtPath(root, path);
+  return value?.kind === "object" ? value : undefined;
+};
+
+export const getArrayAtPath = (root: Value, path: Path): ArrayValue | undefined => {
+  const value = getValueAtPath(root, path);
+  return value?.kind === "array" ? value : undefined;
+};
+
+export const getTreeAtPath = (root: Value, path: Path): TreeValue | undefined => {
+  const value = getValueAtPath(root, path);
+  return value?.kind === "tree" ? value : undefined;
+};
+
+export const getOrderedArrayItems = (value: ArrayValue | undefined): readonly ArrayItem[] =>
+  value ? [...value.items].sort((left, right) => left.pos.localeCompare(right.pos)) : [];
+
+export const getArrayItemById = (
+  value: ArrayValue | undefined,
+  id: string,
+): ArrayItem | undefined => value?.items.find((item) => item.id === id);
+
+export const getArrayItemByIndex = (
+  value: ArrayValue | undefined,
+  index: number,
+): ArrayItem | undefined => {
+  const ordered = getOrderedArrayItems(value);
+  const normalized = normalizeIndex(index, ordered.length);
+  return normalized === undefined ? undefined : ordered[normalized];
+};
+
+export const getTreeNodeById = (tree: TreeValue | undefined, id: string): TreeNode | undefined =>
+  tree?.nodes.find((node) => node.id === id);
+
+export const getOrderedTreeChildren = (
+  tree: TreeValue | undefined,
+  parent: string,
+): readonly TreeNode[] =>
+  tree
+    ? tree.nodes
+        .filter((node) => node.parent === parent)
+        .sort((left, right) => left.pos.localeCompare(right.pos))
+    : [];
+
+export const getTreeChildByIndex = (
+  tree: TreeValue | undefined,
+  parent: string,
+  index: number,
+): TreeNode | undefined => {
+  const ordered = getOrderedTreeChildren(tree, parent);
+  const normalized = normalizeIndex(index, ordered.length);
+  return normalized === undefined ? undefined : ordered[normalized];
+};
+
+export const normalizeIndex = (index: number, length: number): number | undefined => {
+  const normalized = index < 0 ? length + index : index;
+  if (normalized < 0 || normalized >= length) {
+    return undefined;
+  }
+  return normalized;
+};
+
+export const getNeighborPositionsForInsert = (
+  positions: readonly string[],
+  index: number,
+): { lower?: string; upper?: string } => {
+  if (index < 0 || index > positions.length) {
+    throw new PrimitiveError(`Index ${index} is out of range`);
+  }
+  return {
+    lower: index === 0 ? undefined : positions[index - 1],
+    upper: index === positions.length ? undefined : positions[index],
+  };
+};
+
+export const ensureTreeParent = (tree: TreeValue | undefined, parent: string): void => {
+  if (parent === HiddenTreeRootId) {
+    return;
+  }
+  if (!tree || !tree.nodes.some((node) => node.id === parent)) {
+    throw new PrimitiveError(`Tree parent "${parent}" does not exist`);
+  }
+};
+
+export const isTreeDescendant = (
+  tree: TreeValue | undefined,
+  candidateParent: string,
+  nodeId: string,
+): boolean => {
+  if (!tree || candidateParent === HiddenTreeRootId) {
+    return false;
+  }
+  const byId = new Map(tree.nodes.map((node) => [node.id, node]));
+  let current = candidateParent;
+  while (true) {
+    const node = byId.get(current);
+    if (!node) {
+      return false;
+    }
+    if (node.parent === nodeId) {
+      return true;
+    }
+    if (node.parent === HiddenTreeRootId) {
+      return false;
+    }
+    current = node.parent;
+  }
+};
+
+export const treeNodePath = (treePath: Path, nodeId: string): Path => [
+  ...treePath,
+  { kind: "node", id: nodeId },
+];
diff --git a/packages/mimic-core/src/primitives/session.ts b/packages/mimic-core/src/primitives/session.ts
new file mode 100644
index 000000000..103cef7c5
--- /dev/null
+++ b/packages/mimic-core/src/primitives/session.ts
@@ -0,0 +1,48 @@
+import { applyBatch } from "../core/apply.ts";
+import { type Command, type Path, type Value } from "../core/types.ts";
+import { createGenerator } from "../fractional/index.ts";
+import { validate as validateSchema } from "../schema/validate.ts";
+import { validateValue } from "../core/validate.ts";
+import {
+  randomUuid,
+  shortId,
+  type AnyPrimitive,
+  type CommandSession,
+  type InferProxy,
+} from "./shared.ts";
+
+export const commands = <TRoot extends AnyPrimitive>(
+  primitive: TRoot,
+  snapshot: Value,
+  build: (root: InferProxy<TRoot>) => void,
+): readonly Command[] => {
+  validateValue(snapshot);
+  const baseSnapshot = validateSchema(primitive.schema, snapshot);
+  if (baseSnapshot === undefined) {
+    throw new Error("Primitive root snapshot cannot be undefined");
+  }
+
+  const staged: Command[] = [];
+  let currentSnapshot = baseSnapshot;
+  const generator = createGenerator();
+
+  const session: CommandSession = {
+    current: () => currentSnapshot,
+    emit: (commandsToEmit) => {
+      if (commandsToEmit.length === 0) {
+        return;
+      }
+      staged.push(...commandsToEmit);
+      currentSnapshot = applyBatch(baseSnapshot, staged);
+    },
+    generator: {
+      nextArrayItemId: () => randomUuid(),
+      // Node ids appear in printed composition source, so they are short.
+      nextTreeNodeId: () => shortId(),
+      between: (lower, upper) => generator.between(lower, upper),
+    },
+  };
+
+  build(primitive.createProxy(session, []) as InferProxy<TRoot>);
+  return staged;
+};
diff --git a/packages/mimic-core/src/primitives/shared.ts b/packages/mimic-core/src/primitives/shared.ts
new file mode 100644
index 000000000..2da29df60
--- /dev/null
+++ b/packages/mimic-core/src/primitives/shared.ts
@@ -0,0 +1,126 @@
+import type { Command, Path, Value } from "../core/types.ts";
+import type { Schema } from "../schema/types.ts";
+
+export class PrimitiveError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "PrimitiveError";
+  }
+}
+
+export interface CommandSession {
+  readonly current: () => Value;
+  readonly emit: (commands: readonly Command[]) => void;
+  readonly generator: {
+    nextArrayItemId(path: Path): string;
+    nextTreeNodeId(path: Path): string;
+    between(lower?: string, upper?: string): string;
+  };
+}
+
+export interface Primitive<TInput, TSnapshot, TProxy> {
+  readonly _tag: string;
+  readonly _Input: TInput;
+  readonly _Snapshot: TSnapshot;
+  readonly _Proxy: TProxy;
+
+  readonly schema: Schema;
+
+  encode(input: TInput): Value;
+  decode(value: Value | undefined): TSnapshot | undefined;
+  createProxy(session: CommandSession, path: Path): TProxy;
+}
+
+export interface PrimitiveWithOptionalEncoding<TInput, TSnapshot, TProxy> extends Primitive<
+  TInput,
+  TSnapshot,
+  TProxy
+> {
+  encodeOptional(input: unknown): Value | undefined;
+}
+
+export type AnyPrimitive = PrimitiveWithOptionalEncoding<any, any, any>;
+
+export type InferInput<T extends AnyPrimitive> = T["_Input"];
+export type InferSnapshot<T extends AnyPrimitive> = T["_Snapshot"];
+export type InferProxy<T extends AnyPrimitive> = T["_Proxy"];
+
+export type Optional<T> = T | undefined;
+
+export type MaybeUndefined<
+  T,
+  TRequired extends boolean,
+  THasDefault extends boolean,
+> = TRequired extends false ? (THasDefault extends false ? Optional<T> : T) : T;
+
+export type NeedsValue<
+  T,
+  TRequired extends boolean,
+  THasDefault extends boolean,
+> = TRequired extends true ? (THasDefault extends false ? T : Optional<T>) : Optional<T>;
+
+export interface BasePrimitiveState<TInput> {
+  readonly required: boolean;
+  readonly defaultValue: TInput | undefined;
+}
+
+export const expectDefined = <T>(value: T | undefined, message: string): T => {
+  if (value === undefined) {
+    throw new PrimitiveError(message);
+  }
+  return value;
+};
+
+export const hasOwn = <T extends object>(value: T, key: PropertyKey): key is keyof T =>
+  Object.prototype.hasOwnProperty.call(value, key);
+
+export const randomUuid = (): string => {
+  const uuid = globalThis.crypto?.randomUUID?.();
+  if (typeof uuid === "string") {
+    return uuid;
+  }
+  throw new PrimitiveError("crypto.randomUUID is not available in this runtime");
+};
+
+/**
+ * Alphabet for {@link shortId} — URL-safe, unambiguous alphanumerics. Length 62
+ * (10 digits + 26 lower + 26 upper); a random draw over it carries ~5.95 bits of
+ * entropy per character.
+ */
+const SHORT_ID_ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+
+/** Default {@link shortId} length: 10 chars ≈ 59 bits of entropy. */
+const SHORT_ID_LENGTH = 10;
+
+/**
+ * Mint a short (default 10-char) alphanumeric opaque id from
+ * `crypto.getRandomValues`. Node ids appear in printed paywall composition
+ * source, so they use this instead of {@link randomUuid} to cut token noise —
+ * ids are opaque strings everywhere in the CRDT engine, so short and UUID ids
+ * coexist. Array-item ids (never surfaced in source) keep using `randomUuid`.
+ *
+ * Uses rejection sampling so the alphabet maps uniformly onto the byte range (no
+ * modulo bias), matching nanoid's algorithm without the dependency.
+ */
+export const shortId = (length: number = SHORT_ID_LENGTH): string => {
+  const getRandomValues = globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);
+  if (!getRandomValues) {
+    throw new PrimitiveError("crypto.getRandomValues is not available in this runtime");
+  }
+  const alphabetSize = SHORT_ID_ALPHABET.length;
+  // Largest multiple of alphabetSize ≤ 256; bytes at or above it are rejected so
+  // the surviving range divides evenly and every character is equiprobable.
+  const acceptLimit = Math.floor(256 / alphabetSize) * alphabetSize;
+  let id = "";
+  const buffer = new Uint8Array(length);
+  while (id.length < length) {
+    getRandomValues(buffer);
+    for (let i = 0; i < buffer.length && id.length < length; i += 1) {
+      const byte = buffer[i]!;
+      if (byte < acceptLimit) {
+        id += SHORT_ID_ALPHABET[byte % alphabetSize];
+      }
+    }
+  }
+  return id;
+};
diff --git a/packages/mimic-core/src/primitives/value.ts b/packages/mimic-core/src/primitives/value.ts
new file mode 100644
index 000000000..40aaf9952
--- /dev/null
+++ b/packages/mimic-core/src/primitives/value.ts
@@ -0,0 +1,86 @@
+import {
+  HiddenTreeRootId,
+  arrayValue,
+  booleanValue,
+  numberValue,
+  objectValue,
+  stringValue,
+  treeValue,
+  type ArrayValue,
+  type ObjectValue,
+  type TreeNode,
+  type TreeValue,
+  type Value,
+} from "../core/types.ts";
+import { PrimitiveError } from "./shared.ts";
+
+export const decodeScalar = (value: Value | undefined): unknown => {
+  switch (value?.kind) {
+    case "string":
+    case "number":
+    case "boolean":
+      return value.value;
+    default:
+      return undefined;
+  }
+};
+
+export const encodeScalar = (value: string | number | boolean): Value => {
+  switch (typeof value) {
+    case "string":
+      return stringValue(value);
+    case "number":
+      return numberValue(value);
+    case "boolean":
+      return booleanValue(value);
+    default:
+      throw new PrimitiveError(`Unsupported scalar value type: ${typeof value}`);
+  }
+};
+
+export const decodeObjectToRecord = (
+  value: ObjectValue | undefined,
+): Record<string, Value> | undefined => (value ? { ...value.fields } : undefined);
+
+export const buildObjectValue = (fields: Record<string, Value>): ObjectValue => objectValue(fields);
+
+export const buildArrayValue = (items: ArrayValue["items"]): ArrayValue => arrayValue(items);
+
+export const buildTreeValue = (nodes: TreeValue["nodes"]): TreeValue => treeValue(nodes);
+
+export interface NestedTreeInputNode {
+  readonly type: string;
+  readonly id?: string;
+  readonly children?: readonly NestedTreeInputNode[];
+  readonly [key: string]: unknown;
+}
+
+export const flattenNestedTree = (
+  input: NestedTreeInputNode,
+  options: {
+    readonly rootParent?: string;
+    readonly nextNodeId: () => string;
+    readonly nextPosBetween: (lower?: string, upper?: string) => string;
+    readonly encodeNodeValue: (input: NestedTreeInputNode) => ObjectValue;
+  },
+): readonly TreeNode[] => {
+  const nodes: TreeNode[] = [];
+
+  const visit = (node: NestedTreeInputNode, parent: string, pos: string): void => {
+    const id = node.id ?? options.nextNodeId();
+    const value = options.encodeNodeValue(node);
+    nodes.push({ id, parent, pos, value });
+
+    const children = node.children ?? [];
+    let lower: string | undefined;
+    for (const child of children) {
+      const childPos = options.nextPosBetween(lower, undefined);
+      visit(child, id, childPos);
+      lower = childPos;
+    }
+  };
+
+  const rootPos = options.nextPosBetween(undefined, undefined);
+  visit(input, options.rootParent ?? HiddenTreeRootId, rootPos);
+  return nodes;
+};
diff --git a/packages/mimic-core/src/schema/defaults.ts b/packages/mimic-core/src/schema/defaults.ts
new file mode 100644
index 000000000..c9cfd64ec
--- /dev/null
+++ b/packages/mimic-core/src/schema/defaults.ts
@@ -0,0 +1,32 @@
+import { type Path, cloneValue, type Value } from "../core/types.ts";
+import { getSchemaModel } from "./registry.ts";
+import type { Schema } from "./types.ts";
+
+export const materializeDefault = (schema: Schema): Value | undefined =>
+  materializeDefaultInternal(schema, [], []);
+
+export const materializeDefaultAt = (
+  schema: Schema,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): Value | undefined => materializeDefaultInternal(schema, valuePath, schemaPath);
+
+const materializeDefaultInternal = (
+  schema: Schema,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): Value | undefined => {
+  if ("default" in schema && schema.default !== undefined) {
+    return cloneValue(schema.default);
+  }
+  return getSchemaModel(schema.kind).materializeDefault(
+    schema,
+    defaultContext,
+    valuePath,
+    schemaPath,
+  );
+};
+
+const defaultContext = {
+  materializeDefault: materializeDefaultInternal,
+} as const;
diff --git a/packages/mimic-core/src/schema/errors.ts b/packages/mimic-core/src/schema/errors.ts
new file mode 100644
index 000000000..41b256ed0
--- /dev/null
+++ b/packages/mimic-core/src/schema/errors.ts
@@ -0,0 +1,48 @@
+import type { Path } from "../core/types.ts";
+
+export const SchemaErrorCodes = {
+  InvalidSchema: "invalid_schema",
+  MissingRequired: "missing_required",
+  TypeMismatch: "type_mismatch",
+  LiteralMismatch: "literal_mismatch",
+  ValidatorFailed: "validator_failed",
+  UnionNoMatch: "union_no_match",
+  EitherNoMatch: "either_no_match",
+  TreeInvalidRootType: "tree_invalid_root_type",
+  TreeInvalidChildType: "tree_invalid_child_type",
+  TreeUnknownVariant: "tree_unknown_variant",
+} as const;
+
+export type SchemaErrorCode = (typeof SchemaErrorCodes)[keyof typeof SchemaErrorCodes];
+
+export class SchemaError extends Error {
+  readonly code: SchemaErrorCode;
+  readonly valuePath: Path;
+  readonly schemaPath: readonly (string | number)[];
+
+  constructor(
+    code: SchemaErrorCode,
+    message = "",
+    options?: {
+      valuePath?: Path;
+      schemaPath?: readonly (string | number)[];
+    },
+  ) {
+    super(message ? `${code}: ${message}` : code);
+    this.name = "SchemaError";
+    this.code = code;
+    this.valuePath = options?.valuePath ?? [];
+    this.schemaPath = options?.schemaPath ?? [];
+  }
+}
+
+export const makeSchemaError = (
+  code: SchemaErrorCode,
+  message: string,
+  options?: {
+    valuePath?: Path;
+    schemaPath?: readonly (string | number)[];
+  },
+): SchemaError => new SchemaError(code, message, options);
+
+export const isSchemaError = (value: unknown): value is SchemaError => value instanceof SchemaError;
diff --git a/packages/mimic-core/src/schema/index.ts b/packages/mimic-core/src/schema/index.ts
new file mode 100644
index 000000000..a0a0af1ba
--- /dev/null
+++ b/packages/mimic-core/src/schema/index.ts
@@ -0,0 +1,8 @@
+export * from "./defaults.ts";
+export * from "./errors.ts";
+export * from "./model.ts";
+export * from "./parse.ts";
+export * from "./registry.ts";
+export * from "./serialize.ts";
+export * from "./types.ts";
+export * from "./validate.ts";
diff --git a/packages/mimic-core/src/schema/model.ts b/packages/mimic-core/src/schema/model.ts
new file mode 100644
index 000000000..3e2bccf24
--- /dev/null
+++ b/packages/mimic-core/src/schema/model.ts
@@ -0,0 +1,60 @@
+import type { Path, Value } from "../core/types.ts";
+import type { Schema, SchemaKind, SchemaObject } from "./types.ts";
+
+export interface ParseContext {
+  readonly parseSchema: (input: unknown, schemaPath: readonly (string | number)[]) => Schema;
+  readonly normalizeDefault: (
+    schema: Schema,
+    rawDefault: unknown,
+    schemaPath: readonly (string | number)[],
+  ) => Schema;
+}
+
+export interface DefaultContext {
+  readonly materializeDefault: (
+    schema: Schema,
+    valuePath: Path,
+    schemaPath: readonly (string | number)[],
+  ) => Value | undefined;
+}
+
+export interface ValidationContext extends DefaultContext {
+  readonly validate: (
+    schema: Schema,
+    value: Value | undefined,
+    valuePath: Path,
+    schemaPath: readonly (string | number)[],
+  ) => Value | undefined;
+}
+
+export interface ParseMetadata<K extends SchemaKind = SchemaKind> {
+  readonly kind: K;
+  readonly required?: boolean;
+}
+
+export interface SchemaModel<TSchema extends Schema = Schema> {
+  readonly kind: TSchema["kind"];
+  readonly parse: (
+    input: Record<string, unknown>,
+    metadata: ParseMetadata<TSchema["kind"]>,
+    context: ParseContext,
+    schemaPath: readonly (string | number)[],
+  ) => TSchema;
+  readonly serialize: (
+    schema: TSchema,
+    serializeSchema: (schema: Schema) => SchemaObject,
+  ) => SchemaObject;
+  readonly validate: (
+    schema: TSchema,
+    value: Value,
+    context: ValidationContext,
+    valuePath: Path,
+    schemaPath: readonly (string | number)[],
+  ) => Value;
+  readonly materializeDefault: (
+    schema: TSchema,
+    context: DefaultContext,
+    valuePath: Path,
+    schemaPath: readonly (string | number)[],
+  ) => Value | undefined;
+}
diff --git a/packages/mimic-core/src/schema/models/array.ts b/packages/mimic-core/src/schema/models/array.ts
new file mode 100644
index 000000000..cb4390368
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/array.ts
@@ -0,0 +1,84 @@
+import { makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import {
+  cloneSchemaDefault,
+  expectArrayValue,
+  parseArrayValidators,
+  serializeRequired,
+  validatorFailed,
+} from "../shared.ts";
+import type { ArraySchema } from "../types.ts";
+
+export const arraySchemaModel: SchemaModel<ArraySchema> = {
+  kind: "array",
+  parse: (input, metadata, context, schemaPath) =>
+    context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        element: context.parseSchema(input["element"], [...schemaPath, "element"]),
+        validators: parseArrayValidators(input["validators"], [...schemaPath, "validators"]),
+      },
+      input["default"],
+      schemaPath,
+    ) as ArraySchema,
+  serialize: (schema, serializeSchema) => ({
+    kind: "array",
+    element: serializeSchema(schema.element),
+    ...serializeRequired(schema.required),
+    ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+    ...(schema.validators && schema.validators.length > 0
+      ? { validators: schema.validators.map((validator) => ({ ...validator })) }
+      : {}),
+  }),
+  validate: (schema, value, context, valuePath, schemaPath) => {
+    const array = expectArrayValue(schema.kind, value, valuePath, schemaPath);
+    const items = array.items.map((item) => {
+      const next = context.validate(
+        schema.element,
+        item.value,
+        [...valuePath, { kind: "item", id: item.id }],
+        [...schemaPath, "element"],
+      );
+
+      if (next === undefined) {
+        throw makeSchemaError(
+          SchemaErrorCodes.TypeMismatch,
+          "array item cannot sanitize to undefined",
+          {
+            valuePath: [...valuePath, { kind: "item", id: item.id }],
+            schemaPath,
+          },
+        );
+      }
+
+      return { id: item.id, pos: item.pos, value: next };
+    });
+
+    for (const validator of schema.validators ?? []) {
+      switch (validator.kind) {
+        case "minLength":
+          if (items.length < validator.value) {
+            throw validatorFailed("array shorter than minLength", valuePath, schemaPath);
+          }
+          break;
+        case "maxLength":
+          if (items.length > validator.value) {
+            throw validatorFailed("array longer than maxLength", valuePath, schemaPath);
+          }
+          break;
+      }
+    }
+
+    return { kind: "array", items };
+  },
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/boolean.ts b/packages/mimic-core/src/schema/models/boolean.ts
new file mode 100644
index 000000000..8a59a29d3
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/boolean.ts
@@ -0,0 +1,34 @@
+import { cloneValue } from "../../core/types.ts";
+import { makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import { cloneSchemaDefault, expectBooleanValue, serializeRequired } from "../shared.ts";
+import type { BooleanSchema } from "../types.ts";
+
+export const booleanSchemaModel: SchemaModel<BooleanSchema> = {
+  kind: "boolean",
+  parse: (input, metadata, context, schemaPath) =>
+    context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+      },
+      input["default"],
+      schemaPath,
+    ) as BooleanSchema,
+  serialize: (schema) => ({
+    kind: "boolean",
+    ...serializeRequired(schema.required),
+    ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+  }),
+  validate: (_schema, value, _context, valuePath, schemaPath) =>
+    cloneValue(expectBooleanValue("boolean", value, valuePath, schemaPath)),
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/either.ts b/packages/mimic-core/src/schema/models/either.ts
new file mode 100644
index 000000000..94d7e2e97
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/either.ts
@@ -0,0 +1,68 @@
+import { makeSchemaError, SchemaErrorCodes, type SchemaError } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import { cloneSchemaDefault, serializeRequired } from "../shared.ts";
+import type { EitherSchema } from "../types.ts";
+
+export const eitherSchemaModel: SchemaModel<EitherSchema> = {
+  kind: "either",
+  parse: (input, metadata, context, schemaPath) => {
+    if (!Array.isArray(input["variants"])) {
+      throw makeSchemaError(SchemaErrorCodes.InvalidSchema, "either variants must be an array", {
+        schemaPath: [...schemaPath, "variants"],
+      });
+    }
+
+    return context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        variants: input["variants"].map((variant, index) =>
+          context.parseSchema(variant, [...schemaPath, "variants", index]),
+        ),
+      },
+      input["default"],
+      schemaPath,
+    ) as EitherSchema;
+  },
+  serialize: (schema, serializeSchema) => ({
+    kind: "either",
+    variants: schema.variants.map((variant) => serializeSchema(variant)),
+    ...serializeRequired(schema.required),
+    ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+  }),
+  validate: (schema, value, context, valuePath, schemaPath) => {
+    const failures: SchemaError[] = [];
+
+    for (let index = 0; index < schema.variants.length; index += 1) {
+      try {
+        const next = context.validate(schema.variants[index]!, value, valuePath, [
+          ...schemaPath,
+          "variants",
+          index,
+        ]);
+        if (next !== undefined) {
+          return next;
+        }
+      } catch (error) {
+        if (error instanceof Error) {
+          failures.push(error as SchemaError);
+        }
+      }
+    }
+
+    throw makeSchemaError(
+      SchemaErrorCodes.EitherNoMatch,
+      failures[0]?.message ?? "no either variant matched",
+      { valuePath, schemaPath },
+    );
+  },
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/literal.ts b/packages/mimic-core/src/schema/models/literal.ts
new file mode 100644
index 000000000..8b0f0f168
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/literal.ts
@@ -0,0 +1,74 @@
+import { cloneValue } from "../../core/types.ts";
+import { makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import {
+  cloneSchemaDefault,
+  invalidSchema,
+  serializeRequired,
+  expectBooleanValue,
+  expectNumberValue,
+  expectStringValue,
+} from "../shared.ts";
+import type { LiteralSchema } from "../types.ts";
+
+export const literalSchemaModel: SchemaModel<LiteralSchema> = {
+  kind: "literal",
+  parse: (input, metadata, context, schemaPath) => {
+    const value = input["value"];
+    if (typeof value !== "string" && typeof value !== "number" && typeof value !== "boolean") {
+      throw invalidSchema(
+        [...schemaPath, "value"],
+        "literal value must be string, number, or boolean",
+      );
+    }
+
+    return context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        value,
+      },
+      input["default"],
+      schemaPath,
+    ) as LiteralSchema;
+  },
+  serialize: (schema) => ({
+    kind: "literal",
+    value: schema.value,
+    ...serializeRequired(schema.required),
+    ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+  }),
+  validate: (schema, value, _context, valuePath, schemaPath) => {
+    const expectedKind =
+      typeof schema.value === "string"
+        ? "string"
+        : typeof schema.value === "number"
+          ? "number"
+          : "boolean";
+    const literalValue =
+      expectedKind === "string"
+        ? expectStringValue(schema.kind, value, valuePath, schemaPath)
+        : expectedKind === "number"
+          ? expectNumberValue(schema.kind, value, valuePath, schemaPath)
+          : expectBooleanValue(schema.kind, value, valuePath, schemaPath);
+
+    if (literalValue.value !== schema.value) {
+      throw makeSchemaError(
+        SchemaErrorCodes.LiteralMismatch,
+        "literal value does not match schema",
+        { valuePath, schemaPath },
+      );
+    }
+
+    return cloneValue(literalValue);
+  },
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/number.ts b/packages/mimic-core/src/schema/models/number.ts
new file mode 100644
index 000000000..d39a8de48
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/number.ts
@@ -0,0 +1,77 @@
+import { cloneValue } from "../../core/types.ts";
+import { makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import {
+  cloneSchemaDefault,
+  expectNumberValue,
+  parseNumberValidators,
+  serializeRequired,
+  validatorFailed,
+} from "../shared.ts";
+import type { NumberSchema } from "../types.ts";
+
+export const numberSchemaModel: SchemaModel<NumberSchema> = {
+  kind: "number",
+  parse: (input, metadata, context, schemaPath) =>
+    context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        validators: parseNumberValidators(input["validators"], [...schemaPath, "validators"]),
+      },
+      input["default"],
+      schemaPath,
+    ) as NumberSchema,
+  serialize: (schema) => ({
+    kind: "number",
+    ...serializeRequired(schema.required),
+    ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+    ...(schema.validators && schema.validators.length > 0
+      ? { validators: schema.validators.map((validator) => ({ ...validator })) }
+      : {}),
+  }),
+  validate: (schema, value, _context, valuePath, schemaPath) => {
+    const numberValue = expectNumberValue(schema.kind, value, valuePath, schemaPath);
+
+    for (const validator of schema.validators ?? []) {
+      switch (validator.kind) {
+        case "min":
+          if (numberValue.value < validator.value) {
+            throw validatorFailed("number smaller than min", valuePath, schemaPath);
+          }
+          break;
+        case "max":
+          if (numberValue.value > validator.value) {
+            throw validatorFailed("number larger than max", valuePath, schemaPath);
+          }
+          break;
+        case "positive":
+          if (numberValue.value <= 0) {
+            throw validatorFailed("number is not positive", valuePath, schemaPath);
+          }
+          break;
+        case "negative":
+          if (numberValue.value >= 0) {
+            throw validatorFailed("number is not negative", valuePath, schemaPath);
+          }
+          break;
+        case "int":
+          if (!Number.isInteger(numberValue.value)) {
+            throw validatorFailed("number is not an integer", valuePath, schemaPath);
+          }
+          break;
+      }
+    }
+
+    return cloneValue(numberValue);
+  },
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/object.ts b/packages/mimic-core/src/schema/models/object.ts
new file mode 100644
index 000000000..6f9a27e6e
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/object.ts
@@ -0,0 +1,112 @@
+import { objectValue, type Value } from "../../core/types.ts";
+import { isSchemaError, makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import {
+  cloneSchemaDefault,
+  expectRecord,
+  expectObjectValue,
+  serializeRequired,
+} from "../shared.ts";
+import type { ObjectSchema, Schema, SchemaObject } from "../types.ts";
+
+export const objectSchemaModel: SchemaModel<ObjectSchema> = {
+  kind: "object",
+  parse: (input, metadata, context, schemaPath) => {
+    const fieldsObject = expectRecord(
+      input["fields"],
+      [...schemaPath, "fields"],
+      "object schema fields must be an object",
+    );
+    const fields: Record<string, Schema> = {};
+
+    for (const [key, fieldSchema] of Object.entries(fieldsObject)) {
+      fields[key] = context.parseSchema(fieldSchema, [...schemaPath, "fields", key]);
+    }
+
+    return context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        fields,
+      },
+      input["default"],
+      schemaPath,
+    ) as ObjectSchema;
+  },
+  serialize: (schema, serializeSchema) => {
+    const fields: Record<string, SchemaObject> = {};
+    for (const [key, field] of Object.entries(schema.fields)) {
+      fields[key] = serializeSchema(field);
+    }
+
+    return {
+      kind: "object",
+      fields,
+      ...serializeRequired(schema.required),
+      ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+    };
+  },
+  validate: (schema, value, context, valuePath, schemaPath) => {
+    const object = expectObjectValue(schema.kind, value, valuePath, schemaPath);
+    const fields: Record<string, Value> = {};
+
+    for (const [key, fieldSchema] of Object.entries(schema.fields)) {
+      const next = context.validate(
+        fieldSchema,
+        object.fields[key],
+        [...valuePath, { kind: "field", key }],
+        [...schemaPath, "fields", key],
+      );
+      if (next !== undefined) {
+        fields[key] = next;
+      }
+    }
+
+    return objectValue(fields);
+  },
+  materializeDefault: (schema, context, valuePath, schemaPath) => {
+    const fields: Record<string, Value> = {};
+    let hasAnyField = false;
+
+    for (const [key, fieldSchema] of Object.entries(schema.fields)) {
+      let child: Value | undefined;
+      try {
+        child = context.materializeDefault(
+          fieldSchema,
+          [...valuePath, { kind: "field", key }],
+          [...schemaPath, "fields", key],
+        );
+      } catch (error) {
+        // An optional object whose fields cannot self-construct (a required
+        // descendant without a default) materializes as absent — absence is
+        // the documented encoding for "no value" (e.g. an optional cursor
+        // struct with required x/y). A required object must self-construct,
+        // so the failure propagates.
+        if (
+          !schema.required &&
+          isSchemaError(error) &&
+          error.code === SchemaErrorCodes.MissingRequired
+        ) {
+          return undefined;
+        }
+        throw error;
+      }
+      if (child !== undefined) {
+        fields[key] = child;
+        hasAnyField = true;
+      }
+    }
+
+    if (hasAnyField) {
+      return objectValue(fields);
+    }
+    if (schema.required) {
+      throw makeSchemaError(
+        SchemaErrorCodes.MissingRequired,
+        "required object has no defaultable fields",
+        { valuePath, schemaPath },
+      );
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/string.ts b/packages/mimic-core/src/schema/models/string.ts
new file mode 100644
index 000000000..bf798fd31
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/string.ts
@@ -0,0 +1,84 @@
+import { cloneValue } from "../../core/types.ts";
+import { makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import {
+  cloneSchemaDefault,
+  expectStringValue,
+  parseStringValidators,
+  serializeRequired,
+  validatorFailed,
+} from "../shared.ts";
+import type { StringSchema } from "../types.ts";
+
+export const stringSchemaModel: SchemaModel<StringSchema> = {
+  kind: "string",
+  parse: (input, metadata, context, schemaPath) =>
+    context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        validators: parseStringValidators(input["validators"], [...schemaPath, "validators"]),
+      },
+      input["default"],
+      schemaPath,
+    ) as StringSchema,
+  serialize: (schema) => ({
+    kind: "string",
+    ...serializeRequired(schema.required),
+    ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+    ...(schema.validators && schema.validators.length > 0
+      ? { validators: schema.validators.map((validator) => ({ ...validator })) }
+      : {}),
+  }),
+  validate: (schema, value, _context, valuePath, schemaPath) => {
+    const stringValue = expectStringValue(schema.kind, value, valuePath, schemaPath);
+
+    for (const validator of schema.validators ?? []) {
+      switch (validator.kind) {
+        case "minLength":
+          if (stringValue.value.length < validator.value) {
+            throw validatorFailed("string shorter than minLength", valuePath, schemaPath);
+          }
+          break;
+        case "maxLength":
+          if (stringValue.value.length > validator.value) {
+            throw validatorFailed("string longer than maxLength", valuePath, schemaPath);
+          }
+          break;
+        case "length":
+          if (stringValue.value.length !== validator.value) {
+            throw validatorFailed("string length mismatch", valuePath, schemaPath);
+          }
+          break;
+        case "regex":
+          if (!new RegExp(validator.pattern, validator.flags).test(stringValue.value)) {
+            throw validatorFailed("string does not match regex", valuePath, schemaPath);
+          }
+          break;
+        case "email":
+          if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(stringValue.value)) {
+            throw validatorFailed("invalid email", valuePath, schemaPath);
+          }
+          break;
+        case "url":
+          try {
+            new URL(stringValue.value);
+          } catch {
+            throw validatorFailed("invalid url", valuePath, schemaPath);
+          }
+          break;
+      }
+    }
+
+    return cloneValue(stringValue);
+  },
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/tree.ts b/packages/mimic-core/src/schema/models/tree.ts
new file mode 100644
index 000000000..560683e31
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/tree.ts
@@ -0,0 +1,239 @@
+import { HiddenTreeRootId } from "../../core/types.ts";
+import type { ObjectValue } from "../../core/types.ts";
+import { makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import { cloneSchemaDefault, expectRecord, expectString, serializeRequired } from "../shared.ts";
+import type { ObjectSchema, TreeSchema, TreeVariantSchema } from "../types.ts";
+
+export const treeSchemaModel: SchemaModel<TreeSchema> = {
+  kind: "tree",
+  parse: (input, metadata, context, schemaPath) => {
+    const discriminator = expectString(
+      input["discriminator"],
+      [...schemaPath, "discriminator"],
+      "tree discriminator must be a string",
+    );
+    const roots = input["roots"];
+    if (!Array.isArray(roots) || !roots.every((item) => typeof item === "string")) {
+      throw makeSchemaError(SchemaErrorCodes.InvalidSchema, "tree roots must be a string array", {
+        schemaPath: [...schemaPath, "roots"],
+      });
+    }
+
+    const variantsObject = expectRecord(
+      input["variants"],
+      [...schemaPath, "variants"],
+      "tree variants must be an object",
+    );
+    const variants: Record<string, TreeVariantSchema> = {};
+
+    for (const [key, variant] of Object.entries(variantsObject)) {
+      const variantObject = expectRecord(
+        variant,
+        [...schemaPath, "variants", key],
+        "tree variant must be an object",
+      );
+      const parsedSchema = context.parseSchema(variantObject["schema"], [
+        ...schemaPath,
+        "variants",
+        key,
+        "schema",
+      ]);
+      if (parsedSchema.kind !== "object") {
+        throw makeSchemaError(
+          SchemaErrorCodes.InvalidSchema,
+          "tree variant schema must be an object schema",
+          { schemaPath: [...schemaPath, "variants", key, "schema"] },
+        );
+      }
+      const discriminatorField = parsedSchema.fields[discriminator];
+      if (discriminatorField?.kind !== "literal" || discriminatorField.value !== key) {
+        throw makeSchemaError(
+          SchemaErrorCodes.InvalidSchema,
+          "tree discriminator field must be a matching literal",
+          {
+            schemaPath: [...schemaPath, "variants", key, "schema", "fields", discriminator],
+          },
+        );
+      }
+
+      const children = variantObject["children"];
+      if (!Array.isArray(children) || !children.every((item) => typeof item === "string")) {
+        throw makeSchemaError(
+          SchemaErrorCodes.InvalidSchema,
+          "tree variant children must be a string array",
+          { schemaPath: [...schemaPath, "variants", key, "children"] },
+        );
+      }
+
+      variants[key] = {
+        schema: parsedSchema,
+        children: [...children],
+      };
+    }
+
+    for (const root of roots) {
+      if (!Object.hasOwn(variants, root)) {
+        throw makeSchemaError(SchemaErrorCodes.InvalidSchema, `unknown tree root variant ${root}`, {
+          schemaPath: [...schemaPath, "roots"],
+        });
+      }
+    }
+
+    for (const [key, variant] of Object.entries(variants)) {
+      for (const child of variant.children) {
+        if (!Object.hasOwn(variants, child)) {
+          throw makeSchemaError(
+            SchemaErrorCodes.InvalidSchema,
+            `unknown tree child variant ${child}`,
+            { schemaPath: [...schemaPath, "variants", key, "children"] },
+          );
+        }
+      }
+    }
+
+    return context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        discriminator,
+        roots: [...roots],
+        variants,
+      },
+      input["default"],
+      schemaPath,
+    ) as TreeSchema;
+  },
+  serialize: (schema, serializeSchema) => {
+    const variants: Record<string, TreeVariantSchema> = {};
+    for (const [key, variant] of Object.entries(schema.variants)) {
+      variants[key] = {
+        schema: serializeSchema(variant.schema) as ObjectSchema,
+        children: [...variant.children],
+      };
+    }
+
+    return {
+      kind: "tree",
+      discriminator: schema.discriminator,
+      roots: [...schema.roots],
+      variants,
+      ...serializeRequired(schema.required),
+      ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+    };
+  },
+  validate: (schema, value, context, valuePath, schemaPath) => {
+    const tree = (() => {
+      if (value.kind !== "tree") {
+        throw makeSchemaError(
+          SchemaErrorCodes.TypeMismatch,
+          `expected ${schema.kind}, got ${value.kind}`,
+          { valuePath, schemaPath },
+        );
+      }
+      return value;
+    })();
+
+    const nodeVariants = new Map<string, string>();
+    const nextNodes = tree.nodes.map((node) => {
+      const discriminator = node.value.fields[schema.discriminator];
+      if (discriminator === undefined || discriminator.kind !== "string") {
+        throw makeSchemaError(
+          SchemaErrorCodes.TreeUnknownVariant,
+          "tree node discriminator is missing or invalid",
+          {
+            valuePath: [
+              ...valuePath,
+              { kind: "node", id: node.id },
+              { kind: "field", key: schema.discriminator },
+            ],
+            schemaPath: [...schemaPath, "discriminator"],
+          },
+        );
+      }
+
+      const variant = schema.variants[discriminator.value];
+      if (!variant) {
+        throw makeSchemaError(
+          SchemaErrorCodes.TreeUnknownVariant,
+          `unknown tree variant ${discriminator.value}`,
+          {
+            valuePath: [
+              ...valuePath,
+              { kind: "node", id: node.id },
+              { kind: "field", key: schema.discriminator },
+            ],
+            schemaPath: [...schemaPath, "variants"],
+          },
+        );
+      }
+
+      const sanitizedValue = context.validate(
+        variant.schema,
+        node.value,
+        [...valuePath, { kind: "node", id: node.id }],
+        [...schemaPath, "variants", discriminator.value, "schema"],
+      );
+      nodeVariants.set(node.id, discriminator.value);
+
+      return {
+        id: node.id,
+        parent: node.parent,
+        pos: node.pos,
+        value: sanitizedValue as ObjectValue,
+      };
+    });
+
+    for (const node of nextNodes) {
+      const nodeVariant = nodeVariants.get(node.id)!;
+      if (node.parent === HiddenTreeRootId) {
+        if (!schema.roots.includes(nodeVariant)) {
+          throw makeSchemaError(
+            SchemaErrorCodes.TreeInvalidRootType,
+            `tree root type ${nodeVariant} is not allowed`,
+            {
+              valuePath: [...valuePath, { kind: "node", id: node.id }],
+              schemaPath: [...schemaPath, "roots"],
+            },
+          );
+        }
+        continue;
+      }
+
+      const parentVariant = nodeVariants.get(node.parent);
+      if (!parentVariant) {
+        throw makeSchemaError(
+          SchemaErrorCodes.TreeUnknownVariant,
+          "tree parent variant is missing",
+          {
+            valuePath: [...valuePath, { kind: "node", id: node.id }],
+            schemaPath,
+          },
+        );
+      }
+
+      const allowedChildren = schema.variants[parentVariant]!.children;
+      if (!allowedChildren.includes(nodeVariant)) {
+        throw makeSchemaError(
+          SchemaErrorCodes.TreeInvalidChildType,
+          `tree child type ${nodeVariant} is not allowed under ${parentVariant}`,
+          {
+            valuePath: [...valuePath, { kind: "node", id: node.id }],
+            schemaPath: [...schemaPath, "variants", parentVariant, "children"],
+          },
+        );
+      }
+    }
+
+    return { kind: "tree", nodes: nextNodes };
+  },
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/models/union.ts b/packages/mimic-core/src/schema/models/union.ts
new file mode 100644
index 000000000..e68895be3
--- /dev/null
+++ b/packages/mimic-core/src/schema/models/union.ts
@@ -0,0 +1,114 @@
+import { makeSchemaError, SchemaErrorCodes } from "../errors.ts";
+import type { SchemaModel } from "../model.ts";
+import {
+  cloneSchemaDefault,
+  expectObjectValue,
+  expectRecord,
+  expectString,
+  serializeRequired,
+} from "../shared.ts";
+import type { ObjectSchema, UnionSchema } from "../types.ts";
+
+export const unionSchemaModel: SchemaModel<UnionSchema> = {
+  kind: "union",
+  parse: (input, metadata, context, schemaPath) => {
+    const discriminator = expectString(
+      input["discriminator"],
+      [...schemaPath, "discriminator"],
+      "union discriminator must be a string",
+    );
+    const variantsObject = expectRecord(
+      input["variants"],
+      [...schemaPath, "variants"],
+      "union variants must be an object",
+    );
+    const variants: Record<string, ObjectSchema> = {};
+
+    for (const [key, variant] of Object.entries(variantsObject)) {
+      const parsed = context.parseSchema(variant, [...schemaPath, "variants", key]);
+      if (parsed.kind !== "object") {
+        throw makeSchemaError(
+          SchemaErrorCodes.InvalidSchema,
+          "union variants must be object schemas",
+          { schemaPath: [...schemaPath, "variants", key] },
+        );
+      }
+      const discriminatorField = parsed.fields[discriminator];
+      if (discriminatorField?.kind !== "literal" || discriminatorField.value !== key) {
+        throw makeSchemaError(
+          SchemaErrorCodes.InvalidSchema,
+          "union discriminator field must be a matching literal",
+          { schemaPath: [...schemaPath, "variants", key, "fields", discriminator] },
+        );
+      }
+      variants[key] = parsed;
+    }
+
+    return context.normalizeDefault(
+      {
+        kind: metadata.kind,
+        required: metadata.required,
+        discriminator,
+        variants,
+      },
+      input["default"],
+      schemaPath,
+    ) as UnionSchema;
+  },
+  serialize: (schema, serializeSchema) => {
+    const variants: Record<string, ObjectSchema> = {};
+    for (const [key, variant] of Object.entries(schema.variants)) {
+      variants[key] = serializeSchema(variant) as ObjectSchema;
+    }
+
+    return {
+      kind: "union",
+      discriminator: schema.discriminator,
+      variants,
+      ...serializeRequired(schema.required),
+      ...(schema.default !== undefined ? { default: cloneSchemaDefault(schema.default) } : {}),
+    };
+  },
+  validate: (schema, value, context, valuePath, schemaPath) => {
+    const object = expectObjectValue(schema.kind, value, valuePath, schemaPath);
+    const discriminatorValue = object.fields[schema.discriminator];
+
+    if (discriminatorValue === undefined || discriminatorValue.kind !== "string") {
+      throw makeSchemaError(
+        SchemaErrorCodes.UnionNoMatch,
+        "union discriminator is missing or invalid",
+        {
+          valuePath: [...valuePath, { kind: "field", key: schema.discriminator }],
+          schemaPath: [...schemaPath, "discriminator"],
+        },
+      );
+    }
+
+    const variant = schema.variants[discriminatorValue.value];
+    if (!variant) {
+      throw makeSchemaError(
+        SchemaErrorCodes.UnionNoMatch,
+        `unknown union discriminator ${discriminatorValue.value}`,
+        {
+          valuePath: [...valuePath, { kind: "field", key: schema.discriminator }],
+          schemaPath: [...schemaPath, "variants"],
+        },
+      );
+    }
+
+    return context.validate(variant, object, valuePath, [
+      ...schemaPath,
+      "variants",
+      discriminatorValue.value,
+    ])!;
+  },
+  materializeDefault: (schema, _context, valuePath, schemaPath) => {
+    if (schema.required) {
+      throw makeSchemaError(SchemaErrorCodes.MissingRequired, "required value has no default", {
+        valuePath,
+        schemaPath,
+      });
+    }
+    return undefined;
+  },
+};
diff --git a/packages/mimic-core/src/schema/parse.ts b/packages/mimic-core/src/schema/parse.ts
new file mode 100644
index 000000000..2e3f23c85
--- /dev/null
+++ b/packages/mimic-core/src/schema/parse.ts
@@ -0,0 +1,78 @@
+import type { Path } from "../core/types.ts";
+import { isCoreError } from "../core/errors.ts";
+import { SchemaErrorCodes } from "./errors.ts";
+import type { Schema } from "./types.ts";
+import { getSchemaModel, isSchemaKind } from "./registry.ts";
+import {
+  expectRecord,
+  expectString,
+  invalidSchema,
+  parseDefaultValue,
+  parseOptionalBoolean,
+} from "./shared.ts";
+import { validate as validateSchema } from "./validate.ts";
+
+export const parseSchema = (input: unknown): Schema => {
+  const schema = parseSchemaInternal(input, []);
+  return schema;
+};
+
+const parseSchemaInternal = (input: unknown, schemaPath: readonly (string | number)[]): Schema => {
+  const object = expectRecord(input, schemaPath, "schema must be an object");
+  const kind = expectString(object["kind"], [...schemaPath, "kind"], "schema kind is required");
+  if (!isSchemaKind(kind)) {
+    throw invalidSchema(schemaPath, `unknown schema kind ${String(kind)}`);
+  }
+
+  return getSchemaModel(kind).parse(
+    object,
+    {
+      kind,
+      required: parseOptionalBoolean(object["required"], [...schemaPath, "required"]),
+    },
+    parseContext,
+    schemaPath,
+  );
+};
+
+function normalizeDefault(
+  schema: Schema,
+  rawDefault: unknown,
+  schemaPath: readonly (string | number)[],
+): Schema {
+  if (rawDefault === undefined) {
+    return schema;
+  }
+
+  const parsedDefault = parseDefaultValue(rawDefault, [...schemaPath, "default"]);
+
+  if (schema.kind === "literal") {
+    const literalKind =
+      typeof schema.value === "string"
+        ? "string"
+        : typeof schema.value === "number"
+          ? "number"
+          : "boolean";
+    if (parsedDefault.kind !== literalKind || parsedDefault.value !== schema.value) {
+      throw invalidSchema([...schemaPath, "default"], "literal default must equal literal value");
+    }
+  }
+
+  try {
+    const normalized = validateSchema(schema, parsedDefault);
+    return { ...schema, default: normalized as NonNullable<Schema["default"]> } as Schema;
+  } catch (error) {
+    if (isCoreError(error) || error instanceof Error) {
+      throw invalidSchema(
+        [...schemaPath, "default"],
+        `schema default is invalid: ${error.message}`,
+      );
+    }
+    throw error;
+  }
+}
+
+const parseContext = {
+  parseSchema: parseSchemaInternal,
+  normalizeDefault,
+} as const;
diff --git a/packages/mimic-core/src/schema/registry.ts b/packages/mimic-core/src/schema/registry.ts
new file mode 100644
index 000000000..cc337e58e
--- /dev/null
+++ b/packages/mimic-core/src/schema/registry.ts
@@ -0,0 +1,34 @@
+import type { Schema, SchemaKind } from "./types.ts";
+import type { SchemaModel } from "./model.ts";
+import { arraySchemaModel } from "./models/array.ts";
+import { booleanSchemaModel } from "./models/boolean.ts";
+import { eitherSchemaModel } from "./models/either.ts";
+import { literalSchemaModel } from "./models/literal.ts";
+import { numberSchemaModel } from "./models/number.ts";
+import { objectSchemaModel } from "./models/object.ts";
+import { stringSchemaModel } from "./models/string.ts";
+import { treeSchemaModel } from "./models/tree.ts";
+import { unionSchemaModel } from "./models/union.ts";
+
+type SchemaModels = {
+  [K in SchemaKind]: SchemaModel<Extract<Schema, { kind: K }>>;
+};
+
+export const schemaModels: SchemaModels = {
+  string: stringSchemaModel,
+  number: numberSchemaModel,
+  boolean: booleanSchemaModel,
+  literal: literalSchemaModel,
+  object: objectSchemaModel,
+  array: arraySchemaModel,
+  union: unionSchemaModel,
+  either: eitherSchemaModel,
+  tree: treeSchemaModel,
+};
+
+export const isSchemaKind = (value: string): value is SchemaKind =>
+  Object.hasOwn(schemaModels, value);
+
+export const getSchemaModel = <TSchema extends Schema>(
+  kind: TSchema["kind"],
+): SchemaModel<TSchema> => schemaModels[kind] as unknown as SchemaModel<TSchema>;
diff --git a/packages/mimic-core/src/schema/serialize.ts b/packages/mimic-core/src/schema/serialize.ts
new file mode 100644
index 000000000..3fa4aff00
--- /dev/null
+++ b/packages/mimic-core/src/schema/serialize.ts
@@ -0,0 +1,7 @@
+import { getSchemaModel } from "./registry.ts";
+import type { Schema, SchemaObject } from "./types.ts";
+
+export const serializeSchema = (schema: Schema): SchemaObject => serializeSchemaInternal(schema);
+
+const serializeSchemaInternal = (schema: Schema): SchemaObject =>
+  getSchemaModel(schema.kind).serialize(schema, serializeSchemaInternal);
diff --git a/packages/mimic-core/src/schema/shared.ts b/packages/mimic-core/src/schema/shared.ts
new file mode 100644
index 000000000..973288660
--- /dev/null
+++ b/packages/mimic-core/src/schema/shared.ts
@@ -0,0 +1,305 @@
+import { isCoreError } from "../core/errors.ts";
+import type {
+  ArrayValue,
+  BooleanValue,
+  NumberValue,
+  ObjectValue,
+  Path,
+  StringValue,
+  TreeValue,
+  Value,
+} from "../core/types.ts";
+import { cloneValue } from "../core/types.ts";
+import { validateValue } from "../core/validate.ts";
+import { makeSchemaError, SchemaErrorCodes } from "./errors.ts";
+import type { ArrayValidator, NumberValidator, Schema, StringValidator } from "./types.ts";
+
+export const invalidSchema = (schemaPath: readonly (string | number)[], message: string) =>
+  makeSchemaError(SchemaErrorCodes.InvalidSchema, message, {
+    valuePath: [] as Path,
+    schemaPath,
+  });
+
+export const expectRecord = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+  message: string,
+): Record<string, unknown> => {
+  if (typeof input !== "object" || input === null || Array.isArray(input)) {
+    throw invalidSchema(schemaPath, message);
+  }
+  return input as Record<string, unknown>;
+};
+
+export const expectString = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+  message: string,
+): string => {
+  if (typeof input !== "string") {
+    throw invalidSchema(schemaPath, message);
+  }
+  return input;
+};
+
+export const expectFiniteNumber = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): number => {
+  if (typeof input !== "number" || Number.isNaN(input) || !Number.isFinite(input)) {
+    throw invalidSchema(schemaPath, "validator value must be a finite number");
+  }
+  return input;
+};
+
+export const parseOptionalBoolean = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): boolean | undefined => {
+  if (input === undefined) {
+    return undefined;
+  }
+  if (typeof input !== "boolean") {
+    throw invalidSchema(schemaPath, "required must be a boolean");
+  }
+  return input;
+};
+
+export const parseOptionalString = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): string | undefined => {
+  if (input === undefined) {
+    return undefined;
+  }
+  if (typeof input !== "string") {
+    throw invalidSchema(schemaPath, "value must be a string");
+  }
+  return input;
+};
+
+export const parseStringValidators = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): readonly StringValidator[] | undefined => {
+  if (input === undefined) {
+    return undefined;
+  }
+  if (!Array.isArray(input)) {
+    throw invalidSchema(schemaPath, "string validators must be an array");
+  }
+  return input.map((validator, index) => parseStringValidator(validator, [...schemaPath, index]));
+};
+
+export const parseNumberValidators = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): readonly NumberValidator[] | undefined => {
+  if (input === undefined) {
+    return undefined;
+  }
+  if (!Array.isArray(input)) {
+    throw invalidSchema(schemaPath, "number validators must be an array");
+  }
+  return input.map((validator, index) => parseNumberValidator(validator, [...schemaPath, index]));
+};
+
+export const parseArrayValidators = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): readonly ArrayValidator[] | undefined => {
+  if (input === undefined) {
+    return undefined;
+  }
+  if (!Array.isArray(input)) {
+    throw invalidSchema(schemaPath, "array validators must be an array");
+  }
+  return input.map((validator, index) => parseArrayValidator(validator, [...schemaPath, index]));
+};
+
+const parseStringValidator = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): StringValidator => {
+  const object = expectRecord(input, schemaPath, "string validator must be an object");
+  const kind = expectString(
+    object["kind"],
+    [...schemaPath, "kind"],
+    "validator kind must be a string",
+  );
+
+  switch (kind) {
+    case "minLength":
+    case "maxLength":
+    case "length":
+      return { kind, value: expectFiniteNumber(object["value"], [...schemaPath, "value"]) };
+    case "regex":
+      return {
+        kind,
+        pattern: expectString(
+          object["pattern"],
+          [...schemaPath, "pattern"],
+          "regex pattern must be a string",
+        ),
+        flags: parseOptionalString(object["flags"], [...schemaPath, "flags"]),
+      };
+    case "email":
+    case "url":
+      return { kind };
+    default:
+      throw invalidSchema(schemaPath, `unknown string validator ${kind}`);
+  }
+};
+
+const parseNumberValidator = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): NumberValidator => {
+  const object = expectRecord(input, schemaPath, "number validator must be an object");
+  const kind = expectString(
+    object["kind"],
+    [...schemaPath, "kind"],
+    "validator kind must be a string",
+  );
+
+  switch (kind) {
+    case "min":
+    case "max":
+      return { kind, value: expectFiniteNumber(object["value"], [...schemaPath, "value"]) };
+    case "positive":
+    case "negative":
+    case "int":
+      return { kind };
+    default:
+      throw invalidSchema(schemaPath, `unknown number validator ${kind}`);
+  }
+};
+
+const parseArrayValidator = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): ArrayValidator => {
+  const object = expectRecord(input, schemaPath, "array validator must be an object");
+  const kind = expectString(
+    object["kind"],
+    [...schemaPath, "kind"],
+    "validator kind must be a string",
+  );
+
+  switch (kind) {
+    case "minLength":
+    case "maxLength":
+      return { kind, value: expectFiniteNumber(object["value"], [...schemaPath, "value"]) };
+    default:
+      throw invalidSchema(schemaPath, `unknown array validator ${kind}`);
+  }
+};
+
+export const parseDefaultValue = (
+  input: unknown,
+  schemaPath: readonly (string | number)[],
+): Value => {
+  const value = input as Value;
+
+  try {
+    validateValue(value);
+    return value;
+  } catch (error) {
+    if (isCoreError(error) || error instanceof Error) {
+      throw invalidSchema(schemaPath, `default value is not a valid core value: ${error.message}`);
+    }
+    throw error;
+  }
+};
+
+export const expectValueKind = (
+  schemaKind: Schema["kind"],
+  expected: Value["kind"],
+  value: Value,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): void => {
+  if (value.kind !== expected) {
+    throw makeSchemaError(
+      SchemaErrorCodes.TypeMismatch,
+      `expected ${schemaKind}, got ${value.kind}`,
+      { valuePath, schemaPath },
+    );
+  }
+};
+
+export const expectStringValue = (
+  schemaKind: Schema["kind"],
+  value: Value,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): StringValue => {
+  expectValueKind(schemaKind, "string", value, valuePath, schemaPath);
+  return value as StringValue;
+};
+
+export const expectNumberValue = (
+  schemaKind: Schema["kind"],
+  value: Value,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): NumberValue => {
+  expectValueKind(schemaKind, "number", value, valuePath, schemaPath);
+  return value as NumberValue;
+};
+
+export const expectBooleanValue = (
+  schemaKind: Schema["kind"],
+  value: Value,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): BooleanValue => {
+  expectValueKind(schemaKind, "boolean", value, valuePath, schemaPath);
+  return value as BooleanValue;
+};
+
+export const expectObjectValue = (
+  schemaKind: Schema["kind"],
+  value: Value,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): ObjectValue => {
+  expectValueKind(schemaKind, "object", value, valuePath, schemaPath);
+  return value as ObjectValue;
+};
+
+export const expectArrayValue = (
+  schemaKind: Schema["kind"],
+  value: Value,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): ArrayValue => {
+  expectValueKind(schemaKind, "array", value, valuePath, schemaPath);
+  return value as ArrayValue;
+};
+
+export const expectTreeValue = (
+  schemaKind: Schema["kind"],
+  value: Value,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): TreeValue => {
+  expectValueKind(schemaKind, "tree", value, valuePath, schemaPath);
+  return value as TreeValue;
+};
+
+export const validatorFailed = (
+  message: string,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+) =>
+  makeSchemaError(SchemaErrorCodes.ValidatorFailed, message, {
+    valuePath,
+    schemaPath,
+  });
+
+export const cloneSchemaDefault = <T extends Value | undefined>(value: T): T =>
+  value === undefined ? value : (cloneValue(value) as T);
+
+export const serializeRequired = (required?: boolean): { required?: true } =>
+  required ? { required: true } : {};
diff --git a/packages/mimic-core/src/schema/types.ts b/packages/mimic-core/src/schema/types.ts
new file mode 100644
index 000000000..c25688e5b
--- /dev/null
+++ b/packages/mimic-core/src/schema/types.ts
@@ -0,0 +1,189 @@
+import type {
+  ArrayValue,
+  BooleanValue,
+  NumberValue,
+  ObjectValue,
+  StringValue,
+  TreeValue,
+  Value,
+} from "../core/types.ts";
+
+export const SchemaKinds = {
+  String: "string",
+  Number: "number",
+  Boolean: "boolean",
+  Literal: "literal",
+  Object: "object",
+  Array: "array",
+  Union: "union",
+  Either: "either",
+  Tree: "tree",
+} as const;
+
+export type SchemaKind = (typeof SchemaKinds)[keyof typeof SchemaKinds];
+
+export type ValueObject = Value;
+export type ValueObjectString = StringValue;
+export type ValueObjectNumber = NumberValue;
+export type ValueObjectBoolean = BooleanValue;
+export type ValueObjectObject = ObjectValue;
+export type ValueObjectArray = ArrayValue;
+export type ValueObjectTree = TreeValue;
+
+export interface MinLengthStringValidator {
+  readonly kind: "minLength";
+  readonly value: number;
+}
+
+export interface MaxLengthStringValidator {
+  readonly kind: "maxLength";
+  readonly value: number;
+}
+
+export interface LengthStringValidator {
+  readonly kind: "length";
+  readonly value: number;
+}
+
+export interface RegexStringValidator {
+  readonly kind: "regex";
+  readonly pattern: string;
+  readonly flags?: string;
+}
+
+export interface EmailStringValidator {
+  readonly kind: "email";
+}
+
+export interface UrlStringValidator {
+  readonly kind: "url";
+}
+
+export type StringValidator =
+  | MinLengthStringValidator
+  | MaxLengthStringValidator
+  | LengthStringValidator
+  | RegexStringValidator
+  | EmailStringValidator
+  | UrlStringValidator;
+
+export interface MinNumberValidator {
+  readonly kind: "min";
+  readonly value: number;
+}
+
+export interface MaxNumberValidator {
+  readonly kind: "max";
+  readonly value: number;
+}
+
+export interface PositiveNumberValidator {
+  readonly kind: "positive";
+}
+
+export interface NegativeNumberValidator {
+  readonly kind: "negative";
+}
+
+export interface IntNumberValidator {
+  readonly kind: "int";
+}
+
+export type NumberValidator =
+  | MinNumberValidator
+  | MaxNumberValidator
+  | PositiveNumberValidator
+  | NegativeNumberValidator
+  | IntNumberValidator;
+
+export interface MinLengthArrayValidator {
+  readonly kind: "minLength";
+  readonly value: number;
+}
+
+export interface MaxLengthArrayValidator {
+  readonly kind: "maxLength";
+  readonly value: number;
+}
+
+export type ArrayValidator = MinLengthArrayValidator | MaxLengthArrayValidator;
+
+export interface BaseSchema {
+  readonly kind: SchemaKind;
+  readonly required?: boolean;
+}
+
+export interface StringSchema extends BaseSchema {
+  readonly kind: "string";
+  readonly default?: ValueObjectString;
+  readonly validators?: readonly StringValidator[];
+}
+
+export interface NumberSchema extends BaseSchema {
+  readonly kind: "number";
+  readonly default?: ValueObjectNumber;
+  readonly validators?: readonly NumberValidator[];
+}
+
+export interface BooleanSchema extends BaseSchema {
+  readonly kind: "boolean";
+  readonly default?: ValueObjectBoolean;
+}
+
+export interface LiteralSchema extends BaseSchema {
+  readonly kind: "literal";
+  readonly value: string | number | boolean;
+  readonly default?: ValueObjectString | ValueObjectNumber | ValueObjectBoolean;
+}
+
+export interface ObjectSchema extends BaseSchema {
+  readonly kind: "object";
+  readonly fields: Readonly<Record<string, Schema>>;
+  readonly default?: ValueObjectObject;
+}
+
+export interface ArraySchema extends BaseSchema {
+  readonly kind: "array";
+  readonly element: Schema;
+  readonly default?: ValueObjectArray;
+  readonly validators?: readonly ArrayValidator[];
+}
+
+export interface UnionSchema extends BaseSchema {
+  readonly kind: "union";
+  readonly discriminator: string;
+  readonly variants: Readonly<Record<string, ObjectSchema>>;
+  readonly default?: ValueObjectObject;
+}
+
+export interface EitherSchema extends BaseSchema {
+  readonly kind: "either";
+  readonly variants: readonly Schema[];
+  readonly default?: ValueObject;
+}
+
+export interface TreeVariantSchema {
+  readonly schema: ObjectSchema;
+  readonly children: readonly string[];
+}
+
+export interface TreeSchema extends BaseSchema {
+  readonly kind: "tree";
+  readonly discriminator: string;
+  readonly roots: readonly string[];
+  readonly variants: Readonly<Record<string, TreeVariantSchema>>;
+  readonly default?: ValueObjectTree;
+}
+
+export type Schema =
+  | StringSchema
+  | NumberSchema
+  | BooleanSchema
+  | LiteralSchema
+  | ObjectSchema
+  | ArraySchema
+  | UnionSchema
+  | EitherSchema
+  | TreeSchema;
+
+export type SchemaObject = Schema;
diff --git a/packages/mimic-core/src/schema/validate.ts b/packages/mimic-core/src/schema/validate.ts
new file mode 100644
index 000000000..f266bebb6
--- /dev/null
+++ b/packages/mimic-core/src/schema/validate.ts
@@ -0,0 +1,36 @@
+import { validateValue } from "../core/validate.ts";
+import { type Path, type Value } from "../core/types.ts";
+import { materializeDefaultAt } from "./defaults.ts";
+import { getSchemaModel } from "./registry.ts";
+import type { Schema } from "./types.ts";
+
+export const validate = (schema: Schema, value?: Value): Value | undefined => {
+  if (value !== undefined) {
+    validateValue(value);
+  }
+  return validateInternal(schema, value, [], []);
+};
+
+const validateInternal = (
+  schema: Schema,
+  value: Value | undefined,
+  valuePath: Path,
+  schemaPath: readonly (string | number)[],
+): Value | undefined => {
+  if (value === undefined) {
+    return materializeDefaultAt(schema, valuePath, schemaPath);
+  }
+
+  return getSchemaModel(schema.kind).validate(
+    schema,
+    value,
+    validationContext,
+    valuePath,
+    schemaPath,
+  );
+};
+
+const validationContext = {
+  validate: validateInternal,
+  materializeDefault: materializeDefaultAt,
+} as const;
diff --git a/packages/mimic-core/tests/fixtures/README.md b/packages/mimic-core/tests/fixtures/README.md
new file mode 100644
index 000000000..14d926140
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/README.md
@@ -0,0 +1,19 @@
+# Fixture Suites
+
+These fixtures are the shared JSON conformance corpus for Mimic DB.
+
+Rules for runners:
+
+- Load each suite file as JSON.
+- Apply `commands` to `initial` using atomic batch semantics.
+- If the case defines `expect`, assert semantic equality with the resulting state.
+- If the case defines `error`, assert that evaluation fails with the expected error code.
+- Do not assert on implementation-specific error messages.
+
+Current usage:
+
+- `index.json` lists the core apply suites consumed by `core/fixtures_test.go`.
+- `fractional.json` is consumed by the fractional-index test suite.
+
+The fixture corpus assumes the canonical spec in `../core.md`. The current
+verified runner is the Go implementation in `apps/mimic-db`.
diff --git a/packages/mimic-core/tests/fixtures/arrays.json b/packages/mimic-core/tests/fixtures/arrays.json
new file mode 100644
index 000000000..ae3eed764
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/arrays.json
@@ -0,0 +1,297 @@
+{
+  "version": 1,
+  "suite": "arrays",
+  "cases": [
+    {
+      "name": "insert first item into empty array",
+      "initial": {
+        "kind": "array",
+        "items": []
+      },
+      "commands": [
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          }
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          }
+        ]
+      }
+    },
+    {
+      "name": "insert item between existing positions",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          },
+          {
+            "id": "i3",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "C" }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i2",
+            "pos": "a0V",
+            "value": { "kind": "string", "value": "B" }
+          }
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          },
+          {
+            "id": "i2",
+            "pos": "a0V",
+            "value": { "kind": "string", "value": "B" }
+          },
+          {
+            "id": "i3",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "C" }
+          }
+        ]
+      }
+    },
+    {
+      "name": "move item by replacing its position",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          },
+          {
+            "id": "i2",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "B" }
+          },
+          {
+            "id": "i3",
+            "pos": "a2",
+            "value": { "kind": "string", "value": "C" }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "array.move",
+          "path": [],
+          "id": "i3",
+          "pos": "a0V"
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          },
+          {
+            "id": "i3",
+            "pos": "a0V",
+            "value": { "kind": "string", "value": "C" }
+          },
+          {
+            "id": "i2",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "B" }
+          }
+        ]
+      }
+    },
+    {
+      "name": "delete existing item",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          },
+          {
+            "id": "i2",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "B" }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "array.delete",
+          "path": [],
+          "id": "i1"
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i2",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "B" }
+          }
+        ]
+      }
+    },
+    {
+      "name": "edit nested field inside array item value",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "done": { "kind": "boolean", "value": false }
+              }
+            }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "value.set",
+          "path": [
+            { "kind": "item", "id": "i1" },
+            { "kind": "field", "key": "done" }
+          ],
+          "value": { "kind": "boolean", "value": true }
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "done": { "kind": "boolean", "value": true }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "reject duplicate item id on insert",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i1",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "B" }
+          }
+        }
+      ],
+      "error": { "code": "duplicate_array_item_id" }
+    },
+    {
+      "name": "reject duplicate position on insert",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i2",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "B" }
+          }
+        }
+      ],
+      "error": { "code": "duplicate_array_pos" }
+    },
+    {
+      "name": "reject move when item does not exist",
+      "initial": {
+        "kind": "array",
+        "items": []
+      },
+      "commands": [
+        {
+          "kind": "array.move",
+          "path": [],
+          "id": "missing",
+          "pos": "a0"
+        }
+      ],
+      "error": { "code": "missing_array_item" }
+    },
+    {
+      "name": "reject array command on non-array target",
+      "initial": {
+        "kind": "object",
+        "fields": {}
+      },
+      "commands": [
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          }
+        }
+      ],
+      "error": { "code": "type_mismatch" }
+    }
+  ]
+}
diff --git a/packages/mimic-core/tests/fixtures/batches.json b/packages/mimic-core/tests/fixtures/batches.json
new file mode 100644
index 000000000..9e13b9ff7
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/batches.json
@@ -0,0 +1,176 @@
+{
+  "version": 1,
+  "suite": "batches",
+  "cases": [
+    {
+      "name": "apply multiple object commands in one batch",
+      "initial": {
+        "kind": "object",
+        "fields": {}
+      },
+      "commands": [
+        {
+          "kind": "object.set",
+          "path": [],
+          "key": "title",
+          "value": { "kind": "string", "value": "Hello" }
+        },
+        {
+          "kind": "object.set",
+          "path": [],
+          "key": "count",
+          "value": { "kind": "number", "value": 1 }
+        }
+      ],
+      "expect": {
+        "kind": "object",
+        "fields": {
+          "title": { "kind": "string", "value": "Hello" },
+          "count": { "kind": "number", "value": 1 }
+        }
+      }
+    },
+    {
+      "name": "batch may reference state created earlier in the same batch",
+      "initial": {
+        "kind": "tree",
+        "nodes": []
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Parent" }
+              }
+            }
+          }
+        },
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n2",
+            "parent": "n1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Child" }
+              }
+            }
+          }
+        }
+      ],
+      "expect": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Parent" }
+              }
+            }
+          },
+          {
+            "id": "n2",
+            "parent": "n1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Child" }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "batch is atomic when a later command fails",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "A" }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i2",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "B" }
+          }
+        },
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i3",
+            "pos": "a1",
+            "value": { "kind": "string", "value": "C" }
+          }
+        }
+      ],
+      "error": { "code": "duplicate_array_pos" }
+    },
+    {
+      "name": "batch can create array item then mutate inside it",
+      "initial": {
+        "kind": "array",
+        "items": []
+      },
+      "commands": [
+        {
+          "kind": "array.insert",
+          "path": [],
+          "item": {
+            "id": "i1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {}
+            }
+          }
+        },
+        {
+          "kind": "object.set",
+          "path": [{ "kind": "item", "id": "i1" }],
+          "key": "title",
+          "value": { "kind": "string", "value": "Created in batch" }
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Created in batch" }
+              }
+            }
+          }
+        ]
+      }
+    }
+  ]
+}
diff --git a/packages/mimic-core/tests/fixtures/case.schema.json b/packages/mimic-core/tests/fixtures/case.schema.json
new file mode 100644
index 000000000..b42fa726f
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/case.schema.json
@@ -0,0 +1,500 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://voidha.sh/mimic-db/spec/fixture-suite.schema.json",
+  "title": "Mimic DB Fixture Suite",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "suite", "cases"],
+  "properties": {
+    "version": {
+      "type": "integer",
+      "const": 1
+    },
+    "suite": {
+      "type": "string",
+      "minLength": 1
+    },
+    "cases": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/case"
+      }
+    }
+  },
+  "$defs": {
+    "pathSegment": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "key"],
+          "properties": {
+            "kind": {
+              "const": "field"
+            },
+            "key": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "id"],
+          "properties": {
+            "kind": {
+              "const": "item"
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "id"],
+          "properties": {
+            "kind": {
+              "const": "node"
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        }
+      ]
+    },
+    "value": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "value"],
+          "properties": {
+            "kind": {
+              "const": "string"
+            },
+            "value": {
+              "type": "string"
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "value"],
+          "properties": {
+            "kind": {
+              "const": "number"
+            },
+            "value": {
+              "type": "number"
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "value"],
+          "properties": {
+            "kind": {
+              "const": "boolean"
+            },
+            "value": {
+              "type": "boolean"
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "fields"],
+          "properties": {
+            "kind": {
+              "const": "object"
+            },
+            "fields": {
+              "type": "object",
+              "additionalProperties": {
+                "$ref": "#/$defs/value"
+              }
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "items"],
+          "properties": {
+            "kind": {
+              "const": "array"
+            },
+            "items": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["id", "pos", "value"],
+                "properties": {
+                  "id": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "pos": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "value": {
+                    "$ref": "#/$defs/value"
+                  }
+                }
+              }
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "nodes"],
+          "properties": {
+            "kind": {
+              "const": "tree"
+            },
+            "nodes": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["id", "parent", "pos", "value"],
+                "properties": {
+                  "id": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "parent": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "pos": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "value": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": ["kind", "fields"],
+                    "properties": {
+                      "kind": {
+                        "const": "object"
+                      },
+                      "fields": {
+                        "type": "object",
+                        "additionalProperties": {
+                          "$ref": "#/$defs/value"
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      ]
+    },
+    "command": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "value"],
+          "properties": {
+            "kind": {
+              "const": "value.set"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "value": {
+              "$ref": "#/$defs/value"
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "key", "value"],
+          "properties": {
+            "kind": {
+              "const": "object.set"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "key": {
+              "type": "string",
+              "minLength": 1
+            },
+            "value": {
+              "$ref": "#/$defs/value"
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "key"],
+          "properties": {
+            "kind": {
+              "const": "object.delete"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "key": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "item"],
+          "properties": {
+            "kind": {
+              "const": "array.insert"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "item": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["id", "pos", "value"],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "pos": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "value": {
+                  "$ref": "#/$defs/value"
+                }
+              }
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "id", "pos"],
+          "properties": {
+            "kind": {
+              "const": "array.move"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "pos": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "id"],
+          "properties": {
+            "kind": {
+              "const": "array.delete"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "node"],
+          "properties": {
+            "kind": {
+              "const": "tree.insert"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "node": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["id", "parent", "pos", "value"],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "parent": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "pos": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "value": {
+                  "$ref": "#/$defs/value"
+                }
+              }
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "id", "parent", "pos"],
+          "properties": {
+            "kind": {
+              "const": "tree.move"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "parent": {
+              "type": "string",
+              "minLength": 1
+            },
+            "pos": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "path", "id"],
+          "properties": {
+            "kind": {
+              "const": "tree.delete"
+            },
+            "path": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/pathSegment"
+              }
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        }
+      ]
+    },
+    "error": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code"],
+      "properties": {
+        "code": {
+          "type": "string",
+          "enum": [
+            "invalid_command",
+            "invalid_path",
+            "type_mismatch",
+            "missing_field",
+            "missing_array_item",
+            "missing_tree_node",
+            "duplicate_array_item_id",
+            "duplicate_array_pos",
+            "duplicate_tree_node_id",
+            "duplicate_tree_pos",
+            "invalid_tree_parent",
+            "tree_cycle",
+            "tree_node_value_must_be_object",
+            "reserved_identifier"
+          ]
+        }
+      }
+    },
+    "case": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "initial", "commands"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "initial": {
+          "$ref": "#/$defs/value"
+        },
+        "commands": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/command"
+          }
+        },
+        "expect": {
+          "$ref": "#/$defs/value"
+        },
+        "error": {
+          "$ref": "#/$defs/error"
+        }
+      },
+      "oneOf": [
+        {
+          "required": ["expect"]
+        },
+        {
+          "required": ["error"]
+        }
+      ]
+    }
+  }
+}
diff --git a/packages/mimic-core/tests/fixtures/fractional.json b/packages/mimic-core/tests/fixtures/fractional.json
new file mode 100644
index 000000000..120b7b5f9
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/fractional.json
@@ -0,0 +1,57 @@
+{
+  "version": 1,
+  "suite": "fractional",
+  "cases": [
+    {
+      "name": "plain empty list",
+      "mode": "plain",
+      "count": 1,
+      "lower": null,
+      "upper": null,
+      "expect": ["a0"]
+    },
+    {
+      "name": "plain between a0 and a1",
+      "mode": "plain",
+      "count": 1,
+      "lower": "a0",
+      "upper": "a1",
+      "expect": ["a0V"]
+    },
+    {
+      "name": "plain three between a0 and a1",
+      "mode": "plain",
+      "count": 3,
+      "lower": "a0",
+      "upper": "a1",
+      "expect": ["a0F", "a0V", "a0k"]
+    },
+    {
+      "name": "jittered empty list",
+      "mode": "jittered",
+      "count": 1,
+      "lower": null,
+      "upper": null,
+      "random": [0.5],
+      "expect": ["a06CO"]
+    },
+    {
+      "name": "jittered between a0 and a1",
+      "mode": "jittered",
+      "count": 1,
+      "lower": "a0",
+      "upper": "a1",
+      "random": [0.5],
+      "expect": ["a0V6CO"]
+    },
+    {
+      "name": "jittered three between a0 and a1",
+      "mode": "jittered",
+      "count": 3,
+      "lower": "a0",
+      "upper": "a1",
+      "random": [0.5, 0.5, 0.5, 0.5, 0.5, 0.5, 0.5, 0.5, 0.5, 0.5],
+      "expect": ["a0FeIa", "a0V6CO", "a0keIa"]
+    }
+  ]
+}
diff --git a/packages/mimic-core/tests/fixtures/index.json b/packages/mimic-core/tests/fixtures/index.json
new file mode 100644
index 000000000..9e27faff9
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/index.json
@@ -0,0 +1,4 @@
+{
+  "version": 1,
+  "suites": ["values.json", "objects.json", "arrays.json", "trees.json", "batches.json"]
+}
diff --git a/packages/mimic-core/tests/fixtures/objects.json b/packages/mimic-core/tests/fixtures/objects.json
new file mode 100644
index 000000000..ca308f376
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/objects.json
@@ -0,0 +1,152 @@
+{
+  "version": 1,
+  "suite": "objects",
+  "cases": [
+    {
+      "name": "set new field on root object",
+      "initial": {
+        "kind": "object",
+        "fields": {}
+      },
+      "commands": [
+        {
+          "kind": "object.set",
+          "path": [],
+          "key": "title",
+          "value": { "kind": "string", "value": "Hello" }
+        }
+      ],
+      "expect": {
+        "kind": "object",
+        "fields": {
+          "title": { "kind": "string", "value": "Hello" }
+        }
+      }
+    },
+    {
+      "name": "replace existing field on nested object",
+      "initial": {
+        "kind": "object",
+        "fields": {
+          "profile": {
+            "kind": "object",
+            "fields": {
+              "active": { "kind": "boolean", "value": false }
+            }
+          }
+        }
+      },
+      "commands": [
+        {
+          "kind": "object.set",
+          "path": [{ "kind": "field", "key": "profile" }],
+          "key": "active",
+          "value": { "kind": "boolean", "value": true }
+        }
+      ],
+      "expect": {
+        "kind": "object",
+        "fields": {
+          "profile": {
+            "kind": "object",
+            "fields": {
+              "active": { "kind": "boolean", "value": true }
+            }
+          }
+        }
+      }
+    },
+    {
+      "name": "delete existing field from object",
+      "initial": {
+        "kind": "object",
+        "fields": {
+          "title": { "kind": "string", "value": "Hello" },
+          "count": { "kind": "number", "value": 1 }
+        }
+      },
+      "commands": [
+        {
+          "kind": "object.delete",
+          "path": [],
+          "key": "title"
+        }
+      ],
+      "expect": {
+        "kind": "object",
+        "fields": {
+          "count": { "kind": "number", "value": 1 }
+        }
+      }
+    },
+    {
+      "name": "set deep field inside array item object",
+      "initial": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "old" }
+              }
+            }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "object.set",
+          "path": [{ "kind": "item", "id": "i1" }],
+          "key": "title",
+          "value": { "kind": "string", "value": "new" }
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "new" }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "reject object command on scalar target",
+      "initial": { "kind": "string", "value": "x" },
+      "commands": [
+        {
+          "kind": "object.set",
+          "path": [],
+          "key": "title",
+          "value": { "kind": "string", "value": "Hello" }
+        }
+      ],
+      "error": { "code": "type_mismatch" }
+    },
+    {
+      "name": "reject object.delete when field is missing",
+      "initial": {
+        "kind": "object",
+        "fields": {}
+      },
+      "commands": [
+        {
+          "kind": "object.delete",
+          "path": [],
+          "key": "missing"
+        }
+      ],
+      "error": { "code": "missing_field" }
+    }
+  ]
+}
diff --git a/packages/mimic-core/tests/fixtures/trees.json b/packages/mimic-core/tests/fixtures/trees.json
new file mode 100644
index 000000000..d0709fc06
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/trees.json
@@ -0,0 +1,453 @@
+{
+  "version": 1,
+  "suite": "trees",
+  "cases": [
+    {
+      "name": "insert first root-level node into empty tree",
+      "initial": {
+        "kind": "tree",
+        "nodes": []
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Node 1" }
+              }
+            }
+          }
+        }
+      ],
+      "expect": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Node 1" }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "insert nested child node",
+      "initial": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Parent" }
+              }
+            }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n2",
+            "parent": "n1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Child" }
+              }
+            }
+          }
+        }
+      ],
+      "expect": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Parent" }
+              }
+            }
+          },
+          {
+            "id": "n2",
+            "parent": "n1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Child" }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "move subtree under new parent",
+      "initial": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "A" }
+              }
+            }
+          },
+          {
+            "id": "n2",
+            "parent": "$root",
+            "pos": "a1",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "B" }
+              }
+            }
+          },
+          {
+            "id": "n3",
+            "parent": "n1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Leaf" }
+              }
+            }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "tree.move",
+          "path": [],
+          "id": "n3",
+          "parent": "n2",
+          "pos": "a0"
+        }
+      ],
+      "expect": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "A" }
+              }
+            }
+          },
+          {
+            "id": "n2",
+            "parent": "$root",
+            "pos": "a1",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "B" }
+              }
+            }
+          },
+          {
+            "id": "n3",
+            "parent": "n2",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "Leaf" }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "delete node removes entire subtree",
+      "initial": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "A" }
+              }
+            }
+          },
+          {
+            "id": "n2",
+            "parent": "n1",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "B" }
+              }
+            }
+          },
+          {
+            "id": "n3",
+            "parent": "n2",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "C" }
+              }
+            }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "tree.delete",
+          "path": [],
+          "id": "n2"
+        }
+      ],
+      "expect": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "title": { "kind": "string", "value": "A" }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "edit nested field inside node value object",
+      "initial": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "done": { "kind": "boolean", "value": false }
+              }
+            }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "value.set",
+          "path": [
+            { "kind": "node", "id": "n1" },
+            { "kind": "field", "key": "done" }
+          ],
+          "value": { "kind": "boolean", "value": true }
+        }
+      ],
+      "expect": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {
+                "done": { "kind": "boolean", "value": true }
+              }
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "reject tree insert with missing parent",
+      "initial": {
+        "kind": "tree",
+        "nodes": []
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n1",
+            "parent": "missing",
+            "pos": "a0",
+            "value": {
+              "kind": "object",
+              "fields": {}
+            }
+          }
+        }
+      ],
+      "error": { "code": "invalid_tree_parent" }
+    },
+    {
+      "name": "reject move that creates a cycle",
+      "initial": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": { "kind": "object", "fields": {} }
+          },
+          {
+            "id": "n2",
+            "parent": "n1",
+            "pos": "a0",
+            "value": { "kind": "object", "fields": {} }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "tree.move",
+          "path": [],
+          "id": "n1",
+          "parent": "n2",
+          "pos": "a0"
+        }
+      ],
+      "error": { "code": "tree_cycle" }
+    },
+    {
+      "name": "reject duplicate node id on insert",
+      "initial": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": { "kind": "object", "fields": {} }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a1",
+            "value": { "kind": "object", "fields": {} }
+          }
+        }
+      ],
+      "error": { "code": "duplicate_tree_node_id" }
+    },
+    {
+      "name": "reject duplicate sibling position on insert",
+      "initial": {
+        "kind": "tree",
+        "nodes": [
+          {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": { "kind": "object", "fields": {} }
+          }
+        ]
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n2",
+            "parent": "$root",
+            "pos": "a0",
+            "value": { "kind": "object", "fields": {} }
+          }
+        }
+      ],
+      "error": { "code": "duplicate_tree_pos" }
+    },
+    {
+      "name": "reject tree node value that is not an object",
+      "initial": {
+        "kind": "tree",
+        "nodes": []
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "n1",
+            "parent": "$root",
+            "pos": "a0",
+            "value": { "kind": "string", "value": "bad" }
+          }
+        }
+      ],
+      "error": { "code": "tree_node_value_must_be_object" }
+    },
+    {
+      "name": "reject reserved root identifier as node id",
+      "initial": {
+        "kind": "tree",
+        "nodes": []
+      },
+      "commands": [
+        {
+          "kind": "tree.insert",
+          "path": [],
+          "node": {
+            "id": "$root",
+            "parent": "$root",
+            "pos": "a0",
+            "value": { "kind": "object", "fields": {} }
+          }
+        }
+      ],
+      "error": { "code": "reserved_identifier" }
+    }
+  ]
+}
diff --git a/packages/mimic-core/tests/fixtures/values.json b/packages/mimic-core/tests/fixtures/values.json
new file mode 100644
index 000000000..2b360c4d3
--- /dev/null
+++ b/packages/mimic-core/tests/fixtures/values.json
@@ -0,0 +1,103 @@
+{
+  "version": 1,
+  "suite": "values",
+  "cases": [
+    {
+      "name": "replace root scalar with another scalar",
+      "initial": { "kind": "string", "value": "before" },
+      "commands": [
+        {
+          "kind": "value.set",
+          "path": [],
+          "value": { "kind": "string", "value": "after" }
+        }
+      ],
+      "expect": { "kind": "string", "value": "after" }
+    },
+    {
+      "name": "replace root object with array",
+      "initial": {
+        "kind": "object",
+        "fields": {
+          "title": { "kind": "string", "value": "old" }
+        }
+      },
+      "commands": [
+        {
+          "kind": "value.set",
+          "path": [],
+          "value": {
+            "kind": "array",
+            "items": [
+              {
+                "id": "i1",
+                "pos": "a0",
+                "value": { "kind": "number", "value": 1 }
+              }
+            ]
+          }
+        }
+      ],
+      "expect": {
+        "kind": "array",
+        "items": [
+          {
+            "id": "i1",
+            "pos": "a0",
+            "value": { "kind": "number", "value": 1 }
+          }
+        ]
+      }
+    },
+    {
+      "name": "replace existing nested scalar through field path",
+      "initial": {
+        "kind": "object",
+        "fields": {
+          "profile": {
+            "kind": "object",
+            "fields": {
+              "name": { "kind": "string", "value": "Alice" }
+            }
+          }
+        }
+      },
+      "commands": [
+        {
+          "kind": "value.set",
+          "path": [
+            { "kind": "field", "key": "profile" },
+            { "kind": "field", "key": "name" }
+          ],
+          "value": { "kind": "string", "value": "Bob" }
+        }
+      ],
+      "expect": {
+        "kind": "object",
+        "fields": {
+          "profile": {
+            "kind": "object",
+            "fields": {
+              "name": { "kind": "string", "value": "Bob" }
+            }
+          }
+        }
+      }
+    },
+    {
+      "name": "reject value.set when target field does not exist",
+      "initial": {
+        "kind": "object",
+        "fields": {}
+      },
+      "commands": [
+        {
+          "kind": "value.set",
+          "path": [{ "kind": "field", "key": "missing" }],
+          "value": { "kind": "string", "value": "x" }
+        }
+      ],
+      "error": { "code": "missing_field" }
+    }
+  ]
+}
diff --git a/packages/mimic-core/tests/primitives/array.test.ts b/packages/mimic-core/tests/primitives/array.test.ts
new file mode 100644
index 000000000..97874d4b3
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/array.test.ts
@@ -0,0 +1,46 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch } from "../../src/index.js";
+
+describe("primitives array", () => {
+  it("builds array schemas and ordered snapshots", () => {
+    const primitive = Primitive.Array(Primitive.String()).minLength(1);
+    expect(primitive.schema).toEqual({
+      kind: "array",
+      element: { kind: "string" },
+      validators: [{ kind: "minLength", value: 1 }],
+    });
+  });
+
+  it("supports push, staged reads, and nested updates", () => {
+    const primitive = Primitive.Array(
+      Primitive.Struct({
+        title: Primitive.String().required(),
+      }),
+    );
+    const snapshot = primitive.encode([{ title: "A" }]);
+
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      const inserted = root.push({ title: "B" });
+      inserted.value.title.set("B2");
+      root.first()?.value.title.set("A1");
+    });
+
+    const decoded = primitive.decode(applyBatch(snapshot, commands));
+    expect(decoded?.map((entry) => entry.value?.title)).toEqual(["A1", "B2"]);
+  });
+
+  it("supports moves based on staged ordering", () => {
+    const primitive = Primitive.Array(Primitive.String());
+    const snapshot = primitive.encode(["A", "B", "C"]);
+
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      const last = root.last();
+      if (last) {
+        root.move(last.id, 1);
+      }
+    });
+
+    const decoded = primitive.decode(applyBatch(snapshot, commands));
+    expect(decoded?.map((entry) => entry.value)).toEqual(["A", "C", "B"]);
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/boolean.test.ts b/packages/mimic-core/tests/primitives/boolean.test.ts
new file mode 100644
index 000000000..9fad2a6c8
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/boolean.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, booleanValue } from "../../src/index.js";
+
+describe("primitives boolean", () => {
+  it("builds boolean schemas and defaults", () => {
+    const primitive = Primitive.Boolean().required().default(true);
+    expect(primitive.schema).toEqual({
+      kind: "boolean",
+      required: true,
+      default: booleanValue(true),
+    });
+  });
+
+  it("encodes and decodes booleans", () => {
+    const primitive = Primitive.Boolean();
+    expect(primitive.encode(true)).toEqual(booleanValue(true));
+    expect(primitive.decode(booleanValue(false))).toBe(false);
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/commands.test.ts b/packages/mimic-core/tests/primitives/commands.test.ts
new file mode 100644
index 000000000..b4a6113b5
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/commands.test.ts
@@ -0,0 +1,33 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch } from "../../src/index.js";
+
+describe("primitives command sessions", () => {
+  it("returns ordered command batches and exposes staged reads", () => {
+    const Document = Primitive.Struct({
+      items: Primitive.Array(
+        Primitive.Struct({
+          name: Primitive.String().required(),
+        }),
+      ),
+    });
+
+    const snapshot = Document.encode({
+      items: [],
+    });
+
+    const commands = Primitive.commands(Document, snapshot, (root) => {
+      const inserted = root.items.push({ name: "Draft" });
+      inserted.value.name.set("Final");
+      root.items.first()?.value.name.set("Published");
+    });
+
+    expect(commands).toHaveLength(3);
+    expect(Document.decode(applyBatch(snapshot, commands))).toEqual({
+      items: [
+        expect.objectContaining({
+          value: { name: "Published" },
+        }),
+      ],
+    });
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/either.test.ts b/packages/mimic-core/tests/primitives/either.test.ts
new file mode 100644
index 000000000..2a2668662
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/either.test.ts
@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch, numberValue } from "../../src/index.js";
+
+describe("primitives either", () => {
+  it("builds portable either schemas", () => {
+    const primitive = Primitive.Either(Primitive.String(), Primitive.Number());
+    expect(primitive.schema).toEqual({
+      kind: "either",
+      variants: [{ kind: "string" }, { kind: "number" }],
+    });
+  });
+
+  it("encodes matching variants and emits value replacement commands", () => {
+    const primitive = Primitive.Either(Primitive.String(), Primitive.Number());
+    const snapshot = primitive.encode("hello");
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      root.set(1);
+    });
+
+    expect(primitive.decode(applyBatch(snapshot, commands))).toBe(1);
+    expect(commands).toEqual([{ kind: "value.set", path: [], value: numberValue(1) }]);
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/lazy.test.ts b/packages/mimic-core/tests/primitives/lazy.test.ts
new file mode 100644
index 000000000..9995d5beb
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/lazy.test.ts
@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch } from "../../src/index.js";
+
+describe("primitives lazy", () => {
+  it("delegates schema, encode, and command creation to the resolved primitive", () => {
+    const primitive = Primitive.Lazy(() => Primitive.String().default("hello"));
+    const snapshot = primitive.encode("hello");
+
+    expect(primitive.schema).toEqual({
+      kind: "string",
+      default: { kind: "string", value: "hello" },
+    });
+
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      root.set("world");
+    });
+
+    expect(primitive.decode(applyBatch(snapshot, commands))).toBe("world");
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/literal.test.ts b/packages/mimic-core/tests/primitives/literal.test.ts
new file mode 100644
index 000000000..8110ee48d
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/literal.test.ts
@@ -0,0 +1,25 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch, stringValue } from "../../src/index.js";
+
+describe("primitives literal", () => {
+  it("builds literal schemas", () => {
+    const primitive = Primitive.Literal("text").required().default("text");
+    expect(primitive.schema).toEqual({
+      kind: "literal",
+      required: true,
+      value: "text",
+      default: stringValue("text"),
+    });
+  });
+
+  it("emits literal replacement commands", () => {
+    const primitive = Primitive.Literal("text");
+    const snapshot = primitive.encode("text");
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      root.set("text");
+    });
+
+    expect(commands).toEqual([{ kind: "value.set", path: [], value: stringValue("text") }]);
+    expect(primitive.decode(applyBatch(snapshot, commands))).toBe("text");
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/number.test.ts b/packages/mimic-core/tests/primitives/number.test.ts
new file mode 100644
index 000000000..1352c4e9b
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/number.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, numberValue } from "../../src/index.js";
+
+describe("primitives number", () => {
+  it("builds number schemas with validators", () => {
+    const primitive = Primitive.Number().required().min(0).max(10).int();
+    expect(primitive.schema).toEqual({
+      kind: "number",
+      required: true,
+      validators: [{ kind: "min", value: 0 }, { kind: "max", value: 10 }, { kind: "int" }],
+    });
+  });
+
+  it("encodes and decodes numbers", () => {
+    const primitive = Primitive.Number().default(1);
+    expect(primitive.encode(2)).toEqual(numberValue(2));
+    expect(primitive.decode(numberValue(2))).toBe(2);
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/schema-interop.test.ts b/packages/mimic-core/tests/primitives/schema-interop.test.ts
new file mode 100644
index 000000000..d73332560
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/schema-interop.test.ts
@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch, parseSchema, serializeSchema, validate } from "../../src/index.js";
+
+describe("primitives schema interop", () => {
+  it("roundtrips primitive schemas and validates command results", () => {
+    const primitive = Primitive.Struct({
+      title: Primitive.String().required(),
+      done: Primitive.Boolean().default(false),
+    });
+    const snapshot = primitive.encode({ title: "A" });
+
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      root.done.set(true);
+    });
+
+    const next = applyBatch(snapshot, commands);
+    expect(serializeSchema(parseSchema(serializeSchema(primitive.schema)))).toEqual(
+      serializeSchema(primitive.schema),
+    );
+    expect(validate(primitive.schema, next)).toEqual(next);
+    expect(primitive.decode(next)).toEqual({ title: "A", done: true });
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/snapshot-types.test.ts b/packages/mimic-core/tests/primitives/snapshot-types.test.ts
new file mode 100644
index 000000000..0933d81e9
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/snapshot-types.test.ts
@@ -0,0 +1,158 @@
+import { describe, expect, expectTypeOf, it } from "vitest";
+import { Primitive } from "../../src/index.js";
+
+type EmptyObject = {};
+
+type IsOptionalKey<T, K extends keyof T> = EmptyObject extends Pick<T, K> ? true : false;
+
+type HasUndefined<T> = undefined extends T ? true : false;
+
+describe("snapshot typing", () => {
+  describe("struct fields", () => {
+    const User = Primitive.Struct({
+      name: Primitive.String().required(),
+      active: Primitive.Boolean().default(false),
+      age: Primitive.Number(),
+      role: Primitive.Literal("admin").default("admin"),
+    });
+    type Snapshot = NonNullable<Primitive.InferSnapshot<typeof User>>;
+
+    it("snapshots required fields as non-optional", () => {
+      expectTypeOf<Snapshot["name"]>().toEqualTypeOf<string>();
+      expectTypeOf<IsOptionalKey<Snapshot, "name">>().toEqualTypeOf<false>();
+    });
+
+    it("snapshots defaulted fields as non-optional", () => {
+      expectTypeOf<Snapshot["active"]>().toEqualTypeOf<boolean>();
+      expectTypeOf<IsOptionalKey<Snapshot, "active">>().toEqualTypeOf<false>();
+      expectTypeOf<Snapshot["role"]>().toEqualTypeOf<"admin">();
+      expectTypeOf<IsOptionalKey<Snapshot, "role">>().toEqualTypeOf<false>();
+    });
+
+    it("keeps optional-without-default fields optional", () => {
+      expectTypeOf<Snapshot["age"]>().toEqualTypeOf<number | undefined>();
+      expectTypeOf<IsOptionalKey<Snapshot, "age">>().toEqualTypeOf<true>();
+    });
+
+    it("decodes defaults materialized by encode", () => {
+      const decoded = User.encode({ name: "Alice" });
+      expect(User.decode(decoded)).toEqual({
+        name: "Alice",
+        active: false,
+        role: "admin",
+      });
+    });
+  });
+
+  describe("struct snapshot presence", () => {
+    it("keeps a plain struct snapshot possibly undefined", () => {
+      const Profile = Primitive.Struct({ title: Primitive.String() });
+      expectTypeOf<HasUndefined<Primitive.InferSnapshot<typeof Profile>>>().toEqualTypeOf<true>();
+    });
+
+    it("makes required and defaulted struct snapshots non-undefined", () => {
+      const RequiredProfile = Primitive.Struct({ title: Primitive.String() }).required();
+      expectTypeOf<
+        HasUndefined<Primitive.InferSnapshot<typeof RequiredProfile>>
+      >().toEqualTypeOf<false>();
+
+      const DefaultedProfile = Primitive.Struct({ title: Primitive.String() }).default({});
+      expectTypeOf<
+        HasUndefined<Primitive.InferSnapshot<typeof DefaultedProfile>>
+      >().toEqualTypeOf<false>();
+    });
+
+    it("threads nested struct optionality into the parent snapshot", () => {
+      const Doc = Primitive.Struct({
+        profile: Primitive.Struct({ title: Primitive.String().default("member") }).default({}),
+        settings: Primitive.Struct({ dark: Primitive.Boolean() }).required(),
+        meta: Primitive.Struct({ tag: Primitive.String() }),
+      });
+      type Snapshot = NonNullable<Primitive.InferSnapshot<typeof Doc>>;
+
+      expectTypeOf<IsOptionalKey<Snapshot, "profile">>().toEqualTypeOf<false>();
+      expectTypeOf<Snapshot["profile"]["title"]>().toEqualTypeOf<string>();
+      expectTypeOf<IsOptionalKey<Snapshot, "settings">>().toEqualTypeOf<false>();
+      expectTypeOf<IsOptionalKey<Snapshot, "meta">>().toEqualTypeOf<true>();
+    });
+  });
+
+  describe("either fields", () => {
+    it("snapshots a defaulted either as non-optional", () => {
+      const Width = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default(100);
+      expectTypeOf<Primitive.InferSnapshot<typeof Width>>().toEqualTypeOf<number | "auto">();
+    });
+
+    it("keeps a plain either optional", () => {
+      const Width = Primitive.Either(Primitive.Number(), Primitive.Literal("auto"));
+      expectTypeOf<Primitive.InferSnapshot<typeof Width>>().toEqualTypeOf<
+        number | "auto" | undefined
+      >();
+    });
+  });
+
+  describe("array and union fields", () => {
+    it("snapshots required/defaulted arrays and unions as non-optional struct fields", () => {
+      const Variant = Primitive.Struct({ label: Primitive.String().required() });
+      const Doc = Primitive.Struct({
+        tags: Primitive.Array(Primitive.String().required()).required(),
+        history: Primitive.Array(Primitive.Number()).default([]),
+        extras: Primitive.Array(Primitive.String()),
+        kind: Primitive.Union({ a: Variant }).required(),
+        fallbackKind: Primitive.Union({ a: Variant }),
+      });
+      type Snapshot = NonNullable<Primitive.InferSnapshot<typeof Doc>>;
+
+      expectTypeOf<IsOptionalKey<Snapshot, "tags">>().toEqualTypeOf<false>();
+      expectTypeOf<Snapshot["tags"]>().toEqualTypeOf<
+        readonly Primitive.ArrayEntrySnapshot<string>[]
+      >();
+      expectTypeOf<IsOptionalKey<Snapshot, "history">>().toEqualTypeOf<false>();
+      expectTypeOf<IsOptionalKey<Snapshot, "extras">>().toEqualTypeOf<true>();
+      expectTypeOf<IsOptionalKey<Snapshot, "kind">>().toEqualTypeOf<false>();
+      expectTypeOf<IsOptionalKey<Snapshot, "fallbackKind">>().toEqualTypeOf<true>();
+    });
+  });
+
+  describe("tree node data", () => {
+    const FlexData = Primitive.Struct({
+      title: Primitive.String().required(),
+      gap: Primitive.Number().default(0),
+      hint: Primitive.String(),
+    }).required();
+    const FlexNode = Primitive.TreeNode("flex", { data: FlexData, children: [] });
+    const Doc = Primitive.Tree({ root: FlexNode });
+
+    it("snapshots required node data as non-optional", () => {
+      type NodeSnapshot = NonNullable<Primitive.InferSnapshot<typeof Doc>>[number];
+      expectTypeOf<HasUndefined<NodeSnapshot["data"]>>().toEqualTypeOf<false>();
+      expectTypeOf<NodeSnapshot["data"]["title"]>().toEqualTypeOf<string>();
+      expectTypeOf<NodeSnapshot["data"]["gap"]>().toEqualTypeOf<number>();
+      expectTypeOf<NodeSnapshot["data"]["hint"]>().toEqualTypeOf<string | undefined>();
+    });
+
+    it("keeps an absent tree snapshot possibly undefined", () => {
+      expectTypeOf<HasUndefined<Primitive.InferSnapshot<typeof Doc>>>().toEqualTypeOf<true>();
+    });
+
+    it("types node update as the partial struct-update input", () => {
+      type UpdateArg = Parameters<Primitive.TypedNodeProxy<typeof FlexNode>["update"]>[0];
+
+      expectTypeOf<Record<string, never>>().toExtend<UpdateArg>();
+      expectTypeOf<{ gap: number }>().toExtend<UpdateArg>();
+      expectTypeOf<{ hint: undefined }>().toExtend<UpdateArg>();
+      expectTypeOf<{ title: string; gap: number; hint: string }>().toExtend<UpdateArg>();
+      expectTypeOf<UpdateArg>().toEqualTypeOf<
+        Primitive.InferUpdateInput<Primitive.InferTreeNodeData<typeof FlexNode>>
+      >();
+    });
+
+    it("applies partial node updates at runtime", () => {
+      const initial = Doc.encode([{ type: "flex", title: "Root", children: [] }]);
+      const commands = Primitive.commands(Doc, initial, (root) => {
+        root.children.first()!.update({ gap: 12 });
+      });
+      expect(commands.length).toBeGreaterThan(0);
+    });
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/string.test.ts b/packages/mimic-core/tests/primitives/string.test.ts
new file mode 100644
index 000000000..c41875b2b
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/string.test.ts
@@ -0,0 +1,36 @@
+import { describe, expect, it } from "vitest";
+import {
+  Primitive,
+  applyBatch,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  validate,
+} from "../../src/index.js";
+
+describe("primitives string", () => {
+  it("builds portable string schemas", () => {
+    const primitive = Primitive.String().required().default("hello").min(2).max(10).regex(/^h/);
+
+    expect(serializeSchema(parseSchema(serializeSchema(primitive.schema)))).toEqual(
+      serializeSchema(primitive.schema),
+    );
+  });
+
+  it("encodes, decodes, and emits scalar commands", () => {
+    const primitive = Primitive.String().default("hello");
+    const snapshot = primitive.encode("hello");
+
+    expect(primitive.decode(snapshot)).toBe("hello");
+
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      root.set("world");
+    });
+
+    expect(commands).toEqual([{ kind: "value.set", path: [], value: stringValue("world") }]);
+    expect(primitive.decode(applyBatch(snapshot, commands))).toBe("world");
+    expect(validate(primitive.schema, applyBatch(snapshot, commands))).toEqual(
+      stringValue("world"),
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/struct.test.ts b/packages/mimic-core/tests/primitives/struct.test.ts
new file mode 100644
index 000000000..7aa680e73
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/struct.test.ts
@@ -0,0 +1,134 @@
+import { describe, expect, expectTypeOf, it } from "vitest";
+import { Primitive, applyBatch, validate } from "../../src/index.js";
+
+describe("primitives struct", () => {
+  it("builds object schemas from field primitives", () => {
+    const User = Primitive.Struct({
+      name: Primitive.String().required(),
+      active: Primitive.Boolean().default(false),
+    });
+
+    expect(User.schema).toEqual({
+      kind: "object",
+      fields: {
+        name: { kind: "string", required: true },
+        active: { kind: "boolean", default: { kind: "boolean", value: false } },
+      },
+    });
+  });
+
+  it("encodes defaults and supports nested field updates", () => {
+    const User = Primitive.Struct({
+      name: Primitive.String().required(),
+      profile: Primitive.Struct({
+        title: Primitive.String().default("member"),
+      }),
+      active: Primitive.Boolean().default(false),
+    });
+
+    const snapshot = User.encode({
+      name: "Alice",
+      profile: {},
+    });
+
+    const commands = Primitive.commands(User, snapshot, (root) => {
+      root.name.set("Bob");
+      root.profile.update({ title: "admin" });
+      root.update({ active: undefined });
+    });
+
+    const next = applyBatch(snapshot, commands);
+    const decoded = User.decode(next);
+
+    expect(decoded).toEqual({
+      name: "Bob",
+      profile: { title: "admin" },
+    });
+  });
+
+  it("makes child fields optional via partial", () => {
+    const User = Primitive.Struct({
+      name: Primitive.String().required().default("Anonymous"),
+      email: Primitive.String().required(),
+    }).partial({ stripDefaults: true });
+
+    expect(User.encode({})).toEqual({
+      kind: "object",
+      fields: {},
+    });
+  });
+
+  describe("update input typing", () => {
+    const User = Primitive.Struct({
+      name: Primitive.String().required(),
+      nickname: Primitive.String(),
+      active: Primitive.Boolean().default(false),
+      profile: Primitive.Struct({
+        title: Primitive.String().required(),
+        bio: Primitive.String(),
+      }),
+    });
+    type UpdateInput = Primitive.InferUpdateInput<typeof User>;
+
+    it("declares deletion only for optional and defaulted fields", () => {
+      expectTypeOf<Required<UpdateInput>["name"]>().toEqualTypeOf<string>();
+      expectTypeOf<Required<UpdateInput>["nickname"]>().toEqualTypeOf<string | undefined>();
+      expectTypeOf<Required<UpdateInput>["active"]>().toEqualTypeOf<boolean | undefined>();
+    });
+
+    it("rejects update calls deleting a required field without a default", () => {
+      // Never invoked — type-level pin that the calls below fail to compile.
+      const _rejected = (root: Primitive.InferProxy<typeof User>) => {
+        // @ts-expect-error name is required without a default and cannot be deleted
+        root.update({ name: undefined });
+        // @ts-expect-error nested required-without-default fields cannot be deleted either
+        root.update({ profile: { title: undefined } });
+      };
+      expect(typeof _rejected).toBe("function");
+    });
+
+    it("deletes optional fields and re-materializes defaulted fields on update", () => {
+      const snapshot = User.encode({
+        name: "Alice",
+        nickname: "Al",
+        active: true,
+        profile: { title: "Dev" },
+      });
+
+      const commands = Primitive.commands(User, snapshot, (root) => {
+        root.update({ nickname: undefined, active: undefined });
+        root.update({ profile: { bio: undefined } });
+      });
+
+      const next = validate(User.schema, applyBatch(snapshot, commands));
+      expect(User.decode(next)).toEqual({
+        name: "Alice",
+        active: false,
+        profile: { title: "Dev" },
+      });
+    });
+  });
+
+  describe("partial/extend default typing", () => {
+    type HasUndefined<T> = undefined extends T ? true : false;
+    const Defaulted = Primitive.Struct({ title: Primitive.String() }).default({});
+
+    it("drops the struct default from the partial() result type", () => {
+      const Partialed = Defaulted.partial({ stripDefaults: true });
+      expectTypeOf<HasUndefined<Primitive.InferSnapshot<typeof Partialed>>>().toEqualTypeOf<true>();
+      expect("default" in Partialed.schema).toBe(false);
+
+      const Restored = Defaulted.partial({ stripDefaults: true }).default({});
+      expectTypeOf<HasUndefined<Primitive.InferSnapshot<typeof Restored>>>().toEqualTypeOf<false>();
+    });
+
+    it("drops the struct default from the extend() result type", () => {
+      const Extended = Defaulted.extend({ extra: Primitive.String() });
+      expectTypeOf<HasUndefined<Primitive.InferSnapshot<typeof Extended>>>().toEqualTypeOf<true>();
+      expect("default" in Extended.schema).toBe(false);
+
+      const Restored = Defaulted.extend({ extra: Primitive.String() }).default({});
+      expectTypeOf<HasUndefined<Primitive.InferSnapshot<typeof Restored>>>().toEqualTypeOf<false>();
+    });
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/tree-node.test.ts b/packages/mimic-core/tests/primitives/tree-node.test.ts
new file mode 100644
index 000000000..a12f31ee8
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/tree-node.test.ts
@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import { Primitive } from "../../src/index.js";
+
+describe("primitives tree node", () => {
+  it("resolves TreeNodeSelf in children", () => {
+    const Folder = Primitive.TreeNode("folder", {
+      data: Primitive.Struct({
+        name: Primitive.String().required(),
+      }),
+      children: [Primitive.TreeNodeSelf],
+    });
+
+    expect(Folder.children).toHaveLength(1);
+    expect(Folder.children[0]).toBe(Folder);
+    expect(Folder.isChildAllowed("folder")).toBe(true);
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/tree.test.ts b/packages/mimic-core/tests/primitives/tree.test.ts
new file mode 100644
index 000000000..aab5fd0bf
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/tree.test.ts
@@ -0,0 +1,49 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch } from "../../src/index.js";
+
+describe("primitives tree", () => {
+  const FileNode = Primitive.TreeNode("file", {
+    data: Primitive.Struct({
+      name: Primitive.String().required(),
+    }),
+    children: [],
+  });
+
+  const FolderNode = Primitive.TreeNode("folder", {
+    data: Primitive.Struct({
+      name: Primitive.String().required(),
+    }),
+    children: [Primitive.TreeNodeSelf, FileNode],
+  });
+
+  it("builds tree schemas from node graphs", () => {
+    const primitive = Primitive.Tree({ root: FolderNode });
+    expect(primitive.schema.kind).toBe("tree");
+    expect(primitive.schema.variants.folder.children).toEqual(["folder", "file"]);
+  });
+
+  it("supports staged inserts and nested data updates", () => {
+    const primitive = Primitive.Tree({ root: FolderNode });
+    const snapshot = primitive.encode([
+      {
+        type: "folder",
+        name: "root",
+        children: [],
+      },
+    ]);
+
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      const folder = root.children.first();
+      folder?.data.name.set("workspace");
+      const inserted = folder?.children.insertLast({
+        type: "file",
+        name: "notes.md",
+      });
+      inserted?.data.name.set("notes-1.md");
+    });
+
+    const decoded = primitive.decode(applyBatch(snapshot, commands));
+    expect(decoded?.[0]?.data.name).toBe("workspace");
+    expect(decoded?.[0]?.children[0]?.data.name).toBe("notes-1.md");
+  });
+});
diff --git a/packages/mimic-core/tests/primitives/union.test.ts b/packages/mimic-core/tests/primitives/union.test.ts
new file mode 100644
index 000000000..c09647bea
--- /dev/null
+++ b/packages/mimic-core/tests/primitives/union.test.ts
@@ -0,0 +1,50 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch } from "../../src/index.js";
+
+describe("primitives union", () => {
+  const Text = Primitive.Struct({
+    value: Primitive.String().required(),
+  });
+
+  const Image = Primitive.Struct({
+    url: Primitive.String().required(),
+  });
+
+  it("injects discriminator schema fields", () => {
+    const primitive = Primitive.Union({ text: Text, image: Image });
+    expect(primitive.schema).toEqual({
+      kind: "union",
+      discriminator: "type",
+      variants: {
+        text: {
+          kind: "object",
+          fields: {
+            value: { kind: "string", required: true },
+            type: { kind: "literal", value: "text" },
+          },
+        },
+        image: {
+          kind: "object",
+          fields: {
+            url: { kind: "string", required: true },
+            type: { kind: "literal", value: "image" },
+          },
+        },
+      },
+    });
+  });
+
+  it("supports active variant proxies", () => {
+    const primitive = Primitive.Union({ text: Text, image: Image });
+    const snapshot = primitive.encode({ type: "text", value: "hello" });
+
+    const commands = Primitive.commands(primitive, snapshot, (root) => {
+      root.as("text").value.set("world");
+    });
+
+    expect(primitive.decode(applyBatch(snapshot, commands))).toEqual({
+      type: "text",
+      value: "world",
+    });
+  });
+});
diff --git a/packages/mimic-core/tests/schema/array.test.ts b/packages/mimic-core/tests/schema/array.test.ts
new file mode 100644
index 000000000..6f66fd6b3
--- /dev/null
+++ b/packages/mimic-core/tests/schema/array.test.ts
@@ -0,0 +1,146 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  arrayValue,
+  booleanValue,
+  materializeDefault,
+  objectValue,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema array model", () => {
+  it("parses and serializes arrays", () => {
+    const schema = parseSchema({
+      kind: "array",
+      required: true,
+      element: { kind: "string" },
+      validators: [{ kind: "minLength", value: 1 }],
+      default: {
+        kind: "array",
+        items: [{ id: "a", pos: "a0", value: { kind: "string", value: "x" } }],
+      },
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "array",
+      required: true,
+      element: { kind: "string" },
+      validators: [{ kind: "minLength", value: 1 }],
+      default: {
+        kind: "array",
+        items: [{ id: "a", pos: "a0", value: { kind: "string", value: "x" } }],
+      },
+    });
+  });
+
+  it("sanitizes items recursively while preserving ids and positions", () => {
+    const schema = parseSchema({
+      kind: "array",
+      element: {
+        kind: "object",
+        fields: {
+          title: { kind: "string" },
+          done: { kind: "boolean", default: { kind: "boolean", value: false } },
+        },
+      },
+    });
+
+    expect(
+      validate(
+        schema,
+        arrayValue([
+          {
+            id: "i1",
+            pos: "a0",
+            value: objectValue({
+              title: stringValue("A"),
+              extra: stringValue("remove"),
+            }),
+          },
+        ]),
+      ),
+    ).toEqual(
+      arrayValue([
+        {
+          id: "i1",
+          pos: "a0",
+          value: objectValue({
+            title: stringValue("A"),
+            done: booleanValue(false),
+          }),
+        },
+      ]),
+    );
+  });
+
+  it.each([
+    [{ kind: "minLength", value: 2 }, 1],
+    [{ kind: "maxLength", value: 0 }, 1],
+  ] as const)("enforces array validator %o", (validator, count) => {
+    const schema = parseSchema({
+      kind: "array",
+      element: { kind: "string" },
+      validators: [validator],
+    });
+
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          schema,
+          arrayValue(
+            Array.from({ length: count }, (_, index) => ({
+              id: `i${index}`,
+              pos: `a${index}`,
+              value: stringValue(`v${index}`),
+            })),
+          ),
+        ),
+      SchemaErrorCodes.ValidatorFailed,
+    );
+  });
+
+  it("materializes explicit defaults", () => {
+    const schema = parseSchema({
+      kind: "array",
+      element: { kind: "string" },
+      default: {
+        kind: "array",
+        items: [{ id: "i1", pos: "a0", value: { kind: "string", value: "hello" } }],
+      },
+    });
+
+    expect(materializeDefault(schema)).toEqual(
+      arrayValue([{ id: "i1", pos: "a0", value: stringValue("hello") }]),
+    );
+  });
+
+  it("throws missing_required for required arrays without defaults", () => {
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          parseSchema({
+            kind: "array",
+            required: true,
+            element: { kind: "string" },
+          }),
+        ),
+      SchemaErrorCodes.MissingRequired,
+    );
+  });
+
+  it("rejects invalid array validators during parse", () => {
+    expectSchemaErrorCode(
+      () =>
+        parseSchema({
+          kind: "array",
+          element: { kind: "string" },
+          validators: [{ kind: "maxLength", value: "x" }],
+        }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/schema/boolean.test.ts b/packages/mimic-core/tests/schema/boolean.test.ts
new file mode 100644
index 000000000..d45318ca7
--- /dev/null
+++ b/packages/mimic-core/tests/schema/boolean.test.ts
@@ -0,0 +1,62 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  booleanValue,
+  materializeDefault,
+  numberValue,
+  parseSchema,
+  serializeSchema,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema boolean model", () => {
+  it("parses and serializes defaults", () => {
+    const schema = parseSchema({
+      kind: "boolean",
+      required: true,
+      default: { kind: "boolean", value: true },
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "boolean",
+      required: true,
+      default: { kind: "boolean", value: true },
+    });
+  });
+
+  it("validates boolean values", () => {
+    expect(validate(parseSchema({ kind: "boolean" }), booleanValue(false))).toEqual(
+      booleanValue(false),
+    );
+  });
+
+  it("rejects non-boolean values", () => {
+    expectSchemaErrorCode(
+      () => validate(parseSchema({ kind: "boolean" }), numberValue(1)),
+      SchemaErrorCodes.TypeMismatch,
+    );
+  });
+
+  it("materializes explicit defaults", () => {
+    expect(
+      materializeDefault(
+        parseSchema({
+          kind: "boolean",
+          default: { kind: "boolean", value: false },
+        }),
+      ),
+    ).toEqual(booleanValue(false));
+  });
+
+  it("returns undefined for optional booleans without defaults", () => {
+    expect(validate(parseSchema({ kind: "boolean" }))).toBeUndefined();
+  });
+
+  it("throws missing_required for required booleans without defaults", () => {
+    expectSchemaErrorCode(
+      () => validate(parseSchema({ kind: "boolean", required: true })),
+      SchemaErrorCodes.MissingRequired,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/schema/either.test.ts b/packages/mimic-core/tests/schema/either.test.ts
new file mode 100644
index 000000000..fa9114d1a
--- /dev/null
+++ b/packages/mimic-core/tests/schema/either.test.ts
@@ -0,0 +1,63 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  numberValue,
+  objectValue,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema either model", () => {
+  it("parses and serializes variants", () => {
+    const schema = parseSchema({
+      kind: "either",
+      required: true,
+      variants: [{ kind: "string" }, { kind: "number" }],
+      default: { kind: "string", value: "hello" },
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "either",
+      required: true,
+      variants: [{ kind: "string" }, { kind: "number" }],
+      default: { kind: "string", value: "hello" },
+    });
+  });
+
+  it("tries variants in order and returns the first match", () => {
+    const schema = parseSchema({
+      kind: "either",
+      variants: [
+        { kind: "number", validators: [{ kind: "int" }] },
+        { kind: "string", validators: [{ kind: "minLength", value: 1 }] },
+      ],
+    });
+
+    expect(validate(schema, numberValue(1))).toEqual(numberValue(1));
+    expect(validate(schema, stringValue("x"))).toEqual(stringValue("x"));
+  });
+
+  it("rejects values that match no variant", () => {
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          parseSchema({
+            kind: "either",
+            variants: [{ kind: "number" }, { kind: "string" }],
+          }),
+          objectValue({}),
+        ),
+      SchemaErrorCodes.EitherNoMatch,
+    );
+  });
+
+  it("rejects invalid variants declarations during parse", () => {
+    expectSchemaErrorCode(
+      () => parseSchema({ kind: "either", variants: {} }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/schema/helpers.ts b/packages/mimic-core/tests/schema/helpers.ts
new file mode 100644
index 000000000..bba9fcf64
--- /dev/null
+++ b/packages/mimic-core/tests/schema/helpers.ts
@@ -0,0 +1,29 @@
+import { expect } from "vitest";
+import { CoreError, type ErrorCode, SchemaError, type SchemaErrorCode } from "../../src/index.js";
+
+export const expectSchemaErrorCode = (
+  operation: () => unknown,
+  code: SchemaErrorCode,
+): SchemaError => {
+  try {
+    operation();
+  } catch (error) {
+    expect(error).toBeInstanceOf(SchemaError);
+    expect((error as SchemaError).code).toBe(code);
+    return error as SchemaError;
+  }
+
+  throw new Error(`Expected SchemaError with code ${code}`);
+};
+
+export const expectCoreErrorCode = (operation: () => unknown, code: ErrorCode): CoreError => {
+  try {
+    operation();
+  } catch (error) {
+    expect(error).toBeInstanceOf(CoreError);
+    expect((error as CoreError).code).toBe(code);
+    return error as CoreError;
+  }
+
+  throw new Error(`Expected CoreError with code ${code}`);
+};
diff --git a/packages/mimic-core/tests/schema/literal.test.ts b/packages/mimic-core/tests/schema/literal.test.ts
new file mode 100644
index 000000000..22f4a6d3c
--- /dev/null
+++ b/packages/mimic-core/tests/schema/literal.test.ts
@@ -0,0 +1,73 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  booleanValue,
+  materializeDefault,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema literal model", () => {
+  it("parses and serializes literal schemas", () => {
+    const schema = parseSchema({
+      kind: "literal",
+      required: true,
+      value: "board",
+      default: { kind: "string", value: "board" },
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "literal",
+      required: true,
+      value: "board",
+      default: { kind: "string", value: "board" },
+    });
+  });
+
+  it("validates matching literals", () => {
+    expect(
+      validate(parseSchema({ kind: "literal", value: "board" }), stringValue("board")),
+    ).toEqual(stringValue("board"));
+  });
+
+  it("rejects mismatched literals", () => {
+    expectSchemaErrorCode(
+      () => validate(parseSchema({ kind: "literal", value: true }), booleanValue(false)),
+      SchemaErrorCodes.LiteralMismatch,
+    );
+  });
+
+  it("rejects invalid literal values during parse", () => {
+    expectSchemaErrorCode(
+      () => parseSchema({ kind: "literal", value: null }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+
+  it("rejects default values that do not match the literal", () => {
+    expectSchemaErrorCode(
+      () =>
+        parseSchema({
+          kind: "literal",
+          value: "board",
+          default: { kind: "string", value: "card" },
+        }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+
+  it("materializes explicit defaults", () => {
+    expect(
+      materializeDefault(
+        parseSchema({
+          kind: "literal",
+          value: "board",
+          default: { kind: "string", value: "board" },
+        }),
+      ),
+    ).toEqual(stringValue("board"));
+  });
+});
diff --git a/packages/mimic-core/tests/schema/number.test.ts b/packages/mimic-core/tests/schema/number.test.ts
new file mode 100644
index 000000000..9bb773fd1
--- /dev/null
+++ b/packages/mimic-core/tests/schema/number.test.ts
@@ -0,0 +1,74 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  materializeDefault,
+  numberValue,
+  parseSchema,
+  serializeSchema,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema number model", () => {
+  it("parses and serializes validators and defaults", () => {
+    const schema = parseSchema({
+      kind: "number",
+      required: true,
+      default: { kind: "number", value: 10 },
+      validators: [{ kind: "min", value: 0 }, { kind: "max", value: 100 }, { kind: "int" }],
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "number",
+      required: true,
+      default: { kind: "number", value: 10 },
+      validators: [{ kind: "min", value: 0 }, { kind: "max", value: 100 }, { kind: "int" }],
+    });
+  });
+
+  it.each([
+    [{ kind: "min", value: 2 }, numberValue(1)],
+    [{ kind: "max", value: 2 }, numberValue(3)],
+    [{ kind: "positive" }, numberValue(0)],
+    [{ kind: "negative" }, numberValue(0)],
+    [{ kind: "int" }, numberValue(1.5)],
+  ] as const)("rejects invalid number for validator %o", (validator, value) => {
+    const schema = parseSchema({
+      kind: "number",
+      validators: [validator],
+    });
+
+    expectSchemaErrorCode(() => validate(schema, value), SchemaErrorCodes.ValidatorFailed);
+  });
+
+  it("materializes explicit defaults", () => {
+    const schema = parseSchema({
+      kind: "number",
+      default: { kind: "number", value: 7 },
+    });
+
+    expect(materializeDefault(schema)).toEqual(numberValue(7));
+  });
+
+  it("returns undefined for optional numbers without defaults", () => {
+    expect(validate(parseSchema({ kind: "number" }))).toBeUndefined();
+  });
+
+  it("throws missing_required for required numbers without defaults", () => {
+    expectSchemaErrorCode(
+      () => validate(parseSchema({ kind: "number", required: true })),
+      SchemaErrorCodes.MissingRequired,
+    );
+  });
+
+  it("rejects invalid validator payloads during parse", () => {
+    expectSchemaErrorCode(
+      () =>
+        parseSchema({
+          kind: "number",
+          validators: [{ kind: "min", value: "x" }],
+        }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/schema/object.test.ts b/packages/mimic-core/tests/schema/object.test.ts
new file mode 100644
index 000000000..98f5a3ae2
--- /dev/null
+++ b/packages/mimic-core/tests/schema/object.test.ts
@@ -0,0 +1,181 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  booleanValue,
+  materializeDefault,
+  numberValue,
+  objectValue,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema object model", () => {
+  it("parses and serializes nested object fields", () => {
+    const schema = parseSchema({
+      kind: "object",
+      required: true,
+      fields: {
+        title: { kind: "string" },
+        meta: {
+          kind: "object",
+          fields: {
+            active: { kind: "boolean", default: { kind: "boolean", value: true } },
+          },
+        },
+      },
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "object",
+      required: true,
+      fields: {
+        title: { kind: "string" },
+        meta: {
+          kind: "object",
+          fields: {
+            active: { kind: "boolean", default: { kind: "boolean", value: true } },
+          },
+        },
+      },
+    });
+  });
+
+  it("prunes unknown fields recursively and inserts nested defaults", () => {
+    const schema = parseSchema({
+      kind: "object",
+      fields: {
+        title: { kind: "string" },
+        meta: {
+          kind: "object",
+          fields: {
+            active: { kind: "boolean", default: { kind: "boolean", value: true } },
+          },
+        },
+      },
+    });
+
+    expect(
+      validate(
+        schema,
+        objectValue({
+          title: stringValue("Doc"),
+          extra: stringValue("remove"),
+          meta: objectValue({
+            trash: stringValue("remove"),
+          }),
+        }),
+      ),
+    ).toEqual(
+      objectValue({
+        title: stringValue("Doc"),
+        meta: objectValue({
+          active: booleanValue(true),
+        }),
+      }),
+    );
+  });
+
+  it("materializes an absent object from child defaults", () => {
+    const schema = parseSchema({
+      kind: "object",
+      fields: {
+        title: { kind: "string", default: { kind: "string", value: "hello" } },
+        count: { kind: "number", default: { kind: "number", value: 0 } },
+      },
+    });
+
+    expect(materializeDefault(schema)).toEqual(
+      objectValue({
+        title: stringValue("hello"),
+        count: numberValue(0),
+      }),
+    );
+  });
+
+  it("throws for missing required fields", () => {
+    const schema = parseSchema({
+      kind: "object",
+      fields: {
+        title: { kind: "string", required: true },
+      },
+    });
+
+    expectSchemaErrorCode(
+      () => validate(schema, objectValue({})),
+      SchemaErrorCodes.MissingRequired,
+    );
+  });
+
+  it("materializes an absent optional object with required-only fields as absent", () => {
+    const schema = parseSchema({
+      kind: "object",
+      fields: {
+        x: { kind: "number", required: true },
+        y: { kind: "number", required: true },
+      },
+    });
+
+    expect(materializeDefault(schema)).toBeUndefined();
+  });
+
+  it("omits an absent optional object field whose children are required", () => {
+    const schema = parseSchema({
+      kind: "object",
+      required: true,
+      fields: {
+        cursor: {
+          kind: "object",
+          fields: {
+            x: { kind: "number", required: true },
+            y: { kind: "number", required: true },
+          },
+        },
+        name: { kind: "string", default: { kind: "string", value: "anon" } },
+      },
+    });
+
+    expect(validate(schema, objectValue({}))).toEqual(objectValue({ name: stringValue("anon") }));
+  });
+
+  it("propagates required-field failures when the object itself is required", () => {
+    expectSchemaErrorCode(
+      () =>
+        materializeDefault(
+          parseSchema({
+            kind: "object",
+            required: true,
+            fields: {
+              x: { kind: "number", required: true },
+            },
+          }),
+        ),
+      SchemaErrorCodes.MissingRequired,
+    );
+  });
+
+  it("throws for required objects with no defaultable fields", () => {
+    expectSchemaErrorCode(
+      () =>
+        materializeDefault(
+          parseSchema({
+            kind: "object",
+            required: true,
+            fields: {
+              title: { kind: "string" },
+            },
+          }),
+        ),
+      SchemaErrorCodes.MissingRequired,
+    );
+  });
+
+  it("rejects invalid object field declarations during parse", () => {
+    expectSchemaErrorCode(
+      () => parseSchema({ kind: "object", fields: [] }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/schema/string.test.ts b/packages/mimic-core/tests/schema/string.test.ts
new file mode 100644
index 000000000..cf7bb0e4e
--- /dev/null
+++ b/packages/mimic-core/tests/schema/string.test.ts
@@ -0,0 +1,104 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  materializeDefault,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema string model", () => {
+  it("parses and serializes validators and defaults", () => {
+    const schema = parseSchema({
+      kind: "string",
+      required: true,
+      default: { kind: "string", value: "hello" },
+      validators: [
+        { kind: "minLength", value: 1 },
+        { kind: "maxLength", value: 10 },
+        { kind: "length", value: 5 },
+        { kind: "regex", pattern: "^hello$" },
+      ],
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "string",
+      required: true,
+      default: { kind: "string", value: "hello" },
+      validators: [
+        { kind: "minLength", value: 1 },
+        { kind: "maxLength", value: 10 },
+        { kind: "length", value: 5 },
+        { kind: "regex", pattern: "^hello$" },
+      ],
+    });
+  });
+
+  it.each([
+    [{ kind: "minLength", value: 3 }, stringValue("ab"), "validator_failed"],
+    [{ kind: "maxLength", value: 2 }, stringValue("abc"), "validator_failed"],
+    [{ kind: "length", value: 2 }, stringValue("abc"), "validator_failed"],
+    [{ kind: "regex", pattern: "^a+$" }, stringValue("bbb"), "validator_failed"],
+    [{ kind: "email" }, stringValue("not-an-email"), "validator_failed"],
+    [{ kind: "url" }, stringValue("notaurl"), "validator_failed"],
+  ] as const)("rejects invalid string value for validator %o", (validator, value, code) => {
+    const schema = parseSchema({
+      kind: "string",
+      validators: [validator],
+    });
+
+    expectSchemaErrorCode(() => validate(schema, value), code);
+  });
+
+  it("accepts valid email and url values", () => {
+    expect(
+      validate(
+        parseSchema({ kind: "string", validators: [{ kind: "email" }] }),
+        stringValue("a@b.com"),
+      ),
+    ).toEqual(stringValue("a@b.com"));
+
+    expect(
+      validate(
+        parseSchema({ kind: "string", validators: [{ kind: "url" }] }),
+        stringValue("https://voidha.sh"),
+      ),
+    ).toEqual(stringValue("https://voidha.sh"));
+  });
+
+  it("materializes explicit defaults and clones the result", () => {
+    const schema = parseSchema({
+      kind: "string",
+      default: { kind: "string", value: "hello" },
+    });
+
+    const result = materializeDefault(schema);
+
+    expect(result).toEqual(stringValue("hello"));
+    expect(result).not.toBe(schema.default);
+  });
+
+  it("returns undefined for optional strings without defaults", () => {
+    expect(validate(parseSchema({ kind: "string" }))).toBeUndefined();
+  });
+
+  it("throws missing_required for required strings without defaults", () => {
+    expectSchemaErrorCode(
+      () => validate(parseSchema({ kind: "string", required: true })),
+      SchemaErrorCodes.MissingRequired,
+    );
+  });
+
+  it("rejects invalid validator payloads during parse", () => {
+    expectSchemaErrorCode(
+      () =>
+        parseSchema({
+          kind: "string",
+          validators: [{ kind: "minLength", value: "x" }],
+        }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/schema/tree.test.ts b/packages/mimic-core/tests/schema/tree.test.ts
new file mode 100644
index 000000000..23ef7ff4b
--- /dev/null
+++ b/packages/mimic-core/tests/schema/tree.test.ts
@@ -0,0 +1,261 @@
+import { describe, expect, it } from "vitest";
+import {
+  ErrorCodes,
+  HiddenTreeRootId,
+  SchemaErrorCodes,
+  booleanValue,
+  objectValue,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  treeValue,
+  validate,
+} from "../../src/index.js";
+import { expectCoreErrorCode, expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema tree model", () => {
+  const createSchema = () =>
+    parseSchema({
+      kind: "tree",
+      discriminator: "type",
+      roots: ["board"],
+      variants: {
+        board: {
+          schema: {
+            kind: "object",
+            fields: {
+              type: { kind: "literal", value: "board" },
+              name: { kind: "string" },
+            },
+          },
+          children: ["card"],
+        },
+        card: {
+          schema: {
+            kind: "object",
+            fields: {
+              type: { kind: "literal", value: "card" },
+              title: { kind: "string" },
+              done: { kind: "boolean", default: { kind: "boolean", value: false } },
+            },
+          },
+          children: [],
+        },
+      },
+    });
+
+  it("parses and serializes tree schemas", () => {
+    expect(serializeSchema(createSchema())).toEqual({
+      kind: "tree",
+      discriminator: "type",
+      roots: ["board"],
+      variants: {
+        board: {
+          schema: {
+            kind: "object",
+            fields: {
+              type: { kind: "literal", value: "board" },
+              name: { kind: "string" },
+            },
+          },
+          children: ["card"],
+        },
+        card: {
+          schema: {
+            kind: "object",
+            fields: {
+              type: { kind: "literal", value: "card" },
+              title: { kind: "string" },
+              done: { kind: "boolean", default: { kind: "boolean", value: false } },
+            },
+          },
+          children: [],
+        },
+      },
+    });
+  });
+
+  it("sanitizes tree node values and enforces parent-child typing", () => {
+    expect(
+      validate(
+        createSchema(),
+        treeValue([
+          {
+            id: "n1",
+            parent: HiddenTreeRootId,
+            pos: "a0",
+            value: objectValue({
+              type: stringValue("board"),
+              name: stringValue("Board"),
+            }),
+          },
+          {
+            id: "n2",
+            parent: "n1",
+            pos: "a0",
+            value: objectValue({
+              type: stringValue("card"),
+              title: stringValue("Card"),
+              extra: stringValue("remove"),
+            }),
+          },
+        ]),
+      ),
+    ).toEqual(
+      treeValue([
+        {
+          id: "n1",
+          parent: HiddenTreeRootId,
+          pos: "a0",
+          value: objectValue({
+            type: stringValue("board"),
+            name: stringValue("Board"),
+          }),
+        },
+        {
+          id: "n2",
+          parent: "n1",
+          pos: "a0",
+          value: objectValue({
+            type: stringValue("card"),
+            title: stringValue("Card"),
+            done: booleanValue(false),
+          }),
+        },
+      ]),
+    );
+  });
+
+  it("rejects missing or unknown node variants", () => {
+    const schema = createSchema();
+
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          schema,
+          treeValue([
+            {
+              id: "n1",
+              parent: HiddenTreeRootId,
+              pos: "a0",
+              value: objectValue({}),
+            },
+          ]),
+        ),
+      SchemaErrorCodes.TreeUnknownVariant,
+    );
+
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          schema,
+          treeValue([
+            {
+              id: "n1",
+              parent: HiddenTreeRootId,
+              pos: "a0",
+              value: objectValue({
+                type: stringValue("unknown"),
+              }),
+            },
+          ]),
+        ),
+      SchemaErrorCodes.TreeUnknownVariant,
+    );
+  });
+
+  it("rejects invalid root and child types", () => {
+    const schema = createSchema();
+
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          schema,
+          treeValue([
+            {
+              id: "n1",
+              parent: HiddenTreeRootId,
+              pos: "a0",
+              value: objectValue({
+                type: stringValue("card"),
+                title: stringValue("Card"),
+              }),
+            },
+          ]),
+        ),
+      SchemaErrorCodes.TreeInvalidRootType,
+    );
+
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          schema,
+          treeValue([
+            {
+              id: "n1",
+              parent: HiddenTreeRootId,
+              pos: "a0",
+              value: objectValue({
+                type: stringValue("board"),
+                name: stringValue("Board"),
+              }),
+            },
+            {
+              id: "n2",
+              parent: "n1",
+              pos: "a0",
+              value: objectValue({
+                type: stringValue("board"),
+                name: stringValue("Nested board"),
+              }),
+            },
+          ]),
+        ),
+      SchemaErrorCodes.TreeInvalidChildType,
+    );
+  });
+
+  it("rejects invalid tree variant declarations during parse", () => {
+    expectSchemaErrorCode(
+      () =>
+        parseSchema({
+          kind: "tree",
+          discriminator: "type",
+          roots: ["board"],
+          variants: {
+            board: {
+              schema: {
+                kind: "object",
+                fields: {
+                  type: { kind: "string" },
+                },
+              },
+              children: [],
+            },
+          },
+        }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+
+  it("still surfaces core structural tree errors before schema validation", () => {
+    expectCoreErrorCode(
+      () =>
+        validate(createSchema(), {
+          kind: "tree",
+          nodes: [
+            {
+              id: "n1",
+              parent: "missing",
+              pos: "a0",
+              value: objectValue({
+                type: stringValue("board"),
+                name: stringValue("Board"),
+              }),
+            },
+          ],
+        }),
+      ErrorCodes.InvalidTreeParent,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/schema/union.test.ts b/packages/mimic-core/tests/schema/union.test.ts
new file mode 100644
index 000000000..ae3045f74
--- /dev/null
+++ b/packages/mimic-core/tests/schema/union.test.ts
@@ -0,0 +1,139 @@
+import { describe, expect, it } from "vitest";
+import {
+  SchemaErrorCodes,
+  numberValue,
+  objectValue,
+  parseSchema,
+  serializeSchema,
+  stringValue,
+  validate,
+} from "../../src/index.js";
+import { expectSchemaErrorCode } from "./helpers.js";
+
+describe("schema union model", () => {
+  it("parses and serializes union variants", () => {
+    const schema = parseSchema({
+      kind: "union",
+      required: true,
+      discriminator: "type",
+      variants: {
+        text: {
+          kind: "object",
+          fields: {
+            type: { kind: "literal", value: "text" },
+            value: { kind: "string" },
+          },
+        },
+      },
+      default: {
+        kind: "object",
+        fields: {
+          type: { kind: "string", value: "text" },
+          value: { kind: "string", value: "hello" },
+        },
+      },
+    });
+
+    expect(serializeSchema(schema)).toEqual({
+      kind: "union",
+      required: true,
+      discriminator: "type",
+      variants: {
+        text: {
+          kind: "object",
+          fields: {
+            type: { kind: "literal", value: "text" },
+            value: { kind: "string" },
+          },
+        },
+      },
+      default: {
+        kind: "object",
+        fields: {
+          type: { kind: "string", value: "text" },
+          value: { kind: "string", value: "hello" },
+        },
+      },
+    });
+  });
+
+  it("selects the matching variant and sanitizes it", () => {
+    const schema = parseSchema({
+      kind: "union",
+      discriminator: "type",
+      variants: {
+        text: {
+          kind: "object",
+          fields: {
+            type: { kind: "literal", value: "text" },
+            value: { kind: "string" },
+            count: { kind: "number", default: { kind: "number", value: 0 } },
+          },
+        },
+      },
+    });
+
+    expect(
+      validate(
+        schema,
+        objectValue({
+          type: stringValue("text"),
+          value: stringValue("hello"),
+          extra: stringValue("remove"),
+        }),
+      ),
+    ).toEqual(
+      objectValue({
+        type: stringValue("text"),
+        value: stringValue("hello"),
+        count: numberValue(0),
+      }),
+    );
+  });
+
+  it("rejects missing or unknown discriminators", () => {
+    const schema = parseSchema({
+      kind: "union",
+      discriminator: "type",
+      variants: {
+        text: {
+          kind: "object",
+          fields: {
+            type: { kind: "literal", value: "text" },
+          },
+        },
+      },
+    });
+
+    expectSchemaErrorCode(() => validate(schema, objectValue({})), SchemaErrorCodes.UnionNoMatch);
+    expectSchemaErrorCode(
+      () =>
+        validate(
+          schema,
+          objectValue({
+            type: stringValue("unknown"),
+          }),
+        ),
+      SchemaErrorCodes.UnionNoMatch,
+    );
+  });
+
+  it("rejects invalid discriminator field declarations during parse", () => {
+    expectSchemaErrorCode(
+      () =>
+        parseSchema({
+          kind: "union",
+          discriminator: "type",
+          variants: {
+            text: {
+              kind: "object",
+              fields: {
+                type: { kind: "string" },
+              },
+            },
+          },
+        }),
+      SchemaErrorCodes.InvalidSchema,
+    );
+  });
+});
diff --git a/packages/mimic-core/tests/spec-core-fixtures.test.ts b/packages/mimic-core/tests/spec-core-fixtures.test.ts
new file mode 100644
index 000000000..79f4e5baf
--- /dev/null
+++ b/packages/mimic-core/tests/spec-core-fixtures.test.ts
@@ -0,0 +1,72 @@
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import {
+  applyBatch,
+  isCoreError,
+  normalize,
+  type Command,
+  type ErrorCode,
+  type Value,
+} from "../src/index.js";
+
+interface FixtureIndex {
+  readonly version: number;
+  readonly suites: readonly string[];
+}
+
+interface FixtureCase {
+  readonly name: string;
+  readonly initial: Value;
+  readonly commands: readonly Command[];
+  readonly expect?: Value;
+  readonly error?: {
+    readonly code: ErrorCode;
+  };
+}
+
+interface FixtureSuite {
+  readonly version: number;
+  readonly suite: string;
+  readonly cases: readonly FixtureCase[];
+}
+
+const fixturesDir = path.join(path.dirname(fileURLToPath(import.meta.url)), "fixtures");
+
+const readJson = <T>(name: string): T =>
+  JSON.parse(readFileSync(path.join(fixturesDir, name), "utf8")) as T;
+
+const index = readJson<FixtureIndex>("index.json");
+
+describe("spec core fixtures", () => {
+  it("uses the expected fixture index version", () => {
+    expect(index.version).toBe(1);
+  });
+
+  for (const suiteName of index.suites) {
+    const suite = readJson<FixtureSuite>(suiteName);
+
+    describe(suite.suite, () => {
+      for (const testCase of suite.cases) {
+        it(testCase.name, () => {
+          try {
+            const got = applyBatch(testCase.initial, testCase.commands);
+
+            if (testCase.error) {
+              expect.unreachable(`expected error ${testCase.error.code}, got success`);
+            }
+            expect(testCase.expect).toBeDefined();
+            expect(normalize(got)).toEqual(normalize(testCase.expect!));
+          } catch (error) {
+            if (!testCase.error) {
+              throw error;
+            }
+            expect(isCoreError(error)).toBe(true);
+            expect((error as { code: ErrorCode }).code).toBe(testCase.error.code);
+          }
+        });
+      }
+    });
+  }
+});
diff --git a/packages/mimic-core/tests/spec-fractional-fixtures.test.ts b/packages/mimic-core/tests/spec-fractional-fixtures.test.ts
new file mode 100644
index 000000000..fa8623a24
--- /dev/null
+++ b/packages/mimic-core/tests/spec-fractional-fixtures.test.ts
@@ -0,0 +1,90 @@
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import {
+  base62,
+  generateJitteredKeyBetween,
+  generateKeyBetween,
+  generateNKeysBetween,
+  generateNJitteredKeysBetween,
+  type RandomSource,
+} from "../src/index.js";
+
+interface FractionalCase {
+  readonly name: string;
+  readonly mode: "plain" | "jittered";
+  readonly count?: number;
+  readonly lower: string | null;
+  readonly upper: string | null;
+  readonly random?: readonly number[];
+  readonly expect: readonly string[];
+}
+
+interface FractionalSuite {
+  readonly version: number;
+  readonly suite: string;
+  readonly cases: readonly FractionalCase[];
+}
+
+class FixedRandomSource implements RandomSource {
+  readonly values: readonly number[];
+  index = 0;
+
+  constructor(values: readonly number[]) {
+    this.values = values;
+  }
+
+  next(): number {
+    if (this.values.length === 0) {
+      return 0;
+    }
+    if (this.index >= this.values.length) {
+      return this.values[this.values.length - 1]!;
+    }
+    const value = this.values[this.index]!;
+    this.index += 1;
+    return value;
+  }
+}
+
+const fixturesDir = path.join(path.dirname(fileURLToPath(import.meta.url)), "fixtures");
+
+const suite = JSON.parse(
+  readFileSync(path.join(fixturesDir, "fractional.json"), "utf8"),
+) as FractionalSuite;
+
+describe("spec fractional fixtures", () => {
+  it("uses the expected fixture suite version", () => {
+    expect(suite.version).toBe(1);
+  });
+
+  for (const testCase of suite.cases) {
+    it(testCase.name, () => {
+      const count = testCase.count ?? 1;
+      const lower = testCase.lower ?? undefined;
+      const upper = testCase.upper ?? undefined;
+      const charset = base62();
+
+      let got: string[];
+      switch (testCase.mode) {
+        case "plain":
+          got =
+            count === 1
+              ? [generateKeyBetween(lower, upper, charset)]
+              : generateNKeysBetween(lower, upper, count, charset);
+          break;
+        case "jittered": {
+          const random = new FixedRandomSource(testCase.random ?? []);
+          got =
+            count === 1
+              ? [generateJitteredKeyBetween(lower, upper, charset, random)]
+              : generateNJitteredKeysBetween(lower, upper, count, charset, random);
+          break;
+        }
+      }
+
+      expect(got).toEqual(testCase.expect);
+    });
+  }
+});
diff --git a/packages/mimic-core/tsconfig.build.json b/packages/mimic-core/tsconfig.build.json
new file mode 100644
index 000000000..d9d80befa
--- /dev/null
+++ b/packages/mimic-core/tsconfig.build.json
@@ -0,0 +1,27 @@
+{
+  "compilerOptions": {
+    "module": "Preserve",
+    "moduleResolution": "Bundler",
+    "allowImportingTsExtensions": true,
+    "rewriteRelativeImportExtensions": true,
+    "lib": ["es2022", "dom", "dom.iterable"],
+    "target": "es2022",
+    "declaration": true,
+    "declarationMap": true,
+    "declarationDir": "dist",
+    "outDir": "./dist",
+    "strict": true,
+    "strictNullChecks": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "noPropertyAccessFromIndexSignature": true,
+    "noImplicitOverride": true
+  },
+  "include": ["src"],
+  "exclude": ["tests", "**/*.test.ts", "**/*.test.tsx", "__tests__"]
+}
diff --git a/packages/mimic-core/tsconfig.json b/packages/mimic-core/tsconfig.json
new file mode 100644
index 000000000..d27986993
--- /dev/null
+++ b/packages/mimic-core/tsconfig.json
@@ -0,0 +1,9 @@
+{
+  "extends": "./tsconfig.build.json",
+  "include": ["src", "tests"],
+  "compilerOptions": {
+    "allowJs": false,
+    "rootDir": "./",
+    "noEmit": true
+  }
+}
diff --git a/packages/mimic-core/tsdown.config.ts b/packages/mimic-core/tsdown.config.ts
new file mode 100644
index 000000000..3d814ec5b
--- /dev/null
+++ b/packages/mimic-core/tsdown.config.ts
@@ -0,0 +1,16 @@
+import { defineConfig } from "tsdown";
+
+export default defineConfig({
+  target: ["es2022"],
+  entry: ["./src/index.ts"],
+  dts: {
+    sourcemap: true,
+    tsconfig: "./tsconfig.build.json",
+  },
+  unbundle: true,
+  format: ["cjs", "esm"],
+  outExtensions: (ctx) => ({
+    dts: ctx.format === "cjs" ? ".d.cts" : ".d.mts",
+    js: ctx.format === "cjs" ? ".cjs" : ".mjs",
+  }),
+});
diff --git a/packages/mimic-core/vitest.mts b/packages/mimic-core/vitest.mts
new file mode 100644
index 000000000..f244d0d6d
--- /dev/null
+++ b/packages/mimic-core/vitest.mts
@@ -0,0 +1,9 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    include: ["./tests/**/*.test.ts"],
+    exclude: ["./node_modules/**"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 94238f379..20e223d39 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -536,7 +536,7 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -571,7 +571,7 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -589,6 +589,21 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
 
+  packages/mimic-core:
+    devDependencies:
+      tsdown:
+        specifier: ^0.18.2
+        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
+      typescript:
+        specifier: 5.8.3
+        version: 5.8.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/platform:
     devDependencies:
       '@voidhash/tsconfig':
@@ -1741,15 +1756,24 @@ packages:
       effect: 4.0.0-beta.84
       vitest: 3.2.7
 
+  '@emnapi/core@1.10.0':
+    resolution: {integrity: sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==}
+
   '@emnapi/core@1.7.1':
     resolution: {integrity: sha512-o1uhUASyo921r2XtHYOHy7gdkGLge8ghBEQHMWmyJFoXlpU58kIrhhN3w26lpQb6dspetweapMn2CSNwQ8I4wg==}
 
+  '@emnapi/runtime@1.10.0':
+    resolution: {integrity: sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==}
+
   '@emnapi/runtime@1.7.1':
     resolution: {integrity: sha512-PVtJr5CmLwYAU9PZDMITZoR5iAOShYREoR45EyyLrbntV50mdePTgUn4AmOw90Ifcj+x2kRjdzr1HP3RrNiHGA==}
 
   '@emnapi/wasi-threads@1.1.0':
     resolution: {integrity: sha512-WI0DdZ8xFSbgMjR1sFsKABJ/C5OnRrjT06JXbZKexJGrDuPTzZdDYfFlsgcCXCyf+suG5QU2e/y1Wo2V/OapLQ==}
 
+  '@emnapi/wasi-threads@1.2.1':
+    resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
+
   '@esbuild-kit/core-utils@3.3.2':
     resolution: {integrity: sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ==}
     deprecated: 'Merged into tsx: https://tsx.is'
@@ -2909,6 +2933,12 @@ packages:
   '@napi-rs/wasm-runtime@0.2.12':
     resolution: {integrity: sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==}
 
+  '@napi-rs/wasm-runtime@1.1.6':
+    resolution: {integrity: sha512-ZLv/JdUfkvOy9eCnnBaGfiO+XimbjebAeO+MRQqD/B+FR1tnRN0tpKSJHRbE8sFfS6aqsXZ67TQjfwfsxULVbg==}
+    peerDependencies:
+      '@emnapi/core': ^1.7.1
+      '@emnapi/runtime': ^1.7.1
+
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
     resolution: {integrity: sha512-s88O1aVtXftvp5bCPB7WnmXc5IwOZZ7YPuwNPt+GtOOXpPvad1LfbmjYv+qII7zP6RU2QGnqve27dnLycEnyEQ==}
 
@@ -2948,6 +2978,12 @@ packages:
     resolution: {integrity: sha512-PkvjA1Lq5++V5S1E6Patr92ZVcieE6EalDr1VJTqv4BnjZdOUC4W3p8k1wMXSd5/2aFP4b/A6N5sg2Bkzcr9vQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
 
+  '@oxc-project/types@0.103.0':
+    resolution: {integrity: sha512-bkiYX5kaXWwUessFRSoXFkGIQTmc6dLGdxuRTrC+h8PSnIdZyuXHHlLAeTmOue5Br/a0/a7dHH0Gca6eXn9MKg==}
+
+  '@oxc-project/types@0.127.0':
+    resolution: {integrity: sha512-aIYXQBo4lCbO4z0R3FHeucQHpF46l2LbMdxRvqvuRuW2OxdnSkcng5B8+K12spgLDj93rtN3+J2Vac/TIO+ciQ==}
+
   '@oxc-project/types@0.133.0':
     resolution: {integrity: sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA==}
 
@@ -3257,6 +3293,9 @@ packages:
   '@polka/url@1.0.0-next.29':
     resolution: {integrity: sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==}
 
+  '@quansync/fs@1.0.0':
+    resolution: {integrity: sha512-4TJ3DFtlf1L5LDMaM6CanJ/0lckGNtJcMjQ1NAV6zDmA0tEHKZtxNKin8EgPaVX1YzljbxckyT2tJrpQKAtngQ==}
+
   '@radix-ui/number@1.1.2':
     resolution: {integrity: sha512-ceTwaxc4I5IOi97DgCotl3pqiyRGvffcc0oOsE2dQYaJOFIDsDt4VWG6xEbg1QePv9QWausCEIppud/tJ1wNig==}
 
@@ -4289,6 +4328,178 @@ packages:
   '@react-navigation/routers@7.5.3':
     resolution: {integrity: sha512-1tJHg4KKRJuQ1/EvJxatrMef3NZXEPzwUIUZ3n1yJ2t7Q97siwRtbynRpQG9/69ebbtiZ8W3ScOZF/OmhvM4Rg==}
 
+  '@rolldown/binding-android-arm64@1.0.0-beta.57':
+    resolution: {integrity: sha512-GoOVDy8bjw9z1K30Oo803nSzXJS/vWhFijFsW3kzvZCO8IZwFnNa6pGctmbbJstKl3Fv6UBwyjJQN6msejW0IQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@rolldown/binding-android-arm64@1.0.0-rc.17':
+    resolution: {integrity: sha512-s70pVGhw4zqGeFnXWvAzJDlvxhlRollagdCCKRgOsgUOH3N1l0LIxf83AtGzmb5SiVM4Hjl5HyarMRfdfj3DaQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
+  '@rolldown/binding-darwin-arm64@1.0.0-beta.57':
+    resolution: {integrity: sha512-9c4FOhRGpl+PX7zBK5p17c5efpF9aSpTPgyigv57hXf5NjQUaJOOiejPLAtFiKNBIfm5Uu6yFkvLKzOafNvlTw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@rolldown/binding-darwin-arm64@1.0.0-rc.17':
+    resolution: {integrity: sha512-4ksWc9n0mhlZpZ9PMZgTGjeOPRu8MB1Z3Tz0Mo02eWfWCHMW1zN82Qz/pL/rC+yQa+8ZnutMF0JjJe7PjwasYw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@rolldown/binding-darwin-x64@1.0.0-beta.57':
+    resolution: {integrity: sha512-6RsB8Qy4LnGqNGJJC/8uWeLWGOvbRL/KG5aJ8XXpSEupg/KQtlBEiFaYU/Ma5Usj1s+bt3ItkqZYAI50kSplBA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@rolldown/binding-darwin-x64@1.0.0-rc.17':
+    resolution: {integrity: sha512-SUSDOI6WwUVNcWxd02QEBjLdY1VPHvlEkw6T/8nYG322iYWCTxRb1vzk4E+mWWYehTp7ERibq54LSJGjmouOsw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@rolldown/binding-freebsd-x64@1.0.0-beta.57':
+    resolution: {integrity: sha512-uA9kG7+MYkHTbqwv67Tx+5GV5YcKd33HCJIi0311iYBd25yuwyIqvJfBdt1VVB8tdOlyTb9cPAgfCki8nhwTQg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@rolldown/binding-freebsd-x64@1.0.0-rc.17':
+    resolution: {integrity: sha512-hwnz3nw9dbJ05EDO/PvcjaaewqqDy7Y1rn1UO81l8iIK1GjenME75dl16ajbvSSMfv66WXSRCYKIqfgq2KCfxw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.57':
+    resolution: {integrity: sha512-3KkS0cHsllT2T+Te+VZMKHNw6FPQihYsQh+8J4jkzwgvAQpbsbXmrqhkw3YU/QGRrD8qgcOvBr6z5y6Jid+rmw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.17':
+    resolution: {integrity: sha512-IS+W7epTcwANmFSQFrS1SivEXHtl1JtuQA9wlxrZTcNi6mx+FDOYrakGevvvTwgj2JvWiK8B29/qD9BELZPyXQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
+  '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.57':
+    resolution: {integrity: sha512-A3/wu1RgsHhqP3rVH2+sM81bpk+Qd2XaHTl8LtX5/1LNR7QVBFBCpAoiXwjTdGnI5cMdBVi7Z1pi52euW760Fw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rolldown/binding-linux-arm64-gnu@1.0.0-rc.17':
+    resolution: {integrity: sha512-e6usGaHKW5BMNZOymS1UcEYGowQMWcgZ71Z17Sl/h2+ZziNJ1a9n3Zvcz6LdRyIW5572wBCTH/Z+bKuZouGk9Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rolldown/binding-linux-arm64-musl@1.0.0-beta.57':
+    resolution: {integrity: sha512-d0kIVezTQtazpyWjiJIn5to8JlwfKITDqwsFv0Xc6s31N16CD2PC/Pl2OtKgS7n8WLOJbfqgIp5ixYzTAxCqMg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rolldown/binding-linux-arm64-musl@1.0.0-rc.17':
+    resolution: {integrity: sha512-b/CgbwAJpmrRLp02RPfhbudf5tZnN9nsPWK82znefso832etkem8H7FSZwxrOI9djcdTP7U6YfNhbRnh7djErg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+
+  '@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.17':
+    resolution: {integrity: sha512-4EII1iNGRUN5WwGbF/kOh/EIkoDN9HsupgLQoXfY+D1oyJm7/F4t5PYU5n8SWZgG0FEwakyM8pGgwcBYruGTlA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@rolldown/binding-linux-s390x-gnu@1.0.0-rc.17':
+    resolution: {integrity: sha512-AH8oq3XqQo4IibpVXvPeLDI5pzkpYn0WiZAfT05kFzoJ6tQNzwRdDYQ45M8I/gslbodRZwW8uxLhbSBbkv96rA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+
+  '@rolldown/binding-linux-x64-gnu@1.0.0-beta.57':
+    resolution: {integrity: sha512-E199LPijo98yrLjPCmETx8EF43sZf9t3guSrLee/ej1rCCc3zDVTR4xFfN9BRAapGVl7/8hYqbbiQPTkv73kUg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@rolldown/binding-linux-x64-gnu@1.0.0-rc.17':
+    resolution: {integrity: sha512-cLnjV3xfo7KslbU41Z7z8BH/E1y5mzUYzAqih1d1MDaIGZRCMqTijqLv76/P7fyHuvUcfGsIpqCdddbxLLK9rA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@rolldown/binding-linux-x64-musl@1.0.0-beta.57':
+    resolution: {integrity: sha512-++EQDpk/UJ33kY/BNsh7A7/P1sr/jbMuQ8cE554ZIy+tCUWCivo9zfyjDUoiMdnxqX6HLJEqqGnbGQOvzm2OMQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@rolldown/binding-linux-x64-musl@1.0.0-rc.17':
+    resolution: {integrity: sha512-0phclDw1spsL7dUB37sIARuis2tAgomCJXAHZlpt8PXZ4Ba0dRP1e+66lsRqrfhISeN9bEGNjQs+T/Fbd7oYGw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+
+  '@rolldown/binding-openharmony-arm64@1.0.0-beta.57':
+    resolution: {integrity: sha512-voDEBcNqxbUv/GeXKFtxXVWA+H45P/8Dec4Ii/SbyJyGvCqV1j+nNHfnFUIiRQ2Q40DwPe/djvgYBs9PpETiMA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@rolldown/binding-openharmony-arm64@1.0.0-rc.17':
+    resolution: {integrity: sha512-0ag/hEgXOwgw4t8QyQvUCxvEg+V0KBcA6YuOx9g0r02MprutRF5dyljgm3EmR02O292UX7UeS6HzWHAl6KgyhA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@rolldown/binding-wasm32-wasi@1.0.0-beta.57':
+    resolution: {integrity: sha512-bRhcF7NLlCnpkzLVlVhrDEd0KH22VbTPkPTbMjlYvqhSmarxNIq5vtlQS8qmV7LkPKHrNLWyJW/V/sOyFba26Q==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
+  '@rolldown/binding-wasm32-wasi@1.0.0-rc.17':
+    resolution: {integrity: sha512-LEXei6vo0E5wTGwpkJ4KoT3OZJRnglwldt5ziLzOlc6qqb55z4tWNq2A+PFqCJuvWWdP53CVhG1Z9NtToDPJrA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [wasm32]
+
+  '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.57':
+    resolution: {integrity: sha512-rnDVGRks2FQ2hgJ2g15pHtfxqkGFGjJQUDWzYznEkE8Ra2+Vag9OffxdbJMZqBWXHVM0iS4dv8qSiEn7bO+n1Q==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@rolldown/binding-win32-arm64-msvc@1.0.0-rc.17':
+    resolution: {integrity: sha512-gUmyzBl3SPMa6hrqFUth9sVfcLBlYsbMzBx5PlexMroZStgzGqlZ26pYG89rBb45Mnia+oil6YAIFeEWGWhoZA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@rolldown/binding-win32-x64-msvc@1.0.0-beta.57':
+    resolution: {integrity: sha512-OqIUyNid1M4xTj6VRXp/Lht/qIP8fo25QyAZlCP+p6D2ATCEhyW4ZIFLnC9zAGN/HMbXoCzvwfa8Jjg/8J4YEg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@rolldown/binding-win32-x64-msvc@1.0.0-rc.17':
+    resolution: {integrity: sha512-3hkiolcUAvPB9FLb3UZdfjVVNWherN1f/skkGWJP/fgSQhYUZpSIRr0/I8ZK9TkF3F7kxvJAk0+IcKvPHk9qQg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@rolldown/pluginutils@1.0.0-beta.57':
+    resolution: {integrity: sha512-aQNelgx14tGA+n2tNSa9x6/jeoCL9fkDeCei7nOKnHx0fEFRRMu5ReiITo+zZD5TzWDGGRjbSYCs93IfRIyTuQ==}
+
+  '@rolldown/pluginutils@1.0.0-rc.17':
+    resolution: {integrity: sha512-n8iosDOt6Ig1UhJ2AYqoIhHWh/isz0xpicHTzpKBeotdVsTEcxsSA/i3EVM7gQAj0rU27OLAxCjzlj15IWY7bg==}
+
   '@rolldown/pluginutils@1.0.0-rc.3':
     resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
 
@@ -4603,6 +4814,9 @@ packages:
   '@tybys/wasm-util@0.10.1':
     resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==}
 
+  '@tybys/wasm-util@0.10.3':
+    resolution: {integrity: sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==}
+
   '@types/babel__core@7.20.5':
     resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
 
@@ -5278,6 +5492,10 @@ packages:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
 
+  ast-kit@2.2.0:
+    resolution: {integrity: sha512-m1Q/RaVOnTp9JxPX+F+Zn7IcLYMzM8kZofDImfsKZd8MbR+ikdOzTeztStWqfrqIxZnYWryyI9ePm3NGjnZgGw==}
+    engines: {node: '>=20.19.0'}
+
   async-function@1.0.0:
     resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
     engines: {node: '>= 0.4'}
@@ -5459,6 +5677,9 @@ packages:
     resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==}
     engines: {node: '>=8'}
 
+  birpc@4.0.0:
+    resolution: {integrity: sha512-LShSxJP0KTmd101b6DRyGBj57LZxSDYWKitQNW/mi8GRMvZb078Uf9+pveax1DrVL89vm7mWe+TovdI/UDOuPw==}
+
   boolbase@1.0.0:
     resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
 
@@ -6028,6 +6249,15 @@ packages:
     resolution: {integrity: sha512-O9EC/miwdnRDY10qRxM8P3Pg8hXe3LyU4ZipReKOgTwn4OqANmftj8XJz1UPUAS6NMHf0E2htjsbQujUTkncCg==}
     hasBin: true
 
+  dts-resolver@2.1.3:
+    resolution: {integrity: sha512-bihc7jPC90VrosXNzK0LTE2cuLP6jr0Ro8jk+kMugHReJVLIpHz/xadeq3MhuwyO4TD4OA3L1Q8pBBFRc08Tsw==}
+    engines: {node: '>=20.19.0'}
+    peerDependencies:
+      oxc-resolver: '>=11.0.0'
+    peerDependenciesMeta:
+      oxc-resolver:
+        optional: true
+
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
@@ -6061,6 +6291,10 @@ packages:
   emoji-regex@8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
 
+  empathic@2.0.1:
+    resolution: {integrity: sha512-YGRs8knHhKHVShLkFET/rWAU8kmHbOV5LwN938RHI0pljAJ1Gf6SzXsSmRaEzcXTtOOmVqJ5+WtQPL5uigY50Q==}
+    engines: {node: '>=14'}
+
   encodeurl@1.0.2:
     resolution: {integrity: sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==}
     engines: {node: '>= 0.8'}
@@ -6856,6 +7090,9 @@ packages:
   hermes-parser@0.36.0:
     resolution: {integrity: sha512-GdpwMmH5x6IpC1cijvcvYnlPB60Mh6kTSF/NFdYV/j56gYdi+0RIakYs+eqOV+bbO0SW7mgVVGSsTJxyPQfo3w==}
 
+  hookable@6.1.1:
+    resolution: {integrity: sha512-U9LYDy1CwhMCnprUfeAZWZGByVbhd54hwepegYTK7Pi5NvqEj63ifz5z+xukznehT7i6NIZRu89Ay1AZmRsLEQ==}
+
   hosted-git-info@7.0.2:
     resolution: {integrity: sha512-puUZAUKT5m8Zzvs72XWy3HtvVbTWljRE66cP60bxJzAqf2DgICo7lYTY2IHUmLnNpjYvw5bvmoHvPc0QO2a62w==}
     engines: {node: ^16.14.0 || >=18.0.0}
@@ -6920,6 +7157,10 @@ packages:
     engines: {node: '>=8'}
     hasBin: true
 
+  import-without-cache@0.2.5:
+    resolution: {integrity: sha512-B6Lc2s6yApwnD2/pMzFh/d5AVjdsDXjgkeJ766FmFuJELIGHNycKRj+l3A39yZPM4CchqNCB4RITEAYB1KUM6A==}
+    engines: {node: '>=20.19.0'}
+
   importx@0.5.2:
     resolution: {integrity: sha512-YEwlK86Ml5WiTxN/ECUYC5U7jd1CisAVw7ya4i9ZppBoHfFkT2+hChhr3PE2fYxUKLkNyivxEQpa5Ruil1LJBQ==}
 
@@ -8274,6 +8515,9 @@ packages:
   quansync@0.2.11:
     resolution: {integrity: sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA==}
 
+  quansync@1.0.0:
+    resolution: {integrity: sha512-5xZacEEufv3HSTPQuchrvV6soaiACMFnq1H8wkVioctoH3TRha9Sz66lOxRwPK/qZj7HPiSveih9yAyh98gvqA==}
+
   query-string@7.1.3:
     resolution: {integrity: sha512-hh2WYhq4fi8+b+/2Kg9CEge4fDPvHS534aOOvOZeQ3+Vf2mCFsaFBYj0i+iXcAq6I9Vzp5fjMFBlONvayDC1qg==}
     engines: {node: '>=6'}
@@ -8624,6 +8868,35 @@ packages:
     deprecated: Rimraf versions prior to v4 are no longer supported
     hasBin: true
 
+  rolldown-plugin-dts@0.20.0:
+    resolution: {integrity: sha512-cLAY1kN2ilTYMfZcFlGWbXnu6Nb+8uwUBsi+Mjbh4uIx7IN8uMOmJ7RxrrRgPsO4H7eSz3E+JwGoL1gyugiyUA==}
+    engines: {node: '>=20.19.0'}
+    peerDependencies:
+      '@ts-macro/tsc': ^0.3.6
+      '@typescript/native-preview': '>=7.0.0-dev.20250601.1'
+      rolldown: ^1.0.0-beta.57
+      typescript: ^5.0.0
+      vue-tsc: ~3.2.0
+    peerDependenciesMeta:
+      '@ts-macro/tsc':
+        optional: true
+      '@typescript/native-preview':
+        optional: true
+      typescript:
+        optional: true
+      vue-tsc:
+        optional: true
+
+  rolldown@1.0.0-beta.57:
+    resolution: {integrity: sha512-lMMxcNN71GMsSko8RyeTaFoATHkCh4IWU7pYF73ziMYjhHZWfVesC6GQ+iaJCvZmVjvgSks9Ks1aaqEkBd8udg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+
+  rolldown@1.0.0-rc.17:
+    resolution: {integrity: sha512-ZrT53oAKrtA4+YtBWPQbtPOxIbVDbxT0orcYERKd63VJTF13zPcgXTvD4843L8pcsI7M6MErt8QtON6lrB9tyA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+
   rollup@4.59.0:
     resolution: {integrity: sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
@@ -9176,6 +9449,31 @@ packages:
   tsconfig-paths@3.15.0:
     resolution: {integrity: sha512-2Ac2RgzDe/cn48GvOe3M+o82pEFewD3UPbyoUHHdKasHwJKjds4fLXWf/Ux5kATBKN20oaFGu+jbElp1pos0mg==}
 
+  tsdown@0.18.4:
+    resolution: {integrity: sha512-J/tRS6hsZTkvqmt4+xdELUCkQYDuUCXgBv0fw3ImV09WPGbEKfsPD65E+WUjSu3E7Z6tji9XZ1iWs8rbGqB/ZA==}
+    engines: {node: '>=20.19.0'}
+    hasBin: true
+    peerDependencies:
+      '@arethetypeswrong/core': ^0.18.1
+      '@vitejs/devtools': '*'
+      publint: ^0.3.0
+      typescript: ^5.0.0
+      unplugin-lightningcss: ^0.4.0
+      unplugin-unused: ^0.5.0
+    peerDependenciesMeta:
+      '@arethetypeswrong/core':
+        optional: true
+      '@vitejs/devtools':
+        optional: true
+      publint:
+        optional: true
+      typescript:
+        optional: true
+      unplugin-lightningcss:
+        optional: true
+      unplugin-unused:
+        optional: true
+
   tslib@1.14.1:
     resolution: {integrity: sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==}
 
@@ -9254,6 +9552,11 @@ packages:
     engines: {node: '>=14.17'}
     hasBin: true
 
+  typescript@5.8.3:
+    resolution: {integrity: sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==}
+    engines: {node: '>=14.17'}
+    hasBin: true
+
   typescript@5.9.3:
     resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
     engines: {node: '>=14.17'}
@@ -9278,6 +9581,9 @@ packages:
     resolution: {integrity: sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==}
     engines: {node: '>= 0.4'}
 
+  unconfig-core@7.5.0:
+    resolution: {integrity: sha512-Su3FauozOGP44ZmKdHy2oE6LPjk51M/TRRjHv2HNCWiDvfvCoxC2lno6jevMA91MYAdCdwP05QnWdWpSbncX/w==}
+
   unconfig@0.6.1:
     resolution: {integrity: sha512-cVU+/sPloZqOyJEAfNwnQSFCzFrZm85vcVkryH7lnlB/PiTycUkAjt5Ds79cfIshGOZ+M5v3PBDnKgpmlE5DtA==}
 
@@ -9326,6 +9632,16 @@ packages:
   unrs-resolver@1.11.1:
     resolution: {integrity: sha512-bSjt9pjaEBnNiGgc9rUiHGKv5l4/TGzDmYw3RhnkJGtLhbnnA/5qJj7x3dNDCRx/PJxu774LlH8lCOlB4hEfKg==}
 
+  unrun@0.2.39:
+    resolution: {integrity: sha512-h9FxYVpztY/wwq+bauLOh6Y3CWu2IVeRLq5lxzneBiIU9Tn86OGp9xiQrGhnYspAmg5dzdY0Cc8+Y70kuTARCg==}
+    engines: {node: '>=20.19.0'}
+    hasBin: true
+    peerDependencies:
+      synckit: ^0.11.11
+    peerDependenciesMeta:
+      synckit:
+        optional: true
+
   update-browserslist-db@1.2.3:
     resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==}
     hasBin: true
@@ -9958,7 +10274,7 @@ snapshots:
     dependencies:
       '@babel/template': 7.28.6
       '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
@@ -10941,12 +11257,23 @@ snapshots:
       effect: 4.0.0-beta.84
       vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
+  '@emnapi/core@1.10.0':
+    dependencies:
+      '@emnapi/wasi-threads': 1.2.1
+      tslib: 2.8.1
+    optional: true
+
   '@emnapi/core@1.7.1':
     dependencies:
       '@emnapi/wasi-threads': 1.1.0
       tslib: 2.8.1
     optional: true
 
+  '@emnapi/runtime@1.10.0':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@emnapi/runtime@1.7.1':
     dependencies:
       tslib: 2.8.1
@@ -10957,6 +11284,11 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
+  '@emnapi/wasi-threads@1.2.1':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@esbuild-kit/core-utils@3.3.2':
     dependencies:
       esbuild: 0.25.0
@@ -11996,6 +12328,13 @@ snapshots:
       '@tybys/wasm-util': 0.10.1
     optional: true
 
+  '@napi-rs/wasm-runtime@1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
+    dependencies:
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.10.0
+      '@tybys/wasm-util': 0.10.3
+    optional: true
+
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
     optional: true
 
@@ -12024,6 +12363,10 @@ snapshots:
 
   '@oxc-project/runtime@0.133.0': {}
 
+  '@oxc-project/types@0.103.0': {}
+
+  '@oxc-project/types@0.127.0': {}
+
   '@oxc-project/types@0.133.0': {}
 
   '@oxfmt/binding-android-arm-eabi@0.52.0':
@@ -12257,6 +12600,10 @@ snapshots:
 
   '@polka/url@1.0.0-next.29': {}
 
+  '@quansync/fs@1.0.0':
+    dependencies:
+      quansync: 1.0.0
+
   '@radix-ui/number@1.1.2': {}
 
   '@radix-ui/primitive@1.1.3': {}
@@ -13468,6 +13815,103 @@ snapshots:
     dependencies:
       nanoid: 3.3.11
 
+  '@rolldown/binding-android-arm64@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-android-arm64@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-darwin-arm64@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-darwin-arm64@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-darwin-x64@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-darwin-x64@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-freebsd-x64@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-freebsd-x64@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-linux-arm64-gnu@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-linux-arm64-musl@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-linux-arm64-musl@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-linux-s390x-gnu@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-linux-x64-gnu@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-linux-x64-gnu@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-linux-x64-musl@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-linux-x64-musl@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-openharmony-arm64@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-openharmony-arm64@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-wasm32-wasi@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
+    dependencies:
+      '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+    optional: true
+
+  '@rolldown/binding-wasm32-wasi@1.0.0-rc.17':
+    dependencies:
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.10.0
+      '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+    optional: true
+
+  '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-win32-arm64-msvc@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/binding-win32-x64-msvc@1.0.0-beta.57':
+    optional: true
+
+  '@rolldown/binding-win32-x64-msvc@1.0.0-rc.17':
+    optional: true
+
+  '@rolldown/pluginutils@1.0.0-beta.57': {}
+
+  '@rolldown/pluginutils@1.0.0-rc.17': {}
+
   '@rolldown/pluginutils@1.0.0-rc.3': {}
 
   '@rollup/rollup-android-arm-eabi@4.59.0':
@@ -13706,6 +14150,11 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
+  '@tybys/wasm-util@0.10.3':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@types/babel__core@7.20.5':
     dependencies:
       '@babel/parser': 7.29.0
@@ -14146,7 +14595,24 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 25.3.3
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 5.8.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -14160,6 +14626,7 @@ snapshots:
       terser: 5.44.1
       tsx: 4.21.0
       typescript: 5.9.3
+      unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
   '@voidzero-dev/vite-plus-darwin-arm64@0.1.23':
@@ -14180,11 +14647,53 @@ snapshots:
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
     optional: true
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 25.3.3
+      jsdom: 20.0.3
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -14404,6 +14913,11 @@ snapshots:
 
   assertion-error@2.0.1: {}
 
+  ast-kit@2.2.0:
+    dependencies:
+      '@babel/parser': 7.29.7
+      pathe: 2.0.3
+
   async-function@1.0.0: {}
 
   async-limiter@1.0.1: {}
@@ -14667,6 +15181,8 @@ snapshots:
   binary-extensions@2.3.0:
     optional: true
 
+  birpc@4.0.0: {}
+
   boolbase@1.0.0: {}
 
   bplist-creator@0.1.0:
@@ -15259,6 +15775,8 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  dts-resolver@2.1.3: {}
+
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -15298,6 +15816,8 @@ snapshots:
 
   emoji-regex@8.0.0: {}
 
+  empathic@2.0.1: {}
+
   encodeurl@1.0.2: {}
 
   encodeurl@2.0.0: {}
@@ -16483,6 +17003,8 @@ snapshots:
     dependencies:
       hermes-estree: 0.36.0
 
+  hookable@6.1.1: {}
+
   hosted-git-info@7.0.2:
     dependencies:
       lru-cache: 10.4.3
@@ -16554,6 +17076,8 @@ snapshots:
       pkg-dir: 4.2.0
       resolve-cwd: 3.0.0
 
+  import-without-cache@0.2.5: {}
+
   importx@0.5.2:
     dependencies:
       bundle-require: 5.1.0(esbuild@0.25.12)
@@ -18028,7 +18552,32 @@ snapshots:
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -18051,7 +18600,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   oxlint-tsgolint@0.23.0:
     optionalDependencies:
@@ -18062,7 +18611,31 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -18084,7 +18657,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   p-limit@2.3.0:
     dependencies:
@@ -18278,6 +18851,8 @@ snapshots:
 
   quansync@0.2.11: {}
 
+  quansync@1.0.0: {}
+
   query-string@7.1.3:
     dependencies:
       decode-uri-component: 0.2.2
@@ -18726,6 +19301,66 @@ snapshots:
     dependencies:
       glob: 7.2.3
 
+  rolldown-plugin-dts@0.20.0(@typescript/native-preview@7.0.0-dev.20260210.1)(rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0))(typescript@5.8.3):
+    dependencies:
+      '@babel/generator': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+      ast-kit: 2.2.0
+      birpc: 4.0.0
+      dts-resolver: 2.1.3
+      get-tsconfig: 4.13.0
+      obug: 2.1.1
+      rolldown: 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+    optionalDependencies:
+      '@typescript/native-preview': 7.0.0-dev.20260210.1
+      typescript: 5.8.3
+    transitivePeerDependencies:
+      - oxc-resolver
+
+  rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0):
+    dependencies:
+      '@oxc-project/types': 0.103.0
+      '@rolldown/pluginutils': 1.0.0-beta.57
+    optionalDependencies:
+      '@rolldown/binding-android-arm64': 1.0.0-beta.57
+      '@rolldown/binding-darwin-arm64': 1.0.0-beta.57
+      '@rolldown/binding-darwin-x64': 1.0.0-beta.57
+      '@rolldown/binding-freebsd-x64': 1.0.0-beta.57
+      '@rolldown/binding-linux-arm-gnueabihf': 1.0.0-beta.57
+      '@rolldown/binding-linux-arm64-gnu': 1.0.0-beta.57
+      '@rolldown/binding-linux-arm64-musl': 1.0.0-beta.57
+      '@rolldown/binding-linux-x64-gnu': 1.0.0-beta.57
+      '@rolldown/binding-linux-x64-musl': 1.0.0-beta.57
+      '@rolldown/binding-openharmony-arm64': 1.0.0-beta.57
+      '@rolldown/binding-wasm32-wasi': 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      '@rolldown/binding-win32-arm64-msvc': 1.0.0-beta.57
+      '@rolldown/binding-win32-x64-msvc': 1.0.0-beta.57
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+
+  rolldown@1.0.0-rc.17:
+    dependencies:
+      '@oxc-project/types': 0.127.0
+      '@rolldown/pluginutils': 1.0.0-rc.17
+    optionalDependencies:
+      '@rolldown/binding-android-arm64': 1.0.0-rc.17
+      '@rolldown/binding-darwin-arm64': 1.0.0-rc.17
+      '@rolldown/binding-darwin-x64': 1.0.0-rc.17
+      '@rolldown/binding-freebsd-x64': 1.0.0-rc.17
+      '@rolldown/binding-linux-arm-gnueabihf': 1.0.0-rc.17
+      '@rolldown/binding-linux-arm64-gnu': 1.0.0-rc.17
+      '@rolldown/binding-linux-arm64-musl': 1.0.0-rc.17
+      '@rolldown/binding-linux-ppc64-gnu': 1.0.0-rc.17
+      '@rolldown/binding-linux-s390x-gnu': 1.0.0-rc.17
+      '@rolldown/binding-linux-x64-gnu': 1.0.0-rc.17
+      '@rolldown/binding-linux-x64-musl': 1.0.0-rc.17
+      '@rolldown/binding-openharmony-arm64': 1.0.0-rc.17
+      '@rolldown/binding-wasm32-wasi': 1.0.0-rc.17
+      '@rolldown/binding-win32-arm64-msvc': 1.0.0-rc.17
+      '@rolldown/binding-win32-x64-msvc': 1.0.0-rc.17
+
   rollup@4.59.0:
     dependencies:
       '@types/estree': 1.0.8
@@ -19302,6 +19937,35 @@ snapshots:
       minimist: 1.2.8
       strip-bom: 3.0.0
 
+  tsdown@0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3):
+    dependencies:
+      ansis: 4.2.0
+      cac: 6.7.14
+      defu: 6.1.7
+      empathic: 2.0.1
+      hookable: 6.1.1
+      import-without-cache: 0.2.5
+      obug: 2.1.1
+      picomatch: 4.0.4
+      rolldown: 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      rolldown-plugin-dts: 0.20.0(@typescript/native-preview@7.0.0-dev.20260210.1)(rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0))(typescript@5.8.3)
+      semver: 7.7.4
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      tree-kill: 1.2.2
+      unconfig-core: 7.5.0
+      unrun: 0.2.39(synckit@0.11.11)
+    optionalDependencies:
+      typescript: 5.8.3
+    transitivePeerDependencies:
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@ts-macro/tsc'
+      - '@typescript/native-preview'
+      - oxc-resolver
+      - synckit
+      - vue-tsc
+
   tslib@1.14.1: {}
 
   tslib@2.8.1: {}
@@ -19401,6 +20065,8 @@ snapshots:
 
   typescript@5.6.3: {}
 
+  typescript@5.8.3: {}
+
   typescript@5.9.3: {}
 
   typescript@6.0.3: {}
@@ -19472,6 +20138,11 @@ snapshots:
       has-symbols: 1.1.0
       which-boxed-primitive: 1.1.1
 
+  unconfig-core@7.5.0:
+    dependencies:
+      '@quansync/fs': 1.0.0
+      quansync: 1.0.0
+
   unconfig@0.6.1:
     dependencies:
       '@antfu/utils': 8.1.1
@@ -19532,6 +20203,12 @@ snapshots:
       '@unrs/resolver-binding-win32-ia32-msvc': 1.11.1
       '@unrs/resolver-binding-win32-x64-msvc': 1.11.1
 
+  unrun@0.2.39(synckit@0.11.11):
+    dependencies:
+      rolldown: 1.0.0-rc.17
+    optionalDependencies:
+      synckit: 0.11.11
+
   update-browserslist-db@1.2.3(browserslist@4.28.1):
     dependencies:
       browserslist: 4.28.1
@@ -19688,14 +20365,64 @@ snapshots:
       - tsx
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23

From 5c7f77f2b7f79aecb12237b4f14f9a958919aade Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 18:25:50 +0200
Subject: [PATCH 051/129] feat(mimic): publish client packages

---
 packages/mimic-server/LICENSE.md              | 661 ++++++++++++++++++
 packages/mimic-server/README.md               |   1 +
 packages/mimic-server/package.json            |  55 ++
 .../src/effect/CollectionHandle.ts            | 105 +++
 .../mimic-server/src/effect/DatabaseHandle.ts | 175 +++++
 packages/mimic-server/src/effect/MimicSDK.ts  | 191 +++++
 .../src/effect/RawCollectionHandle.ts         | 189 +++++
 packages/mimic-server/src/effect/RpcClient.ts |  69 ++
 packages/mimic-server/src/effect/index.ts     |  33 +
 packages/mimic-server/src/effect/types.ts     |  48 ++
 packages/mimic-server/src/index.ts            |  34 +
 packages/mimic-server/src/migrate/index.ts    |   1 +
 .../src/migrate/migration/analyze.ts          | 237 +++++++
 .../src/migrate/migration/index.ts            |   3 +
 .../src/migrate/migration/reconcile.ts        |  95 +++
 .../src/migrate/migration/types.ts            |  33 +
 packages/mimic-server/src/promise/MimicSDK.ts | 310 ++++++++
 packages/mimic-server/src/promise/index.ts    |   1 +
 packages/mimic-server/src/rpc/errors.ts       | 116 +++
 packages/mimic-server/src/rpc/group.ts        |  29 +
 .../src/rpc/groups/collections.ts             |  54 ++
 .../mimic-server/src/rpc/groups/databases.ts  |  34 +
 .../src/rpc/groups/document-auth.ts           |  22 +
 .../mimic-server/src/rpc/groups/documents.ts  |  71 ++
 .../mimic-server/src/rpc/groups/grants.ts     |  39 ++
 .../mimic-server/src/rpc/groups/migrations.ts |  72 ++
 packages/mimic-server/src/rpc/groups/users.ts |  32 +
 packages/mimic-server/src/rpc/index.ts        | 105 +++
 packages/mimic-server/src/rpc/middleware.ts   |  23 +
 packages/mimic-server/src/rpc/schemas.ts      | 203 ++++++
 .../tests/migrate/migration/analyze.test.ts   |  56 ++
 .../tests/migrate/migration/reconcile.test.ts |  61 ++
 .../mimic-server/tests/rpc/contracts.test.ts  |  41 ++
 .../mimic-server/tests/rpc/schemas.test.ts    |  77 ++
 .../tests/sdk/effect/migrations.test.ts       | 146 ++++
 .../sdk/effect/raw-collection-submit.test.ts  | 114 +++
 packages/mimic-server/tsconfig.build.json     |  27 +
 packages/mimic-server/tsconfig.json           |   9 +
 packages/mimic-server/vitest.mts              |  10 +
 packages/mimic/LICENSE.md                     | 661 ++++++++++++++++++
 packages/mimic/README.md                      |   3 +
 packages/mimic/package.json                   |  66 ++
 packages/mimic/src/client/ClientDocument.ts   | 481 +++++++++++++
 packages/mimic/src/client/Draft.ts            | 132 ++++
 packages/mimic/src/client/HttpApiClient.ts    | 149 ++++
 packages/mimic/src/client/Transport.ts        |  48 ++
 .../mimic/src/client/WebSocketTransport.ts    | 306 ++++++++
 packages/mimic/src/client/errors.ts           |  59 ++
 packages/mimic/src/client/index.ts            |  32 +
 packages/mimic/src/client/pending.ts          |  22 +
 packages/mimic/src/client/presence.ts         | 173 +++++
 packages/mimic/src/client/protocol.ts         | 137 ++++
 packages/mimic/src/client/state.ts            |  19 +
 packages/mimic/src/client/sync.ts             |   1 +
 packages/mimic/src/client/types.ts            |  96 +++
 packages/mimic/src/index.ts                   |   3 +
 packages/mimic/src/react/index.ts             |   1 +
 packages/mimic/src/shared/browser.ts          |  31 +
 packages/mimic/src/shared/equality.ts         |  15 +
 packages/mimic/src/shared/ids.ts              |  15 +
 .../mimic/src/zustand-commander/commander.ts  | 219 ++++++
 .../mimic/src/zustand-commander/context.ts    | 119 ++++
 packages/mimic/src/zustand-commander/hooks.ts | 136 ++++
 packages/mimic/src/zustand-commander/index.ts |  24 +
 packages/mimic/src/zustand-commander/types.ts | 143 ++++
 packages/mimic/src/zustand/index.ts           |  10 +
 packages/mimic/src/zustand/middleware.ts      |  87 +++
 packages/mimic/src/zustand/types.ts           |  48 ++
 packages/mimic/src/zustand/useDraft.ts        |  86 +++
 .../tests/client/client-document.test.ts      | 186 +++++
 packages/mimic/tests/client/draft.test.ts     |  89 +++
 .../tests/client/http-api-client.test.ts      |  44 ++
 packages/mimic/tests/client/presence.test.ts  | 164 +++++
 .../tests/client/websocket-transport.test.ts  | 278 ++++++++
 packages/mimic/tests/helpers.ts               |  97 +++
 .../mimic/tests/interop/mimic-core.test.ts    |  37 +
 .../tests/zustand-commander/hooks.test.tsx    | 187 +++++
 .../mimic/tests/zustand/middleware.test.ts    |  43 ++
 .../mimic/tests/zustand/use-draft.test.tsx    |  52 ++
 packages/mimic/tsconfig.build.json            |  26 +
 packages/mimic/tsconfig.json                  |  10 +
 packages/mimic/vitest.mts                     |   9 +
 pnpm-lock.yaml                                | 592 +++++++++++++---
 83 files changed, 8609 insertions(+), 109 deletions(-)
 create mode 100644 packages/mimic-server/LICENSE.md
 create mode 100644 packages/mimic-server/README.md
 create mode 100644 packages/mimic-server/package.json
 create mode 100644 packages/mimic-server/src/effect/CollectionHandle.ts
 create mode 100644 packages/mimic-server/src/effect/DatabaseHandle.ts
 create mode 100644 packages/mimic-server/src/effect/MimicSDK.ts
 create mode 100644 packages/mimic-server/src/effect/RawCollectionHandle.ts
 create mode 100644 packages/mimic-server/src/effect/RpcClient.ts
 create mode 100644 packages/mimic-server/src/effect/index.ts
 create mode 100644 packages/mimic-server/src/effect/types.ts
 create mode 100644 packages/mimic-server/src/index.ts
 create mode 100644 packages/mimic-server/src/migrate/index.ts
 create mode 100644 packages/mimic-server/src/migrate/migration/analyze.ts
 create mode 100644 packages/mimic-server/src/migrate/migration/index.ts
 create mode 100644 packages/mimic-server/src/migrate/migration/reconcile.ts
 create mode 100644 packages/mimic-server/src/migrate/migration/types.ts
 create mode 100644 packages/mimic-server/src/promise/MimicSDK.ts
 create mode 100644 packages/mimic-server/src/promise/index.ts
 create mode 100644 packages/mimic-server/src/rpc/errors.ts
 create mode 100644 packages/mimic-server/src/rpc/group.ts
 create mode 100644 packages/mimic-server/src/rpc/groups/collections.ts
 create mode 100644 packages/mimic-server/src/rpc/groups/databases.ts
 create mode 100644 packages/mimic-server/src/rpc/groups/document-auth.ts
 create mode 100644 packages/mimic-server/src/rpc/groups/documents.ts
 create mode 100644 packages/mimic-server/src/rpc/groups/grants.ts
 create mode 100644 packages/mimic-server/src/rpc/groups/migrations.ts
 create mode 100644 packages/mimic-server/src/rpc/groups/users.ts
 create mode 100644 packages/mimic-server/src/rpc/index.ts
 create mode 100644 packages/mimic-server/src/rpc/middleware.ts
 create mode 100644 packages/mimic-server/src/rpc/schemas.ts
 create mode 100644 packages/mimic-server/tests/migrate/migration/analyze.test.ts
 create mode 100644 packages/mimic-server/tests/migrate/migration/reconcile.test.ts
 create mode 100644 packages/mimic-server/tests/rpc/contracts.test.ts
 create mode 100644 packages/mimic-server/tests/rpc/schemas.test.ts
 create mode 100644 packages/mimic-server/tests/sdk/effect/migrations.test.ts
 create mode 100644 packages/mimic-server/tests/sdk/effect/raw-collection-submit.test.ts
 create mode 100644 packages/mimic-server/tsconfig.build.json
 create mode 100644 packages/mimic-server/tsconfig.json
 create mode 100644 packages/mimic-server/vitest.mts
 create mode 100644 packages/mimic/LICENSE.md
 create mode 100644 packages/mimic/README.md
 create mode 100644 packages/mimic/package.json
 create mode 100644 packages/mimic/src/client/ClientDocument.ts
 create mode 100644 packages/mimic/src/client/Draft.ts
 create mode 100644 packages/mimic/src/client/HttpApiClient.ts
 create mode 100644 packages/mimic/src/client/Transport.ts
 create mode 100644 packages/mimic/src/client/WebSocketTransport.ts
 create mode 100644 packages/mimic/src/client/errors.ts
 create mode 100644 packages/mimic/src/client/index.ts
 create mode 100644 packages/mimic/src/client/pending.ts
 create mode 100644 packages/mimic/src/client/presence.ts
 create mode 100644 packages/mimic/src/client/protocol.ts
 create mode 100644 packages/mimic/src/client/state.ts
 create mode 100644 packages/mimic/src/client/sync.ts
 create mode 100644 packages/mimic/src/client/types.ts
 create mode 100644 packages/mimic/src/index.ts
 create mode 100644 packages/mimic/src/react/index.ts
 create mode 100644 packages/mimic/src/shared/browser.ts
 create mode 100644 packages/mimic/src/shared/equality.ts
 create mode 100644 packages/mimic/src/shared/ids.ts
 create mode 100644 packages/mimic/src/zustand-commander/commander.ts
 create mode 100644 packages/mimic/src/zustand-commander/context.ts
 create mode 100644 packages/mimic/src/zustand-commander/hooks.ts
 create mode 100644 packages/mimic/src/zustand-commander/index.ts
 create mode 100644 packages/mimic/src/zustand-commander/types.ts
 create mode 100644 packages/mimic/src/zustand/index.ts
 create mode 100644 packages/mimic/src/zustand/middleware.ts
 create mode 100644 packages/mimic/src/zustand/types.ts
 create mode 100644 packages/mimic/src/zustand/useDraft.ts
 create mode 100644 packages/mimic/tests/client/client-document.test.ts
 create mode 100644 packages/mimic/tests/client/draft.test.ts
 create mode 100644 packages/mimic/tests/client/http-api-client.test.ts
 create mode 100644 packages/mimic/tests/client/presence.test.ts
 create mode 100644 packages/mimic/tests/client/websocket-transport.test.ts
 create mode 100644 packages/mimic/tests/helpers.ts
 create mode 100644 packages/mimic/tests/interop/mimic-core.test.ts
 create mode 100644 packages/mimic/tests/zustand-commander/hooks.test.tsx
 create mode 100644 packages/mimic/tests/zustand/middleware.test.ts
 create mode 100644 packages/mimic/tests/zustand/use-draft.test.tsx
 create mode 100644 packages/mimic/tsconfig.build.json
 create mode 100644 packages/mimic/tsconfig.json
 create mode 100644 packages/mimic/vitest.mts

diff --git a/packages/mimic-server/LICENSE.md b/packages/mimic-server/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/mimic-server/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/mimic-server/README.md b/packages/mimic-server/README.md
new file mode 100644
index 000000000..ffee151a3
--- /dev/null
+++ b/packages/mimic-server/README.md
@@ -0,0 +1 @@
+Typed Mimic service client, RPC contracts, and migration helpers.
diff --git a/packages/mimic-server/package.json b/packages/mimic-server/package.json
new file mode 100644
index 000000000..ac0d47987
--- /dev/null
+++ b/packages/mimic-server/package.json
@@ -0,0 +1,55 @@
+{
+  "name": "@voidhash/mimic-server",
+  "version": "1.0.0-beta.19",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/mimic-server"
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "import": "./src/index.ts",
+      "require": "./dist/index.cjs"
+    },
+    "./effect": {
+      "types": "./src/effect/index.ts",
+      "import": "./src/effect/index.ts",
+      "require": "./dist/effect/index.cjs"
+    },
+    "./rpc": {
+      "types": "./src/rpc/index.ts",
+      "import": "./src/rpc/index.ts",
+      "require": "./dist/rpc/index.cjs"
+    },
+    "./migrate": {
+      "types": "./src/migrate/index.ts",
+      "import": "./src/migrate/index.ts",
+      "require": "./dist/migrate/index.cjs"
+    }
+  },
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vp test run -c vitest.mts",
+    "test:watch": "vp test -c vitest.mts"
+  },
+  "dependencies": {
+    "@voidhash/mimic-core": "workspace:*",
+    "effect": "4.0.0-beta.84"
+  },
+  "devDependencies": {
+    "tsdown": "^0.18.2",
+    "typescript": "5.8.3",
+    "vite-plus": "0.1.23",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/mimic-server/src/effect/CollectionHandle.ts b/packages/mimic-server/src/effect/CollectionHandle.ts
new file mode 100644
index 000000000..7349ebbb8
--- /dev/null
+++ b/packages/mimic-server/src/effect/CollectionHandle.ts
@@ -0,0 +1,105 @@
+import { Effect } from "effect";
+import type { Value } from "@voidhash/mimic-core";
+import { Primitive } from "@voidhash/mimic-core";
+
+import type { MimicSDK } from "./MimicSDK.ts";
+import type {
+  DocumentAuthenticationSetup,
+  DocumentSnapshot,
+  RawDocumentSnapshot,
+  SetupDocumentAuthenticationOptions,
+  SnapshotFor,
+} from "./types.ts";
+
+const decodeSnapshot = <TPrimitive extends Primitive.AnyPrimitive>(
+  primitive: TPrimitive,
+  response: RawDocumentSnapshot,
+): DocumentSnapshot<SnapshotFor<TPrimitive>> => ({
+  id: response.id,
+  collectionId: response.collectionId,
+  value: response.value as Value,
+  version: response.version,
+  snapshot: primitive.decode(response.value as Value) as SnapshotFor<TPrimitive>,
+});
+
+/**
+ * Typed handle for a collection. Generic in `TPrimitive` so encode/decode
+ * round-trips through the user's mimic-core schema.
+ */
+export class CollectionHandle<TPrimitive extends Primitive.AnyPrimitive> {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly primitive: TPrimitive;
+  readonly sdk: MimicSDK;
+
+  constructor(id: string, databaseId: string, primitive: TPrimitive, sdk: MimicSDK) {
+    this.id = id;
+    this.databaseId = databaseId;
+    this.primitive = primitive;
+    this.sdk = sdk;
+  }
+
+  create(data: Primitive.InferInput<TPrimitive>, options?: { readonly id?: string }) {
+    const collectionId = this.id;
+    const primitive = this.primitive;
+    return this.sdk.runEffect((client) =>
+      Effect.map(
+        client.CreateDocument({
+          collectionId,
+          id: options?.id,
+          value: primitive.encode(data),
+        }) as Effect.Effect<RawDocumentSnapshot, unknown>,
+        (response) => decodeSnapshot(primitive, response),
+      ),
+    );
+  }
+
+  get(documentId: string) {
+    const collectionId = this.id;
+    const primitive = this.primitive;
+    return this.sdk.runEffect((client) =>
+      Effect.map(
+        client.GetDocument({ collectionId, documentId }) as Effect.Effect<
+          RawDocumentSnapshot,
+          unknown
+        >,
+        (response) => decodeSnapshot(primitive, response),
+      ),
+    );
+  }
+
+  list() {
+    const collectionId = this.id;
+    const primitive = this.primitive;
+    return this.sdk.runEffect((client) =>
+      Effect.map(
+        client.ListDocuments({ collectionId }) as Effect.Effect<
+          ReadonlyArray<RawDocumentSnapshot>,
+          unknown
+        >,
+        (response) => response.map((snapshot) => decodeSnapshot(primitive, snapshot)),
+      ),
+    );
+  }
+
+  delete(documentId: string) {
+    return this.sdk.runEffect((client) =>
+      client.DeleteDocument({ collectionId: this.id, documentId }),
+    );
+  }
+
+  setupDocumentAuthentication(
+    options: SetupDocumentAuthenticationOptions,
+  ): Effect.Effect<DocumentAuthenticationSetup, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.SetupDocumentAuthentication({
+          collectionId: this.id,
+          documentId: options.documentId,
+          permission: options.permission,
+          origins: options.origins,
+          expiresInSeconds: options.expiresInSeconds,
+        }) as Effect.Effect<DocumentAuthenticationSetup, unknown>,
+    );
+  }
+}
diff --git a/packages/mimic-server/src/effect/DatabaseHandle.ts b/packages/mimic-server/src/effect/DatabaseHandle.ts
new file mode 100644
index 000000000..1589f3fc1
--- /dev/null
+++ b/packages/mimic-server/src/effect/DatabaseHandle.ts
@@ -0,0 +1,175 @@
+import { Effect } from "effect";
+import { Primitive, serializeSchema } from "@voidhash/mimic-core";
+
+import { CollectionHandle } from "./CollectionHandle.ts";
+import { RawCollectionHandle } from "./RawCollectionHandle.ts";
+import type { MimicSDK } from "./MimicSDK.ts";
+import type { CollectionInfo, DatabaseMigrationChange, DatabaseMigrationInfo } from "./types.ts";
+
+/**
+ * Typed handle for a database. Methods that depend on a known schema use
+ * the `Primitive` taken in by `collection`/`createCollection`. For admin-
+ * style flows where the schema is dynamic JSON, see `collectionRaw` and
+ * `listCollectionsRaw`.
+ */
+export class DatabaseHandle {
+  readonly id: string;
+  readonly name: string;
+  readonly description: string;
+  /** Internal: back-reference to the SDK for transport. */
+  readonly sdk: MimicSDK;
+
+  constructor(id: string, name: string, description: string, sdk: MimicSDK) {
+    this.id = id;
+    this.name = name;
+    this.description = description;
+    this.sdk = sdk;
+  }
+
+  // ---------------------------------------------------------------------
+  // Typed collection operations — require a `Primitive` schema for safe
+  // encode/decode.
+  // ---------------------------------------------------------------------
+
+  createCollection<TPrimitive extends Primitive.AnyPrimitive>(name: string, primitive: TPrimitive) {
+    const databaseId = this.id;
+    const sdk = this.sdk;
+    return sdk.runEffect((client) =>
+      Effect.map(
+        client.CreateCollection({
+          databaseId,
+          name,
+          schema: serializeSchema(primitive.schema),
+        }),
+        (response) => new CollectionHandle(response.id, response.databaseId, primitive, sdk),
+      ),
+    );
+  }
+
+  /**
+   * Lists collections with their stored schema JSON. Same response as
+   * `listCollectionsRaw`, included on the typed handle for convenience.
+   */
+  listCollections() {
+    return this.sdk.runEffect(
+      (client) =>
+        client.ListCollections({ databaseId: this.id }) as Effect.Effect<
+          readonly CollectionInfo[],
+          unknown
+        >,
+    );
+  }
+
+  deleteCollection(collectionId: string) {
+    return this.sdk.runEffect((client) => client.DeleteCollection({ collectionId }));
+  }
+
+  collection<TPrimitive extends Primitive.AnyPrimitive>(
+    id: string,
+    primitive: TPrimitive,
+  ): CollectionHandle<TPrimitive> {
+    return new CollectionHandle(id, this.id, primitive, this.sdk);
+  }
+
+  /**
+   * Update a collection's schema by passing in a typed `Primitive`. Note:
+   * the `dataMigrationSource` parameter is preserved on the wire but the
+   * server's ad-hoc `updateCollectionSchema` path doesn't apply bundled
+   * data migrations — `applyMigration` is the only path that does. This
+   * mirrors the previous SDK behavior.
+   */
+  updateCollectionSchema<TPrimitive extends Primitive.AnyPrimitive>(
+    collectionId: string,
+    primitive: TPrimitive,
+    dataMigrationSource?: string,
+  ) {
+    return this.sdk.runEffect((client) =>
+      client.UpdateCollectionSchema({
+        collectionId,
+        schema: serializeSchema(primitive.schema),
+        dataMigrationSource,
+      }),
+    );
+  }
+
+  // ---------------------------------------------------------------------
+  // Raw helpers — for consumers that work with dynamic JSON values
+  // (admin app, tooling). These bypass `Primitive` encode/decode.
+  // ---------------------------------------------------------------------
+
+  /** Same as `listCollections` — kept under the explicit `Raw` name for clarity. */
+  listCollectionsRaw() {
+    return this.listCollections();
+  }
+
+  /**
+   * Returns a `RawCollectionHandle` that exposes value-based document CRUD
+   * without requiring a typed `Primitive`. Use in dynamic-schema scenarios
+   * (admin UI, generic tooling).
+   */
+  collectionRaw(collectionId: string): RawCollectionHandle {
+    return new RawCollectionHandle(collectionId, this.id, this.sdk);
+  }
+
+  /**
+   * Update a collection's schema using raw schema JSON. Identical wire shape
+   * as `updateCollectionSchema` but skips `Primitive`-based serialization.
+   */
+  updateCollectionSchemaRaw(collectionId: string, schema: unknown, dataMigrationSource?: string) {
+    return this.sdk.runEffect((client) =>
+      client.UpdateCollectionSchema({
+        collectionId,
+        schema,
+        dataMigrationSource,
+      }),
+    );
+  }
+
+  // ---------------------------------------------------------------------
+  // Migrations
+  // ---------------------------------------------------------------------
+
+  listMigrations() {
+    return this.sdk.runEffect(
+      (client) =>
+        client.ListDatabaseMigrations({ databaseId: this.id }) as Effect.Effect<
+          readonly DatabaseMigrationInfo[],
+          unknown
+        >,
+    );
+  }
+
+  applyMigration(options: {
+    readonly version: number;
+    readonly name: string;
+    readonly checksum: string;
+    readonly changes: readonly DatabaseMigrationChange[];
+    readonly mode?: "apply" | "rerun" | "replace";
+    readonly dryRun?: { readonly limit?: number; readonly samplePercent?: number };
+    readonly batchSize?: number;
+    readonly redoSucceededOnReplace?: boolean;
+  }) {
+    return this.sdk.runEffect((client) =>
+      client.ApplyDatabaseMigration({
+        databaseId: this.id,
+        version: options.version,
+        name: options.name,
+        checksum: options.checksum,
+        changes: options.changes,
+        mode: options.mode,
+        dryRun: options.dryRun,
+        batchSize: options.batchSize,
+        redoSucceededOnReplace: options.redoSucceededOnReplace,
+      }),
+    );
+  }
+
+  getMigrationStatus(version: number) {
+    return this.sdk.runEffect((client) =>
+      client.GetMigrationStatus({
+        databaseId: this.id,
+        version,
+      }),
+    );
+  }
+}
diff --git a/packages/mimic-server/src/effect/MimicSDK.ts b/packages/mimic-server/src/effect/MimicSDK.ts
new file mode 100644
index 000000000..80a3e1d2a
--- /dev/null
+++ b/packages/mimic-server/src/effect/MimicSDK.ts
@@ -0,0 +1,191 @@
+import { Effect, Layer, ManagedRuntime } from "effect";
+import { RpcClient, type RpcGroup } from "effect/unstable/rpc";
+import {
+  type DatabasePermission,
+  type DocumentAuthenticationSetup,
+  type Grant,
+  MimicRpcGroup,
+  type User,
+} from "../rpc/index.ts";
+
+/** Convenience alias for the typed `RpcClient` over our shared group. */
+export type MimicRpcClient = RpcClient.RpcClient<RpcGroup.Rpcs<typeof MimicRpcGroup>>;
+
+import { DatabaseHandle } from "./DatabaseHandle.ts";
+import { makeMimicProtocolLayer, type MimicClientConfig } from "./RpcClient.ts";
+import type { CreateUserResult, DatabaseInfo, DocumentSnapshot } from "./types.ts";
+
+/**
+ * Public entry point for the typed Effect SDK.
+ *
+ * Each instance owns a `ManagedRuntime` over the protocol layer (see
+ * `RpcClient.ts`). Methods return self-contained `Effect` values — the
+ * runtime context (HttpClient, serialization, RpcClient.Protocol) is
+ * provided internally so callers don't need to know about transport
+ * primitives.
+ *
+ * The `runEffect` helper is the workhorse: it builds an `RpcClient` for
+ * the shared `MimicRpcGroup`, hands it to the user-supplied function, and
+ * provides the protocol layer + scope. Each call gets its own scope, but
+ * the underlying HttpClient + serializer are shared via the runtime.
+ *
+ * Handles (`DatabaseHandle`, `CollectionHandle`, `RawCollectionHandle`)
+ * carry a back-reference to this SDK so they can call `runEffect` to make
+ * fluent multi-step operations runnable as a single self-contained Effect.
+ */
+export class MimicSDK {
+  readonly runtime: ManagedRuntime.ManagedRuntime<RpcClient.Protocol, never>;
+  private readonly protocolLayer: Layer.Layer<RpcClient.Protocol>;
+
+  constructor(config: MimicClientConfig) {
+    this.protocolLayer = makeMimicProtocolLayer(config);
+    this.runtime = ManagedRuntime.make(this.protocolLayer);
+  }
+
+  /**
+   * Test seam: construct an SDK from an arbitrary protocol layer. Handy
+   * for hooking up an in-memory test client (e.g. via `RpcTest.makeClient`
+   * piped through a `Protocol` adapter) without going through HTTP.
+   *
+   * Production code should use the `new MimicSDK(config)` constructor;
+   * this factory exists to make handle behavior testable end-to-end.
+   */
+  static fromProtocolLayer(protocolLayer: Layer.Layer<RpcClient.Protocol>): MimicSDK {
+    const sdk = Object.create(MimicSDK.prototype) as MimicSDK;
+    Object.defineProperties(sdk, {
+      protocolLayer: { value: protocolLayer, writable: false },
+      runtime: { value: ManagedRuntime.make(protocolLayer), writable: false },
+    });
+    return sdk;
+  }
+
+  /**
+   * Internal: build a fully self-contained Effect by handing an `RpcClient`
+   * to `fn`, wrapping the result in `Effect.scoped` to clean up the
+   * per-call scope, and providing this SDK's protocol layer.
+   */
+  runEffect<A, E>(fn: (client: MimicRpcClient) => Effect.Effect<A, E>): Effect.Effect<A, E> {
+    return Effect.flatMap(
+      RpcClient.make(MimicRpcGroup) as Effect.Effect<
+        MimicRpcClient,
+        never,
+        RpcClient.Protocol | import("effect").Scope.Scope
+      >,
+      fn,
+    ).pipe(Effect.scoped, Effect.provide(this.protocolLayer)) as Effect.Effect<A, E>;
+  }
+
+  // ---------------------------------------------------------------------
+  // Database resources
+  // ---------------------------------------------------------------------
+
+  createDatabase(options: { readonly name: string; readonly description?: string }) {
+    return this.runEffect((client) =>
+      Effect.map(
+        client.CreateDatabase({
+          name: options.name,
+          description: options.description ?? "",
+        }),
+        (result) => new DatabaseHandle(result.id, result.name, result.description, this),
+      ),
+    );
+  }
+
+  listDatabases(): Effect.Effect<readonly DatabaseInfo[], unknown> {
+    return this.runEffect(
+      (client) => client.ListDatabases() as Effect.Effect<readonly DatabaseInfo[], unknown>,
+    );
+  }
+
+  deleteDatabase(id: string) {
+    return this.runEffect((client) => client.DeleteDatabase({ databaseId: id }));
+  }
+
+  /**
+   * Returns a typed handle for an existing database. No network round-trip.
+   */
+  database(id: string, name = "", description = ""): DatabaseHandle {
+    return new DatabaseHandle(id, name, description, this);
+  }
+
+  // ---------------------------------------------------------------------
+  // User management — used by admin app and superuser flows.
+  // ---------------------------------------------------------------------
+
+  listUsers(): Effect.Effect<readonly User[], unknown> {
+    return this.runEffect(
+      (client) => client.ListUsers() as Effect.Effect<readonly User[], unknown>,
+    );
+  }
+
+  createUser(options: {
+    readonly username: string;
+    readonly password: string;
+  }): Effect.Effect<CreateUserResult, unknown> {
+    return this.runEffect(
+      (client) =>
+        client.CreateUser({
+          username: options.username,
+          password: options.password,
+        }) as Effect.Effect<CreateUserResult, unknown>,
+    );
+  }
+
+  deleteUser(userId: string) {
+    return this.runEffect((client) => client.DeleteUser({ userId }));
+  }
+
+  // ---------------------------------------------------------------------
+  // Grants
+  // ---------------------------------------------------------------------
+
+  listGrants(userId?: string): Effect.Effect<readonly Grant[], unknown> {
+    return this.runEffect(
+      (client) => client.ListGrants({ userId }) as Effect.Effect<readonly Grant[], unknown>,
+    );
+  }
+
+  grantPermission(payload: {
+    readonly userId: string;
+    readonly databaseId: string;
+    readonly permission: DatabasePermission;
+  }) {
+    return this.runEffect((client) => client.GrantPermission(payload));
+  }
+
+  revokePermission(payload: { readonly userId: string; readonly databaseId: string }) {
+    return this.runEffect((client) => client.RevokePermission(payload));
+  }
+
+  // ---------------------------------------------------------------------
+  // Document authentication — top-level convenience for tools that don't
+  // hold a CollectionHandle (e.g. admin) but need to mint document tokens.
+  // ---------------------------------------------------------------------
+
+  setupDocumentAuthentication(options: {
+    readonly collectionId: string;
+    readonly documentId: string;
+    readonly permission: "read" | "write";
+    readonly origins: readonly string[];
+    readonly expiresInSeconds?: number;
+  }): Effect.Effect<DocumentAuthenticationSetup, unknown> {
+    return this.runEffect(
+      (client) =>
+        client.SetupDocumentAuthentication({
+          collectionId: options.collectionId,
+          documentId: options.documentId,
+          permission: options.permission,
+          origins: options.origins,
+          expiresInSeconds: options.expiresInSeconds,
+        }) as Effect.Effect<DocumentAuthenticationSetup, unknown>,
+    );
+  }
+
+  /** Dispose the underlying runtime — releases any held resources. */
+  dispose() {
+    return this.runtime.dispose();
+  }
+}
+
+// Re-export so consumers can ergonomically construct snapshots for tests.
+export type { DocumentSnapshot };
diff --git a/packages/mimic-server/src/effect/RawCollectionHandle.ts b/packages/mimic-server/src/effect/RawCollectionHandle.ts
new file mode 100644
index 000000000..72f50b351
--- /dev/null
+++ b/packages/mimic-server/src/effect/RawCollectionHandle.ts
@@ -0,0 +1,189 @@
+import { Effect } from "effect";
+
+import type { MimicSDK } from "./MimicSDK.ts";
+import type {
+  DocumentAuthenticationSetup,
+  RawDocumentSnapshot,
+  SetupDocumentAuthenticationOptions,
+} from "./types.ts";
+
+/**
+ * A granular transaction envelope for {@link RawCollectionHandle.submitTransaction}:
+ * a `baseVersion` (optimistic-concurrency anchor) and the `commands` batch to
+ * apply. `commands` are passed straight through as raw JSON — the caller owns
+ * command construction (e.g. `reconcile()` output). `id` is optional; a random
+ * one is minted when omitted. Mirrors the server `TransactionEnvelope` shape.
+ */
+export interface RawTransactionInput {
+  readonly baseVersion: number;
+  readonly commands: readonly unknown[];
+  readonly id?: string;
+}
+
+/** Result of {@link RawCollectionHandle.submitTransaction}. */
+export interface RawTransactionResult {
+  readonly accepted: boolean;
+  readonly version: number;
+  readonly transactionId: string;
+  readonly reason?: string;
+}
+
+/**
+ * "Raw" collection handle for callers that work with dynamic schemas at
+ * runtime (admin UI, tooling). Does not encode/decode through a `Primitive`;
+ * values are passed straight through as JSON.
+ *
+ * The interface intentionally mirrors `CollectionHandle` shape-wise but
+ * with `Raw` suffixes so it's clear the caller is opting out of typed
+ * marshalling.
+ */
+export class RawCollectionHandle {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly sdk: MimicSDK;
+
+  constructor(id: string, databaseId: string, sdk: MimicSDK) {
+    this.id = id;
+    this.databaseId = databaseId;
+    this.sdk = sdk;
+  }
+
+  createDocumentRaw(
+    value: unknown,
+    options?: { readonly id?: string },
+  ): Effect.Effect<RawDocumentSnapshot, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.CreateDocument({
+          collectionId: this.id,
+          id: options?.id,
+          value,
+        }) as Effect.Effect<RawDocumentSnapshot, unknown>,
+    );
+  }
+
+  getDocumentRaw(documentId: string): Effect.Effect<RawDocumentSnapshot, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.GetDocument({
+          collectionId: this.id,
+          documentId,
+        }) as Effect.Effect<RawDocumentSnapshot, unknown>,
+    );
+  }
+
+  listDocumentsRaw(): Effect.Effect<ReadonlyArray<RawDocumentSnapshot>, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.ListDocuments({ collectionId: this.id }) as Effect.Effect<
+          ReadonlyArray<RawDocumentSnapshot>,
+          unknown
+        >,
+    );
+  }
+
+  deleteDocument(documentId: string) {
+    return this.sdk.runEffect((client) =>
+      client.DeleteDocument({ collectionId: this.id, documentId }),
+    );
+  }
+
+  /**
+   * Replace a document's value via a single-command transaction. Reads the
+   * current version, then submits `[{ kind: "value.set", path: [], value }]`.
+   * Mirrors the previous admin behavior so admin's UI doesn't need to
+   * implement the transaction protocol.
+   */
+  setDocumentRaw(
+    documentId: string,
+    value: unknown,
+  ): Effect.Effect<{ readonly id: string; readonly version: number }, unknown> {
+    const collectionId = this.id;
+    return this.sdk.runEffect((client) =>
+      Effect.gen(function* () {
+        const current = (yield* client.GetDocument({
+          collectionId,
+          documentId,
+        })) as RawDocumentSnapshot;
+
+        const transactionId =
+          typeof globalThis.crypto?.randomUUID === "function"
+            ? globalThis.crypto.randomUUID()
+            : `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+
+        const result = yield* client.SubmitTransaction({
+          collectionId,
+          documentId,
+          transaction: {
+            id: transactionId,
+            baseVersion: current.version,
+            commands: [
+              {
+                kind: "value.set",
+                path: [],
+                value,
+              },
+            ],
+          },
+        });
+
+        if (!result.accepted) {
+          return yield* Effect.die(new Error(result.reason ?? "Document update rejected"));
+        }
+
+        return { id: documentId, version: result.version };
+      }),
+    );
+  }
+
+  /**
+   * Submit a GRANULAR transaction — an arbitrary `commands` batch at an explicit
+   * `baseVersion` — over the same `SubmitTransaction` RPC as
+   * {@link setDocumentRaw}, but WITHOUT the whole-value `value.set` and WITHOUT
+   * dying on rejection. Unlike `setDocumentRaw` (which reads the version, replaces
+   * the entire document, and treats any rejection as a defect), this leaves
+   * version handling and command construction to the caller and surfaces the raw
+   * `{accepted, version, reason}` result so a version conflict
+   * (`accepted: false`) can be retried by re-reading and re-reconciling. The
+   * accepted batch is linearized and fanned out to live WS clients by the
+   * document DO — this is the granular server-write path the paywall workspace
+   * uses (never `setDocumentRaw`, which clobbers concurrent human edits).
+   */
+  submitTransaction(
+    documentId: string,
+    input: RawTransactionInput,
+  ): Effect.Effect<RawTransactionResult, unknown> {
+    const collectionId = this.id;
+    return this.sdk.runEffect((client) => {
+      const transactionId =
+        input.id ??
+        (typeof globalThis.crypto?.randomUUID === "function"
+          ? globalThis.crypto.randomUUID()
+          : `${Date.now()}-${Math.random().toString(36).slice(2)}`);
+      return client.SubmitTransaction({
+        collectionId,
+        documentId,
+        transaction: {
+          id: transactionId,
+          baseVersion: input.baseVersion,
+          commands: input.commands as never,
+        },
+      }) as Effect.Effect<RawTransactionResult, unknown>;
+    });
+  }
+
+  setupDocumentAuthentication(
+    options: SetupDocumentAuthenticationOptions,
+  ): Effect.Effect<DocumentAuthenticationSetup, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.SetupDocumentAuthentication({
+          collectionId: this.id,
+          documentId: options.documentId,
+          permission: options.permission,
+          origins: options.origins,
+          expiresInSeconds: options.expiresInSeconds,
+        }) as Effect.Effect<DocumentAuthenticationSetup, unknown>,
+    );
+  }
+}
diff --git a/packages/mimic-server/src/effect/RpcClient.ts b/packages/mimic-server/src/effect/RpcClient.ts
new file mode 100644
index 000000000..73516f47a
--- /dev/null
+++ b/packages/mimic-server/src/effect/RpcClient.ts
@@ -0,0 +1,69 @@
+import { Layer } from "effect";
+import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
+import { RpcClient, RpcSerialization } from "effect/unstable/rpc";
+
+export interface MimicClientConfig {
+  readonly url: string;
+  readonly username: string;
+  readonly password: string;
+  readonly fetch?: typeof globalThis.fetch;
+}
+
+/**
+ * Cross-runtime Basic auth encoder. The SDK runs in browsers (admin app
+ * via Vite), Node, and Bun, so we deliberately avoid importing
+ * `node:buffer` directly. We detect `Buffer` as an optional global and
+ * fall back to `btoa` (which is available in browsers and modern Node).
+ */
+const encodeBasicAuth = (username: string, password: string): string => {
+  const value = `${username}:${password}`;
+  const maybeBuffer = (
+    globalThis as {
+      Buffer?: { from(input: string, encoding: string): { toString(encoding: string): string } };
+    }
+  ).Buffer;
+  if (maybeBuffer) {
+    return `Basic ${maybeBuffer.from(value, "utf8").toString("base64")}`;
+  }
+  if (typeof globalThis.btoa === "function") {
+    const bytes = new TextEncoder().encode(value);
+    let binary = "";
+    for (const byte of bytes) {
+      binary += String.fromCharCode(byte);
+    }
+    return `Basic ${globalThis.btoa(binary)}`;
+  }
+  throw new Error("No base64 encoder is available in this runtime");
+};
+
+const trimTrailingSlashes = (value: string): string => value.replace(/\/+$/, "");
+
+/**
+ * Build the Effect Layer that satisfies `RpcClient.Protocol`. This is what
+ * gets fed into the runtime that backs every `MimicSDK` instance.
+ *
+ * Composition (top-down):
+ * 1. `RpcClient.layerProtocolHttp` wraps an `HttpClient` so each RPC call
+ *    becomes a single HTTP request to `{url}/rpc/v1`. The `transformClient`
+ *    hook attaches a Basic Auth header on every request — same pattern the
+ *    existing cluster client uses (see `apps/mimic-db/src/cluster/GatewayFanoutClient.ts`).
+ * 2. `RpcSerialization.layerNdjson` is the wire format. Server is configured
+ *    to match.
+ * 3. `FetchHttpClient.layer` provides the underlying `HttpClient` over fetch.
+ *    If a custom `fetch` is provided in the config (useful for tests or
+ *    server-side runtimes), we set the `FetchHttpClient.Fetch` reference.
+ */
+export const makeMimicProtocolLayer = (config: MimicClientConfig) => {
+  const baseUrl = `${trimTrailingSlashes(config.url)}/rpc/v1`;
+  const authorization = encodeBasicAuth(config.username, config.password);
+
+  const httpClientLayer = config.fetch
+    ? FetchHttpClient.layer.pipe(Layer.provide(Layer.succeed(FetchHttpClient.Fetch)(config.fetch)))
+    : FetchHttpClient.layer;
+
+  return RpcClient.layerProtocolHttp({
+    url: baseUrl,
+    transformClient: (client) =>
+      HttpClient.mapRequest(client, HttpClientRequest.setHeader("Authorization", authorization)),
+  }).pipe(Layer.provide(RpcSerialization.layerNdjson), Layer.provide(httpClientLayer));
+};
diff --git a/packages/mimic-server/src/effect/index.ts b/packages/mimic-server/src/effect/index.ts
new file mode 100644
index 000000000..7acedbd36
--- /dev/null
+++ b/packages/mimic-server/src/effect/index.ts
@@ -0,0 +1,33 @@
+export { type MimicClientConfig, makeMimicProtocolLayer } from "./RpcClient.ts";
+export { MimicSDK } from "./MimicSDK.ts";
+export { DatabaseHandle } from "./DatabaseHandle.ts";
+export { CollectionHandle } from "./CollectionHandle.ts";
+export { RawCollectionHandle } from "./RawCollectionHandle.ts";
+export type {
+  CollectionInfo,
+  CreateUserResult,
+  DatabaseInfo,
+  DatabaseMigrationChange,
+  DatabaseMigrationInfo,
+  DocumentAuthenticationSetup,
+  DocumentSnapshot,
+  RawDocumentSnapshot,
+  SetupDocumentAuthenticationOptions,
+  SnapshotFor,
+} from "./types.ts";
+
+// Re-export tagged errors so consumers don't have to import the `./rpc` subpath
+// just to catch errors thrown by the SDK.
+export {
+  ConflictError,
+  ForbiddenError,
+  InternalError,
+  InvalidSchemaError,
+  InvalidValueError,
+  MigrationFailedError,
+  NotFoundError,
+  UnauthorizedError,
+  ValidationError,
+  VersionConflictError,
+} from "../rpc/index.ts";
+export type { DatabasePermission, DocumentPermission, Grant, User } from "../rpc/index.ts";
diff --git a/packages/mimic-server/src/effect/types.ts b/packages/mimic-server/src/effect/types.ts
new file mode 100644
index 000000000..c734059ef
--- /dev/null
+++ b/packages/mimic-server/src/effect/types.ts
@@ -0,0 +1,48 @@
+import type { Primitive, SchemaObject, Value } from "@voidhash/mimic-core";
+import type {
+  Collection,
+  CreateUserResponse,
+  Database,
+  DatabaseMigration,
+  DocumentAuthenticationSetup as RpcDocumentAuthenticationSetup,
+  DocumentSnapshotResponse,
+  MigrationChange,
+  MigrationDryRunOptions,
+  MigrationRunReport,
+  MigrationStatus,
+} from "../rpc/index.ts";
+
+// Re-export wire types under the legacy SDK names so consumers don't have
+// to update their imports.
+export type DatabaseInfo = Database;
+export type CollectionInfo = Collection;
+export type CreateUserResult = CreateUserResponse;
+export type DatabaseMigrationChange = MigrationChange;
+export type DatabaseMigrationInfo = DatabaseMigration;
+export type DocumentAuthenticationSetup = RpcDocumentAuthenticationSetup;
+export type RawDocumentSnapshot = DocumentSnapshotResponse;
+export type DatabaseMigrationRunReport = MigrationRunReport;
+export type DatabaseMigrationStatus = MigrationStatus;
+export type DatabaseMigrationDryRunOptions = MigrationDryRunOptions;
+
+export interface DocumentSnapshot<TSnapshot = unknown> {
+  readonly id: string;
+  readonly collectionId: string;
+  readonly value: Value;
+  readonly version: number;
+  readonly snapshot: TSnapshot;
+}
+
+export interface SetupDocumentAuthenticationOptions {
+  readonly documentId: string;
+  readonly permission: "read" | "write";
+  readonly origins: readonly string[];
+  readonly expiresInSeconds?: number;
+}
+
+export type SnapshotFor<TPrimitive extends Primitive.AnyPrimitive> =
+  Primitive.InferSnapshot<TPrimitive>;
+
+// Re-export for downstream consumers that build SchemaObject values
+// (e.g. mimic-cli, mimic-example-server). The type comes from mimic-core.
+export type { SchemaObject };
diff --git a/packages/mimic-server/src/index.ts b/packages/mimic-server/src/index.ts
new file mode 100644
index 000000000..304af1690
--- /dev/null
+++ b/packages/mimic-server/src/index.ts
@@ -0,0 +1,34 @@
+export {
+  CollectionHandle,
+  DatabaseHandle,
+  MimicSDK,
+  RawCollectionHandle,
+} from "./promise/MimicSDK.ts";
+export type {
+  CollectionInfo,
+  CreateUserResult,
+  DatabaseInfo,
+  DatabaseMigrationChange,
+  DatabaseMigrationInfo,
+  DocumentAuthenticationSetup,
+  DocumentSnapshot,
+  RawDocumentSnapshot,
+  SetupDocumentAuthenticationOptions,
+  SnapshotFor,
+} from "./effect/types.ts";
+export type { MimicClientConfig } from "./effect/RpcClient.ts";
+
+// Re-export tagged errors so consumers can `instanceof`-check them.
+export {
+  ConflictError,
+  ForbiddenError,
+  InternalError,
+  InvalidSchemaError,
+  InvalidValueError,
+  MigrationFailedError,
+  NotFoundError,
+  UnauthorizedError,
+  ValidationError,
+  VersionConflictError,
+} from "./rpc/index.ts";
+export type { DatabasePermission, DocumentPermission, Grant, User } from "./rpc/index.ts";
diff --git a/packages/mimic-server/src/migrate/index.ts b/packages/mimic-server/src/migrate/index.ts
new file mode 100644
index 000000000..d168b9e87
--- /dev/null
+++ b/packages/mimic-server/src/migrate/index.ts
@@ -0,0 +1 @@
+export * from "./migration/index.ts";
diff --git a/packages/mimic-server/src/migrate/migration/analyze.ts b/packages/mimic-server/src/migrate/migration/analyze.ts
new file mode 100644
index 000000000..0946cbbf3
--- /dev/null
+++ b/packages/mimic-server/src/migrate/migration/analyze.ts
@@ -0,0 +1,237 @@
+import { materializeDefault } from "@voidhash/mimic-core";
+import type {
+  ArraySchema,
+  EitherSchema,
+  LiteralSchema,
+  ObjectSchema,
+  Schema,
+  TreeSchema,
+  TreeVariantSchema,
+  UnionSchema,
+} from "@voidhash/mimic-core";
+
+import type { AnalyzeMigrationOptions, SchemaMigrationCompatibilityIssue } from "./types.ts";
+
+const pathToString = (path: readonly string[]): string =>
+  path.length === 0 ? "root" : `root.${path.join(".")}`;
+
+const pushIssue = (
+  issues: SchemaMigrationCompatibilityIssue[],
+  code: SchemaMigrationCompatibilityIssue["code"],
+  path: readonly string[],
+  message: string,
+): void => {
+  issues.push({
+    code,
+    path: pathToString(path),
+    message,
+  });
+};
+
+const analyzeObject = (
+  oldSchema: ObjectSchema,
+  newSchema: ObjectSchema,
+  path: readonly string[],
+  issues: SchemaMigrationCompatibilityIssue[],
+): void => {
+  for (const [key, newField] of Object.entries(newSchema.fields)) {
+    const oldField = oldSchema.fields[key];
+    if (!oldField) {
+      let defaultValue;
+      try {
+        defaultValue = materializeDefault(newField);
+      } catch {
+        defaultValue = undefined;
+      }
+      if (newField.required === true && defaultValue === undefined) {
+        pushIssue(
+          issues,
+          "required-field-without-default",
+          [...path, key],
+          `Field "${key}" is required in the new schema but has no default`,
+        );
+      }
+      continue;
+    }
+    analyzeSchemaCompatibility(oldField, newField, [...path, key], issues);
+  }
+};
+
+const analyzeUnion = (
+  oldSchema: UnionSchema,
+  newSchema: UnionSchema,
+  path: readonly string[],
+  issues: SchemaMigrationCompatibilityIssue[],
+): void => {
+  if (oldSchema.discriminator !== newSchema.discriminator) {
+    pushIssue(
+      issues,
+      "incompatible-type",
+      [...path, "discriminator"],
+      "Union discriminator changed",
+    );
+    return;
+  }
+
+  for (const [variantKey, oldVariant] of Object.entries(oldSchema.variants)) {
+    const newVariant = newSchema.variants[variantKey];
+    if (!newVariant) {
+      pushIssue(
+        issues,
+        "incompatible-type",
+        [...path, "variants", variantKey],
+        `Union variant "${variantKey}" is missing in the new schema`,
+      );
+      continue;
+    }
+    analyzeObject(oldVariant, newVariant, [...path, "variants", variantKey], issues);
+  }
+};
+
+const analyzeEither = (
+  oldSchema: EitherSchema,
+  newSchema: EitherSchema,
+  path: readonly string[],
+  issues: SchemaMigrationCompatibilityIssue[],
+): void => {
+  for (const [index, oldVariant] of oldSchema.variants.entries()) {
+    const compatible = newSchema.variants.some((candidate) => {
+      const nestedIssues: SchemaMigrationCompatibilityIssue[] = [];
+      analyzeSchemaCompatibility(
+        oldVariant,
+        candidate,
+        [...path, "variants", String(index)],
+        nestedIssues,
+      );
+      return nestedIssues.length === 0;
+    });
+
+    if (!compatible) {
+      pushIssue(
+        issues,
+        "incompatible-type",
+        [...path, "variants", String(index)],
+        `Either variant at index ${index} has no compatible target variant`,
+      );
+    }
+  }
+};
+
+const analyzeTreeVariant = (
+  oldVariant: TreeVariantSchema,
+  newVariant: TreeVariantSchema,
+  path: readonly string[],
+  issues: SchemaMigrationCompatibilityIssue[],
+): void => {
+  analyzeObject(oldVariant.schema, newVariant.schema, [...path, "schema"], issues);
+  for (const child of oldVariant.children) {
+    if (!newVariant.children.includes(child)) {
+      pushIssue(
+        issues,
+        "invalid-tree",
+        [...path, "children"],
+        `Tree child variant "${child}" is no longer allowed`,
+      );
+    }
+  }
+};
+
+const analyzeTree = (
+  oldSchema: TreeSchema,
+  newSchema: TreeSchema,
+  path: readonly string[],
+  issues: SchemaMigrationCompatibilityIssue[],
+): void => {
+  if (oldSchema.discriminator !== newSchema.discriminator) {
+    pushIssue(issues, "invalid-tree", [...path, "discriminator"], "Tree discriminator changed");
+    return;
+  }
+
+  for (const root of oldSchema.roots) {
+    if (!newSchema.roots.includes(root)) {
+      pushIssue(
+        issues,
+        "invalid-tree",
+        [...path, "roots"],
+        `Tree root variant "${root}" is no longer allowed`,
+      );
+    }
+  }
+
+  for (const [variantKey, oldVariant] of Object.entries(oldSchema.variants)) {
+    const newVariant = newSchema.variants[variantKey];
+    if (!newVariant) {
+      pushIssue(
+        issues,
+        "invalid-tree",
+        [...path, "variants", variantKey],
+        `Tree variant "${variantKey}" is missing in the new schema`,
+      );
+      continue;
+    }
+    analyzeTreeVariant(oldVariant, newVariant, [...path, "variants", variantKey], issues);
+  }
+};
+
+const analyzeSchemaCompatibility = (
+  oldSchema: Schema,
+  newSchema: Schema,
+  path: readonly string[],
+  issues: SchemaMigrationCompatibilityIssue[],
+): void => {
+  if (oldSchema.kind !== newSchema.kind) {
+    pushIssue(
+      issues,
+      "incompatible-type",
+      path,
+      `Schema kind changed from "${oldSchema.kind}" to "${newSchema.kind}"`,
+    );
+    return;
+  }
+
+  switch (oldSchema.kind) {
+    case "string":
+    case "number":
+    case "boolean":
+      return;
+    case "literal": {
+      const oldLiteral = oldSchema as LiteralSchema;
+      const newLiteral = newSchema as LiteralSchema;
+      if (oldLiteral.value !== newLiteral.value) {
+        pushIssue(
+          issues,
+          "incompatible-type",
+          path,
+          `Literal changed from ${JSON.stringify(oldLiteral.value)} to ${JSON.stringify(newLiteral.value)}`,
+        );
+      }
+      return;
+    }
+    case "object":
+      analyzeObject(oldSchema as ObjectSchema, newSchema as ObjectSchema, path, issues);
+      return;
+    case "array": {
+      const oldArray = oldSchema as ArraySchema;
+      const newArray = newSchema as ArraySchema;
+      analyzeSchemaCompatibility(oldArray.element, newArray.element, [...path, "element"], issues);
+      return;
+    }
+    case "union":
+      analyzeUnion(oldSchema as UnionSchema, newSchema as UnionSchema, path, issues);
+      return;
+    case "either":
+      analyzeEither(oldSchema as EitherSchema, newSchema as EitherSchema, path, issues);
+      return;
+    case "tree":
+      analyzeTree(oldSchema as TreeSchema, newSchema as TreeSchema, path, issues);
+      return;
+  }
+};
+
+export const analyzeMigration = (
+  options: AnalyzeMigrationOptions,
+): readonly SchemaMigrationCompatibilityIssue[] => {
+  const issues: SchemaMigrationCompatibilityIssue[] = [];
+  analyzeSchemaCompatibility(options.oldSchema, options.newSchema, [], issues);
+  return issues;
+};
diff --git a/packages/mimic-server/src/migrate/migration/index.ts b/packages/mimic-server/src/migrate/migration/index.ts
new file mode 100644
index 000000000..035171fe0
--- /dev/null
+++ b/packages/mimic-server/src/migrate/migration/index.ts
@@ -0,0 +1,3 @@
+export * from "./analyze.ts";
+export * from "./reconcile.ts";
+export * from "./types.ts";
diff --git a/packages/mimic-server/src/migrate/migration/reconcile.ts b/packages/mimic-server/src/migrate/migration/reconcile.ts
new file mode 100644
index 000000000..bcda304a3
--- /dev/null
+++ b/packages/mimic-server/src/migrate/migration/reconcile.ts
@@ -0,0 +1,95 @@
+import { isSchemaError, validate, validateValue } from "@voidhash/mimic-core";
+
+import type {
+  ReconcileMigrationValueOptions,
+  ReconcileMigrationValueResult,
+  SchemaMigrationIssue,
+} from "./types.ts";
+
+const pathToString = (
+  path: readonly {
+    readonly kind: "field" | "item" | "node";
+    readonly key?: string;
+    readonly id?: string;
+  }[],
+): string => {
+  if (path.length === 0) {
+    return "root";
+  }
+  const segments = path.map((segment) => {
+    switch (segment.kind) {
+      case "field":
+        return segment.key ?? "";
+      case "item":
+      case "node":
+        return segment.id ?? "";
+    }
+  });
+  return `root.${segments.join(".")}`;
+};
+
+const toIssue = (error: unknown): SchemaMigrationIssue => {
+  if (isSchemaError(error)) {
+    let code: SchemaMigrationIssue["code"] = "invalid-value";
+    switch (error.code) {
+      case "missing_required":
+        code = "required-field-without-default";
+        break;
+      case "tree_invalid_root_type":
+      case "tree_invalid_child_type":
+      case "tree_unknown_variant":
+        code = "invalid-tree";
+        break;
+      case "type_mismatch":
+      case "literal_mismatch":
+      case "union_no_match":
+      case "either_no_match":
+        code = "incompatible-type";
+        break;
+      case "validator_failed":
+        code = "invalid-value";
+        break;
+    }
+
+    return {
+      code,
+      path: pathToString(error.valuePath as never),
+      message: error.message,
+    };
+  }
+
+  return {
+    code: "invalid-value",
+    path: "root",
+    message: error instanceof Error ? error.message : String(error),
+  };
+};
+
+export const reconcileMigrationValue = (
+  options: ReconcileMigrationValueOptions,
+): ReconcileMigrationValueResult => {
+  try {
+    validateValue(options.value);
+    const normalized = validate(options.oldSchema, options.value);
+    if (normalized === undefined) {
+      return {
+        ok: false,
+        error: {
+          code: "missing-value",
+          path: "root",
+          message: "Old schema sanitized the input value to undefined",
+        },
+      };
+    }
+
+    return {
+      ok: true,
+      value: validate(options.newSchema, normalized),
+    };
+  } catch (error) {
+    return {
+      ok: false,
+      error: toIssue(error),
+    };
+  }
+};
diff --git a/packages/mimic-server/src/migrate/migration/types.ts b/packages/mimic-server/src/migrate/migration/types.ts
new file mode 100644
index 000000000..62f831edc
--- /dev/null
+++ b/packages/mimic-server/src/migrate/migration/types.ts
@@ -0,0 +1,33 @@
+import type { Schema, Value } from "@voidhash/mimic-core";
+
+export type SchemaMigrationIssueCode =
+  | "incompatible-type"
+  | "required-field-without-default"
+  | "invalid-tree"
+  | "invalid-value"
+  | "missing-value";
+
+export interface SchemaMigrationIssue {
+  readonly code: SchemaMigrationIssueCode;
+  readonly path: string;
+  readonly message: string;
+}
+
+export interface SchemaMigrationCompatibilityIssue {
+  readonly code: Exclude<SchemaMigrationIssueCode, "missing-value">;
+  readonly path: string;
+  readonly message: string;
+}
+
+export type ReconcileMigrationValueResult =
+  | { readonly ok: true; readonly value: Value | undefined }
+  | { readonly ok: false; readonly error: SchemaMigrationIssue };
+
+export interface AnalyzeMigrationOptions {
+  readonly oldSchema: Schema;
+  readonly newSchema: Schema;
+}
+
+export interface ReconcileMigrationValueOptions extends AnalyzeMigrationOptions {
+  readonly value: Value;
+}
diff --git a/packages/mimic-server/src/promise/MimicSDK.ts b/packages/mimic-server/src/promise/MimicSDK.ts
new file mode 100644
index 000000000..f177f4549
--- /dev/null
+++ b/packages/mimic-server/src/promise/MimicSDK.ts
@@ -0,0 +1,310 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import type { DatabasePermission, DocumentAuthenticationSetup, Grant, User } from "../rpc/index.ts";
+
+import { CollectionHandle as EffectCollectionHandle } from "../effect/CollectionHandle.ts";
+import { DatabaseHandle as EffectDatabaseHandle } from "../effect/DatabaseHandle.ts";
+import { MimicSDK as EffectMimicSDK } from "../effect/MimicSDK.ts";
+import { RawCollectionHandle as EffectRawCollectionHandle } from "../effect/RawCollectionHandle.ts";
+import type { MimicClientConfig } from "../effect/RpcClient.ts";
+import type {
+  CollectionInfo,
+  CreateUserResult,
+  DatabaseInfo,
+  DatabaseMigrationChange,
+  DatabaseMigrationInfo,
+  DocumentSnapshot,
+  RawDocumentSnapshot,
+  SetupDocumentAuthenticationOptions,
+  SnapshotFor,
+} from "../effect/types.ts";
+
+/**
+ * Promise-friendly facade over the Effect SDK. Each instance owns the
+ * underlying Effect SDK and runs every method through its `ManagedRuntime`
+ * so all calls share the SDK's lifecycle (HttpClient, serializer, scope).
+ *
+ * Handles returned by this facade are wrapped to expose `Promise`-returning
+ * methods rather than `Effect`-returning ones — the only behavioral change
+ * is that resolved values are unwrapped immediately and rejections carry the
+ * tagged errors from the `./rpc` subpath.
+ */
+export class MimicSDK {
+  /** Underlying Effect SDK — exposed for advanced consumers. */
+  readonly effect: EffectMimicSDK;
+
+  constructor(config: MimicClientConfig) {
+    this.effect = new EffectMimicSDK(config);
+  }
+
+  // ---------------------------------------------------------------------
+  // Databases
+  // ---------------------------------------------------------------------
+
+  listDatabases(): Promise<readonly DatabaseInfo[]> {
+    return this.effect.runtime.runPromise(this.effect.listDatabases());
+  }
+
+  createDatabase(options: {
+    readonly name: string;
+    readonly description?: string;
+  }): Promise<DatabaseHandle> {
+    return this.effect.runtime
+      .runPromise(this.effect.createDatabase(options))
+      .then((handle) => new DatabaseHandle(handle));
+  }
+
+  deleteDatabase(id: string): Promise<void> {
+    return this.effect.runtime.runPromise(this.effect.deleteDatabase(id)) as Promise<void>;
+  }
+
+  database(id: string, name = "", description = ""): DatabaseHandle {
+    return new DatabaseHandle(this.effect.database(id, name, description));
+  }
+
+  // ---------------------------------------------------------------------
+  // Users
+  // ---------------------------------------------------------------------
+
+  listUsers(): Promise<readonly User[]> {
+    return this.effect.runtime.runPromise(this.effect.listUsers());
+  }
+
+  createUser(options: {
+    readonly username: string;
+    readonly password: string;
+  }): Promise<CreateUserResult> {
+    return this.effect.runtime.runPromise(this.effect.createUser(options));
+  }
+
+  deleteUser(id: string): Promise<void> {
+    return this.effect.runtime.runPromise(this.effect.deleteUser(id)) as Promise<void>;
+  }
+
+  // ---------------------------------------------------------------------
+  // Grants
+  // ---------------------------------------------------------------------
+
+  listGrants(userId?: string): Promise<readonly Grant[]> {
+    return this.effect.runtime.runPromise(this.effect.listGrants(userId));
+  }
+
+  grantPermission(payload: {
+    readonly userId: string;
+    readonly databaseId: string;
+    readonly permission: DatabasePermission;
+  }): Promise<void> {
+    return this.effect.runtime.runPromise(this.effect.grantPermission(payload)) as Promise<void>;
+  }
+
+  revokePermission(payload: {
+    readonly userId: string;
+    readonly databaseId: string;
+  }): Promise<void> {
+    return this.effect.runtime.runPromise(this.effect.revokePermission(payload)) as Promise<void>;
+  }
+
+  // ---------------------------------------------------------------------
+  // Document auth (top-level convenience)
+  // ---------------------------------------------------------------------
+
+  setupDocumentAuthentication(options: {
+    readonly collectionId: string;
+    readonly documentId: string;
+    readonly permission: "read" | "write";
+    readonly origins: readonly string[];
+    readonly expiresInSeconds?: number;
+  }): Promise<DocumentAuthenticationSetup> {
+    return this.effect.runtime.runPromise(this.effect.setupDocumentAuthentication(options));
+  }
+
+  /** Dispose the underlying runtime — releases any held resources. */
+  async dispose(): Promise<void> {
+    await this.effect.dispose();
+  }
+}
+
+/**
+ * Promise-flavored proxy over `EffectDatabaseHandle`.
+ */
+export class DatabaseHandle {
+  readonly id: string;
+  readonly name: string;
+  readonly description: string;
+  /** Underlying Effect handle. */
+  readonly effect: EffectDatabaseHandle;
+
+  constructor(effect: EffectDatabaseHandle) {
+    this.effect = effect;
+    this.id = effect.id;
+    this.name = effect.name;
+    this.description = effect.description;
+  }
+
+  createCollection<TPrimitive extends Primitive.AnyPrimitive>(
+    name: string,
+    primitive: TPrimitive,
+  ): Promise<CollectionHandle<TPrimitive>> {
+    return this.effect.sdk.runtime
+      .runPromise(this.effect.createCollection(name, primitive))
+      .then((handle) => new CollectionHandle(handle));
+  }
+
+  listCollections(): Promise<readonly CollectionInfo[]> {
+    return this.effect.sdk.runtime.runPromise(this.effect.listCollections());
+  }
+
+  deleteCollection(collectionId: string): Promise<void> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.deleteCollection(collectionId),
+    ) as Promise<void>;
+  }
+
+  collection<TPrimitive extends Primitive.AnyPrimitive>(
+    id: string,
+    primitive: TPrimitive,
+  ): CollectionHandle<TPrimitive> {
+    return new CollectionHandle(this.effect.collection(id, primitive));
+  }
+
+  updateCollectionSchema<TPrimitive extends Primitive.AnyPrimitive>(
+    collectionId: string,
+    primitive: TPrimitive,
+    dataMigrationSource?: string,
+  ): Promise<{ readonly id: string; readonly schemaVersion: number }> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.updateCollectionSchema(collectionId, primitive, dataMigrationSource),
+    );
+  }
+
+  // Raw helpers — for dynamic JSON consumers.
+
+  listCollectionsRaw(): Promise<readonly CollectionInfo[]> {
+    return this.effect.sdk.runtime.runPromise(this.effect.listCollectionsRaw());
+  }
+
+  collectionRaw(collectionId: string): RawCollectionHandle {
+    return new RawCollectionHandle(this.effect.collectionRaw(collectionId));
+  }
+
+  updateCollectionSchemaRaw(
+    collectionId: string,
+    schema: unknown,
+    dataMigrationSource?: string,
+  ): Promise<{ readonly id: string; readonly schemaVersion: number }> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.updateCollectionSchemaRaw(collectionId, schema, dataMigrationSource),
+    );
+  }
+
+  listMigrations(): Promise<readonly DatabaseMigrationInfo[]> {
+    return this.effect.sdk.runtime.runPromise(this.effect.listMigrations());
+  }
+
+  applyMigration(options: {
+    readonly version: number;
+    readonly name: string;
+    readonly checksum: string;
+    readonly changes: readonly DatabaseMigrationChange[];
+    readonly mode?: "apply" | "rerun" | "replace";
+    readonly dryRun?: { readonly limit?: number; readonly samplePercent?: number };
+    readonly batchSize?: number;
+    readonly redoSucceededOnReplace?: boolean;
+  }) {
+    return this.effect.sdk.runtime.runPromise(this.effect.applyMigration(options));
+  }
+
+  getMigrationStatus(version: number) {
+    return this.effect.sdk.runtime.runPromise(this.effect.getMigrationStatus(version));
+  }
+}
+
+/**
+ * Promise-flavored proxy over `EffectCollectionHandle`.
+ */
+export class CollectionHandle<TPrimitive extends Primitive.AnyPrimitive> {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly primitive: TPrimitive;
+  readonly effect: EffectCollectionHandle<TPrimitive>;
+
+  constructor(effect: EffectCollectionHandle<TPrimitive>) {
+    this.effect = effect;
+    this.id = effect.id;
+    this.databaseId = effect.databaseId;
+    this.primitive = effect.primitive;
+  }
+
+  create(
+    data: Primitive.InferInput<TPrimitive>,
+    options?: { readonly id?: string },
+  ): Promise<DocumentSnapshot<SnapshotFor<TPrimitive>>> {
+    return this.effect.sdk.runtime.runPromise(this.effect.create(data, options));
+  }
+
+  get(documentId: string): Promise<DocumentSnapshot<SnapshotFor<TPrimitive>>> {
+    return this.effect.sdk.runtime.runPromise(this.effect.get(documentId));
+  }
+
+  list(): Promise<ReadonlyArray<DocumentSnapshot<SnapshotFor<TPrimitive>>>> {
+    return this.effect.sdk.runtime.runPromise(this.effect.list());
+  }
+
+  delete(documentId: string): Promise<void> {
+    return this.effect.sdk.runtime.runPromise(this.effect.delete(documentId)) as Promise<void>;
+  }
+
+  setupDocumentAuthentication(
+    options: SetupDocumentAuthenticationOptions,
+  ): Promise<DocumentAuthenticationSetup> {
+    return this.effect.sdk.runtime.runPromise(this.effect.setupDocumentAuthentication(options));
+  }
+}
+
+/**
+ * Promise-flavored proxy over `EffectRawCollectionHandle`.
+ */
+export class RawCollectionHandle {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly effect: EffectRawCollectionHandle;
+
+  constructor(effect: EffectRawCollectionHandle) {
+    this.effect = effect;
+    this.id = effect.id;
+    this.databaseId = effect.databaseId;
+  }
+
+  createDocumentRaw(
+    value: unknown,
+    options?: { readonly id?: string },
+  ): Promise<RawDocumentSnapshot> {
+    return this.effect.sdk.runtime.runPromise(this.effect.createDocumentRaw(value, options));
+  }
+
+  getDocumentRaw(documentId: string): Promise<RawDocumentSnapshot> {
+    return this.effect.sdk.runtime.runPromise(this.effect.getDocumentRaw(documentId));
+  }
+
+  listDocumentsRaw(): Promise<ReadonlyArray<RawDocumentSnapshot>> {
+    return this.effect.sdk.runtime.runPromise(this.effect.listDocumentsRaw());
+  }
+
+  deleteDocument(documentId: string): Promise<void> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.deleteDocument(documentId),
+    ) as Promise<void>;
+  }
+
+  setDocumentRaw(
+    documentId: string,
+    value: unknown,
+  ): Promise<{ readonly id: string; readonly version: number }> {
+    return this.effect.sdk.runtime.runPromise(this.effect.setDocumentRaw(documentId, value));
+  }
+
+  setupDocumentAuthentication(
+    options: SetupDocumentAuthenticationOptions,
+  ): Promise<DocumentAuthenticationSetup> {
+    return this.effect.sdk.runtime.runPromise(this.effect.setupDocumentAuthentication(options));
+  }
+}
diff --git a/packages/mimic-server/src/promise/index.ts b/packages/mimic-server/src/promise/index.ts
new file mode 100644
index 000000000..6791d11ef
--- /dev/null
+++ b/packages/mimic-server/src/promise/index.ts
@@ -0,0 +1 @@
+export { MimicSDK } from "./MimicSDK.ts";
diff --git a/packages/mimic-server/src/rpc/errors.ts b/packages/mimic-server/src/rpc/errors.ts
new file mode 100644
index 000000000..f5a4805dc
--- /dev/null
+++ b/packages/mimic-server/src/rpc/errors.ts
@@ -0,0 +1,116 @@
+import { Schema } from "effect";
+
+const detailsField = {
+  details: Schema.optional(Schema.Unknown),
+} as const;
+
+export class UnauthorizedError extends Schema.ErrorClass<UnauthorizedError>(
+  "@voidhash-mono/mimic-rpc/UnauthorizedError",
+)({
+  _tag: Schema.tag("UnauthorizedError"),
+  code: Schema.Literal("unauthorized"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class ForbiddenError extends Schema.ErrorClass<ForbiddenError>(
+  "@voidhash-mono/mimic-rpc/ForbiddenError",
+)({
+  _tag: Schema.tag("ForbiddenError"),
+  code: Schema.Literal("forbidden"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class NotFoundError extends Schema.ErrorClass<NotFoundError>(
+  "@voidhash-mono/mimic-rpc/NotFoundError",
+)({
+  _tag: Schema.tag("NotFoundError"),
+  code: Schema.Literal("not_found"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class ConflictError extends Schema.ErrorClass<ConflictError>(
+  "@voidhash-mono/mimic-rpc/ConflictError",
+)({
+  _tag: Schema.tag("ConflictError"),
+  code: Schema.Literal("conflict"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class ValidationError extends Schema.ErrorClass<ValidationError>(
+  "@voidhash-mono/mimic-rpc/ValidationError",
+)({
+  _tag: Schema.tag("ValidationError"),
+  code: Schema.Literal("validation_error"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class VersionConflictError extends Schema.ErrorClass<VersionConflictError>(
+  "@voidhash-mono/mimic-rpc/VersionConflictError",
+)({
+  _tag: Schema.tag("VersionConflictError"),
+  code: Schema.Literal("version_conflict"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class InvalidSchemaError extends Schema.ErrorClass<InvalidSchemaError>(
+  "@voidhash-mono/mimic-rpc/InvalidSchemaError",
+)({
+  _tag: Schema.tag("InvalidSchemaError"),
+  code: Schema.Literal("invalid_schema"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class InvalidValueError extends Schema.ErrorClass<InvalidValueError>(
+  "@voidhash-mono/mimic-rpc/InvalidValueError",
+)({
+  _tag: Schema.tag("InvalidValueError"),
+  code: Schema.Literal("invalid_value"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class MigrationFailedError extends Schema.ErrorClass<MigrationFailedError>(
+  "@voidhash-mono/mimic-rpc/MigrationFailedError",
+)({
+  _tag: Schema.tag("MigrationFailedError"),
+  code: Schema.Literal("migration_failed"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export class InternalError extends Schema.ErrorClass<InternalError>(
+  "@voidhash-mono/mimic-rpc/InternalError",
+)({
+  _tag: Schema.tag("InternalError"),
+  code: Schema.Literal("internal_error"),
+  message: Schema.String,
+  ...detailsField,
+}) {}
+
+export const ApiErrorSchemas = [
+  UnauthorizedError,
+  ForbiddenError,
+  NotFoundError,
+  ConflictError,
+  ValidationError,
+  VersionConflictError,
+  InvalidSchemaError,
+  InvalidValueError,
+  MigrationFailedError,
+  InternalError,
+] as const;
+
+export const toUnknownError = (error: unknown): InternalError =>
+  error instanceof InternalError
+    ? error
+    : new InternalError({
+        code: "internal_error",
+        message: error instanceof Error ? error.message : String(error),
+      });
diff --git a/packages/mimic-server/src/rpc/group.ts b/packages/mimic-server/src/rpc/group.ts
new file mode 100644
index 000000000..e2686bc12
--- /dev/null
+++ b/packages/mimic-server/src/rpc/group.ts
@@ -0,0 +1,29 @@
+import { CollectionsRpcs } from "./groups/collections.ts";
+import { DatabasesRpcs } from "./groups/databases.ts";
+import { DocumentAuthRpcs } from "./groups/document-auth.ts";
+import { DocumentsRpcs } from "./groups/documents.ts";
+import { GrantsRpcs } from "./groups/grants.ts";
+import { MigrationsRpcs } from "./groups/migrations.ts";
+import { UsersRpcs } from "./groups/users.ts";
+
+/**
+ * The unified RPC contract for the mimic-db public API.
+ *
+ * This is the single source of truth shared between server (`apps/mimic-db`)
+ * and client (the `@voidhash/mimic-server` SDK). Importing it from one side or the other
+ * is what gives us end-to-end type safety: payload, success, and error
+ * schemas are checked against the same definitions.
+ *
+ * The `AuthMiddleware` declared here means every procedure requires an
+ * authenticated user. Server provides `CurrentUser` via the middleware
+ * implementation; clients send credentials via the `Authorization` HTTP
+ * header on the underlying transport.
+ */
+export const MimicRpcGroup = DatabasesRpcs.merge(
+  CollectionsRpcs,
+  DocumentsRpcs,
+  UsersRpcs,
+  GrantsRpcs,
+  MigrationsRpcs,
+  DocumentAuthRpcs,
+);
diff --git a/packages/mimic-server/src/rpc/groups/collections.ts b/packages/mimic-server/src/rpc/groups/collections.ts
new file mode 100644
index 000000000..ef916a984
--- /dev/null
+++ b/packages/mimic-server/src/rpc/groups/collections.ts
@@ -0,0 +1,54 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import { ConflictError, ForbiddenError, InvalidSchemaError, NotFoundError } from "../errors.ts";
+import { AuthMiddleware } from "../middleware.ts";
+import {
+  CollectionSchema,
+  CreateCollectionResponseSchema,
+  SchemaObjectRpcSchema,
+  UpdateCollectionSchemaResponseSchema,
+} from "../schemas.ts";
+
+export const CreateCollection = Rpc.make("CreateCollection", {
+  payload: Schema.Struct({
+    databaseId: Schema.String,
+    name: Schema.String,
+    schema: SchemaObjectRpcSchema,
+  }),
+  success: CreateCollectionResponseSchema,
+  error: Schema.Union([NotFoundError, ConflictError, InvalidSchemaError, ForbiddenError]),
+});
+
+export const ListCollections = Rpc.make("ListCollections", {
+  payload: Schema.Struct({
+    databaseId: Schema.String,
+  }),
+  success: Schema.Array(CollectionSchema),
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const UpdateCollectionSchema = Rpc.make("UpdateCollectionSchema", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    schema: SchemaObjectRpcSchema,
+    dataMigrationSource: Schema.optional(Schema.String),
+  }),
+  success: UpdateCollectionSchemaResponseSchema,
+  error: Schema.Union([NotFoundError, InvalidSchemaError, ForbiddenError]),
+});
+
+export const DeleteCollection = Rpc.make("DeleteCollection", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const CollectionsRpcs = RpcGroup.make(
+  CreateCollection,
+  ListCollections,
+  UpdateCollectionSchema,
+  DeleteCollection,
+).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/groups/databases.ts b/packages/mimic-server/src/rpc/groups/databases.ts
new file mode 100644
index 000000000..07c025243
--- /dev/null
+++ b/packages/mimic-server/src/rpc/groups/databases.ts
@@ -0,0 +1,34 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import { ConflictError, ForbiddenError, NotFoundError } from "../errors.ts";
+import { AuthMiddleware } from "../middleware.ts";
+import { DatabaseSchema } from "../schemas.ts";
+
+export const CreateDatabase = Rpc.make("CreateDatabase", {
+  payload: Schema.Struct({
+    name: Schema.String,
+    description: Schema.String,
+  }),
+  success: DatabaseSchema,
+  error: Schema.Union([ConflictError, ForbiddenError]),
+});
+
+export const ListDatabases = Rpc.make("ListDatabases", {
+  success: Schema.Array(DatabaseSchema),
+  error: ForbiddenError,
+});
+
+export const DeleteDatabase = Rpc.make("DeleteDatabase", {
+  payload: Schema.Struct({
+    databaseId: Schema.String,
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const DatabasesRpcs = RpcGroup.make(
+  CreateDatabase,
+  ListDatabases,
+  DeleteDatabase,
+).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/groups/document-auth.ts b/packages/mimic-server/src/rpc/groups/document-auth.ts
new file mode 100644
index 000000000..68381a118
--- /dev/null
+++ b/packages/mimic-server/src/rpc/groups/document-auth.ts
@@ -0,0 +1,22 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import { ForbiddenError, NotFoundError } from "../errors.ts";
+import { AuthMiddleware } from "../middleware.ts";
+import { DocumentAuthenticationSetupSchema, DocumentPermissionSchema } from "../schemas.ts";
+
+export const SetupDocumentAuthentication = Rpc.make("SetupDocumentAuthentication", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+    permission: DocumentPermissionSchema,
+    origins: Schema.Array(Schema.String),
+    expiresInSeconds: Schema.optional(Schema.Number),
+  }),
+  success: DocumentAuthenticationSetupSchema,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const DocumentAuthRpcs = RpcGroup.make(SetupDocumentAuthentication).middleware(
+  AuthMiddleware,
+);
diff --git a/packages/mimic-server/src/rpc/groups/documents.ts b/packages/mimic-server/src/rpc/groups/documents.ts
new file mode 100644
index 000000000..80930e598
--- /dev/null
+++ b/packages/mimic-server/src/rpc/groups/documents.ts
@@ -0,0 +1,71 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import {
+  ConflictError,
+  ForbiddenError,
+  InvalidValueError,
+  NotFoundError,
+  VersionConflictError,
+} from "../errors.ts";
+import { AuthMiddleware } from "../middleware.ts";
+import {
+  DocumentSnapshotResponseSchema,
+  SubmitTransactionResponseSchema,
+  TransactionEnvelopeSchema,
+  ValueRpcSchema,
+} from "../schemas.ts";
+
+export const CreateDocument = Rpc.make("CreateDocument", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    id: Schema.optional(Schema.String),
+    value: ValueRpcSchema,
+  }),
+  success: DocumentSnapshotResponseSchema,
+  error: Schema.Union([NotFoundError, ConflictError, InvalidValueError, ForbiddenError]),
+});
+
+export const GetDocument = Rpc.make("GetDocument", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+  }),
+  success: DocumentSnapshotResponseSchema,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const ListDocuments = Rpc.make("ListDocuments", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+  }),
+  success: Schema.Array(DocumentSnapshotResponseSchema),
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const SubmitTransaction = Rpc.make("SubmitTransaction", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+    transaction: TransactionEnvelopeSchema,
+  }),
+  success: SubmitTransactionResponseSchema,
+  error: Schema.Union([NotFoundError, InvalidValueError, VersionConflictError, ForbiddenError]),
+});
+
+export const DeleteDocument = Rpc.make("DeleteDocument", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const DocumentsRpcs = RpcGroup.make(
+  CreateDocument,
+  GetDocument,
+  ListDocuments,
+  SubmitTransaction,
+  DeleteDocument,
+).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/groups/grants.ts b/packages/mimic-server/src/rpc/groups/grants.ts
new file mode 100644
index 000000000..ffeb56c98
--- /dev/null
+++ b/packages/mimic-server/src/rpc/groups/grants.ts
@@ -0,0 +1,39 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import { ForbiddenError, NotFoundError } from "../errors.ts";
+import { AuthMiddleware } from "../middleware.ts";
+import { DatabasePermissionSchema, GrantSchema } from "../schemas.ts";
+
+export const GrantPermission = Rpc.make("GrantPermission", {
+  payload: Schema.Struct({
+    userId: Schema.String,
+    databaseId: Schema.String,
+    permission: DatabasePermissionSchema,
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const RevokePermission = Rpc.make("RevokePermission", {
+  payload: Schema.Struct({
+    userId: Schema.String,
+    databaseId: Schema.String,
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const ListGrants = Rpc.make("ListGrants", {
+  payload: Schema.Struct({
+    userId: Schema.optional(Schema.String),
+  }),
+  success: Schema.Array(GrantSchema),
+  error: ForbiddenError,
+});
+
+export const GrantsRpcs = RpcGroup.make(
+  GrantPermission,
+  RevokePermission,
+  ListGrants,
+).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/groups/migrations.ts b/packages/mimic-server/src/rpc/groups/migrations.ts
new file mode 100644
index 000000000..58634191b
--- /dev/null
+++ b/packages/mimic-server/src/rpc/groups/migrations.ts
@@ -0,0 +1,72 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import {
+  ConflictError,
+  ForbiddenError,
+  InvalidSchemaError,
+  MigrationFailedError,
+  NotFoundError,
+} from "../errors.ts";
+import { AuthMiddleware } from "../middleware.ts";
+import {
+  DatabaseMigrationSchema,
+  MigrationChangeSchema,
+  MigrationDryRunOptionsSchema,
+  MigrationRunReportSchema,
+  MigrationStatusSchema,
+} from "../schemas.ts";
+
+export const ListDatabaseMigrations = Rpc.make("ListDatabaseMigrations", {
+  payload: Schema.Struct({
+    databaseId: Schema.String,
+  }),
+  success: Schema.Array(DatabaseMigrationSchema),
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+const ApplyDatabaseMigrationPayload = Schema.Struct({
+  databaseId: Schema.String,
+  version: Schema.Number,
+  name: Schema.String,
+  checksum: Schema.String,
+  changes: Schema.Array(MigrationChangeSchema),
+  /**
+   * `apply` (default when undefined): apply a fresh migration; recover a
+   * partially-failed one by submitting the same checksum. `rerun`:
+   * re-target only failed/pending docs of an existing migration; same
+   * checksum required. `replace`: install new code under the same version
+   * with a different checksum, optionally redoing already-succeeded docs.
+   */
+  mode: Schema.optional(Schema.Literals(["apply", "rerun", "replace"])),
+  dryRun: Schema.optional(MigrationDryRunOptionsSchema),
+  batchSize: Schema.optional(Schema.Number),
+  redoSucceededOnReplace: Schema.optional(Schema.Boolean),
+});
+
+export const ApplyDatabaseMigration = Rpc.make("ApplyDatabaseMigration", {
+  payload: ApplyDatabaseMigrationPayload,
+  success: MigrationRunReportSchema,
+  error: Schema.Union([
+    NotFoundError,
+    ConflictError,
+    InvalidSchemaError,
+    MigrationFailedError,
+    ForbiddenError,
+  ]),
+});
+
+export const GetMigrationStatus = Rpc.make("GetMigrationStatus", {
+  payload: Schema.Struct({
+    databaseId: Schema.String,
+    version: Schema.Number,
+  }),
+  success: MigrationStatusSchema,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const MigrationsRpcs = RpcGroup.make(
+  ListDatabaseMigrations,
+  ApplyDatabaseMigration,
+  GetMigrationStatus,
+).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/groups/users.ts b/packages/mimic-server/src/rpc/groups/users.ts
new file mode 100644
index 000000000..53024546b
--- /dev/null
+++ b/packages/mimic-server/src/rpc/groups/users.ts
@@ -0,0 +1,32 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import { ConflictError, ForbiddenError, NotFoundError } from "../errors.ts";
+import { AuthMiddleware } from "../middleware.ts";
+import { CreateUserResponseSchema, UserSchema } from "../schemas.ts";
+
+export const CreateUser = Rpc.make("CreateUser", {
+  payload: Schema.Struct({
+    username: Schema.String,
+    password: Schema.String,
+  }),
+  success: CreateUserResponseSchema,
+  error: Schema.Union([ConflictError, ForbiddenError]),
+});
+
+export const ListUsers = Rpc.make("ListUsers", {
+  success: Schema.Array(UserSchema),
+  error: ForbiddenError,
+});
+
+export const DeleteUser = Rpc.make("DeleteUser", {
+  payload: Schema.Struct({
+    userId: Schema.String,
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const UsersRpcs = RpcGroup.make(CreateUser, ListUsers, DeleteUser).middleware(
+  AuthMiddleware,
+);
diff --git a/packages/mimic-server/src/rpc/index.ts b/packages/mimic-server/src/rpc/index.ts
new file mode 100644
index 000000000..acf1fbe7c
--- /dev/null
+++ b/packages/mimic-server/src/rpc/index.ts
@@ -0,0 +1,105 @@
+export {
+  ApiErrorSchemas,
+  ConflictError,
+  ForbiddenError,
+  InternalError,
+  InvalidSchemaError,
+  InvalidValueError,
+  MigrationFailedError,
+  NotFoundError,
+  toUnknownError,
+  UnauthorizedError,
+  ValidationError,
+  VersionConflictError,
+} from "./errors.ts";
+
+export {
+  CollectionSchema,
+  CreateCollectionResponseSchema,
+  CreateUserResponseSchema,
+  DatabaseMigrationSchema,
+  DatabasePermissionSchema,
+  DatabaseSchema,
+  DocumentAuthenticationSetupSchema,
+  DocumentMigrationStateSummarySchema,
+  DocumentPermissionSchema,
+  DocumentRunReportSchema,
+  DocumentRunStatusSchema,
+  DocumentSnapshotResponseSchema,
+  GrantSchema,
+  MigrationChangeSchema,
+  MigrationDryRunOptionsSchema,
+  MigrationRunReportSchema,
+  MigrationStatusSchema,
+  SchemaObjectRpcSchema,
+  SubmitTransactionResponseSchema,
+  TransactionEnvelopeSchema,
+  UpdateCollectionSchemaResponseSchema,
+  UserSchema,
+  ValueRpcSchema,
+} from "./schemas.ts";
+
+export type {
+  Collection,
+  CreateCollectionResponse,
+  CreateUserResponse,
+  Database,
+  DatabaseMigration,
+  DatabasePermission,
+  DocumentAuthenticationSetup,
+  DocumentMigrationStateSummary,
+  DocumentPermission,
+  DocumentRunReport,
+  DocumentRunStatus,
+  DocumentSnapshotResponse,
+  Grant,
+  MigrationChange,
+  MigrationDryRunOptions,
+  MigrationRunReport,
+  MigrationStatus,
+  SubmitTransactionResponse,
+  TransactionEnvelope,
+  UpdateCollectionSchemaResponse,
+  User,
+} from "./schemas.ts";
+
+export { AuthMiddleware, CurrentUser, type CurrentUserShape } from "./middleware.ts";
+
+export {
+  CreateDatabase,
+  DatabasesRpcs,
+  DeleteDatabase,
+  ListDatabases,
+} from "./groups/databases.ts";
+
+export {
+  CollectionsRpcs,
+  CreateCollection,
+  DeleteCollection,
+  ListCollections,
+  UpdateCollectionSchema,
+} from "./groups/collections.ts";
+
+export {
+  CreateDocument,
+  DeleteDocument,
+  DocumentsRpcs,
+  GetDocument,
+  ListDocuments,
+  SubmitTransaction,
+} from "./groups/documents.ts";
+
+export { CreateUser, DeleteUser, ListUsers, UsersRpcs } from "./groups/users.ts";
+
+export { GrantPermission, GrantsRpcs, ListGrants, RevokePermission } from "./groups/grants.ts";
+
+export {
+  ApplyDatabaseMigration,
+  GetMigrationStatus,
+  ListDatabaseMigrations,
+  MigrationsRpcs,
+} from "./groups/migrations.ts";
+
+export { DocumentAuthRpcs, SetupDocumentAuthentication } from "./groups/document-auth.ts";
+
+export { MimicRpcGroup } from "./group.ts";
diff --git a/packages/mimic-server/src/rpc/middleware.ts b/packages/mimic-server/src/rpc/middleware.ts
new file mode 100644
index 000000000..e3aafacda
--- /dev/null
+++ b/packages/mimic-server/src/rpc/middleware.ts
@@ -0,0 +1,23 @@
+import { Context } from "effect";
+import { RpcMiddleware } from "effect/unstable/rpc";
+
+import { UnauthorizedError } from "./errors.ts";
+
+export interface CurrentUserShape {
+  readonly userId: string;
+  readonly username: string;
+  readonly isSuperuser: boolean;
+}
+
+export class CurrentUser extends Context.Service<CurrentUser, CurrentUserShape>()(
+  "@voidhash-mono/mimic-rpc/CurrentUser",
+) {}
+
+export class AuthMiddleware extends RpcMiddleware.Service<
+  AuthMiddleware,
+  {
+    provides: CurrentUser;
+  }
+>()("@voidhash-mono/mimic-rpc/AuthMiddleware", {
+  error: UnauthorizedError,
+}) {}
diff --git a/packages/mimic-server/src/rpc/schemas.ts b/packages/mimic-server/src/rpc/schemas.ts
new file mode 100644
index 000000000..8b2929ccb
--- /dev/null
+++ b/packages/mimic-server/src/rpc/schemas.ts
@@ -0,0 +1,203 @@
+import { Schema } from "effect";
+
+/**
+ * Wire schema for arbitrary JSON-encoded values produced by mimic-core
+ * primitives. We intentionally use `Schema.Unknown` here so that arbitrary
+ * shapes (including dynamic schemas defined at runtime) can round-trip
+ * across the wire without server-side decoding loss.
+ */
+export const ValueRpcSchema = Schema.Unknown;
+
+/**
+ * Wire schema for collection-schema JSON. Same rationale as `ValueRpcSchema` —
+ * `SchemaObject` from mimic-core has dynamic shape and is normalized
+ * server-side.
+ */
+export const SchemaObjectRpcSchema = Schema.Unknown;
+
+export const DatabasePermissionSchema = Schema.Literals(["read", "write", "admin"]);
+export const DocumentPermissionSchema = Schema.Literals(["read", "write"]);
+
+export const DatabaseSchema = Schema.Struct({
+  id: Schema.String,
+  name: Schema.String,
+  description: Schema.String,
+});
+
+export const CollectionSchema = Schema.Struct({
+  id: Schema.String,
+  databaseId: Schema.String,
+  name: Schema.String,
+  schema: SchemaObjectRpcSchema,
+  schemaVersion: Schema.Number,
+});
+
+export const CreateCollectionResponseSchema = Schema.Struct({
+  id: Schema.String,
+  databaseId: Schema.String,
+  name: Schema.String,
+});
+
+export const UpdateCollectionSchemaResponseSchema = Schema.Struct({
+  id: Schema.String,
+  schemaVersion: Schema.Number,
+});
+
+export const UserSchema = Schema.Struct({
+  id: Schema.String,
+  username: Schema.String,
+  isSuperuser: Schema.Boolean,
+});
+
+export const CreateUserResponseSchema = Schema.Struct({
+  id: Schema.String,
+  username: Schema.String,
+});
+
+export const GrantSchema = Schema.Struct({
+  id: Schema.String,
+  userId: Schema.String,
+  databaseId: Schema.String,
+  permission: Schema.String,
+});
+
+export const DocumentSnapshotResponseSchema = Schema.Struct({
+  id: Schema.String,
+  collectionId: Schema.String,
+  value: ValueRpcSchema,
+  version: Schema.Number,
+});
+
+export const TransactionEnvelopeSchema = Schema.Struct({
+  id: Schema.String,
+  baseVersion: Schema.Number,
+  commands: Schema.Array(Schema.Unknown),
+  submittedAt: Schema.optional(Schema.String),
+  actor: Schema.optional(
+    Schema.Struct({
+      userId: Schema.optional(Schema.String),
+      connectionId: Schema.optional(Schema.String),
+    }),
+  ),
+});
+
+export const SubmitTransactionResponseSchema = Schema.Struct({
+  accepted: Schema.Boolean,
+  version: Schema.Number,
+  transactionId: Schema.String,
+  reason: Schema.optional(Schema.String),
+});
+
+export const MigrationChangeSchema = Schema.Union([
+  Schema.Struct({
+    type: Schema.Literal("create"),
+    collection: Schema.String,
+    schema: SchemaObjectRpcSchema,
+    skipIfExists: Schema.optional(Schema.Boolean),
+  }),
+  Schema.Struct({
+    type: Schema.Literal("update"),
+    collection: Schema.String,
+    schema: SchemaObjectRpcSchema,
+    oldSchema: Schema.optional(SchemaObjectRpcSchema),
+    dataMigrationSource: Schema.optional(Schema.String),
+  }),
+]);
+
+export const DatabaseMigrationSchema = Schema.Struct({
+  version: Schema.Number,
+  name: Schema.String,
+  checksum: Schema.String,
+  appliedAt: Schema.optional(Schema.String),
+  state: Schema.optional(Schema.Literals(["running", "succeeded", "failed", "replaced"])),
+  totalDocuments: Schema.optional(Schema.Number),
+  succeededDocuments: Schema.optional(Schema.Number),
+  failedDocuments: Schema.optional(Schema.Number),
+  changes: Schema.optional(Schema.Array(MigrationChangeSchema)),
+});
+
+export const MigrationDryRunOptionsSchema = Schema.Struct({
+  limit: Schema.optional(Schema.Number),
+  samplePercent: Schema.optional(Schema.Number),
+});
+
+export const DocumentRunStatusSchema = Schema.Literals(["succeeded", "failed", "skipped"]);
+
+export const DocumentRunReportSchema = Schema.Struct({
+  collectionId: Schema.String,
+  documentId: Schema.String,
+  status: DocumentRunStatusSchema,
+  errorCode: Schema.optional(Schema.String),
+  errorMessage: Schema.optional(Schema.String),
+});
+
+export const MigrationRunReportSchema = Schema.Struct({
+  databaseId: Schema.String,
+  version: Schema.Number,
+  state: Schema.Literals(["succeeded", "failed"]),
+  succeeded: Schema.Number,
+  failed: Schema.Number,
+  skipped: Schema.Number,
+  perDocument: Schema.Array(DocumentRunReportSchema),
+  dryRun: Schema.Boolean,
+});
+
+export const DocumentMigrationStateSummarySchema = Schema.Struct({
+  pending: Schema.Number,
+  running: Schema.Number,
+  succeeded: Schema.Number,
+  failed: Schema.Number,
+  skipped: Schema.Number,
+});
+
+export const MigrationStatusSchema = Schema.Struct({
+  databaseId: Schema.String,
+  version: Schema.Number,
+  state: Schema.Literals(["running", "succeeded", "failed", "replaced", "unknown"]),
+  checksum: Schema.optional(Schema.String),
+  summary: DocumentMigrationStateSummarySchema,
+  failures: Schema.Array(
+    Schema.Struct({
+      documentId: Schema.String,
+      collectionId: Schema.String,
+      attempt: Schema.Number,
+      errorCode: Schema.optional(Schema.String),
+      errorMessage: Schema.optional(Schema.String),
+    }),
+  ),
+});
+
+export const DocumentAuthenticationSetupSchema = Schema.Struct({
+  token: Schema.String,
+  url: Schema.String,
+});
+
+// Type aliases for consumers — derived from the schemas so they stay in sync.
+
+export type Database = Schema.Schema.Type<typeof DatabaseSchema>;
+export type Collection = Schema.Schema.Type<typeof CollectionSchema>;
+export type CreateCollectionResponse = Schema.Schema.Type<typeof CreateCollectionResponseSchema>;
+export type UpdateCollectionSchemaResponse = Schema.Schema.Type<
+  typeof UpdateCollectionSchemaResponseSchema
+>;
+export type User = Schema.Schema.Type<typeof UserSchema>;
+export type CreateUserResponse = Schema.Schema.Type<typeof CreateUserResponseSchema>;
+export type Grant = Schema.Schema.Type<typeof GrantSchema>;
+export type DocumentSnapshotResponse = Schema.Schema.Type<typeof DocumentSnapshotResponseSchema>;
+export type TransactionEnvelope = Schema.Schema.Type<typeof TransactionEnvelopeSchema>;
+export type SubmitTransactionResponse = Schema.Schema.Type<typeof SubmitTransactionResponseSchema>;
+export type MigrationChange = Schema.Schema.Type<typeof MigrationChangeSchema>;
+export type DatabaseMigration = Schema.Schema.Type<typeof DatabaseMigrationSchema>;
+export type MigrationDryRunOptions = Schema.Schema.Type<typeof MigrationDryRunOptionsSchema>;
+export type DocumentRunStatus = Schema.Schema.Type<typeof DocumentRunStatusSchema>;
+export type DocumentRunReport = Schema.Schema.Type<typeof DocumentRunReportSchema>;
+export type MigrationRunReport = Schema.Schema.Type<typeof MigrationRunReportSchema>;
+export type DocumentMigrationStateSummary = Schema.Schema.Type<
+  typeof DocumentMigrationStateSummarySchema
+>;
+export type MigrationStatus = Schema.Schema.Type<typeof MigrationStatusSchema>;
+export type DocumentAuthenticationSetup = Schema.Schema.Type<
+  typeof DocumentAuthenticationSetupSchema
+>;
+export type DatabasePermission = Schema.Schema.Type<typeof DatabasePermissionSchema>;
+export type DocumentPermission = Schema.Schema.Type<typeof DocumentPermissionSchema>;
diff --git a/packages/mimic-server/tests/migrate/migration/analyze.test.ts b/packages/mimic-server/tests/migrate/migration/analyze.test.ts
new file mode 100644
index 000000000..c80090e62
--- /dev/null
+++ b/packages/mimic-server/tests/migrate/migration/analyze.test.ts
@@ -0,0 +1,56 @@
+import { describe, expect, it } from "vitest";
+
+import { Primitive } from "@voidhash/mimic-core";
+
+import { analyzeMigration } from "../../../src/migrate/index.js";
+
+describe("migration analyze", () => {
+  it("allows adding a required field when the new schema provides a default", () => {
+    const oldSchema = Primitive.Struct({
+      title: Primitive.String().required(),
+    }).schema;
+    const newSchema = Primitive.Struct({
+      title: Primitive.String().required(),
+      done: Primitive.Boolean().required().default(false),
+    }).schema;
+
+    expect(analyzeMigration({ oldSchema, newSchema })).toEqual([]);
+  });
+
+  it("rejects adding a required field without a default", () => {
+    const oldSchema = Primitive.Struct({
+      title: Primitive.String().required(),
+    }).schema;
+    const newSchema = Primitive.Struct({
+      title: Primitive.String().required(),
+      slug: Primitive.String().required(),
+    }).schema;
+
+    expect(analyzeMigration({ oldSchema, newSchema })).toEqual([
+      {
+        code: "required-field-without-default",
+        path: "root.slug",
+        message: 'Field "slug" is required in the new schema but has no default',
+      },
+    ]);
+  });
+
+  it("flags incompatible literal discriminator changes", () => {
+    const oldSchema = Primitive.Struct({
+      type: Primitive.Literal("todo").required(),
+      title: Primitive.String().required(),
+    }).schema;
+    const newSchema = Primitive.Struct({
+      type: Primitive.Literal("card").required(),
+      title: Primitive.String().required(),
+    }).schema;
+
+    expect(analyzeMigration({ oldSchema, newSchema })).toEqual([
+      {
+        code: "incompatible-type",
+        path: "root.type",
+        message: 'Literal changed from "todo" to "card"',
+      },
+    ]);
+  });
+});
diff --git a/packages/mimic-server/tests/migrate/migration/reconcile.test.ts b/packages/mimic-server/tests/migrate/migration/reconcile.test.ts
new file mode 100644
index 000000000..71abc2573
--- /dev/null
+++ b/packages/mimic-server/tests/migrate/migration/reconcile.test.ts
@@ -0,0 +1,61 @@
+import { describe, expect, it } from "vitest";
+
+import { Primitive } from "@voidhash/mimic-core";
+
+import { reconcileMigrationValue } from "../../../src/migrate/index.js";
+
+describe("migration reconcile", () => {
+  it("prunes removed fields and materializes defaults from the new schema", () => {
+    const oldPrimitive = Primitive.Struct({
+      title: Primitive.String().required(),
+      notes: Primitive.String(),
+    });
+    const newPrimitive = Primitive.Struct({
+      title: Primitive.String().required(),
+      done: Primitive.Boolean().default(false),
+    });
+
+    const result = reconcileMigrationValue({
+      oldSchema: oldPrimitive.schema,
+      newSchema: newPrimitive.schema,
+      value: oldPrimitive.encode({
+        title: "Write tests",
+        notes: "legacy field",
+      }),
+    });
+
+    expect(result).toEqual({
+      ok: true,
+      value: newPrimitive.encode({
+        title: "Write tests",
+        done: false,
+      }),
+    });
+  });
+
+  it("fails when required new data cannot be derived", () => {
+    const oldPrimitive = Primitive.Struct({
+      title: Primitive.String().required(),
+    });
+    const newPrimitive = Primitive.Struct({
+      title: Primitive.String().required(),
+      slug: Primitive.String().required(),
+    });
+
+    const result = reconcileMigrationValue({
+      oldSchema: oldPrimitive.schema,
+      newSchema: newPrimitive.schema,
+      value: oldPrimitive.encode({
+        title: "Write tests",
+      }),
+    });
+
+    expect(result.ok).toBe(false);
+    if (result.ok) {
+      return;
+    }
+
+    expect(result.error.code).toBe("required-field-without-default");
+    expect(result.error.path).toBe("root.slug");
+  });
+});
diff --git a/packages/mimic-server/tests/rpc/contracts.test.ts b/packages/mimic-server/tests/rpc/contracts.test.ts
new file mode 100644
index 000000000..2fc312a94
--- /dev/null
+++ b/packages/mimic-server/tests/rpc/contracts.test.ts
@@ -0,0 +1,41 @@
+import { describe, expect, it } from "vitest";
+
+import { AuthMiddleware, MimicRpcGroup } from "../../src/rpc/index.js";
+
+describe("MimicRpcGroup", () => {
+  it("exposes the expected procedure tags", () => {
+    const tags = [...MimicRpcGroup.requests.keys()].sort();
+    expect(tags).toEqual([
+      "ApplyDatabaseMigration",
+      "CreateCollection",
+      "CreateDatabase",
+      "CreateDocument",
+      "CreateUser",
+      "DeleteCollection",
+      "DeleteDatabase",
+      "DeleteDocument",
+      "DeleteUser",
+      "GetDocument",
+      "GetMigrationStatus",
+      "GrantPermission",
+      "ListCollections",
+      "ListDatabaseMigrations",
+      "ListDatabases",
+      "ListDocuments",
+      "ListGrants",
+      "ListUsers",
+      "RevokePermission",
+      "SetupDocumentAuthentication",
+      "SubmitTransaction",
+      "UpdateCollectionSchema",
+    ]);
+  });
+
+  it("applies AuthMiddleware to every procedure", () => {
+    for (const rpc of MimicRpcGroup.requests.values()) {
+      const middlewares = (rpc as { readonly middlewares: ReadonlySet<unknown> }).middlewares;
+      expect(middlewares.size).toBe(1);
+      expect(middlewares.has(AuthMiddleware)).toBe(true);
+    }
+  });
+});
diff --git a/packages/mimic-server/tests/rpc/schemas.test.ts b/packages/mimic-server/tests/rpc/schemas.test.ts
new file mode 100644
index 000000000..95c9b8cdc
--- /dev/null
+++ b/packages/mimic-server/tests/rpc/schemas.test.ts
@@ -0,0 +1,77 @@
+import { Schema } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  DatabaseMigrationSchema,
+  DocumentSnapshotResponseSchema,
+  MigrationChangeSchema,
+  TransactionEnvelopeSchema,
+} from "../../src/rpc/index.js";
+
+describe("schemas", () => {
+  it("round-trips a TransactionEnvelope through encode/decode", () => {
+    const envelope = {
+      id: "tx-1",
+      baseVersion: 7,
+      commands: [
+        { kind: "value.set", path: [], value: { hello: "world" } },
+        { kind: "value.set", path: ["foo"], value: 42 },
+      ],
+      submittedAt: "2026-05-03T12:00:00.000Z",
+      actor: { userId: "user-1", connectionId: "conn-1" },
+    } as const;
+
+    const encoded = Schema.encodeSync(TransactionEnvelopeSchema)(envelope);
+    const decoded = Schema.decodeUnknownSync(TransactionEnvelopeSchema)(encoded);
+
+    expect(decoded).toEqual(envelope);
+  });
+
+  it("round-trips both MigrationChange variants", () => {
+    const create = {
+      type: "create" as const,
+      collection: "todos",
+      schema: { kind: "object", fields: { title: { kind: "string", required: true } } },
+      skipIfExists: true,
+    };
+    const update = {
+      type: "update" as const,
+      collection: "todos",
+      schema: { kind: "object", fields: { title: { kind: "string", required: true } } },
+      oldSchema: { kind: "object", fields: {} },
+      dataMigrationSource: "globalThis.x = 1;",
+    };
+
+    expect(Schema.decodeUnknownSync(MigrationChangeSchema)(create)).toEqual(create);
+    expect(Schema.decodeUnknownSync(MigrationChangeSchema)(update)).toEqual(update);
+  });
+
+  it("round-trips a DatabaseMigration with optional changes", () => {
+    const migration = {
+      version: 3,
+      name: "add-slug",
+      checksum: "abc",
+      appliedAt: "2026-05-03T12:00:00.000Z",
+      changes: [
+        {
+          type: "create" as const,
+          collection: "todos",
+          schema: { kind: "object", fields: {} },
+        },
+      ],
+    };
+
+    expect(Schema.decodeUnknownSync(DatabaseMigrationSchema)(migration)).toEqual(migration);
+  });
+
+  it("round-trips a DocumentSnapshot", () => {
+    const snapshot = {
+      id: "doc-1",
+      collectionId: "col-1",
+      value: { hello: "world", n: 42 },
+      version: 5,
+    };
+
+    expect(Schema.decodeUnknownSync(DocumentSnapshotResponseSchema)(snapshot)).toEqual(snapshot);
+  });
+});
diff --git a/packages/mimic-server/tests/sdk/effect/migrations.test.ts b/packages/mimic-server/tests/sdk/effect/migrations.test.ts
new file mode 100644
index 000000000..661a45d8a
--- /dev/null
+++ b/packages/mimic-server/tests/sdk/effect/migrations.test.ts
@@ -0,0 +1,146 @@
+import { Effect, Layer } from "effect";
+import { RpcTest } from "effect/unstable/rpc";
+import {
+  AuthMiddleware,
+  CurrentUser,
+  MimicRpcGroup,
+  type MigrationChange,
+} from "@voidhash/mimic-server/rpc";
+import { describe, expect, it } from "vitest";
+
+interface ApplyCall {
+  readonly databaseId: string;
+  readonly version: number;
+  readonly name: string;
+  readonly checksum: string;
+  readonly changes: ReadonlyArray<MigrationChange>;
+}
+
+interface ListCall {
+  readonly databaseId: string;
+}
+
+const makeTestEnv = () => {
+  const applyCalls: ApplyCall[] = [];
+  const listCalls: ListCall[] = [];
+  const cannedMigrations: ReadonlyArray<{
+    readonly version: number;
+    readonly name: string;
+    readonly checksum: string;
+  }> = [
+    { version: 1, name: "init", checksum: "abc" },
+    { version: 2, name: "add-slug", checksum: "def" },
+  ];
+
+  // The full group requires every procedure to be implemented; we only
+  // care about the migration ones for these tests, so the rest are stubs
+  // that fail with a tagged error.
+  const HandlersLive = MimicRpcGroup.toLayer(
+    Effect.succeed({
+      ListDatabaseMigrations: ({ databaseId }) =>
+        Effect.sync(() => {
+          listCalls.push({ databaseId });
+          return cannedMigrations;
+        }),
+      ApplyDatabaseMigration: ({ databaseId, version, name, checksum, changes }) =>
+        Effect.sync(() => {
+          applyCalls.push({ databaseId, version, name, checksum, changes });
+        }),
+      // Stub everything else.
+      CreateDatabase: () => Effect.die("unused in this test"),
+      ListDatabases: () => Effect.die("unused in this test"),
+      DeleteDatabase: () => Effect.die("unused in this test"),
+      CreateCollection: () => Effect.die("unused in this test"),
+      ListCollections: () => Effect.die("unused in this test"),
+      UpdateCollectionSchema: () => Effect.die("unused in this test"),
+      DeleteCollection: () => Effect.die("unused in this test"),
+      CreateDocument: () => Effect.die("unused in this test"),
+      GetDocument: () => Effect.die("unused in this test"),
+      ListDocuments: () => Effect.die("unused in this test"),
+      SubmitTransaction: () => Effect.die("unused in this test"),
+      DeleteDocument: () => Effect.die("unused in this test"),
+      CreateUser: () => Effect.die("unused in this test"),
+      ListUsers: () => Effect.die("unused in this test"),
+      DeleteUser: () => Effect.die("unused in this test"),
+      GrantPermission: () => Effect.die("unused in this test"),
+      RevokePermission: () => Effect.die("unused in this test"),
+      ListGrants: () => Effect.die("unused in this test"),
+      SetupDocumentAuthentication: () => Effect.die("unused in this test"),
+    }),
+  );
+
+  const StubAuthLive = Layer.effect(AuthMiddleware)(
+    Effect.succeed((effect, _options) =>
+      Effect.provideService(effect, CurrentUser, {
+        userId: "test-user",
+        username: "test",
+        isSuperuser: true,
+      }),
+    ),
+  );
+
+  return {
+    applyCalls,
+    listCalls,
+    cannedMigrations,
+    layer: Layer.mergeAll(HandlersLive, StubAuthLive),
+  };
+};
+
+describe("MimicRpcGroup migrations RPCs", () => {
+  it("returns the canned migration list and records the requested databaseId", async () => {
+    const env = makeTestEnv();
+    const program = Effect.gen(function* () {
+      const client = yield* RpcTest.makeClient(MimicRpcGroup);
+      return yield* client.ListDatabaseMigrations({ databaseId: "db-1" });
+    });
+
+    const response = await Effect.runPromise(
+      Effect.scoped(program).pipe(Effect.provide(env.layer)),
+    );
+
+    expect(response).toEqual(env.cannedMigrations);
+    expect(env.listCalls).toEqual([{ databaseId: "db-1" }]);
+  });
+
+  it("encodes a typed migration change payload across the wire", async () => {
+    const env = makeTestEnv();
+    const change: MigrationChange = {
+      type: "update",
+      collection: "todos",
+      schema: {
+        kind: "object",
+        fields: {
+          title: { kind: "string", required: true },
+          slug: { kind: "string", required: true },
+        },
+      },
+      oldSchema: {
+        kind: "object",
+        fields: { title: { kind: "string", required: true } },
+      },
+      dataMigrationSource: "globalThis.__MIMIC_RUN_MIGRATION__ = () => ({ value: undefined });",
+    };
+
+    const program = Effect.gen(function* () {
+      const client = yield* RpcTest.makeClient(MimicRpcGroup);
+      yield* client.ApplyDatabaseMigration({
+        databaseId: "db-1",
+        version: 2,
+        name: "add-slug",
+        checksum: "checksum-2",
+        changes: [change],
+      });
+    });
+
+    await Effect.runPromise(Effect.scoped(program).pipe(Effect.provide(env.layer)));
+
+    expect(env.applyCalls).toHaveLength(1);
+    const call = env.applyCalls[0]!;
+    expect(call.databaseId).toBe("db-1");
+    expect(call.version).toBe(2);
+    expect(call.name).toBe("add-slug");
+    expect(call.checksum).toBe("checksum-2");
+    expect(call.changes).toEqual([change]);
+  });
+});
diff --git a/packages/mimic-server/tests/sdk/effect/raw-collection-submit.test.ts b/packages/mimic-server/tests/sdk/effect/raw-collection-submit.test.ts
new file mode 100644
index 000000000..9cb4b8d8d
--- /dev/null
+++ b/packages/mimic-server/tests/sdk/effect/raw-collection-submit.test.ts
@@ -0,0 +1,114 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { MimicSDK, RawCollectionHandle } from "@voidhash/mimic-server/effect";
+
+/**
+ * Unit coverage for `RawCollectionHandle.submitTransaction` — the granular
+ * server-write path the paywall workspace uses (distinct from the whole-value
+ * `setDocumentRaw`). We drive the handle against a fake `MimicSDK` whose
+ * `runEffect` invokes the caller's function with a stub `SubmitTransaction`,
+ * capturing the transaction envelope the handle builds. This asserts the wire
+ * shape and the (deliberately non-dying) result pass-through without standing up
+ * an HTTP protocol — the full over-the-wire round-trip is exercised by the
+ * mimic-db integration suite.
+ */
+
+interface SubmitCall {
+  readonly collectionId: string;
+  readonly documentId: string;
+  readonly transaction: {
+    readonly id: string;
+    readonly baseVersion: number;
+    readonly commands: readonly unknown[];
+  };
+}
+
+/** A fake SDK: `runEffect(fn)` runs `fn` with a stub client capturing the submit. */
+const fakeSdk = (
+  calls: SubmitCall[],
+  response: { accepted: boolean; version: number; transactionId?: string; reason?: string },
+): MimicSDK => {
+  const client = {
+    SubmitTransaction: (payload: SubmitCall) =>
+      Effect.sync(() => {
+        calls.push(payload);
+        return {
+          accepted: response.accepted,
+          version: response.version,
+          transactionId: response.transactionId ?? payload.transaction.id,
+          reason: response.reason,
+        };
+      }),
+  };
+  const sdk = Object.create(MimicSDK.prototype) as MimicSDK;
+  Object.defineProperty(sdk, "runEffect", {
+    value: (fn: (c: typeof client) => Effect.Effect<unknown, unknown>) => fn(client),
+  });
+  return sdk;
+};
+
+describe("RawCollectionHandle.submitTransaction", () => {
+  it("builds a granular envelope (no whole-value command) at the given baseVersion", async () => {
+    const calls: SubmitCall[] = [];
+    const handle = new RawCollectionHandle("col-1", "db-1", fakeSdk(calls, {
+      accepted: true,
+      version: 12,
+    }));
+
+    const commands = [{ kind: "object.set", path: [], key: "source", value: { kind: "string", value: "x" } }];
+    const result = await Effect.runPromise(
+      handle.submitTransaction("doc-1", { baseVersion: 11, commands, id: "tx-1" }) as Effect.Effect<
+        { accepted: boolean; version: number },
+        never
+      >,
+    );
+
+    expect(result).toEqual({ accepted: true, version: 12, transactionId: "tx-1", reason: undefined });
+    expect(calls).toHaveLength(1);
+    const call = calls[0]!;
+    expect(call).toEqual({
+      collectionId: "col-1",
+      documentId: "doc-1",
+      transaction: { id: "tx-1", baseVersion: 11, commands },
+    });
+    // Crucially NOT a whole-value replace — the batch is exactly the caller's.
+    expect(call.transaction.commands).toBe(commands);
+  });
+
+  it("returns a rejected result verbatim instead of dying (caller retries)", async () => {
+    const calls: SubmitCall[] = [];
+    const handle = new RawCollectionHandle("col-1", "db-1", fakeSdk(calls, {
+      accepted: false,
+      version: 20,
+      reason: "Version conflict: expected 20, received 11",
+    }));
+
+    const result = await Effect.runPromise(
+      handle.submitTransaction("doc-1", { baseVersion: 11, commands: [], id: "tx-2" }) as Effect.Effect<
+        { accepted: boolean; version: number; reason?: string },
+        never
+      >,
+    );
+
+    expect(result.accepted).toBe(false);
+    expect(result.version).toBe(20);
+    expect(result.reason).toContain("Version conflict");
+  });
+
+  it("mints a transaction id when none is supplied", async () => {
+    const calls: SubmitCall[] = [];
+    const handle = new RawCollectionHandle("col-1", "db-1", fakeSdk(calls, {
+      accepted: true,
+      version: 2,
+    }));
+
+    await Effect.runPromise(
+      handle.submitTransaction("doc-1", { baseVersion: 1, commands: [] }) as Effect.Effect<
+        unknown,
+        never
+      >,
+    );
+    expect(calls[0]!.transaction.id.length).toBeGreaterThan(0);
+  });
+});
diff --git a/packages/mimic-server/tsconfig.build.json b/packages/mimic-server/tsconfig.build.json
new file mode 100644
index 000000000..d9d80befa
--- /dev/null
+++ b/packages/mimic-server/tsconfig.build.json
@@ -0,0 +1,27 @@
+{
+  "compilerOptions": {
+    "module": "Preserve",
+    "moduleResolution": "Bundler",
+    "allowImportingTsExtensions": true,
+    "rewriteRelativeImportExtensions": true,
+    "lib": ["es2022", "dom", "dom.iterable"],
+    "target": "es2022",
+    "declaration": true,
+    "declarationMap": true,
+    "declarationDir": "dist",
+    "outDir": "./dist",
+    "strict": true,
+    "strictNullChecks": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "noPropertyAccessFromIndexSignature": true,
+    "noImplicitOverride": true
+  },
+  "include": ["src"],
+  "exclude": ["tests", "**/*.test.ts", "**/*.test.tsx", "__tests__"]
+}
diff --git a/packages/mimic-server/tsconfig.json b/packages/mimic-server/tsconfig.json
new file mode 100644
index 000000000..584adf841
--- /dev/null
+++ b/packages/mimic-server/tsconfig.json
@@ -0,0 +1,9 @@
+{
+  "extends": "./tsconfig.build.json",
+  "include": ["src"],
+  "compilerOptions": {
+    "allowJs": false,
+    "rootDir": "./",
+    "noEmit": true
+  }
+}
diff --git a/packages/mimic-server/vitest.mts b/packages/mimic-server/vitest.mts
new file mode 100644
index 000000000..e3ed6a26b
--- /dev/null
+++ b/packages/mimic-server/vitest.mts
@@ -0,0 +1,10 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    include: ["./tests/**/*.test.ts"],
+    exclude: ["./node_modules/**"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/packages/mimic/LICENSE.md b/packages/mimic/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/mimic/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/mimic/README.md b/packages/mimic/README.md
new file mode 100644
index 000000000..3e0ffda19
--- /dev/null
+++ b/packages/mimic/README.md
@@ -0,0 +1,3 @@
+# @voidhash/mimic
+
+Client library for real-time collaborative documents, with React and Zustand integrations.
diff --git a/packages/mimic/package.json b/packages/mimic/package.json
new file mode 100644
index 000000000..c7ec1b2db
--- /dev/null
+++ b/packages/mimic/package.json
@@ -0,0 +1,66 @@
+{
+  "name": "@voidhash/mimic",
+  "version": "1.0.0-beta.19",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/mimic"
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "import": "./src/index.ts",
+      "require": "./dist/index.cjs"
+    },
+    "./client": {
+      "types": "./src/client/index.ts",
+      "import": "./src/client/index.ts",
+      "require": "./dist/client/index.cjs"
+    },
+    "./zustand": {
+      "types": "./src/zustand/index.ts",
+      "import": "./src/zustand/index.ts",
+      "require": "./dist/zustand/index.cjs"
+    },
+    "./zustand-commander": {
+      "types": "./src/zustand-commander/index.ts",
+      "import": "./src/zustand-commander/index.ts",
+      "require": "./dist/zustand-commander/index.cjs"
+    }
+  },
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vp test run -c vitest.mts",
+    "test:watch": "vp test -c vitest.mts"
+  },
+  "dependencies": {
+    "@voidhash/mimic-core": "workspace:*"
+  },
+  "devDependencies": {
+    "@testing-library/react": "^16.3.0",
+    "@types/react": "^19.1.16",
+    "@types/react-dom": "^19.1.9",
+    "@voidhash/mimic-core": "workspace:*",
+    "jsdom": "^26.1.0",
+    "react": "^19.1.1",
+    "react-dom": "^19.1.1",
+    "tsdown": "^0.18.2",
+    "typescript": "5.8.3",
+    "vite-plus": "0.1.23",
+    "vitest": "^3.2.7",
+    "zustand": "^5.0.9"
+  },
+  "peerDependencies": {
+    "react": "^18.0.0 || ^19.0.0",
+    "zustand": "^5.0.9"
+  }
+}
diff --git a/packages/mimic/src/client/ClientDocument.ts b/packages/mimic/src/client/ClientDocument.ts
new file mode 100644
index 000000000..b0a2bc763
--- /dev/null
+++ b/packages/mimic/src/client/ClientDocument.ts
@@ -0,0 +1,481 @@
+import {
+  Primitive,
+  applyBatch,
+  createGenerator,
+  validate as validateSchema,
+  validateValue,
+  type Command,
+  type Path,
+  type Schema,
+  type Value,
+} from "@voidhash/mimic-core";
+
+import { randomUuid, shortId } from "../shared/ids.js";
+import { DraftHandleImpl } from "./Draft.js";
+import { InvalidStateError, SnapshotValidationError, TransactionRejectedError } from "./errors.js";
+import type { PendingTransaction } from "./pending.js";
+import { toEnvelope } from "./pending.js";
+import { PresenceManager } from "./presence.js";
+import { replayPending } from "./state.js";
+import type {
+  ErrorMessage,
+  PresenceRemoveMessage,
+  PresenceSnapshotMessage,
+  PresenceUpdateMessage,
+  SnapshotMessage,
+  TransactionMessage,
+} from "./protocol.js";
+import type { DocumentTransport } from "./Transport.js";
+import type { ClientDocument, ClientDocumentListener, ClientDocumentOptions } from "./types.js";
+
+interface ClientDocumentState {
+  serverValue: Value | undefined;
+  optimisticValue: Value | undefined;
+  serverVersion: number;
+  pending: PendingTransaction[];
+  connected: boolean;
+  ready: boolean;
+}
+
+const createDocumentSession = (
+  current: () => Value,
+  emit: (commands: readonly Command[]) => void,
+): Primitive.CommandSession => {
+  const generator = createGenerator();
+  return {
+    current,
+    emit,
+    generator: {
+      nextArrayItemId: (_path: Path) => randomUuid(),
+      // Node ids appear in printed composition source, so they are short.
+      nextTreeNodeId: (_path: Path) => shortId(),
+      between: (lower?: string, upper?: string) => generator.between(lower, upper),
+    },
+  };
+};
+
+export class ClientDocumentImpl<
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+> implements ClientDocument<TPrimitive, TPresence, TPresenceInput> {
+  readonly primitive: TPrimitive;
+  readonly root: Primitive.InferProxy<TPrimitive>;
+  readonly presence?: ReturnType<
+    ClientDocumentImpl<TPrimitive, TPresence, TPresenceInput>["createPresenceApi"]
+  >;
+
+  private readonly schema: Schema;
+  private readonly listeners = new Set<ClientDocumentListener<TPrimitive>>();
+  private readonly drafts = new Map<string, DraftHandleImpl<TPrimitive>>();
+  private readonly transport: DocumentTransport;
+  private readonly presenceManager?: PresenceManager<TPresence, TPresenceInput>;
+  private readonly resyncWaiters = new Set<{
+    readonly resolve: () => void;
+    readonly reject: (error: Error) => void;
+  }>();
+  private readonly state: ClientDocumentState;
+  private awaitingSnapshot = false;
+  private activePendingId: string | undefined;
+
+  constructor(
+    private readonly options: ClientDocumentOptions<TPrimitive, TPresence, TPresenceInput>,
+  ) {
+    this.primitive = options.primitive;
+    this.schema = options.primitive.schema;
+    this.transport = options.transport;
+    this.presenceManager = options.presence
+      ? new PresenceManager(options.presence.primitive)
+      : undefined;
+    this.presence = this.presenceManager ? this.createPresenceApi(this.presenceManager) : undefined;
+
+    const initialValue = options.initialValue
+      ? this.sanitizeValue(options.initialValue)
+      : undefined;
+    const initialVersion = options.initialVersion ?? 0;
+
+    this.state = {
+      serverValue: initialValue,
+      optimisticValue: initialValue,
+      serverVersion: initialVersion,
+      pending: [],
+      connected: false,
+      ready: initialValue !== undefined,
+    };
+
+    this.root = this.primitive.createProxy(
+      createDocumentSession(
+        () => this.requireOptimisticValue(),
+        (commands) => this.enqueueCommands(commands),
+      ),
+      [],
+    ) as Primitive.InferProxy<TPrimitive>;
+
+    this.transport.subscribe((message) => {
+      switch (message.type) {
+        case "snapshot":
+          this.handleSnapshot(message);
+          return;
+        case "transaction":
+          this.handleTransaction(message);
+          return;
+        case "error":
+          this.handleError(message);
+          return;
+        case "presence_snapshot":
+          this.handlePresenceSnapshot(message);
+          return;
+        case "presence_update":
+          this.handlePresenceUpdate(message);
+          return;
+        case "presence_remove":
+          this.handlePresenceRemove(message);
+          return;
+      }
+    });
+
+    this.transport.subscribeConnection((connected) => {
+      this.state.connected = connected;
+      this.options.onConnectionChange?.(connected);
+      for (const listener of this.listeners) {
+        listener.onConnectionChange?.(connected);
+      }
+      if (connected) {
+        this.awaitingSnapshot = true;
+      } else {
+        this.activePendingId = undefined;
+        this.presenceManager?.resetConnectionState();
+      }
+    });
+
+    if (options.presence?.initial !== undefined && this.presenceManager) {
+      this.presenceManager.encode(options.presence.initial);
+    }
+  }
+
+  getValue(): Value | undefined {
+    return this.state.optimisticValue;
+  }
+
+  getServerValue(): Value | undefined {
+    return this.state.serverValue;
+  }
+
+  getSnapshot(): Primitive.InferSnapshot<TPrimitive> | undefined {
+    return this.primitive.decode(this.state.optimisticValue);
+  }
+
+  getServerSnapshot(): Primitive.InferSnapshot<TPrimitive> | undefined {
+    return this.primitive.decode(this.state.serverValue);
+  }
+
+  getServerVersion(): number {
+    return this.state.serverVersion;
+  }
+
+  getPendingCount(): number {
+    return this.state.pending.length;
+  }
+
+  hasPendingChanges(): boolean {
+    return this.state.pending.length > 0;
+  }
+
+  isConnected(): boolean {
+    return this.state.connected;
+  }
+
+  isReady(): boolean {
+    return this.state.ready;
+  }
+
+  transaction<R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R): R {
+    const baseValue = this.requireOptimisticValue();
+    let result!: R;
+    const commands = Primitive.commands(this.primitive, baseValue, (root) => {
+      result = fn(root);
+    });
+    this.enqueueCommands(commands);
+    return result;
+  }
+
+  applyCommands(commands: readonly Command[]): void {
+    this.enqueueCommands(commands);
+  }
+
+  async connect(): Promise<void> {
+    await this.transport.connect();
+  }
+
+  disconnect(): void {
+    this.transport.disconnect();
+  }
+
+  async resync(): Promise<void> {
+    if (!this.state.connected) {
+      throw new InvalidStateError("Cannot resync while disconnected");
+    }
+    this.awaitingSnapshot = true;
+    return new Promise<void>((resolve, reject) => {
+      const waiter = { resolve, reject };
+      this.resyncWaiters.add(waiter);
+      try {
+        this.transport.requestSnapshot();
+      } catch (error) {
+        this.resyncWaiters.delete(waiter);
+        reject(error instanceof Error ? error : new Error(String(error)));
+      }
+    });
+  }
+
+  createDraft(): DraftHandleImpl<TPrimitive> {
+    const baseValue = this.requireOptimisticValue();
+    const draft = new DraftHandleImpl(
+      this.primitive,
+      baseValue,
+      (commands) => this.enqueueCommands(commands),
+      (id) => this.removeDraft(id),
+    );
+    this.drafts.set(draft.id, draft);
+    this.notifyDraftChange();
+    return draft;
+  }
+
+  getActiveDraftIds(): readonly string[] {
+    return [...this.drafts.keys()];
+  }
+
+  subscribe(listener: ClientDocumentListener<TPrimitive>): () => void {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+
+  private enqueueCommands(commands: readonly Command[]): void {
+    if (commands.length === 0) {
+      return;
+    }
+
+    const pending: PendingTransaction = {
+      id: randomUuid(),
+      commands,
+      submittedAt: new Date().toISOString(),
+      sentAt: Date.now(),
+    };
+    this.state.pending.push(pending);
+    try {
+      this.recomputeOptimisticValue();
+    } catch (error) {
+      // A write that fails validation must not poison the pending queue:
+      // drop the transaction that was just pushed and restore the previous
+      // optimistic value before rethrowing to the caller.
+      this.state.pending.pop();
+      this.recomputeOptimisticValue();
+      throw error;
+    }
+    this.emitStateChange();
+    this.flushPending();
+  }
+
+  private flushPending(): void {
+    if (!this.state.connected || this.awaitingSnapshot || this.activePendingId) {
+      return;
+    }
+    const next = this.state.pending[0];
+    if (!next) {
+      return;
+    }
+    this.activePendingId = next.id;
+    this.transport.submit(toEnvelope(next, this.state.serverVersion));
+  }
+
+  private handleSnapshot(message: SnapshotMessage): void {
+    const sanitized = this.sanitizeValue(message.value);
+    this.state.serverValue = sanitized;
+    this.state.serverVersion = message.version;
+    this.state.ready = true;
+    this.awaitingSnapshot = false;
+    this.activePendingId = undefined;
+    this.recomputeOptimisticValueDroppingConflicts();
+    this.emitStateChange();
+    this.options.onReady?.();
+    for (const listener of this.listeners) {
+      listener.onReady?.();
+    }
+    this.resolveResyncWaiters();
+    const encodedPresence = this.presenceManager?.storedEncodedValue();
+    if (encodedPresence !== undefined) {
+      this.transport.setPresence(encodedPresence);
+    }
+    this.flushPending();
+  }
+
+  private handleTransaction(message: TransactionMessage): void {
+    if (this.state.serverValue === undefined) {
+      this.requestResync();
+      return;
+    }
+
+    try {
+      const nextServerValue = this.sanitizeValue(
+        applyBatch(this.state.serverValue, message.transaction.commands),
+      );
+      this.state.serverValue = nextServerValue;
+      this.state.serverVersion = message.version;
+      if (this.state.pending[0]?.id === message.transaction.id) {
+        this.state.pending.shift();
+        this.activePendingId = undefined;
+      }
+      this.recomputeOptimisticValue();
+      this.emitStateChange();
+      this.flushPending();
+    } catch {
+      this.requestResync();
+    }
+  }
+
+  private handleError(message: ErrorMessage): void {
+    const transactionId = message.transactionId;
+    if (!transactionId) {
+      return;
+    }
+    if (this.state.pending[0]?.id === transactionId) {
+      this.state.pending.shift();
+      this.activePendingId = undefined;
+    } else {
+      this.state.pending = this.state.pending.filter((pending) => pending.id !== transactionId);
+    }
+    this.options.onRejection?.(transactionId, message.reason);
+    void this.resync().catch(() => {
+      throw new TransactionRejectedError(transactionId, message.reason);
+    });
+  }
+
+  private handlePresenceSnapshot(message: PresenceSnapshotMessage): void {
+    this.presenceManager?.applySnapshot(message.selfId, message.presences);
+  }
+
+  private handlePresenceUpdate(message: PresenceUpdateMessage): void {
+    this.presenceManager?.applyUpdate(message.id, message.data, message.userId);
+  }
+
+  private handlePresenceRemove(message: PresenceRemoveMessage): void {
+    this.presenceManager?.applyRemove(message.id);
+  }
+
+  private recomputeOptimisticValue(): void {
+    if (this.state.serverValue === undefined) {
+      this.state.optimisticValue = undefined;
+      return;
+    }
+    this.state.optimisticValue = replayPending(
+      this.schema,
+      this.state.serverValue,
+      this.state.pending,
+    );
+  }
+
+  /**
+   * Recompute used after a snapshot lands: a snapshot may already contain an
+   * accepted-but-unacked pending transaction (reconnect race), making replay
+   * of the pending head fail forever (e.g. a duplicate tree-node insert).
+   * Conflicting heads are dropped — their effect is already in the snapshot —
+   * until replay succeeds.
+   */
+  private recomputeOptimisticValueDroppingConflicts(): void {
+    for (;;) {
+      try {
+        this.recomputeOptimisticValue();
+        return;
+      } catch (error) {
+        if (this.state.pending.length === 0) {
+          throw error;
+        }
+        this.state.pending.shift();
+      }
+    }
+  }
+
+  private sanitizeValue(value: Value): Value {
+    try {
+      validateValue(value);
+      const sanitized = validateSchema(this.schema, value);
+      if (sanitized === undefined) {
+        throw new InvalidStateError("Document schema sanitized to undefined");
+      }
+      return sanitized;
+    } catch (error) {
+      throw new SnapshotValidationError("Failed to validate document value", error);
+    }
+  }
+
+  private requireOptimisticValue(): Value {
+    const value = this.state.optimisticValue;
+    if (value === undefined) {
+      throw new InvalidStateError("Document has no current value");
+    }
+    return value;
+  }
+
+  private emitStateChange(): void {
+    const snapshot = this.getSnapshot();
+    this.options.onStateChange?.(snapshot);
+    for (const listener of this.listeners) {
+      listener.onStateChange?.(snapshot);
+    }
+  }
+
+  private notifyDraftChange(): void {
+    for (const listener of this.listeners) {
+      listener.onDraftChange?.();
+    }
+  }
+
+  private removeDraft(id: string): void {
+    this.drafts.delete(id);
+    this.notifyDraftChange();
+  }
+
+  private resolveResyncWaiters(): void {
+    const waiters = [...this.resyncWaiters];
+    this.resyncWaiters.clear();
+    for (const waiter of waiters) {
+      waiter.resolve();
+    }
+  }
+
+  private requestResync(): void {
+    if (this.state.connected) {
+      this.awaitingSnapshot = true;
+      this.transport.requestSnapshot();
+    }
+  }
+
+  private createPresenceApi(manager: PresenceManager<TPresence, TPresenceInput>) {
+    return {
+      selfId: () => manager.selfId(),
+      self: () => manager.self(),
+      others: () => manager.others(),
+      all: () => manager.all(),
+      set: (data: TPresenceInput) => {
+        const encoded = manager.encode(data);
+        this.transport.setPresence(encoded);
+      },
+      clear: () => {
+        manager.clearLocal();
+        this.transport.clearPresence();
+      },
+      subscribe: (listener: { readonly onPresenceChange?: () => void }) =>
+        manager.subscribe(listener),
+    };
+  }
+}
+
+export const createClientDocument = <
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+>(
+  options: ClientDocumentOptions<TPrimitive, TPresence, TPresenceInput>,
+): ClientDocument<TPrimitive, TPresence, TPresenceInput> => new ClientDocumentImpl(options);
diff --git a/packages/mimic/src/client/Draft.ts b/packages/mimic/src/client/Draft.ts
new file mode 100644
index 000000000..f410b997c
--- /dev/null
+++ b/packages/mimic/src/client/Draft.ts
@@ -0,0 +1,132 @@
+import {
+  Primitive,
+  applyBatch,
+  createGenerator,
+  type Command,
+  type Path,
+  type Value,
+} from "@voidhash/mimic-core";
+
+import { randomUuid, shortId } from "../shared/ids.js";
+import { InvalidStateError } from "./errors.js";
+import type { DraftHandle } from "./types.js";
+
+const createDraftSession = (
+  getCurrentValue: () => Value,
+  applyCommands: (commands: readonly Command[]) => void,
+): Primitive.CommandSession => {
+  const generator = createGenerator();
+  return {
+    current: getCurrentValue,
+    emit: applyCommands,
+    generator: {
+      nextArrayItemId: (_path: Path) => randomUuid(),
+      // Node ids appear in printed composition source, so they are short.
+      nextTreeNodeId: (_path: Path) => shortId(),
+      between: (lower?: string, upper?: string) => generator.between(lower, upper),
+    },
+  };
+};
+
+export class DraftHandleImpl<
+  TPrimitive extends Primitive.AnyPrimitive,
+> implements DraftHandle<TPrimitive> {
+  readonly id = randomUuid();
+  readonly root: Primitive.InferProxy<TPrimitive>;
+  private currentValue: Value;
+  private stagedCommands: Command[] = [];
+  private consumed = false;
+  private snapshotCacheValue: Value | undefined = undefined;
+  private snapshotCache: Primitive.InferSnapshot<TPrimitive> | undefined = undefined;
+
+  constructor(
+    private readonly primitive: TPrimitive,
+    baseValue: Value,
+    private readonly onCommit: (commands: readonly Command[]) => void,
+    private readonly onDispose: (id: string) => void,
+  ) {
+    this.currentValue = baseValue;
+    this.root = primitive.createProxy(
+      createDraftSession(
+        () => this.assertActiveValue(),
+        (commands) => this.apply(commands),
+      ),
+      [],
+    ) as Primitive.InferProxy<TPrimitive>;
+  }
+
+  getValue(): Value | undefined {
+    return this.consumed ? undefined : this.currentValue;
+  }
+
+  /**
+   * Decoded preview of the draft's staged value. Memoized on `currentValue`
+   * identity (each `apply` swaps in a fresh value) so repeated calls return a
+   * stable reference between edits — required by React's `useSyncExternalStore`
+   * when a draft-aware selector reads this during render.
+   */
+  getSnapshot(): Primitive.InferSnapshot<TPrimitive> | undefined {
+    if (this.consumed) {
+      return undefined;
+    }
+    if (this.snapshotCacheValue !== this.currentValue) {
+      this.snapshotCache = this.primitive.decode(this.currentValue);
+      this.snapshotCacheValue = this.currentValue;
+    }
+    return this.snapshotCache;
+  }
+
+  transaction<R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R): R {
+    this.assertActive();
+    let result!: R;
+    const commands = Primitive.commands(this.primitive, this.currentValue, (root) => {
+      result = fn(root);
+    });
+    this.apply(commands);
+    return result;
+  }
+
+  update(fn: (root: Primitive.InferProxy<TPrimitive>) => void): void {
+    this.assertActive();
+    fn(this.root);
+  }
+
+  commit(): void {
+    this.assertActive();
+    const commands = [...this.stagedCommands];
+    this.consume();
+    if (commands.length > 0) {
+      this.onCommit(commands);
+    }
+  }
+
+  discard(): void {
+    this.assertActive();
+    this.consume();
+  }
+
+  private apply(commands: readonly Command[]): void {
+    if (commands.length === 0) {
+      return;
+    }
+    this.assertActive();
+    this.stagedCommands.push(...commands);
+    this.currentValue = applyBatch(this.currentValue, commands);
+  }
+
+  private consume(): void {
+    this.consumed = true;
+    this.onDispose(this.id);
+  }
+
+  private assertActive(): void {
+    if (this.consumed) {
+      throw new InvalidStateError("Draft has already been consumed");
+    }
+  }
+
+  private assertActiveValue(): Value {
+    this.assertActive();
+    return this.currentValue;
+  }
+}
diff --git a/packages/mimic/src/client/HttpApiClient.ts b/packages/mimic/src/client/HttpApiClient.ts
new file mode 100644
index 000000000..d52ed1587
--- /dev/null
+++ b/packages/mimic/src/client/HttpApiClient.ts
@@ -0,0 +1,149 @@
+import type { Value } from "@voidhash/mimic-core";
+
+import { encodeBasicAuth, joinUrl, resolveFetch } from "../shared/browser.js";
+import type {
+  DocumentAuthTokenResponse,
+  DocumentSnapshotResponse,
+  SubmitTransactionResponse,
+  TransactionEnvelope,
+} from "./protocol.js";
+import type { CreateDocumentInput, DocumentHttpClient } from "./Transport.js";
+
+export interface MimicDbHttpClientOptions {
+  readonly baseUrl: string;
+  readonly auth?: {
+    readonly username: string;
+    readonly password: string;
+  };
+  readonly fetch?: typeof globalThis.fetch;
+}
+
+const jsonHeaders = {
+  "content-type": "application/json",
+} as const;
+
+export class MimicDbHttpClient implements DocumentHttpClient {
+  private readonly fetchImpl: typeof globalThis.fetch;
+
+  constructor(private readonly options: MimicDbHttpClientOptions) {
+    this.fetchImpl = resolveFetch(options.fetch);
+  }
+
+  async createDocument(input: CreateDocumentInput): Promise<DocumentSnapshotResponse> {
+    return this.request<DocumentSnapshotResponse>(
+      `/api/v1/collections/${encodeURIComponent(input.collectionId)}/documents`,
+      {
+        method: "POST",
+        body: JSON.stringify({
+          id: input.id,
+          value: input.value,
+        }),
+      },
+    );
+  }
+
+  async getDocument(collectionId: string, documentId: string): Promise<DocumentSnapshotResponse> {
+    return this.request<DocumentSnapshotResponse>(
+      `/api/v1/collections/${encodeURIComponent(collectionId)}/documents/${encodeURIComponent(documentId)}`,
+      {
+        method: "GET",
+      },
+    );
+  }
+
+  async listDocuments(collectionId: string): Promise<readonly DocumentSnapshotResponse[]> {
+    return this.request<readonly DocumentSnapshotResponse[]>(
+      `/api/v1/collections/${encodeURIComponent(collectionId)}/documents`,
+      {
+        method: "GET",
+      },
+    );
+  }
+
+  async deleteDocument(collectionId: string, documentId: string): Promise<void> {
+    await this.request(
+      `/api/v1/collections/${encodeURIComponent(collectionId)}/documents/${encodeURIComponent(documentId)}`,
+      {
+        method: "DELETE",
+      },
+    );
+  }
+
+  async createDocumentAuthToken(input: {
+    readonly collectionId: string;
+    readonly documentId: string;
+    readonly permission: "read" | "write";
+    readonly origins: readonly string[];
+    readonly expiresInSeconds?: number;
+  }): Promise<DocumentAuthTokenResponse> {
+    return this.request<DocumentAuthTokenResponse>("/api/v1/documents/auth-tokens", {
+      method: "POST",
+      body: JSON.stringify({
+        collectionId: input.collectionId,
+        documentId: input.documentId,
+        permission: input.permission,
+        origins: [...input.origins],
+        expiresInSeconds: input.expiresInSeconds,
+      }),
+    });
+  }
+
+  async submitTransaction(
+    collectionId: string,
+    documentId: string,
+    transaction: TransactionEnvelope,
+  ): Promise<SubmitTransactionResponse> {
+    return this.request<SubmitTransactionResponse>(
+      `/api/v1/collections/${encodeURIComponent(collectionId)}/documents/${encodeURIComponent(documentId)}/transactions`,
+      {
+        method: "POST",
+        body: JSON.stringify(transaction),
+      },
+    );
+  }
+
+  private async request<T = void>(
+    path: string,
+    init: {
+      readonly method: string;
+      readonly body?: string;
+    },
+  ): Promise<T> {
+    const headers = new Headers(jsonHeaders);
+    if (this.options.auth) {
+      headers.set(
+        "authorization",
+        encodeBasicAuth(this.options.auth.username, this.options.auth.password),
+      );
+    }
+
+    const response = await this.fetchImpl(joinUrl(this.options.baseUrl, path), {
+      method: init.method,
+      headers,
+      body: init.body,
+    });
+
+    if (!response.ok) {
+      const text = await response.text();
+      throw new Error(
+        `HTTP ${response.status} ${response.statusText}: ${text || "request failed"}`,
+      );
+    }
+
+    if (response.status === 204) {
+      return undefined as T;
+    }
+
+    return (await response.json()) as T;
+  }
+}
+
+export const createDocumentInput = (
+  collectionId: string,
+  value: Value,
+  id?: string,
+): CreateDocumentInput => ({
+  collectionId,
+  id,
+  value,
+});
diff --git a/packages/mimic/src/client/Transport.ts b/packages/mimic/src/client/Transport.ts
new file mode 100644
index 000000000..2f1e08213
--- /dev/null
+++ b/packages/mimic/src/client/Transport.ts
@@ -0,0 +1,48 @@
+import type {
+  ClientMessage,
+  DocumentAuthTokenResponse,
+  DocumentSnapshotResponse,
+  ServerMessage,
+  SubmitTransactionResponse,
+  TransactionEnvelope,
+} from "./protocol.js";
+import type { Value } from "@voidhash/mimic-core";
+
+export interface DocumentTransport {
+  connect(): Promise<void>;
+  disconnect(): void;
+  subscribe(handler: (message: ServerMessage) => void): () => void;
+  subscribeConnection(handler: (connected: boolean) => void): () => void;
+  requestSnapshot(): void;
+  submit(transaction: TransactionEnvelope): void;
+  setPresence(data: Value): void;
+  clearPresence(): void;
+  isConnected(): boolean;
+}
+
+export interface CreateDocumentInput {
+  readonly collectionId: string;
+  readonly id?: string;
+  readonly value: DocumentSnapshotResponse["value"];
+}
+
+export interface DocumentHttpClient {
+  createDocument(input: CreateDocumentInput): Promise<DocumentSnapshotResponse>;
+  getDocument(collectionId: string, documentId: string): Promise<DocumentSnapshotResponse>;
+  listDocuments(collectionId: string): Promise<readonly DocumentSnapshotResponse[]>;
+  deleteDocument(collectionId: string, documentId: string): Promise<void>;
+  createDocumentAuthToken(input: {
+    readonly collectionId: string;
+    readonly documentId: string;
+    readonly permission: "read" | "write";
+    readonly origins: readonly string[];
+    readonly expiresInSeconds?: number;
+  }): Promise<DocumentAuthTokenResponse>;
+  submitTransaction(
+    collectionId: string,
+    documentId: string,
+    transaction: TransactionEnvelope,
+  ): Promise<SubmitTransactionResponse>;
+}
+
+export type EncodedClientMessage = ClientMessage;
diff --git a/packages/mimic/src/client/WebSocketTransport.ts b/packages/mimic/src/client/WebSocketTransport.ts
new file mode 100644
index 000000000..97c2377ae
--- /dev/null
+++ b/packages/mimic/src/client/WebSocketTransport.ts
@@ -0,0 +1,306 @@
+import type { Value } from "@voidhash/mimic-core";
+
+import { NotConnectedError, ProtocolError, TransportError } from "./errors.js";
+import type {
+  AuthResultFailureMessage,
+  AuthResultSuccessMessage,
+  ClientMessage,
+  ServerMessage,
+  TransactionEnvelope,
+} from "./protocol.js";
+import type { DocumentTransport } from "./Transport.js";
+import { resolveWebSocket } from "../shared/browser.js";
+
+export interface WebSocketTransportOptions {
+  readonly url: string;
+  readonly token: string | (() => string | Promise<string>);
+  readonly WebSocket?: typeof globalThis.WebSocket;
+  readonly heartbeatMs?: number;
+  readonly reconnect?: boolean;
+  readonly reconnectDelayMs?: number;
+  /**
+   * Invoked on every authentication rejection by the server — on the initial
+   * connect (in addition to the `connect()` promise rejecting) and on every
+   * reconnect cycle, where no promise is pending to observe the failure.
+   * Auth failure is terminal for this transport instance: it disconnects and
+   * stops reconnecting. The consumer decides whether to retry by creating a
+   * new transport (e.g. after refreshing the token).
+   */
+  readonly onAuthFailure?: (error: Error) => void;
+}
+
+const encodeClientMessage = (message: ClientMessage): string => JSON.stringify(message);
+
+const decodeServerMessage = async (data: unknown): Promise<ServerMessage> => {
+  if (typeof data === "string") {
+    return JSON.parse(data) as ServerMessage;
+  }
+  if (data instanceof ArrayBuffer) {
+    return JSON.parse(new TextDecoder().decode(data)) as ServerMessage;
+  }
+  if (ArrayBuffer.isView(data)) {
+    return JSON.parse(new TextDecoder().decode(data)) as ServerMessage;
+  }
+  if (data instanceof Blob) {
+    return JSON.parse(await data.text()) as ServerMessage;
+  }
+  throw new ProtocolError("Unsupported WebSocket message payload");
+};
+
+export class WebSocketTransport implements DocumentTransport {
+  private readonly WebSocketImpl: typeof globalThis.WebSocket;
+  private readonly messageHandlers = new Set<(message: ServerMessage) => void>();
+  private readonly connectionHandlers = new Set<(connected: boolean) => void>();
+  private socket: WebSocket | null = null;
+  private connected = false;
+  private reconnectTimer: ReturnType<typeof setTimeout> | undefined;
+  private heartbeatTimer: ReturnType<typeof setInterval> | undefined;
+  private connectPromise: Promise<void> | null = null;
+  private connectResolve: (() => void) | null = null;
+  private connectReject: ((error: Error) => void) | null = null;
+  private shouldReconnect = true;
+  private lastPresence: Value | undefined;
+  private pendingPresenceClear = false;
+
+  constructor(private readonly options: WebSocketTransportOptions) {
+    this.WebSocketImpl = resolveWebSocket(options.WebSocket);
+  }
+
+  connect(): Promise<void> {
+    if (this.connected) {
+      return Promise.resolve();
+    }
+    if (this.connectPromise) {
+      return this.connectPromise;
+    }
+
+    this.shouldReconnect = this.options.reconnect ?? true;
+    this.connectPromise = new Promise<void>((resolve, reject) => {
+      this.connectResolve = resolve;
+      this.connectReject = reject;
+      this.openSocket();
+    }).finally(() => {
+      this.connectPromise = null;
+    });
+
+    return this.connectPromise;
+  }
+
+  disconnect(): void {
+    this.shouldReconnect = false;
+    this.clearReconnect();
+    this.stopHeartbeat();
+    if (this.socket) {
+      this.socket.close();
+      this.socket = null;
+    }
+    this.updateConnected(false);
+  }
+
+  subscribe(handler: (message: ServerMessage) => void): () => void {
+    this.messageHandlers.add(handler);
+    return () => {
+      this.messageHandlers.delete(handler);
+    };
+  }
+
+  subscribeConnection(handler: (connected: boolean) => void): () => void {
+    this.connectionHandlers.add(handler);
+    return () => {
+      this.connectionHandlers.delete(handler);
+    };
+  }
+
+  requestSnapshot(): void {
+    this.send({ type: "request_snapshot" });
+  }
+
+  submit(transaction: TransactionEnvelope): void {
+    this.send({ type: "submit", transaction });
+  }
+
+  /**
+   * Declares the local presence value. Never throws for connectivity reasons:
+   * while disconnected (including the open-but-unauthenticated window and
+   * reconnect gaps) the value is buffered and replayed after the next
+   * successful authentication.
+   */
+  setPresence(data: Value): void {
+    this.lastPresence = data;
+    this.pendingPresenceClear = false;
+    this.trySend({ type: "presence_set", data });
+  }
+
+  /**
+   * Clears the local presence value. Never throws for connectivity reasons:
+   * a clear that cannot be delivered is buffered and replayed after the next
+   * successful authentication.
+   */
+  clearPresence(): void {
+    this.lastPresence = undefined;
+    this.pendingPresenceClear = !this.trySend({ type: "presence_clear" });
+  }
+
+  isConnected(): boolean {
+    return this.connected;
+  }
+
+  private openSocket(): void {
+    try {
+      const socket = new this.WebSocketImpl(this.options.url);
+      this.socket = socket;
+
+      socket.addEventListener("open", () => {
+        void this.resolveToken()
+          .then((token) => {
+            socket.send(
+              encodeClientMessage({
+                type: "auth",
+                token,
+              }),
+            );
+          })
+          .catch((error) => {
+            this.connectReject?.(error instanceof Error ? error : new Error(String(error)));
+            this.connectResolve = null;
+            this.connectReject = null;
+            socket.close();
+          });
+      });
+
+      socket.addEventListener("message", (event) => {
+        void this.handleMessage(event.data);
+      });
+
+      socket.addEventListener("close", () => {
+        this.stopHeartbeat();
+        this.socket = null;
+        this.updateConnected(false);
+        if (this.connectReject) {
+          this.connectReject(
+            new TransportError("WebSocket closed before authentication completed"),
+          );
+          this.connectReject = null;
+          this.connectResolve = null;
+        }
+        if (this.shouldReconnect) {
+          this.scheduleReconnect();
+        }
+      });
+
+      socket.addEventListener("error", () => {
+        if (this.connectReject) {
+          this.connectReject(new TransportError("WebSocket connection failed"));
+          this.connectReject = null;
+          this.connectResolve = null;
+        }
+      });
+    } catch (error) {
+      const transportError = error instanceof Error ? error : new Error(String(error));
+      this.connectReject?.(transportError);
+      this.connectReject = null;
+      this.connectResolve = null;
+      throw transportError;
+    }
+  }
+
+  private async handleMessage(data: unknown): Promise<void> {
+    const message = await decodeServerMessage(data);
+    if (message.type === "auth_result") {
+      if (message.success) {
+        this.onAuthSuccess(message);
+      } else {
+        this.onAuthFailure(message);
+      }
+      return;
+    }
+
+    if (message.type === "pong") {
+      return;
+    }
+
+    for (const handler of this.messageHandlers) {
+      handler(message);
+    }
+  }
+
+  private onAuthSuccess(_message: AuthResultSuccessMessage): void {
+    this.updateConnected(true);
+    this.startHeartbeat();
+    this.connectResolve?.();
+    this.connectResolve = null;
+    this.connectReject = null;
+    if (this.lastPresence !== undefined) {
+      this.send({ type: "presence_set", data: this.lastPresence });
+    } else if (this.pendingPresenceClear) {
+      this.pendingPresenceClear = false;
+      this.send({ type: "presence_clear" });
+    }
+  }
+
+  private onAuthFailure(message: AuthResultFailureMessage): void {
+    const error = new TransportError(`WebSocket authentication failed: ${message.error}`);
+    this.options.onAuthFailure?.(error);
+    this.connectReject?.(error);
+    this.connectResolve = null;
+    this.connectReject = null;
+    this.disconnect();
+  }
+
+  private updateConnected(connected: boolean): void {
+    this.connected = connected;
+    for (const handler of this.connectionHandlers) {
+      handler(connected);
+    }
+  }
+
+  private send(message: ClientMessage): void {
+    if (!this.trySend(message)) {
+      throw new NotConnectedError();
+    }
+  }
+
+  private trySend(message: ClientMessage): boolean {
+    if (!this.socket || this.socket.readyState !== this.WebSocketImpl.OPEN || !this.connected) {
+      return false;
+    }
+    this.socket.send(encodeClientMessage(message));
+    return true;
+  }
+
+  private scheduleReconnect(): void {
+    this.clearReconnect();
+    this.reconnectTimer = setTimeout(() => {
+      this.openSocket();
+    }, this.options.reconnectDelayMs ?? 1000);
+  }
+
+  private clearReconnect(): void {
+    if (this.reconnectTimer) {
+      clearTimeout(this.reconnectTimer);
+      this.reconnectTimer = undefined;
+    }
+  }
+
+  private startHeartbeat(): void {
+    this.stopHeartbeat();
+    this.heartbeatTimer = setInterval(() => {
+      if (this.connected && this.socket?.readyState === this.WebSocketImpl.OPEN) {
+        this.socket.send(encodeClientMessage({ type: "ping" }));
+      }
+    }, this.options.heartbeatMs ?? 30000);
+  }
+
+  private stopHeartbeat(): void {
+    if (this.heartbeatTimer) {
+      clearInterval(this.heartbeatTimer);
+      this.heartbeatTimer = undefined;
+    }
+  }
+
+  private async resolveToken(): Promise<string> {
+    return typeof this.options.token === "function"
+      ? await this.options.token()
+      : this.options.token;
+  }
+}
diff --git a/packages/mimic/src/client/errors.ts b/packages/mimic/src/client/errors.ts
new file mode 100644
index 000000000..80a5dd71a
--- /dev/null
+++ b/packages/mimic/src/client/errors.ts
@@ -0,0 +1,59 @@
+export class MimicClientError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "MimicClientError";
+  }
+}
+
+export class NotConnectedError extends MimicClientError {
+  constructor() {
+    super("Transport is not connected");
+    this.name = "NotConnectedError";
+  }
+}
+
+export class InvalidStateError extends MimicClientError {
+  constructor(message: string) {
+    super(message);
+    this.name = "InvalidStateError";
+  }
+}
+
+export class TransportError extends MimicClientError {
+  override readonly cause?: unknown;
+
+  constructor(message: string, cause?: unknown) {
+    super(message);
+    this.name = "TransportError";
+    this.cause = cause;
+  }
+}
+
+export class ProtocolError extends MimicClientError {
+  constructor(message: string) {
+    super(message);
+    this.name = "ProtocolError";
+  }
+}
+
+export class SnapshotValidationError extends MimicClientError {
+  override readonly cause?: unknown;
+
+  constructor(message: string, cause?: unknown) {
+    super(message);
+    this.name = "SnapshotValidationError";
+    this.cause = cause;
+  }
+}
+
+export class TransactionRejectedError extends MimicClientError {
+  readonly transactionId: string;
+  readonly reason: string;
+
+  constructor(transactionId: string, reason: string) {
+    super(`Transaction ${transactionId} rejected: ${reason}`);
+    this.name = "TransactionRejectedError";
+    this.transactionId = transactionId;
+    this.reason = reason;
+  }
+}
diff --git a/packages/mimic/src/client/index.ts b/packages/mimic/src/client/index.ts
new file mode 100644
index 000000000..818d99ef2
--- /dev/null
+++ b/packages/mimic/src/client/index.ts
@@ -0,0 +1,32 @@
+export * from "./types.js";
+export type {
+  AuthMessage,
+  AuthResultFailureMessage,
+  AuthResultSuccessMessage,
+  ClientMessage,
+  DocumentAuthTokenResponse,
+  DocumentSnapshotResponse,
+  ErrorMessage,
+  PingMessage,
+  PongMessage,
+  PresenceClearMessage,
+  PresenceRemoveMessage,
+  PresenceSnapshotMessage,
+  PresenceUpdateMessage,
+  RequestSnapshotMessage,
+  ServerMessage,
+  SnapshotMessage,
+  SubmitMessage,
+  SubmitTransactionResponse,
+  TransactionActor,
+  TransactionEnvelope,
+  TransactionMessage,
+} from "./protocol.js";
+export * from "./Transport.js";
+export * from "./errors.js";
+export * from "./pending.js";
+export * from "./state.js";
+export * from "./Draft.js";
+export * from "./ClientDocument.js";
+export * from "./HttpApiClient.js";
+export * from "./WebSocketTransport.js";
diff --git a/packages/mimic/src/client/pending.ts b/packages/mimic/src/client/pending.ts
new file mode 100644
index 000000000..7af00146d
--- /dev/null
+++ b/packages/mimic/src/client/pending.ts
@@ -0,0 +1,22 @@
+import type { Command } from "@voidhash/mimic-core";
+
+import type { TransactionActor, TransactionEnvelope } from "./protocol.js";
+
+export interface PendingTransaction {
+  readonly id: string;
+  readonly commands: readonly Command[];
+  readonly submittedAt?: string;
+  readonly actor?: TransactionActor;
+  readonly sentAt: number;
+}
+
+export const toEnvelope = (
+  pending: PendingTransaction,
+  baseVersion: number,
+): TransactionEnvelope => ({
+  id: pending.id,
+  baseVersion,
+  commands: pending.commands,
+  submittedAt: pending.submittedAt,
+  actor: pending.actor,
+});
diff --git a/packages/mimic/src/client/presence.ts b/packages/mimic/src/client/presence.ts
new file mode 100644
index 000000000..c1c004b52
--- /dev/null
+++ b/packages/mimic/src/client/presence.ts
@@ -0,0 +1,173 @@
+import {
+  validate as validateSchema,
+  validateValue,
+  type Primitive,
+  type Value,
+} from "@voidhash/mimic-core";
+
+import type { PresenceEntry, PresenceListener } from "./types.js";
+
+export class PresenceManager<TPresence, TPresenceInput = TPresence> {
+  private readonly listeners = new Set<PresenceListener>();
+  private readonly entries = new Map<string, PresenceEntry<TPresence>>();
+  private selfConnectionId: string | undefined;
+  private selfValue: TPresence | undefined;
+  private selfEncodedValue: Value | undefined;
+
+  constructor(private readonly primitive: Primitive.Primitive<TPresenceInput, TPresence, any>) {}
+
+  selfId(): string | undefined {
+    return this.selfConnectionId;
+  }
+
+  self(): TPresence | undefined {
+    if (this.selfConnectionId) {
+      const entry = this.entries.get(this.selfConnectionId);
+      if (entry !== undefined) {
+        return entry.data;
+      }
+    }
+    return this.selfValue;
+  }
+
+  others(): ReadonlyMap<string, PresenceEntry<TPresence>> {
+    const result = new Map<string, PresenceEntry<TPresence>>();
+    for (const [id, entry] of this.entries) {
+      if (id !== this.selfConnectionId) {
+        result.set(id, entry);
+      }
+    }
+    return result;
+  }
+
+  all(): ReadonlyMap<string, PresenceEntry<TPresence>> {
+    return new Map(this.entries);
+  }
+
+  subscribe(listener: PresenceListener): () => void {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+
+  /**
+   * Records a local presence write and echoes it into the live entries map
+   * immediately (when the connection id is known), so `self()` and presence
+   * subscribers reflect the write synchronously instead of waiting for the
+   * server to echo the broadcast back.
+   */
+  encode(data: TPresenceInput): Value {
+    const encoded = this.sanitize(this.primitive.encode(data));
+    const decoded = this.primitive.decode(encoded);
+    this.selfValue = decoded;
+    this.selfEncodedValue = encoded;
+    if (decoded !== undefined && this.selfConnectionId !== undefined) {
+      this.entries.set(this.selfConnectionId, {
+        data: decoded,
+        userId: this.entries.get(this.selfConnectionId)?.userId,
+      });
+    }
+    this.emit();
+    return encoded;
+  }
+
+  clearLocal(): void {
+    this.selfValue = undefined;
+    this.selfEncodedValue = undefined;
+    if (this.selfConnectionId !== undefined) {
+      this.entries.delete(this.selfConnectionId);
+    }
+    this.emit();
+  }
+
+  storedEncodedValue(): Value | undefined {
+    return this.selfEncodedValue;
+  }
+
+  applySnapshot(
+    selfId: string,
+    presences: Record<string, { readonly data: Value; readonly userId?: string }>,
+  ): void {
+    this.selfConnectionId = selfId;
+    this.entries.clear();
+    for (const [id, entry] of Object.entries(presences)) {
+      const decoded = this.decode(entry.data);
+      if (decoded !== undefined) {
+        this.entries.set(id, {
+          data: decoded,
+          userId: entry.userId,
+        });
+      }
+    }
+    // The local value is authoritative for self: the snapshot may lag local
+    // writes (or, on a fresh connection id, not contain self at all).
+    if (this.selfValue !== undefined) {
+      this.entries.set(selfId, {
+        data: this.selfValue,
+        userId: this.entries.get(selfId)?.userId,
+      });
+    } else {
+      this.entries.delete(selfId);
+    }
+    this.emit();
+  }
+
+  applyUpdate(id: string, data: Value, userId?: string): void {
+    if (id === this.selfConnectionId) {
+      // Server echo of a local write: local state is authoritative and may
+      // already be ahead of the echo — only adopt the userId enrichment.
+      const existing = this.entries.get(id);
+      if (existing !== undefined && userId !== undefined && existing.userId !== userId) {
+        this.entries.set(id, { data: existing.data, userId });
+        this.emit();
+      }
+      return;
+    }
+    const decoded = this.decode(data);
+    if (decoded === undefined) {
+      return;
+    }
+    this.entries.set(id, { data: decoded, userId });
+    this.emit();
+  }
+
+  applyRemove(id: string): void {
+    if (id === this.selfConnectionId && this.selfEncodedValue !== undefined) {
+      // Stale echo of an earlier clear that a newer local set has overtaken.
+      return;
+    }
+    this.entries.delete(id);
+    this.emit();
+  }
+
+  resetConnectionState(): void {
+    this.selfConnectionId = undefined;
+    this.entries.clear();
+    this.emit();
+  }
+
+  private decode(data: Value): TPresence | undefined {
+    try {
+      const sanitized = this.sanitize(data);
+      return this.primitive.decode(sanitized);
+    } catch {
+      return undefined;
+    }
+  }
+
+  private sanitize(data: Value): Value {
+    validateValue(data);
+    const sanitized = validateSchema(this.primitive.schema, data);
+    if (sanitized === undefined) {
+      throw new Error("Presence schema sanitized to undefined");
+    }
+    return sanitized;
+  }
+
+  private emit(): void {
+    for (const listener of this.listeners) {
+      listener.onPresenceChange?.();
+    }
+  }
+}
diff --git a/packages/mimic/src/client/protocol.ts b/packages/mimic/src/client/protocol.ts
new file mode 100644
index 000000000..dcedb3d9a
--- /dev/null
+++ b/packages/mimic/src/client/protocol.ts
@@ -0,0 +1,137 @@
+import type { Command, Value } from "@voidhash/mimic-core";
+
+export interface TransactionActor {
+  readonly userId?: string;
+  readonly connectionId?: string;
+}
+
+export interface TransactionEnvelope {
+  readonly id: string;
+  readonly baseVersion: number;
+  readonly commands: readonly Command[];
+  readonly submittedAt?: string;
+  readonly actor?: TransactionActor;
+}
+
+export interface SubmitTransactionResponse {
+  readonly accepted: boolean;
+  readonly version: number;
+  readonly transactionId: string;
+  readonly reason?: string;
+}
+
+export interface DocumentSnapshotResponse {
+  readonly id: string;
+  readonly collectionId: string;
+  readonly value: Value;
+  readonly version: number;
+}
+
+export interface DocumentAuthTokenResponse {
+  readonly token: string;
+  readonly url: string;
+}
+
+export interface AuthMessage {
+  readonly type: "auth";
+  readonly token: string;
+}
+
+export interface PingMessage {
+  readonly type: "ping";
+}
+
+export interface SubmitMessage {
+  readonly type: "submit";
+  readonly transaction: TransactionEnvelope;
+}
+
+export interface RequestSnapshotMessage {
+  readonly type: "request_snapshot";
+}
+
+export interface PresenceSetMessage {
+  readonly type: "presence_set";
+  readonly data: Value;
+}
+
+export interface PresenceClearMessage {
+  readonly type: "presence_clear";
+}
+
+export type ClientMessage =
+  | AuthMessage
+  | PingMessage
+  | SubmitMessage
+  | RequestSnapshotMessage
+  | PresenceSetMessage
+  | PresenceClearMessage;
+
+export interface AuthResultSuccessMessage {
+  readonly type: "auth_result";
+  readonly success: true;
+  readonly tokenId: string;
+  readonly permission: "read" | "write";
+}
+
+export interface AuthResultFailureMessage {
+  readonly type: "auth_result";
+  readonly success: false;
+  readonly error: string;
+}
+
+export interface PongMessage {
+  readonly type: "pong";
+}
+
+export interface TransactionMessage {
+  readonly type: "transaction";
+  readonly transaction: TransactionEnvelope;
+  readonly version: number;
+}
+
+export interface SnapshotMessage {
+  readonly type: "snapshot";
+  readonly value: Value;
+  readonly version: number;
+}
+
+export interface ErrorMessage {
+  readonly type: "error";
+  readonly transactionId?: string;
+  readonly reason: string;
+}
+
+export interface PresenceEntry {
+  readonly data: Value;
+  readonly userId?: string;
+}
+
+export interface PresenceUpdateMessage {
+  readonly type: "presence_update";
+  readonly id: string;
+  readonly data: Value;
+  readonly userId?: string;
+}
+
+export interface PresenceRemoveMessage {
+  readonly type: "presence_remove";
+  readonly id: string;
+}
+
+export interface PresenceSnapshotMessage {
+  readonly type: "presence_snapshot";
+  readonly selfId: string;
+  readonly presences: Record<string, PresenceEntry>;
+}
+
+export type ServerMessage =
+  | AuthResultSuccessMessage
+  | AuthResultFailureMessage
+  | PongMessage
+  | TransactionMessage
+  | SnapshotMessage
+  | ErrorMessage
+  | PresenceUpdateMessage
+  | PresenceRemoveMessage
+  | PresenceSnapshotMessage;
diff --git a/packages/mimic/src/client/state.ts b/packages/mimic/src/client/state.ts
new file mode 100644
index 000000000..6b509f0ee
--- /dev/null
+++ b/packages/mimic/src/client/state.ts
@@ -0,0 +1,19 @@
+import { applyBatch, validate as validateSchema, type Value } from "@voidhash/mimic-core";
+
+import type { PendingTransaction } from "./pending.js";
+
+export const replayPending = (
+  schema: Parameters<typeof validateSchema>[0],
+  serverValue: Value | undefined,
+  pending: readonly PendingTransaction[],
+): Value | undefined => {
+  let next = serverValue;
+  for (const transaction of pending) {
+    if (next === undefined) {
+      throw new Error("Cannot replay pending commands without a base document value");
+    }
+    next = applyBatch(next, transaction.commands);
+    next = validateSchema(schema, next);
+  }
+  return next;
+};
diff --git a/packages/mimic/src/client/sync.ts b/packages/mimic/src/client/sync.ts
new file mode 100644
index 000000000..e3ec078db
--- /dev/null
+++ b/packages/mimic/src/client/sync.ts
@@ -0,0 +1 @@
+export const isReconnectableClose = (code: number): boolean => code !== 1000 && code !== 1001;
diff --git a/packages/mimic/src/client/types.ts b/packages/mimic/src/client/types.ts
new file mode 100644
index 000000000..494fe4515
--- /dev/null
+++ b/packages/mimic/src/client/types.ts
@@ -0,0 +1,96 @@
+import type { Command, Primitive, Value } from "@voidhash/mimic-core";
+
+import type { DocumentTransport } from "./Transport.js";
+
+export interface PresenceConfig<TPresence, TPresenceInput = TPresence> {
+  readonly primitive: Primitive.Primitive<TPresenceInput, TPresence, any>;
+  readonly initial?: TPresenceInput;
+}
+
+export interface PresenceEntry<TPresence> {
+  readonly data: TPresence;
+  readonly userId?: string;
+}
+
+export interface PresenceListener {
+  readonly onPresenceChange?: () => void;
+}
+
+export interface ClientPresence<TPresence, TPresenceInput = TPresence> {
+  selfId(): string | undefined;
+  self(): TPresence | undefined;
+  others(): ReadonlyMap<string, PresenceEntry<TPresence>>;
+  all(): ReadonlyMap<string, PresenceEntry<TPresence>>;
+  set(data: TPresenceInput): void;
+  clear(): void;
+  subscribe(listener: PresenceListener): () => void;
+}
+
+export interface DraftHandle<TPrimitive extends Primitive.AnyPrimitive> {
+  readonly id: string;
+  readonly root: Primitive.InferProxy<TPrimitive>;
+  getValue(): Value | undefined;
+  getSnapshot(): Primitive.InferSnapshot<TPrimitive> | undefined;
+  transaction<R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R): R;
+  update(fn: (root: Primitive.InferProxy<TPrimitive>) => void): void;
+  commit(): void;
+  discard(): void;
+}
+
+export interface ClientDocumentListener<TPrimitive extends Primitive.AnyPrimitive> {
+  readonly onStateChange?: (snapshot: Primitive.InferSnapshot<TPrimitive> | undefined) => void;
+  readonly onConnectionChange?: (connected: boolean) => void;
+  readonly onReady?: () => void;
+  readonly onDraftChange?: () => void;
+}
+
+export interface ClientDocumentOptions<
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+> {
+  readonly primitive: TPrimitive;
+  readonly transport: DocumentTransport;
+  readonly initialValue?: Value;
+  readonly initialVersion?: number;
+  readonly presence?: PresenceConfig<TPresence, TPresenceInput>;
+  readonly onStateChange?: (snapshot: Primitive.InferSnapshot<TPrimitive> | undefined) => void;
+  readonly onConnectionChange?: (connected: boolean) => void;
+  readonly onReady?: () => void;
+  readonly onRejection?: (transactionId: string, reason: string) => void;
+}
+
+export interface ClientDocument<
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+> {
+  readonly primitive: TPrimitive;
+  readonly root: Primitive.InferProxy<TPrimitive>;
+  readonly presence?: ClientPresence<TPresence, TPresenceInput>;
+  getValue(): Value | undefined;
+  getServerValue(): Value | undefined;
+  getSnapshot(): Primitive.InferSnapshot<TPrimitive> | undefined;
+  getServerSnapshot(): Primitive.InferSnapshot<TPrimitive> | undefined;
+  getServerVersion(): number;
+  getPendingCount(): number;
+  hasPendingChanges(): boolean;
+  isConnected(): boolean;
+  isReady(): boolean;
+  transaction<R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R): R;
+  /**
+   * Apply a precomputed CRDT command batch as a single transaction. The commands
+   * flow through the same enqueue → replay → validate → flush path as a proxy
+   * `transaction`, so an invalid batch rolls back and rethrows without poisoning
+   * the pending queue, and an empty batch is a no-op. Used by the paywall
+   * composition round-trip, which computes its own minimal merge-safe batch via
+   * `reconcile` rather than through proxy mutations.
+   */
+  applyCommands(commands: readonly Command[]): void;
+  connect(): Promise<void>;
+  disconnect(): void;
+  resync(): Promise<void>;
+  createDraft(): DraftHandle<TPrimitive>;
+  getActiveDraftIds(): readonly string[];
+  subscribe(listener: ClientDocumentListener<TPrimitive>): () => void;
+}
diff --git a/packages/mimic/src/index.ts b/packages/mimic/src/index.ts
new file mode 100644
index 000000000..36ca354d9
--- /dev/null
+++ b/packages/mimic/src/index.ts
@@ -0,0 +1,3 @@
+export * from "./client/index.js";
+export * from "./zustand/index.js";
+export * from "./zustand-commander/index.js";
diff --git a/packages/mimic/src/react/index.ts b/packages/mimic/src/react/index.ts
new file mode 100644
index 000000000..5267ca324
--- /dev/null
+++ b/packages/mimic/src/react/index.ts
@@ -0,0 +1 @@
+export * from "../zustand/useDraft.js";
diff --git a/packages/mimic/src/shared/browser.ts b/packages/mimic/src/shared/browser.ts
new file mode 100644
index 000000000..d3c6e0ed5
--- /dev/null
+++ b/packages/mimic/src/shared/browser.ts
@@ -0,0 +1,31 @@
+export const resolveFetch = (candidate?: typeof globalThis.fetch): typeof globalThis.fetch => {
+  const resolved = candidate ?? globalThis.fetch;
+  if (typeof resolved !== "function") {
+    throw new Error("fetch is not available in this runtime");
+  }
+  return resolved;
+};
+
+export const resolveWebSocket = (
+  candidate?: typeof globalThis.WebSocket,
+): typeof globalThis.WebSocket => {
+  const resolved = candidate ?? globalThis.WebSocket;
+  if (typeof resolved !== "function") {
+    throw new Error("WebSocket is not available in this runtime");
+  }
+  return resolved;
+};
+
+export const encodeBasicAuth = (username: string, password: string): string => {
+  const value = `${username}:${password}`;
+  if (typeof Buffer !== "undefined") {
+    return `Basic ${Buffer.from(value, "utf8").toString("base64")}`;
+  }
+  if (typeof globalThis.btoa === "function") {
+    return `Basic ${globalThis.btoa(value)}`;
+  }
+  throw new Error("No base64 encoder is available in this runtime");
+};
+
+export const joinUrl = (baseUrl: string, path: string): string =>
+  `${baseUrl.replace(/\/+$/, "")}/${path.replace(/^\/+/, "")}`;
diff --git a/packages/mimic/src/shared/equality.ts b/packages/mimic/src/shared/equality.ts
new file mode 100644
index 000000000..294f434e1
--- /dev/null
+++ b/packages/mimic/src/shared/equality.ts
@@ -0,0 +1,15 @@
+export const arraysEqual = <T>(
+  left: readonly T[],
+  right: readonly T[],
+  predicate: (a: T, b: T) => boolean = Object.is,
+): boolean => {
+  if (left.length !== right.length) {
+    return false;
+  }
+  for (let index = 0; index < left.length; index += 1) {
+    if (!predicate(left[index]!, right[index]!)) {
+      return false;
+    }
+  }
+  return true;
+};
diff --git a/packages/mimic/src/shared/ids.ts b/packages/mimic/src/shared/ids.ts
new file mode 100644
index 000000000..d754f6d0a
--- /dev/null
+++ b/packages/mimic/src/shared/ids.ts
@@ -0,0 +1,15 @@
+export const randomUuid = (): string => {
+  const uuid = globalThis.crypto?.randomUUID?.();
+  if (typeof uuid === "string") {
+    return uuid;
+  }
+  throw new Error("crypto.randomUUID is not available in this runtime");
+};
+
+/**
+ * Re-export of mimic-core's short id generator. Node ids appear in printed
+ * paywall composition source, so the client's `nextTreeNodeId` mints short ids
+ * (matching the server-side lowerer) instead of {@link randomUuid}. Draft,
+ * transaction, and array-item ids never surface in source and stay UUIDs.
+ */
+export { shortId } from "@voidhash/mimic-core";
diff --git a/packages/mimic/src/zustand-commander/commander.ts b/packages/mimic/src/zustand-commander/commander.ts
new file mode 100644
index 000000000..d2d3031f3
--- /dev/null
+++ b/packages/mimic/src/zustand-commander/commander.ts
@@ -0,0 +1,219 @@
+import type { StoreApi } from "zustand";
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type { DraftHandle } from "../client/types.js";
+import { createCommandContext } from "./context.js";
+import {
+  COMMAND_SYMBOL,
+  UNDOABLE_COMMAND_SYMBOL,
+  isUndoableCommand,
+  type Command,
+  type Commander,
+  type CommanderOptions,
+  type CommanderSlice,
+  type CommandDispatch,
+  type CommandFn,
+  type RevertFn,
+  type UndoEntry,
+  type UndoableCommand,
+} from "./types.js";
+
+const DEFAULT_OPTIONS: Required<CommanderOptions> = {
+  maxUndoStackSize: 100,
+};
+
+export function createCommander<
+  TStore extends object,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+>(options: CommanderOptions = {}): Commander<TStore & CommanderSlice, TPrimitive> {
+  const { maxUndoStackSize } = { ...DEFAULT_OPTIONS, ...options };
+  let storeApi: StoreApi<TStore & CommanderSlice> | null = null;
+
+  const createDispatch =
+    (): CommandDispatch<TStore & CommanderSlice, TPrimitive> =>
+    <TParams, TReturn>(command: Command<TStore & CommanderSlice, TParams, TReturn, TPrimitive>) =>
+    (params: TParams): TReturn => {
+      if (!storeApi) {
+        throw new Error("Commander: store not initialized. Apply commander middleware first.");
+      }
+      const ctx = createCommandContext<TStore & CommanderSlice, TPrimitive>(
+        storeApi,
+        createDispatch(),
+      );
+      const result = command.fn(ctx, params);
+      const hasDraft = storeApi.getState()._commander.activeDraft !== null;
+      if (isUndoableCommand(command) && !hasDraft) {
+        const entry: UndoEntry<TParams, TReturn> = {
+          command,
+          params,
+          result,
+          timestamp: Date.now(),
+        };
+        storeApi.setState((state: TStore & CommanderSlice) => ({
+          ...state,
+          _commander: {
+            ...state._commander,
+            undoStack: [...state._commander.undoStack, entry].slice(-maxUndoStackSize),
+            redoStack: [],
+          },
+        }));
+      } else if (isUndoableCommand(command) && hasDraft) {
+        // A command applied to the active draft mutates only the draft's
+        // staged value; the committed document (and `mimic.snapshot`) stays
+        // untouched, so nothing would re-render an in-progress preview. Fire a
+        // store notification — without recording an undo entry, since the
+        // whole draft commits as a single step — so draft-aware selectors
+        // re-read the draft snapshot and render the live optimistic preview.
+        storeApi.setState((state: TStore & CommanderSlice) => ({
+          ...state,
+          _commander: { ...state._commander },
+        }));
+      }
+      return result;
+    };
+
+  function action<TParams, TReturn = void>(
+    fn: CommandFn<TStore & CommanderSlice, TParams, TReturn, TPrimitive>,
+  ): Command<TStore & CommanderSlice, TParams, TReturn, TPrimitive> {
+    return {
+      [COMMAND_SYMBOL]: true,
+      fn,
+    };
+  }
+
+  function undoableAction<TParams, TReturn>(
+    fn: CommandFn<TStore & CommanderSlice, TParams, TReturn, TPrimitive>,
+    revert: RevertFn<TStore & CommanderSlice, TParams, TReturn, TPrimitive>,
+  ): UndoableCommand<TStore & CommanderSlice, TParams, TReturn, TPrimitive> {
+    return {
+      [COMMAND_SYMBOL]: true,
+      [UNDOABLE_COMMAND_SYMBOL]: true,
+      fn,
+      revert,
+    };
+  }
+
+  const middleware = <T extends object>(
+    config: (
+      set: StoreApi<T & CommanderSlice>["setState"],
+      get: StoreApi<T & CommanderSlice>["getState"],
+      api: StoreApi<T & CommanderSlice>,
+    ) => T,
+  ) => {
+    return (
+      set: StoreApi<T & CommanderSlice>["setState"],
+      get: StoreApi<T & CommanderSlice>["getState"],
+      api: StoreApi<T & CommanderSlice>,
+    ): T & CommanderSlice => {
+      storeApi = api as unknown as StoreApi<TStore & CommanderSlice>;
+      const userState = config(set, get, api);
+      return {
+        ...userState,
+        _commander: {
+          undoStack: [],
+          redoStack: [],
+          activeDraft: null,
+        },
+      };
+    };
+  };
+
+  return {
+    action: action as Commander<TStore & CommanderSlice, TPrimitive>["action"],
+    undoableAction: undoableAction as Commander<
+      TStore & CommanderSlice,
+      TPrimitive
+    >["undoableAction"],
+    middleware: middleware as Commander<TStore & CommanderSlice, TPrimitive>["middleware"],
+  };
+}
+
+export function setActiveDraft<TStore extends CommanderSlice>(
+  storeApi: StoreApi<TStore>,
+  draft: DraftHandle<any>,
+): void {
+  storeApi.setState((state: TStore) => ({
+    ...state,
+    _commander: {
+      ...state._commander,
+      activeDraft: draft,
+    },
+  }));
+}
+
+export function clearActiveDraft<TStore extends CommanderSlice>(storeApi: StoreApi<TStore>): void {
+  storeApi.setState((state: TStore) => ({
+    ...state,
+    _commander: {
+      ...state._commander,
+      activeDraft: null,
+    },
+  }));
+}
+
+export function performUndo<TStore extends CommanderSlice>(storeApi: StoreApi<TStore>): boolean {
+  const state = storeApi.getState();
+  if (state._commander.activeDraft !== null) {
+    return false;
+  }
+  const entry = state._commander.undoStack[state._commander.undoStack.length - 1];
+  if (!entry) {
+    return false;
+  }
+  const dispatch =
+    <TParams, TReturn>(command: Command<TStore, TParams, TReturn, any>) =>
+    (params: TParams) =>
+      command.fn(createCommandContext(storeApi, dispatch as CommandDispatch<TStore, any>), params);
+  entry.command.revert(
+    createCommandContext(storeApi, dispatch as CommandDispatch<TStore, any>),
+    entry.params,
+    entry.result,
+  );
+  storeApi.setState((current: TStore) => ({
+    ...current,
+    _commander: {
+      ...current._commander,
+      undoStack: current._commander.undoStack.slice(0, -1),
+      redoStack: [...current._commander.redoStack, entry],
+    },
+  }));
+  return true;
+}
+
+export function performRedo<TStore extends CommanderSlice>(storeApi: StoreApi<TStore>): boolean {
+  const state = storeApi.getState();
+  if (state._commander.activeDraft !== null) {
+    return false;
+  }
+  const entry = state._commander.redoStack[state._commander.redoStack.length - 1];
+  if (!entry) {
+    return false;
+  }
+  const dispatch =
+    <TParams, TReturn>(command: Command<TStore, TParams, TReturn, any>) =>
+    (params: TParams) =>
+      command.fn(createCommandContext(storeApi, dispatch as CommandDispatch<TStore, any>), params);
+  // The re-run may produce a fresh inverse payload (e.g. newly generated node
+  // ids) — the undo entry must carry it, or the next undo reverts stale state.
+  const result = dispatch(entry.command as Command<TStore, any, any, any>)(entry.params);
+  storeApi.setState((current: TStore) => ({
+    ...current,
+    _commander: {
+      ...current._commander,
+      undoStack: [...current._commander.undoStack, { ...entry, result }],
+      redoStack: current._commander.redoStack.slice(0, -1),
+    },
+  }));
+  return true;
+}
+
+export function clearUndoHistory<TStore extends CommanderSlice>(storeApi: StoreApi<TStore>): void {
+  storeApi.setState((state: TStore) => ({
+    ...state,
+    _commander: {
+      ...state._commander,
+      undoStack: [],
+      redoStack: [],
+    },
+  }));
+}
diff --git a/packages/mimic/src/zustand-commander/context.ts b/packages/mimic/src/zustand-commander/context.ts
new file mode 100644
index 000000000..e50643141
--- /dev/null
+++ b/packages/mimic/src/zustand-commander/context.ts
@@ -0,0 +1,119 @@
+import type { StoreApi } from "zustand";
+import type { Command, Primitive } from "@voidhash/mimic-core";
+
+import type { DraftHandle, ClientDocument } from "../client/types.js";
+import type { CommandContext, CommandDispatch, CommanderSlice } from "./types.js";
+
+const MUTATING_METHODS = new Set([
+  "set",
+  "update",
+  "push",
+  "insertAt",
+  "insertAtPos",
+  "remove",
+  "move",
+  "moveTo",
+  "moveToPos",
+]);
+
+export const RAW_MUTATION_ERROR = "Commander: raw mutations are disabled while a draft is active.";
+
+type MutationTarget<TPrimitive extends Primitive.AnyPrimitive> = {
+  readonly root: Primitive.InferProxy<TPrimitive>;
+  transaction<R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R): R;
+};
+
+const getDocumentTarget = <
+  TStore extends CommanderSlice,
+  TPrimitive extends Primitive.AnyPrimitive,
+>(
+  storeApi: StoreApi<TStore>,
+): ClientDocument<TPrimitive> => {
+  const mimic = (
+    storeApi.getState() as TStore & {
+      readonly mimic?: { readonly document?: ClientDocument<TPrimitive> };
+    }
+  ).mimic;
+  if (!mimic?.document) {
+    throw new Error("Commander: no mimic document found on the store.");
+  }
+  return mimic.document;
+};
+
+const getDefaultTarget = <TStore extends CommanderSlice, TPrimitive extends Primitive.AnyPrimitive>(
+  storeApi: StoreApi<TStore>,
+): MutationTarget<TPrimitive> =>
+  (storeApi.getState()._commander.activeDraft ??
+    getDocumentTarget<TStore, TPrimitive>(storeApi)) as MutationTarget<TPrimitive>;
+
+const createMutationGuard = <T>(value: T, errorMessage: string): T => {
+  const cache = new WeakMap<object, unknown>();
+  const wrap = <TWrapped>(current: TWrapped): TWrapped => {
+    if (
+      current === null ||
+      current === undefined ||
+      (typeof current !== "object" && typeof current !== "function")
+    ) {
+      return current;
+    }
+    const existing = cache.get(current as object);
+    if (existing !== undefined) {
+      return existing as TWrapped;
+    }
+    const wrapped = new Proxy(current as object, {
+      get(target, prop, receiver) {
+        const next = Reflect.get(target, prop, receiver);
+        if (typeof next === "function") {
+          return (...args: unknown[]) => {
+            if (MUTATING_METHODS.has(String(prop))) {
+              throw new Error(errorMessage);
+            }
+            return wrap(Reflect.apply(next, target, args));
+          };
+        }
+        return wrap(next);
+      },
+    });
+    cache.set(current as object, wrapped);
+    return wrapped as TWrapped;
+  };
+  return wrap(value);
+};
+
+export function createCommandContext<
+  TStore extends CommanderSlice,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+>(
+  storeApi: StoreApi<TStore>,
+  dispatch: CommandDispatch<TStore, TPrimitive>,
+): CommandContext<TStore, TPrimitive> {
+  return {
+    getState: () => storeApi.getState(),
+    setState: (partial) => storeApi.setState(partial as Partial<TStore>),
+    dispatch,
+    get root() {
+      return getDefaultTarget<TStore, TPrimitive>(storeApi).root;
+    },
+    transaction: <R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R): R =>
+      getDefaultTarget<TStore, TPrimitive>(storeApi).transaction(fn),
+    // Always targets the live document (never a draft): a reconcile batch is a
+    // committed code push, not a staged draft edit.
+    applyCommands: (commands: readonly Command[]): void =>
+      getDocumentTarget<TStore, TPrimitive>(storeApi).applyCommands(commands),
+    raw: {
+      get root() {
+        const document = getDocumentTarget<TStore, TPrimitive>(storeApi);
+        if (storeApi.getState()._commander.activeDraft !== null) {
+          return createMutationGuard(document.root, RAW_MUTATION_ERROR);
+        }
+        return document.root;
+      },
+      transaction: <R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R): R => {
+        if (storeApi.getState()._commander.activeDraft !== null) {
+          throw new Error(RAW_MUTATION_ERROR);
+        }
+        return getDocumentTarget<TStore, TPrimitive>(storeApi).transaction(fn);
+      },
+    },
+  };
+}
diff --git a/packages/mimic/src/zustand-commander/hooks.ts b/packages/mimic/src/zustand-commander/hooks.ts
new file mode 100644
index 000000000..daea96818
--- /dev/null
+++ b/packages/mimic/src/zustand-commander/hooks.ts
@@ -0,0 +1,136 @@
+import { useCallback, useEffect, useMemo } from "react";
+import { useStore, type StoreApi, type UseBoundStore } from "zustand";
+import type { Primitive } from "@voidhash/mimic-core";
+
+import { clearUndoHistory, performRedo, performUndo } from "./commander.js";
+import { createCommandContext } from "./context.js";
+import {
+  isUndoableCommand,
+  type Command,
+  type CommandDispatch,
+  type CommanderSlice,
+} from "./types.js";
+
+function createDispatchFromApi<
+  TStore extends CommanderSlice,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+>(storeApi: StoreApi<TStore>, maxUndoStackSize = 100): CommandDispatch<TStore, TPrimitive> {
+  const dispatch: CommandDispatch<TStore, TPrimitive> = <TParams, TReturn>(
+    command: Command<TStore, TParams, TReturn, TPrimitive>,
+  ) => {
+    return (params: TParams): TReturn => {
+      const ctx = createCommandContext<TStore, TPrimitive>(storeApi, dispatch);
+      const result = command.fn(ctx, params);
+      const hasDraft = storeApi.getState()._commander.activeDraft !== null;
+      if (isUndoableCommand(command) && !hasDraft) {
+        storeApi.setState((state: TStore) => ({
+          ...state,
+          _commander: {
+            ...state._commander,
+            undoStack: [
+              ...state._commander.undoStack,
+              {
+                command,
+                params,
+                result,
+                timestamp: Date.now(),
+              },
+            ].slice(-maxUndoStackSize),
+            redoStack: [],
+          },
+        }));
+      } else if (isUndoableCommand(command) && hasDraft) {
+        // A command applied to the active draft mutates only the draft's
+        // staged value; the committed document (and `mimic.snapshot`) stays
+        // untouched, so nothing would re-render an in-progress preview. Fire a
+        // store notification — without recording an undo entry, since the
+        // whole draft commits as a single step — so draft-aware selectors
+        // re-read the draft snapshot and render the live optimistic preview.
+        storeApi.setState((state: TStore) => ({
+          ...state,
+          _commander: { ...state._commander },
+        }));
+      }
+      return result;
+    };
+  };
+  return dispatch;
+}
+
+export function useCommander<
+  TStore extends CommanderSlice,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+>(store: UseBoundStore<StoreApi<TStore>>): CommandDispatch<TStore, TPrimitive> {
+  const storeApi = useMemo(() => store as unknown as StoreApi<TStore>, [store]);
+  return useMemo(() => createDispatchFromApi<TStore, TPrimitive>(storeApi), [storeApi]);
+}
+
+export interface UndoRedoState {
+  readonly canUndo: boolean;
+  readonly canRedo: boolean;
+  readonly undoCount: number;
+  readonly redoCount: number;
+  readonly undo: () => boolean;
+  readonly redo: () => boolean;
+  readonly clear: () => void;
+}
+
+export function useUndoRedo<TStore extends CommanderSlice>(
+  store: UseBoundStore<StoreApi<TStore>>,
+): UndoRedoState {
+  const storeApi = useMemo(() => store as unknown as StoreApi<TStore>, [store]);
+  const commanderState = useStore(store, (state) => state._commander);
+
+  const undo = useCallback(() => performUndo(storeApi), [storeApi]);
+  const redo = useCallback(() => performRedo(storeApi), [storeApi]);
+  const clear = useCallback(() => clearUndoHistory(storeApi), [storeApi]);
+
+  return {
+    canUndo: commanderState.undoStack.length > 0,
+    canRedo: commanderState.redoStack.length > 0,
+    undoCount: commanderState.undoStack.length,
+    redoCount: commanderState.redoStack.length,
+    undo,
+    redo,
+    clear,
+  };
+}
+
+export interface UseUndoRedoKeyboardOptions {
+  readonly enableUndo?: boolean;
+  readonly enableRedo?: boolean;
+}
+
+export function useUndoRedoKeyboard<TStore extends CommanderSlice>(
+  store: UseBoundStore<StoreApi<TStore>>,
+  options: UseUndoRedoKeyboardOptions = {},
+): void {
+  const { enableUndo = true, enableRedo = true } = options;
+  const storeApi = useMemo(() => store as unknown as StoreApi<TStore>, [store]);
+
+  useEffect(() => {
+    if (typeof window === "undefined") {
+      return;
+    }
+    const onKeyDown = (event: KeyboardEvent) => {
+      const isMac = navigator.platform.toUpperCase().includes("MAC");
+      const modKey = isMac ? event.metaKey : event.ctrlKey;
+      if (!modKey) {
+        return;
+      }
+      if (enableUndo && event.key === "z" && !event.shiftKey) {
+        event.preventDefault();
+        performUndo(storeApi);
+        return;
+      }
+      if (enableRedo && ((event.key === "z" && event.shiftKey) || event.key === "y")) {
+        event.preventDefault();
+        performRedo(storeApi);
+      }
+    };
+    window.addEventListener("keydown", onKeyDown);
+    return () => {
+      window.removeEventListener("keydown", onKeyDown);
+    };
+  }, [enableRedo, enableUndo, storeApi]);
+}
diff --git a/packages/mimic/src/zustand-commander/index.ts b/packages/mimic/src/zustand-commander/index.ts
new file mode 100644
index 000000000..3a36d0667
--- /dev/null
+++ b/packages/mimic/src/zustand-commander/index.ts
@@ -0,0 +1,24 @@
+export {
+  clearActiveDraft,
+  clearUndoHistory,
+  createCommander,
+  performRedo,
+  performUndo,
+  setActiveDraft,
+} from "./commander.js";
+export { useCommander, useUndoRedo, useUndoRedoKeyboard } from "./hooks.js";
+export { COMMAND_SYMBOL, UNDOABLE_COMMAND_SYMBOL, isUndoableCommand } from "./types.js";
+export type {
+  Command,
+  CommandContext,
+  CommandDispatch,
+  CommandFn,
+  Commander,
+  CommanderOptions,
+  CommanderSlice,
+  ExtractState,
+  RevertFn,
+  UndoEntry,
+  UndoableCommand,
+} from "./types.js";
+export type { UndoRedoState, UseUndoRedoKeyboardOptions } from "./hooks.js";
diff --git a/packages/mimic/src/zustand-commander/types.ts b/packages/mimic/src/zustand-commander/types.ts
new file mode 100644
index 000000000..e63be0aa1
--- /dev/null
+++ b/packages/mimic/src/zustand-commander/types.ts
@@ -0,0 +1,143 @@
+import type { StoreApi } from "zustand";
+import type { Command as CoreCommand, Primitive } from "@voidhash/mimic-core";
+
+import type { DraftHandle, ClientDocument } from "../client/types.js";
+
+export const COMMAND_SYMBOL = Symbol.for("zustand-commander/command");
+export const UNDOABLE_COMMAND_SYMBOL = Symbol.for("zustand-commander/undoable-command");
+
+export interface CommandContext<
+  TStore,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> {
+  readonly getState: () => TStore;
+  readonly setState: (partial: Partial<TStore>) => void;
+  readonly dispatch: CommandDispatch<TStore, TPrimitive>;
+  readonly root: Primitive.InferProxy<TPrimitive>;
+  readonly transaction: <R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R) => R;
+  /**
+   * Apply a precomputed CRDT command batch to the live document as one
+   * transaction (always targets the document, never the active draft). Used by
+   * the composition round-trip, which computes its own minimal batch.
+   */
+  readonly applyCommands: (commands: readonly CoreCommand[]) => void;
+  readonly raw: {
+    readonly root: Primitive.InferProxy<TPrimitive>;
+    transaction: <R>(fn: (root: Primitive.InferProxy<TPrimitive>) => R) => R;
+  };
+}
+
+export type CommandFn<
+  TStore,
+  TParams,
+  TReturn,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> = (ctx: CommandContext<TStore, TPrimitive>, params: TParams) => TReturn;
+
+export type RevertFn<
+  TStore,
+  TParams,
+  TReturn,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> = (ctx: CommandContext<TStore, TPrimitive>, params: TParams, result: TReturn) => void;
+
+export interface Command<
+  TStore,
+  TParams,
+  TReturn,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> {
+  readonly [COMMAND_SYMBOL]: true;
+  readonly fn: CommandFn<TStore, TParams, TReturn, TPrimitive>;
+}
+
+export interface UndoableCommand<
+  TStore,
+  TParams,
+  TReturn,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> extends Command<TStore, TParams, TReturn, TPrimitive> {
+  readonly [UNDOABLE_COMMAND_SYMBOL]: true;
+  readonly revert: RevertFn<TStore, TParams, TReturn, TPrimitive>;
+}
+
+export type AnyUndoableCommand = UndoableCommand<any, any, any, any>;
+
+export type CommandDispatch<
+  TStore,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> = <TParams, TReturn>(
+  command: Command<TStore, TParams, TReturn, TPrimitive>,
+) => (params: TParams) => TReturn;
+
+export interface UndoEntry<TParams = unknown, TReturn = unknown> {
+  readonly command: AnyUndoableCommand;
+  readonly params: TParams;
+  readonly result: TReturn;
+  readonly timestamp: number;
+}
+
+export interface CommanderSlice {
+  readonly _commander: {
+    readonly undoStack: ReadonlyArray<UndoEntry>;
+    readonly redoStack: ReadonlyArray<UndoEntry>;
+    readonly activeDraft: DraftHandle<any> | null;
+  };
+}
+
+export interface CommanderOptions {
+  readonly maxUndoStackSize?: number;
+}
+
+export interface Commander<
+  TStore,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> {
+  readonly action: {
+    <TParams, TReturn = void>(
+      fn: CommandFn<TStore, TParams, TReturn, TPrimitive>,
+    ): Command<TStore, TParams, TReturn, TPrimitive>;
+    <TReturn = void>(
+      fn: CommandFn<TStore, void, TReturn, TPrimitive>,
+    ): Command<TStore, void, TReturn, TPrimitive>;
+  };
+  readonly undoableAction: {
+    <TParams, TReturn>(
+      fn: CommandFn<TStore, TParams, TReturn, TPrimitive>,
+      revert: RevertFn<TStore, TParams, TReturn, TPrimitive>,
+    ): UndoableCommand<TStore, TParams, TReturn, TPrimitive>;
+    <TReturn>(
+      fn: CommandFn<TStore, void, TReturn, TPrimitive>,
+      revert: RevertFn<TStore, void, TReturn, TPrimitive>,
+    ): UndoableCommand<TStore, void, TReturn, TPrimitive>;
+  };
+  readonly middleware: <T extends object>(
+    config: (
+      set: StoreApi<T & CommanderSlice>["setState"],
+      get: StoreApi<T & CommanderSlice>["getState"],
+      api: StoreApi<T & CommanderSlice>,
+    ) => T,
+  ) => (
+    set: StoreApi<T & CommanderSlice>["setState"],
+    get: StoreApi<T & CommanderSlice>["getState"],
+    api: StoreApi<T & CommanderSlice>,
+  ) => T & CommanderSlice;
+}
+
+export const isUndoableCommand = (
+  command: Command<any, any, any, any>,
+): command is UndoableCommand<any, any, any, any> =>
+  (command as { readonly [UNDOABLE_COMMAND_SYMBOL]?: true })[UNDOABLE_COMMAND_SYMBOL] === true;
+
+export type ExtractState<TStore> = TStore extends StoreApi<infer TState> ? TState : never;
+
+export type CommandStore<
+  TStore extends CommanderSlice,
+  TPrimitive extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> = StoreApi<TStore> & {
+  getState(): TStore & {
+    readonly mimic: {
+      readonly document: ClientDocument<TPrimitive, any>;
+    };
+  };
+};
diff --git a/packages/mimic/src/zustand/index.ts b/packages/mimic/src/zustand/index.ts
new file mode 100644
index 000000000..bfac9fed3
--- /dev/null
+++ b/packages/mimic/src/zustand/index.ts
@@ -0,0 +1,10 @@
+export { mimic } from "./middleware.js";
+export { useDraft } from "./useDraft.js";
+export type {
+  MimicMiddlewareOptions,
+  MimicObject,
+  MimicPresence,
+  MimicSlice,
+  MimicStateCreator,
+} from "./types.js";
+export type { UseDraftReturn } from "./useDraft.js";
diff --git a/packages/mimic/src/zustand/middleware.ts b/packages/mimic/src/zustand/middleware.ts
new file mode 100644
index 000000000..12abc7a2d
--- /dev/null
+++ b/packages/mimic/src/zustand/middleware.ts
@@ -0,0 +1,87 @@
+import type { StateCreator, StoreMutatorIdentifier } from "zustand";
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type { ClientDocument } from "../client/types.js";
+import type { MimicMiddlewareOptions, MimicObject, MimicSlice } from "./types.js";
+
+type MimicMiddleware = <
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+  T extends object = object,
+  Mps extends [StoreMutatorIdentifier, unknown][] = [],
+  Mcs extends [StoreMutatorIdentifier, unknown][] = [],
+>(
+  document: ClientDocument<TPrimitive, TPresence, TPresenceInput>,
+  config: StateCreator<T & MimicSlice<TPrimitive, TPresence, TPresenceInput>, Mps, Mcs, T>,
+  options?: MimicMiddlewareOptions,
+) => StateCreator<
+  T & MimicSlice<TPrimitive, TPresence, TPresenceInput>,
+  Mps,
+  Mcs,
+  T & MimicSlice<TPrimitive, TPresence, TPresenceInput>
+>;
+
+const createMimicObject = <
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+>(
+  document: ClientDocument<TPrimitive, TPresence, TPresenceInput>,
+): MimicObject<TPrimitive, TPresence, TPresenceInput> => ({
+  document,
+  snapshot: document.getSnapshot(),
+  presence: document.presence
+    ? {
+        selfId: document.presence.selfId(),
+        self: document.presence.self(),
+        others: new Map(document.presence.others()),
+        all: new Map(document.presence.all()),
+      }
+    : undefined,
+  isConnected: document.isConnected(),
+  isReady: document.isReady(),
+  pendingCount: document.getPendingCount(),
+  hasPendingChanges: document.hasPendingChanges(),
+  activeDraftIds: document.getActiveDraftIds(),
+});
+
+const mimicImpl: MimicMiddleware = (document, config, options = {}) => {
+  const { autoSubscribe = true, autoConnect = true } = options;
+  return (set, get, api) => {
+    const updateMimicState = () => {
+      set(
+        (state) => ({
+          ...state,
+          mimic: createMimicObject(document),
+        }),
+        false,
+      );
+    };
+
+    if (autoSubscribe) {
+      document.subscribe({
+        onStateChange: updateMimicState,
+        onConnectionChange: updateMimicState,
+        onReady: updateMimicState,
+        onDraftChange: updateMimicState,
+      });
+
+      document.presence?.subscribe({
+        onPresenceChange: updateMimicState,
+      });
+    }
+
+    if (autoConnect) {
+      void document.connect();
+    }
+
+    const userState = config(set, get, api);
+    return {
+      ...userState,
+      mimic: createMimicObject(document),
+    };
+  };
+};
+
+export const mimic = mimicImpl;
diff --git a/packages/mimic/src/zustand/types.ts b/packages/mimic/src/zustand/types.ts
new file mode 100644
index 000000000..2ef695f8a
--- /dev/null
+++ b/packages/mimic/src/zustand/types.ts
@@ -0,0 +1,48 @@
+import type { StateCreator, StoreMutatorIdentifier } from "zustand";
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type { ClientDocument, PresenceEntry } from "../client/types.js";
+
+export interface MimicPresence<TPresence> {
+  readonly selfId: string | undefined;
+  readonly self: TPresence | undefined;
+  readonly others: ReadonlyMap<string, PresenceEntry<TPresence>>;
+  readonly all: ReadonlyMap<string, PresenceEntry<TPresence>>;
+}
+
+export interface MimicObject<
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+> {
+  readonly document: ClientDocument<TPrimitive, TPresence, TPresenceInput>;
+  readonly snapshot: Primitive.InferSnapshot<TPrimitive> | undefined;
+  readonly presence: MimicPresence<TPresence> | undefined;
+  readonly isConnected: boolean;
+  readonly isReady: boolean;
+  readonly pendingCount: number;
+  readonly hasPendingChanges: boolean;
+  readonly activeDraftIds: readonly string[];
+}
+
+export interface MimicSlice<
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence = unknown,
+  TPresenceInput = TPresence,
+> {
+  readonly mimic: MimicObject<TPrimitive, TPresence, TPresenceInput>;
+}
+
+export type MimicStateCreator<
+  TPrimitive extends Primitive.AnyPrimitive,
+  TPresence,
+  T,
+  Mps extends [StoreMutatorIdentifier, unknown][] = [],
+  Mcs extends [StoreMutatorIdentifier, unknown][] = [],
+  TPresenceInput = TPresence,
+> = StateCreator<T & MimicSlice<TPrimitive, TPresence, TPresenceInput>, Mps, Mcs, T>;
+
+export interface MimicMiddlewareOptions {
+  readonly autoSubscribe?: boolean;
+  readonly autoConnect?: boolean;
+}
diff --git a/packages/mimic/src/zustand/useDraft.ts b/packages/mimic/src/zustand/useDraft.ts
new file mode 100644
index 000000000..25cb3cc04
--- /dev/null
+++ b/packages/mimic/src/zustand/useDraft.ts
@@ -0,0 +1,86 @@
+import { useCallback, useEffect, useRef, useSyncExternalStore } from "react";
+import type { StoreApi } from "zustand";
+import type { Primitive } from "@voidhash/mimic-core";
+
+import { clearActiveDraft, setActiveDraft } from "../zustand-commander/commander.js";
+import type { CommanderSlice } from "../zustand-commander/types.js";
+import type { DraftHandle } from "../client/types.js";
+import type { MimicSlice } from "./types.js";
+
+export interface UseDraftReturn<TPrimitive extends Primitive.AnyPrimitive> {
+  readonly draft: DraftHandle<TPrimitive> | null;
+  readonly begin: () => void;
+  readonly commit: () => void;
+  readonly discard: () => void;
+}
+
+export const useDraft = <TPrimitive extends Primitive.AnyPrimitive, TPresence = unknown>(
+  store: StoreApi<MimicSlice<TPrimitive, TPresence> & CommanderSlice>,
+): UseDraftReturn<TPrimitive> => {
+  const draftRef = useRef<DraftHandle<TPrimitive> | null>(null);
+  const versionRef = useRef(0);
+
+  const subscribe = useCallback(
+    (onStoreChange: () => void) => store.subscribe(onStoreChange),
+    [store],
+  );
+
+  const getSnapshot = useCallback(() => versionRef.current, []);
+  useSyncExternalStore(subscribe, getSnapshot, getSnapshot);
+
+  const bumpVersion = useCallback(() => {
+    versionRef.current += 1;
+  }, []);
+
+  const begin = useCallback(() => {
+    if (draftRef.current !== null) {
+      throw new Error("A draft is already active. Commit or discard it first.");
+    }
+    const draft = store.getState().mimic.document.createDraft();
+    draftRef.current = draft;
+    setActiveDraft(store, draft);
+    bumpVersion();
+  }, [store, bumpVersion]);
+
+  const commit = useCallback(() => {
+    if (draftRef.current === null) {
+      return;
+    }
+    clearActiveDraft(store);
+    draftRef.current.commit();
+    draftRef.current = null;
+    bumpVersion();
+  }, [store, bumpVersion]);
+
+  const discard = useCallback(() => {
+    if (draftRef.current === null) {
+      return;
+    }
+    clearActiveDraft(store);
+    draftRef.current.discard();
+    draftRef.current = null;
+    bumpVersion();
+  }, [store, bumpVersion]);
+
+  useEffect(
+    () => () => {
+      if (draftRef.current !== null) {
+        try {
+          clearActiveDraft(store);
+          draftRef.current.discard();
+        } catch {
+          // Ignore stale draft cleanup errors.
+        }
+        draftRef.current = null;
+      }
+    },
+    [store],
+  );
+
+  return {
+    draft: draftRef.current,
+    begin,
+    commit,
+    discard,
+  };
+};
diff --git a/packages/mimic/tests/client/client-document.test.ts b/packages/mimic/tests/client/client-document.test.ts
new file mode 100644
index 000000000..6befadd4b
--- /dev/null
+++ b/packages/mimic/tests/client/client-document.test.ts
@@ -0,0 +1,186 @@
+import { describe, expect, it } from "vitest";
+import { Primitive, applyBatch } from "@voidhash/mimic-core";
+
+import { createClientDocument } from "../../src/client/ClientDocument.js";
+import { FakeTransport, TestPrimitive, makeValue } from "../helpers.js";
+
+describe("ClientDocument", () => {
+  it("sanitizes initial values against the primitive schema", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("Hello", undefined, { extra: makeValue("nested") }),
+      initialVersion: 2,
+    });
+
+    expect(document.getSnapshot()).toEqual({
+      title: "Hello",
+      done: false,
+    });
+    expect(document.isReady()).toBe(true);
+    expect(document.getServerVersion()).toBe(2);
+  });
+
+  it("queues optimistic command transactions and reconciles accepted broadcasts", async () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 3,
+    });
+
+    await document.connect();
+    transport.emit({
+      type: "snapshot",
+      value: makeValue("One"),
+      version: 3,
+    });
+
+    document.transaction((root) => {
+      root.title.set("Two");
+    });
+
+    expect(document.getSnapshot()).toEqual({
+      title: "Two",
+      done: false,
+    });
+    expect(document.getPendingCount()).toBe(1);
+    expect(transport.submitted).toHaveLength(1);
+    expect(transport.submitted[0]).toMatchObject({
+      baseVersion: 3,
+      commands: [
+        {
+          kind: "value.set",
+        },
+      ],
+    });
+
+    transport.emit({
+      type: "transaction",
+      transaction: transport.submitted[0]!,
+      version: 4,
+    });
+
+    expect(document.getPendingCount()).toBe(0);
+    expect(document.getServerVersion()).toBe(4);
+    expect(document.getServerSnapshot()).toEqual({
+      title: "Two",
+      done: false,
+    });
+  });
+
+  it("requests a resync when a pending transaction is rejected", async () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 1,
+    });
+
+    await document.connect();
+    transport.emit({
+      type: "snapshot",
+      value: makeValue("One"),
+      version: 1,
+    });
+
+    document.transaction((root) => {
+      root.title.set("Rejected");
+    });
+
+    const transactionId = transport.submitted[0]!.id;
+    transport.emit({
+      type: "error",
+      transactionId,
+      reason: "version_conflict",
+    });
+
+    expect(transport.snapshotRequests).toHaveLength(1);
+  });
+
+  it("does not poison the pending queue when a write fails validation", async () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 1,
+    });
+
+    await document.connect();
+    transport.emit({
+      type: "snapshot",
+      value: makeValue("One"),
+      version: 1,
+    });
+
+    // `title` is required without a default; deleting it fails validation.
+    // The widened type bypasses the compile-time rejection on purpose.
+    const badPatch: { title?: string } = { title: undefined };
+    expect(() => document.root.update(badPatch)).toThrow();
+
+    // The bad transaction must not stick around.
+    expect(document.getPendingCount()).toBe(0);
+    expect(document.getSnapshot()).toEqual({ title: "One", done: false });
+
+    // The next good write goes through and reconciles normally.
+    document.transaction((root) => {
+      root.title.set("Two");
+    });
+    expect(document.getSnapshot()).toEqual({ title: "Two", done: false });
+    expect(document.getPendingCount()).toBe(1);
+    expect(transport.submitted).toHaveLength(1);
+
+    transport.emit({
+      type: "transaction",
+      transaction: transport.submitted[0]!,
+      version: 2,
+    });
+    expect(document.getPendingCount()).toBe(0);
+    expect(document.getServerSnapshot()).toEqual({ title: "Two", done: false });
+  });
+
+  it("drops a pending head that a reconnect snapshot already contains", async () => {
+    const FileNode = Primitive.TreeNode("file", {
+      data: Primitive.Struct({
+        name: Primitive.String().required(),
+      }),
+      children: [],
+    });
+    const TreeDocument = Primitive.Tree({ root: FileNode });
+    const emptyTree = TreeDocument.encode([]);
+
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TreeDocument,
+      transport,
+      initialValue: emptyTree,
+      initialVersion: 1,
+    });
+
+    await document.connect();
+    transport.emit({ type: "snapshot", value: emptyTree, version: 1 });
+
+    document.transaction((root) => {
+      root.children.insertLast({ type: "file", name: "notes.md" });
+    });
+    expect(document.getPendingCount()).toBe(1);
+    expect(transport.submitted).toHaveLength(1);
+
+    // Reconnect snapshot that already contains the accepted-but-unacked
+    // insert: replaying the pending head would throw DuplicateTreeNodeId.
+    const acceptedValue = applyBatch(emptyTree, transport.submitted[0]!.commands);
+    expect(() => {
+      transport.emit({ type: "snapshot", value: acceptedValue, version: 2 });
+    }).not.toThrow();
+
+    expect(document.getPendingCount()).toBe(0);
+    expect(document.getServerVersion()).toBe(2);
+    expect(document.isReady()).toBe(true);
+    expect(document.getSnapshot()).toHaveLength(1);
+    expect(document.getSnapshot()?.[0]?.data.name).toBe("notes.md");
+  });
+});
diff --git a/packages/mimic/tests/client/draft.test.ts b/packages/mimic/tests/client/draft.test.ts
new file mode 100644
index 000000000..95eb28d43
--- /dev/null
+++ b/packages/mimic/tests/client/draft.test.ts
@@ -0,0 +1,89 @@
+import { describe, expect, it } from "vitest";
+
+import { createClientDocument } from "../../src/client/ClientDocument.js";
+import { FakeTransport, TestPrimitive, makeValue } from "../helpers.js";
+
+describe("DraftHandle", () => {
+  it("keeps draft-local preview state isolated until commit", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("Base"),
+      initialVersion: 1,
+    });
+
+    const draft = document.createDraft();
+    draft.update((root) => {
+      root.title.set("Draft");
+    });
+
+    expect(draft.getSnapshot()).toEqual({
+      title: "Draft",
+      done: false,
+    });
+    expect(document.getSnapshot()).toEqual({
+      title: "Base",
+      done: false,
+    });
+
+    draft.commit();
+
+    expect(document.getSnapshot()).toEqual({
+      title: "Draft",
+      done: false,
+    });
+    expect(document.getPendingCount()).toBe(1);
+  });
+
+  it("discard removes the draft without touching the document state", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("Base"),
+      initialVersion: 1,
+    });
+
+    const draft = document.createDraft();
+    draft.update((root) => {
+      root.title.set("Draft");
+    });
+    draft.discard();
+
+    expect(document.getSnapshot()).toEqual({
+      title: "Base",
+      done: false,
+    });
+    expect(document.getPendingCount()).toBe(0);
+    expect(document.getActiveDraftIds()).toEqual([]);
+  });
+
+  it("returns a stable snapshot reference between edits", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("Base"),
+      initialVersion: 1,
+    });
+
+    const draft = document.createDraft();
+
+    // Repeated reads without an intervening edit must be referentially stable —
+    // draft-aware selectors read this during render (useSyncExternalStore).
+    const first = draft.getSnapshot();
+    expect(draft.getSnapshot()).toBe(first);
+
+    draft.update((root) => {
+      root.title.set("Draft");
+    });
+
+    // A staged edit produces a fresh reference so subscribers re-render...
+    const afterEdit = draft.getSnapshot();
+    expect(afterEdit).not.toBe(first);
+    expect(afterEdit).toEqual({ title: "Draft", done: false });
+    // ...and stabilizes again until the next edit.
+    expect(draft.getSnapshot()).toBe(afterEdit);
+  });
+});
diff --git a/packages/mimic/tests/client/http-api-client.test.ts b/packages/mimic/tests/client/http-api-client.test.ts
new file mode 100644
index 000000000..ca886db77
--- /dev/null
+++ b/packages/mimic/tests/client/http-api-client.test.ts
@@ -0,0 +1,44 @@
+import { describe, expect, it, vi } from "vitest";
+
+import { MimicDbHttpClient } from "../../src/client/HttpApiClient.js";
+import { makeValue } from "../helpers.js";
+
+describe("MimicDbHttpClient", () => {
+  it("uses basic auth and document routes from mimic-db", async () => {
+    const fetch = vi.fn(
+      async () =>
+        new Response(
+          JSON.stringify({
+            id: "doc-1",
+            collectionId: "col-1",
+            value: makeValue("Title"),
+            version: 1,
+          }),
+          {
+            status: 201,
+            headers: { "content-type": "application/json" },
+          },
+        ),
+    );
+
+    const client = new MimicDbHttpClient({
+      baseUrl: "https://example.com",
+      auth: {
+        username: "user",
+        password: "pass",
+      },
+      fetch,
+    });
+
+    const response = await client.createDocument({
+      collectionId: "col-1",
+      value: makeValue("Title"),
+    });
+
+    expect(response.value).toEqual(makeValue("Title"));
+    expect(fetch).toHaveBeenCalledTimes(1);
+    expect(fetch.mock.calls[0]?.[0]).toBe("https://example.com/api/v1/collections/col-1/documents");
+    const request = fetch.mock.calls[0]?.[1] as RequestInit;
+    expect((request.headers as Headers).get("authorization")).toMatch(/^Basic /);
+  });
+});
diff --git a/packages/mimic/tests/client/presence.test.ts b/packages/mimic/tests/client/presence.test.ts
new file mode 100644
index 000000000..64eed1480
--- /dev/null
+++ b/packages/mimic/tests/client/presence.test.ts
@@ -0,0 +1,164 @@
+import { describe, expect, it } from "vitest";
+
+import { createClientDocument } from "../../src/client/ClientDocument.js";
+import {
+  FakeTransport,
+  TestPresencePrimitive,
+  TestPrimitive,
+  makePresenceValue,
+  makeValue,
+} from "../helpers.js";
+
+describe("presence", () => {
+  it("tracks presence snapshots and updates", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("Base"),
+      initialVersion: 1,
+      presence: {
+        primitive: TestPresencePrimitive,
+        initial: { name: "self" },
+      },
+    });
+
+    document.presence?.set({ name: "self" });
+    expect(transport.presenceValues[0]).toEqual(makePresenceValue("self"));
+
+    transport.emit({
+      type: "presence_snapshot",
+      selfId: "self-id",
+      presences: {
+        "self-id": { data: makePresenceValue("self") },
+        other: { data: makePresenceValue("other"), userId: "user-1" },
+      },
+    });
+
+    expect(document.presence?.selfId()).toBe("self-id");
+    expect(document.presence?.self()).toEqual({ name: "self" });
+    expect(document.presence?.others().get("other")).toEqual({
+      data: { name: "other" },
+      userId: "user-1",
+    });
+
+    transport.emit({
+      type: "presence_update",
+      id: "other",
+      data: makePresenceValue("updated"),
+      userId: "user-1",
+    });
+
+    expect(document.presence?.others().get("other")?.data).toEqual({
+      name: "updated",
+    });
+
+    transport.emit({
+      type: "presence_remove",
+      id: "other",
+    });
+
+    expect(document.presence?.others().has("other")).toBe(false);
+  });
+
+  const createPresenceDocument = () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("Base"),
+      initialVersion: 1,
+      presence: {
+        primitive: TestPresencePrimitive,
+      },
+    });
+    return { transport, document };
+  };
+
+  it("reflects local set() in self() synchronously, before any server echo", () => {
+    const { transport, document } = createPresenceDocument();
+    transport.emit({
+      type: "presence_snapshot",
+      selfId: "self-id",
+      presences: {},
+    });
+
+    let changes = 0;
+    document.presence?.subscribe({ onPresenceChange: () => changes++ });
+
+    document.presence?.set({ name: "first" });
+    document.presence?.set({ name: "second" });
+
+    expect(document.presence?.self()).toEqual({ name: "second" });
+    expect(document.presence?.all().get("self-id")?.data).toEqual({ name: "second" });
+    expect(changes).toBe(2);
+  });
+
+  it("treats a lagging server echo of a local set as a no-op", () => {
+    const { transport, document } = createPresenceDocument();
+    transport.emit({
+      type: "presence_snapshot",
+      selfId: "self-id",
+      presences: {},
+    });
+
+    document.presence?.set({ name: "first" });
+    document.presence?.set({ name: "second" });
+
+    transport.emit({
+      type: "presence_update",
+      id: "self-id",
+      data: makePresenceValue("first"),
+    });
+    expect(document.presence?.self()).toEqual({ name: "second" });
+
+    transport.emit({
+      type: "presence_update",
+      id: "self-id",
+      data: makePresenceValue("second"),
+    });
+    expect(document.presence?.self()).toEqual({ name: "second" });
+  });
+
+  it("keeps reporting a buffered local set via self() before the connection id is known", () => {
+    const { transport, document } = createPresenceDocument();
+
+    document.presence?.set({ name: "offline" });
+    expect(document.presence?.selfId()).toBeUndefined();
+    expect(document.presence?.self()).toEqual({ name: "offline" });
+
+    // The first snapshot of a fresh connection cannot contain self yet — the
+    // local value must materialize under the new connection id regardless.
+    transport.emit({
+      type: "presence_snapshot",
+      selfId: "self-id",
+      presences: {
+        other: { data: makePresenceValue("other") },
+      },
+    });
+
+    expect(document.presence?.self()).toEqual({ name: "offline" });
+    expect(document.presence?.all().get("self-id")?.data).toEqual({ name: "offline" });
+    expect(document.presence?.others().has("self-id")).toBe(false);
+  });
+
+  it("clear() removes the local presence synchronously and survives stale remove echoes", () => {
+    const { transport, document } = createPresenceDocument();
+    transport.emit({
+      type: "presence_snapshot",
+      selfId: "self-id",
+      presences: {},
+    });
+
+    document.presence?.set({ name: "visible" });
+    document.presence?.clear();
+    expect(document.presence?.self()).toBeUndefined();
+    expect(document.presence?.all().has("self-id")).toBe(false);
+
+    // Re-set locally; the late server echo of the earlier clear must not wipe it.
+    document.presence?.set({ name: "again" });
+    transport.emit({ type: "presence_remove", id: "self-id" });
+    expect(document.presence?.self()).toEqual({ name: "again" });
+    expect(document.presence?.all().get("self-id")?.data).toEqual({ name: "again" });
+  });
+});
diff --git a/packages/mimic/tests/client/websocket-transport.test.ts b/packages/mimic/tests/client/websocket-transport.test.ts
new file mode 100644
index 000000000..8664d3361
--- /dev/null
+++ b/packages/mimic/tests/client/websocket-transport.test.ts
@@ -0,0 +1,278 @@
+// @vitest-environment jsdom
+
+import { describe, expect, it } from "vitest";
+import { objectValue, booleanValue, stringValue } from "@voidhash/mimic-core";
+
+import { NotConnectedError } from "../../src/client/errors.js";
+import { WebSocketTransport } from "../../src/client/WebSocketTransport.js";
+
+class FakeWebSocket {
+  static readonly OPEN = 1;
+  static instances: FakeWebSocket[] = [];
+
+  readonly listeners = new Map<string, Array<(event: any) => void>>();
+  readonly sent: string[] = [];
+  readyState = 0;
+
+  constructor(readonly url: string) {
+    FakeWebSocket.instances.push(this);
+  }
+
+  addEventListener(type: string, handler: (event: any) => void): void {
+    const handlers = this.listeners.get(type) ?? [];
+    handlers.push(handler);
+    this.listeners.set(type, handlers);
+  }
+
+  send(message: string): void {
+    this.sent.push(message);
+  }
+
+  close(): void {
+    this.readyState = 3;
+    this.emit("close", {});
+  }
+
+  emit(type: string, event: any): void {
+    for (const handler of this.listeners.get(type) ?? []) {
+      handler(event);
+    }
+  }
+}
+
+describe("WebSocketTransport", () => {
+  it("authenticates, sends requests, and tracks connection state", async () => {
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnect: false,
+    });
+
+    const connectPromise = transport.connect();
+    const socket = FakeWebSocket.instances[0]!;
+    socket.readyState = FakeWebSocket.OPEN;
+    socket.emit("open", {});
+    await Promise.resolve();
+    expect(socket.sent[0]).toBe(JSON.stringify({ type: "auth", token: "token-1" }));
+
+    socket.emit("message", {
+      data: JSON.stringify({
+        type: "auth_result",
+        success: true,
+        tokenId: "token-id",
+        permission: "write",
+      }),
+    });
+
+    await connectPromise;
+    expect(transport.isConnected()).toBe(true);
+
+    transport.requestSnapshot();
+    const presenceValue = objectValue({ ok: booleanValue(true) });
+    transport.setPresence(presenceValue);
+
+    expect(socket.sent).toContain(JSON.stringify({ type: "request_snapshot" }));
+    expect(socket.sent).toContain(JSON.stringify({ type: "presence_set", data: presenceValue }));
+  });
+
+  const AUTH_SUCCESS = JSON.stringify({
+    type: "auth_result",
+    success: true,
+    tokenId: "token-id",
+    permission: "write",
+  });
+
+  const flushMicrotasks = () => new Promise<void>((resolve) => setTimeout(resolve, 0));
+
+  const authenticate = async (socket: FakeWebSocket): Promise<void> => {
+    socket.readyState = FakeWebSocket.OPEN;
+    socket.emit("open", {});
+    await flushMicrotasks();
+    socket.emit("message", { data: AUTH_SUCCESS });
+    await flushMicrotasks();
+  };
+
+  it("buffers presence set in the open-but-unauthenticated window and replays after auth", async () => {
+    const baseline = FakeWebSocket.instances.length;
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnect: false,
+    });
+
+    const presenceValue = objectValue({ name: stringValue("pre-auth") });
+    const connectPromise = transport.connect();
+    const socket = FakeWebSocket.instances[baseline]!;
+    socket.readyState = FakeWebSocket.OPEN;
+    socket.emit("open", {});
+    await flushMicrotasks();
+
+    expect(() => transport.setPresence(presenceValue)).not.toThrow();
+    expect(socket.sent).not.toContain(
+      JSON.stringify({ type: "presence_set", data: presenceValue }),
+    );
+
+    socket.emit("message", { data: AUTH_SUCCESS });
+    await connectPromise;
+    expect(socket.sent).toContain(JSON.stringify({ type: "presence_set", data: presenceValue }));
+  });
+
+  it("buffers presence set while fully disconnected and replays it after connect", async () => {
+    const baseline = FakeWebSocket.instances.length;
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnect: false,
+    });
+
+    const presenceValue = objectValue({ name: stringValue("offline") });
+    expect(() => transport.setPresence(presenceValue)).not.toThrow();
+
+    const connectPromise = transport.connect();
+    await authenticate(FakeWebSocket.instances[baseline]!);
+    await connectPromise;
+
+    expect(FakeWebSocket.instances[baseline]!.sent).toContain(
+      JSON.stringify({ type: "presence_set", data: presenceValue }),
+    );
+  });
+
+  it("replays a presence set buffered during a reconnect gap after re-auth", async () => {
+    const baseline = FakeWebSocket.instances.length;
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnectDelayMs: 1,
+    });
+
+    const connectPromise = transport.connect();
+    const socket = FakeWebSocket.instances[baseline]!;
+    await authenticate(socket);
+    await connectPromise;
+
+    socket.close();
+    expect(transport.isConnected()).toBe(false);
+
+    const presenceValue = objectValue({ name: stringValue("during-gap") });
+    expect(() => transport.setPresence(presenceValue)).not.toThrow();
+
+    await new Promise<void>((resolve) => setTimeout(resolve, 5));
+    const reconnected = FakeWebSocket.instances[baseline + 1]!;
+    expect(reconnected).not.toBe(socket);
+    await authenticate(reconnected);
+
+    expect(transport.isConnected()).toBe(true);
+    expect(reconnected.sent).toContain(
+      JSON.stringify({ type: "presence_set", data: presenceValue }),
+    );
+    transport.disconnect();
+  });
+
+  it("replays a presence clear buffered while disconnected after the next auth", async () => {
+    const baseline = FakeWebSocket.instances.length;
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnect: false,
+    });
+
+    const presenceValue = objectValue({ name: stringValue("to-clear") });
+    expect(() => transport.setPresence(presenceValue)).not.toThrow();
+    expect(() => transport.clearPresence()).not.toThrow();
+
+    const connectPromise = transport.connect();
+    const socket = FakeWebSocket.instances[baseline]!;
+    await authenticate(socket);
+    await connectPromise;
+
+    expect(socket.sent).toContain(JSON.stringify({ type: "presence_clear" }));
+    expect(socket.sent).not.toContain(
+      JSON.stringify({ type: "presence_set", data: presenceValue }),
+    );
+  });
+
+  it("notifies onAuthFailure when the initial connect is rejected", async () => {
+    const baseline = FakeWebSocket.instances.length;
+    const failures: Error[] = [];
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnect: false,
+      onAuthFailure: (error) => failures.push(error),
+    });
+
+    const connectPromise = transport.connect();
+    const socket = FakeWebSocket.instances[baseline]!;
+    socket.readyState = FakeWebSocket.OPEN;
+    socket.emit("open", {});
+    await flushMicrotasks();
+    socket.emit("message", {
+      data: JSON.stringify({ type: "auth_result", success: false, error: "bad token" }),
+    });
+
+    await expect(connectPromise).rejects.toThrow("WebSocket authentication failed: bad token");
+    expect(failures).toHaveLength(1);
+    expect(failures[0]!.message).toContain("bad token");
+  });
+
+  it("notifies onAuthFailure on a reconnect-cycle auth failure and stays terminal", async () => {
+    const baseline = FakeWebSocket.instances.length;
+    const failures: Error[] = [];
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnectDelayMs: 1,
+      onAuthFailure: (error) => failures.push(error),
+    });
+
+    const connectPromise = transport.connect();
+    const socket = FakeWebSocket.instances[baseline]!;
+    await authenticate(socket);
+    await connectPromise;
+    expect(transport.isConnected()).toBe(true);
+
+    // Drop the connection; the transport schedules a reconnect.
+    socket.close();
+    await new Promise<void>((resolve) => setTimeout(resolve, 5));
+    const reconnected = FakeWebSocket.instances[baseline + 1]!;
+    expect(reconnected).not.toBe(socket);
+
+    reconnected.readyState = FakeWebSocket.OPEN;
+    reconnected.emit("open", {});
+    await flushMicrotasks();
+    reconnected.emit("message", {
+      data: JSON.stringify({ type: "auth_result", success: false, error: "token expired" }),
+    });
+    await flushMicrotasks();
+
+    expect(failures).toHaveLength(1);
+    expect(failures[0]!.message).toContain("token expired");
+    expect(transport.isConnected()).toBe(false);
+
+    // Terminal: auth failure stops the reconnect loop.
+    const socketCount = FakeWebSocket.instances.length;
+    await new Promise<void>((resolve) => setTimeout(resolve, 10));
+    expect(FakeWebSocket.instances.length).toBe(socketCount);
+  });
+
+  it("keeps throwing NotConnectedError for non-presence sends while disconnected", () => {
+    const transport = new WebSocketTransport({
+      url: "ws://example.test/socket",
+      token: "token-1",
+      WebSocket: FakeWebSocket as unknown as typeof WebSocket,
+      reconnect: false,
+    });
+
+    expect(() => transport.requestSnapshot()).toThrow(NotConnectedError);
+    expect(() => transport.submit({ id: "tx-1", baseVersion: 0, commands: [] })).toThrow(
+      NotConnectedError,
+    );
+  });
+});
diff --git a/packages/mimic/tests/helpers.ts b/packages/mimic/tests/helpers.ts
new file mode 100644
index 000000000..148f310bb
--- /dev/null
+++ b/packages/mimic/tests/helpers.ts
@@ -0,0 +1,97 @@
+import {
+  Primitive,
+  booleanValue,
+  objectValue,
+  stringValue,
+  type Value,
+} from "@voidhash/mimic-core";
+
+import type { ServerMessage, TransactionEnvelope } from "../src/client/protocol.js";
+import type { DocumentTransport } from "../src/client/Transport.js";
+
+export const TestPrimitive = Primitive.Struct({
+  title: Primitive.String().required(),
+  done: Primitive.Boolean().default(false),
+}).required();
+
+export const TestPresencePrimitive = Primitive.Struct({
+  name: Primitive.String(),
+}).required();
+
+export const makePresenceValue = (name: string): Value =>
+  objectValue({
+    name: stringValue(name),
+  });
+
+export const makeValue = (title: string, done?: boolean, extra?: Record<string, Value>): Value =>
+  objectValue({
+    title: stringValue(title),
+    ...(done !== undefined ? { done: booleanValue(done) } : {}),
+    ...extra,
+  });
+
+export class FakeTransport implements DocumentTransport {
+  readonly submitted: TransactionEnvelope[] = [];
+  readonly connectionHandlers = new Set<(connected: boolean) => void>();
+  readonly messageHandlers = new Set<(message: ServerMessage) => void>();
+  readonly presenceValues: Value[] = [];
+  readonly snapshotRequests: number[] = [];
+  connected = false;
+
+  async connect(): Promise<void> {
+    this.connected = true;
+    this.emitConnection(true);
+  }
+
+  disconnect(): void {
+    this.connected = false;
+    this.emitConnection(false);
+  }
+
+  subscribe(handler: (message: ServerMessage) => void): () => void {
+    this.messageHandlers.add(handler);
+    return () => {
+      this.messageHandlers.delete(handler);
+    };
+  }
+
+  subscribeConnection(handler: (connected: boolean) => void): () => void {
+    this.connectionHandlers.add(handler);
+    return () => {
+      this.connectionHandlers.delete(handler);
+    };
+  }
+
+  requestSnapshot(): void {
+    this.snapshotRequests.push(Date.now());
+  }
+
+  submit(transaction: TransactionEnvelope): void {
+    this.submitted.push(transaction);
+  }
+
+  setPresence(data: Value): void {
+    this.presenceValues.push(data);
+  }
+
+  clearPresence(): void {
+    this.presenceValues.push(undefined);
+  }
+
+  isConnected(): boolean {
+    return this.connected;
+  }
+
+  emit(message: ServerMessage): void {
+    for (const handler of this.messageHandlers) {
+      handler(message);
+    }
+  }
+
+  emitConnection(connected: boolean): void {
+    this.connected = connected;
+    for (const handler of this.connectionHandlers) {
+      handler(connected);
+    }
+  }
+}
diff --git a/packages/mimic/tests/interop/mimic-core.test.ts b/packages/mimic/tests/interop/mimic-core.test.ts
new file mode 100644
index 000000000..6d793469f
--- /dev/null
+++ b/packages/mimic/tests/interop/mimic-core.test.ts
@@ -0,0 +1,37 @@
+import { applyBatch, validate } from "@voidhash/mimic-core";
+import { describe, expect, it } from "vitest";
+
+import { createClientDocument } from "../../src/client/ClientDocument.js";
+import { FakeTransport, TestPrimitive, makeValue } from "../helpers.js";
+
+describe("mimic-core interop", () => {
+  it("emits command batches that replay through mimic-core", async () => {
+    const transport = new FakeTransport();
+    const initialValue = makeValue("One");
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue,
+      initialVersion: 1,
+    });
+
+    await document.connect();
+    transport.emit({
+      type: "snapshot",
+      value: initialValue,
+      version: 1,
+    });
+
+    document.transaction((root) => {
+      root.title.set("Two");
+    });
+
+    const envelope = transport.submitted[0]!;
+    const nextValue = applyBatch(initialValue, envelope.commands);
+    expect(validate(TestPrimitive.schema, nextValue)).toEqual(makeValue("Two", false));
+    expect(document.getSnapshot()).toEqual({
+      title: "Two",
+      done: false,
+    });
+  });
+});
diff --git a/packages/mimic/tests/zustand-commander/hooks.test.tsx b/packages/mimic/tests/zustand-commander/hooks.test.tsx
new file mode 100644
index 000000000..be6333367
--- /dev/null
+++ b/packages/mimic/tests/zustand-commander/hooks.test.tsx
@@ -0,0 +1,187 @@
+// @vitest-environment jsdom
+
+import { renderHook, act } from "@testing-library/react";
+import { create } from "zustand";
+import { describe, expect, it } from "vitest";
+
+import { createClientDocument } from "../../src/client/ClientDocument.js";
+import {
+  clearActiveDraft,
+  createCommander,
+  setActiveDraft,
+} from "../../src/zustand-commander/commander.js";
+import { useCommander, useUndoRedo } from "../../src/zustand-commander/hooks.js";
+import { mimic } from "../../src/zustand/middleware.js";
+import { FakeTransport, TestPrimitive, makeValue } from "../helpers.js";
+
+describe("zustand commander hooks", () => {
+  it("dispatches undoable commands and supports undo", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 1,
+    });
+
+    const commander = createCommander<object, typeof TestPrimitive>();
+    const rename = commander.undoableAction<{ title: string }, { previous: string }>(
+      (ctx, params) => {
+        const previous = document.getSnapshot()?.title ?? "";
+        ctx.root.title.set(params.title);
+        return { previous };
+      },
+      (ctx, _params, result) => {
+        ctx.root.title.set(result.previous);
+      },
+    );
+
+    const useStore = create(
+      commander.middleware(
+        mimic(document, () => ({}), {
+          autoConnect: false,
+        }),
+      ),
+    );
+
+    const { result: dispatchResult } = renderHook(() => useCommander(useStore));
+    const { result: undoRedo } = renderHook(() => useUndoRedo(useStore));
+
+    act(() => {
+      dispatchResult.current(rename)({ title: "Two" });
+    });
+
+    expect(document.getSnapshot()).toEqual({
+      title: "Two",
+      done: false,
+    });
+    expect(undoRedo.current.canUndo).toBe(true);
+
+    act(() => {
+      undoRedo.current.undo();
+    });
+
+    expect(document.getSnapshot()).toEqual({
+      title: "One",
+      done: false,
+    });
+  });
+
+  it("notifies subscribers on a draft dispatch without recording undo", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 1,
+    });
+
+    const commander = createCommander<object, typeof TestPrimitive>();
+    const rename = commander.undoableAction<{ title: string }, { previous: string }>(
+      (ctx, params) => {
+        const previous = document.getSnapshot()?.title ?? "";
+        ctx.root.title.set(params.title);
+        return { previous };
+      },
+      (ctx, _params, result) => {
+        ctx.root.title.set(result.previous);
+      },
+    );
+
+    const useStore = create(
+      commander.middleware(
+        mimic(document, () => ({}), {
+          autoConnect: false,
+        }),
+      ),
+    );
+
+    const { result: dispatchResult } = renderHook(() => useCommander(useStore));
+    const { result: undoRedo } = renderHook(() => useUndoRedo(useStore));
+
+    const draft = document.createDraft();
+    act(() => {
+      setActiveDraft(useStore, draft);
+    });
+
+    let notifications = 0;
+    const unsubscribe = useStore.subscribe(() => {
+      notifications += 1;
+    });
+
+    act(() => {
+      dispatchResult.current(rename)({ title: "Two" });
+    });
+    unsubscribe();
+
+    // The write lands in the draft, not the committed document.
+    expect(document.getSnapshot()).toEqual({ title: "One", done: false });
+    expect(draft.getSnapshot()).toEqual({ title: "Two", done: false });
+    // Subscribers were still notified so a draft-aware preview re-renders...
+    expect(notifications).toBeGreaterThan(0);
+    // ...but no undo entry was recorded — the draft commits as one step.
+    expect(undoRedo.current.canUndo).toBe(false);
+
+    act(() => {
+      clearActiveDraft(useStore);
+      draft.commit();
+    });
+
+    expect(document.getSnapshot()).toEqual({ title: "Two", done: false });
+  });
+
+  it("refreshes the undo entry's inverse payload on redo", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 1,
+    });
+
+    const commander = createCommander<object, typeof TestPrimitive>();
+    let runCounter = 0;
+    const reverts: string[] = [];
+    const stamp = commander.undoableAction<{ title: string }, { runId: string }>(
+      (ctx, params) => {
+        runCounter += 1;
+        ctx.root.title.set(params.title);
+        return { runId: `run-${runCounter}` };
+      },
+      (ctx, _params, result) => {
+        reverts.push(result.runId);
+        ctx.root.title.set("One");
+      },
+    );
+
+    const useStore = create(
+      commander.middleware(
+        mimic(document, () => ({}), {
+          autoConnect: false,
+        }),
+      ),
+    );
+
+    const { result: dispatchResult } = renderHook(() => useCommander(useStore));
+    const { result: undoRedo } = renderHook(() => useUndoRedo(useStore));
+
+    act(() => {
+      dispatchResult.current(stamp)({ title: "Two" });
+    });
+    act(() => {
+      undoRedo.current.undo();
+    });
+    act(() => {
+      undoRedo.current.redo();
+    });
+    act(() => {
+      undoRedo.current.undo();
+    });
+
+    expect(reverts).toEqual(["run-1", "run-2"]);
+    expect(document.getSnapshot()).toEqual({
+      title: "One",
+      done: false,
+    });
+  });
+});
diff --git a/packages/mimic/tests/zustand/middleware.test.ts b/packages/mimic/tests/zustand/middleware.test.ts
new file mode 100644
index 000000000..788cf1789
--- /dev/null
+++ b/packages/mimic/tests/zustand/middleware.test.ts
@@ -0,0 +1,43 @@
+import { createStore } from "zustand/vanilla";
+import { describe, expect, it } from "vitest";
+
+import { createClientDocument } from "../../src/client/ClientDocument.js";
+import { mimic } from "../../src/zustand/middleware.js";
+import { FakeTransport, TestPrimitive, makeValue } from "../helpers.js";
+
+describe("zustand middleware", () => {
+  it("keeps the mimic slice in sync with document changes", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 1,
+    });
+
+    const store = createStore(
+      mimic(
+        document,
+        () => ({
+          local: true,
+        }),
+        { autoConnect: false },
+      ),
+    );
+
+    expect(store.getState().mimic.snapshot).toEqual({
+      title: "One",
+      done: false,
+    });
+
+    document.transaction((root) => {
+      root.title.set("Two");
+    });
+
+    expect(store.getState().mimic.snapshot).toEqual({
+      title: "Two",
+      done: false,
+    });
+    expect(store.getState().mimic.pendingCount).toBe(1);
+  });
+});
diff --git a/packages/mimic/tests/zustand/use-draft.test.tsx b/packages/mimic/tests/zustand/use-draft.test.tsx
new file mode 100644
index 000000000..05498ab62
--- /dev/null
+++ b/packages/mimic/tests/zustand/use-draft.test.tsx
@@ -0,0 +1,52 @@
+// @vitest-environment jsdom
+
+import { renderHook, act } from "@testing-library/react";
+import { createStore } from "zustand/vanilla";
+import { describe, expect, it } from "vitest";
+
+import { createClientDocument } from "../../src/client/ClientDocument.js";
+import { createCommander } from "../../src/zustand-commander/commander.js";
+import { mimic } from "../../src/zustand/middleware.js";
+import { useDraft } from "../../src/zustand/useDraft.js";
+import { FakeTransport, TestPrimitive, makeValue } from "../helpers.js";
+
+describe("useDraft", () => {
+  it("manages draft lifecycle through zustand", () => {
+    const transport = new FakeTransport();
+    const document = createClientDocument({
+      primitive: TestPrimitive,
+      transport,
+      initialValue: makeValue("One"),
+      initialVersion: 1,
+    });
+
+    const commander = createCommander<object, typeof TestPrimitive>();
+    const store = createStore(
+      commander.middleware(
+        mimic(document, () => ({}), {
+          autoConnect: false,
+        }),
+      ),
+    );
+
+    const { result } = renderHook(() => useDraft(store));
+
+    act(() => {
+      result.current.begin();
+    });
+    expect(store.getState()._commander.activeDraft).not.toBeNull();
+
+    act(() => {
+      store.getState()._commander.activeDraft?.update((root) => {
+        root.title.set("Draft");
+      });
+      result.current.commit();
+    });
+
+    expect(store.getState()._commander.activeDraft).toBeNull();
+    expect(document.getSnapshot()).toEqual({
+      title: "Draft",
+      done: false,
+    });
+  });
+});
diff --git a/packages/mimic/tsconfig.build.json b/packages/mimic/tsconfig.build.json
new file mode 100644
index 000000000..3bb6cf62e
--- /dev/null
+++ b/packages/mimic/tsconfig.build.json
@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "module": "Preserve",
+    "moduleResolution": "Bundler",
+    "lib": ["es2022", "dom", "dom.iterable"],
+    "target": "es2022",
+    "declaration": true,
+    "declarationMap": true,
+    "declarationDir": "dist",
+    "outDir": "./dist",
+    "strict": true,
+    "strictNullChecks": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "noPropertyAccessFromIndexSignature": true,
+    "noImplicitOverride": true,
+    "jsx": "react-jsx"
+  },
+  "include": ["src"],
+  "exclude": ["tests", "**/*.test.ts", "**/*.test.tsx", "__tests__"]
+}
diff --git a/packages/mimic/tsconfig.json b/packages/mimic/tsconfig.json
new file mode 100644
index 000000000..caa21308b
--- /dev/null
+++ b/packages/mimic/tsconfig.json
@@ -0,0 +1,10 @@
+{
+  "extends": "./tsconfig.build.json",
+  "include": ["src", "tests"],
+  "compilerOptions": {
+    "allowJs": false,
+    "allowImportingTsExtensions": true,
+    "rootDir": "./",
+    "noEmit": true
+  }
+}
diff --git a/packages/mimic/vitest.mts b/packages/mimic/vitest.mts
new file mode 100644
index 000000000..95ed46702
--- /dev/null
+++ b/packages/mimic/vitest.mts
@@ -0,0 +1,9 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    include: ["./tests/**/*.test.ts", "./tests/**/*.test.tsx"],
+    exclude: ["./node_modules/**"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 20e223d39..9f66b6c15 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -125,13 +125,13 @@ importers:
         version: 8.0.0
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)
 
   apps/cli:
     dependencies:
       '@better-auth/api-key':
         specifier: 'catalog:'
-        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
+        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
       '@effect/platform-node':
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -146,7 +146,7 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -168,7 +168,7 @@ importers:
         version: 0.64.1
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/react-native':
         specifier: workspace:*
         version: link:../../libraries/react-native
@@ -189,7 +189,7 @@ importers:
         version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   apps/studio:
     dependencies:
@@ -305,7 +305,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
+        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.6.1)
@@ -348,7 +348,7 @@ importers:
         version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/paywalls:
     dependencies:
@@ -385,7 +385,7 @@ importers:
         version: 5.6.3
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/react-native:
     dependencies:
@@ -404,10 +404,10 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
+        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
@@ -428,7 +428,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -446,13 +446,13 @@ importers:
         version: 5.9.3
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: 'catalog:'
         version: 5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^4.1.6
-        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   libraries/web:
     dependencies:
@@ -536,10 +536,10 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/generated-clients:
     dependencies:
@@ -571,10 +571,10 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/lib:
     dependencies:
@@ -589,6 +589,46 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
 
+  packages/mimic:
+    dependencies:
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../mimic-core
+    devDependencies:
+      '@testing-library/react':
+        specifier: ^16.3.0
+        version: 16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@types/react':
+        specifier: ^19.1.16
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: ^19.1.9
+        version: 19.2.3(@types/react@19.1.17)
+      jsdom:
+        specifier: ^26.1.0
+        version: 26.1.0
+      react:
+        specifier: 19.1.0
+        version: 19.1.0
+      react-dom:
+        specifier: 19.1.0
+        version: 19.1.0(react@19.1.0)
+      tsdown:
+        specifier: ^0.18.2
+        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
+      typescript:
+        specifier: 5.8.3
+        version: 5.8.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      zustand:
+        specifier: ^5.0.9
+        version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+
   packages/mimic-core:
     devDependencies:
       tsdown:
@@ -599,10 +639,32 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  packages/mimic-server:
+    dependencies:
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../mimic-core
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+    devDependencies:
+      tsdown:
+        specifier: ^0.18.2
+        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
+      typescript:
+        specifier: 5.8.3
+        version: 5.8.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/platform:
     devDependencies:
@@ -739,6 +801,9 @@ packages:
   '@antfu/utils@8.1.1':
     resolution: {integrity: sha512-Mex9nXf9vR6AhcXmMrlz/HVgYYZpVGJ6YlPgwl7UnaFpnshXs6EK/oa5Gpf3CzENMjkvEx2tQtntGnb7UtSTOQ==}
 
+  '@asamuzakjp/css-color@3.2.0':
+    resolution: {integrity: sha512-K1A6z8tS3XsmCMM86xoWdn7Fkdn9m6RSVtocUrJYIwZnFVkng/PvkEoWtOWmP+Scc6saYWHWZYbndEEXxl24jw==}
+
   '@babel/cli@7.28.3':
     resolution: {integrity: sha512-n1RU5vuCX0CsaqaXm9I0KUCNKNQMy5epmzl/xdSSm70bSqhg9GWhgeosypyQLc0bK24+Xpk1WGzZlI9pJtkZdg==}
     engines: {node: '>=6.9.0'}
@@ -1725,6 +1790,34 @@ packages:
   '@clack/prompts@0.11.0':
     resolution: {integrity: sha512-pMN5FcrEw9hUkZA4f+zLlzivQSeQf5dRGJjSUbvVYDLvpKCdQx5OaknvKzgbtXOizhP+SJJJjqEbOe55uKKfAw==}
 
+  '@csstools/color-helpers@5.1.0':
+    resolution: {integrity: sha512-S11EXWJyy0Mz5SYvRmY8nJYTFFd1LCNV+7cXyAgQtOOuzb4EsgfqDufL+9esx72/eLhsRdGZwaldu/h+E4t4BA==}
+    engines: {node: '>=18'}
+
+  '@csstools/css-calc@2.1.4':
+    resolution: {integrity: sha512-3N8oaj+0juUw/1H3YwmDDJXCgTB1gKU6Hc/bB502u9zR0q2vd786XJH9QfrKIEgFlZmhZiq6epXl4rHqhzsIgQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@csstools/css-parser-algorithms': ^3.0.5
+      '@csstools/css-tokenizer': ^3.0.4
+
+  '@csstools/css-color-parser@3.1.0':
+    resolution: {integrity: sha512-nbtKwh3a6xNVIp/VRuXV64yTKnb1IjTAEEh3irzS+HkKjAOYLTGNb9pmVNntZ8iVBHcWDA2Dof0QtPgFI1BaTA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@csstools/css-parser-algorithms': ^3.0.5
+      '@csstools/css-tokenizer': ^3.0.4
+
+  '@csstools/css-parser-algorithms@3.0.5':
+    resolution: {integrity: sha512-DaDeUkXZKjdGhgYaHNJTV9pV7Y9B3b644jCLs9Upc3VeNGg6LWARAT6O+Q+/COo+2gg/bM5rhpMAtf70WqfBdQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@csstools/css-tokenizer': ^3.0.4
+
+  '@csstools/css-tokenizer@3.0.4':
+    resolution: {integrity: sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==}
+    engines: {node: '>=18'}
+
   '@drizzle-team/brocli@0.10.2':
     resolution: {integrity: sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==}
 
@@ -4759,6 +4852,10 @@ packages:
     peerDependencies:
       vite: 7.3.5
 
+  '@testing-library/dom@10.4.1':
+    resolution: {integrity: sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==}
+    engines: {node: '>=18'}
+
   '@testing-library/react-native@13.3.3':
     resolution: {integrity: sha512-k6Mjsd9dbZgvY4Bl7P1NIpePQNi+dfYtlJ5voi9KQlynxSyQkfOgJmYGCYmw/aSgH/rUcFvG8u5gd4npzgRDyg==}
     engines: {node: '>=18'}
@@ -4771,6 +4868,21 @@ packages:
       jest:
         optional: true
 
+  '@testing-library/react@16.3.2':
+    resolution: {integrity: sha512-XU5/SytQM+ykqMnAnvB2umaJNIOsLF3PVv//1Ew4CTcpz0/BRyy/af40qqrt7SjKpDdT1saBMc42CUok5gaw+g==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@testing-library/dom': ^10.0.0
+      '@types/react': ^18.0.0 || ^19.0.0
+      '@types/react-dom': ^18.0.0 || ^19.0.0
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
   '@tootallnate/once@2.0.1':
     resolution: {integrity: sha512-HqmEUIGRJ5fSXchkVgR5F7qn48bDBzv0kWj/Kfu5e6uci4UlEeng4331LnBkWffb++Ei3FOVLxo8JJWMFBDMeQ==}
     engines: {node: '>= 10'}
@@ -4817,6 +4929,9 @@ packages:
   '@tybys/wasm-util@0.10.3':
     resolution: {integrity: sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==}
 
+  '@types/aria-query@5.0.4':
+    resolution: {integrity: sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==}
+
   '@types/babel__core@7.20.5':
     resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
 
@@ -5449,6 +5564,9 @@ packages:
     resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==}
     engines: {node: '>=10'}
 
+  aria-query@5.3.0:
+    resolution: {integrity: sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==}
+
   array-buffer-byte-length@1.0.2:
     resolution: {integrity: sha512-LHE+8BuR7RYGDKvnrmcuSq3tDcKv9OFEXQt/HpbZhY7V6h0zlUXutnAD82GiFx9rdieCMjkvtcsPqBwgUl1Iiw==}
     engines: {node: '>= 0.4'}
@@ -6016,6 +6134,10 @@ packages:
     resolution: {integrity: sha512-AZL67abkUzIuvcHqk7c09cezpGNcxUxU4Ioi/05xHk4DQeTkWmGYftIE6ctU6AEt+Gn4n1lDStOtj7FKycP71A==}
     engines: {node: '>=8'}
 
+  cssstyle@4.6.0:
+    resolution: {integrity: sha512-2z+rWdzbbSZv6/rhtvzvqeZQHrBaqgogqt85sqFNbabZOuFbCVFb8kPeEtZjiKkbrm395irpNKiYeFeLiQnFPg==}
+    engines: {node: '>=18'}
+
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
@@ -6067,6 +6189,10 @@ packages:
     resolution: {integrity: sha512-Jy/tj3ldjZJo63sVAvg6LHt2mHvl4V6AgRAmNDtLdm7faqtsx+aJG42rsyCo9JCoRVKwPFzKlIPx3DIibwSIaQ==}
     engines: {node: '>=12'}
 
+  data-urls@5.0.0:
+    resolution: {integrity: sha512-ZYP5VBHshaDAiVZxjbRVcFJpc+4xGgT0bK3vzy1HLN8jTO975HEbuYzZJcHoQEY5K1a0z8YayJkyVETa08eNTg==}
+    engines: {node: '>=18'}
+
   data-view-buffer@1.0.2:
     resolution: {integrity: sha512-EmKO5V3OLXh1rtK2wgXRansaK1/mtVdTUEiEI0W8RkvgT05kfxaH29PliLnpLP73yYO6142Q72QNa8Wx/A5CqQ==}
     engines: {node: '>= 0.4'}
@@ -6170,6 +6296,10 @@ packages:
     resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
     engines: {node: '>= 0.8'}
 
+  dequal@2.0.3:
+    resolution: {integrity: sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==}
+    engines: {node: '>=6'}
+
   destr@2.0.5:
     resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
 
@@ -6196,6 +6326,9 @@ packages:
     resolution: {integrity: sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==}
     engines: {node: '>=0.10.0'}
 
+  dom-accessibility-api@0.5.16:
+    resolution: {integrity: sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==}
+
   dom-helpers@5.2.1:
     resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
 
@@ -7101,6 +7234,10 @@ packages:
     resolution: {integrity: sha512-oWv4T4yJ52iKrufjnyZPkrN0CH3QnrUqdB6In1g5Fe1mia8GmF36gnfNySxoZtxD5+NmYw1EElVXiBk93UeskA==}
     engines: {node: '>=12'}
 
+  html-encoding-sniffer@4.0.0:
+    resolution: {integrity: sha512-Y22oTqIU4uuPgEemfz7NDJz6OeKf12Lsu+QC+s3BVpda64lTiMYCyGwg5ki4vFxkMwQdeZDl2adZoqUgdFuTgQ==}
+    engines: {node: '>=18'}
+
   html-escaper@2.0.2:
     resolution: {integrity: sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==}
 
@@ -7112,6 +7249,10 @@ packages:
     resolution: {integrity: sha512-n2hY8YdoRE1i7r6M0w9DIw5GgZN0G25P8zLCRQ8rjXtTU3vsNFBI/vWK/UIeE6g5MUUz6avwAPXmL6Fy9D/90w==}
     engines: {node: '>= 6'}
 
+  http-proxy-agent@7.0.2:
+    resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
+    engines: {node: '>= 14'}
+
   https-proxy-agent@5.0.1:
     resolution: {integrity: sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==}
     engines: {node: '>= 6'}
@@ -7591,6 +7732,15 @@ packages:
       canvas:
         optional: true
 
+  jsdom@26.1.0:
+    resolution: {integrity: sha512-Cvc9WUhxSMEo4McES3P7oK3QaXldCfNWp7pl2NNeiIFlCoLr3kfq9kb1fxftiwk1FLV7CvpvDfonxtzUDeSOPg==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      canvas: ^3.0.0
+    peerDependenciesMeta:
+      canvas:
+        optional: true
+
   jsesc@3.1.0:
     resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
     engines: {node: '>=6'}
@@ -7870,6 +8020,10 @@ packages:
     peerDependencies:
       react: 19.1.0
 
+  lz-string@1.5.0:
+    resolution: {integrity: sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==}
+    hasBin: true
+
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
@@ -8462,6 +8616,10 @@ packages:
     resolution: {integrity: sha512-FFw039TmrBqFK8ma/7OL3sDz/VytdtJr044/QUJtH0wK9lb9jLq9tJyIxUwtQJHwar2BqtiA4iCWSwo9JLkzFg==}
     engines: {node: '>=6'}
 
+  pretty-format@27.5.1:
+    resolution: {integrity: sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==}
+    engines: {node: ^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0}
+
   pretty-format@29.7.0:
     resolution: {integrity: sha512-Pdlw/oPxN+aXdmM9R00JVC9WVFoCLTKJvDVLgmJ+qAffBMxsV85l/Lu7sNx4zSzPyoL2euImuEwHhOXdEgNFZQ==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -8592,6 +8750,9 @@ packages:
   react-is@16.13.1:
     resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==}
 
+  react-is@17.0.2:
+    resolution: {integrity: sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==}
+
   react-is@18.3.1:
     resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==}
 
@@ -8905,6 +9066,9 @@ packages:
   rou3@0.7.12:
     resolution: {integrity: sha512-iFE4hLDuloSWcD7mjdCDhx2bKcIsYbtOTpfH5MHHLSKMOUyjqQXTeZVa289uuwEGEKFoE/BAPbhaU4B774nceg==}
 
+  rrweb-cssom@0.8.0:
+    resolution: {integrity: sha512-guoltQEx+9aMf2gDZ0s62EcV8lsXR+0w8915TC3ITdn2YueuNjdAYh/levpU9nFaoChh9RUS5ZdQMrKfVEN9tw==}
+
   rtl-detect@1.1.2:
     resolution: {integrity: sha512-PGMBq03+TTG/p/cRB7HCLKJ1MgDIi07+QU1faSjiYRfmY5UsAttV9Hs08jDAHVwcOwmVLcSJkpwyfXszVjWfIQ==}
 
@@ -9366,6 +9530,13 @@ packages:
     resolution: {integrity: sha512-azl+t0z7pw/z958Gy9svOTuzqIk6xq+NSheJzn5MMWtWTFywIacg2wUlzKFGtt3cthx0r2SxMK0yzJOR0IES7Q==}
     engines: {node: '>=14.0.0'}
 
+  tldts-core@6.1.86:
+    resolution: {integrity: sha512-Je6p7pkk+KMzMv2XXKmAE3McmolOQFdxkKw0R8EYNr7sELW46JqnNeTX8ybPiQgvg1ymCoF8LXs5fzFaZvJPTA==}
+
+  tldts@6.1.86:
+    resolution: {integrity: sha512-WMi/OQ2axVTf/ykqCQgXiIct+mSQDFdH2fkwhPwgEwvJ1kSzZRiinb0zF2Xb8u4+OqPChmyI6MEu4EezNJz+FQ==}
+    hasBin: true
+
   tmpl@1.0.5:
     resolution: {integrity: sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==}
 
@@ -9389,10 +9560,18 @@ packages:
     resolution: {integrity: sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==}
     engines: {node: '>=6'}
 
+  tough-cookie@5.1.2:
+    resolution: {integrity: sha512-FVDYdxtnj0G6Qm/DhNPSb8Ju59ULcup3tuJxkFb5K8Bv2pUXILbf0xZWU8PX8Ov19OXljbUyveOFwRMwkXzO+A==}
+    engines: {node: '>=16'}
+
   tr46@3.0.0:
     resolution: {integrity: sha512-l7FvfAHlcmulp8kr+flpQZmVwtu7nfRV7NZujtN0OqES8EL4O4e0qqzL0DC5gAvx/ZC/9lk6rhcUwYvkBnBnYA==}
     engines: {node: '>=12'}
 
+  tr46@5.1.1:
+    resolution: {integrity: sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==}
+    engines: {node: '>=18'}
+
   tree-kill@1.2.2:
     resolution: {integrity: sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==}
     hasBin: true
@@ -9860,6 +10039,10 @@ packages:
     resolution: {integrity: sha512-d+BFHzbiCx6zGfz0HyQ6Rg69w9k19nviJspaj4yNscGjrHu94sVP+aRm75yEbCh+r2/yR+7q6hux9LVtbuTGBw==}
     engines: {node: '>=14'}
 
+  w3c-xmlserializer@5.0.0:
+    resolution: {integrity: sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==}
+    engines: {node: '>=18'}
+
   walker@1.0.8:
     resolution: {integrity: sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==}
 
@@ -9882,6 +10065,11 @@ packages:
     engines: {node: '>=12'}
     deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation
 
+  whatwg-encoding@3.1.1:
+    resolution: {integrity: sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==}
+    engines: {node: '>=18'}
+    deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation
+
   whatwg-fetch@3.6.20:
     resolution: {integrity: sha512-EqhiFU6daOA8kpjOWTL0olhVOF3i7OrFzSYiGsEMB8GcXS+RrzauAERX65xMeNWVqxA6HXH2m69Z9LaKKdisfg==}
 
@@ -9889,6 +10077,10 @@ packages:
     resolution: {integrity: sha512-nt+N2dzIutVRxARx1nghPKGv1xHikU7HKdfafKkLNLindmPU/ch3U31NOCGGA/dmPcmb1VlofO0vnKAcsm0o/Q==}
     engines: {node: '>=12'}
 
+  whatwg-mimetype@4.0.0:
+    resolution: {integrity: sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==}
+    engines: {node: '>=18'}
+
   whatwg-url-without-unicode@8.0.0-3:
     resolution: {integrity: sha512-HoKuzZrUlgpz35YO27XgD28uh/WJH4B0+3ttFqRo//lmq+9T/mIOJ6kqmINI9HpUpz1imRC/nR/lxKpJiv0uig==}
     engines: {node: '>=10'}
@@ -9897,6 +10089,10 @@ packages:
     resolution: {integrity: sha512-RKT8HExMpoYx4igMiVMY83lN6UeITKJlBQ+vR/8ZJ8OCdSiN3RwCq+9gH0+Xzj0+5IrM6i4j/6LuvzbZIQgEcQ==}
     engines: {node: '>=12'}
 
+  whatwg-url@14.2.0:
+    resolution: {integrity: sha512-De72GdQZzNTUBBChsXueQUnPKDkg/5A5zp7pFDuQAj5UFoENpiACU0wlCvzpAGnTkj++ihpKwKyYewn/XNUbKw==}
+    engines: {node: '>=18'}
+
   which-boxed-primitive@1.1.1:
     resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
     engines: {node: '>= 0.4'}
@@ -9984,6 +10180,10 @@ packages:
     resolution: {integrity: sha512-ICP2e+jsHvAj2E2lIHxa5tjXRlKDJo4IdvPvCXbXQGdzSfmSpNVyIKMvoZHjDY9DP0zV17iI85o90vRFXNccRw==}
     engines: {node: '>=12'}
 
+  xml-name-validator@5.0.0:
+    resolution: {integrity: sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==}
+    engines: {node: '>=18'}
+
   xml2js@0.6.0:
     resolution: {integrity: sha512-eLTh0kA8uHceqesPqSE+VvO1CDDJWMwlQfB6LuN6T8w6MaDJ8Txm8P7s5cHD0miF0V+GGTZrDQfxPZQVsur33w==}
     engines: {node: '>=4.0.0'}
@@ -10035,6 +10235,24 @@ packages:
   zod@4.3.6:
     resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
 
+  zustand@5.0.14:
+    resolution: {integrity: sha512-/8tAspM5LMPr28b3fwLYrtdj77ECpfZviaP75CMTnwO8ISyaE4GDIG/9rDDYq/cH9D2Xw2A2RXglLInmVBQB/g==}
+    engines: {node: '>=12.20.0'}
+    peerDependencies:
+      '@types/react': '>=18.0.0'
+      immer: '>=9.0.6'
+      react: 19.1.0
+      use-sync-external-store: '>=1.2.0'
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      immer:
+        optional: true
+      react:
+        optional: true
+      use-sync-external-store:
+        optional: true
+
 snapshots:
 
   '@0no-co/graphql.web@1.2.0': {}
@@ -10043,6 +10261,14 @@ snapshots:
 
   '@antfu/utils@8.1.1': {}
 
+  '@asamuzakjp/css-color@3.2.0':
+    dependencies:
+      '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-color-parser': 3.1.0(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-tokenizer': 3.0.4
+      lru-cache: 10.4.3
+
   '@babel/cli@7.28.3(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
@@ -11109,11 +11335,11 @@ snapshots:
 
   '@bcoe/v8-coverage@0.2.3': {}
 
-  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
+  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
-      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       better-call: 1.3.7(zod@4.3.6)
       zod: 4.3.6
 
@@ -11216,6 +11442,26 @@ snapshots:
       picocolors: 1.1.1
       sisteransi: 1.0.5
 
+  '@csstools/color-helpers@5.1.0': {}
+
+  '@csstools/css-calc@2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
+    dependencies:
+      '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-tokenizer': 3.0.4
+
+  '@csstools/css-color-parser@3.1.0(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
+    dependencies:
+      '@csstools/color-helpers': 5.1.0
+      '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-tokenizer': 3.0.4
+
+  '@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4)':
+    dependencies:
+      '@csstools/css-tokenizer': 3.0.4
+
+  '@csstools/css-tokenizer@3.0.4': {}
+
   '@drizzle-team/brocli@0.10.2': {}
 
   '@effect/language-service@0.64.1': {}
@@ -11247,15 +11493,15 @@ snapshots:
       msgpackr: 1.11.8
       multipasta: 0.2.7
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   '@emnapi/core@1.10.0':
     dependencies:
@@ -11799,7 +12045,7 @@ snapshots:
       wrap-ansi: 7.0.0
       ws: 8.21.0
     optionalDependencies:
-      expo-router: 6.0.23(70ed454dc246c77d537ead71b0fe3992)
+      expo-router: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - bufferutil
@@ -14008,7 +14254,7 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
-  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
+  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
     dependencies:
       '@react-native/polyfills': 2.0.0
       esbuild: 0.27.7
@@ -14018,7 +14264,7 @@ snapshots:
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   '@standard-schema/spec@1.1.0': {}
 
@@ -14092,6 +14338,17 @@ snapshots:
       tailwindcss: 4.3.0
       vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  '@testing-library/dom@10.4.1':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/runtime': 7.29.7
+      '@types/aria-query': 5.0.4
+      aria-query: 5.3.0
+      dom-accessibility-api: 0.5.16
+      lz-string: 1.5.0
+      picocolors: 1.1.1
+      pretty-format: 27.5.1
+
   '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       jest-matcher-utils: 30.2.0
@@ -14117,6 +14374,16 @@ snapshots:
       jest: 29.7.0(@types/node@25.3.3)
     optional: true
 
+  '@testing-library/react@16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@testing-library/dom': 10.4.1
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@tootallnate/once@2.0.1': {}
 
   '@ts-morph/common@0.26.1':
@@ -14155,6 +14422,8 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
+  '@types/aria-query@5.0.4': {}
+
   '@types/babel__core@7.20.5':
     dependencies:
       '@babel/parser': 7.29.0
@@ -14647,7 +14916,7 @@ snapshots:
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
     optional: true
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -14666,7 +14935,7 @@ snapshots:
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
       '@types/node': 25.3.3
-      jsdom: 20.0.3
+      jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@tsdown/css'
@@ -14689,7 +14958,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -14708,7 +14977,7 @@ snapshots:
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
       '@types/node': 25.3.3
-      jsdom: 20.0.3
+      jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@tsdown/css'
@@ -14836,6 +15105,10 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
+  aria-query@5.3.0:
+    dependencies:
+      dequal: 2.0.3
+
   array-buffer-byte-length@1.0.2:
     dependencies:
       call-bound: 1.0.4
@@ -14961,7 +15234,7 @@ snapshots:
   babel-plugin-jest-hoist@29.6.3:
     dependencies:
       '@babel/template': 7.28.6
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
       '@types/babel__core': 7.20.5
       '@types/babel__traverse': 7.28.0
 
@@ -15134,7 +15407,7 @@ snapshots:
 
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
@@ -15158,7 +15431,7 @@ snapshots:
       mysql2: 3.16.0
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@cloudflare/workers-types'
       - '@opentelemetry/api'
@@ -15577,6 +15850,11 @@ snapshots:
     dependencies:
       cssom: 0.3.8
 
+  cssstyle@4.6.0:
+    dependencies:
+      '@asamuzakjp/css-color': 3.2.0
+      rrweb-cssom: 0.8.0
+
   csstype@3.2.3: {}
 
   d3-array@3.2.4:
@@ -15623,6 +15901,11 @@ snapshots:
       whatwg-mimetype: 3.0.0
       whatwg-url: 11.0.0
 
+  data-urls@5.0.0:
+    dependencies:
+      whatwg-mimetype: 4.0.0
+      whatwg-url: 14.2.0
+
   data-view-buffer@1.0.2:
     dependencies:
       call-bound: 1.0.4
@@ -15697,6 +15980,8 @@ snapshots:
 
   depd@2.0.0: {}
 
+  dequal@2.0.3: {}
+
   destr@2.0.5: {}
 
   destroy@1.2.0: {}
@@ -15713,9 +15998,11 @@ snapshots:
     dependencies:
       esutils: 2.0.3
 
+  dom-accessibility-api@0.5.16: {}
+
   dom-helpers@5.2.1:
     dependencies:
-      '@babel/runtime': 7.28.4
+      '@babel/runtime': 7.29.7
       csstype: 3.2.3
 
   dom-serializer@2.0.0:
@@ -16516,7 +16803,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.6)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
@@ -16527,7 +16814,7 @@ snapshots:
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
       eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3)
       glob: 13.0.0
@@ -16574,49 +16861,6 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  expo-router@6.0.23(70ed454dc246c77d537ead71b0fe3992):
-    dependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@expo/schema-utils': 0.1.8
-      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      client-only: 0.0.1
-      debug: 4.4.3
-      escape-string-regexp: 4.0.0
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
-      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-server: 1.0.5
-      fast-deep-equal: 3.1.3
-      invariant: 2.2.4
-      nanoid: 3.3.11
-      query-string: 7.1.3
-      react: 19.1.0
-      react-fast-compare: 3.2.2
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      semver: 7.6.3
-      server-only: 0.0.1
-      sf-symbols-typescript: 2.2.0
-      shallowequal: 1.1.0
-      use-latest-callback: 0.2.6(react@19.1.0)
-      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-    optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
-      react-dom: 19.1.1(react@19.1.0)
-      react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-    transitivePeerDependencies:
-      - '@react-native-masked-view/masked-view'
-      - '@types/react'
-      - '@types/react-dom'
-      - supports-color
-    optional: true
-
   expo-router@6.0.23(915cc1bcc1b7ce0da6289325fa4c723d):
     dependencies:
       '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -17013,6 +17257,10 @@ snapshots:
     dependencies:
       whatwg-encoding: 2.0.0
 
+  html-encoding-sniffer@4.0.0:
+    dependencies:
+      whatwg-encoding: 3.1.1
+
   html-escaper@2.0.2: {}
 
   http-errors@2.0.1:
@@ -17031,6 +17279,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  http-proxy-agent@7.0.2:
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
   https-proxy-agent@5.0.1:
     dependencies:
       agent-base: 6.0.2
@@ -17284,7 +17539,7 @@ snapshots:
   istanbul-lib-instrument@5.2.1:
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/parser': 7.29.0
+      '@babel/parser': 7.29.7
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-coverage: 3.2.2
       semver: 6.3.1
@@ -17830,6 +18085,33 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  jsdom@26.1.0:
+    dependencies:
+      cssstyle: 4.6.0
+      data-urls: 5.0.0
+      decimal.js: 10.6.0
+      html-encoding-sniffer: 4.0.0
+      http-proxy-agent: 7.0.2
+      https-proxy-agent: 7.0.6
+      is-potential-custom-element-name: 1.0.1
+      nwsapi: 2.2.23
+      parse5: 7.3.0
+      rrweb-cssom: 0.8.0
+      saxes: 6.0.0
+      symbol-tree: 3.2.4
+      tough-cookie: 5.1.2
+      w3c-xmlserializer: 5.0.0
+      webidl-conversions: 7.0.0
+      whatwg-encoding: 3.1.1
+      whatwg-mimetype: 4.0.0
+      whatwg-url: 14.2.0
+      ws: 8.21.0
+      xml-name-validator: 5.0.0
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
   jsesc@3.1.0: {}
 
   json-buffer@3.0.1: {}
@@ -18037,6 +18319,8 @@ snapshots:
     dependencies:
       react: 19.1.0
 
+  lz-string@1.5.0: {}
+
   magic-string@0.30.21:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -18552,7 +18836,7 @@ snapshots:
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -18575,9 +18859,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -18600,7 +18884,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   oxlint-tsgolint@0.23.0:
     optionalDependencies:
@@ -18611,7 +18895,7 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -18633,9 +18917,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -18657,7 +18941,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   p-limit@2.3.0:
     dependencies:
@@ -18800,6 +19084,12 @@ snapshots:
 
   pretty-bytes@5.6.0: {}
 
+  pretty-format@27.5.1:
+    dependencies:
+      ansi-regex: 5.0.1
+      ansi-styles: 5.2.0
+      react-is: 17.0.2
+
   pretty-format@29.7.0:
     dependencies:
       '@jest/schemas': 29.6.3
@@ -18980,6 +19270,8 @@ snapshots:
 
   react-is@16.13.1: {}
 
+  react-is@17.0.2: {}
+
   react-is@18.3.1: {}
 
   react-is@19.2.3: {}
@@ -19147,7 +19439,7 @@ snapshots:
 
   react-transition-group@4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@babel/runtime': 7.28.4
+      '@babel/runtime': 7.29.7
       dom-helpers: 5.2.1
       loose-envify: 1.4.0
       prop-types: 15.8.1
@@ -19394,6 +19686,8 @@ snapshots:
 
   rou3@0.7.12: {}
 
+  rrweb-cssom@0.8.0: {}
+
   rtl-detect@1.1.2: {}
 
   run-parallel@1.2.0:
@@ -19863,6 +20157,12 @@ snapshots:
 
   tinyspy@4.0.4: {}
 
+  tldts-core@6.1.86: {}
+
+  tldts@6.1.86:
+    dependencies:
+      tldts-core: 6.1.86
+
   tmpl@1.0.5: {}
 
   to-regex-range@5.0.1:
@@ -19882,10 +20182,18 @@ snapshots:
       universalify: 0.2.0
       url-parse: 1.5.10
 
+  tough-cookie@5.1.2:
+    dependencies:
+      tldts: 6.1.86
+
   tr46@3.0.0:
     dependencies:
       punycode: 2.3.1
 
+  tr46@5.1.1:
+    dependencies:
+      punycode: 2.3.1
+
   tree-kill@1.2.2: {}
 
   ts-api-utils@2.1.0(typescript@5.9.3):
@@ -20075,13 +20383,13 @@ snapshots:
 
   ufo@1.6.4: {}
 
-  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@clack/prompts': 0.11.0
       commander: 14.0.2
       deepmerge: 4.3.1
       jsonc-parser: 3.3.1
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@edge-runtime/vm'
       - '@types/debug'
@@ -20103,13 +20411,13 @@ snapshots:
       - tsx
       - yaml
 
-  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3):
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0):
     dependencies:
       '@clack/prompts': 0.11.0
       commander: 14.0.2
       deepmerge: 4.3.1
       jsonc-parser: 3.3.1
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)
     transitivePeerDependencies:
       - '@edge-runtime/vm'
       - '@types/debug'
@@ -20365,14 +20673,14 @@ snapshots:
       - tsx
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -20415,14 +20723,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@20.0.3)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -20521,7 +20829,7 @@ snapshots:
       tsx: 4.21.0
       yaml: 2.8.3
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
@@ -20549,7 +20857,7 @@ snapshots:
     optionalDependencies:
       '@types/debug': 4.1.12
       '@types/node': 24.10.4
-      jsdom: 20.0.3
+      jsdom: 26.1.0
     transitivePeerDependencies:
       - jiti
       - less
@@ -20564,7 +20872,7 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@20.0.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
@@ -20592,7 +20900,7 @@ snapshots:
     optionalDependencies:
       '@types/debug': 4.1.12
       '@types/node': 24.10.4
-      jsdom: 20.0.3
+      jsdom: 26.1.0
     transitivePeerDependencies:
       - jiti
       - less
@@ -20650,7 +20958,50 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@20.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      '@types/chai': 5.2.3
+      '@vitest/expect': 3.2.7
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/pretty-format': 3.2.7
+      '@vitest/runner': 3.2.7
+      '@vitest/snapshot': 3.2.7
+      '@vitest/spy': 3.2.7
+      '@vitest/utils': 3.2.7
+      chai: 5.3.3
+      debug: 4.4.3
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      std-env: 3.10.0
+      tinybench: 2.9.0
+      tinyexec: 0.3.2
+      tinyglobby: 0.2.15
+      tinypool: 1.1.1
+      tinyrainbow: 2.0.0
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      why-is-node-running: 2.3.0
+    optionalDependencies:
+      '@types/debug': 4.1.12
+      '@types/node': 25.3.3
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - jiti
+      - less
+      - lightningcss
+      - msw
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
+  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@vitest/expect': 4.1.6
       '@vitest/mocker': 4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -20675,7 +21026,7 @@ snapshots:
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
       '@types/node': 24.10.4
-      jsdom: 20.0.3
+      jsdom: 26.1.0
     transitivePeerDependencies:
       - msw
 
@@ -20687,6 +21038,10 @@ snapshots:
     dependencies:
       xml-name-validator: 4.0.0
 
+  w3c-xmlserializer@5.0.0:
+    dependencies:
+      xml-name-validator: 5.0.0
+
   walker@1.0.8:
     dependencies:
       makeerror: 1.0.12
@@ -20705,10 +21060,16 @@ snapshots:
     dependencies:
       iconv-lite: 0.6.3
 
+  whatwg-encoding@3.1.1:
+    dependencies:
+      iconv-lite: 0.6.3
+
   whatwg-fetch@3.6.20: {}
 
   whatwg-mimetype@3.0.0: {}
 
+  whatwg-mimetype@4.0.0: {}
+
   whatwg-url-without-unicode@8.0.0-3:
     dependencies:
       buffer: 5.7.1
@@ -20720,6 +21081,11 @@ snapshots:
       tr46: 3.0.0
       webidl-conversions: 7.0.0
 
+  whatwg-url@14.2.0:
+    dependencies:
+      tr46: 5.1.1
+      webidl-conversions: 7.0.0
+
   which-boxed-primitive@1.1.1:
     dependencies:
       is-bigint: 1.1.0
@@ -20802,6 +21168,8 @@ snapshots:
 
   xml-name-validator@4.0.0: {}
 
+  xml-name-validator@5.0.0: {}
+
   xml2js@0.6.0:
     dependencies:
       sax: 1.4.3
@@ -20838,3 +21206,9 @@ snapshots:
   yocto-queue@0.1.0: {}
 
   zod@4.3.6: {}
+
+  zustand@5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0)):
+    optionalDependencies:
+      '@types/react': 19.1.17
+      react: 19.1.0
+      use-sync-external-store: 1.6.0(react@19.1.0)

From 7af6941d945239c01f01a7854c4ae59b035cfe37 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 19:07:22 +0200
Subject: [PATCH 052/129] feat(mimic): publish schema package

---
 packages/mimic-schema/LICENSE.md              | 661 ++++++++++++++++++
 packages/mimic-schema/README.md               |  18 +
 packages/mimic-schema/package.json            |  33 +
 .../component-bindings/component-bindings.ts  | 129 ++++
 .../src/component-bindings/index.ts           |   9 +
 .../src/component-bindings/types.ts           |  35 +
 packages/mimic-schema/src/document.test.ts    | 129 ++++
 packages/mimic-schema/src/document.ts         |  28 +
 packages/mimic-schema/src/index.ts            |  16 +
 .../mimic-schema/src/interactions/index.ts    |  16 +
 .../src/interactions/interactions.ts          | 151 ++++
 .../mimic-schema/src/interactions/types.ts    |  49 ++
 packages/mimic-schema/src/locales/entry.ts    |  21 +
 packages/mimic-schema/src/locales/index.ts    |   5 +
 .../src/locales/locale-tag.test.ts            |  25 +
 .../mimic-schema/src/locales/locale-tag.ts    |  22 +
 .../src/locales/migration.test.ts             | 111 +++
 .../mimic-schema/src/locales/resolve.test.ts  | 229 ++++++
 packages/mimic-schema/src/locales/resolve.ts  | 174 +++++
 .../mimic-schema/src/locales/slots.test.ts    | 149 ++++
 packages/mimic-schema/src/locales/slots.ts    | 118 ++++
 packages/mimic-schema/src/locales/types.ts    | 120 ++++
 packages/mimic-schema/src/nodes/base.ts       |  16 +
 .../src/nodes/code-component-node.ts          |  27 +
 .../src/nodes/component-node.test.ts          | 291 ++++++++
 .../mimic-schema/src/nodes/component-node.ts  |  81 +++
 packages/mimic-schema/src/nodes/index.ts      |  60 ++
 .../mimic-schema/src/nodes/library-node.ts    |  16 +
 .../src/nodes/node-catalog.test.ts            | 155 ++++
 .../mimic-schema/src/nodes/node-catalog.ts    |  90 +++
 packages/mimic-schema/src/nodes/path-node.ts  |  63 ++
 packages/mimic-schema/src/nodes/root-node.ts  |  32 +
 .../mimic-schema/src/nodes/screen-node.ts     | 155 ++++
 .../src/nodes/scrollview-node.test.ts         | 167 +++++
 .../mimic-schema/src/nodes/scrollview-node.ts | 203 ++++++
 packages/mimic-schema/src/nodes/shape-node.ts |  92 +++
 packages/mimic-schema/src/nodes/text-node.ts  | 133 ++++
 packages/mimic-schema/src/nodes/view-node.ts  | 183 +++++
 packages/mimic-schema/src/presence.ts         |  24 +
 packages/mimic-schema/src/reconcile/index.ts  |   1 +
 .../src/reconcile/reconcile.test.ts           | Bin 0 -> 14195 bytes
 .../mimic-schema/src/reconcile/reconcile.ts   | 384 ++++++++++
 packages/mimic-schema/src/states/index.ts     |   2 +
 .../mimic-schema/src/states/states.test.ts    | 133 ++++
 packages/mimic-schema/src/states/states.ts    | 116 +++
 packages/mimic-schema/src/states/types.ts     |  21 +
 .../src/styles/background.test.ts             | 139 ++++
 packages/mimic-schema/src/styles/index.ts     |   2 +
 .../mimic-schema/src/styles/properties.ts     | 235 +++++++
 packages/mimic-schema/src/styles/types.ts     |  37 +
 .../mimic-schema/src/utils/svg-parser.test.ts | 105 +++
 packages/mimic-schema/src/utils/svg-parser.ts | 522 ++++++++++++++
 packages/mimic-schema/src/variables/index.ts  |  21 +
 packages/mimic-schema/src/variables/types.ts  |  30 +
 .../mimic-schema/src/variables/variables.ts   |  44 ++
 packages/mimic-schema/tsconfig.json           |   8 +
 packages/mimic-schema/vitest.mts              |  11 +
 pnpm-lock.yaml                                | 302 ++++++++
 58 files changed, 6149 insertions(+)
 create mode 100644 packages/mimic-schema/LICENSE.md
 create mode 100644 packages/mimic-schema/README.md
 create mode 100644 packages/mimic-schema/package.json
 create mode 100644 packages/mimic-schema/src/component-bindings/component-bindings.ts
 create mode 100644 packages/mimic-schema/src/component-bindings/index.ts
 create mode 100644 packages/mimic-schema/src/component-bindings/types.ts
 create mode 100644 packages/mimic-schema/src/document.test.ts
 create mode 100644 packages/mimic-schema/src/document.ts
 create mode 100644 packages/mimic-schema/src/index.ts
 create mode 100644 packages/mimic-schema/src/interactions/index.ts
 create mode 100644 packages/mimic-schema/src/interactions/interactions.ts
 create mode 100644 packages/mimic-schema/src/interactions/types.ts
 create mode 100644 packages/mimic-schema/src/locales/entry.ts
 create mode 100644 packages/mimic-schema/src/locales/index.ts
 create mode 100644 packages/mimic-schema/src/locales/locale-tag.test.ts
 create mode 100644 packages/mimic-schema/src/locales/locale-tag.ts
 create mode 100644 packages/mimic-schema/src/locales/migration.test.ts
 create mode 100644 packages/mimic-schema/src/locales/resolve.test.ts
 create mode 100644 packages/mimic-schema/src/locales/resolve.ts
 create mode 100644 packages/mimic-schema/src/locales/slots.test.ts
 create mode 100644 packages/mimic-schema/src/locales/slots.ts
 create mode 100644 packages/mimic-schema/src/locales/types.ts
 create mode 100644 packages/mimic-schema/src/nodes/base.ts
 create mode 100644 packages/mimic-schema/src/nodes/code-component-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/component-node.test.ts
 create mode 100644 packages/mimic-schema/src/nodes/component-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/index.ts
 create mode 100644 packages/mimic-schema/src/nodes/library-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/node-catalog.test.ts
 create mode 100644 packages/mimic-schema/src/nodes/node-catalog.ts
 create mode 100644 packages/mimic-schema/src/nodes/path-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/root-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/screen-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/scrollview-node.test.ts
 create mode 100644 packages/mimic-schema/src/nodes/scrollview-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/shape-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/text-node.ts
 create mode 100644 packages/mimic-schema/src/nodes/view-node.ts
 create mode 100644 packages/mimic-schema/src/presence.ts
 create mode 100644 packages/mimic-schema/src/reconcile/index.ts
 create mode 100644 packages/mimic-schema/src/reconcile/reconcile.test.ts
 create mode 100644 packages/mimic-schema/src/reconcile/reconcile.ts
 create mode 100644 packages/mimic-schema/src/states/index.ts
 create mode 100644 packages/mimic-schema/src/states/states.test.ts
 create mode 100644 packages/mimic-schema/src/states/states.ts
 create mode 100644 packages/mimic-schema/src/states/types.ts
 create mode 100644 packages/mimic-schema/src/styles/background.test.ts
 create mode 100644 packages/mimic-schema/src/styles/index.ts
 create mode 100644 packages/mimic-schema/src/styles/properties.ts
 create mode 100644 packages/mimic-schema/src/styles/types.ts
 create mode 100644 packages/mimic-schema/src/utils/svg-parser.test.ts
 create mode 100644 packages/mimic-schema/src/utils/svg-parser.ts
 create mode 100644 packages/mimic-schema/src/variables/index.ts
 create mode 100644 packages/mimic-schema/src/variables/types.ts
 create mode 100644 packages/mimic-schema/src/variables/variables.ts
 create mode 100644 packages/mimic-schema/tsconfig.json
 create mode 100644 packages/mimic-schema/vitest.mts

diff --git a/packages/mimic-schema/LICENSE.md b/packages/mimic-schema/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/mimic-schema/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/mimic-schema/README.md b/packages/mimic-schema/README.md
new file mode 100644
index 000000000..6db7368bc
--- /dev/null
+++ b/packages/mimic-schema/README.md
@@ -0,0 +1,18 @@
+# @voidhash/mimic-schema
+
+The shared document schema for the Voidhash paywall designer and renderers.
+
+It defines the Mimic primitives for document nodes, styles, variables, states, interactions, localization, component bindings, presence, and document reconciliation.
+
+## Usage
+
+```typescript
+import {
+  PaywallDesignerDocument,
+  ScreenNode,
+  TextNode,
+  reconcile,
+} from "@voidhash/mimic-schema";
+```
+
+The package is runtime-agnostic and depends only on `@voidhash/mimic-core`.
diff --git a/packages/mimic-schema/package.json b/packages/mimic-schema/package.json
new file mode 100644
index 000000000..db783d36a
--- /dev/null
+++ b/packages/mimic-schema/package.json
@@ -0,0 +1,33 @@
+{
+  "name": "@voidhash/mimic-schema",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/mimic-schema"
+  },
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vp test run -c vitest.mts"
+  },
+  "dependencies": {
+    "@voidhash/mimic-core": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "@voidhash/mimic": "workspace:*",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "6.0.3",
+    "vite-plus": "0.1.23",
+    "vite-tsconfig-paths": "^5.1.4",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/mimic-schema/src/component-bindings/component-bindings.ts b/packages/mimic-schema/src/component-bindings/component-bindings.ts
new file mode 100644
index 000000000..7bbd3a141
--- /dev/null
+++ b/packages/mimic-schema/src/component-bindings/component-bindings.ts
@@ -0,0 +1,129 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { actionValueSchema } from "../interactions/interactions.ts";
+import { variableReferenceSchema } from "../variables/variables.ts";
+
+/**
+ * Literal value stored for a component prop binding.
+ * Scalar keys mirror the variable type system (`select`/`image` manifest kinds
+ * collapse to `string`); the `*-array` variants cover manifest `array` prop
+ * kinds with scalar items.
+ */
+export const componentPropValueSchema = Primitive.Union(
+  {
+    boolean: Primitive.Struct({
+      key: Primitive.Literal("boolean").required(),
+      value: Primitive.Boolean().required(),
+    }),
+    "boolean-array": Primitive.Struct({
+      key: Primitive.Literal("boolean-array").required(),
+      value: Primitive.Array(Primitive.Boolean()).required(),
+    }),
+    number: Primitive.Struct({
+      key: Primitive.Literal("number").required(),
+      value: Primitive.Number().required(),
+    }),
+    "number-array": Primitive.Struct({
+      key: Primitive.Literal("number-array").required(),
+      value: Primitive.Array(Primitive.Number()).required(),
+    }),
+    product: Primitive.Struct({
+      key: Primitive.Literal("product").required(),
+      value: Primitive.Struct({
+        // Optional string — absence means "no product selected" (the former null)
+        productId: Primitive.String(),
+      }).required(),
+    }),
+    string: Primitive.Struct({
+      key: Primitive.Literal("string").required(),
+      value: Primitive.String().required(),
+    }),
+    "string-array": Primitive.Struct({
+      key: Primitive.Literal("string-array").required(),
+      value: Primitive.Array(Primitive.String()).required(),
+    }),
+  },
+  { discriminator: "key" },
+);
+
+/**
+ * Binding stored for a component prop — either a literal value or a reference
+ * to a variable declared on the node or one of its ancestors.
+ */
+export const componentPropBindingSchema = Primitive.Union({
+  literal: Primitive.Struct({
+    type: Primitive.Literal("literal").required(),
+    value: componentPropValueSchema.required(),
+  }),
+  "variable-reference": Primitive.Struct({
+    type: Primitive.Literal("variable-reference").required(),
+    value: variableReferenceSchema.required(),
+  }),
+});
+
+/**
+ * Source of a value used by a component bound action. Mirrors
+ * `actionValueSourceSchema` plus the `action-payload` variant, which reads a
+ * field of the payload emitted by the component action at runtime.
+ */
+export const componentActionValueSourceSchema = Primitive.Union({
+  "action-payload": Primitive.Struct({
+    type: Primitive.Literal("action-payload").required(),
+    value: Primitive.Struct({
+      field: Primitive.String().required(),
+    }).required(),
+  }),
+  literal: Primitive.Struct({
+    type: Primitive.Literal("literal").required(),
+    value: actionValueSchema.required(),
+  }),
+  "variable-reference": Primitive.Struct({
+    type: Primitive.Literal("variable-reference").required(),
+    value: Primitive.Struct({
+      id: Primitive.String().required(),
+    }).required(),
+  }),
+});
+
+/**
+ * Source for the product purchased by a component bound `purchase-product`
+ * action. Mirrors `productSourceSchema` plus the `action-payload` variant.
+ */
+export const componentProductSourceSchema = Primitive.Union({
+  "action-payload": Primitive.Struct({
+    type: Primitive.Literal("action-payload").required(),
+    field: Primitive.String().required(),
+  }),
+  literal: Primitive.Struct({
+    type: Primitive.Literal("literal").required(),
+    productId: Primitive.String().required(),
+  }),
+  "variable-reference": Primitive.Struct({
+    type: Primitive.Literal("variable-reference").required(),
+    variableId: Primitive.String().required(),
+  }),
+});
+
+/**
+ * Action bound to a named component action. Mirrors `actionSchema`, with
+ * value sources extended to support the component's emitted action payload.
+ */
+export const componentBoundActionSchema = Primitive.Union({
+  "close-paywall": Primitive.Struct({
+    type: Primitive.Literal("close-paywall").required(),
+  }),
+  none: Primitive.Struct({
+    type: Primitive.Literal("none").required(),
+  }),
+  "purchase-product": Primitive.Struct({
+    type: Primitive.Literal("purchase-product").required(),
+    payload: componentProductSourceSchema.required(),
+  }),
+  "set-variable": Primitive.Struct({
+    type: Primitive.Literal("set-variable").required(),
+    payload: Primitive.Struct({
+      variableId: Primitive.String().required(),
+      newValue: componentActionValueSourceSchema.required(),
+    }).required(),
+  }),
+});
diff --git a/packages/mimic-schema/src/component-bindings/index.ts b/packages/mimic-schema/src/component-bindings/index.ts
new file mode 100644
index 000000000..391c761bc
--- /dev/null
+++ b/packages/mimic-schema/src/component-bindings/index.ts
@@ -0,0 +1,9 @@
+export type * from "./types.ts";
+
+export {
+  componentActionValueSourceSchema,
+  componentBoundActionSchema,
+  componentProductSourceSchema,
+  componentPropBindingSchema,
+  componentPropValueSchema,
+} from "./component-bindings.ts";
diff --git a/packages/mimic-schema/src/component-bindings/types.ts b/packages/mimic-schema/src/component-bindings/types.ts
new file mode 100644
index 000000000..a81d57fa5
--- /dev/null
+++ b/packages/mimic-schema/src/component-bindings/types.ts
@@ -0,0 +1,35 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type {
+  componentActionValueSourceSchema,
+  componentBoundActionSchema,
+  componentProductSourceSchema,
+  componentPropBindingSchema,
+  componentPropValueSchema,
+} from "./component-bindings.ts";
+
+// Prop value types
+export type ComponentPropValue = NonNullable<
+  Primitive.InferSnapshot<typeof componentPropValueSchema>
+>;
+
+// Prop binding types
+export type ComponentPropBinding = NonNullable<
+  Primitive.InferSnapshot<typeof componentPropBindingSchema>
+>;
+
+// Action value source types
+export type ComponentActionValueSource = NonNullable<
+  Primitive.InferSnapshot<typeof componentActionValueSourceSchema>
+>;
+
+// Product source types
+export type ComponentProductSource = NonNullable<
+  Primitive.InferSnapshot<typeof componentProductSourceSchema>
+>;
+
+// Bound action types
+export type ComponentBoundAction = NonNullable<
+  Primitive.InferSnapshot<typeof componentBoundActionSchema>
+>;
+export type ComponentBoundActionType = ComponentBoundAction["type"];
diff --git a/packages/mimic-schema/src/document.test.ts b/packages/mimic-schema/src/document.test.ts
new file mode 100644
index 000000000..aabd208e9
--- /dev/null
+++ b/packages/mimic-schema/src/document.test.ts
@@ -0,0 +1,129 @@
+import { parseSchema, serializeSchema, validate } from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+import { expectTypeOf } from "vitest";
+
+import { createInitialPaywallDocumentInput, PaywallDesignerDocument } from "./document.ts";
+import type {
+  CodeComponentNodeData,
+  ComponentNodeData,
+  LibraryNodeData,
+  ScreenNodeData,
+  ViewNodeData,
+} from "./nodes/index.ts";
+
+describe("PaywallDesignerDocument", () => {
+  test("encodes the initial document input", () => {
+    const value = PaywallDesignerDocument.encode(createInitialPaywallDocumentInput());
+    expect(value.kind).toBe("tree");
+
+    const validated = validate(PaywallDesignerDocument.schema, value);
+    expect(validated).toBeDefined();
+
+    const roots = PaywallDesignerDocument.decode(validated);
+    expect(roots).toHaveLength(1);
+    const root = roots![0]!;
+    expect(root.type).toBe("root");
+    expect(root.parentId).toBeNull();
+    expect(root.data.name).toBe("Paywall");
+    expect(root.children).toHaveLength(1);
+    // `root.children` is a merged `screen | library` snapshot type (not a
+    // discriminated union), so cast to the concrete variant to read `data`.
+    const screen = root.children[0]! as ScreenNodeData;
+    expect(screen.type).toBe("screen");
+    expect(screen.data.name).toBe("Screen");
+    expect(screen.data.style.width).toBe(375);
+    expect(screen.children).toEqual([]);
+  });
+
+  test("default-fills componentSource on catalog component nodes (additive migration)", () => {
+    // A component node authored before the local/catalog discriminator existed
+    // omits `componentSource`/`componentPath`; they must default-fill so old
+    // stored documents reconcile onto the new schema without a data migration.
+    const value = PaywallDesignerDocument.encode([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          {
+            type: "screen",
+            children: [
+              { type: "component", componentSlug: "hero", componentVersion: 3, contentHash: "abc" },
+            ],
+          },
+        ],
+      },
+    ]);
+
+    const validated = validate(PaywallDesignerDocument.schema, value);
+    const roots = PaywallDesignerDocument.decode(validated);
+    const screen = roots![0]!.children[0]! as ScreenNodeData;
+    expect(screen.type).toBe("screen");
+    const component = screen.children[0]! as ComponentNodeData;
+    expect(component.type).toBe("component");
+    expect(component.data.componentSource).toBe("catalog");
+    expect(component.data.componentPath).toBe("");
+    expect(component.data.contentHash).toBe("abc");
+  });
+
+  test("accepts a library node holding code-component definitions", () => {
+    const value = PaywallDesignerDocument.encode([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          { type: "screen" },
+          {
+            type: "library",
+            children: [
+              { type: "codeComponent", path: "components/product-option.tsx", source: "" },
+            ],
+          },
+        ],
+      },
+    ]);
+
+    const roots = PaywallDesignerDocument.decode(validate(PaywallDesignerDocument.schema, value));
+    const library = roots![0]!.children.find((child) => child.type === "library") as
+      | LibraryNodeData
+      | undefined;
+    expect(library).toBeDefined();
+    const definition = library!.children[0]! as CodeComponentNodeData;
+    expect(definition.type).toBe("codeComponent");
+    expect(definition.data.path).toBe("components/product-option.tsx");
+    expect(definition.data.source).toBe("");
+  });
+
+  test("document schema round-trips through serializeSchema/parseSchema", () => {
+    const serialized = serializeSchema(PaywallDesignerDocument.schema);
+    expect(serialized["kind"]).toBe("tree");
+
+    expect(serializeSchema(parseSchema(serialized))).toEqual(serialized);
+
+    // The provisioning path stores the schema as JSON text — prove the
+    // serialized form survives a JSON round-trip and still parses.
+    const jsonRoundTripped: unknown = JSON.parse(JSON.stringify(serialized));
+    expect(serializeSchema(parseSchema(jsonRoundTripped))).toEqual(serialized);
+  });
+
+  test("pins snapshot value shapes at the type level", () => {
+    type ViewStyle = ViewNodeData["data"]["style"];
+
+    expectTypeOf<ViewStyle["width"]>().toEqualTypeOf<number | "auto">();
+    expectTypeOf<ViewStyle["height"]>().toEqualTypeOf<number | "auto">();
+    expectTypeOf<ViewStyle["minWidth"]>().toEqualTypeOf<number | undefined>();
+    expectTypeOf<ViewStyle["flex"]>().toEqualTypeOf<number | undefined>();
+
+    // `node.data` is non-optional on every tree-node snapshot.
+    expectTypeOf<undefined extends ViewNodeData["data"] ? true : false>().toEqualTypeOf<false>();
+    expectTypeOf<
+      undefined extends ComponentNodeData["data"] ? true : false
+    >().toEqualTypeOf<false>();
+
+    expectTypeOf<ComponentNodeData["data"]["componentPath"]>().toEqualTypeOf<string>();
+    expectTypeOf<ComponentNodeData["data"]["componentSlug"]>().toEqualTypeOf<string>();
+    expectTypeOf<ComponentNodeData["data"]["componentVersion"]>().toEqualTypeOf<number>();
+    expectTypeOf<ComponentNodeData["data"]["contentHash"]>().toEqualTypeOf<string>();
+    expectTypeOf<ComponentNodeData["data"]["name"]>().toEqualTypeOf<string>();
+    expectTypeOf<ComponentNodeData["data"]["previewState"]>().toEqualTypeOf<string>();
+  });
+});
diff --git a/packages/mimic-schema/src/document.ts b/packages/mimic-schema/src/document.ts
new file mode 100644
index 000000000..315463e6a
--- /dev/null
+++ b/packages/mimic-schema/src/document.ts
@@ -0,0 +1,28 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { RootNode } from "./nodes/index.ts";
+
+export const PaywallDesignerDocument = Primitive.Tree({
+  root: RootNode,
+});
+
+/** Encode/insert input for the document tree — an explicit array of root nodes. */
+export type PaywallDesignerDocumentInput = NonNullable<
+  Primitive.InferInput<typeof PaywallDesignerDocument>
+>;
+
+/**
+ * Initial content for a freshly provisioned paywall document: a single
+ * "Paywall" root containing one default screen. The engine never auto-creates
+ * roots, so every new document must be seeded with this input (server-side
+ * provisioning and client bootstrap of genuinely empty documents).
+ */
+export function createInitialPaywallDocumentInput(): PaywallDesignerDocumentInput {
+  return [
+    {
+      type: "root",
+      name: "Paywall",
+      children: [{ type: "screen" }],
+    },
+  ];
+}
diff --git a/packages/mimic-schema/src/index.ts b/packages/mimic-schema/src/index.ts
new file mode 100644
index 000000000..2b2908b25
--- /dev/null
+++ b/packages/mimic-schema/src/index.ts
@@ -0,0 +1,16 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+/** Ordered-array entry (`{id, pos, value}`) re-exported under the legacy name. */
+export type ArrayEntry<T> = Primitive.ArrayEntrySnapshot<T>;
+
+export * from "./component-bindings/index.ts";
+export * from "./document.ts";
+export * from "./interactions/index.ts";
+export * from "./locales/index.ts";
+export * from "./nodes/index.ts";
+export * from "./presence.ts";
+export * from "./reconcile/index.ts";
+export * from "./states/index.ts";
+export * from "./styles/index.ts";
+export * from "./utils/svg-parser.ts";
+export * from "./variables/index.ts";
diff --git a/packages/mimic-schema/src/interactions/index.ts b/packages/mimic-schema/src/interactions/index.ts
new file mode 100644
index 000000000..52ecbcfaf
--- /dev/null
+++ b/packages/mimic-schema/src/interactions/index.ts
@@ -0,0 +1,16 @@
+export type * from "./types.ts";
+
+export {
+  actionSchema,
+  actionValueSchema,
+  actionValueSourceSchema,
+  clickTriggerSchema,
+  closePaywallActionSchema,
+  interactionSchema,
+  interactionsSchema,
+  noneActionSchema,
+  productSourceSchema,
+  purchaseProductActionSchema,
+  setVariableActionSchema,
+  triggerSchema,
+} from "./interactions.ts";
diff --git a/packages/mimic-schema/src/interactions/interactions.ts b/packages/mimic-schema/src/interactions/interactions.ts
new file mode 100644
index 000000000..1d3785b21
--- /dev/null
+++ b/packages/mimic-schema/src/interactions/interactions.ts
@@ -0,0 +1,151 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+// =============================================================================
+// Triggers
+// =============================================================================
+
+/**
+ * Click trigger - fires when the element is clicked/tapped.
+ * Simple trigger with no configuration needed.
+ */
+export const clickTriggerSchema = Primitive.Struct({
+  type: Primitive.Literal("click").required(),
+});
+
+/**
+ * Union of all trigger types.
+ * Extensible for future triggers (hover, long-press, etc.)
+ */
+export const triggerSchema = Primitive.Union({
+  click: clickTriggerSchema,
+});
+
+// =============================================================================
+// Action Value Types
+// =============================================================================
+
+/**
+ * Value types for the set-variable action.
+ * Matches the variable types format (using "key" discriminator, including product).
+ */
+export const actionValueSchema = Primitive.Union(
+  {
+    boolean: Primitive.Struct({
+      key: Primitive.Literal("boolean").required(),
+      value: Primitive.Boolean().required(),
+    }),
+    number: Primitive.Struct({
+      key: Primitive.Literal("number").required(),
+      value: Primitive.Number().required(),
+    }),
+    string: Primitive.Struct({
+      key: Primitive.Literal("string").required(),
+      value: Primitive.String().required(),
+    }),
+    product: Primitive.Struct({
+      key: Primitive.Literal("product").required(),
+      value: Primitive.Struct({
+        // Optional string — absence means "no product selected" (the former null)
+        productId: Primitive.String(),
+      }).required(),
+    }),
+  },
+  { discriminator: "key" },
+);
+
+/**
+ * Source for an action value - either a literal value or a reference to a variable.
+ */
+export const actionValueSourceSchema = Primitive.Union({
+  literal: Primitive.Struct({
+    type: Primitive.Literal("literal").required(),
+    value: actionValueSchema.required(),
+  }),
+  "variable-reference": Primitive.Struct({
+    type: Primitive.Literal("variable-reference").required(),
+    value: Primitive.Struct({
+      id: Primitive.String().required(),
+    }).required(),
+  }),
+});
+
+/**
+ * Source for a product - either a literal product ID or a reference to a product variable.
+ */
+export const productSourceSchema = Primitive.Union({
+  literal: Primitive.Struct({
+    type: Primitive.Literal("literal").required(),
+    productId: Primitive.String().required(),
+  }),
+  "variable-reference": Primitive.Struct({
+    type: Primitive.Literal("variable-reference").required(),
+    variableId: Primitive.String().required(),
+  }),
+});
+
+// =============================================================================
+// Actions
+// =============================================================================
+
+/**
+ * None action - placeholder when no action is selected.
+ */
+export const noneActionSchema = Primitive.Struct({
+  type: Primitive.Literal("none").required(),
+});
+
+/**
+ * Set Variable action - sets a local variable to a new value.
+ * Supports both literal values and variable references.
+ */
+export const setVariableActionSchema = Primitive.Struct({
+  type: Primitive.Literal("set-variable").required(),
+  payload: Primitive.Struct({
+    variableId: Primitive.String().required(),
+    newValue: actionValueSourceSchema.required(),
+  }).required(),
+});
+
+/**
+ * Close Paywall action - closes the paywall.
+ */
+export const closePaywallActionSchema = Primitive.Struct({
+  type: Primitive.Literal("close-paywall").required(),
+});
+
+/**
+ * Purchase Product action - initiates a product purchase.
+ * Supports both literal product IDs and product variable references.
+ */
+export const purchaseProductActionSchema = Primitive.Struct({
+  type: Primitive.Literal("purchase-product").required(),
+  payload: productSourceSchema.required(),
+});
+
+/**
+ * Union of all action types.
+ */
+export const actionSchema = Primitive.Union({
+  "close-paywall": closePaywallActionSchema,
+  none: noneActionSchema,
+  "purchase-product": purchaseProductActionSchema,
+  "set-variable": setVariableActionSchema,
+});
+
+// =============================================================================
+// Interaction
+// =============================================================================
+
+/**
+ * An interaction combines a trigger with an action.
+ */
+export const interactionSchema = Primitive.Struct({
+  id: Primitive.String().required(),
+  trigger: triggerSchema.required(),
+  action: actionSchema.required(),
+});
+
+/**
+ * Array of interactions for a node.
+ */
+export const interactionsSchema = Primitive.Array(interactionSchema).default([]);
diff --git a/packages/mimic-schema/src/interactions/types.ts b/packages/mimic-schema/src/interactions/types.ts
new file mode 100644
index 000000000..e71845a5b
--- /dev/null
+++ b/packages/mimic-schema/src/interactions/types.ts
@@ -0,0 +1,49 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type {
+  actionSchema,
+  actionValueSchema,
+  actionValueSourceSchema,
+  clickTriggerSchema,
+  closePaywallActionSchema,
+  interactionSchema,
+  noneActionSchema,
+  productSourceSchema,
+  purchaseProductActionSchema,
+  setVariableActionSchema,
+  triggerSchema,
+} from "./interactions.ts";
+
+// Trigger types
+export type Trigger = NonNullable<Primitive.InferSnapshot<typeof triggerSchema>>;
+export type ClickTrigger = NonNullable<Primitive.InferSnapshot<typeof clickTriggerSchema>>;
+export type TriggerType = Trigger["type"];
+
+// Action types
+export type Action = NonNullable<Primitive.InferSnapshot<typeof actionSchema>>;
+export type ActionSnapshot = Action;
+export type NoneAction = NonNullable<Primitive.InferSnapshot<typeof noneActionSchema>>;
+export type SetVariableAction = NonNullable<
+  Primitive.InferSnapshot<typeof setVariableActionSchema>
+>;
+export type ClosePaywallAction = NonNullable<
+  Primitive.InferSnapshot<typeof closePaywallActionSchema>
+>;
+export type PurchaseProductAction = NonNullable<
+  Primitive.InferSnapshot<typeof purchaseProductActionSchema>
+>;
+export type ActionType = Action["type"];
+
+// Value types
+export type ActionValue = NonNullable<Primitive.InferSnapshot<typeof actionValueSchema>>;
+export type ActionValueSnapshot = ActionValue;
+export type ActionValueSource = NonNullable<
+  Primitive.InferSnapshot<typeof actionValueSourceSchema>
+>;
+export type ActionValueSourceSnapshot = ActionValueSource;
+export type ProductSource = NonNullable<Primitive.InferSnapshot<typeof productSourceSchema>>;
+export type ProductSourceSnapshot = ProductSource;
+
+// Interaction type
+export type Interaction = NonNullable<Primitive.InferSnapshot<typeof interactionSchema>>;
+export type InteractionSnapshot = Interaction;
diff --git a/packages/mimic-schema/src/locales/entry.ts b/packages/mimic-schema/src/locales/entry.ts
new file mode 100644
index 000000000..f2b09dffb
--- /dev/null
+++ b/packages/mimic-schema/src/locales/entry.ts
@@ -0,0 +1,21 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type { MaybeEntry } from "./types.ts";
+
+/**
+ * Unwraps a decoded CRDT ordered-array entry (`{ id, pos, value }`) to its inner
+ * value. Tolerates already-plain values so the localization helpers work on both
+ * decoded document snapshots and hand-built plain inputs.
+ */
+export function entryValue<T>(entry: MaybeEntry<T>): T {
+  if (
+    entry !== null &&
+    typeof entry === "object" &&
+    "id" in entry &&
+    "pos" in entry &&
+    "value" in entry
+  ) {
+    return (entry as Primitive.ArrayEntrySnapshot<T>).value;
+  }
+  return entry as T;
+}
diff --git a/packages/mimic-schema/src/locales/index.ts b/packages/mimic-schema/src/locales/index.ts
new file mode 100644
index 000000000..5fbe3a07e
--- /dev/null
+++ b/packages/mimic-schema/src/locales/index.ts
@@ -0,0 +1,5 @@
+export * from "./entry.ts";
+export * from "./locale-tag.ts";
+export * from "./resolve.ts";
+export * from "./slots.ts";
+export * from "./types.ts";
diff --git a/packages/mimic-schema/src/locales/locale-tag.test.ts b/packages/mimic-schema/src/locales/locale-tag.test.ts
new file mode 100644
index 000000000..8f4b1aa75
--- /dev/null
+++ b/packages/mimic-schema/src/locales/locale-tag.test.ts
@@ -0,0 +1,25 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { canonicalizeLocaleTag, languageSubtag } from "./locale-tag.ts";
+
+describe("canonicalizeLocaleTag", () => {
+  test("canonicalizes casing", () => {
+    expect(canonicalizeLocaleTag("pt-br")).toBe("pt-BR");
+    expect(canonicalizeLocaleTag("EN")).toBe("en");
+    expect(canonicalizeLocaleTag("de-de")).toBe("de-DE");
+  });
+
+  test("returns null on structurally invalid input", () => {
+    expect(canonicalizeLocaleTag("")).toBeNull();
+    expect(canonicalizeLocaleTag("!!garbage!!")).toBeNull();
+    expect(canonicalizeLocaleTag("a-b-c-d-e-f-g")).toBeNull();
+  });
+});
+
+describe("languageSubtag", () => {
+  test("extracts the primary language subtag", () => {
+    expect(languageSubtag("de-AT")).toBe("de");
+    expect(languageSubtag("pt-BR")).toBe("pt");
+    expect(languageSubtag("en")).toBe("en");
+  });
+});
diff --git a/packages/mimic-schema/src/locales/locale-tag.ts b/packages/mimic-schema/src/locales/locale-tag.ts
new file mode 100644
index 000000000..284abf948
--- /dev/null
+++ b/packages/mimic-schema/src/locales/locale-tag.ts
@@ -0,0 +1,22 @@
+/**
+ * Canonicalizes a BCP-47 locale tag via `Intl.getCanonicalLocales`, normalizing
+ * casing and structure (e.g. `pt-br` → `pt-BR`). Returns `null` for input the
+ * platform rejects as a structurally invalid tag (a thrown `RangeError`).
+ */
+export function canonicalizeLocaleTag(tag: string): string | null {
+  try {
+    const [canonical] = Intl.getCanonicalLocales(tag);
+    return canonical ?? null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * The primary language subtag of a locale tag (`de-AT` → `de`). Used for
+ * language-prefix fallback matching; does not validate or canonicalize.
+ */
+export function languageSubtag(tag: string): string {
+  const separator = tag.indexOf("-");
+  return separator === -1 ? tag : tag.slice(0, separator);
+}
diff --git a/packages/mimic-schema/src/locales/migration.test.ts b/packages/mimic-schema/src/locales/migration.test.ts
new file mode 100644
index 000000000..64dfca0e9
--- /dev/null
+++ b/packages/mimic-schema/src/locales/migration.test.ts
@@ -0,0 +1,111 @@
+import {
+  validate,
+  type ArrayValue,
+  type ObjectValue,
+  type TreeValue,
+} from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  PaywallDesignerDocument,
+  type PaywallDesignerDocumentInput,
+} from "../document.ts";
+import type { RootNodeData } from "../nodes/root-node.ts";
+import type { ScreenNodeData } from "../nodes/screen-node.ts";
+import type { TextNodeData } from "../nodes/text-node.ts";
+import type { ComponentNodeData } from "../nodes/component-node.ts";
+import { resolveComponentPropValue, resolveText } from "./resolve.ts";
+
+/** An unlocalized document: a screen with a text node and a literal-prop component. */
+const unlocalizedInput: PaywallDesignerDocumentInput = [
+  {
+    type: "root",
+    name: "Paywall",
+    children: [
+      {
+        type: "screen",
+        children: [
+          { type: "text", name: "Headline", text: "Hello" },
+          {
+            type: "component",
+            componentSlug: "cta",
+            componentVersion: 1,
+            contentHash: "hash",
+            props: [
+              { name: "title", value: { type: "literal", value: { key: "string", value: "Buy" } } },
+            ],
+          },
+        ],
+      },
+    ],
+  },
+];
+
+function decodeRoot(value: TreeValue): RootNodeData {
+  return PaywallDesignerDocument.decode(validate(PaywallDesignerDocument.schema, value))![0]!;
+}
+
+/** Removes every field this feature added, simulating a pre-change stored value. */
+function stripLocalizationFields(tree: TreeValue): void {
+  for (const node of tree.nodes) {
+    const fields = (node.value as ObjectValue).fields as Record<string, unknown>;
+    delete fields["localization"];
+    delete fields["localized"];
+    const props = fields["props"] as ArrayValue | undefined;
+    if (props?.kind === "array") {
+      for (const item of props.items) {
+        if (item.value.kind === "object") {
+          delete (item.value.fields as Record<string, unknown>)["localizedValues"];
+        }
+      }
+    }
+  }
+}
+
+describe("localization defaults", () => {
+  test("root materializes an empty localization config", () => {
+    const root = decodeRoot(PaywallDesignerDocument.encode(unlocalizedInput) as TreeValue);
+    expect(root.data.localization).toEqual({ defaultLocale: "en", locales: [] });
+  });
+
+  test("nodes materialize empty localized arrays and resolvers return base values", () => {
+    const root = decodeRoot(PaywallDesignerDocument.encode(unlocalizedInput) as TreeValue);
+    const screen = root.children[0]! as ScreenNodeData;
+    const textNode = screen.children[0]! as TextNodeData;
+    const component = screen.children[1]! as ComponentNodeData;
+
+    expect(textNode.data.localized).toEqual([]);
+    expect(resolveText(textNode.data, "de", "en")).toBe("Hello");
+
+    const titleProp = component.data.props.find((entry) => entry.value?.name === "title")!.value!;
+    expect(resolveComponentPropValue(titleProp, "de", "en").value).toEqual({
+      key: "string",
+      value: "Buy",
+    });
+  });
+});
+
+describe("back-compat with pre-change documents", () => {
+  test("a value missing the new fields validates and re-materializes defaults", () => {
+    const stored = PaywallDesignerDocument.encode(unlocalizedInput) as TreeValue;
+    stripLocalizationFields(stored);
+
+    // Decoding through validate (the app's load path) must succeed and fill the
+    // additive fields back in with their defaults.
+    const root = decodeRoot(stored);
+    expect(root.data.localization).toEqual({ defaultLocale: "en", locales: [] });
+
+    const screen = root.children[0]! as ScreenNodeData;
+    const textNode = screen.children[0]! as TextNodeData;
+    expect(textNode.data.localized).toEqual([]);
+    expect(textNode.data.text).toBe("Hello");
+
+    const component = screen.children[1]! as ComponentNodeData;
+    const titleProp = component.data.props.find((entry) => entry.value?.name === "title")!.value!;
+    expect(titleProp.value.type).toBe("literal");
+    expect(resolveComponentPropValue(titleProp, "de", "en").value).toEqual({
+      key: "string",
+      value: "Buy",
+    });
+  });
+});
diff --git a/packages/mimic-schema/src/locales/resolve.test.ts b/packages/mimic-schema/src/locales/resolve.test.ts
new file mode 100644
index 000000000..530a772eb
--- /dev/null
+++ b/packages/mimic-schema/src/locales/resolve.test.ts
@@ -0,0 +1,229 @@
+import { validate } from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  PaywallDesignerDocument,
+  type PaywallDesignerDocumentInput,
+} from "../document.ts";
+import type { ComponentNodeData } from "../nodes/component-node.ts";
+import { localizationConfigSchema } from "../nodes/root-node.ts";
+import type { ScreenNodeData } from "../nodes/screen-node.ts";
+import type { TextNodeData } from "../nodes/text-node.ts";
+import type { ViewNodeData } from "../nodes/view-node.ts";
+import type { LocalizationConfig } from "./types.ts";
+import {
+  resolveBackgroundImage,
+  resolveComponentPropValue,
+  resolveLocale,
+  resolveText,
+} from "./resolve.ts";
+
+function decodeDocument(input: PaywallDesignerDocumentInput) {
+  const value = PaywallDesignerDocument.encode(input);
+  const validated = validate(PaywallDesignerDocument.schema, value);
+  return PaywallDesignerDocument.decode(validated)!;
+}
+
+function buildConfig(input: {
+  defaultLocale?: string;
+  locales?: { tag: string }[];
+}): LocalizationConfig {
+  const value = localizationConfigSchema.encode(input);
+  return localizationConfigSchema.decode(validate(localizationConfigSchema.schema, value))!;
+}
+
+/** A screen holding one text, one view, and one component node for resolver tests. */
+function buildScreen(): ScreenNodeData {
+  const roots = decodeDocument([
+    {
+      type: "root",
+      name: "Paywall",
+      children: [
+        {
+          type: "screen",
+          children: [
+            {
+              type: "text",
+              name: "Headline",
+              text: "Base text",
+              localized: [
+                { locale: "de", overrides: { text: "Basis" } },
+                { locale: "fr", overrides: {} },
+              ],
+            },
+            {
+              type: "view",
+              name: "Card",
+              style: { backgroundImage: { url: "https://base.png", resizeMode: "cover" } },
+              localized: [
+                {
+                  locale: "de",
+                  overrides: { backgroundImage: { url: "https://de.png", resizeMode: "contain" } },
+                },
+              ],
+            },
+            {
+              type: "component",
+              componentSlug: "cta",
+              componentVersion: 1,
+              contentHash: "hash",
+              props: [
+                {
+                  name: "title",
+                  value: { type: "literal", value: { key: "string", value: "Buy" } },
+                  localizedValues: [{ locale: "de", value: { key: "string", value: "Kaufen" } }],
+                },
+                {
+                  name: "count",
+                  value: { type: "variable-reference", value: { id: "var-1" } },
+                },
+              ],
+            },
+          ],
+        },
+      ],
+    },
+  ]);
+  return roots[0]!.children[0]! as ScreenNodeData;
+}
+
+const screen = buildScreen();
+const textNode = screen.children[0]! as TextNodeData;
+const viewNode = screen.children[1]! as ViewNodeData;
+const componentNode = screen.children[2]! as ComponentNodeData;
+
+const titleProp = componentNode.data.props.find((entry) => entry.value?.name === "title")!.value!;
+const countProp = componentNode.data.props.find((entry) => entry.value?.name === "count")!.value!;
+
+describe("resolveLocale", () => {
+  const config = buildConfig({ defaultLocale: "en", locales: [{ tag: "de" }, { tag: "pt-BR" }] });
+
+  test("returns an exact match", () => {
+    expect(resolveLocale(["de"], config)).toBe("de");
+    expect(resolveLocale(["en"], config)).toBe("en");
+  });
+
+  test("language-prefix matches a preferred region tag to an enabled language", () => {
+    expect(resolveLocale(["de-AT"], config)).toBe("de");
+  });
+
+  test("does not reverse-widen (enabled region tag not matched by bare language)", () => {
+    const regionOnly = buildConfig({ defaultLocale: "en", locales: [{ tag: "de-DE" }] });
+    expect(resolveLocale(["de"], regionOnly)).toBe("en");
+  });
+
+  test("walks preferred tags in order, exact then prefix per entry", () => {
+    // First preferred (fr) has no exact/prefix match; second (de-AT) prefix-matches de.
+    expect(resolveLocale(["fr", "de-AT"], config)).toBe("de");
+    // An exact match on a later tag beats a prefix match on an earlier one only
+    // per-entry: here the first tag pt-BR matches exactly and wins.
+    expect(resolveLocale(["pt-BR", "de"], config)).toBe("pt-BR");
+  });
+
+  test("falls back to the default locale", () => {
+    expect(resolveLocale(["ja", "ko"], config)).toBe("en");
+    expect(resolveLocale([], config)).toBe("en");
+  });
+
+  test("matches case-insensitively, returns stored casing", () => {
+    expect(resolveLocale(["PT-br"], config)).toBe("pt-BR");
+  });
+});
+
+describe("resolveText", () => {
+  test("returns base for the default locale or nullish locale", () => {
+    expect(resolveText(textNode.data, "en", "en")).toBe("Base text");
+    expect(resolveText(textNode.data, null, "en")).toBe("Base text");
+    expect(resolveText(textNode.data, undefined, "en")).toBe("Base text");
+  });
+
+  test("returns an exact-locale override", () => {
+    expect(resolveText(textNode.data, "de", "en")).toBe("Basis");
+  });
+
+  test("falls back through language prefix to base", () => {
+    // de-AT prefix-matches the de override.
+    expect(resolveText(textNode.data, "de-AT", "en")).toBe("Basis");
+    // fr entry has no text override → falls back to base.
+    expect(resolveText(textNode.data, "fr", "en")).toBe("Base text");
+    // Unknown locale → base.
+    expect(resolveText(textNode.data, "ja", "en")).toBe("Base text");
+  });
+});
+
+describe("resolveBackgroundImage", () => {
+  test("returns base for the default locale", () => {
+    expect(resolveBackgroundImage(viewNode.data, "en", "en").url).toBe("https://base.png");
+  });
+
+  test("returns an exact-locale override (whole value)", () => {
+    const resolved = resolveBackgroundImage(viewNode.data, "de", "en");
+    expect(resolved.url).toBe("https://de.png");
+    expect(resolved.resizeMode).toBe("contain");
+  });
+
+  test("falls back through language prefix and to base", () => {
+    expect(resolveBackgroundImage(viewNode.data, "de-AT", "en").url).toBe("https://de.png");
+    expect(resolveBackgroundImage(viewNode.data, "ja", "en").url).toBe("https://base.png");
+  });
+});
+
+describe("resolveComponentPropValue", () => {
+  test("returns base literal binding for the default locale", () => {
+    const resolved = resolveComponentPropValue(titleProp, "en", "en");
+    expect(resolved.type).toBe("literal");
+    expect(resolved.value).toEqual({ key: "string", value: "Buy" });
+  });
+
+  test("returns a localized literal binding for an exact match", () => {
+    const resolved = resolveComponentPropValue(titleProp, "de", "en");
+    expect(resolved.type).toBe("literal");
+    expect(resolved.value).toEqual({ key: "string", value: "Kaufen" });
+  });
+
+  test("language-prefix falls back to the localized value then base", () => {
+    expect(resolveComponentPropValue(titleProp, "de-AT", "en").value).toEqual({
+      key: "string",
+      value: "Kaufen",
+    });
+    expect(resolveComponentPropValue(titleProp, "ja", "en").value).toEqual({
+      key: "string",
+      value: "Buy",
+    });
+  });
+
+  test("returns variable-reference bindings untouched", () => {
+    const resolved = resolveComponentPropValue(countProp, "de", "en");
+    expect(resolved.type).toBe("variable-reference");
+    expect(resolved.value).toEqual({ id: "var-1" });
+  });
+});
+
+describe("duplicate locale entries", () => {
+  test("first entry in array order wins deterministically", () => {
+    const roots = decodeDocument([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          {
+            type: "screen",
+            children: [
+              {
+                type: "text",
+                name: "Headline",
+                text: "Base",
+                localized: [
+                  { locale: "de", overrides: { text: "First" } },
+                  { locale: "de", overrides: { text: "Second" } },
+                ],
+              },
+            ],
+          },
+        ],
+      },
+    ]);
+    const node = (roots[0]!.children[0]! as ScreenNodeData).children[0]! as TextNodeData;
+    expect(resolveText(node.data, "de", "en")).toBe("First");
+  });
+});
diff --git a/packages/mimic-schema/src/locales/resolve.ts b/packages/mimic-schema/src/locales/resolve.ts
new file mode 100644
index 000000000..3f8bb5092
--- /dev/null
+++ b/packages/mimic-schema/src/locales/resolve.ts
@@ -0,0 +1,174 @@
+import { entryValue } from "./entry.ts";
+import { languageSubtag } from "./locale-tag.ts";
+import type {
+  BackgroundImageSnapshot,
+  ComponentPropBindingSnapshot,
+  ComponentPropValueSnapshot,
+  LocalizableComponentProp,
+  LocalizableImageData,
+  LocalizableTextData,
+  LocalizationConfig,
+} from "./types.ts";
+
+/** The enabled locale tags for a config: the implicit default plus the extras. */
+function enabledLocaleTags(config: LocalizationConfig): string[] {
+  const tags = [config.defaultLocale];
+  for (const entry of config.locales) {
+    const value = entryValue<{ tag: string } | undefined>(entry);
+    if (value !== undefined && value.tag.length > 0) {
+      tags.push(value.tag);
+    }
+  }
+  return tags;
+}
+
+/**
+ * Picks the best enabled locale for an ordered list of preferred tags
+ * (e.g. `navigator.languages`). Each preferred tag is tried in order: first an
+ * exact match against an enabled tag, then a language-prefix match (the
+ * preferred tag's language subtag matching an enabled tag exactly, so `de-AT`
+ * resolves to enabled `de` — never the reverse). Falls back to
+ * `config.defaultLocale` when nothing matches. Matching is case-insensitive; the
+ * enabled tag is returned in its stored casing.
+ */
+export function resolveLocale(
+  preferred: readonly string[],
+  config: LocalizationConfig,
+): string {
+  const enabled = enabledLocaleTags(config);
+  const enabledLower = enabled.map((tag) => tag.toLowerCase());
+  for (const raw of preferred) {
+    const want = raw.toLowerCase();
+    const exact = enabledLower.indexOf(want);
+    if (exact !== -1) {
+      return enabled[exact]!;
+    }
+    const prefix = enabledLower.indexOf(languageSubtag(want));
+    if (prefix !== -1) {
+      return enabled[prefix]!;
+    }
+  }
+  return config.defaultLocale;
+}
+
+/**
+ * Resolves the effective text for a node in a locale. Returns the base `text`
+ * when `locale` is nullish or the default locale, or when no localized entry
+ * carries a non-empty `text` override. Otherwise walks `localized` in array
+ * order: an exact-locale override wins over a language-prefix override, and the
+ * first match in each tier wins (CRDT arrays can transiently hold duplicates).
+ * An absent or empty-string override falls back to base.
+ */
+export function resolveText(
+  data: LocalizableTextData,
+  locale: string | null | undefined,
+  defaultLocale: string,
+): string {
+  const base = data.text;
+  const entries = data.localized;
+  if (locale == null || locale === defaultLocale || entries === undefined || entries.length === 0) {
+    return base;
+  }
+  const want = locale.toLowerCase();
+  const lang = languageSubtag(want);
+  let prefixMatch: string | undefined;
+  for (const entry of entries) {
+    const value = entryValue(entry);
+    if (value === undefined) {
+      continue;
+    }
+    const override = value.overrides?.text;
+    if (override === undefined || override === "") {
+      continue;
+    }
+    const entryLocale = value.locale.toLowerCase();
+    if (entryLocale === want) {
+      return override;
+    }
+    if (prefixMatch === undefined && entryLocale === lang) {
+      prefixMatch = override;
+    }
+  }
+  return prefixMatch ?? base;
+}
+
+/**
+ * Resolves the effective background image for a view/screen node in a locale.
+ * Whole-value replacement (`url` + `resizeMode` travel together). Same fallback
+ * walk as {@link resolveText}; an entry that omits `backgroundImage` falls back
+ * to the base `style.backgroundImage`.
+ */
+export function resolveBackgroundImage(
+  data: LocalizableImageData,
+  locale: string | null | undefined,
+  defaultLocale: string,
+): BackgroundImageSnapshot {
+  const base = data.style.backgroundImage;
+  const entries = data.localized;
+  if (locale == null || locale === defaultLocale || entries === undefined || entries.length === 0) {
+    return base;
+  }
+  const want = locale.toLowerCase();
+  const lang = languageSubtag(want);
+  let prefixMatch: BackgroundImageSnapshot | undefined;
+  for (const entry of entries) {
+    const value = entryValue(entry);
+    if (value === undefined) {
+      continue;
+    }
+    const override = value.overrides?.backgroundImage;
+    if (override === undefined) {
+      continue;
+    }
+    const entryLocale = value.locale.toLowerCase();
+    if (entryLocale === want) {
+      return override;
+    }
+    if (prefixMatch === undefined && entryLocale === lang) {
+      prefixMatch = override;
+    }
+  }
+  return prefixMatch ?? base;
+}
+
+/**
+ * Resolves the effective binding for a component prop in a locale. Variable-
+ * reference bindings are returned untouched (localization applies to literals
+ * only). For a literal binding, walks `localizedValues` with the same fallback
+ * rules as {@link resolveText} and returns a literal binding carrying the
+ * resolved value, or the base binding when no override applies.
+ */
+export function resolveComponentPropValue(
+  propEntry: LocalizableComponentProp,
+  locale: string | null | undefined,
+  defaultLocale: string,
+): ComponentPropBindingSnapshot {
+  const binding = propEntry.value;
+  const entries = propEntry.localizedValues;
+  if (
+    binding.type !== "literal" ||
+    locale == null ||
+    locale === defaultLocale ||
+    entries === undefined ||
+    entries.length === 0
+  ) {
+    return binding;
+  }
+  const want = locale.toLowerCase();
+  const lang = languageSubtag(want);
+  let prefixMatch: ComponentPropValueSnapshot | undefined;
+  for (const entry of entries) {
+    const value = entryValue(entry);
+    if (value === undefined) {
+      continue;
+    }
+    const entryLocale = value.locale.toLowerCase();
+    if (entryLocale === want) {
+      return { type: "literal" as const, value: value.value };
+    }
+    if (prefixMatch === undefined && entryLocale === lang) {
+      prefixMatch = value.value;
+    }
+  }
+  return prefixMatch === undefined ? binding : { type: "literal" as const, value: prefixMatch };
+}
diff --git a/packages/mimic-schema/src/locales/slots.test.ts b/packages/mimic-schema/src/locales/slots.test.ts
new file mode 100644
index 000000000..5a19d3144
--- /dev/null
+++ b/packages/mimic-schema/src/locales/slots.test.ts
@@ -0,0 +1,149 @@
+import { validate } from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  PaywallDesignerDocument,
+  type PaywallDesignerDocumentInput,
+} from "../document.ts";
+import type { RootNodeData } from "../nodes/root-node.ts";
+import type { ScreenNodeData } from "../nodes/screen-node.ts";
+import { collectLocalizableSlots } from "./slots.ts";
+
+function decodeRoot(input: PaywallDesignerDocumentInput): RootNodeData {
+  const value = PaywallDesignerDocument.encode(input);
+  return PaywallDesignerDocument.decode(validate(PaywallDesignerDocument.schema, value))![0]!;
+}
+
+const root = decodeRoot([
+  {
+    type: "root",
+    name: "Paywall",
+    children: [
+      {
+        type: "screen",
+        name: "Screen A",
+        children: [
+          { type: "text", name: "T1", text: "Hi" },
+          {
+            type: "view",
+            name: "ImgView",
+            style: { backgroundImage: { url: "https://img.png", resizeMode: "cover" } },
+          },
+          { type: "view", name: "EmptyView" },
+          {
+            type: "component",
+            componentSlug: "cta",
+            componentVersion: 1,
+            contentHash: "hash",
+            props: [
+              { name: "title", value: { type: "literal", value: { key: "string", value: "Buy" } } },
+              { name: "count", value: { type: "variable-reference", value: { id: "var-1" } } },
+            ],
+          },
+        ],
+      },
+      {
+        type: "screen",
+        name: "Screen B",
+        style: { backgroundImage: { url: "https://screen.png", resizeMode: "cover" } },
+      },
+    ],
+  },
+]);
+
+const screenA = root.children[0]! as ScreenNodeData;
+const screenB = root.children[1]! as ScreenNodeData;
+const textNode = screenA.children[0]!;
+const imgView = screenA.children[1]!;
+const component = screenA.children[3]!;
+
+describe("collectLocalizableSlots", () => {
+  const slots = collectLocalizableSlots(root, {
+    getLocalizableProps: () => [
+      { propName: "title", label: "Title" },
+      { propName: "count", label: "Count" },
+    ],
+  });
+
+  test("collects text, image, and literal component-prop slots in tree order", () => {
+    expect(slots.map((slot) => slot.kind)).toEqual(["text", "image", "componentProp", "image"]);
+  });
+
+  test("groups slots by containing screen (screen's own id for its own image)", () => {
+    expect(slots[0]).toMatchObject({
+      kind: "text",
+      nodeId: textNode.id,
+      label: "T1",
+      baseValue: "Hi",
+      screenId: screenA.id,
+    });
+    expect(slots[1]).toMatchObject({
+      kind: "image",
+      nodeId: imgView.id,
+      label: "ImgView",
+      screenId: screenA.id,
+    });
+    expect(slots[1]!.kind === "image" && slots[1]!.baseValue.url).toBe("https://img.png");
+    expect(slots[2]).toMatchObject({
+      kind: "componentProp",
+      nodeId: component.id,
+      propName: "title",
+      label: "Title",
+      screenId: screenA.id,
+    });
+    expect(slots[3]).toMatchObject({
+      kind: "image",
+      nodeId: screenB.id,
+      screenId: screenB.id,
+    });
+  });
+
+  test("excludes empty-image views and variable-bound props", () => {
+    // EmptyView (no bg url) and the variable-reference-bound `count` prop absent.
+    expect(slots.some((slot) => slot.kind === "image" && slot.label === "EmptyView")).toBe(false);
+    expect(slots.some((slot) => slot.kind === "componentProp" && slot.propName === "count")).toBe(
+      false,
+    );
+  });
+
+  test("emits no component-prop slots without getLocalizableProps", () => {
+    const bare = collectLocalizableSlots(root);
+    expect(bare.some((slot) => slot.kind === "componentProp")).toBe(false);
+    // Still collects text + two images.
+    expect(bare.map((slot) => slot.kind)).toEqual(["text", "image", "image"]);
+  });
+
+  test("collects a scrollView's non-empty background image, like a view", () => {
+    const scrollRoot = decodeRoot([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          {
+            type: "screen",
+            name: "Screen A",
+            children: [
+              {
+                type: "scrollView",
+                name: "ImgScroll",
+                style: { backgroundImage: { url: "https://scroll.png", resizeMode: "cover" } },
+              },
+              { type: "scrollView", name: "EmptyScroll" },
+            ],
+          },
+        ],
+      },
+    ]);
+    const screen = scrollRoot.children[0]! as ScreenNodeData;
+    const imgScroll = screen.children[0]!;
+    const slots = collectLocalizableSlots(scrollRoot);
+    expect(slots.map((slot) => slot.kind)).toEqual(["image"]);
+    expect(slots[0]).toMatchObject({
+      kind: "image",
+      nodeId: imgScroll.id,
+      label: "ImgScroll",
+      screenId: screen.id,
+    });
+    expect(slots[0]!.kind === "image" && slots[0]!.baseValue.url).toBe("https://scroll.png");
+  });
+});
diff --git a/packages/mimic-schema/src/locales/slots.ts b/packages/mimic-schema/src/locales/slots.ts
new file mode 100644
index 000000000..eec99958c
--- /dev/null
+++ b/packages/mimic-schema/src/locales/slots.ts
@@ -0,0 +1,118 @@
+import { entryValue } from "./entry.ts";
+import type { ComponentNodeData } from "../nodes/component-node.ts";
+import type { RootNodeData } from "../nodes/root-node.ts";
+import type {
+  BackgroundImageSnapshot,
+  CollectLocalizableSlotsOptions,
+  LocalizableComponentProp,
+  LocalizableSlot,
+  MaybeEntry,
+} from "./types.ts";
+
+/** Structural view of a decoded tree node used for the order-preserving walk. */
+interface SnapshotNode {
+  readonly type: string;
+  readonly id: string;
+  readonly data: Record<string, unknown>;
+  readonly children: readonly SnapshotNode[];
+}
+
+/**
+ * Walks a decoded document root and collects every localizable slot in tree
+ * order, grouped naturally by containing screen. Includes: every text node; every
+ * view/scrollView/screen node whose base `style.backgroundImage.url` is non-empty; and the
+ * literal-bound component props reported by `options.getLocalizableProps`.
+ * Variable-reference-bound props are excluded. Pass the decoded root node
+ * (`PaywallDesignerDocument.decode(...)[0]`).
+ */
+export function collectLocalizableSlots(
+  root: RootNodeData,
+  options: CollectLocalizableSlotsOptions = {},
+): LocalizableSlot[] {
+  const slots: LocalizableSlot[] = [];
+  walk(root as unknown as SnapshotNode, null, slots, options);
+  return slots;
+}
+
+function walk(
+  node: SnapshotNode,
+  screenId: string | null,
+  slots: LocalizableSlot[],
+  options: CollectLocalizableSlotsOptions,
+): void {
+  const currentScreenId = node.type === "screen" ? node.id : screenId;
+  const groupId = currentScreenId ?? node.id;
+
+  switch (node.type) {
+    case "text": {
+      const data = node.data as { name: string; text: string };
+      slots.push({
+        kind: "text",
+        nodeId: node.id,
+        label: data.name,
+        baseValue: data.text,
+        screenId: groupId,
+      });
+      break;
+    }
+    case "view":
+    case "scrollView":
+    case "screen": {
+      const data = node.data as {
+        name: string;
+        style: { backgroundImage: BackgroundImageSnapshot };
+      };
+      const image = data.style.backgroundImage;
+      if (image.url.length > 0) {
+        slots.push({
+          kind: "image",
+          nodeId: node.id,
+          label: data.name,
+          baseValue: image,
+          screenId: groupId,
+        });
+      }
+      break;
+    }
+    case "component": {
+      const componentNode = node as unknown as ComponentNodeData;
+      const descriptors = options.getLocalizableProps?.(componentNode) ?? [];
+      for (const descriptor of descriptors) {
+        const prop = findProp(node, descriptor.propName);
+        if (prop === undefined || prop.value.type !== "literal") {
+          continue;
+        }
+        slots.push({
+          kind: "componentProp",
+          nodeId: node.id,
+          propName: descriptor.propName,
+          label: descriptor.label,
+          baseValue: prop.value.value,
+          screenId: groupId,
+        });
+      }
+      break;
+    }
+  }
+
+  for (const child of node.children) {
+    walk(child, currentScreenId, slots, options);
+  }
+}
+
+/** Finds a component node's prop by name, unwrapping the CRDT entry envelope. */
+function findProp(node: SnapshotNode, name: string): LocalizableComponentProp | undefined {
+  const props = node.data["props"] as readonly unknown[] | undefined;
+  if (props === undefined) {
+    return undefined;
+  }
+  for (const entry of props) {
+    const value = entryValue(
+      entry as MaybeEntry<(LocalizableComponentProp & { name: string }) | undefined>,
+    );
+    if (value !== undefined && value.name === name) {
+      return value;
+    }
+  }
+  return undefined;
+}
diff --git a/packages/mimic-schema/src/locales/types.ts b/packages/mimic-schema/src/locales/types.ts
new file mode 100644
index 000000000..4367ff9ca
--- /dev/null
+++ b/packages/mimic-schema/src/locales/types.ts
@@ -0,0 +1,120 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type {
+  componentPropBindingSchema,
+  componentPropValueSchema,
+} from "../component-bindings/index.ts";
+import type { ComponentNodeData } from "../nodes/component-node.ts";
+import type { localizationConfigSchema } from "../nodes/root-node.ts";
+import type { backgroundImage } from "../styles/index.ts";
+
+/**
+ * A decoded array element that may still be wrapped in its CRDT ordered-entry
+ * envelope (`{ id, pos, value }`). Localization helpers accept either form.
+ */
+export type MaybeEntry<T> = T | Primitive.ArrayEntrySnapshot<T>;
+
+/**
+ * Document-wide localization config as decoded from the root node. `locales`
+ * entries are CRDT-entry-wrapped in the decoded snapshot; use the resolvers
+ * (or {@link MaybeEntry} unwrapping) rather than reading `.tag` directly.
+ */
+export type LocalizationConfig = NonNullable<Primitive.InferSnapshot<typeof localizationConfigSchema>>;
+
+/** Decoded whole-value background image (`url` + `resizeMode`). */
+export type BackgroundImageSnapshot = NonNullable<Primitive.InferSnapshot<typeof backgroundImage>>;
+
+/** Decoded literal component-prop value (the payload of a literal binding). */
+export type ComponentPropValueSnapshot = NonNullable<
+  Primitive.InferSnapshot<typeof componentPropValueSchema>
+>;
+
+/** Decoded component-prop binding — a literal value or a variable reference. */
+export type ComponentPropBindingSnapshot = NonNullable<
+  Primitive.InferSnapshot<typeof componentPropBindingSchema>
+>;
+
+/** Decoded value of a single text `localized` entry. */
+export interface LocalizedTextOverride {
+  readonly locale: string;
+  readonly overrides?: { readonly text?: string };
+}
+
+/** Decoded value of a single view/screen `localized` entry. */
+export interface LocalizedImageOverride {
+  readonly locale: string;
+  readonly overrides?: { readonly backgroundImage?: BackgroundImageSnapshot };
+}
+
+/** Decoded value of a single component-prop `localizedValues` entry. */
+export interface LocalizedPropOverride {
+  readonly locale: string;
+  readonly value: ComponentPropValueSnapshot;
+}
+
+// Decoded array entries can transiently hold `undefined` values (a struct that
+// decodes to undefined), so the array element types admit `| undefined` and the
+// resolvers skip such entries.
+
+/** Minimal decoded text-node data the text resolver reads. */
+export interface LocalizableTextData {
+  readonly text: string;
+  readonly localized?: readonly MaybeEntry<LocalizedTextOverride | undefined>[];
+}
+
+/** Minimal decoded view/screen-node data the background-image resolver reads. */
+export interface LocalizableImageData {
+  readonly style: { readonly backgroundImage: BackgroundImageSnapshot };
+  readonly localized?: readonly MaybeEntry<LocalizedImageOverride | undefined>[];
+}
+
+/** Minimal decoded component-prop entry the prop-value resolver reads. */
+export interface LocalizableComponentProp {
+  readonly value: ComponentPropBindingSnapshot;
+  readonly localizedValues?: readonly MaybeEntry<LocalizedPropOverride | undefined>[];
+}
+
+/** A descriptor for a component prop that can carry localized overrides. */
+export interface LocalizablePropDescriptor {
+  readonly propName: string;
+  readonly label: string;
+}
+
+/**
+ * One authorable localization target discovered on the document tree. `screenId`
+ * is the id of the containing screen node (its own id for a screen's own image).
+ */
+export type LocalizableSlot =
+  | {
+      readonly kind: "text";
+      readonly nodeId: string;
+      readonly label: string;
+      readonly baseValue: string;
+      readonly screenId: string;
+    }
+  | {
+      readonly kind: "image";
+      readonly nodeId: string;
+      readonly label: string;
+      readonly baseValue: BackgroundImageSnapshot;
+      readonly screenId: string;
+    }
+  | {
+      readonly kind: "componentProp";
+      readonly nodeId: string;
+      readonly propName: string;
+      readonly label: string;
+      readonly baseValue: ComponentPropValueSnapshot;
+      readonly screenId: string;
+    };
+
+export interface CollectLocalizableSlotsOptions {
+  /**
+   * Maps a component node to the subset of its props that are localizable.
+   * mimic-schema is manifest-agnostic, so callers supply this from the resolved
+   * component manifest. Props not returned here are skipped.
+   */
+  readonly getLocalizableProps?: (
+    node: ComponentNodeData,
+  ) => readonly LocalizablePropDescriptor[];
+}
diff --git a/packages/mimic-schema/src/nodes/base.ts b/packages/mimic-schema/src/nodes/base.ts
new file mode 100644
index 000000000..88715b202
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/base.ts
@@ -0,0 +1,16 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { variableSchema } from "../variables/variables.ts";
+
+export type Variable = NonNullable<Primitive.InferSnapshot<typeof variableSchema>>;
+
+/** Used for definition of variables that are local to the node */
+export const localVariables = Primitive.Array(variableSchema).default([]);
+
+/** Linked variables for linking to other variables */
+export const linkedVariables = Primitive.Array(
+  Primitive.Struct({
+    name: Primitive.String().required(),
+    nodeId: Primitive.String().required(),
+  }),
+).default([]);
diff --git a/packages/mimic-schema/src/nodes/code-component-node.ts b/packages/mimic-schema/src/nodes/code-component-node.ts
new file mode 100644
index 000000000..b0b6de282
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/code-component-node.ts
@@ -0,0 +1,27 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+const codeComponentNodeData = Primitive.Struct({
+  path: Primitive.String().required(),
+  source: Primitive.String().default(""),
+}).required();
+
+/**
+ * CodeComponentNode — a paywall-scoped code-component *definition*. It holds the
+ * raw TSX `source` authored in the browser editor; the compiled artifact
+ * (manifest + preview trees) is derived in-browser and kept out of the document
+ * (it is large and would race under concurrent edits). Instances placed on the
+ * canvas are ordinary `component` nodes carrying `componentSource: "local"` and
+ * a `componentPath` matching this node's `path`.
+ *
+ * `path` is the component's IDENTITY — the canonical document-relative path
+ * `components/<basename>.tsx` (the schema keeps it a permissive string; the
+ * shape is enforced at write sites). `source` is a whole-value LWW register —
+ * writes should be debounced. Definitions live under the singleton `library`
+ * node; they have no children.
+ */
+export const CodeComponentNode = Primitive.TreeNode("codeComponent", {
+  children: [] as const,
+  data: codeComponentNodeData,
+});
+
+export type CodeComponentNodeData = Primitive.TreeNodeSnapshot<typeof CodeComponentNode>;
diff --git a/packages/mimic-schema/src/nodes/component-node.test.ts b/packages/mimic-schema/src/nodes/component-node.test.ts
new file mode 100644
index 000000000..ff88aed1d
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/component-node.test.ts
@@ -0,0 +1,291 @@
+import {
+  createClientDocument,
+  type DocumentTransport,
+  type ServerMessage,
+  type TransactionEnvelope,
+} from "@voidhash/mimic";
+import { type Value } from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import { createInitialPaywallDocumentInput, PaywallDesignerDocument } from "../document.ts";
+import { ComponentNode, type ComponentNodeData } from "./component-node.ts";
+import { RootNode } from "./root-node.ts";
+import { ScreenNode } from "./screen-node.ts";
+import { ShapeNode } from "./shape-node.ts";
+import { TextNode } from "./text-node.ts";
+import { ViewNode } from "./view-node.ts";
+
+class StubTransport implements DocumentTransport {
+  readonly submitted: TransactionEnvelope[] = [];
+
+  async connect(): Promise<void> {}
+  disconnect(): void {}
+  subscribe(_handler: (message: ServerMessage) => void): () => void {
+    return () => {};
+  }
+  subscribeConnection(_handler: (connected: boolean) => void): () => void {
+    return () => {};
+  }
+  requestSnapshot(): void {}
+  submit(transaction: TransactionEnvelope): void {
+    this.submitted.push(transaction);
+  }
+  setPresence(_data: Value): void {}
+  clearPresence(): void {}
+  isConnected(): boolean {
+    return false;
+  }
+}
+
+function createOfflineDocument() {
+  return createClientDocument({
+    primitive: PaywallDesignerDocument,
+    transport: new StubTransport(),
+    initialValue: PaywallDesignerDocument.encode(createInitialPaywallDocumentInput()),
+  });
+}
+
+// Snapshot children are widened by the recursion-breaking ComponentNode
+// annotation, so component nodes are narrowed structurally before assertions.
+function isComponentNodeData(node: { readonly type: string }): node is ComponentNodeData {
+  return node.type === "component";
+}
+
+function narrowToComponent(node: { readonly type: string } | undefined): ComponentNodeData {
+  expect(node).toBeDefined();
+  if (node === undefined || !isComponentNodeData(node)) {
+    throw new Error(`expected a component node, got ${node?.type}`);
+  }
+  return node;
+}
+
+function makeDocumentWithComponent() {
+  const doc = createOfflineDocument();
+  const ids = { componentId: "", viewId: "", rootId: "", screenId: "" };
+  doc.transaction((root) => {
+    const rootNode = root.children.first()!;
+    ids.rootId = rootNode.id;
+    const screen = rootNode.children.first()!;
+    ids.screenId = screen.id;
+    const view = screen.children.insertLast({ type: "view" });
+    ids.viewId = view.id;
+    const component = view.children.insertLast({
+      type: "component",
+      componentSlug: "product-option",
+      componentVersion: 2,
+      contentHash: "ab93f1",
+    });
+    ids.componentId = component.id;
+  });
+  return { doc, ids };
+}
+
+function findComponentSnapshot(
+  doc: ReturnType<typeof makeDocumentWithComponent>["doc"],
+): ComponentNodeData {
+  const roots = doc.getSnapshot();
+  expect(roots).toBeDefined();
+  const screen = roots![0]!.children[0];
+  expect(screen).toBeDefined();
+  const view = screen!.children[0];
+  expect(view).toBeDefined();
+  return narrowToComponent(view!.children[0]);
+}
+
+describe("ComponentNode", () => {
+  test("declares allowed children including itself", () => {
+    expect(ComponentNode.type).toBe("component");
+    expect(ComponentNode.isChildAllowed("view")).toBe(true);
+    expect(ComponentNode.isChildAllowed("text")).toBe(true);
+    expect(ComponentNode.isChildAllowed("shape")).toBe(true);
+    expect(ComponentNode.isChildAllowed("component")).toBe(true);
+    expect(ComponentNode.isChildAllowed("screen")).toBe(false);
+    expect(ComponentNode.isChildAllowed("path")).toBe(false);
+  });
+
+  test("is an allowed child of screen and view but not of root/text/shape", () => {
+    expect(ScreenNode.isChildAllowed("component")).toBe(true);
+    expect(ViewNode.isChildAllowed("component")).toBe(true);
+    expect(RootNode.isChildAllowed("component")).toBe(false);
+    expect(TextNode.isChildAllowed("component")).toBe(false);
+    expect(ShapeNode.isChildAllowed("component")).toBe(false);
+  });
+
+  test("inserts with required fields and applies defaults", () => {
+    const { doc } = makeDocumentWithComponent();
+    const component = findComponentSnapshot(doc);
+
+    expect(component.type).toBe("component");
+    expect(component.data.componentSlug).toBe("product-option");
+    expect(component.data.componentVersion).toBe(2);
+    expect(component.data.contentHash).toBe("ab93f1");
+    expect(component.data.name).toBe("Component");
+    expect(component.data.previewState).toBe("default");
+    expect(component.data.props).toEqual([]);
+    expect(component.data.actionBindings).toEqual([]);
+    expect(component.children).toEqual([]);
+  });
+
+  test("admits builtin instances: slug-resolved, unpinned identity fields stay at sentinels", () => {
+    const doc = createOfflineDocument();
+    doc.transaction((root) => {
+      const screen = root.children.first()!.children.first()!;
+      screen.children.insertLast({
+        type: "component",
+        componentSource: "builtin",
+        componentSlug: "sample-badge",
+      });
+    });
+
+    const roots = doc.getSnapshot();
+    const builtin = narrowToComponent(roots![0]!.children[0]!.children[0]);
+    expect(builtin.data.componentSource).toBe("builtin");
+    expect(builtin.data.componentSlug).toBe("sample-badge");
+    // Builtins are UNPINNED: version/hash/path stay at their defaults.
+    expect(builtin.data.componentVersion).toBe(0);
+    expect(builtin.data.contentHash).toBe("");
+    expect(builtin.data.componentPath).toBe("");
+  });
+
+  test("pushes prop entries with unique ids and positions", () => {
+    const { doc, ids } = makeDocumentWithComponent();
+
+    doc.transaction((root) => {
+      const component = root.findByIdAcrossTree(ids.componentId)!.as(ComponentNode);
+      component.data.props.push({
+        name: "accentColor",
+        value: { type: "literal", value: { key: "string", value: "#16a34a" } },
+      });
+      component.data.props.push({
+        name: "selected",
+        value: { type: "variable-reference", value: { id: "var-1" } },
+      });
+      component.data.actionBindings.push({
+        action: {
+          type: "set-variable",
+          payload: {
+            newValue: { type: "action-payload", value: { field: "productId" } },
+            variableId: "var-1",
+          },
+        },
+        name: "onSelect",
+      });
+    });
+
+    const component = findComponentSnapshot(doc);
+
+    expect(component.data.props).toHaveLength(2);
+    const firstProp = component.data.props[0]!;
+    // Array entries are wrapped as {id, pos, value} on the wire/snapshot.
+    expect(typeof firstProp.id).toBe("string");
+    expect(typeof firstProp.pos).toBe("string");
+    expect(new Set(component.data.props.map((prop) => prop.id)).size).toBe(2);
+    expect(new Set(component.data.props.map((prop) => prop.pos)).size).toBe(2);
+    expect(firstProp.value?.name).toBe("accentColor");
+    expect(firstProp.value?.value).toEqual({
+      type: "literal",
+      value: { key: "string", value: "#16a34a" },
+    });
+    expect(component.data.props[1]!.value?.value).toEqual({
+      type: "variable-reference",
+      value: { id: "var-1" },
+    });
+
+    expect(component.data.actionBindings).toHaveLength(1);
+    const binding = component.data.actionBindings[0]!;
+    expect(binding.value?.name).toBe("onSelect");
+    expect(binding.value?.action).toEqual({
+      type: "set-variable",
+      payload: {
+        newValue: { type: "action-payload", value: { field: "productId" } },
+        variableId: "var-1",
+      },
+    });
+  });
+
+  test("writes prop entries via whole-array sets", () => {
+    const { doc, ids } = makeDocumentWithComponent();
+
+    doc.transaction((root) => {
+      const component = root.findByIdAcrossTree(ids.componentId)!.as(ComponentNode);
+      component.data.props.set([
+        {
+          name: "accentColor",
+          value: { type: "literal", value: { key: "string", value: "#16a34a" } },
+        },
+        {
+          name: "selected",
+          value: { type: "variable-reference", value: { id: "var-1" } },
+        },
+      ]);
+    });
+
+    const component = findComponentSnapshot(doc);
+    expect(component.data.props).toHaveLength(2);
+    expect(new Set(component.data.props.map((prop) => prop.id)).size).toBe(2);
+    expect(new Set(component.data.props.map((prop) => prop.pos)).size).toBe(2);
+    expect(component.data.props[0]!.value?.name).toBe("accentColor");
+    expect(component.data.props[1]!.value?.name).toBe("selected");
+  });
+
+  test("nests component and visual children inside a component", () => {
+    const { doc, ids } = makeDocumentWithComponent();
+
+    doc.transaction((root) => {
+      const component = root.findByIdAcrossTree(ids.componentId)!.as(ComponentNode);
+      const nestedView = component.children.insertLast({ type: "view" });
+      component.children.insertLast({
+        type: "component",
+        componentSlug: "badge",
+        componentVersion: 1,
+        contentHash: "deadbeef",
+      });
+      nestedView.as(ViewNode).children.insertLast({
+        type: "component",
+        componentSlug: "icon",
+        componentVersion: 1,
+        contentHash: "feedface",
+      });
+    });
+
+    const component = findComponentSnapshot(doc);
+    expect(component.children).toHaveLength(2);
+    expect(component.children[0]!.type).toBe("view");
+    expect(component.children[0]!.children[0]!.type).toBe("component");
+    const badge = narrowToComponent(component.children[1]);
+    expect(badge.data.componentSlug).toBe("badge");
+  });
+
+  test("rejects inserting a component under disallowed parents", () => {
+    const doc = createOfflineDocument();
+    const ids = { rootId: "", screenId: "", textId: "" };
+    doc.transaction((root) => {
+      const rootNode = root.children.first()!;
+      ids.rootId = rootNode.id;
+      const screen = rootNode.children.first()!;
+      ids.screenId = screen.id;
+      ids.textId = screen.children.insertLast({ type: "text" }).id;
+    });
+
+    const componentData = {
+      type: "component",
+      componentSlug: "product-option",
+      componentVersion: 1,
+      contentHash: "ab93f1",
+    } as const;
+
+    expect(() =>
+      doc.transaction((root) =>
+        root.findByIdAcrossTree(ids.textId)!.children.insertLast(componentData),
+      ),
+    ).toThrow();
+    expect(() =>
+      doc.transaction((root) =>
+        root.findByIdAcrossTree(ids.rootId)!.children.insertLast(componentData),
+      ),
+    ).toThrow();
+    doc.transaction((root) =>
+      root.findByIdAcrossTree(ids.screenId)!.children.insertLast(componentData),
+    );
+  });
+});
diff --git a/packages/mimic-schema/src/nodes/component-node.ts b/packages/mimic-schema/src/nodes/component-node.ts
new file mode 100644
index 000000000..e0304a404
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/component-node.ts
@@ -0,0 +1,81 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import {
+  componentBoundActionSchema,
+  componentPropBindingSchema,
+  componentPropValueSchema,
+} from "../component-bindings/index.ts";
+import { ScrollViewNode } from "./scrollview-node.ts";
+import { ShapeNode } from "./shape-node.ts";
+import { TextNode } from "./text-node.ts";
+import { ViewNode } from "./view-node.ts";
+
+const componentNodeData = Primitive.Struct({
+  actionBindings: Primitive.Array(
+    Primitive.Struct({
+      action: componentBoundActionSchema.required(),
+      name: Primitive.String().required(),
+    }),
+  ).default([]),
+  /**
+   * Where the component definition comes from. `"catalog"` (default) pins a
+   * deployed artifact via `componentSlug`/`componentVersion`/`contentHash`.
+   * `"local"` references an in-document code-component definition by
+   * `componentPath` (matching the `codeComponent` node's `path`); the catalog
+   * fields carry sentinels (`componentSlug: ""`, `componentVersion: 0`,
+   * `contentHash: ""`). `"builtin"` resolves a first-party component that
+   * ships with the renderer by its stable `componentSlug` — UNPINNED: builtin
+   * instances leave `componentVersion`/`contentHash` at their sentinels and
+   * the implementation evolves with renderer releases.
+   */
+  componentSource: Primitive.String().default("catalog"),
+  /** Canonical document-relative path of the referenced local component (`components/<basename>.tsx`), empty for catalog/builtin instances. */
+  componentPath: Primitive.String().default(""),
+  /** Catalog slug, or the stable builtin slug when `componentSource: "builtin"` (`""` sentinel when local). */
+  componentSlug: Primitive.String().default(""),
+  /** Catalog artifact version (catalog instances only; `0` sentinel when local/builtin — builtins are unpinned). */
+  componentVersion: Primitive.Number().default(0),
+  /** Catalog artifact content hash (catalog instances only; `""` sentinel when local/builtin — builtins are unpinned). */
+  contentHash: Primitive.String().default(""),
+  name: Primitive.String().default("Component"),
+  previewState: Primitive.String().default("default"),
+  props: Primitive.Array(
+    Primitive.Struct({
+      name: Primitive.String().required(),
+      value: componentPropBindingSchema.required(),
+      /**
+       * Per-locale overrides for a literal prop value. Each entry carries a full
+       * `componentPropValue` (whole-value replacement). Only meaningful when
+       * `value` is a literal binding; ignored for variable-reference bindings.
+       */
+      localizedValues: Primitive.Array(
+        Primitive.Struct({
+          locale: Primitive.String().required(),
+          value: componentPropValueSchema.required(),
+        }),
+      ).default([]),
+    }),
+  ).default([]),
+}).required();
+
+/**
+ * ComponentNode tree node schema — an instance of a deployed code component
+ * pinned to an immutable artifact identity (`contentHash`), of an in-document
+ * local component, or of an unpinned renderer builtin (see `componentSource`).
+ * Tree children are the node's slot content. Component nodes carry no
+ * style/states/localVariables/interactions: data flows in through `props` and
+ * out through `actionBindings`.
+ *
+ * The explicit `TreeNodePrimitive` annotation breaks the mutual recursion with
+ * `ViewNode` (TS7022/TS7023). It widens the inferred children type to
+ * `AnyTreeNodePrimitive`, so downstream code must not rely on
+ * `ComponentNodeData["children"]` element types — narrow via `AnyNodeData`
+ * instead.
+ */
+export const ComponentNode: Primitive.TreeNodePrimitive<"component", typeof componentNodeData> =
+  Primitive.TreeNode("component", {
+    children: () => [ViewNode, ScrollViewNode, TextNode, ShapeNode, Primitive.TreeNodeSelf] as const,
+    data: componentNodeData,
+  });
+
+export type ComponentNodeData = Primitive.TreeNodeSnapshot<typeof ComponentNode>;
diff --git a/packages/mimic-schema/src/nodes/index.ts b/packages/mimic-schema/src/nodes/index.ts
new file mode 100644
index 000000000..53f9ee270
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/index.ts
@@ -0,0 +1,60 @@
+import type { CodeComponentNodeData } from "./code-component-node.ts";
+import type { ComponentNodeData } from "./component-node.ts";
+import type { LibraryNodeData } from "./library-node.ts";
+import type { PathNodeData } from "./path-node.ts";
+import type { RootNodeData } from "./root-node.ts";
+import type { ScreenNodeData } from "./screen-node.ts";
+import type { ScrollViewNodeData } from "./scrollview-node.ts";
+import type { ShapeNodeData } from "./shape-node.ts";
+import type { TextNodeData } from "./text-node.ts";
+import type { ViewNodeData } from "./view-node.ts";
+
+export { linkedVariables, localVariables, type Variable } from "./base.ts";
+export { CodeComponentNode, type CodeComponentNodeData } from "./code-component-node.ts";
+export { ComponentNode, type ComponentNodeData } from "./component-node.ts";
+export { LibraryNode, type LibraryNodeData } from "./library-node.ts";
+export { pathNodeStyleSchema } from "./path-node.ts";
+export { screenNodeStyleSchema } from "./screen-node.ts";
+export { shapeNodeStyleSchema } from "./shape-node.ts";
+export { textNodeStyleSchema } from "./text-node.ts";
+export { viewNodeStyleSchema } from "./view-node.ts";
+export { ViewNode, type ViewNodeData, type ViewNodeStateSnapshot } from "./view-node.ts";
+export {
+  ALLOWED_CHILDREN_BY_NODE_TYPE,
+  canBeChildOf,
+  canCreateLayoutChildren,
+  canHaveChildren,
+  EDITABLE_NODE_TYPES,
+  isEditableNodeType,
+  isNodeType,
+  isStatefulNodeType,
+  NODE_TYPES,
+  STATEFUL_NODE_TYPES,
+  type EditableNodeType,
+  type NodeType,
+  type StatefulEditableNodeType,
+} from "./node-catalog.ts";
+export { PathNode, type PathNodeData, type PathNodeUpdateValue } from "./path-node.ts";
+export { RootNode, type RootNodeData } from "./root-node.ts";
+export { ScreenNode, type ScreenNodeData } from "./screen-node.ts";
+export { scrollViewNodeStyleSchema } from "./scrollview-node.ts";
+export {
+  ScrollViewNode,
+  type ScrollViewNodeData,
+  type ScrollViewNodeStateSnapshot,
+  type ScrollViewNodeUpdateValue,
+} from "./scrollview-node.ts";
+export { ShapeNode, type ShapeNodeData, type ShapeNodeUpdateValue } from "./shape-node.ts";
+export { TextNode, type TextNodeData } from "./text-node.ts";
+
+export type AnyNodeData =
+  | ScreenNodeData
+  | ViewNodeData
+  | ScrollViewNodeData
+  | TextNodeData
+  | ShapeNodeData
+  | PathNodeData
+  | ComponentNodeData
+  | RootNodeData
+  | LibraryNodeData
+  | CodeComponentNodeData;
diff --git a/packages/mimic-schema/src/nodes/library-node.ts b/packages/mimic-schema/src/nodes/library-node.ts
new file mode 100644
index 000000000..e8d7943fe
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/library-node.ts
@@ -0,0 +1,16 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { CodeComponentNode } from "./code-component-node.ts";
+
+/**
+ * LibraryNode — a singleton container hung off the document root that holds the
+ * paywall's code-component *definitions* (`codeComponent` children). It is not
+ * part of the visual tree: the canvas walks screens only, never the library.
+ * Created lazily on first component creation; carries no data of its own.
+ */
+export const LibraryNode = Primitive.TreeNode("library", {
+  children: () => [CodeComponentNode] as const,
+  data: Primitive.Struct({}).required(),
+});
+
+export type LibraryNodeData = Primitive.TreeNodeSnapshot<typeof LibraryNode>;
diff --git a/packages/mimic-schema/src/nodes/node-catalog.test.ts b/packages/mimic-schema/src/nodes/node-catalog.test.ts
new file mode 100644
index 000000000..b5b803272
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/node-catalog.test.ts
@@ -0,0 +1,155 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  ALLOWED_CHILDREN_BY_NODE_TYPE,
+  EDITABLE_NODE_TYPES,
+  NODE_TYPES,
+  STATEFUL_NODE_TYPES,
+  canBeChildOf,
+  canCreateLayoutChildren,
+  canHaveChildren,
+  isEditableNodeType,
+  isNodeType,
+  isStatefulNodeType,
+} from "./node-catalog.ts";
+
+describe("node-catalog", () => {
+  it("exposes expected node type sets", () => {
+    expect(NODE_TYPES).toEqual([
+      "root",
+      "screen",
+      "view",
+      "scrollView",
+      "text",
+      "shape",
+      "path",
+      "component",
+      "library",
+      "codeComponent",
+    ]);
+    expect(EDITABLE_NODE_TYPES).toEqual([
+      "screen",
+      "view",
+      "scrollView",
+      "text",
+      "shape",
+      "path",
+      "component",
+    ]);
+    expect(STATEFUL_NODE_TYPES).toEqual(["screen", "view", "scrollView", "text", "shape", "path"]);
+  });
+
+  it("validates node types", () => {
+    expect(isNodeType("root")).toBe(true);
+    expect(isNodeType("shape")).toBe(true);
+    expect(isNodeType("component")).toBe(true);
+    expect(isNodeType("foo")).toBe(false);
+
+    expect(isEditableNodeType("screen")).toBe(true);
+    expect(isEditableNodeType("path")).toBe(true);
+    expect(isEditableNodeType("component")).toBe(true);
+    expect(isEditableNodeType("root")).toBe(false);
+  });
+
+  it("identifies stateful node types", () => {
+    expect(isStatefulNodeType("screen")).toBe(true);
+    expect(isStatefulNodeType("view")).toBe(true);
+    expect(isStatefulNodeType("scrollView")).toBe(true);
+    expect(isStatefulNodeType("text")).toBe(true);
+    expect(isStatefulNodeType("shape")).toBe(true);
+    expect(isStatefulNodeType("path")).toBe(true);
+    expect(isStatefulNodeType("component")).toBe(false);
+    expect(isStatefulNodeType("root")).toBe(false);
+    expect(isStatefulNodeType("foo")).toBe(false);
+  });
+
+  it("applies allowed child rules", () => {
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.root).toEqual(["screen", "library"]);
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.screen).toEqual([
+      "view",
+      "scrollView",
+      "text",
+      "shape",
+      "component",
+    ]);
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.view).toEqual([
+      "view",
+      "scrollView",
+      "text",
+      "shape",
+      "component",
+    ]);
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.scrollView).toEqual([
+      "view",
+      "scrollView",
+      "text",
+      "shape",
+      "component",
+    ]);
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.shape).toEqual(["path"]);
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.component).toEqual([
+      "view",
+      "scrollView",
+      "text",
+      "shape",
+      "component",
+    ]);
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.library).toEqual(["codeComponent"]);
+    expect(ALLOWED_CHILDREN_BY_NODE_TYPE.codeComponent).toEqual([]);
+
+    expect(canBeChildOf("screen", "root")).toBe(true);
+    expect(canBeChildOf("library", "root")).toBe(true);
+    expect(canBeChildOf("codeComponent", "library")).toBe(true);
+    expect(canBeChildOf("codeComponent", "screen")).toBe(false);
+    expect(canBeChildOf("view", "screen")).toBe(true);
+    expect(canBeChildOf("scrollView", "screen")).toBe(true);
+    expect(canBeChildOf("scrollView", "view")).toBe(true);
+    expect(canBeChildOf("view", "scrollView")).toBe(true);
+    expect(canBeChildOf("scrollView", "scrollView")).toBe(true);
+    expect(canBeChildOf("text", "scrollView")).toBe(true);
+    expect(canBeChildOf("scrollView", "component")).toBe(true);
+    expect(canBeChildOf("text", "view")).toBe(true);
+    expect(canBeChildOf("shape", "screen")).toBe(true);
+    expect(canBeChildOf("path", "shape")).toBe(true);
+    expect(canBeChildOf("component", "screen")).toBe(true);
+    expect(canBeChildOf("component", "view")).toBe(true);
+    expect(canBeChildOf("component", "component")).toBe(true);
+    expect(canBeChildOf("view", "component")).toBe(true);
+    expect(canBeChildOf("text", "component")).toBe(true);
+    expect(canBeChildOf("shape", "component")).toBe(true);
+
+    expect(canBeChildOf("shape", "shape")).toBe(false);
+    expect(canBeChildOf("path", "screen")).toBe(false);
+    expect(canBeChildOf("screen", "view")).toBe(false);
+    expect(canBeChildOf("component", "root")).toBe(false);
+    expect(canBeChildOf("component", "shape")).toBe(false);
+    expect(canBeChildOf("component", "text")).toBe(false);
+    expect(canBeChildOf("path", "component")).toBe(false);
+    expect(canBeChildOf("screen", "component")).toBe(false);
+    expect(canBeChildOf("foo", "screen")).toBe(false);
+    expect(canBeChildOf("text", "foo")).toBe(false);
+  });
+
+  it("exposes container capabilities", () => {
+    expect(canHaveChildren("root")).toBe(true);
+    expect(canHaveChildren("screen")).toBe(true);
+    expect(canHaveChildren("view")).toBe(true);
+    expect(canHaveChildren("scrollView")).toBe(true);
+    expect(canHaveChildren("shape")).toBe(true);
+    expect(canHaveChildren("component")).toBe(true);
+    expect(canHaveChildren("text")).toBe(false);
+    expect(canHaveChildren("path")).toBe(false);
+    expect(canHaveChildren("unknown")).toBe(false);
+  });
+
+  it("limits layout primitive creation to screen, view and component", () => {
+    expect(canCreateLayoutChildren("screen")).toBe(true);
+    expect(canCreateLayoutChildren("view")).toBe(true);
+    expect(canCreateLayoutChildren("scrollView")).toBe(true);
+    expect(canCreateLayoutChildren("component")).toBe(true);
+    expect(canCreateLayoutChildren("shape")).toBe(false);
+    expect(canCreateLayoutChildren("root")).toBe(false);
+    expect(canCreateLayoutChildren("path")).toBe(false);
+    expect(canCreateLayoutChildren("unknown")).toBe(false);
+  });
+});
diff --git a/packages/mimic-schema/src/nodes/node-catalog.ts b/packages/mimic-schema/src/nodes/node-catalog.ts
new file mode 100644
index 000000000..34d4cf3d2
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/node-catalog.ts
@@ -0,0 +1,90 @@
+export const NODE_TYPES = [
+  "root",
+  "screen",
+  "view",
+  "scrollView",
+  "text",
+  "shape",
+  "path",
+  "component",
+  "library",
+  "codeComponent",
+] as const;
+
+export type NodeType = (typeof NODE_TYPES)[number];
+
+export const EDITABLE_NODE_TYPES = [
+  "screen",
+  "view",
+  "scrollView",
+  "text",
+  "shape",
+  "path",
+  "component",
+] as const;
+
+export type EditableNodeType = (typeof EDITABLE_NODE_TYPES)[number];
+
+/**
+ * Editable node types carrying the generic stateful data fields
+ * (`style`, `states`, `localVariables`). Component nodes are editable but
+ * stateless (props in, actions out) — generic style/state/variable actions
+ * must be typed over this subset.
+ */
+export const STATEFUL_NODE_TYPES = [
+  "screen",
+  "view",
+  "scrollView",
+  "text",
+  "shape",
+  "path",
+] as const;
+
+export type StatefulEditableNodeType = (typeof STATEFUL_NODE_TYPES)[number];
+
+export const ALLOWED_CHILDREN_BY_NODE_TYPE: Record<NodeType, readonly NodeType[]> = {
+  root: ["screen", "library"],
+  screen: ["view", "scrollView", "text", "shape", "component"],
+  view: ["view", "scrollView", "text", "shape", "component"],
+  scrollView: ["view", "scrollView", "text", "shape", "component"],
+  text: [],
+  shape: ["path"],
+  path: [],
+  component: ["view", "scrollView", "text", "shape", "component"],
+  library: ["codeComponent"],
+  codeComponent: [],
+};
+
+export function isNodeType(type: string): type is NodeType {
+  return NODE_TYPES.includes(type as NodeType);
+}
+
+export function isEditableNodeType(type: string): type is EditableNodeType {
+  return EDITABLE_NODE_TYPES.includes(type as EditableNodeType);
+}
+
+export function isStatefulNodeType(type: string): type is StatefulEditableNodeType {
+  return STATEFUL_NODE_TYPES.includes(type as StatefulEditableNodeType);
+}
+
+export function canBeChildOf(childType: string | NodeType, parentType: string | NodeType): boolean {
+  if (!isNodeType(childType) || !isNodeType(parentType)) {
+    return false;
+  }
+  return ALLOWED_CHILDREN_BY_NODE_TYPE[parentType].includes(childType);
+}
+
+export function canHaveChildren(type: string | NodeType | null | undefined): boolean {
+  return type != null && isNodeType(type) && ALLOWED_CHILDREN_BY_NODE_TYPE[type].length > 0;
+}
+
+/**
+ * Node types that can host layout primitives created from context menu
+ * (row, column, text). We intentionally exclude shape although it is a
+ * container, because it should only contain path nodes. Component nodes
+ * qualify at the type level only — actions must additionally gate on the
+ * component manifest's `slot` flag.
+ */
+export function canCreateLayoutChildren(type: string | NodeType | null | undefined): boolean {
+  return type === "screen" || type === "view" || type === "scrollView" || type === "component";
+}
diff --git a/packages/mimic-schema/src/nodes/path-node.ts b/packages/mimic-schema/src/nodes/path-node.ts
new file mode 100644
index 000000000..373d24f79
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/path-node.ts
@@ -0,0 +1,63 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { createStateSchemaWithStyleOverrides } from "../states/index.ts";
+import {
+  display,
+  fillColor,
+  fillEnabled,
+  fillOpacity,
+  fillRule,
+  opacity,
+  strokeColor,
+  strokeEnabled,
+  strokeLinecap,
+  strokeLinejoin,
+  strokeOpacity,
+  strokeWidth,
+} from "../styles/index.ts";
+import { linkedVariables, localVariables } from "./base.ts";
+
+export const pathNodeStyleSchema = Primitive.Struct({
+  // Fill
+  fillColor,
+  fillEnabled,
+  fillRule,
+  fillOpacity,
+  // Stroke
+  strokeColor,
+  strokeEnabled,
+  strokeWidth,
+  strokeOpacity,
+  strokeLinecap,
+  strokeLinejoin,
+  // Visual
+  opacity,
+  display,
+}).default({});
+
+export const pathNodeStateSchema = createStateSchemaWithStyleOverrides(
+  pathNodeStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const pathNodeStates = Primitive.Array(pathNodeStateSchema).default([]);
+
+/** PathNode tree node schema - represents an SVG path element */
+export const PathNode = Primitive.TreeNode("path", {
+  children: [] as const,
+  data: Primitive.Struct({
+    linkedVariables,
+    localVariables,
+    name: Primitive.String().default("Path"),
+    states: pathNodeStates,
+    // Path data (d attribute)
+    d: Primitive.String().default(""),
+    // Pre-computed transform from group flattening — optional, absence means "no transform"
+    transform: Primitive.String(),
+    style: pathNodeStyleSchema,
+  }).required(),
+});
+
+export type PathNodeData = Primitive.TreeNodeSnapshot<typeof PathNode>;
+export type PathNodeUpdateValue = Primitive.InferUpdateInput<
+  Primitive.InferTreeNodeData<typeof PathNode>
+>;
diff --git a/packages/mimic-schema/src/nodes/root-node.ts b/packages/mimic-schema/src/nodes/root-node.ts
new file mode 100644
index 000000000..2895a857d
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/root-node.ts
@@ -0,0 +1,32 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { LibraryNode } from "./library-node.ts";
+import { ScreenNode } from "./screen-node.ts";
+
+/**
+ * Document-wide localization config. `defaultLocale` is the implicit base locale
+ * every node authors against; `locales` lists the ADDITIONAL enabled locales
+ * (the default is never listed). All localized overrides fall back to the base
+ * values when a locale carries no override, so an empty config is a no-op.
+ */
+export const localizationConfigSchema = Primitive.Struct({
+  defaultLocale: Primitive.String().default("en"),
+  locales: Primitive.Array(
+    Primitive.Struct({ tag: Primitive.String().required() }),
+  ).default([]),
+}).default({});
+
+/**
+ * RootNode tree node schema - the document root. Contains the visual `screen`
+ * subtree plus an optional singleton `library` node holding code-component
+ * definitions (source only, never rendered on canvas).
+ */
+export const RootNode = Primitive.TreeNode("root", {
+  children: () => [ScreenNode, LibraryNode] as const,
+  data: Primitive.Struct({
+    localization: localizationConfigSchema,
+    name: Primitive.String(),
+  }).required(),
+});
+
+export type RootNodeData = Primitive.TreeNodeSnapshot<typeof RootNode>;
diff --git a/packages/mimic-schema/src/nodes/screen-node.ts b/packages/mimic-schema/src/nodes/screen-node.ts
new file mode 100644
index 000000000..e27137d2d
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/screen-node.ts
@@ -0,0 +1,155 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { createStateSchemaWithStyleOverrides } from "../states/index.ts";
+import {
+  alignItems,
+  alignSelf,
+  backgroundColor,
+  backgroundEnabled,
+  backgroundGradient,
+  backgroundImage,
+  backgroundType,
+  borderBottomWidth,
+  borderColor,
+  borderEnabled,
+  borderLeftWidth,
+  borderRightWidth,
+  borderStyle,
+  borderTopWidth,
+  display,
+  flex,
+  flexBasis,
+  flexDirection,
+  flexGrow,
+  flexShrink,
+  gap,
+  justifyContent,
+  marginBottom,
+  marginLeft,
+  marginRight,
+  marginTop,
+  maxHeight,
+  maxWidth,
+  minHeight,
+  minWidth,
+  opacity,
+  overflow,
+  paddingBottom,
+  paddingLeft,
+  paddingRight,
+  paddingTop,
+  safeAreaBottom,
+  safeAreaTop,
+  shadowColor,
+  shadowEnabled,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowOpacity,
+  shadowRadius,
+  x,
+  y,
+  zIndex,
+} from "../styles/index.ts";
+import { linkedVariables, localVariables } from "./base.ts";
+import { ComponentNode } from "./component-node.ts";
+import { ScrollViewNode } from "./scrollview-node.ts";
+import { ShapeNode } from "./shape-node.ts";
+import { TextNode } from "./text-node.ts";
+import { ViewNode } from "./view-node.ts";
+
+export const screenNodeStyleSchema = Primitive.Struct({
+  // Position
+  x,
+  y,
+  // Size
+  width: Primitive.Number().default(375),
+  height: Primitive.Number().default(812),
+  minWidth,
+  maxWidth,
+  minHeight,
+  maxHeight,
+  // Padding
+  paddingTop,
+  paddingRight,
+  paddingBottom,
+  paddingLeft,
+  // Margin
+  marginTop,
+  marginRight,
+  marginBottom,
+  marginLeft,
+  // Layout
+  gap,
+  justifyContent,
+  alignItems,
+  flexDirection,
+  // Background
+  backgroundColor: backgroundColor.default("rgba(255, 255, 255, 1)"),
+  backgroundEnabled: backgroundEnabled.default(true),
+  backgroundType,
+  backgroundGradient,
+  backgroundImage,
+  // Border
+  borderTopWidth,
+  borderRightWidth,
+  borderBottomWidth,
+  borderLeftWidth,
+  borderColor,
+  borderStyle,
+  borderEnabled,
+  // Visual
+  opacity,
+  overflow,
+  zIndex,
+  display,
+  // Shadow
+  shadowEnabled,
+  shadowColor,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowRadius,
+  shadowOpacity,
+  // Safe area
+  safeAreaTop,
+  safeAreaBottom,
+  // Flex child
+  flex,
+  flexGrow,
+  flexShrink,
+  flexBasis,
+  alignSelf,
+}).default({});
+
+export const screenNodeStateSchema = createStateSchemaWithStyleOverrides(
+  screenNodeStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const screenNodeStates = Primitive.Array(screenNodeStateSchema).default([]);
+
+// Per-locale background-image overrides — same whole-value shape and fall-back
+// discipline as ViewNode's localized overrides.
+export const screenNodeLocalizedSchema = Primitive.Array(
+  Primitive.Struct({
+    locale: Primitive.String().required(),
+    overrides: Primitive.Struct({
+      backgroundImage,
+    })
+      .partial({ stripDefaults: true })
+      .default({}),
+  }),
+).default([]);
+
+/** ScreenNode tree node schema */
+export const ScreenNode = Primitive.TreeNode("screen", {
+  children: () => [ViewNode, ScrollViewNode, TextNode, ShapeNode, ComponentNode] as const,
+  data: Primitive.Struct({
+    linkedVariables,
+    localVariables,
+    localized: screenNodeLocalizedSchema,
+    name: Primitive.String().default("Screen"),
+    states: screenNodeStates,
+    style: screenNodeStyleSchema,
+  }).required(),
+});
+
+export type ScreenNodeData = Primitive.TreeNodeSnapshot<typeof ScreenNode>;
diff --git a/packages/mimic-schema/src/nodes/scrollview-node.test.ts b/packages/mimic-schema/src/nodes/scrollview-node.test.ts
new file mode 100644
index 000000000..8c3668edf
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/scrollview-node.test.ts
@@ -0,0 +1,167 @@
+import {
+  createClientDocument,
+  type DocumentTransport,
+  type ServerMessage,
+  type TransactionEnvelope,
+} from "@voidhash/mimic";
+import { type Value } from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import { createInitialPaywallDocumentInput, PaywallDesignerDocument } from "../document.ts";
+import { ComponentNode } from "./component-node.ts";
+import { RootNode } from "./root-node.ts";
+import { ScreenNode } from "./screen-node.ts";
+import { ScrollViewNode, type ScrollViewNodeData } from "./scrollview-node.ts";
+import { ShapeNode } from "./shape-node.ts";
+import { TextNode } from "./text-node.ts";
+import { ViewNode } from "./view-node.ts";
+
+class StubTransport implements DocumentTransport {
+  readonly submitted: TransactionEnvelope[] = [];
+
+  async connect(): Promise<void> {}
+  disconnect(): void {}
+  subscribe(_handler: (message: ServerMessage) => void): () => void {
+    return () => {};
+  }
+  subscribeConnection(_handler: (connected: boolean) => void): () => void {
+    return () => {};
+  }
+  requestSnapshot(): void {}
+  submit(transaction: TransactionEnvelope): void {
+    this.submitted.push(transaction);
+  }
+  setPresence(_data: Value): void {}
+  clearPresence(): void {}
+  isConnected(): boolean {
+    return false;
+  }
+}
+
+function createOfflineDocument() {
+  return createClientDocument({
+    primitive: PaywallDesignerDocument,
+    transport: new StubTransport(),
+    initialValue: PaywallDesignerDocument.encode(createInitialPaywallDocumentInput()),
+  });
+}
+
+function makeDocumentWithScrollView() {
+  const doc = createOfflineDocument();
+  const ids = { rootId: "", screenId: "", scrollViewId: "" };
+  doc.transaction((root) => {
+    const rootNode = root.children.first()!;
+    ids.rootId = rootNode.id;
+    const screen = rootNode.children.first()!;
+    ids.screenId = screen.id;
+    const scrollView = screen.children.insertLast({ type: "scrollView" });
+    ids.scrollViewId = scrollView.id;
+  });
+  return { doc, ids };
+}
+
+function findScrollViewSnapshot(
+  doc: ReturnType<typeof makeDocumentWithScrollView>["doc"],
+): ScrollViewNodeData {
+  const roots = doc.getSnapshot();
+  expect(roots).toBeDefined();
+  const screen = roots![0]!.children[0];
+  expect(screen).toBeDefined();
+  const scrollView = screen!.children[0];
+  expect(scrollView).toBeDefined();
+  expect(scrollView!.type).toBe("scrollView");
+  return scrollView as ScrollViewNodeData;
+}
+
+describe("ScrollViewNode", () => {
+  test("declares the same allowed children as a view, including itself", () => {
+    expect(ScrollViewNode.type).toBe("scrollView");
+    expect(ScrollViewNode.isChildAllowed("view")).toBe(true);
+    expect(ScrollViewNode.isChildAllowed("scrollView")).toBe(true);
+    expect(ScrollViewNode.isChildAllowed("text")).toBe(true);
+    expect(ScrollViewNode.isChildAllowed("shape")).toBe(true);
+    expect(ScrollViewNode.isChildAllowed("component")).toBe(true);
+    expect(ScrollViewNode.isChildAllowed("screen")).toBe(false);
+    expect(ScrollViewNode.isChildAllowed("path")).toBe(false);
+  });
+
+  test("is an allowed child of screen and view but not root/text/shape", () => {
+    expect(ScreenNode.isChildAllowed("scrollView")).toBe(true);
+    expect(ViewNode.isChildAllowed("scrollView")).toBe(true);
+    expect(RootNode.isChildAllowed("scrollView")).toBe(false);
+    expect(TextNode.isChildAllowed("scrollView")).toBe(false);
+    expect(ShapeNode.isChildAllowed("scrollView")).toBe(false);
+    expect(ComponentNode.isChildAllowed("scrollView")).toBe(true);
+  });
+
+  test("inserts with RN ScrollView defaults", () => {
+    const { doc } = makeDocumentWithScrollView();
+    const scrollView = findScrollViewSnapshot(doc);
+
+    expect(scrollView.data.name).toBe("ScrollView");
+    expect(scrollView.data.horizontal).toBe(false);
+    expect(scrollView.data.showsScrollIndicator).toBe(true);
+    expect(scrollView.data.states).toEqual([]);
+    expect(scrollView.data.localized).toEqual([]);
+    expect(scrollView.children).toEqual([]);
+  });
+
+  test("honors explicit horizontal / showsScrollIndicator values", () => {
+    const { doc, ids } = makeDocumentWithScrollView();
+
+    doc.transaction((root) => {
+      const scrollView = root.findByIdAcrossTree(ids.scrollViewId)!.as(ScrollViewNode);
+      scrollView.data.horizontal.set(true);
+      scrollView.data.showsScrollIndicator.set(false);
+    });
+
+    const scrollView = findScrollViewSnapshot(doc);
+    expect(scrollView.data.horizontal).toBe(true);
+    expect(scrollView.data.showsScrollIndicator).toBe(false);
+  });
+
+  test("nests visual children inside a scrollView", () => {
+    const { doc, ids } = makeDocumentWithScrollView();
+
+    doc.transaction((root) => {
+      const scrollView = root.findByIdAcrossTree(ids.scrollViewId)!.as(ScrollViewNode);
+      scrollView.children.insertLast({ type: "view" });
+      scrollView.children.insertLast({ type: "text" });
+      scrollView.children.insertLast({ type: "scrollView" });
+    });
+
+    const scrollView = findScrollViewSnapshot(doc);
+    expect(scrollView.children).toHaveLength(3);
+    expect(scrollView.children.map((child) => child.type)).toEqual([
+      "view",
+      "text",
+      "scrollView",
+    ]);
+  });
+
+  test("rejects inserting a scrollView under disallowed parents", () => {
+    const doc = createOfflineDocument();
+    const ids = { rootId: "", screenId: "", textId: "" };
+    doc.transaction((root) => {
+      const rootNode = root.children.first()!;
+      ids.rootId = rootNode.id;
+      const screen = rootNode.children.first()!;
+      ids.screenId = screen.id;
+      ids.textId = screen.children.insertLast({ type: "text" }).id;
+    });
+
+    expect(() =>
+      doc.transaction((root) =>
+        root.findByIdAcrossTree(ids.textId)!.children.insertLast({ type: "scrollView" }),
+      ),
+    ).toThrow();
+    expect(() =>
+      doc.transaction((root) =>
+        root.findByIdAcrossTree(ids.rootId)!.children.insertLast({ type: "scrollView" }),
+      ),
+    ).toThrow();
+    doc.transaction((root) =>
+      root.findByIdAcrossTree(ids.screenId)!.children.insertLast({ type: "scrollView" }),
+    );
+  });
+});
diff --git a/packages/mimic-schema/src/nodes/scrollview-node.ts b/packages/mimic-schema/src/nodes/scrollview-node.ts
new file mode 100644
index 000000000..617a78e80
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/scrollview-node.ts
@@ -0,0 +1,203 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { interactionsSchema } from "../interactions/index.ts";
+import { createStateSchemaWithStyleAndActionOverrides } from "../states/index.ts";
+import {
+  alignItems,
+  alignSelf,
+  backgroundColor,
+  backgroundEnabled,
+  backgroundGradient,
+  backgroundImage,
+  backgroundType,
+  borderBottomLeftRadius,
+  borderBottomRightRadius,
+  borderBottomWidth,
+  borderColor,
+  borderEnabled,
+  borderLeftWidth,
+  borderRightWidth,
+  borderStyle,
+  borderTopLeftRadius,
+  borderTopRightRadius,
+  borderTopWidth,
+  bottom,
+  display,
+  flex,
+  flexBasis,
+  flexDirection,
+  flexGrow,
+  flexShrink,
+  gap,
+  height,
+  justifyContent,
+  left,
+  marginBottom,
+  marginLeft,
+  marginRight,
+  marginTop,
+  maxHeight,
+  maxWidth,
+  minHeight,
+  minWidth,
+  opacity,
+  overflow,
+  paddingBottom,
+  paddingLeft,
+  paddingRight,
+  paddingTop,
+  position,
+  right,
+  safeAreaBottom,
+  safeAreaTop,
+  shadowColor,
+  shadowEnabled,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowOpacity,
+  shadowRadius,
+  top,
+  width,
+  zIndex,
+} from "../styles/index.ts";
+import { linkedVariables, localVariables } from "./base.ts";
+import { ComponentNode } from "./component-node.ts";
+import { ShapeNode } from "./shape-node.ts";
+import { TextNode } from "./text-node.ts";
+import { ViewNode } from "./view-node.ts";
+
+// Mirrors `viewNodeStyleSchema` field-for-field; scrollView carries the same
+// style surface as a view. Duplicated (not imported from view-node.ts) to keep
+// module evaluation order independent of the mutual view ⇄ scrollView import.
+export const scrollViewNodeStyleSchema = Primitive.Struct({
+  // Padding
+  paddingTop,
+  paddingRight,
+  paddingBottom,
+  paddingLeft,
+  // Margin
+  marginTop,
+  marginRight,
+  marginBottom,
+  marginLeft,
+  // Layout
+  gap,
+  justifyContent,
+  alignItems,
+  flexDirection,
+  // Dimensions
+  width,
+  height,
+  // Size constraints
+  minWidth,
+  maxWidth,
+  minHeight,
+  maxHeight,
+  // Background
+  backgroundColor,
+  backgroundEnabled,
+  backgroundType,
+  backgroundGradient,
+  backgroundImage,
+  // Border
+  borderTopWidth,
+  borderRightWidth,
+  borderBottomWidth,
+  borderLeftWidth,
+  borderColor,
+  borderStyle,
+  borderEnabled,
+  // Border radius
+  borderTopLeftRadius,
+  borderTopRightRadius,
+  borderBottomRightRadius,
+  borderBottomLeftRadius,
+  // Visual
+  opacity,
+  overflow,
+  zIndex,
+  // Position
+  position,
+  left,
+  top,
+  right,
+  bottom,
+  display,
+  // Shadow
+  shadowEnabled,
+  shadowColor,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowRadius,
+  shadowOpacity,
+  // Safe area
+  safeAreaTop,
+  safeAreaBottom,
+  // Flex child
+  flex,
+  flexGrow,
+  flexShrink,
+  flexBasis,
+  alignSelf: alignSelf.default("auto"),
+}).default({});
+
+export const scrollViewNodeStateSchema = createStateSchemaWithStyleAndActionOverrides(
+  scrollViewNodeStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const scrollViewNodeStates = Primitive.Array(scrollViewNodeStateSchema).default([]);
+
+// Per-locale background-image overrides. Mirrors `viewNodeLocalizedSchema`
+// field-for-field; scrollView carries the same localizable surface as a view.
+// Duplicated (not imported from view-node.ts) to keep module evaluation order
+// independent of the mutual view ⇄ scrollView import. `backgroundImage` (url +
+// resizeMode) travels as a whole value; `.partial({ stripDefaults: true })`
+// drops its own default so an entry that omits it falls back to the base style
+// rather than materializing an empty image.
+const scrollViewNodeLocalizedSchema = Primitive.Array(
+  Primitive.Struct({
+    locale: Primitive.String().required(),
+    overrides: Primitive.Struct({
+      backgroundImage,
+    })
+      .partial({ stripDefaults: true })
+      .default({}),
+  }),
+).default([]);
+
+const scrollViewNodeData = Primitive.Struct({
+  /** RN ScrollView: lay children out along the horizontal axis instead of vertical. */
+  horizontal: Primitive.Boolean().default(false),
+  interactions: interactionsSchema,
+  linkedVariables,
+  localVariables,
+  localized: scrollViewNodeLocalizedSchema,
+  name: Primitive.String().default("ScrollView"),
+  /** RN ScrollView: whether the scroll indicator (scrollbar) is visible. */
+  showsScrollIndicator: Primitive.Boolean().default(true),
+  states: scrollViewNodeStates,
+  style: scrollViewNodeStyleSchema,
+}).required();
+
+/**
+ * ScrollViewNode tree node schema — a scrollable container mirroring
+ * {@link ViewNode}'s style/state/children capabilities, plus the RN ScrollView
+ * data fields `horizontal` and `showsScrollIndicator`.
+ *
+ * The explicit `TreeNodePrimitive` annotation breaks the mutual recursion with
+ * `ViewNode` (TS7022/TS7023), matching the pattern used by `ComponentNode`.
+ */
+export const ScrollViewNode: Primitive.TreeNodePrimitive<"scrollView", typeof scrollViewNodeData> =
+  Primitive.TreeNode("scrollView", {
+    children: () =>
+      [ViewNode, Primitive.TreeNodeSelf, TextNode, ShapeNode, ComponentNode] as const,
+    data: scrollViewNodeData,
+  });
+
+export type ScrollViewNodeData = Primitive.TreeNodeSnapshot<typeof ScrollViewNode>;
+export type ScrollViewNodeStateSnapshot = NonNullable<
+  Primitive.InferSnapshot<typeof scrollViewNodeStateSchema>
+>;
+export type ScrollViewNodeUpdateValue = Primitive.InferUpdateInput<
+  Primitive.InferTreeNodeData<typeof ScrollViewNode>
+>;
diff --git a/packages/mimic-schema/src/nodes/shape-node.ts b/packages/mimic-schema/src/nodes/shape-node.ts
new file mode 100644
index 000000000..53ab7fca8
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/shape-node.ts
@@ -0,0 +1,92 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { createStateSchemaWithStyleOverrides } from "../states/index.ts";
+import {
+  alignSelf,
+  display,
+  flex,
+  flexBasis,
+  flexGrow,
+  flexShrink,
+  height,
+  marginBottom,
+  marginLeft,
+  marginRight,
+  marginTop,
+  maxHeight,
+  maxWidth,
+  minHeight,
+  minWidth,
+  opacity,
+  width,
+} from "../styles/index.ts";
+import { linkedVariables, localVariables } from "./base.ts";
+import { PathNode } from "./path-node.ts";
+
+// SVG preserveAspectRatio options
+export const preserveAspectRatio = Primitive.Either(
+  Primitive.Literal("none"),
+  Primitive.Literal("xMidYMid meet"),
+  Primitive.Literal("xMidYMid slice"),
+).default("xMidYMid meet");
+
+/** ViewBox schema for SVG coordinate system */
+export const viewBox = Primitive.Struct({
+  minX: Primitive.Number().default(0),
+  minY: Primitive.Number().default(0),
+  width: Primitive.Number().default(24),
+  height: Primitive.Number().default(24),
+}).default({});
+
+export const shapeNodeStyleSchema = Primitive.Struct({
+  // Dimensions
+  width,
+  height,
+  minWidth,
+  maxWidth,
+  minHeight,
+  maxHeight,
+  // Margin
+  marginTop,
+  marginRight,
+  marginBottom,
+  marginLeft,
+  // Visual
+  opacity,
+  display,
+  // Flex child
+  flex,
+  flexGrow,
+  flexShrink,
+  flexBasis,
+  alignSelf: alignSelf.default("auto"),
+  // SVG scaling
+  preserveAspectRatio,
+}).default({});
+
+export const shapeNodeStateSchema = createStateSchemaWithStyleOverrides(
+  shapeNodeStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const shapeNodeStates = Primitive.Array(shapeNodeStateSchema).default([]);
+
+/** ShapeNode tree node schema - container for SVG paths */
+export const ShapeNode = Primitive.TreeNode("shape", {
+  children: [PathNode] as const,
+  data: Primitive.Struct({
+    linkedVariables,
+    localVariables,
+    name: Primitive.String().default("Shape"),
+    states: shapeNodeStates,
+    // Original SVG source for reference — optional, absence means "not imported from SVG"
+    svgSource: Primitive.String(),
+    // SVG viewBox
+    viewBox,
+    style: shapeNodeStyleSchema,
+  }).required(),
+});
+
+export type ShapeNodeData = Primitive.TreeNodeSnapshot<typeof ShapeNode>;
+export type ShapeNodeUpdateValue = Primitive.InferUpdateInput<
+  Primitive.InferTreeNodeData<typeof ShapeNode>
+>;
diff --git a/packages/mimic-schema/src/nodes/text-node.ts b/packages/mimic-schema/src/nodes/text-node.ts
new file mode 100644
index 000000000..61cbf4ffb
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/text-node.ts
@@ -0,0 +1,133 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { createStateSchemaWithStyleOverrides } from "../states/index.ts";
+import {
+  alignSelf,
+  borderBottomWidth,
+  borderColor,
+  borderEnabled,
+  borderLeftWidth,
+  borderRightWidth,
+  borderStyle,
+  borderTopWidth,
+  bottom,
+  color,
+  display,
+  flex,
+  flexBasis,
+  flexGrow,
+  flexShrink,
+  fontSize,
+  fontWeight,
+  left,
+  letterSpacing,
+  lineHeight,
+  marginBottom,
+  marginLeft,
+  marginRight,
+  marginTop,
+  maxHeight,
+  maxWidth,
+  minHeight,
+  minWidth,
+  opacity,
+  overflow,
+  position,
+  right,
+  shadowColor,
+  shadowEnabled,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowOpacity,
+  shadowRadius,
+  textAlign,
+  top,
+  zIndex,
+} from "../styles/index.ts";
+import { linkedVariables, localVariables } from "./base.ts";
+
+export const textNodeStyleSchema = Primitive.Struct({
+  // Margin
+  marginTop,
+  marginRight,
+  marginBottom,
+  marginLeft,
+  // Size constraints
+  minWidth,
+  maxWidth,
+  minHeight,
+  maxHeight,
+  // Typography
+  fontSize,
+  fontWeight,
+  color,
+  textAlign,
+  lineHeight,
+  letterSpacing,
+  // Border
+  borderTopWidth,
+  borderRightWidth,
+  borderBottomWidth,
+  borderLeftWidth,
+  borderColor,
+  borderStyle,
+  borderEnabled,
+  // Visual
+  opacity,
+  overflow,
+  zIndex,
+  // Position
+  position,
+  left,
+  top,
+  right,
+  bottom,
+  display,
+  // Shadow
+  shadowEnabled,
+  shadowColor,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowRadius,
+  shadowOpacity,
+  // Flex child
+  flex,
+  flexGrow,
+  flexShrink,
+  flexBasis,
+  alignSelf,
+}).default({});
+
+export const textNodeStateSchema = createStateSchemaWithStyleOverrides(
+  textNodeStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const textNodeStates = Primitive.Array(textNodeStateSchema).default([]);
+
+// Per-locale text overrides. `text` is optional and defaultless, so an entry
+// whose overrides omit `text` (or clear it back to unset) falls back to the base
+// `text` — mirroring the "absent = fall back" discipline of state overrides.
+export const textNodeLocalizedSchema = Primitive.Array(
+  Primitive.Struct({
+    locale: Primitive.String().required(),
+    overrides: Primitive.Struct({
+      text: Primitive.String(),
+    }).default({}),
+  }),
+).default([]);
+
+/** TextNode tree node schema */
+export const TextNode = Primitive.TreeNode("text", {
+  children: [] as const,
+  data: Primitive.Struct({
+    linkedVariables,
+    localVariables,
+    localized: textNodeLocalizedSchema,
+    name: Primitive.String().default("Text"),
+    states: textNodeStates,
+    style: textNodeStyleSchema,
+    text: Primitive.String().default("New Text"),
+  }).required(),
+});
+
+export type TextNodeData = Primitive.TreeNodeSnapshot<typeof TextNode>;
diff --git a/packages/mimic-schema/src/nodes/view-node.ts b/packages/mimic-schema/src/nodes/view-node.ts
new file mode 100644
index 000000000..41f5daf3a
--- /dev/null
+++ b/packages/mimic-schema/src/nodes/view-node.ts
@@ -0,0 +1,183 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { interactionsSchema } from "../interactions/index.ts";
+import { createStateSchemaWithStyleAndActionOverrides } from "../states/index.ts";
+import {
+  alignItems,
+  alignSelf,
+  backgroundColor,
+  backgroundEnabled,
+  backgroundGradient,
+  backgroundImage,
+  backgroundType,
+  borderBottomLeftRadius,
+  borderBottomRightRadius,
+  borderBottomWidth,
+  borderColor,
+  borderEnabled,
+  borderLeftWidth,
+  borderRightWidth,
+  borderStyle,
+  borderTopLeftRadius,
+  borderTopRightRadius,
+  borderTopWidth,
+  bottom,
+  display,
+  flex,
+  flexBasis,
+  flexDirection,
+  flexGrow,
+  flexShrink,
+  gap,
+  height,
+  justifyContent,
+  left,
+  marginBottom,
+  marginLeft,
+  marginRight,
+  marginTop,
+  maxHeight,
+  maxWidth,
+  minHeight,
+  minWidth,
+  opacity,
+  overflow,
+  paddingBottom,
+  paddingLeft,
+  paddingRight,
+  paddingTop,
+  position,
+  right,
+  safeAreaBottom,
+  safeAreaTop,
+  shadowColor,
+  shadowEnabled,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowOpacity,
+  shadowRadius,
+  top,
+  width,
+  zIndex,
+} from "../styles/index.ts";
+import { linkedVariables, localVariables } from "./base.ts";
+import { ComponentNode } from "./component-node.ts";
+import { ScrollViewNode } from "./scrollview-node.ts";
+import { ShapeNode } from "./shape-node.ts";
+import { TextNode } from "./text-node.ts";
+
+export const viewNodeStyleSchema = Primitive.Struct({
+  // Padding
+  paddingTop,
+  paddingRight,
+  paddingBottom,
+  paddingLeft,
+  // Margin
+  marginTop,
+  marginRight,
+  marginBottom,
+  marginLeft,
+  // Layout
+  gap,
+  justifyContent,
+  alignItems,
+  flexDirection,
+  // Dimensions
+  width,
+  height,
+  // Size constraints
+  minWidth,
+  maxWidth,
+  minHeight,
+  maxHeight,
+  // Background
+  backgroundColor,
+  backgroundEnabled,
+  backgroundType,
+  backgroundGradient,
+  backgroundImage,
+  // Border
+  borderTopWidth,
+  borderRightWidth,
+  borderBottomWidth,
+  borderLeftWidth,
+  borderColor,
+  borderStyle,
+  borderEnabled,
+  // Border radius
+  borderTopLeftRadius,
+  borderTopRightRadius,
+  borderBottomRightRadius,
+  borderBottomLeftRadius,
+  // Visual
+  opacity,
+  overflow,
+  zIndex,
+  // Position
+  position,
+  left,
+  top,
+  right,
+  bottom,
+  display,
+  // Shadow
+  shadowEnabled,
+  shadowColor,
+  shadowOffsetX,
+  shadowOffsetY,
+  shadowRadius,
+  shadowOpacity,
+  // Safe area
+  safeAreaTop,
+  safeAreaBottom,
+  // Flex child
+  flex,
+  flexGrow,
+  flexShrink,
+  flexBasis,
+  alignSelf: alignSelf.default("auto"),
+}).default({});
+
+export const viewNodeStateSchema = createStateSchemaWithStyleAndActionOverrides(
+  viewNodeStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const viewNodeStates = Primitive.Array(viewNodeStateSchema).default([]);
+
+// Per-locale background-image overrides. `backgroundImage` (url + resizeMode)
+// travels as a whole value; `.partial({ stripDefaults: true })` drops its own
+// default so an entry that omits it falls back to the base style rather than
+// materializing an empty image.
+export const viewNodeLocalizedSchema = Primitive.Array(
+  Primitive.Struct({
+    locale: Primitive.String().required(),
+    overrides: Primitive.Struct({
+      backgroundImage,
+    })
+      .partial({ stripDefaults: true })
+      .default({}),
+  }),
+).default([]);
+
+/** ViewNode tree node schema */
+export const ViewNode = Primitive.TreeNode("view", {
+  children: () =>
+    [Primitive.TreeNodeSelf, ScrollViewNode, TextNode, ShapeNode, ComponentNode] as const,
+  data: Primitive.Struct({
+    interactions: interactionsSchema,
+    linkedVariables,
+    localVariables,
+    localized: viewNodeLocalizedSchema,
+    name: Primitive.String().default("View"),
+    states: viewNodeStates,
+    style: viewNodeStyleSchema,
+  }).required(),
+});
+
+export type ViewNodeData = Primitive.TreeNodeSnapshot<typeof ViewNode>;
+export type ViewNodeStateSnapshot = NonNullable<
+  Primitive.InferSnapshot<typeof viewNodeStateSchema>
+>;
+export type ViewNodeUpdateValue = Primitive.InferUpdateInput<
+  Primitive.InferTreeNodeData<typeof ViewNode>
+>;
diff --git a/packages/mimic-schema/src/presence.ts b/packages/mimic-schema/src/presence.ts
new file mode 100644
index 000000000..b122d74f5
--- /dev/null
+++ b/packages/mimic-schema/src/presence.ts
@@ -0,0 +1,24 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+/**
+ * Presence primitive for the paywall designer. `cursor` is optional — absence
+ * means the user has no active cursor (the former `null` encoding).
+ */
+export const PresenceSchema = Primitive.Struct({
+  cursor: Primitive.Struct({
+    x: Primitive.Number().required(),
+    y: Primitive.Number().required(),
+  }),
+  name: Primitive.String(),
+  selectedNodeIds: Primitive.Array(Primitive.String()).default([]),
+  user: Primitive.Struct({
+    color: Primitive.String().required(),
+    name: Primitive.String().required(),
+  }).required(),
+});
+
+/** Input accepted when seeding or setting presence (defaults applied on encode). */
+export type PresenceInput = NonNullable<Primitive.InferInput<typeof PresenceSchema>>;
+
+/** Decoded presence value as observed for any connected participant. */
+export type PresenceSnapshot = NonNullable<Primitive.InferSnapshot<typeof PresenceSchema>>;
diff --git a/packages/mimic-schema/src/reconcile/index.ts b/packages/mimic-schema/src/reconcile/index.ts
new file mode 100644
index 000000000..c13128327
--- /dev/null
+++ b/packages/mimic-schema/src/reconcile/index.ts
@@ -0,0 +1 @@
+export * from "./reconcile.ts";
diff --git a/packages/mimic-schema/src/reconcile/reconcile.test.ts b/packages/mimic-schema/src/reconcile/reconcile.test.ts
new file mode 100644
index 0000000000000000000000000000000000000000..7b9eeb6a60865c8387426a652ccf0057561c6ada
GIT binary patch
literal 14195
zcmd5@>vG%174C06#hR08L0f_)*>T2n?6kg2l9?vXIGX(7C>01SMc5#~0H9=9)=Yo(
z0XlucJW0RroLyWf(vn@pQ%}Q^!0y?z=YCT<Ule6+&bN$-7K`lcX;jCvZTyOh`64Rq
zL22#J=_E_@<4PWvHmdD&TibG;=4n-@@wYa&WmFd>-+z}TiOsp|RZ-O6Cwx{+Ufa0-
zCCZkTKdZU~wB~1xwe63yg*DHL`8>*HYt7$;_G6LA=H@|vi~Dt9re!fVgTI~>X)=qd
z+1+_MPvf1qDDB|UR_ZQm5?jS(I<ecvzFh#fZByH-Hh%j_THBpPwyf^*F*de4e~Qjd
zqbz%FtMnMxeqO}Oxy=cHm~MFceZE+>(8KU<;<kl#)kUkcagoPq2E0I|Wn3@ID3hzb
z_-z?wRfAx7w^^znw(j0FJ2&@_;J&lj!j{#@OqOYu7@NmnL1M_RO3BPCCp&31Gbt~)
zZNRh+;>P~AOi!W=JMB&5w{`dSZSz7<GLfkuPnk6(B+lf(Qt`oOU6{14fD`zim?H|3
zkn<=sx9@I&*kC%)GmlNc&BCXVS>|u@;xr$QMDk>VdHe*DyMeu-(k2*Vi4iOW5M}+)
zM3slfuNxr9`XLuIC_?BIzjy}nmo|SnC7L9E2d`~ICC%%R(<+BEwPk#$NOMO>s#M`L
z&7ikIz+XeW6=H=7!90Ha*Z~`c6>LJV#sUn16)3-DZkvPC!pQ;<XjxsG)0xdpJ+o(K
z7M)mrGgUOVjxh<zk=U|%PFRXTwGECn&%so&I;JSGeA}F+^{gXY+1U=nE6Pj~)sgxA
zpZ_t?$AX510H<XX*J+XC{n4VRjzlt}vW(7lpxSfu?A7xFF#g15#R7D}mPQ)9%+{oK
z)Fbtz^9zKY6h&sEoOGo5Os81y2o0G(2D-OE(n;^pP?kbSEOa|JQz*54gv}TDPuV?r
zdiH&SvvYfDeux%<-#^FqmT_aUFieweA?x7~j4@_flm=X*Q1i7Zrp6)UkJXn2cv9jB
zIVwE1wZH{5fuc9LrHkIbH}b^`32!7vE6Y6G%NNosIaq6rnH~!J0I%Q<ksrgWfVQ-9
za^tA=GcGa?!_eJ%+u*yS-eK4$U-t^Dq;u*3;yLghA0=M&lJbZnTfGb-uZF{Q=QMP6
z3|<3Zay<YdVzNDaU8H$1_|sshLbmeIqr8bPB%u>Q_!&sxMPqIx3V7um5$+je=}F(@
z)KLkc=_tcCqXoKbcnjye$A_2AXB%J$%y!o$%Ln%(CQ*G4yb!P`ippkZ;%AdbCXOKG
zQ7z^|%`fy3mL)3BhM}{Z;ty~E&#A_;137AKa4yhBX26vLn4hHmp2KG0mowOS>7kel
zNQ|-)L4<{|!x7x6aZS6ha~zh84;gIKB}|IOLwI(6;qU-E=uB~*f*jCyK)dm&c<6VJ
z0-r;;1>E*li_b|4qj8hi5a1``QUkkHTxxkVn57`+HE2N)8&2n|kpaBRq`2u&1G0D^
z0*?ryifta1X;IzuAzMBo4F*kQCtgi;t$Q?R7l_!<=`cPG1}Q>r1mf^^boLcg8}i9G
z(jWkOXUn3|&)#P5a#9ITA4}vCj8y`ILA8g)V@g0Un96q&Js8w`gCXN(`My6G9=5;k
z@z<gABBUE)gcRO>VeyemsKq$M{Qj?hn<Sl1EkhRr2W{>c@y@MJMg+{D!Fvu1AB}&i
zb~H#3EvS7UsJjF8r4nq-YmM}ShBnRy>H6U?tP2UU0~iPK$oOmtoL3fEQY2p42PP9+
zpHltpTc$zzu_<y}ttD^=VOpA18Y?ZMmaG${<K}x^3rhT9fZk+-R2yhQG8mU3F&Y#L
z-vp7d2w@z)0f!}c97v>@3aJJ{(C-ic{#`<$V9#B~aiM``Pi%P>1U+C3G8EXnII#-q
zsYU3!w0$T|f>8&3x7Fiq$In1+MU@4+E=bzYhTDnFkl!+|SWb8+6SxGUE*3lU0*=R_
z56Dp!M-b`Zr||u<Zmr6I*E6t^iuEZ1v2LrU{#C43jZ$({SnT&*B?G!+&}WtdLq*#x
z7jDsb_mJy;U@_vQR1e^*#XG|ii39FP<{u;lr7a}VbLx(~rGn{VI>W-p9LAQ?X)4Re
zp|!|sjMTNX6*_-2-1bmbWoboxJTI@30hsY<djj*Usa#g%$1Igpbu@v0freC|KTNTG
z1p9~hEEcjbr@}uKAkyh$#7DKhXMF_3heb!0Y!;mObIA?ypr>F47R6;zRX&mU6ggRI
zBj|G73vs|JtnInLb;8#G?ZSbxZyXVg%?i-#%FF)|%Oen6b2tRn)BVpS0PqM|RBB-&
zo<-0XW9KYGHH9io0K)&tbRZ1dHiIHdKHW7a2oxIDfVeKZSN!>hRn!ArtEG%1z^5K<
z-q<rdqF8<|<{^Zu8Ew~Rux^ffjLi|j!uX@)1^bT_pe#;l1$)STv=3<15UPjl@LW$F
z;mdKf7@7Mh_g-99#OrJKda!%@>*0FlT;&i{!6CcXH0d20^#cNe_^`Zi#Yf5tDA$S#
zQxNcL5up~RWK#!D+x!=ng~?>akA*a?CWzsNy4q~2PRxmT;ILtp_FQ0&5I9GPcs*A#
zM$PqNh+0`a3$+Bu`#rVaO4Fn~fH7DNg#WPMMfwqeCQ(^|;yeqAC`FmHLi<Ak+&f6l
znAhmtJAC@&c;*w$kt)KC8X}ai=XNEpV1--r3KyW7KmXapsC#PqBFHPl*5n#qJw6QB
zWj_j7s*E1G-0o`V8}p$KdoE=!O_KHpNfYiqNpqM*y&kglMuH^TxdTODor?8)B*9RQ
z>dHh|;zLv+*W|-pyV!&zKCG48xD);~VT((25E}{T&AC$VWcLGINvY-evPbjSw1HOV
zBzWHVRvWM*)MiKqb2HsH)3mIhQn8~6O7xM0#H8M3u${t+cyfU<arDJrPjj0zd;Ja3
zU0QcnFQ`}9ac9<UR%9fP1|4p$6}iJw+fOC>G-Z8eK;h-PcQ;;rb3yAeo7l2EySES8
z!Q5NKBl&WUXIiFhs&0H`-aj_G%u(crTMy0HefuEUpM3Rj`sL8P*A+0fhP6<nv$HUr
zFEfE{e$_L~lP6Ei-j|S{J!~K}5nU;s)&SV<s=1|>^<QE61Fo;pF8S5eM8p;J11xFQ
z?cK+F9<VzE?e6bCy#MgQSNjhiXvH55Qd>@=*c$Zkr8AYYtcS|IUK^{LCS-&Zk7OzH
z;}Mr5wD!yTy)Y~Y6^!}XEPScFlsLGzKkw|<^H`LZ>rPSaFL{)Qblc>h$`&b^CeKjl
z2jaj63{cihOIyvPZ$|935>IGH`4{KShC6pIjsQeF<Bv?wP=N>CwDPWdNXNF8&tF=9
zZ{N}&edCYd0*NB<L=7~b_%b~n@|f{qx4!~HB)_1j`m+Qd9fAOF1);48z>z3W2uD(E
zoBdtU_eGQ>C^sGyU_j^XJ$*aP?AzxlDthdHjwFPQt?u6qA(P**+i^NDh^ylwTh4P-
z*r~NjM`Cw?8(xJSdX0JgbNUV~i@jY4X&(=%&^U<4Hg~k{h>phkN>tc5yQpU!VbJy3
zRaLa;MA6h09tWZxY=w0ykIWE!)63~W)7+8tfz2JnInvbOH$EJhqxy^U4(fZmyTgkk
z4qqTJ6ymnTAofFpKACnlY3o60a$6d%p68zBz?Xd22B=&R+HlXK==M;Kv9N=|eYu=#
z<%+c9{q7@^Vt35t{CelH+4GQEX$u$2Y8E(hE5n(;tTLa@Rk-iSqPX1wM0YfMgPs0h
zLq^%SO2!VQ8le_SwQVrc4F7Az!OzU#W{pTd_%Cx^T{3!#sznV+m3sPCYysZv^@VU>
zE+Y+bQjw_&s91rDoo#&3rR64ByOPJv0>{u5WIjJrd(8B)O{EgjFjOglDnef~yd=9a
z>pD?j&?fs}MBI1PtTpXYm`aJPFubI4z{#CgFf+v*)k2%3(pI50W~m)s1zK*)6ZTV5
zq}*iT8`uY_r&XbOC4&<c98{JuAJ;&%GtM(#))-Lh$`;d`1nNvF+F)$nE4<Dm2e*Xc
zDWn@Aw`5em^4!r-;{Beo!J&H<b@qrDKVppNV&{5>Ow4r{oXV*H(s_DyK&FXCFAr7I
zL$lYSpb1Ua_VImR>lpwLVn}@lS=O378Y(qa{mu9MX3=x(hN)UHiMrL_5odS{c^MU$
zza9kzeK9Kz#qKG6b0XatCC?j*1x$yKp%K<^zJa|R$~ANbL*7WlrV`;TB8I7)5Wr$U
zPjri)jM80no1A$AgMK9GAs6~U#$UikSQqRAFJH#!0Lh>cgxO_BOtfV=k|I_RNQlM*
zT$U8l_*}5?_hUb;BWOY<6+k#|FLCQ#yHJz9U97wEM!`Y}p%;KGM;X&PPY2OGH;53{
znTS#Af4v`V9CB;yN8kbrBqSS)Aq~)x>3Jre-erSgO4f$eB1`GC7%(c+<gpv6BG0zX
zE>6_@h@Iy#tITli8_$3)420VsVngFKQm~=BZ^!J>{UVs=|Lyd>utWi`RYg4FaMeIp
z?`F)Hu*NAWee&h?AqMo^!`Fwm+|%^%mV^!JgLyGgUN27$BZBOy933nuaMNj5QKbwc
zF+ZDSDdikp`Kd)7hHt(<hK~9%Y__~5=~y9sz9bVNZwIjHKcT-ri{3?LGQ4RVee|D2
zHBSO{0%_WHDsviSvc8Hr1Gx<Xil%Po-y;4XfX=KZy^;J3M1}>dS{AxXPBpyMtnggk
zGi}hqgK2sW>t>;8XMxD5#bzw9AOH@I48i$aKr!(8sMzYWK|Vk@>IwiCL-|6pq}q;b
zS<D_-Mq~N)!IOZ4kKL;u=!n+%PzFWC1kqB-GFQDcUyF=8NgH#xPF^31i0Vnjl9ONx
z#fQ8+DTFM%h~ilw5W5spg6VDu4xLg1Ijltaq2Eej8RAov^o=|gwQ_1A+S*>4Lyz6d
zLpm$w$UsxWpE02cST1X4JsO3=N)1#tjpTU2&snQOR1VePPz#mAjjVb}LyXim1$0zL
z>U&;yWN2h+>hySqC@6W2OdJV8({ScYLkh?-$4ud0;6*xP_cW+FcfWr4K;7hc@Hh5}
zp7P@vKc4gB#XzjIkWI~#QjmixP*+tG@?{W7n<?7ouIQe8-j~lW2aW;lPHdPuO~gPP
z#(8_-)MpyQcs!oj_zj&AGkB^*hl{SivC2mPY#gOn`vaNeX!S_j&pAsohzs3JAdQg+
z$Zoz?^nJXpZ=B_5P<MKW!hoFM_0s=VBk&JMsObOE1QmvhBd3VQH0B=Wn9YX`JY#G@
z<e~&ZRAHtJ^8^Sb5T@pZd7aj*Z{Qm9sCr`}hY=v6xQ9u5T+xddfM5y|MLhm_0EUs9
zVI(I-Xmj|b{kvaTCL~$VlxnEah#Mjg@xAN+2qb7I!Kwmz>#42cOr~FZ5OmFUnREpV
z?-5^4W%ehvu*$0j*N@{0qw;pZxv7^slmsSg^Djt886sBRt9g(sIEiJxsMpfi#`iz<
zwX5&%p;E&|qyYchINi7C*EOM7tM(!<cBIbZC;9>v?BFe;pysPIb?kfr$4o_HkdD8C
z@qc8pz7&sg2B>&0;l;?HDCtU{!S3657o&Oj0|5jTyt?S-N-bjVONoKH*)u(0uQJzV
z9&o{F5FwxZOOe3Kha+M;hK8F3*rIooZ<h!3T!cjO`Z-9EtBn(WRJpd=EzMjtAsw1A
zAN^>0?d{*YA5CKP)^3nu6Bq-Xf!<8Fp6MmcnoS~pBDWHk@>(|W;JOJ>vjai(@RnzY
z0(OQ|CoMZ5l;kb+D^1A?HY<kURU_N<7bwlC*`=+MiNj|1`i_NYzV2CRj5+HAv-zyR
z-+EwZ9n~-ff4Cl|W9fax1dE$Z@Vr`P@WaOu5;;`tRX89t9Oi)*di!}vTHSp-<{uJO
HT7&-riwp&;

literal 0
HcmV?d00001

diff --git a/packages/mimic-schema/src/reconcile/reconcile.ts b/packages/mimic-schema/src/reconcile/reconcile.ts
new file mode 100644
index 000000000..b6440e0df
--- /dev/null
+++ b/packages/mimic-schema/src/reconcile/reconcile.ts
@@ -0,0 +1,384 @@
+import {
+  compareArrayItems,
+  compareTreeSiblings,
+  createGenerator,
+  HiddenTreeRootId,
+  type ArrayItem,
+  type Command,
+  type Generator,
+  type ObjectValue,
+  type Path,
+  type TreeNode,
+  type TreeValue,
+  type Value,
+} from "@voidhash/mimic-core";
+
+const TYPE_KEY = "type";
+
+export interface ReconcileOptions {
+  /**
+   * Path to the tree value within the document root. Defaults to `[]` for a
+   * document whose root value *is* the tree (the paywall designer document).
+   */
+  readonly treePath?: Path;
+  /**
+   * Position generator for newly-inserted / moved nodes. Defaults to the
+   * jittered generator (matching the live editor), which makes sibling-position
+   * collisions astronomically unlikely. Tests may inject a deterministic one.
+   */
+  readonly generator?: Generator;
+}
+
+/**
+ * Diff a live mimic tree against a target tree and emit the minimal set of CRDT
+ * commands that turns `live` into `target`.
+ *
+ * The core round-trip primitive of the paywall composition pipeline. Both trees
+ * are matched by node `id`; a node present in both keeps its identity (and, when
+ * its sibling order is unchanged, its fractional `pos` — so a no-op reconcile
+ * emits zero commands and a code push merges into a live document instead of
+ * clobbering it). Ordering of the returned commands is safe to apply
+ * sequentially: inserts (parents before children) → moves → deletes → data
+ * updates.
+ *
+ * Identity contract: a node's `id` is stable across the round-trip and `type`
+ * is part of identity — changing a node's type is expressed as a new id (delete
+ * + insert), never an in-place retype. `pos` is never carried in the target;
+ * order is derived from target sibling order.
+ */
+export function reconcile(
+  live: TreeValue,
+  target: TreeValue,
+  options: ReconcileOptions = {},
+): Command[] {
+  const treePath = options.treePath ?? [];
+  const generator = options.generator ?? createGenerator();
+
+  const liveById = indexById(live);
+  const targetById = indexById(target);
+  const liveChildren = groupChildren(live);
+  const targetChildren = groupChildren(target);
+
+  // A target node is a fresh insert iff its id is absent from the live tree.
+  // Everything present in both is "kept" (its identity — and its own kept
+  // children — survive; it may still move parents or reorder). Type is part of
+  // identity, so a retype arrives as a new id and is therefore an insert here.
+  const insertedIds = new Set<string>();
+  for (const node of target.nodes) {
+    if (!liveById.has(node.id)) {
+      insertedIds.add(node.id);
+    }
+  }
+  const keptIds = new Set<string>();
+  for (const node of target.nodes) {
+    if (liveById.has(node.id)) {
+      keptIds.add(node.id);
+    }
+  }
+
+  // Precompute per-child placement (anchor / move / insert) with final
+  // positions, for every target parent including the hidden root.
+  const placement = computePlacements(targetChildren, liveById, liveChildren, generator);
+
+  const inserts: Command[] = [];
+  const moves: Command[] = [];
+  const deletes: Command[] = [];
+  const dataUpdates: Command[] = [];
+
+  // Inserts — BFS over the target tree guarantees a parent is inserted before
+  // its children (an inserted node's parent is either kept/root and already
+  // present, or an inserted ancestor emitted earlier).
+  for (const id of bfsOrder(targetChildren)) {
+    if (!insertedIds.has(id)) {
+      continue;
+    }
+    const node = targetById.get(id)!;
+    const place = placement.get(id)!;
+    inserts.push({
+      kind: "tree.insert",
+      path: treePath,
+      node: { id: node.id, parent: node.parent, pos: place.pos, value: node.value },
+    });
+  }
+
+  // Moves — kept nodes whose parent or sibling order changed. Emitted after all
+  // inserts so every move target exists, and before deletes so a kept node
+  // escapes a doomed parent before that parent is removed.
+  for (const node of target.nodes) {
+    if (!keptIds.has(node.id)) {
+      continue;
+    }
+    const place = placement.get(node.id)!;
+    if (place.kind === "move") {
+      moves.push({
+        kind: "tree.move",
+        path: treePath,
+        id: node.id,
+        parent: node.parent,
+        pos: place.pos,
+      });
+    }
+  }
+
+  // Deletes — live nodes absent from the target. Only the top-most node of each
+  // removed subtree is emitted; the engine cascades to descendants.
+  for (const node of live.nodes) {
+    if (keptIds.has(node.id)) {
+      continue;
+    }
+    const parentSurvives = node.parent === HiddenTreeRootId || keptIds.has(node.parent);
+    if (parentSurvives) {
+      deletes.push({ kind: "tree.delete", path: treePath, id: node.id });
+    }
+  }
+
+  // Data — field-level diff of every kept node.
+  for (const id of keptIds) {
+    diffObject(
+      treeNodePath(treePath, id),
+      liveById.get(id)!.value,
+      targetById.get(id)!.value,
+      dataUpdates,
+    );
+  }
+
+  return [...inserts, ...moves, ...deletes, ...dataUpdates];
+}
+
+interface Placement {
+  readonly kind: "anchor" | "move" | "insert";
+  readonly pos: string;
+}
+
+/**
+ * For each target parent, decide which children keep their live position
+ * (anchors), which reorder/reparent (moves), and which are new (inserts), and
+ * assign fractional positions to the non-anchors between the surrounding
+ * anchors. Anchors are the longest strictly-increasing subsequence (by live
+ * order) of children that stayed under the same parent — keeping them fixed is
+ * what makes an unchanged subtree emit zero commands.
+ */
+function computePlacements(
+  targetChildren: Map<string, TreeNode[]>,
+  liveById: Map<string, TreeNode>,
+  liveChildren: Map<string, TreeNode[]>,
+  generator: Generator,
+): Map<string, Placement> {
+  const placement = new Map<string, Placement>();
+
+  for (const [parentId, kids] of targetChildren) {
+    const liveKids = liveChildren.get(parentId) ?? [];
+    const liveIndexById = new Map(liveKids.map((node, index) => [node.id, index]));
+
+    // Children that stayed under this same parent, in target order, are the
+    // anchor candidates; the LIS over their live indices is kept fixed.
+    const stayedSameParent = kids
+      .filter((kid) => liveById.has(kid.id) && liveIndexById.has(kid.id))
+      .map((kid) => ({ id: kid.id, key: liveIndexById.get(kid.id)! }));
+    const anchorIds = longestIncreasingSubsequence(stayedSameParent);
+
+    // Next-anchor position lookahead for gap filling.
+    const nextAnchorPos: (string | undefined)[] = new Array(kids.length);
+    let upcoming: string | undefined;
+    for (let i = kids.length - 1; i >= 0; i -= 1) {
+      nextAnchorPos[i] = upcoming;
+      if (anchorIds.has(kids[i]!.id)) {
+        upcoming = liveById.get(kids[i]!.id)!.pos;
+      }
+    }
+
+    // Every position currently occupied under this parent. A generated position
+    // must avoid all of them: a reordered/incoming node's new pos is applied
+    // while the still-present siblings (including nodes that only move in a later
+    // command) hold their old positions, and the engine rejects a duplicate
+    // sibling pos. Anchors keep their live pos (already in this set); non-anchors
+    // are nudged strictly toward the upper bound until they land in a free slot.
+    const takenPositions = new Set(liveKids.map((node) => node.pos));
+    let prevPos: string | undefined;
+    for (let i = 0; i < kids.length; i += 1) {
+      const kid = kids[i]!;
+      if (anchorIds.has(kid.id)) {
+        const pos = liveById.get(kid.id)!.pos;
+        placement.set(kid.id, { kind: "anchor", pos });
+        prevPos = pos;
+        continue;
+      }
+      const upper = nextAnchorPos[i];
+      let pos = generator.between(prevPos, upper);
+      for (let guard = 0; (takenPositions.has(pos) || pos === upper) && guard < 64; guard += 1) {
+        pos = generator.between(pos, upper);
+      }
+      takenPositions.add(pos);
+      placement.set(kid.id, { kind: liveById.has(kid.id) ? "move" : "insert", pos });
+      prevPos = pos;
+    }
+  }
+
+  return placement;
+}
+
+/**
+ * Recursive field-level diff of two node object values, descending into nested
+ * objects (e.g. `style`) to emit the narrowest `object.set` / `object.delete`.
+ * The `type` discriminator is never diffed (identity guarantees it matches).
+ * Arrays are compared by ordered content — ignoring CRDT item envelopes — so an
+ * unchanged array (re-encoded with fresh item ids/positions) is a no-op.
+ */
+function diffObject(path: Path, live: ObjectValue, target: ObjectValue, out: Command[]): void {
+  const keys = new Set<string>([...Object.keys(live.fields), ...Object.keys(target.fields)]);
+  for (const key of keys) {
+    if (key === TYPE_KEY) {
+      continue;
+    }
+    const liveField = live.fields[key];
+    const targetField = target.fields[key];
+    if (targetField === undefined) {
+      out.push({ kind: "object.delete", path, key });
+      continue;
+    }
+    if (liveField === undefined) {
+      out.push({ kind: "object.set", path, key, value: targetField });
+      continue;
+    }
+    if (liveField.kind === "object" && targetField.kind === "object") {
+      diffObject([...path, { kind: "field", key }], liveField, targetField, out);
+      continue;
+    }
+    if (!valuesEqual(liveField, targetField)) {
+      out.push({ kind: "object.set", path, key, value: targetField });
+    }
+  }
+}
+
+/** Structural value equality that ignores array-item CRDT envelopes (id/pos). */
+export function structuralValueEquals(a: Value, b: Value): boolean {
+  return valuesEqual(a, b);
+}
+
+/** Structural value equality that ignores array-item CRDT envelopes (id/pos). */
+function valuesEqual(a: Value, b: Value): boolean {
+  if (a.kind !== b.kind) {
+    return false;
+  }
+  switch (a.kind) {
+    case "string":
+      return a.value === (b as typeof a).value;
+    case "number":
+      return a.value === (b as typeof a).value;
+    case "boolean":
+      return a.value === (b as typeof a).value;
+    case "object": {
+      const bObj = b as ObjectValue;
+      const aKeys = Object.keys(a.fields);
+      if (aKeys.length !== Object.keys(bObj.fields).length) {
+        return false;
+      }
+      return aKeys.every(
+        (key) => bObj.fields[key] !== undefined && valuesEqual(a.fields[key]!, bObj.fields[key]!),
+      );
+    }
+    case "array": {
+      const bArr = b as typeof a;
+      if (a.items.length !== bArr.items.length) {
+        return false;
+      }
+      const aOrdered = orderedItems(a.items);
+      const bOrdered = orderedItems(bArr.items);
+      return aOrdered.every((item, index) => valuesEqual(item.value, bOrdered[index]!.value));
+    }
+    case "tree": {
+      // Node data never nests a tree; compare defensively by ordered structure.
+      const bTree = b as typeof a;
+      if (a.nodes.length !== bTree.nodes.length) {
+        return false;
+      }
+      const key = (node: TreeNode): string => `${node.parent}${node.id}`;
+      const bByKey = new Map(bTree.nodes.map((node) => [key(node), node]));
+      return a.nodes.every((node) => {
+        const other = bByKey.get(key(node));
+        return other !== undefined && valuesEqual(node.value, other.value);
+      });
+    }
+  }
+}
+
+const orderedItems = (items: readonly ArrayItem[]): ArrayItem[] =>
+  [...items].sort(compareArrayItems);
+
+const indexById = (tree: TreeValue): Map<string, TreeNode> =>
+  new Map(tree.nodes.map((node) => [node.id, node]));
+
+const groupChildren = (tree: TreeValue): Map<string, TreeNode[]> => {
+  const byParent = new Map<string, TreeNode[]>();
+  for (const node of tree.nodes) {
+    const list = byParent.get(node.parent);
+    if (list) {
+      list.push(node);
+    } else {
+      byParent.set(node.parent, [node]);
+    }
+  }
+  for (const list of byParent.values()) {
+    list.sort(compareTreeSiblings);
+  }
+  return byParent;
+};
+
+const bfsOrder = (targetChildren: Map<string, TreeNode[]>): string[] => {
+  const order: string[] = [];
+  const queue = (targetChildren.get(HiddenTreeRootId) ?? []).map((node) => node.id);
+  while (queue.length > 0) {
+    const id = queue.shift()!;
+    order.push(id);
+    for (const child of targetChildren.get(id) ?? []) {
+      queue.push(child.id);
+    }
+  }
+  return order;
+};
+
+const treeNodePath = (treePath: Path, nodeId: string): Path => [
+  ...treePath,
+  { kind: "node", id: nodeId },
+];
+
+/**
+ * Ids of one longest strictly-increasing subsequence (by `key`) — the anchors
+ * that keep their live position. O(n log n) patience sorting with predecessor
+ * links for reconstruction.
+ */
+function longestIncreasingSubsequence(items: readonly { id: string; key: number }[]): Set<string> {
+  const result = new Set<string>();
+  if (items.length === 0) {
+    return result;
+  }
+  const tails: number[] = [];
+  const prev: number[] = new Array(items.length).fill(-1);
+  for (let i = 0; i < items.length; i += 1) {
+    const key = items[i]!.key;
+    let lo = 0;
+    let hi = tails.length;
+    while (lo < hi) {
+      const mid = (lo + hi) >> 1;
+      if (items[tails[mid]!]!.key < key) {
+        lo = mid + 1;
+      } else {
+        hi = mid;
+      }
+    }
+    if (lo > 0) {
+      prev[i] = tails[lo - 1]!;
+    }
+    if (lo === tails.length) {
+      tails.push(i);
+    } else {
+      tails[lo] = i;
+    }
+  }
+  let cursor = tails[tails.length - 1]!;
+  while (cursor !== -1) {
+    result.add(items[cursor]!.id);
+    cursor = prev[cursor]!;
+  }
+  return result;
+}
diff --git a/packages/mimic-schema/src/states/index.ts b/packages/mimic-schema/src/states/index.ts
new file mode 100644
index 000000000..8daafaee5
--- /dev/null
+++ b/packages/mimic-schema/src/states/index.ts
@@ -0,0 +1,2 @@
+export * from "./states.ts";
+export * from "./types.ts";
diff --git a/packages/mimic-schema/src/states/states.test.ts b/packages/mimic-schema/src/states/states.test.ts
new file mode 100644
index 000000000..c2a2dba7e
--- /dev/null
+++ b/packages/mimic-schema/src/states/states.test.ts
@@ -0,0 +1,133 @@
+import { applyBatch, Primitive, validate } from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createStateSchemaWithStyleAndActionOverrides,
+  createStateSchemaWithStyleOverrides,
+} from "./states.ts";
+
+const baseCondition = {
+  type: "or" as const,
+  value: [
+    {
+      type: "and" as const,
+      value: [
+        {
+          type: "equals" as const,
+          value: {
+            left: {
+              type: "literal" as const,
+              value: { key: "boolean" as const, value: true },
+            },
+            right: {
+              type: "literal" as const,
+              value: { key: "boolean" as const, value: true },
+            },
+          },
+        },
+      ],
+    },
+  ],
+};
+
+const testStyleSchema = Primitive.Struct({
+  backgroundColor: Primitive.String().default("rgba(0, 0, 0, 1)"),
+  width: Primitive.Number().default(100),
+});
+
+const stateWithStyleOverridesSchema = createStateSchemaWithStyleOverrides(
+  testStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const stateWithStyleAndActionOverridesSchema = createStateSchemaWithStyleAndActionOverrides(
+  testStyleSchema.partial({ stripDefaults: true }).default({}),
+);
+
+const baseInput = {
+  condition: baseCondition,
+  id: "state-1",
+  name: "Hovered",
+};
+
+function buildStyleStateSnapshot(
+  build: (root: Primitive.InferProxy<typeof stateWithStyleOverridesSchema>) => void,
+) {
+  const base = validate(
+    stateWithStyleOverridesSchema.schema,
+    stateWithStyleOverridesSchema.encode(baseInput),
+  )!;
+  const commands = Primitive.commands(stateWithStyleOverridesSchema, base, build);
+  return stateWithStyleOverridesSchema.decode(applyBatch(base, commands))!;
+}
+
+function buildStyleAndActionStateSnapshot(
+  build: (root: Primitive.InferProxy<typeof stateWithStyleAndActionOverridesSchema>) => void,
+) {
+  const base = validate(
+    stateWithStyleAndActionOverridesSchema.schema,
+    stateWithStyleAndActionOverridesSchema.encode(baseInput),
+  )!;
+  const commands = Primitive.commands(stateWithStyleAndActionOverridesSchema, base, build);
+  return stateWithStyleAndActionOverridesSchema.decode(applyBatch(base, commands))!;
+}
+
+describe("state schemas", () => {
+  test("fills style overrides with defaults", () => {
+    const snapshot = buildStyleStateSnapshot(() => {});
+
+    expect(snapshot.id).toBe("state-1");
+    expect(snapshot.name).toBe("Hovered");
+    expect(snapshot.overrides.style).toEqual({});
+  });
+
+  test("fills style and action overrides with defaults", () => {
+    const snapshot = buildStyleAndActionStateSnapshot(() => {});
+
+    expect(snapshot.overrides.style).toEqual({});
+    expect(snapshot.overrides.actions).toEqual([]);
+  });
+
+  test("accepts typed style override values", () => {
+    const snapshot = buildStyleStateSnapshot((root) => {
+      root.overrides.style.update({
+        backgroundColor: "rgba(255, 0, 0, 1)",
+        width: 240,
+      });
+    });
+
+    expect(snapshot.overrides.style).toEqual({
+      backgroundColor: "rgba(255, 0, 0, 1)",
+      width: 240,
+    });
+  });
+
+  test("strips defaults from style overrides", () => {
+    const snapshot = buildStyleStateSnapshot((root) => {
+      root.overrides.style.update({ width: 240 });
+      root.overrides.style.update({ width: undefined });
+    });
+
+    expect(snapshot.overrides.style).toEqual({});
+  });
+
+  test("ignores unknown style override keys", () => {
+    const snapshot = buildStyleStateSnapshot((root) => {
+      root.overrides.style.update({
+        unknownKey: 123,
+      } as never);
+    });
+
+    expect(snapshot.overrides.style).toEqual({});
+  });
+
+  test("accepts action overrides", () => {
+    const snapshot = buildStyleAndActionStateSnapshot((root) => {
+      root.overrides.actions.push({
+        action: { type: "none" },
+        interactionId: "interaction-1",
+      });
+    });
+
+    expect(snapshot.overrides.actions[0]?.value?.action.type).toBe("none");
+  });
+});
diff --git a/packages/mimic-schema/src/states/states.ts b/packages/mimic-schema/src/states/states.ts
new file mode 100644
index 000000000..a61dfea6c
--- /dev/null
+++ b/packages/mimic-schema/src/states/states.ts
@@ -0,0 +1,116 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { actionSchema } from "../interactions/interactions.ts";
+import { variableTypeSchema } from "../variables/index.ts";
+import { variableReferenceSchema } from "../variables/variables.ts";
+
+// Union variant keys must equal the wire discriminator values in this engine.
+export const operandSchema = Primitive.Union({
+  literal: Primitive.Struct({
+    type: Primitive.Literal("literal").required(),
+    value: variableTypeSchema.required(),
+  }),
+  "variable-reference": Primitive.Struct({
+    type: Primitive.Literal("variable-reference").required(),
+    value: variableReferenceSchema.required(),
+  }),
+});
+
+export const equalsPredicateSchema = Primitive.Struct({
+  type: Primitive.Literal("equals").required(),
+  value: Primitive.Struct({
+    left: operandSchema.required(),
+    right: operandSchema.required(),
+  }).required(),
+});
+
+export const notEqualsPredicateSchema = Primitive.Struct({
+  type: Primitive.Literal("not-equals").required(),
+  value: Primitive.Struct({
+    left: operandSchema.required(),
+    right: operandSchema.required(),
+  }).required(),
+});
+
+export const greaterThanPredicateSchema = Primitive.Struct({
+  type: Primitive.Literal("greater-than").required(),
+  value: Primitive.Struct({
+    left: operandSchema.required(),
+    right: operandSchema.required(),
+  }).required(),
+});
+
+export const greaterThanOrEqualPredicateSchema = Primitive.Struct({
+  type: Primitive.Literal("greater-than-or-equal").required(),
+  value: Primitive.Struct({
+    left: operandSchema.required(),
+    right: operandSchema.required(),
+  }).required(),
+});
+
+export const lessThanPredicateSchema = Primitive.Struct({
+  type: Primitive.Literal("less-than").required(),
+  value: Primitive.Struct({
+    left: operandSchema.required(),
+    right: operandSchema.required(),
+  }).required(),
+});
+
+export const lessThanOrEqualPredicateSchema = Primitive.Struct({
+  type: Primitive.Literal("less-than-or-equal").required(),
+  value: Primitive.Struct({
+    left: operandSchema.required(),
+    right: operandSchema.required(),
+  }).required(),
+});
+
+export const predicateSchema = Primitive.Union({
+  equals: equalsPredicateSchema,
+  "greater-than": greaterThanPredicateSchema,
+  "greater-than-or-equal": greaterThanOrEqualPredicateSchema,
+  "less-than": lessThanPredicateSchema,
+  "less-than-or-equal": lessThanOrEqualPredicateSchema,
+  "not-equals": notEqualsPredicateSchema,
+});
+
+export const conjunctionSchema = Primitive.Struct({
+  type: Primitive.Literal("and").required(),
+  value: Primitive.Array(predicateSchema).minLength(1).required(),
+});
+
+export const dnfSchema = Primitive.Struct({
+  type: Primitive.Literal("or").required(),
+  value: Primitive.Array(conjunctionSchema).minLength(1).required(),
+});
+
+export const actionOverrideSchema = Primitive.Struct({
+  action: actionSchema.required(),
+  interactionId: Primitive.String().required(),
+});
+
+export function createStateSchemaWithStyleOverrides<
+  TStyleOverridesSchema extends Primitive.AnyPrimitive,
+>(styleOverridesSchema: TStyleOverridesSchema) {
+  return Primitive.Struct({
+    condition: dnfSchema.required(),
+    id: Primitive.String().required(),
+    name: Primitive.String().required(),
+    overrides: Primitive.Struct({
+      style: styleOverridesSchema,
+    }).default({}),
+  });
+}
+
+export function createStateSchemaWithStyleAndActionOverrides<
+  TStyleOverridesSchema extends Primitive.AnyPrimitive,
+>(styleOverridesSchema: TStyleOverridesSchema) {
+  return Primitive.Struct({
+    condition: dnfSchema.required(),
+    id: Primitive.String().required(),
+    name: Primitive.String().required(),
+    overrides: Primitive.Struct({
+      actions: Primitive.Array(actionOverrideSchema).default([]),
+      style: styleOverridesSchema,
+    }).default({}),
+  });
+}
diff --git a/packages/mimic-schema/src/states/types.ts b/packages/mimic-schema/src/states/types.ts
new file mode 100644
index 000000000..7f18db04c
--- /dev/null
+++ b/packages/mimic-schema/src/states/types.ts
@@ -0,0 +1,21 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type {
+  actionOverrideSchema,
+  conjunctionSchema,
+  dnfSchema,
+  operandSchema,
+  predicateSchema,
+} from "./states.ts";
+
+// Export DNF type for use in other files
+export type DNF = NonNullable<Primitive.InferSnapshot<typeof dnfSchema>>;
+export type DNFSnapshot = DNF;
+export type Conjunction = NonNullable<Primitive.InferSnapshot<typeof conjunctionSchema>>;
+export type ConjunctionSnapshot = Conjunction;
+export type Predicate = NonNullable<Primitive.InferSnapshot<typeof predicateSchema>>;
+export type PredicateSnapshot = Predicate;
+export type Operand = NonNullable<Primitive.InferSnapshot<typeof operandSchema>>;
+export type OperandSnapshot = Operand;
+export type ActionOverride = NonNullable<Primitive.InferSnapshot<typeof actionOverrideSchema>>;
+export type ActionOverrideSnapshot = ActionOverride;
diff --git a/packages/mimic-schema/src/styles/background.test.ts b/packages/mimic-schema/src/styles/background.test.ts
new file mode 100644
index 000000000..e4a3b2693
--- /dev/null
+++ b/packages/mimic-schema/src/styles/background.test.ts
@@ -0,0 +1,139 @@
+import { validate } from "@voidhash/mimic-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import { ScreenNode, ViewNode } from "../nodes/index.ts";
+import { screenNodeStyleSchema, viewNodeStyleSchema } from "../nodes/index.ts";
+
+// Encode/decode round-trips through the real node data structs materialize
+// schema defaults, so fixtures carry the exact snapshot shape the engine
+// produces (mirrors node-styles.test.ts in the web renderer).
+function makeViewStyle(style?: Parameters<typeof ViewNode.data.encode>[0]["style"]) {
+  return ViewNode.data.decode(ViewNode.data.encode({ style })).style;
+}
+
+function makeScreenStyle(style?: Parameters<typeof ScreenNode.data.encode>[0]["style"]) {
+  return ScreenNode.data.decode(ScreenNode.data.encode({ style })).style;
+}
+
+describe("background style defaults", () => {
+  test("view style materializes solid/gradient/image background defaults", () => {
+    const style = makeViewStyle();
+    expect(style.backgroundType).toBe("solid");
+    expect(style.backgroundGradient).toEqual({
+      kind: "linear",
+      startX: 0.5,
+      startY: 0,
+      endX: 0.5,
+      endY: 1,
+      stops: [
+        { id: expect.any(String), pos: expect.any(String), value: { color: "rgba(255, 255, 255, 1)", position: 0 } },
+        { id: expect.any(String), pos: expect.any(String), value: { color: "rgba(255, 255, 255, 0)", position: 1 } },
+      ],
+    });
+    expect(style.backgroundImage).toEqual({ url: "", resizeMode: "cover" });
+  });
+
+  test("screen style materializes the same background defaults", () => {
+    const style = makeScreenStyle();
+    expect(style.backgroundType).toBe("solid");
+    expect(style.backgroundGradient.kind).toBe("linear");
+    expect(style.backgroundGradient.startX).toBe(0.5);
+    expect(style.backgroundGradient.startY).toBe(0);
+    expect(style.backgroundGradient.endX).toBe(0.5);
+    expect(style.backgroundGradient.endY).toBe(1);
+    expect(style.backgroundGradient.stops.map((s) => s.value)).toEqual([
+      { color: "rgba(255, 255, 255, 1)", position: 0 },
+      { color: "rgba(255, 255, 255, 0)", position: 1 },
+    ]);
+    expect(style.backgroundImage).toEqual({ url: "", resizeMode: "cover" });
+  });
+});
+
+describe("background encode/decode round-trip", () => {
+  test("gradient + image backgrounds survive nested Struct/Array round-trip", () => {
+    const encoded = ViewNode.data.encode({
+      style: {
+        backgroundEnabled: true,
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "radial",
+          startX: 0,
+          startY: 0,
+          endX: 1,
+          endY: 1,
+          stops: [
+            { color: "rgba(255, 0, 0, 1)", position: 0 },
+            { color: "rgba(0, 0, 255, 1)", position: 0.5 },
+            { color: "rgba(0, 255, 0, 1)", position: 1 },
+          ],
+        },
+        backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" },
+      },
+    });
+    const validated = validate(ViewNode.data.schema, encoded);
+    expect(validated).toBeDefined();
+    const style = ViewNode.data.decode(validated!).style;
+
+    expect(style.backgroundType).toBe("gradient");
+    expect(style.backgroundGradient.kind).toBe("radial");
+    expect(style.backgroundGradient.startX).toBe(0);
+    expect(style.backgroundGradient.endX).toBe(1);
+    expect(style.backgroundGradient.stops.map((s) => s.value)).toEqual([
+      { color: "rgba(255, 0, 0, 1)", position: 0 },
+      { color: "rgba(0, 0, 255, 1)", position: 0.5 },
+      { color: "rgba(0, 255, 0, 1)", position: 1 },
+    ]);
+    expect(style.backgroundImage).toEqual({
+      url: "https://example.com/bg.png",
+      resizeMode: "contain",
+    });
+  });
+});
+
+describe("partial stripDefaults on nested background fields", () => {
+  test("view style .partial({ stripDefaults: true }) accepts a gradient override and drops absent keys", () => {
+    const overrideSchema = viewNodeStyleSchema.partial({ stripDefaults: true }).default({});
+
+    // An empty override strips every default, including nested background structs.
+    const empty = overrideSchema.decode(overrideSchema.encode({}));
+    expect(empty).toEqual({});
+
+    // A gradient override materializes the whole gradient object (nested field
+    // defaults still fill), replacing the key wholesale — the intended
+    // "overrides replace the whole object per key" semantic.
+    const withGradient = overrideSchema.decode(
+      overrideSchema.encode({
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "linear",
+          startX: 0,
+          startY: 0,
+          endX: 0,
+          endY: 1,
+          stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }],
+        },
+      }),
+    );
+    expect(withGradient?.backgroundType).toBe("gradient");
+    expect(withGradient?.backgroundColor).toBeUndefined();
+    expect(withGradient?.backgroundGradient?.kind).toBe("linear");
+    expect(withGradient?.backgroundGradient?.stops?.map((s: { value: unknown }) => s.value)).toEqual(
+      [{ color: "rgba(0, 0, 0, 1)", position: 0 }],
+    );
+  });
+
+  test("screen style .partial({ stripDefaults: true }) accepts an image override", () => {
+    const overrideSchema = screenNodeStyleSchema.partial({ stripDefaults: true }).default({});
+    const withImage = overrideSchema.decode(
+      overrideSchema.encode({
+        backgroundType: "image",
+        backgroundImage: { url: "https://example.com/x.jpg", resizeMode: "stretch" },
+      }),
+    );
+    expect(withImage?.backgroundType).toBe("image");
+    expect(withImage?.backgroundImage).toEqual({
+      url: "https://example.com/x.jpg",
+      resizeMode: "stretch",
+    });
+  });
+});
diff --git a/packages/mimic-schema/src/styles/index.ts b/packages/mimic-schema/src/styles/index.ts
new file mode 100644
index 000000000..86aa12d19
--- /dev/null
+++ b/packages/mimic-schema/src/styles/index.ts
@@ -0,0 +1,2 @@
+export * from "./properties.ts";
+export * from "./types.ts";
diff --git a/packages/mimic-schema/src/styles/properties.ts b/packages/mimic-schema/src/styles/properties.ts
new file mode 100644
index 000000000..33264aff1
--- /dev/null
+++ b/packages/mimic-schema/src/styles/properties.ts
@@ -0,0 +1,235 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+const RGBaRegex = /^rgba\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d*\.?\d+)\s*\)$/i;
+
+// Spacing
+export const paddingTop = Primitive.Number().default(0);
+export const paddingRight = Primitive.Number().default(0);
+export const paddingBottom = Primitive.Number().default(0);
+export const paddingLeft = Primitive.Number().default(0);
+export const marginTop = Primitive.Number().default(0);
+export const marginRight = Primitive.Number().default(0);
+export const marginBottom = Primitive.Number().default(0);
+export const marginLeft = Primitive.Number().default(0);
+export const gap = Primitive.Number().default(0);
+
+// Layout
+export const justifyContent = Primitive.Either(
+  Primitive.Literal("flex-start"),
+  Primitive.Literal("center"),
+  Primitive.Literal("flex-end"),
+  Primitive.Literal("space-between"),
+  Primitive.Literal("space-around"),
+  Primitive.Literal("space-evenly"),
+).default("flex-start");
+
+export const alignItems = Primitive.Either(
+  Primitive.Literal("flex-start"),
+  Primitive.Literal("center"),
+  Primitive.Literal("flex-end"),
+  Primitive.Literal("stretch"),
+  Primitive.Literal("baseline"),
+).default("stretch");
+
+export const flexDirection = Primitive.Either(
+  Primitive.Literal("row"),
+  Primitive.Literal("column"),
+).default("column");
+
+// Flex child — optional without default; absence means "no explicit flex"
+export const flex = Primitive.Number();
+export const flexGrow = Primitive.Number().default(0);
+export const flexShrink = Primitive.Number().default(1);
+export const flexBasis = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default(
+  "auto",
+);
+export const alignSelf = Primitive.Either(
+  Primitive.Literal("auto"),
+  Primitive.Literal("flex-start"),
+  Primitive.Literal("center"),
+  Primitive.Literal("flex-end"),
+  Primitive.Literal("stretch"),
+  Primitive.Literal("baseline"),
+).default("auto");
+
+// Size — "auto" (hug contents) is the CSS/RN default; views size to their
+// content unless given an explicit number or stretched by their parent.
+export const width = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default("auto");
+export const height = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default(
+  "auto",
+);
+// Size constraints — optional without default; absence means "unconstrained"
+export const minWidth = Primitive.Number();
+export const maxWidth = Primitive.Number();
+export const minHeight = Primitive.Number();
+export const maxHeight = Primitive.Number();
+
+// Position (for root nodes on canvas)
+export const x = Primitive.Number().default(0);
+export const y = Primitive.Number().default(0);
+
+// Positioned layout (RN flow) — `absolute` takes the node out of flow and
+// positions it against its parent using the offsets below. `relative` (default)
+// leaves it in normal flex flow. Offsets are `number | "auto"` (mirroring the
+// "auto"-capable width/height dimensions); "auto" (default) means unset.
+export const position = Primitive.Either(
+  Primitive.Literal("absolute"),
+  Primitive.Literal("relative"),
+).default("relative");
+export const left = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default("auto");
+export const top = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default("auto");
+export const right = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default("auto");
+export const bottom = Primitive.Either(Primitive.Number(), Primitive.Literal("auto")).default(
+  "auto",
+);
+
+// Background
+export const backgroundColor = Primitive.String()
+  .default("rgba(255, 255, 255, 1)")
+  .regex(RGBaRegex, "Invalid RGBA color format");
+export const backgroundEnabled = Primitive.Boolean().default(false);
+
+/**
+ * Which background fill to render. `backgroundEnabled` gates ALL types; when
+ * disabled the node is transparent regardless of this value. `solid` uses
+ * `backgroundColor` (legacy behavior).
+ */
+export const backgroundType = Primitive.Either(
+  Primitive.Literal("solid"),
+  Primitive.Literal("gradient"),
+  Primitive.Literal("image"),
+).default("solid");
+
+/**
+ * Gradient background. Geometry is a two-point line in normalized node space
+ * (`0..1` typical but not clamped): `start` → `end`. This maps directly onto
+ * draggable canvas handles and expo-linear-gradient `start`/`end` on native.
+ * `stops` colors are RGBA strings positioned `0..1` along that line.
+ */
+export const backgroundGradient = Primitive.Struct({
+  kind: Primitive.Either(Primitive.Literal("linear"), Primitive.Literal("radial")).default("linear"),
+  startX: Primitive.Number().default(0.5),
+  startY: Primitive.Number().default(0),
+  endX: Primitive.Number().default(0.5),
+  endY: Primitive.Number().default(1),
+  stops: Primitive.Array(
+    Primitive.Struct({
+      color: Primitive.String().default("rgba(255, 255, 255, 1)").regex(RGBaRegex, "Invalid RGBA color format"),
+      position: Primitive.Number().default(0),
+    }),
+  ).default([
+    { color: "rgba(255, 255, 255, 1)", position: 0 },
+    { color: "rgba(255, 255, 255, 0)", position: 1 },
+  ]),
+}).default({});
+
+/** Image background. Empty `url` renders as transparent. */
+export const backgroundImage = Primitive.Struct({
+  url: Primitive.String().default(""),
+  resizeMode: Primitive.Either(
+    Primitive.Literal("cover"),
+    Primitive.Literal("contain"),
+    Primitive.Literal("stretch"),
+    Primitive.Literal("center"),
+  ).default("cover"),
+}).default({});
+
+// Border
+export const borderTopWidth = Primitive.Number().default(0);
+export const borderRightWidth = Primitive.Number().default(0);
+export const borderBottomWidth = Primitive.Number().default(0);
+export const borderLeftWidth = Primitive.Number().default(0);
+export const borderColor = Primitive.String()
+  .default("rgba(0, 0, 0, 1)")
+  .regex(RGBaRegex, "Invalid RGBA color format");
+export const borderStyle = Primitive.Either(
+  Primitive.Literal("solid"),
+  Primitive.Literal("dashed"),
+  Primitive.Literal("dotted"),
+).default("solid");
+export const borderTopLeftRadius = Primitive.Number().default(0);
+export const borderTopRightRadius = Primitive.Number().default(0);
+export const borderBottomRightRadius = Primitive.Number().default(0);
+export const borderBottomLeftRadius = Primitive.Number().default(0);
+export const borderEnabled = Primitive.Boolean().default(false);
+
+// Visual
+export const opacity = Primitive.Number().default(1);
+export const overflow = Primitive.Either(
+  Primitive.Literal("visible"),
+  Primitive.Literal("hidden"),
+  Primitive.Literal("scroll"),
+).default("visible");
+export const zIndex = Primitive.Number().default(0);
+export const display = Primitive.Either(
+  Primitive.Literal("flex"),
+  Primitive.Literal("none"),
+).default("flex");
+
+// Shadow
+export const shadowEnabled = Primitive.Boolean().default(false);
+export const shadowColor = Primitive.String()
+  .default("rgba(0, 0, 0, 1)")
+  .regex(RGBaRegex, "Invalid RGBA color format");
+export const shadowOffsetX = Primitive.Number().default(0);
+export const shadowOffsetY = Primitive.Number().default(0);
+export const shadowRadius = Primitive.Number().default(0);
+export const shadowOpacity = Primitive.Number().default(1);
+
+// Typography
+export const fontSize = Primitive.Number().default(16).min(1);
+export const fontWeight = Primitive.Either(
+  Primitive.Literal("100"),
+  Primitive.Literal("200"),
+  Primitive.Literal("300"),
+  Primitive.Literal("400"),
+  Primitive.Literal("500"),
+  Primitive.Literal("600"),
+  Primitive.Literal("700"),
+  Primitive.Literal("800"),
+  Primitive.Literal("900"),
+).default("400");
+export const color = Primitive.String()
+  .default("rgba(0, 0, 0, 1)")
+  .regex(RGBaRegex, "Invalid RGBA color format");
+export const textAlign = Primitive.Either(
+  Primitive.Literal("left"),
+  Primitive.Literal("center"),
+  Primitive.Literal("right"),
+  Primitive.Literal("justify"),
+).default("left");
+export const lineHeight = Primitive.Number().default(1.5);
+export const letterSpacing = Primitive.Number().default(0);
+
+// Safe area
+export const safeAreaTop = Primitive.Boolean().default(false);
+export const safeAreaBottom = Primitive.Boolean().default(false);
+
+// Path fill (SVG vector art) — first-class fields, not overloaded box props
+export const fillColor = Primitive.String()
+  .default("rgba(255, 255, 255, 1)")
+  .regex(RGBaRegex, "Invalid RGBA color format");
+export const fillEnabled = Primitive.Boolean().default(false);
+export const fillRule = Primitive.Either(
+  Primitive.Literal("nonzero"),
+  Primitive.Literal("evenodd"),
+).default("nonzero");
+export const fillOpacity = Primitive.Number().default(1);
+
+// Path stroke (SVG vector art)
+export const strokeColor = Primitive.String()
+  .default("rgba(0, 0, 0, 1)")
+  .regex(RGBaRegex, "Invalid RGBA color format");
+export const strokeEnabled = Primitive.Boolean().default(false);
+export const strokeWidth = Primitive.Number().default(0);
+export const strokeOpacity = Primitive.Number().default(1);
+export const strokeLinecap = Primitive.Either(
+  Primitive.Literal("butt"),
+  Primitive.Literal("round"),
+  Primitive.Literal("square"),
+).default("butt");
+export const strokeLinejoin = Primitive.Either(
+  Primitive.Literal("miter"),
+  Primitive.Literal("round"),
+  Primitive.Literal("bevel"),
+).default("miter");
diff --git a/packages/mimic-schema/src/styles/types.ts b/packages/mimic-schema/src/styles/types.ts
new file mode 100644
index 000000000..7c3d7730e
--- /dev/null
+++ b/packages/mimic-schema/src/styles/types.ts
@@ -0,0 +1,37 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type * as properties from "./properties.ts";
+
+import type {
+  alignItems,
+  alignSelf,
+  borderStyle,
+  display,
+  flexBasis,
+  flexDirection,
+  fontWeight,
+  justifyContent,
+  overflow,
+  textAlign,
+} from "./properties.ts";
+
+/** Literal types for constrained properties - inferred from schema definitions */
+export type JustifyContent = Primitive.InferSnapshot<typeof justifyContent>;
+export type AlignItems = Primitive.InferSnapshot<typeof alignItems>;
+export type FlexDirection = Primitive.InferSnapshot<typeof flexDirection>;
+export type FlexBasis = Primitive.InferSnapshot<typeof flexBasis>;
+export type AlignSelf = Primitive.InferSnapshot<typeof alignSelf>;
+export type Overflow = Primitive.InferSnapshot<typeof overflow>;
+export type Display = Primitive.InferSnapshot<typeof display>;
+export type BorderStyle = Primitive.InferSnapshot<typeof borderStyle>;
+export type FontWeight = Primitive.InferSnapshot<typeof fontWeight>;
+export type TextAlign = Primitive.InferSnapshot<typeof textAlign>;
+
+export type AvailableStyleProperties = keyof typeof properties;
+
+/** Maps each style property name to its inferred value type */
+export type StylePropertyTypes = {
+  [K in AvailableStyleProperties]: (typeof properties)[K] extends Primitive.AnyPrimitive
+    ? Primitive.InferSnapshot<(typeof properties)[K]>
+    : (typeof properties)[K];
+};
diff --git a/packages/mimic-schema/src/utils/svg-parser.test.ts b/packages/mimic-schema/src/utils/svg-parser.test.ts
new file mode 100644
index 000000000..5a7e0d241
--- /dev/null
+++ b/packages/mimic-schema/src/utils/svg-parser.test.ts
@@ -0,0 +1,105 @@
+// @vitest-environment jsdom
+
+import { describe, expect, it } from "vite-plus/test";
+
+import { isSvgContent, parseSvg } from "./svg-parser.ts";
+
+describe("svg-parser", () => {
+  it("detects svg content", () => {
+    expect(isSvgContent("<svg></svg>")).toBe(true);
+    expect(isSvgContent('<?xml version="1.0"?><svg></svg>')).toBe(true);
+    expect(isSvgContent("not svg")).toBe(false);
+  });
+
+  it("parses path styles with inheritance and transform composition", () => {
+    const svg = `
+      <svg viewBox="0 0 24 24">
+        <g transform="translate(10, 20)" style="fill: #ff0000; stroke: rgb(0, 0, 255); stroke-width: 2;">
+          <path
+            id="icon-path"
+            d="M0,0 L10,10"
+            transform="scale(2)"
+            fill-rule="evenodd"
+            fill-opacity="0.5"
+            stroke-opacity="0.25"
+          />
+        </g>
+      </svg>
+    `;
+
+    const parsed = parseSvg(svg);
+    expect(parsed.paths).toHaveLength(1);
+
+    const [path] = parsed.paths;
+    expect(path).toMatchObject({
+      name: "icon-path",
+      d: "M0,0 L10,10",
+      transform: "translate(10, 20) scale(2)",
+      fillColor: "rgba(255, 0, 0, 1)",
+      fillEnabled: true,
+      fillRule: "evenodd",
+      fillOpacity: 0.5,
+      strokeColor: "rgba(0, 0, 255, 1)",
+      strokeEnabled: true,
+      strokeWidth: 2,
+      strokeOpacity: 0.25,
+    });
+  });
+
+  it("converts non-path primitives to path data", () => {
+    const svg = `
+      <svg viewBox="0 0 100 100">
+        <rect id="r" x="5" y="6" width="20" height="30" />
+        <circle id="c" cx="20" cy="20" r="4" />
+        <ellipse id="e" cx="30" cy="40" rx="10" ry="5" />
+        <line id="l" x1="1" y1="2" x2="3" y2="4" stroke="#00ff00" />
+        <polygon id="pg" points="0,0 10,0 10,10" />
+        <polyline id="pl" points="1,1 2,2 3,3" stroke="#000" />
+      </svg>
+    `;
+
+    const parsed = parseSvg(svg);
+    expect(parsed.paths).toHaveLength(6);
+    expect(parsed.paths.map((p) => p.name)).toEqual(["r", "c", "e", "l", "pg", "pl"]);
+    expect(parsed.paths[0]?.d.startsWith("M5,6")).toBe(true);
+    expect(parsed.paths[1]?.d.includes("a4,4")).toBe(true);
+    expect(parsed.paths[2]?.d.includes("a10,5")).toBe(true);
+    expect(parsed.paths[3]?.d).toBe("M1,2 L3,4");
+    expect(parsed.paths[4]?.d.endsWith(" Z")).toBe(true);
+    expect(parsed.paths[5]?.d.endsWith(" Z")).toBe(false);
+    expect(parsed.paths[3]?.fillEnabled).toBe(false);
+  });
+
+  it("handles fill/stroke disabling and defaults", () => {
+    const svg = `
+      <svg width="48" height="48">
+        <path d="M0,0 L1,1" fill="none" stroke="transparent" />
+      </svg>
+    `;
+
+    const parsed = parseSvg(svg);
+    expect(parsed.viewBox.width).toBe(48);
+    expect(parsed.viewBox.height).toBe(48);
+    expect(parsed.paths).toHaveLength(1);
+
+    const [path] = parsed.paths;
+    expect(path?.fillEnabled).toBe(false);
+    expect(path?.strokeEnabled).toBe(false);
+    expect(path?.fillColor).toBe("rgba(0, 0, 0, 1)");
+    expect(path?.strokeColor).toBe("rgba(0, 0, 0, 1)");
+  });
+
+  it("returns empty result for malformed or non-svg input", () => {
+    expect(parseSvg("not xml")).toMatchObject({
+      width: null,
+      height: null,
+      paths: [],
+    });
+
+    expect(parseSvg("<svg><path></svg")).toMatchObject({
+      width: null,
+      height: null,
+      paths: [],
+    });
+  });
+});
diff --git a/packages/mimic-schema/src/utils/svg-parser.ts b/packages/mimic-schema/src/utils/svg-parser.ts
new file mode 100644
index 000000000..ed7c2646e
--- /dev/null
+++ b/packages/mimic-schema/src/utils/svg-parser.ts
@@ -0,0 +1,522 @@
+/**
+ * SVG Parser utility for converting SVG strings to Shape + Path node data.
+ * Handles flattening of SVG groups by applying transforms to path data.
+ */
+
+interface ViewBox {
+  minX: number;
+  minY: number;
+  width: number;
+  height: number;
+}
+
+interface ParsedPath {
+  name: string;
+  d: string;
+  transform: string | null;
+  fillColor: string;
+  fillEnabled: boolean;
+  fillRule: "nonzero" | "evenodd";
+  fillOpacity: number;
+  strokeColor: string;
+  strokeEnabled: boolean;
+  strokeWidth: number;
+  strokeOpacity: number;
+  strokeLinecap: "butt" | "round" | "square";
+  strokeLinejoin: "miter" | "round" | "bevel";
+}
+
+export interface ParsedSvg {
+  viewBox: ViewBox;
+  width: number | null;
+  height: number | null;
+  paths: ParsedPath[];
+}
+
+const FALLBACK_VIEWBOX: ViewBox = {
+  minX: 0,
+  minY: 0,
+  width: 24,
+  height: 24,
+};
+
+const FALLBACK_COLOR = "rgba(0, 0, 0, 1)";
+
+const INHERITABLE_STYLE_PROPERTIES = [
+  "fill",
+  "stroke",
+  "stroke-width",
+  "fill-rule",
+  "fill-opacity",
+  "stroke-opacity",
+  "stroke-linecap",
+  "stroke-linejoin",
+] as const;
+
+const NAMED_COLORS: Record<string, string> = {
+  black: "rgba(0, 0, 0, 1)",
+  white: "rgba(255, 255, 255, 1)",
+  red: "rgba(255, 0, 0, 1)",
+  green: "rgba(0, 128, 0, 1)",
+  blue: "rgba(0, 0, 255, 1)",
+  yellow: "rgba(255, 255, 0, 1)",
+  currentcolor: "rgba(0, 0, 0, 1)",
+};
+
+interface ResolvedPathStyle {
+  fillColor: string;
+  fillEnabled: boolean;
+  fillRule: "nonzero" | "evenodd";
+  fillOpacity: number;
+  strokeColor: string;
+  strokeEnabled: boolean;
+  strokeWidth: number;
+  strokeOpacity: number;
+  strokeLinecap: "butt" | "round" | "square";
+  strokeLinejoin: "miter" | "round" | "bevel";
+}
+
+interface SvgElement {
+  getAttribute(name: string): string | null;
+  tagName: string;
+  children: ArrayLike<SvgElement>;
+}
+
+interface SvgDocument {
+  querySelector(selector: string): SvgElement | null;
+}
+
+type SvgParserConstructor = new () => {
+  parseFromString(input: string, mimeType: string): SvgDocument;
+};
+
+function parseColorToRgba(color: string | null): string {
+  if (!color || color === "none" || color === "transparent") {
+    return FALLBACK_COLOR;
+  }
+
+  if (color.startsWith("rgba(")) {
+    return color;
+  }
+
+  if (color.startsWith("rgb(")) {
+    const match = color.match(/rgb\(\s*(\d+)\s*,\s*(\d+)\s*,\s*(\d+)\s*\)/);
+    if (match) {
+      return `rgba(${match[1]}, ${match[2]}, ${match[3]}, 1)`;
+    }
+  }
+
+  if (color.startsWith("#")) {
+    const hex = color.slice(1);
+    let red = 0;
+    let green = 0;
+    let blue = 0;
+
+    if (hex.length === 3) {
+      red = Number.parseInt((hex[0] ?? "0") + (hex[0] ?? "0"), 16);
+      green = Number.parseInt((hex[1] ?? "0") + (hex[1] ?? "0"), 16);
+      blue = Number.parseInt((hex[2] ?? "0") + (hex[2] ?? "0"), 16);
+    } else if (hex.length === 6) {
+      red = Number.parseInt(hex.slice(0, 2), 16);
+      green = Number.parseInt(hex.slice(2, 4), 16);
+      blue = Number.parseInt(hex.slice(4, 6), 16);
+    } else {
+      return FALLBACK_COLOR;
+    }
+
+    return `rgba(${red}, ${green}, ${blue}, 1)`;
+  }
+
+  return NAMED_COLORS[color.toLowerCase()] ?? FALLBACK_COLOR;
+}
+
+function parseStyleAttribute(styleAttribute: string | null): Record<string, string> {
+  if (!styleAttribute) {
+    return {};
+  }
+
+  const styles: Record<string, string> = {};
+
+  for (const declaration of styleAttribute.split(";")) {
+    const [rawProperty, rawValue] = declaration.split(":");
+    const property = rawProperty?.trim();
+    const value = rawValue?.trim();
+
+    if (property && value) {
+      styles[property] = value;
+    }
+  }
+
+  return styles;
+}
+
+function resolveStyleProperty(
+  element: SvgElement,
+  property: string,
+  inherited: Record<string, string>,
+): string | null {
+  const attributeValue = element.getAttribute(property);
+  if (attributeValue !== null && attributeValue !== "inherit") {
+    return attributeValue;
+  }
+
+  const styleValue = parseStyleAttribute(element.getAttribute("style"))[property];
+  if (styleValue !== undefined && styleValue !== "inherit") {
+    return styleValue;
+  }
+
+  return inherited[property] ?? null;
+}
+
+function buildInheritedStyles(
+  element: SvgElement,
+  inherited: Record<string, string>,
+): Record<string, string> {
+  const nextInherited = { ...inherited };
+
+  for (const property of INHERITABLE_STYLE_PROPERTIES) {
+    const value = resolveStyleProperty(element, property, inherited);
+    if (value !== null && value !== "inherit") {
+      nextInherited[property] = value;
+    }
+  }
+
+  return nextInherited;
+}
+
+function combineTransforms(
+  parentTransform: string | null,
+  childTransform: string | null,
+): string | null {
+  if (!parentTransform && !childTransform) {
+    return null;
+  }
+  if (!parentTransform) {
+    return childTransform;
+  }
+  if (!childTransform) {
+    return parentTransform;
+  }
+  return `${parentTransform} ${childTransform}`;
+}
+
+function parseNumber(value: string | null, fallback: number): number {
+  if (value === null) {
+    return fallback;
+  }
+
+  const parsed = Number.parseFloat(value);
+  return Number.isNaN(parsed) ? fallback : parsed;
+}
+
+function resolvePathStyle(
+  element: SvgElement,
+  inherited: Record<string, string>,
+  options?: { disableFill?: boolean },
+): ResolvedPathStyle {
+  const fill = resolveStyleProperty(element, "fill", inherited);
+  const stroke = resolveStyleProperty(element, "stroke", inherited);
+  const strokeWidth = resolveStyleProperty(element, "stroke-width", inherited);
+  const fillRule = resolveStyleProperty(element, "fill-rule", inherited);
+  const fillOpacity = resolveStyleProperty(element, "fill-opacity", inherited);
+  const strokeOpacity = resolveStyleProperty(element, "stroke-opacity", inherited);
+  const strokeLinecap = resolveStyleProperty(element, "stroke-linecap", inherited);
+  const strokeLinejoin = resolveStyleProperty(element, "stroke-linejoin", inherited);
+
+  const fillEnabled =
+    !options?.disableFill && fill !== null && fill !== "none" && fill !== "transparent";
+  const strokeEnabled = stroke !== null && stroke !== "none" && stroke !== "transparent";
+
+  return {
+    fillColor: parseColorToRgba(fillEnabled ? fill : "black"),
+    fillEnabled,
+    fillRule: fillRule === "evenodd" ? "evenodd" : "nonzero",
+    fillOpacity: parseNumber(fillOpacity, 1),
+    strokeColor: parseColorToRgba(strokeEnabled ? stroke : "black"),
+    strokeEnabled,
+    strokeWidth: parseNumber(strokeWidth, 1),
+    strokeOpacity: parseNumber(strokeOpacity, 1),
+    strokeLinecap: (strokeLinecap as "butt" | "round" | "square") ?? "butt",
+    strokeLinejoin: (strokeLinejoin as "miter" | "round" | "bevel") ?? "miter",
+  };
+}
+
+function nextPathName(
+  pathCounter: { count: number },
+  fallbackPrefix: string,
+  id: string | null,
+): string {
+  pathCounter.count += 1;
+  return id || `${fallbackPrefix} ${pathCounter.count}`;
+}
+
+function pushPath(paths: ParsedPath[], path: ParsedPath): void {
+  paths.push(path);
+}
+
+function rectToPath(element: SvgElement): string {
+  const x = parseNumber(element.getAttribute("x"), 0);
+  const y = parseNumber(element.getAttribute("y"), 0);
+  const width = parseNumber(element.getAttribute("width"), 0);
+  const height = parseNumber(element.getAttribute("height"), 0);
+  const rx = parseNumber(element.getAttribute("rx"), 0);
+  const ry = parseNumber(element.getAttribute("ry"), rx);
+
+  if (rx === 0 && ry === 0) {
+    return `M${x},${y} h${width} v${height} h${-width} Z`;
+  }
+
+  return `M${x + rx},${y} h${width - 2 * rx} a${rx},${ry} 0 0 1 ${rx},${ry} v${height - 2 * ry} a${rx},${ry} 0 0 1 ${-rx},${ry} h${-(width - 2 * rx)} a${rx},${ry} 0 0 1 ${-rx},${-ry} v${-(height - 2 * ry)} a${rx},${ry} 0 0 1 ${rx},${-ry} Z`;
+}
+
+function circleToPath(element: SvgElement): string {
+  const cx = parseNumber(element.getAttribute("cx"), 0);
+  const cy = parseNumber(element.getAttribute("cy"), 0);
+  const radius = parseNumber(element.getAttribute("r"), 0);
+
+  return `M${cx - radius},${cy} a${radius},${radius} 0 1 0 ${2 * radius},0 a${radius},${radius} 0 1 0 ${-2 * radius},0`;
+}
+
+function ellipseToPath(element: SvgElement): string {
+  const cx = parseNumber(element.getAttribute("cx"), 0);
+  const cy = parseNumber(element.getAttribute("cy"), 0);
+  const rx = parseNumber(element.getAttribute("rx"), 0);
+  const ry = parseNumber(element.getAttribute("ry"), 0);
+
+  return `M${cx - rx},${cy} a${rx},${ry} 0 1 0 ${2 * rx},0 a${rx},${ry} 0 1 0 ${-2 * rx},0`;
+}
+
+function lineToPath(element: SvgElement): string {
+  const x1 = parseNumber(element.getAttribute("x1"), 0);
+  const y1 = parseNumber(element.getAttribute("y1"), 0);
+  const x2 = parseNumber(element.getAttribute("x2"), 0);
+  const y2 = parseNumber(element.getAttribute("y2"), 0);
+
+  return `M${x1},${y1} L${x2},${y2}`;
+}
+
+function pointsToPath(points: string, closePath: boolean): string | null {
+  const coordinates = points
+    .trim()
+    .split(/[\s,]+/)
+    .map(Number);
+  if (coordinates.length < 4) {
+    return null;
+  }
+
+  let path = `M${coordinates[0]},${coordinates[1]}`;
+  for (let i = 2; i < coordinates.length; i += 2) {
+    path += ` L${coordinates[i]},${coordinates[i + 1]}`;
+  }
+
+  if (closePath) {
+    path += " Z";
+  }
+
+  return path;
+}
+
+function parseViewBox(viewBoxString: string | null): ViewBox {
+  if (!viewBoxString) {
+    return { ...FALLBACK_VIEWBOX };
+  }
+
+  const parts = viewBoxString
+    .trim()
+    .split(/[\s,]+/)
+    .map(Number);
+  if (parts.length !== 4) {
+    return { ...FALLBACK_VIEWBOX };
+  }
+
+  return {
+    minX: parts[0] ?? FALLBACK_VIEWBOX.minX,
+    minY: parts[1] ?? FALLBACK_VIEWBOX.minY,
+    width: parts[2] ?? FALLBACK_VIEWBOX.width,
+    height: parts[3] ?? FALLBACK_VIEWBOX.height,
+  };
+}
+
+function collectPaths(
+  element: SvgElement,
+  paths: ParsedPath[],
+  parentTransform: string | null,
+  inherited: Record<string, string>,
+  pathCounter: { count: number },
+): void {
+  const inheritedForChildren = buildInheritedStyles(element, inherited);
+  const elementTransform = element.getAttribute("transform");
+  const combinedTransform = combineTransforms(parentTransform, elementTransform);
+
+  for (let childIndex = 0; childIndex < element.children.length; childIndex += 1) {
+    const child = element.children[childIndex];
+    if (!child) {
+      continue;
+    }
+
+    const tagName = child.tagName.toLowerCase();
+
+    if (tagName === "g" || tagName === "svg") {
+      collectPaths(child, paths, combinedTransform, inheritedForChildren, pathCounter);
+      continue;
+    }
+
+    const childTransform = combineTransforms(combinedTransform, child.getAttribute("transform"));
+
+    if (tagName === "path") {
+      const d = child.getAttribute("d");
+      if (!d) {
+        continue;
+      }
+
+      pushPath(paths, {
+        ...resolvePathStyle(child, inheritedForChildren),
+        d,
+        name: nextPathName(pathCounter, "Path", child.getAttribute("id")),
+        transform: childTransform,
+      });
+      continue;
+    }
+
+    if (tagName === "rect") {
+      pushPath(paths, {
+        ...resolvePathStyle(child, inheritedForChildren),
+        d: rectToPath(child),
+        name: nextPathName(pathCounter, "Rect", child.getAttribute("id")),
+        transform: childTransform,
+      });
+      continue;
+    }
+
+    if (tagName === "circle") {
+      pushPath(paths, {
+        ...resolvePathStyle(child, inheritedForChildren),
+        d: circleToPath(child),
+        name: nextPathName(pathCounter, "Circle", child.getAttribute("id")),
+        transform: childTransform,
+      });
+      continue;
+    }
+
+    if (tagName === "ellipse") {
+      pushPath(paths, {
+        ...resolvePathStyle(child, inheritedForChildren),
+        d: ellipseToPath(child),
+        name: nextPathName(pathCounter, "Ellipse", child.getAttribute("id")),
+        transform: childTransform,
+      });
+      continue;
+    }
+
+    if (tagName === "line") {
+      pushPath(paths, {
+        ...resolvePathStyle(child, inheritedForChildren, { disableFill: true }),
+        d: lineToPath(child),
+        name: nextPathName(pathCounter, "Line", child.getAttribute("id")),
+        transform: childTransform,
+      });
+      continue;
+    }
+
+    if (tagName === "polygon" || tagName === "polyline") {
+      const points = child.getAttribute("points");
+      if (!points) {
+        continue;
+      }
+
+      const d = pointsToPath(points, tagName === "polygon");
+      if (!d) {
+        continue;
+      }
+
+      pushPath(paths, {
+        ...resolvePathStyle(child, inheritedForChildren, {
+          disableFill: tagName === "polyline",
+        }),
+        d,
+        name: nextPathName(
+          pathCounter,
+          tagName === "polygon" ? "Polygon" : "Polyline",
+          child.getAttribute("id"),
+        ),
+        transform: childTransform,
+      });
+    }
+  }
+}
+
+function buildRootInheritedStyles(svg: SvgElement): Record<string, string> {
+  const inherited: Record<string, string> = {};
+
+  for (const property of INHERITABLE_STYLE_PROPERTIES) {
+    const value = resolveStyleProperty(svg, property, inherited);
+    if (value !== null && value !== "inherit") {
+      inherited[property] = value;
+    }
+  }
+
+  return inherited;
+}
+
+/**
+ * Parse an SVG string into shape + paths data.
+ */
+export function parseSvg(svgString: string): ParsedSvg {
+  const domParserConstructor = (globalThis as { DOMParser?: SvgParserConstructor }).DOMParser;
+  if (!domParserConstructor) {
+    return {
+      viewBox: { ...FALLBACK_VIEWBOX },
+      width: null,
+      height: null,
+      paths: [],
+    };
+  }
+
+  const parser = new domParserConstructor();
+  const document = parser.parseFromString(svgString, "image/svg+xml");
+  const parserError = document.querySelector("parsererror");
+  const svg = document.querySelector("svg");
+
+  if (!svg || parserError) {
+    return {
+      viewBox: { ...FALLBACK_VIEWBOX },
+      width: null,
+      height: null,
+      paths: [],
+    };
+  }
+
+  const viewBox = parseViewBox(svg.getAttribute("viewBox"));
+
+  const width = parseNumber(svg.getAttribute("width"), Number.NaN);
+  const height = parseNumber(svg.getAttribute("height"), Number.NaN);
+
+  const parsedWidth = Number.isNaN(width) ? null : width;
+  const parsedHeight = Number.isNaN(height) ? null : height;
+
+  if (!svg.getAttribute("viewBox") && parsedWidth !== null && parsedHeight !== null) {
+    viewBox.width = parsedWidth;
+    viewBox.height = parsedHeight;
+  }
+
+  const paths: ParsedPath[] = [];
+  const pathCounter = { count: 0 };
+  const inherited = buildRootInheritedStyles(svg);
+
+  collectPaths(svg, paths, null, inherited, pathCounter);
+
+  return {
+    viewBox,
+    width: parsedWidth,
+    height: parsedHeight,
+    paths,
+  };
+}
+
+/**
+ * Detect if a string contains SVG content.
+ */
+export function isSvgContent(text: string): boolean {
+  const trimmed = text.trim().toLowerCase();
+  return trimmed.startsWith("<svg") || trimmed.startsWith("<?xml");
+}
diff --git a/packages/mimic-schema/src/variables/index.ts b/packages/mimic-schema/src/variables/index.ts
new file mode 100644
index 000000000..f0d2c87c6
--- /dev/null
+++ b/packages/mimic-schema/src/variables/index.ts
@@ -0,0 +1,21 @@
+export type {
+  BooleanVariableType,
+  BooleanVariableTypeSnapshot,
+  NumberVariableType,
+  NumberVariableTypeSnapshot,
+  ProductVariableType,
+  ProductVariableTypeSnapshot,
+  StringVariableType,
+  StringVariableTypeSnapshot,
+  VariableType,
+  VariableTypeSnapshot,
+  VariableTypeKey,
+  VariableTypeKeySnapshot,
+} from "./types.ts";
+export {
+  booleanVariableTypeSchema,
+  numberVariableTypeSchema,
+  productVariableTypeSchema,
+  stringVariableTypeSchema,
+  variableTypeSchema,
+} from "./variables.ts";
diff --git a/packages/mimic-schema/src/variables/types.ts b/packages/mimic-schema/src/variables/types.ts
new file mode 100644
index 000000000..0fd2e0fde
--- /dev/null
+++ b/packages/mimic-schema/src/variables/types.ts
@@ -0,0 +1,30 @@
+import type { Primitive } from "@voidhash/mimic-core";
+
+import type {
+  booleanVariableTypeSchema,
+  numberVariableTypeSchema,
+  productVariableTypeSchema,
+  stringVariableTypeSchema,
+  variableTypeSchema,
+} from "./variables.ts";
+
+export type VariableType = NonNullable<Primitive.InferSnapshot<typeof variableTypeSchema>>;
+export type VariableTypeSnapshot = VariableType;
+export type VariableTypeKey = VariableType["key"];
+export type VariableTypeKeySnapshot = VariableTypeKey;
+export type StringVariableType = NonNullable<
+  Primitive.InferSnapshot<typeof stringVariableTypeSchema>
+>;
+export type StringVariableTypeSnapshot = StringVariableType;
+export type NumberVariableType = NonNullable<
+  Primitive.InferSnapshot<typeof numberVariableTypeSchema>
+>;
+export type NumberVariableTypeSnapshot = NumberVariableType;
+export type BooleanVariableType = NonNullable<
+  Primitive.InferSnapshot<typeof booleanVariableTypeSchema>
+>;
+export type BooleanVariableTypeSnapshot = BooleanVariableType;
+export type ProductVariableType = NonNullable<
+  Primitive.InferSnapshot<typeof productVariableTypeSchema>
+>;
+export type ProductVariableTypeSnapshot = ProductVariableType;
diff --git a/packages/mimic-schema/src/variables/variables.ts b/packages/mimic-schema/src/variables/variables.ts
new file mode 100644
index 000000000..b93202cc3
--- /dev/null
+++ b/packages/mimic-schema/src/variables/variables.ts
@@ -0,0 +1,44 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+export const stringVariableTypeSchema = Primitive.Struct({
+  key: Primitive.Literal("string").required(),
+  value: Primitive.String().default(""),
+});
+
+export const numberVariableTypeSchema = Primitive.Struct({
+  key: Primitive.Literal("number").required(),
+  value: Primitive.Number().default(0),
+});
+
+export const booleanVariableTypeSchema = Primitive.Struct({
+  key: Primitive.Literal("boolean").required(),
+  value: Primitive.Boolean().default(false),
+});
+
+export const productVariableTypeSchema = Primitive.Struct({
+  key: Primitive.Literal("product").required(),
+  value: Primitive.Struct({
+    // Optional string — absence means "no product selected" (the former null)
+    productId: Primitive.String(),
+  }).default({}),
+});
+
+export const variableTypeSchema = Primitive.Union(
+  {
+    boolean: booleanVariableTypeSchema,
+    number: numberVariableTypeSchema,
+    product: productVariableTypeSchema,
+    string: stringVariableTypeSchema,
+  },
+  { discriminator: "key" },
+);
+
+export const variableSchema = Primitive.Struct({
+  id: Primitive.String().required(),
+  name: Primitive.String().required(),
+  value: variableTypeSchema.required(),
+});
+
+export const variableReferenceSchema = Primitive.Struct({
+  id: Primitive.String().required(),
+});
diff --git a/packages/mimic-schema/tsconfig.json b/packages/mimic-schema/tsconfig.json
new file mode 100644
index 000000000..3a6c52735
--- /dev/null
+++ b/packages/mimic-schema/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "compilerOptions": {
+    "types": ["node"]
+  },
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/mimic-schema/vitest.mts b/packages/mimic-schema/vitest.mts
new file mode 100644
index 000000000..926ffb62d
--- /dev/null
+++ b/packages/mimic-schema/vitest.mts
@@ -0,0 +1,11 @@
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  plugins: [tsconfigPaths()],
+  test: {
+    exclude: ["./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9f66b6c15..85532b483 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -644,6 +644,34 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/mimic-schema:
+    dependencies:
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../mimic-core
+    devDependencies:
+      '@types/node':
+        specifier: ^20
+        version: 20.19.43
+      '@voidhash/mimic':
+        specifier: workspace:*
+        version: link:../mimic
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-tsconfig-paths:
+        specifier: ^5.1.4
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/mimic-server:
     dependencies:
       '@voidhash/mimic-core':
@@ -5010,6 +5038,9 @@ packages:
   '@types/ms@2.1.0':
     resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
 
+  '@types/node@20.19.43':
+    resolution: {integrity: sha512-6oYBAi5ikg4Pl+kGsoYtawUMBT2zZMCvPNF7pVLnHZfd1zf38DRiWn/gT01RYCdUqkv7Fhr+C9ot4/tb+2sVvA==}
+
   '@types/node@24.10.4':
     resolution: {integrity: sha512-vnDVpYPMzs4wunl27jHrfmwojOGKya0xyM3sH+UE5iv5uPS6vX7UIoh6m+vQc5LGBq52HBKPIn/zcSZVzeDEZg==}
 
@@ -9766,6 +9797,9 @@ packages:
   unconfig@0.6.1:
     resolution: {integrity: sha512-cVU+/sPloZqOyJEAfNwnQSFCzFrZm85vcVkryH7lnlB/PiTycUkAjt5Ds79cfIshGOZ+M5v3PBDnKgpmlE5DtA==}
 
+  undici-types@6.21.0:
+    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
+
   undici-types@7.16.0:
     resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
 
@@ -14515,6 +14549,10 @@ snapshots:
   '@types/ms@2.1.0':
     optional: true
 
+  '@types/node@20.19.43':
+    dependencies:
+      undici-types: 6.21.0
+
   '@types/node@24.10.4':
     dependencies:
       undici-types: 7.16.0
@@ -14782,6 +14820,14 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@vitest/spy': 3.2.7
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+    optionalDependencies:
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@vitest/spy': 3.2.7
@@ -14864,6 +14910,23 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 20.19.43
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 6.0.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
   '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
@@ -14916,6 +14979,48 @@ snapshots:
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
     optional: true
 
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 20.19.43
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
   '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
@@ -18836,6 +18941,31 @@ snapshots:
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
@@ -18895,6 +19025,30 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
@@ -20238,6 +20392,10 @@ snapshots:
     optionalDependencies:
       typescript: 5.9.3
 
+  tsconfck@3.1.6(typescript@6.0.3):
+    optionalDependencies:
+      typescript: 6.0.3
+
   tsconfig-paths@3.15.0:
     dependencies:
       '@types/json5': 0.0.29
@@ -20459,6 +20617,8 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  undici-types@6.21.0: {}
+
   undici-types@7.16.0: {}
 
   undici-types@7.18.2:
@@ -20610,6 +20770,27 @@ snapshots:
       d3-time: 3.1.0
       d3-timer: 3.0.1
 
+  vite-node@3.2.4(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      cac: 6.7.14
+      debug: 4.4.3
+      es-module-lexer: 1.7.0
+      pathe: 2.0.3
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@types/node'
+      - jiti
+      - less
+      - lightningcss
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
   vite-node@3.2.4(@types/node@24.10.4):
     dependencies:
       cac: 6.7.14
@@ -20673,6 +20854,56 @@ snapshots:
       - tsx
       - yaml
 
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
   vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
@@ -20795,6 +21026,34 @@ snapshots:
       - supports-color
       - typescript
 
+  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+    dependencies:
+      debug: 4.4.3
+      globrex: 0.1.2
+      tsconfck: 3.1.6(typescript@6.0.3)
+    optionalDependencies:
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - supports-color
+      - typescript
+
+  vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      esbuild: 0.28.1
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+      postcss: 8.5.10
+      rollup: 4.59.0
+      tinyglobby: 0.2.15
+    optionalDependencies:
+      '@types/node': 20.19.43
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      lightningcss: 1.32.0
+      terser: 5.44.1
+      tsx: 4.21.0
+      yaml: 2.8.3
+
   vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       esbuild: 0.28.1
@@ -20829,6 +21088,49 @@ snapshots:
       tsx: 4.21.0
       yaml: 2.8.3
 
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      '@types/chai': 5.2.3
+      '@vitest/expect': 3.2.7
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/pretty-format': 3.2.7
+      '@vitest/runner': 3.2.7
+      '@vitest/snapshot': 3.2.7
+      '@vitest/spy': 3.2.7
+      '@vitest/utils': 3.2.7
+      chai: 5.3.3
+      debug: 4.4.3
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      std-env: 3.10.0
+      tinybench: 2.9.0
+      tinyexec: 0.3.2
+      tinyglobby: 0.2.15
+      tinypool: 1.1.1
+      tinyrainbow: 2.0.0
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      why-is-node-running: 2.3.0
+    optionalDependencies:
+      '@types/debug': 4.1.12
+      '@types/node': 20.19.43
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - jiti
+      - less
+      - lightningcss
+      - msw
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
   vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3

From 8c931aac3a08a9f37d8039133f0dd94141d59b5b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 19:59:51 +0200
Subject: [PATCH 053/129] feat(paywalls): publish builtin registry

---
 libraries/paywalls/vitest.unit.mts            |   1 +
 packages/paywall-builtins/LICENSE.md          | 661 ++++++++++++++++++
 packages/paywall-builtins/README.md           |  12 +
 packages/paywall-builtins/package.json        |  44 ++
 packages/paywall-builtins/src/index.ts        |   2 +
 .../paywall-builtins/src/registry.test.ts     |  43 ++
 packages/paywall-builtins/src/registry.ts     |  26 +
 packages/paywall-builtins/src/sample-badge.ts |  36 +
 packages/paywall-builtins/src/types.ts        |  35 +
 packages/paywall-builtins/tsconfig.json       |   8 +
 packages/paywall-builtins/vitest.mts          |  11 +
 pnpm-lock.yaml                                |  36 +-
 12 files changed, 911 insertions(+), 4 deletions(-)
 create mode 100644 packages/paywall-builtins/LICENSE.md
 create mode 100644 packages/paywall-builtins/README.md
 create mode 100644 packages/paywall-builtins/package.json
 create mode 100644 packages/paywall-builtins/src/index.ts
 create mode 100644 packages/paywall-builtins/src/registry.test.ts
 create mode 100644 packages/paywall-builtins/src/registry.ts
 create mode 100644 packages/paywall-builtins/src/sample-badge.ts
 create mode 100644 packages/paywall-builtins/src/types.ts
 create mode 100644 packages/paywall-builtins/tsconfig.json
 create mode 100644 packages/paywall-builtins/vitest.mts

diff --git a/libraries/paywalls/vitest.unit.mts b/libraries/paywalls/vitest.unit.mts
index 3c0d5df91..2d61aa0a7 100644
--- a/libraries/paywalls/vitest.unit.mts
+++ b/libraries/paywalls/vitest.unit.mts
@@ -4,6 +4,7 @@ export default defineConfig({
   esbuild: {
     jsx: "automatic",
     jsxImportSource: "react",
+    tsconfigRaw: "{}",
   },
   test: {
     environment: "node",
diff --git a/packages/paywall-builtins/LICENSE.md b/packages/paywall-builtins/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/paywall-builtins/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/paywall-builtins/README.md b/packages/paywall-builtins/README.md
new file mode 100644
index 000000000..cd76076a1
--- /dev/null
+++ b/packages/paywall-builtins/README.md
@@ -0,0 +1,12 @@
+# @voidhash/paywall-builtins
+
+Shared metadata registry for components built into the Voidhash paywall designer and renderers.
+
+The package exposes component manifests, default properties, preview state, and lookup helpers without depending on a UI runtime.
+
+```typescript
+import {
+  getBuiltinComponent,
+  listBuiltinComponents,
+} from "@voidhash/paywall-builtins";
+```
diff --git a/packages/paywall-builtins/package.json b/packages/paywall-builtins/package.json
new file mode 100644
index 000000000..8ef639eb6
--- /dev/null
+++ b/packages/paywall-builtins/package.json
@@ -0,0 +1,44 @@
+{
+  "name": "@voidhash/paywall-builtins",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "First-party component metadata for the Voidhash paywall designer and renderers.",
+  "keywords": [
+    "components",
+    "paywalls",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/paywall-builtins"
+  },
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vp test run -c vitest.mts"
+  },
+  "dependencies": {
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywalls": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "6.0.3",
+    "vite-plus": "0.1.23",
+    "vite-tsconfig-paths": "^5.1.4",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/paywall-builtins/src/index.ts b/packages/paywall-builtins/src/index.ts
new file mode 100644
index 000000000..5c9707a21
--- /dev/null
+++ b/packages/paywall-builtins/src/index.ts
@@ -0,0 +1,2 @@
+export { BUILTIN_COMPONENTS, getBuiltinComponent, listBuiltinComponents } from "./registry.ts";
+export type { BuiltinComponentDefinition, BuiltinDefaultProp } from "./types.ts";
diff --git a/packages/paywall-builtins/src/registry.test.ts b/packages/paywall-builtins/src/registry.test.ts
new file mode 100644
index 000000000..64e1ea844
--- /dev/null
+++ b/packages/paywall-builtins/src/registry.test.ts
@@ -0,0 +1,43 @@
+import { parseComponentManifest } from "@voidhash/paywalls/schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import { BUILTIN_COMPONENTS, getBuiltinComponent, listBuiltinComponents } from "./registry.ts";
+
+describe("builtin component registry", () => {
+  test("keys every definition by its own slug", () => {
+    for (const [key, definition] of Object.entries(BUILTIN_COMPONENTS)) {
+      expect(definition.slug).toBe(key);
+    }
+  });
+
+  test("getBuiltinComponent resolves known slugs and misses unknown ones", () => {
+    const badge = getBuiltinComponent("sample-badge");
+    expect(badge).toBeDefined();
+    expect(badge!.name).toBe("Sample Badge");
+    expect(getBuiltinComponent("no-such-builtin")).toBeUndefined();
+  });
+
+  test("listBuiltinComponents returns every registry entry", () => {
+    const all = listBuiltinComponents();
+    expect(all.length).toBe(Object.keys(BUILTIN_COMPONENTS).length);
+    expect(all.map((definition) => definition.slug)).toContain("sample-badge");
+  });
+
+  test("every manifest validates as a §2 component manifest", () => {
+    for (const definition of listBuiltinComponents()) {
+      const result = parseComponentManifest(definition.manifest);
+      expect(result.ok, `manifest of "${definition.slug}" must validate`).toBe(true);
+    }
+  });
+
+  test("defaultProps only seed props the manifest declares", () => {
+    for (const definition of listBuiltinComponents()) {
+      for (const prop of definition.defaultProps) {
+        expect(
+          definition.manifest.props[prop.name],
+          `default prop "${prop.name}" of "${definition.slug}" must exist in its manifest`,
+        ).toBeDefined();
+      }
+    }
+  });
+});
diff --git a/packages/paywall-builtins/src/registry.ts b/packages/paywall-builtins/src/registry.ts
new file mode 100644
index 000000000..fbf6cc557
--- /dev/null
+++ b/packages/paywall-builtins/src/registry.ts
@@ -0,0 +1,26 @@
+import { sampleBadge } from "./sample-badge.ts";
+import type { BuiltinComponentDefinition } from "./types.ts";
+
+/**
+ * The registry of built-in component definitions, keyed by their stable slug.
+ * This is the single metadata source for designer panels, the component
+ * browser, and the AI surface; the renderer keeps a parallel slug → preact
+ * component map for the implementations.
+ */
+export const BUILTIN_COMPONENTS: Readonly<Record<string, BuiltinComponentDefinition>> = {
+  [sampleBadge.slug]: sampleBadge,
+};
+
+/**
+ * Looks up a built-in component definition by its stable slug. Returns
+ * undefined for unknown slugs — callers degrade to the same placeholder
+ * behavior as an unresolvable catalog component.
+ */
+export function getBuiltinComponent(slug: string): BuiltinComponentDefinition | undefined {
+  return BUILTIN_COMPONENTS[slug];
+}
+
+/** Lists every built-in component definition, in registry order. */
+export function listBuiltinComponents(): ReadonlyArray<BuiltinComponentDefinition> {
+  return Object.values(BUILTIN_COMPONENTS);
+}
diff --git a/packages/paywall-builtins/src/sample-badge.ts b/packages/paywall-builtins/src/sample-badge.ts
new file mode 100644
index 000000000..929ed5b1a
--- /dev/null
+++ b/packages/paywall-builtins/src/sample-badge.ts
@@ -0,0 +1,36 @@
+import type { BuiltinComponentDefinition } from "./types.ts";
+
+/**
+ * TEMPORARY spine-verification builtin — a static badge that renders its
+ * `label` prop. Exists only to exercise the `componentSource: "builtin"`
+ * resolution path end-to-end; REMOVE before go-live, once the first real
+ * builtin lands.
+ */
+export const sampleBadge: BuiltinComponentDefinition = {
+  slug: "sample-badge",
+  name: "Sample Badge",
+  description: "Temporary spine-verification badge rendering a static label.",
+  manifest: {
+    manifestVersion: 2,
+    title: "Sample Badge",
+    description: "Temporary spine-verification badge rendering a static label.",
+    props: {
+      label: {
+        kind: "string",
+        label: "Label",
+        default: "New",
+        optional: false,
+      },
+    },
+    actions: {},
+    slot: false,
+    previewStates: ["default"],
+    hostData: [],
+  },
+  defaultProps: [
+    {
+      name: "label",
+      value: { type: "literal", value: { key: "string", value: "New" } },
+    },
+  ],
+};
diff --git a/packages/paywall-builtins/src/types.ts b/packages/paywall-builtins/src/types.ts
new file mode 100644
index 000000000..71161c848
--- /dev/null
+++ b/packages/paywall-builtins/src/types.ts
@@ -0,0 +1,35 @@
+import type { ComponentPropBinding } from "@voidhash/mimic-schema";
+import type { ComponentManifest } from "@voidhash/paywalls/schema";
+
+/**
+ * A document prop entry seeded onto a builtin `component` node at insertion —
+ * the exact `{name, value}` shape of `componentNodeData.props` entries, so
+ * insertion code can pass `defaultProps` to the document write unchanged.
+ */
+export interface BuiltinDefaultProp {
+  readonly name: string;
+  readonly value: ComponentPropBinding;
+}
+
+/**
+ * A first-party component that ships with the paywall renderer. Builtins are
+ * placed as `component` nodes with `componentSource: "builtin"`, resolved by
+ * their stable `slug` and UNPINNED (no `componentVersion`/`contentHash` — the
+ * implementation evolves with renderer releases). They are never compiled
+ * from user source and have no catalog rows; the `manifest` reuses the same
+ * §2 {@link ComponentManifest} shape catalog/local components describe
+ * themselves with, so designer panels, the component browser, and the AI
+ * surface consume all three sources uniformly.
+ */
+export interface BuiltinComponentDefinition {
+  /** Stable slug the renderer resolves the implementation by. */
+  readonly slug: string;
+  /** Human-readable display name for panels and the component browser. */
+  readonly name: string;
+  /** Short description for the component browser and the AI surface. */
+  readonly description: string;
+  /** The component's §2 manifest (props/actions/slot/previewStates). */
+  readonly manifest: ComponentManifest;
+  /** Document prop entries seeded when the builtin is inserted. */
+  readonly defaultProps: ReadonlyArray<BuiltinDefaultProp>;
+}
diff --git a/packages/paywall-builtins/tsconfig.json b/packages/paywall-builtins/tsconfig.json
new file mode 100644
index 000000000..3a6c52735
--- /dev/null
+++ b/packages/paywall-builtins/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "compilerOptions": {
+    "types": ["node"]
+  },
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/paywall-builtins/vitest.mts b/packages/paywall-builtins/vitest.mts
new file mode 100644
index 000000000..926ffb62d
--- /dev/null
+++ b/packages/paywall-builtins/vitest.mts
@@ -0,0 +1,11 @@
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  plugins: [tsconfigPaths()],
+  test: {
+    exclude: ["./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 85532b483..ab4d86578 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -305,7 +305,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.6.1)
@@ -428,7 +428,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -694,6 +694,34 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/paywall-builtins:
+    dependencies:
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../mimic-schema
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+    devDependencies:
+      '@types/node':
+        specifier: ^20
+        version: 20.19.43
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-tsconfig-paths:
+        specifier: ^5.1.4
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/platform:
     devDependencies:
       '@voidhash/tsconfig':
@@ -16908,7 +16936,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.6)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
@@ -16919,7 +16947,7 @@ snapshots:
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
       eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3)
       glob: 13.0.0

From edf89e7bbf178b08f1ab0dc9f6152518ae905ab3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 20:54:17 +0200
Subject: [PATCH 054/129] feat(paywalls): publish renderer and tooling stack

---
 packages/ai-shared/LICENSE.md                 | 661 ++++++++++++++
 packages/ai-shared/README.md                  |   7 +
 packages/ai-shared/package.json               |  45 +
 .../src/apply-document-edits.test.ts          | 218 +++++
 .../ai-shared/src/apply-document-edits.ts     | 295 ++++++
 packages/ai-shared/src/chat-request.ts        |  42 +
 packages/ai-shared/src/document-edits.test.ts | 701 +++++++++++++++
 packages/ai-shared/src/document-edits.ts      | 840 ++++++++++++++++++
 .../ai-shared/src/document-serializer.test.ts | 174 ++++
 packages/ai-shared/src/document-serializer.ts | 193 ++++
 packages/ai-shared/src/index.ts               |   8 +
 packages/ai-shared/src/mimic-introspection.ts | 252 ++++++
 packages/ai-shared/src/models.ts              |  48 +
 .../ai-shared/src/style-group-flags.test.ts   |  67 ++
 packages/ai-shared/src/style-group-flags.ts   | 126 +++
 packages/ai-shared/src/surfaces.ts            | 309 +++++++
 packages/ai-shared/tsconfig.json              |   5 +
 packages/ai-shared/vitest.mts                 |  11 +
 packages/paywall-build/LICENSE.md             | 661 ++++++++++++++
 packages/paywall-build/README.md              |   7 +
 packages/paywall-build/package.json           |  47 +
 .../paywall-build/scripts/generate-libs.ts    |  99 +++
 packages/paywall-build/src/build.test.ts      | 452 ++++++++++
 packages/paywall-build/src/build.ts           | 111 +++
 packages/paywall-build/src/compile.ts         |  92 ++
 packages/paywall-build/src/diagnostics.ts     |  67 ++
 packages/paywall-build/src/extract.ts         | 189 ++++
 packages/paywall-build/src/fixtures.ts        | 155 ++++
 packages/paywall-build/src/fs.ts              |  36 +
 packages/paywall-build/src/hash.ts            | 104 +++
 packages/paywall-build/src/imports.ts         | 234 +++++
 packages/paywall-build/src/index.ts           |  57 ++
 packages/paywall-build/src/lib/index.ts       | 124 +++
 .../src/lib/lib_decorators_d_ts.ts            |   2 +
 .../src/lib/lib_decorators_legacy_d_ts.ts     |   2 +
 .../src/lib/lib_es2015_collection_d_ts.ts     |   2 +
 .../src/lib/lib_es2015_core_d_ts.ts           |   2 +
 .../paywall-build/src/lib/lib_es2015_d_ts.ts  |   2 +
 .../src/lib/lib_es2015_generator_d_ts.ts      |   2 +
 .../src/lib/lib_es2015_iterable_d_ts.ts       |   2 +
 .../src/lib/lib_es2015_promise_d_ts.ts        |   2 +
 .../src/lib/lib_es2015_proxy_d_ts.ts          |   2 +
 .../src/lib/lib_es2015_reflect_d_ts.ts        |   2 +
 .../src/lib/lib_es2015_symbol_d_ts.ts         |   2 +
 .../lib/lib_es2015_symbol_wellknown_d_ts.ts   |   2 +
 .../src/lib/lib_es2016_array_include_d_ts.ts  |   2 +
 .../paywall-build/src/lib/lib_es2016_d_ts.ts  |   2 +
 .../src/lib/lib_es2016_intl_d_ts.ts           |   2 +
 .../src/lib/lib_es2017_arraybuffer_d_ts.ts    |   2 +
 .../paywall-build/src/lib/lib_es2017_d_ts.ts  |   2 +
 .../src/lib/lib_es2017_date_d_ts.ts           |   2 +
 .../src/lib/lib_es2017_intl_d_ts.ts           |   2 +
 .../src/lib/lib_es2017_object_d_ts.ts         |   2 +
 .../src/lib/lib_es2017_sharedmemory_d_ts.ts   |   2 +
 .../src/lib/lib_es2017_string_d_ts.ts         |   2 +
 .../src/lib/lib_es2017_typedarrays_d_ts.ts    |   2 +
 .../src/lib/lib_es2018_asyncgenerator_d_ts.ts |   2 +
 .../src/lib/lib_es2018_asynciterable_d_ts.ts  |   2 +
 .../paywall-build/src/lib/lib_es2018_d_ts.ts  |   2 +
 .../src/lib/lib_es2018_intl_d_ts.ts           |   2 +
 .../src/lib/lib_es2018_promise_d_ts.ts        |   2 +
 .../src/lib/lib_es2018_regexp_d_ts.ts         |   2 +
 .../src/lib/lib_es2019_array_d_ts.ts          |   2 +
 .../paywall-build/src/lib/lib_es2019_d_ts.ts  |   2 +
 .../src/lib/lib_es2019_intl_d_ts.ts           |   2 +
 .../src/lib/lib_es2019_object_d_ts.ts         |   2 +
 .../src/lib/lib_es2019_string_d_ts.ts         |   2 +
 .../src/lib/lib_es2019_symbol_d_ts.ts         |   2 +
 .../src/lib/lib_es2020_bigint_d_ts.ts         |   2 +
 .../paywall-build/src/lib/lib_es2020_d_ts.ts  |   2 +
 .../src/lib/lib_es2020_date_d_ts.ts           |   2 +
 .../src/lib/lib_es2020_intl_d_ts.ts           |   2 +
 .../src/lib/lib_es2020_number_d_ts.ts         |   2 +
 .../src/lib/lib_es2020_promise_d_ts.ts        |   2 +
 .../src/lib/lib_es2020_sharedmemory_d_ts.ts   |   2 +
 .../src/lib/lib_es2020_string_d_ts.ts         |   2 +
 .../lib/lib_es2020_symbol_wellknown_d_ts.ts   |   2 +
 .../paywall-build/src/lib/lib_es2021_d_ts.ts  |   2 +
 .../src/lib/lib_es2021_intl_d_ts.ts           |   2 +
 .../src/lib/lib_es2021_promise_d_ts.ts        |   2 +
 .../src/lib/lib_es2021_string_d_ts.ts         |   2 +
 .../src/lib/lib_es2021_weakref_d_ts.ts        |   2 +
 .../src/lib/lib_es2022_array_d_ts.ts          |   2 +
 .../paywall-build/src/lib/lib_es2022_d_ts.ts  |   2 +
 .../src/lib/lib_es2022_error_d_ts.ts          |   2 +
 .../src/lib/lib_es2022_intl_d_ts.ts           |   2 +
 .../src/lib/lib_es2022_object_d_ts.ts         |   2 +
 .../src/lib/lib_es2022_regexp_d_ts.ts         |   2 +
 .../src/lib/lib_es2022_string_d_ts.ts         |   2 +
 .../paywall-build/src/lib/lib_es5_d_ts.ts     |   2 +
 packages/paywall-build/src/memory-fs.ts       |  77 ++
 .../paywall-build/src/node-capabilities.ts    | 137 +++
 packages/paywall-build/src/node-fs.ts         |  91 ++
 packages/paywall-build/src/paths.ts           |  52 ++
 .../src/probe-buildwire-serialization.test.ts | 155 ++++
 .../paywall-build/src/static-manifest.test.ts | 511 +++++++++++
 packages/paywall-build/src/static-manifest.ts | 777 ++++++++++++++++
 packages/paywall-build/src/test-helpers.ts    |  34 +
 packages/paywall-build/src/typecheck.ts       | 154 ++++
 packages/paywall-build/src/types.ts           | 119 +++
 packages/paywall-build/src/units.test.ts      |  88 ++
 packages/paywall-build/src/validate.ts        | 129 +++
 packages/paywall-build/tsconfig.json          |   8 +
 packages/paywall-build/vitest.mts             |  11 +
 packages/paywall-renderer-preact/LICENSE.md   | 661 ++++++++++++++
 packages/paywall-renderer-preact/README.md    |   7 +
 packages/paywall-renderer-preact/package.json |  50 ++
 .../scripts/generate-runtime-bundle.mjs       |  46 +
 .../src/component-artifacts.ts                |  20 +
 .../src/components/builtins/builtins.test.ts  | 121 +++
 .../src/components/builtins/index.ts          |   4 +
 .../src/components/builtins/mount.ts          |  44 +
 .../src/components/builtins/renderers.ts      |  13 +
 .../src/components/builtins/resolve-props.ts  |  48 +
 .../src/components/builtins/sample-badge.tsx  |  25 +
 .../src/components/builtins/types.ts          |  17 +
 .../src/components/component.tsx              | 236 +++++
 .../src/components/index.ts                   |   5 +
 .../src/components/path.tsx                   |  30 +
 .../src/components/paywall.tsx                |  88 ++
 .../src/components/screen.tsx                 |  35 +
 .../src/components/scroll-view.tsx            |  43 +
 .../src/components/shape.tsx                  |  31 +
 .../src/components/text.tsx                   |  21 +
 .../src/components/view.tsx                   |  39 +
 .../src/context/paywall-context.tsx           | 194 ++++
 .../src/hooks/index.ts                        |   2 +
 .../src/hooks/use-interactions.ts             |  58 ++
 .../src/hooks/use-localized-background.ts     |  15 +
 .../src/hooks/use-resolved-style.ts           |  15 +
 packages/paywall-renderer-preact/src/index.ts |  21 +
 .../src/render.test.ts                        | 726 +++++++++++++++
 .../paywall-renderer-preact/src/render.tsx    | 136 +++
 .../src/runtime/hydrate.tsx                   |  93 ++
 .../src/runtime/runtime-locale.test.ts        |  35 +
 .../src/runtime/runtime-locale.ts             |  14 +
 .../src/templates/document-template.ts        |  62 ++
 .../src/templates/runtime-bundle.generated.ts |   2 +
 .../src/templates/runtime-bundle.ts           |  21 +
 .../src/templates/runtime-script.ts           |  21 +
 .../src/vite-plugin.ts                        |  80 ++
 packages/paywall-renderer-preact/sst-env.d.ts |  10 +
 .../paywall-renderer-preact/tsconfig.json     |   9 +
 .../paywall-renderer-preact/vite.config.ts    |   7 +
 packages/paywall-renderer-web-core/LICENSE.md | 661 ++++++++++++++
 packages/paywall-renderer-web-core/README.md  |  13 +
 .../paywall-renderer-web-core/package.json    |  42 +
 .../src/actions.test.ts                       | 351 ++++++++
 .../paywall-renderer-web-core/src/actions.ts  | 230 +++++
 .../src/evaluator.test.ts                     | 228 +++++
 .../src/evaluator.ts                          | 109 +++
 .../paywall-renderer-web-core/src/index.ts    | 101 +++
 .../paywall-renderer-web-core/src/messages.ts |  11 +
 .../src/preview-tree/index.ts                 |  22 +
 .../src/preview-tree/styles.test.ts           | 270 ++++++
 .../src/preview-tree/styles.ts                | 246 +++++
 .../src/preview-tree/types.ts                 | 165 ++++
 .../src/snapshot-types.ts                     |  53 ++
 .../src/state-resolver.test.ts                | 332 +++++++
 .../src/state-resolver.ts                     |  62 ++
 .../src/styles/background.test.ts             | 231 +++++
 .../src/styles/background.ts                  | 256 ++++++
 .../src/styles/index.ts                       |  12 +
 .../src/styles/node-styles.test.ts            | 268 ++++++
 .../src/styles/path-styles.ts                 |  27 +
 .../src/styles/screen-styles.ts               |  34 +
 .../src/styles/scroll-view-styles.ts          |  62 ++
 .../src/styles/shape-styles.ts                |  43 +
 .../src/styles/text-styles.ts                 |  72 ++
 .../src/styles/utils.ts                       |  18 +
 .../src/styles/view-styles.ts                 |  99 +++
 .../paywall-renderer-web-core/src/types.ts    |  91 ++
 .../src/variables.test.ts                     | 316 +++++++
 .../src/variables.ts                          | 138 +++
 .../paywall-renderer-web-core/sst-env.d.ts    |  10 +
 .../paywall-renderer-web-core/tsconfig.json   |   5 +
 packages/paywall-workspace/LICENSE.md         | 661 ++++++++++++++
 packages/paywall-workspace/README.md          |   7 +
 packages/paywall-workspace/package.json       |  45 +
 packages/paywall-workspace/src/hash.test.ts   |  41 +
 packages/paywall-workspace/src/hash.ts        | 115 +++
 packages/paywall-workspace/src/index.ts       |  56 ++
 packages/paywall-workspace/src/paths.test.ts  | 111 +++
 packages/paywall-workspace/src/paths.ts       | 193 ++++
 .../src/service-write.test.ts                 | 202 +++++
 .../paywall-workspace/src/service-write.ts    | 311 +++++++
 packages/paywall-workspace/src/snapshot.ts    |  49 +
 packages/paywall-workspace/src/write.test.ts  | 236 +++++
 packages/paywall-workspace/src/write.ts       | 273 ++++++
 packages/paywall-workspace/tsconfig.json      |   8 +
 packages/paywall-workspace/vitest.mts         |  11 +
 pnpm-lock.yaml                                | 730 ++++++++++++++-
 192 files changed, 19594 insertions(+), 32 deletions(-)
 create mode 100644 packages/ai-shared/LICENSE.md
 create mode 100644 packages/ai-shared/README.md
 create mode 100644 packages/ai-shared/package.json
 create mode 100644 packages/ai-shared/src/apply-document-edits.test.ts
 create mode 100644 packages/ai-shared/src/apply-document-edits.ts
 create mode 100644 packages/ai-shared/src/chat-request.ts
 create mode 100644 packages/ai-shared/src/document-edits.test.ts
 create mode 100644 packages/ai-shared/src/document-edits.ts
 create mode 100644 packages/ai-shared/src/document-serializer.test.ts
 create mode 100644 packages/ai-shared/src/document-serializer.ts
 create mode 100644 packages/ai-shared/src/index.ts
 create mode 100644 packages/ai-shared/src/mimic-introspection.ts
 create mode 100644 packages/ai-shared/src/models.ts
 create mode 100644 packages/ai-shared/src/style-group-flags.test.ts
 create mode 100644 packages/ai-shared/src/style-group-flags.ts
 create mode 100644 packages/ai-shared/src/surfaces.ts
 create mode 100644 packages/ai-shared/tsconfig.json
 create mode 100644 packages/ai-shared/vitest.mts
 create mode 100644 packages/paywall-build/LICENSE.md
 create mode 100644 packages/paywall-build/README.md
 create mode 100644 packages/paywall-build/package.json
 create mode 100644 packages/paywall-build/scripts/generate-libs.ts
 create mode 100644 packages/paywall-build/src/build.test.ts
 create mode 100644 packages/paywall-build/src/build.ts
 create mode 100644 packages/paywall-build/src/compile.ts
 create mode 100644 packages/paywall-build/src/diagnostics.ts
 create mode 100644 packages/paywall-build/src/extract.ts
 create mode 100644 packages/paywall-build/src/fixtures.ts
 create mode 100644 packages/paywall-build/src/fs.ts
 create mode 100644 packages/paywall-build/src/hash.ts
 create mode 100644 packages/paywall-build/src/imports.ts
 create mode 100644 packages/paywall-build/src/index.ts
 create mode 100644 packages/paywall-build/src/lib/index.ts
 create mode 100644 packages/paywall-build/src/lib/lib_decorators_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_decorators_legacy_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_collection_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_core_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_generator_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_iterable_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_promise_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_proxy_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_reflect_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_symbol_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2015_symbol_wellknown_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2016_array_include_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2016_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2016_intl_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_arraybuffer_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_date_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_intl_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_object_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_sharedmemory_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_string_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2017_typedarrays_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2018_asyncgenerator_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2018_asynciterable_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2018_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2018_intl_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2018_promise_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2018_regexp_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2019_array_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2019_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2019_intl_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2019_object_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2019_string_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2019_symbol_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_bigint_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_date_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_intl_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_number_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_promise_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_sharedmemory_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_string_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2020_symbol_wellknown_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2021_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2021_intl_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2021_promise_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2021_string_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2021_weakref_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2022_array_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2022_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2022_error_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2022_intl_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2022_object_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2022_regexp_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es2022_string_d_ts.ts
 create mode 100644 packages/paywall-build/src/lib/lib_es5_d_ts.ts
 create mode 100644 packages/paywall-build/src/memory-fs.ts
 create mode 100644 packages/paywall-build/src/node-capabilities.ts
 create mode 100644 packages/paywall-build/src/node-fs.ts
 create mode 100644 packages/paywall-build/src/paths.ts
 create mode 100644 packages/paywall-build/src/probe-buildwire-serialization.test.ts
 create mode 100644 packages/paywall-build/src/static-manifest.test.ts
 create mode 100644 packages/paywall-build/src/static-manifest.ts
 create mode 100644 packages/paywall-build/src/test-helpers.ts
 create mode 100644 packages/paywall-build/src/typecheck.ts
 create mode 100644 packages/paywall-build/src/types.ts
 create mode 100644 packages/paywall-build/src/units.test.ts
 create mode 100644 packages/paywall-build/src/validate.ts
 create mode 100644 packages/paywall-build/tsconfig.json
 create mode 100644 packages/paywall-build/vitest.mts
 create mode 100644 packages/paywall-renderer-preact/LICENSE.md
 create mode 100644 packages/paywall-renderer-preact/README.md
 create mode 100644 packages/paywall-renderer-preact/package.json
 create mode 100644 packages/paywall-renderer-preact/scripts/generate-runtime-bundle.mjs
 create mode 100644 packages/paywall-renderer-preact/src/component-artifacts.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/builtins/builtins.test.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/builtins/index.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/builtins/mount.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/builtins/renderers.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/builtins/resolve-props.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/builtins/sample-badge.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/builtins/types.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/component.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/index.ts
 create mode 100644 packages/paywall-renderer-preact/src/components/path.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/paywall.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/screen.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/scroll-view.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/shape.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/text.tsx
 create mode 100644 packages/paywall-renderer-preact/src/components/view.tsx
 create mode 100644 packages/paywall-renderer-preact/src/context/paywall-context.tsx
 create mode 100644 packages/paywall-renderer-preact/src/hooks/index.ts
 create mode 100644 packages/paywall-renderer-preact/src/hooks/use-interactions.ts
 create mode 100644 packages/paywall-renderer-preact/src/hooks/use-localized-background.ts
 create mode 100644 packages/paywall-renderer-preact/src/hooks/use-resolved-style.ts
 create mode 100644 packages/paywall-renderer-preact/src/index.ts
 create mode 100644 packages/paywall-renderer-preact/src/render.test.ts
 create mode 100644 packages/paywall-renderer-preact/src/render.tsx
 create mode 100644 packages/paywall-renderer-preact/src/runtime/hydrate.tsx
 create mode 100644 packages/paywall-renderer-preact/src/runtime/runtime-locale.test.ts
 create mode 100644 packages/paywall-renderer-preact/src/runtime/runtime-locale.ts
 create mode 100644 packages/paywall-renderer-preact/src/templates/document-template.ts
 create mode 100644 packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
 create mode 100644 packages/paywall-renderer-preact/src/templates/runtime-bundle.ts
 create mode 100644 packages/paywall-renderer-preact/src/templates/runtime-script.ts
 create mode 100644 packages/paywall-renderer-preact/src/vite-plugin.ts
 create mode 100644 packages/paywall-renderer-preact/sst-env.d.ts
 create mode 100644 packages/paywall-renderer-preact/tsconfig.json
 create mode 100644 packages/paywall-renderer-preact/vite.config.ts
 create mode 100644 packages/paywall-renderer-web-core/LICENSE.md
 create mode 100644 packages/paywall-renderer-web-core/README.md
 create mode 100644 packages/paywall-renderer-web-core/package.json
 create mode 100644 packages/paywall-renderer-web-core/src/actions.test.ts
 create mode 100644 packages/paywall-renderer-web-core/src/actions.ts
 create mode 100644 packages/paywall-renderer-web-core/src/evaluator.test.ts
 create mode 100644 packages/paywall-renderer-web-core/src/evaluator.ts
 create mode 100644 packages/paywall-renderer-web-core/src/index.ts
 create mode 100644 packages/paywall-renderer-web-core/src/messages.ts
 create mode 100644 packages/paywall-renderer-web-core/src/preview-tree/index.ts
 create mode 100644 packages/paywall-renderer-web-core/src/preview-tree/styles.test.ts
 create mode 100644 packages/paywall-renderer-web-core/src/preview-tree/styles.ts
 create mode 100644 packages/paywall-renderer-web-core/src/preview-tree/types.ts
 create mode 100644 packages/paywall-renderer-web-core/src/snapshot-types.ts
 create mode 100644 packages/paywall-renderer-web-core/src/state-resolver.test.ts
 create mode 100644 packages/paywall-renderer-web-core/src/state-resolver.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/background.test.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/background.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/index.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/node-styles.test.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/path-styles.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/screen-styles.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/scroll-view-styles.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/shape-styles.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/text-styles.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/utils.ts
 create mode 100644 packages/paywall-renderer-web-core/src/styles/view-styles.ts
 create mode 100644 packages/paywall-renderer-web-core/src/types.ts
 create mode 100644 packages/paywall-renderer-web-core/src/variables.test.ts
 create mode 100644 packages/paywall-renderer-web-core/src/variables.ts
 create mode 100644 packages/paywall-renderer-web-core/sst-env.d.ts
 create mode 100644 packages/paywall-renderer-web-core/tsconfig.json
 create mode 100644 packages/paywall-workspace/LICENSE.md
 create mode 100644 packages/paywall-workspace/README.md
 create mode 100644 packages/paywall-workspace/package.json
 create mode 100644 packages/paywall-workspace/src/hash.test.ts
 create mode 100644 packages/paywall-workspace/src/hash.ts
 create mode 100644 packages/paywall-workspace/src/index.ts
 create mode 100644 packages/paywall-workspace/src/paths.test.ts
 create mode 100644 packages/paywall-workspace/src/paths.ts
 create mode 100644 packages/paywall-workspace/src/service-write.test.ts
 create mode 100644 packages/paywall-workspace/src/service-write.ts
 create mode 100644 packages/paywall-workspace/src/snapshot.ts
 create mode 100644 packages/paywall-workspace/src/write.test.ts
 create mode 100644 packages/paywall-workspace/src/write.ts
 create mode 100644 packages/paywall-workspace/tsconfig.json
 create mode 100644 packages/paywall-workspace/vitest.mts

diff --git a/packages/ai-shared/LICENSE.md b/packages/ai-shared/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/ai-shared/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/ai-shared/README.md b/packages/ai-shared/README.md
new file mode 100644
index 000000000..2526b591f
--- /dev/null
+++ b/packages/ai-shared/README.md
@@ -0,0 +1,7 @@
+# @voidhash/ai-shared
+
+Shared schemas and pure document-editing contracts used by Voidhash AI authoring clients and services.
+
+```typescript
+import { chatRequestBodySchema } from "@voidhash/ai-shared";
+```
diff --git a/packages/ai-shared/package.json b/packages/ai-shared/package.json
new file mode 100644
index 000000000..98578e7c8
--- /dev/null
+++ b/packages/ai-shared/package.json
@@ -0,0 +1,45 @@
+{
+  "name": "@voidhash/ai-shared",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "Shared AI request, document-edit, and authoring contracts for Voidhash clients and services.",
+  "keywords": [
+    "ai",
+    "paywalls",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/ai-shared"
+  },
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vp test run -c vitest.mts"
+  },
+  "dependencies": {
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywall-builtins": "workspace:*",
+    "zod": "catalog:"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "6.0.3",
+    "vite-plus": "0.1.23",
+    "vite-tsconfig-paths": "^5.1.4",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/ai-shared/src/apply-document-edits.test.ts b/packages/ai-shared/src/apply-document-edits.test.ts
new file mode 100644
index 000000000..acb77f3f8
--- /dev/null
+++ b/packages/ai-shared/src/apply-document-edits.test.ts
@@ -0,0 +1,218 @@
+import { describe, expect, test } from "vitest";
+
+import { applyDocumentEdits } from "./apply-document-edits.ts";
+import type { EditableDocumentNode } from "./document-edits.ts";
+import type { DocumentEdit } from "./surfaces.ts";
+
+/** A small tree: root → screen → view → text. */
+function makeTree(): EditableDocumentNode {
+  return {
+    id: "root1",
+    type: "root",
+    data: { name: "Paywall" },
+    children: [
+      {
+        id: "screen1",
+        type: "screen",
+        data: {},
+        children: [
+          {
+            id: "view1",
+            type: "view",
+            data: { style: { paddingTop: 8, paddingBottom: 8, backgroundColor: "rgba(0,0,0,1)" } },
+            children: [
+              { id: "text1", type: "text", data: { text: "Hi" }, children: [] },
+            ],
+          },
+        ],
+      },
+    ],
+  };
+}
+
+/** Depth-first flatten to `id → node` for assertions. */
+function byId(root: EditableDocumentNode): Map<string, EditableDocumentNode> {
+  const map = new Map<string, EditableDocumentNode>();
+  const walk = (node: EditableDocumentNode) => {
+    map.set(node.id, node);
+    for (const child of node.children ?? []) walk(child);
+  };
+  walk(root);
+  return map;
+}
+
+const childIds = (node: EditableDocumentNode | undefined): string[] =>
+  (node?.children ?? []).map((child) => child.id);
+
+describe("applyDocumentEdits", () => {
+  test("insert appends under a parent and returns real minted ids", () => {
+    const { root, mintedIds } = applyDocumentEdits(makeTree(), [
+      {
+        op: "insert",
+        parentId: "screen1",
+        node: { type: "view", name: "Card", style: { paddingTop: 16 } },
+      },
+    ] as DocumentEdit[]);
+
+    const minted = mintedIds["0"];
+    expect(minted).toBeDefined();
+    expect(minted).toHaveLength(1);
+    const newId = minted![0]!;
+    // A real 10-char alphanumeric mimic id (shortId scheme), addressable next.
+    expect(newId).toMatch(/^[0-9A-Za-z]{10}$/);
+
+    const nodes = byId(root);
+    const inserted = nodes.get(newId);
+    expect(inserted?.type).toBe("view");
+    expect(inserted?.data).toEqual({ name: "Card", style: { paddingTop: 16 } });
+    // Appended after the existing view1.
+    expect(childIds(nodes.get("screen1"))).toEqual(["view1", newId]);
+  });
+
+  test("insert with a nested subtree mints ids pre-order (parent before children)", () => {
+    const { mintedIds } = applyDocumentEdits(makeTree(), [
+      {
+        op: "insert",
+        parentId: "screen1",
+        node: {
+          type: "view",
+          children: [
+            { type: "text", text: "A" },
+            { type: "text", text: "B" },
+          ],
+        },
+      },
+    ] as DocumentEdit[]);
+    const minted = mintedIds["0"]!;
+    expect(minted).toHaveLength(3); // view + 2 texts
+    // All distinct.
+    expect(new Set(minted).size).toBe(3);
+  });
+
+  test("insert at an index places among siblings; out-of-range clamps", () => {
+    const tree: EditableDocumentNode = {
+      id: "root1",
+      type: "root",
+      data: {},
+      children: [
+        { id: "a", type: "view", data: {}, children: [] },
+        { id: "b", type: "view", data: {}, children: [] },
+      ],
+    };
+    const inRange = applyDocumentEdits(tree, [
+      { op: "insert", parentId: "root1", index: 1, node: { type: "view" } },
+    ] as DocumentEdit[]);
+    const midId = inRange.mintedIds["0"]![0]!;
+    expect(childIds(inRange.root)).toEqual(["a", midId, "b"]);
+
+    const clamped = applyDocumentEdits(tree, [
+      { op: "insert", parentId: "root1", index: 99, node: { type: "view" } },
+    ] as DocumentEdit[]);
+    const endId = clamped.mintedIds["0"]![0]!;
+    expect(childIds(clamped.root)).toEqual(["a", "b", endId]);
+
+    const negative = applyDocumentEdits(tree, [
+      { op: "insert", parentId: "root1", index: -5, node: { type: "view" } },
+    ] as DocumentEdit[]);
+    const startId = negative.mintedIds["0"]![0]!;
+    expect(childIds(negative.root)).toEqual([startId, "a", "b"]);
+  });
+
+  test("update deep-merges nested structs and replaces scalars/arrays", () => {
+    const { root } = applyDocumentEdits(makeTree(), [
+      { op: "update", nodeId: "view1", set: { style: { paddingTop: 24 } } },
+    ] as DocumentEdit[]);
+    const view = byId(root).get("view1")!;
+    // paddingTop overridden; paddingBottom + backgroundColor untouched (per-field merge).
+    expect(view.data).toEqual({
+      style: { paddingTop: 24, paddingBottom: 8, backgroundColor: "rgba(0,0,0,1)" },
+    });
+  });
+
+  test("update replaces a scalar wholesale and deletes on undefined", () => {
+    const replaced = applyDocumentEdits(makeTree(), [
+      { op: "update", nodeId: "text1", set: { text: "Bye" } },
+    ] as DocumentEdit[]);
+    expect(byId(replaced.root).get("text1")!.data).toEqual({ text: "Bye" });
+
+    const deleted = applyDocumentEdits(makeTree(), [
+      { op: "update", nodeId: "text1", set: { text: undefined } },
+    ] as DocumentEdit[]);
+    expect(byId(deleted.root).get("text1")!.data).toEqual({});
+  });
+
+  test("update does not mutate the input tree", () => {
+    const tree = makeTree();
+    applyDocumentEdits(tree, [
+      { op: "update", nodeId: "view1", set: { style: { paddingTop: 99 } } },
+    ] as DocumentEdit[]);
+    // Original untouched.
+    const original = byId(tree).get("view1")!;
+    expect((original.data!["style"] as Record<string, unknown>)["paddingTop"]).toBe(8);
+  });
+
+  test("move reparents preserving the node id and its subtree", () => {
+    const { root } = applyDocumentEdits(makeTree(), [
+      { op: "move", nodeId: "text1", parentId: "screen1", index: 0 },
+    ] as DocumentEdit[]);
+    const nodes = byId(root);
+    // text1 left view1 and now leads screen1's children.
+    expect(childIds(nodes.get("view1"))).toEqual([]);
+    expect(childIds(nodes.get("screen1"))).toEqual(["text1", "view1"]);
+    // Its data/subtree came along, id preserved.
+    expect(nodes.get("text1")?.data).toEqual({ text: "Hi" });
+  });
+
+  test("remove drops the node and its whole subtree", () => {
+    const { root } = applyDocumentEdits(makeTree(), [
+      { op: "remove", nodeId: "view1" },
+    ] as DocumentEdit[]);
+    const nodes = byId(root);
+    expect(nodes.has("view1")).toBe(false);
+    expect(nodes.has("text1")).toBe(false); // subtree gone
+    expect(childIds(nodes.get("screen1"))).toEqual([]);
+  });
+
+  test("replaceChildren swaps the whole child list and mints the new ids", () => {
+    const { root, mintedIds } = applyDocumentEdits(makeTree(), [
+      {
+        op: "replaceChildren",
+        nodeId: "view1",
+        children: [
+          { type: "text", text: "One" },
+          { type: "text", text: "Two" },
+        ],
+      },
+    ] as DocumentEdit[]);
+    const minted = mintedIds["0"]!;
+    expect(minted).toHaveLength(2);
+    const nodes = byId(root);
+    // Old text1 removed; new children present in order.
+    expect(nodes.has("text1")).toBe(false);
+    expect(childIds(nodes.get("view1"))).toEqual(minted);
+    expect(nodes.get(minted[0]!)?.data).toEqual({ text: "One" });
+    expect(nodes.get(minted[1]!)?.data).toEqual({ text: "Two" });
+  });
+
+  test("a batch applies ops in order and can address ids minted earlier", () => {
+    const { root, mintedIds } = applyDocumentEdits(makeTree(), [
+      { op: "insert", parentId: "screen1", node: { type: "view", name: "Row" } },
+      // Second op inserts under the id minted by the first — but ids are minted
+      // at apply time, so this batch style addresses via a follow-up call in
+      // practice; here we verify the first op's id exists to be addressed.
+    ] as DocumentEdit[]);
+    const rowId = mintedIds["0"]![0]!;
+    expect(byId(root).has(rowId)).toBe(true);
+  });
+
+  test("an op addressing a missing node is skipped (defensive post-validation)", () => {
+    const { root, mintedIds } = applyDocumentEdits(makeTree(), [
+      { op: "update", nodeId: "ghost", set: { text: "x" } },
+      { op: "insert", parentId: "screen1", node: { type: "view" } },
+    ] as DocumentEdit[]);
+    // The ghost update was skipped; the valid insert still applied at index 1.
+    expect(mintedIds["0"]).toBeUndefined();
+    expect(mintedIds["1"]).toHaveLength(1);
+    expect(byId(root).has(mintedIds["1"]![0]!)).toBe(true);
+  });
+});
diff --git a/packages/ai-shared/src/apply-document-edits.ts b/packages/ai-shared/src/apply-document-edits.ts
new file mode 100644
index 000000000..bb05dddf6
--- /dev/null
+++ b/packages/ai-shared/src/apply-document-edits.ts
@@ -0,0 +1,295 @@
+import { shortId } from "@voidhash/mimic-core";
+
+import type { EditableDocumentNode } from "./document-edits.ts";
+import type { DocumentEdit, MintedIds, NodeInput } from "./surfaces.ts";
+
+/**
+ * A pure document-edit applier: given a decoded document tree and a batch of
+ * ALREADY-VALIDATED {@link DocumentEdit} ops, produce the resulting target tree
+ * plus the ids minted for every node an `insert` / `replaceChildren` created.
+ *
+ * This is the server-side twin of the browser store action `applyDocumentEdits`
+ * (apps/www .../document-edit-actions.ts): the browser applies the ops to the
+ * LIVE mimic proxy (which mints ids and merges as a side effect), while this
+ * runs the SAME op semantics purely so the backend can pre-mint ids, build a
+ * target tree, and reconcile it against the live document (no fork, no whole-
+ * target overwrite). The two share the ai-shared validator + these op shapes, so
+ * they converge on identical behavior — see the report note on unifying them.
+ *
+ * Semantics mirrored from the mimic write path (see the `emitStructUpdate`
+ * merge in mimic-core `Struct.ts` and the store action):
+ * - `insert` — add a subtree under `parentId` at the (already-clamped) `index`;
+ *   every created node gets a pre-minted {@link shortId} id, collected pre-order
+ *   (parent before children) into the minted-id map keyed by op index.
+ * - `update` — deep-MERGE the `set` into the node's `data`: when both the
+ *   existing and incoming value at a key are plain (non-array) objects, merge
+ *   per-field recursively (nested structs like `style`); everything else (arrays,
+ *   scalars, a plain object replacing a non-object) REPLACES wholesale. An
+ *   `undefined` value deletes the field.
+ * - `move` — reparent the node under `parentId` at `index` (identity preserved).
+ * - `remove` — drop the node and its subtree.
+ * - `replaceChildren` — replace the node's whole child list with a new ordered
+ *   list; the removed subtree is dropped and the new nodes are minted.
+ *
+ * Pre-minted ids survive the round-trip: `PaywallDesignerDocument.encode`
+ * preserves any `id` present on an input node (minting only when absent), and
+ * `reconcile` emits a `tree.insert` carrying the TARGET id verbatim for any node
+ * id absent from the live tree — so a pre-minted id becomes the node's real,
+ * addressable id. `shortId` is the exact generator mimic uses for tree node ids.
+ *
+ * The applier assumes the ops already passed {@link validateDocumentEdits}: an
+ * op that addresses a now-missing node (which validation would have rejected) is
+ * skipped defensively rather than throwing.
+ */
+export interface ApplyDocumentEditsResult {
+  /** The resulting target tree (same root identity, edits applied). */
+  readonly root: EditableDocumentNode;
+  /**
+   * Minted ids per op: the batch index of each `insert` / `replaceChildren` op
+   * (as a string) → the ids minted for the nodes it created, pre-order
+   * (parents before children). Matches ai-shared's {@link MintedIds} wire shape.
+   */
+  readonly mintedIds: MintedIds;
+}
+
+/** A mutable node during application (a deep, mutable copy of the input tree). */
+interface MutableNode {
+  id: string;
+  type: string;
+  data: Record<string, unknown>;
+  children: MutableNode[];
+}
+
+/**
+ * Apply a validated batch of document edits to a copy of `root`, returning the
+ * new tree and the minted-id map. Pure — `root` is never mutated.
+ */
+export function applyDocumentEdits(
+  root: EditableDocumentNode,
+  edits: readonly DocumentEdit[],
+): ApplyDocumentEditsResult {
+  const mutableRoot = toMutable(root);
+  const index = buildIndex(mutableRoot);
+  const mintedIds: MintedIds = {};
+
+  edits.forEach((edit, editIndex) => {
+    switch (edit.op) {
+      case "insert": {
+        const parent = index.byId.get(edit.parentId);
+        if (parent === undefined) break;
+        const minted: string[] = [];
+        const node = nodeInputToMutable(edit.node, minted, index);
+        insertChild(parent, node, edit.index);
+        registerSubtree(index, node);
+        if (minted.length > 0) {
+          mintedIds[String(editIndex)] = minted;
+        }
+        break;
+      }
+      case "update": {
+        const node = index.byId.get(edit.nodeId);
+        if (node === undefined) break;
+        node.data = mergeData(node.data, edit.set);
+        break;
+      }
+      case "move": {
+        const node = index.byId.get(edit.nodeId);
+        const parent = index.byId.get(edit.parentId);
+        if (node === undefined || parent === undefined) break;
+        const currentParent = index.parentOf.get(node.id);
+        if (currentParent === undefined) break; // the root itself is not movable
+        detachChild(currentParent, node.id);
+        insertChild(parent, node, edit.index);
+        index.parentOf.set(node.id, parent);
+        break;
+      }
+      case "remove": {
+        const node = index.byId.get(edit.nodeId);
+        if (node === undefined) break;
+        const parent = index.parentOf.get(node.id);
+        if (parent === undefined) break; // the root itself is not removable
+        detachChild(parent, node.id);
+        unregisterSubtree(index, node);
+        break;
+      }
+      case "replaceChildren": {
+        const node = index.byId.get(edit.nodeId);
+        if (node === undefined) break;
+        for (const child of node.children) {
+          unregisterSubtree(index, child);
+        }
+        node.children = [];
+        const minted: string[] = [];
+        for (const childInput of edit.children) {
+          const child = nodeInputToMutable(childInput, minted, index);
+          node.children.push(child);
+          index.parentOf.set(child.id, node);
+          registerSubtree(index, child);
+        }
+        mintedIds[String(editIndex)] = minted;
+        break;
+      }
+    }
+  });
+
+  return { root: fromMutable(mutableRoot), mintedIds };
+}
+
+// ---------------------------------------------------------------------------
+// Tree index (id → node, id → parent) kept in sync as ops mutate the tree
+// ---------------------------------------------------------------------------
+
+interface TreeIndex {
+  readonly byId: Map<string, MutableNode>;
+  readonly parentOf: Map<string, MutableNode>;
+}
+
+function buildIndex(root: MutableNode): TreeIndex {
+  const byId = new Map<string, MutableNode>();
+  const parentOf = new Map<string, MutableNode>();
+  const walk = (node: MutableNode, parent: MutableNode | undefined) => {
+    byId.set(node.id, node);
+    if (parent !== undefined) parentOf.set(node.id, parent);
+    for (const child of node.children) walk(child, node);
+  };
+  walk(root, undefined);
+  return { byId, parentOf };
+}
+
+/** Register a freshly-attached subtree (its parent link is set by the caller). */
+function registerSubtree(index: TreeIndex, node: MutableNode): void {
+  index.byId.set(node.id, node);
+  for (const child of node.children) {
+    index.parentOf.set(child.id, node);
+    registerSubtree(index, child);
+  }
+}
+
+/** Drop a detached subtree from the index (called after `detachChild`). */
+function unregisterSubtree(index: TreeIndex, node: MutableNode): void {
+  index.byId.delete(node.id);
+  index.parentOf.delete(node.id);
+  for (const child of node.children) unregisterSubtree(index, child);
+}
+
+/** Insert `node` among `parent`'s children at `index` (clamped into range). */
+function insertChild(parent: MutableNode, node: MutableNode, at: number | undefined): void {
+  const position = at === undefined ? parent.children.length : clamp(at, parent.children.length);
+  parent.children.splice(position, 0, node);
+}
+
+/** Remove the child with `childId` from `parent`'s children (no-op when absent). */
+function detachChild(parent: MutableNode, childId: string): void {
+  const idx = parent.children.findIndex((child) => child.id === childId);
+  if (idx !== -1) parent.children.splice(idx, 1);
+}
+
+function clamp(value: number, upper: number): number {
+  if (value < 0) return 0;
+  return Math.min(value, upper);
+}
+
+// ---------------------------------------------------------------------------
+// update.set merge (mirrors the mimic Struct update merge)
+// ---------------------------------------------------------------------------
+
+/**
+ * Merge a `set` partial into a node's `data`. A key whose existing AND incoming
+ * value are both plain (non-array, non-null) objects merges per-field
+ * recursively (nested structs such as `style`); every other shape (arrays,
+ * scalars, or an object replacing a non-object / vice versa) REPLACES the whole
+ * value. An `undefined` incoming value deletes the key. Pure — a fresh object is
+ * returned, the input `data` is not mutated.
+ */
+function mergeData(
+  data: Record<string, unknown>,
+  set: Record<string, unknown>,
+): Record<string, unknown> {
+  const out: Record<string, unknown> = { ...data };
+  for (const [key, value] of Object.entries(set)) {
+    if (value === undefined) {
+      delete out[key];
+      continue;
+    }
+    const existing = out[key];
+    if (isPlainObject(existing) && isPlainObject(value)) {
+      out[key] = mergeData(existing, value);
+    } else {
+      out[key] = value;
+    }
+  }
+  return out;
+}
+
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+// ---------------------------------------------------------------------------
+// NodeInput → mutable node (id minting, data nesting)
+// ---------------------------------------------------------------------------
+
+/**
+ * Convert a {@link NodeInput} (flat `{ type, name?, children?, ...dataFields }`)
+ * into a mutable node with a freshly-minted id and its non-structural fields
+ * nested under `data`. Recurses into children (minting ids for each, pre-order).
+ * Minted ids are appended to `minted` parent-before-children.
+ *
+ * Ids are minted with a collision guard against the live tree's id index: a
+ * fresh {@link shortId} is re-rolled while it already names a node (mirroring
+ * mimic's own `nextUniqueNodeId`), so a pre-minted id can never collide with an
+ * existing node and make `PaywallDesignerDocument.encode` throw a defect. Each
+ * minted id is reserved in the index immediately so siblings minted in the same
+ * subtree also stay distinct.
+ */
+function nodeInputToMutable(node: NodeInput, minted: string[], index: TreeIndex): MutableNode {
+  const id = mintUniqueId(index);
+  minted.push(id);
+  const data: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(node)) {
+    if (key === "type" || key === "children") continue;
+    data[key] = value;
+  }
+  const mutable: MutableNode = { id, type: node.type, data, children: [] };
+  // Reserve the id before minting children so a sibling can't collide with it.
+  index.byId.set(id, mutable);
+  mutable.children = (node.children ?? []).map((child) => nodeInputToMutable(child, minted, index));
+  return mutable;
+}
+
+/**
+ * Mint a {@link shortId} that does not already exist in the tree's id index,
+ * re-rolling on the (astronomically rare) collision — the same guard mimic's
+ * `nextUniqueNodeId` applies so a pre-minted id is always addressable.
+ */
+function mintUniqueId(index: TreeIndex): string {
+  let id = shortId();
+  while (index.byId.has(id)) {
+    id = shortId();
+  }
+  return id;
+}
+
+// ---------------------------------------------------------------------------
+// EditableDocumentNode <-> mutable node
+// ---------------------------------------------------------------------------
+
+/** Deep, mutable copy of an input node (its `data` copied top-level; children recursed). */
+function toMutable(node: EditableDocumentNode): MutableNode {
+  return {
+    id: node.id,
+    type: node.type,
+    data: { ...(node.data ?? {}) },
+    children: (node.children ?? []).map(toMutable),
+  };
+}
+
+/** Freeze a mutable node back into the readonly {@link EditableDocumentNode} shape. */
+function fromMutable(node: MutableNode): EditableDocumentNode {
+  return {
+    id: node.id,
+    type: node.type,
+    data: node.data,
+    children: node.children.map(fromMutable),
+  };
+}
diff --git a/packages/ai-shared/src/chat-request.ts b/packages/ai-shared/src/chat-request.ts
new file mode 100644
index 000000000..dad5e164e
--- /dev/null
+++ b/packages/ai-shared/src/chat-request.ts
@@ -0,0 +1,42 @@
+import { z } from "zod";
+
+/**
+ * The wire contract for `POST /api/ai/chat`: the request body the studio chat
+ * transport sends and the backend route decodes. Shared here so the client
+ * transport (apps/www) and the server route (apps/backend) validate against ONE
+ * schema and cannot silently drift.
+ *
+ * The AI SDK appends the running message history plus per-turn control fields
+ * (`id`/`trigger`/`messageId`) to the body; the transport merges in the surface,
+ * chat scope, and any live dynamic context. This schema is intentionally lenient
+ * about the SDK-owned fields (passthrough — the server only reads what it needs)
+ * and strict about the fields the server relies on.
+ *
+ * `messages` is validated only as an array here; the server further validates it
+ * with the AI SDK's `validateUIMessages`. The route separately enforces
+ * anti-spoof authz (the project must be in the caller's session) AFTER decoding —
+ * that check is NOT part of this schema.
+ */
+export const chatRequestBodySchema = z
+  .object({
+    /** UI-message history from the AI SDK client. */
+    messages: z.array(z.unknown()),
+    /** Studio surface — currently only the paywall designer. */
+    surface: z.literal("designer"),
+    organizationId: z.string(),
+    /** Project the workspace tools operate over (anti-spoof-checked by the route). */
+    projectId: z.string(),
+    /** The open paywall id — chat persistence scope only. */
+    paywallId: z.string(),
+    /** Client-minted chat id — the persistence upsert key. */
+    chatId: z.string(),
+    /**
+     * Mimic node ids the user currently has selected in the open designer, sent
+     * fresh per turn. Optional — older clients / non-designer surfaces omit it.
+     */
+    selectedNodeIds: z.array(z.string()).optional(),
+  })
+  .passthrough();
+
+/** The decoded chat request body (the server-relevant fields; SDK extras are dropped by callers). */
+export type ChatRequestBody = z.infer<typeof chatRequestBodySchema>;
diff --git a/packages/ai-shared/src/document-edits.test.ts b/packages/ai-shared/src/document-edits.test.ts
new file mode 100644
index 000000000..57ff35b61
--- /dev/null
+++ b/packages/ai-shared/src/document-edits.test.ts
@@ -0,0 +1,701 @@
+import { ScreenNode, TextNode, ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vitest";
+
+import { validateDocumentEdits, type EditableDocumentNode } from "./document-edits.ts";
+import type { DocumentEdit } from "./surfaces.ts";
+
+/**
+ * Decode a node type's data with the given partial input via the live mimic
+ * schema (defaults filled) — the same round-trip the vocabulary-contract test
+ * uses, so fixtures match what the designer actually persists.
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function decodeData(prim: any, input: unknown): Record<string, unknown> {
+  return prim.data.decode(prim.data.encode(input)) as Record<string, unknown>;
+}
+
+/** A small realistic tree: root → screen → view → text. */
+function makeTree(): EditableDocumentNode {
+  return {
+    id: "root1",
+    type: "root",
+    data: {},
+    children: [
+      {
+        id: "screen1",
+        type: "screen",
+        data: decodeData(ScreenNode, {}),
+        children: [
+          {
+            id: "view1",
+            type: "view",
+            data: decodeData(ViewNode, {}),
+            children: [
+              { id: "text1", type: "text", data: decodeData(TextNode, { text: "Hi" }), children: [] },
+            ],
+          },
+        ],
+      },
+    ],
+  };
+}
+
+describe("validateDocumentEdits — error quality", () => {
+  test("unknown style field: did-you-mean + allowed list", () => {
+    const result = validateDocumentEdits(
+      [{ op: "update", nodeId: "view1", set: { style: { backgroundEnable: true } } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors[0]!;
+    expect(err.code).toBe("unknownField");
+    expect(err.message).toContain("backgroundEnable");
+    // did-you-mean names the real field
+    expect(err.message).toContain("did you mean `backgroundEnabled`?");
+    // allowed list is derived from the schema (not hand-listed)
+    expect(err.message).toContain("allowed:");
+    expect(err.message).toContain("backgroundColor");
+    expect(err.message).toContain("paddingTop");
+  });
+
+  test("bad enum value names the allowed values", () => {
+    const result = validateDocumentEdits(
+      [{ op: "update", nodeId: "view1", set: { style: { justifyContent: "middle" } } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors[0]!;
+    expect(err.code).toBe("invalidValue");
+    expect(err.message).toContain('"middle"');
+    expect(err.message).toContain("Allowed values");
+    expect(err.message).toContain('"flex-start"');
+    expect(err.message).toContain('"space-between"');
+  });
+
+  test("wrong scalar family names the expected type", () => {
+    const result = validateDocumentEdits(
+      [{ op: "update", nodeId: "view1", set: { style: { paddingTop: "big" } } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors[0]!;
+    expect(err.code).toBe("invalidValue");
+    expect(err.message).toContain("Expected number");
+    expect(err.message).toContain("style.paddingTop");
+  });
+
+  test("illegal child type names the allowed children", () => {
+    // text nodes have no children
+    const result = validateDocumentEdits(
+      [{ op: "insert", parentId: "text1", node: { type: "view" } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "illegalChild")!;
+    expect(err).toBeDefined();
+    expect(err.message).toContain("text");
+    expect(err.message).toContain("cannot contain children");
+  });
+
+  test("illegal child under a container names the allowed set", () => {
+    const result = validateDocumentEdits(
+      [{ op: "insert", parentId: "view1", node: { type: "screen" } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "illegalChild")!;
+    expect(err.message).toContain("`screen` cannot be a child of `view`");
+    expect(err.message).toContain("Allowed children of `view`: [view, scrollView, text, shape, component]");
+  });
+
+  test("scrollView is an insertable node type (legal child of view)", () => {
+    const result = validateDocumentEdits(
+      [{ op: "insert", parentId: "view1", node: { type: "scrollView" } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+
+  test("unknown node id names the id", () => {
+    const result = validateDocumentEdits(
+      [{ op: "update", nodeId: "ghost", set: { name: "x" } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    expect(result.errors[0]!.code).toBe("unknownNode");
+    expect(result.errors[0]!.message).toContain("`ghost`");
+  });
+
+  test("move into own subtree is a cycle", () => {
+    // screen1 contains view1 → moving screen1 under view1 is a cycle
+    const result = validateDocumentEdits(
+      [{ op: "move", nodeId: "screen1", parentId: "view1", index: 0 }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "moveCycle")!;
+    expect(err).toBeDefined();
+    expect(err.message).toContain("cycle");
+  });
+
+  test("inserting root / library / codeComponent is rejected", () => {
+    const result = validateDocumentEdits(
+      [
+        { op: "insert", parentId: "view1", node: { type: "root" } },
+        { op: "insert", parentId: "view1", node: { type: "codeComponent" } },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const rootErr = result.errors.find((e) => e.code === "invalidNodeType" && e.message.includes("root"))!;
+    const ccErr = result.errors.find((e) => e.code === "invalidNodeType" && e.message.includes("codeComponent"))!;
+    expect(rootErr).toBeDefined();
+    expect(ccErr.message).toContain("component tools");
+  });
+
+  test("collects ALL errors across a batch, not just the first", () => {
+    const result = validateDocumentEdits(
+      [
+        { op: "update", nodeId: "view1", set: { style: { backgroundEnable: true } } }, // 0
+        { op: "update", nodeId: "view1", set: { style: { justifyContent: "nope" } } }, // 1
+        { op: "update", nodeId: "ghost", set: { name: "x" } }, // 2
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const indices = new Set(result.errors.map((e) => e.editIndex));
+    expect(indices).toEqual(new Set([0, 1, 2]));
+  });
+
+  test("empty batch is rejected", () => {
+    const result = validateDocumentEdits([], makeTree());
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    expect(result.errors[0]!.code).toBe("emptyBatch");
+  });
+});
+
+/** A tree that also carries a `library` + `codeComponent` under the root. */
+function makeTreeWithLibrary(): EditableDocumentNode {
+  const base = makeTree();
+  return {
+    ...base,
+    children: [
+      ...(base.children ?? []),
+      {
+        id: "lib1",
+        type: "library",
+        data: {},
+        children: [{ id: "cc1", type: "codeComponent", data: { path: "components/x.tsx" }, children: [] }],
+      },
+    ],
+  };
+}
+
+describe("validateDocumentEdits — protected targets", () => {
+  test("remove/move of the document root is rejected", () => {
+    const result = validateDocumentEdits(
+      [
+        { op: "remove", nodeId: "root1" },
+        { op: "move", nodeId: "root1", parentId: "screen1", index: 0 },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const removeErr = result.errors.find((e) => e.editIndex === 0)!;
+    const moveErr = result.errors.find((e) => e.editIndex === 1)!;
+    expect(removeErr.code).toBe("protectedTarget");
+    expect(removeErr.message).toContain("document root");
+    expect(moveErr.code).toBe("protectedTarget");
+  });
+
+  test("remove of a library / codeComponent routes to the component tools", () => {
+    const result = validateDocumentEdits(
+      [
+        { op: "remove", nodeId: "cc1" },
+        { op: "remove", nodeId: "lib1" },
+      ] as DocumentEdit[],
+      makeTreeWithLibrary(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const ccErr = result.errors.find((e) => e.nodeId === "cc1")!;
+    expect(ccErr.code).toBe("protectedTarget");
+    expect(ccErr.message).toContain("delete_component");
+    expect(ccErr.message).toContain("placeholder");
+    const libErr = result.errors.find((e) => e.nodeId === "lib1")!;
+    expect(libErr.code).toBe("protectedTarget");
+  });
+
+  test("replaceChildren of a codeComponent is rejected (target type gated)", () => {
+    const result = validateDocumentEdits(
+      [{ op: "replaceChildren", nodeId: "cc1", children: [] }] as DocumentEdit[],
+      makeTreeWithLibrary(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    expect(result.errors[0]!.code).toBe("protectedTarget");
+  });
+});
+
+describe("validateDocumentEdits — overlapping edits", () => {
+  test("two edits on the SAME node id are rejected", () => {
+    const result = validateDocumentEdits(
+      [
+        { op: "update", nodeId: "view1", set: { name: "X" } },
+        { op: "remove", nodeId: "view1" },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "overlappingEdits")!;
+    expect(err).toBeDefined();
+    expect(err.nodeId).toBe("view1");
+    expect(err.message).toContain("merge");
+  });
+
+  test("an edit inside a subtree another edit removes is rejected", () => {
+    // text1 is inside view1 → [remove view1, update text1] overlaps (text1 ⊂ view1).
+    const result = validateDocumentEdits(
+      [
+        { op: "remove", nodeId: "view1" },
+        { op: "update", nodeId: "text1", set: { text: "Y" } },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "overlappingEdits")!;
+    expect(err).toBeDefined();
+    expect(err.nodeId).toBe("text1");
+    expect(err.message).toContain("removes");
+  });
+
+  test("nested removes (B inside A) are rejected", () => {
+    // remove screen1 (which contains view1) + remove view1 → view1 ⊂ screen1.
+    const result = validateDocumentEdits(
+      [
+        { op: "remove", nodeId: "screen1" },
+        { op: "remove", nodeId: "view1" },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "overlappingEdits" && e.nodeId === "view1")!;
+    expect(err).toBeDefined();
+  });
+
+  test("two updates on DIFFERENT nodes are legal", () => {
+    const result = validateDocumentEdits(
+      [
+        { op: "update", nodeId: "view1", set: { name: "A" } },
+        { op: "update", nodeId: "text1", set: { text: "B" } },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+
+  test("removing A alone (its subtree comes along) is legal", () => {
+    const result = validateDocumentEdits(
+      [{ op: "remove", nodeId: "view1" }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+});
+
+describe("validateDocumentEdits — component identity", () => {
+  test("an identity-less component insert is rejected", () => {
+    const result = validateDocumentEdits(
+      [{ op: "insert", parentId: "view1", node: { type: "component" } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "missingComponentIdentity")!;
+    expect(err).toBeDefined();
+    expect(err.message).toContain("componentSlug");
+    expect(err.message).toContain("componentPath");
+    expect(err.message).toContain('componentSource: "local"');
+  });
+
+  test("a local component with a path but componentSource !== local is rejected", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "view1",
+          node: { type: "component", componentPath: "components/x.tsx" },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    expect(result.errors.some((e) => e.code === "missingComponentIdentity")).toBe(true);
+  });
+
+  test("a catalog component (componentSlug) is accepted", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "view1",
+          node: { type: "component", componentSlug: "hero-banner" },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+
+  test("a local component (componentPath + componentSource:local) is accepted", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "view1",
+          node: {
+            type: "component",
+            componentPath: "components/x.tsx",
+            componentSource: "local",
+          },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+
+  test("a builtin component (componentSource:builtin + registered slug) is accepted", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "view1",
+          node: {
+            type: "component",
+            componentSource: "builtin",
+            componentSlug: "sample-badge",
+          },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+
+  test("a builtin component with an unknown slug lists the valid builtins", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "view1",
+          node: {
+            type: "component",
+            componentSource: "builtin",
+            componentSlug: "does-not-exist",
+          },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "missingComponentIdentity")!;
+    expect(err).toBeDefined();
+    expect(err.message).toContain("Unknown builtin");
+    expect(err.message).toContain("does-not-exist");
+    // The valid-slug list is derived from the registry, not hand-listed.
+    expect(err.message).toContain("sample-badge");
+  });
+
+  test("a builtin component missing its slug is rejected", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "view1",
+          node: { type: "component", componentSource: "builtin" },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "missingComponentIdentity")!;
+    expect(err).toBeDefined();
+    expect(err.message).toContain("componentSlug");
+    expect(err.message).toContain("sample-badge");
+  });
+
+  test("a builtin carrying pinning/local fields (contradictory) is rejected", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "view1",
+          node: {
+            type: "component",
+            componentSource: "builtin",
+            componentSlug: "sample-badge",
+            componentPath: "components/x.tsx",
+            componentVersion: 3,
+            contentHash: "abc",
+          },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+    const err = result.errors.find((e) => e.code === "missingComponentIdentity")!;
+    expect(err).toBeDefined();
+    expect(err.message).toContain("UNPINNED");
+    expect(err.message).toContain("componentPath");
+    expect(err.message).toContain("componentVersion");
+    expect(err.message).toContain("contentHash");
+  });
+});
+
+describe("validateDocumentEdits — accepts a realistic valid batch", () => {
+  test("insert view with style, update text, move (non-overlapping)", () => {
+    // Note: text1 is updated (edit 1) then moved (edit 2) — DIFFERENT ops on the
+    // same node would overlap, so this batch updates text1 and moves the whole
+    // `view1` (its container), which are disjoint targets.
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "screen1",
+          node: {
+            type: "view",
+            name: "Card",
+            style: { paddingTop: 16, justifyContent: "center", backgroundColor: "rgba(0, 0, 0, 1)" },
+            children: [{ type: "text", text: "Buy now", style: { fontSize: 20 } }],
+          },
+        },
+        { op: "update", nodeId: "text1", set: { text: "Updated", style: { fontSize: 24 } } },
+        { op: "move", nodeId: "view1", parentId: "screen1", index: 0 },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+
+  test("replaceChildren with valid node inputs", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "replaceChildren",
+          nodeId: "view1",
+          children: [
+            { type: "text", text: "A" },
+            { type: "view", style: { gap: 8 } },
+          ],
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+  });
+
+  test("out-of-range index is clamped, not rejected", () => {
+    const result = validateDocumentEdits(
+      [{ op: "insert", parentId: "screen1", index: 999, node: { type: "view" } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    const inserted = result.edits[0]!;
+    // screen1 has one child → clamp to 1 (append)
+    expect(inserted.op === "insert" && inserted.index).toBe(1);
+  });
+});
+
+/** The `style` object of a normalized edit's `set` (update) or `node` (insert). */
+function styleOf(edit: DocumentEdit | undefined): Record<string, unknown> {
+  if (edit?.op === "update") return (edit.set as { style?: Record<string, unknown> }).style ?? {};
+  if (edit?.op === "insert") return (edit.node as { style?: Record<string, unknown> }).style ?? {};
+  return {};
+}
+
+describe("validateDocumentEdits — derived *Enabled flags", () => {
+  test("update setting backgroundColor on a view injects backgroundEnabled", () => {
+    const result = validateDocumentEdits(
+      [{ op: "update", nodeId: "view1", set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    expect(styleOf(result.edits[0]).backgroundEnabled).toBe(true);
+    expect(styleOf(result.edits[0]).backgroundColor).toBe("rgba(1, 2, 3, 1)");
+  });
+
+  test("insert of a view with a nested text derives each node's own group", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "insert",
+          parentId: "screen1",
+          node: {
+            type: "view",
+            style: { backgroundColor: "rgba(1, 2, 3, 1)" },
+            children: [{ type: "text", text: "Hi", style: { borderColor: "rgba(0, 0, 0, 1)" } }],
+          },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    const inserted = result.edits[0];
+    expect(inserted?.op === "insert").toBe(true);
+    if (inserted?.op !== "insert") return;
+    const parentStyle = (inserted.node as { style?: Record<string, unknown> }).style ?? {};
+    expect(parentStyle.backgroundEnabled).toBe(true);
+    // The text child gets its own group's flag (border), NOT the parent's.
+    const child = (inserted.node.children ?? [])[0] as { style?: Record<string, unknown> };
+    expect(child.style?.borderEnabled).toBe(true);
+    expect(child.style?.backgroundEnabled).toBeUndefined();
+  });
+
+  test("an explicit backgroundEnabled: false is not overridden", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "update",
+          nodeId: "view1",
+          set: { style: { backgroundColor: "rgba(1, 2, 3, 1)", backgroundEnabled: false } },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    expect(styleOf(result.edits[0]).backgroundEnabled).toBe(false);
+  });
+
+  test("a border RADIUS field alone does NOT inject borderEnabled", () => {
+    const result = validateDocumentEdits(
+      [{ op: "update", nodeId: "view1", set: { style: { borderTopLeftRadius: 12 } } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    expect(styleOf(result.edits[0])).not.toHaveProperty("borderEnabled");
+  });
+
+  test("per-type: text border, path fill, path stroke, screen background", () => {
+    const tree: EditableDocumentNode = {
+      id: "root1",
+      type: "root",
+      data: {},
+      children: [
+        {
+          id: "screen1",
+          type: "screen",
+          data: decodeData(ScreenNode, {}),
+          children: [
+            { id: "text1", type: "text", data: decodeData(TextNode, {}), children: [] },
+            {
+              id: "shape1",
+              type: "shape",
+              data: {},
+              children: [{ id: "path1", type: "path", data: {}, children: [] }],
+            },
+          ],
+        },
+      ],
+    };
+    const result = validateDocumentEdits(
+      [
+        { op: "update", nodeId: "text1", set: { style: { borderColor: "rgba(0, 0, 0, 1)" } } },
+        { op: "update", nodeId: "path1", set: { style: { fillColor: "rgba(1, 1, 1, 1)" } } },
+        { op: "update", nodeId: "screen1", set: { style: { backgroundType: "gradient" } } },
+      ] as DocumentEdit[],
+      tree,
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    expect(styleOf(result.edits[0]).borderEnabled).toBe(true);
+    expect(styleOf(result.edits[1]).fillEnabled).toBe(true);
+    expect(styleOf(result.edits[2]).backgroundEnabled).toBe(true);
+
+    // strokeWidth on a path → strokeEnabled (separate case for the stroke group).
+    const stroke = validateDocumentEdits(
+      [{ op: "update", nodeId: "path1", set: { style: { strokeWidth: 2 } } }] as DocumentEdit[],
+      tree,
+    );
+    expect(stroke.ok).toBe(true);
+    if (!stroke.ok) return;
+    expect(styleOf(stroke.edits[0]).strokeEnabled).toBe(true);
+  });
+
+  test("an update with no group keys is untouched (no flag injected)", () => {
+    const result = validateDocumentEdits(
+      [{ op: "update", nodeId: "view1", set: { style: { paddingTop: 8 } } }] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    expect(styleOf(result.edits[0])).toEqual({ paddingTop: 8 });
+  });
+
+  test("replaceChildren children get their group flags derived", () => {
+    const result = validateDocumentEdits(
+      [
+        {
+          op: "replaceChildren",
+          nodeId: "view1",
+          children: [{ type: "view", style: { backgroundColor: "rgba(1, 2, 3, 1)" } }],
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(result.ok).toBe(true);
+    if (!result.ok) return;
+    const edit = result.edits[0];
+    expect(edit?.op === "replaceChildren").toBe(true);
+    if (edit?.op !== "replaceChildren") return;
+    const child = edit.children[0] as { style?: Record<string, unknown> };
+    expect(child.style?.backgroundEnabled).toBe(true);
+  });
+
+  test("re-validating a normalized batch is stable (idempotent)", () => {
+    const first = validateDocumentEdits(
+      [
+        { op: "update", nodeId: "view1", set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } } },
+        {
+          op: "insert",
+          parentId: "screen1",
+          node: {
+            type: "view",
+            style: { borderColor: "rgba(0, 0, 0, 1)" },
+            children: [{ type: "text", text: "Hi", style: { shadowColor: "rgba(0, 0, 0, 1)" } }],
+          },
+        },
+      ] as DocumentEdit[],
+      makeTree(),
+    );
+    expect(first.ok).toBe(true);
+    if (!first.ok) return;
+    const second = validateDocumentEdits(first.edits as DocumentEdit[], makeTree());
+    expect(second.ok).toBe(true);
+    if (!second.ok) return;
+    expect(second.edits).toEqual(first.edits);
+  });
+});
diff --git a/packages/ai-shared/src/document-edits.ts b/packages/ai-shared/src/document-edits.ts
new file mode 100644
index 000000000..568c2c3b4
--- /dev/null
+++ b/packages/ai-shared/src/document-edits.ts
@@ -0,0 +1,840 @@
+import {
+  ALLOWED_CHILDREN_BY_NODE_TYPE,
+  canBeChildOf,
+  isNodeType,
+  type NodeType,
+} from "@voidhash/mimic-schema";
+import { getBuiltinComponent, listBuiltinComponents } from "@voidhash/paywall-builtins";
+
+import {
+  acceptanceOf,
+  expectedTypeLabel,
+  nodeDataFieldSchema,
+  nodeDataFields,
+  nodeStyleFields,
+  nodeStyleSchema,
+  type SerializedSchema,
+} from "./mimic-introspection.ts";
+import {
+  deriveEnabledFlagsForNodeInput,
+  deriveEnabledFlagsForSet,
+} from "./style-group-flags.ts";
+import type { DocumentEdit, NodeInput } from "./surfaces.ts";
+
+/**
+ * The minimal tree the {@link validateDocumentEdits} validator reads. Both the
+ * browser (a decoded designer snapshot) and the backend (a decoded document
+ * tree) adapt their node shape to this: an id, a node type, the logical `data`
+ * (envelope-unwrapping is not required — the validator only reads scalar/enum
+ * leaves it addresses), and children. `data` is optional because containment /
+ * move / remove checks don't need it.
+ */
+export interface EditableDocumentNode {
+  readonly id: string;
+  readonly type: string;
+  readonly data?: Record<string, unknown>;
+  readonly children?: readonly EditableDocumentNode[];
+}
+
+/**
+ * A structured validation error naming exactly what is wrong and — where the
+ * schema affords it — the legal alternatives. These messages are the product:
+ * they are what the model reads to correct itself, so they are always derived
+ * from the mimic schema, never hand-listed.
+ */
+export interface DocumentEditError {
+  /** Index of the offending edit within the submitted batch. */
+  readonly editIndex: number;
+  /** Coarse failure category, for programmatic handling by the executor. */
+  readonly code:
+    | "unknownNode"
+    | "unknownParent"
+    | "illegalChild"
+    | "moveCycle"
+    | "invalidNodeType"
+    | "unknownField"
+    | "invalidValue"
+    | "indexOutOfBounds"
+    | "emptyBatch"
+    | "protectedTarget"
+    | "overlappingEdits"
+    | "missingComponentIdentity";
+  /** The mimic node id / parent id / node type the error is about, when applicable. */
+  readonly nodeId?: string;
+  /** The dotted field path the error is about (e.g. `style.backgroundColor`), when applicable. */
+  readonly field?: string;
+  /** The full, self-contained, model-facing message. */
+  readonly message: string;
+}
+
+/** One normalized edit with any minted/derived positions resolved (index clamped). */
+export type NormalizedDocumentEdit = DocumentEdit;
+
+/** The outcome of validating a batch: either all normalized ops, or every error found. */
+export type ValidateEditsResult =
+  | { readonly ok: true; readonly edits: readonly NormalizedDocumentEdit[] }
+  | { readonly ok: false; readonly errors: readonly DocumentEditError[] };
+
+/**
+ * Validate an atomic batch of document edits against the current tree, deriving
+ * every legality rule from the live mimic schema. ALL errors are collected (not
+ * just the first) so the model can fix a whole batch in one round-trip.
+ *
+ * Checks, per edit:
+ * - `nodeId` / `parentId` must resolve to an existing node (error names the id);
+ * - inserted / moved node types must be legal children of the target parent per
+ *   {@link canBeChildOf} (error names the parent type and the allowed child set);
+ * - a `move` may not target its own subtree (cycle), nor the document root;
+ * - `remove` / `move` / `replaceChildren` may not target a PROTECTED node — the
+ *   document root or a `library` / `codeComponent` definition (owned by the
+ *   component tools); the error routes to `delete_component`;
+ * - a batch may not contain OVERLAPPING edits — two edits on the same node, or an
+ *   edit whose target lies inside a subtree another edit removes / replaces (undo
+ *   would be ambiguous); the error tells the model to merge or split the batch;
+ * - an inserted `component` node must carry identity (`componentSlug` for a
+ *   catalog component; `componentPath` + `componentSource: "local"` for a local
+ *   code component; `componentSource: "builtin"` + a registered builtin
+ *   `componentSlug` for a first-party renderer builtin — builtins are UNPINNED,
+ *   so they may not also carry `componentPath`/`componentVersion`/`contentHash`),
+ *   else it is a dead placeholder;
+ * - a `NodeInput.type` must be a real editable node type — `root` may never be
+ *   inserted, and `library` / `codeComponent` are managed by the component tools,
+ *   not `edit_document`;
+ * - every field of an `update.set` / `NodeInput` is validated against the node
+ *   type's mimic schema: unknown fields yield a did-you-mean suggestion + the
+ *   allowed field list, bad enum values name the allowed values, and wrong scalar
+ *   families name the expected type;
+ * - `index` is clamped into `[0, childCount]` (see {@link clampIndex}) — never an
+ *   error on its own.
+ *
+ * Index normalization policy: out-of-range indices are CLAMPED, not rejected, so
+ * the model's intent ("put it at the end") survives an off-by-one. A negative
+ * index clamps to 0; an index past the child count clamps to the count (append).
+ *
+ * Style-flag normalization: setting ANY field of a renderer-gated style group
+ * (background / border / shadow / path fill / stroke) auto-injects that group's
+ * `<group>Enabled: true` flag on the pushed `insert` node, `update.set`, and
+ * `replaceChildren` children — UNLESS the edit sets the flag explicitly (an
+ * explicit `false` keeps the group hidden). This spares the model the
+ * designer-only toggle while keeping "disable" expressible (see
+ * {@link deriveEnabledFlagsForSet}). It is idempotent: re-validating a normalized
+ * batch injects nothing further.
+ *
+ * @returns `{ ok: true, edits }` with the normalized ops, or `{ ok: false, errors }`
+ *   listing every problem found.
+ */
+export function validateDocumentEdits(
+  edits: readonly DocumentEdit[],
+  tree: EditableDocumentNode,
+): ValidateEditsResult {
+  const errors: DocumentEditError[] = [];
+  const byId = indexById(tree);
+
+  if (edits.length === 0) {
+    return {
+      ok: false,
+      errors: [
+        {
+          editIndex: 0,
+          code: "emptyBatch",
+          message: "edit_document was called with an empty `edits` array — provide at least one op.",
+        },
+      ],
+    };
+  }
+
+  const normalized: NormalizedDocumentEdit[] = [];
+
+  edits.forEach((edit, editIndex) => {
+    switch (edit.op) {
+      case "insert": {
+        const parent = requireNode(byId, edit.parentId, editIndex, "unknownParent", errors);
+        if (parent) {
+          const normalizedIndex = clampIndex(edit.index, parent.children?.length ?? 0);
+          validateChildType(edit.node.type, parent.type, editIndex, errors);
+          validateNodeInput(edit.node, editIndex, `node`, errors);
+          normalized.push({
+            ...edit,
+            index: normalizedIndex,
+            node: deriveEnabledFlagsForNodeInput(edit.node),
+          });
+        }
+        break;
+      }
+      case "update": {
+        const node = requireNode(byId, edit.nodeId, editIndex, "unknownNode", errors);
+        if (node) {
+          validateSet(node.type, edit.set, editIndex, errors);
+          const set = deriveEnabledFlagsForSet(node.type, edit.set);
+          normalized.push(set === edit.set ? edit : { ...edit, set });
+        }
+        break;
+      }
+      case "move": {
+        const node = requireNode(byId, edit.nodeId, editIndex, "unknownNode", errors);
+        const parent = requireNode(byId, edit.parentId, editIndex, "unknownParent", errors);
+        if (node && parent) {
+          if (validateMutableTarget(node, tree.id, "move", editIndex, errors)) {
+            validateChildType(node.type, parent.type, editIndex, errors);
+            if (isSelfOrDescendant(node, edit.parentId)) {
+              errors.push({
+                editIndex,
+                code: "moveCycle",
+                nodeId: edit.nodeId,
+                message: `Cannot move node \`${edit.nodeId}\` into itself or its own descendant \`${edit.parentId}\` — that would create a cycle.`,
+              });
+            } else {
+              const normalizedIndex = clampIndex(edit.index, parent.children?.length ?? 0);
+              normalized.push({ ...edit, index: normalizedIndex });
+            }
+          }
+        }
+        break;
+      }
+      case "remove": {
+        const node = requireNode(byId, edit.nodeId, editIndex, "unknownNode", errors);
+        if (node && validateMutableTarget(node, tree.id, "remove", editIndex, errors)) {
+          normalized.push(edit);
+        }
+        break;
+      }
+      case "replaceChildren": {
+        const node = requireNode(byId, edit.nodeId, editIndex, "unknownNode", errors);
+        if (node && validateMutableTarget(node, tree.id, "replaceChildren", editIndex, errors)) {
+          edit.children.forEach((child, childIdx) => {
+            validateChildType(child.type, node.type, editIndex, errors);
+            validateNodeInput(child, editIndex, `children[${childIdx}]`, errors);
+          });
+          normalized.push({
+            ...edit,
+            children: edit.children.map(deriveEnabledFlagsForNodeInput),
+          });
+        }
+        break;
+      }
+    }
+  });
+
+  validateNonOverlapping(edits, byId, errors);
+
+  return errors.length > 0 ? { ok: false, errors } : { ok: true, edits: normalized };
+}
+
+// ---------------------------------------------------------------------------
+// Protected-target + batch-overlap checks
+// ---------------------------------------------------------------------------
+
+/**
+ * The node types `edit_document` may never structurally mutate (remove / move /
+ * replaceChildren): the singleton `root`/`library` scaffolding and `codeComponent`
+ * definitions, which the component tools own. A `move` additionally cannot target
+ * the root. Returns `true` when the target is mutable (the caller may continue).
+ */
+function validateMutableTarget(
+  node: EditableDocumentNode,
+  rootId: string,
+  op: "move" | "remove" | "replaceChildren",
+  editIndex: number,
+  errors: DocumentEditError[],
+): boolean {
+  if (node.id === rootId) {
+    errors.push({
+      editIndex,
+      code: "protectedTarget",
+      nodeId: node.id,
+      message: `Cannot ${op} the document root \`${node.id}\` — it is the unique top-level node and is not mutable.`,
+    });
+    return false;
+  }
+  if (node.type === "library" || node.type === "codeComponent") {
+    errors.push({
+      editIndex,
+      code: "protectedTarget",
+      nodeId: node.id,
+      message: `Cannot ${op} the \`${node.type}\` node \`${node.id}\` — component definitions are managed by the component tools. Use delete_component to remove a component definition (its instances degrade to placeholders), not edit_document.`,
+    });
+    return false;
+  }
+  return true;
+}
+
+/**
+ * The node id an edit STRUCTURALLY targets (the node an op reads/mutates by
+ * identity): `nodeId` for update/move/remove/replaceChildren, `null` for `insert`
+ * (an insert creates fresh nodes and only reads its parent, so it never overlaps).
+ */
+function targetOf(edit: DocumentEdit): string | null {
+  return edit.op === "insert" ? null : edit.nodeId;
+}
+
+/**
+ * Reject a batch whose edits OVERLAP against the committed tree, which would make
+ * the atomic undo ambiguous (a removed subtree already includes its descendants):
+ * (a) two edits addressing the SAME node id; (b) an edit whose target node lies
+ * inside a subtree another edit removes or replaces wholesale. Both are pushed as
+ * `overlappingEdits` errors telling the model to merge or split the batch.
+ */
+function validateNonOverlapping(
+  edits: readonly DocumentEdit[],
+  byId: Map<string, EditableDocumentNode>,
+  errors: DocumentEditError[],
+): void {
+  // (a) the same node id targeted more than once.
+  const seen = new Map<string, number>();
+  edits.forEach((edit, editIndex) => {
+    const target = targetOf(edit);
+    if (target === null) return;
+    const firstIndex = seen.get(target);
+    if (firstIndex === undefined) {
+      seen.set(target, editIndex);
+      return;
+    }
+    errors.push({
+      editIndex,
+      code: "overlappingEdits",
+      nodeId: target,
+      message: `Edit ${editIndex} and edit ${firstIndex} both target node \`${target}\`. Overlapping edits on one node make the atomic undo ambiguous — merge them into one edit, or split them into separate edit_document calls.`,
+    });
+  });
+
+  // (b) a target inside a subtree another edit removes / replaces wholesale.
+  const wholesale = edits
+    .map((edit, editIndex) => ({ edit, editIndex }))
+    .filter(({ edit }) => edit.op === "remove" || edit.op === "replaceChildren");
+
+  edits.forEach((edit, editIndex) => {
+    const target = targetOf(edit);
+    if (target === null) return;
+    for (const { edit: other, editIndex: otherIndex } of wholesale) {
+      if (otherIndex === editIndex) continue;
+      const otherTarget = targetOf(other);
+      if (otherTarget === null || otherTarget === target) continue;
+      const otherNode = byId.get(otherTarget);
+      // `replaceChildren` drops the DESCENDANTS of its target (its children), while
+      // `remove` drops the target itself too — but a target equal to the removed
+      // node is already the same-id case above, so both reduce to "is `target` a
+      // proper descendant of `otherTarget`".
+      if (otherNode && isProperDescendant(otherNode, target)) {
+        errors.push({
+          editIndex,
+          code: "overlappingEdits",
+          nodeId: target,
+          message: `Edit ${editIndex} targets node \`${target}\`, which is inside the subtree edit ${otherIndex} ${
+            other.op === "remove" ? "removes" : "replaces"
+          } (\`${otherTarget}\`). Removal already includes descendants, so this overlap is redundant and makes undo ambiguous — drop the inner edit, or split them into separate edit_document calls.`,
+        });
+      }
+    }
+  });
+}
+
+/** Whether `candidateId` is a PROPER descendant of `node` (excludes `node` itself). */
+function isProperDescendant(node: EditableDocumentNode, candidateId: string): boolean {
+  for (const child of node.children ?? []) {
+    if (child.id === candidateId || isProperDescendant(child, candidateId)) return true;
+  }
+  return false;
+}
+
+// ---------------------------------------------------------------------------
+// Node lookup + structure checks
+// ---------------------------------------------------------------------------
+
+/** Build an id → node map from the tree (depth-first). */
+function indexById(root: EditableDocumentNode): Map<string, EditableDocumentNode> {
+  const map = new Map<string, EditableDocumentNode>();
+  const walk = (node: EditableDocumentNode) => {
+    map.set(node.id, node);
+    for (const child of node.children ?? []) walk(child);
+  };
+  walk(root);
+  return map;
+}
+
+/** Resolve a node by id, pushing a structured error (and returning `null`) if absent. */
+function requireNode(
+  byId: Map<string, EditableDocumentNode>,
+  id: string,
+  editIndex: number,
+  code: "unknownNode" | "unknownParent",
+  errors: DocumentEditError[],
+): EditableDocumentNode | null {
+  const node = byId.get(id);
+  if (node) return node;
+  errors.push({
+    editIndex,
+    code,
+    nodeId: id,
+    message: `${code === "unknownParent" ? "Parent node" : "Node"} \`${id}\` does not exist in the document. Node ids come from get_document or the current selection.`,
+  });
+  return null;
+}
+
+/** Whether `candidateParentId` is `node` itself or lies within `node`'s subtree. */
+function isSelfOrDescendant(node: EditableDocumentNode, candidateParentId: string): boolean {
+  if (node.id === candidateParentId) return true;
+  for (const child of node.children ?? []) {
+    if (isSelfOrDescendant(child, candidateParentId)) return true;
+  }
+  return false;
+}
+
+/** Clamp an index into `[0, childCount]` (append when omitted / past the end). */
+function clampIndex(index: number | undefined, childCount: number): number {
+  if (index === undefined) return childCount;
+  if (index < 0) return 0;
+  return Math.min(index, childCount);
+}
+
+/**
+ * Validate a child node type against a parent type: the parent must be a known
+ * node type and legally contain the child per {@link canBeChildOf}. The error
+ * names the parent type and its full allowed child set.
+ */
+function validateChildType(
+  childType: string,
+  parentType: string,
+  editIndex: number,
+  errors: DocumentEditError[],
+): void {
+  if (canBeChildOf(childType, parentType)) return;
+  const allowed = isNodeType(parentType)
+    ? ALLOWED_CHILDREN_BY_NODE_TYPE[parentType as NodeType]
+    : [];
+  errors.push({
+    editIndex,
+    code: "illegalChild",
+    nodeId: parentType,
+    message:
+      allowed.length > 0
+        ? `Node type \`${childType}\` cannot be a child of \`${parentType}\`. Allowed children of \`${parentType}\`: [${allowed.join(", ")}].`
+        : `Node type \`${parentType}\` cannot contain children (attempted to add \`${childType}\`).`,
+  });
+}
+
+// ---------------------------------------------------------------------------
+// Node type + field validation
+// ---------------------------------------------------------------------------
+
+/** Node types the AI may create via `edit_document` (root/library/codeComponent are excluded). */
+const INSERTABLE_NODE_TYPES: readonly NodeType[] = ["screen", "view", "scrollView", "text", "shape", "path", "component"];
+
+/**
+ * Validate a `NodeInput` (from `insert` / `replaceChildren`): its `type` must be
+ * an insertable node type, and each of its remaining fields must be a legal data
+ * field for that type with an accepted value. Children are validated by the
+ * caller against their own parent, so this recurses into them too.
+ */
+function validateNodeInput(
+  node: NodeInput,
+  editIndex: number,
+  path: string,
+  errors: DocumentEditError[],
+): void {
+  if (!isInsertableNodeType(node.type)) {
+    errors.push({
+      editIndex,
+      code: "invalidNodeType",
+      field: `${path}.type`,
+      message: invalidNodeTypeMessage(node.type),
+    });
+    return;
+  }
+  const type = node.type as NodeType;
+
+  // A `component` node must carry a concrete identity, else it inserts a dead
+  // placeholder instance (all identity fields default to sentinels).
+  if (type === "component") {
+    validateComponentIdentity(node, editIndex, path, errors);
+  }
+
+  // `name` and `children` are structural; everything else is node data validated
+  // against the node type's schema (style is nested).
+  for (const [key, value] of Object.entries(node)) {
+    if (key === "type" || key === "name" || key === "children") continue;
+    validateDataField(type, key, value, editIndex, `${path}.${key}`, errors);
+  }
+
+  for (const child of node.children ?? []) {
+    // Child's own type legality against THIS node is checked by the caller path
+    // (validateChildType) when it descends; here we validate the child's fields.
+    if (isInsertableNodeType(child.type)) {
+      validateNodeInput(child, editIndex, `${path}.children`, errors);
+    }
+  }
+}
+
+/**
+ * A non-empty string field of a node input, else `undefined` (trimmed empty
+ * strings and non-strings count as absent).
+ */
+function nonEmptyString(node: NodeInput, key: string): string | undefined {
+  const value = node[key];
+  return typeof value === "string" && value.trim().length > 0 ? value : undefined;
+}
+
+/**
+ * Validate that an inserted `component` node names WHICH component it instances,
+ * across the three identity shapes: a non-empty `componentSlug` (a catalog
+ * component); a non-empty `componentPath` with `componentSource: "local"` (an
+ * in-document code component); or `componentSource: "builtin"` with a registered
+ * builtin `componentSlug` (a first-party renderer builtin). Without one, every
+ * identity field defaults to a sentinel and the instance renders a dead
+ * placeholder — so the error names the valid shapes.
+ *
+ * Builtins are UNPINNED and pathless: a builtin instance may NOT also carry
+ * `componentPath` / `componentVersion` / `contentHash` (those are catalog/local
+ * pinning fields), and its slug must resolve in {@link getBuiltinComponent}, else
+ * the error lists the valid builtin slugs.
+ */
+function validateComponentIdentity(
+  node: NodeInput,
+  editIndex: number,
+  path: string,
+  errors: DocumentEditError[],
+): void {
+  const slug = nonEmptyString(node, "componentSlug");
+  const componentPath = nonEmptyString(node, "componentPath");
+  const source = node["componentSource"];
+
+  if (source === "builtin") {
+    validateBuiltinIdentity(node, slug, componentPath, editIndex, path, errors);
+    return;
+  }
+
+  const local = source === "local";
+  if (slug !== undefined || (componentPath !== undefined && local)) {
+    return;
+  }
+  errors.push({
+    editIndex,
+    code: "missingComponentIdentity",
+    field: `${path}`,
+    message:
+      "A `component` node must name which component to place. Provide `componentSlug` (a catalog component from get_components), OR both `componentPath` (a local `components/<name>.tsx`) and `componentSource: \"local\"`, OR `componentSource: \"builtin\"` with a builtin `componentSlug` from get_components. Without one it inserts a dead placeholder.",
+  });
+}
+
+/**
+ * Validate a `componentSource: "builtin"` instance: it must name a `componentSlug`
+ * that resolves in the builtin registry, and — because builtins are UNPINNED and
+ * ship with the renderer — must NOT carry the catalog/local pinning fields
+ * (`componentPath` / `componentVersion` / `contentHash`). Errors list the valid
+ * builtin slugs so the model can self-correct.
+ */
+function validateBuiltinIdentity(
+  node: NodeInput,
+  slug: string | undefined,
+  componentPath: string | undefined,
+  editIndex: number,
+  path: string,
+  errors: DocumentEditError[],
+): void {
+  if (slug === undefined) {
+    errors.push({
+      editIndex,
+      code: "missingComponentIdentity",
+      field: `${path}`,
+      message: `A builtin \`component\` node (\`componentSource: "builtin"\`) must name its \`componentSlug\`. Valid builtins: [${builtinSlugList()}].`,
+    });
+    return;
+  }
+  if (getBuiltinComponent(slug) === undefined) {
+    errors.push({
+      editIndex,
+      code: "missingComponentIdentity",
+      field: `${path}`,
+      message: `Unknown builtin \`componentSlug\` \`${slug}\`. Valid builtins: [${builtinSlugList()}].`,
+    });
+    return;
+  }
+  const version = node["componentVersion"];
+  const offenders: string[] = [];
+  if (componentPath !== undefined) offenders.push("componentPath");
+  if (typeof version === "number" && version !== 0) offenders.push("componentVersion");
+  if (nonEmptyString(node, "contentHash") !== undefined) offenders.push("contentHash");
+  if (offenders.length > 0) {
+    errors.push({
+      editIndex,
+      code: "missingComponentIdentity",
+      field: `${path}`,
+      message: `A builtin \`component\` node is UNPINNED and pathless — remove [${offenders.join(", ")}]. A builtin is resolved by \`componentSlug\` alone; it carries no \`componentPath\`/\`componentVersion\`/\`contentHash\`.`,
+    });
+  }
+}
+
+/** The comma-joined list of registered builtin slugs, for identity error messages. */
+function builtinSlugList(): string {
+  return listBuiltinComponents()
+    .map((builtin) => builtin.slug)
+    .join(", ");
+}
+
+/**
+ * Validate an `update.set` partial: each top-level key must be a legal data field
+ * of the node type, and `style.*` sub-keys must be legal style fields with
+ * accepted values. Component prop/action shapes are validated loosely (their
+ * inner binding shape is enforced downstream at apply time).
+ */
+function validateSet(
+  type: string,
+  set: Record<string, unknown>,
+  editIndex: number,
+  errors: DocumentEditError[],
+): void {
+  if (!isNodeType(type)) return;
+  const nodeType = type as NodeType;
+  for (const [key, value] of Object.entries(set)) {
+    if (key === "name") continue;
+    validateDataField(nodeType, key, value, editIndex, key, errors);
+  }
+}
+
+/**
+ * Validate one data field of a node type against its schema. `style` recurses
+ * into per-style-field validation; other scalar/enum data fields (`text`, `d`,
+ * …) are validated against their own serialized schema. Unknown fields yield a
+ * did-you-mean suggestion + the allowed field list.
+ */
+function validateDataField(
+  type: NodeType,
+  key: string,
+  value: unknown,
+  editIndex: number,
+  path: string,
+  errors: DocumentEditError[],
+): void {
+  const allowedFields = nodeDataFields(type);
+  if (!allowedFields.includes(key)) {
+    errors.push(unknownFieldError(editIndex, path, key, type, allowedFields, "data field"));
+    return;
+  }
+
+  if (key === "style") {
+    validateStyle(type, value, editIndex, path, errors);
+    return;
+  }
+
+  // Component props/actionBindings are arrays of structured bindings; their inner
+  // shape is enforced at apply time — accept the array shape here.
+  if (key === "props" || key === "actionBindings") return;
+
+  const schema = nodeDataFieldSchema(type, key);
+  if (schema) validateScalar(schema, value, editIndex, path, errors);
+}
+
+/** Validate a `style` object: every key must be a legal style field with an accepted value. */
+function validateStyle(
+  type: NodeType,
+  value: unknown,
+  editIndex: number,
+  path: string,
+  errors: DocumentEditError[],
+): void {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    errors.push({
+      editIndex,
+      code: "invalidValue",
+      field: path,
+      message: `\`${path}\` must be an object of style fields, got ${describeValue(value)}.`,
+    });
+    return;
+  }
+  const styleSchema = nodeStyleSchema(type);
+  const allowedStyleFields = nodeStyleFields(type);
+  if (!styleSchema) {
+    errors.push({
+      editIndex,
+      code: "unknownField",
+      field: path,
+      message: `Node type \`${type}\` has no \`style\` — remove it from the update.`,
+    });
+    return;
+  }
+  for (const [styleKey, styleValue] of Object.entries(value as Record<string, unknown>)) {
+    const fieldSchema = styleSchema.fields[styleKey];
+    if (!fieldSchema) {
+      errors.push(
+        unknownFieldError(
+          editIndex,
+          `${path}.${styleKey}`,
+          styleKey,
+          type,
+          allowedStyleFields,
+          "style field",
+        ),
+      );
+      continue;
+    }
+    validateScalar(fieldSchema, styleValue, editIndex, `${path}.${styleKey}`, errors);
+  }
+}
+
+/**
+ * Validate a scalar/enum value against a serialized schema, deriving the error
+ * from the schema: a value outside a closed enum names the allowed values; a
+ * wrong scalar family names the expected type. Structured fields (object/array)
+ * are accepted as-is (their inner shape is not re-validated here — the model
+ * rarely writes them, and apply-time validation is authoritative).
+ */
+function validateScalar(
+  schema: SerializedSchema,
+  value: unknown,
+  editIndex: number,
+  path: string,
+  errors: DocumentEditError[],
+): void {
+  const acc = acceptanceOf(schema);
+  if (acc.isStructured) return;
+
+  // Closed enum: value must be one of the literals.
+  const isClosedEnum =
+    acc.literals.length > 0 && !acc.acceptsNumber && !acc.acceptsBoolean && !acc.acceptsString;
+  if (isClosedEnum) {
+    if (!acc.literals.includes(value as string | number | boolean)) {
+      errors.push({
+        editIndex,
+        code: "invalidValue",
+        field: path,
+        message: `Invalid value ${describeValue(value)} for \`${path}\`. Allowed values: [${acc.literals.map((l) => JSON.stringify(l)).join(", ")}].`,
+      });
+    }
+    return;
+  }
+
+  // Open union / scalar: the value must be in one of the accepted families (a
+  // literal counts as its own value; number/boolean/string per acceptance).
+  const family = valueFamily(value);
+  const familyOk =
+    (family === "number" && acc.acceptsNumber) ||
+    (family === "boolean" && acc.acceptsBoolean) ||
+    (family === "string" && acc.acceptsString) ||
+    acc.literals.includes(value as string | number | boolean);
+  if (!familyOk) {
+    errors.push({
+      editIndex,
+      code: "invalidValue",
+      field: path,
+      message: `Expected ${expectedTypeLabel(schema)}${acc.literals.length ? ` (or one of [${acc.literals.map((l) => JSON.stringify(l)).join(", ")}])` : ""} for \`${path}\`, got ${describeValue(value)}.`,
+    });
+    return;
+  }
+
+  // Regex-constrained strings (e.g. RGBA colors): the value must match.
+  if (family === "string" && acc.regexes.length > 0) {
+    const str = value as string;
+    const matches = acc.regexes.some((r) => safeRegexTest(r.pattern, r.flags, str));
+    if (!matches) {
+      errors.push({
+        editIndex,
+        code: "invalidValue",
+        field: path,
+        message: `String value ${JSON.stringify(str)} for \`${path}\` does not match the required format (${acc.regexes.map((r) => r.pattern).join(" | ")}).`,
+      });
+    }
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Error helpers
+// ---------------------------------------------------------------------------
+
+function unknownFieldError(
+  editIndex: number,
+  path: string,
+  key: string,
+  type: NodeType,
+  allowed: readonly string[],
+  kindLabel: string,
+): DocumentEditError {
+  const suggestion = nearestField(key, allowed);
+  const didYouMean = suggestion ? ` did you mean \`${suggestion}\`?` : "";
+  return {
+    editIndex,
+    code: "unknownField",
+    field: path,
+    message: `Unknown ${kindLabel} \`${key}\` on \`${type}\`;${didYouMean} allowed: [${allowed.join(", ")}].`,
+  };
+}
+
+function invalidNodeTypeMessage(type: string): string {
+  if (type === "root") {
+    return `Cannot insert a \`root\` node — the document root already exists and is unique.`;
+  }
+  if (type === "library" || type === "codeComponent") {
+    return `Node type \`${type}\` is managed by the component tools (write_component / rename_component / delete_component), not edit_document.`;
+  }
+  const suggestion = nearestField(type, INSERTABLE_NODE_TYPES);
+  const didYouMean = suggestion ? ` Did you mean \`${suggestion}\`?` : "";
+  return `Unknown node type \`${type}\`.${didYouMean} Insertable types: [${INSERTABLE_NODE_TYPES.join(", ")}].`;
+}
+
+function isInsertableNodeType(type: string): boolean {
+  return INSERTABLE_NODE_TYPES.includes(type as NodeType);
+}
+
+/** The scalar family of a runtime value, for family-mismatch errors. */
+function valueFamily(value: unknown): "number" | "boolean" | "string" | "other" {
+  if (typeof value === "number" && Number.isFinite(value)) return "number";
+  if (typeof value === "boolean") return "boolean";
+  if (typeof value === "string") return "string";
+  return "other";
+}
+
+/** A short human description of a value for error messages. */
+function describeValue(value: unknown): string {
+  if (value === null) return "null";
+  if (value === undefined) return "undefined";
+  if (typeof value === "string") return JSON.stringify(value);
+  if (typeof value === "object") return Array.isArray(value) ? "an array" : "an object";
+  return String(value);
+}
+
+/** Test a serialized regex safely; a malformed pattern rejects rather than throws. */
+function safeRegexTest(pattern: string, flags: string | undefined, value: string): boolean {
+  try {
+    return new RegExp(pattern, flags).test(value);
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * The nearest candidate to `key` by Levenshtein distance, or `undefined` when no
+ * candidate is close enough (distance ≤ 3 and < half the key length) to be a
+ * useful "did you mean". Powers the did-you-mean suggestions.
+ */
+function nearestField(key: string, candidates: readonly string[]): string | undefined {
+  let best: string | undefined;
+  let bestDistance = Infinity;
+  for (const candidate of candidates) {
+    const distance = levenshtein(key.toLowerCase(), candidate.toLowerCase());
+    if (distance < bestDistance) {
+      bestDistance = distance;
+      best = candidate;
+    }
+  }
+  const threshold = Math.min(3, Math.floor(key.length / 2) + 1);
+  return best !== undefined && bestDistance <= threshold ? best : undefined;
+}
+
+/** Classic iterative Levenshtein edit distance. */
+function levenshtein(a: string, b: string): number {
+  const rows = a.length + 1;
+  const cols = b.length + 1;
+  const dist: number[] = new Array(cols);
+  for (let j = 0; j < cols; j++) dist[j] = j;
+  for (let i = 1; i < rows; i++) {
+    let prev = dist[0]!;
+    dist[0] = i;
+    for (let j = 1; j < cols; j++) {
+      const temp = dist[j]!;
+      dist[j] =
+        a[i - 1] === b[j - 1]
+          ? prev
+          : 1 + Math.min(prev, dist[j]!, dist[j - 1]!);
+      prev = temp;
+    }
+  }
+  return dist[cols - 1]!;
+}
diff --git a/packages/ai-shared/src/document-serializer.test.ts b/packages/ai-shared/src/document-serializer.test.ts
new file mode 100644
index 000000000..2bd2bbc37
--- /dev/null
+++ b/packages/ai-shared/src/document-serializer.test.ts
@@ -0,0 +1,174 @@
+import { ScreenNode, TextNode, ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vitest";
+
+import {
+  serializeDocument,
+  type CleanedDocumentNode,
+  type CleanedDocumentStub,
+  type SnapshotDocumentNode,
+} from "./document-serializer.ts";
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function decodeData(prim: any, input: unknown): Record<string, unknown> {
+  return prim.data.decode(prim.data.encode(input)) as Record<string, unknown>;
+}
+
+/** A tree whose nodes carry CRDT `pos`/`parentId` alongside decoded `data`. */
+function makeTree(): SnapshotDocumentNode {
+  return {
+    id: "root1",
+    type: "root",
+    data: {},
+    children: [
+      {
+        id: "screen1",
+        type: "screen",
+        // one authored deviation: paddingTop
+        data: decodeData(ScreenNode, { style: { paddingTop: 20 } }),
+        children: [
+          {
+            id: "view1",
+            type: "view",
+            data: decodeData(ViewNode, {
+              style: { backgroundColor: "rgba(1, 2, 3, 1)", backgroundEnabled: true },
+            }),
+            children: [
+              {
+                id: "text1",
+                type: "text",
+                data: decodeData(TextNode, { text: "Hello" }),
+                children: [],
+              },
+            ],
+          },
+        ],
+      },
+    ],
+  };
+}
+
+function asNode(v: unknown): CleanedDocumentNode {
+  return v as CleanedDocumentNode;
+}
+
+describe("serializeDocument", () => {
+  test("strips schema-default fields, keeping only authored deviations", () => {
+    const screen = asNode(serializeDocument([makeTree()])).children![0] as CleanedDocumentNode;
+    // screen only deviated in paddingTop
+    expect(screen.style).toEqual({ paddingTop: 20 });
+    const view = screen.children![0] as CleanedDocumentNode;
+    expect(view.style).toEqual({ backgroundColor: "rgba(1, 2, 3, 1)", backgroundEnabled: true });
+  });
+
+  test("keeps id, type, name, and authored text", () => {
+    const view = (asNode(serializeDocument([makeTree()])).children![0] as CleanedDocumentNode)
+      .children![0] as CleanedDocumentNode;
+    const text = view.children![0] as CleanedDocumentNode;
+    expect(text.id).toBe("text1");
+    expect(text.type).toBe("text");
+    expect(text.name).toBe("Text");
+    expect(text.text).toBe("Hello");
+  });
+
+  test("omits CRDT internals (pos, parentId)", () => {
+    const withPos: SnapshotDocumentNode = {
+      id: "n",
+      type: "text",
+      // extra CRDT fields the serializer must drop
+      ...({ pos: "aXYZ", parentId: "p" } as object),
+      data: decodeData(TextNode, { text: "Hi" }),
+      children: [],
+    };
+    const cleaned = asNode(serializeDocument([withPos]));
+    expect(cleaned).not.toHaveProperty("pos");
+    expect(cleaned).not.toHaveProperty("parentId");
+    expect(cleaned.id).toBe("n");
+  });
+
+  test("unwraps {id,pos,value} array envelopes (gradient stops)", () => {
+    // enabling a gradient background surfaces the stops array (entry-wrapped when decoded)
+    const viewData = decodeData(ViewNode, {
+      style: { backgroundEnabled: true, backgroundType: "gradient" },
+    });
+    const tree: SnapshotDocumentNode = {
+      id: "v",
+      type: "view",
+      data: viewData,
+      children: [],
+    };
+    const cleaned = asNode(serializeDocument([tree]));
+    const stops = (cleaned.style as { backgroundGradient?: { stops?: unknown[] } })?.backgroundGradient
+      ?.stops;
+    // If the gradient differs from default it is present; when present, its stops
+    // must be plain {color,position} objects, NOT {id,pos,value} envelopes.
+    if (Array.isArray(stops)) {
+      for (const stop of stops) {
+        expect(stop).not.toHaveProperty("pos");
+        expect(stop).not.toHaveProperty("id");
+        expect(stop).toHaveProperty("color");
+      }
+    }
+  });
+
+  test("depth limit renders deeper nodes as stubs with childCount", () => {
+    const root = asNode(serializeDocument([makeTree()], { depth: 1 }));
+    const screen = root.children![0] as CleanedDocumentNode;
+    const view = screen.children![0] as CleanedDocumentStub;
+    expect(view.id).toBe("view1");
+    expect(view.type).toBe("view");
+    expect(view.childCount).toBe(1);
+    // a stub carries no style / children arrays
+    expect(view).not.toHaveProperty("style");
+    expect(view).not.toHaveProperty("children");
+  });
+
+  test("nodeId selects a subtree root", () => {
+    const sub = asNode(serializeDocument([makeTree()], { nodeId: "view1" }));
+    expect(sub.id).toBe("view1");
+    expect(sub.type).toBe("view");
+    // its child text node is present
+    expect((sub.children![0] as CleanedDocumentNode).id).toBe("text1");
+  });
+
+  test("returns null when nodeId matches nothing", () => {
+    expect(serializeDocument([makeTree()], { nodeId: "nope" })).toBeNull();
+  });
+
+  test("returns null for an empty forest", () => {
+    expect(serializeDocument([])).toBeNull();
+  });
+
+  test("a codeComponent node emits path + a source stub, never the source text", () => {
+    const source = "export default defineComponent({ render: () => null });";
+    const tree: SnapshotDocumentNode = {
+      id: "root1",
+      type: "root",
+      data: {},
+      children: [
+        {
+          id: "lib1",
+          type: "library",
+          data: {},
+          children: [
+            {
+              id: "cc1",
+              type: "codeComponent",
+              data: { path: "components/hero.tsx", source },
+              children: [],
+            },
+          ],
+        },
+      ],
+    };
+    const library = asNode(serializeDocument([tree])).children![0] as CleanedDocumentNode;
+    const codeComponent = library.children![0] as CleanedDocumentNode;
+    expect(codeComponent.id).toBe("cc1");
+    expect(codeComponent.type).toBe("codeComponent");
+    expect(codeComponent.path).toBe("components/hero.tsx");
+    // The full source is NEVER inlined — only a length stub is present.
+    expect(codeComponent).not.toHaveProperty("source");
+    expect(codeComponent.sourceLength).toBe(source.length);
+    // And the source text does not leak anywhere in the serialized document.
+    expect(JSON.stringify(serializeDocument([tree]))).not.toContain("defineComponent");
+  });
+});
diff --git a/packages/ai-shared/src/document-serializer.ts b/packages/ai-shared/src/document-serializer.ts
new file mode 100644
index 000000000..b0b99f4d2
--- /dev/null
+++ b/packages/ai-shared/src/document-serializer.ts
@@ -0,0 +1,193 @@
+import { isNodeType, type NodeType } from "@voidhash/mimic-schema";
+
+import { nodeDefaultData, unwrapEntries } from "./mimic-introspection.ts";
+
+/**
+ * A decoded mimic snapshot node, as materialized by the designer store /
+ * server-side document decode: the CRDT `{id, pos, value}` array envelopes are
+ * still present inside `data`, and the node carries its tree position (`pos`,
+ * `parentId`) alongside its logical `data`. The serializer accepts this shape and
+ * emits the cleaned form the AI model reads.
+ *
+ * Only the fields the serializer needs are typed; extra fields (`pos`,
+ * `parentId`, …) are ignored.
+ */
+export interface SnapshotDocumentNode {
+  readonly id: string;
+  readonly type: string;
+  readonly data?: Record<string, unknown>;
+  readonly children?: readonly SnapshotDocumentNode[];
+}
+
+/** A cleaned node in the JSON the model reads (a rendered subtree). */
+export interface CleanedDocumentNode {
+  readonly id: string;
+  readonly type: string;
+  readonly name?: string;
+  /** Remaining non-default data fields (style, text, props, …), envelope-unwrapped. */
+  readonly [dataField: string]: unknown;
+  readonly children?: readonly (CleanedDocumentNode | CleanedDocumentStub)[];
+}
+
+/** A depth-truncated node: identity only, plus how many children were elided. */
+export interface CleanedDocumentStub {
+  readonly id: string;
+  readonly type: string;
+  readonly name?: string;
+  readonly childCount: number;
+}
+
+/** Options controlling which subtree, and how deep, {@link serializeDocument} renders. */
+export interface SerializeOptions {
+  /** Render only the subtree rooted at this node id (defaults to the whole document). */
+  readonly nodeId?: string;
+  /**
+   * Maximum depth to render, counted from the serialization root (`0` = the root
+   * node itself as a stub-less node but its children as stubs). Beyond the limit,
+   * nodes render as {@link CleanedDocumentStub}s. Omitted = unbounded.
+   */
+  readonly depth?: number;
+}
+
+/**
+ * Serialize a decoded mimic document into the cleaned JSON the AI model reads.
+ *
+ * The cleaned shape drops CRDT internals (`pos`, `parentId`), unwraps
+ * `{id, pos, value}` array envelopes recursively, and strips every data field
+ * whose value equals that node type's schema default (so the model sees only what
+ * was actually authored). It keeps `id` (the model addresses nodes by id in
+ * `edit_document`), `type`, `name`, and the remaining data.
+ *
+ * A `codeComponent` node is emitted WITHOUT its `source` (the full TSX would blow
+ * up a whole-document read): only its `path` and a `sourceLength` stub ship — the
+ * source is read on demand with `read_component`.
+ *
+ * `nodeId` selects a subtree root; `depth` caps how deep the tree renders, with
+ * deeper nodes collapsed to stubs carrying their `childCount`.
+ *
+ * @param nodes - The decoded document roots (typically a single `root` node, but
+ *   an array is accepted so a forest / a pre-located subtree can be passed).
+ * @returns The cleaned subtree root, or `null` when `nodeId` matches no node.
+ */
+export function serializeDocument(
+  nodes: readonly SnapshotDocumentNode[],
+  options: SerializeOptions = {},
+): CleanedDocumentNode | CleanedDocumentStub | null {
+  const root = options.nodeId ? findNode(nodes, options.nodeId) : (nodes[0] ?? null);
+  if (!root) return null;
+  return cleanNode(root, 0, options.depth);
+}
+
+/** Depth-first search for a node by id across a decoded forest. */
+function findNode(
+  nodes: readonly SnapshotDocumentNode[],
+  id: string,
+): SnapshotDocumentNode | null {
+  for (const node of nodes) {
+    if (node.id === id) return node;
+    const found = findNode(node.children ?? [], id);
+    if (found) return found;
+  }
+  return null;
+}
+
+/** Structural equality on two already-unwrapped values (order-sensitive for arrays). */
+function deepEqual(a: unknown, b: unknown): boolean {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+
+/**
+ * Strip default-equal leaves from an already-unwrapped value, guided by its
+ * unwrapped default. For a plain object, each key equal to its default is
+ * dropped and each remaining object recurses; a whole object that reduces to
+ * empty is dropped by the caller. Arrays and scalars are compared whole (an
+ * array equal to its default is dropped; otherwise kept verbatim — the model
+ * needs the full list to reason about it).
+ */
+function stripDefaults(value: unknown, defaultValue: unknown): unknown {
+  if (
+    value !== null &&
+    typeof value === "object" &&
+    !Array.isArray(value) &&
+    defaultValue !== null &&
+    typeof defaultValue === "object" &&
+    !Array.isArray(defaultValue)
+  ) {
+    const defObj = defaultValue as Record<string, unknown>;
+    const out: Record<string, unknown> = {};
+    for (const [key, sub] of Object.entries(value as Record<string, unknown>)) {
+      if (key in defObj && deepEqual(sub, defObj[key])) continue;
+      const stripped = key in defObj ? stripDefaults(sub, defObj[key]) : sub;
+      if (isEmptyStructural(stripped)) continue;
+      out[key] = stripped;
+    }
+    return out;
+  }
+  return value;
+}
+
+function cleanNode(
+  node: SnapshotDocumentNode,
+  currentDepth: number,
+  maxDepth: number | undefined,
+): CleanedDocumentNode | CleanedDocumentStub {
+  const children = node.children ?? [];
+
+  if (maxDepth !== undefined && currentDepth > maxDepth) {
+    return stubNode(node, children.length);
+  }
+
+  const cleaned: Record<string, unknown> = { id: node.id, type: node.type };
+  const data = node.data ?? {};
+  const defaults = isNodeType(node.type) ? nodeDefaultData(node.type as NodeType) : {};
+
+  const name = data["name"];
+  if (typeof name === "string") cleaned["name"] = name;
+
+  // A `codeComponent` node's `source` is the full TSX — never inline it (a whole
+  // document read would dump every component's source, a token blowout). Emit its
+  // `path` (the identity the model addresses) plus a length stub; the deliberate
+  // source read is `read_component`.
+  if (node.type === "codeComponent") {
+    const path = unwrapEntries(data["path"]);
+    if (typeof path === "string") cleaned["path"] = path;
+    const source = unwrapEntries(data["source"]);
+    cleaned["sourceLength"] = typeof source === "string" ? source.length : 0;
+    if (children.length > 0) {
+      cleaned["children"] = children.map((child) => cleanNode(child, currentDepth + 1, maxDepth));
+    }
+    return cleaned as unknown as CleanedDocumentNode;
+  }
+
+  for (const [key, rawValue] of Object.entries(data)) {
+    if (key === "name") continue;
+    const value = unwrapEntries(rawValue);
+    // Drop fields equal to their schema default; recurse into nested objects
+    // (e.g. `style`) so a single deviation doesn't drag every default sibling
+    // along. The model then sees only what was actually authored.
+    if (key in defaults && deepEqual(value, defaults[key])) continue;
+    const stripped = key in defaults ? stripDefaults(value, defaults[key]) : value;
+    if (isEmptyStructural(stripped)) continue;
+    cleaned[key] = stripped;
+  }
+
+  if (children.length > 0) {
+    cleaned["children"] = children.map((child) => cleanNode(child, currentDepth + 1, maxDepth));
+  }
+
+  return cleaned as unknown as CleanedDocumentNode;
+}
+
+/** A depth-truncated stub: identity + name + child count only. */
+function stubNode(node: SnapshotDocumentNode, childCount: number): CleanedDocumentStub {
+  const name = node.data?.["name"];
+  const stub: CleanedDocumentStub = { id: node.id, type: node.type, childCount };
+  return typeof name === "string" ? { ...stub, name } : stub;
+}
+
+/** Whether a value is an empty array or empty object (nothing authored to show). */
+function isEmptyStructural(value: unknown): boolean {
+  if (Array.isArray(value)) return value.length === 0;
+  if (value !== null && typeof value === "object") return Object.keys(value).length === 0;
+  return false;
+}
diff --git a/packages/ai-shared/src/index.ts b/packages/ai-shared/src/index.ts
new file mode 100644
index 000000000..7b93420a9
--- /dev/null
+++ b/packages/ai-shared/src/index.ts
@@ -0,0 +1,8 @@
+export * from "./apply-document-edits.ts";
+export * from "./chat-request.ts";
+export * from "./document-edits.ts";
+export * from "./document-serializer.ts";
+export * from "./mimic-introspection.ts";
+export * from "./models.ts";
+export * from "./style-group-flags.ts";
+export * from "./surfaces.ts";
diff --git a/packages/ai-shared/src/mimic-introspection.ts b/packages/ai-shared/src/mimic-introspection.ts
new file mode 100644
index 000000000..597b961e3
--- /dev/null
+++ b/packages/ai-shared/src/mimic-introspection.ts
@@ -0,0 +1,252 @@
+import {
+  CodeComponentNode,
+  ComponentNode,
+  LibraryNode,
+  PathNode,
+  RootNode,
+  ScreenNode,
+  ScrollViewNode,
+  ShapeNode,
+  TextNode,
+  ViewNode,
+  type NodeType,
+} from "@voidhash/mimic-schema";
+
+/**
+ * Schema-derived introspection over the live mimic node primitives. This module
+ * is the SINGLE place the AI document-edit vocabulary reads the legal shape of a
+ * node from: the set of data fields per node type, the accepted value family of
+ * each field, and the defaults-filled snapshot. Deriving everything from the
+ * mimic schemas (never hand-listing it) is what keeps the AI edit surface from
+ * drifting away from what the designer can actually persist — the same drift the
+ * document-first authoring redesign kills.
+ *
+ * The mimic `Primitive` schema serializes to a discriminated union on `kind`
+ * (`string | number | boolean | literal | either | object | array | ...`); we
+ * only touch the members reachable from node data, typed loosely below.
+ */
+
+/** The serialized form of a mimic schema field, as read off `prim.data.schema`. */
+export type SerializedSchema =
+  | { kind: "number"; default?: unknown; validators?: readonly SerializedValidator[] }
+  | { kind: "boolean"; default?: unknown }
+  | { kind: "string"; default?: unknown; validators?: readonly SerializedValidator[] }
+  | { kind: "literal"; value: string | number | boolean; default?: unknown }
+  | { kind: "either"; variants: readonly SerializedSchema[]; default?: unknown }
+  | { kind: "object"; fields: Record<string, SerializedSchema>; default?: unknown }
+  | { kind: "array"; element: SerializedSchema; default?: unknown }
+  | { kind: string; [extra: string]: unknown };
+
+/** One serialized validator (`regex`, `min`, `max`, `int`, …) on a scalar field. */
+export interface SerializedValidator {
+  readonly kind: string;
+  readonly pattern?: string;
+  readonly flags?: string;
+  readonly value?: number;
+}
+
+/**
+ * The mimic node primitives keyed by node type. Typed loosely (`any`): the
+ * primitives carry deep generic types and we only read `.data.schema`,
+ * `.data.encode`, `.data.decode`.
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const NODE_PRIMS: Record<NodeType, any> = {
+  root: RootNode,
+  screen: ScreenNode,
+  view: ViewNode,
+  scrollView: ScrollViewNode,
+  text: TextNode,
+  shape: ShapeNode,
+  path: PathNode,
+  component: ComponentNode,
+  library: LibraryNode,
+  codeComponent: CodeComponentNode,
+};
+
+/** The node types the AI vocabulary is allowed to introspect / build. */
+export function nodePrim(type: NodeType): unknown {
+  return NODE_PRIMS[type];
+}
+
+/** The serialized `data` struct schema (`{ kind: "object", fields }`) for a node type. */
+export function nodeDataSchema(type: NodeType): { fields: Record<string, SerializedSchema> } {
+  return NODE_PRIMS[type].data.schema as { fields: Record<string, SerializedSchema> };
+}
+
+/** The serialized schema of one top-level data field (e.g. `name`, `text`, `style`) of a node type. */
+export function nodeDataFieldSchema(type: NodeType, field: string): SerializedSchema | undefined {
+  return nodeDataSchema(type).fields[field];
+}
+
+/** The ordered set of legal top-level data field names for a node type. */
+export function nodeDataFields(type: NodeType): readonly string[] {
+  return Object.keys(nodeDataSchema(type).fields);
+}
+
+/** The serialized `style` sub-struct schema for a node type, or `undefined` if it has no style. */
+export function nodeStyleSchema(
+  type: NodeType,
+): { fields: Record<string, SerializedSchema> } | undefined {
+  const style = nodeDataSchema(type).fields["style"];
+  return style && "fields" in style
+    ? (style as { fields: Record<string, SerializedSchema> })
+    : undefined;
+}
+
+/** The ordered set of legal style field names for a node type (empty if it has no style). */
+export function nodeStyleFields(type: NodeType): readonly string[] {
+  return Object.keys(nodeStyleSchema(type)?.fields ?? {});
+}
+
+/**
+ * Recursively strip mimic CRDT array envelopes from a decoded value: an array
+ * element is an ordered CRDT entry `{ id, pos, value }`; the logical value is the
+ * `value` payload. Only that envelope layer is removed. Mirrors the helper in the
+ * OSS vocabulary-contract test and `replay.ts`.
+ */
+export function unwrapEntries(value: unknown): unknown {
+  if (Array.isArray(value)) {
+    return value.map((item) =>
+      item !== null &&
+      typeof item === "object" &&
+      "value" in item &&
+      "id" in item &&
+      "pos" in item
+        ? unwrapEntries((item as { value: unknown }).value)
+        : unwrapEntries(item),
+    );
+  }
+  if (value !== null && typeof value === "object") {
+    const out: Record<string, unknown> = {};
+    for (const [key, item] of Object.entries(value as Record<string, unknown>)) {
+      out[key] = unwrapEntries(item);
+    }
+    return out;
+  }
+  return value;
+}
+
+const defaultsCache = new Map<NodeType, Record<string, unknown>>();
+
+/**
+ * The defaults-filled, envelope-unwrapped `data` snapshot for a node type,
+ * computed via `prim.data.decode(prim.data.encode({}))` (the proven path from the
+ * vocabulary-contract test) and cached per type. Used to strip default-equal
+ * fields when serializing a document for the model.
+ *
+ * A node type with a REQUIRED-no-default field (`codeComponent.path`,
+ * `component.componentSlug`, …) cannot encode an empty `{}` — the encode throws.
+ * Those types have no meaningful "default snapshot" to strip against, so the
+ * computation degrades to an empty defaults map (nothing is stripped; every
+ * authored field is kept), keeping the serializer robust over WHOLE documents
+ * (which include `library`/`codeComponent`/`component` nodes).
+ */
+export function nodeDefaultData(type: NodeType): Record<string, unknown> {
+  const cached = defaultsCache.get(type);
+  if (cached) return cached;
+  const prim = NODE_PRIMS[type];
+  let unwrapped: Record<string, unknown>;
+  try {
+    const decoded = prim.data.decode(prim.data.encode({})) as Record<string, unknown>;
+    unwrapped = unwrapEntries(decoded) as Record<string, unknown>;
+  } catch {
+    unwrapped = {};
+  }
+  defaultsCache.set(type, unwrapped);
+  return unwrapped;
+}
+
+/**
+ * The normalized set of scalar values a serialized schema accepts, so a
+ * user-supplied value can be checked against it AND a good error derived without
+ * hand-listing anything. Mirrors the acceptance model of the OSS
+ * vocabulary-contract test.
+ */
+export interface Acceptance {
+  /** A plain finite number is legal. */
+  acceptsNumber: boolean;
+  /** A boolean is legal. */
+  acceptsBoolean: boolean;
+  /** An arbitrary (or regex-constrained) string is legal. */
+  acceptsString: boolean;
+  /** The exact string/number/boolean literal set, when the field is a closed union of literals. */
+  literals: readonly (string | number | boolean)[];
+  /** The field is an object/array (structured) — validated by descending into its shape. */
+  isStructured: boolean;
+  /** Regex validators the string must satisfy (compiled lazily at validation time). */
+  regexes: readonly { pattern: string; flags?: string }[];
+}
+
+const EMPTY_ACCEPTANCE: Acceptance = {
+  acceptsNumber: false,
+  acceptsBoolean: false,
+  acceptsString: false,
+  literals: [],
+  isStructured: false,
+  regexes: [],
+};
+
+/** Compute the accepted value family of a serialized schema (recursing into `either`). */
+export function acceptanceOf(schema: SerializedSchema): Acceptance {
+  // `SerializedSchema` carries an open fallback member (`{ kind: string; ... }`)
+  // so unknown mimic schema kinds don't break the union; that widens the
+  // per-member fields, so we read them off a loosely-typed view after switching.
+  const s = schema as {
+    kind: string;
+    value?: string | number | boolean;
+    variants?: readonly SerializedSchema[];
+    validators?: readonly SerializedValidator[];
+  };
+  switch (s.kind) {
+    case "number":
+      return { ...EMPTY_ACCEPTANCE, acceptsNumber: true };
+    case "boolean":
+      return { ...EMPTY_ACCEPTANCE, acceptsBoolean: true };
+    case "string": {
+      const regexes = (s.validators ?? [])
+        .filter((v) => v.kind === "regex" && typeof v.pattern === "string")
+        .map((v) => ({ pattern: v.pattern as string, flags: v.flags }));
+      return { ...EMPTY_ACCEPTANCE, acceptsString: true, regexes };
+    }
+    case "literal":
+      return { ...EMPTY_ACCEPTANCE, literals: s.value !== undefined ? [s.value] : [] };
+    case "either": {
+      const merged = (s.variants ?? []).map(acceptanceOf);
+      return {
+        acceptsNumber: merged.some((m) => m.acceptsNumber),
+        acceptsBoolean: merged.some((m) => m.acceptsBoolean),
+        acceptsString: merged.some((m) => m.acceptsString),
+        literals: merged.flatMap((m) => m.literals),
+        isStructured: merged.some((m) => m.isStructured),
+        regexes: merged.flatMap((m) => m.regexes),
+      };
+    }
+    case "object":
+    case "array":
+      return { ...EMPTY_ACCEPTANCE, isStructured: true };
+    default:
+      // Unknown/unsupported kind — treat as structured so we don't reject it on a
+      // scalar-family basis (validation of unknown kinds is a no-op by design).
+      return { ...EMPTY_ACCEPTANCE, isStructured: true };
+  }
+}
+
+/**
+ * A human/model-readable one-word summary of the value family a serialized schema
+ * expects, for "expected <type>" error messages. Enum fields render their literal
+ * set at the call site (see `document-edits`), so this returns the scalar family.
+ */
+export function expectedTypeLabel(schema: SerializedSchema): string {
+  const acc = acceptanceOf(schema);
+  if (acc.literals.length > 0 && !acc.acceptsNumber && !acc.acceptsBoolean && !acc.acceptsString) {
+    return "enum";
+  }
+  if (acc.isStructured) return "object";
+  const families: string[] = [];
+  if (acc.acceptsNumber) families.push("number");
+  if (acc.acceptsString) families.push("string");
+  if (acc.acceptsBoolean) families.push("boolean");
+  if (acc.literals.length > 0) families.push("literal");
+  return families.join(" | ") || "unknown";
+}
diff --git a/packages/ai-shared/src/models.ts b/packages/ai-shared/src/models.ts
new file mode 100644
index 000000000..6df24be4e
--- /dev/null
+++ b/packages/ai-shared/src/models.ts
@@ -0,0 +1,48 @@
+import type { Surface } from "./surfaces.ts";
+
+/** Workers AI model id for the Voidhash AI agent (Kimi K2.7 Code via AI Gateway). */
+export const DEFAULT_AI_MODEL = "@cf/moonshotai/kimi-k2.7-code";
+
+/**
+ * Vision-capable Workers AI model used for turns that include an image
+ * attachment. Llama 4 Scout is multimodal (text + image) and supports function
+ * calling, so it can both read a screenshot/mockup and drive the same designer
+ * tool loop the code model uses. Text-only turns stay on {@link DEFAULT_AI_MODEL}.
+ */
+export const VISION_AI_MODEL = "@cf/meta/llama-4-scout-17b-16e-instruct";
+
+/** Per-surface model overrides for text-only turns; falls back to {@link DEFAULT_AI_MODEL}. */
+export const AI_MODEL_BY_SURFACE: Record<Surface, string> = {
+  designer: DEFAULT_AI_MODEL,
+};
+
+/**
+ * Whether any message in the conversation carries an image attachment, i.e. an
+ * AI SDK `file` part with an `image/*` media type. Operates on the raw JSON
+ * shape (not the AI SDK types) so it can run before `validateUIMessages` and
+ * without pulling the SDK into this shared package.
+ */
+export const messagesContainImage = (messages: ReadonlyArray<unknown>): boolean =>
+  messages.some((message) => {
+    if (message === null || typeof message !== "object") {
+      return false;
+    }
+    const parts = (message as { parts?: unknown }).parts;
+    if (!Array.isArray(parts)) {
+      return false;
+    }
+    return parts.some((part) => {
+      if (part === null || typeof part !== "object") {
+        return false;
+      }
+      const { type, mediaType } = part as { type?: unknown; mediaType?: unknown };
+      return type === "file" && typeof mediaType === "string" && mediaType.startsWith("image/");
+    });
+  });
+
+/**
+ * Picks the model for a chat turn: the vision model when the conversation
+ * contains an image attachment, otherwise the surface's text model.
+ */
+export const modelForTurn = (surface: Surface, messages: ReadonlyArray<unknown>): string =>
+  messagesContainImage(messages) ? VISION_AI_MODEL : AI_MODEL_BY_SURFACE[surface];
diff --git a/packages/ai-shared/src/style-group-flags.test.ts b/packages/ai-shared/src/style-group-flags.test.ts
new file mode 100644
index 000000000..77baaf181
--- /dev/null
+++ b/packages/ai-shared/src/style-group-flags.test.ts
@@ -0,0 +1,67 @@
+import { type NodeType } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vitest";
+
+import { acceptanceOf, nodeStyleFields, nodeStyleSchema } from "./mimic-introspection.ts";
+import { STYLE_GROUP_FLAG_BY_FIELD } from "./style-group-flags.ts";
+
+/**
+ * Schema CONTRACT test for {@link STYLE_GROUP_FLAG_BY_FIELD}. It re-derives the
+ * expected set of gated trigger fields straight from the live mimic style schema,
+ * so a new gated `background`/`border`/`shadow`/`fill`/`stroke` field forces a
+ * conscious edit to the map instead of silently going un-enabled on the AI path.
+ */
+
+const STYLED_NODE_TYPES: readonly NodeType[] = ["screen", "view", "text", "shape", "path"];
+const GROUP_PREFIXES = ["background", "border", "shadow", "fill", "stroke"] as const;
+
+/**
+ * The four border radius fields are ungated in the renderer, so they must NOT be
+ * triggers (rounding a corner shouldn't switch on the border stroke).
+ */
+const UNGATED_RADIUS_FIELDS = new Set([
+  "borderTopLeftRadius",
+  "borderTopRightRadius",
+  "borderBottomRightRadius",
+  "borderBottomLeftRadius",
+]);
+
+/** Fields that name a gated style group but are the group's own `*Enabled` flag. */
+const isFlagField = (field: string): boolean => field.endsWith("Enabled");
+
+/** The gated trigger fields the schema declares for a node type. */
+function expectedTriggersOf(type: NodeType): string[] {
+  return nodeStyleFields(type).filter(
+    (field) =>
+      GROUP_PREFIXES.some((prefix) => field.startsWith(prefix)) &&
+      !isFlagField(field) &&
+      !UNGATED_RADIUS_FIELDS.has(field),
+  );
+}
+
+describe("STYLE_GROUP_FLAG_BY_FIELD — schema contract", () => {
+  for (const type of STYLED_NODE_TYPES) {
+    test(`covers exactly the gated trigger fields of \`${type}\``, () => {
+      const styleFields = new Set(nodeStyleFields(type));
+      const mapTriggersForType = Object.keys(STYLE_GROUP_FLAG_BY_FIELD).filter((field) =>
+        styleFields.has(field),
+      );
+      expect(new Set(mapTriggersForType)).toEqual(new Set(expectedTriggersOf(type)));
+    });
+  }
+
+  test("every mapped flag is a real boolean style field on some node type", () => {
+    for (const flag of new Set(Object.values(STYLE_GROUP_FLAG_BY_FIELD))) {
+      const isBooleanFieldSomewhere = STYLED_NODE_TYPES.some((type) => {
+        const schema = nodeStyleSchema(type)?.fields[flag];
+        return schema !== undefined && acceptanceOf(schema).acceptsBoolean;
+      });
+      expect(isBooleanFieldSomewhere, `flag "${flag}" is not a boolean style field`).toBe(true);
+    }
+  });
+
+  test("no trigger key is itself an `*Enabled` flag field", () => {
+    for (const key of Object.keys(STYLE_GROUP_FLAG_BY_FIELD)) {
+      expect(isFlagField(key)).toBe(false);
+    }
+  });
+});
diff --git a/packages/ai-shared/src/style-group-flags.ts b/packages/ai-shared/src/style-group-flags.ts
new file mode 100644
index 000000000..5f08a8662
--- /dev/null
+++ b/packages/ai-shared/src/style-group-flags.ts
@@ -0,0 +1,126 @@
+import { isNodeType } from "@voidhash/mimic-schema";
+
+import { nodeStyleFields } from "./mimic-introspection.ts";
+import type { NodeInput } from "./surfaces.ts";
+
+/**
+ * Maps each RENDERER-GATED style field to the `*Enabled` flag that gates its
+ * group. The renderer draws a background / border / shadow / path fill / stroke
+ * only when the group's flag is on (`background.ts`, `view-styles.ts`,
+ * `path-styles.ts`), but the flags default to `false` and are designer-only
+ * toggles — so a model that sets `backgroundColor` without knowing about the flag
+ * would see nothing render. On the AI edit path we therefore auto-enable a group
+ * whenever any of its fields is set (see {@link withDerivedEnabledFlags}).
+ *
+ * The four `border*Radius` fields are DELIBERATELY ABSENT: border radius is
+ * ungated in the renderer, so rounding a corner must not switch on the separately
+ * gated border stroke. A schema-contract test (`style-group-flags.test.ts`) pins
+ * this map to the live style schema, so a new gated field forces a conscious edit.
+ */
+export const STYLE_GROUP_FLAG_BY_FIELD: Readonly<Record<string, string>> = {
+  // Background → backgroundEnabled
+  backgroundColor: "backgroundEnabled",
+  backgroundType: "backgroundEnabled",
+  backgroundGradient: "backgroundEnabled",
+  backgroundImage: "backgroundEnabled",
+  // Border stroke → borderEnabled (border*Radius excluded — ungated in the renderer)
+  borderTopWidth: "borderEnabled",
+  borderRightWidth: "borderEnabled",
+  borderBottomWidth: "borderEnabled",
+  borderLeftWidth: "borderEnabled",
+  borderColor: "borderEnabled",
+  borderStyle: "borderEnabled",
+  // Shadow → shadowEnabled
+  shadowColor: "shadowEnabled",
+  shadowOffsetX: "shadowEnabled",
+  shadowOffsetY: "shadowEnabled",
+  shadowRadius: "shadowEnabled",
+  shadowOpacity: "shadowEnabled",
+  // Path fill → fillEnabled
+  fillColor: "fillEnabled",
+  fillRule: "fillEnabled",
+  fillOpacity: "fillEnabled",
+  // Path stroke → strokeEnabled
+  strokeColor: "strokeEnabled",
+  strokeWidth: "strokeEnabled",
+  strokeOpacity: "strokeEnabled",
+  strokeLinecap: "strokeEnabled",
+  strokeLinejoin: "strokeEnabled",
+};
+
+/** A non-null, non-array object (a mimic `style` / update `set` shape). */
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+/**
+ * Inject `<group>Enabled: true` into a `style` object for every gated group that
+ * has at least one field present, so the AI edit path renders what the model set.
+ *
+ * A flag is injected ONLY when it is a legal style field of `type` (per
+ * {@link nodeStyleFields}) AND absent from `style`. An EXPLICIT flag value always
+ * wins — writing `backgroundEnabled: false` alongside `backgroundColor` keeps the
+ * group hidden. The function is pure and idempotent: it never mutates `style` and
+ * returns the SAME reference when there is nothing to add (an unknown `type`, no
+ * gated fields, or every relevant flag already present).
+ */
+export function withDerivedEnabledFlags(
+  type: string,
+  style: Record<string, unknown>,
+): Record<string, unknown> {
+  if (!isNodeType(type)) return style;
+  const legalFields = nodeStyleFields(type);
+  const flagsToAdd = new Set<string>();
+  for (const key of Object.keys(style)) {
+    const flag = STYLE_GROUP_FLAG_BY_FIELD[key];
+    if (flag === undefined) continue;
+    if (Object.prototype.hasOwnProperty.call(style, flag)) continue; // explicit wins
+    if (!legalFields.includes(flag)) continue;
+    flagsToAdd.add(flag);
+  }
+  if (flagsToAdd.size === 0) return style;
+  const next = { ...style };
+  for (const flag of flagsToAdd) next[flag] = true;
+  return next;
+}
+
+/**
+ * Apply {@link withDerivedEnabledFlags} to a `NodeInput`'s `style` and recurse
+ * into its `children` (each child judged by its OWN node type). Pure: returns the
+ * same node reference when neither the style nor any child changed, and passes
+ * nodes with an unknown/unstyled type through untouched.
+ */
+export function deriveEnabledFlagsForNodeInput(node: NodeInput): NodeInput {
+  const style = node.style;
+  const nextStyle = isPlainObject(style) ? withDerivedEnabledFlags(node.type, style) : style;
+
+  const children = node.children;
+  const nextChildren = children?.map(deriveEnabledFlagsForNodeInput);
+  const childrenChanged =
+    children !== undefined &&
+    nextChildren !== undefined &&
+    nextChildren.some((child, index) => child !== children[index]);
+
+  if (nextStyle === style && !childrenChanged) return node;
+  return {
+    ...node,
+    ...(nextStyle === style ? {} : { style: nextStyle }),
+    ...(childrenChanged ? { children: nextChildren } : {}),
+  };
+}
+
+/**
+ * Apply {@link withDerivedEnabledFlags} to an update `set`'s `style` field. A
+ * no-op (returns the same `set` reference) when `set.style` is not a plain object
+ * or nothing was injected.
+ */
+export function deriveEnabledFlagsForSet(
+  type: string,
+  set: Record<string, unknown>,
+): Record<string, unknown> {
+  const style = set.style;
+  if (!isPlainObject(style)) return set;
+  const nextStyle = withDerivedEnabledFlags(type, style);
+  if (nextStyle === style) return set;
+  return { ...set, style: nextStyle };
+}
diff --git a/packages/ai-shared/src/surfaces.ts b/packages/ai-shared/src/surfaces.ts
new file mode 100644
index 000000000..8c5d0158b
--- /dev/null
+++ b/packages/ai-shared/src/surfaces.ts
@@ -0,0 +1,309 @@
+import { z } from "zod";
+
+/**
+ * A studio surface the Voidhash AI agent can be embedded on. Each surface maps
+ * to its own system prompt and client-executed tool set.
+ */
+export type Surface = "designer";
+
+// ---------------------------------------------------------------------------
+// Document edit vocabulary (edit_document)
+// ---------------------------------------------------------------------------
+
+/**
+ * A node to insert, as authored by the model. IMPORTANT: this schema is
+ * deliberately STRUCTURALLY LOOSE — it does NOT re-declare the style vocabulary
+ * or per-type data fields in zod. Hand-mirroring the mimic style/data schema into
+ * zod would recreate the three-way drift (compose grammar / zod / mimic) that the
+ * document-first authoring redesign exists to kill. The real gate is the
+ * schema-derived validator (`validateDocumentEdits`), which reads the live mimic
+ * node schemas and produces field-level errors naming allowed fields/values.
+ *
+ * Fields:
+ * - `type` — the node type to create (`view`, `scrollView`, `text`, `shape`,
+ *   `path`, `component`; `screen` at the top level). `root`, `library`,
+ *   `codeComponent` are NOT insertable here.
+ * - `name` — optional display name.
+ * - node data fields — spread at the top level: `style` (a `{ field: value }`
+ *   object), `text` (for text nodes), component identity fields, etc. Validated
+ *   against the node type's schema by the executor.
+ * - `children` — optional nested subtree.
+ * Engine mints all ids; do not supply them.
+ */
+export interface NodeInput {
+  type: string;
+  name?: string;
+  children?: NodeInput[];
+  [dataField: string]: unknown;
+}
+
+/** Zod schema for {@link NodeInput} — loose by design (see the interface docs). */
+export const nodeInputSchema: z.ZodType<NodeInput> = z.lazy(() =>
+  z
+    .object({
+      type: z
+        .string()
+        .describe(
+          "Node type to create: `view` (a flex container / row / column), `scrollView` (a scrollable container), `text`, `shape`, `path`, or `component`. `screen` only at the paywall top level. Ids are engine-minted — never supply one.",
+        ),
+      name: z.string().optional().describe("Optional display name for the node."),
+      style: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe(
+          "Style fields as a flat `{ field: value }` object (e.g. `{ backgroundColor: 'rgba(0,0,0,1)', paddingTop: 16 }`). Allowed fields and value types depend on the node type and are validated on apply — an invalid field/value returns an error naming the allowed fields/values. Setting any background/border/shadow (or path fill/stroke) style field automatically sets the group's `*Enabled` flag to true; set it to `false` explicitly to hide the group non-destructively.",
+        ),
+      children: z
+        .array(nodeInputSchema)
+        .optional()
+        .describe("Nested child nodes, in order."),
+    })
+    .passthrough(),
+);
+
+/**
+ * One atomic document edit. `edit_document` applies a batch of these
+ * all-or-nothing. Nodes are addressed by their mimic id (from get_document or the
+ * current selection); ids for inserted nodes are engine-minted and RETURNED.
+ */
+export const documentEditSchema = z.discriminatedUnion("op", [
+  z
+    .object({
+      op: z.literal("insert"),
+      parentId: z
+        .string()
+        .describe("Id of the node to insert under. Must legally contain the inserted node type."),
+      index: z
+        .number()
+        .int()
+        .optional()
+        .describe(
+          "0-based position among the parent's children. Omitted or past the end appends; out-of-range indices are clamped.",
+        ),
+      node: nodeInputSchema.describe("The subtree to insert. Ids are engine-minted and returned."),
+    })
+    .describe(
+      "Insert a new subtree under `parentId` at `index`. Engine mints every node id and returns them (keyed by insertion order) so you can address the new nodes in follow-up edits.",
+    ),
+  z
+    .object({
+      op: z.literal("update"),
+      nodeId: z.string().describe("Id of the node to update."),
+      set: z
+        .record(z.string(), z.unknown())
+        .describe(
+          "Partial node data to merge. MERGE SEMANTICS: objects (e.g. `style`) merge per-field — unspecified fields are untouched; arrays and scalars REPLACE wholesale. To change one style field, send `set: { style: { paddingTop: 8 } }`. Invalid fields/values return errors naming the allowed fields/values. Setting any background/border/shadow (or path fill/stroke) style field automatically sets the group's `*Enabled` flag to true; set it to `false` explicitly to hide the group non-destructively.",
+        ),
+    })
+    .describe(
+      "Partially update a node's data. `set.style` merges per style field; other objects merge per-field; arrays and scalars replace. Only the fields you include change.",
+    ),
+  z
+    .object({
+      op: z.literal("move"),
+      nodeId: z.string().describe("Id of the node to move."),
+      parentId: z
+        .string()
+        .describe("Id of the new parent. Must legally contain the moved node type; may not be the node itself or a descendant (no cycles)."),
+      index: z
+        .number()
+        .int()
+        .describe("0-based position among the new parent's children (clamped into range)."),
+    })
+    .describe(
+      "Reparent a node to `parentId` at `index`. Rejected if it would create a cycle or the target cannot contain the node type.",
+    ),
+  z
+    .object({
+      op: z.literal("remove"),
+      nodeId: z.string().describe("Id of the node (and its subtree) to remove."),
+    })
+    .describe("Remove a node and its entire subtree."),
+  z
+    .object({
+      op: z.literal("replaceChildren"),
+      nodeId: z.string().describe("Id of the node whose children are replaced."),
+      children: z
+        .array(nodeInputSchema)
+        .describe("The new, complete ordered child list. All ids are engine-minted and returned."),
+    })
+    .describe(
+      "Replace ALL children of `nodeId` with a new ordered list (the old subtree is removed). Engine mints and returns the new ids.",
+    ),
+]);
+
+/** A single document edit op (discriminated on `op`). */
+export type DocumentEdit = z.infer<typeof documentEditSchema>;
+
+// ---------------------------------------------------------------------------
+// Designer tool input schemas
+// ---------------------------------------------------------------------------
+
+/**
+ * Input schemas for the designer-surface tools. Declared here (shared package)
+ * so the server-side tool DECLARATIONS (schema-only, no `execute`) and the
+ * browser EXECUTOR (apps/www) validate against ONE definition and cannot drift.
+ *
+ * The designer tools are CLIENT-EXECUTED: the model calls them, the AI SDK ends
+ * the request, and the browser runs each tool against the **currently open
+ * paywall document** before auto-continuing the chat. Composition is authored as
+ * MIMIC DOCUMENT EDITS (`edit_document`) — there is no `paywall.tsx` and no
+ * fork/apply step; edits are validated and applied incrementally. Code components
+ * remain code-authored and are managed by the `*_component` tools. `read_paywall`
+ * is the only cross-paywall (read-only) tool.
+ */
+export const designerToolSchemas = {
+  // -- read --
+  get_document: z.object({
+    nodeId: z
+      .string()
+      .optional()
+      .describe(
+        "Optional node id to root the returned tree at (defaults to the whole document). Use to zoom into a subtree.",
+      ),
+    depth: z
+      .number()
+      .int()
+      .optional()
+      .describe(
+        "Optional max depth from the root. Nodes past the limit render as stubs `{ id, type, name?, childCount }` you can expand with a follow-up get_document(nodeId).",
+      ),
+  }),
+  get_components: z.object({}),
+  read_component: z.object({
+    path: z
+      .string()
+      .describe(
+        "Canonical document-relative path of a LOCAL component to read (`components/<name>.tsx`).",
+      ),
+  }),
+  read_paywall: z.object({
+    slug: z
+      .string()
+      .describe(
+        "Slug of ANY paywall in the project whose document JSON to read for reference (read-only — you can only EDIT the currently open paywall).",
+      ),
+  }),
+  // -- write --
+  edit_document: z.object({
+    edits: z
+      .array(documentEditSchema)
+      .min(1)
+      .describe(
+        "Ordered batch of document edits, applied ATOMICALLY (all-or-nothing). Returns minted ids for inserts, or per-edit structured errors naming the offending node/field/value.",
+      ),
+  }),
+  write_component: z.object({
+    path: z
+      .string()
+      .describe(
+        "Canonical document-relative path (`components/<name>.tsx`). Writing a path that does not exist yet CREATES the component (its path IS its identity).",
+      ),
+    source: z.string().describe("Full TSX component source."),
+  }),
+  rename_component: z.object({
+    fromPath: z.string().describe("Existing component path (`components/<name>.tsx`)."),
+    toPath: z
+      .string()
+      .describe("New component path. Instances referencing the old path are re-pointed automatically."),
+  }),
+  delete_component: z.object({
+    path: z.string().describe("Component path to delete (`components/<name>.tsx`)."),
+  }),
+} as const;
+
+export type DesignerToolName = keyof typeof designerToolSchemas;
+
+/**
+ * Model-facing descriptions for each designer tool. These are the model's ONLY
+ * documentation for the document-first authoring model, so they are precise about
+ * node addressing (ids from get_document / selection), the `edit_document` op
+ * semantics + merge rules + minted-id returns, and that field-level validation
+ * errors will name the allowed fields/values.
+ */
+export const designerToolDescriptions: Record<DesignerToolName, string> = {
+  get_document:
+    "Return the open paywall's document as cleaned JSON: a nested tree of `{ id, type, name?, ...data, children }` nodes with schema-default fields stripped. Every node has a stable `id` you address in edit_document. Pass `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes come back as stubs you can expand). `codeComponent` definitions come back with their `path` and a `sourceLength` only — the TSX source is NOT inlined; read it with read_component. Call this before editing to learn the current structure and ids.",
+  get_components:
+    "List every component available to place: CATALOG components (deployed, shared), LOCAL code components (defined in this paywall), AND first-party BUILTINS that ship with the renderer. Each entry carries its path/slug, description, props schema, action list, and preview states — everything you need to insert a `component` node and bind its props/actions correctly. Insert a catalog component with its `componentSlug`; a local one with `componentPath` + `componentSource: \"local\"`; a builtin with `componentSource: \"builtin\"` + its `componentSlug` (builtins are UNPINNED — no version/hash).",
+  read_component:
+    "Read a LOCAL code component's TSX source by its `components/<name>.tsx` path, reflecting your in-progress edits. Use get_components first to discover paths; use read_paywall to read a DIFFERENT paywall.",
+  read_paywall:
+    "Read ANOTHER paywall's document JSON by slug for reference (e.g. to match its design). Read-only — you can only EDIT the currently open paywall.",
+  edit_document:
+    "Apply an ATOMIC batch of edits to the open paywall document (all-or-nothing). Ops: `insert` (add a subtree under a parent at an index — ids are engine-minted and RETURNED so you can address the new nodes next), `update` (partial data change; `set.style` merges per style field, other objects merge per-field, arrays/scalars replace wholesale), `move` (reparent; cycles and illegal containment are rejected), `remove` (delete a subtree), `replaceChildren` (swap a node's whole child list). Address nodes by the ids from get_document or the current selection. Invalid fields/values are rejected with per-edit errors naming the offending node, the allowed fields (with a did-you-mean), and the allowed values — read them and correct your edit.",
+  write_component:
+    "Create-or-replace a LOCAL code component at `components/<name>.tsx` (its path is its identity). On success the component is compiled and committed and becomes placeable via a `component` node; on failure you get compile diagnostics. Use for anything that is genuinely code (custom logic/layout), not for plain composition — compose visual structure with edit_document.",
+  rename_component:
+    "Rename a local component from one `components/<name>.tsx` path to another. Instances referencing the old path are re-pointed automatically (rename cascade).",
+  delete_component:
+    "Delete a local component by path. Existing instances of it degrade to placeholders (they are not cascade-deleted), so replace or remove them afterward.",
+};
+
+/** Tool input schemas for a surface. */
+export const toolSchemasForSurface = (surface: Surface) =>
+  ({ designer: designerToolSchemas })[surface];
+
+// ---------------------------------------------------------------------------
+// Tool result wire shapes (executors return these; www + backend agree on them)
+// ---------------------------------------------------------------------------
+
+/**
+ * A per-edit failure returned by `edit_document`, mirroring the validator's
+ * {@link DocumentEditError} on the wire. `editIndex` locates the offending op in
+ * the submitted batch; `message` is the self-contained, model-facing text.
+ */
+export const documentEditErrorSchema = z.object({
+  editIndex: z.number().int(),
+  code: z.enum([
+    "unknownNode",
+    "unknownParent",
+    "illegalChild",
+    "moveCycle",
+    "invalidNodeType",
+    "unknownField",
+    "invalidValue",
+    "indexOutOfBounds",
+    "emptyBatch",
+    "protectedTarget",
+    "overlappingEdits",
+    "missingComponentIdentity",
+  ]),
+  nodeId: z.string().optional(),
+  field: z.string().optional(),
+  message: z.string(),
+});
+
+export type DocumentEditErrorResult = z.infer<typeof documentEditErrorSchema>;
+
+/**
+ * The minted ids `edit_document` returns for each `insert` / `replaceChildren`
+ * op, keyed by the op's index in the submitted batch. Each entry is the ordered
+ * list of ids minted for the nodes that op created (parents before children,
+ * pre-order), so the model can address freshly-inserted nodes in a follow-up.
+ */
+export const mintedIdsSchema = z.record(
+  z.string(),
+  z.array(z.string()),
+);
+
+export type MintedIds = z.infer<typeof mintedIdsSchema>;
+
+/**
+ * The structured result of an `edit_document` call: on success the minted-id map;
+ * on failure the collected per-edit errors (the whole batch is rejected — nothing
+ * is applied).
+ *
+ * This is the DESIGNER-surface wire contract: the browser executor builds its
+ * `edit_document` tool output by parsing through this schema before stringifying,
+ * so the JSON the model reads can never drift from this type. The MCP surface
+ * deliberately does NOT use it — it renders the same outcome as PROSE for the
+ * model (minted ids / errors described in text), so its tool output is not this
+ * shape.
+ */
+export const editDocumentResultSchema = z.discriminatedUnion("ok", [
+  z.object({ ok: z.literal(true), mintedIds: mintedIdsSchema }),
+  z.object({ ok: z.literal(false), errors: z.array(documentEditErrorSchema) }),
+]);
+
+export type EditDocumentResult = z.infer<typeof editDocumentResultSchema>;
diff --git a/packages/ai-shared/tsconfig.json b/packages/ai-shared/tsconfig.json
new file mode 100644
index 000000000..c530b0614
--- /dev/null
+++ b/packages/ai-shared/tsconfig.json
@@ -0,0 +1,5 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/ai-shared/vitest.mts b/packages/ai-shared/vitest.mts
new file mode 100644
index 000000000..926ffb62d
--- /dev/null
+++ b/packages/ai-shared/vitest.mts
@@ -0,0 +1,11 @@
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  plugins: [tsconfigPaths()],
+  test: {
+    exclude: ["./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/packages/paywall-build/LICENSE.md b/packages/paywall-build/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/paywall-build/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/paywall-build/README.md b/packages/paywall-build/README.md
new file mode 100644
index 000000000..08e11bcf7
--- /dev/null
+++ b/packages/paywall-build/README.md
@@ -0,0 +1,7 @@
+# @voidhash/paywall-build
+
+Deterministic compilation, validation, diagnostics, and static manifest extraction for Voidhash paywall code.
+
+```typescript
+import { buildPaywall } from "@voidhash/paywall-build";
+```
diff --git a/packages/paywall-build/package.json b/packages/paywall-build/package.json
new file mode 100644
index 000000000..e8156e371
--- /dev/null
+++ b/packages/paywall-build/package.json
@@ -0,0 +1,47 @@
+{
+  "name": "@voidhash/paywall-build",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "Deterministic compilation, validation, and manifest extraction for Voidhash paywall code.",
+  "keywords": [
+    "build",
+    "paywalls",
+    "typescript",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/paywall-build"
+  },
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts",
+    "./node": "./src/node-fs.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "vp test run -c vitest.mts",
+    "generate:libs": "tsx scripts/generate-libs.ts"
+  },
+  "dependencies": {
+    "@voidhash/paywalls": "workspace:*",
+    "typescript": "6.0.3"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "@voidhash/tsconfig": "workspace:*",
+    "esbuild": "^0.25.10",
+    "tsx": "^4.19.2",
+    "vite-plus": "0.1.23",
+    "vite-tsconfig-paths": "^5.1.4",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/paywall-build/scripts/generate-libs.ts b/packages/paywall-build/scripts/generate-libs.ts
new file mode 100644
index 000000000..f2fcd4368
--- /dev/null
+++ b/packages/paywall-build/scripts/generate-libs.ts
@@ -0,0 +1,99 @@
+/**
+ * Generates the checked-in TypeScript lib d.ts asset set the typecheck stage
+ * feeds to its fully-virtual CompilerHost.
+ *
+ * The build's CompilerHost NEVER reads the real filesystem (see `typecheck.ts`),
+ * so the standard `lib.*.d.ts` files the installed `typescript` normally loads
+ * from its own `lib/` folder have to be embedded as in-memory assets instead.
+ * This script resolves the DOM-FREE `lib.es2022.d.ts` reference graph from the
+ * installed compiler, follows every transitive `/// <reference lib="…" />`, and
+ * writes each file as a string module under `src/lib/`, plus a `src/lib/index.ts`
+ * barrel mapping canonical lib file names (`lib.es2022.d.ts`) to their contents.
+ *
+ * Re-run with `pnpm --filter @voidhash/paywall-build generate:libs` after a
+ * TypeScript bump. The output is deterministic and checked in.
+ */
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+const require = createRequire(import.meta.url);
+const tsLibDir = dirname(require.resolve("typescript"));
+const here = dirname(fileURLToPath(import.meta.url));
+const outDir = join(here, "..", "src", "lib");
+
+/** The DOM-free root lib the build targets (ES2022, no DOM). */
+const ROOT_LIB = "lib.es2022.d.ts";
+const REFERENCE_RE = /\/\/\/\s*<reference\s+lib=["']([^"']+)["']\s*\/>/g;
+
+/** The canonical file name for a `reference lib="es2022"` target. */
+function libFileName(libName: string): string {
+  return `lib.${libName}.d.ts`;
+}
+
+/** Follow the transitive `/// <reference lib />` graph from the root lib. */
+function collectLibs(): Map<string, string> {
+  const out = new Map<string, string>();
+  const queue = [ROOT_LIB];
+  while (queue.length > 0) {
+    const fileName = queue.shift()!;
+    if (out.has(fileName)) continue;
+    const contents = readFileSync(join(tsLibDir, fileName), "utf8");
+    out.set(fileName, contents);
+    for (const match of contents.matchAll(REFERENCE_RE)) {
+      queue.push(libFileName(match[1]!));
+    }
+  }
+  return out;
+}
+
+/** A stable identifier for a lib file name, used as its module export name. */
+function moduleIdent(fileName: string): string {
+  return fileName.replace(/[.-]/g, "_");
+}
+
+function main(): void {
+  const libs = collectLibs();
+  // Clean regeneration: drop any previously generated *.ts under src/lib.
+  try {
+    for (const entry of readdirSync(outDir)) {
+      if (entry.endsWith(".ts")) rmSync(join(outDir, entry));
+    }
+  } catch {
+    // outDir may not exist yet on first run.
+  }
+  mkdirSync(outDir, { recursive: true });
+
+  const sorted = [...libs.entries()].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+  const barrelLines: string[] = [
+    "// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.",
+    "// Regenerate with `pnpm --filter @voidhash/paywall-build generate:libs`.",
+    "",
+  ];
+  const entries: string[] = [];
+  for (const [fileName, contents] of sorted) {
+    const ident = moduleIdent(fileName);
+    const moduleFile = `${ident}.ts`;
+    writeFileSync(
+      join(outDir, moduleFile),
+      `// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.\nexport const ${ident} = ${JSON.stringify(contents)};\n`,
+    );
+    barrelLines.push(`import { ${ident} } from "./${ident}.ts";`);
+    entries.push(`  ${JSON.stringify(fileName)}: ${ident},`);
+  }
+  barrelLines.push("");
+  barrelLines.push("/** Canonical lib file name → d.ts contents. */");
+  barrelLines.push("export const LIB_ASSETS: Readonly<Record<string, string>> = {");
+  barrelLines.push(...entries);
+  barrelLines.push("};");
+  barrelLines.push("");
+  barrelLines.push(`/** The default (root) lib the typecheck stage loads. */`);
+  barrelLines.push(`export const DEFAULT_LIB = ${JSON.stringify(ROOT_LIB)};`);
+  barrelLines.push("");
+
+  writeFileSync(join(outDir, "index.ts"), barrelLines.join("\n"));
+  console.log(`Generated ${sorted.length} lib assets into ${outDir}`);
+}
+
+main();
diff --git a/packages/paywall-build/src/build.test.ts b/packages/paywall-build/src/build.test.ts
new file mode 100644
index 000000000..43e75992d
--- /dev/null
+++ b/packages/paywall-build/src/build.test.ts
@@ -0,0 +1,452 @@
+import { describe, expect, it } from "vitest";
+import type {
+  BuildCapabilities,
+  CachedManifest,
+  ManifestCacheRow,
+} from "./types.ts";
+import {
+  ALIASED_SLOT_TSX,
+  HEADING_TSX,
+  PAYWALL_PROPLESS_TSX,
+  PAYWALL_TSX,
+  PRICING_OPTION_TSX,
+  PRODUCT_CARD_TSX,
+  greenFork,
+} from "./fixtures.ts";
+import { hashSource } from "./hash.ts";
+import { makeNodeCapabilities } from "./node-capabilities.ts";
+import {
+  buildFromFiles,
+  errorsOf,
+  ofPhase,
+  warningsOf,
+} from "./test-helpers.ts";
+
+/** A cache backed by a plain map, recording writes for assertions. */
+function makeMapCache(seed?: Map<string, CachedManifest>): {
+  cache: NonNullable<BuildCapabilities["manifestCache"]>;
+  recorded: ManifestCacheRow[];
+} {
+  const store = seed ?? new Map<string, CachedManifest>();
+  const recorded: ManifestCacheRow[] = [];
+  return {
+    recorded,
+    cache: {
+      get: async (hashes) =>
+        new Map(
+          hashes
+            .filter((h) => store.has(h))
+            .map((h) => [h, store.get(h)!] as const),
+        ),
+      record: async (row) => {
+        recorded.push(row);
+        store.set(row.sourceHash, { manifest: row.manifest });
+      },
+    },
+  };
+}
+
+describe("buildPaywall — green path", () => {
+  it("builds a realistic multi-file fork to ok artifacts", async () => {
+    const result = await buildFromFiles(greenFork(), makeNodeCapabilities());
+
+    expect(result.ok).toBe(true);
+    expect(errorsOf(result)).toHaveLength(0);
+    expect(result.artifacts).toBeDefined();
+
+    const { components } = result.artifacts!;
+    // Both components are ready with v2 manifests, ordered by canonical path.
+    expect(components.map((c) => c.path)).toEqual([
+      "components/heading.tsx",
+      "components/pricing-option.tsx",
+    ]);
+    for (const component of components) {
+      expect(component.status).toBe("ready");
+      expect(component.manifest?.manifestVersion).toBe(2);
+      expect(component.sourceHash).toMatch(/^[0-9a-f]{64}$/);
+    }
+    // The pricing-option manifest carries its declared props + action + slot.
+    const pricing = components.find((c) => c.path === "components/pricing-option.tsx")!;
+    expect(Object.keys(pricing.manifest!.props).sort()).toEqual([
+      "highlighted",
+      "label",
+      "price",
+    ]);
+    expect(Object.keys(pricing.manifest!.actions)).toEqual(["onSelect"]);
+    expect(pricing.manifest!.slot).toBe(true);
+  });
+
+  it("stable sourceHash matches hashSource(source)", async () => {
+    const result = await buildFromFiles(greenFork(), makeNodeCapabilities());
+    for (const component of result.artifacts!.components) {
+      expect(component.sourceHash).toBe(hashSource(component.source));
+    }
+  });
+});
+
+describe("buildPaywall — imports stage", () => {
+  it("positions an error at a broken relative import", async () => {
+    const files = {
+      "/paywall.tsx": PAYWALL_TSX,
+      "/components/pricing-option.tsx": PRICING_OPTION_TSX,
+    };
+    const result = await buildFromFiles(files, makeNodeCapabilities());
+    expect(result.ok).toBe(false);
+
+    const importErr = ofPhase(result, "imports").find((d) =>
+      d.message.includes("./components/heading"),
+    );
+    expect(importErr).toBeDefined();
+    expect(importErr!.severity).toBe("error");
+    expect(importErr!.line).toBe(2);
+    expect(importErr!.column).toBeGreaterThan(0);
+  });
+
+  it("rejects a subpath SDK import, positioned at the import", async () => {
+    const badEntry = PAYWALL_TSX.replace(
+      'import { definePaywall, Screen, View } from "@voidhash/paywalls";',
+      'import { definePaywall, Screen, View } from "@voidhash/paywalls";\nimport { parseComposition } from "@voidhash/paywalls/compose";',
+    );
+    const result = await buildFromFiles(
+      { ...greenFork(), "/paywall.tsx": badEntry },
+      makeNodeCapabilities(),
+    );
+    const err = ofPhase(result, "imports").find((d) =>
+      d.message.includes("@voidhash/paywalls/compose"),
+    );
+    expect(err).toBeDefined();
+    expect(err!.line).toBe(2);
+  });
+
+  it("errors on a relative import FROM a component (v1)", async () => {
+    const badComponent = `import { defineComponent, Text } from "@voidhash/paywalls";
+import Other from "./other";
+export default defineComponent({ render: () => <Text>{String(Other)}</Text> });
+`;
+    const result = await buildFromFiles(
+      { ...greenFork(), "/components/heading.tsx": badComponent },
+      makeNodeCapabilities(),
+    );
+    const err = ofPhase(result, "imports").find(
+      (d) => d.path === "components/heading.tsx" && d.message.includes("relative"),
+    );
+    expect(err).toBeDefined();
+    expect(err!.severity).toBe("error");
+  });
+});
+
+describe("buildPaywall — typecheck stage", () => {
+  it("catches a cross-file type error (number → string prop)", async () => {
+    const badEntry = PAYWALL_TSX.replace('text="Unlock Pro"', "text={42}");
+    const result = await buildFromFiles(
+      { ...greenFork(), "/paywall.tsx": badEntry },
+      makeNodeCapabilities(),
+    );
+    expect(result.ok).toBe(false);
+    const typeErr = ofPhase(result, "types").find((d) =>
+      d.message.includes("not assignable"),
+    );
+    expect(typeErr).toBeDefined();
+    expect(typeErr!.path).toBe("/paywall.tsx");
+    expect(typeErr!.line).toBeGreaterThan(0);
+    expect(typeErr!.column).toBeGreaterThan(0);
+  });
+
+  it("catches a plain syntax error in a component", async () => {
+    const broken = HEADING_TSX.replace("render: ({ props }) => (", "render: ({ props }) => ( <<<");
+    const result = await buildFromFiles(
+      { ...greenFork(), "/components/heading.tsx": broken },
+      makeNodeCapabilities(),
+    );
+    expect(result.ok).toBe(false);
+    const err = ofPhase(result, "types").find(
+      (d) => d.path === "/components/heading.tsx",
+    );
+    expect(err).toBeDefined();
+  });
+
+  it("skips typecheck with an info diagnostic when the capability is absent", async () => {
+    const caps = makeNodeCapabilities({ typecheck: false });
+    const result = await buildFromFiles(greenFork(), caps);
+    const info = ofPhase(result, "types").find((d) => d.severity === "info");
+    expect(info).toBeDefined();
+    // A number→string prop is NOT caught when typecheck is off.
+    const badEntry = PAYWALL_TSX.replace('text="Unlock Pro"', "text={42}");
+    const off = await buildFromFiles(
+      { ...greenFork(), "/paywall.tsx": badEntry },
+      caps,
+    );
+    expect(ofPhase(off, "types").every((d) => d.severity === "info")).toBe(true);
+  });
+});
+
+describe("buildPaywall — library files", () => {
+  it("builds an unimported component and includes it in artifacts", async () => {
+    const extra = `import { defineComponent, Text } from "@voidhash/paywalls";
+export default defineComponent({ title: "Badge", render: () => <Text>Badge</Text> });
+`;
+    const files = { ...greenFork(), "/components/badge.tsx": extra };
+    const result = await buildFromFiles(files, makeNodeCapabilities());
+    expect(result.ok).toBe(true);
+
+    const paths = result.artifacts!.components.map((c) => c.path);
+    expect(paths).toContain("components/badge.tsx");
+  });
+});
+
+describe("buildPaywall — no capabilities (pure)", () => {
+  it("resolves manifests statically — analyzable components reach ready without a compiler", async () => {
+    // No compile/extract capability and no cache: the ONLY manifest source is
+    // the static AST extractor. Both fixtures are declarative, so both resolve.
+    const files = {
+      "/paywall.tsx": PAYWALL_PROPLESS_TSX,
+      "/components/heading.tsx": HEADING_TSX,
+      "/components/pricing-option.tsx": PRICING_OPTION_TSX,
+    };
+    const result = await buildFromFiles(files, {});
+    expect(result.ok).toBe(true);
+    expect(errorsOf(result)).toHaveLength(0);
+    // Both components resolve statically to ready — no degraded refs remain.
+    expect(result.artifacts!.components.every((c) => c.status === "ready")).toBe(true);
+    expect(result.artifacts!.components.every((c) => c.manifest !== null)).toBe(true);
+    expect(warningsOf(result)).toHaveLength(0);
+  });
+
+  it("resolves manifests from a cache hit — ready without any compiler", async () => {
+    // Seed the cache from a full build.
+    const full = await buildFromFiles(greenFork(), makeNodeCapabilities());
+    const seed = new Map<string, CachedManifest>();
+    for (const c of full.artifacts!.components) {
+      seed.set(c.sourceHash, { manifest: c.manifest });
+    }
+    const { cache } = makeMapCache(seed);
+
+    const result = await buildFromFiles(greenFork(), { manifestCache: cache });
+    expect(result.ok).toBe(true);
+    expect(
+      result.artifacts!.components.every((c) => c.status === "ready"),
+    ).toBe(true);
+  });
+});
+
+describe("buildPaywall — static extraction on a degraded runtime (stuck-agent regression)", () => {
+  // The paywall the AI just authored: a fresh component, referenced with a
+  // product ref, a string prop, and a boolean prop bound. On workerd there is no
+  // compile/extract capability and no cache entry — static extraction is the ONLY
+  // way this validates. Before the fix, the component degraded to `unknown`, its
+  // props could not be validated, and the agent looped rewriting correct code.
+  const FRESH_PAYWALL = `import { definePaywall, Screen, product, purchase, payload } from "@voidhash/paywalls";
+import ProductCard from "./components/product-card";
+
+export default definePaywall({
+  render: () => (
+    <Screen name="Main">
+      <ProductCard product={product("yearly")} isSelected accentColor="#2563eb" onSelect={purchase(payload("product"))} />
+    </Screen>
+  ),
+});
+`;
+  const freshFork = (): Record<string, string> => ({
+    "/paywall.tsx": FRESH_PAYWALL,
+    "/components/product-card.tsx": PRODUCT_CARD_TSX,
+  });
+
+  it("builds a fresh component to ready with EMPTY capabilities, props validated", async () => {
+    const result = await buildFromFiles(freshFork(), {});
+    expect(result.ok).toBe(true);
+    expect(errorsOf(result)).toHaveLength(0);
+    expect(warningsOf(result)).toHaveLength(0);
+
+    const card = result.artifacts!.components.find(
+      (c) => c.path === "components/product-card.tsx",
+    )!;
+    expect(card.status).toBe("ready");
+    expect(card.manifest?.manifestVersion).toBe(2);
+    expect(Object.keys(card.manifest!.props).sort()).toEqual([
+      "accentColor",
+      "isSelected",
+      "product",
+    ]);
+    expect(card.manifest!.props.product).toMatchObject({ kind: "ref", refType: "product" });
+    expect(Object.keys(card.manifest!.actions)).toEqual(["onSelect"]);
+    expect(card.manifest!.slot).toBe(true);
+  });
+
+  it("still rejects the dual-export component form with the improved validate message", async () => {
+    // The exact rejected form our AI was previously (wrongly) guided to write.
+    const dualExport = `import { defineComponent, Text } from "@voidhash/paywalls";
+export const definition = defineComponent({ title: "Card", render: () => <Text>x</Text> });
+export default definition.component;
+`;
+    const result = await buildFromFiles(
+      { ...freshFork(), "/components/product-card.tsx": dualExport },
+      {},
+    );
+    expect(result.ok).toBe(false);
+    const validateErr = ofPhase(result, "validate").find(
+      (d) => d.path === "components/product-card.tsx",
+    );
+    expect(validateErr).toBeDefined();
+    expect(validateErr!.message).toContain("export default defineComponent");
+    expect(validateErr!.message).toMatch(/definition\.component/);
+  });
+
+  it("accepts children on an ALIASED-Slot component with EMPTY capabilities", async () => {
+    // `Slot as S` rendered as <S/>: a source-text scan would report slot: false
+    // and the parser would reject the children ("does not declare a slot") —
+    // reintroducing the stuck-agent failure. Binding-resolved detection must
+    // let this build succeed on the degraded runtime.
+    const entry = `import { definePaywall, Screen, Text } from "@voidhash/paywalls";
+import Framed from "./components/framed";
+
+export default definePaywall({
+  render: () => (
+    <Screen name="Main">
+      <Framed caption="Hello">
+        <Text style={{ fontSize: 14 }}>Nested child</Text>
+      </Framed>
+    </Screen>
+  ),
+});
+`;
+    const result = await buildFromFiles(
+      { "/paywall.tsx": entry, "/components/framed.tsx": ALIASED_SLOT_TSX },
+      {},
+    );
+    expect(result.ok).toBe(true);
+    expect(errorsOf(result)).toHaveLength(0);
+    const framed = result.artifacts!.components.find((c) => c.path === "components/framed.tsx")!;
+    expect(framed.status).toBe("ready");
+    expect(framed.manifest!.slot).toBe(true);
+  });
+});
+
+describe("buildPaywall — static fallback over a runtime extraction failure", () => {
+  it("marks an eval-crashing (but grammatical) component ready with a non-blocking warning", async () => {
+    // Module-level code throws at evaluation, so the runtime extractor fails —
+    // but the defineComponent grammar is intact, so static extraction succeeds.
+    // The crash must stay observable as a warning, not silently masked.
+    const crashing = `import { defineComponent, Text } from "@voidhash/paywalls";
+
+const table: Record<string, string> = {};
+if (!table["missing"]) {
+  throw new Error("module eval crashed");
+}
+
+export default defineComponent({
+  title: "Crashy",
+  props: (p) => ({
+    label: p.string().default("x"),
+  }),
+  render: ({ props }) => <Text>{props.label}</Text>,
+});
+`;
+    const entry = `import { definePaywall, Screen } from "@voidhash/paywalls";
+import Crashy from "./components/crashy";
+
+export default definePaywall({
+  render: () => (
+    <Screen name="Main">
+      <Crashy label="hi" />
+    </Screen>
+  ),
+});
+`;
+    const result = await buildFromFiles(
+      { "/paywall.tsx": entry, "/components/crashy.tsx": crashing },
+      makeNodeCapabilities(),
+    );
+    expect(result.ok).toBe(true);
+    const crashy = result.artifacts!.components.find((c) => c.path === "components/crashy.tsx")!;
+    expect(crashy.status).toBe("ready");
+    expect(crashy.manifest?.title).toBe("Crashy");
+
+    const warn = warningsOf(result).find((d) => d.message.includes("module eval crashed"));
+    expect(warn).toBeDefined();
+    expect(warn!.path).toBe("components/crashy.tsx");
+    expect(warn!.message).toMatch(/resolved statically/i);
+  });
+});
+
+describe("buildPaywall — manifest cache", () => {
+  it("records freshly extracted manifests best-effort", async () => {
+    const { cache, recorded } = makeMapCache();
+    const caps = makeNodeCapabilities({ manifestCache: cache });
+    const result = await buildFromFiles(greenFork(), caps);
+    expect(result.ok).toBe(true);
+    expect(recorded.map((r) => r.sourceHash).sort()).toEqual(
+      result.artifacts!.components.map((c) => c.sourceHash).sort(),
+    );
+  });
+
+  it("never fails the build when cache.record throws", async () => {
+    const caps = makeNodeCapabilities({
+      manifestCache: {
+        get: async () => new Map(),
+        record: async () => {
+          throw new Error("cache is down");
+        },
+      },
+    });
+    const result = await buildFromFiles(greenFork(), caps);
+    expect(result.ok).toBe(true);
+  });
+});
+
+describe("buildPaywall — validate stage", () => {
+  it("reports a missing entry as the only error", async () => {
+    const result = await buildFromFiles(
+      { "/components/heading.tsx": HEADING_TSX },
+      makeNodeCapabilities(),
+    );
+    expect(result.ok).toBe(false);
+    expect(result.diagnostics).toHaveLength(1);
+    expect(result.diagnostics[0]!.phase).toBe("validate");
+    expect(result.diagnostics[0]!.message).toContain("does not exist");
+  });
+
+  it("flags a component that does not default-export defineComponent", async () => {
+    const notAComponent = `import { Text } from "@voidhash/paywalls";
+export const Heading = () => <Text>nope</Text>;
+`;
+    const result = await buildFromFiles(
+      { ...greenFork(), "/components/heading.tsx": notAComponent },
+      makeNodeCapabilities({ typecheck: false }),
+    );
+    const err = ofPhase(result, "validate").find((d) =>
+      d.message.includes("default-export"),
+    );
+    expect(err).toBeDefined();
+    expect(err!.path).toBe("components/heading.tsx");
+  });
+});
+
+describe("buildPaywall — determinism & non-execution", () => {
+  it("produces a deep-equal result on identical input", async () => {
+    const caps = makeNodeCapabilities();
+    const a = await buildFromFiles(greenFork(), caps);
+    const b = await buildFromFiles(greenFork(), caps);
+    expect(a).toEqual(b);
+  });
+
+  it("never executes the entry's module-level side effects", async () => {
+    // A module-level throw would surface if the entry were ever executed by the
+    // imports/typecheck stages. It must NOT — those stages only parse.
+    const sideEffectEntry = `import { definePaywall, Screen } from "@voidhash/paywalls";
+throw new Error("entry executed — this must never run during a build");
+export default definePaywall({ render: () => <Screen /> });
+`;
+    // Build should complete (the syntactic stages run) and never throw the
+    // module-level error. Typecheck may flag unreachable code; that is fine.
+    const result = await buildFromFiles(
+      { "/paywall.tsx": sideEffectEntry },
+      makeNodeCapabilities({ typecheck: false }),
+    );
+    // No diagnostic message contains the side-effect marker.
+    expect(
+      result.diagnostics.some((d) => d.message.includes("entry executed")),
+    ).toBe(false);
+    // The syntactic stages complete without ever executing the entry.
+    expect(result).toBeDefined();
+  });
+});
diff --git a/packages/paywall-build/src/build.ts b/packages/paywall-build/src/build.ts
new file mode 100644
index 000000000..531beaa49
--- /dev/null
+++ b/packages/paywall-build/src/build.ts
@@ -0,0 +1,111 @@
+import { compileComponents } from "./compile.ts";
+import type { BuildDiagnostic } from "./diagnostics.ts";
+import { error, hasErrors, info } from "./diagnostics.ts";
+import { extractManifests, type ExtractedComponent } from "./extract.ts";
+import type { BuildReadFs } from "./fs.ts";
+import { hashSource } from "./hash.ts";
+import { resolveImports } from "./imports.ts";
+import { typecheck } from "./typecheck.ts";
+import type {
+  BuildArtifacts,
+  BuildCapabilities,
+  BuildResult,
+  ComponentArtifact,
+  TypecheckOptions,
+} from "./types.ts";
+import { validate } from "./validate.ts";
+
+/**
+ * Build a paywall's code components from its entry `.tsx` and component files.
+ *
+ * The build system for paywall code: entry `paywall.tsx` → resolve imports →
+ * typecheck e2e → compile components → extract manifests → cross-validate →
+ * component artifacts. It is mimic-free (no mimic-core / mimic-schema /
+ * paywall-workspace imports) and side-effect-free with respect to the entry:
+ * the import/typecheck stages parse the entry but NEVER execute it.
+ *
+ * Every stage accumulates diagnostics; later stages still run where meaningful
+ * so one bad file does not hide the rest. `ok` is true iff no `error`-severity
+ * diagnostic was produced; `artifacts` is present only when `ok`.
+ *
+ * @param fs   the read side of the {@link BuildFs} (read/list/exists)
+ * @param entryPath absolute POSIX path of the entry `paywall.tsx`
+ * @param caps host build capabilities (compile/extract/typecheck/cache seams)
+ */
+export async function buildPaywall(
+  fs: BuildReadFs,
+  entryPath: string,
+  caps: BuildCapabilities,
+): Promise<BuildResult> {
+  const diagnostics: BuildDiagnostic[] = [];
+
+  // Missing entry is the ONLY error and short-circuits everything.
+  if (!fs.exists(entryPath)) {
+    return {
+      ok: false,
+      diagnostics: [error(entryPath, "validate", `Entry file "${entryPath}" does not exist.`)],
+    };
+  }
+
+  // Stage 1 — imports.
+  const imports = resolveImports(fs, entryPath);
+  diagnostics.push(...imports.diagnostics);
+
+  // Stage 2 — typecheck (capability-gated).
+  if (caps.typecheck) {
+    const options: TypecheckOptions =
+      typeof caps.typecheck === "object" ? caps.typecheck : {};
+    diagnostics.push(
+      ...typecheck(entryPath, imports.entrySource, imports.components, options),
+    );
+  } else {
+    diagnostics.push(
+      info(entryPath, "types", "Typecheck capability not enabled — types are not checked."),
+    );
+  }
+
+  // Stage 3 — compile.
+  const compileResult = await compileComponents(imports.components, caps);
+  diagnostics.push(...compileResult.diagnostics);
+
+  // Stage 4 — extract manifests.
+  const extractResult = await extractManifests(compileResult.compiled, caps);
+  diagnostics.push(...extractResult.diagnostics);
+
+  // Stage 5 — cross-validate.
+  diagnostics.push(...validate(imports.components));
+
+  const ok = !hasErrors(diagnostics);
+  if (!ok) {
+    return { ok, diagnostics };
+  }
+
+  const artifacts: BuildArtifacts = {
+    components: toComponentArtifacts(imports.components, extractResult.extracted),
+  };
+  return { ok, artifacts, diagnostics };
+}
+
+/**
+ * Assemble the ordered component artifact list from the imports set (source of
+ * truth for the full component set + source) joined with the extract results
+ * (manifest + status). Ordered by canonical path for determinism.
+ */
+function toComponentArtifacts(
+  imported: ReturnType<typeof resolveImports>["components"],
+  extracted: readonly ExtractedComponent[],
+): readonly ComponentArtifact[] {
+  const byPath = new Map(extracted.map((e) => [e.path, e]));
+  return imported
+    .map((component): ComponentArtifact => {
+      const e = byPath.get(component.path);
+      return {
+        path: component.path,
+        source: component.source,
+        sourceHash: e?.sourceHash ?? hashSource(component.source),
+        manifest: e?.manifest ?? null,
+        status: e?.status ?? "unknown",
+      };
+    })
+    .sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+}
diff --git a/packages/paywall-build/src/compile.ts b/packages/paywall-build/src/compile.ts
new file mode 100644
index 000000000..e0141e02f
--- /dev/null
+++ b/packages/paywall-build/src/compile.ts
@@ -0,0 +1,92 @@
+import type { BuildDiagnostic } from "./diagnostics.ts";
+import { error, info } from "./diagnostics.ts";
+import type { ResolvedComponent } from "./imports.ts";
+import type { BuildCapabilities, BuildDiagnosticInput } from "./types.ts";
+
+/** The per-component result of the compile stage. */
+export interface CompiledComponent {
+  readonly component: ResolvedComponent;
+  /** Compiled CJS code, or `null` when compilation was skipped or failed. */
+  readonly code: string | null;
+}
+
+/** The compile stage output. */
+export interface CompileResult {
+  readonly compiled: readonly CompiledComponent[];
+  readonly diagnostics: readonly BuildDiagnostic[];
+}
+
+/** Map a capability diagnostic to a build diagnostic for `path` in a phase. */
+function fromCapability(
+  path: string,
+  phase: "compile" | "runtime",
+  diagnostic: BuildDiagnosticInput,
+): BuildDiagnostic {
+  return {
+    path,
+    phase,
+    severity: diagnostic.severity ?? "error",
+    message: diagnostic.message,
+    ...(diagnostic.line !== undefined ? { line: diagnostic.line } : {}),
+    ...(diagnostic.column !== undefined ? { column: diagnostic.column } : {}),
+  };
+}
+
+/**
+ * Stage 3 — compile.
+ *
+ * Runs the host `compile` capability over each component's source. With no
+ * capability the stage is skipped (one `info` diagnostic) and every component's
+ * `code` is `null`, degrading downstream statuses to `unknown`. A compile
+ * failure records the capability's `compile`-phase diagnostics for that file and
+ * leaves its `code` null; other files still compile.
+ */
+export async function compileComponents(
+  components: readonly ResolvedComponent[],
+  caps: BuildCapabilities,
+): Promise<CompileResult> {
+  const diagnostics: BuildDiagnostic[] = [];
+  const compile = caps.compile;
+  if (!compile) {
+    if (components.length > 0) {
+      diagnostics.push(
+        info(
+          components[0]!.path,
+          "compile",
+          "No compile capability provided — components are not compiled; manifests fall back to cache or 'unknown'.",
+        ),
+      );
+    }
+    return {
+      compiled: components.map((component) => ({ component, code: null })),
+      diagnostics,
+    };
+  }
+
+  const compiled: CompiledComponent[] = [];
+  for (const component of components) {
+    let outcome;
+    try {
+      outcome = await compile(component.source);
+    } catch (err) {
+      diagnostics.push(
+        error(
+          component.path,
+          "compile",
+          err instanceof Error ? err.message : String(err),
+        ),
+      );
+      compiled.push({ component, code: null });
+      continue;
+    }
+    if ("diagnostics" in outcome) {
+      for (const diagnostic of outcome.diagnostics) {
+        diagnostics.push(fromCapability(component.path, "compile", diagnostic));
+      }
+      compiled.push({ component, code: null });
+      continue;
+    }
+    compiled.push({ component, code: outcome.code });
+  }
+  return { compiled, diagnostics };
+}
diff --git a/packages/paywall-build/src/diagnostics.ts b/packages/paywall-build/src/diagnostics.ts
new file mode 100644
index 000000000..d82a14af1
--- /dev/null
+++ b/packages/paywall-build/src/diagnostics.ts
@@ -0,0 +1,67 @@
+/**
+ * The single diagnostic shape every build stage emits.
+ *
+ * A diagnostic is always attributed to a `path` (the entry, a component file, or
+ * a virtual origin), carries a `severity` and the `phase` that produced it, and
+ * optionally a 1-BASED `line`/`column`. The build accumulates diagnostics across
+ * all stages; `ok` is derived from the absence of any `"error"`-severity entry.
+ */
+
+/** Which build stage produced a diagnostic. */
+export type BuildPhase =
+  | "imports"
+  | "types"
+  | "grammar"
+  | "compile"
+  | "runtime"
+  | "validate";
+
+/** Diagnostic severity. Only `"error"` blocks a successful build. */
+export type BuildSeverity = "error" | "warning" | "info";
+
+/** A single build diagnostic. `line`/`column` are 1-based when present. */
+export interface BuildDiagnostic {
+  readonly path: string;
+  readonly severity: BuildSeverity;
+  readonly phase: BuildPhase;
+  readonly message: string;
+  /** 1-based source line, when the diagnostic has a position. */
+  readonly line?: number;
+  /** 1-based source column, when the diagnostic has a position. */
+  readonly column?: number;
+}
+
+/** Construct an `error`-severity diagnostic. */
+export function error(
+  path: string,
+  phase: BuildPhase,
+  message: string,
+  position?: { readonly line?: number; readonly column?: number },
+): BuildDiagnostic {
+  return { path, severity: "error", phase, message, ...position };
+}
+
+/** Construct a `warning`-severity diagnostic. */
+export function warning(
+  path: string,
+  phase: BuildPhase,
+  message: string,
+  position?: { readonly line?: number; readonly column?: number },
+): BuildDiagnostic {
+  return { path, severity: "warning", phase, message, ...position };
+}
+
+/** Construct an `info`-severity diagnostic. */
+export function info(
+  path: string,
+  phase: BuildPhase,
+  message: string,
+  position?: { readonly line?: number; readonly column?: number },
+): BuildDiagnostic {
+  return { path, severity: "info", phase, message, ...position };
+}
+
+/** Whether a diagnostic set contains any `error`-severity entry. */
+export function hasErrors(diagnostics: readonly BuildDiagnostic[]): boolean {
+  return diagnostics.some((d) => d.severity === "error");
+}
diff --git a/packages/paywall-build/src/extract.ts b/packages/paywall-build/src/extract.ts
new file mode 100644
index 000000000..9ba98f742
--- /dev/null
+++ b/packages/paywall-build/src/extract.ts
@@ -0,0 +1,189 @@
+import { parseComponentManifest } from "@voidhash/paywalls/schema";
+import type { ComponentManifest } from "@voidhash/paywalls/schema";
+import type { CompiledComponent } from "./compile.ts";
+import { hashSource } from "./hash.ts";
+import type { BuildDiagnostic } from "./diagnostics.ts";
+import { error } from "./diagnostics.ts";
+import { staticExtractManifest } from "./static-manifest.ts";
+import type {
+  BuildCapabilities,
+  BuildDiagnosticInput,
+  ComponentStatus,
+  ExtractOutcome,
+} from "./types.ts";
+
+/** The per-component result of the extract stage. */
+export interface ExtractedComponent {
+  readonly path: string;
+  readonly source: string;
+  readonly sourceHash: string;
+  readonly manifest: ComponentManifest | null;
+  readonly status: ComponentStatus;
+}
+
+/** The extract stage output. */
+export interface ExtractResult {
+  readonly extracted: readonly ExtractedComponent[];
+  readonly diagnostics: readonly BuildDiagnostic[];
+}
+
+/** Map a capability diagnostic to a `runtime`-phase build diagnostic. */
+function fromCapability(path: string, diagnostic: BuildDiagnosticInput): BuildDiagnostic {
+  return {
+    path,
+    phase: "runtime",
+    severity: diagnostic.severity ?? "error",
+    message: diagnostic.message,
+    ...(diagnostic.line !== undefined ? { line: diagnostic.line } : {}),
+    ...(diagnostic.column !== undefined ? { column: diagnostic.column } : {}),
+  };
+}
+
+/**
+ * Stage 4 — extract manifests.
+ *
+ * For each component, resolve its §2 manifest in preference order:
+ *   1. `manifestCache.get(hash)` — trust the cached manifest (may be null).
+ *   2. the host `extractManifest` capability — runs the compiled code (the
+ *      ground-truth extractor), when both a capability and compiled code exist.
+ *   3. STATIC AST extraction from the component's source ({@link staticExtractManifest}).
+ *
+ * The static fallback is what lets a freshly-authored component reach `ready` on
+ * a degraded runtime (workerd: no compile, no extract capability, no cache
+ * entry) — its `defineComponent` grammar is derivable from the AST without
+ * execution, so its composition bindings can still be validated this build.
+ * Every source of a raw manifest (runtime OR static) is validated with
+ * `parseComponentManifest` before it is trusted, and any freshly resolved valid
+ * manifest is offered back to `manifestCache.record` best-effort — a cache error
+ * NEVER fails the build.
+ *
+ * When the runtime path fails but static succeeds, the component is still
+ * `ready` (the static manifest is derived from the same closed grammar), and
+ * the runtime failure is surfaced as a non-blocking `warning` — a module that
+ * crashes at eval must stay observable, not silently masked by the fallback.
+ *
+ * Degradation (⇒ `status: "unknown"`, `manifest: null`):
+ * - Runtime extraction and static extraction both fail — the runtime's
+ *   diagnostics AND the static extractor's diagnostics are surfaced (phase
+ *   `runtime`) for that file.
+ * - No compiled code, no cache, and static extraction fails — the static
+ *   extractor's diagnostics are surfaced.
+ */
+export async function extractManifests(
+  compiled: readonly CompiledComponent[],
+  caps: BuildCapabilities,
+): Promise<ExtractResult> {
+  const diagnostics: BuildDiagnostic[] = [];
+  const cache = caps.manifestCache;
+  const extractManifest = caps.extractManifest;
+
+  // Batch cache lookup by source hash (misses simply absent from the map).
+  const hashByComponent = compiled.map((c) => hashSource(c.component.source));
+  const cacheHits = cache
+    ? await cache.get([...new Set(hashByComponent)])
+    : new Map();
+
+  const extracted: ExtractedComponent[] = [];
+  for (let i = 0; i < compiled.length; i += 1) {
+    const { component, code } = compiled[i]!;
+    const sourceHash = hashByComponent[i]!;
+    const base = { path: component.path, source: component.source, sourceHash };
+
+    // 1. Cache hit — trust the cached manifest (may be null ⇒ known-unknown).
+    const cached = cacheHits.get(sourceHash);
+    if (cached) {
+      extracted.push({
+        ...base,
+        manifest: cached.manifest,
+        status: cached.manifest ? "ready" : "unknown",
+      });
+      continue;
+    }
+
+    let manifest: ComponentManifest | null = null;
+    // Runtime diagnostics deferred until the static outcome is known: on a
+    // static success they downgrade to non-blocking warnings (the build
+    // proceeds on the static manifest, but a module that crashes at eval must
+    // stay observable); only when static ALSO fails do they surface at their
+    // original severity.
+    const deferred: BuildDiagnostic[] = [];
+
+    // 2. Runtime extract + validate (ground truth), when possible.
+    if (extractManifest && code !== null) {
+      try {
+        const outcome = await extractManifest(code);
+        manifest = validateOutcome(component.path, outcome, deferred);
+      } catch (err) {
+        deferred.push(
+          error(component.path, "runtime", err instanceof Error ? err.message : String(err)),
+        );
+      }
+    }
+
+    // 3. Static AST fallback — the only manifest source on a degraded runtime.
+    //    Runs whenever the runtime path did not resolve a manifest (including
+    //    the `code === null` short-circuit workerd hits).
+    if (!manifest) {
+      const staticDiagnostics: BuildDiagnostic[] = [];
+      const staticManifest = validateOutcome(
+        component.path,
+        staticExtractManifest(component.source, component.path),
+        staticDiagnostics,
+      );
+      if (staticManifest) {
+        manifest = staticManifest;
+        for (const diagnostic of deferred) {
+          diagnostics.push({
+            ...diagnostic,
+            severity: "warning",
+            message: `Manifest resolved statically, but the runtime extractor failed: ${diagnostic.message}`,
+          });
+        }
+      } else {
+        // Both paths failed: surface the runtime's diagnostics (if any) AND the
+        // static extractor's, so the author sees why the manifest is unavailable.
+        diagnostics.push(...deferred, ...staticDiagnostics);
+      }
+    }
+
+    // 4. Record fresh valid manifests best-effort (cache errors never fail).
+    if (manifest && cache) {
+      try {
+        await cache.record({ sourceHash, manifest });
+      } catch {
+        // Intentionally swallowed — the cache is an optimization, not a gate.
+      }
+    }
+
+    extracted.push({
+      ...base,
+      manifest,
+      status: manifest ? "ready" : "unknown",
+    });
+  }
+
+  return { extracted, diagnostics };
+}
+
+/**
+ * Validate a raw {@link ExtractOutcome} (runtime OR static) into a typed
+ * manifest, or push its diagnostics to `sink` and return `null`. Capability
+ * diagnostics map to the `runtime` phase; an invalid manifest is a `runtime`
+ * error naming the schema failures.
+ */
+function validateOutcome(
+  path: string,
+  outcome: ExtractOutcome,
+  sink: BuildDiagnostic[],
+): ComponentManifest | null {
+  if ("diagnostics" in outcome) {
+    for (const diagnostic of outcome.diagnostics) {
+      sink.push(fromCapability(path, diagnostic));
+    }
+    return null;
+  }
+  const parsed = parseComponentManifest(outcome.manifest);
+  if (parsed.ok) return parsed.value;
+  sink.push(error(path, "runtime", `Invalid component manifest: ${parsed.errors.join("; ")}`));
+  return null;
+}
diff --git a/packages/paywall-build/src/fixtures.ts b/packages/paywall-build/src/fixtures.ts
new file mode 100644
index 000000000..a4f11aeb9
--- /dev/null
+++ b/packages/paywall-build/src/fixtures.ts
@@ -0,0 +1,155 @@
+/**
+ * Shared source fixtures for the build tests: a realistic multi-file paywall
+ * fork (entry + two components) plus assorted broken variants. Kept as plain
+ * string maps so a test can drop one into a {@link MemoryFs}.
+ */
+
+/** A component with props, an action, and a `<Slot/>`. */
+export const PRICING_OPTION_TSX = `import { defineComponent, View, Text, Pressable, Slot } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Pricing Option",
+  props: (p) => ({
+    label: p.string().default("Yearly"),
+    price: p.string().default("$99"),
+    highlighted: p.boolean().default(false),
+  }),
+  actions: (a) => ({
+    onSelect: a.action(),
+  }),
+  render: ({ props, actions }) => (
+    <Pressable onPress={actions.onSelect}>
+      <View
+        style={{
+          paddingTop: 16,
+          paddingRight: 16,
+          paddingBottom: 16,
+          paddingLeft: 16,
+          gap: 4,
+          borderTopLeftRadius: 12,
+          borderTopRightRadius: 12,
+          borderBottomRightRadius: 12,
+          borderBottomLeftRadius: 12,
+        }}
+      >
+        <Text style={{ fontSize: 18, fontWeight: "700" }}>{props.label}</Text>
+        <Text style={{ fontSize: 14 }}>{props.price}</Text>
+        <Slot />
+      </View>
+    </Pressable>
+  ),
+});
+`;
+
+/** A simple heading component: a single string prop, no actions, no slot. */
+export const HEADING_TSX = `import { defineComponent, Text } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Heading",
+  props: (p) => ({
+    text: p.string().default("Unlock Pro"),
+  }),
+  render: ({ props }) => (
+    <Text style={{ fontSize: 28, fontWeight: "700" }}>{props.text}</Text>
+  ),
+});
+`;
+
+/**
+ * A component exercising a `ref` prop, `.editor("color").default(...)`, a
+ * `.default(false)` boolean, an action WITH a payload, and a `<Slot/>` — the
+ * shape the AI agent authors most, and the one a degraded runtime must resolve
+ * statically. Reading its `props.product` also trips the product-hook-free
+ * `hostData` path (`ref("product")` ⇒ `["products"]`).
+ */
+export const PRODUCT_CARD_TSX = `import { defineComponent, View, Text, Pressable, Slot } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Product Card",
+  props: (p) => ({
+    product: p.ref("product"),
+    isSelected: p.boolean().default(false),
+    accentColor: p.string().editor("color").default("#16a34a"),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ product: a.string() }),
+  }),
+  render: ({ props, actions }) => (
+    <Pressable onPress={() => actions.onSelect({ product: props.product.id })}>
+      <View style={{ gap: 4 }}>
+        <Text style={{ color: props.accentColor }}>{props.product.displayName}</Text>
+        <Slot />
+      </View>
+    </Pressable>
+  ),
+});
+`;
+
+/**
+ * A slot-bearing component whose `Slot` import is ALIASED (`Slot as S`). The
+ * runtime extractor sees the compiled alias rewritten back to `.Slot`, so it
+ * reports `slot: true`; the static extractor must resolve the alias through the
+ * import bindings to agree — a raw source-text scan would miss it.
+ */
+export const ALIASED_SLOT_TSX = `import { defineComponent, View, Text, Slot as S } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Framed",
+  props: (p) => ({
+    caption: p.string().default("Framed"),
+  }),
+  render: ({ props }) => (
+    <View style={{ gap: 4 }}>
+      <Text style={{ fontSize: 12 }}>{props.caption}</Text>
+      <S />
+    </View>
+  ),
+});
+`;
+
+/** The entry paywall referencing both components (extensionless imports). */
+export const PAYWALL_TSX = `import { definePaywall, Screen, View } from "@voidhash/paywalls";
+import Heading from "./components/heading";
+import PricingOption from "./components/pricing-option";
+
+export default definePaywall({
+  render: () => (
+    <Screen>
+      <View style={{ gap: 12 }}>
+        <Heading text="Unlock Pro" />
+        <PricingOption label="Yearly" price="$99" highlighted />
+      </View>
+    </Screen>
+  ),
+});
+`;
+
+/**
+ * An entry referencing the components WITHOUT passing props — so it still parses
+ * to a composition when the components are degraded (manifest-less), since the
+ * placeholder manifest accepts prop-free, slot-bearing references.
+ */
+export const PAYWALL_PROPLESS_TSX = `import { definePaywall, Screen, View } from "@voidhash/paywalls";
+import Heading from "./components/heading";
+import PricingOption from "./components/pricing-option";
+
+export default definePaywall({
+  render: () => (
+    <Screen>
+      <View style={{ gap: 12 }}>
+        <Heading />
+        <PricingOption />
+      </View>
+    </Screen>
+  ),
+});
+`;
+
+/** A well-formed fork: entry + both components at their canonical paths. */
+export function greenFork(): Record<string, string> {
+  return {
+    "/paywall.tsx": PAYWALL_TSX,
+    "/components/heading.tsx": HEADING_TSX,
+    "/components/pricing-option.tsx": PRICING_OPTION_TSX,
+  };
+}
diff --git a/packages/paywall-build/src/fs.ts b/packages/paywall-build/src/fs.ts
new file mode 100644
index 000000000..f04e32a6c
--- /dev/null
+++ b/packages/paywall-build/src/fs.ts
@@ -0,0 +1,36 @@
+/**
+ * The flat, absolute-POSIX-path filesystem seam the build system reads and
+ * writes through. Every path is an absolute POSIX path (`/paywall.tsx`,
+ * `/components/pricing-option.tsx`); there is no cwd and no `..` traversal — the
+ * build never touches a real disk unless the caller wires a {@link BuildFs} that
+ * does (see `./node`).
+ *
+ * The build orchestration ({@link buildPaywall}) only ever needs the read side
+ * (`read`/`list`/`exists`); the write side exists for the in-memory/real-FS
+ * implementations that host tooling (forks, tests) layer on top.
+ */
+
+/** A file entry as consumed/produced by the interop helpers. */
+export interface BuildFileEntry {
+  readonly path: string;
+  readonly content: string;
+}
+
+/** The filesystem seam every build stage reads through. */
+export interface BuildFs {
+  /** Read a file's text. Rejects (throws) if the path does not exist. */
+  read(path: string): string;
+  /** List absolute paths of files directly under `dir` (non-recursive). */
+  list(dir: string): readonly string[];
+  /** Whether a file exists at `path`. */
+  exists(path: string): boolean;
+  /** Write (create or overwrite) a file. */
+  write(path: string, content: string): void;
+  /** Remove a file. No-op if absent. */
+  remove(path: string): void;
+  /** Rename (move) a file. Rejects (throws) if `from` does not exist. */
+  rename(from: string, to: string): void;
+}
+
+/** The read-only slice of {@link BuildFs} the build stages actually consume. */
+export type BuildReadFs = Pick<BuildFs, "read" | "list" | "exists">;
diff --git a/packages/paywall-build/src/hash.ts b/packages/paywall-build/src/hash.ts
new file mode 100644
index 000000000..d283e2e67
--- /dev/null
+++ b/packages/paywall-build/src/hash.ts
@@ -0,0 +1,104 @@
+/**
+ * Synchronous SHA-256 of UTF-8 source text, returned as 64 lowercase hex chars.
+ *
+ * The content-address of a component's source: the key the build's manifest
+ * cache and any downstream store agree on. It stays SYNC (every caller is sync)
+ * and dependency-free — a textbook FIPS 180-4 implementation, no `crypto` /
+ * `SubtleCrypto` (async-only in the browser). Inputs are KB-sized and hashed
+ * only at build time, so a pure-TS digest is fast enough.
+ *
+ * Reimplemented locally on purpose: `packages/paywall-build` has a hard boundary
+ * against mimic/workspace packages, so it cannot import
+ * `@voidhash/paywall-workspace`'s `hashSource`. The algorithm is identical,
+ * so hashes are byte-for-byte compatible with that package.
+ */
+export function hashSource(input: string): string {
+  return sha256Hex(new TextEncoder().encode(input));
+}
+
+// SHA-256 round constants (first 32 bits of the fractional parts of the cube
+// roots of the first 64 primes).
+const K = new Uint32Array([
+  0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+  0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+  0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+  0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+  0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+  0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+  0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+  0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+
+const rotr = (value: number, bits: number): number =>
+  ((value >>> bits) | (value << (32 - bits))) >>> 0;
+
+/**
+ * Pure synchronous SHA-256 of a byte array, returned as 64 lowercase hex chars.
+ * FIPS 180-4 over 512-bit blocks with standard length-in-bits padding.
+ */
+function sha256Hex(bytes: Uint8Array): string {
+  const h = new Uint32Array([
+    0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+  ]);
+
+  const bitLength = bytes.length * 8;
+  const paddedLength = ((bytes.length + 8) >> 6) * 64 + 64;
+  const message = new Uint8Array(paddedLength);
+  message.set(bytes);
+  message[bytes.length] = 0x80;
+  const view = new DataView(message.buffer);
+  view.setUint32(paddedLength - 4, bitLength >>> 0, false);
+
+  const w = new Uint32Array(64);
+  for (let offset = 0; offset < paddedLength; offset += 64) {
+    for (let t = 0; t < 16; t += 1) {
+      w[t] = view.getUint32(offset + t * 4, false);
+    }
+    for (let t = 16; t < 64; t += 1) {
+      const s0 = rotr(w[t - 15]!, 7) ^ rotr(w[t - 15]!, 18) ^ (w[t - 15]! >>> 3);
+      const s1 = rotr(w[t - 2]!, 17) ^ rotr(w[t - 2]!, 19) ^ (w[t - 2]! >>> 10);
+      w[t] = (w[t - 16]! + s0 + w[t - 7]! + s1) >>> 0;
+    }
+
+    let a = h[0]!;
+    let b = h[1]!;
+    let c = h[2]!;
+    let d = h[3]!;
+    let e = h[4]!;
+    let f = h[5]!;
+    let g = h[6]!;
+    let hh = h[7]!;
+
+    for (let t = 0; t < 64; t += 1) {
+      const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const ch = (e & f) ^ (~e & g);
+      const temp1 = (hh + S1 + ch + K[t]! + w[t]!) >>> 0;
+      const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const maj = (a & b) ^ (a & c) ^ (b & c);
+      const temp2 = (S0 + maj) >>> 0;
+      hh = g;
+      g = f;
+      f = e;
+      e = (d + temp1) >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = (temp1 + temp2) >>> 0;
+    }
+
+    h[0] = (h[0]! + a) >>> 0;
+    h[1] = (h[1]! + b) >>> 0;
+    h[2] = (h[2]! + c) >>> 0;
+    h[3] = (h[3]! + d) >>> 0;
+    h[4] = (h[4]! + e) >>> 0;
+    h[5] = (h[5]! + f) >>> 0;
+    h[6] = (h[6]! + g) >>> 0;
+    h[7] = (h[7]! + hh) >>> 0;
+  }
+
+  let hex = "";
+  for (let i = 0; i < 8; i += 1) {
+    hex += h[i]!.toString(16).padStart(8, "0");
+  }
+  return hex;
+}
diff --git a/packages/paywall-build/src/imports.ts b/packages/paywall-build/src/imports.ts
new file mode 100644
index 000000000..82f6b5619
--- /dev/null
+++ b/packages/paywall-build/src/imports.ts
@@ -0,0 +1,234 @@
+import ts from "typescript";
+import type { BuildDiagnostic } from "./diagnostics.ts";
+import { error } from "./diagnostics.ts";
+import type { BuildReadFs } from "./fs.ts";
+import { basename, canonicalPathFor, dirname, joinPath } from "./paths.ts";
+
+/** The root SDK specifier the surface is imported from. */
+const ROOT_SPECIFIER = "@voidhash/paywalls";
+/** The catalog namespace prefix (pass-through — resolved by a later stage). */
+const CATALOG_PREFIX = "catalog:";
+
+/** A component discovered by the imports stage. */
+export interface ResolvedComponent {
+  /** Absolute POSIX path of the component file on the {@link BuildFs}. */
+  readonly absPath: string;
+  /** Canonical document-relative path (`components/<basename>.tsx`). */
+  readonly path: string;
+  /** The component's source text. */
+  readonly source: string;
+  /** True when reached via an import from the entry; false for library files. */
+  readonly imported: boolean;
+}
+
+/** The imports stage output. */
+export interface ResolveImportsResult {
+  /** The parsed entry source (read once, reused by later stages). */
+  readonly entrySource: string;
+  /** Absolute directory of the entry file. */
+  readonly entryDir: string;
+  /** Every component in the build set, ordered by canonical path. */
+  readonly components: readonly ResolvedComponent[];
+  readonly diagnostics: readonly BuildDiagnostic[];
+}
+
+/** 1-based line/column of a node's start in a source file. */
+function positionOf(source: ts.SourceFile, node: ts.Node): { line: number; column: number } {
+  const { line, character } = source.getLineAndCharacterOfPosition(node.getStart(source));
+  return { line: line + 1, column: character + 1 };
+}
+
+/**
+ * Resolve a relative specifier against the FS, probing `.tsx` then `.ts` then
+ * the bare path. Returns the absolute path of the first hit, or `null`.
+ */
+function resolveRelative(fs: BuildReadFs, fromDir: string, specifier: string): string | null {
+  let base: string;
+  try {
+    base = joinPath(fromDir, specifier);
+  } catch {
+    return null;
+  }
+  const candidates = base.endsWith(".tsx") || base.endsWith(".ts")
+    ? [base]
+    : [`${base}.tsx`, `${base}.ts`, base];
+  for (const candidate of candidates) {
+    if (fs.exists(candidate)) return candidate;
+  }
+  return null;
+}
+
+/**
+ * Stage 1 — imports.
+ *
+ * Parses the entry with `ts.createSourceFile` (NEVER executes it), collects its
+ * import declarations, and resolves each to the component set:
+ *
+ * - `@voidhash/paywalls` — the SDK surface, ok.
+ * - `@voidhash/paywalls/*` (e.g. `/compose`) — error, positioned at the import
+ *   (only the root SDK surface is importable; a subpath import is rejected here
+ *   with a precise import position).
+ * - `catalog:<slug>` — pass-through (a catalog reference resolved downstream).
+ * - relative — resolved against the FS with `.tsx`/`.ts` probing; an
+ *   unresolvable relative import is an error at the import.
+ * - any other bare specifier — error.
+ *
+ * Component files reached this way ALSO have their own imports scanned: a
+ * component may import only `@voidhash/paywalls` — a relative import FROM a
+ * component file is a v1 error (a `resolveImport` seam is kept for the future).
+ *
+ * Finally, any `*.tsx` under `<entryDir>/components/` that was not imported is
+ * added as a LIBRARY entry (built + carried in artifacts, absent from the
+ * composition).
+ */
+export function resolveImports(fs: BuildReadFs, entryPath: string): ResolveImportsResult {
+  const diagnostics: BuildDiagnostic[] = [];
+  const entryDir = dirname(entryPath);
+  const entrySource = fs.read(entryPath);
+  const entryFile = ts.createSourceFile(
+    basename(entryPath),
+    entrySource,
+    ts.ScriptTarget.Latest,
+    /* setParentNodes */ true,
+    ts.ScriptKind.TSX,
+  );
+
+  // absPath → resolved component (dedup across the entry + component scans).
+  const components = new Map<string, ResolvedComponent>();
+
+  for (const statement of entryFile.statements) {
+    if (!ts.isImportDeclaration(statement)) continue;
+    const specNode = statement.moduleSpecifier;
+    if (!ts.isStringLiteral(specNode)) continue;
+    const specifier = specNode.text;
+    const pos = positionOf(entryFile, specNode);
+
+    if (specifier === ROOT_SPECIFIER) continue;
+    if (specifier.startsWith(`${ROOT_SPECIFIER}/`)) {
+      diagnostics.push(
+        error(
+          entryPath,
+          "imports",
+          `Cannot import from "${specifier}" — a paywall file imports the surface from "${ROOT_SPECIFIER}" and components by relative path.`,
+          pos,
+        ),
+      );
+      continue;
+    }
+    if (specifier.startsWith(CATALOG_PREFIX)) continue;
+    if (specifier.startsWith("./") || specifier.startsWith("../")) {
+      const absPath = resolveRelative(fs, entryDir, specifier);
+      if (absPath === null) {
+        diagnostics.push(
+          error(
+            entryPath,
+            "imports",
+            `Cannot resolve component import "${specifier}".`,
+            pos,
+          ),
+        );
+        continue;
+      }
+      if (!components.has(absPath)) {
+        components.set(absPath, {
+          absPath,
+          path: canonicalPathFor(entryDir, absPath),
+          source: fs.read(absPath),
+          imported: true,
+        });
+      }
+      continue;
+    }
+    diagnostics.push(
+      error(
+        entryPath,
+        "imports",
+        `Cannot import from "${specifier}" — only "${ROOT_SPECIFIER}", relative components, and "catalog:" are allowed.`,
+        pos,
+      ),
+    );
+  }
+
+  // Component-file imports: only @voidhash/paywalls is legal in v1.
+  for (const component of [...components.values()]) {
+    validateComponentImports(component, diagnostics);
+  }
+
+  // Library files: unimported *.tsx directly under <entryDir>/components/.
+  const componentsDir = joinPath(entryDir, "components");
+  if (dirExists(fs, componentsDir)) {
+    for (const absPath of fs.list(componentsDir)) {
+      if (!absPath.endsWith(".tsx")) continue;
+      if (components.has(absPath)) continue;
+      const component: ResolvedComponent = {
+        absPath,
+        path: canonicalPathFor(entryDir, absPath),
+        source: fs.read(absPath),
+        imported: false,
+      };
+      components.set(absPath, component);
+      validateComponentImports(component, diagnostics);
+    }
+  }
+
+  const ordered = [...components.values()].sort((a, b) =>
+    a.path < b.path ? -1 : a.path > b.path ? 1 : 0,
+  );
+
+  return { entrySource, entryDir, components: ordered, diagnostics };
+}
+
+/**
+ * Scan a component file's imports. A component may import ONLY
+ * `@voidhash/paywalls`; a relative import is a v1 error. The relative branch is
+ * the future `resolveImport` seam (cross-component imports).
+ */
+function validateComponentImports(
+  component: ResolvedComponent,
+  diagnostics: BuildDiagnostic[],
+): void {
+  const file = ts.createSourceFile(
+    basename(component.absPath),
+    component.source,
+    ts.ScriptTarget.Latest,
+    true,
+    ts.ScriptKind.TSX,
+  );
+  for (const statement of file.statements) {
+    if (!ts.isImportDeclaration(statement)) continue;
+    const specNode = statement.moduleSpecifier;
+    if (!ts.isStringLiteral(specNode)) continue;
+    const specifier = specNode.text;
+    if (specifier === ROOT_SPECIFIER) continue;
+    if (specifier.startsWith("./") || specifier.startsWith("../")) {
+      const { line, character } = file.getLineAndCharacterOfPosition(specNode.getStart(file));
+      diagnostics.push(
+        error(
+          component.path,
+          "imports",
+          `A component may only import "${ROOT_SPECIFIER}"; relative imports from a component are not supported.`,
+          { line: line + 1, column: character + 1 },
+        ),
+      );
+      continue;
+    }
+    const { line, character } = file.getLineAndCharacterOfPosition(specNode.getStart(file));
+    diagnostics.push(
+      error(
+        component.path,
+        "imports",
+        `A component may only import "${ROOT_SPECIFIER}"; "${specifier}" is not allowed.`,
+        { line: line + 1, column: character + 1 },
+      ),
+    );
+  }
+}
+
+/** Whether a directory has any listed files (the flat FS has no real dir nodes). */
+function dirExists(fs: BuildReadFs, dir: string): boolean {
+  try {
+    return fs.list(dir).length > 0;
+  } catch {
+    return false;
+  }
+}
diff --git a/packages/paywall-build/src/index.ts b/packages/paywall-build/src/index.ts
new file mode 100644
index 000000000..9f00ab8aa
--- /dev/null
+++ b/packages/paywall-build/src/index.ts
@@ -0,0 +1,57 @@
+/**
+ * `@voidhash/paywall-build` — the build system for paywall code
+ * components.
+ *
+ * Takes an entry `paywall.tsx` plus its component files and runs the pipeline:
+ * resolve imports → typecheck e2e (real cross-file TypeScript) → compile
+ * components → extract §2 manifests → cross-validate → emit artifacts (the
+ * component set + validated manifests). The isolation-owning, environment-
+ * specific work (esbuild transform, sandboxed evaluation, typecheck lib assets)
+ * is threaded in via {@link BuildCapabilities}, so this package stays pure.
+ *
+ * HARD BOUNDARY: zero mimic imports — no `mimic-core`, `mimic-schema`, or
+ * `paywall-workspace`. The only paywall dependency is the OSS SDK
+ * `@voidhash/paywalls` (`/schema`, `/sandbox-dts`). The Node build capabilities
+ * (native esbuild + real-FS) live behind the `./node` subpath so
+ * `node:fs`/`esbuild` never land in a browser/workerd bundle of this entry.
+ */
+
+// Orchestration.
+export { buildPaywall } from "./build.ts";
+
+// Filesystem seam + in-memory implementation.
+export { MemoryFs } from "./memory-fs.ts";
+export type { BuildFileEntry, BuildFs, BuildReadFs } from "./fs.ts";
+
+// Diagnostics.
+export {
+  error,
+  hasErrors,
+  info,
+  warning,
+  type BuildDiagnostic,
+  type BuildPhase,
+  type BuildSeverity,
+} from "./diagnostics.ts";
+
+// Content-address hashing (SHA-256 hex; compatible with paywall-workspace).
+export { hashSource } from "./hash.ts";
+
+// Core contract types.
+export type {
+  BuildArtifacts,
+  BuildCapabilities,
+  BuildDiagnosticInput,
+  BuildResult,
+  CachedManifest,
+  CompileOutcome,
+  ComponentArtifact,
+  ComponentStatus,
+  ExtractOutcome,
+  ManifestCache,
+  ManifestCacheRow,
+  TypecheckOptions,
+} from "./types.ts";
+
+// Re-exported OSS artifact types (so consumers stay on one specifier).
+export type { ComponentManifest } from "@voidhash/paywalls/schema";
diff --git a/packages/paywall-build/src/lib/index.ts b/packages/paywall-build/src/lib/index.ts
new file mode 100644
index 000000000..cee8a4968
--- /dev/null
+++ b/packages/paywall-build/src/lib/index.ts
@@ -0,0 +1,124 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+// Regenerate with `pnpm --filter @voidhash/paywall-build generate:libs`.
+
+import { lib_decorators_d_ts } from "./lib_decorators_d_ts.ts";
+import { lib_decorators_legacy_d_ts } from "./lib_decorators_legacy_d_ts.ts";
+import { lib_es2015_collection_d_ts } from "./lib_es2015_collection_d_ts.ts";
+import { lib_es2015_core_d_ts } from "./lib_es2015_core_d_ts.ts";
+import { lib_es2015_d_ts } from "./lib_es2015_d_ts.ts";
+import { lib_es2015_generator_d_ts } from "./lib_es2015_generator_d_ts.ts";
+import { lib_es2015_iterable_d_ts } from "./lib_es2015_iterable_d_ts.ts";
+import { lib_es2015_promise_d_ts } from "./lib_es2015_promise_d_ts.ts";
+import { lib_es2015_proxy_d_ts } from "./lib_es2015_proxy_d_ts.ts";
+import { lib_es2015_reflect_d_ts } from "./lib_es2015_reflect_d_ts.ts";
+import { lib_es2015_symbol_d_ts } from "./lib_es2015_symbol_d_ts.ts";
+import { lib_es2015_symbol_wellknown_d_ts } from "./lib_es2015_symbol_wellknown_d_ts.ts";
+import { lib_es2016_array_include_d_ts } from "./lib_es2016_array_include_d_ts.ts";
+import { lib_es2016_d_ts } from "./lib_es2016_d_ts.ts";
+import { lib_es2016_intl_d_ts } from "./lib_es2016_intl_d_ts.ts";
+import { lib_es2017_arraybuffer_d_ts } from "./lib_es2017_arraybuffer_d_ts.ts";
+import { lib_es2017_d_ts } from "./lib_es2017_d_ts.ts";
+import { lib_es2017_date_d_ts } from "./lib_es2017_date_d_ts.ts";
+import { lib_es2017_intl_d_ts } from "./lib_es2017_intl_d_ts.ts";
+import { lib_es2017_object_d_ts } from "./lib_es2017_object_d_ts.ts";
+import { lib_es2017_sharedmemory_d_ts } from "./lib_es2017_sharedmemory_d_ts.ts";
+import { lib_es2017_string_d_ts } from "./lib_es2017_string_d_ts.ts";
+import { lib_es2017_typedarrays_d_ts } from "./lib_es2017_typedarrays_d_ts.ts";
+import { lib_es2018_asyncgenerator_d_ts } from "./lib_es2018_asyncgenerator_d_ts.ts";
+import { lib_es2018_asynciterable_d_ts } from "./lib_es2018_asynciterable_d_ts.ts";
+import { lib_es2018_d_ts } from "./lib_es2018_d_ts.ts";
+import { lib_es2018_intl_d_ts } from "./lib_es2018_intl_d_ts.ts";
+import { lib_es2018_promise_d_ts } from "./lib_es2018_promise_d_ts.ts";
+import { lib_es2018_regexp_d_ts } from "./lib_es2018_regexp_d_ts.ts";
+import { lib_es2019_array_d_ts } from "./lib_es2019_array_d_ts.ts";
+import { lib_es2019_d_ts } from "./lib_es2019_d_ts.ts";
+import { lib_es2019_intl_d_ts } from "./lib_es2019_intl_d_ts.ts";
+import { lib_es2019_object_d_ts } from "./lib_es2019_object_d_ts.ts";
+import { lib_es2019_string_d_ts } from "./lib_es2019_string_d_ts.ts";
+import { lib_es2019_symbol_d_ts } from "./lib_es2019_symbol_d_ts.ts";
+import { lib_es2020_bigint_d_ts } from "./lib_es2020_bigint_d_ts.ts";
+import { lib_es2020_d_ts } from "./lib_es2020_d_ts.ts";
+import { lib_es2020_date_d_ts } from "./lib_es2020_date_d_ts.ts";
+import { lib_es2020_intl_d_ts } from "./lib_es2020_intl_d_ts.ts";
+import { lib_es2020_number_d_ts } from "./lib_es2020_number_d_ts.ts";
+import { lib_es2020_promise_d_ts } from "./lib_es2020_promise_d_ts.ts";
+import { lib_es2020_sharedmemory_d_ts } from "./lib_es2020_sharedmemory_d_ts.ts";
+import { lib_es2020_string_d_ts } from "./lib_es2020_string_d_ts.ts";
+import { lib_es2020_symbol_wellknown_d_ts } from "./lib_es2020_symbol_wellknown_d_ts.ts";
+import { lib_es2021_d_ts } from "./lib_es2021_d_ts.ts";
+import { lib_es2021_intl_d_ts } from "./lib_es2021_intl_d_ts.ts";
+import { lib_es2021_promise_d_ts } from "./lib_es2021_promise_d_ts.ts";
+import { lib_es2021_string_d_ts } from "./lib_es2021_string_d_ts.ts";
+import { lib_es2021_weakref_d_ts } from "./lib_es2021_weakref_d_ts.ts";
+import { lib_es2022_array_d_ts } from "./lib_es2022_array_d_ts.ts";
+import { lib_es2022_d_ts } from "./lib_es2022_d_ts.ts";
+import { lib_es2022_error_d_ts } from "./lib_es2022_error_d_ts.ts";
+import { lib_es2022_intl_d_ts } from "./lib_es2022_intl_d_ts.ts";
+import { lib_es2022_object_d_ts } from "./lib_es2022_object_d_ts.ts";
+import { lib_es2022_regexp_d_ts } from "./lib_es2022_regexp_d_ts.ts";
+import { lib_es2022_string_d_ts } from "./lib_es2022_string_d_ts.ts";
+import { lib_es5_d_ts } from "./lib_es5_d_ts.ts";
+
+/** Canonical lib file name → d.ts contents. */
+export const LIB_ASSETS: Readonly<Record<string, string>> = {
+  "lib.decorators.d.ts": lib_decorators_d_ts,
+  "lib.decorators.legacy.d.ts": lib_decorators_legacy_d_ts,
+  "lib.es2015.collection.d.ts": lib_es2015_collection_d_ts,
+  "lib.es2015.core.d.ts": lib_es2015_core_d_ts,
+  "lib.es2015.d.ts": lib_es2015_d_ts,
+  "lib.es2015.generator.d.ts": lib_es2015_generator_d_ts,
+  "lib.es2015.iterable.d.ts": lib_es2015_iterable_d_ts,
+  "lib.es2015.promise.d.ts": lib_es2015_promise_d_ts,
+  "lib.es2015.proxy.d.ts": lib_es2015_proxy_d_ts,
+  "lib.es2015.reflect.d.ts": lib_es2015_reflect_d_ts,
+  "lib.es2015.symbol.d.ts": lib_es2015_symbol_d_ts,
+  "lib.es2015.symbol.wellknown.d.ts": lib_es2015_symbol_wellknown_d_ts,
+  "lib.es2016.array.include.d.ts": lib_es2016_array_include_d_ts,
+  "lib.es2016.d.ts": lib_es2016_d_ts,
+  "lib.es2016.intl.d.ts": lib_es2016_intl_d_ts,
+  "lib.es2017.arraybuffer.d.ts": lib_es2017_arraybuffer_d_ts,
+  "lib.es2017.d.ts": lib_es2017_d_ts,
+  "lib.es2017.date.d.ts": lib_es2017_date_d_ts,
+  "lib.es2017.intl.d.ts": lib_es2017_intl_d_ts,
+  "lib.es2017.object.d.ts": lib_es2017_object_d_ts,
+  "lib.es2017.sharedmemory.d.ts": lib_es2017_sharedmemory_d_ts,
+  "lib.es2017.string.d.ts": lib_es2017_string_d_ts,
+  "lib.es2017.typedarrays.d.ts": lib_es2017_typedarrays_d_ts,
+  "lib.es2018.asyncgenerator.d.ts": lib_es2018_asyncgenerator_d_ts,
+  "lib.es2018.asynciterable.d.ts": lib_es2018_asynciterable_d_ts,
+  "lib.es2018.d.ts": lib_es2018_d_ts,
+  "lib.es2018.intl.d.ts": lib_es2018_intl_d_ts,
+  "lib.es2018.promise.d.ts": lib_es2018_promise_d_ts,
+  "lib.es2018.regexp.d.ts": lib_es2018_regexp_d_ts,
+  "lib.es2019.array.d.ts": lib_es2019_array_d_ts,
+  "lib.es2019.d.ts": lib_es2019_d_ts,
+  "lib.es2019.intl.d.ts": lib_es2019_intl_d_ts,
+  "lib.es2019.object.d.ts": lib_es2019_object_d_ts,
+  "lib.es2019.string.d.ts": lib_es2019_string_d_ts,
+  "lib.es2019.symbol.d.ts": lib_es2019_symbol_d_ts,
+  "lib.es2020.bigint.d.ts": lib_es2020_bigint_d_ts,
+  "lib.es2020.d.ts": lib_es2020_d_ts,
+  "lib.es2020.date.d.ts": lib_es2020_date_d_ts,
+  "lib.es2020.intl.d.ts": lib_es2020_intl_d_ts,
+  "lib.es2020.number.d.ts": lib_es2020_number_d_ts,
+  "lib.es2020.promise.d.ts": lib_es2020_promise_d_ts,
+  "lib.es2020.sharedmemory.d.ts": lib_es2020_sharedmemory_d_ts,
+  "lib.es2020.string.d.ts": lib_es2020_string_d_ts,
+  "lib.es2020.symbol.wellknown.d.ts": lib_es2020_symbol_wellknown_d_ts,
+  "lib.es2021.d.ts": lib_es2021_d_ts,
+  "lib.es2021.intl.d.ts": lib_es2021_intl_d_ts,
+  "lib.es2021.promise.d.ts": lib_es2021_promise_d_ts,
+  "lib.es2021.string.d.ts": lib_es2021_string_d_ts,
+  "lib.es2021.weakref.d.ts": lib_es2021_weakref_d_ts,
+  "lib.es2022.array.d.ts": lib_es2022_array_d_ts,
+  "lib.es2022.d.ts": lib_es2022_d_ts,
+  "lib.es2022.error.d.ts": lib_es2022_error_d_ts,
+  "lib.es2022.intl.d.ts": lib_es2022_intl_d_ts,
+  "lib.es2022.object.d.ts": lib_es2022_object_d_ts,
+  "lib.es2022.regexp.d.ts": lib_es2022_regexp_d_ts,
+  "lib.es2022.string.d.ts": lib_es2022_string_d_ts,
+  "lib.es5.d.ts": lib_es5_d_ts,
+};
+
+/** The default (root) lib the typecheck stage loads. */
+export const DEFAULT_LIB = "lib.es2022.d.ts";
diff --git a/packages/paywall-build/src/lib/lib_decorators_d_ts.ts b/packages/paywall-build/src/lib/lib_decorators_d_ts.ts
new file mode 100644
index 000000000..48e24d115
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_decorators_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_decorators_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/**\n * The decorator context types provided to class element decorators.\n */\ntype ClassMemberDecoratorContext =\n    | ClassMethodDecoratorContext\n    | ClassGetterDecoratorContext\n    | ClassSetterDecoratorContext\n    | ClassFieldDecoratorContext\n    | ClassAccessorDecoratorContext;\n\n/**\n * The decorator context types provided to any decorator.\n */\ntype DecoratorContext =\n    | ClassDecoratorContext\n    | ClassMemberDecoratorContext;\n\ntype DecoratorMetadataObject = Record<PropertyKey, unknown> & object;\n\ntype DecoratorMetadata = typeof globalThis extends { Symbol: { readonly metadata: symbol; }; } ? DecoratorMetadataObject : DecoratorMetadataObject | undefined;\n\n/**\n * Context provided to a class decorator.\n * @template Class The type of the decorated class associated with this context.\n */\ninterface ClassDecoratorContext<\n    Class extends abstract new (...args: any) => any = abstract new (...args: any) => any,\n> {\n    /** The kind of element that was decorated. */\n    readonly kind: \"class\";\n\n    /** The name of the decorated class. */\n    readonly name: string | undefined;\n\n    /**\n     * Adds a callback to be invoked after the class definition has been finalized.\n     *\n     * @example\n     * ```ts\n     * function customElement(name: string): ClassDecoratorFunction {\n     *   return (target, context) => {\n     *     context.addInitializer(function () {\n     *       customElements.define(name, this);\n     *     });\n     *   }\n     * }\n     *\n     * @customElement(\"my-element\")\n     * class MyElement {}\n     * ```\n     */\n    addInitializer(initializer: (this: Class) => void): void;\n\n    readonly metadata: DecoratorMetadata;\n}\n\n/**\n * Context provided to a class method decorator.\n * @template This The type on which the class element will be defined. For a static class element, this will be\n * the type of the constructor. For a non-static class element, this will be the type of the instance.\n * @template Value The type of the decorated class method.\n */\ninterface ClassMethodDecoratorContext<\n    This = unknown,\n    Value extends (this: This, ...args: any) => any = (this: This, ...args: any) => any,\n> {\n    /** The kind of class element that was decorated. */\n    readonly kind: \"method\";\n\n    /** The name of the decorated class element. */\n    readonly name: string | symbol;\n\n    /** A value indicating whether the class element is a static (`true`) or instance (`false`) element. */\n    readonly static: boolean;\n\n    /** A value indicating whether the class element has a private name. */\n    readonly private: boolean;\n\n    /** An object that can be used to access the current value of the class element at runtime. */\n    readonly access: {\n        /**\n         * Determines whether an object has a property with the same name as the decorated element.\n         */\n        has(object: This): boolean;\n        /**\n         * Gets the current value of the method from the provided object.\n         *\n         * @example\n         * let fn = context.access.get(instance);\n         */\n        get(object: This): Value;\n    };\n\n    /**\n     * Adds a callback to be invoked either after static methods are defined but before\n     * static initializers are run (when decorating a `static` element), or before instance\n     * initializers are run (when decorating a non-`static` element).\n     *\n     * @example\n     * ```ts\n     * const bound: ClassMethodDecoratorFunction = (value, context) {\n     *   if (context.private) throw new TypeError(\"Not supported on private methods.\");\n     *   context.addInitializer(function () {\n     *     this[context.name] = this[context.name].bind(this);\n     *   });\n     * }\n     *\n     * class C {\n     *   message = \"Hello\";\n     *\n     *   @bound\n     *   m() {\n     *     console.log(this.message);\n     *   }\n     * }\n     * ```\n     */\n    addInitializer(initializer: (this: This) => void): void;\n\n    readonly metadata: DecoratorMetadata;\n}\n\n/**\n * Context provided to a class getter decorator.\n * @template This The type on which the class element will be defined. For a static class element, this will be\n * the type of the constructor. For a non-static class element, this will be the type of the instance.\n * @template Value The property type of the decorated class getter.\n */\ninterface ClassGetterDecoratorContext<\n    This = unknown,\n    Value = unknown,\n> {\n    /** The kind of class element that was decorated. */\n    readonly kind: \"getter\";\n\n    /** The name of the decorated class element. */\n    readonly name: string | symbol;\n\n    /** A value indicating whether the class element is a static (`true`) or instance (`false`) element. */\n    readonly static: boolean;\n\n    /** A value indicating whether the class element has a private name. */\n    readonly private: boolean;\n\n    /** An object that can be used to access the current value of the class element at runtime. */\n    readonly access: {\n        /**\n         * Determines whether an object has a property with the same name as the decorated element.\n         */\n        has(object: This): boolean;\n        /**\n         * Invokes the getter on the provided object.\n         *\n         * @example\n         * let value = context.access.get(instance);\n         */\n        get(object: This): Value;\n    };\n\n    /**\n     * Adds a callback to be invoked either after static methods are defined but before\n     * static initializers are run (when decorating a `static` element), or before instance\n     * initializers are run (when decorating a non-`static` element).\n     */\n    addInitializer(initializer: (this: This) => void): void;\n\n    readonly metadata: DecoratorMetadata;\n}\n\n/**\n * Context provided to a class setter decorator.\n * @template This The type on which the class element will be defined. For a static class element, this will be\n * the type of the constructor. For a non-static class element, this will be the type of the instance.\n * @template Value The type of the decorated class setter.\n */\ninterface ClassSetterDecoratorContext<\n    This = unknown,\n    Value = unknown,\n> {\n    /** The kind of class element that was decorated. */\n    readonly kind: \"setter\";\n\n    /** The name of the decorated class element. */\n    readonly name: string | symbol;\n\n    /** A value indicating whether the class element is a static (`true`) or instance (`false`) element. */\n    readonly static: boolean;\n\n    /** A value indicating whether the class element has a private name. */\n    readonly private: boolean;\n\n    /** An object that can be used to access the current value of the class element at runtime. */\n    readonly access: {\n        /**\n         * Determines whether an object has a property with the same name as the decorated element.\n         */\n        has(object: This): boolean;\n        /**\n         * Invokes the setter on the provided object.\n         *\n         * @example\n         * context.access.set(instance, value);\n         */\n        set(object: This, value: Value): void;\n    };\n\n    /**\n     * Adds a callback to be invoked either after static methods are defined but before\n     * static initializers are run (when decorating a `static` element), or before instance\n     * initializers are run (when decorating a non-`static` element).\n     */\n    addInitializer(initializer: (this: This) => void): void;\n\n    readonly metadata: DecoratorMetadata;\n}\n\n/**\n * Context provided to a class `accessor` field decorator.\n * @template This The type on which the class element will be defined. For a static class element, this will be\n * the type of the constructor. For a non-static class element, this will be the type of the instance.\n * @template Value The type of decorated class field.\n */\ninterface ClassAccessorDecoratorContext<\n    This = unknown,\n    Value = unknown,\n> {\n    /** The kind of class element that was decorated. */\n    readonly kind: \"accessor\";\n\n    /** The name of the decorated class element. */\n    readonly name: string | symbol;\n\n    /** A value indicating whether the class element is a static (`true`) or instance (`false`) element. */\n    readonly static: boolean;\n\n    /** A value indicating whether the class element has a private name. */\n    readonly private: boolean;\n\n    /** An object that can be used to access the current value of the class element at runtime. */\n    readonly access: {\n        /**\n         * Determines whether an object has a property with the same name as the decorated element.\n         */\n        has(object: This): boolean;\n\n        /**\n         * Invokes the getter on the provided object.\n         *\n         * @example\n         * let value = context.access.get(instance);\n         */\n        get(object: This): Value;\n\n        /**\n         * Invokes the setter on the provided object.\n         *\n         * @example\n         * context.access.set(instance, value);\n         */\n        set(object: This, value: Value): void;\n    };\n\n    /**\n     * Adds a callback to be invoked immediately after the auto `accessor` being\n     * decorated is initialized (regardless if the `accessor` is `static` or not).\n     */\n    addInitializer(initializer: (this: This) => void): void;\n\n    readonly metadata: DecoratorMetadata;\n}\n\n/**\n * Describes the target provided to class `accessor` field decorators.\n * @template This The `this` type to which the target applies.\n * @template Value The property type for the class `accessor` field.\n */\ninterface ClassAccessorDecoratorTarget<This, Value> {\n    /**\n     * Invokes the getter that was defined prior to decorator application.\n     *\n     * @example\n     * let value = target.get.call(instance);\n     */\n    get(this: This): Value;\n\n    /**\n     * Invokes the setter that was defined prior to decorator application.\n     *\n     * @example\n     * target.set.call(instance, value);\n     */\n    set(this: This, value: Value): void;\n}\n\n/**\n * Describes the allowed return value from a class `accessor` field decorator.\n * @template This The `this` type to which the target applies.\n * @template Value The property type for the class `accessor` field.\n */\ninterface ClassAccessorDecoratorResult<This, Value> {\n    /**\n     * An optional replacement getter function. If not provided, the existing getter function is used instead.\n     */\n    get?(this: This): Value;\n\n    /**\n     * An optional replacement setter function. If not provided, the existing setter function is used instead.\n     */\n    set?(this: This, value: Value): void;\n\n    /**\n     * An optional initializer mutator that is invoked when the underlying field initializer is evaluated.\n     * @param value The incoming initializer value.\n     * @returns The replacement initializer value.\n     */\n    init?(this: This, value: Value): Value;\n}\n\n/**\n * Context provided to a class field decorator.\n * @template This The type on which the class element will be defined. For a static class element, this will be\n * the type of the constructor. For a non-static class element, this will be the type of the instance.\n * @template Value The type of the decorated class field.\n */\ninterface ClassFieldDecoratorContext<\n    This = unknown,\n    Value = unknown,\n> {\n    /** The kind of class element that was decorated. */\n    readonly kind: \"field\";\n\n    /** The name of the decorated class element. */\n    readonly name: string | symbol;\n\n    /** A value indicating whether the class element is a static (`true`) or instance (`false`) element. */\n    readonly static: boolean;\n\n    /** A value indicating whether the class element has a private name. */\n    readonly private: boolean;\n\n    /** An object that can be used to access the current value of the class element at runtime. */\n    readonly access: {\n        /**\n         * Determines whether an object has a property with the same name as the decorated element.\n         */\n        has(object: This): boolean;\n\n        /**\n         * Gets the value of the field on the provided object.\n         */\n        get(object: This): Value;\n\n        /**\n         * Sets the value of the field on the provided object.\n         */\n        set(object: This, value: Value): void;\n    };\n\n    /**\n     * Adds a callback to be invoked immediately after the field being decorated\n     * is initialized (regardless if the field is `static` or not).\n     */\n    addInitializer(initializer: (this: This) => void): void;\n\n    readonly metadata: DecoratorMetadata;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_decorators_legacy_d_ts.ts b/packages/paywall-build/src/lib/lib_decorators_legacy_d_ts.ts
new file mode 100644
index 000000000..9045d3ac0
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_decorators_legacy_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_decorators_legacy_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare type ClassDecorator = <TFunction extends Function>(target: TFunction) => TFunction | void;\ndeclare type PropertyDecorator = (target: Object, propertyKey: string | symbol) => void;\ndeclare type MethodDecorator = <T>(target: Object, propertyKey: string | symbol, descriptor: TypedPropertyDescriptor<T>) => TypedPropertyDescriptor<T> | void;\ndeclare type ParameterDecorator = (target: Object, propertyKey: string | symbol | undefined, parameterIndex: number) => void;\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_collection_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_collection_d_ts.ts
new file mode 100644
index 000000000..c47e0fd31
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_collection_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_collection_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface Map<K, V> {\n    /**\n     * Removes all elements from the Map.\n     */\n    clear(): void;\n    /**\n     * @returns true if an element in the Map existed and has been removed, or false if the element does not exist.\n     */\n    delete(key: K): boolean;\n    /**\n     * Executes a provided function once per each key/value pair in the Map, in insertion order.\n     */\n    forEach(callbackfn: (value: V, key: K, map: Map<K, V>) => void, thisArg?: any): void;\n    /**\n     * Returns a specified element from the Map object. If the value that is associated to the provided key is an object, then you will get a reference to that object and any change made to that object will effectively modify it inside the Map.\n     * @returns Returns the element associated with the specified key. If no element is associated with the specified key, undefined is returned.\n     */\n    get(key: K): V | undefined;\n    /**\n     * @returns boolean indicating whether an element with the specified key exists or not.\n     */\n    has(key: K): boolean;\n    /**\n     * Adds a new element with a specified key and value to the Map. If an element with the same key already exists, the element will be updated.\n     */\n    set(key: K, value: V): this;\n    /**\n     * @returns the number of elements in the Map.\n     */\n    readonly size: number;\n}\n\ninterface MapConstructor {\n    new (): Map<any, any>;\n    new <K, V>(entries?: readonly (readonly [K, V])[] | null): Map<K, V>;\n    readonly prototype: Map<any, any>;\n}\ndeclare var Map: MapConstructor;\n\ninterface ReadonlyMap<K, V> {\n    forEach(callbackfn: (value: V, key: K, map: ReadonlyMap<K, V>) => void, thisArg?: any): void;\n    get(key: K): V | undefined;\n    has(key: K): boolean;\n    readonly size: number;\n}\n\ninterface WeakMap<K extends WeakKey, V> {\n    /**\n     * Removes the specified element from the WeakMap.\n     * @returns true if the element was successfully removed, or false if it was not present.\n     */\n    delete(key: K): boolean;\n    /**\n     * @returns a specified element.\n     */\n    get(key: K): V | undefined;\n    /**\n     * @returns a boolean indicating whether an element with the specified key exists or not.\n     */\n    has(key: K): boolean;\n    /**\n     * Adds a new element with a specified key and value.\n     * @param key Must be an object or symbol.\n     */\n    set(key: K, value: V): this;\n}\n\ninterface WeakMapConstructor {\n    new <K extends WeakKey = WeakKey, V = any>(entries?: readonly (readonly [K, V])[] | null): WeakMap<K, V>;\n    readonly prototype: WeakMap<WeakKey, any>;\n}\ndeclare var WeakMap: WeakMapConstructor;\n\ninterface Set<T> {\n    /**\n     * Appends a new element with a specified value to the end of the Set.\n     */\n    add(value: T): this;\n    /**\n     * Removes all elements from the Set.\n     */\n    clear(): void;\n    /**\n     * Removes a specified value from the Set.\n     * @returns Returns true if an element in the Set existed and has been removed, or false if the element does not exist.\n     */\n    delete(value: T): boolean;\n    /**\n     * Executes a provided function once per each value in the Set object, in insertion order.\n     */\n    forEach(callbackfn: (value: T, value2: T, set: Set<T>) => void, thisArg?: any): void;\n    /**\n     * @returns a boolean indicating whether an element with the specified value exists in the Set or not.\n     */\n    has(value: T): boolean;\n    /**\n     * @returns the number of (unique) elements in Set.\n     */\n    readonly size: number;\n}\n\ninterface SetConstructor {\n    new <T = any>(values?: readonly T[] | null): Set<T>;\n    readonly prototype: Set<any>;\n}\ndeclare var Set: SetConstructor;\n\ninterface ReadonlySet<T> {\n    forEach(callbackfn: (value: T, value2: T, set: ReadonlySet<T>) => void, thisArg?: any): void;\n    has(value: T): boolean;\n    readonly size: number;\n}\n\ninterface WeakSet<T extends WeakKey> {\n    /**\n     * Appends a new value to the end of the WeakSet.\n     */\n    add(value: T): this;\n    /**\n     * Removes the specified element from the WeakSet.\n     * @returns Returns true if the element existed and has been removed, or false if the element does not exist.\n     */\n    delete(value: T): boolean;\n    /**\n     * @returns a boolean indicating whether a value exists in the WeakSet or not.\n     */\n    has(value: T): boolean;\n}\n\ninterface WeakSetConstructor {\n    new <T extends WeakKey = WeakKey>(values?: readonly T[] | null): WeakSet<T>;\n    readonly prototype: WeakSet<WeakKey>;\n}\ndeclare var WeakSet: WeakSetConstructor;\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_core_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_core_d_ts.ts
new file mode 100644
index 000000000..962f44c6b
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_core_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_core_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface Array<T> {\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find<S extends T>(predicate: (value: T, index: number, obj: T[]) => value is S, thisArg?: any): S | undefined;\n    find(predicate: (value: T, index: number, obj: T[]) => unknown, thisArg?: any): T | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: T, index: number, obj: T[]) => unknown, thisArg?: any): number;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: T, start?: number, end?: number): this;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions & Intl.DateTimeFormatOptions): string;\n}\n\ninterface ArrayConstructor {\n    /**\n     * Creates an array from an array-like object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from<T>(arrayLike: ArrayLike<T>): T[];\n\n    /**\n     * Creates an array from an iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T, U>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => U, thisArg?: any): U[];\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of<T>(...items: T[]): T[];\n}\n\ninterface DateConstructor {\n    new (value: number | string | Date): Date;\n}\n\ninterface Function {\n    /**\n     * Returns the name of the function. Function names are read-only and can not be changed.\n     */\n    readonly name: string;\n}\n\ninterface Math {\n    /**\n     * Returns the number of leading zero bits in the 32-bit binary representation of a number.\n     * @param x A numeric expression.\n     */\n    clz32(x: number): number;\n\n    /**\n     * Returns the result of 32-bit multiplication of two numbers.\n     * @param x First number\n     * @param y Second number\n     */\n    imul(x: number, y: number): number;\n\n    /**\n     * Returns the sign of the x, indicating whether x is positive, negative or zero.\n     * @param x The numeric expression to test\n     */\n    sign(x: number): number;\n\n    /**\n     * Returns the base 10 logarithm of a number.\n     * @param x A numeric expression.\n     */\n    log10(x: number): number;\n\n    /**\n     * Returns the base 2 logarithm of a number.\n     * @param x A numeric expression.\n     */\n    log2(x: number): number;\n\n    /**\n     * Returns the natural logarithm of 1 + x.\n     * @param x A numeric expression.\n     */\n    log1p(x: number): number;\n\n    /**\n     * Returns the result of (e^x - 1), which is an implementation-dependent approximation to\n     * subtracting 1 from the exponential function of x (e raised to the power of x, where e\n     * is the base of the natural logarithms).\n     * @param x A numeric expression.\n     */\n    expm1(x: number): number;\n\n    /**\n     * Returns the hyperbolic cosine of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    cosh(x: number): number;\n\n    /**\n     * Returns the hyperbolic sine of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    sinh(x: number): number;\n\n    /**\n     * Returns the hyperbolic tangent of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    tanh(x: number): number;\n\n    /**\n     * Returns the inverse hyperbolic cosine of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    acosh(x: number): number;\n\n    /**\n     * Returns the inverse hyperbolic sine of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    asinh(x: number): number;\n\n    /**\n     * Returns the inverse hyperbolic tangent of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    atanh(x: number): number;\n\n    /**\n     * Returns the square root of the sum of squares of its arguments.\n     * @param values Values to compute the square root for.\n     *     If no arguments are passed, the result is +0.\n     *     If there is only one argument, the result is the absolute value.\n     *     If any argument is +Infinity or -Infinity, the result is +Infinity.\n     *     If any argument is NaN, the result is NaN.\n     *     If all arguments are either +0 or −0, the result is +0.\n     */\n    hypot(...values: number[]): number;\n\n    /**\n     * Returns the integral part of the numeric expression x, removing any fractional digits.\n     * If x is already an integer, the result is x.\n     * @param x A numeric expression.\n     */\n    trunc(x: number): number;\n\n    /**\n     * Returns the nearest single precision float representation of a number.\n     * @param x A numeric expression.\n     */\n    fround(x: number): number;\n\n    /**\n     * Returns an implementation-dependent approximation to the cube root of number.\n     * @param x A numeric expression.\n     */\n    cbrt(x: number): number;\n}\n\ninterface NumberConstructor {\n    /**\n     * The value of Number.EPSILON is the difference between 1 and the smallest value greater than 1\n     * that is representable as a Number value, which is approximately:\n     * 2.2204460492503130808472633361816 x 10‍−‍16.\n     */\n    readonly EPSILON: number;\n\n    /**\n     * Returns true if passed value is finite.\n     * Unlike the global isFinite, Number.isFinite doesn't forcibly convert the parameter to a\n     * number. Only finite values of the type number, result in true.\n     * @param number A numeric value.\n     */\n    isFinite(number: unknown): boolean;\n\n    /**\n     * Returns true if the value passed is an integer, false otherwise.\n     * @param number A numeric value.\n     */\n    isInteger(number: unknown): boolean;\n\n    /**\n     * Returns a Boolean value that indicates whether a value is the reserved value NaN (not a\n     * number). Unlike the global isNaN(), Number.isNaN() doesn't forcefully convert the parameter\n     * to a number. Only values of the type number, that are also NaN, result in true.\n     * @param number A numeric value.\n     */\n    isNaN(number: unknown): boolean;\n\n    /**\n     * Returns true if the value passed is a safe integer.\n     * @param number A numeric value.\n     */\n    isSafeInteger(number: unknown): boolean;\n\n    /**\n     * The value of the largest integer n such that n and n + 1 are both exactly representable as\n     * a Number value.\n     * The value of Number.MAX_SAFE_INTEGER is 9007199254740991 2^53 − 1.\n     */\n    readonly MAX_SAFE_INTEGER: number;\n\n    /**\n     * The value of the smallest integer n such that n and n − 1 are both exactly representable as\n     * a Number value.\n     * The value of Number.MIN_SAFE_INTEGER is −9007199254740991 (−(2^53 − 1)).\n     */\n    readonly MIN_SAFE_INTEGER: number;\n\n    /**\n     * Converts a string to a floating-point number.\n     * @param string A string that contains a floating-point number.\n     */\n    parseFloat(string: string): number;\n\n    /**\n     * Converts A string to an integer.\n     * @param string A string to convert into a number.\n     * @param radix A value between 2 and 36 that specifies the base of the number in `string`.\n     * If this argument is not supplied, strings with a prefix of '0x' are considered hexadecimal.\n     * All other strings are considered decimal.\n     */\n    parseInt(string: string, radix?: number): number;\n}\n\ninterface ObjectConstructor {\n    /**\n     * Copy the values of all of the enumerable own properties from one or more source objects to a\n     * target object. Returns the target object.\n     * @param target The target object to copy to.\n     * @param source The source object from which to copy properties.\n     */\n    assign<T extends {}, U>(target: T, source: U): T & U;\n\n    /**\n     * Copy the values of all of the enumerable own properties from one or more source objects to a\n     * target object. Returns the target object.\n     * @param target The target object to copy to.\n     * @param source1 The first source object from which to copy properties.\n     * @param source2 The second source object from which to copy properties.\n     */\n    assign<T extends {}, U, V>(target: T, source1: U, source2: V): T & U & V;\n\n    /**\n     * Copy the values of all of the enumerable own properties from one or more source objects to a\n     * target object. Returns the target object.\n     * @param target The target object to copy to.\n     * @param source1 The first source object from which to copy properties.\n     * @param source2 The second source object from which to copy properties.\n     * @param source3 The third source object from which to copy properties.\n     */\n    assign<T extends {}, U, V, W>(target: T, source1: U, source2: V, source3: W): T & U & V & W;\n\n    /**\n     * Copy the values of all of the enumerable own properties from one or more source objects to a\n     * target object. Returns the target object.\n     * @param target The target object to copy to.\n     * @param sources One or more source objects from which to copy properties\n     */\n    assign(target: object, ...sources: any[]): any;\n\n    /**\n     * Returns an array of all symbol properties found directly on object o.\n     * @param o Object to retrieve the symbols from.\n     */\n    getOwnPropertySymbols(o: any): symbol[];\n\n    /**\n     * Returns the names of the enumerable string properties and methods of an object.\n     * @param o Object that contains the properties and methods. This can be an object that you created or an existing Document Object Model (DOM) object.\n     */\n    keys(o: {}): string[];\n\n    /**\n     * Returns true if the values are the same value, false otherwise.\n     * @param value1 The first value.\n     * @param value2 The second value.\n     */\n    is(value1: any, value2: any): boolean;\n\n    /**\n     * Sets the prototype of a specified object o to object proto or null. Returns the object o.\n     * @param o The object to change its prototype.\n     * @param proto The value of the new prototype or null.\n     */\n    setPrototypeOf(o: any, proto: object | null): any;\n}\n\ninterface ReadonlyArray<T> {\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find<S extends T>(predicate: (value: T, index: number, obj: readonly T[]) => value is S, thisArg?: any): S | undefined;\n    find(predicate: (value: T, index: number, obj: readonly T[]) => unknown, thisArg?: any): T | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: T, index: number, obj: readonly T[]) => unknown, thisArg?: any): number;\n\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions & Intl.DateTimeFormatOptions): string;\n}\n\ninterface RegExp {\n    /**\n     * Returns a string indicating the flags of the regular expression in question. This field is read-only.\n     * The characters in this string are sequenced and concatenated in the following order:\n     *\n     *    - \"g\" for global\n     *    - \"i\" for ignoreCase\n     *    - \"m\" for multiline\n     *    - \"u\" for unicode\n     *    - \"y\" for sticky\n     *\n     * If no flags are set, the value is the empty string.\n     */\n    readonly flags: string;\n\n    /**\n     * Returns a Boolean value indicating the state of the sticky flag (y) used with a regular\n     * expression. Default is false. Read-only.\n     */\n    readonly sticky: boolean;\n\n    /**\n     * Returns a Boolean value indicating the state of the Unicode flag (u) used with a regular\n     * expression. Default is false. Read-only.\n     */\n    readonly unicode: boolean;\n}\n\ninterface RegExpConstructor {\n    new (pattern: RegExp | string, flags?: string): RegExp;\n    (pattern: RegExp | string, flags?: string): RegExp;\n}\n\ninterface String {\n    /**\n     * Returns a nonnegative integer Number less than 1114112 (0x110000) that is the code point\n     * value of the UTF-16 encoded code point starting at the string element at position pos in\n     * the String resulting from converting this object to a String.\n     * If there is no element at that position, the result is undefined.\n     * If a valid UTF-16 surrogate pair does not begin at pos, the result is the code unit at pos.\n     */\n    codePointAt(pos: number): number | undefined;\n\n    /**\n     * Returns true if searchString appears as a substring of the result of converting this\n     * object to a String, at one or more positions that are\n     * greater than or equal to position; otherwise, returns false.\n     * @param searchString search string\n     * @param position If position is undefined, 0 is assumed, so as to search all of the String.\n     */\n    includes(searchString: string, position?: number): boolean;\n\n    /**\n     * Returns true if the sequence of elements of searchString converted to a String is the\n     * same as the corresponding elements of this object (converted to a String) starting at\n     * endPosition – length(this). Otherwise returns false.\n     */\n    endsWith(searchString: string, endPosition?: number): boolean;\n\n    /**\n     * Returns the String value result of normalizing the string into the normalization form\n     * named by form as specified in Unicode Standard Annex #15, Unicode Normalization Forms.\n     * @param form Applicable values: \"NFC\", \"NFD\", \"NFKC\", or \"NFKD\", If not specified default\n     * is \"NFC\"\n     */\n    normalize(form: \"NFC\" | \"NFD\" | \"NFKC\" | \"NFKD\"): string;\n\n    /**\n     * Returns the String value result of normalizing the string into the normalization form\n     * named by form as specified in Unicode Standard Annex #15, Unicode Normalization Forms.\n     * @param form Applicable values: \"NFC\", \"NFD\", \"NFKC\", or \"NFKD\", If not specified default\n     * is \"NFC\"\n     */\n    normalize(form?: string): string;\n\n    /**\n     * Returns a String value that is made from count copies appended together. If count is 0,\n     * the empty string is returned.\n     * @param count number of copies to append\n     */\n    repeat(count: number): string;\n\n    /**\n     * Returns true if the sequence of elements of searchString converted to a String is the\n     * same as the corresponding elements of this object (converted to a String) starting at\n     * position. Otherwise returns false.\n     */\n    startsWith(searchString: string, position?: number): boolean;\n\n    /**\n     * Returns an `<a>` HTML anchor element and sets the name attribute to the text value\n     * @deprecated A legacy feature for browser compatibility\n     * @param name\n     */\n    anchor(name: string): string;\n\n    /**\n     * Returns a `<big>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    big(): string;\n\n    /**\n     * Returns a `<blink>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    blink(): string;\n\n    /**\n     * Returns a `<b>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    bold(): string;\n\n    /**\n     * Returns a `<tt>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    fixed(): string;\n\n    /**\n     * Returns a `<font>` HTML element and sets the color attribute value\n     * @deprecated A legacy feature for browser compatibility\n     */\n    fontcolor(color: string): string;\n\n    /**\n     * Returns a `<font>` HTML element and sets the size attribute value\n     * @deprecated A legacy feature for browser compatibility\n     */\n    fontsize(size: number): string;\n\n    /**\n     * Returns a `<font>` HTML element and sets the size attribute value\n     * @deprecated A legacy feature for browser compatibility\n     */\n    fontsize(size: string): string;\n\n    /**\n     * Returns an `<i>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    italics(): string;\n\n    /**\n     * Returns an `<a>` HTML element and sets the href attribute value\n     * @deprecated A legacy feature for browser compatibility\n     */\n    link(url: string): string;\n\n    /**\n     * Returns a `<small>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    small(): string;\n\n    /**\n     * Returns a `<strike>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    strike(): string;\n\n    /**\n     * Returns a `<sub>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    sub(): string;\n\n    /**\n     * Returns a `<sup>` HTML element\n     * @deprecated A legacy feature for browser compatibility\n     */\n    sup(): string;\n}\n\ninterface StringConstructor {\n    /**\n     * Return the String value whose elements are, in order, the elements in the List elements.\n     * If length is 0, the empty string is returned.\n     */\n    fromCodePoint(...codePoints: number[]): string;\n\n    /**\n     * String.raw is usually used as a tag function of a Tagged Template String. When called as\n     * such, the first argument will be a well formed template call site object and the rest\n     * parameter will contain the substitution values. It can also be called directly, for example,\n     * to interleave strings and values from your own tag function, and in this case the only thing\n     * it needs from the first argument is the raw property.\n     * @param template A well-formed template string call site representation.\n     * @param substitutions A set of substitution values.\n     */\n    raw(template: { raw: readonly string[] | ArrayLike<string>; }, ...substitutions: any[]): string;\n}\n\ninterface Int8Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Uint8Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Uint8ClampedArray<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Int16Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Uint16Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Int32Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Uint32Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Float32Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Float64Array<TArrayBuffer extends ArrayBufferLike> {\n    toLocaleString(locales: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_d_ts.ts
new file mode 100644
index 000000000..5ea9e03e1
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es5\" />\n/// <reference lib=\"es2015.core\" />\n/// <reference lib=\"es2015.collection\" />\n/// <reference lib=\"es2015.iterable\" />\n/// <reference lib=\"es2015.generator\" />\n/// <reference lib=\"es2015.promise\" />\n/// <reference lib=\"es2015.proxy\" />\n/// <reference lib=\"es2015.reflect\" />\n/// <reference lib=\"es2015.symbol\" />\n/// <reference lib=\"es2015.symbol.wellknown\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_generator_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_generator_d_ts.ts
new file mode 100644
index 000000000..be5911b2d
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_generator_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_generator_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.iterable\" />\n\ninterface Generator<T = unknown, TReturn = any, TNext = any> extends IteratorObject<T, TReturn, TNext> {\n    // NOTE: 'next' is defined using a tuple to ensure we report the correct assignability errors in all places.\n    next(...[value]: [] | [TNext]): IteratorResult<T, TReturn>;\n    return(value: TReturn): IteratorResult<T, TReturn>;\n    throw(e: any): IteratorResult<T, TReturn>;\n    [Symbol.iterator](): Generator<T, TReturn, TNext>;\n}\n\ninterface GeneratorFunction {\n    /**\n     * Creates a new Generator object.\n     * @param args A list of arguments the function accepts.\n     */\n    new (...args: any[]): Generator;\n    /**\n     * Creates a new Generator object.\n     * @param args A list of arguments the function accepts.\n     */\n    (...args: any[]): Generator;\n    /**\n     * The length of the arguments.\n     */\n    readonly length: number;\n    /**\n     * Returns the name of the function.\n     */\n    readonly name: string;\n    /**\n     * A reference to the prototype.\n     */\n    readonly prototype: Generator;\n}\n\ninterface GeneratorFunctionConstructor {\n    /**\n     * Creates a new Generator function.\n     * @param args A list of arguments the function accepts.\n     */\n    new (...args: string[]): GeneratorFunction;\n    /**\n     * Creates a new Generator function.\n     * @param args A list of arguments the function accepts.\n     */\n    (...args: string[]): GeneratorFunction;\n    /**\n     * The length of the arguments.\n     */\n    readonly length: number;\n    /**\n     * Returns the name of the function.\n     */\n    readonly name: string;\n    /**\n     * A reference to the prototype.\n     */\n    readonly prototype: GeneratorFunction;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_iterable_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_iterable_d_ts.ts
new file mode 100644
index 000000000..9176ca9a6
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_iterable_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_iterable_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.symbol\" />\n\ninterface SymbolConstructor {\n    /**\n     * A method that returns the default iterator for an object. Called by the semantics of the\n     * for-of statement.\n     */\n    readonly iterator: unique symbol;\n}\n\ninterface IteratorYieldResult<TYield> {\n    done?: false;\n    value: TYield;\n}\n\ninterface IteratorReturnResult<TReturn> {\n    done: true;\n    value: TReturn;\n}\n\ntype IteratorResult<T, TReturn = any> = IteratorYieldResult<T> | IteratorReturnResult<TReturn>;\n\ninterface Iterator<T, TReturn = any, TNext = any> {\n    // NOTE: 'next' is defined using a tuple to ensure we report the correct assignability errors in all places.\n    next(...[value]: [] | [TNext]): IteratorResult<T, TReturn>;\n    return?(value?: TReturn): IteratorResult<T, TReturn>;\n    throw?(e?: any): IteratorResult<T, TReturn>;\n}\n\ninterface Iterable<T, TReturn = any, TNext = any> {\n    [Symbol.iterator](): Iterator<T, TReturn, TNext>;\n}\n\n/**\n * Describes a user-defined {@link Iterator} that is also iterable.\n */\ninterface IterableIterator<T, TReturn = any, TNext = any> extends Iterator<T, TReturn, TNext> {\n    [Symbol.iterator](): IterableIterator<T, TReturn, TNext>;\n}\n\n/**\n * Describes an {@link Iterator} produced by the runtime that inherits from the intrinsic `Iterator.prototype`.\n */\ninterface IteratorObject<T, TReturn = unknown, TNext = unknown> extends Iterator<T, TReturn, TNext> {\n    [Symbol.iterator](): IteratorObject<T, TReturn, TNext>;\n}\n\n/**\n * Defines the `TReturn` type used for built-in iterators produced by `Array`, `Map`, `Set`, and others.\n * This is `undefined` when `strictBuiltInIteratorReturn` is `true`; otherwise, this is `any`.\n */\ntype BuiltinIteratorReturn = intrinsic;\n\ninterface ArrayIterator<T> extends IteratorObject<T, BuiltinIteratorReturn, unknown> {\n    [Symbol.iterator](): ArrayIterator<T>;\n}\n\ninterface Array<T> {\n    /** Iterator */\n    [Symbol.iterator](): ArrayIterator<T>;\n\n    /**\n     * Returns an iterable of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, T]>;\n\n    /**\n     * Returns an iterable of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an iterable of values in the array\n     */\n    values(): ArrayIterator<T>;\n}\n\ninterface ArrayConstructor {\n    /**\n     * Creates an array from an iterable object.\n     * @param iterable An iterable object to convert to an array.\n     */\n    from<T>(iterable: Iterable<T> | ArrayLike<T>): T[];\n\n    /**\n     * Creates an array from an iterable object.\n     * @param iterable An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T, U>(iterable: Iterable<T> | ArrayLike<T>, mapfn: (v: T, k: number) => U, thisArg?: any): U[];\n}\n\ninterface ReadonlyArray<T> {\n    /** Iterator of values in the array. */\n    [Symbol.iterator](): ArrayIterator<T>;\n\n    /**\n     * Returns an iterable of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, T]>;\n\n    /**\n     * Returns an iterable of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an iterable of values in the array\n     */\n    values(): ArrayIterator<T>;\n}\n\ninterface IArguments {\n    /** Iterator */\n    [Symbol.iterator](): ArrayIterator<any>;\n}\n\ninterface MapIterator<T> extends IteratorObject<T, BuiltinIteratorReturn, unknown> {\n    [Symbol.iterator](): MapIterator<T>;\n}\n\ninterface Map<K, V> {\n    /** Returns an iterable of entries in the map. */\n    [Symbol.iterator](): MapIterator<[K, V]>;\n\n    /**\n     * Returns an iterable of key, value pairs for every entry in the map.\n     */\n    entries(): MapIterator<[K, V]>;\n\n    /**\n     * Returns an iterable of keys in the map\n     */\n    keys(): MapIterator<K>;\n\n    /**\n     * Returns an iterable of values in the map\n     */\n    values(): MapIterator<V>;\n}\n\ninterface ReadonlyMap<K, V> {\n    /** Returns an iterable of entries in the map. */\n    [Symbol.iterator](): MapIterator<[K, V]>;\n\n    /**\n     * Returns an iterable of key, value pairs for every entry in the map.\n     */\n    entries(): MapIterator<[K, V]>;\n\n    /**\n     * Returns an iterable of keys in the map\n     */\n    keys(): MapIterator<K>;\n\n    /**\n     * Returns an iterable of values in the map\n     */\n    values(): MapIterator<V>;\n}\n\ninterface MapConstructor {\n    new (): Map<any, any>;\n    new <K, V>(iterable?: Iterable<readonly [K, V]> | null): Map<K, V>;\n}\n\ninterface WeakMap<K extends WeakKey, V> {}\n\ninterface WeakMapConstructor {\n    new <K extends WeakKey = WeakKey, V = any>(iterable?: Iterable<readonly [K, V]> | null): WeakMap<K, V>;\n}\n\ninterface SetIterator<T> extends IteratorObject<T, BuiltinIteratorReturn, unknown> {\n    [Symbol.iterator](): SetIterator<T>;\n}\n\ninterface Set<T> {\n    /** Iterates over values in the set. */\n    [Symbol.iterator](): SetIterator<T>;\n\n    /**\n     * Returns an iterable of [v,v] pairs for every value `v` in the set.\n     */\n    entries(): SetIterator<[T, T]>;\n\n    /**\n     * Despite its name, returns an iterable of the values in the set.\n     */\n    keys(): SetIterator<T>;\n\n    /**\n     * Returns an iterable of values in the set.\n     */\n    values(): SetIterator<T>;\n}\n\ninterface ReadonlySet<T> {\n    /** Iterates over values in the set. */\n    [Symbol.iterator](): SetIterator<T>;\n\n    /**\n     * Returns an iterable of [v,v] pairs for every value `v` in the set.\n     */\n    entries(): SetIterator<[T, T]>;\n\n    /**\n     * Despite its name, returns an iterable of the values in the set.\n     */\n    keys(): SetIterator<T>;\n\n    /**\n     * Returns an iterable of values in the set.\n     */\n    values(): SetIterator<T>;\n}\n\ninterface SetConstructor {\n    new <T>(iterable?: Iterable<T> | null): Set<T>;\n}\n\ninterface WeakSet<T extends WeakKey> {}\n\ninterface WeakSetConstructor {\n    new <T extends WeakKey = WeakKey>(iterable: Iterable<T>): WeakSet<T>;\n}\n\ninterface Promise<T> {}\n\ninterface PromiseConstructor {\n    /**\n     * Creates a Promise that is resolved with an array of results when all of the provided Promises\n     * resolve, or rejected when any Promise is rejected.\n     * @param values An iterable of Promises.\n     * @returns A new Promise.\n     */\n    all<T>(values: Iterable<T | PromiseLike<T>>): Promise<Awaited<T>[]>;\n\n    /**\n     * Creates a Promise that is resolved or rejected when any of the provided Promises are resolved\n     * or rejected.\n     * @param values An iterable of Promises.\n     * @returns A new Promise.\n     */\n    race<T>(values: Iterable<T | PromiseLike<T>>): Promise<Awaited<T>>;\n}\n\ninterface StringIterator<T> extends IteratorObject<T, BuiltinIteratorReturn, unknown> {\n    [Symbol.iterator](): StringIterator<T>;\n}\n\ninterface String {\n    /** Iterator */\n    [Symbol.iterator](): StringIterator<string>;\n}\n\ninterface Int8Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Int8ArrayConstructor {\n    new (elements: Iterable<number>): Int8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Int8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Int8Array<ArrayBuffer>;\n}\n\ninterface Uint8Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Uint8ArrayConstructor {\n    new (elements: Iterable<number>): Uint8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Uint8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Uint8Array<ArrayBuffer>;\n}\n\ninterface Uint8ClampedArray<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Uint8ClampedArrayConstructor {\n    new (elements: Iterable<number>): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Uint8ClampedArray<ArrayBuffer>;\n}\n\ninterface Int16Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Int16ArrayConstructor {\n    new (elements: Iterable<number>): Int16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Int16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Int16Array<ArrayBuffer>;\n}\n\ninterface Uint16Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Uint16ArrayConstructor {\n    new (elements: Iterable<number>): Uint16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Uint16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Uint16Array<ArrayBuffer>;\n}\n\ninterface Int32Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Int32ArrayConstructor {\n    new (elements: Iterable<number>): Int32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Int32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Int32Array<ArrayBuffer>;\n}\n\ninterface Uint32Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Uint32ArrayConstructor {\n    new (elements: Iterable<number>): Uint32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Uint32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Uint32Array<ArrayBuffer>;\n}\n\ninterface Float32Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Float32ArrayConstructor {\n    new (elements: Iterable<number>): Float32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Float32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Float32Array<ArrayBuffer>;\n}\n\ninterface Float64Array<TArrayBuffer extends ArrayBufferLike> {\n    [Symbol.iterator](): ArrayIterator<number>;\n\n    /**\n     * Returns an array of key, value pairs for every entry in the array\n     */\n    entries(): ArrayIterator<[number, number]>;\n\n    /**\n     * Returns an list of keys in the array\n     */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns an list of values in the array\n     */\n    values(): ArrayIterator<number>;\n}\n\ninterface Float64ArrayConstructor {\n    new (elements: Iterable<number>): Float64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<number>): Float64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => number, thisArg?: any): Float64Array<ArrayBuffer>;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_promise_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_promise_d_ts.ts
new file mode 100644
index 000000000..bbc2b2154
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_promise_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_promise_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface PromiseConstructor {\n    /**\n     * A reference to the prototype.\n     */\n    readonly prototype: Promise<any>;\n\n    /**\n     * Creates a new Promise.\n     * @param executor A callback used to initialize the promise. This callback is passed two arguments:\n     * a resolve callback used to resolve the promise with a value or the result of another promise,\n     * and a reject callback used to reject the promise with a provided reason or error.\n     */\n    new <T>(executor: (resolve: (value: T | PromiseLike<T>) => void, reject: (reason?: any) => void) => void): Promise<T>;\n\n    /**\n     * Creates a Promise that is resolved with an array of results when all of the provided Promises\n     * resolve, or rejected when any Promise is rejected.\n     * @param values An array of Promises.\n     * @returns A new Promise.\n     */\n    all<T extends readonly unknown[] | []>(values: T): Promise<{ -readonly [P in keyof T]: Awaited<T[P]>; }>;\n\n    // see: lib.es2015.iterable.d.ts\n    // all<T>(values: Iterable<T | PromiseLike<T>>): Promise<Awaited<T>[]>;\n\n    /**\n     * Creates a Promise that is resolved or rejected when any of the provided Promises are resolved\n     * or rejected.\n     * @param values An array of Promises.\n     * @returns A new Promise.\n     */\n    race<T extends readonly unknown[] | []>(values: T): Promise<Awaited<T[number]>>;\n\n    // see: lib.es2015.iterable.d.ts\n    // race<T>(values: Iterable<T | PromiseLike<T>>): Promise<Awaited<T>>;\n\n    /**\n     * Creates a new rejected promise for the provided reason.\n     * @param reason The reason the promise was rejected.\n     * @returns A new rejected Promise.\n     */\n    reject<T = never>(reason?: any): Promise<T>;\n\n    /**\n     * Creates a new resolved promise.\n     * @returns A resolved promise.\n     */\n    resolve(): Promise<void>;\n    /**\n     * Creates a new resolved promise for the provided value.\n     * @param value A promise.\n     * @returns A promise whose internal state matches the provided promise.\n     */\n    resolve<T>(value: T): Promise<Awaited<T>>;\n    /**\n     * Creates a new resolved promise for the provided value.\n     * @param value A promise.\n     * @returns A promise whose internal state matches the provided promise.\n     */\n    resolve<T>(value: T | PromiseLike<T>): Promise<Awaited<T>>;\n}\n\ndeclare var Promise: PromiseConstructor;\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_proxy_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_proxy_d_ts.ts
new file mode 100644
index 000000000..08acd451a
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_proxy_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_proxy_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface ProxyHandler<T extends object> {\n    /**\n     * A trap method for a function call.\n     * @param target The original callable object which is being proxied.\n     */\n    apply?(target: T, thisArg: any, argArray: any[]): any;\n\n    /**\n     * A trap for the `new` operator.\n     * @param target The original object which is being proxied.\n     * @param newTarget The constructor that was originally called.\n     */\n    construct?(target: T, argArray: any[], newTarget: Function): object;\n\n    /**\n     * A trap for `Object.defineProperty()`.\n     * @param target The original object which is being proxied.\n     * @returns A `Boolean` indicating whether or not the property has been defined.\n     */\n    defineProperty?(target: T, property: string | symbol, attributes: PropertyDescriptor): boolean;\n\n    /**\n     * A trap for the `delete` operator.\n     * @param target The original object which is being proxied.\n     * @param p The name or `Symbol` of the property to delete.\n     * @returns A `Boolean` indicating whether or not the property was deleted.\n     */\n    deleteProperty?(target: T, p: string | symbol): boolean;\n\n    /**\n     * A trap for getting a property value.\n     * @param target The original object which is being proxied.\n     * @param p The name or `Symbol` of the property to get.\n     * @param receiver The proxy or an object that inherits from the proxy.\n     */\n    get?(target: T, p: string | symbol, receiver: any): any;\n\n    /**\n     * A trap for `Object.getOwnPropertyDescriptor()`.\n     * @param target The original object which is being proxied.\n     * @param p The name of the property whose description should be retrieved.\n     */\n    getOwnPropertyDescriptor?(target: T, p: string | symbol): PropertyDescriptor | undefined;\n\n    /**\n     * A trap for the `[[GetPrototypeOf]]` internal method.\n     * @param target The original object which is being proxied.\n     */\n    getPrototypeOf?(target: T): object | null;\n\n    /**\n     * A trap for the `in` operator.\n     * @param target The original object which is being proxied.\n     * @param p The name or `Symbol` of the property to check for existence.\n     */\n    has?(target: T, p: string | symbol): boolean;\n\n    /**\n     * A trap for `Object.isExtensible()`.\n     * @param target The original object which is being proxied.\n     */\n    isExtensible?(target: T): boolean;\n\n    /**\n     * A trap for `Reflect.ownKeys()`.\n     * @param target The original object which is being proxied.\n     */\n    ownKeys?(target: T): ArrayLike<string | symbol>;\n\n    /**\n     * A trap for `Object.preventExtensions()`.\n     * @param target The original object which is being proxied.\n     */\n    preventExtensions?(target: T): boolean;\n\n    /**\n     * A trap for setting a property value.\n     * @param target The original object which is being proxied.\n     * @param p The name or `Symbol` of the property to set.\n     * @param receiver The object to which the assignment was originally directed.\n     * @returns A `Boolean` indicating whether or not the property was set.\n     */\n    set?(target: T, p: string | symbol, newValue: any, receiver: any): boolean;\n\n    /**\n     * A trap for `Object.setPrototypeOf()`.\n     * @param target The original object which is being proxied.\n     * @param newPrototype The object's new prototype or `null`.\n     */\n    setPrototypeOf?(target: T, v: object | null): boolean;\n}\n\ninterface ProxyConstructor {\n    /**\n     * Creates a revocable Proxy object.\n     * @param target A target object to wrap with Proxy.\n     * @param handler An object whose properties define the behavior of Proxy when an operation is attempted on it.\n     */\n    revocable<T extends object>(target: T, handler: ProxyHandler<T>): { proxy: T; revoke: () => void; };\n\n    /**\n     * Creates a Proxy object. The Proxy object allows you to create an object that can be used in place of the\n     * original object, but which may redefine fundamental Object operations like getting, setting, and defining\n     * properties. Proxy objects are commonly used to log property accesses, validate, format, or sanitize inputs.\n     * @param target A target object to wrap with Proxy.\n     * @param handler An object whose properties define the behavior of Proxy when an operation is attempted on it.\n     */\n    new <T extends object>(target: T, handler: ProxyHandler<T>): T;\n}\ndeclare var Proxy: ProxyConstructor;\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_reflect_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_reflect_d_ts.ts
new file mode 100644
index 000000000..3e3ca42e9
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_reflect_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_reflect_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare namespace Reflect {\n    /**\n     * Calls the function with the specified object as the this value\n     * and the elements of specified array as the arguments.\n     * @param target The function to call.\n     * @param thisArgument The object to be used as the this object.\n     * @param argumentsList An array of argument values to be passed to the function.\n     */\n    function apply<T, A extends readonly any[], R>(\n        target: (this: T, ...args: A) => R,\n        thisArgument: T,\n        argumentsList: Readonly<A>,\n    ): R;\n    function apply(target: Function, thisArgument: any, argumentsList: ArrayLike<any>): any;\n\n    /**\n     * Constructs the target with the elements of specified array as the arguments\n     * and the specified constructor as the `new.target` value.\n     * @param target The constructor to invoke.\n     * @param argumentsList An array of argument values to be passed to the constructor.\n     * @param newTarget The constructor to be used as the `new.target` object.\n     */\n    function construct<A extends readonly any[], R>(\n        target: new (...args: A) => R,\n        argumentsList: Readonly<A>,\n        newTarget?: new (...args: any) => any,\n    ): R;\n    function construct(target: Function, argumentsList: ArrayLike<any>, newTarget?: Function): any;\n\n    /**\n     * Adds a property to an object, or modifies attributes of an existing property.\n     * @param target Object on which to add or modify the property. This can be a native JavaScript object\n     *        (that is, a user-defined object or a built in object) or a DOM object.\n     * @param propertyKey The property name.\n     * @param attributes Descriptor for the property. It can be for a data property or an accessor property.\n     */\n    function defineProperty(target: object, propertyKey: PropertyKey, attributes: PropertyDescriptor & ThisType<any>): boolean;\n\n    /**\n     * Removes a property from an object, equivalent to `delete target[propertyKey]`,\n     * except it won't throw if `target[propertyKey]` is non-configurable.\n     * @param target Object from which to remove the own property.\n     * @param propertyKey The property name.\n     */\n    function deleteProperty(target: object, propertyKey: PropertyKey): boolean;\n\n    /**\n     * Gets the property of target, equivalent to `target[propertyKey]` when `receiver === target`.\n     * @param target Object that contains the property on itself or in its prototype chain.\n     * @param propertyKey The property name.\n     * @param receiver The reference to use as the `this` value in the getter function,\n     *        if `target[propertyKey]` is an accessor property.\n     */\n    function get<T extends object, P extends PropertyKey>(\n        target: T,\n        propertyKey: P,\n        receiver?: unknown,\n    ): P extends keyof T ? T[P] : any;\n\n    /**\n     * Gets the own property descriptor of the specified object.\n     * An own property descriptor is one that is defined directly on the object and is not inherited from the object's prototype.\n     * @param target Object that contains the property.\n     * @param propertyKey The property name.\n     */\n    function getOwnPropertyDescriptor<T extends object, P extends PropertyKey>(\n        target: T,\n        propertyKey: P,\n    ): TypedPropertyDescriptor<P extends keyof T ? T[P] : any> | undefined;\n\n    /**\n     * Returns the prototype of an object.\n     * @param target The object that references the prototype.\n     */\n    function getPrototypeOf(target: object): object | null;\n\n    /**\n     * Equivalent to `propertyKey in target`.\n     * @param target Object that contains the property on itself or in its prototype chain.\n     * @param propertyKey Name of the property.\n     */\n    function has(target: object, propertyKey: PropertyKey): boolean;\n\n    /**\n     * Returns a value that indicates whether new properties can be added to an object.\n     * @param target Object to test.\n     */\n    function isExtensible(target: object): boolean;\n\n    /**\n     * Returns the string and symbol keys of the own properties of an object. The own properties of an object\n     * are those that are defined directly on that object, and are not inherited from the object's prototype.\n     * @param target Object that contains the own properties.\n     */\n    function ownKeys(target: object): (string | symbol)[];\n\n    /**\n     * Prevents the addition of new properties to an object.\n     * @param target Object to make non-extensible.\n     * @return Whether the object has been made non-extensible.\n     */\n    function preventExtensions(target: object): boolean;\n\n    /**\n     * Sets the property of target, equivalent to `target[propertyKey] = value` when `receiver === target`.\n     * @param target Object that contains the property on itself or in its prototype chain.\n     * @param propertyKey Name of the property.\n     * @param receiver The reference to use as the `this` value in the setter function,\n     *        if `target[propertyKey]` is an accessor property.\n     */\n    function set<T extends object, P extends PropertyKey>(\n        target: T,\n        propertyKey: P,\n        value: P extends keyof T ? T[P] : any,\n        receiver?: any,\n    ): boolean;\n    function set(target: object, propertyKey: PropertyKey, value: any, receiver?: any): boolean;\n\n    /**\n     * Sets the prototype of a specified object o to object proto or null.\n     * @param target The object to change its prototype.\n     * @param proto The value of the new prototype or null.\n     * @return Whether setting the prototype was successful.\n     */\n    function setPrototypeOf(target: object, proto: object | null): boolean;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_symbol_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_symbol_d_ts.ts
new file mode 100644
index 000000000..63277d8cf
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_symbol_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_symbol_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface SymbolConstructor {\n    /**\n     * A reference to the prototype.\n     */\n    readonly prototype: Symbol;\n\n    /**\n     * Returns a new unique Symbol value.\n     * @param  description Description of the new Symbol object.\n     */\n    (description?: string | number): symbol;\n\n    /**\n     * Returns a Symbol object from the global symbol registry matching the given key if found.\n     * Otherwise, returns a new symbol with this key.\n     * @param key key to search for.\n     */\n    for(key: string): symbol;\n\n    /**\n     * Returns a key from the global symbol registry matching the given Symbol if found.\n     * Otherwise, returns a undefined.\n     * @param sym Symbol to find the key for.\n     */\n    keyFor(sym: symbol): string | undefined;\n}\n\ndeclare var Symbol: SymbolConstructor;\n";
diff --git a/packages/paywall-build/src/lib/lib_es2015_symbol_wellknown_d_ts.ts b/packages/paywall-build/src/lib/lib_es2015_symbol_wellknown_d_ts.ts
new file mode 100644
index 000000000..0c9bb96b6
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2015_symbol_wellknown_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2015_symbol_wellknown_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.symbol\" />\n\ninterface SymbolConstructor {\n    /**\n     * A method that determines if a constructor object recognizes an object as one of the\n     * constructor’s instances. Called by the semantics of the instanceof operator.\n     */\n    readonly hasInstance: unique symbol;\n\n    /**\n     * A Boolean value that if true indicates that an object should flatten to its array elements\n     * by Array.prototype.concat.\n     */\n    readonly isConcatSpreadable: unique symbol;\n\n    /**\n     * A regular expression method that matches the regular expression against a string. Called\n     * by the String.prototype.match method.\n     */\n    readonly match: unique symbol;\n\n    /**\n     * A regular expression method that replaces matched substrings of a string. Called by the\n     * String.prototype.replace method.\n     */\n    readonly replace: unique symbol;\n\n    /**\n     * A regular expression method that returns the index within a string that matches the\n     * regular expression. Called by the String.prototype.search method.\n     */\n    readonly search: unique symbol;\n\n    /**\n     * A function valued property that is the constructor function that is used to create\n     * derived objects.\n     */\n    readonly species: unique symbol;\n\n    /**\n     * A regular expression method that splits a string at the indices that match the regular\n     * expression. Called by the String.prototype.split method.\n     */\n    readonly split: unique symbol;\n\n    /**\n     * A method that converts an object to a corresponding primitive value.\n     * Called by the ToPrimitive abstract operation.\n     */\n    readonly toPrimitive: unique symbol;\n\n    /**\n     * A String value that is used in the creation of the default string description of an object.\n     * Called by the built-in method Object.prototype.toString.\n     */\n    readonly toStringTag: unique symbol;\n\n    /**\n     * An Object whose truthy properties are properties that are excluded from the 'with'\n     * environment bindings of the associated objects.\n     */\n    readonly unscopables: unique symbol;\n}\n\ninterface Symbol {\n    /**\n     * Converts a Symbol object to a symbol.\n     */\n    [Symbol.toPrimitive](hint: string): symbol;\n\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface Array<T> {\n    /**\n     * Is an object whose properties have the value 'true'\n     * when they will be absent when used in a 'with' statement.\n     */\n    readonly [Symbol.unscopables]: {\n        [K in keyof any[]]?: boolean;\n    };\n}\n\ninterface ReadonlyArray<T> {\n    /**\n     * Is an object whose properties have the value 'true'\n     * when they will be absent when used in a 'with' statement.\n     */\n    readonly [Symbol.unscopables]: {\n        [K in keyof readonly any[]]?: boolean;\n    };\n}\n\ninterface Date {\n    /**\n     * Converts a Date object to a string.\n     */\n    [Symbol.toPrimitive](hint: \"default\"): string;\n    /**\n     * Converts a Date object to a string.\n     */\n    [Symbol.toPrimitive](hint: \"string\"): string;\n    /**\n     * Converts a Date object to a number.\n     */\n    [Symbol.toPrimitive](hint: \"number\"): number;\n    /**\n     * Converts a Date object to a string or number.\n     *\n     * @param hint The strings \"number\", \"string\", or \"default\" to specify what primitive to return.\n     *\n     * @throws {TypeError} If 'hint' was given something other than \"number\", \"string\", or \"default\".\n     * @returns A number if 'hint' was \"number\", a string if 'hint' was \"string\" or \"default\".\n     */\n    [Symbol.toPrimitive](hint: string): string | number;\n}\n\ninterface Map<K, V> {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface WeakMap<K extends WeakKey, V> {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface Set<T> {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface WeakSet<T extends WeakKey> {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface JSON {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface Function {\n    /**\n     * Determines whether the given value inherits from this function if this function was used\n     * as a constructor function.\n     *\n     * A constructor function can control which objects are recognized as its instances by\n     * 'instanceof' by overriding this method.\n     */\n    [Symbol.hasInstance](value: any): boolean;\n}\n\ninterface GeneratorFunction {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface Math {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface Promise<T> {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface PromiseConstructor {\n    readonly [Symbol.species]: PromiseConstructor;\n}\n\ninterface RegExp {\n    /**\n     * Matches a string with this regular expression, and returns an array containing the results of\n     * that search.\n     * @param string A string to search within.\n     */\n    [Symbol.match](string: string): RegExpMatchArray | null;\n\n    /**\n     * Replaces text in a string, using this regular expression.\n     * @param string A String object or string literal whose contents matching against\n     *               this regular expression will be replaced\n     * @param replaceValue A String object or string literal containing the text to replace for every\n     *                     successful match of this regular expression.\n     */\n    [Symbol.replace](string: string, replaceValue: string): string;\n\n    /**\n     * Replaces text in a string, using this regular expression.\n     * @param string A String object or string literal whose contents matching against\n     *               this regular expression will be replaced\n     * @param replacer A function that returns the replacement text.\n     */\n    [Symbol.replace](string: string, replacer: (substring: string, ...args: any[]) => string): string;\n\n    /**\n     * Finds the position beginning first substring match in a regular expression search\n     * using this regular expression.\n     *\n     * @param string The string to search within.\n     */\n    [Symbol.search](string: string): number;\n\n    /**\n     * Returns an array of substrings that were delimited by strings in the original input that\n     * match against this regular expression.\n     *\n     * If the regular expression contains capturing parentheses, then each time this\n     * regular expression matches, the results (including any undefined results) of the\n     * capturing parentheses are spliced.\n     *\n     * @param string string value to split\n     * @param limit if not undefined, the output array is truncated so that it contains no more\n     * than 'limit' elements.\n     */\n    [Symbol.split](string: string, limit?: number): string[];\n}\n\ninterface RegExpConstructor {\n    readonly [Symbol.species]: RegExpConstructor;\n}\n\ninterface String {\n    /**\n     * Matches a string or an object that supports being matched against, and returns an array\n     * containing the results of that search, or null if no matches are found.\n     * @param matcher An object that supports being matched against.\n     */\n    match(matcher: { [Symbol.match](string: string): RegExpMatchArray | null; }): RegExpMatchArray | null;\n\n    /**\n     * Passes a string and {@linkcode replaceValue} to the `[Symbol.replace]` method on {@linkcode searchValue}. This method is expected to implement its own replacement algorithm.\n     * @param searchValue An object that supports searching for and replacing matches within a string.\n     * @param replaceValue The replacement text.\n     */\n    replace(searchValue: { [Symbol.replace](string: string, replaceValue: string): string; }, replaceValue: string): string;\n\n    /**\n     * Replaces text in a string, using an object that supports replacement within a string.\n     * @param searchValue A object can search for and replace matches within a string.\n     * @param replacer A function that returns the replacement text.\n     */\n    replace(searchValue: { [Symbol.replace](string: string, replacer: (substring: string, ...args: any[]) => string): string; }, replacer: (substring: string, ...args: any[]) => string): string;\n\n    /**\n     * Finds the first substring match in a regular expression search.\n     * @param searcher An object which supports searching within a string.\n     */\n    search(searcher: { [Symbol.search](string: string): number; }): number;\n\n    /**\n     * Split a string into substrings using the specified separator and return them as an array.\n     * @param splitter An object that can split a string.\n     * @param limit A value used to limit the number of elements returned in the array.\n     */\n    split(splitter: { [Symbol.split](string: string, limit?: number): string[]; }, limit?: number): string[];\n}\n\ninterface ArrayBuffer {\n    readonly [Symbol.toStringTag]: \"ArrayBuffer\";\n}\n\ninterface DataView<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: string;\n}\n\ninterface Int8Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Int8Array\";\n}\n\ninterface Uint8Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Uint8Array\";\n}\n\ninterface Uint8ClampedArray<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Uint8ClampedArray\";\n}\n\ninterface Int16Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Int16Array\";\n}\n\ninterface Uint16Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Uint16Array\";\n}\n\ninterface Int32Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Int32Array\";\n}\n\ninterface Uint32Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Uint32Array\";\n}\n\ninterface Float32Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Float32Array\";\n}\n\ninterface Float64Array<TArrayBuffer extends ArrayBufferLike> {\n    readonly [Symbol.toStringTag]: \"Float64Array\";\n}\n\ninterface ArrayConstructor {\n    readonly [Symbol.species]: ArrayConstructor;\n}\ninterface MapConstructor {\n    readonly [Symbol.species]: MapConstructor;\n}\ninterface SetConstructor {\n    readonly [Symbol.species]: SetConstructor;\n}\ninterface ArrayBufferConstructor {\n    readonly [Symbol.species]: ArrayBufferConstructor;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2016_array_include_d_ts.ts b/packages/paywall-build/src/lib/lib_es2016_array_include_d_ts.ts
new file mode 100644
index 000000000..ced6d69d5
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2016_array_include_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2016_array_include_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface Array<T> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: T, fromIndex?: number): boolean;\n}\n\ninterface ReadonlyArray<T> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: T, fromIndex?: number): boolean;\n}\n\ninterface Int8Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Uint8Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Uint8ClampedArray<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Int16Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Uint16Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Int32Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Uint32Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Float32Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n\ninterface Float64Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: number, fromIndex?: number): boolean;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2016_d_ts.ts b/packages/paywall-build/src/lib/lib_es2016_d_ts.ts
new file mode 100644
index 000000000..df7e94869
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2016_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2016_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015\" />\n/// <reference lib=\"es2016.array.include\" />\n/// <reference lib=\"es2016.intl\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2016_intl_d_ts.ts b/packages/paywall-build/src/lib/lib_es2016_intl_d_ts.ts
new file mode 100644
index 000000000..a751f563d
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2016_intl_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2016_intl_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare namespace Intl {\n    /**\n     * The `Intl.getCanonicalLocales()` method returns an array containing\n     * the canonical locale names. Duplicates will be omitted and elements\n     * will be validated as structurally valid language tags.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/getCanonicalLocales)\n     *\n     * @param locale A list of String values for which to get the canonical locale names\n     * @returns An array containing the canonical and validated locale names.\n     */\n    function getCanonicalLocales(locale?: string | readonly string[]): string[];\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_arraybuffer_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_arraybuffer_d_ts.ts
new file mode 100644
index 000000000..685aae1f7
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_arraybuffer_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_arraybuffer_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface ArrayBufferConstructor {\n    new (): ArrayBuffer;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_d_ts.ts
new file mode 100644
index 000000000..56af24c9e
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2016\" />\n/// <reference lib=\"es2017.arraybuffer\" />\n/// <reference lib=\"es2017.date\" />\n/// <reference lib=\"es2017.intl\" />\n/// <reference lib=\"es2017.object\" />\n/// <reference lib=\"es2017.sharedmemory\" />\n/// <reference lib=\"es2017.string\" />\n/// <reference lib=\"es2017.typedarrays\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_date_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_date_d_ts.ts
new file mode 100644
index 000000000..cecaefc93
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_date_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_date_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface DateConstructor {\n    /**\n     * Returns the number of milliseconds between midnight, January 1, 1970 Universal Coordinated Time (UTC) (or GMT) and the specified date.\n     * @param year The full year designation is required for cross-century date accuracy. If year is between 0 and 99 is used, then year is assumed to be 1900 + year.\n     * @param monthIndex The month as a number between 0 and 11 (January to December).\n     * @param date The date as a number between 1 and 31.\n     * @param hours Must be supplied if minutes is supplied. A number from 0 to 23 (midnight to 11pm) that specifies the hour.\n     * @param minutes Must be supplied if seconds is supplied. A number from 0 to 59 that specifies the minutes.\n     * @param seconds Must be supplied if milliseconds is supplied. A number from 0 to 59 that specifies the seconds.\n     * @param ms A number from 0 to 999 that specifies the milliseconds.\n     */\n    UTC(year: number, monthIndex?: number, date?: number, hours?: number, minutes?: number, seconds?: number, ms?: number): number;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_intl_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_intl_d_ts.ts
new file mode 100644
index 000000000..946b32f2f
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_intl_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_intl_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare namespace Intl {\n    interface DateTimeFormatPartTypesRegistry {\n        day: any;\n        dayPeriod: any;\n        era: any;\n        hour: any;\n        literal: any;\n        minute: any;\n        month: any;\n        second: any;\n        timeZoneName: any;\n        weekday: any;\n        year: any;\n    }\n\n    type DateTimeFormatPartTypes = keyof DateTimeFormatPartTypesRegistry;\n\n    interface DateTimeFormatPart {\n        type: DateTimeFormatPartTypes;\n        value: string;\n    }\n\n    interface DateTimeFormat {\n        formatToParts(date?: Date | number): DateTimeFormatPart[];\n    }\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_object_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_object_d_ts.ts
new file mode 100644
index 000000000..5f68b66c3
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_object_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_object_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface ObjectConstructor {\n    /**\n     * Returns an array of values of the enumerable own properties of an object\n     * @param o Object that contains the properties and methods. This can be an object that you created or an existing Document Object Model (DOM) object.\n     */\n    values<T>(o: { [s: string]: T; } | ArrayLike<T>): T[];\n\n    /**\n     * Returns an array of values of the enumerable own properties of an object\n     * @param o Object that contains the properties and methods. This can be an object that you created or an existing Document Object Model (DOM) object.\n     */\n    values(o: {}): any[];\n\n    /**\n     * Returns an array of key/values of the enumerable own properties of an object\n     * @param o Object that contains the properties and methods. This can be an object that you created or an existing Document Object Model (DOM) object.\n     */\n    entries<T>(o: { [s: string]: T; } | ArrayLike<T>): [string, T][];\n\n    /**\n     * Returns an array of key/values of the enumerable own properties of an object\n     * @param o Object that contains the properties and methods. This can be an object that you created or an existing Document Object Model (DOM) object.\n     */\n    entries(o: {}): [string, any][];\n\n    /**\n     * Returns an object containing all own property descriptors of an object\n     * @param o Object that contains the properties and methods. This can be an object that you created or an existing Document Object Model (DOM) object.\n     */\n    getOwnPropertyDescriptors<T>(o: T): { [P in keyof T]: TypedPropertyDescriptor<T[P]>; } & { [x: string]: PropertyDescriptor; };\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_sharedmemory_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_sharedmemory_d_ts.ts
new file mode 100644
index 000000000..562193582
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_sharedmemory_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_sharedmemory_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.symbol\" />\n/// <reference lib=\"es2015.symbol.wellknown\" />\n\ninterface SharedArrayBuffer {\n    /**\n     * Read-only. The length of the ArrayBuffer (in bytes).\n     */\n    readonly byteLength: number;\n\n    /**\n     * Returns a section of an SharedArrayBuffer.\n     */\n    slice(begin?: number, end?: number): SharedArrayBuffer;\n    readonly [Symbol.toStringTag]: \"SharedArrayBuffer\";\n}\n\ninterface SharedArrayBufferConstructor {\n    readonly prototype: SharedArrayBuffer;\n    new (byteLength?: number): SharedArrayBuffer;\n    readonly [Symbol.species]: SharedArrayBufferConstructor;\n}\ndeclare var SharedArrayBuffer: SharedArrayBufferConstructor;\n\ninterface ArrayBufferTypes {\n    SharedArrayBuffer: SharedArrayBuffer;\n}\n\ninterface Atomics {\n    /**\n     * Adds a value to the value at the given position in the array, returning the original value.\n     * Until this atomic operation completes, any other read or write operation against the array\n     * will block.\n     */\n    add(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, value: number): number;\n\n    /**\n     * Stores the bitwise AND of a value with the value at the given position in the array,\n     * returning the original value. Until this atomic operation completes, any other read or\n     * write operation against the array will block.\n     */\n    and(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, value: number): number;\n\n    /**\n     * Replaces the value at the given position in the array if the original value equals the given\n     * expected value, returning the original value. Until this atomic operation completes, any\n     * other read or write operation against the array will block.\n     */\n    compareExchange(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, expectedValue: number, replacementValue: number): number;\n\n    /**\n     * Replaces the value at the given position in the array, returning the original value. Until\n     * this atomic operation completes, any other read or write operation against the array will\n     * block.\n     */\n    exchange(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, value: number): number;\n\n    /**\n     * Returns a value indicating whether high-performance algorithms can use atomic operations\n     * (`true`) or must use locks (`false`) for the given number of bytes-per-element of a typed\n     * array.\n     */\n    isLockFree(size: number): boolean;\n\n    /**\n     * Returns the value at the given position in the array. Until this atomic operation completes,\n     * any other read or write operation against the array will block.\n     */\n    load(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number): number;\n\n    /**\n     * Stores the bitwise OR of a value with the value at the given position in the array,\n     * returning the original value. Until this atomic operation completes, any other read or write\n     * operation against the array will block.\n     */\n    or(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, value: number): number;\n\n    /**\n     * Stores a value at the given position in the array, returning the new value. Until this\n     * atomic operation completes, any other read or write operation against the array will block.\n     */\n    store(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, value: number): number;\n\n    /**\n     * Subtracts a value from the value at the given position in the array, returning the original\n     * value. Until this atomic operation completes, any other read or write operation against the\n     * array will block.\n     */\n    sub(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, value: number): number;\n\n    /**\n     * If the value at the given position in the array is equal to the provided value, the current\n     * agent is put to sleep causing execution to suspend until the timeout expires (returning\n     * `\"timed-out\"`) or until the agent is awoken (returning `\"ok\"`); otherwise, returns\n     * `\"not-equal\"`.\n     */\n    wait(typedArray: Int32Array<ArrayBufferLike>, index: number, value: number, timeout?: number): \"ok\" | \"not-equal\" | \"timed-out\";\n\n    /**\n     * Wakes up sleeping agents that are waiting on the given index of the array, returning the\n     * number of agents that were awoken.\n     * @param typedArray A shared Int32Array<ArrayBufferLike>.\n     * @param index The position in the typedArray to wake up on.\n     * @param count The number of sleeping agents to notify. Defaults to +Infinity.\n     */\n    notify(typedArray: Int32Array<ArrayBufferLike>, index: number, count?: number): number;\n\n    /**\n     * Stores the bitwise XOR of a value with the value at the given position in the array,\n     * returning the original value. Until this atomic operation completes, any other read or write\n     * operation against the array will block.\n     */\n    xor(typedArray: Int8Array<ArrayBufferLike> | Uint8Array<ArrayBufferLike> | Int16Array<ArrayBufferLike> | Uint16Array<ArrayBufferLike> | Int32Array<ArrayBufferLike> | Uint32Array<ArrayBufferLike>, index: number, value: number): number;\n\n    readonly [Symbol.toStringTag]: \"Atomics\";\n}\n\ndeclare var Atomics: Atomics;\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_string_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_string_d_ts.ts
new file mode 100644
index 000000000..ff0be5915
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_string_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_string_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface String {\n    /**\n     * Pads the current string with a given string (possibly repeated) so that the resulting string reaches a given length.\n     * The padding is applied from the start (left) of the current string.\n     *\n     * @param maxLength The length of the resulting string once the current string has been padded.\n     *        If this parameter is smaller than the current string's length, the current string will be returned as it is.\n     *\n     * @param fillString The string to pad the current string with.\n     *        If this string is too long, it will be truncated and the left-most part will be applied.\n     *        The default value for this parameter is \" \" (U+0020).\n     */\n    padStart(maxLength: number, fillString?: string): string;\n\n    /**\n     * Pads the current string with a given string (possibly repeated) so that the resulting string reaches a given length.\n     * The padding is applied from the end (right) of the current string.\n     *\n     * @param maxLength The length of the resulting string once the current string has been padded.\n     *        If this parameter is smaller than the current string's length, the current string will be returned as it is.\n     *\n     * @param fillString The string to pad the current string with.\n     *        If this string is too long, it will be truncated and the left-most part will be applied.\n     *        The default value for this parameter is \" \" (U+0020).\n     */\n    padEnd(maxLength: number, fillString?: string): string;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2017_typedarrays_d_ts.ts b/packages/paywall-build/src/lib/lib_es2017_typedarrays_d_ts.ts
new file mode 100644
index 000000000..6c426b930
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2017_typedarrays_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2017_typedarrays_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface Int8ArrayConstructor {\n    new (): Int8Array<ArrayBuffer>;\n}\n\ninterface Uint8ArrayConstructor {\n    new (): Uint8Array<ArrayBuffer>;\n}\n\ninterface Uint8ClampedArrayConstructor {\n    new (): Uint8ClampedArray<ArrayBuffer>;\n}\n\ninterface Int16ArrayConstructor {\n    new (): Int16Array<ArrayBuffer>;\n}\n\ninterface Uint16ArrayConstructor {\n    new (): Uint16Array<ArrayBuffer>;\n}\n\ninterface Int32ArrayConstructor {\n    new (): Int32Array<ArrayBuffer>;\n}\n\ninterface Uint32ArrayConstructor {\n    new (): Uint32Array<ArrayBuffer>;\n}\n\ninterface Float32ArrayConstructor {\n    new (): Float32Array<ArrayBuffer>;\n}\n\ninterface Float64ArrayConstructor {\n    new (): Float64Array<ArrayBuffer>;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2018_asyncgenerator_d_ts.ts b/packages/paywall-build/src/lib/lib_es2018_asyncgenerator_d_ts.ts
new file mode 100644
index 000000000..01d283bdc
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2018_asyncgenerator_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2018_asyncgenerator_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2018.asynciterable\" />\n\ninterface AsyncGenerator<T = unknown, TReturn = any, TNext = any> extends AsyncIteratorObject<T, TReturn, TNext> {\n    // NOTE: 'next' is defined using a tuple to ensure we report the correct assignability errors in all places.\n    next(...[value]: [] | [TNext]): Promise<IteratorResult<T, TReturn>>;\n    return(value: TReturn | PromiseLike<TReturn>): Promise<IteratorResult<T, TReturn>>;\n    throw(e: any): Promise<IteratorResult<T, TReturn>>;\n    [Symbol.asyncIterator](): AsyncGenerator<T, TReturn, TNext>;\n}\n\ninterface AsyncGeneratorFunction {\n    /**\n     * Creates a new AsyncGenerator object.\n     * @param args A list of arguments the function accepts.\n     */\n    new (...args: any[]): AsyncGenerator;\n    /**\n     * Creates a new AsyncGenerator object.\n     * @param args A list of arguments the function accepts.\n     */\n    (...args: any[]): AsyncGenerator;\n    /**\n     * The length of the arguments.\n     */\n    readonly length: number;\n    /**\n     * Returns the name of the function.\n     */\n    readonly name: string;\n    /**\n     * A reference to the prototype.\n     */\n    readonly prototype: AsyncGenerator;\n}\n\ninterface AsyncGeneratorFunctionConstructor {\n    /**\n     * Creates a new AsyncGenerator function.\n     * @param args A list of arguments the function accepts.\n     */\n    new (...args: string[]): AsyncGeneratorFunction;\n    /**\n     * Creates a new AsyncGenerator function.\n     * @param args A list of arguments the function accepts.\n     */\n    (...args: string[]): AsyncGeneratorFunction;\n    /**\n     * The length of the arguments.\n     */\n    readonly length: number;\n    /**\n     * Returns the name of the function.\n     */\n    readonly name: string;\n    /**\n     * A reference to the prototype.\n     */\n    readonly prototype: AsyncGeneratorFunction;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2018_asynciterable_d_ts.ts b/packages/paywall-build/src/lib/lib_es2018_asynciterable_d_ts.ts
new file mode 100644
index 000000000..b2860c165
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2018_asynciterable_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2018_asynciterable_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.symbol\" />\n/// <reference lib=\"es2015.iterable\" />\n\ninterface SymbolConstructor {\n    /**\n     * A method that returns the default async iterator for an object. Called by the semantics of\n     * the for-await-of statement.\n     */\n    readonly asyncIterator: unique symbol;\n}\n\ninterface AsyncIterator<T, TReturn = any, TNext = any> {\n    // NOTE: 'next' is defined using a tuple to ensure we report the correct assignability errors in all places.\n    next(...[value]: [] | [TNext]): Promise<IteratorResult<T, TReturn>>;\n    return?(value?: TReturn | PromiseLike<TReturn>): Promise<IteratorResult<T, TReturn>>;\n    throw?(e?: any): Promise<IteratorResult<T, TReturn>>;\n}\n\ninterface AsyncIterable<T, TReturn = any, TNext = any> {\n    [Symbol.asyncIterator](): AsyncIterator<T, TReturn, TNext>;\n}\n\n/**\n * Describes a user-defined {@link AsyncIterator} that is also async iterable.\n */\ninterface AsyncIterableIterator<T, TReturn = any, TNext = any> extends AsyncIterator<T, TReturn, TNext> {\n    [Symbol.asyncIterator](): AsyncIterableIterator<T, TReturn, TNext>;\n}\n\n/**\n * Describes an {@link AsyncIterator} produced by the runtime that inherits from the intrinsic `AsyncIterator.prototype`.\n */\ninterface AsyncIteratorObject<T, TReturn = unknown, TNext = unknown> extends AsyncIterator<T, TReturn, TNext> {\n    [Symbol.asyncIterator](): AsyncIteratorObject<T, TReturn, TNext>;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2018_d_ts.ts b/packages/paywall-build/src/lib/lib_es2018_d_ts.ts
new file mode 100644
index 000000000..a9fbb10ec
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2018_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2018_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2017\" />\n/// <reference lib=\"es2018.asynciterable\" />\n/// <reference lib=\"es2018.asyncgenerator\" />\n/// <reference lib=\"es2018.promise\" />\n/// <reference lib=\"es2018.regexp\" />\n/// <reference lib=\"es2018.intl\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2018_intl_d_ts.ts b/packages/paywall-build/src/lib/lib_es2018_intl_d_ts.ts
new file mode 100644
index 000000000..6ea4ee58d
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2018_intl_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2018_intl_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare namespace Intl {\n    // http://cldr.unicode.org/index/cldr-spec/plural-rules#TOC-Determining-Plural-Categories\n    type LDMLPluralRule = \"zero\" | \"one\" | \"two\" | \"few\" | \"many\" | \"other\";\n    type PluralRuleType = \"cardinal\" | \"ordinal\";\n\n    interface PluralRulesOptions {\n        localeMatcher?: \"lookup\" | \"best fit\" | undefined;\n        type?: PluralRuleType | undefined;\n        minimumIntegerDigits?: number | undefined;\n        minimumFractionDigits?: number | undefined;\n        maximumFractionDigits?: number | undefined;\n        minimumSignificantDigits?: number | undefined;\n        maximumSignificantDigits?: number | undefined;\n    }\n\n    interface ResolvedPluralRulesOptions {\n        locale: string;\n        pluralCategories: LDMLPluralRule[];\n        type: PluralRuleType;\n        minimumIntegerDigits: number;\n        minimumFractionDigits: number;\n        maximumFractionDigits: number;\n        minimumSignificantDigits?: number;\n        maximumSignificantDigits?: number;\n    }\n\n    interface PluralRules {\n        resolvedOptions(): ResolvedPluralRulesOptions;\n        select(n: number): LDMLPluralRule;\n    }\n\n    interface PluralRulesConstructor {\n        new (locales?: string | readonly string[], options?: PluralRulesOptions): PluralRules;\n        (locales?: string | readonly string[], options?: PluralRulesOptions): PluralRules;\n        supportedLocalesOf(locales: string | readonly string[], options?: { localeMatcher?: \"lookup\" | \"best fit\"; }): string[];\n    }\n\n    const PluralRules: PluralRulesConstructor;\n\n    interface NumberFormatPartTypeRegistry {\n        literal: never;\n        nan: never;\n        infinity: never;\n        percent: never;\n        integer: never;\n        group: never;\n        decimal: never;\n        fraction: never;\n        plusSign: never;\n        minusSign: never;\n        percentSign: never;\n        currency: never;\n    }\n\n    type NumberFormatPartTypes = keyof NumberFormatPartTypeRegistry;\n\n    interface NumberFormatPart {\n        type: NumberFormatPartTypes;\n        value: string;\n    }\n\n    interface NumberFormat {\n        formatToParts(number?: number | bigint): NumberFormatPart[];\n    }\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2018_promise_d_ts.ts b/packages/paywall-build/src/lib/lib_es2018_promise_d_ts.ts
new file mode 100644
index 000000000..9391151be
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2018_promise_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2018_promise_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/**\n * Represents the completion of an asynchronous operation\n */\ninterface Promise<T> {\n    /**\n     * Attaches a callback that is invoked when the Promise is settled (fulfilled or rejected). The\n     * resolved value cannot be modified from the callback.\n     * @param onfinally The callback to execute when the Promise is settled (fulfilled or rejected).\n     * @returns A Promise for the completion of the callback.\n     */\n    finally(onfinally?: (() => void) | undefined | null): Promise<T>;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2018_regexp_d_ts.ts b/packages/paywall-build/src/lib/lib_es2018_regexp_d_ts.ts
new file mode 100644
index 000000000..16bc01411
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2018_regexp_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2018_regexp_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface RegExpMatchArray {\n    groups?: {\n        [key: string]: string;\n    };\n}\n\ninterface RegExpExecArray {\n    groups?: {\n        [key: string]: string;\n    };\n}\n\ninterface RegExp {\n    /**\n     * Returns a Boolean value indicating the state of the dotAll flag (s) used with a regular expression.\n     * Default is false. Read-only.\n     */\n    readonly dotAll: boolean;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2019_array_d_ts.ts b/packages/paywall-build/src/lib/lib_es2019_array_d_ts.ts
new file mode 100644
index 000000000..c7980e54c
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2019_array_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2019_array_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ntype FlatArray<Arr, Depth extends number> = {\n    done: Arr;\n    recur: Arr extends ReadonlyArray<infer InnerArr> ? FlatArray<InnerArr, [-1, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20][Depth]>\n        : Arr;\n}[Depth extends -1 ? \"done\" : \"recur\"];\n\ninterface ReadonlyArray<T> {\n    /**\n     * Calls a defined callback function on each element of an array. Then, flattens the result into\n     * a new array.\n     * This is identical to a map followed by flat with depth 1.\n     *\n     * @param callback A function that accepts up to three arguments. The flatMap method calls the\n     * callback function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callback function. If\n     * thisArg is omitted, undefined is used as the this value.\n     */\n    flatMap<U, This = undefined>(\n        callback: (this: This, value: T, index: number, array: T[]) => U | ReadonlyArray<U>,\n        thisArg?: This,\n    ): U[];\n\n    /**\n     * Returns a new array with all sub-array elements concatenated into it recursively up to the\n     * specified depth.\n     *\n     * @param depth The maximum recursion depth\n     */\n    flat<A, D extends number = 1>(\n        this: A,\n        depth?: D,\n    ): FlatArray<A, D>[];\n}\n\ninterface Array<T> {\n    /**\n     * Calls a defined callback function on each element of an array. Then, flattens the result into\n     * a new array.\n     * This is identical to a map followed by flat with depth 1.\n     *\n     * @param callback A function that accepts up to three arguments. The flatMap method calls the\n     * callback function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callback function. If\n     * thisArg is omitted, undefined is used as the this value.\n     */\n    flatMap<U, This = undefined>(\n        callback: (this: This, value: T, index: number, array: T[]) => U | ReadonlyArray<U>,\n        thisArg?: This,\n    ): U[];\n\n    /**\n     * Returns a new array with all sub-array elements concatenated into it recursively up to the\n     * specified depth.\n     *\n     * @param depth The maximum recursion depth\n     */\n    flat<A, D extends number = 1>(\n        this: A,\n        depth?: D,\n    ): FlatArray<A, D>[];\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2019_d_ts.ts b/packages/paywall-build/src/lib/lib_es2019_d_ts.ts
new file mode 100644
index 000000000..64ba1a2ee
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2019_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2019_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2018\" />\n/// <reference lib=\"es2019.array\" />\n/// <reference lib=\"es2019.object\" />\n/// <reference lib=\"es2019.string\" />\n/// <reference lib=\"es2019.symbol\" />\n/// <reference lib=\"es2019.intl\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2019_intl_d_ts.ts b/packages/paywall-build/src/lib/lib_es2019_intl_d_ts.ts
new file mode 100644
index 000000000..d678fe07e
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2019_intl_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2019_intl_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare namespace Intl {\n    interface DateTimeFormatPartTypesRegistry {\n        unknown: never;\n    }\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2019_object_d_ts.ts b/packages/paywall-build/src/lib/lib_es2019_object_d_ts.ts
new file mode 100644
index 000000000..65ef1e87f
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2019_object_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2019_object_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.iterable\" />\n\ninterface ObjectConstructor {\n    /**\n     * Returns an object created by key-value entries for properties and methods\n     * @param entries An iterable object that contains key-value entries for properties and methods.\n     */\n    fromEntries<T = any>(entries: Iterable<readonly [PropertyKey, T]>): { [k: string]: T; };\n\n    /**\n     * Returns an object created by key-value entries for properties and methods\n     * @param entries An iterable object that contains key-value entries for properties and methods.\n     */\n    fromEntries(entries: Iterable<readonly any[]>): any;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2019_string_d_ts.ts b/packages/paywall-build/src/lib/lib_es2019_string_d_ts.ts
new file mode 100644
index 000000000..2a19193de
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2019_string_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2019_string_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface String {\n    /** Removes the trailing white space and line terminator characters from a string. */\n    trimEnd(): string;\n\n    /** Removes the leading white space and line terminator characters from a string. */\n    trimStart(): string;\n\n    /**\n     * Removes the leading white space and line terminator characters from a string.\n     * @deprecated A legacy feature for browser compatibility. Use `trimStart` instead\n     */\n    trimLeft(): string;\n\n    /**\n     * Removes the trailing white space and line terminator characters from a string.\n     * @deprecated A legacy feature for browser compatibility. Use `trimEnd` instead\n     */\n    trimRight(): string;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2019_symbol_d_ts.ts b/packages/paywall-build/src/lib/lib_es2019_symbol_d_ts.ts
new file mode 100644
index 000000000..0d3bfffa3
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2019_symbol_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2019_symbol_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface Symbol {\n    /**\n     * Expose the [[Description]] internal slot of a symbol directly.\n     */\n    readonly description: string | undefined;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_bigint_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_bigint_d_ts.ts
new file mode 100644
index 000000000..ed507ff68
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_bigint_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_bigint_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2020.intl\" />\n\ninterface BigIntToLocaleStringOptions {\n    /**\n     * The locale matching algorithm to use.The default is \"best fit\". For information about this option, see the {@link https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_negotiation Intl page}.\n     */\n    localeMatcher?: string;\n    /**\n     * The formatting style to use , the default is \"decimal\".\n     */\n    style?: string;\n\n    numberingSystem?: string;\n    /**\n     * The unit to use in unit formatting, Possible values are core unit identifiers, defined in UTS #35, Part 2, Section 6. A subset of units from the full list was selected for use in ECMAScript. Pairs of simple units can be concatenated with \"-per-\" to make a compound unit. There is no default value; if the style is \"unit\", the unit property must be provided.\n     */\n    unit?: string;\n\n    /**\n     * The unit formatting style to use in unit formatting, the defaults is \"short\".\n     */\n    unitDisplay?: string;\n\n    /**\n     * The currency to use in currency formatting. Possible values are the ISO 4217 currency codes, such as \"USD\" for the US dollar, \"EUR\" for the euro, or \"CNY\" for the Chinese RMB — see the Current currency & funds code list. There is no default value; if the style is \"currency\", the currency property must be provided. It is only used when [[Style]] has the value \"currency\".\n     */\n    currency?: string;\n\n    /**\n     * How to display the currency in currency formatting. It is only used when [[Style]] has the value \"currency\". The default is \"symbol\".\n     *\n     * \"symbol\" to use a localized currency symbol such as €,\n     *\n     * \"code\" to use the ISO currency code,\n     *\n     * \"name\" to use a localized currency name such as \"dollar\"\n     */\n    currencyDisplay?: string;\n\n    /**\n     * Whether to use grouping separators, such as thousands separators or thousand/lakh/crore separators. The default is true.\n     */\n    useGrouping?: boolean;\n\n    /**\n     * The minimum number of integer digits to use. Possible values are from 1 to 21; the default is 1.\n     */\n    minimumIntegerDigits?: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21;\n\n    /**\n     * The minimum number of fraction digits to use. Possible values are from 0 to 20; the default for plain number and percent formatting is 0; the default for currency formatting is the number of minor unit digits provided by the {@link http://www.currency-iso.org/en/home/tables/table-a1.html ISO 4217 currency codes list} (2 if the list doesn't provide that information).\n     */\n    minimumFractionDigits?: 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20;\n\n    /**\n     * The maximum number of fraction digits to use. Possible values are from 0 to 20; the default for plain number formatting is the larger of minimumFractionDigits and 3; the default for currency formatting is the larger of minimumFractionDigits and the number of minor unit digits provided by the {@link http://www.currency-iso.org/en/home/tables/table-a1.html ISO 4217 currency codes list} (2 if the list doesn't provide that information); the default for percent formatting is the larger of minimumFractionDigits and 0.\n     */\n    maximumFractionDigits?: 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20;\n\n    /**\n     * The minimum number of significant digits to use. Possible values are from 1 to 21; the default is 1.\n     */\n    minimumSignificantDigits?: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21;\n\n    /**\n     * The maximum number of significant digits to use. Possible values are from 1 to 21; the default is 21.\n     */\n    maximumSignificantDigits?: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21;\n\n    /**\n     * The formatting that should be displayed for the number, the defaults is \"standard\"\n     *\n     *     \"standard\" plain number formatting\n     *\n     *     \"scientific\" return the order-of-magnitude for formatted number.\n     *\n     *     \"engineering\" return the exponent of ten when divisible by three\n     *\n     *     \"compact\" string representing exponent, defaults is using the \"short\" form\n     */\n    notation?: string;\n\n    /**\n     * used only when notation is \"compact\"\n     */\n    compactDisplay?: string;\n}\n\ninterface BigInt {\n    /**\n     * Returns a string representation of an object.\n     * @param radix Specifies a radix for converting numeric values to strings.\n     */\n    toString(radix?: number): string;\n\n    /** Returns a string representation appropriate to the host environment's current locale. */\n    toLocaleString(locales?: Intl.LocalesArgument, options?: BigIntToLocaleStringOptions): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): bigint;\n\n    readonly [Symbol.toStringTag]: \"BigInt\";\n}\n\ninterface BigIntConstructor {\n    (value: bigint | boolean | number | string): bigint;\n    readonly prototype: BigInt;\n\n    /**\n     * Interprets the low bits of a BigInt as a 2's-complement signed integer.\n     * All higher bits are discarded.\n     * @param bits The number of low bits to use\n     * @param int The BigInt whose bits to extract\n     */\n    asIntN(bits: number, int: bigint): bigint;\n    /**\n     * Interprets the low bits of a BigInt as an unsigned integer.\n     * All higher bits are discarded.\n     * @param bits The number of low bits to use\n     * @param int The BigInt whose bits to extract\n     */\n    asUintN(bits: number, int: bigint): bigint;\n}\n\ndeclare var BigInt: BigIntConstructor;\n\n/**\n * A typed array of 64-bit signed integer values. The contents are initialized to 0. If the\n * requested number of bytes could not be allocated, an exception is raised.\n */\ninterface BigInt64Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /** The size in bytes of each element in the array. */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /** The ArrayBuffer instance referenced by the array. */\n    readonly buffer: TArrayBuffer;\n\n    /** The length in bytes of the array. */\n    readonly byteLength: number;\n\n    /** The offset in bytes of the array. */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /** Yields index, value pairs for every entry in the array. */\n    entries(): ArrayIterator<[number, bigint]>;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns false,\n     * or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: bigint, index: number, array: BigInt64Array<TArrayBuffer>) => boolean, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: bigint, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: bigint, index: number, array: BigInt64Array<TArrayBuffer>) => any, thisArg?: any): BigInt64Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: bigint, index: number, array: BigInt64Array<TArrayBuffer>) => boolean, thisArg?: any): bigint | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: bigint, index: number, array: BigInt64Array<TArrayBuffer>) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: bigint, index: number, array: BigInt64Array<TArrayBuffer>) => void, thisArg?: any): void;\n\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: bigint, fromIndex?: number): boolean;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: bigint, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /** Yields each index in the array. */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: bigint, fromIndex?: number): number;\n\n    /** The length of the array. */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: bigint, index: number, array: BigInt64Array<TArrayBuffer>) => bigint, thisArg?: any): BigInt64Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: bigint, currentValue: bigint, currentIndex: number, array: BigInt64Array<TArrayBuffer>) => bigint): bigint;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: bigint, currentIndex: number, array: BigInt64Array<TArrayBuffer>) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: bigint, currentValue: bigint, currentIndex: number, array: BigInt64Array<TArrayBuffer>) => bigint): bigint;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: bigint, currentIndex: number, array: BigInt64Array<TArrayBuffer>) => U, initialValue: U): U;\n\n    /** Reverses the elements in the array. */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<bigint>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array.\n     */\n    slice(start?: number, end?: number): BigInt64Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls the\n     * predicate function for each element in the array until the predicate returns true, or until\n     * the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: bigint, index: number, array: BigInt64Array<TArrayBuffer>) => boolean, thisArg?: any): boolean;\n\n    /**\n     * Sorts the array.\n     * @param compareFn The function used to determine the order of the elements. If omitted, the elements are sorted in ascending order.\n     */\n    sort(compareFn?: (a: bigint, b: bigint) => number | bigint): this;\n\n    /**\n     * Gets a new BigInt64Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): BigInt64Array<TArrayBuffer>;\n\n    /** Converts the array to a string by using the current locale. */\n    toLocaleString(locales?: string | string[], options?: Intl.NumberFormatOptions): string;\n\n    /** Returns a string representation of the array. */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): BigInt64Array<TArrayBuffer>;\n\n    /** Yields each value in the array. */\n    values(): ArrayIterator<bigint>;\n\n    [Symbol.iterator](): ArrayIterator<bigint>;\n\n    readonly [Symbol.toStringTag]: \"BigInt64Array\";\n\n    [index: number]: bigint;\n}\ninterface BigInt64ArrayConstructor {\n    readonly prototype: BigInt64Array<ArrayBufferLike>;\n    new (length?: number): BigInt64Array<ArrayBuffer>;\n    new (array: ArrayLike<bigint> | Iterable<bigint>): BigInt64Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): BigInt64Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): BigInt64Array<ArrayBuffer>;\n    new (array: ArrayLike<bigint> | ArrayBuffer): BigInt64Array<ArrayBuffer>;\n\n    /** The size in bytes of each element in the array. */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: bigint[]): BigInt64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<bigint>): BigInt64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<U>(arrayLike: ArrayLike<U>, mapfn: (v: U, k: number) => bigint, thisArg?: any): BigInt64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<bigint>): BigInt64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => bigint, thisArg?: any): BigInt64Array<ArrayBuffer>;\n}\ndeclare var BigInt64Array: BigInt64ArrayConstructor;\n\n/**\n * A typed array of 64-bit unsigned integer values. The contents are initialized to 0. If the\n * requested number of bytes could not be allocated, an exception is raised.\n */\ninterface BigUint64Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /** The size in bytes of each element in the array. */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /** The ArrayBuffer instance referenced by the array. */\n    readonly buffer: TArrayBuffer;\n\n    /** The length in bytes of the array. */\n    readonly byteLength: number;\n\n    /** The offset in bytes of the array. */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /** Yields index, value pairs for every entry in the array. */\n    entries(): ArrayIterator<[number, bigint]>;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns false,\n     * or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: bigint, index: number, array: BigUint64Array<TArrayBuffer>) => boolean, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: bigint, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: bigint, index: number, array: BigUint64Array<TArrayBuffer>) => any, thisArg?: any): BigUint64Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: bigint, index: number, array: BigUint64Array<TArrayBuffer>) => boolean, thisArg?: any): bigint | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: bigint, index: number, array: BigUint64Array<TArrayBuffer>) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: bigint, index: number, array: BigUint64Array<TArrayBuffer>) => void, thisArg?: any): void;\n\n    /**\n     * Determines whether an array includes a certain element, returning true or false as appropriate.\n     * @param searchElement The element to search for.\n     * @param fromIndex The position in this array at which to begin searching for searchElement.\n     */\n    includes(searchElement: bigint, fromIndex?: number): boolean;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: bigint, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /** Yields each index in the array. */\n    keys(): ArrayIterator<number>;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: bigint, fromIndex?: number): number;\n\n    /** The length of the array. */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: bigint, index: number, array: BigUint64Array<TArrayBuffer>) => bigint, thisArg?: any): BigUint64Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: bigint, currentValue: bigint, currentIndex: number, array: BigUint64Array<TArrayBuffer>) => bigint): bigint;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: bigint, currentIndex: number, array: BigUint64Array<TArrayBuffer>) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: bigint, currentValue: bigint, currentIndex: number, array: BigUint64Array<TArrayBuffer>) => bigint): bigint;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: bigint, currentIndex: number, array: BigUint64Array<TArrayBuffer>) => U, initialValue: U): U;\n\n    /** Reverses the elements in the array. */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<bigint>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array.\n     */\n    slice(start?: number, end?: number): BigUint64Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls the\n     * predicate function for each element in the array until the predicate returns true, or until\n     * the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: bigint, index: number, array: BigUint64Array<TArrayBuffer>) => boolean, thisArg?: any): boolean;\n\n    /**\n     * Sorts the array.\n     * @param compareFn The function used to determine the order of the elements. If omitted, the elements are sorted in ascending order.\n     */\n    sort(compareFn?: (a: bigint, b: bigint) => number | bigint): this;\n\n    /**\n     * Gets a new BigUint64Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): BigUint64Array<TArrayBuffer>;\n\n    /** Converts the array to a string by using the current locale. */\n    toLocaleString(locales?: string | string[], options?: Intl.NumberFormatOptions): string;\n\n    /** Returns a string representation of the array. */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): BigUint64Array<TArrayBuffer>;\n\n    /** Yields each value in the array. */\n    values(): ArrayIterator<bigint>;\n\n    [Symbol.iterator](): ArrayIterator<bigint>;\n\n    readonly [Symbol.toStringTag]: \"BigUint64Array\";\n\n    [index: number]: bigint;\n}\ninterface BigUint64ArrayConstructor {\n    readonly prototype: BigUint64Array<ArrayBufferLike>;\n    new (length?: number): BigUint64Array<ArrayBuffer>;\n    new (array: ArrayLike<bigint> | Iterable<bigint>): BigUint64Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): BigUint64Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): BigUint64Array<ArrayBuffer>;\n    new (array: ArrayLike<bigint> | ArrayBuffer): BigUint64Array<ArrayBuffer>;\n\n    /** The size in bytes of each element in the array. */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: bigint[]): BigUint64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<bigint>): BigUint64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<U>(arrayLike: ArrayLike<U>, mapfn: (v: U, k: number) => bigint, thisArg?: any): BigUint64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     */\n    from(elements: Iterable<bigint>): BigUint64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param elements An iterable object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(elements: Iterable<T>, mapfn?: (v: T, k: number) => bigint, thisArg?: any): BigUint64Array<ArrayBuffer>;\n}\ndeclare var BigUint64Array: BigUint64ArrayConstructor;\n\ninterface DataView<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Gets the BigInt64 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getBigInt64(byteOffset: number, littleEndian?: boolean): bigint;\n\n    /**\n     * Gets the BigUint64 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getBigUint64(byteOffset: number, littleEndian?: boolean): bigint;\n\n    /**\n     * Stores a BigInt64 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setBigInt64(byteOffset: number, value: bigint, littleEndian?: boolean): void;\n\n    /**\n     * Stores a BigUint64 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setBigUint64(byteOffset: number, value: bigint, littleEndian?: boolean): void;\n}\n\ndeclare namespace Intl {\n    interface NumberFormat {\n        format(value: number | bigint): string;\n    }\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_d_ts.ts
new file mode 100644
index 000000000..968b6f3b4
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2019\" />\n/// <reference lib=\"es2020.bigint\" />\n/// <reference lib=\"es2020.date\" />\n/// <reference lib=\"es2020.number\" />\n/// <reference lib=\"es2020.promise\" />\n/// <reference lib=\"es2020.sharedmemory\" />\n/// <reference lib=\"es2020.string\" />\n/// <reference lib=\"es2020.symbol.wellknown\" />\n/// <reference lib=\"es2020.intl\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_date_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_date_d_ts.ts
new file mode 100644
index 000000000..b7f3fdd47
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_date_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_date_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2020.intl\" />\n\ninterface Date {\n    /**\n     * Converts a date and time to a string by using the current or specified locale.\n     * @param locales A locale string, array of locale strings, Intl.Locale object, or array of Intl.Locale objects that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleString(locales?: Intl.LocalesArgument, options?: Intl.DateTimeFormatOptions): string;\n\n    /**\n     * Converts a date to a string by using the current or specified locale.\n     * @param locales A locale string, array of locale strings, Intl.Locale object, or array of Intl.Locale objects that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleDateString(locales?: Intl.LocalesArgument, options?: Intl.DateTimeFormatOptions): string;\n\n    /**\n     * Converts a time to a string by using the current or specified locale.\n     * @param locales A locale string, array of locale strings, Intl.Locale object, or array of Intl.Locale objects that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleTimeString(locales?: Intl.LocalesArgument, options?: Intl.DateTimeFormatOptions): string;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_intl_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_intl_d_ts.ts
new file mode 100644
index 000000000..873d40de0
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_intl_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_intl_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2018.intl\" />\ndeclare namespace Intl {\n    /**\n     * A string that is a valid [Unicode BCP 47 Locale Identifier](https://unicode.org/reports/tr35/#Unicode_locale_identifier).\n     *\n     * For example: \"fa\", \"es-MX\", \"zh-Hant-TW\".\n     *\n     * See [MDN - Intl - locales argument](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#locales_argument).\n     */\n    type UnicodeBCP47LocaleIdentifier = string;\n\n    /**\n     * Unit to use in the relative time internationalized message.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/format#Parameters).\n     */\n    type RelativeTimeFormatUnit =\n        | \"year\"\n        | \"years\"\n        | \"quarter\"\n        | \"quarters\"\n        | \"month\"\n        | \"months\"\n        | \"week\"\n        | \"weeks\"\n        | \"day\"\n        | \"days\"\n        | \"hour\"\n        | \"hours\"\n        | \"minute\"\n        | \"minutes\"\n        | \"second\"\n        | \"seconds\";\n\n    /**\n     * Value of the `unit` property in objects returned by\n     * `Intl.RelativeTimeFormat.prototype.formatToParts()`. `formatToParts` and\n     * `format` methods accept either singular or plural unit names as input,\n     * but `formatToParts` only outputs singular (e.g. \"day\") not plural (e.g.\n     * \"days\").\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/formatToParts#Using_formatToParts).\n     */\n    type RelativeTimeFormatUnitSingular =\n        | \"year\"\n        | \"quarter\"\n        | \"month\"\n        | \"week\"\n        | \"day\"\n        | \"hour\"\n        | \"minute\"\n        | \"second\";\n\n    /**\n     * The locale matching algorithm to use.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_negotiation).\n     */\n    type RelativeTimeFormatLocaleMatcher = \"lookup\" | \"best fit\";\n\n    /**\n     * The format of output message.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/RelativeTimeFormat#Parameters).\n     */\n    type RelativeTimeFormatNumeric = \"always\" | \"auto\";\n\n    /**\n     * The length of the internationalized message.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/RelativeTimeFormat#Parameters).\n     */\n    type RelativeTimeFormatStyle = \"long\" | \"short\" | \"narrow\";\n\n    /**\n     * The locale or locales to use\n     *\n     * See [MDN - Intl - locales argument](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#locales_argument).\n     */\n    type LocalesArgument = UnicodeBCP47LocaleIdentifier | Locale | readonly (UnicodeBCP47LocaleIdentifier | Locale)[] | undefined;\n\n    /**\n     * An object with some or all of properties of `options` parameter\n     * of `Intl.RelativeTimeFormat` constructor.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/RelativeTimeFormat#Parameters).\n     */\n    interface RelativeTimeFormatOptions {\n        /** The locale matching algorithm to use. For information about this option, see [Intl page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_negotiation). */\n        localeMatcher?: RelativeTimeFormatLocaleMatcher;\n        /** The format of output message. */\n        numeric?: RelativeTimeFormatNumeric;\n        /** The length of the internationalized message. */\n        style?: RelativeTimeFormatStyle;\n    }\n\n    /**\n     * An object with properties reflecting the locale\n     * and formatting options computed during initialization\n     * of the `Intl.RelativeTimeFormat` object\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/resolvedOptions#Description).\n     */\n    interface ResolvedRelativeTimeFormatOptions {\n        locale: UnicodeBCP47LocaleIdentifier;\n        style: RelativeTimeFormatStyle;\n        numeric: RelativeTimeFormatNumeric;\n        numberingSystem: string;\n    }\n\n    /**\n     * An object representing the relative time format in parts\n     * that can be used for custom locale-aware formatting.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/formatToParts#Using_formatToParts).\n     */\n    type RelativeTimeFormatPart =\n        | {\n            type: \"literal\";\n            value: string;\n        }\n        | {\n            type: Exclude<NumberFormatPartTypes, \"literal\">;\n            value: string;\n            unit: RelativeTimeFormatUnitSingular;\n        };\n\n    interface RelativeTimeFormat {\n        /**\n         * Formats a value and a unit according to the locale\n         * and formatting options of the given\n         * [`Intl.RelativeTimeFormat`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/RelativeTimeFormat)\n         * object.\n         *\n         * While this method automatically provides the correct plural forms,\n         * the grammatical form is otherwise as neutral as possible.\n         *\n         * It is the caller's responsibility to handle cut-off logic\n         * such as deciding between displaying \"in 7 days\" or \"in 1 week\".\n         * This API does not support relative dates involving compound units.\n         * e.g \"in 5 days and 4 hours\".\n         *\n         * @param value -  Numeric value to use in the internationalized relative time message\n         *\n         * @param unit - [Unit](https://tc39.es/ecma402/#sec-singularrelativetimeunit) to use in the relative time internationalized message.\n         *\n         * @throws `RangeError` if `unit` was given something other than `unit` possible values\n         *\n         * @returns {string} Internationalized relative time message as string\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/format).\n         */\n        format(value: number, unit: RelativeTimeFormatUnit): string;\n\n        /**\n         *  Returns an array of objects representing the relative time format in parts that can be used for custom locale-aware formatting.\n         *\n         *  @param value - Numeric value to use in the internationalized relative time message\n         *\n         *  @param unit - [Unit](https://tc39.es/ecma402/#sec-singularrelativetimeunit) to use in the relative time internationalized message.\n         *\n         *  @throws `RangeError` if `unit` was given something other than `unit` possible values\n         *\n         *  [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/formatToParts).\n         */\n        formatToParts(value: number, unit: RelativeTimeFormatUnit): RelativeTimeFormatPart[];\n\n        /**\n         * Provides access to the locale and options computed during initialization of this `Intl.RelativeTimeFormat` object.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/resolvedOptions).\n         */\n        resolvedOptions(): ResolvedRelativeTimeFormatOptions;\n    }\n\n    /**\n     * The [`Intl.RelativeTimeFormat`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/RelativeTimeFormat)\n     * object is a constructor for objects that enable language-sensitive relative time formatting.\n     *\n     * [Compatibility](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat#Browser_compatibility).\n     */\n    const RelativeTimeFormat: {\n        /**\n         * Creates [Intl.RelativeTimeFormat](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/RelativeTimeFormat) objects\n         *\n         * @param locales - A string with a [BCP 47 language tag](http://tools.ietf.org/html/rfc5646), or an array of such strings.\n         *  For the general form and interpretation of the locales argument,\n         *  see the [`Intl` page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_identification_and_negotiation).\n         *\n         * @param options - An [object](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/RelativeTimeFormat#Parameters)\n         *  with some or all of options of `RelativeTimeFormatOptions`.\n         *\n         * @returns [Intl.RelativeTimeFormat](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/RelativeTimeFormat) object.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/RelativeTimeFormat).\n         */\n        new (\n            locales?: LocalesArgument,\n            options?: RelativeTimeFormatOptions,\n        ): RelativeTimeFormat;\n\n        /**\n         * Returns an array containing those of the provided locales\n         * that are supported in date and time formatting\n         * without having to fall back to the runtime's default locale.\n         *\n         * @param locales - A string with a [BCP 47 language tag](http://tools.ietf.org/html/rfc5646), or an array of such strings.\n         *  For the general form and interpretation of the locales argument,\n         *  see the [`Intl` page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_identification_and_negotiation).\n         *\n         * @param options - An [object](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/RelativeTimeFormat#Parameters)\n         *  with some or all of options of the formatting.\n         *\n         * @returns An array containing those of the provided locales\n         *  that are supported in date and time formatting\n         *  without having to fall back to the runtime's default locale.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/RelativeTimeFormat/supportedLocalesOf).\n         */\n        supportedLocalesOf(\n            locales?: LocalesArgument,\n            options?: RelativeTimeFormatOptions,\n        ): UnicodeBCP47LocaleIdentifier[];\n    };\n\n    interface NumberFormatOptionsStyleRegistry {\n        unit: never;\n    }\n\n    interface NumberFormatOptionsCurrencyDisplayRegistry {\n        narrowSymbol: never;\n    }\n\n    interface NumberFormatOptionsSignDisplayRegistry {\n        auto: never;\n        never: never;\n        always: never;\n        exceptZero: never;\n    }\n\n    type NumberFormatOptionsSignDisplay = keyof NumberFormatOptionsSignDisplayRegistry;\n\n    interface NumberFormatOptions {\n        numberingSystem?: string | undefined;\n        compactDisplay?: \"short\" | \"long\" | undefined;\n        notation?: \"standard\" | \"scientific\" | \"engineering\" | \"compact\" | undefined;\n        signDisplay?: NumberFormatOptionsSignDisplay | undefined;\n        unit?: string | undefined;\n        unitDisplay?: \"short\" | \"long\" | \"narrow\" | undefined;\n        currencySign?: \"standard\" | \"accounting\" | undefined;\n    }\n\n    interface ResolvedNumberFormatOptions {\n        compactDisplay?: \"short\" | \"long\";\n        notation: \"standard\" | \"scientific\" | \"engineering\" | \"compact\";\n        signDisplay: NumberFormatOptionsSignDisplay;\n        unit?: string;\n        unitDisplay?: \"short\" | \"long\" | \"narrow\";\n        currencySign?: \"standard\" | \"accounting\";\n    }\n\n    interface NumberFormatPartTypeRegistry {\n        compact: never;\n        exponentInteger: never;\n        exponentMinusSign: never;\n        exponentSeparator: never;\n        unit: never;\n        unknown: never;\n    }\n\n    interface DateTimeFormatOptions {\n        calendar?: string | undefined;\n        dayPeriod?: \"narrow\" | \"short\" | \"long\" | undefined;\n        numberingSystem?: string | undefined;\n\n        dateStyle?: \"full\" | \"long\" | \"medium\" | \"short\" | undefined;\n        timeStyle?: \"full\" | \"long\" | \"medium\" | \"short\" | undefined;\n        hourCycle?: \"h11\" | \"h12\" | \"h23\" | \"h24\" | undefined;\n    }\n\n    type LocaleHourCycleKey = \"h12\" | \"h23\" | \"h11\" | \"h24\";\n    type LocaleCollationCaseFirst = \"upper\" | \"lower\" | \"false\";\n\n    interface LocaleOptions {\n        /** A string containing the language, and the script and region if available. */\n        baseName?: string;\n        /** The part of the Locale that indicates the locale's calendar era. */\n        calendar?: string;\n        /** Flag that defines whether case is taken into account for the locale's collation rules. */\n        caseFirst?: LocaleCollationCaseFirst;\n        /** The collation type used for sorting */\n        collation?: string;\n        /** The time keeping format convention used by the locale. */\n        hourCycle?: LocaleHourCycleKey;\n        /** The primary language subtag associated with the locale. */\n        language?: string;\n        /** The numeral system used by the locale. */\n        numberingSystem?: string;\n        /** Flag that defines whether the locale has special collation handling for numeric characters. */\n        numeric?: boolean;\n        /** The region of the world (usually a country) associated with the locale. Possible values are region codes as defined by ISO 3166-1. */\n        region?: string;\n        /** The script used for writing the particular language used in the locale. Possible values are script codes as defined by ISO 15924. */\n        script?: string;\n    }\n\n    interface Locale extends LocaleOptions {\n        /** A string containing the language, and the script and region if available. */\n        baseName: string;\n        /** The primary language subtag associated with the locale. */\n        language: string;\n        /** Gets the most likely values for the language, script, and region of the locale based on existing values. */\n        maximize(): Locale;\n        /** Attempts to remove information about the locale that would be added by calling `Locale.maximize()`. */\n        minimize(): Locale;\n        /** Returns the locale's full locale identifier string. */\n        toString(): UnicodeBCP47LocaleIdentifier;\n    }\n\n    /**\n     * Constructor creates [Intl.Locale](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Locale)\n     * objects\n     *\n     * @param tag - A string with a [BCP 47 language tag](http://tools.ietf.org/html/rfc5646).\n     *  For the general form and interpretation of the locales argument,\n     *  see the [`Intl` page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_identification_and_negotiation).\n     *\n     * @param options - An [object](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Locale/Locale#Parameters) with some or all of options of the locale.\n     *\n     * @returns [Intl.Locale](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Locale) object.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Locale).\n     */\n    const Locale: {\n        new (tag: UnicodeBCP47LocaleIdentifier | Locale, options?: LocaleOptions): Locale;\n    };\n\n    type DisplayNamesFallback =\n        | \"code\"\n        | \"none\";\n\n    type DisplayNamesType =\n        | \"language\"\n        | \"region\"\n        | \"script\"\n        | \"calendar\"\n        | \"dateTimeField\"\n        | \"currency\";\n\n    type DisplayNamesLanguageDisplay =\n        | \"dialect\"\n        | \"standard\";\n\n    interface DisplayNamesOptions {\n        localeMatcher?: RelativeTimeFormatLocaleMatcher;\n        style?: RelativeTimeFormatStyle;\n        type: DisplayNamesType;\n        languageDisplay?: DisplayNamesLanguageDisplay;\n        fallback?: DisplayNamesFallback;\n    }\n\n    interface ResolvedDisplayNamesOptions {\n        locale: UnicodeBCP47LocaleIdentifier;\n        style: RelativeTimeFormatStyle;\n        type: DisplayNamesType;\n        fallback: DisplayNamesFallback;\n        languageDisplay?: DisplayNamesLanguageDisplay;\n    }\n\n    interface DisplayNames {\n        /**\n         * Receives a code and returns a string based on the locale and options provided when instantiating\n         * [`Intl.DisplayNames()`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames)\n         *\n         * @param code The `code` to provide depends on the `type` passed to display name during creation:\n         *  - If the type is `\"region\"`, code should be either an [ISO-3166 two letters region code](https://www.iso.org/iso-3166-country-codes.html),\n         *    or a [three digits UN M49 Geographic Regions](https://unstats.un.org/unsd/methodology/m49/).\n         *  - If the type is `\"script\"`, code should be an [ISO-15924 four letters script code](https://unicode.org/iso15924/iso15924-codes.html).\n         *  - If the type is `\"language\"`, code should be a `languageCode` [\"-\" `scriptCode`] [\"-\" `regionCode` ] *(\"-\" `variant` )\n         *    subsequence of the unicode_language_id grammar in [UTS 35's Unicode Language and Locale Identifiers grammar](https://unicode.org/reports/tr35/#Unicode_language_identifier).\n         *    `languageCode` is either a two letters ISO 639-1 language code or a three letters ISO 639-2 language code.\n         *  - If the type is `\"currency\"`, code should be a [3-letter ISO 4217 currency code](https://www.iso.org/iso-4217-currency-codes.html).\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames/of).\n         */\n        of(code: string): string | undefined;\n        /**\n         * Returns a new object with properties reflecting the locale and style formatting options computed during the construction of the current\n         * [`Intl/DisplayNames`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames) object.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames/resolvedOptions).\n         */\n        resolvedOptions(): ResolvedDisplayNamesOptions;\n    }\n\n    /**\n     * The [`Intl.DisplayNames()`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames)\n     * object enables the consistent translation of language, region and script display names.\n     *\n     * [Compatibility](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames#browser_compatibility).\n     */\n    const DisplayNames: {\n        prototype: DisplayNames;\n\n        /**\n         * @param locales A string with a BCP 47 language tag, or an array of such strings.\n         *   For the general form and interpretation of the `locales` argument, see the [Intl](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#locale_identification_and_negotiation)\n         *   page.\n         *\n         * @param options An object for setting up a display name.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames/DisplayNames).\n         */\n        new (locales: LocalesArgument, options: DisplayNamesOptions): DisplayNames;\n\n        /**\n         * Returns an array containing those of the provided locales that are supported in display names without having to fall back to the runtime's default locale.\n         *\n         * @param locales A string with a BCP 47 language tag, or an array of such strings.\n         *   For the general form and interpretation of the `locales` argument, see the [Intl](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#locale_identification_and_negotiation)\n         *   page.\n         *\n         * @param options An object with a locale matcher.\n         *\n         * @returns An array of strings representing a subset of the given locale tags that are supported in display names without having to fall back to the runtime's default locale.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/DisplayNames/supportedLocalesOf).\n         */\n        supportedLocalesOf(locales?: LocalesArgument, options?: { localeMatcher?: RelativeTimeFormatLocaleMatcher; }): UnicodeBCP47LocaleIdentifier[];\n    };\n\n    interface CollatorConstructor {\n        new (locales?: LocalesArgument, options?: CollatorOptions): Collator;\n        (locales?: LocalesArgument, options?: CollatorOptions): Collator;\n        supportedLocalesOf(locales: LocalesArgument, options?: CollatorOptions): string[];\n    }\n\n    interface DateTimeFormatConstructor {\n        new (locales?: LocalesArgument, options?: DateTimeFormatOptions): DateTimeFormat;\n        (locales?: LocalesArgument, options?: DateTimeFormatOptions): DateTimeFormat;\n        supportedLocalesOf(locales: LocalesArgument, options?: DateTimeFormatOptions): string[];\n    }\n\n    interface NumberFormatConstructor {\n        new (locales?: LocalesArgument, options?: NumberFormatOptions): NumberFormat;\n        (locales?: LocalesArgument, options?: NumberFormatOptions): NumberFormat;\n        supportedLocalesOf(locales: LocalesArgument, options?: NumberFormatOptions): string[];\n    }\n\n    interface PluralRulesConstructor {\n        new (locales?: LocalesArgument, options?: PluralRulesOptions): PluralRules;\n        (locales?: LocalesArgument, options?: PluralRulesOptions): PluralRules;\n\n        supportedLocalesOf(locales: LocalesArgument, options?: { localeMatcher?: \"lookup\" | \"best fit\"; }): string[];\n    }\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_number_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_number_d_ts.ts
new file mode 100644
index 000000000..06ec847ce
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_number_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_number_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2020.intl\" />\n\ninterface Number {\n    /**\n     * Converts a number to a string by using the current or specified locale.\n     * @param locales A locale string, array of locale strings, Intl.Locale object, or array of Intl.Locale objects that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleString(locales?: Intl.LocalesArgument, options?: Intl.NumberFormatOptions): string;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_promise_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_promise_d_ts.ts
new file mode 100644
index 000000000..5d1a58a5d
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_promise_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_promise_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface PromiseFulfilledResult<T> {\n    status: \"fulfilled\";\n    value: T;\n}\n\ninterface PromiseRejectedResult {\n    status: \"rejected\";\n    reason: any;\n}\n\ntype PromiseSettledResult<T> = PromiseFulfilledResult<T> | PromiseRejectedResult;\n\ninterface PromiseConstructor {\n    /**\n     * Creates a Promise that is resolved with an array of results when all\n     * of the provided Promises resolve or reject.\n     * @param values An array of Promises.\n     * @returns A new Promise.\n     */\n    allSettled<T extends readonly unknown[] | []>(values: T): Promise<{ -readonly [P in keyof T]: PromiseSettledResult<Awaited<T[P]>>; }>;\n\n    /**\n     * Creates a Promise that is resolved with an array of results when all\n     * of the provided Promises resolve or reject.\n     * @param values An array of Promises.\n     * @returns A new Promise.\n     */\n    allSettled<T>(values: Iterable<T | PromiseLike<T>>): Promise<PromiseSettledResult<Awaited<T>>[]>;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_sharedmemory_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_sharedmemory_d_ts.ts
new file mode 100644
index 000000000..846caa8e5
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_sharedmemory_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_sharedmemory_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2020.bigint\" />\n\ninterface Atomics {\n    /**\n     * Adds a value to the value at the given position in the array, returning the original value.\n     * Until this atomic operation completes, any other read or write operation against the array\n     * will block.\n     */\n    add(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, value: bigint): bigint;\n\n    /**\n     * Stores the bitwise AND of a value with the value at the given position in the array,\n     * returning the original value. Until this atomic operation completes, any other read or\n     * write operation against the array will block.\n     */\n    and(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, value: bigint): bigint;\n\n    /**\n     * Replaces the value at the given position in the array if the original value equals the given\n     * expected value, returning the original value. Until this atomic operation completes, any\n     * other read or write operation against the array will block.\n     */\n    compareExchange(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, expectedValue: bigint, replacementValue: bigint): bigint;\n\n    /**\n     * Replaces the value at the given position in the array, returning the original value. Until\n     * this atomic operation completes, any other read or write operation against the array will\n     * block.\n     */\n    exchange(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, value: bigint): bigint;\n\n    /**\n     * Returns the value at the given position in the array. Until this atomic operation completes,\n     * any other read or write operation against the array will block.\n     */\n    load(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number): bigint;\n\n    /**\n     * Stores the bitwise OR of a value with the value at the given position in the array,\n     * returning the original value. Until this atomic operation completes, any other read or write\n     * operation against the array will block.\n     */\n    or(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, value: bigint): bigint;\n\n    /**\n     * Stores a value at the given position in the array, returning the new value. Until this\n     * atomic operation completes, any other read or write operation against the array will block.\n     */\n    store(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, value: bigint): bigint;\n\n    /**\n     * Subtracts a value from the value at the given position in the array, returning the original\n     * value. Until this atomic operation completes, any other read or write operation against the\n     * array will block.\n     */\n    sub(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, value: bigint): bigint;\n\n    /**\n     * If the value at the given position in the array is equal to the provided value, the current\n     * agent is put to sleep causing execution to suspend until the timeout expires (returning\n     * `\"timed-out\"`) or until the agent is awoken (returning `\"ok\"`); otherwise, returns\n     * `\"not-equal\"`.\n     */\n    wait(typedArray: BigInt64Array<ArrayBufferLike>, index: number, value: bigint, timeout?: number): \"ok\" | \"not-equal\" | \"timed-out\";\n\n    /**\n     * Wakes up sleeping agents that are waiting on the given index of the array, returning the\n     * number of agents that were awoken.\n     * @param typedArray A shared BigInt64Array.\n     * @param index The position in the typedArray to wake up on.\n     * @param count The number of sleeping agents to notify. Defaults to +Infinity.\n     */\n    notify(typedArray: BigInt64Array<ArrayBufferLike>, index: number, count?: number): number;\n\n    /**\n     * Stores the bitwise XOR of a value with the value at the given position in the array,\n     * returning the original value. Until this atomic operation completes, any other read or write\n     * operation against the array will block.\n     */\n    xor(typedArray: BigInt64Array<ArrayBufferLike> | BigUint64Array<ArrayBufferLike>, index: number, value: bigint): bigint;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_string_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_string_d_ts.ts
new file mode 100644
index 000000000..415a6728c
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_string_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_string_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.iterable\" />\n/// <reference lib=\"es2020.intl\" />\n/// <reference lib=\"es2020.symbol.wellknown\" />\n\ninterface String {\n    /**\n     * Matches a string with a regular expression, and returns an iterable of matches\n     * containing the results of that search.\n     * @param regexp A regular expression\n     */\n    matchAll(regexp: RegExp): RegExpStringIterator<RegExpExecArray>;\n\n    /** Converts all alphabetic characters to lowercase, taking into account the host environment's current locale. */\n    toLocaleLowerCase(locales?: Intl.LocalesArgument): string;\n\n    /** Returns a string where all alphabetic characters have been converted to uppercase, taking into account the host environment's current locale. */\n    toLocaleUpperCase(locales?: Intl.LocalesArgument): string;\n\n    /**\n     * Determines whether two strings are equivalent in the current or specified locale.\n     * @param that String to compare to target string\n     * @param locales A locale string or array of locale strings that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used. This parameter must conform to BCP 47 standards; see the Intl.Collator object for details.\n     * @param options An object that contains one or more properties that specify comparison options. see the Intl.Collator object for details.\n     */\n    localeCompare(that: string, locales?: Intl.LocalesArgument, options?: Intl.CollatorOptions): number;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2020_symbol_wellknown_d_ts.ts b/packages/paywall-build/src/lib/lib_es2020_symbol_wellknown_d_ts.ts
new file mode 100644
index 000000000..8cc9c3708
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2020_symbol_wellknown_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2020_symbol_wellknown_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.iterable\" />\n/// <reference lib=\"es2015.symbol\" />\n\ninterface SymbolConstructor {\n    /**\n     * A regular expression method that matches the regular expression against a string. Called\n     * by the String.prototype.matchAll method.\n     */\n    readonly matchAll: unique symbol;\n}\n\ninterface RegExpStringIterator<T> extends IteratorObject<T, BuiltinIteratorReturn, unknown> {\n    [Symbol.iterator](): RegExpStringIterator<T>;\n}\n\ninterface RegExp {\n    /**\n     * Matches a string with this regular expression, and returns an iterable of matches\n     * containing the results of that search.\n     * @param string A string to search within.\n     */\n    [Symbol.matchAll](str: string): RegExpStringIterator<RegExpExecArray>;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2021_d_ts.ts b/packages/paywall-build/src/lib/lib_es2021_d_ts.ts
new file mode 100644
index 000000000..f108212d8
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2021_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2021_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2020\" />\n/// <reference lib=\"es2021.promise\" />\n/// <reference lib=\"es2021.string\" />\n/// <reference lib=\"es2021.weakref\" />\n/// <reference lib=\"es2021.intl\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2021_intl_d_ts.ts b/packages/paywall-build/src/lib/lib_es2021_intl_d_ts.ts
new file mode 100644
index 000000000..dbd500044
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2021_intl_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2021_intl_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare namespace Intl {\n    interface DateTimeFormatPartTypesRegistry {\n        fractionalSecond: any;\n    }\n\n    interface DateTimeFormatOptions {\n        formatMatcher?: \"basic\" | \"best fit\" | \"best fit\" | undefined;\n        dateStyle?: \"full\" | \"long\" | \"medium\" | \"short\" | undefined;\n        timeStyle?: \"full\" | \"long\" | \"medium\" | \"short\" | undefined;\n        dayPeriod?: \"narrow\" | \"short\" | \"long\" | undefined;\n        fractionalSecondDigits?: 1 | 2 | 3 | undefined;\n    }\n\n    interface DateTimeRangeFormatPart extends DateTimeFormatPart {\n        source: \"startRange\" | \"endRange\" | \"shared\";\n    }\n\n    interface DateTimeFormat {\n        formatRange(startDate: Date | number | bigint, endDate: Date | number | bigint): string;\n        formatRangeToParts(startDate: Date | number | bigint, endDate: Date | number | bigint): DateTimeRangeFormatPart[];\n    }\n\n    interface ResolvedDateTimeFormatOptions {\n        formatMatcher?: \"basic\" | \"best fit\" | \"best fit\";\n        dateStyle?: \"full\" | \"long\" | \"medium\" | \"short\";\n        timeStyle?: \"full\" | \"long\" | \"medium\" | \"short\";\n        hourCycle?: \"h11\" | \"h12\" | \"h23\" | \"h24\";\n        dayPeriod?: \"narrow\" | \"short\" | \"long\";\n        fractionalSecondDigits?: 1 | 2 | 3;\n    }\n\n    /**\n     * The locale matching algorithm to use.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/ListFormat#parameters).\n     */\n    type ListFormatLocaleMatcher = \"lookup\" | \"best fit\";\n\n    /**\n     * The format of output message.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/ListFormat#parameters).\n     */\n    type ListFormatType = \"conjunction\" | \"disjunction\" | \"unit\";\n\n    /**\n     * The length of the formatted message.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/ListFormat#parameters).\n     */\n    type ListFormatStyle = \"long\" | \"short\" | \"narrow\";\n\n    /**\n     * An object with some or all properties of the `Intl.ListFormat` constructor `options` parameter.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/ListFormat#parameters).\n     */\n    interface ListFormatOptions {\n        /** The locale matching algorithm to use. For information about this option, see [Intl page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_negotiation). */\n        localeMatcher?: ListFormatLocaleMatcher | undefined;\n        /** The format of output message. */\n        type?: ListFormatType | undefined;\n        /** The length of the internationalized message. */\n        style?: ListFormatStyle | undefined;\n    }\n\n    interface ResolvedListFormatOptions {\n        locale: string;\n        style: ListFormatStyle;\n        type: ListFormatType;\n    }\n\n    interface ListFormat {\n        /**\n         * Returns a string with a language-specific representation of the list.\n         *\n         * @param list - An iterable object, such as an [Array](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Array).\n         *\n         * @throws `TypeError` if `list` includes something other than the possible values.\n         *\n         * @returns {string} A language-specific formatted string representing the elements of the list.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/format).\n         */\n        format(list: Iterable<string>): string;\n\n        /**\n         * Returns an Array of objects representing the different components that can be used to format a list of values in a locale-aware fashion.\n         *\n         * @param list - An iterable object, such as an [Array](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Array), to be formatted according to a locale.\n         *\n         * @throws `TypeError` if `list` includes something other than the possible values.\n         *\n         * @returns {{ type: \"element\" | \"literal\", value: string; }[]} An Array of components which contains the formatted parts from the list.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/formatToParts).\n         */\n        formatToParts(list: Iterable<string>): { type: \"element\" | \"literal\"; value: string; }[];\n\n        /**\n         * Returns a new object with properties reflecting the locale and style\n         * formatting options computed during the construction of the current\n         * `Intl.ListFormat` object.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/resolvedOptions).\n         */\n        resolvedOptions(): ResolvedListFormatOptions;\n    }\n\n    const ListFormat: {\n        prototype: ListFormat;\n\n        /**\n         * Creates [Intl.ListFormat](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat) objects that\n         * enable language-sensitive list formatting.\n         *\n         * @param locales - A string with a [BCP 47 language tag](http://tools.ietf.org/html/rfc5646), or an array of such strings.\n         *  For the general form and interpretation of the `locales` argument,\n         *  see the [`Intl` page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_identification_and_negotiation).\n         *\n         * @param options - An [object](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/ListFormat#parameters)\n         *  with some or all options of `ListFormatOptions`.\n         *\n         * @returns [Intl.ListFormatOptions](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat) object.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat).\n         */\n        new (locales?: LocalesArgument, options?: ListFormatOptions): ListFormat;\n\n        /**\n         * Returns an array containing those of the provided locales that are\n         * supported in list formatting without having to fall back to the runtime's default locale.\n         *\n         * @param locales - A string with a [BCP 47 language tag](http://tools.ietf.org/html/rfc5646), or an array of such strings.\n         *  For the general form and interpretation of the `locales` argument,\n         *  see the [`Intl` page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_identification_and_negotiation).\n         *\n         * @param options - An [object](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/supportedLocalesOf#parameters).\n         *  with some or all possible options.\n         *\n         * @returns An array of strings representing a subset of the given locale tags that are supported in list\n         *  formatting without having to fall back to the runtime's default locale.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/ListFormat/supportedLocalesOf).\n         */\n        supportedLocalesOf(locales: LocalesArgument, options?: Pick<ListFormatOptions, \"localeMatcher\">): UnicodeBCP47LocaleIdentifier[];\n    };\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2021_promise_d_ts.ts b/packages/paywall-build/src/lib/lib_es2021_promise_d_ts.ts
new file mode 100644
index 000000000..2f3a3f8e7
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2021_promise_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2021_promise_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface AggregateError extends Error {\n    errors: any[];\n}\n\ninterface AggregateErrorConstructor {\n    new (errors: Iterable<any>, message?: string): AggregateError;\n    (errors: Iterable<any>, message?: string): AggregateError;\n    readonly prototype: AggregateError;\n}\n\ndeclare var AggregateError: AggregateErrorConstructor;\n\n/**\n * Represents the completion of an asynchronous operation\n */\ninterface PromiseConstructor {\n    /**\n     * The any function returns a promise that is fulfilled by the first given promise to be fulfilled, or rejected with an AggregateError containing an array of rejection reasons if all of the given promises are rejected. It resolves all elements of the passed iterable to promises as it runs this algorithm.\n     * @param values An array or iterable of Promises.\n     * @returns A new Promise.\n     */\n    any<T extends readonly unknown[] | []>(values: T): Promise<Awaited<T[number]>>;\n\n    /**\n     * The any function returns a promise that is fulfilled by the first given promise to be fulfilled, or rejected with an AggregateError containing an array of rejection reasons if all of the given promises are rejected. It resolves all elements of the passed iterable to promises as it runs this algorithm.\n     * @param values An array or iterable of Promises.\n     * @returns A new Promise.\n     */\n    any<T>(values: Iterable<T | PromiseLike<T>>): Promise<Awaited<T>>;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2021_string_d_ts.ts b/packages/paywall-build/src/lib/lib_es2021_string_d_ts.ts
new file mode 100644
index 000000000..38de1209d
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2021_string_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2021_string_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface String {\n    /**\n     * Replace all instances of a substring in a string, using a regular expression or search string.\n     * @param searchValue A string to search for.\n     * @param replaceValue A string containing the text to replace for every successful match of searchValue in this string.\n     */\n    replaceAll(searchValue: string | RegExp, replaceValue: string): string;\n\n    /**\n     * Replace all instances of a substring in a string, using a regular expression or search string.\n     * @param searchValue A string to search for.\n     * @param replacer A function that returns the replacement text.\n     */\n    replaceAll(searchValue: string | RegExp, replacer: (substring: string, ...args: any[]) => string): string;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2021_weakref_d_ts.ts b/packages/paywall-build/src/lib/lib_es2021_weakref_d_ts.ts
new file mode 100644
index 000000000..d66d4bbbc
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2021_weakref_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2021_weakref_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2015.symbol.wellknown\" />\n\ninterface WeakRef<T extends WeakKey> {\n    readonly [Symbol.toStringTag]: \"WeakRef\";\n\n    /**\n     * Returns the WeakRef instance's target value, or undefined if the target value has been\n     * reclaimed.\n     * In es2023 the value can be either a symbol or an object, in previous versions only object is permissible.\n     */\n    deref(): T | undefined;\n}\n\ninterface WeakRefConstructor {\n    readonly prototype: WeakRef<any>;\n\n    /**\n     * Creates a WeakRef instance for the given target value.\n     * In es2023 the value can be either a symbol or an object, in previous versions only object is permissible.\n     * @param target The target value for the WeakRef instance.\n     */\n    new <T extends WeakKey>(target: T): WeakRef<T>;\n}\n\ndeclare var WeakRef: WeakRefConstructor;\n\ninterface FinalizationRegistry<T> {\n    readonly [Symbol.toStringTag]: \"FinalizationRegistry\";\n\n    /**\n     * Registers a value with the registry.\n     * In es2023 the value can be either a symbol or an object, in previous versions only object is permissible.\n     * @param target The target value to register.\n     * @param heldValue The value to pass to the finalizer for this value. This cannot be the\n     * target value.\n     * @param unregisterToken The token to pass to the unregister method to unregister the target\n     * value. If not provided, the target cannot be unregistered.\n     */\n    register(target: WeakKey, heldValue: T, unregisterToken?: WeakKey): void;\n\n    /**\n     * Unregisters a value from the registry.\n     * In es2023 the value can be either a symbol or an object, in previous versions only object is permissible.\n     * @param unregisterToken The token that was used as the unregisterToken argument when calling\n     * register to register the target value.\n     */\n    unregister(unregisterToken: WeakKey): boolean;\n}\n\ninterface FinalizationRegistryConstructor {\n    readonly prototype: FinalizationRegistry<any>;\n\n    /**\n     * Creates a finalization registry with an associated cleanup callback\n     * @param cleanupCallback The callback to call after a value in the registry has been reclaimed.\n     */\n    new <T>(cleanupCallback: (heldValue: T) => void): FinalizationRegistry<T>;\n}\n\ndeclare var FinalizationRegistry: FinalizationRegistryConstructor;\n";
diff --git a/packages/paywall-build/src/lib/lib_es2022_array_d_ts.ts b/packages/paywall-build/src/lib/lib_es2022_array_d_ts.ts
new file mode 100644
index 000000000..3e41b7a52
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2022_array_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2022_array_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface Array<T> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): T | undefined;\n}\n\ninterface ReadonlyArray<T> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): T | undefined;\n}\n\ninterface Int8Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Uint8Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Uint8ClampedArray<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Int16Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Uint16Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Int32Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Uint32Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Float32Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface Float64Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): number | undefined;\n}\n\ninterface BigInt64Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): bigint | undefined;\n}\n\ninterface BigUint64Array<TArrayBuffer extends ArrayBufferLike> {\n    /**\n     * Returns the item located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): bigint | undefined;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2022_d_ts.ts b/packages/paywall-build/src/lib/lib_es2022_d_ts.ts
new file mode 100644
index 000000000..c492be383
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2022_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2022_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2021\" />\n/// <reference lib=\"es2022.array\" />\n/// <reference lib=\"es2022.error\" />\n/// <reference lib=\"es2022.intl\" />\n/// <reference lib=\"es2022.object\" />\n/// <reference lib=\"es2022.regexp\" />\n/// <reference lib=\"es2022.string\" />\n";
diff --git a/packages/paywall-build/src/lib/lib_es2022_error_d_ts.ts b/packages/paywall-build/src/lib/lib_es2022_error_d_ts.ts
new file mode 100644
index 000000000..553fe93d1
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2022_error_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2022_error_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"es2021.promise\" />\n\ninterface ErrorOptions {\n    cause?: unknown;\n}\n\ninterface Error {\n    cause?: unknown;\n}\n\ninterface ErrorConstructor {\n    new (message?: string, options?: ErrorOptions): Error;\n    (message?: string, options?: ErrorOptions): Error;\n}\n\ninterface EvalErrorConstructor {\n    new (message?: string, options?: ErrorOptions): EvalError;\n    (message?: string, options?: ErrorOptions): EvalError;\n}\n\ninterface RangeErrorConstructor {\n    new (message?: string, options?: ErrorOptions): RangeError;\n    (message?: string, options?: ErrorOptions): RangeError;\n}\n\ninterface ReferenceErrorConstructor {\n    new (message?: string, options?: ErrorOptions): ReferenceError;\n    (message?: string, options?: ErrorOptions): ReferenceError;\n}\n\ninterface SyntaxErrorConstructor {\n    new (message?: string, options?: ErrorOptions): SyntaxError;\n    (message?: string, options?: ErrorOptions): SyntaxError;\n}\n\ninterface TypeErrorConstructor {\n    new (message?: string, options?: ErrorOptions): TypeError;\n    (message?: string, options?: ErrorOptions): TypeError;\n}\n\ninterface URIErrorConstructor {\n    new (message?: string, options?: ErrorOptions): URIError;\n    (message?: string, options?: ErrorOptions): URIError;\n}\n\ninterface AggregateErrorConstructor {\n    new (\n        errors: Iterable<any>,\n        message?: string,\n        options?: ErrorOptions,\n    ): AggregateError;\n    (\n        errors: Iterable<any>,\n        message?: string,\n        options?: ErrorOptions,\n    ): AggregateError;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2022_intl_d_ts.ts b/packages/paywall-build/src/lib/lib_es2022_intl_d_ts.ts
new file mode 100644
index 000000000..a8b166149
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2022_intl_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2022_intl_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ndeclare namespace Intl {\n    /**\n     * An object with some or all properties of the `Intl.Segmenter` constructor `options` parameter.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/Segmenter#parameters)\n     */\n    interface SegmenterOptions {\n        /** The locale matching algorithm to use. For information about this option, see [Intl page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_negotiation). */\n        localeMatcher?: \"best fit\" | \"lookup\" | undefined;\n        /** The type of input to be split */\n        granularity?: \"grapheme\" | \"word\" | \"sentence\" | undefined;\n    }\n\n    /**\n     * The `Intl.Segmenter` object enables locale-sensitive text segmentation, enabling you to get meaningful items (graphemes, words or sentences) from a string.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter)\n     */\n    interface Segmenter {\n        /**\n         * Returns `Segments` object containing the segments of the input string, using the segmenter's locale and granularity.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/segment)\n         *\n         * @param input - The text to be segmented as a `string`.\n         *\n         * @returns A new iterable Segments object containing the segments of the input string, using the segmenter's locale and granularity.\n         */\n        segment(input: string): Segments;\n        /**\n         * The `resolvedOptions()` method of `Intl.Segmenter` instances returns a new object with properties reflecting the options computed during initialization of this `Segmenter` object.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/resolvedOptions)\n         */\n        resolvedOptions(): ResolvedSegmenterOptions;\n    }\n\n    interface ResolvedSegmenterOptions {\n        locale: string;\n        granularity: \"grapheme\" | \"word\" | \"sentence\";\n    }\n\n    interface SegmentIterator<T> extends IteratorObject<T, BuiltinIteratorReturn, unknown> {\n        [Symbol.iterator](): SegmentIterator<T>;\n    }\n\n    /**\n     * A `Segments` object is an iterable collection of the segments of a text string. It is returned by a call to the `segment()` method of an `Intl.Segmenter` object.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/segment/Segments)\n     */\n    interface Segments {\n        /**\n         * Returns an object describing the segment in the original string that includes the code unit at a specified index.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/segment/Segments/containing)\n         *\n         * @param codeUnitIndex - A number specifying the index of the code unit in the original input string. If the value is omitted, it defaults to `0`.\n         */\n        containing(codeUnitIndex?: number): SegmentData | undefined;\n\n        /** Returns an iterator to iterate over the segments. */\n        [Symbol.iterator](): SegmentIterator<SegmentData>;\n    }\n\n    interface SegmentData {\n        /** A string containing the segment extracted from the original input string. */\n        segment: string;\n        /** The code unit index in the original input string at which the segment begins. */\n        index: number;\n        /** The complete input string that was segmented. */\n        input: string;\n        /**\n         * A boolean value only if granularity is \"word\"; otherwise, undefined.\n         * If granularity is \"word\", then isWordLike is true when the segment is word-like (i.e., consists of letters/numbers/ideographs/etc.); otherwise, false.\n         */\n        isWordLike?: boolean;\n    }\n\n    /**\n     * The `Intl.Segmenter` object enables locale-sensitive text segmentation, enabling you to get meaningful items (graphemes, words or sentences) from a string.\n     *\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter)\n     */\n    const Segmenter: {\n        prototype: Segmenter;\n\n        /**\n         * Creates a new `Intl.Segmenter` object.\n         *\n         * @param locales - A string with a [BCP 47 language tag](http://tools.ietf.org/html/rfc5646), or an array of such strings.\n         *  For the general form and interpretation of the `locales` argument,\n         *  see the [`Intl` page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_identification_and_negotiation).\n         *\n         * @param options - An [object](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/Segmenter#parameters)\n         *  with some or all options of `SegmenterOptions`.\n         *\n         * @returns [Intl.Segmenter](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segments) object.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter).\n         */\n        new (locales?: LocalesArgument, options?: SegmenterOptions): Segmenter;\n\n        /**\n         * Returns an array containing those of the provided locales that are supported without having to fall back to the runtime's default locale.\n         *\n         * @param locales - A string with a [BCP 47 language tag](http://tools.ietf.org/html/rfc5646), or an array of such strings.\n         *  For the general form and interpretation of the `locales` argument,\n         *  see the [`Intl` page](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl#Locale_identification_and_negotiation).\n         *\n         * @param options An [object](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/supportedLocalesOf#parameters).\n         *  with some or all possible options.\n         *\n         * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/Segmenter/supportedLocalesOf)\n         */\n        supportedLocalesOf(locales: LocalesArgument, options?: Pick<SegmenterOptions, \"localeMatcher\">): UnicodeBCP47LocaleIdentifier[];\n    };\n\n    /**\n     * Returns a sorted array of the supported collation, calendar, currency, numbering system, timezones, and units by the implementation.\n     * [MDN](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Intl/supportedValuesOf)\n     *\n     * @param key A string indicating the category of values to return.\n     * @returns A sorted array of the supported values.\n     */\n    function supportedValuesOf(key: \"calendar\" | \"collation\" | \"currency\" | \"numberingSystem\" | \"timeZone\" | \"unit\"): string[];\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2022_object_d_ts.ts b/packages/paywall-build/src/lib/lib_es2022_object_d_ts.ts
new file mode 100644
index 000000000..4be8f2f04
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2022_object_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2022_object_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface ObjectConstructor {\n    /**\n     * Determines whether an object has a property with the specified name.\n     * @param o An object.\n     * @param v A property name.\n     */\n    hasOwn(o: object, v: PropertyKey): boolean;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2022_regexp_d_ts.ts b/packages/paywall-build/src/lib/lib_es2022_regexp_d_ts.ts
new file mode 100644
index 000000000..4d3dc5cfa
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2022_regexp_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2022_regexp_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface RegExpMatchArray {\n    indices?: RegExpIndicesArray;\n}\n\ninterface RegExpExecArray {\n    indices?: RegExpIndicesArray;\n}\n\ninterface RegExpIndicesArray extends Array<[number, number] | undefined> {\n    groups?: {\n        [key: string]: [number, number];\n    };\n}\n\ninterface RegExp {\n    /**\n     * Returns a Boolean value indicating the state of the hasIndices flag (d) used with a regular expression.\n     * Default is false. Read-only.\n     */\n    readonly hasIndices: boolean;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es2022_string_d_ts.ts b/packages/paywall-build/src/lib/lib_es2022_string_d_ts.ts
new file mode 100644
index 000000000..dc7085892
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es2022_string_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es2022_string_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\ninterface String {\n    /**\n     * Returns a new String consisting of the single UTF-16 code unit located at the specified index.\n     * @param index The zero-based index of the desired code unit. A negative index will count back from the last item.\n     */\n    at(index: number): string | undefined;\n}\n";
diff --git a/packages/paywall-build/src/lib/lib_es5_d_ts.ts b/packages/paywall-build/src/lib/lib_es5_d_ts.ts
new file mode 100644
index 000000000..923bf6222
--- /dev/null
+++ b/packages/paywall-build/src/lib/lib_es5_d_ts.ts
@@ -0,0 +1,2 @@
+// AUTO-GENERATED by scripts/generate-libs.ts — do not edit.
+export const lib_es5_d_ts = "/*! *****************************************************************************\nCopyright (c) Microsoft Corporation. All rights reserved.\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use\nthis file except in compliance with the License. You may obtain a copy of the\nLicense at http://www.apache.org/licenses/LICENSE-2.0\n\nTHIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\nWARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\nMERCHANTABILITY OR NON-INFRINGEMENT.\n\nSee the Apache Version 2.0 License for specific language governing permissions\nand limitations under the License.\n***************************************************************************** */\n\n\n/// <reference lib=\"decorators\" />\n/// <reference lib=\"decorators.legacy\" />\n\n/////////////////////////////\n/// ECMAScript APIs\n/////////////////////////////\n\ndeclare var NaN: number;\ndeclare var Infinity: number;\n\n/**\n * Evaluates JavaScript code and executes it.\n * @param x A String value that contains valid JavaScript code.\n */\ndeclare function eval(x: string): any;\n\n/**\n * Converts a string to an integer.\n * @param string A string to convert into a number.\n * @param radix A value between 2 and 36 that specifies the base of the number in `string`.\n * If this argument is not supplied, strings with a prefix of '0x' are considered hexadecimal.\n * All other strings are considered decimal.\n */\ndeclare function parseInt(string: string, radix?: number): number;\n\n/**\n * Converts a string to a floating-point number.\n * @param string A string that contains a floating-point number.\n */\ndeclare function parseFloat(string: string): number;\n\n/**\n * Returns a Boolean value that indicates whether a value is the reserved value NaN (not a number).\n * @param number A numeric value.\n */\ndeclare function isNaN(number: number): boolean;\n\n/**\n * Determines whether a supplied number is finite.\n * @param number Any numeric value.\n */\ndeclare function isFinite(number: number): boolean;\n\n/**\n * Gets the unencoded version of an encoded Uniform Resource Identifier (URI).\n * @param encodedURI A value representing an encoded URI.\n */\ndeclare function decodeURI(encodedURI: string): string;\n\n/**\n * Gets the unencoded version of an encoded component of a Uniform Resource Identifier (URI).\n * @param encodedURIComponent A value representing an encoded URI component.\n */\ndeclare function decodeURIComponent(encodedURIComponent: string): string;\n\n/**\n * Encodes a text string as a valid Uniform Resource Identifier (URI)\n * @param uri A value representing an unencoded URI.\n */\ndeclare function encodeURI(uri: string): string;\n\n/**\n * Encodes a text string as a valid component of a Uniform Resource Identifier (URI).\n * @param uriComponent A value representing an unencoded URI component.\n */\ndeclare function encodeURIComponent(uriComponent: string | number | boolean): string;\n\n/**\n * Computes a new string in which certain characters have been replaced by a hexadecimal escape sequence.\n * @deprecated A legacy feature for browser compatibility\n * @param string A string value\n */\ndeclare function escape(string: string): string;\n\n/**\n * Computes a new string in which hexadecimal escape sequences are replaced with the character that it represents.\n * @deprecated A legacy feature for browser compatibility\n * @param string A string value\n */\ndeclare function unescape(string: string): string;\n\ninterface Symbol {\n    /** Returns a string representation of an object. */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): symbol;\n}\n\ndeclare type PropertyKey = string | number | symbol;\n\ninterface PropertyDescriptor {\n    configurable?: boolean;\n    enumerable?: boolean;\n    value?: any;\n    writable?: boolean;\n    get?(): any;\n    set?(v: any): void;\n}\n\ninterface PropertyDescriptorMap {\n    [key: PropertyKey]: PropertyDescriptor;\n}\n\ninterface Object {\n    /** The initial value of Object.prototype.constructor is the standard built-in Object constructor. */\n    constructor: Function;\n\n    /** Returns a string representation of an object. */\n    toString(): string;\n\n    /** Returns a date converted to a string using the current locale. */\n    toLocaleString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): Object;\n\n    /**\n     * Determines whether an object has a property with the specified name.\n     * @param v A property name.\n     */\n    hasOwnProperty(v: PropertyKey): boolean;\n\n    /**\n     * Determines whether an object exists in another object's prototype chain.\n     * @param v Another object whose prototype chain is to be checked.\n     */\n    isPrototypeOf(v: Object): boolean;\n\n    /**\n     * Determines whether a specified property is enumerable.\n     * @param v A property name.\n     */\n    propertyIsEnumerable(v: PropertyKey): boolean;\n}\n\ninterface ObjectConstructor {\n    new (value?: any): Object;\n    (): any;\n    (value: any): any;\n\n    /** A reference to the prototype for a class of objects. */\n    readonly prototype: Object;\n\n    /**\n     * Returns the prototype of an object.\n     * @param o The object that references the prototype.\n     */\n    getPrototypeOf(o: any): any;\n\n    /**\n     * Gets the own property descriptor of the specified object.\n     * An own property descriptor is one that is defined directly on the object and is not inherited from the object's prototype.\n     * @param o Object that contains the property.\n     * @param p Name of the property.\n     */\n    getOwnPropertyDescriptor(o: any, p: PropertyKey): PropertyDescriptor | undefined;\n\n    /**\n     * Returns the names of the own properties of an object. The own properties of an object are those that are defined directly\n     * on that object, and are not inherited from the object's prototype. The properties of an object include both fields (objects) and functions.\n     * @param o Object that contains the own properties.\n     */\n    getOwnPropertyNames(o: any): string[];\n\n    /**\n     * Creates an object that has the specified prototype or that has null prototype.\n     * @param o Object to use as a prototype. May be null.\n     */\n    create(o: object | null): any;\n\n    /**\n     * Creates an object that has the specified prototype, and that optionally contains specified properties.\n     * @param o Object to use as a prototype. May be null\n     * @param properties JavaScript object that contains one or more property descriptors.\n     */\n    create(o: object | null, properties: PropertyDescriptorMap & ThisType<any>): any;\n\n    /**\n     * Adds a property to an object, or modifies attributes of an existing property.\n     * @param o Object on which to add or modify the property. This can be a native JavaScript object (that is, a user-defined object or a built in object) or a DOM object.\n     * @param p The property name.\n     * @param attributes Descriptor for the property. It can be for a data property or an accessor property.\n     */\n    defineProperty<T>(o: T, p: PropertyKey, attributes: PropertyDescriptor & ThisType<any>): T;\n\n    /**\n     * Adds one or more properties to an object, and/or modifies attributes of existing properties.\n     * @param o Object on which to add or modify the properties. This can be a native JavaScript object or a DOM object.\n     * @param properties JavaScript object that contains one or more descriptor objects. Each descriptor object describes a data property or an accessor property.\n     */\n    defineProperties<T>(o: T, properties: PropertyDescriptorMap & ThisType<any>): T;\n\n    /**\n     * Prevents the modification of attributes of existing properties, and prevents the addition of new properties.\n     * @param o Object on which to lock the attributes.\n     */\n    seal<T>(o: T): T;\n\n    /**\n     * Prevents the modification of existing property attributes and values, and prevents the addition of new properties.\n     * @param f Object on which to lock the attributes.\n     */\n    freeze<T extends Function>(f: T): T;\n\n    /**\n     * Prevents the modification of existing property attributes and values, and prevents the addition of new properties.\n     * @param o Object on which to lock the attributes.\n     */\n    freeze<T extends { [idx: string]: U | null | undefined | object; }, U extends string | bigint | number | boolean | symbol>(o: T): Readonly<T>;\n\n    /**\n     * Prevents the modification of existing property attributes and values, and prevents the addition of new properties.\n     * @param o Object on which to lock the attributes.\n     */\n    freeze<T>(o: T): Readonly<T>;\n\n    /**\n     * Prevents the addition of new properties to an object.\n     * @param o Object to make non-extensible.\n     */\n    preventExtensions<T>(o: T): T;\n\n    /**\n     * Returns true if existing property attributes cannot be modified in an object and new properties cannot be added to the object.\n     * @param o Object to test.\n     */\n    isSealed(o: any): boolean;\n\n    /**\n     * Returns true if existing property attributes and values cannot be modified in an object, and new properties cannot be added to the object.\n     * @param o Object to test.\n     */\n    isFrozen(o: any): boolean;\n\n    /**\n     * Returns a value that indicates whether new properties can be added to an object.\n     * @param o Object to test.\n     */\n    isExtensible(o: any): boolean;\n\n    /**\n     * Returns the names of the enumerable string properties and methods of an object.\n     * @param o Object that contains the properties and methods. This can be an object that you created or an existing Document Object Model (DOM) object.\n     */\n    keys(o: object): string[];\n}\n\n/**\n * Provides functionality common to all JavaScript objects.\n */\ndeclare var Object: ObjectConstructor;\n\n/**\n * Creates a new function.\n */\ninterface Function {\n    /**\n     * Calls the function, substituting the specified object for the this value of the function, and the specified array for the arguments of the function.\n     * @param thisArg The object to be used as the this object.\n     * @param argArray A set of arguments to be passed to the function.\n     */\n    apply(this: Function, thisArg: any, argArray?: any): any;\n\n    /**\n     * Calls a method of an object, substituting another object for the current object.\n     * @param thisArg The object to be used as the current object.\n     * @param argArray A list of arguments to be passed to the method.\n     */\n    call(this: Function, thisArg: any, ...argArray: any[]): any;\n\n    /**\n     * For a given function, creates a bound function that has the same body as the original function.\n     * The this object of the bound function is associated with the specified object, and has the specified initial parameters.\n     * @param thisArg An object to which the this keyword can refer inside the new function.\n     * @param argArray A list of arguments to be passed to the new function.\n     */\n    bind(this: Function, thisArg: any, ...argArray: any[]): any;\n\n    /** Returns a string representation of a function. */\n    toString(): string;\n\n    prototype: any;\n    readonly length: number;\n\n    // Non-standard extensions\n    arguments: any;\n    caller: Function;\n}\n\ninterface FunctionConstructor {\n    /**\n     * Creates a new function.\n     * @param args A list of arguments the function accepts.\n     */\n    new (...args: string[]): Function;\n    (...args: string[]): Function;\n    readonly prototype: Function;\n}\n\ndeclare var Function: FunctionConstructor;\n\n/**\n * Extracts the type of the 'this' parameter of a function type, or 'unknown' if the function type has no 'this' parameter.\n */\ntype ThisParameterType<T> = T extends (this: infer U, ...args: never) => any ? U : unknown;\n\n/**\n * Removes the 'this' parameter from a function type.\n */\ntype OmitThisParameter<T> = unknown extends ThisParameterType<T> ? T : T extends (...args: infer A) => infer R ? (...args: A) => R : T;\n\ninterface CallableFunction extends Function {\n    /**\n     * Calls the function with the specified object as the this value and the elements of specified array as the arguments.\n     * @param thisArg The object to be used as the this object.\n     */\n    apply<T, R>(this: (this: T) => R, thisArg: T): R;\n\n    /**\n     * Calls the function with the specified object as the this value and the elements of specified array as the arguments.\n     * @param thisArg The object to be used as the this object.\n     * @param args An array of argument values to be passed to the function.\n     */\n    apply<T, A extends any[], R>(this: (this: T, ...args: A) => R, thisArg: T, args: A): R;\n\n    /**\n     * Calls the function with the specified object as the this value and the specified rest arguments as the arguments.\n     * @param thisArg The object to be used as the this object.\n     * @param args Argument values to be passed to the function.\n     */\n    call<T, A extends any[], R>(this: (this: T, ...args: A) => R, thisArg: T, ...args: A): R;\n\n    /**\n     * For a given function, creates a bound function that has the same body as the original function.\n     * The this object of the bound function is associated with the specified object, and has the specified initial parameters.\n     * @param thisArg The object to be used as the this object.\n     */\n    bind<T>(this: T, thisArg: ThisParameterType<T>): OmitThisParameter<T>;\n\n    /**\n     * For a given function, creates a bound function that has the same body as the original function.\n     * The this object of the bound function is associated with the specified object, and has the specified initial parameters.\n     * @param thisArg The object to be used as the this object.\n     * @param args Arguments to bind to the parameters of the function.\n     */\n    bind<T, A extends any[], B extends any[], R>(this: (this: T, ...args: [...A, ...B]) => R, thisArg: T, ...args: A): (...args: B) => R;\n}\n\ninterface NewableFunction extends Function {\n    /**\n     * Calls the function with the specified object as the this value and the elements of specified array as the arguments.\n     * @param thisArg The object to be used as the this object.\n     */\n    apply<T>(this: new () => T, thisArg: T): void;\n    /**\n     * Calls the function with the specified object as the this value and the elements of specified array as the arguments.\n     * @param thisArg The object to be used as the this object.\n     * @param args An array of argument values to be passed to the function.\n     */\n    apply<T, A extends any[]>(this: new (...args: A) => T, thisArg: T, args: A): void;\n\n    /**\n     * Calls the function with the specified object as the this value and the specified rest arguments as the arguments.\n     * @param thisArg The object to be used as the this object.\n     * @param args Argument values to be passed to the function.\n     */\n    call<T, A extends any[]>(this: new (...args: A) => T, thisArg: T, ...args: A): void;\n\n    /**\n     * For a given function, creates a bound function that has the same body as the original function.\n     * The this object of the bound function is associated with the specified object, and has the specified initial parameters.\n     * @param thisArg The object to be used as the this object.\n     */\n    bind<T>(this: T, thisArg: any): T;\n\n    /**\n     * For a given function, creates a bound function that has the same body as the original function.\n     * The this object of the bound function is associated with the specified object, and has the specified initial parameters.\n     * @param thisArg The object to be used as the this object.\n     * @param args Arguments to bind to the parameters of the function.\n     */\n    bind<A extends any[], B extends any[], R>(this: new (...args: [...A, ...B]) => R, thisArg: any, ...args: A): new (...args: B) => R;\n}\n\ninterface IArguments {\n    [index: number]: any;\n    length: number;\n    callee: Function;\n}\n\ninterface String {\n    /** Returns a string representation of a string. */\n    toString(): string;\n\n    /**\n     * Returns the character at the specified index.\n     * @param pos The zero-based index of the desired character.\n     */\n    charAt(pos: number): string;\n\n    /**\n     * Returns the Unicode value of the character at the specified location.\n     * @param index The zero-based index of the desired character. If there is no character at the specified index, NaN is returned.\n     */\n    charCodeAt(index: number): number;\n\n    /**\n     * Returns a string that contains the concatenation of two or more strings.\n     * @param strings The strings to append to the end of the string.\n     */\n    concat(...strings: string[]): string;\n\n    /**\n     * Returns the position of the first occurrence of a substring, or -1 if it is not present.\n     * @param searchString The substring to search for in the string\n     * @param position The index at which to begin searching the String object. If omitted, search starts at the beginning of the string.\n     */\n    indexOf(searchString: string, position?: number): number;\n\n    /**\n     * Returns the last occurrence of a substring in the string, or -1 if it is not present.\n     * @param searchString The substring to search for.\n     * @param position The index at which to begin searching. If omitted, the search begins at the end of the string.\n     */\n    lastIndexOf(searchString: string, position?: number): number;\n\n    /**\n     * Determines whether two strings are equivalent in the current locale.\n     * @param that String to compare to target string\n     */\n    localeCompare(that: string): number;\n\n    /**\n     * Matches a string with a regular expression, and returns an array containing the results of that search.\n     * @param regexp A variable name or string literal containing the regular expression pattern and flags.\n     */\n    match(regexp: string | RegExp): RegExpMatchArray | null;\n\n    /**\n     * Replaces text in a string, using a regular expression or search string.\n     * @param searchValue A string or regular expression to search for.\n     * @param replaceValue A string containing the text to replace. When the {@linkcode searchValue} is a `RegExp`, all matches are replaced if the `g` flag is set (or only those matches at the beginning, if the `y` flag is also present). Otherwise, only the first match of {@linkcode searchValue} is replaced.\n     */\n    replace(searchValue: string | RegExp, replaceValue: string): string;\n\n    /**\n     * Replaces text in a string, using a regular expression or search string.\n     * @param searchValue A string to search for.\n     * @param replacer A function that returns the replacement text.\n     */\n    replace(searchValue: string | RegExp, replacer: (substring: string, ...args: any[]) => string): string;\n\n    /**\n     * Finds the first substring match in a regular expression search.\n     * @param regexp The regular expression pattern and applicable flags.\n     */\n    search(regexp: string | RegExp): number;\n\n    /**\n     * Returns a section of a string.\n     * @param start The index to the beginning of the specified portion of stringObj.\n     * @param end The index to the end of the specified portion of stringObj. The substring includes the characters up to, but not including, the character indicated by end.\n     * If this value is not specified, the substring continues to the end of stringObj.\n     */\n    slice(start?: number, end?: number): string;\n\n    /**\n     * Split a string into substrings using the specified separator and return them as an array.\n     * @param separator A string that identifies character or characters to use in separating the string. If omitted, a single-element array containing the entire string is returned.\n     * @param limit A value used to limit the number of elements returned in the array.\n     */\n    split(separator: string | RegExp, limit?: number): string[];\n\n    /**\n     * Returns the substring at the specified location within a String object.\n     * @param start The zero-based index number indicating the beginning of the substring.\n     * @param end Zero-based index number indicating the end of the substring. The substring includes the characters up to, but not including, the character indicated by end.\n     * If end is omitted, the characters from start through the end of the original string are returned.\n     */\n    substring(start: number, end?: number): string;\n\n    /** Converts all the alphabetic characters in a string to lowercase. */\n    toLowerCase(): string;\n\n    /** Converts all alphabetic characters to lowercase, taking into account the host environment's current locale. */\n    toLocaleLowerCase(locales?: string | string[]): string;\n\n    /** Converts all the alphabetic characters in a string to uppercase. */\n    toUpperCase(): string;\n\n    /** Returns a string where all alphabetic characters have been converted to uppercase, taking into account the host environment's current locale. */\n    toLocaleUpperCase(locales?: string | string[]): string;\n\n    /** Removes the leading and trailing white space and line terminator characters from a string. */\n    trim(): string;\n\n    /** Returns the length of a String object. */\n    readonly length: number;\n\n    // IE extensions\n    /**\n     * Gets a substring beginning at the specified location and having the specified length.\n     * @deprecated A legacy feature for browser compatibility\n     * @param from The starting position of the desired substring. The index of the first character in the string is zero.\n     * @param length The number of characters to include in the returned substring.\n     */\n    substr(from: number, length?: number): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): string;\n\n    readonly [index: number]: string;\n}\n\ninterface StringConstructor {\n    new (value?: any): String;\n    (value?: any): string;\n    readonly prototype: String;\n    fromCharCode(...codes: number[]): string;\n}\n\n/**\n * Allows manipulation and formatting of text strings and determination and location of substrings within strings.\n */\ndeclare var String: StringConstructor;\n\ninterface Boolean {\n    /** Returns the primitive value of the specified object. */\n    valueOf(): boolean;\n}\n\ninterface BooleanConstructor {\n    new (value?: any): Boolean;\n    <T>(value?: T): boolean;\n    readonly prototype: Boolean;\n}\n\ndeclare var Boolean: BooleanConstructor;\n\ninterface Number {\n    /**\n     * Returns a string representation of an object.\n     * @param radix Specifies a radix for converting numeric values to strings. This value is only used for numbers.\n     */\n    toString(radix?: number): string;\n\n    /**\n     * Returns a string representing a number in fixed-point notation.\n     * @param fractionDigits Number of digits after the decimal point. Must be in the range 0 - 20, inclusive.\n     */\n    toFixed(fractionDigits?: number): string;\n\n    /**\n     * Returns a string containing a number represented in exponential notation.\n     * @param fractionDigits Number of digits after the decimal point. Must be in the range 0 - 20, inclusive.\n     */\n    toExponential(fractionDigits?: number): string;\n\n    /**\n     * Returns a string containing a number represented either in exponential or fixed-point notation with a specified number of digits.\n     * @param precision Number of significant digits. Must be in the range 1 - 21, inclusive.\n     */\n    toPrecision(precision?: number): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): number;\n}\n\ninterface NumberConstructor {\n    new (value?: any): Number;\n    (value?: any): number;\n    readonly prototype: Number;\n\n    /** The largest number that can be represented in JavaScript. Equal to approximately 1.79E+308. */\n    readonly MAX_VALUE: number;\n\n    /** The closest number to zero that can be represented in JavaScript. Equal to approximately 5.00E-324. */\n    readonly MIN_VALUE: number;\n\n    /**\n     * A value that is not a number.\n     * In equality comparisons, NaN does not equal any value, including itself. To test whether a value is equivalent to NaN, use the isNaN function.\n     */\n    readonly NaN: number;\n\n    /**\n     * A value that is less than the largest negative number that can be represented in JavaScript.\n     * JavaScript displays NEGATIVE_INFINITY values as -infinity.\n     */\n    readonly NEGATIVE_INFINITY: number;\n\n    /**\n     * A value greater than the largest number that can be represented in JavaScript.\n     * JavaScript displays POSITIVE_INFINITY values as infinity.\n     */\n    readonly POSITIVE_INFINITY: number;\n}\n\n/** An object that represents a number of any kind. All JavaScript numbers are 64-bit floating-point numbers. */\ndeclare var Number: NumberConstructor;\n\ninterface TemplateStringsArray extends ReadonlyArray<string> {\n    readonly raw: readonly string[];\n}\n\n/**\n * The type of `import.meta`.\n *\n * If you need to declare that a given property exists on `import.meta`,\n * this type may be augmented via interface merging.\n */\ninterface ImportMeta {\n}\n\n/**\n * The type for the optional second argument to `import()`.\n *\n * If your host environment supports additional options, this type may be\n * augmented via interface merging.\n */\ninterface ImportCallOptions {\n    /** @deprecated*/ assert?: ImportAssertions;\n    with?: ImportAttributes;\n}\n\n/**\n * The type for the `assert` property of the optional second argument to `import()`.\n * @deprecated\n */\ninterface ImportAssertions {\n    [key: string]: string;\n}\n\n/**\n * The type for the `with` property of the optional second argument to `import()`.\n */\ninterface ImportAttributes {\n    [key: string]: string;\n}\n\ninterface Math {\n    /** The mathematical constant e. This is Euler's number, the base of natural logarithms. */\n    readonly E: number;\n    /** The natural logarithm of 10. */\n    readonly LN10: number;\n    /** The natural logarithm of 2. */\n    readonly LN2: number;\n    /** The base-2 logarithm of e. */\n    readonly LOG2E: number;\n    /** The base-10 logarithm of e. */\n    readonly LOG10E: number;\n    /** Pi. This is the ratio of the circumference of a circle to its diameter. */\n    readonly PI: number;\n    /** The square root of 0.5, or, equivalently, one divided by the square root of 2. */\n    readonly SQRT1_2: number;\n    /** The square root of 2. */\n    readonly SQRT2: number;\n    /**\n     * Returns the absolute value of a number (the value without regard to whether it is positive or negative).\n     * For example, the absolute value of -5 is the same as the absolute value of 5.\n     * @param x A numeric expression for which the absolute value is needed.\n     */\n    abs(x: number): number;\n    /**\n     * Returns the arc cosine (or inverse cosine) of a number.\n     * @param x A numeric expression.\n     */\n    acos(x: number): number;\n    /**\n     * Returns the arcsine of a number.\n     * @param x A numeric expression.\n     */\n    asin(x: number): number;\n    /**\n     * Returns the arctangent of a number.\n     * @param x A numeric expression for which the arctangent is needed.\n     */\n    atan(x: number): number;\n    /**\n     * Returns the angle (in radians) between the X axis and the line going through both the origin and the given point.\n     * @param y A numeric expression representing the cartesian y-coordinate.\n     * @param x A numeric expression representing the cartesian x-coordinate.\n     */\n    atan2(y: number, x: number): number;\n    /**\n     * Returns the smallest integer greater than or equal to its numeric argument.\n     * @param x A numeric expression.\n     */\n    ceil(x: number): number;\n    /**\n     * Returns the cosine of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    cos(x: number): number;\n    /**\n     * Returns e (the base of natural logarithms) raised to a power.\n     * @param x A numeric expression representing the power of e.\n     */\n    exp(x: number): number;\n    /**\n     * Returns the greatest integer less than or equal to its numeric argument.\n     * @param x A numeric expression.\n     */\n    floor(x: number): number;\n    /**\n     * Returns the natural logarithm (base e) of a number.\n     * @param x A numeric expression.\n     */\n    log(x: number): number;\n    /**\n     * Returns the larger of a set of supplied numeric expressions.\n     * @param values Numeric expressions to be evaluated.\n     */\n    max(...values: number[]): number;\n    /**\n     * Returns the smaller of a set of supplied numeric expressions.\n     * @param values Numeric expressions to be evaluated.\n     */\n    min(...values: number[]): number;\n    /**\n     * Returns the value of a base expression taken to a specified power.\n     * @param x The base value of the expression.\n     * @param y The exponent value of the expression.\n     */\n    pow(x: number, y: number): number;\n    /** Returns a pseudorandom number between 0 and 1. */\n    random(): number;\n    /**\n     * Returns a supplied numeric expression rounded to the nearest integer.\n     * @param x The value to be rounded to the nearest integer.\n     */\n    round(x: number): number;\n    /**\n     * Returns the sine of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    sin(x: number): number;\n    /**\n     * Returns the square root of a number.\n     * @param x A numeric expression.\n     */\n    sqrt(x: number): number;\n    /**\n     * Returns the tangent of a number.\n     * @param x A numeric expression that contains an angle measured in radians.\n     */\n    tan(x: number): number;\n}\n/** An intrinsic object that provides basic mathematics functionality and constants. */\ndeclare var Math: Math;\n\n/** Enables basic storage and retrieval of dates and times. */\ninterface Date {\n    /** Returns a string representation of a date. The format of the string depends on the locale. */\n    toString(): string;\n    /** Returns a date as a string value. */\n    toDateString(): string;\n    /** Returns a time as a string value. */\n    toTimeString(): string;\n    /** Returns a value as a string value appropriate to the host environment's current locale. */\n    toLocaleString(): string;\n    /** Returns a date as a string value appropriate to the host environment's current locale. */\n    toLocaleDateString(): string;\n    /** Returns a time as a string value appropriate to the host environment's current locale. */\n    toLocaleTimeString(): string;\n    /** Returns the stored time value in milliseconds since midnight, January 1, 1970 UTC. */\n    valueOf(): number;\n    /** Returns the stored time value in milliseconds since midnight, January 1, 1970 UTC. */\n    getTime(): number;\n    /** Gets the year, using local time. */\n    getFullYear(): number;\n    /** Gets the year using Universal Coordinated Time (UTC). */\n    getUTCFullYear(): number;\n    /** Gets the month, using local time. */\n    getMonth(): number;\n    /** Gets the month of a Date object using Universal Coordinated Time (UTC). */\n    getUTCMonth(): number;\n    /** Gets the day-of-the-month, using local time. */\n    getDate(): number;\n    /** Gets the day-of-the-month, using Universal Coordinated Time (UTC). */\n    getUTCDate(): number;\n    /** Gets the day of the week, using local time. */\n    getDay(): number;\n    /** Gets the day of the week using Universal Coordinated Time (UTC). */\n    getUTCDay(): number;\n    /** Gets the hours in a date, using local time. */\n    getHours(): number;\n    /** Gets the hours value in a Date object using Universal Coordinated Time (UTC). */\n    getUTCHours(): number;\n    /** Gets the minutes of a Date object, using local time. */\n    getMinutes(): number;\n    /** Gets the minutes of a Date object using Universal Coordinated Time (UTC). */\n    getUTCMinutes(): number;\n    /** Gets the seconds of a Date object, using local time. */\n    getSeconds(): number;\n    /** Gets the seconds of a Date object using Universal Coordinated Time (UTC). */\n    getUTCSeconds(): number;\n    /** Gets the milliseconds of a Date, using local time. */\n    getMilliseconds(): number;\n    /** Gets the milliseconds of a Date object using Universal Coordinated Time (UTC). */\n    getUTCMilliseconds(): number;\n    /** Gets the difference in minutes between Universal Coordinated Time (UTC) and the time on the local computer. */\n    getTimezoneOffset(): number;\n    /**\n     * Sets the date and time value in the Date object.\n     * @param time A numeric value representing the number of elapsed milliseconds since midnight, January 1, 1970 GMT.\n     */\n    setTime(time: number): number;\n    /**\n     * Sets the milliseconds value in the Date object using local time.\n     * @param ms A numeric value equal to the millisecond value.\n     */\n    setMilliseconds(ms: number): number;\n    /**\n     * Sets the milliseconds value in the Date object using Universal Coordinated Time (UTC).\n     * @param ms A numeric value equal to the millisecond value.\n     */\n    setUTCMilliseconds(ms: number): number;\n\n    /**\n     * Sets the seconds value in the Date object using local time.\n     * @param sec A numeric value equal to the seconds value.\n     * @param ms A numeric value equal to the milliseconds value.\n     */\n    setSeconds(sec: number, ms?: number): number;\n    /**\n     * Sets the seconds value in the Date object using Universal Coordinated Time (UTC).\n     * @param sec A numeric value equal to the seconds value.\n     * @param ms A numeric value equal to the milliseconds value.\n     */\n    setUTCSeconds(sec: number, ms?: number): number;\n    /**\n     * Sets the minutes value in the Date object using local time.\n     * @param min A numeric value equal to the minutes value.\n     * @param sec A numeric value equal to the seconds value.\n     * @param ms A numeric value equal to the milliseconds value.\n     */\n    setMinutes(min: number, sec?: number, ms?: number): number;\n    /**\n     * Sets the minutes value in the Date object using Universal Coordinated Time (UTC).\n     * @param min A numeric value equal to the minutes value.\n     * @param sec A numeric value equal to the seconds value.\n     * @param ms A numeric value equal to the milliseconds value.\n     */\n    setUTCMinutes(min: number, sec?: number, ms?: number): number;\n    /**\n     * Sets the hour value in the Date object using local time.\n     * @param hours A numeric value equal to the hours value.\n     * @param min A numeric value equal to the minutes value.\n     * @param sec A numeric value equal to the seconds value.\n     * @param ms A numeric value equal to the milliseconds value.\n     */\n    setHours(hours: number, min?: number, sec?: number, ms?: number): number;\n    /**\n     * Sets the hours value in the Date object using Universal Coordinated Time (UTC).\n     * @param hours A numeric value equal to the hours value.\n     * @param min A numeric value equal to the minutes value.\n     * @param sec A numeric value equal to the seconds value.\n     * @param ms A numeric value equal to the milliseconds value.\n     */\n    setUTCHours(hours: number, min?: number, sec?: number, ms?: number): number;\n    /**\n     * Sets the numeric day-of-the-month value of the Date object using local time.\n     * @param date A numeric value equal to the day of the month.\n     */\n    setDate(date: number): number;\n    /**\n     * Sets the numeric day of the month in the Date object using Universal Coordinated Time (UTC).\n     * @param date A numeric value equal to the day of the month.\n     */\n    setUTCDate(date: number): number;\n    /**\n     * Sets the month value in the Date object using local time.\n     * @param month A numeric value equal to the month. The value for January is 0, and other month values follow consecutively.\n     * @param date A numeric value representing the day of the month. If this value is not supplied, the value from a call to the getDate method is used.\n     */\n    setMonth(month: number, date?: number): number;\n    /**\n     * Sets the month value in the Date object using Universal Coordinated Time (UTC).\n     * @param month A numeric value equal to the month. The value for January is 0, and other month values follow consecutively.\n     * @param date A numeric value representing the day of the month. If it is not supplied, the value from a call to the getUTCDate method is used.\n     */\n    setUTCMonth(month: number, date?: number): number;\n    /**\n     * Sets the year of the Date object using local time.\n     * @param year A numeric value for the year.\n     * @param month A zero-based numeric value for the month (0 for January, 11 for December). Must be specified if numDate is specified.\n     * @param date A numeric value equal for the day of the month.\n     */\n    setFullYear(year: number, month?: number, date?: number): number;\n    /**\n     * Sets the year value in the Date object using Universal Coordinated Time (UTC).\n     * @param year A numeric value equal to the year.\n     * @param month A numeric value equal to the month. The value for January is 0, and other month values follow consecutively. Must be supplied if numDate is supplied.\n     * @param date A numeric value equal to the day of the month.\n     */\n    setUTCFullYear(year: number, month?: number, date?: number): number;\n    /** Returns a date converted to a string using Universal Coordinated Time (UTC). */\n    toUTCString(): string;\n    /** Returns a date as a string value in ISO format. */\n    toISOString(): string;\n    /** Used by the JSON.stringify method to enable the transformation of an object's data for JavaScript Object Notation (JSON) serialization. */\n    toJSON(key?: any): string;\n}\n\ninterface DateConstructor {\n    new (): Date;\n    new (value: number | string): Date;\n    /**\n     * Creates a new Date.\n     * @param year The full year designation is required for cross-century date accuracy. If year is between 0 and 99 is used, then year is assumed to be 1900 + year.\n     * @param monthIndex The month as a number between 0 and 11 (January to December).\n     * @param date The date as a number between 1 and 31.\n     * @param hours Must be supplied if minutes is supplied. A number from 0 to 23 (midnight to 11pm) that specifies the hour.\n     * @param minutes Must be supplied if seconds is supplied. A number from 0 to 59 that specifies the minutes.\n     * @param seconds Must be supplied if milliseconds is supplied. A number from 0 to 59 that specifies the seconds.\n     * @param ms A number from 0 to 999 that specifies the milliseconds.\n     */\n    new (year: number, monthIndex: number, date?: number, hours?: number, minutes?: number, seconds?: number, ms?: number): Date;\n    (): string;\n    readonly prototype: Date;\n    /**\n     * Parses a string containing a date, and returns the number of milliseconds between that date and midnight, January 1, 1970.\n     * @param s A date string\n     */\n    parse(s: string): number;\n    /**\n     * Returns the number of milliseconds between midnight, January 1, 1970 Universal Coordinated Time (UTC) (or GMT) and the specified date.\n     * @param year The full year designation is required for cross-century date accuracy. If year is between 0 and 99 is used, then year is assumed to be 1900 + year.\n     * @param monthIndex The month as a number between 0 and 11 (January to December).\n     * @param date The date as a number between 1 and 31.\n     * @param hours Must be supplied if minutes is supplied. A number from 0 to 23 (midnight to 11pm) that specifies the hour.\n     * @param minutes Must be supplied if seconds is supplied. A number from 0 to 59 that specifies the minutes.\n     * @param seconds Must be supplied if milliseconds is supplied. A number from 0 to 59 that specifies the seconds.\n     * @param ms A number from 0 to 999 that specifies the milliseconds.\n     */\n    UTC(year: number, monthIndex: number, date?: number, hours?: number, minutes?: number, seconds?: number, ms?: number): number;\n    /** Returns the number of milliseconds elapsed since midnight, January 1, 1970 Universal Coordinated Time (UTC). */\n    now(): number;\n}\n\ndeclare var Date: DateConstructor;\n\ninterface RegExpMatchArray extends Array<string> {\n    /**\n     * The index of the search at which the result was found.\n     */\n    index?: number;\n    /**\n     * A copy of the search string.\n     */\n    input?: string;\n    /**\n     * The first match. This will always be present because `null` will be returned if there are no matches.\n     */\n    0: string;\n}\n\ninterface RegExpExecArray extends Array<string> {\n    /**\n     * The index of the search at which the result was found.\n     */\n    index: number;\n    /**\n     * A copy of the search string.\n     */\n    input: string;\n    /**\n     * The first match. This will always be present because `null` will be returned if there are no matches.\n     */\n    0: string;\n}\n\ninterface RegExp {\n    /**\n     * Executes a search on a string using a regular expression pattern, and returns an array containing the results of that search.\n     * @param string The String object or string literal on which to perform the search.\n     */\n    exec(string: string): RegExpExecArray | null;\n\n    /**\n     * Returns a Boolean value that indicates whether or not a pattern exists in a searched string.\n     * @param string String on which to perform the search.\n     */\n    test(string: string): boolean;\n\n    /** Returns a copy of the text of the regular expression pattern. Read-only. The regExp argument is a Regular expression object. It can be a variable name or a literal. */\n    readonly source: string;\n\n    /** Returns a Boolean value indicating the state of the global flag (g) used with a regular expression. Default is false. Read-only. */\n    readonly global: boolean;\n\n    /** Returns a Boolean value indicating the state of the ignoreCase flag (i) used with a regular expression. Default is false. Read-only. */\n    readonly ignoreCase: boolean;\n\n    /** Returns a Boolean value indicating the state of the multiline flag (m) used with a regular expression. Default is false. Read-only. */\n    readonly multiline: boolean;\n\n    lastIndex: number;\n\n    // Non-standard extensions\n    /** @deprecated A legacy feature for browser compatibility */\n    compile(pattern: string, flags?: string): this;\n}\n\ninterface RegExpConstructor {\n    new (pattern: RegExp | string): RegExp;\n    new (pattern: string, flags?: string): RegExp;\n    (pattern: RegExp | string): RegExp;\n    (pattern: string, flags?: string): RegExp;\n    readonly \"prototype\": RegExp;\n\n    // Non-standard extensions\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$1\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$2\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$3\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$4\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$5\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$6\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$7\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$8\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$9\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"input\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$_\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"lastMatch\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$&\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"lastParen\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$+\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"leftContext\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$`\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"rightContext\": string;\n    /** @deprecated A legacy feature for browser compatibility */\n    \"$'\": string;\n}\n\ndeclare var RegExp: RegExpConstructor;\n\ninterface Error {\n    name: string;\n    message: string;\n    stack?: string;\n}\n\ninterface ErrorConstructor {\n    new (message?: string): Error;\n    (message?: string): Error;\n    readonly prototype: Error;\n}\n\ndeclare var Error: ErrorConstructor;\n\ninterface EvalError extends Error {\n}\n\ninterface EvalErrorConstructor extends ErrorConstructor {\n    new (message?: string): EvalError;\n    (message?: string): EvalError;\n    readonly prototype: EvalError;\n}\n\ndeclare var EvalError: EvalErrorConstructor;\n\ninterface RangeError extends Error {\n}\n\ninterface RangeErrorConstructor extends ErrorConstructor {\n    new (message?: string): RangeError;\n    (message?: string): RangeError;\n    readonly prototype: RangeError;\n}\n\ndeclare var RangeError: RangeErrorConstructor;\n\ninterface ReferenceError extends Error {\n}\n\ninterface ReferenceErrorConstructor extends ErrorConstructor {\n    new (message?: string): ReferenceError;\n    (message?: string): ReferenceError;\n    readonly prototype: ReferenceError;\n}\n\ndeclare var ReferenceError: ReferenceErrorConstructor;\n\ninterface SyntaxError extends Error {\n}\n\ninterface SyntaxErrorConstructor extends ErrorConstructor {\n    new (message?: string): SyntaxError;\n    (message?: string): SyntaxError;\n    readonly prototype: SyntaxError;\n}\n\ndeclare var SyntaxError: SyntaxErrorConstructor;\n\ninterface TypeError extends Error {\n}\n\ninterface TypeErrorConstructor extends ErrorConstructor {\n    new (message?: string): TypeError;\n    (message?: string): TypeError;\n    readonly prototype: TypeError;\n}\n\ndeclare var TypeError: TypeErrorConstructor;\n\ninterface URIError extends Error {\n}\n\ninterface URIErrorConstructor extends ErrorConstructor {\n    new (message?: string): URIError;\n    (message?: string): URIError;\n    readonly prototype: URIError;\n}\n\ndeclare var URIError: URIErrorConstructor;\n\ninterface JSON {\n    /**\n     * Converts a JavaScript Object Notation (JSON) string into an object.\n     * @param text A valid JSON string.\n     * @param reviver A function that transforms the results. This function is called for each member of the object.\n     * If a member contains nested objects, the nested objects are transformed before the parent object is.\n     * @throws {SyntaxError} If `text` is not valid JSON.\n     */\n    parse(text: string, reviver?: (this: any, key: string, value: any) => any): any;\n    /**\n     * Converts a JavaScript value to a JavaScript Object Notation (JSON) string.\n     * @param value A JavaScript value, usually an object or array, to be converted.\n     * @param replacer A function that transforms the results.\n     * @param space Adds indentation, white space, and line break characters to the return-value JSON text to make it easier to read.\n     * @throws {TypeError} If a circular reference or a BigInt value is found.\n     */\n    stringify(value: any, replacer?: (this: any, key: string, value: any) => any, space?: string | number): string;\n    /**\n     * Converts a JavaScript value to a JavaScript Object Notation (JSON) string.\n     * @param value A JavaScript value, usually an object or array, to be converted.\n     * @param replacer An array of strings and numbers that acts as an approved list for selecting the object properties that will be stringified.\n     * @param space Adds indentation, white space, and line break characters to the return-value JSON text to make it easier to read.\n     * @throws {TypeError} If a circular reference or a BigInt value is found.\n     */\n    stringify(value: any, replacer?: (number | string)[] | null, space?: string | number): string;\n}\n\n/**\n * An intrinsic object that provides functions to convert JavaScript values to and from the JavaScript Object Notation (JSON) format.\n */\ndeclare var JSON: JSON;\n\n/////////////////////////////\n/// ECMAScript Array API (specially handled by compiler)\n/////////////////////////////\n\ninterface ReadonlyArray<T> {\n    /**\n     * Gets the length of the array. This is a number one higher than the highest element defined in an array.\n     */\n    readonly length: number;\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n    /**\n     * Returns a string representation of an array. The elements are converted to string using their toLocaleString methods.\n     */\n    toLocaleString(): string;\n    /**\n     * Combines two or more arrays.\n     * @param items Additional items to add to the end of array1.\n     */\n    concat(...items: ConcatArray<T>[]): T[];\n    /**\n     * Combines two or more arrays.\n     * @param items Additional items to add to the end of array1.\n     */\n    concat(...items: (T | ConcatArray<T>)[]): T[];\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): T[];\n    /**\n     * Returns the index of the first occurrence of a value in an array.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the search starts at index 0.\n     */\n    indexOf(searchElement: T, fromIndex?: number): number;\n    /**\n     * Returns the index of the last occurrence of a specified value in an array.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the search starts at the last index in the array.\n     */\n    lastIndexOf(searchElement: T, fromIndex?: number): number;\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every<S extends T>(predicate: (value: T, index: number, array: readonly T[]) => value is S, thisArg?: any): this is readonly S[];\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: T, index: number, array: readonly T[]) => unknown, thisArg?: any): boolean;\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: T, index: number, array: readonly T[]) => unknown, thisArg?: any): boolean;\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function. If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: T, index: number, array: readonly T[]) => void, thisArg?: any): void;\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function. If thisArg is omitted, undefined is used as the this value.\n     */\n    map<U>(callbackfn: (value: T, index: number, array: readonly T[]) => U, thisArg?: any): U[];\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function. If thisArg is omitted, undefined is used as the this value.\n     */\n    filter<S extends T>(predicate: (value: T, index: number, array: readonly T[]) => value is S, thisArg?: any): S[];\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function. If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: T, index: number, array: readonly T[]) => unknown, thisArg?: any): T[];\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: readonly T[]) => T): T;\n    reduce(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: readonly T[]) => T, initialValue: T): T;\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: T, currentIndex: number, array: readonly T[]) => U, initialValue: U): U;\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: readonly T[]) => T): T;\n    reduceRight(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: readonly T[]) => T, initialValue: T): T;\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: T, currentIndex: number, array: readonly T[]) => U, initialValue: U): U;\n\n    readonly [n: number]: T;\n}\n\ninterface ConcatArray<T> {\n    readonly length: number;\n    readonly [n: number]: T;\n    join(separator?: string): string;\n    slice(start?: number, end?: number): T[];\n}\n\ninterface Array<T> {\n    /**\n     * Gets or sets the length of the array. This is a number one higher than the highest index in the array.\n     */\n    length: number;\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n    /**\n     * Returns a string representation of an array. The elements are converted to string using their toLocaleString methods.\n     */\n    toLocaleString(): string;\n    /**\n     * Removes the last element from an array and returns it.\n     * If the array is empty, undefined is returned and the array is not modified.\n     */\n    pop(): T | undefined;\n    /**\n     * Appends new elements to the end of an array, and returns the new length of the array.\n     * @param items New elements to add to the array.\n     */\n    push(...items: T[]): number;\n    /**\n     * Combines two or more arrays.\n     * This method returns a new array without modifying any existing arrays.\n     * @param items Additional arrays and/or items to add to the end of the array.\n     */\n    concat(...items: ConcatArray<T>[]): T[];\n    /**\n     * Combines two or more arrays.\n     * This method returns a new array without modifying any existing arrays.\n     * @param items Additional arrays and/or items to add to the end of the array.\n     */\n    concat(...items: (T | ConcatArray<T>)[]): T[];\n    /**\n     * Adds all the elements of an array into a string, separated by the specified separator string.\n     * @param separator A string used to separate one element of the array from the next in the resulting string. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n    /**\n     * Reverses the elements in an array in place.\n     * This method mutates the array and returns a reference to the same array.\n     */\n    reverse(): T[];\n    /**\n     * Removes the first element from an array and returns it.\n     * If the array is empty, undefined is returned and the array is not modified.\n     */\n    shift(): T | undefined;\n    /**\n     * Returns a copy of a section of an array.\n     * For both start and end, a negative index can be used to indicate an offset from the end of the array.\n     * For example, -2 refers to the second to last element of the array.\n     * @param start The beginning index of the specified portion of the array.\n     * If start is undefined, then the slice begins at index 0.\n     * @param end The end index of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     * If end is undefined, then the slice extends to the end of the array.\n     */\n    slice(start?: number, end?: number): T[];\n    /**\n     * Sorts an array in place.\n     * This method mutates the array and returns a reference to the same array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if the first argument is less than the second argument, zero if they're equal, and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending, UTF-16 code unit order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: T, b: T) => number): this;\n    /**\n     * Removes elements from an array and, if necessary, inserts new elements in their place, returning the deleted elements.\n     * @param start The zero-based location in the array from which to start removing elements.\n     * @param deleteCount The number of elements to remove. Omitting this argument will remove all elements from the start\n     * paramater location to end of the array. If value of this argument is either a negative number, zero, undefined, or a type\n     * that cannot be converted to an integer, the function will evaluate the argument as zero and not remove any elements.\n     * @returns An array containing the elements that were deleted.\n     */\n    splice(start: number, deleteCount?: number): T[];\n    /**\n     * Removes elements from an array and, if necessary, inserts new elements in their place, returning the deleted elements.\n     * @param start The zero-based location in the array from which to start removing elements.\n     * @param deleteCount The number of elements to remove. If value of this argument is either a negative number, zero,\n     * undefined, or a type that cannot be converted to an integer, the function will evaluate the argument as zero and\n     * not remove any elements.\n     * @param items Elements to insert into the array in place of the deleted elements.\n     * @returns An array containing the elements that were deleted.\n     */\n    splice(start: number, deleteCount: number, ...items: T[]): T[];\n    /**\n     * Inserts new elements at the start of an array, and returns the new length of the array.\n     * @param items Elements to insert at the start of the array.\n     */\n    unshift(...items: T[]): number;\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the search starts at index 0.\n     */\n    indexOf(searchElement: T, fromIndex?: number): number;\n    /**\n     * Returns the index of the last occurrence of a specified value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin searching backward. If fromIndex is omitted, the search starts at the last index in the array.\n     */\n    lastIndexOf(searchElement: T, fromIndex?: number): number;\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every<S extends T>(predicate: (value: T, index: number, array: T[]) => value is S, thisArg?: any): this is S[];\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: T, index: number, array: T[]) => unknown, thisArg?: any): boolean;\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: T, index: number, array: T[]) => unknown, thisArg?: any): boolean;\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function. If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: T, index: number, array: T[]) => void, thisArg?: any): void;\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function. If thisArg is omitted, undefined is used as the this value.\n     */\n    map<U>(callbackfn: (value: T, index: number, array: T[]) => U, thisArg?: any): U[];\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function. If thisArg is omitted, undefined is used as the this value.\n     */\n    filter<S extends T>(predicate: (value: T, index: number, array: T[]) => value is S, thisArg?: any): S[];\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function. If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: T, index: number, array: T[]) => unknown, thisArg?: any): T[];\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: T[]) => T): T;\n    reduce(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: T[]) => T, initialValue: T): T;\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: T, currentIndex: number, array: T[]) => U, initialValue: U): U;\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: T[]) => T): T;\n    reduceRight(callbackfn: (previousValue: T, currentValue: T, currentIndex: number, array: T[]) => T, initialValue: T): T;\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order. The return value of the callback function is the accumulated result, and is provided as an argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start the accumulation. The first call to the callbackfn function provides this value as an argument instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: T, currentIndex: number, array: T[]) => U, initialValue: U): U;\n\n    [n: number]: T;\n}\n\ninterface ArrayConstructor {\n    new (arrayLength?: number): any[];\n    new <T>(arrayLength: number): T[];\n    new <T>(...items: T[]): T[];\n    (arrayLength?: number): any[];\n    <T>(arrayLength: number): T[];\n    <T>(...items: T[]): T[];\n    isArray(arg: any): arg is any[];\n    readonly prototype: any[];\n}\n\ndeclare var Array: ArrayConstructor;\n\ninterface TypedPropertyDescriptor<T> {\n    enumerable?: boolean;\n    configurable?: boolean;\n    writable?: boolean;\n    value?: T;\n    get?: () => T;\n    set?: (value: T) => void;\n}\n\ndeclare type PromiseConstructorLike = new <T>(executor: (resolve: (value: T | PromiseLike<T>) => void, reject: (reason?: any) => void) => void) => PromiseLike<T>;\n\ninterface PromiseLike<T> {\n    /**\n     * Attaches callbacks for the resolution and/or rejection of the Promise.\n     * @param onfulfilled The callback to execute when the Promise is resolved.\n     * @param onrejected The callback to execute when the Promise is rejected.\n     * @returns A Promise for the completion of which ever callback is executed.\n     */\n    then<TResult1 = T, TResult2 = never>(onfulfilled?: ((value: T) => TResult1 | PromiseLike<TResult1>) | undefined | null, onrejected?: ((reason: any) => TResult2 | PromiseLike<TResult2>) | undefined | null): PromiseLike<TResult1 | TResult2>;\n}\n\n/**\n * Represents the completion of an asynchronous operation\n */\ninterface Promise<T> {\n    /**\n     * Attaches callbacks for the resolution and/or rejection of the Promise.\n     * @param onfulfilled The callback to execute when the Promise is resolved.\n     * @param onrejected The callback to execute when the Promise is rejected.\n     * @returns A Promise for the completion of which ever callback is executed.\n     */\n    then<TResult1 = T, TResult2 = never>(onfulfilled?: ((value: T) => TResult1 | PromiseLike<TResult1>) | undefined | null, onrejected?: ((reason: any) => TResult2 | PromiseLike<TResult2>) | undefined | null): Promise<TResult1 | TResult2>;\n\n    /**\n     * Attaches a callback for only the rejection of the Promise.\n     * @param onrejected The callback to execute when the Promise is rejected.\n     * @returns A Promise for the completion of the callback.\n     */\n    catch<TResult = never>(onrejected?: ((reason: any) => TResult | PromiseLike<TResult>) | undefined | null): Promise<T | TResult>;\n}\n\n/**\n * Recursively unwraps the \"awaited type\" of a type. Non-promise \"thenables\" should resolve to `never`. This emulates the behavior of `await`.\n */\ntype Awaited<T> = T extends null | undefined ? T : // special case for `null | undefined` when not in `--strictNullChecks` mode\n    T extends object & { then(onfulfilled: infer F, ...args: infer _): any; } ? // `await` only unwraps object types with a callable `then`. Non-object types are not unwrapped\n        F extends ((value: infer V, ...args: infer _) => any) ? // if the argument to `then` is callable, extracts the first argument\n            Awaited<V> : // recursively unwrap the value\n        never : // the argument to `then` was not callable\n    T; // non-object or non-thenable\n\ninterface ArrayLike<T> {\n    readonly length: number;\n    readonly [n: number]: T;\n}\n\n/**\n * Make all properties in T optional\n */\ntype Partial<T> = {\n    [P in keyof T]?: T[P];\n};\n\n/**\n * Make all properties in T required\n */\ntype Required<T> = {\n    [P in keyof T]-?: T[P];\n};\n\n/**\n * Make all properties in T readonly\n */\ntype Readonly<T> = {\n    readonly [P in keyof T]: T[P];\n};\n\n/**\n * From T, pick a set of properties whose keys are in the union K\n */\ntype Pick<T, K extends keyof T> = {\n    [P in K]: T[P];\n};\n\n/**\n * Construct a type with a set of properties K of type T\n */\ntype Record<K extends keyof any, T> = {\n    [P in K]: T;\n};\n\n/**\n * Exclude from T those types that are assignable to U\n */\ntype Exclude<T, U> = T extends U ? never : T;\n\n/**\n * Extract from T those types that are assignable to U\n */\ntype Extract<T, U> = T extends U ? T : never;\n\n/**\n * Construct a type with the properties of T except for those in type K.\n */\ntype Omit<T, K extends keyof any> = Pick<T, Exclude<keyof T, K>>;\n\n/**\n * Exclude null and undefined from T\n */\ntype NonNullable<T> = T & {};\n\n/**\n * Obtain the parameters of a function type in a tuple\n */\ntype Parameters<T extends (...args: any) => any> = T extends (...args: infer P) => any ? P : never;\n\n/**\n * Obtain the parameters of a constructor function type in a tuple\n */\ntype ConstructorParameters<T extends abstract new (...args: any) => any> = T extends abstract new (...args: infer P) => any ? P : never;\n\n/**\n * Obtain the return type of a function type\n */\ntype ReturnType<T extends (...args: any) => any> = T extends (...args: any) => infer R ? R : any;\n\n/**\n * Obtain the return type of a constructor function type\n */\ntype InstanceType<T extends abstract new (...args: any) => any> = T extends abstract new (...args: any) => infer R ? R : any;\n\n/**\n * Convert string literal type to uppercase\n */\ntype Uppercase<S extends string> = intrinsic;\n\n/**\n * Convert string literal type to lowercase\n */\ntype Lowercase<S extends string> = intrinsic;\n\n/**\n * Convert first character of string literal type to uppercase\n */\ntype Capitalize<S extends string> = intrinsic;\n\n/**\n * Convert first character of string literal type to lowercase\n */\ntype Uncapitalize<S extends string> = intrinsic;\n\n/**\n * Marker for non-inference type position\n */\ntype NoInfer<T> = intrinsic;\n\n/**\n * Marker for contextual 'this' type\n */\ninterface ThisType<T> {}\n\n/**\n * Stores types to be used with WeakSet, WeakMap, WeakRef, and FinalizationRegistry\n */\ninterface WeakKeyTypes {\n    object: object;\n}\n\ntype WeakKey = WeakKeyTypes[keyof WeakKeyTypes];\n\n/**\n * Represents a raw buffer of binary data, which is used to store data for the\n * different typed arrays. ArrayBuffers cannot be read from or written to directly,\n * but can be passed to a typed array or DataView Object to interpret the raw\n * buffer as needed.\n */\ninterface ArrayBuffer {\n    /**\n     * Read-only. The length of the ArrayBuffer (in bytes).\n     */\n    readonly byteLength: number;\n\n    /**\n     * Returns a section of an ArrayBuffer.\n     */\n    slice(begin?: number, end?: number): ArrayBuffer;\n}\n\n/**\n * Allowed ArrayBuffer types for the buffer of an ArrayBufferView and related Typed Arrays.\n */\ninterface ArrayBufferTypes {\n    ArrayBuffer: ArrayBuffer;\n}\ntype ArrayBufferLike = ArrayBufferTypes[keyof ArrayBufferTypes];\n\ninterface ArrayBufferConstructor {\n    readonly prototype: ArrayBuffer;\n    new (byteLength: number): ArrayBuffer;\n    isView(arg: any): arg is ArrayBufferView;\n}\ndeclare var ArrayBuffer: ArrayBufferConstructor;\n\ninterface ArrayBufferView<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n}\n\ninterface DataView<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    readonly buffer: TArrayBuffer;\n    readonly byteLength: number;\n    readonly byteOffset: number;\n    /**\n     * Gets the Float32 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getFloat32(byteOffset: number, littleEndian?: boolean): number;\n\n    /**\n     * Gets the Float64 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getFloat64(byteOffset: number, littleEndian?: boolean): number;\n\n    /**\n     * Gets the Int8 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     */\n    getInt8(byteOffset: number): number;\n\n    /**\n     * Gets the Int16 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getInt16(byteOffset: number, littleEndian?: boolean): number;\n    /**\n     * Gets the Int32 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getInt32(byteOffset: number, littleEndian?: boolean): number;\n\n    /**\n     * Gets the Uint8 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     */\n    getUint8(byteOffset: number): number;\n\n    /**\n     * Gets the Uint16 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getUint16(byteOffset: number, littleEndian?: boolean): number;\n\n    /**\n     * Gets the Uint32 value at the specified byte offset from the start of the view. There is\n     * no alignment constraint; multi-byte values may be fetched from any offset.\n     * @param byteOffset The place in the buffer at which the value should be retrieved.\n     * @param littleEndian If false or undefined, a big-endian value should be read.\n     */\n    getUint32(byteOffset: number, littleEndian?: boolean): number;\n\n    /**\n     * Stores an Float32 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setFloat32(byteOffset: number, value: number, littleEndian?: boolean): void;\n\n    /**\n     * Stores an Float64 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setFloat64(byteOffset: number, value: number, littleEndian?: boolean): void;\n\n    /**\n     * Stores an Int8 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     */\n    setInt8(byteOffset: number, value: number): void;\n\n    /**\n     * Stores an Int16 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setInt16(byteOffset: number, value: number, littleEndian?: boolean): void;\n\n    /**\n     * Stores an Int32 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setInt32(byteOffset: number, value: number, littleEndian?: boolean): void;\n\n    /**\n     * Stores an Uint8 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     */\n    setUint8(byteOffset: number, value: number): void;\n\n    /**\n     * Stores an Uint16 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setUint16(byteOffset: number, value: number, littleEndian?: boolean): void;\n\n    /**\n     * Stores an Uint32 value at the specified byte offset from the start of the view.\n     * @param byteOffset The place in the buffer at which the value should be set.\n     * @param value The value to set.\n     * @param littleEndian If false or undefined, a big-endian value should be written.\n     */\n    setUint32(byteOffset: number, value: number, littleEndian?: boolean): void;\n}\ninterface DataViewConstructor {\n    readonly prototype: DataView<ArrayBufferLike>;\n    new <TArrayBuffer extends ArrayBufferLike & { BYTES_PER_ELEMENT?: never; }>(buffer: TArrayBuffer, byteOffset?: number, byteLength?: number): DataView<TArrayBuffer>;\n}\ndeclare var DataView: DataViewConstructor;\n\n/**\n * A typed array of 8-bit integer values. The contents are initialized to 0. If the requested\n * number of bytes could not be allocated an exception is raised.\n */\ninterface Int8Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Int8Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Int8Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Int8Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Int8Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Int8Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Int8ArrayConstructor {\n    readonly prototype: Int8Array<ArrayBufferLike>;\n    new (length: number): Int8Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Int8Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Int8Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Int8Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Int8Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Int8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Int8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Int8Array<ArrayBuffer>;\n}\ndeclare var Int8Array: Int8ArrayConstructor;\n\n/**\n * A typed array of 8-bit unsigned integer values. The contents are initialized to 0. If the\n * requested number of bytes could not be allocated an exception is raised.\n */\ninterface Uint8Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Uint8Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Uint8Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Uint8Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Uint8Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Uint8Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Uint8ArrayConstructor {\n    readonly prototype: Uint8Array<ArrayBufferLike>;\n    new (length: number): Uint8Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Uint8Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Uint8Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Uint8Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Uint8Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Uint8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Uint8Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Uint8Array<ArrayBuffer>;\n}\ndeclare var Uint8Array: Uint8ArrayConstructor;\n\n/**\n * A typed array of 8-bit unsigned integer (clamped) values. The contents are initialized to 0.\n * If the requested number of bytes could not be allocated an exception is raised.\n */\ninterface Uint8ClampedArray<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Uint8ClampedArray view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Uint8ClampedArray<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Uint8ClampedArrayConstructor {\n    readonly prototype: Uint8ClampedArray<ArrayBufferLike>;\n    new (length: number): Uint8ClampedArray<ArrayBuffer>;\n    new (array: ArrayLike<number>): Uint8ClampedArray<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Uint8ClampedArray<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Uint8ClampedArray<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Uint8ClampedArray<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Uint8ClampedArray<ArrayBuffer>;\n}\ndeclare var Uint8ClampedArray: Uint8ClampedArrayConstructor;\n\n/**\n * A typed array of 16-bit signed integer values. The contents are initialized to 0. If the\n * requested number of bytes could not be allocated an exception is raised.\n */\ninterface Int16Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Int16Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Int16Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Int16Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Int16Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Int16Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Int16ArrayConstructor {\n    readonly prototype: Int16Array<ArrayBufferLike>;\n    new (length: number): Int16Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Int16Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Int16Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Int16Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Int16Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Int16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Int16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Int16Array<ArrayBuffer>;\n}\ndeclare var Int16Array: Int16ArrayConstructor;\n\n/**\n * A typed array of 16-bit unsigned integer values. The contents are initialized to 0. If the\n * requested number of bytes could not be allocated an exception is raised.\n */\ninterface Uint16Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Uint16Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Uint16Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Uint16Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Uint16Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Uint16Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Uint16ArrayConstructor {\n    readonly prototype: Uint16Array<ArrayBufferLike>;\n    new (length: number): Uint16Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Uint16Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Uint16Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Uint16Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Uint16Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Uint16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Uint16Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Uint16Array<ArrayBuffer>;\n}\ndeclare var Uint16Array: Uint16ArrayConstructor;\n/**\n * A typed array of 32-bit signed integer values. The contents are initialized to 0. If the\n * requested number of bytes could not be allocated an exception is raised.\n */\ninterface Int32Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Int32Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Int32Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Int32Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Int32Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Int32Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Int32ArrayConstructor {\n    readonly prototype: Int32Array<ArrayBufferLike>;\n    new (length: number): Int32Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Int32Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Int32Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Int32Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Int32Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Int32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Int32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Int32Array<ArrayBuffer>;\n}\ndeclare var Int32Array: Int32ArrayConstructor;\n\n/**\n * A typed array of 32-bit unsigned integer values. The contents are initialized to 0. If the\n * requested number of bytes could not be allocated an exception is raised.\n */\ninterface Uint32Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Uint32Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Uint32Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Uint32Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Uint32Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Uint32Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Uint32ArrayConstructor {\n    readonly prototype: Uint32Array<ArrayBufferLike>;\n    new (length: number): Uint32Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Uint32Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Uint32Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Uint32Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Uint32Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Uint32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Uint32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Uint32Array<ArrayBuffer>;\n}\ndeclare var Uint32Array: Uint32ArrayConstructor;\n\n/**\n * A typed array of 32-bit float values. The contents are initialized to 0. If the requested number\n * of bytes could not be allocated an exception is raised.\n */\ninterface Float32Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Float32Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Float32Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Float32Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Float32Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Float32Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Float32ArrayConstructor {\n    readonly prototype: Float32Array<ArrayBufferLike>;\n    new (length: number): Float32Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Float32Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Float32Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Float32Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Float32Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Float32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Float32Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Float32Array<ArrayBuffer>;\n}\ndeclare var Float32Array: Float32ArrayConstructor;\n\n/**\n * A typed array of 64-bit float values. The contents are initialized to 0. If the requested\n * number of bytes could not be allocated an exception is raised.\n */\ninterface Float64Array<TArrayBuffer extends ArrayBufferLike = ArrayBufferLike> {\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * The ArrayBuffer instance referenced by the array.\n     */\n    readonly buffer: TArrayBuffer;\n\n    /**\n     * The length in bytes of the array.\n     */\n    readonly byteLength: number;\n\n    /**\n     * The offset in bytes of the array.\n     */\n    readonly byteOffset: number;\n\n    /**\n     * Returns the this object after copying a section of the array identified by start and end\n     * to the same array starting at position target\n     * @param target If target is negative, it is treated as length+target where length is the\n     * length of the array.\n     * @param start If start is negative, it is treated as length+start. If end is negative, it\n     * is treated as length+end.\n     * @param end If not specified, length of the this object is used as its default value.\n     */\n    copyWithin(target: number, start: number, end?: number): this;\n\n    /**\n     * Determines whether all the members of an array satisfy the specified test.\n     * @param predicate A function that accepts up to three arguments. The every method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value false, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    every(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Changes all array elements from `start` to `end` index to a static `value` and returns the modified array\n     * @param value value to fill array section with\n     * @param start index to start filling the array at. If start is negative, it is treated as\n     * length+start where length is the length of the array.\n     * @param end index to stop filling the array at. If end is negative, it is treated as\n     * length+end.\n     */\n    fill(value: number, start?: number, end?: number): this;\n\n    /**\n     * Returns the elements of an array that meet the condition specified in a callback function.\n     * @param predicate A function that accepts up to three arguments. The filter method calls\n     * the predicate function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    filter(predicate: (value: number, index: number, array: this) => any, thisArg?: any): Float64Array<ArrayBuffer>;\n\n    /**\n     * Returns the value of the first element in the array where predicate is true, and undefined\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found, find\n     * immediately returns that element value. Otherwise, find returns undefined.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    find(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number | undefined;\n\n    /**\n     * Returns the index of the first element in the array where predicate is true, and -1\n     * otherwise.\n     * @param predicate find calls predicate once for each element of the array, in ascending\n     * order, until it finds one where predicate returns true. If such an element is found,\n     * findIndex immediately returns that element index. Otherwise, findIndex returns -1.\n     * @param thisArg If provided, it will be used as the this value for each invocation of\n     * predicate. If it is not provided, undefined is used instead.\n     */\n    findIndex(predicate: (value: number, index: number, obj: this) => boolean, thisArg?: any): number;\n\n    /**\n     * Performs the specified action for each element in an array.\n     * @param callbackfn A function that accepts up to three arguments. forEach calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    forEach(callbackfn: (value: number, index: number, array: this) => void, thisArg?: any): void;\n\n    /**\n     * Returns the index of the first occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    indexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * Adds all the elements of an array separated by the specified separator string.\n     * @param separator A string used to separate one element of an array from the next in the\n     * resulting String. If omitted, the array elements are separated with a comma.\n     */\n    join(separator?: string): string;\n\n    /**\n     * Returns the index of the last occurrence of a value in an array, or -1 if it is not present.\n     * @param searchElement The value to locate in the array.\n     * @param fromIndex The array index at which to begin the search. If fromIndex is omitted, the\n     * search starts at index 0.\n     */\n    lastIndexOf(searchElement: number, fromIndex?: number): number;\n\n    /**\n     * The length of the array.\n     */\n    readonly length: number;\n\n    /**\n     * Calls a defined callback function on each element of an array, and returns an array that\n     * contains the results.\n     * @param callbackfn A function that accepts up to three arguments. The map method calls the\n     * callbackfn function one time for each element in the array.\n     * @param thisArg An object to which the this keyword can refer in the callbackfn function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    map(callbackfn: (value: number, index: number, array: this) => number, thisArg?: any): Float64Array<ArrayBuffer>;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduce(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array. The return value of\n     * the callback function is the accumulated result, and is provided as an argument in the next\n     * call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduce method calls the\n     * callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduce<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an\n     * argument instead of an array value.\n     */\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number): number;\n    reduceRight(callbackfn: (previousValue: number, currentValue: number, currentIndex: number, array: this) => number, initialValue: number): number;\n\n    /**\n     * Calls the specified callback function for all the elements in an array, in descending order.\n     * The return value of the callback function is the accumulated result, and is provided as an\n     * argument in the next call to the callback function.\n     * @param callbackfn A function that accepts up to four arguments. The reduceRight method calls\n     * the callbackfn function one time for each element in the array.\n     * @param initialValue If initialValue is specified, it is used as the initial value to start\n     * the accumulation. The first call to the callbackfn function provides this value as an argument\n     * instead of an array value.\n     */\n    reduceRight<U>(callbackfn: (previousValue: U, currentValue: number, currentIndex: number, array: this) => U, initialValue: U): U;\n\n    /**\n     * Reverses the elements in an Array.\n     */\n    reverse(): this;\n\n    /**\n     * Sets a value or an array of values.\n     * @param array A typed or untyped array of values to set.\n     * @param offset The index in the current array at which the values are to be written.\n     */\n    set(array: ArrayLike<number>, offset?: number): void;\n\n    /**\n     * Returns a section of an array.\n     * @param start The beginning of the specified portion of the array.\n     * @param end The end of the specified portion of the array. This is exclusive of the element at the index 'end'.\n     */\n    slice(start?: number, end?: number): Float64Array<ArrayBuffer>;\n\n    /**\n     * Determines whether the specified callback function returns true for any element of an array.\n     * @param predicate A function that accepts up to three arguments. The some method calls\n     * the predicate function for each element in the array until the predicate returns a value\n     * which is coercible to the Boolean value true, or until the end of the array.\n     * @param thisArg An object to which the this keyword can refer in the predicate function.\n     * If thisArg is omitted, undefined is used as the this value.\n     */\n    some(predicate: (value: number, index: number, array: this) => unknown, thisArg?: any): boolean;\n\n    /**\n     * Sorts an array.\n     * @param compareFn Function used to determine the order of the elements. It is expected to return\n     * a negative value if first argument is less than second argument, zero if they're equal and a positive\n     * value otherwise. If omitted, the elements are sorted in ascending order.\n     * ```ts\n     * [11,2,22,1].sort((a, b) => a - b)\n     * ```\n     */\n    sort(compareFn?: (a: number, b: number) => number): this;\n\n    /**\n     * Gets a new Float64Array view of the ArrayBuffer store for this array, referencing the elements\n     * at begin, inclusive, up to end, exclusive.\n     * @param begin The index of the beginning of the array.\n     * @param end The index of the end of the array.\n     */\n    subarray(begin?: number, end?: number): Float64Array<TArrayBuffer>;\n\n    /**\n     * Converts a number to a string by using the current locale.\n     */\n    toLocaleString(): string;\n\n    /**\n     * Returns a string representation of an array.\n     */\n    toString(): string;\n\n    /** Returns the primitive value of the specified object. */\n    valueOf(): this;\n\n    [index: number]: number;\n}\ninterface Float64ArrayConstructor {\n    readonly prototype: Float64Array<ArrayBufferLike>;\n    new (length: number): Float64Array<ArrayBuffer>;\n    new (array: ArrayLike<number>): Float64Array<ArrayBuffer>;\n    new <TArrayBuffer extends ArrayBufferLike = ArrayBuffer>(buffer: TArrayBuffer, byteOffset?: number, length?: number): Float64Array<TArrayBuffer>;\n    new (buffer: ArrayBuffer, byteOffset?: number, length?: number): Float64Array<ArrayBuffer>;\n    new (array: ArrayLike<number> | ArrayBuffer): Float64Array<ArrayBuffer>;\n\n    /**\n     * The size in bytes of each element in the array.\n     */\n    readonly BYTES_PER_ELEMENT: number;\n\n    /**\n     * Returns a new array from a set of elements.\n     * @param items A set of elements to include in the new array object.\n     */\n    of(...items: number[]): Float64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     */\n    from(arrayLike: ArrayLike<number>): Float64Array<ArrayBuffer>;\n\n    /**\n     * Creates an array from an array-like or iterable object.\n     * @param arrayLike An array-like object to convert to an array.\n     * @param mapfn A mapping function to call on every element of the array.\n     * @param thisArg Value of 'this' used to invoke the mapfn.\n     */\n    from<T>(arrayLike: ArrayLike<T>, mapfn: (v: T, k: number) => number, thisArg?: any): Float64Array<ArrayBuffer>;\n}\ndeclare var Float64Array: Float64ArrayConstructor;\n\n/////////////////////////////\n/// ECMAScript Internationalization API\n/////////////////////////////\n\ndeclare namespace Intl {\n    interface CollatorOptions {\n        usage?: \"sort\" | \"search\" | undefined;\n        localeMatcher?: \"lookup\" | \"best fit\" | undefined;\n        numeric?: boolean | undefined;\n        caseFirst?: \"upper\" | \"lower\" | \"false\" | undefined;\n        sensitivity?: \"base\" | \"accent\" | \"case\" | \"variant\" | undefined;\n        collation?: \"big5han\" | \"compat\" | \"default\" | \"dict\" | \"direct\" | \"ducet\" | \"emoji\" | \"eor\" | \"gb2312\" | \"phonebk\" | \"phonetic\" | \"pinyin\" | \"reformed\" | \"searchjl\" | \"stroke\" | \"trad\" | \"unihan\" | \"zhuyin\" | undefined;\n        ignorePunctuation?: boolean | undefined;\n    }\n\n    interface ResolvedCollatorOptions {\n        locale: string;\n        usage: string;\n        sensitivity: string;\n        ignorePunctuation: boolean;\n        collation: string;\n        caseFirst: string;\n        numeric: boolean;\n    }\n\n    interface Collator {\n        compare(x: string, y: string): number;\n        resolvedOptions(): ResolvedCollatorOptions;\n    }\n\n    interface CollatorConstructor {\n        new (locales?: string | string[], options?: CollatorOptions): Collator;\n        (locales?: string | string[], options?: CollatorOptions): Collator;\n        supportedLocalesOf(locales: string | string[], options?: CollatorOptions): string[];\n    }\n\n    var Collator: CollatorConstructor;\n\n    interface NumberFormatOptionsStyleRegistry {\n        decimal: never;\n        percent: never;\n        currency: never;\n    }\n\n    type NumberFormatOptionsStyle = keyof NumberFormatOptionsStyleRegistry;\n\n    interface NumberFormatOptionsCurrencyDisplayRegistry {\n        code: never;\n        symbol: never;\n        name: never;\n    }\n\n    type NumberFormatOptionsCurrencyDisplay = keyof NumberFormatOptionsCurrencyDisplayRegistry;\n\n    interface NumberFormatOptionsUseGroupingRegistry {}\n\n    type NumberFormatOptionsUseGrouping = {} extends NumberFormatOptionsUseGroupingRegistry ? boolean : keyof NumberFormatOptionsUseGroupingRegistry | \"true\" | \"false\" | boolean;\n    type ResolvedNumberFormatOptionsUseGrouping = {} extends NumberFormatOptionsUseGroupingRegistry ? boolean : keyof NumberFormatOptionsUseGroupingRegistry | false;\n\n    interface NumberFormatOptions {\n        localeMatcher?: \"lookup\" | \"best fit\" | undefined;\n        style?: NumberFormatOptionsStyle | undefined;\n        currency?: string | undefined;\n        currencyDisplay?: NumberFormatOptionsCurrencyDisplay | undefined;\n        useGrouping?: NumberFormatOptionsUseGrouping | undefined;\n        minimumIntegerDigits?: number | undefined;\n        minimumFractionDigits?: number | undefined;\n        maximumFractionDigits?: number | undefined;\n        minimumSignificantDigits?: number | undefined;\n        maximumSignificantDigits?: number | undefined;\n    }\n\n    interface ResolvedNumberFormatOptions {\n        locale: string;\n        numberingSystem: string;\n        style: NumberFormatOptionsStyle;\n        currency?: string;\n        currencyDisplay?: NumberFormatOptionsCurrencyDisplay;\n        minimumIntegerDigits: number;\n        minimumFractionDigits?: number;\n        maximumFractionDigits?: number;\n        minimumSignificantDigits?: number;\n        maximumSignificantDigits?: number;\n        useGrouping: ResolvedNumberFormatOptionsUseGrouping;\n    }\n\n    interface NumberFormat {\n        format(value: number): string;\n        resolvedOptions(): ResolvedNumberFormatOptions;\n    }\n\n    interface NumberFormatConstructor {\n        new (locales?: string | string[], options?: NumberFormatOptions): NumberFormat;\n        (locales?: string | string[], options?: NumberFormatOptions): NumberFormat;\n        supportedLocalesOf(locales: string | string[], options?: NumberFormatOptions): string[];\n        readonly prototype: NumberFormat;\n    }\n\n    var NumberFormat: NumberFormatConstructor;\n\n    interface DateTimeFormatOptions {\n        localeMatcher?: \"best fit\" | \"lookup\" | undefined;\n        weekday?: \"long\" | \"short\" | \"narrow\" | undefined;\n        era?: \"long\" | \"short\" | \"narrow\" | undefined;\n        year?: \"numeric\" | \"2-digit\" | undefined;\n        month?: \"numeric\" | \"2-digit\" | \"long\" | \"short\" | \"narrow\" | undefined;\n        day?: \"numeric\" | \"2-digit\" | undefined;\n        hour?: \"numeric\" | \"2-digit\" | undefined;\n        minute?: \"numeric\" | \"2-digit\" | undefined;\n        second?: \"numeric\" | \"2-digit\" | undefined;\n        timeZoneName?: \"short\" | \"long\" | \"shortOffset\" | \"longOffset\" | \"shortGeneric\" | \"longGeneric\" | undefined;\n        formatMatcher?: \"best fit\" | \"basic\" | undefined;\n        hour12?: boolean | undefined;\n        timeZone?: string | undefined;\n    }\n\n    interface ResolvedDateTimeFormatOptions {\n        locale: string;\n        calendar: string;\n        numberingSystem: string;\n        timeZone: string;\n        hour12?: boolean;\n        weekday?: string;\n        era?: string;\n        year?: string;\n        month?: string;\n        day?: string;\n        hour?: string;\n        minute?: string;\n        second?: string;\n        timeZoneName?: string;\n    }\n\n    interface DateTimeFormat {\n        format(date?: Date | number): string;\n        resolvedOptions(): ResolvedDateTimeFormatOptions;\n    }\n\n    interface DateTimeFormatConstructor {\n        new (locales?: string | string[], options?: DateTimeFormatOptions): DateTimeFormat;\n        (locales?: string | string[], options?: DateTimeFormatOptions): DateTimeFormat;\n        supportedLocalesOf(locales: string | string[], options?: DateTimeFormatOptions): string[];\n        readonly prototype: DateTimeFormat;\n    }\n\n    var DateTimeFormat: DateTimeFormatConstructor;\n}\n\ninterface String {\n    /**\n     * Determines whether two strings are equivalent in the current or specified locale.\n     * @param that String to compare to target string\n     * @param locales A locale string or array of locale strings that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used. This parameter must conform to BCP 47 standards; see the Intl.Collator object for details.\n     * @param options An object that contains one or more properties that specify comparison options. see the Intl.Collator object for details.\n     */\n    localeCompare(that: string, locales?: string | string[], options?: Intl.CollatorOptions): number;\n}\n\ninterface Number {\n    /**\n     * Converts a number to a string by using the current or specified locale.\n     * @param locales A locale string or array of locale strings that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleString(locales?: string | string[], options?: Intl.NumberFormatOptions): string;\n}\n\ninterface Date {\n    /**\n     * Converts a date and time to a string by using the current or specified locale.\n     * @param locales A locale string or array of locale strings that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleString(locales?: string | string[], options?: Intl.DateTimeFormatOptions): string;\n    /**\n     * Converts a date to a string by using the current or specified locale.\n     * @param locales A locale string or array of locale strings that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleDateString(locales?: string | string[], options?: Intl.DateTimeFormatOptions): string;\n\n    /**\n     * Converts a time to a string by using the current or specified locale.\n     * @param locales A locale string or array of locale strings that contain one or more language or locale tags. If you include more than one locale string, list them in descending order of priority so that the first entry is the preferred locale. If you omit this parameter, the default locale of the JavaScript runtime is used.\n     * @param options An object that contains one or more properties that specify comparison options.\n     */\n    toLocaleTimeString(locales?: string | string[], options?: Intl.DateTimeFormatOptions): string;\n}\n";
diff --git a/packages/paywall-build/src/memory-fs.ts b/packages/paywall-build/src/memory-fs.ts
new file mode 100644
index 000000000..b56daabdd
--- /dev/null
+++ b/packages/paywall-build/src/memory-fs.ts
@@ -0,0 +1,77 @@
+import type { BuildFileEntry, BuildFs } from "./fs.ts";
+
+/**
+ * A hand-rolled in-memory {@link BuildFs} over a flat `Map<path, content>`.
+ *
+ * Not `memfs`: the model here is intentionally trivial (a flat map of absolute
+ * POSIX paths, no real directory nodes), so a dependency-free map is both
+ * lighter and easier to reason about. `list(dir)` derives directory membership
+ * from the key set — a path is "under `dir`" when it starts with `dir + "/"` and
+ * has no further slash. Callers use {@link toFiles}/{@link fromFiles} to move a
+ * fork's files in and out.
+ */
+export class MemoryFs implements BuildFs {
+  private readonly files: Map<string, string>;
+
+  constructor(initial?: Iterable<readonly [string, string]>) {
+    this.files = new Map(initial);
+  }
+
+  read(path: string): string {
+    const content = this.files.get(path);
+    if (content === undefined) {
+      throw new Error(`MemoryFs: no such file: ${path}`);
+    }
+    return content;
+  }
+
+  exists(path: string): boolean {
+    return this.files.has(path);
+  }
+
+  list(dir: string): readonly string[] {
+    const prefix = dir.endsWith("/") ? dir : `${dir}/`;
+    const out: string[] = [];
+    for (const path of this.files.keys()) {
+      if (!path.startsWith(prefix)) continue;
+      const rest = path.slice(prefix.length);
+      if (rest.length === 0 || rest.includes("/")) continue;
+      out.push(path);
+    }
+    // Deterministic ordering so build outputs over a MemoryFs are stable.
+    return out.sort();
+  }
+
+  write(path: string, content: string): void {
+    this.files.set(path, content);
+  }
+
+  remove(path: string): void {
+    this.files.delete(path);
+  }
+
+  rename(from: string, to: string): void {
+    const content = this.files.get(from);
+    if (content === undefined) {
+      throw new Error(`MemoryFs: no such file: ${from}`);
+    }
+    this.files.delete(from);
+    this.files.set(to, content);
+  }
+
+  /** Snapshot the current files as a sorted `{ path, content }[]`. */
+  toFiles(): BuildFileEntry[] {
+    return [...this.files.entries()]
+      .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+      .map(([path, content]) => ({ path, content }));
+  }
+
+  /** Build a {@link MemoryFs} from a `{ path, content }[]`. */
+  static fromFiles(files: Iterable<BuildFileEntry>): MemoryFs {
+    const fs = new MemoryFs();
+    for (const { path, content } of files) {
+      fs.write(path, content);
+    }
+    return fs;
+  }
+}
diff --git a/packages/paywall-build/src/node-capabilities.ts b/packages/paywall-build/src/node-capabilities.ts
new file mode 100644
index 000000000..6e3cc5a21
--- /dev/null
+++ b/packages/paywall-build/src/node-capabilities.ts
@@ -0,0 +1,137 @@
+import * as paywalls from "@voidhash/paywalls";
+import * as paywallsJsxRuntime from "@voidhash/paywalls/jsx-runtime";
+import { extractComponentManifest } from "@voidhash/paywalls";
+import type {
+  BuildCapabilities,
+  CompileOutcome,
+  ExtractOutcome,
+} from "./types.ts";
+
+/** Options for the Node build capabilities. */
+export interface NodeCapabilityOptions {
+  /** Enable the e2e typecheck stage (default `true` for the Node capability). */
+  readonly typecheck?: BuildCapabilities["typecheck"];
+  /** An optional manifest cache. */
+  readonly manifestCache?: BuildCapabilities["manifestCache"];
+}
+
+/**
+ * The canonical esbuild transform settings, verified against the existing
+ * `ComponentCompilerNode` pipeline: TSX loader, automatic JSX with the paywall
+ * import source, CJS output, ES2022 target.
+ */
+const TRANSFORM_OPTIONS = {
+  format: "cjs",
+  jsx: "automatic",
+  jsxImportSource: "@voidhash/paywalls",
+  loader: "tsx",
+  target: "es2022",
+} as const;
+
+/** The modules the CJS `require` shim resolves during manifest extraction. */
+const REQUIRE_MODULES: Readonly<Record<string, unknown>> = {
+  "@voidhash/paywalls": paywalls,
+  "@voidhash/paywalls/jsx-runtime": paywallsJsxRuntime,
+  // esbuild's `jsx: automatic` emits `require("@voidhash/paywalls/jsx-runtime")`
+  // for production and `.../jsx-dev-runtime` for dev; alias the dev entry too.
+  "@voidhash/paywalls/jsx-dev-runtime": paywallsJsxRuntime,
+};
+
+/**
+ * The Node `compile` capability: an esbuild `transform` of the component's TSX
+ * source to CJS. A transform error surfaces as compile diagnostics (esbuild's
+ * message text with 1-based line/column when available).
+ */
+async function nodeCompile(source: string): Promise<CompileOutcome> {
+  const esbuild = await import("esbuild");
+  try {
+    const result = await esbuild.transform(source, TRANSFORM_OPTIONS);
+    return { code: result.code };
+  } catch (err) {
+    const errors = (err as { errors?: readonly unknown[] }).errors;
+    if (Array.isArray(errors) && errors.length > 0) {
+      return {
+        diagnostics: errors.map((e) => {
+          const message = (e as { text?: string }).text ?? String(e);
+          const location = (e as { location?: { line?: number; column?: number } }).location;
+          return {
+            message,
+            ...(location?.line !== undefined ? { line: location.line } : {}),
+            // esbuild columns are 0-based; convert to 1-based.
+            ...(location?.column !== undefined ? { column: location.column + 1 } : {}),
+          };
+        }),
+      };
+    }
+    return { diagnostics: [{ message: err instanceof Error ? err.message : String(err) }] };
+  }
+}
+
+/**
+ * The Node `extractManifest` capability: evaluates the compiled CJS via
+ * `new Function("require","module","exports", code)` with a require shim bound to
+ * the workspace `@voidhash/paywalls` package (and its JSX runtimes), then runs
+ * `extractComponentManifest` on the default export. Mirrors the existing Node
+ * adapter's evaluation shape WITHOUT importing stacks.
+ *
+ * A throw / missing default export / non-definition export surfaces as an
+ * extraction diagnostic (the build attributes it to the `runtime` phase).
+ */
+async function nodeExtractManifest(compiledCode: string): Promise<ExtractOutcome> {
+  const requireShim = (specifier: string): unknown => {
+    const mod = REQUIRE_MODULES[specifier];
+    if (mod === undefined) {
+      throw new Error(`Cannot find module '${specifier}'`);
+    }
+    return mod;
+  };
+
+  const moduleObj: { exports: Record<string, unknown> } = { exports: {} };
+  try {
+    // eslint-disable-next-line no-new-func -- controlled evaluation of already
+    // compiled, typechecked component code; the require shim is the only ambient.
+    const factory = new Function("require", "module", "exports", compiledCode);
+    factory(requireShim, moduleObj, moduleObj.exports);
+  } catch (err) {
+    return { diagnostics: [{ message: err instanceof Error ? err.message : String(err) }] };
+  }
+
+  const definition = moduleObj.exports.default;
+  if (
+    definition === undefined ||
+    definition === null ||
+    typeof (definition as { render?: unknown }).render !== "function"
+  ) {
+    return {
+      diagnostics: [
+        { message: "Component must export a default defineComponent({ ... })" },
+      ],
+    };
+  }
+
+  try {
+    const manifest = extractComponentManifest(
+      definition as Parameters<typeof extractComponentManifest>[0],
+    );
+    return { manifest };
+  } catch (err) {
+    return { diagnostics: [{ message: err instanceof Error ? err.message : String(err) }] };
+  }
+}
+
+/**
+ * Assemble the full Node {@link BuildCapabilities}: native esbuild compile, CJS
+ * evaluate + `extractComponentManifest`, typecheck on by default, plus an
+ * optional manifest cache. Intended for Node-side callers and this package's
+ * tests; browser/worker hosts wire their own sandboxed equivalents.
+ */
+export function makeNodeCapabilities(
+  options: NodeCapabilityOptions = {},
+): BuildCapabilities {
+  return {
+    compile: nodeCompile,
+    extractManifest: nodeExtractManifest,
+    typecheck: options.typecheck ?? true,
+    ...(options.manifestCache ? { manifestCache: options.manifestCache } : {}),
+  };
+}
diff --git a/packages/paywall-build/src/node-fs.ts b/packages/paywall-build/src/node-fs.ts
new file mode 100644
index 000000000..ec1b660b5
--- /dev/null
+++ b/packages/paywall-build/src/node-fs.ts
@@ -0,0 +1,91 @@
+import {
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  renameSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from "node:fs";
+import { dirname as nodeDirname, join, posix } from "node:path";
+import type { BuildFileEntry, BuildFs } from "./fs.ts";
+import { makeNodeCapabilities, type NodeCapabilityOptions } from "./node-capabilities.ts";
+
+export type { NodeCapabilityOptions } from "./node-capabilities.ts";
+export { makeNodeCapabilities } from "./node-capabilities.ts";
+
+/**
+ * A real-filesystem {@link BuildFs} rooted at an absolute directory.
+ *
+ * Exported ONLY from the `@voidhash/paywall-build/node` subpath so it (and
+ * its `node:fs` import) never lands in a browser/workerd bundle of the main
+ * entry. The build's absolute POSIX paths (`/paywall.tsx`) are re-anchored under
+ * `root` (`<root>/paywall.tsx`); path segments are validated against traversal.
+ */
+export class NodeFs implements BuildFs {
+  constructor(private readonly root: string) {}
+
+  private resolve(absPath: string): string {
+    // Absolute POSIX build paths map to <root>/<path-without-leading-slash>.
+    const rel = absPath.replace(/^\/+/, "");
+    if (rel.split("/").includes("..")) {
+      throw new Error(`NodeFs: path traversal is not allowed: ${absPath}`);
+    }
+    return join(this.root, ...rel.split("/"));
+  }
+
+  read(path: string): string {
+    return readFileSync(this.resolve(path), "utf8");
+  }
+
+  exists(path: string): boolean {
+    const full = this.resolve(path);
+    return existsSync(full) && statSync(full).isFile();
+  }
+
+  list(dir: string): readonly string[] {
+    const full = this.resolve(dir);
+    if (!existsSync(full) || !statSync(full).isDirectory()) return [];
+    const base = dir.endsWith("/") ? dir.slice(0, -1) : dir;
+    return readdirSync(full)
+      .filter((entry) => statSync(join(full, entry)).isFile())
+      .map((entry) => posix.join(base, entry))
+      .sort();
+  }
+
+  write(path: string, content: string): void {
+    const full = this.resolve(path);
+    mkdirSync(nodeDirname(full), { recursive: true });
+    writeFileSync(full, content, "utf8");
+  }
+
+  remove(path: string): void {
+    rmSync(this.resolve(path), { force: true });
+  }
+
+  rename(from: string, to: string): void {
+    const target = this.resolve(to);
+    mkdirSync(nodeDirname(target), { recursive: true });
+    renameSync(this.resolve(from), target);
+  }
+
+  /** Read every file under `root` recursively as `{ path, content }[]`. */
+  toFiles(): BuildFileEntry[] {
+    const out: BuildFileEntry[] = [];
+    const walk = (relDir: string): void => {
+      const full = relDir === "" ? this.root : join(this.root, ...relDir.split("/"));
+      for (const entry of readdirSync(full).sort()) {
+        const childRel = relDir === "" ? entry : `${relDir}/${entry}`;
+        const childFull = join(full, entry);
+        if (statSync(childFull).isDirectory()) {
+          walk(childRel);
+        } else {
+          out.push({ path: `/${childRel}`, content: readFileSync(childFull, "utf8") });
+        }
+      }
+    };
+    walk("");
+    return out;
+  }
+}
diff --git a/packages/paywall-build/src/paths.ts b/packages/paywall-build/src/paths.ts
new file mode 100644
index 000000000..4308642e1
--- /dev/null
+++ b/packages/paywall-build/src/paths.ts
@@ -0,0 +1,52 @@
+/**
+ * Absolute-POSIX ⇄ canonical-document-path helpers.
+ *
+ * The build reads files by ABSOLUTE POSIX path from the {@link BuildFs}
+ * (`/paywall.tsx`, `/components/x.tsx`), but a component's identity is its
+ * CANONICAL DOCUMENT-RELATIVE path (`components/x.tsx`). These helpers convert
+ * between the two, anchored on the entry file's directory, so the component
+ * registry keys line up exactly with the paths the import stage resolves from
+ * the source's `import X from "./components/x"` specifiers.
+ */
+
+/** The POSIX directory of an absolute file path (no trailing slash). */
+export function dirname(absPath: string): string {
+  const idx = absPath.lastIndexOf("/");
+  return idx <= 0 ? "/" : absPath.slice(0, idx);
+}
+
+/** The final path segment (with extension) of an absolute path. */
+export function basename(absPath: string): string {
+  const idx = absPath.lastIndexOf("/");
+  return idx < 0 ? absPath : absPath.slice(idx + 1);
+}
+
+/** Join a base directory and a POSIX-relative specifier into an absolute path. */
+export function joinPath(baseDir: string, specifier: string): string {
+  const base = baseDir === "/" ? [] : baseDir.replace(/^\//, "").split("/");
+  for (const part of specifier.split("/")) {
+    if (part === "" || part === ".") continue;
+    if (part === "..") {
+      if (base.length === 0) {
+        throw new Error(`Path "${specifier}" escapes the root.`);
+      }
+      base.pop();
+      continue;
+    }
+    base.push(part);
+  }
+  return `/${base.join("/")}`;
+}
+
+/**
+ * The canonical document-relative path for a component file, given the entry's
+ * directory. Strips the entry-dir prefix and re-appends `.tsx` — the canonical
+ * `components/<…>.tsx` normalization. A component under
+ * `<entryDir>/components/pricing-option.tsx` canonicalizes to
+ * `components/pricing-option.tsx`.
+ */
+export function canonicalPathFor(entryDir: string, absPath: string): string {
+  const prefix = entryDir === "/" ? "/" : `${entryDir}/`;
+  const rel = absPath.startsWith(prefix) ? absPath.slice(prefix.length) : absPath.replace(/^\//, "");
+  return rel.replace(/\.tsx$/, "") + ".tsx";
+}
diff --git a/packages/paywall-build/src/probe-buildwire-serialization.test.ts b/packages/paywall-build/src/probe-buildwire-serialization.test.ts
new file mode 100644
index 000000000..279f79e69
--- /dev/null
+++ b/packages/paywall-build/src/probe-buildwire-serialization.test.ts
@@ -0,0 +1,155 @@
+/**
+ * ADVERSARIAL PROBE — BuildWire JSON/structuredClone safety across the container boundary.
+ *
+ * The container `build` pass returns the verbatim `@voidhash/paywall-build`
+ * `BuildResult` inside `BuildWire.result`, which must round-trip a Cloudflare
+ * Container/Durable-Object RPC boundary. That boundary serializes via the
+ * structured-clone algorithm (and the manifest cache further JSON-encodes), which
+ * THROWS on a function and drops nothing silently only for plain data. A manifest
+ * is USER-CODE-DERIVED (evaluated `defineComponent`), so a function / Map / Set /
+ * circular ref smuggled into the artifacts would be an uncatchable
+ * `DataCloneError` at the DO boundary — a crash, not a diagnostic.
+ *
+ * This probe builds a rich real component (props with defaults, actions, a slot)
+ * with the node caps (the SAME `buildPaywall` + `parseComponentManifest` the
+ * container runs) and asserts the whole `BuildResult` survives BOTH
+ * `structuredClone` (the DO/Container mechanism) AND a `JSON.stringify`/`parse`
+ * round-trip with zero data loss — i.e. the manifest validator hands back a
+ * plain, JSON-safe value.
+ */
+import { describe, expect, it } from "vite-plus/test";
+
+import { buildFromFiles } from "./test-helpers.ts";
+import { makeNodeCapabilities } from "./node-capabilities.ts";
+
+const HEADING = `import { defineComponent, View, Text, Pressable, Slot } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Rich",
+  props: (p) => ({
+    label: p.string().default("Yearly"),
+    count: p.number().default(3),
+    on: p.boolean().default(true),
+  }),
+  actions: (a) => ({ onSelect: a.action() }),
+  render: ({ props, actions }) => (
+    <Pressable onPress={actions.onSelect}>
+      <View style={{ gap: 4 }}>
+        <Text style={{ fontSize: 18 }}>{props.label}</Text>
+        <Slot />
+      </View>
+    </Pressable>
+  ),
+});
+`;
+
+const COMPOSITION = `import { definePaywall, Screen, View } from "@voidhash/paywalls";
+import Rich from "./components/rich";
+
+export default definePaywall({
+  render: () => (
+    <Screen>
+      <View style={{ gap: 12 }}>
+        <Rich label="Pro" count={5} />
+      </View>
+    </Screen>
+  ),
+});
+`;
+
+/**
+ * Recursively assert a value is structured-clone / JSON safe: no functions, no
+ * `undefined` leaves inside arrays, no non-plain objects (Map/Set/Date leak as
+ * their own tags but a manifest should carry none), and no circular refs. Returns
+ * the list of offending key-paths (empty = safe).
+ */
+function jsonUnsafePaths(value: unknown, path = "$", seen = new Set<unknown>()): string[] {
+  const offenders: string[] = [];
+  const t = typeof value;
+  if (t === "function" || t === "symbol" || t === "bigint") {
+    offenders.push(`${path}: ${t}`);
+    return offenders;
+  }
+  if (value === null || t !== "object") {
+    return offenders;
+  }
+  if (seen.has(value)) {
+    offenders.push(`${path}: circular`);
+    return offenders;
+  }
+  seen.add(value);
+  if (value instanceof Map || value instanceof Set) {
+    offenders.push(`${path}: ${value instanceof Map ? "Map" : "Set"}`);
+    return offenders;
+  }
+  if (Array.isArray(value)) {
+    value.forEach((item, i) => offenders.push(...jsonUnsafePaths(item, `${path}[${i}]`, seen)));
+    return offenders;
+  }
+  for (const [k, v] of Object.entries(value as Record<string, unknown>)) {
+    offenders.push(...jsonUnsafePaths(v, `${path}.${k}`, seen));
+  }
+  return offenders;
+}
+
+describe("PROBE — BuildWire (BuildResult) is structuredClone + JSON safe", () => {
+  it("a rich component's whole BuildResult round-trips structuredClone AND JSON with no loss", async () => {
+    const result = await buildFromFiles(
+      { "/paywall.tsx": COMPOSITION, "/components/rich.tsx": HEADING },
+      makeNodeCapabilities(),
+    );
+
+    // The build must succeed with a ready component + manifest (otherwise the
+    // probe is vacuous — there's no manifest to test for safety).
+    expect(result.ok, JSON.stringify(result.diagnostics, null, 2)).toBe(true);
+    if (!result.ok || result.artifacts === undefined) return;
+    const rich = result.artifacts.components.find((c) => c.path === "components/rich.tsx");
+    expect(rich?.status).toBe("ready");
+    expect(rich?.manifest, "expected a non-null extracted manifest").not.toBeNull();
+
+    // 1. No JSON-unsafe leaf anywhere in the BuildResult (functions, Map/Set,
+    //    symbol, bigint, circular).
+    const offenders = jsonUnsafePaths(result);
+    expect(offenders, `JSON-unsafe values in BuildResult: ${offenders.join(", ")}`).toEqual([]);
+
+    // 2. structuredClone is the exact mechanism the Container/DO RPC uses; it
+    //    THROWS (DataCloneError) on a function/symbol. It must not throw.
+    expect(() => structuredClone(result)).not.toThrow();
+
+    // 3. A JSON round-trip must be lossless (the manifest cache JSON-encodes it).
+    const cloned = JSON.parse(JSON.stringify(result));
+    expect(cloned).toEqual(result);
+  });
+
+  it("a manifest cannot smuggle a function even if user source attaches one to the definition", async () => {
+    // A component that assigns a stray function-valued property onto the exported
+    // definition object. The extractor reads the DECLARED props/actions/slots, so
+    // the stray function must NOT reach the manifest.
+    const sneaky = `import { defineComponent, Text } from "@voidhash/paywalls";
+
+const def = defineComponent({
+  title: "Sneaky",
+  props: (p) => ({ text: p.string().default("x") }),
+  render: ({ props }) => <Text>{props.text}</Text>,
+});
+// Attach a rogue function property directly on the exported object.
+(def as unknown as Record<string, unknown>).evil = () => "boom";
+export default def;
+`;
+    const result = await buildFromFiles(
+      {
+        "/paywall.tsx": `import { definePaywall, Screen } from "@voidhash/paywalls";
+import Sneaky from "./components/sneaky";
+export default definePaywall({ render: () => <Screen><Sneaky text="a" /></Screen> });
+`,
+        "/components/sneaky.tsx": sneaky,
+      },
+      makeNodeCapabilities({ typecheck: false }),
+    );
+
+    // Whether the build is ok or not, NOTHING in the result may carry the function.
+    const offenders = jsonUnsafePaths(result);
+    expect(offenders, `function leaked into BuildResult: ${offenders.join(", ")}`).toEqual([]);
+    expect(() => structuredClone(result)).not.toThrow();
+  });
+});
diff --git a/packages/paywall-build/src/static-manifest.test.ts b/packages/paywall-build/src/static-manifest.test.ts
new file mode 100644
index 000000000..b0754d389
--- /dev/null
+++ b/packages/paywall-build/src/static-manifest.test.ts
@@ -0,0 +1,511 @@
+import { describe, expect, it } from "vitest";
+import { parseComponentManifest } from "@voidhash/paywalls/schema";
+import {
+  ALIASED_SLOT_TSX,
+  HEADING_TSX,
+  PRICING_OPTION_TSX,
+  PRODUCT_CARD_TSX,
+} from "./fixtures.ts";
+import { makeNodeCapabilities } from "./node-capabilities.ts";
+import { staticExtractManifest } from "./static-manifest.ts";
+import type { ExtractOutcome } from "./types.ts";
+
+/** A slot-bearing component using a namespace SDK import (`<P.Slot/>`). */
+const NAMESPACE_SLOT_TSX = `import { defineComponent, View } from "@voidhash/paywalls";
+import * as P from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Namespaced",
+  render: () => (
+    <View>
+      <P.Slot />
+    </View>
+  ),
+});
+`;
+
+/** A component with `.localizable()` string and image props (parity fixture). */
+const LOCALIZABLE_TSX = `import { defineComponent, Text } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Localizable",
+  props: (p) => ({
+    headline: p.string().default("Hi").localizable(),
+    hero: p.image().localizable(),
+    subtitle: p.string(),
+  }),
+  render: ({ props }) => <Text>{props.headline}</Text>,
+});
+`;
+
+/** Extract a manifest, asserting success and returning the raw manifest value. */
+function manifestOf(source: string): Record<string, unknown> {
+  const outcome = staticExtractManifest(source);
+  if ("diagnostics" in outcome) {
+    throw new Error(
+      `expected a manifest, got diagnostics: ${outcome.diagnostics.map((d) => d.message).join("; ")}`,
+    );
+  }
+  const parsed = parseComponentManifest(outcome.manifest);
+  expect(parsed.ok).toBe(true);
+  return outcome.manifest as Record<string, unknown>;
+}
+
+/**
+ * Extract a manifest asserting success, WITHOUT the `parseComponentManifest`
+ * gate — for assertions about the static extractor's own output shape. Parity
+ * with the runtime extractor is covered by the differential suite below.
+ */
+function extractManifestOf(source: string): Record<string, unknown> {
+  const outcome = staticExtractManifest(source);
+  if ("diagnostics" in outcome) {
+    throw new Error(
+      `expected a manifest, got diagnostics: ${outcome.diagnostics.map((d) => d.message).join("; ")}`,
+    );
+  }
+  return outcome.manifest as Record<string, unknown>;
+}
+
+/** Assert the outcome degraded with a diagnostic matching `pattern`. */
+function expectDiagnostic(outcome: ExtractOutcome, pattern: RegExp): void {
+  if (!("diagnostics" in outcome)) {
+    throw new Error("expected diagnostics, got a manifest");
+  }
+  expect(outcome.diagnostics.length).toBeGreaterThan(0);
+  expect(outcome.diagnostics.some((d) => pattern.test(d.message))).toBe(true);
+}
+
+/** Wrap a `props`/`actions` body in a minimal component source. */
+function componentWith(fields: string): string {
+  return `import { defineComponent, Text, Slot } from "@voidhash/paywalls";
+export default defineComponent({
+${fields}
+  render: ({ props }) => <Text>{String(props)}</Text>,
+});
+`;
+}
+
+describe("staticExtractManifest — prop kinds", () => {
+  it("resolves every prop kind with correct manifest shape", () => {
+    const manifest = manifestOf(
+      componentWith(`  props: (p) => ({
+    name: p.string(),
+    n: p.number(),
+    b: p.boolean(),
+    sel: p.select(["a", "b"] as const),
+    img: p.image(),
+    prod: p.ref("product"),
+    nested: p.component(),
+    items: p.array(p.string()),
+  }),`),
+    );
+    const props = manifest.props as Record<string, Record<string, unknown>>;
+
+    expect(props.name).toEqual({ kind: "string", optional: false });
+    expect(props.n).toEqual({ kind: "number", optional: false });
+    expect(props.b).toEqual({ kind: "boolean", optional: false });
+    expect(props.sel).toEqual({ kind: "select", options: ["a", "b"], optional: false });
+    expect(props.img).toEqual({ kind: "image", optional: false });
+    expect(props.prod).toEqual({ kind: "ref", refType: "product", optional: false });
+    expect(props.nested).toEqual({ kind: "component", optional: false });
+    expect(props.items).toEqual({ kind: "array", item: { kind: "string" }, optional: false });
+  });
+
+  it("carries array item options / refType / editor", () => {
+    const manifest = manifestOf(
+      componentWith(`  props: (p) => ({
+    tags: p.array(p.select(["x", "y"] as const)),
+    prods: p.array(p.ref("product")),
+    colors: p.array(p.string().editor("color")),
+  }),`),
+    );
+    const props = manifest.props as Record<string, Record<string, unknown>>;
+    expect(props.tags).toEqual({
+      kind: "array",
+      item: { kind: "select", options: ["x", "y"] },
+      optional: false,
+    });
+    expect(props.prods).toEqual({
+      kind: "array",
+      item: { kind: "ref", refType: "product" },
+      optional: false,
+    });
+    expect(props.colors).toEqual({
+      kind: "array",
+      item: { kind: "string", editor: "color" },
+      optional: false,
+    });
+  });
+});
+
+describe("staticExtractManifest — chained modifiers", () => {
+  it("applies .label/.default/.optional/.editor", () => {
+    const manifest = manifestOf(
+      componentWith(`  props: (p) => ({
+    title: p.string().label("Title").default("Untitled"),
+    accent: p.string().editor("color").default("#16a34a"),
+    maybe: p.number().optional(),
+    on: p.boolean().default(true),
+    count: p.number().default(3),
+  }),`),
+    );
+    const props = manifest.props as Record<string, Record<string, unknown>>;
+
+    // A default makes the prop optional even without .optional().
+    expect(props.title).toEqual({
+      kind: "string",
+      label: "Title",
+      default: "Untitled",
+      optional: true,
+    });
+    expect(props.accent).toEqual({
+      kind: "string",
+      default: "#16a34a",
+      editor: "color",
+      optional: true,
+    });
+    expect(props.maybe).toEqual({ kind: "number", optional: true });
+    expect(props.on).toEqual({ kind: "boolean", default: true, optional: true });
+    expect(props.count).toEqual({ kind: "number", default: 3, optional: true });
+  });
+
+  it("marks string/image props .localizable() and omits the key otherwise", () => {
+    const manifest = extractManifestOf(
+      componentWith(`  props: (p) => ({
+    headline: p.string().localizable(),
+    hero: p.image().localizable(),
+    subtitle: p.string(),
+    logo: p.image(),
+  }),`),
+    );
+    const props = manifest.props as Record<string, Record<string, unknown>>;
+
+    expect(props.headline).toEqual({ kind: "string", localizable: true, optional: false });
+    expect(props.hero).toEqual({ kind: "image", localizable: true, optional: false });
+    // Non-localizable props stay byte-identical — no `localizable` key at all.
+    expect(props.subtitle).toEqual({ kind: "string", optional: false });
+    expect("localizable" in props.subtitle!).toBe(false);
+    expect(props.logo).toEqual({ kind: "image", optional: false });
+    expect("localizable" in props.logo!).toBe(false);
+  });
+
+  it("applies .localizable() regardless of chaining order", () => {
+    const manifest = extractManifestOf(
+      componentWith(`  props: (p) => ({
+    a: p.string().label("A").default("x").localizable(),
+    b: p.string().localizable().label("B").default("y"),
+  }),`),
+    );
+    const props = manifest.props as Record<string, Record<string, unknown>>;
+    expect(props.a).toEqual({
+      kind: "string",
+      label: "A",
+      default: "x",
+      localizable: true,
+      optional: true,
+    });
+    expect(props.b).toEqual({
+      kind: "string",
+      label: "B",
+      default: "y",
+      localizable: true,
+      optional: true,
+    });
+  });
+
+  it("emits an array default only when it survives JSON (scalar array)", () => {
+    const manifest = manifestOf(
+      componentWith(`  props: (p) => ({
+    items: p.array(p.string()).default(["a", "b"]),
+  }),`),
+    );
+    const props = manifest.props as Record<string, Record<string, unknown>>;
+    expect(props.items).toEqual({
+      kind: "array",
+      item: { kind: "string" },
+      default: ["a", "b"],
+      optional: true,
+    });
+  });
+});
+
+describe("staticExtractManifest — actions", () => {
+  it("resolves payload-free and payloaded actions", () => {
+    const manifest = manifestOf(
+      componentWith(`  actions: (a) => ({
+    onClose: a.action(),
+    onSelect: a.action({ product: a.string(), qty: a.number(), flag: a.boolean() }),
+  }),`),
+    );
+    expect(manifest.actions).toEqual({
+      onClose: { payload: {} },
+      onSelect: {
+        payload: {
+          product: { kind: "string" },
+          qty: { kind: "number" },
+          flag: { kind: "boolean" },
+        },
+      },
+    });
+  });
+});
+
+describe("staticExtractManifest — slot / hostData / previewStates", () => {
+  it("detects a rendered <Slot/> as slot: true", () => {
+    const withSlot = `import { defineComponent, View, Slot } from "@voidhash/paywalls";
+export default defineComponent({ render: () => (<View><Slot /></View>) });`;
+    expect(manifestOf(withSlot).slot).toBe(true);
+  });
+
+  it("reports slot: false when no <Slot/> is rendered", () => {
+    const noSlot = `import { defineComponent, Text } from "@voidhash/paywalls";
+export default defineComponent({ render: () => <Text>x</Text> });`;
+    expect(manifestOf(noSlot).slot).toBe(false);
+  });
+
+  it("detects an ALIASED Slot import (`Slot as S` rendered as <S/>)", () => {
+    expect(manifestOf(ALIASED_SLOT_TSX).slot).toBe(true);
+  });
+
+  it("detects a namespace-imported Slot (`<P.Slot/>`)", () => {
+    expect(manifestOf(NAMESPACE_SLOT_TSX).slot).toBe(true);
+  });
+
+  it("ignores a 'Slot' mention in text — only real JSX usage counts", () => {
+    // Deliberately stricter than the runtime's `\\bSlot\\b` source regex.
+    const mention = `import { defineComponent, Text } from "@voidhash/paywalls";
+export default defineComponent({ render: () => <Text>Slot machines! {"<Slot />"}</Text> });`;
+    expect(manifestOf(mention).slot).toBe(false);
+  });
+
+  it("does not attribute an unrelated local named like an SDK export", () => {
+    const local = `import { defineComponent, View, Text } from "@voidhash/paywalls";
+const Slot = ({ children }: { children?: unknown }) => <Text>{String(children)}</Text>;
+export default defineComponent({ render: () => (<View><Slot /></View>) });`;
+    // `Slot` here is a local component, not the SDK import — no slot declared.
+    expect(manifestOf(local).slot).toBe(false);
+  });
+
+  it("infers hostData products from a ref('product') prop", () => {
+    const manifest = manifestOf(
+      componentWith(`  props: (p) => ({ prod: p.ref("product") }),`),
+    );
+    expect(manifest.hostData).toEqual(["products"]);
+  });
+
+  it("infers hostData products from a product-reading hook in render", () => {
+    const src = `import { defineComponent, Text, usePaywallProducts } from "@voidhash/paywalls";
+export default defineComponent({ render: () => { const ps = usePaywallProducts(); return <Text>{ps.length}</Text>; } });`;
+    expect(manifestOf(src).hostData).toEqual(["products"]);
+  });
+
+  it("reports empty hostData with no products", () => {
+    const manifest = manifestOf(componentWith(`  props: (p) => ({ x: p.string() }),`));
+    expect(manifest.hostData).toEqual([]);
+  });
+
+  it("defaults previewStates to ['default'] and uses declared preview names", () => {
+    expect(manifestOf(componentWith(`  props: (p) => ({ x: p.string() }),`)).previewStates).toEqual([
+      "default",
+    ]);
+    const withPreviews = `import { defineComponent, Text } from "@voidhash/paywalls";
+export default defineComponent({
+  previews: { compact: { props: {} }, expanded: { props: {} } },
+  render: () => <Text>x</Text>,
+});`;
+    expect(manifestOf(withPreviews).previewStates).toEqual(["compact", "expanded"]);
+  });
+
+  it("infers hostData products from a preview declaring product data", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+export default defineComponent({
+  previews: { default: { data: { products: [] } } },
+  render: () => <Text>x</Text>,
+});`;
+    expect(manifestOf(src).hostData).toEqual(["products"]);
+  });
+
+  it("includes SHORTHAND preview state names (Object.keys parity)", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+const compact = { props: {} };
+export default defineComponent({
+  previews: { compact, expanded: { props: {} } },
+  render: () => <Text>x</Text>,
+});`;
+    expect(manifestOf(src).previewStates).toEqual(["compact", "expanded"]);
+  });
+
+  it("degrades on a spread inside previews instead of under-reporting states", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+const shared = { compact: { props: {} } };
+export default defineComponent({
+  previews: { ...shared, expanded: { props: {} } },
+  render: () => <Text>x</Text>,
+});`;
+    expectDiagnostic(staticExtractManifest(src), /spread.*declarative|declarative.*spread/is);
+  });
+
+  it("degrades on a computed preview state name", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+const key = "compact";
+export default defineComponent({
+  previews: { [key]: { props: {} } },
+  render: () => <Text>x</Text>,
+});`;
+    expectDiagnostic(staticExtractManifest(src), /preview state name|declarative/i);
+  });
+});
+
+describe("staticExtractManifest — title/description", () => {
+  it("carries title and description literals", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+export default defineComponent({ title: "Hero", description: "Big banner", render: () => <Text>x</Text> });`;
+    const manifest = manifestOf(src);
+    expect(manifest.title).toBe("Hero");
+    expect(manifest.description).toBe("Big banner");
+  });
+});
+
+describe("staticExtractManifest — accepted export forms", () => {
+  const body = `{ title: "X", props: (p) => ({ n: p.string() }), render: () => null }`;
+
+  it("accepts `export default defineComponent({...})`", () => {
+    const src = `import { defineComponent } from "@voidhash/paywalls";
+export default defineComponent(${body});`;
+    expect(manifestOf(src).title).toBe("X");
+  });
+
+  it("accepts a const bound to defineComponent, exported as default", () => {
+    const src = `import { defineComponent } from "@voidhash/paywalls";
+const Def = defineComponent(${body});
+export default Def;`;
+    expect(manifestOf(src).title).toBe("X");
+  });
+
+  it("accepts `export { X as default }`", () => {
+    const src = `import { defineComponent } from "@voidhash/paywalls";
+const Def = defineComponent(${body});
+export { Def as default };`;
+    expect(manifestOf(src).title).toBe("X");
+  });
+
+  it("unwraps an `as`-cast around the call", () => {
+    const src = `import { defineComponent } from "@voidhash/paywalls";
+export default defineComponent(${body}) as unknown;`;
+    expect(manifestOf(src).title).toBe("X");
+  });
+});
+
+describe("staticExtractManifest — degradation cases", () => {
+  it("degrades when there is no default export", () => {
+    const src = `import { defineComponent } from "@voidhash/paywalls";
+export const Def = defineComponent({ render: () => null });`;
+    expectDiagnostic(staticExtractManifest(src), /default-export|defineComponent/i);
+  });
+
+  it("rejects the dual-export component form (export default definition.component)", () => {
+    const src = `import { defineComponent } from "@voidhash/paywalls";
+export const definition = defineComponent({ render: () => null });
+export default definition.component;`;
+    expectDiagnostic(staticExtractManifest(src), /default-export|defineComponent/i);
+  });
+
+  it("degrades on a non-literal default value", () => {
+    const some = "const FALLBACK = compute();";
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+${some}
+export default defineComponent({ props: (p) => ({ t: p.string().default(FALLBACK) }), render: () => <Text>x</Text> });`;
+    expectDiagnostic(staticExtractManifest(src), /literal|declarative/i);
+  });
+
+  it("degrades on a spread inside the props object", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+const shared = {};
+export default defineComponent({ props: (p) => ({ ...shared, t: p.string() }), render: () => <Text>x</Text> });`;
+    expectDiagnostic(staticExtractManifest(src), /declarative|assignment/i);
+  });
+
+  it("degrades on a non-arrow props function", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+function makeProps(p) { return { t: p.string() }; }
+export default defineComponent({ props: makeProps, render: () => <Text>x</Text> });`;
+    expectDiagnostic(staticExtractManifest(src), /arrow|declarative/i);
+  });
+
+  it("degrades on a computed prop name", () => {
+    const src = `import { defineComponent, Text } from "@voidhash/paywalls";
+const key = "t";
+export default defineComponent({ props: (p) => ({ [key]: p.string() }), render: () => <Text>x</Text> });`;
+    expectDiagnostic(staticExtractManifest(src), /identifier|declarative/i);
+  });
+
+  it("rejects a prop literally named 'id'", () => {
+    const src = componentWith(`  props: (p) => ({ id: p.string() }),`);
+    expectDiagnostic(staticExtractManifest(src), /"id" is reserved/i);
+  });
+
+  it("rejects an empty select options list", () => {
+    const src = componentWith(`  props: (p) => ({ sel: p.select([] as const) }),`);
+    expectDiagnostic(staticExtractManifest(src), /options/i);
+  });
+
+  it("degrades on .localizable() applied to a non-string/image kind", () => {
+    const src = componentWith(`  props: (p) => ({ n: p.number().localizable() }),`);
+    expectDiagnostic(staticExtractManifest(src), /localizable.*string.*image|only valid on/i);
+  });
+
+  it("degrades on .localizable() called with an argument", () => {
+    const src = componentWith(`  props: (p) => ({ t: p.string().localizable(true) }),`);
+    expectDiagnostic(staticExtractManifest(src), /localizable.*no arguments/i);
+  });
+});
+
+describe("staticExtractManifest — differential vs runtime extractor", () => {
+  // The runtime extractor is the ground truth: compile via the Node capability,
+  // then evaluate + extractComponentManifest. The static manifest MUST deep-equal
+  // it for any statically-analyzable definition.
+  const caps = makeNodeCapabilities();
+
+  const runtimeManifest = async (source: string): Promise<unknown> => {
+    const outcome = await caps.compile!(source);
+    if ("diagnostics" in outcome) {
+      throw new Error(`compile failed: ${outcome.diagnostics.map((d) => d.message).join("; ")}`);
+    }
+    const extracted = await caps.extractManifest!(outcome.code);
+    if ("diagnostics" in extracted) {
+      throw new Error(`extract failed: ${extracted.diagnostics.map((d) => d.message).join("; ")}`);
+    }
+    return extracted.manifest;
+  };
+
+  const cases: Array<[string, string]> = [
+    ["PRICING_OPTION_TSX", PRICING_OPTION_TSX],
+    ["HEADING_TSX", HEADING_TSX],
+    ["PRODUCT_CARD_TSX", PRODUCT_CARD_TSX],
+    ["ALIASED_SLOT_TSX", ALIASED_SLOT_TSX],
+    ["NAMESPACE_SLOT_TSX", NAMESPACE_SLOT_TSX],
+    ["LOCALIZABLE_TSX", LOCALIZABLE_TSX],
+  ];
+
+  for (const [name, source] of cases) {
+    it(`static manifest deep-equals the runtime manifest for ${name}`, async () => {
+      const runtime = await runtimeManifest(source);
+      const outcome = staticExtractManifest(source);
+      expect("manifest" in outcome).toBe(true);
+      const staticManifest = (outcome as { manifest: unknown }).manifest;
+      // Round-trip through JSON to normalize key order for a structural compare.
+      expect(JSON.parse(JSON.stringify(staticManifest))).toEqual(
+        JSON.parse(JSON.stringify(runtime)),
+      );
+    });
+  }
+
+  it("both extractors report slot: true for the aliased-Slot component", async () => {
+    // The compiled alias is rewritten back to `.Slot`, so the runtime detects it;
+    // static must agree via import-binding resolution.
+    const runtime = (await runtimeManifest(ALIASED_SLOT_TSX)) as { slot: boolean };
+    const outcome = staticExtractManifest(ALIASED_SLOT_TSX) as { manifest: { slot: boolean } };
+    expect(runtime.slot).toBe(true);
+    expect(outcome.manifest.slot).toBe(true);
+  });
+});
diff --git a/packages/paywall-build/src/static-manifest.ts b/packages/paywall-build/src/static-manifest.ts
new file mode 100644
index 000000000..b1f174d6f
--- /dev/null
+++ b/packages/paywall-build/src/static-manifest.ts
@@ -0,0 +1,777 @@
+/**
+ * Static, execution-free extraction of a §2 component manifest from a
+ * `defineComponent(...)` source file.
+ *
+ * The runtime extractor ({@link extractComponentManifest} in
+ * `@voidhash/paywalls`) EVALUATES compiled component code and reads the resolved
+ * builders. That evaluation seam is unavailable on the deployed workerd worker
+ * (no compile, no isolate), so a freshly authored component there would have no
+ * manifest at all — its composition bindings could not be validated and a
+ * correct paywall would loop the AI agent forever.
+ *
+ * `defineComponent` is a CLOSED declarative grammar, though: props are a literal
+ * object of chained builder calls (`p.string().label("…").default("…")`),
+ * actions likewise (`a.action({ product: a.string() })`), and slot presence is
+ * observable as `<Slot/>` JSX. That is fully derivable from the TypeScript AST
+ * without running anything — a "nothing is ever executed" static-analysis
+ * philosophy.
+ *
+ * Output contract vs the runtime extractor: props, actions, defaults, title,
+ * and description are IDENTICAL for any statically-analyzable definition (the
+ * result always passes `parseComponentManifest`). The render-derived heuristics
+ * (`slot`, `hostData`) are resolved through the file's ACTUAL import bindings —
+ * named (`Slot`), aliased (`Slot as S`), and namespace (`import * as P` →
+ * `<P.Slot/>`) — by walking the render body's AST, which is deliberately
+ * STRICTER than the runtime's compiled-source regexes: only real JSX/hook usage
+ * counts, a `Slot` mention in a string or comment does not. Anything outside
+ * the closed grammar returns diagnostics — never a partial guess.
+ */
+import ts from "typescript";
+import { COMPONENT_MANIFEST_VERSION } from "@voidhash/paywalls/schema";
+import type { ExtractOutcome } from "./types.ts";
+
+/** The product-reading runtime hooks that imply `hostData: ["products"]`. */
+const PRODUCT_HOOKS = new Set(["usePaywallProducts", "useSelectedProduct", "usePaywallConfig"]);
+
+/** The SDK root specifier whose import bindings the render scan resolves. */
+const SDK_SPECIFIER = "@voidhash/paywalls";
+
+/**
+ * The file's local bindings for `@voidhash/paywalls` exports: `named` maps each
+ * local name to the SDK export it binds (`import { Slot as S }` ⇒ `S → Slot`);
+ * `namespaces` holds namespace-import locals (`import * as P` ⇒ member access
+ * `P.Slot` references the `Slot` export).
+ */
+interface SdkBindings {
+  readonly named: ReadonlyMap<string, string>;
+  readonly namespaces: ReadonlySet<string>;
+}
+
+/** Collect the SDK import bindings declared by a source file. */
+function sdkBindingsOf(file: ts.SourceFile): SdkBindings {
+  const named = new Map<string, string>();
+  const namespaces = new Set<string>();
+  for (const statement of file.statements) {
+    if (!ts.isImportDeclaration(statement)) continue;
+    const spec = statement.moduleSpecifier;
+    if (!ts.isStringLiteral(spec) || spec.text !== SDK_SPECIFIER) continue;
+    const bindings = statement.importClause?.namedBindings;
+    if (!bindings) continue;
+    if (ts.isNamedImports(bindings)) {
+      for (const element of bindings.elements) {
+        named.set(element.name.text, element.propertyName?.text ?? element.name.text);
+      }
+    } else if (ts.isNamespaceImport(bindings)) {
+      namespaces.add(bindings.name.text);
+    }
+  }
+  return { named, namespaces };
+}
+
+/**
+ * True when an expression references the given SDK export through the file's
+ * bindings: a (possibly aliased) named-import identifier, or a `P.<export>`
+ * member access on a namespace import.
+ */
+function isSdkExportRef(expr: ts.Node, exported: string, bindings: SdkBindings): boolean {
+  if (ts.isIdentifier(expr)) {
+    return bindings.named.get(expr.text) === exported;
+  }
+  if (ts.isPropertyAccessExpression(expr)) {
+    return (
+      ts.isIdentifier(expr.expression) &&
+      bindings.namespaces.has(expr.expression.text) &&
+      expr.name.text === exported
+    );
+  }
+  return false;
+}
+
+/**
+ * Walk a render body for `<Slot/>` JSX usage and product-hook calls, resolved
+ * through the file's SDK import bindings. Mirrors the runtime extractor's
+ * `detectSlotUsage`/`detectProductHookUsage` intent but is deliberately
+ * stricter: only a real JSX element / call expression of the bound name counts
+ * (string and comment mentions never match), and aliased or namespace imports
+ * are followed to their SDK export.
+ */
+function scanRenderUsage(
+  render: ts.Node,
+  bindings: SdkBindings,
+): { slot: boolean; productHook: boolean } {
+  const usage = { slot: false, productHook: false };
+  const visit = (node: ts.Node): void => {
+    if (
+      (ts.isJsxOpeningElement(node) || ts.isJsxSelfClosingElement(node)) &&
+      isSdkExportRef(node.tagName, "Slot", bindings)
+    ) {
+      usage.slot = true;
+    }
+    if (ts.isCallExpression(node)) {
+      for (const hook of PRODUCT_HOOKS) {
+        if (isSdkExportRef(node.expression, hook, bindings)) {
+          usage.productHook = true;
+          break;
+        }
+      }
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(render);
+  return usage;
+}
+
+/** Prop builder factory methods and the manifest `kind` each produces. */
+const PROP_FACTORY_KINDS: Readonly<Record<string, string>> = {
+  string: "string",
+  number: "number",
+  boolean: "boolean",
+  select: "select",
+  image: "image",
+  ref: "ref",
+  component: "component",
+  array: "array",
+};
+
+/**
+ * Raised when a `defineComponent` construct is outside the statically-analyzable
+ * grammar. The message is author-facing — it tells them to keep the definition
+ * declarative rather than reporting a partial (and therefore wrong) manifest.
+ */
+class StaticExtractError extends Error {}
+
+/** Fail with an author-facing message; caught and surfaced as diagnostics. */
+function bail(detail: string): never {
+  throw new StaticExtractError(
+    `${detail} Keep \`defineComponent\` declarative — props/actions must be a literal ` +
+      "object of chained `p.*`/`a.*` builder calls with literal arguments so the " +
+      "manifest can be derived without executing the component.",
+  );
+}
+
+/** Unwrap `x as T` and `(x)` wrappers around an expression. */
+function unwrap(expr: ts.Expression): ts.Expression {
+  let node: ts.Expression = expr;
+  while (ts.isAsExpression(node) || ts.isParenthesizedExpression(node)) {
+    node = node.expression;
+  }
+  return node;
+}
+
+/** A literal string/number/boolean/null value, or `bail` for anything else. */
+function literalValue(expr: ts.Expression): unknown {
+  const node = unwrap(expr);
+  if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node)) return node.text;
+  if (ts.isNumericLiteral(node)) return Number(node.text);
+  if (node.kind === ts.SyntaxKind.TrueKeyword) return true;
+  if (node.kind === ts.SyntaxKind.FalseKeyword) return false;
+  if (
+    ts.isPrefixUnaryExpression(node) &&
+    node.operator === ts.SyntaxKind.MinusToken &&
+    ts.isNumericLiteral(node.operand)
+  ) {
+    return -Number(node.operand.text);
+  }
+  if (ts.isArrayLiteralExpression(node)) {
+    return node.elements.map((el) => literalValue(el));
+  }
+  return bail("A default or option value is not a literal.");
+}
+
+/** Require an array-literal of string literals (for `p.select([...])`). */
+function stringLiteralArray(expr: ts.Expression, what: string): string[] {
+  const node = unwrap(expr);
+  if (!ts.isArrayLiteralExpression(node)) bail(`${what} must be an array literal of strings.`);
+  return (node as ts.ArrayLiteralExpression).elements.map((el) => {
+    const item = unwrap(el);
+    if (ts.isStringLiteral(item) || ts.isNoSubstitutionTemplateLiteral(item)) return item.text;
+    return bail(`${what} must contain only string literals.`);
+  });
+}
+
+/** A single `p.*()` builder chain, resolved to the intermediate prop schema. */
+interface StaticPropSchema {
+  kind: string;
+  label?: string;
+  defaultValue?: unknown;
+  hasDefault: boolean;
+  editor?: string;
+  localizable?: boolean;
+  optional: boolean;
+  options?: string[];
+  refType?: string;
+  item?: StaticPropSchema;
+}
+
+/**
+ * Decompose a builder chain (`p.string().label("…").default(x)`) into its base
+ * factory call and the ordered list of modifier calls applied on top of it.
+ */
+function decomposeChain(expr: ts.Expression): {
+  base: ts.CallExpression;
+  modifiers: ts.CallExpression[];
+} {
+  const modifiers: ts.CallExpression[] = [];
+  let node = unwrap(expr);
+  while (
+    ts.isCallExpression(node) &&
+    ts.isPropertyAccessExpression(node.expression) &&
+    !isFactoryRoot(node.expression)
+  ) {
+    modifiers.unshift(node);
+    node = unwrap(node.expression.expression);
+  }
+  if (!ts.isCallExpression(node)) {
+    bail("A prop must be a `p.*()` builder call.");
+  }
+  return { base: node as ts.CallExpression, modifiers };
+}
+
+/**
+ * True when a property access is a factory root call (`p.string`) rather than a
+ * chained modifier (`something.label`): its object is a plain identifier (the
+ * `p` factory parameter) AND the accessed method is a known factory method. This
+ * lets {@link decomposeChain} stop unwrapping at the base builder.
+ */
+function isFactoryRoot(access: ts.PropertyAccessExpression): boolean {
+  return (
+    ts.isIdentifier(access.expression) &&
+    Object.prototype.hasOwnProperty.call(PROP_FACTORY_KINDS, access.name.text)
+  );
+}
+
+/** Resolve one `p.*()` builder chain into a static prop schema. */
+function resolvePropBuilder(expr: ts.Expression): StaticPropSchema {
+  const { base, modifiers } = decomposeChain(expr);
+  const callee = base.expression;
+  if (!ts.isPropertyAccessExpression(callee) || !ts.isIdentifier(callee.expression)) {
+    bail("A prop must be a `p.<kind>()` builder call.");
+  }
+  const method = (callee as ts.PropertyAccessExpression).name.text;
+  const kind = PROP_FACTORY_KINDS[method];
+  if (kind === undefined) {
+    bail(`Unknown prop builder \`p.${method}(...)\`.`);
+  }
+
+  const schema: StaticPropSchema = { kind: kind!, hasDefault: false, optional: false };
+
+  switch (kind) {
+    case "select": {
+      const arg = base.arguments[0];
+      if (arg === undefined) bail("`p.select(...)` requires an options array.");
+      schema.options = stringLiteralArray(arg, "`p.select(...)` options");
+      break;
+    }
+    case "ref": {
+      const arg = base.arguments[0];
+      const value = arg ? literalValue(arg) : undefined;
+      if (typeof value !== "string") bail("`p.ref(...)` requires a string refType literal.");
+      schema.refType = value;
+      break;
+    }
+    case "array": {
+      const arg = base.arguments[0];
+      if (arg === undefined) bail("`p.array(...)` requires an item builder.");
+      const item = resolvePropBuilder(arg);
+      if (item.kind === "array") bail("`p.array(...)` items must be a non-array prop kind.");
+      schema.item = item;
+      break;
+    }
+    default:
+      break;
+  }
+
+  applyPropModifiers(schema, modifiers);
+  return schema;
+}
+
+/** Apply the chained `.label()/.default()/.optional()/.editor()/.localizable()` modifiers. */
+function applyPropModifiers(schema: StaticPropSchema, modifiers: ts.CallExpression[]): void {
+  for (const modifier of modifiers) {
+    const access = modifier.expression;
+    if (!ts.isPropertyAccessExpression(access)) {
+      bail("A prop modifier must be a method call.");
+    }
+    const name = (access as ts.PropertyAccessExpression).name.text;
+    switch (name) {
+      case "label": {
+        const value = literalValue(requireArg(modifier, "`.label(...)`"));
+        if (typeof value !== "string") bail("`.label(...)` requires a string literal.");
+        schema.label = value;
+        break;
+      }
+      case "default": {
+        schema.defaultValue = literalValue(requireArg(modifier, "`.default(...)`"));
+        schema.hasDefault = true;
+        break;
+      }
+      case "editor": {
+        const value = literalValue(requireArg(modifier, "`.editor(...)`"));
+        if (typeof value !== "string") bail("`.editor(...)` requires a string literal.");
+        schema.editor = value;
+        break;
+      }
+      case "optional": {
+        schema.optional = true;
+        break;
+      }
+      case "localizable": {
+        if (modifier.arguments.length > 0) bail("`.localizable()` takes no arguments.");
+        if (schema.kind !== "string" && schema.kind !== "image") {
+          bail(`\`.localizable()\` is only valid on \`p.string()\`/\`p.image()\` props, not \`${schema.kind}\`.`);
+        }
+        schema.localizable = true;
+        break;
+      }
+      default:
+        bail(`Unknown prop modifier \`.${name}(...)\`.`);
+    }
+  }
+}
+
+/** The single argument of a modifier call, or `bail` when absent. */
+function requireArg(call: ts.CallExpression, label: string): ts.Expression {
+  const arg = call.arguments[0];
+  if (arg === undefined) bail(`${label} requires an argument.`);
+  return arg;
+}
+
+const isJsonScalar = (value: unknown): value is string | number | boolean =>
+  typeof value === "string" || typeof value === "number" || typeof value === "boolean";
+
+/** Defaults survive only when JSON-serializable losslessly (runtime parity). */
+function serializableDefault(value: unknown): unknown {
+  if (isJsonScalar(value)) return value;
+  if (Array.isArray(value) && value.every(isJsonScalar)) return value;
+  return undefined;
+}
+
+/** Lower a static array-item schema to the manifest array-item shape. */
+function toManifestItem(item: StaticPropSchema): Record<string, unknown> {
+  return {
+    kind: item.kind,
+    ...(item.options ? { options: item.options } : {}),
+    ...(item.refType ? { refType: item.refType } : {}),
+    ...(item.editor ? { editor: item.editor } : {}),
+  };
+}
+
+/** Lower a static prop schema to the manifest prop shape (runtime-identical). */
+function toManifestProp(schema: StaticPropSchema): Record<string, unknown> {
+  const defaultValue = schema.hasDefault ? serializableDefault(schema.defaultValue) : undefined;
+  return {
+    kind: schema.kind,
+    ...(schema.kind === "select" && schema.options ? { options: schema.options } : {}),
+    ...(schema.kind === "ref" && schema.refType ? { refType: schema.refType } : {}),
+    ...(schema.kind === "array" && schema.item ? { item: toManifestItem(schema.item) } : {}),
+    ...(schema.label !== undefined ? { label: schema.label } : {}),
+    ...(defaultValue !== undefined ? { default: defaultValue } : {}),
+    ...(schema.editor !== undefined ? { editor: schema.editor } : {}),
+    ...(schema.localizable ? { localizable: true } : {}),
+    optional: schema.optional || schema.hasDefault,
+  };
+}
+
+/**
+ * The resolved contents of a `defineComponent({...})` argument, before lowering
+ * to the manifest.
+ */
+interface ResolvedDefinition {
+  title?: string;
+  description?: string;
+  props: Record<string, StaticPropSchema>;
+  actions: Record<string, { payload: Record<string, { kind: string }> }>;
+  previewNames: string[];
+  previewsDeclareProducts: boolean;
+  slot: boolean;
+  usesProductHook: boolean;
+}
+
+/** The object-literal `defineComponent(...)` argument, or `bail`. */
+function requireDefinitionObject(call: ts.CallExpression): ts.ObjectLiteralExpression {
+  const arg = call.arguments[0] ? unwrap(call.arguments[0]!) : undefined;
+  if (arg === undefined || !ts.isObjectLiteralExpression(arg)) {
+    bail("`defineComponent(...)` must be called with an object literal.");
+  }
+  return arg as ts.ObjectLiteralExpression;
+}
+
+/** A property's name as a plain string, or `bail` for computed/spread names. */
+function propertyName(prop: ts.ObjectLiteralElementLike): string {
+  if (!ts.isPropertyAssignment(prop) && !ts.isMethodDeclaration(prop)) {
+    bail("A `defineComponent` field must be a plain property (no spread or shorthand).");
+  }
+  const name = (prop as ts.PropertyAssignment | ts.MethodDeclaration).name;
+  if (ts.isIdentifier(name) || ts.isStringLiteral(name)) return name.text;
+  return bail("A `defineComponent` field name must be a plain identifier.");
+}
+
+/** The arrow/function body of a `props`/`actions` builder callback, or `bail`. */
+function builderArrowBody(value: ts.Expression, field: string): ts.ObjectLiteralExpression {
+  const node = unwrap(value);
+  if (!ts.isArrowFunction(node)) {
+    bail(`\`${field}\` must be an arrow function returning an object literal.`);
+  }
+  const body = (node as ts.ArrowFunction).body;
+  const objectExpr = ts.isParenthesizedExpression(body)
+    ? unwrap(body.expression)
+    : ts.isBlock(body)
+      ? blockReturnObject(body, field)
+      : body;
+  if (!ts.isObjectLiteralExpression(objectExpr)) {
+    bail(`\`${field}\` must return an object literal of builder calls.`);
+  }
+  return objectExpr as ts.ObjectLiteralExpression;
+}
+
+/** The object literal returned by a single-`return` builder block body, or `bail`. */
+function blockReturnObject(block: ts.Block, field: string): ts.Expression {
+  const ret = block.statements.find((s) => ts.isReturnStatement(s)) as
+    | ts.ReturnStatement
+    | undefined;
+  if (!ret || !ret.expression) bail(`\`${field}\` must return an object literal.`);
+  return unwrap(ret!.expression!);
+}
+
+/** Resolve the `props` object into per-name static prop schemas. */
+function resolveProps(objectExpr: ts.ObjectLiteralExpression): Record<string, StaticPropSchema> {
+  const props: Record<string, StaticPropSchema> = {};
+  for (const member of objectExpr.properties) {
+    if (!ts.isPropertyAssignment(member)) {
+      bail("Each prop must be a `name: p.*()` assignment.");
+    }
+    const name = propertyName(member);
+    props[name] = resolvePropBuilder((member as ts.PropertyAssignment).initializer);
+  }
+  return props;
+}
+
+/** Resolve the `actions` object into per-name payload shapes. */
+function resolveActions(
+  objectExpr: ts.ObjectLiteralExpression,
+): Record<string, { payload: Record<string, { kind: string }> }> {
+  const actions: Record<string, { payload: Record<string, { kind: string }> }> = {};
+  for (const member of objectExpr.properties) {
+    if (!ts.isPropertyAssignment(member)) {
+      bail("Each action must be a `name: a.action(...)` assignment.");
+    }
+    const name = propertyName(member);
+    actions[name] = { payload: resolveActionPayload((member as ts.PropertyAssignment).initializer) };
+  }
+  return actions;
+}
+
+/** Resolve one `a.action(...)` call into its payload field-kind map. */
+function resolveActionPayload(expr: ts.Expression): Record<string, { kind: string }> {
+  const node = unwrap(expr);
+  if (
+    !ts.isCallExpression(node) ||
+    !ts.isPropertyAccessExpression(node.expression) ||
+    node.expression.name.text !== "action"
+  ) {
+    bail("Each action must be an `a.action(...)` call.");
+  }
+  const call = node as ts.CallExpression;
+  const arg = call.arguments[0] ? unwrap(call.arguments[0]!) : undefined;
+  if (arg === undefined) return {};
+  if (!ts.isObjectLiteralExpression(arg)) {
+    bail("`a.action(...)` payload must be an object literal of `a.string/number/boolean()`.");
+  }
+  const payload: Record<string, { kind: string }> = {};
+  for (const member of (arg as ts.ObjectLiteralExpression).properties) {
+    if (!ts.isPropertyAssignment(member)) {
+      bail("An action payload field must be a `name: a.<kind>()` assignment.");
+    }
+    const name = propertyName(member);
+    payload[name] = { kind: actionPayloadKind((member as ts.PropertyAssignment).initializer) };
+  }
+  return payload;
+}
+
+/** The scalar kind of an `a.string()/a.number()/a.boolean()` payload builder. */
+function actionPayloadKind(expr: ts.Expression): string {
+  const node = unwrap(expr);
+  if (ts.isCallExpression(node) && ts.isPropertyAccessExpression(node.expression)) {
+    const method = node.expression.name.text;
+    if (method === "string" || method === "number" || method === "boolean") return method;
+  }
+  return bail("An action payload field must be `a.string()`, `a.number()`, or `a.boolean()`.");
+}
+
+/**
+ * Whether any preview state in a `previews` object literal declares product
+ * data (`data: { products: [...] }`). Mirrors the runtime `usesProducts` term.
+ * Non-literal preview STATE VALUES are ignored for this heuristic (never `bail`
+ * — state fixtures are not lowered into the manifest; the previews object
+ * itself is validated by {@link previewNamesOf}).
+ */
+function previewsDeclareProducts(value: ts.Expression): boolean {
+  const node = unwrap(value);
+  if (!ts.isObjectLiteralExpression(node)) return false;
+  return node.properties.some((state) => {
+    if (!ts.isPropertyAssignment(state)) return false;
+    const stateValue = unwrap(state.initializer);
+    if (!ts.isObjectLiteralExpression(stateValue)) return false;
+    return stateValue.properties.some((field) => {
+      if (!ts.isPropertyAssignment(field)) return false;
+      if (field.name.getText() !== "data") return false;
+      const data = unwrap(field.initializer);
+      if (!ts.isObjectLiteralExpression(data)) return false;
+      return data.properties.some(
+        (dataField) =>
+          ts.isPropertyAssignment(dataField) && dataField.name.getText() === "products",
+      );
+    });
+  });
+}
+
+/**
+ * Preview state names declared by a `previews` object literal, in order. The
+ * runtime enumerates `Object.keys(definition.previews)`, so every statically
+ * enumerable member (property assignment, shorthand, method/accessor) counts;
+ * a spread or computed name would silently under-report `previewStates`, so it
+ * degrades instead — matching the module's no-partial-guess philosophy.
+ */
+function previewNamesOf(value: ts.Expression): string[] {
+  const node = unwrap(value);
+  if (!ts.isObjectLiteralExpression(node)) {
+    bail("`previews` must be an object literal of named preview states.");
+  }
+  return (node as ts.ObjectLiteralExpression).properties.map((member) => {
+    if (ts.isSpreadAssignment(member)) {
+      return bail("`previews` must not use spread — declare each preview state literally.");
+    }
+    const name = member.name;
+    if (name !== undefined && (ts.isIdentifier(name) || ts.isStringLiteral(name))) {
+      return name.text;
+    }
+    return bail("A preview state name must be a plain identifier or string literal.");
+  });
+}
+
+/**
+ * Resolve the `defineComponent({...})` object literal into a
+ * {@link ResolvedDefinition}. `render` is required by the grammar but its body
+ * is only scanned (never lowered) for `<Slot/>` and product-hook usage, resolved
+ * through the file's SDK import `bindings`.
+ */
+function resolveDefinition(call: ts.CallExpression, bindings: SdkBindings): ResolvedDefinition {
+  const object = requireDefinitionObject(call);
+  const resolved: ResolvedDefinition = {
+    props: {},
+    actions: {},
+    previewNames: [],
+    previewsDeclareProducts: false,
+    slot: false,
+    usesProductHook: false,
+  };
+  let renderNode: ts.Node | undefined;
+
+  for (const member of object.properties) {
+    const name = propertyName(member);
+    const value = ts.isPropertyAssignment(member)
+      ? member.initializer
+      : (member as ts.MethodDeclaration);
+    switch (name) {
+      case "title":
+        resolved.title = asStringField(member, "title");
+        break;
+      case "description":
+        resolved.description = asStringField(member, "description");
+        break;
+      case "props":
+        resolved.props = resolveProps(builderArrowBody(value as ts.Expression, "props"));
+        break;
+      case "actions":
+        resolved.actions = resolveActions(builderArrowBody(value as ts.Expression, "actions"));
+        break;
+      case "previews": {
+        const previews = ts.isPropertyAssignment(member) ? member.initializer : undefined;
+        if (previews) {
+          resolved.previewNames = previewNamesOf(previews);
+          resolved.previewsDeclareProducts = previewsDeclareProducts(previews);
+        }
+        break;
+      }
+      case "render":
+        renderNode = ts.isPropertyAssignment(member) ? member.initializer : member;
+        break;
+      default:
+        // `panel` and any other declarative field do not affect the manifest.
+        break;
+    }
+  }
+
+  if (renderNode) {
+    const usage = scanRenderUsage(renderNode, bindings);
+    resolved.slot = usage.slot;
+    resolved.usesProductHook = usage.productHook;
+  }
+  return resolved;
+}
+
+/** A `defineComponent` string field (`title`/`description`) literal, or `bail`. */
+function asStringField(member: ts.ObjectLiteralElementLike, field: string): string {
+  if (!ts.isPropertyAssignment(member)) {
+    bail(`\`${field}\` must be a string literal.`);
+  }
+  const value = literalValue((member as ts.PropertyAssignment).initializer);
+  if (typeof value !== "string") bail(`\`${field}\` must be a string literal.`);
+  return value;
+}
+
+/**
+ * Find the `defineComponent(...)` call that a file default-exports, accepting
+ * the same forms {@link validate.ts}'s `hasDefineComponentDefaultExport` does:
+ * `export default defineComponent({...})`, a const-bound identifier exported as
+ * default, and `export { X as default }`. Returns `null` when none is found.
+ */
+function findDefaultExportedDefineComponent(file: ts.SourceFile): ts.CallExpression | null {
+  const isDefineCall = (expr: ts.Expression | undefined): ts.CallExpression | null => {
+    if (!expr) return null;
+    const node = unwrap(expr);
+    if (
+      ts.isCallExpression(node) &&
+      ts.isIdentifier(node.expression) &&
+      node.expression.text === "defineComponent"
+    ) {
+      return node;
+    }
+    return null;
+  };
+
+  // `const X = defineComponent(...)` bindings, for indirect default exports.
+  const bindings = new Map<string, ts.CallExpression>();
+  for (const statement of file.statements) {
+    if (!ts.isVariableStatement(statement)) continue;
+    for (const decl of statement.declarationList.declarations) {
+      if (!ts.isIdentifier(decl.name)) continue;
+      const call = isDefineCall(decl.initializer);
+      if (call) bindings.set(decl.name.text, call);
+    }
+  }
+
+  for (const statement of file.statements) {
+    // `export default defineComponent(...)` / `export default X`
+    if (ts.isExportAssignment(statement) && !statement.isExportEquals) {
+      const direct = isDefineCall(statement.expression);
+      if (direct) return direct;
+      if (ts.isIdentifier(statement.expression)) {
+        const bound = bindings.get(statement.expression.text);
+        if (bound) return bound;
+      }
+    }
+    // `export { X as default }`
+    if (
+      ts.isExportDeclaration(statement) &&
+      statement.exportClause &&
+      ts.isNamedExports(statement.exportClause)
+    ) {
+      for (const element of statement.exportClause.elements) {
+        if (element.name.text !== "default") continue;
+        const local = element.propertyName?.text ?? element.name.text;
+        const bound = bindings.get(local);
+        if (bound) return bound;
+      }
+    }
+  }
+  return null;
+}
+
+/**
+ * Statically extract a §2 component manifest from `defineComponent(...)` source,
+ * without executing it — the workerd fallback for {@link extractComponentManifest}.
+ *
+ * Returns the same {@link ExtractOutcome} contract as the `extractManifest`
+ * capability: `{ manifest }` (an unvalidated raw value the caller runs through
+ * `parseComponentManifest`, exactly like the runtime path) on success, or
+ * `{ diagnostics }` when the definition is missing, malformed, or uses any
+ * construct outside the closed declarative grammar. Props, actions, defaults,
+ * title, and description are identical to the runtime extractor's for any
+ * statically-analyzable definition; the render-derived `slot`/`hostData`
+ * heuristics are import-binding-resolved AST analysis — equal to the runtime
+ * for real JSX/hook usage (aliases included), deliberately stricter for
+ * string/comment mentions, which never count here.
+ *
+ * @param source   the component's `.tsx` source text
+ * @param fileName optional file name used for AST parsing (diagnostics only)
+ */
+export function staticExtractManifest(source: string, fileName = "component.tsx"): ExtractOutcome {
+  const file = ts.createSourceFile(
+    fileName,
+    source,
+    ts.ScriptTarget.Latest,
+    /* setParentNodes */ true,
+    ts.ScriptKind.TSX,
+  );
+
+  const call = findDefaultExportedDefineComponent(file);
+  if (!call) {
+    return {
+      diagnostics: [
+        {
+          message:
+            "Component must default-export `defineComponent({ ... })` (a const bound to " +
+            "`defineComponent(...)` and exported as default is also accepted).",
+        },
+      ],
+    };
+  }
+
+  try {
+    const resolved = resolveDefinition(call, sdkBindingsOf(file));
+
+    const props: Record<string, unknown> = {};
+    for (const [name, schema] of Object.entries(resolved.props)) {
+      assertUsableName(name);
+      assertSelectHasOptions(name, schema);
+      props[name] = toManifestProp(schema);
+    }
+    for (const name of Object.keys(resolved.actions)) {
+      assertUsableName(name);
+    }
+
+    const usesProducts =
+      Object.values(resolved.props).some(
+        (schema) => schema.kind === "ref" && schema.refType === "product",
+      ) ||
+      resolved.previewsDeclareProducts ||
+      resolved.usesProductHook;
+
+    const manifest = {
+      manifestVersion: COMPONENT_MANIFEST_VERSION,
+      ...(resolved.title !== undefined ? { title: resolved.title } : {}),
+      ...(resolved.description !== undefined ? { description: resolved.description } : {}),
+      props,
+      actions: resolved.actions,
+      slot: resolved.slot,
+      previewStates: resolved.previewNames.length > 0 ? resolved.previewNames : ["default"],
+      hostData: usesProducts ? ["products"] : [],
+    };
+    return { manifest };
+  } catch (err) {
+    if (err instanceof StaticExtractError) {
+      return { diagnostics: [{ message: err.message }] };
+    }
+    return { diagnostics: [{ message: err instanceof Error ? err.message : String(err) }] };
+  }
+}
+
+/**
+ * Rejects a prop/action literally named `id` — reserved for node identity.
+ * Mirrors the runtime extractor's `assertReservedPropName`.
+ */
+function assertUsableName(name: string): void {
+  if (name === "id") {
+    bail('"id" is reserved for node identity and cannot be used as a prop or action name.');
+  }
+}
+
+/** Rejects `p.select([])` (options must be non-empty), including array items. */
+function assertSelectHasOptions(name: string, schema: StaticPropSchema): void {
+  const empty = (s: StaticPropSchema | undefined): boolean =>
+    s?.kind === "select" && (s.options === undefined || s.options.length === 0);
+  if (empty(schema) || (schema.kind === "array" && empty(schema.item))) {
+    bail(`prop "${name}" declares \`p.select([])\` with no options — select props need at least one option.`);
+  }
+}
diff --git a/packages/paywall-build/src/test-helpers.ts b/packages/paywall-build/src/test-helpers.ts
new file mode 100644
index 000000000..672b7de9d
--- /dev/null
+++ b/packages/paywall-build/src/test-helpers.ts
@@ -0,0 +1,34 @@
+import { buildPaywall } from "./build.ts";
+import type { BuildDiagnostic } from "./diagnostics.ts";
+import { MemoryFs } from "./memory-fs.ts";
+import type { BuildCapabilities, BuildResult } from "./types.ts";
+
+/** Build a paywall from a `{ path → content }` map over a fresh {@link MemoryFs}. */
+export function buildFromFiles(
+  files: Record<string, string>,
+  caps: BuildCapabilities,
+  entryPath = "/paywall.tsx",
+): Promise<BuildResult> {
+  const fs = MemoryFs.fromFiles(
+    Object.entries(files).map(([path, content]) => ({ path, content })),
+  );
+  return buildPaywall(fs, entryPath, caps);
+}
+
+/** Diagnostics of a given phase. */
+export function ofPhase(
+  result: BuildResult,
+  phase: BuildDiagnostic["phase"],
+): readonly BuildDiagnostic[] {
+  return result.diagnostics.filter((d) => d.phase === phase);
+}
+
+/** Error-severity diagnostics. */
+export function errorsOf(result: BuildResult): readonly BuildDiagnostic[] {
+  return result.diagnostics.filter((d) => d.severity === "error");
+}
+
+/** Warning-severity diagnostics. */
+export function warningsOf(result: BuildResult): readonly BuildDiagnostic[] {
+  return result.diagnostics.filter((d) => d.severity === "warning");
+}
diff --git a/packages/paywall-build/src/typecheck.ts b/packages/paywall-build/src/typecheck.ts
new file mode 100644
index 000000000..7905c140a
--- /dev/null
+++ b/packages/paywall-build/src/typecheck.ts
@@ -0,0 +1,154 @@
+import { sandboxDts } from "@voidhash/paywalls/sandbox-dts";
+import ts from "typescript";
+import type { BuildDiagnostic } from "./diagnostics.ts";
+import { error } from "./diagnostics.ts";
+import type { ResolvedComponent } from "./imports.ts";
+import { DEFAULT_LIB, LIB_ASSETS } from "./lib/index.ts";
+import type { TypecheckOptions } from "./types.ts";
+
+/** The virtual path the SDK ambient dts is mounted at inside the program. */
+const SDK_DTS_PATH = "/__sdk__/paywalls.d.ts";
+/** The virtual directory the lib assets are mounted under. */
+const LIB_DIR = "/__lib__";
+
+/**
+ * Compiler options mirroring the studio's Monaco setup (code-editor-pane.tsx):
+ * react-jsx with the paywall jsxImportSource, Node module resolution, strict,
+ * noEmit, ES2020 target, and `.tsx`-extension imports allowed. `allowJs` off,
+ * `skipLibCheck` on (the ambient SDK dts is authoritative).
+ */
+const COMPILER_OPTIONS: ts.CompilerOptions = {
+  allowImportingTsExtensions: true,
+  allowNonTsExtensions: true,
+  esModuleInterop: true,
+  jsx: ts.JsxEmit.ReactJSX,
+  jsxImportSource: "@voidhash/paywalls",
+  module: ts.ModuleKind.ESNext,
+  moduleResolution: ts.ModuleResolutionKind.NodeJs,
+  noEmit: true,
+  skipLibCheck: true,
+  strict: true,
+  target: ts.ScriptTarget.ES2020,
+  // The lib files live in a virtual dir; point the compiler there so it never
+  // probes the real typescript install for `lib.*.d.ts`.
+  lib: [`${LIB_DIR}/${DEFAULT_LIB}`],
+};
+
+/**
+ * Stage 2 — e2e typecheck.
+ *
+ * Builds a `ts.Program` over a CompilerHost backed ENTIRELY by the fork files
+ * plus in-memory assets (the SDK ambient dts + the generated lib set). The host
+ * NEVER delegates to `ts.sys` or the real filesystem — `fileExists`/`readFile`/
+ * `getSourceFile` and the directory methods all resolve purely over the virtual
+ * path space, because an FS-backed directory method silently breaks relative
+ * module resolution over virtual files (spike-proven caveat).
+ *
+ * Reports every semantic + syntactic diagnostic attributed to a fork file, with
+ * a 1-based position converted from the TS offset.
+ *
+ * @param entryPath absolute entry path (used as the diagnostic path for the entry)
+ * @param entrySource the entry `.tsx` source
+ * @param components the resolved component set (all built together, cross-file)
+ * @param options extra lib assets, when supplied by the capability
+ */
+export function typecheck(
+  entryPath: string,
+  entrySource: string,
+  components: readonly ResolvedComponent[],
+  options: TypecheckOptions,
+): readonly BuildDiagnostic[] {
+  // The virtual file map the whole program is resolved against.
+  const files = new Map<string, string>();
+  files.set(entryPath, entrySource);
+  for (const component of components) {
+    files.set(component.absPath, component.source);
+  }
+  files.set(SDK_DTS_PATH, sandboxDts);
+
+  // Lib assets: built-in set, then the ambient SDK dts, then caller overrides.
+  const libFiles = new Map<string, string>();
+  for (const [name, contents] of Object.entries(LIB_ASSETS)) {
+    libFiles.set(`${LIB_DIR}/${name}`, contents);
+  }
+  for (const [name, contents] of Object.entries(options.libs ?? {})) {
+    // Accept both bare lib names and pre-mounted virtual paths.
+    const path = name.startsWith("/") ? name : `${LIB_DIR}/${name}`;
+    libFiles.set(path, contents);
+  }
+
+  const readVirtual = (path: string): string | undefined =>
+    files.get(path) ?? libFiles.get(path);
+
+  const sourceFileCache = new Map<string, ts.SourceFile>();
+  const host: ts.CompilerHost = {
+    fileExists: (path) => readVirtual(path) !== undefined,
+    readFile: (path) => readVirtual(path),
+    getSourceFile: (fileName, languageVersion) => {
+      const cached = sourceFileCache.get(fileName);
+      if (cached) return cached;
+      const contents = readVirtual(fileName);
+      if (contents === undefined) return undefined;
+      const kind = fileName.endsWith(".tsx") ? ts.ScriptKind.TSX : ts.ScriptKind.TS;
+      const sourceFile = ts.createSourceFile(
+        fileName,
+        contents,
+        languageVersion,
+        /* setParentNodes */ true,
+        kind,
+      );
+      sourceFileCache.set(fileName, sourceFile);
+      return sourceFile;
+    },
+    // The lib the program requests resolves through our virtual lib dir.
+    getDefaultLibFileName: () => `${LIB_DIR}/${DEFAULT_LIB}`,
+    getDefaultLibLocation: () => LIB_DIR,
+    writeFile: () => {
+      // noEmit — never called; a no-op keeps the host total.
+    },
+    getCurrentDirectory: () => "/",
+    getCanonicalFileName: (fileName) => fileName,
+    useCaseSensitiveFileNames: () => true,
+    getNewLine: () => "\n",
+    // Directory methods resolved over the virtual path space ONLY. Delegating
+    // any of these to the real FS silently breaks relative resolution.
+    directoryExists: (dir) => {
+      const prefix = dir.endsWith("/") ? dir : `${dir}/`;
+      for (const path of files.keys()) if (path.startsWith(prefix)) return true;
+      for (const path of libFiles.keys()) if (path.startsWith(prefix)) return true;
+      return dir === "/" || dir === LIB_DIR;
+    },
+    getDirectories: () => [],
+    readDirectory: () => [],
+    realpath: (path) => path,
+  };
+
+  const forkNames = [entryPath, ...components.map((c) => c.absPath)];
+  // The ambient SDK dts is a root file too, so its `declare module
+  // "@voidhash/paywalls"` (+ /panel, /jsx-runtime) globally satisfies every
+  // fork import — but it is NOT a fork file, so its own diagnostics are dropped.
+  const rootNames = [...forkNames, SDK_DTS_PATH];
+  const program = ts.createProgram(rootNames, COMPILER_OPTIONS, host);
+
+  const rawDiagnostics = [
+    ...program.getSyntacticDiagnostics(),
+    ...program.getSemanticDiagnostics(),
+    ...program.getGlobalDiagnostics(),
+  ];
+
+  const forkPaths = new Set<string>(forkNames);
+  const out: BuildDiagnostic[] = [];
+  for (const diagnostic of rawDiagnostics) {
+    const file = diagnostic.file;
+    // Only surface diagnostics attributed to a fork file (never lib/SDK-internal).
+    if (!file || !forkPaths.has(file.fileName)) continue;
+    const message = ts.flattenDiagnosticMessageText(diagnostic.messageText, "\n");
+    let position: { line: number; column: number } | undefined;
+    if (typeof diagnostic.start === "number") {
+      const { line, character } = file.getLineAndCharacterOfPosition(diagnostic.start);
+      position = { line: line + 1, column: character + 1 };
+    }
+    out.push(error(file.fileName, "types", message, position));
+  }
+  return out;
+}
diff --git a/packages/paywall-build/src/types.ts b/packages/paywall-build/src/types.ts
new file mode 100644
index 000000000..9782d14af
--- /dev/null
+++ b/packages/paywall-build/src/types.ts
@@ -0,0 +1,119 @@
+import type { ComponentManifest } from "@voidhash/paywalls/schema";
+import type { BuildDiagnostic } from "./diagnostics.ts";
+
+/**
+ * A component's manifest as returned by the cache: the validated §2 manifest,
+ * keyed by source hash. `manifest: null` records a known-but-unextractable
+ * component (so a cache hit can still degrade a status to `unknown` explicitly).
+ */
+export interface CachedManifest {
+  readonly manifest: ComponentManifest | null;
+}
+
+/** A row the build offers to the manifest cache after a fresh extraction. */
+export interface ManifestCacheRow {
+  readonly sourceHash: string;
+  readonly manifest: ComponentManifest;
+}
+
+/**
+ * The result of a `compile` capability call: either the compiled CJS code or a
+ * set of compile diagnostics (positions are 1-based when present).
+ */
+export type CompileOutcome =
+  | { readonly code: string }
+  | { readonly diagnostics: readonly BuildDiagnosticInput[] };
+
+/**
+ * The result of an `extractManifest` capability call: either an extracted
+ * (still unvalidated) manifest value or extraction diagnostics.
+ */
+export type ExtractOutcome =
+  | { readonly manifest: unknown }
+  | { readonly diagnostics: readonly BuildDiagnosticInput[] };
+
+/**
+ * A capability-supplied diagnostic. Only the message is required; the build
+ * attributes the `path`/`phase` and fills a default severity of `error`.
+ */
+export interface BuildDiagnosticInput {
+  readonly message: string;
+  readonly severity?: BuildDiagnostic["severity"];
+  readonly line?: number;
+  readonly column?: number;
+}
+
+/** The optional manifest cache seam. */
+export interface ManifestCache {
+  /** Resolve cached manifests for a set of source hashes (misses omitted). */
+  get(hashes: readonly string[]): Promise<Map<string, CachedManifest>>;
+  /** Record a freshly extracted manifest. Best-effort — never fails the build. */
+  record(row: ManifestCacheRow): Promise<void>;
+}
+
+/** Options passed to the typecheck stage when it is enabled. */
+export interface TypecheckOptions {
+  /**
+   * Extra lib d.ts assets to add to the compiler host, as `{ name → contents }`.
+   * Merged on top of (and overriding) the package's built-in lib set. Absent ⇒
+   * the built-in set only.
+   */
+  readonly libs?: Readonly<Record<string, string>>;
+}
+
+/**
+ * The host-provided build capabilities. Every field is optional: a stage whose
+ * capability is absent is SKIPPED (recorded with an `info` diagnostic), so a
+ * pure build (no capabilities) still runs imports + grammar + validate.
+ *
+ * The `compile`/`extractManifest` seams keep the isolation-owning, environment-
+ * specific work (esbuild transform, sandboxed evaluation) OUT of this pure
+ * package — the Node test capability wires them via `./node`, a browser/worker
+ * host wires its own sandbox.
+ */
+export interface BuildCapabilities {
+  /** Compile a single component's `.tsx` source to CJS. */
+  compile?(source: string): Promise<CompileOutcome>;
+  /** Evaluate compiled CJS in isolation and extract its raw manifest value. */
+  extractManifest?(compiledCode: string): Promise<ExtractOutcome>;
+  /** Optional manifest cache, consulted before `extractManifest`. */
+  manifestCache?: ManifestCache;
+  /**
+   * Enable the e2e typecheck stage. `true` uses defaults; an options object
+   * supplies extra libs. Absent/`false` ⇒ the stage is skipped (info diagnostic).
+   */
+  typecheck?: boolean | TypecheckOptions;
+}
+
+/** The status of a component in the build's artifact set. */
+export type ComponentStatus = "ready" | "unknown";
+
+/** A single component in the build result. */
+export interface ComponentArtifact {
+  /** Canonical document-relative path (`components/<basename>.tsx`). */
+  readonly path: string;
+  /** The component's `.tsx` source. */
+  readonly source: string;
+  /** SHA-256 hex of `source`. */
+  readonly sourceHash: string;
+  /** The validated §2 manifest, or `null` when unknown. */
+  readonly manifest: ComponentManifest | null;
+  /** `ready` ⇒ manifest resolved; `unknown` ⇒ not extractable this build. */
+  readonly status: ComponentStatus;
+}
+
+/** The successful build artifacts (present only when `ok`). */
+export interface BuildArtifacts {
+  /** Every component in the build (imported and library), ordered by path. */
+  readonly components: readonly ComponentArtifact[];
+}
+
+/** The result of {@link buildPaywall}. */
+export interface BuildResult {
+  /** True when no `error`-severity diagnostic was produced. */
+  readonly ok: boolean;
+  /** Present only when `ok` — the produced component set. */
+  readonly artifacts?: BuildArtifacts;
+  /** Every diagnostic from every stage, in stage order. */
+  readonly diagnostics: readonly BuildDiagnostic[];
+}
diff --git a/packages/paywall-build/src/units.test.ts b/packages/paywall-build/src/units.test.ts
new file mode 100644
index 000000000..3405c7868
--- /dev/null
+++ b/packages/paywall-build/src/units.test.ts
@@ -0,0 +1,88 @@
+import { describe, expect, it } from "vitest";
+import { hasErrors, error, info, warning } from "./diagnostics.ts";
+import { hashSource } from "./hash.ts";
+import { MemoryFs } from "./memory-fs.ts";
+import { canonicalPathFor, dirname, joinPath } from "./paths.ts";
+
+describe("hashSource", () => {
+  it("is a 64-char lowercase hex digest", () => {
+    expect(hashSource("hello")).toMatch(/^[0-9a-f]{64}$/);
+  });
+
+  it("matches known SHA-256 vectors", () => {
+    expect(hashSource("")).toBe(
+      "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    );
+    expect(hashSource("abc")).toBe(
+      "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad",
+    );
+  });
+
+  it("is deterministic and content-sensitive", () => {
+    expect(hashSource("a")).toBe(hashSource("a"));
+    expect(hashSource("a")).not.toBe(hashSource("b"));
+  });
+});
+
+describe("MemoryFs", () => {
+  it("reads, writes, lists, and round-trips via toFiles/fromFiles", () => {
+    const fs = MemoryFs.fromFiles([
+      { path: "/paywall.tsx", content: "P" },
+      { path: "/components/a.tsx", content: "A" },
+      { path: "/components/b.tsx", content: "B" },
+    ]);
+    expect(fs.read("/paywall.tsx")).toBe("P");
+    expect(fs.exists("/components/a.tsx")).toBe(true);
+    expect(fs.exists("/nope")).toBe(false);
+    // list is non-recursive, directory-scoped, sorted.
+    expect(fs.list("/components")).toEqual(["/components/a.tsx", "/components/b.tsx"]);
+    expect(fs.list("/")).toEqual(["/paywall.tsx"]);
+
+    fs.write("/components/c.tsx", "C");
+    fs.rename("/components/c.tsx", "/components/d.tsx");
+    expect(fs.exists("/components/c.tsx")).toBe(false);
+    expect(fs.read("/components/d.tsx")).toBe("C");
+    fs.remove("/components/d.tsx");
+    expect(fs.exists("/components/d.tsx")).toBe(false);
+
+    const files = fs.toFiles().map((f) => f.path);
+    expect(files).toEqual(["/components/a.tsx", "/components/b.tsx", "/paywall.tsx"]);
+  });
+
+  it("throws reading a missing file", () => {
+    const fs = new MemoryFs();
+    expect(() => fs.read("/missing")).toThrow();
+  });
+});
+
+describe("paths", () => {
+  it("dirname of an absolute file", () => {
+    expect(dirname("/a/b/c.tsx")).toBe("/a/b");
+    expect(dirname("/paywall.tsx")).toBe("/");
+  });
+
+  it("joinPath resolves relative specifiers and rejects escapes", () => {
+    expect(joinPath("/a/b", "./c")).toBe("/a/b/c");
+    expect(joinPath("/a/b", "../c")).toBe("/a/c");
+    expect(() => joinPath("/", "../x")).toThrow();
+  });
+
+  it("canonicalPathFor strips the entry dir and normalizes to .tsx", () => {
+    expect(canonicalPathFor("/", "/components/x.tsx")).toBe("components/x.tsx");
+    expect(canonicalPathFor("/app", "/app/components/x.tsx")).toBe("components/x.tsx");
+  });
+});
+
+describe("diagnostics", () => {
+  it("hasErrors is true only with an error severity", () => {
+    expect(hasErrors([info("/p", "imports", "i")])).toBe(false);
+    expect(hasErrors([warning("/p", "imports", "w")])).toBe(false);
+    expect(hasErrors([error("/p", "imports", "e")])).toBe(true);
+  });
+
+  it("carries position when supplied", () => {
+    const d = error("/p", "types", "boom", { line: 3, column: 5 });
+    expect(d.line).toBe(3);
+    expect(d.column).toBe(5);
+  });
+});
diff --git a/packages/paywall-build/src/validate.ts b/packages/paywall-build/src/validate.ts
new file mode 100644
index 000000000..fe4d86006
--- /dev/null
+++ b/packages/paywall-build/src/validate.ts
@@ -0,0 +1,129 @@
+import ts from "typescript";
+import type { ResolvedComponent } from "./imports.ts";
+import type { BuildDiagnostic } from "./diagnostics.ts";
+import { error } from "./diagnostics.ts";
+import { basename } from "./paths.ts";
+
+/**
+ * Stage 6 — structural validation.
+ *
+ * Cheap, syntactic invariants that do not depend on compilation:
+ * - duplicate or case-colliding canonical component paths (two files that would
+ *   resolve to the same document path on a case-insensitive store);
+ * - every component file default-exports a `defineComponent(...)` call (an AST
+ *   scan — no execution).
+ *
+ * (Entry existence is checked earlier, in {@link buildPaywall}, since a missing
+ * entry is the ONLY error and short-circuits every other stage.)
+ */
+export function validate(components: readonly ResolvedComponent[]): readonly BuildDiagnostic[] {
+  const diagnostics: BuildDiagnostic[] = [];
+
+  // Case-insensitive path collision detection.
+  const byLowerPath = new Map<string, string[]>();
+  for (const component of components) {
+    const key = component.path.toLowerCase();
+    const bucket = byLowerPath.get(key);
+    if (bucket) bucket.push(component.path);
+    else byLowerPath.set(key, [component.path]);
+  }
+  for (const [, paths] of byLowerPath) {
+    if (paths.length > 1) {
+      const unique = [...new Set(paths)];
+      for (const path of unique) {
+        diagnostics.push(
+          error(
+            path,
+            "validate",
+            unique.length === 1
+              ? `Duplicate component path "${path}".`
+              : `Component path collides (case-insensitively) with: ${unique
+                  .filter((p) => p !== path)
+                  .join(", ")}.`,
+          ),
+        );
+      }
+    }
+  }
+
+  // Default-export-defineComponent check.
+  for (const component of components) {
+    if (!hasDefineComponentDefaultExport(component)) {
+      diagnostics.push(
+        error(
+          component.path,
+          "validate",
+          "A component file must default-export the defineComponent call, e.g. " +
+            "`export default defineComponent({ ... })` (a const bound to " +
+            "`defineComponent(...)` and exported as default is also accepted). Do NOT " +
+            "export `definition.component` — export the definition itself.",
+        ),
+      );
+    }
+  }
+
+  return diagnostics;
+}
+
+/**
+ * True when the file has a `export default defineComponent(...)` (or
+ * `export { X as default }` where `X = defineComponent(...)`). A syntactic AST
+ * scan; never executes the file.
+ */
+function hasDefineComponentDefaultExport(component: ResolvedComponent): boolean {
+  const file = ts.createSourceFile(
+    basename(component.absPath),
+    component.source,
+    ts.ScriptTarget.Latest,
+    true,
+    ts.ScriptKind.TSX,
+  );
+
+  const isDefineComponentCall = (expr: ts.Expression | undefined): boolean => {
+    if (!expr) return false;
+    // Unwrap `defineComponent(...) as X` / parenthesized forms.
+    let node: ts.Expression = expr;
+    while (ts.isAsExpression(node) || ts.isParenthesizedExpression(node)) {
+      node = node.expression;
+    }
+    return (
+      ts.isCallExpression(node) &&
+      ts.isIdentifier(node.expression) &&
+      node.expression.text === "defineComponent"
+    );
+  };
+
+  // Track `const X = defineComponent(...)` for `export { X as default }`.
+  const defineComponentBindings = new Set<string>();
+  for (const statement of file.statements) {
+    if (ts.isVariableStatement(statement)) {
+      for (const decl of statement.declarationList.declarations) {
+        if (ts.isIdentifier(decl.name) && isDefineComponentCall(decl.initializer)) {
+          defineComponentBindings.add(decl.name.text);
+        }
+      }
+    }
+  }
+
+  for (const statement of file.statements) {
+    // `export default defineComponent(...)`
+    if (ts.isExportAssignment(statement) && !statement.isExportEquals) {
+      if (isDefineComponentCall(statement.expression)) return true;
+      if (
+        ts.isIdentifier(statement.expression) &&
+        defineComponentBindings.has(statement.expression.text)
+      ) {
+        return true;
+      }
+    }
+    // `export { X as default }`
+    if (ts.isExportDeclaration(statement) && statement.exportClause && ts.isNamedExports(statement.exportClause)) {
+      for (const element of statement.exportClause.elements) {
+        const exportedAs = element.name.text;
+        const local = element.propertyName?.text ?? element.name.text;
+        if (exportedAs === "default" && defineComponentBindings.has(local)) return true;
+      }
+    }
+  }
+  return false;
+}
diff --git a/packages/paywall-build/tsconfig.json b/packages/paywall-build/tsconfig.json
new file mode 100644
index 000000000..b83cb4e2e
--- /dev/null
+++ b/packages/paywall-build/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "compilerOptions": {
+    "types": ["node"]
+  },
+  "include": ["src", "scripts"],
+  "exclude": ["**/node_modules/**", "src/lib/**"]
+}
diff --git a/packages/paywall-build/vitest.mts b/packages/paywall-build/vitest.mts
new file mode 100644
index 000000000..926ffb62d
--- /dev/null
+++ b/packages/paywall-build/vitest.mts
@@ -0,0 +1,11 @@
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  plugins: [tsconfigPaths()],
+  test: {
+    exclude: ["./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/packages/paywall-renderer-preact/LICENSE.md b/packages/paywall-renderer-preact/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/paywall-renderer-preact/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/paywall-renderer-preact/README.md b/packages/paywall-renderer-preact/README.md
new file mode 100644
index 000000000..7533221d5
--- /dev/null
+++ b/packages/paywall-renderer-preact/README.md
@@ -0,0 +1,7 @@
+# @voidhash/paywall-renderer-preact
+
+Preact-based HTML renderer, component-artifact loader, hydration runtime, and Vite integration for Voidhash paywalls.
+
+```typescript
+import { renderPaywallToHtml } from "@voidhash/paywall-renderer-preact";
+```
diff --git a/packages/paywall-renderer-preact/package.json b/packages/paywall-renderer-preact/package.json
new file mode 100644
index 000000000..d5a5e0ffe
--- /dev/null
+++ b/packages/paywall-renderer-preact/package.json
@@ -0,0 +1,50 @@
+{
+  "name": "@voidhash/paywall-renderer-preact",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "Preact renderer and runtime bundle tooling for Voidhash paywalls.",
+  "keywords": [
+    "paywalls",
+    "preact",
+    "renderer",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/paywall-renderer-preact"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./vite-plugin": "./src/vite-plugin.ts"
+  },
+  "scripts": {
+    "runtime:generate": "node scripts/generate-runtime-bundle.mjs",
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "node scripts/generate-runtime-bundle.mjs --check && vp test run"
+  },
+  "dependencies": {
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywall-renderer-web-core": "workspace:*",
+    "@voidhash/paywalls": "workspace:*",
+    "preact": "10.29.2",
+    "preact-render-to-string": "6.7.0"
+  },
+  "devDependencies": {
+    "@voidhash/paywall-builtins": "workspace:*",
+    "@voidhash/tsconfig": "workspace:*",
+    "esbuild": "0.25.12",
+    "typescript": "6.0.3",
+    "vite": "catalog:",
+    "vite-plus": "0.1.23",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/paywall-renderer-preact/scripts/generate-runtime-bundle.mjs b/packages/paywall-renderer-preact/scripts/generate-runtime-bundle.mjs
new file mode 100644
index 000000000..a313bb618
--- /dev/null
+++ b/packages/paywall-renderer-preact/scripts/generate-runtime-bundle.mjs
@@ -0,0 +1,46 @@
+import { readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import * as esbuild from "esbuild";
+
+const packageRoot = fileURLToPath(new URL("..", import.meta.url));
+const outputPath = path.join(packageRoot, "src/templates/runtime-bundle.generated.ts");
+
+const result = await esbuild.build({
+  absWorkingDir: packageRoot,
+  alias: {
+    // Avoid environment-specific package build artifacts when generating the checked-in bundle.
+    "@voidhash/paywalls": path.join(packageRoot, "../../libraries/paywalls/src/runtime/config.ts"),
+  },
+  entryPoints: ["src/runtime/hydrate.tsx"],
+  bundle: true,
+  define: {
+    "process.env.NODE_ENV": '"production"',
+  },
+  format: "iife",
+  jsx: "automatic",
+  jsxImportSource: "preact",
+  metafile: false,
+  minify: true,
+  sourcemap: false,
+  target: "es2020",
+  treeShaking: true,
+  write: false,
+});
+
+const bundle = result.outputFiles[0]?.text;
+if (bundle === undefined) {
+  throw new Error("esbuild did not emit the paywall hydration runtime");
+}
+
+const source = `/** Generated by scripts/generate-runtime-bundle.mjs. */\nexport const PAYWALL_RUNTIME_BUNDLE = ${JSON.stringify(bundle)};\n`;
+
+if (process.argv.includes("--check")) {
+  const current = await readFile(outputPath, "utf8").catch(() => "");
+  if (current !== source) {
+    throw new Error("The generated paywall runtime is stale; run pnpm runtime:generate");
+  }
+} else {
+  await writeFile(outputPath, source);
+}
diff --git a/packages/paywall-renderer-preact/src/component-artifacts.ts b/packages/paywall-renderer-preact/src/component-artifacts.ts
new file mode 100644
index 000000000..4fd276662
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/component-artifacts.ts
@@ -0,0 +1,20 @@
+import type { PreviewTree } from "@voidhash/paywall-renderer-web-core";
+
+/**
+ * Preview-tree artifacts for the component nodes of a snapshot. Deployed
+ * (`componentSource: "catalog"`) nodes resolve from `trees`, keyed by their
+ * pinned `contentHash` then preview state. In-document code components
+ * (`componentSource: "local"`) carry a sentinel `contentHash: ""`, so they
+ * resolve from `localTrees` keyed by `componentPath` instead — this lets
+ * the studio's preview show not-yet-deployed components compiled in-browser.
+ * Component nodes without a matching tree render as labeled placeholders.
+ */
+export interface ComponentArtifacts {
+  readonly trees: Record<string, Record<string, PreviewTree>>;
+  /**
+   * Preview trees for local (in-document) code components, keyed by the
+   * instance's document-relative `componentPath` then preview state. Absent for
+   * deployed/served paywalls, which contain only catalog components.
+   */
+  readonly localTrees?: Record<string, Record<string, PreviewTree>>;
+}
diff --git a/packages/paywall-renderer-preact/src/components/builtins/builtins.test.ts b/packages/paywall-renderer-preact/src/components/builtins/builtins.test.ts
new file mode 100644
index 000000000..f6eb75758
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/builtins/builtins.test.ts
@@ -0,0 +1,121 @@
+import { BUILTIN_COMPONENTS } from "@voidhash/paywall-builtins";
+import type {
+  ComponentSnapshotNode,
+  SnapshotNode,
+  VariableReader,
+  VariableValue,
+} from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import { renderPaywall } from "../../render";
+import { BUILTIN_RENDERERS } from "./renderers";
+import { resolveComponentInstanceProps } from "./resolve-props";
+
+type PropEntries = ComponentSnapshotNode["data"]["props"];
+
+function makePropEntries(
+  entries: ReadonlyArray<{ name: string; value: unknown }>,
+): PropEntries {
+  return entries.map((entry, index) => ({
+    id: `prop-${index}`,
+    pos: `a${index}`,
+    value: entry,
+  })) as unknown as PropEntries;
+}
+
+function makeBuiltinNode(id: string, slug: string, props: PropEntries): SnapshotNode {
+  return {
+    type: "component",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "Component",
+      componentSource: "builtin",
+      componentPath: "",
+      componentSlug: slug,
+      componentVersion: 0,
+      contentHash: "",
+      previewState: "default",
+      props,
+      actionBindings: [],
+    },
+    children: [],
+  } as unknown as SnapshotNode;
+}
+
+function makeRootNode(children: SnapshotNode[]): SnapshotNode {
+  return {
+    type: "root",
+    id: "root",
+    parentId: null,
+    pos: "a0",
+    data: { name: "Paywall" },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+describe("builtin renderer registry", () => {
+  test("mirrors the metadata registry in @voidhash/paywall-builtins", () => {
+    expect(Object.keys(BUILTIN_RENDERERS).sort()).toEqual(
+      Object.keys(BUILTIN_COMPONENTS).sort(),
+    );
+  });
+});
+
+describe("resolveComponentInstanceProps", () => {
+  const variables: VariableReader = new Map<string, VariableValue>([
+    ["var-1", { key: "string", value: "from-variable" }],
+  ]);
+
+  test("unwraps literal bindings and resolves variable references", () => {
+    const resolved = resolveComponentInstanceProps(
+      makePropEntries([
+        { name: "label", value: { type: "literal", value: { key: "string", value: "Pro" } } },
+        { name: "bound", value: { type: "variable-reference", value: { id: "var-1" } } },
+      ]),
+      variables,
+    );
+    expect(resolved).toEqual({ label: "Pro", bound: "from-variable" });
+  });
+
+  test("omits unresolvable references and malformed entries", () => {
+    const resolved = resolveComponentInstanceProps(
+      makePropEntries([
+        { name: "missing", value: { type: "variable-reference", value: { id: "nope" } } },
+        { name: "", value: { type: "literal", value: { key: "string", value: "x" } } },
+      ]),
+      variables,
+    );
+    expect(resolved).toEqual({});
+  });
+});
+
+describe("builtin component rendering", () => {
+  test("renders the real builtin implementation with resolved document props", () => {
+    const snapshot = makeRootNode([
+      makeBuiltinNode(
+        "builtin-1",
+        "sample-badge",
+        makePropEntries([
+          { name: "label", value: { type: "literal", value: { key: "string", value: "Pro" } } },
+        ]),
+      ),
+    ]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).toContain('data-node-id="builtin-1"');
+    expect(html).toContain(">Pro</span>");
+  });
+
+  test("degrades an unknown builtin slug to the labeled placeholder", () => {
+    const snapshot = makeRootNode([
+      makeBuiltinNode("builtin-1", "no-such-builtin", makePropEntries([])),
+    ]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).toContain("Component &quot;no-such-builtin&quot; preview unavailable");
+  });
+});
diff --git a/packages/paywall-renderer-preact/src/components/builtins/index.ts b/packages/paywall-renderer-preact/src/components/builtins/index.ts
new file mode 100644
index 000000000..2e8215c25
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/builtins/index.ts
@@ -0,0 +1,4 @@
+export { mountBuiltinPreview, type MountBuiltinPreviewOptions } from "./mount";
+export { BUILTIN_RENDERERS } from "./renderers";
+export { resolveComponentInstanceProps } from "./resolve-props";
+export type { BuiltinRenderer, BuiltinRendererProps } from "./types";
diff --git a/packages/paywall-renderer-preact/src/components/builtins/mount.ts b/packages/paywall-renderer-preact/src/components/builtins/mount.ts
new file mode 100644
index 000000000..1de44c55e
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/builtins/mount.ts
@@ -0,0 +1,44 @@
+import type {
+  ComponentSnapshotNode,
+  VariableReader,
+} from "@voidhash/paywall-renderer-web-core";
+import { h, render } from "preact";
+
+import { BUILTIN_RENDERERS } from "./renderers";
+import { resolveComponentInstanceProps } from "./resolve-props";
+
+/** Options for {@link mountBuiltinPreview}. */
+export interface MountBuiltinPreviewOptions {
+  /** The instance's `componentSlug` (a `BUILTIN_RENDERERS` key). */
+  slug: string;
+  /** The instance's document `props` entries (`node.data.props`). */
+  props: ComponentSnapshotNode["data"]["props"];
+}
+
+const EMPTY_VARIABLES: VariableReader = new Map();
+
+/**
+ * Mounts a built-in component as a small preact island inside an arbitrary
+ * host DOM element — the designer's React edit canvas uses this to render the
+ * REAL builtin implementation for a single `componentSource: "builtin"` node.
+ * Literal document props resolve like the production renderer's builtin path;
+ * variable references resolve against an empty scope (the edit canvas is
+ * static) and `actionBindings` are inert. Returns an unmount cleanup, or
+ * undefined when the slug has no shipped implementation (callers show their
+ * own placeholder). No JSX here: the module must typecheck under consumers'
+ * react-jsx configs too, so the vnode is built with `h`.
+ */
+export function mountBuiltinPreview(
+  container: HTMLElement,
+  options: MountBuiltinPreviewOptions,
+): (() => void) | undefined {
+  const renderer = BUILTIN_RENDERERS[options.slug];
+  if (!renderer) {
+    return undefined;
+  }
+  const props = resolveComponentInstanceProps(options.props, EMPTY_VARIABLES);
+  render(h(renderer, { fireAction: () => {}, props }), container);
+  return () => {
+    render(null, container);
+  };
+}
diff --git a/packages/paywall-renderer-preact/src/components/builtins/renderers.ts b/packages/paywall-renderer-preact/src/components/builtins/renderers.ts
new file mode 100644
index 000000000..08bbebaee
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/builtins/renderers.ts
@@ -0,0 +1,13 @@
+import { SampleBadge } from "./sample-badge";
+import type { BuiltinRenderer } from "./types";
+
+/**
+ * The built-in component implementations shipped with this renderer, keyed by
+ * their stable slug. Keys mirror the `BUILTIN_COMPONENTS` metadata registry in
+ * `@voidhash/paywall-builtins` (asserted by test); an instance whose slug
+ * is missing here degrades to the same placeholder as an unresolvable catalog
+ * component.
+ */
+export const BUILTIN_RENDERERS: Readonly<Record<string, BuiltinRenderer>> = {
+  "sample-badge": SampleBadge,
+};
diff --git a/packages/paywall-renderer-preact/src/components/builtins/resolve-props.ts b/packages/paywall-renderer-preact/src/components/builtins/resolve-props.ts
new file mode 100644
index 000000000..c3052ec6a
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/builtins/resolve-props.ts
@@ -0,0 +1,48 @@
+import type {
+  ComponentSnapshotNode,
+  VariableReader,
+} from "@voidhash/paywall-renderer-web-core";
+
+type ComponentInstancePropEntries = ComponentSnapshotNode["data"]["props"];
+
+/**
+ * Resolves a `component` node's document `props` (the same `{name, value}`
+ * bindings catalog/local instances carry) to plain values for a built-in
+ * implementation. `literal` bindings unwrap their stored `ComponentPropValue`
+ * payload; `variable-reference` bindings read the node's variable chain and
+ * unwrap the current `VariableValue` payload (so a `product` value resolves to
+ * its `{productId}` object). Unset names and unresolvable references are
+ * omitted — builtins fall back to their manifest defaults.
+ */
+export function resolveComponentInstanceProps(
+  props: ComponentInstancePropEntries,
+  variables: VariableReader,
+): Record<string, unknown> {
+  const resolved: Record<string, unknown> = {};
+  for (const entry of props) {
+    const prop = entry.value;
+    if (!prop?.name) {
+      continue;
+    }
+    const binding = prop.value;
+    if (!binding?.type) {
+      continue;
+    }
+    if (binding.type === "literal") {
+      if (binding.value) {
+        resolved[prop.name] = binding.value.value;
+      }
+      continue;
+    }
+    if (binding.type === "variable-reference") {
+      if (!binding.value || !("id" in binding.value) || !binding.value.id) {
+        continue;
+      }
+      const variable = variables.get(binding.value.id);
+      if (variable !== undefined) {
+        resolved[prop.name] = variable.value;
+      }
+    }
+  }
+  return resolved;
+}
diff --git a/packages/paywall-renderer-preact/src/components/builtins/sample-badge.tsx b/packages/paywall-renderer-preact/src/components/builtins/sample-badge.tsx
new file mode 100644
index 000000000..914293e33
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/builtins/sample-badge.tsx
@@ -0,0 +1,25 @@
+import type { BuiltinRendererProps } from "./types";
+
+const BADGE_STYLES: Record<string, string | number> = {
+  alignSelf: "flex-start",
+  backgroundColor: "#18181b",
+  borderRadius: "999px",
+  boxSizing: "border-box",
+  color: "#fafafa",
+  display: "inline-flex",
+  fontFamily: "inherit",
+  fontSize: "11px",
+  fontWeight: 600,
+  lineHeight: "16px",
+  padding: "2px 8px",
+};
+
+/**
+ * TEMPORARY spine-verification builtin — a static badge rendering its `label`
+ * string prop. Mirrors the `sample-badge` registry entry in
+ * `@voidhash/paywall-builtins`; REMOVE both before go-live.
+ */
+export function SampleBadge({ props }: BuiltinRendererProps) {
+  const label = typeof props.label === "string" ? props.label : "New";
+  return <span style={BADGE_STYLES}>{label}</span>;
+}
diff --git a/packages/paywall-renderer-preact/src/components/builtins/types.ts b/packages/paywall-renderer-preact/src/components/builtins/types.ts
new file mode 100644
index 000000000..aa01f9107
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/builtins/types.ts
@@ -0,0 +1,17 @@
+import type { ComponentChildren } from "preact";
+
+/**
+ * Props every built-in component implementation receives: the instance's
+ * resolved document props (see `resolveComponentInstanceProps`), a dispatcher
+ * for the instance's named `actionBindings` (payload semantics match preview
+ * trees: an emitted payload feeds `action-payload` sources), and the node's
+ * document children as the slot content.
+ */
+export interface BuiltinRendererProps {
+  props: Record<string, unknown>;
+  fireAction: (actionName: string, payload?: Record<string, unknown>) => void;
+  children?: ComponentChildren;
+}
+
+/** A built-in component implementation shipped with this renderer. */
+export type BuiltinRenderer = (props: BuiltinRendererProps) => ComponentChildren;
diff --git a/packages/paywall-renderer-preact/src/components/component.tsx b/packages/paywall-renderer-preact/src/components/component.tsx
new file mode 100644
index 000000000..54e95e62d
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/component.tsx
@@ -0,0 +1,236 @@
+import type {
+  ActionCallbacks,
+  ComponentSnapshotNode,
+  PreviewNode,
+  PreviewNodeStyle,
+  PreviewResolvedMotionStyle,
+  PreviewTree,
+  StyledPreviewNodeType,
+  VariableValue,
+} from "@voidhash/paywall-renderer-web-core";
+import {
+  buildPreviewNodeStyles,
+  executeComponentBoundAction,
+  previewResizeModeToObjectFit,
+} from "@voidhash/paywall-renderer-web-core";
+import type { ComponentChildren } from "preact";
+import { useCallback, useMemo } from "preact/hooks";
+
+import { usePaywallContext } from "../context/paywall-context";
+import { BUILTIN_RENDERERS } from "./builtins/renderers";
+import { resolveComponentInstanceProps } from "./builtins/resolve-props";
+
+interface ComponentInstanceProps {
+  node: ComponentSnapshotNode;
+  children: ComponentChildren;
+}
+
+const PLACEHOLDER_STYLES: Record<string, string | number> = {
+  alignItems: "center",
+  backgroundColor: "#f4f4f5",
+  border: "1px dashed #d4d4d8",
+  borderRadius: "6px",
+  boxSizing: "border-box",
+  color: "#71717a",
+  display: "flex",
+  fontFamily: "inherit",
+  fontSize: "11px",
+  justifyContent: "center",
+  minHeight: "40px",
+  padding: "8px",
+  position: "relative",
+  textAlign: "center",
+};
+
+// This package's sources are compiled both under its own preact JSX config and
+// under consumers' react-jsx configs (apps/www imports the .ts sources), so the
+// style value must satisfy preact's index-signature `CSSProperties` AND React's
+// csstype-based one. A homomorphic mapped copy of the csstype `Properties`
+// interface does both: anonymous object types get an implicit index signature
+// (interfaces do not) while keeping the structural csstype props.
+type PreviewNodeCss = {
+  [K in keyof ReturnType<typeof buildPreviewNodeStyles>]: ReturnType<
+    typeof buildPreviewNodeStyles
+  >[K];
+};
+
+function previewNodeStyle(
+  style: PreviewNodeStyle,
+  nodeType: StyledPreviewNodeType,
+  motion?: PreviewResolvedMotionStyle,
+): PreviewNodeCss {
+  return { ...buildPreviewNodeStyles(style, nodeType, motion) };
+}
+
+function pickPreviewTree(
+  trees: Record<string, PreviewTree> | undefined,
+  previewState: string,
+): PreviewTree | undefined {
+  if (!trees) {
+    return undefined;
+  }
+  for (const candidate of [previewState, "default"]) {
+    const tree = trees[candidate];
+    if (tree) {
+      return tree;
+    }
+  }
+  const firstState = Object.keys(trees)[0];
+  return firstState === undefined ? undefined : trees[firstState];
+}
+
+function PreviewNodeView({
+  node,
+  slot,
+  fireAction,
+}: {
+  node: PreviewNode;
+  slot: ComponentChildren;
+  fireAction: (actionName: string) => void;
+}) {
+  switch (node.type) {
+    case "view":
+    case "scroll": {
+      return (
+        <div style={previewNodeStyle(node.style, node.type, node.motion)}>
+          {node.children.map((child, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: preview trees are immutable per contentHash+state
+            <PreviewNodeView fireAction={fireAction} key={index} node={child} slot={slot} />
+          ))}
+        </div>
+      );
+    }
+    case "pressable": {
+      const actionName = node.action;
+      const onClick = actionName === undefined ? undefined : () => fireAction(actionName);
+      return (
+        <div onClick={onClick} style={previewNodeStyle(node.style, "pressable", node.motion)}>
+          {node.children.map((child, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: preview trees are immutable per contentHash+state
+            <PreviewNodeView fireAction={fireAction} key={index} node={child} slot={slot} />
+          ))}
+        </div>
+      );
+    }
+    case "text": {
+      return <div style={previewNodeStyle(node.style, "text", node.motion)}>{node.text}</div>;
+    }
+    case "image": {
+      return (
+        <img
+          alt=""
+          src={node.src}
+          style={{
+            ...previewNodeStyle(node.style, "image", node.motion),
+            objectFit: previewResizeModeToObjectFit(node.resizeMode) ?? "cover",
+          }}
+        />
+      );
+    }
+    case "slot": {
+      return <>{slot}</>;
+    }
+    case "placeholder": {
+      return <div style={PLACEHOLDER_STYLES}>{node.reason}</div>;
+    }
+    default: {
+      return null;
+    }
+  }
+}
+
+/**
+ * Renders a `component` document node from its pinned preview-tree artifact
+ * (contract §3, fixture-rendered output of a code component). Deployed
+ * (`catalog`) nodes resolve their trees from `componentArtifacts.trees` by
+ * `contentHash`; local (in-document) code components carry a sentinel
+ * `contentHash: ""` and resolve from `componentArtifacts.localTrees` by
+ * `componentPath` instead. The tree is picked by `previewState` →
+ * `"default"` → first available state; with no matching tree a labeled
+ * placeholder renders instead. The tree's `slot` marker mounts the node's
+ * document children, and pressables carrying an `action` name dispatch the
+ * node's matching `actionBindings` entry through `executeComponentBoundAction`
+ * (no emitted payload exists in this static preview — `action-payload` sources
+ * no-op). Builtin (`componentSource: "builtin"`) nodes bypass preview trees
+ * entirely and render the real preact implementation from `BUILTIN_RENDERERS`
+ * by slug, with document props resolved live.
+ */
+export function ComponentInstance({ node, children }: ComponentInstanceProps) {
+  const { getNodeVariables, setNodeVariable, callbacks, componentArtifacts } = usePaywallContext();
+  const variables = getNodeVariables(node.id);
+
+  // Wrap onSetVariable to capture this node's ID (same idiom as useInteractions)
+  const scopedCallbacks = useMemo<ActionCallbacks>(
+    () => ({
+      ...callbacks,
+      onSetVariable: (variableId: string, newValue: VariableValue) => {
+        setNodeVariable(node.id, variableId, newValue);
+      },
+    }),
+    [callbacks, node.id, setNodeVariable],
+  );
+
+  // Preview-tree pressables fire with no payload; builtin implementations may
+  // emit one, feeding the bound action's `action-payload` sources.
+  const fireAction = useCallback(
+    (actionName: string, payload?: Record<string, unknown>) => {
+      const binding = node.data.actionBindings.find((entry) => entry.value?.name === actionName);
+      const action = binding?.value?.action;
+      if (!action) {
+        return;
+      }
+      executeComponentBoundAction(action, payload, variables, scopedCallbacks);
+    },
+    [node.data.actionBindings, variables, scopedCallbacks],
+  );
+
+  // Builtins ship WITH this renderer: they resolve by stable slug (unpinned —
+  // no contentHash) to a REAL preact component, not a pre-rendered preview
+  // tree. Document props resolve live against the node's variable chain, and
+  // named actions dispatch through the same `fireAction` as preview-tree
+  // pressables. An unknown slug degrades to the shared placeholder.
+  if (node.data.componentSource === "builtin") {
+    const Builtin = BUILTIN_RENDERERS[node.data.componentSlug];
+    if (!Builtin) {
+      return (
+        <div data-node-id={node.id} style={PLACEHOLDER_STYLES}>
+          {`Component "${node.data.componentSlug}" preview unavailable`}
+        </div>
+      );
+    }
+    const builtinProps = resolveComponentInstanceProps(node.data.props, variables);
+    return (
+      <div data-node-id={node.id} style={{ display: "contents" }}>
+        {/* @ts-ignore BuiltinRenderer returns preact ComponentChildren — not a valid element type when cross-checked under react-jsx from studio */}
+        <Builtin fireAction={fireAction} props={builtinProps}>
+          {children}
+        </Builtin>
+      </div>
+    );
+  }
+
+  // Local components pin a sentinel `contentHash: ""`, so they resolve by
+  // `componentPath` from `localTrees`; catalog nodes resolve by contentHash.
+  const isLocal = node.data.componentSource === "local" && node.data.componentPath !== "";
+  const candidateTrees = isLocal
+    ? componentArtifacts?.localTrees?.[node.data.componentPath]
+    : componentArtifacts?.trees[node.data.contentHash];
+  const tree = pickPreviewTree(candidateTrees, node.data.previewState);
+
+  if (!tree) {
+    // Local instances carry a `componentSlug` sentinel of `""`; label them by
+    // their referenced file path instead.
+    const label = isLocal ? node.data.componentPath : node.data.componentSlug;
+    return (
+      <div data-node-id={node.id} style={PLACEHOLDER_STYLES}>
+        {`Component "${label}" preview unavailable`}
+      </div>
+    );
+  }
+
+  return (
+    <div data-node-id={node.id} style={{ display: "contents" }}>
+      <PreviewNodeView fireAction={fireAction} node={tree.root} slot={children} />
+    </div>
+  );
+}
diff --git a/packages/paywall-renderer-preact/src/components/index.ts b/packages/paywall-renderer-preact/src/components/index.ts
new file mode 100644
index 000000000..8dbea322e
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/index.ts
@@ -0,0 +1,5 @@
+export { Paywall } from "./paywall";
+export { Screen } from "./screen";
+export { ScrollView } from "./scroll-view";
+export { Text } from "./text";
+export { View } from "./view";
diff --git a/packages/paywall-renderer-preact/src/components/path.tsx b/packages/paywall-renderer-preact/src/components/path.tsx
new file mode 100644
index 000000000..fbc9dd5cd
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/path.tsx
@@ -0,0 +1,30 @@
+import type { PathSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { buildPathStyles } from "@voidhash/paywall-renderer-web-core";
+
+import { useResolvedStyle } from "../hooks/use-resolved-style";
+
+interface PathProps {
+  node: PathSnapshotNode;
+}
+
+export function Path({ node }: PathProps) {
+  const style = useResolvedStyle(node.id, node.data.style, node.data.states);
+  const pathStyles = buildPathStyles(style);
+
+  return (
+    <path
+      d={node.data.d}
+      fill={pathStyles.fill}
+      fillOpacity={pathStyles.fillOpacity}
+      fillRule={pathStyles.fillRule}
+      opacity={pathStyles.opacity}
+      stroke={pathStyles.stroke}
+      strokeLinecap={pathStyles.strokeLinecap}
+      strokeLinejoin={pathStyles.strokeLinejoin}
+      strokeOpacity={pathStyles.strokeOpacity}
+      strokeWidth={pathStyles.strokeWidth}
+      transform={node.data.transform}
+      vectorEffect="non-scaling-stroke"
+    />
+  );
+}
diff --git a/packages/paywall-renderer-preact/src/components/paywall.tsx b/packages/paywall-renderer-preact/src/components/paywall.tsx
new file mode 100644
index 000000000..b021816a6
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/paywall.tsx
@@ -0,0 +1,88 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import type { ComponentArtifacts } from "../component-artifacts";
+import { PaywallProvider } from "../context/paywall-context";
+import { ComponentInstance } from "./component";
+import { Path } from "./path";
+import { Screen } from "./screen";
+import { ScrollView } from "./scroll-view";
+import { Shape } from "./shape";
+import { Text } from "./text";
+import { View } from "./view";
+
+interface PaywallProps {
+  snapshot: SnapshotNode;
+  componentArtifacts?: ComponentArtifacts | undefined;
+  /** Locale to resolve localized content against (undefined → default locale). */
+  locale?: string | undefined;
+}
+
+export function Paywall({ snapshot, componentArtifacts, locale }: PaywallProps) {
+  return (
+    <PaywallProvider componentArtifacts={componentArtifacts} locale={locale} snapshot={snapshot}>
+      <Node node={snapshot} />
+    </PaywallProvider>
+  );
+}
+
+const UNKNOWN_NODE_STYLES: Record<string, string | number> = {
+  alignItems: "center",
+  backgroundColor: "#f4f4f5",
+  border: "1px dashed #d4d4d8",
+  borderRadius: "6px",
+  boxSizing: "border-box",
+  color: "#71717a",
+  display: "flex",
+  fontSize: "11px",
+  justifyContent: "center",
+  minHeight: "40px",
+  padding: "8px",
+  textAlign: "center",
+};
+
+// Embedded payloads can outlive this runtime build, so unknown node types
+// must degrade to a labeled placeholder instead of crashing the render.
+function UnknownNode({ node }: { node: { type?: unknown } }) {
+  return <div style={UNKNOWN_NODE_STYLES}>{`Unsupported node type: ${String(node.type)}`}</div>;
+}
+
+function Node({ node }: { node: SnapshotNode }) {
+  // Unknown-type nodes from newer payloads may not carry children at all.
+  const children = (node.children ?? []).map((child) => <Node key={child.id} node={child} />);
+
+  switch (node.type) {
+    case "root": {
+      return <>{children}</>;
+    }
+    case "screen": {
+      return <Screen node={node}>{children}</Screen>;
+    }
+    case "view": {
+      return <View node={node}>{children}</View>;
+    }
+    case "scrollView": {
+      return <ScrollView node={node}>{children}</ScrollView>;
+    }
+    case "text": {
+      return <Text node={node} />;
+    }
+    case "shape": {
+      return <Shape node={node}>{children}</Shape>;
+    }
+    case "path": {
+      return <Path node={node} />;
+    }
+    case "component": {
+      return <ComponentInstance node={node}>{children}</ComponentInstance>;
+    }
+    // Non-visual nodes: the code-component library and its definitions live in
+    // the document tree but never render (source only).
+    case "library":
+    case "codeComponent": {
+      return null;
+    }
+    default: {
+      return <UnknownNode node={node} />;
+    }
+  }
+}
diff --git a/packages/paywall-renderer-preact/src/components/screen.tsx b/packages/paywall-renderer-preact/src/components/screen.tsx
new file mode 100644
index 000000000..20642a95f
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/screen.tsx
@@ -0,0 +1,35 @@
+import type { ScreenSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import {
+  buildScreenContainerStyles,
+  buildScreenLayoutStyles,
+} from "@voidhash/paywall-renderer-web-core";
+import type { ComponentChildren } from "preact";
+
+import { useLocalizedBackgroundImage } from "../hooks/use-localized-background";
+import { useResolvedStyle } from "../hooks/use-resolved-style";
+
+interface ScreenProps {
+  node: ScreenSnapshotNode;
+  children: ComponentChildren;
+}
+
+export function Screen({ node, children }: ScreenProps) {
+  const style = useResolvedStyle(node.id, node.data.style, node.data.states);
+  // The background lives on the container; substitute the locale override only
+  // when one applies so default-locale output stays byte-identical.
+  const localizedBackground = useLocalizedBackgroundImage(node.data);
+  const containerStyles = buildScreenContainerStyles(
+    localizedBackground === node.data.style.backgroundImage
+      ? style
+      : { ...style, backgroundImage: localizedBackground },
+  );
+  const layoutStyles = buildScreenLayoutStyles(style);
+  return (
+    <div data-node-id={node.id} style={containerStyles as Record<string, string | number>}>
+      <div style={layoutStyles as Record<string, string | number>}>
+        {/* I hate all of this, but it's the only way to get the types to work, probably due to conflicts with Preact and React. */}
+        {children as unknown as null}
+      </div>
+    </div>
+  );
+}
diff --git a/packages/paywall-renderer-preact/src/components/scroll-view.tsx b/packages/paywall-renderer-preact/src/components/scroll-view.tsx
new file mode 100644
index 000000000..7071af721
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/scroll-view.tsx
@@ -0,0 +1,43 @@
+import type { ScrollViewSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { buildScrollViewStyles } from "@voidhash/paywall-renderer-web-core";
+import type { ComponentChildren } from "preact";
+
+import { useInteractions } from "../hooks/use-interactions";
+import { useLocalizedBackgroundImage } from "../hooks/use-localized-background";
+import { useResolvedStyle } from "../hooks/use-resolved-style";
+
+interface ScrollViewProps {
+  node: ScrollViewSnapshotNode;
+  children: ComponentChildren;
+}
+
+export function ScrollView({ node, children }: ScrollViewProps) {
+  const style = useResolvedStyle(node.id, node.data.style, node.data.states);
+  const onClick = useInteractions(node.id, node.data.interactions, node.data.states);
+  // Substitute the locale-specific background image ONLY when a real override
+  // exists for the active locale — otherwise the state-resolved style passes
+  // through untouched.
+  const localizedBackground = useLocalizedBackgroundImage(node.data);
+  const styles = buildScrollViewStyles(
+    localizedBackground === node.data.style.backgroundImage
+      ? style
+      : { ...style, backgroundImage: localizedBackground },
+    {
+      horizontal: node.data.horizontal,
+      showsScrollIndicator: node.data.showsScrollIndicator,
+    },
+  );
+
+  return (
+    <div
+      data-node-id={node.id}
+      onClick={onClick}
+      style={{
+        ...(styles as Record<string, string | number>),
+        ...(onClick ? { cursor: "pointer" } : {}),
+      }}
+    >
+      {children as unknown as null}
+    </div>
+  );
+}
diff --git a/packages/paywall-renderer-preact/src/components/shape.tsx b/packages/paywall-renderer-preact/src/components/shape.tsx
new file mode 100644
index 000000000..1be96f983
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/shape.tsx
@@ -0,0 +1,31 @@
+import type { ShapeSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { buildShapeContainerStyles } from "@voidhash/paywall-renderer-web-core";
+import type { ComponentChildren } from "preact";
+
+import { useResolvedStyle } from "../hooks/use-resolved-style";
+
+interface ShapeProps {
+  node: ShapeSnapshotNode;
+  children: ComponentChildren;
+}
+
+export function Shape({ node, children }: ShapeProps) {
+  const style = useResolvedStyle(node.id, node.data.style, node.data.states);
+  const containerStyles = buildShapeContainerStyles(style);
+  const viewBox = node.data.viewBox;
+  const viewBoxString = `${viewBox.minX} ${viewBox.minY} ${viewBox.width} ${viewBox.height}`;
+
+  return (
+    <div data-node-id={node.id} style={containerStyles as Record<string, string | number>}>
+      <svg
+        height="100%"
+        preserveAspectRatio={style.preserveAspectRatio as string}
+        style={{ display: "block" }}
+        viewBox={viewBoxString}
+        width="100%"
+      >
+        {children as unknown as null}
+      </svg>
+    </div>
+  );
+}
diff --git a/packages/paywall-renderer-preact/src/components/text.tsx b/packages/paywall-renderer-preact/src/components/text.tsx
new file mode 100644
index 000000000..15214ccf6
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/text.tsx
@@ -0,0 +1,21 @@
+import { resolveText } from "@voidhash/mimic-schema";
+import type { TextSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { buildTextStyles } from "@voidhash/paywall-renderer-web-core";
+
+import { usePaywallContext } from "../context/paywall-context";
+import { useResolvedStyle } from "../hooks/use-resolved-style";
+
+interface TextProps {
+  node: TextSnapshotNode;
+}
+
+export function Text({ node }: TextProps) {
+  const style = useResolvedStyle(node.id, node.data.style, node.data.states);
+  const styles = buildTextStyles(style);
+  const { locale, defaultLocale } = usePaywallContext();
+  return (
+    <span data-node-id={node.id} style={styles as Record<string, string | number>}>
+      {resolveText(node.data, locale, defaultLocale)}
+    </span>
+  );
+}
diff --git a/packages/paywall-renderer-preact/src/components/view.tsx b/packages/paywall-renderer-preact/src/components/view.tsx
new file mode 100644
index 000000000..7c3e4af14
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/components/view.tsx
@@ -0,0 +1,39 @@
+import type { ViewSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { buildViewStyles } from "@voidhash/paywall-renderer-web-core";
+import type { ComponentChildren } from "preact";
+
+import { useInteractions } from "../hooks/use-interactions";
+import { useLocalizedBackgroundImage } from "../hooks/use-localized-background";
+import { useResolvedStyle } from "../hooks/use-resolved-style";
+
+interface ViewProps {
+  node: ViewSnapshotNode;
+  children: ComponentChildren;
+}
+
+export function View({ node, children }: ViewProps) {
+  const style = useResolvedStyle(node.id, node.data.style, node.data.states);
+  const onClick = useInteractions(node.id, node.data.interactions, node.data.states);
+  // Substitute the locale-specific background image ONLY when a real override
+  // exists for the active locale — otherwise the state-resolved style passes
+  // through untouched.
+  const localizedBackground = useLocalizedBackgroundImage(node.data);
+  const styles = buildViewStyles(
+    localizedBackground === node.data.style.backgroundImage
+      ? style
+      : { ...style, backgroundImage: localizedBackground },
+  );
+
+  return (
+    <div
+      data-node-id={node.id}
+      onClick={onClick}
+      style={{
+        ...(styles as Record<string, string | number>),
+        ...(onClick ? { cursor: "pointer" } : {}),
+      }}
+    >
+      {children as unknown as null}
+    </div>
+  );
+}
diff --git a/packages/paywall-renderer-preact/src/context/paywall-context.tsx b/packages/paywall-renderer-preact/src/context/paywall-context.tsx
new file mode 100644
index 000000000..065617d7c
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/context/paywall-context.tsx
@@ -0,0 +1,194 @@
+import {
+  type ActionCallbacks,
+  type PaywallMessage,
+  type SnapshotNode,
+  type VariableReader,
+  type VariableScopes,
+  type VariableStore,
+  type VariableValue,
+  collectVariableScopes,
+  createChainVariableReader,
+  findDeclaringNodeInChain,
+} from "@voidhash/paywall-renderer-web-core";
+import type { ComponentChildren } from "preact";
+import { createContext } from "preact";
+import { useCallback, useContext, useMemo, useState } from "preact/hooks";
+
+import type { ComponentArtifacts } from "../component-artifacts";
+
+interface PaywallContextValue {
+  getNodeVariables: (nodeId: string) => VariableReader;
+  setNodeVariable: (nodeId: string, variableId: string, newValue: VariableValue) => void;
+  callbacks: ActionCallbacks;
+  componentArtifacts: ComponentArtifacts | undefined;
+  /** Active locale (undefined → base/default). Consumed by localized renderers. */
+  locale: string | undefined;
+  /** The document's default locale, derived from the root snapshot. */
+  defaultLocale: string;
+}
+
+const EMPTY_STORE: VariableStore = new Map();
+
+const PaywallContext = createContext<PaywallContextValue | null>(null);
+
+interface PaywallProviderProps {
+  snapshot: SnapshotNode;
+  componentArtifacts?: ComponentArtifacts | undefined;
+  /** Active locale (undefined → base/default locale). */
+  locale?: string | undefined;
+  children: ComponentChildren;
+}
+
+declare global {
+  interface Window {
+    ReactNativeWebView?: {
+      postMessage: (data: string) => void;
+    };
+  }
+}
+
+function postPaywallMessage(message: PaywallMessage): void {
+  const data = JSON.stringify(message);
+  if (window.ReactNativeWebView) {
+    window.ReactNativeWebView.postMessage(data);
+  } else {
+    window.parent.postMessage(message, "*");
+  }
+}
+
+export function PaywallProvider({
+  snapshot,
+  componentArtifacts,
+  locale,
+  children,
+}: PaywallProviderProps) {
+  const scopes = useMemo<VariableScopes>(() => collectVariableScopes(snapshot), [snapshot]);
+
+  // The Paywall snapshot is the document root; its localization config carries
+  // the default locale. Non-root snapshots and pre-localization payloads (which
+  // omit the config) fall back to "en".
+  const defaultLocale =
+    (snapshot.type === "root" ? snapshot.data.localization?.defaultLocale : undefined) ?? "en";
+
+  const [nodeStores, setNodeStores] = useState<Map<string, VariableStore>>(() => {
+    const stores = new Map<string, VariableStore>();
+    for (const [nodeId, { store }] of scopes.stores) {
+      stores.set(nodeId, store);
+    }
+    return stores;
+  });
+
+  // Chain readers are cached per (scopes, nodeStores) generation so consumer
+  // memos keyed on the reader identity invalidate exactly when stores change.
+  const chainReaders = useMemo(() => new Map<string, VariableReader>(), [scopes, nodeStores]);
+
+  const getNodeVariables = useCallback(
+    (nodeId: string): VariableReader => {
+      const cached = chainReaders.get(nodeId);
+      if (cached) {
+        return cached;
+      }
+      const reader = createChainVariableReader(scopes.parents, (id) => nodeStores.get(id), nodeId);
+      chainReaders.set(nodeId, reader);
+      return reader;
+    },
+    [chainReaders, nodeStores, scopes],
+  );
+
+  const setNodeVariable = useCallback(
+    (nodeId: string, variableId: string, newValue: VariableValue) => {
+      setNodeStores((prev) => {
+        // Write to the nearest store in the ancestor chain declaring the id;
+        // drop the write when no scope in the chain declares it.
+        const declaringNodeId = findDeclaringNodeInChain(
+          scopes.parents,
+          (id) => prev.get(id),
+          nodeId,
+          variableId,
+        );
+        if (declaringNodeId === undefined) {
+          return prev;
+        }
+        const prevStore = prev.get(declaringNodeId);
+        if (!prevStore) {
+          return prev;
+        }
+
+        const nextStore = new Map(prevStore);
+        nextStore.set(variableId, newValue);
+
+        // Keep the paired ID (entry ID ↔ internal ID) in sync
+        const nodeAliases = scopes.stores.get(declaringNodeId)?.aliases;
+        const pairedId = nodeAliases?.get(variableId);
+        if (pairedId) {
+          nextStore.set(pairedId, newValue);
+        }
+
+        const next = new Map(prev);
+        next.set(declaringNodeId, nextStore);
+        return next;
+      });
+    },
+    [scopes],
+  );
+
+  const onClosePaywall = useCallback(() => {
+    postPaywallMessage({ type: "paywall:close" });
+  }, []);
+
+  const onPurchaseProduct = useCallback((productId: string) => {
+    postPaywallMessage({ type: "paywall:purchase", productId });
+  }, []);
+
+  // onSetVariable in ActionCallbacks doesn't know about nodeId — it's
+  // wrapped per-node in use-interactions.ts via scopedCallbacks.
+  const onSetVariable = useCallback((variableId: string, _newValue: VariableValue) => {
+    console.warn(
+      `onSetVariable called directly for "${variableId}" without node context. ` +
+        "Use the scoped callback from useInteractions instead.",
+    );
+  }, []);
+
+  const callbacks = useMemo<ActionCallbacks>(
+    () => ({ onClosePaywall, onPurchaseProduct, onSetVariable }),
+    [onClosePaywall, onPurchaseProduct, onSetVariable],
+  );
+
+  const contextValue = useMemo<PaywallContextValue>(
+    () => ({
+      getNodeVariables,
+      setNodeVariable,
+      callbacks,
+      componentArtifacts,
+      locale,
+      defaultLocale,
+    }),
+    [getNodeVariables, setNodeVariable, callbacks, componentArtifacts, locale, defaultLocale],
+  );
+
+  return (
+    // @ts-ignore Preact Provider type incompatible with React JSX when cross-checked from studio
+    <PaywallContext.Provider value={contextValue}>
+      {children as unknown as null}
+    </PaywallContext.Provider>
+  );
+}
+
+export function usePaywallContext(): PaywallContextValue {
+  const ctx = useContext(PaywallContext);
+  if (!ctx) {
+    return {
+      getNodeVariables: () => EMPTY_STORE,
+      setNodeVariable: () => {},
+      callbacks: {
+        onClosePaywall: () => {},
+        onPurchaseProduct: () => {},
+        onSetVariable: () => {},
+      },
+      componentArtifacts: undefined,
+      locale: undefined,
+      defaultLocale: "en",
+    };
+  }
+  return ctx;
+}
diff --git a/packages/paywall-renderer-preact/src/hooks/index.ts b/packages/paywall-renderer-preact/src/hooks/index.ts
new file mode 100644
index 000000000..6b27777f6
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/hooks/index.ts
@@ -0,0 +1,2 @@
+export { useInteractions } from "./use-interactions";
+export { useResolvedStyle } from "./use-resolved-style";
diff --git a/packages/paywall-renderer-preact/src/hooks/use-interactions.ts b/packages/paywall-renderer-preact/src/hooks/use-interactions.ts
new file mode 100644
index 000000000..5ac0bc2d8
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/hooks/use-interactions.ts
@@ -0,0 +1,58 @@
+import type {
+  ActionCallbacks,
+  Interaction,
+  NodeState,
+  VariableValue,
+} from "@voidhash/paywall-renderer-web-core";
+import { executeAction, resolveActionOverride } from "@voidhash/paywall-renderer-web-core";
+import { useCallback, useMemo } from "preact/hooks";
+
+import { usePaywallContext } from "../context/paywall-context";
+
+export function useInteractions(
+  nodeId: string,
+  interactions: ReadonlyArray<{ id?: string; value: Interaction | undefined }>,
+  states: ReadonlyArray<{ value: NodeState }>,
+): (() => void) | undefined {
+  const { getNodeVariables, setNodeVariable, callbacks } = usePaywallContext();
+  const variables = getNodeVariables(nodeId);
+
+  // Wrap onSetVariable to capture this node's ID
+  const scopedCallbacks = useMemo<ActionCallbacks>(
+    () => ({
+      ...callbacks,
+      onSetVariable: (variableId: string, newValue: VariableValue) => {
+        setNodeVariable(nodeId, variableId, newValue);
+      },
+    }),
+    [callbacks, nodeId, setNodeVariable],
+  );
+
+  const clickInteractions = useMemo(
+    () => interactions.filter((entry) => entry.value?.trigger?.type === "click"),
+    [interactions],
+  );
+
+  const handleClick = useCallback(() => {
+    for (const entry of clickInteractions) {
+      const interaction = entry.value;
+      if (!interaction?.action) {
+        continue;
+      }
+      // Action overrides are keyed by interaction array entry ID in snapshots.
+      const interactionIdForOverrides = entry.id ?? interaction.id;
+      if (!interactionIdForOverrides) {
+        continue;
+      }
+      const overriddenAction = resolveActionOverride(interactionIdForOverrides, states, variables);
+      const action = overriddenAction ?? interaction.action;
+      executeAction(action, variables, scopedCallbacks);
+    }
+  }, [clickInteractions, states, variables, scopedCallbacks]);
+
+  if (clickInteractions.length === 0) {
+    return undefined;
+  }
+
+  return handleClick;
+}
diff --git a/packages/paywall-renderer-preact/src/hooks/use-localized-background.ts b/packages/paywall-renderer-preact/src/hooks/use-localized-background.ts
new file mode 100644
index 000000000..bb3f5e928
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/hooks/use-localized-background.ts
@@ -0,0 +1,15 @@
+import type { BackgroundImageSnapshot, LocalizableImageData } from "@voidhash/mimic-schema";
+import { resolveBackgroundImage } from "@voidhash/mimic-schema";
+
+import { usePaywallContext } from "../context/paywall-context";
+
+/**
+ * Resolves a view/screen node's effective background image for the active
+ * locale. Returns the node's base `style.backgroundImage` (same reference) when
+ * no per-locale override applies, so callers substitute only on a real override
+ * and keep default-locale output byte-identical to the unlocalized render.
+ */
+export function useLocalizedBackgroundImage(data: LocalizableImageData): BackgroundImageSnapshot {
+  const { locale, defaultLocale } = usePaywallContext();
+  return resolveBackgroundImage(data, locale, defaultLocale);
+}
diff --git a/packages/paywall-renderer-preact/src/hooks/use-resolved-style.ts b/packages/paywall-renderer-preact/src/hooks/use-resolved-style.ts
new file mode 100644
index 000000000..5cd47bee0
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/hooks/use-resolved-style.ts
@@ -0,0 +1,15 @@
+import type { NodeState } from "@voidhash/paywall-renderer-web-core";
+import { resolveStyle } from "@voidhash/paywall-renderer-web-core";
+import { useMemo } from "preact/hooks";
+
+import { usePaywallContext } from "../context/paywall-context";
+
+export function useResolvedStyle<TStyle extends Record<string, unknown>>(
+  nodeId: string,
+  baseStyle: TStyle,
+  states: ReadonlyArray<{ value: NodeState }>,
+): TStyle {
+  const { getNodeVariables } = usePaywallContext();
+  const variables = getNodeVariables(nodeId);
+  return useMemo(() => resolveStyle(baseStyle, states, variables), [baseStyle, states, variables]);
+}
diff --git a/packages/paywall-renderer-preact/src/index.ts b/packages/paywall-renderer-preact/src/index.ts
new file mode 100644
index 000000000..3d34a38b0
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/index.ts
@@ -0,0 +1,21 @@
+export {
+  renderPaywall,
+  renderPaywallToHtml,
+  type HtmlRenderOptions,
+  type HtmlRenderResult,
+  type RenderPaywallOptions,
+} from "./render";
+export type { ComponentArtifacts } from "./component-artifacts";
+export {
+  BUILTIN_RENDERERS,
+  mountBuiltinPreview,
+  type BuiltinRenderer,
+  type BuiltinRendererProps,
+  type MountBuiltinPreviewOptions,
+} from "./components/builtins";
+export type {
+  RenderOptions,
+  RenderResult,
+  SnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+export type { PaywallMetadata } from "./templates/document-template";
diff --git a/packages/paywall-renderer-preact/src/render.test.ts b/packages/paywall-renderer-preact/src/render.test.ts
new file mode 100644
index 000000000..39a27955c
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/render.test.ts
@@ -0,0 +1,726 @@
+import { ScreenNode, ViewNode } from "@voidhash/mimic-schema";
+import type { PreviewTree, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import type { ComponentArtifacts } from "./component-artifacts";
+import { renderPaywall, renderPaywallToHtml } from "./render";
+
+// Encode/decode round-trips through the real mimic node data structs
+// materialize schema defaults and the CRDT stop envelope (`{ id, pos, value }`),
+// so fixtures carry the EXACT snapshot shape `selectDocumentRoot` hands the
+// device preview — this drives the true preview-canvas path, not a hand-built
+// approximation of it.
+function makeViewStyle(style?: Parameters<typeof ViewNode.data.encode>[0]["style"]) {
+  return ViewNode.data.decode(ViewNode.data.encode({ style })).style;
+}
+
+function makeScreenStyle(style?: Parameters<typeof ScreenNode.data.encode>[0]["style"]) {
+  return ScreenNode.data.decode(ScreenNode.data.encode({ style })).style;
+}
+
+function makeScreenNode(id: string, style: unknown, children: SnapshotNode[] = []): SnapshotNode {
+  return {
+    type: "screen",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "Screen",
+      style,
+      states: [],
+      localVariables: [],
+      linkedVariables: [],
+    },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+function makeRootNode(children: SnapshotNode[]): SnapshotNode {
+  return {
+    type: "root",
+    id: "root",
+    parentId: null,
+    pos: "a0",
+    data: { name: "Paywall" },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+function makeTextNode(id: string, text: string): SnapshotNode {
+  return {
+    type: "text",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "Text",
+      text,
+      style: {},
+      states: [],
+      localVariables: [],
+      linkedVariables: [],
+    },
+    children: [],
+  } as unknown as SnapshotNode;
+}
+
+function makeComponentNode(
+  id: string,
+  contentHash: string,
+  children: SnapshotNode[] = [],
+  previewState = "default",
+): SnapshotNode {
+  return {
+    type: "component",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "Component",
+      componentSlug: "hero-card",
+      componentVersion: 1,
+      contentHash,
+      previewState,
+      props: [],
+      actionBindings: [],
+    },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+function makeLocalComponentNode(
+  id: string,
+  componentPath: string,
+  children: SnapshotNode[] = [],
+  previewState = "default",
+): SnapshotNode {
+  return {
+    type: "component",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "Component",
+      componentSource: "local",
+      componentPath,
+      componentSlug: "",
+      componentVersion: 0,
+      contentHash: "",
+      previewState,
+      props: [],
+      actionBindings: [],
+    },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+function makeViewNode(
+  id: string,
+  style: Record<string, unknown>,
+  children: SnapshotNode[] = [],
+): SnapshotNode {
+  return {
+    type: "view",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "View",
+      style,
+      states: [],
+      interactions: [],
+      localVariables: [],
+      linkedVariables: [],
+    },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+function artifactsWithTree(contentHash: string, state: string, root: PreviewTree["root"]) {
+  const tree: PreviewTree = { treeVersion: 1, state, root };
+  return { trees: { [contentHash]: { [state]: tree } } } satisfies ComponentArtifacts;
+}
+
+function artifactsWithLocalTree(
+  componentPath: string,
+  state: string,
+  root: PreviewTree["root"],
+) {
+  const tree: PreviewTree = { treeVersion: 1, state, root };
+  return {
+    trees: {},
+    localTrees: { [componentPath]: { [state]: tree } },
+  } satisfies ComponentArtifacts;
+}
+
+describe("renderPaywall nested node data", () => {
+  test('renders view "auto" dimensions as CSS auto and omits absent constraints', () => {
+    const snapshot = makeRootNode([makeViewNode("view-1", { width: "auto", height: 120 })]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).toContain('data-node-id="view-1"');
+    expect(html).toContain("width:auto");
+    expect(html).toContain("height:120px");
+    expect(html).not.toContain("min-width");
+    expect(html).not.toContain("max-width");
+  });
+
+  test("renders explicit flex and min/max constraints from node.data.style", () => {
+    const snapshot = makeRootNode([
+      makeViewNode("view-1", { flex: 1, minWidth: 10, width: 100, height: "auto" }),
+    ]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).toContain("flex:1");
+    expect(html).toContain("min-width:10px");
+    expect(html).toContain("width:100px");
+    expect(html).toContain("height:auto");
+  });
+
+  test("renders an absolute-positioned text node with its offsets from node.data.style", () => {
+    const textNode = {
+      type: "text",
+      id: "text-1",
+      parentId: null,
+      pos: "a0",
+      data: {
+        name: "Text",
+        text: "Badge",
+        style: { position: "absolute", top: 10, left: 20 },
+        states: [],
+        localVariables: [],
+        linkedVariables: [],
+      },
+      children: [],
+    } as unknown as SnapshotNode;
+    const snapshot = makeRootNode([textNode]);
+
+    const { html } = renderPaywall(snapshot);
+
+    // The text element renders on the flow node directly (no wrapper), so the
+    // absolute position + numeric offsets land as CSS.
+    expect(html).toContain('data-node-id="text-1"');
+    expect(html).toContain("position:absolute");
+    expect(html).toContain("top:10px");
+    expect(html).toContain("left:20px");
+  });
+});
+
+describe("renderPaywall device-preview backgrounds (real mimic snapshot)", () => {
+  test("a gradient view background lowers to the SVG data-URI in the preview DOM", () => {
+    const style = makeViewStyle({
+      backgroundEnabled: true,
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "radial",
+        startX: 0.5,
+        startY: 0.5,
+        endX: 1,
+        endY: 1,
+        stops: [
+          { color: "rgba(0, 0, 255, 1)", position: 0 },
+          { color: "rgba(255, 0, 0, 1)", position: 1 },
+        ],
+      },
+    });
+    const snapshot = makeRootNode([makeViewNode("view-1", style as Record<string, unknown>)]);
+
+    const { html } = renderPaywall(snapshot);
+
+    // The gradient is emitted as an inline SVG data-URI backgroundImage — NOT a
+    // solid backgroundColor fallback. This is the exact byte-shape the designer
+    // canvas produces (buildBackgroundStyles), reached here through the preact
+    // View → buildViewStyles path the device preview actually runs.
+    expect(html).toContain("data:image/svg+xml,");
+    expect(html).toContain("radialGradient");
+    expect(html).toContain("background-size:100% 100%");
+  });
+
+  test("an image view background lowers to url() with the mapped background-size", () => {
+    const style = makeViewStyle({
+      backgroundEnabled: true,
+      backgroundType: "image",
+      backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" },
+    });
+    const snapshot = makeRootNode([makeViewNode("view-1", style as Record<string, unknown>)]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).toContain('url(&quot;https://example.com/bg.png&quot;)');
+    expect(html).toContain("background-size:contain");
+  });
+
+  test("a gradient screen background reaches the screen container in the preview DOM", () => {
+    const style = makeScreenStyle({
+      backgroundEnabled: true,
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0.5,
+        startY: 0,
+        endX: 0.5,
+        endY: 1,
+        stops: [
+          { color: "rgba(20, 20, 20, 1)", position: 0 },
+          { color: "rgba(0, 0, 0, 1)", position: 1 },
+        ],
+      },
+    });
+    const snapshot = makeRootNode([makeScreenNode("screen-1", style)]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).toContain('data-node-id="screen-1"');
+    expect(html).toContain("data:image/svg+xml,");
+    expect(html).toContain("linearGradient");
+  });
+
+  test("renderPaywallToHtml embeds and re-renders the gradient through the hydration payload", () => {
+    const style = makeViewStyle({
+      backgroundEnabled: true,
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+        stops: [
+          { color: "rgba(255, 255, 255, 1)", position: 0 },
+          { color: "rgba(0, 0, 0, 1)", position: 1 },
+        ],
+      },
+    });
+    const snapshot = makeRootNode([makeViewNode("view-1", style as Record<string, unknown>)]);
+
+    const { html } = renderPaywallToHtml(snapshot, { hydrate: true });
+
+    // SSR body carries the gradient, and the embedded snapshot payload retains
+    // the CRDT stop envelope so client hydration re-derives the same data-URI.
+    expect(html).toContain("data:image/svg+xml,");
+    expect(html).toContain('"backgroundType":"gradient"');
+    expect(html).toContain('"value":{"color":"rgba(255, 255, 255, 1)","position":0}');
+  });
+
+  test("a disabled background stays transparent (no gradient leak)", () => {
+    const style = makeViewStyle({
+      backgroundEnabled: false,
+      backgroundType: "gradient",
+    });
+    const snapshot = makeRootNode([makeViewNode("view-1", style as Record<string, unknown>)]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).not.toContain("data:image/svg+xml,");
+    expect(html).toContain("background-color:transparent");
+  });
+});
+
+describe("renderPaywall with component nodes", () => {
+  test("renders a component node statically from its provided preview tree", () => {
+    const snapshot = makeRootNode([makeComponentNode("component-1", "hash-1")]);
+    const componentArtifacts = artifactsWithTree("hash-1", "default", {
+      type: "view",
+      style: { paddingTop: 8 },
+      children: [{ type: "text", style: { fontSize: 14 }, text: "Hello from component" }],
+    });
+
+    const { html } = renderPaywall(snapshot, { componentArtifacts });
+
+    expect(html).toContain("Hello from component");
+    expect(html).toContain('data-node-id="component-1"');
+  });
+
+  test("falls back to the default tree, then the first available state", () => {
+    const snapshot = makeRootNode([
+      makeComponentNode("component-1", "hash-1", [], "missing-state"),
+    ]);
+    const viaDefault = renderPaywall(snapshot, {
+      componentArtifacts: artifactsWithTree("hash-1", "default", {
+        type: "text",
+        style: {},
+        text: "Default state",
+      }),
+    });
+    expect(viaDefault.html).toContain("Default state");
+
+    const viaFirstAvailable = renderPaywall(snapshot, {
+      componentArtifacts: artifactsWithTree("hash-1", "compact", {
+        type: "text",
+        style: {},
+        text: "Compact state",
+      }),
+    });
+    expect(viaFirstAvailable.html).toContain("Compact state");
+  });
+
+  test("mounts the node's children at the tree's slot marker", () => {
+    const snapshot = makeRootNode([
+      makeComponentNode("component-1", "hash-1", [makeTextNode("text-1", "Slotted child")]),
+    ]);
+    const componentArtifacts = artifactsWithTree("hash-1", "default", {
+      type: "view",
+      style: {},
+      children: [{ type: "slot" }],
+    });
+
+    const { html } = renderPaywall(snapshot, { componentArtifacts });
+
+    expect(html).toContain("Slotted child");
+    expect(html).toContain('data-node-id="text-1"');
+  });
+
+  test("does not render children when the tree has no slot marker", () => {
+    const snapshot = makeRootNode([
+      makeComponentNode("component-1", "hash-1", [makeTextNode("text-1", "Slotted child")]),
+    ]);
+    const componentArtifacts = artifactsWithTree("hash-1", "default", {
+      type: "view",
+      style: {},
+      children: [],
+    });
+
+    const { html } = renderPaywall(snapshot, { componentArtifacts });
+
+    expect(html).not.toContain("Slotted child");
+  });
+
+  test("renders a labeled placeholder when no tree exists for the contentHash", () => {
+    const snapshot = makeRootNode([makeComponentNode("component-1", "hash-1")]);
+
+    const withoutArtifacts = renderPaywall(snapshot);
+    expect(withoutArtifacts.html).toContain("Component &quot;hero-card&quot; preview unavailable");
+
+    const withOtherArtifacts = renderPaywall(snapshot, {
+      componentArtifacts: artifactsWithTree("other-hash", "default", {
+        type: "text",
+        style: {},
+        text: "Other",
+      }),
+    });
+    expect(withOtherArtifacts.html).toContain(
+      "Component &quot;hero-card&quot; preview unavailable",
+    );
+  });
+
+  test("resolves a local component by componentPath (contentHash is a sentinel)", () => {
+    const snapshot = makeRootNode([
+      makeLocalComponentNode("component-1", "components/def-1.tsx", [
+        makeTextNode("text-1", "Slotted child"),
+      ]),
+    ]);
+    const componentArtifacts = artifactsWithLocalTree("components/def-1.tsx", "default", {
+      type: "view",
+      style: {},
+      children: [{ type: "slot" }],
+    });
+
+    const { html } = renderPaywall(snapshot, { componentArtifacts });
+
+    expect(html).toContain("Slotted child");
+    expect(html).toContain('data-node-id="text-1"');
+    expect(html).not.toContain("preview unavailable");
+  });
+
+  test("renders a labeled placeholder when no local tree exists for the componentPath", () => {
+    const snapshot = makeRootNode([makeLocalComponentNode("component-1", "components/def-1.tsx")]);
+
+    // A catalog tree matching the sentinel empty contentHash must not be picked
+    // up by a local node — it resolves solely via localTrees/componentPath.
+    const withCatalogOnly = renderPaywall(snapshot, {
+      componentArtifacts: artifactsWithTree("", "default", { type: "text", style: {}, text: "X" }),
+    });
+    expect(withCatalogOnly.html).toContain(
+      "Component &quot;components/def-1.tsx&quot; preview unavailable",
+    );
+
+    const withOtherLocal = renderPaywall(snapshot, {
+      componentArtifacts: artifactsWithLocalTree("components/other-def.tsx", "default", {
+        type: "text",
+        style: {},
+        text: "Other",
+      }),
+    });
+    expect(withOtherLocal.html).toContain(
+      "Component &quot;components/def-1.tsx&quot; preview unavailable",
+    );
+  });
+
+  test("renders a labeled placeholder instead of throwing on unknown node types", () => {
+    const snapshot = makeRootNode([
+      { type: "carousel", id: "future-1", children: [] } as unknown as SnapshotNode,
+    ]);
+
+    const { html } = renderPaywall(snapshot);
+
+    expect(html).toContain("Unsupported node type: carousel");
+  });
+});
+
+describe("renderPaywallToHtml payload embedding", () => {
+  test("embeds the bare snapshot when no component artifacts are provided", () => {
+    const { html } = renderPaywallToHtml(makeRootNode([]));
+
+    expect(html).toContain('<script id="__PAYWALL_DATA__" type="application/json">{"type":"root"');
+    expect(html).not.toContain('"componentArtifacts"');
+  });
+
+  test("wraps snapshot and componentArtifacts when artifacts are provided", () => {
+    const { html } = renderPaywallToHtml(makeRootNode([makeComponentNode("c-1", "hash-1")]), {
+      componentArtifacts: artifactsWithTree("hash-1", "default", {
+        type: "text",
+        style: {},
+        text: "Embedded",
+      }),
+    });
+
+    expect(html).toContain('"componentArtifacts":{"trees":');
+    expect(html).toContain('"snapshot":{"type":"root"');
+  });
+
+  test("escapes < in the payload so tree text cannot break out of the script block", () => {
+    const malicious = "</script><script>window.breakout = true</script>";
+    const { html } = renderPaywallToHtml(makeRootNode([makeComponentNode("c-1", "hash-1")]), {
+      componentArtifacts: artifactsWithTree("hash-1", "default", {
+        type: "text",
+        style: {},
+        text: malicious,
+      }),
+    });
+
+    const open = '<script id="__PAYWALL_DATA__" type="application/json">';
+    const start = html.indexOf(open) + open.length;
+    const payload = html.slice(start, html.indexOf("</script>", start));
+    expect(payload).not.toContain("<");
+    const parsed = JSON.parse(payload) as { componentArtifacts: ComponentArtifacts };
+    expect(parsed.componentArtifacts.trees["hash-1"]?.default?.root).toMatchObject({
+      text: malicious,
+    });
+  });
+});
+
+describe("hydration runtime bundle", () => {
+  // The snapshot carries no gradients, so these markers can only come from the
+  // embedded hydration runtime. SSR-only assertions once let a stale runtime
+  // paint outdated styles over correct server output — this greps the runtime
+  // itself so a bundle missing current style-builder logic fails here.
+  test("embeds the current style builders in the runtime script", () => {
+    const { html } = renderPaywallToHtml(makeRootNode([]));
+
+    expect(html).toContain("backgroundGradient");
+    expect(html).toContain("linearGradient");
+    expect(html).toContain("radialGradient");
+    expect(html).toContain("data:image/svg+xml");
+  });
+
+  test("omits the runtime script when hydration is disabled", () => {
+    const { html } = renderPaywallToHtml(makeRootNode([]), { hydrate: false });
+
+    expect(html).not.toContain("backgroundGradient");
+  });
+
+  // The global name can only come from the bundled `readInjectedConfig`, so a
+  // runtime missing the SDK locale source (contract §7.1) fails here.
+  test("embeds the SDK injected-config locale source in the runtime script", () => {
+    const { html } = renderPaywallToHtml(makeRootNode([]));
+    expect(html).toContain("__VOIDHASH_PAYWALL__");
+
+    const withoutRuntime = renderPaywallToHtml(makeRootNode([]), { hydrate: false });
+    expect(withoutRuntime.html).not.toContain("__VOIDHASH_PAYWALL__");
+  });
+});
+
+// A root node carrying a localization config (defaultLocale) so the Text
+// resolver can compute the base-vs-override fallback the same way the decoded
+// document snapshot would.
+function makeLocalizedRoot(children: SnapshotNode[], defaultLocale = "en"): SnapshotNode {
+  return {
+    type: "root",
+    id: "root",
+    parentId: null,
+    pos: "a0",
+    data: { name: "Paywall", localization: { defaultLocale, locales: [] } },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+function makeLocalizedTextNode(
+  id: string,
+  text: string,
+  localized: { locale: string; overrides: { text?: string } }[],
+): SnapshotNode {
+  return {
+    type: "text",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: { name: "Text", text, style: {}, states: [], localVariables: [], linkedVariables: [], localized },
+    children: [],
+  } as unknown as SnapshotNode;
+}
+
+describe("locale-aware text rendering", () => {
+  const snapshot = makeLocalizedRoot([
+    makeLocalizedTextNode("t-1", "Hello", [{ locale: "de", overrides: { text: "Hallo" } }]),
+  ]);
+
+  test("renders the base text when no locale is given", () => {
+    expect(renderPaywall(snapshot).html).toContain("Hello");
+    expect(renderPaywall(snapshot).html).not.toContain("Hallo");
+  });
+
+  test("renders the localized override for the active locale", () => {
+    const { html } = renderPaywall(snapshot, { locale: "de" });
+    expect(html).toContain("Hallo");
+    expect(html).not.toContain(">Hello<");
+  });
+
+  test("falls back to base for a locale with no override", () => {
+    expect(renderPaywall(snapshot, { locale: "fr" }).html).toContain("Hello");
+  });
+
+  test("embeds the locale in the hydration payload and re-renders it", () => {
+    const { html } = renderPaywallToHtml(snapshot, { locale: "de" });
+    expect(html).toContain('"locale":"de"');
+    expect(html).toContain('"snapshot":{"type":"root"');
+    // The SSR body already shows the resolved translation.
+    expect(html).toContain("Hallo");
+  });
+});
+
+const BASE_IMAGE_URL = "https://example.com/base.png";
+const DE_IMAGE_URL = "https://example.com/de.png";
+
+// Encode/decode round-trips through the real node data structs, so `localized`
+// entries carry the exact CRDT envelope (`{ id, pos, value }`) a decoded
+// document snapshot hands the renderer.
+function makeLocalizedImageViewNode(id: string): SnapshotNode {
+  const data = ViewNode.data.decode(
+    ViewNode.data.encode({
+      style: {
+        backgroundEnabled: true,
+        backgroundType: "image",
+        backgroundImage: { url: BASE_IMAGE_URL, resizeMode: "cover" },
+      },
+      localized: [
+        {
+          locale: "de",
+          overrides: { backgroundImage: { url: DE_IMAGE_URL, resizeMode: "contain" } },
+        },
+      ],
+    }),
+  );
+  return { type: "view", id, parentId: null, pos: "a0", data, children: [] } as unknown as SnapshotNode;
+}
+
+function makeLocalizedImageScreenNode(id: string): SnapshotNode {
+  const data = ScreenNode.data.decode(
+    ScreenNode.data.encode({
+      style: {
+        backgroundEnabled: true,
+        backgroundType: "image",
+        backgroundImage: { url: BASE_IMAGE_URL, resizeMode: "cover" },
+      },
+      localized: [
+        {
+          locale: "de",
+          overrides: { backgroundImage: { url: DE_IMAGE_URL, resizeMode: "cover" } },
+        },
+      ],
+    }),
+  );
+  return { type: "screen", id, parentId: null, pos: "a0", data, children: [] } as unknown as SnapshotNode;
+}
+
+function makeLocalizedPropComponentNode(id: string, contentHash: string): SnapshotNode {
+  return {
+    type: "component",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "Component",
+      componentSlug: "hero-card",
+      componentVersion: 1,
+      contentHash,
+      previewState: "default",
+      props: [
+        {
+          name: "title",
+          value: { type: "literal", value: { key: "string", value: "Base title" } },
+          localizedValues: [{ locale: "de", value: { key: "string", value: "Deutscher Titel" } }],
+        },
+      ],
+      actionBindings: [],
+    },
+    children: [],
+  } as unknown as SnapshotNode;
+}
+
+describe("locale-aware background images (real mimic snapshot)", () => {
+  const snapshot = makeLocalizedRoot([makeLocalizedImageViewNode("view-1")]);
+
+  test("renders the base image when no locale is given", () => {
+    const { html } = renderPaywall(snapshot);
+    expect(html).toContain(BASE_IMAGE_URL);
+    expect(html).not.toContain(DE_IMAGE_URL);
+  });
+
+  test("substitutes the whole localized image (url + resizeMode) for the active locale", () => {
+    const { html } = renderPaywall(snapshot, { locale: "de" });
+    expect(html).toContain(DE_IMAGE_URL);
+    expect(html).toContain("background-size:contain");
+    expect(html).not.toContain(BASE_IMAGE_URL);
+  });
+
+  test("falls back to the base image for a locale with no override", () => {
+    const { html } = renderPaywall(snapshot, { locale: "fr" });
+    expect(html).toContain(BASE_IMAGE_URL);
+    expect(html).not.toContain(DE_IMAGE_URL);
+  });
+
+  test("resolves a language-prefix match (de-AT → de) end-to-end", () => {
+    const { html } = renderPaywall(snapshot, { locale: "de-AT" });
+    expect(html).toContain(DE_IMAGE_URL);
+    expect(html).not.toContain(BASE_IMAGE_URL);
+  });
+
+  test("substitutes the localized image on the screen container", () => {
+    const screenSnapshot = makeLocalizedRoot([makeLocalizedImageScreenNode("screen-1")]);
+    const { html } = renderPaywall(screenSnapshot, { locale: "de" });
+    expect(html).toContain('data-node-id="screen-1"');
+    expect(html).toContain(DE_IMAGE_URL);
+    expect(html).not.toContain(BASE_IMAGE_URL);
+  });
+});
+
+describe("published-artifact locale resolution (renderPaywallToHtml)", () => {
+  const snapshot = makeLocalizedRoot([
+    makeLocalizedTextNode("t-1", "Hello", [{ locale: "de", overrides: { text: "Hallo" } }]),
+    makeLocalizedImageViewNode("view-1"),
+    makeLocalizedPropComponentNode("component-1", "hash-1"),
+  ]);
+
+  test("a forced locale resolves text + image in the SSR body and rides the payload", () => {
+    const { html } = renderPaywallToHtml(snapshot, { locale: "de" });
+
+    expect(html).toContain("Hallo");
+    expect(html).toContain(DE_IMAGE_URL);
+    expect(html).toContain('"locale":"de"');
+    // Preview trees are fixture-baked per contentHash+state, so localized PROP
+    // values surface through the component runtime, not the static tree — the
+    // payload must carry the `localizedValues` entries for it to resolve.
+    expect(html).toContain('"localizedValues"');
+    expect(html).toContain("Deutscher Titel");
+  });
+
+  test("the body-only render without a locale stays base content", () => {
+    const { html } = renderPaywall(snapshot);
+    expect(html).toContain("Hello");
+    expect(html).toContain(BASE_IMAGE_URL);
+    expect(html).not.toContain("Hallo");
+    expect(html).not.toContain(DE_IMAGE_URL);
+  });
+});
diff --git a/packages/paywall-renderer-preact/src/render.tsx b/packages/paywall-renderer-preact/src/render.tsx
new file mode 100644
index 000000000..857cdbd21
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/render.tsx
@@ -0,0 +1,136 @@
+import type { RenderResult, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import render from "preact-render-to-string";
+
+import type { ComponentArtifacts } from "./component-artifacts";
+import { Paywall } from "./components/paywall";
+import { generateDocument, type PaywallMetadata } from "./templates/document-template";
+import { generateRuntimeScript } from "./templates/runtime-script";
+
+/**
+ * Options for body-only paywall rendering.
+ */
+export interface RenderPaywallOptions {
+  /** Preview trees for the snapshot's component nodes (missing → placeholder). */
+  componentArtifacts?: ComponentArtifacts;
+  /**
+   * Locale to resolve localized content against. Omitted (or the document's
+   * default locale) renders the base props — byte-for-byte the unlocalized
+   * output.
+   */
+  locale?: string;
+}
+
+export function renderPaywall(
+  snapshot: SnapshotNode,
+  options: RenderPaywallOptions = {},
+): RenderResult {
+  const body = render(
+    <Paywall
+      componentArtifacts={options.componentArtifacts}
+      locale={options.locale}
+      snapshot={snapshot}
+    />,
+  );
+  const html = wrapInDocument(body);
+  return { html };
+}
+
+function wrapInDocument(body: string): string {
+  return `<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; }
+  </style>
+</head>
+<body>${body}</body>
+</html>`;
+}
+
+/**
+ * Options for HTML rendering with hydration support.
+ */
+export interface HtmlRenderOptions {
+  /** Include hydration script (default: true) */
+  hydrate?: boolean;
+  /** Include metadata comments (default: false) */
+  debug?: boolean;
+  /** Metadata to embed in the document */
+  metadata?: PaywallMetadata;
+  /** Preview trees for the snapshot's component nodes (missing → placeholder) */
+  componentArtifacts?: ComponentArtifacts;
+  /**
+   * Locale to resolve localized content against, threaded into the SSR render
+   * AND embedded in the hydration payload so the client re-render matches.
+   * Omitted (or the default locale) renders the base props unchanged.
+   */
+  locale?: string;
+}
+
+/**
+ * Result of HTML rendering.
+ */
+export interface HtmlRenderResult {
+  /** The complete HTML document */
+  html: string;
+  /** Size in bytes */
+  size: number;
+}
+
+/**
+ * Renders a paywall snapshot to a self-contained HTML document.
+ *
+ * This generates a complete HTML file that:
+ * - Contains pre-rendered HTML from SSR
+ * - Includes the htm/preact runtime for client-side hydration
+ * - Embeds the snapshot data (and component preview trees, when provided)
+ *   for re-rendering
+ * - Has no external dependencies
+ *
+ * `<` is escaped as `\u003c` in the embedded payload JSON so payload strings
+ * (e.g. preview-tree text) cannot close the `<script>` block.
+ *
+ * @param snapshot - The paywall snapshot to render
+ * @param options - Rendering options
+ * @returns The complete HTML document and its size
+ */
+export function renderPaywallToHtml(
+  snapshot: SnapshotNode,
+  options: HtmlRenderOptions = {},
+): HtmlRenderResult {
+  const { hydrate = true, metadata, componentArtifacts, locale } = options;
+
+  // Server-render the paywall to HTML
+  const body = render(
+    <Paywall componentArtifacts={componentArtifacts} locale={locale} snapshot={snapshot} />,
+  );
+
+  // Serialize the hydration payload. Bare snapshots stay the wire shape when
+  // there are no component artifacts so older payload consumers keep working;
+  // the hydration runtime detects both shapes. `<` only occurs inside JSON
+  // strings, where `\u003c` is an equivalent escape — JSON.parse round-trips
+  // it losslessly while keeping `</script>` out of the embedded block.
+  const useWrapper = componentArtifacts !== undefined || locale !== undefined;
+  const payloadJson = JSON.stringify(
+    useWrapper ? { componentArtifacts, locale, snapshot } : snapshot,
+  ).replace(/</g, "\\u003c");
+
+  // Generate the runtime script if hydration is enabled
+  const runtimeScript = hydrate ? generateRuntimeScript() : undefined;
+
+  // Generate the complete document
+  const html = generateDocument({
+    body,
+    metadata,
+    payloadJson,
+    runtimeScript,
+  });
+
+  return {
+    html,
+    size: new TextEncoder().encode(html).byteLength,
+  };
+}
diff --git a/packages/paywall-renderer-preact/src/runtime/hydrate.tsx b/packages/paywall-renderer-preact/src/runtime/hydrate.tsx
new file mode 100644
index 000000000..8c5a9c765
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/runtime/hydrate.tsx
@@ -0,0 +1,93 @@
+/**
+ * Client-side entry point for paywall rendering.
+ *
+ * This file is bundled by esbuild into a self-contained IIFE that:
+ * 1. Reads the serialized paywall data from the embedded script tag
+ * 2. Renders interactive Preact components into the paywall root element
+ *
+ * The resulting bundle is inlined into the paywall HTML output.
+ */
+
+import { render } from "preact";
+
+import { Paywall } from "../components/paywall";
+import { resolveRuntimeLocale } from "./runtime-locale";
+
+import type { ComponentArtifacts } from "../component-artifacts";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+interface HydrationPayload {
+  snapshot: SnapshotNode;
+  componentArtifacts: ComponentArtifacts | undefined;
+  locale: string | undefined;
+}
+
+/**
+ * Parses the embedded `__PAYWALL_DATA__` JSON. Artifact-carrying payloads
+ * wrap the snapshot (`{ snapshot, componentArtifacts }`); bare payloads are
+ * the single-root snapshot itself — detected by the top-level node `type`
+ * discriminant, which the wrapper shape never carries. The discriminant works
+ * for both the current nested node shape (`{type, data, children}`) and
+ * legacy flat payloads, since `type` stays at the node's top level in both.
+ */
+function parsePaywallData(raw: string): HydrationPayload | undefined {
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    // Malformed paywall data — leave the SSR'd HTML in place
+    return undefined;
+  }
+  if (typeof parsed !== "object" || parsed === null) {
+    return undefined;
+  }
+  if ("type" in parsed) {
+    return { componentArtifacts: undefined, locale: undefined, snapshot: parsed as SnapshotNode };
+  }
+  if ("snapshot" in parsed) {
+    const wrapper = parsed as {
+      snapshot: SnapshotNode;
+      componentArtifacts?: ComponentArtifacts;
+      locale?: string;
+    };
+    return {
+      componentArtifacts: wrapper.componentArtifacts,
+      locale: wrapper.locale,
+      snapshot: wrapper.snapshot,
+    };
+  }
+  return undefined;
+}
+
+function mountPaywall() {
+  const dataElement = document.getElementById("__PAYWALL_DATA__");
+  if (!dataElement?.textContent) {
+    return;
+  }
+
+  const root = document.getElementById("paywall-root");
+  if (!root) {
+    return;
+  }
+
+  const payload = parsePaywallData(dataElement.textContent);
+  if (!payload) {
+    return;
+  }
+
+  render(
+    <Paywall
+      componentArtifacts={payload.componentArtifacts}
+      locale={resolveRuntimeLocale(payload.locale)}
+      snapshot={payload.snapshot}
+    />,
+    root,
+  );
+}
+
+// Run when DOM is ready
+if (document.readyState === "loading") {
+  document.addEventListener("DOMContentLoaded", mountPaywall);
+} else {
+  mountPaywall();
+}
diff --git a/packages/paywall-renderer-preact/src/runtime/runtime-locale.test.ts b/packages/paywall-renderer-preact/src/runtime/runtime-locale.test.ts
new file mode 100644
index 000000000..e775699b4
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/runtime/runtime-locale.test.ts
@@ -0,0 +1,35 @@
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+import { resolveRuntimeLocale } from "./runtime-locale";
+
+// Tests run in a node environment (no `window`), so the SDK-injected config is
+// simulated by planting a minimal `window` global with the contract §7.1 shape.
+const testGlobal = globalThis as unknown as { window?: unknown };
+
+afterEach(() => {
+  delete testGlobal.window;
+});
+
+describe("resolveRuntimeLocale", () => {
+  test("prefers the SDK-injected runtime config locale over the payload locale", () => {
+    testGlobal.window = {
+      __VOIDHASH_PAYWALL__: { locale: "de", products: [], variables: {} },
+    };
+    expect(resolveRuntimeLocale("en")).toBe("de");
+  });
+
+  test("falls back to the payload locale when the injected config carries none", () => {
+    testGlobal.window = {
+      __VOIDHASH_PAYWALL__: { products: [], variables: {} },
+    };
+    expect(resolveRuntimeLocale("cs")).toBe("cs");
+  });
+
+  test("falls back to the payload locale when no config is injected", () => {
+    expect(resolveRuntimeLocale("cs")).toBe("cs");
+  });
+
+  test("returns undefined (base content) when neither source carries a locale", () => {
+    expect(resolveRuntimeLocale(undefined)).toBeUndefined();
+  });
+});
diff --git a/packages/paywall-renderer-preact/src/runtime/runtime-locale.ts b/packages/paywall-renderer-preact/src/runtime/runtime-locale.ts
new file mode 100644
index 000000000..5ba75b98a
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/runtime/runtime-locale.ts
@@ -0,0 +1,14 @@
+import { readInjectedConfig } from "@voidhash/paywalls";
+
+/**
+ * The locale a hydrating published artifact renders with, in precedence order:
+ * the SDK host's injected runtime config (`window.__VOIDHASH_PAYWALL__.locale`,
+ * read via `readInjectedConfig`) → the locale embedded in the
+ * hydration payload → `undefined` (base/default-locale content). Reading the
+ * injected config at mount keeps a published artifact locale-switchable by the
+ * SDK with zero server work; the SSR body stays default-locale and hydration
+ * re-renders with the resolved locale.
+ */
+export function resolveRuntimeLocale(payloadLocale: string | undefined): string | undefined {
+  return readInjectedConfig().locale ?? payloadLocale;
+}
diff --git a/packages/paywall-renderer-preact/src/templates/document-template.ts b/packages/paywall-renderer-preact/src/templates/document-template.ts
new file mode 100644
index 000000000..47eba7910
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/templates/document-template.ts
@@ -0,0 +1,62 @@
+/**
+ * HTML document template for self-contained paywall output.
+ */
+
+export interface DocumentTemplateOptions {
+  /** The pre-rendered HTML body content */
+  body: string;
+  /**
+   * The JSON-serialized hydration payload: a bare snapshot, or
+   * `{ snapshot, componentArtifacts }` when component preview trees are
+   * embedded.
+   */
+  payloadJson: string;
+  /** The runtime script for hydration (if enabled) */
+  runtimeScript?: string;
+  /** Metadata to embed as HTML comment */
+  metadata?: PaywallMetadata;
+}
+
+export interface PaywallMetadata {
+  createdAt: string;
+  schemaVersion: number;
+  version: number;
+  status: string;
+}
+
+/**
+ * Generates a complete HTML document with the paywall content.
+ */
+export function generateDocument(options: DocumentTemplateOptions): string {
+  const { body, payloadJson, runtimeScript, metadata } = options;
+
+  const metadataComment = metadata
+    ? `<!--
+VOIDHASH_PAYWALL_METADATA
+${JSON.stringify(metadata)}
+END_VOIDHASH_PAYWALL_METADATA
+-->\n`
+    : "";
+
+  const scriptSection = runtimeScript
+    ? `
+  <script id="__PAYWALL_DATA__" type="application/json">${payloadJson}</script>
+  <script>${runtimeScript}</script>`
+    : "";
+
+  return `<!DOCTYPE html>
+${metadataComment}<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+  <style>
+    *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+    html, body { height: 100%; width: 100%; overflow: hidden; }
+    body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; }
+  </style>
+</head>
+<body>
+  <div id="paywall-root">${body}</div>${scriptSection}
+</body>
+</html>`;
+}
diff --git a/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
new file mode 100644
index 000000000..24fb8af44
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
@@ -0,0 +1,2 @@
+/** Generated by scripts/generate-runtime-bundle.mjs. */
+export const PAYWALL_RUNTIME_BUNDLE = "(()=>{var $n=Object.defineProperty;var wa=(e,t,r)=>t in e?$n(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Pa=(e,t)=>{for(var r in t)$n(e,r,{get:t[r],enumerable:!0})};var p=(e,t,r)=>wa(e,typeof t!=\"symbol\"?t+\"\":t,r);var $t,_,Yn,Va,Ne,Wn,Xn,Jn,Ur,jt,Ct,Zn,Kr,Fr,zr,Qn,Ut={},Ft=[],Na=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Wt=Array.isArray;function be(e,t){for(var r in t)e[r]=t[r];return e}function Gr(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function _a(e,t,r){var n,o,a,d={};for(a in t)a==\"key\"?n=t[a]:a==\"ref\"?o=t[a]:d[a]=t[a];if(arguments.length>2&&(d.children=arguments.length>3?$t.call(arguments,2):r),typeof e==\"function\"&&e.defaultProps!=null)for(a in e.defaultProps)d[a]===void 0&&(d[a]=e.defaultProps[a]);return Bt(e,d,n,o,null)}function Bt(e,t,r,n,o){var a={type:e,props:t,key:r,ref:n,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:o??++Yn,__i:-1,__u:0};return o==null&&_.vnode!=null&&_.vnode(a),a}function Q(e){return e.children}function Ht(e,t){this.props=e,this.context=t}function tt(e,t){if(t==null)return e.__?tt(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if((r=e.__k[t])!=null&&r.__e!=null)return r.__e;return typeof e.type==\"function\"?tt(e):null}function ka(e){if(e.__P&&e.__d){var t=e.__v,r=t.__e,n=[],o=[],a=be({},t);a.__v=t.__v+1,_.vnode&&_.vnode(a),Yr(e.__P,a,t,e.__n,e.__P.namespaceURI,32&t.__u?[r]:null,n,r??tt(t),!!(32&t.__u),o),a.__v=t.__v,a.__.__k[a.__i]=a,no(n,a,o),t.__e=t.__=null,a.__e!=r&&eo(a)}}function eo(e){if((e=e.__)!=null&&e.__c!=null)return e.__e=e.__c.base=null,e.__k.some(function(t){if(t!=null&&t.__e!=null)return e.__e=e.__c.base=t.__e}),eo(e)}function $r(e){(!e.__d&&(e.__d=!0)&&Ne.push(e)&&!zt.__r++||Wn!=_.debounceRendering)&&((Wn=_.debounceRendering)||Xn)(zt)}function zt(){try{for(var e,t=1;Ne.length;)Ne.length>t&&Ne.sort(Jn),e=Ne.shift(),t=Ne.length,ka(e)}finally{Ne.length=zt.__r=0}}function to(e,t,r,n,o,a,d,l,s,u,f){var c,m,y,N,R,w,P,V=n&&n.__k||Ft,L=t.length;for(s=Ia(r,t,V,s,L),c=0;c<L;c++)(y=r.__k[c])!=null&&(m=y.__i!=-1&&V[y.__i]||Ut,y.__i=c,w=Yr(e,y,m,o,a,d,l,s,u,f),N=y.__e,y.ref&&m.ref!=y.ref&&(m.ref&&Xr(m.ref,null,y),f.push(y.ref,y.__c||N,y)),R==null&&N!=null&&(R=N),(P=!!(4&y.__u))||m.__k===y.__k?(s=ro(y,s,e,P),P&&m.__e&&(m.__e=null)):typeof y.type==\"function\"&&w!==void 0?s=w:N&&(s=N.nextSibling),y.__u&=-7);return r.__e=R,s}function Ia(e,t,r,n,o){var a,d,l,s,u,f=r.length,c=f,m=0;for(e.__k=new Array(o),a=0;a<o;a++)(d=t[a])!=null&&typeof d!=\"boolean\"&&typeof d!=\"function\"?(typeof d==\"string\"||typeof d==\"number\"||typeof d==\"bigint\"||d.constructor==String?d=e.__k[a]=Bt(null,d,null,null,null):Wt(d)?d=e.__k[a]=Bt(Q,{children:d},null,null,null):d.constructor===void 0&&d.__b>0?d=e.__k[a]=Bt(d.type,d.props,d.key,d.ref?d.ref:null,d.__v):e.__k[a]=d,s=a+m,d.__=e,d.__b=e.__b+1,l=null,(u=d.__i=Aa(d,r,s,c))!=-1&&(c--,(l=r[u])&&(l.__u|=2)),l==null||l.__v==null?(u==-1&&(o>f?m--:o<f&&m++),typeof d.type!=\"function\"&&(d.__u|=4)):u!=s&&(u==s-1?m--:u==s+1?m++:(u>s?m--:m++,d.__u|=4))):e.__k[a]=null;if(c)for(a=0;a<f;a++)(l=r[a])!=null&&(2&l.__u)==0&&(l.__e==n&&(n=tt(l)),io(l,l));return n}function ro(e,t,r,n){var o,a;if(typeof e.type==\"function\"){for(o=e.__k,a=0;o&&a<o.length;a++)o[a]&&(o[a].__=e,t=ro(o[a],t,r,n));return t}e.__e!=t&&(n&&(t&&e.type&&!t.parentNode&&(t=tt(e)),r.insertBefore(e.__e,t||null)),t=e.__e);do t=t&&t.nextSibling;while(t!=null&&t.nodeType==8);return t}function Aa(e,t,r,n){var o,a,d,l=e.key,s=e.type,u=t[r],f=u!=null&&(2&u.__u)==0;if(u===null&&l==null||f&&l==u.key&&s==u.type)return r;if(n>(f?1:0)){for(o=r-1,a=r+1;o>=0||a<t.length;)if((u=t[d=o>=0?o--:a++])!=null&&(2&u.__u)==0&&l==u.key&&s==u.type)return d}return-1}function Kn(e,t,r){t[0]==\"-\"?e.setProperty(t,r??\"\"):e[t]=r==null?\"\":typeof r!=\"number\"||Na.test(t)?r:r+\"px\"}function Mt(e,t,r,n,o){var a,d;e:if(t==\"style\")if(typeof r==\"string\")e.style.cssText=r;else{if(typeof n==\"string\"&&(e.style.cssText=n=\"\"),n)for(t in n)r&&t in r||Kn(e.style,t,\"\");if(r)for(t in r)n&&r[t]==n[t]||Kn(e.style,t,r[t])}else if(t[0]==\"o\"&&t[1]==\"n\")a=t!=(t=t.replace(Zn,\"$1\")),d=t.toLowerCase(),t=d in e||t==\"onFocusOut\"||t==\"onFocusIn\"?d.slice(2):t.slice(2),e.l||(e.l={}),e.l[t+a]=r,r?n?r[Ct]=n[Ct]:(r[Ct]=Kr,e.addEventListener(t,a?zr:Fr,a)):e.removeEventListener(t,a?zr:Fr,a);else{if(o==\"http://www.w3.org/2000/svg\")t=t.replace(/xlink(H|:h)/,\"h\").replace(/sName$/,\"s\");else if(t!=\"width\"&&t!=\"height\"&&t!=\"href\"&&t!=\"list\"&&t!=\"form\"&&t!=\"tabIndex\"&&t!=\"download\"&&t!=\"rowSpan\"&&t!=\"colSpan\"&&t!=\"role\"&&t!=\"popover\"&&t in e)try{e[t]=r??\"\";break e}catch{}typeof r==\"function\"||(r==null||r===!1&&t[4]!=\"-\"?e.removeAttribute(t):e.setAttribute(t,t==\"popover\"&&r==1?\"\":r))}}function Gn(e){return function(t){if(this.l){var r=this.l[t.type+e];if(t[jt]==null)t[jt]=Kr++;else if(t[jt]<r[Ct])return;return r(_.event?_.event(t):t)}}}function Yr(e,t,r,n,o,a,d,l,s,u){var f,c,m,y,N,R,w,P,V,L,z,Pe,Qe,Rt,et,M=t.type;if(t.constructor!==void 0)return null;128&r.__u&&(s=!!(32&r.__u),a=[l=t.__e=r.__e]),(f=_.__b)&&f(t);e:if(typeof M==\"function\")try{if(P=t.props,V=M.prototype&&M.prototype.render,L=(f=M.contextType)&&n[f.__c],z=f?L?L.props.value:f.__:n,r.__c?w=(c=t.__c=r.__c).__=c.__E:(V?t.__c=c=new M(P,z):(t.__c=c=new Ht(P,z),c.constructor=M,c.render=Ca),L&&L.sub(c),c.state||(c.state={}),c.__n=n,m=c.__d=!0,c.__h=[],c._sb=[]),V&&c.__s==null&&(c.__s=c.state),V&&M.getDerivedStateFromProps!=null&&(c.__s==c.state&&(c.__s=be({},c.__s)),be(c.__s,M.getDerivedStateFromProps(P,c.__s))),y=c.props,N=c.state,c.__v=t,m)V&&M.getDerivedStateFromProps==null&&c.componentWillMount!=null&&c.componentWillMount(),V&&c.componentDidMount!=null&&c.__h.push(c.componentDidMount);else{if(V&&M.getDerivedStateFromProps==null&&P!==y&&c.componentWillReceiveProps!=null&&c.componentWillReceiveProps(P,z),t.__v==r.__v||!c.__e&&c.shouldComponentUpdate!=null&&c.shouldComponentUpdate(P,c.__s,z)===!1){t.__v!=r.__v&&(c.props=P,c.state=c.__s,c.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(Ve){Ve&&(Ve.__=t)}),Ft.push.apply(c.__h,c._sb),c._sb=[],c.__h.length&&d.push(c);break e}c.componentWillUpdate!=null&&c.componentWillUpdate(P,c.__s,z),V&&c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(y,N,R)})}if(c.context=z,c.props=P,c.__P=e,c.__e=!1,Pe=_.__r,Qe=0,V)c.state=c.__s,c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),Ft.push.apply(c.__h,c._sb),c._sb=[];else do c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),c.state=c.__s;while(c.__d&&++Qe<25);c.state=c.__s,c.getChildContext!=null&&(n=be(be({},n),c.getChildContext())),V&&!m&&c.getSnapshotBeforeUpdate!=null&&(R=c.getSnapshotBeforeUpdate(y,N)),Rt=f!=null&&f.type===Q&&f.key==null?oo(f.props.children):f,l=to(e,Wt(Rt)?Rt:[Rt],t,r,n,o,a,d,l,s,u),c.base=t.__e,t.__u&=-161,c.__h.length&&d.push(c),w&&(c.__E=c.__=null)}catch(Ve){if(t.__v=null,s||a!=null)if(Ve.then){for(t.__u|=s?160:128;l&&l.nodeType==8&&l.nextSibling;)l=l.nextSibling;a[a.indexOf(l)]=null,t.__e=l}else{for(et=a.length;et--;)Gr(a[et]);Wr(t)}else t.__e=r.__e,t.__k=r.__k,Ve.then||Wr(t);_.__e(Ve,t,r)}else a==null&&t.__v==r.__v?(t.__k=r.__k,t.__e=r.__e):l=t.__e=Ra(r.__e,t,r,n,o,a,d,s,u);return(f=_.diffed)&&f(t),128&t.__u?void 0:l}function Wr(e){e&&(e.__c&&(e.__c.__e=!0),e.__k&&e.__k.some(Wr))}function no(e,t,r){for(var n=0;n<r.length;n++)Xr(r[n],r[++n],r[++n]);_.__c&&_.__c(t,e),e.some(function(o){try{e=o.__h,o.__h=[],e.some(function(a){a.call(o)})}catch(a){_.__e(a,o.__v)}})}function oo(e){return typeof e!=\"object\"||e==null||e.__b>0?e:Wt(e)?e.map(oo):e.constructor!==void 0?null:be({},e)}function Ra(e,t,r,n,o,a,d,l,s){var u,f,c,m,y,N,R,w=r.props||Ut,P=t.props,V=t.type;if(V==\"svg\"?o=\"http://www.w3.org/2000/svg\":V==\"math\"?o=\"http://www.w3.org/1998/Math/MathML\":o||(o=\"http://www.w3.org/1999/xhtml\"),a!=null){for(u=0;u<a.length;u++)if((y=a[u])&&\"setAttribute\"in y==!!V&&(V?y.localName==V:y.nodeType==3)){e=y,a[u]=null;break}}if(e==null){if(V==null)return document.createTextNode(P);e=document.createElementNS(o,V,P.is&&P),l&&(_.__m&&_.__m(t,a),l=!1),a=null}if(V==null)w===P||l&&e.data==P||(e.data=P);else{if(a=V==\"textarea\"&&P.defaultValue!=null?null:a&&$t.call(e.childNodes),!l&&a!=null)for(w={},u=0;u<e.attributes.length;u++)w[(y=e.attributes[u]).name]=y.value;for(u in w)y=w[u],u==\"dangerouslySetInnerHTML\"?c=y:u==\"children\"||u in P||u==\"value\"&&\"defaultValue\"in P||u==\"checked\"&&\"defaultChecked\"in P||Mt(e,u,null,y,o);for(u in P)y=P[u],u==\"children\"?m=y:u==\"dangerouslySetInnerHTML\"?f=y:u==\"value\"?N=y:u==\"checked\"?R=y:l&&typeof y!=\"function\"||w[u]===y||Mt(e,u,y,w[u],o);if(f)l||c&&(f.__html==c.__html||f.__html==e.innerHTML)||(e.innerHTML=f.__html),t.__k=[];else if(c&&(e.innerHTML=\"\"),to(t.type==\"template\"?e.content:e,Wt(m)?m:[m],t,r,n,V==\"foreignObject\"?\"http://www.w3.org/1999/xhtml\":o,a,d,a?a[0]:r.__k&&tt(r,0),l,s),a!=null)for(u=a.length;u--;)Gr(a[u]);l&&V!=\"textarea\"||(u=\"value\",V==\"progress\"&&N==null?e.removeAttribute(\"value\"):N!=null&&(N!==e[u]||V==\"progress\"&&!N||V==\"option\"&&N!=w[u])&&Mt(e,u,N,w[u],o),u=\"checked\",R!=null&&R!=e[u]&&Mt(e,u,R,w[u],o))}return e}function Xr(e,t,r){try{if(typeof e==\"function\"){var n=typeof e.__u==\"function\";n&&e.__u(),n&&t==null||(e.__u=e(t))}else e.current=t}catch(o){_.__e(o,r)}}function io(e,t,r){var n,o;if(_.unmount&&_.unmount(e),(n=e.ref)&&(n.current&&n.current!=e.__e||Xr(n,null,t)),(n=e.__c)!=null){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(a){_.__e(a,t)}n.base=n.__P=null}if(n=e.__k)for(o=0;o<n.length;o++)n[o]&&io(n[o],t,r||typeof e.type!=\"function\");r||Gr(e.__e),e.__c=e.__=e.__e=void 0}function Ca(e,t,r){return this.constructor(e,r)}function ao(e,t,r){var n,o,a,d;t==document&&(t=document.documentElement),_.__&&_.__(e,t),o=(n=typeof r==\"function\")?null:r&&r.__k||t.__k,a=[],d=[],Yr(t,e=(!n&&r||t).__k=_a(Q,null,[e]),o||Ut,Ut,t.namespaceURI,!n&&r?[r]:o?null:t.firstChild?$t.call(t.childNodes):null,a,!n&&r?r:o?o.__e:t.firstChild,n,d),no(a,e,d)}function lo(e){function t(r){var n,o;return this.getChildContext||(n=new Set,(o={})[t.__c]=this,this.getChildContext=function(){return o},this.componentWillUnmount=function(){n=null},this.shouldComponentUpdate=function(a){this.props.value!=a.value&&n.forEach(function(d){d.__e=!0,$r(d)})},this.sub=function(a){n.add(a);var d=a.componentWillUnmount;a.componentWillUnmount=function(){n&&n.delete(a),d&&d.call(a)}}),r.children}return t.__c=\"__cC\"+Qn++,t.__=e,t.Provider=t.__l=(t.Consumer=function(r,n){return r.children(n)}).contextType=t,t}$t=Ft.slice,_={__e:function(e,t,r,n){for(var o,a,d;t=t.__;)if((o=t.__c)&&!o.__)try{if((a=o.constructor)&&a.getDerivedStateFromError!=null&&(o.setState(a.getDerivedStateFromError(e)),d=o.__d),o.componentDidCatch!=null&&(o.componentDidCatch(e,n||{}),d=o.__d),d)return o.__E=o}catch(l){e=l}throw e}},Yn=0,Va=function(e){return e!=null&&e.constructor===void 0},Ht.prototype.setState=function(e,t){var r;r=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=be({},this.state),typeof e==\"function\"&&(e=e(be({},r),this.props)),e&&be(r,e),e!=null&&this.__v&&(t&&this._sb.push(t),$r(this))},Ht.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),$r(this))},Ht.prototype.render=Q,Ne=[],Xn=typeof Promise==\"function\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,Jn=function(e,t){return e.__v.__b-t.__v.__b},zt.__r=0,Ur=Math.random().toString(8),jt=\"__d\"+Ur,Ct=\"__a\"+Ur,Zn=/(PointerCapture)$|Capture$/i,Kr=0,Fr=Gn(!1),zr=Gn(!0),Qn=0;function so(e){if(e==null)return;let t=\"value\"in e&&typeof e.value==\"object\"?e.value:e;if(!(t==null||typeof t.color!=\"string\"))return{color:t.color,position:t.position??0}}var uo={center:\"auto\",contain:\"contain\",cover:\"cover\",stretch:\"100% 100%\"};function co(e,t){let r=t.map(o=>`<stop offset='${o.position}' stop-color='${o.color}'/>`).join(\"\");return`<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${e.kind===\"radial\"?(()=>{let o=Math.hypot(e.endX-e.startX,e.endY-e.startY);return`<radialGradient id='g' cx='${e.startX}' cy='${e.startY}' r='${o}'>${r}</radialGradient>`})():`<linearGradient id='g' x1='${e.startX}' y1='${e.startY}' x2='${e.endX}' y2='${e.endY}'>${r}</linearGradient>`}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`}function rt(e){if(!e.backgroundEnabled)return{backgroundColor:\"transparent\"};let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(so).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let o=co(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(o)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:uo[n]}}return{backgroundColor:e.backgroundColor}}function Kt(e){let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(so).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let o=co(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(o)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:uo[n]}}return e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor}}function g(e){return e===0?\"0\":`${e}px`}function $e(e){return e===\"auto\"||e===void 0?\"auto\":g(e)}function nt(e){let t={alignItems:e.alignItems,boxSizing:\"border-box\",display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:$e(e.height),justifyContent:e.justifyContent,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),position:e.position??\"relative\",width:$e(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),Object.assign(t,rt(e)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),t.borderTopLeftRadius=g(e.borderTopLeftRadius??0),t.borderTopRightRadius=g(e.borderTopRightRadius??0),t.borderBottomRightRadius=g(e.borderBottomRightRadius??0),t.borderBottomLeftRadius=g(e.borderBottomLeftRadius??0),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Gt(e,{horizontal:t,showsScrollIndicator:r}){let n=nt(e);return n.minHeight??(n.minHeight=0),n.minWidth??(n.minWidth=0),n.WebkitOverflowScrolling=\"touch\",t?(n.flexDirection=\"row\",n.overflowX=\"auto\",n.overflowY=\"hidden\"):(n.overflowX=\"hidden\",n.overflowY=\"auto\"),r||(n.scrollbarWidth=\"none\"),n}function Yt(e){return{fill:e.fillEnabled?e.fillColor:\"none\",fillRule:e.fillRule,fillOpacity:e.fillOpacity,stroke:e.strokeEnabled?e.strokeColor:\"none\",strokeWidth:e.strokeWidth,strokeOpacity:e.strokeOpacity,strokeLinecap:e.strokeLinecap,strokeLinejoin:e.strokeLinejoin,opacity:e.opacity}}function Xt(e){let t={boxSizing:\"border-box\",height:\"100vh\",overflow:\"hidden\",width:\"100vw\"};return Object.assign(t,rt(e)),t}function Jt(e){return{alignItems:e.alignItems,display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:\"100vh\",justifyContent:e.justifyContent,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),width:\"100vw\"}}function Zt(e){let t={boxSizing:\"border-box\",display:e.display===\"none\"?\"none\":\"block\",height:$e(e.height),marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,position:\"relative\",width:$e(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Qt(e){let t={color:e.color,display:e.display,fontSize:g(e.fontSize),fontWeight:e.fontWeight,letterSpacing:g(e.letterSpacing),lineHeight:e.lineHeight,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,position:e.position??\"relative\",textAlign:e.textAlign};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Jr(e){let t={stores:new Map,parents:new Map};return fo(e,null,t),t}function fo(e,t,r){r.parents.set(e.id,t),po(e,r.stores);for(let n of e.children)fo(n,e.id,r)}function er(e,t,r,n){let o=new Set,a=r;for(;a!==null&&!o.has(a);){if(o.add(a),t(a)?.has(n))return a;a=e.get(a)??null}}function Zr(e,t,r){return{get:n=>{let o=er(e,t,r,n);if(o!==void 0)return t(o)?.get(n)}}}function po(e,t){let r=e.data;if(r!==void 0&&\"localVariables\"in r&&r.localVariables.length>0){let n=new Map,o=new Map;for(let a of r.localVariables){let d=a.value;d?.id===void 0||d.value===void 0||(n.set(d.id,d.value),n.set(a.id,d.value),o.set(a.id,d.id),o.set(d.id,a.id))}n.size>0&&t.set(e.id,{store:n,aliases:o})}for(let n of e.children)po(n,t)}function ho(e){if(e)return typeof e==\"object\"&&e!==null&&\"id\"in e&&\"value\"in e&&!(\"type\"in e)?e.value:e}function tr(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.some(r=>{let n=ho(r);return n?qa(n,t):!1})}function qa(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.every(r=>{let n=ho(r);return n?Ea(n,t):!1})}function mo(e,t){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}function yo(e){switch(e.key){case\"boolean\":return e.value??!1;case\"number\":return e.value??0;case\"string\":return e.value??\"\";case\"product\":return e.value?.productId??\"\";default:return\"\"}}function Ea(e,t){if(!e?.value?.left||!e?.value?.right)return!1;let r=mo(e.value.left,t),n=mo(e.value.right,t);if(r===void 0||n===void 0)return!1;let o=yo(r),a=yo(n);switch(e.type){case\"equals\":return o===a;case\"not-equals\":return o!==a;case\"greater-than\":return o>a;case\"greater-than-or-equal\":return o>=a;case\"less-than\":return o<a;case\"less-than-or-equal\":return o<=a;default:return!1}}function Qr(e,t,r){let n={...e};for(let o of t){let a=o.value;if(!(!a?.condition||!a.overrides)&&tr(a.condition,r)){let d=a.overrides.style;if(d)for(let l of Object.keys(d))d[l]!==void 0&&(n[l]=d[l])}}return n}function en(e,t,r){let n;for(let o of t){let a=o.value;if(!(!a?.condition||!a.overrides)&&tr(a.condition,r)){let d=\"actions\"in a.overrides?a.overrides.actions:void 0;if(d)for(let l of d){let s=\"value\"in l?l.value:l;s&&s.interactionId===e&&(n=s.action)}}}return n}function Da(e,t){if(e?.type){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}}function La(e,t){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(!e.variableId)return;let r=t.get(e.variableId);if(r?.key===\"product\")return r.value?.productId}function tn(e,t,r){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let n=e.payload;if(!n?.newValue||!n.variableId)break;let o=Da(n.newValue,t);o!==void 0&&r.onSetVariable(n.variableId,o);break}case\"close-paywall\":r.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let n=La(e.payload,t);n!==void 0&&r.onPurchaseProduct(n);break}}}function Oa(e,t){switch(t.key){case\"string\":return typeof e==\"string\"?{key:\"string\",value:e}:void 0;case\"number\":return typeof e==\"number\"?{key:\"number\",value:e}:void 0;case\"boolean\":return typeof e==\"boolean\"?{key:\"boolean\",value:e}:void 0;case\"product\":return typeof e==\"string\"||typeof e==\"number\"||typeof e==\"boolean\"?{key:\"product\",value:{productId:String(e)}}:void 0;default:return}}function Ma(e,t,r,n){if(!e?.type)return;if(e.type===\"literal\")return e.value;if(e.type===\"variable-reference\")return!e.value||!(\"id\"in e.value)||!e.value.id?void 0:r.get(e.value.id);if(!e.value||!(\"field\"in e.value)||!e.value.field)return;let o=t?.[e.value.field];if(o===void 0)return;let a=r.get(n);if(a!==void 0)return Oa(o,a)}function ja(e,t,r){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(e.type===\"variable-reference\"){if(!e.variableId)return;let o=r.get(e.variableId);return o?.key===\"product\"?o.value?.productId:void 0}if(!e.field)return;let n=t?.[e.field];return typeof n==\"string\"?n:void 0}function rn(e,t,r,n){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let o=e.payload;if(!o?.newValue||!o.variableId)break;let a=Ma(o.newValue,t,r,o.variableId);a!==void 0&&n.onSetVariable(o.variableId,a);break}case\"close-paywall\":n.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let o=ja(e.payload,t,r);o!==void 0&&n.onPurchaseProduct(o);break}}}var nn={alignItems:\"stretch\",boxSizing:\"border-box\",display:\"flex\",flexBasis:\"auto\",flexDirection:\"column\",flexShrink:0,margin:0,minHeight:0,minWidth:0,padding:0,position:\"relative\"},Ba={boxSizing:\"border-box\",display:\"block\",margin:0,padding:0,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"},Ha={boxSizing:\"border-box\",display:\"block\"},Ua={...nn,cursor:\"pointer\",touchAction:\"manipulation\",userSelect:\"none\"},Fa={...nn,overflowX:\"hidden\",overflowY:\"auto\",WebkitOverflowScrolling:\"touch\"},za={image:Ha,pressable:Ua,scroll:Fa,text:Ba,view:nn},bo=[\"flex\",\"gap\"],$a=[\"backgroundType\",\"backgroundGradient\",\"backgroundImage\"],Wa=new Set([...bo,...$a]),Ka=new Set([\"aspectRatio\",\"flex\",\"flexGrow\",\"flexShrink\",\"fontWeight\",\"opacity\",\"zIndex\"]);function go(e,t){return typeof t==\"number\"&&!Ka.has(e)?t===0?0:`${t}px`:t}var Ga={center:\"none\",contain:\"contain\",cover:\"cover\",stretch:\"fill\"};function rr(e){return Ga[e??\"cover\"]}function on(e){if(!e)return{};let t=[];return(e.x!==void 0||e.y!==void 0)&&t.push(`translate3d(${e.x??0}px, ${e.y??0}px, 0)`),e.rotate!==void 0&&t.push(`rotate(${e.rotate}deg)`),e.scale!==void 0&&t.push(`scale(${e.scale})`),e.scaleX!==void 0&&t.push(`scaleX(${e.scaleX})`),e.scaleY!==void 0&&t.push(`scaleY(${e.scaleY})`),{...e.opacity===void 0?{}:{opacity:e.opacity},...e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor},...t.length===0?{}:{transform:t.join(\" \")},...e.transformOrigin===void 0?{}:{transformOrigin:`${e.transformOrigin.x*100}% ${e.transformOrigin.y*100}%`}}}function nr(e,t,r){let n={...za[t]},o=(d,l)=>{delete n[d],n[d]=go(d,l)};for(let d of bo){let l=e[d];l!==void 0&&(n[d]=go(d,l))}for(let[d,l]of Object.entries(e))l===void 0||Wa.has(d)||typeof l!=\"string\"&&typeof l!=\"number\"||o(d,l);return(e.borderTopWidth!==void 0||e.borderRightWidth!==void 0||e.borderBottomWidth!==void 0||e.borderLeftWidth!==void 0||e.borderColor!==void 0)&&e.borderStyle===void 0&&(n.borderStyle=\"solid\"),(e.backgroundType===\"gradient\"||e.backgroundType===\"image\")&&(delete n.backgroundColor,Object.assign(n,Kt({backgroundColor:typeof e.backgroundColor==\"string\"?e.backgroundColor:void 0,backgroundType:e.backgroundType,backgroundGradient:e.backgroundGradient,backgroundImage:e.backgroundImage}))),Object.assign(n,on(r)),n}var qt,A,an,vo,ir=0,_o=[],C=_,So=C.__b,To=C.__r,xo=C.diffed,wo=C.__c,Po=C.unmount,Vo=C.__;function ln(e,t){C.__h&&C.__h(A,e,ir||t),ir=0;var r=A.__H||(A.__H={__:[],__h:[]});return e>=r.__.length&&r.__.push({}),r.__[e]}function ko(e){return ir=1,Ya(Ao,e)}function Ya(e,t,r){var n=ln(qt++,2);if(n.t=e,!n.__c&&(n.__=[r?r(t):Ao(void 0,t),function(l){var s=n.__N?n.__N[0]:n.__[0],u=n.t(s,l);s!==u&&(n.__N=[u,n.__[1]],n.__c.setState({}))}],n.__c=A,!A.__f)){var o=function(l,s,u){if(!n.__c.__H)return!0;var f=n.__c.__H.__.filter(function(m){return m.__c});if(f.every(function(m){return!m.__N}))return!a||a.call(this,l,s,u);var c=n.__c.props!==l;return f.some(function(m){if(m.__N){var y=m.__[0];m.__=m.__N,m.__N=void 0,y!==m.__[0]&&(c=!0)}}),a&&a.call(this,l,s,u)||c};A.__f=!0;var a=A.shouldComponentUpdate,d=A.componentWillUpdate;A.componentWillUpdate=function(l,s,u){if(this.__e){var f=a;a=void 0,o(l,s,u),a=f}d&&d.call(this,l,s,u)},A.shouldComponentUpdate=o}return n.__N||n.__}function j(e,t){var r=ln(qt++,7);return Za(r.__H,t)&&(r.__=e(),r.__H=t,r.__h=e),r.__}function ee(e,t){return ir=8,j(function(){return e},t)}function Io(e){var t=A.context[e.__c],r=ln(qt++,9);return r.c=e,t?(r.__==null&&(r.__=!0,t.sub(A)),t.props.value):e.__}function Xa(){for(var e;e=_o.shift();){var t=e.__H;if(e.__P&&t)try{t.__h.some(or),t.__h.some(dn),t.__h=[]}catch(r){t.__h=[],C.__e(r,e.__v)}}}C.__b=function(e){A=null,So&&So(e)},C.__=function(e,t){e&&t.__k&&t.__k.__m&&(e.__m=t.__k.__m),Vo&&Vo(e,t)},C.__r=function(e){To&&To(e),qt=0;var t=(A=e.__c).__H;t&&(an===A?(t.__h=[],A.__h=[],t.__.some(function(r){r.__N&&(r.__=r.__N),r.u=r.__N=void 0})):(t.__h.some(or),t.__h.some(dn),t.__h=[],qt=0)),an=A},C.diffed=function(e){xo&&xo(e);var t=e.__c;t&&t.__H&&(t.__H.__h.length&&(_o.push(t)!==1&&vo===C.requestAnimationFrame||((vo=C.requestAnimationFrame)||Ja)(Xa)),t.__H.__.some(function(r){r.u&&(r.__H=r.u),r.u=void 0})),an=A=null},C.__c=function(e,t){t.some(function(r){try{r.__h.some(or),r.__h=r.__h.filter(function(n){return!n.__||dn(n)})}catch(n){t.some(function(o){o.__h&&(o.__h=[])}),t=[],C.__e(n,r.__v)}}),wo&&wo(e,t)},C.unmount=function(e){Po&&Po(e);var t,r=e.__c;r&&r.__H&&(r.__H.__.some(function(n){try{or(n)}catch(o){t=o}}),r.__H=void 0,t&&C.__e(t,r.__v))};var No=typeof requestAnimationFrame==\"function\";function Ja(e){var t,r=function(){clearTimeout(n),No&&cancelAnimationFrame(t),setTimeout(e)},n=setTimeout(r,35);No&&(t=requestAnimationFrame(r))}function or(e){var t=A,r=e.__c;typeof r==\"function\"&&(e.__c=void 0,r()),A=t}function dn(e){var t=A;e.__c=e.__(),A=t}function Za(e,t){return!e||e.length!==t.length||t.some(function(r,n){return r!==e[n]})}function Ao(e,t){return typeof t==\"function\"?t(e):t}var Qa=0;function b(e,t,r,n,o,a){t||(t={});var d,l,s=t;if(\"ref\"in s)for(l in s={},t)l==\"ref\"?d=t[l]:s[l]=t[l];var u={type:e,props:s,key:r,ref:d,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:--Qa,__i:-1,__u:0,__source:o,__self:a};if(typeof e==\"function\"&&(d=e.defaultProps))for(l in d)s[l]===void 0&&(s[l]=d[l]);return _.vnode&&_.vnode(u),u}var ed=new Map,Co=lo(null);function Ro(e){let t=JSON.stringify(e);window.ReactNativeWebView?window.ReactNativeWebView.postMessage(t):window.parent.postMessage(e,\"*\")}function qo({snapshot:e,componentArtifacts:t,locale:r,children:n}){let o=j(()=>Jr(e),[e]),a=(e.type===\"root\"?e.data.localization?.defaultLocale:void 0)??\"en\",[d,l]=ko(()=>{let w=new Map;for(let[P,{store:V}]of o.stores)w.set(P,V);return w}),s=j(()=>new Map,[o,d]),u=ee(w=>{let P=s.get(w);if(P)return P;let V=Zr(o.parents,L=>d.get(L),w);return s.set(w,V),V},[s,d,o]),f=ee((w,P,V)=>{l(L=>{let z=er(o.parents,Ve=>L.get(Ve),w,P);if(z===void 0)return L;let Pe=L.get(z);if(!Pe)return L;let Qe=new Map(Pe);Qe.set(P,V);let et=o.stores.get(z)?.aliases?.get(P);et&&Qe.set(et,V);let M=new Map(L);return M.set(z,Qe),M})},[o]),c=ee(()=>{Ro({type:\"paywall:close\"})},[]),m=ee(w=>{Ro({type:\"paywall:purchase\",productId:w})},[]),y=ee((w,P)=>{console.warn(`onSetVariable called directly for \"${w}\" without node context. Use the scoped callback from useInteractions instead.`)},[]),N=j(()=>({onClosePaywall:c,onPurchaseProduct:m,onSetVariable:y}),[c,m,y]),R=j(()=>({getNodeVariables:u,setNodeVariable:f,callbacks:N,componentArtifacts:t,locale:r,defaultLocale:a}),[u,f,N,t,r,a]);return b(Co.Provider,{value:R,children:n})}function te(){let e=Io(Co);return e||{getNodeVariables:()=>ed,setNodeVariable:()=>{},callbacks:{onClosePaywall:()=>{},onPurchaseProduct:()=>{},onSetVariable:()=>{}},componentArtifacts:void 0,locale:void 0,defaultLocale:\"en\"}}var td={alignSelf:\"flex-start\",backgroundColor:\"#18181b\",borderRadius:\"999px\",boxSizing:\"border-box\",color:\"#fafafa\",display:\"inline-flex\",fontFamily:\"inherit\",fontSize:\"11px\",fontWeight:600,lineHeight:\"16px\",padding:\"2px 8px\"};function Eo({props:e}){let t=typeof e.label==\"string\"?e.label:\"New\";return b(\"span\",{style:td,children:t})}var Do={\"sample-badge\":Eo};function Lo(e,t){let r={};for(let n of e){let o=n.value;if(!o?.name)continue;let a=o.value;if(a?.type){if(a.type===\"literal\"){a.value&&(r[o.name]=a.value.value);continue}if(a.type===\"variable-reference\"){if(!a.value||!(\"id\"in a.value)||!a.value.id)continue;let d=t.get(a.value.id);d!==void 0&&(r[o.name]=d.value)}}}return r}var sn={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontFamily:\"inherit\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",position:\"relative\",textAlign:\"center\"};function ar(e,t,r){return{...nr(e,t,r)}}function rd(e,t){if(!e)return;for(let n of[t,\"default\"]){let o=e[n];if(o)return o}let r=Object.keys(e)[0];return r===void 0?void 0:e[r]}function un({node:e,slot:t,fireAction:r}){switch(e.type){case\"view\":case\"scroll\":return b(\"div\",{style:ar(e.style,e.type,e.motion),children:e.children.map((n,o)=>b(un,{fireAction:r,node:n,slot:t},o))});case\"pressable\":{let n=e.action;return b(\"div\",{onClick:n===void 0?void 0:()=>r(n),style:ar(e.style,\"pressable\",e.motion),children:e.children.map((a,d)=>b(un,{fireAction:r,node:a,slot:t},d))})}case\"text\":return b(\"div\",{style:ar(e.style,\"text\",e.motion),children:e.text});case\"image\":return b(\"img\",{alt:\"\",src:e.src,style:{...ar(e.style,\"image\",e.motion),objectFit:rr(e.resizeMode)??\"cover\"}});case\"slot\":return b(Q,{children:t});case\"placeholder\":return b(\"div\",{style:sn,children:e.reason});default:return null}}function Oo({node:e,children:t}){let{getNodeVariables:r,setNodeVariable:n,callbacks:o,componentArtifacts:a}=te(),d=r(e.id),l=j(()=>({...o,onSetVariable:(m,y)=>{n(e.id,m,y)}}),[o,e.id,n]),s=ee((m,y)=>{let R=e.data.actionBindings.find(w=>w.value?.name===m)?.value?.action;R&&rn(R,y,d,l)},[e.data.actionBindings,d,l]);if(e.data.componentSource===\"builtin\"){let m=Do[e.data.componentSlug];if(!m)return b(\"div\",{\"data-node-id\":e.id,style:sn,children:`Component \"${e.data.componentSlug}\" preview unavailable`});let y=Lo(e.data.props,d);return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(m,{fireAction:s,props:y,children:t})})}let u=e.data.componentSource===\"local\"&&e.data.componentPath!==\"\",f=u?a?.localTrees?.[e.data.componentPath]:a?.trees[e.data.contentHash],c=rd(f,e.data.previewState);if(!c){let m=u?e.data.componentPath:e.data.componentSlug;return b(\"div\",{\"data-node-id\":e.id,style:sn,children:`Component \"${m}\" preview unavailable`})}return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(un,{fireAction:s,node:c.root,slot:t})})}function $(e,t,r){let{getNodeVariables:n}=te(),o=n(e);return j(()=>Qr(t,r,o),[t,r,o])}function Mo({node:e}){let t=$(e.id,e.data.style,e.data.states),r=Yt(t);return b(\"path\",{d:e.data.d,fill:r.fill,fillOpacity:r.fillOpacity,fillRule:r.fillRule,opacity:r.opacity,stroke:r.stroke,strokeLinecap:r.strokeLinecap,strokeLinejoin:r.strokeLinejoin,strokeOpacity:r.strokeOpacity,strokeWidth:r.strokeWidth,transform:e.data.transform,vectorEffect:\"non-scaling-stroke\"})}var v={InvalidCommand:\"invalid_command\",InvalidPath:\"invalid_path\",TypeMismatch:\"type_mismatch\",MissingField:\"missing_field\",MissingArrayItem:\"missing_array_item\",MissingTreeNode:\"missing_tree_node\",DuplicateArrayItemId:\"duplicate_array_item_id\",DuplicateArrayPos:\"duplicate_array_pos\",DuplicateTreeNodeId:\"duplicate_tree_node_id\",DuplicateTreePos:\"duplicate_tree_pos\",InvalidTreeParent:\"invalid_tree_parent\",TreeCycle:\"tree_cycle\",TreeNodeValueMustBeObject:\"tree_node_value_must_be_object\",ReservedIdentifier:\"reserved_identifier\"},cn=class extends Error{constructor(r,n=\"\"){super(n?`${r}: ${n}`:r);p(this,\"code\");this.name=\"CoreError\",this.code=r}},S=(e,t)=>new cn(e,t);var I=\"$root\";var re=e=>({kind:\"string\",value:e}),ot=e=>({kind:\"number\",value:e}),it=e=>({kind:\"boolean\",value:e}),ne=(e={})=>({kind:\"object\",fields:e}),fn=(e=[])=>({kind:\"array\",items:e}),pn=(e=[])=>({kind:\"tree\",nodes:e}),jo=e=>e?[...e]:[],k=e=>{switch(e.kind){case\"string\":case\"number\":case\"boolean\":return{...e};case\"object\":{let t={};for(let[r,n]of Object.entries(e.fields))t[r]=k(n);return{kind:\"object\",fields:t}}case\"array\":return{kind:\"array\",items:e.items.map(t=>({id:t.id,pos:t.pos,value:k(t.value)}))};case\"tree\":return{kind:\"tree\",nodes:e.nodes.map(t=>({id:t.id,parent:t.parent,pos:t.pos,value:k(t.value)}))}}};var dr=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,Bo=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,mn=(e,t)=>e.parent<t.parent?-1:e.parent>t.parent?1:Bo(e,t);var J=e=>{switch(e.kind){case\"string\":case\"boolean\":return;case\"number\":if(Number.isNaN(e.value)||!Number.isFinite(e.value))throw S(v.InvalidCommand,\"number must be finite\");return;case\"object\":for(let t of Object.values(e.fields))J(t);return;case\"array\":{let t=new Set,r=new Set;for(let n of e.items){if(t.has(n.id))throw S(v.DuplicateArrayItemId,\"duplicate array item id\");if(r.has(n.pos))throw S(v.DuplicateArrayPos,\"duplicate array position\");t.add(n.id),r.add(n.pos),J(n.value)}return}case\"tree\":{let t=new Set,r=new Map,n=new Map;for(let s of e.nodes){if(s.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(s.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(t.has(s.id))throw S(v.DuplicateTreeNodeId,\"duplicate tree node id\");t.add(s.id),r.set(s.id,s);let u=n.get(s.parent)??new Set;if(u.has(s.pos))throw S(v.DuplicateTreePos,\"duplicate tree position\");u.add(s.pos),n.set(s.parent,u),J(s.value)}for(let s of e.nodes)if(s.parent!==I&&!r.has(s.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");let o=new Set,a=new Set,d=s=>{if(o.has(s))throw S(v.TreeCycle,\"tree contains cycle\");if(a.has(s))return;o.add(s);let u=r.get(s);u&&u.parent!==I&&d(u.parent),o.delete(s),a.add(s)},l=[...r.keys()].sort();for(let s of l)d(s);return}}};var Uo=(e,t)=>{J(e);let r=k(e);for(let n of t)nd(r,{...n,path:jo(n.path)});return J(r),r},nd=(e,t)=>{switch(t.kind){case\"value.set\":od(e,t.path,t.value);return;case\"object.set\":id(e,t.path,t.key,t.value);return;case\"object.delete\":ad(e,t.path,t.key);return;case\"array.insert\":dd(e,t.path,t.item);return;case\"array.move\":ld(e,t.path,t.id,t.pos);return;case\"array.delete\":sd(e,t.path,t.id);return;case\"tree.insert\":ud(e,t.path,t.node);return;case\"tree.move\":cd(e,t.path,t.id,t.parent,t.pos);return;case\"tree.delete\":fd(e,t.path,t.id);return}},od=(e,t,r)=>{if(t.length===0){Ho(e,k(r));return}W(e,t,n=>{Ho(n,k(r))})},id=(e,t,r,n)=>{if(!r)throw S(v.InvalidCommand,\"object.set requires key and value\");W(e,t,o=>{if(o.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");o.fields[r]=k(n)})},ad=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"object.delete requires key\");W(e,t,n=>{if(n.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");if(!Object.hasOwn(n.fields,r))throw S(v.MissingField,\"object field does not exist\");delete n.fields[r]})},dd=(e,t,r)=>{W(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");for(let o of n.items){if(o.id===r.id)throw S(v.DuplicateArrayItemId,\"array item id already exists\");if(o.pos===r.pos)throw S(v.DuplicateArrayPos,\"array item position already exists\")}n.items.push({id:r.id,pos:r.pos,value:k(r.value)}),n.items.sort(dr)})},ld=(e,t,r,n)=>{if(!r||!n)throw S(v.InvalidCommand,\"array.move requires id and pos\");W(e,t,o=>{if(o.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let a=-1;for(let d=0;d<o.items.length;d+=1){let l=o.items[d];if(l?.id===r){a=d;continue}if(l?.pos===n)throw S(v.DuplicateArrayPos,\"array item position already exists\")}if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");o.items[a]={...o.items[a],pos:n},o.items.sort(dr)})},sd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"array.delete requires id\");W(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let o=Fo(n.items,r);if(o===-1)throw S(v.MissingArrayItem,\"array item does not exist\");n.items.splice(o,1)})},ud=(e,t,r)=>{W(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(r.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(r.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(Et(n.nodes,r.id)!==-1)throw S(v.DuplicateTreeNodeId,\"tree node id already exists\");if(!zo(n.nodes,r.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if($o(n.nodes,r.parent,r.pos,\"\"))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");n.nodes.push({id:r.id,parent:r.parent,pos:r.pos,value:k(r.value)}),n.nodes.sort(mn)})},cd=(e,t,r,n,o)=>{if(!r||!n||!o)throw S(v.InvalidCommand,\"tree.move requires id, parent, and pos\");W(e,t,a=>{if(a.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");let d=Et(a.nodes,r);if(d===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");if(!zo(a.nodes,n))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(n===r||pd(a.nodes,n,r))throw S(v.TreeCycle,\"tree move would create cycle\");if($o(a.nodes,n,o,r))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");a.nodes[d]={...a.nodes[d],parent:n,pos:o},a.nodes.sort(mn)})},fd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"tree.delete requires id\");W(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(Et(n.nodes,r)===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");let o=new Set([r]),a=!0;for(;a;){a=!1;for(let l of n.nodes)o.has(l.parent)&&!o.has(l.id)&&(o.add(l.id),a=!0)}let d=n.nodes.filter(l=>!o.has(l.id));n.nodes.splice(0,n.nodes.length,...d)})},W=(e,t,r)=>{if(t.length===0){r(e);return}let n=t[0],o=t.slice(1);switch(n.kind){case\"field\":if(e.kind!==\"object\")throw S(v.TypeMismatch,\"field path requires object\");if(!Object.hasOwn(e.fields,n.key))throw S(v.MissingField,\"field does not exist\");W(e.fields[n.key],o,r);return;case\"item\":if(e.kind!==\"array\")throw S(v.TypeMismatch,\"item path requires array\");{let a=Fo(e.items,n.id);if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");W(e.items[a].value,o,r)}return;case\"node\":if(e.kind!==\"tree\")throw S(v.TypeMismatch,\"node path requires tree\");{let a=Et(e.nodes,n.id);if(a===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");W(e.nodes[a].value,o,r)}return}},Ho=(e,t)=>{for(let r of Object.keys(e))delete e[r];Object.assign(e,t)},Fo=(e,t)=>e.findIndex(r=>r.id===t),Et=(e,t)=>e.findIndex(r=>r.id===t),zo=(e,t)=>t===I||Et(e,t)!==-1,$o=(e,t,r,n)=>e.some(o=>o.parent===t&&o.id!==n&&o.pos===r),pd=(e,t,r)=>{if(t===I)return!1;let n=new Map(e.map(a=>[a.id,a])),o=t;for(;;){let a=n.get(o);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;o=a.parent}};var yn=class{next(){let t=globalThis.crypto;if(t?.getRandomValues){let r=new Uint32Array(2);t.getRandomValues(r);let n=r[0]>>>5,o=r[1]>>>6;return(n*67108864+o)/9007199254740992}return Math.random()}},hn=class{constructor(t){p(this,\"charset\");p(this,\"random\");p(this,\"useJitter\");this.charset=t?.charset??Go(),this.random=t?.random,this.useJitter=t?.useJitter??!0}between(t,r){return this.useJitter?gd(t,r,this.charset,this.random??new yn):Yo(t,r,this.charset)}},md=e=>{if(e.chars.length<7)throw new Error(\"charSet must be at least 7 characters long\");if([...e.chars].sort().join(\"\")!==e.chars)throw new Error(\"charSet must be sorted\");let r={},n={};for(let s=0;s<e.chars.length;s+=1){let u=e.chars[s];r[u]=s,n[s]=u}let o=r[e.firstPositive],a=r[e.mostPositive],d=r[e.mostNegative];if(o===void 0)throw new Error(\"invalid firstPositive\");if(a===void 0)throw new Error(\"invalid mostPositive\");if(d===void 0)throw new Error(\"invalid mostNegative\");if(a-o<3)throw new Error(\"mostPositive must be at least 3 characters away from neutral\");if(o-d<3)throw new Error(\"mostNegative must be at least 3 characters away from neutral\");let l=e.jitterRange??Math.floor(Tn(e.chars.length,3)/5);return{chars:e.chars,byChar:r,byCode:n,length:e.chars.length,first:n[0],last:n[e.chars.length-1],firstPositive:e.firstPositive,mostPositive:e.mostPositive,firstNegative:n[o-1],mostNegative:e.mostNegative,jitterRange:l,paddingDict:Vd(l,e.chars.length)}},yd=md({chars:\"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\",firstPositive:\"a\",mostPositive:\"z\",mostNegative:\"A\"}),Go=()=>yd;var We=()=>new hn({charset:Go()});var hd=e=>`${e.firstPositive}${e.byCode[0]}`,Wo=(e,t)=>{lr(e,t)},Yo=(e,t,r)=>{if(e!==void 0&&Wo(e,r),t!==void 0&&Wo(t,r),e===void 0&&t===void 0)return hd(r);if(e===void 0)return bd(lr(t,r),r);if(t===void 0)return Xo(lr(e,r),r);if(e>=t)throw new Error(`${e} >= ${t}`);return vd(e,t,r)};var gd=(e,t,r,n)=>{let o=Yo(e,t,r),a=Td(o,t,r);return a>0?Sd(o,a,r,n):Jo(o,r,n)};var lr=(e,t)=>{let r=Zo(e,t),n=vn(r,t);if(n>e.length)throw new Error(`invalid order key length: ${e}`);return e.slice(0,n)},Xo=(e,t)=>{Qo(e,t);let[r,n]=ei(e,t),o=t.byCode[t.length-1];return[...n].some(a=>a!==o)?`${r}${oi(n,t)}`:ti(xd(r,t),\"lower\",t)},bd=(e,t)=>{Qo(e,t);let[r,n]=ei(e,t),o=t.byCode[0];return[...n].some(a=>a!==o)?`${r}${gn(n,t,!1)}`:ti(wd(r,t),\"upper\",t)},vd=(e,t,r)=>{let[n,o]=ur(e,t,\"end\",r.first),a=bn(n,o,r);a===1&&(n=`${n}${r.first}`,a=r.length);let d=ri(Math.floor(a/2),r);return Sn(n,d,r)},Jo=(e,t,r)=>{let n=r.next();if(n<0||n>=1)throw new Error(`random value out of range: ${n}`);return Sn(e,ri(Math.floor(n*t.jitterRange),t),t)},Sd=(e,t,r,n)=>Jo(`${e}${r.first.repeat(t)}`,r,n),Ko=(e,t)=>{let r=t.jitterRange-e;for(let[n,o]of Object.entries(t.paddingDict))if(o>r)return Number(n);return 0},Td=(e,t,r)=>{let n=lr(e,r),o=Xo(n,r),a=0;if(t!==void 0){let l=bn(e,t,r);l<r.jitterRange+1&&(a=Math.max(a,Ko(l,r)))}let d=bn(e,o,r);return d<r.jitterRange+1&&(a=Math.max(a,Ko(d,r))),a},Zo=(e,t)=>{if(e.length===0)return\"\";let r=0;if(e[0]===t.mostPositive)for(;r<e.length&&e[r]===t.mostPositive;)r+=1;if(e[0]===t.mostNegative)for(;r<e.length&&e[r]===t.mostNegative;)r+=1;return r>=e.length?e:e.slice(0,r+1)},sr=(e,t,r)=>{if(e.length===0)return 0;let n=e[0];if(n>r.mostPositive||n<r.mostNegative)throw new Error(\"invalid firstChar on key\");return n===r.mostPositive&&t===\"positive\"?_e(n,r.mostNegative,r)+1+sr(e.slice(1),t,r):n===r.mostNegative&&t===\"negative\"?_e(n,r.mostPositive,r)+1+sr(e.slice(1),t,r):t===\"positive\"?_e(n,r.mostNegative,r)+2:_e(n,r.mostPositive,r)+2},vn=(e,t)=>{if(e.length===0)throw new Error(\"head cannot be empty\");let r=e[0];if(r>t.mostPositive||r<t.mostNegative)throw new Error(\"invalid firstChar on key\");return r===t.mostPositive?_e(r,t.firstPositive,t)+1+sr(e.slice(1),\"positive\",t):r===t.mostNegative?_e(r,t.firstNegative,t)+1+sr(e.slice(1),\"negative\",t):r>=t.firstPositive?_e(r,t.firstPositive,t)+2:_e(r,t.firstNegative,t)+2},Qo=(e,t)=>{if(vn(e,t)!==e.length)throw new Error(`invalid integer length: ${e}`)},ei=(e,t)=>{let r=Zo(e,t);return[r,e.slice(r.length)]},xd=(e,t)=>{let r=e>=t.firstPositive,n=oi(e,t),o=e.at(-1)===t.mostPositive,a=n.at(-1)===t.mostPositive;return r&&a?`${n}${t.mostNegative}`:!r&&o?e.slice(0,-1):n},wd=(e,t)=>{let r=e>=t.firstPositive,n=e.at(-1)===t.mostNegative;return r&&n?gn(e.slice(0,-1),t,!1):!r&&n?`${e}${t.mostPositive}`:gn(e,t,!1)},ti=(e,t,r)=>{let n=vn(e,r),o=t===\"upper\"?r.last:r.first;return`${e}${o.repeat(n-e.length)}`},_e=(e,t,r)=>{let n=r.byChar[e],o=r.byChar[t];if(n===void 0||o===void 0)throw new Error(\"invalid character in distance calculation\");return Math.abs(n-o)},ur=(e,t,r,n)=>{let o=Math.max(e.length,t.length);return r===\"start\"?[n.repeat(o-e.length)+e,n.repeat(o-t.length)+t]:[e+n.repeat(o-e.length),t+n.repeat(o-t.length)]},ri=(e,t)=>{if(e===0)return t.byCode[0];let r=\"\",n=e;for(;n>0;)r=`${t.byCode[n%t.length]}${r}`,n=Math.floor(n/t.length);return r},Pd=(e,t)=>{let r=0;for(let n=0;n<e.length;n+=1){let o=e.length-n-1;r+=t.byChar[e[n]]*Tn(t.length,o)}return r},Sn=(e,t,r)=>{let[n,o]=ur(e,t,\"start\",r.first),a=[],d=0;for(let l=n.length-1;l>=0;l-=1){let s=r.byChar[n[l]]+r.byChar[o[l]]+d;d=Math.floor(s/r.length),a.push(r.byCode[s%r.length])}return d>0&&a.push(r.byCode[d]),a.reverse().join(\"\")},ni=(e,t,r,n)=>{let[o,a]=ur(e,t,\"start\",r.first),d=[],l=0;for(let u=o.length-1;u>=0;u-=1){let f=r.byChar[o[u]],c=r.byChar[a[u]]+l;f<c?(l=1,f+=r.length):l=0,d.push(r.byCode[f-c])}if(l>0)throw new Error(\"subtraction result is negative\");let s=d.reverse().join(\"\");return n?s.replace(new RegExp(`^${r.first}+`),\"\")||r.first:s},oi=(e,t)=>Sn(e,t.byCode[1],t),gn=(e,t,r)=>ni(e,t.byCode[1],t,r),bn=(e,t,r)=>{let[n,o]=ur(e,t,\"end\",r.first),[a,d]=n>o?[o,n]:[n,o];return Pd(ni(d,a,r,!0),r)};function Vd(e,t){let r={};for(let n=0;n<100;n+=1){let o=Tn(t,n);if(r[n]=o,o>e)break}return r}function Tn(e,t){let r=1;for(let n=0;n<t;n+=1)r*=e;return r}var T={InvalidSchema:\"invalid_schema\",MissingRequired:\"missing_required\",TypeMismatch:\"type_mismatch\",LiteralMismatch:\"literal_mismatch\",ValidatorFailed:\"validator_failed\",UnionNoMatch:\"union_no_match\",EitherNoMatch:\"either_no_match\",TreeInvalidRootType:\"tree_invalid_root_type\",TreeInvalidChildType:\"tree_invalid_child_type\",TreeUnknownVariant:\"tree_unknown_variant\"},cr=class extends Error{constructor(r,n=\"\",o){super(n?`${r}: ${n}`:r);p(this,\"code\");p(this,\"valuePath\");p(this,\"schemaPath\");this.name=\"SchemaError\",this.code=r,this.valuePath=o?.valuePath??[],this.schemaPath=o?.schemaPath??[]}},x=(e,t,r)=>new cr(e,t,r),ii=e=>e instanceof cr;var B=(e,t)=>x(T.InvalidSchema,t,{valuePath:[],schemaPath:e}),Z=(e,t,r)=>{if(typeof e!=\"object\"||e===null||Array.isArray(e))throw B(t,r);return e},ve=(e,t,r)=>{if(typeof e!=\"string\")throw B(t,r);return e},xn=(e,t)=>{if(typeof e!=\"number\"||Number.isNaN(e)||!Number.isFinite(e))throw B(t,\"validator value must be a finite number\");return e};var _d=(e,t)=>{if(e!==void 0){if(typeof e!=\"string\")throw B(t,\"value must be a string\");return e}},ai=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw B(t,\"string validators must be an array\");return e.map((r,n)=>kd(r,[...t,n]))}},di=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw B(t,\"number validators must be an array\");return e.map((r,n)=>Id(r,[...t,n]))}},li=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw B(t,\"array validators must be an array\");return e.map((r,n)=>Ad(r,[...t,n]))}},kd=(e,t)=>{let r=Z(e,t,\"string validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":case\"length\":return{kind:n,value:xn(r.value,[...t,\"value\"])};case\"regex\":return{kind:n,pattern:ve(r.pattern,[...t,\"pattern\"],\"regex pattern must be a string\"),flags:_d(r.flags,[...t,\"flags\"])};case\"email\":case\"url\":return{kind:n};default:throw B(t,`unknown string validator ${n}`)}},Id=(e,t)=>{let r=Z(e,t,\"number validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"min\":case\"max\":return{kind:n,value:xn(r.value,[...t,\"value\"])};case\"positive\":case\"negative\":case\"int\":return{kind:n};default:throw B(t,`unknown number validator ${n}`)}},Ad=(e,t)=>{let r=Z(e,t,\"array validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":return{kind:n,value:xn(r.value,[...t,\"value\"])};default:throw B(t,`unknown array validator ${n}`)}};var Dt=(e,t,r,n,o)=>{if(r.kind!==t)throw x(T.TypeMismatch,`expected ${e}, got ${r.kind}`,{valuePath:n,schemaPath:o})},fr=(e,t,r,n)=>(Dt(e,\"string\",t,r,n),t),pr=(e,t,r,n)=>(Dt(e,\"number\",t,r,n),t),mr=(e,t,r,n)=>(Dt(e,\"boolean\",t,r,n),t),yr=(e,t,r,n)=>(Dt(e,\"object\",t,r,n),t),si=(e,t,r,n)=>(Dt(e,\"array\",t,r,n),t);var O=(e,t,r)=>x(T.ValidatorFailed,e,{valuePath:t,schemaPath:r}),q=e=>e===void 0?e:k(e),E=e=>e?{required:!0}:{};var ui={kind:\"array\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,element:r.parseSchema(e.element,[...n,\"element\"]),validators:li(e.validators,[...n,\"validators\"])},e.default,n),serialize:(e,t)=>({kind:\"array\",element:t(e.element),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(r=>({...r}))}:{}}),validate:(e,t,r,n,o)=>{let d=si(e.kind,t,n,o).items.map(l=>{let s=r.validate(e.element,l.value,[...n,{kind:\"item\",id:l.id}],[...o,\"element\"]);if(s===void 0)throw x(T.TypeMismatch,\"array item cannot sanitize to undefined\",{valuePath:[...n,{kind:\"item\",id:l.id}],schemaPath:o});return{id:l.id,pos:l.pos,value:s}});for(let l of e.validators??[])switch(l.kind){case\"minLength\":if(d.length<l.value)throw O(\"array shorter than minLength\",n,o);break;case\"maxLength\":if(d.length>l.value)throw O(\"array longer than maxLength\",n,o);break}return{kind:\"array\",items:d}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var ci={kind:\"boolean\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required},e.default,n),serialize:e=>({kind:\"boolean\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,o)=>k(mr(\"boolean\",t,n,o)),materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var fi={kind:\"either\",parse:(e,t,r,n)=>{if(!Array.isArray(e.variants))throw x(T.InvalidSchema,\"either variants must be an array\",{schemaPath:[...n,\"variants\"]});return r.normalizeDefault({kind:t.kind,required:t.required,variants:e.variants.map((o,a)=>r.parseSchema(o,[...n,\"variants\",a]))},e.default,n)},serialize:(e,t)=>({kind:\"either\",variants:e.variants.map(r=>t(r)),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,o)=>{let a=[];for(let d=0;d<e.variants.length;d+=1)try{let l=r.validate(e.variants[d],t,n,[...o,\"variants\",d]);if(l!==void 0)return l}catch(l){l instanceof Error&&a.push(l)}throw x(T.EitherNoMatch,a[0]?.message??\"no either variant matched\",{valuePath:n,schemaPath:o})},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var pi={kind:\"literal\",parse:(e,t,r,n)=>{let o=e.value;if(typeof o!=\"string\"&&typeof o!=\"number\"&&typeof o!=\"boolean\")throw B([...n,\"value\"],\"literal value must be string, number, or boolean\");return r.normalizeDefault({kind:t.kind,required:t.required,value:o},e.default,n)},serialize:e=>({kind:\"literal\",value:e.value,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,o)=>{let a=typeof e.value==\"string\"?\"string\":typeof e.value==\"number\"?\"number\":\"boolean\",d=a===\"string\"?fr(e.kind,t,n,o):a===\"number\"?pr(e.kind,t,n,o):mr(e.kind,t,n,o);if(d.value!==e.value)throw x(T.LiteralMismatch,\"literal value does not match schema\",{valuePath:n,schemaPath:o});return k(d)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var mi={kind:\"number\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:di(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"number\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,o)=>{let a=pr(e.kind,t,n,o);for(let d of e.validators??[])switch(d.kind){case\"min\":if(a.value<d.value)throw O(\"number smaller than min\",n,o);break;case\"max\":if(a.value>d.value)throw O(\"number larger than max\",n,o);break;case\"positive\":if(a.value<=0)throw O(\"number is not positive\",n,o);break;case\"negative\":if(a.value>=0)throw O(\"number is not negative\",n,o);break;case\"int\":if(!Number.isInteger(a.value))throw O(\"number is not an integer\",n,o);break}return k(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var yi={kind:\"object\",parse:(e,t,r,n)=>{let o=Z(e.fields,[...n,\"fields\"],\"object schema fields must be an object\"),a={};for(let[d,l]of Object.entries(o))a[d]=r.parseSchema(l,[...n,\"fields\",d]);return r.normalizeDefault({kind:t.kind,required:t.required,fields:a},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,o]of Object.entries(e.fields))r[n]=t(o);return{kind:\"object\",fields:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,o)=>{let a=yr(e.kind,t,n,o),d={};for(let[l,s]of Object.entries(e.fields)){let u=r.validate(s,a.fields[l],[...n,{kind:\"field\",key:l}],[...o,\"fields\",l]);u!==void 0&&(d[l]=u)}return ne(d)},materializeDefault:(e,t,r,n)=>{let o={},a=!1;for(let[d,l]of Object.entries(e.fields)){let s;try{s=t.materializeDefault(l,[...r,{kind:\"field\",key:d}],[...n,\"fields\",d])}catch(u){if(!e.required&&ii(u)&&u.code===T.MissingRequired)return;throw u}s!==void 0&&(o[d]=s,a=!0)}if(a)return ne(o);if(e.required)throw x(T.MissingRequired,\"required object has no defaultable fields\",{valuePath:r,schemaPath:n})}};var hi={kind:\"string\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:ai(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"string\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,o)=>{let a=fr(e.kind,t,n,o);for(let d of e.validators??[])switch(d.kind){case\"minLength\":if(a.value.length<d.value)throw O(\"string shorter than minLength\",n,o);break;case\"maxLength\":if(a.value.length>d.value)throw O(\"string longer than maxLength\",n,o);break;case\"length\":if(a.value.length!==d.value)throw O(\"string length mismatch\",n,o);break;case\"regex\":if(!new RegExp(d.pattern,d.flags).test(a.value))throw O(\"string does not match regex\",n,o);break;case\"email\":if(!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(a.value))throw O(\"invalid email\",n,o);break;case\"url\":try{new URL(a.value)}catch{throw O(\"invalid url\",n,o)}break}return k(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var gi={kind:\"tree\",parse:(e,t,r,n)=>{let o=ve(e.discriminator,[...n,\"discriminator\"],\"tree discriminator must be a string\"),a=e.roots;if(!Array.isArray(a)||!a.every(s=>typeof s==\"string\"))throw x(T.InvalidSchema,\"tree roots must be a string array\",{schemaPath:[...n,\"roots\"]});let d=Z(e.variants,[...n,\"variants\"],\"tree variants must be an object\"),l={};for(let[s,u]of Object.entries(d)){let f=Z(u,[...n,\"variants\",s],\"tree variant must be an object\"),c=r.parseSchema(f.schema,[...n,\"variants\",s,\"schema\"]);if(c.kind!==\"object\")throw x(T.InvalidSchema,\"tree variant schema must be an object schema\",{schemaPath:[...n,\"variants\",s,\"schema\"]});let m=c.fields[o];if(m?.kind!==\"literal\"||m.value!==s)throw x(T.InvalidSchema,\"tree discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",s,\"schema\",\"fields\",o]});let y=f.children;if(!Array.isArray(y)||!y.every(N=>typeof N==\"string\"))throw x(T.InvalidSchema,\"tree variant children must be a string array\",{schemaPath:[...n,\"variants\",s,\"children\"]});l[s]={schema:c,children:[...y]}}for(let s of a)if(!Object.hasOwn(l,s))throw x(T.InvalidSchema,`unknown tree root variant ${s}`,{schemaPath:[...n,\"roots\"]});for(let[s,u]of Object.entries(l))for(let f of u.children)if(!Object.hasOwn(l,f))throw x(T.InvalidSchema,`unknown tree child variant ${f}`,{schemaPath:[...n,\"variants\",s,\"children\"]});return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:o,roots:[...a],variants:l},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,o]of Object.entries(e.variants))r[n]={schema:t(o.schema),children:[...o.children]};return{kind:\"tree\",discriminator:e.discriminator,roots:[...e.roots],variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,o)=>{let a=(()=>{if(t.kind!==\"tree\")throw x(T.TypeMismatch,`expected ${e.kind}, got ${t.kind}`,{valuePath:n,schemaPath:o});return t})(),d=new Map,l=a.nodes.map(s=>{let u=s.value.fields[e.discriminator];if(u===void 0||u.kind!==\"string\")throw x(T.TreeUnknownVariant,\"tree node discriminator is missing or invalid\",{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"discriminator\"]});let f=e.variants[u.value];if(!f)throw x(T.TreeUnknownVariant,`unknown tree variant ${u.value}`,{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"variants\"]});let c=r.validate(f.schema,s.value,[...n,{kind:\"node\",id:s.id}],[...o,\"variants\",u.value,\"schema\"]);return d.set(s.id,u.value),{id:s.id,parent:s.parent,pos:s.pos,value:c}});for(let s of l){let u=d.get(s.id);if(s.parent===I){if(!e.roots.includes(u))throw x(T.TreeInvalidRootType,`tree root type ${u} is not allowed`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...o,\"roots\"]});continue}let f=d.get(s.parent);if(!f)throw x(T.TreeUnknownVariant,\"tree parent variant is missing\",{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:o});if(!e.variants[f].children.includes(u))throw x(T.TreeInvalidChildType,`tree child type ${u} is not allowed under ${f}`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...o,\"variants\",f,\"children\"]})}return{kind:\"tree\",nodes:l}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var bi={kind:\"union\",parse:(e,t,r,n)=>{let o=ve(e.discriminator,[...n,\"discriminator\"],\"union discriminator must be a string\"),a=Z(e.variants,[...n,\"variants\"],\"union variants must be an object\"),d={};for(let[l,s]of Object.entries(a)){let u=r.parseSchema(s,[...n,\"variants\",l]);if(u.kind!==\"object\")throw x(T.InvalidSchema,\"union variants must be object schemas\",{schemaPath:[...n,\"variants\",l]});let f=u.fields[o];if(f?.kind!==\"literal\"||f.value!==l)throw x(T.InvalidSchema,\"union discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",l,\"fields\",o]});d[l]=u}return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:o,variants:d},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,o]of Object.entries(e.variants))r[n]=t(o);return{kind:\"union\",discriminator:e.discriminator,variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,o)=>{let a=yr(e.kind,t,n,o),d=a.fields[e.discriminator];if(d===void 0||d.kind!==\"string\")throw x(T.UnionNoMatch,\"union discriminator is missing or invalid\",{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"discriminator\"]});let l=e.variants[d.value];if(!l)throw x(T.UnionNoMatch,`unknown union discriminator ${d.value}`,{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"variants\"]});return r.validate(l,a,n,[...o,\"variants\",d.value])},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var Rd={string:hi,number:mi,boolean:ci,literal:pi,object:yi,array:ui,union:bi,either:fi,tree:gi};var at=e=>Rd[e];var wn=(e,t,r)=>vi(e,t,r),vi=(e,t,r)=>\"default\"in e&&e.default!==void 0?k(e.default):at(e.kind).materializeDefault(e,Cd,t,r),Cd={materializeDefault:vi};var Pn=(e,t)=>(t!==void 0&&J(t),Si(e,t,[],[])),Si=(e,t,r,n)=>t===void 0?wn(e,r,n):at(e.kind).validate(e,t,qd,r,n),qd={validate:Si,materializeDefault:wn};var i={};Pa(i,{Array:()=>zd,ArrayPrimitive:()=>wr,Boolean:()=>Bd,BooleanPrimitive:()=>Sr,Either:()=>$d,EitherPrimitive:()=>Pr,Lazy:()=>Qd,LazyPrimitive:()=>Ir,Literal:()=>Hd,LiteralPrimitive:()=>Tr,Number:()=>jd,NumberPrimitive:()=>vr,PrimitiveError:()=>h,String:()=>Md,StringPrimitive:()=>br,Struct:()=>Fd,StructPrimitive:()=>xr,Tree:()=>Jd,TreeNode:()=>Yd,TreeNodePrimitive:()=>Nr,TreeNodeSelf:()=>Kd,TreePrimitive:()=>kr,Union:()=>Wd,UnionPrimitive:()=>Vr,commands:()=>Od,expectDefined:()=>Ed,hasOwn:()=>Dd,randomUuid:()=>dt,shortId:()=>Ke});var h=class extends Error{constructor(t){super(t),this.name=\"PrimitiveError\"}},Ed=(e,t)=>{if(e===void 0)throw new h(t);return e},Dd=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),dt=()=>{let e=globalThis.crypto?.randomUUID?.();if(typeof e==\"string\")return e;throw new h(\"crypto.randomUUID is not available in this runtime\")},Ti=\"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ\",Ld=10,Ke=(e=Ld)=>{let t=globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);if(!t)throw new h(\"crypto.getRandomValues is not available in this runtime\");let r=Ti.length,n=Math.floor(256/r)*r,o=\"\",a=new Uint8Array(e);for(;o.length<e;){t(a);for(let d=0;d<a.length&&o.length<e;d+=1){let l=a[d];l<n&&(o+=Ti[l%r])}}return o};var Od=(e,t,r)=>{J(t);let n=Pn(e.schema,t);if(n===void 0)throw new Error(\"Primitive root snapshot cannot be undefined\");let o=[],a=n,d=We(),l={current:()=>a,emit:s=>{s.length!==0&&(o.push(...s),a=Uo(n,o))},generator:{nextArrayItemId:()=>dt(),nextTreeNodeId:()=>Ke(),between:(s,u)=>d.between(s,u)}};return r(e.createProxy(l,[])),o};var D=(e,t)=>{let r=e;for(let n of t){if(r===void 0)return;switch(n.kind){case\"field\":if(r.kind!==\"object\")return;r=r.fields[n.key];break;case\"item\":if(r.kind!==\"array\")return;r=r.items.find(o=>o.id===n.id)?.value;break;case\"node\":if(r.kind!==\"tree\")return;r=r.nodes.find(o=>o.id===n.id)?.value;break}}return r},hr=(e,t)=>{let r=D(e,t);return r?.kind===\"object\"?r:void 0},H=(e,t)=>{let r=D(e,t);return r?.kind===\"array\"?r:void 0},K=(e,t)=>{let r=D(e,t);return r?.kind===\"tree\"?r:void 0},Se=e=>e?[...e.items].sort((t,r)=>t.pos.localeCompare(r.pos)):[],gr=(e,t)=>e?.items.find(r=>r.id===t),Vn=(e,t)=>{let r=Se(e),n=Lt(t,r.length);return n===void 0?void 0:r[n]},Nn=(e,t)=>e?.nodes.find(r=>r.id===t),ke=(e,t)=>e?e.nodes.filter(r=>r.parent===t).sort((r,n)=>r.pos.localeCompare(n.pos)):[];var Lt=(e,t)=>{let r=e<0?t+e:e;if(!(r<0||r>=t))return r},lt=(e,t)=>{if(t<0||t>e.length)throw new h(`Index ${t} is out of range`);return{lower:t===0?void 0:e[t-1],upper:t===e.length?void 0:e[t]}};var _n=(e,t,r)=>{if(!e||t===I)return!1;let n=new Map(e.nodes.map(a=>[a.id,a])),o=t;for(;;){let a=n.get(o);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;o=a.parent}},kn=(e,t)=>[...e,{kind:\"node\",id:t}];var br=class e{constructor(t){p(this,\"_tag\",\"StringPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"string\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:re(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}length(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"length\",value:t}]})}regex(t,r){return new e({...this.state,validators:[...this.state.validators,{kind:\"regex\",pattern:t.source,flags:t.flags}]})}email(){return new e({...this.state,validators:[...this.state.validators,{kind:\"email\"}]})}url(){return new e({...this.state,validators:[...this.state.validators,{kind:\"url\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"String value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return re(this.state.defaultValue);if(this.state.required)throw new h(\"String value is required\");return}if(typeof t!=\"string\")throw new h(\"Expected string input\");return re(t)}decode(t){return t?.kind===\"string\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Md=()=>new br({required:!1,defaultValue:void 0,validators:[]});var vr=class e{constructor(t){p(this,\"_tag\",\"NumberPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"number\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:ot(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"min\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"max\",value:t}]})}positive(){return new e({...this.state,validators:[...this.state.validators,{kind:\"positive\"}]})}negative(){return new e({...this.state,validators:[...this.state.validators,{kind:\"negative\"}]})}int(){return new e({...this.state,validators:[...this.state.validators,{kind:\"int\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Number value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return ot(this.state.defaultValue);if(this.state.required)throw new h(\"Number value is required\");return}if(typeof t!=\"number\"||globalThis.Number.isNaN(t)||!globalThis.Number.isFinite(t))throw new h(\"Expected finite number input\");return ot(t)}decode(t){return t?.kind===\"number\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},jd=()=>new vr({required:!1,defaultValue:void 0,validators:[]});var Sr=class e{constructor(t){p(this,\"_tag\",\"BooleanPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"boolean\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:it(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Boolean value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return it(this.state.defaultValue);if(this.state.required)throw new h(\"Boolean value is required\");return}if(typeof t!=\"boolean\")throw new h(\"Expected boolean input\");return it(t)}decode(t){return t?.kind===\"boolean\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Bd=()=>new Sr({required:!1,defaultValue:void 0});var In=e=>{switch(typeof e){case\"string\":return re(e);case\"number\":return ot(e);case\"boolean\":return it(e);default:throw new h(`Unsupported scalar value type: ${typeof e}`)}};var Tr=class e{constructor(t){p(this,\"_tag\",\"LiteralPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get literal(){return this.state.literal}get schema(){return{kind:\"literal\",value:this.state.literal,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:In(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){if(t!==this.state.literal)throw new h(\"Literal default must equal the literal value\");return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Literal value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Literal value is required\");return}if(r!==this.state.literal)throw new h(\"Input does not match the literal value\");return In(this.state.literal)}decode(t){if(t!==void 0&&\"value\"in t&&t.value===this.state.literal)return this.state.literal}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Hd=e=>new Tr({required:!1,defaultValue:void 0,literal:e});var xr=class e{constructor(t){p(this,\"_tag\",\"StructPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get fields(){return this.state.fields}get schema(){let t={};for(let[r,n]of Object.entries(this.state.fields))t[r]=n.schema;return{kind:\"object\",fields:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}extend(t){return new e({required:this.state.required,defaultValue:void 0,fields:{...this.state.fields,...t}})}partial(t){let r=t?.stripDefaults??!1,n={};for(let[o,a]of Object.entries(this.state.fields))n[o]=xi(a,r);return new e({required:this.state.required,defaultValue:void 0,fields:n})}optional(t){let r=t?Object.fromEntries(Object.entries(this.state.fields).map(([n,o])=>[n,xi(o,!0)])):this.state.fields;return new e({required:!1,defaultValue:t?void 0:this.state.defaultValue,fields:r})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Struct value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return this.encode(this.state.defaultValue);if(this.state.required)throw new h(\"Struct value is required\");return}if(typeof t!=\"object\"||t===null||Array.isArray(t))throw new h(\"Expected object input\");let r=t,n={};for(let[o,a]of Object.entries(this.state.fields)){let d=a.encodeOptional(r[o]);d!==void 0&&(n[o]=d)}return ne(n)}decode(t){if(t?.kind!==\"object\")return;let r={};for(let[n,o]of Object.entries(this.state.fields)){let a=o.decode(t.fields[n]);a!==void 0&&(r[n]=a)}return r}createProxy(t,r){let n={get:()=>this.decode(D(t.current(),r)),set:o=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(o)}])},update:o=>{Ud(this.state.fields,t,r,o)}};for(let[o,a]of Object.entries(this.state.fields))n[o]=a.createProxy(t,[...r,{kind:\"field\",key:o}]);return n}},Ud=(e,t,r,n)=>{for(let[o,a]of Object.entries(n)){let d=e[o];if(d){if(a===void 0){hr(t.current(),r)?.fields[o]!==void 0&&t.emit([{kind:\"object.delete\",path:r,key:o}]);continue}if(d._tag===\"StructPrimitive\"&&typeof a==\"object\"&&a!==null&&!Array.isArray(a)){d.createProxy(t,[...r,{kind:\"field\",key:o}]).update(a);continue}t.emit([{kind:\"object.set\",path:r,key:o,value:d.encode(a)}])}}},xi=(e,t)=>{let r=e.optional;return typeof r==\"function\"?r.call(e,t):e},Fd=e=>new xr({required:!1,defaultValue:void 0,fields:e});var wr=class e{constructor(t){p(this,\"_tag\",\"ArrayPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");p(this,\"encodedDefaultCache\");this.state=t}encodedDefault(){return this.encodedDefaultCache===void 0&&(this.encodedDefaultCache={value:this.state.defaultValue===void 0?void 0:this.encodeEntries(this.state.defaultValue)}),this.encodedDefaultCache.value}get element(){return this.state.element}get schema(){let t=this.encodedDefault();return{kind:\"array\",element:this.state.element.schema,...this.state.required?{required:!0}:{},...t!==void 0?{default:k(t)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}minLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}maxLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Array value is undefined\");return r}encodeOptional(t){if(t===void 0){let r=this.encodedDefault();if(r!==void 0)return k(r);if(this.state.required)throw new h(\"Array value is required\");return}if(!globalThis.Array.isArray(t))throw new h(\"Expected array input\");return this.encodeEntries(t)}decode(t){if(t?.kind===\"array\")return Se(t).map(r=>({id:r.id,pos:r.pos,value:this.state.element.decode(r.value)}))}createProxy(t,r){let n=d=>({get id(){return d},get pos(){return gr(H(t.current(),r),d)?.pos??\"\"},get value(){return a.state.element.createProxy(t,[...r,{kind:\"item\",id:d}])},get:()=>{let l=gr(H(t.current(),r),d);return this.state.element.decode(l?.value)},remove:()=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:l=>{wi(t,r,d,l)},moveToPos:l=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])}}),o=()=>Se(H(t.current(),r)).map(d=>n(d.id)),a=this;return{get length(){return Se(H(t.current(),r)).length},get:()=>this.decode(H(t.current(),r)),set:d=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(d)}])},push:d=>{let l=Se(H(t.current(),r)),s=l.length===0?void 0:l[l.length-1]?.pos,u=t.generator.nextArrayItemId(r),f=t.generator.between(s,void 0);return t.emit([{kind:\"array.insert\",path:r,item:{id:u,pos:f,value:this.state.element.encode(d)}}]),n(u)},insertAt:(d,l)=>{let s=Se(H(t.current(),r)),u=lt(s.map(m=>m.pos),d),f=t.generator.nextArrayItemId(r),c=t.generator.between(u.lower,u.upper);return t.emit([{kind:\"array.insert\",path:r,item:{id:f,pos:c,value:this.state.element.encode(l)}}]),n(f)},insertAtPos:(d,l)=>{let s=t.generator.nextArrayItemId(r);return t.emit([{kind:\"array.insert\",path:r,item:{id:s,pos:d,value:this.state.element.encode(l)}}]),n(s)},remove:d=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:(d,l)=>{wi(t,r,d,l)},moveToPos:(d,l)=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])},at:d=>{let l=Vn(H(t.current(),r),d);return l?n(l.id):void 0},first:()=>{let d=Vn(H(t.current(),r),0);return d?n(d.id):void 0},last:()=>{let d=Se(H(t.current(),r)),l=d[d.length-1];return l?n(l.id):void 0},findById:d=>{let l=gr(H(t.current(),r),d);return l?n(l.id):void 0},find:d=>o().find((s,u,f)=>d(s,u,f)),findIndex:d=>o().findIndex((s,u,f)=>d(s,u,f)),map:d=>o().map((s,u,f)=>d(s,u,f)),filter:d=>o().filter((s,u,f)=>d(s,u,f)),some:d=>o().some((s,u,f)=>d(s,u,f)),every:d=>o().every((s,u,f)=>d(s,u,f)),forEach:d=>{o().forEach((s,u,f)=>d(s,u,f))},[Symbol.iterator]:()=>o()[Symbol.iterator]()}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encodeEntries(t){let r=We(),n=new Set,o,a=t.map(d=>{let l=r.between(o,void 0);o=l;let s=dt();for(;n.has(s);)s=dt();return n.add(s),{id:s,pos:l,value:this.state.element.encode(d)}});return fn(a)}},wi=(e,t,r,n)=>{let o=Se(H(e.current(),t));if(o.findIndex(c=>c.id===r)===-1)throw new h(`Array item \"${r}\" does not exist`);let d=o.filter(c=>c.id!==r),l=Lt(n,d.length+1);if(l===void 0&&n!==d.length)throw new h(`Index ${n} is out of range`);let s=l??d.length,u=lt(d.map(c=>c.pos),s),f=e.generator.between(u.lower,u.upper);e.emit([{kind:\"array.move\",path:t,id:r,pos:f}])},zd=e=>new wr({required:!1,defaultValue:void 0,element:e,validators:[]});var Pr=class e{constructor(t){p(this,\"_tag\",\"EitherPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");if(this.state=t,t.variants.length===0)throw new h(\"Either requires at least one variant\")}get schema(){return{kind:\"either\",variants:this.state.variants.map(t=>t.schema),...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Either value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Either value is required\");return}for(let n of this.state.variants)try{let o=n.encodeOptional(r);if(o!==void 0)return o}catch{}throw new h(\"Either input did not match any variant\")}decode(t){for(let r of this.state.variants){let n=r.decode(t);if(n!==void 0)return n}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}},$d=(...e)=>new Pr({required:!1,defaultValue:void 0,variants:e});var Vr=class e{constructor(t){p(this,\"_tag\",\"UnionPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get discriminator(){return this.state.discriminator}get variants(){return this.state.variants}get schema(){let t={};for(let[r,n]of Object.entries(this.state.variants)){let o=n.schema;if(o.kind!==\"object\")throw new h(\"Union variants must compile to object schemas\");let a={...o.fields,[this.state.discriminator]:{kind:\"literal\",value:r}};t[r]={kind:\"object\",fields:a}}return{kind:\"union\",discriminator:this.state.discriminator,variants:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Union value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Union value is required\");return}if(typeof r!=\"object\"||r===null||Array.isArray(r))throw new h(\"Expected union input object\");let n=this.resolveVariantKey(r),o=this.state.variants[n];if(!o)throw new h(`Unknown union variant \"${String(n)}\"`);let a=o.encode(r);if(a.kind!==\"object\")throw new h(\"Union variant must encode to an object value\");return ne({...a.fields,[this.state.discriminator]:re(String(n))})}decode(t){if(t?.kind!==\"object\")return;let r=this.resolveVariantKeyFromObject(t);if(!r)return;let o=this.state.variants[r]?.decode(t);if(o!==void 0)return{...o,[this.state.discriminator]:r}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},as:n=>{let o=this.state.variants[String(n)];if(!o)throw new h(`Unknown union variant \"${String(n)}\"`);return o.createProxy(t,r)},match:n=>{let o=hr(t.current(),r),a=o?this.resolveVariantKeyFromObject(o):void 0;if(!a)return;let d=n[a];if(d)return d(this.state.variants[a].createProxy(t,r))}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}resolveVariantKey(t){let r=t[this.state.discriminator];if(typeof r==\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r))return r;let n=Object.entries(this.state.variants).filter(([,o])=>{let a=Object.keys(o.fields);return Object.keys(t).every(d=>d===this.state.discriminator||a.includes(d))}).map(([o])=>o);if(n.length===1)return n[0];throw new h(\"Unable to resolve union variant from input\")}resolveVariantKeyFromObject(t){let r=t.fields[this.state.discriminator];if(r?.kind===\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r.value))return r.value}},Wd=(e,t)=>new Vr({required:!1,defaultValue:void 0,discriminator:t?.discriminator??\"type\",variants:e});var Pi=Symbol.for(\"TreeNode.Self\"),Kd={_tag:\"TreeNodeSelf\",_brand:Pi},Gd=e=>typeof e==\"object\"&&e!==null&&\"_brand\"in e&&e._brand===Pi,Nr=class{constructor(t,r,n){p(this,\"_tag\",\"TreeNodePrimitive\");p(this,\"_Type\");p(this,\"_Data\");p(this,\"_Children\");p(this,\"TSetInput\");p(this,\"type\");p(this,\"data\");p(this,\"childrenInput\");p(this,\"resolvedChildren\");this.type=t,this.data=r,this.childrenInput=n}get children(){if(this.resolvedChildren===void 0){let t=typeof this.childrenInput==\"function\"?this.childrenInput():this.childrenInput;this.resolvedChildren=t.map(r=>Gd(r)?this:r)}return this.resolvedChildren}isChildAllowed(t){return this.children.some(r=>r.type===t)}},Yd=(e,t)=>new Nr(e,t.data,t.children);var kr=class e{constructor(t){p(this,\"_tag\",\"TreePrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){let t=Xd(this.state.root);return{kind:\"tree\",discriminator:\"type\",roots:[this.state.root.type],variants:t,...this.state.required?{required:!0}:{},...this.state.encodedDefault!==void 0?{default:k(this.state.encodedDefault)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t,encodedDefault:this.encodeRoots(t)})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Tree value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.encodedDefault!==void 0)return k(this.state.encodedDefault);if(this.state.required)throw new h(\"Tree value is required\");return}if(!Array.isArray(t))throw new h(\"Expected tree root input array\");return this.encodeRoots(t)}encodeRoots(t){let r=[],n=_r(this.state.root),o=new Set([I]),a,d=We(),l=(s,u,f,c)=>{let m=n.get(s.type);if(!m)throw new h(`Unknown tree node type \"${s.type}\"`);if(!f.some(w=>w.type===m.type))throw new h(`Node type \"${s.type}\" is not allowed here`);let y=s.id??Zd(o);if(o.has(y))throw new h(`Duplicate tree node id \"${y}\" in encoded input`);o.add(y);let N=d.between(c,void 0);r.push({id:y,parent:u,pos:N,value:An(m,s)});let R;for(let w of s.children??[])R=l(w,y,m.children,R);return N};for(let s of t)a=l(s,I,[this.state.root],a);return pn(r)}decode(t){if(t?.kind!==\"tree\")return;let r=_r(this.state.root);return _i(t,I,r)}createProxy(t,r){let n=_r(this.state.root);return{get:()=>this.decode(K(t.current(),r)),set:o=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(o)}])},findByIdAcrossTree:o=>{let a=K(t.current(),r),d=Nn(a,o);if(!d)return;let l=d.value.fields.type,s=n.get(l?.kind===\"string\"?l.value:\"\");return s?Ge(t,r,n,s,o):void 0},children:Ni(t,r,n,I,[this.state.root])}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue,encodedDefault:t?void 0:this.state.encodedDefault})}},Ni=(e,t,r,n,o)=>{let a=()=>ke(K(e.current(),t),n).filter(l=>o.some(s=>s.type===oe(l))).map(l=>Ge(e,t,r,r.get(oe(l)),l.id)),d={__parentId:n,get length(){return a().length},at:l=>{let s=ke(K(e.current(),t),n).filter(c=>o.some(m=>m.type===oe(c))),u=Lt(l,s.length),f=u===void 0?void 0:s[u];return f?Ge(e,t,r,r.get(oe(f)),f.id):void 0},first:()=>d.at(0),last:()=>{let l=a();return l[l.length-1]},findById:l=>{let s=ke(K(e.current(),t),n).find(f=>f.id===l);if(!s)return;let u=r.get(oe(s));return u?Ge(e,t,r,u,s.id):void 0},insertAt:(l,s)=>{let u=K(e.current(),t),f=ke(u,n).filter(w=>o.some(P=>P.type===oe(w))),c=lt(f.map(w=>w.pos),l),m=Vi(o,s.type),y=s.id??e.generator.nextTreeNodeId(t),N=e.generator.between(c.lower,c.upper),R={id:y,parent:n,pos:N,value:An(m,s)};return e.emit([{kind:\"tree.insert\",path:t,node:R}]),Ge(e,t,r,m,y)},insertLast:l=>{let s=ke(K(e.current(),t),n).filter(u=>o.some(f=>f.type===oe(u)));return d.insertAt(s.length,l)},insertAtPos:(l,s)=>{let u=Vi(o,s.type),f=s.id??e.generator.nextTreeNodeId(t),c={id:f,parent:n,pos:l,value:An(u,s)};return e.emit([{kind:\"tree.insert\",path:t,node:c}]),Ge(e,t,r,u,f)},find:l=>a().find((u,f,c)=>l(u,f,c)),findIndex:l=>a().findIndex((u,f,c)=>l(u,f,c)),map:l=>a().map((u,f,c)=>l(u,f,c)),filter:l=>a().filter((u,f,c)=>l(u,f,c)),some:l=>a().some((u,f,c)=>l(u,f,c)),every:l=>a().every((u,f,c)=>l(u,f,c)),forEach:l=>{a().forEach((u,f,c)=>l(u,f,c))},[Symbol.iterator]:()=>a()[Symbol.iterator]()};return d},Ge=(e,t,r,n,o)=>{let a=()=>Nn(K(e.current(),t),o),d=()=>{let l=a();return l?r.get(oe(l))??n:n};return{get id(){return o},get type(){return d().type},get pos(){return a()?.pos??\"\"},get parentId(){let l=a()?.parent;return l===I?null:l??null},get data(){return d().data.createProxy(e,kn(t,o))},get children(){return Ni(e,t,r,o,d().children)},get:()=>{let l=a();if(l)return ki(l,K(e.current(),t),r)},update:l=>{d().data.createProxy(e,kn(t,o)).update(l)},remove:()=>{e.emit([{kind:\"tree.delete\",path:t,id:o}])},moveTo:(l,s)=>{let u=l.__parentId;if(!u)throw new h(\"Target children collection is not movable\");let f=K(e.current(),t);if(_n(f,u,o))throw new h(\"Tree move would create a cycle\");let c=ke(f,u).filter(N=>N.id!==o),m=lt(c.map(N=>N.pos),s),y=e.generator.between(m.lower,m.upper);e.emit([{kind:\"tree.move\",path:t,id:o,parent:u,pos:y}])},moveToPos:(l,s)=>{let u=K(e.current(),t);if(_n(u,l,o))throw new h(\"Tree move would create a cycle\");e.emit([{kind:\"tree.move\",path:t,id:o,parent:l,pos:s}])},as:l=>{if(d().type!==l.type)throw new h(`Expected node type \"${l.type}\", got \"${d().type}\"`);return Ge(e,t,r,l,o)}}},Xd=e=>{let t=_r(e),r={};for(let n of t.values()){let o=n.data.schema;if(o.kind!==\"object\")throw new h(\"Tree node data must compile to an object schema\");r[n.type]={schema:{kind:\"object\",fields:{...o.fields,type:{kind:\"literal\",value:n.type}}},children:n.children.map(a=>a.type)}}return r},_r=e=>{let t=new Map,r=n=>{let o=t.get(n.type);if(o&&o!==n)throw new h(`Duplicate tree node type \"${n.type}\"`);if(!o){t.set(n.type,n);for(let a of n.children)r(a)}};return r(e),t},An=(e,t)=>{let r=e.data.encode(t);if(r.kind!==\"object\")throw new h(\"Tree node data must encode to an object\");return ne({...r.fields,type:re(e.type)})},oe=e=>{let t=e.value.fields.type;if(t?.kind!==\"string\")throw new h(`Tree node \"${e.id}\" is missing its type discriminator`);return t.value},_i=(e,t,r)=>ke(e,t).map(n=>ki(n,e,r)),ki=(e,t,r)=>{let n=r.get(oe(e));if(!n)throw new h(`Unknown tree node type \"${oe(e)}\"`);return{id:e.id,type:n.type,parentId:e.parent===I?null:e.parent,pos:e.pos,data:n.data.decode(e.value),children:_i(t,e.id,r)}},Vi=(e,t)=>{let r=e.find(n=>n.type===t);if(!r)throw new h(`Tree node type \"${t}\" is not allowed in this collection`);return r},Jd=e=>new kr({required:!1,defaultValue:void 0,encodedDefault:void 0,root:e.root}),Zd=e=>{let t=Ke();for(;e.has(t);)t=Ke();return t};var Ir=class{constructor(t){p(this,\"_tag\",\"LazyPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"thunk\");p(this,\"resolved\");this.thunk=t}get schema(){return this.resolve().schema}encode(t){return this.resolve().encode(t)}encodeOptional(t){return this.resolve().encodeOptional(t)}decode(t){return this.resolve().decode(t)}createProxy(t,r){return this.resolve().createProxy(t,r)}resolve(){return this.resolved===void 0&&(this.resolved=this.thunk()),this.resolved}},Qd=e=>new Ir(e);var Ii=i.Struct({type:i.Literal(\"click\").required()}),Ai=i.Union({click:Ii}),Ar=i.Union({boolean:i.Struct({key:i.Literal(\"boolean\").required(),value:i.Boolean().required()}),number:i.Struct({key:i.Literal(\"number\").required(),value:i.Number().required()}),string:i.Struct({key:i.Literal(\"string\").required(),value:i.String().required()}),product:i.Struct({key:i.Literal(\"product\").required(),value:i.Struct({productId:i.String()}).required()})},{discriminator:\"key\"}),Ri=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),value:Ar.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:i.Struct({id:i.String().required()}).required()})}),Ci=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),productId:i.String().required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),variableId:i.String().required()})}),qi=i.Struct({type:i.Literal(\"none\").required()}),Ei=i.Struct({type:i.Literal(\"set-variable\").required(),payload:i.Struct({variableId:i.String().required(),newValue:Ri.required()}).required()}),Di=i.Struct({type:i.Literal(\"close-paywall\").required()}),Li=i.Struct({type:i.Literal(\"purchase-product\").required(),payload:Ci.required()}),Rr=i.Union({\"close-paywall\":Di,none:qi,\"purchase-product\":Li,\"set-variable\":Ei}),Oi=i.Struct({id:i.String().required(),trigger:Ai.required(),action:Rr.required()}),Ot=i.Array(Oi).default([]);var Mi=i.Struct({key:i.Literal(\"string\").required(),value:i.String().default(\"\")}),ji=i.Struct({key:i.Literal(\"number\").required(),value:i.Number().default(0)}),Bi=i.Struct({key:i.Literal(\"boolean\").required(),value:i.Boolean().default(!1)}),Hi=i.Struct({key:i.Literal(\"product\").required(),value:i.Struct({productId:i.String()}).default({})}),Cr=i.Union({boolean:Bi,number:ji,product:Hi,string:Mi},{discriminator:\"key\"}),Ui=i.Struct({id:i.String().required(),name:i.String().required(),value:Cr.required()}),qr=i.Struct({id:i.String().required()});var Er=i.Union({boolean:i.Struct({key:i.Literal(\"boolean\").required(),value:i.Boolean().required()}),\"boolean-array\":i.Struct({key:i.Literal(\"boolean-array\").required(),value:i.Array(i.Boolean()).required()}),number:i.Struct({key:i.Literal(\"number\").required(),value:i.Number().required()}),\"number-array\":i.Struct({key:i.Literal(\"number-array\").required(),value:i.Array(i.Number()).required()}),product:i.Struct({key:i.Literal(\"product\").required(),value:i.Struct({productId:i.String()}).required()}),string:i.Struct({key:i.Literal(\"string\").required(),value:i.String().required()}),\"string-array\":i.Struct({key:i.Literal(\"string-array\").required(),value:i.Array(i.String()).required()})},{discriminator:\"key\"}),Rn=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),value:Er.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:qr.required()})}),Fi=i.Union({\"action-payload\":i.Struct({type:i.Literal(\"action-payload\").required(),value:i.Struct({field:i.String().required()}).required()}),literal:i.Struct({type:i.Literal(\"literal\").required(),value:Ar.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:i.Struct({id:i.String().required()}).required()})}),zi=i.Union({\"action-payload\":i.Struct({type:i.Literal(\"action-payload\").required(),field:i.String().required()}),literal:i.Struct({type:i.Literal(\"literal\").required(),productId:i.String().required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),variableId:i.String().required()})}),Cn=i.Union({\"close-paywall\":i.Struct({type:i.Literal(\"close-paywall\").required()}),none:i.Struct({type:i.Literal(\"none\").required()}),\"purchase-product\":i.Struct({type:i.Literal(\"purchase-product\").required(),payload:zi.required()}),\"set-variable\":i.Struct({type:i.Literal(\"set-variable\").required(),payload:i.Struct({variableId:i.String().required(),newValue:Fi.required()}).required()})});var U=i.Array(Ui).default([]),F=i.Array(i.Struct({name:i.String().required(),nodeId:i.String().required()})).default([]);var el=i.Struct({path:i.String().required(),source:i.String().default(\"\")}).required(),qn=i.TreeNode(\"codeComponent\",{children:[],data:el});var G=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),value:Cr.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:qr.required()})}),tl=i.Struct({type:i.Literal(\"equals\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),rl=i.Struct({type:i.Literal(\"not-equals\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),nl=i.Struct({type:i.Literal(\"greater-than\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),ol=i.Struct({type:i.Literal(\"greater-than-or-equal\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),il=i.Struct({type:i.Literal(\"less-than\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),al=i.Struct({type:i.Literal(\"less-than-or-equal\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),dl=i.Union({equals:tl,\"greater-than\":nl,\"greater-than-or-equal\":ol,\"less-than\":il,\"less-than-or-equal\":al,\"not-equals\":rl}),ll=i.Struct({type:i.Literal(\"and\").required(),value:i.Array(dl).minLength(1).required()}),$i=i.Struct({type:i.Literal(\"or\").required(),value:i.Array(ll).minLength(1).required()}),sl=i.Struct({action:Rr.required(),interactionId:i.String().required()});function Ie(e){return i.Struct({condition:$i.required(),id:i.String().required(),name:i.String().required(),overrides:i.Struct({style:e}).default({})})}function Dr(e){return i.Struct({condition:$i.required(),id:i.String().required(),name:i.String().required(),overrides:i.Struct({actions:i.Array(sl).default([]),style:e}).default({})})}var Ye=/^rgba\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d*\\.?\\d+)\\s*\\)$/i,st=i.Number().default(0),ut=i.Number().default(0),ct=i.Number().default(0),ft=i.Number().default(0),ie=i.Number().default(0),ae=i.Number().default(0),de=i.Number().default(0),le=i.Number().default(0),pt=i.Number().default(0),mt=i.Either(i.Literal(\"flex-start\"),i.Literal(\"center\"),i.Literal(\"flex-end\"),i.Literal(\"space-between\"),i.Literal(\"space-around\"),i.Literal(\"space-evenly\")).default(\"flex-start\"),yt=i.Either(i.Literal(\"flex-start\"),i.Literal(\"center\"),i.Literal(\"flex-end\"),i.Literal(\"stretch\"),i.Literal(\"baseline\")).default(\"stretch\"),ht=i.Either(i.Literal(\"row\"),i.Literal(\"column\")).default(\"column\"),se=i.Number(),ue=i.Number().default(0),ce=i.Number().default(1),fe=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),pe=i.Either(i.Literal(\"auto\"),i.Literal(\"flex-start\"),i.Literal(\"center\"),i.Literal(\"flex-end\"),i.Literal(\"stretch\"),i.Literal(\"baseline\")).default(\"auto\"),gt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),bt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),me=i.Number(),ye=i.Number(),he=i.Number(),ge=i.Number(),Wi=i.Number().default(0),Ki=i.Number().default(0),vt=i.Either(i.Literal(\"absolute\"),i.Literal(\"relative\")).default(\"relative\"),St=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),Tt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),xt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),wt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),Pt=i.String().default(\"rgba(255, 255, 255, 1)\").regex(Ye,\"Invalid RGBA color format\"),Vt=i.Boolean().default(!1),Nt=i.Either(i.Literal(\"solid\"),i.Literal(\"gradient\"),i.Literal(\"image\")).default(\"solid\"),_t=i.Struct({kind:i.Either(i.Literal(\"linear\"),i.Literal(\"radial\")).default(\"linear\"),startX:i.Number().default(.5),startY:i.Number().default(0),endX:i.Number().default(.5),endY:i.Number().default(1),stops:i.Array(i.Struct({color:i.String().default(\"rgba(255, 255, 255, 1)\").regex(Ye,\"Invalid RGBA color format\"),position:i.Number().default(0)})).default([{color:\"rgba(255, 255, 255, 1)\",position:0},{color:\"rgba(255, 255, 255, 0)\",position:1}])}).default({}),Te=i.Struct({url:i.String().default(\"\"),resizeMode:i.Either(i.Literal(\"cover\"),i.Literal(\"contain\"),i.Literal(\"stretch\"),i.Literal(\"center\")).default(\"cover\")}).default({}),Ae=i.Number().default(0),Re=i.Number().default(0),Ce=i.Number().default(0),qe=i.Number().default(0),Ee=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),De=i.Either(i.Literal(\"solid\"),i.Literal(\"dashed\"),i.Literal(\"dotted\")).default(\"solid\"),Lr=i.Number().default(0),Or=i.Number().default(0),Mr=i.Number().default(0),jr=i.Number().default(0),Le=i.Boolean().default(!1),Y=i.Number().default(1),Oe=i.Either(i.Literal(\"visible\"),i.Literal(\"hidden\"),i.Literal(\"scroll\")).default(\"visible\"),Me=i.Number().default(0),X=i.Either(i.Literal(\"flex\"),i.Literal(\"none\")).default(\"flex\"),je=i.Boolean().default(!1),Be=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),He=i.Number().default(0),Ue=i.Number().default(0),Fe=i.Number().default(0),ze=i.Number().default(1),Gi=i.Number().default(16).min(1),Yi=i.Either(i.Literal(\"100\"),i.Literal(\"200\"),i.Literal(\"300\"),i.Literal(\"400\"),i.Literal(\"500\"),i.Literal(\"600\"),i.Literal(\"700\"),i.Literal(\"800\"),i.Literal(\"900\")).default(\"400\"),Xi=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),Ji=i.Either(i.Literal(\"left\"),i.Literal(\"center\"),i.Literal(\"right\"),i.Literal(\"justify\")).default(\"left\"),Zi=i.Number().default(1.5),Qi=i.Number().default(0),kt=i.Boolean().default(!1),It=i.Boolean().default(!1),ea=i.String().default(\"rgba(255, 255, 255, 1)\").regex(Ye,\"Invalid RGBA color format\"),ta=i.Boolean().default(!1),ra=i.Either(i.Literal(\"nonzero\"),i.Literal(\"evenodd\")).default(\"nonzero\"),na=i.Number().default(1),oa=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),ia=i.Boolean().default(!1),aa=i.Number().default(0),da=i.Number().default(1),la=i.Either(i.Literal(\"butt\"),i.Literal(\"round\"),i.Literal(\"square\")).default(\"butt\"),sa=i.Either(i.Literal(\"miter\"),i.Literal(\"round\"),i.Literal(\"bevel\")).default(\"miter\");var En=i.Struct({fillColor:ea,fillEnabled:ta,fillRule:ra,fillOpacity:na,strokeColor:oa,strokeEnabled:ia,strokeWidth:aa,strokeOpacity:da,strokeLinecap:la,strokeLinejoin:sa,opacity:Y,display:X}).default({}),ul=Ie(En.partial({stripDefaults:!0}).default({})),cl=i.Array(ul).default([]),Dn=i.TreeNode(\"path\",{children:[],data:i.Struct({linkedVariables:F,localVariables:U,name:i.String().default(\"Path\"),states:cl,d:i.String().default(\"\"),transform:i.String(),style:En}).required()});var fl=i.Either(i.Literal(\"none\"),i.Literal(\"xMidYMid meet\"),i.Literal(\"xMidYMid slice\")).default(\"xMidYMid meet\"),pl=i.Struct({minX:i.Number().default(0),minY:i.Number().default(0),width:i.Number().default(24),height:i.Number().default(24)}).default({}),Ln=i.Struct({width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,opacity:Y,display:X,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\"),preserveAspectRatio:fl}).default({}),ml=Ie(Ln.partial({stripDefaults:!0}).default({})),yl=i.Array(ml).default([]),xe=i.TreeNode(\"shape\",{children:[Dn],data:i.Struct({linkedVariables:F,localVariables:U,name:i.String().default(\"Shape\"),states:yl,svgSource:i.String(),viewBox:pl,style:Ln}).required()});var On=i.Struct({marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,fontSize:Gi,fontWeight:Yi,color:Xi,textAlign:Ji,lineHeight:Zi,letterSpacing:Qi,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,opacity:Y,overflow:Oe,zIndex:Me,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),hl=Ie(On.partial({stripDefaults:!0}).default({})),gl=i.Array(hl).default([]),bl=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({text:i.String()}).default({})})).default([]),we=i.TreeNode(\"text\",{children:[],data:i.Struct({linkedVariables:F,localVariables:U,localized:bl,name:i.String().default(\"Text\"),states:gl,style:On,text:i.String().default(\"New Text\")}).required()});var Mn=i.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,borderTopLeftRadius:Lr,borderTopRightRadius:Or,borderBottomRightRadius:Mr,borderBottomLeftRadius:jr,opacity:Y,overflow:Oe,zIndex:Me,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),vl=Dr(Mn.partial({stripDefaults:!0}).default({})),Sl=i.Array(vl).default([]),Tl=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Xe=i.TreeNode(\"view\",{children:()=>[i.TreeNodeSelf,Je,we,xe,Ze],data:i.Struct({interactions:Ot,linkedVariables:F,localVariables:U,localized:Tl,name:i.String().default(\"View\"),states:Sl,style:Mn}).required()});var jn=i.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,borderTopLeftRadius:Lr,borderTopRightRadius:Or,borderBottomRightRadius:Mr,borderBottomLeftRadius:jr,opacity:Y,overflow:Oe,zIndex:Me,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),xl=Dr(jn.partial({stripDefaults:!0}).default({})),wl=i.Array(xl).default([]),Pl=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Vl=i.Struct({horizontal:i.Boolean().default(!1),interactions:Ot,linkedVariables:F,localVariables:U,localized:Pl,name:i.String().default(\"ScrollView\"),showsScrollIndicator:i.Boolean().default(!0),states:wl,style:jn}).required(),Je=i.TreeNode(\"scrollView\",{children:()=>[Xe,i.TreeNodeSelf,we,xe,Ze],data:Vl});var Nl=i.Struct({actionBindings:i.Array(i.Struct({action:Cn.required(),name:i.String().required()})).default([]),componentSource:i.String().default(\"catalog\"),componentPath:i.String().default(\"\"),componentSlug:i.String().default(\"\"),componentVersion:i.Number().default(0),contentHash:i.String().default(\"\"),name:i.String().default(\"Component\"),previewState:i.String().default(\"default\"),props:i.Array(i.Struct({name:i.String().required(),value:Rn.required(),localizedValues:i.Array(i.Struct({locale:i.String().required(),value:Er.required()})).default([])})).default([])}).required(),Ze=i.TreeNode(\"component\",{children:()=>[Xe,Je,we,xe,i.TreeNodeSelf],data:Nl});var Bn=i.TreeNode(\"library\",{children:()=>[qn],data:i.Struct({}).required()});var Hn=i.Struct({x:Wi,y:Ki,width:i.Number().default(375),height:i.Number().default(812),minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,backgroundColor:Pt.default(\"rgba(255, 255, 255, 1)\"),backgroundEnabled:Vt.default(!0),backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,opacity:Y,overflow:Oe,zIndex:Me,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),_l=Ie(Hn.partial({stripDefaults:!0}).default({})),kl=i.Array(_l).default([]),Il=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Un=i.TreeNode(\"screen\",{children:()=>[Xe,Je,we,xe,Ze],data:i.Struct({linkedVariables:F,localVariables:U,localized:Il,name:i.String().default(\"Screen\"),states:kl,style:Hn}).required()});var Al=i.Struct({defaultLocale:i.String().default(\"en\"),locales:i.Array(i.Struct({tag:i.String().required()})).default([])}).default({}),Fn=i.TreeNode(\"root\",{children:()=>[Un,Bn],data:i.Struct({localization:Al,name:i.String()}).required()});var My=i.Tree({root:Fn});function Br(e){return e!==null&&typeof e==\"object\"&&\"id\"in e&&\"pos\"in e&&\"value\"in e?e.value:e}function zn(e){let t=e.indexOf(\"-\");return t===-1?e:e.slice(0,t)}function ua(e,t,r){let n=e.text,o=e.localized;if(t==null||t===r||o===void 0||o.length===0)return n;let a=t.toLowerCase(),d=zn(a),l;for(let s of o){let u=Br(s);if(u===void 0)continue;let f=u.overrides?.text;if(f===void 0||f===\"\")continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}function ca(e,t,r){let n=e.style.backgroundImage,o=e.localized;if(t==null||t===r||o===void 0||o.length===0)return n;let a=t.toLowerCase(),d=zn(a),l;for(let s of o){let u=Br(s);if(u===void 0)continue;let f=u.overrides?.backgroundImage;if(f===void 0)continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}var eh=i.Struct({cursor:i.Struct({x:i.Number().required(),y:i.Number().required()}),name:i.String(),selectedNodeIds:i.Array(i.String()).default([]),user:i.Struct({color:i.String().required(),name:i.String().required()}).required()});function At(e){let{locale:t,defaultLocale:r}=te();return ca(e,t,r)}function fa({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=At(e.data),o=Xt(n===e.data.style.backgroundImage?r:{...r,backgroundImage:n}),a=Jt(r);return b(\"div\",{\"data-node-id\":e.id,style:o,children:b(\"div\",{style:a,children:t})})}function Hr(e,t,r){let{getNodeVariables:n,setNodeVariable:o,callbacks:a}=te(),d=n(e),l=j(()=>({...a,onSetVariable:(f,c)=>{o(e,f,c)}}),[a,e,o]),s=j(()=>t.filter(f=>f.value?.trigger?.type===\"click\"),[t]),u=ee(()=>{for(let f of s){let c=f.value;if(!c?.action)continue;let m=f.id??c.id;if(!m)continue;let N=en(m,r,d)??c.action;tn(N,d,l)}},[s,r,d,l]);if(s.length!==0)return u}function pa({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=Hr(e.id,e.data.interactions,e.data.states),o=At(e.data),a=Gt(o===e.data.style.backgroundImage?r:{...r,backgroundImage:o},{horizontal:e.data.horizontal,showsScrollIndicator:e.data.showsScrollIndicator});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function ma({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=Zt(r),o=e.data.viewBox,a=`${o.minX} ${o.minY} ${o.width} ${o.height}`;return b(\"div\",{\"data-node-id\":e.id,style:n,children:b(\"svg\",{height:\"100%\",preserveAspectRatio:r.preserveAspectRatio,style:{display:\"block\"},viewBox:a,width:\"100%\",children:t})})}function ya({node:e}){let t=$(e.id,e.data.style,e.data.states),r=Qt(t),{locale:n,defaultLocale:o}=te();return b(\"span\",{\"data-node-id\":e.id,style:r,children:ua(e.data,n,o)})}function ha({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=Hr(e.id,e.data.interactions,e.data.states),o=At(e.data),a=nt(o===e.data.style.backgroundImage?r:{...r,backgroundImage:o});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function ga({snapshot:e,componentArtifacts:t,locale:r}){return b(qo,{componentArtifacts:t,locale:r,snapshot:e,children:b(ba,{node:e})})}var Rl={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",textAlign:\"center\"};function Cl({node:e}){return b(\"div\",{style:Rl,children:`Unsupported node type: ${String(e.type)}`})}function ba({node:e}){let t=(e.children??[]).map(r=>b(ba,{node:r},r.id));switch(e.type){case\"root\":return b(Q,{children:t});case\"screen\":return b(fa,{node:e,children:t});case\"view\":return b(ha,{node:e,children:t});case\"scrollView\":return b(pa,{node:e,children:t});case\"text\":return b(ya,{node:e});case\"shape\":return b(ma,{node:e,children:t});case\"path\":return b(Mo,{node:e});case\"component\":return b(Oo,{node:e,children:t});case\"library\":case\"codeComponent\":return null;default:return b(Cl,{node:e})}}var ql=\"__VOIDHASH_PAYWALL__\",va={products:[],variables:{}},El=e=>({products:e?.products??[],variables:e?.variables??{},locale:e?.locale,platform:e?.platform,defaultSelectedProductId:e?.defaultSelectedProductId}),Sa=()=>{if(typeof window>\"u\")return va;let e=window[ql];return e?El(e):va};function Ta(e){return Sa().locale??e}function Dl(e){let t;try{t=JSON.parse(e)}catch{return}if(!(typeof t!=\"object\"||t===null)){if(\"type\"in t)return{componentArtifacts:void 0,locale:void 0,snapshot:t};if(\"snapshot\"in t){let r=t;return{componentArtifacts:r.componentArtifacts,locale:r.locale,snapshot:r.snapshot}}}}function xa(){let e=document.getElementById(\"__PAYWALL_DATA__\");if(!e?.textContent)return;let t=document.getElementById(\"paywall-root\");if(!t)return;let r=Dl(e.textContent);r&&ao(b(ga,{componentArtifacts:r.componentArtifacts,locale:Ta(r.locale),snapshot:r.snapshot}),t)}document.readyState===\"loading\"?document.addEventListener(\"DOMContentLoaded\",xa):xa();})();\n";
diff --git a/packages/paywall-renderer-preact/src/templates/runtime-bundle.ts b/packages/paywall-renderer-preact/src/templates/runtime-bundle.ts
new file mode 100644
index 000000000..1bcdeb8a4
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/templates/runtime-bundle.ts
@@ -0,0 +1,21 @@
+/**
+ * Client-side hydration runtime bundle.
+ *
+ * The paywall runtime Vite plugin (exported from
+ * `@voidhash/paywall-renderer-preact/vite-plugin`) replaces this module
+ * at build time with the esbuild-bundled IIFE of `src/runtime/hydrate.tsx`,
+ * while non-Vite server runtimes use the generated fallback checked by the
+ * package test command.
+ */
+
+import { PAYWALL_RUNTIME_BUNDLE } from "./runtime-bundle.generated.ts";
+
+/**
+ * Returns the bundled hydration runtime.
+ *
+ * Returns the current generated fallback when a consuming pipeline does not
+ * run the Vite transform.
+ */
+export function getRuntimeBundle(): string {
+  return PAYWALL_RUNTIME_BUNDLE;
+}
diff --git a/packages/paywall-renderer-preact/src/templates/runtime-script.ts b/packages/paywall-renderer-preact/src/templates/runtime-script.ts
new file mode 100644
index 000000000..b23aa302d
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/templates/runtime-script.ts
@@ -0,0 +1,21 @@
+/**
+ * Generates the client-side runtime script for paywall hydration.
+ *
+ * This module returns the Preact hydration runtime that is embedded in the
+ * HTML output. The bundle is compiled from src/runtime/hydrate.tsx at build
+ * time by the paywall runtime Vite plugin (see ../vite-plugin.ts) and
+ * includes all necessary components and style builders.
+ */
+
+import { getRuntimeBundle } from "./runtime-bundle";
+
+/**
+ * Returns the complete runtime script for client-side hydration.
+ *
+ * The script:
+ * 1. Reads the serialized paywall data from __PAYWALL_DATA__ script tag
+ * 2. Hydrates the pre-rendered HTML with interactive Preact components
+ */
+export function generateRuntimeScript(): string {
+  return getRuntimeBundle();
+}
diff --git a/packages/paywall-renderer-preact/src/vite-plugin.ts b/packages/paywall-renderer-preact/src/vite-plugin.ts
new file mode 100644
index 000000000..6f0842a0e
--- /dev/null
+++ b/packages/paywall-renderer-preact/src/vite-plugin.ts
@@ -0,0 +1,80 @@
+/**
+ * Vite plugin that compiles the paywall hydration runtime at build time.
+ *
+ * Replaces the `src/templates/runtime-bundle.ts` placeholder module with an
+ * esbuild-bundled IIFE of `src/runtime/hydrate.tsx`, so the runtime embedded
+ * in paywall HTML is always built from current source — including the style
+ * builders in `@voidhash/paywall-renderer-web-core`. Every source file
+ * that feeds the bundle is registered as a watch file, so edits invalidate
+ * the module in dev/watch mode.
+ *
+ * Every pipeline that evaluates `renderPaywallToHtml` with hydration (app
+ * builds, dev servers, vitest) must register this plugin; without it the
+ * placeholder throws instead of hydrating with a stale runtime.
+ */
+
+import * as esbuild from "esbuild";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import type { Plugin } from "vite";
+
+const packageRoot = fileURLToPath(new URL("..", import.meta.url));
+const entryPoint = path.join(packageRoot, "src/runtime/hydrate.tsx");
+const placeholderModule = path.join(packageRoot, "src/templates/runtime-bundle.ts");
+
+interface RuntimeBundle {
+  code: string;
+  watchFiles: readonly string[];
+}
+
+async function buildRuntimeBundle(): Promise<RuntimeBundle> {
+  const result = await esbuild.build({
+    absWorkingDir: packageRoot,
+    entryPoints: [entryPoint],
+    bundle: true,
+    format: "iife",
+    minify: true,
+    target: "es2020",
+    write: false,
+    metafile: true,
+    jsx: "automatic",
+    jsxImportSource: "preact",
+    sourcemap: false,
+    treeShaking: true,
+    define: {
+      "process.env.NODE_ENV": '"production"',
+    },
+  });
+
+  const bundle = result.outputFiles[0].text;
+  const watchFiles = Object.keys(result.metafile.inputs)
+    .filter((input) => !input.includes("node_modules"))
+    .map((input) => path.resolve(packageRoot, input));
+
+  return {
+    code: `export function getRuntimeBundle() {\n  return ${JSON.stringify(bundle)};\n}\n`,
+    watchFiles,
+  };
+}
+
+/**
+ * Creates the plugin instance. Register it in the Vite config of every
+ * pipeline that consumes `@voidhash/paywall-renderer-preact`.
+ */
+export function paywallRuntimeBundlePlugin(): Plugin {
+  return {
+    name: "paywall-runtime-bundle",
+    enforce: "pre",
+    async transform(_code, id) {
+      const [file] = id.split("?");
+      if (path.normalize(file) !== placeholderModule) {
+        return null;
+      }
+      const { code, watchFiles } = await buildRuntimeBundle();
+      for (const watchFile of watchFiles) {
+        this.addWatchFile(watchFile);
+      }
+      return { code, map: null };
+    },
+  };
+}
diff --git a/packages/paywall-renderer-preact/sst-env.d.ts b/packages/paywall-renderer-preact/sst-env.d.ts
new file mode 100644
index 000000000..eec65b9bd
--- /dev/null
+++ b/packages/paywall-renderer-preact/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst";
+export {};
diff --git a/packages/paywall-renderer-preact/tsconfig.json b/packages/paywall-renderer-preact/tsconfig.json
new file mode 100644
index 000000000..5fceee333
--- /dev/null
+++ b/packages/paywall-renderer-preact/tsconfig.json
@@ -0,0 +1,9 @@
+{
+  "extends": "@voidhash/tsconfig/typescript-6.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"],
+  "compilerOptions": {
+    "jsx": "react-jsx",
+    "jsxImportSource": "preact"
+  }
+}
diff --git a/packages/paywall-renderer-preact/vite.config.ts b/packages/paywall-renderer-preact/vite.config.ts
new file mode 100644
index 000000000..4cd4e1351
--- /dev/null
+++ b/packages/paywall-renderer-preact/vite.config.ts
@@ -0,0 +1,7 @@
+import { defineConfig } from "vite";
+
+import { paywallRuntimeBundlePlugin } from "./src/vite-plugin";
+
+export default defineConfig({
+  plugins: [paywallRuntimeBundlePlugin()],
+});
diff --git a/packages/paywall-renderer-web-core/LICENSE.md b/packages/paywall-renderer-web-core/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/paywall-renderer-web-core/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/paywall-renderer-web-core/README.md b/packages/paywall-renderer-web-core/README.md
new file mode 100644
index 000000000..4576431cd
--- /dev/null
+++ b/packages/paywall-renderer-web-core/README.md
@@ -0,0 +1,13 @@
+# @voidhash/paywall-renderer-web-core
+
+Platform-neutral snapshot evaluation, action resolution, variable handling, preview-tree contracts, and CSS style builders shared by Voidhash paywall renderers.
+
+The package contains no UI runtime. Renderer packages consume its typed snapshot model and deterministic helpers to produce platform-specific output.
+
+```typescript
+import {
+  buildTextStyles,
+  resolveStyle,
+  type SnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+```
diff --git a/packages/paywall-renderer-web-core/package.json b/packages/paywall-renderer-web-core/package.json
new file mode 100644
index 000000000..587582904
--- /dev/null
+++ b/packages/paywall-renderer-web-core/package.json
@@ -0,0 +1,42 @@
+{
+  "name": "@voidhash/paywall-renderer-web-core",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "Platform-neutral snapshot evaluation and web-style utilities for Voidhash paywall renderers.",
+  "keywords": [
+    "paywalls",
+    "renderer",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/paywall-renderer-web-core"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vp test run"
+  },
+  "dependencies": {
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywalls": "workspace:*",
+    "csstype": "^3.1.3"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "6.0.3",
+    "vite-plus": "0.1.23",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/paywall-renderer-web-core/src/actions.test.ts b/packages/paywall-renderer-web-core/src/actions.test.ts
new file mode 100644
index 000000000..d43d29c59
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/actions.test.ts
@@ -0,0 +1,351 @@
+import { describe, expect, test, vi } from "vite-plus/test";
+
+import { type ActionCallbacks, executeAction, executeComponentBoundAction } from "./actions";
+import type { Action, ComponentBoundAction } from "./snapshot-types";
+import type { VariableStore } from "./variables";
+
+function makeCallbacks(): ActionCallbacks & {
+  closePaywall: ReturnType<typeof vi.fn>;
+  purchaseProduct: ReturnType<typeof vi.fn>;
+  setVariable: ReturnType<typeof vi.fn>;
+} {
+  const closePaywall = vi.fn();
+  const purchaseProduct = vi.fn();
+  const setVariable = vi.fn();
+  return {
+    onClosePaywall: closePaywall,
+    onPurchaseProduct: purchaseProduct,
+    onSetVariable: setVariable,
+    closePaywall,
+    purchaseProduct,
+    setVariable,
+  };
+}
+
+describe("executeAction", () => {
+  const emptyVars: VariableStore = new Map();
+
+  test("none action does nothing", () => {
+    const cbs = makeCallbacks();
+    const action: Action = { type: "none" };
+    executeAction(action, emptyVars, cbs);
+    expect(cbs.closePaywall).not.toHaveBeenCalled();
+    expect(cbs.purchaseProduct).not.toHaveBeenCalled();
+    expect(cbs.setVariable).not.toHaveBeenCalled();
+  });
+
+  test("close-paywall calls onClosePaywall", () => {
+    const cbs = makeCallbacks();
+    const action: Action = { type: "close-paywall" };
+    executeAction(action, emptyVars, cbs);
+    expect(cbs.closePaywall).toHaveBeenCalledOnce();
+  });
+
+  test("set-variable with literal value", () => {
+    const cbs = makeCallbacks();
+    const action: Action = {
+      type: "set-variable",
+      payload: {
+        variableId: "var-1",
+        newValue: {
+          type: "literal",
+          value: { key: "boolean", value: true },
+        },
+      },
+    };
+    executeAction(action, emptyVars, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("var-1", {
+      key: "boolean",
+      value: true,
+    });
+  });
+
+  test("set-variable with variable reference", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([["source-var", { key: "number", value: 42 }]]);
+    const action: Action = {
+      type: "set-variable",
+      payload: {
+        variableId: "target-var",
+        newValue: {
+          type: "variable-reference",
+          value: { id: "source-var" },
+        },
+      },
+    };
+    executeAction(action, variables, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("target-var", {
+      key: "number",
+      value: 42,
+    });
+  });
+
+  test("set-variable with missing reference does nothing", () => {
+    const cbs = makeCallbacks();
+    const action: Action = {
+      type: "set-variable",
+      payload: {
+        variableId: "target-var",
+        newValue: {
+          type: "variable-reference",
+          value: { id: "missing" },
+        },
+      },
+    };
+    executeAction(action, emptyVars, cbs);
+    expect(cbs.setVariable).not.toHaveBeenCalled();
+  });
+
+  test("purchase-product with literal product id", () => {
+    const cbs = makeCallbacks();
+    const action: Action = {
+      type: "purchase-product",
+      payload: {
+        type: "literal",
+        productId: "product-123",
+      },
+    };
+    executeAction(action, emptyVars, cbs);
+    expect(cbs.purchaseProduct).toHaveBeenCalledWith("product-123");
+  });
+
+  test("purchase-product with variable reference", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([
+      ["product-var", { key: "product", value: { productId: "product-456" } }],
+    ]);
+    const action: Action = {
+      type: "purchase-product",
+      payload: {
+        type: "variable-reference",
+        variableId: "product-var",
+      },
+    };
+    executeAction(action, variables, cbs);
+    expect(cbs.purchaseProduct).toHaveBeenCalledWith("product-456");
+  });
+
+  test("purchase-product with missing variable reference does nothing", () => {
+    const cbs = makeCallbacks();
+    const action: Action = {
+      type: "purchase-product",
+      payload: {
+        type: "variable-reference",
+        variableId: "missing",
+      },
+    };
+    executeAction(action, emptyVars, cbs);
+    expect(cbs.purchaseProduct).not.toHaveBeenCalled();
+  });
+
+  test("purchase-product with an unset product variable (absent productId) does nothing", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([["product-var", { key: "product", value: {} }]]);
+    const action: Action = {
+      type: "purchase-product",
+      payload: {
+        type: "variable-reference",
+        variableId: "product-var",
+      },
+    };
+    executeAction(action, variables, cbs);
+    expect(cbs.purchaseProduct).not.toHaveBeenCalled();
+  });
+
+  test("purchase-product with a literal source without productId does nothing", () => {
+    const cbs = makeCallbacks();
+    const legacyAction = {
+      type: "purchase-product",
+      payload: { type: "literal" },
+    } as unknown as Action;
+    executeAction(legacyAction, emptyVars, cbs);
+    expect(cbs.purchaseProduct).not.toHaveBeenCalled();
+  });
+});
+
+describe("executeComponentBoundAction", () => {
+  const emptyVars: VariableStore = new Map();
+
+  function setVariableAction(
+    newValue: NonNullable<
+      Extract<ComponentBoundAction, { type: "set-variable" }>["payload"]
+    >["newValue"],
+    variableId = "target-var",
+  ): ComponentBoundAction {
+    return { type: "set-variable", payload: { newValue, variableId } };
+  }
+
+  test("none action does nothing", () => {
+    const cbs = makeCallbacks();
+    executeComponentBoundAction({ type: "none" }, { productId: "p" }, emptyVars, cbs);
+    expect(cbs.closePaywall).not.toHaveBeenCalled();
+    expect(cbs.purchaseProduct).not.toHaveBeenCalled();
+    expect(cbs.setVariable).not.toHaveBeenCalled();
+  });
+
+  test("close-paywall calls onClosePaywall", () => {
+    const cbs = makeCallbacks();
+    executeComponentBoundAction({ type: "close-paywall" }, undefined, emptyVars, cbs);
+    expect(cbs.closePaywall).toHaveBeenCalledOnce();
+  });
+
+  test("set-variable with literal value behaves like executeAction", () => {
+    const cbs = makeCallbacks();
+    const action = setVariableAction({
+      type: "literal",
+      value: { key: "boolean", value: true },
+    });
+    executeComponentBoundAction(action, undefined, emptyVars, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("target-var", { key: "boolean", value: true });
+  });
+
+  test("set-variable with variable reference resolves through the reader", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([["source-var", { key: "number", value: 42 }]]);
+    const action = setVariableAction({ type: "variable-reference", value: { id: "source-var" } });
+    executeComponentBoundAction(action, undefined, variables, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("target-var", { key: "number", value: 42 });
+  });
+
+  test("set-variable with missing variable reference does nothing", () => {
+    const cbs = makeCallbacks();
+    const action = setVariableAction({ type: "variable-reference", value: { id: "missing" } });
+    executeComponentBoundAction(action, undefined, emptyVars, cbs);
+    expect(cbs.setVariable).not.toHaveBeenCalled();
+  });
+
+  test("set-variable from payload field matching the target scalar type", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([["target-var", { key: "string", value: "old" }]]);
+    const action = setVariableAction({ type: "action-payload", value: { field: "label" } });
+    executeComponentBoundAction(action, { label: "new" }, variables, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("target-var", { key: "string", value: "new" });
+  });
+
+  test("set-variable from payload field coerces scalars into a product variable", () => {
+    const cbs = makeCallbacks();
+    // Absent productId is the unset state (the former null).
+    const variables: VariableStore = new Map([["target-var", { key: "product", value: {} }]]);
+    const action = setVariableAction({ type: "action-payload", value: { field: "productId" } });
+    executeComponentBoundAction(action, { productId: "yearly" }, variables, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("target-var", {
+      key: "product",
+      value: { productId: "yearly" },
+    });
+    executeComponentBoundAction(action, { productId: 42 }, variables, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("target-var", {
+      key: "product",
+      value: { productId: "42" },
+    });
+    executeComponentBoundAction(action, { productId: true }, variables, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledWith("target-var", {
+      key: "product",
+      value: { productId: "true" },
+    });
+    executeComponentBoundAction(action, { productId: { nested: true } }, variables, cbs);
+    executeComponentBoundAction(action, {}, variables, cbs);
+    expect(cbs.setVariable).toHaveBeenCalledTimes(3);
+  });
+
+  test("set-variable from payload field skips on type mismatch", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([["target-var", { key: "number", value: 1 }]]);
+    const action = setVariableAction({ type: "action-payload", value: { field: "label" } });
+    executeComponentBoundAction(action, { label: "not-a-number" }, variables, cbs);
+    expect(cbs.setVariable).not.toHaveBeenCalled();
+  });
+
+  test("set-variable from payload field skips when the field is absent", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([["target-var", { key: "string", value: "old" }]]);
+    const action = setVariableAction({ type: "action-payload", value: { field: "missing" } });
+    executeComponentBoundAction(action, { label: "new" }, variables, cbs);
+    executeComponentBoundAction(action, undefined, variables, cbs);
+    expect(cbs.setVariable).not.toHaveBeenCalled();
+  });
+
+  test("set-variable from payload field skips when the target variable is unknown", () => {
+    const cbs = makeCallbacks();
+    const action = setVariableAction({ type: "action-payload", value: { field: "label" } });
+    executeComponentBoundAction(action, { label: "new" }, emptyVars, cbs);
+    expect(cbs.setVariable).not.toHaveBeenCalled();
+  });
+
+  test("set-variable boolean and number payload fields pass when typeof matches", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([
+      ["bool-var", { key: "boolean", value: false }],
+      ["num-var", { key: "number", value: 0 }],
+    ]);
+    executeComponentBoundAction(
+      setVariableAction({ type: "action-payload", value: { field: "flag" } }, "bool-var"),
+      { flag: true },
+      variables,
+      cbs,
+    );
+    executeComponentBoundAction(
+      setVariableAction({ type: "action-payload", value: { field: "count" } }, "num-var"),
+      { count: 7 },
+      variables,
+      cbs,
+    );
+    expect(cbs.setVariable).toHaveBeenCalledWith("bool-var", { key: "boolean", value: true });
+    expect(cbs.setVariable).toHaveBeenCalledWith("num-var", { key: "number", value: 7 });
+  });
+
+  test("purchase-product with literal product id", () => {
+    const cbs = makeCallbacks();
+    const action: ComponentBoundAction = {
+      type: "purchase-product",
+      payload: { type: "literal", productId: "product-123" },
+    };
+    executeComponentBoundAction(action, undefined, emptyVars, cbs);
+    expect(cbs.purchaseProduct).toHaveBeenCalledWith("product-123");
+  });
+
+  test("purchase-product with product variable reference", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([
+      ["product-var", { key: "product", value: { productId: "product-456" } }],
+    ]);
+    const action: ComponentBoundAction = {
+      type: "purchase-product",
+      payload: { type: "variable-reference", variableId: "product-var" },
+    };
+    executeComponentBoundAction(action, undefined, variables, cbs);
+    expect(cbs.purchaseProduct).toHaveBeenCalledWith("product-456");
+  });
+
+  test("purchase-product with an unset product variable (absent productId) does nothing", () => {
+    const cbs = makeCallbacks();
+    const variables: VariableStore = new Map([["product-var", { key: "product", value: {} }]]);
+    const action: ComponentBoundAction = {
+      type: "purchase-product",
+      payload: { type: "variable-reference", variableId: "product-var" },
+    };
+    executeComponentBoundAction(action, undefined, variables, cbs);
+    expect(cbs.purchaseProduct).not.toHaveBeenCalled();
+  });
+
+  test("purchase-product from payload field", () => {
+    const cbs = makeCallbacks();
+    const action: ComponentBoundAction = {
+      type: "purchase-product",
+      payload: { type: "action-payload", field: "productId" },
+    };
+    executeComponentBoundAction(action, { productId: "yearly" }, emptyVars, cbs);
+    expect(cbs.purchaseProduct).toHaveBeenCalledWith("yearly");
+  });
+
+  test("purchase-product from payload field skips non-string or absent values", () => {
+    const cbs = makeCallbacks();
+    const action: ComponentBoundAction = {
+      type: "purchase-product",
+      payload: { type: "action-payload", field: "productId" },
+    };
+    executeComponentBoundAction(action, { productId: 42 }, emptyVars, cbs);
+    executeComponentBoundAction(action, {}, emptyVars, cbs);
+    executeComponentBoundAction(action, undefined, emptyVars, cbs);
+    expect(cbs.purchaseProduct).not.toHaveBeenCalled();
+  });
+});
diff --git a/packages/paywall-renderer-web-core/src/actions.ts b/packages/paywall-renderer-web-core/src/actions.ts
new file mode 100644
index 000000000..3dca18ded
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/actions.ts
@@ -0,0 +1,230 @@
+import type {
+  Action,
+  ActionValueSource,
+  ComponentActionValueSource,
+  ComponentBoundAction,
+  ComponentProductSource,
+  ProductSource,
+  VariableValue,
+} from "./snapshot-types";
+import type { VariableReader } from "./variables";
+
+export interface ActionCallbacks {
+  onClosePaywall: () => void;
+  onPurchaseProduct: (productId: string) => void;
+  onSetVariable: (variableId: string, newValue: VariableValue) => void;
+}
+
+function resolveActionValue(
+  source: ActionValueSource,
+  variables: VariableReader,
+): VariableValue | undefined {
+  if (!source?.type) {
+    return undefined;
+  }
+  if (source.type === "literal") {
+    return source.value as VariableValue;
+  }
+  if (!source.value || !("id" in source.value) || !source.value.id) {
+    return undefined;
+  }
+  return variables.get(source.value.id);
+}
+
+function resolveProductId(source: ProductSource, variables: VariableReader): string | undefined {
+  if (!source?.type) {
+    return undefined;
+  }
+  if (source.type === "literal") {
+    return source.productId;
+  }
+  if (!source.variableId) {
+    return undefined;
+  }
+  const variable = variables.get(source.variableId);
+  if (variable?.key === "product") {
+    return variable.value?.productId;
+  }
+  return undefined;
+}
+
+/**
+ * Executes a visual-node interaction action against the given variable lookup
+ * (a plain store or an ancestor-chain reader) and host callbacks.
+ */
+export function executeAction(
+  action: Action,
+  variables: VariableReader,
+  callbacks: ActionCallbacks,
+): void {
+  if (!action?.type) {
+    return;
+  }
+
+  switch (action.type) {
+    case "none":
+      break;
+    case "set-variable": {
+      const payload = action.payload;
+      if (!payload?.newValue || !payload.variableId) {
+        break;
+      }
+      const newValue = resolveActionValue(payload.newValue, variables);
+      if (newValue !== undefined) {
+        callbacks.onSetVariable(payload.variableId, newValue);
+      }
+      break;
+    }
+    case "close-paywall":
+      callbacks.onClosePaywall();
+      break;
+    case "purchase-product": {
+      if (!action.payload) {
+        break;
+      }
+      const productId = resolveProductId(action.payload, variables);
+      if (productId !== undefined) {
+        callbacks.onPurchaseProduct(productId);
+      }
+      break;
+    }
+  }
+}
+
+/**
+ * Coerces a raw component action payload field to the type of the target
+ * variable. Scalars must match the target's typeof exactly; a product
+ * variable accepts any scalar field as `{ productId: String(value) }`
+ * (spec §3.2). Returns `undefined` (skip) for anything else.
+ */
+function coercePayloadFieldToVariableValue(
+  raw: unknown,
+  target: VariableValue,
+): VariableValue | undefined {
+  switch (target.key) {
+    case "string":
+      return typeof raw === "string" ? { key: "string", value: raw } : undefined;
+    case "number":
+      return typeof raw === "number" ? { key: "number", value: raw } : undefined;
+    case "boolean":
+      return typeof raw === "boolean" ? { key: "boolean", value: raw } : undefined;
+    case "product":
+      return typeof raw === "string" || typeof raw === "number" || typeof raw === "boolean"
+        ? { key: "product", value: { productId: String(raw) } }
+        : undefined;
+    default:
+      return undefined;
+  }
+}
+
+function resolveComponentActionValue(
+  source: ComponentActionValueSource,
+  payload: Record<string, unknown> | undefined,
+  variables: VariableReader,
+  targetVariableId: string,
+): VariableValue | undefined {
+  if (!source?.type) {
+    return undefined;
+  }
+  if (source.type === "literal") {
+    return source.value as VariableValue;
+  }
+  if (source.type === "variable-reference") {
+    if (!source.value || !("id" in source.value) || !source.value.id) {
+      return undefined;
+    }
+    return variables.get(source.value.id);
+  }
+  if (!source.value || !("field" in source.value) || !source.value.field) {
+    return undefined;
+  }
+  const raw = payload?.[source.value.field];
+  if (raw === undefined) {
+    return undefined;
+  }
+  const target = variables.get(targetVariableId);
+  if (target === undefined) {
+    return undefined;
+  }
+  return coercePayloadFieldToVariableValue(raw, target);
+}
+
+function resolveComponentProductId(
+  source: ComponentProductSource,
+  payload: Record<string, unknown> | undefined,
+  variables: VariableReader,
+): string | undefined {
+  if (!source?.type) {
+    return undefined;
+  }
+  if (source.type === "literal") {
+    return source.productId;
+  }
+  if (source.type === "variable-reference") {
+    if (!source.variableId) {
+      return undefined;
+    }
+    const variable = variables.get(source.variableId);
+    if (variable?.key === "product") {
+      return variable.value?.productId;
+    }
+    return undefined;
+  }
+  if (!source.field) {
+    return undefined;
+  }
+  const raw = payload?.[source.field];
+  return typeof raw === "string" ? raw : undefined;
+}
+
+/**
+ * Executes a component bound action with the payload emitted by the component
+ * action (if any). Literal and variable-reference sources behave like
+ * {@link executeAction}; `action-payload` sources resolve `payload[field]`
+ * and no-op when the field is absent. `set-variable` coerces payload-sourced
+ * values to the target variable's type and skips on mismatch.
+ */
+export function executeComponentBoundAction(
+  action: ComponentBoundAction,
+  payload: Record<string, unknown> | undefined,
+  variables: VariableReader,
+  callbacks: ActionCallbacks,
+): void {
+  if (!action?.type) {
+    return;
+  }
+
+  switch (action.type) {
+    case "none":
+      break;
+    case "set-variable": {
+      const actionPayload = action.payload;
+      if (!actionPayload?.newValue || !actionPayload.variableId) {
+        break;
+      }
+      const newValue = resolveComponentActionValue(
+        actionPayload.newValue,
+        payload,
+        variables,
+        actionPayload.variableId,
+      );
+      if (newValue !== undefined) {
+        callbacks.onSetVariable(actionPayload.variableId, newValue);
+      }
+      break;
+    }
+    case "close-paywall":
+      callbacks.onClosePaywall();
+      break;
+    case "purchase-product": {
+      if (!action.payload) {
+        break;
+      }
+      const productId = resolveComponentProductId(action.payload, payload, variables);
+      if (productId !== undefined) {
+        callbacks.onPurchaseProduct(productId);
+      }
+      break;
+    }
+  }
+}
diff --git a/packages/paywall-renderer-web-core/src/evaluator.test.ts b/packages/paywall-renderer-web-core/src/evaluator.test.ts
new file mode 100644
index 000000000..7d98df79f
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/evaluator.test.ts
@@ -0,0 +1,228 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { evaluateDNF } from "./evaluator";
+import type { Conjunction, DNF, Operand, Predicate, PredicateType } from "./snapshot-types";
+import type { VariableStore } from "./variables";
+
+function lit(key: "boolean", value: boolean): Operand;
+function lit(key: "number", value: number): Operand;
+function lit(key: "string", value: string): Operand;
+function lit(key: string, value: unknown): Operand {
+  return { type: "literal" as const, value: { key, value } } as Operand;
+}
+
+function varRef(id: string): Operand {
+  return { type: "variable-reference", value: { id } };
+}
+
+function predicate(type: PredicateType, left: Operand, right: Operand): Predicate {
+  return { type, value: { left, right } };
+}
+
+function and(...predicates: Predicate[]): Conjunction {
+  return {
+    type: "and",
+    value: predicates.map((value, index) => ({
+      id: `predicate-${index}`,
+      pos: `a${index}`,
+      value,
+    })),
+  };
+}
+
+function or(...conjunctions: Conjunction[]): DNF {
+  return {
+    type: "or",
+    value: conjunctions.map((value, index) => ({
+      id: `conjunction-${index}`,
+      pos: `a${index}`,
+      value,
+    })),
+  };
+}
+
+function orRaw(...conjunctions: Conjunction[]): DNF {
+  return {
+    type: "or",
+    value: conjunctions as unknown as DNF["value"],
+  };
+}
+
+describe("evaluateDNF", () => {
+  describe("equals predicate", () => {
+    test("true when both literals match", () => {
+      const dnf = or(and(predicate("equals", lit("boolean", true), lit("boolean", true))));
+      expect(evaluateDNF(dnf, new Map())).toBe(true);
+    });
+
+    test("false when literals differ", () => {
+      const dnf = or(and(predicate("equals", lit("boolean", true), lit("boolean", false))));
+      expect(evaluateDNF(dnf, new Map())).toBe(false);
+    });
+
+    test("compares numbers", () => {
+      const dnf = or(and(predicate("equals", lit("number", 5), lit("number", 5))));
+      expect(evaluateDNF(dnf, new Map())).toBe(true);
+    });
+
+    test("compares strings", () => {
+      const dnf = or(and(predicate("equals", lit("string", "a"), lit("string", "b"))));
+      expect(evaluateDNF(dnf, new Map())).toBe(false);
+    });
+  });
+
+  describe("not-equals predicate", () => {
+    test("true when values differ", () => {
+      const dnf = or(and(predicate("not-equals", lit("number", 1), lit("number", 2))));
+      expect(evaluateDNF(dnf, new Map())).toBe(true);
+    });
+
+    test("false when values match", () => {
+      const dnf = or(and(predicate("not-equals", lit("number", 1), lit("number", 1))));
+      expect(evaluateDNF(dnf, new Map())).toBe(false);
+    });
+  });
+
+  describe("comparison predicates", () => {
+    test("greater-than", () => {
+      expect(
+        evaluateDNF(
+          or(and(predicate("greater-than", lit("number", 5), lit("number", 3)))),
+          new Map(),
+        ),
+      ).toBe(true);
+      expect(
+        evaluateDNF(
+          or(and(predicate("greater-than", lit("number", 3), lit("number", 5)))),
+          new Map(),
+        ),
+      ).toBe(false);
+      expect(
+        evaluateDNF(
+          or(and(predicate("greater-than", lit("number", 5), lit("number", 5)))),
+          new Map(),
+        ),
+      ).toBe(false);
+    });
+
+    test("greater-than-or-equal", () => {
+      expect(
+        evaluateDNF(
+          or(and(predicate("greater-than-or-equal", lit("number", 5), lit("number", 5)))),
+          new Map(),
+        ),
+      ).toBe(true);
+      expect(
+        evaluateDNF(
+          or(and(predicate("greater-than-or-equal", lit("number", 4), lit("number", 5)))),
+          new Map(),
+        ),
+      ).toBe(false);
+    });
+
+    test("less-than", () => {
+      expect(
+        evaluateDNF(or(and(predicate("less-than", lit("number", 3), lit("number", 5)))), new Map()),
+      ).toBe(true);
+      expect(
+        evaluateDNF(or(and(predicate("less-than", lit("number", 5), lit("number", 3)))), new Map()),
+      ).toBe(false);
+    });
+
+    test("less-than-or-equal", () => {
+      expect(
+        evaluateDNF(
+          or(and(predicate("less-than-or-equal", lit("number", 5), lit("number", 5)))),
+          new Map(),
+        ),
+      ).toBe(true);
+      expect(
+        evaluateDNF(
+          or(and(predicate("less-than-or-equal", lit("number", 6), lit("number", 5)))),
+          new Map(),
+        ),
+      ).toBe(false);
+    });
+  });
+
+  describe("variable references", () => {
+    test("resolves variable reference from store", () => {
+      const variables: VariableStore = new Map([["var-1", { key: "boolean", value: true }]]);
+      const dnf = or(and(predicate("equals", varRef("var-1"), lit("boolean", true))));
+      expect(evaluateDNF(dnf, variables)).toBe(true);
+    });
+
+    test("returns false for missing variable reference", () => {
+      const dnf = or(and(predicate("equals", varRef("missing"), lit("boolean", true))));
+      expect(evaluateDNF(dnf, new Map())).toBe(false);
+    });
+
+    test("compares two variable references", () => {
+      const variables: VariableStore = new Map([
+        ["var-1", { key: "number", value: 10 }],
+        ["var-2", { key: "number", value: 10 }],
+      ]);
+      const dnf = or(and(predicate("equals", varRef("var-1"), varRef("var-2"))));
+      expect(evaluateDNF(dnf, variables)).toBe(true);
+    });
+  });
+
+  describe("conjunction (AND)", () => {
+    test("all predicates must be true", () => {
+      const dnf = or(
+        and(
+          predicate("equals", lit("boolean", true), lit("boolean", true)),
+          predicate("equals", lit("number", 1), lit("number", 1)),
+        ),
+      );
+      expect(evaluateDNF(dnf, new Map())).toBe(true);
+    });
+
+    test("fails if any predicate is false", () => {
+      const dnf = or(
+        and(
+          predicate("equals", lit("boolean", true), lit("boolean", true)),
+          predicate("equals", lit("number", 1), lit("number", 2)),
+        ),
+      );
+      expect(evaluateDNF(dnf, new Map())).toBe(false);
+    });
+  });
+
+  describe("DNF (OR of ANDs)", () => {
+    test("true if any conjunction is true", () => {
+      const dnf = or(
+        and(predicate("equals", lit("boolean", true), lit("boolean", false))),
+        and(predicate("equals", lit("number", 1), lit("number", 1))),
+      );
+      expect(evaluateDNF(dnf, new Map())).toBe(true);
+    });
+
+    test("false if all conjunctions are false", () => {
+      const dnf = or(
+        and(predicate("equals", lit("boolean", true), lit("boolean", false))),
+        and(predicate("equals", lit("number", 1), lit("number", 2))),
+      );
+      expect(evaluateDNF(dnf, new Map())).toBe(false);
+    });
+
+    test("supports legacy payloads with plain (entry-less) conjunction/predicate arrays", () => {
+      const dnf = orRaw({
+        type: "and",
+        value: [
+          {
+            type: "equals",
+            value: {
+              left: { type: "literal", value: { key: "boolean", value: true } },
+              right: {
+                type: "literal",
+                value: { key: "boolean", value: true },
+              },
+            },
+          },
+        ] as unknown as Conjunction["value"],
+      } as Conjunction);
+      expect(evaluateDNF(dnf, new Map())).toBe(true);
+    });
+  });
+});
diff --git a/packages/paywall-renderer-web-core/src/evaluator.ts b/packages/paywall-renderer-web-core/src/evaluator.ts
new file mode 100644
index 000000000..75af192d9
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/evaluator.ts
@@ -0,0 +1,109 @@
+import type { ArrayEntry } from "@voidhash/mimic-schema";
+
+import type { Conjunction, DNF, Operand, Predicate, VariableValue } from "./snapshot-types";
+import type { VariableReader } from "./variables";
+
+/**
+ * Unwraps an ordered-array entry (`{id, pos, value}`) to its value. Legacy
+ * embedded payloads carry bare values (and pos-less `{id, value}` entries),
+ * so the runtime check stays permissive: anything with `id` + `value` and no
+ * `type` discriminator is treated as an entry.
+ */
+function unwrapValue<T>(candidate: T | ArrayEntry<T | undefined> | undefined): T | undefined {
+  if (!candidate) {
+    return undefined;
+  }
+  if (
+    typeof candidate === "object" &&
+    candidate !== null &&
+    "id" in candidate &&
+    "value" in candidate &&
+    !("type" in candidate)
+  ) {
+    return candidate.value as T;
+  }
+  return candidate as T;
+}
+
+export function evaluateDNF(dnf: DNF, variables: VariableReader): boolean {
+  if (!dnf?.value || !Array.isArray(dnf.value)) {
+    return false;
+  }
+  return dnf.value.some((conjunctionEntry) => {
+    const conjunction = unwrapValue<Conjunction>(conjunctionEntry);
+    if (!conjunction) {
+      return false;
+    }
+    return evaluateConjunction(conjunction, variables);
+  });
+}
+
+function evaluateConjunction(conjunction: Conjunction, variables: VariableReader): boolean {
+  if (!conjunction?.value || !Array.isArray(conjunction.value)) {
+    return false;
+  }
+  return conjunction.value.every((predicateEntry) => {
+    const predicate = unwrapValue<Predicate>(predicateEntry);
+    if (!predicate) {
+      return false;
+    }
+    return evaluatePredicate(predicate, variables);
+  });
+}
+
+function resolveOperand(operand: Operand, variables: VariableReader): VariableValue | undefined {
+  if (operand.type === "literal") {
+    return operand.value;
+  }
+  if (!operand.value || !("id" in operand.value) || !operand.value.id) {
+    return undefined;
+  }
+  return variables.get(operand.value.id);
+}
+
+function toComparable(v: VariableValue): string | number | boolean {
+  switch (v.key) {
+    case "boolean":
+      return v.value ?? false;
+    case "number":
+      return v.value ?? 0;
+    case "string":
+      return v.value ?? "";
+    case "product":
+      return v.value?.productId ?? "";
+    default:
+      return "";
+  }
+}
+
+function evaluatePredicate(predicate: Predicate, variables: VariableReader): boolean {
+  if (!predicate?.value?.left || !predicate?.value?.right) {
+    return false;
+  }
+  const left = resolveOperand(predicate.value.left, variables);
+  const right = resolveOperand(predicate.value.right, variables);
+
+  if (left === undefined || right === undefined) {
+    return false;
+  }
+
+  const l = toComparable(left);
+  const r = toComparable(right);
+
+  switch (predicate.type) {
+    case "equals":
+      return l === r;
+    case "not-equals":
+      return l !== r;
+    case "greater-than":
+      return l > r;
+    case "greater-than-or-equal":
+      return l >= r;
+    case "less-than":
+      return l < r;
+    case "less-than-or-equal":
+      return l <= r;
+    default:
+      return false;
+  }
+}
diff --git a/packages/paywall-renderer-web-core/src/index.ts b/packages/paywall-renderer-web-core/src/index.ts
new file mode 100644
index 000000000..61d1e0541
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/index.ts
@@ -0,0 +1,101 @@
+// Types
+export type {
+  CodeComponentSnapshotNode,
+  ComponentSnapshotNode,
+  LibrarySnapshotNode,
+  NodeType,
+  PathSnapshotNode,
+  RenderOptions,
+  RenderResult,
+  RootSnapshotNode,
+  ScreenSnapshotNode,
+  ScrollViewSnapshotNode,
+  ShapeSnapshotNode,
+  SnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "./types";
+
+// Style builders
+export {
+  buildBackgroundStyles,
+  buildPathStyles,
+  buildPreviewBackgroundStyles,
+  buildScreenContainerStyles,
+  buildScreenLayoutStyles,
+  buildScrollViewStyles,
+  buildShapeContainerStyles,
+  buildTextStyles,
+  buildViewStyles,
+  type BackgroundStyleInput,
+  type PathSvgAttributes,
+  type PreviewBackgroundStyleInput,
+  type ScrollViewOptions,
+  type ViewStyleInput,
+} from "./styles";
+
+// Utilities
+export { px, pxOrAuto } from "./styles/utils";
+
+// Snapshot types
+export type {
+  Action,
+  ActionValueSource,
+  ComponentActionValueSource,
+  ComponentBoundAction,
+  ComponentProductSource,
+  ComponentPropBinding,
+  ComponentPropValue,
+  DNF,
+  Interaction,
+  NodeState,
+  ProductSource,
+  VariableValue,
+} from "./snapshot-types";
+
+// Variables
+export {
+  collectVariables,
+  collectVariableScopes,
+  createChainVariableReader,
+  findDeclaringNodeInChain,
+  type NodeVariableMap,
+  type VariableAliases,
+  type VariableCollection,
+  type VariableReader,
+  type VariableScopes,
+  type VariableStore,
+} from "./variables";
+
+// Evaluator
+export { evaluateDNF } from "./evaluator";
+
+// State resolver
+export { resolveActionOverride, resolveStyle } from "./state-resolver";
+
+// Actions
+export { executeAction, executeComponentBoundAction, type ActionCallbacks } from "./actions";
+
+// Preview trees
+export {
+  buildPreviewNodeStyles,
+  buildPreviewMotionStyles,
+  previewResizeModeToObjectFit,
+  type PreviewImageNode,
+  type PreviewNode,
+  type PreviewNodeStyle,
+  type PreviewResolvedMotionStyle,
+  type PreviewPlaceholderNode,
+  type PreviewPressableNode,
+  type PreviewResizeMode,
+  type PreviewScrollNode,
+  type PreviewSlotNode,
+  type PreviewStyleValue,
+  type PreviewTextNode,
+  type PreviewTree,
+  type PreviewViewNode,
+  type StyledPreviewNodeType,
+} from "./preview-tree";
+
+// Messages
+export { isPaywallMessage, type PaywallMessage } from "./messages";
diff --git a/packages/paywall-renderer-web-core/src/messages.ts b/packages/paywall-renderer-web-core/src/messages.ts
new file mode 100644
index 000000000..31d298a21
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/messages.ts
@@ -0,0 +1,11 @@
+export type PaywallMessage =
+  | { type: "paywall:close" }
+  | { type: "paywall:purchase"; productId: string };
+
+export function isPaywallMessage(data: unknown): data is PaywallMessage {
+  if (typeof data !== "object" || data === null) {
+    return false;
+  }
+  const msg = data as Record<string, unknown>;
+  return msg.type === "paywall:close" || msg.type === "paywall:purchase";
+}
diff --git a/packages/paywall-renderer-web-core/src/preview-tree/index.ts b/packages/paywall-renderer-web-core/src/preview-tree/index.ts
new file mode 100644
index 000000000..508f937c3
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/preview-tree/index.ts
@@ -0,0 +1,22 @@
+export type {
+  PreviewImageNode,
+  PreviewNode,
+  PreviewNodeStyle,
+  PreviewResolvedMotionStyle,
+  PreviewPlaceholderNode,
+  PreviewPressableNode,
+  PreviewResizeMode,
+  PreviewScrollNode,
+  PreviewSlotNode,
+  PreviewStyleValue,
+  PreviewTextNode,
+  PreviewTree,
+  PreviewViewNode,
+  StyledPreviewNodeType,
+} from "./types";
+
+export {
+  buildPreviewMotionStyles,
+  buildPreviewNodeStyles,
+  previewResizeModeToObjectFit,
+} from "./styles";
diff --git a/packages/paywall-renderer-web-core/src/preview-tree/styles.test.ts b/packages/paywall-renderer-web-core/src/preview-tree/styles.test.ts
new file mode 100644
index 000000000..27d817a28
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/preview-tree/styles.test.ts
@@ -0,0 +1,270 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  buildPreviewMotionStyles,
+  buildPreviewNodeStyles,
+  previewResizeModeToObjectFit,
+} from "./styles";
+
+describe("buildPreviewNodeStyles", () => {
+  test("applies the RN view reset for view nodes", () => {
+    const styles = buildPreviewNodeStyles({}, "view");
+    expect(styles).toEqual({
+      alignItems: "stretch",
+      boxSizing: "border-box",
+      display: "flex",
+      flexBasis: "auto",
+      flexDirection: "column",
+      flexShrink: 0,
+      margin: 0,
+      minHeight: 0,
+      minWidth: 0,
+      padding: 0,
+      position: "relative",
+    });
+  });
+
+  test("applies the text reset for text nodes", () => {
+    const styles = buildPreviewNodeStyles({}, "text");
+    expect(styles).toEqual({
+      boxSizing: "border-box",
+      display: "block",
+      margin: 0,
+      padding: 0,
+      whiteSpace: "pre-wrap",
+      wordWrap: "break-word",
+    });
+  });
+
+  test("applies pressable affordances on top of the view reset", () => {
+    const styles = buildPreviewNodeStyles({}, "pressable");
+    expect(styles).toMatchObject({
+      cursor: "pointer",
+      display: "flex",
+      flexDirection: "column",
+      touchAction: "manipulation",
+      userSelect: "none",
+    });
+  });
+
+  test("applies vertical overflow for scroll nodes", () => {
+    const styles = buildPreviewNodeStyles({}, "scroll");
+    expect(styles).toMatchObject({
+      display: "flex",
+      overflowX: "hidden",
+      overflowY: "auto",
+      WebkitOverflowScrolling: "touch",
+    });
+  });
+
+  test("applies the image reset for image nodes", () => {
+    const styles = buildPreviewNodeStyles({}, "image");
+    expect(styles).toEqual({
+      boxSizing: "border-box",
+      display: "block",
+    });
+  });
+
+  test("converts numbers to px and passes percent strings through", () => {
+    const styles = buildPreviewNodeStyles(
+      { fontSize: 16, height: "50%", lineHeight: 24, width: 120 },
+      "text",
+    );
+    expect(styles).toMatchObject({
+      fontSize: "16px",
+      height: "50%",
+      lineHeight: "24px",
+      width: "120px",
+    });
+  });
+
+  test("keeps unitless keys numeric", () => {
+    const styles = buildPreviewNodeStyles(
+      {
+        aspectRatio: 1.5,
+        flex: 1,
+        flexGrow: 2,
+        flexShrink: 1,
+        fontWeight: 700,
+        opacity: 0.5,
+        zIndex: 3,
+      },
+      "view",
+    );
+    expect(styles).toMatchObject({
+      aspectRatio: 1.5,
+      flex: 1,
+      flexGrow: 2,
+      flexShrink: 1,
+      fontWeight: 700,
+      opacity: 0.5,
+      zIndex: 3,
+    });
+  });
+
+  test("emits the flex shorthand before its longhands so longhands win", () => {
+    const styles = buildPreviewNodeStyles({ flex: 1, flexBasis: "auto" }, "view");
+    const keys = Object.keys(styles);
+    expect(keys.indexOf("flex")).toBeLessThan(keys.indexOf("flexBasis"));
+    expect(styles).toMatchObject({ flex: 1, flexBasis: "auto" });
+  });
+
+  test("re-emits reset longhands after shorthands so they win in insertion order", () => {
+    const styles = buildPreviewNodeStyles({ flex: 1, flexShrink: 0 }, "view");
+    const keys = Object.keys(styles);
+    expect(keys.indexOf("flex")).toBeLessThan(keys.indexOf("flexShrink"));
+    expect(styles).toMatchObject({ flex: 1, flexShrink: 0 });
+  });
+
+  test("emits per-side padding/margin edges as px", () => {
+    const styles = buildPreviewNodeStyles(
+      {
+        marginBottom: 4,
+        marginTop: 8,
+        paddingLeft: 30,
+        paddingRight: 20,
+      },
+      "view",
+    );
+    expect(styles).toMatchObject({
+      marginBottom: "4px",
+      marginTop: "8px",
+      paddingLeft: "30px",
+      paddingRight: "20px",
+    });
+  });
+
+  test("a per-side border width implies solid borderStyle", () => {
+    expect(buildPreviewNodeStyles({ borderTopWidth: 2 }, "view")).toMatchObject({
+      borderStyle: "solid",
+      borderTopWidth: "2px",
+    });
+    expect(buildPreviewNodeStyles({ borderColor: "#fff" }, "view")).toMatchObject({
+      borderColor: "#fff",
+      borderStyle: "solid",
+    });
+    expect(
+      buildPreviewNodeStyles({ borderStyle: "dashed", borderTopWidth: 2 }, "view"),
+    ).toMatchObject({
+      borderStyle: "dashed",
+      borderTopWidth: "2px",
+    });
+    expect(buildPreviewNodeStyles({}, "view").borderStyle).toBe(undefined);
+  });
+
+  test("author styles override the reset", () => {
+    const styles = buildPreviewNodeStyles(
+      { alignItems: "center", flexDirection: "row", position: "absolute" },
+      "view",
+    );
+    expect(styles).toMatchObject({
+      alignItems: "center",
+      flexDirection: "row",
+      position: "absolute",
+    });
+  });
+
+  test("zero stays unitless", () => {
+    expect(buildPreviewNodeStyles({ gap: 0, width: 0 }, "view")).toMatchObject({
+      gap: 0,
+      width: 0,
+    });
+  });
+
+  test("solid background passes backgroundColor through untouched", () => {
+    const styles = buildPreviewNodeStyles(
+      { backgroundColor: "rgba(1, 2, 3, 1)", backgroundType: "solid" },
+      "view",
+    );
+    expect(styles.backgroundColor).toBe("rgba(1, 2, 3, 1)");
+    // The structured derivation keys never reach the DOM.
+    expect("backgroundType" in styles).toBe(false);
+    expect("backgroundGradient" in styles).toBe(false);
+  });
+
+  test("gradient background lowers to an SVG data-URI and drops backgroundColor", () => {
+    const styles = buildPreviewNodeStyles(
+      {
+        backgroundColor: "rgba(1, 2, 3, 1)",
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "linear",
+          startX: 0,
+          startY: 0,
+          endX: 0,
+          endY: 1,
+          stops: [
+            { color: "rgba(255, 0, 0, 1)", position: 0 },
+            { color: "rgba(0, 0, 255, 1)", position: 1 },
+          ],
+        },
+      },
+      "view",
+    );
+    expect(styles.backgroundColor).toBeUndefined();
+    expect(String(styles.backgroundImage)).toContain("data:image/svg+xml");
+    expect(styles.backgroundSize).toBe("100% 100%");
+    expect("backgroundGradient" in styles).toBe(false);
+  });
+
+  test("image background lowers to a url() with resize-mapped size", () => {
+    const styles = buildPreviewNodeStyles(
+      {
+        backgroundType: "image",
+        backgroundImage: { url: "https://cdn.example.com/bg.png", resizeMode: "contain" },
+      },
+      "view",
+    );
+    expect(String(styles.backgroundImage)).toContain("https://cdn.example.com/bg.png");
+    expect(styles.backgroundSize).toBe("contain");
+  });
+
+  test("a single-stop gradient degrades to that solid color", () => {
+    const styles = buildPreviewNodeStyles(
+      {
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "linear",
+          startX: 0,
+          startY: 0,
+          endX: 1,
+          endY: 1,
+          stops: [{ color: "rgba(9, 9, 9, 1)", position: 0 }],
+        },
+      },
+      "view",
+    );
+    expect(styles.backgroundColor).toBe("rgba(9, 9, 9, 1)");
+    expect(styles.backgroundImage).toBeUndefined();
+  });
+});
+
+describe("buildPreviewMotionStyles", () => {
+  test("lowers v2 rest motion after static style using canonical transform order", () => {
+    expect(
+      buildPreviewNodeStyles({ opacity: 0.2 }, "view", {
+        opacity: 1,
+        rotate: 10,
+        scale: 1.1,
+        x: 12,
+        y: -4,
+      }),
+    ).toMatchObject({
+      opacity: 1,
+      transform: "translate3d(12px, -4px, 0) rotate(10deg) scale(1.1)",
+    });
+    expect(buildPreviewMotionStyles({ transformOrigin: { x: 0.5, y: 0 } })).toEqual({
+      transformOrigin: "50% 0%",
+    });
+  });
+});
+
+describe("previewResizeModeToObjectFit", () => {
+  test("maps every resize mode and defaults to cover", () => {
+    expect(previewResizeModeToObjectFit("cover")).toBe("cover");
+    expect(previewResizeModeToObjectFit("contain")).toBe("contain");
+    expect(previewResizeModeToObjectFit("stretch")).toBe("fill");
+    expect(previewResizeModeToObjectFit("center")).toBe("none");
+    expect(previewResizeModeToObjectFit(undefined)).toBe("cover");
+  });
+});
diff --git a/packages/paywall-renderer-web-core/src/preview-tree/styles.ts b/packages/paywall-renderer-web-core/src/preview-tree/styles.ts
new file mode 100644
index 000000000..10da16dd0
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/preview-tree/styles.ts
@@ -0,0 +1,246 @@
+import type { Properties } from "csstype";
+
+import { buildPreviewBackgroundStyles } from "../styles/background";
+import type {
+  PreviewNodeStyle,
+  PreviewResolvedMotionStyle,
+  PreviewResizeMode,
+  StyledPreviewNodeType,
+} from "./types";
+
+/**
+ * React Native `View` reset, mirrored from the OSS DOM host
+ * (`@voidhash/paywalls` dom-host). Preview trees are authored with RN layout
+ * expectations (column flow, no implicit shrink, border box), so the web
+ * renderers re-create them instead of inheriting block-layout defaults.
+ */
+const VIEW_BASE: Record<string, string | number> = {
+  alignItems: "stretch",
+  boxSizing: "border-box",
+  display: "flex",
+  flexBasis: "auto",
+  flexDirection: "column",
+  flexShrink: 0,
+  margin: 0,
+  minHeight: 0,
+  minWidth: 0,
+  padding: 0,
+  position: "relative",
+};
+
+const TEXT_BASE: Record<string, string | number> = {
+  boxSizing: "border-box",
+  display: "block",
+  margin: 0,
+  padding: 0,
+  whiteSpace: "pre-wrap",
+  wordWrap: "break-word",
+};
+
+const IMAGE_BASE: Record<string, string | number> = {
+  boxSizing: "border-box",
+  display: "block",
+};
+
+const PRESSABLE_BASE: Record<string, string | number> = {
+  ...VIEW_BASE,
+  cursor: "pointer",
+  touchAction: "manipulation",
+  userSelect: "none",
+};
+
+// Preview trees carry no `horizontal` flag, so scroll nodes always get the RN
+// ScrollView default (vertical) overflow.
+const SCROLL_BASE: Record<string, string | number> = {
+  ...VIEW_BASE,
+  overflowX: "hidden",
+  overflowY: "auto",
+  WebkitOverflowScrolling: "touch",
+};
+
+const BASE_BY_NODE_TYPE: Record<StyledPreviewNodeType, Record<string, string | number>> = {
+  image: IMAGE_BASE,
+  pressable: PRESSABLE_BASE,
+  scroll: SCROLL_BASE,
+  text: TEXT_BASE,
+  view: VIEW_BASE,
+};
+
+/**
+ * §3.1 keys that are CSS shorthands on the DOM. Committed later in an inline
+ * style object they reset their longhands (`flex` clears `flexBasis`, …),
+ * whereas React Native gives longhands precedence within one object regardless
+ * of declaration order — so these keys are emitted before everything else. The
+ * style vocabulary has no shorthand spacing/border keys (per-side longhands
+ * only), so `flex` and `gap` are the only shorthands that remain.
+ */
+const CSS_SHORTHAND_KEYS = ["flex", "gap"] as const;
+
+/**
+ * Structured background keys the renderer consumes to derive the CSS background
+ * quad (see {@link buildPreviewBackgroundStyles}) rather than emitting as raw
+ * longhands. `backgroundColor` is intentionally NOT here: a `solid`/absent type
+ * lets it pass through as the plain CSS property.
+ */
+const BACKGROUND_DERIVED_KEYS = [
+  "backgroundType",
+  "backgroundGradient",
+  "backgroundImage",
+] as const;
+
+const SKIPPED_LONGHAND_KEYS = new Set<string>([...CSS_SHORTHAND_KEYS, ...BACKGROUND_DERIVED_KEYS]);
+
+/**
+ * Keys whose numeric values are unitless in CSS; every other numeric value is
+ * an RN point and becomes `px`.
+ */
+const UNITLESS_KEYS = new Set<string>([
+  "aspectRatio",
+  "flex",
+  "flexGrow",
+  "flexShrink",
+  "fontWeight",
+  "opacity",
+  "zIndex",
+]);
+
+function toCssValue(key: string, value: string | number): string | number {
+  if (typeof value === "number" && !UNITLESS_KEYS.has(key)) {
+    return value === 0 ? 0 : `${value}px`;
+  }
+  return value;
+}
+
+const RESIZE_MODE_TO_OBJECT_FIT: Record<PreviewResizeMode, Properties["objectFit"]> = {
+  center: "none",
+  contain: "contain",
+  cover: "cover",
+  stretch: "fill",
+};
+
+/**
+ * Maps a preview image node's `resizeMode` to CSS `object-fit`. Mirrors the
+ * OSS DOM host, including its `cover` default for an absent `resizeMode`.
+ */
+export function previewResizeModeToObjectFit(
+  resizeMode: PreviewResizeMode | undefined,
+): Properties["objectFit"] {
+  return RESIZE_MODE_TO_OBJECT_FIT[resizeMode ?? "cover"];
+}
+
+/** Lowers the v2 rest-motion field using the same canonical transform ordering as the DOM host. */
+export function buildPreviewMotionStyles(
+  motion: PreviewResolvedMotionStyle | undefined,
+): Properties {
+  if (!motion) return {};
+  const transforms: string[] = [];
+  if (motion.x !== undefined || motion.y !== undefined) {
+    transforms.push(`translate3d(${motion.x ?? 0}px, ${motion.y ?? 0}px, 0)`);
+  }
+  if (motion.rotate !== undefined) transforms.push(`rotate(${motion.rotate}deg)`);
+  if (motion.scale !== undefined) transforms.push(`scale(${motion.scale})`);
+  if (motion.scaleX !== undefined) transforms.push(`scaleX(${motion.scaleX})`);
+  if (motion.scaleY !== undefined) transforms.push(`scaleY(${motion.scaleY})`);
+  return {
+    ...(motion.opacity === undefined ? {} : { opacity: motion.opacity }),
+    ...(motion.backgroundColor === undefined ? {} : { backgroundColor: motion.backgroundColor }),
+    ...(transforms.length === 0 ? {} : { transform: transforms.join(" ") }),
+    ...(motion.transformOrigin === undefined
+      ? {}
+      : {
+          transformOrigin: `${motion.transformOrigin.x * 100}% ${motion.transformOrigin.y * 100}%`,
+        }),
+  } as Properties;
+}
+
+/**
+ * Lowers a contract §3.1 preview node style onto the web as csstype
+ * `Properties`, porting the OSS DOM-host semantics:
+ *
+ * - per-node-type RN resets (view/pressable/scroll flex-column reset, text
+ *   block reset, image block reset; pressable cursor affordances; scroll
+ *   vertical overflow);
+ * - deterministic specificity order — CSS shorthands (`flex`, `gap`) first,
+ *   then explicit edges/corners — so RN's "longhand wins within one object"
+ *   semantics hold on the DOM. Longhands already present in the node reset
+ *   (`flexShrink`, `flexBasis`, …) are re-inserted at the end of the object's
+ *   key order, since inline styles apply in insertion order and a
+ *   reset-position longhand would otherwise lose to a later shorthand;
+ * - numbers become `px` (except unitless keys), percent and other strings
+ *   pass through;
+ * - a per-side `border*Width`/`borderColor` without `borderStyle` implies
+ *   `solid` (RN renders solid borders implicitly).
+ * - a `backgroundType` of `gradient`/`image` is lowered onto the CSS background
+ *   quad (SVG data-URI or `url(...)`) via {@link buildPreviewBackgroundStyles};
+ *   the structured `backgroundGradient`/`backgroundImage` keys never reach the
+ *   DOM as raw CSS. A `solid`/absent type leaves `backgroundColor` as-is.
+ *
+ * Image `object-fit` is node data, not style — see
+ * {@link previewResizeModeToObjectFit}.
+ */
+export function buildPreviewNodeStyles(
+  style: PreviewNodeStyle,
+  nodeType: StyledPreviewNodeType,
+  motion?: PreviewResolvedMotionStyle,
+): Properties {
+  const out: Record<string, string | number> = { ...BASE_BY_NODE_TYPE[nodeType] };
+
+  // Deleting before assigning moves keys the reset already declared to the
+  // end of insertion order; plain assignment would update the value but keep
+  // the early reset position, letting a later shorthand clobber the longhand.
+  const emitLonghand = (key: string, value: string | number) => {
+    delete out[key];
+    out[key] = toCssValue(key, value);
+  };
+
+  for (const key of CSS_SHORTHAND_KEYS) {
+    const value = style[key];
+    if (value !== undefined) {
+      out[key] = toCssValue(key, value);
+    }
+  }
+
+  for (const [key, value] of Object.entries(style)) {
+    // Structured background values (objects) are derived below, not emitted as
+    // longhands; the scalar guard both skips them and narrows the type.
+    if (value === undefined || SKIPPED_LONGHAND_KEYS.has(key)) {
+      continue;
+    }
+    if (typeof value !== "string" && typeof value !== "number") {
+      continue;
+    }
+    emitLonghand(key, value);
+  }
+
+  const hasBorderWidth =
+    style.borderTopWidth !== undefined ||
+    style.borderRightWidth !== undefined ||
+    style.borderBottomWidth !== undefined ||
+    style.borderLeftWidth !== undefined;
+  if ((hasBorderWidth || style.borderColor !== undefined) && style.borderStyle === undefined) {
+    out.borderStyle = "solid";
+  }
+
+  // A gradient/image background type is lowered onto the CSS background quad,
+  // overriding the pass-through `backgroundColor`. A `solid` (or absent) type
+  // leaves `backgroundColor` untouched.
+  if (style.backgroundType === "gradient" || style.backgroundType === "image") {
+    delete out.backgroundColor;
+    Object.assign(
+      out,
+      buildPreviewBackgroundStyles({
+        backgroundColor:
+          typeof style.backgroundColor === "string" ? style.backgroundColor : undefined,
+        backgroundType: style.backgroundType,
+        backgroundGradient: style.backgroundGradient,
+        backgroundImage: style.backgroundImage,
+      }),
+    );
+  }
+
+  Object.assign(out, buildPreviewMotionStyles(motion));
+
+  // Single wire→CSS boundary widening: §3.1 values arrive as string | number,
+  // which cannot satisfy csstype's per-property literal unions structurally.
+  return out as Properties;
+}
diff --git a/packages/paywall-renderer-web-core/src/preview-tree/types.ts b/packages/paywall-renderer-web-core/src/preview-tree/types.ts
new file mode 100644
index 000000000..bcc4e7380
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/preview-tree/types.ts
@@ -0,0 +1,165 @@
+/**
+ * Render-side mirrors of the paywall-deploy-contract §3 preview node tree.
+ *
+ * These are aliases of the OSS single source of truth, `@voidhash/paywalls/schema`
+ * (the `Paywall*` node/style types + `PAYWALL_TREE_VERSION`), so the render side
+ * never drifts from the authoring library. The one deliberate widening: the OSS
+ * `PaywallStyle` uses precise per-key literal unions (`flexDirection?: "row" | …`,
+ * `flex?: number`, …), whereas the render side treats every §3.1 style value as
+ * `string | number` ({@link PreviewNodeStyle}). This keeps the render side a
+ * strict superset of both OSS `PaywallStyle` and `@voidhash-mono/core`'s
+ * effect-Schema `PreviewStyle` (whose decoded values are also `string | number`),
+ * so a core-decoded tree stays structurally assignable to {@link PreviewTree}.
+ * Validation is the server's job (`PreviewTreeSchema` in `@voidhash-mono/core`);
+ * these types exist so renderers do not depend on `effect` or the server.
+ */
+
+import type {
+  PaywallBackgroundType,
+  PaywallNodeResizeMode,
+  PaywallPlaceholderNode,
+  PaywallSlotNode,
+  PaywallStyle,
+} from "@voidhash/paywalls/schema";
+
+/**
+ * §3 preview node tree wire versions accepted during the motion rollout.
+ * Version 1 omits motion; version 2 adds resolved rest-state motion fields.
+ */
+export type PreviewTreeVersion = 1 | 2;
+
+/** §3.1 style value — a color/length string or a device-independent pixel number. */
+export type PreviewStyleValue = string | number;
+
+/**
+ * The §3.1 style keys whose value is a structured object rather than a scalar:
+ * the gradient/image background descriptors. Their decoded shape is preserved
+ * (an OSS-built preview tree carries plain objects here, not CRDT envelopes), so
+ * {@link buildPreviewNodeStyles} can lower them onto the CSS background quad.
+ */
+type PreviewStructuredStyleKey = "backgroundType" | "backgroundGradient" | "backgroundImage";
+
+/** A gradient color stop — an RGBA color at a normalized `0..1` position. */
+export interface PreviewGradientStop {
+  readonly color: string;
+  readonly position: number;
+}
+
+/**
+ * A gradient background descriptor. Structurally a superset of both OSS
+ * `PaywallBackgroundGradient` (mutable `stops`) and `@voidhash-mono/core`'s
+ * effect-decoded gradient (`readonly` `stops`) — `stops` is `readonly` here so
+ * either assigns in, keeping {@link PreviewNodeStyle} a strict superset of both.
+ */
+export interface PreviewBackgroundGradient {
+  readonly kind: "linear" | "radial";
+  readonly startX: number;
+  readonly startY: number;
+  readonly endX: number;
+  readonly endY: number;
+  readonly stops: ReadonlyArray<PreviewGradientStop>;
+}
+
+/** An image background descriptor. Superset of the OSS/core image shapes. */
+export interface PreviewBackgroundImage {
+  readonly url: string;
+  readonly resizeMode: "cover" | "contain" | "stretch" | "center";
+}
+
+/**
+ * Contract §3.1 RN-compatible style subset. Keyed to the OSS {@link PaywallStyle}
+ * vocabulary (a key added or removed there flows here automatically). Scalar
+ * values are widened to {@link PreviewStyleValue} so wire/`effect`-decoded trees
+ * — whose style values arrive as `string | number` — remain assignable; the
+ * three structured background keys keep their object shape (widened to
+ * `readonly` so both OSS and core's decoded gradient assign in).
+ */
+export type PreviewNodeStyle = {
+  readonly [K in keyof PaywallStyle as K extends PreviewStructuredStyleKey ? never : K]?:
+    | PreviewStyleValue
+    | undefined;
+} & {
+  readonly backgroundType?: PaywallBackgroundType | undefined;
+  readonly backgroundGradient?: PreviewBackgroundGradient | undefined;
+  readonly backgroundImage?: PreviewBackgroundImage | undefined;
+};
+
+/** How an image node fills its frame. Exact alias of the OSS resize mode. */
+export type PreviewResizeMode = PaywallNodeResizeMode;
+
+/** One resolved, serializable rest visual state from a v2 preview artifact. */
+export interface PreviewResolvedMotionStyle {
+  readonly x?: number | undefined;
+  readonly y?: number | undefined;
+  readonly scale?: number | undefined;
+  readonly scaleX?: number | undefined;
+  readonly scaleY?: number | undefined;
+  readonly rotate?: number | undefined;
+  readonly opacity?: number | undefined;
+  readonly backgroundColor?: string | undefined;
+  readonly transformOrigin?: { readonly x: number; readonly y: number } | undefined;
+}
+
+export interface PreviewViewNode {
+  readonly type: "view";
+  readonly style: PreviewNodeStyle;
+  readonly motion?: PreviewResolvedMotionStyle | undefined;
+  readonly children: ReadonlyArray<PreviewNode>;
+}
+
+export interface PreviewPressableNode {
+  readonly type: "pressable";
+  readonly style: PreviewNodeStyle;
+  readonly motion?: PreviewResolvedMotionStyle | undefined;
+  readonly children: ReadonlyArray<PreviewNode>;
+  /** The declared component action name this pressable fires. */
+  readonly action?: string | undefined;
+}
+
+export interface PreviewScrollNode {
+  readonly type: "scroll";
+  readonly style: PreviewNodeStyle;
+  readonly motion?: PreviewResolvedMotionStyle | undefined;
+  readonly children: ReadonlyArray<PreviewNode>;
+}
+
+export interface PreviewTextNode {
+  readonly type: "text";
+  readonly style: PreviewNodeStyle;
+  readonly motion?: PreviewResolvedMotionStyle | undefined;
+  readonly text: string;
+}
+
+export interface PreviewImageNode {
+  readonly type: "image";
+  readonly style: PreviewNodeStyle;
+  readonly motion?: PreviewResolvedMotionStyle | undefined;
+  readonly src: string;
+  readonly resizeMode?: PreviewResizeMode | undefined;
+}
+
+/** Slot marker — the editor mounts the component node's children here. Alias of the OSS node. */
+export type PreviewSlotNode = PaywallSlotNode;
+
+/** Emitted where rendering failed or produced nothing renderable. Alias of the OSS node. */
+export type PreviewPlaceholderNode = PaywallPlaceholderNode;
+
+/** Closed contract §3 node union. */
+export type PreviewNode =
+  | PreviewViewNode
+  | PreviewPressableNode
+  | PreviewScrollNode
+  | PreviewTextNode
+  | PreviewImageNode
+  | PreviewSlotNode
+  | PreviewPlaceholderNode;
+
+/** The §3 `previews/<state>.json` artifact: a tree of closed primitives. */
+export interface PreviewTree {
+  readonly treeVersion: PreviewTreeVersion;
+  readonly state: string;
+  readonly root: PreviewNode;
+}
+
+/** Preview node types that carry a `style` field. */
+export type StyledPreviewNodeType = "view" | "pressable" | "scroll" | "text" | "image";
diff --git a/packages/paywall-renderer-web-core/src/snapshot-types.ts b/packages/paywall-renderer-web-core/src/snapshot-types.ts
new file mode 100644
index 000000000..1d37bc735
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/snapshot-types.ts
@@ -0,0 +1,53 @@
+import type {
+  Action,
+  ActionOverride,
+  ActionValueSource,
+  ComponentActionValueSource,
+  ComponentBoundAction,
+  ComponentProductSource,
+  ComponentPropBinding,
+  ComponentPropValue,
+  ConjunctionSnapshot,
+  DNFSnapshot,
+  Interaction,
+  OperandSnapshot,
+  PathNodeData,
+  PredicateSnapshot,
+  ProductSource,
+  ScreenNodeData,
+  ShapeNodeData,
+  TextNodeData,
+  Variable,
+  VariableType,
+  VariableTypeKey,
+  ViewNodeData,
+} from "@voidhash/mimic-schema";
+
+export type {
+  Action,
+  ActionOverride,
+  ActionValueSource,
+  ComponentActionValueSource,
+  ComponentBoundAction,
+  ComponentProductSource,
+  ComponentPropBinding,
+  ComponentPropValue,
+  Interaction,
+  ProductSource,
+  Variable,
+  VariableTypeKey as VariableValueKey,
+};
+
+export type Conjunction = NonNullable<ConjunctionSnapshot>;
+export type DNF = NonNullable<DNFSnapshot>;
+export type NodeState =
+  | ViewNodeData["data"]["states"][number]["value"]
+  | PathNodeData["data"]["states"][number]["value"]
+  | ScreenNodeData["data"]["states"][number]["value"]
+  | ShapeNodeData["data"]["states"][number]["value"]
+  | TextNodeData["data"]["states"][number]["value"];
+export type Operand = NonNullable<OperandSnapshot>;
+export type Predicate = NonNullable<PredicateSnapshot>;
+export type VariableValue = VariableType;
+
+export type PredicateType = Predicate["type"];
diff --git a/packages/paywall-renderer-web-core/src/state-resolver.test.ts b/packages/paywall-renderer-web-core/src/state-resolver.test.ts
new file mode 100644
index 000000000..4c2b24542
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/state-resolver.test.ts
@@ -0,0 +1,332 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import type { Action, DNF, NodeState } from "./snapshot-types";
+import { resolveActionOverride, resolveStyle } from "./state-resolver";
+import type { VariableStore } from "./variables";
+
+function makeDNF(literal: boolean): DNF {
+  return {
+    type: "or",
+    value: [
+      {
+        id: "conjunction-1",
+        pos: "a0",
+        value: {
+          type: "and" as const,
+          value: [
+            {
+              id: "predicate-1",
+              pos: "a0",
+              value: {
+                type: "equals" as const,
+                value: {
+                  left: {
+                    type: "literal" as const,
+                    value: { key: "boolean" as const, value: true },
+                  },
+                  right: {
+                    type: "literal" as const,
+                    value: { key: "boolean" as const, value: literal },
+                  },
+                },
+              },
+            },
+          ],
+        },
+      },
+    ],
+  };
+}
+
+const alwaysTrue = makeDNF(true);
+const alwaysFalse = makeDNF(false);
+
+function variableEquals(variableId: string, value: boolean): DNF {
+  return {
+    type: "or",
+    value: [
+      {
+        id: "conjunction-1",
+        pos: "a0",
+        value: {
+          type: "and" as const,
+          value: [
+            {
+              id: "predicate-1",
+              pos: "a0",
+              value: {
+                type: "equals" as const,
+                value: {
+                  left: {
+                    type: "variable-reference" as const,
+                    value: { id: variableId },
+                  },
+                  right: {
+                    type: "literal" as const,
+                    value: { key: "boolean" as const, value },
+                  },
+                },
+              },
+            },
+          ],
+        },
+      },
+    ],
+  };
+}
+
+function variableEqualsRaw(variableId: string, value: boolean): DNF {
+  return {
+    type: "or",
+    value: [
+      {
+        type: "and",
+        value: [
+          {
+            type: "equals",
+            value: {
+              left: {
+                type: "variable-reference",
+                value: { id: variableId },
+              },
+              right: {
+                type: "literal",
+                value: { key: "boolean", value },
+              },
+            },
+          },
+        ],
+      },
+    ] as unknown as DNF["value"],
+  };
+}
+
+function state(
+  condition: DNF,
+  styleOverrides: Record<string, unknown>,
+  actionOverrides?: Array<{ interactionId: string; action: Action }>,
+): { value: NodeState } {
+  return {
+    value: {
+      condition,
+      id: "state-1",
+      name: "State",
+      overrides: {
+        style: styleOverrides,
+        ...(actionOverrides ? { actions: actionOverrides } : {}),
+      },
+    } as unknown as NodeState,
+  };
+}
+
+describe("resolveStyle", () => {
+  const baseStyle = { backgroundColor: "red", opacity: 1, width: 100 };
+  const emptyVars: VariableStore = new Map();
+
+  test("returns base style when no states", () => {
+    const result = resolveStyle(baseStyle, [], emptyVars);
+    expect(result).toEqual(baseStyle);
+  });
+
+  test("returns base style when state condition is false", () => {
+    const result = resolveStyle(
+      baseStyle,
+      [state(alwaysFalse, { backgroundColor: "blue" })],
+      emptyVars,
+    );
+    expect(result).toEqual(baseStyle);
+  });
+
+  test("merges active state style overrides", () => {
+    const result = resolveStyle(
+      baseStyle,
+      [state(alwaysTrue, { backgroundColor: "blue" })],
+      emptyVars,
+    );
+    expect(result).toEqual({ backgroundColor: "blue", opacity: 1, width: 100 });
+  });
+
+  test("last active state wins for conflicting properties", () => {
+    const result = resolveStyle(
+      baseStyle,
+      [
+        state(alwaysTrue, { backgroundColor: "blue" }),
+        state(alwaysTrue, { backgroundColor: "green" }),
+      ],
+      emptyVars,
+    );
+    expect(result).toEqual({
+      backgroundColor: "green",
+      opacity: 1,
+      width: 100,
+    });
+  });
+
+  test("merges non-conflicting properties from multiple states", () => {
+    const result = resolveStyle(
+      baseStyle,
+      [state(alwaysTrue, { backgroundColor: "blue" }), state(alwaysTrue, { opacity: 0.5 })],
+      emptyVars,
+    );
+    expect(result).toEqual({
+      backgroundColor: "blue",
+      opacity: 0.5,
+      width: 100,
+    });
+  });
+
+  test("evaluates state condition using variable store", () => {
+    const variables: VariableStore = new Map([["var-1", { key: "boolean", value: true }]]);
+
+    const result = resolveStyle(
+      baseStyle,
+      [state(variableEquals("var-1", true), { width: 200 })],
+      variables,
+    );
+    expect(result.width).toBe(200);
+  });
+
+  test("skips state when variable condition is false", () => {
+    const variables: VariableStore = new Map([["var-1", { key: "boolean", value: false }]]);
+
+    const result = resolveStyle(
+      baseStyle,
+      [state(variableEquals("var-1", true), { width: 200 })],
+      variables,
+    );
+    expect(result.width).toBe(100);
+  });
+
+  test("ignores undefined override values", () => {
+    const result = resolveStyle(
+      baseStyle,
+      [state(alwaysTrue, { backgroundColor: undefined })],
+      emptyVars,
+    );
+    expect(result.backgroundColor).toBe("red");
+  });
+
+  test("replaces a structured background object wholesale (no deep merge)", () => {
+    const structuredBase = {
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+        stops: [{ value: { color: "rgba(0, 0, 0, 1)", position: 0 } }],
+      },
+    };
+    const overrideGradient = {
+      kind: "radial",
+      startX: 0.5,
+      startY: 0.5,
+      endX: 1,
+      endY: 1,
+      stops: [{ value: { color: "rgba(255, 0, 0, 1)", position: 1 } }],
+    };
+    const result = resolveStyle(
+      structuredBase,
+      [state(alwaysTrue, { backgroundGradient: overrideGradient })],
+      emptyVars,
+    );
+    // The whole gradient object is swapped for the override, not merged
+    // key-by-key — the intended per-key replacement semantic.
+    expect(result.backgroundGradient).toBe(overrideGradient);
+    expect(result.backgroundType).toBe("gradient");
+  });
+});
+
+describe("resolveActionOverride", () => {
+  const emptyVars: VariableStore = new Map();
+  const closeAction: Action = { type: "close-paywall" };
+  const noneAction: Action = { type: "none" };
+
+  test("returns undefined when no states", () => {
+    expect(resolveActionOverride("int-1", [], emptyVars)).toBeUndefined();
+  });
+
+  test("returns undefined when no active states", () => {
+    const states = [state(alwaysFalse, {}, [{ interactionId: "int-1", action: closeAction }])];
+    expect(resolveActionOverride("int-1", states, emptyVars)).toBeUndefined();
+  });
+
+  test("returns overridden action for matching interaction", () => {
+    const states = [state(alwaysTrue, {}, [{ interactionId: "int-1", action: closeAction }])];
+    expect(resolveActionOverride("int-1", states, emptyVars)).toEqual(closeAction);
+  });
+
+  test("returns undefined for non-matching interaction id", () => {
+    const states = [state(alwaysTrue, {}, [{ interactionId: "int-1", action: closeAction }])];
+    expect(resolveActionOverride("int-2", states, emptyVars)).toBeUndefined();
+  });
+
+  test("last active state override wins", () => {
+    const states = [
+      state(alwaysTrue, {}, [{ interactionId: "int-1", action: closeAction }]),
+      state(alwaysTrue, {}, [{ interactionId: "int-1", action: noneAction }]),
+    ];
+    expect(resolveActionOverride("int-1", states, emptyVars)).toEqual(noneAction);
+  });
+
+  test("toggle scenario: override found only when variable condition is true", () => {
+    const setFalseAction: Action = {
+      type: "set-variable",
+      payload: {
+        variableId: "var-isSelected",
+        newValue: { type: "literal", value: { key: "boolean", value: false } },
+      },
+    };
+
+    const states = [
+      state(variableEquals("var-isSelected", true), { backgroundColor: "blue" }, [
+        { interactionId: "int-click", action: setFalseAction },
+      ]),
+    ];
+
+    // First click: isSelected = false -> condition false -> no override.
+    const varsBeforeClick: VariableStore = new Map([
+      ["var-isSelected", { key: "boolean", value: false }],
+    ]);
+    expect(resolveActionOverride("int-click", states, varsBeforeClick)).toBeUndefined();
+
+    // After first click: isSelected = true -> condition true -> override found.
+    const varsAfterFirstClick: VariableStore = new Map([
+      ["var-isSelected", { key: "boolean", value: true }],
+    ]);
+    const override = resolveActionOverride("int-click", states, varsAfterFirstClick);
+    expect(override).toEqual(setFalseAction);
+  });
+
+  test("supports real snapshot action override entries", () => {
+    const close: Action = { type: "close-paywall" };
+    const states = [
+      {
+        value: {
+          id: "state-1",
+          name: "Selected",
+          condition: variableEqualsRaw("entry-isSelected", true),
+          overrides: {
+            style: {},
+            actions: [
+              {
+                id: "entry-1",
+                pos: "a0",
+                value: {
+                  interactionId: "interaction-1",
+                  action: close,
+                },
+              },
+            ],
+          },
+        },
+      } as unknown as { value: NodeState },
+    ];
+
+    const variables: VariableStore = new Map([
+      ["entry-isSelected", { key: "boolean", value: true }],
+    ]);
+    expect(resolveActionOverride("interaction-1", states, variables)).toEqual(close);
+  });
+});
diff --git a/packages/paywall-renderer-web-core/src/state-resolver.ts b/packages/paywall-renderer-web-core/src/state-resolver.ts
new file mode 100644
index 000000000..d0f4f8b5f
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/state-resolver.ts
@@ -0,0 +1,62 @@
+import type { Action, NodeState } from "./snapshot-types";
+import { evaluateDNF } from "./evaluator";
+import type { VariableReader } from "./variables";
+
+export function resolveStyle<TStyle extends Record<string, unknown>>(
+  baseStyle: TStyle,
+  states: ReadonlyArray<{ value: NodeState }>,
+  variables: VariableReader,
+): TStyle {
+  const merged = { ...baseStyle };
+
+  for (const stateEntry of states) {
+    const state = stateEntry.value;
+    if (!state?.condition || !state.overrides) {
+      continue;
+    }
+    if (evaluateDNF(state.condition, variables)) {
+      const overrides = state.overrides.style as Record<string, unknown>;
+      if (overrides) {
+        for (const key of Object.keys(overrides)) {
+          if (overrides[key] !== undefined) {
+            (merged as Record<string, unknown>)[key] = overrides[key];
+          }
+        }
+      }
+    }
+  }
+
+  return merged;
+}
+
+export function resolveActionOverride(
+  interactionId: string,
+  states: ReadonlyArray<{ value: NodeState }>,
+  variables: VariableReader,
+): Action | undefined {
+  let overriddenAction: Action | undefined;
+
+  for (const stateEntry of states) {
+    const state = stateEntry.value;
+    if (!state?.condition || !state.overrides) {
+      continue;
+    }
+    if (evaluateDNF(state.condition, variables)) {
+      const actionOverrides = "actions" in state.overrides ? state.overrides.actions : undefined;
+      if (actionOverrides) {
+        for (const overrideCandidate of actionOverrides) {
+          const override =
+            "value" in overrideCandidate ? overrideCandidate.value : overrideCandidate;
+          if (!override) {
+            continue;
+          }
+          if (override.interactionId === interactionId) {
+            overriddenAction = override.action;
+          }
+        }
+      }
+    }
+  }
+
+  return overriddenAction;
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/background.test.ts b/packages/paywall-renderer-web-core/src/styles/background.test.ts
new file mode 100644
index 000000000..8981c5082
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/background.test.ts
@@ -0,0 +1,231 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { buildBackgroundStyles, type BackgroundStyleInput } from "./background";
+
+const stop = (color: string, position: number) => ({ value: { color, position } });
+
+function decodeGradientSvg(backgroundImage: string): string {
+  const match = /^url\("data:image\/svg\+xml,(.*)"\)$/.exec(backgroundImage);
+  if (!match) {
+    throw new Error(`unexpected backgroundImage: ${backgroundImage}`);
+  }
+  return decodeURIComponent(match[1]!);
+}
+
+describe("buildBackgroundStyles", () => {
+  test("disabled background is transparent regardless of type", () => {
+    expect(buildBackgroundStyles({ backgroundEnabled: false, backgroundType: "gradient" })).toEqual({
+      backgroundColor: "transparent",
+    });
+    expect(buildBackgroundStyles({})).toEqual({ backgroundColor: "transparent" });
+  });
+
+  test("solid uses backgroundColor", () => {
+    expect(
+      buildBackgroundStyles({
+        backgroundEnabled: true,
+        backgroundType: "solid",
+        backgroundColor: "rgba(1, 2, 3, 1)",
+      }),
+    ).toEqual({ backgroundColor: "rgba(1, 2, 3, 1)" });
+  });
+
+  test("absent backgroundType defaults to solid", () => {
+    expect(
+      buildBackgroundStyles({ backgroundEnabled: true, backgroundColor: "rgba(9, 9, 9, 1)" }),
+    ).toEqual({ backgroundColor: "rgba(9, 9, 9, 1)" });
+  });
+
+  describe("gradient", () => {
+    const linear: BackgroundStyleInput = {
+      backgroundEnabled: true,
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0.5,
+        startY: 0,
+        endX: 0.5,
+        endY: 1,
+        stops: [stop("rgba(255, 255, 255, 1)", 0), stop("rgba(0, 0, 0, 1)", 1)],
+      },
+    };
+
+    test("emits a normalized SVG data-URI with size/repeat", () => {
+      const styles = buildBackgroundStyles(linear);
+      expect(styles.backgroundSize).toBe("100% 100%");
+      expect(styles.backgroundRepeat).toBe("no-repeat");
+      const svg = decodeGradientSvg(styles.backgroundImage as string);
+      expect(svg).toContain("preserveAspectRatio='none'");
+      expect(svg).toContain("viewBox='0 0 1 1'");
+      expect(svg).toContain("<linearGradient id='g' x1='0.5' y1='0' x2='0.5' y2='1'>");
+      expect(svg).toContain("<stop offset='0' stop-color='rgba(255, 255, 255, 1)'/>");
+      expect(svg).toContain("<stop offset='1' stop-color='rgba(0, 0, 0, 1)'/>");
+      expect(svg).toContain("<rect width='1' height='1' fill='url(#g)'/>");
+    });
+
+    test("sorts stops by position before emitting", () => {
+      const styles = buildBackgroundStyles({
+        ...linear,
+        backgroundGradient: {
+          ...linear.backgroundGradient!,
+          stops: [
+            stop("rgba(0, 0, 0, 1)", 1),
+            stop("rgba(128, 128, 128, 1)", 0.5),
+            stop("rgba(255, 255, 255, 1)", 0),
+          ],
+        },
+      });
+      const svg = decodeGradientSvg(styles.backgroundImage as string);
+      const first = svg.indexOf("offset='0'");
+      const mid = svg.indexOf("offset='0.5'");
+      const last = svg.indexOf("offset='1'");
+      expect(first).toBeGreaterThanOrEqual(0);
+      expect(first).toBeLessThan(mid);
+      expect(mid).toBeLessThan(last);
+    });
+
+    test("accepts logical {color, position} stops (unwrapped shape)", () => {
+      // A caller that builds a style from a non-CRDT source (preview tree,
+      // compiled component, hand-written input) passes logical stops. The
+      // builder must NOT read `.value` blindly and collapse to transparent.
+      const styles = buildBackgroundStyles({
+        backgroundEnabled: true,
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "linear",
+          startX: 0.5,
+          startY: 0,
+          endX: 0.5,
+          endY: 1,
+          stops: [
+            { color: "rgba(255, 255, 255, 1)", position: 0 },
+            { color: "rgba(0, 0, 0, 1)", position: 1 },
+          ],
+        },
+      });
+      expect(styles.backgroundColor).toBeUndefined();
+      const svg = decodeGradientSvg(styles.backgroundImage as string);
+      expect(svg).toContain("<stop offset='0' stop-color='rgba(255, 255, 255, 1)'/>");
+      expect(svg).toContain("<stop offset='1' stop-color='rgba(0, 0, 0, 1)'/>");
+    });
+
+    test("wrapped and logical stops produce identical output", () => {
+      const geometry = {
+        kind: "linear" as const,
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+      };
+      const wrapped = buildBackgroundStyles({
+        backgroundEnabled: true,
+        backgroundType: "gradient",
+        backgroundGradient: {
+          ...geometry,
+          stops: [stop("rgba(1, 2, 3, 1)", 0), stop("rgba(4, 5, 6, 1)", 1)],
+        },
+      });
+      const logical = buildBackgroundStyles({
+        backgroundEnabled: true,
+        backgroundType: "gradient",
+        backgroundGradient: {
+          ...geometry,
+          stops: [
+            { color: "rgba(1, 2, 3, 1)", position: 0 },
+            { color: "rgba(4, 5, 6, 1)", position: 1 },
+          ],
+        },
+      });
+      expect(logical).toEqual(wrapped);
+    });
+
+    test("radial uses cx/cy at start and r = euclidean distance start→end", () => {
+      const styles = buildBackgroundStyles({
+        backgroundEnabled: true,
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "radial",
+          startX: 0,
+          startY: 0,
+          endX: 3,
+          endY: 4,
+          stops: [stop("rgba(1, 1, 1, 1)", 0), stop("rgba(2, 2, 2, 1)", 1)],
+        },
+      });
+      const svg = decodeGradientSvg(styles.backgroundImage as string);
+      expect(svg).toContain("<radialGradient id='g' cx='0' cy='0' r='5'>");
+    });
+
+    test("a single stop degrades to that solid color", () => {
+      const styles = buildBackgroundStyles({
+        ...linear,
+        backgroundGradient: {
+          ...linear.backgroundGradient!,
+          stops: [stop("rgba(7, 7, 7, 1)", 0)],
+        },
+      });
+      expect(styles).toEqual({ backgroundColor: "rgba(7, 7, 7, 1)" });
+    });
+
+    test("zero stops (or absent gradient) is transparent", () => {
+      expect(
+        buildBackgroundStyles({
+          ...linear,
+          backgroundGradient: { ...linear.backgroundGradient!, stops: [] },
+        }),
+      ).toEqual({ backgroundColor: "transparent" });
+      expect(
+        buildBackgroundStyles({ backgroundEnabled: true, backgroundType: "gradient" }),
+      ).toEqual({ backgroundColor: "transparent" });
+    });
+  });
+
+  describe("image", () => {
+    test("maps resize modes to backgroundSize with center position and no-repeat", () => {
+      const base = {
+        backgroundEnabled: true,
+        backgroundType: "image" as const,
+      };
+      const modes = {
+        cover: "cover",
+        contain: "contain",
+        stretch: "100% 100%",
+        center: "auto",
+      } as const;
+      for (const [resizeMode, size] of Object.entries(modes)) {
+        const styles = buildBackgroundStyles({
+          ...base,
+          backgroundImage: {
+            url: "https://example.com/a.png",
+            resizeMode: resizeMode as keyof typeof modes,
+          },
+        });
+        expect(styles).toEqual({
+          backgroundImage: 'url("https://example.com/a.png")',
+          backgroundPosition: "center",
+          backgroundRepeat: "no-repeat",
+          backgroundSize: size,
+        });
+      }
+    });
+
+    test("empty url is transparent", () => {
+      expect(
+        buildBackgroundStyles({
+          backgroundEnabled: true,
+          backgroundType: "image",
+          backgroundImage: { url: "", resizeMode: "cover" },
+        }),
+      ).toEqual({ backgroundColor: "transparent" });
+    });
+
+    test("encodes special characters in the url", () => {
+      const styles = buildBackgroundStyles({
+        backgroundEnabled: true,
+        backgroundType: "image",
+        backgroundImage: { url: "https://example.com/a b.png?x=1&y=2", resizeMode: "cover" },
+      });
+      expect(styles.backgroundImage).toBe('url("https://example.com/a%20b.png?x=1&y=2")');
+    });
+  });
+});
diff --git a/packages/paywall-renderer-web-core/src/styles/background.ts b/packages/paywall-renderer-web-core/src/styles/background.ts
new file mode 100644
index 000000000..b48e0c050
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/background.ts
@@ -0,0 +1,256 @@
+import type { Properties } from "csstype";
+
+/** A single gradient color stop, decoded from the mimic CRDT array wrapper. */
+interface GradientStop {
+  readonly color: string;
+  readonly position: number;
+}
+
+/**
+ * A gradient stop as it can appear on a decoded style. The mimic CRDT array
+ * decoder wraps each element as `{ id, pos, value: { color, position } }` (and
+ * a decode failure leaves `value` `undefined`), but callers that build a style
+ * from a non-CRDT source (the preview-tree wire shape, hand-written test input,
+ * a compiled component) pass the logical `{ color, position }` directly. Both
+ * are accepted so a stop can never silently collapse to transparent because the
+ * caller used the "wrong" shape — see {@link normalizeStop}.
+ */
+type GradientStopEntry = GradientStop | { readonly value: GradientStop | undefined };
+
+/**
+ * Reads the logical `{ color, position }` from either stop shape. Returns
+ * `undefined` when the value is missing (a failed decode) or does not carry a
+ * usable `color`, so callers filter it out.
+ */
+function normalizeStop(entry: GradientStopEntry | undefined): GradientStop | undefined {
+  if (entry === undefined || entry === null) {
+    return undefined;
+  }
+  // CRDT-wrapped entry: `{ id, pos, value: { color, position } }`. The logical
+  // shape has a string `color`, so an object `value` disambiguates the wrapper.
+  const candidate =
+    "value" in entry && typeof (entry as { value: unknown }).value === "object"
+      ? (entry as { value: GradientStop | undefined }).value
+      : (entry as GradientStop);
+  if (candidate === undefined || candidate === null || typeof candidate.color !== "string") {
+    return undefined;
+  }
+  return { color: candidate.color, position: candidate.position ?? 0 };
+}
+
+/**
+ * The background-related subset of a node's decoded style. `stops` accept both
+ * the mimic CRDT snapshot shape (`{ id, pos, value }` entries) and the logical
+ * `{ color, position }` shape; {@link normalizeStop} reconciles them.
+ */
+export interface BackgroundStyleInput {
+  readonly backgroundEnabled?: boolean;
+  readonly backgroundColor?: string;
+  readonly backgroundType?: "solid" | "gradient" | "image";
+  readonly backgroundGradient?: {
+    readonly kind: "linear" | "radial";
+    readonly startX: number;
+    readonly startY: number;
+    readonly endX: number;
+    readonly endY: number;
+    readonly stops: ReadonlyArray<GradientStopEntry>;
+  };
+  readonly backgroundImage?: {
+    readonly url: string;
+    readonly resizeMode: "cover" | "contain" | "stretch" | "center";
+  };
+}
+
+const RESIZE_MODE_TO_BACKGROUND_SIZE: Record<
+  NonNullable<BackgroundStyleInput["backgroundImage"]>["resizeMode"],
+  string
+> = {
+  center: "auto",
+  contain: "contain",
+  cover: "cover",
+  stretch: "100% 100%",
+};
+
+/**
+ * Builds an inline SVG whose gradient uses `objectBoundingBox` units, so the
+ * two-point normalized geometry (`0..1` node space) maps exactly onto the
+ * element regardless of its aspect ratio. `preserveAspectRatio="none"` lets the
+ * 1×1 viewBox stretch to fill.
+ */
+/** The geometry (start/end + kind) a gradient SVG needs; stops are passed separately. */
+interface GradientGeometry {
+  readonly kind: "linear" | "radial";
+  readonly startX: number;
+  readonly startY: number;
+  readonly endX: number;
+  readonly endY: number;
+}
+
+function buildGradientSvg(gradient: GradientGeometry, stops: readonly GradientStop[]): string {
+  const stopEls = stops
+    .map(
+      (stop) =>
+        `<stop offset='${stop.position}' stop-color='${stop.color}'/>`,
+    )
+    .join("");
+
+  const def =
+    gradient.kind === "radial"
+      ? // Radius is the euclidean distance from start→end; cx/cy anchor at start.
+        (() => {
+          const r = Math.hypot(gradient.endX - gradient.startX, gradient.endY - gradient.startY);
+          return `<radialGradient id='g' cx='${gradient.startX}' cy='${gradient.startY}' r='${r}'>${stopEls}</radialGradient>`;
+        })()
+      : `<linearGradient id='g' x1='${gradient.startX}' y1='${gradient.startY}' x2='${gradient.endX}' y2='${gradient.endY}'>${stopEls}</linearGradient>`;
+
+  return `<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${def}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`;
+}
+
+/**
+ * Lowers a node's background style onto CSS. `backgroundEnabled` gates every
+ * type; when disabled (or when a type resolves to nothing renderable) the node
+ * is `transparent`.
+ *
+ * - `solid` → `backgroundColor` (legacy behavior).
+ * - `gradient` → an SVG data-URI `backgroundImage`, so the two-point normalized
+ *   geometry stays exact independent of element aspect ratio. Stops are sorted
+ *   by position. A single stop degrades to that solid color; zero stops to
+ *   `transparent`.
+ * - `image` → `backgroundImage: url(...)` with the resize mode mapped to
+ *   `backgroundSize`. An empty url resolves to `transparent`.
+ *
+ * The returned fragment always sets exactly one of `backgroundColor` or the
+ * `backgroundImage`/`backgroundSize`/`backgroundRepeat`/`backgroundPosition`
+ * quad, so callers can spread it over a base style without leftover keys from a
+ * previous background type.
+ */
+export function buildBackgroundStyles(style: BackgroundStyleInput): Properties {
+  if (!style.backgroundEnabled) {
+    return { backgroundColor: "transparent" };
+  }
+
+  const type = style.backgroundType ?? "solid";
+
+  if (type === "gradient") {
+    const gradient = style.backgroundGradient;
+    // Normalize each stop from either the CRDT-wrapped or logical shape, drop
+    // undecodable entries, then sort by position along the start→end line.
+    const stops = (gradient?.stops ?? [])
+      .map(normalizeStop)
+      .filter((stop): stop is GradientStop => stop !== undefined)
+      .sort((a, b) => a.position - b.position);
+    if (!gradient || stops.length === 0) {
+      return { backgroundColor: "transparent" };
+    }
+    if (stops.length === 1) {
+      return { backgroundColor: stops[0]!.color };
+    }
+    const svg = buildGradientSvg(gradient, stops);
+    return {
+      backgroundImage: `url("data:image/svg+xml,${encodeURIComponent(svg)}")`,
+      backgroundRepeat: "no-repeat",
+      backgroundSize: "100% 100%",
+    };
+  }
+
+  if (type === "image") {
+    const url = style.backgroundImage?.url ?? "";
+    if (url === "") {
+      return { backgroundColor: "transparent" };
+    }
+    const resizeMode = style.backgroundImage?.resizeMode ?? "cover";
+    // encodeURI leaves the double-quote untouched; escape it too so it cannot
+    // break out of the quoted `url("…")` token.
+    const safeUrl = encodeURI(url).replace(/"/g, "%22");
+    return {
+      backgroundImage: `url("${safeUrl}")`,
+      backgroundPosition: "center",
+      backgroundRepeat: "no-repeat",
+      backgroundSize: RESIZE_MODE_TO_BACKGROUND_SIZE[resizeMode],
+    };
+  }
+
+  // solid
+  return { backgroundColor: style.backgroundColor };
+}
+
+/**
+ * The background subset of a §3 preview-tree node style. Unlike
+ * {@link BackgroundStyleInput}, this is the OSS-built wire shape: `stops` are
+ * plain `{ color, position }` objects (no CRDT `{ id, pos, value }` envelope),
+ * and there is no `backgroundEnabled` gate — a non-`solid` `backgroundType`
+ * already implies the background is enabled (the mimic→tree lowering only emits
+ * a gradient/image type when it was enabled).
+ */
+export interface PreviewBackgroundStyleInput {
+  readonly backgroundColor?: string | undefined;
+  readonly backgroundType?: "solid" | "gradient" | "image" | undefined;
+  readonly backgroundGradient?:
+    | {
+        readonly kind: "linear" | "radial";
+        readonly startX: number;
+        readonly startY: number;
+        readonly endX: number;
+        readonly endY: number;
+        readonly stops: readonly GradientStop[];
+      }
+    | undefined;
+  readonly backgroundImage?:
+    | {
+        readonly url: string;
+        readonly resizeMode: "cover" | "contain" | "stretch" | "center";
+      }
+    | undefined;
+}
+
+/**
+ * Lowers a preview-tree node's background style onto CSS. Byte-compatible with
+ * {@link buildBackgroundStyles} for the `gradient`/`image`/`solid` cases, but
+ * reads the plain (un-enveloped) preview-tree wire shape and treats a non-solid
+ * `backgroundType` as enabled. Returns only the background CSS fragment so
+ * callers spread it over a base style.
+ */
+export function buildPreviewBackgroundStyles(style: PreviewBackgroundStyleInput): Properties {
+  const type = style.backgroundType ?? "solid";
+
+  if (type === "gradient") {
+    const gradient = style.backgroundGradient;
+    // Normalize defensively: the preview wire shape is logical `{ color,
+    // position }`, but accept a CRDT-wrapped stop too so a mislowered tree can
+    // never silently collapse the gradient to transparent.
+    const stops = (gradient?.stops ?? [])
+      .map(normalizeStop)
+      .filter((stop): stop is GradientStop => stop !== undefined)
+      .sort((a, b) => a.position - b.position);
+    if (!gradient || stops.length === 0) {
+      return { backgroundColor: "transparent" };
+    }
+    if (stops.length === 1) {
+      return { backgroundColor: stops[0]!.color };
+    }
+    const svg = buildGradientSvg(gradient, stops);
+    return {
+      backgroundImage: `url("data:image/svg+xml,${encodeURIComponent(svg)}")`,
+      backgroundRepeat: "no-repeat",
+      backgroundSize: "100% 100%",
+    };
+  }
+
+  if (type === "image") {
+    const url = style.backgroundImage?.url ?? "";
+    if (url === "") {
+      return { backgroundColor: "transparent" };
+    }
+    const resizeMode = style.backgroundImage?.resizeMode ?? "cover";
+    const safeUrl = encodeURI(url).replace(/"/g, "%22");
+    return {
+      backgroundImage: `url("${safeUrl}")`,
+      backgroundPosition: "center",
+      backgroundRepeat: "no-repeat",
+      backgroundSize: RESIZE_MODE_TO_BACKGROUND_SIZE[resizeMode],
+    };
+  }
+
+  // solid
+  return style.backgroundColor === undefined ? {} : { backgroundColor: style.backgroundColor };
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/index.ts b/packages/paywall-renderer-web-core/src/styles/index.ts
new file mode 100644
index 000000000..d87328e88
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/index.ts
@@ -0,0 +1,12 @@
+export {
+  buildBackgroundStyles,
+  buildPreviewBackgroundStyles,
+  type BackgroundStyleInput,
+  type PreviewBackgroundStyleInput,
+} from "./background";
+export { buildViewStyles, type ViewStyleInput } from "./view-styles";
+export { buildScrollViewStyles, type ScrollViewOptions } from "./scroll-view-styles";
+export { buildPathStyles, type PathSvgAttributes } from "./path-styles";
+export { buildScreenContainerStyles, buildScreenLayoutStyles } from "./screen-styles";
+export { buildShapeContainerStyles } from "./shape-styles";
+export { buildTextStyles } from "./text-styles";
diff --git a/packages/paywall-renderer-web-core/src/styles/node-styles.test.ts b/packages/paywall-renderer-web-core/src/styles/node-styles.test.ts
new file mode 100644
index 000000000..fb0a2fbab
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/node-styles.test.ts
@@ -0,0 +1,268 @@
+import { ScrollViewNode, ShapeNode, TextNode, ViewNode } from "@voidhash/mimic-schema";
+import type { Properties } from "csstype";
+import { describe, expect, test } from "vite-plus/test";
+
+import { buildPreviewNodeStyles } from "../preview-tree/styles";
+import { buildScrollViewStyles } from "./scroll-view-styles";
+import { buildShapeContainerStyles } from "./shape-styles";
+import { buildTextStyles } from "./text-styles";
+import { px, pxOrAuto } from "./utils";
+import { buildViewStyles } from "./view-styles";
+
+// Encode/decode round-trips through the real node data structs materialize
+// schema defaults, so fixtures carry the exact snapshot shape the engine
+// produces.
+function makeViewStyle(style?: Parameters<typeof ViewNode.data.encode>[0]["style"]) {
+  return ViewNode.data.decode(ViewNode.data.encode({ style })).style;
+}
+
+function makeScrollViewStyle(style?: Parameters<typeof ScrollViewNode.data.encode>[0]["style"]) {
+  return ScrollViewNode.data.decode(ScrollViewNode.data.encode({ style })).style;
+}
+
+function makeShapeStyle(style?: Parameters<typeof ShapeNode.data.encode>[0]["style"]) {
+  return ShapeNode.data.decode(ShapeNode.data.encode({ style })).style;
+}
+
+function makeTextStyle(style?: Parameters<typeof TextNode.data.encode>[0]["style"]) {
+  return TextNode.data.decode(TextNode.data.encode({ style })).style;
+}
+
+describe("pxOrAuto", () => {
+  test('passes through "auto" and absent values as the CSS auto keyword', () => {
+    expect(pxOrAuto("auto")).toBe("auto");
+    expect(pxOrAuto(undefined)).toBe("auto");
+  });
+
+  test("converts numbers to px", () => {
+    expect(pxOrAuto(0)).toBe("0");
+    expect(pxOrAuto(12)).toBe("12px");
+    expect(px(0)).toBe("0");
+    expect(px(8)).toBe("8px");
+  });
+});
+
+describe("buildViewStyles", () => {
+  test("schema defaults yield auto (hug) dimensions without constraints or flex", () => {
+    const styles = buildViewStyles(makeViewStyle());
+    expect(styles.width).toBe("auto");
+    expect(styles.height).toBe("auto");
+    expect(styles.minWidth).toBeUndefined();
+    expect(styles.maxWidth).toBeUndefined();
+    expect(styles.minHeight).toBeUndefined();
+    expect(styles.maxHeight).toBeUndefined();
+    expect(styles.flex).toBeUndefined();
+  });
+
+  test('schema defaults yield relative flow with no positioning offsets', () => {
+    const styles = buildViewStyles(makeViewStyle());
+    expect(styles.position).toBe("relative");
+    expect(styles.left).toBeUndefined();
+    expect(styles.top).toBeUndefined();
+    expect(styles.right).toBeUndefined();
+    expect(styles.bottom).toBeUndefined();
+  });
+
+  test("absolute position with numeric offsets emits px (including zero)", () => {
+    const styles = buildViewStyles(
+      makeViewStyle({ position: "absolute", top: 10, left: 20, bottom: 0 }),
+    );
+    expect(styles.position).toBe("absolute");
+    expect(styles.top).toBe("10px");
+    expect(styles.left).toBe("20px");
+    expect(styles.bottom).toBe("0");
+    // An "auto" (default) offset is the CSS default and stays unset.
+    expect(styles.right).toBeUndefined();
+  });
+
+  test('"auto" width/height (hug contents) lower to the CSS auto keyword', () => {
+    const styles = buildViewStyles(makeViewStyle({ width: "auto", height: "auto" }));
+    expect(styles.width).toBe("auto");
+    expect(styles.height).toBe("auto");
+  });
+
+  test("explicit flex and min/max constraints emit values (including zero)", () => {
+    const styles = buildViewStyles(makeViewStyle({ flex: 1, maxWidth: 320, minHeight: 0 }));
+    expect(styles.flex).toBe(1);
+    expect(styles.maxWidth).toBe("320px");
+    expect(styles.minHeight).toBe("0");
+    expect(styles.minWidth).toBeUndefined();
+    expect(styles.maxHeight).toBeUndefined();
+  });
+
+  test("disabled background lowers to transparent", () => {
+    const styles = buildViewStyles(makeViewStyle());
+    expect(styles.backgroundColor).toBe("transparent");
+  });
+
+  test("enabled solid background uses backgroundColor", () => {
+    const styles = buildViewStyles(
+      makeViewStyle({ backgroundEnabled: true, backgroundColor: "rgba(1, 2, 3, 1)" }),
+    );
+    expect(styles.backgroundColor).toBe("rgba(1, 2, 3, 1)");
+  });
+
+  test("gradient background lowers to an SVG data-URI through the real schema", () => {
+    const styles = buildViewStyles(
+      makeViewStyle({
+        backgroundEnabled: true,
+        backgroundType: "gradient",
+        backgroundGradient: {
+          kind: "linear",
+          startX: 0,
+          startY: 0,
+          endX: 1,
+          endY: 1,
+          stops: [
+            { color: "rgba(255, 255, 255, 1)", position: 0 },
+            { color: "rgba(0, 0, 0, 1)", position: 1 },
+          ],
+        },
+      }),
+    );
+    expect(styles.backgroundSize).toBe("100% 100%");
+    expect(String(styles.backgroundImage)).toContain("data:image/svg+xml,");
+    expect(styles.backgroundColor).toBeUndefined();
+  });
+
+  test("image background lowers to url() through the real schema", () => {
+    const styles = buildViewStyles(
+      makeViewStyle({
+        backgroundEnabled: true,
+        backgroundType: "image",
+        backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" },
+      }),
+    );
+    expect(styles.backgroundImage).toBe('url("https://example.com/bg.png")');
+    expect(styles.backgroundSize).toBe("contain");
+    expect(styles.backgroundPosition).toBe("center");
+  });
+});
+
+describe("buildShapeContainerStyles", () => {
+  test('"auto" dimensions and absent constraints mirror the flex semantics', () => {
+    const styles = buildShapeContainerStyles(makeShapeStyle({ width: "auto", height: 24 }));
+    expect(styles.width).toBe("auto");
+    expect(styles.height).toBe("24px");
+    expect(styles.minWidth).toBeUndefined();
+    expect(styles.flex).toBeUndefined();
+  });
+});
+
+describe("buildTextStyles", () => {
+  test("absent min/max constraints and flex stay unset; present ones emit px", () => {
+    const defaults = buildTextStyles(makeTextStyle());
+    expect(defaults.minWidth).toBeUndefined();
+    expect(defaults.maxHeight).toBeUndefined();
+    expect(defaults.flex).toBeUndefined();
+
+    const constrained = buildTextStyles(makeTextStyle({ flex: 2, minWidth: 40 }));
+    expect(constrained.flex).toBe(2);
+    expect(constrained.minWidth).toBe("40px");
+  });
+
+  test("schema defaults yield relative flow with no positioning offsets", () => {
+    const styles = buildTextStyles(makeTextStyle());
+    expect(styles.position).toBe("relative");
+    expect(styles.left).toBeUndefined();
+    expect(styles.top).toBeUndefined();
+    expect(styles.right).toBeUndefined();
+    expect(styles.bottom).toBeUndefined();
+  });
+
+  test("absolute position with numeric offsets emits px (including zero)", () => {
+    const styles = buildTextStyles(
+      makeTextStyle({ position: "absolute", top: 10, left: 0, bottom: 4 }),
+    );
+    expect(styles.position).toBe("absolute");
+    expect(styles.top).toBe("10px");
+    // A zero offset still emits (lowered to the unitless "0").
+    expect(styles.left).toBe("0");
+    expect(styles.bottom).toBe("4px");
+    // An "auto" (default) offset is the CSS default and stays unset.
+    expect(styles.right).toBeUndefined();
+  });
+});
+
+describe("buildScrollViewStyles", () => {
+  test("vertical (default) scrolls on Y and hides X, keeping column flow", () => {
+    const styles = buildScrollViewStyles(makeScrollViewStyle(), {
+      horizontal: false,
+      showsScrollIndicator: true,
+    });
+    expect(styles.overflowY).toBe("auto");
+    expect(styles.overflowX).toBe("hidden");
+    expect(styles.flexDirection).toBe("column");
+    expect(styles.WebkitOverflowScrolling).toBe("touch");
+    // Indicator visible → no scrollbar suppression.
+    expect(styles.scrollbarWidth).toBeUndefined();
+  });
+
+  test("horizontal scrolls on X, hides Y and forces row flow", () => {
+    const styles = buildScrollViewStyles(makeScrollViewStyle({ flexDirection: "column" }), {
+      horizontal: true,
+      showsScrollIndicator: true,
+    });
+    expect(styles.overflowX).toBe("auto");
+    expect(styles.overflowY).toBe("hidden");
+    // RN horizontal ScrollView overrides the authored direction to row.
+    expect(styles.flexDirection).toBe("row");
+  });
+
+  test("hidden indicator suppresses the scrollbar width", () => {
+    const styles = buildScrollViewStyles(makeScrollViewStyle(), {
+      horizontal: false,
+      showsScrollIndicator: false,
+    });
+    expect(styles.scrollbarWidth).toBe("none");
+  });
+
+  // Yoga defaults a flex item's min main size to 0; CSS defaults it to `auto`
+  // (content floor), which would keep a content-tall scrollView from ever
+  // shrinking, so `overflowY: auto` never engages. We default `min-*: 0`.
+  test("default min sizes are 0 so the box can shrink below content and scroll", () => {
+    const styles = buildScrollViewStyles(makeScrollViewStyle(), {
+      horizontal: false,
+      showsScrollIndicator: true,
+    });
+    expect(styles.minHeight).toBe(0);
+    expect(styles.minWidth).toBe(0);
+  });
+
+  test("author-set min sizes are preserved over the 0 default", () => {
+    const styles = buildScrollViewStyles(makeScrollViewStyle({ minHeight: 100, minWidth: 40 }), {
+      horizontal: false,
+      showsScrollIndicator: true,
+    });
+    expect(styles.minHeight).toBe("100px");
+    expect(styles.minWidth).toBe("40px");
+  });
+
+  // The document `scrollView` lowering hand-mirrors the preview-tree `scroll`
+  // lowering (`SCROLL_BASE`); nested compositions must render identically, so
+  // the scroll-specific CSS must never drift. Compare the real implementations
+  // rather than duplicating literals.
+  test("default (vertical) scroll CSS matches the preview-tree scroll lowering", () => {
+    const documentStyles = buildScrollViewStyles(makeScrollViewStyle(), {
+      horizontal: false,
+      showsScrollIndicator: true,
+    });
+    const previewStyles = buildPreviewNodeStyles({}, "scroll");
+
+    const scrollKeys = [
+      "overflowX",
+      "overflowY",
+      "WebkitOverflowScrolling",
+      "minHeight",
+      "minWidth",
+    ] as const;
+    const pick = (styles: Properties) =>
+      Object.fromEntries(scrollKeys.map((key) => [key, styles[key]]));
+
+    expect(pick(documentStyles)).toEqual(pick(previewStyles));
+    // Guard against the keys silently going absent from both sides.
+    expect(documentStyles.overflowY).toBe("auto");
+    expect(documentStyles.overflowX).toBe("hidden");
+    expect(documentStyles.WebkitOverflowScrolling).toBe("touch");
+  });
+});
diff --git a/packages/paywall-renderer-web-core/src/styles/path-styles.ts b/packages/paywall-renderer-web-core/src/styles/path-styles.ts
new file mode 100644
index 000000000..4c37e67f9
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/path-styles.ts
@@ -0,0 +1,27 @@
+import type { PathNodeData } from "@voidhash/mimic-schema";
+
+export interface PathSvgAttributes {
+  fill: string;
+  fillRule: "nonzero" | "evenodd";
+  fillOpacity: number;
+  stroke: string;
+  strokeWidth: number;
+  strokeOpacity: number;
+  strokeLinecap: "butt" | "round" | "square";
+  strokeLinejoin: "miter" | "round" | "bevel";
+  opacity: number;
+}
+
+export function buildPathStyles(style: PathNodeData["data"]["style"]): PathSvgAttributes {
+  return {
+    fill: style.fillEnabled ? style.fillColor : "none",
+    fillRule: style.fillRule,
+    fillOpacity: style.fillOpacity,
+    stroke: style.strokeEnabled ? style.strokeColor : "none",
+    strokeWidth: style.strokeWidth,
+    strokeOpacity: style.strokeOpacity,
+    strokeLinecap: style.strokeLinecap,
+    strokeLinejoin: style.strokeLinejoin,
+    opacity: style.opacity,
+  };
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/screen-styles.ts b/packages/paywall-renderer-web-core/src/styles/screen-styles.ts
new file mode 100644
index 000000000..8ae97a88e
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/screen-styles.ts
@@ -0,0 +1,34 @@
+import type { ScreenNodeData } from "@voidhash/mimic-schema";
+import type { Properties } from "csstype";
+
+import { buildBackgroundStyles } from "./background";
+import { px } from "./utils";
+
+export function buildScreenContainerStyles(style: ScreenNodeData["data"]["style"]): Properties {
+  const styles: Properties = {
+    boxSizing: "border-box",
+    height: "100vh",
+    overflow: "hidden",
+    width: "100vw",
+  };
+
+  Object.assign(styles, buildBackgroundStyles(style));
+
+  return styles;
+}
+
+export function buildScreenLayoutStyles(style: ScreenNodeData["data"]["style"]): Properties {
+  return {
+    alignItems: style.alignItems,
+    display: style.display,
+    flexDirection: style.flexDirection,
+    gap: px(style.gap ?? 0),
+    height: "100vh",
+    justifyContent: style.justifyContent,
+    paddingBottom: px(style.paddingBottom ?? 0),
+    paddingLeft: px(style.paddingLeft ?? 0),
+    paddingRight: px(style.paddingRight ?? 0),
+    paddingTop: px(style.paddingTop ?? 0),
+    width: "100vw",
+  };
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/scroll-view-styles.ts b/packages/paywall-renderer-web-core/src/styles/scroll-view-styles.ts
new file mode 100644
index 000000000..4ae1a37cf
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/scroll-view-styles.ts
@@ -0,0 +1,62 @@
+import type { Properties } from "csstype";
+
+import { buildViewStyles, type ViewStyleInput } from "./view-styles";
+
+/** RN ScrollView node data driving the overflow/axis lowering. */
+export interface ScrollViewOptions {
+  /** RN `horizontal`: lay children out along the row axis and scroll on X. */
+  horizontal: boolean;
+  /** RN `showsScrollIndicator`: whether the native scrollbar is visible. */
+  showsScrollIndicator: boolean;
+}
+
+/**
+ * Lowers a scrollView node onto the web. Builds the shared view style surface
+ * ({@link buildViewStyles}) then layers RN ScrollView overflow semantics on top,
+ * mirroring the preview-tree `SCROLL_BASE` (vertical `overflowY: auto`) but
+ * honoring the document's `horizontal`/`showsScrollIndicator` fields:
+ *
+ * - vertical (default): `overflowY: auto`, `overflowX: hidden`;
+ * - `horizontal: true`: `overflowX: auto`, `overflowY: hidden`, and
+ *   `flexDirection: row` (RN horizontal ScrollView flows children in a row
+ *   regardless of the authored direction);
+ * - `showsScrollIndicator: false`: `scrollbarWidth: none`. NOTE: this hides the
+ *   scrollbar in Firefox and standards-compliant engines; WebKit needs a
+ *   `::-webkit-scrollbar { display: none }` rule which cannot be expressed as
+ *   an inline style, so it is not applied by these inline-only renderers.
+ *
+ * Yoga-vs-CSS min-size: React Native (Yoga) defaults a flex item's minimum main
+ * size to 0, but CSS defaults `min-height`/`min-width` to `auto` — which floors
+ * a flex item at its content size. Without an explicit `min-*: 0`, a scrollView
+ * taller than the viewport can never shrink below its content, so `flex-shrink`
+ * is inert and `overflowY: auto` has nothing to scroll. We therefore default
+ * `minHeight`/`minWidth` to `0` (matching the preview-tree `VIEW_BASE`), but
+ * only when the author hasn't set them — {@link buildViewStyles} emits those
+ * keys only when present, so authored values are already in `styles` and win.
+ */
+export function buildScrollViewStyles(
+  style: ViewStyleInput,
+  { horizontal, showsScrollIndicator }: ScrollViewOptions,
+): Properties {
+  const styles = buildViewStyles(style);
+
+  styles.minHeight ??= 0;
+  styles.minWidth ??= 0;
+
+  styles.WebkitOverflowScrolling = "touch";
+
+  if (horizontal) {
+    styles.flexDirection = "row";
+    styles.overflowX = "auto";
+    styles.overflowY = "hidden";
+  } else {
+    styles.overflowX = "hidden";
+    styles.overflowY = "auto";
+  }
+
+  if (!showsScrollIndicator) {
+    styles.scrollbarWidth = "none";
+  }
+
+  return styles;
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/shape-styles.ts b/packages/paywall-renderer-web-core/src/styles/shape-styles.ts
new file mode 100644
index 000000000..996aac3ef
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/shape-styles.ts
@@ -0,0 +1,43 @@
+import type { ShapeNodeData } from "@voidhash/mimic-schema";
+import type { Properties } from "csstype";
+
+import { px, pxOrAuto } from "./utils";
+
+export function buildShapeContainerStyles(style: ShapeNodeData["data"]["style"]): Properties {
+  const styles: Properties = {
+    boxSizing: "border-box",
+    display: style.display === "none" ? "none" : "block",
+    height: pxOrAuto(style.height),
+    marginBottom: px(style.marginBottom ?? 0),
+    marginLeft: px(style.marginLeft ?? 0),
+    marginRight: px(style.marginRight ?? 0),
+    marginTop: px(style.marginTop ?? 0),
+    opacity: style.opacity,
+    position: "relative",
+    width: pxOrAuto(style.width),
+  };
+
+  // Min/max constraints — absent means unconstrained
+  if (style.minWidth !== undefined) {
+    styles.minWidth = px(style.minWidth);
+  }
+  if (style.maxWidth !== undefined) {
+    styles.maxWidth = px(style.maxWidth);
+  }
+  if (style.minHeight !== undefined) {
+    styles.minHeight = px(style.minHeight);
+  }
+  if (style.maxHeight !== undefined) {
+    styles.maxHeight = px(style.maxHeight);
+  }
+
+  // Flex child properties — absent means no explicit flex
+  if (style.flex !== undefined) {
+    styles.flex = style.flex;
+  }
+  if (style.alignSelf !== "auto") {
+    styles.alignSelf = style.alignSelf;
+  }
+
+  return styles;
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/text-styles.ts b/packages/paywall-renderer-web-core/src/styles/text-styles.ts
new file mode 100644
index 000000000..ced44120e
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/text-styles.ts
@@ -0,0 +1,72 @@
+import type { TextNodeData } from "@voidhash/mimic-schema";
+import type { Properties } from "csstype";
+
+import { px } from "./utils";
+
+export function buildTextStyles(style: TextNodeData["data"]["style"]): Properties {
+  const styles: Properties = {
+    color: style.color,
+    display: style.display,
+    fontSize: px(style.fontSize),
+    fontWeight: style.fontWeight,
+    letterSpacing: px(style.letterSpacing),
+    lineHeight: style.lineHeight,
+    marginBottom: px(style.marginBottom ?? 0),
+    marginLeft: px(style.marginLeft ?? 0),
+    marginRight: px(style.marginRight ?? 0),
+    marginTop: px(style.marginTop ?? 0),
+    opacity: style.opacity,
+    overflow: style.overflow,
+    position: style.position ?? "relative",
+    textAlign: style.textAlign,
+  };
+
+  // Min/max constraints — absent means unconstrained
+  if (style.minWidth !== undefined) {
+    styles.minWidth = px(style.minWidth);
+  }
+  if (style.maxWidth !== undefined) {
+    styles.maxWidth = px(style.maxWidth);
+  }
+  if (style.minHeight !== undefined) {
+    styles.minHeight = px(style.minHeight);
+  }
+  if (style.maxHeight !== undefined) {
+    styles.maxHeight = px(style.maxHeight);
+  }
+
+  // Position offsets — a numeric offset emits px; the "auto" default (or absent)
+  // is the CSS default and is left unset so it never overrides parent flow.
+  if (typeof style.left === "number") {
+    styles.left = px(style.left);
+  }
+  if (typeof style.top === "number") {
+    styles.top = px(style.top);
+  }
+  if (typeof style.right === "number") {
+    styles.right = px(style.right);
+  }
+  if (typeof style.bottom === "number") {
+    styles.bottom = px(style.bottom);
+  }
+
+  // Border
+  if (style.borderEnabled) {
+    styles.borderTopWidth = px(style.borderTopWidth ?? 0);
+    styles.borderRightWidth = px(style.borderRightWidth ?? 0);
+    styles.borderBottomWidth = px(style.borderBottomWidth ?? 0);
+    styles.borderLeftWidth = px(style.borderLeftWidth ?? 0);
+    styles.borderColor = style.borderColor;
+    styles.borderStyle = style.borderStyle;
+  }
+
+  // Flex child properties — absent means no explicit flex
+  if (style.flex !== undefined) {
+    styles.flex = style.flex;
+  }
+  if (style.alignSelf !== "auto") {
+    styles.alignSelf = style.alignSelf;
+  }
+
+  return styles;
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/utils.ts b/packages/paywall-renderer-web-core/src/styles/utils.ts
new file mode 100644
index 000000000..4062892fa
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/utils.ts
@@ -0,0 +1,18 @@
+/**
+ * Converts a numeric value to a pixel string.
+ * Returns 0 as "0" (no unit needed), otherwise appends "px".
+ */
+export function px(value: number): string {
+  return value === 0 ? "0" : `${value}px`;
+}
+
+/**
+ * Converts a numeric value to a pixel string. The explicit `"auto"` literal
+ * (hug contents) and absent values pass through as the CSS keyword "auto".
+ */
+export function pxOrAuto(value: number | "auto" | undefined): string {
+  if (value === "auto" || value === undefined) {
+    return "auto";
+  }
+  return px(value);
+}
diff --git a/packages/paywall-renderer-web-core/src/styles/view-styles.ts b/packages/paywall-renderer-web-core/src/styles/view-styles.ts
new file mode 100644
index 000000000..d83c4cbab
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/styles/view-styles.ts
@@ -0,0 +1,99 @@
+import type { ViewNodeData } from "@voidhash/mimic-schema";
+import type { Properties } from "csstype";
+
+import { buildBackgroundStyles } from "./background";
+import { px, pxOrAuto } from "./utils";
+
+type ViewStyle = ViewNodeData["data"]["style"];
+
+type PositionField = "position" | "left" | "top" | "right" | "bottom";
+
+/**
+ * View style with the absolute-positioning fields optional, so screen styles
+ * (which don't carry them) can be lowered through the same converter and fall
+ * back to the relative-flow defaults.
+ */
+export type ViewStyleInput = Omit<ViewStyle, PositionField> &
+  Partial<Pick<ViewStyle, PositionField>>;
+
+export function buildViewStyles(style: ViewStyleInput): Properties {
+  const styles: Properties = {
+    alignItems: style.alignItems,
+    boxSizing: "border-box",
+    display: style.display,
+    flexDirection: style.flexDirection,
+    gap: px(style.gap ?? 0),
+    height: pxOrAuto(style.height),
+    justifyContent: style.justifyContent,
+    marginBottom: px(style.marginBottom ?? 0),
+    marginLeft: px(style.marginLeft ?? 0),
+    marginRight: px(style.marginRight ?? 0),
+    marginTop: px(style.marginTop ?? 0),
+    opacity: style.opacity,
+    overflow: style.overflow,
+    paddingBottom: px(style.paddingBottom ?? 0),
+    paddingLeft: px(style.paddingLeft ?? 0),
+    paddingRight: px(style.paddingRight ?? 0),
+    paddingTop: px(style.paddingTop ?? 0),
+    position: style.position ?? "relative",
+    width: pxOrAuto(style.width),
+  };
+
+  // Min/max constraints — absent means unconstrained
+  if (style.minWidth !== undefined) {
+    styles.minWidth = px(style.minWidth);
+  }
+  if (style.maxWidth !== undefined) {
+    styles.maxWidth = px(style.maxWidth);
+  }
+  if (style.minHeight !== undefined) {
+    styles.minHeight = px(style.minHeight);
+  }
+  if (style.maxHeight !== undefined) {
+    styles.maxHeight = px(style.maxHeight);
+  }
+
+  // Position offsets — a numeric offset emits px; the "auto" default (or absent)
+  // is the CSS default and is left unset so it never overrides parent flow.
+  if (typeof style.left === "number") {
+    styles.left = px(style.left);
+  }
+  if (typeof style.top === "number") {
+    styles.top = px(style.top);
+  }
+  if (typeof style.right === "number") {
+    styles.right = px(style.right);
+  }
+  if (typeof style.bottom === "number") {
+    styles.bottom = px(style.bottom);
+  }
+
+  // Background
+  Object.assign(styles, buildBackgroundStyles(style));
+
+  // Border
+  if (style.borderEnabled) {
+    styles.borderTopWidth = px(style.borderTopWidth ?? 0);
+    styles.borderRightWidth = px(style.borderRightWidth ?? 0);
+    styles.borderBottomWidth = px(style.borderBottomWidth ?? 0);
+    styles.borderLeftWidth = px(style.borderLeftWidth ?? 0);
+    styles.borderColor = style.borderColor;
+    styles.borderStyle = style.borderStyle;
+  }
+
+  // Border radius
+  styles.borderTopLeftRadius = px(style.borderTopLeftRadius ?? 0);
+  styles.borderTopRightRadius = px(style.borderTopRightRadius ?? 0);
+  styles.borderBottomRightRadius = px(style.borderBottomRightRadius ?? 0);
+  styles.borderBottomLeftRadius = px(style.borderBottomLeftRadius ?? 0);
+
+  // Flex child properties — absent means no explicit flex
+  if (style.flex !== undefined) {
+    styles.flex = style.flex;
+  }
+  if (style.alignSelf !== "auto") {
+    styles.alignSelf = style.alignSelf;
+  }
+
+  return styles;
+}
diff --git a/packages/paywall-renderer-web-core/src/types.ts b/packages/paywall-renderer-web-core/src/types.ts
new file mode 100644
index 000000000..5ccb0bc0b
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/types.ts
@@ -0,0 +1,91 @@
+import type {
+  CodeComponentNodeData,
+  ComponentNodeData,
+  LibraryNodeData,
+  NodeType as SchemaNodeType,
+  PathNodeData,
+  RootNodeData,
+  ScreenNodeData,
+  ScrollViewNodeData,
+  ShapeNodeData,
+  TextNodeData,
+  ViewNodeData,
+} from "@voidhash/mimic-schema";
+
+export type NodeType = SchemaNodeType;
+
+/**
+ * A single document root in the workspace-engine tree snapshot shape:
+ * `{id, type, parentId, pos, data, children}` with all node payload fields
+ * nested under `data`. The engine's document snapshot is an array of roots;
+ * consumers of this package receive exactly one root (`roots[0]`).
+ */
+export type SnapshotNode =
+  | RootSnapshotNode
+  | ScreenSnapshotNode
+  | ViewSnapshotNode
+  | ScrollViewSnapshotNode
+  | TextSnapshotNode
+  | ShapeSnapshotNode
+  | PathSnapshotNode
+  | ComponentSnapshotNode
+  | LibrarySnapshotNode
+  | CodeComponentSnapshotNode;
+
+export type RootSnapshotNode = Omit<RootNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+export type ScreenSnapshotNode = Omit<ScreenNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+export type ViewSnapshotNode = Omit<ViewNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+export type ScrollViewSnapshotNode = Omit<ScrollViewNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+export type TextSnapshotNode = Omit<TextNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+export type ShapeSnapshotNode = Omit<ShapeNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+export type PathSnapshotNode = Omit<PathNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+/**
+ * Snapshot of a `component` node. `ComponentNodeData["children"]` is widened
+ * by the recursion-breaking annotation in mimic-schema, so it is replaced
+ * with the renderer-side union. Component nodes carry no
+ * style/states/localVariables — consumers must narrow before accessing those.
+ */
+export type ComponentSnapshotNode = Omit<ComponentNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+/**
+ * Snapshot of the singleton `library` node — a non-visual container for
+ * code-component definitions hung off the root. Never rendered on canvas;
+ * present in the union so root-children consumers can narrow it out.
+ */
+export type LibrarySnapshotNode = Omit<LibraryNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+/** Snapshot of a `codeComponent` definition node (source only, no children). */
+export type CodeComponentSnapshotNode = Omit<CodeComponentNodeData, "children"> & {
+  children: readonly SnapshotNode[];
+};
+
+export type RenderOptions = Record<string, never>;
+
+export interface RenderResult {
+  html: string;
+}
diff --git a/packages/paywall-renderer-web-core/src/variables.test.ts b/packages/paywall-renderer-web-core/src/variables.test.ts
new file mode 100644
index 000000000..a1b95e5bd
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/variables.test.ts
@@ -0,0 +1,316 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import type { Variable } from "./snapshot-types";
+import type { SnapshotNode } from "./types";
+import {
+  collectVariables,
+  collectVariableScopes,
+  createChainVariableReader,
+  findDeclaringNodeInChain,
+  type VariableScopes,
+} from "./variables";
+
+function entry(entryId: string, variable: Variable): { id: string; pos: string; value: Variable } {
+  return { id: entryId, pos: "a0", value: variable };
+}
+
+function makeViewNode(
+  id: string,
+  localVariables: Array<{ id: string; pos: string; value: Variable }>,
+  children: SnapshotNode[] = [],
+): SnapshotNode {
+  return {
+    type: "view",
+    id,
+    parentId: null,
+    pos: "a0",
+    data: {
+      name: "View",
+      localVariables,
+      linkedVariables: [],
+      interactions: [],
+      states: [],
+      style: {},
+    },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+function makeRootNode(children: SnapshotNode[]): SnapshotNode {
+  return {
+    type: "root",
+    id: "root",
+    parentId: null,
+    pos: "a0",
+    data: { name: "Root" },
+    children,
+  } as unknown as SnapshotNode;
+}
+
+describe("collectVariables", () => {
+  test("collects variables scoped to each node", () => {
+    const node = makeViewNode("view-1", [
+      entry("entry-1", { id: "var-1", name: "isActive", value: { key: "boolean", value: true } }),
+      entry("entry-2", { id: "var-2", name: "count", value: { key: "number", value: 42 } }),
+    ]);
+
+    const map = collectVariables(node);
+    expect(map.size).toBe(1);
+
+    const nodeVars = map.get("view-1");
+    expect(nodeVars).toBeDefined();
+    // 2 variables × 2 IDs each (internal + entry)
+    expect(nodeVars!.store.size).toBe(4);
+    expect(nodeVars!.store.get("var-1")).toEqual({ key: "boolean", value: true });
+    expect(nodeVars!.store.get("entry-1")).toEqual({ key: "boolean", value: true });
+    expect(nodeVars!.store.get("var-2")).toEqual({ key: "number", value: 42 });
+    expect(nodeVars!.store.get("entry-2")).toEqual({ key: "number", value: 42 });
+  });
+
+  test("skips entries whose variable lacks an internal id or value", () => {
+    const node = makeViewNode("view-1", [
+      entry("entry-1", {
+        name: "no-id",
+        value: { key: "boolean", value: true },
+      } as unknown as Variable),
+      entry("entry-2", { id: "var-2", name: "no-value" } as unknown as Variable),
+      entry("entry-3", { id: "var-3", name: "ok", value: { key: "number", value: 1 } }),
+    ]);
+
+    const map = collectVariables(node);
+    const nodeVars = map.get("view-1");
+    expect(nodeVars).toBeDefined();
+    expect(nodeVars!.store.size).toBe(2);
+    expect(nodeVars!.store.get("var-3")).toEqual({ key: "number", value: 1 });
+    expect(nodeVars!.store.get("entry-3")).toEqual({ key: "number", value: 1 });
+  });
+
+  test("returns bidirectional aliases per node", () => {
+    const node = makeViewNode("view-1", [
+      entry("entry-1", { id: "var-1", name: "isActive", value: { key: "boolean", value: true } }),
+    ]);
+
+    const map = collectVariables(node);
+    const nodeVars = map.get("view-1");
+    expect(nodeVars).toBeDefined();
+    expect(nodeVars!.aliases.get("entry-1")).toBe("var-1");
+    expect(nodeVars!.aliases.get("var-1")).toBe("entry-1");
+  });
+
+  test("collects variables from nested nodes into separate stores", () => {
+    const child = makeViewNode("view-2", [
+      entry("entry-2", { id: "var-2", name: "label", value: { key: "string", value: "hello" } }),
+    ]);
+    const parent = makeViewNode(
+      "view-1",
+      [
+        entry("entry-1", {
+          id: "var-1",
+          name: "isActive",
+          value: { key: "boolean", value: false },
+        }),
+      ],
+      [child],
+    );
+
+    const map = collectVariables(parent);
+    expect(map.size).toBe(2);
+
+    const parentVars = map.get("view-1");
+    expect(parentVars!.store.size).toBe(2);
+    expect(parentVars!.store.get("var-1")).toEqual({ key: "boolean", value: false });
+
+    const childVars = map.get("view-2");
+    expect(childVars!.store.size).toBe(2);
+    expect(childVars!.store.get("var-2")).toEqual({ key: "string", value: "hello" });
+  });
+
+  test("collects from root with multiple children", () => {
+    const root = makeRootNode([
+      makeViewNode("view-1", [
+        entry("entry-1", { id: "var-1", name: "a", value: { key: "boolean", value: true } }),
+      ]),
+      makeViewNode("view-2", [
+        entry("entry-2", { id: "var-2", name: "b", value: { key: "number", value: 10 } }),
+      ]),
+    ]);
+
+    const map = collectVariables(root);
+    expect(map.size).toBe(2);
+    expect(map.get("view-1")!.store.get("var-1")).toEqual({ key: "boolean", value: true });
+    expect(map.get("view-2")!.store.get("var-2")).toEqual({ key: "number", value: 10 });
+  });
+
+  test("returns empty map for tree with no variables", () => {
+    const root = makeRootNode([makeViewNode("view-1", [])]);
+    const map = collectVariables(root);
+    expect(map.size).toBe(0);
+  });
+
+  test("handles nodes whose data has no localVariables property", () => {
+    const root: SnapshotNode = {
+      type: "root",
+      id: "root",
+      parentId: null,
+      pos: "a0",
+      data: {},
+      children: [],
+    } as unknown as SnapshotNode;
+
+    const map = collectVariables(root);
+    expect(map.size).toBe(0);
+  });
+
+  test("two nodes with same variable IDs do not collide", () => {
+    const root = makeRootNode([
+      makeViewNode("view-1", [
+        entry("entry-1", { id: "var-1", name: "isActive", value: { key: "boolean", value: true } }),
+      ]),
+      makeViewNode("view-2", [
+        entry("entry-1", {
+          id: "var-1",
+          name: "isActive",
+          value: { key: "boolean", value: false },
+        }),
+      ]),
+    ]);
+
+    const map = collectVariables(root);
+    expect(map.size).toBe(2);
+
+    // Each node keeps its own value
+    expect(map.get("view-1")!.store.get("var-1")).toEqual({ key: "boolean", value: true });
+    expect(map.get("view-2")!.store.get("var-1")).toEqual({ key: "boolean", value: false });
+  });
+});
+
+describe("collectVariableScopes", () => {
+  function makeChainTree(): SnapshotNode {
+    // root → view-outer(var-outer, var-shadowed) → view-mid(no vars) → view-inner(var-inner, var-shadowed)
+    const inner = makeViewNode("view-inner", [
+      entry("entry-inner", {
+        id: "var-inner",
+        name: "inner",
+        value: { key: "string", value: "inner-value" },
+      }),
+      entry("entry-shadowed-inner", {
+        id: "var-shadowed",
+        name: "shadowed",
+        value: { key: "number", value: 2 },
+      }),
+    ]);
+    const mid = makeViewNode("view-mid", [], [inner]);
+    const outer = makeViewNode(
+      "view-outer",
+      [
+        entry("entry-outer", {
+          id: "var-outer",
+          name: "outer",
+          value: { key: "boolean", value: true },
+        }),
+        entry("entry-shadowed-outer", {
+          id: "var-shadowed",
+          name: "shadowed",
+          value: { key: "number", value: 1 },
+        }),
+      ],
+      [mid],
+    );
+    return makeRootNode([outer]);
+  }
+
+  function readerFor(scopes: VariableScopes, nodeId: string) {
+    return createChainVariableReader(scopes.parents, (id) => scopes.stores.get(id)?.store, nodeId);
+  }
+
+  test("returns stores matching collectVariables and parent links for every node", () => {
+    const root = makeChainTree();
+    const scopes = collectVariableScopes(root);
+
+    expect(scopes.stores.size).toBe(2);
+    expect(scopes.stores.get("view-outer")!.store.get("var-outer")).toEqual({
+      key: "boolean",
+      value: true,
+    });
+
+    expect(scopes.parents.get("root")).toBe(null);
+    expect(scopes.parents.get("view-outer")).toBe("root");
+    expect(scopes.parents.get("view-mid")).toBe("view-outer");
+    expect(scopes.parents.get("view-inner")).toBe("view-mid");
+  });
+
+  test("own store wins", () => {
+    const scopes = collectVariableScopes(makeChainTree());
+    expect(readerFor(scopes, "view-inner").get("var-inner")).toEqual({
+      key: "string",
+      value: "inner-value",
+    });
+  });
+
+  test("falls back to the nearest ancestor store", () => {
+    const scopes = collectVariableScopes(makeChainTree());
+    expect(readerFor(scopes, "view-inner").get("var-outer")).toEqual({
+      key: "boolean",
+      value: true,
+    });
+    // A node without any store of its own resolves through ancestors too.
+    expect(readerFor(scopes, "view-mid").get("var-outer")).toEqual({
+      key: "boolean",
+      value: true,
+    });
+  });
+
+  test("shadowed id: nearest declaration wins for reads", () => {
+    const scopes = collectVariableScopes(makeChainTree());
+    expect(readerFor(scopes, "view-inner").get("var-shadowed")).toEqual({
+      key: "number",
+      value: 2,
+    });
+    // From the middle node the outer declaration is the nearest.
+    expect(readerFor(scopes, "view-mid").get("var-shadowed")).toEqual({
+      key: "number",
+      value: 1,
+    });
+  });
+
+  test("shadowed id: writes target the nearest declaring store", () => {
+    const scopes = collectVariableScopes(makeChainTree());
+    const getStore = (nodeId: string) => scopes.stores.get(nodeId)?.store;
+
+    expect(findDeclaringNodeInChain(scopes.parents, getStore, "view-inner", "var-shadowed")).toBe(
+      "view-inner",
+    );
+    expect(findDeclaringNodeInChain(scopes.parents, getStore, "view-mid", "var-shadowed")).toBe(
+      "view-outer",
+    );
+    expect(findDeclaringNodeInChain(scopes.parents, getStore, "view-inner", "missing")).toBe(
+      undefined,
+    );
+  });
+
+  test("variables not declared anywhere in the chain resolve to undefined", () => {
+    const scopes = collectVariableScopes(makeChainTree());
+    expect(readerFor(scopes, "view-inner").get("missing")).toBe(undefined);
+    // Sibling scopes are not visible: var-inner is not in view-outer's chain.
+    expect(readerFor(scopes, "view-outer").get("var-inner")).toBe(undefined);
+  });
+
+  test("createChainVariableReader reads through the chain and sees live store updates", () => {
+    const scopes = collectVariableScopes(makeChainTree());
+    const liveStores = new Map(
+      [...scopes.stores].map(([nodeId, { store }]) => [nodeId, new Map(store)]),
+    );
+    const reader = createChainVariableReader(
+      scopes.parents,
+      (nodeId) => liveStores.get(nodeId),
+      "view-inner",
+    );
+
+    expect(reader.get("var-shadowed")).toEqual({ key: "number", value: 2 });
+    expect(reader.get("var-outer")).toEqual({ key: "boolean", value: true });
+    expect(reader.get("missing")).toBe(undefined);
+
+    liveStores.get("view-outer")!.set("var-outer", { key: "boolean", value: false });
+    expect(reader.get("var-outer")).toEqual({ key: "boolean", value: false });
+  });
+});
diff --git a/packages/paywall-renderer-web-core/src/variables.ts b/packages/paywall-renderer-web-core/src/variables.ts
new file mode 100644
index 000000000..39405fe18
--- /dev/null
+++ b/packages/paywall-renderer-web-core/src/variables.ts
@@ -0,0 +1,138 @@
+import type { VariableValue } from "./snapshot-types";
+import type { SnapshotNode } from "./types";
+
+export type VariableStore = Map<string, VariableValue>;
+
+/**
+ * Read-only variable lookup accepted by the evaluator, state resolver and
+ * action executor. A plain {@link VariableStore} satisfies it; chain-aware
+ * consumers pass {@link createChainVariableReader} output instead.
+ */
+export type VariableReader = Pick<VariableStore, "get">;
+
+/** Bidirectional map between array entry IDs and variable internal IDs. */
+export type VariableAliases = Map<string, string>;
+
+export interface VariableCollection {
+  store: VariableStore;
+  aliases: VariableAliases;
+}
+
+/** Per-node variable data returned by `collectVariables`. */
+export type NodeVariableMap = Map<string, VariableCollection>;
+
+/**
+ * Collects all variables from the snapshot tree, scoped by node ID.
+ *
+ * Each node with `localVariables` gets its own `VariableStore` and `VariableAliases`.
+ * This prevents collisions when a node is duplicated (copied nodes share the same
+ * internal variable IDs but have different node IDs).
+ */
+export function collectVariables(root: SnapshotNode): NodeVariableMap {
+  const map: NodeVariableMap = new Map();
+  collectFromNode(root, map);
+  return map;
+}
+
+/**
+ * Per-node variable stores plus parent links for ancestor-scoped (lexical)
+ * resolution. A variable declared on a node is visible to that node and all
+ * of its descendants; internal variable ids are not globally unique, so
+ * lookups must walk the ancestor chain instead of flat-merging stores.
+ */
+export interface VariableScopes {
+  stores: NodeVariableMap;
+  parents: Map<string, string | null>;
+}
+
+/**
+ * Collects per-node variable stores (same shape as {@link collectVariables})
+ * together with parent links for every node in the snapshot tree.
+ */
+export function collectVariableScopes(root: SnapshotNode): VariableScopes {
+  const scopes: VariableScopes = { stores: new Map(), parents: new Map() };
+  collectScopesFromNode(root, null, scopes);
+  return scopes;
+}
+
+function collectScopesFromNode(
+  node: SnapshotNode,
+  parentId: string | null,
+  scopes: VariableScopes,
+): void {
+  scopes.parents.set(node.id, parentId);
+  collectFromNode(node, scopes.stores);
+  for (const child of node.children) {
+    collectScopesFromNode(child, node.id, scopes);
+  }
+}
+
+/**
+ * Finds the nearest node in the ancestor chain (own node first, then nearest
+ * ancestor first) whose store declares `variableId`. This is the node a
+ * `set-variable` write must target.
+ */
+export function findDeclaringNodeInChain(
+  parents: ReadonlyMap<string, string | null>,
+  getStore: (nodeId: string) => VariableStore | undefined,
+  nodeId: string,
+  variableId: string,
+): string | undefined {
+  const visited = new Set<string>();
+  let current: string | null = nodeId;
+  while (current !== null && !visited.has(current)) {
+    visited.add(current);
+    if (getStore(current)?.has(variableId)) {
+      return current;
+    }
+    current = parents.get(current) ?? null;
+  }
+  return undefined;
+}
+
+/**
+ * Creates a {@link VariableReader} that resolves ids through the ancestor
+ * chain of `nodeId` (own store first, then nearest ancestor first). `getStore`
+ * is read lazily on every lookup, so live store snapshots (e.g. renderer
+ * state) stay current.
+ */
+export function createChainVariableReader(
+  parents: ReadonlyMap<string, string | null>,
+  getStore: (nodeId: string) => VariableStore | undefined,
+  nodeId: string,
+): VariableReader {
+  return {
+    get: (variableId: string) => {
+      const declaringNodeId = findDeclaringNodeInChain(parents, getStore, nodeId, variableId);
+      if (declaringNodeId === undefined) {
+        return undefined;
+      }
+      return getStore(declaringNodeId)?.get(variableId);
+    },
+  };
+}
+
+function collectFromNode(node: SnapshotNode, map: NodeVariableMap): void {
+  // Unknown-type nodes from newer payloads may carry no data at all.
+  const data = node.data;
+  if (data !== undefined && "localVariables" in data && data.localVariables.length > 0) {
+    const store: VariableStore = new Map();
+    const aliases: VariableAliases = new Map();
+    for (const entry of data.localVariables) {
+      const variable = entry.value;
+      if (variable?.id === undefined || variable.value === undefined) {
+        continue;
+      }
+      store.set(variable.id, variable.value);
+      store.set(entry.id, variable.value);
+      aliases.set(entry.id, variable.id);
+      aliases.set(variable.id, entry.id);
+    }
+    if (store.size > 0) {
+      map.set(node.id, { store, aliases });
+    }
+  }
+  for (const child of node.children) {
+    collectFromNode(child, map);
+  }
+}
diff --git a/packages/paywall-renderer-web-core/sst-env.d.ts b/packages/paywall-renderer-web-core/sst-env.d.ts
new file mode 100644
index 000000000..eec65b9bd
--- /dev/null
+++ b/packages/paywall-renderer-web-core/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst";
+export {};
diff --git a/packages/paywall-renderer-web-core/tsconfig.json b/packages/paywall-renderer-web-core/tsconfig.json
new file mode 100644
index 000000000..fdaf14775
--- /dev/null
+++ b/packages/paywall-renderer-web-core/tsconfig.json
@@ -0,0 +1,5 @@
+{
+  "extends": "@voidhash/tsconfig/typescript-6.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/paywall-workspace/LICENSE.md b/packages/paywall-workspace/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/paywall-workspace/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/paywall-workspace/README.md b/packages/paywall-workspace/README.md
new file mode 100644
index 000000000..84065f28b
--- /dev/null
+++ b/packages/paywall-workspace/README.md
@@ -0,0 +1,7 @@
+# @voidhash/paywall-workspace
+
+Isomorphic workspace paths, snapshot serialization, source hashing, and validated document-write primitives for Voidhash paywall authoring.
+
+```typescript
+import { parseWorkspacePath } from "@voidhash/paywall-workspace";
+```
diff --git a/packages/paywall-workspace/package.json b/packages/paywall-workspace/package.json
new file mode 100644
index 000000000..d4728aa14
--- /dev/null
+++ b/packages/paywall-workspace/package.json
@@ -0,0 +1,45 @@
+{
+  "name": "@voidhash/paywall-workspace",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "Isomorphic paths, snapshots, hashing, and document-write primitives for Voidhash paywall workspaces.",
+  "keywords": [
+    "paywalls",
+    "voidhash",
+    "workspace"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/paywall-workspace"
+  },
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "vp test run -c vitest.mts"
+  },
+  "dependencies": {
+    "@voidhash/ai-shared": "workspace:*",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywall-renderer-web-core": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "6.0.3",
+    "vite-plus": "0.1.23",
+    "vite-tsconfig-paths": "^5.1.4",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/packages/paywall-workspace/src/hash.test.ts b/packages/paywall-workspace/src/hash.test.ts
new file mode 100644
index 000000000..2b70f96fa
--- /dev/null
+++ b/packages/paywall-workspace/src/hash.test.ts
@@ -0,0 +1,41 @@
+import { describe, expect, it } from "vitest";
+
+import { hashSource } from "./hash.ts";
+
+describe("hashSource (SHA-256)", () => {
+  it("returns 64 lowercase hex chars", () => {
+    const digest = hashSource("anything");
+    expect(digest).toMatch(/^[0-9a-f]{64}$/);
+  });
+
+  it("matches the standard SHA-256 vector for the empty string", () => {
+    expect(hashSource("")).toBe(
+      "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    );
+  });
+
+  it('matches the standard SHA-256 vector for "abc"', () => {
+    expect(hashSource("abc")).toBe(
+      "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad",
+    );
+  });
+
+  it("hashes multi-byte UTF-8 as its UTF-8 bytes", () => {
+    // node -e 'crypto.createHash("sha256").update("héllo wörld — 日本語 🎉","utf8").digest("hex")'
+    expect(hashSource("héllo wörld — 日本語 🎉")).toBe(
+      "1043a91841e5a61ef9b6cc83f848d1b9c4c373ec7b4add02f07e001a75e7af0b",
+    );
+  });
+
+  it("hashes a >64-byte (multi-block) input", () => {
+    // 200 bytes → spans four 64-byte SHA-256 blocks incl. padding block.
+    expect(hashSource("a".repeat(200))).toBe(
+      "c2a908d98f5df987ade41b5fce213067efbcc21ef2240212a41e54b5e7c28ae5",
+    );
+  });
+
+  it("is stable and collision-sensitive to single-char changes", () => {
+    expect(hashSource("A")).toBe(hashSource("A"));
+    expect(hashSource("A")).not.toBe(hashSource("B"));
+  });
+});
diff --git a/packages/paywall-workspace/src/hash.ts b/packages/paywall-workspace/src/hash.ts
new file mode 100644
index 000000000..0dd16e337
--- /dev/null
+++ b/packages/paywall-workspace/src/hash.ts
@@ -0,0 +1,115 @@
+/**
+ * The content-address of a code-component's source — the single hash both the
+ * browser compile pipeline and the server manifest cache agree on.
+ *
+ * A synchronous SHA-256 over the UTF-8 source text, returned as 64 lowercase
+ * hex chars. It is a global content address (the primary key of the shared,
+ * unscoped `paywall_component_manifest` cache), so it must resist adversarial
+ * collisions — a cryptographic digest, not a cheap fold. It stays SYNC because
+ * every caller is sync (the browser compile-state keys, `waitForCompile` keys,
+ * and the pure `componentSourceHashes` / `buildRegistryFromSnapshot` on the
+ * server); inputs are KB-sized and hashed only at compile time, so a pure-TS
+ * implementation is more than fast enough and needs no `crypto`/`SubtleCrypto`
+ * (the latter is async-only in the browser).
+ *
+ * Kept here, in the pure isomorphic workspace package, so the browser (which
+ * uploads `(sourceHash, manifest)` after each compile) and the server (which
+ * looks manifests up by `hashSource(codeComponent.source)`) can never drift —
+ * the moment they disagree the server would fail to resolve a just-compiled
+ * component's manifest.
+ */
+export function hashSource(input: string): string {
+  return sha256Hex(new TextEncoder().encode(input));
+}
+
+// SHA-256 round constants (first 32 bits of the fractional parts of the cube
+// roots of the first 64 primes).
+const K = new Uint32Array([
+  0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+  0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+  0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+  0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+  0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+  0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+  0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+  0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+
+const rotr = (value: number, bits: number): number =>
+  ((value >>> bits) | (value << (32 - bits))) >>> 0;
+
+/**
+ * Pure synchronous SHA-256 of a byte array, returned as 64 lowercase hex chars.
+ * A textbook FIPS 180-4 implementation over 512-bit blocks with the standard
+ * length-in-bits padding; kept dependency-free and self-contained.
+ */
+function sha256Hex(bytes: Uint8Array): string {
+  const h = new Uint32Array([
+    0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+  ]);
+
+  // Padded message length: original bytes + 1 marker byte + zero-fill so the
+  // total is a multiple of 64, with the last 8 bytes holding the bit length.
+  const bitLength = bytes.length * 8;
+  const paddedLength = ((bytes.length + 8) >> 6) * 64 + 64;
+  const message = new Uint8Array(paddedLength);
+  message.set(bytes);
+  message[bytes.length] = 0x80;
+  // 64-bit big-endian bit length in the final 8 bytes. Sources are far below
+  // 2^32 bits, so the high word is always zero — write the low 32 bits.
+  const view = new DataView(message.buffer);
+  view.setUint32(paddedLength - 4, bitLength >>> 0, false);
+
+  const w = new Uint32Array(64);
+  for (let offset = 0; offset < paddedLength; offset += 64) {
+    for (let t = 0; t < 16; t += 1) {
+      w[t] = view.getUint32(offset + t * 4, false);
+    }
+    for (let t = 16; t < 64; t += 1) {
+      const s0 = rotr(w[t - 15]!, 7) ^ rotr(w[t - 15]!, 18) ^ (w[t - 15]! >>> 3);
+      const s1 = rotr(w[t - 2]!, 17) ^ rotr(w[t - 2]!, 19) ^ (w[t - 2]! >>> 10);
+      w[t] = (w[t - 16]! + s0 + w[t - 7]! + s1) >>> 0;
+    }
+
+    let a = h[0]!;
+    let b = h[1]!;
+    let c = h[2]!;
+    let d = h[3]!;
+    let e = h[4]!;
+    let f = h[5]!;
+    let g = h[6]!;
+    let hh = h[7]!;
+
+    for (let t = 0; t < 64; t += 1) {
+      const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const ch = (e & f) ^ (~e & g);
+      const temp1 = (hh + S1 + ch + K[t]! + w[t]!) >>> 0;
+      const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const maj = (a & b) ^ (a & c) ^ (b & c);
+      const temp2 = (S0 + maj) >>> 0;
+      hh = g;
+      g = f;
+      f = e;
+      e = (d + temp1) >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = (temp1 + temp2) >>> 0;
+    }
+
+    h[0] = (h[0]! + a) >>> 0;
+    h[1] = (h[1]! + b) >>> 0;
+    h[2] = (h[2]! + c) >>> 0;
+    h[3] = (h[3]! + d) >>> 0;
+    h[4] = (h[4]! + e) >>> 0;
+    h[5] = (h[5]! + f) >>> 0;
+    h[6] = (h[6]! + g) >>> 0;
+    h[7] = (h[7]! + hh) >>> 0;
+  }
+
+  let hex = "";
+  for (let i = 0; i < 8; i += 1) {
+    hex += h[i]!.toString(16).padStart(8, "0");
+  }
+  return hex;
+}
diff --git a/packages/paywall-workspace/src/index.ts b/packages/paywall-workspace/src/index.ts
new file mode 100644
index 000000000..386deab71
--- /dev/null
+++ b/packages/paywall-workspace/src/index.ts
@@ -0,0 +1,56 @@
+/**
+ * `@voidhash/paywall-workspace` — the pure, isomorphic workspace seam
+ * shared by the browser designer and the headless server.
+ *
+ * A *workspace* is a virtual filesystem projection over a project's paywalls;
+ * mimic documents stay the source of truth. This package holds only the pure
+ * seam: the path vocabulary, the snapshot readers over a document's code
+ * components, the content hash, and the file-write → mimic `Command[]` lowering
+ * (document edits, component source writes, component move/delete, reconcile).
+ * No DOM, no Node APIs, no Effect services — it runs unchanged in a browser tab,
+ * a Worker, or a Durable Object.
+ */
+
+export {
+  COMPOSITION_FILENAME,
+  docRelativeComponentPath,
+  docRelativeFromFileName,
+  fileNameFromDocRelative,
+  formatComponentPath,
+  formatCompositionPath,
+  formatWorkspacePath,
+  parseWorkspacePath,
+  workspacePathForDocRelative,
+  type ComponentPath,
+  type CompositionPath,
+  type ParseWorkspacePathResult,
+  type WorkspacePath,
+  type WorkspacePathError,
+} from "./paths.ts";
+
+export { readComponentDefinitions, type WorkspaceComponentDefinition } from "./snapshot.ts";
+
+export { hashSource } from "./hash.ts";
+
+export {
+  lowerComponentDelete,
+  lowerComponentMove,
+  uniqueComponentFileName,
+  validateComponentFileName,
+  type ApplyFileWriteResult,
+  type WriteDiagnostic,
+} from "./write.ts";
+
+export {
+  applyDocumentEditsToTree,
+  applyWorkspaceDelete,
+  applyWorkspaceMove,
+  componentPathsFromTree,
+  encodePaywallDocument,
+  reconcileToTree,
+  writeComponentSourceToTree,
+  type ApplyDocumentEditsToTreeResult,
+  type ApplyWorkspaceWriteResult,
+  type DocumentEdit,
+  type MintedIds,
+} from "./service-write.ts";
diff --git a/packages/paywall-workspace/src/paths.test.ts b/packages/paywall-workspace/src/paths.test.ts
new file mode 100644
index 000000000..1ae40c576
--- /dev/null
+++ b/packages/paywall-workspace/src/paths.test.ts
@@ -0,0 +1,111 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  docRelativeComponentPath,
+  docRelativeFromFileName,
+  fileNameFromDocRelative,
+  formatComponentPath,
+  formatCompositionPath,
+  formatWorkspacePath,
+  parseWorkspacePath,
+  workspacePathForDocRelative,
+  type WorkspacePath,
+} from "./paths.ts";
+
+/**
+ * Contract tests locking the workspace path vocabulary. Tools, MCP resources,
+ * and the editor file tree all agree on exactly this scheme — drift here would
+ * silently break addressing across surfaces. A component is identified by its
+ * FILE NAME (`<basename>.tsx`), matching the canonical document-relative path
+ * (`components/<basename>.tsx`) the mimic nodes store.
+ */
+describe("workspace path vocabulary", () => {
+  test("formats a composition path", () => {
+    expect(formatCompositionPath("trial")).toBe("/paywalls/trial/paywall.tsx");
+  });
+
+  test("formats a component path from a file name (extension included)", () => {
+    expect(formatComponentPath("trial", "hero.tsx")).toBe(
+      "/paywalls/trial/components/hero.tsx",
+    );
+  });
+
+  test("parses a composition path", () => {
+    const result = parseWorkspacePath("/paywalls/trial/paywall.tsx");
+    expect(result).toEqual({ ok: true, path: { kind: "composition", paywallSlug: "trial" } });
+  });
+
+  test("parses a component path, keeping the .tsx in fileName", () => {
+    const result = parseWorkspacePath("/paywalls/trial/components/hero.tsx");
+    expect(result).toEqual({
+      ok: true,
+      path: { kind: "component", paywallSlug: "trial", fileName: "hero.tsx" },
+    });
+  });
+
+  test.each<WorkspacePath>([
+    { kind: "composition", paywallSlug: "trial" },
+    { kind: "component", paywallSlug: "trial", fileName: "hero.tsx" },
+    { kind: "component", paywallSlug: "trial", fileName: "pricing-option.tsx" },
+  ])("format ∘ parse round-trips %o", (path) => {
+    const result = parseWorkspacePath(formatWorkspacePath(path));
+    expect(result.ok && result.path).toEqual(path);
+  });
+
+  test("reserves the top-level /components namespace (not supported yet)", () => {
+    const result = parseWorkspacePath("/components/shared.tsx");
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.error.kind).toBe("reserved");
+    }
+  });
+
+  test.each([
+    ["paywalls/trial/paywall.tsx", "relative path (no leading slash)"],
+    ["/unknown/trial/paywall.tsx", "unknown top-level dir"],
+    ["/paywalls/trial", "no file"],
+    ["/paywalls/trial/other.tsx", "unrecognized file"],
+    ["/paywalls/trial/components/hero.ts", "wrong extension"],
+    ["/paywalls//paywall.tsx", "empty paywall slug"],
+    ["/paywalls/trial/components/.tsx", "empty component file name"],
+  ])("rejects %j as malformed (%s)", (path) => {
+    const result = parseWorkspacePath(path);
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.error.kind).toBe("malformed");
+    }
+  });
+});
+
+describe("doc-relative ↔ workspace-absolute mapping", () => {
+  test("docRelativeFromFileName wraps the basename under components/", () => {
+    expect(docRelativeFromFileName("hero.tsx")).toBe("components/hero.tsx");
+  });
+
+  test("fileNameFromDocRelative strips the components/ prefix", () => {
+    expect(fileNameFromDocRelative("components/hero.tsx")).toBe("hero.tsx");
+  });
+
+  test("docRelativeComponentPath drops the /paywalls/<slug>/ prefix", () => {
+    expect(docRelativeComponentPath("/paywalls/trial/components/pricing-option.tsx")).toBe(
+      "components/pricing-option.tsx",
+    );
+  });
+
+  test("docRelativeComponentPath is undefined for a non-component path", () => {
+    expect(docRelativeComponentPath("/paywalls/trial/paywall.tsx")).toBeUndefined();
+    expect(docRelativeComponentPath("/nope")).toBeUndefined();
+  });
+
+  test("workspacePathForDocRelative re-attaches the paywall directory", () => {
+    expect(workspacePathForDocRelative("trial", "components/hero.tsx")).toBe(
+      "/paywalls/trial/components/hero.tsx",
+    );
+  });
+
+  test("workspace ↔ doc-relative round-trips", () => {
+    const workspace = "/paywalls/trial/components/pricing-option.tsx";
+    const docRelative = docRelativeComponentPath(workspace)!;
+    expect(workspacePathForDocRelative("trial", docRelative)).toBe(workspace);
+  });
+});
diff --git a/packages/paywall-workspace/src/paths.ts b/packages/paywall-workspace/src/paths.ts
new file mode 100644
index 000000000..a085774a0
--- /dev/null
+++ b/packages/paywall-workspace/src/paths.ts
@@ -0,0 +1,193 @@
+/**
+ * The workspace path vocabulary — the single string scheme every tool, MCP
+ * resource, and file tree agrees on. A workspace is a virtual filesystem
+ * projection over a project's paywalls; a path names one file inside it.
+ *
+ * ```
+ * /paywalls/<paywall-slug>/paywall.tsx                ← the composition
+ * /paywalls/<paywall-slug>/components/<basename>.tsx  ← a code-component source
+ * ```
+ *
+ * A paywall slug is the stable per-paywall directory name (a rename never
+ * changes a slug), so composition paths are stable. A component is identified by
+ * its FILE NAME (`<basename>.tsx`) — the file basename IS the component's
+ * identity, matching the canonical document-relative path
+ * (`components/<basename>.tsx`) a `codeComponent`/instance node stores. Renaming
+ * a component is a file MOVE (a path change), not a display-name edit. The
+ * top-level `/components/*` namespace (a project/org-shared component library) is
+ * *reserved* — parsed and rejected as not-yet-supported so the vocabulary is
+ * forward-compatible.
+ */
+
+/** Fixed filename of a paywall's composition file within its directory. */
+export const COMPOSITION_FILENAME = "paywall.tsx";
+
+const PAYWALLS_SEGMENT = "paywalls";
+const COMPONENTS_SEGMENT = "components";
+
+/**
+ * A paywall slug segment: an identifier with no path separators. Kept
+ * intentionally permissive (paywall slugs are generated upstream); it only rules
+ * out characters that would break the path grammar itself.
+ */
+const SLUG = /^[^/]+$/;
+
+/** A parsed workspace path — a discriminated union over the file kinds. */
+export type WorkspacePath = CompositionPath | ComponentPath;
+
+/** `/paywalls/<paywallSlug>/paywall.tsx` — a paywall's composition file. */
+export interface CompositionPath {
+  readonly kind: "composition";
+  readonly paywallSlug: string;
+}
+
+/**
+ * `/paywalls/<paywallSlug>/components/<fileName>` — a component source. The
+ * `fileName` is the file basename INCLUDING its `.tsx` extension (e.g.
+ * `pricing-option.tsx`); it is the component's identity and matches the
+ * `codeComponent`/instance nodes' canonical `components/<fileName>` path.
+ */
+export interface ComponentPath {
+  readonly kind: "component";
+  readonly paywallSlug: string;
+  readonly fileName: string;
+}
+
+/** Why a path string is not a usable workspace path. */
+export type WorkspacePathError =
+  | { readonly kind: "malformed"; readonly reason: string }
+  | { readonly kind: "reserved"; readonly reason: string };
+
+/** Result of {@link parseWorkspacePath}: a parsed path or a typed error. */
+export type ParseWorkspacePathResult =
+  | { readonly ok: true; readonly path: WorkspacePath }
+  | { readonly ok: false; readonly error: WorkspacePathError };
+
+/** Formats a paywall's composition path. */
+export function formatCompositionPath(paywallSlug: string): string {
+  return `/${PAYWALLS_SEGMENT}/${paywallSlug}/${COMPOSITION_FILENAME}`;
+}
+
+/**
+ * Formats a code-component's source path. `fileName` is the file basename
+ * including its `.tsx` extension (`pricing-option.tsx`) — the component's
+ * identity.
+ */
+export function formatComponentPath(paywallSlug: string, fileName: string): string {
+  return `/${PAYWALLS_SEGMENT}/${paywallSlug}/${COMPONENTS_SEGMENT}/${fileName}`;
+}
+
+/** Formats a parsed {@link WorkspacePath} back to its string form. */
+export function formatWorkspacePath(path: WorkspacePath): string {
+  return path.kind === "composition"
+    ? formatCompositionPath(path.paywallSlug)
+    : formatComponentPath(path.paywallSlug, path.fileName);
+}
+
+/**
+ * The canonical document-relative path (`components/<fileName>`) a `codeComponent`
+ * definition and its local instances store, given a workspace-absolute component
+ * path (`/paywalls/<slug>/components/<fileName>`). This is the identity key the
+ * mimic bridge (lift/lower) round-trips — dropping the `/paywalls/<slug>/`
+ * prefix. Returns `undefined` when the input is not a component path.
+ */
+export function docRelativeComponentPath(workspaceAbsolutePath: string): string | undefined {
+  const parsed = parseWorkspacePath(workspaceAbsolutePath);
+  if (!parsed.ok || parsed.path.kind !== "component") {
+    return undefined;
+  }
+  return docRelativeFromFileName(parsed.path.fileName);
+}
+
+/**
+ * The canonical document-relative path (`components/<fileName>`) for a component
+ * file basename. The inverse of {@link fileNameFromDocRelative}. Pure string
+ * concatenation — the segment the mimic nodes key on.
+ */
+export function docRelativeFromFileName(fileName: string): string {
+  return `${COMPONENTS_SEGMENT}/${fileName}`;
+}
+
+/**
+ * The file basename (`<basename>.tsx`) of a canonical document-relative
+ * component path (`components/<basename>.tsx`) — the inverse of
+ * {@link docRelativeFromFileName}. Returns the input unchanged when it carries no
+ * `components/` prefix (defensive; a well-formed doc-relative path always does).
+ */
+export function fileNameFromDocRelative(docRelativePath: string): string {
+  const prefix = `${COMPONENTS_SEGMENT}/`;
+  return docRelativePath.startsWith(prefix) ? docRelativePath.slice(prefix.length) : docRelativePath;
+}
+
+/**
+ * The workspace-absolute component path (`/paywalls/<slug>/components/<fileName>`)
+ * for a paywall slug and a canonical document-relative component path
+ * (`components/<fileName>`) — the inverse of {@link docRelativeComponentPath}.
+ */
+export function workspacePathForDocRelative(paywallSlug: string, docRelativePath: string): string {
+  return formatComponentPath(paywallSlug, fileNameFromDocRelative(docRelativePath));
+}
+
+const malformed = (reason: string): ParseWorkspacePathResult => ({
+  ok: false,
+  error: { kind: "malformed", reason },
+});
+
+const reserved = (reason: string): ParseWorkspacePathResult => ({
+  ok: false,
+  error: { kind: "reserved", reason },
+});
+
+/**
+ * Parse a workspace path string into a {@link WorkspacePath}, or a typed error.
+ *
+ * Recognizes exactly two shapes under `/paywalls/<slug>/`: the composition file
+ * (`paywall.tsx`) and a component source (`components/<basename>.tsx`). A
+ * component file's name must end with `.tsx`; the retained basename (including
+ * the extension) is the component's identity. The top-level `/components/*`
+ * namespace is reserved for a future shared library and is rejected with a
+ * `reserved` error. Everything else is `malformed`.
+ */
+export function parseWorkspacePath(path: string): ParseWorkspacePathResult {
+  if (!path.startsWith("/")) {
+    return malformed(`path must be absolute (start with "/"): "${path}"`);
+  }
+  const segments = path.slice(1).split("/");
+  const [head, ...rest] = segments;
+
+  if (head === COMPONENTS_SEGMENT) {
+    return reserved(
+      `"/components/*" (project-shared component library) is not supported yet`,
+    );
+  }
+
+  if (head !== PAYWALLS_SEGMENT) {
+    return malformed(`unknown top-level directory "/${head ?? ""}"`);
+  }
+
+  const [paywallSlug, ...tail] = rest;
+  if (paywallSlug === undefined || !SLUG.test(paywallSlug)) {
+    return malformed(`missing or invalid paywall slug in "${path}"`);
+  }
+
+  // /paywalls/<slug>/paywall.tsx
+  if (tail.length === 1 && tail[0] === COMPOSITION_FILENAME) {
+    return { ok: true, path: { kind: "composition", paywallSlug } };
+  }
+
+  // /paywalls/<slug>/components/<basename>.tsx
+  if (tail.length === 2 && tail[0] === COMPONENTS_SEGMENT) {
+    const fileName = tail[1]!;
+    if (!fileName.endsWith(".tsx")) {
+      return malformed(`component file must end with ".tsx": "${path}"`);
+    }
+    // A non-empty basename before the extension is required (`.tsx` alone is not
+    // a component file). The full basename INCLUDING `.tsx` is the identity.
+    if (fileName.length <= ".tsx".length) {
+      return malformed(`missing component file name in "${path}"`);
+    }
+    return { ok: true, path: { kind: "component", paywallSlug, fileName } };
+  }
+
+  return malformed(`not a recognized workspace file: "${path}"`);
+}
diff --git a/packages/paywall-workspace/src/service-write.test.ts b/packages/paywall-workspace/src/service-write.test.ts
new file mode 100644
index 000000000..5259f8dc5
--- /dev/null
+++ b/packages/paywall-workspace/src/service-write.test.ts
@@ -0,0 +1,202 @@
+import { PaywallDesignerDocument } from "@voidhash/mimic-schema";
+import type { DocumentEdit } from "@voidhash/ai-shared";
+import { describe, expect, test } from "vitest";
+
+import { applyDocumentEditsToTree, writeComponentSourceToTree } from "./service-write.ts";
+
+/** Encode a decoded document input into the raw live tree the write path reads. */
+const encode = (roots: unknown): unknown => PaywallDesignerDocument.encode(roots as never);
+
+/** The screen id in an encoded live tree (the edit target). */
+const screenIdOf = (tree: unknown): string =>
+  (tree as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
+    (node) => node.value.fields.type?.value === "screen",
+  )!.id;
+
+/** Whether the raw tree contains a node with `id` carrying a string field `key === value`. */
+const treeHasNodeWithField = (tree: unknown, id: string, key: string, value: string): boolean =>
+  (tree as { nodes: { id: string; value: { fields: Record<string, { value?: unknown }> } }[] }).nodes.some(
+    (node) => node.id === id && node.value.fields[key]?.value === value,
+  );
+
+describe("applyDocumentEditsToTree", () => {
+  const liveTree = () =>
+    encode([{ type: "root", name: "Paywall", children: [{ type: "screen", name: "Main" }] }]);
+
+  test("insert emits a tree.insert carrying the pre-minted target id (id survives reconcile)", () => {
+    const tree = liveTree();
+    const screenId = screenIdOf(tree);
+    const { result, mintedIds } = applyDocumentEditsToTree({
+      tree,
+      edits: [{ op: "insert", parentId: screenId, node: { type: "view", name: "Card" } }] as DocumentEdit[],
+    });
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+
+    const minted = mintedIds["0"]!;
+    expect(minted).toHaveLength(1);
+    const newId = minted[0]!;
+
+    // The reconcile emitted a tree.insert whose node.id IS the minted id — proving
+    // the pre-minted id survives encode + reconcile and is addressable next.
+    const insert = result.commands.find(
+      (c) => (c as { kind: string }).kind === "tree.insert",
+    ) as { node: { id: string } } | undefined;
+    expect(insert).toBeDefined();
+    expect(insert!.node.id).toBe(newId);
+  });
+
+  test("update touches only the edited node (no-op elsewhere → minimal commands)", () => {
+    const tree = liveTree();
+    const screenId = screenIdOf(tree);
+    const { result } = applyDocumentEditsToTree({
+      tree,
+      edits: [{ op: "update", nodeId: screenId, set: { name: "Renamed" } }] as DocumentEdit[],
+    });
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+    // Exactly the name field changed → a single object.set, no inserts/moves/deletes.
+    expect(result.commands.every((c) => (c as { kind: string }).kind === "object.set")).toBe(true);
+  });
+
+  test("a no-op edit batch (empty target diff) reconciles to zero commands", () => {
+    const tree = liveTree();
+    const screenId = screenIdOf(tree);
+    // Setting the name to its current value is a no-op.
+    const { result } = applyDocumentEditsToTree({
+      tree,
+      edits: [{ op: "update", nodeId: screenId, set: { name: "Main" } }] as DocumentEdit[],
+    });
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+    expect(result.commands).toEqual([]);
+  });
+
+  test("a malformed tree is rejected on the typed channel", () => {
+    const { result } = applyDocumentEditsToTree({
+      tree: { not: "a tree" },
+      edits: [{ op: "update", nodeId: "x", set: {} }] as DocumentEdit[],
+    });
+    expect(result.kind).toBe("rejected");
+  });
+
+  test("an entry-wrapped array-bearing node emits NO commands when untouched", () => {
+    // A view whose `localVariables` is an authored entry-wrapped array — decode
+    // wraps each item in an `{id,pos,value}` envelope. An UNRELATED edit (renaming
+    // the screen) must not re-emit that array: reconcile compares arrays by logical
+    // value (envelope-agnostic), so the untouched view yields zero commands.
+    const tree = encode([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          {
+            type: "screen",
+            name: "Main",
+            children: [
+              {
+                type: "view",
+                name: "Stateful",
+                localVariables: [
+                  { id: "var_1", name: "plan", value: { key: "string", value: "yearly" } },
+                ],
+              },
+            ],
+          },
+        ],
+      },
+    ]);
+    const screenId = screenIdOf(tree);
+    // Read the array-bearing view's id so we can assert nothing addresses it.
+    const viewId = (tree as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
+      (node) => node.value.fields.type?.value === "view",
+    )!.id;
+
+    const { result } = applyDocumentEditsToTree({
+      tree,
+      edits: [{ op: "update", nodeId: screenId, set: { name: "Renamed" } }] as DocumentEdit[],
+    });
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+    // Only the screen's name changed — no command touches the array-bearing view.
+    const touchesView = result.commands.some((c) => {
+      const path = (c as { path?: unknown }).path;
+      return typeof path === "string" ? path.includes(viewId) : JSON.stringify(c).includes(viewId);
+    });
+    expect(touchesView).toBe(false);
+    // And every emitted command is the single name set on the screen.
+    expect(result.commands.every((c) => (c as { kind: string }).kind === "object.set")).toBe(true);
+  });
+});
+
+describe("writeComponentSourceToTree", () => {
+  test("creates the library + codeComponent for a new path", () => {
+    const tree = encode([
+      { type: "root", name: "Paywall", children: [{ type: "screen", name: "Main" }] },
+    ]);
+    const result = writeComponentSourceToTree({
+      tree,
+      path: "components/hero.tsx",
+      source: "export default () => null;",
+    });
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+    // A fresh library + codeComponent are inserted.
+    const inserts = result.commands.filter((c) => (c as { kind: string }).kind === "tree.insert");
+    const types = inserts.map(
+      (c) =>
+        (c as unknown as { node: { value: { fields: { type: { value: string } } } } }).node.value
+          .fields.type.value,
+    );
+    expect(types).toContain("library");
+    expect(types).toContain("codeComponent");
+  });
+
+  test("replaces an existing component's source in place (id preserved)", () => {
+    const tree = encode([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          { type: "screen", name: "Main" },
+          {
+            type: "library",
+            children: [{ type: "codeComponent", path: "components/hero.tsx", source: "old" }],
+          },
+        ],
+      },
+    ]);
+    // Read the existing codeComponent id.
+    const ccId = (tree as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
+      (node) => node.value.fields.type?.value === "codeComponent",
+    )!.id;
+
+    const result = writeComponentSourceToTree({
+      tree,
+      path: "components/hero.tsx",
+      source: "new source",
+    });
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+    // No inserts (the node already exists) — only a field update on the same id.
+    expect(result.commands.some((c) => (c as { kind: string }).kind === "tree.insert")).toBe(false);
+    const update = result.commands.find(
+      (c) => (c as { kind: string; key?: string }).kind === "object.set" && (c as { key?: string }).key === "source",
+    ) as { path: unknown; value: { value?: string } } | undefined;
+    expect(update).toBeDefined();
+    // The update carries the new source and the target tree still has the same id.
+    expect(treeHasNodeWithField(tree, ccId, "path", "components/hero.tsx")).toBe(true);
+  });
+
+  test("rejects an invalid component file name", () => {
+    const tree = encode([
+      { type: "root", name: "Paywall", children: [{ type: "screen", name: "Main" }] },
+    ]);
+    const result = writeComponentSourceToTree({
+      tree,
+      path: "components/../evil.tsx",
+      source: "x",
+    });
+    expect(result.kind).toBe("rejected");
+  });
+});
diff --git a/packages/paywall-workspace/src/service-write.ts b/packages/paywall-workspace/src/service-write.ts
new file mode 100644
index 000000000..962c314ce
--- /dev/null
+++ b/packages/paywall-workspace/src/service-write.ts
@@ -0,0 +1,311 @@
+import type { TreeValue } from "@voidhash/mimic-core";
+import { PaywallDesignerDocument, reconcile } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import {
+  applyDocumentEdits,
+  unwrapEntries,
+  type DocumentEdit,
+  type EditableDocumentNode,
+  type MintedIds,
+} from "@voidhash/ai-shared";
+
+export type { DocumentEdit, MintedIds } from "@voidhash/ai-shared";
+
+import { fileNameFromDocRelative } from "./paths.ts";
+import { readComponentDefinitions } from "./snapshot.ts";
+import {
+  lowerComponentDelete,
+  lowerComponentMove,
+  validateComponentFileName,
+  type ApplyFileWriteResult,
+} from "./write.ts";
+
+/**
+ * Narrow a raw mimic document value (the encoded `TreeValue` returned by the
+ * mimic host as `unknown`) into a `TreeValue`, or `undefined` when it is not a
+ * well-formed tree. Structural — the pure package owns the narrowing (core stays
+ * free of the mimic-core value kinds).
+ */
+function asTreeValue(tree: unknown): TreeValue | undefined {
+  return tree !== null &&
+    typeof tree === "object" &&
+    (tree as { kind?: unknown }).kind === "tree" &&
+    Array.isArray((tree as { nodes?: unknown }).nodes)
+    ? (tree as TreeValue)
+    : undefined;
+}
+
+/**
+ * Encode a decoded paywall document (array of root snapshots) into the RAW
+ * `TreeValue` that the mimic host stores and the write path reconciles against.
+ * The inverse of `PaywallDesignerDocument.decode`. Exposed from the pure package
+ * so consumers (and tests) can build a raw document tree without importing
+ * `mimic-schema` directly — mirroring how {@link componentPathsFromTree} owns the
+ * decode.
+ */
+export function encodePaywallDocument(roots: unknown): unknown {
+  return PaywallDesignerDocument.encode(roots as never);
+}
+
+/**
+ * Result of a server-side workspace lowering ({@link applyWorkspaceMove},
+ * {@link applyWorkspaceDelete}, {@link reconcileToTree}): either the lowered
+ * command batch, or a rejection — including the case where the raw tree was not a
+ * well-formed tree value.
+ */
+export type ApplyWorkspaceWriteResult =
+  | ApplyFileWriteResult
+  | {
+      readonly kind: "rejected";
+      readonly diagnostics: ReadonlyArray<{ readonly message: string }>;
+    };
+
+/**
+ * Server-side orchestration of a component MOVE (a file rename): narrow the raw
+ * document tree and lower the move ({@link lowerComponentMove} — repaths the
+ * target `codeComponent` node's `path` and re-points every local instance
+ * referencing it). No registry needed (a move never touches the composition
+ * grammar directly, only node paths). A malformed tree is rejected on the typed
+ * channel. `fromPath`/`toPath` are canonical document-relative component paths
+ * (`components/<basename>.tsx`).
+ */
+export function applyWorkspaceMove(input: {
+  readonly fromPath: string;
+  readonly toPath: string;
+  readonly tree: unknown;
+}): ApplyWorkspaceWriteResult {
+  const liveTree = asTreeValue(input.tree);
+  if (liveTree === undefined) {
+    return {
+      kind: "rejected",
+      diagnostics: [{ message: "The paywall document is not a well-formed tree." }],
+    };
+  }
+  return lowerComponentMove(liveTree, input.fromPath, input.toPath);
+}
+
+/**
+ * Server-side orchestration of a component DELETE: narrow the raw document tree
+ * and lower the delete ({@link lowerComponentDelete} — removes only the target
+ * `codeComponent` node, never cascading into `component` instances). No registry
+ * needed. A malformed tree is rejected on the typed channel. `path` is the
+ * component's canonical document-relative identity.
+ */
+export function applyWorkspaceDelete(input: {
+  readonly path: string;
+  readonly tree: unknown;
+}): ApplyWorkspaceWriteResult {
+  const liveTree = asTreeValue(input.tree);
+  if (liveTree === undefined) {
+    return {
+      kind: "rejected",
+      diagnostics: [{ message: "The paywall document is not a well-formed tree." }],
+    };
+  }
+  return lowerComponentDelete(liveTree, input.path);
+}
+
+/**
+ * The canonical document-relative `path`s of a document's code-component
+ * definitions read from its RAW encoded tree — the existing paths a server-side
+ * component create needs to derive a unique file name
+ * ({@link uniqueComponentFileName}) the same way the browser does, and the keys a
+ * move must check for collisions.
+ */
+export function componentPathsFromTree(tree: unknown): string[] {
+  const value = asTreeValue(tree);
+  if (value === undefined) {
+    return [];
+  }
+  const snapshot = (PaywallDesignerDocument.decode(value) ?? []) as readonly SnapshotNode[];
+  return readComponentDefinitions(snapshot).map((definition) => definition.path);
+}
+
+/**
+ * Reconcile the CURRENT document tree back to a previously captured `target`
+ * tree — the checkpoint-revert lowering. Returns the minimal command batch that
+ * transforms the live document into the captured pre-turn state (empty when they
+ * already match). A malformed live or captured tree is rejected on the typed
+ * channel. Pure — the retry/submit loop lives in the workspace service.
+ */
+export function reconcileToTree(input: {
+  readonly current: unknown;
+  readonly target: unknown;
+}): ApplyWorkspaceWriteResult {
+  const current = asTreeValue(input.current);
+  const target = asTreeValue(input.target);
+  if (current === undefined || target === undefined) {
+    return {
+      kind: "rejected",
+      diagnostics: [{ message: "A revert tree is not a well-formed document tree." }],
+    };
+  }
+  return { kind: "commands", commands: reconcile(current, target) };
+}
+
+/**
+ * The outcome of {@link applyDocumentEditsToTree}: the reconcile lowering to
+ * submit, plus the ids minted for every node an `insert` / `replaceChildren` op
+ * created (so the caller can return them to the model).
+ */
+export interface ApplyDocumentEditsToTreeResult {
+  readonly result: ApplyWorkspaceWriteResult;
+  readonly mintedIds: MintedIds;
+}
+
+/**
+ * Adapt a decoded document snapshot node to the ai-shared
+ * {@link EditableDocumentNode} the applier + encoder read: keep `id`/`type`, and
+ * UNWRAP the CRDT `{id,pos,value}` array envelopes inside `data` so the encoder
+ * (which re-mints array-item envelopes) accepts it — a proven no-op round-trip
+ * through `reconcile`, which ignores array-item envelopes.
+ */
+function snapshotToEditable(node: SnapshotNode): EditableDocumentNode {
+  return {
+    id: node.id,
+    type: node.type,
+    data: unwrapEntries(node.data) as Record<string, unknown>,
+    children: node.children.map(snapshotToEditable),
+  };
+}
+
+/** Flatten an {@link EditableDocumentNode} into the `PaywallDesignerDocument.encode` input shape. */
+function editableToEncodeInput(node: EditableDocumentNode): Record<string, unknown> {
+  const input: Record<string, unknown> = { id: node.id, type: node.type };
+  for (const [key, value] of Object.entries(node.data ?? {})) {
+    input[key] = value;
+  }
+  input["children"] = (node.children ?? []).map(editableToEncodeInput);
+  return input;
+}
+
+/**
+ * Apply a batch of ALREADY-VALIDATED {@link DocumentEdit} ops to the live raw
+ * document `tree` and reconcile the result into a command batch — the server
+ * lowering behind the AI/MCP `edit_paywall` tool. Decodes the raw tree to the
+ * editable snapshot, runs the pure {@link applyDocumentEdits} applier (which
+ * pre-mints real {@link import("@voidhash/mimic-core").shortId} ids for
+ * created nodes), re-encodes the target, and `reconcile`s the live tree to it.
+ *
+ * The minted ids SURVIVE: `PaywallDesignerDocument.encode` preserves any `id`
+ * present on an input node, and `reconcile` emits `tree.insert` carrying the
+ * target id verbatim for a node id absent from the live tree — so a follow-up
+ * edit can address the newly-created nodes by the returned ids.
+ *
+ * Designed to be re-run per submit attempt against a FRESH `tree`: the ops are
+ * id/position-based, so re-deriving the target from an advanced live tree merges
+ * concurrent edits rather than clobbering them. A malformed tree is rejected on
+ * the typed channel.
+ */
+export function applyDocumentEditsToTree(input: {
+  readonly tree: unknown;
+  readonly edits: readonly DocumentEdit[];
+}): ApplyDocumentEditsToTreeResult {
+  const current = asTreeValue(input.tree);
+  if (current === undefined) {
+    return {
+      result: {
+        kind: "rejected",
+        diagnostics: [{ message: "The paywall document is not a well-formed tree." }],
+      },
+      mintedIds: {},
+    };
+  }
+  const snapshot = (PaywallDesignerDocument.decode(current) ?? []) as readonly SnapshotNode[];
+  const root = snapshot[0];
+  if (root === undefined) {
+    return {
+      result: {
+        kind: "rejected",
+        diagnostics: [{ message: "The paywall document has no root node to edit." }],
+      },
+      mintedIds: {},
+    };
+  }
+  const { root: target, mintedIds } = applyDocumentEdits(snapshotToEditable(root), input.edits);
+  const encoded = PaywallDesignerDocument.encode([editableToEncodeInput(target)] as never);
+  const targetTree = asTreeValue(encoded);
+  if (targetTree === undefined) {
+    return {
+      result: {
+        kind: "rejected",
+        diagnostics: [{ message: "The edited document failed to re-encode into a tree." }],
+      },
+      mintedIds: {},
+    };
+  }
+  return {
+    result: { kind: "commands", commands: reconcile(current, targetTree) },
+    mintedIds,
+  };
+}
+
+/**
+ * Lower a component-source WRITE to a reconcile command batch: create-or-replace
+ * a `codeComponent` definition at the canonical document-relative `path`
+ * (`components/<basename>.tsx`), mirroring the browser's create/write semantics.
+ *
+ * - An existing `codeComponent` at `path` has its `source` replaced.
+ * - A new `path` is created: the singleton `library` node under the root is
+ *   found (created on first use), and a fresh `codeComponent` with `{path,
+ *   source}` is appended — the engine mints its id (which the write does not
+ *   need to return; a follow-up read addresses it by path).
+ *
+ * A malformed tree (or one with no root) is rejected on the typed channel, as is
+ * an invalid component file name. Pure — decodes, edits the snapshot, re-encodes,
+ * and reconciles against the live tree; re-runnable per submit attempt.
+ */
+export function writeComponentSourceToTree(input: {
+  readonly tree: unknown;
+  readonly path: string;
+  readonly source: string;
+}): ApplyWorkspaceWriteResult {
+  const nameError = validateComponentFileName(fileNameFromDocRelative(input.path));
+  if (nameError !== undefined) {
+    return { kind: "rejected", diagnostics: [{ message: nameError }] };
+  }
+  const current = asTreeValue(input.tree);
+  if (current === undefined) {
+    return {
+      kind: "rejected",
+      diagnostics: [{ message: "The paywall document is not a well-formed tree." }],
+    };
+  }
+  const snapshot = (PaywallDesignerDocument.decode(current) ?? []) as readonly SnapshotNode[];
+  const root = snapshot[0];
+  if (root === undefined) {
+    return {
+      kind: "rejected",
+      diagnostics: [{ message: "The paywall document has no root node to write into." }],
+    };
+  }
+
+  const rootInput = editableToEncodeInput(snapshotToEditable(root));
+  const children = rootInput["children"] as Record<string, unknown>[];
+
+  let library = children.find((child) => child["type"] === "library");
+  if (library === undefined) {
+    library = { type: "library", children: [] as Record<string, unknown>[] };
+    children.push(library);
+  }
+  const libraryChildren = (library["children"] ??= []) as Record<string, unknown>[];
+
+  const existing = libraryChildren.find(
+    (child) => child["type"] === "codeComponent" && child["path"] === input.path,
+  );
+  if (existing !== undefined) {
+    existing["source"] = input.source;
+  } else {
+    libraryChildren.push({ type: "codeComponent", path: input.path, source: input.source });
+  }
+
+  const encoded = PaywallDesignerDocument.encode([rootInput] as never);
+  const targetTree = asTreeValue(encoded);
+  if (targetTree === undefined) {
+    return {
+      kind: "rejected",
+      diagnostics: [{ message: "The edited document failed to re-encode into a tree." }],
+    };
+  }
+  return { kind: "commands", commands: reconcile(current, targetTree) };
+}
diff --git a/packages/paywall-workspace/src/snapshot.ts b/packages/paywall-workspace/src/snapshot.ts
new file mode 100644
index 000000000..14a0a4912
--- /dev/null
+++ b/packages/paywall-workspace/src/snapshot.ts
@@ -0,0 +1,49 @@
+import type {
+  CodeComponentSnapshotNode,
+  SnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+
+/**
+ * Pure snapshot readers over the decoded paywall document (the array of root
+ * snapshots produced by `PaywallDesignerDocument.decode`). Reimplemented here —
+ * rather than importing the store-coupled designer selectors — so the workspace
+ * projection stays free of any Zustand/React dependency and runs unchanged in a
+ * Worker or Node.
+ */
+
+/**
+ * A code-component definition read from a document snapshot. `path` is the
+ * component's IDENTITY — the canonical document-relative path
+ * `components/<basename>.tsx` stored on the `codeComponent` node. `id` is the
+ * CRDT node id (still needed to target designer actions at a specific node).
+ */
+export interface WorkspaceComponentDefinition {
+  readonly id: string;
+  readonly path: string;
+  readonly source: string;
+}
+
+/**
+ * The `codeComponent` definition nodes of a document, read from the singleton
+ * `library` node under the (single) document root. Returns an empty list when
+ * the document has no root or no library yet.
+ */
+export function readComponentDefinitions(
+  snapshot: readonly SnapshotNode[],
+): WorkspaceComponentDefinition[] {
+  const root = snapshot[0];
+  if (root === undefined) {
+    return [];
+  }
+  const library = root.children.find((child) => child.type === "library");
+  if (library === undefined) {
+    return [];
+  }
+  return library.children.flatMap((node) =>
+    node.type === "codeComponent" ? [toDefinition(node)] : [],
+  );
+}
+
+function toDefinition(node: CodeComponentSnapshotNode): WorkspaceComponentDefinition {
+  return { id: node.id, path: node.data.path, source: node.data.source };
+}
diff --git a/packages/paywall-workspace/src/write.test.ts b/packages/paywall-workspace/src/write.test.ts
new file mode 100644
index 000000000..ea76716c9
--- /dev/null
+++ b/packages/paywall-workspace/src/write.test.ts
@@ -0,0 +1,236 @@
+import { applyBatch, type TreeValue } from "@voidhash/mimic-core";
+import { PaywallDesignerDocument } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import { readComponentDefinitions } from "./snapshot.ts";
+import {
+  lowerComponentDelete,
+  lowerComponentMove,
+  uniqueComponentFileName,
+  validateComponentFileName,
+} from "./write.ts";
+
+const enc = (input: unknown): TreeValue =>
+  PaywallDesignerDocument.encode(input as never) as TreeValue;
+const decode = (tree: TreeValue): readonly SnapshotNode[] =>
+  PaywallDesignerDocument.decode(tree)! as readonly SnapshotNode[];
+
+const docWithComponent = (source: string): TreeValue =>
+  enc([
+    {
+      type: "root",
+      name: "Paywall",
+      children: [
+        { type: "screen", name: "Main" },
+        {
+          type: "library",
+          children: [{ type: "codeComponent", path: "components/hero.tsx", source }],
+        },
+      ],
+    },
+  ]);
+
+/**
+ * A document root whose library holds two `codeComponent` definitions plus a
+ * `component` INSTANCE node under the screen referencing the first one (via
+ * `componentPath`) — the shape a delete must NOT cascade into, and a move MUST
+ * re-point.
+ */
+const docWithTwoComponentsAndInstance = (): TreeValue =>
+  enc([
+    {
+      type: "root",
+      name: "Paywall",
+      children: [
+        {
+          type: "screen",
+          name: "Main",
+          children: [
+            {
+              type: "component",
+              componentSource: "local",
+              componentPath: "components/hero.tsx",
+            },
+          ],
+        },
+        {
+          type: "library",
+          children: [
+            {
+              type: "codeComponent",
+              path: "components/hero.tsx",
+              source: "export const Hero = () => null;",
+            },
+            {
+              type: "codeComponent",
+              path: "components/promo.tsx",
+              source: "export const Promo = () => null;",
+            },
+          ],
+        },
+      ],
+    },
+  ]);
+
+/** The doc-relative path of a component instance node (local instances only). */
+const instanceComponentPath = (tree: TreeValue): string | undefined => {
+  const node = tree.nodes.find(
+    (n) => n.value.fields.type?.kind === "string" && n.value.fields.type.value === "component",
+  );
+  const field = node?.value.fields.componentPath;
+  return field && field.kind === "string" ? field.value : undefined;
+};
+
+describe("lowerComponentMove", () => {
+  test("repaths the definition AND re-points every local instance", () => {
+    const live = docWithTwoComponentsAndInstance();
+    const result = lowerComponentMove(live, "components/hero.tsx", "components/hero-banner.tsx");
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+
+    const applied = applyBatch(live, result.commands) as TreeValue;
+    // The definition is at the new path; the old path is gone.
+    expect(readComponentDefinitions(decode(applied)).map((d) => d.path).sort()).toEqual([
+      "components/hero-banner.tsx",
+      "components/promo.tsx",
+    ]);
+    // The instance node was re-pointed (no orphaning).
+    expect(instanceComponentPath(applied)).toBe("components/hero-banner.tsx");
+  });
+
+  test("re-points instances in one command batch (no orphaned reference)", () => {
+    const live = docWithTwoComponentsAndInstance();
+    const result = lowerComponentMove(live, "components/hero.tsx", "components/hero-banner.tsx");
+    if (result.kind !== "commands") throw new Error("expected commands");
+    // The single reconcile batch carries both the definition repath and the
+    // instance re-point — applying it leaves no reference to the old path.
+    const applied = applyBatch(live, result.commands) as TreeValue;
+    const referencesOldPath = applied.nodes.some(
+      (n) =>
+        n.value.fields.componentPath?.kind === "string" &&
+        n.value.fields.componentPath.value === "components/hero.tsx",
+    );
+    const definesOldPath = applied.nodes.some(
+      (n) =>
+        n.value.fields.type?.kind === "string" &&
+        n.value.fields.type.value === "codeComponent" &&
+        n.value.fields.path?.kind === "string" &&
+        n.value.fields.path.value === "components/hero.tsx",
+    );
+    expect(referencesOldPath).toBe(false);
+    expect(definesOldPath).toBe(false);
+  });
+
+  test("a move to the current path is a zero-command no-op", () => {
+    const live = docWithComponent("export const Hero = () => null;");
+    const result = lowerComponentMove(live, "components/hero.tsx", "components/hero.tsx");
+    expect(result).toEqual({ kind: "commands", commands: [] });
+  });
+
+  test("rejects a move whose source path has no component", () => {
+    const live = docWithComponent("export const Hero = () => null;");
+    const result = lowerComponentMove(live, "components/ghost.tsx", "components/ghost-2.tsx");
+    expect(result.kind).toBe("rejected");
+  });
+
+  test("rejects a move to a path that already exists", () => {
+    const live = docWithTwoComponentsAndInstance();
+    const result = lowerComponentMove(live, "components/hero.tsx", "components/promo.tsx");
+    expect(result.kind).toBe("rejected");
+    if (result.kind === "rejected") {
+      expect(result.diagnostics[0]!.message).toContain("already exists");
+    }
+  });
+
+  test("rejects a move to an invalid file name", () => {
+    const live = docWithComponent("export const Hero = () => null;");
+    const result = lowerComponentMove(live, "components/hero.tsx", "components/hero.ts");
+    expect(result.kind).toBe("rejected");
+  });
+});
+describe("lowerComponentDelete", () => {
+  test("removes only the target codeComponent node, leaving other definitions", () => {
+    const live = docWithTwoComponentsAndInstance();
+    const result = lowerComponentDelete(live, "components/promo.tsx");
+    expect(result.kind).toBe("commands");
+    if (result.kind !== "commands") return;
+
+    const applied = applyBatch(live, result.commands) as TreeValue;
+    const definitions = readComponentDefinitions(decode(applied));
+    expect(definitions.map((d) => d.path)).toEqual(["components/hero.tsx"]);
+  });
+
+  test("does NOT cascade-delete component instance nodes referencing the deleted component", () => {
+    const live = docWithTwoComponentsAndInstance();
+    const result = lowerComponentDelete(live, "components/hero.tsx");
+    if (result.kind !== "commands") throw new Error("expected commands");
+
+    const applied = applyBatch(live, result.commands) as TreeValue;
+    // The `component` INSTANCE node under the screen survives (degrades to a
+    // placeholder in the designer) — matching the browser's removeCodeComponent.
+    const instanceSurvives = applied.nodes.some(
+      (node) =>
+        node.value.fields.type?.kind === "string" && node.value.fields.type.value === "component",
+    );
+    expect(instanceSurvives).toBe(true);
+    // Only the definition is gone.
+    expect(readComponentDefinitions(decode(applied)).map((d) => d.path)).toEqual([
+      "components/promo.tsx",
+    ]);
+  });
+
+  test("rejects an unknown path", () => {
+    const live = docWithComponent("export const Hero = () => null;");
+    const result = lowerComponentDelete(live, "components/ghost.tsx");
+    expect(result.kind).toBe("rejected");
+  });
+});
+
+describe("validateComponentFileName", () => {
+  test("accepts a well-formed .tsx basename", () => {
+    expect(validateComponentFileName("hero.tsx")).toBeUndefined();
+    expect(validateComponentFileName("pricing-option.tsx")).toBeUndefined();
+    expect(validateComponentFileName("pricing.card.tsx")).toBeUndefined();
+  });
+
+  test("rejects a missing/wrong extension", () => {
+    expect(validateComponentFileName("hero")).toContain(".tsx");
+    expect(validateComponentFileName("hero.ts")).toContain(".tsx");
+  });
+
+  test("rejects an empty base name", () => {
+    expect(validateComponentFileName(".tsx")).toContain("base name");
+  });
+
+  test("rejects path separators and traversal", () => {
+    expect(validateComponentFileName("sub/hero.tsx")).toContain("path separator");
+    expect(validateComponentFileName("sub\\hero.tsx")).toContain("path separator");
+    expect(validateComponentFileName("..tsx")).toContain("..");
+  });
+
+  test("rejects unsupported characters", () => {
+    expect(validateComponentFileName("hero widget.tsx")).toContain("unsupported");
+    expect(validateComponentFileName("héro.tsx")).toContain("unsupported");
+  });
+});
+
+describe("uniqueComponentFileName", () => {
+  test("returns the base name when there is no collision", () => {
+    expect(uniqueComponentFileName("hero.tsx", ["promo.tsx"])).toBe("hero.tsx");
+  });
+
+  test("appends -2, -3 before the extension on collision", () => {
+    expect(uniqueComponentFileName("hero.tsx", ["hero.tsx"])).toBe("hero-2.tsx");
+    expect(uniqueComponentFileName("hero.tsx", ["hero.tsx", "hero-2.tsx"])).toBe("hero-3.tsx");
+  });
+
+  test("uniqueness is case-insensitive", () => {
+    expect(uniqueComponentFileName("Hero.tsx", ["hero.tsx"])).toBe("Hero-2.tsx");
+  });
+
+  test("treats an extensionless base as a stem", () => {
+    expect(uniqueComponentFileName("hero", [])).toBe("hero.tsx");
+    expect(uniqueComponentFileName("hero", ["hero.tsx"])).toBe("hero-2.tsx");
+  });
+});
diff --git a/packages/paywall-workspace/src/write.ts b/packages/paywall-workspace/src/write.ts
new file mode 100644
index 000000000..32f5204d9
--- /dev/null
+++ b/packages/paywall-workspace/src/write.ts
@@ -0,0 +1,273 @@
+import {
+  stringValue,
+  treeValue,
+  type Command,
+  type ObjectValue,
+  type TreeNode,
+  type TreeValue,
+  type Value,
+} from "@voidhash/mimic-core";
+import { reconcile } from "@voidhash/mimic-schema";
+
+import { fileNameFromDocRelative } from "./paths.ts";
+
+/**
+ * A single write diagnostic (workspace-level, before any compile phase). A
+ * rejection carries error-level diagnostics; an accepted write may carry
+ * info-level ones (e.g. a duplicate inline id that was silently re-minted, §5
+ * edge rule 1). `severity` defaults to `error` when absent (rejections).
+ */
+export interface WriteDiagnostic {
+  readonly message: string;
+  readonly severity?: "error" | "info";
+}
+
+/**
+ * Result of lowering a file write: either the minimal CRDT command batch to
+ * apply to the document (optionally with info-level `diagnostics` that ride
+ * along — e.g. a duplicate inline id that was re-minted), or a rejection
+ * carrying error diagnostics.
+ */
+export type ApplyFileWriteResult =
+  | {
+      readonly kind: "commands";
+      readonly commands: Command[];
+      readonly diagnostics?: WriteDiagnostic[];
+    }
+  | { readonly kind: "rejected"; readonly diagnostics: WriteDiagnostic[] };
+
+const rejected = (message: string): ApplyFileWriteResult => ({
+  kind: "rejected",
+  diagnostics: [{ message }],
+});
+
+/**
+ * The character set a component file basename may use: an identifier optionally
+ * with dashes/dots (e.g. `pricing-option.tsx`, `pricing.card.tsx`). Rules out
+ * whitespace and shell/path metacharacters that would break addressing.
+ */
+const COMPONENT_FILENAME_CHARSET = /^[A-Za-z0-9._-]+$/;
+
+/**
+ * Validate a component file basename (`<basename>.tsx`) — the identity segment of
+ * a component path. Returns an error message when invalid, or `undefined` when
+ * acceptable.
+ *
+ * Rules: non-empty basename before the extension, must end `.tsx`, no path
+ * separators (`/` or `\`) or `..` traversal, and a sensible charset
+ * (alphanumerics, `-`, `_`, `.`). Enforced at the write boundary since the mimic
+ * `path` schema field is a permissive string.
+ */
+export function validateComponentFileName(fileName: string): string | undefined {
+  if (fileName.includes("/") || fileName.includes("\\")) {
+    return `Component file name "${fileName}" must not contain a path separator.`;
+  }
+  if (fileName.includes("..")) {
+    return `Component file name "${fileName}" must not contain "..".`;
+  }
+  if (!fileName.endsWith(".tsx")) {
+    return `Component file name "${fileName}" must end with ".tsx".`;
+  }
+  if (fileName.length <= ".tsx".length) {
+    return `Component file name "${fileName}" is missing a base name before ".tsx".`;
+  }
+  if (!COMPONENT_FILENAME_CHARSET.test(fileName)) {
+    return `Component file name "${fileName}" contains unsupported characters (use letters, digits, "-", "_", ".").`;
+  }
+  return undefined;
+}
+
+/**
+ * Derive a component file basename unique among `existingFileNames`, matching the
+ * browser's `uniqueCodeComponentSlug` suffixing but keyed on the file name:
+ * uniqueness is case-INSENSITIVE (the workspace never allows two component files
+ * whose names differ only in case), and a collision appends `-2`, `-3`, … BEFORE
+ * the `.tsx` extension until unused. Pure so a server-side component create (a
+ * `write_file` to a new `components/<name>.tsx` path) mints the same file name
+ * the browser create would.
+ *
+ * `base` is a full `<basename>.tsx` file name; a `base` without a `.tsx`
+ * extension is treated as an extensionless basename and suffixed as
+ * `<basename>-2.tsx`.
+ */
+export function uniqueComponentFileName(base: string, existingFileNames: Iterable<string>): string {
+  const existing = new Set<string>();
+  for (const name of existingFileNames) {
+    existing.add(name.toLowerCase());
+  }
+  const { stem, ext } = splitFileName(base);
+  const candidate = `${stem}${ext}`;
+  if (!existing.has(candidate.toLowerCase())) {
+    return candidate;
+  }
+  let index = 2;
+  while (existing.has(`${stem}-${index}${ext}`.toLowerCase())) {
+    index += 1;
+  }
+  return `${stem}-${index}${ext}`;
+}
+
+/** Split a file name into its `stem` and `.tsx` `ext` (`ext` empty when absent). */
+function splitFileName(fileName: string): { readonly stem: string; readonly ext: string } {
+  return fileName.endsWith(".tsx")
+    ? { stem: fileName.slice(0, -".tsx".length), ext: ".tsx" }
+    : { stem: fileName, ext: ".tsx" };
+}
+
+/**
+ * Lower a component MOVE (a rename in the file sense) to the minimal command
+ * batch: rewrite the target `codeComponent` node's `path` AND re-point every
+ * local `component` instance node whose `componentPath` matches the old path, so
+ * no instance is orphaned. `fromPath`/`toPath` are canonical document-relative
+ * paths (`components/<basename>.tsx`).
+ *
+ * A move is the new identity of a component (component identity is the path), so
+ * unlike the old display-name rename it changes both the definition's path and
+ * every reference to it — in ONE reconcile batch. A move whose `toPath` already
+ * names another component is rejected (a path collision would merge two
+ * components' identities). A move to the current path yields a zero-command
+ * no-op via `reconcile`.
+ */
+export function lowerComponentMove(
+  liveTree: TreeValue,
+  fromPath: string,
+  toPath: string,
+): ApplyFileWriteResult {
+  const validation = validateComponentFileName(fileNameFromDocRelative(toPath));
+  if (validation !== undefined) {
+    return rejected(`Cannot move component to "${toPath}": ${validation}`);
+  }
+  if (fromPath !== toPath && liveTree.nodes.some((node) => codeComponentPath(node) === toPath)) {
+    return rejected(`Cannot move component to "${toPath}": a component already exists there.`);
+  }
+  const target = moveComponent(liveTree, fromPath, toPath);
+  if (target === undefined) {
+    return rejected(`No component at "${fromPath}" to move.`);
+  }
+  return { kind: "commands", commands: reconcile(liveTree, target) };
+}
+
+/**
+ * Pure tree→tree transform for a move: return the target tree with the
+ * `codeComponent` for `fromPath` repathed to `toPath` and every local instance
+ * node referencing `fromPath` re-pointed to `toPath` — or `undefined` when no
+ * such definition exists. Used by {@link lowerComponentMove}. Does NOT guard
+ * against a `toPath` collision (callers do).
+ */
+function moveComponent(
+  liveTree: TreeValue,
+  fromPath: string,
+  toPath: string,
+): TreeValue | undefined {
+  const node = liveTree.nodes.find((candidate) => codeComponentPath(candidate) === fromPath);
+  if (node === undefined) {
+    return undefined;
+  }
+  if (fromPath === toPath) {
+    return liveTree;
+  }
+  return treeValue(
+    liveTree.nodes.map((candidate) => {
+      if (candidate.id === node.id) {
+        return withComponentPath(candidate, toPath);
+      }
+      // Re-point local instance nodes referencing the moved component so the
+      // reference survives the identity change (no orphaned instances).
+      if (localInstanceComponentPath(candidate) === fromPath) {
+        return withInstanceComponentPath(candidate, toPath);
+      }
+      return candidate;
+    }),
+  );
+}
+
+/**
+ * Lower a component DELETE to the minimal command batch: remove the target
+ * `codeComponent` node from the library.
+ *
+ * This mirrors the browser's `removeCodeComponent` EXACTLY: it removes ONLY the
+ * `codeComponent` definition node and does NOT cascade-delete `component`
+ * instance nodes that reference it. Canvas instances referencing the deleted
+ * definition degrade to placeholders in the designer (existing behavior —
+ * `use-component-node-warnings` surfaces a `local-component-missing` warning),
+ * so leaving them in place is the correct match. `reconcile` emits the single
+ * `tree.remove` for the omitted node (leaf, no children — `codeComponent` nodes
+ * hold no render subtree). `path` is the component's canonical
+ * document-relative identity.
+ */
+export function lowerComponentDelete(
+  liveTree: TreeValue,
+  path: string,
+): ApplyFileWriteResult {
+  const target = deleteComponent(liveTree, path);
+  if (target === undefined) {
+    return rejected(`No component at "${path}" to delete.`);
+  }
+  return { kind: "commands", commands: reconcile(liveTree, target) };
+}
+
+/**
+ * Pure tree→tree transform for a delete: return the target tree with the
+ * `codeComponent` for `path` removed (ONLY the definition node — never cascading
+ * into `component` instances), or `undefined` when no such component exists.
+ * Used by {@link lowerComponentDelete}.
+ */
+function deleteComponent(liveTree: TreeValue, path: string): TreeValue | undefined {
+  const node = liveTree.nodes.find((candidate) => codeComponentPath(candidate) === path);
+  if (node === undefined) {
+    return undefined;
+  }
+  return treeValue(liveTree.nodes.filter((candidate) => candidate.id !== node.id));
+}
+
+/**
+ * The canonical `path` of a `codeComponent` tree node, or `undefined` for other
+ * nodes. This is the component's identity.
+ */
+function codeComponentPath(node: TreeNode): string | undefined {
+  return stringField(node.value, "type") === "codeComponent"
+    ? stringField(node.value, "path")
+    : undefined;
+}
+
+/**
+ * The `componentPath` a LOCAL `component` instance node references, or
+ * `undefined` for non-component / catalog-instance nodes. Used to re-point
+ * instances on a component move.
+ */
+function localInstanceComponentPath(node: TreeNode): string | undefined {
+  if (stringField(node.value, "type") !== "component") {
+    return undefined;
+  }
+  return stringField(node.value, "componentSource") === "local"
+    ? stringField(node.value, "componentPath")
+    : undefined;
+}
+
+/** Rewrite a `codeComponent` node's `path` field to `path`, preserving all other fields. */
+function withComponentPath(node: TreeNode, path: string): TreeNode {
+  return {
+    ...node,
+    value: {
+      kind: "object",
+      fields: { ...node.value.fields, path: stringValue(path) },
+    },
+  };
+}
+
+/** Rewrite a `component` instance node's `componentPath` field, preserving all others. */
+function withInstanceComponentPath(node: TreeNode, componentPath: string): TreeNode {
+  return {
+    ...node,
+    value: {
+      kind: "object",
+      fields: { ...node.value.fields, componentPath: stringValue(componentPath) },
+    },
+  };
+}
+
+/** Reads a string field off an object value, or `undefined` when absent/non-string. */
+function stringField(object: ObjectValue, key: string): string | undefined {
+  const field: Value | undefined = object.fields[key];
+  return field && field.kind === "string" ? field.value : undefined;
+}
diff --git a/packages/paywall-workspace/tsconfig.json b/packages/paywall-workspace/tsconfig.json
new file mode 100644
index 000000000..3a6c52735
--- /dev/null
+++ b/packages/paywall-workspace/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "compilerOptions": {
+    "types": ["node"]
+  },
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/paywall-workspace/vitest.mts b/packages/paywall-workspace/vitest.mts
new file mode 100644
index 000000000..926ffb62d
--- /dev/null
+++ b/packages/paywall-workspace/vitest.mts
@@ -0,0 +1,11 @@
+import tsconfigPaths from "vite-tsconfig-paths";
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  plugins: [tsconfigPaths()],
+  test: {
+    exclude: ["./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ab4d86578..446b11fa4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -27,9 +27,15 @@ catalogs:
     better-auth:
       specifier: ^1.6.23
       version: 1.6.23
+    vite:
+      specifier: ^7.3.5
+      version: 7.3.5
     vite-tsconfig-paths:
       specifier: ^5.1.4
       version: 5.1.4
+    zod:
+      specifier: ^4.1.13
+      version: 4.3.6
 
 overrides:
   react: 19.1.0
@@ -500,6 +506,37 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/ai-shared:
+    dependencies:
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../mimic-core
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../mimic-schema
+      '@voidhash/paywall-builtins':
+        specifier: workspace:*
+        version: link:../paywall-builtins
+      zod:
+        specifier: 'catalog:'
+        version: 4.3.6
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-tsconfig-paths:
+        specifier: ^5.1.4
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/api-contracts:
     dependencies:
       effect:
@@ -694,6 +731,37 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/paywall-build:
+    dependencies:
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+    devDependencies:
+      '@types/node':
+        specifier: ^20
+        version: 20.19.43
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      esbuild:
+        specifier: ^0.25.10
+        version: 0.25.12
+      tsx:
+        specifier: ^4.19.2
+        version: 4.21.0
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-tsconfig-paths:
+        specifier: ^5.1.4
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/paywall-builtins:
     dependencies:
       '@voidhash/mimic-schema':
@@ -722,6 +790,105 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/paywall-renderer-preact:
+    dependencies:
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../mimic-schema
+      '@voidhash/paywall-renderer-web-core':
+        specifier: workspace:*
+        version: link:../paywall-renderer-web-core
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+      preact:
+        specifier: 10.29.2
+        version: 10.29.2
+      preact-render-to-string:
+        specifier: 6.7.0
+        version: 6.7.0(preact@10.29.2)
+    devDependencies:
+      '@voidhash/paywall-builtins':
+        specifier: workspace:*
+        version: link:../paywall-builtins
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      esbuild:
+        specifier: 0.25.12
+        version: 0.25.12
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      vite:
+        specifier: 'catalog:'
+        version: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  packages/paywall-renderer-web-core:
+    dependencies:
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../mimic-schema
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+      csstype:
+        specifier: ^3.1.3
+        version: 3.2.3
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  packages/paywall-workspace:
+    dependencies:
+      '@voidhash/ai-shared':
+        specifier: workspace:*
+        version: link:../ai-shared
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../mimic-core
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../mimic-schema
+      '@voidhash/paywall-renderer-web-core':
+        specifier: workspace:*
+        version: link:../paywall-renderer-web-core
+    devDependencies:
+      '@types/node':
+        specifier: ^20
+        version: 20.19.43
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-tsconfig-paths:
+        specifier: ^5.1.4
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   packages/platform:
     devDependencies:
       '@voidhash/tsconfig':
@@ -8653,6 +8820,14 @@ packages:
     resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==}
     engines: {node: ^10 || ^12 || >=14}
 
+  preact-render-to-string@6.7.0:
+    resolution: {integrity: sha512-Z4WR8fmLMRpdYqJ9i7vrlXSsSrxVJydwrkEXHapexfARbWfGb7vGcnvNQnIzN0cXciMVOlz/XLoiMCi9gUsy9Q==}
+    peerDependencies:
+      preact: '>=10 || >= 11.0.0-0'
+
+  preact@10.29.2:
+    resolution: {integrity: sha512-7tNmwg/7mzzAoB/8kSg6Hl37JraAZw3Z3A0JSY7VXlZwo82Xn0G7wKbNNs2qoF4ZEEsQGTwDAroNdqKs1ofJxQ==}
+
   prelude-ls@1.2.1:
     resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==}
     engines: {node: '>= 0.8.0'}
@@ -14938,6 +15113,23 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 20.19.43
+      esbuild: 0.25.12
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 6.0.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
   '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
@@ -14955,6 +15147,23 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 25.3.3
+      esbuild: 0.25.12
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 6.0.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
   '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
@@ -14989,6 +15198,23 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 25.3.3
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.6.1
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 6.0.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
   '@voidzero-dev/vite-plus-darwin-arm64@0.1.23':
     optional: true
 
@@ -15007,6 +15233,48 @@ snapshots:
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
     optional: true
 
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 20.19.43
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
   '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
@@ -15049,11 +15317,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15091,11 +15359,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15133,35 +15401,119 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.23':
-    optional: true
-
-  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.23':
-    optional: true
-
-  '@xmldom/xmldom@0.8.13': {}
-
-  abab@2.0.6: {}
-
-  abort-controller@3.0.0:
-    dependencies:
-      event-target-shim: 5.0.1
-
-  accepts@1.3.8:
-    dependencies:
-      mime-types: 2.1.35
-      negotiator: 0.6.3
-
-  acorn-globals@7.0.1:
-    dependencies:
-      acorn: 8.16.0
-      acorn-walk: 8.3.4
-
-  acorn-jsx@5.3.2(acorn@8.15.0):
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
-      acorn: 8.15.0
-
-  acorn-walk@8.3.4:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 25.3.3
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 25.3.3
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.23':
+    optional: true
+
+  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.23':
+    optional: true
+
+  '@xmldom/xmldom@0.8.13': {}
+
+  abab@2.0.6: {}
+
+  abort-controller@3.0.0:
+    dependencies:
+      event-target-shim: 5.0.1
+
+  accepts@1.3.8:
+    dependencies:
+      mime-types: 2.1.35
+      negotiator: 0.6.3
+
+  acorn-globals@7.0.1:
+    dependencies:
+      acorn: 8.16.0
+      acorn-walk: 8.3.4
+
+  acorn-jsx@5.3.2(acorn@8.15.0):
+    dependencies:
+      acorn: 8.15.0
+
+  acorn-walk@8.3.4:
     dependencies:
       acorn: 8.16.0
 
@@ -18969,6 +19321,31 @@ snapshots:
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
@@ -18994,6 +19371,31 @@ snapshots:
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
       vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
@@ -19044,6 +19446,31 @@ snapshots:
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
       vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxlint-tsgolint@0.23.0:
     optionalDependencies:
       '@oxlint-tsgolint/darwin-arm64': 0.23.0
@@ -19053,6 +19480,30 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
@@ -19077,6 +19528,30 @@ snapshots:
       oxlint-tsgolint: 0.23.0
       vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
@@ -19125,6 +19600,30 @@ snapshots:
       oxlint-tsgolint: 0.23.0
       vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   p-limit@2.3.0:
     dependencies:
       p-try: 2.2.0
@@ -19254,6 +19753,12 @@ snapshots:
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
+  preact-render-to-string@6.7.0(preact@10.29.2):
+    dependencies:
+      preact: 10.29.2
+
+  preact@10.29.2: {}
+
   prelude-ls@1.2.1: {}
 
   prettier-linter-helpers@1.0.0:
@@ -20882,6 +21387,56 @@ snapshots:
       - tsx
       - yaml
 
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
   vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
@@ -20932,6 +21487,56 @@ snapshots:
       - vite
       - yaml
 
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
   vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
@@ -21032,6 +21637,56 @@ snapshots:
       - vite
       - yaml
 
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
   vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
@@ -21065,6 +21720,17 @@ snapshots:
       - supports-color
       - typescript
 
+  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+    dependencies:
+      debug: 4.4.3
+      globrex: 0.1.2
+      tsconfck: 3.1.6(typescript@6.0.3)
+    optionalDependencies:
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - supports-color
+      - typescript
+
   vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       esbuild: 0.28.1

From a34f76c15de46ad0b703159611f8c634610090ce Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 21:31:06 +0200
Subject: [PATCH 055/129] feat(mimic): publish standalone applications

---
 apps/mimic-admin/LICENSE.md                   |  661 ++++
 apps/mimic-admin/README.md                    |    3 +
 apps/mimic-admin/package.json                 |   65 +
 .../src/components/app-sidebar.tsx            |  127 +
 .../src/components/auth-context.tsx           |   34 +
 .../src/components/database-context.tsx       |   47 +
 .../src/components/sdk-context.tsx            |   47 +
 .../src/components/ui/alert-dialog.tsx        |  111 +
 apps/mimic-admin/src/components/ui/badge.tsx  |   36 +
 apps/mimic-admin/src/components/ui/button.tsx |   59 +
 apps/mimic-admin/src/components/ui/card.tsx   |   66 +
 apps/mimic-admin/src/components/ui/dialog.tsx |  102 +
 .../src/components/ui/dropdown-menu.tsx       |  197 ++
 apps/mimic-admin/src/components/ui/input.tsx  |   18 +
 apps/mimic-admin/src/components/ui/label.tsx  |   24 +
 .../src/components/ui/scroll-area.tsx         |   48 +
 apps/mimic-admin/src/components/ui/select.tsx |  158 +
 .../src/components/ui/separator.tsx           |   26 +
 apps/mimic-admin/src/components/ui/sonner.tsx |   20 +
 apps/mimic-admin/src/components/ui/table.tsx  |  119 +
 apps/mimic-admin/src/components/ui/tabs.tsx   |   53 +
 .../src/components/ui/textarea.tsx            |   17 +
 .../mimic-admin/src/components/ui/tooltip.tsx |   27 +
 apps/mimic-admin/src/env.d.ts                 |    1 +
 apps/mimic-admin/src/index.html               |   12 +
 apps/mimic-admin/src/lib/auth.ts              |   29 +
 apps/mimic-admin/src/lib/queries.ts           |  239 ++
 apps/mimic-admin/src/lib/utils.ts             |    6 +
 apps/mimic-admin/src/main.tsx                 |   13 +
 apps/mimic-admin/src/routeTree.gen.ts         |  285 ++
 apps/mimic-admin/src/router.tsx               |   29 +
 apps/mimic-admin/src/routes/__root.tsx        |   22 +
 .../$collectionId/documents/$documentId.tsx   |  294 ++
 .../collections/$collectionId/index.tsx       |  259 ++
 .../collections/$collectionId/schema.tsx      |   92 +
 .../src/routes/_app/_layout/databases.tsx     |  183 ++
 .../src/routes/_app/_layout/index.tsx         |    7 +
 .../src/routes/_app/_layout/migrations.tsx    |  905 ++++++
 .../src/routes/_app/_layout/observability.tsx |   30 +
 .../src/routes/_app/_layout/route.tsx         |   21 +
 .../src/routes/_app/_layout/users.tsx         |  320 ++
 apps/mimic-admin/src/routes/_app/route.tsx    |   27 +
 apps/mimic-admin/src/routes/login.tsx         |   96 +
 apps/mimic-admin/src/styles/globals.css       |  165 +
 apps/mimic-admin/tsconfig.json                |   26 +
 apps/mimic-admin/vite.config.ts               |   13 +
 apps/mimic-cli/LICENSE.md                     |  661 ++++
 apps/mimic-cli/README.md                      |    5 +
 apps/mimic-cli/build.ts                       |   78 +
 apps/mimic-cli/package.json                   |   62 +
 apps/mimic-cli/src/cli/commands/generate.ts   |   58 +
 apps/mimic-cli/src/cli/commands/init.ts       |   47 +
 apps/mimic-cli/src/cli/commands/migrate.ts    |  391 +++
 apps/mimic-cli/src/cli/index.ts               |   48 +
 apps/mimic-cli/src/index.ts                   |  133 +
 apps/mimic-cli/src/services/ConfigLoader.ts   |   65 +
 .../src/services/MigrationBundler.ts          |  162 +
 .../mimic-cli/src/services/MigrationLoader.ts |  178 ++
 apps/mimic-cli/src/utils/error-formatter.ts   |   23 +
 apps/mimic-cli/src/utils/js-loading/_es5.ts   |    1 +
 .../src/utils/js-loading/config-loader.ts     |   71 +
 apps/mimic-cli/src/utils/package-root.ts      |    6 +
 apps/mimic-cli/tests/config-loader.test.ts    |   62 +
 apps/mimic-cli/tests/generate.test.ts         |   47 +
 apps/mimic-cli/tests/migration-loader.test.ts |  128 +
 apps/mimic-cli/tsconfig.json                  |   24 +
 apps/mimic-cli/vitest.mts                     |    7 +
 examples/mimic-example/.env.example           |    7 +
 examples/mimic-example/LICENSE.md             |   21 +
 examples/mimic-example/README.md              |    3 +
 examples/mimic-example/index.html             |   12 +
 examples/mimic-example/package.json           |   54 +
 examples/mimic-example/postcss.config.mjs     |    5 +
 .../src/components/kanban/AddCardForm.tsx     |  110 +
 .../src/components/kanban/AddColumnForm.tsx   |  107 +
 .../src/components/kanban/Card.tsx            |   70 +
 .../src/components/kanban/Column.tsx          |  228 ++
 .../src/components/kanban/EditCardModal.tsx   |  186 ++
 .../src/components/kanban/KanbanBoard.tsx     |  326 ++
 .../src/components/kanban/index.ts            |    6 +
 .../src/context/KanbanContext.tsx             |  104 +
 examples/mimic-example/src/env.d.ts           |    3 +
 examples/mimic-example/src/lib/commands.ts    |  333 +++
 examples/mimic-example/src/lib/document.ts    |   39 +
 .../mimic-example/src/lib/serverConfig.ts     |    1 +
 examples/mimic-example/src/lib/store.ts       |   28 +
 examples/mimic-example/src/main.tsx           |   26 +
 examples/mimic-example/src/posts.tsx          |   33 +
 examples/mimic-example/src/routeTree.gen.ts   |   77 +
 examples/mimic-example/src/routes/__root.tsx  |   38 +
 examples/mimic-example/src/routes/about.tsx   |   14 +
 examples/mimic-example/src/routes/index.tsx   |   46 +
 examples/mimic-example/src/server/app.ts      |  138 +
 examples/mimic-example/src/server/index.ts    |   18 +
 examples/mimic-example/src/shared/index.ts    |   38 +
 examples/mimic-example/src/styles.css         |   21 +
 examples/mimic-example/src/types/kanban.ts    |   45 +
 examples/mimic-example/tsconfig.json          |   17 +
 examples/mimic-example/tsconfig.server.json   |    9 +
 examples/mimic-example/vite.config.js         |    8 +
 pnpm-lock.yaml                                | 2655 ++++++++++++-----
 101 files changed, 11428 insertions(+), 794 deletions(-)
 create mode 100644 apps/mimic-admin/LICENSE.md
 create mode 100644 apps/mimic-admin/README.md
 create mode 100644 apps/mimic-admin/package.json
 create mode 100644 apps/mimic-admin/src/components/app-sidebar.tsx
 create mode 100644 apps/mimic-admin/src/components/auth-context.tsx
 create mode 100644 apps/mimic-admin/src/components/database-context.tsx
 create mode 100644 apps/mimic-admin/src/components/sdk-context.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/alert-dialog.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/badge.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/button.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/card.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/dialog.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/dropdown-menu.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/input.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/label.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/scroll-area.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/select.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/separator.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/sonner.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/table.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/tabs.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/textarea.tsx
 create mode 100644 apps/mimic-admin/src/components/ui/tooltip.tsx
 create mode 100644 apps/mimic-admin/src/env.d.ts
 create mode 100644 apps/mimic-admin/src/index.html
 create mode 100644 apps/mimic-admin/src/lib/auth.ts
 create mode 100644 apps/mimic-admin/src/lib/queries.ts
 create mode 100644 apps/mimic-admin/src/lib/utils.ts
 create mode 100644 apps/mimic-admin/src/main.tsx
 create mode 100644 apps/mimic-admin/src/routeTree.gen.ts
 create mode 100644 apps/mimic-admin/src/router.tsx
 create mode 100644 apps/mimic-admin/src/routes/__root.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/documents/$documentId.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/index.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/databases.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/index.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/migrations.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/observability.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/route.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/_layout/users.tsx
 create mode 100644 apps/mimic-admin/src/routes/_app/route.tsx
 create mode 100644 apps/mimic-admin/src/routes/login.tsx
 create mode 100644 apps/mimic-admin/src/styles/globals.css
 create mode 100644 apps/mimic-admin/tsconfig.json
 create mode 100644 apps/mimic-admin/vite.config.ts
 create mode 100644 apps/mimic-cli/LICENSE.md
 create mode 100644 apps/mimic-cli/README.md
 create mode 100644 apps/mimic-cli/build.ts
 create mode 100644 apps/mimic-cli/package.json
 create mode 100644 apps/mimic-cli/src/cli/commands/generate.ts
 create mode 100644 apps/mimic-cli/src/cli/commands/init.ts
 create mode 100644 apps/mimic-cli/src/cli/commands/migrate.ts
 create mode 100644 apps/mimic-cli/src/cli/index.ts
 create mode 100644 apps/mimic-cli/src/index.ts
 create mode 100644 apps/mimic-cli/src/services/ConfigLoader.ts
 create mode 100644 apps/mimic-cli/src/services/MigrationBundler.ts
 create mode 100644 apps/mimic-cli/src/services/MigrationLoader.ts
 create mode 100644 apps/mimic-cli/src/utils/error-formatter.ts
 create mode 100644 apps/mimic-cli/src/utils/js-loading/_es5.ts
 create mode 100644 apps/mimic-cli/src/utils/js-loading/config-loader.ts
 create mode 100644 apps/mimic-cli/src/utils/package-root.ts
 create mode 100644 apps/mimic-cli/tests/config-loader.test.ts
 create mode 100644 apps/mimic-cli/tests/generate.test.ts
 create mode 100644 apps/mimic-cli/tests/migration-loader.test.ts
 create mode 100644 apps/mimic-cli/tsconfig.json
 create mode 100644 apps/mimic-cli/vitest.mts
 create mode 100644 examples/mimic-example/.env.example
 create mode 100644 examples/mimic-example/LICENSE.md
 create mode 100644 examples/mimic-example/README.md
 create mode 100644 examples/mimic-example/index.html
 create mode 100644 examples/mimic-example/package.json
 create mode 100644 examples/mimic-example/postcss.config.mjs
 create mode 100644 examples/mimic-example/src/components/kanban/AddCardForm.tsx
 create mode 100644 examples/mimic-example/src/components/kanban/AddColumnForm.tsx
 create mode 100644 examples/mimic-example/src/components/kanban/Card.tsx
 create mode 100644 examples/mimic-example/src/components/kanban/Column.tsx
 create mode 100644 examples/mimic-example/src/components/kanban/EditCardModal.tsx
 create mode 100644 examples/mimic-example/src/components/kanban/KanbanBoard.tsx
 create mode 100644 examples/mimic-example/src/components/kanban/index.ts
 create mode 100644 examples/mimic-example/src/context/KanbanContext.tsx
 create mode 100644 examples/mimic-example/src/env.d.ts
 create mode 100644 examples/mimic-example/src/lib/commands.ts
 create mode 100644 examples/mimic-example/src/lib/document.ts
 create mode 100644 examples/mimic-example/src/lib/serverConfig.ts
 create mode 100644 examples/mimic-example/src/lib/store.ts
 create mode 100644 examples/mimic-example/src/main.tsx
 create mode 100644 examples/mimic-example/src/posts.tsx
 create mode 100644 examples/mimic-example/src/routeTree.gen.ts
 create mode 100644 examples/mimic-example/src/routes/__root.tsx
 create mode 100644 examples/mimic-example/src/routes/about.tsx
 create mode 100644 examples/mimic-example/src/routes/index.tsx
 create mode 100644 examples/mimic-example/src/server/app.ts
 create mode 100644 examples/mimic-example/src/server/index.ts
 create mode 100644 examples/mimic-example/src/shared/index.ts
 create mode 100644 examples/mimic-example/src/styles.css
 create mode 100644 examples/mimic-example/src/types/kanban.ts
 create mode 100644 examples/mimic-example/tsconfig.json
 create mode 100644 examples/mimic-example/tsconfig.server.json
 create mode 100644 examples/mimic-example/vite.config.js

diff --git a/apps/mimic-admin/LICENSE.md b/apps/mimic-admin/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/apps/mimic-admin/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/apps/mimic-admin/README.md b/apps/mimic-admin/README.md
new file mode 100644
index 000000000..047fa76a2
--- /dev/null
+++ b/apps/mimic-admin/README.md
@@ -0,0 +1,3 @@
+# @voidhash/mimic-admin
+
+Browser-based operator console for authenticating to a Mimic host and inspecting its databases, collections, schemas, and documents.
diff --git a/apps/mimic-admin/package.json b/apps/mimic-admin/package.json
new file mode 100644
index 000000000..db3d20691
--- /dev/null
+++ b/apps/mimic-admin/package.json
@@ -0,0 +1,65 @@
+{
+  "name": "@voidhash/mimic-admin",
+  "version": "1.0.0-beta.19",
+  "private": true,
+  "description": "Operator console for inspecting and administering Mimic databases.",
+  "keywords": [
+    "admin",
+    "database",
+    "mimic",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "apps/mimic-admin"
+  },
+  "type": "module",
+  "scripts": {
+    "dev": "vp dev --config vite.config.ts",
+    "build": "vp build --config vite.config.ts",
+    "preview": "vp preview --config vite.config.ts",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  },
+  "dependencies": {
+    "@radix-ui/react-alert-dialog": "^1.1.14",
+    "@radix-ui/react-dialog": "^1.1.14",
+    "@radix-ui/react-dropdown-menu": "^2.1.15",
+    "@radix-ui/react-label": "^2.1.7",
+    "@radix-ui/react-scroll-area": "^1.2.8",
+    "@radix-ui/react-select": "^2.2.5",
+    "@radix-ui/react-separator": "^1.1.7",
+    "@radix-ui/react-slot": "^1.2.3",
+    "@radix-ui/react-tabs": "^1.1.12",
+    "@radix-ui/react-tooltip": "^1.2.7",
+    "@tanstack/react-query": "^5.80.7",
+    "@tanstack/react-query-devtools": "^5.80.7",
+    "@tanstack/react-router": "1.163.3",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-server": "workspace:*",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "lucide-react": "^0.513.0",
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0",
+    "sonner": "^2.0.3",
+    "tailwind-merge": "^3.3.0"
+  },
+  "devDependencies": {
+    "@tailwindcss/vite": "^4.1.8",
+    "@types/react": "19.1.17",
+    "@types/react-dom": "19.1.9",
+    "@vitejs/plugin-react": "^4.5.2",
+    "tailwindcss": "^4.1.8",
+    "tw-animate-css": "^1.3.4",
+    "typescript": "6.0.3",
+    "vite": "catalog:",
+    "vite-plus": "0.1.23"
+  }
+}
diff --git a/apps/mimic-admin/src/components/app-sidebar.tsx b/apps/mimic-admin/src/components/app-sidebar.tsx
new file mode 100644
index 000000000..8e3e1d318
--- /dev/null
+++ b/apps/mimic-admin/src/components/app-sidebar.tsx
@@ -0,0 +1,127 @@
+import { useQuery } from "@tanstack/react-query";
+import { Link, useMatchRoute } from "@tanstack/react-router";
+import { Database, FileText, Activity, Workflow, Users, LogOut } from "lucide-react";
+
+import { useAuth } from "@/components/auth-context";
+import { useDatabase } from "@/components/database-context";
+import { useMimicSdk } from "@/components/sdk-context";
+import { Button } from "@/components/ui/button";
+import { ScrollArea } from "@/components/ui/scroll-area";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+import { Separator } from "@/components/ui/separator";
+import { collectionsQuery, databasesQuery } from "@/lib/queries";
+
+export function AppSidebar() {
+  const { credentials, logout } = useAuth();
+  const sdk = useMimicSdk();
+  const { selectedDatabaseId, setSelectedDatabaseId } = useDatabase();
+  const matchRoute = useMatchRoute();
+
+  const { data: databases } = useQuery(databasesQuery(sdk));
+  const { data: collections } = useQuery(collectionsQuery(sdk, selectedDatabaseId ?? ""));
+
+  const navItems = [
+    { to: "/databases" as const, label: "Databases", icon: Database },
+    { to: "/migrations" as const, label: "Migrations", icon: Workflow },
+    { to: "/users" as const, label: "Users", icon: Users },
+    { to: "/observability" as const, label: "Observability", icon: Activity },
+  ];
+
+  return (
+    <div className="flex h-full w-64 flex-col border-r bg-sidebar text-sidebar-foreground">
+      <div className="flex items-center justify-between p-4">
+        <h1 className="text-lg font-semibold">Mimic Admin</h1>
+        <Button variant="ghost" size="icon" onClick={logout} title="Logout">
+          <LogOut className="h-4 w-4" />
+        </Button>
+      </div>
+
+      <Separator />
+
+      <div className="p-4">
+        <Select
+          value={selectedDatabaseId ?? ""}
+          onValueChange={(v) => setSelectedDatabaseId(v || null)}
+        >
+          <SelectTrigger className="w-full">
+            <SelectValue placeholder="Select database" />
+          </SelectTrigger>
+          <SelectContent>
+            {databases?.map((db) => (
+              <SelectItem key={db.id} value={db.id}>
+                {db.name}
+              </SelectItem>
+            ))}
+          </SelectContent>
+        </Select>
+      </div>
+
+      <nav className="flex flex-col gap-1 px-2">
+        {navItems.map(({ to, label, icon: Icon }) => {
+          const isActive = !!matchRoute({ to });
+          return (
+            <Link
+              key={to}
+              to={to}
+              className={`flex items-center gap-3 rounded-md px-3 py-2 text-sm font-medium transition-colors hover:bg-sidebar-accent hover:text-sidebar-accent-foreground ${
+                isActive
+                  ? "bg-sidebar-accent text-sidebar-accent-foreground"
+                  : "text-sidebar-foreground/70"
+              }`}
+            >
+              <Icon className="h-4 w-4" />
+              {label}
+            </Link>
+          );
+        })}
+      </nav>
+
+      {selectedDatabaseId && collections && collections.length > 0 && (
+        <>
+          <Separator className="my-2" />
+          <div className="px-4 py-1">
+            <span className="text-xs font-medium uppercase text-muted-foreground">Collections</span>
+          </div>
+          <ScrollArea className="flex-1 px-2">
+            <div className="flex flex-col gap-1">
+              {collections.map((col) => {
+                const isActive = !!matchRoute({
+                  to: "/collections/$collectionId",
+                  params: { collectionId: col.id },
+                });
+                return (
+                  <Link
+                    key={col.id}
+                    to="/collections/$collectionId"
+                    params={{ collectionId: col.id }}
+                    className={`flex items-center gap-3 rounded-md px-3 py-2 text-sm transition-colors hover:bg-sidebar-accent hover:text-sidebar-accent-foreground ${
+                      isActive
+                        ? "bg-sidebar-accent text-sidebar-accent-foreground"
+                        : "text-sidebar-foreground/70"
+                    }`}
+                  >
+                    <FileText className="h-4 w-4" />
+                    {col.name}
+                  </Link>
+                );
+              })}
+            </div>
+          </ScrollArea>
+        </>
+      )}
+
+      <div className="mt-auto border-t p-4">
+        <div className="text-xs text-muted-foreground">
+          <div className="truncate">{credentials.serverUrl}</div>
+          <div className="mt-1 truncate font-medium">{credentials.username}</div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/mimic-admin/src/components/auth-context.tsx b/apps/mimic-admin/src/components/auth-context.tsx
new file mode 100644
index 000000000..c2d837b23
--- /dev/null
+++ b/apps/mimic-admin/src/components/auth-context.tsx
@@ -0,0 +1,34 @@
+import { createContext, useCallback, useContext } from "react";
+import { useNavigate } from "@tanstack/react-router";
+import { type Credentials, clearCredentials, getCredentials } from "@/lib/auth";
+
+interface AuthContextValue {
+  credentials: Credentials;
+  logout: () => void;
+}
+
+const AuthContext = createContext<AuthContextValue | null>(null);
+
+export function AuthProvider({
+  children,
+  credentials,
+}: {
+  children: React.ReactNode;
+  credentials: Credentials;
+}) {
+  const navigate = useNavigate();
+  const logout = useCallback(() => {
+    clearCredentials();
+    navigate({ to: "/login" });
+  }, [navigate]);
+
+  return <AuthContext.Provider value={{ credentials, logout }}>{children}</AuthContext.Provider>;
+}
+
+export function useAuth(): AuthContextValue {
+  const ctx = useContext(AuthContext);
+  if (!ctx) {
+    throw new Error("useAuth must be used within an AuthProvider");
+  }
+  return ctx;
+}
diff --git a/apps/mimic-admin/src/components/database-context.tsx b/apps/mimic-admin/src/components/database-context.tsx
new file mode 100644
index 000000000..7d5ac4672
--- /dev/null
+++ b/apps/mimic-admin/src/components/database-context.tsx
@@ -0,0 +1,47 @@
+import { createContext, useCallback, useContext, useState } from "react";
+
+interface DatabaseContextValue {
+  selectedDatabaseId: string | null;
+  setSelectedDatabaseId: (id: string | null) => void;
+}
+
+const DatabaseContext = createContext<DatabaseContextValue | null>(null);
+
+const STORAGE_KEY = "mimic-admin-selected-database";
+
+export function DatabaseProvider({ children }: { children: React.ReactNode }) {
+  const [selectedDatabaseId, setSelectedDatabaseIdState] = useState<string | null>(() => {
+    try {
+      return localStorage.getItem(STORAGE_KEY);
+    } catch {
+      return null;
+    }
+  });
+
+  const setSelectedDatabaseId = useCallback((id: string | null) => {
+    setSelectedDatabaseIdState(id);
+    try {
+      if (id) {
+        localStorage.setItem(STORAGE_KEY, id);
+      } else {
+        localStorage.removeItem(STORAGE_KEY);
+      }
+    } catch {
+      // ignore storage errors
+    }
+  }, []);
+
+  return (
+    <DatabaseContext.Provider value={{ selectedDatabaseId, setSelectedDatabaseId }}>
+      {children}
+    </DatabaseContext.Provider>
+  );
+}
+
+export function useDatabase(): DatabaseContextValue {
+  const ctx = useContext(DatabaseContext);
+  if (!ctx) {
+    throw new Error("useDatabase must be used within a DatabaseProvider");
+  }
+  return ctx;
+}
diff --git a/apps/mimic-admin/src/components/sdk-context.tsx b/apps/mimic-admin/src/components/sdk-context.tsx
new file mode 100644
index 000000000..26bba88de
--- /dev/null
+++ b/apps/mimic-admin/src/components/sdk-context.tsx
@@ -0,0 +1,47 @@
+import { createContext, useContext, useMemo } from "react";
+import { MimicSDK } from "@voidhash/mimic-server";
+
+import type { Credentials } from "@/lib/auth";
+
+const SdkContext = createContext<MimicSDK | null>(null);
+
+/**
+ * Builds a single `MimicSDK` instance per (serverUrl, username, password)
+ * tuple. The instance lives for the lifetime of the page — we deliberately
+ * do NOT call `sdk.dispose()` from a `useEffect` cleanup. React StrictMode
+ * runs cleanup-then-setup once on mount in dev to surface lifecycle bugs;
+ * disposing the runtime there closes the scope while `useMemo` still holds
+ * the same SDK reference, which would abort any in-flight RPC requests
+ * (visible as HTTP 499 / "All fibers interrupted" on the server).
+ *
+ * The runtime backs an HTTP `RpcClient.Protocol` (fetch-based, no persistent
+ * connections), so there's nothing urgent to clean up — the browser tears
+ * down on navigation/unload anyway.
+ */
+export function MimicSdkProvider({
+  credentials,
+  children,
+}: {
+  credentials: Credentials;
+  children: React.ReactNode;
+}) {
+  const sdk = useMemo(
+    () =>
+      new MimicSDK({
+        url: credentials.serverUrl,
+        username: credentials.username,
+        password: credentials.password,
+      }),
+    [credentials.serverUrl, credentials.username, credentials.password],
+  );
+
+  return <SdkContext.Provider value={sdk}>{children}</SdkContext.Provider>;
+}
+
+export function useMimicSdk(): MimicSDK {
+  const sdk = useContext(SdkContext);
+  if (!sdk) {
+    throw new Error("useMimicSdk must be used within a MimicSdkProvider");
+  }
+  return sdk;
+}
diff --git a/apps/mimic-admin/src/components/ui/alert-dialog.tsx b/apps/mimic-admin/src/components/ui/alert-dialog.tsx
new file mode 100644
index 000000000..ec8159f22
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/alert-dialog.tsx
@@ -0,0 +1,111 @@
+import * as AlertDialogPrimitive from "@radix-ui/react-alert-dialog";
+import type * as React from "react";
+
+import { buttonVariants } from "@/components/ui/button";
+import { cn } from "@/lib/utils";
+
+const AlertDialog = AlertDialogPrimitive.Root;
+const AlertDialogTrigger = AlertDialogPrimitive.Trigger;
+const AlertDialogPortal = AlertDialogPrimitive.Portal;
+
+function AlertDialogOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Overlay>) {
+  return (
+    <AlertDialogPrimitive.Overlay
+      className={cn(
+        "fixed inset-0 z-50 bg-black/80 data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogContent({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Content>) {
+  return (
+    <AlertDialogPortal>
+      <AlertDialogOverlay />
+      <AlertDialogPrimitive.Content
+        className={cn(
+          "fixed left-[50%] top-[50%] z-50 grid w-full max-w-lg translate-x-[-50%] translate-y-[-50%] gap-4 border bg-background p-6 shadow-lg duration-200 data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[state=closed]:slide-out-to-left-1/2 data-[state=closed]:slide-out-to-top-[48%] data-[state=open]:slide-in-from-left-1/2 data-[state=open]:slide-in-from-top-[48%] sm:rounded-lg",
+          className,
+        )}
+        {...props}
+      />
+    </AlertDialogPortal>
+  );
+}
+
+function AlertDialogHeader({ className, ...props }: React.HTMLAttributes<HTMLDivElement>) {
+  return (
+    <div className={cn("flex flex-col space-y-2 text-center sm:text-left", className)} {...props} />
+  );
+}
+
+function AlertDialogFooter({ className, ...props }: React.HTMLAttributes<HTMLDivElement>) {
+  return (
+    <div
+      className={cn("flex flex-col-reverse sm:flex-row sm:justify-end sm:space-x-2", className)}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogTitle({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Title>) {
+  return (
+    <AlertDialogPrimitive.Title className={cn("text-lg font-semibold", className)} {...props} />
+  );
+}
+
+function AlertDialogDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Description>) {
+  return (
+    <AlertDialogPrimitive.Description
+      className={cn("text-sm text-muted-foreground", className)}
+      {...props}
+    />
+  );
+}
+
+function AlertDialogAction({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Action>) {
+  return <AlertDialogPrimitive.Action className={cn(buttonVariants(), className)} {...props} />;
+}
+
+function AlertDialogCancel({
+  className,
+  ...props
+}: React.ComponentProps<typeof AlertDialogPrimitive.Cancel>) {
+  return (
+    <AlertDialogPrimitive.Cancel
+      className={cn(buttonVariants({ variant: "outline" }), "mt-2 sm:mt-0", className)}
+      {...props}
+    />
+  );
+}
+
+export {
+  AlertDialog,
+  AlertDialogPortal,
+  AlertDialogOverlay,
+  AlertDialogTrigger,
+  AlertDialogContent,
+  AlertDialogHeader,
+  AlertDialogFooter,
+  AlertDialogTitle,
+  AlertDialogDescription,
+  AlertDialogAction,
+  AlertDialogCancel,
+};
diff --git a/apps/mimic-admin/src/components/ui/badge.tsx b/apps/mimic-admin/src/components/ui/badge.tsx
new file mode 100644
index 000000000..4fd9bde2e
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/badge.tsx
@@ -0,0 +1,36 @@
+import { type VariantProps, cva } from "class-variance-authority";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const badgeVariants = cva(
+	"inline-flex items-center rounded-md border px-2.5 py-0.5 text-xs font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2",
+	{
+		variants: {
+			variant: {
+				default:
+					"border-transparent bg-primary text-primary-foreground shadow",
+				secondary:
+					"border-transparent bg-secondary text-secondary-foreground",
+				destructive:
+					"border-transparent bg-destructive text-white shadow",
+				outline: "text-foreground",
+			},
+		},
+		defaultVariants: {
+			variant: "default",
+		},
+	},
+);
+
+export interface BadgeProps
+	extends React.HTMLAttributes<HTMLDivElement>,
+		VariantProps<typeof badgeVariants> {}
+
+function Badge({ className, variant, ...props }: BadgeProps) {
+	return (
+		<div className={cn(badgeVariants({ variant }), className)} {...props} />
+	);
+}
+
+export { Badge, badgeVariants };
diff --git a/apps/mimic-admin/src/components/ui/button.tsx b/apps/mimic-admin/src/components/ui/button.tsx
new file mode 100644
index 000000000..fe109aff0
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/button.tsx
@@ -0,0 +1,59 @@
+import { Slot } from "@radix-ui/react-slot";
+import { type VariantProps, cva } from "class-variance-authority";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const buttonVariants = cva(
+	"inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:size-4 [&_svg]:shrink-0",
+	{
+		variants: {
+			variant: {
+				default:
+					"bg-primary text-primary-foreground shadow hover:bg-primary/90",
+				destructive:
+					"bg-destructive text-white shadow-sm hover:bg-destructive/90",
+				outline:
+					"border border-input bg-background shadow-sm hover:bg-accent hover:text-accent-foreground",
+				secondary:
+					"bg-secondary text-secondary-foreground shadow-sm hover:bg-secondary/80",
+				ghost: "hover:bg-accent hover:text-accent-foreground",
+				link: "text-primary underline-offset-4 hover:underline",
+			},
+			size: {
+				default: "h-9 px-4 py-2",
+				sm: "h-8 rounded-md px-3 text-xs",
+				lg: "h-10 rounded-md px-8",
+				icon: "h-9 w-9",
+			},
+		},
+		defaultVariants: {
+			variant: "default",
+			size: "default",
+		},
+	},
+);
+
+export interface ButtonProps
+	extends React.ButtonHTMLAttributes<HTMLButtonElement>,
+		VariantProps<typeof buttonVariants> {
+	asChild?: boolean;
+}
+
+function Button({
+	className,
+	variant,
+	size,
+	asChild = false,
+	...props
+}: ButtonProps) {
+	const Comp = asChild ? Slot : "button";
+	return (
+		<Comp
+			className={cn(buttonVariants({ variant, size, className }))}
+			{...props}
+		/>
+	);
+}
+
+export { Button, buttonVariants };
diff --git a/apps/mimic-admin/src/components/ui/card.tsx b/apps/mimic-admin/src/components/ui/card.tsx
new file mode 100644
index 000000000..15c7b8945
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/card.tsx
@@ -0,0 +1,66 @@
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+function Card({ className, ...props }: React.HTMLAttributes<HTMLDivElement>) {
+	return (
+		<div
+			className={cn(
+				"rounded-xl border bg-card text-card-foreground shadow",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function CardHeader({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLDivElement>) {
+	return (
+		<div className={cn("flex flex-col space-y-1.5 p-6", className)} {...props} />
+	);
+}
+
+function CardTitle({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLDivElement>) {
+	return (
+		<div
+			className={cn("font-semibold leading-none tracking-tight", className)}
+			{...props}
+		/>
+	);
+}
+
+function CardDescription({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLDivElement>) {
+	return (
+		<div
+			className={cn("text-sm text-muted-foreground", className)}
+			{...props}
+		/>
+	);
+}
+
+function CardContent({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLDivElement>) {
+	return <div className={cn("p-6 pt-0", className)} {...props} />;
+}
+
+function CardFooter({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLDivElement>) {
+	return (
+		<div className={cn("flex items-center p-6 pt-0", className)} {...props} />
+	);
+}
+
+export { Card, CardHeader, CardFooter, CardTitle, CardDescription, CardContent };
diff --git a/apps/mimic-admin/src/components/ui/dialog.tsx b/apps/mimic-admin/src/components/ui/dialog.tsx
new file mode 100644
index 000000000..56c4e8295
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/dialog.tsx
@@ -0,0 +1,102 @@
+import * as DialogPrimitive from "@radix-ui/react-dialog";
+import { X } from "lucide-react";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const Dialog = DialogPrimitive.Root;
+const DialogTrigger = DialogPrimitive.Trigger;
+const DialogPortal = DialogPrimitive.Portal;
+const DialogClose = DialogPrimitive.Close;
+
+function DialogOverlay({
+  className,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Overlay>) {
+  return (
+    <DialogPrimitive.Overlay
+      className={cn(
+        "fixed inset-0 z-50 bg-black/80 data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+function DialogContent({
+  className,
+  children,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Content>) {
+  return (
+    <DialogPortal>
+      <DialogOverlay />
+      <DialogPrimitive.Content
+        className={cn(
+          "fixed left-[50%] top-[50%] z-50 grid w-full max-w-lg translate-x-[-50%] translate-y-[-50%] gap-4 border bg-background p-6 shadow-lg duration-200 data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[state=closed]:slide-out-to-left-1/2 data-[state=closed]:slide-out-to-top-[48%] data-[state=open]:slide-in-from-left-1/2 data-[state=open]:slide-in-from-top-[48%] sm:rounded-lg",
+          className,
+        )}
+        {...props}
+      >
+        {children}
+        <DialogPrimitive.Close className="absolute right-4 top-4 rounded-sm opacity-70 ring-offset-background transition-opacity hover:opacity-100 focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 disabled:pointer-events-none data-[state=open]:bg-accent data-[state=open]:text-muted-foreground">
+          <X className="h-4 w-4" />
+          <span className="sr-only">Close</span>
+        </DialogPrimitive.Close>
+      </DialogPrimitive.Content>
+    </DialogPortal>
+  );
+}
+
+function DialogHeader({ className, ...props }: React.HTMLAttributes<HTMLDivElement>) {
+  return (
+    <div
+      className={cn("flex flex-col space-y-1.5 text-center sm:text-left", className)}
+      {...props}
+    />
+  );
+}
+
+function DialogFooter({ className, ...props }: React.HTMLAttributes<HTMLDivElement>) {
+  return (
+    <div
+      className={cn("flex flex-col-reverse sm:flex-row sm:justify-end sm:space-x-2", className)}
+      {...props}
+    />
+  );
+}
+
+function DialogTitle({ className, ...props }: React.ComponentProps<typeof DialogPrimitive.Title>) {
+  return (
+    <DialogPrimitive.Title
+      className={cn("text-lg font-semibold leading-none tracking-tight", className)}
+      {...props}
+    />
+  );
+}
+
+function DialogDescription({
+  className,
+  ...props
+}: React.ComponentProps<typeof DialogPrimitive.Description>) {
+  return (
+    <DialogPrimitive.Description
+      className={cn("text-sm text-muted-foreground", className)}
+      {...props}
+    />
+  );
+}
+
+export {
+  Dialog,
+  DialogPortal,
+  DialogOverlay,
+  DialogTrigger,
+  DialogClose,
+  DialogContent,
+  DialogHeader,
+  DialogFooter,
+  DialogTitle,
+  DialogDescription,
+};
diff --git a/apps/mimic-admin/src/components/ui/dropdown-menu.tsx b/apps/mimic-admin/src/components/ui/dropdown-menu.tsx
new file mode 100644
index 000000000..4e7d0e8ef
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/dropdown-menu.tsx
@@ -0,0 +1,197 @@
+import * as DropdownMenuPrimitive from "@radix-ui/react-dropdown-menu";
+import { Check, ChevronRight, Circle } from "lucide-react";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const DropdownMenu = DropdownMenuPrimitive.Root;
+const DropdownMenuTrigger = DropdownMenuPrimitive.Trigger;
+const DropdownMenuGroup = DropdownMenuPrimitive.Group;
+const DropdownMenuPortal = DropdownMenuPrimitive.Portal;
+const DropdownMenuSub = DropdownMenuPrimitive.Sub;
+const DropdownMenuRadioGroup = DropdownMenuPrimitive.RadioGroup;
+
+function DropdownMenuSubTrigger({
+	className,
+	inset,
+	children,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.SubTrigger> & {
+	inset?: boolean;
+}) {
+	return (
+		<DropdownMenuPrimitive.SubTrigger
+			className={cn(
+				"flex cursor-default select-none items-center rounded-sm px-2 py-1.5 text-sm outline-none focus:bg-accent data-[state=open]:bg-accent",
+				inset && "pl-8",
+				className,
+			)}
+			{...props}
+		>
+			{children}
+			<ChevronRight className="ml-auto h-4 w-4" />
+		</DropdownMenuPrimitive.SubTrigger>
+	);
+}
+
+function DropdownMenuSubContent({
+	className,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.SubContent>) {
+	return (
+		<DropdownMenuPrimitive.SubContent
+			className={cn(
+				"z-50 min-w-[8rem] overflow-hidden rounded-md border bg-popover p-1 text-popover-foreground shadow-lg data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function DropdownMenuContent({
+	className,
+	sideOffset = 4,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Content>) {
+	return (
+		<DropdownMenuPrimitive.Portal>
+			<DropdownMenuPrimitive.Content
+				sideOffset={sideOffset}
+				className={cn(
+					"z-50 min-w-[8rem] overflow-hidden rounded-md border bg-popover p-1 text-popover-foreground shadow-md data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2",
+					className,
+				)}
+				{...props}
+			/>
+		</DropdownMenuPrimitive.Portal>
+	);
+}
+
+function DropdownMenuItem({
+	className,
+	inset,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Item> & {
+	inset?: boolean;
+}) {
+	return (
+		<DropdownMenuPrimitive.Item
+			className={cn(
+				"relative flex cursor-default select-none items-center rounded-sm px-2 py-1.5 text-sm outline-none transition-colors focus:bg-accent focus:text-accent-foreground data-[disabled]:pointer-events-none data-[disabled]:opacity-50",
+				inset && "pl-8",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function DropdownMenuCheckboxItem({
+	className,
+	children,
+	checked,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.CheckboxItem>) {
+	return (
+		<DropdownMenuPrimitive.CheckboxItem
+			className={cn(
+				"relative flex cursor-default select-none items-center rounded-sm py-1.5 pl-8 pr-2 text-sm outline-none transition-colors focus:bg-accent focus:text-accent-foreground data-[disabled]:pointer-events-none data-[disabled]:opacity-50",
+				className,
+			)}
+			checked={checked}
+			{...props}
+		>
+			<span className="absolute left-2 flex h-3.5 w-3.5 items-center justify-center">
+				<DropdownMenuPrimitive.ItemIndicator>
+					<Check className="h-4 w-4" />
+				</DropdownMenuPrimitive.ItemIndicator>
+			</span>
+			{children}
+		</DropdownMenuPrimitive.CheckboxItem>
+	);
+}
+
+function DropdownMenuRadioItem({
+	className,
+	children,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.RadioItem>) {
+	return (
+		<DropdownMenuPrimitive.RadioItem
+			className={cn(
+				"relative flex cursor-default select-none items-center rounded-sm py-1.5 pl-8 pr-2 text-sm outline-none transition-colors focus:bg-accent focus:text-accent-foreground data-[disabled]:pointer-events-none data-[disabled]:opacity-50",
+				className,
+			)}
+			{...props}
+		>
+			<span className="absolute left-2 flex h-3.5 w-3.5 items-center justify-center">
+				<DropdownMenuPrimitive.ItemIndicator>
+					<Circle className="h-2 w-2 fill-current" />
+				</DropdownMenuPrimitive.ItemIndicator>
+			</span>
+			{children}
+		</DropdownMenuPrimitive.RadioItem>
+	);
+}
+
+function DropdownMenuLabel({
+	className,
+	inset,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Label> & {
+	inset?: boolean;
+}) {
+	return (
+		<DropdownMenuPrimitive.Label
+			className={cn(
+				"px-2 py-1.5 text-sm font-semibold",
+				inset && "pl-8",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function DropdownMenuSeparator({
+	className,
+	...props
+}: React.ComponentProps<typeof DropdownMenuPrimitive.Separator>) {
+	return (
+		<DropdownMenuPrimitive.Separator
+			className={cn("-mx-1 my-1 h-px bg-muted", className)}
+			{...props}
+		/>
+	);
+}
+
+function DropdownMenuShortcut({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLSpanElement>) {
+	return (
+		<span
+			className={cn("ml-auto text-xs tracking-widest opacity-60", className)}
+			{...props}
+		/>
+	);
+}
+
+export {
+	DropdownMenu,
+	DropdownMenuTrigger,
+	DropdownMenuContent,
+	DropdownMenuItem,
+	DropdownMenuCheckboxItem,
+	DropdownMenuRadioItem,
+	DropdownMenuLabel,
+	DropdownMenuSeparator,
+	DropdownMenuShortcut,
+	DropdownMenuGroup,
+	DropdownMenuPortal,
+	DropdownMenuSub,
+	DropdownMenuSubContent,
+	DropdownMenuSubTrigger,
+	DropdownMenuRadioGroup,
+};
diff --git a/apps/mimic-admin/src/components/ui/input.tsx b/apps/mimic-admin/src/components/ui/input.tsx
new file mode 100644
index 000000000..aae2067cd
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/input.tsx
@@ -0,0 +1,18 @@
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+function Input({ className, type, ...props }: React.ComponentProps<"input">) {
+  return (
+    <input
+      type={type}
+      className={cn(
+        "flex h-9 w-full rounded-md border border-input bg-transparent px-3 py-1 text-sm shadow-sm transition-colors file:border-0 file:bg-transparent file:text-sm file:font-medium file:text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:cursor-not-allowed disabled:opacity-50",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { Input };
diff --git a/apps/mimic-admin/src/components/ui/label.tsx b/apps/mimic-admin/src/components/ui/label.tsx
new file mode 100644
index 000000000..896ce10c7
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/label.tsx
@@ -0,0 +1,24 @@
+import * as LabelPrimitive from "@radix-ui/react-label";
+import { type VariantProps, cva } from "class-variance-authority";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const labelVariants = cva(
+	"text-sm font-medium leading-none peer-disabled:cursor-not-allowed peer-disabled:opacity-70",
+);
+
+function Label({
+	className,
+	...props
+}: React.ComponentProps<typeof LabelPrimitive.Root> &
+	VariantProps<typeof labelVariants>) {
+	return (
+		<LabelPrimitive.Root
+			className={cn(labelVariants(), className)}
+			{...props}
+		/>
+	);
+}
+
+export { Label };
diff --git a/apps/mimic-admin/src/components/ui/scroll-area.tsx b/apps/mimic-admin/src/components/ui/scroll-area.tsx
new file mode 100644
index 000000000..5ab5448c5
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/scroll-area.tsx
@@ -0,0 +1,48 @@
+import * as ScrollAreaPrimitive from "@radix-ui/react-scroll-area";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+function ScrollArea({
+	className,
+	children,
+	...props
+}: React.ComponentProps<typeof ScrollAreaPrimitive.Root>) {
+	return (
+		<ScrollAreaPrimitive.Root
+			className={cn("relative overflow-hidden", className)}
+			{...props}
+		>
+			<ScrollAreaPrimitive.Viewport className="h-full w-full rounded-[inherit]">
+				{children}
+			</ScrollAreaPrimitive.Viewport>
+			<ScrollBar />
+			<ScrollAreaPrimitive.Corner />
+		</ScrollAreaPrimitive.Root>
+	);
+}
+
+function ScrollBar({
+	className,
+	orientation = "vertical",
+	...props
+}: React.ComponentProps<typeof ScrollAreaPrimitive.ScrollAreaScrollbar>) {
+	return (
+		<ScrollAreaPrimitive.ScrollAreaScrollbar
+			orientation={orientation}
+			className={cn(
+				"flex touch-none select-none transition-colors",
+				orientation === "vertical" &&
+					"h-full w-2.5 border-l border-l-transparent p-[1px]",
+				orientation === "horizontal" &&
+					"h-2.5 flex-col border-t border-t-transparent p-[1px]",
+				className,
+			)}
+			{...props}
+		>
+			<ScrollAreaPrimitive.ScrollAreaThumb className="relative flex-1 rounded-full bg-border" />
+		</ScrollAreaPrimitive.ScrollAreaScrollbar>
+	);
+}
+
+export { ScrollArea, ScrollBar };
diff --git a/apps/mimic-admin/src/components/ui/select.tsx b/apps/mimic-admin/src/components/ui/select.tsx
new file mode 100644
index 000000000..14b72c172
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/select.tsx
@@ -0,0 +1,158 @@
+import * as SelectPrimitive from "@radix-ui/react-select";
+import { Check, ChevronDown, ChevronUp } from "lucide-react";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const Select = SelectPrimitive.Root;
+const SelectGroup = SelectPrimitive.Group;
+const SelectValue = SelectPrimitive.Value;
+
+function SelectTrigger({
+	className,
+	children,
+	...props
+}: React.ComponentProps<typeof SelectPrimitive.Trigger>) {
+	return (
+		<SelectPrimitive.Trigger
+			className={cn(
+				"flex h-9 w-full items-center justify-between whitespace-nowrap rounded-md border border-input bg-transparent px-3 py-2 text-sm shadow-sm ring-offset-background placeholder:text-muted-foreground focus:outline-none focus:ring-1 focus:ring-ring disabled:cursor-not-allowed disabled:opacity-50 [&>span]:line-clamp-1",
+				className,
+			)}
+			{...props}
+		>
+			{children}
+			<SelectPrimitive.Icon asChild>
+				<ChevronDown className="h-4 w-4 opacity-50" />
+			</SelectPrimitive.Icon>
+		</SelectPrimitive.Trigger>
+	);
+}
+
+function SelectScrollUpButton({
+	className,
+	...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollUpButton>) {
+	return (
+		<SelectPrimitive.ScrollUpButton
+			className={cn(
+				"flex cursor-default items-center justify-center py-1",
+				className,
+			)}
+			{...props}
+		>
+			<ChevronUp className="h-4 w-4" />
+		</SelectPrimitive.ScrollUpButton>
+	);
+}
+
+function SelectScrollDownButton({
+	className,
+	...props
+}: React.ComponentProps<typeof SelectPrimitive.ScrollDownButton>) {
+	return (
+		<SelectPrimitive.ScrollDownButton
+			className={cn(
+				"flex cursor-default items-center justify-center py-1",
+				className,
+			)}
+			{...props}
+		>
+			<ChevronDown className="h-4 w-4" />
+		</SelectPrimitive.ScrollDownButton>
+	);
+}
+
+function SelectContent({
+	className,
+	children,
+	position = "popper",
+	...props
+}: React.ComponentProps<typeof SelectPrimitive.Content>) {
+	return (
+		<SelectPrimitive.Portal>
+			<SelectPrimitive.Content
+				className={cn(
+					"relative z-50 max-h-96 min-w-[8rem] overflow-hidden rounded-md border bg-popover text-popover-foreground shadow-md data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2",
+					position === "popper" &&
+						"data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1",
+					className,
+				)}
+				position={position}
+				{...props}
+			>
+				<SelectScrollUpButton />
+				<SelectPrimitive.Viewport
+					className={cn(
+						"p-1",
+						position === "popper" &&
+							"h-[var(--radix-select-trigger-height)] w-full min-w-[var(--radix-select-trigger-width)]",
+					)}
+				>
+					{children}
+				</SelectPrimitive.Viewport>
+				<SelectScrollDownButton />
+			</SelectPrimitive.Content>
+		</SelectPrimitive.Portal>
+	);
+}
+
+function SelectLabel({
+	className,
+	...props
+}: React.ComponentProps<typeof SelectPrimitive.Label>) {
+	return (
+		<SelectPrimitive.Label
+			className={cn("px-2 py-1.5 text-sm font-semibold", className)}
+			{...props}
+		/>
+	);
+}
+
+function SelectItem({
+	className,
+	children,
+	...props
+}: React.ComponentProps<typeof SelectPrimitive.Item>) {
+	return (
+		<SelectPrimitive.Item
+			className={cn(
+				"relative flex w-full cursor-default select-none items-center rounded-sm py-1.5 pl-2 pr-8 text-sm outline-none focus:bg-accent focus:text-accent-foreground data-[disabled]:pointer-events-none data-[disabled]:opacity-50",
+				className,
+			)}
+			{...props}
+		>
+			<span className="absolute right-2 flex h-3.5 w-3.5 items-center justify-center">
+				<SelectPrimitive.ItemIndicator>
+					<Check className="h-4 w-4" />
+				</SelectPrimitive.ItemIndicator>
+			</span>
+			<SelectPrimitive.ItemText>{children}</SelectPrimitive.ItemText>
+		</SelectPrimitive.Item>
+	);
+}
+
+function SelectSeparator({
+	className,
+	...props
+}: React.ComponentProps<typeof SelectPrimitive.Separator>) {
+	return (
+		<SelectPrimitive.Separator
+			className={cn("-mx-1 my-1 h-px bg-muted", className)}
+			{...props}
+		/>
+	);
+}
+
+export {
+	Select,
+	SelectGroup,
+	SelectValue,
+	SelectTrigger,
+	SelectContent,
+	SelectLabel,
+	SelectItem,
+	SelectSeparator,
+	SelectScrollUpButton,
+	SelectScrollDownButton,
+};
diff --git a/apps/mimic-admin/src/components/ui/separator.tsx b/apps/mimic-admin/src/components/ui/separator.tsx
new file mode 100644
index 000000000..2bb74e0ae
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/separator.tsx
@@ -0,0 +1,26 @@
+import * as SeparatorPrimitive from "@radix-ui/react-separator";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+function Separator({
+	className,
+	orientation = "horizontal",
+	decorative = true,
+	...props
+}: React.ComponentProps<typeof SeparatorPrimitive.Root>) {
+	return (
+		<SeparatorPrimitive.Root
+			decorative={decorative}
+			orientation={orientation}
+			className={cn(
+				"shrink-0 bg-border",
+				orientation === "horizontal" ? "h-[1px] w-full" : "h-full w-[1px]",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+export { Separator };
diff --git a/apps/mimic-admin/src/components/ui/sonner.tsx b/apps/mimic-admin/src/components/ui/sonner.tsx
new file mode 100644
index 000000000..0cd8b368b
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/sonner.tsx
@@ -0,0 +1,20 @@
+import { Toaster as Sonner } from "sonner";
+
+function Toaster() {
+  return (
+    <Sonner
+      className="toaster group"
+      toastOptions={{
+        classNames: {
+          toast:
+            "group toast group-[.toaster]:bg-background group-[.toaster]:text-foreground group-[.toaster]:border-border group-[.toaster]:shadow-lg",
+          description: "group-[.toast]:text-muted-foreground",
+          actionButton: "group-[.toast]:bg-primary group-[.toast]:text-primary-foreground",
+          cancelButton: "group-[.toast]:bg-muted group-[.toast]:text-muted-foreground",
+        },
+      }}
+    />
+  );
+}
+
+export { Toaster };
diff --git a/apps/mimic-admin/src/components/ui/table.tsx b/apps/mimic-admin/src/components/ui/table.tsx
new file mode 100644
index 000000000..52f0da435
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/table.tsx
@@ -0,0 +1,119 @@
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+function Table({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLTableElement>) {
+	return (
+		<div className="relative w-full overflow-auto">
+			<table
+				className={cn("w-full caption-bottom text-sm", className)}
+				{...props}
+			/>
+		</div>
+	);
+}
+
+function TableHeader({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLTableSectionElement>) {
+	return <thead className={cn("[&_tr]:border-b", className)} {...props} />;
+}
+
+function TableBody({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLTableSectionElement>) {
+	return (
+		<tbody
+			className={cn("[&_tr:last-child]:border-0", className)}
+			{...props}
+		/>
+	);
+}
+
+function TableFooter({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLTableSectionElement>) {
+	return (
+		<tfoot
+			className={cn(
+				"border-t bg-muted/50 font-medium [&>tr]:last:border-b-0",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function TableRow({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLTableRowElement>) {
+	return (
+		<tr
+			className={cn(
+				"border-b transition-colors hover:bg-muted/50 data-[state=selected]:bg-muted",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function TableHead({
+	className,
+	...props
+}: React.ThHTMLAttributes<HTMLTableCellElement>) {
+	return (
+		<th
+			className={cn(
+				"h-10 px-4 text-left align-middle font-medium text-muted-foreground [&:has([role=checkbox])]:pr-0 [&>[role=checkbox]]:translate-y-[2px]",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function TableCell({
+	className,
+	...props
+}: React.TdHTMLAttributes<HTMLTableCellElement>) {
+	return (
+		<td
+			className={cn(
+				"p-4 align-middle [&:has([role=checkbox])]:pr-0 [&>[role=checkbox]]:translate-y-[2px]",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function TableCaption({
+	className,
+	...props
+}: React.HTMLAttributes<HTMLTableCaptionElement>) {
+	return (
+		<caption
+			className={cn("mt-4 text-sm text-muted-foreground", className)}
+			{...props}
+		/>
+	);
+}
+
+export {
+	Table,
+	TableHeader,
+	TableBody,
+	TableFooter,
+	TableHead,
+	TableRow,
+	TableCell,
+	TableCaption,
+};
diff --git a/apps/mimic-admin/src/components/ui/tabs.tsx b/apps/mimic-admin/src/components/ui/tabs.tsx
new file mode 100644
index 000000000..7ecdbbdc7
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/tabs.tsx
@@ -0,0 +1,53 @@
+import * as TabsPrimitive from "@radix-ui/react-tabs";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const Tabs = TabsPrimitive.Root;
+
+function TabsList({
+	className,
+	...props
+}: React.ComponentProps<typeof TabsPrimitive.List>) {
+	return (
+		<TabsPrimitive.List
+			className={cn(
+				"inline-flex h-9 items-center justify-center rounded-lg bg-muted p-1 text-muted-foreground",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function TabsTrigger({
+	className,
+	...props
+}: React.ComponentProps<typeof TabsPrimitive.Trigger>) {
+	return (
+		<TabsPrimitive.Trigger
+			className={cn(
+				"inline-flex items-center justify-center whitespace-nowrap rounded-md px-3 py-1 text-sm font-medium ring-offset-background transition-all focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:bg-background data-[state=active]:text-foreground data-[state=active]:shadow",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+function TabsContent({
+	className,
+	...props
+}: React.ComponentProps<typeof TabsPrimitive.Content>) {
+	return (
+		<TabsPrimitive.Content
+			className={cn(
+				"mt-2 ring-offset-background focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+export { Tabs, TabsList, TabsTrigger, TabsContent };
diff --git a/apps/mimic-admin/src/components/ui/textarea.tsx b/apps/mimic-admin/src/components/ui/textarea.tsx
new file mode 100644
index 000000000..94459a387
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/textarea.tsx
@@ -0,0 +1,17 @@
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+function Textarea({ className, ...props }: React.ComponentProps<"textarea">) {
+	return (
+		<textarea
+			className={cn(
+				"flex min-h-[60px] w-full rounded-md border border-input bg-transparent px-3 py-2 text-sm shadow-sm placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:cursor-not-allowed disabled:opacity-50",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+export { Textarea };
diff --git a/apps/mimic-admin/src/components/ui/tooltip.tsx b/apps/mimic-admin/src/components/ui/tooltip.tsx
new file mode 100644
index 000000000..0ac559e80
--- /dev/null
+++ b/apps/mimic-admin/src/components/ui/tooltip.tsx
@@ -0,0 +1,27 @@
+import * as TooltipPrimitive from "@radix-ui/react-tooltip";
+import type * as React from "react";
+
+import { cn } from "@/lib/utils";
+
+const TooltipProvider = TooltipPrimitive.Provider;
+const Tooltip = TooltipPrimitive.Root;
+const TooltipTrigger = TooltipPrimitive.Trigger;
+
+function TooltipContent({
+	className,
+	sideOffset = 4,
+	...props
+}: React.ComponentProps<typeof TooltipPrimitive.Content>) {
+	return (
+		<TooltipPrimitive.Content
+			sideOffset={sideOffset}
+			className={cn(
+				"z-50 overflow-hidden rounded-md bg-primary px-3 py-1.5 text-xs text-primary-foreground animate-in fade-in-0 zoom-in-95 data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=closed]:zoom-out-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2",
+				className,
+			)}
+			{...props}
+		/>
+	);
+}
+
+export { Tooltip, TooltipTrigger, TooltipContent, TooltipProvider };
diff --git a/apps/mimic-admin/src/env.d.ts b/apps/mimic-admin/src/env.d.ts
new file mode 100644
index 000000000..11f02fe2a
--- /dev/null
+++ b/apps/mimic-admin/src/env.d.ts
@@ -0,0 +1 @@
+/// <reference types="vite/client" />
diff --git a/apps/mimic-admin/src/index.html b/apps/mimic-admin/src/index.html
new file mode 100644
index 000000000..db763de53
--- /dev/null
+++ b/apps/mimic-admin/src/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en" class="dark">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Mimic Admin</title>
+  </head>
+  <body class="antialiased">
+    <div id="root"></div>
+    <script type="module" src="./main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/mimic-admin/src/lib/auth.ts b/apps/mimic-admin/src/lib/auth.ts
new file mode 100644
index 000000000..c24a7fd86
--- /dev/null
+++ b/apps/mimic-admin/src/lib/auth.ts
@@ -0,0 +1,29 @@
+export interface Credentials {
+  serverUrl: string;
+  username: string;
+  password: string;
+}
+
+const STORAGE_KEY = "mimic-admin-credentials";
+
+export function getCredentials(): Credentials | null {
+  try {
+    const raw = localStorage.getItem(STORAGE_KEY);
+    if (!raw) return null;
+    const parsed = JSON.parse(raw);
+    if (parsed.serverUrl && parsed.username && parsed.password) {
+      return parsed as Credentials;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+export function setCredentials(credentials: Credentials): void {
+  localStorage.setItem(STORAGE_KEY, JSON.stringify(credentials));
+}
+
+export function clearCredentials(): void {
+  localStorage.removeItem(STORAGE_KEY);
+}
diff --git a/apps/mimic-admin/src/lib/queries.ts b/apps/mimic-admin/src/lib/queries.ts
new file mode 100644
index 000000000..8ea82825b
--- /dev/null
+++ b/apps/mimic-admin/src/lib/queries.ts
@@ -0,0 +1,239 @@
+import { queryOptions } from "@tanstack/react-query";
+import type { MimicSDK, RawDocumentSnapshot } from "@voidhash/mimic-server";
+
+interface UiDocumentSnapshot {
+  readonly id: string;
+  readonly collectionId: string;
+  readonly version: number;
+  readonly flat: unknown;
+}
+
+const mapDocumentSnapshot = (snapshot: RawDocumentSnapshot): UiDocumentSnapshot => ({
+  id: snapshot.id,
+  collectionId: snapshot.collectionId,
+  version: snapshot.version,
+  // Admin UI stores values under `flat` in its component code — keep
+  // the shape stable here to minimize the route diff.
+  flat: snapshot.value,
+});
+
+interface UiCollectionInfo {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly name: string;
+  readonly schemaJson: unknown;
+  readonly schemaVersion: number;
+}
+
+const mapCollection = (collection: {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly name: string;
+  readonly schema: unknown;
+  readonly schemaVersion: number;
+}): UiCollectionInfo => ({
+  id: collection.id,
+  databaseId: collection.databaseId,
+  name: collection.name,
+  schemaJson: collection.schema,
+  schemaVersion: collection.schemaVersion,
+});
+
+export interface UiMigrationChange {
+  readonly type: "create" | "update";
+  readonly collection: string;
+  readonly schemaJson: unknown;
+  readonly oldSchemaJson?: unknown;
+  readonly skipIfExists?: boolean;
+  readonly dataMigrationSource?: string;
+}
+
+const mapMigrationChange = (change: {
+  readonly type: "create" | "update";
+  readonly collection: string;
+  readonly schema: unknown;
+  readonly oldSchema?: unknown;
+  readonly skipIfExists?: boolean;
+  readonly dataMigrationSource?: string;
+}): UiMigrationChange =>
+  change.type === "create"
+    ? {
+        type: "create",
+        collection: change.collection,
+        schemaJson: change.schema,
+        skipIfExists: change.skipIfExists,
+      }
+    : {
+        type: "update",
+        collection: change.collection,
+        schemaJson: change.schema,
+        oldSchemaJson: change.oldSchema,
+        dataMigrationSource: change.dataMigrationSource,
+      };
+
+export type MigrationRunState = "running" | "succeeded" | "failed" | "replaced" | "unknown";
+
+export interface UiDatabaseMigration {
+  readonly version: number;
+  readonly name: string;
+  readonly checksum: string;
+  readonly appliedAt?: string;
+  readonly state: MigrationRunState;
+  readonly totalDocuments: number;
+  readonly succeededDocuments: number;
+  readonly failedDocuments: number;
+  readonly changes?: ReadonlyArray<UiMigrationChange>;
+}
+
+export interface UiMigrationStatus {
+  readonly databaseId: string;
+  readonly version: number;
+  readonly state: MigrationRunState;
+  readonly checksum?: string;
+  readonly summary: {
+    readonly pending: number;
+    readonly running: number;
+    readonly succeeded: number;
+    readonly failed: number;
+    readonly skipped: number;
+  };
+  readonly failures: ReadonlyArray<{
+    readonly documentId: string;
+    readonly collectionId: string;
+    readonly attempt: number;
+    readonly errorCode?: string;
+    readonly errorMessage?: string;
+  }>;
+}
+
+export interface UiMigrationRunReport {
+  readonly databaseId: string;
+  readonly version: number;
+  readonly state: "succeeded" | "failed";
+  readonly succeeded: number;
+  readonly failed: number;
+  readonly skipped: number;
+  readonly perDocument: ReadonlyArray<{
+    readonly collectionId: string;
+    readonly documentId: string;
+    readonly status: "succeeded" | "failed" | "skipped";
+    readonly errorCode?: string;
+    readonly errorMessage?: string;
+  }>;
+  readonly dryRun: boolean;
+}
+
+export const databasesQuery = (sdk: MimicSDK) =>
+  queryOptions({
+    queryKey: ["databases"],
+    queryFn: () => sdk.listDatabases(),
+  });
+
+export const collectionsQuery = (sdk: MimicSDK, databaseId: string) =>
+  queryOptions({
+    queryKey: ["collections", databaseId],
+    queryFn: () =>
+      sdk
+        .database(databaseId)
+        .listCollectionsRaw()
+        .then((collections) => collections.map(mapCollection)),
+    enabled: !!databaseId,
+  });
+
+export const databaseMigrationsQuery = (sdk: MimicSDK, databaseId: string) =>
+  queryOptions({
+    queryKey: ["database-migrations", databaseId],
+    queryFn: () =>
+      sdk
+        .database(databaseId)
+        .listMigrations()
+        .then((migrations) =>
+          migrations.map(
+            (migration): UiDatabaseMigration => ({
+              version: migration.version,
+              name: migration.name,
+              checksum: migration.checksum,
+              appliedAt: migration.appliedAt,
+              // Older server versions may not return state/counts; fall
+              // back to "succeeded" / 0 so the UI stays well-typed.
+              state: (migration.state ?? "succeeded") as MigrationRunState,
+              totalDocuments: migration.totalDocuments ?? 0,
+              succeededDocuments: migration.succeededDocuments ?? 0,
+              failedDocuments: migration.failedDocuments ?? 0,
+              changes: migration.changes?.map(mapMigrationChange),
+            }),
+          ),
+        ),
+    enabled: !!databaseId,
+  });
+
+export const migrationStatusQuery = (sdk: MimicSDK, databaseId: string, version: number | null) =>
+  queryOptions({
+    queryKey: ["migration-status", databaseId, version],
+    queryFn: () =>
+      sdk
+        .database(databaseId)
+        .getMigrationStatus(version!)
+        .then(
+          (status): UiMigrationStatus => ({
+            databaseId: status.databaseId,
+            version: status.version,
+            state: status.state as MigrationRunState,
+            checksum: status.checksum,
+            summary: {
+              pending: status.summary.pending,
+              running: status.summary.running,
+              succeeded: status.summary.succeeded,
+              failed: status.summary.failed,
+              skipped: status.summary.skipped,
+            },
+            failures: status.failures.map((failure) => ({
+              documentId: failure.documentId,
+              collectionId: failure.collectionId,
+              attempt: failure.attempt,
+              errorCode: failure.errorCode,
+              errorMessage: failure.errorMessage,
+            })),
+          }),
+        ),
+    enabled: !!databaseId && version !== null,
+  });
+
+export const documentsQuery = (sdk: MimicSDK, collectionId: string) =>
+  queryOptions({
+    queryKey: ["documents", collectionId],
+    queryFn: () =>
+      sdk
+        // `databaseId` isn't needed for raw collection RPCs (the server
+        // resolves it from `collectionId`); pass empty string so the
+        // handle constructor stays well-typed.
+        .database("")
+        .collectionRaw(collectionId)
+        .listDocumentsRaw()
+        .then((documents) => documents.map(mapDocumentSnapshot)),
+    enabled: !!collectionId,
+  });
+
+export const documentQuery = (sdk: MimicSDK, collectionId: string, documentId: string) =>
+  queryOptions({
+    queryKey: ["document", collectionId, documentId],
+    queryFn: () =>
+      sdk
+        .database("")
+        .collectionRaw(collectionId)
+        .getDocumentRaw(documentId)
+        .then(mapDocumentSnapshot),
+    enabled: !!collectionId && !!documentId,
+  });
+
+export const usersQuery = (sdk: MimicSDK) =>
+  queryOptions({
+    queryKey: ["users"],
+    queryFn: () => sdk.listUsers(),
+  });
+
+export const grantsQuery = (sdk: MimicSDK, userId?: string) =>
+  queryOptions({
+    queryKey: ["grants", userId],
+    queryFn: () => sdk.listGrants(userId),
+  });
diff --git a/apps/mimic-admin/src/lib/utils.ts b/apps/mimic-admin/src/lib/utils.ts
new file mode 100644
index 000000000..365058ceb
--- /dev/null
+++ b/apps/mimic-admin/src/lib/utils.ts
@@ -0,0 +1,6 @@
+import { type ClassValue, clsx } from "clsx";
+import { twMerge } from "tailwind-merge";
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs));
+}
diff --git a/apps/mimic-admin/src/main.tsx b/apps/mimic-admin/src/main.tsx
new file mode 100644
index 000000000..20bea4d40
--- /dev/null
+++ b/apps/mimic-admin/src/main.tsx
@@ -0,0 +1,13 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import { RouterProvider } from "@tanstack/react-router";
+import { getRouter } from "./router";
+import "@/styles/globals.css";
+
+const router = getRouter();
+
+createRoot(document.getElementById("root")!).render(
+  <StrictMode>
+    <RouterProvider router={router} />
+  </StrictMode>,
+);
diff --git a/apps/mimic-admin/src/routeTree.gen.ts b/apps/mimic-admin/src/routeTree.gen.ts
new file mode 100644
index 000000000..078d9b836
--- /dev/null
+++ b/apps/mimic-admin/src/routeTree.gen.ts
@@ -0,0 +1,285 @@
+/* eslint-disable */
+
+// @ts-nocheck
+
+// noinspection JSUnusedGlobalSymbols
+
+// This file was automatically generated by TanStack Router.
+// You should NOT make any changes in this file as it will be overwritten.
+// Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.
+
+import { Route as rootRouteImport } from "./routes/__root";
+import { Route as LoginRouteImport } from "./routes/login";
+import { Route as AppRouteRouteImport } from "./routes/_app/route";
+import { Route as AppLayoutRouteRouteImport } from "./routes/_app/_layout/route";
+import { Route as AppLayoutIndexRouteImport } from "./routes/_app/_layout/index";
+import { Route as AppLayoutMigrationsRouteImport } from "./routes/_app/_layout/migrations";
+import { Route as AppLayoutUsersRouteImport } from "./routes/_app/_layout/users";
+import { Route as AppLayoutObservabilityRouteImport } from "./routes/_app/_layout/observability";
+import { Route as AppLayoutDatabasesRouteImport } from "./routes/_app/_layout/databases";
+import { Route as AppLayoutCollectionsCollectionIdIndexRouteImport } from "./routes/_app/_layout/collections/$collectionId/index";
+import { Route as AppLayoutCollectionsCollectionIdSchemaRouteImport } from "./routes/_app/_layout/collections/$collectionId/schema";
+import { Route as AppLayoutCollectionsCollectionIdDocumentsDocumentIdRouteImport } from "./routes/_app/_layout/collections/$collectionId/documents/$documentId";
+
+const LoginRoute = LoginRouteImport.update({
+  id: "/login",
+  path: "/login",
+  getParentRoute: () => rootRouteImport,
+} as any);
+const AppRouteRoute = AppRouteRouteImport.update({
+  id: "/_app",
+  getParentRoute: () => rootRouteImport,
+} as any);
+const AppLayoutRouteRoute = AppLayoutRouteRouteImport.update({
+  id: "/_layout",
+  getParentRoute: () => AppRouteRoute,
+} as any);
+const AppLayoutIndexRoute = AppLayoutIndexRouteImport.update({
+  id: "/",
+  path: "/",
+  getParentRoute: () => AppLayoutRouteRoute,
+} as any);
+const AppLayoutMigrationsRoute = AppLayoutMigrationsRouteImport.update({
+  id: "/migrations",
+  path: "/migrations",
+  getParentRoute: () => AppLayoutRouteRoute,
+} as any);
+const AppLayoutUsersRoute = AppLayoutUsersRouteImport.update({
+  id: "/users",
+  path: "/users",
+  getParentRoute: () => AppLayoutRouteRoute,
+} as any);
+const AppLayoutObservabilityRoute = AppLayoutObservabilityRouteImport.update({
+  id: "/observability",
+  path: "/observability",
+  getParentRoute: () => AppLayoutRouteRoute,
+} as any);
+const AppLayoutDatabasesRoute = AppLayoutDatabasesRouteImport.update({
+  id: "/databases",
+  path: "/databases",
+  getParentRoute: () => AppLayoutRouteRoute,
+} as any);
+const AppLayoutCollectionsCollectionIdIndexRoute =
+  AppLayoutCollectionsCollectionIdIndexRouteImport.update({
+    id: "/collections/$collectionId/",
+    path: "/collections/$collectionId/",
+    getParentRoute: () => AppLayoutRouteRoute,
+  } as any);
+const AppLayoutCollectionsCollectionIdSchemaRoute =
+  AppLayoutCollectionsCollectionIdSchemaRouteImport.update({
+    id: "/collections/$collectionId/schema",
+    path: "/collections/$collectionId/schema",
+    getParentRoute: () => AppLayoutRouteRoute,
+  } as any);
+const AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute =
+  AppLayoutCollectionsCollectionIdDocumentsDocumentIdRouteImport.update({
+    id: "/collections/$collectionId/documents/$documentId",
+    path: "/collections/$collectionId/documents/$documentId",
+    getParentRoute: () => AppLayoutRouteRoute,
+  } as any);
+
+export interface FileRoutesByFullPath {
+  "/": typeof AppLayoutIndexRoute;
+  "/login": typeof LoginRoute;
+  "/databases": typeof AppLayoutDatabasesRoute;
+  "/migrations": typeof AppLayoutMigrationsRoute;
+  "/observability": typeof AppLayoutObservabilityRoute;
+  "/users": typeof AppLayoutUsersRoute;
+  "/collections/$collectionId/schema": typeof AppLayoutCollectionsCollectionIdSchemaRoute;
+  "/collections/$collectionId/": typeof AppLayoutCollectionsCollectionIdIndexRoute;
+  "/collections/$collectionId/documents/$documentId": typeof AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute;
+}
+export interface FileRoutesByTo {
+  "/": typeof AppLayoutIndexRoute;
+  "/login": typeof LoginRoute;
+  "/databases": typeof AppLayoutDatabasesRoute;
+  "/migrations": typeof AppLayoutMigrationsRoute;
+  "/observability": typeof AppLayoutObservabilityRoute;
+  "/users": typeof AppLayoutUsersRoute;
+  "/collections/$collectionId/schema": typeof AppLayoutCollectionsCollectionIdSchemaRoute;
+  "/collections/$collectionId": typeof AppLayoutCollectionsCollectionIdIndexRoute;
+  "/collections/$collectionId/documents/$documentId": typeof AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute;
+}
+export interface FileRoutesById {
+  __root__: typeof rootRouteImport;
+  "/_app": typeof AppRouteRouteWithChildren;
+  "/login": typeof LoginRoute;
+  "/_app/_layout": typeof AppLayoutRouteRouteWithChildren;
+  "/_app/_layout/databases": typeof AppLayoutDatabasesRoute;
+  "/_app/_layout/migrations": typeof AppLayoutMigrationsRoute;
+  "/_app/_layout/observability": typeof AppLayoutObservabilityRoute;
+  "/_app/_layout/users": typeof AppLayoutUsersRoute;
+  "/_app/_layout/": typeof AppLayoutIndexRoute;
+  "/_app/_layout/collections/$collectionId/schema": typeof AppLayoutCollectionsCollectionIdSchemaRoute;
+  "/_app/_layout/collections/$collectionId/": typeof AppLayoutCollectionsCollectionIdIndexRoute;
+  "/_app/_layout/collections/$collectionId/documents/$documentId": typeof AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute;
+}
+export interface FileRouteTypes {
+  fileRoutesByFullPath: FileRoutesByFullPath;
+  fullPaths:
+    | "/"
+    | "/login"
+    | "/databases"
+    | "/migrations"
+    | "/observability"
+    | "/users"
+    | "/collections/$collectionId/schema"
+    | "/collections/$collectionId/"
+    | "/collections/$collectionId/documents/$documentId";
+  fileRoutesByTo: FileRoutesByTo;
+  to:
+    | "/"
+    | "/login"
+    | "/databases"
+    | "/migrations"
+    | "/observability"
+    | "/users"
+    | "/collections/$collectionId/schema"
+    | "/collections/$collectionId"
+    | "/collections/$collectionId/documents/$documentId";
+  id:
+    | "__root__"
+    | "/_app"
+    | "/login"
+    | "/_app/_layout"
+    | "/_app/_layout/databases"
+    | "/_app/_layout/migrations"
+    | "/_app/_layout/observability"
+    | "/_app/_layout/users"
+    | "/_app/_layout/"
+    | "/_app/_layout/collections/$collectionId/schema"
+    | "/_app/_layout/collections/$collectionId/"
+    | "/_app/_layout/collections/$collectionId/documents/$documentId";
+  fileRoutesById: FileRoutesById;
+}
+export interface RootRouteChildren {
+  AppRouteRoute: typeof AppRouteRouteWithChildren;
+  LoginRoute: typeof LoginRoute;
+}
+
+declare module "@tanstack/react-router" {
+  interface FileRoutesByPath {
+    "/login": {
+      id: "/login";
+      path: "/login";
+      fullPath: "/login";
+      preLoaderRoute: typeof LoginRouteImport;
+      parentRoute: typeof rootRouteImport;
+    };
+    "/_app": {
+      id: "/_app";
+      path: "";
+      fullPath: "/";
+      preLoaderRoute: typeof AppRouteRouteImport;
+      parentRoute: typeof rootRouteImport;
+    };
+    "/_app/_layout": {
+      id: "/_app/_layout";
+      path: "";
+      fullPath: "/";
+      preLoaderRoute: typeof AppLayoutRouteRouteImport;
+      parentRoute: typeof AppRouteRoute;
+    };
+    "/_app/_layout/": {
+      id: "/_app/_layout/";
+      path: "/";
+      fullPath: "/";
+      preLoaderRoute: typeof AppLayoutIndexRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+    "/_app/_layout/users": {
+      id: "/_app/_layout/users";
+      path: "/users";
+      fullPath: "/users";
+      preLoaderRoute: typeof AppLayoutUsersRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+    "/_app/_layout/migrations": {
+      id: "/_app/_layout/migrations";
+      path: "/migrations";
+      fullPath: "/migrations";
+      preLoaderRoute: typeof AppLayoutMigrationsRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+    "/_app/_layout/observability": {
+      id: "/_app/_layout/observability";
+      path: "/observability";
+      fullPath: "/observability";
+      preLoaderRoute: typeof AppLayoutObservabilityRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+    "/_app/_layout/databases": {
+      id: "/_app/_layout/databases";
+      path: "/databases";
+      fullPath: "/databases";
+      preLoaderRoute: typeof AppLayoutDatabasesRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+    "/_app/_layout/collections/$collectionId/": {
+      id: "/_app/_layout/collections/$collectionId/";
+      path: "/collections/$collectionId";
+      fullPath: "/collections/$collectionId/";
+      preLoaderRoute: typeof AppLayoutCollectionsCollectionIdIndexRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+    "/_app/_layout/collections/$collectionId/schema": {
+      id: "/_app/_layout/collections/$collectionId/schema";
+      path: "/collections/$collectionId/schema";
+      fullPath: "/collections/$collectionId/schema";
+      preLoaderRoute: typeof AppLayoutCollectionsCollectionIdSchemaRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+    "/_app/_layout/collections/$collectionId/documents/$documentId": {
+      id: "/_app/_layout/collections/$collectionId/documents/$documentId";
+      path: "/collections/$collectionId/documents/$documentId";
+      fullPath: "/collections/$collectionId/documents/$documentId";
+      preLoaderRoute: typeof AppLayoutCollectionsCollectionIdDocumentsDocumentIdRouteImport;
+      parentRoute: typeof AppLayoutRouteRoute;
+    };
+  }
+}
+
+interface AppLayoutRouteRouteChildren {
+  AppLayoutDatabasesRoute: typeof AppLayoutDatabasesRoute;
+  AppLayoutMigrationsRoute: typeof AppLayoutMigrationsRoute;
+  AppLayoutObservabilityRoute: typeof AppLayoutObservabilityRoute;
+  AppLayoutUsersRoute: typeof AppLayoutUsersRoute;
+  AppLayoutIndexRoute: typeof AppLayoutIndexRoute;
+  AppLayoutCollectionsCollectionIdSchemaRoute: typeof AppLayoutCollectionsCollectionIdSchemaRoute;
+  AppLayoutCollectionsCollectionIdIndexRoute: typeof AppLayoutCollectionsCollectionIdIndexRoute;
+  AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute: typeof AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute;
+}
+
+const AppLayoutRouteRouteChildren: AppLayoutRouteRouteChildren = {
+  AppLayoutDatabasesRoute: AppLayoutDatabasesRoute,
+  AppLayoutMigrationsRoute: AppLayoutMigrationsRoute,
+  AppLayoutObservabilityRoute: AppLayoutObservabilityRoute,
+  AppLayoutUsersRoute: AppLayoutUsersRoute,
+  AppLayoutIndexRoute: AppLayoutIndexRoute,
+  AppLayoutCollectionsCollectionIdSchemaRoute: AppLayoutCollectionsCollectionIdSchemaRoute,
+  AppLayoutCollectionsCollectionIdIndexRoute: AppLayoutCollectionsCollectionIdIndexRoute,
+  AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute:
+    AppLayoutCollectionsCollectionIdDocumentsDocumentIdRoute,
+};
+
+const AppLayoutRouteRouteWithChildren = AppLayoutRouteRoute._addFileChildren(
+  AppLayoutRouteRouteChildren,
+);
+
+interface AppRouteRouteChildren {
+  AppLayoutRouteRoute: typeof AppLayoutRouteRouteWithChildren;
+}
+
+const AppRouteRouteChildren: AppRouteRouteChildren = {
+  AppLayoutRouteRoute: AppLayoutRouteRouteWithChildren,
+};
+
+const AppRouteRouteWithChildren = AppRouteRoute._addFileChildren(AppRouteRouteChildren);
+
+const rootRouteChildren: RootRouteChildren = {
+  AppRouteRoute: AppRouteRouteWithChildren,
+  LoginRoute: LoginRoute,
+};
+export const routeTree = rootRouteImport
+  ._addFileChildren(rootRouteChildren)
+  ._addFileTypes<FileRouteTypes>();
diff --git a/apps/mimic-admin/src/router.tsx b/apps/mimic-admin/src/router.tsx
new file mode 100644
index 000000000..f3010e884
--- /dev/null
+++ b/apps/mimic-admin/src/router.tsx
@@ -0,0 +1,29 @@
+import { QueryClient } from "@tanstack/react-query";
+import { createRouter } from "@tanstack/react-router";
+
+import { routeTree } from "./routeTree.gen";
+
+export const queryClient = new QueryClient({
+  defaultOptions: {
+    queries: {
+      staleTime: 30_000,
+    },
+  },
+});
+
+export function getRouter() {
+  const router = createRouter({
+    context: { queryClient },
+    defaultNotFoundComponent: () => <div>Not Found</div>,
+    defaultPreload: "intent",
+    routeTree,
+  });
+
+  return router;
+}
+
+declare module "@tanstack/react-router" {
+  interface Register {
+    router: ReturnType<typeof getRouter>;
+  }
+}
diff --git a/apps/mimic-admin/src/routes/__root.tsx b/apps/mimic-admin/src/routes/__root.tsx
new file mode 100644
index 000000000..5e23c322f
--- /dev/null
+++ b/apps/mimic-admin/src/routes/__root.tsx
@@ -0,0 +1,22 @@
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { ReactQueryDevtools } from "@tanstack/react-query-devtools";
+import { Outlet, createRootRouteWithContext } from "@tanstack/react-router";
+
+import { Toaster } from "@/components/ui/sonner";
+
+export const Route = createRootRouteWithContext<{
+  queryClient: QueryClient;
+}>()({
+  component: RootComponent,
+});
+
+function RootComponent() {
+  const { queryClient } = Route.useRouteContext();
+  return (
+    <QueryClientProvider client={queryClient}>
+      <Outlet />
+      <Toaster />
+      <ReactQueryDevtools buttonPosition="bottom-right" />
+    </QueryClientProvider>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/documents/$documentId.tsx b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/documents/$documentId.tsx
new file mode 100644
index 000000000..2a6a6ab89
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/documents/$documentId.tsx
@@ -0,0 +1,294 @@
+import { useEffect, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { createFileRoute, useNavigate } from "@tanstack/react-router";
+import { Copy, Trash2 } from "lucide-react";
+import { toast } from "sonner";
+
+import { useMimicSdk } from "@/components/sdk-context";
+import {
+	AlertDialog,
+	AlertDialogAction,
+	AlertDialogCancel,
+	AlertDialogContent,
+	AlertDialogDescription,
+	AlertDialogFooter,
+	AlertDialogHeader,
+	AlertDialogTitle,
+	AlertDialogTrigger,
+} from "@/components/ui/alert-dialog";
+import { Button } from "@/components/ui/button";
+import {
+	Card,
+	CardContent,
+	CardHeader,
+	CardTitle,
+} from "@/components/ui/card";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import {
+	Select,
+	SelectContent,
+	SelectItem,
+	SelectTrigger,
+	SelectValue,
+} from "@/components/ui/select";
+import { Textarea } from "@/components/ui/textarea";
+import { documentQuery } from "@/lib/queries";
+
+export const Route = createFileRoute(
+	"/_app/_layout/collections/$collectionId/documents/$documentId",
+)({
+	component: DocumentPage,
+});
+
+function DocumentPage() {
+	const { collectionId, documentId } = Route.useParams();
+	const sdk = useMimicSdk();
+	const navigate = useNavigate();
+	const queryClient = useQueryClient();
+
+	const { data: document, isLoading } = useQuery(
+		documentQuery(sdk, collectionId, documentId),
+	);
+
+	const [editJson, setEditJson] = useState("");
+	const [tokenPermission, setTokenPermission] = useState<"read" | "write">(
+		"read",
+	);
+	const [tokenExpiry, setTokenExpiry] = useState("");
+	const [tokenOrigins, setTokenOrigins] = useState("http://localhost:3003");
+	const [generatedAuth, setGeneratedAuth] = useState<{
+		token: string;
+		url: string;
+	} | null>(null);
+
+	const setMutation = useMutation({
+		mutationFn: () => {
+			const data = JSON.parse(editJson);
+			return sdk
+				.database("")
+				.collectionRaw(collectionId)
+				.setDocumentRaw(documentId, data);
+		},
+		onSuccess: () => {
+			queryClient.invalidateQueries({
+				queryKey: ["document", collectionId, documentId],
+			});
+			toast.success("Document replaced");
+		},
+		onError: (err) => toast.error(`Set failed: ${err.message}`),
+	});
+
+	const deleteMutation = useMutation({
+		mutationFn: () =>
+			sdk.database("").collectionRaw(collectionId).deleteDocument(documentId),
+		onSuccess: () => {
+			queryClient.invalidateQueries({
+				queryKey: ["documents", collectionId],
+			});
+			toast.success("Document deleted");
+			navigate({
+				to: "/collections/$collectionId",
+				params: { collectionId },
+			});
+		},
+		onError: (err) => toast.error(`Delete failed: ${err.message}`),
+	});
+
+	const tokenMutation = useMutation({
+		mutationFn: () =>
+			sdk.setupDocumentAuthentication({
+				collectionId,
+				documentId,
+				permission: tokenPermission,
+				origins: tokenOrigins
+					.split(/[\n,]/)
+					.map((origin) => origin.trim())
+					.filter(Boolean),
+				expiresInSeconds: tokenExpiry ? Number(tokenExpiry) : undefined,
+			}),
+		onSuccess: (result) => {
+			setGeneratedAuth(result);
+			toast.success("Authentication setup created");
+		},
+		onError: (err) => toast.error(`Authentication setup failed: ${err.message}`),
+	});
+
+	useEffect(() => {
+		if (!document) {
+			return;
+		}
+		setEditJson(JSON.stringify(document.flat, null, 2));
+	}, [document]);
+
+	if (isLoading) {
+		return <p className="text-muted-foreground">Loading...</p>;
+	}
+
+	if (!document) {
+		return <p className="text-muted-foreground">Document not found.</p>;
+	}
+
+	return (
+		<div className="space-y-6">
+			<div className="flex items-center justify-between">
+				<div>
+					<h2 className="text-2xl font-bold">Document</h2>
+					<p className="text-sm text-muted-foreground">
+						{documentId} (v{document.version})
+					</p>
+				</div>
+				<AlertDialog>
+					<AlertDialogTrigger asChild>
+						<Button variant="destructive">
+							<Trash2 className="mr-2 h-4 w-4" />
+							Delete
+						</Button>
+					</AlertDialogTrigger>
+					<AlertDialogContent>
+						<AlertDialogHeader>
+							<AlertDialogTitle>Delete document?</AlertDialogTitle>
+							<AlertDialogDescription>
+								This will permanently delete this document.
+							</AlertDialogDescription>
+						</AlertDialogHeader>
+						<AlertDialogFooter>
+							<AlertDialogCancel>Cancel</AlertDialogCancel>
+							<AlertDialogAction onClick={() => deleteMutation.mutate()}>
+								Delete
+							</AlertDialogAction>
+						</AlertDialogFooter>
+					</AlertDialogContent>
+				</AlertDialog>
+			</div>
+
+			<Card>
+				<CardHeader>
+					<CardTitle>Current Value</CardTitle>
+				</CardHeader>
+				<CardContent>
+					<pre className="overflow-auto rounded-md bg-muted p-4 text-sm">
+						{JSON.stringify(document.flat, null, 2)}
+					</pre>
+				</CardContent>
+			</Card>
+
+			<Card>
+				<CardHeader>
+					<CardTitle>Replace Document Value</CardTitle>
+				</CardHeader>
+				<CardContent>
+					<div className="space-y-4">
+						<Textarea
+							value={editJson}
+							onChange={(e) => setEditJson(e.target.value)}
+							className="min-h-[200px] font-mono text-sm"
+						/>
+						<Button
+							onClick={() => {
+								try {
+									JSON.parse(editJson);
+									setMutation.mutate();
+								} catch {
+									toast.error("Invalid JSON");
+								}
+							}}
+							disabled={setMutation.isPending}
+							variant="outline"
+						>
+							{setMutation.isPending ? "Replacing..." : "Replace Value"}
+						</Button>
+					</div>
+				</CardContent>
+			</Card>
+
+			<Card>
+				<CardHeader>
+					<CardTitle>Document Authentication</CardTitle>
+				</CardHeader>
+				<CardContent className="space-y-4">
+					<div className="flex flex-wrap items-end gap-4">
+						<div className="grid gap-1">
+							<Label className="text-xs">Permission</Label>
+							<Select
+								value={tokenPermission}
+								onValueChange={(v) =>
+									setTokenPermission(v as "read" | "write")
+								}
+							>
+								<SelectTrigger className="w-28">
+									<SelectValue />
+								</SelectTrigger>
+								<SelectContent>
+									<SelectItem value="read">read</SelectItem>
+									<SelectItem value="write">write</SelectItem>
+								</SelectContent>
+							</Select>
+						</div>
+						<div className="grid gap-1">
+							<Label className="text-xs">Expires in (seconds)</Label>
+							<Input
+								type="number"
+								value={tokenExpiry}
+								onChange={(e) => setTokenExpiry(e.target.value)}
+								placeholder="Optional"
+								className="w-36"
+							/>
+						</div>
+						<div className="grid min-w-[320px] flex-1 gap-1">
+							<Label className="text-xs">Allowed origins</Label>
+							<Textarea
+								value={tokenOrigins}
+								onChange={(e) => setTokenOrigins(e.target.value)}
+								placeholder="One origin per line or comma-separated"
+								className="min-h-24 text-sm"
+							/>
+						</div>
+						<Button
+							onClick={() => tokenMutation.mutate()}
+							disabled={tokenMutation.isPending}
+						>
+							{tokenMutation.isPending
+								? "Generating..."
+								: "Generate Connection"}
+						</Button>
+					</div>
+					{generatedAuth && (
+						<div className="space-y-2 rounded-md bg-muted p-3">
+							<div className="flex items-center gap-2">
+								<code className="flex-1 break-all text-xs">
+									{generatedAuth.url}
+								</code>
+								<Button
+									variant="ghost"
+									size="icon"
+									onClick={() => {
+										navigator.clipboard.writeText(generatedAuth.url);
+										toast.success("Connection URL copied to clipboard");
+									}}
+								>
+									<Copy className="h-4 w-4" />
+								</Button>
+							</div>
+							<div className="flex items-center gap-2">
+								<code className="flex-1 break-all text-xs">
+									{generatedAuth.token}
+								</code>
+								<Button
+									variant="ghost"
+									size="icon"
+									onClick={() => {
+										navigator.clipboard.writeText(generatedAuth.token);
+										toast.success("Token copied to clipboard");
+									}}
+								>
+									<Copy className="h-4 w-4" />
+								</Button>
+							</div>
+						</div>
+					)}
+				</CardContent>
+			</Card>
+		</div>
+	);
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/index.tsx b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/index.tsx
new file mode 100644
index 000000000..587dc911e
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/index.tsx
@@ -0,0 +1,259 @@
+import { useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Link, createFileRoute } from "@tanstack/react-router";
+import { Plus, Trash2 } from "lucide-react";
+import { toast } from "sonner";
+
+import { useMimicSdk } from "@/components/sdk-context";
+import {
+	AlertDialog,
+	AlertDialogAction,
+	AlertDialogCancel,
+	AlertDialogContent,
+	AlertDialogDescription,
+	AlertDialogFooter,
+	AlertDialogHeader,
+	AlertDialogTitle,
+	AlertDialogTrigger,
+} from "@/components/ui/alert-dialog";
+import { Button } from "@/components/ui/button";
+import {
+	Dialog,
+	DialogClose,
+	DialogContent,
+	DialogFooter,
+	DialogHeader,
+	DialogTitle,
+	DialogTrigger,
+} from "@/components/ui/dialog";
+import { Label } from "@/components/ui/label";
+import { Tabs, TabsContent, TabsList, TabsTrigger } from "@/components/ui/tabs";
+import {
+	Table,
+	TableBody,
+	TableCell,
+	TableHead,
+	TableHeader,
+	TableRow,
+} from "@/components/ui/table";
+import { Textarea } from "@/components/ui/textarea";
+import { documentsQuery } from "@/lib/queries";
+
+export const Route = createFileRoute(
+	"/_app/_layout/collections/$collectionId/",
+)({
+	component: CollectionDocumentsPage,
+});
+
+function CollectionDocumentsPage() {
+	const { collectionId } = Route.useParams();
+	const sdk = useMimicSdk();
+	const queryClient = useQueryClient();
+
+	const { data: documents, isLoading } = useQuery(
+		documentsQuery(sdk, collectionId),
+	);
+
+	const [dataJson, setDataJson] = useState(
+		JSON.stringify(
+			{
+				kind: "object",
+				fields: {},
+			},
+			null,
+			2,
+		),
+	);
+	const [open, setOpen] = useState(false);
+
+	const createMutation = useMutation({
+		mutationFn: () => {
+			const data = JSON.parse(dataJson);
+			return sdk
+				.database("")
+				.collectionRaw(collectionId)
+				.createDocumentRaw(data);
+		},
+		onSuccess: () => {
+			queryClient.invalidateQueries({
+				queryKey: ["documents", collectionId],
+			});
+			setDataJson(
+				JSON.stringify(
+					{
+						kind: "object",
+						fields: {},
+					},
+					null,
+					2,
+				),
+			);
+			setOpen(false);
+			toast.success("Document created");
+		},
+		onError: (err) =>
+			toast.error(`Failed to create document: ${err.message}`),
+	});
+
+	const deleteMutation = useMutation({
+		mutationFn: (documentId: string) =>
+			sdk.database("").collectionRaw(collectionId).deleteDocument(documentId),
+		onSuccess: () => {
+			queryClient.invalidateQueries({
+				queryKey: ["documents", collectionId],
+			});
+			toast.success("Document deleted");
+		},
+		onError: (err) =>
+			toast.error(`Failed to delete document: ${err.message}`),
+	});
+
+	return (
+		<div className="space-y-6">
+			<div className="flex items-center justify-between">
+				<div>
+					<h2 className="text-2xl font-bold">Documents</h2>
+					<p className="text-sm text-muted-foreground">
+						Collection: {collectionId}
+					</p>
+				</div>
+				<div className="flex gap-2">
+					<Link
+						to="/collections/$collectionId/schema"
+						params={{ collectionId }}
+					>
+						<Button variant="outline">Schema</Button>
+					</Link>
+					<Dialog open={open} onOpenChange={setOpen}>
+						<DialogTrigger asChild>
+							<Button>
+								<Plus className="mr-2 h-4 w-4" />
+								Create Document
+							</Button>
+						</DialogTrigger>
+						<DialogContent>
+							<DialogHeader>
+								<DialogTitle>Create Document</DialogTitle>
+							</DialogHeader>
+							<form
+								onSubmit={(e) => {
+									e.preventDefault();
+									try {
+										JSON.parse(dataJson);
+										createMutation.mutate();
+									} catch {
+										toast.error("Invalid JSON");
+									}
+								}}
+								className="grid gap-4"
+							>
+								<div className="grid gap-2">
+									<Label>Value (JSON)</Label>
+									<Textarea
+										value={dataJson}
+										onChange={(e) => setDataJson(e.target.value)}
+										className="min-h-[200px] font-mono text-sm"
+									/>
+								</div>
+								<DialogFooter>
+									<DialogClose asChild>
+										<Button variant="outline">Cancel</Button>
+									</DialogClose>
+									<Button
+										type="submit"
+										disabled={createMutation.isPending}
+									>
+										{createMutation.isPending ? "Creating..." : "Create"}
+									</Button>
+								</DialogFooter>
+							</form>
+						</DialogContent>
+					</Dialog>
+				</div>
+			</div>
+
+			<Tabs defaultValue="list">
+				<TabsList>
+					<TabsTrigger value="list">List</TabsTrigger>
+				</TabsList>
+				<TabsContent value="list">
+					{isLoading ? (
+						<p className="text-muted-foreground">Loading...</p>
+					) : (
+						<Table>
+							<TableHeader>
+								<TableRow>
+									<TableHead>ID</TableHead>
+									<TableHead>Version</TableHead>
+									<TableHead>Value Preview</TableHead>
+									<TableHead className="w-16" />
+								</TableRow>
+							</TableHeader>
+							<TableBody>
+								{documents?.map((doc) => (
+									<TableRow key={doc.id}>
+										<TableCell>
+											<Link
+												to="/collections/$collectionId/documents/$documentId"
+												params={{
+													collectionId,
+													documentId: doc.id,
+												}}
+												className="font-mono text-sm text-primary hover:underline"
+											>
+												{doc.id}
+											</Link>
+										</TableCell>
+										<TableCell>{doc.version}</TableCell>
+										<TableCell className="max-w-xs truncate font-mono text-xs text-muted-foreground">
+											{JSON.stringify(doc.flat).slice(0, 100)}
+										</TableCell>
+										<TableCell>
+											<AlertDialog>
+												<AlertDialogTrigger asChild>
+													<Button variant="ghost" size="icon">
+														<Trash2 className="h-4 w-4 text-destructive-foreground" />
+													</Button>
+												</AlertDialogTrigger>
+												<AlertDialogContent>
+													<AlertDialogHeader>
+														<AlertDialogTitle>
+															Delete document?
+														</AlertDialogTitle>
+														<AlertDialogDescription>
+															This will permanently delete document "{doc.id}".
+														</AlertDialogDescription>
+													</AlertDialogHeader>
+													<AlertDialogFooter>
+														<AlertDialogCancel>Cancel</AlertDialogCancel>
+														<AlertDialogAction
+															onClick={() =>
+																deleteMutation.mutate(doc.id)
+															}
+														>
+															Delete
+														</AlertDialogAction>
+													</AlertDialogFooter>
+												</AlertDialogContent>
+											</AlertDialog>
+										</TableCell>
+									</TableRow>
+								))}
+								{documents?.length === 0 && (
+									<TableRow>
+										<TableCell
+											colSpan={4}
+											className="text-center text-muted-foreground"
+										>
+											No documents yet.
+										</TableCell>
+									</TableRow>
+								)}
+							</TableBody>
+						</Table>
+					)}
+				</TabsContent>
+			</Tabs>
+		</div>
+	);
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx
new file mode 100644
index 000000000..7ca124214
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx
@@ -0,0 +1,92 @@
+import { useEffect, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { toast } from "sonner";
+
+import { useMimicSdk } from "@/components/sdk-context";
+import { useDatabase } from "@/components/database-context";
+import { Button } from "@/components/ui/button";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Label } from "@/components/ui/label";
+import { Textarea } from "@/components/ui/textarea";
+import { collectionsQuery } from "@/lib/queries";
+
+export const Route = createFileRoute("/_app/_layout/collections/$collectionId/schema")({
+  component: SchemaPage,
+});
+
+function SchemaPage() {
+  const { collectionId } = Route.useParams();
+  const sdk = useMimicSdk();
+  const { selectedDatabaseId } = useDatabase();
+  const queryClient = useQueryClient();
+  const { data: collections } = useQuery({
+    ...collectionsQuery(sdk, selectedDatabaseId ?? ""),
+    enabled: !!selectedDatabaseId,
+  });
+
+  const [schemaJson, setSchemaJson] = useState("{}");
+  const collection = collections?.find((entry) => entry.id === collectionId);
+
+  useEffect(() => {
+    if (!collection) {
+      return;
+    }
+    setSchemaJson(JSON.stringify(collection.schemaJson, null, 2));
+  }, [collection]);
+
+  const updateMutation = useMutation({
+    mutationFn: () => {
+      const parsed = JSON.parse(schemaJson);
+      return sdk.database(selectedDatabaseId ?? "").updateCollectionSchemaRaw(collectionId, parsed);
+    },
+    onSuccess: (result) => {
+      queryClient.invalidateQueries({
+        queryKey: ["collections"],
+      });
+      toast.success(`Schema updated to version ${result.schemaVersion}`);
+    },
+    onError: (err) => toast.error(`Failed to update schema: ${err.message}`),
+  });
+
+  return (
+    <div className="space-y-6">
+      <div>
+        <h2 className="text-2xl font-bold">Collection Schema</h2>
+        <p className="text-sm text-muted-foreground">Collection: {collectionId}</p>
+      </div>
+
+      <Card>
+        <CardHeader>
+          <CardTitle>Update Schema</CardTitle>
+        </CardHeader>
+        <CardContent>
+          <form
+            onSubmit={(e) => {
+              e.preventDefault();
+              try {
+                JSON.parse(schemaJson);
+                updateMutation.mutate();
+              } catch {
+                toast.error("Invalid JSON");
+              }
+            }}
+            className="grid gap-4"
+          >
+            <div className="grid gap-2">
+              <Label>Schema JSON</Label>
+              <Textarea
+                value={schemaJson}
+                onChange={(e) => setSchemaJson(e.target.value)}
+                className="min-h-[300px] font-mono text-sm"
+              />
+            </div>
+            <Button type="submit" disabled={updateMutation.isPending} className="w-fit">
+              {updateMutation.isPending ? "Updating..." : "Update Schema"}
+            </Button>
+          </form>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/databases.tsx b/apps/mimic-admin/src/routes/_app/_layout/databases.tsx
new file mode 100644
index 000000000..027de44dc
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/databases.tsx
@@ -0,0 +1,183 @@
+import { useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Plus, Trash2 } from "lucide-react";
+import { toast } from "sonner";
+
+import { useMimicSdk } from "@/components/sdk-context";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  AlertDialogTrigger,
+} from "@/components/ui/alert-dialog";
+import { Button } from "@/components/ui/button";
+import {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@/components/ui/table";
+import { databasesQuery } from "@/lib/queries";
+
+export const Route = createFileRoute("/_app/_layout/databases")({
+  component: DatabasesPage,
+});
+
+function DatabasesPage() {
+  const sdk = useMimicSdk();
+  const queryClient = useQueryClient();
+  const { data: databases, isLoading } = useQuery(databasesQuery(sdk));
+
+  const [name, setName] = useState("");
+  const [description, setDescription] = useState("");
+  const [open, setOpen] = useState(false);
+
+  const createMutation = useMutation({
+    mutationFn: () => sdk.createDatabase({ name, description }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["databases"] });
+      setName("");
+      setDescription("");
+      setOpen(false);
+      toast.success("Database created");
+    },
+    onError: (err) => toast.error(`Failed to create database: ${err.message}`),
+  });
+
+  const deleteMutation = useMutation({
+    mutationFn: (id: string) => sdk.deleteDatabase(id),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["databases"] });
+      toast.success("Database deleted");
+    },
+    onError: (err) => toast.error(`Failed to delete database: ${err.message}`),
+  });
+
+  return (
+    <div className="space-y-6">
+      <div className="flex items-center justify-between">
+        <h2 className="text-2xl font-bold">Databases</h2>
+        <Dialog open={open} onOpenChange={setOpen}>
+          <DialogTrigger asChild>
+            <Button>
+              <Plus className="mr-2 h-4 w-4" />
+              Create Database
+            </Button>
+          </DialogTrigger>
+          <DialogContent>
+            <DialogHeader>
+              <DialogTitle>Create Database</DialogTitle>
+            </DialogHeader>
+            <form
+              onSubmit={(e) => {
+                e.preventDefault();
+                createMutation.mutate();
+              }}
+              className="grid gap-4"
+            >
+              <div className="grid gap-2">
+                <Label htmlFor="db-name">Name</Label>
+                <Input
+                  id="db-name"
+                  value={name}
+                  onChange={(e) => setName(e.target.value)}
+                  required
+                />
+              </div>
+              <div className="grid gap-2">
+                <Label htmlFor="db-desc">Description (optional)</Label>
+                <Input
+                  id="db-desc"
+                  value={description}
+                  onChange={(e) => setDescription(e.target.value)}
+                />
+              </div>
+              <DialogFooter>
+                <DialogClose asChild>
+                  <Button variant="outline">Cancel</Button>
+                </DialogClose>
+                <Button type="submit" disabled={createMutation.isPending}>
+                  {createMutation.isPending ? "Creating..." : "Create"}
+                </Button>
+              </DialogFooter>
+            </form>
+          </DialogContent>
+        </Dialog>
+      </div>
+
+      {isLoading ? (
+        <p className="text-muted-foreground">Loading...</p>
+      ) : (
+        <Table>
+          <TableHeader>
+            <TableRow>
+              <TableHead>Name</TableHead>
+              <TableHead>Description</TableHead>
+              <TableHead>ID</TableHead>
+              <TableHead className="w-16" />
+            </TableRow>
+          </TableHeader>
+          <TableBody>
+            {databases?.map((db) => (
+              <TableRow key={db.id}>
+                <TableCell className="font-medium">{db.name}</TableCell>
+                <TableCell className="text-muted-foreground">{db.description ?? "-"}</TableCell>
+                <TableCell className="font-mono text-xs text-muted-foreground">{db.id}</TableCell>
+                <TableCell>
+                  <AlertDialog>
+                    <AlertDialogTrigger asChild>
+                      <Button variant="ghost" size="icon">
+                        <Trash2 className="h-4 w-4 text-destructive-foreground" />
+                      </Button>
+                    </AlertDialogTrigger>
+                    <AlertDialogContent>
+                      <AlertDialogHeader>
+                        <AlertDialogTitle>Delete database?</AlertDialogTitle>
+                        <AlertDialogDescription>
+                          This will permanently delete "{db.name}" and all its data. This action
+                          cannot be undone.
+                        </AlertDialogDescription>
+                      </AlertDialogHeader>
+                      <AlertDialogFooter>
+                        <AlertDialogCancel>Cancel</AlertDialogCancel>
+                        <AlertDialogAction onClick={() => deleteMutation.mutate(db.id)}>
+                          Delete
+                        </AlertDialogAction>
+                      </AlertDialogFooter>
+                    </AlertDialogContent>
+                  </AlertDialog>
+                </TableCell>
+              </TableRow>
+            ))}
+            {databases?.length === 0 && (
+              <TableRow>
+                <TableCell colSpan={4} className="text-center text-muted-foreground">
+                  No databases yet.
+                </TableCell>
+              </TableRow>
+            )}
+          </TableBody>
+        </Table>
+      )}
+    </div>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/index.tsx b/apps/mimic-admin/src/routes/_app/_layout/index.tsx
new file mode 100644
index 000000000..748e5ce10
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/index.tsx
@@ -0,0 +1,7 @@
+import { createFileRoute, redirect } from "@tanstack/react-router";
+
+export const Route = createFileRoute("/_app/_layout/")({
+  beforeLoad: () => {
+    throw redirect({ to: "/databases" });
+  },
+});
diff --git a/apps/mimic-admin/src/routes/_app/_layout/migrations.tsx b/apps/mimic-admin/src/routes/_app/_layout/migrations.tsx
new file mode 100644
index 000000000..3b152bbac
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/migrations.tsx
@@ -0,0 +1,905 @@
+import { useEffect, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import {
+  AlertCircle,
+  Braces,
+  CheckCircle2,
+  Code2,
+  DatabaseZap,
+  FlaskConical,
+  PlayCircle,
+  RefreshCw,
+  Replace,
+  Wrench,
+} from "lucide-react";
+import { toast } from "sonner";
+
+import { useMimicSdk } from "@/components/sdk-context";
+import { useDatabase } from "@/components/database-context";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { ScrollArea } from "@/components/ui/scroll-area";
+import { Separator } from "@/components/ui/separator";
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@/components/ui/table";
+import { Textarea } from "@/components/ui/textarea";
+import {
+  databaseMigrationsQuery,
+  databasesQuery,
+  migrationStatusQuery,
+  type MigrationRunState,
+  type UiDatabaseMigration,
+  type UiMigrationChange,
+  type UiMigrationRunReport,
+} from "@/lib/queries";
+
+export const Route = createFileRoute("/_app/_layout/migrations")({
+  component: MigrationsPage,
+});
+
+function formatMigrationVersion(version: number) {
+  return String(version).padStart(5, "0");
+}
+
+function getMigrationSourcePath(migration: { version: number; name: string }) {
+  return `migrations/${formatMigrationVersion(migration.version)}_${migration.name}.ts`;
+}
+
+function formatAppliedAt(value?: string) {
+  if (!value) {
+    return "Unknown";
+  }
+
+  return new Intl.DateTimeFormat(undefined, {
+    dateStyle: "medium",
+    timeStyle: "short",
+  }).format(new Date(value));
+}
+
+function formatChangeTitle(change: UiMigrationChange) {
+  if (change.type === "create") {
+    return change.skipIfExists
+      ? `Create ${change.collection} if missing`
+      : `Create ${change.collection}`;
+  }
+
+  return `Update ${change.collection}`;
+}
+
+function stateBadge(state: MigrationRunState) {
+  const props = (() => {
+    switch (state) {
+      case "succeeded":
+        return { label: "Succeeded", variant: "default" as const };
+      case "running":
+        return { label: "Running", variant: "secondary" as const };
+      case "failed":
+        return { label: "Failed", variant: "destructive" as const };
+      case "replaced":
+        return { label: "Replaced", variant: "outline" as const };
+      default:
+        return { label: "Unknown", variant: "outline" as const };
+    }
+  })();
+  return <Badge variant={props.variant}>{props.label}</Badge>;
+}
+
+// Convert UI shape back to the wire shape the server expects. The runner
+// normalizes everything internally; we just need the JSON-ish fields named
+// the way the wire wants them (`schema`, `oldSchema` instead of
+// `schemaJson`, `oldSchemaJson`).
+function uiChangeToWire(change: UiMigrationChange) {
+  if (change.type === "create") {
+    return {
+      type: "create" as const,
+      collection: change.collection,
+      schema: change.schemaJson,
+      skipIfExists: change.skipIfExists,
+    };
+  }
+  return {
+    type: "update" as const,
+    collection: change.collection,
+    schema: change.schemaJson,
+    oldSchema: change.oldSchemaJson,
+    dataMigrationSource: change.dataMigrationSource,
+  };
+}
+
+function MigrationsPage() {
+  const sdk = useMimicSdk();
+  const queryClient = useQueryClient();
+  const { selectedDatabaseId } = useDatabase();
+  const [selectedVersion, setSelectedVersion] = useState<number | null>(null);
+  const [lastReport, setLastReport] = useState<UiMigrationRunReport | null>(null);
+  const [dryRunSampleLimit, setDryRunSampleLimit] = useState<string>("10");
+  const [dryRunSamplePercent, setDryRunSamplePercent] = useState<string>("");
+  const [batchSize, setBatchSize] = useState<string>("");
+
+  const { data: databases } = useQuery(databasesQuery(sdk));
+  const {
+    data: migrations,
+    isLoading,
+    isError,
+    error,
+  } = useQuery({
+    ...databaseMigrationsQuery(sdk, selectedDatabaseId ?? ""),
+    enabled: !!selectedDatabaseId,
+  });
+
+  const selectedDatabase = databases?.find((database) => database.id === selectedDatabaseId);
+  const typedMigrations = (migrations ?? []) as ReadonlyArray<UiDatabaseMigration>;
+
+  useEffect(() => {
+    if (typedMigrations.length === 0) {
+      setSelectedVersion(null);
+      return;
+    }
+
+    setSelectedVersion((current) =>
+      current !== null && typedMigrations.some((migration) => migration.version === current)
+        ? current
+        : typedMigrations[typedMigrations.length - 1]!.version,
+    );
+  }, [typedMigrations]);
+
+  const selectedMigration =
+    typedMigrations.find((migration) => migration.version === selectedVersion) ??
+    typedMigrations[typedMigrations.length - 1];
+
+  const { data: status, isFetching: statusFetching } = useQuery({
+    ...migrationStatusQuery(sdk, selectedDatabaseId ?? "", selectedMigration?.version ?? null),
+    enabled: !!selectedDatabaseId && !!selectedMigration,
+  });
+
+  const refresh = () => {
+    if (!selectedDatabaseId) {
+      return;
+    }
+    queryClient.invalidateQueries({
+      queryKey: ["database-migrations", selectedDatabaseId],
+    });
+    queryClient.invalidateQueries({
+      queryKey: ["migration-status", selectedDatabaseId],
+    });
+  };
+
+  const parsedBatchSize = batchSize.trim() === "" ? undefined : Number(batchSize);
+  const parsedSampleLimit = dryRunSampleLimit.trim() === "" ? undefined : Number(dryRunSampleLimit);
+  const parsedSamplePercent =
+    dryRunSamplePercent.trim() === "" ? undefined : Number(dryRunSamplePercent);
+
+  const rerunMutation = useMutation({
+    mutationFn: async () => {
+      if (!selectedDatabaseId || !selectedMigration?.changes) {
+        throw new Error("No selected migration with changes");
+      }
+      const handle = sdk.database(selectedDatabaseId);
+      return handle.applyMigration({
+        version: selectedMigration.version,
+        name: selectedMigration.name,
+        checksum: selectedMigration.checksum,
+        changes: selectedMigration.changes.map(uiChangeToWire),
+        mode: "rerun",
+        batchSize: parsedBatchSize,
+      });
+    },
+    onSuccess: (report) => {
+      setLastReport(report as unknown as UiMigrationRunReport);
+      refresh();
+      if (report.state === "succeeded") {
+        toast.success(`Rerun succeeded (${report.succeeded} migrated, ${report.skipped} skipped).`);
+      } else {
+        toast.error(`Rerun finished with ${report.failed} failure(s). See report below.`);
+      }
+    },
+    onError: (err: Error) => toast.error(`Rerun failed: ${err.message}`),
+  });
+
+  const dryRunMutation = useMutation({
+    mutationFn: async () => {
+      if (!selectedDatabaseId || !selectedMigration?.changes) {
+        throw new Error("No selected migration with changes");
+      }
+      const handle = sdk.database(selectedDatabaseId);
+      return handle.applyMigration({
+        version: selectedMigration.version,
+        name: selectedMigration.name,
+        checksum: selectedMigration.checksum,
+        changes: selectedMigration.changes.map(uiChangeToWire),
+        mode: "apply",
+        dryRun: {
+          limit: parsedSampleLimit,
+          samplePercent: parsedSamplePercent,
+        },
+        batchSize: parsedBatchSize,
+      });
+    },
+    onSuccess: (report) => {
+      setLastReport(report as unknown as UiMigrationRunReport);
+      if (report.state === "succeeded") {
+        toast.success(
+          `Dry run succeeded against ${report.succeeded + report.failed + report.skipped} sampled doc(s).`,
+        );
+      } else {
+        toast.error(`Dry run reported ${report.failed} failure(s). See report below.`);
+      }
+    },
+    onError: (err: Error) => toast.error(`Dry run failed: ${err.message}`),
+  });
+
+  if (!selectedDatabaseId) {
+    return (
+      <div className="space-y-6">
+        <h2 className="text-2xl font-bold">Migrations</h2>
+        <Card>
+          <CardHeader>
+            <CardTitle>Select a database</CardTitle>
+            <CardDescription>
+              Migrations are database-specific. Pick a database from the sidebar to inspect its
+              applied migrations.
+            </CardDescription>
+          </CardHeader>
+        </Card>
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-6">
+      <div className="flex flex-col gap-3 md:flex-row md:items-end md:justify-between">
+        <div className="space-y-1">
+          <h2 className="text-2xl font-bold">Migrations</h2>
+          <p className="text-sm text-muted-foreground">
+            Inspect, retry, dry-run, and replace migrations for{" "}
+            <span className="font-medium text-foreground">
+              {selectedDatabase?.name ?? selectedDatabaseId}
+            </span>
+            .
+          </p>
+        </div>
+        <div className="flex items-center gap-2">
+          <Button variant="outline" size="sm" onClick={refresh}>
+            <RefreshCw className="mr-2 h-4 w-4" /> Refresh
+          </Button>
+          <Badge variant="secondary">
+            {typedMigrations.length} migration
+            {typedMigrations.length === 1 ? "" : "s"}
+          </Badge>
+        </div>
+      </div>
+
+      {isLoading ? (
+        <p className="text-muted-foreground">Loading migrations...</p>
+      ) : isError ? (
+        <p className="text-destructive">Failed to load migrations: {error.message}</p>
+      ) : typedMigrations.length === 0 ? (
+        <Card>
+          <CardHeader>
+            <CardTitle>No applied migrations</CardTitle>
+            <CardDescription>
+              This database does not have any applied migrations yet.
+            </CardDescription>
+          </CardHeader>
+        </Card>
+      ) : (
+        <div className="grid gap-6 xl:grid-cols-[320px_minmax(0,1fr)]">
+          <Card>
+            <CardHeader>
+              <CardTitle>Applied Migrations</CardTitle>
+              <CardDescription>
+                Select a migration to inspect its run state and stored payload.
+              </CardDescription>
+            </CardHeader>
+            <CardContent className="space-y-2">
+              {typedMigrations.map((migration) => {
+                const isActive = migration.version === selectedMigration?.version;
+                return (
+                  <Button
+                    key={migration.version}
+                    type="button"
+                    variant={isActive ? "secondary" : "ghost"}
+                    className="h-auto w-full justify-start px-3 py-3 text-left"
+                    onClick={() => setSelectedVersion(migration.version)}
+                  >
+                    <div className="space-y-1 w-full">
+                      <div className="flex items-center justify-between">
+                        <div className="font-mono text-xs text-muted-foreground">
+                          {formatMigrationVersion(migration.version)}
+                        </div>
+                        {stateBadge(migration.state)}
+                      </div>
+                      <div className="font-medium">{migration.name}</div>
+                      <div className="text-xs text-muted-foreground">
+                        {formatAppliedAt(migration.appliedAt)}
+                      </div>
+                      {migration.totalDocuments > 0 ? (
+                        <div className="text-xs text-muted-foreground">
+                          {migration.succeededDocuments}/{migration.totalDocuments} docs
+                          {migration.failedDocuments > 0
+                            ? ` · ${migration.failedDocuments} failed`
+                            : ""}
+                        </div>
+                      ) : null}
+                    </div>
+                  </Button>
+                );
+              })}
+            </CardContent>
+          </Card>
+
+          {selectedMigration ? (
+            <div className="space-y-6">
+              <Card>
+                <CardHeader>
+                  <CardTitle className="flex items-center gap-2">
+                    <DatabaseZap className="h-5 w-5" />
+                    {formatMigrationVersion(selectedMigration.version)}_{selectedMigration.name}
+                  </CardTitle>
+                  <CardDescription>Stored migration record and run state.</CardDescription>
+                </CardHeader>
+                <CardContent className="grid gap-4 md:grid-cols-2">
+                  <div className="space-y-1">
+                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                      State
+                    </div>
+                    <div className="text-sm">{stateBadge(selectedMigration.state)}</div>
+                  </div>
+                  <div className="space-y-1">
+                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                      Documents
+                    </div>
+                    <div className="text-sm">
+                      {selectedMigration.succeededDocuments}/{selectedMigration.totalDocuments}{" "}
+                      succeeded
+                      {selectedMigration.failedDocuments > 0
+                        ? ` · ${selectedMigration.failedDocuments} failed`
+                        : ""}
+                    </div>
+                  </div>
+                  <div className="space-y-1">
+                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                      Source file
+                    </div>
+                    <div className="font-mono text-sm">
+                      {getMigrationSourcePath(selectedMigration)}
+                    </div>
+                  </div>
+                  <div className="space-y-1">
+                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                      Applied at
+                    </div>
+                    <div className="text-sm">{formatAppliedAt(selectedMigration.appliedAt)}</div>
+                  </div>
+                  <div className="space-y-1 md:col-span-2">
+                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                      Checksum
+                    </div>
+                    <div className="break-all font-mono text-xs text-muted-foreground">
+                      {selectedMigration.checksum}
+                    </div>
+                  </div>
+                </CardContent>
+              </Card>
+
+              <Card>
+                <CardHeader>
+                  <CardTitle className="flex items-center gap-2">
+                    <Wrench className="h-5 w-5" />
+                    Run Actions
+                  </CardTitle>
+                  <CardDescription>
+                    Re-run failed/pending docs, simulate against a sample, or install a fixed
+                    version under a new checksum.
+                  </CardDescription>
+                </CardHeader>
+                <CardContent className="space-y-4">
+                  <div className="grid gap-3 sm:grid-cols-3">
+                    <div className="space-y-1">
+                      <Label htmlFor="batch-size">Batch size</Label>
+                      <Input
+                        id="batch-size"
+                        type="number"
+                        min={1}
+                        placeholder="default"
+                        value={batchSize}
+                        onChange={(event) => setBatchSize(event.target.value)}
+                      />
+                    </div>
+                    <div className="space-y-1">
+                      <Label htmlFor="sample-limit">Dry-run sample limit</Label>
+                      <Input
+                        id="sample-limit"
+                        type="number"
+                        min={0}
+                        placeholder="e.g. 10"
+                        value={dryRunSampleLimit}
+                        onChange={(event) => setDryRunSampleLimit(event.target.value)}
+                      />
+                    </div>
+                    <div className="space-y-1">
+                      <Label htmlFor="sample-percent">Dry-run sample percent</Label>
+                      <Input
+                        id="sample-percent"
+                        type="number"
+                        min={0}
+                        max={100}
+                        placeholder="e.g. 25"
+                        value={dryRunSamplePercent}
+                        onChange={(event) => setDryRunSamplePercent(event.target.value)}
+                      />
+                    </div>
+                  </div>
+
+                  <div className="flex flex-wrap gap-2">
+                    <Button
+                      variant="default"
+                      disabled={!selectedMigration.changes || rerunMutation.isPending}
+                      onClick={() => rerunMutation.mutate()}
+                    >
+                      <PlayCircle className="mr-2 h-4 w-4" />
+                      {rerunMutation.isPending ? "Rerunning..." : "Rerun"}
+                    </Button>
+                    <Button
+                      variant="outline"
+                      disabled={!selectedMigration.changes || dryRunMutation.isPending}
+                      onClick={() => dryRunMutation.mutate()}
+                    >
+                      <FlaskConical className="mr-2 h-4 w-4" />
+                      {dryRunMutation.isPending ? "Running..." : "Dry-run on sample"}
+                    </Button>
+                    <ReplaceMigrationDialog
+                      selectedDatabaseId={selectedDatabaseId}
+                      selectedMigration={selectedMigration}
+                      parsedBatchSize={parsedBatchSize}
+                      onCompleted={(report) => {
+                        setLastReport(report);
+                        refresh();
+                      }}
+                    />
+                  </div>
+
+                  {!selectedMigration.changes ? (
+                    <p className="text-xs text-muted-foreground">
+                      This migration was applied before the server stored the change payload. Rerun
+                      and dry-run are unavailable.
+                    </p>
+                  ) : null}
+                </CardContent>
+              </Card>
+
+              <MigrationStatusCard status={status ?? null} isFetching={statusFetching} />
+
+              {lastReport ? <RunReportCard report={lastReport} /> : null}
+
+              <Card>
+                <CardHeader>
+                  <CardTitle className="flex items-center gap-2">
+                    <Braces className="h-5 w-5" />
+                    Applied Change Payload
+                  </CardTitle>
+                  <CardDescription>
+                    Raw stored migration changes returned by the server.
+                  </CardDescription>
+                </CardHeader>
+                <CardContent>
+                  <ScrollArea className="h-80 rounded-md border">
+                    <pre className="p-4 text-xs">
+                      {JSON.stringify(selectedMigration.changes ?? null, null, 2)}
+                    </pre>
+                  </ScrollArea>
+                </CardContent>
+              </Card>
+
+              {selectedMigration.changes?.map((change, index) => (
+                <Card key={`${selectedMigration.version}-${change.collection}-${index}`}>
+                  <CardHeader>
+                    <CardTitle>{formatChangeTitle(change)}</CardTitle>
+                    <CardDescription>
+                      Collection <span className="font-mono">{change.collection}</span>
+                    </CardDescription>
+                  </CardHeader>
+                  <CardContent className="space-y-4">
+                    <div className="grid gap-4 lg:grid-cols-2">
+                      <div className="space-y-2">
+                        <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                          New schema JSON
+                        </div>
+                        <ScrollArea className="h-64 rounded-md border">
+                          <pre className="p-4 text-xs">
+                            {JSON.stringify(change.schemaJson, null, 2)}
+                          </pre>
+                        </ScrollArea>
+                      </div>
+
+                      {"oldSchemaJson" in change && change.oldSchemaJson !== undefined ? (
+                        <div className="space-y-2">
+                          <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                            Previous schema JSON
+                          </div>
+                          <ScrollArea className="h-64 rounded-md border">
+                            <pre className="p-4 text-xs">
+                              {JSON.stringify(change.oldSchemaJson, null, 2)}
+                            </pre>
+                          </ScrollArea>
+                        </div>
+                      ) : null}
+                    </div>
+
+                    {"dataMigrationSource" in change ? (
+                      change.dataMigrationSource ? (
+                        <div className="space-y-2">
+                          <div className="flex items-center gap-2 text-xs uppercase tracking-wide text-muted-foreground">
+                            <Code2 className="h-4 w-4" />
+                            Bundled data migration source
+                          </div>
+                          <ScrollArea className="h-96 rounded-md border bg-muted/30">
+                            <pre className="p-4 text-xs">{change.dataMigrationSource}</pre>
+                          </ScrollArea>
+                        </div>
+                      ) : (
+                        <p className="text-sm text-muted-foreground">
+                          This schema update did not include a bundled data migration source.
+                        </p>
+                      )
+                    ) : null}
+                  </CardContent>
+                </Card>
+              ))}
+
+              {!selectedMigration.changes && (
+                <Card>
+                  <CardHeader>
+                    <CardTitle>Bundled source unavailable</CardTitle>
+                    <CardDescription>
+                      This migration was applied before the server started storing applied change
+                      payloads.
+                    </CardDescription>
+                  </CardHeader>
+                </Card>
+              )}
+            </div>
+          ) : null}
+        </div>
+      )}
+    </div>
+  );
+}
+
+function MigrationStatusCard({
+  status,
+  isFetching,
+}: {
+  status: import("@/lib/queries").UiMigrationStatus | null;
+  isFetching: boolean;
+}) {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="flex items-center gap-2">
+          <CheckCircle2 className="h-5 w-5" />
+          Per-Document Status
+        </CardTitle>
+        <CardDescription>
+          Live counts and failure list pulled from{" "}
+          <code className="font-mono">getMigrationStatus</code>.
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        {isFetching && !status ? (
+          <p className="text-sm text-muted-foreground">Loading status...</p>
+        ) : status ? (
+          <>
+            <div className="flex flex-wrap gap-2">
+              <StatusChip label="Succeeded" value={status.summary.succeeded} tone="success" />
+              <StatusChip label="Failed" value={status.summary.failed} tone="destructive" />
+              <StatusChip label="Pending" value={status.summary.pending} />
+              <StatusChip label="Running" value={status.summary.running} />
+              <StatusChip label="Skipped" value={status.summary.skipped} />
+            </div>
+            <Separator />
+            {status.failures.length === 0 ? (
+              <p className="text-sm text-muted-foreground">No failed documents.</p>
+            ) : (
+              <div className="space-y-2">
+                <div className="text-xs uppercase tracking-wide text-muted-foreground">
+                  Failures ({status.failures.length})
+                </div>
+                <Table>
+                  <TableHeader>
+                    <TableRow>
+                      <TableHead>Document</TableHead>
+                      <TableHead>Attempt</TableHead>
+                      <TableHead>Code</TableHead>
+                      <TableHead>Message</TableHead>
+                    </TableRow>
+                  </TableHeader>
+                  <TableBody>
+                    {status.failures.map((failure) => (
+                      <TableRow key={failure.documentId}>
+                        <TableCell className="font-mono text-xs">{failure.documentId}</TableCell>
+                        <TableCell>{failure.attempt}</TableCell>
+                        <TableCell className="font-mono text-xs">
+                          {failure.errorCode ?? "-"}
+                        </TableCell>
+                        <TableCell className="text-xs text-destructive">
+                          {failure.errorMessage ?? "-"}
+                        </TableCell>
+                      </TableRow>
+                    ))}
+                  </TableBody>
+                </Table>
+              </div>
+            )}
+          </>
+        ) : (
+          <p className="text-sm text-muted-foreground">Status not available.</p>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
+
+function StatusChip({
+  label,
+  value,
+  tone,
+}: {
+  label: string;
+  value: number;
+  tone?: "success" | "destructive";
+}) {
+  const variant: "default" | "destructive" | "outline" =
+    tone === "success"
+      ? value > 0
+        ? "default"
+        : "outline"
+      : tone === "destructive"
+        ? value > 0
+          ? "destructive"
+          : "outline"
+        : "outline";
+  return (
+    <Badge variant={variant}>
+      {label}: {value}
+    </Badge>
+  );
+}
+
+function RunReportCard({ report }: { report: UiMigrationRunReport }) {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="flex items-center gap-2">
+          {report.state === "succeeded" ? (
+            <CheckCircle2 className="h-5 w-5" />
+          ) : (
+            <AlertCircle className="h-5 w-5" />
+          )}
+          Last Run Report{report.dryRun ? " (dry-run)" : ""}
+        </CardTitle>
+        <CardDescription>Outcome of the most-recent rerun, dry-run, or replace.</CardDescription>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        <div className="flex flex-wrap gap-2">
+          <Badge variant={report.state === "succeeded" ? "default" : "destructive"}>
+            {report.state}
+          </Badge>
+          <StatusChip label="Succeeded" value={report.succeeded} tone="success" />
+          <StatusChip label="Failed" value={report.failed} tone="destructive" />
+          <StatusChip label="Skipped" value={report.skipped} />
+        </div>
+        {report.perDocument.some((entry) => entry.status === "failed") ? (
+          <div className="space-y-2">
+            <div className="text-xs uppercase tracking-wide text-muted-foreground">
+              Failed in this run
+            </div>
+            <Table>
+              <TableHeader>
+                <TableRow>
+                  <TableHead>Document</TableHead>
+                  <TableHead>Code</TableHead>
+                  <TableHead>Message</TableHead>
+                </TableRow>
+              </TableHeader>
+              <TableBody>
+                {report.perDocument
+                  .filter((entry) => entry.status === "failed")
+                  .map((entry) => (
+                    <TableRow key={`${entry.collectionId}:${entry.documentId}`}>
+                      <TableCell className="font-mono text-xs">{entry.documentId}</TableCell>
+                      <TableCell className="font-mono text-xs">{entry.errorCode ?? "-"}</TableCell>
+                      <TableCell className="text-xs text-destructive">
+                        {entry.errorMessage ?? "-"}
+                      </TableCell>
+                    </TableRow>
+                  ))}
+              </TableBody>
+            </Table>
+          </div>
+        ) : null}
+      </CardContent>
+    </Card>
+  );
+}
+
+function ReplaceMigrationDialog({
+  selectedDatabaseId,
+  selectedMigration,
+  parsedBatchSize,
+  onCompleted,
+}: {
+  selectedDatabaseId: string;
+  selectedMigration: UiDatabaseMigration;
+  parsedBatchSize: number | undefined;
+  onCompleted: (report: UiMigrationRunReport) => void;
+}) {
+  const sdk = useMimicSdk();
+  const [open, setOpen] = useState(false);
+  const [newName, setNewName] = useState(selectedMigration.name);
+  const [newChecksum, setNewChecksum] = useState("");
+  const [redoSucceeded, setRedoSucceeded] = useState(false);
+  const [changesJson, setChangesJson] = useState("");
+
+  useEffect(() => {
+    if (!open) {
+      return;
+    }
+    setNewName(selectedMigration.name);
+    setNewChecksum("");
+    setRedoSucceeded(false);
+    setChangesJson(
+      JSON.stringify(
+        selectedMigration.changes?.map((change) => uiChangeToWire(change)) ?? [],
+        null,
+        2,
+      ),
+    );
+  }, [open, selectedMigration]);
+
+  const replaceMutation = useMutation({
+    mutationFn: async () => {
+      let parsed: unknown;
+      try {
+        parsed = JSON.parse(changesJson);
+      } catch (err) {
+        throw new Error(
+          `Changes JSON is not valid: ${err instanceof Error ? err.message : String(err)}`,
+        );
+      }
+      if (!Array.isArray(parsed)) {
+        throw new Error("Changes JSON must be an array.");
+      }
+      if (newChecksum.trim() === "") {
+        throw new Error("New checksum is required.");
+      }
+      if (newChecksum === selectedMigration.checksum) {
+        throw new Error("New checksum must differ from the current migration checksum.");
+      }
+      return sdk.database(selectedDatabaseId).applyMigration({
+        version: selectedMigration.version,
+        name: newName,
+        checksum: newChecksum,
+        changes: parsed as never,
+        mode: "replace",
+        batchSize: parsedBatchSize,
+        redoSucceededOnReplace: redoSucceeded,
+      });
+    },
+    onSuccess: (report) => {
+      onCompleted(report as unknown as UiMigrationRunReport);
+      setOpen(false);
+      if (report.state === "succeeded") {
+        toast.success(
+          `Replace succeeded (${report.succeeded} migrated, ${report.skipped} skipped).`,
+        );
+      } else {
+        toast.error(`Replace finished with ${report.failed} failure(s). See report below.`);
+      }
+    },
+    onError: (err: Error) => toast.error(`Replace failed: ${err.message}`),
+  });
+
+  return (
+    <Dialog open={open} onOpenChange={setOpen}>
+      <DialogTrigger asChild>
+        <Button variant="outline" disabled={!selectedMigration.changes}>
+          <Replace className="mr-2 h-4 w-4" />
+          Replace...
+        </Button>
+      </DialogTrigger>
+      <DialogContent className="max-w-3xl">
+        <DialogHeader>
+          <DialogTitle>
+            Replace migration {formatMigrationVersion(selectedMigration.version)}
+          </DialogTitle>
+          <DialogDescription>
+            Install a fixed version of this migration under a new checksum. Failed and pending docs
+            are reset and re-applied. Toggle <em>redo succeeded</em> to also re-process docs that
+            already completed under the old checksum.
+          </DialogDescription>
+        </DialogHeader>
+        <form
+          className="grid gap-4"
+          onSubmit={(event) => {
+            event.preventDefault();
+            replaceMutation.mutate();
+          }}
+        >
+          <div className="grid gap-2">
+            <Label htmlFor="replace-name">Name</Label>
+            <Input
+              id="replace-name"
+              value={newName}
+              onChange={(event) => setNewName(event.target.value)}
+              required
+            />
+          </div>
+          <div className="grid gap-2">
+            <Label htmlFor="replace-checksum">New checksum</Label>
+            <Input
+              id="replace-checksum"
+              value={newChecksum}
+              placeholder={`differ from ${selectedMigration.checksum}`}
+              onChange={(event) => setNewChecksum(event.target.value)}
+              required
+            />
+          </div>
+          <div className="grid gap-2">
+            <Label htmlFor="replace-changes">Changes JSON</Label>
+            <Textarea
+              id="replace-changes"
+              className="font-mono text-xs"
+              rows={14}
+              value={changesJson}
+              onChange={(event) => setChangesJson(event.target.value)}
+              required
+            />
+            <p className="text-xs text-muted-foreground">
+              Wire format. The migration runner normalizes server-side. Pre-filled with the existing
+              change payload.
+            </p>
+          </div>
+          <label className="flex items-center gap-2 text-sm">
+            <input
+              type="checkbox"
+              checked={redoSucceeded}
+              onChange={(event) => setRedoSucceeded(event.target.checked)}
+            />
+            <span>Redo already-succeeded documents</span>
+          </label>
+          <DialogFooter>
+            <DialogClose asChild>
+              <Button type="button" variant="outline">
+                Cancel
+              </Button>
+            </DialogClose>
+            <Button type="submit" disabled={replaceMutation.isPending}>
+              {replaceMutation.isPending ? "Replacing..." : "Replace"}
+            </Button>
+          </DialogFooter>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/observability.tsx b/apps/mimic-admin/src/routes/_app/_layout/observability.tsx
new file mode 100644
index 000000000..bf27866a2
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/observability.tsx
@@ -0,0 +1,30 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { Activity } from "lucide-react";
+
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+
+export const Route = createFileRoute("/_app/_layout/observability")({
+  component: ObservabilityPage,
+});
+
+function ObservabilityPage() {
+  return (
+    <div className="space-y-6">
+      <h2 className="text-2xl font-bold">Observability</h2>
+      <Card>
+        <CardHeader>
+          <CardTitle className="flex items-center gap-2">
+            <Activity className="h-5 w-5" />
+            Health Check
+          </CardTitle>
+          <CardDescription>Observability features coming soon.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p className="text-sm text-muted-foreground">
+            This page will display server health, metrics, and logs.
+          </p>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/route.tsx b/apps/mimic-admin/src/routes/_app/_layout/route.tsx
new file mode 100644
index 000000000..b9737abd1
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/route.tsx
@@ -0,0 +1,21 @@
+import { Outlet, createFileRoute } from "@tanstack/react-router";
+
+import { AppSidebar } from "@/components/app-sidebar";
+import { DatabaseProvider } from "@/components/database-context";
+
+export const Route = createFileRoute("/_app/_layout")({
+  component: LayoutRoute,
+});
+
+function LayoutRoute() {
+  return (
+    <DatabaseProvider>
+      <div className="flex h-screen">
+        <AppSidebar />
+        <main className="flex-1 overflow-auto p-6">
+          <Outlet />
+        </main>
+      </div>
+    </DatabaseProvider>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/_app/_layout/users.tsx b/apps/mimic-admin/src/routes/_app/_layout/users.tsx
new file mode 100644
index 000000000..eea9fb6f6
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/_layout/users.tsx
@@ -0,0 +1,320 @@
+import { useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { ChevronDown, ChevronRight, Plus, Trash2 } from "lucide-react";
+import { toast } from "sonner";
+
+import { useMimicSdk } from "@/components/sdk-context";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  AlertDialogTrigger,
+} from "@/components/ui/alert-dialog";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import {
+  Dialog,
+  DialogClose,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@/components/ui/table";
+import { databasesQuery, grantsQuery, usersQuery } from "@/lib/queries";
+
+export const Route = createFileRoute("/_app/_layout/users")({
+  component: UsersPage,
+});
+
+function UsersPage() {
+  const sdk = useMimicSdk();
+  const queryClient = useQueryClient();
+  const { data: users, isLoading } = useQuery(usersQuery(sdk));
+
+  const [username, setUsername] = useState("");
+  const [password, setPassword] = useState("");
+  const [open, setOpen] = useState(false);
+
+  const createMutation = useMutation({
+    mutationFn: () => sdk.createUser({ username, password }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["users"] });
+      setUsername("");
+      setPassword("");
+      setOpen(false);
+      toast.success("User created");
+    },
+    onError: (err) => toast.error(`Failed to create user: ${err.message}`),
+  });
+
+  const deleteMutation = useMutation({
+    mutationFn: (id: string) => sdk.deleteUser(id),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["users"] });
+      toast.success("User deleted");
+    },
+    onError: (err) => toast.error(`Failed to delete user: ${err.message}`),
+  });
+
+  return (
+    <div className="space-y-6">
+      <div className="flex items-center justify-between">
+        <h2 className="text-2xl font-bold">Users</h2>
+        <Dialog open={open} onOpenChange={setOpen}>
+          <DialogTrigger asChild>
+            <Button>
+              <Plus className="mr-2 h-4 w-4" />
+              Create User
+            </Button>
+          </DialogTrigger>
+          <DialogContent>
+            <DialogHeader>
+              <DialogTitle>Create User</DialogTitle>
+            </DialogHeader>
+            <form
+              onSubmit={(e) => {
+                e.preventDefault();
+                createMutation.mutate();
+              }}
+              className="grid gap-4"
+            >
+              <div className="grid gap-2">
+                <Label htmlFor="u-name">Username</Label>
+                <Input
+                  id="u-name"
+                  value={username}
+                  onChange={(e) => setUsername(e.target.value)}
+                  required
+                />
+              </div>
+              <div className="grid gap-2">
+                <Label htmlFor="u-pass">Password</Label>
+                <Input
+                  id="u-pass"
+                  type="password"
+                  value={password}
+                  onChange={(e) => setPassword(e.target.value)}
+                  required
+                />
+              </div>
+              <DialogFooter>
+                <DialogClose asChild>
+                  <Button variant="outline">Cancel</Button>
+                </DialogClose>
+                <Button type="submit" disabled={createMutation.isPending}>
+                  {createMutation.isPending ? "Creating..." : "Create"}
+                </Button>
+              </DialogFooter>
+            </form>
+          </DialogContent>
+        </Dialog>
+      </div>
+
+      {isLoading ? (
+        <p className="text-muted-foreground">Loading...</p>
+      ) : (
+        <Table>
+          <TableHeader>
+            <TableRow>
+              <TableHead className="w-8" />
+              <TableHead>Username</TableHead>
+              <TableHead>Role</TableHead>
+              <TableHead>ID</TableHead>
+              <TableHead className="w-16" />
+            </TableRow>
+          </TableHeader>
+          <TableBody>
+            {users?.map((user) => (
+              <UserRow key={user.id} user={user} onDelete={() => deleteMutation.mutate(user.id)} />
+            ))}
+            {users?.length === 0 && (
+              <TableRow>
+                <TableCell colSpan={5} className="text-center text-muted-foreground">
+                  No users yet.
+                </TableCell>
+              </TableRow>
+            )}
+          </TableBody>
+        </Table>
+      )}
+    </div>
+  );
+}
+
+function UserRow({
+  user,
+  onDelete,
+}: {
+  user: { id: string; username: string; isSuperuser: boolean };
+  onDelete: () => void;
+}) {
+  const sdk = useMimicSdk();
+  const queryClient = useQueryClient();
+  const [expanded, setExpanded] = useState(false);
+  const { data: grants } = useQuery({
+    ...grantsQuery(sdk, user.id),
+    enabled: expanded,
+  });
+  const { data: databases } = useQuery({
+    ...databasesQuery(sdk),
+    enabled: expanded,
+  });
+
+  const [grantDbId, setGrantDbId] = useState("");
+  const [grantPerm, setGrantPerm] = useState<"read" | "write" | "admin">("read");
+
+  const grantMutation = useMutation({
+    mutationFn: () =>
+      sdk.grantPermission({
+        userId: user.id,
+        databaseId: grantDbId,
+        permission: grantPerm,
+      }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["grants", user.id] });
+      setGrantDbId("");
+      toast.success("Permission granted");
+    },
+    onError: (err) => toast.error(`Failed to grant: ${err.message}`),
+  });
+
+  const revokeMutation = useMutation({
+    mutationFn: (databaseId: string) => sdk.revokePermission({ userId: user.id, databaseId }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["grants", user.id] });
+      toast.success("Permission revoked");
+    },
+    onError: (err) => toast.error(`Failed to revoke: ${err.message}`),
+  });
+
+  return (
+    <>
+      <TableRow>
+        <TableCell>
+          <Button variant="ghost" size="icon" onClick={() => setExpanded(!expanded)}>
+            {expanded ? <ChevronDown className="h-4 w-4" /> : <ChevronRight className="h-4 w-4" />}
+          </Button>
+        </TableCell>
+        <TableCell className="font-medium">{user.username}</TableCell>
+        <TableCell>
+          {user.isSuperuser ? <Badge>Superuser</Badge> : <Badge variant="secondary">User</Badge>}
+        </TableCell>
+        <TableCell className="font-mono text-xs text-muted-foreground">{user.id}</TableCell>
+        <TableCell>
+          <AlertDialog>
+            <AlertDialogTrigger asChild>
+              <Button variant="ghost" size="icon">
+                <Trash2 className="h-4 w-4 text-destructive-foreground" />
+              </Button>
+            </AlertDialogTrigger>
+            <AlertDialogContent>
+              <AlertDialogHeader>
+                <AlertDialogTitle>Delete user?</AlertDialogTitle>
+                <AlertDialogDescription>
+                  This will permanently delete "{user.username}".
+                </AlertDialogDescription>
+              </AlertDialogHeader>
+              <AlertDialogFooter>
+                <AlertDialogCancel>Cancel</AlertDialogCancel>
+                <AlertDialogAction onClick={onDelete}>Delete</AlertDialogAction>
+              </AlertDialogFooter>
+            </AlertDialogContent>
+          </AlertDialog>
+        </TableCell>
+      </TableRow>
+      {expanded && (
+        <TableRow>
+          <TableCell colSpan={5} className="bg-muted/30 px-8 py-4">
+            <div className="space-y-4">
+              <h4 className="text-sm font-semibold">Grants</h4>
+              {grants && grants.length > 0 ? (
+                <div className="space-y-2">
+                  {grants.map((g) => (
+                    <div key={g.id} className="flex items-center gap-4 text-sm">
+                      <span className="font-mono text-xs">{g.databaseId}</span>
+                      <Badge variant="outline">{g.permission}</Badge>
+                      <Button
+                        variant="ghost"
+                        size="sm"
+                        onClick={() => revokeMutation.mutate(g.databaseId)}
+                      >
+                        Revoke
+                      </Button>
+                    </div>
+                  ))}
+                </div>
+              ) : (
+                <p className="text-sm text-muted-foreground">No grants.</p>
+              )}
+
+              <div className="flex items-end gap-2">
+                <div className="grid gap-1">
+                  <Label className="text-xs">Database</Label>
+                  <Select value={grantDbId} onValueChange={setGrantDbId}>
+                    <SelectTrigger className="w-48">
+                      <SelectValue placeholder="Select database" />
+                    </SelectTrigger>
+                    <SelectContent>
+                      {databases?.map((db) => (
+                        <SelectItem key={db.id} value={db.id}>
+                          {db.name}
+                        </SelectItem>
+                      ))}
+                    </SelectContent>
+                  </Select>
+                </div>
+                <div className="grid gap-1">
+                  <Label className="text-xs">Permission</Label>
+                  <Select
+                    value={grantPerm}
+                    onValueChange={(v) => setGrantPerm(v as "read" | "write" | "admin")}
+                  >
+                    <SelectTrigger className="w-28">
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="read">read</SelectItem>
+                      <SelectItem value="write">write</SelectItem>
+                      <SelectItem value="admin">admin</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+                <Button
+                  size="sm"
+                  disabled={!grantDbId || grantMutation.isPending}
+                  onClick={() => grantMutation.mutate()}
+                >
+                  Grant
+                </Button>
+              </div>
+            </div>
+          </TableCell>
+        </TableRow>
+      )}
+    </>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/_app/route.tsx b/apps/mimic-admin/src/routes/_app/route.tsx
new file mode 100644
index 000000000..ca39a84b2
--- /dev/null
+++ b/apps/mimic-admin/src/routes/_app/route.tsx
@@ -0,0 +1,27 @@
+import { Outlet, createFileRoute, redirect } from "@tanstack/react-router";
+
+import { AuthProvider } from "@/components/auth-context";
+import { MimicSdkProvider } from "@/components/sdk-context";
+import { getCredentials } from "@/lib/auth";
+
+export const Route = createFileRoute("/_app")({
+  beforeLoad: () => {
+    const credentials = getCredentials();
+    if (!credentials) {
+      throw redirect({ to: "/login" });
+    }
+    return { credentials };
+  },
+  component: AppLayout,
+});
+
+function AppLayout() {
+  const { credentials } = Route.useRouteContext();
+  return (
+    <AuthProvider credentials={credentials}>
+      <MimicSdkProvider credentials={credentials}>
+        <Outlet />
+      </MimicSdkProvider>
+    </AuthProvider>
+  );
+}
diff --git a/apps/mimic-admin/src/routes/login.tsx b/apps/mimic-admin/src/routes/login.tsx
new file mode 100644
index 000000000..3bb809e79
--- /dev/null
+++ b/apps/mimic-admin/src/routes/login.tsx
@@ -0,0 +1,96 @@
+import { useState } from "react";
+import { createFileRoute, useNavigate } from "@tanstack/react-router";
+import { MimicSDK } from "@voidhash/mimic-server";
+import { toast } from "sonner";
+
+import { Button } from "@/components/ui/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { setCredentials } from "@/lib/auth";
+
+export const Route = createFileRoute("/login")({
+  component: LoginPage,
+});
+
+function LoginPage() {
+  const navigate = useNavigate();
+  const [serverUrl, setServerUrl] = useState("http://localhost:5001");
+  const [username, setUsername] = useState("");
+  const [password, setPassword] = useState("");
+  const [loading, setLoading] = useState(false);
+
+  async function handleSubmit(e: React.FormEvent) {
+    e.preventDefault();
+    setLoading(true);
+
+    const creds = { serverUrl, username, password };
+    // Build a transient SDK to validate the credentials. The real
+    // long-lived SDK is owned by `MimicSdkProvider` once we navigate
+    // into the protected app; this one gets disposed below.
+    const sdk = new MimicSDK({
+      url: creds.serverUrl,
+      username: creds.username,
+      password: creds.password,
+    });
+
+    try {
+      await sdk.listDatabases();
+      setCredentials(creds);
+      navigate({ to: "/" });
+    } catch (err) {
+      toast.error(`Connection failed: ${err instanceof Error ? err.message : "Unknown error"}`);
+    } finally {
+      void sdk.dispose();
+      setLoading(false);
+    }
+  }
+
+  return (
+    <div className="flex min-h-screen items-center justify-center p-4">
+      <Card className="w-full max-w-sm">
+        <CardHeader>
+          <CardTitle className="text-2xl">Mimic Admin</CardTitle>
+          <CardDescription>
+            Connect to a mimic-db instance to manage your databases.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <form onSubmit={handleSubmit} className="grid gap-4">
+            <div className="grid gap-2">
+              <Label htmlFor="serverUrl">Server URL</Label>
+              <Input
+                id="serverUrl"
+                value={serverUrl}
+                onChange={(e) => setServerUrl(e.target.value)}
+                placeholder="http://localhost:5001"
+              />
+            </div>
+            <div className="grid gap-2">
+              <Label htmlFor="username">Username</Label>
+              <Input
+                id="username"
+                value={username}
+                onChange={(e) => setUsername(e.target.value)}
+                autoComplete="username"
+              />
+            </div>
+            <div className="grid gap-2">
+              <Label htmlFor="password">Password</Label>
+              <Input
+                id="password"
+                type="password"
+                value={password}
+                onChange={(e) => setPassword(e.target.value)}
+                autoComplete="current-password"
+              />
+            </div>
+            <Button type="submit" disabled={loading} className="w-full">
+              {loading ? "Connecting..." : "Connect"}
+            </Button>
+          </form>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}
diff --git a/apps/mimic-admin/src/styles/globals.css b/apps/mimic-admin/src/styles/globals.css
new file mode 100644
index 000000000..688cf5367
--- /dev/null
+++ b/apps/mimic-admin/src/styles/globals.css
@@ -0,0 +1,165 @@
+/** biome-ignore-all lint/nursery/noUnknownAtRule: tailwind */
+@import "tailwindcss";
+
+@import "tw-animate-css";
+
+@custom-variant dark (&:is(.dark *));
+
+::selection {
+  background: #0075f27e;
+  color: #fff;
+}
+
+:root {
+  --background: oklch(0.985 0 0);
+  --foreground: oklch(0.145 0 0);
+  --surface: oklch(1 0 0);
+  --surface-muted: oklch(0.97 0 0);
+  --card: oklch(1 0 0);
+  --card-foreground: oklch(0.145 0 0);
+  --popover: oklch(1 0 0);
+  --popover-foreground: oklch(0.145 0 0);
+  --primary: oklch(0.55 0.25 261.78);
+  --primary-foreground: oklch(1 0 0);
+  --secondary: oklch(0.99 0 0);
+  --secondary-foreground: oklch(0.2 0 0);
+  --muted: oklch(0.97 0 0);
+  --muted-foreground: oklch(0.556 0 0);
+  --accent: oklch(0.97 0 0);
+  --accent-foreground: oklch(0.205 0 0);
+  --destructive: oklch(0.577 0.245 27.325);
+  --destructive-foreground: oklch(0.577 0.245 27.325);
+  --success: oklch(0.845 0.222 133);
+  --success-foreground: oklch(0.015 0 0);
+  --border: oklch(0.922 0 0);
+  --input: oklch(0.922 0 0);
+  --ring: oklch(0.708 0 0);
+  --chart-1: oklch(0.55 0.25 261.78);
+  --chart-2: oklch(0.6 0.118 184.704);
+  --chart-3: oklch(0.398 0.07 227.392);
+  --chart-4: oklch(0.828 0.189 84.429);
+  --chart-5: oklch(0.769 0.188 70.08);
+  --radius: 0.625rem;
+  --sidebar: oklch(0.985 0 0);
+  --sidebar-foreground: oklch(0.145 0 0);
+  --sidebar-primary: oklch(0.205 0 0);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.97 0 0);
+  --sidebar-accent-foreground: oklch(0.205 0 0);
+  --sidebar-border: oklch(0.922 0 0);
+  --sidebar-ring: oklch(0.708 0 0);
+}
+
+.dark {
+  --background: oklch(0.145 0 0);
+  --foreground: oklch(0.985 0 0);
+  --surface: oklch(0.24 0 0);
+  --surface-muted: oklch(0.18 0 0);
+  --card: oklch(0.17 0 0);
+  --card-foreground: oklch(0.985 0 0);
+  --popover: oklch(0.17 0 0);
+  --popover-foreground: oklch(0.985 0 0);
+  --primary: oklch(0.55 0.25 261.78);
+  --primary-foreground: oklch(1 0 0);
+  --secondary: oklch(0.26 0 0);
+  --secondary-foreground: oklch(0.99 0 0);
+  --muted: oklch(0.205 0 0);
+  --muted-foreground: oklch(0.708 0 0);
+  --accent: oklch(0.269 0 0);
+  --accent-foreground: oklch(0.985 0 0);
+  --destructive: oklch(0.396 0.141 25.723);
+  --destructive-foreground: oklch(0.637 0.237 25.331);
+  --success: oklch(0.845 0.222 133);
+  --success-foreground: oklch(0.015 0 0);
+  --border: oklch(0.269 0 0);
+  --input: oklch(0.269 0 0);
+  --ring: oklch(0.439 0 0);
+  --chart-1: oklch(0.55 0.25 261.78);
+  --chart-2: oklch(0.696 0.17 162.48);
+  --chart-3: oklch(0.769 0.188 70.08);
+  --chart-4: oklch(0.627 0.265 303.9);
+  --chart-5: oklch(0.645 0.246 16.439);
+  --sidebar: oklch(0.145 0 0);
+  --sidebar-foreground: oklch(0.985 0 0);
+  --sidebar-primary: oklch(0.488 0.243 264.376);
+  --sidebar-primary-foreground: oklch(0.985 0 0);
+  --sidebar-accent: oklch(0.205 0 0);
+  --sidebar-accent-foreground: oklch(0.985 0 0);
+  --sidebar-border: oklch(0.205 0 0);
+  --sidebar-ring: oklch(0.439 0 0);
+}
+
+@theme inline {
+  --color-background: var(--background);
+  --color-foreground: var(--foreground);
+  --color-surface: var(--surface);
+  --color-surface-muted: var(--surface-muted);
+  --color-card: var(--card);
+  --color-card-foreground: var(--card-foreground);
+  --color-popover: var(--popover);
+  --color-popover-foreground: var(--popover-foreground);
+  --color-primary: var(--primary);
+  --color-primary-foreground: var(--primary-foreground);
+  --color-secondary: var(--secondary);
+  --color-secondary-foreground: var(--secondary-foreground);
+  --color-muted: var(--muted);
+  --color-muted-foreground: var(--muted-foreground);
+  --color-accent: var(--accent);
+  --color-accent-foreground: var(--accent-foreground);
+  --color-destructive: var(--destructive);
+  --color-destructive-foreground: var(--destructive-foreground);
+  --color-success: var(--success);
+  --color-success-foreground: var(--success-foreground);
+  --color-border: var(--border);
+  --color-input: var(--input);
+  --color-ring: var(--ring);
+  --color-chart-1: var(--chart-1);
+  --color-chart-2: var(--chart-2);
+  --color-chart-3: var(--chart-3);
+  --color-chart-4: var(--chart-4);
+  --color-chart-5: var(--chart-5);
+  --radius-sm: calc(var(--radius) - 4px);
+  --radius-md: calc(var(--radius) - 2px);
+  --radius-lg: var(--radius);
+  --radius-xl: calc(var(--radius) + 4px);
+  --radius-2xl: calc(var(--radius) + 8px);
+  --radius-3xl: calc(var(--radius) + 12px);
+  --radius-4xl: calc(var(--radius) + 16px);
+  --color-sidebar: var(--sidebar);
+  --color-sidebar-foreground: var(--sidebar-foreground);
+  --color-sidebar-primary: var(--sidebar-primary);
+  --color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+  --color-sidebar-accent: var(--sidebar-accent);
+  --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+  --color-sidebar-border: var(--sidebar-border);
+  --color-sidebar-ring: var(--sidebar-ring);
+  --animate-accordion-down: accordion-down 0.2s ease-out;
+  --animate-accordion-up: accordion-up 0.2s ease-out;
+
+  @keyframes accordion-down {
+    from {
+      height: 0;
+    }
+    to {
+      height: var(--radix-accordion-content-height);
+    }
+  }
+
+  @keyframes accordion-up {
+    from {
+      height: var(--radix-accordion-content-height);
+    }
+    to {
+      height: 0;
+    }
+  }
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+  body {
+    @apply bg-background text-foreground;
+  }
+}
diff --git a/apps/mimic-admin/tsconfig.json b/apps/mimic-admin/tsconfig.json
new file mode 100644
index 000000000..80ccdf531
--- /dev/null
+++ b/apps/mimic-admin/tsconfig.json
@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "target": "ESNext",
+    "module": "Preserve",
+    "moduleDetection": "force",
+    "jsx": "react-jsx",
+    "allowJs": true,
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "noEmit": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noPropertyAccessFromIndexSignature": false,
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "include": ["src"]
+}
diff --git a/apps/mimic-admin/vite.config.ts b/apps/mimic-admin/vite.config.ts
new file mode 100644
index 000000000..4517e3b57
--- /dev/null
+++ b/apps/mimic-admin/vite.config.ts
@@ -0,0 +1,13 @@
+import tailwindcss from "@tailwindcss/vite";
+import viteReact from "@vitejs/plugin-react";
+import { defineConfig } from "vite";
+
+export default defineConfig({
+  plugins: [tailwindcss(), viteReact()],
+  resolve: { tsconfigPaths: true },
+  root: "src",
+  build: {
+    outDir: "../dist",
+    emptyOutDir: true,
+  },
+});
diff --git a/apps/mimic-cli/LICENSE.md b/apps/mimic-cli/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/apps/mimic-cli/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/apps/mimic-cli/README.md b/apps/mimic-cli/README.md
new file mode 100644
index 000000000..e1d3c3353
--- /dev/null
+++ b/apps/mimic-cli/README.md
@@ -0,0 +1,5 @@
+# @voidhash/mimic-cli
+
+Command-line tooling for defining Mimic projects, loading configuration, and bundling database migrations.
+
+Registry publication remains disabled while the open-source repository is unified.
diff --git a/apps/mimic-cli/build.ts b/apps/mimic-cli/build.ts
new file mode 100644
index 000000000..9d221d946
--- /dev/null
+++ b/apps/mimic-cli/build.ts
@@ -0,0 +1,78 @@
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import * as esbuild from "esbuild";
+import * as tsup from "tsup";
+import pkg from "./package.json" with { type: "json" };
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+const workspaceSourcePlugin: esbuild.Plugin = {
+  name: "workspace-source",
+  setup(build) {
+    const workspacePackages: Record<string, string> = {
+      "@voidhash/mimic-cli": "./src/index.ts",
+      "@voidhash/mimic-core": "../../packages/mimic-core/src/index.ts",
+      "@voidhash/mimic-server": "../../packages/mimic-server/src/index.ts",
+      "@voidhash/mimic-server/effect":
+        "../../packages/mimic-server/src/effect/index.ts",
+      "@voidhash/mimic-server/migrate":
+        "../../packages/mimic-server/src/migrate/index.ts",
+    };
+
+    const externals = new Set(build.initialOptions.external ?? []);
+
+    build.onResolve({ filter: /^@voidhash\// }, (args) => {
+      if (externals.has(args.path)) {
+        return { path: args.path, external: true };
+      }
+      const mapped = workspacePackages[args.path];
+      if (mapped) {
+        return { path: path.resolve(__dirname, mapped) };
+      }
+      return undefined;
+    });
+  },
+};
+
+const main = async () => {
+  await esbuild.build({
+    banner: { js: "#!/usr/bin/env node" },
+    bundle: true,
+    define: {
+      "import.meta.dirname": "__dirname",
+      "process.env.MIMIC_CLI_VERSION": `"${pkg.version}"`,
+    },
+    entryPoints: ["./src/cli/index.ts"],
+    external: [
+      "esbuild",
+      "effect",
+      "effect/*",
+      "@voidhash/mimic-core",
+      "@voidhash/mimic-server",
+      "@voidhash/mimic-server/*",
+    ],
+    format: "cjs",
+    outfile: "dist/bin.cjs",
+    platform: "node",
+    plugins: [workspaceSourcePlugin],
+    target: "node20",
+  });
+
+  await tsup.build({
+    dts: true,
+    entryPoints: ["./src/index.ts"],
+    external: ["esbuild", "@voidhash/mimic-core", "@voidhash/mimic-server"],
+    format: ["cjs", "esm"],
+    outDir: "./dist",
+    outExtension: (ctx) => {
+      if (ctx.format === "cjs") return { dts: ".d.ts", js: ".js" };
+      return { dts: ".d.mts", js: ".mjs" };
+    },
+    splitting: false,
+  });
+};
+
+main().catch((error) => {
+  console.error(error);
+  process.exit(1);
+});
diff --git a/apps/mimic-cli/package.json b/apps/mimic-cli/package.json
new file mode 100644
index 000000000..9b3d70a9a
--- /dev/null
+++ b/apps/mimic-cli/package.json
@@ -0,0 +1,62 @@
+{
+  "name": "@voidhash/mimic-cli",
+  "version": "1.0.0-beta.19",
+  "private": true,
+  "description": "Command-line tooling for configuring and migrating Mimic databases.",
+  "keywords": [
+    "cli",
+    "database",
+    "mimic",
+    "voidhash"
+  ],
+  "homepage": "https://voidhash.com/docs",
+  "bugs": {
+    "url": "https://github.com/voidhashcom/voidhash/issues"
+  },
+  "license": "AGPL-3.0-only",
+  "author": "Voidhash (https://voidhash.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "apps/mimic-cli"
+  },
+  "bin": {
+    "mimic": "./dist/bin.cjs"
+  },
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./src/index.ts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./src/index.ts",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "scripts": {
+    "build": "rm -rf ./dist && tsx build.ts && chmod +x ./dist/bin.cjs",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vp test run -c vitest.mts",
+    "test:watch": "vp test -c vitest.mts"
+  },
+  "dependencies": {
+    "@effect/platform-node-shared": "4.0.0-beta.84",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-server": "workspace:*",
+    "dotenv": "^16.4.7",
+    "effect": "4.0.0-beta.84",
+    "esbuild-register": "^3.6.0"
+  },
+  "devDependencies": {
+    "esbuild": "0.28.1",
+    "tsup": "^8.5.0",
+    "tsx": "^4.19.3",
+    "typescript": "5.8.3",
+    "vite-plus": "0.1.23",
+    "vitest": "^3.2.7"
+  }
+}
diff --git a/apps/mimic-cli/src/cli/commands/generate.ts b/apps/mimic-cli/src/cli/commands/generate.ts
new file mode 100644
index 000000000..40cac82d7
--- /dev/null
+++ b/apps/mimic-cli/src/cli/commands/generate.ts
@@ -0,0 +1,58 @@
+import { Console, Effect } from "effect";
+import { Argument, Command } from "effect/unstable/cli";
+import * as fs from "node:fs";
+import * as path from "node:path";
+
+const MIGRATIONS_DIR = "migrations";
+const MIGRATION_FILE_PATTERN = /^(\d+)_.*\.(?:[cm]?[jt]s)$/;
+
+const slugify = (value: string): string =>
+  value
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "") || "migration";
+
+const nextVersion = (cwd: string): number => {
+  const migrationsDir = path.join(cwd, MIGRATIONS_DIR);
+  if (!fs.existsSync(migrationsDir)) {
+    return 1;
+  }
+
+  const versions = fs
+    .readdirSync(migrationsDir, { withFileTypes: true })
+    .filter((entry) => entry.isFile() && MIGRATION_FILE_PATTERN.test(entry.name))
+    .map((entry) => Number.parseInt(entry.name.match(MIGRATION_FILE_PATTERN)![1]!, 10));
+
+  return (versions.length === 0 ? 0 : Math.max(...versions)) + 1;
+};
+
+const renderTemplate = (): string => `import mimicConfig from "../mimic.config";
+
+export default mimicConfig.defineMigrations((migration) => [
+]);
+`;
+
+export const generateCommand = Command.make(
+  "generate",
+  {
+    name: Argument.string("name"),
+  },
+  ({ name }) =>
+    Effect.gen(function* () {
+      const cwd = process.cwd();
+      const migrationsDir = path.join(cwd, MIGRATIONS_DIR);
+      const version = nextVersion(cwd);
+      const fileName = `${String(version).padStart(5, "0")}_${slugify(name)}.ts`;
+      const filePath = path.join(migrationsDir, fileName);
+
+      if (fs.existsSync(filePath)) {
+        return yield* Effect.fail(new Error(`Migration file "${fileName}" already exists.`));
+      }
+
+      fs.mkdirSync(migrationsDir, { recursive: true });
+      fs.writeFileSync(filePath, renderTemplate());
+
+      yield* Console.log(`Created ${path.relative(cwd, filePath)}`);
+    }),
+).pipe(Command.withDescription("Create a new empty migration file"));
diff --git a/apps/mimic-cli/src/cli/commands/init.ts b/apps/mimic-cli/src/cli/commands/init.ts
new file mode 100644
index 000000000..7be16bf4e
--- /dev/null
+++ b/apps/mimic-cli/src/cli/commands/init.ts
@@ -0,0 +1,47 @@
+import { Console, Effect } from "effect";
+import { Command } from "effect/unstable/cli";
+import * as fs from "node:fs";
+import * as path from "node:path";
+
+const CONFIG_TEMPLATE = `import { defineConfig, env } from "@voidhash/mimic-cli";
+
+export default defineConfig({
+  url: env.MIMIC_URL,
+  username: env.MIMIC_USERNAME,
+  password: env.MIMIC_PASSWORD,
+  database: "my-database",
+});
+`;
+
+const ENV_TEMPLATE = `MIMIC_URL=http://localhost:3000
+MIMIC_USERNAME=root
+MIMIC_PASSWORD=changeme
+`;
+
+export const initCommand = Command.make("init", {}, () =>
+  Effect.gen(function* () {
+    const cwd = process.cwd();
+    const configPath = path.join(cwd, "mimic.config.ts");
+    const envPath = path.join(cwd, ".env");
+
+    if (fs.existsSync(configPath)) {
+      return yield* Effect.fail(new Error("mimic.config.ts already exists in this directory."));
+    }
+
+    fs.writeFileSync(configPath, CONFIG_TEMPLATE);
+    yield* Console.log("Created mimic.config.ts");
+
+    if (!fs.existsSync(envPath)) {
+      fs.writeFileSync(envPath, ENV_TEMPLATE);
+      yield* Console.log("Created .env");
+    } else {
+      yield* Console.log(".env already exists, skipping.");
+    }
+
+    yield* Console.log("\nNext steps:");
+    yield* Console.log("  1. Update .env with your server credentials");
+    yield* Console.log("  2. Run 'mimic generate initial' to create your first migration");
+    yield* Console.log("  3. Define collections in migrations/");
+    yield* Console.log("  4. Run 'mimic migrate' to apply migrations to the server");
+  }),
+).pipe(Command.withDescription("Scaffold a new mimic.config.ts file"));
diff --git a/apps/mimic-cli/src/cli/commands/migrate.ts b/apps/mimic-cli/src/cli/commands/migrate.ts
new file mode 100644
index 000000000..45ae48feb
--- /dev/null
+++ b/apps/mimic-cli/src/cli/commands/migrate.ts
@@ -0,0 +1,391 @@
+import { Console, Effect, Option } from "effect";
+import { Command, Flag } from "effect/unstable/cli";
+import { parseSchema, serializeSchema, type SchemaObject } from "@voidhash/mimic-core";
+import { analyzeMigration } from "@voidhash/mimic-server/migrate";
+import { MimicSDK } from "@voidhash/mimic-server/effect";
+import * as readline from "node:readline";
+
+import { ConfigLoader } from "../../services/ConfigLoader.js";
+import type {
+  CompiledMigrationChange,
+  CompiledMigrationFile,
+  CompiledUpdateMigrationChange,
+} from "../../services/MigrationLoader.js";
+import { MigrationBundler } from "../../services/MigrationBundler.js";
+import { MigrationLoader } from "../../services/MigrationLoader.js";
+
+const confirm = (message: string): Effect.Effect<boolean> =>
+  Effect.callback<boolean>((resume) => {
+    const rl = readline.createInterface({
+      input: process.stdin,
+      output: process.stdout,
+    });
+    rl.question(`${message} (y/N) `, (answer) => {
+      rl.close();
+      resume(Effect.succeed(answer.trim().toLowerCase() === "y"));
+    });
+  });
+
+const schemasEqual = (left: SchemaObject | undefined, right: SchemaObject | undefined): boolean =>
+  JSON.stringify(left) === JSON.stringify(right);
+
+const assertValidVersionSequence = (
+  migrations: readonly CompiledMigrationFile[],
+): Effect.Effect<void, Error> =>
+  Effect.sync(() => {
+    let expected = 1;
+    for (const migration of migrations) {
+      if (migration.version !== expected) {
+        throw new Error(
+          `Expected migration version ${expected}, found ${migration.version} in "${migration.filePath}".`,
+        );
+      }
+      expected += 1;
+    }
+  });
+
+const canUseCustomMigration = (change: CompiledUpdateMigrationChange): boolean =>
+  change.dataMigrationSource !== undefined;
+
+const validateLocalMigrations = (
+  migrations: readonly CompiledMigrationFile[],
+): Effect.Effect<void, Error> =>
+  Effect.gen(function* () {
+    yield* assertValidVersionSequence(migrations);
+
+    const state = new Map<
+      string,
+      { readonly schema: SchemaObject; readonly parsedSchema: ReturnType<typeof parseSchema> }
+    >();
+
+    for (const migration of migrations) {
+      for (const change of migration.changes) {
+        if (change.type === "create") {
+          if (state.has(change.collection)) {
+            return yield* Effect.fail(
+              new Error(
+                `Migration ${migration.version} tries to create collection "${change.collection}" twice.`,
+              ),
+            );
+          }
+          const schema = serializeSchema(parseSchema(change.schema));
+          state.set(change.collection, {
+            schema,
+            parsedSchema: parseSchema(schema),
+          });
+          continue;
+        }
+
+        const current = state.get(change.collection);
+        if (!current) {
+          return yield* Effect.fail(
+            new Error(
+              `Migration ${migration.version} updates unknown collection "${change.collection}".`,
+            ),
+          );
+        }
+
+        const normalizedNext = serializeSchema(parseSchema(change.schema));
+        const normalizedOld = change.oldSchema
+          ? serializeSchema(parseSchema(change.oldSchema))
+          : undefined;
+
+        if (normalizedOld !== undefined && !schemasEqual(normalizedOld, current.schema)) {
+          return yield* Effect.fail(
+            new Error(
+              `Migration ${migration.version} declared an old schema for "${change.collection}" that does not match the previous migration state.`,
+            ),
+          );
+        }
+
+        const issues = analyzeMigration({
+          oldSchema: current.parsedSchema,
+          newSchema: parseSchema(normalizedNext),
+        });
+        if (issues.length > 0 && !canUseCustomMigration(change)) {
+          const issue = issues[0]!;
+          return yield* Effect.fail(
+            new Error(
+              `Migration ${migration.version} has an incompatible schema change for "${change.collection}" at ${issue.path}: ${issue.message}`,
+            ),
+          );
+        }
+
+        state.set(change.collection, {
+          schema: normalizedNext,
+          parsedSchema: parseSchema(normalizedNext),
+        });
+      }
+    }
+  });
+
+const assertRemotePrefix = (
+  localMigrations: readonly CompiledMigrationFile[],
+  appliedMigrations: ReadonlyArray<{
+    readonly version: number;
+    readonly name: string;
+    readonly checksum: string;
+  }>,
+): Effect.Effect<number, Error> =>
+  Effect.sync(() => {
+    if (appliedMigrations.length > localMigrations.length) {
+      throw new Error(
+        "The server has more applied migrations than exist locally. Refusing to continue.",
+      );
+    }
+
+    for (const [index, applied] of appliedMigrations.entries()) {
+      const local = localMigrations[index];
+      if (!local || local.version !== applied.version) {
+        throw new Error(`Local migrations diverge from the server at version ${applied.version}.`);
+      }
+      if (local.checksum !== applied.checksum) {
+        throw new Error(`Checksum mismatch for migration ${applied.version} (${local.filePath}).`);
+      }
+    }
+
+    return appliedMigrations[appliedMigrations.length - 1]?.version ?? 0;
+  });
+
+const formatChange = (change: CompiledMigrationChange): string =>
+  change.type === "create"
+    ? change.skipIfExists === true
+      ? `create collection "${change.collection}" if missing`
+      : `create collection "${change.collection}"`
+    : `update collection "${change.collection}"`;
+
+export const migrateCommand = Command.make(
+  "migrate",
+  {
+    dryRun: Flag.boolean("dry-run").pipe(
+      Flag.withDescription("Plan-only: show what would be done without contacting the server"),
+      Flag.withDefault(false),
+    ),
+    dryRunData: Flag.boolean("dry-run-data").pipe(
+      Flag.withDescription(
+        "Run the migration on a sample of documents without persisting changes (uses --sample-limit / --sample-percent)",
+      ),
+      Flag.withDefault(false),
+    ),
+    sampleLimit: Flag.integer("sample-limit").pipe(
+      Flag.withDescription("Cap the number of documents per collection in --dry-run-data"),
+      Flag.optional,
+    ),
+    samplePercent: Flag.integer("sample-percent").pipe(
+      Flag.withDescription(
+        "Sample percentage [0..100] of documents per collection in --dry-run-data",
+      ),
+      Flag.optional,
+    ),
+    rerun: Flag.boolean("rerun").pipe(
+      Flag.withDescription("Re-run a previous migration (only retries failed/pending docs)"),
+      Flag.withDefault(false),
+    ),
+    replace: Flag.boolean("replace").pipe(
+      Flag.withDescription(
+        "Install a fixed version of a previously-applied migration with a new checksum",
+      ),
+      Flag.withDefault(false),
+    ),
+    redoSucceeded: Flag.boolean("redo-succeeded").pipe(
+      Flag.withDescription(
+        "With --replace, also re-process docs that already succeeded under the old version",
+      ),
+      Flag.withDefault(false),
+    ),
+    version: Flag.integer("version").pipe(
+      Flag.withDescription(
+        "Target a specific migration version (required with --rerun / --replace / --dry-run-data)",
+      ),
+      Flag.optional,
+    ),
+    batchSize: Flag.integer("batch-size").pipe(
+      Flag.withDescription("Documents migrated in parallel per batch"),
+      Flag.optional,
+    ),
+    yes: Flag.boolean("yes").pipe(
+      Flag.withAlias("y"),
+      Flag.withDescription("Skip confirmation prompt"),
+      Flag.withDefault(false),
+    ),
+  },
+  ({
+    dryRun,
+    dryRunData,
+    sampleLimit,
+    samplePercent,
+    rerun,
+    replace,
+    redoSucceeded,
+    version,
+    batchSize,
+    yes,
+  }) =>
+    Effect.gen(function* () {
+      const configLoader = yield* ConfigLoader;
+      const migrationLoader = yield* MigrationLoader;
+      const config = yield* configLoader.load();
+      const localMigrations = yield* migrationLoader.load();
+
+      yield* validateLocalMigrations(localMigrations);
+      yield* Console.log(`Connecting to ${config.url}...`);
+
+      const client = new MimicSDK({
+        url: config.url,
+        username: config.username,
+        password: config.password,
+      });
+
+      const databases = yield* client.listDatabases();
+      let database = databases.find((entry) => entry.name === config.database);
+
+      if (!database && localMigrations.length > 0 && !rerun && !replace) {
+        yield* Console.log(`Database "${config.database}" not found.`);
+        if (!yes) {
+          const createDb = yield* confirm(`Create database "${config.database}"?`);
+          if (!createDb) {
+            yield* Console.log("Aborted.");
+            return;
+          }
+        }
+
+        database = yield* client.createDatabase({
+          name: config.database,
+          description: "",
+        });
+        yield* Console.log(`Database "${config.database}" created.`);
+      }
+
+      if (!database) {
+        yield* Console.log("No migrations to apply.");
+        return;
+      }
+
+      const db = client.database(database.id, database.name, database.description);
+
+      // Single-version targeted modes (rerun / replace / dry-run-data with a
+      // specific version) execute against just that migration and bypass the
+      // "pending migrations" loop entirely.
+      const versionValue = Option.getOrUndefined(version);
+      const sampleLimitValue = Option.getOrUndefined(sampleLimit);
+      const samplePercentValue = Option.getOrUndefined(samplePercent);
+      const batchSizeValue = Option.getOrUndefined(batchSize);
+      const targetedMode = rerun || replace || (dryRunData && versionValue !== undefined);
+      if (targetedMode) {
+        if (versionValue === undefined) {
+          yield* Console.log("--version is required with --rerun, --replace, or --dry-run-data.");
+          return;
+        }
+        const local = localMigrations.find((entry) => entry.version === versionValue);
+        if (!local) {
+          yield* Console.log(`Migration version ${versionValue} not found locally.`);
+          return;
+        }
+        const dryRunPayload = dryRunData
+          ? {
+              limit: sampleLimitValue,
+              samplePercent: samplePercentValue,
+            }
+          : undefined;
+        const mode = replace ? "replace" : rerun ? "rerun" : "apply";
+        yield* Console.log(
+          `\n${mode.toUpperCase()} migration ${String(versionValue).padStart(5, "0")}_${local.name}${dryRunData ? " (dry-run)" : ""}`,
+        );
+        if (!yes && !dryRunData) {
+          const confirmed = yield* confirm(`Proceed with ${mode}?`);
+          if (!confirmed) {
+            yield* Console.log("Aborted.");
+            return;
+          }
+        }
+        const report = yield* db.applyMigration({
+          version: local.version,
+          name: local.name,
+          checksum: local.checksum,
+          changes: local.changes,
+          mode,
+          dryRun: dryRunPayload,
+          batchSize: batchSizeValue,
+          redoSucceededOnReplace: redoSucceeded,
+        });
+        yield* Console.log(
+          `\n  → ${report.state} (succeeded=${report.succeeded} failed=${report.failed} skipped=${report.skipped})`,
+        );
+        if (report.failed > 0) {
+          for (const entry of report.perDocument) {
+            if (entry.status === "failed") {
+              yield* Console.log(
+                `    ✗ ${entry.documentId} ${entry.errorCode ?? ""}: ${entry.errorMessage ?? ""}`,
+              );
+            }
+          }
+        }
+        return;
+      }
+
+      const appliedMigrations = yield* db.listMigrations();
+      const highestAppliedVersion = yield* assertRemotePrefix(localMigrations, appliedMigrations);
+      const pendingMigrations = localMigrations.filter(
+        (migration) => migration.version > highestAppliedVersion,
+      );
+
+      if (pendingMigrations.length === 0) {
+        yield* Console.log("No migrations to apply.");
+        return;
+      }
+
+      yield* Console.log("\nPlan:");
+      for (const migration of pendingMigrations) {
+        yield* Console.log(`  ~ ${String(migration.version).padStart(5, "0")}_${migration.name}`);
+        for (const change of migration.changes) {
+          yield* Console.log(`    - ${formatChange(change)}`);
+        }
+      }
+      yield* Console.log("");
+
+      if (dryRun) {
+        yield* Console.log("Dry run complete. No changes applied.");
+        return;
+      }
+
+      if (!yes) {
+        const confirmed = yield* confirm("Apply these migrations?");
+        if (!confirmed) {
+          yield* Console.log("Aborted.");
+          return;
+        }
+      }
+
+      for (const migration of pendingMigrations) {
+        const report = yield* db.applyMigration({
+          version: migration.version,
+          name: migration.name,
+          checksum: migration.checksum,
+          changes: migration.changes,
+          batchSize: batchSizeValue,
+        });
+        if (report.state === "succeeded") {
+          yield* Console.log(
+            `  ~ applied ${String(migration.version).padStart(5, "0")}_${migration.name} (succeeded=${report.succeeded} skipped=${report.skipped})`,
+          );
+        } else {
+          yield* Console.log(
+            `  ✗ migration ${String(migration.version).padStart(5, "0")}_${migration.name} failed: ${report.failed}/${report.succeeded + report.failed + report.skipped} document(s) failed.`,
+          );
+          for (const entry of report.perDocument) {
+            if (entry.status === "failed") {
+              yield* Console.log(
+                `      ✗ ${entry.documentId} ${entry.errorCode ?? ""}: ${entry.errorMessage ?? ""}`,
+              );
+            }
+          }
+          yield* Console.log(
+            `      Re-run with --rerun --version=${migration.version} once the inputs are fixed.`,
+          );
+          return;
+        }
+      }
+
+      yield* Console.log(`\nDone. Applied ${pendingMigrations.length} migration(s).`);
+    }).pipe(Effect.provide(MigrationBundler.Default)),
+).pipe(Command.withDescription("Apply local migrations to the Mimic server"));
diff --git a/apps/mimic-cli/src/cli/index.ts b/apps/mimic-cli/src/cli/index.ts
new file mode 100644
index 000000000..d737b1ac1
--- /dev/null
+++ b/apps/mimic-cli/src/cli/index.ts
@@ -0,0 +1,48 @@
+import { Effect, Layer, Logger } from "effect";
+import { Command } from "effect/unstable/cli";
+import { layer as NodeChildProcessSpawnerLayer } from "@effect/platform-node-shared/NodeChildProcessSpawner";
+import { layer as NodeFileSystemLayer } from "@effect/platform-node-shared/NodeFileSystem";
+import { layer as NodePathLayer } from "@effect/platform-node-shared/NodePath";
+import { layer as NodeStdioLayer } from "@effect/platform-node-shared/NodeStdio";
+import { layer as NodeTerminalLayer } from "@effect/platform-node-shared/NodeTerminal";
+
+import { ConfigLoader } from "../services/ConfigLoader.js";
+import { MigrationBundler } from "../services/MigrationBundler.js";
+import { MigrationLoader } from "../services/MigrationLoader.js";
+import { isDebugMode, withErrorHandler } from "../utils/error-formatter.js";
+import { generateCommand } from "./commands/generate.js";
+import { initCommand } from "./commands/init.js";
+import { migrateCommand } from "./commands/migrate.js";
+
+const command = Command.make("mimic").pipe(
+  Command.withDescription("Mimic CLI - manage your Mimic migrations"),
+  Command.withSubcommands([initCommand, generateCommand, migrateCommand]),
+);
+
+const cliEffect = Command.run(command, {
+  version: process.env.MIMIC_CLI_VERSION ?? "1.0.0-beta.19",
+}).pipe(isDebugMode() ? Effect.withLogger(Logger.consolePretty()) : (effect) => effect);
+
+const NodeEnvLayer = Layer.mergeAll(
+  NodeFileSystemLayer,
+  NodePathLayer,
+  NodeStdioLayer,
+  NodeTerminalLayer,
+  NodeChildProcessSpawnerLayer.pipe(
+    Layer.provide(Layer.mergeAll(NodeFileSystemLayer, NodePathLayer)),
+  ),
+);
+
+const MainLayer = Layer.mergeAll(
+  ConfigLoader.Default,
+  MigrationLoader.Default,
+  MigrationBundler.Default,
+  NodeEnvLayer,
+);
+
+cliEffect
+  .pipe(Effect.provide(MainLayer), withErrorHandler, Effect.runPromise)
+  .catch((error: unknown) => {
+    console.error(error);
+    process.exit(1);
+  });
diff --git a/apps/mimic-cli/src/index.ts b/apps/mimic-cli/src/index.ts
new file mode 100644
index 000000000..3410643f7
--- /dev/null
+++ b/apps/mimic-cli/src/index.ts
@@ -0,0 +1,133 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+export const m = Primitive;
+
+export interface MimicMigrationContext<TSchema extends Primitive.AnyPrimitive> {
+  readonly root: Primitive.InferProxy<TSchema>;
+}
+
+export interface MimicMigrationContextWithOldSchema<
+  TOldSchema extends Primitive.AnyPrimitive,
+  TSchema extends Primitive.AnyPrimitive,
+> extends MimicMigrationContext<TSchema> {
+  readonly oldRoot: Primitive.InferProxy<TOldSchema>;
+}
+
+export interface MimicCreateMigrationDefinition<
+  TCollectionName extends string = string,
+  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> {
+  readonly kind: "create";
+  readonly collection: TCollectionName;
+  readonly schema: TSchema;
+  readonly skipIfExists?: boolean;
+}
+
+export interface MimicUpdateMigrationDefinitionWithoutOldSchema<
+  TCollectionName extends string = string,
+  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> {
+  readonly kind: "update";
+  readonly collection: TCollectionName;
+  readonly oldSchema?: never;
+  readonly schema: TSchema;
+  readonly execute?: (ctx: MimicMigrationContext<TSchema>) => void;
+}
+
+export interface MimicUpdateMigrationDefinitionWithOldSchema<
+  TCollectionName extends string = string,
+  TOldSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> {
+  readonly kind: "update";
+  readonly collection: TCollectionName;
+  readonly oldSchema: TOldSchema;
+  readonly schema: TSchema;
+  readonly execute?: (ctx: MimicMigrationContextWithOldSchema<TOldSchema, TSchema>) => void;
+}
+
+export type MimicUpdateMigrationDefinition<
+  TCollectionName extends string = string,
+  TOldSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> =
+  | MimicUpdateMigrationDefinitionWithoutOldSchema<TCollectionName, TSchema>
+  | MimicUpdateMigrationDefinitionWithOldSchema<TCollectionName, TOldSchema, TSchema>;
+
+export type MimicMigrationDefinition<
+  TCollectionName extends string = string,
+  TOldSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> =
+  | MimicCreateMigrationDefinition<TCollectionName, TSchema>
+  | MimicUpdateMigrationDefinition<TCollectionName, TOldSchema, TSchema>;
+
+export interface MimicMigrationBuilder {
+  readonly create: <
+    TCollectionName extends string,
+    TSchema extends Primitive.AnyPrimitive,
+  >(migration: {
+    readonly collection: TCollectionName;
+    readonly schema: TSchema;
+    readonly skipIfExists?: boolean;
+  }) => MimicCreateMigrationDefinition<TCollectionName, TSchema>;
+  readonly update: {
+    <TCollectionName extends string, TSchema extends Primitive.AnyPrimitive>(migration: {
+      readonly collection: TCollectionName;
+      readonly oldSchema?: never;
+      readonly schema: TSchema;
+      readonly execute?: (ctx: MimicMigrationContext<TSchema>) => void;
+    }): MimicUpdateMigrationDefinitionWithoutOldSchema<TCollectionName, TSchema>;
+    <
+      TCollectionName extends string,
+      TOldSchema extends Primitive.AnyPrimitive,
+      TSchema extends Primitive.AnyPrimitive,
+    >(migration: {
+      readonly collection: TCollectionName;
+      readonly oldSchema: TOldSchema;
+      readonly schema: TSchema;
+      readonly execute?: (ctx: MimicMigrationContextWithOldSchema<TOldSchema, TSchema>) => void;
+    }): MimicUpdateMigrationDefinitionWithOldSchema<TCollectionName, TOldSchema, TSchema>;
+  };
+}
+
+export interface MimicConfigShape {
+  readonly url: string;
+  readonly username: string;
+  readonly password: string;
+  readonly database: string;
+}
+
+export type MimicConfig = MimicConfigShape & {
+  defineMigrations: <TMigrations extends readonly MimicMigrationDefinition[]>(
+    builder: (migration: MimicMigrationBuilder) => TMigrations,
+  ) => TMigrations;
+};
+
+const migrationBuilder: MimicMigrationBuilder = {
+  create: (migration) => ({
+    kind: "create",
+    ...migration,
+  }),
+  update: ((migration: object) => ({
+    kind: "update",
+    ...migration,
+  })) as MimicMigrationBuilder["update"],
+};
+
+export const defineConfig = (config: MimicConfigShape): MimicConfig => ({
+  ...config,
+  defineMigrations: (builder) => builder(migrationBuilder),
+});
+
+export const env: Record<string, string> = new Proxy({} as Record<string, string>, {
+  get(_, key: string) {
+    const value = process.env[key];
+    if (value === undefined) {
+      throw new Error(
+        `Environment variable ${key} is not set. Add it to your .env file or set it in your shell.`,
+      );
+    }
+    return value;
+  },
+});
diff --git a/apps/mimic-cli/src/services/ConfigLoader.ts b/apps/mimic-cli/src/services/ConfigLoader.ts
new file mode 100644
index 000000000..0efe7c131
--- /dev/null
+++ b/apps/mimic-cli/src/services/ConfigLoader.ts
@@ -0,0 +1,65 @@
+import { Effect, Layer, Schema, Context } from "effect";
+import * as path from "node:path";
+import * as fs from "node:fs";
+
+import { loadConfigFile } from "../utils/js-loading/config-loader.js";
+
+const CONFIG_FILE_NAMES = [
+  "mimic.config.ts",
+  "mimic.config.js",
+  "mimic.config.cjs",
+  "mimic.config.mjs",
+];
+
+const MimicConfigSchema = Schema.Struct({
+  url: Schema.String,
+  username: Schema.String,
+  password: Schema.String,
+  database: Schema.String,
+});
+
+export interface ConfigLoaderShape {
+  readonly load: () => Effect.Effect<typeof MimicConfigSchema.Type, Error>;
+}
+
+export class ConfigLoader extends Context.Service<ConfigLoader, ConfigLoaderShape>()(
+  "@voidhash/mimic-cli/ConfigLoader",
+) {
+  static Default = Layer.succeed(ConfigLoader, {
+    load: () =>
+      Effect.gen(function* () {
+        yield* Effect.tryPromise({
+          try: async () => {
+            const dotenv = await import("dotenv");
+            dotenv.config({ path: path.resolve(process.cwd(), ".env") });
+          },
+          catch: () => undefined,
+        }).pipe(Effect.ignore);
+
+        const cwd = process.cwd();
+        let configPath: string | undefined;
+        for (const name of CONFIG_FILE_NAMES) {
+          const candidate = path.resolve(cwd, name);
+          if (fs.existsSync(candidate)) {
+            configPath = candidate;
+            break;
+          }
+        }
+
+        if (!configPath) {
+          return yield* Effect.fail(
+            new Error(`No mimic config file found. Create one of: ${CONFIG_FILE_NAMES.join(", ")}`),
+          );
+        }
+
+        const rawConfig = yield* loadConfigFile(configPath).pipe(
+          Effect.mapError((error) => new Error(`Failed to load config: ${error.message}`)),
+        );
+
+        return yield* Effect.try({
+          try: () => Schema.decodeUnknownSync(MimicConfigSchema)(rawConfig),
+          catch: (error) => new Error(`Invalid mimic config:\n${String(error)}`),
+        });
+      }),
+  });
+}
diff --git a/apps/mimic-cli/src/services/MigrationBundler.ts b/apps/mimic-cli/src/services/MigrationBundler.ts
new file mode 100644
index 000000000..19c4c6dd9
--- /dev/null
+++ b/apps/mimic-cli/src/services/MigrationBundler.ts
@@ -0,0 +1,162 @@
+import { build, type Plugin } from "esbuild";
+import { Effect, Layer, Context } from "effect";
+import * as path from "node:path";
+import { PACKAGE_ROOT } from "../utils/package-root.js";
+
+const MIGRATION_RUNNER_GLOBAL = "__MIMIC_RUN_MIGRATION__";
+const PUBLIC_ROOT = path.resolve(PACKAGE_ROOT, "../..");
+
+const workspaceSourcePlugin: Plugin = {
+  name: "workspace-source",
+  setup(buildContext) {
+    const mappings: Record<string, string> = {
+      "@voidhash/mimic-cli": path.resolve(PACKAGE_ROOT, "src/index.ts"),
+      "@voidhash/mimic-core": path.resolve(
+        PUBLIC_ROOT,
+        "packages/mimic-core/src/index.ts",
+      ),
+      "@voidhash/mimic-server/migrate": path.resolve(
+        PUBLIC_ROOT,
+        "packages/mimic-server/src/migrate/index.ts",
+      ),
+    };
+
+    buildContext.onResolve({ filter: /^@voidhash\// }, (args) => {
+      const mapped = mappings[args.path];
+      if (mapped) {
+        return { path: mapped };
+      }
+      return undefined;
+    });
+  },
+};
+
+const renderEntrySource = (filePath: string, index: number): string => `
+  import migrations from ${JSON.stringify(filePath)};
+  import {
+    applyBatch,
+    createGenerator,
+    validate as validateSchema,
+    validateValue,
+  } from "@voidhash/mimic-core";
+  import { reconcileMigrationValue } from "@voidhash/mimic-server/migrate";
+
+  const definition = migrations[${index}];
+
+  globalThis.${MIGRATION_RUNNER_GLOBAL} = (input) => {
+    if (!definition || definition.kind !== "update" || typeof definition.execute !== "function") {
+      throw new Error("Migration definition is not executable");
+    }
+
+    validateValue(input.oldValue);
+
+    const oldPrimitive = "oldSchema" in definition ? definition.oldSchema : undefined;
+    const newPrimitive = definition.schema;
+
+    let currentValue = input.oldValue;
+
+    try {
+      if (oldPrimitive) {
+        const reconciled = reconcileMigrationValue({
+          oldSchema: oldPrimitive.schema,
+          newSchema: newPrimitive.schema,
+          value: input.oldValue,
+        });
+        if (reconciled.ok && reconciled.value !== undefined) {
+          currentValue = reconciled.value;
+        }
+      } else {
+        const sanitized = validateSchema(newPrimitive.schema, input.oldValue);
+        if (sanitized !== undefined) {
+          currentValue = sanitized;
+        }
+      }
+    } catch {}
+
+    const generator = createGenerator();
+    const staged = [];
+    const session = {
+      current: () => currentValue,
+      emit: (commands) => {
+        if (commands.length === 0) {
+          return;
+        }
+        staged.push(...commands);
+        currentValue = applyBatch(currentValue, commands);
+      },
+      generator: {
+        nextArrayItemId: () => globalThis.crypto.randomUUID(),
+        nextTreeNodeId: () => globalThis.crypto.randomUUID(),
+        between: (lower, upper) => generator.between(lower, upper),
+      },
+    };
+
+    const readOnlySession = {
+      current: () => input.oldValue,
+      emit: () => {
+        throw new Error("oldRoot is read-only");
+      },
+      generator: session.generator,
+    };
+
+    const ctx = {
+      root: newPrimitive.createProxy(session, []),
+    };
+
+    if (oldPrimitive) {
+      ctx.oldRoot = oldPrimitive.createProxy(readOnlySession, []);
+    }
+
+    definition.execute(ctx);
+
+    const sanitized = validateSchema(newPrimitive.schema, currentValue);
+    if (sanitized === undefined) {
+      throw new Error("Migration produced an undefined root value");
+    }
+
+    return { value: sanitized };
+  };
+`;
+
+export interface MigrationBundlerShape {
+  readonly bundle: (filePath: string, index: number) => Effect.Effect<string, Error>;
+}
+
+export class MigrationBundler extends Context.Service<MigrationBundler, MigrationBundlerShape>()(
+  "@voidhash/mimic-cli/MigrationBundler",
+) {
+  static Default = Layer.succeed(MigrationBundler, {
+    bundle: (filePath, index) =>
+      Effect.tryPromise({
+        try: async () => {
+          const result = await build({
+            absWorkingDir: process.cwd(),
+            bundle: true,
+            format: "iife",
+            minify: true,
+            platform: "browser",
+            target: "es2022",
+            write: false,
+            plugins: [workspaceSourcePlugin],
+            stdin: {
+              contents: renderEntrySource(filePath, index),
+              loader: "ts",
+              resolveDir: path.dirname(filePath),
+              sourcefile: `${path.basename(filePath)}.generated.ts`,
+            },
+          });
+
+          const output = result.outputFiles[0]?.text;
+          if (!output) {
+            throw new Error(`Failed to build migration bundle for "${filePath}".`);
+          }
+          return output;
+        },
+        catch: (error) => (error instanceof Error ? error : new Error(String(error))),
+      }),
+  });
+}
+
+export const MigrationBundlerRuntime = {
+  globalName: MIGRATION_RUNNER_GLOBAL,
+};
diff --git a/apps/mimic-cli/src/services/MigrationLoader.ts b/apps/mimic-cli/src/services/MigrationLoader.ts
new file mode 100644
index 000000000..7a6359ed7
--- /dev/null
+++ b/apps/mimic-cli/src/services/MigrationLoader.ts
@@ -0,0 +1,178 @@
+import { createHash } from "node:crypto";
+import { Effect, Layer, Context } from "effect";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { Primitive, serializeSchema, type SchemaObject } from "@voidhash/mimic-core";
+
+import type {
+  MimicCreateMigrationDefinition,
+  MimicMigrationDefinition,
+  MimicUpdateMigrationDefinition,
+  MimicUpdateMigrationDefinitionWithOldSchema,
+} from "../index.js";
+import { loadConfigFile } from "../utils/js-loading/config-loader.js";
+import { MigrationBundler } from "./MigrationBundler.js";
+
+const MIGRATIONS_DIR_NAME = "migrations";
+const MIGRATION_FILE_PATTERN = /^(\d+)_([^.]+)\.(?:[cm]?[jt]s)$/;
+
+export interface CompiledCreateMigrationChange {
+  readonly type: "create";
+  readonly collection: string;
+  readonly schema: SchemaObject;
+  readonly skipIfExists?: boolean;
+}
+
+export interface CompiledUpdateMigrationChange {
+  readonly type: "update";
+  readonly collection: string;
+  readonly schema: SchemaObject;
+  readonly oldSchema?: SchemaObject;
+  readonly dataMigrationSource?: string;
+}
+
+export type CompiledMigrationChange = CompiledCreateMigrationChange | CompiledUpdateMigrationChange;
+
+export interface CompiledMigrationFile {
+  readonly version: number;
+  readonly name: string;
+  readonly filePath: string;
+  readonly checksum: string;
+  readonly changes: readonly CompiledMigrationChange[];
+}
+
+const parseMigrationFileName = (
+  fileName: string,
+): { readonly version: number; readonly name: string } => {
+  const match = fileName.match(MIGRATION_FILE_PATTERN);
+  if (!match) {
+    throw new Error(`Invalid migration filename "${fileName}". Expected "<version>_name.ts".`);
+  }
+
+  return {
+    version: Number.parseInt(match[1]!, 10),
+    name: match[2]!,
+  };
+};
+
+const computeChecksum = (contents: string): string =>
+  createHash("sha256").update(contents).digest("hex");
+
+const loadMigrationDefinitions = (
+  filePath: string,
+): Effect.Effect<readonly MimicMigrationDefinition[], Error> =>
+  loadConfigFile(filePath).pipe(
+    Effect.mapError((error) => (error instanceof Error ? error : new Error(String(error)))),
+    Effect.flatMap((value) =>
+      Effect.try({
+        try: () => {
+          if (!Array.isArray(value)) {
+            throw new Error(`Migration file "${filePath}" must export a default array.`);
+          }
+          return value as readonly MimicMigrationDefinition[];
+        },
+        catch: (error) => (error instanceof Error ? error : new Error(String(error))),
+      }),
+    ),
+  );
+
+const compileCreateChange = (
+  definition: MimicCreateMigrationDefinition,
+): CompiledCreateMigrationChange => ({
+  type: "create",
+  collection: definition.collection,
+  schema: serializeSchema(definition.schema.schema),
+  skipIfExists: definition.skipIfExists,
+});
+
+const hasOldSchema = (
+  definition: MimicUpdateMigrationDefinition,
+): definition is MimicUpdateMigrationDefinitionWithOldSchema => "oldSchema" in definition;
+
+const compileUpdateChange = (
+  definition: MimicUpdateMigrationDefinition,
+  bundler: MigrationBundlerShape,
+  filePath: string,
+  index: number,
+): Effect.Effect<CompiledUpdateMigrationChange, Error> =>
+  Effect.gen(function* () {
+    return {
+      type: "update",
+      collection: definition.collection,
+      schema: serializeSchema(definition.schema.schema),
+      oldSchema: hasOldSchema(definition)
+        ? serializeSchema(definition.oldSchema.schema)
+        : undefined,
+      dataMigrationSource: definition.execute ? yield* bundler.bundle(filePath, index) : undefined,
+    };
+  });
+
+type MigrationBundlerShape = {
+  readonly bundle: (filePath: string, index: number) => Effect.Effect<string, Error>;
+};
+
+const compileMigrationFile = (
+  bundler: MigrationBundlerShape,
+  filePath: string,
+): Effect.Effect<CompiledMigrationFile, Error> =>
+  Effect.gen(function* () {
+    const fileName = path.basename(filePath);
+    const { version, name } = parseMigrationFileName(fileName);
+    const source = yield* Effect.try({
+      try: () => fs.readFileSync(filePath, "utf8"),
+      catch: (error) => (error instanceof Error ? error : new Error(String(error))),
+    });
+    const definitions = yield* loadMigrationDefinitions(filePath);
+    const changes: CompiledMigrationChange[] = [];
+
+    for (const [index, definition] of definitions.entries()) {
+      if (definition.kind === "create") {
+        changes.push(compileCreateChange(definition));
+      } else {
+        changes.push(yield* compileUpdateChange(definition, bundler, filePath, index));
+      }
+    }
+
+    return {
+      version,
+      name,
+      filePath,
+      checksum: computeChecksum(source),
+      changes,
+    };
+  });
+
+export interface MigrationLoaderShape {
+  readonly load: () => Effect.Effect<readonly CompiledMigrationFile[], Error, MigrationBundler>;
+}
+
+export class MigrationLoader extends Context.Service<MigrationLoader, MigrationLoaderShape>()(
+  "@voidhash/mimic-cli/MigrationLoader",
+) {
+  static Default = Layer.succeed(MigrationLoader, {
+    load: () =>
+      Effect.gen(function* () {
+        const bundler = yield* MigrationBundler;
+        const migrationsDir = path.resolve(process.cwd(), MIGRATIONS_DIR_NAME);
+        if (!fs.existsSync(migrationsDir)) {
+          return [] as const;
+        }
+
+        const filePaths = yield* Effect.try({
+          try: () =>
+            fs
+              .readdirSync(migrationsDir, { withFileTypes: true })
+              .filter((entry) => entry.isFile() && MIGRATION_FILE_PATTERN.test(entry.name))
+              .map((entry) => path.join(migrationsDir, entry.name))
+              .sort(),
+          catch: (error) => (error instanceof Error ? error : new Error(String(error))),
+        });
+
+        const compiled: CompiledMigrationFile[] = [];
+        for (const filePath of filePaths) {
+          compiled.push(yield* compileMigrationFile(bundler, filePath));
+        }
+        return compiled;
+      }),
+  });
+}
diff --git a/apps/mimic-cli/src/utils/error-formatter.ts b/apps/mimic-cli/src/utils/error-formatter.ts
new file mode 100644
index 000000000..2c4e6d722
--- /dev/null
+++ b/apps/mimic-cli/src/utils/error-formatter.ts
@@ -0,0 +1,23 @@
+import { Cause, Console, Effect } from "effect";
+
+export const isDebugMode = (): boolean =>
+  process.argv.includes("--debug") || process.argv.includes("-d");
+
+export const withErrorHandler = <A, E, R>(
+  effect: Effect.Effect<A, E, R>,
+): Effect.Effect<A | void, never, R> =>
+  effect.pipe(
+    Effect.catchCause((cause) => {
+      if (isDebugMode()) {
+        return Console.error("\n--- Debug Trace ---").pipe(
+          Effect.andThen(Console.error(Cause.pretty(cause))),
+          Effect.andThen(Console.error("--- End Debug Trace ---\n")),
+          Effect.andThen(Effect.sync(() => process.exit(1))),
+        );
+      }
+      const error = Cause.squash(cause);
+      return Console.error(`Error: ${error instanceof Error ? error.message : String(error)}`).pipe(
+        Effect.andThen(Effect.sync(() => process.exit(1))),
+      );
+    }),
+  );
diff --git a/apps/mimic-cli/src/utils/js-loading/_es5.ts b/apps/mimic-cli/src/utils/js-loading/_es5.ts
new file mode 100644
index 000000000..ff8b4c563
--- /dev/null
+++ b/apps/mimic-cli/src/utils/js-loading/_es5.ts
@@ -0,0 +1 @@
+export default {};
diff --git a/apps/mimic-cli/src/utils/js-loading/config-loader.ts b/apps/mimic-cli/src/utils/js-loading/config-loader.ts
new file mode 100644
index 000000000..b54faa610
--- /dev/null
+++ b/apps/mimic-cli/src/utils/js-loading/config-loader.ts
@@ -0,0 +1,71 @@
+import { build, type Plugin } from "esbuild";
+import { Effect } from "effect";
+import { createRequire } from "node:module";
+import * as path from "node:path";
+import { PACKAGE_ROOT } from "../package-root.js";
+
+const PUBLIC_ROOT = path.resolve(PACKAGE_ROOT, "../..");
+
+const workspaceSourcePlugin: Plugin = {
+  name: "workspace-source",
+  setup(buildContext) {
+    const mappings: Record<string, string> = {
+      "@voidhash/mimic-cli": path.resolve(PACKAGE_ROOT, "src/index.ts"),
+      "@voidhash/mimic-core": path.resolve(
+        PUBLIC_ROOT,
+        "packages/mimic-core/src/index.ts",
+      ),
+    };
+
+    buildContext.onResolve({ filter: /^@voidhash\// }, (args) => {
+      const mapped = mappings[args.path];
+      if (mapped) {
+        return { path: mapped };
+      }
+      return undefined;
+    });
+  },
+};
+
+export class FailedToLoadConfigFileError extends Error {
+  constructor(
+    message: string,
+    override readonly cause?: unknown,
+  ) {
+    super(message);
+    this.name = "FailedToLoadConfigFileError";
+  }
+}
+
+const evaluateBundledModule = (filePath: string, source: string): unknown => {
+  const localRequire = createRequire(filePath);
+  const module = { exports: {} as unknown };
+  const evaluate = new Function("require", "module", "exports", source);
+  evaluate(localRequire, module, module.exports);
+  return (module.exports as { readonly default?: unknown }).default ?? module.exports;
+};
+
+export const loadConfigFile = (filePath: string) =>
+  Effect.tryPromise({
+    try: async () => {
+      const result = await build({
+        absWorkingDir: process.cwd(),
+        bundle: true,
+        entryPoints: [filePath],
+        format: "cjs",
+        platform: "node",
+        target: "node20",
+        write: false,
+        plugins: [workspaceSourcePlugin],
+      });
+
+      const source = result.outputFiles[0]?.text;
+      if (!source) {
+        throw new Error(`No bundled output was produced for "${filePath}".`);
+      }
+
+      return evaluateBundledModule(filePath, source);
+    },
+    catch: (error) =>
+      new FailedToLoadConfigFileError(`Failed to load config file: ${filePath}`, error),
+  });
diff --git a/apps/mimic-cli/src/utils/package-root.ts b/apps/mimic-cli/src/utils/package-root.ts
new file mode 100644
index 000000000..b4fd64207
--- /dev/null
+++ b/apps/mimic-cli/src/utils/package-root.ts
@@ -0,0 +1,6 @@
+import * as path from "node:path";
+
+export const PACKAGE_ROOT = path.resolve(
+  import.meta.dirname,
+  path.basename(import.meta.dirname) === "dist" ? ".." : "../..",
+);
diff --git a/apps/mimic-cli/tests/config-loader.test.ts b/apps/mimic-cli/tests/config-loader.test.ts
new file mode 100644
index 000000000..4d4b67798
--- /dev/null
+++ b/apps/mimic-cli/tests/config-loader.test.ts
@@ -0,0 +1,62 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { Effect } from "effect";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+
+import { ConfigLoader } from "../src/services/ConfigLoader.js";
+
+const originalCwd = process.cwd();
+const cliIndexPath = path.resolve(import.meta.dirname, "../src/index.ts");
+
+const withTempCwd = async (fn: (cwd: string) => Promise<void>) => {
+  const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-config-"));
+  process.chdir(cwd);
+  try {
+    await fn(cwd);
+  } finally {
+    process.chdir(originalCwd);
+    fs.rmSync(cwd, { recursive: true, force: true });
+  }
+};
+
+afterEach(() => {
+  process.chdir(originalCwd);
+});
+
+describe("ConfigLoader", () => {
+  it("loads .env before evaluating mimic.config.ts", async () => {
+    await withTempCwd(async (cwd) => {
+      fs.writeFileSync(
+        path.join(cwd, ".env"),
+        "MIMIC_URL=http://localhost:3000\nMIMIC_USERNAME=root\nMIMIC_PASSWORD=secret\n",
+      );
+      fs.writeFileSync(
+        path.join(cwd, "mimic.config.ts"),
+        `import { defineConfig, env } from ${JSON.stringify(cliIndexPath)};
+
+export default defineConfig({
+  url: env.MIMIC_URL,
+  username: env.MIMIC_USERNAME,
+  password: env.MIMIC_PASSWORD,
+  database: "todos",
+});
+`,
+      );
+
+      const config = await Effect.runPromise(
+        Effect.gen(function* () {
+          const loader = yield* ConfigLoader;
+          return yield* loader.load();
+        }).pipe(Effect.provide(ConfigLoader.Default)),
+      );
+
+      expect(config).toEqual({
+        url: "http://localhost:3000",
+        username: "root",
+        password: "secret",
+        database: "todos",
+      });
+    });
+  });
+});
diff --git a/apps/mimic-cli/tests/generate.test.ts b/apps/mimic-cli/tests/generate.test.ts
new file mode 100644
index 000000000..a906d28dc
--- /dev/null
+++ b/apps/mimic-cli/tests/generate.test.ts
@@ -0,0 +1,47 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { execFileSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+
+const appRoot = path.resolve(import.meta.dirname, "..");
+const cliEntry = path.join(appRoot, "src/cli/index.ts");
+// Under `nodeLinker: hoisted` the tsx bin lives at the workspace root rather than the
+// package-local node_modules; probe both, then fall back to PATH resolution.
+const tsxBin =
+  [
+    path.join(appRoot, "node_modules/.bin/tsx"),
+    path.join(appRoot, "../../node_modules/.bin/tsx"),
+  ].find((candidate) => fs.existsSync(candidate)) ?? "tsx";
+const originalCwd = process.cwd();
+
+const runGenerate = (cwd: string, name: string): void => {
+  execFileSync(tsxBin, [cliEntry, "generate", name], {
+    cwd,
+    stdio: "pipe",
+  });
+};
+
+afterEach(() => {
+  process.chdir(originalCwd);
+});
+
+describe("mimic generate", () => {
+  it("creates the next zero-padded migration file", () => {
+    const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-generate-"));
+    try {
+      fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
+      fs.writeFileSync(path.join(cwd, "migrations/00001_initial.ts"), "");
+
+      runGenerate(cwd, "Add slug");
+
+      const created = path.join(cwd, "migrations/00002_add-slug.ts");
+      expect(fs.existsSync(created)).toBe(true);
+      expect(fs.readFileSync(created, "utf8")).toContain(
+        "export default mimicConfig.defineMigrations((migration) => [",
+      );
+    } finally {
+      fs.rmSync(cwd, { recursive: true, force: true });
+    }
+  });
+});
diff --git a/apps/mimic-cli/tests/migration-loader.test.ts b/apps/mimic-cli/tests/migration-loader.test.ts
new file mode 100644
index 000000000..c396b9d70
--- /dev/null
+++ b/apps/mimic-cli/tests/migration-loader.test.ts
@@ -0,0 +1,128 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { Effect } from "effect";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+
+import { MigrationBundler } from "../src/services/MigrationBundler.js";
+import { MigrationLoader } from "../src/services/MigrationLoader.js";
+
+const originalCwd = process.cwd();
+const cliIndexPath = path.resolve(import.meta.dirname, "../src/index.ts");
+
+afterEach(() => {
+  process.chdir(originalCwd);
+});
+
+describe("MigrationLoader", () => {
+  it("serializes primitive schemas and bundles execute migrations", async () => {
+    const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-loader-"));
+    process.chdir(cwd);
+
+    try {
+      fs.writeFileSync(
+        path.join(cwd, "mimic.config.ts"),
+        `import { defineConfig } from ${JSON.stringify(cliIndexPath)};
+
+export default defineConfig({
+  url: "http://localhost:3000",
+  username: "root",
+  password: "secret",
+  database: "todos",
+});
+`,
+      );
+      fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
+      fs.writeFileSync(
+        path.join(cwd, "migrations/00001_todos.ts"),
+        `import mimicConfig from "../mimic.config";
+import { m } from ${JSON.stringify(cliIndexPath)};
+
+const OldTodo = m.Struct({
+  title: m.String().required(),
+});
+
+const NewTodo = m.Struct({
+  title: m.String().required(),
+  slug: m.String().required(),
+});
+
+export default mimicConfig.defineMigrations((migration) => [
+  migration.create({
+    collection: "todos",
+    schema: OldTodo,
+  }),
+  migration.update({
+    collection: "todos",
+    oldSchema: OldTodo,
+    schema: NewTodo,
+    execute: (ctx) => {
+      const title = ctx.oldRoot.title.get();
+      if (title) {
+        ctx.root.slug.set(title.toLowerCase());
+      }
+    },
+  }),
+]);
+`,
+      );
+
+      const migrations = await Effect.runPromise(
+        Effect.gen(function* () {
+          const loader = yield* MigrationLoader;
+          return yield* loader.load();
+        }).pipe(Effect.provide(MigrationLoader.Default), Effect.provide(MigrationBundler.Default)),
+      );
+
+      expect(migrations).toHaveLength(1);
+      expect(migrations[0]?.changes).toHaveLength(2);
+      const updateChange = migrations[0]?.changes[1];
+      expect(migrations[0]?.changes[0]).toEqual({
+        type: "create",
+        collection: "todos",
+        schema: {
+          kind: "object",
+          fields: {
+            title: {
+              kind: "string",
+              required: true,
+            },
+          },
+        },
+      });
+      expect(updateChange).toMatchObject({
+        type: "update",
+        collection: "todos",
+        oldSchema: {
+          kind: "object",
+          fields: {
+            title: {
+              kind: "string",
+              required: true,
+            },
+          },
+        },
+        schema: {
+          kind: "object",
+          fields: {
+            title: {
+              kind: "string",
+              required: true,
+            },
+            slug: {
+              kind: "string",
+              required: true,
+            },
+          },
+        },
+      });
+      expect(updateChange?.type).toBe("update");
+      if (updateChange?.type === "update") {
+        expect(typeof updateChange.dataMigrationSource).toBe("string");
+        expect(updateChange.dataMigrationSource).toContain("__MIMIC_RUN_MIGRATION__");
+      }
+    } finally {
+      fs.rmSync(cwd, { recursive: true, force: true });
+    }
+  });
+});
diff --git a/apps/mimic-cli/tsconfig.json b/apps/mimic-cli/tsconfig.json
new file mode 100644
index 000000000..de4410e9a
--- /dev/null
+++ b/apps/mimic-cli/tsconfig.json
@@ -0,0 +1,24 @@
+{
+  "compilerOptions": {
+    "lib": ["ESNext"],
+    "target": "ESNext",
+    "module": "Preserve",
+    "moduleDetection": "force",
+    "jsx": "react-jsx",
+    "allowJs": true,
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "noEmit": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noPropertyAccessFromIndexSignature": false
+  },
+  "include": ["src", "tests"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/apps/mimic-cli/vitest.mts b/apps/mimic-cli/vitest.mts
new file mode 100644
index 000000000..c60fa8c34
--- /dev/null
+++ b/apps/mimic-cli/vitest.mts
@@ -0,0 +1,7 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+  },
+});
diff --git a/examples/mimic-example/.env.example b/examples/mimic-example/.env.example
new file mode 100644
index 000000000..75a0e11f0
--- /dev/null
+++ b/examples/mimic-example/.env.example
@@ -0,0 +1,7 @@
+# Client (Vite)
+VITE_EXAMPLE_SERVER_URL=http://localhost:3001
+
+# Server (connects to the mimic-db host)
+HOST_URL=http://localhost:5001
+HOST_USERNAME=root
+HOST_PASSWORD=password
diff --git a/examples/mimic-example/LICENSE.md b/examples/mimic-example/LICENSE.md
new file mode 100644
index 000000000..cc433146c
--- /dev/null
+++ b/examples/mimic-example/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/examples/mimic-example/README.md b/examples/mimic-example/README.md
new file mode 100644
index 000000000..83b1eec9b
--- /dev/null
+++ b/examples/mimic-example/README.md
@@ -0,0 +1,3 @@
+# @voidhash/mimic-example
+
+Example React client and Node server demonstrating Mimic schema definition, authentication, live document editing, migrations, and presence.
diff --git a/examples/mimic-example/index.html b/examples/mimic-example/index.html
new file mode 100644
index 000000000..9b6335c0a
--- /dev/null
+++ b/examples/mimic-example/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Vite App</title>
+  </head>
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/examples/mimic-example/package.json b/examples/mimic-example/package.json
new file mode 100644
index 000000000..239fb9606
--- /dev/null
+++ b/examples/mimic-example/package.json
@@ -0,0 +1,54 @@
+{
+  "name": "@voidhash/mimic-example",
+  "version": "1.0.0-beta.19",
+  "private": true,
+  "description": "Example React application and Node server for the Mimic collaboration SDK.",
+  "author": "Voidhash (https://voidhash.com)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "examples/mimic-example"
+  },
+  "type": "module",
+  "scripts": {
+    "dev": "vp dev",
+    "dev:server": "tsx watch src/server/index.ts",
+    "build": "vp build",
+    "preview": "vp preview",
+    "start:server": "tsx src/server/index.ts",
+    "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.server.json"
+  },
+  "dependencies": {
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
+    "@effect/platform-node": "4.0.0-beta.84",
+    "@tailwindcss/postcss": "^4.1.15",
+    "@tanstack/react-router": "1.163.3",
+    "@tanstack/react-router-devtools": "1.163.3",
+    "@tanstack/router-plugin": "1.163.3",
+    "@voidhash/mimic": "workspace:*",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-server": "workspace:*",
+    "effect": "4.0.0-beta.84",
+    "postcss": "^8.5.1",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "redaxios": "^0.5.1",
+    "tailwindcss": "^4.1.17",
+    "zod": "^3.24.2",
+    "zustand": "^5.0.9"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "@types/react": "19.1.17",
+    "@types/react-dom": "19.1.9",
+    "@vitejs/plugin-react": "^4.3.4",
+    "@voidhash/tsconfig": "workspace:*",
+    "tsx": "^4.19.3",
+    "typescript": "5.8.3",
+    "vite": "catalog:",
+    "vite-plus": "0.1.23"
+  }
+}
diff --git a/examples/mimic-example/postcss.config.mjs b/examples/mimic-example/postcss.config.mjs
new file mode 100644
index 000000000..c2ddf7482
--- /dev/null
+++ b/examples/mimic-example/postcss.config.mjs
@@ -0,0 +1,5 @@
+export default {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
diff --git a/examples/mimic-example/src/components/kanban/AddCardForm.tsx b/examples/mimic-example/src/components/kanban/AddCardForm.tsx
new file mode 100644
index 000000000..bb3ae669a
--- /dev/null
+++ b/examples/mimic-example/src/components/kanban/AddCardForm.tsx
@@ -0,0 +1,110 @@
+import * as React from "react";
+import { useState } from "react";
+import { useKanban } from "../../context/KanbanContext";
+
+interface AddCardFormProps {
+  columnId: string;
+}
+
+export function AddCardForm({ columnId }: AddCardFormProps) {
+  const [isAdding, setIsAdding] = useState(false);
+  const [title, setTitle] = useState("");
+  const { addCard } = useKanban();
+
+  const handleSubmit = (e: React.FormEvent) => {
+    e.preventDefault();
+    if (title.trim()) {
+      addCard(columnId, title.trim());
+      setTitle("");
+      setIsAdding(false);
+    }
+  };
+
+  const handleCancel = () => {
+    setTitle("");
+    setIsAdding(false);
+  };
+
+  if (!isAdding) {
+    return (
+      <button
+        onClick={() => setIsAdding(true)}
+        className="
+          w-full text-left text-gray-500 dark:text-gray-400
+          hover:text-gray-700 dark:hover:text-gray-300
+          hover:bg-gray-200 dark:hover:bg-gray-700
+          rounded-lg p-2 transition-colors text-sm
+          flex items-center gap-2
+        "
+      >
+        <svg
+          xmlns="http://www.w3.org/2000/svg"
+          className="h-4 w-4"
+          fill="none"
+          viewBox="0 0 24 24"
+          stroke="currentColor"
+        >
+          <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 4v16m8-8H4" />
+        </svg>
+        Add a card
+      </button>
+    );
+  }
+
+  return (
+    <form onSubmit={handleSubmit} className="space-y-2">
+      <textarea
+        value={title}
+        onChange={(e) => setTitle(e.target.value)}
+        placeholder="Enter a title for this card..."
+        autoFocus
+        rows={3}
+        className="
+          w-full px-3 py-2 rounded-lg
+          bg-white dark:bg-gray-700
+          border border-gray-300 dark:border-gray-600
+          text-gray-900 dark:text-gray-100
+          placeholder-gray-400 dark:placeholder-gray-500
+          focus:outline-none focus:ring-2 focus:ring-blue-500
+          text-sm resize-none
+        "
+        onKeyDown={(e) => {
+          if (e.key === "Enter" && !e.shiftKey) {
+            e.preventDefault();
+            handleSubmit(e);
+          }
+          if (e.key === "Escape") {
+            handleCancel();
+          }
+        }}
+      />
+      <div className="flex gap-2">
+        <button
+          type="submit"
+          disabled={!title.trim()}
+          className="
+            px-3 py-1.5 rounded-lg text-sm font-medium
+            bg-blue-600 text-white
+            hover:bg-blue-700
+            disabled:opacity-50 disabled:cursor-not-allowed
+            transition-colors
+          "
+        >
+          Add card
+        </button>
+        <button
+          type="button"
+          onClick={handleCancel}
+          className="
+            px-3 py-1.5 rounded-lg text-sm
+            text-gray-600 dark:text-gray-400
+            hover:bg-gray-200 dark:hover:bg-gray-700
+            transition-colors
+          "
+        >
+          Cancel
+        </button>
+      </div>
+    </form>
+  );
+}
diff --git a/examples/mimic-example/src/components/kanban/AddColumnForm.tsx b/examples/mimic-example/src/components/kanban/AddColumnForm.tsx
new file mode 100644
index 000000000..82887eacb
--- /dev/null
+++ b/examples/mimic-example/src/components/kanban/AddColumnForm.tsx
@@ -0,0 +1,107 @@
+import * as React from "react";
+import { useState } from "react";
+import { useKanban } from "../../context/KanbanContext";
+
+export function AddColumnForm() {
+  const [isAdding, setIsAdding] = useState(false);
+  const [title, setTitle] = useState("");
+  const { addColumn } = useKanban();
+
+  const handleSubmit = (e: React.FormEvent) => {
+    e.preventDefault();
+    if (title.trim()) {
+      addColumn(title.trim());
+      setTitle("");
+      setIsAdding(false);
+    }
+  };
+
+  const handleCancel = () => {
+    setTitle("");
+    setIsAdding(false);
+  };
+
+  if (!isAdding) {
+    return (
+      <button
+        onClick={() => setIsAdding(true)}
+        className="
+          flex-shrink-0 w-72
+          bg-gray-100/50 dark:bg-gray-800/50
+          hover:bg-gray-200/70 dark:hover:bg-gray-700/70
+          rounded-xl p-3
+          text-gray-500 dark:text-gray-400
+          hover:text-gray-700 dark:hover:text-gray-300
+          transition-colors text-sm font-medium
+          flex items-center gap-2
+        "
+      >
+        <svg
+          xmlns="http://www.w3.org/2000/svg"
+          className="h-5 w-5"
+          fill="none"
+          viewBox="0 0 24 24"
+          stroke="currentColor"
+        >
+          <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 4v16m8-8H4" />
+        </svg>
+        Add another list
+      </button>
+    );
+  }
+
+  return (
+    <div className="flex-shrink-0 w-72 bg-gray-100 dark:bg-gray-800 rounded-xl p-3">
+      <form onSubmit={handleSubmit} className="space-y-2">
+        <input
+          type="text"
+          value={title}
+          onChange={(e) => setTitle(e.target.value)}
+          placeholder="Enter list title..."
+          autoFocus
+          className="
+            w-full px-3 py-2 rounded-lg
+            bg-white dark:bg-gray-700
+            border border-gray-300 dark:border-gray-600
+            text-gray-900 dark:text-gray-100
+            placeholder-gray-400 dark:placeholder-gray-500
+            focus:outline-none focus:ring-2 focus:ring-blue-500
+            text-sm
+          "
+          onKeyDown={(e) => {
+            if (e.key === "Escape") {
+              handleCancel();
+            }
+          }}
+        />
+        <div className="flex gap-2">
+          <button
+            type="submit"
+            disabled={!title.trim()}
+            className="
+              px-3 py-1.5 rounded-lg text-sm font-medium
+              bg-blue-600 text-white
+              hover:bg-blue-700
+              disabled:opacity-50 disabled:cursor-not-allowed
+              transition-colors
+            "
+          >
+            Add list
+          </button>
+          <button
+            type="button"
+            onClick={handleCancel}
+            className="
+              px-3 py-1.5 rounded-lg text-sm
+              text-gray-600 dark:text-gray-400
+              hover:bg-gray-200 dark:hover:bg-gray-700
+              transition-colors
+            "
+          >
+            Cancel
+          </button>
+        </div>
+      </form>
+    </div>
+  );
+}
diff --git a/examples/mimic-example/src/components/kanban/Card.tsx b/examples/mimic-example/src/components/kanban/Card.tsx
new file mode 100644
index 000000000..701bab244
--- /dev/null
+++ b/examples/mimic-example/src/components/kanban/Card.tsx
@@ -0,0 +1,70 @@
+import * as React from "react";
+import { useSortable } from "@dnd-kit/sortable";
+import { CSS } from "@dnd-kit/utilities";
+import type { Card as CardType } from "../../types/kanban";
+
+interface CardProps {
+  card: CardType;
+  columnId: string;
+  onClick: () => void;
+}
+
+export function Card({ card, columnId, onClick }: CardProps) {
+  const { attributes, listeners, setNodeRef, transform, transition, isDragging } = useSortable({
+    id: card.id,
+    data: {
+      type: "card",
+      card,
+      columnId,
+    },
+  });
+
+  const style = {
+    transform: CSS.Transform.toString(transform),
+    transition,
+  };
+
+  return (
+    <div
+      ref={setNodeRef}
+      style={style}
+      {...attributes}
+      {...listeners}
+      onClick={onClick}
+      className={`
+        bg-white dark:bg-gray-700 rounded-lg shadow-sm border border-gray-200 dark:border-gray-600
+        p-3 cursor-grab active:cursor-grabbing
+        hover:shadow-md hover:border-gray-300 dark:hover:border-gray-500
+        transition-shadow
+        ${isDragging ? "opacity-50 shadow-lg ring-2 ring-blue-500" : ""}
+      `}
+    >
+      <h4 className="font-medium text-gray-900 dark:text-gray-100 text-sm">{card.title}</h4>
+      {card.description && (
+        <p className="text-gray-500 dark:text-gray-400 text-xs mt-1 line-clamp-2">
+          {card.description}
+        </p>
+      )}
+    </div>
+  );
+}
+
+// Overlay version for drag preview
+export function CardOverlay({ card }: { card: CardType }) {
+  return (
+    <div
+      className="
+        bg-white dark:bg-gray-700 rounded-lg shadow-xl border border-blue-500
+        p-3 cursor-grabbing rotate-3
+        w-64
+      "
+    >
+      <h4 className="font-medium text-gray-900 dark:text-gray-100 text-sm">{card.title}</h4>
+      {card.description && (
+        <p className="text-gray-500 dark:text-gray-400 text-xs mt-1 line-clamp-2">
+          {card.description}
+        </p>
+      )}
+    </div>
+  );
+}
diff --git a/examples/mimic-example/src/components/kanban/Column.tsx b/examples/mimic-example/src/components/kanban/Column.tsx
new file mode 100644
index 000000000..aa938891e
--- /dev/null
+++ b/examples/mimic-example/src/components/kanban/Column.tsx
@@ -0,0 +1,228 @@
+import * as React from "react";
+import { useState } from "react";
+import { useSortable, SortableContext, verticalListSortingStrategy } from "@dnd-kit/sortable";
+import { CSS } from "@dnd-kit/utilities";
+import { useDroppable } from "@dnd-kit/core";
+import { Card } from "./Card";
+import { AddCardForm } from "./AddCardForm";
+import { useKanban } from "../../context/KanbanContext";
+import type { Column as ColumnType, Card as CardType } from "../../types/kanban";
+import type { CardSnapshot, ColumnSnapshot } from "../../shared";
+
+interface ColumnProps {
+  column: ColumnSnapshot;
+  cards: readonly CardSnapshot[];
+  onCardClick: (card: CardType) => void;
+}
+
+export function Column({ column, cards, onCardClick }: ColumnProps) {
+  const [isEditing, setIsEditing] = useState(false);
+  const columnName = column.data?.name ?? "";
+  const [title, setTitle] = useState(columnName);
+  const { renameColumn, deleteColumn } = useKanban();
+
+  const { attributes, listeners, setNodeRef, transform, transition, isDragging } = useSortable({
+    id: column.id,
+    data: {
+      type: "column",
+      column,
+    },
+  });
+
+  const style = {
+    transform: CSS.Transform.toString(transform),
+    transition,
+  };
+
+  const handleTitleSubmit = () => {
+    if (title.trim()) {
+      renameColumn(column.id, title.trim());
+    } else {
+      setTitle(columnName);
+    }
+    setIsEditing(false);
+  };
+
+  const handleDeleteColumn = () => {
+    if (cards.length > 0) {
+      if (confirm(`Delete "${columnName}" and its ${cards.length} card(s)?`)) {
+        deleteColumn(column.id);
+      }
+    } else {
+      deleteColumn(column.id);
+    }
+  };
+
+  return (
+    <div
+      ref={setNodeRef}
+      style={style}
+      className={`
+        bg-gray-100 dark:bg-gray-800 rounded-xl w-72 flex-shrink-0
+        flex flex-col max-h-full
+        ${isDragging ? "opacity-50" : ""}
+      `}
+    >
+      {/* Column Header */}
+      <div
+        {...attributes}
+        {...listeners}
+        className="p-3 flex items-center justify-between cursor-grab active:cursor-grabbing"
+      >
+        {isEditing ? (
+          <input
+            type="text"
+            value={title}
+            onChange={(e) => setTitle(e.target.value)}
+            onBlur={handleTitleSubmit}
+            onKeyDown={(e) => {
+              if (e.key === "Enter") handleTitleSubmit();
+              if (e.key === "Escape") {
+                setTitle(columnName);
+                setIsEditing(false);
+              }
+            }}
+            autoFocus
+            className="
+              font-semibold text-gray-800 dark:text-gray-200 bg-white dark:bg-gray-700
+              px-2 py-1 rounded border border-blue-500 outline-none w-full
+            "
+            onClick={(e) => e.stopPropagation()}
+          />
+        ) : (
+          <h3
+            className="font-semibold text-gray-800 dark:text-gray-200 cursor-text"
+            onClick={(e) => {
+              e.stopPropagation();
+              setIsEditing(true);
+            }}
+          >
+            {columnName}
+            <span className="ml-2 text-gray-500 dark:text-gray-400 font-normal text-sm">
+              {cards.length}
+            </span>
+          </h3>
+        )}
+        <button
+          onClick={(e) => {
+            e.stopPropagation();
+            handleDeleteColumn();
+          }}
+          className="
+            text-gray-400 hover:text-red-500 dark:hover:text-red-400
+            p-1 rounded hover:bg-gray-200 dark:hover:bg-gray-700
+            transition-colors
+          "
+          title="Delete column"
+        >
+          <svg
+            xmlns="http://www.w3.org/2000/svg"
+            className="h-4 w-4"
+            fill="none"
+            viewBox="0 0 24 24"
+            stroke="currentColor"
+          >
+            <path
+              strokeLinecap="round"
+              strokeLinejoin="round"
+              strokeWidth={2}
+              d="M6 18L18 6M6 6l12 12"
+            />
+          </svg>
+        </button>
+      </div>
+
+      {/* Cards Container */}
+      <ColumnDropZone column={column} cards={cards} onCardClick={onCardClick} />
+
+      {/* Add Card Form */}
+      <div className="p-2">
+        <AddCardForm columnId={column.id} />
+      </div>
+    </div>
+  );
+}
+
+// Separate drop zone component to handle dropping cards into columns
+function ColumnDropZone({
+  column,
+  cards,
+  onCardClick,
+}: {
+  column: ColumnSnapshot;
+  cards: readonly CardSnapshot[];
+  onCardClick: (card: CardType) => void;
+}) {
+  const { setNodeRef } = useDroppable({
+    id: `column-droppable-${column.id}`,
+    data: {
+      type: "column",
+      columnId: column.id,
+    },
+  });
+
+  return (
+    <div ref={setNodeRef} className="flex-1 overflow-y-auto px-2 pb-2 space-y-2 min-h-[100px]">
+      <SortableContext
+        items={column.children.map((child: CardSnapshot) => child.id)}
+        strategy={verticalListSortingStrategy}
+      >
+        {cards.map((card) => (
+          <Card
+            key={card.id}
+            card={{
+              id: card.id,
+              title: card.data?.title ?? "",
+              description: card.data?.description ?? "",
+            }}
+            columnId={column.id}
+            onClick={() =>
+              onCardClick({
+                id: card.id,
+                title: card.data?.title ?? "",
+                description: card.data?.description ?? "",
+              })
+            }
+          />
+        ))}
+      </SortableContext>
+    </div>
+  );
+}
+
+// Overlay version for drag preview
+export function ColumnOverlay({
+  column,
+  cards,
+}: {
+  column: ColumnSnapshot;
+  cards: readonly CardSnapshot[];
+}) {
+  return (
+    <div
+      className="
+        bg-gray-100 dark:bg-gray-800 rounded-xl w-72
+        shadow-2xl rotate-3 opacity-90
+      "
+    >
+      <div className="p-3">
+        <h3 className="font-semibold text-gray-800 dark:text-gray-200">
+          {column.data?.name ?? ""}
+          <span className="ml-2 text-gray-500 dark:text-gray-400 font-normal text-sm">
+            {cards.length}
+          </span>
+        </h3>
+      </div>
+      <div className="px-2 pb-2 space-y-2 max-h-48 overflow-hidden">
+        {cards.slice(0, 3).map((card) => (
+          <div key={card.id} className="bg-white dark:bg-gray-700 rounded-lg shadow-sm p-2 text-sm">
+            {card.data?.title ?? ""}
+          </div>
+        ))}
+        {cards.length > 3 && (
+          <div className="text-center text-gray-500 text-sm">+{cards.length - 3} more</div>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/examples/mimic-example/src/components/kanban/EditCardModal.tsx b/examples/mimic-example/src/components/kanban/EditCardModal.tsx
new file mode 100644
index 000000000..c58524a78
--- /dev/null
+++ b/examples/mimic-example/src/components/kanban/EditCardModal.tsx
@@ -0,0 +1,186 @@
+import * as React from "react";
+import { useState, useEffect, useRef } from "react";
+import { useKanban } from "../../context/KanbanContext";
+import type { Card } from "../../types/kanban";
+
+interface EditCardModalProps {
+  card: Card;
+  columnId: string;
+  onClose: () => void;
+}
+
+export function EditCardModal({ card, columnId, onClose }: EditCardModalProps) {
+  const [title, setTitle] = useState(card.title);
+  const [description, setDescription] = useState(card.description || "");
+  const { updateCard, deleteCard } = useKanban();
+  const modalRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    const handleEscape = (e: KeyboardEvent) => {
+      if (e.key === "Escape") {
+        onClose();
+      }
+    };
+
+    const handleClickOutside = (e: MouseEvent) => {
+      if (modalRef.current && !modalRef.current.contains(e.target as Node)) {
+        onClose();
+      }
+    };
+
+    document.addEventListener("keydown", handleEscape);
+    document.addEventListener("mousedown", handleClickOutside);
+
+    return () => {
+      document.removeEventListener("keydown", handleEscape);
+      document.removeEventListener("mousedown", handleClickOutside);
+    };
+  }, [onClose]);
+
+  const handleSave = () => {
+    if (title.trim()) {
+      updateCard(card.id, title.trim(), description.trim() || undefined);
+      onClose();
+    }
+  };
+
+  const handleDelete = () => {
+    if (confirm("Are you sure you want to delete this card?")) {
+      deleteCard(card.id, columnId);
+      onClose();
+    }
+  };
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center bg-black/50 backdrop-blur-sm">
+      <div
+        ref={modalRef}
+        className="
+          bg-white dark:bg-gray-800 rounded-xl shadow-2xl
+          w-full max-w-lg mx-4
+          max-h-[90vh] overflow-y-auto
+        "
+      >
+        {/* Header */}
+        <div className="flex items-center justify-between p-4 border-b border-gray-200 dark:border-gray-700">
+          <h2 className="text-lg font-semibold text-gray-900 dark:text-gray-100">Edit Card</h2>
+          <button
+            onClick={onClose}
+            className="
+              text-gray-400 hover:text-gray-600 dark:hover:text-gray-300
+              p-1 rounded-lg hover:bg-gray-100 dark:hover:bg-gray-700
+              transition-colors
+            "
+          >
+            <svg
+              xmlns="http://www.w3.org/2000/svg"
+              className="h-5 w-5"
+              fill="none"
+              viewBox="0 0 24 24"
+              stroke="currentColor"
+            >
+              <path
+                strokeLinecap="round"
+                strokeLinejoin="round"
+                strokeWidth={2}
+                d="M6 18L18 6M6 6l12 12"
+              />
+            </svg>
+          </button>
+        </div>
+
+        {/* Body */}
+        <div className="p-4 space-y-4">
+          <div>
+            <label
+              htmlFor="card-title"
+              className="block text-sm font-medium text-gray-700 dark:text-gray-300 mb-1"
+            >
+              Title
+            </label>
+            <input
+              id="card-title"
+              type="text"
+              value={title}
+              onChange={(e) => setTitle(e.target.value)}
+              className="
+                w-full px-3 py-2 rounded-lg
+                bg-gray-50 dark:bg-gray-700
+                border border-gray-300 dark:border-gray-600
+                text-gray-900 dark:text-gray-100
+                focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent
+              "
+              autoFocus
+            />
+          </div>
+
+          <div>
+            <label
+              htmlFor="card-description"
+              className="block text-sm font-medium text-gray-700 dark:text-gray-300 mb-1"
+            >
+              Description
+            </label>
+            <textarea
+              id="card-description"
+              value={description}
+              onChange={(e) => setDescription(e.target.value)}
+              rows={5}
+              placeholder="Add a more detailed description..."
+              className="
+                w-full px-3 py-2 rounded-lg
+                bg-gray-50 dark:bg-gray-700
+                border border-gray-300 dark:border-gray-600
+                text-gray-900 dark:text-gray-100
+                placeholder-gray-400 dark:placeholder-gray-500
+                focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent
+                resize-none
+              "
+            />
+          </div>
+        </div>
+
+        {/* Footer */}
+        <div className="flex items-center justify-between p-4 border-t border-gray-200 dark:border-gray-700">
+          <button
+            onClick={handleDelete}
+            className="
+              px-4 py-2 rounded-lg text-sm font-medium
+              text-red-600 dark:text-red-400
+              hover:bg-red-50 dark:hover:bg-red-900/20
+              transition-colors
+            "
+          >
+            Delete
+          </button>
+          <div className="flex gap-2">
+            <button
+              onClick={onClose}
+              className="
+                px-4 py-2 rounded-lg text-sm font-medium
+                text-gray-600 dark:text-gray-400
+                hover:bg-gray-100 dark:hover:bg-gray-700
+                transition-colors
+              "
+            >
+              Cancel
+            </button>
+            <button
+              onClick={handleSave}
+              disabled={!title.trim()}
+              className="
+                px-4 py-2 rounded-lg text-sm font-medium
+                bg-blue-600 text-white
+                hover:bg-blue-700
+                disabled:opacity-50 disabled:cursor-not-allowed
+                transition-colors
+              "
+            >
+              Save
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/examples/mimic-example/src/components/kanban/KanbanBoard.tsx b/examples/mimic-example/src/components/kanban/KanbanBoard.tsx
new file mode 100644
index 000000000..234e5edd2
--- /dev/null
+++ b/examples/mimic-example/src/components/kanban/KanbanBoard.tsx
@@ -0,0 +1,326 @@
+import * as React from "react";
+import { useContext, useState, useMemo } from "react";
+import {
+  DndContext,
+  DragOverlay,
+  closestCorners,
+  KeyboardSensor,
+  PointerSensor,
+  useSensor,
+  useSensors,
+  type DragStartEvent,
+  type DragEndEvent,
+  type DragOverEvent,
+} from "@dnd-kit/core";
+import {
+  SortableContext,
+  horizontalListSortingStrategy,
+  sortableKeyboardCoordinates,
+} from "@dnd-kit/sortable";
+import { Column, ColumnOverlay } from "./Column";
+import { CardOverlay } from "./Card";
+import { AddColumnForm } from "./AddColumnForm";
+import { EditCardModal } from "./EditCardModal";
+import { useKanban } from "../../context/KanbanContext";
+import type { Card as CardType, Column as ColumnType } from "../../types/kanban";
+import { useTodoStore, TodoStoreContext } from "../../lib/store";
+import { useUndoRedo, useUndoRedoKeyboard } from "@voidhash/mimic/zustand-commander";
+import type { CardSnapshot, ColumnSnapshot } from "../../shared";
+
+const toCard = (card: CardSnapshot): CardType => ({
+  id: card.id,
+  title: card.data?.title ?? "",
+  description: card.data?.description ?? "",
+});
+
+export function KanbanBoard() {
+  const { state, moveCard, reorderColumns } = useKanban();
+  const [activeId, setActiveId] = useState<string | null>(null);
+  const [activeType, setActiveType] = useState<"card" | "column" | null>(null);
+  const [editingCard, setEditingCard] = useState<{ card: CardType; columnId: string } | null>(null);
+  const { mimic } = useTodoStore();
+  const storeApi = useContext(TodoStoreContext)!;
+
+  // Undo/Redo functionality
+  const { canUndo, canRedo, undo, redo, undoCount, redoCount } = useUndoRedo(storeApi);
+
+  // Enable keyboard shortcuts (Ctrl/Cmd+Z for undo, Ctrl/Cmd+Shift+Z for redo)
+  useUndoRedoKeyboard(storeApi);
+
+  const sensors = useSensors(
+    useSensor(PointerSensor, {
+      activationConstraint: {
+        distance: 5,
+      },
+    }),
+    useSensor(KeyboardSensor, {
+      coordinateGetter: sortableKeyboardCoordinates,
+    }),
+  );
+
+  const columns = useMemo(() => {
+    return state?.children;
+  }, [state?.children]);
+
+  const allCards = useMemo(() => {
+    return state?.children.flatMap((child: ColumnSnapshot) => child.children) ?? [];
+  }, [state?.children]);
+
+  const activeCard = useMemo(() => {
+    if (activeType === "card" && activeId) {
+      const card = allCards.find((candidate: CardSnapshot) => candidate.id === activeId);
+      return card ? toCard(card) : null;
+    }
+    return null;
+  }, [activeType, activeId, allCards]);
+
+  const allColumns = useMemo(() => {
+    return state?.children ?? [];
+  }, [state?.children]);
+
+  const activeColumn = useMemo(() => {
+    if (activeType === "column" && activeId) {
+      return allColumns?.find((column: ColumnSnapshot) => column.id === activeId);
+    }
+    return null;
+  }, [activeType, activeId, allColumns]);
+
+  const activeColumnCards = useMemo(() => {
+    if (activeColumn) {
+      return activeColumn.children ?? [];
+    }
+    return [];
+  }, [activeColumn]);
+
+  function findColumnByCardId(cardId: string): string | null {
+    for (const column of allColumns) {
+      if (column.children.some((child: CardSnapshot) => child.id === cardId)) {
+        return column.id;
+      }
+    }
+    return null;
+  }
+
+  function handleDragStart(event: DragStartEvent) {
+    const { active } = event;
+    const type = active.data.current?.type as "card" | "column" | undefined;
+
+    if (type === "card") {
+      setActiveId(active.id as string);
+      setActiveType("card");
+    } else if (type === "column") {
+      setActiveId(active.id as string);
+      setActiveType("column");
+    }
+  }
+
+  function handleDragOver(event: DragOverEvent) {
+    const { active, over } = event;
+    if (!over) return;
+
+    const activeType = active.data.current?.type;
+    const overType = over.data.current?.type;
+
+    // Only handle card movements during drag over
+    if (activeType !== "card") return;
+
+    const activeCardId = active.id as string;
+    const sourceColumnId = findColumnByCardId(activeCardId);
+    if (!sourceColumnId) return;
+
+    let destinationColumnId: string | null = null;
+
+    if (overType === "card") {
+      // Dragging over another card
+      destinationColumnId = findColumnByCardId(over.id as string);
+    } else if (overType === "column" || over.id.toString().startsWith("column-droppable-")) {
+      // Dragging over a column or its drop zone
+      destinationColumnId =
+        over.data.current?.columnId || over.id.toString().replace("column-droppable-", "");
+    }
+
+    if (!destinationColumnId || sourceColumnId === destinationColumnId) return;
+
+    // Move card to new column
+    const sourceColumn = allColumns?.find((column: ColumnSnapshot) => column.id === sourceColumnId);
+    const destinationColumn = allColumns?.find(
+      (column: ColumnSnapshot) => column.id === destinationColumnId,
+    );
+    if (!sourceColumn || !destinationColumn) return;
+
+    const sourceIndex =
+      sourceColumn?.children.findIndex((child: CardSnapshot) => child.id === activeCardId) ?? -1;
+    let destinationIndex = destinationColumn?.children.length ?? 0;
+
+    if (overType === "card") {
+      destinationIndex =
+        destinationColumn?.children.findIndex(
+          (child: CardSnapshot) => child.id === (over.id as string),
+        ) ?? -1;
+    }
+
+    moveCard(activeCardId, sourceColumnId, destinationColumnId, sourceIndex, destinationIndex);
+  }
+
+  function handleDragEnd(event: DragEndEvent) {
+    const { active, over } = event;
+
+    setActiveId(null);
+    setActiveType(null);
+
+    if (!over) return;
+
+    const activeType = active.data.current?.type;
+
+    if (activeType === "column") {
+      // Reorder columns
+      if (active.id !== over.id) {
+        const sourceIndex =
+          allColumns?.findIndex((column: ColumnSnapshot) => column.id === (active.id as string)) ??
+          -1;
+        const destinationIndex =
+          allColumns?.findIndex((column: ColumnSnapshot) => column.id === (over.id as string)) ??
+          -1;
+
+        if (sourceIndex !== -1 && destinationIndex !== -1) {
+          reorderColumns(active.id as string, destinationIndex);
+        }
+      }
+    } else if (activeType === "card") {
+      // Handle card reordering within the same column
+      const activeCardId = active.id as string;
+      const sourceColumnId = findColumnByCardId(activeCardId);
+      if (!sourceColumnId) return;
+
+      const overType = over.data.current?.type;
+
+      if (overType === "card") {
+        const overCardId = over.id as string;
+        const destinationColumnId = findColumnByCardId(overCardId);
+
+        if (destinationColumnId && sourceColumnId === destinationColumnId) {
+          const column = allColumns?.find((column: ColumnSnapshot) => column.id === sourceColumnId);
+          if (!column) return;
+
+          const sourceIndex =
+            column?.children.findIndex((child: CardSnapshot) => child.id === activeCardId) ?? -1;
+          const destinationIndex =
+            column?.children.findIndex((child: CardSnapshot) => child.id === overCardId) ?? -1;
+
+          if (sourceIndex !== destinationIndex) {
+            moveCard(
+              activeCardId,
+              sourceColumnId,
+              destinationColumnId,
+              sourceIndex,
+              destinationIndex,
+            );
+          }
+        }
+      }
+    }
+  }
+
+  return (
+    <div className="h-full flex flex-col">
+      <div className="p-4 border-b border-gray-200 dark:border-gray-700 flex flex-row items-center justify-between">
+        <h1 className="text-2xl font-bold text-gray-900 dark:text-gray-100">Kanban Board</h1>
+        <div className="flex flex-row items-center gap-4">
+          {/* Undo/Redo buttons */}
+          <div className="flex flex-row items-center gap-1">
+            <button
+              onClick={undo}
+              disabled={!canUndo}
+              className="px-3 py-1.5 text-sm font-medium rounded-md bg-gray-100 dark:bg-gray-800 text-gray-700 dark:text-gray-300 hover:bg-gray-200 dark:hover:bg-gray-700 disabled:opacity-50 disabled:cursor-not-allowed transition-colors"
+              title={`Undo (${undoCount})`}
+            >
+              ↶ Undo
+            </button>
+            <button
+              onClick={redo}
+              disabled={!canRedo}
+              className="px-3 py-1.5 text-sm font-medium rounded-md bg-gray-100 dark:bg-gray-800 text-gray-700 dark:text-gray-300 hover:bg-gray-200 dark:hover:bg-gray-700 disabled:opacity-50 disabled:cursor-not-allowed transition-colors"
+              title={`Redo (${redoCount})`}
+            >
+              Redo ↷
+            </button>
+          </div>
+
+          {/* Connection status */}
+          <div className="flex flex-row items-center gap-2">
+            <div
+              className={`px-2 py-1 text-xs rounded ${mimic.isConnected ? "bg-green-100 text-green-800 dark:bg-green-900 dark:text-green-200" : "bg-red-100 text-red-800 dark:bg-red-900 dark:text-red-200"}`}
+            >
+              {mimic.isConnected ? "Connected" : "Disconnected"}
+            </div>
+            <div
+              className={`px-2 py-1 text-xs rounded ${mimic.isReady ? "bg-green-100 text-green-800 dark:bg-green-900 dark:text-green-200" : "bg-yellow-100 text-yellow-800 dark:bg-yellow-900 dark:text-yellow-200"}`}
+            >
+              {mimic.isReady ? "Ready" : "Loading..."}
+            </div>
+          </div>
+
+          {/* Presence indicators */}
+          <div className="flex flex-row items-center -space-x-2">
+            {Array.from(mimic.presence?.all.entries() ?? []).map(
+              ([id, entry]: [string, { data: { name?: string } }]) => (
+                <div
+                  key={id}
+                  className="w-8 h-8 rounded-full bg-blue-500 dark:bg-blue-600 flex items-center justify-center text-white text-sm font-medium border-2 border-white dark:border-gray-900"
+                  title={entry.data.name ?? `User ${id}`}
+                >
+                  {entry.data.name?.slice(0, 1).toUpperCase() ?? "?"}
+                </div>
+              ),
+            )}
+          </div>
+        </div>
+      </div>
+
+      <DndContext
+        sensors={sensors}
+        collisionDetection={closestCorners}
+        onDragStart={handleDragStart}
+        onDragOver={handleDragOver}
+        onDragEnd={handleDragEnd}
+      >
+        <div className="flex-1 overflow-x-auto p-4">
+          <div className="flex gap-4 h-full items-start">
+            <SortableContext
+              items={allColumns.map((column: ColumnSnapshot) => column.id)}
+              strategy={horizontalListSortingStrategy}
+            >
+              {allColumns.map((column: ColumnSnapshot) => {
+                const cards = column.children;
+
+                return (
+                  <Column
+                    key={column.id}
+                    column={column}
+                    cards={cards}
+                    onCardClick={(card) => setEditingCard({ card, columnId: column.id })}
+                  />
+                );
+              })}
+            </SortableContext>
+
+            <AddColumnForm />
+          </div>
+        </div>
+
+        <DragOverlay>
+          {activeCard && <CardOverlay card={activeCard} />}
+          {activeColumn && <ColumnOverlay column={activeColumn} cards={activeColumnCards} />}
+        </DragOverlay>
+      </DndContext>
+
+      {editingCard && (
+        <EditCardModal
+          card={editingCard.card}
+          columnId={editingCard.columnId}
+          onClose={() => setEditingCard(null)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/examples/mimic-example/src/components/kanban/index.ts b/examples/mimic-example/src/components/kanban/index.ts
new file mode 100644
index 000000000..3033dd01b
--- /dev/null
+++ b/examples/mimic-example/src/components/kanban/index.ts
@@ -0,0 +1,6 @@
+export { KanbanBoard } from "./KanbanBoard";
+export { Column } from "./Column";
+export { Card } from "./Card";
+export { AddCardForm } from "./AddCardForm";
+export { AddColumnForm } from "./AddColumnForm";
+export { EditCardModal } from "./EditCardModal";
diff --git a/examples/mimic-example/src/context/KanbanContext.tsx b/examples/mimic-example/src/context/KanbanContext.tsx
new file mode 100644
index 000000000..f0986a9be
--- /dev/null
+++ b/examples/mimic-example/src/context/KanbanContext.tsx
@@ -0,0 +1,104 @@
+import { createContext, useContext, type ReactNode } from "react";
+import type { BoardSnapshot } from "../shared";
+import { useTodoStore, TodoStoreContext } from "../lib/store";
+import { useCommander } from "@voidhash/mimic/zustand-commander";
+import {
+  addColumn,
+  renameColumn,
+  deleteColumn,
+  addCard,
+  updateCard,
+  deleteCard,
+  moveCard,
+  reorderColumn,
+} from "../lib/commands";
+
+interface KanbanContextValue {
+  state: BoardSnapshot | undefined;
+  addColumn: (title: string) => void;
+  renameColumn: (columnId: string, title: string) => void;
+  deleteColumn: (columnId: string) => void;
+  addCard: (columnId: string, title: string, description?: string) => void;
+  updateCard: (cardId: string, title: string, description?: string) => void;
+  deleteCard: (cardId: string, columnId: string) => void;
+  moveCard: (
+    cardId: string,
+    sourceColumnId: string,
+    destinationColumnId: string,
+    sourceIndex: number,
+    destinationIndex: number,
+  ) => void;
+  reorderColumns: (columnId: string, destinationIndex: number) => void;
+}
+
+const KanbanContext = createContext<KanbanContextValue | null>(null);
+
+export function KanbanProvider({ children }: { children: ReactNode }) {
+  const store = useTodoStore();
+  const storeApi = useContext(TodoStoreContext)!;
+  const dispatch = useCommander(storeApi);
+
+  const handleAddColumn = (title: string) => {
+    dispatch(addColumn)({ title });
+  };
+
+  const handleRenameColumn = (columnId: string, title: string) => {
+    dispatch(renameColumn)({ columnId, title });
+  };
+
+  const handleDeleteColumn = (columnId: string) => {
+    dispatch(deleteColumn)({ columnId });
+  };
+
+  const handleAddCard = (columnId: string, title: string, description?: string) => {
+    dispatch(addCard)({ columnId, title, description });
+  };
+
+  const handleUpdateCard = (cardId: string, title: string, description?: string) => {
+    dispatch(updateCard)({ cardId, title, description });
+  };
+
+  const handleDeleteCard = (cardId: string, _columnId: string) => {
+    dispatch(deleteCard)({ cardId });
+  };
+
+  const handleMoveCard = (
+    cardId: string,
+    _sourceColumnId: string,
+    destinationColumnId: string,
+    _sourceIndex: number,
+    destinationIndex: number,
+  ) => {
+    dispatch(moveCard)({ cardId, destinationColumnId, destinationIndex });
+  };
+
+  const handleReorderColumns = (columnId: string, destinationIndex: number) => {
+    dispatch(reorderColumn)({ columnId, destinationIndex });
+  };
+
+  return (
+    <KanbanContext.Provider
+      value={{
+        state: store.mimic.snapshot?.[0],
+        addColumn: handleAddColumn,
+        renameColumn: handleRenameColumn,
+        deleteColumn: handleDeleteColumn,
+        addCard: handleAddCard,
+        updateCard: handleUpdateCard,
+        deleteCard: handleDeleteCard,
+        moveCard: handleMoveCard,
+        reorderColumns: handleReorderColumns,
+      }}
+    >
+      {children}
+    </KanbanContext.Provider>
+  );
+}
+
+export function useKanban() {
+  const context = useContext(KanbanContext);
+  if (!context) {
+    throw new Error("useKanban must be used within a KanbanProvider");
+  }
+  return context;
+}
diff --git a/examples/mimic-example/src/env.d.ts b/examples/mimic-example/src/env.d.ts
new file mode 100644
index 000000000..2e6c10b7b
--- /dev/null
+++ b/examples/mimic-example/src/env.d.ts
@@ -0,0 +1,3 @@
+/// <reference types="vite/client" />
+
+declare module "*.css" {}
diff --git a/examples/mimic-example/src/lib/commands.ts b/examples/mimic-example/src/lib/commands.ts
new file mode 100644
index 000000000..7896aeaf0
--- /dev/null
+++ b/examples/mimic-example/src/lib/commands.ts
@@ -0,0 +1,333 @@
+/**
+ * Kanban board commands using zustand-commander.
+ *
+ * This file defines all the commands for the Kanban board with undo/redo support.
+ */
+
+import { createCommander, type CommanderSlice } from "@voidhash/mimic/zustand-commander";
+import type { MimicSlice } from "@voidhash/mimic/zustand";
+import { Primitive } from "@voidhash/mimic-core";
+import {
+  BoardNode,
+  CardNode,
+  ColumnNode,
+  MimicExampleSchema,
+  type ExamplePresence,
+} from "../shared";
+
+type KanbanRoot = Primitive.InferProxy<typeof MimicExampleSchema>;
+type BoardProxy = Primitive.TypedNodeProxy<typeof BoardNode>;
+type CardProxy = Primitive.TypedNodeProxy<typeof CardNode>;
+
+type ColumnRestoreData = {
+  name: string;
+  cards: Array<{ title: string; description: string }>;
+};
+
+type CardLocation = {
+  columnId: string;
+  cardIndex: number;
+  cardData: { title: string; description: string };
+};
+
+export type KanbanStoreState = MimicSlice<typeof MimicExampleSchema, ExamplePresence> & {
+  selectedCardId: string | null;
+} & CommanderSlice;
+
+export const commander = createCommander<KanbanStoreState, typeof MimicExampleSchema>();
+
+const getBoard = (root: KanbanRoot): BoardProxy | undefined => root.children.first()?.as(BoardNode);
+
+const getColumnIndex = (board: BoardProxy, columnId: string): number =>
+  board.children.findIndex((column) => column.id === columnId);
+
+const getColumnRestoreData = (board: BoardProxy, columnId: string): ColumnRestoreData | null => {
+  const column = board.children.findById(columnId);
+  if (!column) {
+    return null;
+  }
+
+  return {
+    name: column.data.name.get() ?? "",
+    cards: column.children.map((card: CardProxy) => ({
+      title: card.data.title.get() ?? "",
+      description: card.data.description.get() ?? "",
+    })),
+  };
+};
+
+const getCardLocation = (board: BoardProxy, cardId: string): CardLocation | undefined => {
+  for (const column of board.children) {
+    const typedColumn = column.as(ColumnNode);
+    const cardIndex = typedColumn.children.findIndex((card: CardProxy) => card.id === cardId);
+    if (cardIndex === -1) {
+      continue;
+    }
+
+    const card = typedColumn.children.at(cardIndex);
+    if (!card) {
+      continue;
+    }
+
+    return {
+      columnId: typedColumn.id,
+      cardIndex,
+      cardData: {
+        title: card.data.title.get() ?? "",
+        description: card.data.description.get() ?? "",
+      },
+    };
+  }
+
+  return undefined;
+};
+
+export const addColumn = commander.undoableAction<{ title: string }, { columnId: string }>(
+  (ctx, params) => {
+    const board = getBoard(ctx.root);
+    if (!board) {
+      return { columnId: "" };
+    }
+
+    const column = board.children.insertLast({
+      type: "column",
+      name: params.title,
+    });
+
+    return { columnId: column.id };
+  },
+  (ctx, _params, result) => {
+    ctx.root.children.findById(result.columnId)?.remove();
+  },
+);
+
+export const renameColumn = commander.undoableAction<
+  { columnId: string; title: string },
+  { previousTitle: string }
+>(
+  (ctx, params) => {
+    const column = ctx.root.children.findById(params.columnId);
+    if (!column) {
+      return { previousTitle: "" };
+    }
+
+    const previousTitle = column.data.name.get() ?? "";
+    column.data.name.set(params.title);
+    return { previousTitle };
+  },
+  (ctx, params, result) => {
+    ctx.root
+      .findByIdAcrossTree(params.columnId)
+      ?.as(ColumnNode)
+      .data.name.set(result.previousTitle);
+  },
+);
+
+export const deleteColumn = commander.undoableAction<
+  { columnId: string },
+  { columnData: ColumnRestoreData | null; columnPos: string }
+>(
+  (ctx, params) => {
+    const board = getBoard(ctx.root);
+    if (!board) {
+      return { columnData: null, columnPos: "" };
+    }
+
+    const column = board.children.findById(params.columnId);
+    if (!column) {
+      return { columnData: null, columnPos: "" };
+    }
+    const columnData = getColumnRestoreData(board, params.columnId);
+    column.remove();
+    return { columnData, columnPos: column.pos };
+  },
+  (ctx, _params, result) => {
+    if (!result.columnData) {
+      return;
+    }
+
+    const board = getBoard(ctx.root);
+    if (!board) {
+      return;
+    }
+
+    board.children.insertAtPos(result.columnPos, {
+      type: "column",
+      name: result.columnData.name,
+      children: result.columnData.cards.map((card) => ({
+        type: "card" as const,
+        title: card.title,
+        description: card.description,
+        children: [],
+      })),
+    });
+  },
+);
+
+export const addCard = commander.undoableAction<
+  { columnId: string; title: string; description?: string },
+  { cardId: string }
+>(
+  (ctx, params) => {
+    const column = ctx.root.findByIdAcrossTree(params.columnId)?.as(ColumnNode);
+    if (!column) {
+      return { cardId: "" };
+    }
+
+    const card = column.children.insertLast({
+      type: "card",
+      title: params.title,
+      description: params.description ?? "",
+    });
+
+    return { cardId: card.id };
+  },
+  (ctx, _params, result) => {
+    ctx.root.findByIdAcrossTree(result.cardId)?.as(CardNode).remove();
+  },
+);
+
+export const updateCard = commander.undoableAction<
+  { cardId: string; title: string; description?: string },
+  { previousTitle: string; previousDescription: string }
+>(
+  (ctx, params) => {
+    const card = ctx.root.findByIdAcrossTree(params.cardId)?.as(CardNode);
+    if (!card) {
+      return { previousTitle: "", previousDescription: "" };
+    }
+
+    const previousTitle = card.data.title.get() ?? "";
+    const previousDescription = card.data.description.get() ?? "";
+
+    ctx.transaction(() => {
+      card.data.title.set(params.title);
+      card.data.description.set(params.description ?? "");
+    });
+
+    return { previousTitle, previousDescription };
+  },
+  (ctx, params, result) => {
+    const card = ctx.root.findByIdAcrossTree(params.cardId)?.as(CardNode);
+    if (!card) {
+      return;
+    }
+
+    ctx.transaction(() => {
+      card.data.title.set(result.previousTitle);
+      card.data.description.set(result.previousDescription);
+    });
+  },
+);
+
+export const deleteCard = commander.undoableAction<
+  { cardId: string },
+  {
+    cardData: { title: string; description: string } | null;
+    columnId: string | null;
+    cardIndex: number;
+  }
+>(
+  (ctx, params) => {
+    const board = getBoard(ctx.root);
+    const location = board ? getCardLocation(board, params.cardId) : undefined;
+
+    ctx.root.findByIdAcrossTree(params.cardId)?.as(CardNode).remove();
+
+    return {
+      cardData: location?.cardData ?? null,
+      columnId: location?.columnId ?? null,
+      cardIndex: location?.cardIndex ?? -1,
+    };
+  },
+  (ctx, _params, result) => {
+    if (!result.cardData || !result.columnId) {
+      return;
+    }
+
+    const column = ctx.root.findByIdAcrossTree(result.columnId)?.as(ColumnNode);
+    if (!column) {
+      return;
+    }
+
+    column.children.insertAt(result.cardIndex, {
+      type: "card",
+      title: result.cardData.title,
+      description: result.cardData.description,
+    });
+  },
+);
+
+export const moveCard = commander.undoableAction<
+  { cardId: string; destinationColumnId: string; destinationIndex: number },
+  { sourceColumnId: string | null; sourceIndex: number }
+>(
+  (ctx, params) => {
+    const board = getBoard(ctx.root);
+    const location = board ? getCardLocation(board, params.cardId) : undefined;
+    const card = ctx.root.findByIdAcrossTree(params.cardId)?.as(CardNode);
+    const destinationColumn = ctx.root
+      .findByIdAcrossTree(params.destinationColumnId)
+      ?.as(ColumnNode);
+    if (!card || !destinationColumn) {
+      return {
+        sourceColumnId: location?.columnId ?? null,
+        sourceIndex: location?.cardIndex ?? -1,
+      };
+    }
+
+    card.moveTo(destinationColumn.children, params.destinationIndex);
+
+    return {
+      sourceColumnId: location?.columnId ?? null,
+      sourceIndex: location?.cardIndex ?? -1,
+    };
+  },
+  (ctx, params, result) => {
+    if (!result.sourceColumnId) {
+      return;
+    }
+
+    const card = ctx.root.findByIdAcrossTree(params.cardId)?.as(CardNode);
+    const sourceColumn = ctx.root.findByIdAcrossTree(result.sourceColumnId)?.as(ColumnNode);
+    if (!card || !sourceColumn) {
+      return;
+    }
+
+    card.moveTo(sourceColumn.children, result.sourceIndex);
+  },
+);
+
+export const reorderColumn = commander.undoableAction<
+  { columnId: string; destinationIndex: number },
+  { sourceIndex: number }
+>(
+  (ctx, params) => {
+    const board = getBoard(ctx.root);
+    const sourceIndex = board ? getColumnIndex(board, params.columnId) : -1;
+    const column = ctx.root.findByIdAcrossTree(params.columnId)?.as(ColumnNode);
+    if (!column) {
+      return { sourceIndex };
+    }
+
+    if (!board) {
+      return { sourceIndex };
+    }
+
+    column.moveTo(board.children, params.destinationIndex);
+    return { sourceIndex };
+  },
+  (ctx, params, result) => {
+    const board = getBoard(ctx.root);
+    const column = ctx.root.findByIdAcrossTree(params.columnId)?.as(ColumnNode);
+    if (!column || !board) {
+      return;
+    }
+
+    column.moveTo(board.children, result.sourceIndex);
+  },
+);
+
+export const selectCard = commander.action<{ cardId: string | null }>((ctx, params) => {
+  ctx.setState({ selectedCardId: params.cardId });
+});
diff --git a/examples/mimic-example/src/lib/document.ts b/examples/mimic-example/src/lib/document.ts
new file mode 100644
index 000000000..3c7de3fe9
--- /dev/null
+++ b/examples/mimic-example/src/lib/document.ts
@@ -0,0 +1,39 @@
+import { createClientDocument, WebSocketTransport } from "@voidhash/mimic/client";
+import { ExamplePresencePrimitive, MimicExampleSchema, type ExamplePresence } from "../shared";
+import { exampleServerUrl } from "./serverConfig";
+
+interface TokenResponse {
+  token: string;
+  url: string;
+}
+
+async function fetchToken(): Promise<TokenResponse> {
+  const res = await fetch(`${exampleServerUrl}/api/token`);
+  if (!res.ok) throw new Error(`Failed to fetch token: ${res.status}`);
+  return res.json();
+}
+
+export async function createDocument(initialPresence?: ExamplePresence) {
+  const { token, url } = await fetchToken();
+  let nextToken: string | null = token;
+
+  return createClientDocument({
+    primitive: MimicExampleSchema,
+    presence: {
+      primitive: ExamplePresencePrimitive,
+      initial: initialPresence,
+    },
+    transport: new WebSocketTransport({
+      url,
+      token: async () => {
+        if (nextToken !== null) {
+          const current = nextToken;
+          nextToken = null;
+          return current;
+        }
+        const auth = await fetchToken();
+        return auth.token;
+      },
+    }),
+  });
+}
diff --git a/examples/mimic-example/src/lib/serverConfig.ts b/examples/mimic-example/src/lib/serverConfig.ts
new file mode 100644
index 000000000..baf8a8184
--- /dev/null
+++ b/examples/mimic-example/src/lib/serverConfig.ts
@@ -0,0 +1 @@
+export const exampleServerUrl = import.meta.env.VITE_EXAMPLE_SERVER_URL ?? "http://localhost:5001";
diff --git a/examples/mimic-example/src/lib/store.ts b/examples/mimic-example/src/lib/store.ts
new file mode 100644
index 000000000..e0e800145
--- /dev/null
+++ b/examples/mimic-example/src/lib/store.ts
@@ -0,0 +1,28 @@
+import { createContext, useContext } from "react";
+import { create, type StoreApi, type UseBoundStore, useStore } from "zustand";
+import { mimic } from "@voidhash/mimic/zustand";
+import { createDocument } from "./document";
+import { commander, type KanbanStoreState } from "./commands";
+
+export type TodoStore = UseBoundStore<StoreApi<KanbanStoreState>>;
+
+export async function createTodoStore(): Promise<TodoStore> {
+  const doc = await createDocument({ name: "John Doe" });
+  return create(
+    commander.middleware(
+      mimic(doc, () => ({
+        selectedCardId: null as string | null,
+      })),
+    ),
+  );
+}
+
+export const TodoStoreContext = createContext<TodoStore | null>(null);
+
+export function useTodoStore(): KanbanStoreState;
+export function useTodoStore<T>(selector: (s: KanbanStoreState) => T): T;
+export function useTodoStore<T>(selector?: (s: KanbanStoreState) => T) {
+  const store = useContext(TodoStoreContext);
+  if (!store) throw new Error("useTodoStore must be used within TodoStoreProvider");
+  return useStore(store, selector!);
+}
diff --git a/examples/mimic-example/src/main.tsx b/examples/mimic-example/src/main.tsx
new file mode 100644
index 000000000..a25dbed7e
--- /dev/null
+++ b/examples/mimic-example/src/main.tsx
@@ -0,0 +1,26 @@
+import React from "react";
+import ReactDOM from "react-dom/client";
+import { RouterProvider, createRouter } from "@tanstack/react-router";
+import { routeTree } from "./routeTree.gen";
+import "./styles.css";
+
+// Set up a Router instance
+const router = createRouter({
+  routeTree,
+  defaultPreload: "intent",
+  scrollRestoration: true,
+});
+
+// Register things for typesafety
+declare module "@tanstack/react-router" {
+  interface Register {
+    router: typeof router;
+  }
+}
+
+const rootElement = document.getElementById("app")!;
+
+if (!rootElement.innerHTML) {
+  const root = ReactDOM.createRoot(rootElement);
+  root.render(<RouterProvider router={router} />);
+}
diff --git a/examples/mimic-example/src/posts.tsx b/examples/mimic-example/src/posts.tsx
new file mode 100644
index 000000000..e312772b8
--- /dev/null
+++ b/examples/mimic-example/src/posts.tsx
@@ -0,0 +1,33 @@
+import axios from "redaxios";
+
+export type PostType = {
+  id: string;
+  title: string;
+  body: string;
+};
+
+export class PostNotFoundError extends Error {}
+
+export const fetchPost = async (postId: string) => {
+  console.info(`Fetching post with id ${postId}...`);
+  await new Promise((r) => setTimeout(r, 500));
+  const post = await axios
+    .get<PostType>(`https://jsonplaceholder.typicode.com/posts/${postId}`)
+    .then((r) => r.data)
+    .catch((err) => {
+      if (err.status === 404) {
+        throw new PostNotFoundError(`Post with id "${postId}" not found!`);
+      }
+      throw err;
+    });
+
+  return post;
+};
+
+export const fetchPosts = async () => {
+  console.info("Fetching posts...");
+  await new Promise((r) => setTimeout(r, 500));
+  return axios
+    .get<PostType[]>("https://jsonplaceholder.typicode.com/posts")
+    .then((r) => r.data.slice(0, 10));
+};
diff --git a/examples/mimic-example/src/routeTree.gen.ts b/examples/mimic-example/src/routeTree.gen.ts
new file mode 100644
index 000000000..5ddf9cada
--- /dev/null
+++ b/examples/mimic-example/src/routeTree.gen.ts
@@ -0,0 +1,77 @@
+/* eslint-disable */
+
+// @ts-nocheck
+
+// noinspection JSUnusedGlobalSymbols
+
+// This file was automatically generated by TanStack Router.
+// You should NOT make any changes in this file as it will be overwritten.
+// Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.
+
+import { Route as rootRouteImport } from "./routes/__root";
+import { Route as AboutRouteImport } from "./routes/about";
+import { Route as IndexRouteImport } from "./routes/index";
+
+const AboutRoute = AboutRouteImport.update({
+  id: "/about",
+  path: "/about",
+  getParentRoute: () => rootRouteImport,
+} as any);
+const IndexRoute = IndexRouteImport.update({
+  id: "/",
+  path: "/",
+  getParentRoute: () => rootRouteImport,
+} as any);
+
+export interface FileRoutesByFullPath {
+  "/": typeof IndexRoute;
+  "/about": typeof AboutRoute;
+}
+export interface FileRoutesByTo {
+  "/": typeof IndexRoute;
+  "/about": typeof AboutRoute;
+}
+export interface FileRoutesById {
+  __root__: typeof rootRouteImport;
+  "/": typeof IndexRoute;
+  "/about": typeof AboutRoute;
+}
+export interface FileRouteTypes {
+  fileRoutesByFullPath: FileRoutesByFullPath;
+  fullPaths: "/" | "/about";
+  fileRoutesByTo: FileRoutesByTo;
+  to: "/" | "/about";
+  id: "__root__" | "/" | "/about";
+  fileRoutesById: FileRoutesById;
+}
+export interface RootRouteChildren {
+  IndexRoute: typeof IndexRoute;
+  AboutRoute: typeof AboutRoute;
+}
+
+declare module "@tanstack/react-router" {
+  interface FileRoutesByPath {
+    "/about": {
+      id: "/about";
+      path: "/about";
+      fullPath: "/about";
+      preLoaderRoute: typeof AboutRouteImport;
+      parentRoute: typeof rootRouteImport;
+    };
+    "/": {
+      id: "/";
+      path: "/";
+      fullPath: "/";
+      preLoaderRoute: typeof IndexRouteImport;
+      parentRoute: typeof rootRouteImport;
+    };
+  }
+}
+
+const rootRouteChildren: RootRouteChildren = {
+  IndexRoute: IndexRoute,
+  AboutRoute: AboutRoute,
+};
+export const routeTree = rootRouteImport
+  ._addFileChildren(rootRouteChildren)
+  ._addFileTypes<FileRouteTypes>();
diff --git a/examples/mimic-example/src/routes/__root.tsx b/examples/mimic-example/src/routes/__root.tsx
new file mode 100644
index 000000000..59b18a348
--- /dev/null
+++ b/examples/mimic-example/src/routes/__root.tsx
@@ -0,0 +1,38 @@
+import * as React from "react";
+import { Link, Outlet, createRootRoute } from "@tanstack/react-router";
+import { TanStackRouterDevtools } from "@tanstack/react-router-devtools";
+
+export const Route = createRootRoute({
+  component: RootComponent,
+});
+
+function RootComponent() {
+  return (
+    <>
+      <div className="p-2 flex gap-2 text-lg items-center justify-between">
+        <div className="flex gap-2">
+          <Link
+            to="/"
+            activeProps={{
+              className: "font-bold",
+            }}
+            activeOptions={{ exact: true }}
+          >
+            Home
+          </Link>{" "}
+          <Link
+            to="/about"
+            activeProps={{
+              className: "font-bold",
+            }}
+          >
+            About
+          </Link>
+        </div>
+      </div>
+      <hr />
+      <Outlet />
+      <TanStackRouterDevtools position="bottom-right" />
+    </>
+  );
+}
diff --git a/examples/mimic-example/src/routes/about.tsx b/examples/mimic-example/src/routes/about.tsx
new file mode 100644
index 000000000..de88d2ab2
--- /dev/null
+++ b/examples/mimic-example/src/routes/about.tsx
@@ -0,0 +1,14 @@
+import { createFileRoute } from "@tanstack/react-router";
+import * as React from "react";
+
+export const Route = createFileRoute("/about")({
+  component: AboutComponent,
+});
+
+function AboutComponent() {
+  return (
+    <div className="p-2">
+      <h3>About</h3>
+    </div>
+  );
+}
diff --git a/examples/mimic-example/src/routes/index.tsx b/examples/mimic-example/src/routes/index.tsx
new file mode 100644
index 000000000..f0f4a2f20
--- /dev/null
+++ b/examples/mimic-example/src/routes/index.tsx
@@ -0,0 +1,46 @@
+import { createFileRoute } from "@tanstack/react-router";
+import * as React from "react";
+import { KanbanProvider } from "../context/KanbanContext";
+import { KanbanBoard } from "../components/kanban";
+import { createTodoStore, TodoStoreContext, type TodoStore } from "../lib/store";
+
+export const Route = createFileRoute("/")({
+  component: HomeComponent,
+});
+
+function HomeComponent() {
+  const [store, setStore] = React.useState<TodoStore | null>(null);
+  const [error, setError] = React.useState<string | null>(null);
+
+  React.useEffect(() => {
+    createTodoStore()
+      .then((s) => setStore(() => s))
+      .catch((err) => setError(String(err)));
+  }, []);
+
+  if (error) {
+    return (
+      <div className="flex items-center justify-center h-[calc(100vh-60px)] text-red-600">
+        Failed to connect: {error}
+      </div>
+    );
+  }
+
+  if (!store) {
+    return (
+      <div className="flex items-center justify-center h-[calc(100vh-60px)] text-gray-500">
+        Connecting...
+      </div>
+    );
+  }
+
+  return (
+    <TodoStoreContext.Provider value={store}>
+      <KanbanProvider>
+        <div className="h-[calc(100vh-60px)]">
+          <KanbanBoard />
+        </div>
+      </KanbanProvider>
+    </TodoStoreContext.Provider>
+  );
+}
diff --git a/examples/mimic-example/src/server/app.ts b/examples/mimic-example/src/server/app.ts
new file mode 100644
index 000000000..136f2e6c0
--- /dev/null
+++ b/examples/mimic-example/src/server/app.ts
@@ -0,0 +1,138 @@
+import { Effect, Layer, Schedule } from "effect";
+import { HttpRouter, HttpServerResponse } from "effect/unstable/http";
+import { MimicSDK } from "@voidhash/mimic-server/effect";
+import { MimicExampleSchema } from "../shared";
+
+// ---------------------------------------------------------------------------
+// Config
+// ---------------------------------------------------------------------------
+
+const HOST_URL = process.env.HOST_URL;
+const HOST_USERNAME = process.env.HOST_USERNAME;
+const HOST_PASSWORD = process.env.HOST_PASSWORD;
+
+const DATABASE_NAME = "example";
+const COLLECTION_NAME = "todos";
+const DOCUMENT_ID = "kanban-board";
+
+const sdk = new MimicSDK({
+  url: HOST_URL ?? "http://localhost:5001",
+  username: HOST_USERNAME ?? "root",
+  password: HOST_PASSWORD ?? "password",
+});
+
+const ensureDatabase = Effect.gen(function* () {
+  const databases = yield* sdk.listDatabases();
+  const existingDb = databases.find((database) => database.name === DATABASE_NAME);
+  if (existingDb) {
+    return sdk.database(existingDb.id, existingDb.name, existingDb.description);
+  }
+  return yield* sdk.createDatabase({
+    name: DATABASE_NAME,
+    description: "Example mimic database",
+  });
+});
+
+const ensureCollection = (dbHandle: ReturnType<typeof sdk.database>) =>
+  Effect.gen(function* () {
+    const collections = yield* dbHandle.listCollections();
+    const existingCollection = collections.find(
+      (collection) => collection.name === COLLECTION_NAME,
+    );
+    if (existingCollection) {
+      return dbHandle.collection(existingCollection.id, MimicExampleSchema);
+    }
+    return yield* dbHandle.createCollection(COLLECTION_NAME, MimicExampleSchema);
+  });
+
+const startup = Effect.gen(function* () {
+  yield* Effect.log("Startup: ensuring database...");
+  const dbHandle = yield* ensureDatabase;
+  yield* Effect.log(`Startup: db=${dbHandle.id}`);
+
+  yield* Effect.log("Startup: ensuring collection...");
+  const colHandle = yield* ensureCollection(dbHandle);
+  yield* Effect.log(`Startup: col=${colHandle.id}`);
+
+  // Seed default document if missing
+  yield* Effect.log("Startup: checking document...");
+  yield* colHandle.get(DOCUMENT_ID).pipe(
+    Effect.tap(() => Effect.log("Startup: document exists")),
+    Effect.catch(() => {
+      return colHandle.create(
+        [
+          {
+            type: "board" as const,
+            name: "My Board",
+            children: [
+              { type: "column" as const, name: "Todo", children: [] },
+              { type: "column" as const, name: "In Progress", children: [] },
+              { type: "column" as const, name: "Done", children: [] },
+            ],
+          },
+        ],
+        { id: DOCUMENT_ID },
+      );
+    }),
+  );
+
+  yield* Effect.log(`Ready: db=${dbHandle.id} col=${colHandle.id} doc=${DOCUMENT_ID}`);
+
+  return { dbHandle, colHandle } as const;
+}).pipe(
+  Effect.tapCause((cause) => Effect.log(`Startup failed: ${cause}`)),
+  Effect.retry(Schedule.exponential("1 second").pipe(Schedule.both(Schedule.recurs(15)))),
+);
+
+// ---------------------------------------------------------------------------
+// HTTP routes
+// ---------------------------------------------------------------------------
+
+const TokenRoute = Layer.effectDiscard(
+  Effect.gen(function* () {
+    const { colHandle } = yield* startup;
+
+    const router = yield* HttpRouter.HttpRouter;
+    yield* router.add(
+      "GET",
+      "/api/token",
+      Effect.gen(function* () {
+        const { token, url } = yield* colHandle.setupDocumentAuthentication({
+          documentId: DOCUMENT_ID,
+          permission: "write",
+          origins: corsAllowedOrigins(),
+        });
+
+        return yield* HttpServerResponse.json({
+          token,
+          url,
+        });
+      }),
+    );
+  }),
+);
+
+const corsAllowedOrigins = (): ReadonlyArray<string> => {
+  const env = process.env.CORS_ORIGINS?.trim();
+  if (!env) {
+    return [
+      "http://localhost:5173",
+      "http://localhost:5174",
+      "http://localhost:4173",
+      "http://localhost:4460",
+      "http://localhost:3003",
+    ];
+  }
+  return env.split(",").map((o) => o.trim());
+};
+
+const AllRoutes = Layer.mergeAll(TokenRoute).pipe(
+  Layer.provide(
+    HttpRouter.cors({
+      allowedOrigins: corsAllowedOrigins(),
+      credentials: true,
+    }),
+  ),
+);
+
+export const AppLive = HttpRouter.serve(AllRoutes);
diff --git a/examples/mimic-example/src/server/index.ts b/examples/mimic-example/src/server/index.ts
new file mode 100644
index 000000000..2dbd1b1b0
--- /dev/null
+++ b/examples/mimic-example/src/server/index.ts
@@ -0,0 +1,18 @@
+import { createServer } from "node:http";
+import { NodeHttpServer, NodeRuntime } from "@effect/platform-node";
+import { Layer } from "effect";
+import { AppLive } from "./app";
+
+// Specify the port
+const port = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : 3001;
+
+NodeRuntime.runMain(
+  AppLive.pipe(
+    Layer.provide(
+      NodeHttpServer.layer(() => createServer(), {
+        port,
+      }),
+    ),
+    Layer.launch,
+  ) as never,
+);
diff --git a/examples/mimic-example/src/shared/index.ts b/examples/mimic-example/src/shared/index.ts
new file mode 100644
index 000000000..3d0b28aaf
--- /dev/null
+++ b/examples/mimic-example/src/shared/index.ts
@@ -0,0 +1,38 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+export const CardNode = Primitive.TreeNode("card", {
+  data: Primitive.Struct({
+    title: Primitive.String().min(1).max(34),
+    description: Primitive.String(),
+    priority: Primitive.Number().min(1).max(3).default(1),
+  }),
+  children: [Primitive.TreeNodeSelf],
+});
+
+export const ColumnNode = Primitive.TreeNode("column", {
+  data: Primitive.Struct({
+    name: Primitive.String().min(1).max(34),
+  }),
+  children: [CardNode],
+});
+
+export const BoardNode = Primitive.TreeNode("board", {
+  data: Primitive.Struct({
+    name: Primitive.String().default("My Board").min(1).max(34),
+  }),
+  children: [ColumnNode],
+});
+
+export const MimicExampleSchema = Primitive.Tree({
+  root: BoardNode,
+});
+
+export type BoardSnapshot = Primitive.TreeNodeSnapshot<typeof BoardNode>;
+export type ColumnSnapshot = Primitive.TreeNodeSnapshot<typeof ColumnNode>;
+export type CardSnapshot = Primitive.TreeNodeSnapshot<typeof CardNode>;
+
+export const ExamplePresencePrimitive = Primitive.Struct({
+  name: Primitive.String(),
+}).required();
+
+export type ExamplePresence = Primitive.InferSnapshot<typeof ExamplePresencePrimitive>;
diff --git a/examples/mimic-example/src/styles.css b/examples/mimic-example/src/styles.css
new file mode 100644
index 000000000..e6da5ca24
--- /dev/null
+++ b/examples/mimic-example/src/styles.css
@@ -0,0 +1,21 @@
+@import "tailwindcss";
+
+@layer base {
+  *,
+  ::after,
+  ::before,
+  ::backdrop,
+  ::file-selector-button {
+    border-color: var(--color-gray-200, currentcolor);
+  }
+}
+
+html {
+  color-scheme: light dark;
+}
+* {
+  @apply border-gray-200 dark:border-gray-800;
+}
+body {
+  @apply bg-gray-50 text-gray-950 dark:bg-gray-900 dark:text-gray-200;
+}
diff --git a/examples/mimic-example/src/types/kanban.ts b/examples/mimic-example/src/types/kanban.ts
new file mode 100644
index 000000000..9e1b7b191
--- /dev/null
+++ b/examples/mimic-example/src/types/kanban.ts
@@ -0,0 +1,45 @@
+export interface Card {
+  id: string;
+  title: string;
+  description?: string;
+}
+
+export interface Column {
+  id: string;
+  title: string;
+  cardIds: string[];
+}
+
+export interface KanbanState {
+  columns: Record<string, Column>;
+  cards: Record<string, Card>;
+  columnOrder: string[];
+}
+
+// Action types
+export type KanbanAction =
+  | { type: "ADD_COLUMN"; payload: { title: string } }
+  | { type: "RENAME_COLUMN"; payload: { columnId: string; title: string } }
+  | { type: "DELETE_COLUMN"; payload: { columnId: string } }
+  | { type: "ADD_CARD"; payload: { columnId: string; title: string; description?: string } }
+  | { type: "UPDATE_CARD"; payload: { cardId: string; title: string; description?: string } }
+  | { type: "DELETE_CARD"; payload: { cardId: string; columnId: string } }
+  | {
+      type: "MOVE_CARD";
+      payload: {
+        cardId: string;
+        sourceColumnId: string;
+        destinationColumnId: string;
+        sourceIndex: number;
+        destinationIndex: number;
+      };
+    }
+  | { type: "REORDER_COLUMNS"; payload: { sourceIndex: number; destinationIndex: number } };
+
+export type DragItemType = "card" | "column";
+
+export interface DragData {
+  type: DragItemType;
+  columnId?: string;
+  cardId?: string;
+}
diff --git a/examples/mimic-example/tsconfig.json b/examples/mimic-example/tsconfig.json
new file mode 100644
index 000000000..e51e688f2
--- /dev/null
+++ b/examples/mimic-example/tsconfig.json
@@ -0,0 +1,17 @@
+{
+  "extends": "@voidhash/tsconfig/react-library-typescript-6.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**", "src/server"],
+  "compilerOptions": {
+    "strict": true,
+    "esModuleInterop": true,
+    "jsx": "react-jsx",
+    "lib": ["DOM", "DOM.Iterable", "ES2022"],
+    "skipLibCheck": true,
+    // This is a frontend app, not a publishable library: it never emits .d.ts, so disable
+    // declaration emit (inherited from the shared library base) to avoid TS2742 portability
+    // checks on inferred return types that reference workspace-internal primitive paths.
+    "declaration": false,
+    "declarationMap": false
+  }
+}
diff --git a/examples/mimic-example/tsconfig.server.json b/examples/mimic-example/tsconfig.server.json
new file mode 100644
index 000000000..55c7ce7fb
--- /dev/null
+++ b/examples/mimic-example/tsconfig.server.json
@@ -0,0 +1,9 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "include": ["src/server", "src/shared"],
+  "exclude": ["**/node_modules/**"],
+  "compilerOptions": {
+    "rootDir": "./",
+    "types": ["node"]
+  }
+}
diff --git a/examples/mimic-example/vite.config.js b/examples/mimic-example/vite.config.js
new file mode 100644
index 000000000..ae7fc7b2c
--- /dev/null
+++ b/examples/mimic-example/vite.config.js
@@ -0,0 +1,8 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+import { tanstackRouter } from "@tanstack/router-plugin/vite";
+
+// https://vitejs.dev/config/
+export default defineConfig({
+  plugins: [tanstackRouter({ target: "react", autoCodeSplitting: true }), react()],
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 446b11fa4..f9cc91376 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -137,7 +137,7 @@ importers:
     dependencies:
       '@better-auth/api-key':
         specifier: 'catalog:'
-        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
+        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
       '@effect/platform-node':
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -152,7 +152,7 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -174,7 +174,7 @@ importers:
         version: 0.64.1
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/react-native':
         specifier: workspace:*
         version: link:../../libraries/react-native
@@ -186,25 +186,162 @@ importers:
         version: 10.0.0
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  apps/mimic-admin:
+    dependencies:
+      '@radix-ui/react-alert-dialog':
+        specifier: ^1.1.14
+        version: 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog':
+        specifier: ^1.1.14
+        version: 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dropdown-menu':
+        specifier: ^2.1.15
+        version: 2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-label':
+        specifier: ^2.1.7
+        version: 2.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-scroll-area':
+        specifier: ^1.2.8
+        version: 1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-select':
+        specifier: ^2.2.5
+        version: 2.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-separator':
+        specifier: ^1.1.7
+        version: 1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot':
+        specifier: ^1.2.3
+        version: 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-tabs':
+        specifier: ^1.1.12
+        version: 1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tooltip':
+        specifier: ^1.2.7
+        version: 1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-query':
+        specifier: ^5.80.7
+        version: 5.101.2(react@19.1.0)
+      '@tanstack/react-query-devtools':
+        specifier: ^5.80.7
+        version: 5.101.2(@tanstack/react-query@5.101.2(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router':
+        specifier: 1.163.3
+        version: 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../../packages/mimic-core
+      '@voidhash/mimic-server':
+        specifier: workspace:*
+        version: link:../../packages/mimic-server
+      class-variance-authority:
+        specifier: ^0.7.1
+        version: 0.7.1
+      clsx:
+        specifier: ^2.1.1
+        version: 2.1.1
+      lucide-react:
+        specifier: ^0.513.0
+        version: 0.513.0(react@19.1.0)
+      react:
+        specifier: 19.1.0
+        version: 19.1.0
+      react-dom:
+        specifier: 19.1.0
+        version: 19.1.0(react@19.1.0)
+      sonner:
+        specifier: ^2.0.3
+        version: 2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      tailwind-merge:
+        specifier: ^3.3.0
+        version: 3.6.0
+    devDependencies:
+      '@tailwindcss/vite':
+        specifier: ^4.1.8
+        version: 4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@types/react':
+        specifier: 19.1.17
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: 19.1.9
+        version: 19.1.9(@types/react@19.1.17)
+      '@vitejs/plugin-react':
+        specifier: ^4.5.2
+        version: 4.7.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      tailwindcss:
+        specifier: ^4.1.8
+        version: 4.3.0
+      tw-animate-css:
+        specifier: ^1.3.4
+        version: 1.4.0
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      vite:
+        specifier: 'catalog:'
+        version: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  apps/mimic-cli:
+    dependencies:
+      '@effect/platform-node-shared':
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../../packages/mimic-core
+      '@voidhash/mimic-server':
+        specifier: workspace:*
+        version: link:../../packages/mimic-server
+      dotenv:
+        specifier: ^16.4.7
+        version: 16.6.1
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      esbuild-register:
+        specifier: ^3.6.0
+        version: 3.6.0(esbuild@0.28.1)
+    devDependencies:
+      esbuild:
+        specifier: 0.28.1
+        version: 0.28.1
+      tsup:
+        specifier: ^8.5.0
+        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.8.3)(yaml@2.8.3)
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
+      typescript:
+        specifier: 5.8.3
+        version: 5.8.3
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: ^3.2.7
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   apps/studio:
     dependencies:
       '@tailwindcss/vite':
         specifier: ^4.1.13
-        version: 4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitejs/plugin-react':
         specifier: ^5.2.0
-        version: 5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -219,7 +356,7 @@ importers:
         version: 4.3.0
       vite:
         specifier: 7.3.5
-        version: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
@@ -234,6 +371,94 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
 
+  examples/mimic-example:
+    dependencies:
+      '@dnd-kit/core':
+        specifier: ^6.3.1
+        version: 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@dnd-kit/sortable':
+        specifier: ^10.0.0
+        version: 10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)
+      '@dnd-kit/utilities':
+        specifier: ^3.2.2
+        version: 3.2.2(react@19.1.0)
+      '@effect/platform-node':
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+      '@tailwindcss/postcss':
+        specifier: ^4.1.15
+        version: 4.3.2
+      '@tanstack/react-router':
+        specifier: 1.163.3
+        version: 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router-devtools':
+        specifier: 1.163.3
+        version: 1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(csstype@3.2.3)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-plugin':
+        specifier: 1.163.3
+        version: 1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@voidhash/mimic':
+        specifier: workspace:*
+        version: link:../../packages/mimic
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../../packages/mimic-core
+      '@voidhash/mimic-server':
+        specifier: workspace:*
+        version: link:../../packages/mimic-server
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      postcss:
+        specifier: 8.5.10
+        version: 8.5.10
+      react:
+        specifier: 19.1.0
+        version: 19.1.0
+      react-dom:
+        specifier: 19.1.0
+        version: 19.1.0(react@19.1.0)
+      redaxios:
+        specifier: ^0.5.1
+        version: 0.5.1
+      tailwindcss:
+        specifier: ^4.1.17
+        version: 4.3.0
+      zod:
+        specifier: ^3.24.2
+        version: 3.25.76
+      zustand:
+        specifier: ^5.0.9
+        version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+    devDependencies:
+      '@types/node':
+        specifier: ^22.10.0
+        version: 22.20.1
+      '@types/react':
+        specifier: 19.1.17
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: 19.1.9
+        version: 19.1.9(@types/react@19.1.17)
+      '@vitejs/plugin-react':
+        specifier: ^4.3.4
+        version: 4.7.0(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
+      typescript:
+        specifier: 5.8.3
+        version: 5.8.3
+      vite:
+        specifier: 'catalog:'
+        version: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-plus:
+        specifier: 0.1.23
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   examples/react-native-example:
     dependencies:
       '@expo/metro-runtime':
@@ -308,16 +533,16 @@ importers:
         version: 19.1.17
       '@typescript-eslint/parser':
         specifier: ^8.33.0
-        version: 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
+        version: 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
         version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
-        version: 9.39.2(jiti@2.6.1)
+        version: 9.39.2(jiti@2.7.0)
       eslint-config-expo:
         specifier: ~10.0.0
-        version: 10.0.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
+        version: 10.0.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       typescript:
         specifier: ~5.9.2
         version: 5.9.3
@@ -342,7 +567,7 @@ importers:
         version: 4.0.0-beta.84
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -351,10 +576,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/paywalls:
     dependencies:
@@ -382,7 +607,7 @@ importers:
         version: 19.1.0(react@19.1.0)
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -391,7 +616,7 @@ importers:
         version: 5.6.3
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/react-native:
     dependencies:
@@ -410,16 +635,16 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
+        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
       '@vitejs/plugin-react':
         specifier: 'catalog:'
-        version: 5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/shared':
         specifier: workspace:*
         version: link:../../packages/shared
@@ -434,7 +659,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -452,13 +677,13 @@ importers:
         version: 5.9.3
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^4.1.6
-        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   libraries/web:
     dependencies:
@@ -492,7 +717,7 @@ importers:
         version: 19.1.0(react@19.1.0)
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -501,10 +726,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/ai-shared:
     dependencies:
@@ -529,13 +754,13 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/api-contracts:
     dependencies:
@@ -573,10 +798,10 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/generated-clients:
     dependencies:
@@ -608,10 +833,10 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/lib:
     dependencies:
@@ -658,10 +883,10 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       zustand:
         specifier: ^5.0.9
         version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
@@ -676,10 +901,10 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/mimic-schema:
     dependencies:
@@ -701,13 +926,13 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/mimic-server:
     dependencies:
@@ -726,10 +951,10 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-build:
     dependencies:
@@ -754,13 +979,13 @@ importers:
         version: 4.21.0
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-builtins:
     dependencies:
@@ -782,13 +1007,13 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-renderer-preact:
     dependencies:
@@ -822,13 +1047,13 @@ importers:
         version: 6.0.3
       vite:
         specifier: 'catalog:'
-        version: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-renderer-web-core:
     dependencies:
@@ -850,10 +1075,10 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-workspace:
     dependencies:
@@ -881,13 +1106,13 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/platform:
     devDependencies:
@@ -1017,6 +1242,10 @@ packages:
       graphql:
         optional: true
 
+  '@alloc/quick-lru@5.2.0':
+    resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==}
+    engines: {node: '>=10'}
+
   '@antfu/ni@0.23.2':
     resolution: {integrity: sha512-FSEVWXvwroExDXUu8qV6Wqp2X3D1nJ0Li4LFymCyvCVrm7I3lNfG0zZWSWvGU1RE7891eTnFTyh31L3igOwNKQ==}
     hasBin: true
@@ -1372,12 +1601,6 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
-  '@babel/plugin-syntax-typescript@7.27.1':
-    resolution: {integrity: sha512-xfYCBMxveHrRMnAWl1ZlPXOZjzkN82THFvLhQhFXFt81Z5HnN+EtUkZhv/zcKpmT3fzmWZB0ywiBrbC3vogbwQ==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': 7.29.6
-
   '@babel/plugin-syntax-typescript@7.28.6':
     resolution: {integrity: sha512-+nDNmQye7nlnuuHDboPbGm00Vqg3oO8niRRL27/4LYHUsHYh0zJ1xWOz0uRwNFmM1Avzk8wZbc6rdiYhomzv/A==}
     engines: {node: '>=6.9.0'}
@@ -1805,10 +2028,6 @@ packages:
     resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/template@7.27.2':
-    resolution: {integrity: sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/template@7.28.6':
     resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
     engines: {node: '>=6.9.0'}
@@ -1825,10 +2044,6 @@ packages:
     resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/types@7.28.5':
-    resolution: {integrity: sha512-qQ5m48eI/MFLQ5PxQj4PFaprjyCTLI37ElWMmNs0K8Lk3dVeOdNpB3ks8jc7yM5CDmVC73eMVk/trk3fgmrUpA==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/types@7.29.0':
     resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
     engines: {node: '>=6.9.0'}
@@ -2041,6 +2256,28 @@ packages:
     resolution: {integrity: sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==}
     engines: {node: '>=18'}
 
+  '@dnd-kit/accessibility@3.1.1':
+    resolution: {integrity: sha512-2P+YgaXF+gRsIihwwY1gCsQSYnu9Zyj2py8kY5fFvUM1qm2WA2u639R6YNVfU4GWr+ZM5mqEsfHZZLoRONbemw==}
+    peerDependencies:
+      react: 19.1.0
+
+  '@dnd-kit/core@6.3.1':
+    resolution: {integrity: sha512-xkGBRQQab4RLwgXxoqETICr6S5JlogafbhNsidmrkVv2YRs5MLwpjoF2qpiGjQt8S9AoxtIV603s0GIUpY5eYQ==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
+  '@dnd-kit/sortable@10.0.0':
+    resolution: {integrity: sha512-+xqhmIIzvAYMGfBYYnbKuNicfSsk4RksY2XdmJhT+HAC01nix6fHCztU68jooFiMUB01Ky3F0FyOvhG/BZrWkg==}
+    peerDependencies:
+      '@dnd-kit/core': ^6.3.0
+      react: 19.1.0
+
+  '@dnd-kit/utilities@3.2.2':
+    resolution: {integrity: sha512-+MKAJEOfaBe5SmV6t34p80MMKhjvUz0vRrvVJbPT0WElzaOJ/1xs+D+KDv+tD/NE5ujfrChEcshd4fLn0wpiqg==}
+    peerDependencies:
+      react: 19.1.0
+
   '@drizzle-team/brocli@0.10.2':
     resolution: {integrity: sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==}
 
@@ -2048,6 +2285,12 @@ packages:
     resolution: {integrity: sha512-1S7Xr2t9mygR6QyiIdCQUvPwSvcf5EBpnWmKa/8rC4P0btFfw/RiWRI8bvFI2AW+U4KStMUHYxPu4QEsk4y8bg==}
     hasBin: true
 
+  '@effect/platform-node-shared@4.0.0-beta.84':
+    resolution: {integrity: sha512-WQ6+gGMYgnuwL+rUHKlxFon1T/CfK1ezxRYSjbylqovWeA2lrO7OHDSBqdwPyXJFDt2KqkZEEtbl9HarlTF/eg==}
+    engines: {node: '>=18.0.0'}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
   '@effect/platform-node-shared@4.0.0-beta.91':
     resolution: {integrity: sha512-JX++yhomaOEpQmnTYuhn+pKAgKg5MQvycAf1rXGtyVKi202Nc5nK37xbywDcugfwrc1FrPxrxa3BY3lbSc74cw==}
     engines: {node: '>=18.0.0'}
@@ -3615,9 +3858,6 @@ packages:
   '@radix-ui/number@1.1.2':
     resolution: {integrity: sha512-ceTwaxc4I5IOi97DgCotl3pqiyRGvffcc0oOsE2dQYaJOFIDsDt4VWG6xEbg1QePv9QWausCEIppud/tJ1wNig==}
 
-  '@radix-ui/primitive@1.1.3':
-    resolution: {integrity: sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg==}
-
   '@radix-ui/primitive@1.1.5':
     resolution: {integrity: sha512-d86WIWFYNtGA0H/d8exstrTRTp7eWJYlYJbtNofxr/3ljupZYn6EFDG/Qgu/0Kc8v7yMUxySagqJsL1+PdYjWg==}
 
@@ -3738,19 +3978,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-collection@1.1.7':
-    resolution: {integrity: sha512-Fh9rGN0MoI4ZFUNyfFVNU4y9LUz93u9/0K+yLgA2bwRojxM8JU1DyvvMBabnZPBgMWREAJvU2jjVzq+LrFUglw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-compose-refs@1.1.2':
     resolution: {integrity: sha512-z4eqJvfiNnFMHIIvXP3CY57y2WJs5g2v3X0zm9mEJkrkNv4rDxu+sg9Jh8EkXyeqBkB7SOcboo9dMVqhyrACIg==}
     peerDependencies:
@@ -3782,15 +4009,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-context@1.1.2':
-    resolution: {integrity: sha512-jCi/QKUM2r1Ju5a3J64TH2A5SpKAgh0LpknyqdQ4m6DCV0xJ2HG1xARRwNGPQfi1SLdLWZ1OJz6F4OMBBNiGJA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
   '@radix-ui/react-context@1.2.0':
     resolution: {integrity: sha512-fOE+JtN9rygNZkCnHRBEP0TAvLldlhyOxMsbwFvTP4nAs+nBmfnna+o/Zski2wkmY1YMrFC0aSzsHoLY47iLrg==}
     peerDependencies:
@@ -3800,19 +4018,6 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-dialog@1.1.15':
-    resolution: {integrity: sha512-TCglVRtzlffRNxRMEyR36DGBLJpeusFcgMVD9PZEzAKnUs1lKCgX5u9BmC2Yg+LL9MgZDugFFs1Vl+Jp4t/PGw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-dialog@1.1.19':
     resolution: {integrity: sha512-+HhbN2+YtkRgVirjZ2afMeutQRuGOrdkWR5+EFC58SJojGmtyNQwYzgi6tHBpOxvFHefMtPeHdgtjz0BOGxFQg==}
     peerDependencies:
@@ -3826,15 +4031,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-direction@1.1.1':
-    resolution: {integrity: sha512-1UEWRX6jnOA2y4H5WczZ44gOOjTEmlqv1uNW4GAJEO5+bauCBhv8snY65Iw5/VOS/ghKN9gr2KjnLKxrsvoMVw==}
-    peerDependencies:
-      '@types/react': '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
   '@radix-ui/react-direction@1.1.2':
     resolution: {integrity: sha512-C3vFhbyi4SW3PmbAi6Awpu4OzJtd0MxGurvSsYtr7p7nM8RNB3VAF3CUmnp2j50knpkrRcB7+ycVXzgLgF6yNA==}
     peerDependencies:
@@ -3844,19 +4040,6 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-dismissable-layer@1.1.11':
-    resolution: {integrity: sha512-Nqcp+t5cTB8BinFkZgXiMJniQH0PsUt2k51FUhbdfeKvc4ACcG2uQniY/8+h1Yv6Kza4Q7lD7PQV0z0oicE0Mg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-dismissable-layer@1.1.15':
     resolution: {integrity: sha512-b0XaRlzn2QKuo10XyNgi2DAJDf5XC9d1nD3FJcuvCjbR7+4Ad28zmZsLsqx+hvDEzMnRuZaZxZm9gYObV6RmRA==}
     peerDependencies:
@@ -3883,15 +4066,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-focus-guards@1.1.3':
-    resolution: {integrity: sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==}
-    peerDependencies:
-      '@types/react': '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
   '@radix-ui/react-focus-guards@1.1.4':
     resolution: {integrity: sha512-cot/aB/mOm0IYVYTTmQcEEK1M48lZWi8FlYe5nDPQQ8NYZUlXEFgncJ9p2Kzer3RKSrY7cTTpEMLZKNo9QoP5Q==}
     peerDependencies:
@@ -3914,19 +4088,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-focus-scope@1.1.7':
-    resolution: {integrity: sha512-t2ODlkXBQyn7jkl6TNaw/MtVEVvIGelJDCG41Okq/KwUsJBwQ4XVZsHAVUkK4mBv3ewiAS3PGuUWuY2BoK4ZUw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-form@0.1.12':
     resolution: {integrity: sha512-JTX94E4LDL91rzLg7X0mHPdxr0A8JEdVwZEmeOwZJSMDHCGW5DFtSlTSJozUyUs807IQmnvbfzKZFVCK5DmkqQ==}
     peerDependencies:
@@ -4088,32 +4249,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-portal@1.1.9':
-    resolution: {integrity: sha512-bpIxvq03if6UNwXZ+HTK71JLh4APvnXntDc6XOX8UVq4XQOVl7lwok0AvIl+b8zgCw3fSaVTZMpAPPagXbKmHQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-presence@1.1.5':
-    resolution: {integrity: sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-presence@1.1.7':
     resolution: {integrity: sha512-zBZ4QM5XG3JRanDmqXYf3MD6th4AFXFmgU6KNMFzUaV6F3uw9I5/zjMUvFriSEn5ewo1nxuibvyxJdmLlDcslA==}
     peerDependencies:
@@ -4179,19 +4314,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-roving-focus@1.1.11':
-    resolution: {integrity: sha512-7A6S9jSgm/S+7MdtNDSb+IU859vQqJ/QAtcYQcfFC6W8RS4IxIZDldLR0xqCFZ6DCyrQLjLPsxtTNch5jVA4lA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-roving-focus@1.1.15':
     resolution: {integrity: sha512-40svmmugfM3mUN7VUDGVE1tQGOhyi8enlGD0CNJEcMM36C1f71PKM21DFgNHUfem0XnA+d8H8oN3Z9ZpJjSslg==}
     peerDependencies:
@@ -4297,19 +4419,6 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-tabs@1.1.13':
-    resolution: {integrity: sha512-7xdcatg7/U+7+Udyoj2zodtI9H/IIopqo+YOIcZOq1nJwXWBZ9p8xiu5llXlekDbZkca79a/fozEYQXIA4sW6A==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
   '@radix-ui/react-tabs@1.1.17':
     resolution: {integrity: sha512-nRyXnrAVCwjeXcHbvEbLS6ndbTeKHG1RqCP4A8Gw5L4cemDzPXdD8rAmr6wet0v57R69wGvuIIsFjHSVkZiMzQ==}
     peerDependencies:
@@ -4388,8 +4497,8 @@ packages:
       '@types/react-dom':
         optional: true
 
-  '@radix-ui/react-use-callback-ref@1.1.1':
-    resolution: {integrity: sha512-FkBMwD+qbGQeMu1cOHnuGB6x4yzPjho8ap5WtbEJ26umhgqVXbhekKUQO+hZEL1vU92a3wHwdp0HAcqAUF5iDg==}
+  '@radix-ui/react-use-callback-ref@1.1.2':
+    resolution: {integrity: sha512-xCso9j1/u8sEgP1RNHjFrXJLApL8LiqOkI1R4ywuN00rxWdYg4oQXuwKLS3i0j5NWLromUD27/4nlxj2UFVvIw==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -4397,8 +4506,8 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-use-callback-ref@1.1.2':
-    resolution: {integrity: sha512-xCso9j1/u8sEgP1RNHjFrXJLApL8LiqOkI1R4ywuN00rxWdYg4oQXuwKLS3i0j5NWLromUD27/4nlxj2UFVvIw==}
+  '@radix-ui/react-use-controllable-state@1.2.3':
+    resolution: {integrity: sha512-PLzC90MS+ReootmjC597dvopoelpZ8Q61HJkDXZSExitIq7PL55vHNnesAHwguHK0aPfBnpdNzQtv1uliaqQrA==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -4406,8 +4515,8 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-use-controllable-state@1.2.2':
-    resolution: {integrity: sha512-BjasUjixPFdS+NKkypcyyN5Pmg83Olst0+c6vGov0diwTEo6mgdqVR6hxcEgFuh4QrAs7Rc+9KuGJ9TVCj0Zzg==}
+  '@radix-ui/react-use-effect-event@0.0.3':
+    resolution: {integrity: sha512-6c8ZqvPTWILEKnyVkP53EGRCcpnJiKTC21sS/6R1GF5xKyHJJWQEPfkqlcgUkdRQivd6tb23abUwe4ngWmY0JA==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -4415,44 +4524,8 @@ packages:
       '@types/react':
         optional: true
 
-  '@radix-ui/react-use-controllable-state@1.2.3':
-    resolution: {integrity: sha512-PLzC90MS+ReootmjC597dvopoelpZ8Q61HJkDXZSExitIq7PL55vHNnesAHwguHK0aPfBnpdNzQtv1uliaqQrA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-effect-event@0.0.2':
-    resolution: {integrity: sha512-Qp8WbZOBe+blgpuUT+lw2xheLP8q0oatc9UpmiemEICxGvFLYmHm9QowVZGHtJlGbS6A6yJ3iViad/2cVjnOiA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-effect-event@0.0.3':
-    resolution: {integrity: sha512-6c8ZqvPTWILEKnyVkP53EGRCcpnJiKTC21sS/6R1GF5xKyHJJWQEPfkqlcgUkdRQivd6tb23abUwe4ngWmY0JA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-escape-keydown@1.1.1':
-    resolution: {integrity: sha512-Il0+boE7w/XebUHyBjroE+DbByORGR9KKmITzbR7MyQ4akpORYP/ZmbhAr0DG7RmmBqoOnZdy2QlvajJ2QA59g==}
-    peerDependencies:
-      '@types/react': '*'
-      react: 19.1.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-escape-keydown@1.1.3':
-    resolution: {integrity: sha512-3wEkMiPHXha/2VadZ68rYBcmYnPINVGl4Y3gtcM7fKRjANk0OscK+cdqBgUWdozb7YJxsh0vefM7vgAMHXOjqg==}
+  '@radix-ui/react-use-escape-keydown@1.1.3':
+    resolution: {integrity: sha512-3wEkMiPHXha/2VadZ68rYBcmYnPINVGl4Y3gtcM7fKRjANk0OscK+cdqBgUWdozb7YJxsh0vefM7vgAMHXOjqg==}
     peerDependencies:
       '@types/react': '*'
       react: 19.1.0
@@ -4810,6 +4883,9 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@rolldown/pluginutils@1.0.0-beta.27':
+    resolution: {integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==}
+
   '@rolldown/pluginutils@1.0.0-beta.57':
     resolution: {integrity: sha512-aQNelgx14tGA+n2tNSa9x6/jeoCL9fkDeCei7nOKnHx0fEFRRMu5ReiITo+zZD5TzWDGGRjbSYCs93IfRIyTuQ==}
 
@@ -4988,60 +5064,117 @@ packages:
   '@tailwindcss/node@4.3.0':
     resolution: {integrity: sha512-aFb4gUhFOgdh9AXo4IzBEOzBkkAxm9VigwDJnMIYv3lcfXCJVesNfbEaBl4BNgVRyid92AmdviqwBUBRKSeY3g==}
 
+  '@tailwindcss/node@4.3.2':
+    resolution: {integrity: sha512-yWP/sqEcBLaD8JuA6zNwxoYKr75qxTioYwlRwekj5Jr/I5GXnoJfjetH/psLUIv74cYTH2lBUEzBkinthoYcBg==}
+
   '@tailwindcss/oxide-android-arm64@4.3.0':
     resolution: {integrity: sha512-TJPiq67tKlLuObP6RkwvVGDoxCMBVtDgKkLfa/uyj7/FyxvQwHS+UOnVrXXgbEsfUaMgiVvC4KbJnRr26ho4Ng==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [android]
 
+  '@tailwindcss/oxide-android-arm64@4.3.2':
+    resolution: {integrity: sha512-WHxqIuHpvZ5VtdX6GTl1Ik/Vp2YuN42Et+0CdeaVd/frQ9jAvGmvR8vLT+jk3e8/Q3x8kECB9+R17pgpp2BulA==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [android]
+
   '@tailwindcss/oxide-darwin-arm64@4.3.0':
     resolution: {integrity: sha512-oMN/WZRb+SO37BmUElEgeEWuU8E/HXRkiODxJxLe1UTHVXLrdVSgfaJV7pSlhRGMSOiXLuxTIjfsF3wYvz8cgQ==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [darwin]
 
+  '@tailwindcss/oxide-darwin-arm64@4.3.2':
+    resolution: {integrity: sha512-GZypeUY/IDJW3877KeM+O67vbXr3MBnbtEL4aYhNErv/JWZhye2vGSWWG9tB6iiqR2MqRNkY8IOUy4NdSZV26w==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [darwin]
+
   '@tailwindcss/oxide-darwin-x64@4.3.0':
     resolution: {integrity: sha512-N6CUmu4a6bKVADfw77p+iw6Yd9Q3OBhe0veaDX+QazfuVYlQsHfDgxBrsjQ/IW+zywL8mTrNd0SdJT/zgtvMdA==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [darwin]
 
+  '@tailwindcss/oxide-darwin-x64@4.3.2':
+    resolution: {integrity: sha512-UIIzmefR6KO1sDU7MzRqAxC8iBpft/VhkGjTjnhoS6k7Z3rQ9wEgA1ODSiyH/tcSYssulNm4Ci3hOeK1jH7ccQ==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [darwin]
+
   '@tailwindcss/oxide-freebsd-x64@4.3.0':
     resolution: {integrity: sha512-zDL5hBkQdH5C6MpqbK3gQAgP80tsMwSI26vjOzjJtNCMUo0lFgOItzHKBIupOZNQxt3ouPH7RPhvNhiTfCe5CQ==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [freebsd]
 
+  '@tailwindcss/oxide-freebsd-x64@4.3.2':
+    resolution: {integrity: sha512-GN+uAmcI6DNspnCDwtOAZrTz6oukJnp337qZvxqCGLd3BHBzJpO0ZbTLRvJNdztOeAmTzewewGIMPb0tk2R4WA==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [freebsd]
+
   '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.0':
     resolution: {integrity: sha512-R06HdNi7A7OEoMsf6d4tjZ71RCWnZQPHj2mnotSFURjNLdBC+cIgXQ7l81CqeoiQftjf6OOblxXMInMgN2VzMA==}
     engines: {node: '>= 20'}
     cpu: [arm]
     os: [linux]
 
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.2':
+    resolution: {integrity: sha512-4ABn7qSbdHRwTiDiuWNegCyb5+2FJ4vKIKc3DmKrvAFw7MU1Lm11dIkTPwUaFdTzc7IsOpDbqBrlh0x6y36U/w==}
+    engines: {node: '>= 20'}
+    cpu: [arm]
+    os: [linux]
+
   '@tailwindcss/oxide-linux-arm64-gnu@4.3.0':
     resolution: {integrity: sha512-qTJHELX8jetjhRQHCLilkVLmybpzNQAtaI/gaoVoidn/ufbNDbAo8KlK2J+yPoc8wQxvDxCmh/5lr8nC1+lTbg==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
 
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.2':
+    resolution: {integrity: sha512-wDgEIGwoM8w8pufh9LVt1PahDgNdKXrLC2qfAnV3vAmococ9RWbxeAw4pxPttd/TsJfwjyLf90Dg1y9y8I6Emw==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+
   '@tailwindcss/oxide-linux-arm64-musl@4.3.0':
     resolution: {integrity: sha512-Z6sukiQsngnWO+l39X4pPbiWT81IC+PLKF+PHxIlyZbGNb9MODfYlXEVlFvej5BOZInWX01kVyzeLvHsXhfczQ==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
 
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.2':
+    resolution: {integrity: sha512-J5Nuk0uZQIiMTJj3LEx4sAA9tMFUoXQZFv1J6An+QGYe53HKRJuFDi0rpq/tuouCZeAbOBY3kQ6g8qeD4TUjtA==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [linux]
+
   '@tailwindcss/oxide-linux-x64-gnu@4.3.0':
     resolution: {integrity: sha512-DRNdQRpSGzRGfARVuVkxvM8Q12nh19l4BF/G7zGA1oe+9wcC6saFBHTISrpIcKzhiXtSrlSrluCfvMuledoCTQ==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
 
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.2':
+    resolution: {integrity: sha512-kqCZpSKOBEJO4mz7OqWoofBZeXTAwaVGPj0ErAj7CojmhKpWVWVOnrt9dE8odoIraZq4oj3ausM37kXi+Tow8w==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+
   '@tailwindcss/oxide-linux-x64-musl@4.3.0':
     resolution: {integrity: sha512-Z0IADbDo8bh6I7h2IQMx601AdXBLfFpEdUotft86evd/8ZPflZe9COPO8Q1vw+pfLWIUo9zN/JGZvwuAJqduqg==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
 
+  '@tailwindcss/oxide-linux-x64-musl@4.3.2':
+    resolution: {integrity: sha512-cixpqbh2toJDmkuCRI68nXA8ZxNmdK9Y+9v5h3MC3ZQKy/0BO8AWzlkWyRM7JAFSGBlfig4YVTPsK6MVgqz1uw==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [linux]
+
   '@tailwindcss/oxide-wasm32-wasi@4.3.0':
     resolution: {integrity: sha512-HNZGOUxEmElksYR7S6sC5jTeNGpobAsy9u7Gu0AskJ8/20FR9GqebUyB+HBcU/ax6BHuiuJi+Oda4B+YX6H1yA==}
     engines: {node: '>=14.0.0'}
@@ -5054,27 +5187,162 @@ packages:
       - '@emnapi/wasi-threads'
       - tslib
 
+  '@tailwindcss/oxide-wasm32-wasi@4.3.2':
+    resolution: {integrity: sha512-4ec2Z/LOmRsAgU23CS4xeJfcJlmRg94A/XrbGRCF1gyU/zdDfRLYDVsS+ynSZCmGNxQ1jQriQOKMQeQxBA3Isw==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+    bundledDependencies:
+      - '@napi-rs/wasm-runtime'
+      - '@emnapi/core'
+      - '@emnapi/runtime'
+      - '@tybys/wasm-util'
+      - '@emnapi/wasi-threads'
+      - tslib
+
   '@tailwindcss/oxide-win32-arm64-msvc@4.3.0':
     resolution: {integrity: sha512-Pe+RPVTi1T+qymuuRpcdvwSVZjnll/f7n8gBxMMh3xLTctMDKqpdfGimbMyioqtLhUYZxdJ9wGNhV7MKHvgZsQ==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [win32]
 
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.2':
+    resolution: {integrity: sha512-Zyr/M0+XcYZu3bZrUytc7TXvrk0ftWfl8gN2MwekNDzhqhKRUucMPSeOzM0o0wH5AWOU49BsKRrfKxI2atCPMQ==}
+    engines: {node: '>= 20'}
+    cpu: [arm64]
+    os: [win32]
+
   '@tailwindcss/oxide-win32-x64-msvc@4.3.0':
     resolution: {integrity: sha512-Mvrf2kXW/yeW/OTezZlCGOirXRcUuLIBx/5Y12BaPM7wJoryG6dfS/NJL8aBPqtTEx/Vm4T4vKzFUcKDT+TKUA==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [win32]
 
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.2':
+    resolution: {integrity: sha512-QI9BO7KlNZsp2GuO0jwAAj5jCDABOKXRkCk2XuKTSaNEFSdfzqswYVTtCHBNKHLsqyjFyFkqlDiwkNbTYSssMQ==}
+    engines: {node: '>= 20'}
+    cpu: [x64]
+    os: [win32]
+
   '@tailwindcss/oxide@4.3.0':
     resolution: {integrity: sha512-F7HZGBeN9I0/AuuJS5PwcD8xayx5ri5GhjYUDBEVYUkexyA/giwbDNjRVrxSezE3T250OU2K/wp/ltWx3UOefg==}
     engines: {node: '>= 20'}
 
+  '@tailwindcss/oxide@4.3.2':
+    resolution: {integrity: sha512-z8ZgnzX8gdNoWLBLqBPoh/sjnxkwvf9ZuWjnO0l0yIzbLa5/9S+eC5QxGZKRobVHIC3/1BoMWjHblqWjcgFgag==}
+    engines: {node: '>= 20'}
+
+  '@tailwindcss/postcss@4.3.2':
+    resolution: {integrity: sha512-rjVWYCa7Ngbi5AarT6k8TkxUG3Wl1QKzHdIZVsjZSzf36Jmo2IKZt/NHRAwly8oDkbBOH0YTu+CHuf9jPxMc+g==}
+
   '@tailwindcss/vite@4.3.0':
     resolution: {integrity: sha512-t6J3OrB5Fc0ExuhohouH0fWUGMYL6PTLhW+E7zIk/pdbnJARZDCwjBznFnkh5ynRnIRSI4YjtTH0t6USjJISrw==}
     peerDependencies:
       vite: 7.3.5
 
+  '@tanstack/history@1.161.4':
+    resolution: {integrity: sha512-Kp/WSt411ZWYvgXy6uiv5RmhHrz9cAml05AQPrtdAp7eUqvIDbMGPnML25OKbzR3RJ1q4wgENxDTvlGPa9+Mww==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/history@1.162.0':
+    resolution: {integrity: sha512-79pf/RkhteYZTRgcR4F9kbk84P2N8rugQJswxfIqovlbRiT3yI7eBE+5QorIrZaOKktsgzRlXh1l/du/xpl4iA==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/query-core@5.101.2':
+    resolution: {integrity: sha512-hH5MLoJhF7KaIGd7q3xTXGXvslI+GYlM1Z/35aSHHWaCJWB7XvTSHYuV3eM7tw+aE0mT/xMro4M4Q9rCGHT0lw==}
+
+  '@tanstack/query-devtools@5.101.2':
+    resolution: {integrity: sha512-o+wHcqgN7Pp0s8v1i0UGq/ZrrEKrxdIiMQmKRdYb2w7NPtylYSJ4+wg/tIn71m9DLstwUwdEGAvROdly6HXP6w==}
+
+  '@tanstack/react-query-devtools@5.101.2':
+    resolution: {integrity: sha512-eU7HctdA9gDjqoERoEdzLbw9DiqnBDfh5+Hu0u26gjqoHJezOpQAuiesDL2VvkU+2cPV76zgv0tMZsOrI4LjnQ==}
+    peerDependencies:
+      '@tanstack/react-query': ^5.101.2
+      react: 19.1.0
+
+  '@tanstack/react-query@5.101.2':
+    resolution: {integrity: sha512-seDkr6kzGzX1okaaTtZPtgA688CDPlXUz1C6xSg0ESqn04Vuc8tlrYms1s3de+znBqhPVxFRfpAfUf+6XvfPWg==}
+    peerDependencies:
+      react: 19.1.0
+
+  '@tanstack/react-router-devtools@1.163.3':
+    resolution: {integrity: sha512-42VMkV/2Z8ro7xzblPBRNZIEmCNXMzm2jD68G52p2qhjXm38wGpg46qneAESN9FtTQeVWk5aSXs47/jt7lkzmw==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      '@tanstack/react-router': ^1.163.3
+      '@tanstack/router-core': ^1.163.3
+      react: 19.1.0
+      react-dom: 19.1.0
+    peerDependenciesMeta:
+      '@tanstack/router-core':
+        optional: true
+
+  '@tanstack/react-router@1.163.3':
+    resolution: {integrity: sha512-hheBbFVb+PbxtrWp8iy6+TTRTbhx3Pn6hKo8Tv/sWlG89ZMcD1xpQWzx8ukHN9K8YWbh5rdzt4kv6u8X4kB28Q==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
+  '@tanstack/react-store@0.9.3':
+    resolution: {integrity: sha512-y2iHd/N9OkoQbFJLUX1T9vbc2O9tjH0pQRgTcx1/Nz4IlwLvkgpuglXUx+mXt0g5ZDFrEeDnONPqkbfxXJKwRg==}
+    peerDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0
+
+  '@tanstack/router-core@1.163.3':
+    resolution: {integrity: sha512-jPptiGq/w3nuPzcMC7RNa79aU+b6OjaDzWJnBcV2UAwL4ThJamRS4h42TdhJE+oF5yH9IEnCOGQdfnbw45LbfA==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/router-core@1.171.14':
+    resolution: {integrity: sha512-Mo3hwx0qB0cJsVYGDjG0+Ouf7VV74h/vsoDMGztdlyzDanp4gBA2s7IVvm6hFrmQM6GpD9F0Z7SqD7OldfLE7g==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/router-devtools-core@1.163.3':
+    resolution: {integrity: sha512-FPi64IP0PT1IkoeyGmsD6JoOVOYAb85VCH0mUbSdD90yV0+1UB6oT+D7K27GXkp7SXMJN3mBEjU5rKnNnmSCIw==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      '@tanstack/router-core': ^1.163.3
+      csstype: ^3.0.10
+    peerDependenciesMeta:
+      csstype:
+        optional: true
+
+  '@tanstack/router-generator@1.163.3':
+    resolution: {integrity: sha512-i2rWRtqY/yCYUDXva1li4zeDP20oFjMt/wh9RnGJCrKSLWrvEGnxAOSyXgiOsoJnU96TTQ0mUDbGfXsSTupeZQ==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/router-plugin@1.163.3':
+    resolution: {integrity: sha512-JOUYuUX2N9ZHnmkmvmiGzXGbkvrur/5BfW/+vpiZzuifSyvdc0XsfwkTpjvwWx9ymp4ZshSVKiQQKQi09YweIw==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      '@rsbuild/core': '>=1.0.2'
+      '@tanstack/react-router': ^1.163.3
+      vite: 7.3.5
+      vite-plugin-solid: ^2.11.10
+      webpack: '>=5.92.0'
+    peerDependenciesMeta:
+      '@rsbuild/core':
+        optional: true
+      '@tanstack/react-router':
+        optional: true
+      vite:
+        optional: true
+      vite-plugin-solid:
+        optional: true
+      webpack:
+        optional: true
+
+  '@tanstack/router-utils@1.161.4':
+    resolution: {integrity: sha512-r8TpjyIZoqrXXaf2DDyjd44gjGBoyE+/oEaaH68yLI9ySPO1gUWmQENZ1MZnmBnpUGN24NOZxdjDLc8npK0SAw==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/store@0.9.3':
+    resolution: {integrity: sha512-8reSzl/qGWGGVKhBoxXPMWzATSbZLZFWhwBAFO9NAyp0TxzfBP0mIrGb8CP8KrQTmvzXlR/vFPPUrHTLBGyFyw==}
+
+  '@tanstack/virtual-file-routes@1.161.4':
+    resolution: {integrity: sha512-42WoRePf8v690qG8yGRe/YOh+oHni9vUaUUfoqlS91U2scd3a5rkLtVsc6b7z60w3RogH0I00vdrC5AaeiZ18w==}
+    engines: {node: '>=20.19'}
+
   '@testing-library/dom@10.4.1':
     resolution: {integrity: sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==}
     engines: {node: '>=18'}
@@ -5236,12 +5504,20 @@ packages:
   '@types/node@20.19.43':
     resolution: {integrity: sha512-6oYBAi5ikg4Pl+kGsoYtawUMBT2zZMCvPNF7pVLnHZfd1zf38DRiWn/gT01RYCdUqkv7Fhr+C9ot4/tb+2sVvA==}
 
+  '@types/node@22.20.1':
+    resolution: {integrity: sha512-EANqOCF9QFyra+4pfxUcX9STKJpCLjMbObVzljIJomAWSnuSIEAvyzEU53GaajbXJEgdh0iEcPL+DGvpUd4k1Q==}
+
   '@types/node@24.10.4':
     resolution: {integrity: sha512-vnDVpYPMzs4wunl27jHrfmwojOGKya0xyM3sH+UE5iv5uPS6vX7UIoh6m+vQc5LGBq52HBKPIn/zcSZVzeDEZg==}
 
   '@types/node@25.3.3':
     resolution: {integrity: sha512-DpzbrH7wIcBaJibpKo9nnSQL0MTRdnWttGyE5haGwK86xgMOkFLp7vEyfQPGLOJh5wNYiJ3V9PmUMDhV9u8kkQ==}
 
+  '@types/react-dom@19.1.9':
+    resolution: {integrity: sha512-qXRuZaOsAdXKFyOhRBg6Lqqc0yay13vN7KrIg4L7N4aaHN68ma9OK3NE1BoDFgFOTfM7zg+3/8+2n8rLUH3OKQ==}
+    peerDependencies:
+      '@types/react': ^19.0.0
+
   '@types/react-dom@19.2.3':
     resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==}
     peerDependencies:
@@ -5470,6 +5746,12 @@ packages:
     peerDependencies:
       '@urql/core': ^5.0.0
 
+  '@vitejs/plugin-react@4.7.0':
+    resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==}
+    engines: {node: ^14.18.0 || >=16.0.0}
+    peerDependencies:
+      vite: 7.3.5
+
   '@vitejs/plugin-react@5.2.0':
     resolution: {integrity: sha512-YmKkfhOAi3wsB1PhJq5Scj3GXMn3WvtQ/JC0xoopuHoXSdmtdStOpFrYaT1kie2YgFBcIe64ROzMYRjCrYOdYw==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -5840,6 +6122,10 @@ packages:
     resolution: {integrity: sha512-m1Q/RaVOnTp9JxPX+F+Zn7IcLYMzM8kZofDImfsKZd8MbR+ikdOzTeztStWqfrqIxZnYWryyI9ePm3NGjnZgGw==}
     engines: {node: '>=20.19.0'}
 
+  ast-types@0.16.1:
+    resolution: {integrity: sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==}
+    engines: {node: '>=4'}
+
   async-function@1.0.0:
     resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
     engines: {node: '>= 0.4'}
@@ -5858,6 +6144,9 @@ packages:
     resolution: {integrity: sha512-NZKeq9AfyQvEeNlN0zSYAaWrmBffJh3IELMZfRpJVWgrpEbtEpnjvzqBPf+mxoI287JohRDoa+/nsfqqiZmF6g==}
     engines: {node: '>= 6.0.0'}
 
+  babel-dead-code-elimination@1.0.12:
+    resolution: {integrity: sha512-GERT7L2TiYcYDtYk1IpD+ASAYXjKbLTDPhBtYj7X1NuRMDTMtAx9kyBenub1Ev41lo91OHCKdmP+egTDmfQ7Ig==}
+
   babel-jest@29.7.0:
     resolution: {integrity: sha512-BrvGY3xZSwEcCzKvKsCi2GgHqDqsYkOP4/by5xCgIwGXQxIEh+8ew3gmrE1y7XRR6LHZIj6yLYnUi/mm2KXKBg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6318,6 +6607,12 @@ packages:
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
+  cookie-es@2.0.1:
+    resolution: {integrity: sha512-aVf4A4hI2w70LnF7GG+7xDQUkliwiXWXFvTjkip4+b64ygDQ2sJPRSKFDHbxn8o0xu9QzPkMuuiWIXyFSE2slA==}
+
+  cookie-es@3.1.1:
+    resolution: {integrity: sha512-UaXxwISYJPTr9hwQxMFYZ7kNhSXboMXP+Z3TRX6f1/NyaGPfuNUZOWP1pUEb75B2HjfklIYLVRfWiFZJyC6Npg==}
+
   core-js-compat@3.47.0:
     resolution: {integrity: sha512-IGfuznZ/n7Kp9+nypamBhvwdwLsW6KC8IOaURw2doAK5e98AG3acVLdh0woOnEqCfUtS+Vu882JE4k/DAm3ItQ==}
 
@@ -6548,6 +6843,10 @@ packages:
     resolution: {integrity: sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
 
+  diff@8.0.4:
+    resolution: {integrity: sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==}
+    engines: {node: '>=0.3.1'}
+
   doctrine@2.1.0:
     resolution: {integrity: sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==}
     engines: {node: '>=0.10.0'}
@@ -6662,8 +6961,8 @@ packages:
     resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
     engines: {node: '>= 0.8'}
 
-  enhanced-resolve@5.18.4:
-    resolution: {integrity: sha512-LgQMM4WXU3QI+SYgEc2liRgznaD5ojbmY3sb8LxyguVkIg5FxdpTkvk72te2R38/TGKxH634oLxXRGY6d7AP+Q==}
+  enhanced-resolve@5.21.6:
+    resolution: {integrity: sha512-aNnGCvbJ/RIyWo1IuhNdVjnNF+EjH9wpzpNHt+ci/m9He9LJvUN8wrCcXjp9cWsGNAuvSpVFTx/vraAFQ8qGjQ==}
     engines: {node: '>=10.13.0'}
 
   enhanced-resolve@5.22.1:
@@ -7389,6 +7688,11 @@ packages:
   globrex@0.1.2:
     resolution: {integrity: sha512-uHJgbwAMwNFf5mLst7IWLNg14x1CkeqglJb/K3doi4dw6q2IvAAmM/Y81kevy83wP+Sst+nutFTYOGg3d1lsxg==}
 
+  goober@2.1.19:
+    resolution: {integrity: sha512-U7veizMqxyKlM58+Z5j2ngJBH/r9siDmxpvNxSw0PylF6WQvrASJEZrxh1hidRBJc2jqoBVSyOban5u8m+6Rxg==}
+    peerDependencies:
+      csstype: ^3.0.10
+
   gopd@1.2.0:
     resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
     engines: {node: '>= 0.4'}
@@ -7721,6 +8025,10 @@ packages:
   isarray@2.0.5:
     resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
 
+  isbot@5.2.0:
+    resolution: {integrity: sha512-gbZiGCb4B5xaoxg9mS7koAyRdvJnArk10VLSHOgz6rtBG93/pi1xOFaVvXMKZ7JXgyZ8zAbNRK5uIBdIUTFSqw==}
+    engines: {node: '>=18'}
+
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
@@ -7925,6 +8233,10 @@ packages:
     resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
     hasBin: true
 
+  jiti@2.7.0:
+    resolution: {integrity: sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==}
+    hasBin: true
+
   jose@6.1.3:
     resolution: {integrity: sha512-0TpaTfihd4QMNwrz/ob2Bp7X04yuxJkjRGi4aKmOqwhov54i6u79oCv7T+C7lo70MKH6BesI3vscD1yb/yzKXQ==}
 
@@ -8241,6 +8553,11 @@ packages:
     resolution: {integrity: sha512-DqC6n3QQ77zdFpCMASA1a3Jlb64Hv2N2DciFGkO/4L9+q/IpIAuRlKOvCXabtRW6cQf8usbmM6BE/TOPysCdIA==}
     engines: {bun: '>=1.0.0', deno: '>=1.30.0', node: '>=8.0.0'}
 
+  lucide-react@0.513.0:
+    resolution: {integrity: sha512-CJZKq2g8Y8yN4Aq002GahSXbG2JpFv9kXwyiOAMvUBv7pxeOFHUWKB0mO7MiY4ZVFCV4aNjv2BJFq/z3DgKPQg==}
+    peerDependencies:
+      react: 19.1.0
+
   lucide-react@0.555.0:
     resolution: {integrity: sha512-D8FvHUGbxWBRQM90NZeIyhAvkFfsh3u9ekrMvJ30Z6gnpBHS6HC6ldLg7tL45hwiIz/u66eKDtdA23gwwGsAHA==}
     peerDependencies:
@@ -8460,6 +8777,11 @@ packages:
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
+  nanoid@3.3.15:
+    resolution: {integrity: sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==}
+    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
+    hasBin: true
+
   nanoid@5.1.6:
     resolution: {integrity: sha512-c7+7RQ+dMB5dPwwCp4ee1/iV/q2P6aK1mTZcfr1BTuVlyW9hJYiMPybJCcnBlQtuSmTIWNeazm/zqNoZSSElBg==}
     engines: {node: ^18 || >=20}
@@ -8820,6 +9142,10 @@ packages:
     resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==}
     engines: {node: ^10 || ^12 || >=14}
 
+  postcss@8.5.16:
+    resolution: {integrity: sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==}
+    engines: {node: ^10 || ^12 || >=14}
+
   preact-render-to-string@6.7.0:
     resolution: {integrity: sha512-Z4WR8fmLMRpdYqJ9i7vrlXSsSrxVJydwrkEXHapexfARbWfGb7vGcnvNQnIzN0cXciMVOlz/XLoiMCi9gUsy9Q==}
     peerDependencies:
@@ -9059,6 +9385,10 @@ packages:
     resolution: {integrity: sha512-jCvmsr+1IUSMUyzOkRcvnVbX3ZYC6g9TDrDbFuFmRDq7PD4yaGbLKNQL6k2jnArV8hjYxh7hVhAZB6s9HDGpZA==}
     engines: {node: '>=0.10.0'}
 
+  react-refresh@0.17.0:
+    resolution: {integrity: sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ==}
+    engines: {node: '>=0.10.0'}
+
   react-refresh@0.18.0:
     resolution: {integrity: sha512-QgT5//D3jfjJb6Gsjxv0Slpj23ip+HtOpnNgnb2S5zU3CB26G/IDPGoy4RJB42wzFE46DRsstbW6tKHoKbhAxw==}
     engines: {node: '>=0.10.0'}
@@ -9132,6 +9462,10 @@ packages:
     resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
     engines: {node: '>= 20.19.0'}
 
+  recast@0.23.12:
+    resolution: {integrity: sha512-dEWRjcINDu/F4l2dYx57ugBtD7HV9KXESyxhzw/MqWLeglJrsjJKqACPyUPg+6AF8mIgm+Zi0dZ3ACoIg+QtpA==}
+    engines: {node: '>= 4'}
+
   recharts-scale@0.4.5:
     resolution: {integrity: sha512-kivNFO+0OcUNu7jQquLXAxz1FIwZj8nrj+YkOKc5694NbjCvcT6aSZiIzNzd2Kul4o4rTto8QVR9lMNtxD4G1w==}
 
@@ -9143,6 +9477,9 @@ packages:
       react: 19.1.0
       react-dom: 19.1.0
 
+  redaxios@0.5.1:
+    resolution: {integrity: sha512-FSD2AmfdbkYwl7KDExYQlVvIrFz6Yd83pGfaGjBzM9F6rpq8g652Q4Yq5QD4c+nf4g2AgeElv1y+8ajUPiOYMg==}
+
   redent@3.0.0:
     resolution: {integrity: sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==}
     engines: {node: '>=8'}
@@ -9376,6 +9713,16 @@ packages:
     resolution: {integrity: sha512-ghgmKt5o4Tly5yEG/UJp8qTd0AN7Xalw4XBtDEKP655B699qMEtra1WlXeE6WIvdEG481JvRxULKsInq/iNysw==}
     engines: {node: '>=0.10.0'}
 
+  seroval-plugins@1.5.5:
+    resolution: {integrity: sha512-+BDhqYM6CEn3x09v44dpa9p6974FuUB2dxk+Ctn04k0cO1Zt6QODTXfmEZK0eBaTe/fJBvP4NMGuNJ+R8T+QMg==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      seroval: ^1.0
+
+  seroval@1.5.5:
+    resolution: {integrity: sha512-bSjOuPcwPKLSJNhr9+bZxA20nQxVle5J5MNsYRVE6cIg7KpRLXGupymePavu0jrxlPiPsr4xGZSB8yUY2sH2sw==}
+    engines: {node: '>=10'}
+
   serve-static@1.16.3:
     resolution: {integrity: sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==}
     engines: {node: '>= 0.8.0'}
@@ -9684,9 +10031,8 @@ packages:
   tailwindcss@4.3.0:
     resolution: {integrity: sha512-y6nxMGB1nMW9R6k96e5gdIFzcfL/gTJRNaqGes1YvkLnPVXzWgbqFF2yLC0T8G774n24cx3Pe8XrKoniCOAH+Q==}
 
-  tapable@2.3.0:
-    resolution: {integrity: sha512-g9ljZiwki/LfxmQADO3dEY1CbpmXT5Hm2fJ+QaGKwSXUylMybePR7/67YW7jOrrvjEgL1Fmz5kzyAjWVWLlucg==}
-    engines: {node: '>=6'}
+  tailwindcss@4.3.2:
+    resolution: {integrity: sha512-WtctNNSH8A9jlMIqxzuYumOHU5uGZyRv0Q5svQl+oEPy5w84YpBxdb7MdqyiSPQge5jTJ6zFQLq0PFygdccSBA==}
 
   tapable@2.3.3:
     resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
@@ -9730,6 +10076,9 @@ packages:
   tiny-invariant@1.3.3:
     resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
 
+  tiny-warning@1.0.3:
+    resolution: {integrity: sha512-lBN9zLN/oAf68o3zNXYrdCt1kP8WsiGW8Oo2ka41b2IM5JL/S1CTyX1rW0mb/zSuJun0ZUrDxx4sqvYS2FWzPA==}
+
   tinybench@2.9.0:
     resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}
 
@@ -10045,6 +10394,10 @@ packages:
     resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
     engines: {node: '>= 0.8'}
 
+  unplugin@2.3.11:
+    resolution: {integrity: sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww==}
+    engines: {node: '>=18.12.0'}
+
   unrs-resolver@1.11.1:
     resolution: {integrity: sha512-bSjt9pjaEBnNiGgc9rUiHGKv5l4/TGzDmYw3RhnkJGtLhbnnA/5qJj7x3dNDCRx/PJxu774LlH8lCOlB4hEfKg==}
 
@@ -10297,6 +10650,9 @@ packages:
     resolution: {integrity: sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==}
     engines: {node: '>=12'}
 
+  webpack-virtual-modules@0.6.2:
+    resolution: {integrity: sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ==}
+
   whatwg-encoding@2.0.0:
     resolution: {integrity: sha512-p41ogyeMUrw3jWclHWTQg1k05DSVXPLcVxRTYsXUk+ZooOCZLcoYgPZ/HL/D/N+uQPOtcp1me1WhBEaX02mhWg==}
     engines: {node: '>=12'}
@@ -10469,6 +10825,9 @@ packages:
     resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
     engines: {node: '>=10'}
 
+  zod@3.25.76:
+    resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
+
   zod@4.3.6:
     resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
 
@@ -10494,6 +10853,8 @@ snapshots:
 
   '@0no-co/graphql.web@1.2.0': {}
 
+  '@alloc/quick-lru@5.2.0': {}
+
   '@antfu/ni@0.23.2': {}
 
   '@antfu/utils@8.1.1': {}
@@ -10562,8 +10923,8 @@ snapshots:
 
   '@babel/generator@7.29.1':
     dependencies:
-      '@babel/parser': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
       '@jridgewell/gen-mapping': 0.3.13
       '@jridgewell/trace-mapping': 0.3.31
       jsesc: 3.1.0
@@ -10578,7 +10939,7 @@ snapshots:
 
   '@babel/helper-annotate-as-pure@7.27.3':
     dependencies:
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
 
   '@babel/helper-compilation-targets@7.27.2':
     dependencies:
@@ -10645,21 +11006,21 @@ snapshots:
   '@babel/helper-member-expression-to-functions@7.28.5':
     dependencies:
       '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
   '@babel/helper-module-imports@7.27.1':
     dependencies:
       '@babel/traverse': 7.28.5
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
   '@babel/helper-module-imports@7.28.6':
     dependencies:
       '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
@@ -10683,7 +11044,7 @@ snapshots:
 
   '@babel/helper-optimise-call-expression@7.27.1':
     dependencies:
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
 
   '@babel/helper-plugin-utils@7.27.1': {}
 
@@ -10719,7 +11080,7 @@ snapshots:
   '@babel/helper-skip-transparent-expression-wrappers@7.27.1':
     dependencies:
       '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
@@ -10735,7 +11096,7 @@ snapshots:
 
   '@babel/helper-wrap-function@7.28.3':
     dependencies:
-      '@babel/template': 7.28.6
+      '@babel/template': 7.29.7
       '@babel/traverse': 7.29.0
       '@babel/types': 7.29.7
     transitivePeerDependencies:
@@ -10748,14 +11109,14 @@ snapshots:
 
   '@babel/highlight@7.25.9':
     dependencies:
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
       chalk: 2.4.2
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
   '@babel/parser@7.29.0':
     dependencies:
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
 
   '@babel/parser@7.29.7':
     dependencies:
@@ -10764,7 +11125,7 @@ snapshots:
   '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
@@ -10772,17 +11133,17 @@ snapshots:
   '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
       '@babel/plugin-transform-optional-chaining': 7.28.5(@babel/core@7.29.6)
     transitivePeerDependencies:
@@ -10791,7 +11152,7 @@ snapshots:
   '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.28.3(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
@@ -10837,12 +11198,12 @@ snapshots:
   '@babel/plugin-syntax-decorators@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-dynamic-import@7.8.3(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-export-default-from@7.27.1(@babel/core@7.29.6)':
     dependencies:
@@ -10852,17 +11213,17 @@ snapshots:
   '@babel/plugin-syntax-flow@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-import-assertions@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-import-attributes@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-import-meta@7.10.4(@babel/core@7.29.6)':
     dependencies:
@@ -10877,7 +11238,7 @@ snapshots:
   '@babel/plugin-syntax-jsx@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.6)':
     dependencies:
@@ -10892,7 +11253,7 @@ snapshots:
   '@babel/plugin-syntax-nullish-coalescing-operator@7.8.3(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-numeric-separator@7.10.4(@babel/core@7.29.6)':
     dependencies:
@@ -10912,7 +11273,7 @@ snapshots:
   '@babel/plugin-syntax-optional-chaining@7.8.3(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-syntax-private-property-in-object@7.14.5(@babel/core@7.29.6)':
     dependencies:
@@ -10924,11 +11285,6 @@ snapshots:
       '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
-  '@babel/plugin-syntax-typescript@7.27.1(@babel/core@7.29.6)':
-    dependencies:
-      '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.28.6
-
   '@babel/plugin-syntax-typescript@7.28.6(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
@@ -10938,17 +11294,17 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-arrow-functions@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-async-generator-functions@7.28.0(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.6)
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
@@ -10958,7 +11314,7 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-module-imports': 7.27.1
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
@@ -10966,18 +11322,18 @@ snapshots:
   '@babel/plugin-transform-block-scoped-functions@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-block-scoping@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-class-properties@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
     transitivePeerDependencies:
       - supports-color
 
@@ -10995,7 +11351,7 @@ snapshots:
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-compilation-targets': 7.28.6
       '@babel/helper-globals': 7.28.0
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.6)
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
@@ -11004,13 +11360,13 @@ snapshots:
   '@babel/plugin-transform-computed-properties@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/template': 7.28.6
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/template': 7.29.7
 
   '@babel/plugin-transform-destructuring@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
@@ -11019,28 +11375,28 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-duplicate-keys@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-dynamic-import@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-explicit-resource-management@7.28.0(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
@@ -11048,7 +11404,7 @@ snapshots:
   '@babel/plugin-transform-exponentiation-operator@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-export-namespace-from@7.27.1(@babel/core@7.29.6)':
     dependencies:
@@ -11064,7 +11420,7 @@ snapshots:
   '@babel/plugin-transform-for-of@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
@@ -11073,7 +11429,7 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-compilation-targets': 7.28.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
@@ -11081,28 +11437,28 @@ snapshots:
   '@babel/plugin-transform-json-strings@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-logical-assignment-operators@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-member-expression-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-modules-amd@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
     transitivePeerDependencies:
       - supports-color
 
@@ -11127,7 +11483,7 @@ snapshots:
       '@babel/core': 7.29.6
       '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.28.6
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
@@ -11136,7 +11492,7 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
     transitivePeerDependencies:
       - supports-color
 
@@ -11144,22 +11500,22 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-new-target@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-nullish-coalescing-operator@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-numeric-separator@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-object-rest-spread@7.28.4(@babel/core@7.29.6)':
     dependencies:
@@ -11175,7 +11531,7 @@ snapshots:
   '@babel/plugin-transform-object-super@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-replace-supers': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
@@ -11183,7 +11539,7 @@ snapshots:
   '@babel/plugin-transform-optional-catch-binding@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-optional-chaining@7.27.1(@babel/core@7.29.6)':
     dependencies:
@@ -11196,7 +11552,7 @@ snapshots:
   '@babel/plugin-transform-optional-chaining@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
@@ -11226,12 +11582,12 @@ snapshots:
   '@babel/plugin-transform-property-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-react-display-name@7.28.0(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-react-jsx-development@7.27.1(@babel/core@7.29.6)':
     dependencies:
@@ -11255,9 +11611,9 @@ snapshots:
       '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-module-imports': 7.27.1
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.6)
-      '@babel/types': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
+      '@babel/types': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
@@ -11265,23 +11621,23 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-regenerator@7.28.4(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-regexp-modifiers@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-reserved-words@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-runtime@7.28.5(@babel/core@7.29.6)':
     dependencies:
@@ -11298,12 +11654,12 @@ snapshots:
   '@babel/plugin-transform-shorthand-properties@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-spread@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
     transitivePeerDependencies:
       - supports-color
@@ -11311,26 +11667,26 @@ snapshots:
   '@babel/plugin-transform-sticky-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-template-literals@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-typeof-symbol@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-typescript@7.28.5(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
       '@babel/helper-create-class-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
@@ -11348,25 +11704,25 @@ snapshots:
   '@babel/plugin-transform-unicode-escapes@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-unicode-property-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-unicode-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/plugin-transform-unicode-sets-regex@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-create-regexp-features-plugin': 7.28.5(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
 
   '@babel/preset-env@7.28.5(@babel/core@7.29.6)':
     dependencies:
@@ -11447,8 +11803,8 @@ snapshots:
   '@babel/preset-modules@0.1.6-no-external-plugins(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.27.1
-      '@babel/types': 7.29.0
+      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/types': 7.29.7
       esutils: 2.0.3
 
   '@babel/preset-react@7.28.5(@babel/core@7.29.6)':
@@ -11489,12 +11845,6 @@ snapshots:
 
   '@babel/runtime@7.29.7': {}
 
-  '@babel/template@7.27.2':
-    dependencies:
-      '@babel/code-frame': 7.29.0
-      '@babel/parser': 7.29.0
-      '@babel/types': 7.29.0
-
   '@babel/template@7.28.6':
     dependencies:
       '@babel/code-frame': 7.29.0
@@ -11509,12 +11859,12 @@ snapshots:
 
   '@babel/traverse@7.28.5':
     dependencies:
-      '@babel/code-frame': 7.29.0
+      '@babel/code-frame': 7.29.7
       '@babel/generator': 7.29.1
       '@babel/helper-globals': 7.28.0
-      '@babel/parser': 7.29.0
-      '@babel/template': 7.28.6
-      '@babel/types': 7.29.0
+      '@babel/parser': 7.29.7
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.7
       debug: 4.4.3
     transitivePeerDependencies:
       - supports-color
@@ -11531,11 +11881,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/types@7.28.5':
-    dependencies:
-      '@babel/helper-string-parser': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
-
   '@babel/types@7.29.0':
     dependencies:
       '@babel/helper-string-parser': 7.27.1
@@ -11572,11 +11917,11 @@ snapshots:
 
   '@bcoe/v8-coverage@0.2.3': {}
 
-  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
+  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
-      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       better-call: 1.3.7(zod@4.3.6)
       zod: 4.3.6
 
@@ -11699,10 +12044,44 @@ snapshots:
 
   '@csstools/css-tokenizer@3.0.4': {}
 
+  '@dnd-kit/accessibility@3.1.1(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+      tslib: 2.8.1
+
+  '@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@dnd-kit/accessibility': 3.1.1(react@19.1.0)
+      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      tslib: 2.8.1
+
+  '@dnd-kit/sortable@10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@dnd-kit/core': 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
+      react: 19.1.0
+      tslib: 2.8.1
+
+  '@dnd-kit/utilities@3.2.2(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+      tslib: 2.8.1
+
   '@drizzle-team/brocli@0.10.2': {}
 
   '@effect/language-service@0.64.1': {}
 
+  '@effect/platform-node-shared@4.0.0-beta.84(effect@4.0.0-beta.84)':
+    dependencies:
+      '@types/ws': 8.18.1
+      effect: 4.0.0-beta.84
+      ws: 8.21.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
   '@effect/platform-node-shared@4.0.0-beta.91(effect@4.0.0-beta.84)':
     dependencies:
       '@types/ws': 8.18.1
@@ -11730,15 +12109,15 @@ snapshots:
       msgpackr: 1.11.8
       multipasta: 0.2.7
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   '@emnapi/core@1.10.0':
     dependencies:
@@ -12169,9 +12548,9 @@ snapshots:
   '@esbuild/win32-x64@0.28.1':
     optional: true
 
-  '@eslint-community/eslint-utils@4.9.0(eslint@9.39.2(jiti@2.6.1))':
+  '@eslint-community/eslint-utils@4.9.0(eslint@9.39.2(jiti@2.7.0))':
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       eslint-visitor-keys: 3.4.3
 
   '@eslint-community/regexpp@4.12.2': {}
@@ -13089,8 +13468,6 @@ snapshots:
 
   '@radix-ui/number@1.1.2': {}
 
-  '@radix-ui/primitive@1.1.3': {}
-
   '@radix-ui/primitive@1.1.5': {}
 
   '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
@@ -13119,6 +13496,19 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -13132,6 +13522,15 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
@@ -13195,6 +13594,18 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
@@ -13207,12 +13618,12 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-collection@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
@@ -13244,61 +13655,33 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-context@1.1.2(@types/react@19.1.17)(react@19.1.0)':
-    dependencies:
-      react: 19.1.0
-    optionalDependencies:
-      '@types/react': 19.1.17
-
   '@radix-ui/react-context@1.2.0(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-dialog@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       aria-hidden: 1.2.6
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
-  '@radix-ui/react-dialog@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
-      aria-hidden: 1.2.6
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -13322,11 +13705,27 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-direction@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
       react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
   '@radix-ui/react-direction@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
@@ -13334,65 +13733,74 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-dismissable-layer@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-escape-keydown': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dismissable-layer@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-escape-keydown': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-focus-guards@1.1.3(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
   '@radix-ui/react-focus-guards@1.1.4(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
@@ -13400,33 +13808,33 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-focus-scope@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-focus-scope@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
@@ -13478,6 +13886,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-label@2.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
@@ -13487,22 +13904,48 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       aria-hidden: 1.2.6
@@ -13612,6 +14055,24 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/rect': 1.1.2
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@floating-ui/react-dom': 2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
@@ -13630,61 +14091,59 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-portal@1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-portal@1.1.9(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -13698,14 +14157,14 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -13716,6 +14175,15 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
@@ -13744,22 +14212,24 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-roving-focus@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-collection': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -13780,6 +14250,42 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/number': 1.1.2
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
@@ -13797,6 +14303,36 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-select@2.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/number': 1.1.2
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
@@ -13827,6 +14363,15 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
@@ -13891,21 +14436,21 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-tabs@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/primitive': 1.1.3
-      '@radix-ui/react-context': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.5(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -13923,6 +14468,22 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -13984,6 +14545,26 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -14004,26 +14585,12 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-use-callback-ref@1.1.1(@types/react@19.1.17)(react@19.1.0)':
-    dependencies:
-      react: 19.1.0
-    optionalDependencies:
-      '@types/react': 19.1.17
-
   '@radix-ui/react-use-callback-ref@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-controllable-state@1.2.2(@types/react@19.1.17)(react@19.1.0)':
-    dependencies:
-      '@radix-ui/react-use-effect-event': 0.0.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-    optionalDependencies:
-      '@types/react': 19.1.17
-
   '@radix-ui/react-use-controllable-state@1.2.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
@@ -14032,13 +14599,6 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-effect-event@0.0.2(@types/react@19.1.17)(react@19.1.0)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-    optionalDependencies:
-      '@types/react': 19.1.17
-
   '@radix-ui/react-use-effect-event@0.0.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
@@ -14046,13 +14606,6 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-escape-keydown@1.1.1(@types/react@19.1.17)(react@19.1.0)':
-    dependencies:
-      '@radix-ui/react-use-callback-ref': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-    optionalDependencies:
-      '@types/react': 19.1.17
-
   '@radix-ui/react-use-escape-keydown@1.1.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
@@ -14098,6 +14651,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
   '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
@@ -14166,7 +14728,7 @@ snapshots:
       '@babel/plugin-transform-sticky-regex': 7.27.1(@babel/core@7.29.6)
       '@babel/plugin-transform-typescript': 7.28.5(@babel/core@7.29.6)
       '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.6)
-      '@babel/template': 7.27.2
+      '@babel/template': 7.29.7
       '@react-native/babel-plugin-codegen': 0.81.5(@babel/core@7.29.6)
       babel-plugin-syntax-hermes-parser: 0.29.1
       babel-plugin-transform-flow-enums: 0.0.2(@babel/core@7.29.6)
@@ -14391,6 +14953,8 @@ snapshots:
   '@rolldown/binding-win32-x64-msvc@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/pluginutils@1.0.0-beta.27': {}
+
   '@rolldown/pluginutils@1.0.0-beta.57': {}
 
   '@rolldown/pluginutils@1.0.0-rc.17': {}
@@ -14491,7 +15055,7 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
-  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
+  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
     dependencies:
       '@react-native/polyfills': 2.0.0
       esbuild: 0.27.7
@@ -14500,8 +15064,8 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
 
   '@standard-schema/spec@1.1.0': {}
 
@@ -14517,42 +15081,88 @@ snapshots:
       source-map-js: 1.2.1
       tailwindcss: 4.3.0
 
+  '@tailwindcss/node@4.3.2':
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      enhanced-resolve: 5.21.6
+      jiti: 2.7.0
+      lightningcss: 1.32.0
+      magic-string: 0.30.21
+      source-map-js: 1.2.1
+      tailwindcss: 4.3.2
+
   '@tailwindcss/oxide-android-arm64@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-android-arm64@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-darwin-arm64@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-darwin-arm64@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-darwin-x64@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-darwin-x64@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-freebsd-x64@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-freebsd-x64@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-linux-arm64-gnu@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-linux-arm64-musl@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-linux-x64-gnu@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-linux-x64-musl@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-linux-x64-musl@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-wasm32-wasi@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-wasm32-wasi@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-win32-arm64-msvc@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide-win32-x64-msvc@4.3.0':
     optional: true
 
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.2':
+    optional: true
+
   '@tailwindcss/oxide@4.3.0':
     optionalDependencies:
       '@tailwindcss/oxide-android-arm64': 4.3.0
@@ -14568,12 +15178,161 @@ snapshots:
       '@tailwindcss/oxide-win32-arm64-msvc': 4.3.0
       '@tailwindcss/oxide-win32-x64-msvc': 4.3.0
 
-  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tailwindcss/oxide@4.3.2':
+    optionalDependencies:
+      '@tailwindcss/oxide-android-arm64': 4.3.2
+      '@tailwindcss/oxide-darwin-arm64': 4.3.2
+      '@tailwindcss/oxide-darwin-x64': 4.3.2
+      '@tailwindcss/oxide-freebsd-x64': 4.3.2
+      '@tailwindcss/oxide-linux-arm-gnueabihf': 4.3.2
+      '@tailwindcss/oxide-linux-arm64-gnu': 4.3.2
+      '@tailwindcss/oxide-linux-arm64-musl': 4.3.2
+      '@tailwindcss/oxide-linux-x64-gnu': 4.3.2
+      '@tailwindcss/oxide-linux-x64-musl': 4.3.2
+      '@tailwindcss/oxide-wasm32-wasi': 4.3.2
+      '@tailwindcss/oxide-win32-arm64-msvc': 4.3.2
+      '@tailwindcss/oxide-win32-x64-msvc': 4.3.2
+
+  '@tailwindcss/postcss@4.3.2':
+    dependencies:
+      '@alloc/quick-lru': 5.2.0
+      '@tailwindcss/node': 4.3.2
+      '@tailwindcss/oxide': 4.3.2
+      postcss: 8.5.16
+      tailwindcss: 4.3.2
+
+  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@tailwindcss/node': 4.3.0
       '@tailwindcss/oxide': 4.3.0
       tailwindcss: 4.3.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  '@tanstack/history@1.161.4': {}
+
+  '@tanstack/history@1.162.0': {}
+
+  '@tanstack/query-core@5.101.2': {}
+
+  '@tanstack/query-devtools@5.101.2': {}
+
+  '@tanstack/react-query-devtools@5.101.2(@tanstack/react-query@5.101.2(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/query-devtools': 5.101.2
+      '@tanstack/react-query': 5.101.2(react@19.1.0)
+      react: 19.1.0
+
+  '@tanstack/react-query@5.101.2(react@19.1.0)':
+    dependencies:
+      '@tanstack/query-core': 5.101.2
+      react: 19.1.0
+
+  '@tanstack/react-router-devtools@1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(csstype@3.2.3)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/react-router': 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-devtools-core': 1.163.3(@tanstack/router-core@1.171.14)(csstype@3.2.3)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@tanstack/router-core': 1.171.14
+    transitivePeerDependencies:
+      - csstype
+
+  '@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/history': 1.161.4
+      '@tanstack/react-store': 0.9.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-core': 1.163.3
+      isbot: 5.2.0
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      tiny-invariant: 1.3.3
+      tiny-warning: 1.0.3
+
+  '@tanstack/react-store@0.9.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/store': 0.9.3
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      use-sync-external-store: 1.6.0(react@19.1.0)
+
+  '@tanstack/router-core@1.163.3':
+    dependencies:
+      '@tanstack/history': 1.161.4
+      '@tanstack/store': 0.9.3
+      cookie-es: 2.0.1
+      seroval: 1.5.5
+      seroval-plugins: 1.5.5(seroval@1.5.5)
+      tiny-invariant: 1.3.3
+      tiny-warning: 1.0.3
+
+  '@tanstack/router-core@1.171.14':
+    dependencies:
+      '@tanstack/history': 1.162.0
+      cookie-es: 3.1.1
+      seroval: 1.5.5
+      seroval-plugins: 1.5.5(seroval@1.5.5)
+
+  '@tanstack/router-devtools-core@1.163.3(@tanstack/router-core@1.171.14)(csstype@3.2.3)':
+    dependencies:
+      '@tanstack/router-core': 1.171.14
+      clsx: 2.1.1
+      goober: 2.1.19(csstype@3.2.3)
+      tiny-invariant: 1.3.3
+    optionalDependencies:
+      csstype: 3.2.3
+
+  '@tanstack/router-generator@1.163.3':
+    dependencies:
+      '@tanstack/router-core': 1.163.3
+      '@tanstack/router-utils': 1.161.4
+      '@tanstack/virtual-file-routes': 1.161.4
+      prettier: 3.8.1
+      recast: 0.23.12
+      source-map: 0.7.6
+      tsx: 4.21.0
+      zod: 3.25.76
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tanstack/router-plugin@1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.6)
+      '@babel/template': 7.29.7
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.7
+      '@tanstack/router-core': 1.163.3
+      '@tanstack/router-generator': 1.163.3
+      '@tanstack/router-utils': 1.161.4
+      '@tanstack/virtual-file-routes': 1.161.4
+      chokidar: 3.6.0
+      unplugin: 2.3.11
+      zod: 3.25.76
+    optionalDependencies:
+      '@tanstack/react-router': 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tanstack/router-utils@1.161.4':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+      ansis: 4.2.0
+      babel-dead-code-elimination: 1.0.12
+      diff: 8.0.4
+      pathe: 2.0.3
+      tinyglobby: 0.2.15
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tanstack/store@0.9.3': {}
+
+  '@tanstack/virtual-file-routes@1.161.4': {}
 
   '@testing-library/dom@10.4.1':
     dependencies:
@@ -14663,24 +15422,24 @@ snapshots:
 
   '@types/babel__core@7.20.5':
     dependencies:
-      '@babel/parser': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
       '@types/babel__generator': 7.27.0
       '@types/babel__template': 7.4.4
       '@types/babel__traverse': 7.28.0
 
   '@types/babel__generator@7.27.0':
     dependencies:
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
 
   '@types/babel__template@7.4.4':
     dependencies:
-      '@babel/parser': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
 
   '@types/babel__traverse@7.28.0':
     dependencies:
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
 
   '@types/chai@5.2.3':
     dependencies:
@@ -14756,6 +15515,10 @@ snapshots:
     dependencies:
       undici-types: 6.21.0
 
+  '@types/node@22.20.1':
+    dependencies:
+      undici-types: 6.21.0
+
   '@types/node@24.10.4':
     dependencies:
       undici-types: 7.16.0
@@ -14765,6 +15528,10 @@ snapshots:
       undici-types: 7.18.2
     optional: true
 
+  '@types/react-dom@19.1.9(@types/react@19.1.17)':
+    dependencies:
+      '@types/react': 19.1.17
+
   '@types/react-dom@19.2.3(@types/react@19.1.17)':
     dependencies:
       '@types/react': 19.1.17
@@ -14787,15 +15554,15 @@ snapshots:
     dependencies:
       '@types/yargs-parser': 21.0.3
 
-  '@typescript-eslint/eslint-plugin@8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)':
+  '@typescript-eslint/eslint-plugin@8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)':
     dependencies:
       '@eslint-community/regexpp': 4.12.2
-      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       '@typescript-eslint/scope-manager': 8.50.0
-      '@typescript-eslint/type-utils': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      '@typescript-eslint/utils': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/type-utils': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       '@typescript-eslint/visitor-keys': 8.50.0
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       ignore: 7.0.5
       natural-compare: 1.4.0
       ts-api-utils: 2.1.0(typescript@5.9.3)
@@ -14803,14 +15570,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)':
+  '@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)':
     dependencies:
       '@typescript-eslint/scope-manager': 8.50.0
       '@typescript-eslint/types': 8.50.0
       '@typescript-eslint/typescript-estree': 8.50.0(typescript@5.9.3)
       '@typescript-eslint/visitor-keys': 8.50.0
       debug: 4.4.3
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
@@ -14833,13 +15600,13 @@ snapshots:
     dependencies:
       typescript: 5.9.3
 
-  '@typescript-eslint/type-utils@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)':
+  '@typescript-eslint/type-utils@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)':
     dependencies:
       '@typescript-eslint/types': 8.50.0
       '@typescript-eslint/typescript-estree': 8.50.0(typescript@5.9.3)
-      '@typescript-eslint/utils': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       debug: 4.4.3
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       ts-api-utils: 2.1.0(typescript@5.9.3)
       typescript: 5.9.3
     transitivePeerDependencies:
@@ -14862,13 +15629,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/utils@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)':
+  '@typescript-eslint/utils@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)':
     dependencies:
-      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.6.1))
+      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.7.0))
       '@typescript-eslint/scope-manager': 8.50.0
       '@typescript-eslint/types': 8.50.0
       '@typescript-eslint/typescript-estree': 8.50.0(typescript@5.9.3)
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
@@ -14982,7 +15749,31 @@ snapshots:
       '@urql/core': 5.2.0
       wonka: 6.3.5
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.6)
+      '@rolldown/pluginutils': 1.0.0-beta.27
+      '@types/babel__core': 7.20.5
+      react-refresh: 0.17.0
+      vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.6)
+      '@rolldown/pluginutils': 1.0.0-beta.27
+      '@types/babel__core': 7.20.5
+      react-refresh: 0.17.0
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
@@ -14990,11 +15781,11 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
@@ -15002,7 +15793,7 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
@@ -15023,21 +15814,21 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.0
 
-  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@vitest/spy': 3.2.7
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@vitest/spy': 3.2.7
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4))':
     dependencies:
@@ -15045,23 +15836,23 @@ snapshots:
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@vitest/spy': 3.2.7
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@vitest/mocker@4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitest/mocker@4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@vitest/spy': 4.1.6
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   '@vitest/pretty-format@3.2.7':
     dependencies:
@@ -15113,7 +15904,7 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -15123,14 +15914,14 @@ snapshots:
       '@types/node': 20.19.43
       esbuild: 0.25.12
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
       typescript: 6.0.3
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -15140,14 +15931,31 @@ snapshots:
       '@types/node': 20.19.43
       esbuild: 0.28.1
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
       typescript: 6.0.3
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 22.20.1
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.7.0
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 5.8.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -15157,14 +15965,14 @@ snapshots:
       '@types/node': 25.3.3
       esbuild: 0.25.12
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
       typescript: 6.0.3
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -15174,14 +15982,14 @@ snapshots:
       '@types/node': 25.3.3
       esbuild: 0.28.1
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
       typescript: 5.8.3
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -15191,14 +15999,14 @@ snapshots:
       '@types/node': 25.3.3
       esbuild: 0.28.1
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
       typescript: 5.9.3
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -15208,7 +16016,7 @@ snapshots:
       '@types/node': 25.3.3
       esbuild: 0.28.1
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
       typescript: 6.0.3
@@ -15233,11 +16041,53 @@ snapshots:
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
     optional: true
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 20.19.43
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15247,7 +16097,7 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
@@ -15275,11 +16125,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15289,11 +16139,11 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
-      '@types/node': 20.19.43
+      '@types/node': 22.20.1
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -15317,11 +16167,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15331,7 +16181,7 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
@@ -15359,11 +16209,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15373,7 +16223,7 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
@@ -15401,11 +16251,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15415,7 +16265,7 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
@@ -15443,11 +16293,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -15457,7 +16307,7 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
@@ -15676,6 +16526,10 @@ snapshots:
       '@babel/parser': 7.29.7
       pathe: 2.0.3
 
+  ast-types@0.16.1:
+    dependencies:
+      tslib: 2.8.1
+
   async-function@1.0.0: {}
 
   async-limiter@1.0.1: {}
@@ -15689,6 +16543,15 @@ snapshots:
   aws-ssl-profiles@1.1.2:
     optional: true
 
+  babel-dead-code-elimination@1.0.12:
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/parser': 7.29.7
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   babel-jest@29.7.0(@babel/core@7.29.6):
     dependencies:
       '@babel/core': 7.29.6
@@ -15708,7 +16571,7 @@ snapshots:
 
   babel-plugin-istanbul@6.1.1:
     dependencies:
-      '@babel/helper-plugin-utils': 7.27.1
+      '@babel/helper-plugin-utils': 7.28.6
       '@istanbuljs/load-nyc-config': 1.1.0
       '@istanbuljs/schema': 0.1.3
       istanbul-lib-instrument: 5.2.1
@@ -15718,7 +16581,7 @@ snapshots:
 
   babel-plugin-jest-hoist@29.6.3:
     dependencies:
-      '@babel/template': 7.28.6
+      '@babel/template': 7.29.7
       '@babel/types': 7.29.7
       '@types/babel__core': 7.20.5
       '@types/babel__traverse': 7.28.0
@@ -15749,7 +16612,7 @@ snapshots:
 
   babel-plugin-react-compiler@1.0.0:
     dependencies:
-      '@babel/types': 7.28.5
+      '@babel/types': 7.29.7
 
   babel-plugin-react-native-web@0.21.2: {}
 
@@ -15892,7 +16755,7 @@ snapshots:
 
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
@@ -15916,7 +16779,7 @@ snapshots:
       mysql2: 3.16.0
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@cloudflare/workers-types'
       - '@opentelemetry/api'
@@ -15936,8 +16799,7 @@ snapshots:
 
   big-integer@1.6.52: {}
 
-  binary-extensions@2.3.0:
-    optional: true
+  binary-extensions@2.3.0: {}
 
   birpc@4.0.0: {}
 
@@ -16106,7 +16968,6 @@ snapshots:
       readdirp: 3.6.0
     optionalDependencies:
       fsevents: 2.3.3
-    optional: true
 
   chokidar@4.0.3:
     dependencies:
@@ -16175,7 +17036,7 @@ snapshots:
   cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
@@ -16265,6 +17126,10 @@ snapshots:
 
   convert-source-map@2.0.0: {}
 
+  cookie-es@2.0.1: {}
+
+  cookie-es@3.1.1: {}
+
   core-js-compat@3.47.0:
     dependencies:
       browserslist: 4.28.1
@@ -16479,6 +17344,8 @@ snapshots:
 
   diff-sequences@29.6.3: {}
 
+  diff@8.0.4: {}
+
   doctrine@2.1.0:
     dependencies:
       esutils: 2.0.3
@@ -16594,10 +17461,10 @@ snapshots:
 
   encodeurl@2.0.0: {}
 
-  enhanced-resolve@5.18.4:
+  enhanced-resolve@5.21.6:
     dependencies:
       graceful-fs: 4.2.11
-      tapable: 2.3.0
+      tapable: 2.3.3
 
   enhanced-resolve@5.22.1:
     dependencies:
@@ -16730,6 +17597,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  esbuild-register@3.6.0(esbuild@0.28.1):
+    dependencies:
+      debug: 4.4.3
+      esbuild: 0.28.1
+    transitivePeerDependencies:
+      - supports-color
+
   esbuild@0.25.0:
     optionalDependencies:
       '@esbuild/aix-ppc64': 0.25.0
@@ -16892,21 +17766,21 @@ snapshots:
     optionalDependencies:
       source-map: 0.6.1
 
-  eslint-compat-utils@0.5.1(eslint@9.39.2(jiti@2.6.1)):
+  eslint-compat-utils@0.5.1(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       semver: 7.7.4
 
-  eslint-config-expo@10.0.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3):
+  eslint-config-expo@10.0.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3):
     dependencies:
-      '@typescript-eslint/eslint-plugin': 8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      eslint: 9.39.2(jiti@2.6.1)
-      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-expo: 1.0.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-react: 7.37.5(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-react-hooks: 5.2.0(eslint@9.39.2(jiti@2.6.1))
+      '@typescript-eslint/eslint-plugin': 8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      eslint: 9.39.2(jiti@2.7.0)
+      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.2(jiti@2.7.0))
+      eslint-plugin-expo: 1.0.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.7.0))
+      eslint-plugin-react: 7.37.5(eslint@9.39.2(jiti@2.7.0))
+      eslint-plugin-react-hooks: 5.2.0(eslint@9.39.2(jiti@2.7.0))
       globals: 16.5.0
     transitivePeerDependencies:
       - eslint-import-resolver-webpack
@@ -16914,22 +17788,22 @@ snapshots:
       - supports-color
       - typescript
 
-  eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.6.1)):
+  eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
 
-  eslint-config-universe@15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3):
+  eslint-config-universe@15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1)(typescript@5.9.3):
     dependencies:
-      '@typescript-eslint/eslint-plugin': 8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      eslint: 9.39.2(jiti@2.6.1)
-      eslint-config-prettier: 9.1.2(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-n: 17.23.1(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      eslint-plugin-node: 11.1.0(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-prettier: 5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.6.1)))(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)
-      eslint-plugin-react: 7.37.5(eslint@9.39.2(jiti@2.6.1))
-      eslint-plugin-react-hooks: 5.2.0(eslint@9.39.2(jiti@2.6.1))
+      '@typescript-eslint/eslint-plugin': 8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      eslint: 9.39.2(jiti@2.7.0)
+      eslint-config-prettier: 9.1.2(eslint@9.39.2(jiti@2.7.0))
+      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.7.0))
+      eslint-plugin-n: 17.23.1(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      eslint-plugin-node: 11.1.0(eslint@9.39.2(jiti@2.7.0))
+      eslint-plugin-prettier: 5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.7.0)))(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1)
+      eslint-plugin-react: 7.37.5(eslint@9.39.2(jiti@2.7.0))
+      eslint-plugin-react-hooks: 5.2.0(eslint@9.39.2(jiti@2.7.0))
       globals: 16.5.0
     optionalDependencies:
       prettier: 3.8.1
@@ -16948,55 +17822,55 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.2(jiti@2.6.1)):
+  eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
       '@nolyfill/is-core-module': 1.0.39
       debug: 4.4.3
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       get-tsconfig: 4.13.0
       is-bun-module: 2.0.0
       stable-hash: 0.0.5
       tinyglobby: 0.2.15
       unrs-resolver: 1.11.1
     optionalDependencies:
-      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.6.1))
+      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.7.0))
     transitivePeerDependencies:
       - supports-color
 
-  eslint-module-utils@2.12.1(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.6.1)):
+  eslint-module-utils@2.12.1(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
       debug: 3.2.7
     optionalDependencies:
-      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      eslint: 9.39.2(jiti@2.6.1)
+      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      eslint: 9.39.2(jiti@2.7.0)
       eslint-import-resolver-node: 0.3.9
-      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.2(jiti@2.6.1))
+      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.2(jiti@2.7.0))
     transitivePeerDependencies:
       - supports-color
 
-  eslint-plugin-es-x@7.8.0(eslint@9.39.2(jiti@2.6.1)):
+  eslint-plugin-es-x@7.8.0(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
-      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.6.1))
+      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.7.0))
       '@eslint-community/regexpp': 4.12.2
-      eslint: 9.39.2(jiti@2.6.1)
-      eslint-compat-utils: 0.5.1(eslint@9.39.2(jiti@2.6.1))
+      eslint: 9.39.2(jiti@2.7.0)
+      eslint-compat-utils: 0.5.1(eslint@9.39.2(jiti@2.7.0))
 
-  eslint-plugin-es@3.0.1(eslint@9.39.2(jiti@2.6.1)):
+  eslint-plugin-es@3.0.1(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       eslint-utils: 2.1.0
       regexpp: 3.2.0
 
-  eslint-plugin-expo@1.0.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3):
+  eslint-plugin-expo@1.0.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3):
     dependencies:
       '@typescript-eslint/types': 8.50.0
-      '@typescript-eslint/utils': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
-      eslint: 9.39.2(jiti@2.6.1)
+      '@typescript-eslint/utils': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
+      eslint: 9.39.2(jiti@2.7.0)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.6.1)):
+  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
       '@rtsao/scc': 1.1.0
       array-includes: 3.1.9
@@ -17005,9 +17879,9 @@ snapshots:
       array.prototype.flatmap: 1.3.3
       debug: 3.2.7
       doctrine: 2.1.0
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       eslint-import-resolver-node: 0.3.9
-      eslint-module-utils: 2.12.1(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.6.1))
+      eslint-module-utils: 2.12.1(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.7.0))
       hasown: 2.0.2
       is-core-module: 2.16.1
       is-glob: 4.0.3
@@ -17019,18 +17893,18 @@ snapshots:
       string.prototype.trimend: 1.0.9
       tsconfig-paths: 3.15.0
     optionalDependencies:
-      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3)
+      '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
     transitivePeerDependencies:
       - eslint-import-resolver-typescript
       - eslint-import-resolver-webpack
       - supports-color
 
-  eslint-plugin-n@17.23.1(eslint@9.39.2(jiti@2.6.1))(typescript@5.9.3):
+  eslint-plugin-n@17.23.1(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3):
     dependencies:
-      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.6.1))
-      enhanced-resolve: 5.18.4
-      eslint: 9.39.2(jiti@2.6.1)
-      eslint-plugin-es-x: 7.8.0(eslint@9.39.2(jiti@2.6.1))
+      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.7.0))
+      enhanced-resolve: 5.22.1
+      eslint: 9.39.2(jiti@2.7.0)
+      eslint-plugin-es-x: 7.8.0(eslint@9.39.2(jiti@2.7.0))
       get-tsconfig: 4.13.0
       globals: 15.15.0
       globrex: 0.1.2
@@ -17040,30 +17914,30 @@ snapshots:
     transitivePeerDependencies:
       - typescript
 
-  eslint-plugin-node@11.1.0(eslint@9.39.2(jiti@2.6.1)):
+  eslint-plugin-node@11.1.0(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
-      eslint-plugin-es: 3.0.1(eslint@9.39.2(jiti@2.6.1))
+      eslint: 9.39.2(jiti@2.7.0)
+      eslint-plugin-es: 3.0.1(eslint@9.39.2(jiti@2.7.0))
       eslint-utils: 2.1.0
       ignore: 5.3.2
       minimatch: 3.1.4
       resolve: 1.22.11
       semver: 6.3.1
 
-  eslint-plugin-prettier@5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.6.1)))(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1):
+  eslint-plugin-prettier@5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.7.0)))(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1):
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       prettier: 3.8.1
       prettier-linter-helpers: 1.0.0
       synckit: 0.11.11
     optionalDependencies:
-      eslint-config-prettier: 9.1.2(eslint@9.39.2(jiti@2.6.1))
+      eslint-config-prettier: 9.1.2(eslint@9.39.2(jiti@2.7.0))
 
-  eslint-plugin-react-hooks@5.2.0(eslint@9.39.2(jiti@2.6.1)):
+  eslint-plugin-react-hooks@5.2.0(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
 
-  eslint-plugin-react@7.37.5(eslint@9.39.2(jiti@2.6.1)):
+  eslint-plugin-react@7.37.5(eslint@9.39.2(jiti@2.7.0)):
     dependencies:
       array-includes: 3.1.9
       array.prototype.findlast: 1.2.5
@@ -17071,7 +17945,7 @@ snapshots:
       array.prototype.tosorted: 1.1.4
       doctrine: 2.1.0
       es-iterator-helpers: 1.2.2
-      eslint: 9.39.2(jiti@2.6.1)
+      eslint: 9.39.2(jiti@2.7.0)
       estraverse: 5.3.0
       hasown: 2.0.2
       jsx-ast-utils: 3.3.5
@@ -17100,9 +17974,9 @@ snapshots:
 
   eslint-visitor-keys@4.2.1: {}
 
-  eslint@9.39.2(jiti@2.6.1):
+  eslint@9.39.2(jiti@2.7.0):
     dependencies:
-      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.6.1))
+      '@eslint-community/eslint-utils': 4.9.0(eslint@9.39.2(jiti@2.7.0))
       '@eslint-community/regexpp': 4.12.2
       '@eslint/config-array': 0.21.1
       '@eslint/config-helpers': 0.4.2
@@ -17137,7 +18011,7 @@ snapshots:
       natural-compare: 1.4.0
       optionator: 0.9.4
     optionalDependencies:
-      jiti: 2.6.1
+      jiti: 2.7.0
     transitivePeerDependencies:
       - supports-color
 
@@ -17288,7 +18162,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.6.1))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.6)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
@@ -17301,7 +18175,7 @@ snapshots:
       babel-plugin-dynamic-import-node: 2.3.3
       babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
-      eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.6.1))(prettier@3.8.1)(typescript@5.9.3)
+      eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1)(typescript@5.9.3)
       glob: 13.0.0
       jest-expo: 54.0.17(@babel/core@7.29.6)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       jest-snapshot-prettier: prettier@2.8.8
@@ -17351,7 +18225,7 @@ snapshots:
       '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/schema-utils': 0.1.8
       '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -17682,6 +18556,10 @@ snapshots:
 
   globrex@0.1.2: {}
 
+  goober@2.1.19(csstype@3.2.3):
+    dependencies:
+      csstype: 3.2.3
+
   gopd@1.2.0: {}
 
   graceful-fs@4.2.11: {}
@@ -17900,7 +18778,6 @@ snapshots:
   is-binary-path@2.1.0:
     dependencies:
       binary-extensions: 2.3.0
-    optional: true
 
   is-boolean-object@1.2.2:
     dependencies:
@@ -18017,6 +18894,8 @@ snapshots:
 
   isarray@2.0.5: {}
 
+  isbot@5.2.0: {}
+
   isexe@2.0.0: {}
 
   istanbul-lib-coverage@3.2.2: {}
@@ -18317,7 +19196,7 @@ snapshots:
 
   jest-message-util@29.7.0:
     dependencies:
-      '@babel/code-frame': 7.29.0
+      '@babel/code-frame': 7.29.7
       '@jest/types': 29.6.3
       '@types/stack-utils': 2.0.3
       chalk: 4.1.2
@@ -18414,10 +19293,10 @@ snapshots:
   jest-snapshot@29.7.0:
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/generator': 7.29.1
-      '@babel/plugin-syntax-jsx': 7.27.1(@babel/core@7.29.6)
-      '@babel/plugin-syntax-typescript': 7.27.1(@babel/core@7.29.6)
-      '@babel/types': 7.29.0
+      '@babel/generator': 7.29.7
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.6)
+      '@babel/types': 7.29.7
       '@jest/expect-utils': 29.7.0
       '@jest/transform': 29.7.0
       '@jest/types': 29.6.3
@@ -18518,6 +19397,8 @@ snapshots:
 
   jiti@2.6.1: {}
 
+  jiti@2.7.0: {}
+
   jose@6.1.3: {}
 
   joycon@3.1.1: {}
@@ -18800,6 +19681,10 @@ snapshots:
   lru.min@1.1.4:
     optional: true
 
+  lucide-react@0.513.0(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+
   lucide-react@0.555.0(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -18916,7 +19801,7 @@ snapshots:
     dependencies:
       '@babel/traverse': 7.29.0
       '@babel/traverse--for-generate-function-map': '@babel/traverse@7.29.0'
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
       flow-enums-runtime: 0.0.6
       invariant: 2.2.4
       metro-symbolicate: 0.83.3
@@ -18941,8 +19826,8 @@ snapshots:
   metro-transform-plugins@0.83.3:
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/generator': 7.29.1
-      '@babel/template': 7.28.6
+      '@babel/generator': 7.29.7
+      '@babel/template': 7.29.7
       '@babel/traverse': 7.29.0
       flow-enums-runtime: 0.0.6
       nullthrows: 1.1.1
@@ -18952,9 +19837,9 @@ snapshots:
   metro-transform-worker@0.83.3:
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/generator': 7.29.1
-      '@babel/parser': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/generator': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
       flow-enums-runtime: 0.0.6
       metro: 0.83.3
       metro-babel-transformer: 0.83.3
@@ -18971,13 +19856,13 @@ snapshots:
 
   metro@0.83.3:
     dependencies:
-      '@babel/code-frame': 7.29.0
+      '@babel/code-frame': 7.29.7
       '@babel/core': 7.29.6
-      '@babel/generator': 7.29.1
-      '@babel/parser': 7.29.0
-      '@babel/template': 7.28.6
+      '@babel/generator': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/template': 7.29.7
       '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
       accepts: 1.3.8
       chalk: 4.1.2
       ci-info: 2.0.0
@@ -19134,6 +20019,8 @@ snapshots:
 
   nanoid@3.3.11: {}
 
+  nanoid@3.3.15: {}
+
   nanoid@5.1.6: {}
 
   nanostores@1.4.0: {}
@@ -19321,7 +20208,32 @@ snapshots:
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -19344,9 +20256,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -19369,9 +20281,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -19394,9 +20306,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -19419,9 +20331,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -19444,9 +20356,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -19469,7 +20381,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   oxlint-tsgolint@0.23.0:
     optionalDependencies:
@@ -19480,7 +20392,31 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -19502,9 +20438,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -19526,9 +20462,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -19550,9 +20486,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -19574,9 +20510,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -19598,9 +20534,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -19622,7 +20558,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   p-limit@2.3.0:
     dependencies:
@@ -19738,11 +20674,11 @@ snapshots:
 
   possible-typed-array-names@1.1.0: {}
 
-  postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3):
+  postcss-load-config@6.0.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       lilconfig: 3.1.3
     optionalDependencies:
-      jiti: 2.6.1
+      jiti: 2.7.0
       postcss: 8.5.10
       tsx: 4.21.0
       yaml: 2.8.3
@@ -19753,6 +20689,12 @@ snapshots:
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
+  postcss@8.5.16:
+    dependencies:
+      nanoid: 3.3.15
+      picocolors: 1.1.1
+      source-map-js: 1.2.1
+
   preact-render-to-string@6.7.0(preact@10.29.2):
     dependencies:
       preact: 10.29.2
@@ -20076,6 +21018,8 @@ snapshots:
 
   react-refresh@0.14.2: {}
 
+  react-refresh@0.17.0: {}
+
   react-refresh@0.18.0: {}
 
   react-remove-scroll-bar@2.3.8(@types/react@19.1.17)(react@19.1.0):
@@ -20138,12 +21082,19 @@ snapshots:
   readdirp@3.6.0:
     dependencies:
       picomatch: 2.3.2
-    optional: true
 
   readdirp@4.1.2: {}
 
   readdirp@5.0.0: {}
 
+  recast@0.23.12:
+    dependencies:
+      ast-types: 0.16.1
+      esprima: 4.0.1
+      source-map: 0.6.1
+      tiny-invariant: 1.3.3
+      tslib: 2.8.1
+
   recharts-scale@0.4.5:
     dependencies:
       decimal.js-light: 2.5.1
@@ -20161,6 +21112,8 @@ snapshots:
       tiny-invariant: 1.3.3
       victory-vendor: 36.9.2
 
+  redaxios@0.5.1: {}
+
   redent@3.0.0:
     dependencies:
       indent-string: 4.0.0
@@ -20447,6 +21400,12 @@ snapshots:
 
   serialize-error@2.1.0: {}
 
+  seroval-plugins@1.5.5(seroval@1.5.5):
+    dependencies:
+      seroval: 1.5.5
+
+  seroval@1.5.5: {}
+
   serve-static@1.16.3:
     dependencies:
       encodeurl: 2.0.0
@@ -20767,7 +21726,7 @@ snapshots:
 
   tailwindcss@4.3.0: {}
 
-  tapable@2.3.0: {}
+  tailwindcss@4.3.2: {}
 
   tapable@2.3.3: {}
 
@@ -20823,6 +21782,8 @@ snapshots:
 
   tiny-invariant@1.3.3: {}
 
+  tiny-warning@1.0.3: {}
+
   tinybench@2.9.0: {}
 
   tinyexec@0.3.2: {}
@@ -20969,7 +21930,7 @@ snapshots:
 
   tslib@2.8.1: {}
 
-  tsup@8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
+  tsup@8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
     dependencies:
       bundle-require: 5.1.0(esbuild@0.27.7)
       cac: 6.7.14
@@ -20980,7 +21941,7 @@ snapshots:
       fix-dts-default-cjs-exports: 1.0.1
       joycon: 3.1.1
       picocolors: 1.1.1
-      postcss-load-config: 6.0.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3)
+      postcss-load-config: 6.0.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3)
       resolve-from: 5.0.0
       rollup: 4.59.0
       source-map: 0.7.6
@@ -20997,6 +21958,34 @@ snapshots:
       - tsx
       - yaml
 
+  tsup@8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.8.3)(yaml@2.8.3):
+    dependencies:
+      bundle-require: 5.1.0(esbuild@0.27.7)
+      cac: 6.7.14
+      chokidar: 4.0.3
+      consola: 3.4.2
+      debug: 4.4.3
+      esbuild: 0.27.7
+      fix-dts-default-cjs-exports: 1.0.1
+      joycon: 3.1.1
+      picocolors: 1.1.1
+      postcss-load-config: 6.0.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3)
+      resolve-from: 5.0.0
+      rollup: 4.59.0
+      source-map: 0.7.6
+      sucrase: 3.35.1
+      tinyexec: 0.3.2
+      tinyglobby: 0.2.15
+      tree-kill: 1.2.2
+    optionalDependencies:
+      postcss: 8.5.10
+      typescript: 5.8.3
+    transitivePeerDependencies:
+      - jiti
+      - supports-color
+      - tsx
+      - yaml
+
   tsx@4.21.0:
     dependencies:
       esbuild: 0.27.2
@@ -21074,13 +22063,13 @@ snapshots:
 
   ufo@1.6.4: {}
 
-  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@clack/prompts': 0.11.0
       commander: 14.0.2
       deepmerge: 4.3.1
       jsonc-parser: 3.3.1
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@edge-runtime/vm'
       - '@types/debug'
@@ -21180,6 +22169,13 @@ snapshots:
 
   unpipe@1.0.0: {}
 
+  unplugin@2.3.11:
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      acorn: 8.16.0
+      picomatch: 4.0.4
+      webpack-virtual-modules: 0.6.2
+
   unrs-resolver@1.11.1:
     dependencies:
       napi-postinstall: 0.3.4
@@ -21270,7 +22266,7 @@ snapshots:
 
   vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
     transitivePeerDependencies:
@@ -21279,7 +22275,7 @@ snapshots:
 
   vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@radix-ui/react-dialog': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
     transitivePeerDependencies:
@@ -21303,13 +22299,13 @@ snapshots:
       d3-time: 3.1.0
       d3-timer: 3.0.1
 
-  vite-node@3.2.4(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite-node@3.2.4(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -21330,7 +22326,7 @@ snapshots:
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -21345,13 +22341,13 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -21366,13 +22362,13 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -21387,14 +22383,14 @@ snapshots:
       - tsx
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -21437,14 +22433,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -21487,14 +22483,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -21537,14 +22533,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -21587,14 +22583,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -21637,14 +22633,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -21687,51 +22683,101 @@ snapshots:
       - vite
       - yaml
 
-  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
+  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.6.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-tsconfig-paths@5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.9.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@6.0.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@6.0.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.4)
@@ -21742,13 +22788,30 @@ snapshots:
     optionalDependencies:
       '@types/node': 20.19.43
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
+      lightningcss: 1.32.0
+      terser: 5.44.1
+      tsx: 4.21.0
+      yaml: 2.8.3
+
+  vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      esbuild: 0.28.1
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+      postcss: 8.5.10
+      rollup: 4.59.0
+      tinyglobby: 0.2.15
+    optionalDependencies:
+      '@types/node': 22.20.1
+      fsevents: 2.3.3
+      jiti: 2.7.0
       lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
       yaml: 2.8.3
 
-  vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.4)
@@ -21759,13 +22822,13 @@ snapshots:
     optionalDependencies:
       '@types/node': 24.10.4
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
       yaml: 2.8.3
 
-  vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.4)
@@ -21776,17 +22839,17 @@ snapshots:
     optionalDependencies:
       '@types/node': 25.3.3
       fsevents: 2.3.3
-      jiti: 2.6.1
+      jiti: 2.7.0
       lightningcss: 1.32.0
       terser: 5.44.1
       tsx: 4.21.0
       yaml: 2.8.3
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -21804,8 +22867,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -21825,11 +22888,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -21847,8 +22910,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -21890,7 +22953,7 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-node: 3.2.4(@types/node@24.10.4)
       why-is-node-running: 2.3.0
     optionalDependencies:
@@ -21911,11 +22974,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -21933,8 +22996,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -21954,11 +23017,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -21976,8 +23039,8 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -21997,10 +23060,10 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@vitest/expect': 4.1.6
-      '@vitest/mocker': 4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/mocker': 4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 4.1.6
       '@vitest/runner': 4.1.6
       '@vitest/snapshot': 4.1.6
@@ -22017,7 +23080,7 @@ snapshots:
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.1.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
@@ -22052,6 +23115,8 @@ snapshots:
 
   webidl-conversions@7.0.0: {}
 
+  webpack-virtual-modules@0.6.2: {}
+
   whatwg-encoding@2.0.0:
     dependencies:
       iconv-lite: 0.6.3
@@ -22201,6 +23266,8 @@ snapshots:
 
   yocto-queue@0.1.0: {}
 
+  zod@3.25.76: {}
+
   zod@4.3.6: {}
 
   zustand@5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0)):

From 88f3594b5ef0ef296825edb06b6399f0eccbcf7b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 23:20:03 +0200
Subject: [PATCH 056/129] feat: consolidate full open-source codebase

---
 .dockerignore                                 |    13 +
 .github/workflows/ci.yml                      |     6 +-
 .github/workflows/secret-scanning.yml         |     2 +-
 .github/workflows/security-audit.yml          |     8 +-
 .github/workflows/selfhost.yml                |    71 +
 .gitignore                                    |     3 +-
 .gitleaks.toml                                |    24 +
 apps/backend/LICENSE.md                       |   661 +
 apps/backend/package.json                     |    47 +
 apps/backend/src/ApiMiddlewares.ts            |   348 +
 apps/backend/src/AuthSessionResolver.ts       |   209 +
 apps/backend/src/BackendApp.ts                |  1116 ++
 apps/backend/src/BackendRpcGroups.test.ts     |    16 +
 apps/backend/src/BackendRpcGroups.ts          |     4 +
 .../src/PaywallSnapshotHtmlRenderer.test.ts   |    41 +
 .../src/PaywallSnapshotHtmlRenderer.ts        |    31 +
 apps/backend/src/RpcMiddlewares.ts            |    61 +
 apps/backend/src/Telemetry.test.ts            |   141 +
 apps/backend/src/Telemetry.ts                 |   147 +
 apps/backend/src/ai/VoidhashAiService.ts      |   381 +
 .../src/ai/skills/paywall-authoring.test.ts   |    96 +
 .../src/ai/skills/paywall-authoring.ts        |   550 +
 apps/backend/src/ai/surfaces.test.ts          |    93 +
 apps/backend/src/ai/surfaces.ts               |   128 +
 apps/backend/src/ai/tools.test.ts             |   388 +
 apps/backend/src/ai/workspace-tools.ts        |   580 +
 apps/backend/src/mcp/dispatch.test.ts         |   219 +
 apps/backend/src/mcp/protocol.test.ts         |   148 +
 apps/backend/src/mcp/protocol.ts              |   196 +
 apps/backend/src/mcp/tool-manifest.test.ts    |    85 +
 apps/backend/src/mcp/tool-manifest.ts         |   222 +
 apps/backend/src/routes/ai/chat.ts            |   118 +
 apps/backend/src/routes/event-capture.ts      |   177 +
 apps/backend/src/routes/mcp.ts                |   225 +
 .../src/routes/paywall-serving.test.ts        |   219 +
 apps/backend/src/routes/paywall-serving.ts    |   112 +
 .../src/routes/public-file-serving.test.ts    |   103 +
 .../backend/src/routes/public-file-serving.ts |    75 +
 apps/backend/src/routes/v1/api-keys.ts        |    93 +
 apps/backend/src/routes/v1/auth.ts            |    35 +
 apps/backend/src/routes/v1/notifications.ts   |   145 +
 apps/backend/src/routes/v1/organizations.ts   |    28 +
 .../v1/payment-provider-configurations.ts     |    49 +
 .../routes/v1/payment-provider-products.ts    |    49 +
 apps/backend/src/routes/v1/paywall-deploys.ts |   154 +
 .../src/routes/v1/paywall-locations.ts        |    52 +
 apps/backend/src/routes/v1/perks.ts           |    39 +
 apps/backend/src/routes/v1/persons.ts         |   107 +
 apps/backend/src/routes/v1/product-perks.ts   |    46 +
 apps/backend/src/routes/v1/products.ts        |    35 +
 apps/backend/src/routes/v1/projects.ts        |    51 +
 apps/backend/src/routes/v1/schema.ts          |   147 +
 apps/backend/src/routes/v1/sdk.ts             |   637 +
 apps/backend/src/routes/v1/users.ts           |    21 +
 apps/backend/src/routes/v1/webhooks.ts        |   233 +
 .../apple-server-to-server.ts                 |   119 +
 .../webhook-endpoints/google-play-rtdn.ts     |   106 +
 .../src/routes/webhook-endpoints/stripe.ts    |   108 +
 apps/backend/src/routes/webhooks/workos.ts    |   314 +
 .../backend/src/rpc-smoke.integration.test.ts |   503 +
 apps/backend/src/rpcs/ai-chat-rpcs.test.ts    |   225 +
 apps/backend/src/rpcs/ai-chat-rpcs.ts         |   181 +
 apps/backend/src/rpcs/analytics-rpcs.ts       |    85 +
 apps/backend/src/rpcs/api-key-rpcs.ts         |   101 +
 apps/backend/src/rpcs/experiment-rpcs.ts      |   261 +
 apps/backend/src/rpcs/feature-flag-rpcs.ts    |   184 +
 apps/backend/src/rpcs/feedback-rpcs.ts        |    28 +
 apps/backend/src/rpcs/organization-rpcs.ts    |    68 +
 .../payment-provider-configuration-rpcs.ts    |   101 +
 .../src/rpcs/payment-provider-product-rpcs.ts |    95 +
 apps/backend/src/rpcs/paywall-asset-rpcs.ts   |    61 +
 .../src/rpcs/paywall-component-rpcs.ts        |    34 +
 apps/backend/src/rpcs/paywall-deploy-rpcs.ts  |    48 +
 .../backend/src/rpcs/paywall-location-rpcs.ts |    99 +
 apps/backend/src/rpcs/paywall-rpcs.ts         |   161 +
 .../src/rpcs/paywall-workspace-rpcs.test.ts   |   207 +
 .../src/rpcs/paywall-workspace-rpcs.ts        |    87 +
 apps/backend/src/rpcs/perk-rpcs.ts            |    48 +
 apps/backend/src/rpcs/person-rpcs.ts          |    87 +
 apps/backend/src/rpcs/product-perk-rpcs.ts    |    50 +
 apps/backend/src/rpcs/product-rpcs.ts         |    70 +
 apps/backend/src/rpcs/project-rpcs.ts         |    94 +
 .../push-notification-configuration-rpcs.ts   |   113 +
 .../src/rpcs/push-notification-send-rpcs.ts   |    44 +
 apps/backend/src/rpcs/user-rpcs.ts            |    49 +
 apps/backend/src/rpcs/voidql-rpcs.ts          |   143 +
 apps/backend/src/rpcs/webhook-rpcs.ts         |   160 +
 .../src/testing/BackendTestConnections.ts     |    23 +
 apps/backend/src/testing/TestLayers.ts        |   545 +
 apps/backend/src/testing/TestRpcAuth.ts       |    95 +
 .../backend/src/testing/provided-context.d.ts |    12 +
 apps/backend/src/testing/rpc-smoke-cases.ts   |   859 +
 apps/backend/src/testing/smoke-ids.ts         |    47 +
 apps/backend/src/testing/smoke-seed.ts        |   310 +
 apps/backend/sst-env.d.ts                     |    10 +
 apps/backend/tsconfig.json                    |    17 +
 apps/backend/vitest.unit.mts                  |     9 +
 apps/cli/package.json                         |     1 -
 apps/mimic-db/.env.example                    |    17 +
 apps/mimic-db/.gitignore                      |     3 +
 apps/mimic-db/LICENSE.md                      |   661 +
 apps/mimic-db/REWRITE.md                      |   152 +
 apps/mimic-db/package.json                    |    40 +
 apps/mimic-db/src/api/handlers/collections.ts |    48 +
 apps/mimic-db/src/api/handlers/databases.ts   |    40 +
 .../src/api/handlers/document-auth.ts         |    98 +
 apps/mimic-db/src/api/handlers/documents.ts   |    56 +
 apps/mimic-db/src/api/handlers/grants.ts      |    40 +
 apps/mimic-db/src/api/handlers/index.ts       |    19 +
 apps/mimic-db/src/api/handlers/migrations.ts  |    80 +
 apps/mimic-db/src/api/handlers/users.ts       |    41 +
 apps/mimic-db/src/api/middleware/auth.ts      |    59 +
 apps/mimic-db/src/app/hostService.ts          |   278 +
 apps/mimic-db/src/config.ts                   |    64 +
 apps/mimic-db/src/core/control-engine.ts      |   637 +
 apps/mimic-db/src/core/document-engine.ts     |   221 +
 .../src/core/document-store-factory.ts        |    21 +
 apps/mimic-db/src/core/ids.ts                 |    12 +
 apps/mimic-db/src/core/local-entity-host.ts   |    74 +
 apps/mimic-db/src/core/local-host-service.ts  |   291 +
 apps/mimic-db/src/core/memory-store.ts        |   170 +
 apps/mimic-db/src/core/migration-executor.ts  |    96 +
 apps/mimic-db/src/core/pg-store.ts            |   326 +
 apps/mimic-db/src/core/schema-provider.ts     |    38 +
 apps/mimic-db/src/core/store.ts               |   210 +
 apps/mimic-db/src/document/schema.ts          |    33 +
 apps/mimic-db/src/document/snapshot.ts        |    16 +
 apps/mimic-db/src/document/transaction.ts     |    52 +
 .../src/entrypoints/standalone/main.ts        |    21 +
 apps/mimic-db/src/http/rpc-app.ts             |    42 +
 apps/mimic-db/src/index.ts                    |    35 +
 .../src/worker/durable-host-service.ts        |   188 +
 apps/mimic-db/src/ws/document-session.ts      |   251 +
 apps/mimic-db/src/ws/idle-notify.ts           |   125 +
 apps/mimic-db/src/ws/messages.ts              |    78 +
 apps/mimic-db/src/ws/protocol.ts              |   117 +
 apps/mimic-db/src/ws/session-registry.ts      |   103 +
 .../tests/durable-entity-host.test.ts         |    93 +
 apps/mimic-db/tests/helpers.ts                |    71 +
 .../tests/integration/host-flow.test.ts       |   283 +
 .../tests/migrate-with-mimic-cli.test.ts      |   156 +
 .../mimic-db/tests/unit/document-auth.test.ts |   108 +
 .../tests/unit/document-session.test.ts       |   321 +
 apps/mimic-db/tests/unit/idle-notify.test.ts  |   122 +
 .../tests/unit/migration-executor.test.ts     |    56 +
 apps/mimic-db/tests/unit/pg-store.test.ts     |    47 +
 .../tests/unit/prepare-document-heal.test.ts  |    90 +
 .../tests/unit/session-registry.test.ts       |   164 +
 apps/mimic-db/tsconfig.json                   |    16 +
 apps/mimic-db/vitest.mts                      |    22 +
 apps/studio/package.json                      |     2 +-
 apps/www/.env.example                         |    20 +
 apps/www/.gitignore                           |    42 +
 apps/www/LICENSE.md                           |   661 +
 apps/www/README.md                            |    19 +
 apps/www/design.generated.ts                  |    21 +
 apps/www/docs.generated.ts                    |    21 +
 apps/www/package.json                         |   127 +
 apps/www/public/apple-icon.png                |   Bin 0 -> 2903 bytes
 apps/www/public/auth/apple-icon.png           |   Bin 0 -> 2903 bytes
 apps/www/public/auth/favicon.ico              |   Bin 0 -> 15086 bytes
 apps/www/public/bg.jpg                        |   Bin 0 -> 520140 bytes
 apps/www/public/chiron.svg                    |     9 +
 apps/www/public/design/apple-icon.png         |   Bin 0 -> 2903 bytes
 apps/www/public/design/favicon.ico            |   Bin 0 -> 15086 bytes
 apps/www/public/docs/apple-icon.png           |   Bin 0 -> 2903 bytes
 apps/www/public/docs/favicon.ico              |   Bin 0 -> 15086 bytes
 apps/www/public/favicon.ico                   |   Bin 0 -> 15086 bytes
 apps/www/public/github.svg                    |    10 +
 apps/www/public/logo.svg                      |     4 +
 apps/www/public/overwatch/apple-icon.png      |   Bin 0 -> 2903 bytes
 apps/www/public/overwatch/favicon.ico         |   Bin 0 -> 15086 bytes
 apps/www/public/studio/apple-icon.png         |   Bin 0 -> 2903 bytes
 apps/www/public/studio/favicon.ico            |   Bin 0 -> 15086 bytes
 apps/www/public/studio/file.svg               |     1 +
 apps/www/public/studio/globe.svg              |     1 +
 apps/www/public/studio/icon0.svg              |     3 +
 apps/www/public/studio/icon1.png              |   Bin 0 -> 1804 bytes
 apps/www/public/studio/manifest.json          |    21 +
 apps/www/public/studio/next.svg               |     1 +
 .../studio/web-app-manifest-192x192.png       |   Bin 0 -> 2644 bytes
 .../studio/web-app-manifest-512x512.png       |   Bin 0 -> 10540 bytes
 apps/www/public/studio/window.svg             |     1 +
 apps/www/public/web-app-manifest-192x192.png  |   Bin 0 -> 2644 bytes
 apps/www/public/web-app-manifest-512x512.png  |   Bin 0 -> 10540 bytes
 apps/www/public/x-com.svg                     |    10 +
 apps/www/src/app/apple-icon.png               |   Bin 0 -> 2903 bytes
 apps/www/src/app/favicon.ico                  |   Bin 0 -> 15086 bytes
 apps/www/src/app/icon0.svg                    |    17 +
 apps/www/src/app/icon1.png                    |   Bin 0 -> 1185 bytes
 apps/www/src/app/manifest.json                |    21 +
 apps/www/src/components/auth-shader.tsx       |   155 +
 .../src/components/default-catch-boundary.tsx |    42 +
 apps/www/src/components/grain-gradient.tsx    |    28 +
 apps/www/src/components/not-found.tsx         |    21 +
 .../voidhash-gradient-background.tsx          |   224 +
 .../components/voidhash-gradient-canvas.tsx   |   328 +
 .../components/voidhash-gradient-controls.tsx |   175 +
 .../components/voidhash-gradient-settings.ts  |   102 +
 .../features/auth/components/auth-layout.tsx  |    59 +
 apps/www/src/features/auth/globals.css        |   224 +
 apps/www/src/features/auth/lib/auth-api.ts    |   126 +
 .../auth/lib/email-verification-storage.ts    |    52 +
 .../src/features/auth/lib/provision-user.ts   |    30 +
 .../features/auth/lib/tanstack-query/index.ts |     2 +
 .../auth/lib/tanstack-query/query-keys.ts     |     9 +
 .../auth/lib/tanstack-query/user-api-keys.ts  |    23 +
 apps/www/src/features/auth/lib/validation.ts  |    83 +
 .../lib/workos-user-management.server.test.ts |    92 +
 .../auth/lib/workos-user-management.server.ts |   355 +
 apps/www/src/features/auth/lib/workos.ts      |    18 +
 apps/www/src/features/auth/middleware/auth.ts |    13 +
 .../components/docs/component-registry.tsx    |    32 +
 .../design/components/docs/preview.tsx        |    24 +
 .../design/components/layout/docs.tsx         |   229 +
 .../design/components/layout/page.tsx         |   120 +
 .../features/design/components/nav-bar.tsx    |    66 +
 .../design/components/theme-toggle.tsx        |    15 +
 .../content/docs/components/accordion.mdx     |   115 +
 .../content/docs/components/alert-dialog.mdx  |   119 +
 .../design/content/docs/components/alert.mdx  |    85 +
 .../design/content/docs/components/avatar.mdx |   110 +
 .../design/content/docs/components/badge.mdx  |    89 +
 .../content/docs/components/breadcrumb.mdx    |   132 +
 .../design/content/docs/components/button.mdx |   188 +
 .../content/docs/components/calendar.mdx      |    93 +
 .../design/content/docs/components/card.mdx   |   153 +
 .../content/docs/components/carousel.mdx      |   126 +
 .../design/content/docs/components/chart.mdx  |   138 +
 .../content/docs/components/checkbox.mdx      |   105 +
 .../content/docs/components/collapsible.mdx   |   101 +
 .../content/docs/components/command.mdx       |   159 +
 .../content/docs/components/context-menu.mdx  |   127 +
 .../design/content/docs/components/dialog.mdx |   156 +
 .../design/content/docs/components/drawer.mdx |   169 +
 .../content/docs/components/dropdown-menu.mdx |   195 +
 .../content/docs/components/dropzone.mdx      |   102 +
 .../design/content/docs/components/form.mdx   |   186 +
 .../content/docs/components/hover-card.mdx    |   137 +
 .../content/docs/components/input-otp.mdx     |   136 +
 .../design/content/docs/components/input.mdx  |   113 +
 .../design/content/docs/components/label.mdx  |    81 +
 .../content/docs/components/menubar.mdx       |   136 +
 .../design/content/docs/components/meta.yaml  |    50 +
 .../docs/components/navigation-menu.mdx       |   155 +
 .../content/docs/components/pagination.mdx    |   146 +
 .../content/docs/components/popover.mdx       |   146 +
 .../content/docs/components/progress.mdx      |    92 +
 .../content/docs/components/radio-group.mdx   |   146 +
 .../content/docs/components/resizable.mdx     |   144 +
 .../content/docs/components/scroll-area.mdx   |   109 +
 .../design/content/docs/components/select.mdx |   185 +
 .../content/docs/components/separator.mdx     |    84 +
 .../design/content/docs/components/sheet.mdx  |   177 +
 .../content/docs/components/sidebar.mdx       |   179 +
 .../content/docs/components/skeleton.mdx      |    91 +
 .../design/content/docs/components/slider.mdx |   105 +
 .../design/content/docs/components/sonner.mdx |   120 +
 .../design/content/docs/components/switch.mdx |   105 +
 .../design/content/docs/components/table.mdx  |   148 +
 .../design/content/docs/components/tabs.mdx   |   126 +
 .../content/docs/components/textarea.mdx      |    96 +
 .../content/docs/components/toggle-group.mdx  |   152 +
 .../design/content/docs/components/toggle.mdx |   152 +
 .../content/docs/components/tooltip.mdx       |   140 +
 .../docs/components/underline-tabs.mdx        |    97 +
 .../design/content/docs/introduction.mdx      |     4 +
 .../features/design/content/docs/meta.yaml    |     5 +
 apps/www/src/features/design/lib/basepath.ts  |     1 +
 apps/www/src/features/design/lib/cn.ts        |     1 +
 .../src/features/design/lib/layout.shared.tsx |     8 +
 apps/www/src/features/design/lib/source.ts    |    33 +
 apps/www/src/features/design/source.config.ts |    30 +
 .../src/features/design/source.generated.ts   |    21 +
 .../src/features/design/styles/globals.css    |    32 +
 .../features/docs/components/layout/docs.tsx  |   229 +
 .../features/docs/components/layout/page.tsx  |   150 +
 .../src/features/docs/components/nav-bar.tsx  |    68 +
 .../features/docs/components/theme-toggle.tsx |    15 +
 .../docs/components/where-to-find-guide.tsx   |    88 +
 .../docs/content/docs/basic-usage.mdx         |   216 +
 .../docs/content/docs/concepts/meta.yaml      |     5 +
 .../docs/content/docs/concepts/perks.mdx      |   274 +
 .../docs/content/docs/concepts/products.mdx   |   204 +
 .../apple-app-store/app-apple-id.mdx          |    43 +
 .../apple-app-store/app-store-connect-api.mdx |    74 +
 .../apple-server-notifications.mdx            |    56 +
 .../apple-small-business-program.mdx          |    67 +
 .../apple-app-store/bundle-id.mdx             |    43 +
 .../apple-app-store/in-app-purchase-key.mdx   |    55 +
 .../apple-app-store/meta.yaml                 |    10 +
 .../storekit-subscription-offer-key.mdx       |    75 +
 .../storekit-testing-certificate.mdx          |    60 +
 .../docs/content/docs/installation.mdx        |   107 +
 .../docs/content/docs/introduction.mdx        |    14 +
 .../src/features/docs/content/docs/meta.yaml  |     7 +
 apps/www/src/features/docs/lib/basepath.ts    |     1 +
 apps/www/src/features/docs/lib/cn.ts          |     1 +
 .../src/features/docs/lib/guide-content.tsx   |    75 +
 .../src/features/docs/lib/layout.shared.tsx   |     8 +
 .../src/features/docs/lib/mdx-components.tsx  |    55 +
 apps/www/src/features/docs/lib/source.ts      |    33 +
 apps/www/src/features/docs/source.config.ts   |    30 +
 .../www/src/features/docs/source.generated.ts |    21 +
 apps/www/src/features/docs/styles/globals.css |    33 +
 apps/www/src/features/fumadocs-config.ts      |   118 +
 .../features/studio/account/user-avatar.tsx   |    74 +
 .../studio/account/user-settings-modal.tsx    |    67 +
 .../www/src/features/studio/ai/attachments.ts |   123 +
 .../ai/components/chat-history-menu.tsx       |   177 +
 .../studio/ai/components/chat-shell.tsx       |   359 +
 .../studio/ai/components/prompt-input.tsx     |   187 +
 .../studio/ai/components/tool-call.tsx        |   102 +
 apps/www/src/features/studio/ai/contract.ts   |    84 +
 apps/www/src/features/studio/ai/index.ts      |    16 +
 .../src/features/studio/ai/transport.test.ts  |   181 +
 apps/www/src/features/studio/ai/transport.ts  |   133 +
 .../features/studio/ai/use-surface-chat.ts    |   150 +
 .../analytics/analytics-scaffold-page.tsx     |    33 +
 .../analytics/overview/query-builders.ts      |   326 +
 .../analytics/overview/result-mappers.ts      |    94 +
 .../analytics/project-analytics-page.tsx      |   111 +
 .../api-keys/api-key-record-skeleton.tsx      |    21 +
 .../studio/api-keys/api-key-record.tsx        |   156 +
 .../create-secret-key-modal-button.tsx        |    32 +
 .../api-keys/create-secret-key-modal.tsx      |   125 +
 .../api-keys/secret-key-reveal-modal.tsx      |    61 +
 .../studio/components/auth-context.tsx        |    26 +
 .../studio/components/avatar-uploader.tsx     |   236 +
 .../components/default-cache-boundary.tsx     |    46 +
 .../features/studio/components/not-found.tsx  |    26 +
 .../studio/components/relative-time.tsx       |    81 +
 .../development-paywall-page.tsx              |     3 +
 .../enterprise/enterprise-audit-log-slot.tsx  |    10 +
 .../studio/enterprise/runtime-capabilities.ts |    40 +
 .../experiments/create-experiment-modal.tsx   |   163 +
 .../experiment-lifecycle-controls.tsx         |   187 +
 .../experiment-record-skeleton.tsx            |    18 +
 .../studio/experiments/experiment-record.tsx  |    52 +
 .../experiments/experiment-settings-form.tsx  |   164 +
 .../experiments/experiment-setup-panel.tsx    |   294 +
 .../experiments/experiment-status-badge.tsx   |    14 +
 .../studio/experiments/experiment-status.ts   |    25 +
 .../experiment-treatments-panel.tsx           |   312 +
 .../experiments-page-empty-state.tsx          |    22 +
 .../experiments/experiments-page-skeleton.tsx |    21 +
 .../feature-flags/create-flag-modal.tsx       |   107 +
 .../feature-flags/flag-general-form.tsx       |   171 +
 .../feature-flags/flag-overrides-panel.tsx    |   161 +
 .../feature-flags/flag-record-skeleton.tsx    |    18 +
 .../studio/feature-flags/flag-record.tsx      |    66 +
 .../feature-flags/flag-targeting-panel.tsx    |   181 +
 .../studio/feature-flags/flag-type-badge.tsx  |    34 +
 .../studio/feature-flags/flag-type.ts         |    28 +
 .../feature-flags/flag-variants-panel.tsx     |   312 +
 .../feature-flags/flags-page-empty-state.tsx  |    22 +
 .../feature-flags/flags-page-skeleton.tsx     |    21 +
 .../person-flag-overrides-panel.tsx           |   193 +
 .../studio/feedback/feedback-button.tsx       |   184 +
 apps/www/src/features/studio/lib/basepath.ts  |     1 +
 .../src/features/studio/lib/effect-query.ts   |     9 +
 apps/www/src/features/studio/lib/env.ts       |     1 +
 apps/www/src/features/studio/lib/nextjs.ts    |     7 +
 .../studio/lib/payment-providers/app-store.ts |   105 +
 .../studio/lib/payment-providers/core.ts      |    10 +
 .../lib/payment-providers/google-play.ts      |   120 +
 .../payment-providers/payment-providers.ts    |     5 +
 .../studio/lib/payment-providers/stripe.ts    |   142 +
 .../studio/lib/payment-providers/types.ts     |    43 +
 .../studio/lib/tanstack-query/ai-chats.ts     |    63 +
 .../studio/lib/tanstack-query/analytics.ts    |    27 +
 .../studio/lib/tanstack-query/api-keys.ts     |    42 +
 .../studio/lib/tanstack-query/experiments.ts  |   114 +
 .../lib/tanstack-query/feature-flags.ts       |   120 +
 .../studio/lib/tanstack-query/feedback.ts     |    21 +
 .../studio/lib/tanstack-query/index.ts        |    24 +
 .../lib/tanstack-query/notifications.ts       |    61 +
 .../lib/tanstack-query/organizations.ts       |    85 +
 .../payment-provider-configurations.ts        |    41 +
 .../payment-provider-products.ts              |    44 +
 .../lib/tanstack-query/paywall-assets.ts      |    38 +
 .../lib/tanstack-query/paywall-components.ts  |    20 +
 .../lib/tanstack-query/paywall-deploys.ts     |    18 +
 .../lib/tanstack-query/paywall-locations.ts   |    62 +
 .../studio/lib/tanstack-query/paywalls.ts     |    65 +
 .../studio/lib/tanstack-query/perks.ts        |    24 +
 .../studio/lib/tanstack-query/persons.test.ts |    17 +
 .../studio/lib/tanstack-query/persons.ts      |    32 +
 .../lib/tanstack-query/product-perks.ts       |    29 +
 .../studio/lib/tanstack-query/products.ts     |    42 +
 .../studio/lib/tanstack-query/projects.ts     |    92 +
 .../studio/lib/tanstack-query/query-keys.ts   |   183 +
 .../studio/lib/tanstack-query/users.ts        |    38 +
 .../studio/lib/tanstack-query/voidql.ts       |    13 +
 .../studio/lib/tanstack-query/webhooks.ts     |    83 +
 apps/www/src/features/studio/lib/types.ts     |     1 +
 .../studio/lib/useInternalFeatureFlag.ts      |    29 +
 .../features/studio/lib/utils/current-user.ts |    19 +
 apps/www/src/features/studio/lib/zod-error.ts |    15 +
 .../create-organization-modal.tsx             |   126 +
 .../delete-organization-modal.tsx             |   110 +
 .../overview/date-range-filter.tsx            |    85 +
 .../studio/organizations/overview/format.ts   |    65 +
 .../organizations/overview/metric-card.tsx    |    98 +
 .../overview/organization-overview.tsx        |   113 +
 .../overview/overview-section.tsx             |    97 +
 .../organizations/overview/today-chart.tsx    |    98 +
 .../organizations/projects/empty-state.tsx    |    39 +
 .../organizations/projects/projects-list.tsx  |   106 +
 .../organizations/projects/projects-page.tsx  |    22 +
 .../projects/projects-skeleton.tsx            |    24 +
 .../organizations/settings/data-table.tsx     |   115 +
 .../general/settings-general-layout.tsx       |     7 +
 .../settings/general/team-avatar.tsx          |    74 +
 .../settings/general/team-delete.tsx          |    75 +
 .../settings/general/team-name.tsx            |   107 +
 .../settings/members/columns.tsx              |    28 +
 .../settings/pending-invites/columns.tsx      |    38 +
 .../studio/overview/overview-page.tsx         |    47 +
 .../studio/overview/today-revenue-chart.tsx   |   137 +
 .../widgets/active-subs-chart-widget.tsx      |    81 +
 .../widgets/active-trials-chart-widget.tsx    |    79 +
 .../overview/widgets/arppu-chart-widget.tsx   |    79 +
 .../overview/widgets/arpu-chart-widget.tsx    |    79 +
 .../overview/widgets/arr-chart-widget.tsx     |    79 +
 .../overview/widgets/mrr-chart-widget.tsx     |    79 +
 .../widgets/new-subs-chart-widget.tsx         |    81 +
 .../widgets/new-trials-chart-widget.tsx       |    79 +
 .../widgets/new-users-chart-widget.tsx        |    79 +
 .../renewal-canceled-subs-chart-widget.tsx    |    81 +
 .../overview/widgets/revenue-chart-widget.tsx |    79 +
 .../studio/paywall-assets/asset-library.tsx   |   170 +
 .../paywall-assets/asset-picker-dialog.tsx    |    68 +
 .../studio/paywall-assets/asset-tile.tsx      |   169 +
 .../paywall-assets/rename-asset-dialog.tsx    |    98 +
 .../studio/paywall-assets/upload-image.ts     |    87 +
 .../activate-paywall-release-button.tsx       |   110 +
 .../paywall-deploys/paywall-deploy-record.tsx |   146 +
 .../create-paywall-location-modal-button.tsx  |    20 +
 .../create-paywall-location-modal.tsx         |   183 +
 .../edit-paywall-location-modal.tsx           |   162 +
 .../paywall-location-row.tsx                  |   232 +
 .../studio/paywalls/create-paywall-button.tsx |    24 +
 .../studio/paywalls/create-paywall-card.tsx   |    46 +
 .../studio/paywalls/create-paywall-modal.tsx  |   156 +
 .../paywalls/designer/ai-panel/ai-panel.tsx   |   126 +
 .../designer/ai-panel/tool-executor.test.ts   |   502 +
 .../designer/ai-panel/tool-executor.ts        |   495 +
 .../designer/ai-panel/tool-paths.test.ts      |    81 +
 .../paywalls/designer/ai-panel/tool-paths.ts  |    92 +
 .../designer/ai-panel/use-designer-agent.ts   |    86 +
 .../designer/canvas/bounding-box-manager.tsx  |   155 +
 .../paywalls/designer/canvas/canvas.tsx       |   244 +
 .../canvas/helpers/selectable.test.tsx        |   217 +
 .../designer/canvas/helpers/selectable.tsx    |   309 +
 .../component-node-renderer.tsx               |   217 +
 .../layouts/flex-layout-renderer.tsx          |    30 +
 .../node-renderers/path-node-renderer.tsx     |    41 +
 .../node-renderers/screen-node-renderer.tsx   |    78 +
 .../scrollview-node-renderer.tsx              |    96 +
 .../node-renderers/shape-node-renderer.tsx    |    54 +
 .../node-renderers/text-node-renderer.tsx     |   244 +
 .../node-renderers/view-node-renderer.tsx     |    61 +
 .../designer/canvas/node-tree-renderer.tsx    |   137 +
 .../canvas/overlay/cursors-overlay.tsx        |    79 +
 .../canvas/overlay/gradient-overlay.tsx       |   318 +
 .../canvas/overlay/selection-overlay.tsx      |   677 +
 .../designer/canvas/preview-canvas.test.ts    |   115 +
 .../designer/canvas/preview-canvas.tsx        |   228 +
 .../paywalls/designer/canvas/viewport.tsx     |   530 +
 .../code-mode/code-editor-context.tsx         |    76 +
 .../designer/code-mode/code-editor-pane.tsx   |   411 +
 .../designer/code-mode/code-editor-tabs.tsx   |   189 +
 .../code-mode/code-mode-workspace.tsx         |   153 +
 .../designer/code-mode/compile-pipeline.ts    |   130 +
 .../code-mode/component-preview-pane.tsx      |   118 +
 .../code-mode/has-panel-threading.test.ts     |    79 +
 .../paywalls/designer/code-mode/hash.ts       |     9 +
 .../designer/code-mode/manifest-upload.ts     |    63 +
 .../paywalls/designer/code-mode/monaco-env.ts |    16 +
 .../monaco-module-resolution.test.ts          |   301 +
 .../designer/code-mode/monaco-theme.ts        |   311 +
 .../designer/code-mode/sandbox-document.ts    |   118 +
 .../designer/code-mode/sandbox-host.ts        |   304 +
 .../paywalls/designer/code-mode/scaffold.ts   |    32 +
 .../preview-tree-renderer.tsx                 |    75 +
 .../component-preview/use-preview-tree.ts     |    45 +
 .../components/designer-context-menu.tsx      |   250 +
 .../publish-confirmation-dialog.tsx           |    95 +
 .../state-manager/conjunction-editor.tsx      |    83 +
 .../state-manager/crdt-variable-selector.tsx  |    64 +
 .../components/state-manager/dnf-editor.tsx   |    72 +
 .../components/state-manager/index.ts         |     8 +
 .../state-manager/operand-editor.tsx          |    41 +
 .../state-manager/predicate-editor.tsx        |   143 +
 .../state-manager/state-manager-sheet.tsx     |   351 +
 .../components/state-manager/types.ts         |    82 +
 .../state-manager/use-dnf-editor.ts           |   159 +
 .../state-manager/use-editing-state.ts        |    92 +
 .../state-manager/use-pending-state.ts        |    84 +
 .../components/state-manager/utils.ts         |   211 +
 .../designer/components/ui/color-input.tsx    |     1 +
 .../color-picker/checkerboard-background.tsx  |     1 +
 .../ui/color-picker/color-picker-content.tsx  |     1 +
 .../ui/color-picker/color-swatch.tsx          |     1 +
 .../components/ui/color-picker/color-utils.ts |     1 +
 .../ui/color-picker/eyedropper-button.tsx     |     1 +
 .../components/ui/color-picker/hue-slider.tsx |     1 +
 .../ui/color-picker/opacity-slider.tsx        |     1 +
 .../saturation-brightness-picker.tsx          |     1 +
 .../components/ui/gradient-stop-bar.tsx       |     1 +
 .../designer/components/ui/mode-toggle.tsx    |    50 +
 .../designer/components/ui/panel-section.tsx  |     1 +
 .../paywalls/designer/components/ui/panel.tsx |    23 +
 .../designer/components/ui/popover-header.tsx |     1 +
 .../designer/components/ui/select-input.tsx   |     1 +
 .../designer/components/ui/text-input.tsx     |     1 +
 .../designer/components/ui/zoom-controls.tsx  |    48 +
 .../variables/inputs/boolean-input.tsx        |    29 +
 .../variables/inputs/number-input.tsx         |    29 +
 .../variables/inputs/product-input.tsx        |   135 +
 .../variables/inputs/string-input.tsx         |    31 +
 .../components/variables/literal-input.tsx    |    25 +
 .../designer/components/variables/types.ts    |    53 +
 .../designer/components/variables/utils.ts    |    45 +
 .../components/variables/variable-input.tsx   |   168 +
 .../variables/variable-selector.tsx           |    59 +
 .../variables/variable-type-renderers.tsx     |    58 +
 .../studio/paywalls/designer/constants.ts     |   103 +
 .../designer/dev-mode/actions-inspector.tsx   |   185 +
 .../designer/dev-mode/dev-layers-panel.tsx    |   275 +
 .../designer/dev-mode/dev-mode-view.tsx       |    60 +
 .../designer/dev-mode/json-tree-viewer.tsx    |   473 +
 .../dev-mode/mimic-preview-renderer.tsx       |   246 +
 .../designer/dev-mode/node-details-panel.tsx  |   309 +
 .../designer/dev-mode/presence-inspector.tsx  |    95 +
 .../designer/dev-mode/snapshot-inspector.tsx  |   211 +
 .../studio/paywalls/designer/global.d.ts      |    24 +
 .../hooks/use-code-component-compilation.ts   |   136 +
 .../designer/hooks/use-component-manifest.ts  |    45 +
 .../hooks/use-component-node-warnings.ts      |    88 +
 .../hooks/use-context-menu-context.ts         |   204 +
 .../designer/hooks/use-cursor-updater.ts      |    21 +
 .../designer/hooks/use-designer-draft.ts      |    91 +
 .../designer/hooks/use-keyboard-shortcuts.ts  |   118 +
 .../designer/hooks/use-localizable-props.ts   |    62 +
 .../designer/hooks/use-paywall-code-target.ts |    51 +
 .../hooks/use-paywall-component-catalog.ts    |   151 +
 .../panel-kit/action-editor-field.tsx         |    48 +
 .../designer/panel-kit/action-editor.tsx      |   110 +
 .../action-payload-source-hint.tsx            |    15 +
 .../panel-kit/action-payloads/index.ts        |     3 +
 .../purchase-product-payload.tsx              |   133 +
 .../action-payloads/set-variable-payload.tsx  |   229 +
 .../designer/panel-kit/alignment-grid.tsx     |   346 +
 .../paywalls/designer/panel-kit/chrome.tsx    |   141 +
 .../designer/panel-kit/color-input.tsx        |   152 +
 .../color-picker/checkerboard-background.tsx  |    19 +
 .../color-picker/color-picker-content.tsx     |   256 +
 .../panel-kit/color-picker/color-swatch.tsx   |    25 +
 .../panel-kit/color-picker/color-utils.ts     |   166 +
 .../color-picker/eyedropper-button.tsx        |    41 +
 .../panel-kit/color-picker/hue-slider.tsx     |    97 +
 .../panel-kit/color-picker/opacity-slider.tsx |   110 +
 .../saturation-brightness-picker.tsx          |   141 +
 .../panel-kit/dimension-field.test.ts         |   169 +
 .../designer/panel-kit/dimension-field.tsx    |   369 +
 .../designer/panel-kit/fill-field.tsx         |   523 +
 .../designer/panel-kit/gradient-stop-bar.tsx  |   187 +
 .../designer/panel-kit/image-field.tsx        |    56 +
 .../studio/paywalls/designer/panel-kit/kit.ts |   101 +
 .../designer/panel-kit/panel-section.tsx      |    89 +
 .../designer/panel-kit/popover-header.tsx     |    15 +
 .../designer/panel-kit/prop-field-row.tsx     |   435 +
 .../designer/panel-kit/reset-affordance.tsx   |    62 +
 .../designer/panel-kit/select-input.tsx       |    73 +
 .../designer/panel-kit/text-input.tsx         |   358 +
 .../panel-kit/variable-binding-field.tsx      |    96 +
 .../panel-runtime/gesture-controller.test.ts  |   162 +
 .../panel-runtime/gesture-controller.ts       |   230 +
 .../panel-runtime/host-renderer.test.tsx      |   969 +
 .../designer/panel-runtime/host-renderer.tsx  |  1144 ++
 .../designer/panel-runtime/icon-registry.ts   |   171 +
 .../in-process-transport.test.tsx             |   129 +
 .../panel-runtime/in-process-transport.ts     |   175 +
 .../panel-runtime/intent-executor.test.ts     |   383 +
 .../designer/panel-runtime/intent-executor.ts |   389 +
 .../panel-runtime/panel-host-services.tsx     |    69 +
 .../panel-sandbox-document.test.ts            |    54 +
 .../panel-runtime/panel-sandbox-document.ts   |   168 +
 .../panel-sandbox-driver.test.ts              |   231 +
 .../panel-runtime/panel-sandbox-driver.ts     |   308 +
 .../panel-runtime/panel-sandbox-host.test.ts  |   354 +
 .../panel-runtime/panel-sandbox-host.ts       |   463 +
 .../panel-runtime/sandbox-messages.test.ts    |   183 +
 .../panel-runtime/sandbox-messages.ts         |   291 +
 .../panel-runtime/schema.contract.test.ts     |   929 +
 .../paywalls/designer/panel-runtime/schema.ts |   677 +
 .../designer/panel-runtime/transport.ts       |    69 +
 .../panel-runtime/use-panel-session.ts        |   138 +
 .../paywalls/designer/panels/action-panel.tsx |    71 +
 .../designer/panels/add-component-dialog.tsx  |   309 +
 .../paywalls/designer/panels/constants.ts     |    11 +
 .../studio/paywalls/designer/panels/index.ts  |     2 +
 .../paywalls/designer/panels/left-panel.tsx   |    51 +
 .../left-panel/code-components-section.tsx    |   280 +
 .../panels/left-panel/code-file-tree.tsx      |   344 +
 .../panels/left-panel/components-section.tsx  |   156 +
 .../panels/left-panel/layers-section.tsx      |  1453 ++
 .../designer/panels/locale-switcher.tsx       |   222 +
 .../designer/panels/node-type-icons.ts        |    55 +
 .../paywalls/designer/panels/right-panel.tsx  |    75 +
 .../right-panel/builtin-panel-host.test.tsx   |   109 +
 .../panels/right-panel/builtin-panel-host.tsx |   146 +
 .../right-panel/catalog-panel-code.test.ts    |    97 +
 .../panels/right-panel/catalog-panel-code.ts  |   101 +
 .../right-panel/component-panel-host.test.tsx |   713 +
 .../right-panel/component-panel-host.tsx      |   668 +
 .../components/override-reset-affordance.tsx  |     1 +
 .../definitions/border-panel.test.tsx         |   285 +
 .../right-panel/definitions/border-panel.tsx  |   365 +
 .../definitions/border-radius-panel.test.tsx  |   229 +
 .../definitions/border-radius-panel.tsx       |   305 +
 .../component-actions-panel.test.tsx          |   230 +
 .../definitions/component-actions-panel.tsx   |   173 +
 .../component-settings-panel.test.tsx         |   329 +
 .../definitions/component-settings-panel.tsx  |   282 +
 .../definitions/definition-selection.tsx      |    96 +
 .../definitions/fill-panel.test.tsx           |   479 +
 .../right-panel/definitions/fill-panel.tsx    |   253 +
 .../definitions/flex-layout-panel.test.tsx    |   415 +
 .../definitions/flex-layout-panel.tsx         |   444 +
 .../definitions/interactions-panel.test.tsx   |   263 +
 .../definitions/interactions-panel.tsx        |   223 +
 .../definitions/path-fill-panel.test.tsx      |   206 +
 .../definitions/path-fill-panel.tsx           |   115 +
 .../definitions/path-stroke-panel.test.tsx    |   200 +
 .../definitions/path-stroke-panel.tsx         |   154 +
 .../definitions/position-panel.test.tsx       |   374 +
 .../definitions/position-panel.tsx            |   172 +
 .../scroll-view-settings-panel.tsx            |    92 +
 .../definitions/shape-layout-panel.test.tsx   |   154 +
 .../definitions/shape-layout-panel.tsx        |   158 +
 .../definitions/states-panel.test.tsx         |   162 +
 .../right-panel/definitions/states-panel.tsx  |   126 +
 .../testing/definition-harness.test.tsx       |    93 +
 .../testing/definition-harness.tsx            |   656 +
 .../fixtures/panel-component-fixture.test.tsx |    94 +
 .../fixtures/panel-component-fixture.tsx      |    81 +
 .../definitions/text-fill-panel.test.tsx      |   163 +
 .../definitions/text-fill-panel.tsx           |    92 +
 .../definitions/typography-panel.test.tsx     |   245 +
 .../definitions/typography-panel.tsx          |   237 +
 .../definitions/use-definition-nodes.ts       |    71 +
 .../definitions/variables-panel.test.tsx      |   290 +
 .../definitions/variables-panel.tsx           |   325 +
 .../panels/right-panel/dynamic-panel.tsx      |   182 +
 .../inputs/flex-alignment-input.tsx           |     1 +
 .../right-panel/inputs/height-input.tsx       |    50 +
 .../panels/right-panel/inputs/text-input.tsx  |    84 +
 .../panels/right-panel/inputs/width-input.tsx |    50 +
 .../right-panel/panel-host-services-host.tsx  |   220 +
 .../panels/right-panel/panel-registry.test.ts |    41 +
 .../panels/right-panel/panel-registry.ts      |   223 +
 .../panels/right-panel/panel-stack.tsx        |   116 +
 .../panels/right-panel/section-registry.ts    |   127 +
 .../right-panel/sections/action-editor.tsx    |     1 +
 .../sections/border-radius-section.tsx        |   325 +
 .../right-panel/sections/border-section.tsx   |   406 +
 .../sections/component-actions-section.tsx    |   156 +
 .../sections/component-props-section.tsx      |   153 +
 .../sections/component-section.tsx            |   293 +
 .../sections/component-warnings.tsx           |   159 +
 .../right-panel/sections/content-section.tsx  |   132 +
 .../right-panel/sections/fill-section.tsx     |   397 +
 .../sections/flex-layout-section.tsx          |   581 +
 .../right-panel/sections/interaction-row.tsx  |   129 +
 .../sections/interactions-section.tsx         |   129 +
 .../sections/path-fill-section.tsx            |   115 +
 .../sections/path-stroke-section.tsx          |   176 +
 .../sections/pending-variable-row.tsx         |   106 +
 .../right-panel/sections/position-section.tsx |   183 +
 .../sections/safe-area-section.tsx            |    50 +
 .../sections/scroll-view-settings-section.tsx |    72 +
 .../sections/shape-layout-section.tsx         |   151 +
 .../right-panel/sections/states-section.tsx   |   187 +
 .../sections/text-fill-section.tsx            |    85 +
 .../sections/typography-section.tsx           |   303 +
 .../right-panel/sections/variable-row.tsx     |   150 +
 .../sections/variables-section.tsx            |   221 +
 .../right-panel/utils/component-color.test.ts |    47 +
 .../right-panel/utils/component-color.ts      |    53 +
 .../utils/get-style-targets.test.ts           |   102 +
 .../right-panel/utils/get-style-targets.ts    |    27 +
 .../right-panel/utils/gradient-stops.test.ts  |    42 +
 .../right-panel/utils/gradient-stops.ts       |    27 +
 .../utils/seed-absolute-position.ts           |    75 +
 .../utils/style-override-reset.test.ts        |   192 +
 .../right-panel/utils/style-override-reset.ts |    76 +
 .../right-panel/utils/style-targets-core.ts   |   100 +
 .../utils/use-style-override-reset-context.ts |    15 +
 .../paywalls/designer/panels/top-panel.tsx    |   230 +
 .../studio/paywalls/designer/panels/types.ts  |   107 +
 .../paywalls/designer/paywall-designer.tsx    |   145 +
 .../state/actions/active-locale-actions.ts    |    25 +
 .../state/actions/ai-panel-actions.ts         |    44 +
 .../state/actions/awareness-actions.ts        |    49 +
 .../designer/state/actions/canvas-actions.ts  |   402 +
 .../actions/code-component-actions.test.ts    |   208 +
 .../state/actions/code-component-actions.ts   |   216 +
 .../actions/code-component-editor-actions.ts  |   136 +
 .../actions/component-catalog-actions.ts      |    56 +
 ...mponent-preview-state-selection-actions.ts |    22 +
 .../designer/state/actions/core/index.ts      |    19 +
 .../designer/state/actions/debug-actions.ts   |    38 +
 .../state/actions/dev-mode-actions.ts         |    51 +
 .../actions/document-edit-actions.test.ts     |   285 +
 .../state/actions/document-edit-actions.ts    |   427 +
 .../state/actions/drag-select-actions.ts      |   316 +
 .../features/border-radius-style-actions.ts   |    32 +
 .../actions/features/border-style-actions.ts  |    35 +
 .../features/component-prop-actions.test.ts   |   215 +
 .../features/component-prop-actions.ts        |   322 +
 .../features/fill-gradient-writes.test.ts     |   221 +
 .../actions/features/fill-render.test.ts      |   143 +
 .../actions/features/fill-style-actions.ts    |    55 +
 .../features/interaction-actions.test.ts      |   307 +
 .../actions/features/interaction-actions.ts   |   307 +
 .../actions/features/layout-style-actions.ts  |   201 +
 .../actions/features/locale-actions.test.ts   |   770 +
 .../state/actions/features/locale-actions.ts  |   805 +
 .../features/path-fill-style-actions.ts       |    32 +
 .../features/path-stroke-style-actions.ts     |    34 +
 .../actions/features/state-actions.test.ts    |   261 +
 .../state/actions/features/state-actions.ts   |   255 +
 .../features/style-action-helpers.test.ts     |   419 +
 .../actions/features/style-action-helpers.ts  |   355 +
 .../features/text-fill-style-actions.ts       |    29 +
 .../features/typography-style-actions.ts      |    36 +
 .../actions/features/variable-actions.test.ts |   178 +
 .../actions/features/variable-actions.ts      |   191 +
 .../paywalls/designer/state/actions/index.ts  |   249 +
 .../designer/state/actions/layer-actions.ts   |   234 +
 .../designer/state/actions/mode-actions.ts    |    39 +
 .../state/actions/move-actions.test.ts        |   515 +
 .../designer/state/actions/move-actions.ts    |   384 +
 .../designer/state/actions/node-actions.ts    |   498 +
 .../designer/state/actions/node-resolver.ts   |    75 +
 .../actions/nodes/component-node-actions.ts   |   278 +
 .../state/actions/nodes/path-node-actions.ts  |    90 +
 .../actions/nodes/screen-node-actions.ts      |    87 +
 .../nodes/scrollview-node-actions.test.ts     |   125 +
 .../actions/nodes/scrollview-node-actions.ts  |   128 +
 .../state/actions/nodes/shape-node-actions.ts |   181 +
 .../state/actions/nodes/text-node-actions.ts  |    87 +
 .../actions/nodes/view-node-actions.test.ts   |   115 +
 .../state/actions/nodes/view-node-actions.ts  |   182 +
 .../designer/state/actions/panel-actions.ts   |    76 +
 .../state/actions/resize-actions.test.ts      |   107 +
 .../designer/state/actions/resize-actions.ts  |   867 +
 .../state/actions/selection-actions.test.ts   |   139 +
 .../state/actions/selection-actions.ts        |   135 +
 .../state-override-selection-actions.ts       |    21 +
 .../designer/state/actions/tools-actions.ts   |    21 +
 .../state/context-menu/action-registry.ts     |   186 +
 .../context-menu/actions/clipboard-actions.ts |    87 +
 .../context-menu/actions/create-actions.ts    |   218 +
 .../context-menu/actions/delete-actions.ts    |    34 +
 .../state/context-menu/actions/index.ts       |    43 +
 .../context-menu/actions/selection-actions.ts |    94 +
 .../designer/state/context-menu/index.ts      |    76 +
 .../designer/state/context-menu/types.ts      |   155 +
 .../designer/state/designer-commander.tsx     |     6 +
 .../designer/state/designer-store-state.tsx   |   299 +
 .../designer/state/designer-store.tsx         |   359 +
 .../state/testing/offline-document.ts         |    66 +
 .../state/utils/ancestor-variables.test.ts    |   122 +
 .../state/utils/ancestor-variables.ts         |   162 +
 .../designer/state/utils/bounding-box.ts      |    69 +
 .../state/utils/code-component-writes.ts      |   129 +
 .../designer/state/utils/code-components.ts   |   131 +
 .../state/utils/component-children.test.ts    |   180 +
 .../state/utils/component-children.ts         |   140 +
 .../state/utils/component-node-writes.test.ts |   372 +
 .../state/utils/component-node-writes.ts      |   424 +
 .../state/utils/component-prop-values.test.ts |   245 +
 .../state/utils/component-prop-values.ts      |   343 +
 .../state/utils/component-validation.test.ts  |   383 +
 .../state/utils/component-validation.ts       |   361 +
 .../state/utils/computed-dimensions.ts        |    23 +
 .../designer/state/utils/document-root.ts     |    71 +
 .../paywalls/designer/state/utils/id.ts       |     8 +
 .../designer/state/utils/localization.test.ts |   184 +
 .../designer/state/utils/localization.ts      |   173 +
 .../state/utils/node-data-writes.test.ts      |   289 +
 .../designer/state/utils/node-data-writes.ts  |   349 +
 .../designer/state/utils/node-proxies.ts      |    68 +
 .../designer/state/utils/node-type-helpers.ts |   117 +
 .../paywalls/designer/state/utils/nodes.ts    |    18 +
 .../state/utils/normalize-flex-sizing.ts      |    72 +
 .../paywalls/designer/state/utils/presence.ts |    32 +
 .../paywalls/designer/state/utils/replay.ts   |   131 +
 .../designer/state/utils/selection-level.ts   |   250 +
 .../state/utils/state-overrides.test.ts       |   177 +
 .../designer/state/utils/state-overrides.ts   |   232 +
 .../designer/state/utils/tree.test.ts         |    54 +
 .../paywalls/designer/state/utils/tree.ts     |   139 +
 .../build-translation-rows.test.ts            |   208 +
 .../build-translation-rows.ts                 |   275 +
 .../translation-mode/context-preview.tsx      |   106 +
 .../designer/translation-mode/locale-rail.tsx |   288 +
 .../translation-mode-workspace.tsx            |   139 +
 .../translation-mode/translation-table.tsx    |   404 +
 .../studio/paywalls/designer/types.ts         |    68 +
 .../paywalls/designer/utils/locale-display.ts |    34 +
 .../paywalls/designer/utils/platform.ts       |    34 +
 .../studio/paywalls/paywall-card-skeleton.tsx |    13 +
 .../features/studio/paywalls/paywall-card.tsx |   203 +
 .../paywalls/paywall-record-skeleton.tsx      |    17 +
 .../studio/paywalls/paywall-record.tsx        |    31 +
 .../studio/paywalls/rename-paywall-dialog.tsx |   109 +
 .../studio/perks/create-perk-modal-button.tsx |    19 +
 .../studio/perks/create-perk-modal.tsx        |   153 +
 .../studio/perks/perk-record-skeleton.tsx     |    20 +
 .../src/features/studio/perks/perk-record.tsx |   124 +
 .../studio/perks/perks-page-empty-state.tsx   |    39 +
 .../studio/perks/perks-page-skeleton.tsx      |    25 +
 .../src/features/studio/perks/perks-page.tsx  |    67 +
 .../studio/persons/create-person-button.tsx   |    18 +
 .../studio/persons/create-person-modal.tsx    |   148 +
 .../studio/persons/persons-detail-page.tsx    |   126 +
 .../features/studio/persons/persons-page.tsx  |    50 +
 .../studio/persons/persons-table/columns.tsx  |    25 +
 .../persons/persons-table/data-table.tsx      |    87 +
 .../studio/persons/persons-table/index.tsx    |    60 +
 .../studio/persons/persons-table/skeleton.tsx |    41 +
 .../products/create-product-modal-button.tsx  |    52 +
 .../studio/products/create-product-modal.tsx  |   228 +
 .../studio/products/edit-product-modal.tsx    |   125 +
 .../product-detail-add-perk-button.tsx        |    94 +
 .../product-detail-add-product-button.tsx     |    37 +
 .../studio/products/product-detail-body.tsx   |   194 +
 .../products/product-detail-page-skeleton.tsx |    31 +
 .../studio/products/product-detail-page.tsx   |   268 +
 .../studio/products/product-detail-pane.tsx   |   154 +
 ...t-detail-payment-providers-empty-state.tsx |    36 +
 .../product-detail-perks-empty-state.tsx      |    28 +
 .../product-detail-product-perk-record.tsx    |    97 +
 ...product-detail-provider-product-record.tsx |   168 +
 ...t-record-configuration-state-indicator.tsx |    67 +
 .../products/product-record-skeleton.tsx      |    12 +
 .../studio/products/product-record.tsx        |    35 +
 .../products/products-page-empty-state.tsx    |    38 +
 .../products/products-page-skeleton.tsx       |    32 +
 .../studio/products/products-page.tsx         |    81 +
 .../products/provider-product-sheet.tsx       |   198 +
 .../studio/projects/create-project-modal.tsx  |   144 +
 .../studio/projects/delete-project-modal.tsx  |   115 +
 .../projects/overview/project-overview.tsx    |    96 +
 .../settings/general/project-avatar.tsx       |    74 +
 .../settings/general/project-delete.tsx       |    78 +
 .../settings/general/project-name.tsx         |   103 +
 .../project-settings-general-layout.tsx       |     7 +
 ...project-settings-general-page-skeleton.tsx |    31 +
 .../general/project-settings-general-page.tsx |    29 +
 ...tification-provider-detail-page-chrome.tsx |    60 +
 .../notification-provider-detail-router.tsx   |    47 +
 .../notifications/notification-providers.ts   |    27 +
 ...apns-notification-provider-detail-page.tsx |   348 +
 .../fcm-notification-provider-detail-page.tsx |   365 +
 .../setup-notification-provider-button.tsx    |    63 +
 ...se-notification-configuration-mutations.ts |    84 +
 .../components/p8-private-key-field.tsx       |    30 +
 .../payment-provider-copyable-value.tsx       |    35 +
 .../payment-provider-detail-action-bar.tsx    |    28 +
 .../payment-provider-detail-form-layout.tsx   |    36 +
 .../payment-provider-detail-header.tsx        |    33 +
 .../payment-provider-detail-page-chrome.tsx   |    60 +
 .../payment-provider-detail-section.tsx       |    21 +
 .../payment-provider-detail-tab-nav.tsx       |   121 +
 .../payment-provider-form-fields.tsx          |   313 +
 .../payment-provider-text-file-field.tsx      |    84 +
 .../payment-provider-validation.tsx           |   161 +
 .../payment-providers/logos/apple-logo.tsx    |    20 +
 .../logos/google-play-logo.tsx                |    18 +
 .../payment-providers/logos/stripe-logo.tsx   |    21 +
 .../payment-provider-detail-page.tsx          |    71 +
 .../payment-provider-detail-router.tsx        |    57 +
 .../payment-provider-logo.tsx                 |    27 +
 .../payment-providers-new-store-dropdown.tsx  |    90 +
 .../payment-providers-page-skeleton.tsx       |    23 +
 .../payment-providers-page.tsx                |   232 +
 ...pp-store-payment-provider-detail-config.ts |   185 +
 ...app-store-payment-provider-detail-page.tsx |   215 +
 ...store-payment-provider-detail-sections.tsx |   425 +
 ...gle-play-payment-provider-detail-config.ts |    66 +
 ...ogle-play-payment-provider-detail-page.tsx |   205 +
 ...-play-payment-provider-detail-sections.tsx |   186 +
 .../stripe-payment-provider-detail-config.ts  |    89 +
 .../stripe-payment-provider-detail-page.tsx   |   218 +
 ...tripe-payment-provider-detail-sections.tsx |   181 +
 .../setup-payment-provider-button.tsx         |    62 +
 ...ayment-provider-configuration-mutations.ts |    74 +
 .../www/src/features/studio/settings/index.ts |     1 +
 .../studio/settings/settings-layout.tsx       |   174 +
 .../dashboard-sidebar-provider.tsx            |    11 +
 .../components/dashboard-sidebar/index.ts     |     1 +
 .../environment-filter-notification.tsx       |    22 +
 .../features/studio/shell/components/index.ts |     2 +
 .../studio/shell/components/nav-bar/index.ts  |     7 +
 .../shell/components/nav-bar/nav-bar-logo.tsx |    33 +
 .../shell/components/nav-bar/nav-bar.tsx      |    30 +
 .../nav-bar/nav-user/nav-user-dropdown.tsx    |    79 +
 .../components/nav-bar/nav-user/nav-user.tsx  |    35 +
 .../nav-bar/organization-project-switcher.tsx |   228 +
 .../components/nav-bar/project-switcher.tsx   |    83 +
 .../sidebar/organization-settings-sidebar.tsx |   106 +
 .../sidebar/organization-sidebar.tsx          |   143 +
 .../sidebar/organization-switcher.tsx         |    39 +
 .../sidebar/project-settings-sidebar.tsx      |   112 +
 .../components/sidebar/project-sidebar.tsx    |   362 +
 .../components/sidebar/sidebar-shell.tsx      |   156 +
 .../skeleton/dashboard-shell-skeleton.tsx     |    45 +
 .../studio/shell/components/skeleton/index.ts |     3 +
 .../skeleton/organization-layout-skeleton.tsx |   112 +
 .../skeleton/project-layout-skeleton.tsx      |   343 +
 .../shell/components/voidhash-error-card.tsx  |    21 +
 apps/www/src/features/studio/shell/index.ts   |     2 +
 apps/www/src/features/studio/shell/page.tsx   |    67 +
 .../src/features/studio/styles/globals.css    |   222 +
 .../webhooks/create-webhook-modal-button.tsx  |    44 +
 .../studio/webhooks/create-webhook-modal.tsx  |   195 +
 .../studio/webhooks/edit-webhook-modal.tsx    |   220 +
 .../webhook-delivery-attempt-timeline.tsx     |    99 +
 .../webhook-delivery-record-skeleton.tsx      |    21 +
 .../webhooks/webhook-delivery-record.tsx      |    58 +
 .../webhooks/webhook-delivery-sidebar.tsx     |    77 +
 .../webhook-endpoint-actions-dropdown.tsx     |   179 +
 .../webhook-endpoint-detail-sidebar.tsx       |   104 +
 .../webhook-endpoint-record-skeleton.tsx      |    20 +
 .../webhooks/webhook-endpoint-record.tsx      |   255 +
 .../studio/webhooks/webhook-event-types.ts    |    18 +
 .../webhooks/webhook-payload-viewer.tsx       |    30 +
 .../webhooks/webhook-secret-reveal-modal.tsx  |    52 +
 .../studio/webhooks/webhook-status-badge.tsx  |    31 +
 .../webhooks/webhooks-page-empty-state.tsx    |    27 +
 apps/www/src/features/www/button.tsx          |    59 +
 apps/www/src/features/www/hero/footer.tsx     |    61 +
 apps/www/src/features/www/hero/hero.tsx       |    72 +
 apps/www/src/features/www/logo.tsx            |    92 +
 .../src/features/www/navbar/navigation.tsx    |    49 +
 .../src/features/www/refraction-stripes.tsx   |    38 +
 .../www/section/section-container.tsx         |    15 +
 .../src/hooks/use-container-dimensions.tsx    |    30 +
 apps/www/src/lib/create-vite-source.ts        |    95 +
 apps/www/src/lib/effect-query.ts              |   162 +
 apps/www/src/lib/env.ts                       |    21 +
 apps/www/src/lib/origin.ts                    |    22 +
 apps/www/src/lib/paths.ts                     |     4 +
 apps/www/src/lib/utils.ts                     |     6 +
 apps/www/src/routeTree.gen.ts                 |  1757 ++
 apps/www/src/router.tsx                       |    35 +
 apps/www/src/routes/__root.tsx                |    93 +
 apps/www/src/routes/_marketing/index.tsx      |    27 +
 apps/www/src/routes/_marketing/route.tsx      |    16 +
 apps/www/src/routes/api/auth/callback.tsx     |    10 +
 apps/www/src/routes/api/auth/email/resend.tsx |    47 +
 apps/www/src/routes/api/auth/email/verify.tsx |    94 +
 .../src/routes/api/auth/oauth/$provider.tsx   |    48 +
 .../src/routes/api/auth/oauth/callback.tsx    |   117 +
 .../api/auth/password/forgot-password.tsx     |    39 +
 .../api/auth/password/reset-password.tsx      |    42 +
 .../src/routes/api/auth/password/sign-in.tsx  |    87 +
 .../src/routes/api/auth/password/sign-up.tsx  |    99 +
 apps/www/src/routes/auth/devices/index.tsx    |   213 +
 apps/www/src/routes/auth/forgot-password.tsx  |   147 +
 apps/www/src/routes/auth/index.tsx            |    51 +
 apps/www/src/routes/auth/login.tsx            |   233 +
 apps/www/src/routes/auth/logout.tsx           |    26 +
 apps/www/src/routes/auth/reset-password.tsx   |   191 +
 apps/www/src/routes/auth/route.tsx            |    27 +
 apps/www/src/routes/auth/sign-up.tsx          |   258 +
 apps/www/src/routes/auth/verify-email.tsx     |   226 +
 apps/www/src/routes/design/$.tsx              |   175 +
 apps/www/src/routes/design/api/search.ts      |    19 +
 apps/www/src/routes/design/index.tsx          |    13 +
 apps/www/src/routes/design/route.tsx          |    42 +
 apps/www/src/routes/docs/$.tsx                |   130 +
 apps/www/src/routes/docs/api/search.ts        |    19 +
 apps/www/src/routes/docs/index.tsx            |    13 +
 apps/www/src/routes/docs/route.tsx            |    42 +
 .../_organization/$organizationSlug/index.tsx |    15 +
 .../_organization/$organizationSlug/route.tsx |    58 +
 .../$organizationSlug/~/settings.index.tsx    |    40 +
 .../$projectSlug/activity.events.tsx          |   489 +
 .../activity.sent-notifications.tsx           |   490 +
 .../$projectSlug/analytics.churn.tsx          |    24 +
 .../$projectSlug/analytics.query.tsx          |   176 +
 .../$projectSlug/analytics.revenue.tsx        |    24 +
 .../$projectSlug/analytics.subscribers.tsx    |    24 +
 .../$projectSlug/analytics.trials.tsx         |    24 +
 .../$projectSlug/assets.index.tsx             |    55 +
 .../$projectSlug/deploys.tsx                  |    86 +
 .../$projectSlug/experiments.$id.tsx          |   193 +
 .../$projectSlug/experiments.index.tsx        |    95 +
 .../$projectSlug/flags.$id.tsx                |   306 +
 .../$projectSlug/flags.index.tsx              |    94 +
 .../$organizationSlug/$projectSlug/index.tsx  |    15 +
 .../$projectSlug/overview.tsx                 |    20 +
 .../$projectSlug/paywalls.index.tsx           |   117 +
 .../$projectSlug/persons.$id.tsx              |   130 +
 .../$projectSlug/persons.index.tsx            |    52 +
 .../$projectSlug/products.$id.tsx             |    82 +
 .../$projectSlug/products.index.tsx           |   130 +
 .../$organizationSlug/$projectSlug/route.tsx  |    58 +
 .../$projectSlug/settings/api-keys.tsx        |    73 +
 .../$projectSlug/settings/index.tsx           |    49 +
 ...notifications.$providerConfigurationId.tsx |    85 +
 .../settings/notifications.index.tsx          |   152 +
 ...viders.$paymentProviderConfigurationId.tsx |    83 +
 .../settings/payment-providers.index.tsx      |   204 +
 .../settings/paywall-locations.tsx            |    96 +
 .../$projectSlug/settings/perks.tsx           |    86 +
 .../webhooks.$endpointId.$deliveryId.tsx      |   189 +
 .../settings/webhooks.$endpointId.index.tsx   |   174 +
 .../$projectSlug/settings/webhooks.index.tsx  |    86 +
 .../_authenticated/_dashboard/route.tsx       |    45 +
 ...ganizationSlug.$projectSlug.design.$id.tsx |    38 +
 .../create-organization/index.tsx             |   145 +
 .../routes/studio/_authenticated/index.tsx    |    38 +
 .../routes/studio/_authenticated/route.tsx    |   164 +
 apps/www/src/routes/studio/route.tsx          |    27 +
 apps/www/src/start.ts                         |    10 +
 apps/www/src/styles/globals.css               |    36 +
 apps/www/src/test-setup.ts                    |    18 +
 apps/www/src/vite-env.d.ts                    |     6 +
 apps/www/sst-env.d.ts                         |    10 +
 apps/www/tsconfig.json                        |    32 +
 apps/www/vite.config.ts                       |   144 +
 docs/specs/paywall-deploy-contract.md         |     6 +-
 drizzle.config.ts                             |    20 +-
 examples/mimic-example/src/routeTree.gen.ts   |    82 +-
 libraries/node/package.json                   |     2 -
 libraries/react-native/package.json           |     6 +-
 libraries/react-native/tsconfig.json          |     5 +-
 libraries/react-native/tsconfig.test.json     |     8 +
 libraries/web/package.json                    |     2 +-
 package.json                                  |    69 +-
 packages/clickhouse-db/LICENSE.md             |   661 +
 packages/clickhouse-db/package.json           |    30 +
 .../clickhouse-db/src/analytics/migration.ts  |    32 +
 .../src/analytics/resolved-events-sql.test.ts |    54 +
 .../src/analytics/resolved-events-sql.ts      |    61 +
 .../clickhouse-db/src/analytics/schema.ts     |    10 +
 .../ClickhouseWebClient.ts                    |   848 +
 .../src/clickhouse-client-web/index.ts        |     4 +
 packages/clickhouse-db/src/index.ts           |     2 +
 packages/clickhouse-db/src/live.ts            |    82 +
 .../0001_create_analytics_events.ts           |    37 +
 .../0002_create_analytics_identity_v2.test.ts |   114 +
 .../0002_create_analytics_identity_v2.ts      |   199 +
 ...analytics_identity_pending_overrides_v2.ts |   134 +
 .../0004_person_identity_cutover.ts           |    15 +
 .../0005_align_analytics_identity_tables.ts   |   103 +
 ...repair_pending_overrides_person_id.test.ts |    19 +
 ...0006_repair_pending_overrides_person_id.ts |    41 +
 ..._add_organization_id_to_identity_tables.ts |    85 +
 ...08_repair_identity_organization_id.test.ts |    39 +
 .../0008_repair_identity_organization_id.ts   |    72 +
 packages/clickhouse-db/sst-env.d.ts           |    10 +
 packages/clickhouse-db/tsconfig.json          |     5 +
 packages/core/LICENSE.md                      |   661 +
 packages/core/design.generated.ts             |    29 +
 packages/core/docs.generated.ts               |    29 +
 packages/core/package.json                    |   174 +
 .../core/src/domain/analytics/Analytics.ts    |   736 +
 .../domain/analyticsIngest/AnalyticsIngest.ts |   763 +
 packages/core/src/domain/apiKey/ApiKey.ts     |    22 +
 packages/core/src/domain/auth/Auth.ts         |   101 +
 .../core/src/domain/auth/LocalUserSession.ts  |    25 +
 packages/core/src/domain/avatar.ts            |   144 +
 .../core/src/domain/experiment/Experiment.ts  |    37 +
 .../src/domain/featureFlag/FeatureFlag.ts     |    26 +
 packages/core/src/domain/fxRate/FxRate.ts     |    28 +
 .../InternalAnalyticsEvents.ts                |   530 +
 .../notifications/PushDeliveryQueueMessage.ts |    21 +
 .../domain/notifications/PushDeviceToken.ts   |    35 +
 .../PushNotificationConfiguration.ts          |    35 +
 .../src/domain/organization/Organization.ts   |    10 +
 .../PaymentProviderConfiguration.ts           |    34 +
 .../paymentProvider/PaymentProviderProduct.ts |    17 +
 .../paymentProvider/SubscriptionTransfer.ts   |    36 +
 packages/core/src/domain/paywall/Paywall.ts   |    18 +
 .../core/src/domain/paywallAssetImage.test.ts |   148 +
 packages/core/src/domain/paywallAssetImage.ts |   172 +
 .../domain/paywallLocation/PaywallLocation.ts |    21 +
 .../core/src/domain/paywallThumbnail.test.ts  |    59 +
 packages/core/src/domain/paywallThumbnail.ts  |    53 +
 packages/core/src/domain/perk/Perk.ts         |    15 +
 .../core/src/domain/person/IdentityGraph.ts   |   591 +
 packages/core/src/domain/person/Person.ts     |   250 +
 packages/core/src/domain/product/Product.ts   |    16 +
 packages/core/src/domain/project/Project.ts   |    10 +
 .../purchaseProcessing/PurchaseProcessing.ts  |    84 +
 packages/core/src/domain/schema/Schema.ts     |    65 +
 .../core/src/domain/sdkPerson/SdkPerson.ts    |   172 +
 packages/core/src/domain/shared/Money.ts      |    36 +
 packages/core/src/domain/user/User.ts         |    32 +
 packages/core/src/domain/webhook/Webhook.ts   |    21 +
 .../src/services/aiChat/AiChatService.test.ts |   320 +
 .../core/src/services/aiChat/AiChatService.ts |   479 +
 .../services/analytics/AnalyticsService.ts    |   443 +
 .../services/analytics/clickhouse-accessor.ts |   607 +
 .../src/services/analytics/series-resolver.ts |   262 +
 .../AnalyticsDispatchService.ts               |   103 +
 .../AnalyticsIngestDlqService.ts              |   148 +
 .../AnalyticsJanitorService.ts                |   382 +
 .../analyticsIngest/AnalyticsWriterService.ts |   279 +
 .../analyticsIngest/CaptureIngress.ts         |    43 +
 .../services/analyticsIngest/DlqProducer.ts   |    86 +
 .../analyticsIngest/EventCaptureService.ts    |   462 +
 .../analyticsIngest/EventProcessorService.ts  |   600 +
 .../analyticsIngest/PolicyCounterStore.ts     |    53 +
 .../analyticsIngest/ProcessorOutputs.ts       |    12 +
 .../src/services/apiKeys/ApiKeyService.ts     |   506 +
 .../core/src/services/apiKeys/api-keys.ts     |   103 +
 .../core/src/services/apiKeys/create-hash.ts  |   146 +
 packages/core/src/services/apiKeys/index.ts   |     1 +
 .../services/auditLog/AuditLogPort.test.ts    |    21 +
 .../src/services/auditLog/AuditLogPort.ts     |    37 +
 packages/core/src/services/auditLog/index.ts  |     1 +
 .../src/services/auth/AuthTokenVerifier.ts    |    65 +
 .../services/auth/LocalUserSessionService.ts  |   230 +
 packages/core/src/services/auth/Workos.ts     |   369 +
 .../auth/WorkosLocalSyncService.test.ts       |   160 +
 .../services/auth/WorkosLocalSyncService.ts   |    77 +
 .../services/experiments/ExperimentService.ts |  1016 ++
 .../featureFlags/FeatureFlagService.ts        |  1416 ++
 .../core/src/services/featureFlags/index.ts   |     1 +
 .../src/services/feedback/FeedbackService.ts  |   179 +
 .../src/services/fxRates/FxRateService.ts     |   350 +
 .../fxRates/exchange-rate-api-fetcher.ts      |   116 +
 packages/core/src/services/fxRates/index.ts   |     2 +
 packages/core/src/services/index.ts           |   131 +
 .../services/infrastructure/QueueProducer.ts  |     8 +
 .../InternalFeatureFlagService.ts             |   224 +
 .../ApplePushNotificationService.ts           |   308 +
 .../FirebaseCloudMessagingService.ts          |   466 +
 .../NotificationSendingService.ts             |   274 +
 .../notifications/NotificationTokenService.ts |   476 +
 .../NotificationsConfigurationService.ts      |   432 +
 .../PersonNotificationTokenService.ts         |   263 +
 .../notifications/PushDeliveryDispatch.ts     |    49 +
 .../notifications/PushDeliveryService.ts      |   466 +
 .../PushNotificationSendService.ts            |   177 +
 .../notifications/push-delivery-provider.ts   |   199 +
 .../organizations/OrganizationBillingPort.ts  |    31 +
 .../OrganizationMembershipSyncPort.ts         |    37 +
 .../OrganizationMembershipWebhookPort.ts      |    40 +
 .../organizations/OrganizationService.ts      |   520 +
 .../services/organizations/WorkosOrgPort.ts   |    96 +
 .../core/src/services/organizations/index.ts  |     2 +
 .../AppStorePaymentProviderService.ts         |    83 +
 ...oreReconcileOriginalTransactionWorkflow.ts |    32 +
 ...pStoreReplayParkedNotificationsWorkflow.ts |    22 +
 ...oreReplayParkedSdkNotificationsWorkflow.ts |    25 +
 .../GooglePlayPaymentProviderService.ts       |    75 +
 ...lePlayReplayParkedNotificationsWorkflow.ts |    22 +
 .../paymentProviders/PaymentProvider.ts       |    60 +
 .../PaymentProviderConfigurationService.ts    |   401 +
 .../PaymentProviderProductService.ts          |   753 +
 .../StripePaymentProviderService.ts           |    41 +
 ...StripeReplayParkedNotificationsWorkflow.ts |    22 +
 .../app-store-reconciliation-service.ts       |   442 +
 .../app-store-webhook-handler-service.ts      |   867 +
 .../appStore/config-provider.test.ts          |   116 +
 .../appStore/config-provider.ts               |   187 +
 .../paymentProviders/appStore/constants.ts    |    88 +
 .../paymentProviders/appStore/errors.ts       |    77 +
 .../paymentProviders/appStore/helpers.test.ts |   581 +
 .../paymentProviders/appStore/helpers.ts      |   340 +
 .../paymentProviders/appStore/money.test.ts   |   324 +
 .../paymentProviders/appStore/money.ts        |   265 +
 .../payment-provider-service-queries.ts       |   554 +
 .../appStore/payment-provider-service.ts      |   257 +
 .../appStore/payment-provider.ts              |  1254 ++
 .../paymentProviders/appStore/sdk-context.ts  |   147 +
 .../googlePlay/config-provider.test.ts        |   118 +
 .../googlePlay/config-provider.ts             |   213 +
 .../paymentProviders/googlePlay/errors.ts     |    65 +
 .../googlePlay/helpers.test.ts                |   280 +
 .../paymentProviders/googlePlay/helpers.ts    |   283 +
 .../paymentProviders/googlePlay/money.test.ts |   164 +
 .../paymentProviders/googlePlay/money.ts      |   154 +
 .../googlePlay/notifications.test.ts          |   145 +
 .../googlePlay/notifications.ts               |   243 +
 .../payment-provider-service-queries.ts       |   415 +
 .../googlePlay/payment-provider-service.ts    |   138 +
 .../googlePlay/payment-provider.ts            |   834 +
 .../googlePlay/sdk-context.ts                 |   120 +
 .../googlePlay/webhook-handler-service.ts     |   564 +
 .../src/services/paymentProviders/index.ts    |     5 +
 .../payment-provider-adapter.ts               |    44 +
 .../stripe/config-provider.test.ts            |   163 +
 .../stripe/config-provider.ts                 |   211 +
 .../paymentProviders/stripe/errors.ts         |    67 +
 .../paymentProviders/stripe/events.ts         |   258 +
 .../paymentProviders/stripe/helpers.test.ts   |   228 +
 .../paymentProviders/stripe/helpers.ts        |   164 +
 .../paymentProviders/stripe/money.test.ts     |   157 +
 .../services/paymentProviders/stripe/money.ts |   129 +
 .../payment-provider-service-queries.ts       |   327 +
 .../stripe/payment-provider-service.ts        |    33 +
 .../stripe/payment-provider.ts                |   897 +
 .../stripe/sdk-context.test.ts                |   192 +
 .../paymentProviders/stripe/sdk-context.ts    |   270 +
 .../stripe/stripe-webhook-handler-service.ts  |   382 +
 .../paywallAssets/PaywallAssetService.test.ts |    35 +
 .../paywallAssets/PaywallAssetService.ts      |   245 +
 .../paywallDeploys/PaywallArtifactStore.ts    |    62 +
 .../PaywallDeployManifest.contract.test.ts    |   444 +
 .../paywallDeploys/PaywallDeployManifest.ts   |  1169 ++
 .../PaywallDeployManifest.unit.test.ts        |  1117 ++
 .../paywallDeploys/PaywallDeployService.ts    |  1814 ++
 .../PaywallDeployService.unit.test.ts         |   604 +
 .../core/src/services/paywallDeploys/index.ts |     3 +
 .../paywallLocations/PaywallAssetConfig.ts    |    31 +
 .../PaywallLocationService.ts                 |   829 +
 .../src/services/paywallLocations/helpers.ts  |   218 +
 .../src/services/paywallLocations/index.ts    |     1 +
 .../paywallReleases/PaywallReleaseService.ts  |   333 +
 .../paywallReleases/SnapshotHtmlRenderer.ts   |    33 +
 .../paywallThumbnails/HtmlScreenshot.ts       |    44 +
 .../PaywallThumbnailService.test.ts           |    45 +
 .../PaywallThumbnailService.ts                |   254 +
 .../SnapshotImageRenderer.ts                  |    59 +
 .../paywallWorkspace/ComponentCompiler.ts     |   140 +
 .../ComponentManifestCacheService.test.ts     |   200 +
 .../ComponentManifestCacheService.ts          |   216 +
 .../PaywallWorkspaceService.test.ts           |   528 +
 .../PaywallWorkspaceService.ts                |   568 +
 .../paywallWorkspace/_fixpoint.fixture.json   |     1 +
 .../core/src/services/paywalls/MimicHost.ts   |   136 +
 .../src/services/paywalls/PaywallService.ts   |   396 +
 packages/core/src/services/paywalls/index.ts  |     2 +
 .../services/perkGrants/PerkGrantService.ts   |   453 +
 .../core/src/services/perkGrants/index.ts     |     1 +
 .../core/src/services/perks/PerkService.ts    |   274 +
 packages/core/src/services/perks/index.ts     |     1 +
 .../IdentifyDistinctIdCompletionWorkflow.ts   |    31 +
 .../personIdentity/IdentityMutationService.ts |   925 +
 .../IdentityProjectionPublisher.ts            |   157 +
 .../IdentityProjectionRebuildService.ts       |   175 +
 .../personIdentity/PersonIdentityService.ts   |   584 +
 .../core/src/services/personIdentity/index.ts |     3 +
 .../src/services/persons/PersonService.ts     |   372 +
 packages/core/src/services/persons/index.ts   |     1 +
 .../productPerks/ProductPerkService.ts        |   241 +
 .../core/src/services/productPerks/index.ts   |     1 +
 .../src/services/products/ProductService.ts   |   333 +
 .../core/src/services/products/helpers.ts     |    29 +
 packages/core/src/services/products/index.ts  |     1 +
 .../src/services/projects/ProjectService.ts   |   512 +
 packages/core/src/services/projects/index.ts  |     1 +
 .../PurchaseLedgerWorkerService.ts            |   347 +
 .../PurchaseProcessingService.ts              |  2778 +++
 .../services/purchaseProcessing/helpers.ts    |     8 +
 .../purchaseProcessing/result-codec.ts        |    56 +
 .../revenue-analytics-mapper.ts               |   839 +
 .../src/services/purchases/PurchaseService.ts |    80 +
 packages/core/src/services/purchases/index.ts |     1 +
 .../schema/SchemaCacheInvalidationService.ts  |    38 +
 .../core/src/services/schema/SchemaService.ts |   407 +
 packages/core/src/services/schema/helpers.ts  |    94 +
 packages/core/src/services/schema/index.ts    |     2 +
 packages/core/src/services/sdk/SdkService.ts  |   846 +
 .../core/src/services/sdk/elevate-auth.ts     |    31 +
 packages/core/src/services/sdk/index.ts       |     1 +
 .../core/src/services/sdk/snapshot-builder.ts |   476 +
 .../core/src/services/slack/slack-client.ts   |   124 +
 .../src/services/storage/PublicFileStore.ts   |    55 +
 .../core/src/services/users/UserService.ts    |   189 +
 packages/core/src/services/users/index.ts     |     1 +
 .../core/src/services/voidql/VoidQlService.ts |   286 +
 .../core/src/services/voidql/ast/VoidQlAst.ts |   238 +
 .../core/src/services/voidql/catalog/brand.ts |    16 +
 .../src/services/voidql/catalog/events.ts     |   144 +
 .../core/src/services/voidql/catalog/index.ts |    30 +
 .../src/services/voidql/catalog/persons.ts    |    85 +
 .../src/services/voidql/catalog/revenue.ts    |    43 +
 .../core/src/services/voidql/catalog/types.ts |    93 +
 packages/core/src/services/voidql/compile.ts  |    70 +
 packages/core/src/services/voidql/compiler.ts |   769 +
 packages/core/src/services/voidql/errors.ts   |   146 +
 .../core/src/services/voidql/functions.ts     |   164 +
 packages/core/src/services/voidql/index.ts    |    32 +
 packages/core/src/services/voidql/ir.ts       |    76 +
 packages/core/src/services/voidql/lexer.ts    |   293 +
 packages/core/src/services/voidql/parser.ts   |   608 +
 packages/core/src/services/voidql/scope.ts    |    31 +
 packages/core/src/services/voidql/verify.ts   |   111 +
 .../webhookDispatch/WebhookDeliveryService.ts |   215 +
 .../WebhookDeliveryWorkflow.ts                |    26 +
 .../webhookDispatch/WebhookDispatchService.ts |   127 +
 .../src/services/webhookDispatch/index.ts     |     1 +
 .../webhookManager/WebhookManagerService.ts   |   763 +
 .../services/webhookManager/event-types.ts    |    18 +
 .../core/src/services/webhookManager/index.ts |     2 +
 packages/core/src/testing/effect-vitest.ts    |    22 +
 packages/core/src/utils/create-short-id.ts    |     7 +
 packages/core/src/utils/create-slug.ts        |    11 +
 .../crypto/PaymentConfigSecretCrypto.test.ts  |    68 +
 .../utils/crypto/PaymentConfigSecretCrypto.ts |    77 +
 .../core/src/utils/crypto/SecretBox.test.ts   |    81 +
 packages/core/src/utils/crypto/SecretBox.ts   |   142 +
 .../src/utils/crypto/account-token.test.ts    |    47 +
 .../core/src/utils/crypto/account-token.ts    |    93 +
 packages/core/src/utils/crypto/jwt-sign.ts    |   131 +
 packages/core/src/utils/deterministic-id.ts   |    65 +
 .../core/src/utils/first-defined-string.ts    |    17 +
 packages/core/src/utils/generate-id.ts        |    96 +
 packages/core/src/utils/index.ts              |     6 +
 packages/core/src/utils/permissions.ts        |    82 +
 packages/core/src/utils/sdk.ts                |     3 +
 packages/core/sst-env.d.ts                    |    10 +
 .../test/domain/analytics/Analytics.test.ts   |    97 +
 .../domain/analytics/filter-compiler.test.ts  |   260 +
 .../test/domain/analytics/insights.test.ts    |    76 +
 .../analytics/resolve-time-range.test.ts      |   187 +
 .../analyticsIngest/AnalyticsIngest.test.ts   |   873 +
 packages/core/test/domain/avatar.test.ts      |   130 +
 .../InternalAnalyticsEvents.test.ts           |   194 +
 .../test/domain/person/IdentityGraph.test.ts  |   500 +
 .../core/test/domain/person/Person.test.ts    |   235 +
 .../integration-harness.integration.test.ts   |    21 +
 packages/core/test/runtime-context-types.ts   |    69 +
 .../AnalyticsService.integration.test.ts      |   451 +
 .../clickhouse-accessor.integration.test.ts   |   926 +
 .../analytics/series-resolver.test.ts         |   364 +
 .../AnalyticsDispatchService.test.ts          |    73 +
 ...lyticsIngestDlqService.integration.test.ts |   444 +
 ...nalyticsJanitorService.integration.test.ts |   399 +
 ...AnalyticsWriterService.integration.test.ts |   512 +
 .../AnalyticsWriterService.test.ts            |   133 +
 .../DlqProducer.integration.test.ts           |   340 +
 .../EventCaptureService.integration.test.ts   |   569 +
 .../EventCaptureService.test.ts               |   350 +
 .../EventProcessorService.integration.test.ts |   780 +
 .../EventProcessorService.test.ts             |   588 +
 .../apiKeys/ApiKeyService.integration.test.ts |   755 +
 .../test/services/apiKeys/api-keys.test.ts    |   179 +
 .../test/services/apiKeys/create-hash.test.ts |   154 +
 ...ocalUserSessionService.integration.test.ts |   591 +
 .../FeatureFlagService.integration.test.ts    |  2151 +++
 .../services/feedback/FeedbackService.test.ts |    64 +
 .../fxRates/FxRateService.integration.test.ts |   615 +
 .../fxRates/exchange-rate-api-fetcher.test.ts |   290 +
 .../InternalFeatureFlagService.test.ts        |    69 +
 .../services/notifications/jwt-sign.test.ts   |   104 +
 .../push-delivery-classification.test.ts      |   184 +
 .../notifications/push-providers.test.ts      |   165 +
 .../OrganizationBillingPort.test.ts           |    13 +
 .../OrganizationMembershipSyncPort.test.ts    |    24 +
 .../OrganizationMembershipWebhookPort.test.ts |    29 +
 .../OrganizationService.integration.test.ts   |   923 +
 ...erConfigurationService.integration.test.ts |   693 +
 ...ProviderProductService.integration.test.ts |  1023 ++
 ...ppStorePaymentProvider.integration.test.ts |  1293 ++
 ...PaymentProviderService.integration.test.ts |   222 +
 ...ProviderServiceQueries.integration.test.ts |  1356 ++
 ...eReconciliationService.integration.test.ts |   362 +
 ...eWebhookHandlerService.integration.test.ts |   166 +
 .../appStore/sdk-context.test.ts              |   321 +
 ...glePlayPaymentProvider.integration.test.ts |   918 +
 ...yWebhookHandlerService.integration.test.ts |   227 +
 .../StripePaymentProvider.integration.test.ts |  1048 ++
 ...PaymentProviderService.integration.test.ts |   197 +
 ...eWebhookHandlerService.integration.test.ts |   580 +
 .../stripe/stripe-test-support.ts             |   564 +
 .../PaywallDeployService.integration.test.ts  |   736 +
 ...PaywallLocationService.integration.test.ts |  1325 ++
 .../services/paywallLocations/helpers.test.ts |   244 +
 .../PaywallService.integration.test.ts        |   593 +
 .../PerkGrantService.integration.test.ts      |   753 +
 .../perks/PerkService.integration.test.ts     |   475 +
 ...dentityMutationService.integration.test.ts |   841 +
 ...ityProjectionPublisher.integration.test.ts |   536 +
 .../PersonIdentityService.integration.test.ts |   806 +
 .../persons/PersonService.integration.test.ts |   620 +
 .../ProductPerkService.integration.test.ts    |   550 +
 .../ProductService.integration.test.ts        |   515 +
 .../test/services/products/helpers.test.ts    |    36 +
 .../ProjectService.integration.test.ts        |   717 +
 ...aseLedgerWorkerService.integration.test.ts |   460 +
 ...chaseProcessingService.integration.test.ts |  1590 ++
 .../purchaseProcessing/helpers.test.ts        |    33 +
 .../purchaseProcessing/result-codec.test.ts   |   229 +
 .../revenue-analytics-mapper.test.ts          |   994 ++
 .../PurchaseService.integration.test.ts       |   264 +
 .../SchemaCacheInvalidationService.test.ts    |    93 +
 .../schema/SchemaService.integration.test.ts  |   779 +
 .../core/test/services/schema/helpers.test.ts |   195 +
 .../sdk/SdkService.integration.test.ts        |   995 ++
 .../test/services/sdk/elevate-auth.test.ts    |   183 +
 .../services/sdk/snapshot-builder.test.ts     |   940 +
 .../test/services/users/UserService.test.ts   |   206 +
 .../test/services/voidql/compiler.test.ts     |   344 +
 .../test/services/voidql/substrate.test.ts    |    50 +
 ...WebhookDeliveryService.integration.test.ts |   608 +
 ...WebhookDispatchService.integration.test.ts |   422 +
 .../WebhookManagerService.integration.test.ts |  1019 ++
 packages/core/test/utils/create-slug.test.ts  |    94 +
 .../core/test/utils/deterministic-id.test.ts  |    60 +
 packages/core/test/utils/generate-id.test.ts  |   114 +
 packages/core/test/utils/permissions.test.ts  |   289 +
 packages/core/test/utils/sdk.test.ts          |    30 +
 packages/core/tsconfig.json                   |    21 +
 packages/core/vitest.unit.mts                 |     9 +
 packages/db/LICENSE.md                        |   661 +
 packages/db/package.json                      |    36 +
 .../20260624151148_init/migration.sql         |   838 +
 .../20260624151148_init/snapshot.json         | 10911 ++++++++++++
 .../migration.sql                             |    32 +
 .../migration.sql                             |    16 +
 .../snapshot.json                             | 11139 ++++++++++++
 .../migration.sql                             |     1 +
 .../snapshot.json                             | 11152 ++++++++++++
 .../migration.sql                             |     1 +
 .../snapshot.json                             | 11165 ++++++++++++
 .../migration.sql                             |    12 +
 .../snapshot.json                             | 11319 ++++++++++++
 .../migration.sql                             |   100 +
 .../snapshot.json                             | 12667 +++++++++++++
 .../20260701083829_experiments/migration.sql  |    53 +
 .../20260701083829_experiments/snapshot.json  | 12003 +++++++++++++
 .../migration.sql                             |    12 +
 .../snapshot.json                             | 12806 +++++++++++++
 .../migration.sql                             |    26 +
 .../snapshot.json                             | 13150 ++++++++++++++
 .../migration.sql                             |    17 +
 .../snapshot.json                             | 14255 +++++++++++++++
 .../migration.sql                             |    18 +
 .../snapshot.json                             | 14514 +++++++++++++++
 .../migration.sql                             |     2 +
 .../snapshot.json                             | 14540 +++++++++++++++
 .../migration.sql                             |     1 +
 .../snapshot.json                             | 14553 +++++++++++++++
 .../migration.sql                             |     8 +
 .../snapshot.json                             | 14647 +++++++++++++++
 .../migration.sql                             |    12 +
 .../snapshot.json                             | 14821 ++++++++++++++++
 packages/db/src/db.ts                         |    87 +
 packages/db/src/index.ts                      |     4 +
 packages/db/src/migrations.ts                 |   152 +
 packages/db/src/relations.ts                  |   255 +
 packages/db/src/schema.ts                     |  2864 +++
 packages/db/src/types.ts                      |   175 +
 .../db/tests/migrations.integration.test.ts   |    81 +
 packages/db/tsconfig.json                     |     5 +
 packages/db/vitest.mts                        |    10 +
 packages/emails/LICENSE.md                    |   661 +
 packages/emails/index.tsx                     |     0
 packages/emails/package.json                  |    29 +
 packages/emails/sst-env.d.ts                  |    10 +
 packages/emails/tsconfig.json                 |    11 +
 packages/mimic-server/src/rpc/errors.ts       |    20 +-
 packages/mimic-server/src/rpc/middleware.ts   |     4 +-
 packages/mimic/package.json                   |     4 +-
 .../src/preview-tree/types.ts                 |     6 +-
 packages/rpc/LICENSE.md                       |   661 +
 packages/rpc/package.json                     |    22 +
 packages/rpc/src/auth.ts                      |    93 +
 packages/rpc/src/errors/AiChat.ts             |    20 +
 packages/rpc/src/errors/ApiKey.ts             |    19 +
 packages/rpc/src/errors/AuditLog.ts           |    14 +
 packages/rpc/src/errors/Experiment.ts         |    41 +
 packages/rpc/src/errors/FeatureFlag.ts        |    35 +
 packages/rpc/src/errors/Feedback.ts           |    13 +
 .../errors/PaymentProviderConfiguration.ts    |    35 +
 .../rpc/src/errors/PaymentProviderProduct.ts  |    25 +
 packages/rpc/src/errors/PaywallAsset.ts       |    20 +
 packages/rpc/src/errors/PaywallDeploy.ts      |    26 +
 packages/rpc/src/errors/PaywallLocation.ts    |    28 +
 packages/rpc/src/errors/PaywallWorkspace.ts   |    22 +
 packages/rpc/src/errors/ProductPerk.ts        |    24 +
 .../errors/PushNotificationConfiguration.ts   |    32 +
 .../rpc/src/errors/PushNotificationSend.ts    |    21 +
 packages/rpc/src/errors/analytics.ts          |    45 +
 packages/rpc/src/errors/common.ts             |    29 +
 packages/rpc/src/errors/index.ts              |    32 +
 packages/rpc/src/errors/organization.ts       |    14 +
 packages/rpc/src/errors/paywall.ts            |    39 +
 packages/rpc/src/errors/perk.ts               |    25 +
 packages/rpc/src/errors/person.ts             |    25 +
 packages/rpc/src/errors/product.ts            |    25 +
 packages/rpc/src/errors/project.ts            |    19 +
 packages/rpc/src/errors/user.ts               |    13 +
 packages/rpc/src/errors/voidql.ts             |    47 +
 packages/rpc/src/errors/webhook.ts            |    30 +
 packages/rpc/src/experimentTreatmentTypes.ts  |   102 +
 packages/rpc/src/groups/AiChatRpcsDef.ts      |   139 +
 packages/rpc/src/groups/AnalyticsRpcsDef.ts   |   275 +
 packages/rpc/src/groups/ApiKeyRpcsDef.ts      |   104 +
 packages/rpc/src/groups/ExperimentRpcsDef.ts  |   236 +
 packages/rpc/src/groups/FeatureFlagRpcsDef.ts |   258 +
 packages/rpc/src/groups/FeedbackRpcsDef.ts    |    38 +
 .../rpc/src/groups/OrganizationRpcsDef.ts     |    69 +
 .../PaymentProviderConfigurationRpcsDef.ts    |    91 +
 .../groups/PaymentProviderProductRpcsDef.ts   |    87 +
 .../rpc/src/groups/PaywallAssetRpcsDef.ts     |    79 +
 .../rpc/src/groups/PaywallComponentRpcsDef.ts |    63 +
 .../rpc/src/groups/PaywallDeployRpcsDef.ts    |    64 +
 .../rpc/src/groups/PaywallLocationRpcsDef.ts  |   144 +
 packages/rpc/src/groups/PaywallRpcsDef.ts     |   147 +
 .../rpc/src/groups/PaywallWorkspaceRpcsDef.ts |    79 +
 packages/rpc/src/groups/PerkRpcsDef.ts        |    49 +
 packages/rpc/src/groups/PersonRpcsDef.ts      |    58 +
 packages/rpc/src/groups/ProductPerkRpcsDef.ts |    52 +
 packages/rpc/src/groups/ProductRpcsDef.ts     |    71 +
 packages/rpc/src/groups/ProjectRpcsDef.ts     |    70 +
 .../PushNotificationConfigurationRpcsDef.ts   |    98 +
 .../src/groups/PushNotificationSendRpcsDef.ts |   106 +
 packages/rpc/src/groups/UserRpcsDef.ts        |    60 +
 packages/rpc/src/groups/VoidQlRpcsDef.ts      |   126 +
 packages/rpc/src/groups/WebhookRpcsDef.ts     |   198 +
 packages/rpc/src/index.ts                     |    86 +
 packages/rpc/src/internalFeatureFlags.ts      |    81 +
 packages/rpc/src/middlewares.ts               |    18 +
 packages/rpc/sst-env.d.ts                     |    10 +
 packages/rpc/tsconfig.json                    |     9 +
 packages/shared/src/admin.ts                  |     2 +-
 packages/shared/src/analytics.ts              |     2 +-
 packages/shared/src/api-key.ts                |     2 +-
 packages/shared/src/app-store.ts              |     2 +-
 packages/shared/src/billing.ts                |     2 +-
 packages/shared/src/customer.ts               |     2 +-
 packages/shared/src/deploy-changeset.ts       |     2 +-
 packages/shared/src/errors.ts                 |     2 +-
 packages/shared/src/google-play.ts            |     2 +-
 packages/shared/src/organization.ts           |     2 +-
 .../src/payment-provider-configuration.ts     |     2 +-
 .../shared/src/payment-provider-product.ts    |     2 +-
 packages/shared/src/paywall.ts                |     2 +-
 packages/shared/src/perk-grant.ts             |     2 +-
 packages/shared/src/perk.ts                   |     2 +-
 packages/shared/src/product-perk.ts           |     2 +-
 packages/shared/src/product.ts                |     2 +-
 packages/shared/src/project.ts                |     2 +-
 packages/shared/src/sdk.ts                    |     2 +-
 packages/shared/src/user.ts                   |     2 +-
 packages/shared/src/webhook.ts                |     2 +-
 pnpm-lock.yaml                                | 11849 ++++++++++--
 pnpm-workspace.yaml                           |   173 +-
 scripts/db-generate.mjs                       |    17 +
 scripts/db-migrate-local.mjs                  |   194 +
 selfhost/.env.example                         |    54 +
 selfhost/LICENSE.md                           |   661 +
 selfhost/README.md                            |    96 +
 selfhost/docker-compose.yml                   |   219 +
 selfhost/entry/Dockerfile                     |    37 +
 selfhost/entry/package.json                   |    57 +
 selfhost/entry/src/backend/Analytics.ts       |   295 +
 .../entry/src/backend/AuthTokenVerifier.ts    |    55 +
 selfhost/entry/src/backend/Backend.ts         |    60 +
 selfhost/entry/src/backend/Background.ts      |   123 +
 selfhost/entry/src/backend/Clickhouse.ts      |   143 +
 .../src/backend/IdentityCompletionWorkflow.ts |   195 +
 selfhost/entry/src/backend/MimicHost.ts       |   249 +
 selfhost/entry/src/backend/ObjectStores.ts    |    95 +
 .../src/backend/PaymentProviderWorkflows.ts   |   117 +
 .../src/backend/PaymentWorkflowLayers.ts      |    90 +
 .../entry/src/backend/ProjectSchemaCache.ts   |    31 +
 selfhost/entry/src/backend/Push.ts            |   118 +
 selfhost/entry/src/backend/Thumbnails.ts      |   158 +
 .../src/backend/WebhookDeliveryWorkflow.ts    |    92 +
 .../entry/src/backend/WorkflowDefinitions.ts  |    90 +
 selfhost/entry/src/backend/WorkflowPorts.ts   |   197 +
 selfhost/entry/src/backend/Workos.ts          |    76 +
 selfhost/entry/src/compiler/CompilerClient.ts |    49 +
 selfhost/entry/src/compiler/CompilerCore.ts   |   123 +
 .../entry/src/compiler/CompilerProtocol.ts    |    29 +
 selfhost/entry/src/compiler/main.ts           |   101 +
 selfhost/entry/src/config.ts                  |   186 +
 selfhost/entry/src/index.ts                   |    12 +
 selfhost/entry/src/main.ts                    |   258 +
 selfhost/entry/src/migrate.ts                 |    22 +
 .../entry/src/mimic/MimicDocumentIdleQueue.ts |    24 +
 selfhost/entry/src/mimic/MimicNode.ts         |    60 +
 .../entry/src/mimic/MimicNodeWebSocket.ts     |   393 +
 selfhost/entry/src/mimic/PgControlStore.ts    |   309 +
 selfhost/entry/src/mimic/config.ts            |    40 +
 selfhost/entry/src/mimic/main.ts              |    79 +
 selfhost/entry/src/release-smoke.ts           |   106 +
 selfhost/entry/src/www/Www.ts                 |   166 +
 .../entry/tests/Analytics.integration.test.ts |   105 +
 selfhost/entry/tests/BackendAdapters.test.ts  |   126 +
 .../tests/Background.integration.test.ts      |    68 +
 .../tests/Clickhouse.integration.test.ts      |   178 +
 selfhost/entry/tests/Compiler.test.ts         |    40 +
 .../tests/CompilerClient.integration.test.ts  |    33 +
 .../entry/tests/MimicDocumentIdle.test.ts     |   111 +
 .../entry/tests/MimicNode.integration.test.ts |   190 +
 .../tests/PaywallRelease.integration.test.ts  |   155 +
 selfhost/entry/tests/Push.integration.test.ts |    62 +
 .../tests/ThumbnailQueue.integration.test.ts  |    62 +
 selfhost/entry/tests/Thumbnails.test.ts       |    54 +
 .../WorkflowComposition.integration.test.ts   |   149 +
 selfhost/entry/tests/Www.test.ts              |    78 +
 selfhost/entry/tsconfig.json                  |    12 +
 selfhost/entry/vitest.mts                     |    10 +
 selfhost/platform-node/package.json           |    42 +
 selfhost/platform-node/src/CronScheduler.ts   |   249 +
 selfhost/platform-node/src/DurableEntity.ts   |   256 +
 selfhost/platform-node/src/KeyValueStore.ts   |   252 +
 selfhost/platform-node/src/Mailer.ts          |   144 +
 .../platform-node/src/MemoryDurableEntity.ts  |    73 +
 .../src/NodeDurableEntitySession.ts           |    36 +
 selfhost/platform-node/src/ObjectStore.ts     |   142 +
 .../platform-node/src/PgWorkflowEngine.ts     |   710 +
 selfhost/platform-node/src/PlatformRuntime.ts |     6 +
 selfhost/platform-node/src/Postgres.ts        |    24 +
 selfhost/platform-node/src/Queue.ts           |   342 +
 selfhost/platform-node/src/Screenshot.ts      |   146 +
 selfhost/platform-node/src/Workflow.ts        |   233 +
 selfhost/platform-node/src/index.ts           |    28 +
 .../ChromiumScreenshot.integration.test.ts    |    92 +
 .../tests/MemoryDurableEntity.test.ts         |    73 +
 .../tests/NodeDurableEntitySession.test.ts    |    27 +
 .../tests/PgCronScheduler.integration.test.ts |   215 +
 .../tests/PgDurableEntity.integration.test.ts |   127 +
 .../tests/PgKeyValueStore.integration.test.ts |   140 +
 .../tests/PgQueue.integration.test.ts         |   200 +
 .../PgWorkflowRunner.integration.test.ts      |   217 +
 .../tests/S3ObjectStore.integration.test.ts   |    83 +
 .../tests/SmtpMailer.integration.test.ts      |   134 +
 selfhost/platform-node/tsconfig.json          |    12 +
 selfhost/platform-node/vitest.mts             |    10 +
 selfhost/release-smoke.mts                    |   404 +
 selfhost/smoke.mts                            |   146 +
 1639 files changed, 463986 insertions(+), 1820 deletions(-)
 create mode 100644 .dockerignore
 create mode 100644 .github/workflows/selfhost.yml
 create mode 100644 apps/backend/LICENSE.md
 create mode 100644 apps/backend/package.json
 create mode 100644 apps/backend/src/ApiMiddlewares.ts
 create mode 100644 apps/backend/src/AuthSessionResolver.ts
 create mode 100644 apps/backend/src/BackendApp.ts
 create mode 100644 apps/backend/src/BackendRpcGroups.test.ts
 create mode 100644 apps/backend/src/BackendRpcGroups.ts
 create mode 100644 apps/backend/src/PaywallSnapshotHtmlRenderer.test.ts
 create mode 100644 apps/backend/src/PaywallSnapshotHtmlRenderer.ts
 create mode 100644 apps/backend/src/RpcMiddlewares.ts
 create mode 100644 apps/backend/src/Telemetry.test.ts
 create mode 100644 apps/backend/src/Telemetry.ts
 create mode 100644 apps/backend/src/ai/VoidhashAiService.ts
 create mode 100644 apps/backend/src/ai/skills/paywall-authoring.test.ts
 create mode 100644 apps/backend/src/ai/skills/paywall-authoring.ts
 create mode 100644 apps/backend/src/ai/surfaces.test.ts
 create mode 100644 apps/backend/src/ai/surfaces.ts
 create mode 100644 apps/backend/src/ai/tools.test.ts
 create mode 100644 apps/backend/src/ai/workspace-tools.ts
 create mode 100644 apps/backend/src/mcp/dispatch.test.ts
 create mode 100644 apps/backend/src/mcp/protocol.test.ts
 create mode 100644 apps/backend/src/mcp/protocol.ts
 create mode 100644 apps/backend/src/mcp/tool-manifest.test.ts
 create mode 100644 apps/backend/src/mcp/tool-manifest.ts
 create mode 100644 apps/backend/src/routes/ai/chat.ts
 create mode 100644 apps/backend/src/routes/event-capture.ts
 create mode 100644 apps/backend/src/routes/mcp.ts
 create mode 100644 apps/backend/src/routes/paywall-serving.test.ts
 create mode 100644 apps/backend/src/routes/paywall-serving.ts
 create mode 100644 apps/backend/src/routes/public-file-serving.test.ts
 create mode 100644 apps/backend/src/routes/public-file-serving.ts
 create mode 100644 apps/backend/src/routes/v1/api-keys.ts
 create mode 100644 apps/backend/src/routes/v1/auth.ts
 create mode 100644 apps/backend/src/routes/v1/notifications.ts
 create mode 100644 apps/backend/src/routes/v1/organizations.ts
 create mode 100644 apps/backend/src/routes/v1/payment-provider-configurations.ts
 create mode 100644 apps/backend/src/routes/v1/payment-provider-products.ts
 create mode 100644 apps/backend/src/routes/v1/paywall-deploys.ts
 create mode 100644 apps/backend/src/routes/v1/paywall-locations.ts
 create mode 100644 apps/backend/src/routes/v1/perks.ts
 create mode 100644 apps/backend/src/routes/v1/persons.ts
 create mode 100644 apps/backend/src/routes/v1/product-perks.ts
 create mode 100644 apps/backend/src/routes/v1/products.ts
 create mode 100644 apps/backend/src/routes/v1/projects.ts
 create mode 100644 apps/backend/src/routes/v1/schema.ts
 create mode 100644 apps/backend/src/routes/v1/sdk.ts
 create mode 100644 apps/backend/src/routes/v1/users.ts
 create mode 100644 apps/backend/src/routes/v1/webhooks.ts
 create mode 100644 apps/backend/src/routes/webhook-endpoints/apple-server-to-server.ts
 create mode 100644 apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts
 create mode 100644 apps/backend/src/routes/webhook-endpoints/stripe.ts
 create mode 100644 apps/backend/src/routes/webhooks/workos.ts
 create mode 100644 apps/backend/src/rpc-smoke.integration.test.ts
 create mode 100644 apps/backend/src/rpcs/ai-chat-rpcs.test.ts
 create mode 100644 apps/backend/src/rpcs/ai-chat-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/analytics-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/api-key-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/experiment-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/feature-flag-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/feedback-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/organization-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/payment-provider-configuration-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/payment-provider-product-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/paywall-asset-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/paywall-component-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/paywall-deploy-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/paywall-location-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/paywall-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts
 create mode 100644 apps/backend/src/rpcs/paywall-workspace-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/perk-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/person-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/product-perk-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/product-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/project-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/push-notification-configuration-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/push-notification-send-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/user-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/voidql-rpcs.ts
 create mode 100644 apps/backend/src/rpcs/webhook-rpcs.ts
 create mode 100644 apps/backend/src/testing/BackendTestConnections.ts
 create mode 100644 apps/backend/src/testing/TestLayers.ts
 create mode 100644 apps/backend/src/testing/TestRpcAuth.ts
 create mode 100644 apps/backend/src/testing/provided-context.d.ts
 create mode 100644 apps/backend/src/testing/rpc-smoke-cases.ts
 create mode 100644 apps/backend/src/testing/smoke-ids.ts
 create mode 100644 apps/backend/src/testing/smoke-seed.ts
 create mode 100644 apps/backend/sst-env.d.ts
 create mode 100644 apps/backend/tsconfig.json
 create mode 100644 apps/backend/vitest.unit.mts
 create mode 100644 apps/mimic-db/.env.example
 create mode 100644 apps/mimic-db/.gitignore
 create mode 100644 apps/mimic-db/LICENSE.md
 create mode 100644 apps/mimic-db/REWRITE.md
 create mode 100644 apps/mimic-db/package.json
 create mode 100644 apps/mimic-db/src/api/handlers/collections.ts
 create mode 100644 apps/mimic-db/src/api/handlers/databases.ts
 create mode 100644 apps/mimic-db/src/api/handlers/document-auth.ts
 create mode 100644 apps/mimic-db/src/api/handlers/documents.ts
 create mode 100644 apps/mimic-db/src/api/handlers/grants.ts
 create mode 100644 apps/mimic-db/src/api/handlers/index.ts
 create mode 100644 apps/mimic-db/src/api/handlers/migrations.ts
 create mode 100644 apps/mimic-db/src/api/handlers/users.ts
 create mode 100644 apps/mimic-db/src/api/middleware/auth.ts
 create mode 100644 apps/mimic-db/src/app/hostService.ts
 create mode 100644 apps/mimic-db/src/config.ts
 create mode 100644 apps/mimic-db/src/core/control-engine.ts
 create mode 100644 apps/mimic-db/src/core/document-engine.ts
 create mode 100644 apps/mimic-db/src/core/document-store-factory.ts
 create mode 100644 apps/mimic-db/src/core/ids.ts
 create mode 100644 apps/mimic-db/src/core/local-entity-host.ts
 create mode 100644 apps/mimic-db/src/core/local-host-service.ts
 create mode 100644 apps/mimic-db/src/core/memory-store.ts
 create mode 100644 apps/mimic-db/src/core/migration-executor.ts
 create mode 100644 apps/mimic-db/src/core/pg-store.ts
 create mode 100644 apps/mimic-db/src/core/schema-provider.ts
 create mode 100644 apps/mimic-db/src/core/store.ts
 create mode 100644 apps/mimic-db/src/document/schema.ts
 create mode 100644 apps/mimic-db/src/document/snapshot.ts
 create mode 100644 apps/mimic-db/src/document/transaction.ts
 create mode 100644 apps/mimic-db/src/entrypoints/standalone/main.ts
 create mode 100644 apps/mimic-db/src/http/rpc-app.ts
 create mode 100644 apps/mimic-db/src/index.ts
 create mode 100644 apps/mimic-db/src/worker/durable-host-service.ts
 create mode 100644 apps/mimic-db/src/ws/document-session.ts
 create mode 100644 apps/mimic-db/src/ws/idle-notify.ts
 create mode 100644 apps/mimic-db/src/ws/messages.ts
 create mode 100644 apps/mimic-db/src/ws/protocol.ts
 create mode 100644 apps/mimic-db/src/ws/session-registry.ts
 create mode 100644 apps/mimic-db/tests/durable-entity-host.test.ts
 create mode 100644 apps/mimic-db/tests/helpers.ts
 create mode 100644 apps/mimic-db/tests/integration/host-flow.test.ts
 create mode 100644 apps/mimic-db/tests/migrate-with-mimic-cli.test.ts
 create mode 100644 apps/mimic-db/tests/unit/document-auth.test.ts
 create mode 100644 apps/mimic-db/tests/unit/document-session.test.ts
 create mode 100644 apps/mimic-db/tests/unit/idle-notify.test.ts
 create mode 100644 apps/mimic-db/tests/unit/migration-executor.test.ts
 create mode 100644 apps/mimic-db/tests/unit/pg-store.test.ts
 create mode 100644 apps/mimic-db/tests/unit/prepare-document-heal.test.ts
 create mode 100644 apps/mimic-db/tests/unit/session-registry.test.ts
 create mode 100644 apps/mimic-db/tsconfig.json
 create mode 100644 apps/mimic-db/vitest.mts
 create mode 100644 apps/www/.env.example
 create mode 100644 apps/www/.gitignore
 create mode 100644 apps/www/LICENSE.md
 create mode 100644 apps/www/README.md
 create mode 100644 apps/www/design.generated.ts
 create mode 100644 apps/www/docs.generated.ts
 create mode 100644 apps/www/package.json
 create mode 100644 apps/www/public/apple-icon.png
 create mode 100644 apps/www/public/auth/apple-icon.png
 create mode 100644 apps/www/public/auth/favicon.ico
 create mode 100644 apps/www/public/bg.jpg
 create mode 100644 apps/www/public/chiron.svg
 create mode 100644 apps/www/public/design/apple-icon.png
 create mode 100644 apps/www/public/design/favicon.ico
 create mode 100644 apps/www/public/docs/apple-icon.png
 create mode 100644 apps/www/public/docs/favicon.ico
 create mode 100644 apps/www/public/favicon.ico
 create mode 100644 apps/www/public/github.svg
 create mode 100644 apps/www/public/logo.svg
 create mode 100644 apps/www/public/overwatch/apple-icon.png
 create mode 100644 apps/www/public/overwatch/favicon.ico
 create mode 100644 apps/www/public/studio/apple-icon.png
 create mode 100644 apps/www/public/studio/favicon.ico
 create mode 100644 apps/www/public/studio/file.svg
 create mode 100644 apps/www/public/studio/globe.svg
 create mode 100644 apps/www/public/studio/icon0.svg
 create mode 100644 apps/www/public/studio/icon1.png
 create mode 100644 apps/www/public/studio/manifest.json
 create mode 100644 apps/www/public/studio/next.svg
 create mode 100644 apps/www/public/studio/web-app-manifest-192x192.png
 create mode 100644 apps/www/public/studio/web-app-manifest-512x512.png
 create mode 100644 apps/www/public/studio/window.svg
 create mode 100644 apps/www/public/web-app-manifest-192x192.png
 create mode 100644 apps/www/public/web-app-manifest-512x512.png
 create mode 100644 apps/www/public/x-com.svg
 create mode 100644 apps/www/src/app/apple-icon.png
 create mode 100644 apps/www/src/app/favicon.ico
 create mode 100644 apps/www/src/app/icon0.svg
 create mode 100644 apps/www/src/app/icon1.png
 create mode 100644 apps/www/src/app/manifest.json
 create mode 100644 apps/www/src/components/auth-shader.tsx
 create mode 100644 apps/www/src/components/default-catch-boundary.tsx
 create mode 100644 apps/www/src/components/grain-gradient.tsx
 create mode 100644 apps/www/src/components/not-found.tsx
 create mode 100644 apps/www/src/components/voidhash-gradient-background.tsx
 create mode 100644 apps/www/src/components/voidhash-gradient-canvas.tsx
 create mode 100644 apps/www/src/components/voidhash-gradient-controls.tsx
 create mode 100644 apps/www/src/components/voidhash-gradient-settings.ts
 create mode 100644 apps/www/src/features/auth/components/auth-layout.tsx
 create mode 100644 apps/www/src/features/auth/globals.css
 create mode 100644 apps/www/src/features/auth/lib/auth-api.ts
 create mode 100644 apps/www/src/features/auth/lib/email-verification-storage.ts
 create mode 100644 apps/www/src/features/auth/lib/provision-user.ts
 create mode 100644 apps/www/src/features/auth/lib/tanstack-query/index.ts
 create mode 100644 apps/www/src/features/auth/lib/tanstack-query/query-keys.ts
 create mode 100644 apps/www/src/features/auth/lib/tanstack-query/user-api-keys.ts
 create mode 100644 apps/www/src/features/auth/lib/validation.ts
 create mode 100644 apps/www/src/features/auth/lib/workos-user-management.server.test.ts
 create mode 100644 apps/www/src/features/auth/lib/workos-user-management.server.ts
 create mode 100644 apps/www/src/features/auth/lib/workos.ts
 create mode 100644 apps/www/src/features/auth/middleware/auth.ts
 create mode 100644 apps/www/src/features/design/components/docs/component-registry.tsx
 create mode 100644 apps/www/src/features/design/components/docs/preview.tsx
 create mode 100644 apps/www/src/features/design/components/layout/docs.tsx
 create mode 100644 apps/www/src/features/design/components/layout/page.tsx
 create mode 100644 apps/www/src/features/design/components/nav-bar.tsx
 create mode 100644 apps/www/src/features/design/components/theme-toggle.tsx
 create mode 100644 apps/www/src/features/design/content/docs/components/accordion.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/alert-dialog.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/alert.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/avatar.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/badge.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/breadcrumb.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/button.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/calendar.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/card.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/carousel.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/chart.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/checkbox.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/collapsible.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/command.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/context-menu.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/dialog.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/drawer.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/dropdown-menu.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/dropzone.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/form.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/hover-card.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/input-otp.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/input.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/label.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/menubar.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/meta.yaml
 create mode 100644 apps/www/src/features/design/content/docs/components/navigation-menu.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/pagination.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/popover.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/progress.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/radio-group.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/resizable.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/scroll-area.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/select.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/separator.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/sheet.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/sidebar.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/skeleton.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/slider.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/sonner.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/switch.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/table.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/tabs.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/textarea.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/toggle-group.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/toggle.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/tooltip.mdx
 create mode 100644 apps/www/src/features/design/content/docs/components/underline-tabs.mdx
 create mode 100644 apps/www/src/features/design/content/docs/introduction.mdx
 create mode 100644 apps/www/src/features/design/content/docs/meta.yaml
 create mode 100644 apps/www/src/features/design/lib/basepath.ts
 create mode 100644 apps/www/src/features/design/lib/cn.ts
 create mode 100644 apps/www/src/features/design/lib/layout.shared.tsx
 create mode 100644 apps/www/src/features/design/lib/source.ts
 create mode 100644 apps/www/src/features/design/source.config.ts
 create mode 100644 apps/www/src/features/design/source.generated.ts
 create mode 100644 apps/www/src/features/design/styles/globals.css
 create mode 100644 apps/www/src/features/docs/components/layout/docs.tsx
 create mode 100644 apps/www/src/features/docs/components/layout/page.tsx
 create mode 100644 apps/www/src/features/docs/components/nav-bar.tsx
 create mode 100644 apps/www/src/features/docs/components/theme-toggle.tsx
 create mode 100644 apps/www/src/features/docs/components/where-to-find-guide.tsx
 create mode 100644 apps/www/src/features/docs/content/docs/basic-usage.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/concepts/meta.yaml
 create mode 100644 apps/www/src/features/docs/content/docs/concepts/perks.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/concepts/products.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-apple-id.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-store-connect-api.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-server-notifications.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-small-business-program.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/bundle-id.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/in-app-purchase-key.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/meta.yaml
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-subscription-offer-key.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-testing-certificate.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/installation.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/introduction.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/meta.yaml
 create mode 100644 apps/www/src/features/docs/lib/basepath.ts
 create mode 100644 apps/www/src/features/docs/lib/cn.ts
 create mode 100644 apps/www/src/features/docs/lib/guide-content.tsx
 create mode 100644 apps/www/src/features/docs/lib/layout.shared.tsx
 create mode 100644 apps/www/src/features/docs/lib/mdx-components.tsx
 create mode 100644 apps/www/src/features/docs/lib/source.ts
 create mode 100644 apps/www/src/features/docs/source.config.ts
 create mode 100644 apps/www/src/features/docs/source.generated.ts
 create mode 100644 apps/www/src/features/docs/styles/globals.css
 create mode 100644 apps/www/src/features/fumadocs-config.ts
 create mode 100644 apps/www/src/features/studio/account/user-avatar.tsx
 create mode 100644 apps/www/src/features/studio/account/user-settings-modal.tsx
 create mode 100644 apps/www/src/features/studio/ai/attachments.ts
 create mode 100644 apps/www/src/features/studio/ai/components/chat-history-menu.tsx
 create mode 100644 apps/www/src/features/studio/ai/components/chat-shell.tsx
 create mode 100644 apps/www/src/features/studio/ai/components/prompt-input.tsx
 create mode 100644 apps/www/src/features/studio/ai/components/tool-call.tsx
 create mode 100644 apps/www/src/features/studio/ai/contract.ts
 create mode 100644 apps/www/src/features/studio/ai/index.ts
 create mode 100644 apps/www/src/features/studio/ai/transport.test.ts
 create mode 100644 apps/www/src/features/studio/ai/transport.ts
 create mode 100644 apps/www/src/features/studio/ai/use-surface-chat.ts
 create mode 100644 apps/www/src/features/studio/analytics/analytics-scaffold-page.tsx
 create mode 100644 apps/www/src/features/studio/analytics/overview/query-builders.ts
 create mode 100644 apps/www/src/features/studio/analytics/overview/result-mappers.ts
 create mode 100644 apps/www/src/features/studio/analytics/project-analytics-page.tsx
 create mode 100644 apps/www/src/features/studio/api-keys/api-key-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/api-keys/api-key-record.tsx
 create mode 100644 apps/www/src/features/studio/api-keys/create-secret-key-modal-button.tsx
 create mode 100644 apps/www/src/features/studio/api-keys/create-secret-key-modal.tsx
 create mode 100644 apps/www/src/features/studio/api-keys/secret-key-reveal-modal.tsx
 create mode 100644 apps/www/src/features/studio/components/auth-context.tsx
 create mode 100644 apps/www/src/features/studio/components/avatar-uploader.tsx
 create mode 100644 apps/www/src/features/studio/components/default-cache-boundary.tsx
 create mode 100644 apps/www/src/features/studio/components/not-found.tsx
 create mode 100644 apps/www/src/features/studio/components/relative-time.tsx
 create mode 100644 apps/www/src/features/studio/development-paywall/development-paywall-page.tsx
 create mode 100644 apps/www/src/features/studio/enterprise/enterprise-audit-log-slot.tsx
 create mode 100644 apps/www/src/features/studio/enterprise/runtime-capabilities.ts
 create mode 100644 apps/www/src/features/studio/experiments/create-experiment-modal.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiment-lifecycle-controls.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiment-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiment-record.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiment-settings-form.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiment-setup-panel.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiment-status-badge.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiment-status.ts
 create mode 100644 apps/www/src/features/studio/experiments/experiment-treatments-panel.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/create-flag-modal.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-general-form.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-record.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-type-badge.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-type.ts
 create mode 100644 apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/person-flag-overrides-panel.tsx
 create mode 100644 apps/www/src/features/studio/feedback/feedback-button.tsx
 create mode 100644 apps/www/src/features/studio/lib/basepath.ts
 create mode 100644 apps/www/src/features/studio/lib/effect-query.ts
 create mode 100644 apps/www/src/features/studio/lib/env.ts
 create mode 100644 apps/www/src/features/studio/lib/nextjs.ts
 create mode 100644 apps/www/src/features/studio/lib/payment-providers/app-store.ts
 create mode 100644 apps/www/src/features/studio/lib/payment-providers/core.ts
 create mode 100644 apps/www/src/features/studio/lib/payment-providers/google-play.ts
 create mode 100644 apps/www/src/features/studio/lib/payment-providers/payment-providers.ts
 create mode 100644 apps/www/src/features/studio/lib/payment-providers/stripe.ts
 create mode 100644 apps/www/src/features/studio/lib/payment-providers/types.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/analytics.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/api-keys.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/experiments.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/feedback.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/index.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/notifications.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/organizations.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/payment-provider-configurations.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/payment-provider-products.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/paywall-assets.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/paywall-components.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/paywall-deploys.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/perks.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/persons.test.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/persons.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/product-perks.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/products.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/projects.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/users.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/voidql.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/webhooks.ts
 create mode 100644 apps/www/src/features/studio/lib/types.ts
 create mode 100644 apps/www/src/features/studio/lib/useInternalFeatureFlag.ts
 create mode 100644 apps/www/src/features/studio/lib/utils/current-user.ts
 create mode 100644 apps/www/src/features/studio/lib/zod-error.ts
 create mode 100644 apps/www/src/features/studio/organizations/create-organization-modal.tsx
 create mode 100644 apps/www/src/features/studio/organizations/delete-organization-modal.tsx
 create mode 100644 apps/www/src/features/studio/organizations/overview/date-range-filter.tsx
 create mode 100644 apps/www/src/features/studio/organizations/overview/format.ts
 create mode 100644 apps/www/src/features/studio/organizations/overview/metric-card.tsx
 create mode 100644 apps/www/src/features/studio/organizations/overview/organization-overview.tsx
 create mode 100644 apps/www/src/features/studio/organizations/overview/overview-section.tsx
 create mode 100644 apps/www/src/features/studio/organizations/overview/today-chart.tsx
 create mode 100644 apps/www/src/features/studio/organizations/projects/empty-state.tsx
 create mode 100644 apps/www/src/features/studio/organizations/projects/projects-list.tsx
 create mode 100644 apps/www/src/features/studio/organizations/projects/projects-page.tsx
 create mode 100644 apps/www/src/features/studio/organizations/projects/projects-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/organizations/settings/data-table.tsx
 create mode 100644 apps/www/src/features/studio/organizations/settings/general/settings-general-layout.tsx
 create mode 100644 apps/www/src/features/studio/organizations/settings/general/team-avatar.tsx
 create mode 100644 apps/www/src/features/studio/organizations/settings/general/team-delete.tsx
 create mode 100644 apps/www/src/features/studio/organizations/settings/general/team-name.tsx
 create mode 100644 apps/www/src/features/studio/organizations/settings/members/columns.tsx
 create mode 100644 apps/www/src/features/studio/organizations/settings/pending-invites/columns.tsx
 create mode 100644 apps/www/src/features/studio/overview/overview-page.tsx
 create mode 100644 apps/www/src/features/studio/overview/today-revenue-chart.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/active-subs-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/active-trials-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/arppu-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/arpu-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/arr-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/mrr-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/new-subs-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/new-trials-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/new-users-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/renewal-canceled-subs-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/overview/widgets/revenue-chart-widget.tsx
 create mode 100644 apps/www/src/features/studio/paywall-assets/asset-library.tsx
 create mode 100644 apps/www/src/features/studio/paywall-assets/asset-picker-dialog.tsx
 create mode 100644 apps/www/src/features/studio/paywall-assets/asset-tile.tsx
 create mode 100644 apps/www/src/features/studio/paywall-assets/rename-asset-dialog.tsx
 create mode 100644 apps/www/src/features/studio/paywall-assets/upload-image.ts
 create mode 100644 apps/www/src/features/studio/paywall-deploys/activate-paywall-release-button.tsx
 create mode 100644 apps/www/src/features/studio/paywall-deploys/paywall-deploy-record.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/create-paywall-location-modal.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/create-paywall-button.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/create-paywall-card.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/create-paywall-modal.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/bounding-box-manager.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/layouts/flex-layout-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/path-node-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/screen-node-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/scrollview-node-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/shape-node-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/text-node-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/view-node-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-tree-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/overlay/cursors-overlay.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/overlay/gradient-overlay.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/overlay/selection-overlay.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/viewport.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-context.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-pane.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-tabs.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/compile-pipeline.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/has-panel-threading.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/hash.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/monaco-env.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/monaco-module-resolution.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-document.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-host.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/code-mode/scaffold.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/component-preview/preview-tree-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/component-preview/use-preview-tree.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/designer-context-menu.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/crdt-variable-selector.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/index.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/operand-editor.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/predicate-editor.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/types.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/use-dnf-editor.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/use-editing-state.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/use-pending-state.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/state-manager/utils.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/checkerboard-background.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-picker-content.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-swatch.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-utils.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/eyedropper-button.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/hue-slider.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/opacity-slider.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/saturation-brightness-picker.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/gradient-stop-bar.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/panel-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/popover-header.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/select-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/text-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/ui/zoom-controls.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/inputs/number-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/inputs/product-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/inputs/string-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/literal-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/types.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/utils.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/variable-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/variable-selector.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/components/variables/variable-type-renderers.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/constants.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/actions-inspector.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/dev-layers-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/json-tree-viewer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/mimic-preview-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/node-details-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/presence-inspector.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/snapshot-inspector.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/global.d.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-code-component-compilation.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-component-manifest.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-component-node-warnings.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-context-menu-context.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-cursor-updater.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-designer-draft.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-keyboard-shortcuts.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-localizable-props.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-code-target.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-component-catalog.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor-field.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/action-payload-source-hint.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/index.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/purchase-product-payload.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/set-variable-payload.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/chrome.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/checkerboard-background.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-picker-content.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-swatch.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-utils.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/eyedropper-button.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/hue-slider.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/opacity-slider.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/saturation-brightness-picker.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/gradient-stop-bar.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/image-field.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/kit.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/panel-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/reset-affordance.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/select-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/text-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-kit/variable-binding-field.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/icon-registry.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-host-services.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/transport.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panel-runtime/use-panel-session.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/add-component-dialog.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/constants.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/index.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-components-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-file-tree.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/left-panel/components-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/locale-switcher.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/node-type-icons.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/components/override-reset-affordance.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.test.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-host-services-host.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-warnings.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/seed-absolute-position.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-targets-core.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/use-style-override-reset-context.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/types.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/paywall-designer.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/active-locale-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/awareness-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/canvas-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/code-component-editor-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/component-catalog-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/component-preview-state-selection-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/core/index.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/debug-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/dev-mode-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/drag-select-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/border-radius-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/border-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-gradient-writes.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-render.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/layout-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/path-fill-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/path-stroke-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/text-fill-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/typography-style-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/layer-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/mode-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/node-resolver.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/component-node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/path-node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/screen-node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/shape-node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/text-node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/state-override-selection-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/tools-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/action-registry.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/clipboard-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/create-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/delete-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/index.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/selection-actions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/index.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/context-menu/types.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/designer-commander.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/testing/offline-document.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/bounding-box.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/code-component-writes.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/code-components.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-children.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-children.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/computed-dimensions.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/document-root.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/id.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/localization.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/localization.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/node-proxies.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/node-type-helpers.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/nodes.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/normalize-flex-sizing.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/replay.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/selection-level.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/tree.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/tree.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/translation-mode/locale-rail.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/translation-mode/translation-table.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/types.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/utils/locale-display.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/utils/platform.ts
 create mode 100644 apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/paywall-card.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/paywall-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/paywall-record.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/rename-paywall-dialog.tsx
 create mode 100644 apps/www/src/features/studio/perks/create-perk-modal-button.tsx
 create mode 100644 apps/www/src/features/studio/perks/create-perk-modal.tsx
 create mode 100644 apps/www/src/features/studio/perks/perk-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/perks/perk-record.tsx
 create mode 100644 apps/www/src/features/studio/perks/perks-page-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/perks/perks-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/perks/perks-page.tsx
 create mode 100644 apps/www/src/features/studio/persons/create-person-button.tsx
 create mode 100644 apps/www/src/features/studio/persons/create-person-modal.tsx
 create mode 100644 apps/www/src/features/studio/persons/persons-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/persons/persons-page.tsx
 create mode 100644 apps/www/src/features/studio/persons/persons-table/columns.tsx
 create mode 100644 apps/www/src/features/studio/persons/persons-table/data-table.tsx
 create mode 100644 apps/www/src/features/studio/persons/persons-table/index.tsx
 create mode 100644 apps/www/src/features/studio/persons/persons-table/skeleton.tsx
 create mode 100644 apps/www/src/features/studio/products/create-product-modal-button.tsx
 create mode 100644 apps/www/src/features/studio/products/create-product-modal.tsx
 create mode 100644 apps/www/src/features/studio/products/edit-product-modal.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-add-perk-button.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-add-product-button.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-body.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-pane.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-payment-providers-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-perks-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-product-perk-record.tsx
 create mode 100644 apps/www/src/features/studio/products/product-detail-provider-product-record.tsx
 create mode 100644 apps/www/src/features/studio/products/product-record-configuration-state-indicator.tsx
 create mode 100644 apps/www/src/features/studio/products/product-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/products/product-record.tsx
 create mode 100644 apps/www/src/features/studio/products/products-page-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/products/products-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/products/products-page.tsx
 create mode 100644 apps/www/src/features/studio/products/provider-product-sheet.tsx
 create mode 100644 apps/www/src/features/studio/projects/create-project-modal.tsx
 create mode 100644 apps/www/src/features/studio/projects/delete-project-modal.tsx
 create mode 100644 apps/www/src/features/studio/projects/overview/project-overview.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/general/project-avatar.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/general/project-delete.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/general/project-name.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/general/project-settings-general-layout.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/general/project-settings-general-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/notifications/components/notification-provider-detail-page-chrome.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/notifications/notification-provider-detail-router.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/notifications/notification-providers.ts
 create mode 100644 apps/www/src/features/studio/projects/settings/notifications/providers/apns-notification-provider-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/notifications/providers/fcm-notification-provider-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/notifications/setup-notification-provider-button.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/notifications/use-notification-configuration-mutations.ts
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/p8-private-key-field.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-copyable-value.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-action-bar.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-form-layout.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-header.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-page-chrome.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-section.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-tab-nav.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-form-fields.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-text-file-field.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-validation.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/logos/apple-logo.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/logos/google-play-logo.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/logos/stripe-logo.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-router.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-logo.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-new-store-dropdown.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-config.ts
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-sections.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-config.ts
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-sections.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-config.ts
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-page.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-sections.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/setup-payment-provider-button.tsx
 create mode 100644 apps/www/src/features/studio/projects/settings/payment-providers/use-payment-provider-configuration-mutations.ts
 create mode 100644 apps/www/src/features/studio/settings/index.ts
 create mode 100644 apps/www/src/features/studio/settings/settings-layout.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/dashboard-sidebar/dashboard-sidebar-provider.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/dashboard-sidebar/index.ts
 create mode 100644 apps/www/src/features/studio/shell/components/environment-filter-notification.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/index.ts
 create mode 100644 apps/www/src/features/studio/shell/components/nav-bar/index.ts
 create mode 100644 apps/www/src/features/studio/shell/components/nav-bar/nav-bar-logo.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/nav-bar/nav-bar.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user-dropdown.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/nav-bar/organization-project-switcher.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/nav-bar/project-switcher.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/sidebar/organization-settings-sidebar.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/sidebar/organization-sidebar.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/sidebar/organization-switcher.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/sidebar/project-settings-sidebar.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/sidebar/sidebar-shell.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/skeleton/dashboard-shell-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/skeleton/index.ts
 create mode 100644 apps/www/src/features/studio/shell/components/skeleton/organization-layout-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/shell/components/voidhash-error-card.tsx
 create mode 100644 apps/www/src/features/studio/shell/index.ts
 create mode 100644 apps/www/src/features/studio/shell/page.tsx
 create mode 100644 apps/www/src/features/studio/styles/globals.css
 create mode 100644 apps/www/src/features/studio/webhooks/create-webhook-modal-button.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/create-webhook-modal.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/edit-webhook-modal.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-delivery-attempt-timeline.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-delivery-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-delivery-record.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-delivery-sidebar.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-endpoint-actions-dropdown.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-endpoint-detail-sidebar.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-endpoint-record-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-endpoint-record.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-event-types.ts
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-payload-viewer.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-secret-reveal-modal.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhook-status-badge.tsx
 create mode 100644 apps/www/src/features/studio/webhooks/webhooks-page-empty-state.tsx
 create mode 100644 apps/www/src/features/www/button.tsx
 create mode 100644 apps/www/src/features/www/hero/footer.tsx
 create mode 100644 apps/www/src/features/www/hero/hero.tsx
 create mode 100644 apps/www/src/features/www/logo.tsx
 create mode 100644 apps/www/src/features/www/navbar/navigation.tsx
 create mode 100644 apps/www/src/features/www/refraction-stripes.tsx
 create mode 100644 apps/www/src/features/www/section/section-container.tsx
 create mode 100644 apps/www/src/hooks/use-container-dimensions.tsx
 create mode 100644 apps/www/src/lib/create-vite-source.ts
 create mode 100644 apps/www/src/lib/effect-query.ts
 create mode 100644 apps/www/src/lib/env.ts
 create mode 100644 apps/www/src/lib/origin.ts
 create mode 100644 apps/www/src/lib/paths.ts
 create mode 100644 apps/www/src/lib/utils.ts
 create mode 100644 apps/www/src/routeTree.gen.ts
 create mode 100644 apps/www/src/router.tsx
 create mode 100644 apps/www/src/routes/__root.tsx
 create mode 100644 apps/www/src/routes/_marketing/index.tsx
 create mode 100644 apps/www/src/routes/_marketing/route.tsx
 create mode 100644 apps/www/src/routes/api/auth/callback.tsx
 create mode 100644 apps/www/src/routes/api/auth/email/resend.tsx
 create mode 100644 apps/www/src/routes/api/auth/email/verify.tsx
 create mode 100644 apps/www/src/routes/api/auth/oauth/$provider.tsx
 create mode 100644 apps/www/src/routes/api/auth/oauth/callback.tsx
 create mode 100644 apps/www/src/routes/api/auth/password/forgot-password.tsx
 create mode 100644 apps/www/src/routes/api/auth/password/reset-password.tsx
 create mode 100644 apps/www/src/routes/api/auth/password/sign-in.tsx
 create mode 100644 apps/www/src/routes/api/auth/password/sign-up.tsx
 create mode 100644 apps/www/src/routes/auth/devices/index.tsx
 create mode 100644 apps/www/src/routes/auth/forgot-password.tsx
 create mode 100644 apps/www/src/routes/auth/index.tsx
 create mode 100644 apps/www/src/routes/auth/login.tsx
 create mode 100644 apps/www/src/routes/auth/logout.tsx
 create mode 100644 apps/www/src/routes/auth/reset-password.tsx
 create mode 100644 apps/www/src/routes/auth/route.tsx
 create mode 100644 apps/www/src/routes/auth/sign-up.tsx
 create mode 100644 apps/www/src/routes/auth/verify-email.tsx
 create mode 100644 apps/www/src/routes/design/$.tsx
 create mode 100644 apps/www/src/routes/design/api/search.ts
 create mode 100644 apps/www/src/routes/design/index.tsx
 create mode 100644 apps/www/src/routes/design/route.tsx
 create mode 100644 apps/www/src/routes/docs/$.tsx
 create mode 100644 apps/www/src/routes/docs/api/search.ts
 create mode 100644 apps/www/src/routes/docs/index.tsx
 create mode 100644 apps/www/src/routes/docs/route.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/route.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.events.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.sent-notifications.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.churn.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.revenue.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.trials.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/route.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.$providerConfigurationId.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.$paymentProviderConfigurationId.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.$deliveryId.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/route.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_designer/$organizationSlug.$projectSlug.design.$id.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/create-organization/index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/index.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/route.tsx
 create mode 100644 apps/www/src/routes/studio/route.tsx
 create mode 100644 apps/www/src/start.ts
 create mode 100644 apps/www/src/styles/globals.css
 create mode 100644 apps/www/src/test-setup.ts
 create mode 100644 apps/www/src/vite-env.d.ts
 create mode 100644 apps/www/sst-env.d.ts
 create mode 100644 apps/www/tsconfig.json
 create mode 100644 apps/www/vite.config.ts
 create mode 100644 libraries/react-native/tsconfig.test.json
 create mode 100644 packages/clickhouse-db/LICENSE.md
 create mode 100644 packages/clickhouse-db/package.json
 create mode 100644 packages/clickhouse-db/src/analytics/migration.ts
 create mode 100644 packages/clickhouse-db/src/analytics/resolved-events-sql.test.ts
 create mode 100644 packages/clickhouse-db/src/analytics/resolved-events-sql.ts
 create mode 100644 packages/clickhouse-db/src/analytics/schema.ts
 create mode 100644 packages/clickhouse-db/src/clickhouse-client-web/ClickhouseWebClient.ts
 create mode 100644 packages/clickhouse-db/src/clickhouse-client-web/index.ts
 create mode 100644 packages/clickhouse-db/src/index.ts
 create mode 100644 packages/clickhouse-db/src/live.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0001_create_analytics_events.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.test.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0003_create_analytics_identity_pending_overrides_v2.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0004_person_identity_cutover.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0005_align_analytics_identity_tables.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.test.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0007_add_organization_id_to_identity_tables.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.test.ts
 create mode 100644 packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.ts
 create mode 100644 packages/clickhouse-db/sst-env.d.ts
 create mode 100644 packages/clickhouse-db/tsconfig.json
 create mode 100644 packages/core/LICENSE.md
 create mode 100644 packages/core/design.generated.ts
 create mode 100644 packages/core/docs.generated.ts
 create mode 100644 packages/core/package.json
 create mode 100644 packages/core/src/domain/analytics/Analytics.ts
 create mode 100644 packages/core/src/domain/analyticsIngest/AnalyticsIngest.ts
 create mode 100644 packages/core/src/domain/apiKey/ApiKey.ts
 create mode 100644 packages/core/src/domain/auth/Auth.ts
 create mode 100644 packages/core/src/domain/auth/LocalUserSession.ts
 create mode 100644 packages/core/src/domain/avatar.ts
 create mode 100644 packages/core/src/domain/experiment/Experiment.ts
 create mode 100644 packages/core/src/domain/featureFlag/FeatureFlag.ts
 create mode 100644 packages/core/src/domain/fxRate/FxRate.ts
 create mode 100644 packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts
 create mode 100644 packages/core/src/domain/notifications/PushDeliveryQueueMessage.ts
 create mode 100644 packages/core/src/domain/notifications/PushDeviceToken.ts
 create mode 100644 packages/core/src/domain/notifications/PushNotificationConfiguration.ts
 create mode 100644 packages/core/src/domain/organization/Organization.ts
 create mode 100644 packages/core/src/domain/paymentProvider/PaymentProviderConfiguration.ts
 create mode 100644 packages/core/src/domain/paymentProvider/PaymentProviderProduct.ts
 create mode 100644 packages/core/src/domain/paymentProvider/SubscriptionTransfer.ts
 create mode 100644 packages/core/src/domain/paywall/Paywall.ts
 create mode 100644 packages/core/src/domain/paywallAssetImage.test.ts
 create mode 100644 packages/core/src/domain/paywallAssetImage.ts
 create mode 100644 packages/core/src/domain/paywallLocation/PaywallLocation.ts
 create mode 100644 packages/core/src/domain/paywallThumbnail.test.ts
 create mode 100644 packages/core/src/domain/paywallThumbnail.ts
 create mode 100644 packages/core/src/domain/perk/Perk.ts
 create mode 100644 packages/core/src/domain/person/IdentityGraph.ts
 create mode 100644 packages/core/src/domain/person/Person.ts
 create mode 100644 packages/core/src/domain/product/Product.ts
 create mode 100644 packages/core/src/domain/project/Project.ts
 create mode 100644 packages/core/src/domain/purchaseProcessing/PurchaseProcessing.ts
 create mode 100644 packages/core/src/domain/schema/Schema.ts
 create mode 100644 packages/core/src/domain/sdkPerson/SdkPerson.ts
 create mode 100644 packages/core/src/domain/shared/Money.ts
 create mode 100644 packages/core/src/domain/user/User.ts
 create mode 100644 packages/core/src/domain/webhook/Webhook.ts
 create mode 100644 packages/core/src/services/aiChat/AiChatService.test.ts
 create mode 100644 packages/core/src/services/aiChat/AiChatService.ts
 create mode 100644 packages/core/src/services/analytics/AnalyticsService.ts
 create mode 100644 packages/core/src/services/analytics/clickhouse-accessor.ts
 create mode 100644 packages/core/src/services/analytics/series-resolver.ts
 create mode 100644 packages/core/src/services/analyticsIngest/AnalyticsDispatchService.ts
 create mode 100644 packages/core/src/services/analyticsIngest/AnalyticsIngestDlqService.ts
 create mode 100644 packages/core/src/services/analyticsIngest/AnalyticsJanitorService.ts
 create mode 100644 packages/core/src/services/analyticsIngest/AnalyticsWriterService.ts
 create mode 100644 packages/core/src/services/analyticsIngest/CaptureIngress.ts
 create mode 100644 packages/core/src/services/analyticsIngest/DlqProducer.ts
 create mode 100644 packages/core/src/services/analyticsIngest/EventCaptureService.ts
 create mode 100644 packages/core/src/services/analyticsIngest/EventProcessorService.ts
 create mode 100644 packages/core/src/services/analyticsIngest/PolicyCounterStore.ts
 create mode 100644 packages/core/src/services/analyticsIngest/ProcessorOutputs.ts
 create mode 100644 packages/core/src/services/apiKeys/ApiKeyService.ts
 create mode 100644 packages/core/src/services/apiKeys/api-keys.ts
 create mode 100644 packages/core/src/services/apiKeys/create-hash.ts
 create mode 100644 packages/core/src/services/apiKeys/index.ts
 create mode 100644 packages/core/src/services/auditLog/AuditLogPort.test.ts
 create mode 100644 packages/core/src/services/auditLog/AuditLogPort.ts
 create mode 100644 packages/core/src/services/auditLog/index.ts
 create mode 100644 packages/core/src/services/auth/AuthTokenVerifier.ts
 create mode 100644 packages/core/src/services/auth/LocalUserSessionService.ts
 create mode 100644 packages/core/src/services/auth/Workos.ts
 create mode 100644 packages/core/src/services/auth/WorkosLocalSyncService.test.ts
 create mode 100644 packages/core/src/services/auth/WorkosLocalSyncService.ts
 create mode 100644 packages/core/src/services/experiments/ExperimentService.ts
 create mode 100644 packages/core/src/services/featureFlags/FeatureFlagService.ts
 create mode 100644 packages/core/src/services/featureFlags/index.ts
 create mode 100644 packages/core/src/services/feedback/FeedbackService.ts
 create mode 100644 packages/core/src/services/fxRates/FxRateService.ts
 create mode 100644 packages/core/src/services/fxRates/exchange-rate-api-fetcher.ts
 create mode 100644 packages/core/src/services/fxRates/index.ts
 create mode 100644 packages/core/src/services/index.ts
 create mode 100644 packages/core/src/services/infrastructure/QueueProducer.ts
 create mode 100644 packages/core/src/services/internalFeatureFlags/InternalFeatureFlagService.ts
 create mode 100644 packages/core/src/services/notifications/ApplePushNotificationService.ts
 create mode 100644 packages/core/src/services/notifications/FirebaseCloudMessagingService.ts
 create mode 100644 packages/core/src/services/notifications/NotificationSendingService.ts
 create mode 100644 packages/core/src/services/notifications/NotificationTokenService.ts
 create mode 100644 packages/core/src/services/notifications/NotificationsConfigurationService.ts
 create mode 100644 packages/core/src/services/notifications/PersonNotificationTokenService.ts
 create mode 100644 packages/core/src/services/notifications/PushDeliveryDispatch.ts
 create mode 100644 packages/core/src/services/notifications/PushDeliveryService.ts
 create mode 100644 packages/core/src/services/notifications/PushNotificationSendService.ts
 create mode 100644 packages/core/src/services/notifications/push-delivery-provider.ts
 create mode 100644 packages/core/src/services/organizations/OrganizationBillingPort.ts
 create mode 100644 packages/core/src/services/organizations/OrganizationMembershipSyncPort.ts
 create mode 100644 packages/core/src/services/organizations/OrganizationMembershipWebhookPort.ts
 create mode 100644 packages/core/src/services/organizations/OrganizationService.ts
 create mode 100644 packages/core/src/services/organizations/WorkosOrgPort.ts
 create mode 100644 packages/core/src/services/organizations/index.ts
 create mode 100644 packages/core/src/services/paymentProviders/AppStorePaymentProviderService.ts
 create mode 100644 packages/core/src/services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow.ts
 create mode 100644 packages/core/src/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow.ts
 create mode 100644 packages/core/src/services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow.ts
 create mode 100644 packages/core/src/services/paymentProviders/GooglePlayPaymentProviderService.ts
 create mode 100644 packages/core/src/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow.ts
 create mode 100644 packages/core/src/services/paymentProviders/PaymentProvider.ts
 create mode 100644 packages/core/src/services/paymentProviders/PaymentProviderConfigurationService.ts
 create mode 100644 packages/core/src/services/paymentProviders/PaymentProviderProductService.ts
 create mode 100644 packages/core/src/services/paymentProviders/StripePaymentProviderService.ts
 create mode 100644 packages/core/src/services/paymentProviders/StripeReplayParkedNotificationsWorkflow.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/app-store-reconciliation-service.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/app-store-webhook-handler-service.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/config-provider.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/config-provider.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/constants.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/errors.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/helpers.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/helpers.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/money.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/money.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/payment-provider-service-queries.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/payment-provider.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/sdk-context.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/config-provider.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/config-provider.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/errors.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/helpers.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/helpers.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/money.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/money.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/notifications.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/notifications.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/payment-provider-service-queries.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/payment-provider.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/sdk-context.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/webhook-handler-service.ts
 create mode 100644 packages/core/src/services/paymentProviders/index.ts
 create mode 100644 packages/core/src/services/paymentProviders/payment-provider-adapter.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/config-provider.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/config-provider.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/errors.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/events.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/helpers.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/helpers.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/money.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/money.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/payment-provider-service-queries.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/payment-provider-service.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/payment-provider.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/sdk-context.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/sdk-context.ts
 create mode 100644 packages/core/src/services/paymentProviders/stripe/stripe-webhook-handler-service.ts
 create mode 100644 packages/core/src/services/paywallAssets/PaywallAssetService.test.ts
 create mode 100644 packages/core/src/services/paywallAssets/PaywallAssetService.ts
 create mode 100644 packages/core/src/services/paywallDeploys/PaywallArtifactStore.ts
 create mode 100644 packages/core/src/services/paywallDeploys/PaywallDeployManifest.contract.test.ts
 create mode 100644 packages/core/src/services/paywallDeploys/PaywallDeployManifest.ts
 create mode 100644 packages/core/src/services/paywallDeploys/PaywallDeployManifest.unit.test.ts
 create mode 100644 packages/core/src/services/paywallDeploys/PaywallDeployService.ts
 create mode 100644 packages/core/src/services/paywallDeploys/PaywallDeployService.unit.test.ts
 create mode 100644 packages/core/src/services/paywallDeploys/index.ts
 create mode 100644 packages/core/src/services/paywallLocations/PaywallAssetConfig.ts
 create mode 100644 packages/core/src/services/paywallLocations/PaywallLocationService.ts
 create mode 100644 packages/core/src/services/paywallLocations/helpers.ts
 create mode 100644 packages/core/src/services/paywallLocations/index.ts
 create mode 100644 packages/core/src/services/paywallReleases/PaywallReleaseService.ts
 create mode 100644 packages/core/src/services/paywallReleases/SnapshotHtmlRenderer.ts
 create mode 100644 packages/core/src/services/paywallThumbnails/HtmlScreenshot.ts
 create mode 100644 packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
 create mode 100644 packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
 create mode 100644 packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/ComponentCompiler.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/_fixpoint.fixture.json
 create mode 100644 packages/core/src/services/paywalls/MimicHost.ts
 create mode 100644 packages/core/src/services/paywalls/PaywallService.ts
 create mode 100644 packages/core/src/services/paywalls/index.ts
 create mode 100644 packages/core/src/services/perkGrants/PerkGrantService.ts
 create mode 100644 packages/core/src/services/perkGrants/index.ts
 create mode 100644 packages/core/src/services/perks/PerkService.ts
 create mode 100644 packages/core/src/services/perks/index.ts
 create mode 100644 packages/core/src/services/personIdentity/IdentifyDistinctIdCompletionWorkflow.ts
 create mode 100644 packages/core/src/services/personIdentity/IdentityMutationService.ts
 create mode 100644 packages/core/src/services/personIdentity/IdentityProjectionPublisher.ts
 create mode 100644 packages/core/src/services/personIdentity/IdentityProjectionRebuildService.ts
 create mode 100644 packages/core/src/services/personIdentity/PersonIdentityService.ts
 create mode 100644 packages/core/src/services/personIdentity/index.ts
 create mode 100644 packages/core/src/services/persons/PersonService.ts
 create mode 100644 packages/core/src/services/persons/index.ts
 create mode 100644 packages/core/src/services/productPerks/ProductPerkService.ts
 create mode 100644 packages/core/src/services/productPerks/index.ts
 create mode 100644 packages/core/src/services/products/ProductService.ts
 create mode 100644 packages/core/src/services/products/helpers.ts
 create mode 100644 packages/core/src/services/products/index.ts
 create mode 100644 packages/core/src/services/projects/ProjectService.ts
 create mode 100644 packages/core/src/services/projects/index.ts
 create mode 100644 packages/core/src/services/purchaseProcessing/PurchaseLedgerWorkerService.ts
 create mode 100644 packages/core/src/services/purchaseProcessing/PurchaseProcessingService.ts
 create mode 100644 packages/core/src/services/purchaseProcessing/helpers.ts
 create mode 100644 packages/core/src/services/purchaseProcessing/result-codec.ts
 create mode 100644 packages/core/src/services/purchaseProcessing/revenue-analytics-mapper.ts
 create mode 100644 packages/core/src/services/purchases/PurchaseService.ts
 create mode 100644 packages/core/src/services/purchases/index.ts
 create mode 100644 packages/core/src/services/schema/SchemaCacheInvalidationService.ts
 create mode 100644 packages/core/src/services/schema/SchemaService.ts
 create mode 100644 packages/core/src/services/schema/helpers.ts
 create mode 100644 packages/core/src/services/schema/index.ts
 create mode 100644 packages/core/src/services/sdk/SdkService.ts
 create mode 100644 packages/core/src/services/sdk/elevate-auth.ts
 create mode 100644 packages/core/src/services/sdk/index.ts
 create mode 100644 packages/core/src/services/sdk/snapshot-builder.ts
 create mode 100644 packages/core/src/services/slack/slack-client.ts
 create mode 100644 packages/core/src/services/storage/PublicFileStore.ts
 create mode 100644 packages/core/src/services/users/UserService.ts
 create mode 100644 packages/core/src/services/users/index.ts
 create mode 100644 packages/core/src/services/voidql/VoidQlService.ts
 create mode 100644 packages/core/src/services/voidql/ast/VoidQlAst.ts
 create mode 100644 packages/core/src/services/voidql/catalog/brand.ts
 create mode 100644 packages/core/src/services/voidql/catalog/events.ts
 create mode 100644 packages/core/src/services/voidql/catalog/index.ts
 create mode 100644 packages/core/src/services/voidql/catalog/persons.ts
 create mode 100644 packages/core/src/services/voidql/catalog/revenue.ts
 create mode 100644 packages/core/src/services/voidql/catalog/types.ts
 create mode 100644 packages/core/src/services/voidql/compile.ts
 create mode 100644 packages/core/src/services/voidql/compiler.ts
 create mode 100644 packages/core/src/services/voidql/errors.ts
 create mode 100644 packages/core/src/services/voidql/functions.ts
 create mode 100644 packages/core/src/services/voidql/index.ts
 create mode 100644 packages/core/src/services/voidql/ir.ts
 create mode 100644 packages/core/src/services/voidql/lexer.ts
 create mode 100644 packages/core/src/services/voidql/parser.ts
 create mode 100644 packages/core/src/services/voidql/scope.ts
 create mode 100644 packages/core/src/services/voidql/verify.ts
 create mode 100644 packages/core/src/services/webhookDispatch/WebhookDeliveryService.ts
 create mode 100644 packages/core/src/services/webhookDispatch/WebhookDeliveryWorkflow.ts
 create mode 100644 packages/core/src/services/webhookDispatch/WebhookDispatchService.ts
 create mode 100644 packages/core/src/services/webhookDispatch/index.ts
 create mode 100644 packages/core/src/services/webhookManager/WebhookManagerService.ts
 create mode 100644 packages/core/src/services/webhookManager/event-types.ts
 create mode 100644 packages/core/src/services/webhookManager/index.ts
 create mode 100644 packages/core/src/testing/effect-vitest.ts
 create mode 100644 packages/core/src/utils/create-short-id.ts
 create mode 100644 packages/core/src/utils/create-slug.ts
 create mode 100644 packages/core/src/utils/crypto/PaymentConfigSecretCrypto.test.ts
 create mode 100644 packages/core/src/utils/crypto/PaymentConfigSecretCrypto.ts
 create mode 100644 packages/core/src/utils/crypto/SecretBox.test.ts
 create mode 100644 packages/core/src/utils/crypto/SecretBox.ts
 create mode 100644 packages/core/src/utils/crypto/account-token.test.ts
 create mode 100644 packages/core/src/utils/crypto/account-token.ts
 create mode 100644 packages/core/src/utils/crypto/jwt-sign.ts
 create mode 100644 packages/core/src/utils/deterministic-id.ts
 create mode 100644 packages/core/src/utils/first-defined-string.ts
 create mode 100644 packages/core/src/utils/generate-id.ts
 create mode 100644 packages/core/src/utils/index.ts
 create mode 100644 packages/core/src/utils/permissions.ts
 create mode 100644 packages/core/src/utils/sdk.ts
 create mode 100644 packages/core/sst-env.d.ts
 create mode 100644 packages/core/test/domain/analytics/Analytics.test.ts
 create mode 100644 packages/core/test/domain/analytics/filter-compiler.test.ts
 create mode 100644 packages/core/test/domain/analytics/insights.test.ts
 create mode 100644 packages/core/test/domain/analytics/resolve-time-range.test.ts
 create mode 100644 packages/core/test/domain/analyticsIngest/AnalyticsIngest.test.ts
 create mode 100644 packages/core/test/domain/avatar.test.ts
 create mode 100644 packages/core/test/domain/internalAnalytics/InternalAnalyticsEvents.test.ts
 create mode 100644 packages/core/test/domain/person/IdentityGraph.test.ts
 create mode 100644 packages/core/test/domain/person/Person.test.ts
 create mode 100644 packages/core/test/integration-harness.integration.test.ts
 create mode 100644 packages/core/test/runtime-context-types.ts
 create mode 100644 packages/core/test/services/analytics/AnalyticsService.integration.test.ts
 create mode 100644 packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts
 create mode 100644 packages/core/test/services/analytics/series-resolver.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/AnalyticsDispatchService.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/AnalyticsIngestDlqService.integration.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/AnalyticsJanitorService.integration.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/AnalyticsWriterService.integration.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/AnalyticsWriterService.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/DlqProducer.integration.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/EventCaptureService.integration.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/EventCaptureService.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/EventProcessorService.integration.test.ts
 create mode 100644 packages/core/test/services/analyticsIngest/EventProcessorService.test.ts
 create mode 100644 packages/core/test/services/apiKeys/ApiKeyService.integration.test.ts
 create mode 100644 packages/core/test/services/apiKeys/api-keys.test.ts
 create mode 100644 packages/core/test/services/apiKeys/create-hash.test.ts
 create mode 100644 packages/core/test/services/auth/LocalUserSessionService.integration.test.ts
 create mode 100644 packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
 create mode 100644 packages/core/test/services/feedback/FeedbackService.test.ts
 create mode 100644 packages/core/test/services/fxRates/FxRateService.integration.test.ts
 create mode 100644 packages/core/test/services/fxRates/exchange-rate-api-fetcher.test.ts
 create mode 100644 packages/core/test/services/internalFeatureFlags/InternalFeatureFlagService.test.ts
 create mode 100644 packages/core/test/services/notifications/jwt-sign.test.ts
 create mode 100644 packages/core/test/services/notifications/push-delivery-classification.test.ts
 create mode 100644 packages/core/test/services/notifications/push-providers.test.ts
 create mode 100644 packages/core/test/services/organizations/OrganizationBillingPort.test.ts
 create mode 100644 packages/core/test/services/organizations/OrganizationMembershipSyncPort.test.ts
 create mode 100644 packages/core/test/services/organizations/OrganizationMembershipWebhookPort.test.ts
 create mode 100644 packages/core/test/services/organizations/OrganizationService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/PaymentProviderConfigurationService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/PaymentProviderProductService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/appStore/AppStorePaymentProvider.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderServiceQueries.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/appStore/AppStoreReconciliationService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/appStore/AppStoreWebhookHandlerService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/appStore/sdk-context.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProvider.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/googlePlay/GooglePlayWebhookHandlerService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/stripe/StripePaymentProvider.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/stripe/StripePaymentProviderService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/stripe/StripeWebhookHandlerService.integration.test.ts
 create mode 100644 packages/core/test/services/paymentProviders/stripe/stripe-test-support.ts
 create mode 100644 packages/core/test/services/paywallDeploys/PaywallDeployService.integration.test.ts
 create mode 100644 packages/core/test/services/paywallLocations/PaywallLocationService.integration.test.ts
 create mode 100644 packages/core/test/services/paywallLocations/helpers.test.ts
 create mode 100644 packages/core/test/services/paywalls/PaywallService.integration.test.ts
 create mode 100644 packages/core/test/services/perkGrants/PerkGrantService.integration.test.ts
 create mode 100644 packages/core/test/services/perks/PerkService.integration.test.ts
 create mode 100644 packages/core/test/services/personIdentity/IdentityMutationService.integration.test.ts
 create mode 100644 packages/core/test/services/personIdentity/IdentityProjectionPublisher.integration.test.ts
 create mode 100644 packages/core/test/services/personIdentity/PersonIdentityService.integration.test.ts
 create mode 100644 packages/core/test/services/persons/PersonService.integration.test.ts
 create mode 100644 packages/core/test/services/productPerks/ProductPerkService.integration.test.ts
 create mode 100644 packages/core/test/services/products/ProductService.integration.test.ts
 create mode 100644 packages/core/test/services/products/helpers.test.ts
 create mode 100644 packages/core/test/services/projects/ProjectService.integration.test.ts
 create mode 100644 packages/core/test/services/purchaseProcessing/PurchaseLedgerWorkerService.integration.test.ts
 create mode 100644 packages/core/test/services/purchaseProcessing/PurchaseProcessingService.integration.test.ts
 create mode 100644 packages/core/test/services/purchaseProcessing/helpers.test.ts
 create mode 100644 packages/core/test/services/purchaseProcessing/result-codec.test.ts
 create mode 100644 packages/core/test/services/purchaseProcessing/revenue-analytics-mapper.test.ts
 create mode 100644 packages/core/test/services/purchases/PurchaseService.integration.test.ts
 create mode 100644 packages/core/test/services/schema/SchemaCacheInvalidationService.test.ts
 create mode 100644 packages/core/test/services/schema/SchemaService.integration.test.ts
 create mode 100644 packages/core/test/services/schema/helpers.test.ts
 create mode 100644 packages/core/test/services/sdk/SdkService.integration.test.ts
 create mode 100644 packages/core/test/services/sdk/elevate-auth.test.ts
 create mode 100644 packages/core/test/services/sdk/snapshot-builder.test.ts
 create mode 100644 packages/core/test/services/users/UserService.test.ts
 create mode 100644 packages/core/test/services/voidql/compiler.test.ts
 create mode 100644 packages/core/test/services/voidql/substrate.test.ts
 create mode 100644 packages/core/test/services/webhookDispatch/WebhookDeliveryService.integration.test.ts
 create mode 100644 packages/core/test/services/webhookDispatch/WebhookDispatchService.integration.test.ts
 create mode 100644 packages/core/test/services/webhookManager/WebhookManagerService.integration.test.ts
 create mode 100644 packages/core/test/utils/create-slug.test.ts
 create mode 100644 packages/core/test/utils/deterministic-id.test.ts
 create mode 100644 packages/core/test/utils/generate-id.test.ts
 create mode 100644 packages/core/test/utils/permissions.test.ts
 create mode 100644 packages/core/test/utils/sdk.test.ts
 create mode 100644 packages/core/tsconfig.json
 create mode 100644 packages/core/vitest.unit.mts
 create mode 100644 packages/db/LICENSE.md
 create mode 100644 packages/db/package.json
 create mode 100644 packages/db/src/alchemy-migrations/20260624151148_init/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260624151148_init/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260630110242_organic_penance/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260630110242_organic_penance/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260701083829_experiments/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260701083829_experiments/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/snapshot.json
 create mode 100644 packages/db/src/db.ts
 create mode 100644 packages/db/src/index.ts
 create mode 100644 packages/db/src/migrations.ts
 create mode 100644 packages/db/src/relations.ts
 create mode 100644 packages/db/src/schema.ts
 create mode 100644 packages/db/src/types.ts
 create mode 100644 packages/db/tests/migrations.integration.test.ts
 create mode 100644 packages/db/tsconfig.json
 create mode 100644 packages/db/vitest.mts
 create mode 100644 packages/emails/LICENSE.md
 create mode 100644 packages/emails/index.tsx
 create mode 100644 packages/emails/package.json
 create mode 100644 packages/emails/sst-env.d.ts
 create mode 100644 packages/emails/tsconfig.json
 create mode 100644 packages/rpc/LICENSE.md
 create mode 100644 packages/rpc/package.json
 create mode 100644 packages/rpc/src/auth.ts
 create mode 100644 packages/rpc/src/errors/AiChat.ts
 create mode 100644 packages/rpc/src/errors/ApiKey.ts
 create mode 100644 packages/rpc/src/errors/AuditLog.ts
 create mode 100644 packages/rpc/src/errors/Experiment.ts
 create mode 100644 packages/rpc/src/errors/FeatureFlag.ts
 create mode 100644 packages/rpc/src/errors/Feedback.ts
 create mode 100644 packages/rpc/src/errors/PaymentProviderConfiguration.ts
 create mode 100644 packages/rpc/src/errors/PaymentProviderProduct.ts
 create mode 100644 packages/rpc/src/errors/PaywallAsset.ts
 create mode 100644 packages/rpc/src/errors/PaywallDeploy.ts
 create mode 100644 packages/rpc/src/errors/PaywallLocation.ts
 create mode 100644 packages/rpc/src/errors/PaywallWorkspace.ts
 create mode 100644 packages/rpc/src/errors/ProductPerk.ts
 create mode 100644 packages/rpc/src/errors/PushNotificationConfiguration.ts
 create mode 100644 packages/rpc/src/errors/PushNotificationSend.ts
 create mode 100644 packages/rpc/src/errors/analytics.ts
 create mode 100644 packages/rpc/src/errors/common.ts
 create mode 100644 packages/rpc/src/errors/index.ts
 create mode 100644 packages/rpc/src/errors/organization.ts
 create mode 100644 packages/rpc/src/errors/paywall.ts
 create mode 100644 packages/rpc/src/errors/perk.ts
 create mode 100644 packages/rpc/src/errors/person.ts
 create mode 100644 packages/rpc/src/errors/product.ts
 create mode 100644 packages/rpc/src/errors/project.ts
 create mode 100644 packages/rpc/src/errors/user.ts
 create mode 100644 packages/rpc/src/errors/voidql.ts
 create mode 100644 packages/rpc/src/errors/webhook.ts
 create mode 100644 packages/rpc/src/experimentTreatmentTypes.ts
 create mode 100644 packages/rpc/src/groups/AiChatRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/AnalyticsRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/ApiKeyRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/ExperimentRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/FeatureFlagRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/FeedbackRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/OrganizationRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaymentProviderConfigurationRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaymentProviderProductRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaywallAssetRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaywallComponentRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaywallDeployRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaywallLocationRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaywallRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PerkRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PersonRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/ProductPerkRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/ProductRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/ProjectRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PushNotificationConfigurationRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/PushNotificationSendRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/UserRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/VoidQlRpcsDef.ts
 create mode 100644 packages/rpc/src/groups/WebhookRpcsDef.ts
 create mode 100644 packages/rpc/src/index.ts
 create mode 100644 packages/rpc/src/internalFeatureFlags.ts
 create mode 100644 packages/rpc/src/middlewares.ts
 create mode 100644 packages/rpc/sst-env.d.ts
 create mode 100644 packages/rpc/tsconfig.json
 create mode 100644 scripts/db-generate.mjs
 create mode 100644 scripts/db-migrate-local.mjs
 create mode 100644 selfhost/.env.example
 create mode 100644 selfhost/LICENSE.md
 create mode 100644 selfhost/README.md
 create mode 100644 selfhost/docker-compose.yml
 create mode 100644 selfhost/entry/Dockerfile
 create mode 100644 selfhost/entry/package.json
 create mode 100644 selfhost/entry/src/backend/Analytics.ts
 create mode 100644 selfhost/entry/src/backend/AuthTokenVerifier.ts
 create mode 100644 selfhost/entry/src/backend/Backend.ts
 create mode 100644 selfhost/entry/src/backend/Background.ts
 create mode 100644 selfhost/entry/src/backend/Clickhouse.ts
 create mode 100644 selfhost/entry/src/backend/IdentityCompletionWorkflow.ts
 create mode 100644 selfhost/entry/src/backend/MimicHost.ts
 create mode 100644 selfhost/entry/src/backend/ObjectStores.ts
 create mode 100644 selfhost/entry/src/backend/PaymentProviderWorkflows.ts
 create mode 100644 selfhost/entry/src/backend/PaymentWorkflowLayers.ts
 create mode 100644 selfhost/entry/src/backend/ProjectSchemaCache.ts
 create mode 100644 selfhost/entry/src/backend/Push.ts
 create mode 100644 selfhost/entry/src/backend/Thumbnails.ts
 create mode 100644 selfhost/entry/src/backend/WebhookDeliveryWorkflow.ts
 create mode 100644 selfhost/entry/src/backend/WorkflowDefinitions.ts
 create mode 100644 selfhost/entry/src/backend/WorkflowPorts.ts
 create mode 100644 selfhost/entry/src/backend/Workos.ts
 create mode 100644 selfhost/entry/src/compiler/CompilerClient.ts
 create mode 100644 selfhost/entry/src/compiler/CompilerCore.ts
 create mode 100644 selfhost/entry/src/compiler/CompilerProtocol.ts
 create mode 100644 selfhost/entry/src/compiler/main.ts
 create mode 100644 selfhost/entry/src/config.ts
 create mode 100644 selfhost/entry/src/index.ts
 create mode 100644 selfhost/entry/src/main.ts
 create mode 100644 selfhost/entry/src/migrate.ts
 create mode 100644 selfhost/entry/src/mimic/MimicDocumentIdleQueue.ts
 create mode 100644 selfhost/entry/src/mimic/MimicNode.ts
 create mode 100644 selfhost/entry/src/mimic/MimicNodeWebSocket.ts
 create mode 100644 selfhost/entry/src/mimic/PgControlStore.ts
 create mode 100644 selfhost/entry/src/mimic/config.ts
 create mode 100644 selfhost/entry/src/mimic/main.ts
 create mode 100644 selfhost/entry/src/release-smoke.ts
 create mode 100644 selfhost/entry/src/www/Www.ts
 create mode 100644 selfhost/entry/tests/Analytics.integration.test.ts
 create mode 100644 selfhost/entry/tests/BackendAdapters.test.ts
 create mode 100644 selfhost/entry/tests/Background.integration.test.ts
 create mode 100644 selfhost/entry/tests/Clickhouse.integration.test.ts
 create mode 100644 selfhost/entry/tests/Compiler.test.ts
 create mode 100644 selfhost/entry/tests/CompilerClient.integration.test.ts
 create mode 100644 selfhost/entry/tests/MimicDocumentIdle.test.ts
 create mode 100644 selfhost/entry/tests/MimicNode.integration.test.ts
 create mode 100644 selfhost/entry/tests/PaywallRelease.integration.test.ts
 create mode 100644 selfhost/entry/tests/Push.integration.test.ts
 create mode 100644 selfhost/entry/tests/ThumbnailQueue.integration.test.ts
 create mode 100644 selfhost/entry/tests/Thumbnails.test.ts
 create mode 100644 selfhost/entry/tests/WorkflowComposition.integration.test.ts
 create mode 100644 selfhost/entry/tests/Www.test.ts
 create mode 100644 selfhost/entry/tsconfig.json
 create mode 100644 selfhost/entry/vitest.mts
 create mode 100644 selfhost/platform-node/package.json
 create mode 100644 selfhost/platform-node/src/CronScheduler.ts
 create mode 100644 selfhost/platform-node/src/DurableEntity.ts
 create mode 100644 selfhost/platform-node/src/KeyValueStore.ts
 create mode 100644 selfhost/platform-node/src/Mailer.ts
 create mode 100644 selfhost/platform-node/src/MemoryDurableEntity.ts
 create mode 100644 selfhost/platform-node/src/NodeDurableEntitySession.ts
 create mode 100644 selfhost/platform-node/src/ObjectStore.ts
 create mode 100644 selfhost/platform-node/src/PgWorkflowEngine.ts
 create mode 100644 selfhost/platform-node/src/PlatformRuntime.ts
 create mode 100644 selfhost/platform-node/src/Postgres.ts
 create mode 100644 selfhost/platform-node/src/Queue.ts
 create mode 100644 selfhost/platform-node/src/Screenshot.ts
 create mode 100644 selfhost/platform-node/src/Workflow.ts
 create mode 100644 selfhost/platform-node/src/index.ts
 create mode 100644 selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts
 create mode 100644 selfhost/platform-node/tests/MemoryDurableEntity.test.ts
 create mode 100644 selfhost/platform-node/tests/NodeDurableEntitySession.test.ts
 create mode 100644 selfhost/platform-node/tests/PgCronScheduler.integration.test.ts
 create mode 100644 selfhost/platform-node/tests/PgDurableEntity.integration.test.ts
 create mode 100644 selfhost/platform-node/tests/PgKeyValueStore.integration.test.ts
 create mode 100644 selfhost/platform-node/tests/PgQueue.integration.test.ts
 create mode 100644 selfhost/platform-node/tests/PgWorkflowRunner.integration.test.ts
 create mode 100644 selfhost/platform-node/tests/S3ObjectStore.integration.test.ts
 create mode 100644 selfhost/platform-node/tests/SmtpMailer.integration.test.ts
 create mode 100644 selfhost/platform-node/tsconfig.json
 create mode 100644 selfhost/platform-node/vitest.mts
 create mode 100644 selfhost/release-smoke.mts
 create mode 100644 selfhost/smoke.mts

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 000000000..c0962f05e
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,13 @@
+.git
+.github
+.turbo
+**/.alchemy
+**/.next
+**/.output
+**/.turbo
+**/coverage
+**/dist
+**/node_modules
+**/.env
+**/.env.*
+*.log
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 19bbe0b18..7ce9018f3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,7 +2,7 @@ name: Repository CI
 
 on:
   push:
-    branches: [main, preview]
+    branches: [main, preview, oss]
   pull_request:
 
 permissions:
@@ -23,12 +23,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.19.0
+          version: 11.1.3
           run_install: false
 
       - name: Install dependencies
diff --git a/.github/workflows/secret-scanning.yml b/.github/workflows/secret-scanning.yml
index 578f29500..a23bf7c92 100644
--- a/.github/workflows/secret-scanning.yml
+++ b/.github/workflows/secret-scanning.yml
@@ -2,7 +2,7 @@ name: Secret scanning
 
 on:
   push:
-    branches: [main, preview]
+    branches: [main, preview, oss]
   pull_request:
 
 permissions:
diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
index 24a0958bd..4b2b9eca3 100644
--- a/.github/workflows/security-audit.yml
+++ b/.github/workflows/security-audit.yml
@@ -2,7 +2,7 @@ name: Security audit
 
 on:
   push:
-    branches: [main, preview]
+    branches: [main, preview, oss]
     paths:
       - package.json
       - pnpm-lock.yaml
@@ -11,6 +11,7 @@ on:
       - examples/**/package.json
       - libraries/**/package.json
       - packages/**/package.json
+      - selfhost/**/package.json
       - .github/workflows/security-audit.yml
   pull_request:
     paths:
@@ -21,6 +22,7 @@ on:
       - examples/**/package.json
       - libraries/**/package.json
       - packages/**/package.json
+      - selfhost/**/package.json
       - .github/workflows/security-audit.yml
 
 permissions:
@@ -37,12 +39,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.19.0
+          version: 11.1.3
           run_install: false
 
       - name: Reject Critical and High advisories
diff --git a/.github/workflows/selfhost.yml b/.github/workflows/selfhost.yml
new file mode 100644
index 000000000..d741d33f6
--- /dev/null
+++ b/.github/workflows/selfhost.yml
@@ -0,0 +1,71 @@
+name: Self-host Compose
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - preview
+      - oss
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: selfhost-compose-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  COMPOSE_PROJECT_NAME: voidhash-selfhost-ci-${{ github.run_id }}-${{ github.run_attempt }}
+
+jobs:
+  smoke:
+    runs-on: ubuntu-latest
+    timeout-minutes: 40
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Install workspace dependencies
+        run: corepack pnpm@11.1.3 install --frozen-lockfile
+
+      - name: Start stateful stores
+        run: docker compose -f selfhost/docker-compose.yml --profile analytics up -d clickhouse minio --wait --wait-timeout 180
+
+      - name: Initialize object store
+        run: docker compose -f selfhost/docker-compose.yml --profile analytics run --rm minio-init
+
+      - name: Verify S3-compatible object store
+        env:
+          PLATFORM_NODE_S3_ENDPOINT: http://127.0.0.1:9000
+          PLATFORM_NODE_S3_TEST: 1
+        run: corepack pnpm@11.1.3 --filter @voidhash/platform-node exec vp test run -c vitest.mts tests/S3ObjectStore.integration.test.ts
+
+      - name: Build and start Community Compose
+        env:
+          CLICKHOUSE_URL: http://clickhouse:8123
+          MIMIC_DOCUMENT_IDLE_NOTIFY_DEBOUNCE_MS: 250
+        run: docker compose -f selfhost/docker-compose.yml --profile analytics up --build --wait --wait-timeout 180
+
+      - name: Reclaim image build cache
+        run: docker builder prune --all --force
+
+      - name: Run self-host smoke
+        run: corepack pnpm@11.1.3 exec tsx selfhost/smoke.mts
+
+      - name: Run self-host release smoke
+        run: corepack pnpm@11.1.3 exec tsx selfhost/release-smoke.mts
+
+      - name: Show Compose diagnostics
+        if: always()
+        run: |
+          docker compose -f selfhost/docker-compose.yml --profile analytics ps || true
+          docker compose -f selfhost/docker-compose.yml --profile analytics logs --no-color || true
+
+      - name: Stop Compose
+        if: always()
+        run: docker compose -f selfhost/docker-compose.yml --profile analytics down --volumes --remove-orphans
diff --git a/.gitignore b/.gitignore
index e485f1016..4201fc010 100644
--- a/.gitignore
+++ b/.gitignore
@@ -143,6 +143,7 @@ dist
 # Serverless directories
 
 .serverless/
+.alchemy/
 
 # FuseBox cache
 
@@ -294,4 +295,4 @@ yalc.lock
 # Typescript
 **/tsconfig.tsbuildinfo
 
-resources/
\ No newline at end of file
+resources/
diff --git a/.gitleaks.toml b/.gitleaks.toml
index d98f1173f..57d508160 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -9,6 +9,30 @@ regexTarget = "secret"
 regexes = ['''(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$''']
 paths = ['''(?:^|/)packages/app-store-server-sdk/tests/''']
 
+[[allowlists]]
+description = "Synthetic Stripe credentials used by config-provider tests"
+condition = "AND"
+targetRules = ["generic-api-key"]
+regexTarget = "secret"
+regexes = ['''^(?:(?:sk|rk)_(?:live|test)|whsec_)[a-z0-9_]+$''']
+paths = ['''(?:^|/)packages/core/src/services/paymentProviders/stripe/config-provider\.test\.ts$''']
+
+[[allowlists]]
+description = "Public UUIDv5 namespace used for deterministic account tokens"
+condition = "AND"
+targetRules = ["generic-api-key"]
+regexTarget = "secret"
+regexes = ['''^3919eb4e-3466-593c-8c1e-84554e13a0a6$''']
+paths = ['''(?:^|/)packages/core/src/utils/crypto/account-token\.ts$''']
+
+[[allowlists]]
+description = "Throwaway private keys used only by crypto unit tests"
+targetRules = ["private-key"]
+paths = [
+  '''(?:^|/)packages/core/src/utils/crypto/SecretBox\.test\.ts$''',
+  '''(?:^|/)packages/core/test/services/paymentProviders/appStore/sdk-context\.test\.ts$''',
+]
+
 [[allowlists]]
 description = "Byte-identical public fixtures from Apple's App Store Server Library"
 targetRules = ["jwt"]
diff --git a/apps/backend/LICENSE.md b/apps/backend/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/apps/backend/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/apps/backend/package.json b/apps/backend/package.json
new file mode 100644
index 000000000..db2ed9eb6
--- /dev/null
+++ b/apps/backend/package.json
@@ -0,0 +1,47 @@
+{
+  "name": "@voidhash/backend",
+  "version": "0.1.0",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "scripts": {
+    "test": "vp test run -c vitest.unit.mts",
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "lint": "vp lint .",
+    "format": "vp fmt ."
+  },
+  "dependencies": {
+    "@voidhash/ai-shared": "workspace:*",
+    "@voidhash/api-contracts": "workspace:*",
+    "@voidhash/app-store-server-sdk": "workspace:*",
+    "@voidhash/clickhouse-db": "workspace:*",
+    "@voidhash/core": "workspace:*",
+    "@voidhash/db": "workspace:*",
+    "@voidhash/google-play-server-sdk": "workspace:*",
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywall-renderer-preact": "workspace:*",
+    "@voidhash/paywall-workspace": "workspace:*",
+    "@voidhash/rpc": "workspace:*",
+    "@workos-inc/node": "9.2.0",
+    "ai": "^7.0.0",
+    "effect": "catalog:",
+    "preact": "^10.25.4",
+    "workers-ai-provider": "^3.0.0",
+    "zod": "catalog:"
+  },
+  "devDependencies": {
+    "@effect/platform-bun": "catalog:",
+    "@effect/platform-node": "catalog:",
+    "@types/bun": "latest",
+    "@types/node": "^20",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "@voidhash/platform": "workspace:*",
+    "@voidhash/tsconfig": "workspace:*",
+    "alchemy": "catalog:",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:",
+    "vitest": "catalog:"
+  }
+}
diff --git a/apps/backend/src/ApiMiddlewares.ts b/apps/backend/src/ApiMiddlewares.ts
new file mode 100644
index 000000000..0e9e57c6d
--- /dev/null
+++ b/apps/backend/src/ApiMiddlewares.ts
@@ -0,0 +1,348 @@
+import {
+  ApiAuthSession,
+  AuthMiddleware,
+  type ApiPublishableKeySession,
+  type ApiSecretKeySession,
+  type ApiUserSession,
+} from "@voidhash/api-contracts";
+import {
+  ApiAuthenticationError,
+  ApiNotAuthenticatedError,
+} from "@voidhash/api-contracts/errors";
+import { ApiKeyService } from "@voidhash/core/services";
+import { LocalUserSessionService } from "@voidhash/core/services/auth/LocalUserSessionService";
+import { WorkosLocalSyncService } from "@voidhash/core/services/auth/WorkosLocalSyncService";
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import { AuthSession } from "@voidhash/rpc";
+import { Db, type DbError } from "@voidhash/db";
+import { Effect, Layer, Option, pipe } from "effect";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+import { HttpServerRequest } from "effect/unstable/http";
+
+import { withIdentity } from "./Telemetry.ts";
+
+type AuthMiddlewareError = ApiAuthenticationError | ApiNotAuthenticatedError;
+type AuthMiddlewareSession = ApiUserSession | ApiSecretKeySession | ApiPublishableKeySession;
+
+type SelectedAuthMethod =
+  | { method: "api-key"; rawApiKey: string }
+  | { method: "secret-key"; rawSecretKey: string }
+  | { method: "workos-session"; headers: Headers }
+  | { method: "publishable-key"; rawPublishableKey: string; distinctId: string };
+
+const publishableKeyInvalidMessage = "Publishable Key not found, is expired or is invalid.";
+
+const hasWorkosSessionCookieHeader = (headers: Headers): boolean =>
+  headers.get("cookie")?.includes("wos-session=") ?? false;
+
+const toWebHeaders = (headers: HttpHeaders.Headers): Headers =>
+  new Headers(
+    Object.entries(headers).filter(
+      (entry): entry is [string, string] => typeof entry[1] === "string",
+    ),
+  );
+
+const selectAuthMethod = (
+  req: HttpServerRequest.HttpServerRequest,
+): Effect.Effect<SelectedAuthMethod, AuthMiddlewareError> =>
+  Effect.gen(function* () {
+    const rawApiKey = Option.getOrUndefined(HttpHeaders.get(req.headers, "x-api-key"));
+    if (rawApiKey) {
+      return { method: "api-key", rawApiKey } satisfies SelectedAuthMethod;
+    }
+
+    const webHeaders = toWebHeaders(req.headers);
+    if (hasWorkosSessionCookieHeader(webHeaders)) {
+      return { headers: webHeaders, method: "workos-session" } satisfies SelectedAuthMethod;
+    }
+
+    const rawSecretKey = Option.getOrUndefined(HttpHeaders.get(req.headers, "x-secret-key"));
+    if (rawSecretKey) {
+      return { method: "secret-key", rawSecretKey } satisfies SelectedAuthMethod;
+    }
+
+    const rawPublishableKey = Option.getOrUndefined(
+      HttpHeaders.get(req.headers, "x-publishable-key"),
+    );
+    if (rawPublishableKey) {
+      const distinctId = Option.getOrUndefined(HttpHeaders.get(req.headers, "x-distinct-id"));
+      if (!distinctId) {
+        return yield* Effect.fail(
+          new ApiAuthenticationError({
+            cause: "Missing distinct-id header",
+            message: "Missing distinct-id header",
+          }),
+        );
+      }
+      return {
+        distinctId,
+        method: "publishable-key",
+        rawPublishableKey,
+      } satisfies SelectedAuthMethod;
+    }
+
+    return yield* Effect.fail(
+      new ApiNotAuthenticatedError({ message: "You are not authenticated" }),
+    );
+  });
+
+const mapDatabaseError = (e: DbError) =>
+  new ApiAuthenticationError({
+    cause: String(e.message),
+    message: "Failed to authenticate due to an internal error",
+  });
+
+/**
+ * HTTP API authentication middleware. Resolves an `ApiAuthSession` from one of
+ * `x-api-key`, `x-secret-key`, `x-publishable-key` + `x-distinct-id`, or a
+ * WorkOS session cookie, matching the legacy parity surface. Failures collapse
+ * onto `ApiNotAuthenticatedError` / `ApiAuthenticationError`.
+ */
+export const AuthMiddlewareLive = Layer.effect(
+  AuthMiddleware,
+  Effect.gen(function* () {
+    const apiKeyService = yield* ApiKeyService;
+    const localUserSessions = yield* LocalUserSessionService;
+    const workosLocalSync = yield* WorkosLocalSyncService;
+    const workosAuth = yield* Workos;
+    // Capture the per-request `Db` at middleware-layer build and provide it to
+    // the auth resolution below. Core service methods now require `Db` ambiently
+    // (native effect-postgres), but the middleware handler's requirement channel
+    // is sealed by the framework (`Provided`/`Scope` only), so `Db` is supplied
+    // here rather than leaking out of the handler.
+    const db = yield* Db;
+    const shouldBackfillWorkosLocalState = process.env.APP_ENV === "development";
+
+    const authenticateApiKey = (rawApiKey: string) =>
+      pipe(
+        Effect.gen(function* () {
+          const record = yield* apiKeyService.validateUserApiKey(rawApiKey);
+          const access = yield* localUserSessions.loadUserAccess(record.user.id);
+          return localUserSessions.toUserSession(record.user, access, null, null);
+        }),
+        Effect.catchTags({
+          ApiKeyNotFoundError: () =>
+            Effect.fail(new ApiNotAuthenticatedError({ message: "You are not authenticated" })),
+          ApiKeyServiceError: (e) =>
+            Effect.fail(
+              new ApiAuthenticationError({
+                cause: e.cause,
+                message: "Failed to authenticate with api key due to an internal error",
+              }),
+            ),
+          EffectDrizzleQueryError: (e) => Effect.fail(mapDatabaseError(e)),
+        }),
+      );
+
+    const authenticateWorkosSession = (headers: Headers) =>
+      pipe(
+        Effect.gen(function* () {
+          const session = yield* workosAuth.authenticateSessionCookie(headers);
+          if (!session) {
+            return yield* Effect.fail(
+              new ApiNotAuthenticatedError({ message: "You are not authenticated" }),
+            );
+          }
+
+          const localUser = yield* shouldBackfillWorkosLocalState
+            ? workosLocalSync
+                .syncAuthenticatedUser(session.user)
+                .pipe(Effect.map((synced) => synced.localUser))
+            : localUserSessions.resolveLocalUser(session.user);
+          const access = yield* localUserSessions.loadUserAccess(localUser.id);
+          return localUserSessions.toUserSession(
+            localUser,
+            access,
+            headers.get("cookie"),
+            session.user.id,
+          );
+        }),
+        Effect.catchTags({
+          EffectDrizzleQueryError: (e) => Effect.fail(mapDatabaseError(e)),
+          WorkosAuthError: (e) =>
+            Effect.fail(
+              new ApiAuthenticationError({
+                cause: String(e.message),
+                message: "Failed to authenticate with WorkOS session",
+              }),
+            ),
+          WorkosLocalSyncServiceError: (e) =>
+            Effect.fail(
+              new ApiAuthenticationError({
+                cause: e.cause,
+                message: "Failed to authenticate with WorkOS session",
+              }),
+            ),
+        }),
+      );
+
+    const authenticateSecretKey = (rawSecretKey: string) =>
+      pipe(
+        Effect.gen(function* () {
+          const record = yield* apiKeyService.validateSecretKey(rawSecretKey);
+          return {
+            cookie: null,
+            method: "secret-key",
+            name: `${record.project.name} API Key`,
+            organizations: [],
+            person: null,
+            projects: [
+              {
+                id: record.project.id,
+                logo: null,
+                name: record.project.name,
+                organizationId: record.project.organizationId,
+                permissions: ["project:all"],
+                slug: record.project.slug,
+              },
+            ],
+            user: null,
+          } satisfies ApiSecretKeySession;
+        }),
+        Effect.catchTags({
+          ApiKeyNotFoundError: () =>
+            Effect.fail(
+              new ApiAuthenticationError({
+                cause: "Secret Key not found, is expired or is invalid.",
+                message: "Secret Key not found, is expired or is invalid.",
+              }),
+            ),
+          ApiKeyServiceError: (e) =>
+            Effect.fail(
+              new ApiAuthenticationError({
+                cause: e.cause,
+                message: "Failed to authenticate with secret key due to an internal error",
+              }),
+            ),
+        }),
+      );
+
+    const authenticatePublishableKey = (input: { distinctId: string; rawPublishableKey: string }) =>
+      pipe(
+        Effect.gen(function* () {
+          const record = yield* apiKeyService.validatePublishableKey(input.rawPublishableKey);
+          return {
+            cookie: null,
+            method: "publishable-key",
+            name: `${record.project.name} API Key`,
+            organizations: [],
+            person: { distinctId: input.distinctId },
+            projects: [
+              {
+                id: record.project.id,
+                logo: null,
+                name: record.project.name,
+                organizationId: record.project.organizationId,
+                permissions: [],
+                slug: record.project.slug,
+              },
+            ],
+            user: null,
+          } satisfies ApiPublishableKeySession;
+        }),
+        Effect.catchTags({
+          ApiKeyNotFoundError: () =>
+            Effect.fail(
+              new ApiAuthenticationError({
+                cause: publishableKeyInvalidMessage,
+                message: publishableKeyInvalidMessage,
+              }),
+            ),
+          ApiKeyServiceError: (e) =>
+            Effect.fail(
+              new ApiAuthenticationError({
+                cause: e.cause,
+                message: "Failed to authenticate with publishable key due to an internal error",
+              }),
+            ),
+        }),
+      );
+
+    const authenticateSelectedMethod = (
+      selected: SelectedAuthMethod,
+    ): Effect.Effect<AuthMiddlewareSession, AuthMiddlewareError, Db> => {
+      switch (selected.method) {
+        case "api-key":
+          return authenticateApiKey(selected.rawApiKey);
+        case "workos-session":
+          return authenticateWorkosSession(selected.headers);
+        case "secret-key":
+          return authenticateSecretKey(selected.rawSecretKey);
+        case "publishable-key":
+          return authenticatePublishableKey({
+            distinctId: selected.distinctId,
+            rawPublishableKey: selected.rawPublishableKey,
+          });
+      }
+    };
+
+    return AuthMiddleware.of((httpEffect) =>
+      Effect.gen(function* () {
+        const req = yield* HttpServerRequest.HttpServerRequest;
+        const selected = yield* selectAuthMethod(req);
+        const session = yield* Effect.provideService(authenticateSelectedMethod(selected), Db, db);
+        return yield* withIdentity(
+          session,
+          Effect.provideService(httpEffect, ApiAuthSession, session),
+        );
+      }),
+    );
+  }),
+);
+
+/**
+ * Bridges {@link ApiAuthSession} into the canonical {@link AuthSession}
+ * tag that the core services consume. Use this wrapper around any route
+ * handler effect that depends on `AuthSession`.
+ */
+export const bridgeAuthSession = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  Effect.gen(function* () {
+    const session = yield* ApiAuthSession;
+    return yield* Effect.provideService(effect, AuthSession, session);
+  });
+
+/**
+ * Translates the parsed SDK request headers into the per-call metadata bag the
+ * `SdkService` writes onto person traits.
+ */
+export const getPersonMetadataFromSdkHeaders = (parsedHeaders: {
+  readonly "x-client-bundle-id": string;
+  readonly "x-client-locale"?: string | undefined;
+  readonly "x-client-version"?: string | undefined;
+  readonly "x-distinct-id": string;
+  readonly "x-is-backgrounded": "false";
+  readonly "x-is-debug-build": "true" | "false";
+  readonly "x-nonce"?: string | undefined;
+  readonly "x-observer-mode": "true" | "false";
+  readonly "x-platform": string;
+  readonly "x-platform-brand"?: string | undefined;
+  readonly "x-platform-device"?: string | undefined;
+  readonly "x-platform-flavor": "native" | "browser";
+  readonly "x-platform-flavor-version"?: string | undefined;
+  readonly "x-platform-version"?: string | undefined;
+  readonly "x-preferred-locales"?: string | undefined;
+  readonly "x-publishable-key": string;
+  readonly "x-sdk": "react-native" | "web";
+  readonly "x-sdk-version": string;
+  readonly "x-storefront"?: string | undefined;
+}) => ({
+  clientBundleId: parsedHeaders["x-client-bundle-id"],
+  clientLocale: parsedHeaders["x-client-locale"],
+  clientVersion: parsedHeaders["x-client-version"],
+  distinctId: parsedHeaders["x-distinct-id"],
+  isBackgrounded: parsedHeaders["x-is-backgrounded"],
+  isDebugBuild: parsedHeaders["x-is-debug-build"],
+  nonce: parsedHeaders["x-nonce"],
+  observerMode: parsedHeaders["x-observer-mode"],
+  platform: parsedHeaders["x-platform"],
+  platformBrand: parsedHeaders["x-platform-brand"],
+  platformDevice: parsedHeaders["x-platform-device"],
+  platformFlavor: parsedHeaders["x-platform-flavor"],
+  platformFlavorVersion: parsedHeaders["x-platform-flavor-version"],
+  platformVersion: parsedHeaders["x-platform-version"],
+  preferredLocales: parsedHeaders["x-preferred-locales"],
+  publishableKey: parsedHeaders["x-publishable-key"],
+  sdk: parsedHeaders["x-sdk"],
+  sdkVersion: parsedHeaders["x-sdk-version"],
+  storefront: parsedHeaders["x-storefront"],
+});
diff --git a/apps/backend/src/AuthSessionResolver.ts b/apps/backend/src/AuthSessionResolver.ts
new file mode 100644
index 000000000..4069b924a
--- /dev/null
+++ b/apps/backend/src/AuthSessionResolver.ts
@@ -0,0 +1,209 @@
+import { type DbError } from "@voidhash/db";
+import {
+  type AuthTokenVerifier,
+  extractBearerToken,
+  type JwtAuthError,
+} from "@voidhash/core/services/auth/AuthTokenVerifier";
+import { LocalUserSessionService } from "@voidhash/core/services/auth/LocalUserSessionService";
+import { Workos, WorkosAuthError } from "@voidhash/core/services/auth/Workos";
+import {
+  RpcAuthenticationError,
+  RpcNotAuthenticatedError,
+  type UserSession,
+} from "@voidhash/rpc";
+import type { Db } from "@voidhash/db";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+import { Effect, Option } from "effect";
+
+/** Union of the terminal failures the WorkOS session resolution can raise. */
+export type RpcAuthFailure = RpcAuthenticationError | RpcNotAuthenticatedError;
+
+const toWebHeaders = (headers: HttpHeaders.Headers): Headers =>
+  new Headers(
+    Object.entries(headers).filter(
+      (entry): entry is [string, string] => typeof entry[1] === "string",
+    ),
+  );
+
+const hasWorkosSessionCookieEffectHeader = (headers: HttpHeaders.Headers): boolean =>
+  Option.exists(HttpHeaders.get(headers, "cookie"), (cookie) => cookie.includes("wos-session="));
+
+const formatUnknownCause = (cause: unknown): string => {
+  if (cause instanceof Error) {
+    return cause.message;
+  }
+
+  if (typeof cause === "string") {
+    return cause;
+  }
+
+  try {
+    return JSON.stringify(cause);
+  } catch {
+    return String(cause);
+  }
+};
+
+const getDbErrorCause = (error: DbError): string =>
+  error.cause === undefined ? error.message : formatUnknownCause(error.cause);
+
+/**
+ * Logs the underlying DB error and re-fails as a stable
+ * {@link RpcAuthenticationError} so the database cause never leaks to callers.
+ */
+export const mapAuthenticationDbError = (
+  error: DbError,
+): Effect.Effect<never, RpcAuthenticationError> =>
+  Effect.logError("RPC authentication database error", {
+    cause: getDbErrorCause(error),
+    message: error.message,
+  }).pipe(
+    Effect.flatMap(() =>
+      Effect.fail(
+        new RpcAuthenticationError({
+          message: "Failed to authenticate due to a database error",
+          cause: error.message,
+        }),
+      ),
+    ),
+  );
+
+/**
+ * Resolves an authenticated {@link UserSession} from the request headers,
+ * mirroring the exact logic shared by the RPC auth and admin-auth middlewares:
+ *
+ * - An `authorization` header → bearer-token path: the request's JWT is
+ *   validated through {@link AuthTokenVerifier}, then
+ *   the identity is materialised into a local user session.
+ * - Otherwise a `wos-session=` cookie → WorkOS session-cookie path.
+ * - Neither present → {@link RpcNotAuthenticatedError}.
+ *
+ * Failures from Db / WorkOS / JWT validation are normalised to
+ * {@link RpcAuthenticationError} / {@link RpcNotAuthenticatedError}. This is a
+ * behaviour-preserving extraction; the caller supplies `Db` (and the ambient
+ * {@link Workos} / {@link LocalUserSessionService}).
+ */
+export const resolveWorkosSession = (
+  headers: HttpHeaders.Headers,
+  authTokenVerifier: AuthTokenVerifier["Service"],
+): Effect.Effect<UserSession, RpcAuthFailure, Db | Workos | LocalUserSessionService> =>
+  Effect.gen(function* () {
+    const localUserSessions = yield* LocalUserSessionService;
+    const workosAuth = yield* Workos;
+
+    const mapAuthenticationErrors = <A>(
+      effect: Effect.Effect<
+        A,
+        DbError | JwtAuthError | RpcNotAuthenticatedError | WorkosAuthError,
+        Db
+      >,
+    ): Effect.Effect<A, RpcAuthFailure, Db> =>
+      effect.pipe(
+        Effect.catchTag("EffectDrizzleQueryError", mapAuthenticationDbError),
+        Effect.catchTag("JwtAuthError", (e) =>
+          Effect.fail(
+            new RpcAuthenticationError({
+              message: "Failed to authenticate: invalid or expired token",
+              cause: String(e.message),
+            }),
+          ),
+        ),
+        Effect.catchTag("WorkosAuthError", (e) =>
+          Effect.fail(
+            new RpcAuthenticationError({
+              message: "Failed to authenticate with WorkOS",
+              cause: String(e.message),
+            }),
+          ),
+        ),
+      );
+
+    const authenticateWorkosIdentity = (
+      workosUserId: string,
+      cookie: string | null,
+    ): Effect.Effect<UserSession, DbError | WorkosAuthError, Db> =>
+      Effect.gen(function* () {
+        const workosUser = yield* workosAuth.getUser(workosUserId);
+        const localUser = yield* localUserSessions.resolveLocalUser(workosUser);
+
+        yield* !workosUser.externalId
+          ? workosAuth
+              .setUserExternalId(workosUser.id, localUser.id)
+              .pipe(Effect.catch(() => Effect.void))
+          : Effect.void;
+
+        const access = yield* localUserSessions.loadUserAccess(localUser.id);
+        return localUserSessions.toUserSession(localUser, access, cookie, workosUser.id);
+      });
+
+    const authenticateBearerToken = (
+      requestHeaders: HttpHeaders.Headers,
+    ): Effect.Effect<UserSession, RpcAuthFailure, Db> =>
+      mapAuthenticationErrors(
+        Effect.gen(function* () {
+          const token = yield* extractBearerToken(
+            Option.getOrUndefined(HttpHeaders.get(requestHeaders, "authorization")),
+          );
+          const validated = yield* authTokenVerifier.validateToken(token);
+
+          if (!validated.payload.sub) {
+            return yield* Effect.fail(
+              new RpcNotAuthenticatedError({
+                message: "Invalid token: missing subject",
+              }),
+            );
+          }
+
+          return yield* authenticateWorkosIdentity(validated.payload.sub, null);
+        }),
+      );
+
+    const authenticateWorkosSession = (
+      requestHeaders: HttpHeaders.Headers,
+    ): Effect.Effect<UserSession, RpcAuthFailure, Db> =>
+      mapAuthenticationErrors(
+        Effect.gen(function* () {
+          const webHeaders = toWebHeaders(requestHeaders);
+          const session = yield* workosAuth.authenticateSessionCookie(webHeaders);
+
+          if (!session) {
+            return yield* Effect.fail(
+              new RpcNotAuthenticatedError({
+                message: "You are not authenticated",
+              }),
+            );
+          }
+
+          const localUser = yield* localUserSessions.resolveLocalUser(session.user);
+          yield* !session.user.externalId
+            ? workosAuth
+                .setUserExternalId(session.user.id, localUser.id)
+                .pipe(Effect.catch(() => Effect.void))
+            : Effect.void;
+
+          const access = yield* localUserSessions.loadUserAccess(localUser.id);
+          return localUserSessions.toUserSession(
+            localUser,
+            access,
+            webHeaders.get("cookie"),
+            session.user.id,
+          );
+        }),
+      );
+
+    const authorization = Option.getOrUndefined(HttpHeaders.get(headers, "authorization"));
+
+    if (authorization) {
+      return yield* authenticateBearerToken(headers);
+    }
+
+    if (hasWorkosSessionCookieEffectHeader(headers)) {
+      return yield* authenticateWorkosSession(headers);
+    }
+
+    return yield* Effect.fail(
+      new RpcNotAuthenticatedError({
+        message: "You are not authenticated",
+      }),
+    );
+  });
diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
new file mode 100644
index 000000000..417a40257
--- /dev/null
+++ b/apps/backend/src/BackendApp.ts
@@ -0,0 +1,1116 @@
+import { AppStoreServerSdk } from "@voidhash/app-store-server-sdk";
+import { VoidhashV1Api } from "@voidhash/api-contracts";
+import { Db } from "@voidhash/db";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { PaywallAssetConfig } from "@voidhash/core/services/paywallLocations/PaywallAssetConfig";
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import {
+  AnalyticsService,
+  ApiKeyService,
+  AuditLogPort,
+  AuthTokenVerifier,
+  AppStorePaymentProvider,
+  ApplePushNotificationServiceConfigLive,
+  AiChatService,
+  AppStorePaymentProviderConfigLive,
+  AppStorePaymentProviderServiceLive,
+  ExperimentService,
+  FeatureFlagService,
+  FeedbackServiceLive,
+  FirebaseCloudMessagingServiceConfigLive,
+  FxRateService,
+  GooglePlayPaymentProvider,
+  GooglePlayPaymentProviderConfigLive,
+  GooglePlayPaymentProviderServiceLive,
+  GooglePlayServerApi,
+  IdentityProjectionPublisher,
+  InternalFeatureFlagService,
+  LocalUserSessionService,
+  MimicHost,
+  MimicHostError,
+  NotificationSendingService,
+  NotificationsConfigurationService,
+  NotificationTokenService,
+  OrganizationBillingPort,
+  OrganizationMembershipSyncPort,
+  OrganizationMembershipWebhookPort,
+  OrganizationService,
+  PaymentProviderConfigurationService,
+  PaymentProviderProductService,
+  PaywallAssetService,
+  PersonNotificationTokenService,
+  PaywallArtifactStore,
+  PaywallArtifactStoreError,
+  PaywallDeployService,
+  PaywallLocationService,
+  PaywallReleaseService,
+  PaywallService,
+  PaywallWorkspaceService,
+  ComponentCompiler,
+  ComponentManifestCacheService,
+  PerkGrantService,
+  PerkService,
+  PersonIdentityService,
+  PersonService,
+  ProductPerkService,
+  ProductService,
+  ProjectSchemaCache,
+  ProjectService,
+  PublicFileStore,
+  PublicFileStoreError,
+  PushDeliveryDispatch,
+  PushNotificationSendService,
+  PurchaseProcessingService,
+  PurchaseService,
+  SchemaCacheInvalidationService,
+  SchemaService,
+  SdkService,
+  StripePaymentProvider,
+  StripePaymentProviderConfigLive,
+  StripePaymentProviderServiceLive,
+  UserService,
+  VoidQlService,
+  WebhookManagerService,
+  WorkosLocalSyncService,
+  WorkosOrgPort,
+} from "@voidhash/core/services";
+import { AnalyticsWriterService } from "@voidhash/core/services/analyticsIngest/AnalyticsWriterService";
+import {
+  createInitialPaywallDocumentInput,
+  PaywallDesignerDocument,
+} from "@voidhash/mimic-schema";
+import { AuthMiddleware } from "@voidhash/rpc";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+import * as HttpApiBuilder from "effect/unstable/httpapi/HttpApiBuilder";
+import * as HttpMiddleware from "effect/unstable/http/HttpMiddleware";
+import * as HttpRouter from "effect/unstable/http/HttpRouter";
+import * as HttpServerRequest from "effect/unstable/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/unstable/http/HttpServerResponse";
+import * as HttpServer from "effect/unstable/http/HttpServer";
+import type * as Rpc from "effect/unstable/rpc/Rpc";
+import * as RpcGroup from "effect/unstable/rpc/RpcGroup";
+import { RpcSerialization } from "effect/unstable/rpc";
+import * as RpcServer from "effect/unstable/rpc/RpcServer";
+
+import { BackendRpcGroups as RpcGroups } from "./BackendRpcGroups.ts";
+import { BackendSnapshotHtmlRendererLive } from "./PaywallSnapshotHtmlRenderer.ts";
+
+import { AuthMiddlewareLive } from "./ApiMiddlewares.ts";
+import { VoidhashAiError, VoidhashAiService } from "./ai/VoidhashAiService.ts";
+import { AiChatRouteLayer } from "./routes/ai/chat.ts";
+import { McpRouteLayer } from "./routes/mcp.ts";
+import { withRequestId } from "./Telemetry.ts";
+import { ApiKeysGroupLive } from "./routes/v1/api-keys.ts";
+import { AuthGroupLive } from "./routes/v1/auth.ts";
+import { NotificationsGroupLive } from "./routes/v1/notifications.ts";
+import { OrganizationsGroupLive } from "./routes/v1/organizations.ts";
+import { PaymentProviderConfigurationsGroupLive } from "./routes/v1/payment-provider-configurations.ts";
+import { PaymentProviderProductsGroupLive } from "./routes/v1/payment-provider-products.ts";
+import { PaywallDeploysGroupLive } from "./routes/v1/paywall-deploys.ts";
+import { PaywallLocationsGroupLive } from "./routes/v1/paywall-locations.ts";
+import { PerksGroupLive } from "./routes/v1/perks.ts";
+import { PersonsGroupLive } from "./routes/v1/persons.ts";
+import { ProductPerksGroupLive } from "./routes/v1/product-perks.ts";
+import { ProductsGroupLive } from "./routes/v1/products.ts";
+import { ProjectsGroupLive } from "./routes/v1/projects.ts";
+import { SchemaGroupLive } from "./routes/v1/schema.ts";
+import { SdkGroupLive } from "./routes/v1/sdk.ts";
+import { UsersGroupLive } from "./routes/v1/users.ts";
+import { WebhooksGroupLive } from "./routes/v1/webhooks.ts";
+import { AppleServerToServerNotificationRouteLayer } from "./routes/webhook-endpoints/apple-server-to-server.ts";
+import { GooglePlayRtdnNotificationRouteLayer } from "./routes/webhook-endpoints/google-play-rtdn.ts";
+import { StripeWebhookNotificationRouteLayer } from "./routes/webhook-endpoints/stripe.ts";
+import { PaywallServingRouteLayer } from "./routes/paywall-serving.ts";
+import { PublicFileServingRouteLayer } from "./routes/public-file-serving.ts";
+import { WorkosWebhookRouteLayer } from "./routes/webhooks/workos.ts";
+import { AnalyticsRpcsLive } from "./rpcs/analytics-rpcs.ts";
+import { ApiKeyRpcsLive } from "./rpcs/api-key-rpcs.ts";
+import { ExperimentRpcsLive } from "./rpcs/experiment-rpcs.ts";
+import { FeatureFlagRpcsLive } from "./rpcs/feature-flag-rpcs.ts";
+import { FeedbackRpcsLive } from "./rpcs/feedback-rpcs.ts";
+import { OrganizationRpcsLive } from "./rpcs/organization-rpcs.ts";
+import { PaymentProviderConfigurationRpcsLive } from "./rpcs/payment-provider-configuration-rpcs.ts";
+import { PaymentProviderProductRpcsLive } from "./rpcs/payment-provider-product-rpcs.ts";
+import { PushNotificationConfigurationRpcsLive } from "./rpcs/push-notification-configuration-rpcs.ts";
+import { PushNotificationSendRpcsLive } from "./rpcs/push-notification-send-rpcs.ts";
+import { AiChatRpcsLive } from "./rpcs/ai-chat-rpcs.ts";
+import { PaywallAssetRpcsLive } from "./rpcs/paywall-asset-rpcs.ts";
+import { PaywallComponentRpcsLive } from "./rpcs/paywall-component-rpcs.ts";
+import { PaywallDeployRpcsLive } from "./rpcs/paywall-deploy-rpcs.ts";
+import { PaywallLocationRpcsLive } from "./rpcs/paywall-location-rpcs.ts";
+import { PaywallRpcsLive } from "./rpcs/paywall-rpcs.ts";
+import { PaywallWorkspaceRpcsLive } from "./rpcs/paywall-workspace-rpcs.ts";
+import { PerkRpcsLive } from "./rpcs/perk-rpcs.ts";
+import { PersonRpcsLive } from "./rpcs/person-rpcs.ts";
+import { ProductPerkRpcsLive } from "./rpcs/product-perk-rpcs.ts";
+import { ProductRpcsLive } from "./rpcs/product-rpcs.ts";
+import { ProjectRpcsLive } from "./rpcs/project-rpcs.ts";
+import { UserRpcsLive } from "./rpcs/user-rpcs.ts";
+import { VoidQlRpcsLive } from "./rpcs/voidql-rpcs.ts";
+import { WebhookRpcsLive } from "./rpcs/webhook-rpcs.ts";
+
+/**
+ * The always-on infrastructure services the route graph builds on. Declaring
+ * this as a concrete union (rather than `any`) lets the type system verify that every
+ * `Layer.provide` / `HttpRouter.provideRequest` in the route graph is actually
+ * satisfied — without it, a missing service (e.g. the raw WorkOS webhook
+ * handler's `Db`) only surfaces as a runtime "Service not found" instead of a
+ * compile error. ClickHouse is deliberately not mandatory: analytics services
+ * use it when the runtime's layer provides it and degrade to empty results when
+ * absent. The caller's bound `InfraLayer` may be structurally wider than this
+ * contract, so the cloud composition can still carry its analytics clients.
+ */
+export type InfraServices =
+  | Db
+  | Workos
+  | WorkosOrgPort
+  | PaywallAssetConfig
+  | PaywallArtifactStore
+  | PublicFileStore
+  | StripePaymentProvider
+  | AppStorePaymentProvider
+  | GooglePlayPaymentProvider
+  | IdentityProjectionPublisher
+  | MimicHost
+  | ComponentCompiler
+  | ProjectSchemaCache;
+
+export interface BackendRuntimeLayers<
+  RInfrastructure = never,
+  RFeatureRpcs extends Rpc.Any = never,
+  RFeatureServices = never,
+  RExtensionRpcs extends Rpc.Any = never,
+> {
+  readonly auth: Layer.Layer<AuthMiddleware, never, Db | LocalUserSessionService | Workos>;
+  readonly infrastructure: Layer.Layer<InfraServices, never, RInfrastructure>;
+  readonly features: BackendFeatureComposition<RFeatureRpcs, RFeatureServices>;
+  readonly routes?: Layer.Layer<never, never, HttpRouter.HttpRouter | RInfrastructure>;
+  readonly webhookManager?: Layer.Layer<WebhookManagerService, never, RInfrastructure>;
+  /**
+   * The hardened, single-shared `analytics_query` ClickHouse client that backs the
+   * VoidQL read path (`readonly = 1` CONST profile, SELECT-only, no row policy —
+   * isolation is the compiler-injected bound predicate). When omitted,
+   * {@link VoidQlService} resolves the ambient (RLS readonly) client from
+   * `infrastructure`, which fail-closes to empty rows because VoidQL sets no
+   * `SQL_organization_id`.
+   */
+  readonly analyticsQueryClient?: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>;
+  /**
+   * Queue-backed push-delivery dispatcher. Defaults to {@link PushDeliveryDispatch.noop}
+   * (dev/smoke — rows are created but never delivered); the production worker
+   * overrides it with the `PushDeliveryQueue` producer bound at init.
+   */
+  readonly pushDeliveryDispatch?: Layer.Layer<PushDeliveryDispatch>;
+  /**
+   * Runtime AI service implementation. Optional so the RPC smoke / dev harness
+   * can omit it; platform entry points supply their provider-specific adapter.
+   */
+  readonly aiService?: Layer.Layer<VoidhashAiService>;
+  /**
+   * Token verifier used by the AI chat route (`POST /api/ai/chat`). Optional so
+   * harnesses that omit the route can skip it; production entry points adapt
+   * their runtime-specific token store to this port.
+   */
+  readonly authTokenVerifier?: AuthTokenVerifier["Service"];
+  readonly rpcExtension: BackendRpcExtension<RExtensionRpcs>;
+}
+
+/**
+ * Live App Store config-write provider registered under the public
+ * `AppStorePaymentProvider` tag, consumed by `PaymentProviderConfigurationService`
+ * and `PaymentProviderProductService` when an operator creates or updates an App
+ * Store configuration. It validates the configuration against the canonical
+ * schema and encrypts the secret Apple PKCS8 key on write (keyed by
+ * `ENCRYPTION_KEY`; a no-op when the env var is unset). Unlike the
+ * record engine (`BackendAppStorePaymentProviderServiceLive`) it needs no App
+ * Store REST SDK, FX, or purchase-processing graph — only the encryption key.
+ */
+export const BackendAppStorePaymentProviderConfigLive = AppStorePaymentProviderConfigLive.pipe(
+  Layer.provide(
+    PaymentConfigSecretCrypto.layer({
+      key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+    }),
+  ),
+);
+
+/**
+ * Live Google Play config-write provider for the admin configuration and
+ * product-mapping flow. It validates package/service-account configuration and
+ * encrypts the service-account JSON on write; purchase ingestion remains gated
+ * behind the separate Google Play record-engine work.
+ */
+export const BackendGooglePlayPaymentProviderConfigLive = GooglePlayPaymentProviderConfigLive.pipe(
+  Layer.provide(
+    PaymentConfigSecretCrypto.layer({
+      key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+    }),
+  ),
+);
+
+/**
+ * Live Stripe config-write provider for the admin configuration and revenue
+ * consolidation flow. It validates account/API/webhook settings and encrypts
+ * Stripe secrets on write; checkout/session creation is intentionally outside
+ * this provider path.
+ */
+export const BackendStripePaymentProviderConfigLive = StripePaymentProviderConfigLive.pipe(
+  Layer.provide(
+    PaymentConfigSecretCrypto.layer({
+      key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+    }),
+  ),
+);
+
+export const BackendPaymentProviderStubsLive = Layer.mergeAll(
+  BackendStripePaymentProviderConfigLive,
+  BackendAppStorePaymentProviderConfigLive,
+  BackendGooglePlayPaymentProviderConfigLive,
+);
+
+/**
+ * Live push delivery-provider tags (FCM + APNs), supplied at the app root EXACTLY
+ * like the payment-provider config adapters: each pipes the shared
+ * {@link PaymentConfigSecretCrypto} keyed by `ENCRYPTION_KEY`. In Phase 1 these
+ * carry only config validation + encrypt-on-write; the `deliver` engine is gated.
+ */
+export const BackendFirebaseCloudMessagingServiceLive =
+  FirebaseCloudMessagingServiceConfigLive.pipe(
+    Layer.provide(
+      PaymentConfigSecretCrypto.layer({
+        key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+      }),
+    ),
+  );
+
+export const BackendApplePushNotificationServiceLive = ApplePushNotificationServiceConfigLive.pipe(
+  Layer.provide(
+    PaymentConfigSecretCrypto.layer({
+      key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+    }),
+  ),
+);
+
+export const BackendPushProvidersLive = Layer.mergeAll(
+  BackendFirebaseCloudMessagingServiceLive,
+  BackendApplePushNotificationServiceLive,
+);
+
+/**
+ * Live {@link FeedbackService} for the Cloudflare backend. Reads the Slack bot
+ * token and target channel from the `SLACK_BOT_TOKEN` / `SLACK_FEEDBACK_CHANNEL_ID`
+ * env bindings at worker boot; `Db` is supplied by the surrounding domain-services
+ * graph. Both default to empty so un-provisioned stages (dev, in-process smoke
+ * tests) boot — feedback is still persisted, the Slack relay simply no-ops.
+ */
+export const BackendFeedbackServiceLive = FeedbackServiceLive({
+  botToken: Effect.sync(() => process.env.SLACK_BOT_TOKEN ?? ""),
+  defaultChannel: Effect.sync(() => process.env.SLACK_FEEDBACK_CHANNEL_ID ?? ""),
+});
+
+/**
+ * Live App Store payment-provider service for the Cloudflare backend, used by
+ * `SdkService` (`POST /api/v1/sdk/sync-transaction`) and the Apple
+ * server-to-server webhook route. Composes the ported provider engine, webhook
+ * handler, and queries (`AppStorePaymentProviderServiceLive`) with their
+ * dependencies:
+ *   - the App Store REST SDK over `FetchHttpClient`,
+ *   - `FxRateService` for money conversion (its API key is read from the
+ *     `EXCHANGE_RATE_API_KEY` env binding),
+ *   - `PurchaseProcessingService` (+ its `PerkGrantService` dep) for purchase
+ *     state writes.
+ * `Db` and `PersonIdentityService` are supplied by the surrounding domain
+ * services graph.
+ */
+export const BackendAppStorePaymentProviderServiceLive = AppStorePaymentProviderServiceLive.pipe(
+  Layer.provide(AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer))),
+  Layer.provide(
+    FxRateService.layer({
+      apiKey: Effect.sync(() => process.env.EXCHANGE_RATE_API_KEY ?? ""),
+    }),
+  ),
+  Layer.provide(PurchaseProcessingService.layer.pipe(Layer.provide(PerkGrantService.layer))),
+  Layer.provide(
+    PaymentConfigSecretCrypto.layer({
+      key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+    }),
+  ),
+);
+
+/**
+ * The Google Play record-engine boundary for the Cloudflare backend. Mirrors
+ * {@link BackendAppStorePaymentProviderServiceLive}: composes the public
+ * `GooglePlayPaymentProviderService` (SDK path + RTDN webhook handler) with the
+ * Google Play Developer API SDK over `FetchHttpClient`, `FxRateService` for
+ * money conversion, `PurchaseProcessingService` (+ its `PerkGrantService` dep),
+ * and `PaymentConfigSecretCrypto` for decrypting the per-tenant service-account
+ * key. `Db` and `PersonIdentityService` are supplied by the surrounding domain
+ * layer.
+ */
+export const BackendGooglePlayPaymentProviderServiceLive =
+  GooglePlayPaymentProviderServiceLive.pipe(
+    Layer.provide(GooglePlayServerApi.layer.pipe(Layer.provide(FetchHttpClient.layer))),
+    Layer.provide(
+      FxRateService.layer({
+        apiKey: Effect.sync(() => process.env.EXCHANGE_RATE_API_KEY ?? ""),
+      }),
+    ),
+    Layer.provide(PurchaseProcessingService.layer.pipe(Layer.provide(PerkGrantService.layer))),
+    Layer.provide(
+      PaymentConfigSecretCrypto.layer({
+        key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+      }),
+    ),
+  );
+
+/**
+ * Live Stripe payment-provider record service for the Cloudflare backend, used
+ * by the Stripe webhook route. Composes the record engine, webhook handler, and
+ * queries (`StripePaymentProviderServiceLive`) with their dependencies:
+ *   - `FetchHttpClient` for per-tenant Stripe REST calls (fee / line-item lookups),
+ *   - `FxRateService` for USD conversion (`EXCHANGE_RATE_API_KEY`),
+ *   - `PurchaseProcessingService` (+ `PerkGrantService`) for purchase state writes,
+ *   - `PaymentConfigSecretCrypto` to decrypt the per-tenant secret + signing keys.
+ * `Db` and `PersonIdentityService` are supplied by the surrounding domain graph.
+ */
+export const BackendStripePaymentProviderServiceLive = StripePaymentProviderServiceLive.pipe(
+  Layer.provide(FetchHttpClient.layer),
+  Layer.provide(
+    FxRateService.layer({
+      apiKey: Effect.sync(() => process.env.EXCHANGE_RATE_API_KEY ?? ""),
+    }),
+  ),
+  Layer.provide(PurchaseProcessingService.layer.pipe(Layer.provide(PerkGrantService.layer))),
+  Layer.provide(
+    PaymentConfigSecretCrypto.layer({
+      key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+    }),
+  ),
+);
+
+/**
+ * Public URL bases for paywall release HTML:
+ * - `cdnUrl` — legacy visual-editor releases, `{cdnUrl}/{s3Bucket}/{s3Key}`.
+ * - `publicBaseUrl` — content-addressed code and current visual-editor releases
+ *   (deploy contract §5),
+ *   `{publicBaseUrl}/p/<contentHash>/...`, served by this worker's public
+ *   `GET /p/:contentHash/*` route. `PAYWALL_PUBLIC_BASE_URL` is set on the
+ *   worker env by `stacks/backend/workers/BackendWorker.ts` (custom domain on
+ *   production/preview, pinned dev port elsewhere, overridable to front it
+ *   with a CDN exposing the same layout).
+ * Lazy (`Layer.sync`) so `process.env` is read at worker boot, not module
+ * load.
+ */
+export const BackendPaywallAssetConfigLive = Layer.sync(PaywallAssetConfig, () => ({
+  cdnUrl: "https://assets.voidha.sh",
+  publicBaseUrl: process.env.PAYWALL_PUBLIC_BASE_URL ?? "https://api.voidhash.com",
+}));
+
+/**
+ * Placeholder {@link PaywallArtifactStore} for harnesses that run the backend
+ * graph outside a Cloudflare Worker (test layers, in-process RPC smoke). The
+ * deployed worker provides the live R2 adapter instead
+ * (`stacks/backend/infrastructure/PaywallArtifactStore.ts`). Every operation
+ * fails with a stable `PaywallArtifactStoreError`, which `PaywallDeployService`
+ * surfaces as a 500-style service error — deploy creation still works
+ * (manifest registration is DB-only), but blob upload/finalize/serving report
+ * the store as unconfigured instead of dying.
+ */
+export const BackendPaywallArtifactStoreStubLive = Layer.succeed(PaywallArtifactStore, {
+  bucketName: "paywall-artifacts-unconfigured",
+  getObject: () =>
+    Effect.fail(
+      new PaywallArtifactStoreError({
+        cause: "unconfigured",
+        message: "Paywall artifact store is not configured in this backend yet",
+      }),
+    ),
+  head: () =>
+    Effect.fail(
+      new PaywallArtifactStoreError({
+        cause: "unconfigured",
+        message: "Paywall artifact store is not configured in this backend yet",
+      }),
+    ),
+  putObject: () =>
+    Effect.fail(
+      new PaywallArtifactStoreError({
+        cause: "unconfigured",
+        message: "Paywall artifact store is not configured in this backend yet",
+      }),
+    ),
+});
+
+/**
+ * Placeholder {@link PublicFileStore} for harnesses that run the backend graph
+ * outside a Cloudflare Worker (test layers, in-process RPC smoke). The deployed
+ * worker provides the live R2 adapter instead
+ * (`stacks/backend/infrastructure/PublicFileStore.ts`). Every storage operation
+ * fails with a stable `PublicFileStoreError` so avatar mutations report the
+ * store as unconfigured instead of dying; URL helpers return an `.invalid` base
+ * so any leaked value is obviously non-routable.
+ */
+export const BackendPublicFileStoreStubLive = Layer.succeed(PublicFileStore, {
+  publicBaseUrl: "https://public-files-unconfigured.invalid",
+  publicUrl: (key: string) => `https://public-files-unconfigured.invalid/files/${key}`,
+  deleteObject: () =>
+    Effect.fail(
+      new PublicFileStoreError({
+        cause: "unconfigured",
+        message: "Public file store is not configured in this backend yet",
+      }),
+    ),
+  getObject: () =>
+    Effect.fail(
+      new PublicFileStoreError({
+        cause: "unconfigured",
+        message: "Public file store is not configured in this backend yet",
+      }),
+    ),
+  putObject: () =>
+    Effect.fail(
+      new PublicFileStoreError({
+        cause: "unconfigured",
+        message: "Public file store is not configured in this backend yet",
+      }),
+    ),
+});
+
+/**
+ * Succeeding stub {@link MimicHost} for harnesses that run the backend graph
+ * outside a Cloudflare Worker (test layers, in-process RPC smoke). The
+ * deployed worker provides the live mimic-db adapter instead
+ * (`stacks/backend/infrastructure/MimicHost.ts`). Unlike the artifact-store
+ * stub above, this one succeeds with a fixed fake token so the
+ * `RequestPaywallEditToken` handler chain (permission check → ensure → mint)
+ * is exercised end-to-end in process.
+ */
+export const BackendMimicHostStubLive = Layer.succeed(MimicHost, {
+  createPaywallEditToken: () =>
+    Effect.sync(() => ({
+      expiresAt: new Date(Date.now() + 300_000),
+      token: "stub-token",
+      url: "wss://stub.invalid/ws",
+    })),
+  ensurePaywallDocument: () => Effect.void,
+  getPaywallSnapshot: () =>
+    Effect.succeed(
+      PaywallDesignerDocument.decode(
+        PaywallDesignerDocument.encode(createInitialPaywallDocumentInput()),
+      )?.[0],
+    ),
+  getPaywallDocument: () =>
+    Effect.fail(
+      new MimicHostError({
+        cause: "getPaywallDocument is not available in the in-process backend harness",
+        message: "mimic host document read is not stubbed",
+      }),
+    ),
+  submitPaywallTransaction: () =>
+    Effect.fail(
+      new MimicHostError({
+        cause: "submitPaywallTransaction is not available in the in-process backend harness",
+        message: "mimic host transaction submit is not stubbed",
+      }),
+    ),
+});
+
+/**
+ * Stub {@link ComponentCompiler} for harnesses that run the backend graph
+ * outside a Node/container host: it reports `unavailable`, the same posture the
+ * deployed workerd worker takes. Workspace diagnostics for component files then
+ * degrade to cache-only (`unknown` on a miss); composition diagnostics still
+ * validate purely. A Node-hosted harness that wants real compile diagnostics
+ * provides the native-esbuild adapter instead
+ * (`stacks/backend/infrastructure/ComponentCompilerNode.ts`).
+ */
+export const BackendComponentCompilerStubLive = Layer.succeed(ComponentCompiler, {
+  compileCheck: () => Effect.succeed({ status: "unavailable" as const }),
+  compileAndExtract: () => Effect.succeed({ status: "unavailable" as const }),
+});
+
+export const BackendNoopIdentityProjectionPublisherLive = IdentityProjectionPublisher.noop;
+
+/**
+ * Stub {@link VoidhashAiService} for harnesses (and dev/smoke stages) that run
+ * the backend graph without an AI Gateway binding. Every `chat` call fails with
+ * a stable {@link VoidhashAiError} so the route graph still builds and the
+ * endpoint responds with a clear error instead of dying. Platform entry points
+ * can supply a live {@link VoidhashAiService} layer.
+ */
+export const BackendVoidhashAiStubLive = Layer.succeed(VoidhashAiService, {
+  chat: () => Effect.fail(new VoidhashAiError({ message: "AI gateway not configured" })),
+});
+
+const isAllowedCorsOrigin = (origin: string): boolean => {
+  try {
+    const url = new URL(origin);
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      return false;
+    }
+
+    return (
+      url.hostname === "localhost" ||
+      url.hostname === "127.0.0.1" ||
+      url.hostname.endsWith(".localhost") ||
+      url.hostname === "voidhash.com" ||
+      url.hostname.endsWith(".voidhash.com")
+    );
+  } catch {
+    return false;
+  }
+};
+
+const corsHeaders = (origin: string | undefined): Record<string, string> =>
+  origin && isAllowedCorsOrigin(origin)
+    ? {
+        "access-control-allow-credentials": "true",
+        "access-control-allow-origin": origin,
+        vary: "Origin",
+      }
+    : {};
+
+const preflightCorsHeaders = (
+  origin: string | undefined,
+  accessControlRequestHeaders: string | undefined,
+): Record<string, string> => ({
+  ...corsHeaders(origin),
+  "access-control-allow-headers": accessControlRequestHeaders ?? "",
+  "access-control-allow-methods": "GET, HEAD, PUT, PATCH, POST, DELETE",
+  "access-control-max-age": "600",
+  vary: accessControlRequestHeaders ? "Origin, Access-Control-Request-Headers" : "Origin",
+});
+
+const CorsLayer = HttpRouter.middleware(
+  (httpApp) =>
+    Effect.flatMap(HttpServerRequest.HttpServerRequest, (request) => {
+      if (request.method === "OPTIONS") {
+        return Effect.succeed(
+          HttpServerResponse.empty({
+            headers: preflightCorsHeaders(
+              request.headers.origin,
+              request.headers["access-control-request-headers"],
+            ),
+            status: 204,
+          }),
+        );
+      }
+
+      return Effect.map(httpApp, (response) =>
+        HttpServerResponse.setHeaders(response, corsHeaders(request.headers.origin)),
+      );
+    }),
+  { global: true },
+);
+
+const HealthCheckRoute = Layer.effectDiscard(
+  Effect.gen(function* () {
+    const router = yield* HttpRouter.HttpRouter;
+    yield* router.add("GET", "/api/health", HttpServerResponse.text("OK"));
+    yield* router.add("GET", "/health", HttpServerResponse.text("OK"));
+  }),
+);
+
+export interface BackendRuntimeCapabilities {
+  readonly auditLogs: boolean;
+  readonly billing: boolean;
+}
+
+const RuntimeCapabilitiesRoute = (capabilities: BackendRuntimeCapabilities) =>
+  Layer.effectDiscard(
+    Effect.gen(function* () {
+      const router = yield* HttpRouter.HttpRouter;
+      yield* router.add(
+        "GET",
+        "/api/runtime-capabilities",
+        HttpServerResponse.jsonUnsafe({
+          enterprise: capabilities,
+        }),
+      );
+    }),
+  );
+
+export type BackendCoreFeatureServices =
+  | AuditLogPort
+  | OrganizationBillingPort
+  | OrganizationMembershipSyncPort
+  | OrganizationMembershipWebhookPort;
+
+const buildBackendFoundation = <RInfrastructure = never>(
+  infrastructure: Layer.Layer<InfraServices, never, RInfrastructure>,
+) => {
+  const FoundationSupportServicesLayer = Layer.mergeAll(
+    LocalUserSessionService.layer,
+    PersonIdentityService.layer,
+    SchemaCacheInvalidationService.layer,
+  ).pipe(Layer.provideMerge(infrastructure));
+
+  return { FoundationSupportServicesLayer, infrastructure };
+};
+
+export type BackendFoundationGraph<RInfrastructure = never> = ReturnType<
+  typeof buildBackendFoundation<RInfrastructure>
+>;
+
+/**
+ * Assembles the shared RPC handler + support/domain service graph used by both
+ * the production HTTP handler ({@link buildBackendFetch}) and the in-process RPC
+ * integration smoke ({@link buildBackendRpcServices}). Returns the three layers
+ * the route graph is built from so neither caller has to re-derive the intricate
+ * provide-ordering.
+ */
+const buildBackendServiceGraph = <
+  RInfrastructure = never,
+  RFeatureRpcs extends Rpc.Any = never,
+  RFeatureServices = never,
+>(
+  layers: Pick<
+    BackendRuntimeLayers<RInfrastructure, RFeatureRpcs, RFeatureServices>,
+    | "features"
+    | "infrastructure"
+    | "webhookManager"
+    | "analyticsQueryClient"
+    | "pushDeliveryDispatch"
+  >,
+) => {
+  const RpcHandlersLayer = Layer.mergeAll(
+    AiChatRpcsLive,
+    AnalyticsRpcsLive,
+    ApiKeyRpcsLive,
+    ExperimentRpcsLive,
+    FeatureFlagRpcsLive,
+    FeedbackRpcsLive,
+    OrganizationRpcsLive,
+    PaymentProviderConfigurationRpcsLive,
+    PaymentProviderProductRpcsLive,
+    PushNotificationConfigurationRpcsLive,
+    PushNotificationSendRpcsLive,
+    PaywallAssetRpcsLive,
+    PaywallComponentRpcsLive,
+    PaywallDeployRpcsLive,
+    PaywallLocationRpcsLive,
+    PaywallRpcsLive,
+    PaywallWorkspaceRpcsLive,
+    PerkRpcsLive,
+    PersonRpcsLive,
+    ProductPerkRpcsLive,
+    ProductRpcsLive,
+    ProjectRpcsLive,
+    UserRpcsLive,
+    VoidQlRpcsLive,
+    WebhookRpcsLive,
+  );
+
+  const foundation = buildBackendFoundation(layers.infrastructure);
+  const FeatureSupportServicesLayer = layers.features.supportServices(foundation);
+
+  const WorkosLocalSyncServiceLayer = WorkosLocalSyncService.layer.pipe(
+    Layer.provide(foundation.FoundationSupportServicesLayer),
+    Layer.provide(FeatureSupportServicesLayer),
+    Layer.provide(layers.infrastructure),
+  );
+
+  const SupportServicesLayer = Layer.mergeAll(
+    foundation.FoundationSupportServicesLayer,
+    FeatureSupportServicesLayer,
+    WorkosLocalSyncServiceLayer,
+  );
+
+  // ExperimentService depends on FeatureFlagService (its backing-flag engine),
+  // provided explicitly since `mergeAll` does not cross-wire siblings. Shared
+  // (memoized by layer reference) between the standalone entry below and
+  // PaywallLocationService, which depends on it at serve time.
+  const ExperimentServiceLayer = ExperimentService.layer.pipe(
+    Layer.provide(FeatureFlagService.layer),
+  );
+
+  // VoidQL runs under the hardened single-shared `analytics_query` user when the
+  // caller wires that client (Layer.provide satisfies its ClickhouseWebClient
+  // before the ambient RLS readonly client is merged in); without it, it resolves
+  // the ambient readonly client and fail-closes to empty rows.
+  const VoidQlServiceLive = layers.analyticsQueryClient
+    ? VoidQlService.layer.pipe(Layer.provide(layers.analyticsQueryClient))
+    : VoidQlService.layer;
+
+  const BaseDomainServicesLayer = Layer.mergeAll(
+    AiChatService.layer,
+    AnalyticsService.layer,
+    ApiKeyService.layer,
+    BackendFeedbackServiceLive,
+    BackendAppStorePaymentProviderServiceLive,
+    BackendGooglePlayPaymentProviderServiceLive,
+    BackendStripePaymentProviderServiceLive,
+    ExperimentServiceLayer,
+    FeatureFlagService.layer,
+    InternalFeatureFlagService.layer,
+    // Push notifications: the per-(project, provider) config CRUD consumes the
+    // two delivery-provider tags (supplied by BackendPushProvidersLive below)
+    // and reads PUSH_REQUIRE_ENCRYPTION so prod fails closed on plaintext secrets.
+    NotificationsConfigurationService.layer({
+      requireEncryption: Effect.sync(() => process.env.PUSH_REQUIRE_ENCRYPTION === "true"),
+    }),
+    // Read-only send-history surface backing the "sent notifications" activity page.
+    PushNotificationSendService.layer,
+    PersonNotificationTokenService.layer,
+    OrganizationService.layer,
+    PaywallAssetService.layer,
+    PaymentProviderConfigurationService.layer,
+    PaymentProviderProductService.layer,
+    PaywallDeployService.layer,
+    PaywallLocationService.layer.pipe(Layer.provide(ExperimentServiceLayer)),
+    PaywallReleaseService.layer.pipe(Layer.provide(BackendSnapshotHtmlRendererLive)),
+    PaywallService.layer,
+    ComponentManifestCacheService.layer,
+    // The workspace service needs PaywallService (authz + slug resolution) and
+    // the manifest cache; `mergeAll` does not cross-wire siblings, so both are
+    // provided explicitly. MimicHost and ComponentCompiler (the headless compile
+    // phase — an `unavailable` adapter in the deployed worker) come from the
+    // infrastructure layer.
+    PaywallWorkspaceService.layer.pipe(
+      Layer.provide(PaywallService.layer),
+      Layer.provide(ComponentManifestCacheService.layer),
+    ),
+    PerkGrantService.layer,
+    PerkService.layer,
+    PersonService.layer,
+    ProductPerkService.layer,
+    ProductService.layer,
+    ProjectService.layer,
+    PurchaseService.layer,
+    SchemaService.layer,
+    UserService.layer,
+    VoidQlServiceLive,
+    layers.webhookManager ?? WebhookManagerService.layer,
+  ).pipe(Layer.provide(BackendPushProvidersLive), Layer.provide(SupportServicesLayer));
+
+  // The synchronous SDK person-attribute write projects into ClickHouse via the
+  // real `analyticsWriterLayer`. This is scoped to `SdkService` ONLY (provided
+  // innermost so it discharges the `IdentityProjectionPublisher` requirement
+  // first) — everywhere else, including `PersonIdentityService`'s own publisher
+  // and the async ingest processor, keeps the no-op binding so person rows are
+  // never double-written.
+  const SdkIdentityProjectionPublisherLayer = IdentityProjectionPublisher.analyticsWriterLayer.pipe(
+    Layer.provide(AnalyticsWriterService.layer),
+    Layer.provide(layers.infrastructure),
+  );
+
+  const DomainServicesLayer = Layer.mergeAll(
+    BaseDomainServicesLayer,
+    SdkService.layer.pipe(
+      Layer.provide(SdkIdentityProjectionPublisherLayer),
+      Layer.provide(BaseDomainServicesLayer),
+      Layer.provide(SupportServicesLayer),
+    ),
+    // The UUID seam depends on PersonNotificationTokenService (from Base) plus Db
+    // and AuditLogPort (from Support); build it on top of both.
+    NotificationTokenService.layer.pipe(
+      Layer.provide(BaseDomainServicesLayer),
+      Layer.provide(SupportServicesLayer),
+    ),
+    // The push send path depends on PersonNotificationTokenService (Base),
+    // PersonIdentityService + Db (Support), and the queue-backed dispatcher
+    // (from the worker, or the noop in dev/smoke).
+    NotificationSendingService.layer.pipe(
+      Layer.provide(layers.pushDeliveryDispatch ?? PushDeliveryDispatch.noop),
+      Layer.provide(BaseDomainServicesLayer),
+      Layer.provide(SupportServicesLayer),
+    ),
+  );
+
+  return {
+    DomainServicesLayer,
+    FeatureSupportServicesLayer,
+    RpcHandlersLayer,
+    SupportServicesLayer,
+  };
+};
+
+export type BackendServiceGraph<
+  RInfrastructure = never,
+  RFeatureServices = never,
+> = ReturnType<
+  typeof buildBackendServiceGraph<RInfrastructure, never, RFeatureServices>
+>;
+
+/** Private or enterprise RPC surface mounted by an application composition root. */
+export interface BackendRpcExtension<RExtensionRpcs extends Rpc.Any> {
+  readonly group: RpcGroup.RpcGroup<RExtensionRpcs>;
+  readonly services: <RInfrastructure, RFeatureServices>(
+    graph: BackendServiceGraph<RInfrastructure, RFeatureServices>,
+  ) => Layer.Layer<
+    Rpc.ToHandler<RExtensionRpcs> | Rpc.Middleware<RExtensionRpcs>,
+    never,
+    RInfrastructure
+  >;
+}
+
+/** Product feature bundle that supplies core ports, RPCs, routes, and UI capabilities. */
+export interface BackendFeatureComposition<
+  RFeatureRpcs extends Rpc.Any,
+  RFeatureServices,
+> {
+  readonly group: RpcGroup.RpcGroup<RFeatureRpcs>;
+  readonly runtimeCapabilities: BackendRuntimeCapabilities;
+  readonly routes: <RInfrastructure>(
+    graph: BackendServiceGraph<RInfrastructure, RFeatureServices>,
+  ) => Layer.Layer<
+    never,
+    never,
+    HttpRouter.HttpRouter | HttpRouter.Request<string, unknown> | RInfrastructure
+  >;
+  readonly supportServices: <RInfrastructure>(
+    foundation: BackendFoundationGraph<RInfrastructure>,
+  ) => Layer.Layer<BackendCoreFeatureServices | RFeatureServices, never, RInfrastructure>;
+  readonly services: <RInfrastructure>(
+    graph: BackendServiceGraph<RInfrastructure, RFeatureServices>,
+  ) => Layer.Layer<Rpc.ToHandler<RFeatureRpcs>, never, RInfrastructure>;
+}
+
+/** Core-only feature composition used when the enterprise source tree is absent. */
+export const NoBackendFeatures: BackendFeatureComposition<never, never> = {
+  group: RpcGroup.make(),
+  routes: () => Layer.empty,
+  runtimeCapabilities: { auditLogs: false, billing: false },
+  services: () => Layer.empty,
+  supportServices: () =>
+    Layer.mergeAll(
+      AuditLogPort.noop,
+      OrganizationBillingPort.noop,
+      OrganizationMembershipSyncPort.noop,
+      OrganizationMembershipWebhookPort.noop,
+    ),
+};
+
+/** Explicitly disables additional RPC surfaces for a backend composition root. */
+export const NoBackendRpcExtension: BackendRpcExtension<never> = {
+  group: RpcGroup.make(),
+  services: () => Layer.empty,
+};
+
+/**
+ * The RPC handlers + auth middleware, fed by the full support/domain service
+ * graph — i.e. exactly the context `RpcTest.makeClient(RpcGroups)` requires
+ * (`Rpc.ToHandler<RpcGroups> | AuthMiddleware`). Used by the
+ * in-process integration smoke to dispatch RPCs against the real handler graph
+ * without an HTTP transport. The only requirements that remain are the
+ * {@link InfraServices} (provided by the caller's `infrastructure` layer) and
+ * the asynchronous workflow ports the handlers resolve lazily at request time
+ * (`WebhookDeliveryWorkflow`, `IdentifyDistinctIdCompletionWorkflow`,
+ * `AppStoreReplayParkedNotificationsWorkflow`).
+ */
+export const buildBackendRpcServices = <
+  RInfrastructure = never,
+  RFeatureRpcs extends Rpc.Any = never,
+  RFeatureServices = never,
+  RExtensionRpcs extends Rpc.Any = never,
+>(
+  layers: Pick<
+    BackendRuntimeLayers<
+      RInfrastructure,
+      RFeatureRpcs,
+      RFeatureServices,
+      RExtensionRpcs
+    >,
+    | "auth"
+    | "features"
+    | "infrastructure"
+    | "webhookManager"
+    | "analyticsQueryClient"
+    | "rpcExtension"
+  >,
+) => {
+  const graph = buildBackendServiceGraph(layers);
+  const { DomainServicesLayer, RpcHandlersLayer, SupportServicesLayer } = graph;
+  const FeatureServicesLayer = layers.features.services(graph);
+  const ExtensionServicesLayer = layers.rpcExtension.services(graph);
+
+  return Layer.mergeAll(
+    RpcHandlersLayer,
+    FeatureServicesLayer,
+    ExtensionServicesLayer,
+    layers.auth,
+  ).pipe(
+    Layer.provide(DomainServicesLayer),
+    Layer.provide(SupportServicesLayer),
+  );
+};
+
+/**
+ * Builds the backend HTTP handler from the same RPC/API route graph used in production.
+ *
+ * @internal The monorepo composition roots consume this source entry directly. The
+ * inferred Effect route type exceeds TypeScript's declaration serializer limit, so
+ * consumers compile this exact source signature instead of a widened declaration.
+ */
+export const buildBackendFetch = <
+  RInfrastructure = never,
+  RFeatureRpcs extends Rpc.Any = never,
+  RFeatureServices = never,
+  RExtensionRpcs extends Rpc.Any = never,
+>(
+  layers: BackendRuntimeLayers<
+    RInfrastructure,
+    RFeatureRpcs,
+    RFeatureServices,
+    RExtensionRpcs
+  >,
+) => {
+  const graph = buildBackendServiceGraph(layers);
+  const { DomainServicesLayer, RpcHandlersLayer, SupportServicesLayer } = graph;
+  const FeatureServicesLayer = layers.features.services(graph);
+  const ExtensionServicesLayer = layers.rpcExtension.services(graph);
+  const RpcGroup = RpcGroups.merge(layers.features.group, layers.rpcExtension.group);
+
+  const RpcRouteDependencies = Layer.mergeAll(
+    RpcSerialization.layerNdjson,
+    layers.auth,
+    RpcHandlersLayer,
+    FeatureServicesLayer,
+    ExtensionServicesLayer,
+  );
+
+  const RpcRoutesBase = RpcServer.layerHttp({
+    group: RpcGroup,
+    path: "/rpc/*",
+    protocol: "http",
+  });
+
+  const RpcRoutesLayer = RpcRoutesBase.pipe(
+    Layer.provide(RpcRouteDependencies.pipe(Layer.provide(SupportServicesLayer))),
+    Layer.provide(DomainServicesLayer),
+    Layer.provide(SupportServicesLayer),
+  );
+
+  const V1GroupsLayer = Layer.mergeAll(
+    ApiKeysGroupLive,
+    AuthGroupLive,
+    NotificationsGroupLive,
+    OrganizationsGroupLive,
+    PaymentProviderConfigurationsGroupLive,
+    PaymentProviderProductsGroupLive,
+    PaywallDeploysGroupLive,
+    PaywallLocationsGroupLive,
+    PerksGroupLive,
+    PersonsGroupLive,
+    ProductPerksGroupLive,
+    ProductsGroupLive,
+    ProjectsGroupLive,
+    SchemaGroupLive,
+    SdkGroupLive,
+    UsersGroupLive,
+    WebhooksGroupLive,
+  );
+
+  // Provided to every group as the per-request `AuthMiddleware` impl. Itself
+  // depends on `ApiKeyService`, `LocalUserSessionService`, and `Workos` —
+  // wired here so the api-contracts middleware sees a populated context.
+  const HttpAuthMiddlewareLive = AuthMiddlewareLive.pipe(
+    Layer.provide(DomainServicesLayer),
+    Layer.provide(SupportServicesLayer),
+  );
+
+  const V1ApiRoutes = HttpApiBuilder.layer(VoidhashV1Api, {
+    openapiPath: "/api/docs/openapi.json",
+  }).pipe(
+    Layer.provide(V1GroupsLayer),
+    Layer.provide(HttpAuthMiddlewareLive),
+    Layer.provide(DomainServicesLayer),
+    Layer.provide(SupportServicesLayer),
+  );
+
+  // Webhook routes register raw handlers on the underlying `HttpRouter`. A raw
+  // `router.add` handler's service requirements (DB + WorkOS +
+  // LocalUserSessionService + OrganizationMembershipWebhookPort for the WorkOS
+  // one) surface as a deferred
+  // `Request.From<"Requires", …>` that resolves at request time, NOT a normal
+  // layer dependency — so `Layer.provide` does not discharge it (it would
+  // silently leak to the request handler and die with "Service not found").
+  // `HttpRouter.provideRequest` is the combinator that satisfies these
+  // request-scoped requirements. The Autumn webhook handler resolves `Db` +
+  // `BillingService` at request time (both part of the merged graph below);
+  // the Apple handler resolves the live public App Store service the same way.
+  const WebhookRoutesLayer = Layer.mergeAll(
+    AppleServerToServerNotificationRouteLayer,
+    GooglePlayRtdnNotificationRouteLayer,
+    StripeWebhookNotificationRouteLayer,
+    WorkosWebhookRouteLayer,
+    layers.features.routes(graph),
+  ).pipe(HttpRouter.provideRequest(Layer.mergeAll(SupportServicesLayer, DomainServicesLayer)));
+
+  // Public, unauthenticated serving of code-deployed paywall artifacts
+  // (deploy contract §5). A raw route like the webhooks, so its request-time
+  // requirement (`PaywallArtifactStore`, part of the infrastructure merged
+  // into `SupportServicesLayer`) needs `HttpRouter.provideRequest`.
+  const PaywallServingLayer = PaywallServingRouteLayer.pipe(
+    HttpRouter.provideRequest(SupportServicesLayer),
+  );
+
+  // Public, unauthenticated serving of stored public assets (`GET /files/*`,
+  // e.g. avatars). Like the paywall serving layer, its request-time requirement
+  // (`PublicFileStore`, part of the infrastructure merged into
+  // `SupportServicesLayer`) needs `HttpRouter.provideRequest`.
+  const PublicFileServingLayer = PublicFileServingRouteLayer.pipe(
+    HttpRouter.provideRequest(SupportServicesLayer),
+  );
+
+  // Voidhash AI streaming chat route (`POST /api/ai/chat`). Registered only when
+  // a token verifier is available; the request-scoped requirements —
+  // `VoidhashAiService` (live when supplied, else the
+  // failing stub) plus `Db` / `Workos` / `LocalUserSessionService` from the
+  // domain graph for session resolution — are satisfied via `provideRequest`,
+  // like the webhook routes.
+  const VoidhashAiServiceLayer = layers.aiService ?? BackendVoidhashAiStubLive;
+
+  const AiRoutesLayer = layers.authTokenVerifier
+    ? AiChatRouteLayer(layers.authTokenVerifier).pipe(
+        // The server-executed agent tools reach the workspace/chat services via
+        // `VoidhashAiService.chat`; those (plus `Db`/`Workos`/session-resolution
+        // support) must be request-scoped. `AuthSession` is provided in-handler
+        // from the resolved session, so the domain graph here is session-free.
+        HttpRouter.provideRequest(
+          Layer.mergeAll(VoidhashAiServiceLayer, DomainServicesLayer, SupportServicesLayer),
+        ),
+      )
+    : Layer.empty;
+
+  // MCP endpoint (`POST /api/mcp`, stateless streamable HTTP). Its request-scoped
+  // requirements — `ApiKeyService` (secret-key auth) + `PaywallWorkspaceService`
+  // + `AiChatService` (the shared workspace tools' context) + `Db` (key
+  // validation) — are satisfied via `provideRequest` like the AI chat route.
+  // `AuthSession` is provided in-handler from the validated secret key. Unlike
+  // the AI chat route, MCP needs no JWT namespace (it authenticates with v1
+  // secret keys), so it registers unconditionally.
+  const McpRoutesLayer = McpRouteLayer.pipe(
+    HttpRouter.provideRequest(Layer.mergeAll(DomainServicesLayer, SupportServicesLayer)),
+  );
+
+  const RoutesLayer = Layer.mergeAll(
+    RpcRoutesLayer,
+    V1ApiRoutes,
+    WebhookRoutesLayer,
+    PaywallServingLayer,
+    PublicFileServingLayer,
+    AiRoutesLayer,
+    McpRoutesLayer,
+    HealthCheckRoute,
+    RuntimeCapabilitiesRoute(layers.features.runtimeCapabilities),
+    layers.routes ?? Layer.empty,
+  ).pipe(Layer.provide(CorsLayer));
+
+  // `toHttpEffect` returns a *builder* effect that yields the per-request
+  // handler (built once at init); we map over it to wrap that inner handler.
+  // `HttpMiddleware.tracer` opens the per-request `server` span (reading W3C
+  // `traceparent` for distributed propagation and setting standard `http.*` /
+  // `url.*` attributes) and installs it as the parent of every downstream
+  // `Effect.fn` span; `withRequestId` runs inside it to stamp/echo the
+  // `x-request-id` correlation id. Both are no-ops under the default no-op
+  // tracer (tests / dev without the OTLP layer); the real tracer is provided at
+  // the Worker fetch-graph root.
+  const httpAppBuilder = RoutesLayer.pipe(
+    Layer.provide(HttpServer.layerServices),
+    HttpRouter.toHttpEffect,
+  );
+  return Effect.map(httpAppBuilder, (handler) => HttpMiddleware.tracer(withRequestId(handler)));
+};
diff --git a/apps/backend/src/BackendRpcGroups.test.ts b/apps/backend/src/BackendRpcGroups.test.ts
new file mode 100644
index 000000000..a2ee4775a
--- /dev/null
+++ b/apps/backend/src/BackendRpcGroups.test.ts
@@ -0,0 +1,16 @@
+import { RpcGroups } from "@voidhash/rpc";
+import { describe, expect, it } from "vitest";
+
+import { BackendRpcGroups } from "./BackendRpcGroups.ts";
+
+describe("backend RPC composition", () => {
+  it("uses only the Community product transport before extensions mount", () => {
+    expect([...BackendRpcGroups.requests.keys()]).toEqual([...RpcGroups.requests.keys()]);
+  });
+
+  it("does not mount private operations procedures", () => {
+    expect(
+      [...BackendRpcGroups.requests.keys()].filter((tag) => tag.startsWith("Admin")),
+    ).toEqual([]);
+  });
+});
diff --git a/apps/backend/src/BackendRpcGroups.ts b/apps/backend/src/BackendRpcGroups.ts
new file mode 100644
index 000000000..f1cb78eb0
--- /dev/null
+++ b/apps/backend/src/BackendRpcGroups.ts
@@ -0,0 +1,4 @@
+import { RpcGroups } from "@voidhash/rpc";
+
+/** Community product RPC transport before optional feature and private extensions mount. */
+export const BackendRpcGroups = RpcGroups;
diff --git a/apps/backend/src/PaywallSnapshotHtmlRenderer.test.ts b/apps/backend/src/PaywallSnapshotHtmlRenderer.test.ts
new file mode 100644
index 000000000..d8f27839f
--- /dev/null
+++ b/apps/backend/src/PaywallSnapshotHtmlRenderer.test.ts
@@ -0,0 +1,41 @@
+import { SnapshotHtmlRenderer } from "@voidhash/core/services/paywallReleases/SnapshotHtmlRenderer";
+import {
+  createInitialPaywallDocumentInput,
+  PaywallDesignerDocument,
+} from "@voidhash/mimic-schema";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { BackendSnapshotHtmlRendererLive } from "./PaywallSnapshotHtmlRenderer.ts";
+
+describe("BackendSnapshotHtmlRendererLive", () => {
+  it("renders a hydrated Mimic snapshot with release metadata", async () => {
+    const snapshot = PaywallDesignerDocument.decode(
+      PaywallDesignerDocument.encode(createInitialPaywallDocumentInput()),
+    )?.[0];
+
+    const html = await Effect.runPromise(
+      Effect.gen(function* () {
+        const renderer = yield* SnapshotHtmlRenderer;
+        return yield* renderer.render({
+          componentTrees: {},
+          metadata: {
+            createdAt: "2026-07-11T00:00:00.000Z",
+            schemaVersion: 1,
+            status: "draft",
+            version: 3,
+          },
+          snapshot,
+        });
+      }).pipe(
+        Effect.catch((error) => Effect.die(error.cause)),
+        Effect.provide(BackendSnapshotHtmlRendererLive),
+      ),
+    );
+
+    expect(html).toContain("<!DOCTYPE html>");
+    expect(html).toContain("VOIDHASH_PAYWALL_METADATA");
+    expect(html).toContain('"version":3');
+    expect(html).toContain("__VOIDHASH_PAYWALL__");
+  });
+});
diff --git a/apps/backend/src/PaywallSnapshotHtmlRenderer.ts b/apps/backend/src/PaywallSnapshotHtmlRenderer.ts
new file mode 100644
index 000000000..4e986baf9
--- /dev/null
+++ b/apps/backend/src/PaywallSnapshotHtmlRenderer.ts
@@ -0,0 +1,31 @@
+import {
+  SnapshotHtmlRenderer,
+  SnapshotHtmlRenderError,
+} from "@voidhash/core/services/paywallReleases/SnapshotHtmlRenderer";
+import type { ComponentArtifacts, SnapshotNode } from "@voidhash/paywall-renderer-preact";
+import { Effect, Layer } from "effect";
+
+/** Portable Preact adapter for hydrated visual paywall release documents. */
+export const BackendSnapshotHtmlRendererLive = Layer.succeed(SnapshotHtmlRenderer, {
+  render: (input) =>
+    Effect.tryPromise({
+      try: async () => {
+        const preact = await import("preact");
+        const runtimeGlobals = globalThis as unknown as { React?: typeof preact };
+        runtimeGlobals.React ??= preact;
+        const { renderPaywallToHtml } = await import("@voidhash/paywall-renderer-preact");
+        return renderPaywallToHtml(input.snapshot as SnapshotNode, {
+          componentArtifacts: {
+            trees: input.componentTrees,
+          } as ComponentArtifacts,
+          hydrate: true,
+          metadata: input.metadata,
+        }).html;
+      },
+      catch: (cause) =>
+        new SnapshotHtmlRenderError({
+          cause: cause instanceof Error ? cause.message : String(cause),
+          message: "Failed to render the paywall release document",
+        }),
+    }),
+});
diff --git a/apps/backend/src/RpcMiddlewares.ts b/apps/backend/src/RpcMiddlewares.ts
new file mode 100644
index 000000000..9bee24478
--- /dev/null
+++ b/apps/backend/src/RpcMiddlewares.ts
@@ -0,0 +1,61 @@
+import { Db } from "@voidhash/db";
+import type { AuthTokenVerifier } from "@voidhash/core/services/auth/AuthTokenVerifier";
+import { LocalUserSessionService } from "@voidhash/core/services/auth/LocalUserSessionService";
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import {
+  AuthMiddleware,
+  AuthSession,
+} from "@voidhash/rpc";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+import * as HttpServerRequest from "effect/unstable/http/HttpServerRequest";
+import { Effect, Layer, Option, pipe } from "effect";
+
+import { resolveWorkosSession } from "./AuthSessionResolver.ts";
+import { withIdentity } from "./Telemetry.ts";
+
+const withHttpRequestHeaders = (headers: HttpHeaders.Headers): Effect.Effect<HttpHeaders.Headers> =>
+  Effect.serviceOption(HttpServerRequest.HttpServerRequest).pipe(
+    Effect.map(
+      Option.match({
+        onNone: () => headers,
+        onSome: (request) => HttpHeaders.merge(headers, HttpHeaders.fromInput(request.headers)),
+      }),
+    ),
+  );
+
+/** Builds the shared WorkOS-backed session resolver used by RPC auth adapters. */
+export const makeRpcSessionResolver = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
+  Effect.gen(function* () {
+    const localUserSessions = yield* LocalUserSessionService;
+    const workosAuth = yield* Workos;
+    const db = yield* Db;
+
+    return (headers: HttpHeaders.Headers) =>
+      withHttpRequestHeaders(headers).pipe(
+        Effect.flatMap((requestHeaders) =>
+          resolveWorkosSession(requestHeaders, authTokenVerifier).pipe(
+            Effect.provideService(Db)(db),
+            Effect.provideService(Workos)(workosAuth),
+            Effect.provideService(LocalUserSessionService)(localUserSessions),
+          ),
+        ),
+      );
+  });
+
+/** Builds RPC authentication against an injected token-verification port. */
+export const RpcAuthLive = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
+  Layer.effect(
+    AuthMiddleware,
+    Effect.gen(function* () {
+      const resolveSession = yield* makeRpcSessionResolver(authTokenVerifier);
+
+      return AuthMiddleware.of((effect, { headers }) =>
+        pipe(
+          resolveSession(headers),
+          Effect.flatMap((session) =>
+            withIdentity(session, Effect.provideService(effect, AuthSession, session)),
+          ),
+        ),
+      );
+    }),
+  );
diff --git a/apps/backend/src/Telemetry.test.ts b/apps/backend/src/Telemetry.test.ts
new file mode 100644
index 000000000..135911758
--- /dev/null
+++ b/apps/backend/src/Telemetry.test.ts
@@ -0,0 +1,141 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Context, Effect } from "effect";
+import * as Tracer from "effect/Tracer";
+
+import { identityAttributes, withIdentity, type IdentitySource } from "./Telemetry.ts";
+
+const userSession: IdentitySource = {
+  method: "user",
+  user: { id: "user_1", workosUserId: "wos_user_1", role: "admin" },
+  person: null,
+  organizations: [
+    { id: "org_1", slug: "acme", workosOrganizationId: "wos_org_1" },
+    { id: "org_2", slug: "beta", workosOrganizationId: null },
+  ],
+  projects: [{ id: "proj_1", slug: "web", organizationId: "org_1" }],
+};
+
+const secretKeySession: IdentitySource = {
+  method: "secret-key",
+  user: null,
+  person: null,
+  organizations: [],
+  projects: [{ id: "proj_9", slug: "sdk", organizationId: "org_9" }],
+};
+
+const publishableKeySession: IdentitySource = {
+  method: "publishable-key",
+  user: null,
+  person: { distinctId: "distinct_42" },
+  organizations: [],
+  projects: [{ id: "proj_9", slug: "sdk", organizationId: "org_9" }],
+};
+
+const attrMap = (session: IdentitySource): Map<string, string> =>
+  new Map(identityAttributes(session).map(([k, v]) => [k, v]));
+
+describe("identityAttributes", () => {
+  it("stamps the acting user, first org/project, and counts for a user session", () => {
+    const attrs = attrMap(userSession);
+    expect(attrs.get("voidhash.auth.method")).toBe("user");
+    expect(attrs.get("voidhash.user.id")).toBe("user_1");
+    expect(attrs.get("voidhash.user.workos_id")).toBe("wos_user_1");
+    expect(attrs.get("voidhash.user.role")).toBe("admin");
+    // First org is stamped; count signals there are more.
+    expect(attrs.get("voidhash.organization.id")).toBe("org_1");
+    expect(attrs.get("voidhash.organization.slug")).toBe("acme");
+    expect(attrs.get("voidhash.organization.workos_id")).toBe("wos_org_1");
+    expect(attrs.get("voidhash.organization.count")).toBe("2");
+    expect(attrs.get("voidhash.project.id")).toBe("proj_1");
+    expect(attrs.get("voidhash.project.organization_id")).toBe("org_1");
+    expect(attrs.get("voidhash.project.count")).toBe("1");
+    // No person on a user session.
+    expect(attrs.has("voidhash.person.distinct_id")).toBe(false);
+  });
+
+  it("stamps the scoped project (and its org) for a secret-key session, no user", () => {
+    const attrs = attrMap(secretKeySession);
+    expect(attrs.get("voidhash.auth.method")).toBe("secret-key");
+    expect(attrs.has("voidhash.user.id")).toBe(false);
+    expect(attrs.has("voidhash.person.distinct_id")).toBe(false);
+    expect(attrs.get("voidhash.project.id")).toBe("proj_9");
+    expect(attrs.get("voidhash.project.organization_id")).toBe("org_9");
+    expect(attrs.get("voidhash.organization.count")).toBe("0");
+  });
+
+  it("stamps the person distinct id for a publishable-key session", () => {
+    const attrs = attrMap(publishableKeySession);
+    expect(attrs.get("voidhash.auth.method")).toBe("publishable-key");
+    expect(attrs.get("voidhash.person.distinct_id")).toBe("distinct_42");
+    expect(attrs.get("voidhash.project.id")).toBe("proj_9");
+  });
+
+  it("omits nullable fields rather than emitting the string null", () => {
+    const attrs = attrMap({
+      method: "user",
+      user: { id: "user_2", workosUserId: null, role: null },
+      person: null,
+      organizations: [{ id: "org_3", slug: "solo", workosOrganizationId: null }],
+      projects: [],
+    });
+    expect(attrs.has("voidhash.user.workos_id")).toBe(false);
+    expect(attrs.has("voidhash.user.role")).toBe(false);
+    expect(attrs.has("voidhash.organization.workos_id")).toBe(false);
+    expect(attrs.has("voidhash.project.id")).toBe(false);
+    expect(attrs.get("voidhash.project.count")).toBe("0");
+  });
+});
+
+/** Minimal in-memory tracer that records every attribute stamped on each span. */
+const makeRecordingTracer = () => {
+  const spans = new Map<string, Map<string, unknown>>();
+  let counter = 0;
+  const tracer = Tracer.make({
+    span(options) {
+      const attributes = new Map<string, unknown>();
+      const id = `span-${counter++}`;
+      spans.set(options.name, attributes);
+      const span: Tracer.Span = {
+        _tag: "Span",
+        name: options.name,
+        spanId: id,
+        traceId: "trace",
+        parent: options.parent,
+        annotations: Context.empty(),
+        status: { _tag: "Started", startTime: options.startTime },
+        attributes,
+        links: options.links,
+        sampled: options.sampled,
+        kind: options.kind,
+        end() {},
+        attribute(key, value) {
+          attributes.set(key, value);
+        },
+        event() {},
+        addLinks() {},
+      };
+      return span;
+    },
+  });
+  return { tracer, spans };
+};
+
+describe("withIdentity", () => {
+  it("annotates identity attributes onto the current span", async () => {
+    const { tracer, spans } = makeRecordingTracer();
+
+    await Effect.runPromise(
+      withIdentity(userSession, Effect.void).pipe(
+        Effect.withSpan("rpc.test"),
+        Effect.withTracer(tracer),
+      ),
+    );
+
+    const attrs = spans.get("rpc.test");
+    expect(attrs).toBeDefined();
+    expect(attrs?.get("voidhash.user.id")).toBe("user_1");
+    expect(attrs?.get("voidhash.organization.id")).toBe("org_1");
+    expect(attrs?.get("voidhash.project.id")).toBe("proj_1");
+    expect(attrs?.get("voidhash.auth.method")).toBe("user");
+  });
+});
diff --git a/apps/backend/src/Telemetry.ts b/apps/backend/src/Telemetry.ts
new file mode 100644
index 000000000..005dfe2b1
--- /dev/null
+++ b/apps/backend/src/Telemetry.ts
@@ -0,0 +1,147 @@
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Headers from "effect/unstable/http/Headers";
+import * as HttpServerRequest from "effect/unstable/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/unstable/http/HttpServerResponse";
+
+/**
+ * Request-context OpenTelemetry helpers for the backend HTTP/RPC handler.
+ *
+ * The tracer Layer itself is provided at the Worker fetch-graph root
+ * (`stacks/backend/workers/BackendWorker.ts`); these helpers run inside the
+ * request span created by `HttpMiddleware.tracer` and stamp the cross-cutting
+ * attributes that make a request traceable end-to-end. With Effect's default
+ * no-op tracer (dev / tests) every call here is a cheap no-op.
+ *
+ * See `docs/attribute-registry.md` for the canonical attribute set.
+ */
+
+const REQUEST_ID_HEADER = "x-request-id";
+
+/** Stable, greppable prefix so request ids are obvious in logs and Axiom. */
+const generateRequestId = (): string => `req_${crypto.randomUUID()}`;
+
+/**
+ * HTTP middleware that establishes the per-request correlation id. Reads an
+ * inbound `x-request-id` (propagated by callers such as `apps/www`) or mints a
+ * fresh one, stamps it on the current request span as `voidhash.request.id`,
+ * annotates every log emitted while handling the request, and echoes it back on
+ * the response so clients can quote it in bug reports.
+ *
+ * Apply it *inside* `HttpMiddleware.tracer` so the request span already exists.
+ */
+export const withRequestId = <E, R>(
+  httpApp: Effect.Effect<
+    HttpServerResponse.HttpServerResponse,
+    E,
+    HttpServerRequest.HttpServerRequest | R
+  >,
+): Effect.Effect<
+  HttpServerResponse.HttpServerResponse,
+  E,
+  HttpServerRequest.HttpServerRequest | R
+> =>
+  Effect.gen(function* () {
+    const request = yield* HttpServerRequest.HttpServerRequest;
+    const requestId = Option.getOrElse(
+      Headers.get(request.headers, REQUEST_ID_HEADER),
+      generateRequestId,
+    );
+    yield* Effect.annotateCurrentSpan("voidhash.request.id", requestId);
+    const response = yield* Effect.annotateLogs(httpApp, "voidhash.request.id", requestId);
+    return HttpServerResponse.setHeader(response, REQUEST_ID_HEADER, requestId);
+  });
+
+/**
+ * Structural view of an authenticated session, satisfied by both the RPC
+ * `UserSession` (`@voidhash/rpc`) and the HTTP API sessions
+ * (`@voidhash/api-contracts`). Declared locally so this module couples to
+ * neither package's exact schema.
+ */
+export interface IdentitySource {
+  readonly method: string;
+  readonly user: {
+    readonly id: string;
+    readonly workosUserId?: string | null;
+    readonly role?: string | null;
+  } | null;
+  readonly person: { readonly distinctId: string } | null;
+  readonly organizations: ReadonlyArray<{
+    readonly id: string;
+    readonly slug: string;
+    readonly workosOrganizationId?: string | null;
+  }>;
+  readonly projects: ReadonlyArray<{
+    readonly id: string;
+    readonly slug: string;
+    readonly organizationId: string;
+  }>;
+}
+
+/**
+ * The canonical identity attributes for a session — the per-request set defined
+ * in `docs/attribute-registry.md` §2b. Stamps the authenticated principal
+ * (user / person + auth method), the active/first organization and project, and
+ * `*.count` cardinality breadcrumbs so a multi-org/multi-project session is
+ * flagged without dumping every id. Nullable fields are omitted (never emitted
+ * as the string `"null"`). A request's *target* entity — when it differs from
+ * the principal's first org/project — is stamped on the domain service span
+ * instead.
+ */
+export const identityAttributes = (
+  session: IdentitySource,
+): ReadonlyArray<readonly [string, string]> => {
+  const attrs: Array<readonly [string, string]> = [
+    ["voidhash.auth.method", session.method],
+    ["voidhash.organization.count", String(session.organizations.length)],
+    ["voidhash.project.count", String(session.projects.length)],
+  ];
+
+  if (session.user) {
+    attrs.push(["voidhash.user.id", session.user.id]);
+    if (session.user.workosUserId)
+      attrs.push(["voidhash.user.workos_id", session.user.workosUserId]);
+    if (session.user.role) attrs.push(["voidhash.user.role", session.user.role]);
+  }
+  if (session.person) attrs.push(["voidhash.person.distinct_id", session.person.distinctId]);
+
+  const org = session.organizations[0];
+  if (org) {
+    attrs.push(["voidhash.organization.id", org.id], ["voidhash.organization.slug", org.slug]);
+    if (org.workosOrganizationId) {
+      attrs.push(["voidhash.organization.workos_id", org.workosOrganizationId]);
+    }
+  }
+
+  const project = session.projects[0];
+  if (project) {
+    attrs.push(
+      ["voidhash.project.id", project.id],
+      ["voidhash.project.slug", project.slug],
+      ["voidhash.project.organization_id", project.organizationId],
+    );
+  }
+
+  return attrs;
+};
+
+/**
+ * Stamp the {@link identityAttributes} for `session` onto the current span and
+ * onto every log emitted while running `effect`. Call this in the auth
+ * middleware around the handler effect (right where `AuthSession` is provided)
+ * so every span and log under an authenticated request carries the principal.
+ */
+export const withIdentity = <A, E, R>(
+  session: IdentitySource,
+  effect: Effect.Effect<A, E, R>,
+): Effect.Effect<A, E, R> => {
+  const attrs = identityAttributes(session);
+  const annotateSpan = Effect.forEach(
+    attrs,
+    ([key, value]) => Effect.annotateCurrentSpan(key, value),
+    {
+      discard: true,
+    },
+  );
+  return annotateSpan.pipe(Effect.andThen(Effect.annotateLogs(effect, Object.fromEntries(attrs))));
+};
diff --git a/apps/backend/src/ai/VoidhashAiService.ts b/apps/backend/src/ai/VoidhashAiService.ts
new file mode 100644
index 000000000..09539bacd
--- /dev/null
+++ b/apps/backend/src/ai/VoidhashAiService.ts
@@ -0,0 +1,381 @@
+import {
+  designerToolDescriptions,
+  designerToolSchemas,
+  modelForTurn,
+  type Surface,
+} from "@voidhash/ai-shared";
+import {
+  AiChatService,
+  PaywallService,
+  PaywallWorkspaceService,
+} from "@voidhash/core/services";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  fileNameFromDocRelative,
+  readComponentDefinitions,
+} from "@voidhash/paywall-workspace";
+import { Context, Effect, Layer, Schema } from "effect";
+import {
+  convertToModelMessages,
+  createUIMessageStream,
+  createUIMessageStreamResponse,
+  stepCountIs,
+  streamText,
+  tool,
+  type ToolSet,
+  type UIMessage,
+  validateUIMessages,
+} from "ai";
+import { createWorkersAI, type WorkersAISettings } from "workers-ai-provider";
+
+import { type DesignerContext, designerSystemPrompt } from "./surfaces.ts";
+
+/** Runtime handle consumed by the Cloudflare Workers AI implementation. */
+export interface AiGatewayHandle {
+  readonly binding: Extract<WorkersAISettings, { binding: unknown }>["binding"];
+  readonly gatewayId: string;
+}
+
+/**
+ * Server-side backstop on tool steps within ONE request — NOT a task budget.
+ * With client-executed tools each request ends when the model calls tools
+ * (finishReason `"tool-calls"`), the browser runs them, and the chat
+ * auto-continues; this only bounds a within-request loop where the model calls
+ * tools and immediately calls more without pause. Set generously so real
+ * multi-step design work never hits it; a genuine runaway trips it. The
+ * per-request cap is the SERVER's safety net; the browser also caps
+ * auto-continuations.
+ */
+const MAX_TOOL_STEPS = 128;
+
+/**
+ * The provider truncated the model's output mid-message (`length`). Distinct
+ * from `"tool-calls"`, which is the NORMAL end-of-request handoff to the browser
+ * (the model asked to run client tools) — that is not truncation and gets no
+ * notice. Only a genuine cut-off gets one.
+ */
+const truncationNotice = (): string =>
+  "\n\n_I was cut off before finishing (the response hit the model's output limit). Ask me to continue and I can pick up where I left off._";
+
+/** Tagged error raised by {@link VoidhashAiService} public methods. */
+export class VoidhashAiError extends Schema.TaggedErrorClass<VoidhashAiError>("VoidhashAiError")(
+  "VoidhashAiError",
+  { message: Schema.String },
+) {}
+
+/** Everything the chat endpoint accepts. `messages` are UI messages from the AI SDK client. */
+export interface VoidhashAiChatInput {
+  readonly messages: ReadonlyArray<unknown>;
+  readonly surface: Surface;
+  /** Project the workspace tools operate over (anti-spoof-checked by the route). */
+  readonly projectId: string;
+  readonly organizationId: string;
+  /** The open paywall id — chat persistence scope only (tools reach any paywall). */
+  readonly paywallId: string;
+  /** Client-minted chat id — the key server-authoritative persistence upserts by. */
+  readonly chatId: string;
+  /**
+   * Mimic document node ids the user currently has selected in the open designer,
+   * sent fresh per turn (older clients / other surfaces omit it). Surfaced to the
+   * model in the designer context block — they are document node ids the model can
+   * address directly in `edit_document` ops (from `get_document` / the selection).
+   */
+  readonly selectedNodeIds?: ReadonlyArray<string>;
+}
+
+/**
+ * Services `chat` closes over: the designer-context builder's workspace/paywall
+ * services plus `AiChatService` for transcript persistence. Captured once in
+ * {@link VoidhashAiServiceShape.chat} (where the request's `AuthSession` is in
+ * context) so the best-effort context builder + the finish-persist can run the
+ * `AuthSession`-bound effects (streamText is not Effect-aware).
+ */
+type ChatContext = Context.Context<
+  PaywallWorkspaceService | PaywallService | AiChatService | AuthSession
+>;
+
+/** Public {@link VoidhashAiService} surface. */
+export interface VoidhashAiServiceShape {
+  /**
+   * Runs one streaming chat turn for the given studio surface. The declared
+   * designer tools are SCHEMA-ONLY (no `execute`): the AI SDK ends the request
+   * when the model calls a tool (finishReason `"tool-calls"`), the BROWSER
+   * executes it against the local fork, and the chat auto-continues (AI SDK v5
+   * client-tool round-trip). On finish, the message list so far is persisted
+   * server-authoritatively via {@link AiChatService} (each continuation request
+   * re-persists the full transcript).
+   *
+   * Requires the request's per-request services in context (the route resolves
+   * the session and provides `AuthSession` + the workspace/chat services).
+   */
+  readonly chat: (
+    input: VoidhashAiChatInput,
+  ) => Effect.Effect<
+    Response,
+    VoidhashAiError,
+    PaywallWorkspaceService | PaywallService | AiChatService | AuthSession
+  >;
+}
+
+/** Service tag — the live layer is built by {@link VoidhashAiService.layer}. */
+export class VoidhashAiService extends Context.Service<VoidhashAiService, VoidhashAiServiceShape>()(
+  "VoidhashAiService",
+) {
+  /** Builds the live service around a runtime {@link AiGatewayHandle}. */
+  static readonly layer = (handle: AiGatewayHandle): Layer.Layer<VoidhashAiService> =>
+    Layer.succeed(VoidhashAiService, make(handle));
+}
+
+/**
+ * The id of the last user message — the checkpoint turn identifier. Falls back
+ * to a synthesized id when the messages carry none (defensive; UI messages
+ * always have ids in practice).
+ */
+const turnIdFromMessages = (messages: ReadonlyArray<UIMessage>): string => {
+  for (let i = messages.length - 1; i >= 0; i -= 1) {
+    const message = messages[i];
+    if (message?.role === "user" && typeof message.id === "string" && message.id.length > 0) {
+      return message.id;
+    }
+  }
+  return `turn_${Date.now()}`;
+};
+
+/** First non-empty user text, trimmed to a short title; falls back to "New chat". */
+const deriveTitle = (messages: ReadonlyArray<UIMessage>): string => {
+  for (const message of messages) {
+    if (message.role !== "user") {
+      continue;
+    }
+    const text = message.parts
+      .map((part) => (part.type === "text" ? part.text : ""))
+      .join("")
+      .trim();
+    if (text.length > 0) {
+      return text.length > 80 ? `${text.slice(0, 79)}…` : text;
+    }
+  }
+  return "New chat";
+};
+
+/**
+ * Build the designer tool set as SCHEMA-ONLY declarations (no `execute`). With no
+ * `execute`, the AI SDK ends the request when the model calls a tool
+ * (finishReason `"tool-calls"`); the BROWSER runs the tool against the currently
+ * open paywall document and the chat auto-continues (AI SDK v5 client-tool
+ * round-trip). Each tool's `description` + `inputSchema` come from the shared
+ * `ai-shared` definitions the browser executor imports, so declaration and
+ * execution stay in lockstep.
+ *
+ * The declaration list is exactly the shared vocabulary (`get_document`,
+ * `get_components`, `read_component`, `read_paywall`, `edit_document`,
+ * `write_component`, `rename_component`, `delete_component`). Each entry keys
+ * straight off `designerToolSchemas`/`designerToolDescriptions`, so a rename in
+ * the shared package fails this file at compile time rather than drifting. (Built
+ * per-tool rather than mapped so the AI SDK infers each concrete input schema.)
+ */
+export const designerTools = (): ToolSet => ({
+  get_document: tool({
+    description: designerToolDescriptions.get_document,
+    inputSchema: designerToolSchemas.get_document,
+  }),
+  get_components: tool({
+    description: designerToolDescriptions.get_components,
+    inputSchema: designerToolSchemas.get_components,
+  }),
+  read_component: tool({
+    description: designerToolDescriptions.read_component,
+    inputSchema: designerToolSchemas.read_component,
+  }),
+  read_paywall: tool({
+    description: designerToolDescriptions.read_paywall,
+    inputSchema: designerToolSchemas.read_paywall,
+  }),
+  edit_document: tool({
+    description: designerToolDescriptions.edit_document,
+    inputSchema: designerToolSchemas.edit_document,
+  }),
+  write_component: tool({
+    description: designerToolDescriptions.write_component,
+    inputSchema: designerToolSchemas.write_component,
+  }),
+  rename_component: tool({
+    description: designerToolDescriptions.rename_component,
+    inputSchema: designerToolSchemas.rename_component,
+  }),
+  delete_component: tool({
+    description: designerToolDescriptions.delete_component,
+    inputSchema: designerToolSchemas.delete_component,
+  }),
+});
+
+/**
+ * Component file names (`<basename>.tsx`) of a paywall document, read from its
+ * `codeComponent` definition nodes — a component's identity is its canonical
+ * document-relative `path` (`components/<basename>.tsx`), which reduces to the
+ * file name for display.
+ */
+const componentFileNamesFromDocument = (root: unknown): ReadonlyArray<string> => {
+  // The decoded renderer root is the single `SnapshotNode` the pure reader walks;
+  // narrow the mimic-host `unknown` structurally (the renderer type package is not
+  // a backend dependency) via the reader's own parameter type.
+  const snapshot = (root != null ? [root] : []) as unknown as Parameters<
+    typeof readComponentDefinitions
+  >[0];
+  return readComponentDefinitions(snapshot).map((definition) =>
+    fileNameFromDocRelative(definition.path),
+  );
+};
+
+/**
+ * Build the dynamic {@link DesignerContext} for the request — the project's
+ * paywall listing (slug + display name + component file names), which paywall is
+ * open (resolved from `input.paywallId`), and the current selection. Best-effort:
+ * it reads each paywall's live document (no projection) and NEVER fails the chat —
+ * any failure resolving the whole block, or an individual paywall's document,
+ * degrades to omitting that part (`undefined` whole block, or an empty component
+ * list for the paywall that failed).
+ */
+const buildDesignerContext = (
+  context: ChatContext,
+  input: VoidhashAiChatInput,
+): Promise<DesignerContext | undefined> =>
+  Effect.runPromise(
+    Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const workspace = yield* PaywallWorkspaceService;
+      const rows = yield* paywallService.getPaywalls(input.projectId);
+
+      const paywalls = yield* Effect.forEach(
+        rows,
+        (row) =>
+          workspace.readDocument(input.projectId, row.slug).pipe(
+            Effect.map((resolved) => ({
+              slug: row.slug,
+              name: row.name,
+              componentFileNames: componentFileNamesFromDocument(resolved.root),
+            })),
+            // One unreadable/corrupt paywall must not sink the whole block — list
+            // it with no components rather than dropping the context entirely.
+            Effect.catch(() =>
+              Effect.succeed({ slug: row.slug, name: row.name, componentFileNames: [] }),
+            ),
+          ),
+        { concurrency: 8 },
+      );
+
+      const openRow = rows.find((row) => row.id === input.paywallId);
+      return {
+        paywalls,
+        openPaywall: openRow ? { slug: openRow.slug, name: openRow.name } : undefined,
+        selectedNodeIds: input.selectedNodeIds ?? [],
+      } satisfies DesignerContext;
+    }).pipe(
+      Effect.provide(context),
+      Effect.catch(() => Effect.succeed(undefined)),
+    ) as Effect.Effect<DesignerContext | undefined, never>,
+  );
+
+const make = (handle: AiGatewayHandle): VoidhashAiServiceShape => {
+  const workersai = createWorkersAI({
+    binding: handle.binding,
+    gateway: { id: handle.gatewayId },
+  });
+
+  const chat: VoidhashAiServiceShape["chat"] = (input) =>
+    Effect.gen(function* () {
+      // Capture the request context (AuthSession + workspace/paywall/chat
+      // services) so the best-effort designer-context builder and the
+      // finish-persist can run the AuthSession-bound effects (streamText is not
+      // Effect-aware). The designer tools are schema-only — the browser executes
+      // them — so no tool `execute` runs against this context.
+      const context = yield* Effect.context<
+        PaywallWorkspaceService | PaywallService | AiChatService | AuthSession
+      >();
+
+      return yield* Effect.tryPromise({
+        catch: (cause) =>
+          new VoidhashAiError({
+            message: cause instanceof Error ? cause.message : String(cause),
+          }),
+        try: async (): Promise<Response> => {
+          const uiMessages = await validateUIMessages({ messages: input.messages });
+          const modelMessages = await convertToModelMessages(uiMessages);
+          const turnId = turnIdFromMessages(uiMessages);
+          const designerContext = await buildDesignerContext(context, input);
+
+          const result = streamText({
+            model: workersai(modelForTurn(input.surface, input.messages)),
+            system: designerSystemPrompt(designerContext),
+            messages: modelMessages,
+            tools: designerTools(),
+            stopWhen: stepCountIs(MAX_TOOL_STEPS),
+          });
+
+          // Merge the model's UI stream into our own stream so we can append a
+          // truncation notice ONLY when the provider truncated the output
+          // (`length`). finishReason `"tool-calls"` is the NORMAL handoff to the
+          // browser (client tools) — not truncation — so it gets no notice; the
+          // client runs the tools and auto-continues. `sendFinish: false` holds
+          // the finish event until after any notice is written.
+          const stream = createUIMessageStream<UIMessage>({
+            originalMessages: uiMessages,
+            execute: async ({ writer }) => {
+              writer.merge(result.toUIMessageStream({ sendFinish: false }));
+              const finishReason = await result.finishReason;
+              if (finishReason === "length") {
+                const id = `notice_${turnId}`;
+                writer.write({ type: "text-start", id });
+                writer.write({ type: "text-delta", id, delta: truncationNotice() });
+                writer.write({ type: "text-end", id });
+              }
+            },
+            // Server-authoritative persistence: `messages` is the fully assembled
+            // UI-message list (original + this turn's assistant + server-executed
+            // tool parts the client never re-sends, plus any truncation notice),
+            // upserted under the client-minted chat id. Skipped on an aborted stream.
+            onFinish: ({ messages, isAborted }) => {
+              if (!isAborted) {
+                void persistOnFinish(context, input, messages);
+              }
+            },
+          });
+          return createUIMessageStreamResponse({ stream });
+        },
+      });
+    });
+
+  return { chat };
+};
+
+/**
+ * Persist the completed chat server-authoritatively. Best-effort: a persistence
+ * failure must not fail an already-streamed turn, so failures are swallowed
+ * (the client refetches the history list on stream finish regardless). The
+ * response body carries the assistant + tool parts; we persist the input UI
+ * messages plus rely on the client refetch for the freshest full transcript.
+ */
+const persistOnFinish = async (
+  context: ChatContext,
+  input: VoidhashAiChatInput,
+  messages: ReadonlyArray<UIMessage>,
+): Promise<void> => {
+  await Effect.runPromiseExit(
+    Effect.gen(function* () {
+      const chats = yield* AiChatService;
+      yield* chats.save({
+        id: input.chatId,
+        organizationId: input.organizationId,
+        projectId: input.projectId,
+        surface: input.surface,
+        chatType: "persistent",
+        paywallId: input.paywallId,
+        title: deriveTitle(messages),
+        messages: JSON.stringify(messages),
+      });
+    }).pipe(
+      Effect.provide(context),
+      Effect.catch(() => Effect.void),
+    ) as Effect.Effect<void, never>,
+  );
+};
diff --git a/apps/backend/src/ai/skills/paywall-authoring.test.ts b/apps/backend/src/ai/skills/paywall-authoring.test.ts
new file mode 100644
index 000000000..1bf40e1d3
--- /dev/null
+++ b/apps/backend/src/ai/skills/paywall-authoring.test.ts
@@ -0,0 +1,96 @@
+import {
+  ALLOWED_CHILDREN_BY_NODE_TYPE,
+  type NodeType,
+} from "@voidhash/mimic-schema";
+import { nodeStyleFields } from "@voidhash/ai-shared";
+import { describe, expect, it } from "vite-plus/test";
+
+import { paywallAuthoringSkill } from "./paywall-authoring.ts";
+
+/**
+ * Contract test for the GENERATED sections of the paywall-authoring skill. It
+ * introspects the mimic schema the SAME way the generator does, so it fails the
+ * instant the generator silently drops a style field (e.g. a schema kind it does
+ * not handle) or the containment listing drifts from `ALLOWED_CHILDREN_BY_NODE_TYPE`.
+ * This is the whole point of generating the reference from the schema — the test
+ * pins the generator to the source of truth, not to a hand-written expectation.
+ */
+
+/** The node types whose full style reference the skill ships. */
+const STYLED_NODE_TYPES: readonly NodeType[] = ["screen", "view", "text", "shape", "path"];
+
+const skill = paywallAuthoringSkill();
+
+describe("paywallAuthoringSkill — generated style reference", () => {
+  for (const type of STYLED_NODE_TYPES) {
+    it(`lists every style field of \`${type}\``, () => {
+      const fields = nodeStyleFields(type);
+      // A styled node type must contribute at least one field — a schema kind the
+      // generator can't introspect would collapse this to empty and this catches it.
+      expect(fields.length).toBeGreaterThan(0);
+      for (const field of fields) {
+        expect(
+          skill.includes(`\`${field}\``),
+          `style field "${field}" of node type "${type}" is missing from the generated skill`,
+        ).toBe(true);
+      }
+    });
+  }
+
+  it("surfaces designer-internal flag fields (no longer hidden from the model)", () => {
+    // The drift these fields expose is the whole point: they are real, settable
+    // style fields the schema declares, so generating from the schema means the
+    // model finally sees them.
+    expect(skill).toContain("`backgroundEnabled`");
+    expect(skill).toContain("`safeAreaTop`");
+    expect(skill).toContain("`borderEnabled`");
+  });
+
+  it("enumerates enum literal values (e.g. flexDirection)", () => {
+    // flexDirection is `Either(Literal("row"), Literal("column"))` — the generator
+    // renders the literal set so the model knows the allowed values.
+    expect(skill).toContain('"row" | "column"');
+  });
+
+  it("annotates the auto-managed `*Enabled` flag fields", () => {
+    // The AI edit path derives these flags, so the reference tells the model it
+    // only ever writes them to hide a group (explicit `false`).
+    expect(skill).toContain("AUTO-MANAGED");
+    expect(skill).toContain(
+      "set to true automatically when you set any background field",
+    );
+    expect(skill).toContain(
+      "set to true automatically when you set any fill field",
+    );
+  });
+});
+
+describe("paywallAuthoringSkill — generated containment reference", () => {
+  it("matches ALLOWED_CHILDREN_BY_NODE_TYPE for every authorable parent", () => {
+    // root/library/codeComponent are engine-managed and intentionally omitted.
+    const authorable: readonly NodeType[] = (
+      Object.keys(ALLOWED_CHILDREN_BY_NODE_TYPE) as NodeType[]
+    ).filter((type) => type !== "root" && type !== "library" && type !== "codeComponent");
+
+    for (const type of authorable) {
+      const children = ALLOWED_CHILDREN_BY_NODE_TYPE[type];
+      if (children.length > 0) {
+        const expected = `\`${type}\` may contain: ${children
+          .map((child) => `\`${child}\``)
+          .join(", ")}`;
+        expect(
+          skill.includes(expected),
+          `containment line for "${type}" drifted from ALLOWED_CHILDREN_BY_NODE_TYPE`,
+        ).toBe(true);
+      } else {
+        expect(skill).toContain(`\`${type}\` is a leaf (no child nodes).`);
+      }
+    }
+  });
+
+  it("does not list engine-managed node types as authorable parents", () => {
+    expect(skill).not.toContain("`root` may contain");
+    expect(skill).not.toContain("`library` may contain");
+    expect(skill).not.toContain("`codeComponent` may contain");
+  });
+});
diff --git a/apps/backend/src/ai/skills/paywall-authoring.ts b/apps/backend/src/ai/skills/paywall-authoring.ts
new file mode 100644
index 000000000..f520fa9ce
--- /dev/null
+++ b/apps/backend/src/ai/skills/paywall-authoring.ts
@@ -0,0 +1,550 @@
+import {
+  ALLOWED_CHILDREN_BY_NODE_TYPE,
+  NODE_TYPES,
+  type NodeType,
+} from "@voidhash/mimic-schema";
+import {
+  acceptanceOf,
+  nodeDefaultData,
+  nodeStyleFields,
+  nodeStyleSchema,
+  STYLE_GROUP_FLAG_BY_FIELD,
+  type SerializedSchema,
+} from "@voidhash/ai-shared";
+
+/**
+ * Authoring guide appended to the designer-surface system prompt. The document
+ * model, containment rules, and the entire style reference are GENERATED from the
+ * live mimic schemas at module load (never hand-listed) — the drift-killer at the
+ * heart of the document-first authoring redesign. The code-component half is
+ * hand-written prose (that grammar lives outside the mimic node schemas).
+ *
+ * Rendering pipeline (see the generators below): read the mimic node primitives
+ * via ai-shared's schema introspection → for each covered node type, enumerate
+ * its style fields with their value family (enum literals / number / color /
+ * string / object) and schema default → format as a compact per-field list. The
+ * containment lines come straight from `ALLOWED_CHILDREN_BY_NODE_TYPE`.
+ */
+
+/**
+ * A short value-type label for a style field, derived from its serialized schema.
+ * Enums enumerate their literal set; a field whose name marks it a color renders
+ * `color` (colors are plain strings in the schema, indistinguishable by shape);
+ * structured fields render `object`; scalars render their family.
+ */
+function styleValueLabel(field: string, schema: SerializedSchema): string {
+  const acc = acceptanceOf(schema);
+  if (acc.literals.length > 0 && !acc.acceptsNumber && !acc.acceptsString && !acc.acceptsBoolean) {
+    return acc.literals.map((literal) => JSON.stringify(literal)).join(" | ");
+  }
+  if (acc.isStructured) return "object";
+  // Colors are `rgba(r, g, b, a)` strings — the schema can't distinguish them
+  // from a free string, so key off the field name (the only reliable signal).
+  if (/color$/i.test(field)) return "color (rgba)";
+  const families: string[] = [];
+  if (acc.acceptsNumber) families.push("number");
+  if (acc.acceptsString) families.push("string");
+  if (acc.acceptsBoolean) families.push("boolean");
+  return families.join(" | ") || "unknown";
+}
+
+/**
+ * The `<group>Enabled` flag fields the AI edit path AUTO-MANAGES (derived from the
+ * group-flag map, not hand-listed). Setting any field of a gated style group
+ * (background / border / shadow / fill / stroke) turns its flag on automatically.
+ */
+const AUTO_MANAGED_FLAG_FIELDS: ReadonlySet<string> = new Set(
+  Object.values(STYLE_GROUP_FLAG_BY_FIELD),
+);
+
+/**
+ * The AUTO-MANAGED annotation for a `<group>Enabled` flag field, telling the model
+ * it never needs to set the flag on and that its only use is an explicit `false`
+ * to hide the group without deleting the group's fields.
+ */
+function autoManagedAnnotation(flagField: string): string {
+  const group = flagField.replace(/Enabled$/, "");
+  return ` — AUTO-MANAGED: set to true automatically when you set any ${group} field; write \`false\` explicitly to hide the ${group} without deleting its fields.`;
+}
+
+/** The schema default for one style field of a node type, or `undefined` if it has none. */
+function styleFieldDefault(type: NodeType, field: string): unknown {
+  const style = nodeDefaultData(type)["style"];
+  return style && typeof style === "object"
+    ? (style as Record<string, unknown>)[field]
+    : undefined;
+}
+
+/**
+ * Render one node type's full style reference as a compact block: one line per
+ * style field with its value family and default. Every field the schema declares
+ * is listed (that is what the contract test guards) — so the model sees the
+ * designer-internal fields (`backgroundEnabled`, `safeAreaTop`, …) too, which is
+ * the whole point of generating from the schema.
+ */
+function renderStyleReference(type: NodeType): string {
+  const styleSchema = nodeStyleSchema(type);
+  const fields = nodeStyleFields(type);
+  if (styleSchema === undefined || fields.length === 0) {
+    return `\`${type}\` has no style fields.`;
+  }
+  const lines = fields.map((field) => {
+    const label = styleValueLabel(field, styleSchema.fields[field]!);
+    const defaultValue = styleFieldDefault(type, field);
+    const defaultText =
+      defaultValue === undefined ? "no default" : `default ${JSON.stringify(defaultValue)}`;
+    const annotation = AUTO_MANAGED_FLAG_FIELDS.has(field) ? autoManagedAnnotation(field) : "";
+    return `- \`${field}\`: ${label} (${defaultText})${annotation}`;
+  });
+  return lines.join("\n");
+}
+
+/** The node types whose style reference ships in the prompt (every styled editable node). */
+const STYLE_REFERENCE_NODE_TYPES: readonly NodeType[] = ["screen", "view", "text", "shape", "path"];
+
+/** The full generated style reference: one section per styled node type. */
+const styleReference = (): string =>
+  STYLE_REFERENCE_NODE_TYPES.map(
+    (type) => `### \`${type}\` style fields\n\n${renderStyleReference(type)}`,
+  ).join("\n\n");
+
+/**
+ * The generated containment listing: for each node type, the node types it may
+ * legally contain (from `ALLOWED_CHILDREN_BY_NODE_TYPE`). A leaf (no legal
+ * children) is stated as such. Only the types the model authors are listed
+ * (`library`/`codeComponent`/`root` are engine-managed).
+ */
+const AUTHORABLE_PARENT_TYPES: readonly NodeType[] = NODE_TYPES.filter(
+  (type) => type !== "root" && type !== "library" && type !== "codeComponent",
+);
+
+const CONTAINMENT_REFERENCE = AUTHORABLE_PARENT_TYPES.map((type) => {
+  const children = ALLOWED_CHILDREN_BY_NODE_TYPE[type];
+  return children.length > 0
+    ? `- \`${type}\` may contain: ${children.map((child) => `\`${child}\``).join(", ")}`
+    : `- \`${type}\` is a leaf (no child nodes).`;
+}).join("\n");
+
+let cachedSkill: string | undefined;
+
+/**
+ * Assembled skill body — static prose interleaved with the generated references.
+ * Lazy + memoized, never a module-level string: rendering the style reference
+ * computes schema defaults, which encodes entry-wrapped arrays whose
+ * fractional-index keys are jitter-randomized — and workerd forbids generating
+ * random values in global scope, so the skill must be built on first use inside
+ * a request handler.
+ */
+export const paywallAuthoringSkill = (): string =>
+  (cachedSkill ??= `# Paywall Authoring Reference
+
+This is the domain reference for building the open paywall as a mimic document
+with \`edit_document\`, plus code components for anything that needs real code.
+Read the document model and containment rules first — the style reference below is
+generated from the live schema, so it is always exact.
+
+## Document model
+
+A paywall is a MIMIC DOCUMENT: a tree of nodes. You author it with \`edit_document\`
+ops (\`insert\`, \`update\`, \`move\`, \`remove\`, \`replaceChildren\`), addressing nodes
+by their engine-minted id. The node kinds you build with:
+
+- \`screen\` — the paywall's root visual frame (the top-level node under the
+  document). Holds the whole layout; has a background, safe-area flags, and a
+  fixed default size (375×812).
+- \`view\` — a flex container / row / column. The workhorse for layout, grouping,
+  cards, buttons (a \`view\` with an \`onPress\` interaction is a tappable surface —
+  there is no separate button/pressable node).
+- \`scrollView\` — a \`view\` that SCROLLS. Same style/children as a \`view\`; use it
+  for content taller than the screen. \`horizontal: true\` scrolls sideways and lays
+  its children out in a row (forces row flow, like RN); \`showsScrollIndicator: false\`
+  hides the scrollbar.
+- \`text\` — a text leaf. Its \`text\` data field is the literal string it renders.
+- \`shape\` — a vector container that holds \`path\` nodes (for icons / custom
+  vector art).
+- \`path\` — a single vector path inside a \`shape\`.
+- \`component\` — an INSTANCE of a catalog component, a local code component, or a
+  first-party BUILTIN that ships with the renderer. Insert one to place a reusable
+  widget; bind its props/actions (discover them with \`get_components\`). Insert a
+  builtin with \`componentSource: "builtin"\` and its \`componentSlug\` from
+  \`get_components\` — builtins are UNPINNED (no version/hash) and take props like
+  any component.
+
+Node ids are ADDRESSES: every node has a stable id. \`get_document\` returns the
+tree with ids; the user's selection is a set of ids; inserts RETURN their minted
+ids. You never write an id yourself.
+
+### Containment (which node may hold which)
+
+An \`insert\`/\`move\` into a parent that cannot contain the node type is rejected.
+The legal parent → child rules (generated from the schema):
+
+${CONTAINMENT_REFERENCE}
+
+## Style reference (generated from the schema)
+
+Style is a per-node \`style\` object of RN-named fields (NO shorthands: write
+\`paddingTop\`/\`paddingRight\`/… never \`padding\`; \`borderTopLeftRadius\`/… never
+\`borderRadius\`). Colors are \`rgba(r, g, b, a)\` strings. Each node type accepts a
+different subset; a field not listed for a node type is rejected on it.
+
+**Group flags are AUTO-MANAGED.** Setting ANY background / border / shadow (or, on
+\`path\`, fill / stroke) field automatically turns that group's \`<group>Enabled\`
+flag on — just set \`backgroundColor\` and the background renders; you never write
+\`backgroundEnabled: true\`. The \`*Enabled\` flags below exist ONLY for non-destructive
+hiding: the sole reason to write one yourself is \`false\` (e.g.
+\`{ backgroundEnabled: false }\`) to hide a group while keeping its fields for later.
+
+Set a style field via \`update\` with merge semantics: \`set: { style: { paddingTop: 8 } }\`
+changes ONLY \`paddingTop\` and leaves every other style field untouched. To insert
+a node with styles, put the \`style\` object on the inserted node.
+
+${styleReference()}
+
+### Flex layout (defaults match CSS)
+
+Layout is flexbox, exactly like CSS / React Native:
+
+- Views **hug their content** by default: \`width\` and \`height\` default to
+  \`"auto"\`. Do NOT set a numeric \`width\`/\`height\` just to "make it fit" — omit
+  them and let flex size the node. Set a number only for a genuinely fixed size.
+- A container **stretches its children on the CROSS axis** by default
+  (\`alignItems\` defaults to \`"stretch"\`). So a child of a \`column\` fills the
+  container's width, and a child of a \`row\` fills its height, automatically —
+  you do not need \`alignSelf\` or a width/height for that.
+- To make a child **fill the MAIN axis** (grow to share leftover space), give it
+  \`flex: 1\` (e.g. a spacer, or two side-by-side cards that split a row).
+- Cross-axis fill is automatic UNLESS the child opts out — either a numeric size
+  on that axis (a fixed size defeats stretch) or a non-\`stretch\` \`alignSelf\`
+  (\`"flex-start"\`/\`"center"\`/\`"flex-end"\`). Set \`alignSelf\` only to deviate from
+  the container's alignment.
+- Prefer omitting \`width\`/\`height\` and reaching for \`flexDirection\`, \`gap\`,
+  \`justifyContent\` (main axis), \`alignItems\` (cross axis), and \`flex\` to compose
+  layout — the same tools you would use in CSS.
+
+### Structured style values (gradient / image backgrounds)
+
+\`backgroundGradient\` and \`backgroundImage\` are objects. Set
+\`backgroundType: "gradient"\` (or \`"image"\`) for the chosen fill to render
+(\`backgroundEnabled\` is turned on automatically for you).
+
+\`\`\`json
+// backgroundGradient
+{ "kind": "linear", "startX": 0.5, "startY": 0, "endX": 0.5, "endY": 1,
+  "stops": [ { "color": "rgba(255,255,255,1)", "position": 0 },
+             { "color": "rgba(255,255,255,0)", "position": 1 } ] }
+// backgroundImage
+{ "url": "https://…", "resizeMode": "cover" }  // cover | contain | stretch | center
+\`\`\`
+
+## Tool usage
+
+- **\`get_document\` first.** Learn the current tree and ids before editing. Pass
+  \`nodeId\` to root at a subtree and \`depth\` to cap the tree (deeper nodes return
+  as \`{ id, type, name?, childCount }\` stubs you expand with a follow-up
+  \`get_document(nodeId)\`). Cheaper than pulling the whole document every turn.
+- **\`edit_document\` applies an ATOMIC batch.** Every op lands or none does. On
+  success you get the minted ids for \`insert\`/\`replaceChildren\` ops (keyed by op
+  index, parents-before-children) so you can address new nodes next. On failure
+  you get per-op errors naming the node, the allowed fields (with a did-you-mean),
+  and the allowed values — trust them and correct the batch. On a write conflict
+  the batch is re-applied against the latest LIVE tree, so concurrent designer
+  edits MERGE rather than clobber — a follow-up \`get_document\` may show a tree
+  shifted by another editor's changes.
+- **Merge semantics on \`update\`.** \`set.style\` merges per style field; other
+  objects merge per-field; arrays and scalars REPLACE wholesale. Send only the
+  fields you want to change.
+- **Ids are minted.** Never supply an id on an inserted node. Target existing
+  nodes with ids from \`get_document\`, the selection, or a prior insert's returned
+  ids.
+- **Selection ids are directly addressable.** When the context block lists
+  selected node ids, use them straight in ops (no need to re-locate them).
+
+### Op cheatsheet
+
+- \`insert\` — add a subtree under \`parentId\` at \`index\` (append if omitted).
+- \`update\` — partial data change on \`nodeId\` (\`set\`, merge semantics above).
+- \`move\` — reparent \`nodeId\` under \`parentId\` at \`index\` (cycles/illegal
+  containment rejected).
+- \`remove\` — delete \`nodeId\` and its subtree.
+- \`replaceChildren\` — swap \`nodeId\`'s whole child list for a new ordered one.
+
+## Worked examples
+
+### (a) Insert a screen's content in one batch
+
+Add a header row and a title inside the screen \`scr_1\` (ids returned are used
+implicitly by nesting the \`children\` inline):
+
+\`\`\`json
+{ "edits": [
+  { "op": "insert", "parentId": "scr_1", "node": {
+      "type": "view", "name": "Header",
+      "style": { "flexDirection": "row", "justifyContent": "space-between", "alignItems": "center", "paddingTop": 16, "paddingBottom": 16 },
+      "children": [
+        { "type": "text", "name": "Title", "text": "Unlock Pro",
+          "style": { "fontSize": 28, "fontWeight": "700", "color": "rgba(255,255,255,1)" } }
+      ]
+  } }
+] }
+\`\`\`
+
+### (b) Restyle the selected node
+
+The user has \`view_9\` selected and asks for a rounded indigo card. Change only
+the fields you mean to (style merges per field):
+
+\`\`\`json
+{ "edits": [
+  { "op": "update", "nodeId": "view_9", "set": { "style": {
+      "backgroundColor": "rgba(99,102,241,1)",
+      "borderTopLeftRadius": 12, "borderTopRightRadius": 12,
+      "borderBottomRightRadius": 12, "borderBottomLeftRadius": 12,
+      "paddingTop": 16, "paddingRight": 16, "paddingBottom": 16, "paddingLeft": 16 } } }
+] }
+\`\`\`
+
+### (c) Insert a component instance and bind it
+
+First \`get_components\` to read the component's path/slug, props, and actions.
+Then insert a \`component\` node. A \`component\` node's identity fields select which
+component to place; \`props\` binds its inputs and interactions/actions wire its
+outputs. Read the exact prop/action names from \`get_components\` (they differ per
+component) and follow the shapes the tool reports — do not assume field names.
+Bind a purchase to the component's declared action via the same interaction model
+as (d): a \`purchase-product\` action on the component's action slot.
+
+### (d) Variables and interactions (what the document supports)
+
+Variables and press interactions ARE first-class document data (on the node
+\`localVariables\` / \`interactions\` fields), so you can wire simple behavior WITHOUT
+a code component:
+
+- **Local variables** live on \`screen\`/\`view\`/\`text\` as \`localVariables\`: an array
+  of \`{ id, name, value }\` where \`value\` is a tagged union on \`key\`:
+  \`{ key: "string", value }\` | \`{ key: "number", value }\` |
+  \`{ key: "boolean", value }\` | \`{ key: "product", value: { productId? } }\`.
+- **Interactions** live on \`view\` as \`interactions\`: an array of
+  \`{ id, trigger, action }\`. The only trigger is \`{ type: "click" }\`. Actions:
+  - \`{ type: "none" }\` — no-op.
+  - \`{ type: "close-paywall" }\` — dismiss the paywall.
+  - \`{ type: "purchase-product", payload: <productSource> }\` — start a purchase,
+    where productSource is \`{ type: "literal", productId }\` or
+    \`{ type: "variable-reference", variableId }\`.
+  - \`{ type: "set-variable", payload: { variableId, newValue: <valueSource> } }\`
+    where valueSource is \`{ type: "literal", value: <tagged value> }\` or
+    \`{ type: "variable-reference", value: { id } }\`.
+
+Make a \`view\` a purchase button by giving it an \`interactions\` array with a click
+→ purchase-product action (set via \`update\`'s \`set: { interactions: [...] }\` —
+arrays replace wholesale, so send the complete list):
+
+\`\`\`json
+{ "edits": [
+  { "op": "update", "nodeId": "view_cta", "set": { "interactions": [
+      { "id": "int_1", "trigger": { "type": "click" },
+        "action": { "type": "purchase-product",
+          "payload": { "type": "literal", "productId": "yearly" } } }
+  ] } }
+] }
+\`\`\`
+
+The \`id\` fields inside \`localVariables\`/\`interactions\`/gradient stops are your
+own logical ids for those sub-records (NOT node ids) — mint stable strings.
+
+## Doctrine: build with the document, reach for code only when you must
+
+**The document (\`edit_document\`) is ALWAYS the primary way to build a paywall.**
+Static layout, styling, literal text, local variables, and click interactions all
+belong in the document. Write a code component ONLY when the document genuinely
+cannot express what you need:
+
+- **Mapping/looping** — one row per product, or any list built by iterating over
+  runtime data (\`usePaywallProducts()\`).
+- **Conditional / branching rendering** — element A vs B based on selection,
+  status, a variable, or product shape.
+- **Pressed / hover / focus visual states** — a button that changes color while
+  pressed.
+- **Animation.**
+- **Custom formatting logic** — deriving "$5/mo billed yearly", percent savings,
+  trial copy.
+- **Runtime-data-bound text** — a \`text\` node renders a LITERAL string; it cannot
+  interpolate a product price or a variable. Data-driven text needs a component.
+
+### Decision checklist
+
+1. Static layout + literal text? → **document** (\`screen\`/\`view\`/\`text\` nodes).
+2. Text needs runtime data (price, count, formatting)? → code component for that
+   text only.
+3. A list produced by iterating products/data? → code component (map).
+4. Branches on selection/status/variable? → code component.
+5. Pressed/hover/animated visuals? → code component.
+6. Otherwise → **document.** Prefer building with nodes.
+
+When a code component IS needed, keep it **as small as possible** — one focused
+interactive widget — then place it as a \`component\` node in the document.
+
+## Code-component authoring (\`components/<name>.tsx\`)
+
+A code component is a normal React component defined with \`defineComponent\` from
+\`@voidhash/paywalls\`. Its identity is its path; a \`component\` node references it by
+that path. Primitives, hooks, and full \`StyleProp\` arrays are all available here
+(this is the escape hatch — real JS is allowed). Author it with \`write_component\`;
+on success it compiles and becomes placeable, on failure you get compile
+diagnostics to fix (the compile loop is internal to \`write_component\`).
+
+\`\`\`tsx
+import {
+  defineComponent,
+  View,
+  Text,
+  Pressable,
+  Slot,
+  useSelectedProduct,
+} from "@voidhash/paywalls";
+import type { PaywallProduct } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Product Option",
+  description: "A selectable pricing row.",
+  props: (p) => ({
+    product: p.ref("product"),
+    accentColor: p.string().editor("color").default("rgba(99, 102, 241, 1)"),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ product: a.string() }),
+  }),
+  previews: {
+    default: {
+      data: {
+        products: [
+          {
+            id: "yearly",
+            slug: "yearly",
+            displayName: "Yearly",
+            priceString: "$59.99",
+            period: "year",
+          },
+        ],
+      },
+    },
+  },
+  render: ({ props, actions }) => {
+    const { selectedProductId } = useSelectedProduct();
+    const isSelected = selectedProductId === props.product.id;
+    return (
+      <Pressable onPress={() => actions.onSelect({ product: props.product.id })}>
+        <View
+          style={[
+            { paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16, borderTopLeftRadius: 12, borderTopRightRadius: 12, borderBottomLeftRadius: 12, borderBottomRightRadius: 12, borderTopWidth: 1, borderRightWidth: 1, borderBottomWidth: 1, borderLeftWidth: 1, borderColor: "rgba(255, 255, 255, 0.15)" },
+            isSelected && { borderColor: props.accentColor },
+          ]}
+        >
+          <Text style={{ fontSize: 16, fontWeight: "600", color: "rgba(255, 255, 255, 1)" }}>
+            {props.product.displayName}
+          </Text>
+          <Text style={{ fontSize: 14, color: "rgba(200, 200, 210, 1)" }}>
+            {props.product.priceString}
+          </Text>
+          <Slot />
+        </View>
+      </Pressable>
+    );
+  },
+});
+\`\`\`
+
+### \`defineComponent\` shape
+
+\`defineComponent({ title?, description?, props?, actions?, previews?, panel?, render })\`.
+There is **NO \`id\`** — a component is identified by its FILE PATH
+(\`components/<name>.tsx\`), which is the path a \`component\` node references.
+
+- \`render: ({ props, actions }) => ReactNode\` — the template. \`props\` has
+  defaults filled and \`.optional()\` props typed \`T | undefined\`; \`actions\` are
+  typed callbacks.
+- The file MUST default-export the \`defineComponent({ … })\` definition itself —
+  \`export default defineComponent({ … })\`. Do NOT export a \`.component\` property or
+  any other shape — only the \`defineComponent(...)\` result is valid.
+
+### Prop builders (\`p\`)
+
+Chainable, immutable: \`.label(str)\`, \`.default(value)\`, \`.optional()\`, and
+\`.editor("color")\` (string props only).
+
+- \`p.string()\` — string. \`p.number()\`, \`p.boolean()\`.
+- \`p.select([...] as const)\` — a string constrained to the options.
+- \`p.image()\` — an image URL/asset reference (string).
+- \`p.ref("product")\` — a product reference; the template receives a
+  \`PaywallProduct\`.
+- \`p.component()\` — a nested element the editor fills; the template receives a
+  \`ReactNode\`.
+- \`p.array(item)\` — a homogeneous list; \`item\` must be a non-array builder.
+
+### Action builders (\`a\`)
+
+- \`a.action()\` — a payload-free action; template callback is \`() => void\`.
+- \`a.action({ field: a.string() })\` — a typed payload; template callback is
+  \`(payload) => void\`. Payload fields are scalars: \`a.string()\`, \`a.number()\`,
+  \`a.boolean()\`.
+
+### Primitives (\`@voidhash/paywalls\`)
+
+\`View\`, \`Text\`, \`Pressable\`, \`ScrollView\`, \`Image\`, \`Slot\`. \`style\` accepts a
+\`StyleProp\` — a single object OR an array with falsy entries ignored
+(\`style={[base, cond && override]}\`) — using the SAME RN style vocabulary as the
+document (plus text-only \`textTransform\`/\`textDecorationLine\`/\`fontStyle\`/\`fontFamily\`).
+
+- \`<Pressable onPress={…}>\` — the tap surface. Pass a declared action directly
+  (\`onPress={actions.onSelect}\`) or wrap it (\`onPress={() => actions.onSelect({…})}\`).
+- \`<Image source={"…" | { uri }} resizeMode="cover" />\`.
+- \`<Slot />\` renders children the document passed into the component instance;
+  \`<Slot fallback={…} />\` renders fallback when none were passed.
+
+### Runtime hooks (\`@voidhash/paywalls\`)
+
+- \`usePaywallProducts(): readonly PaywallProduct[]\` — the available products
+  (map over these to render a list).
+- \`useSelectedProduct(): { selectedProduct, selectedProductId, selectProduct }\`.
+- \`usePaywallVariables(): Record<string, string | number | boolean>\`.
+- \`usePaywallActions(): { purchase, restore, close, openUrl, track, selectProduct }\`.
+- \`usePaywallStatus(): { status, productId?, error? }\` —
+  \`idle\`/\`purchasing\`/\`purchased\`/\`restoring\`/\`restored\`/\`failed\`.
+- \`usePaywallConfig(): PaywallRuntimeConfig\` (products, variables, locale,
+  platform).
+
+\`PaywallProduct\`:
+\`{ id, slug, displayName, description?, price?, priceString, currencyCode?, period?, trialPeriod? }\`
+where \`period\` is \`"month" | "year" | "week" | "lifetime"\`.
+
+### Renaming and deleting components
+
+- \`rename_component(fromPath, toPath)\` — moves the component. Instances
+  referencing the old path are RE-POINTED automatically (rename cascade), so the
+  \`component\` nodes keep working.
+- \`delete_component(path)\` — removes the component. Existing instances degrade to
+  placeholders (they are NOT cascade-deleted), so replace or remove those
+  \`component\` nodes afterward.
+
+## Tool vocabulary
+
+All tools operate on the currently open paywall, except \`read_paywall\`.
+
+- \`get_document(nodeId?, depth?)\` — read the open paywall's document as cleaned
+  JSON (subtree + depth for economy).
+- \`get_components()\` — list every placeable component (catalog + local) with
+  paths, props, actions, and preview states.
+- \`read_component(path)\` — read a LOCAL code component's TSX source.
+- \`read_paywall(slug)\` — read ANOTHER paywall's document JSON for reference
+  (read-only).
+- \`edit_document(edits)\` — apply an atomic batch of document ops (returns minted
+  ids or per-op errors).
+- \`write_component(path, source)\` — create-or-replace a code component (compiles;
+  returns diagnostics on failure).
+- \`rename_component(fromPath, toPath)\` — move a component (instances re-pointed).
+- \`delete_component(path)\` — delete a component (instances degrade to
+  placeholders).
+
+Read (\`get_document\`/\`get_components\`) before you write, use the minted ids the
+edits return, and trust the field/value errors the validator gives you.
+`);
diff --git a/apps/backend/src/ai/surfaces.test.ts b/apps/backend/src/ai/surfaces.test.ts
new file mode 100644
index 000000000..3f30370d0
--- /dev/null
+++ b/apps/backend/src/ai/surfaces.test.ts
@@ -0,0 +1,93 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { designerSystemPrompt, systemPromptForSurface } from "./surfaces.ts";
+
+/**
+ * Cover the dynamic designer context block appended to the system prompt: the
+ * base prompt without context, the paywall listing (slug + name + code
+ * components), the open-paywall block + selection (document node ids), and the
+ * no-paywall-open degradation. The vocabulary is document-first — edits are live
+ * `edit_document` ops, not a `paywall.tsx` fork/apply.
+ */
+describe("designerSystemPrompt", () => {
+  const base = designerSystemPrompt();
+
+  it("returns the base prompt unchanged when no context is supplied", () => {
+    expect(base).toContain("You are Voidhash AI");
+    expect(base).not.toContain("Current context:");
+    expect(systemPromptForSurface("designer")).toBe(base);
+  });
+
+  it("frames editing as live, undoable document transactions (no fork/apply)", () => {
+    expect(base).toContain("edit_document");
+    expect(base).toContain("live paywall");
+    expect(base).toContain("UNDOABLE");
+    // The old composition-as-a-file model is gone (no `paywall.tsx` grammar).
+    expect(base).not.toContain("paywall.tsx");
+    // The prompt explicitly negates the old apply step rather than describing one;
+    // the only place `apply_changes` appears is that negation ("no apply_changes").
+    expect(base).not.toContain("call `apply_changes`");
+    expect(base).not.toContain("validate_changes");
+  });
+
+  it("carries the agentic How-to-work discipline in the base prompt", () => {
+    expect(base).toContain("How to work:");
+    expect(base).toContain("Keep going until the user's request is fully handled");
+  });
+
+  it("lists every paywall with its display name and code components", () => {
+    const prompt = designerSystemPrompt({
+      paywalls: [
+        { slug: "trial", name: "Trial", componentFileNames: ["hero.tsx", "cta.tsx"] },
+        { slug: "onboarding", name: "Onboarding", componentFileNames: [] },
+      ],
+      openPaywall: { slug: "trial", name: "Trial" },
+      selectedNodeIds: [],
+    });
+    expect(prompt).toContain(
+      '- trial ("Trial"): components: components/hero.tsx, components/cta.tsx',
+    );
+    expect(prompt).toContain('- onboarding ("Onboarding"): no code components');
+  });
+
+  it("names the open paywall and points at edit_document for unqualified refs", () => {
+    const prompt = designerSystemPrompt({
+      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
+      openPaywall: { slug: "trial", name: "Trial" },
+      selectedNodeIds: [],
+    });
+    expect(prompt).toContain('has the "Trial" paywall (slug "trial") open');
+    expect(prompt).toContain("edit_document");
+    expect(prompt).toContain('"this paywall"');
+    // No workspace path for the open paywall in the document-first model.
+    expect(prompt).not.toContain("/paywalls/trial/paywall.tsx");
+  });
+
+  it("renders the selection as directly-addressable document node ids (plural)", () => {
+    const prompt = designerSystemPrompt({
+      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
+      openPaywall: { slug: "trial", name: "Trial" },
+      selectedNodeIds: ["node_a", "node_b"],
+    });
+    expect(prompt).toContain("nodes with id node_a, node_b selected");
+    expect(prompt).toContain("edit_document");
+  });
+
+  it("uses the singular for a single selected node", () => {
+    const prompt = designerSystemPrompt({
+      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
+      openPaywall: { slug: "trial", name: "Trial" },
+      selectedNodeIds: ["node_a"],
+    });
+    expect(prompt).toContain("node with id node_a selected");
+  });
+
+  it("states no paywall is open when none matches", () => {
+    const prompt = designerSystemPrompt({
+      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
+      openPaywall: undefined,
+      selectedNodeIds: [],
+    });
+    expect(prompt).toContain("does not have a specific paywall open");
+  });
+});
diff --git a/apps/backend/src/ai/surfaces.ts b/apps/backend/src/ai/surfaces.ts
new file mode 100644
index 000000000..3dcf42be7
--- /dev/null
+++ b/apps/backend/src/ai/surfaces.ts
@@ -0,0 +1,128 @@
+import type { Surface } from "@voidhash/ai-shared";
+import { paywallAuthoringSkill } from "./skills/paywall-authoring.ts";
+
+const DESIGNER_SYSTEM_PROMPT = `You are Voidhash AI, an autonomous design agent embedded in the Voidhash paywall designer. You help the user build and edit the paywall they currently have open. A paywall is a live MIMIC DOCUMENT — a tree of nodes (screen, view, text, shape, path, component) — that you author with document-edit operations, plus optional code components for anything that needs real code.
+
+Scope:
+- You edit ONLY the currently open paywall's document, with \`edit_document\`. You address nodes by their document node id (from \`get_document\` or the user's current selection).
+- Code components are the escape hatch for genuine code (loops, conditionals, pressed states, runtime-data text). A component's identity is its path \`components/<name>.tsx\`: \`write_component\` creates-or-replaces it, \`rename_component\` moves it, \`delete_component\` removes it.
+- You can READ any other paywall in the project for reference with \`read_paywall\` (e.g. "make this paywall match the onboarding one" — read onboarding, then edit the open paywall). You CANNOT edit another paywall.
+
+Editing model — edits are LIVE:
+- Every \`edit_document\` batch and every component tool applies IMMEDIATELY to the live paywall as a mimic transaction. The user sees the change on the canvas at once, and it is UNDOABLE from their history. There is NO build/apply/publish step for composition — no fork, no \`apply_changes\`. You edit the document directly.
+- \`edit_document\` is ATOMIC per batch: either every op in the batch applies or none does. On success it returns the engine-minted ids of any inserted nodes (keyed by op index) so you can address the new nodes in a follow-up. On failure it returns per-op errors naming the offending node, the allowed fields (with a did-you-mean), and the allowed values — read them and correct the batch. Nothing partial lands.
+- Node ids are engine-minted. NEVER supply an id when inserting; use the returned minted ids (or ids from \`get_document\`/the selection) to target follow-up edits.
+- \`write_component\` DOES have a compile step: on success the component compiles, commits, and becomes placeable as a \`component\` node; on failure you get compile diagnostics to fix. That loop is internal to \`write_component\` — it is the ONLY place a build gate exists.
+
+Attachments:
+- The user may attach images (e.g. a screenshot or mockup of the paywall they want) or paste content. When an image is attached, use it as the visual reference to reproduce. Match layout, colours, copy, and spacing as closely as the node/style system allows.
+
+Rules:
+- Read before you write. Call \`get_document\` (root, or a subtree with \`nodeId\`/\`depth\` for economy) to learn the current structure and ids before editing — explore, don't guess. Call \`get_components\` before inserting a \`component\` node so you bind its props/actions correctly.
+- Trust the validator. Field/value errors from \`edit_document\` name the allowed fields and values for that node type — iterate on them rather than guessing style keys.
+- Prefer the smallest change. Update only the fields you mean to change (\`update\` merges \`style\` per field). Reuse existing components rather than duplicating them. Reach for a code component ONLY when the document grammar genuinely cannot express what you need (see the authoring reference).
+- Keep your prose responses concise. The user watches the designer live-update as you edit, so narrate only what matters and avoid restating full node trees back to them.
+
+How to work:
+- Understand the request first, then \`get_document\` to see the current tree and ids. Read a sibling paywall with \`read_paywall\` when it is a useful reference.
+- Plan multi-step work. When a request needs several changes (new components, structural edits), lay out the steps and make them in order — batch related ops into one \`edit_document\` call where it is coherent (they apply atomically).
+- Edit step by step; after each \`edit_document\`, read the returned minted ids / errors and correct before continuing. Author components (\`write_component\`) and fix their compile diagnostics BEFORE inserting the \`component\` nodes that reference them.
+- Verify the end state: \`get_document\` the affected subtree to confirm it is what the user asked for.
+- Keep going until the user's request is fully handled. Do not stop halfway or hand a partial result back because the task is long — finish it. Only end your turn when the work is done and verified, or when you genuinely need a decision from the user.`;
+
+/**
+ * Server-resolved facts about what the user has open in the designer, appended
+ * to the system prompt as a context block. Built best-effort by the chat service
+ * from the paywall workspace; a failure to resolve any part degrades to omitting
+ * it (an absent `openPaywall` means no paywall is open).
+ */
+export interface DesignerContext {
+  /** Every paywall in the project: its slug, display name, and component file names. */
+  readonly paywalls: ReadonlyArray<{
+    readonly slug: string;
+    readonly name: string;
+    readonly componentFileNames: ReadonlyArray<string>;
+  }>;
+  /** The paywall the user currently has open, resolved from the request's paywallId. */
+  readonly openPaywall?: {
+    readonly slug: string;
+    readonly name: string;
+  };
+  /** Mimic node ids the user currently has selected in the open paywall. */
+  readonly selectedNodeIds: ReadonlyArray<string>;
+}
+
+/** One paywall's entry in the workspace listing block. */
+const formatPaywallEntry = (paywall: DesignerContext["paywalls"][number]): string => {
+  const components =
+    paywall.componentFileNames.length > 0
+      ? `components: ${paywall.componentFileNames.map((fileName) => `components/${fileName}`).join(", ")}`
+      : "no code components";
+  return `- ${paywall.slug} ("${paywall.name}"): ${components}`;
+};
+
+/**
+ * Render the dynamic designer context block appended to the system prompt: the
+ * project's paywall listing (slug, name, code components), which paywall is open,
+ * and the user's current selection. Returns an empty string when there is nothing
+ * to say (no paywalls resolved and none open), so the caller can append it
+ * unconditionally.
+ */
+const renderDesignerContext = (context: DesignerContext): string => {
+  const sections: string[] = [];
+
+  if (context.paywalls.length > 0) {
+    const lines = context.paywalls.map(formatPaywallEntry).join("\n");
+    sections.push(`Paywalls in this project (slug, display name, code components):\n${lines}`);
+  }
+
+  if (context.openPaywall !== undefined) {
+    const { slug, name } = context.openPaywall;
+    const openLines = [
+      `The user currently has the "${name}" paywall (slug "${slug}") open in the designer. Unqualified references like "this paywall", "the current screen", or "here" mean this one — edit it with \`edit_document\`.`,
+    ];
+    if (context.selectedNodeIds.length > 0) {
+      const ids = context.selectedNodeIds.join(", ");
+      const plural = context.selectedNodeIds.length === 1 ? "node" : "nodes";
+      openLines.push(
+        `The user currently has ${plural} with id ${ids} selected in the open paywall — these are document node ids you can target directly in \`edit_document\` ops (no need to re-locate them).`,
+      );
+    }
+    sections.push(openLines.join("\n"));
+  } else {
+    sections.push(
+      "The user does not have a specific paywall open in the designer right now, so treat requests as project-wide unless they name a paywall.",
+    );
+  }
+
+  return sections.length > 0 ? `\n\nCurrent context:\n${sections.join("\n\n")}` : "";
+};
+
+let cachedPromptWithSkill: string | undefined;
+
+/**
+ * Base designer prompt with the paywall-authoring domain reference appended.
+ * Lazy + memoized because building the skill introspects the mimic schemas
+ * (random-jittered encode), which workerd forbids in global scope.
+ */
+const designerPromptWithSkill = (): string =>
+  (cachedPromptWithSkill ??= `${DESIGNER_SYSTEM_PROMPT}\n\n${paywallAuthoringSkill()}`);
+
+/**
+ * System prompt for the designer surface: the base prompt, the paywall-authoring
+ * skill, and — when `context` is supplied — the dynamic context block. Without a
+ * context the static prompt is returned unchanged (used by callers that cannot
+ * resolve request context).
+ */
+export const designerSystemPrompt = (context?: DesignerContext): string =>
+  context === undefined
+    ? designerPromptWithSkill()
+    : `${designerPromptWithSkill()}${renderDesignerContext(context)}`;
+
+/** System prompt for the Voidhash AI agent on a given studio surface. */
+export const systemPromptForSurface = (surface: Surface): string => {
+  switch (surface) {
+    case "designer":
+      return designerSystemPrompt();
+  }
+};
diff --git a/apps/backend/src/ai/tools.test.ts b/apps/backend/src/ai/tools.test.ts
new file mode 100644
index 000000000..c1764214b
--- /dev/null
+++ b/apps/backend/src/ai/tools.test.ts
@@ -0,0 +1,388 @@
+import {
+  ComponentCompiler,
+  ComponentManifestCacheService,
+  PaywallDeployService,
+  PaywallWorkspaceService,
+} from "@voidhash/core/services";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { Context, Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import * as WorkspaceTools from "./workspace-tools.ts";
+
+/**
+ * Drive the STATELESS, document-first MCP workspace-tool core directly against a
+ * mocked workspace/deploy/compiler context. These tools read the LIVE document
+ * and edit it via mimic ops / component-path writes; every one folds an expected
+ * service failure into a readable message rather than throwing.
+ */
+
+const SCOPE: WorkspaceTools.WorkspaceToolScope = { projectId: "proj_1" };
+
+/** A decoded document root: root → screen → view(with a text), and a library with one component. */
+const documentRoot = {
+  id: "root1",
+  type: "root",
+  parentId: null,
+  pos: "a0",
+  data: { name: "Paywall" },
+  children: [
+    {
+      id: "screen1",
+      type: "screen",
+      parentId: "root1",
+      pos: "a0",
+      data: {},
+      children: [
+        {
+          id: "view1",
+          type: "view",
+          parentId: "screen1",
+          pos: "a0",
+          data: {},
+          children: [
+            { id: "text1", type: "text", parentId: "view1", pos: "a0", data: { text: "Hi" }, children: [] },
+          ],
+        },
+      ],
+    },
+    {
+      id: "lib1",
+      type: "library",
+      parentId: "root1",
+      pos: "a1",
+      data: {},
+      children: [
+        {
+          id: "cc1",
+          type: "codeComponent",
+          parentId: "lib1",
+          pos: "a0",
+          data: { path: "components/hero.tsx", source: "export const Hero = () => null;" },
+          children: [],
+        },
+      ],
+    },
+  ],
+};
+
+const fakeWorkspace = (over: Partial<PaywallWorkspaceService["Service"]> = {}) =>
+  ({
+    listPaywalls: () => Effect.succeed([{ slug: "trial", paywallId: "pw_1" }]),
+    readDocument: (_p: string, slug: string) =>
+      Effect.succeed({ slug, name: "Trial", paywallId: "pw_1", root: documentRoot }),
+    editDocument: () => Effect.succeed({ version: 9, commandCount: 2, mintedIds: { "0": ["abc1234567"] } }),
+    writeComponentSource: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    moveComponentFile: () => Effect.succeed({ version: 9, commandCount: 2, diagnostics: [] }),
+    deleteComponentFile: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    ...over,
+  }) as unknown as PaywallWorkspaceService["Service"];
+
+const fakeDeploy = (over: Partial<PaywallDeployService["Service"]> = {}) =>
+  ({
+    listComponents: () => Effect.succeed([]),
+    ...over,
+  }) as unknown as PaywallDeployService["Service"];
+
+const fakeManifestCache = (over: Partial<ComponentManifestCacheService["Service"]> = {}) =>
+  ({
+    getMany: () => Effect.succeed(new Map()),
+    record: () => Effect.void,
+    ...over,
+  }) as unknown as ComponentManifestCacheService["Service"];
+
+const fakeCompiler = (over: Partial<ComponentCompiler["Service"]> = {}) =>
+  ({
+    compileCheck: () => Effect.succeed({ status: "unavailable" as const }),
+    compileAndExtract: () => Effect.succeed({ status: "unavailable" as const }),
+    ...over,
+  }) as unknown as ComponentCompiler["Service"];
+
+interface Fakes {
+  readonly workspace?: PaywallWorkspaceService["Service"];
+  readonly deploy?: PaywallDeployService["Service"];
+  readonly manifestCache?: ComponentManifestCacheService["Service"];
+  readonly compiler?: ComponentCompiler["Service"];
+}
+
+const run = (
+  effect: Effect.Effect<WorkspaceTools.WorkspaceToolResult, never, WorkspaceTools.WorkspaceToolDeps>,
+  fakes: Fakes = {},
+): Promise<WorkspaceTools.WorkspaceToolResult> =>
+  Effect.runPromise(
+    effect.pipe(
+      Effect.provide(
+        Context.empty().pipe(
+          Context.add(PaywallWorkspaceService, fakes.workspace ?? fakeWorkspace()),
+          Context.add(PaywallDeployService, fakes.deploy ?? fakeDeploy()),
+          Context.add(ComponentManifestCacheService, fakes.manifestCache ?? fakeManifestCache()),
+          Context.add(ComponentCompiler, fakes.compiler ?? fakeCompiler()),
+          Context.add(AuthSession, {} as never),
+        ),
+      ),
+    ),
+  );
+
+describe("MCP workspace tools (document-first)", () => {
+  it("list_paywalls formats the project's paywalls", async () => {
+    const result = await run(WorkspaceTools.listPaywalls(SCOPE));
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("trial");
+    expect(result.output).toContain("/paywalls/trial");
+  });
+
+  it("get_paywall returns cleaned document JSON with node ids", async () => {
+    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "trial" }));
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain('"id": "root1"');
+    expect(result.output).toContain('"id": "view1"');
+  });
+
+  it("get_paywall(nodeId) roots the tree at a subtree", async () => {
+    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "trial", nodeId: "view1" }));
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain('"id": "view1"');
+    // The sibling library node is not under view1.
+    expect(result.output).not.toContain('"id": "lib1"');
+  });
+
+  it("get_paywall errors on an unknown nodeId", async () => {
+    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "trial", nodeId: "ghost" }));
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("no node");
+  });
+
+  it("get_components lists catalog + local components; a missing manifest is noted", async () => {
+    const result = await run(WorkspaceTools.getComponents(SCOPE, { slug: "trial" }), {
+      deploy: fakeDeploy({
+        listComponents: () =>
+          Effect.succeed([
+            {
+              slug: "pricing",
+              title: "Pricing",
+              latestVersion: 3,
+              latest: { manifest: { props: {}, actions: {} }, previewStates: ["default"] },
+              previousVersions: [],
+              componentId: "pc_1",
+            },
+          ]) as never,
+      }),
+      // no cached manifest for the local component → "manifest unavailable" note
+      manifestCache: fakeManifestCache({ getMany: () => Effect.succeed(new Map()) }),
+    });
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("pricing");
+    expect(result.output).toContain("components/hero.tsx");
+    expect(result.output).toContain("manifest unavailable");
+  });
+
+  it("read_component returns the local component source", async () => {
+    const result = await run(
+      WorkspaceTools.readComponent(SCOPE, { slug: "trial", path: "components/hero.tsx" }),
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toBe("export const Hero = () => null;");
+  });
+
+  it("read_component errors on an unknown path and lists what is available", async () => {
+    const result = await run(
+      WorkspaceTools.readComponent(SCOPE, { slug: "trial", path: "components/ghost.tsx" }),
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("components/hero.tsx");
+  });
+
+  it("edit_paywall validates then applies, returning minted ids", async () => {
+    const result = await run(
+      WorkspaceTools.editPaywall(SCOPE, {
+        slug: "trial",
+        edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
+      }),
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("version 9");
+    expect(result.output).toContain("Minted ids");
+    expect(result.output).toContain("abc1234567");
+  });
+
+  it("edit_paywall auto-derives backgroundEnabled from a lone backgroundColor", async () => {
+    // The applied edits are what the workspace commits — capture them and assert the
+    // group flag was injected by the shared validator's write-side normalization.
+    let applied: unknown[] = [];
+    const result = await run(
+      WorkspaceTools.editPaywall(SCOPE, {
+        slug: "trial",
+        edits: [{ op: "update", nodeId: "view1", set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } } }],
+      }),
+      {
+        workspace: fakeWorkspace({
+          editDocument: ((_p: string, _slug: string, edits: unknown[]) => {
+            applied = edits;
+            return Effect.succeed({ version: 9, commandCount: 1, mintedIds: {} });
+          }) as never,
+        }),
+      },
+    );
+    expect(result.isError).toBe(false);
+    const set = (applied[0] as { set: { style: Record<string, unknown> } }).set;
+    expect(set.style.backgroundEnabled).toBe(true);
+    expect(set.style.backgroundColor).toBe("rgba(1, 2, 3, 1)");
+  });
+
+  it("edit_paywall returns structured validation errors and never applies", async () => {
+    const editDocument = () => {
+      throw new Error("editDocument must not run on a validation failure");
+    };
+    const result = await run(
+      WorkspaceTools.editPaywall(SCOPE, {
+        slug: "trial",
+        // view cannot be a child of text → illegalChild
+        edits: [{ op: "insert", parentId: "text1", node: { type: "view" } }],
+      }),
+      { workspace: fakeWorkspace({ editDocument: editDocument as never }) },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("edit_paywall rejected");
+    expect(result.output).toContain("text");
+  });
+
+  it("edit_paywall folds a conflict into a clean message (no Cause/_tag leak)", async () => {
+    const result = await run(
+      WorkspaceTools.editPaywall(SCOPE, {
+        slug: "trial",
+        edits: [{ op: "update", nodeId: "text1", set: { text: "Bye" } }],
+      }),
+      {
+        workspace: fakeWorkspace({
+          editDocument: () =>
+            Effect.fail({ _tag: "WorkspaceWriteConflictError", message: "race lost" }) as never,
+        }),
+      },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("edit_paywall rejected: race lost");
+    expect(result.output).not.toContain("Cause(");
+    expect(result.output).not.toContain("_tag");
+  });
+
+  it("write_component rejects a broken component with diagnostics (commits nothing)", async () => {
+    const writeComponentSource = () => {
+      throw new Error("must not commit on a compile error");
+    };
+    const result = await run(
+      WorkspaceTools.writeComponent(SCOPE, {
+        slug: "trial",
+        path: "components/broken.tsx",
+        source: "export default (=> {",
+      }),
+      {
+        workspace: fakeWorkspace({ writeComponentSource: writeComponentSource as never }),
+        compiler: fakeCompiler({
+          compileAndExtract: () =>
+            Effect.succeed({
+              status: "error" as const,
+              phase: "compile" as const,
+              diagnostics: [{ message: "Unexpected token", line: 1, column: 17 }],
+            }),
+        }),
+      },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("Unexpected token");
+  });
+
+  it("write_component commits a clean component and records its manifest", async () => {
+    const recorded: unknown[] = [];
+    const result = await run(
+      WorkspaceTools.writeComponent(SCOPE, {
+        slug: "trial",
+        path: "components/card.tsx",
+        source: "export default () => null;",
+      }),
+      {
+        manifestCache: fakeManifestCache({
+          record: ((input: unknown) => Effect.sync(() => void recorded.push(input))) as never,
+        }),
+        compiler: fakeCompiler({
+          compileAndExtract: () =>
+            Effect.succeed({
+              status: "ready" as const,
+              manifest: {
+                manifestVersion: 2,
+                props: {},
+                actions: {},
+                slot: false,
+                previewStates: ["default"],
+                hostData: [],
+              },
+            }),
+        }),
+      },
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("manifest recorded");
+    expect(recorded).toHaveLength(1);
+  });
+
+  it("write_component commits unvalidated when the compiler is unavailable (degraded workerd)", async () => {
+    const result = await run(
+      WorkspaceTools.writeComponent(SCOPE, {
+        slug: "trial",
+        path: "components/card.tsx",
+        source: "export default () => null;",
+      }),
+      // default compiler is `unavailable`
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("diagnostics unavailable");
+  });
+
+  it("write_component rejects an invalid file name before compiling", async () => {
+    const compileAndExtract = () => {
+      throw new Error("must not compile an invalid path");
+    };
+    const result = await run(
+      WorkspaceTools.writeComponent(SCOPE, {
+        slug: "trial",
+        path: "components/../evil.tsx",
+        source: "export default () => null;",
+      }),
+      { compiler: fakeCompiler({ compileAndExtract: compileAndExtract as never }) },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("write_component rejected");
+  });
+
+  it("rename_component moves a component and reports the version", async () => {
+    const result = await run(
+      WorkspaceTools.renameComponent(SCOPE, {
+        slug: "trial",
+        fromPath: "components/hero.tsx",
+        toPath: "components/banner.tsx",
+      }),
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("components/hero.tsx → components/banner.tsx");
+  });
+
+  it("delete_component removes a component and warns about placeholders", async () => {
+    const result = await run(
+      WorkspaceTools.deleteComponent(SCOPE, { slug: "trial", path: "components/hero.tsx" }),
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("placeholders");
+  });
+
+  it("a service failure folds into a readable message (no Cause leak)", async () => {
+    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "missing" }), {
+      workspace: fakeWorkspace({
+        readDocument: () =>
+          Effect.fail({ _tag: "PaywallNotFoundError", message: 'No paywall "missing"' }) as never,
+      }),
+    });
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("get_paywall failed");
+    expect(result.output).toContain('No paywall "missing"');
+    expect(result.output).not.toContain("Cause(");
+  });
+});
diff --git a/apps/backend/src/ai/workspace-tools.ts b/apps/backend/src/ai/workspace-tools.ts
new file mode 100644
index 000000000..93fb6748d
--- /dev/null
+++ b/apps/backend/src/ai/workspace-tools.ts
@@ -0,0 +1,580 @@
+/**
+ * Stateless MCP tool core: ONE implementation of each MCP `tools/call` handler,
+ * consumed by the MCP JSON-RPC frontend (`routes/mcp.ts`).
+ *
+ * MCP is stateless and server-executed (external agents like Claude Code hitting
+ * `/api/mcp`): there is no fork, no `paywall.tsx`, no whole-target overwrite. The
+ * surface is document-first — composition is edited as mimic DOCUMENT ops and
+ * code components are managed by path:
+ *
+ * - `list_paywalls` — the project's paywall directories.
+ * - `get_paywall({ slug, nodeId?, depth? })` — cleaned document JSON.
+ * - `get_components({ slug })` — catalog + local components (props/actions/etc.).
+ * - `read_component({ slug, path })` — a local component's TSX source.
+ * - `edit_paywall({ slug, edits })` — an ATOMIC batch of document ops against the
+ *   LIVE document (schema-validated, then reconciled+submitted with retry).
+ * - `write_component({ slug, path, source })` — server-VALIDATED (headless build)
+ *   then committed; diagnostics commit nothing.
+ * - `rename_component` / `delete_component` — path move / placeholder-degrade.
+ *
+ * Each tool is a function `(scope, input) → Effect<ToolResult, never, Deps>`: it
+ * runs the matching workspace effect and folds the outcome into a client-facing
+ * string. Expected failures (rejections, conflicts, not-found) become a readable
+ * `{ isError: true }` message rather than a thrown error. The Effect itself never
+ * fails (`E = never`); the frontend provides its context.
+ */
+import {
+  ComponentCompiler,
+  ComponentManifestCacheService,
+  PaywallDeployService,
+  PaywallWorkspaceService,
+  type CompileExtractResult,
+} from "@voidhash/core/services";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  serializeDocument,
+  validateDocumentEdits,
+  type DocumentEdit,
+  type EditableDocumentNode,
+  type SnapshotDocumentNode,
+} from "@voidhash/ai-shared";
+import {
+  fileNameFromDocRelative,
+  hashSource,
+  validateComponentFileName,
+} from "@voidhash/paywall-workspace";
+import { Cause, Effect, Exit, Option } from "effect";
+
+/** The context (services) every workspace tool closes over when it runs. */
+export type WorkspaceToolDeps =
+  | PaywallWorkspaceService
+  | PaywallDeployService
+  | ComponentManifestCacheService
+  | ComponentCompiler
+  | AuthSession;
+
+/**
+ * The result of running a workspace tool. `output` is the client-facing string
+ * (a formatted success or a readable failure message). `isError` is `true` when
+ * the tool did not complete its intended effect (a workspace rejection/conflict/
+ * not-found, or a validation failure) — the MCP frontend maps it to an
+ * `isError: true` tool result.
+ */
+export interface WorkspaceToolResult {
+  readonly output: string;
+  readonly isError: boolean;
+}
+
+/**
+ * The scope a workspace tool operates over. `projectId` is authoritative — the
+ * MCP frontend derives it from the API key.
+ */
+export interface WorkspaceToolScope {
+  readonly projectId: string;
+}
+
+const okResult = (output: string): WorkspaceToolResult => ({ output, isError: false });
+const errResult = (output: string): WorkspaceToolResult => ({ output, isError: true });
+
+/**
+ * Diagnostics riding on a typed failure (e.g. `WorkspaceWriteRejectedError`),
+ * rendered as `- <message>` lines. These carry the ACTUAL rejection reasons —
+ * without them the client only sees the generic envelope message and cannot
+ * react.
+ */
+const failureDiagnosticLines = (error: unknown): string[] => {
+  const diagnostics = (error as { diagnostics?: unknown }).diagnostics;
+  if (!Array.isArray(diagnostics)) {
+    return [];
+  }
+  return diagnostics.flatMap((entry) => {
+    if (entry === null || typeof entry !== "object") {
+      return [];
+    }
+    const message = (entry as { message?: unknown }).message;
+    return typeof message === "string" && message.length > 0 ? [`- ${message}`] : [];
+  });
+};
+
+/**
+ * Render a typed failure value as a readable message. Tagged errors that carry
+ * their payload in `cause` instead of `message` (e.g. `PaywallServiceError`)
+ * inherit `Error.prototype.message === ""` — naively reading `.message` yields
+ * an EMPTY string. Prefer a non-empty `message`, then a `cause` payload
+ * (prefixed with the error's `_tag`), then the tag alone, and never return an
+ * empty string; any `diagnostics` the error carries are appended as `- ` lines.
+ */
+const failureMessage = (error: unknown): string => {
+  const base = (() => {
+    if (error !== null && typeof error === "object") {
+      const { message, cause, _tag } = error as {
+        message?: unknown;
+        cause?: unknown;
+        _tag?: unknown;
+      };
+      if (typeof message === "string" && message.length > 0) {
+        return message;
+      }
+      const tag = typeof _tag === "string" ? _tag : undefined;
+      const causeText =
+        typeof cause === "string" && cause.length > 0
+          ? cause
+          : cause instanceof Error && cause.message.length > 0
+            ? cause.message
+            : undefined;
+      if (causeText !== undefined) {
+        return tag !== undefined ? `${tag}: ${causeText}` : causeText;
+      }
+      if (tag !== undefined) {
+        return tag;
+      }
+    }
+    const text = String(error);
+    return text.length > 0 ? text : "unknown error (no message)";
+  })();
+  const diagnosticLines = failureDiagnosticLines(error);
+  return diagnosticLines.length > 0 ? `${base}\n${diagnosticLines.join("\n")}` : base;
+};
+
+/**
+ * Run a workspace effect and fold its exit into `{ ok, value | message }`. The
+ * context is supplied by the frontend (provided into the returned effect), so
+ * the shared core needs no direct context access. An expected typed failure
+ * becomes a readable message (see {@link failureMessage}) — never a defect the
+ * frontend has to catch.
+ */
+const runFolded = <A>(
+  effect: Effect.Effect<A, unknown, WorkspaceToolDeps>,
+): Effect.Effect<{ ok: true; value: A } | { ok: false; message: string }, never, WorkspaceToolDeps> =>
+  effect.pipe(
+    Effect.exit,
+    Effect.map((exit) => {
+      if (Exit.isSuccess(exit)) {
+        return { ok: true as const, value: exit.value };
+      }
+      // Extract the first typed failure (`Fail` reason's `error`) from the
+      // cause; a die/interrupt has no `Fail` reason, so it pretty-prints the
+      // whole cause instead.
+      const failure = Cause.findErrorOption(exit.cause);
+      const message = Option.isSome(failure)
+        ? failureMessage(failure.value)
+        : Cause.pretty(exit.cause);
+      return { ok: false as const, message };
+    }),
+  );
+
+/** Inputs for each workspace tool, matching the MCP tool schemas. */
+export interface ListPaywallsInput {}
+export interface GetPaywallInput {
+  readonly slug: string;
+  readonly nodeId?: string;
+  readonly depth?: number;
+}
+export interface GetComponentsInput {
+  readonly slug: string;
+}
+export interface ReadComponentInput {
+  readonly slug: string;
+  readonly path: string;
+}
+export interface EditPaywallInput {
+  readonly slug: string;
+  readonly edits: ReadonlyArray<DocumentEdit>;
+}
+export interface WriteComponentInput {
+  readonly slug: string;
+  readonly path: string;
+  readonly source: string;
+}
+export interface RenameComponentInput {
+  readonly slug: string;
+  readonly fromPath: string;
+  readonly toPath: string;
+}
+export interface DeleteComponentInput {
+  readonly slug: string;
+  readonly path: string;
+}
+
+/**
+ * `list_paywalls` — the project's paywall directories (slug + path) as a list.
+ * MCP has no system prompt to embed the paywall set into, so it is a first-class
+ * tool here.
+ */
+export const listPaywalls = (
+  scope: WorkspaceToolScope,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const ws = yield* PaywallWorkspaceService;
+        return yield* ws.listPaywalls(scope.projectId);
+      }),
+    );
+    if (!result.ok) {
+      return errResult(`list_paywalls failed: ${result.message}`);
+    }
+    if (result.value.length === 0) {
+      return okResult("No paywalls in this project.");
+    }
+    const lines = result.value.map((dir) => `- ${dir.slug} (/paywalls/${dir.slug})`);
+    return okResult(`${result.value.length} paywall(s):\n${lines.join("\n")}`);
+  });
+
+/**
+ * Adapt a decoded document snapshot node to the ai-shared
+ * {@link EditableDocumentNode} the validator reads (`data` verbatim — the
+ * validator only touches scalar/enum leaves).
+ */
+const toEditableNode = (node: SnapshotDocumentNode): EditableDocumentNode => ({
+  id: node.id,
+  type: node.type,
+  data: node.data as Record<string, unknown>,
+  children: (node.children ?? []).map(toEditableNode),
+});
+
+/** Read the decoded document root for a slug, or a readable failure message. */
+const readDocumentRoot = (scope: WorkspaceToolScope, slug: string) =>
+  runFolded(
+    Effect.gen(function* () {
+      const ws = yield* PaywallWorkspaceService;
+      return yield* ws.readDocument(scope.projectId, slug);
+    }),
+  );
+
+/**
+ * `get_paywall` — the paywall's LIVE document as cleaned JSON (nested
+ * `{ id, type, name?, ...data, children }`, defaults stripped, CRDT internals
+ * dropped). `nodeId` roots a subtree; `depth` caps the tree (deeper nodes render
+ * as stubs). The `id`s are the addressing keys for `edit_paywall`.
+ */
+export const getPaywall = (
+  scope: WorkspaceToolScope,
+  input: GetPaywallInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* readDocumentRoot(scope, input.slug);
+    if (!result.ok) {
+      return errResult(`get_paywall failed: ${result.message}`);
+    }
+    const roots = result.value.root != null ? [result.value.root as SnapshotDocumentNode] : [];
+    const cleaned = serializeDocument(roots, {
+      ...(input.nodeId !== undefined ? { nodeId: input.nodeId } : {}),
+      ...(input.depth !== undefined ? { depth: input.depth } : {}),
+    });
+    if (cleaned === null) {
+      return errResult(
+        input.nodeId !== undefined
+          ? `get_paywall: no node "${input.nodeId}" in paywall "${input.slug}".`
+          : `get_paywall: paywall "${input.slug}" has no document.`,
+      );
+    }
+    return okResult(JSON.stringify(cleaned, null, 2));
+  });
+
+/**
+ * Walk a decoded document root for its local `codeComponent` definitions
+ * (`library` node → `codeComponent` children), returning `{ path, source }`.
+ */
+const localComponentsOf = (
+  root: SnapshotDocumentNode | null,
+): ReadonlyArray<{ readonly path: string; readonly source: string }> => {
+  if (root === null) {
+    return [];
+  }
+  const library = (root.children ?? []).find((child) => child.type === "library");
+  if (library === undefined) {
+    return [];
+  }
+  return (library.children ?? []).flatMap((node) => {
+    if (node.type !== "codeComponent") {
+      return [];
+    }
+    const data = (node.data ?? {}) as { path?: unknown; source?: unknown };
+    return typeof data.path === "string" && typeof data.source === "string"
+      ? [{ path: data.path, source: data.source }]
+      : [];
+  });
+};
+
+/**
+ * `get_components` — every component placeable in the paywall: CATALOG components
+ * (deployed/shared, from {@link PaywallDeployService.listComponents} — slug,
+ * version, description, props/actions/slot/previewStates from their §2 manifest)
+ * AND the paywall's LOCAL code components (walked from the document's `library`;
+ * their manifests resolved from the content-addressed cache by source hash — a
+ * component whose source has no cached manifest is listed with a
+ * "manifest unavailable" note, never evaluated inline).
+ */
+export const getComponents = (
+  scope: WorkspaceToolScope,
+  input: GetComponentsInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const deploy = yield* PaywallDeployService;
+        const ws = yield* PaywallWorkspaceService;
+        const manifestCache = yield* ComponentManifestCacheService;
+
+        const catalog = yield* deploy.listComponents({ projectId: scope.projectId });
+        const document = yield* ws.readDocument(scope.projectId, input.slug);
+        const locals = localComponentsOf((document.root as SnapshotDocumentNode | null) ?? null);
+        const cached = yield* manifestCache.getMany(locals.map((local) => hashSource(local.source)));
+
+        return {
+          catalog: catalog.map((component) => ({
+            slug: component.slug,
+            title: component.title,
+            version: component.latestVersion,
+            manifest: component.latest.manifest,
+            previewStates: component.latest.previewStates,
+          })),
+          locals: locals.map((local) => {
+            const row = cached.get(hashSource(local.source));
+            return {
+              path: local.path,
+              manifest: row?.status === "ready" ? row.manifest : undefined,
+            };
+          }),
+        } as const;
+      }),
+    );
+    if (!result.ok) {
+      return errResult(`get_components failed: ${result.message}`);
+    }
+    const { catalog, locals } = result.value;
+    const sections: string[] = [];
+    sections.push(
+      catalog.length === 0
+        ? "Catalog components: none."
+        : `Catalog components (${catalog.length}):\n${JSON.stringify(catalog, null, 2)}`,
+    );
+    sections.push(
+      locals.length === 0
+        ? "Local code components: none."
+        : `Local code components (${locals.length}):\n${locals
+            .map((local) =>
+              local.manifest !== undefined
+                ? `- ${local.path}:\n${JSON.stringify(local.manifest, null, 2)}`
+                : `- ${local.path}: manifest unavailable (component not yet compiled in a session — read_component to see its source).`,
+            )
+            .join("\n")}`,
+    );
+    return okResult(sections.join("\n\n"));
+  });
+
+/** `read_component` — a local code component's TSX source by its `components/<name>.tsx` path. */
+export const readComponent = (
+  scope: WorkspaceToolScope,
+  input: ReadComponentInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* readDocumentRoot(scope, input.slug);
+    if (!result.ok) {
+      return errResult(`read_component failed: ${result.message}`);
+    }
+    const locals = localComponentsOf((result.value.root as SnapshotDocumentNode | null) ?? null);
+    const component = locals.find((local) => local.path === input.path);
+    if (component === undefined) {
+      const available = locals.map((local) => local.path);
+      return errResult(
+        `read_component: no local component at "${input.path}" in paywall "${input.slug}".${
+          available.length > 0 ? ` Available: [${available.join(", ")}].` : ""
+        }`,
+      );
+    }
+    return okResult(component.source);
+  });
+
+/**
+ * `edit_paywall` — an ATOMIC batch of document ops against the LIVE document. The
+ * ops are validated with the schema-derived `validateDocumentEdits` against the
+ * decoded tree; on failure the STRUCTURED errors are returned verbatim (the
+ * model reads them to converge). On success the ops are applied and reconciled
+ * into the live document through the version-retry submit loop, and the minted
+ * ids for created nodes are returned so the model can address them next.
+ */
+export const editPaywall = (
+  scope: WorkspaceToolScope,
+  input: EditPaywallInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    // Validate first (against a fresh read) so an invalid batch never opens a
+    // transaction and returns the model-facing errors verbatim.
+    const read = yield* readDocumentRoot(scope, input.slug);
+    if (!read.ok) {
+      return errResult(`edit_paywall failed: ${read.message}`);
+    }
+    const root = read.value.root as SnapshotDocumentNode | null;
+    if (root === null) {
+      return errResult(`edit_paywall: paywall "${input.slug}" has no document to edit.`);
+    }
+    const validation = validateDocumentEdits(input.edits, toEditableNode(root));
+    if (!validation.ok) {
+      return errResult(
+        `edit_paywall rejected — fix these and retry:\n${validation.errors
+          .map((error) => `- [edit ${error.editIndex}] ${error.message}`)
+          .join("\n")}`,
+      );
+    }
+
+    const applied = yield* runFolded(
+      Effect.gen(function* () {
+        const ws = yield* PaywallWorkspaceService;
+        return yield* ws.editDocument(scope.projectId, input.slug, validation.edits);
+      }),
+    );
+    if (!applied.ok) {
+      return errResult(`edit_paywall rejected: ${applied.message}`);
+    }
+    const { version, commandCount, mintedIds } = applied.value;
+    const mintedEntries = Object.entries(mintedIds);
+    const mintedNote =
+      mintedEntries.length > 0
+        ? `\nMinted ids (by op index): ${mintedEntries
+            .map(([index, ids]) => `${index}=[${ids.join(", ")}]`)
+            .join("; ")}`
+        : "";
+    return okResult(
+      `Applied ${validation.edits.length} edit(s) to "${input.slug}" at version ${version} (${commandCount} command${commandCount === 1 ? "" : "s"}).${mintedNote}`,
+    );
+  });
+
+/** Render a compile/extract failure's diagnostics as `- ` lines. */
+const formatExtractDiagnostics = (
+  result: Extract<CompileExtractResult, { status: "error" }>,
+): string =>
+  `[${result.phase}] compile failed:\n${result.diagnostics
+    .map((d) => {
+      const position =
+        d.line !== undefined
+          ? ` (line ${d.line}${d.column !== undefined ? `, col ${d.column}` : ""})`
+          : "";
+      return `- ${d.message}${position}`;
+    })
+    .join("\n")}`;
+
+/**
+ * `write_component` — server-VALIDATE the single component's source THEN commit:
+ * run the headless {@link ComponentCompiler.compileAndExtract} (compile + static
+ * manifest extract on the container/native adapter; `unavailable` on the
+ * degraded workerd runtime, where the source is committed unvalidated and the
+ * browser back-fills the manifest). On compile/runtime diagnostics NOTHING is
+ * committed. On success the source is written to the `codeComponent` node
+ * (created when the path is new) and, when a manifest was extracted, recorded in
+ * the content-addressed cache so a later projection can resolve it.
+ */
+export const writeComponent = (
+  scope: WorkspaceToolScope,
+  input: WriteComponentInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const nameError = validateComponentFileName(fileNameFromDocRelative(input.path));
+    if (nameError !== undefined) {
+      return errResult(`write_component rejected: ${nameError}`);
+    }
+
+    // Build the single component first. A compile/runtime error commits nothing.
+    const built = yield* runFolded(
+      Effect.gen(function* () {
+        const compiler = yield* ComponentCompiler;
+        return yield* compiler.compileAndExtract(input.source);
+      }),
+    );
+    if (!built.ok) {
+      return errResult(`write_component failed: ${built.message}`);
+    }
+    const build = built.value;
+    if (build.status === "error") {
+      return errResult(`write_component rejected: ${formatExtractDiagnostics(build)}`);
+    }
+
+    // Commit the source (create-or-replace the codeComponent node), then record
+    // the manifest when one was extracted (degraded workerd yields none).
+    const committed = yield* runFolded(
+      Effect.gen(function* () {
+        const ws = yield* PaywallWorkspaceService;
+        const result = yield* ws.writeComponentSource(
+          scope.projectId,
+          input.slug,
+          input.path,
+          input.source,
+        );
+        if (build.status === "ready") {
+          const manifestCache = yield* ComponentManifestCacheService;
+          yield* manifestCache.record({
+            sourceHash: hashSource(input.source),
+            status: "ready",
+            manifest: build.manifest,
+          });
+        }
+        return result;
+      }),
+    );
+    if (!committed.ok) {
+      return errResult(`write_component rejected: ${committed.message}`);
+    }
+    const buildNote =
+      build.status === "ready"
+        ? "compiled clean; manifest recorded"
+        : "committed (diagnostics unavailable in this runtime — the designer will validate on open)";
+    return okResult(
+      `Wrote ${input.path} to "${input.slug}" at version ${committed.value.version} (${buildNote}).`,
+    );
+  });
+
+/**
+ * `rename_component` — move a local component from `fromPath` to `toPath` (a path
+ * rename): repaths the definition AND re-points every local instance referencing
+ * it (rename cascade). Addressed by `components/<name>.tsx` file names.
+ */
+export const renameComponent = (
+  scope: WorkspaceToolScope,
+  input: RenameComponentInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const ws = yield* PaywallWorkspaceService;
+        return yield* ws.moveComponentFile(
+          scope.projectId,
+          input.slug,
+          fileNameFromDocRelative(input.fromPath),
+          fileNameFromDocRelative(input.toPath),
+        );
+      }),
+    );
+    return result.ok
+      ? okResult(
+          `Renamed ${input.fromPath} → ${input.toPath} in "${input.slug}" at version ${result.value.version}.`,
+        )
+      : errResult(`rename_component rejected: ${result.message}`);
+  });
+
+/**
+ * `delete_component` — remove a local component's `codeComponent` definition by
+ * path. Existing instances of it DEGRADE to placeholders (never cascade-deleted),
+ * so they should be replaced or removed afterward.
+ */
+export const deleteComponent = (
+  scope: WorkspaceToolScope,
+  input: DeleteComponentInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const ws = yield* PaywallWorkspaceService;
+        return yield* ws.deleteComponentFile(
+          scope.projectId,
+          input.slug,
+          fileNameFromDocRelative(input.path),
+        );
+      }),
+    );
+    return result.ok
+      ? okResult(
+          `Deleted ${input.path} from "${input.slug}" at version ${result.value.version}. Any instances of it now render as placeholders — replace or remove them.`,
+        )
+      : errResult(`delete_component rejected: ${result.message}`);
+  });
diff --git a/apps/backend/src/mcp/dispatch.test.ts b/apps/backend/src/mcp/dispatch.test.ts
new file mode 100644
index 000000000..9b3ebafa4
--- /dev/null
+++ b/apps/backend/src/mcp/dispatch.test.ts
@@ -0,0 +1,219 @@
+/**
+ * Tests the MCP tool DISPATCH path end-to-end through the stateless document-
+ * first workspace-tool core against a mocked workspace context. Proves: a valid
+ * call runs the core and returns its string; an invalid argument set folds to an
+ * `isError` result (never a throw / JSON-RPC error); `list_paywalls` lists
+ * directories; `get_paywall` cleans the document; `edit_paywall` validates then
+ * applies; the write folds a rejection into a clean message (no Cause/_tag leak).
+ */
+import {
+  ComponentCompiler,
+  ComponentManifestCacheService,
+  PaywallDeployService,
+  PaywallWorkspaceService,
+} from "@voidhash/core/services";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { Context, Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import { findMcpTool } from "./tool-manifest.ts";
+import type { WorkspaceToolResult } from "../ai/workspace-tools.ts";
+
+/** A decoded document root: root → screen. */
+const documentRoot = {
+  id: "root1",
+  type: "root",
+  parentId: null,
+  pos: "a0",
+  data: { name: "Paywall" },
+  children: [
+    { id: "screen1", type: "screen", parentId: "root1", pos: "a0", data: {}, children: [] },
+  ],
+};
+
+const fakeWorkspace = (over: Partial<PaywallWorkspaceService["Service"]> = {}) =>
+  ({
+    listPaywalls: () =>
+      Effect.succeed([
+        { slug: "trial", paywallId: "pw_1" },
+        { slug: "onboarding", paywallId: "pw_2" },
+      ]),
+    readDocument: (_p: string, slug: string) =>
+      Effect.succeed({ slug, name: "Trial", paywallId: "pw_1", root: documentRoot }),
+    editDocument: () => Effect.succeed({ version: 9, commandCount: 2, mintedIds: {} }),
+    writeComponentSource: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    moveComponentFile: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    deleteComponentFile: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    ...over,
+  }) as unknown as PaywallWorkspaceService["Service"];
+
+const fakeDeploy = (over: Partial<PaywallDeployService["Service"]> = {}) =>
+  ({
+    listComponents: () => Effect.succeed([]),
+    ...over,
+  }) as unknown as PaywallDeployService["Service"];
+
+const fakeManifestCache = (over: Partial<ComponentManifestCacheService["Service"]> = {}) =>
+  ({
+    getMany: () => Effect.succeed(new Map()),
+    record: () => Effect.void,
+    ...over,
+  }) as unknown as ComponentManifestCacheService["Service"];
+
+const fakeCompiler = (over: Partial<ComponentCompiler["Service"]> = {}) =>
+  ({
+    compileCheck: () => Effect.succeed({ status: "unavailable" as const }),
+    compileAndExtract: () => Effect.succeed({ status: "unavailable" as const }),
+    ...over,
+  }) as unknown as ComponentCompiler["Service"];
+
+interface Fakes {
+  readonly workspace?: PaywallWorkspaceService["Service"];
+  readonly deploy?: PaywallDeployService["Service"];
+  readonly manifestCache?: ComponentManifestCacheService["Service"];
+  readonly compiler?: ComponentCompiler["Service"];
+}
+
+const contextWith = (fakes: Fakes) =>
+  Context.empty().pipe(
+    Context.add(PaywallWorkspaceService, fakes.workspace ?? fakeWorkspace()),
+    Context.add(PaywallDeployService, fakes.deploy ?? fakeDeploy()),
+    Context.add(ComponentManifestCacheService, fakes.manifestCache ?? fakeManifestCache()),
+    Context.add(ComponentCompiler, fakes.compiler ?? fakeCompiler()),
+    Context.add(AuthSession, {} as never),
+  );
+
+const dispatchWith = (
+  fakes: Fakes,
+  name: string,
+  args: unknown,
+): Promise<WorkspaceToolResult> => {
+  const tool = findMcpTool(name);
+  if (tool === undefined) {
+    throw new Error(`tool ${name} not found`);
+  }
+  return Effect.runPromise(
+    tool.dispatch({ projectId: "proj_1" }, args).pipe(Effect.provide(contextWith(fakes))),
+  );
+};
+
+const dispatch = (name: string, args: unknown): Promise<WorkspaceToolResult> =>
+  dispatchWith({}, name, args);
+
+describe("MCP tool dispatch", () => {
+  it("list_paywalls lists the project directories (no input)", async () => {
+    const result = await dispatch("list_paywalls", {});
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("trial (/paywalls/trial)");
+    expect(result.output).toContain("onboarding (/paywalls/onboarding)");
+  });
+
+  it("get_paywall returns the cleaned document JSON with node ids", async () => {
+    const result = await dispatch("get_paywall", { slug: "trial" });
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain('"id": "root1"');
+    expect(result.output).toContain('"type": "screen"');
+  });
+
+  it("edit_paywall validates then applies, reporting the new version", async () => {
+    const result = await dispatch("edit_paywall", {
+      slug: "trial",
+      edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
+    });
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("version 9");
+  });
+
+  it("edit_paywall returns structured validation errors verbatim (no apply)", async () => {
+    const editDocument = () => {
+      throw new Error("editDocument must not be called on a validation failure");
+    };
+    const result = await dispatchWith(
+      { workspace: fakeWorkspace({ editDocument: editDocument as never }) },
+      "edit_paywall",
+      // Unknown parent id → validation rejects before any submit.
+      { slug: "trial", edits: [{ op: "insert", parentId: "ghost", node: { type: "view" } }] },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("edit_paywall rejected");
+    expect(result.output).toContain("ghost");
+  });
+
+  it("write_component rejects broken source with diagnostics (commits nothing)", async () => {
+    const writeComponentSource = () => {
+      throw new Error("writeComponentSource must not be called on a compile error");
+    };
+    const result = await dispatchWith(
+      {
+        workspace: fakeWorkspace({ writeComponentSource: writeComponentSource as never }),
+        compiler: fakeCompiler({
+          compileAndExtract: () =>
+            Effect.succeed({
+              status: "error" as const,
+              phase: "compile" as const,
+              diagnostics: [{ message: "Unexpected token", line: 3 }],
+            }),
+        }),
+      },
+      "write_component",
+      { slug: "trial", path: "components/hero.tsx", source: "export default (=> {" },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("write_component rejected");
+    expect(result.output).toContain("Unexpected token");
+  });
+
+  it("write_component commits a clean component and records its manifest", async () => {
+    const recorded: unknown[] = [];
+    const manifest = {
+      manifestVersion: 2 as const,
+      props: {},
+      actions: {},
+      slot: false,
+      previewStates: ["default"],
+      hostData: [],
+    };
+    const result = await dispatchWith(
+      {
+        manifestCache: fakeManifestCache({
+          record: ((input: unknown) => Effect.sync(() => void recorded.push(input))) as never,
+        }),
+        compiler: fakeCompiler({
+          compileAndExtract: () => Effect.succeed({ status: "ready" as const, manifest }),
+        }),
+      },
+      "write_component",
+      { slug: "trial", path: "components/hero.tsx", source: "export default () => null;" },
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("version 9");
+    expect(result.output).toContain("manifest recorded");
+    expect(recorded).toHaveLength(1);
+  });
+
+  it("folds invalid arguments into an isError result (never throws)", async () => {
+    const result = await dispatch("get_paywall", {});
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("get_paywall: invalid arguments");
+  });
+
+  it("folds an edit rejection into an isError result with a CLEAN message (no Cause/_tag leak)", async () => {
+    const result = await dispatchWith(
+      {
+        workspace: fakeWorkspace({
+          editDocument: () =>
+            Effect.fail({
+              _tag: "WorkspaceWriteConflictError",
+              message: "lost the concurrency race",
+            }) as never,
+        }),
+      },
+      "edit_paywall",
+      { slug: "trial", edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }] },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("edit_paywall rejected: lost the concurrency race");
+    expect(result.output).not.toContain("Cause(");
+    expect(result.output).not.toContain("_tag");
+  });
+});
diff --git a/apps/backend/src/mcp/protocol.test.ts b/apps/backend/src/mcp/protocol.test.ts
new file mode 100644
index 000000000..a1f970891
--- /dev/null
+++ b/apps/backend/src/mcp/protocol.test.ts
@@ -0,0 +1,148 @@
+/**
+ * Unit tests for the hand-rolled MCP JSON-RPC handler. The tool executor is
+ * mocked (a context-free `callTool`), so these cover method dispatch, protocol
+ * negotiation, the tools/list shape, and the tool-error → `isError` mapping
+ * without a worker or the workspace service.
+ */
+import { Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  handleMcpMessage,
+  parseJsonRpcMessage,
+  JsonRpcErrorCode,
+  SUPPORTED_PROTOCOL_VERSIONS,
+  type CallTool,
+  type JsonRpcMessage,
+  type JsonRpcResponse,
+} from "./protocol.ts";
+import type { WorkspaceToolResult } from "../ai/workspace-tools.ts";
+
+/** A canned tool executor: echoes the name/args, or fails as an `isError` result. */
+const cannedCallTool =
+  (result: WorkspaceToolResult): CallTool =>
+  () =>
+    Effect.succeed(result);
+
+/** Run the handler with a canned executor and no real context (protocol-only). */
+const run = (
+  message: JsonRpcMessage,
+  callTool: CallTool = cannedCallTool({ output: "ok", isError: false }),
+): Promise<JsonRpcResponse | null> =>
+  Effect.runPromise(handleMcpMessage(message, callTool) as Effect.Effect<JsonRpcResponse | null>);
+
+const msg = (method: string, params?: Record<string, unknown>, id: string | number = 1): JsonRpcMessage => ({
+  jsonrpc: "2.0",
+  method,
+  id,
+  params,
+});
+
+describe("parseJsonRpcMessage", () => {
+  it("accepts a valid request", () => {
+    const parsed = parseJsonRpcMessage({ jsonrpc: "2.0", method: "ping", id: 1 });
+    expect(parsed.ok).toBe(true);
+  });
+
+  it("rejects a missing jsonrpc version", () => {
+    const parsed = parseJsonRpcMessage({ method: "ping", id: 1 });
+    expect(parsed.ok).toBe(false);
+  });
+
+  it("rejects a missing method", () => {
+    const parsed = parseJsonRpcMessage({ jsonrpc: "2.0", id: 1 });
+    expect(parsed.ok).toBe(false);
+  });
+
+  it("rejects a batch (array)", () => {
+    const parsed = parseJsonRpcMessage([{ jsonrpc: "2.0", method: "ping", id: 1 }]);
+    expect(parsed.ok).toBe(false);
+  });
+});
+
+describe("initialize", () => {
+  it("negotiates the requested supported version and advertises tools", async () => {
+    for (const version of SUPPORTED_PROTOCOL_VERSIONS) {
+      const response = await run(msg("initialize", { protocolVersion: version }));
+      expect(response && "result" in response).toBe(true);
+      const result = (response as { result: Record<string, unknown> }).result;
+      expect(result.protocolVersion).toBe(version);
+      expect(result.capabilities).toEqual({ tools: {} });
+      expect((result.serverInfo as { name: string }).name).toBe("voidhash-paywall-workspace");
+    }
+  });
+
+  it("falls back to the latest version for an unsupported request", async () => {
+    const response = await run(msg("initialize", { protocolVersion: "1999-01-01" }));
+    const result = (response as { result: Record<string, unknown> }).result;
+    expect(result.protocolVersion).toBe(SUPPORTED_PROTOCOL_VERSIONS[0]);
+  });
+});
+
+describe("notifications/initialized", () => {
+  it("is accepted with no response (route → 202)", async () => {
+    const response = await run({ jsonrpc: "2.0", method: "notifications/initialized" });
+    expect(response).toBeNull();
+  });
+});
+
+describe("ping", () => {
+  it("returns an empty result", async () => {
+    const response = await run(msg("ping"));
+    expect((response as { result: unknown }).result).toEqual({});
+  });
+});
+
+describe("tools/list", () => {
+  it("returns the tool descriptors with JSON Schema inputs", async () => {
+    const response = await run(msg("tools/list"));
+    const result = (response as { result: { tools: Array<Record<string, unknown>> } }).result;
+    expect(result.tools.length).toBe(8);
+    const listPaywalls = result.tools[0];
+    expect(listPaywalls.name).toBe("list_paywalls");
+    expect((listPaywalls.inputSchema as { type: string }).type).toBe("object");
+  });
+});
+
+describe("tools/call", () => {
+  it("maps a successful tool run to text content (isError false)", async () => {
+    const response = await run(
+      msg("tools/call", { name: "read_file", arguments: { path: "/x" } }),
+      cannedCallTool({ output: "FILE", isError: false }),
+    );
+    const result = (response as { result: Record<string, unknown> }).result;
+    expect(result.isError).toBe(false);
+    expect(result.content).toEqual([{ type: "text", text: "FILE" }]);
+  });
+
+  it("maps a tool failure to isError content, NOT a JSON-RPC error", async () => {
+    const response = await run(
+      msg("tools/call", { name: "apply_paywall", arguments: {} }),
+      cannedCallTool({ output: "apply_paywall rejected: bad", isError: true }),
+    );
+    expect(response && "result" in response).toBe(true);
+    const result = (response as { result: Record<string, unknown> }).result;
+    expect(result.isError).toBe(true);
+    expect(result.content).toEqual([{ type: "text", text: "apply_paywall rejected: bad" }]);
+  });
+
+  it("rejects a missing tool name with InvalidParams", async () => {
+    const response = await run(msg("tools/call", { arguments: {} }));
+    const error = (response as { error: { code: number } }).error;
+    expect(error.code).toBe(JsonRpcErrorCode.InvalidParams);
+  });
+});
+
+describe("unknown method", () => {
+  it("returns method-not-found", async () => {
+    const response = await run(msg("resources/list"));
+    const error = (response as { error: { code: number; message: string } }).error;
+    expect(error.code).toBe(JsonRpcErrorCode.MethodNotFound);
+    expect(error.message).toContain("resources/list");
+  });
+
+  it("accepts an unknown notification silently", async () => {
+    const response = await run({ jsonrpc: "2.0", method: "notifications/cancelled" });
+    expect(response).toBeNull();
+  });
+});
diff --git a/apps/backend/src/mcp/protocol.ts b/apps/backend/src/mcp/protocol.ts
new file mode 100644
index 000000000..01ba52838
--- /dev/null
+++ b/apps/backend/src/mcp/protocol.ts
@@ -0,0 +1,196 @@
+/**
+ * Minimal, hand-rolled MCP JSON-RPC 2.0 handler for the STATELESS streamable-HTTP
+ * transport. No SDK dependency: a stateless server answers each `POST /api/mcp`
+ * with a single JSON response (or 202 for a notification), which is spec-compliant
+ * and exactly what Claude Code's streamable-HTTP client accepts.
+ *
+ * This module is transport- and auth-free: {@link handleMcpMessage} takes an
+ * already-parsed JSON-RPC message plus a `callTool` executor (the route supplies
+ * one bound to the authenticated project scope) and returns either a JSON-RPC
+ * response object to serialize, or `null` for an accepted notification (the route
+ * maps that to HTTP 202). Method dispatch, protocol-version negotiation, and the
+ * error taxonomy live here so they can be unit-tested without a worker.
+ *
+ * Implemented methods: `initialize`, `notifications/initialized`, `tools/list`,
+ * `tools/call`, `ping`. Unknown methods → JSON-RPC method-not-found. Tool errors
+ * are `isError: true` content, never JSON-RPC errors (per MCP). Resources are not
+ * offered this increment (tools cover the workflow).
+ */
+import { Effect } from "effect";
+
+import { mcpToolDescriptors } from "./tool-manifest.ts";
+import * as WorkspaceTools from "../ai/workspace-tools.ts";
+
+/** Protocol versions we speak, newest first (used to pick the negotiated version). */
+export const SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26"] as const;
+const LATEST_PROTOCOL_VERSION = SUPPORTED_PROTOCOL_VERSIONS[0];
+
+/** Server identity advertised in the `initialize` result. */
+const SERVER_INFO = { name: "voidhash-paywall-workspace", version: "1.0.0" } as const;
+
+/** Standard JSON-RPC 2.0 error codes we emit. */
+export const JsonRpcErrorCode = {
+  ParseError: -32700,
+  InvalidRequest: -32600,
+  MethodNotFound: -32601,
+  InvalidParams: -32602,
+  InternalError: -32603,
+} as const;
+
+/** A JSON-RPC id (string or number, or null on a pre-id parse error). */
+export type JsonRpcId = string | number | null;
+
+/** A parsed JSON-RPC request/notification (validated by {@link parseJsonRpcMessage}). */
+export interface JsonRpcMessage {
+  readonly jsonrpc: "2.0";
+  readonly method: string;
+  readonly id?: JsonRpcId;
+  readonly params?: Record<string, unknown>;
+}
+
+/** A JSON-RPC success/error response object to serialize back to the client. */
+export type JsonRpcResponse =
+  | { jsonrpc: "2.0"; id: JsonRpcId; result: unknown }
+  | { jsonrpc: "2.0"; id: JsonRpcId; error: { code: number; message: string; data?: unknown } };
+
+/** Executes a validated tool call against the authenticated scope. */
+export type CallTool = (
+  name: string,
+  args: unknown,
+) => Effect.Effect<WorkspaceTools.WorkspaceToolResult, never, WorkspaceTools.WorkspaceToolDeps>;
+
+const success = (id: JsonRpcId, result: unknown): JsonRpcResponse => ({
+  jsonrpc: "2.0",
+  id,
+  result,
+});
+
+const failure = (
+  id: JsonRpcId,
+  code: number,
+  message: string,
+  data?: unknown,
+): JsonRpcResponse => ({ jsonrpc: "2.0", id, error: data === undefined ? { code, message } : { code, message, data } });
+
+/**
+ * Validate an already-JSON-parsed value as a JSON-RPC 2.0 message. Returns the
+ * narrowed message or an `InvalidRequest` reason (missing `jsonrpc`/`method`).
+ * A notification is a message with no `id`.
+ */
+export const parseJsonRpcMessage = (
+  value: unknown,
+): { ok: true; message: JsonRpcMessage } | { ok: false; reason: string } => {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    // Batches (arrays) are not supported by this stateless single-response server.
+    return { ok: false, reason: "Expected a single JSON-RPC 2.0 request object" };
+  }
+  const record = value as Record<string, unknown>;
+  if (record.jsonrpc !== "2.0") {
+    return { ok: false, reason: 'Missing or invalid "jsonrpc": expected "2.0"' };
+  }
+  if (typeof record.method !== "string") {
+    return { ok: false, reason: 'Missing or invalid "method"' };
+  }
+  const id = record.id;
+  if (id !== undefined && id !== null && typeof id !== "string" && typeof id !== "number") {
+    return { ok: false, reason: 'Invalid "id": expected string, number, or null' };
+  }
+  const params =
+    record.params !== undefined && typeof record.params === "object" && record.params !== null
+      ? (record.params as Record<string, unknown>)
+      : undefined;
+  return {
+    ok: true,
+    message: { jsonrpc: "2.0", method: record.method, id: id as JsonRpcId, params },
+  };
+};
+
+/** Negotiate a protocol version: echo a supported one, else offer our latest. */
+const negotiateProtocolVersion = (requested: unknown): string =>
+  typeof requested === "string" &&
+  (SUPPORTED_PROTOCOL_VERSIONS as ReadonlyArray<string>).includes(requested)
+    ? requested
+    : LATEST_PROTOCOL_VERSION;
+
+/** The `initialize` result: negotiated version, tool capability, server identity. */
+const initializeResult = (params: Record<string, unknown> | undefined) => ({
+  protocolVersion: negotiateProtocolVersion(params?.protocolVersion),
+  capabilities: { tools: {} },
+  serverInfo: SERVER_INFO,
+});
+
+/** The `tools/list` result: the advertised tool descriptors. */
+const toolsListResult = () => ({ tools: mcpToolDescriptors() });
+
+/**
+ * Handle a `tools/call`: read `name` + `arguments`, run the executor, and shape
+ * the result as MCP content. A tool failure is `isError: true` content (never a
+ * JSON-RPC error). A missing/invalid `name` is `InvalidParams` (a protocol
+ * error, not a tool error). The executor never fails — the shared core folds
+ * workspace failures into `{ isError }` — so this always resolves to a response.
+ */
+const handleToolsCall = (
+  id: JsonRpcId,
+  params: Record<string, unknown> | undefined,
+  callTool: CallTool,
+): Effect.Effect<JsonRpcResponse, never, WorkspaceTools.WorkspaceToolDeps> => {
+  const name = params?.name;
+  if (typeof name !== "string" || name.length === 0) {
+    return Effect.succeed(
+      failure(id, JsonRpcErrorCode.InvalidParams, 'tools/call requires a string "name"'),
+    );
+  }
+  const args = params?.arguments ?? {};
+  return callTool(name, args).pipe(
+    Effect.map((result) =>
+      success(id, {
+        content: [{ type: "text", text: result.output }],
+        isError: result.isError,
+      }),
+    ),
+  );
+};
+
+/**
+ * Dispatch one parsed JSON-RPC message. Returns a {@link JsonRpcResponse} to
+ * serialize, or `null` for an accepted notification (`notifications/*`, id-less)
+ * — the route answers those with HTTP 202 and an empty body.
+ *
+ * `callTool` runs a tool against the authenticated project scope; it (and this
+ * effect) require the workspace/chat/auth context, provided by the route.
+ */
+export const handleMcpMessage = (
+  message: JsonRpcMessage,
+  callTool: CallTool,
+): Effect.Effect<JsonRpcResponse | null, never, WorkspaceTools.WorkspaceToolDeps> => {
+  const id: JsonRpcId = message.id ?? null;
+
+  switch (message.method) {
+    case "initialize":
+      return Effect.succeed(success(id, initializeResult(message.params)));
+
+    case "notifications/initialized":
+      // Accepted notification: no response body (the route sends 202).
+      return Effect.succeed(null);
+
+    case "ping":
+      // MCP ping → empty result.
+      return Effect.succeed(success(id, {}));
+
+    case "tools/list":
+      return Effect.succeed(success(id, toolsListResult()));
+
+    case "tools/call":
+      return handleToolsCall(id, message.params, callTool);
+
+    default: {
+      // Any other `notifications/*` is an id-less message we accept silently.
+      if (message.method.startsWith("notifications/") && message.id === undefined) {
+        return Effect.succeed(null);
+      }
+      return Effect.succeed(
+        failure(id, JsonRpcErrorCode.MethodNotFound, `Method not found: ${message.method}`),
+      );
+    }
+  }
+};
diff --git a/apps/backend/src/mcp/tool-manifest.test.ts b/apps/backend/src/mcp/tool-manifest.test.ts
new file mode 100644
index 000000000..b616a66fd
--- /dev/null
+++ b/apps/backend/src/mcp/tool-manifest.test.ts
@@ -0,0 +1,85 @@
+/**
+ * Contract test for the stateless MCP tool manifest: the advertised tool set,
+ * each descriptor's JSON Schema shape, and that a validated tool's dispatcher
+ * folds an invalid-argument call into an `isError` tool result (never a throw).
+ */
+import { Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import { findMcpTool, MCP_TOOLS, mcpToolDescriptors } from "./tool-manifest.ts";
+
+describe("MCP tool manifest", () => {
+  it("advertises the document-first tool set", () => {
+    const names = mcpToolDescriptors().map((d) => d.name);
+    expect(names).toEqual([
+      "list_paywalls",
+      "get_paywall",
+      "get_components",
+      "read_component",
+      "edit_paywall",
+      "write_component",
+      "rename_component",
+      "delete_component",
+    ]);
+  });
+
+  it("no longer advertises the deleted stateless-build / bash tools", () => {
+    const names = mcpToolDescriptors().map((d) => d.name);
+    for (const removed of ["bash", "read_file", "get_diagnostics", "validate_paywall", "apply_paywall"]) {
+      expect(names).not.toContain(removed);
+    }
+  });
+
+  it("every descriptor has an object JSON Schema with a description", () => {
+    for (const { descriptor } of MCP_TOOLS) {
+      expect(descriptor.description.length).toBeGreaterThan(0);
+      expect(descriptor.inputSchema.type).toBe("object");
+    }
+  });
+
+  it("list_paywalls takes no input (empty object schema)", () => {
+    const tool = findMcpTool("list_paywalls");
+    expect(tool?.descriptor.inputSchema.properties).toEqual({});
+  });
+
+  it("get_paywall requires a slug and allows nodeId + depth", () => {
+    const schema = findMcpTool("get_paywall")!.descriptor.inputSchema;
+    expect((schema.required as string[]).sort()).toEqual(["slug"]);
+    const props = schema.properties as Record<string, unknown>;
+    expect(props).toHaveProperty("nodeId");
+    expect(props).toHaveProperty("depth");
+  });
+
+  it("edit_paywall requires a slug + a non-empty edits array", () => {
+    const schema = findMcpTool("edit_paywall")!.descriptor.inputSchema;
+    const required = (schema.required as string[] | undefined) ?? [];
+    expect(required).toContain("slug");
+    expect(required).toContain("edits");
+    const edits = (schema.properties as Record<string, { type?: string }>).edits;
+    expect(edits.type).toBe("array");
+  });
+
+  it("write_component requires slug + path + source", () => {
+    const schema = findMcpTool("write_component")!.descriptor.inputSchema;
+    const required = ((schema.required as string[] | undefined) ?? []).sort();
+    expect(required).toEqual(["path", "slug", "source"]);
+  });
+
+  it("rename_component requires slug + fromPath + toPath", () => {
+    const schema = findMcpTool("rename_component")!.descriptor.inputSchema;
+    const required = ((schema.required as string[] | undefined) ?? []).sort();
+    expect(required).toEqual(["fromPath", "slug", "toPath"]);
+  });
+
+  it("a validated tool folds invalid arguments into an isError result (no throw)", async () => {
+    const tool = findMcpTool("edit_paywall")!;
+    const result = await Effect.runPromise(
+      // Missing required `edits` — the dispatcher validates and folds the failure.
+      tool.dispatch({ projectId: "proj_1" }, { slug: "trial" }) as Effect.Effect<
+        { output: string; isError: boolean }
+      >,
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("invalid arguments");
+  });
+});
diff --git a/apps/backend/src/mcp/tool-manifest.ts b/apps/backend/src/mcp/tool-manifest.ts
new file mode 100644
index 000000000..ba6b9b560
--- /dev/null
+++ b/apps/backend/src/mcp/tool-manifest.ts
@@ -0,0 +1,222 @@
+/**
+ * The MCP tool manifest: the JSON-Schema-described tools advertised over
+ * `tools/list` and dispatched over `tools/call`, plus the mapping from a tool
+ * name to the stateless workspace-tool core ({@link WorkspaceTools}).
+ *
+ * MCP is STATELESS and DOCUMENT-FIRST now — there is no fork, no `paywall.tsx`,
+ * no whole-target overwrite. Composition is read as cleaned document JSON and
+ * edited with mimic DOCUMENT ops (`edit_paywall`); code components are read and
+ * managed by their canonical `components/<name>.tsx` path. The tool set:
+ * `list_paywalls`, `get_paywall`, `get_components`, `read_component`,
+ * `edit_paywall`, `write_component`, `rename_component`, `delete_component`.
+ *
+ * **Schema alignment**: each validated tool's `inputSchema` is derived at module
+ * load from the SAME zod schema its dispatcher parses with, via `z.toJSONSchema`
+ * (zod 4, native). Deriving — rather than hand-writing — means the JSON Schema an
+ * MCP client validates against can never drift from the zod schema the executor
+ * parses with; the contract test (`mcp/tool-manifest.test.ts`) round-trips valid
+ * + invalid samples through both to prove structural agreement.
+ */
+import { documentEditSchema } from "@voidhash/ai-shared";
+import { Effect } from "effect";
+import { z } from "zod";
+
+import * as WorkspaceTools from "../ai/workspace-tools.ts";
+
+/** A JSON Schema object (the `inputSchema` advertised for a tool). */
+export type JsonSchema = Record<string, unknown>;
+
+/** The description of one advertised MCP tool. */
+export interface McpToolDescriptor {
+  readonly name: string;
+  readonly description: string;
+  readonly inputSchema: JsonSchema;
+}
+
+/**
+ * One MCP tool: its advertised descriptor + a dispatcher that validates the raw
+ * arguments with the aligned zod schema and runs the stateless workspace-tool
+ * core. `dispatch` never fails (`E = never`) — the core folds workspace failures
+ * into a `{ isError: true }` result; an invalid-arguments failure is likewise
+ * folded into a tool result (MCP maps a bad-input tool call to `isError`, not a
+ * JSON-RPC error).
+ */
+export interface McpTool {
+  readonly descriptor: McpToolDescriptor;
+  readonly dispatch: (
+    scope: WorkspaceTools.WorkspaceToolScope,
+    args: unknown,
+  ) => Effect.Effect<WorkspaceTools.WorkspaceToolResult, never, WorkspaceTools.WorkspaceToolDeps>;
+}
+
+/** JSON Schema for a tool with no input (`list_paywalls`). */
+const EMPTY_INPUT_SCHEMA: JsonSchema = {
+  $schema: "https://json-schema.org/draft/2020-12/schema",
+  type: "object",
+  properties: {},
+  additionalProperties: false,
+};
+
+/**
+ * MCP tool input schemas. These are MCP-specific but share the document-edit
+ * vocabulary (`documentEditSchema`) with the browser designer tools in
+ * `ai-shared`, so a batch validates against ONE definition on both surfaces.
+ */
+const mcpToolSchemas = {
+  get_paywall: z.object({
+    slug: z.string().describe("Slug of the paywall to read (from list_paywalls)."),
+    nodeId: z
+      .string()
+      .optional()
+      .describe(
+        "Optional node id to root the returned tree at (defaults to the whole document). Use to zoom into a subtree; ids come from a prior get_paywall.",
+      ),
+    depth: z
+      .number()
+      .int()
+      .optional()
+      .describe(
+        "Optional max depth from the root. Nodes past the limit render as stubs `{ id, type, name?, childCount }` you expand with a follow-up get_paywall(nodeId).",
+      ),
+  }),
+  get_components: z.object({
+    slug: z.string().describe("Slug of the paywall whose placeable components to list."),
+  }),
+  read_component: z.object({
+    slug: z.string().describe("Slug of the paywall the component belongs to."),
+    path: z
+      .string()
+      .describe("Canonical document-relative path of a LOCAL component (`components/<name>.tsx`)."),
+  }),
+  edit_paywall: z.object({
+    slug: z.string().describe("Slug of the paywall to edit."),
+    edits: z
+      .array(documentEditSchema)
+      .min(1)
+      .describe(
+        "Ordered batch of document edits, applied ATOMICALLY (all-or-nothing) against the LIVE document. Returns minted ids for inserts, or per-edit structured errors naming the offending node/field/value. Setting any background/border/shadow (or path fill/stroke) style field automatically sets the group's `*Enabled` flag to true; set it to `false` explicitly to hide the group non-destructively.",
+      ),
+  }),
+  write_component: z.object({
+    slug: z.string().describe("Slug of the paywall to write the component into."),
+    path: z
+      .string()
+      .describe(
+        "Canonical document-relative path (`components/<name>.tsx`). Writing a path that does not exist yet CREATES the component (its path IS its identity).",
+      ),
+    source: z.string().describe("Full TSX component source."),
+  }),
+  rename_component: z.object({
+    slug: z.string().describe("Slug of the paywall the component belongs to."),
+    fromPath: z.string().describe("Existing component path (`components/<name>.tsx`)."),
+    toPath: z
+      .string()
+      .describe("New component path. Instances referencing the old path are re-pointed automatically."),
+  }),
+  delete_component: z.object({
+    slug: z.string().describe("Slug of the paywall the component belongs to."),
+    path: z.string().describe("Component path to delete (`components/<name>.tsx`)."),
+  }),
+} as const;
+
+/**
+ * Build a tool that validates its arguments with `schema`, then runs `run` with
+ * the parsed input. A zod parse failure is folded into an `isError` tool result
+ * (never a JSON-RPC error), matching the shared core's fold-don't-throw contract.
+ */
+const validatedTool = <Input>(
+  name: string,
+  description: string,
+  schema: z.ZodType<Input>,
+  run: (
+    scope: WorkspaceTools.WorkspaceToolScope,
+    input: Input,
+  ) => Effect.Effect<WorkspaceTools.WorkspaceToolResult, never, WorkspaceTools.WorkspaceToolDeps>,
+): McpTool => ({
+  descriptor: {
+    name,
+    description,
+    inputSchema: z.toJSONSchema(schema) as JsonSchema,
+  },
+  dispatch: (scope, args) => {
+    const parsed = schema.safeParse(args);
+    if (!parsed.success) {
+      const issues = parsed.error.issues
+        .map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`)
+        .join("; ");
+      return Effect.succeed({
+        output: `${name}: invalid arguments — ${issues}`,
+        isError: true,
+      });
+    }
+    return run(scope, parsed.data);
+  },
+});
+
+/**
+ * The MCP tools, in advertised order: discovery (`list_paywalls`), read
+ * (`get_paywall` / `get_components` / `read_component`), then the write surface
+ * (`edit_paywall` for composition, `write_component` / `rename_component` /
+ * `delete_component` for code components).
+ */
+export const MCP_TOOLS: ReadonlyArray<McpTool> = [
+  {
+    descriptor: {
+      name: "list_paywalls",
+      description:
+        "List every paywall in the project as a directory (slug + workspace path). Start here to discover what to read or edit; then use get_paywall to read a paywall's document and get_components to see what you can place.",
+      inputSchema: EMPTY_INPUT_SCHEMA,
+    },
+    dispatch: (scope) => WorkspaceTools.listPaywalls(scope),
+  },
+  validatedTool(
+    "get_paywall",
+    "Read a paywall's LIVE document as cleaned JSON: a nested tree of `{ id, type, name?, ...data, children }` nodes with schema-default fields stripped. Every node has a stable `id` you address in edit_paywall. Pass `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes come back as stubs you can expand). `codeComponent` definitions come back with their `path` and a `sourceLength` only — the TSX source is NOT inlined; read it with read_component. Call this before editing to learn the current structure and ids.",
+    mcpToolSchemas.get_paywall,
+    WorkspaceTools.getPaywall,
+  ),
+  validatedTool(
+    "get_components",
+    "List every component you can place in a paywall: CATALOG components (deployed, shared across the project) AND the paywall's LOCAL code components. Each entry carries its slug/path, version, and manifest (props schema, action list, preview states) — everything you need to insert a `component` node and bind its props/actions. A local component with no compiled manifest yet is listed with a note; read_component to see its source.",
+    mcpToolSchemas.get_components,
+    WorkspaceTools.getComponents,
+  ),
+  validatedTool(
+    "read_component",
+    "Read a LOCAL code component's TSX source by its `components/<name>.tsx` path. Use get_components first to discover paths.",
+    mcpToolSchemas.read_component,
+    WorkspaceTools.readComponent,
+  ),
+  validatedTool(
+    "edit_paywall",
+    "Apply an ATOMIC batch of edits to a paywall's LIVE document (all-or-nothing). Ops: `insert` (add a subtree under a parent at an index — ids are engine-minted and RETURNED so you can address the new nodes next), `update` (partial data change; `set.style` merges per style field, other objects merge per-field, arrays/scalars replace wholesale), `move` (reparent; cycles and illegal containment are rejected), `remove` (delete a subtree), `replaceChildren` (swap a node's whole child list). Address nodes by the ids from get_paywall. Setting any background/border/shadow (or path fill/stroke) style field automatically sets the group's `*Enabled` flag to true; set it to `false` explicitly to hide the group non-destructively. Invalid fields/values are rejected with per-edit errors naming the offending node, the allowed fields (with a did-you-mean), and the allowed values — read them and correct your edit, then retry. On success the minted ids are returned keyed by op index.",
+    mcpToolSchemas.edit_paywall,
+    WorkspaceTools.editPaywall,
+  ),
+  validatedTool(
+    "write_component",
+    "Create-or-replace a LOCAL code component at `components/<name>.tsx` (its path is its identity). The source is COMPILED server-side first: on compile/runtime diagnostics nothing is committed and the diagnostics are returned — fix them and retry. On success the component is committed and becomes placeable via a `component` node (insert one with edit_paywall). Use for anything that is genuinely code (custom logic/layout), not for plain composition — compose visual structure with edit_paywall.",
+    mcpToolSchemas.write_component,
+    WorkspaceTools.writeComponent,
+  ),
+  validatedTool(
+    "rename_component",
+    "Rename a local component from one `components/<name>.tsx` path to another. Instances referencing the old path are re-pointed automatically (rename cascade).",
+    mcpToolSchemas.rename_component,
+    WorkspaceTools.renameComponent,
+  ),
+  validatedTool(
+    "delete_component",
+    "Delete a local component by path. Existing instances of it degrade to placeholders (they are not cascade-deleted), so replace or remove them with edit_paywall afterward.",
+    mcpToolSchemas.delete_component,
+    WorkspaceTools.deleteComponent,
+  ),
+];
+
+/** The advertised tool descriptors for `tools/list`. */
+export const mcpToolDescriptors = (): ReadonlyArray<McpToolDescriptor> =>
+  MCP_TOOLS.map((tool) => tool.descriptor);
+
+/** Look up a tool by name for `tools/call`; `undefined` for an unknown tool. */
+export const findMcpTool = (name: string): McpTool | undefined =>
+  MCP_TOOLS.find((tool) => tool.descriptor.name === name);
diff --git a/apps/backend/src/routes/ai/chat.ts b/apps/backend/src/routes/ai/chat.ts
new file mode 100644
index 000000000..80e965581
--- /dev/null
+++ b/apps/backend/src/routes/ai/chat.ts
@@ -0,0 +1,118 @@
+/**
+ * Voidhash AI streaming chat endpoint — `POST /api/ai/chat`.
+ *
+ * The studio surfaces (currently only the paywall designer) POST the running
+ * UI-message history plus the surface + project scope. The handler authenticates
+ * the WorkOS session, verifies the caller is a member of the target project
+ * (anti-spoof: the project must appear in the session, never trusted from the
+ * body alone), then streams the model's UI-message response straight back to the
+ * client via {@link VoidhashAiService}. Tool calls are executed on the server
+ * (the tools read and write the paywall workspace directly); the client only
+ * renders the streamed results.
+ *
+ * - Unparseable / non-designer body → 400.
+ * - Unauthenticated → 401.
+ * - Caller not a member of `projectId` → 403.
+ */
+import { type ChatRequestBody, chatRequestBodySchema } from "@voidhash/ai-shared";
+import { Db } from "@voidhash/db";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import type { AuthTokenVerifier } from "@voidhash/core/services/auth/AuthTokenVerifier";
+import { LocalUserSessionService } from "@voidhash/core/services/auth/LocalUserSessionService";
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import { Cause, Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+
+import { resolveWorkosSession } from "../../AuthSessionResolver.ts";
+import { VoidhashAiService } from "../../ai/VoidhashAiService.ts";
+
+/**
+ * Decodes the parsed JSON body against the shared {@link chatRequestBodySchema}
+ * wire contract (the same schema the studio transport builds its body to satisfy),
+ * or returns null. Anti-spoof authz is enforced separately by the caller AFTER
+ * decoding — this only validates shape.
+ */
+const parseChatBody = (value: unknown): ChatRequestBody | null => {
+  const result = chatRequestBodySchema.safeParse(value);
+  return result.success ? result.data : null;
+};
+
+const handleChat = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
+  Effect.gen(function* () {
+    const ai = yield* VoidhashAiService;
+    const request = yield* HttpServerRequest.HttpServerRequest;
+
+    const rawBody = yield* request.text;
+    const parsed = yield* Effect.try({
+      catch: () => new Error("Invalid JSON body"),
+      try: () => JSON.parse(rawBody) as unknown,
+    }).pipe(Effect.catch(() => Effect.succeed(null)));
+
+    const body = parseChatBody(parsed);
+    if (!body) {
+      return yield* HttpServerResponse.json({ error: "Invalid request body" }, { status: 400 });
+    }
+
+    const sessionResult = yield* Effect.result(
+      resolveWorkosSession(request.headers, authTokenVerifier),
+    );
+    if (sessionResult._tag === "Failure") {
+      return yield* HttpServerResponse.json({ error: "Not authenticated" }, { status: 401 });
+    }
+    const session = sessionResult.success;
+
+    // Anti-spoof: the project must be one the authenticated user actually has
+    // access to (present in the session), never trusted from the body alone,
+    // and the claimed organization must be the project's owning organization.
+    const project = session.projects.find((p) => p.id === body.projectId);
+    if (!project || project.organizationId !== body.organizationId) {
+      return yield* HttpServerResponse.json({ error: "Access denied" }, { status: 403 });
+    }
+
+    // The server now executes the agent's tools over the workspace/chat services,
+    // which are AuthSession-bound (project-membership authz, chat ownership). The
+    // route resolved the session manually, so provide it as `AuthSession` for the
+    // duration of the streamed turn (the workspace/chat service layers are already
+    // in scope via the route's provideRequest).
+    const response = yield* ai
+      .chat({
+        messages: body.messages,
+        surface: body.surface,
+        projectId: body.projectId,
+        organizationId: body.organizationId,
+        paywallId: body.paywallId,
+        chatId: body.chatId,
+        selectedNodeIds: body.selectedNodeIds,
+      })
+      .pipe(Effect.provideService(AuthSession, session));
+    return HttpServerResponse.fromWeb(response);
+  });
+
+const registerAiChatRoute = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
+  Effect.gen(function* () {
+    const router = yield* HttpRouter.HttpRouter;
+    yield* router.add(
+      "POST",
+      "/api/ai/chat",
+      handleChat(authTokenVerifier).pipe(
+        Effect.catchCause((cause) =>
+          Effect.gen(function* () {
+            yield* Effect.logError(`AI chat error: ${Cause.pretty(cause)}`);
+            return yield* HttpServerResponse.json(
+              { error: "AI chat request failed" },
+              { status: 500 },
+            );
+          }),
+        ),
+      ),
+    );
+  });
+
+/**
+ * Registers `POST /api/ai/chat`. The route resolves `VoidhashAiService`, `Db`,
+ * `Workos` and `LocalUserSessionService` at request time (satisfied via
+ * `HttpRouter.provideRequest` by the caller); token verification is injected as
+ * a provider-neutral capability at build time, mirroring the RPC middlewares.
+ */
+export const AiChatRouteLayer = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
+  Layer.effectDiscard(registerAiChatRoute(authTokenVerifier));
diff --git a/apps/backend/src/routes/event-capture.ts b/apps/backend/src/routes/event-capture.ts
new file mode 100644
index 000000000..d3fc3c312
--- /dev/null
+++ b/apps/backend/src/routes/event-capture.ts
@@ -0,0 +1,177 @@
+/**
+ * HTTP route handlers for the analytics-ingest event-capture endpoints (`/i/*`),
+ * served by the Cloudflare-native backend worker (the former standalone
+ * AnalyticsPipelineWorker was merged into it).
+ *
+ * The capture business logic lives in {@link EventCaptureService} (which
+ * already encapsulates token validation, policy enforcement, route selection,
+ * and queue publication). This file is responsible for HTTP-shape concerns
+ * only: request-id minting, client-IP extraction, response shaping, and error
+ * mapping at the wire boundary.
+ *
+ * Mirrors `internal/apps/event-capture/src/http/routes.ts` line-for-line in
+ * intent; the only deltas are the Cloudflare-native client-IP extraction
+ * (`CF-Connecting-IP`) and the absence of a `/i/ready` route (Cloudflare
+ * Workers don't have a startup-readiness check the way Bun servers do).
+ */
+import {
+  CaptureAcceptedResponse,
+  CaptureDependencyUnavailableError,
+  CaptureInternalServerError,
+  CaptureRateLimitedError,
+  EventCaptureApi,
+} from "@voidhash/api-contracts/event-capture";
+import { EventCaptureService } from "@voidhash/core/services/analyticsIngest/EventCaptureService";
+import { Effect } from "effect";
+import * as HttpEffect from "effect/unstable/http/HttpEffect";
+import * as HttpServerResponse from "effect/unstable/http/HttpServerResponse";
+import * as HttpApiBuilder from "effect/unstable/httpapi/HttpApiBuilder";
+
+/**
+ * Extract the originating client IP from the request headers. Cloudflare
+ * always populates `cf-connecting-ip`; the `x-forwarded-for` fallback only
+ * matters for local `wrangler dev` requests.
+ */
+const extractClientIp = (
+  headers: Readonly<Record<string, string | undefined>>,
+): string | undefined => {
+  const cfIp = headers["cf-connecting-ip"]?.trim();
+  if (cfIp) return cfIp;
+
+  const forwardedFor = headers["x-forwarded-for"]?.split(",")[0]?.trim();
+  return forwardedFor || undefined;
+};
+
+const appendRequestIdHeader = (requestId: string) =>
+  HttpEffect.appendPreResponseHandler((_req, response) =>
+    Effect.succeed(HttpServerResponse.setHeader(response, "x-request-id", requestId)),
+  );
+
+const appendRetryAfterHeader = (retryAfterMs: number) =>
+  HttpEffect.appendPreResponseHandler((_req, response) =>
+    Effect.succeed(
+      HttpServerResponse.setHeader(response, "retry-after", String(Math.ceil(retryAfterMs / 1000))),
+    ),
+  );
+
+export const EventCaptureGroupLive = HttpApiBuilder.group(
+  EventCaptureApi,
+  "event_capture",
+  (handlers) =>
+    Effect.gen(function* () {
+      const captureService = yield* EventCaptureService;
+      return handlers
+        .handle("capture", ({ request, payload }) =>
+          Effect.gen(function* () {
+            const requestId = `req_${crypto.randomUUID()}`;
+            yield* appendRequestIdHeader(requestId);
+
+            const result = yield* captureService
+              .captureEvents({
+                events: [payload],
+                request: {
+                  clientIp: extractClientIp(request.headers),
+                  path: "/i/v1/capture",
+                  receivedAt: new Date(),
+                  sentAt: payload.sent_at,
+                  token: payload.token,
+                  headers: request.headers,
+                  requestId,
+                },
+              })
+              .pipe(
+                Effect.catchTag("CaptureRateLimitedError", (error) =>
+                  Effect.gen(function* () {
+                    if (typeof error.retry_after_ms === "number") {
+                      yield* appendRetryAfterHeader(error.retry_after_ms);
+                    }
+                    return yield* Effect.fail(
+                      new CaptureRateLimitedError({
+                        code: error.code,
+                        error: error.error,
+                      }),
+                    );
+                  }),
+                ),
+                Effect.catchTag("EventCaptureServiceError", () =>
+                  Effect.fail(
+                    new CaptureDependencyUnavailableError({
+                      code: "dependency_unavailable",
+                      error: "capture dependency is unavailable",
+                    }),
+                  ),
+                ),
+                Effect.catchDefect(() =>
+                  Effect.fail(
+                    new CaptureInternalServerError({
+                      code: "internal_error",
+                      error: "internal server error",
+                    }),
+                  ),
+                ),
+              );
+
+            return new CaptureAcceptedResponse({
+              accepted: result.accepted,
+              rejected: result.rejected,
+            });
+          }),
+        )
+        .handle("batch", ({ request, payload }) =>
+          Effect.gen(function* () {
+            const requestId = `req_${crypto.randomUUID()}`;
+            yield* appendRequestIdHeader(requestId);
+
+            const result = yield* captureService
+              .captureEvents({
+                events: payload.events,
+                request: {
+                  clientIp: extractClientIp(request.headers),
+                  path: "/i/v1/batch",
+                  receivedAt: new Date(),
+                  sentAt: payload.sent_at,
+                  token: payload.token,
+                  headers: request.headers,
+                  requestId,
+                },
+              })
+              .pipe(
+                Effect.catchTag("CaptureRateLimitedError", (error) =>
+                  Effect.gen(function* () {
+                    if (typeof error.retry_after_ms === "number") {
+                      yield* appendRetryAfterHeader(error.retry_after_ms);
+                    }
+                    return yield* Effect.fail(
+                      new CaptureRateLimitedError({
+                        code: error.code,
+                        error: error.error,
+                      }),
+                    );
+                  }),
+                ),
+                Effect.catchTag("EventCaptureServiceError", () =>
+                  Effect.fail(
+                    new CaptureDependencyUnavailableError({
+                      code: "dependency_unavailable",
+                      error: "capture dependency is unavailable",
+                    }),
+                  ),
+                ),
+                Effect.catchDefect(() =>
+                  Effect.fail(
+                    new CaptureInternalServerError({
+                      code: "internal_error",
+                      error: "internal server error",
+                    }),
+                  ),
+                ),
+              );
+
+            return new CaptureAcceptedResponse({
+              accepted: result.accepted,
+              rejected: result.rejected,
+            });
+          }),
+        );
+    }),
+);
diff --git a/apps/backend/src/routes/mcp.ts b/apps/backend/src/routes/mcp.ts
new file mode 100644
index 000000000..e02966a2a
--- /dev/null
+++ b/apps/backend/src/routes/mcp.ts
@@ -0,0 +1,225 @@
+/**
+ * Model Context Protocol endpoint — `POST /api/mcp` (streamable HTTP, STATELESS).
+ *
+ * Exposes the paywall workspace to MCP clients (Claude Code, the voidhash CLI)
+ * as JSON-RPC 2.0 `tools/*`: the stateless, document-first workspace tools
+ * (`list_paywalls`, `get_paywall`, `get_components`, `read_component`,
+ * `edit_paywall`, `write_component`, `rename_component`, `delete_component`)
+ * from the shared tool core (`ai/workspace-tools.ts`).
+ *
+ * **Auth (v1 API keys → service authz).** The endpoint authenticates with
+ * `Authorization: Bearer <secret key>`, validated by the SAME
+ * {@link ApiKeyService.validateSecretKey} the v1 API's `x-secret-key` path uses.
+ * A voidhash secret key is already PROJECT-scoped, so the key alone determines
+ * the workspace scope — MCP tools take no `projectId` argument. From the
+ * validated `{ project }` we construct the exact {@link SecretKeySession} the v1
+ * middleware builds for a secret key (a real {@link AuthSession} with that one
+ * project), and provide it for the request. {@link PaywallWorkspaceService} then
+ * runs its normal `PaywallService.getPaywalls(projectId)` project-membership
+ * check against that session — no fake super-session, no authz bypass; the same
+ * seam every v1 secret-key handler already uses.
+ *
+ * **Stateless transport.** Each POST is answered with a single JSON response (or
+ * 202 for a notification). No SSE stream, no session ids, no server-initiated
+ * messages — spec-compliant for a stateless streamable-HTTP server and what
+ * Claude Code's client accepts. `GET`/`DELETE` on the endpoint → 405 (there is
+ * no stream to open and no session to terminate). Malformed JSON → 400; missing
+ * or invalid bearer → 401 with a `WWW-Authenticate` header.
+ *
+ * Resources are not offered this increment (tools cover the workflow) — see the
+ * architecture doc §3.6 follow-ups.
+ */
+import { ApiKeyService, PaywallWorkspaceService } from "@voidhash/core/services";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import type { SecretKeySession } from "@voidhash/rpc";
+import { Cause, Effect, Layer, Result } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+
+import {
+  handleMcpMessage,
+  parseJsonRpcMessage,
+  JsonRpcErrorCode,
+  type CallTool,
+  type JsonRpcResponse,
+} from "../mcp/protocol.ts";
+import { findMcpTool } from "../mcp/tool-manifest.ts";
+import type { WorkspaceToolScope } from "../ai/workspace-tools.ts";
+
+/** `WWW-Authenticate` challenge returned on any 401 (bearer scheme). */
+const WWW_AUTHENTICATE = 'Bearer realm="voidhash-mcp"';
+
+/** A bare JSON-RPC error response (used for pre-dispatch failures with a null id). */
+const jsonRpcErrorResponse = (status: number, code: number, message: string) =>
+  HttpServerResponse.json({ jsonrpc: "2.0", id: null, error: { code, message } }, { status });
+
+/** Extract a `Bearer <token>` credential from the `authorization` header. */
+const bearerToken = (headers: HttpHeaders.Headers): string | undefined => {
+  const raw = HttpHeaders.get(headers, "authorization");
+  const value = raw._tag === "Some" ? raw.value : undefined;
+  if (value === undefined) {
+    return undefined;
+  }
+  const match = /^Bearer\s+(.+)$/i.exec(value.trim());
+  return match ? match[1].trim() : undefined;
+};
+
+/**
+ * Construct the {@link SecretKeySession} for a validated project — byte-for-byte
+ * the shape the v1 `authenticateSecretKey` middleware builds — so the workspace
+ * service's project-membership authz sees a genuine single-project secret-key
+ * session.
+ */
+const secretKeySessionForProject = (project: {
+  id: string;
+  name: string;
+  organizationId: string;
+  slug: string;
+}): SecretKeySession => ({
+  cookie: null,
+  method: "secret-key",
+  name: `${project.name} API Key`,
+  organizations: [],
+  person: null,
+  projects: [
+    {
+      id: project.id,
+      logo: null,
+      name: project.name,
+      organizationId: project.organizationId,
+      permissions: ["project:all"],
+      slug: project.slug,
+    },
+  ],
+  user: null,
+});
+
+/**
+ * The dispatcher passed to {@link handleMcpMessage}: look up the tool by name,
+ * run it against the authenticated `scope` — an unknown tool folds to an
+ * `isError` tool result (MCP maps a bad tool name to a tool error, not a
+ * JSON-RPC error, so a client retry loop can recover).
+ */
+const makeCallTool =
+  (scope: WorkspaceToolScope): CallTool =>
+  (name, args) => {
+    const tool = findMcpTool(name);
+    if (tool === undefined) {
+      return Effect.succeed({ output: `Unknown tool: ${name}`, isError: true });
+    }
+    return tool.dispatch(scope, args);
+  };
+
+/** Handle a single stateless `POST /api/mcp` JSON-RPC message. */
+const handlePost = Effect.gen(function* () {
+  const request = yield* HttpServerRequest.HttpServerRequest;
+
+  // 1. Auth: require a Bearer secret key, validate it via the shared service.
+  const token = bearerToken(request.headers);
+  if (token === undefined) {
+    return HttpServerResponse.setHeader(
+      yield* jsonRpcErrorResponse(
+        401,
+        JsonRpcErrorCode.InvalidRequest,
+        "Missing bearer token",
+      ),
+      "www-authenticate",
+      WWW_AUTHENTICATE,
+    );
+  }
+
+  const apiKeys = yield* ApiKeyService;
+  const validated = yield* Effect.result(apiKeys.validateSecretKey(token));
+  if (Result.isFailure(validated)) {
+    return HttpServerResponse.setHeader(
+      yield* jsonRpcErrorResponse(
+        401,
+        JsonRpcErrorCode.InvalidRequest,
+        "Invalid or expired API key",
+      ),
+      "www-authenticate",
+      WWW_AUTHENTICATE,
+    );
+  }
+  const record = validated.success;
+  const session = secretKeySessionForProject({
+    id: record.project.id,
+    name: record.project.name,
+    organizationId: record.project.organizationId,
+    slug: record.project.slug,
+  });
+  // MCP is stateless and document-first — every tool reads/edits the LIVE
+  // document directly, so the scope is just the authenticated project.
+  const scope: WorkspaceToolScope = { projectId: record.project.id };
+
+  // 2. Parse the JSON body → JSON-RPC message.
+  const rawBody = yield* request.text;
+  const parsedJson = yield* Effect.result(
+    Effect.try({
+      try: () => JSON.parse(rawBody) as unknown,
+      catch: () => new Error("Invalid JSON"),
+    }),
+  );
+  if (Result.isFailure(parsedJson)) {
+    return yield* jsonRpcErrorResponse(
+      400,
+      JsonRpcErrorCode.ParseError,
+      "Parse error: request body is not valid JSON",
+    );
+  }
+
+  const parsed = parseJsonRpcMessage(parsedJson.success);
+  if (!parsed.ok) {
+    return yield* jsonRpcErrorResponse(400, JsonRpcErrorCode.InvalidRequest, parsed.reason);
+  }
+
+  // 3. Dispatch the message against the authenticated project scope. The tool
+  //    effects are AuthSession-bound; provide the constructed secret-key session.
+  const response: JsonRpcResponse | null = yield* handleMcpMessage(
+    parsed.message,
+    makeCallTool(scope),
+  ).pipe(Effect.provideService(AuthSession, session));
+
+  // A notification (no response) is answered with 202 + empty body.
+  if (response === null) {
+    return HttpServerResponse.empty({ status: 202 });
+  }
+  return yield* HttpServerResponse.json(response);
+});
+
+/** `GET`/`DELETE` on the stateless endpoint: no stream, no session → 405. */
+const methodNotAllowed = HttpServerResponse.json(
+  { jsonrpc: "2.0", id: null, error: { code: JsonRpcErrorCode.InvalidRequest, message: "Method Not Allowed" } },
+  { status: 405, headers: { allow: "POST" } },
+);
+
+const registerMcpRoute = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+  yield* router.add(
+    "POST",
+    "/api/mcp",
+    handlePost.pipe(
+      Effect.catchCause((cause) =>
+        Effect.gen(function* () {
+          yield* Effect.logError(`MCP request error: ${Cause.pretty(cause)}`);
+          return yield* jsonRpcErrorResponse(
+            500,
+            JsonRpcErrorCode.InternalError,
+            "Internal error",
+          );
+        }),
+      ),
+    ),
+  );
+  yield* router.add("GET", "/api/mcp", methodNotAllowed);
+  yield* router.add("DELETE", "/api/mcp", methodNotAllowed);
+});
+
+/**
+ * Registers `POST /api/mcp` (+ 405 on GET/DELETE). The request-scoped
+ * requirements — {@link ApiKeyService}, {@link PaywallWorkspaceService}, `Db`
+ * (for key validation) — are satisfied via `HttpRouter.provideRequest` by the
+ * caller (`BackendApp`), mirroring the AI chat and webhook routes. `AuthSession`
+ * is provided in-handler from the validated secret key.
+ */
+export const McpRouteLayer = Layer.effectDiscard(registerMcpRoute);
diff --git a/apps/backend/src/routes/paywall-serving.test.ts b/apps/backend/src/routes/paywall-serving.test.ts
new file mode 100644
index 000000000..498add3a6
--- /dev/null
+++ b/apps/backend/src/routes/paywall-serving.test.ts
@@ -0,0 +1,219 @@
+import {
+  PaywallArtifactStore,
+  PaywallArtifactStoreError,
+  type PaywallArtifactStoreShape,
+} from "@voidhash/core/services";
+import { Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { describe, expect, it } from "vite-plus/test";
+
+import { PaywallServingRouteLayer } from "./paywall-serving.ts";
+
+const CONTENT_HASH = "a".repeat(64);
+
+/** In-memory store with one serving layout entry per declared object. */
+const storeLayer = (objects: Record<string, { body: string; contentType: string | null }>) => {
+  const shape: PaywallArtifactStoreShape = {
+    bucketName: "test-bucket",
+    getObject: (key) =>
+      Effect.sync(() => {
+        const object = objects[key];
+        return object
+          ? { body: new TextEncoder().encode(object.body), contentType: object.contentType }
+          : null;
+      }),
+    head: () => Effect.succeed(null),
+    putObject: () => Effect.void,
+  };
+  return Layer.succeed(PaywallArtifactStore, shape);
+};
+
+const failingStoreLayer = Layer.succeed(PaywallArtifactStore, {
+  bucketName: "test-bucket",
+  getObject: () =>
+    Effect.fail(new PaywallArtifactStoreError({ cause: "boom", message: "store down" })),
+  head: () => Effect.succeed(null),
+  putObject: () => Effect.void,
+});
+
+const serve = (path: string, store: Layer.Layer<PaywallArtifactStore>) =>
+  Effect.gen(function* () {
+    const handler = yield* HttpRouter.toHttpEffect(
+      PaywallServingRouteLayer.pipe(HttpRouter.provideRequest(store)),
+    );
+    const response = yield* handler.pipe(
+      Effect.provideService(
+        HttpServerRequest.HttpServerRequest,
+        HttpServerRequest.fromWeb(new Request(`http://localhost${path}`)),
+      ),
+    );
+    return HttpServerResponse.toWeb(response);
+  }).pipe(Effect.scoped, Effect.runPromise);
+
+/** §5 security headers expected on EVERY /p/* response. */
+const expectSecurityHeaders = (response: Response) => {
+  expect(response.headers.get("content-security-policy")).toBe("sandbox allow-scripts allow-forms");
+  expect(response.headers.get("x-content-type-options")).toBe("nosniff");
+  expect(response.headers.get("referrer-policy")).toBe("no-referrer");
+};
+
+describe("GET /p/:contentHash/* (deploy contract §5)", () => {
+  it("serves a stored artifact with stored Content-Type, immutable caching, and permissive CORS", async () => {
+    const store = storeLayer({
+      [`p/${CONTENT_HASH}/index.html`]: {
+        body: "<html></html>",
+        contentType: "text/html; charset=utf-8",
+      },
+    });
+
+    const response = await serve(`/p/${CONTENT_HASH}/index.html`, store);
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("content-type")).toBe("text/html; charset=utf-8");
+    expect(response.headers.get("cache-control")).toBe("public, max-age=31536000, immutable");
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expect(await response.text()).toBe("<html></html>");
+  });
+
+  it("stamps the CSP sandbox, nosniff, and no-referrer security headers on served artifacts", async () => {
+    const store = storeLayer({
+      [`p/${CONTENT_HASH}/index.html`]: {
+        body: "<html></html>",
+        contentType: "text/html; charset=utf-8",
+      },
+    });
+
+    const response = await serve(`/p/${CONTENT_HASH}/index.html`, store);
+
+    expect(response.status).toBe(200);
+    expectSecurityHeaders(response);
+    // The hardening headers must not displace the §5 CORS + caching headers.
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expect(response.headers.get("cache-control")).toBe("public, max-age=31536000, immutable");
+  });
+
+  it("serves nested asset paths under the contentHash prefix", async () => {
+    const store = storeLayer({
+      [`p/${CONTENT_HASH}/assets/hero-AB12CD.png`]: {
+        body: "png-bytes",
+        contentType: "image/png",
+      },
+    });
+
+    const response = await serve(`/p/${CONTENT_HASH}/assets/hero-AB12CD.png`, store);
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("content-type")).toBe("image/png");
+  });
+
+  it("falls back to application/octet-stream when no Content-Type is stored", async () => {
+    const store = storeLayer({
+      [`p/${CONTENT_HASH}/bundle.js`]: { body: "js", contentType: null },
+    });
+
+    const response = await serve(`/p/${CONTENT_HASH}/bundle.js`, store);
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("content-type")).toBe("application/octet-stream");
+  });
+
+  it("returns 404 JSON for a missing object, with security headers and readable CORS", async () => {
+    const response = await serve(`/p/${CONTENT_HASH}/missing.js`, storeLayer({}));
+
+    expect(response.status).toBe(404);
+    expectSecurityHeaders(response);
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expect(await response.json()).toEqual({ error: "Not found" });
+  });
+
+  it("returns 404 for a non-hex contentHash without touching the store", async () => {
+    const response = await serve("/p/not-a-hash/index.html", failingStoreLayer);
+
+    expect(response.status).toBe(404);
+  });
+
+  it("returns 404 for dot-dot path segments without touching the store", async () => {
+    const response = await serve(`/p/${CONTENT_HASH}/../escape.html`, failingStoreLayer);
+
+    expect(response.status).toBe(404);
+  });
+
+  it("returns 502 when the artifact store fails, with security headers and readable CORS", async () => {
+    const response = await serve(`/p/${CONTENT_HASH}/index.html`, failingStoreLayer);
+
+    expect(response.status).toBe(502);
+    expectSecurityHeaders(response);
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expect(await response.json()).toEqual({ error: "Failed to load paywall artifact" });
+  });
+});
+
+describe("GET /c/:contentHash/* (deploy contract §5.1)", () => {
+  const componentStore = () =>
+    storeLayer({
+      [`c/${CONTENT_HASH}/manifest.json`]: {
+        body: '{"manifestVersion":1}',
+        contentType: "application/json",
+      },
+      [`c/${CONTENT_HASH}/previews/default.json`]: {
+        body: '{"treeVersion":1}',
+        contentType: "application/json",
+      },
+      [`c/${CONTENT_HASH}/runtime.js`]: {
+        body: "export {};",
+        contentType: "text/javascript; charset=utf-8",
+      },
+    });
+
+  it("serves component artifacts with the same §5 success headers", async () => {
+    for (const [path, contentType] of [
+      [`/c/${CONTENT_HASH}/manifest.json`, "application/json"],
+      [`/c/${CONTENT_HASH}/previews/default.json`, "application/json"],
+      [`/c/${CONTENT_HASH}/runtime.js`, "text/javascript; charset=utf-8"],
+    ] as const) {
+      const response = await serve(path, componentStore());
+
+      expect(response.status, path).toBe(200);
+      expect(response.headers.get("content-type")).toBe(contentType);
+      expect(response.headers.get("cache-control")).toBe("public, max-age=31536000, immutable");
+      expect(response.headers.get("access-control-allow-origin")).toBe("*");
+      expectSecurityHeaders(response);
+    }
+  });
+
+  it("does not serve /p/ objects from the /c/ prefix", async () => {
+    const store = storeLayer({
+      [`p/${CONTENT_HASH}/index.html`]: {
+        body: "<html></html>",
+        contentType: "text/html; charset=utf-8",
+      },
+    });
+
+    const response = await serve(`/c/${CONTENT_HASH}/index.html`, store);
+
+    expect(response.status).toBe(404);
+  });
+
+  it("returns a CORS-readable 404 for a missing preview state", async () => {
+    const response = await serve(`/c/${CONTENT_HASH}/previews/trial.json`, componentStore());
+
+    expect(response.status).toBe(404);
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expectSecurityHeaders(response);
+    expect(await response.json()).toEqual({ error: "Not found" });
+  });
+
+  it("returns 404 for a non-hex contentHash without touching the store", async () => {
+    const response = await serve("/c/not-a-hash/manifest.json", failingStoreLayer);
+
+    expect(response.status).toBe(404);
+  });
+
+  it("returns a CORS-readable 502 when the artifact store fails", async () => {
+    const response = await serve(`/c/${CONTENT_HASH}/manifest.json`, failingStoreLayer);
+
+    expect(response.status).toBe(502);
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expectSecurityHeaders(response);
+  });
+});
diff --git a/apps/backend/src/routes/paywall-serving.ts b/apps/backend/src/routes/paywall-serving.ts
new file mode 100644
index 000000000..c827676c2
--- /dev/null
+++ b/apps/backend/src/routes/paywall-serving.ts
@@ -0,0 +1,112 @@
+/**
+ * Public paywall artifact serving — `GET /p/:contentHash/*` (deploy contract
+ * §5) and `GET /c/:contentHash/*` (§5.1).
+ *
+ * Released artifacts are public, immutable, and content-addressed: the
+ * finalize step copies paywall blobs to `p/<contentHash>/index.html`,
+ * `p/<contentHash>/bundle.js`, and `p/<contentHash>/assets/<name>`, and
+ * component blobs to `c/<contentHash>/manifest.json`,
+ * `c/<contentHash>/previews/<state>.json`, `c/<contentHash>/runtime.js`, and
+ * `c/<contentHash>/panel.js` in the {@link PaywallArtifactStore}. These routes
+ * stream them back with the stored `Content-Type`, an immutable cache policy,
+ * permissive CORS, and the §5 security headers (CSP sandbox / nosniff /
+ * no-referrer — tenant HTML is co-hosted with the authenticated API origin) —
+ * no auth (the contentHash itself is the capability).
+ */
+import { PaywallArtifactStore } from "@voidhash/core/services";
+import { SHA256_HEX_PATTERN } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { Cause, Effect, Layer } from "effect";
+import { HttpRouter, HttpServerResponse } from "effect/unstable/http";
+
+const IMMUTABLE_CACHE_CONTROL = "public, max-age=31536000, immutable";
+
+/**
+ * Security headers stamped on EVERY `/p/*` and `/c/*` response (contract §5).
+ * The CSP `sandbox` directive forces tenant-authored HTML served from this
+ * (API) origin into an opaque origin: no same-origin credentialed API access,
+ * no `document.cookie`. `allow-scripts allow-forms` keeps the paywall runtime
+ * functional; nosniff + no-referrer close the type-confusion and URL-leak
+ * side channels.
+ */
+const SECURITY_HEADERS = {
+  "content-security-policy": "sandbox allow-scripts allow-forms",
+  "referrer-policy": "no-referrer",
+  "x-content-type-options": "nosniff",
+} as const;
+
+/**
+ * 404/error responses carry CORS too (contract §5.1): cross-origin consumers
+ * (the studio fetching preview trees) must observe a readable 404 instead of
+ * an opaque CORS failure.
+ */
+const ERROR_HEADERS = {
+  ...SECURITY_HEADERS,
+  "access-control-allow-origin": "*",
+} as const;
+
+const notFound = HttpServerResponse.json(
+  { error: "Not found" },
+  { headers: ERROR_HEADERS, status: 404 },
+);
+
+const handleServe = (prefix: "p" | "c") =>
+  Effect.gen(function* () {
+    const store = yield* PaywallArtifactStore;
+    const params = yield* HttpRouter.params;
+
+    const contentHash = params.contentHash;
+    const rest = params["*"];
+    // The serving layouts only ever contain lowercase-hex contentHash
+    // prefixes (§1.2); anything else can 404 without touching the store. `..`
+    // has no traversal semantics in object storage, but reject it anyway so
+    // the route never echoes a creative key back into the store.
+    if (
+      contentHash === undefined ||
+      !SHA256_HEX_PATTERN.test(contentHash) ||
+      rest === undefined ||
+      rest.length === 0 ||
+      rest.split("/").some((segment) => segment.length === 0 || segment === "..")
+    ) {
+      return yield* notFound;
+    }
+
+    const object = yield* store.getObject(`${prefix}/${contentHash}/${rest}`);
+    if (object === null) {
+      return yield* notFound;
+    }
+
+    return HttpServerResponse.uint8Array(object.body, {
+      contentType: object.contentType ?? "application/octet-stream",
+      headers: {
+        ...SECURITY_HEADERS,
+        "access-control-allow-origin": "*",
+        "cache-control": IMMUTABLE_CACHE_CONTROL,
+      },
+    });
+  });
+
+const registerPaywallServingRoutes = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+
+  for (const prefix of ["p", "c"] as const) {
+    yield* router.add(
+      "GET",
+      `/${prefix}/:contentHash/*`,
+      handleServe(prefix).pipe(
+        // catchCause so store defects are logged with their full cause instead
+        // of escaping the worker as an opaque exception.
+        Effect.catchCause((cause) =>
+          Effect.gen(function* () {
+            yield* Effect.logError(`Paywall artifact serving error: ${Cause.pretty(cause)}`);
+            return yield* HttpServerResponse.json(
+              { error: "Failed to load paywall artifact" },
+              { headers: ERROR_HEADERS, status: 502 },
+            );
+          }),
+        ),
+      ),
+    );
+  }
+});
+
+export const PaywallServingRouteLayer = Layer.effectDiscard(registerPaywallServingRoutes);
diff --git a/apps/backend/src/routes/public-file-serving.test.ts b/apps/backend/src/routes/public-file-serving.test.ts
new file mode 100644
index 000000000..6b84e84ec
--- /dev/null
+++ b/apps/backend/src/routes/public-file-serving.test.ts
@@ -0,0 +1,103 @@
+import {
+  PublicFileStore,
+  PublicFileStoreError,
+  type PublicFileStoreShape,
+} from "@voidhash/core/services";
+import { Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { describe, expect, it } from "vite-plus/test";
+
+import { PublicFileServingRouteLayer } from "./public-file-serving.ts";
+
+const BASE_URL = "https://files.test.invalid";
+
+/** In-memory store with one entry per declared object key. */
+const storeLayer = (objects: Record<string, { body: string; contentType: string | null }>) => {
+  const shape: PublicFileStoreShape = {
+    publicBaseUrl: BASE_URL,
+    publicUrl: (key) => `${BASE_URL}/files/${key}`,
+    getObject: (key) =>
+      Effect.sync(() => {
+        const object = objects[key];
+        return object
+          ? { body: new TextEncoder().encode(object.body), contentType: object.contentType }
+          : null;
+      }),
+    putObject: () => Effect.void,
+    deleteObject: () => Effect.void,
+  };
+  return Layer.succeed(PublicFileStore, shape);
+};
+
+const failingStoreLayer = Layer.succeed(PublicFileStore, {
+  publicBaseUrl: BASE_URL,
+  publicUrl: (key: string) => `${BASE_URL}/files/${key}`,
+  getObject: () => Effect.fail(new PublicFileStoreError({ cause: "boom", message: "store down" })),
+  putObject: () => Effect.void,
+  deleteObject: () => Effect.void,
+});
+
+const serve = (path: string, store: Layer.Layer<PublicFileStore>) =>
+  Effect.gen(function* () {
+    const handler = yield* HttpRouter.toHttpEffect(
+      PublicFileServingRouteLayer.pipe(HttpRouter.provideRequest(store)),
+    );
+    const response = yield* handler.pipe(
+      Effect.provideService(
+        HttpServerRequest.HttpServerRequest,
+        HttpServerRequest.fromWeb(new Request(`http://localhost${path}`)),
+      ),
+    );
+    return HttpServerResponse.toWeb(response);
+  }).pipe(Effect.scoped, Effect.runPromise);
+
+describe("GET /files/*", () => {
+  it("serves a stored object with its Content-Type, immutable caching, CORS, and nosniff", async () => {
+    const store = storeLayer({
+      "avatars/organization/org_1/abc.webp": { body: "webp-bytes", contentType: "image/webp" },
+    });
+
+    const response = await serve("/files/avatars/organization/org_1/abc.webp", store);
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("content-type")).toBe("image/webp");
+    expect(response.headers.get("cache-control")).toBe("public, max-age=31536000, immutable");
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expect(response.headers.get("x-content-type-options")).toBe("nosniff");
+    expect(await response.text()).toBe("webp-bytes");
+  });
+
+  it("does NOT stamp a CSP sandbox (images load cross-origin as <img>, unlike paywall HTML)", async () => {
+    const store = storeLayer({ "avatars/x.webp": { body: "x", contentType: "image/webp" } });
+
+    const response = await serve("/files/avatars/x.webp", store);
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("content-security-policy")).toBeNull();
+  });
+
+  it("falls back to application/octet-stream when no Content-Type is stored", async () => {
+    const store = storeLayer({ "avatars/x": { body: "x", contentType: null } });
+
+    const response = await serve("/files/avatars/x", store);
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("content-type")).toBe("application/octet-stream");
+  });
+
+  it("returns 404 JSON for a missing object, with readable CORS", async () => {
+    const response = await serve("/files/avatars/missing.webp", storeLayer({}));
+
+    expect(response.status).toBe(404);
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expect(await response.json()).toEqual({ error: "Not found" });
+  });
+
+  it("returns 502 when the store fails, with readable CORS", async () => {
+    const response = await serve("/files/avatars/x.webp", failingStoreLayer);
+
+    expect(response.status).toBe(502);
+    expect(response.headers.get("access-control-allow-origin")).toBe("*");
+    expect(await response.json()).toEqual({ error: "Failed to load file" });
+  });
+});
diff --git a/apps/backend/src/routes/public-file-serving.ts b/apps/backend/src/routes/public-file-serving.ts
new file mode 100644
index 000000000..a4e76426b
--- /dev/null
+++ b/apps/backend/src/routes/public-file-serving.ts
@@ -0,0 +1,75 @@
+/**
+ * Public asset serving — `GET /files/*`.
+ *
+ * Stored public files (avatars today, written by the org/project avatar RPCs to
+ * `avatars/<entity>/<id>/<sha256>.<ext>`) are content-addressed, immutable, and
+ * unauthenticated: the key's sha256 is the capability. These are images served
+ * cross-origin as `<img src>`, so — unlike the paywall HTML routes — there is
+ * NO CSP sandbox; just the stored `Content-Type`, an immutable cache policy,
+ * permissive CORS, and `nosniff`.
+ */
+import { PublicFileStore } from "@voidhash/core/services";
+import { Cause, Effect, Layer } from "effect";
+import { HttpRouter, HttpServerResponse } from "effect/unstable/http";
+
+const IMMUTABLE_CACHE_CONTROL = "public, max-age=31536000, immutable";
+
+const HEADERS = {
+  "access-control-allow-origin": "*",
+  "x-content-type-options": "nosniff",
+} as const;
+
+const notFound = HttpServerResponse.json({ error: "Not found" }, { headers: HEADERS, status: 404 });
+
+const handleServe = Effect.gen(function* () {
+  const store = yield* PublicFileStore;
+  const params = yield* HttpRouter.params;
+  const key = params["*"];
+
+  // `..` has no traversal semantics in object storage, but reject it anyway so
+  // the route never echoes a creative key back into the store.
+  if (
+    key === undefined ||
+    key.length === 0 ||
+    key.split("/").some((segment) => segment.length === 0 || segment === "..")
+  ) {
+    return yield* notFound;
+  }
+
+  const object = yield* store.getObject(key);
+  if (object === null) {
+    return yield* notFound;
+  }
+
+  return HttpServerResponse.uint8Array(object.body, {
+    contentType: object.contentType ?? "application/octet-stream",
+    headers: {
+      ...HEADERS,
+      "cache-control": IMMUTABLE_CACHE_CONTROL,
+    },
+  });
+});
+
+const registerPublicFileServingRoutes = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+
+  yield* router.add(
+    "GET",
+    "/files/*",
+    handleServe.pipe(
+      // catchCause so store defects are logged with their full cause instead of
+      // escaping the worker as an opaque exception.
+      Effect.catchCause((cause) =>
+        Effect.gen(function* () {
+          yield* Effect.logError(`Public file serving error: ${Cause.pretty(cause)}`);
+          return yield* HttpServerResponse.json(
+            { error: "Failed to load file" },
+            { headers: HEADERS, status: 502 },
+          );
+        }),
+      ),
+    ),
+  );
+});
+
+export const PublicFileServingRouteLayer = Layer.effectDiscard(registerPublicFileServingRoutes);
diff --git a/apps/backend/src/routes/v1/api-keys.ts b/apps/backend/src/routes/v1/api-keys.ts
new file mode 100644
index 000000000..a58ddd88a
--- /dev/null
+++ b/apps/backend/src/routes/v1/api-keys.ts
@@ -0,0 +1,93 @@
+import { ApiKey, ApiKeyWithRawKey, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiApiKeyNotFoundError,
+  ApiApiKeyServiceError,
+} from "@voidhash/api-contracts/errors";
+import { ApiKeyService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const ApiKeysGroupLive = HttpApiBuilder.group(VoidhashV1Api, "api_keys", (handlers) =>
+  Effect.gen(function* () {
+    const apiKeyService = yield* ApiKeyService;
+    return handlers
+      .handle("createSecretKey", ({ payload }) =>
+        bridgeAuthSession(apiKeyService.createSecretKey(payload)).pipe(
+          Effect.map((apiKey) => new ApiKeyWithRawKey(apiKey)),
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            ApiKeyServiceError: (e) => Effect.fail(new ApiApiKeyServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("listApiKeys", () =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const apiKeys = yield* apiKeyService.getApiKeys(projectId);
+            return apiKeys.map(
+              (apiKey) =>
+                new ApiKey({
+                  ...apiKey,
+                  ...(apiKey.isPublic ? { rawKey: apiKey.key } : {}),
+                }),
+            );
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            ApiKeyServiceError: (e) => Effect.fail(new ApiApiKeyServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("getApiKeyById", ({ params }) =>
+        bridgeAuthSession(apiKeyService.getApiKeyById(params.apiKeyId)).pipe(
+          Effect.map(
+            (apiKey) =>
+              new ApiKey({
+                ...apiKey,
+                ...(apiKey.isPublic ? { rawKey: apiKey.key } : {}),
+              }),
+          ),
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            ApiKeyNotFoundError: (e) =>
+              Effect.fail(new ApiApiKeyNotFoundError({ message: e.message })),
+            ApiKeyServiceError: (e) => Effect.fail(new ApiApiKeyServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("rotateSecretKey", ({ params }) =>
+        bridgeAuthSession(apiKeyService.rotateSecretKey({ secretKeyId: params.apiKeyId })).pipe(
+          Effect.map((apiKey) => new ApiKeyWithRawKey(apiKey)),
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            ApiKeyNotFoundError: (e) =>
+              Effect.fail(new ApiApiKeyNotFoundError({ message: e.message })),
+            ApiKeyServiceError: (e) => Effect.fail(new ApiApiKeyServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("deleteApiKey", ({ params }) =>
+        bridgeAuthSession(apiKeyService.deleteSecretKey({ secretKeyId: params.apiKeyId })).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            ApiKeyNotFoundError: (e) =>
+              Effect.fail(new ApiApiKeyNotFoundError({ message: e.message })),
+            ApiKeyServiceError: (e) => Effect.fail(new ApiApiKeyServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/auth.ts b/apps/backend/src/routes/v1/auth.ts
new file mode 100644
index 000000000..2631f31b6
--- /dev/null
+++ b/apps/backend/src/routes/v1/auth.ts
@@ -0,0 +1,35 @@
+import { VoidhashV1Api } from "@voidhash/api-contracts";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const AuthGroupLive = HttpApiBuilder.group(VoidhashV1Api, "auth", (handlers) =>
+  handlers.handle("session", () =>
+    bridgeAuthSession(
+      Effect.gen(function* () {
+        const authSession = yield* AuthSession;
+        const method =
+          authSession.method === "user"
+            ? "api-key"
+            : (authSession.method as "api-key" | "publishable-key" | "secret-key");
+        return {
+          method,
+          name: authSession.name,
+          organizations: authSession.organizations.map((o) => ({
+            id: o.id,
+            name: o.name,
+            slug: o.slug,
+          })),
+          projects: authSession.projects.map((p) => ({
+            id: p.id,
+            name: p.name,
+            organizationId: p.organizationId,
+            slug: p.slug,
+          })),
+        };
+      }),
+    ),
+  ),
+);
diff --git a/apps/backend/src/routes/v1/notifications.ts b/apps/backend/src/routes/v1/notifications.ts
new file mode 100644
index 000000000..40221f13d
--- /dev/null
+++ b/apps/backend/src/routes/v1/notifications.ts
@@ -0,0 +1,145 @@
+import { SendNotificationResponse, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiAuthenticationError,
+  ApiPushDeviceValidationError,
+  ApiPushSendNotEnabledError,
+  ApiPushSendServiceError,
+} from "@voidhash/api-contracts/errors";
+import {
+  InternalFeatureFlagService,
+  NotificationSendingService,
+} from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { PushNotificationSendStatus } from "@voidhash/db";
+import { AuthSession, INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+/** Map the numeric send roll-up status to the API's string enum. */
+const sendStatusToString = (status: number): SendNotificationResponse["status"] => {
+  switch (status) {
+    case PushNotificationSendStatus.InProgress:
+      return "in_progress";
+    case PushNotificationSendStatus.Succeeded:
+      return "succeeded";
+    case PushNotificationSendStatus.PartialFailed:
+      return "partial_failed";
+    case PushNotificationSendStatus.Failed:
+      return "failed";
+    case PushNotificationSendStatus.NoRecipients:
+      return "no_recipients";
+    default:
+      return "pending";
+  }
+};
+
+/**
+ * Server-to-server push dispatch (`POST /api/v1/notifications/send`). A
+ * management surface — secret-key authenticated (never a publishable client key,
+ * so a device can't push to arbitrary persons) and gated by the `notifications`
+ * internal feature flag. Delegates to {@link NotificationSendingService}, which
+ * writes the trail rows and enqueues per-device deliveries; the response carries
+ * the tracking id and up-front counts.
+ */
+export const NotificationsGroupLive = HttpApiBuilder.group(
+  VoidhashV1Api,
+  "notifications",
+  (handlers) =>
+    Effect.gen(function* () {
+      const sendService = yield* NotificationSendingService;
+      const internalFeatureFlags = yield* InternalFeatureFlagService;
+
+      return handlers.handle("sendNotification", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const session = yield* AuthSession;
+            // Server-side only: a publishable (client-embedded) key must NEVER be
+            // able to push to arbitrary persons in its project. Require a
+            // secret/api key (the same trust level as the `persons` management API).
+            if (session?.method === "publishable-key") {
+              return yield* Effect.fail(
+                new ApiActionForbiddenError({
+                  message: "Push dispatch requires a secret API key, not a publishable key",
+                }),
+              );
+            }
+            const projectId = yield* extractAuthorizedProjectId(session);
+            const organizationId = session?.projects.find(
+              (project) => project.id === projectId,
+            )?.organizationId;
+            if (!organizationId) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No organization associated with this authentication session",
+                  message: "No organization associated with this authentication session",
+                }),
+              );
+            }
+
+            // Internal feature-flag gate (voidhash-internal, per-org).
+            const enabled = yield* internalFeatureFlags
+              .isEnabled(organizationId, INTERNAL_FEATURE_FLAGS.notifications.key)
+              .pipe(
+                Effect.catchTag("InternalFeatureFlagServiceError", (error) =>
+                  Effect.fail(new ApiPushSendServiceError({ cause: error.message })),
+                ),
+              );
+            if (!enabled) {
+              return yield* Effect.fail(
+                new ApiActionForbiddenError({
+                  message: "Notifications are not enabled for this organization",
+                }),
+              );
+            }
+
+            const personIds = payload.personIds ?? [];
+            const distinctIds = payload.distinctIds ?? [];
+            if (personIds.length === 0 && distinctIds.length === 0) {
+              return yield* Effect.fail(
+                new ApiPushDeviceValidationError({
+                  message: "at least one of personIds or distinctIds is required",
+                }),
+              );
+            }
+
+            const result = yield* sendService.send({
+              projectId,
+              message: {
+                title: payload.title,
+                body: payload.body,
+                data: payload.data,
+                sound: payload.sound,
+                badge: payload.badge,
+                priority: payload.priority,
+                ttl: payload.ttl,
+                channelId: payload.channelId,
+                collapseId: payload.collapseId,
+              },
+              personIds,
+              distinctIds,
+              idempotencyKey: payload.idempotencyKey,
+            });
+
+            return new SendNotificationResponse({
+              pushNotificationSendId: result.pushNotificationSendId,
+              deviceCount: result.deviceCount,
+              status: sendStatusToString(result.status),
+              unresolvedDistinctIds: [...result.unresolvedDistinctIds],
+            });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new ApiActionForbiddenError({ message: error.message })),
+            NotificationConfigNotEnabledError: (error) =>
+              Effect.fail(new ApiPushSendNotEnabledError({ message: error.message })),
+            NotificationSendingServiceError: (error) =>
+              Effect.fail(new ApiPushSendServiceError({ cause: error.cause })),
+          }),
+        ),
+      );
+    }),
+);
diff --git a/apps/backend/src/routes/v1/organizations.ts b/apps/backend/src/routes/v1/organizations.ts
new file mode 100644
index 000000000..0e11796de
--- /dev/null
+++ b/apps/backend/src/routes/v1/organizations.ts
@@ -0,0 +1,28 @@
+import { Organization, VoidhashV1Api } from "@voidhash/api-contracts";
+import { ApiOrganizationServiceError } from "@voidhash/api-contracts/errors";
+import { OrganizationService } from "@voidhash/core/services";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const OrganizationsGroupLive = HttpApiBuilder.group(
+  VoidhashV1Api,
+  "organizations",
+  (handlers) =>
+    Effect.gen(function* () {
+      const organizationService = yield* OrganizationService;
+      return handlers.handle("createOrganization", ({ payload }) =>
+        bridgeAuthSession(
+          organizationService
+            .createOrganization({ name: payload.name })
+            .pipe(Effect.map((org) => new Organization(org))),
+        ).pipe(
+          Effect.catchTags({
+            OrganizationServiceError: (e) =>
+              Effect.fail(new ApiOrganizationServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+    }),
+);
diff --git a/apps/backend/src/routes/v1/payment-provider-configurations.ts b/apps/backend/src/routes/v1/payment-provider-configurations.ts
new file mode 100644
index 000000000..326697456
--- /dev/null
+++ b/apps/backend/src/routes/v1/payment-provider-configurations.ts
@@ -0,0 +1,49 @@
+import { PaymentProviderConfiguration, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiPaymentProviderConfigurationServiceError,
+} from "@voidhash/api-contracts/errors";
+import { PaymentProviderConfigurationService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const PaymentProviderConfigurationsGroupLive = HttpApiBuilder.group(
+  VoidhashV1Api,
+  "payment_provider_configurations",
+  (handlers) =>
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderConfigurationService;
+
+      return handlers.handle("listPaymentProviderConfigurations", () =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const configs = yield* service.getPaymentProviderConfigurations(projectId);
+
+            return configs.map(
+              (c) =>
+                new PaymentProviderConfiguration({
+                  enabled: c.enabled,
+                  id: c.id,
+                  name: c.name,
+                  projectId: c.projectId,
+                  providerId: c.providerId,
+                }),
+            );
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            PaymentProviderConfigurationServiceError: (e) =>
+              Effect.fail(new ApiPaymentProviderConfigurationServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+    }),
+);
diff --git a/apps/backend/src/routes/v1/payment-provider-products.ts b/apps/backend/src/routes/v1/payment-provider-products.ts
new file mode 100644
index 000000000..c43b4e55d
--- /dev/null
+++ b/apps/backend/src/routes/v1/payment-provider-products.ts
@@ -0,0 +1,49 @@
+import { PaymentProviderProduct, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiPaymentProviderProductServiceError,
+} from "@voidhash/api-contracts/errors";
+import { PaymentProviderProductService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const PaymentProviderProductsGroupLive = HttpApiBuilder.group(
+  VoidhashV1Api,
+  "payment_provider_products",
+  (handlers) =>
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderProductService;
+
+      return handlers.handle("listPaymentProviderProducts", () =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const products = yield* service.getProviderProductsByProjectId(projectId);
+
+            return products.map(
+              (p) =>
+                new PaymentProviderProduct({
+                  configuration: (p.configuration ?? {}) as Record<string, unknown>,
+                  id: p.id,
+                  paymentProviderConfigurationId: p.paymentProviderConfigurationId,
+                  productId: p.productId,
+                  providerId: p.providerId,
+                }),
+            );
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            PaymentProviderProductServiceError: (e) =>
+              Effect.fail(new ApiPaymentProviderProductServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+    }),
+);
diff --git a/apps/backend/src/routes/v1/paywall-deploys.ts b/apps/backend/src/routes/v1/paywall-deploys.ts
new file mode 100644
index 000000000..05c4f49ec
--- /dev/null
+++ b/apps/backend/src/routes/v1/paywall-deploys.ts
@@ -0,0 +1,154 @@
+import {
+  CreatePaywallDeployResponse,
+  FinalizePaywallDeployResponse,
+  FinalizedPaywallDeployComponent,
+  FinalizedPaywallDeployPaywall,
+  UploadPaywallDeployBlobResponse,
+  VoidhashV1Api,
+} from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiDeployBlobHashMismatchError,
+  ApiDeployBlobNotDeclaredError,
+  ApiIncompleteDeployError,
+  ApiPaywallDeployNotFoundError,
+  ApiPaywallDeployNotPendingError,
+  ApiPaywallDeployServiceError,
+  ApiPaywallDeployUpgradeRequiredError,
+  ApiPaywallDeployValidationError,
+} from "@voidhash/api-contracts/errors";
+import { PaywallDeployService } from "@voidhash/core/services";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+/**
+ * Handlers for the paywall code-deploy surface (deploy contract §4):
+ * `POST /api/v1/paywall-deploys`, blob upload, and finalize. All three call
+ * {@link PaywallDeployService} under the caller's bridged `AuthSession`; the
+ * service authorizes against the manifest's team/project slugs.
+ */
+export const PaywallDeploysGroupLive = HttpApiBuilder.group(
+  VoidhashV1Api,
+  "paywall_deploys",
+  (handlers) =>
+    Effect.gen(function* () {
+      const deployService = yield* PaywallDeployService;
+
+      return handlers
+        .handle("createDeploy", ({ payload }) =>
+          bridgeAuthSession(
+            deployService.createDeploy({ manifest: payload }).pipe(
+              Effect.map(
+                (result) =>
+                  new CreatePaywallDeployResponse({
+                    deployId: result.deployId,
+                    missing: result.missing,
+                  }),
+              ),
+            ),
+          ).pipe(
+            Effect.catchTags({
+              ActionForbiddenError: (e) =>
+                Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+              AuditLogPortError: (e) =>
+                Effect.fail(new ApiPaywallDeployServiceError({ cause: e.cause })),
+              PaywallDeployServiceError: (e) =>
+                Effect.fail(new ApiPaywallDeployServiceError({ cause: e.cause })),
+              PaywallDeployValidationError: (e) =>
+                Effect.fail(
+                  new ApiPaywallDeployValidationError({
+                    message: e.message,
+                    violations: e.violations,
+                  }),
+                ),
+              UnsupportedDeploySchemaVersionError: (e) =>
+                Effect.fail(
+                  new ApiPaywallDeployUpgradeRequiredError({
+                    message: e.message,
+                    schemaVersion: e.schemaVersion,
+                  }),
+                ),
+            }),
+          ),
+        )
+        .handle("uploadBlob", ({ params, payload }) =>
+          bridgeAuthSession(
+            deployService
+              .uploadBlob({
+                body: payload,
+                deployId: params.deployId,
+                sha256: params.sha256,
+              })
+              .pipe(Effect.map(() => new UploadPaywallDeployBlobResponse({}))),
+          ).pipe(
+            Effect.catchTags({
+              ActionForbiddenError: (e) =>
+                Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+              DeployBlobHashMismatchError: (e) =>
+                Effect.fail(
+                  new ApiDeployBlobHashMismatchError({
+                    actualSha256: e.actualSha256,
+                    expectedSha256: e.expectedSha256,
+                  }),
+                ),
+              DeployBlobNotDeclaredError: (e) =>
+                Effect.fail(new ApiDeployBlobNotDeclaredError({ sha256: e.sha256 })),
+              PaywallDeployNotFoundError: (e) =>
+                Effect.fail(new ApiPaywallDeployNotFoundError({ message: e.message })),
+              PaywallDeployNotPendingError: (e) =>
+                Effect.fail(new ApiPaywallDeployNotPendingError({ message: e.message })),
+              PaywallDeployServiceError: (e) =>
+                Effect.fail(new ApiPaywallDeployServiceError({ cause: e.cause })),
+              PaywallDeployValidationError: (e) =>
+                Effect.fail(
+                  new ApiPaywallDeployValidationError({
+                    message: e.message,
+                    violations: e.violations,
+                  }),
+                ),
+            }),
+          ),
+        )
+        .handle("finalizeDeploy", ({ params }) =>
+          bridgeAuthSession(
+            deployService.finalizeDeploy({ deployId: params.deployId }).pipe(
+              Effect.map(
+                (result) =>
+                  new FinalizePaywallDeployResponse({
+                    components: result.components.map(
+                      (component) => new FinalizedPaywallDeployComponent(component),
+                    ),
+                    deployId: result.deployId,
+                    paywalls: result.paywalls.map(
+                      (paywall) => new FinalizedPaywallDeployPaywall(paywall),
+                    ),
+                    status: result.status,
+                  }),
+              ),
+            ),
+          ).pipe(
+            Effect.catchTags({
+              ActionForbiddenError: (e) =>
+                Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+              AuditLogPortError: (e) =>
+                Effect.fail(new ApiPaywallDeployServiceError({ cause: e.cause })),
+              IncompleteDeployError: (e) =>
+                Effect.fail(new ApiIncompleteDeployError({ missing: e.missing })),
+              PaywallDeployNotFoundError: (e) =>
+                Effect.fail(new ApiPaywallDeployNotFoundError({ message: e.message })),
+              PaywallDeployServiceError: (e) =>
+                Effect.fail(new ApiPaywallDeployServiceError({ cause: e.cause })),
+              PaywallDeployValidationError: (e) =>
+                Effect.fail(
+                  new ApiPaywallDeployValidationError({
+                    message: e.message,
+                    violations: e.violations,
+                  }),
+                ),
+            }),
+          ),
+        );
+    }),
+);
diff --git a/apps/backend/src/routes/v1/paywall-locations.ts b/apps/backend/src/routes/v1/paywall-locations.ts
new file mode 100644
index 000000000..79fa7a97e
--- /dev/null
+++ b/apps/backend/src/routes/v1/paywall-locations.ts
@@ -0,0 +1,52 @@
+import { PaywallLocation, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiPaywallLocationServiceError,
+} from "@voidhash/api-contracts/errors";
+import { PaywallLocationService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const PaywallLocationsGroupLive = HttpApiBuilder.group(
+  VoidhashV1Api,
+  "paywall_locations",
+  (handlers) =>
+    Effect.gen(function* () {
+      const paywallLocationService = yield* PaywallLocationService;
+
+      return handlers.handle("listPaywallLocations", () =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const locations = yield* paywallLocationService.listLocations({
+              includeArchived: false,
+              projectId,
+            });
+
+            return locations.map(
+              (location) =>
+                new PaywallLocation({
+                  description: location.description,
+                  id: location.id,
+                  name: location.name,
+                  projectId: location.projectId,
+                  slug: location.slug,
+                }),
+            );
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            PaywallLocationServiceError: (e) =>
+              Effect.fail(new ApiPaywallLocationServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+    }),
+);
diff --git a/apps/backend/src/routes/v1/perks.ts b/apps/backend/src/routes/v1/perks.ts
new file mode 100644
index 000000000..a827d35cc
--- /dev/null
+++ b/apps/backend/src/routes/v1/perks.ts
@@ -0,0 +1,39 @@
+import { Perk, VoidhashV1Api } from "@voidhash/api-contracts";
+import { ApiActionForbiddenError, ApiPerkServiceError } from "@voidhash/api-contracts/errors";
+import { PerkService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const PerksGroupLive = HttpApiBuilder.group(VoidhashV1Api, "perks", (handlers) =>
+  Effect.gen(function* () {
+    const perkService = yield* PerkService;
+    return handlers.handle("listPerks", () =>
+      bridgeAuthSession(
+        Effect.gen(function* () {
+          const authSession = yield* AuthSession;
+          const projectId = yield* extractAuthorizedProjectId(authSession);
+          const perks = yield* perkService.getPerks(projectId);
+          return perks.map(
+            (perk) =>
+              new Perk({
+                id: perk.id,
+                name: perk.name,
+                projectId: perk.projectId,
+                slug: perk.slug,
+              }),
+          );
+        }),
+      ).pipe(
+        Effect.catchTags({
+          ActionForbiddenError: (e) =>
+            Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+          PerkServiceError: (e) => Effect.fail(new ApiPerkServiceError({ cause: e.cause })),
+        }),
+      ),
+    );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/persons.ts b/apps/backend/src/routes/v1/persons.ts
new file mode 100644
index 000000000..a38a870d8
--- /dev/null
+++ b/apps/backend/src/routes/v1/persons.ts
@@ -0,0 +1,107 @@
+import { Person, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiPersonNotFoundError,
+  ApiPersonServiceError,
+} from "@voidhash/api-contracts/errors";
+import { PersonService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { PersonOrigin } from "@voidhash/db";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+const toApiPerson = (person: {
+  personId: string;
+  distinctId: string;
+  email: string | null;
+  name: string | null;
+}) =>
+  new Person({
+    personId: person.personId,
+    distinctId: person.distinctId,
+    email: person.email,
+    name: person.name,
+  });
+
+export const PersonsGroupLive = HttpApiBuilder.group(VoidhashV1Api, "persons", (handlers) =>
+  Effect.gen(function* () {
+    const personService = yield* PersonService;
+    return handlers
+      .handle("createPerson", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            return yield* personService.createPerson({
+              distinctId: payload.distinctId,
+              email: payload.email ?? null,
+              name: payload.name ?? null,
+              projectId,
+              origin: PersonOrigin.API,
+            });
+          }),
+        ).pipe(
+          Effect.map((person) => toApiPerson(person!)),
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            PersonServiceError: (e) => Effect.fail(new ApiPersonServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("listPersons", () =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            return yield* personService
+              .getPersons({ projectId })
+              .pipe(
+                Effect.map((persons) =>
+                  (persons ?? []).flatMap((person) => (person ? [toApiPerson(person)] : [])),
+                ),
+              );
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            PersonServiceError: (e) => Effect.fail(new ApiPersonServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("getPersonById", ({ params: { personId } }) =>
+        bridgeAuthSession(
+          personService.getPersonById(personId).pipe(Effect.map((person) => toApiPerson(person!))),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            PersonNotFoundError: (e) => Effect.fail(new ApiPersonNotFoundError({ id: e.id })),
+            PersonServiceError: (e) => Effect.fail(new ApiPersonServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("getPersonByDistinctId", ({ params: { distinctId } }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            return yield* personService
+              .getPersonByDistinctId(distinctId, projectId)
+              .pipe(Effect.map((person) => toApiPerson(person!)));
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            PersonNotFoundError: (e) => Effect.fail(new ApiPersonNotFoundError({ id: e.id })),
+            PersonServiceError: (e) => Effect.fail(new ApiPersonServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/product-perks.ts b/apps/backend/src/routes/v1/product-perks.ts
new file mode 100644
index 000000000..0fb48632b
--- /dev/null
+++ b/apps/backend/src/routes/v1/product-perks.ts
@@ -0,0 +1,46 @@
+import { ProductPerk, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiProductPerkServiceError,
+  ApiProductPerkValidationError,
+} from "@voidhash/api-contracts/errors";
+import { ProductPerkService } from "@voidhash/core/services";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const ProductPerksGroupLive = HttpApiBuilder.group(
+  VoidhashV1Api,
+  "product_perks",
+  (handlers) =>
+    Effect.gen(function* () {
+      const productService = yield* ProductPerkService;
+
+      return handlers.handle("listProductPerksByProductId", ({ params: { productId } }) =>
+        bridgeAuthSession(
+          productService.getProductPerksByProductId(productId).pipe(
+            Effect.map((productPerks) =>
+              productPerks.map(
+                (productPerk) =>
+                  new ProductPerk({
+                    id: productPerk.id,
+                    perkId: productPerk.perkId,
+                    productId: productPerk.productId,
+                  }),
+              ),
+            ),
+          ),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            ProductPerkServiceError: (e) =>
+              Effect.fail(new ApiProductPerkServiceError({ cause: e.cause })),
+            ProductPerkValidationError: (e) =>
+              Effect.fail(new ApiProductPerkValidationError({ message: e.message })),
+          }),
+        ),
+      );
+    }),
+);
diff --git a/apps/backend/src/routes/v1/products.ts b/apps/backend/src/routes/v1/products.ts
new file mode 100644
index 000000000..0a52280e6
--- /dev/null
+++ b/apps/backend/src/routes/v1/products.ts
@@ -0,0 +1,35 @@
+import { Product, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiProductServiceError,
+} from "@voidhash/api-contracts/errors";
+import { ProductService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const ProductsGroupLive = HttpApiBuilder.group(VoidhashV1Api, "products", (handlers) =>
+  Effect.gen(function* () {
+    const productService = yield* ProductService;
+
+    return handlers.handle("listProducts", () =>
+      bridgeAuthSession(
+        Effect.gen(function* () {
+          const authSession = yield* AuthSession;
+          const projectId = yield* extractAuthorizedProjectId(authSession);
+          const products = yield* productService.getProducts(projectId);
+          return products.map((product) => new Product(product));
+        }),
+      ).pipe(
+        Effect.catchTags({
+          ActionForbiddenError: (e) =>
+            Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+          ProductServiceError: (e) => Effect.fail(new ApiProductServiceError({ cause: e.cause })),
+        }),
+      ),
+    );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/projects.ts b/apps/backend/src/routes/v1/projects.ts
new file mode 100644
index 000000000..d73cec4b5
--- /dev/null
+++ b/apps/backend/src/routes/v1/projects.ts
@@ -0,0 +1,51 @@
+import { Project, VoidhashV1Api } from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiAuthenticationError,
+  ApiProjectServiceError,
+} from "@voidhash/api-contracts/errors";
+import { ProjectService } from "@voidhash/core/services";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const ProjectsGroupLive = HttpApiBuilder.group(VoidhashV1Api, "projects", (handlers) =>
+  Effect.gen(function* () {
+    const projectService = yield* ProjectService;
+    return handlers
+      .handle("createProject", ({ payload }) =>
+        bridgeAuthSession(
+          projectService
+            .createProject({
+              name: payload.name,
+              organizationId: payload.organizationId,
+            })
+            .pipe(Effect.map((project) => new Project(project))),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            AuthenticationError: (e) =>
+              Effect.fail(new ApiAuthenticationError({ cause: e.cause, message: e.message })),
+            ProjectServiceError: (e) => Effect.fail(new ApiProjectServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("listProjects", ({ params: { organizationId } }) =>
+        bridgeAuthSession(
+          projectService
+            .getProjects(organizationId)
+            .pipe(
+              Effect.map((projectsList) => projectsList.map((project) => new Project(project))),
+            ),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            ProjectServiceError: (e) => Effect.fail(new ApiProjectServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/schema.ts b/apps/backend/src/routes/v1/schema.ts
new file mode 100644
index 000000000..94b384faf
--- /dev/null
+++ b/apps/backend/src/routes/v1/schema.ts
@@ -0,0 +1,147 @@
+/**
+ * `GET /api/v1/schema` and `GET /api/v1/schema/version` — the CLI-facing
+ * consolidated schema reads. Both share the underlying `SchemaService` query
+ * and honour `If-None-Match` against the `sha256:<hex>` version hash so the
+ * CLI watch loop and SDK drift-warning paths can revalidate cheaply.
+ */
+import {
+  ProjectSchemaResponse,
+  SchemaLocation,
+  SchemaPerk,
+  SchemaProduct,
+  SchemaProductProvider,
+  SchemaVersion,
+  VoidhashV1Api,
+} from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiSchemaServiceError,
+} from "@voidhash/api-contracts/errors";
+import { SchemaService } from "@voidhash/core/services";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect, Option } from "effect";
+import { HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+const SCHEMA_CACHE_HEADERS = {
+  "cache-control": "no-cache, must-revalidate",
+} as const;
+
+/**
+ * Returns a `304 Not Modified` response when the client's `If-None-Match`
+ * matches the current schema version. Returns `undefined` otherwise so the
+ * caller can serve the body.
+ */
+export const schemaNotModifiedResponse = (
+  ifNoneMatch: string | undefined,
+  version: string,
+): HttpServerResponse.HttpServerResponse | undefined => {
+  if (!ifNoneMatch) {
+    return undefined;
+  }
+  const trimmed = ifNoneMatch.replace(/^"|"$/g, "");
+  if (trimmed !== version) {
+    return undefined;
+  }
+  return HttpServerResponse.empty({
+    status: 304,
+    headers: { ...SCHEMA_CACHE_HEADERS, etag: `"${version}"` },
+  });
+};
+
+export const schemaResponseHeaders = (version: string): Record<string, string> => ({
+  ...SCHEMA_CACHE_HEADERS,
+  etag: `"${version}"`,
+});
+
+export const SchemaGroupLive = HttpApiBuilder.group(VoidhashV1Api, "schema", (handlers) =>
+  Effect.gen(function* () {
+    const schemaService = yield* SchemaService;
+
+    return handlers
+      .handle("getSchema", () =>
+        Effect.gen(function* () {
+          const req = yield* HttpServerRequest.HttpServerRequest;
+          const ifNoneMatch = HttpHeaders.get(req.headers, "if-none-match");
+
+          return yield* bridgeAuthSession(
+            Effect.gen(function* () {
+              const authSession = yield* AuthSession;
+              const projectId = yield* extractAuthorizedProjectId(authSession);
+              const schema = yield* schemaService.getProjectSchema(projectId);
+
+              const notModified = schemaNotModifiedResponse(
+                Option.getOrUndefined(ifNoneMatch),
+                schema.version,
+              );
+              if (notModified) {
+                return notModified;
+              }
+
+              return yield* HttpServerResponse.schemaJson(ProjectSchemaResponse)(
+                new ProjectSchemaResponse({
+                  enabledProviders: schema.enabledProviders,
+                  locations: schema.locations.map((location) => new SchemaLocation(location)),
+                  perks: schema.perks.map((perk) => new SchemaPerk(perk)),
+                  products: schema.products.map(
+                    (product) =>
+                      new SchemaProduct({
+                        ...product,
+                        providers: product.providers.map(
+                          (provider) => new SchemaProductProvider(provider),
+                        ),
+                      }),
+                  ),
+                  version: schema.version,
+                }),
+                { headers: schemaResponseHeaders(schema.version) },
+              ).pipe(Effect.orDie);
+            }),
+          );
+        }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            SchemaServiceError: (e) => Effect.fail(new ApiSchemaServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("getSchemaVersion", () =>
+        Effect.gen(function* () {
+          const req = yield* HttpServerRequest.HttpServerRequest;
+          const ifNoneMatch = HttpHeaders.get(req.headers, "if-none-match");
+
+          return yield* bridgeAuthSession(
+            Effect.gen(function* () {
+              const authSession = yield* AuthSession;
+              const projectId = yield* extractAuthorizedProjectId(authSession);
+              const { version } = yield* schemaService.computeProjectSchemaVersion(projectId);
+
+              const notModified = schemaNotModifiedResponse(
+                Option.getOrUndefined(ifNoneMatch),
+                version,
+              );
+              if (notModified) {
+                return notModified;
+              }
+
+              return yield* HttpServerResponse.schemaJson(SchemaVersion)(
+                new SchemaVersion({ version }),
+                { headers: schemaResponseHeaders(version) },
+              ).pipe(Effect.orDie);
+            }),
+          );
+        }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            SchemaServiceError: (e) => Effect.fail(new ApiSchemaServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/sdk.ts b/apps/backend/src/routes/v1/sdk.ts
new file mode 100644
index 000000000..cb445441f
--- /dev/null
+++ b/apps/backend/src/routes/v1/sdk.ts
@@ -0,0 +1,637 @@
+import {
+  RegisterDeviceResponse,
+  SdkCurrentSubscription,
+  SdkEntitlementGrant,
+  SdkFeatureFlagResult,
+  SdkFeatureFlagsResponse,
+  SdkHeaders,
+  SdkPerson,
+  SdkPurchaseHistoryEntry,
+  SdkResolvedPaywall,
+  SdkResolvedPaywallShowing,
+  SdkSchema,
+  SdkSchemaLocation,
+  SdkSchemaPerk,
+  SdkSchemaProduct,
+  SdkSubscriptionHistoryEntry,
+  SdkSyncTransactionResponse,
+  VoidhashV1Api,
+} from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiAuthenticationError,
+  ApiPushDeviceNotFoundError,
+  ApiPushDeviceServiceError,
+  ApiPushDeviceValidationError,
+  ApiSchemaServiceError,
+  ApiSdkPersonAlreadyIdentifiedError,
+  ApiSdkPersonNotFoundError,
+  ApiSdkServiceError,
+  ApiSdkValidationError,
+} from "@voidhash/api-contracts/errors";
+import type { AuthenticationError } from "@voidhash/core/domain/auth/Auth";
+import type { SdkPersonSnapshot } from "@voidhash/core/domain/sdkPerson/SdkPerson";
+import { SdkValidationError } from "@voidhash/core/domain/sdkPerson/SdkPerson";
+import {
+  FeatureFlagService,
+  InternalFeatureFlagService,
+  NotificationTokenService,
+  PaywallLocationService,
+  PersonIdentityService,
+  SchemaService,
+  SdkService,
+  type SdkServiceError,
+} from "@voidhash/core/services";
+import { Db } from "@voidhash/db";
+import { AuthSession, INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Effect, Option, Schema } from "effect";
+import { HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession, getPersonMetadataFromSdkHeaders } from "../../ApiMiddlewares.ts";
+import { schemaNotModifiedResponse, schemaResponseHeaders } from "./schema.ts";
+
+const toSdkPerson = (snapshot: SdkPersonSnapshot) =>
+  new SdkPerson({
+    distinctId: snapshot.distinctId,
+    email: snapshot.email,
+    entitlements: {
+      grants: snapshot.entitlements.grants.map(
+        (grant) =>
+          new SdkEntitlementGrant({
+            expiresAt: grant.expiresAt,
+            perkId: grant.perkId,
+            source: grant.source,
+            sourceId: grant.sourceId,
+            sourcePersonId: grant.sourcePersonId,
+            status: grant.status,
+          }),
+      ),
+    },
+    name: snapshot.name,
+    personId: snapshot.personId,
+    purchases: {
+      history: snapshot.purchases.history.map(
+        (purchase) =>
+          new SdkPurchaseHistoryEntry({
+            createdAt: purchase.createdAt,
+            productId: purchase.productId,
+            providerKey: purchase.providerKey,
+            purchaseId: purchase.purchaseId,
+            sourcePersonId: purchase.sourcePersonId,
+            type: purchase.type,
+          }),
+      ),
+    },
+    snapshotContext: {
+      includedPersonIds: snapshot.snapshotContext.includedPersonIds,
+      migrationJobId: snapshot.snapshotContext.migrationJobId,
+      mode: snapshot.snapshotContext.mode,
+    },
+    subscriptions: {
+      current: snapshot.subscriptions.current
+        ? new SdkCurrentSubscription({
+            expiresAt: snapshot.subscriptions.current.expiresAt,
+            productId: snapshot.subscriptions.current.productId,
+            status: snapshot.subscriptions.current.status,
+            subscriptionId: snapshot.subscriptions.current.subscriptionId,
+          })
+        : null,
+      history: snapshot.subscriptions.history.map(
+        (entry) =>
+          new SdkSubscriptionHistoryEntry({
+            canceledAt: entry.canceledAt,
+            expiresAt: entry.expiresAt,
+            isTrial: entry.isTrial,
+            productId: entry.productId,
+            sourcePersonId: entry.sourcePersonId,
+            startsAt: entry.startsAt,
+            status: entry.status,
+            subscriptionId: entry.subscriptionId,
+          }),
+      ),
+    },
+  });
+
+export const SdkGroupLive = HttpApiBuilder.group(VoidhashV1Api, "sdk", (handlers) =>
+  Effect.gen(function* () {
+    const sdkService = yield* SdkService;
+    const featureFlagService = yield* FeatureFlagService;
+    const paywallLocationService = yield* PaywallLocationService;
+    const schemaService = yield* SchemaService;
+    const dbService = yield* Db;
+    const personIdentityService = yield* PersonIdentityService;
+    const notificationTokenService = yield* NotificationTokenService;
+    const internalFeatureFlagService = yield* InternalFeatureFlagService;
+
+    const requireNotificationsEnabled = (organizationId: string) =>
+      internalFeatureFlagService
+        .isEnabled(organizationId, INTERNAL_FEATURE_FLAGS.notifications.key)
+        .pipe(
+          Effect.catchTag("InternalFeatureFlagServiceError", (error) =>
+            Effect.fail(new ApiPushDeviceServiceError({ cause: error.message })),
+          ),
+          Effect.filterOrFail(
+            (enabled) => enabled,
+            () =>
+              new ApiActionForbiddenError({
+                message: "Notifications are not enabled for this organization",
+              }),
+          ),
+        );
+
+    return handlers
+      .handle("getPerson", () =>
+        bridgeAuthSession(sdkService.getPerson().pipe(Effect.map(toSdkPerson))).pipe(
+          Effect.catchTags({
+            AuthenticationError: (e) =>
+              Effect.fail(new ApiAuthenticationError({ cause: e.cause, message: e.message })),
+            SdkPersonNotFoundError: (e) =>
+              Effect.fail(new ApiSdkPersonNotFoundError({ message: e.message })),
+            SdkServiceError: (e) => Effect.fail(new ApiSdkServiceError({ cause: e.cause })),
+            SdkValidationError: (e) =>
+              Effect.fail(new ApiSdkValidationError({ message: e.message })),
+          }),
+        ),
+      )
+      .handle("identifyPerson", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const session = yield* AuthSession;
+            const project = session?.projects[0];
+            if (!project) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No project associated with this SDK authentication session",
+                  message: "No project associated with this SDK authentication session",
+                }),
+              );
+            }
+
+            if (!session?.person?.distinctId) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No SDK person identity found in this authentication session",
+                  message: "No SDK person identity found in this authentication session",
+                }),
+              );
+            }
+
+            const snapshot = yield* sdkService.identifyPerson({
+              distinctId: payload.distinctId,
+              email: payload.email ?? null,
+              name: payload.name ?? null,
+              traits: payload.traits ? { ...payload.traits } : undefined,
+            });
+
+            return toSdkPerson(snapshot);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            AuthenticationError: (e) =>
+              Effect.fail(new ApiAuthenticationError({ cause: e.cause, message: e.message })),
+            SdkPersonAlreadyIdentifiedError: (e) =>
+              Effect.fail(new ApiSdkPersonAlreadyIdentifiedError({ distinctId: e.distinctId })),
+            SdkPersonNotFoundError: (e) =>
+              Effect.fail(new ApiSdkPersonNotFoundError({ message: e.message })),
+            SdkValidationError: (e) =>
+              Effect.fail(new ApiSdkValidationError({ message: e.message })),
+            SdkServiceError: (e) => Effect.fail(new ApiSdkServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("syncPersonAttributes", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const req = yield* HttpServerRequest.HttpServerRequest;
+            const parsedHeaders = yield* Schema.decodeUnknownEffect(SdkHeaders)(req.headers).pipe(
+              Effect.mapError((error) => new ApiSdkValidationError({ message: error.message })),
+            );
+            const personMetadata = getPersonMetadataFromSdkHeaders(parsedHeaders);
+
+            const result = yield* sdkService.syncPersonAttributes({
+              personMetadata,
+              email: payload.email,
+              name: payload.name,
+              traits: payload.traits ? { ...payload.traits } : undefined,
+              setOnce: payload.setOnce ? { ...payload.setOnce } : undefined,
+              ...(payload.clientEventId ? { clientEventId: payload.clientEventId } : {}),
+            });
+            return toSdkPerson(result.snapshot);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            AuthenticationError: (e) =>
+              Effect.fail(new ApiAuthenticationError({ cause: e.cause, message: e.message })),
+            SdkPersonNotFoundError: (e) =>
+              Effect.fail(new ApiSdkPersonNotFoundError({ message: e.message })),
+            SdkServiceError: (e) => Effect.fail(new ApiSdkServiceError({ cause: e.cause })),
+            SdkValidationError: (e) =>
+              Effect.fail(new ApiSdkValidationError({ message: e.message })),
+          }),
+        ),
+      )
+      .handle("syncTransaction", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const req = yield* HttpServerRequest.HttpServerRequest;
+            const parsedHeaders = yield* Schema.decodeUnknownEffect(SdkHeaders)(req.headers).pipe(
+              Effect.mapError((error) => new ApiSdkValidationError({ message: error.message })),
+            );
+            // The Android package name equals the client bundle id; the verified
+            // product id is derived server-side from the purchase token.
+            const clientBundleId = parsedHeaders["x-client-bundle-id"];
+
+            // `submitPurchaseTransaction`'s `Effect.fn` wrapper widens the error
+            // channel; cast to a concrete `Effect` so the outer `catchTags`
+            // matches the underlying tags.
+            yield* (
+              payload.platform === "android"
+                ? sdkService.submitPurchaseTransaction({
+                    packageName: clientBundleId,
+                    providerId: "google-play",
+                    purchaseToken: payload.purchaseToken,
+                  })
+                : sdkService.submitPurchaseTransaction({
+                    bundleId: clientBundleId,
+                    providerId: "apple-app-store",
+                    transactionId: payload.transactionId,
+                  })
+            ) as Effect.Effect<
+              unknown,
+              AuthenticationError | SdkValidationError | SdkServiceError,
+              never
+            >;
+
+            return new SdkSyncTransactionResponse({ accepted: true });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            AuthenticationError: (e) =>
+              Effect.fail(new ApiAuthenticationError({ cause: e.cause, message: e.message })),
+            SdkServiceError: (e) => Effect.fail(new ApiSdkServiceError({ cause: e.cause })),
+            SdkValidationError: (e) =>
+              Effect.fail(new ApiSdkValidationError({ message: e.message })),
+          }),
+        ),
+      )
+      .handle("resolvePaywall", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const session = yield* AuthSession;
+            const projectId = session?.projects[0]?.id;
+            if (!projectId) {
+              return yield* Effect.fail(
+                new ApiSdkServiceError({ cause: "No project associated with this key" }),
+              );
+            }
+
+            // Resolve the subject the same way `evaluateFeatureFlags` does so an
+            // experiment-backed location buckets on a stable identity.
+            const distinctId = session?.person?.distinctId ?? undefined;
+            let personId: string | undefined;
+            if (distinctId) {
+              const mapping = yield* dbService.query.personIdentities.findFirst({
+                where: { distinctId, projectId },
+              });
+              personId = mapping?.personId;
+            }
+
+            const resolved = yield* paywallLocationService.resolveLocationShowingForSdk({
+              locationSlug: payload.locationSlug,
+              projectId,
+              personId,
+              distinctId,
+            });
+            if (resolved === null) {
+              return null;
+            }
+
+            // `resolved.exposure` (when non-null) carries { experimentKey,
+            // variantKey, personId, distinctId } for the assigned subject.
+            // Server-side `$experiment.exposed` emission is wired here once the
+            // analytics dispatch producer (`AnalyticsDispatchService` over the
+            // worker's `CaptureIngressLive`) + `RuntimeContext` are threaded into
+            // the SDK route runtime — see `EXPERIMENT_TRUSTED_SOURCE_TOPIC` /
+            // `makeCapturedEventFromInternalAnalyticsEvent`. Assignment + serving
+            // (below) are fully live; emission is the remaining infra step.
+
+            return new SdkResolvedPaywall({
+              location: resolved.location,
+              showing: new SdkResolvedPaywallShowing(resolved.showing),
+            });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiSdkServiceError({ cause: String(e.message) })),
+            PaywallLocationServiceError: (e) =>
+              Effect.fail(new ApiSdkServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("getSchema", () =>
+        Effect.gen(function* () {
+          const req = yield* HttpServerRequest.HttpServerRequest;
+          const ifNoneMatch = HttpHeaders.get(req.headers, "if-none-match");
+
+          return yield* bridgeAuthSession(
+            Effect.gen(function* () {
+              const session = yield* AuthSession;
+              const projectId = session?.projects[0]?.id;
+              if (!projectId) {
+                return yield* Effect.fail(
+                  new ApiAuthenticationError({
+                    cause: "No project associated with this publishable key",
+                    message: "No project associated with this publishable key",
+                  }),
+                );
+              }
+
+              const schema = yield* schemaService.getProjectSchemaForSdk(projectId);
+
+              const notModified = schemaNotModifiedResponse(
+                Option.getOrUndefined(ifNoneMatch),
+                schema.version,
+              );
+              if (notModified) {
+                return notModified;
+              }
+
+              const perks: Record<string, SdkSchemaPerk> = {};
+              for (const perk of schema.perks) {
+                perks[perk.slug] = new SdkSchemaPerk(perk);
+              }
+
+              const locations: Record<string, SdkSchemaLocation> = {};
+              for (const location of schema.locations) {
+                locations[location.slug] = new SdkSchemaLocation(location);
+              }
+
+              const products: Record<string, SdkSchemaProduct> = {};
+              for (const product of schema.products) {
+                const perksRecord: Record<string, true> = {};
+                for (const perkSlug of product.perks) {
+                  perksRecord[perkSlug] = true;
+                }
+                const providers: {
+                  appleAppStore?: Record<string, unknown>;
+                  googlePlay?: Record<string, unknown>;
+                } = {};
+                for (const provider of product.providers) {
+                  providers[provider.providerId] = provider.configuration;
+                }
+                products[product.slug] = new SdkSchemaProduct({
+                  configuration: { perks: perksRecord, providers },
+                  properties: { name: product.name },
+                  slug: product.slug,
+                  type: product.type,
+                });
+              }
+
+              return yield* HttpServerResponse.schemaJson(SdkSchema)(
+                new SdkSchema({ locations, perks, products, version: schema.version }),
+                { headers: schemaResponseHeaders(schema.version) },
+              ).pipe(Effect.orDie);
+            }),
+          );
+        }).pipe(
+          Effect.catchTags({
+            SchemaServiceError: (e) => Effect.fail(new ApiSchemaServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("evaluateFeatureFlags", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const session = yield* AuthSession;
+            const projectId = session?.projects[0]?.id;
+            if (!projectId) {
+              return yield* Effect.fail(
+                new ApiSdkServiceError({ cause: "No project associated with this key" }),
+              );
+            }
+
+            const distinctId = session?.person?.distinctId ?? undefined;
+
+            let personId: string | undefined;
+            if (distinctId) {
+              const mapping = yield* dbService.query.personIdentities.findFirst({
+                where: { distinctId, projectId },
+              });
+              personId = mapping?.personId;
+            }
+
+            const results = yield* featureFlagService.evaluateFlagsBatch({
+              personId,
+              distinctId,
+              keys: payload.flagKeys ? [...payload.flagKeys] : undefined,
+              projectId,
+            });
+
+            return new SdkFeatureFlagsResponse({
+              flags: results.map(
+                (r) =>
+                  new SdkFeatureFlagResult({
+                    enabled: r.enabled,
+                    key: r.key,
+                    payload: r.payload,
+                    variantKey: r.variantKey,
+                  }),
+              ),
+            });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            FeatureFlagServiceError: (e) => Effect.fail(new ApiSdkServiceError({ cause: e.cause })),
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiSdkServiceError({ cause: String(e.message) })),
+          }),
+        ),
+      )
+      .handle("registerDevice", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const session = yield* AuthSession;
+            const project = session?.projects[0];
+            if (!project) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No project associated with this SDK authentication session",
+                  message: "No project associated with this SDK authentication session",
+                }),
+              );
+            }
+            yield* requireNotificationsEnabled(project.organizationId);
+            const projectId = project.id;
+            const distinctId = session?.person?.distinctId;
+            if (!distinctId) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No SDK person identity found in this authentication session",
+                  message: "No SDK person identity found in this authentication session",
+                }),
+              );
+            }
+
+            // Resolve the CANONICAL caller person from the (spoofable) distinct
+            // id, creating an anonymous person if needed — ownership is bound
+            // here server-side, never trusted from the raw header downstream.
+            const resolution = yield* personIdentityService.resolveDistinctId({
+              projectId,
+              distinctId,
+              shouldCreatePerson: true,
+              eventTimestamp: new Date(),
+              setAttributes: {},
+              setOnceAttributes: {},
+            });
+            const callerPersonId = resolution.identity.personId;
+            if (!callerPersonId) {
+              return yield* Effect.fail(
+                new ApiPushDeviceServiceError({ cause: "could not resolve caller person" }),
+              );
+            }
+
+            const { pushDeviceTokenId } = yield* notificationTokenService.register({
+              projectId,
+              callerPersonId,
+              platform: payload.platform,
+              provider: payload.provider,
+              platformToken: payload.platformToken,
+              bundleId: payload.bundleId,
+              environment: payload.environment,
+              previousPushDeviceTokenId: payload.previousPushDeviceTokenId,
+            });
+            return new RegisterDeviceResponse({ pushDeviceTokenId });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            PersonServiceError: (e) =>
+              Effect.fail(new ApiPushDeviceServiceError({ cause: String(e.cause) })),
+            NotificationTokenServiceError: (e) =>
+              Effect.fail(new ApiPushDeviceServiceError({ cause: e.cause })),
+            InvalidPushMessageError: (e) =>
+              Effect.fail(new ApiPushDeviceValidationError({ message: e.message })),
+          }),
+        ),
+      )
+      .handle("refreshDevice", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const session = yield* AuthSession;
+            const project = session?.projects[0];
+            if (!project) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No project associated with this SDK authentication session",
+                  message: "No project associated with this SDK authentication session",
+                }),
+              );
+            }
+            yield* requireNotificationsEnabled(project.organizationId);
+            const projectId = project.id;
+            const distinctId = session?.person?.distinctId;
+            if (!distinctId) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No SDK person identity found in this authentication session",
+                  message: "No SDK person identity found in this authentication session",
+                }),
+              );
+            }
+
+            // Do NOT create a person here: a non-existent person cannot own the
+            // device, so an unresolved caller maps to the UNIFORM NotFound.
+            const resolution = yield* personIdentityService.resolveDistinctId({
+              projectId,
+              distinctId,
+              shouldCreatePerson: false,
+              eventTimestamp: new Date(),
+              setAttributes: {},
+              setOnceAttributes: {},
+            });
+            const callerPersonId = resolution.identity.personId;
+            if (!callerPersonId) {
+              return yield* Effect.fail(
+                new ApiPushDeviceNotFoundError({ message: "device token not found" }),
+              );
+            }
+
+            yield* notificationTokenService.refresh({
+              projectId,
+              callerPersonId,
+              pushDeviceTokenId: payload.pushDeviceTokenId,
+              newPlatformToken: payload.platformToken,
+            });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            PersonServiceError: (e) =>
+              Effect.fail(new ApiPushDeviceServiceError({ cause: String(e.cause) })),
+            NotificationTokenServiceError: (e) =>
+              Effect.fail(new ApiPushDeviceServiceError({ cause: e.cause })),
+            PushDeviceTokenNotFoundError: () =>
+              Effect.fail(new ApiPushDeviceNotFoundError({ message: "device token not found" })),
+          }),
+        ),
+      )
+      .handle("unregisterDevice", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const session = yield* AuthSession;
+            const project = session?.projects[0];
+            if (!project) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No project associated with this SDK authentication session",
+                  message: "No project associated with this SDK authentication session",
+                }),
+              );
+            }
+            yield* requireNotificationsEnabled(project.organizationId);
+            const projectId = project.id;
+            const distinctId = session?.person?.distinctId;
+            if (!distinctId) {
+              return yield* Effect.fail(
+                new ApiAuthenticationError({
+                  cause: "No SDK person identity found in this authentication session",
+                  message: "No SDK person identity found in this authentication session",
+                }),
+              );
+            }
+
+            const resolution = yield* personIdentityService.resolveDistinctId({
+              projectId,
+              distinctId,
+              shouldCreatePerson: false,
+              eventTimestamp: new Date(),
+              setAttributes: {},
+              setOnceAttributes: {},
+            });
+            const callerPersonId = resolution.identity.personId;
+            if (!callerPersonId) {
+              return yield* Effect.fail(
+                new ApiPushDeviceNotFoundError({ message: "device token not found" }),
+              );
+            }
+
+            yield* notificationTokenService.unregister({
+              projectId,
+              callerPersonId,
+              pushDeviceTokenId: payload.pushDeviceTokenId,
+            });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            PersonServiceError: (e) =>
+              Effect.fail(new ApiPushDeviceServiceError({ cause: String(e.cause) })),
+            NotificationTokenServiceError: (e) =>
+              Effect.fail(new ApiPushDeviceServiceError({ cause: e.cause })),
+            PushDeviceTokenNotFoundError: () =>
+              Effect.fail(new ApiPushDeviceNotFoundError({ message: "device token not found" })),
+          }),
+        ),
+      );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/users.ts b/apps/backend/src/routes/v1/users.ts
new file mode 100644
index 000000000..07847f427
--- /dev/null
+++ b/apps/backend/src/routes/v1/users.ts
@@ -0,0 +1,21 @@
+import { User, VoidhashV1Api } from "@voidhash/api-contracts";
+import { ApiAuthenticationError } from "@voidhash/api-contracts/errors";
+import { UserService } from "@voidhash/core/services";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const UsersGroupLive = HttpApiBuilder.group(VoidhashV1Api, "users", (handlers) =>
+  Effect.gen(function* () {
+    const userService = yield* UserService;
+    return handlers.handle("getUser", () =>
+      bridgeAuthSession(userService.getUser().pipe(Effect.map((user) => new User(user)))).pipe(
+        Effect.catchTags({
+          AuthenticationError: (e) =>
+            Effect.fail(new ApiAuthenticationError({ cause: e.cause, message: e.message })),
+        }),
+      ),
+    );
+  }),
+);
diff --git a/apps/backend/src/routes/v1/webhooks.ts b/apps/backend/src/routes/v1/webhooks.ts
new file mode 100644
index 000000000..64d707c84
--- /dev/null
+++ b/apps/backend/src/routes/v1/webhooks.ts
@@ -0,0 +1,233 @@
+import {
+  VoidhashV1Api,
+  WebhookDelivery,
+  WebhookDeliveryAttempt,
+  WebhookDeliveryWithAttempts,
+  WebhookEndpoint,
+} from "@voidhash/api-contracts";
+import {
+  ApiActionForbiddenError,
+  ApiWebhookDeliveryNotFoundError,
+  ApiWebhookEndpointNotFoundError,
+  ApiWebhookServiceError,
+  ApiWebhookValidationError,
+} from "@voidhash/api-contracts/errors";
+import { WebhookManagerService } from "@voidhash/core/services/webhookManager/WebhookManagerService";
+import { extractAuthorizedProjectId } from "@voidhash/core/utils";
+import { AuthSession } from "@voidhash/rpc";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { bridgeAuthSession } from "../../ApiMiddlewares.ts";
+
+export const WebhooksGroupLive = HttpApiBuilder.group(VoidhashV1Api, "webhooks", (handlers) =>
+  Effect.gen(function* () {
+    const webhookManagerService = yield* WebhookManagerService;
+
+    return handlers
+      .handle("createWebhookEndpoint", ({ payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const endpoint = yield* webhookManagerService.createEndpoint({ ...payload, projectId });
+            return new WebhookEndpoint(endpoint);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookValidationError: (e) =>
+              Effect.fail(new ApiWebhookValidationError({ message: e.message })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("listWebhookEndpoints", () =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const endpoints = yield* webhookManagerService.getEndpoints({ projectId });
+            return endpoints.map((endpoint) => new WebhookEndpoint(endpoint));
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("getWebhookEndpoint", ({ params }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const endpoint = yield* webhookManagerService.getEndpointById({
+              endpointId: params.endpointId,
+              projectId,
+            });
+            return new WebhookEndpoint(endpoint);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookEndpointNotFoundError: (e) =>
+              Effect.fail(new ApiWebhookEndpointNotFoundError({ endpointId: e.endpointId })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("updateWebhookEndpoint", ({ params, payload }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const endpoint = yield* webhookManagerService.updateEndpoint({
+              ...payload,
+              endpointId: params.endpointId,
+              projectId,
+            });
+            return new WebhookEndpoint(endpoint);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookEndpointNotFoundError: (e) =>
+              Effect.fail(new ApiWebhookEndpointNotFoundError({ endpointId: e.endpointId })),
+            WebhookValidationError: (e) =>
+              Effect.fail(new ApiWebhookValidationError({ message: e.message })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("deleteWebhookEndpoint", ({ params }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            return yield* webhookManagerService.deleteEndpoint({
+              endpointId: params.endpointId,
+              projectId,
+            });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookEndpointNotFoundError: (e) =>
+              Effect.fail(new ApiWebhookEndpointNotFoundError({ endpointId: e.endpointId })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("rotateWebhookSecret", ({ params }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const endpoint = yield* webhookManagerService.rotateSecret({
+              endpointId: params.endpointId,
+              projectId,
+            });
+            return new WebhookEndpoint(endpoint);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookEndpointNotFoundError: (e) =>
+              Effect.fail(new ApiWebhookEndpointNotFoundError({ endpointId: e.endpointId })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("testWebhookEndpoint", ({ params }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const delivery = yield* webhookManagerService.testEndpoint({
+              endpointId: params.endpointId,
+              projectId,
+            });
+            return new WebhookDelivery(delivery);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookEndpointNotFoundError: (e) =>
+              Effect.fail(new ApiWebhookEndpointNotFoundError({ endpointId: e.endpointId })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("listWebhookDeliveries", () =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const deliveries = yield* webhookManagerService.getDeliveries({ projectId });
+            return deliveries.map((delivery) => new WebhookDelivery(delivery));
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("getWebhookDelivery", ({ params }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const delivery = yield* webhookManagerService.getDeliveryById({
+              deliveryId: params.deliveryId,
+              projectId,
+            });
+            return new WebhookDeliveryWithAttempts({
+              ...delivery,
+              attempts: delivery.attempts.map((attempt) => new WebhookDeliveryAttempt(attempt)),
+            });
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookDeliveryNotFoundError: (e) =>
+              Effect.fail(new ApiWebhookDeliveryNotFoundError({ deliveryId: e.deliveryId })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      )
+      .handle("retryWebhookDelivery", ({ params }) =>
+        bridgeAuthSession(
+          Effect.gen(function* () {
+            const authSession = yield* AuthSession;
+            const projectId = yield* extractAuthorizedProjectId(authSession);
+            const delivery = yield* webhookManagerService.retryDelivery({
+              deliveryId: params.deliveryId,
+              projectId,
+            });
+            return new WebhookDelivery(delivery);
+          }),
+        ).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (e) =>
+              Effect.fail(new ApiActionForbiddenError({ message: e.message })),
+            WebhookDeliveryNotFoundError: (e) =>
+              Effect.fail(new ApiWebhookDeliveryNotFoundError({ deliveryId: e.deliveryId })),
+            WebhookValidationError: (e) =>
+              Effect.fail(new ApiWebhookValidationError({ message: e.message })),
+            WebhookServiceError: (e) => Effect.fail(new ApiWebhookServiceError({ cause: e.cause })),
+          }),
+        ),
+      );
+  }),
+);
diff --git a/apps/backend/src/routes/webhook-endpoints/apple-server-to-server.ts b/apps/backend/src/routes/webhook-endpoints/apple-server-to-server.ts
new file mode 100644
index 000000000..82532093b
--- /dev/null
+++ b/apps/backend/src/routes/webhook-endpoints/apple-server-to-server.ts
@@ -0,0 +1,119 @@
+/**
+ * Apple App Store Server-to-Server notification endpoint —
+ * `POST /api/v1/webhook-endpoints/apple-server-to-server/:paymentProviderConfigurationId`.
+ *
+ * Decodes the signed-payload envelope (`{ signedPayload: string }`) and
+ * forwards to `AppStorePaymentProviderService.acceptServerNotification`,
+ * which owns Apple JWS verification, transaction decoding, and dispatch to
+ * the matching `record*` method. The JWS body itself is opaque at this layer.
+ *
+ * The backend supplies the public App Store provider and webhook-handler
+ * engine. Terminal signature or payload failures are acknowledged by that
+ * engine, while transient infrastructure failures surface as 500 so Apple can
+ * retry delivery.
+ */
+import {
+  AppStorePaymentProviderService,
+  AppStorePaymentProviderServiceError,
+} from "@voidhash/core/services";
+import { Effect, Layer, Schema } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+
+const AppleServerToServerPathParamsSchema = Schema.Struct({
+  paymentProviderConfigurationId: Schema.String,
+});
+
+/**
+ * Wire shape of the Apple S2S notification envelope — a single JWS in
+ * `signedPayload`. Mirrors `ResponseBodyV2Schema` from
+ * `@voidhash/app-store-server-sdk`; inlined here so the new package
+ * doesn't have to depend on that SDK just to decode the envelope.
+ */
+const AppleServerNotificationBodySchema = Schema.Struct({
+  signedPayload: Schema.String,
+});
+
+const decodeAppleServerNotificationBody = Schema.decodeUnknownEffect(
+  AppleServerNotificationBodySchema,
+);
+
+const invalidPayloadResponse = HttpServerResponse.json(
+  { error: "Invalid Apple server notification payload" },
+  { status: 400 },
+);
+
+const registerAppleServerToServerNotificationRoute = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+
+  yield* router.add(
+    "POST",
+    "/api/v1/webhook-endpoints/apple-server-to-server/:paymentProviderConfigurationId",
+    Effect.gen(function* () {
+      const request = yield* HttpServerRequest.HttpServerRequest;
+      const pathParamsResult = yield* Effect.result(
+        HttpRouter.schemaPathParams(AppleServerToServerPathParamsSchema),
+      );
+
+      if (pathParamsResult._tag === "Failure") {
+        return yield* invalidPayloadResponse;
+      }
+
+      const bodyResult = yield* Effect.result(
+        request.json.pipe(Effect.flatMap(decodeAppleServerNotificationBody)),
+      );
+
+      if (bodyResult._tag === "Failure") {
+        return yield* invalidPayloadResponse;
+      }
+
+      const appStorePaymentProviderService = yield* AppStorePaymentProviderService;
+      yield* appStorePaymentProviderService.acceptServerNotification({
+        paymentProviderConfigurationId: pathParamsResult.success.paymentProviderConfigurationId,
+        receivedAt: new Date(),
+        signedPayload: bodyResult.success.signedPayload,
+      });
+
+      yield* Effect.logInfo("Apple server-to-server notification accepted", {
+        paymentProviderConfigurationId: pathParamsResult.success.paymentProviderConfigurationId,
+        signedPayloadLength: bodyResult.success.signedPayload.length,
+      });
+
+      return yield* HttpServerResponse.json({ received: true }, { status: 202 });
+    }).pipe(
+      // The real handler resolves terminal failures (signature/verification/
+      // parse/app-identifier mismatches) to `{ accepted: true, handled: false }`
+      // — those reach the 202 ack above so Apple stops retrying. An
+      // `AppStorePaymentProviderServiceError` therefore signals a TRANSIENT /
+      // infrastructure failure (config lookup, DB, Apple 5xx), which must return
+      // 5xx so Apple's retry loop re-delivers the notification — never 501,
+      // which Apple treats as terminal.
+      Effect.catchTag(
+        "AppStorePaymentProviderServiceError",
+        (error: AppStorePaymentProviderServiceError) =>
+          Effect.gen(function* () {
+            yield* Effect.logWarning(
+              "Apple server-to-server notification failed transiently; signaling retry",
+              { cause: error.cause },
+            );
+            return yield* HttpServerResponse.json(
+              { error: "Apple server notification processing failed", received: false },
+              { status: 500 },
+            );
+          }),
+      ),
+      Effect.catch((error) =>
+        Effect.gen(function* () {
+          yield* Effect.logError("Apple server-to-server notification error", error);
+          return yield* HttpServerResponse.json(
+            { error: "Apple server notification processing failed" },
+            { status: 500 },
+          );
+        }),
+      ),
+    ),
+  );
+});
+
+export const AppleServerToServerNotificationRouteLayer = Layer.effectDiscard(
+  registerAppleServerToServerNotificationRoute,
+);
diff --git a/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts b/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts
new file mode 100644
index 000000000..ed3086db2
--- /dev/null
+++ b/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts
@@ -0,0 +1,106 @@
+/**
+ * Google Play Real-Time Developer Notification (RTDN) endpoint —
+ * `POST /api/v1/webhook-endpoints/google-play-rtdn/:paymentProviderConfigurationId`.
+ *
+ * Google delivers RTDN through a Pub/Sub PUSH subscription, so the HTTP body is
+ * a Pub/Sub envelope (`{ message: { data: base64(DeveloperNotification), ... } }`).
+ * This handler forwards the raw envelope to
+ * `GooglePlayPaymentProviderService.acceptRtdnNotification`, which owns the
+ * base64 decode, the authoritative Play API re-fetch, and dispatch to the
+ * matching `record*` method.
+ *
+ * Ack semantics mirror Pub/Sub's retry contract: terminal/business outcomes
+ * (bad envelope, unmapped product, verified-but-unhandled) are folded into a
+ * 2xx ack so Pub/Sub stops redelivering; only a transient/infra failure
+ * (`GooglePlayPaymentProviderServiceError`) returns 5xx so Pub/Sub re-delivers.
+ */
+import {
+  GooglePlayPaymentProviderService,
+  GooglePlayPaymentProviderServiceError,
+} from "@voidhash/core/services";
+import { Effect, Layer, Schema } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+
+const GooglePlayRtdnPathParamsSchema = Schema.Struct({
+  paymentProviderConfigurationId: Schema.String,
+});
+
+const invalidPayloadResponse = HttpServerResponse.json(
+  { error: "Invalid Google Play RTDN payload" },
+  { status: 400 },
+);
+
+const registerGooglePlayRtdnNotificationRoute = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+
+  yield* router.add(
+    "POST",
+    "/api/v1/webhook-endpoints/google-play-rtdn/:paymentProviderConfigurationId",
+    Effect.gen(function* () {
+      const request = yield* HttpServerRequest.HttpServerRequest;
+      const pathParamsResult = yield* Effect.result(
+        HttpRouter.schemaPathParams(GooglePlayRtdnPathParamsSchema),
+      );
+
+      if (pathParamsResult._tag === "Failure") {
+        return yield* invalidPayloadResponse;
+      }
+
+      // The Pub/Sub envelope shape is validated inside the service (it owns the
+      // base64/RTDN decode); here we only need the parsed JSON body.
+      const bodyResult = yield* Effect.result(request.json);
+      if (bodyResult._tag === "Failure") {
+        return yield* invalidPayloadResponse;
+      }
+
+      const googlePlayPaymentProviderService = yield* GooglePlayPaymentProviderService;
+      const result = yield* googlePlayPaymentProviderService.acceptRtdnNotification({
+        paymentProviderConfigurationId: pathParamsResult.success.paymentProviderConfigurationId,
+        pubsubBody: bodyResult.success,
+        receivedAt: new Date(),
+      });
+
+      yield* Effect.logInfo("Google Play RTDN notification accepted", {
+        handled: result.handled,
+        notificationType: result.notificationType,
+        paymentProviderConfigurationId: pathParamsResult.success.paymentProviderConfigurationId,
+      });
+
+      // 204 acks the Pub/Sub delivery (terminal + handled outcomes both ack).
+      return yield* HttpServerResponse.json({ received: true }, { status: 200 });
+    }).pipe(
+      // The service folds terminal/business outcomes into a success value, so a
+      // `GooglePlayPaymentProviderServiceError` signals a TRANSIENT/infra failure
+      // (config lookup, DB, Play 5xx/rate-limit) — return 5xx so Pub/Sub
+      // re-delivers. Never return a status Pub/Sub would treat differently for a
+      // transient error.
+      Effect.catchTag(
+        "GooglePlayPaymentProviderServiceError",
+        (error: GooglePlayPaymentProviderServiceError) =>
+          Effect.gen(function* () {
+            yield* Effect.logWarning(
+              "Google Play RTDN notification failed transiently; signaling retry",
+              { cause: error.cause },
+            );
+            return yield* HttpServerResponse.json(
+              { error: "Google Play RTDN processing failed", received: false },
+              { status: 500 },
+            );
+          }),
+      ),
+      Effect.catch((error) =>
+        Effect.gen(function* () {
+          yield* Effect.logError("Google Play RTDN notification error", error);
+          return yield* HttpServerResponse.json(
+            { error: "Google Play RTDN processing failed" },
+            { status: 500 },
+          );
+        }),
+      ),
+    ),
+  );
+});
+
+export const GooglePlayRtdnNotificationRouteLayer = Layer.effectDiscard(
+  registerGooglePlayRtdnNotificationRoute,
+);
diff --git a/apps/backend/src/routes/webhook-endpoints/stripe.ts b/apps/backend/src/routes/webhook-endpoints/stripe.ts
new file mode 100644
index 000000000..5025a8db1
--- /dev/null
+++ b/apps/backend/src/routes/webhook-endpoints/stripe.ts
@@ -0,0 +1,108 @@
+/**
+ * Stripe webhook endpoint —
+ * `POST /api/v1/webhook-endpoints/stripe/:paymentProviderConfigurationId`.
+ *
+ * Stripe signs the webhook with an HMAC over the EXACT raw request body, so
+ * this handler reads `request.text` (never `request.json`) and forwards the raw
+ * body + the `Stripe-Signature` header to
+ * `StripePaymentProviderService.acceptWebhookEvent`, which owns verification,
+ * decoding, and dispatch to the matching `record*` method.
+ *
+ * HTTP contract (Stripe retries on any non-2xx):
+ *   - verified + handled / parked / permanently-unhandleable → 200 (stop retrying),
+ *   - bad signature → 400 (permanent; visible in the Stripe dashboard),
+ *   - unknown configuration/project → 404 (permanent),
+ *   - transient infra failure (DB / Stripe API) → 500 (Stripe re-delivers).
+ * The kind→status mapping is driven by `StripePaymentProviderServiceError.kind`.
+ */
+import {
+  StripePaymentProviderService,
+  StripePaymentProviderServiceError,
+} from "@voidhash/core/services";
+import { Effect, Layer, Schema } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+
+const StripeWebhookPathParamsSchema = Schema.Struct({
+  paymentProviderConfigurationId: Schema.String,
+});
+
+const invalidPayloadResponse = HttpServerResponse.json(
+  { error: "Invalid Stripe webhook request" },
+  { status: 400 },
+);
+
+const registerStripeWebhookRoute = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+
+  yield* router.add(
+    "POST",
+    "/api/v1/webhook-endpoints/stripe/:paymentProviderConfigurationId",
+    Effect.gen(function* () {
+      const request = yield* HttpServerRequest.HttpServerRequest;
+      const pathParamsResult = yield* Effect.result(
+        HttpRouter.schemaPathParams(StripeWebhookPathParamsSchema),
+      );
+      if (pathParamsResult._tag === "Failure") {
+        return yield* invalidPayloadResponse;
+      }
+
+      const signatureHeader = request.headers["stripe-signature"] ?? "";
+      if (!signatureHeader) {
+        return yield* HttpServerResponse.json(
+          { error: "Missing stripe-signature header" },
+          { status: 400 },
+        );
+      }
+
+      // Raw body bytes — Stripe's HMAC is computed over the exact payload, so we
+      // must NOT parse/re-serialize before verification.
+      const rawBody = yield* request.text;
+
+      const stripePaymentProviderService = yield* StripePaymentProviderService;
+      const result = yield* stripePaymentProviderService.acceptWebhookEvent({
+        paymentProviderConfigurationId: pathParamsResult.success.paymentProviderConfigurationId,
+        rawBody,
+        receivedAt: new Date(),
+        signatureHeader,
+      });
+
+      yield* Effect.logInfo("Stripe webhook accepted", {
+        eventId: result.eventId,
+        eventType: result.eventType,
+        handled: result.handled,
+        paymentProviderConfigurationId: pathParamsResult.success.paymentProviderConfigurationId,
+      });
+
+      return yield* HttpServerResponse.json({ received: true }, { status: 200 });
+    }).pipe(
+      Effect.catchTag(
+        "StripePaymentProviderServiceError",
+        (error: StripePaymentProviderServiceError) =>
+          Effect.gen(function* () {
+            const status =
+              error.kind === "signature" ? 400 : error.kind === "not_found" ? 404 : 500;
+            yield* Effect.logWarning("Stripe webhook processing failed", {
+              cause: error.cause,
+              kind: error.kind ?? "transient",
+              status,
+            });
+            return yield* HttpServerResponse.json(
+              { error: "Stripe webhook processing failed", received: false },
+              { status },
+            );
+          }),
+      ),
+      Effect.catch((error) =>
+        Effect.gen(function* () {
+          yield* Effect.logError("Stripe webhook error", error);
+          return yield* HttpServerResponse.json(
+            { error: "Stripe webhook processing failed" },
+            { status: 500 },
+          );
+        }),
+      ),
+    ),
+  );
+});
+
+export const StripeWebhookNotificationRouteLayer = Layer.effectDiscard(registerStripeWebhookRoute);
diff --git a/apps/backend/src/routes/webhooks/workos.ts b/apps/backend/src/routes/webhooks/workos.ts
new file mode 100644
index 000000000..cd1250296
--- /dev/null
+++ b/apps/backend/src/routes/webhooks/workos.ts
@@ -0,0 +1,314 @@
+/**
+ * WorkOS webhook endpoint — `POST /api/webhooks/workos`.
+ *
+ * WorkOS is the source of truth for users and organizations. The handler
+ * verifies the WorkOS signature, persists the raw event for idempotency, and
+ * applies public user/organization mutations locally. Optional multi-user
+ * membership projection is delegated through an extension port.
+ *
+ * - Bad signature → 400.
+ * - Idempotent duplicate (same `event.id` already recorded) → 200.
+ * - Processing failure → 500 (WorkOS retries on the same `event.id`).
+ */
+import type {
+  Event as WorkosEvent,
+  Organization as WorkosOrganization,
+  User as WorkosUser,
+} from "@workos-inc/node";
+import { LocalUserSessionService } from "@voidhash/core/services/auth/LocalUserSessionService";
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import { OrganizationMembershipWebhookPort } from "@voidhash/core/services/organizations/OrganizationMembershipWebhookPort";
+import { generateId } from "@voidhash/core/utils";
+import {
+  Db,
+  eq,
+  organization,
+  user,
+  workosWebhookEvents,
+  type InsertOrganization,
+  type InsertWorkosWebhookEvent,
+} from "@voidhash/db";
+import { Cause, Context, Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+
+type DbService = Context.Service.Shape<typeof Db>;
+type WorkosShape = Context.Service.Shape<typeof Workos>;
+type LocalUserSessionShape = Context.Service.Shape<typeof LocalUserSessionService>;
+type MembershipWebhookShape = Context.Service.Shape<typeof OrganizationMembershipWebhookPort>;
+
+class WebhookProcessingError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "WebhookProcessingError";
+  }
+}
+
+const describeFailure = (failure: unknown): string => {
+  const message = failure instanceof Error ? failure.message : String(failure);
+  const cause = (failure as { readonly cause?: unknown } | null)?.cause;
+  if (!cause) return message;
+  const causeMessage =
+    cause instanceof Error
+      ? cause.message
+      : (() => {
+          try {
+            return typeof cause === "object" ? JSON.stringify(cause) : String(cause);
+          } catch {
+            return String(cause);
+          }
+        })();
+  return causeMessage && causeMessage !== message ? `${message}: ${causeMessage}` : message;
+};
+
+const recordWebhookReceived = (db: DbService, event: InsertWorkosWebhookEvent) =>
+  db.insert(workosWebhookEvents).values(event);
+
+const findWebhookRecordByExternalId = (db: DbService, externalEventId: string) =>
+  db.query.workosWebhookEvents.findFirst({
+    where: { externalEventId },
+  });
+
+const refreshWebhookRecordForRetry = (
+  db: DbService,
+  input: Pick<InsertWorkosWebhookEvent, "eventType" | "payload"> & { readonly id: string },
+) =>
+  db
+    .update(workosWebhookEvents)
+    .set({
+      error: null,
+      eventType: input.eventType,
+      payload: input.payload,
+    })
+    .where(eq(workosWebhookEvents.id, input.id));
+
+const markWebhookProcessed = (db: DbService, id: string) =>
+  db
+    .update(workosWebhookEvents)
+    .set({ error: null, processedAt: new Date() })
+    .where(eq(workosWebhookEvents.id, id));
+
+const markWebhookError = (db: DbService, id: string, error: string) =>
+  db.update(workosWebhookEvents).set({ error }).where(eq(workosWebhookEvents.id, id));
+
+const isOrganizationEvent = (
+  e: WorkosEvent,
+): e is Extract<WorkosEvent, { event: `organization.${string}` }> =>
+  e.event === "organization.created" ||
+  e.event === "organization.updated" ||
+  e.event === "organization.deleted";
+
+const isMembershipEvent = (
+  e: WorkosEvent,
+): e is Extract<WorkosEvent, { event: `organization_membership.${string}` }> =>
+  e.event === "organization_membership.created" ||
+  e.event === "organization_membership.updated" ||
+  e.event === "organization_membership.deleted";
+
+const isUserEvent = (e: WorkosEvent): e is Extract<WorkosEvent, { event: `user.${string}` }> =>
+  e.event === "user.created" || e.event === "user.updated" || e.event === "user.deleted";
+
+const upsertOrganizationFromWorkos = (db: DbService, org: WorkosOrganization) =>
+  Effect.gen(function* () {
+    const existing = yield* db.query.organization.findFirst({
+      where: { workosOrganizationId: org.id },
+    });
+    if (existing) {
+      yield* db
+        .update(organization)
+        .set({ name: org.name })
+        .where(eq(organization.workosOrganizationId, org.id));
+      return;
+    }
+
+    // `externalId` carries the local id we stamped on WorkOS at create time.
+    // Re-link a row that already exists under that id (a direct existence
+    // check, not a length heuristic); never adopt the external id as a fresh
+    // primary key, so a foreign external id can't leak into ours.
+    if (org.externalId) {
+      const existingByExternalId = yield* db.query.organization.findFirst({
+        where: { id: org.externalId },
+      });
+      if (existingByExternalId) {
+        yield* db
+          .update(organization)
+          .set({ name: org.name, workosOrganizationId: org.id })
+          .where(eq(organization.id, existingByExternalId.id));
+        return;
+      }
+    }
+
+    // We weren't the creator (e.g., org created in the WorkOS Admin Portal
+    // directly). Mint a local row from scratch with our own generated id.
+    const newOrg: InsertOrganization = {
+      createdAt: new Date(),
+      id: generateId("organization"),
+      logo: null,
+      metadata: null,
+      name: org.name,
+      slug: `${(org.externalId ?? org.id).slice(0, 12)}-${crypto.randomUUID().slice(0, 6)}`,
+      workosOrganizationId: org.id,
+    };
+    yield* db.insert(organization).values(newOrg);
+  });
+
+const deleteOrganizationByWorkosId = (db: DbService, workosOrganizationId: string) =>
+  db.delete(organization).where(eq(organization.workosOrganizationId, workosOrganizationId));
+
+const deleteUserByWorkosUser = (db: DbService, workosUser: WorkosUser) =>
+  Effect.gen(function* () {
+    const existing = yield* db.query.user.findFirst({
+      where: { workosUserId: workosUser.id },
+    });
+    if (existing) {
+      yield* db.delete(user).where(eq(user.id, existing.id));
+      return;
+    }
+    yield* db.delete(user).where(eq(user.email, workosUser.email));
+  });
+
+const processEvent = (
+  db: DbService,
+  workosAuth: WorkosShape,
+  localUserSessions: LocalUserSessionShape,
+  membershipWebhooks: MembershipWebhookShape,
+  event: WorkosEvent,
+): Effect.Effect<void, unknown, Db> => {
+  if (isOrganizationEvent(event)) {
+    if (event.event === "organization.deleted") {
+      return deleteOrganizationByWorkosId(db, event.data.id);
+    }
+    return upsertOrganizationFromWorkos(db, event.data);
+  }
+  if (isMembershipEvent(event)) {
+    if (event.event === "organization_membership.deleted") {
+      return membershipWebhooks.processEvent({
+        _tag: "Delete",
+        externalMembershipId: event.data.id,
+      });
+    }
+    const role =
+      typeof event.data.role === "string"
+        ? event.data.role
+        : (event.data.role?.slug ?? "member");
+    return membershipWebhooks.processEvent({
+      _tag: "Upsert",
+      membership: {
+        externalId: event.data.id,
+        externalOrganizationId: event.data.organizationId,
+        externalUserId: event.data.userId,
+        role,
+      },
+    });
+  }
+  if (isUserEvent(event)) {
+    if (event.event === "user.deleted") {
+      return deleteUserByWorkosUser(db, event.data);
+    }
+    return localUserSessions.resolveLocalUser(event.data).pipe(Effect.asVoid);
+  }
+  return Effect.void;
+};
+
+const handleWebhook = Effect.gen(function* () {
+  const db = yield* Db;
+  const workosAuth = yield* Workos;
+  const localUserSessions = yield* LocalUserSessionService;
+  const membershipWebhooks = yield* OrganizationMembershipWebhookPort;
+  const request = yield* HttpServerRequest.HttpServerRequest;
+
+  const rawBody = yield* request.text;
+  const signatureHeader = request.headers["workos-signature"] ?? "";
+
+  if (!signatureHeader) {
+    return yield* HttpServerResponse.json(
+      { error: "Missing workos-signature header" },
+      { status: 400 },
+    );
+  }
+
+  const event = yield* workosAuth.verifyWebhook({ rawBody, signatureHeader }).pipe(
+    Effect.catch((error) => {
+      // Surface the underlying SDK reason (e.g. "Signature hash does not match
+      // …", "Timestamp outside the tolerance zone") rather than the generic
+      // wrapper message, so signature/secret problems are diagnosable.
+      const detail =
+        error.cause instanceof Error ? error.cause.message : String(error.cause ?? error.message);
+      return Effect.logError(`WorkOS webhook signature verification failed: ${detail}`).pipe(
+        Effect.andThen(Effect.fail(new WebhookProcessingError(detail))),
+      );
+    }),
+  );
+
+  const rowId = generateId("workosWebhookEvent");
+  const insertResult = yield* Effect.result(
+    recordWebhookReceived(db, {
+      createdAt: new Date(),
+      eventType: event.event,
+      externalEventId: event.id,
+      id: rowId,
+      payload: event as unknown as object,
+    }),
+  );
+
+  let eventRowId: string = rowId;
+  if (insertResult._tag === "Failure") {
+    const existing = yield* findWebhookRecordByExternalId(db, event.id);
+    if (!existing) {
+      const message = describeFailure(insertResult.failure);
+      return yield* Effect.fail(new WebhookProcessingError(message));
+    }
+
+    if (existing.processedAt) {
+      yield* Effect.logInfo(`WorkOS webhook ${event.id} already processed; skipping`);
+      return yield* HttpServerResponse.json({ received: true, duplicate: true });
+    }
+
+    eventRowId = existing.id;
+    yield* refreshWebhookRecordForRetry(db, {
+      eventType: event.event,
+      id: existing.id,
+      payload: event as unknown as object,
+    });
+  }
+
+  const processed = yield* Effect.result(
+    processEvent(db, workosAuth, localUserSessions, membershipWebhooks, event),
+  );
+  if (processed._tag === "Failure") {
+    const message = describeFailure(processed.failure);
+    yield* markWebhookError(db, eventRowId, message.slice(0, 500)).pipe(
+      Effect.catch(() => Effect.void),
+    );
+    return yield* Effect.fail(new WebhookProcessingError(message));
+  }
+
+  yield* markWebhookProcessed(db, eventRowId);
+  return yield* HttpServerResponse.json({ received: true });
+});
+
+const registerWorkosWebhookRoute = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+
+  yield* router.add(
+    "POST",
+    "/api/webhooks/workos",
+    handleWebhook.pipe(
+      // catchCause (not catch) so defects — a raw driver/crypto throw, not just
+      // the typed error channel — are logged with their full cause instead of
+      // escaping the worker as an opaque exception ("[object Object]").
+      Effect.catchCause((cause) =>
+        Effect.gen(function* () {
+          // Stringify the cause into the message — passing the cause object as a
+          // second arg renders as "[object Object]" in the Workers log pipeline.
+          yield* Effect.logError(`WorkOS webhook error: ${Cause.pretty(cause)}`);
+          return yield* HttpServerResponse.json(
+            { error: "Webhook processing failed" },
+            { status: 500 },
+          );
+        }),
+      ),
+    ),
+  );
+});
+
+export const WorkosWebhookRouteLayer = Layer.effectDiscard(registerWorkosWebhookRoute);
diff --git a/apps/backend/src/rpc-smoke.integration.test.ts b/apps/backend/src/rpc-smoke.integration.test.ts
new file mode 100644
index 000000000..0643e032b
--- /dev/null
+++ b/apps/backend/src/rpc-smoke.integration.test.ts
@@ -0,0 +1,503 @@
+/**
+ * Backend RPC + WorkOS-webhook smoke, run IN-PROCESS against the real backend
+ * stack provisioned once by `packages/core/test/_testing/globalSetup.ts` (the
+ * same deploy the core service integration tests use). Nothing is deployed or
+ * called over the wire here:
+ *
+ *  - **RPC cases** dispatch through the production handler graph
+ *    (`buildBackendRpcServices`) via `RpcTest.makeClient(RpcGroups)` — an
+ *    in-memory client↔server with no HTTP/serialization. The `rpcSmokeCases`
+ *    manifest, its payloads, and the `runRpcSmokeCase` runner are reused
+ *    unchanged; only the transport differs from the old over-the-wire client.
+ *  - **WorkOS webhook cases** POST synthetic, correctly-signed requests to the
+ *    real `buildBackendFetch` route graph via a synthetic `HttpServerRequest`,
+ *    exercising the real SDK signature verification (`TestRealWorkosLive` wraps
+ *    real `verifyWebhook` with faked networked user lookups).
+ *
+ * Infra is real where the deployed stack is real: `Db`/`Clickhouse`/`Workos`
+ * are built from the gated `testConnections`. Only the genuine external/platform
+ * seams are doubled — `WorkosOrgPort` is faked so organization RPCs never
+ * mutate real WorkOS; payment providers use local stubs; the webhook manager
+ * stays a thin DB-backed stub (the production
+ * `webhook-rpcs.ts` passes `projectId: ""`, which the tolerant stub accepts).
+ * The smoke fixture is seeded in-process via `seedSmokeData` (formerly the
+ * `/__test/seed` route).
+ */
+import { Effect, Layer } from "effect";
+import * as HttpServerRequest from "effect/unstable/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/unstable/http/HttpServerResponse";
+import { RpcClient, RpcTest } from "effect/unstable/rpc";
+import { describe, expect, inject, test } from "vitest";
+
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { PaywallArtifactStore, Workos } from "@voidhash/core/services";
+import { Db } from "@voidhash/db";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+import {
+  BackendComponentCompilerStubLive,
+  BackendMimicHostStubLive,
+  BackendNoopIdentityProjectionPublisherLive,
+  BackendPaymentProviderStubsLive,
+  BackendPaywallArtifactStoreStubLive,
+  BackendPaywallAssetConfigLive,
+  BackendPublicFileStoreStubLive,
+  NoBackendFeatures,
+  NoBackendRpcExtension,
+  buildBackendFetch,
+  buildBackendRpcServices,
+} from "./BackendApp.ts";
+import { BackendRpcGroups as RpcGroups } from "./BackendRpcGroups.ts";
+import {
+  TEST_WORKOS_WEBHOOK_SECRET,
+  TestClickhouseLive,
+  TestProjectSchemaCacheLive,
+  TestRealWorkosLive,
+  TestWebhookManagerServiceLive,
+  TestWorkflowPortsLive,
+  TestWorkosOrgPortLive,
+} from "./testing/TestLayers.ts";
+import { TestRpcAuthLive } from "./testing/TestRpcAuth.ts";
+import type { BackendTestConnections } from "./testing/BackendTestConnections.ts";
+import {
+  assertRpcSmokeManifestCoverage,
+  makeRpcSmokeContext,
+  rpcSmokeCases,
+  type RpcSmokeCase,
+  type RpcSmokeContext,
+  type RpcSmokeRole,
+} from "./testing/rpc-smoke-cases.ts";
+import { makeSmokeIds, SMOKE_ROLE_HEADER, SMOKE_RUN_ID_HEADER } from "./testing/smoke-ids.ts";
+import { seedSmokeData } from "./testing/smoke-seed.ts";
+
+/**
+ * Read the gated connection credentials shared by the once-per-run deploy. Fails
+ * loudly when absent or null — that means `globalSetup` failed, or it ran on a
+ * production/preview stage (where `testConnections` is intentionally withheld).
+ */
+const requireTestConnections = (): BackendTestConnections => {
+  const tc = inject("coreStackOutput")?.testConnections ?? null;
+  if (tc === null) {
+    throw new Error(
+      "rpc-smoke: shared deploy output missing or testConnections is null — globalSetup failed, or it ran on a production/preview stage.",
+    );
+  }
+  return tc;
+};
+
+/**
+ * Minimal {@link PlatformRuntime} stub — discharges the runtime-phase marker the
+ * push-dispatch port colors its effects with (the noop dispatch never reads it).
+ */
+const SmokePlatformRuntimeStub = Layer.succeed(PlatformRuntime, PlatformRuntime.of({}));
+
+const SmokePaywallArtifactStoreLive = Layer.sync(PaywallArtifactStore, () => {
+  const objects = new Map<
+    string,
+    { readonly body: Uint8Array; readonly contentType: string | null }
+  >();
+  return PaywallArtifactStore.of({
+    bucketName: "rpc-smoke-paywall-artifacts",
+    getObject: (key) => Effect.succeed(objects.get(key) ?? null),
+    head: (key) =>
+      Effect.succeed(objects.has(key) ? { size: objects.get(key)?.body.length ?? 0 } : null),
+    putObject: ({ body, contentType, key }) =>
+      Effect.sync(() => {
+        objects.set(key, { body, contentType: contentType ?? null });
+      }),
+  });
+});
+
+/** Real `Workos` SDK layer built from the deployed stack's credentials. */
+const workosLayer = (tc: BackendTestConnections): Layer.Layer<Workos> =>
+  Workos.layer({
+    apiKey: Effect.succeed(tc.workos.apiKey),
+    clientId: Effect.succeed(tc.workos.clientId),
+    cookieName: Effect.succeed(tc.workos.cookieName),
+    cookiePassword: Effect.succeed(tc.workos.cookiePassword),
+    webhookSecret: Effect.succeed(tc.workos.webhookSecret),
+  });
+
+/**
+ * In-process infrastructure for the RPC handler graph: real `Db`/`Clickhouse`/
+ * `Workos` from the deployed stack, an in-memory schema cache, a faked
+ * `WorkosOrgPort`, and local payment/paywall/identity stubs.
+ */
+const makeRpcInfra = (tc: BackendTestConnections) =>
+  Layer.mergeAll(
+    Db.layer(tc.db),
+    ClickhouseWebClient.layer(tc.clickhouse).pipe(Layer.orDie),
+    workosLayer(tc),
+    TestProjectSchemaCacheLive,
+    TestWorkosOrgPortLive,
+    BackendMimicHostStubLive,
+    BackendComponentCompilerStubLive,
+    BackendPaymentProviderStubsLive,
+    BackendPaywallAssetConfigLive,
+    SmokePaywallArtifactStoreLive,
+    BackendPublicFileStoreStubLive,
+    BackendNoopIdentityProjectionPublisherLive,
+  );
+
+/**
+ * In-process infrastructure for the WorkOS webhook route: real `Db`, the
+ * real-verify/fake-getUser `Workos` wrapper, and the same stubs otherwise (the
+ * webhook path needs no ClickHouse, so a no-op stands in).
+ */
+const makeWebhookInfra = (tc: BackendTestConnections) =>
+  Layer.mergeAll(
+    Db.layer(tc.db),
+    TestClickhouseLive,
+    TestProjectSchemaCacheLive,
+    TestWorkosOrgPortLive,
+    BackendMimicHostStubLive,
+    BackendComponentCompilerStubLive,
+    BackendPaymentProviderStubsLive,
+    BackendPaywallAssetConfigLive,
+    BackendPaywallArtifactStoreStubLive,
+    BackendPublicFileStoreStubLive,
+    BackendNoopIdentityProjectionPublisherLive,
+    TestRealWorkosLive,
+  );
+
+const smokeHeaders = (context: RpcSmokeContext, role: RpcSmokeRole) => ({
+  [SMOKE_ROLE_HEADER]: role,
+  [SMOKE_RUN_ID_HEADER]: context.runId,
+});
+
+const formatFailure = (failure: unknown): string => {
+  if (failure instanceof Error) {
+    const entries = Object.entries(failure as unknown as Record<string, unknown>);
+    const details = entries.length > 0 ? ` ${JSON.stringify(Object.fromEntries(entries))}` : "";
+    return `${failure.name}: ${failure.message}${details}`;
+  }
+  try {
+    return JSON.stringify(failure);
+  } catch {
+    return String(failure);
+  }
+};
+
+const runRpcSmokeCase = (
+  client: Record<string, (payload?: unknown) => Effect.Effect<unknown, unknown>>,
+  smokeCase: RpcSmokeCase,
+  context: RpcSmokeContext,
+) =>
+  Effect.gen(function* () {
+    const payload = smokeCase.payload?.(context);
+    const request = client[smokeCase.tag];
+    if (!request) {
+      throw new Error(`RPC client is missing ${smokeCase.tag}`);
+    }
+
+    const result = yield* request(payload).pipe(
+      RpcClient.withHeaders(smokeHeaders(context, smokeCase.role)),
+      Effect.match({
+        onFailure: (failure) => ({ _tag: "Failure" as const, failure }),
+        onSuccess: (value) => ({ _tag: "Success" as const, value }),
+      }),
+    );
+    const expected = smokeCase.expected ?? { success: true };
+
+    if ("errorTag" in expected) {
+      expect(result._tag, `${smokeCase.tag} should fail`).toBe("Failure");
+      if (result._tag === "Failure") {
+        const actual = result.failure as { readonly _tag?: string };
+        expect(actual._tag, `${smokeCase.tag} error tag`).toBe(expected.errorTag);
+      }
+      return;
+    }
+
+    if (result._tag === "Failure") {
+      throw new Error(`${smokeCase.tag} failed unexpectedly: ${formatFailure(result.failure)}`);
+    }
+    expect(result._tag, `${smokeCase.tag} should succeed`).toBe("Success");
+    if (result._tag === "Success") {
+      smokeCase.afterSuccess?.(context, result.value);
+    }
+  });
+
+/**
+ * Run id that namespaces the seeded fixtures so independent runs against the
+ * shared database don't collide; set `VOIDHASH_RPC_SMOKE_RUN_ID` to reproduce a
+ * specific run.
+ */
+const runId =
+  (process.env.VOIDHASH_RPC_SMOKE_RUN_ID ?? crypto.randomUUID())
+    .toLowerCase()
+    .replaceAll(/[^a-z0-9]/g, "")
+    .slice(0, 10) || "default";
+
+describe("Backend RPC smoke", () => {
+  test("dispatches every RPC against the in-process handler graph", async () => {
+    const tc = requireTestConnections();
+    assertRpcSmokeManifestCoverage();
+
+    // Seed the fixture in-process (formerly the `/__test/seed` HTTP route).
+    await Effect.runPromise(seedSmokeData(runId).pipe(Effect.provide(Db.layer(tc.db))));
+
+    const ids = makeSmokeIds(runId);
+    const context = makeRpcSmokeContext(runId, ids, "https://example.test/webhook-target");
+
+    const infra = makeRpcInfra(tc);
+    const rpcServices = buildBackendRpcServices({
+      auth: TestRpcAuthLive,
+      features: NoBackendFeatures,
+      rpcExtension: NoBackendRpcExtension,
+      infrastructure: infra,
+      webhookManager: TestWebhookManagerServiceLive.pipe(Layer.provide(infra)),
+    });
+
+    // The infra layer (incl. `Db`) is scoped: its `Db.make` finalizer closes
+    // the mysql2 connection when the scope it was built into closes. It must
+    // therefore be provided to the WHOLE block — `makeClient` *and* the
+    // dispatch loop — not just to `makeClient`. Providing it to `makeClient`
+    // alone ties the layer's scope to `makeClient`'s completion, so the Db
+    // connection is closed the instant the client resolves; the first
+    // dispatch then dies with "Can't add new command when connection is in
+    // closed state". The in-memory server captures the handler context at
+    // build time, so the loop only needs the backing resources to stay live.
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const client = yield* RpcTest.makeClient(RpcGroups);
+
+        for (const smokeCase of rpcSmokeCases) {
+          yield* runRpcSmokeCase(client as never, smokeCase, context);
+        }
+      }).pipe(Effect.provide(rpcServices), Effect.provide(TestWorkflowPortsLive), Effect.scoped),
+    );
+  }, 600_000);
+});
+
+// --- WorkOS webhook (in-process against the real route graph) ----------------
+
+const toHex = (buffer: ArrayBuffer): string =>
+  Array.from(new Uint8Array(buffer), (byte) => byte.toString(16).padStart(2, "0")).join("");
+
+/**
+ * Sign a webhook payload the way the WorkOS SDK verifies it: HMAC-SHA256 over
+ * `${timestamp}.${JSON.stringify(payload)}` keyed by the webhook secret, header
+ * formatted `t=<ms>, v1=<hex>`. The returned `body` is the exact bytes to POST
+ * so the handler's `JSON.parse(rawBody)` round-trips to the signed string.
+ */
+const signWorkosWebhook = async (payload: object, secret: string, timestamp: number) => {
+  const body = JSON.stringify(payload);
+  const key = await crypto.subtle.importKey(
+    "raw",
+    new TextEncoder().encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"],
+  );
+  const signature = await crypto.subtle.sign(
+    "HMAC",
+    key,
+    new TextEncoder().encode(`${timestamp}.${body}`),
+  );
+  return { body, header: `t=${timestamp}, v1=${toHex(signature)}` };
+};
+
+const makeUserCreatedEvent = () => {
+  const suffix = crypto.randomUUID().replaceAll("-", "");
+  return {
+    created_at: new Date().toISOString(),
+    data: {
+      created_at: new Date().toISOString(),
+      email: `webhook-test-${suffix}@example.com`,
+      email_verified: true,
+      external_id: null,
+      first_name: "Webhook",
+      id: `user_${suffix}`,
+      last_name: "Test",
+      object: "user",
+      profile_picture_url: null,
+      updated_at: new Date().toISOString(),
+    },
+    event: "user.created",
+    id: `event_${suffix}`,
+  };
+};
+
+const makeOrganizationUpdatedEvent = (ids: ReturnType<typeof makeSmokeIds>) => {
+  const suffix = crypto.randomUUID().replaceAll("-", "");
+  return {
+    created_at: new Date().toISOString(),
+    data: {
+      allow_profiles_outside_organization: false,
+      created_at: new Date().toISOString(),
+      domains: [],
+      external_id: ids.organizationId,
+      id: ids.workosOrganizationId,
+      metadata: {},
+      name: "Webhook Renamed Organization",
+      object: "organization",
+      updated_at: new Date().toISOString(),
+    },
+    event: "organization.updated",
+    id: `event_${suffix}`,
+  };
+};
+
+const makeOrganizationMembershipCreatedEvent = (ids: ReturnType<typeof makeSmokeIds>) => {
+  const suffix = crypto.randomUUID().replaceAll("-", "");
+  return {
+    created_at: new Date().toISOString(),
+    data: {
+      created_at: new Date().toISOString(),
+      custom_attributes: {},
+      directory_managed: false,
+      id: `workos_mem_webhook_${suffix.slice(0, 16)}`,
+      object: "organization_membership",
+      organization_id: ids.workosOrganizationId,
+      organization_name: "Webhook Renamed Organization",
+      role: { slug: "admin" },
+      status: "active",
+      updated_at: new Date().toISOString(),
+      user_id: ids.workosNormalUserId,
+    },
+    event: "organization_membership.created",
+    id: `event_${suffix}`,
+  };
+};
+
+/**
+ * Sends a request to the real backend route graph in-process: builds
+ * `buildBackendFetch`, feeds it a synthetic `HttpServerRequest`, and reads the
+ * response back as a web `Response`. Mirrors how the deployed worker invokes the
+ * built handler (provide the workflow-port no-ops to both the build and the
+ * per-request handler).
+ */
+const requestBackend = (
+  tc: BackendTestConnections,
+  path: string,
+  init: RequestInit,
+) =>
+  Effect.scoped(
+    Effect.gen(function* () {
+      const handler = yield* buildBackendFetch({
+        auth: TestRpcAuthLive,
+        features: NoBackendFeatures,
+        rpcExtension: NoBackendRpcExtension,
+        infrastructure: makeWebhookInfra(tc),
+      }).pipe(Effect.provide(TestWorkflowPortsLive));
+
+      const request = HttpServerRequest.fromWeb(new Request(`http://backend.local${path}`, init));
+      const response = yield* handler.pipe(
+        Effect.provideService(HttpServerRequest.HttpServerRequest, request),
+        Effect.provide(TestWorkflowPortsLive),
+        // The push send path colors its effects with the runtime-phase marker
+        // (queue dispatch); the deployed worker's fetch provides it, so mirror
+        // that here with a minimal stub.
+        Effect.provide(SmokePlatformRuntimeStub),
+      );
+
+      const web = HttpServerResponse.toWeb(response);
+      const text = yield* Effect.promise(() => web.text());
+      return { status: web.status, text };
+      // The auth middleware now resolves `Db` ambiently, so its requirement
+      // surfaces on the built handler (exactly as in the deployed worker, which
+      // provides `Db` at the outer fetch scope). Provide it here to match.
+    }).pipe(Effect.provide(Db.layer(tc.db))),
+  );
+
+describe("Backend runtime capabilities", () => {
+  test("keeps Enterprise UI capabilities dormant in the core-only composition", async () => {
+    const tc = requireTestConnections();
+    const { status, text } = await Effect.runPromise(
+      requestBackend(tc, "/api/runtime-capabilities", { method: "GET" }),
+    );
+
+    expect(status).toBe(200);
+    expect(JSON.parse(text)).toEqual({ enterprise: { auditLogs: false, billing: false } });
+  });
+});
+
+const seedWebhookFixture = (tc: BackendTestConnections, webhookRunId: string) =>
+  Effect.runPromise(seedSmokeData(webhookRunId).pipe(Effect.provide(Db.layer(tc.db))));
+
+describe("Backend WorkOS webhook smoke", () => {
+  test("processes a correctly-signed user.created event", async () => {
+    const tc = requireTestConnections();
+    const { body, header } = await signWorkosWebhook(
+      makeUserCreatedEvent(),
+      TEST_WORKOS_WEBHOOK_SECRET,
+      Date.now(),
+    );
+
+    const { status, text } = await Effect.runPromise(
+      requestBackend(tc, "/api/webhooks/workos", {
+        body,
+        headers: { "content-type": "application/json", "workos-signature": header },
+        method: "POST",
+      }),
+    );
+
+    // On failure the body explains why (the route returns a 500 with detail).
+    expect(status, `webhook returned ${status}: ${text}`).toBe(200);
+    const json = JSON.parse(text) as { duplicate?: boolean; received?: boolean };
+    expect(json.received).toBe(true);
+    expect(json.duplicate ?? false).toBe(false);
+  }, 120_000);
+
+  test("processes a correctly-signed organization.updated event", async () => {
+    const tc = requireTestConnections();
+    const webhookRunId = `org${crypto.randomUUID().replaceAll("-", "").slice(0, 7)}`;
+    const ids = makeSmokeIds(webhookRunId);
+    await seedWebhookFixture(tc, webhookRunId);
+
+    const { body, header } = await signWorkosWebhook(
+      makeOrganizationUpdatedEvent(ids),
+      TEST_WORKOS_WEBHOOK_SECRET,
+      Date.now(),
+    );
+
+    const { status, text } = await Effect.runPromise(
+      requestBackend(tc, "/api/webhooks/workos", {
+        body,
+        headers: { "content-type": "application/json", "workos-signature": header },
+        method: "POST",
+      }),
+    );
+
+    expect(status, `webhook returned ${status}: ${text}`).toBe(200);
+  }, 120_000);
+
+  test("processes a correctly-signed organization_membership.created event", async () => {
+    const tc = requireTestConnections();
+    const webhookRunId = `mem${crypto.randomUUID().replaceAll("-", "").slice(0, 7)}`;
+    const ids = makeSmokeIds(webhookRunId);
+    await seedWebhookFixture(tc, webhookRunId);
+
+    const { body, header } = await signWorkosWebhook(
+      makeOrganizationMembershipCreatedEvent(ids),
+      TEST_WORKOS_WEBHOOK_SECRET,
+      Date.now(),
+    );
+
+    const { status, text } = await Effect.runPromise(
+      requestBackend(tc, "/api/webhooks/workos", {
+        body,
+        headers: { "content-type": "application/json", "workos-signature": header },
+        method: "POST",
+      }),
+    );
+
+    expect(status, `webhook returned ${status}: ${text}`).toBe(200);
+  }, 120_000);
+
+  test("rejects an invalid signature", async () => {
+    const tc = requireTestConnections();
+    const { status } = await Effect.runPromise(
+      requestBackend(tc, "/api/webhooks/workos", {
+        body: JSON.stringify(makeUserCreatedEvent()),
+        headers: {
+          "content-type": "application/json",
+          "workos-signature": `t=${Date.now()}, v1=${"0".repeat(64)}`,
+        },
+        method: "POST",
+      }),
+    );
+
+    expect(status).not.toBe(200);
+  }, 120_000);
+});
diff --git a/apps/backend/src/rpcs/ai-chat-rpcs.test.ts b/apps/backend/src/rpcs/ai-chat-rpcs.test.ts
new file mode 100644
index 000000000..d424f507a
--- /dev/null
+++ b/apps/backend/src/rpcs/ai-chat-rpcs.test.ts
@@ -0,0 +1,225 @@
+/**
+ * Unit tests for the AI-chat RPC handlers that touch paywall documents:
+ * `CaptureAiCheckpoint`. They dispatch through `RpcTest.makeClient` against the
+ * REAL {@link AiChatRpcsLive} handler graph fed by faked domain services
+ * (AiChatService / PaywallService / PaywallWorkspaceService) plus a pass-through
+ * `AuthMiddleware`, so the whole handler seam (chat resolution, paywall
+ * cross-project scoping, live-tree read, first-write-wins capture reporting) runs
+ * without an HTTP transport or a live document.
+ */
+import {
+  AiChatForbiddenError,
+  AiChatNotFoundError,
+  AiChatService,
+  PaywallService,
+  PaywallWorkspaceService,
+} from "@voidhash/core/services";
+import { PaywallNotFoundError } from "@voidhash/core/domain/paywall/Paywall";
+import { ActionForbiddenError } from "@voidhash/core/domain/auth/Auth";
+import { AiChatRpcsDef, AuthMiddleware, AuthSession } from "@voidhash/rpc";
+import { Effect, Exit, Layer } from "effect";
+import { RpcTest } from "effect/unstable/rpc";
+import { describe, expect, it } from "vite-plus/test";
+
+import { AiChatRpcsLive } from "./ai-chat-rpcs.ts";
+
+// ── Fixtures ─────────────────────────────────────────────────────────────────
+
+const chatRow = (over: Partial<{ id: string; projectId: string; organizationId: string }> = {}) => ({
+  id: over.id ?? "chat_1",
+  organizationId: over.organizationId ?? "org_1",
+  projectId: over.projectId ?? "proj_1",
+  surface: "designer",
+  chatType: "persistent",
+  paywallId: "pw_1",
+  title: "Chat",
+  messages: "[]",
+  createdAt: new Date(),
+  updatedAt: new Date(),
+});
+
+const paywallRow = (over: Partial<{ id: string; projectId: string }> = {}) => ({
+  id: over.id ?? "pw_1",
+  slug: "trial",
+  projectId: over.projectId ?? "proj_1",
+  name: "Trial",
+  archivedAt: null,
+  createdAt: new Date(),
+  updatedAt: new Date(),
+  source: 1,
+  thumbnailUrl: null,
+  thumbnailSeq: null,
+  designFileMetadata: null,
+});
+
+interface CaptureCall {
+  readonly chatId: string;
+  readonly turnId: string;
+  readonly paywallId: string;
+  readonly tree: unknown;
+}
+
+interface Fakes {
+  /** Override `AiChatService.get`; default resolves `chatRow()`. */
+  readonly getChat?: () => Effect.Effect<ReturnType<typeof chatRow>, unknown>;
+  /** Override `PaywallService.getPaywallById`; default resolves `paywallRow()`. */
+  readonly getPaywall?: () => Effect.Effect<ReturnType<typeof paywallRow>, unknown>;
+  /** Whether the capture reports a fresh insert (`captured: true`) or a no-op. */
+  readonly captured?: boolean;
+  /** Raw document tree `readDocumentTree` returns. */
+  readonly tree?: unknown;
+  /** Collects each capture call so a test can assert what was captured. */
+  readonly captures?: CaptureCall[];
+}
+
+const buildHandlerLayer = (fakes: Fakes) => {
+  const chatLayer = Layer.succeed(AiChatService, {
+    get: fakes.getChat ?? (() => Effect.succeed(chatRow())),
+    captureCheckpointReporting: (input: CaptureCall) =>
+      Effect.sync(() => {
+        fakes.captures?.push(input);
+        return { captured: fakes.captured ?? true };
+      }),
+    // The revert handler is provided in the same group; stub the methods it uses
+    // so the layer is a complete AiChatService.
+    getLastTurnCheckpoints: () => Effect.succeed([]),
+  } as unknown as AiChatService["Service"]);
+
+  const paywallLayer = Layer.succeed(PaywallService, {
+    getPaywallById: fakes.getPaywall ?? (() => Effect.succeed(paywallRow())),
+  } as unknown as PaywallService["Service"]);
+
+  const workspaceLayer = Layer.succeed(PaywallWorkspaceService, {
+    readDocumentTree: () =>
+      Effect.succeed({ tree: fakes.tree ?? { kind: "tree" }, root: null, version: 3 }),
+    revertDocument: () => Effect.succeed({ version: 1, commandCount: 0 }),
+  } as unknown as PaywallWorkspaceService["Service"]);
+
+  const authMiddlewareLayer = Layer.succeed(
+    AuthMiddleware,
+    AuthMiddleware.of((effect) =>
+      Effect.provideService(effect, AuthSession, { method: "user", user: { id: "user_1" } } as never),
+    ),
+  );
+
+  return Layer.mergeAll(
+    AiChatRpcsLive.pipe(Layer.provide(Layer.mergeAll(chatLayer, paywallLayer, workspaceLayer))),
+    authMiddlewareLayer,
+  );
+};
+
+interface CaptureResult {
+  readonly captured: boolean;
+}
+
+interface AiChatClient {
+  CaptureAiCheckpoint: (payload: {
+    chatId: string;
+    turnId: string;
+    paywallId: string;
+  }) => Effect.Effect<CaptureResult, unknown>;
+}
+
+const dispatch = <A>(fakes: Fakes, f: (client: AiChatClient) => Effect.Effect<A, unknown>) =>
+  Effect.runPromiseExit(
+    Effect.gen(function* () {
+      const client = (yield* RpcTest.makeClient(AiChatRpcsDef)) as unknown as AiChatClient;
+      return yield* f(client);
+    }).pipe(Effect.provide(buildHandlerLayer(fakes)), Effect.scoped),
+  );
+
+// ── Tests ────────────────────────────────────────────────────────────────────
+
+describe("AiChatRpcs — CaptureAiCheckpoint", () => {
+  it("captures the current tree and reports captured: true", async () => {
+    const captures: CaptureCall[] = [];
+    const exit = await dispatch({ captures, tree: { kind: "tree", nodes: [] } }, (client) =>
+      client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.captured).toBe(true);
+    }
+    // The capture is keyed by (chat, turn, paywall) and carries the LIVE tree.
+    expect(captures).toEqual([
+      { chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1", tree: { kind: "tree", nodes: [] } },
+    ]);
+  });
+
+  it("reports captured: false on the first-write-wins no-op (checkpoint already exists)", async () => {
+    const exit = await dispatch({ captured: false }, (client) =>
+      client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.captured).toBe(false);
+    }
+  });
+
+  it("rejects a paywall from a DIFFERENT project than the chat (anti-cross-project)", async () => {
+    const captures: CaptureCall[] = [];
+    const exit = await dispatch(
+      {
+        captures,
+        getChat: () => Effect.succeed(chatRow({ projectId: "proj_1" })),
+        getPaywall: () => Effect.succeed(paywallRow({ projectId: "proj_2" })),
+      },
+      (client) =>
+        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(JSON.stringify(exit.cause)).toContain("Rpc/ActionForbiddenError");
+    }
+    // No checkpoint may be taken when the paywall is out of the chat's project.
+    expect(captures).toEqual([]);
+  });
+
+  it("maps a missing chat to Rpc/AiChatNotFoundError", async () => {
+    const exit = await dispatch(
+      { getChat: () => Effect.fail(new AiChatNotFoundError({ chatId: "chat_1" })) },
+      (client) =>
+        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(JSON.stringify(exit.cause)).toContain("Rpc/AiChatNotFoundError");
+    }
+  });
+
+  it("maps a chat-membership denial to Rpc/ActionForbiddenError", async () => {
+    const exit = await dispatch(
+      { getChat: () => Effect.fail(new AiChatForbiddenError({ message: "not a member" })) },
+      (client) =>
+        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(JSON.stringify(exit.cause)).toContain("Rpc/ActionForbiddenError");
+    }
+  });
+
+  it("maps a missing paywall to Rpc/AiChatServiceError", async () => {
+    const exit = await dispatch(
+      { getPaywall: () => Effect.fail(new PaywallNotFoundError({ message: "gone" })) },
+      (client) =>
+        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(JSON.stringify(exit.cause)).toContain("Rpc/AiChatServiceError");
+    }
+  });
+
+  it("maps a paywall permission denial to Rpc/ActionForbiddenError", async () => {
+    const exit = await dispatch(
+      { getPaywall: () => Effect.fail(new ActionForbiddenError({ message: "no access" })) },
+      (client) =>
+        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(JSON.stringify(exit.cause)).toContain("Rpc/ActionForbiddenError");
+    }
+  });
+});
diff --git a/apps/backend/src/rpcs/ai-chat-rpcs.ts b/apps/backend/src/rpcs/ai-chat-rpcs.ts
new file mode 100644
index 000000000..6f761bd18
--- /dev/null
+++ b/apps/backend/src/rpcs/ai-chat-rpcs.ts
@@ -0,0 +1,181 @@
+import {
+  AiChatService,
+  PaywallService,
+  PaywallWorkspaceService,
+  type AiChatType,
+} from "@voidhash/core/services";
+import {
+  AiChatRpcsDef,
+  RpcActionForbiddenError,
+  RpcAiChatAttachmentValidationError,
+  RpcAiChatNotFoundError,
+  RpcAiChatServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const AiChatRpcsLive = AiChatRpcsDef.toLayer(
+  Effect.gen(function* AiChatRpcsLive() {
+    const aiChatService = yield* AiChatService;
+    const workspace = yield* PaywallWorkspaceService;
+    const paywallService = yield* PaywallService;
+    return {
+      SaveAiChat: ({
+        id,
+        organizationId,
+        projectId,
+        surface,
+        chatType,
+        paywallId,
+        title,
+        messages,
+      }) =>
+        aiChatService
+          .save({
+            id,
+            organizationId,
+            projectId,
+            surface,
+            // Any non-"persistent" value is treated as single-use (stored, unlisted).
+            chatType: (chatType === "persistent"
+              ? "persistent"
+              : "single_use") satisfies AiChatType,
+            paywallId,
+            title,
+            messages,
+          })
+          .pipe(
+            Effect.catchTags({
+              AiChatForbiddenError: (error) =>
+                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+              AiChatServiceError: (error) =>
+                Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            }),
+          ),
+      ListAiChats: ({ organizationId, projectId, surface, paywallId }) =>
+        aiChatService.list({ organizationId, projectId, surface, paywallId }).pipe(
+          Effect.catchTags({
+            AiChatForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AiChatServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+          }),
+        ),
+      GetAiChat: ({ chatId }) =>
+        aiChatService.get({ chatId }).pipe(
+          Effect.catchTags({
+            AiChatForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AiChatNotFoundError: (error) =>
+              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
+            AiChatServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+          }),
+        ),
+      DeleteAiChat: ({ chatId }) =>
+        aiChatService.delete({ chatId }).pipe(
+          Effect.catchTags({
+            AiChatForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AiChatNotFoundError: (error) =>
+              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
+            AiChatServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+          }),
+        ),
+      UploadAiChatAttachment: ({ chatId, organizationId, name, contentType, dataBase64 }) =>
+        aiChatService
+          .uploadAttachment({ chatId, organizationId, name, contentType, dataBase64 })
+          .pipe(
+            Effect.catchTags({
+              AiChatForbiddenError: (error) =>
+                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+              AiChatAttachmentValidationError: (error) =>
+                Effect.fail(new RpcAiChatAttachmentValidationError({ message: error.message })),
+              AiChatServiceError: (error) =>
+                Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            }),
+          ),
+      /**
+       * Revert the chat's most recent AI turn: load that turn's captured
+       * pre-images (one per touched document) and reconcile each document back to
+       * its pre-turn tree through the workspace revert (submitted as a normal
+       * transaction, fanned out to any open designer over WS). Independent
+       * per-document transactions — no cross-document atomicity (§8 open q. 4).
+       */
+      RevertAiChatCheckpoint: ({ chatId }) =>
+        aiChatService.getLastTurnCheckpoints({ chatId }).pipe(
+          Effect.flatMap((preImages) =>
+            Effect.forEach(
+              preImages,
+              (preImage) => workspace.revertDocument(preImage.paywallId, preImage.tree),
+              { discard: true },
+            ).pipe(Effect.as({ revertedDocuments: preImages.length })),
+          ),
+          Effect.catchTags({
+            AiChatForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AiChatNotFoundError: (error) =>
+              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
+            AiChatServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            PaywallWorkspaceServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            WorkspaceWriteRejectedError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            WorkspaceWriteConflictError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+          }),
+        ),
+      /**
+       * Capture the CURRENT document tree of `paywallId` as the pre-turn image for
+       * `(chatId, turnId)`. The document-first client calls this at the START of an
+       * AI turn that will mutate the paywall (before the first `edit_document` op),
+       * so a later {@link RevertAiChatCheckpoint} can restore the pre-turn state.
+       *
+       * Scoping (anti-cross-project): `get` asserts the caller is a member of the
+       * chat's organization; `getPaywallById` asserts project permission on the
+       * paywall; and the paywall must belong to the SAME project as the chat (an
+       * org member cannot checkpoint a paywall from another of the org's projects
+       * into this chat). Then the live tree is read and captured first-write-wins —
+       * `captured: false` when a checkpoint already existed for the turn, so
+       * retries/reconnects are cheap idempotent no-ops.
+       */
+      CaptureAiCheckpoint: ({ chatId, turnId, paywallId }) =>
+        Effect.gen(function* () {
+          const chat = yield* aiChatService.get({ chatId });
+          const paywall = yield* paywallService.getPaywallById(paywallId);
+          if (paywall.projectId !== chat.projectId) {
+            return yield* Effect.fail(
+              new RpcActionForbiddenError({
+                message: `Paywall ${paywallId} does not belong to chat ${chatId}'s project.`,
+              }),
+            );
+          }
+          const document = yield* workspace.readDocumentTree(paywallId);
+          return yield* aiChatService.captureCheckpointReporting({
+            chatId,
+            turnId,
+            paywallId,
+            tree: document.tree,
+          });
+        }).pipe(
+          Effect.catchTags({
+            AiChatForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AiChatNotFoundError: (error) =>
+              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
+            AiChatServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.cause })),
+            PaywallWorkspaceServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/analytics-rpcs.ts b/apps/backend/src/rpcs/analytics-rpcs.ts
new file mode 100644
index 000000000..4c0d38791
--- /dev/null
+++ b/apps/backend/src/rpcs/analytics-rpcs.ts
@@ -0,0 +1,85 @@
+import { AnalyticsService } from "@voidhash/core/services";
+// Imported so the inferred `AnalyticsRpcsLive` layer type (whose requirements
+// include the analytics read path's `ClickhouseWebClient`) is nameable in the
+// emitted declarations — the client is re-exported as a namespace, which TS
+// cannot otherwise reference portably (TS2883).
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import {
+  AnalyticsRpcsDef,
+  RpcActionForbiddenError,
+  RpcAnalyticsServiceError,
+  RpcInvalidAnalyticsQueryError,
+  RpcInvalidTimeRangeError,
+  RpcUnknownInsightError,
+  RpcUnsupportedAnalyticsBreakdownError,
+  RpcUnsupportedAnalyticsFilterError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const AnalyticsRpcsLive = AnalyticsRpcsDef.toLayer(
+  Effect.gen(function* AnalyticsRpcsLive() {
+    const analyticsService = yield* AnalyticsService;
+
+    return {
+      ListRecentAnalyticsEvents: ({ projectId, limit }) =>
+        analyticsService
+          .listRecentEvents({
+            limit,
+            projectId,
+          })
+          .pipe(
+            Effect.catchTags({
+              ActionForbiddenError: (error) =>
+                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+              AnalyticsServiceError: (error) =>
+                Effect.fail(
+                  new RpcAnalyticsServiceError({ cause: error.cause, message: error.message }),
+                ),
+            }),
+          ),
+      QueryAnalyticsInsights: ({ queries }) =>
+        analyticsService
+          .queryAnalyticsInsights({
+            queries: queries.map((query) => ({
+              ...query,
+              breakdowns: query.breakdowns ? [...query.breakdowns] : undefined,
+            })),
+          })
+          .pipe(
+            Effect.catchTags({
+              ActionForbiddenError: (error) =>
+                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+              AnalyticsServiceError: (error) =>
+                Effect.fail(
+                  new RpcAnalyticsServiceError({ cause: error.cause, message: error.message }),
+                ),
+              InvalidAnalyticsQueryError: (error) =>
+                Effect.fail(new RpcInvalidAnalyticsQueryError({ message: error.message })),
+              InvalidTimeRangeError: (error) =>
+                Effect.fail(new RpcInvalidTimeRangeError({ message: error.message })),
+              UnknownInsightError: (error) =>
+                Effect.fail(
+                  new RpcUnknownInsightError({
+                    insightId: error.insightId,
+                    message: error.message,
+                  }),
+                ),
+              UnsupportedAnalyticsBreakdownError: (error) =>
+                Effect.fail(
+                  new RpcUnsupportedAnalyticsBreakdownError({
+                    field: error.field,
+                    message: error.message,
+                  }),
+                ),
+              UnsupportedAnalyticsFilterError: (error) =>
+                Effect.fail(
+                  new RpcUnsupportedAnalyticsFilterError({
+                    field: error.field,
+                    message: error.message,
+                  }),
+                ),
+            }),
+          ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/api-key-rpcs.ts b/apps/backend/src/rpcs/api-key-rpcs.ts
new file mode 100644
index 000000000..2851e6669
--- /dev/null
+++ b/apps/backend/src/rpcs/api-key-rpcs.ts
@@ -0,0 +1,101 @@
+import { ApiKeyService } from "@voidhash/core/services";
+import {
+  ApiKeyRpcsDef,
+  RpcActionForbiddenError,
+  RpcApiKeyNotFoundError,
+  RpcApiKeyServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const ApiKeyRpcsLive = ApiKeyRpcsDef.toLayer(
+  Effect.gen(function* ApiKeyRpcsLive() {
+    const apiKeyService = yield* ApiKeyService;
+    return {
+      CreateSecretKey: ({ projectId, name }) =>
+        apiKeyService.createSecretKey({ name, projectId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+      DeleteApiKey: ({ apiKeyId }) =>
+        apiKeyService.deleteSecretKey({ secretKeyId: apiKeyId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ApiKeyNotFoundError: (error) =>
+              Effect.fail(new RpcApiKeyNotFoundError({ message: error.message })),
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetApiKeyById: ({ apiKeyId }) =>
+        apiKeyService.getApiKeyById(apiKeyId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ApiKeyNotFoundError: (error) =>
+              Effect.fail(new RpcApiKeyNotFoundError({ message: error.message })),
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListApiKeys: ({ projectId }) =>
+        apiKeyService.getApiKeys(projectId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+      RotateSecretKey: ({ apiKeyId }) =>
+        apiKeyService.rotateSecretKey({ secretKeyId: apiKeyId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ApiKeyNotFoundError: (error) =>
+              Effect.fail(new RpcApiKeyNotFoundError({ message: error.message })),
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+      CreateUserApiKey: ({ name, prefix }) =>
+        apiKeyService.createUserApiKey({ name, prefix }).pipe(
+          Effect.catchTags({
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListUserApiKeys: () =>
+        apiKeyService.listUserApiKeys().pipe(
+          Effect.map((keys) =>
+            keys.map((key) => ({
+              createdAt: key.createdAt,
+              enabled: key.enabled,
+              end: key.end,
+              expiresAt: key.expiresAt,
+              id: key.id,
+              name: key.name,
+              prefix: key.prefix,
+            })),
+          ),
+          Effect.catchTags({
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+      RevokeUserApiKey: ({ userApiKeyId }) =>
+        apiKeyService.revokeUserApiKey({ userApiKeyId }).pipe(
+          Effect.catchTags({
+            ApiKeyNotFoundError: (error) =>
+              Effect.fail(new RpcApiKeyNotFoundError({ message: error.message })),
+            ApiKeyServiceError: (error) =>
+              Effect.fail(new RpcApiKeyServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/experiment-rpcs.ts b/apps/backend/src/rpcs/experiment-rpcs.ts
new file mode 100644
index 000000000..661aaef0a
--- /dev/null
+++ b/apps/backend/src/rpcs/experiment-rpcs.ts
@@ -0,0 +1,261 @@
+import { AnalyticsService, ExperimentService } from "@voidhash/core/services";
+// Imported so the inferred `ExperimentRpcsLive` layer type (whose requirements
+// include AnalyticsService's `ClickhouseWebClient`) is nameable in the emitted
+// declarations — the client is re-exported as a namespace, which TS cannot
+// otherwise reference portably (TS2883).
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import {
+  ExperimentRpcsDef,
+  RpcActionForbiddenError,
+  RpcExperimentKeyAlreadyExistsError,
+  RpcExperimentNotFoundError,
+  RpcExperimentServiceError,
+  RpcExperimentTreatmentNotFoundError,
+  RpcExperimentValidationError,
+  RpcExperimentVariantNotFoundError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+/** Map the service's experiment-with-relations to the RPC wire shape. */
+const toRpcExperiment = (e: {
+  readonly archivedAt: Date | null;
+  readonly createdAt: Date | null;
+  readonly createdByUserId: string | null;
+  readonly description: string | null;
+  readonly endedAt: Date | null;
+  readonly featureFlagId: string;
+  readonly hypothesis: string | null;
+  readonly id: string;
+  readonly key: string;
+  readonly name: string;
+  readonly primaryMetricEventName: string;
+  readonly projectId: string;
+  readonly secondaryMetricEventNames: readonly string[] | null;
+  readonly startedAt: Date | null;
+  readonly status: number;
+  readonly updatedAt: Date | null;
+  readonly updatedByUserId: string | null;
+  readonly version: number;
+  readonly winningVariantId: string | null;
+  readonly variants: ReadonlyArray<{
+    readonly archivedAt: Date | null;
+    readonly createdAt: Date | null;
+    readonly experimentId: string;
+    readonly id: string;
+    readonly isControl: boolean;
+    readonly key: string;
+    readonly name: string;
+    readonly updatedAt: Date | null;
+    readonly weightBps: number;
+  }>;
+  readonly treatments: ReadonlyArray<{
+    readonly archivedAt: Date | null;
+    readonly config: unknown;
+    readonly createdAt: Date | null;
+    readonly experimentId: string;
+    readonly id: string;
+    readonly treatmentType: string;
+    readonly updatedAt: Date | null;
+    readonly variantId: string;
+  }>;
+  readonly featureFlag: {
+    readonly id: string;
+    readonly key: string;
+    readonly enabled: boolean;
+    readonly rolloutBps: number;
+  } | null;
+}) => ({
+  archivedAt: e.archivedAt,
+  backingFlag: e.featureFlag
+    ? {
+        enabled: e.featureFlag.enabled,
+        id: e.featureFlag.id,
+        key: e.featureFlag.key,
+        rolloutBps: e.featureFlag.rolloutBps,
+      }
+    : null,
+  createdAt: e.createdAt,
+  createdByUserId: e.createdByUserId,
+  description: e.description,
+  endedAt: e.endedAt,
+  featureFlagId: e.featureFlagId,
+  hypothesis: e.hypothesis,
+  id: e.id,
+  key: e.key,
+  name: e.name,
+  primaryMetricEventName: e.primaryMetricEventName,
+  projectId: e.projectId,
+  secondaryMetricEventNames: e.secondaryMetricEventNames,
+  startedAt: e.startedAt,
+  status: e.status,
+  treatments: e.treatments,
+  updatedAt: e.updatedAt,
+  updatedByUserId: e.updatedByUserId,
+  variants: e.variants,
+  version: e.version,
+  winningVariantId: e.winningVariantId,
+});
+
+export const ExperimentRpcsLive = ExperimentRpcsDef.toLayer(
+  Effect.gen(function* ExperimentRpcsLive() {
+    const service = yield* ExperimentService;
+    const analyticsService = yield* AnalyticsService;
+
+    // Shared error mappers keep every handler's catchTags terse.
+    const serviceError = (error: { readonly cause: string }) =>
+      Effect.fail(new RpcExperimentServiceError({ cause: error.cause }));
+    const forbidden = (error: { readonly message: string }) =>
+      Effect.fail(new RpcActionForbiddenError({ message: error.message }));
+    const notFound = (error: { readonly experimentId: string }) =>
+      Effect.fail(
+        new RpcExperimentNotFoundError({ message: `Experiment not found: ${error.experimentId}` }),
+      );
+    const validation = (error: { readonly message: string }) =>
+      Effect.fail(new RpcExperimentValidationError({ message: error.message }));
+    const variantNotFound = (error: { readonly variantId: string }) =>
+      Effect.fail(
+        new RpcExperimentVariantNotFoundError({ message: `Variant not found: ${error.variantId}` }),
+      );
+    const treatmentNotFound = (error: { readonly treatmentId: string }) =>
+      Effect.fail(
+        new RpcExperimentTreatmentNotFoundError({
+          message: `Treatment not found: ${error.treatmentId}`,
+        }),
+      );
+
+    return {
+      ArchiveExperiment: (input) =>
+        service.archiveExperiment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+          }),
+        ),
+      ConcludeExperiment: (input) =>
+        service.concludeExperiment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+            ExperimentVariantNotFoundError: variantNotFound,
+          }),
+        ),
+      CreateExperiment: (input) =>
+        service
+          .createExperiment({
+            ...input,
+            secondaryMetricEventNames: input.secondaryMetricEventNames
+              ? [...input.secondaryMetricEventNames]
+              : undefined,
+          })
+          .pipe(
+            Effect.catchTags({
+              ActionForbiddenError: forbidden,
+              ExperimentKeyAlreadyExistsError: (error) =>
+                Effect.fail(new RpcExperimentKeyAlreadyExistsError({ key: error.key })),
+              ExperimentServiceError: serviceError,
+            }),
+          ),
+      GetExperiment: (input) =>
+        service.getExperiment(input).pipe(
+          Effect.map(toRpcExperiment),
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+          }),
+        ),
+      GetExperimentResults: (input) =>
+        analyticsService.getExperimentResults(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            AnalyticsServiceError: (error) =>
+              Effect.fail(new RpcExperimentServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListExperiments: (input) =>
+        service.listExperiments(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentServiceError: serviceError,
+          }),
+        ),
+      PauseExperiment: (input) =>
+        service.pauseExperiment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+            ExperimentValidationError: validation,
+          }),
+        ),
+      RemoveExperimentTreatment: (input) =>
+        service.removeTreatment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+            ExperimentTreatmentNotFoundError: treatmentNotFound,
+            ExperimentValidationError: validation,
+          }),
+        ),
+      ReplaceExperimentVariants: (input) =>
+        service.replaceVariants({ ...input, variants: [...input.variants] }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+            ExperimentValidationError: validation,
+          }),
+        ),
+      RestoreExperiment: (input) =>
+        service.restoreExperiment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+          }),
+        ),
+      StartExperiment: (input) =>
+        service.startExperiment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+            ExperimentValidationError: validation,
+          }),
+        ),
+      UpdateExperiment: (input) =>
+        service
+          .updateExperiment({
+            ...input,
+            secondaryMetricEventNames:
+              input.secondaryMetricEventNames === undefined
+                ? undefined
+                : input.secondaryMetricEventNames
+                  ? [...input.secondaryMetricEventNames]
+                  : null,
+          })
+          .pipe(
+            Effect.map(toRpcExperiment),
+            Effect.catchTags({
+              ActionForbiddenError: forbidden,
+              ExperimentNotFoundError: notFound,
+              ExperimentServiceError: serviceError,
+              ExperimentValidationError: validation,
+            }),
+          ),
+      UpsertExperimentTreatment: (input) =>
+        service.upsertTreatment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentNotFoundError: notFound,
+            ExperimentServiceError: serviceError,
+            ExperimentValidationError: validation,
+            ExperimentVariantNotFoundError: variantNotFound,
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/feature-flag-rpcs.ts b/apps/backend/src/rpcs/feature-flag-rpcs.ts
new file mode 100644
index 000000000..559983100
--- /dev/null
+++ b/apps/backend/src/rpcs/feature-flag-rpcs.ts
@@ -0,0 +1,184 @@
+import { FeatureFlagService } from "@voidhash/core/services";
+import {
+  FeatureFlagRpcsDef,
+  RpcActionForbiddenError,
+  RpcAuditLogServiceError,
+  RpcFeatureFlagKeyAlreadyExistsError,
+  RpcFeatureFlagNotFoundError,
+  RpcFeatureFlagOverrideNotFoundError,
+  RpcFeatureFlagServiceError,
+  RpcFeatureFlagTargetNotFoundError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const FeatureFlagRpcsLive = FeatureFlagRpcsDef.toLayer(
+  Effect.gen(function* FeatureFlagRpcsLive() {
+    const service = yield* FeatureFlagService;
+    return {
+      ArchiveFeatureFlag: (input) =>
+        service.archiveFlag(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      ArchiveFeatureFlagOverride: (input) =>
+        service.archiveOverride(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagOverrideNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagOverrideNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      ArchiveFeatureFlagTarget: (input) =>
+        service.archiveTarget(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+            FeatureFlagTargetNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagTargetNotFoundError({ message: error.message })),
+          }),
+        ),
+      CreateFeatureFlag: (input) =>
+        service.createFlag(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagKeyAlreadyExistsError: (error) =>
+              Effect.fail(new RpcFeatureFlagKeyAlreadyExistsError({ key: error.key })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetFeatureFlag: ({ id }) =>
+        service.getFlagById({ id }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            FeatureFlagNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListFeatureFlagOverridesByPerson: (input) =>
+        service.listOverridesByPerson(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListFeatureFlagOverridesByFlag: (input) =>
+        service.listOverridesByFlag(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            FeatureFlagNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListFeatureFlags: (input) =>
+        service.listFlags(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      RestoreFeatureFlag: (input) =>
+        service.restoreFlag(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdateFeatureFlag: (input) =>
+        service.updateFlag(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagKeyAlreadyExistsError: (error) =>
+              Effect.fail(new RpcFeatureFlagKeyAlreadyExistsError({ key: error.key })),
+            FeatureFlagNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdateFeatureFlagVariants: (input) =>
+        service
+          .updateFlagVariants({
+            ...input,
+            variants: [...input.variants],
+          })
+          .pipe(
+            Effect.catchTags({
+              ActionForbiddenError: (error) =>
+                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+              AuditLogPortError: (error) =>
+                Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+              FeatureFlagNotFoundError: (error) =>
+                Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+              FeatureFlagServiceError: (error) =>
+                Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+            }),
+          ),
+      UpsertFeatureFlagOverride: (input) =>
+        service.upsertOverride(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpsertFeatureFlagTarget: (input) =>
+        service.upsertTarget(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcAuditLogServiceError({ cause: error.cause })),
+            FeatureFlagNotFoundError: (error) =>
+              Effect.fail(new RpcFeatureFlagNotFoundError({ message: error.message })),
+            FeatureFlagServiceError: (error) =>
+              Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/feedback-rpcs.ts b/apps/backend/src/rpcs/feedback-rpcs.ts
new file mode 100644
index 000000000..91416d5f5
--- /dev/null
+++ b/apps/backend/src/rpcs/feedback-rpcs.ts
@@ -0,0 +1,28 @@
+import { FeedbackService } from "@voidhash/core/services";
+import { FeedbackRpcsDef, RpcFeedbackServiceError } from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const FeedbackRpcsLive = FeedbackRpcsDef.toLayer(
+  Effect.gen(function* FeedbackRpcsLive() {
+    const feedbackService = yield* FeedbackService;
+    return {
+      SubmitFeedback: (payload) =>
+        feedbackService
+          .submit({
+            topic: payload.topic,
+            sentiment: payload.sentiment ?? null,
+            message: payload.message,
+            organizationId: payload.organizationId ?? null,
+            projectId: payload.projectId ?? null,
+            pathname: payload.pathname ?? null,
+            userAgent: payload.userAgent ?? null,
+          })
+          .pipe(
+            Effect.catchTags({
+              FeedbackServiceError: (error) =>
+                Effect.fail(new RpcFeedbackServiceError({ message: error.message })),
+            }),
+          ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/organization-rpcs.ts b/apps/backend/src/rpcs/organization-rpcs.ts
new file mode 100644
index 000000000..c5fd4ee16
--- /dev/null
+++ b/apps/backend/src/rpcs/organization-rpcs.ts
@@ -0,0 +1,68 @@
+import { OrganizationService } from "@voidhash/core/services";
+import {
+  OrganizationRpcsDef,
+  RpcActionForbiddenError,
+  RpcAvatarValidationError,
+  RpcOrganizationNotFoundError,
+  RpcOrganizationServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const OrganizationRpcsLive = OrganizationRpcsDef.toLayer(
+  Effect.gen(function* OrganizationRpcsLive() {
+    const organizationService = yield* OrganizationService;
+    return {
+      CreateOrganization: ({ name }) =>
+        organizationService.createOrganization({ name }).pipe(
+          Effect.catchTags({
+            OrganizationServiceError: (error) =>
+              Effect.fail(new RpcOrganizationServiceError({ cause: error.cause })),
+          }),
+        ),
+      DeleteOrganization: ({ organizationId }) =>
+        organizationService.deleteOrganization({ organizationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            OrganizationServiceError: (error) =>
+              Effect.fail(new RpcOrganizationServiceError({ cause: error.cause })),
+          }),
+        ),
+      RemoveOrganizationAvatar: ({ organizationId }) =>
+        organizationService.removeAvatar({ organizationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            OrganizationNotFoundError: (error) =>
+              Effect.fail(new RpcOrganizationNotFoundError({ message: error.message })),
+            OrganizationServiceError: (error) =>
+              Effect.fail(new RpcOrganizationServiceError({ cause: error.cause })),
+          }),
+        ),
+      SetOrganizationAvatar: ({ contentType, imageBase64, organizationId }) =>
+        organizationService.setAvatar({ contentType, imageBase64, organizationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AvatarValidationError: (error) =>
+              Effect.fail(new RpcAvatarValidationError({ message: error.message })),
+            OrganizationNotFoundError: (error) =>
+              Effect.fail(new RpcOrganizationNotFoundError({ message: error.message })),
+            OrganizationServiceError: (error) =>
+              Effect.fail(new RpcOrganizationServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdateOrganization: ({ name, organizationId }) =>
+        organizationService.updateOrganization({ name, organizationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            OrganizationNotFoundError: (error) =>
+              Effect.fail(new RpcOrganizationNotFoundError({ message: error.message })),
+            OrganizationServiceError: (error) =>
+              Effect.fail(new RpcOrganizationServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/payment-provider-configuration-rpcs.ts b/apps/backend/src/rpcs/payment-provider-configuration-rpcs.ts
new file mode 100644
index 000000000..e6d88dd0d
--- /dev/null
+++ b/apps/backend/src/rpcs/payment-provider-configuration-rpcs.ts
@@ -0,0 +1,101 @@
+import { PaymentProviderConfigurationService } from "@voidhash/core/services";
+import {
+  PaymentProviderConfigurationRpcsDef,
+  RpcActionForbiddenError,
+  RpcPaymentProviderAlreadyExistsError,
+  RpcPaymentProviderConfigurationKeyUnavailableError,
+  RpcPaymentProviderConfigurationNotFoundError,
+  RpcPaymentProviderConfigurationServiceError,
+  RpcPaymentProviderConfigurationValidationError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PaymentProviderConfigurationRpcsLive = PaymentProviderConfigurationRpcsDef.toLayer(
+  Effect.gen(function* PaymentProviderConfigurationRpcsLive() {
+    const paymentProviderConfigurationService = yield* PaymentProviderConfigurationService;
+    const mapUpdateError = (error: unknown) => {
+      const tagged = error as {
+        readonly _tag?: string;
+        readonly cause?: unknown;
+        readonly message?: string;
+      };
+      switch (tagged._tag) {
+        case "ActionForbiddenError":
+          return new RpcActionForbiddenError({ message: tagged.message ?? "" });
+        case "PaymentProviderConfigurationKeyUnavailableError":
+          return new RpcPaymentProviderConfigurationKeyUnavailableError({
+            message: tagged.message ?? "",
+          });
+        case "PaymentProviderConfigurationNotFoundError":
+          return new RpcPaymentProviderConfigurationNotFoundError({
+            message: tagged.message ?? "",
+          });
+        case "PaymentProviderConfigurationValidationError":
+          return new RpcPaymentProviderConfigurationValidationError({
+            cause: String(tagged.cause ?? error),
+          });
+        default:
+          return new RpcPaymentProviderConfigurationServiceError({
+            cause: String(tagged.cause ?? error),
+          });
+      }
+    };
+    return {
+      CreatePaymentProviderConfiguration: (input) =>
+        paymentProviderConfigurationService.createPaymentProviderConfiguration(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaymentProviderAlreadyExistsError: (error) =>
+              Effect.fail(new RpcPaymentProviderAlreadyExistsError({ message: error.message })),
+            PaymentProviderConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPaymentProviderConfigurationServiceError({ cause: error.cause })),
+            PaymentProviderConfigurationValidationError: (error) =>
+              Effect.fail(
+                new RpcPaymentProviderConfigurationValidationError({ cause: error.cause }),
+              ),
+          }),
+        ),
+      DeletePaymentProviderConfiguration: (input) =>
+        paymentProviderConfigurationService.deletePaymentProviderConfiguration(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaymentProviderConfigurationNotFoundError: (error) =>
+              Effect.fail(
+                new RpcPaymentProviderConfigurationNotFoundError({ message: error.message }),
+              ),
+            PaymentProviderConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPaymentProviderConfigurationServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetPaymentProviderConfiguration: ({ id }) =>
+        paymentProviderConfigurationService.getPaymentProviderConfigurationById(id).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaymentProviderConfigurationNotFoundError: (error) =>
+              Effect.fail(
+                new RpcPaymentProviderConfigurationNotFoundError({ message: error.message }),
+              ),
+            PaymentProviderConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPaymentProviderConfigurationServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListPaymentProviderConfigurations: ({ projectId }) =>
+        paymentProviderConfigurationService.getPaymentProviderConfigurations(projectId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaymentProviderConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPaymentProviderConfigurationServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdatePaymentProviderConfiguration: (input) =>
+        paymentProviderConfigurationService.updatePaymentProviderConfiguration(input).pipe(
+          Effect.map((result) => ({ id: (result as { readonly id: string }).id }) as const),
+          Effect.mapError(mapUpdateError),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/payment-provider-product-rpcs.ts b/apps/backend/src/rpcs/payment-provider-product-rpcs.ts
new file mode 100644
index 000000000..8f6f480d3
--- /dev/null
+++ b/apps/backend/src/rpcs/payment-provider-product-rpcs.ts
@@ -0,0 +1,95 @@
+import { PaymentProviderProductService } from "@voidhash/core/services";
+import {
+  PaymentProviderProductRpcsDef,
+  RpcActionForbiddenError,
+  RpcPaymentProviderProductNotFoundError,
+  RpcPaymentProviderProductServiceError,
+  RpcPaymentProviderProductValidationError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PaymentProviderProductRpcsLive = PaymentProviderProductRpcsDef.toLayer(
+  Effect.gen(function* PaymentProviderProductRpcsLive() {
+    const paymentProviderProductService = yield* PaymentProviderProductService;
+    const mapCreateError = (error: unknown) => {
+      const tagged = error as {
+        readonly _tag?: string;
+        readonly cause?: unknown;
+        readonly message?: string;
+      };
+      switch (tagged._tag) {
+        case "ActionForbiddenError":
+          return new RpcActionForbiddenError({ message: tagged.message ?? "" });
+        case "PaymentProviderProductValidationError":
+          return new RpcPaymentProviderProductValidationError({ message: tagged.message ?? "" });
+        default:
+          return new RpcPaymentProviderProductServiceError({
+            cause: String(tagged.cause ?? error),
+          });
+      }
+    };
+    const mapUpdateError = (error: unknown) => {
+      const tagged = error as {
+        readonly _tag?: string;
+        readonly cause?: unknown;
+        readonly message?: string;
+      };
+      switch (tagged._tag) {
+        case "ActionForbiddenError":
+          return new RpcActionForbiddenError({ message: tagged.message ?? "" });
+        case "PaymentProviderProductNotFoundError":
+          return new RpcPaymentProviderProductNotFoundError({ message: tagged.message ?? "" });
+        case "PaymentProviderProductValidationError":
+          return new RpcPaymentProviderProductValidationError({ message: tagged.message ?? "" });
+        default:
+          return new RpcPaymentProviderProductServiceError({
+            cause: String(tagged.cause ?? error),
+          });
+      }
+    };
+    return {
+      CreatePaymentProviderProduct: (input) =>
+        paymentProviderProductService.createPaymentProviderProduct(input).pipe(
+          Effect.map((result) => ({ id: (result as { readonly id: string }).id }) as const),
+          Effect.mapError(mapCreateError),
+        ),
+      DeletePaymentProviderProduct: (input) =>
+        paymentProviderProductService.deletePaymentProviderProduct(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaymentProviderProductServiceError: (error) =>
+              Effect.fail(new RpcPaymentProviderProductServiceError({ cause: error.cause })),
+            PaymentProviderProductValidationError: (error) =>
+              Effect.fail(new RpcPaymentProviderProductValidationError({ message: error.message })),
+          }),
+        ),
+      ListProviderProductsByProductId: ({ productId }) =>
+        paymentProviderProductService.getProviderProductsByProductId(productId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaymentProviderProductServiceError: (error) =>
+              Effect.fail(new RpcPaymentProviderProductServiceError({ cause: error.cause })),
+            PaymentProviderProductValidationError: (error) =>
+              Effect.fail(new RpcPaymentProviderProductValidationError({ message: error.message })),
+          }),
+        ),
+      SetActivePaymentProviderProduct: (input) =>
+        paymentProviderProductService.setActivePaymentProviderProduct(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaymentProviderProductServiceError: (error) =>
+              Effect.fail(new RpcPaymentProviderProductServiceError({ cause: error.cause })),
+            PaymentProviderProductValidationError: (error) =>
+              Effect.fail(new RpcPaymentProviderProductValidationError({ message: error.message })),
+          }),
+        ),
+      UpdatePaymentProviderProduct: (input) =>
+        paymentProviderProductService
+          .updatePaymentProviderProduct(input)
+          .pipe(Effect.mapError(mapUpdateError), Effect.asVoid),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/paywall-asset-rpcs.ts b/apps/backend/src/rpcs/paywall-asset-rpcs.ts
new file mode 100644
index 000000000..7b3fee588
--- /dev/null
+++ b/apps/backend/src/rpcs/paywall-asset-rpcs.ts
@@ -0,0 +1,61 @@
+import { PaywallAssetService } from "@voidhash/core/services";
+import {
+  PaywallAssetRpcsDef,
+  RpcActionForbiddenError,
+  RpcPaywallAssetNotFoundError,
+  RpcPaywallAssetServiceError,
+  RpcPaywallAssetValidationError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PaywallAssetRpcsLive = PaywallAssetRpcsDef.toLayer(
+  Effect.gen(function* PaywallAssetRpcsLive() {
+    const paywallAssetService = yield* PaywallAssetService;
+    return {
+      UploadPaywallAsset: ({ organizationId, name, contentType, imageBase64, width, height }) =>
+        paywallAssetService
+          .upload({ organizationId, name, contentType, imageBase64, width, height })
+          .pipe(
+            Effect.catchTags({
+              PaywallAssetForbiddenError: (error) =>
+                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+              PaywallAssetValidationError: (error) =>
+                Effect.fail(new RpcPaywallAssetValidationError({ message: error.message })),
+              PaywallAssetServiceError: (error) =>
+                Effect.fail(new RpcPaywallAssetServiceError({ message: error.message })),
+            }),
+          ),
+      ListPaywallAssets: ({ organizationId }) =>
+        paywallAssetService.list({ organizationId }).pipe(
+          Effect.catchTags({
+            PaywallAssetForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallAssetServiceError: (error) =>
+              Effect.fail(new RpcPaywallAssetServiceError({ message: error.message })),
+          }),
+        ),
+      RenamePaywallAsset: ({ assetId, name }) =>
+        paywallAssetService.rename({ assetId, name }).pipe(
+          Effect.catchTags({
+            PaywallAssetForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallAssetNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallAssetNotFoundError({ assetId: error.assetId })),
+            PaywallAssetServiceError: (error) =>
+              Effect.fail(new RpcPaywallAssetServiceError({ message: error.message })),
+          }),
+        ),
+      DeletePaywallAsset: ({ assetId }) =>
+        paywallAssetService.delete({ assetId }).pipe(
+          Effect.catchTags({
+            PaywallAssetForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallAssetNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallAssetNotFoundError({ assetId: error.assetId })),
+            PaywallAssetServiceError: (error) =>
+              Effect.fail(new RpcPaywallAssetServiceError({ message: error.message })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/paywall-component-rpcs.ts b/apps/backend/src/rpcs/paywall-component-rpcs.ts
new file mode 100644
index 000000000..285dec8db
--- /dev/null
+++ b/apps/backend/src/rpcs/paywall-component-rpcs.ts
@@ -0,0 +1,34 @@
+import { PaywallDeployService } from "@voidhash/core/services";
+import {
+  PaywallComponentRpcsDef,
+  RpcActionForbiddenError,
+  RpcPaywallDeployServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PaywallComponentRpcsLive = PaywallComponentRpcsDef.toLayer(
+  Effect.gen(function* () {
+    const deployService = yield* PaywallDeployService;
+
+    return {
+      GetPaywallComponentVersions: ({ projectId, refs }) =>
+        deployService.getComponentVersions({ projectId, refs }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallDeployServiceError: (error) =>
+              Effect.fail(new RpcPaywallDeployServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListPaywallComponents: ({ projectId }) =>
+        deployService.listComponents({ projectId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallDeployServiceError: (error) =>
+              Effect.fail(new RpcPaywallDeployServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/paywall-deploy-rpcs.ts b/apps/backend/src/rpcs/paywall-deploy-rpcs.ts
new file mode 100644
index 000000000..74688cd43
--- /dev/null
+++ b/apps/backend/src/rpcs/paywall-deploy-rpcs.ts
@@ -0,0 +1,48 @@
+import { PaywallDeployService } from "@voidhash/core/services";
+import {
+  PaywallDeployRpcsDef,
+  RpcActionForbiddenError,
+  RpcPaywallDeployServiceError,
+  RpcPaywallDeployValidationError,
+  RpcReleaseNotFoundError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PaywallDeployRpcsLive = PaywallDeployRpcsDef.toLayer(
+  Effect.gen(function* () {
+    const deployService = yield* PaywallDeployService;
+
+    return {
+      ListPaywallDeploys: ({ projectId }) =>
+        deployService.listDeploys({ projectId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallDeployServiceError: (error) =>
+              Effect.fail(new RpcPaywallDeployServiceError({ cause: error.cause })),
+          }),
+        ),
+      SetActivePaywallRelease: ({ releaseId }) =>
+        deployService.setActivePaywallRelease({ releaseId }).pipe(
+          Effect.map((result) => ({ releaseId: result.id })),
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcPaywallDeployServiceError({ cause: error.cause })),
+            PaywallDeployServiceError: (error) =>
+              Effect.fail(new RpcPaywallDeployServiceError({ cause: error.cause })),
+            PaywallDeployValidationError: (error) =>
+              Effect.fail(
+                new RpcPaywallDeployValidationError({
+                  message: error.message,
+                  violations: error.violations,
+                }),
+              ),
+            PaywallReleaseNotFoundError: () =>
+              Effect.fail(new RpcReleaseNotFoundError({ releaseId })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/paywall-location-rpcs.ts b/apps/backend/src/rpcs/paywall-location-rpcs.ts
new file mode 100644
index 000000000..18cb58590
--- /dev/null
+++ b/apps/backend/src/rpcs/paywall-location-rpcs.ts
@@ -0,0 +1,99 @@
+import { PaywallLocationService } from "@voidhash/core/services";
+import {
+  PaywallLocationRpcsDef,
+  RpcActionForbiddenError,
+  RpcPaywallLocationNotFoundError,
+  RpcPaywallLocationServiceError,
+  RpcPaywallLocationShowingValidationError,
+  RpcPaywallLocationSlugAlreadyExistsError,
+  RpcPaywallNotFoundError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PaywallLocationRpcsLive = PaywallLocationRpcsDef.toLayer(
+  Effect.gen(function* PaywallLocationRpcsLive() {
+    const service = yield* PaywallLocationService;
+
+    return {
+      ArchivePaywallLocation: ({ locationId }) =>
+        service.archiveLocation({ locationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallLocationNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallLocationNotFoundError({ message: error.message })),
+            PaywallLocationServiceError: (error) =>
+              Effect.fail(new RpcPaywallLocationServiceError({ cause: error.cause })),
+          }),
+        ),
+      AssignPaywallLocationShowing: (input) =>
+        service.assignLocationShowing(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallLocationNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallLocationNotFoundError({ message: error.message })),
+            PaywallLocationServiceError: (error) =>
+              Effect.fail(new RpcPaywallLocationServiceError({ cause: error.cause })),
+            PaywallLocationShowingValidationError: (error) =>
+              Effect.fail(new RpcPaywallLocationShowingValidationError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+          }),
+        ),
+      ClearPaywallLocationShowing: ({ locationId }) =>
+        service.clearLocationShowing({ locationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallLocationNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallLocationNotFoundError({ message: error.message })),
+            PaywallLocationServiceError: (error) =>
+              Effect.fail(new RpcPaywallLocationServiceError({ cause: error.cause })),
+          }),
+        ),
+      CreatePaywallLocation: (input) =>
+        service.createLocation(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallLocationServiceError: (error) =>
+              Effect.fail(new RpcPaywallLocationServiceError({ cause: error.cause })),
+            PaywallLocationSlugAlreadyExistsError: (error) =>
+              Effect.fail(new RpcPaywallLocationSlugAlreadyExistsError({ slug: error.slug })),
+          }),
+        ),
+      ListPaywallLocations: (input) =>
+        service.listLocations(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallLocationServiceError: (error) =>
+              Effect.fail(new RpcPaywallLocationServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListPaywallLocationShowings: ({ locationId }) =>
+        service.listLocationShowings({ locationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallLocationNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallLocationNotFoundError({ message: error.message })),
+            PaywallLocationServiceError: (error) =>
+              Effect.fail(new RpcPaywallLocationServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdatePaywallLocation: (input) =>
+        service.updateLocation(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallLocationNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallLocationNotFoundError({ message: error.message })),
+            PaywallLocationServiceError: (error) =>
+              Effect.fail(new RpcPaywallLocationServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/paywall-rpcs.ts b/apps/backend/src/rpcs/paywall-rpcs.ts
new file mode 100644
index 000000000..8b5dc8e17
--- /dev/null
+++ b/apps/backend/src/rpcs/paywall-rpcs.ts
@@ -0,0 +1,161 @@
+import { MimicHost, PaywallReleaseService, PaywallService } from "@voidhash/core/services";
+import {
+  PaywallRpcsDef,
+  RpcActionForbiddenError,
+  RpcPaywallNotFoundError,
+  RpcPaywallReleaseError,
+  RpcPaywallServiceError,
+  RpcPaywallSlugAlreadyExistsError,
+  RpcReleaseNotFoundError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PaywallRpcsLive = PaywallRpcsDef.toLayer(
+  Effect.gen(function* () {
+    const paywallService = yield* PaywallService;
+    const releaseService = yield* PaywallReleaseService;
+    const mimicHost = yield* MimicHost;
+
+    return {
+      CreatePaywall: (input) =>
+        paywallService.createPaywall(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+            PaywallSlugAlreadyExistsError: (error) =>
+              Effect.fail(new RpcPaywallSlugAlreadyExistsError({ slug: error.slug })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
+      CreatePaywallRelease: ({ paywallId }) =>
+        releaseService.createRelease(paywallId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallReleaseError: (error) =>
+              Effect.fail(
+                new RpcPaywallReleaseError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+      ArchivePaywall: (input) =>
+        paywallService.archivePaywall(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
+      DeletePaywall: (input) =>
+        paywallService.deletePaywall(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetPaywallDraftRelease: ({ paywallId }) =>
+        releaseService.getDraftRelease(paywallId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallReleaseError: (error) =>
+              Effect.fail(
+                new RpcPaywallReleaseError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+      ListPaywalls: ({ includeArchived, projectId }) =>
+        paywallService.getPaywalls(projectId, includeArchived).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
+      PublishPaywallRelease: ({ releaseId }) =>
+        releaseService.publishRelease(releaseId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallReleaseError({ message: error.message })),
+            PaywallReleaseError: (error) =>
+              Effect.fail(
+                new RpcPaywallReleaseError({ cause: error.cause, message: error.message }),
+              ),
+            ReleaseNotFoundError: (error) =>
+              Effect.fail(new RpcReleaseNotFoundError({ releaseId: error.releaseId })),
+          }),
+        ),
+      RenamePaywall: (input) =>
+        paywallService.renamePaywall(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
+      RestorePaywall: (input) =>
+        paywallService.restorePaywall(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
+      RequestPaywallEditToken: ({ paywallId }) =>
+        paywallService.getPaywallById(paywallId).pipe(
+          Effect.flatMap(() => mimicHost.ensurePaywallDocument(paywallId)),
+          Effect.flatMap(() => mimicHost.createPaywallEditToken({ paywallId })),
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            // MimicHostError details carry internals (binding names, host
+            // URLs, SDK errors) — log them server-side, return a generic
+            // cause to clients.
+            MimicHostError: (error) =>
+              Effect.logError(`Paywall edit token mimic host error: ${error.message}`, error).pipe(
+                Effect.flatMap(() =>
+                  Effect.fail(
+                    new RpcPaywallServiceError({ cause: "paywall editing backend unavailable" }),
+                  ),
+                ),
+              ),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts b/apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts
new file mode 100644
index 000000000..006081b44
--- /dev/null
+++ b/apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts
@@ -0,0 +1,207 @@
+/**
+ * Unit tests for the surviving document-first paywall workspace RPC handlers.
+ * They dispatch through `RpcTest.makeClient` against the REAL
+ * {@link PaywallWorkspaceRpcsLive} handler graph fed by the REAL
+ * {@link PaywallWorkspaceService} over mocked infrastructure (MimicHost /
+ * PaywallService / manifest cache) plus a pass-through AuthMiddleware — so the
+ * `ReadPaywallDocument` read seam (slug resolution + whole-document clean) is
+ * exercised end to end without an HTTP transport or a live document.
+ */
+import {
+  ComponentManifestCacheService,
+  PaywallWorkspaceService,
+} from "@voidhash/core/services";
+import { MimicHost } from "@voidhash/core/services/paywalls/MimicHost";
+import { PaywallService } from "@voidhash/core/services/paywalls/PaywallService";
+import { ScreenNode, TextNode } from "@voidhash/mimic-schema";
+import { encodePaywallDocument } from "@voidhash/paywall-workspace";
+import { AuthMiddleware, AuthSession, PaywallWorkspaceRpcsDef } from "@voidhash/rpc";
+import { Effect, Exit, Layer } from "effect";
+import { RpcTest } from "effect/unstable/rpc";
+import { describe, expect, it } from "vite-plus/test";
+
+import { PaywallWorkspaceRpcsLive } from "./paywall-workspace-rpcs.ts";
+
+// ── Fixtures ─────────────────────────────────────────────────────────────────
+
+const paywallRow = () => ({
+  id: "pw_1",
+  slug: "trial",
+  projectId: "proj_1",
+  name: "Trial",
+  archivedAt: null,
+  createdAt: new Date(),
+  updatedAt: new Date(),
+  source: 1,
+  thumbnailUrl: null,
+  thumbnailSeq: null,
+  designFileMetadata: null,
+});
+
+/** A raw document tree with no components (a single screen). */
+const emptyDoc = () =>
+  encodePaywallDocument([
+    { type: "root", name: "Paywall", children: [{ type: "screen", name: "Main" }] },
+  ]);
+
+interface Fakes {
+  /** The session the pass-through AuthMiddleware injects (default: a signed-in user). */
+  readonly session?: unknown;
+  /** Decoded document root `getPaywallDocument` returns (the `ReadPaywallDocument` read path). */
+  readonly root?: unknown;
+}
+
+/** A cookie-authenticated user session. */
+const USER_SESSION = { method: "user", user: { id: "user_1" } };
+
+/** The mocked infrastructure + REAL workspace service + RPC handlers. */
+const buildHandlerLayer = (fakes: Fakes) => {
+  const paywallLayer = Layer.succeed(PaywallService, {
+    getPaywalls: () => Effect.succeed([paywallRow()]),
+  } as unknown as PaywallService["Service"]);
+
+  const mimicLayer = Layer.succeed(MimicHost, {
+    ensurePaywallDocument: () => Effect.void,
+    getPaywallSnapshot: () => Effect.succeed(null),
+    getPaywallDocument: () =>
+      Effect.sync(() => ({ tree: emptyDoc(), version: 1, root: fakes.root ?? null })),
+    submitPaywallTransaction: (_id: string, input: { baseVersion: number }) =>
+      Effect.succeed({ accepted: true, version: input.baseVersion + 1 }),
+    createPaywallEditToken: () =>
+      Effect.succeed({ token: "", url: "", expiresAt: new Date() }),
+  } as unknown as MimicHost["Service"]);
+
+  const cacheLayer = Layer.succeed(ComponentManifestCacheService, {
+    record: () => Effect.void,
+    getMany: () => Effect.succeed(new Map()),
+  } as unknown as ComponentManifestCacheService["Service"]);
+
+  const infra = Layer.mergeAll(paywallLayer, mimicLayer, cacheLayer);
+  const workspaceLayer = PaywallWorkspaceService.layer.pipe(Layer.provide(infra));
+
+  // A pass-through AuthMiddleware that injects the request session.
+  const session = fakes.session ?? USER_SESSION;
+  const authMiddlewareLayer = Layer.succeed(
+    AuthMiddleware,
+    AuthMiddleware.of((effect) => Effect.provideService(effect, AuthSession, session as never)),
+  );
+
+  return Layer.mergeAll(
+    PaywallWorkspaceRpcsLive.pipe(
+      Layer.provide(Layer.mergeAll(workspaceLayer, cacheLayer)),
+    ),
+    authMiddlewareLayer,
+  );
+};
+
+/**
+ * A local view of the RPC client. The generated `RpcClient` types resolve
+ * `Effect` from the rpc package's own effect instance, which trips a dual-
+ * instance clash; a hand-written interface keeps every effect on one instance.
+ */
+interface ReadDocumentResult {
+  slug: string;
+  name: string;
+  paywallId: string;
+  document: unknown;
+}
+
+interface WorkspaceClient {
+  ReadPaywallDocument: (payload: {
+    projectId: string;
+    slug: string;
+  }) => Effect.Effect<ReadDocumentResult, unknown>;
+}
+
+const dispatch = <A>(fakes: Fakes, f: (client: WorkspaceClient) => Effect.Effect<A, unknown>) =>
+  Effect.runPromiseExit(
+    Effect.gen(function* () {
+      const client = (yield* RpcTest.makeClient(PaywallWorkspaceRpcsDef)) as unknown as WorkspaceClient;
+      return yield* f(client);
+    }).pipe(Effect.provide(buildHandlerLayer(fakes)), Effect.scoped),
+  );
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const decodeNodeData = (prim: any, input: unknown): Record<string, unknown> =>
+  prim.data.decode(prim.data.encode(input)) as Record<string, unknown>;
+
+/**
+ * A decoded document root (`root` → `screen` → `text`) with the CRDT envelopes
+ * the engine's decode produces — the exact shape `getPaywallDocument.root` carries
+ * and `serializeDocument` cleans. One authored deviation (`paddingTop`) + literal
+ * text so the cleaned JSON is non-trivial to assert on.
+ */
+const decodedRoot = () => ({
+  id: "root_1",
+  type: "root",
+  parentId: null,
+  pos: 0,
+  data: {},
+  children: [
+    {
+      id: "scr_1",
+      type: "screen",
+      parentId: "root_1",
+      pos: 0,
+      data: decodeNodeData(ScreenNode, { name: "Main", style: { paddingTop: 24 } }),
+      children: [
+        {
+          id: "txt_1",
+          type: "text",
+          parentId: "scr_1",
+          pos: 0,
+          data: decodeNodeData(TextNode, { text: "Hello" }),
+          children: [],
+        },
+      ],
+    },
+  ],
+});
+
+describe("PaywallWorkspaceRpcs — ReadPaywallDocument (read_paywall)", () => {
+  it("returns the slug/name/id + the cleaned document JSON", async () => {
+    const exit = await dispatch({ root: decodedRoot() }, (client) =>
+      client.ReadPaywallDocument({ projectId: "proj_1", slug: "trial" }),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.slug).toBe("trial");
+      expect(exit.value.name).toBe("Trial");
+      expect(exit.value.paywallId).toBe("pw_1");
+      const doc = exit.value.document as {
+        id: string;
+        type: string;
+        children: ReadonlyArray<{ type: string; style?: unknown; children?: unknown[] }>;
+      };
+      expect(doc.id).toBe("root_1");
+      expect(doc.type).toBe("root");
+      // Defaults are stripped: the screen shows only the authored paddingTop.
+      const screen = doc.children[0]!;
+      expect(screen.type).toBe("screen");
+      expect(screen.style).toEqual({ paddingTop: 24 });
+      const text = (screen.children as ReadonlyArray<{ type: string; text?: string }>)[0]!;
+      expect(text.type).toBe("text");
+      expect(text.text).toBe("Hello");
+    }
+  });
+
+  it("returns an empty document object when the live document has no root", async () => {
+    const exit = await dispatch({ root: null }, (client) =>
+      client.ReadPaywallDocument({ projectId: "proj_1", slug: "trial" }),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.document).toEqual({});
+    }
+  });
+
+  it("maps an unknown slug to Rpc/PaywallNotFoundError", async () => {
+    const exit = await dispatch({ root: decodedRoot() }, (client) =>
+      client.ReadPaywallDocument({ projectId: "proj_1", slug: "missing" }),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(JSON.stringify(exit.cause)).toContain("Rpc/PaywallNotFoundError");
+    }
+  });
+});
diff --git a/apps/backend/src/rpcs/paywall-workspace-rpcs.ts b/apps/backend/src/rpcs/paywall-workspace-rpcs.ts
new file mode 100644
index 000000000..6bf401977
--- /dev/null
+++ b/apps/backend/src/rpcs/paywall-workspace-rpcs.ts
@@ -0,0 +1,87 @@
+import {
+  ComponentManifestCacheService,
+  PaywallWorkspaceService,
+} from "@voidhash/core/services";
+import {
+  serializeDocument,
+  type SnapshotDocumentNode,
+} from "@voidhash/ai-shared";
+import {
+  PaywallWorkspaceRpcsDef,
+  RpcActionForbiddenError,
+  RpcComponentManifestInvalidError,
+  RpcPaywallNotFoundError,
+  RpcPaywallWorkspaceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+/**
+ * Read-only paywall workspace RPC handlers plus the content-addressed manifest
+ * upload. List a project's paywall directories, read a paywall's live document as
+ * cleaned JSON (the AI `read_paywall` tool), and accept the browser's manifest
+ * uploads. Component edits go through the document-first AI/MCP tools; there is
+ * no whole-fork apply. Service errors are mapped to the workspace RPC error
+ * union; the underlying mimic/DB details stay server-side.
+ */
+export const PaywallWorkspaceRpcsLive = PaywallWorkspaceRpcsDef.toLayer(
+  Effect.gen(function* () {
+    const workspace = yield* PaywallWorkspaceService;
+    const manifestCache = yield* ComponentManifestCacheService;
+
+    return {
+      ListWorkspacePaywalls: ({ projectId }) =>
+        workspace.listPaywalls(projectId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallWorkspaceError({ message: error.cause })),
+          }),
+        ),
+      /**
+       * Read another paywall's LIVE document as cleaned JSON for the AI
+       * `read_paywall` tool. `readDocument` resolves the slug within `projectId`
+       * (the slug MUST belong to the project) and reads the decoded document root,
+       * which {@link serializeDocument} cleans into the schema-loose tree the model
+       * reads (nested `{ id, type, name?, ...data, children }`, defaults stripped).
+       * Read-only.
+       */
+      ReadPaywallDocument: ({ projectId, slug }) =>
+        workspace.readDocument(projectId, slug).pipe(
+          Effect.map((resolved) => {
+            // The decoded renderer root is the single `SnapshotDocumentNode` the
+            // serializer cleans; `serializeDocument` unwraps CRDT envelopes and
+            // strips schema-default fields. A `null`/missing root (empty document)
+            // serializes to `{}` so the wire shape stays a document object.
+            const roots =
+              resolved.root != null ? [resolved.root as SnapshotDocumentNode] : [];
+            return {
+              slug: resolved.slug,
+              name: resolved.name,
+              paywallId: resolved.paywallId,
+              document: serializeDocument(roots) ?? {},
+            };
+          }),
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcPaywallNotFoundError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallWorkspaceError({ message: error.cause })),
+            PaywallWorkspaceServiceError: (error) =>
+              Effect.fail(new RpcPaywallWorkspaceError({ message: error.message })),
+          }),
+        ),
+      RecordComponentManifest: (input) =>
+        manifestCache.record(input).pipe(
+          Effect.catchTags({
+            ComponentManifestInvalidError: (error) =>
+              Effect.fail(new RpcComponentManifestInvalidError({ message: error.message })),
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new RpcPaywallWorkspaceError({ message: error.message })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/perk-rpcs.ts b/apps/backend/src/rpcs/perk-rpcs.ts
new file mode 100644
index 000000000..e5ae68766
--- /dev/null
+++ b/apps/backend/src/rpcs/perk-rpcs.ts
@@ -0,0 +1,48 @@
+import { PerkService } from "@voidhash/core/services";
+import {
+  PerkRpcsDef,
+  RpcActionForbiddenError,
+  RpcPerkNotFoundError,
+  RpcPerkServiceError,
+  RpcPerkSlugAlreadyExistsError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const PerkRpcsLive = PerkRpcsDef.toLayer(
+  Effect.gen(function* PerkRpcsLive() {
+    const perkService = yield* PerkService;
+    return {
+      CreatePerk: (input) =>
+        perkService.createPerk(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PerkServiceError: (error) =>
+              Effect.fail(new RpcPerkServiceError({ cause: error.cause })),
+            PerkSlugAlreadyExistsError: (error) =>
+              Effect.fail(new RpcPerkSlugAlreadyExistsError({ slug: error.slug })),
+          }),
+        ),
+      DeletePerk: (input) =>
+        perkService.deletePerk(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PerkNotFoundError: (error) =>
+              Effect.fail(new RpcPerkNotFoundError({ message: error.message })),
+            PerkServiceError: (error) =>
+              Effect.fail(new RpcPerkServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListPerks: ({ projectId }) =>
+        perkService.getPerks(projectId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PerkServiceError: (error) =>
+              Effect.fail(new RpcPerkServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/person-rpcs.ts b/apps/backend/src/rpcs/person-rpcs.ts
new file mode 100644
index 000000000..8d92a817a
--- /dev/null
+++ b/apps/backend/src/rpcs/person-rpcs.ts
@@ -0,0 +1,87 @@
+import { PersonService } from "@voidhash/core/services";
+import { PersonOrigin } from "@voidhash/db";
+import {
+  Person,
+  PersonRpcsDef,
+  RpcActionForbiddenError,
+  RpcPersonNotFoundError,
+  RpcPersonServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+const toRpcPerson = (person: {
+  createdAt: Date | null;
+  personId: string;
+  distinctId: string;
+  email: string | null;
+  kind: number;
+  name: string | null;
+}) =>
+  ({
+    createdAt: person.createdAt,
+    personId: person.personId,
+    distinctId: person.distinctId,
+    email: person.email,
+    name: person.name,
+    type: person.kind,
+  }) satisfies typeof Person.Type;
+
+export const PersonRpcsLive = PersonRpcsDef.toLayer(
+  Effect.gen(function* PersonRpcsLive() {
+    const personService = yield* PersonService;
+    return {
+      CreatePerson: ({ distinctId, name, email, projectId }) =>
+        personService
+          .createPerson({
+            distinctId,
+            email: email ?? null,
+            name: name ?? null,
+            origin: PersonOrigin.API,
+            projectId,
+          })
+          .pipe(
+            Effect.map(toRpcPerson),
+            Effect.catchTags({
+              PersonServiceError: (error) =>
+                Effect.fail(new RpcPersonServiceError({ cause: error.cause })),
+            }),
+          ),
+      GetPersonByDistinctId: ({ distinctId, projectId }) =>
+        personService.getPersonByDistinctId(distinctId, projectId).pipe(
+          Effect.map(toRpcPerson),
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PersonNotFoundError: (error) =>
+              Effect.fail(new RpcPersonNotFoundError({ id: error.id })),
+            PersonServiceError: (error) =>
+              Effect.fail(new RpcPersonServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetPersonById: ({ personId }) =>
+        personService.getPersonById(personId).pipe(
+          Effect.map(toRpcPerson),
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PersonNotFoundError: (error) =>
+              Effect.fail(new RpcPersonNotFoundError({ id: error.id })),
+            PersonServiceError: (error) =>
+              Effect.fail(new RpcPersonServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListPersons: ({ projectId }) =>
+        personService.getPersons({ projectId }).pipe(
+          Effect.map((persons) =>
+            persons.flatMap((person) => (person ? [toRpcPerson(person)] : [])),
+          ),
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PersonServiceError: (error) =>
+              Effect.fail(new RpcPersonServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/product-perk-rpcs.ts b/apps/backend/src/rpcs/product-perk-rpcs.ts
new file mode 100644
index 000000000..7dcd1ad09
--- /dev/null
+++ b/apps/backend/src/rpcs/product-perk-rpcs.ts
@@ -0,0 +1,50 @@
+import { ProductPerkService } from "@voidhash/core/services";
+import {
+  ProductPerkRpcsDef,
+  RpcActionForbiddenError,
+  RpcProductPerkServiceError,
+  RpcProductPerkValidationError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const ProductPerkRpcsLive = ProductPerkRpcsDef.toLayer(
+  Effect.gen(function* ProductPerkRpcsLive() {
+    const productPerkService = yield* ProductPerkService;
+    return {
+      CreateProductPerk: (input) =>
+        productPerkService.createProductPerk(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductPerkServiceError: (error) =>
+              Effect.fail(new RpcProductPerkServiceError({ cause: error.cause })),
+            ProductPerkValidationError: (error) =>
+              Effect.fail(new RpcProductPerkValidationError({ message: error.message })),
+          }),
+          Effect.asVoid,
+        ),
+      DeleteProductPerk: (input) =>
+        productPerkService.deleteProductPerk(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductPerkServiceError: (error) =>
+              Effect.fail(new RpcProductPerkServiceError({ cause: error.cause })),
+            ProductPerkValidationError: (error) =>
+              Effect.fail(new RpcProductPerkValidationError({ message: error.message })),
+          }),
+        ),
+      ListProductPerksByProductId: ({ productId }) =>
+        productPerkService.getProductPerksByProductId(productId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductPerkServiceError: (error) =>
+              Effect.fail(new RpcProductPerkServiceError({ cause: error.cause })),
+            ProductPerkValidationError: (error) =>
+              Effect.fail(new RpcProductPerkValidationError({ message: error.message })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/product-rpcs.ts b/apps/backend/src/rpcs/product-rpcs.ts
new file mode 100644
index 000000000..c906b9ccb
--- /dev/null
+++ b/apps/backend/src/rpcs/product-rpcs.ts
@@ -0,0 +1,70 @@
+import { ProductService } from "@voidhash/core/services";
+import {
+  ProductRpcsDef,
+  RpcActionForbiddenError,
+  RpcProductNotFoundError,
+  RpcProductServiceError,
+  RpcProductSlugAlreadyExistsError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const ProductRpcsLive = ProductRpcsDef.toLayer(
+  Effect.gen(function* ProductRpcsLive() {
+    const productService = yield* ProductService;
+    return {
+      CreateProduct: (input) =>
+        productService.createProduct(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductServiceError: (error) =>
+              Effect.fail(new RpcProductServiceError({ cause: error.cause })),
+            ProductSlugAlreadyExistsError: (error) =>
+              Effect.fail(new RpcProductSlugAlreadyExistsError({ slug: error.slug })),
+          }),
+        ),
+      DeleteProduct: (input) =>
+        productService.deleteProduct(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductNotFoundError: (error) =>
+              Effect.fail(new RpcProductNotFoundError({ message: error.message })),
+            ProductServiceError: (error) =>
+              Effect.fail(new RpcProductServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetProduct: ({ id }) =>
+        productService.getProductById(id).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductNotFoundError: (error) =>
+              Effect.fail(new RpcProductNotFoundError({ message: error.message })),
+            ProductServiceError: (error) =>
+              Effect.fail(new RpcProductServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListProducts: ({ projectId }) =>
+        productService.getProducts(projectId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductServiceError: (error) =>
+              Effect.fail(new RpcProductServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdateProduct: (input) =>
+        productService.updateProduct(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProductNotFoundError: (error) =>
+              Effect.fail(new RpcProductNotFoundError({ message: error.message })),
+            ProductServiceError: (error) =>
+              Effect.fail(new RpcProductServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/project-rpcs.ts b/apps/backend/src/rpcs/project-rpcs.ts
new file mode 100644
index 000000000..41f45377d
--- /dev/null
+++ b/apps/backend/src/rpcs/project-rpcs.ts
@@ -0,0 +1,94 @@
+import { ProjectService } from "@voidhash/core/services";
+import {
+  ProjectRpcsDef,
+  RpcActionForbiddenError,
+  RpcAuthenticationError,
+  RpcAvatarValidationError,
+  RpcProjectNotFoundError,
+  RpcProjectServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const ProjectRpcsLive = ProjectRpcsDef.toLayer(
+  Effect.gen(function* ProjectRpcsLive() {
+    const projectService = yield* ProjectService;
+    return {
+      CreateProject: ({ name, organizationId }) =>
+        projectService.createProject({ name, organizationId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuthenticationError: (error) =>
+              Effect.fail(
+                new RpcAuthenticationError({ cause: error.cause, message: error.message }),
+              ),
+            ProjectServiceError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+          }),
+        ),
+      DeleteProject: ({ id }) =>
+        projectService.deleteProject({ id }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProjectNotFoundError: (error) =>
+              Effect.fail(new RpcProjectNotFoundError({ projectId: error.projectId })),
+            ProjectServiceError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+          }),
+        ),
+      ListProjects: ({ organizationId }) =>
+        projectService.getProjects(organizationId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProjectServiceError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+          }),
+        ),
+      RemoveProjectAvatar: ({ id }) =>
+        projectService.removeAvatar({ id }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+            ProjectNotFoundError: (error) =>
+              Effect.fail(new RpcProjectNotFoundError({ projectId: error.projectId })),
+            ProjectServiceError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+          }),
+        ),
+      SetProjectAvatar: ({ contentType, id, imageBase64 }) =>
+        projectService.setAvatar({ contentType, id, imageBase64 }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+            AvatarValidationError: (error) =>
+              Effect.fail(new RpcAvatarValidationError({ message: error.message })),
+            ProjectNotFoundError: (error) =>
+              Effect.fail(new RpcProjectNotFoundError({ projectId: error.projectId })),
+            ProjectServiceError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdateProject: ({ id, name }) =>
+        projectService.updateProject({ id, name }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            ProjectNotFoundError: (error) =>
+              Effect.fail(new RpcProjectNotFoundError({ projectId: error.projectId })),
+            ProjectServiceError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+            AuditLogPortError: (error) =>
+              Effect.fail(new RpcProjectServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/push-notification-configuration-rpcs.ts b/apps/backend/src/rpcs/push-notification-configuration-rpcs.ts
new file mode 100644
index 000000000..f26883999
--- /dev/null
+++ b/apps/backend/src/rpcs/push-notification-configuration-rpcs.ts
@@ -0,0 +1,113 @@
+import { NotificationsConfigurationService } from "@voidhash/core/services";
+import {
+  PushNotificationConfigurationRpcsDef,
+  RpcActionForbiddenError,
+  RpcPushNotificationConfigurationKeyUnavailableError,
+  RpcPushNotificationConfigurationNotFoundError,
+  RpcPushNotificationConfigurationServiceError,
+  RpcPushNotificationConfigurationValidationError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+/**
+ * Studio RPC surface for per-(project, provider) push credentials — the
+ * deferred config-CRUD slice from Phase 1, now wired. Delegates to
+ * {@link NotificationsConfigurationService} and translates its domain errors
+ * (plus the `ActionForbiddenError` from the project-permission check) into the
+ * `Rpc/Push…` wire errors. Handlers return the service's **secret-omitting**
+ * read DTO directly — the DTO is a plain `Schema.Struct`, so no `new Class(...)`
+ * encode is needed, and no secret ever reaches the browser.
+ */
+export const PushNotificationConfigurationRpcsLive = PushNotificationConfigurationRpcsDef.toLayer(
+  Effect.gen(function* PushNotificationConfigurationRpcsLive() {
+    const service = yield* NotificationsConfigurationService;
+    const mapUpdateError = (error: unknown) => {
+      const tagged = error as {
+        readonly _tag?: string;
+        readonly cause?: unknown;
+        readonly message?: string;
+      };
+      switch (tagged._tag) {
+        case "ActionForbiddenError":
+          return new RpcActionForbiddenError({ message: tagged.message ?? "" });
+        case "NotificationConfigNotFoundError":
+          return new RpcPushNotificationConfigurationNotFoundError({
+            message: tagged.message ?? "",
+          });
+        case "NotificationConfigKeyUnavailableError":
+          return new RpcPushNotificationConfigurationKeyUnavailableError({
+            message: tagged.message ?? "",
+          });
+        case "NotificationConfigValidationError":
+          return new RpcPushNotificationConfigurationValidationError({
+            cause: String(tagged.cause ?? error),
+          });
+        default:
+          return new RpcPushNotificationConfigurationServiceError({
+            cause: String(tagged.cause ?? error),
+          });
+      }
+    };
+    return {
+      ListPushNotificationConfigurations: ({ projectId }) =>
+        service.getPushNotificationConfigurations(projectId).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            NotificationsConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPushNotificationConfigurationServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetPushNotificationConfiguration: ({ id }) =>
+        service.getPushNotificationConfigurationById(id).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            NotificationConfigNotFoundError: (error) =>
+              Effect.fail(
+                new RpcPushNotificationConfigurationNotFoundError({ message: error.message }),
+              ),
+            NotificationsConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPushNotificationConfigurationServiceError({ cause: error.cause })),
+          }),
+        ),
+      CreatePushNotificationConfiguration: (input) =>
+        service.createPushNotificationConfiguration(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            NotificationConfigNotFoundError: (error) =>
+              Effect.fail(
+                new RpcPushNotificationConfigurationNotFoundError({ message: error.message }),
+              ),
+            NotificationConfigKeyUnavailableError: (error) =>
+              Effect.fail(
+                new RpcPushNotificationConfigurationKeyUnavailableError({
+                  message: error.message,
+                }),
+              ),
+            NotificationsConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPushNotificationConfigurationServiceError({ cause: error.cause })),
+          }),
+        ),
+      UpdatePushNotificationConfiguration: (input) =>
+        service.updatePushNotificationConfiguration(input).pipe(
+          Effect.map((result) => ({ id: (result as { readonly id: string }).id }) as const),
+          Effect.mapError(mapUpdateError),
+        ),
+      DeletePushNotificationConfiguration: (input) =>
+        service.deletePushNotificationConfiguration(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            NotificationConfigNotFoundError: (error) =>
+              Effect.fail(
+                new RpcPushNotificationConfigurationNotFoundError({ message: error.message }),
+              ),
+            NotificationsConfigurationServiceError: (error) =>
+              Effect.fail(new RpcPushNotificationConfigurationServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/push-notification-send-rpcs.ts b/apps/backend/src/rpcs/push-notification-send-rpcs.ts
new file mode 100644
index 000000000..4bc5f64c8
--- /dev/null
+++ b/apps/backend/src/rpcs/push-notification-send-rpcs.ts
@@ -0,0 +1,44 @@
+import { PushNotificationSendService } from "@voidhash/core/services";
+import {
+  PushNotificationSendRpcsDef,
+  RpcActionForbiddenError,
+  RpcPushNotificationSendNotFoundError,
+  RpcPushNotificationSendServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+/**
+ * Read-only studio RPC surface for push-notification send history — the
+ * "sent notifications" activity page. Delegates to
+ * {@link PushNotificationSendService} and translates its domain errors (plus the
+ * `ActionForbiddenError` from the project-permission check) into the `Rpc/Push…`
+ * wire errors. Handlers return the service's plain read DTOs directly (each is a
+ * `Schema.Struct`, so no `new Class(...)` encode is needed).
+ */
+export const PushNotificationSendRpcsLive = PushNotificationSendRpcsDef.toLayer(
+  Effect.gen(function* PushNotificationSendRpcsLive() {
+    const service = yield* PushNotificationSendService;
+    return {
+      ListPushNotificationSends: ({ limit, projectId }) =>
+        service.listSends({ limit, projectId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PushNotificationSendServiceError: (error) =>
+              Effect.fail(new RpcPushNotificationSendServiceError({ cause: error.cause })),
+          }),
+        ),
+      GetPushNotificationSendDeliveries: ({ projectId, sendId }) =>
+        service.getSendDeliveries({ projectId, sendId }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PushNotificationSendNotFoundError: (error) =>
+              Effect.fail(new RpcPushNotificationSendNotFoundError({ message: error.message })),
+            PushNotificationSendServiceError: (error) =>
+              Effect.fail(new RpcPushNotificationSendServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/user-rpcs.ts b/apps/backend/src/rpcs/user-rpcs.ts
new file mode 100644
index 000000000..d33c61819
--- /dev/null
+++ b/apps/backend/src/rpcs/user-rpcs.ts
@@ -0,0 +1,49 @@
+import { UserService } from "@voidhash/core/services";
+import {
+  RpcAuthenticationError,
+  RpcAvatarValidationError,
+  RpcUserServiceError,
+  UserRpcsDef,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const UserRpcsLive = UserRpcsDef.toLayer(
+  Effect.gen(function* UserRpcsLive() {
+    const userService = yield* UserService;
+    return {
+      CurrentUser: () =>
+        userService.getUser().pipe(
+          Effect.catchTags({
+            AuthenticationError: (error) =>
+              Effect.fail(
+                new RpcAuthenticationError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+      RemoveUserAvatar: () =>
+        userService.removeAvatar().pipe(
+          Effect.catchTags({
+            AuthenticationError: (error) =>
+              Effect.fail(
+                new RpcAuthenticationError({ cause: error.cause, message: error.message }),
+              ),
+            UserServiceError: (error) =>
+              Effect.fail(new RpcUserServiceError({ cause: error.cause })),
+          }),
+        ),
+      SetUserAvatar: ({ contentType, imageBase64 }) =>
+        userService.setAvatar({ contentType, imageBase64 }).pipe(
+          Effect.catchTags({
+            AuthenticationError: (error) =>
+              Effect.fail(
+                new RpcAuthenticationError({ cause: error.cause, message: error.message }),
+              ),
+            AvatarValidationError: (error) =>
+              Effect.fail(new RpcAvatarValidationError({ message: error.message })),
+            UserServiceError: (error) =>
+              Effect.fail(new RpcUserServiceError({ cause: error.cause })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/voidql-rpcs.ts b/apps/backend/src/rpcs/voidql-rpcs.ts
new file mode 100644
index 000000000..bece3394e
--- /dev/null
+++ b/apps/backend/src/rpcs/voidql-rpcs.ts
@@ -0,0 +1,143 @@
+/**
+ * Backend handlers for the VoidQL RPC group. Each handler calls
+ * {@link VoidQlService} and translates the core `VoidQl*` domain errors into
+ * their `Rpc/`-prefixed counterparts. The internal `VoidQlIsolationError` (a
+ * compiler defect) is mapped to the opaque {@link RpcVoidQlExecutionError} so it
+ * never leaks a reason to the client.
+ *
+ * NOTE: VoidQL must execute under the locked-down `analytics_query` ClickHouse
+ * user; {@link VoidQlService} reads the ambient `ClickhouseWebClient`, so the
+ * worker provides this layer the `analyticsQuery` client (see BackendWorker).
+ */
+import { VoidQlService } from "@voidhash/core/services";
+// Imported so the inferred layer type (whose requirements include the
+// ClickhouseWebClient VoidQlService binds) is nameable in the emitted
+// declarations — the client is re-exported as a namespace (TS2883).
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import {
+  AuthSession,
+  RpcActionForbiddenError,
+  RpcVoidQlComplexityError,
+  RpcVoidQlExecutionError,
+  RpcVoidQlPiiError,
+  RpcVoidQlSchemaError,
+  RpcVoidQlSyntaxError,
+  RpcVoidQlUnknownFieldError,
+  RpcVoidQlUnsupportedError,
+  VoidQlRpcsDef,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const VoidQlRpcsLive = VoidQlRpcsDef.toLayer(
+  Effect.gen(function* VoidQlRpcsLive() {
+    const voidql = yield* VoidQlService;
+
+    return {
+      RunVoidQlQuery: ({ organizationId, text }) =>
+        Effect.gen(function* () {
+          const session = yield* AuthSession;
+          return yield* voidql.runQuery({
+            organizationId,
+            text,
+            principal: { kind: "user", id: session?.user?.id ?? "api-key" },
+          });
+        }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            VoidQlSyntaxError: (error) =>
+              Effect.fail(new RpcVoidQlSyntaxError({ message: error.message, hint: error.hint })),
+            VoidQlUnsupportedError: (error) =>
+              Effect.fail(
+                new RpcVoidQlUnsupportedError({ message: error.message, hint: error.hint }),
+              ),
+            VoidQlSchemaError: (error) =>
+              Effect.fail(new RpcVoidQlSchemaError({ message: error.message })),
+            VoidQlUnknownFieldError: (error) =>
+              Effect.fail(
+                new RpcVoidQlUnknownFieldError({
+                  field: error.field,
+                  message: error.message,
+                  suggestion: error.suggestion,
+                }),
+              ),
+            VoidQlPiiError: (error) =>
+              Effect.fail(new RpcVoidQlPiiError({ message: error.message })),
+            VoidQlComplexityError: (error) =>
+              Effect.fail(new RpcVoidQlComplexityError({ message: error.message })),
+            VoidQlIsolationError: () =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({
+                  cause: "internal",
+                  message: "The query could not be executed.",
+                }),
+              ),
+            VoidQlExecutionError: (error) =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+
+      ValidateVoidQlQuery: ({ organizationId, text }) =>
+        Effect.gen(function* () {
+          const session = yield* AuthSession;
+          return yield* voidql.validateQuery({
+            organizationId,
+            text,
+            principal: { kind: "user", id: session?.user?.id ?? "api-key" },
+          });
+        }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            VoidQlExecutionError: (error) =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+
+      GetVoidQlSchema: () => voidql.getSchema(),
+
+      SaveVoidQlInsight: ({ organizationId, name, text }) =>
+        voidql.saveInsight({ organizationId, name, text }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            VoidQlSyntaxError: (error) =>
+              Effect.fail(new RpcVoidQlSyntaxError({ message: error.message, hint: error.hint })),
+            VoidQlUnsupportedError: (error) =>
+              Effect.fail(
+                new RpcVoidQlUnsupportedError({ message: error.message, hint: error.hint }),
+              ),
+            VoidQlSchemaError: (error) =>
+              Effect.fail(new RpcVoidQlSchemaError({ message: error.message })),
+            VoidQlUnknownFieldError: (error) =>
+              Effect.fail(
+                new RpcVoidQlUnknownFieldError({
+                  field: error.field,
+                  message: error.message,
+                  suggestion: error.suggestion,
+                }),
+              ),
+            VoidQlPiiError: (error) =>
+              Effect.fail(new RpcVoidQlPiiError({ message: error.message })),
+            VoidQlComplexityError: (error) =>
+              Effect.fail(new RpcVoidQlComplexityError({ message: error.message })),
+            VoidQlIsolationError: () =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({
+                  cause: "internal",
+                  message: "The insight could not be saved.",
+                }),
+              ),
+            VoidQlExecutionError: (error) =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/webhook-rpcs.ts b/apps/backend/src/rpcs/webhook-rpcs.ts
new file mode 100644
index 000000000..db2041a86
--- /dev/null
+++ b/apps/backend/src/rpcs/webhook-rpcs.ts
@@ -0,0 +1,160 @@
+import { WebhookManagerService } from "@voidhash/core/services";
+import {
+  RpcWebhookDeliveryNotFoundError,
+  RpcWebhookEndpointNotFoundError,
+  RpcWebhookServiceError,
+  RpcWebhookValidationError,
+  WebhookRpcsDef,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+export const WebhookRpcsLive = WebhookRpcsDef.toLayer(
+  Effect.gen(function* WebhookRpcsLive() {
+    const webhookManagerService = yield* WebhookManagerService;
+    return {
+      CreateWebhookEndpoint: ({ projectId, name, url, events, description }) =>
+        webhookManagerService
+          .createEndpoint({
+            description,
+            events,
+            name,
+            projectId,
+            url,
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+              WebhookValidationError: (error) =>
+                Effect.fail(new RpcWebhookValidationError({ message: error.message })),
+            }),
+          ),
+      DeleteWebhookEndpoint: ({ endpointId }) =>
+        webhookManagerService
+          .deleteEndpoint({
+            endpointId,
+            projectId: "", // projectId will be extracted from the auth context in the service
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookEndpointNotFoundError: (error) =>
+                Effect.fail(new RpcWebhookEndpointNotFoundError({ endpointId: error.endpointId })),
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+            }),
+          ),
+      GetWebhookDelivery: ({ deliveryId }) =>
+        webhookManagerService
+          .getDeliveryById({
+            deliveryId,
+            projectId: "", // projectId will be extracted from auth
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookDeliveryNotFoundError: (error) =>
+                Effect.fail(new RpcWebhookDeliveryNotFoundError({ deliveryId: error.deliveryId })),
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+            }),
+          ),
+      GetWebhookEndpoint: ({ endpointId }) =>
+        webhookManagerService
+          .getEndpointById({
+            endpointId,
+            projectId: "", // projectId will be extracted from auth
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookEndpointNotFoundError: (error) =>
+                Effect.fail(new RpcWebhookEndpointNotFoundError({ endpointId: error.endpointId })),
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+            }),
+          ),
+      ListWebhookDeliveries: ({ projectId, endpointId }) =>
+        webhookManagerService
+          .getDeliveries({
+            endpointId,
+            projectId,
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+            }),
+          ),
+      ListWebhookEndpoints: ({ projectId }) =>
+        webhookManagerService.getEndpoints({ projectId }).pipe(
+          Effect.catchTags({
+            WebhookServiceError: (error) =>
+              Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+          }),
+        ),
+      RetryWebhookDelivery: ({ deliveryId }) =>
+        webhookManagerService
+          .retryDelivery({
+            deliveryId,
+            projectId: "", // projectId will be extracted from auth
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookDeliveryNotFoundError: (error) =>
+                Effect.fail(new RpcWebhookDeliveryNotFoundError({ deliveryId: error.deliveryId })),
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+              WebhookValidationError: (error) =>
+                Effect.fail(new RpcWebhookValidationError({ message: error.message })),
+            }),
+          ),
+      RotateWebhookSecret: ({ endpointId }) =>
+        webhookManagerService
+          .rotateSecret({
+            endpointId,
+            projectId: "", // projectId will be extracted from auth
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookEndpointNotFoundError: (error) =>
+                Effect.fail(new RpcWebhookEndpointNotFoundError({ endpointId: error.endpointId })),
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+            }),
+          ),
+      TestWebhookEndpoint: ({ endpointId }) =>
+        webhookManagerService
+          .testEndpoint({
+            endpointId,
+            projectId: "", // projectId will be extracted from auth
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookEndpointNotFoundError: (error) =>
+                Effect.fail(new RpcWebhookEndpointNotFoundError({ endpointId: error.endpointId })),
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+            }),
+          ),
+      UpdateWebhookEndpoint: ({ endpointId, name, url, events, status, description }) =>
+        webhookManagerService
+          .updateEndpoint({
+            description,
+            endpointId,
+            events,
+            name,
+            projectId: "", // projectId will be extracted from auth
+            status,
+            url,
+          })
+          .pipe(
+            Effect.catchTags({
+              WebhookEndpointNotFoundError: (error) =>
+                Effect.fail(new RpcWebhookEndpointNotFoundError({ endpointId: error.endpointId })),
+              WebhookServiceError: (error) =>
+                Effect.fail(new RpcWebhookServiceError({ cause: error.cause })),
+              WebhookValidationError: (error) =>
+                Effect.fail(new RpcWebhookValidationError({ message: error.message })),
+            }),
+          ),
+    };
+  }),
+);
diff --git a/apps/backend/src/testing/BackendTestConnections.ts b/apps/backend/src/testing/BackendTestConnections.ts
new file mode 100644
index 000000000..bf8743e46
--- /dev/null
+++ b/apps/backend/src/testing/BackendTestConnections.ts
@@ -0,0 +1,23 @@
+/** Ephemeral infrastructure credentials injected into the backend integration smoke. */
+export interface BackendTestConnections {
+  readonly db: {
+    readonly host: string;
+    readonly port: number;
+    readonly username: string;
+    readonly password: string;
+    readonly databaseName: string;
+  };
+  readonly clickhouse: {
+    readonly url: string;
+    readonly username: string;
+    readonly password: string;
+    readonly database: string;
+  };
+  readonly workos: {
+    readonly apiKey: string;
+    readonly clientId: string;
+    readonly cookieName: string;
+    readonly cookiePassword: string;
+    readonly webhookSecret: string;
+  };
+}
diff --git a/apps/backend/src/testing/TestLayers.ts b/apps/backend/src/testing/TestLayers.ts
new file mode 100644
index 000000000..ba60fc5b0
--- /dev/null
+++ b/apps/backend/src/testing/TestLayers.ts
@@ -0,0 +1,545 @@
+import {
+  WebhookDeliveryNotFoundError,
+  WebhookEndpointNotFoundError,
+  WebhookValidationError,
+} from "@voidhash/core/domain/webhook/Webhook";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { AppStoreReconcileOriginalTransactionWorkflow } from "@voidhash/core/services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow";
+import { AppStoreReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow";
+import { AppStoreReplayParkedSdkNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow";
+import { GooglePlayReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow";
+import { StripeReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/StripeReplayParkedNotificationsWorkflow";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { WebhookDeliveryWorkflow } from "@voidhash/core/services/webhookDispatch/WebhookDeliveryWorkflow";
+import { Workos, WorkosAuthError } from "@voidhash/core/services/auth/Workos";
+import {
+  Db,
+  eq,
+  WebhookDeliveryStatus,
+  WebhookEndpointStatus,
+  webhookDeliveries,
+  webhookEndpoints,
+} from "@voidhash/db";
+import {
+  ProjectSchemaCache,
+  WebhookManagerService,
+  WebhookServiceError,
+  WorkosOrgPort,
+} from "@voidhash/core/services";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+
+import {
+  BackendComponentCompilerStubLive,
+  BackendMimicHostStubLive,
+  BackendNoopIdentityProjectionPublisherLive,
+  BackendPaymentProviderStubsLive,
+  BackendPaywallArtifactStoreStubLive,
+  BackendPaywallAssetConfigLive,
+  BackendPublicFileStoreStubLive,
+} from "../BackendApp.ts";
+import { smokeIdsFromEmail } from "./smoke-ids.ts";
+
+// The webhook path that consumes this stub never calls ClickHouse, so a Proxy
+// that throws on any access is a safe placeholder that satisfies the
+// requirement without standing up a real client.
+const clickhouseStub = new Proxy(
+  {},
+  {
+    get() {
+      throw new Error("ClickhouseWebClient must not be used in this test");
+    },
+  },
+) as unknown as ClickhouseWebClient.ClickhouseWebClient;
+
+export const TestClickhouseLive = Layer.succeed(
+  ClickhouseWebClient.ClickhouseWebClient,
+  clickhouseStub,
+);
+
+// The asynchronous workflow ports the route graph dispatches to
+// (`PersonIdentityService` → identity completion, webhook dispatch → delivery,
+// App Store reconciliation → replay). Every one is a fire-and-forget `dispatch`,
+// so the smoke stubs are no-ops. Unlike the other infrastructure services these
+// surface as request-scoped requirements on the built handler, so they are
+// provided to the worker's `fetch` directly rather than via the infra layer.
+export const TestWorkflowPortsLive = Layer.mergeAll(
+  Layer.succeed(IdentifyDistinctIdCompletionWorkflow, { dispatch: () => Effect.void }),
+  Layer.succeed(WebhookDeliveryWorkflow, { dispatch: () => Effect.void }),
+  Layer.succeed(AppStoreReplayParkedNotificationsWorkflow, { dispatch: () => Effect.void }),
+  Layer.succeed(AppStoreReplayParkedSdkNotificationsWorkflow, { dispatch: () => Effect.void }),
+  Layer.succeed(AppStoreReconcileOriginalTransactionWorkflow, { dispatch: () => Effect.void }),
+  Layer.succeed(GooglePlayReplayParkedNotificationsWorkflow, { dispatch: () => Effect.void }),
+  Layer.succeed(StripeReplayParkedNotificationsWorkflow, { dispatch: () => Effect.void }),
+);
+
+// In-memory no-op project schema cache. The smoke path never relies on a cache
+// hit, so every read misses and writes are dropped.
+export const TestProjectSchemaCacheLive = Layer.succeed(ProjectSchemaCache, {
+  getByName: () => ({
+    get: () => Effect.succeed(undefined),
+    invalidate: () => Effect.void,
+    set: () => Effect.void,
+  }),
+});
+
+/**
+ * Stub `Workos` service for the integration smoke. The HTTP-level
+ * `AuthMiddleware` requires it; the RPC smoke deliberately authenticates via
+ * `TestRpcAuthLive` instead, so every WorkOS-shaped method here fails fast
+ * with `WorkosAuthError`. If a future smoke exercises an HTTP v1 endpoint
+ * that needs a real session it must swap in a richer stub.
+ */
+const workosNotConfigured = (operation: string) =>
+  Effect.fail(
+    new WorkosAuthError({
+      cause: "Workos is not configured in the test backend",
+      message: `Workos.${operation} is not available in tests`,
+    }),
+  );
+
+export const TestWorkosLive = Layer.succeed(Workos, {
+  authenticateSessionCookie: () => Effect.succeed(null),
+  clientId: "test-client-id",
+  cookieName: "wos-session",
+  createOrganization: () => workosNotConfigured("createOrganization"),
+  createOrganizationMembership: () => workosNotConfigured("createOrganizationMembership"),
+  deleteOrganization: () => workosNotConfigured("deleteOrganization"),
+  deleteOrganizationMembership: () => workosNotConfigured("deleteOrganizationMembership"),
+  findUserByEmail: () => Effect.succeed(null),
+  getJwksUrl: () => "https://test-workos.invalid/jwks",
+  getOrganization: () => workosNotConfigured("getOrganization"),
+  getOrganizationByExternalId: () => Effect.succeed(null),
+  getUser: () => workosNotConfigured("getUser"),
+  listOrganizationMembershipsForUser: () => Effect.succeed([]),
+  setUserExternalId: () => workosNotConfigured("setUserExternalId"),
+  updateOrganization: () => workosNotConfigured("updateOrganization"),
+  updateOrganizationMembership: () => workosNotConfigured("updateOrganizationMembership"),
+  verifyWebhook: () => workosNotConfigured("verifyWebhook"),
+});
+
+/**
+ * Webhook signing secret the WorkOS webhook smoke signs payloads with. Shared so
+ * the test signs with the same key {@link TestRealWorkosLive} verifies against.
+ */
+export const TEST_WORKOS_WEBHOOK_SECRET = "whsec_integration_test_secret_000000000000000000000000";
+
+// The real Workos service so the `/api/webhooks/workos` route exercises the
+// actual SDK signature verification (SubtleCrypto) rather than the fast-failing
+// stub. apiKey/clientId are unused by `verifyWebhook` (no network), so dummy
+// values are fine; only `webhookSecret` matters. The wrapper below stubs the
+// networked user calls that membership webhooks need.
+const TestRealWorkosBaseLive = Workos.layer({
+  apiKey: Effect.succeed("sk_test_unused"),
+  clientId: Effect.succeed("client_test_unused"),
+  cookieName: Effect.succeed("wos-session"),
+  cookiePassword: Effect.succeed("integration-test-cookie-password-0000000000"),
+  webhookSecret: Effect.succeed(TEST_WORKOS_WEBHOOK_SECRET),
+});
+
+/**
+ * Real WorkOS SDK for webhook signature verification, with the networked user
+ * lookups (`getUser` / `setUserExternalId`) faked so membership webhooks resolve
+ * a synthetic user instead of hitting the WorkOS API.
+ */
+export const TestRealWorkosLive = Layer.effect(
+  Workos,
+  Effect.gen(function* () {
+    const real = yield* Workos;
+    const makeUser = (workosUserId: string, externalId: string | null) => {
+      const localUserId = workosUserId.startsWith("user_smk_")
+        ? workosUserId.slice("user_".length)
+        : externalId;
+      const suffix = localUserId?.replace(/^smk_(?:admin|user|invite)_/, "");
+      const email =
+        localUserId?.startsWith("smk_admin_") && suffix
+          ? `smoke-admin-${suffix}@example.test`
+          : localUserId?.startsWith("smk_user_") && suffix
+            ? `smoke-user-${suffix}@example.test`
+            : localUserId?.startsWith("smk_invite_") && suffix
+              ? `smoke-invite-${suffix}@example.test`
+              : `webhook-${workosUserId}@example.test`;
+
+      return {
+        createdAt: new Date().toISOString(),
+        email,
+        emailVerified: true,
+        externalId: localUserId,
+        firstName: "Webhook",
+        id: workosUserId,
+        lastName: "User",
+        lastSignInAt: null,
+        locale: null,
+        metadata: {},
+        object: "user" as const,
+        profilePictureUrl: null,
+        updatedAt: new Date().toISOString(),
+      };
+    };
+
+    return {
+      ...real,
+      getUser: (workosUserId: string) => Effect.succeed(makeUser(workosUserId, null)),
+      setUserExternalId: (workosUserId: string, externalId: string) =>
+        Effect.succeed(makeUser(workosUserId, externalId)),
+    };
+  }),
+).pipe(Layer.provide(TestRealWorkosBaseLive));
+
+export const TestWorkosOrgPortLive = Layer.succeed(WorkosOrgPort, {
+  createMembership: (input) =>
+    Effect.succeed({
+      id: `workos_mem_${crypto.randomUUID()}`,
+      organizationId: input.workosOrganizationId,
+      role: input.roleSlug ?? "member",
+      userId: input.workosUserId,
+    }),
+  createOrganization: (input) =>
+    Effect.succeed({
+      externalId: input.externalId,
+      id: `workos_org_${input.externalId.slice(0, 24)}`,
+      name: input.name,
+    }),
+  deleteMembership: () => Effect.void,
+  deleteOrganization: () => Effect.void,
+  findUserByEmail: (email) =>
+    Effect.succeed(
+      (() => {
+        const ids = smokeIdsFromEmail(email);
+        if (!ids) return null;
+        const isAdmin = email === ids.adminEmail;
+        const isInvited = email === ids.invitedEmail;
+        return {
+          email,
+          emailVerified: true,
+          externalId: null,
+          firstName: null,
+          // The WorkOS user id (`user_xxx`), which the resolver matches against
+          // our `workos_user_id` column — not the local primary key.
+          id: isAdmin
+            ? ids.workosAdminUserId
+            : isInvited
+              ? ids.workosInvitedUserId
+              : ids.workosNormalUserId,
+          lastName: null,
+          profilePictureUrl: null,
+        };
+      })(),
+    ),
+  getOrganization: (workosOrganizationId) =>
+    Effect.succeed({
+      externalId: null,
+      id: workosOrganizationId,
+      name: `WorkOS ${workosOrganizationId}`,
+    }),
+  getOrganizationByExternalId: (externalId) =>
+    Effect.succeed({
+      externalId,
+      id: `workos_org_${externalId.slice(0, 24)}`,
+      name: `WorkOS ${externalId}`,
+    }),
+  listMembershipsForUser: () => Effect.succeed([]),
+  updateMembershipRole: (workosMembershipId, input) =>
+    Effect.succeed({
+      id: workosMembershipId,
+      organizationId: "unknown",
+      role: input.roleSlug,
+      userId: "unknown",
+    }),
+  updateOrganization: (input) =>
+    Effect.succeed({
+      externalId: null,
+      id: input.workosOrganizationId,
+      name: input.name ?? input.workosOrganizationId,
+    }),
+});
+
+const webhookSecret = () => `whsec_${crypto.randomUUID().replaceAll("-", "").padEnd(64, "0")}`;
+
+const webhookEndpointStatus = (status: number) =>
+  status === WebhookEndpointStatus.Active
+    ? "active"
+    : status === WebhookEndpointStatus.Failed
+      ? "failed"
+      : "disabled";
+
+const webhookDeliveryStatus = (status: number) =>
+  status === WebhookDeliveryStatus.InProgress
+    ? "in_progress"
+    : status === WebhookDeliveryStatus.Succeeded
+      ? "succeeded"
+      : status === WebhookDeliveryStatus.Failed
+        ? "failed"
+        : status === WebhookDeliveryStatus.Exhausted
+          ? "exhausted"
+          : "pending";
+
+const mapEndpoint = (endpoint: typeof webhookEndpoints.$inferSelect) => ({
+  consecutiveFailures: endpoint.consecutiveFailures,
+  createdAt: endpoint.createdAt,
+  description: endpoint.description,
+  events: endpoint.events,
+  id: endpoint.id,
+  lastSuccessAt: endpoint.lastSuccessAt,
+  name: endpoint.name,
+  projectId: endpoint.projectId,
+  secret: endpoint.secret,
+  status: webhookEndpointStatus(endpoint.status),
+  url: endpoint.url,
+});
+
+const mapDelivery = (delivery: typeof webhookDeliveries.$inferSelect) => ({
+  attemptCount: delivery.attemptCount,
+  completedAt: delivery.completedAt,
+  createdAt: delivery.createdAt,
+  eventOccurredAt: delivery.eventOccurredAt,
+  eventType: delivery.eventType,
+  id: delivery.id,
+  maxAttempts: delivery.maxAttempts,
+  nextAttemptAt: delivery.nextAttemptAt,
+  payload: delivery.payload,
+  projectId: delivery.projectId,
+  status: webhookDeliveryStatus(delivery.status),
+  webhookEndpointId: delivery.webhookEndpointId,
+});
+
+const wrapWebhookDb = (effect: Effect.Effect<any, any, any>) =>
+  effect.pipe(
+    Effect.mapError((error) =>
+      error &&
+      typeof error === "object" &&
+      "_tag" in error &&
+      error._tag === "EffectDrizzleQueryError"
+        ? new WebhookServiceError({ cause: String((error as { cause?: unknown }).cause) })
+        : error,
+    ),
+  );
+
+export const TestWebhookManagerServiceLive = Layer.effect(
+  WebhookManagerService,
+  Effect.gen(function* () {
+    const db = yield* Db;
+
+    const findEndpoint = (input: { readonly endpointId: string; readonly projectId?: string }) =>
+      db.query.webhookEndpoints.findFirst({
+        where: input.projectId
+          ? { id: input.endpointId, projectId: input.projectId }
+          : { id: input.endpointId },
+      });
+
+    const findDelivery = (input: { readonly deliveryId: string; readonly projectId?: string }) =>
+      db.query.webhookDeliveries.findFirst({
+        where: input.projectId
+          ? { id: input.deliveryId, projectId: input.projectId }
+          : { id: input.deliveryId },
+      });
+
+    return {
+      createEndpoint: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const parsedUrl = URL.canParse(input.url) ? new URL(input.url) : null;
+            if (!parsedUrl || !["http:", "https:"].includes(parsedUrl.protocol)) {
+              return yield* Effect.fail(new WebhookValidationError({ message: "Invalid URL" }));
+            }
+            if (input.events.length === 0) {
+              return yield* Effect.fail(
+                new WebhookValidationError({ message: "At least one event is required" }),
+              );
+            }
+
+            const now = new Date();
+            const endpoint = {
+              consecutiveFailures: 0,
+              createdAt: now,
+              description: input.description ?? null,
+              events: [...input.events],
+              id: `webhookEndpoint_${crypto.randomUUID()}`,
+              lastSuccessAt: null,
+              name: input.name,
+              projectId: input.projectId,
+              secret: webhookSecret(),
+              status: WebhookEndpointStatus.Active,
+              updatedAt: now,
+              url: input.url,
+            };
+            yield* db.insert(webhookEndpoints).values(endpoint);
+            return mapEndpoint(endpoint);
+          }),
+        ),
+      deleteEndpoint: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const endpoint = yield* findEndpoint({ endpointId: input.endpointId });
+            if (!endpoint) {
+              return yield* Effect.fail(
+                new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+              );
+            }
+            yield* db.delete(webhookEndpoints).where(eq(webhookEndpoints.id, input.endpointId));
+          }),
+        ),
+      getDeliveries: (input: any) =>
+        wrapWebhookDb(
+          db.query.webhookDeliveries
+            .findMany({
+              orderBy: { createdAt: "desc" },
+              where: input.endpointId
+                ? { webhookEndpointId: input.endpointId }
+                : { projectId: input.projectId },
+            })
+            .pipe(Effect.map((deliveries) => deliveries.map(mapDelivery))),
+        ),
+      getDeliveryById: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const delivery = yield* findDelivery({ deliveryId: input.deliveryId });
+            if (!delivery) {
+              return yield* Effect.fail(
+                new WebhookDeliveryNotFoundError({ deliveryId: input.deliveryId }),
+              );
+            }
+            const attempts = yield* db.query.webhookDeliveryAttempts.findMany({
+              orderBy: { attemptNumber: "asc" },
+              where: { webhookDeliveryId: input.deliveryId },
+            });
+            return {
+              ...mapDelivery(delivery),
+              attempts: attempts.map((attempt) => ({
+                attemptNumber: attempt.attemptNumber,
+                createdAt: attempt.createdAt,
+                durationMs: attempt.durationMs,
+                errorMessage: attempt.errorMessage,
+                id: attempt.id,
+                responseBody: attempt.responseBody,
+                statusCode: attempt.statusCode,
+                succeeded: attempt.succeeded,
+              })),
+            };
+          }),
+        ),
+      getEndpointById: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const endpoint = yield* findEndpoint({ endpointId: input.endpointId });
+            if (!endpoint) {
+              return yield* Effect.fail(
+                new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+              );
+            }
+            return mapEndpoint(endpoint);
+          }),
+        ),
+      getEndpoints: (input: any) =>
+        wrapWebhookDb(
+          db.query.webhookEndpoints
+            .findMany({
+              where: { projectId: input.projectId },
+            })
+            .pipe(Effect.map((endpoints) => endpoints.map(mapEndpoint))),
+        ),
+      retryDelivery: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const delivery = yield* findDelivery({ deliveryId: input.deliveryId });
+            if (!delivery) {
+              return yield* Effect.fail(
+                new WebhookDeliveryNotFoundError({ deliveryId: input.deliveryId }),
+              );
+            }
+            return yield* Effect.fail(
+              new WebhookValidationError({
+                message: "Can only retry failed or exhausted deliveries",
+              }),
+            );
+          }),
+        ),
+      rotateSecret: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const endpoint = yield* findEndpoint({ endpointId: input.endpointId });
+            if (!endpoint) {
+              return yield* Effect.fail(
+                new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+              );
+            }
+            const secret = webhookSecret();
+            yield* db
+              .update(webhookEndpoints)
+              .set({ secret })
+              .where(eq(webhookEndpoints.id, input.endpointId));
+            return mapEndpoint({ ...endpoint, secret });
+          }),
+        ),
+      testEndpoint: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const endpoint = yield* findEndpoint({ endpointId: input.endpointId });
+            if (!endpoint) {
+              return yield* Effect.fail(
+                new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+              );
+            }
+            const now = new Date();
+            const delivery = {
+              attemptCount: 0,
+              completedAt: null,
+              createdAt: now,
+              eventOccurredAt: now,
+              eventType: "test.ping",
+              id: `webhookDelivery_${crypto.randomUUID()}`,
+              maxAttempts: 5,
+              nextAttemptAt: null,
+              payload: { message: "RPC smoke webhook delivery" },
+              projectId: endpoint.projectId,
+              status: WebhookDeliveryStatus.Pending,
+              webhookEndpointId: endpoint.id,
+            };
+            yield* db.insert(webhookDeliveries).values(delivery);
+            return mapDelivery(delivery);
+          }),
+        ),
+      updateEndpoint: (input: any) =>
+        wrapWebhookDb(
+          Effect.gen(function* () {
+            const endpoint = yield* findEndpoint({ endpointId: input.endpointId });
+            if (!endpoint) {
+              return yield* Effect.fail(
+                new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+              );
+            }
+            const updates: Partial<typeof webhookEndpoints.$inferInsert> = {};
+            if (input.description !== undefined) updates.description = input.description;
+            if (input.events !== undefined) updates.events = [...input.events];
+            if (input.name !== undefined) updates.name = input.name;
+            if (input.status !== undefined) {
+              updates.status =
+                input.status === "active"
+                  ? WebhookEndpointStatus.Active
+                  : WebhookEndpointStatus.Disabled;
+            }
+            if (input.url !== undefined) updates.url = input.url;
+            yield* db
+              .update(webhookEndpoints)
+              .set(updates)
+              .where(eq(webhookEndpoints.id, input.endpointId));
+            return mapEndpoint({ ...endpoint, ...updates });
+          }),
+        ),
+    } as any;
+  }),
+);
+
+export const TestBackendStubInfrastructureLive = Layer.mergeAll(
+  TestClickhouseLive,
+  TestProjectSchemaCacheLive,
+  TestWorkosLive,
+  TestWorkosOrgPortLive,
+  BackendMimicHostStubLive,
+  BackendComponentCompilerStubLive,
+  BackendPaywallAssetConfigLive,
+  BackendPaywallArtifactStoreStubLive,
+  BackendPublicFileStoreStubLive,
+  BackendPaymentProviderStubsLive,
+  BackendNoopIdentityProjectionPublisherLive,
+);
diff --git a/apps/backend/src/testing/TestRpcAuth.ts b/apps/backend/src/testing/TestRpcAuth.ts
new file mode 100644
index 000000000..ec4f3a960
--- /dev/null
+++ b/apps/backend/src/testing/TestRpcAuth.ts
@@ -0,0 +1,95 @@
+import { LocalUserSessionService } from "@voidhash/core/services";
+import { Db } from "@voidhash/db";
+import {
+  AuthMiddleware,
+  AuthSession,
+  RpcAuthenticationError,
+  RpcNotAuthenticatedError,
+  type UserSession,
+} from "@voidhash/rpc";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Option from "effect/Option";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+
+import { makeSmokeIds, SMOKE_ROLE_HEADER, SMOKE_RUN_ID_HEADER } from "./smoke-ids.ts";
+
+type SmokeRole = "admin" | "user";
+
+const headerValue = (headers: HttpHeaders.Headers, name: string) =>
+  Option.getOrUndefined(HttpHeaders.get(headers, name));
+
+const readSmokeHeaders = (
+  headers: HttpHeaders.Headers,
+): Effect.Effect<{ readonly role: SmokeRole; readonly runId: string }, RpcNotAuthenticatedError> =>
+  Effect.gen(function* () {
+    const runId = headerValue(headers, SMOKE_RUN_ID_HEADER);
+    const role = headerValue(headers, SMOKE_ROLE_HEADER);
+
+    if (!runId) {
+      return yield* Effect.fail(
+        new RpcNotAuthenticatedError({ message: `Missing ${SMOKE_RUN_ID_HEADER}` }),
+      );
+    }
+
+    if (role !== "admin" && role !== "user") {
+      return yield* Effect.fail(
+        new RpcNotAuthenticatedError({ message: `Missing or invalid ${SMOKE_ROLE_HEADER}` }),
+      );
+    }
+
+    return { role, runId };
+  });
+
+const loadSession = (
+  localUserSessions: typeof LocalUserSessionService.Service,
+  headers: HttpHeaders.Headers,
+): Effect.Effect<UserSession, RpcAuthenticationError | RpcNotAuthenticatedError, Db> =>
+  Effect.gen(function* () {
+    const { role, runId } = yield* readSmokeHeaders(headers);
+    const ids = makeSmokeIds(runId);
+    const userId = role === "admin" ? ids.adminUserId : ids.normalUserId;
+
+    const dbUser = yield* localUserSessions.getLocalUser(userId).pipe(
+      Effect.catchTag("EffectDrizzleQueryError", (error) =>
+        Effect.fail(
+          new RpcAuthenticationError({
+            cause: String(error.cause),
+            message: "Failed to authenticate due to a database error",
+          }),
+        ),
+      ),
+    );
+
+    if (!dbUser) {
+      return yield* Effect.fail(
+        new RpcNotAuthenticatedError({ message: `Seeded test user not found: ${userId}` }),
+      );
+    }
+
+    const access = yield* localUserSessions.loadUserAccess(userId).pipe(
+      Effect.catchTag("EffectDrizzleQueryError", (error) =>
+        Effect.fail(
+          new RpcAuthenticationError({
+            cause: String(error.cause),
+            message: "Failed to authenticate due to a database error",
+          }),
+        ),
+      ),
+    );
+
+    return localUserSessions.toUserSession(dbUser, access, null, `workos_${userId}`);
+  });
+
+export const TestRpcAuthLive = Layer.effect(
+  AuthMiddleware,
+  Effect.gen(function* () {
+    const localUserSessions = yield* LocalUserSessionService;
+    const db = yield* Db;
+    return AuthMiddleware.of((effect, { headers }) =>
+      Effect.provideService(loadSession(localUserSessions, headers), Db, db).pipe(
+        Effect.flatMap((session) => Effect.provideService(effect, AuthSession, session)),
+      ),
+    );
+  }),
+);
diff --git a/apps/backend/src/testing/provided-context.d.ts b/apps/backend/src/testing/provided-context.d.ts
new file mode 100644
index 000000000..8f815e934
--- /dev/null
+++ b/apps/backend/src/testing/provided-context.d.ts
@@ -0,0 +1,12 @@
+import type { BackendTestConnections } from "./BackendTestConnections.ts";
+
+// Typed channel for the connection slice that the shared integration setup
+// provides through vitest. Keeping the local declaration narrow prevents the
+// Community backend test graph from importing the Cloud stack package.
+declare module "vitest" {
+  interface ProvidedContext {
+    coreStackOutput: {
+      readonly testConnections: BackendTestConnections | null;
+    };
+  }
+}
diff --git a/apps/backend/src/testing/rpc-smoke-cases.ts b/apps/backend/src/testing/rpc-smoke-cases.ts
new file mode 100644
index 000000000..433c30d7d
--- /dev/null
+++ b/apps/backend/src/testing/rpc-smoke-cases.ts
@@ -0,0 +1,859 @@
+import { BackendRpcGroups as RpcGroups } from "../BackendRpcGroups.ts";
+
+import type { SmokeIds } from "./smoke-ids.ts";
+
+export type RpcSmokeRole = "admin" | "user";
+
+export interface RpcSmokeContext {
+  readonly ids: SmokeIds;
+  readonly runId: string;
+  readonly webhookTargetUrl?: string;
+  apiKeyId?: string;
+  extraOrganizationId?: string;
+  extraProjectId?: string;
+  featureFlagId?: string;
+  featureFlagOverrideId?: string;
+  featureFlagTargetId?: string;
+  paymentProviderConfigurationId?: string;
+  paywallId?: string;
+  paywallLocationId?: string;
+  paywallReleaseId?: string;
+  perkId?: string;
+  personDistinctId?: string;
+  personId?: string;
+  productId?: string;
+  productPerkId?: string;
+  userApiKeyId?: string;
+  webhookDeliveryId?: string;
+  webhookEndpointId?: string;
+}
+
+export interface RpcSmokeCase {
+  readonly tag: string;
+  readonly role: RpcSmokeRole;
+  readonly payload?: (context: RpcSmokeContext) => unknown;
+  readonly expected?: { readonly errorTag: string } | { readonly success: true };
+  readonly afterSuccess?: (context: RpcSmokeContext, result: unknown) => void;
+}
+
+const success = { success: true } as const;
+const error = (errorTag: string) => ({ errorTag }) as const;
+
+const expectObject = (result: unknown, tag: string): Record<string, unknown> => {
+  if (typeof result !== "object" || result === null || Array.isArray(result)) {
+    throw new Error(`${tag} returned a non-object result`);
+  }
+  return result as Record<string, unknown>;
+};
+
+const expectStringField = (result: unknown, tag: string, field: string): string => {
+  const value = expectObject(result, tag)[field];
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(`${tag} did not return a string ${field}`);
+  }
+  return value;
+};
+
+const expectArray = (result: unknown, tag: string): ReadonlyArray<unknown> => {
+  if (!Array.isArray(result)) {
+    throw new Error(`${tag} returned a non-array result`);
+  }
+  return result;
+};
+
+/**
+ * Builds the mutable smoke-test context shared by sequential RPC cases.
+ */
+export const makeRpcSmokeContext = (
+  runId: string,
+  ids: SmokeIds,
+  webhookTargetUrl?: string,
+): RpcSmokeContext => ({
+  ids,
+  apiKeyId: ids.apiKeyId,
+  personDistinctId: `person-${runId}`,
+  runId,
+  webhookTargetUrl,
+});
+
+export const rpcSmokeCases = [
+  {
+    expected: success,
+    payload: ({ ids }) => ({ limit: 5, projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListRecentAnalyticsEvents",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({
+      queries: [
+        {
+          context: { organizationId: ids.organizationId },
+          insightId: "builtin/person_count",
+          key: "person-count",
+          timeRange: { preset: "last_7d" },
+        },
+      ],
+    }),
+    role: "admin",
+    tag: "QueryAnalyticsInsights",
+  },
+  {
+    expected: success,
+    role: "user",
+    tag: "CurrentUser",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.extraOrganizationId = expectStringField(result, "CreateOrganization", "id");
+    },
+    expected: success,
+    payload: ({ runId }) => ({ name: `Smoke Extra Org ${runId}` }),
+    role: "admin",
+    tag: "CreateOrganization",
+  },
+  {
+    expected: success,
+    payload: ({ extraOrganizationId, runId }) => ({
+      name: `Smoke Extra Org Updated ${runId}`,
+      organizationId: extraOrganizationId,
+    }),
+    role: "admin",
+    tag: "UpdateOrganization",
+  },
+  {
+    expected: success,
+    payload: ({ extraOrganizationId }) => ({ organizationId: extraOrganizationId }),
+    role: "admin",
+    tag: "DeleteOrganization",
+  },
+  {
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      name: `Smoke Extra Project ${runId}`,
+      organizationId: ids.organizationId,
+    }),
+    role: "admin",
+    tag: "CreateProject",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ organizationId: ids.organizationId }),
+    role: "admin",
+    tag: "ListProjects",
+  },
+  {
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      id: ids.projectId,
+      name: `Smoke Extra Project Updated ${runId}`,
+    }),
+    role: "admin",
+    tag: "UpdateProject",
+  },
+  {
+    expected: error("Rpc/ProjectNotFoundError"),
+    payload: ({ runId }) => ({ id: `missing_project_${runId}` }),
+    role: "admin",
+    tag: "DeleteProject",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.apiKeyId = expectStringField(result, "CreateSecretKey", "id");
+    },
+    expected: success,
+    payload: ({ ids, runId }) => ({ name: `Smoke secret ${runId}`, projectId: ids.projectId }),
+    role: "admin",
+    tag: "CreateSecretKey",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListApiKeys",
+  },
+  {
+    expected: success,
+    payload: ({ apiKeyId }) => ({ apiKeyId }),
+    role: "admin",
+    tag: "GetApiKeyById",
+  },
+  {
+    expected: success,
+    payload: ({ apiKeyId }) => ({ apiKeyId }),
+    role: "admin",
+    tag: "RotateSecretKey",
+  },
+  {
+    expected: success,
+    payload: ({ apiKeyId }) => ({ apiKeyId }),
+    role: "admin",
+    tag: "DeleteApiKey",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.userApiKeyId = expectStringField(result, "CreateUserApiKey", "id");
+    },
+    expected: success,
+    payload: ({ runId }) => ({ name: `Smoke user key ${runId}`, prefix: "smk" }),
+    role: "admin",
+    tag: "CreateUserApiKey",
+  },
+  {
+    expected: success,
+    payload: () => ({}),
+    role: "admin",
+    tag: "ListUserApiKeys",
+  },
+  {
+    expected: success,
+    payload: ({ userApiKeyId }) => ({ userApiKeyId }),
+    role: "admin",
+    tag: "RevokeUserApiKey",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.personId = expectStringField(result, "CreatePerson", "personId");
+    },
+    expected: success,
+    payload: ({ ids, personDistinctId, runId }) => ({
+      distinctId: personDistinctId,
+      email: `person-${runId}@example.test`,
+      name: "Smoke Person",
+      projectId: ids.projectId,
+    }),
+    role: "admin",
+    tag: "CreatePerson",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListPersons",
+  },
+  {
+    expected: success,
+    payload: ({ personId }) => ({ personId }),
+    role: "admin",
+    tag: "GetPersonById",
+  },
+  {
+    expected: success,
+    payload: ({ ids, personDistinctId }) => ({
+      distinctId: personDistinctId,
+      projectId: ids.projectId,
+    }),
+    role: "admin",
+    tag: "GetPersonByDistinctId",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ includeArchived: true, projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListFeatureFlags",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.featureFlagId = expectStringField(result, "CreateFeatureFlag", "id");
+    },
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      description: "Smoke flag",
+      key: `smoke-flag-${runId}`,
+      name: "Smoke Flag",
+      projectId: ids.projectId,
+    }),
+    role: "admin",
+    tag: "CreateFeatureFlag",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagId }) => ({ id: featureFlagId }),
+    role: "admin",
+    tag: "GetFeatureFlag",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagId, runId }) => ({
+      enabled: true,
+      id: featureFlagId,
+      name: `Smoke Flag ${runId}`,
+      rolloutBps: 5000,
+    }),
+    role: "admin",
+    tag: "UpdateFeatureFlag",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagId }) => ({
+      featureFlagId,
+      variants: [
+        {
+          key: "control",
+          name: "Control",
+          payload: { kind: "control" },
+          weightBps: 10000,
+        },
+      ],
+    }),
+    role: "admin",
+    tag: "UpdateFeatureFlagVariants",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.featureFlagOverrideId = expectStringField(result, "UpsertFeatureFlagOverride", "id");
+    },
+    expected: success,
+    payload: ({ featureFlagId, runId }) => ({
+      featureFlagId,
+      forcedEnabled: true,
+      identityType: 2,
+      identityValue: `distinct-${runId}`,
+      note: "smoke",
+    }),
+    role: "admin",
+    tag: "UpsertFeatureFlagOverride",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagId }) => ({ featureFlagId }),
+    role: "admin",
+    tag: "ListFeatureFlagOverridesByFlag",
+  },
+  {
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      identityType: 2,
+      identityValue: `distinct-${runId}`,
+      projectId: ids.projectId,
+    }),
+    role: "admin",
+    tag: "ListFeatureFlagOverridesByPerson",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagOverrideId }) => ({ id: featureFlagOverrideId }),
+    role: "admin",
+    tag: "ArchiveFeatureFlagOverride",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.featureFlagTargetId = expectStringField(result, "UpsertFeatureFlagTarget", "id");
+    },
+    expected: success,
+    payload: ({ featureFlagId, runId }) => ({
+      featureFlagId,
+      identityType: 2,
+      identityValue: `distinct-${runId}`,
+      listType: 1,
+    }),
+    role: "admin",
+    tag: "UpsertFeatureFlagTarget",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagTargetId }) => ({ id: featureFlagTargetId }),
+    role: "admin",
+    tag: "ArchiveFeatureFlagTarget",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagId }) => ({ id: featureFlagId }),
+    role: "admin",
+    tag: "ArchiveFeatureFlag",
+  },
+  {
+    expected: success,
+    payload: ({ featureFlagId }) => ({ id: featureFlagId }),
+    role: "admin",
+    tag: "RestoreFeatureFlag",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListProducts",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.productId = expectStringField(result, "CreateProduct", "id");
+    },
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      name: "Smoke Product",
+      projectId: ids.projectId,
+      slug: `smoke-product-${runId}`,
+    }),
+    role: "admin",
+    tag: "CreateProduct",
+  },
+  {
+    expected: success,
+    payload: ({ productId }) => ({ id: productId }),
+    role: "admin",
+    tag: "GetProduct",
+  },
+  {
+    expected: success,
+    payload: ({ productId, runId }) => ({
+      id: productId,
+      name: `Smoke Product ${runId}`,
+      slug: `smoke-product-updated-${runId}`,
+    }),
+    role: "admin",
+    tag: "UpdateProduct",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListPerks",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.perkId = expectStringField(result, "CreatePerk", "id");
+    },
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      name: "Smoke Perk",
+      projectId: ids.projectId,
+      slug: `smoke-perk-${runId}`,
+    }),
+    role: "admin",
+    tag: "CreatePerk",
+  },
+  {
+    expected: success,
+    payload: ({ perkId, productId }) => ({ perkId, productId }),
+    role: "admin",
+    tag: "CreateProductPerk",
+  },
+  {
+    afterSuccess: (context, result) => {
+      const productPerk = expectArray(result, "ListProductPerksByProductId")[0];
+      context.productPerkId = expectStringField(productPerk, "ListProductPerksByProductId", "id");
+    },
+    expected: success,
+    payload: ({ productId }) => ({ productId }),
+    role: "admin",
+    tag: "ListProductPerksByProductId",
+  },
+  {
+    expected: success,
+    payload: ({ productPerkId }) => ({ id: productPerkId }),
+    role: "admin",
+    tag: "DeleteProductPerk",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListPaymentProviderConfigurations",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.paymentProviderConfigurationId = expectStringField(
+        result,
+        "CreatePaymentProviderConfiguration",
+        "id",
+      );
+    },
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId, providerId: "stripe" }),
+    role: "admin",
+    tag: "CreatePaymentProviderConfiguration",
+  },
+  {
+    expected: success,
+    payload: ({ paymentProviderConfigurationId }) => ({ id: paymentProviderConfigurationId }),
+    role: "admin",
+    tag: "GetPaymentProviderConfiguration",
+  },
+  {
+    expected: error("Rpc/PaymentProviderConfigurationValidationError"),
+    payload: ({ paymentProviderConfigurationId }) => ({
+      configuration: {},
+      enabled: true,
+      id: paymentProviderConfigurationId,
+      name: "Stripe Smoke",
+    }),
+    role: "admin",
+    tag: "UpdatePaymentProviderConfiguration",
+  },
+  {
+    expected: success,
+    payload: ({ productId }) => ({ productId }),
+    role: "admin",
+    tag: "ListProviderProductsByProductId",
+  },
+  {
+    expected: error("Rpc/PaymentProviderProductValidationError"),
+    payload: ({ paymentProviderConfigurationId, productId }) => ({
+      configuration: {},
+      paymentProviderConfigurationId,
+      productId,
+    }),
+    role: "admin",
+    tag: "CreatePaymentProviderProduct",
+  },
+  {
+    expected: error("Rpc/PaymentProviderProductNotFoundError"),
+    payload: ({ runId }) => ({ configuration: {}, id: `missing-provider-product-${runId}` }),
+    role: "admin",
+    tag: "UpdatePaymentProviderProduct",
+  },
+  {
+    expected: error("Rpc/PaymentProviderProductValidationError"),
+    payload: ({ runId }) => ({ id: `missing-provider-product-${runId}` }),
+    role: "admin",
+    tag: "DeletePaymentProviderProduct",
+  },
+  {
+    expected: success,
+    payload: ({ paymentProviderConfigurationId, productId, runId }) => ({
+      paymentProviderConfigurationId,
+      productId,
+      providerProductKey: `missing-provider-key-${runId}`,
+    }),
+    role: "admin",
+    tag: "SetActivePaymentProviderProduct",
+  },
+  {
+    expected: success,
+    payload: ({ paymentProviderConfigurationId }) => ({ paymentProviderConfigurationId }),
+    role: "admin",
+    tag: "DeletePaymentProviderConfiguration",
+  },
+  {
+    expected: success,
+    payload: ({ perkId }) => ({ perkId }),
+    role: "admin",
+    tag: "DeletePerk",
+  },
+  {
+    expected: success,
+    payload: ({ productId }) => ({ id: productId }),
+    role: "admin",
+    tag: "DeleteProduct",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListPaywalls",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.paywallId = expectStringField(result, "CreatePaywall", "id");
+    },
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      name: "Smoke Paywall",
+      projectId: ids.projectId,
+      slug: `smoke-paywall-${runId}`,
+    }),
+    role: "admin",
+    tag: "CreatePaywall",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ includeArchived: true, projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListPaywallLocations",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.paywallLocationId = expectStringField(result, "CreatePaywallLocation", "id");
+    },
+    expected: success,
+    payload: ({ ids, runId }) => ({
+      description: "Smoke location",
+      name: "Smoke Location",
+      projectId: ids.projectId,
+      slug: `smoke-location-${runId}`,
+    }),
+    role: "admin",
+    tag: "CreatePaywallLocation",
+  },
+  {
+    expected: success,
+    payload: ({ paywallLocationId, runId }) => ({
+      description: "Smoke location updated",
+      locationId: paywallLocationId,
+      name: `Smoke Location ${runId}`,
+    }),
+    role: "admin",
+    tag: "UpdatePaywallLocation",
+  },
+  {
+    expected: error("Rpc/PaywallLocationShowingValidationError"),
+    payload: ({ paywallId, paywallLocationId }) => ({
+      locationId: paywallLocationId,
+      paywallId,
+      type: "paywall_release",
+    }),
+    role: "admin",
+    tag: "AssignPaywallLocationShowing",
+  },
+  {
+    afterSuccess: (_context, result) => {
+      expectStringField(result, "RequestPaywallEditToken", "token");
+      expectStringField(result, "RequestPaywallEditToken", "url");
+      const expiresAt = expectObject(result, "RequestPaywallEditToken").expiresAt;
+      if (!(expiresAt instanceof Date)) {
+        throw new Error("RequestPaywallEditToken did not return a Date expiresAt");
+      }
+    },
+    expected: success,
+    payload: ({ paywallId }) => ({ paywallId }),
+    role: "admin",
+    tag: "RequestPaywallEditToken",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.paywallReleaseId = expectStringField(result, "CreatePaywallRelease", "releaseId");
+      expectStringField(result, "CreatePaywallRelease", "draftUrl");
+    },
+    expected: success,
+    payload: ({ paywallId }) => ({ paywallId }),
+    role: "admin",
+    tag: "CreatePaywallRelease",
+  },
+  {
+    afterSuccess: (context, result) => {
+      const releaseId = expectStringField(result, "GetPaywallDraftRelease", "releaseId");
+      if (releaseId !== context.paywallReleaseId) {
+        throw new Error("GetPaywallDraftRelease returned a different release");
+      }
+    },
+    expected: success,
+    payload: ({ paywallId }) => ({ paywallId }),
+    role: "admin",
+    tag: "GetPaywallDraftRelease",
+  },
+  {
+    afterSuccess: (_context, result) => {
+      expectStringField(result, "PublishPaywallRelease", "releaseId");
+      expectStringField(result, "PublishPaywallRelease", "htmlUrl");
+    },
+    expected: success,
+    payload: ({ paywallReleaseId }) => ({ releaseId: paywallReleaseId }),
+    role: "admin",
+    tag: "PublishPaywallRelease",
+  },
+  {
+    expected: error("Rpc/ReleaseNotFoundError"),
+    payload: ({ runId }) => ({ releaseId: `missing-release-${runId}` }),
+    role: "admin",
+    tag: "PublishPaywallRelease",
+  },
+  {
+    expected: success,
+    payload: ({ paywallId, paywallLocationId }) => ({
+      locationId: paywallLocationId,
+      paywallId,
+      type: "paywall_release",
+    }),
+    role: "admin",
+    tag: "AssignPaywallLocationShowing",
+  },
+  {
+    expected: success,
+    payload: ({ paywallLocationId }) => ({ locationId: paywallLocationId }),
+    role: "admin",
+    tag: "ClearPaywallLocationShowing",
+  },
+  {
+    expected: success,
+    payload: ({ paywallLocationId }) => ({ locationId: paywallLocationId }),
+    role: "admin",
+    tag: "ListPaywallLocationShowings",
+  },
+  {
+    expected: success,
+    payload: ({ paywallLocationId }) => ({ locationId: paywallLocationId }),
+    role: "admin",
+    tag: "ArchivePaywallLocation",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListPaywallDeploys",
+  },
+  {
+    expected: error("Rpc/ReleaseNotFoundError"),
+    payload: ({ runId }) => ({ releaseId: `missing-release-${runId}` }),
+    role: "admin",
+    tag: "SetActivePaywallRelease",
+  },
+  {
+    expected: success,
+    payload: ({ paywallId }) => ({ paywallId }),
+    role: "admin",
+    tag: "DeletePaywall",
+  },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "ListWebhookEndpoints",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.webhookEndpointId = expectStringField(result, "CreateWebhookEndpoint", "id");
+    },
+    expected: success,
+    payload: ({ ids, runId, webhookTargetUrl }) => ({
+      description: "Smoke webhook endpoint",
+      events: ["person.created"],
+      name: `Smoke Webhook ${runId}`,
+      projectId: ids.projectId,
+      url: webhookTargetUrl,
+    }),
+    role: "admin",
+    tag: "CreateWebhookEndpoint",
+  },
+  {
+    expected: success,
+    payload: ({ webhookEndpointId }) => ({ endpointId: webhookEndpointId }),
+    role: "admin",
+    tag: "GetWebhookEndpoint",
+  },
+  {
+    expected: success,
+    payload: ({ webhookEndpointId, runId }) => ({
+      description: "Smoke webhook endpoint updated",
+      endpointId: webhookEndpointId,
+      events: ["person.created"],
+      name: `Smoke Webhook Updated ${runId}`,
+      status: "disabled",
+    }),
+    role: "admin",
+    tag: "UpdateWebhookEndpoint",
+  },
+  {
+    expected: success,
+    payload: ({ webhookEndpointId }) => ({ endpointId: webhookEndpointId }),
+    role: "admin",
+    tag: "RotateWebhookSecret",
+  },
+  {
+    afterSuccess: (context, result) => {
+      context.webhookDeliveryId = expectStringField(result, "TestWebhookEndpoint", "id");
+    },
+    expected: success,
+    payload: ({ webhookEndpointId }) => ({ endpointId: webhookEndpointId }),
+    role: "admin",
+    tag: "TestWebhookEndpoint",
+  },
+  {
+    expected: success,
+    payload: ({ ids, webhookEndpointId }) => ({
+      endpointId: webhookEndpointId,
+      projectId: ids.projectId,
+    }),
+    role: "admin",
+    tag: "ListWebhookDeliveries",
+  },
+  {
+    expected: success,
+    payload: ({ webhookDeliveryId }) => ({ deliveryId: webhookDeliveryId }),
+    role: "admin",
+    tag: "GetWebhookDelivery",
+  },
+  {
+    expected: error("Rpc/WebhookValidationError"),
+    payload: ({ webhookDeliveryId }) => ({ deliveryId: webhookDeliveryId }),
+    role: "admin",
+    tag: "RetryWebhookDelivery",
+  },
+  {
+    expected: success,
+    payload: ({ webhookEndpointId }) => ({ endpointId: webhookEndpointId }),
+    role: "admin",
+    tag: "DeleteWebhookEndpoint",
+  },
+] satisfies ReadonlyArray<RpcSmokeCase>;
+
+/** Existing RPC smoke coverage debt; entries may only be removed as cases are added. */
+const knownMissingRpcSmokeTags = new Set([
+  "SaveAiChat",
+  "ListAiChats",
+  "GetAiChat",
+  "DeleteAiChat",
+  "UploadAiChatAttachment",
+  "RevertAiChatCheckpoint",
+  "CaptureAiCheckpoint",
+  "ListExperiments",
+  "GetExperiment",
+  "CreateExperiment",
+  "UpdateExperiment",
+  "ReplaceExperimentVariants",
+  "UpsertExperimentTreatment",
+  "RemoveExperimentTreatment",
+  "StartExperiment",
+  "PauseExperiment",
+  "ConcludeExperiment",
+  "ArchiveExperiment",
+  "RestoreExperiment",
+  "GetExperimentResults",
+  "SubmitFeedback",
+  "SetOrganizationAvatar",
+  "RemoveOrganizationAvatar",
+  "ListPushNotificationConfigurations",
+  "GetPushNotificationConfiguration",
+  "CreatePushNotificationConfiguration",
+  "UpdatePushNotificationConfiguration",
+  "DeletePushNotificationConfiguration",
+  "ListPushNotificationSends",
+  "GetPushNotificationSendDeliveries",
+  "UploadPaywallAsset",
+  "ListPaywallAssets",
+  "RenamePaywallAsset",
+  "DeletePaywallAsset",
+  "ListPaywallComponents",
+  "GetPaywallComponentVersions",
+  "SetProjectAvatar",
+  "RemoveProjectAvatar",
+  "RenamePaywall",
+  "ArchivePaywall",
+  "RestorePaywall",
+  "ListWorkspacePaywalls",
+  "ReadPaywallDocument",
+  "RecordComponentManifest",
+  "SetUserAvatar",
+  "RemoveUserAvatar",
+  "RunVoidQlQuery",
+  "ValidateVoidQlQuery",
+  "GetVoidQlSchema",
+  "SaveVoidQlInsight",
+]);
+
+/**
+ * Verifies the smoke manifest does not regress beyond its explicit debt baseline.
+ */
+export const assertRpcSmokeManifestCoverage = () => {
+  const rpcTags = new Set<string>(RpcGroups.requests.keys());
+  const manifestTags = new Set<string>(rpcSmokeCases.map((rpcCase) => rpcCase.tag));
+  const missing = [...rpcTags].filter((tag) => !manifestTags.has(tag));
+  const unexpectedMissing = missing.filter((tag) => !knownMissingRpcSmokeTags.has(tag));
+  const resolvedBaseline = [...knownMissingRpcSmokeTags].filter((tag) => !missing.includes(tag));
+  const stale = [...manifestTags].filter((tag) => !rpcTags.has(tag));
+
+  if (unexpectedMissing.length || resolvedBaseline.length || stale.length) {
+    throw new Error(
+      [
+        unexpectedMissing.length
+          ? `Unexpected missing smoke RPC cases: ${unexpectedMissing.join(", ")}`
+          : undefined,
+        resolvedBaseline.length
+          ? `Resolved smoke baseline entries must be removed: ${resolvedBaseline.join(", ")}`
+          : undefined,
+        stale.length ? `Stale smoke RPC cases: ${stale.join(", ")}` : undefined,
+      ]
+        .filter(Boolean)
+        .join("\n"),
+    );
+  }
+};
diff --git a/apps/backend/src/testing/smoke-ids.ts b/apps/backend/src/testing/smoke-ids.ts
new file mode 100644
index 000000000..9e210ced4
--- /dev/null
+++ b/apps/backend/src/testing/smoke-ids.ts
@@ -0,0 +1,47 @@
+export const SMOKE_RUN_ID_HEADER = "x-voidhash-rpc-smoke-run-id";
+export const SMOKE_ROLE_HEADER = "x-voidhash-rpc-smoke-role";
+
+const normalizeRunId = (runId: string): string => {
+  const normalized = runId
+    .toLowerCase()
+    .replaceAll(/[^a-z0-9]/g, "")
+    .slice(0, 10);
+
+  return normalized.length > 0 ? normalized : "default";
+};
+
+export const makeSmokeIds = (runId: string) => {
+  const suffix = normalizeRunId(runId);
+
+  return {
+    adminEmail: `smoke-admin-${suffix}@example.test`,
+    adminMemberId: `smk_mem_admin_${suffix}`,
+    adminUserId: `smk_admin_${suffix}`,
+    apiKeyId: `smk_api_key_${suffix}`,
+    billingId: `smk_billing_${suffix}`,
+    invitedEmail: `smoke-invite-${suffix}@example.test`,
+    invitedUserId: `smk_invite_${suffix}`,
+    normalEmail: `smoke-user-${suffix}@example.test`,
+    normalMemberId: `smk_mem_user_${suffix}`,
+    normalUserId: `smk_user_${suffix}`,
+    organizationId: `smk_org_${suffix}`,
+    organizationSlug: `smoke-org-${suffix}`,
+    projectId: `smk_project_${suffix}`,
+    projectSlug: `smoke-project-${suffix}`,
+    workosAdminMembershipId: `workos_mem_admin_${suffix}`,
+    // WorkOS user ids are the local id prefixed with `user_`, matching the
+    // synthetic users `TestRealWorkosLive` (TestLayers.ts) derives from a WorkOS id.
+    workosAdminUserId: `user_smk_admin_${suffix}`,
+    workosInvitedUserId: `user_smk_invite_${suffix}`,
+    workosNormalMembershipId: `workos_mem_user_${suffix}`,
+    workosNormalUserId: `user_smk_user_${suffix}`,
+    workosOrganizationId: `workos_org_${suffix}`,
+  } as const;
+};
+
+export type SmokeIds = ReturnType<typeof makeSmokeIds>;
+
+export const smokeIdsFromEmail = (email: string): SmokeIds | undefined => {
+  const match = /^smoke-(?:admin|user|invite)-([a-z0-9]+)@example\.test$/.exec(email);
+  return match ? makeSmokeIds(match[1]) : undefined;
+};
diff --git a/apps/backend/src/testing/smoke-seed.ts b/apps/backend/src/testing/smoke-seed.ts
new file mode 100644
index 000000000..7ab768d49
--- /dev/null
+++ b/apps/backend/src/testing/smoke-seed.ts
@@ -0,0 +1,310 @@
+import {
+  apiKeys,
+  apikey,
+  auditLogs,
+  BillingSubscriptionStatus,
+  BillingTier,
+  captureProjectPolicies,
+  Db,
+  eq,
+  featureFlagOverrides,
+  featureFlags,
+  featureFlagTargets,
+  featureFlagVariants,
+  inArray,
+  invitation,
+  member,
+  organization,
+  organizationBilling,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  paywallLocationShowings,
+  paywallLocations,
+  paywallReleases,
+  paywalls,
+  perks,
+  personDeletionRequests,
+  personExternalIdentifiers,
+  personIdentities,
+  personIdentityMigrationJobs,
+  personPersonlessIdentities,
+  persons,
+  personUnlockedPerks,
+  productPerks,
+  products,
+  projects,
+  usageAggregates,
+  usageRecords,
+  user,
+  webhookDeliveries,
+  webhookDeliveryAttempts,
+  webhookEndpoints,
+} from "@voidhash/db";
+import * as Effect from "effect/Effect";
+
+import { makeSmokeIds } from "./smoke-ids.ts";
+
+/**
+ * Deterministic fixture for the backend RPC smoke. Seeds an `admin`-role user, a
+ * normal user, their organization/memberships, a project, a seeded API key, and a
+ * billing row — everything the {@link rpcSmokeCases} manifest reads or scopes
+ * against. Kept separate from the lean shared `CoreTestFixture` because the smoke
+ * needs a richer, smoke-specific tenant; it still rides the same once-deployed
+ * stack + `testConnections` as the service-level integration tests.
+ *
+ * Previously these ran inside the deployed test worker behind `/__test/seed` and
+ * `/__test/reset` HTTP routes; the smoke now runs in-process, so they are plain
+ * Effects executed against `Db.layer(testConnections.db)` in a `beforeAll`.
+ */
+
+const deleteIfAny = <T, A, E, R>(
+  values: ReadonlyArray<T>,
+  run: (values: [T, ...T[]]) => Effect.Effect<A, E, R>,
+): Effect.Effect<A | void, E, R> =>
+  values.length === 0 ? Effect.void : run(values as [T, ...T[]]);
+
+const selectIds = <T extends { id: string | null }, E, R>(
+  rows: Effect.Effect<ReadonlyArray<T>, E, R>,
+): Effect.Effect<string[], E, R> =>
+  Effect.map(rows, (resolved) => resolved.flatMap((row) => (row.id ? [row.id] : [])));
+
+/**
+ * Delete every row the smoke fixture (and the cases that build on it) creates,
+ * deepest foreign-key dependents first, scoped to the run's namespaced ids. Safe
+ * to run before each seed so a crashed run never leaves colliding state.
+ */
+export const resetSmokeData = (runId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const ids = makeSmokeIds(runId);
+
+    const productIds = yield* selectIds(
+      db.select({ id: products.id }).from(products).where(eq(products.projectId, ids.projectId)),
+    );
+    const perkIds = yield* selectIds(
+      db.select({ id: perks.id }).from(perks).where(eq(perks.projectId, ids.projectId)),
+    );
+    const paymentProviderConfigurationIds = yield* selectIds(
+      db
+        .select({ id: paymentProviderConfigurations.id })
+        .from(paymentProviderConfigurations)
+        .where(eq(paymentProviderConfigurations.projectId, ids.projectId)),
+    );
+    const paywallIds = yield* selectIds(
+      db.select({ id: paywalls.id }).from(paywalls).where(eq(paywalls.projectId, ids.projectId)),
+    );
+    const featureFlagIds = yield* selectIds(
+      db
+        .select({ id: featureFlags.id })
+        .from(featureFlags)
+        .where(eq(featureFlags.projectId, ids.projectId)),
+    );
+    const personIds = yield* selectIds(
+      db.select({ id: persons.id }).from(persons).where(eq(persons.projectId, ids.projectId)),
+    );
+    const webhookDeliveryIds = yield* selectIds(
+      db
+        .select({ id: webhookDeliveries.id })
+        .from(webhookDeliveries)
+        .where(eq(webhookDeliveries.projectId, ids.projectId)),
+    );
+
+    yield* deleteIfAny(webhookDeliveryIds, (values) =>
+      db
+        .delete(webhookDeliveryAttempts)
+        .where(inArray(webhookDeliveryAttempts.webhookDeliveryId, values)),
+    );
+    yield* db.delete(webhookDeliveries).where(eq(webhookDeliveries.projectId, ids.projectId));
+    yield* db.delete(webhookEndpoints).where(eq(webhookEndpoints.projectId, ids.projectId));
+
+    yield* db
+      .delete(paywallLocationShowings)
+      .where(eq(paywallLocationShowings.projectId, ids.projectId));
+    yield* db.delete(paywallLocations).where(eq(paywallLocations.projectId, ids.projectId));
+    yield* deleteIfAny(paywallIds, (values) =>
+      db.delete(paywallReleases).where(inArray(paywallReleases.paywallId, values)),
+    );
+    yield* db.delete(paywalls).where(eq(paywalls.projectId, ids.projectId));
+
+    yield* deleteIfAny(productIds, (values) =>
+      db.delete(productPerks).where(inArray(productPerks.productId, values)),
+    );
+    yield* deleteIfAny(perkIds, (values) =>
+      db.delete(productPerks).where(inArray(productPerks.perkId, values)),
+    );
+    yield* deleteIfAny(productIds, (values) =>
+      db
+        .delete(paymentProviderConfigurationProducts)
+        .where(inArray(paymentProviderConfigurationProducts.productId, values)),
+    );
+    yield* deleteIfAny(paymentProviderConfigurationIds, (values) =>
+      db
+        .delete(paymentProviderConfigurationProducts)
+        .where(
+          inArray(paymentProviderConfigurationProducts.paymentProviderConfigurationId, values),
+        ),
+    );
+    yield* db
+      .delete(paymentProviderConfigurations)
+      .where(eq(paymentProviderConfigurations.projectId, ids.projectId));
+    yield* db.delete(products).where(eq(products.projectId, ids.projectId));
+    yield* db.delete(perks).where(eq(perks.projectId, ids.projectId));
+
+    yield* deleteIfAny(featureFlagIds, (values) =>
+      db.delete(featureFlagVariants).where(inArray(featureFlagVariants.featureFlagId, values)),
+    );
+    yield* deleteIfAny(featureFlagIds, (values) =>
+      db.delete(featureFlagTargets).where(inArray(featureFlagTargets.featureFlagId, values)),
+    );
+    yield* deleteIfAny(featureFlagIds, (values) =>
+      db.delete(featureFlagOverrides).where(inArray(featureFlagOverrides.featureFlagId, values)),
+    );
+    yield* db.delete(featureFlags).where(eq(featureFlags.projectId, ids.projectId));
+
+    yield* db
+      .delete(personExternalIdentifiers)
+      .where(eq(personExternalIdentifiers.projectId, ids.projectId));
+    yield* db
+      .delete(personIdentityMigrationJobs)
+      .where(eq(personIdentityMigrationJobs.projectId, ids.projectId));
+    yield* db
+      .delete(personPersonlessIdentities)
+      .where(eq(personPersonlessIdentities.projectId, ids.projectId));
+    yield* db
+      .delete(personDeletionRequests)
+      .where(eq(personDeletionRequests.projectId, ids.projectId));
+    yield* deleteIfAny(personIds, (values) =>
+      db.delete(personUnlockedPerks).where(inArray(personUnlockedPerks.personId, values)),
+    );
+    yield* db.delete(personIdentities).where(eq(personIdentities.projectId, ids.projectId));
+    yield* db.delete(persons).where(eq(persons.projectId, ids.projectId));
+
+    yield* db.delete(apiKeys).where(eq(apiKeys.projectId, ids.projectId));
+    yield* db.delete(auditLogs).where(eq(auditLogs.projectId, ids.projectId));
+    yield* db
+      .delete(captureProjectPolicies)
+      .where(eq(captureProjectPolicies.projectId, ids.projectId));
+    yield* db.delete(projects).where(eq(projects.id, ids.projectId));
+
+    yield* db.delete(usageRecords).where(eq(usageRecords.organizationId, ids.organizationId));
+    yield* db.delete(usageAggregates).where(eq(usageAggregates.organizationId, ids.organizationId));
+    yield* db
+      .delete(organizationBilling)
+      .where(eq(organizationBilling.organizationId, ids.organizationId));
+    yield* db.delete(invitation).where(eq(invitation.organizationId, ids.organizationId));
+    yield* db.delete(member).where(eq(member.organizationId, ids.organizationId));
+    yield* db.delete(organization).where(eq(organization.id, ids.organizationId));
+
+    yield* db
+      .delete(apikey)
+      .where(inArray(apikey.userId, [ids.adminUserId, ids.normalUserId, ids.invitedUserId]));
+    yield* db
+      .delete(user)
+      .where(inArray(user.id, [ids.adminUserId, ids.normalUserId, ids.invitedUserId]));
+  });
+
+/**
+ * Reset, then seed the smoke fixture. Run once before the smoke cases over
+ * `Db.layer(testConnections.db)`.
+ */
+export const seedSmokeData = (runId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const ids = makeSmokeIds(runId);
+    const now = new Date();
+
+    yield* resetSmokeData(runId);
+    yield* db.insert(user).values([
+      {
+        banned: false,
+        banExpires: null,
+        banReason: null,
+        createdAt: now,
+        email: ids.adminEmail,
+        emailVerified: true,
+        id: ids.adminUserId,
+        image: null,
+        name: "RPC Smoke Admin",
+        role: "admin",
+        updatedAt: now,
+        workosUserId: ids.workosAdminUserId,
+      },
+      {
+        banned: false,
+        banExpires: null,
+        banReason: null,
+        createdAt: now,
+        email: ids.normalEmail,
+        emailVerified: true,
+        id: ids.normalUserId,
+        image: null,
+        name: "RPC Smoke User",
+        role: null,
+        updatedAt: now,
+        workosUserId: ids.workosNormalUserId,
+      },
+    ]);
+    yield* db.insert(organization).values({
+      createdAt: now,
+      id: ids.organizationId,
+      logo: null,
+      metadata: null,
+      name: "RPC Smoke Organization",
+      slug: ids.organizationSlug,
+      workosOrganizationId: ids.workosOrganizationId,
+    });
+    yield* db.insert(member).values([
+      {
+        createdAt: now,
+        id: ids.adminMemberId,
+        organizationId: ids.organizationId,
+        role: "owner",
+        userId: ids.adminUserId,
+        workosMembershipId: ids.workosAdminMembershipId,
+      },
+      {
+        createdAt: now,
+        id: ids.normalMemberId,
+        organizationId: ids.organizationId,
+        role: "member",
+        userId: ids.normalUserId,
+        workosMembershipId: ids.workosNormalMembershipId,
+      },
+    ]);
+    yield* db.insert(projects).values({
+      createdAt: now,
+      createdByUserId: ids.adminUserId,
+      id: ids.projectId,
+      name: "RPC Smoke Project",
+      organizationId: ids.organizationId,
+      slug: ids.projectSlug,
+      updatedAt: now,
+    });
+    yield* db.insert(captureProjectPolicies).values({
+      createdAt: now,
+      projectId: ids.projectId,
+      updatedAt: now,
+    });
+    yield* db.insert(apiKeys).values({
+      createdAt: now,
+      end: "test",
+      id: ids.apiKeyId,
+      isPublic: false,
+      key: "seeded-smoke-key",
+      name: "Seeded smoke secret",
+      prefix: "smk",
+      projectId: ids.projectId,
+      updatedAt: now,
+    });
+    yield* db.insert(organizationBilling).values({
+      billingProviderId: "smoke",
+      currentPeriodEnd: null,
+      currentPeriodStart: null,
+      externalCustomerId: null,
+      externalSubscriptionId: null,
+      id: ids.billingId,
+      organizationId: ids.organizationId,
+      subscriptionStatus: BillingSubscriptionStatus.None,
+      tier: BillingTier.Free,
+    });
+  });
diff --git a/apps/backend/sst-env.d.ts b/apps/backend/sst-env.d.ts
new file mode 100644
index 000000000..eec65b9bd
--- /dev/null
+++ b/apps/backend/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst";
+export {};
diff --git a/apps/backend/tsconfig.json b/apps/backend/tsconfig.json
new file mode 100644
index 000000000..b9da6a8e5
--- /dev/null
+++ b/apps/backend/tsconfig.json
@@ -0,0 +1,17 @@
+{
+  "extends": "@voidhash/tsconfig/alchemy-base.json",
+  "compilerOptions": {
+    "types": ["bun"],
+    "allowImportingTsExtensions": true,
+    "composite": true,
+    "stripInternal": true,
+    "noEmit": false,
+    "outDir": "./lib",
+    "rootDir": "./src",
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/apps/backend/vitest.unit.mts b/apps/backend/vitest.unit.mts
new file mode 100644
index 000000000..7f23222f6
--- /dev/null
+++ b/apps/backend/vitest.unit.mts
@@ -0,0 +1,9 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    exclude: ["./**/*.integration.test.ts", "./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/apps/cli/package.json b/apps/cli/package.json
index 3240ff38c..e2d31cfb4 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -48,7 +48,6 @@
   "devDependencies": {
     "@effect/language-service": "catalog:",
     "@effect/vitest": "4.0.0-beta.84",
-    "@voidhash/react-native": "workspace:*",
     "@voidhash/tsconfig": "workspace:*",
     "dotenv-cli": "^10.0.0",
     "esbuild": "^0.25.10",
diff --git a/apps/mimic-db/.env.example b/apps/mimic-db/.env.example
new file mode 100644
index 000000000..276eac59e
--- /dev/null
+++ b/apps/mimic-db/.env.example
@@ -0,0 +1,17 @@
+# Local standalone dev server (in-memory backend).
+PORT=5001
+
+# Bootstrap superuser (also used by the Durable Object control plane).
+ROOT_USERNAME=root
+ROOT_PASSWORD=password
+
+# Public base URL used when building document-token connection URLs.
+MIMIC_PUBLIC_BASE_URL=http://localhost:5001
+
+# Comma-separated CORS origins for the RPC + WebSocket endpoints.
+# CORS_ORIGINS=http://localhost:5173
+
+# Document behavior.
+# MIMIC_DOCUMENT_SNAPSHOT_EVERY_COMMANDS=100
+# MIMIC_DOCUMENT_HEARTBEAT_MS=30000
+# MIMIC_DOCUMENT_PRESENCE_TTL_MS=75000
diff --git a/apps/mimic-db/.gitignore b/apps/mimic-db/.gitignore
new file mode 100644
index 000000000..9c97bbd46
--- /dev/null
+++ b/apps/mimic-db/.gitignore
@@ -0,0 +1,3 @@
+node_modules
+dist
+.env
diff --git a/apps/mimic-db/LICENSE.md b/apps/mimic-db/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/apps/mimic-db/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/apps/mimic-db/REWRITE.md b/apps/mimic-db/REWRITE.md
new file mode 100644
index 000000000..01226039d
--- /dev/null
+++ b/apps/mimic-db/REWRITE.md
@@ -0,0 +1,152 @@
+# mimic-db — Durable Objects rewrite
+
+This app was rewritten from an **Effect Cluster** topology (gateway/worker shards,
+MySQL persistence, MySQL-backed message/runner storage, Node `vm` migration
+sandbox) onto **Cloudflare Durable Objects**, provisioned with **Alchemy**, with
+migrations executed in a **Cloudflare Sandbox** container and applied **lazily on
+document load** instead of an eager "migration push" over every document.
+
+## What changed
+
+| Before (Effect Cluster)                                | After (Durable Objects)                                                                                            |
+| ------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------ |
+| `gateway` + `worker` roles, `ShardingConfig`           | one `MimicDocumentObject` DO **per document** (`collectionId:documentId`)                                          |
+| MySQL (`@effect/sql-mysql2`) for all state             | control plane in `MimicHostObject` SQLite; **document snapshots + command log back in MySQL** (via Hyperdrive)     |
+| `SqlMessageStorage`/`SqlRunnerStorage` cluster tables  | none — the DO is the coordination/realtime primitive, MySQL is the durable system of record                        |
+| WebSocket gateway + HTTP fanout (`GatewayFanoutRpc`)   | hibernatable WebSockets **on the document DO**; fanout is local                                                    |
+| `node:vm` (`Script`/`createContext`) migration sandbox | in-process `evaluateBundledMigration` (`new Function`, **no `node:vm`/quickjs**) — see "Migration execution" below |
+| eager "migration push" iterates every document         | `MimicHostObject` records new schema versions; each document **migrates itself on load**                           |
+| standalone/gateway/worker Node entrypoints             | `MimicDbWorker` Cloudflare Worker (one fetch entrypoint)                                                           |
+| deployed standalone; backend points at external URL    | **provisioned from `apps/backend`** alchemy stack; service binding + `MIMIC_HOST_URL`                              |
+
+## Preserved contracts (so clients/backend keep working)
+
+- **RPC** — the exact `MimicRpcGroup` from `@voidhash/mimic-server/rpc`,
+  served at `/rpc/v1` over NDJSON with HTTP Basic auth. Handlers
+  (`src/api/handlers/*`) and the Basic-auth middleware (`src/api/middleware/auth.ts`)
+  are unchanged — they depend only on `HostServiceTag`.
+- **WebSocket** — same JSON protocol (`src/ws/protocol.ts`): `auth` → `auth_result` +
+  `snapshot` + `presence_snapshot`, then `submit`/`ping`/`presence_*` and server
+  `transaction`/`pong`/`error`/`presence_*`. Route
+  `/ws/v1/databases/:db/collections/:col/documents/:doc`.
+- **`HostService`** — same interface (`src/app/hostService.ts`); only the
+  implementation backing it changed.
+
+## Architecture
+
+```
+                         ┌──────────────────────── MimicDbWorker (fetch) ───────────────────────┐
+client ──HTTP /rpc/v1──► │  RpcServer(MimicRpcGroup) ──► HostService (DurableHostServiceLive)    │
+client ──WS  /ws/v1───►  │  WebSocket upgrade ─────────────────────────────────────────────┐    │
+                         └─────────────┬───────────────────────────────────────────────────┼────┘
+                            control ops │ document ops                                       │ ws upgrade
+                                        ▼                                                     ▼
+                          ┌── MimicHostObject (DO) ──┐                 ┌── MimicDocumentObject (DO, per doc) ──┐
+                          │ SQLite control plane:    │  schema/migrate │ SQLite: meta + snapshots + commands   │
+                          │ databases, collections,  │ ◄────chain──────┤ • migrate-on-load (Sandbox)           │
+                          │ schema_versions(+source), │                 │ • applyBatch transactions             │
+                          │ users, grants, tokens,    │                 │ • hibernatable WS fanout (local)      │
+                          │ document_index, migrations│                 └───────────────┬───────────────────────┘
+                          └───────────────────────────┘                                  │ runMigration(source,value)
+                                                                                         ▼
+                                                                          ┌── MimicMigrationSandbox (Container) ──┐
+                                                                          │ isolated exec of bundled migration JS │
+                                                                          └───────────────────────────────────────┘
+```
+
+## Testable core
+
+The hard logic lives in `src/core/` behind small `Effect` service seams so it runs
+both inside DOs (`SqlControlStoreLive` / `SqlDocumentStoreLive` over `SqlStorage`,
+`SandboxMigrationExecutorLive`) and in-process for `pnpm dev` + tests
+(`MemoryControlStoreLive` / `MemoryDocumentStoreLive`, `LocalMigrationExecutorLive`).
+
+- `core/store.ts` — `ControlStore` + `DocumentStore` service contracts.
+- `core/memory-store.ts` / `core/sql-store.ts` — the two backends.
+- `core/migration-executor.ts` — `MigrationExecutor` (Sandbox vs local `new Function`
+  eval; **no `node:vm`**).
+- `core/control-engine.ts` — control-plane logic over `ControlStore`.
+- `core/document-engine.ts` — load / **migrate-on-load** / submit / snapshot over
+  `DocumentStore` + `MigrationExecutor`.
+- `core/local-host-service.ts` — `LocalHostServiceLive`: composes the engines with an
+  in-process per-document registry; satisfies `HostServiceTag` for dev + tests.
+
+`LocalHostServiceLive` faithfully simulates per-document isolation in one process,
+which is exactly what the integration tests exercise (`tests/integration/*`).
+
+## Document persistence: MySQL (not Workers SQLite)
+
+Durable document state — **snapshots** and the command log — lives in **MySQL**
+(the shared PlanetScale DB, reached via the same Cloudflare **Hyperdrive** binding
+the backend uses), not the Durable Object's SQLite. The DO is purely the
+per-document concurrency + realtime + migrate-on-load primitive; MySQL is the
+system of record.
+
+- `core/mysql-store.ts` — `makeMysqlDocumentStore(config, documentId)` implements the
+  same `DocumentStoreApi` the in-memory backend does (tables `mimic_documents`,
+  `mimic_document_snapshots`, `mimic_document_commands`, keyed by `document_id`, no
+  FKs to the control plane). `ensureDocumentTables` creates them idempotently on DO
+  boot (`IF NOT EXISTS`; on Vitess/PlanetScale prefer pre-creating via the migration
+  pipeline).
+- Hyperdrive host/password are **per Worker invocation**, so `resolveMysqlConfig`
+  reads fresh credentials and `MimicDocumentObject` builds a fresh store+engine **per
+  operation** — never caching a connection for the DO's lifetime (mirrors
+  `@voidhash/core`'s `makeScopedDbLayer`).
+- The DO binds the shared `Hyperdrive` resource from `@voidhash/core/infrastructure`
+  (`Cloudflare.Hyperdrive.bind` + `Cloudflare.HyperdriveBindingLive`).
+- The control plane (databases/collections/schema-versions/users/grants/tokens/
+  document-index) still lives in `MimicHostObject`'s DO SQLite — only document
+  snapshots/commands moved to MySQL.
+
+## Migration execution
+
+Bundled data-migrations run **in-process** in the document DO via
+`evaluateBundledMigration` (`new Function`, not `node:vm`/quickjs). The original
+plan was a `MimicMigrationSandbox` Cloudflare Container for isolation, but
+**Hyperdrive cannot bind to a Worker that also has a Container** (alchemy
+propagates the Worker's Hyperdrive binding to the Container runtime, which
+`HyperdriveBindingPolicy` rejects), so a Container and the MySQL Hyperdrive
+binding cannot coexist in this Worker. `MimicMigrationSandbox.ts` is kept
+unwired as a reference. Follow-up: host the sandbox in a **dedicated container
+Worker** and call it from the document DO via a service binding so migration
+code runs isolated (Workers also restrict `new Function` at request time).
+
+## Local dev (`pnpm dev` / `alchemy dev`)
+
+`pnpm dev` boots the whole Alchemy stack (backend, www, analyticsPipeline, and
+**MimicDbWorker**) through the local Cloudflare dev sidecar. Two things this
+worker required to boot:
+
+- **`.ts` import specifiers.** Alchemy's dev loader resolves `.ts` source with
+  native Node (no `.js`→`.ts` remap), like `@voidhash/core`. `mimic-core`,
+  `mimic-server`, and mimic-db's reused files used `.js` specifiers (legacy
+  published-package convention) and were converted to `.ts` (their build
+  tsconfigs gained `allowImportingTsExtensions` + `rewriteRelativeImportExtensions`).
+- **Lazy Durable Object stubs.** `namespace.getByName(...)` reads a runtime env
+  binding that only exists per-request — calling it at Worker init crashes the
+  plan. The control-store stub is resolved lazily (a forwarding proxy) and the
+  document stub only inside request handlers.
+
+Verified: `Done: 8 succeeded`, `MimicDbWorker Started`, and `GET
+http://localhost:1340/health` → `200`.
+
+## Verification status
+
+- ✅ `pnpm typecheck` — whole package (core + Durable Objects + worker + Alchemy).
+- ✅ `pnpm test` — 10 tests: control CRUD, document create/submit/version-conflict,
+  **lazy migrate-on-load** via both schema reconcile and a bundled data migration
+  (through the Sandbox-shaped `MigrationExecutor`), single-use document tokens, and
+  the `node:vm`/QuickJS-replacement executor itself.
+- ⚠️ A live Cloudflare deploy (real DOs + the `MimicMigrationSandbox` container) is
+  **not** runtime-verified here — it needs `CLOUDFLARE_API_TOKEN` and a container
+  image build. The cloud shell reuses the same engine code the tests cover and
+  follows the repo's proven patterns (`AnalyticsIngestShardDO`, the alchemy-effect
+  DO/Container/WebSocket fixtures). Deploy with `pnpm alchemy deploy`; the worker URL
+  is exposed as the `mimicDbUrl` stack output and bound to the backend as `MIMIC_HOST`.
+
+## Provisioning from the backend
+
+`alchemy.run.ts` (the backend's stack) deploys `MimicDbWorker`, binds it to
+`BackendService` as the `MIMIC_HOST` service binding, and exposes its URL as the
+`mimicDbUrl` output. Point the backend's `MIMIC_HOST_URL` (consumed by
+`internal/packages/core/.../mimic-host`) at that URL.
diff --git a/apps/mimic-db/package.json b/apps/mimic-db/package.json
new file mode 100644
index 000000000..a66e8f2be
--- /dev/null
+++ b/apps/mimic-db/package.json
@@ -0,0 +1,40 @@
+{
+  "name": "@voidhash/mimic-db",
+  "version": "1.0.0-beta.19",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./app/*": "./src/app/*.ts",
+    "./config": "./src/config.ts",
+    "./core/*": "./src/core/*.ts",
+    "./document/*": "./src/document/*.ts",
+    "./http/*": "./src/http/*.ts",
+    "./worker/*": "./src/worker/*.ts",
+    "./ws/*": "./src/ws/*.ts"
+  },
+  "scripts": {
+    "dev": "tsx watch src/entrypoints/standalone/main.ts",
+    "start": "tsx src/entrypoints/standalone/main.ts",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vp test run -c vitest.mts",
+    "test:watch": "vp test -c vitest.mts"
+  },
+  "dependencies": {
+    "@effect/platform-node": "catalog:",
+    "@effect/sql-pg": "catalog:",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-server": "workspace:*",
+    "@voidhash/platform": "workspace:*",
+    "effect": "catalog:"
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "@voidhash/tsconfig": "workspace:*",
+    "tsx": "^4.19.3",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:",
+    "vitest": "catalog:"
+  }
+}
diff --git a/apps/mimic-db/src/api/handlers/collections.ts b/apps/mimic-db/src/api/handlers/collections.ts
new file mode 100644
index 000000000..64129ffbc
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/collections.ts
@@ -0,0 +1,48 @@
+import { Effect } from "effect";
+import { CollectionsRpcs, CurrentUser } from "@voidhash/mimic-server/rpc";
+
+import { HostServiceTag } from "../../app/hostService.ts";
+
+export const CollectionsHandlersLive = CollectionsRpcs.toLayer(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+    return {
+      CreateCollection: ({ databaseId, name, schema }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          const collection = yield* host.createCollection(databaseId, name, schema);
+          return {
+            id: collection.id,
+            databaseId: collection.databaseId,
+            name: collection.name,
+          };
+        }),
+      ListCollections: ({ databaseId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "read");
+          return yield* host.listCollections(databaseId);
+        }),
+      UpdateCollectionSchema: ({ collectionId, schema, dataMigrationSource }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
+          // Note: today's host method ignores dataMigrationSource for ad-hoc
+          // schema updates — `applyMigration` is the only path that consumes
+          // bundled data-migration sources. Preserve that behavior.
+          void dataMigrationSource;
+          const updated = yield* host.updateCollectionSchema(collectionId, schema);
+          return { id: updated.id, schemaVersion: updated.schemaVersion };
+        }),
+      DeleteCollection: ({ collectionId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
+          yield* host.deleteCollection(collectionId);
+        }),
+    };
+  }),
+);
diff --git a/apps/mimic-db/src/api/handlers/databases.ts b/apps/mimic-db/src/api/handlers/databases.ts
new file mode 100644
index 000000000..46936bf00
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/databases.ts
@@ -0,0 +1,40 @@
+import { Effect } from "effect";
+import { CurrentUser, DatabasesRpcs, ForbiddenError } from "@voidhash/mimic-server/rpc";
+
+import { HostServiceTag } from "../../app/hostService.ts";
+
+const requireSuperuser = (user: { isSuperuser: boolean }, action: string) =>
+  user.isSuperuser
+    ? Effect.void
+    : Effect.fail(
+        new ForbiddenError({
+          code: "forbidden",
+          message: `Superuser permission required for ${action}`,
+        }),
+      );
+
+export const DatabasesHandlersLive = DatabasesRpcs.toLayer(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+    return {
+      CreateDatabase: ({ name, description }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "create database");
+          return yield* host.createDatabase(name, description);
+        }),
+      ListDatabases: () =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "list databases");
+          return yield* host.listDatabases();
+        }),
+      DeleteDatabase: ({ databaseId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "delete database");
+          yield* host.deleteDatabase(databaseId);
+        }),
+    };
+  }),
+);
diff --git a/apps/mimic-db/src/api/handlers/document-auth.ts b/apps/mimic-db/src/api/handlers/document-auth.ts
new file mode 100644
index 000000000..82b9cacf0
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/document-auth.ts
@@ -0,0 +1,98 @@
+import { Effect } from "effect";
+import { HttpServerRequest } from "effect/unstable/http";
+import { CurrentUser, DocumentAuthRpcs } from "@voidhash/mimic-server/rpc";
+
+import { HostServiceTag } from "../../app/hostService.ts";
+import { getConfig } from "../../config.ts";
+
+const getHeader = (headers: Record<string, string | undefined>, name: string) =>
+  headers[name] ?? headers[name.toLowerCase()] ?? headers[name.toUpperCase()];
+
+const ABSOLUTE_URL_PATTERN = /^([a-z][a-z0-9+.-]*):\/\/([^/?#]+)(?:[/?#].*)?$/i;
+
+const parseAbsoluteUrl = (value: string) => {
+  const match = value.match(ABSOLUTE_URL_PATTERN);
+  if (!match) {
+    return null;
+  }
+  return {
+    protocol: match[1]!.toLowerCase(),
+    host: match[2]!,
+  };
+};
+
+/**
+ * Builds the absolute `ws(s)://` URL a client connects to for a document.
+ *
+ * `publicBaseUrl` (the `MIMIC_PUBLIC_BASE_URL` config) is the primary
+ * authority: requests arriving through a service-binding fetch carry no
+ * `x-forwarded-*` headers and no absolute URL, so header derivation would
+ * mint `ws://` URLs that https-served clients cannot open. When the base URL
+ * is unset (dev on `http://localhost`), scheme/host are derived from the
+ * request exactly as before, so local clients keep receiving `ws://`.
+ */
+export const buildDocumentConnectionUrl = (
+  publicBaseUrl: string | undefined,
+  request: { readonly url: string; readonly headers: Record<string, string | undefined> },
+  databaseId: string,
+  collectionId: string,
+  documentId: string,
+) => {
+  const path = `/ws/v1/databases/${encodeURIComponent(
+    databaseId,
+  )}/collections/${encodeURIComponent(collectionId)}/documents/${encodeURIComponent(documentId)}`;
+  const base = publicBaseUrl ? parseAbsoluteUrl(publicBaseUrl) : null;
+  if (base) {
+    const wsProtocol = base.protocol === "https" ? "wss" : "ws";
+    return `${wsProtocol}://${base.host}${path}`;
+  }
+  const forwardedProto = getHeader(request.headers, "x-forwarded-proto");
+  const forwardedHost = getHeader(request.headers, "x-forwarded-host");
+  const host = forwardedHost ?? getHeader(request.headers, "host");
+  const absoluteUrl = parseAbsoluteUrl(request.url);
+  const protocol = absoluteUrl?.protocol ?? forwardedProto ?? "http";
+  const authority = absoluteUrl?.host ?? host;
+  if (!authority) {
+    throw new Error("Failed to determine request host for document connection URL");
+  }
+  const wsProtocol = protocol === "https" ? "wss" : "ws";
+  return `${wsProtocol}://${authority}${path}`;
+};
+
+export const DocumentAuthHandlersLive = DocumentAuthRpcs.toLayer(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+    return {
+      SetupDocumentAuthentication: ({
+        collectionId,
+        documentId,
+        permission,
+        origins,
+        expiresInSeconds,
+      }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const request = yield* HttpServerRequest.HttpServerRequest;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          const result = yield* host.createDocumentAuthToken(
+            collectionId,
+            documentId,
+            permission,
+            origins,
+            expiresInSeconds,
+          );
+          return {
+            token: result.token,
+            url: buildDocumentConnectionUrl(
+              getConfig().publicBaseUrl,
+              request,
+              databaseId,
+              collectionId,
+              documentId,
+            ),
+          };
+        }),
+    };
+  }),
+);
diff --git a/apps/mimic-db/src/api/handlers/documents.ts b/apps/mimic-db/src/api/handlers/documents.ts
new file mode 100644
index 000000000..417d0fc40
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/documents.ts
@@ -0,0 +1,56 @@
+import { Effect } from "effect";
+import { CurrentUser, DocumentsRpcs } from "@voidhash/mimic-server/rpc";
+
+import { HostServiceTag } from "../../app/hostService.ts";
+import type { TransactionEnvelope } from "../../document/transaction.ts";
+
+export const DocumentsHandlersLive = DocumentsRpcs.toLayer(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+    return {
+      CreateDocument: ({ collectionId, id, value }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          return yield* host.createDocument(collectionId, id, value);
+        }),
+      GetDocument: ({ collectionId, documentId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "read");
+          return yield* host.getDocument(collectionId, documentId);
+        }),
+      ListDocuments: ({ collectionId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "read");
+          return yield* host.listDocuments(collectionId);
+        }),
+      SubmitTransaction: ({ collectionId, documentId, transaction }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          // The wire schema treats commands as `Schema.Unknown[]`; the host
+          // service is typed against the structured `Command[]` shape from
+          // mimic-core. The host validates the command shape internally as
+          // it applies them, so casting here is safe.
+          return yield* host.submitTransaction(
+            collectionId,
+            documentId,
+            transaction as TransactionEnvelope,
+          );
+        }),
+      DeleteDocument: ({ collectionId, documentId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          yield* host.deleteDocument(collectionId, documentId);
+        }),
+    };
+  }),
+);
diff --git a/apps/mimic-db/src/api/handlers/grants.ts b/apps/mimic-db/src/api/handlers/grants.ts
new file mode 100644
index 000000000..822fdd3b8
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/grants.ts
@@ -0,0 +1,40 @@
+import { Effect } from "effect";
+import { CurrentUser, ForbiddenError, GrantsRpcs } from "@voidhash/mimic-server/rpc";
+
+import { HostServiceTag } from "../../app/hostService.ts";
+
+const requireSuperuser = (user: { isSuperuser: boolean }, action: string) =>
+  user.isSuperuser
+    ? Effect.void
+    : Effect.fail(
+        new ForbiddenError({
+          code: "forbidden",
+          message: `Superuser permission required for ${action}`,
+        }),
+      );
+
+export const GrantsHandlersLive = GrantsRpcs.toLayer(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+    return {
+      GrantPermission: ({ userId, databaseId, permission }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "grant permission");
+          yield* host.grantPermission(userId, databaseId, permission);
+        }),
+      RevokePermission: ({ userId, databaseId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "revoke permission");
+          yield* host.revokePermission(userId, databaseId);
+        }),
+      ListGrants: ({ userId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "list grants");
+          return yield* host.listGrants(userId);
+        }),
+    };
+  }),
+);
diff --git a/apps/mimic-db/src/api/handlers/index.ts b/apps/mimic-db/src/api/handlers/index.ts
new file mode 100644
index 000000000..e408e6998
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/index.ts
@@ -0,0 +1,19 @@
+import { Layer } from "effect";
+
+import { DatabasesHandlersLive } from "./databases.ts";
+import { CollectionsHandlersLive } from "./collections.ts";
+import { MigrationsHandlersLive } from "./migrations.ts";
+import { UsersHandlersLive } from "./users.ts";
+import { GrantsHandlersLive } from "./grants.ts";
+import { DocumentsHandlersLive } from "./documents.ts";
+import { DocumentAuthHandlersLive } from "./document-auth.ts";
+
+export const ApiHandlersLive = Layer.mergeAll(
+  DatabasesHandlersLive,
+  CollectionsHandlersLive,
+  MigrationsHandlersLive,
+  UsersHandlersLive,
+  GrantsHandlersLive,
+  DocumentsHandlersLive,
+  DocumentAuthHandlersLive,
+);
diff --git a/apps/mimic-db/src/api/handlers/migrations.ts b/apps/mimic-db/src/api/handlers/migrations.ts
new file mode 100644
index 000000000..6b8d428b3
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/migrations.ts
@@ -0,0 +1,80 @@
+import { Effect } from "effect";
+import { CurrentUser, MigrationsRpcs } from "@voidhash/mimic-server/rpc";
+
+import {
+  HostServiceTag,
+  type ApplyMigrationOptions,
+  type MigrationChange as HostMigrationChange,
+} from "../../app/hostService.ts";
+
+export const MigrationsHandlersLive = MigrationsRpcs.toLayer(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+    return {
+      ListDatabaseMigrations: ({ databaseId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
+          return yield* host.listMigrations(databaseId);
+        }),
+      ApplyDatabaseMigration: ({
+        databaseId,
+        version,
+        name,
+        checksum,
+        changes,
+        mode,
+        dryRun,
+        batchSize,
+        redoSucceededOnReplace,
+      }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
+
+          const options: ApplyMigrationOptions = {
+            batchSize,
+            dryRun: dryRun ? { ...dryRun } : false,
+          };
+
+          // Wire schema is `unknown` for `changes`; cast to the host's
+          // typed shape — the host normalizes/validates each change as it
+          // processes them.
+          const hostChanges = changes as ReadonlyArray<HostMigrationChange>;
+
+          const resolvedMode = mode ?? "apply";
+
+          if (resolvedMode === "rerun") {
+            return yield* host.rerunMigration(
+              databaseId,
+              version,
+              name,
+              checksum,
+              hostChanges,
+              options,
+            );
+          }
+          if (resolvedMode === "replace") {
+            return yield* host.replaceMigration(databaseId, version, name, checksum, hostChanges, {
+              ...options,
+              redoSucceeded: redoSucceededOnReplace,
+            });
+          }
+          return yield* host.applyMigration(
+            databaseId,
+            version,
+            name,
+            checksum,
+            hostChanges,
+            options,
+          );
+        }),
+      GetMigrationStatus: ({ databaseId, version }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
+          return yield* host.getMigrationStatus(databaseId, version);
+        }),
+    };
+  }),
+);
diff --git a/apps/mimic-db/src/api/handlers/users.ts b/apps/mimic-db/src/api/handlers/users.ts
new file mode 100644
index 000000000..247d1f716
--- /dev/null
+++ b/apps/mimic-db/src/api/handlers/users.ts
@@ -0,0 +1,41 @@
+import { Effect } from "effect";
+import { CurrentUser, ForbiddenError, UsersRpcs } from "@voidhash/mimic-server/rpc";
+
+import { HostServiceTag } from "../../app/hostService.ts";
+
+const requireSuperuser = (user: { isSuperuser: boolean }, action: string) =>
+  user.isSuperuser
+    ? Effect.void
+    : Effect.fail(
+        new ForbiddenError({
+          code: "forbidden",
+          message: `Superuser permission required for ${action}`,
+        }),
+      );
+
+export const UsersHandlersLive = UsersRpcs.toLayer(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+    return {
+      CreateUser: ({ username, password }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "create user");
+          const created = yield* host.createUser(username, password);
+          return { id: created.id, username: created.username };
+        }),
+      ListUsers: () =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "list users");
+          return yield* host.listUsers();
+        }),
+      DeleteUser: ({ userId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          yield* requireSuperuser(user, "delete user");
+          yield* host.deleteUser(userId);
+        }),
+    };
+  }),
+);
diff --git a/apps/mimic-db/src/api/middleware/auth.ts b/apps/mimic-db/src/api/middleware/auth.ts
new file mode 100644
index 000000000..1a7b6e69f
--- /dev/null
+++ b/apps/mimic-db/src/api/middleware/auth.ts
@@ -0,0 +1,59 @@
+import { Buffer } from "node:buffer";
+
+import { Effect, Layer } from "effect";
+import { AuthMiddleware, CurrentUser, UnauthorizedError } from "@voidhash/mimic-server/rpc";
+
+import { HostServiceTag } from "../../app/hostService.ts";
+
+interface BasicCredentials {
+  readonly username: string;
+  readonly password: string;
+}
+
+const parseBasicAuth = (header: string | undefined): BasicCredentials => {
+  if (!header?.startsWith("Basic ")) {
+    throw new UnauthorizedError({
+      code: "unauthorized",
+      message: "Authentication required. Provide Authorization: Basic header.",
+    });
+  }
+
+  const decoded = Buffer.from(header.slice(6), "base64").toString("utf8");
+  const separator = decoded.indexOf(":");
+  if (separator <= 0) {
+    throw new UnauthorizedError({
+      code: "unauthorized",
+      message: "Invalid Basic auth header format",
+    });
+  }
+
+  return {
+    username: decoded.slice(0, separator),
+    password: decoded.slice(separator + 1),
+  };
+};
+
+/**
+ * Server-side implementation of `AuthMiddleware`.
+ *
+ * Reads the `Authorization` header from the per-RPC headers (the RPC server
+ * merges the underlying HTTP request's headers into the per-RPC headers
+ * before invoking middleware), parses Basic auth, and provides the resolved
+ * `CurrentUser` to the wrapped handler effect. Failures surface as the
+ * tagged `UnauthorizedError` declared on the middleware contract.
+ */
+export const AuthMiddlewareLive = Layer.effect(AuthMiddleware)(
+  Effect.gen(function* () {
+    const host = yield* HostServiceTag;
+
+    return (effect, { headers }) =>
+      Effect.gen(function* () {
+        const auth =
+          (headers as Record<string, string | undefined>)["authorization"] ??
+          (headers as Record<string, string | undefined>)["Authorization"];
+        const { username, password } = yield* Effect.sync(() => parseBasicAuth(auth));
+        const user = yield* host.authenticateBasic(username, password);
+        return yield* Effect.provideService(effect, CurrentUser, user);
+      });
+  }),
+);
diff --git a/apps/mimic-db/src/app/hostService.ts b/apps/mimic-db/src/app/hostService.ts
new file mode 100644
index 000000000..5fb20bc80
--- /dev/null
+++ b/apps/mimic-db/src/app/hostService.ts
@@ -0,0 +1,278 @@
+import { type SchemaObject, type Value } from "@voidhash/mimic-core";
+import type {
+  MigrationDryRunOptions,
+  MigrationRunReport,
+  MigrationStatus,
+} from "@voidhash/mimic-server/rpc";
+import { Context, type Effect, Schema } from "effect";
+
+import type { DocumentSnapshotResponse } from "../document/snapshot.ts";
+import type { SubmitTransactionResponse, TransactionEnvelope } from "../document/transaction.ts";
+
+export type DatabasePermission = "read" | "write" | "admin";
+export type DocumentPermission = "read" | "write";
+
+export interface MigrationChangeCreate {
+  readonly type: "create";
+  readonly collection: string;
+  readonly schema: SchemaObject;
+  readonly skipIfExists?: boolean;
+}
+
+export interface MigrationChangeUpdate {
+  readonly type: "update";
+  readonly collection: string;
+  readonly schema: SchemaObject;
+  readonly oldSchema?: SchemaObject;
+  readonly dataMigrationSource?: string;
+}
+
+export type MigrationChange = MigrationChangeCreate | MigrationChangeUpdate;
+
+export interface ApplyMigrationOptions {
+  readonly batchSize?: number;
+  readonly dryRun?: false | MigrationDryRunOptions;
+}
+
+export interface PresenceEntry {
+  readonly data: Value;
+  readonly userId?: string;
+}
+
+export interface AuthenticatedUser {
+  readonly userId: string;
+  readonly username: string;
+  readonly isSuperuser: boolean;
+}
+
+/**
+ * The public façade consumed by the RPC handlers, the Basic-auth middleware,
+ * and the WebSocket connection handler. Platform entry points provide either
+ * the local `DurableEntityHost` composition or a cloud adapter over the same
+ * control and document engines.
+ */
+export interface HostService {
+  readonly authenticateBasic: (
+    username: string,
+    password: string,
+  ) => Effect.Effect<AuthenticatedUser, any>;
+  readonly authenticateDocumentToken: (
+    token: string,
+    collectionId: string,
+    documentId: string,
+    origin: string | null,
+  ) => Effect.Effect<
+    { readonly tokenId: string; readonly permission: DocumentPermission },
+    any
+  >;
+  readonly createDatabase: (
+    name: string,
+    description: string,
+  ) => Effect.Effect<
+    { readonly id: string; readonly name: string; readonly description: string },
+    any
+  >;
+  readonly listDatabases: () => Effect.Effect<
+    readonly { readonly id: string; readonly name: string; readonly description: string }[],
+    any
+  >;
+  readonly deleteDatabase: (databaseId: string) => Effect.Effect<void, any>;
+  readonly createCollection: (
+    databaseId: string,
+    name: string,
+    schemaInput: unknown,
+  ) => Effect.Effect<
+    {
+      readonly id: string;
+      readonly databaseId: string;
+      readonly name: string;
+      readonly schema: SchemaObject;
+      readonly schemaVersion: number;
+    },
+    any
+  >;
+  readonly listCollections: (databaseId: string) => Effect.Effect<
+    readonly {
+      readonly id: string;
+      readonly databaseId: string;
+      readonly name: string;
+      readonly schema: SchemaObject;
+      readonly schemaVersion: number;
+    }[],
+    any
+  >;
+  readonly updateCollectionSchema: (
+    collectionId: string,
+    schemaInput: unknown,
+    dataMigrationSource?: string,
+  ) => Effect.Effect<
+    {
+      readonly id: string;
+      readonly databaseId: string;
+      readonly name: string;
+      readonly schema: SchemaObject;
+      readonly schemaVersion: number;
+    },
+    any
+  >;
+  readonly deleteCollection: (collectionId: string) => Effect.Effect<void, any>;
+  readonly listMigrations: (databaseId: string) => Effect.Effect<
+    readonly {
+      readonly databaseId: string;
+      readonly version: number;
+      readonly name: string;
+      readonly checksum: string;
+      readonly appliedAt: string;
+      readonly state: "running" | "succeeded" | "failed" | "replaced";
+      readonly totalDocuments: number;
+      readonly succeededDocuments: number;
+      readonly failedDocuments: number;
+      readonly changes?: readonly MigrationChange[];
+    }[],
+    any
+  >;
+  readonly applyMigration: (
+    databaseId: string,
+    version: number,
+    name: string,
+    checksum: string,
+    changes: readonly MigrationChange[],
+    options?: ApplyMigrationOptions,
+  ) => Effect.Effect<MigrationRunReport, any>;
+  readonly rerunMigration: (
+    databaseId: string,
+    version: number,
+    name: string,
+    checksum: string,
+    changes: readonly MigrationChange[],
+    options?: ApplyMigrationOptions,
+  ) => Effect.Effect<MigrationRunReport, any>;
+  readonly replaceMigration: (
+    databaseId: string,
+    version: number,
+    name: string,
+    checksum: string,
+    changes: readonly MigrationChange[],
+    options?: ApplyMigrationOptions & { readonly redoSucceeded?: boolean },
+  ) => Effect.Effect<MigrationRunReport, any>;
+  readonly getMigrationStatus: (
+    databaseId: string,
+    version: number,
+  ) => Effect.Effect<MigrationStatus, any>;
+  readonly createUser: (
+    username: string,
+    password: string,
+  ) => Effect.Effect<
+    { readonly id: string; readonly username: string; readonly isSuperuser: boolean },
+    any
+  >;
+  readonly listUsers: () => Effect.Effect<
+    readonly { readonly id: string; readonly username: string; readonly isSuperuser: boolean }[],
+    any
+  >;
+  readonly deleteUser: (userId: string) => Effect.Effect<void, any>;
+  readonly grantPermission: (
+    userId: string,
+    databaseId: string,
+    permission: DatabasePermission,
+  ) => Effect.Effect<void, any>;
+  readonly revokePermission: (userId: string, databaseId: string) => Effect.Effect<void, any>;
+  readonly listGrants: (userId?: string) => Effect.Effect<
+    readonly {
+      readonly id: string;
+      readonly userId: string;
+      readonly databaseId: string;
+      readonly permission: DatabasePermission;
+    }[],
+    any
+  >;
+  readonly createDocumentAuthToken: (
+    collectionId: string,
+    documentId: string,
+    permission: DocumentPermission,
+    origins: readonly string[],
+    expiresInSeconds?: number,
+  ) => Effect.Effect<{ readonly token: string }, any>;
+  readonly createDocument: (
+    collectionId: string,
+    id: string | undefined,
+    value: unknown,
+  ) => Effect.Effect<DocumentSnapshotResponse, any>;
+  readonly getDocument: (
+    collectionId: string,
+    documentId: string,
+  ) => Effect.Effect<DocumentSnapshotResponse, any>;
+  readonly listDocuments: (
+    collectionId: string,
+  ) => Effect.Effect<readonly DocumentSnapshotResponse[], any>;
+  readonly deleteDocument: (
+    collectionId: string,
+    documentId: string,
+  ) => Effect.Effect<void, any>;
+  readonly submitTransaction: (
+    collectionId: string,
+    documentId: string,
+    transaction: TransactionEnvelope,
+  ) => Effect.Effect<SubmitTransactionResponse, any>;
+  readonly attachConnection: (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+    permission: DocumentPermission,
+    userId?: string,
+  ) => Effect.Effect<
+    {
+      readonly value: Value;
+      readonly version: number;
+      readonly presences: Record<string, PresenceEntry>;
+    },
+    any
+  >;
+  readonly heartbeatConnection: (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+  ) => Effect.Effect<void, any>;
+  readonly detachConnection: (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+  ) => Effect.Effect<void, any>;
+  readonly getPresenceSnapshot: (
+    collectionId: string,
+    documentId: string,
+  ) => Effect.Effect<{ readonly presences: Record<string, PresenceEntry> }, any>;
+  readonly setPresence: (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+    entry: PresenceEntry,
+  ) => Effect.Effect<void, any>;
+  readonly removePresence: (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+  ) => Effect.Effect<void, any>;
+  readonly ensureDatabasePermission: (
+    userId: string,
+    isSuperuser: boolean,
+    databaseId: string,
+    required: DatabasePermission,
+  ) => Effect.Effect<void, any>;
+  readonly databaseIdForCollection: (collectionId: string) => Effect.Effect<string, any>;
+}
+
+export class HostServiceTag extends Context.Service<HostServiceTag, HostService>()(
+  "@voidhash/mimic-db/HostService",
+) {}
+
+export const DatabasePermissionSchema = Schema.Union([
+  Schema.Literal("read"),
+  Schema.Literal("write"),
+  Schema.Literal("admin"),
+]);
+
+export const DocumentPermissionSchema = Schema.Union([
+  Schema.Literal("read"),
+  Schema.Literal("write"),
+]);
diff --git a/apps/mimic-db/src/config.ts b/apps/mimic-db/src/config.ts
new file mode 100644
index 000000000..134e7212f
--- /dev/null
+++ b/apps/mimic-db/src/config.ts
@@ -0,0 +1,64 @@
+/**
+ * Runtime configuration for mimic-db.
+ *
+ * Values are read from `process.env` in every supported platform entry point.
+ */
+
+export interface MimicConfig {
+  /** Bootstrap superuser, created on first control-plane access. */
+  readonly rootUsername: string;
+  readonly rootPassword: string;
+  /** Allowed CORS origins for the RPC + WebSocket endpoints. */
+  readonly corsOrigins: readonly string[];
+  /** Take a durable snapshot after this many appended commands. */
+  readonly snapshotEveryCommands: number;
+  /** WebSocket heartbeat interval (ms). */
+  readonly heartbeatMs: number;
+  /** Presence entry time-to-live (ms). */
+  readonly presenceTtlMs: number;
+  /**
+   * Debounce window (ms) after the last authenticated collaborator disconnects
+   * before a dirty document publishes an idle notification. Absorbs quick
+   * reconnects so a single reload does not fire a notification.
+   */
+  readonly idleNotifyDebounceMs: number;
+  /**
+   * Public base URL used as the primary authority for document-token
+   * connection URLs. `undefined` when `MIMIC_PUBLIC_BASE_URL` is unset or
+   * blank — callers then derive scheme/host from the incoming request.
+   */
+  readonly publicBaseUrl: string | undefined;
+}
+
+const positiveInt = (value: string | undefined, fallback: number): number => {
+  if (!value || value.trim() === "") return fallback;
+  const parsed = Number.parseInt(value, 10);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+};
+
+const DEFAULT_CORS_ORIGINS = [
+  "http://localhost:5173",
+  "http://localhost:4173",
+  "http://localhost:4460",
+  "http://localhost:3003",
+] as const;
+
+export const getCorsAllowedOrigins = (): readonly string[] => {
+  const env = process.env.CORS_ORIGINS?.trim();
+  if (!env) return DEFAULT_CORS_ORIGINS;
+  return env
+    .split(",")
+    .map((origin) => origin.trim())
+    .filter(Boolean);
+};
+
+export const getConfig = (): MimicConfig => ({
+  rootUsername: process.env.ROOT_USERNAME?.trim() || "root",
+  rootPassword: process.env.ROOT_PASSWORD ?? "password",
+  corsOrigins: getCorsAllowedOrigins(),
+  snapshotEveryCommands: positiveInt(process.env.MIMIC_DOCUMENT_SNAPSHOT_EVERY_COMMANDS, 100),
+  heartbeatMs: positiveInt(process.env.MIMIC_DOCUMENT_HEARTBEAT_MS, 30_000),
+  presenceTtlMs: positiveInt(process.env.MIMIC_DOCUMENT_PRESENCE_TTL_MS, 75_000),
+  idleNotifyDebounceMs: positiveInt(process.env.MIMIC_DOCUMENT_IDLE_NOTIFY_DEBOUNCE_MS, 15_000),
+  publicBaseUrl: process.env.MIMIC_PUBLIC_BASE_URL?.trim() || undefined,
+});
diff --git a/apps/mimic-db/src/core/control-engine.ts b/apps/mimic-db/src/core/control-engine.ts
new file mode 100644
index 000000000..2b1aa1a66
--- /dev/null
+++ b/apps/mimic-db/src/core/control-engine.ts
@@ -0,0 +1,637 @@
+import type { SchemaObject, Value } from "@voidhash/mimic-core";
+import {
+  ConflictError,
+  ForbiddenError,
+  NotFoundError,
+  UnauthorizedError,
+  type DatabasePermission,
+  type DocumentPermission,
+  type MigrationRunReport,
+  type MigrationStatus,
+} from "@voidhash/mimic-server/rpc";
+import { Effect } from "effect";
+
+import type { ApplyMigrationOptions, MigrationChange } from "../app/hostService.ts";
+import { normalizeSchemaObject, sanitizeValueForSchema } from "../document/schema.ts";
+import { hashHex, randomId } from "./ids.ts";
+import type { CollectionRecord, ControlStoreApi, MigrationState } from "./store.ts";
+
+const notFound = (message: string): NotFoundError =>
+  new NotFoundError({ code: "not_found", message });
+const conflict = (message: string): ConflictError =>
+  new ConflictError({ code: "conflict", message });
+const unauthorized = (message: string): UnauthorizedError =>
+  new UnauthorizedError({ code: "unauthorized", message });
+const forbidden = (message: string): ForbiddenError =>
+  new ForbiddenError({ code: "forbidden", message });
+
+const permissionRank = (permission: DatabasePermission): number =>
+  permission === "read" ? 1 : permission === "write" ? 2 : 3;
+
+interface CollectionView {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly name: string;
+  readonly schema: SchemaObject;
+  readonly schemaVersion: number;
+}
+
+const toCollectionView = (record: CollectionRecord): CollectionView => ({
+  id: record.id,
+  databaseId: record.databaseId,
+  name: record.name,
+  schema: record.schemaJson,
+  schemaVersion: record.schemaVersion,
+});
+
+export interface ControlEngineApi {
+  readonly ensureRootUser: (username: string, password: string) => Effect.Effect<void>;
+  readonly authenticateBasic: ControlStoreThrows<{
+    readonly userId: string;
+    readonly username: string;
+    readonly isSuperuser: boolean;
+  }>;
+  readonly authenticateDocumentToken: (
+    token: string,
+    collectionId: string,
+    documentId: string,
+    origin: string | null,
+  ) => Effect.Effect<
+    { readonly tokenId: string; readonly permission: DocumentPermission },
+    UnauthorizedError
+  >;
+  readonly createDatabase: (
+    name: string,
+    description: string,
+  ) => Effect.Effect<
+    { readonly id: string; readonly name: string; readonly description: string },
+    ConflictError
+  >;
+  readonly listDatabases: () => Effect.Effect<
+    readonly { readonly id: string; readonly name: string; readonly description: string }[]
+  >;
+  readonly deleteDatabase: (databaseId: string) => Effect.Effect<void, NotFoundError>;
+  readonly createCollection: (
+    databaseId: string,
+    name: string,
+    schemaInput: unknown,
+  ) => Effect.Effect<CollectionView, NotFoundError | ConflictError>;
+  readonly listCollections: (databaseId: string) => Effect.Effect<readonly CollectionView[]>;
+  readonly updateCollectionSchema: (
+    collectionId: string,
+    schemaInput: unknown,
+  ) => Effect.Effect<CollectionView, NotFoundError>;
+  readonly deleteCollection: (collectionId: string) => Effect.Effect<void, NotFoundError>;
+  readonly listMigrations: (databaseId: string) => Effect.Effect<
+    readonly {
+      readonly databaseId: string;
+      readonly version: number;
+      readonly name: string;
+      readonly checksum: string;
+      readonly appliedAt: string;
+      readonly state: MigrationState;
+      readonly totalDocuments: number;
+      readonly succeededDocuments: number;
+      readonly failedDocuments: number;
+      readonly changes?: readonly MigrationChange[];
+    }[]
+  >;
+  readonly applyMigration: (
+    databaseId: string,
+    version: number,
+    name: string,
+    checksum: string,
+    changes: readonly MigrationChange[],
+    mode: "apply" | "rerun" | "replace",
+    options?: ApplyMigrationOptions,
+  ) => Effect.Effect<MigrationRunReport, NotFoundError | ConflictError>;
+  readonly getMigrationStatus: (
+    databaseId: string,
+    version: number,
+  ) => Effect.Effect<MigrationStatus>;
+  readonly createUser: (
+    username: string,
+    password: string,
+  ) => Effect.Effect<
+    { readonly id: string; readonly username: string; readonly isSuperuser: boolean },
+    ConflictError
+  >;
+  readonly listUsers: () => Effect.Effect<
+    readonly { readonly id: string; readonly username: string; readonly isSuperuser: boolean }[]
+  >;
+  readonly deleteUser: (userId: string) => Effect.Effect<void, NotFoundError>;
+  readonly grantPermission: (
+    userId: string,
+    databaseId: string,
+    permission: DatabasePermission,
+  ) => Effect.Effect<void, NotFoundError>;
+  readonly revokePermission: (
+    userId: string,
+    databaseId: string,
+  ) => Effect.Effect<void, NotFoundError>;
+  readonly listGrants: (userId?: string) => Effect.Effect<
+    readonly {
+      readonly id: string;
+      readonly userId: string;
+      readonly databaseId: string;
+      readonly permission: DatabasePermission;
+    }[]
+  >;
+  readonly createDocumentToken: (
+    collectionId: string,
+    documentId: string,
+    permission: DocumentPermission,
+    origins: readonly string[],
+    expiresInSeconds: number | undefined,
+  ) => Effect.Effect<{ readonly token: string }, NotFoundError>;
+  readonly ensureDatabasePermission: (
+    userId: string,
+    isSuperuser: boolean,
+    databaseId: string,
+    required: DatabasePermission,
+  ) => Effect.Effect<void, NotFoundError | ForbiddenError>;
+  readonly databaseIdForCollection: (collectionId: string) => Effect.Effect<string, NotFoundError>;
+  /**
+   * Resolve the collection a document creation targets and sanitize its value.
+   *
+   * `isMaterialized` optionally probes whether a document id already has
+   * durable state in its document object (per-collection, addressed by
+   * `collectionId + documentId`). It is consulted only for the ambiguous case
+   * where the index row is live under the target collection: an index entry
+   * whose document object was never materialized (or lost its state) is a
+   * half-dead reservation — get reports NotFound while create would otherwise
+   * conflict forever — so `prepareDocument` heals it (re-register + re-seed)
+   * instead of conflicting. Omit the probe to keep the pure index-only
+   * behaviour (a live same-collection row is always a conflict).
+   */
+  readonly prepareDocument: (
+    collectionId: string,
+    id: string | undefined,
+    value: unknown,
+    isMaterialized?: (documentId: string) => Effect.Effect<boolean>,
+  ) => Effect.Effect<
+    { readonly documentId: string; readonly value: Value; readonly schemaVersion: number },
+    NotFoundError | ConflictError
+  >;
+  readonly findCollection: (collectionId: string) => Effect.Effect<CollectionRecord, NotFoundError>;
+  readonly findDocument: (
+    collectionId: string,
+    documentId: string,
+  ) => Effect.Effect<void, NotFoundError>;
+  readonly listDocumentIds: (
+    collectionId: string,
+  ) => Effect.Effect<readonly string[], NotFoundError>;
+  readonly markDocumentDeleted: (documentId: string) => Effect.Effect<void>;
+  readonly store: ControlStoreApi;
+}
+
+type ControlStoreThrows<A> = (
+  username: string,
+  password: string,
+) => Effect.Effect<A, UnauthorizedError>;
+
+/**
+ * Control-plane logic over a `ControlStore`. Runs inside one serialized control
+ * entity in production and in-process (over `makeMemoryControlStore`) for dev/test.
+ *
+ * Migrations follow the lazy model: `applyMigration` publishes the new schema
+ * version(s) and records the migration; documents migrate themselves on load
+ * (see `document-engine.ts`). There is no eager per-document "push" here.
+ */
+export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
+  const findCollection: ControlEngineApi["findCollection"] = (collectionId) =>
+    store
+      .findCollectionById(collectionId)
+      .pipe(
+        Effect.flatMap((record) =>
+          record
+            ? Effect.succeed(record)
+            : Effect.fail(notFound(`Collection not found: ${collectionId}`)),
+        ),
+      );
+
+  const findCollectionByName = (databaseId: string, name: string) =>
+    store.findCollectionByName(databaseId, name);
+
+  const applySingleChange = (databaseId: string, change: MigrationChange) =>
+    Effect.gen(function* () {
+      const schema = normalizeSchemaObject(change.schema);
+      const existing = yield* findCollectionByName(databaseId, change.collection);
+      if (change.type === "create") {
+        if (existing) {
+          if (change.skipIfExists) return;
+          return yield* Effect.fail(conflict(`Collection '${change.collection}' already exists`));
+        }
+        const id = randomId();
+        yield* store.createCollection({
+          id,
+          databaseId,
+          name: change.collection,
+          schemaJson: schema,
+          schemaVersion: 1,
+        });
+        yield* store.addSchemaVersion({
+          collectionId: id,
+          version: 1,
+          schemaJson: schema,
+          dataMigrationSource: null,
+        });
+        return;
+      }
+      // update
+      if (!existing) {
+        return yield* Effect.fail(notFound(`Collection not found: ${change.collection}`));
+      }
+      const nextVersion = existing.schemaVersion + 1;
+      yield* store.updateCollectionSchema(existing.id, schema, nextVersion);
+      yield* store.addSchemaVersion({
+        collectionId: existing.id,
+        version: nextVersion,
+        schemaJson: schema,
+        dataMigrationSource: change.dataMigrationSource ?? null,
+      });
+    });
+
+  return {
+    store,
+    findCollection,
+
+    ensureRootUser: (username, password) =>
+      Effect.gen(function* () {
+        const passwordHash = hashHex(password);
+        const existing = yield* store.findUserByUsername(username);
+        if (!existing) {
+          yield* store.createUser({ id: randomId(), username, passwordHash, isSuperuser: true });
+        } else if (existing.passwordHash !== passwordHash) {
+          yield* store.updateUserPasswordHash(existing.id, passwordHash);
+        }
+      }),
+
+    authenticateBasic: (username, password) =>
+      store.findUserByUsername(username).pipe(
+        Effect.flatMap((user) =>
+          !user || user.passwordHash !== hashHex(password)
+            ? Effect.fail(unauthorized("Invalid credentials"))
+            : Effect.succeed({
+                userId: user.id,
+                username: user.username,
+                isSuperuser: user.isSuperuser,
+              }),
+        ),
+      ),
+
+    authenticateDocumentToken: (token, collectionId, documentId, origin) =>
+      Effect.gen(function* () {
+        const record = yield* store.findTokenByHash(hashHex(token));
+        if (
+          !record ||
+          record.collectionId !== collectionId ||
+          record.documentId !== documentId ||
+          record.usedAt !== null ||
+          record.expiresAtMs < Date.now()
+        ) {
+          return yield* Effect.fail(unauthorized("Invalid document token"));
+        }
+        if (record.origins.length > 0 && origin !== null && !record.origins.includes(origin)) {
+          return yield* Effect.fail(unauthorized("Document token origin is not allowed"));
+        }
+        yield* store.markTokenUsed(record.id, Date.now());
+        return { tokenId: record.id, permission: record.permission };
+      }),
+
+    createDatabase: (name, description) =>
+      Effect.gen(function* () {
+        const existing = yield* store.findDatabaseByName(name);
+        if (existing) return yield* Effect.fail(conflict(`Database '${name}' already exists`));
+        const id = randomId();
+        yield* store.createDatabase({ id, name, description });
+        return { id, name, description };
+      }),
+
+    listDatabases: () =>
+      store
+        .listDatabases()
+        .pipe(
+          Effect.map((rows) =>
+            rows.map((row) => ({ id: row.id, name: row.name, description: row.description })),
+          ),
+        ),
+
+    deleteDatabase: (databaseId) =>
+      store
+        .findDatabaseById(databaseId)
+        .pipe(
+          Effect.flatMap((record) =>
+            record
+              ? store.deleteDatabase(databaseId)
+              : Effect.fail(notFound(`Database not found: ${databaseId}`)),
+          ),
+        ),
+
+    createCollection: (databaseId, name, schemaInput) =>
+      Effect.gen(function* () {
+        const database = yield* store.findDatabaseById(databaseId);
+        if (!database) return yield* Effect.fail(notFound(`Database not found: ${databaseId}`));
+        const existing = yield* store.findCollectionByName(databaseId, name);
+        if (existing) return yield* Effect.fail(conflict(`Collection '${name}' already exists`));
+        const schema = normalizeSchemaObject(schemaInput);
+        const id = randomId();
+        yield* store.createCollection({
+          id,
+          databaseId,
+          name,
+          schemaJson: schema,
+          schemaVersion: 1,
+        });
+        yield* store.addSchemaVersion({
+          collectionId: id,
+          version: 1,
+          schemaJson: schema,
+          dataMigrationSource: null,
+        });
+        return { id, databaseId, name, schema, schemaVersion: 1 };
+      }),
+
+    listCollections: (databaseId) =>
+      store
+        .listCollectionsByDatabase(databaseId)
+        .pipe(Effect.map((rows) => rows.map(toCollectionView))),
+
+    updateCollectionSchema: (collectionId, schemaInput) =>
+      Effect.gen(function* () {
+        const collection = yield* findCollection(collectionId);
+        const schema = normalizeSchemaObject(schemaInput);
+        const nextVersion = collection.schemaVersion + 1;
+        yield* store.updateCollectionSchema(collectionId, schema, nextVersion);
+        yield* store.addSchemaVersion({
+          collectionId,
+          version: nextVersion,
+          schemaJson: schema,
+          dataMigrationSource: null,
+        });
+        return { ...toCollectionView(collection), schema, schemaVersion: nextVersion };
+      }),
+
+    deleteCollection: (collectionId) =>
+      findCollection(collectionId).pipe(Effect.flatMap(() => store.deleteCollection(collectionId))),
+
+    listMigrations: (databaseId) =>
+      store.listMigrations(databaseId).pipe(
+        Effect.map((rows) =>
+          rows.map((row) => ({
+            databaseId: row.databaseId,
+            version: row.version,
+            name: row.name,
+            checksum: row.checksum,
+            appliedAt: new Date(row.appliedAtMs).toISOString(),
+            state: row.state,
+            totalDocuments: row.totalDocuments,
+            succeededDocuments: row.succeededDocuments,
+            failedDocuments: row.failedDocuments,
+            changes: (row.changesJson ?? undefined) as readonly MigrationChange[] | undefined,
+          })),
+        ),
+      ),
+
+    applyMigration: (databaseId, version, name, checksum, changes, mode, options) =>
+      Effect.gen(function* () {
+        const database = yield* store.findDatabaseById(databaseId);
+        if (!database) return yield* Effect.fail(notFound(`Database not found: ${databaseId}`));
+
+        const isDryRun = options?.dryRun !== undefined && options?.dryRun !== false;
+        const existing = yield* store.findMigration(databaseId, version);
+
+        if (mode === "apply" && existing && existing.checksum === checksum) {
+          // Idempotent re-apply of an identical migration.
+          return {
+            databaseId,
+            version,
+            state: "succeeded",
+            succeeded: 0,
+            failed: 0,
+            skipped: 0,
+            perDocument: [],
+            dryRun: isDryRun,
+          };
+        }
+        if (mode === "apply" && existing && existing.checksum !== checksum) {
+          return yield* Effect.fail(
+            conflict(`Migration version ${version} already applied with a different checksum`),
+          );
+        }
+
+        if (!isDryRun) {
+          for (const change of changes) {
+            yield* applySingleChange(databaseId, change);
+          }
+          yield* store.upsertMigration({
+            databaseId,
+            version,
+            name,
+            checksum,
+            appliedAtMs: Date.now(),
+            state: "succeeded",
+            totalDocuments: 0,
+            succeededDocuments: 0,
+            failedDocuments: 0,
+            changesJson: changes as readonly unknown[],
+          });
+        }
+
+        return {
+          databaseId,
+          version,
+          state: "succeeded",
+          succeeded: 0,
+          failed: 0,
+          skipped: 0,
+          perDocument: [],
+          dryRun: isDryRun,
+        };
+      }),
+
+    getMigrationStatus: (databaseId, version) =>
+      store.findMigration(databaseId, version).pipe(
+        Effect.map((record) => ({
+          databaseId,
+          version,
+          state: (record?.state ?? "unknown") as MigrationStatus["state"],
+          ...(record ? { checksum: record.checksum } : {}),
+          summary: {
+            pending: 0,
+            running: 0,
+            succeeded: record?.succeededDocuments ?? 0,
+            failed: record?.failedDocuments ?? 0,
+            skipped: 0,
+          },
+          failures: [],
+        })),
+      ),
+
+    createUser: (username, password) =>
+      Effect.gen(function* () {
+        const existing = yield* store.findUserByUsername(username);
+        if (existing) return yield* Effect.fail(conflict(`User '${username}' already exists`));
+        const id = randomId();
+        yield* store.createUser({
+          id,
+          username,
+          passwordHash: hashHex(password),
+          isSuperuser: false,
+        });
+        return { id, username, isSuperuser: false };
+      }),
+
+    listUsers: () =>
+      store.listUsers().pipe(
+        Effect.map((rows) =>
+          rows.map((row) => ({
+            id: row.id,
+            username: row.username,
+            isSuperuser: row.isSuperuser,
+          })),
+        ),
+      ),
+
+    deleteUser: (userId) =>
+      store
+        .findUserById(userId)
+        .pipe(
+          Effect.flatMap((user) =>
+            user ? store.deleteUser(userId) : Effect.fail(notFound(`User not found: ${userId}`)),
+          ),
+        ),
+
+    grantPermission: (userId, databaseId, permission) =>
+      Effect.gen(function* () {
+        const user = yield* store.findUserById(userId);
+        if (!user) return yield* Effect.fail(notFound(`User not found: ${userId}`));
+        const database = yield* store.findDatabaseById(databaseId);
+        if (!database) return yield* Effect.fail(notFound(`Database not found: ${databaseId}`));
+        yield* store.createGrant({ id: randomId(), userId, databaseId, permission });
+      }),
+
+    revokePermission: (userId, databaseId) =>
+      store
+        .findGrant(userId, databaseId)
+        .pipe(
+          Effect.flatMap((grant) =>
+            grant
+              ? store.removeGrant(userId, databaseId)
+              : Effect.fail(
+                  notFound(`Grant not found for user ${userId} on database ${databaseId}`),
+                ),
+          ),
+        ),
+
+    listGrants: (userId) =>
+      (userId ? store.listGrantsByUser(userId) : store.listGrants()).pipe(
+        Effect.map((rows) =>
+          rows.map((row) => ({
+            id: row.id,
+            userId: row.userId,
+            databaseId: row.databaseId,
+            permission: row.permission,
+          })),
+        ),
+      ),
+
+    createDocumentToken: (collectionId, documentId, permission, origins, expiresInSeconds) =>
+      Effect.gen(function* () {
+        yield* findCollection(collectionId);
+        const index = yield* store.findDocumentIndex(documentId);
+        if (!index || index.collectionId !== collectionId || index.deletedAt !== null) {
+          return yield* Effect.fail(notFound(`Document not found: ${documentId}`));
+        }
+        const token = randomId();
+        yield* store.createToken({
+          id: randomId(),
+          tokenHash: hashHex(token),
+          collectionId,
+          documentId,
+          permission,
+          origins,
+          expiresAtMs: Date.now() + (expiresInSeconds ?? 300) * 1000,
+          usedAt: null,
+        });
+        return { token };
+      }),
+
+    ensureDatabasePermission: (userId, isSuperuser, databaseId, required) =>
+      Effect.gen(function* () {
+        const database = yield* store.findDatabaseById(databaseId);
+        if (!database) return yield* Effect.fail(notFound(`Database not found: ${databaseId}`));
+        if (isSuperuser) return;
+        const grant = yield* store.findGrant(userId, databaseId);
+        if (!grant || permissionRank(grant.permission) < permissionRank(required)) {
+          return yield* Effect.fail(
+            forbidden(`Permission '${required}' required on database ${databaseId}`),
+          );
+        }
+      }),
+
+    databaseIdForCollection: (collectionId) =>
+      findCollection(collectionId).pipe(Effect.map((collection) => collection.databaseId)),
+
+    prepareDocument: (collectionId, id, value, isMaterialized) =>
+      Effect.gen(function* () {
+        const collection = yield* findCollection(collectionId);
+        const documentId = id ?? randomId();
+        const existing = yield* store.findDocumentIndex(documentId);
+        if (existing && existing.deletedAt === null) {
+          if (existing.collectionId === collectionId) {
+            // A live index row under the SAME collection is a real conflict
+            // only while the document object actually holds state. The index
+            // row is just a pointer: `deleteCollection` (and other out-of-band
+            // state loss) can strip a document object's storage while leaving
+            // its index row live and same-collection — a half-dead entry that
+            // reserves the id forever (create conflicts, get reports NotFound).
+            // When the caller can prove the object is unmaterialized, re-seed
+            // it (fall through to registerDocument, which the caller pairs with
+            // a fresh document-object create) instead of conflicting.
+            const materialized =
+              isMaterialized === undefined ? true : yield* isMaterialized(documentId);
+            if (materialized) {
+              return yield* Effect.fail(conflict(`Document '${documentId}' already exists`));
+            }
+          } else {
+            // A live index row under ANOTHER collection is a real conflict
+            // only while that collection still exists. `deleteCollection` does
+            // not sweep its documents' index rows, so a row can outlive its
+            // collection — such an orphan is unreachable by every read path
+            // (they all match on collectionId) yet would reserve the id
+            // forever: create conflicts, get reports NotFound. Re-register it
+            // instead (INSERT OR REPLACE re-points the row and clears
+            // deleted_at); the document object is addressed per collection, so
+            // the new document starts from fresh state.
+            const owner = yield* store.findCollectionById(existing.collectionId);
+            if (owner !== undefined) {
+              return yield* Effect.fail(conflict(`Document '${documentId}' already exists`));
+            }
+          }
+        }
+        const sanitized = sanitizeValueForSchema(collection.schemaJson, value);
+        yield* store.registerDocument(documentId, collectionId);
+        return { documentId, value: sanitized, schemaVersion: collection.schemaVersion };
+      }),
+
+    findDocument: (collectionId, documentId) =>
+      store
+        .findDocumentIndex(documentId)
+        .pipe(
+          Effect.flatMap((index) =>
+            index && index.collectionId === collectionId && index.deletedAt === null
+              ? Effect.void
+              : Effect.fail(notFound(`Document not found: ${documentId}`)),
+          ),
+        ),
+
+    listDocumentIds: (collectionId) =>
+      findCollection(collectionId).pipe(
+        Effect.flatMap(() => store.listDocumentsByCollection(collectionId)),
+        Effect.map((rows) => rows.map((row) => row.documentId)),
+      ),
+
+    markDocumentDeleted: (documentId) => store.markDocumentDeleted(documentId, Date.now()),
+  };
+};
diff --git a/apps/mimic-db/src/core/document-engine.ts b/apps/mimic-db/src/core/document-engine.ts
new file mode 100644
index 000000000..48c207e44
--- /dev/null
+++ b/apps/mimic-db/src/core/document-engine.ts
@@ -0,0 +1,221 @@
+import {
+  applyBatch,
+  cloneValue,
+  parseSchema,
+  type Command,
+  type SchemaObject,
+  type Value,
+} from "@voidhash/mimic-core";
+import { MigrationFailedError, NotFoundError } from "@voidhash/mimic-server/rpc";
+import { reconcileMigrationValue } from "@voidhash/mimic-server/migrate";
+import { Effect, Result } from "effect";
+
+import { sanitizeValueForSchema } from "../document/schema.ts";
+import type { SubmitTransactionResponse, TransactionEnvelope } from "../document/transaction.ts";
+import type { MigrationExecutorApi } from "./migration-executor.ts";
+import type { CollectionContext, SchemaProviderApi } from "./schema-provider.ts";
+import type { DocumentStoreApi } from "./store.ts";
+
+export interface DocumentEngineDeps {
+  readonly store: DocumentStoreApi;
+  readonly executor: MigrationExecutorApi;
+  readonly schema: SchemaProviderApi;
+  readonly snapshotEveryCommands: number;
+}
+
+export interface LoadedDocument {
+  readonly value: Value;
+  readonly version: number;
+  readonly currentSeq: number;
+  readonly snapshotSeq: number;
+  readonly schemaVersion: number;
+  readonly collectionId: string;
+}
+
+export interface DocumentEngineApi {
+  readonly create: (
+    collectionId: string,
+    value: Value,
+    schemaVersion: number,
+  ) => Effect.Effect<void>;
+  readonly load: () => Effect.Effect<LoadedDocument, NotFoundError | MigrationFailedError>;
+  readonly submit: (
+    envelope: TransactionEnvelope,
+  ) => Effect.Effect<SubmitTransactionResponse, NotFoundError>;
+  readonly remove: () => Effect.Effect<void>;
+}
+
+const notFound = (message: string): NotFoundError =>
+  new NotFoundError({ code: "not_found", message });
+
+const migrationFailed = (message: string): MigrationFailedError =>
+  new MigrationFailedError({ code: "migration_failed", message });
+
+/**
+ * The logic that runs inside a single document entity. Constructed over a
+ * per-document `DocumentStore`, the `MigrationExecutor`, and a `SchemaProvider`
+ * (which reads collection schema chains from the control plane). The same
+ * factory is used in-process for dev/test via `makeMemoryDocumentStore`.
+ */
+export const makeDocumentEngine = (deps: DocumentEngineDeps): DocumentEngineApi => {
+  const { store, executor, schema, snapshotEveryCommands } = deps;
+
+  const create: DocumentEngineApi["create"] = (collectionId, value, schemaVersion) =>
+    store.initialize(collectionId, value, schemaVersion);
+
+  /**
+   * Advance `value` from `fromVersion` up to the collection's latest schema by
+   * applying each intervening version's migration — bundled data migration if
+   * present, otherwise a schema reconcile against the previous version.
+   */
+  const migrateUp = (
+    value: Value,
+    fromVersion: number,
+    ctx: CollectionContext,
+  ): Effect.Effect<Value, MigrationFailedError> =>
+    Effect.gen(function* () {
+      let current = value;
+      for (let version = fromVersion + 1; version <= ctx.schemaVersion; version++) {
+        const target = ctx.versions.find((entry) => entry.version === version);
+        if (!target) {
+          return yield* Effect.fail(
+            migrationFailed(`Missing schema version ${version} for collection ${ctx.collectionId}`),
+          );
+        }
+        if (target.dataMigrationSource) {
+          // The bundle reconciles old→new and runs the user migration itself.
+          current = yield* executor.run(target.dataMigrationSource, current);
+        } else {
+          const previous = ctx.versions.find((entry) => entry.version === version - 1);
+          const result = reconcileMigrationValue({
+            oldSchema: parseSchema(previous?.schemaJson ?? target.schemaJson),
+            newSchema: parseSchema(target.schemaJson),
+            value: current,
+          });
+          if (!result.ok || result.value === undefined) {
+            return yield* Effect.fail(
+              migrationFailed(
+                result.ok ? "Migration produced an empty value" : result.error.message,
+              ),
+            );
+          }
+          current = result.value;
+        }
+        current = yield* sanitize(target.schemaJson, current);
+      }
+      return current;
+    });
+
+  const sanitize = (
+    schemaJson: SchemaObject,
+    value: Value,
+  ): Effect.Effect<Value, MigrationFailedError> =>
+    Effect.try({
+      try: () => sanitizeValueForSchema(schemaJson, value),
+      catch: (error) => migrationFailed(error instanceof Error ? error.message : String(error)),
+    });
+
+  const load: DocumentEngineApi["load"] = () =>
+    Effect.gen(function* () {
+      const meta = yield* store.readMeta();
+      if (!meta || meta.deletedAt !== null) {
+        return yield* Effect.fail(notFound("Document not found"));
+      }
+      const snapshot = yield* store.loadLatestSnapshot();
+      if (!snapshot) {
+        return yield* Effect.fail(notFound("Document not found"));
+      }
+      let value = cloneValue(snapshot.value);
+      const commands = yield* store.listCommandsAfter(snapshot.seq);
+      if (commands.length > 0) {
+        value = applyBatch(
+          value,
+          commands.map((row) => row.command),
+        );
+      }
+      let schemaVersion = meta.schemaVersion;
+      let snapshotSeq = meta.snapshotSeq;
+
+      const ctx = yield* schema.getCollectionContext(meta.collectionId);
+      if (ctx && schemaVersion < ctx.schemaVersion) {
+        // Lazy migration: bring the document onto the latest schema on load,
+        // then durably snapshot the result so the work is done once.
+        value = yield* migrateUp(value, schemaVersion, ctx);
+        schemaVersion = ctx.schemaVersion;
+        yield* store.writeSnapshot(meta.currentSeq, value, schemaVersion);
+        yield* store.setMeta({ schemaVersion, snapshotSeq: meta.currentSeq });
+        snapshotSeq = meta.currentSeq;
+      }
+
+      return {
+        value,
+        version: meta.currentSeq + 1,
+        currentSeq: meta.currentSeq,
+        snapshotSeq,
+        schemaVersion,
+        collectionId: meta.collectionId,
+      };
+    });
+
+  const submit: DocumentEngineApi["submit"] = (envelope) =>
+    Effect.gen(function* () {
+      const loaded = yield* load().pipe(
+        Effect.catchTag("MigrationFailedError", (error) =>
+          Effect.fail(notFound(`Document migration failed: ${error.message}`)),
+        ),
+      );
+
+      const transactionId = envelope.id;
+      if (envelope.baseVersion !== loaded.version) {
+        return {
+          accepted: false,
+          version: loaded.version,
+          transactionId,
+          reason: `Version conflict: expected ${loaded.version}, received ${envelope.baseVersion}`,
+        };
+      }
+
+      const ctx = yield* deps.schema.getCollectionContext(loaded.collectionId);
+      const schemaJson = ctx?.schemaJson;
+      const commands = envelope.commands as readonly Command[];
+
+      const applied = yield* Effect.result(
+        Effect.try({
+          try: () => {
+            const next = applyBatch(loaded.value, commands);
+            return schemaJson ? sanitizeValueForSchema(schemaJson, next) : next;
+          },
+          catch: (error) => (error instanceof Error ? error : new Error(String(error))),
+        }),
+      );
+
+      if (Result.isFailure(applied)) {
+        return {
+          accepted: false,
+          version: loaded.version,
+          transactionId,
+          reason: applied.failure.message,
+        };
+      }
+
+      const nextValue = applied.success;
+      yield* store.appendCommands(loaded.currentSeq, commands, transactionId);
+      const newSeq = loaded.currentSeq + commands.length;
+      yield* store.setMeta({ currentSeq: newSeq });
+
+      if (newSeq - loaded.snapshotSeq >= snapshotEveryCommands) {
+        yield* store.writeSnapshot(newSeq, nextValue, loaded.schemaVersion);
+        yield* store.setMeta({ snapshotSeq: newSeq });
+      }
+
+      return { accepted: true, version: newSeq + 1, transactionId };
+    });
+
+  const remove: DocumentEngineApi["remove"] = () =>
+    Effect.gen(function* () {
+      const meta = yield* store.readMeta();
+      if (meta) yield* store.setMeta({ deletedAt: Date.now() });
+    });
+
+  return { create, load, submit, remove };
+};
diff --git a/apps/mimic-db/src/core/document-store-factory.ts b/apps/mimic-db/src/core/document-store-factory.ts
new file mode 100644
index 000000000..d6ea0df53
--- /dev/null
+++ b/apps/mimic-db/src/core/document-store-factory.ts
@@ -0,0 +1,21 @@
+import { Context, Layer } from "effect";
+
+import { makeMemoryDocumentStore } from "./memory-store.ts";
+import type { DocumentStoreApi } from "./store.ts";
+
+/** Selects the document persistence adapter for one entity address. */
+export interface DocumentStoreFactoryShape {
+  readonly make: (collectionId: string, documentId: string) => DocumentStoreApi;
+}
+
+/** Runtime-selected document persistence factory used by the portable host. */
+export class DocumentStoreFactory extends Context.Service<
+  DocumentStoreFactory,
+  DocumentStoreFactoryShape
+>()("@voidhash/mimic-db/DocumentStoreFactory") {}
+
+/** In-memory document stores for tests and ephemeral standalone development. */
+export const MemoryDocumentStoreFactoryLive: Layer.Layer<DocumentStoreFactory> = Layer.succeed(
+  DocumentStoreFactory,
+  DocumentStoreFactory.of({ make: () => makeMemoryDocumentStore() }),
+);
diff --git a/apps/mimic-db/src/core/ids.ts b/apps/mimic-db/src/core/ids.ts
new file mode 100644
index 000000000..003fcfb6c
--- /dev/null
+++ b/apps/mimic-db/src/core/ids.ts
@@ -0,0 +1,12 @@
+import { createHash } from "node:crypto";
+
+/** Generate a random document/database/collection/user identifier. */
+export const randomId = (): string => globalThis.crypto.randomUUID();
+
+/**
+ * Deterministic SHA-256 hex digest used for password and token storage.
+ *
+ * The synchronous implementation works in the supported Node and workerd
+ * adapter runtimes without async WebCrypto plumbing.
+ */
+export const hashHex = (value: string): string => createHash("sha256").update(value).digest("hex");
diff --git a/apps/mimic-db/src/core/local-entity-host.ts b/apps/mimic-db/src/core/local-entity-host.ts
new file mode 100644
index 000000000..00a03d4d6
--- /dev/null
+++ b/apps/mimic-db/src/core/local-entity-host.ts
@@ -0,0 +1,74 @@
+import {
+  DurableEntityHost,
+  type DurableEntityContext,
+  type DurableEntityHostShape,
+  type DurableEntitySession,
+} from "@voidhash/platform/DurableEntity";
+import { Effect, Layer, Semaphore } from "effect";
+
+interface MemoryEntityState {
+  readonly lock: Semaphore.Semaphore;
+  readonly values: Map<string, unknown>;
+  readonly sessions: Map<string, DurableEntitySession>;
+  alarm: number | undefined;
+}
+
+const entityKey = (type: string, id: string): string => `${type}\u0000${id}`;
+
+/**
+ * Builds an isolated in-memory durable entity host for local development and
+ * tests. Operations for one address are FIFO-serialized; different addresses
+ * use independent semaphores and may run concurrently.
+ */
+export const makeMemoryDurableEntityHost = (): DurableEntityHostShape => {
+  const states = new Map<string, MemoryEntityState>();
+
+  const stateFor = (type: string, id: string): MemoryEntityState => {
+    const key = entityKey(type, id);
+    let state = states.get(key);
+    if (!state) {
+      state = {
+        lock: Semaphore.makeUnsafe(1),
+        values: new Map(),
+        sessions: new Map(),
+        alarm: undefined,
+      };
+      states.set(key, state);
+    }
+    return state;
+  };
+
+  return DurableEntityHost.of({
+    run: (address, operation) =>
+      Effect.suspend(() => {
+        const state = stateFor(address.type, address.id);
+        const context: DurableEntityContext = {
+          address,
+          keyValue: {
+            get: (key) => Effect.sync(() => state.values.get(key)),
+            put: (key, value) => Effect.sync(() => void state.values.set(key, value)),
+            delete: (key) => Effect.sync(() => void state.values.delete(key)),
+          },
+          alarm: {
+            get: Effect.sync(() => state.alarm),
+            set: (scheduledTime) => Effect.sync(() => void (state.alarm = scheduledTime)),
+            delete: Effect.sync(() => void (state.alarm = undefined)),
+          },
+          sessions: {
+            get: (sessionId) => Effect.sync(() => state.sessions.get(sessionId)),
+            list: Effect.sync(() => [...state.sessions.values()]),
+            attach: (session) =>
+              Effect.sync(() => void state.sessions.set(session.id, session)),
+            remove: (sessionId) => Effect.sync(() => void state.sessions.delete(sessionId)),
+          },
+        };
+        return state.lock.withPermit(Effect.suspend(() => operation(context)));
+      }),
+  });
+};
+
+/** In-memory entity host layer for local development and tests. */
+export const MemoryDurableEntityHostLive: Layer.Layer<DurableEntityHost> = Layer.sync(
+  DurableEntityHost,
+  makeMemoryDurableEntityHost,
+);
diff --git a/apps/mimic-db/src/core/local-host-service.ts b/apps/mimic-db/src/core/local-host-service.ts
new file mode 100644
index 000000000..23a3e02ab
--- /dev/null
+++ b/apps/mimic-db/src/core/local-host-service.ts
@@ -0,0 +1,291 @@
+import { DurableEntityHost, makeDurableEntityAddress } from "@voidhash/platform/DurableEntity";
+import { Effect, Layer } from "effect";
+
+import { HostServiceTag, type HostService, type PresenceEntry } from "../app/hostService.ts";
+import { getConfig, type MimicConfig } from "../config.ts";
+import { makeControlEngine, type ControlEngineApi } from "./control-engine.ts";
+import { makeDocumentEngine, type DocumentEngineApi } from "./document-engine.ts";
+import {
+  DocumentStoreFactory,
+  MemoryDocumentStoreFactoryLive,
+  type DocumentStoreFactoryShape,
+} from "./document-store-factory.ts";
+import { MemoryControlStoreLive } from "./memory-store.ts";
+import {
+  LocalMigrationExecutorLive,
+  MigrationExecutor,
+  type MigrationExecutorApi,
+} from "./migration-executor.ts";
+import { makeControlStoreSchemaProvider } from "./schema-provider.ts";
+import { ControlStore } from "./store.ts";
+import { MemoryDurableEntityHostLive } from "./local-entity-host.ts";
+import { randomId } from "./ids.ts";
+
+const docKeyOf = (collectionId: string, documentId: string): string =>
+  `${collectionId}:${documentId}`;
+
+export interface LocalHostServiceDeps {
+  readonly control: ControlEngineApi;
+  readonly entities: DurableEntityHost["Service"];
+  readonly executor: MigrationExecutorApi;
+  readonly documentStores: DocumentStoreFactoryShape;
+  readonly config: MimicConfig;
+}
+
+/**
+ * In-process `HostService` used for `pnpm dev` (standalone) and the integration
+ * tests. Control state lives in one serialized entity; each document gets its
+ * own serialized `DocumentEngine` over a runtime-selected persistence store.
+ */
+export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService => {
+  const { control, entities, executor, documentStores, config } = deps;
+  const schema = makeControlStoreSchemaProvider(control.store);
+  const documents = new Map<string, DocumentEngineApi>();
+  const presence = new Map<string, Map<string, PresenceEntry>>();
+
+  const getDoc = (collectionId: string, documentId: string): DocumentEngineApi => {
+    const key = docKeyOf(collectionId, documentId);
+    let engine = documents.get(key);
+    if (!engine) {
+      engine = makeDocumentEngine({
+        store: documentStores.make(collectionId, documentId),
+        executor,
+        schema,
+        snapshotEveryCommands: config.snapshotEveryCommands,
+      });
+      documents.set(key, engine);
+    }
+    return engine;
+  };
+
+  const presenceOf = (collectionId: string, documentId: string): Map<string, PresenceEntry> => {
+    const key = docKeyOf(collectionId, documentId);
+    let entries = presence.get(key);
+    if (!entries) {
+      entries = new Map();
+      presence.set(key, entries);
+    }
+    return entries;
+  };
+
+  const presenceSnapshot = (
+    collectionId: string,
+    documentId: string,
+  ): Record<string, PresenceEntry> => Object.fromEntries(presenceOf(collectionId, documentId));
+
+  const runControl = <A, E, R>(operation: () => Effect.Effect<A, E, R>): Effect.Effect<A, E, R> =>
+    entities.run(makeDurableEntityAddress("mimic-control", "default"), () =>
+      Effect.suspend(operation),
+    );
+
+  const runDocument = <A, E, R>(
+    collectionId: string,
+    documentId: string,
+    operation: () => Effect.Effect<A, E, R>,
+  ): Effect.Effect<A, E, R> =>
+    entities.run(
+      makeDurableEntityAddress("mimic-document", docKeyOf(collectionId, documentId)),
+      () => Effect.suspend(operation),
+    );
+
+  return {
+    authenticateBasic: (username, password) =>
+      runControl(() => control.authenticateBasic(username, password)),
+    authenticateDocumentToken: (token, collectionId, documentId, origin) =>
+      runControl(() => control.authenticateDocumentToken(token, collectionId, documentId, origin)),
+    createDatabase: (name, description) =>
+      runControl(() => control.createDatabase(name, description)),
+    listDatabases: () => runControl(control.listDatabases),
+    deleteDatabase: (databaseId) => runControl(() => control.deleteDatabase(databaseId)),
+    createCollection: (databaseId, name, schemaInput) =>
+      runControl(() => control.createCollection(databaseId, name, schemaInput)),
+    listCollections: (databaseId) => runControl(() => control.listCollections(databaseId)),
+    updateCollectionSchema: (collectionId, schemaInput) =>
+      runControl(() => control.updateCollectionSchema(collectionId, schemaInput)),
+    deleteCollection: (collectionId) => runControl(() => control.deleteCollection(collectionId)),
+    listMigrations: (databaseId) => runControl(() => control.listMigrations(databaseId)),
+    applyMigration: (databaseId, version, name, checksum, changes, options) =>
+      runControl(() =>
+        control.applyMigration(databaseId, version, name, checksum, changes, "apply", options),
+      ),
+    rerunMigration: (databaseId, version, name, checksum, changes, options) =>
+      runControl(() =>
+        control.applyMigration(databaseId, version, name, checksum, changes, "rerun", options),
+      ),
+    replaceMigration: (databaseId, version, name, checksum, changes, options) =>
+      runControl(() =>
+        control.applyMigration(databaseId, version, name, checksum, changes, "replace", options),
+      ),
+    getMigrationStatus: (databaseId, version) =>
+      runControl(() => control.getMigrationStatus(databaseId, version)),
+    createUser: (username, password) => runControl(() => control.createUser(username, password)),
+    listUsers: () => runControl(control.listUsers),
+    deleteUser: (userId) => runControl(() => control.deleteUser(userId)),
+    grantPermission: (userId, databaseId, permission) =>
+      runControl(() => control.grantPermission(userId, databaseId, permission)),
+    revokePermission: (userId, databaseId) =>
+      runControl(() => control.revokePermission(userId, databaseId)),
+    listGrants: (userId) => runControl(() => control.listGrants(userId)),
+    createDocumentAuthToken: (collectionId, documentId, permission, origins, expiresInSeconds) =>
+      runControl(() =>
+        control.createDocumentToken(
+          collectionId,
+          documentId,
+          permission,
+          origins,
+          expiresInSeconds,
+        ),
+      ),
+    ensureDatabasePermission: (userId, isSuperuser, databaseId, required) =>
+      runControl(() => control.ensureDatabasePermission(userId, isSuperuser, databaseId, required)),
+    databaseIdForCollection: (collectionId) =>
+      runControl(() => control.databaseIdForCollection(collectionId)),
+
+    createDocument: (collectionId, id, value) =>
+      Effect.suspend(() => {
+        const documentId = id ?? randomId();
+        return runDocument(collectionId, documentId, () =>
+          Effect.gen(function* () {
+            // Probe the per-document engine so prepareDocument can heal a half-dead
+            // index row (live + same-collection, but the document engine holds no
+            // state) instead of conflicting forever — see prepareDocument.
+            const prepared = yield* runControl(() =>
+              control.prepareDocument(collectionId, documentId, value, (preparedId) =>
+                getDoc(collectionId, preparedId)
+                  .load()
+                  .pipe(
+                    Effect.as(true),
+                    Effect.catchTag("NotFoundError", () => Effect.succeed(false)),
+                    Effect.catchTag("MigrationFailedError", () => Effect.succeed(true)),
+                  ),
+              ),
+            );
+            yield* getDoc(collectionId, prepared.documentId).create(
+              collectionId,
+              prepared.value,
+              prepared.schemaVersion,
+            );
+            return {
+              id: prepared.documentId,
+              collectionId,
+              value: prepared.value,
+              version: 1,
+            };
+          }),
+        );
+      }),
+
+    getDocument: (collectionId, documentId) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.gen(function* () {
+          yield* runControl(() => control.findDocument(collectionId, documentId));
+          const loaded = yield* getDoc(collectionId, documentId).load();
+          return { id: documentId, collectionId, value: loaded.value, version: loaded.version };
+        }),
+      ),
+
+    listDocuments: (collectionId) =>
+      Effect.gen(function* () {
+        const ids = yield* runControl(() => control.listDocumentIds(collectionId));
+        return yield* Effect.forEach(ids, (documentId) =>
+          runDocument(collectionId, documentId, () =>
+            getDoc(collectionId, documentId)
+              .load()
+              .pipe(
+                Effect.map(
+                  (loaded) =>
+                    ({
+                      id: documentId,
+                      collectionId,
+                      value: loaded.value,
+                      version: loaded.version,
+                    }) as const,
+                ),
+              ),
+          ),
+        );
+      }),
+
+    deleteDocument: (collectionId, documentId) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.gen(function* () {
+          yield* runControl(() =>
+            Effect.gen(function* () {
+              yield* control.findDocument(collectionId, documentId);
+              yield* control.markDocumentDeleted(documentId);
+            }),
+          );
+          yield* getDoc(collectionId, documentId).remove();
+        }),
+      ),
+
+    submitTransaction: (collectionId, documentId, transaction) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.gen(function* () {
+          yield* runControl(() => control.findDocument(collectionId, documentId));
+          return yield* getDoc(collectionId, documentId).submit(transaction);
+        }),
+      ),
+
+    attachConnection: (collectionId, documentId) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.gen(function* () {
+          yield* runControl(() => control.findDocument(collectionId, documentId));
+          const loaded = yield* getDoc(collectionId, documentId).load();
+          return {
+            value: loaded.value,
+            version: loaded.version,
+            presences: presenceSnapshot(collectionId, documentId),
+          };
+        }),
+      ),
+
+    heartbeatConnection: (collectionId, documentId) =>
+      runDocument(collectionId, documentId, () => Effect.void),
+    detachConnection: (collectionId, documentId, connectionId) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.sync(() => void presenceOf(collectionId, documentId).delete(connectionId)),
+      ),
+
+    getPresenceSnapshot: (collectionId, documentId) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.sync(() => ({ presences: presenceSnapshot(collectionId, documentId) })),
+      ),
+    setPresence: (collectionId, documentId, connectionId, entry) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.sync(() => void presenceOf(collectionId, documentId).set(connectionId, entry)),
+      ),
+    removePresence: (collectionId, documentId, connectionId) =>
+      runDocument(collectionId, documentId, () =>
+        Effect.sync(() => void presenceOf(collectionId, documentId).delete(connectionId)),
+      ),
+  };
+};
+
+/**
+ * Builds `HostService` from a `ControlStore` + `MigrationExecutor` in context
+ * and bootstraps the root user. Defaults below provide the in-memory backend.
+ */
+export const LocalHostServiceLive = Layer.effect(
+  HostServiceTag,
+  Effect.gen(function* () {
+    const controlStore = yield* ControlStore;
+    const entities = yield* DurableEntityHost;
+    const executor = yield* MigrationExecutor;
+    const documentStores = yield* DocumentStoreFactory;
+    const config = getConfig();
+    const control = makeControlEngine(controlStore);
+    yield* entities.run(makeDurableEntityAddress("mimic-control", "default"), () =>
+      control.ensureRootUser(config.rootUsername, config.rootPassword),
+    );
+    return makeLocalHostService({ control, entities, executor, documentStores, config });
+  }),
+);
+
+/** In-memory default composition for dev + tests. */
+export const LocalHostServiceDefault = LocalHostServiceLive.pipe(
+  Layer.provide(MemoryControlStoreLive),
+  Layer.provide(LocalMigrationExecutorLive),
+  Layer.provide(MemoryDurableEntityHostLive),
+  Layer.provide(MemoryDocumentStoreFactoryLive),
+);
diff --git a/apps/mimic-db/src/core/memory-store.ts b/apps/mimic-db/src/core/memory-store.ts
new file mode 100644
index 000000000..803d64ef4
--- /dev/null
+++ b/apps/mimic-db/src/core/memory-store.ts
@@ -0,0 +1,170 @@
+import { cloneValue, type Command } from "@voidhash/mimic-core";
+import { Effect, Layer } from "effect";
+
+import {
+  ControlStore,
+  type ControlStoreApi,
+  type CollectionRecord,
+  type DatabaseRecord,
+  type DocumentIndexRecord,
+  type DocumentMeta,
+  type DocumentStoreApi,
+  type GrantRecord,
+  type MigrationRecord,
+  type SchemaVersionRecord,
+  type SnapshotRow,
+  type CommandRow,
+  type TokenRecord,
+  type UserRecord,
+} from "./store.ts";
+
+const sync = Effect.sync;
+
+/** In-memory `ControlStore`, backing dev + tests. */
+export const makeMemoryControlStore = (): ControlStoreApi => {
+  const databases = new Map<string, DatabaseRecord>();
+  const collections = new Map<string, CollectionRecord>();
+  const schemaVersions = new Map<string, SchemaVersionRecord>(); // key `${collectionId}:${version}`
+  const users = new Map<string, UserRecord>();
+  const grants = new Map<string, GrantRecord>(); // key `${userId}:${databaseId}`
+  const tokens = new Map<string, TokenRecord>();
+  const documents = new Map<string, DocumentIndexRecord>();
+  const migrations = new Map<string, MigrationRecord>(); // key `${databaseId}:${version}`
+
+  return {
+    createDatabase: (record) => sync(() => void databases.set(record.id, record)),
+    findDatabaseById: (id) => sync(() => databases.get(id)),
+    findDatabaseByName: (name) =>
+      sync(() => [...databases.values()].find((row) => row.name === name)),
+    listDatabases: () => sync(() => [...databases.values()]),
+    deleteDatabase: (id) => sync(() => void databases.delete(id)),
+
+    createCollection: (record) => sync(() => void collections.set(record.id, record)),
+    findCollectionById: (id) => sync(() => collections.get(id)),
+    findCollectionByName: (databaseId, name) =>
+      sync(() =>
+        [...collections.values()].find((row) => row.databaseId === databaseId && row.name === name),
+      ),
+    listCollectionsByDatabase: (databaseId) =>
+      sync(() => [...collections.values()].filter((row) => row.databaseId === databaseId)),
+    updateCollectionSchema: (collectionId, schemaJson, version) =>
+      sync(() => {
+        const existing = collections.get(collectionId);
+        if (existing) {
+          collections.set(collectionId, { ...existing, schemaJson, schemaVersion: version });
+        }
+      }),
+    deleteCollection: (id) =>
+      sync(() => {
+        collections.delete(id);
+        for (const key of [...schemaVersions.keys()]) {
+          if (key.startsWith(`${id}:`)) schemaVersions.delete(key);
+        }
+      }),
+
+    addSchemaVersion: (record) =>
+      sync(() => void schemaVersions.set(`${record.collectionId}:${record.version}`, record)),
+    findSchemaVersion: (collectionId, version) =>
+      sync(() => schemaVersions.get(`${collectionId}:${version}`)),
+    listSchemaVersions: (collectionId) =>
+      sync(() =>
+        [...schemaVersions.values()]
+          .filter((row) => row.collectionId === collectionId)
+          .sort((a, b) => a.version - b.version),
+      ),
+
+    createUser: (record) => sync(() => void users.set(record.id, record)),
+    findUserById: (id) => sync(() => users.get(id)),
+    findUserByUsername: (username) =>
+      sync(() => [...users.values()].find((row) => row.username === username)),
+    listUsers: () => sync(() => [...users.values()]),
+    deleteUser: (id) => sync(() => void users.delete(id)),
+    updateUserPasswordHash: (id, passwordHash) =>
+      sync(() => {
+        const existing = users.get(id);
+        if (existing) users.set(id, { ...existing, passwordHash });
+      }),
+
+    createGrant: (record) =>
+      sync(() => void grants.set(`${record.userId}:${record.databaseId}`, record)),
+    findGrant: (userId, databaseId) => sync(() => grants.get(`${userId}:${databaseId}`)),
+    removeGrant: (userId, databaseId) => sync(() => void grants.delete(`${userId}:${databaseId}`)),
+    listGrants: () => sync(() => [...grants.values()]),
+    listGrantsByUser: (userId) =>
+      sync(() => [...grants.values()].filter((row) => row.userId === userId)),
+
+    createToken: (record) => sync(() => void tokens.set(record.id, record)),
+    findTokenByHash: (tokenHash) =>
+      sync(() => [...tokens.values()].find((row) => row.tokenHash === tokenHash)),
+    markTokenUsed: (id, usedAt) =>
+      sync(() => {
+        const existing = tokens.get(id);
+        if (existing) tokens.set(id, { ...existing, usedAt });
+      }),
+
+    registerDocument: (documentId, collectionId) =>
+      sync(() => void documents.set(documentId, { documentId, collectionId, deletedAt: null })),
+    findDocumentIndex: (documentId) => sync(() => documents.get(documentId)),
+    listDocumentsByCollection: (collectionId) =>
+      sync(() =>
+        [...documents.values()].filter(
+          (row) => row.collectionId === collectionId && row.deletedAt === null,
+        ),
+      ),
+    markDocumentDeleted: (documentId, deletedAt) =>
+      sync(() => {
+        const existing = documents.get(documentId);
+        if (existing) documents.set(documentId, { ...existing, deletedAt });
+      }),
+
+    upsertMigration: (record) =>
+      sync(() => void migrations.set(`${record.databaseId}:${record.version}`, record)),
+    findMigration: (databaseId, version) => sync(() => migrations.get(`${databaseId}:${version}`)),
+    listMigrations: (databaseId) =>
+      sync(() =>
+        [...migrations.values()]
+          .filter((row) => row.databaseId === databaseId)
+          .sort((a, b) => a.version - b.version),
+      ),
+  };
+};
+
+export const MemoryControlStoreLive = Layer.sync(ControlStore, makeMemoryControlStore);
+
+/** In-memory `DocumentStore` for a single document, backing dev + tests. */
+export const makeMemoryDocumentStore = (): DocumentStoreApi => {
+  let meta: DocumentMeta | undefined;
+  const snapshots: SnapshotRow[] = [];
+  const commands: CommandRow[] = [];
+
+  return {
+    readMeta: () => sync(() => meta),
+    initialize: (collectionId, value, schemaVersion) =>
+      sync(() => {
+        meta = { collectionId, schemaVersion, currentSeq: 0, snapshotSeq: 0, deletedAt: null };
+        snapshots.length = 0;
+        commands.length = 0;
+        snapshots.push({ seq: 0, value: cloneValue(value), schemaVersion });
+      }),
+    loadLatestSnapshot: () =>
+      sync(() =>
+        snapshots.length === 0
+          ? undefined
+          : snapshots.reduce((best, row) => (row.seq >= best.seq ? row : best)),
+      ),
+    listCommandsAfter: (seq) =>
+      sync(() => commands.filter((row) => row.seq > seq).sort((a, b) => a.seq - b.seq)),
+    appendCommands: (fromSeq, cmds: readonly Command[], txId) =>
+      sync(() => {
+        cmds.forEach((command, index) => {
+          commands.push({ seq: fromSeq + 1 + index, command, txId });
+        });
+      }),
+    writeSnapshot: (seq, value, schemaVersion) =>
+      sync(() => void snapshots.push({ seq, value: cloneValue(value), schemaVersion })),
+    setMeta: (patch) =>
+      sync(() => {
+        if (meta) meta = { ...meta, ...patch };
+      }),
+  };
+};
diff --git a/apps/mimic-db/src/core/migration-executor.ts b/apps/mimic-db/src/core/migration-executor.ts
new file mode 100644
index 000000000..1e0f0ec09
--- /dev/null
+++ b/apps/mimic-db/src/core/migration-executor.ts
@@ -0,0 +1,96 @@
+import { cloneValue, validateValue, type Value } from "@voidhash/mimic-core";
+import { MigrationFailedError } from "@voidhash/mimic-server/rpc";
+import { Context, Effect, Layer } from "effect";
+
+/** Global the bundled migration registers its runner under. */
+export const MigrationRunnerGlobal = "__MIMIC_RUN_MIGRATION__";
+
+interface MigrationRunnerOutput {
+  readonly value: Value;
+}
+
+const isRunnerOutput = (value: unknown): value is MigrationRunnerOutput =>
+  typeof value === "object" && value !== null && "value" in value;
+
+const migrationFailed = (message: string, cause?: unknown): MigrationFailedError =>
+  new MigrationFailedError({
+    code: "migration_failed",
+    message,
+    ...(cause === undefined ? {} : { details: { cause: String(cause) } }),
+  });
+
+/**
+ * Evaluate a bundled data-migration against a document value.
+ *
+ * The bundle (produced by `mimic-cli`'s `MigrationBundler`) is a self-contained
+ * IIFE that assigns a runner to `globalThis.__MIMIC_RUN_MIGRATION__`. We run it
+ * via `new Function` with `globalThis`/`crypto` passed as parameters so the
+ * bundle's `globalThis.__MIMIC_RUN_MIGRATION__ = …` assignment lands on a fresh
+ * scope object instead of the host realm — **no `node:vm` / quickjs**, so it
+ * runs unchanged on the Cloudflare Workers runtime.
+ *
+ * In production this evaluation happens inside the isolated
+ * `MimicMigrationSandbox` container; in dev/test it runs in-process.
+ */
+export const evaluateBundledMigration = (source: string, oldValue: Value): Value => {
+  validateValue(oldValue);
+  const scope: Record<string, unknown> = {};
+  scope.globalThis = scope;
+  scope.crypto = globalThis.crypto;
+  const factory = new Function(
+    "globalThis",
+    "crypto",
+    `${source}\nreturn globalThis.${MigrationRunnerGlobal};`,
+  );
+  const runner = factory(scope, globalThis.crypto) as
+    | ((input: { readonly oldValue: Value }) => unknown)
+    | undefined;
+  if (typeof runner !== "function") {
+    throw migrationFailed("Migration bundle did not register a runner");
+  }
+  const output = runner({ oldValue: cloneValue(oldValue) });
+  if (!isRunnerOutput(output)) {
+    throw migrationFailed("Migration bundle returned an invalid result");
+  }
+  validateValue(output.value);
+  return output.value;
+};
+
+export interface MigrationExecutorApi {
+  /**
+   * Transform `oldValue` by running the bundled migration `source`, yielding
+   * the migrated value. Fails with `MigrationFailedError` on any error.
+   */
+  readonly run: (source: string, oldValue: Value) => Effect.Effect<Value, MigrationFailedError>;
+}
+
+export class MigrationExecutor extends Context.Service<MigrationExecutor, MigrationExecutorApi>()(
+  "@voidhash/mimic-db/MigrationExecutor",
+) {}
+
+/** Wrap a raw evaluator into the executor contract with consistent error mapping. */
+export const makeMigrationExecutor = (
+  evaluate: (source: string, oldValue: Value) => Effect.Effect<Value, unknown>,
+): MigrationExecutorApi => ({
+  run: (source, oldValue) =>
+    evaluate(source, oldValue).pipe(
+      Effect.catch((error) =>
+        error instanceof MigrationFailedError
+          ? Effect.fail(error)
+          : Effect.fail(
+              migrationFailed(error instanceof Error ? error.message : String(error), error),
+            ),
+      ),
+    ),
+});
+
+/** In-process executor (dev, tests, and the local standalone backend). */
+export const LocalMigrationExecutorLive = Layer.succeed(
+  MigrationExecutor,
+  makeMigrationExecutor((source, oldValue) =>
+    Effect.try({
+      try: () => evaluateBundledMigration(source, oldValue),
+      catch: (error) => error,
+    }),
+  ),
+);
diff --git a/apps/mimic-db/src/core/pg-store.ts b/apps/mimic-db/src/core/pg-store.ts
new file mode 100644
index 000000000..729b8de12
--- /dev/null
+++ b/apps/mimic-db/src/core/pg-store.ts
@@ -0,0 +1,326 @@
+import * as PgClient from "@effect/sql-pg/PgClient";
+import { validateValue, type Command, type Value } from "@voidhash/mimic-core";
+import { Effect, Predicate, Redacted } from "effect";
+import { SqlClient, SqlError } from "effect/unstable/sql";
+
+import type { CommandRow, DocumentMeta, DocumentStoreApi, SnapshotRow } from "./store.ts";
+
+/** Resolved Postgres connection parameters for the document store. */
+export interface PgDocumentConfig {
+  readonly host: string;
+  readonly port: number;
+  readonly database: string;
+  readonly username: string;
+  readonly password: Redacted.Redacted<string>;
+}
+
+const clientLayer = (config: PgDocumentConfig) =>
+  PgClient.layer({
+    host: config.host,
+    port: config.port,
+    database: config.database,
+    username: config.username,
+    password: config.password,
+  });
+
+// `@effect/sql-pg` runs statements through node-postgres's prepared path.
+
+const decodeValue = (input: unknown): Value => {
+  const decoded = typeof input === "string" ? (JSON.parse(input) as Value) : (input as Value);
+  validateValue(decoded);
+  return decoded;
+};
+
+const decodeCommand = (input: unknown): Command =>
+  (typeof input === "string" ? JSON.parse(input) : input) as Command;
+
+interface MetaSqlRow {
+  readonly collectionId: string;
+  readonly schemaVersion: number;
+  readonly currentSeq: number | string;
+  readonly snapshotSeq: number | string;
+  readonly deletedAt: number | string | null;
+}
+interface SnapshotSqlRow {
+  readonly seq: number | string;
+  readonly schemaVersion: number;
+  readonly stateJson: unknown;
+}
+interface CommandSqlRow {
+  readonly seq: number | string;
+  readonly commandJson: unknown;
+  readonly txId: string;
+}
+
+/** Postgres SQLSTATE for `undefined_table`. */
+const UNDEFINED_TABLE = "42P01";
+/** Postgres SQLSTATE for `insufficient_privilege`. */
+const INSUFFICIENT_PRIVILEGE = "42501";
+
+const sqlErrorCauseProperty = (error: SqlError.SqlError, property: string): unknown =>
+  Predicate.hasProperty(error.reason.cause, property) ? error.reason.cause[property] : undefined;
+
+/** Whether a `SqlError` is Postgres's `undefined_table` — the queried table is missing. */
+export const isMissingTableError = (error: SqlError.SqlError): boolean =>
+  sqlErrorCauseProperty(error, "code") === UNDEFINED_TABLE;
+
+/**
+ * Whether a `SqlError` is Postgres denying DDL to the connected role (SQLSTATE
+ * 42501, `insufficient_privilege`). A PlanetScale Postgres role that inherits
+ * `postgres` may run DDL, so on a correctly-provisioned database the runtime
+ * CREATE path succeeds; this classifies the failure for a least-privilege role
+ * so a missing table dies with an actionable error instead of an opaque
+ * `SqlError`. The mimic document tables otherwise come from the deploy-time
+ * migration pipeline (the `mimic_document_tables` migration in
+ * `packages/db/src/alchemy-migrations`, which mirrors this DDL).
+ */
+export const isDdlDeniedError = (error: SqlError.SqlError): boolean =>
+  sqlErrorCauseProperty(error, "code") === INSUFFICIENT_PRIVILEGE;
+
+/**
+ * Ensure the mimic document tables exist when a persistent document adapter
+ * boots. No foreign keys to the control plane: databases and collections may
+ * live in a different entity store, while durable document state lives here.
+ *
+ * Each table is probed first and only created when missing, so the steady
+ * state runs no DDL. The runtime `CREATE TABLE` path bootstraps local/dev
+ * Postgres and PlanetScale Postgres roles that inherit `postgres`; where a
+ * least-privilege role denies DDL the tables come from the deploy-time
+ * migration pipeline (the `mimic_document_tables` migration in
+ * `packages/db/src/alchemy-migrations`, which mirrors this DDL) — a denied
+ * CREATE for a missing table dies with an actionable error instead of an
+ * opaque `SqlError`.
+ */
+export const ensureDocumentTables = (config: PgDocumentConfig): Effect.Effect<void> =>
+  Effect.gen(function* () {
+    const sql = yield* SqlClient.SqlClient;
+
+    const ensure = (
+      table: string,
+      probe: Effect.Effect<unknown, SqlError.SqlError>,
+      create: Effect.Effect<unknown, SqlError.SqlError>,
+    ): Effect.Effect<void, SqlError.SqlError> =>
+      probe.pipe(
+        Effect.asVoid,
+        Effect.catch((error) => {
+          if (!isMissingTableError(error)) return Effect.fail(error);
+          return create.pipe(
+            Effect.asVoid,
+            Effect.catch((createError) =>
+              isDdlDeniedError(createError)
+                ? Effect.die(
+                    new Error(
+                      `mimic document table "${table}" does not exist and the database denies runtime DDL ` +
+                        `(the connected Postgres role cannot CREATE TABLE). Apply the ` +
+                        `mimic_document_tables migration in packages/db/src/alchemy-migrations before serving traffic.`,
+                    ),
+                  )
+                : Effect.fail(createError),
+            ),
+          );
+        }),
+      );
+
+    yield* ensure(
+      "mimic_documents",
+      sql`SELECT 1 FROM mimic_documents LIMIT 1`,
+      sql`
+        CREATE TABLE IF NOT EXISTS mimic_documents (
+          id VARCHAR(36) NOT NULL PRIMARY KEY,
+          collection_id VARCHAR(36) NOT NULL,
+          schema_version INTEGER NOT NULL DEFAULT 1,
+          current_seq BIGINT NOT NULL DEFAULT 0,
+          snapshot_seq BIGINT NOT NULL DEFAULT 0,
+          deleted_at BIGINT
+        )
+      `,
+    );
+    yield* ensure(
+      "mimic_document_snapshots",
+      sql`SELECT 1 FROM mimic_document_snapshots LIMIT 1`,
+      sql`
+        CREATE TABLE IF NOT EXISTS mimic_document_snapshots (
+          document_id VARCHAR(36) NOT NULL,
+          seq BIGINT NOT NULL,
+          schema_version INTEGER NOT NULL DEFAULT 1,
+          state_json JSONB NOT NULL,
+          PRIMARY KEY (document_id, seq)
+        )
+      `,
+    );
+    yield* ensure(
+      "mimic_document_commands",
+      sql`SELECT 1 FROM mimic_document_commands LIMIT 1`,
+      sql`
+        CREATE TABLE IF NOT EXISTS mimic_document_commands (
+          document_id VARCHAR(36) NOT NULL,
+          seq BIGINT NOT NULL,
+          command_json JSONB NOT NULL,
+          tx_id VARCHAR(255) NOT NULL,
+          PRIMARY KEY (document_id, seq)
+        )
+      `,
+    );
+  }).pipe(
+    Effect.provide(clientLayer(config)),
+    Effect.scoped,
+    // Log the structured SQL failure before `orDie` turns it into a defect.
+    Effect.tapError((error) => Effect.logError("mimic-db: ensuring document tables failed", error)),
+    Effect.orDie,
+  );
+
+/**
+ * Postgres-backed `DocumentStore` for one document. The entity host owns
+ * per-document concurrency and realtime coordination; snapshots and the command
+ * log remain durable in Postgres.
+ *
+ * The returned methods have `R = never` so they slot into the same
+ * `DocumentEngine` as the in-memory backend.
+ */
+export const makePgDocumentStore = (
+  config: PgDocumentConfig,
+  documentId: string,
+): DocumentStoreApi => {
+  const layer = clientLayer(config);
+  const run = <A, E>(effect: Effect.Effect<A, E, SqlClient.SqlClient>): Effect.Effect<A> =>
+    effect.pipe(
+      Effect.provide(layer),
+      Effect.scoped,
+      // Log the structured SQL failure before `orDie` turns it into a defect.
+      Effect.tapError((error) =>
+        Effect.logError("mimic-db: Postgres document-store operation failed", error),
+      ),
+      Effect.orDie,
+    );
+
+  return {
+    readMeta: () =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          const rows = yield* sql<MetaSqlRow>`
+            SELECT collection_id AS "collectionId", schema_version AS "schemaVersion",
+                   current_seq AS "currentSeq", snapshot_seq AS "snapshotSeq", deleted_at AS "deletedAt"
+            FROM mimic_documents WHERE id = ${documentId}
+          `;
+          const row = rows[0];
+          if (!row) return undefined;
+          return {
+            collectionId: row.collectionId,
+            schemaVersion: row.schemaVersion,
+            currentSeq: Number(row.currentSeq),
+            snapshotSeq: Number(row.snapshotSeq),
+            deletedAt: row.deletedAt === null ? null : Number(row.deletedAt),
+          } satisfies DocumentMeta;
+        }),
+      ),
+
+    initialize: (collectionId, value, schemaVersion) =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          yield* sql`DELETE FROM mimic_document_commands WHERE document_id = ${documentId}`;
+          yield* sql`DELETE FROM mimic_document_snapshots WHERE document_id = ${documentId}`;
+          yield* sql`DELETE FROM mimic_documents WHERE id = ${documentId}`;
+          yield* sql`
+            INSERT INTO mimic_documents (id, collection_id, schema_version, current_seq, snapshot_seq, deleted_at)
+            VALUES (${documentId}, ${collectionId}, ${schemaVersion}, 0, 0, NULL)
+          `;
+          yield* sql`
+            INSERT INTO mimic_document_snapshots (document_id, seq, schema_version, state_json)
+            VALUES (${documentId}, 0, ${schemaVersion}, ${JSON.stringify(value)}::jsonb)
+          `;
+        }),
+      ),
+
+    loadLatestSnapshot: () =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          const rows = yield* sql<SnapshotSqlRow>`
+            SELECT seq, schema_version AS "schemaVersion", state_json AS "stateJson"
+            FROM mimic_document_snapshots WHERE document_id = ${documentId}
+            ORDER BY seq DESC LIMIT 1
+          `;
+          const row = rows[0];
+          return row
+            ? ({
+                seq: Number(row.seq),
+                value: decodeValue(row.stateJson),
+                schemaVersion: row.schemaVersion,
+              } satisfies SnapshotRow)
+            : undefined;
+        }),
+      ),
+
+    listCommandsAfter: (seq) =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          const rows = yield* sql<CommandSqlRow>`
+            SELECT seq, command_json AS "commandJson", tx_id AS "txId"
+            FROM mimic_document_commands WHERE document_id = ${documentId} AND seq > ${seq}
+            ORDER BY seq ASC
+          `;
+          return rows.map(
+            (row) =>
+              ({
+                seq: Number(row.seq),
+                command: decodeCommand(row.commandJson),
+                txId: row.txId,
+              }) satisfies CommandRow,
+          );
+        }),
+      ),
+
+    appendCommands: (fromSeq, commands: readonly Command[], txId) =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          yield* Effect.forEach(
+            commands,
+            (command, index) =>
+              sql`
+                INSERT INTO mimic_document_commands (document_id, seq, command_json, tx_id)
+                VALUES (${documentId}, ${fromSeq + 1 + index}, ${JSON.stringify(command)}::jsonb, ${txId})
+              `,
+            { discard: true },
+          );
+        }),
+      ),
+
+    writeSnapshot: (seq, value, schemaVersion) =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          // Upsert: migrate-on-load rewrites the snapshot at the current seq
+          // (e.g. seq 0) with the migrated value + new schema version.
+          yield* sql`
+            INSERT INTO mimic_document_snapshots (document_id, seq, schema_version, state_json)
+            VALUES (${documentId}, ${seq}, ${schemaVersion}, ${JSON.stringify(value)}::jsonb)
+            ON CONFLICT (document_id, seq)
+            DO UPDATE SET state_json = EXCLUDED.state_json, schema_version = EXCLUDED.schema_version
+          `;
+        }),
+      ),
+
+    setMeta: (patch) =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          if (patch.currentSeq !== undefined) {
+            yield* sql`UPDATE mimic_documents SET current_seq = ${patch.currentSeq} WHERE id = ${documentId}`;
+          }
+          if (patch.snapshotSeq !== undefined) {
+            yield* sql`UPDATE mimic_documents SET snapshot_seq = ${patch.snapshotSeq} WHERE id = ${documentId}`;
+          }
+          if (patch.schemaVersion !== undefined) {
+            yield* sql`UPDATE mimic_documents SET schema_version = ${patch.schemaVersion} WHERE id = ${documentId}`;
+          }
+          if (patch.deletedAt !== undefined) {
+            yield* sql`UPDATE mimic_documents SET deleted_at = ${patch.deletedAt} WHERE id = ${documentId}`;
+          }
+        }),
+      ),
+  };
+};
diff --git a/apps/mimic-db/src/core/schema-provider.ts b/apps/mimic-db/src/core/schema-provider.ts
new file mode 100644
index 000000000..beb593f41
--- /dev/null
+++ b/apps/mimic-db/src/core/schema-provider.ts
@@ -0,0 +1,38 @@
+import type { SchemaObject } from "@voidhash/mimic-core";
+import { Effect } from "effect";
+
+import type { ControlStoreApi, SchemaVersionRecord } from "./store.ts";
+
+/**
+ * Everything a document needs to migrate itself to the collection's latest
+ * schema on load: the latest schema + version plus the full ordered version
+ * history (each with its optional bundled data-migration source).
+ */
+export interface CollectionContext {
+  readonly collectionId: string;
+  readonly schemaJson: SchemaObject;
+  readonly schemaVersion: number;
+  readonly versions: readonly SchemaVersionRecord[];
+}
+
+export interface SchemaProviderApi {
+  readonly getCollectionContext: (
+    collectionId: string,
+  ) => Effect.Effect<CollectionContext | undefined>;
+}
+
+/** SchemaProvider reading directly from the configured `ControlStore`. */
+export const makeControlStoreSchemaProvider = (control: ControlStoreApi): SchemaProviderApi => ({
+  getCollectionContext: (collectionId) =>
+    Effect.gen(function* () {
+      const collection = yield* control.findCollectionById(collectionId);
+      if (!collection) return undefined;
+      const versions = yield* control.listSchemaVersions(collectionId);
+      return {
+        collectionId,
+        schemaJson: collection.schemaJson,
+        schemaVersion: collection.schemaVersion,
+        versions,
+      };
+    }),
+});
diff --git a/apps/mimic-db/src/core/store.ts b/apps/mimic-db/src/core/store.ts
new file mode 100644
index 000000000..5a1d921e3
--- /dev/null
+++ b/apps/mimic-db/src/core/store.ts
@@ -0,0 +1,210 @@
+import type { Command, SchemaObject, Value } from "@voidhash/mimic-core";
+import type { DatabasePermission, DocumentPermission } from "@voidhash/mimic-server/rpc";
+import { Context, type Effect } from "effect";
+
+// =============================================================================
+// Control-plane records — owned by the configured control entity store.
+// =============================================================================
+
+export interface DatabaseRecord {
+  readonly id: string;
+  readonly name: string;
+  readonly description: string;
+}
+
+export interface CollectionRecord {
+  readonly id: string;
+  readonly databaseId: string;
+  readonly name: string;
+  readonly schemaJson: SchemaObject;
+  readonly schemaVersion: number;
+}
+
+/** A published schema version, with the optional bundled data-migration source. */
+export interface SchemaVersionRecord {
+  readonly collectionId: string;
+  readonly version: number;
+  readonly schemaJson: SchemaObject;
+  readonly dataMigrationSource: string | null;
+}
+
+export interface UserRecord {
+  readonly id: string;
+  readonly username: string;
+  readonly passwordHash: string;
+  readonly isSuperuser: boolean;
+}
+
+export interface GrantRecord {
+  readonly id: string;
+  readonly userId: string;
+  readonly databaseId: string;
+  readonly permission: DatabasePermission;
+}
+
+export interface TokenRecord {
+  readonly id: string;
+  readonly tokenHash: string;
+  readonly collectionId: string;
+  readonly documentId: string;
+  readonly permission: DocumentPermission;
+  readonly origins: readonly string[];
+  readonly expiresAtMs: number;
+  readonly usedAt: number | null;
+}
+
+/** Lightweight index of which documents exist in which collection. */
+export interface DocumentIndexRecord {
+  readonly documentId: string;
+  readonly collectionId: string;
+  readonly deletedAt: number | null;
+}
+
+export type MigrationState = "running" | "succeeded" | "failed" | "replaced";
+
+export interface MigrationRecord {
+  readonly databaseId: string;
+  readonly version: number;
+  readonly name: string;
+  readonly checksum: string;
+  readonly appliedAtMs: number;
+  readonly state: MigrationState;
+  readonly totalDocuments: number;
+  readonly succeededDocuments: number;
+  readonly failedDocuments: number;
+  readonly changesJson: readonly unknown[] | null;
+}
+
+/**
+ * Control-plane persistence contract. Platform adapters provide SQL or
+ * in-memory implementations. Methods do not declare a typed error channel;
+ * storage failures surface as defects, mirroring the `SqlStorage` style used
+ * elsewhere in the repo.
+ */
+export interface ControlStoreApi {
+  // databases
+  readonly createDatabase: (record: DatabaseRecord) => Effect.Effect<void>;
+  readonly findDatabaseById: (id: string) => Effect.Effect<DatabaseRecord | undefined>;
+  readonly findDatabaseByName: (name: string) => Effect.Effect<DatabaseRecord | undefined>;
+  readonly listDatabases: () => Effect.Effect<readonly DatabaseRecord[]>;
+  readonly deleteDatabase: (id: string) => Effect.Effect<void>;
+  // collections
+  readonly createCollection: (record: CollectionRecord) => Effect.Effect<void>;
+  readonly findCollectionById: (id: string) => Effect.Effect<CollectionRecord | undefined>;
+  readonly findCollectionByName: (
+    databaseId: string,
+    name: string,
+  ) => Effect.Effect<CollectionRecord | undefined>;
+  readonly listCollectionsByDatabase: (
+    databaseId: string,
+  ) => Effect.Effect<readonly CollectionRecord[]>;
+  readonly updateCollectionSchema: (
+    collectionId: string,
+    schemaJson: SchemaObject,
+    version: number,
+  ) => Effect.Effect<void>;
+  readonly deleteCollection: (id: string) => Effect.Effect<void>;
+  // schema versions
+  readonly addSchemaVersion: (record: SchemaVersionRecord) => Effect.Effect<void>;
+  readonly findSchemaVersion: (
+    collectionId: string,
+    version: number,
+  ) => Effect.Effect<SchemaVersionRecord | undefined>;
+  readonly listSchemaVersions: (
+    collectionId: string,
+  ) => Effect.Effect<readonly SchemaVersionRecord[]>;
+  // users
+  readonly createUser: (record: UserRecord) => Effect.Effect<void>;
+  readonly findUserById: (id: string) => Effect.Effect<UserRecord | undefined>;
+  readonly findUserByUsername: (username: string) => Effect.Effect<UserRecord | undefined>;
+  readonly listUsers: () => Effect.Effect<readonly UserRecord[]>;
+  readonly deleteUser: (id: string) => Effect.Effect<void>;
+  readonly updateUserPasswordHash: (id: string, passwordHash: string) => Effect.Effect<void>;
+  // grants
+  readonly createGrant: (record: GrantRecord) => Effect.Effect<void>;
+  readonly findGrant: (
+    userId: string,
+    databaseId: string,
+  ) => Effect.Effect<GrantRecord | undefined>;
+  readonly removeGrant: (userId: string, databaseId: string) => Effect.Effect<void>;
+  readonly listGrants: () => Effect.Effect<readonly GrantRecord[]>;
+  readonly listGrantsByUser: (userId: string) => Effect.Effect<readonly GrantRecord[]>;
+  // document tokens
+  readonly createToken: (record: TokenRecord) => Effect.Effect<void>;
+  readonly findTokenByHash: (tokenHash: string) => Effect.Effect<TokenRecord | undefined>;
+  readonly markTokenUsed: (id: string, usedAt: number) => Effect.Effect<void>;
+  // document index
+  readonly registerDocument: (documentId: string, collectionId: string) => Effect.Effect<void>;
+  readonly findDocumentIndex: (
+    documentId: string,
+  ) => Effect.Effect<DocumentIndexRecord | undefined>;
+  readonly listDocumentsByCollection: (
+    collectionId: string,
+  ) => Effect.Effect<readonly DocumentIndexRecord[]>;
+  readonly markDocumentDeleted: (documentId: string, deletedAt: number) => Effect.Effect<void>;
+  // migrations
+  readonly upsertMigration: (record: MigrationRecord) => Effect.Effect<void>;
+  readonly findMigration: (
+    databaseId: string,
+    version: number,
+  ) => Effect.Effect<MigrationRecord | undefined>;
+  readonly listMigrations: (databaseId: string) => Effect.Effect<readonly MigrationRecord[]>;
+}
+
+export class ControlStore extends Context.Service<ControlStore, ControlStoreApi>()(
+  "@voidhash/mimic-db/ControlStore",
+) {}
+
+// =============================================================================
+// Document-plane records — owned by each document entity store.
+// =============================================================================
+
+export interface DocumentMeta {
+  readonly collectionId: string;
+  readonly schemaVersion: number;
+  readonly currentSeq: number;
+  readonly snapshotSeq: number;
+  readonly deletedAt: number | null;
+}
+
+export interface SnapshotRow {
+  readonly seq: number;
+  readonly value: Value;
+  readonly schemaVersion: number;
+}
+
+export interface CommandRow {
+  readonly seq: number;
+  readonly command: Command;
+  readonly txId: string;
+}
+
+/**
+ * Per-document persistence contract. Platform adapters provide persistent or
+ * in-memory implementations without changing the document engine.
+ */
+export interface DocumentStoreApi {
+  readonly readMeta: () => Effect.Effect<DocumentMeta | undefined>;
+  readonly initialize: (
+    collectionId: string,
+    value: Value,
+    schemaVersion: number,
+  ) => Effect.Effect<void>;
+  readonly loadLatestSnapshot: () => Effect.Effect<SnapshotRow | undefined>;
+  readonly listCommandsAfter: (seq: number) => Effect.Effect<readonly CommandRow[]>;
+  readonly appendCommands: (
+    fromSeq: number,
+    commands: readonly Command[],
+    txId: string,
+  ) => Effect.Effect<void>;
+  readonly writeSnapshot: (seq: number, value: Value, schemaVersion: number) => Effect.Effect<void>;
+  readonly setMeta: (
+    patch: Partial<
+      Pick<DocumentMeta, "currentSeq" | "snapshotSeq" | "schemaVersion" | "deletedAt">
+    >,
+  ) => Effect.Effect<void>;
+}
+
+export class DocumentStore extends Context.Service<DocumentStore, DocumentStoreApi>()(
+  "@voidhash/mimic-db/DocumentStore",
+) {}
diff --git a/apps/mimic-db/src/document/schema.ts b/apps/mimic-db/src/document/schema.ts
new file mode 100644
index 000000000..e5fafee68
--- /dev/null
+++ b/apps/mimic-db/src/document/schema.ts
@@ -0,0 +1,33 @@
+import {
+  parseSchema,
+  serializeSchema,
+  validate as validateSchemaValue,
+  validateValue,
+  type SchemaObject,
+  type Value,
+} from "@voidhash/mimic-core";
+import { InvalidSchemaError, InvalidValueError } from "@voidhash/mimic-server/rpc";
+
+export const normalizeSchemaObject = (input: unknown): SchemaObject => {
+  try {
+    return serializeSchema(parseSchema(input));
+  } catch (error) {
+    throw new InvalidSchemaError({
+      code: "invalid_schema",
+      message: error instanceof Error ? error.message : String(error),
+    });
+  }
+};
+
+export const sanitizeValueForSchema = (schemaObject: SchemaObject, input: unknown): Value => {
+  try {
+    validateValue(input as Value);
+    const schema = parseSchema(schemaObject);
+    return validateSchemaValue(schema, input as Value) as Value;
+  } catch (error) {
+    throw new InvalidValueError({
+      code: "invalid_value",
+      message: error instanceof Error ? error.message : String(error),
+    });
+  }
+};
diff --git a/apps/mimic-db/src/document/snapshot.ts b/apps/mimic-db/src/document/snapshot.ts
new file mode 100644
index 000000000..14efddd46
--- /dev/null
+++ b/apps/mimic-db/src/document/snapshot.ts
@@ -0,0 +1,16 @@
+import type { Value } from "@voidhash/mimic-core";
+import { Schema } from "effect";
+
+export interface DocumentSnapshotResponse {
+  readonly id: string;
+  readonly collectionId: string;
+  readonly value: Value;
+  readonly version: number;
+}
+
+export const DocumentSnapshotResponseSchema = Schema.Struct({
+  id: Schema.String,
+  collectionId: Schema.String,
+  value: Schema.Unknown,
+  version: Schema.Number,
+});
diff --git a/apps/mimic-db/src/document/transaction.ts b/apps/mimic-db/src/document/transaction.ts
new file mode 100644
index 000000000..4e34f1b91
--- /dev/null
+++ b/apps/mimic-db/src/document/transaction.ts
@@ -0,0 +1,52 @@
+import type { Command } from "@voidhash/mimic-core";
+import { Schema } from "effect";
+
+export interface TransactionActor {
+  readonly userId?: string;
+  readonly connectionId?: string;
+}
+
+export interface TransactionEnvelope {
+  readonly id: string;
+  readonly baseVersion: number;
+  readonly commands: readonly Command[];
+  readonly submittedAt?: string;
+  readonly actor?: TransactionActor;
+  /**
+   * Optional. When present, the entity records the resulting snapshot at
+   * this `schema_version`. Used by the migration runner so a per-document
+   * migration transaction advances the document onto the new schema.
+   */
+  readonly schemaVersion?: number;
+}
+
+export interface SubmitTransactionResponse {
+  readonly accepted: boolean;
+  readonly version: number;
+  readonly transactionId: string;
+  readonly reason?: string;
+}
+
+export const TransactionEnvelopeSchema = Schema.Struct({
+  id: Schema.String,
+  baseVersion: Schema.Number,
+  commands: Schema.Array(Schema.Unknown),
+  submittedAt: Schema.optional(Schema.String),
+  actor: Schema.optional(
+    Schema.Struct({
+      userId: Schema.optional(Schema.String),
+      connectionId: Schema.optional(Schema.String),
+    }),
+  ),
+  schemaVersion: Schema.optional(Schema.Number),
+});
+
+export const SubmitTransactionResponseSchema = Schema.Struct({
+  accepted: Schema.Boolean,
+  version: Schema.Number,
+  transactionId: Schema.String,
+  reason: Schema.optional(Schema.String),
+});
+
+export const decodeTransactionEnvelope = (input: unknown): TransactionEnvelope =>
+  Schema.decodeUnknownSync(TransactionEnvelopeSchema)(input) as TransactionEnvelope;
diff --git a/apps/mimic-db/src/entrypoints/standalone/main.ts b/apps/mimic-db/src/entrypoints/standalone/main.ts
new file mode 100644
index 000000000..17c1b9a2d
--- /dev/null
+++ b/apps/mimic-db/src/entrypoints/standalone/main.ts
@@ -0,0 +1,21 @@
+import { createServer } from "node:http";
+
+import { NodeHttpServer, NodeRuntime } from "@effect/platform-node";
+import { Layer } from "effect";
+
+import { LocalHostServiceDefault } from "../../core/local-host-service.ts";
+import { makeHttpApp } from "../../http/rpc-app.ts";
+
+/**
+ * Local standalone dev server: serves the RPC API over Node HTTP backed by the
+ * in-memory `HostService`. Production entry points provide persistent platform
+ * adapters over the same application.
+ */
+const port = Number(process.env.PORT ?? "5001");
+
+NodeRuntime.runMain(
+  makeHttpApp(LocalHostServiceDefault).pipe(
+    Layer.provide(NodeHttpServer.layer(() => createServer(), { port })),
+    Layer.launch,
+  ) as never,
+);
diff --git a/apps/mimic-db/src/http/rpc-app.ts b/apps/mimic-db/src/http/rpc-app.ts
new file mode 100644
index 000000000..3549e9906
--- /dev/null
+++ b/apps/mimic-db/src/http/rpc-app.ts
@@ -0,0 +1,42 @@
+import { MimicRpcGroup } from "@voidhash/mimic-server/rpc";
+import { Effect, Layer } from "effect";
+import { HttpRouter, HttpServerResponse } from "effect/unstable/http";
+import { RpcSerialization, RpcServer } from "effect/unstable/rpc";
+
+import { ApiHandlersLive } from "../api/handlers/index.ts";
+import { AuthMiddlewareLive } from "../api/middleware/auth.ts";
+import { HostServiceTag } from "../app/hostService.ts";
+import { getCorsAllowedOrigins } from "../config.ts";
+
+/** `GET /health` → `200 OK`. */
+export const HealthRoute = Layer.effectDiscard(
+  Effect.gen(function* () {
+    const router = yield* HttpRouter.HttpRouter;
+    yield* router.add("GET", "/health", HttpServerResponse.text("OK"));
+  }),
+);
+
+/**
+ * The `MimicRpcGroup` served at `/rpc/v1` over NDJSON with HTTP Basic auth —
+ * the exact wire contract clients (and the backend SDK) expect. Still requires
+ * a `HostService` to be provided.
+ */
+export const MimicRpcServerLive = RpcServer.layerHttp({
+  group: MimicRpcGroup,
+  path: "/rpc/v1",
+  protocol: "http",
+}).pipe(
+  Layer.provide(ApiHandlersLive),
+  Layer.provide(AuthMiddlewareLive),
+  Layer.provide(RpcSerialization.layerNdjson),
+);
+
+/** Compose the public HTTP routes (health + RPC) over a `HostService` layer. */
+export const makeRoutesLive = (hostLayer: Layer.Layer<HostServiceTag>) =>
+  Layer.mergeAll(HealthRoute, MimicRpcServerLive.pipe(Layer.provide(hostLayer))).pipe(
+    Layer.provide(HttpRouter.cors({ allowedOrigins: getCorsAllowedOrigins(), credentials: true })),
+  );
+
+/** A served HTTP app for the given `HostService` layer (needs an HttpServer). */
+export const makeHttpApp = (hostLayer: Layer.Layer<HostServiceTag>) =>
+  HttpRouter.serve(makeRoutesLive(hostLayer));
diff --git a/apps/mimic-db/src/index.ts b/apps/mimic-db/src/index.ts
new file mode 100644
index 000000000..ee6ab2922
--- /dev/null
+++ b/apps/mimic-db/src/index.ts
@@ -0,0 +1,35 @@
+export * from "./app/hostService.ts";
+export * from "./config.ts";
+export * from "./document/schema.ts";
+export * from "./document/snapshot.ts";
+export * from "./document/transaction.ts";
+export * from "./ws/protocol.ts";
+
+export * from "./core/store.ts";
+export * from "./core/memory-store.ts";
+export * from "./core/migration-executor.ts";
+export * from "./core/schema-provider.ts";
+export * from "./core/control-engine.ts";
+export * from "./core/document-engine.ts";
+export * from "./core/document-store-factory.ts";
+export * from "./core/local-host-service.ts";
+export * from "./core/local-entity-host.ts";
+
+export {
+  ApiErrorSchemas,
+  AuthMiddleware,
+  ConflictError,
+  CurrentUser,
+  type CurrentUserShape,
+  ForbiddenError,
+  InternalError,
+  InvalidSchemaError,
+  InvalidValueError,
+  MigrationFailedError,
+  MimicRpcGroup,
+  NotFoundError,
+  toUnknownError,
+  UnauthorizedError,
+  ValidationError,
+  VersionConflictError,
+} from "@voidhash/mimic-server/rpc";
diff --git a/apps/mimic-db/src/worker/durable-host-service.ts b/apps/mimic-db/src/worker/durable-host-service.ts
new file mode 100644
index 000000000..7d6261f66
--- /dev/null
+++ b/apps/mimic-db/src/worker/durable-host-service.ts
@@ -0,0 +1,188 @@
+import type { Value } from "@voidhash/mimic-core";
+import { NotFoundError } from "@voidhash/mimic-server/rpc";
+import { Effect } from "effect";
+
+import { type HostService } from "../app/hostService.ts";
+import type { DocumentSnapshotResponse } from "../document/snapshot.ts";
+import type { SubmitTransactionResponse, TransactionEnvelope } from "../document/transaction.ts";
+import { makeControlEngine } from "../core/control-engine.ts";
+import type { ControlStoreApi } from "../core/store.ts";
+
+/**
+ * The subset of a document-entity stub the HTTP entry point calls. Remote
+ * adapters resolve without Effect requirements, so the requirement channel is
+ * `never` (an `any` here leaks into every caller's `R`).
+ */
+export interface DocumentStub {
+  readonly create: (
+    collectionId: string,
+    value: Value,
+    schemaVersion: number,
+  ) => Effect.Effect<void, any>;
+  readonly getSnapshot: () => Effect.Effect<
+    { found: true; value: Value; version: number } | { found: false; error?: string },
+    any
+  >;
+  readonly submitRpc: (
+    envelope: TransactionEnvelope,
+  ) => Effect.Effect<SubmitTransactionResponse | { notFound: true }, any>;
+  readonly remove: () => Effect.Effect<void, any>;
+}
+
+export interface DurableHostServiceDeps {
+  /** The single control-entity stub, viewed as the control store. */
+  readonly controlStore: ControlStoreApi;
+  /** Resolve a document-entity stub for a document. */
+  readonly docStub: (collectionId: string, documentId: string) => DocumentStub;
+}
+
+const notFound = (message: string): NotFoundError =>
+  new NotFoundError({ code: "not_found", message });
+
+const isSubmitResponse = (
+  value: SubmitTransactionResponse | { notFound: true },
+): value is SubmitTransactionResponse => !("notFound" in value);
+
+/**
+ * `HostService` over remote durable entity stubs. Control-plane logic runs in the
+ * entry point over a control-entity stub; document operations are delegated to
+ * per-document entity stubs, which serialize them and migrate on load. The
+ * WebSocket realtime path lives in the document entity, so the presence and
+ * connection methods here are no-ops on the RPC surface.
+ */
+export const makeDurableHostService = (deps: DurableHostServiceDeps): HostService => {
+  const { docStub } = deps;
+  const control = makeControlEngine(deps.controlStore);
+
+  return {
+    authenticateBasic: control.authenticateBasic,
+    authenticateDocumentToken: control.authenticateDocumentToken,
+    createDatabase: control.createDatabase,
+    listDatabases: control.listDatabases,
+    deleteDatabase: control.deleteDatabase,
+    createCollection: control.createCollection,
+    listCollections: control.listCollections,
+    updateCollectionSchema: (collectionId, schemaInput) =>
+      control.updateCollectionSchema(collectionId, schemaInput),
+    deleteCollection: control.deleteCollection,
+    listMigrations: control.listMigrations,
+    applyMigration: (databaseId, version, name, checksum, changes, options) =>
+      control.applyMigration(databaseId, version, name, checksum, changes, "apply", options),
+    rerunMigration: (databaseId, version, name, checksum, changes, options) =>
+      control.applyMigration(databaseId, version, name, checksum, changes, "rerun", options),
+    replaceMigration: (databaseId, version, name, checksum, changes, options) =>
+      control.applyMigration(databaseId, version, name, checksum, changes, "replace", options),
+    getMigrationStatus: control.getMigrationStatus,
+    createUser: control.createUser,
+    listUsers: control.listUsers,
+    deleteUser: control.deleteUser,
+    grantPermission: control.grantPermission,
+    revokePermission: control.revokePermission,
+    listGrants: control.listGrants,
+    createDocumentAuthToken: control.createDocumentToken,
+    ensureDatabasePermission: control.ensureDatabasePermission,
+    databaseIdForCollection: control.databaseIdForCollection,
+
+    createDocument: (collectionId, id, value) =>
+      Effect.gen(function* () {
+        // Probe the per-document object so prepareDocument can heal a half-dead
+        // index row (live + same-collection, but the document object holds no
+        // state) instead of conflicting forever — see prepareDocument. A
+        // migration failure (`found:false` WITH an error) still means state
+        // exists, so it is treated as materialized (never re-seeded).
+        const prepared = yield* control.prepareDocument(
+          collectionId,
+          id,
+          value,
+          (documentId): Effect.Effect<boolean> =>
+            docStub(collectionId, documentId)
+              .getSnapshot()
+              .pipe(
+                Effect.map((snapshot) => snapshot.found || snapshot.error !== undefined),
+                // A probe failure (stub unreachable) is inconclusive; treat the
+                // document as materialized so a live paywall is never re-seeded.
+                Effect.catchCause(() => Effect.succeed(true)),
+              ),
+        );
+        yield* docStub(collectionId, prepared.documentId).create(
+          collectionId,
+          prepared.value,
+          prepared.schemaVersion,
+        );
+        return { id: prepared.documentId, collectionId, value: prepared.value, version: 1 };
+      }),
+
+    getDocument: (collectionId, documentId) =>
+      Effect.gen(function* () {
+        yield* control.findDocument(collectionId, documentId);
+        const snapshot = yield* docStub(collectionId, documentId).getSnapshot();
+        if (!snapshot.found) {
+          return yield* Effect.fail(
+            notFound(snapshot.error ?? `Document not found: ${documentId}`),
+          );
+        }
+        return {
+          id: documentId,
+          collectionId,
+          value: snapshot.value,
+          version: snapshot.version,
+        } satisfies DocumentSnapshotResponse;
+      }),
+
+    listDocuments: (collectionId) =>
+      Effect.gen(function* () {
+        const ids = yield* control.listDocumentIds(collectionId);
+        const snapshots = yield* Effect.forEach(ids, (documentId) =>
+          docStub(collectionId, documentId)
+            .getSnapshot()
+            .pipe(
+              Effect.map((snapshot) =>
+                snapshot.found
+                  ? ({
+                      id: documentId,
+                      collectionId,
+                      value: snapshot.value,
+                      version: snapshot.version,
+                    } satisfies DocumentSnapshotResponse)
+                  : undefined,
+              ),
+            ),
+        );
+        return snapshots.filter((entry): entry is DocumentSnapshotResponse => entry !== undefined);
+      }),
+
+    deleteDocument: (collectionId, documentId) =>
+      Effect.gen(function* () {
+        yield* control.findDocument(collectionId, documentId);
+        yield* control.markDocumentDeleted(documentId);
+        yield* docStub(collectionId, documentId).remove();
+      }),
+
+    submitTransaction: (collectionId, documentId, transaction) =>
+      Effect.gen(function* () {
+        yield* control.findDocument(collectionId, documentId);
+        const result = yield* docStub(collectionId, documentId).submitRpc(transaction);
+        if (!isSubmitResponse(result)) {
+          return yield* Effect.fail(notFound(`Document not found: ${documentId}`));
+        }
+        return result;
+      }),
+
+    attachConnection: (collectionId, documentId) =>
+      Effect.gen(function* () {
+        yield* control.findDocument(collectionId, documentId);
+        const snapshot = yield* docStub(collectionId, documentId).getSnapshot();
+        if (!snapshot.found) {
+          return yield* Effect.fail(notFound(`Document not found: ${documentId}`));
+        }
+        return { value: snapshot.value, version: snapshot.version, presences: {} };
+      }),
+
+    // Realtime presence and heartbeat live on the document entity's WebSocket path.
+    heartbeatConnection: () => Effect.void,
+    detachConnection: () => Effect.void,
+    getPresenceSnapshot: () => Effect.succeed({ presences: {} }),
+    setPresence: () => Effect.void,
+    removePresence: () => Effect.void,
+  };
+};
diff --git a/apps/mimic-db/src/ws/document-session.ts b/apps/mimic-db/src/ws/document-session.ts
new file mode 100644
index 000000000..7436807b9
--- /dev/null
+++ b/apps/mimic-db/src/ws/document-session.ts
@@ -0,0 +1,251 @@
+import type { Value } from "@voidhash/mimic-core";
+import { Effect } from "effect";
+
+import type { PresenceEntry } from "../app/hostService.ts";
+import {
+  decodeTransactionEnvelope,
+  type SubmitTransactionResponse,
+  type TransactionEnvelope,
+} from "../document/transaction.ts";
+import {
+  authResultFailure,
+  authResultSuccess,
+  errorMessage,
+  pong,
+  presenceRemoveMessage,
+  presenceSnapshotMessage,
+  presenceUpdateMessage,
+  snapshotMessage,
+  transactionMessage,
+} from "./messages.ts";
+import { parseClientMessage, type ServerMessage } from "./protocol.ts";
+import type { SessionRegistry } from "./session-registry.ts";
+
+/** How long an upgraded socket may stay unauthenticated before being closed. */
+export const AUTH_DEADLINE_MS = 10_000;
+
+/** Per-socket state persisted via the hibernatable WebSocket attachment. */
+export interface SessionAttachment {
+  readonly connectionId: string;
+  readonly collectionId: string;
+  readonly documentId: string;
+  readonly origin: string | null;
+  /** Epoch ms of the upgrade; drives the remaining auth deadline after hibernation. */
+  readonly connectedAt?: number;
+  authenticated: boolean;
+  permission?: "read" | "write";
+  tokenId?: string;
+}
+
+export interface DocumentSessionAuth {
+  readonly tokenId: string;
+  readonly permission: "read" | "write";
+}
+
+export interface LoadedDocumentSnapshot {
+  readonly value: Value;
+  readonly version: number;
+}
+
+/**
+ * Everything the WebSocket message/close handlers need from their host, so the
+ * session protocol can be exercised independently of a platform runtime.
+ */
+export interface DocumentSessionContext<TSocket> {
+  readonly registry: SessionRegistry<TSocket>;
+  readonly presence: Map<string, PresenceEntry>;
+  readonly getAttachment: (socket: TSocket) => SessionAttachment | null;
+  readonly setAttachment: (socket: TSocket, attachment: SessionAttachment) => void;
+  readonly send: (socket: TSocket, message: ServerMessage) => Effect.Effect<void>;
+  readonly close: (socket: TSocket, code: number, reason: string) => Effect.Effect<void>;
+  readonly authenticate: (
+    token: string,
+    attachment: SessionAttachment,
+  ) => Effect.Effect<DocumentSessionAuth, unknown>;
+  readonly loadDocument: () => Effect.Effect<LoadedDocumentSnapshot, { readonly message: string }>;
+  readonly submitTransaction: (
+    envelope: TransactionEnvelope,
+  ) => Effect.Effect<SubmitTransactionResponse>;
+  /**
+   * Records that the document advanced to `seq` after an accepted transaction,
+   * so the host can later notify that the document went idle while dirty.
+   * Optional so the protocol can be exercised without an idle-notify host.
+   */
+  readonly onAccepted?: (seq: number) => Effect.Effect<void>;
+  /**
+   * Signals that a socket closed and no authenticated sockets remain, so the
+   * host can arm its idle-notification debounce. Optional for the same reason.
+   */
+  readonly onLastAuthenticatedClose?: () => Effect.Effect<void>;
+}
+
+/**
+ * Isolates one of the optional storage-backed session hooks
+ * ({@link DocumentSessionContext.onAccepted} /
+ * {@link DocumentSessionContext.onLastAuthenticatedClose}) so a die inside it is
+ * logged and swallowed instead of escaping the message/close handler.
+ *
+ * The hooks are typed `Effect<…, never>` because the entity storage they
+ * touch has a `never` error channel — but a transient storage failure still
+ * DIES. Left unisolated, a die in `onLastAuthenticatedClose` escapes
+ * {@link handleDocumentSocketClose} and skips the host's final `socket.close`
+ * (surfacing as an uncaught host error); a die in `onAccepted` breaks the
+ * accepted-submit broadcast. Dropping a notification just leaves the work for
+ * the next disconnect, so log-and-swallow is safe.
+ */
+export const isolateSessionHook = <A>(
+  effect: Effect.Effect<A, never>,
+  label: string,
+): Effect.Effect<A | void> =>
+  effect.pipe(
+    Effect.catchCause((cause) => Effect.logError(`mimic session hook ${label} failed`, cause)),
+  );
+
+/** Fans a message out to authenticated sessions only. */
+export const broadcastToAuthenticated = <TSocket>(
+  ctx: DocumentSessionContext<TSocket>,
+  message: ServerMessage,
+): Effect.Effect<void> =>
+  Effect.forEach(ctx.registry.authenticated(), (socket) => ctx.send(socket, message), {
+    discard: true,
+  });
+
+/**
+ * Handles one client WebSocket frame of the document protocol. Pre-auth
+ * sockets can only authenticate or ping; broadcasts never reach them.
+ */
+export const handleDocumentSocketMessage = <TSocket>(
+  ctx: DocumentSessionContext<TSocket>,
+  socket: TSocket,
+  raw: string | Uint8Array,
+): Effect.Effect<void> =>
+  Effect.gen(function* () {
+    const attachment = ctx.getAttachment(socket);
+    if (!attachment) return;
+    const message = yield* parseClientMessage(raw);
+
+    switch (message.type) {
+      case "auth": {
+        const result = yield* Effect.result(ctx.authenticate(message.token, attachment));
+        if (result._tag === "Failure") {
+          yield* ctx.send(socket, authResultFailure("Invalid document token"));
+          return;
+        }
+        const loaded = yield* Effect.result(ctx.loadDocument());
+        if (loaded._tag === "Failure") {
+          // Never answer auth with success but no snapshot — the client would
+          // hang not-ready forever. Closing lets its reconnect loop retry
+          // transient load failures.
+          yield* ctx.send(
+            socket,
+            errorMessage(`Failed to load document: ${loaded.failure.message}`),
+          );
+          yield* ctx.close(socket, 1011, "Document load failed");
+          return;
+        }
+        const next: SessionAttachment = {
+          ...attachment,
+          authenticated: true,
+          permission: result.success.permission,
+          tokenId: result.success.tokenId,
+        };
+        ctx.setAttachment(socket, next);
+        ctx.registry.promote(next.connectionId, socket);
+        yield* ctx.send(
+          socket,
+          authResultSuccess(result.success.tokenId, result.success.permission),
+        );
+        yield* ctx.send(socket, snapshotMessage(loaded.success.value, loaded.success.version));
+        yield* ctx.send(
+          socket,
+          presenceSnapshotMessage(next.connectionId, Object.fromEntries(ctx.presence)),
+        );
+        return;
+      }
+      case "ping":
+        yield* ctx.send(socket, pong());
+        return;
+      case "request_snapshot": {
+        if (!attachment.authenticated) return;
+        const loaded = yield* Effect.result(ctx.loadDocument());
+        if (loaded._tag === "Success") {
+          yield* ctx.send(socket, snapshotMessage(loaded.success.value, loaded.success.version));
+        }
+        return;
+      }
+      case "presence_set": {
+        if (!attachment.authenticated || attachment.permission !== "write") return;
+        ctx.presence.set(attachment.connectionId, {
+          data: message.data,
+          userId: attachment.tokenId,
+        });
+        yield* broadcastToAuthenticated(
+          ctx,
+          presenceUpdateMessage(attachment.connectionId, message.data, attachment.tokenId),
+        );
+        return;
+      }
+      case "presence_clear": {
+        if (!attachment.authenticated) return;
+        ctx.presence.delete(attachment.connectionId);
+        yield* broadcastToAuthenticated(ctx, presenceRemoveMessage(attachment.connectionId));
+        return;
+      }
+      case "submit": {
+        if (!attachment.authenticated) {
+          yield* ctx.send(socket, errorMessage("Not authenticated", message.transaction.id));
+          return;
+        }
+        if (attachment.permission !== "write") {
+          yield* ctx.send(
+            socket,
+            errorMessage("Write permission required", message.transaction.id),
+          );
+          return;
+        }
+        const envelope = decodeTransactionEnvelope(message.transaction);
+        const result = yield* ctx.submitTransaction(envelope);
+        if (result.accepted) {
+          // `version` is `newSeq + 1`; the document's current sequence after the
+          // accepted transaction is one less.
+          if (ctx.onAccepted) yield* ctx.onAccepted(result.version - 1);
+          yield* broadcastToAuthenticated(ctx, transactionMessage(envelope, result.version));
+        } else {
+          yield* ctx.send(
+            socket,
+            errorMessage(result.reason ?? "Transaction rejected", envelope.id),
+          );
+        }
+        return;
+      }
+    }
+  }).pipe(
+    Effect.catch((error) =>
+      ctx.send(socket, errorMessage(error instanceof Error ? error.message : String(error))),
+    ),
+  );
+
+/**
+ * Cleans up after a closed/errored socket: forgets the session and, when it
+ * had presence, broadcasts the removal so peers do not keep ghost cursors
+ * until their own reconnect.
+ */
+export const handleDocumentSocketClose = <TSocket>(
+  ctx: DocumentSessionContext<TSocket>,
+  socket: TSocket,
+): Effect.Effect<void> =>
+  Effect.gen(function* () {
+    const attachment = ctx.getAttachment(socket);
+    if (!attachment) return;
+    ctx.registry.remove(attachment.connectionId);
+    const hadPresence = ctx.presence.delete(attachment.connectionId);
+    if (hadPresence) {
+      yield* broadcastToAuthenticated(ctx, presenceRemoveMessage(attachment.connectionId));
+    }
+    // The closing socket was removed above; if no authenticated sockets remain,
+    // the collaborative session has gone idle. Only authenticated sockets count
+    // — pending pre-auth sockets never edited the document.
+    if (ctx.onLastAuthenticatedClose && ctx.registry.authenticated().length === 0) {
+      yield* ctx.onLastAuthenticatedClose();
+    }
+  });
diff --git a/apps/mimic-db/src/ws/idle-notify.ts b/apps/mimic-db/src/ws/idle-notify.ts
new file mode 100644
index 000000000..a86f530d2
--- /dev/null
+++ b/apps/mimic-db/src/ws/idle-notify.ts
@@ -0,0 +1,125 @@
+import { Effect, Schema } from "effect";
+
+/**
+ * Wire message emitted when an edited document becomes idle. The sequence is
+ * the dirty document revision used by consumers for monotonic deduplication.
+ */
+export const MimicDocumentIdleMessage = Schema.Struct({
+  collectionId: Schema.String,
+  documentId: Schema.String,
+  seq: Schema.Number,
+});
+
+export type MimicDocumentIdleMessageType = typeof MimicDocumentIdleMessage.Type;
+
+/**
+ * Persisted sequence numbers backing the idle-notification debounce. Both live
+ * under the entity's key-value storage, namespaced away from document state.
+ */
+export const IDLE_DIRTY_SEQ_KEY = "idleNotify:dirtySeq";
+export const IDLE_NOTIFIED_SEQ_KEY = "idleNotify:notifiedSeq";
+
+/**
+ * The entity storage subset the idle-notify logic needs.
+ */
+export interface IdleNotifyStorage {
+  readonly get: (key: string) => Effect.Effect<number | undefined>;
+  readonly put: (key: string, value: number) => Effect.Effect<void>;
+  readonly setAlarm: (scheduledTime: number) => Effect.Effect<void>;
+}
+
+/**
+ * Everything {@link makeIdleNotifier} needs from its entity host. The document
+ * identity is fixed for the entity's lifetime; `authenticatedCount` reads
+ * the live session registry; `publish` sends one idle message to the queue.
+ */
+export interface IdleNotifyDeps {
+  readonly collectionId: string;
+  readonly documentId: string;
+  readonly storage: IdleNotifyStorage;
+  readonly debounceMs: number;
+  readonly now: () => number;
+  /** Count of currently-connected authenticated sockets. */
+  readonly authenticatedCount: () => number;
+  /**
+   * Publish the idle message. Failures are expected to be surfaced as the error
+   * channel; the alarm handler logs them and leaves `notifiedSeq` unpersisted so
+   * the next disconnect retries.
+   */
+  readonly publish: (message: MimicDocumentIdleMessageType) => Effect.Effect<void, unknown>;
+}
+
+export interface IdleNotifier {
+  /** Records that the document advanced to `seq` after an accepted transaction. */
+  readonly recordDirty: (seq: number) => Effect.Effect<void>;
+  /**
+   * Called after the last authenticated socket disconnected: arms the debounce
+   * alarm when there is unnotified work. A no-op when the document is not dirty
+   * beyond what was already notified.
+   */
+  readonly onLastAuthenticatedClose: () => Effect.Effect<void>;
+  /**
+   * Runs when the debounce alarm fires. Re-checks emptiness + dirty>notified,
+   * publishes, and persists `notifiedSeq`. Resilient: a publish failure logs and
+   * leaves `notifiedSeq` unpersisted (the next disconnect retries).
+   */
+  readonly onAlarm: () => Effect.Effect<void>;
+}
+
+/**
+ * Idle-notification trigger for a single document entity.
+ *
+ * When the last authenticated collaborator disconnects and the document has
+ * been edited since the last notification, a debounce alarm is scheduled. When
+ * the alarm fires and no authenticated socket has reconnected, the current
+ * dirty sequence is published to the idle queue and recorded as notified. The
+ * publish is best-effort: a failure leaves `notifiedSeq` unpersisted so the
+ * next disconnect re-triggers.
+ */
+export const makeIdleNotifier = (deps: IdleNotifyDeps): IdleNotifier => {
+  const recordDirty = (seq: number): Effect.Effect<void> =>
+    deps.storage.put(IDLE_DIRTY_SEQ_KEY, seq);
+
+  const readSeqs = Effect.gen(function* () {
+    const dirty = (yield* deps.storage.get(IDLE_DIRTY_SEQ_KEY)) ?? 0;
+    const notified = (yield* deps.storage.get(IDLE_NOTIFIED_SEQ_KEY)) ?? 0;
+    return { dirty, notified };
+  });
+
+  const onLastAuthenticatedClose = (): Effect.Effect<void> =>
+    Effect.gen(function* () {
+      if (deps.authenticatedCount() > 0) return;
+      const { dirty, notified } = yield* readSeqs;
+      if (dirty <= notified) return;
+      // Overwrites any existing alarm — the latest disconnect wins, coalescing
+      // rapid connect/disconnect churn into a single debounced notification.
+      yield* deps.storage.setAlarm(deps.now() + deps.debounceMs);
+    });
+
+  const onAlarm = (): Effect.Effect<void> =>
+    Effect.gen(function* () {
+      // A collaborator reconnected during the debounce window; their eventual
+      // disconnect re-arms the alarm, so do nothing now.
+      if (deps.authenticatedCount() > 0) return;
+      const { dirty, notified } = yield* readSeqs;
+      if (dirty <= notified) return;
+
+      const published = yield* Effect.result(
+        deps.publish({
+          collectionId: deps.collectionId,
+          documentId: deps.documentId,
+          seq: dirty,
+        }),
+      );
+      if (published._tag === "Failure") {
+        yield* Effect.logError(
+          `mimic idle-notify publish failed for ${deps.collectionId}:${deps.documentId}`,
+          published.failure,
+        );
+        return;
+      }
+      yield* deps.storage.put(IDLE_NOTIFIED_SEQ_KEY, dirty);
+    });
+
+  return { recordDirty, onLastAuthenticatedClose, onAlarm };
+};
diff --git a/apps/mimic-db/src/ws/messages.ts b/apps/mimic-db/src/ws/messages.ts
new file mode 100644
index 000000000..8076749b6
--- /dev/null
+++ b/apps/mimic-db/src/ws/messages.ts
@@ -0,0 +1,78 @@
+import type { PresenceEntry } from "../app/hostService.ts";
+import type { TransactionEnvelope } from "../document/transaction.ts";
+import type { Value } from "@voidhash/mimic-core";
+import type {
+  AuthResultFailureMessage,
+  AuthResultSuccessMessage,
+  ErrorMessage,
+  PongMessage,
+  PresenceRemoveMessage,
+  PresenceSnapshotMessage,
+  PresenceUpdateMessage,
+  SnapshotMessage,
+  TransactionMessage,
+} from "./protocol.ts";
+
+export const authResultSuccess = (
+  tokenId: string,
+  permission: "read" | "write",
+): AuthResultSuccessMessage => ({
+  type: "auth_result",
+  success: true,
+  tokenId,
+  permission,
+});
+
+export const authResultFailure = (error: string): AuthResultFailureMessage => ({
+  type: "auth_result",
+  success: false,
+  error,
+});
+
+export const pong = (): PongMessage => ({ type: "pong" });
+
+export const transactionMessage = (
+  transaction: TransactionEnvelope,
+  version: number,
+): TransactionMessage => ({
+  type: "transaction",
+  transaction,
+  version,
+});
+
+export const snapshotMessage = (value: Value, version: number): SnapshotMessage => ({
+  type: "snapshot",
+  value,
+  version,
+});
+
+export const errorMessage = (reason: string, transactionId?: string): ErrorMessage => ({
+  type: "error",
+  transactionId,
+  reason,
+});
+
+export const presenceUpdateMessage = (
+  id: string,
+  data: Value,
+  userId?: string,
+): PresenceUpdateMessage => ({
+  type: "presence_update",
+  id,
+  data,
+  userId,
+});
+
+export const presenceRemoveMessage = (id: string): PresenceRemoveMessage => ({
+  type: "presence_remove",
+  id,
+});
+
+export const presenceSnapshotMessage = (
+  selfId: string,
+  presences: Record<string, PresenceEntry>,
+): PresenceSnapshotMessage => ({
+  type: "presence_snapshot",
+  selfId,
+  presences,
+});
diff --git a/apps/mimic-db/src/ws/protocol.ts b/apps/mimic-db/src/ws/protocol.ts
new file mode 100644
index 000000000..ee4497ba9
--- /dev/null
+++ b/apps/mimic-db/src/ws/protocol.ts
@@ -0,0 +1,117 @@
+import { Effect } from "effect";
+
+import type { Value } from "@voidhash/mimic-core";
+import type { PresenceEntry } from "../app/hostService.ts";
+import type { TransactionEnvelope } from "../document/transaction.ts";
+
+export interface AuthMessage {
+  readonly type: "auth";
+  readonly token: string;
+}
+
+export interface PingMessage {
+  readonly type: "ping";
+}
+
+export interface SubmitMessage {
+  readonly type: "submit";
+  readonly transaction: TransactionEnvelope;
+}
+
+export interface RequestSnapshotMessage {
+  readonly type: "request_snapshot";
+}
+
+export interface PresenceSetMessage {
+  readonly type: "presence_set";
+  readonly data: Value;
+}
+
+export interface PresenceClearMessage {
+  readonly type: "presence_clear";
+}
+
+export type ClientMessage =
+  | AuthMessage
+  | PingMessage
+  | SubmitMessage
+  | RequestSnapshotMessage
+  | PresenceSetMessage
+  | PresenceClearMessage;
+
+export interface AuthResultSuccessMessage {
+  readonly type: "auth_result";
+  readonly success: true;
+  readonly tokenId: string;
+  readonly permission: "read" | "write";
+}
+
+export interface AuthResultFailureMessage {
+  readonly type: "auth_result";
+  readonly success: false;
+  readonly error: string;
+}
+
+export interface PongMessage {
+  readonly type: "pong";
+}
+
+export interface TransactionMessage {
+  readonly type: "transaction";
+  readonly transaction: TransactionEnvelope;
+  readonly version: number;
+}
+
+export interface SnapshotMessage {
+  readonly type: "snapshot";
+  readonly value: Value;
+  readonly version: number;
+}
+
+export interface ErrorMessage {
+  readonly type: "error";
+  readonly transactionId?: string;
+  readonly reason: string;
+}
+
+export interface PresenceUpdateMessage {
+  readonly type: "presence_update";
+  readonly id: string;
+  readonly data: Value;
+  readonly userId?: string;
+}
+
+export interface PresenceRemoveMessage {
+  readonly type: "presence_remove";
+  readonly id: string;
+}
+
+export interface PresenceSnapshotMessage {
+  readonly type: "presence_snapshot";
+  readonly selfId: string;
+  readonly presences: Record<string, PresenceEntry>;
+}
+
+export type ServerMessage =
+  | AuthResultSuccessMessage
+  | AuthResultFailureMessage
+  | PongMessage
+  | TransactionMessage
+  | SnapshotMessage
+  | ErrorMessage
+  | PresenceUpdateMessage
+  | PresenceRemoveMessage
+  | PresenceSnapshotMessage;
+
+export const parseClientMessage = (
+  data: string | Uint8Array,
+): Effect.Effect<ClientMessage, Error> =>
+  Effect.try({
+    try: () => {
+      const text = typeof data === "string" ? data : new TextDecoder().decode(data);
+      return JSON.parse(text) as ClientMessage;
+    },
+    catch: (cause) => (cause instanceof Error ? cause : new Error(String(cause))),
+  });
+
+export const encodeServerMessage = (message: ServerMessage): string => JSON.stringify(message);
diff --git a/apps/mimic-db/src/ws/session-registry.ts b/apps/mimic-db/src/ws/session-registry.ts
new file mode 100644
index 000000000..2581e598b
--- /dev/null
+++ b/apps/mimic-db/src/ws/session-registry.ts
@@ -0,0 +1,103 @@
+/** Timer seam so tests can drive the auth deadline deterministically. */
+export interface SessionRegistryTimers {
+  readonly now: () => number;
+  /** Schedules `fn` after `ms` and returns a cancel thunk. */
+  readonly schedule: (fn: () => void, ms: number) => () => void;
+}
+
+export interface SessionRegistryOptions<TSocket> {
+  /** How long an upgraded socket may stay unauthenticated before being closed. */
+  readonly authDeadlineMs: number;
+  /** Belt-and-braces re-check applied when iterating authenticated sockets. */
+  readonly isAuthenticated: (socket: TSocket) => boolean;
+  /** Closes a socket that missed the auth deadline. */
+  readonly close: (socket: TSocket) => void;
+  readonly timers?: SessionRegistryTimers;
+}
+
+/**
+ * Tracks the live WebSocket sessions of a document entity, split into
+ * authenticated sessions (the only ones broadcasts may reach) and pending
+ * pre-auth sockets, which are closed if they do not authenticate within the
+ * deadline.
+ */
+export interface SessionRegistry<TSocket> {
+  /** Tracks a freshly upgraded, not-yet-authenticated socket and arms its auth deadline. */
+  trackPending(connectionId: string, socket: TSocket): void;
+  /**
+   * Re-registers a socket after host rehydration: authenticated sockets rejoin the
+   * broadcast set; pending sockets get the remainder of their auth deadline
+   * (and are closed immediately when it has already passed).
+   */
+  restore(
+    connectionId: string,
+    socket: TSocket,
+    authenticated: boolean,
+    connectedAt: number | undefined,
+  ): void;
+  /** Moves a socket into the authenticated set and cancels its deadline. */
+  promote(connectionId: string, socket: TSocket): void;
+  /** Forgets a socket (close/error) and cancels any pending deadline. */
+  remove(connectionId: string): void;
+  /** The sockets broadcasts may reach. */
+  authenticated(): readonly TSocket[];
+}
+
+const defaultTimers: SessionRegistryTimers = {
+  now: () => Date.now(),
+  schedule: (fn, ms) => {
+    const handle = setTimeout(fn, ms);
+    return () => clearTimeout(handle);
+  },
+};
+
+export const makeSessionRegistry = <TSocket>(
+  options: SessionRegistryOptions<TSocket>,
+): SessionRegistry<TSocket> => {
+  const timers = options.timers ?? defaultTimers;
+  const sessions = new Map<string, TSocket>();
+  const pendingDeadlines = new Map<string, () => void>();
+
+  const armDeadline = (connectionId: string, socket: TSocket, deadlineMs: number): void => {
+    pendingDeadlines.get(connectionId)?.();
+    pendingDeadlines.set(
+      connectionId,
+      timers.schedule(() => {
+        pendingDeadlines.delete(connectionId);
+        options.close(socket);
+      }, deadlineMs),
+    );
+  };
+
+  const trackPending = (connectionId: string, socket: TSocket): void => {
+    armDeadline(connectionId, socket, options.authDeadlineMs);
+  };
+
+  return {
+    trackPending,
+    restore: (connectionId, socket, authenticated, connectedAt) => {
+      if (authenticated) {
+        sessions.set(connectionId, socket);
+        return;
+      }
+      const elapsed = connectedAt === undefined ? 0 : timers.now() - connectedAt;
+      const remaining = options.authDeadlineMs - elapsed;
+      if (remaining <= 0) {
+        options.close(socket);
+        return;
+      }
+      armDeadline(connectionId, socket, remaining);
+    },
+    promote: (connectionId, socket) => {
+      pendingDeadlines.get(connectionId)?.();
+      pendingDeadlines.delete(connectionId);
+      sessions.set(connectionId, socket);
+    },
+    remove: (connectionId) => {
+      pendingDeadlines.get(connectionId)?.();
+      pendingDeadlines.delete(connectionId);
+      sessions.delete(connectionId);
+    },
+    authenticated: () => [...sessions.values()].filter(options.isAuthenticated),
+  };
+};
diff --git a/apps/mimic-db/tests/durable-entity-host.test.ts b/apps/mimic-db/tests/durable-entity-host.test.ts
new file mode 100644
index 000000000..14d6ffb82
--- /dev/null
+++ b/apps/mimic-db/tests/durable-entity-host.test.ts
@@ -0,0 +1,93 @@
+import { makeDurableEntityAddress, type DurableEntitySession } from "@voidhash/platform/DurableEntity";
+import { Effect } from "effect";
+import { describe, expect, test } from "vitest";
+
+import { makeMemoryDurableEntityHost } from "../src/core/local-entity-host.ts";
+
+describe("memory DurableEntity host", () => {
+  test("serializes operations for the same address in submission order", async () => {
+    const host = makeMemoryDurableEntityHost();
+    const address = makeDurableEntityAddress("document", "one");
+    const events: Array<string> = [];
+    let active = 0;
+    let overlap = false;
+
+    const operation = (name: string) =>
+      host.run(address, () =>
+        Effect.gen(function* () {
+          active += 1;
+          overlap ||= active > 1;
+          events.push(`${name}:start`);
+          yield* Effect.sleep("20 millis");
+          events.push(`${name}:end`);
+          active -= 1;
+        }),
+      );
+
+    await Effect.runPromise(
+      Effect.all([operation("first"), operation("second")], { concurrency: "unbounded" }),
+    );
+
+    expect(overlap).toBe(false);
+    expect(events).toEqual(["first:start", "first:end", "second:start", "second:end"]);
+  });
+
+  test("allows different entity addresses to run concurrently", async () => {
+    const host = makeMemoryDurableEntityHost();
+    let active = 0;
+    let maxActive = 0;
+
+    const operation = (id: string) =>
+      host.run(makeDurableEntityAddress("document", id), () =>
+        Effect.gen(function* () {
+          active += 1;
+          maxActive = Math.max(maxActive, active);
+          yield* Effect.sleep("20 millis");
+          active -= 1;
+        }),
+      );
+
+    await Effect.runPromise(
+      Effect.all([operation("one"), operation("two")], { concurrency: "unbounded" }),
+    );
+
+    expect(maxActive).toBe(2);
+  });
+
+  test("retains entity-local key-value, alarm, and session state", async () => {
+    const host = makeMemoryDurableEntityHost();
+    const address = makeDurableEntityAddress("document", "one");
+    let attachment: unknown;
+    const session: DurableEntitySession = {
+      id: "session-1",
+      send: () => Effect.void,
+      close: () => Effect.void,
+      getAttachment: Effect.sync(() => attachment),
+      setAttachment: (value) => Effect.sync(() => void (attachment = value)),
+    };
+
+    await Effect.runPromise(
+      host.run(address, (entity) =>
+        Effect.gen(function* () {
+          yield* entity.keyValue.put("seq", 7);
+          yield* entity.alarm.set(1234);
+          yield* entity.sessions.attach(session);
+        }),
+      ),
+    );
+
+    const state = await Effect.runPromise(
+      host.run(address, (entity) =>
+        Effect.all({
+          seq: entity.keyValue.get("seq"),
+          alarm: entity.alarm.get,
+          sessions: entity.sessions.list,
+        }),
+      ),
+    );
+
+    expect(state.seq).toBe(7);
+    expect(state.alarm).toBe(1234);
+    expect(state.sessions.map(({ id }) => id)).toEqual(["session-1"]);
+  });
+});
diff --git a/apps/mimic-db/tests/helpers.ts b/apps/mimic-db/tests/helpers.ts
new file mode 100644
index 000000000..5d3073a8f
--- /dev/null
+++ b/apps/mimic-db/tests/helpers.ts
@@ -0,0 +1,71 @@
+import { Effect } from "effect";
+
+import type { HostService } from "../src/app/hostService.ts";
+import { getConfig } from "../src/config.ts";
+import { makeControlEngine, type ControlEngineApi } from "../src/core/control-engine.ts";
+import {
+  DocumentStoreFactory,
+  MemoryDocumentStoreFactoryLive,
+} from "../src/core/document-store-factory.ts";
+import { LocalHostServiceDefault, makeLocalHostService } from "../src/core/local-host-service.ts";
+import { makeMemoryDurableEntityHost } from "../src/core/local-entity-host.ts";
+import { makeMemoryControlStore } from "../src/core/memory-store.ts";
+import { makeMigrationExecutor } from "../src/core/migration-executor.ts";
+
+/**
+ * Run a program that depends on `HostServiceTag` against a fresh in-memory
+ * backend. Compose the whole flow into a single program so control + document
+ * state persists across the steps.
+ */
+export const runHost = <A, E>(program: Effect.Effect<A, E, any>): Promise<A> =>
+  Effect.runPromise(program.pipe(Effect.provide(LocalHostServiceDefault)) as Effect.Effect<A, E>);
+
+/**
+ * Run `program` against a fresh in-memory host, giving it BOTH the host service
+ * and the underlying control engine. The direct control-engine handle lets a
+ * test reach past the host RPC surface to reproduce corrupt states — e.g.
+ * registering a document index row with no backing document engine — that no
+ * legitimate host call produces.
+ */
+export const runHostWithControl = <A, E>(
+  program: (deps: {
+    readonly host: HostService;
+    readonly control: ControlEngineApi;
+  }) => Effect.Effect<A, E, any>,
+): Promise<A> =>
+  Effect.runPromise(
+    Effect.gen(function* () {
+      const control = makeControlEngine(makeMemoryControlStore());
+      const config = getConfig();
+      const executor = makeMigrationExecutor((_, oldValue) => Effect.succeed(oldValue));
+      const documentStores = yield* DocumentStoreFactory;
+      yield* control.ensureRootUser(config.rootUsername, config.rootPassword);
+      const host = makeLocalHostService({
+        control,
+        entities: makeMemoryDurableEntityHost(),
+        executor,
+        documentStores,
+        config,
+      });
+      return yield* program({ control, host });
+    }).pipe(Effect.provide(MemoryDocumentStoreFactoryLive)) as Effect.Effect<A, E>,
+  );
+
+/** A minimal mimic-core object schema with a single string field. */
+export const titleSchema = {
+  kind: "object" as const,
+  fields: { title: { kind: "string" as const, default: { kind: "string" as const, value: "" } } },
+};
+
+/** v2 of {@link titleSchema}: adds a defaulted `count` number field. */
+export const titleCountSchema = {
+  kind: "object" as const,
+  fields: {
+    title: { kind: "string" as const, default: { kind: "string" as const, value: "" } },
+    count: { kind: "number" as const, default: { kind: "number" as const, value: 0 } },
+  },
+};
+
+export const objectValue = (fields: Record<string, unknown>) => ({ kind: "object", fields });
+export const stringValue = (value: string) => ({ kind: "string", value });
+export const numberValue = (value: number) => ({ kind: "number", value });
diff --git a/apps/mimic-db/tests/integration/host-flow.test.ts b/apps/mimic-db/tests/integration/host-flow.test.ts
new file mode 100644
index 000000000..a47001e37
--- /dev/null
+++ b/apps/mimic-db/tests/integration/host-flow.test.ts
@@ -0,0 +1,283 @@
+import { Effect, Result } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { HostServiceTag } from "../../src/app/hostService.ts";
+import type { TransactionEnvelope } from "../../src/document/transaction.ts";
+import {
+  numberValue,
+  objectValue,
+  runHost,
+  runHostWithControl,
+  stringValue,
+  titleCountSchema,
+  titleSchema,
+} from "../helpers.ts";
+
+// A self-contained migration bundle that adds a `count: 7` field.
+const ADD_COUNT_BUNDLE = `
+globalThis.__MIMIC_RUN_MIGRATION__ = function (input) {
+  return {
+    value: {
+      kind: "object",
+      fields: Object.assign({}, input.oldValue.fields, { count: { kind: "number", value: 7 } }),
+    },
+  };
+};
+`;
+
+describe("mimic-db host flow (durable-entity engine, in-memory)", () => {
+  it("bootstraps the root user and authenticates", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const user = yield* host.authenticateBasic("root", "password");
+        expect(user.isSuperuser).toBe(true);
+        expect(user.username).toBe("root");
+      }),
+    ));
+
+  it("creates database → collection → document and reads it back", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        expect(collection.schemaVersion).toBe(1);
+
+        const created = yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+        expect(created.id).toBe("doc-1");
+        expect(created.version).toBe(1);
+        expect((created.value as any).fields.title.value).toBe("Hello");
+
+        const fetched = yield* host.getDocument(collection.id, "doc-1");
+        expect((fetched.value as any).fields.title.value).toBe("Hello");
+        expect(fetched.version).toBe(1);
+      }),
+    ));
+
+  it("re-registers a document id orphaned by an out-of-band collection deletion", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const original = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        yield* host.createDocument(
+          original.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        // Delete + recreate the collection WITHOUT deleting the document —
+        // `deleteCollection` leaves the document_index row behind, pointing
+        // at the dead collection. Before the prepareDocument fix this id was
+        // permanently unusable: create conflicted (global id check) while
+        // get reported NotFound (collection match), so a paywall could never
+        // materialize again after a collection re-provision.
+        yield* host.deleteCollection(original.id);
+        const recreated = yield* host.createCollection(db.id, "paywalls", titleSchema);
+
+        const created = yield* host.createDocument(
+          recreated.id,
+          "doc-1",
+          objectValue({ title: stringValue("Fresh") }),
+        );
+        expect(created.id).toBe("doc-1");
+
+        const fetched = yield* host.getDocument(recreated.id, "doc-1");
+        expect((fetched.value as any).fields.title.value).toBe("Fresh");
+      }),
+    ));
+
+  it("re-seeds a half-dead index row (live + same-collection, but no document state)", () =>
+    runHostWithControl(({ host, control }) =>
+      Effect.gen(function* () {
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+
+        // Reproduce the live-dev orphan: an index row that is live AND points
+        // at the CURRENT collection, yet whose per-document object holds no
+        // state (registered directly, never created). This is what strands a
+        // paywall on the edit-token path — get reports NotFound while create
+        // conflicts on the global id — so the designer can never open it. The
+        // heal only fires because host.createDocument now probes the document
+        // object's materialization before deferring to the index.
+        yield* control.store.registerDocument("doc-1", collection.id);
+
+        const getBefore = yield* Effect.result(host.getDocument(collection.id, "doc-1"));
+        expect(Result.isFailure(getBefore)).toBe(true);
+
+        const created = yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Fresh") }),
+        );
+        expect(created.id).toBe("doc-1");
+
+        const fetched = yield* host.getDocument(collection.id, "doc-1");
+        expect((fetched.value as any).fields.title.value).toBe("Fresh");
+      }),
+    ));
+
+  it("still conflicts on a same-id create while the owning collection exists", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const paywalls = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        const other = yield* host.createCollection(db.id, "other", titleSchema);
+        yield* host.createDocument(
+          paywalls.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        const sameCollection = yield* Effect.result(
+          host.createDocument(paywalls.id, "doc-1", objectValue({ title: stringValue("Nope") })),
+        );
+        expect(Result.isFailure(sameCollection)).toBe(true);
+
+        const otherCollection = yield* Effect.result(
+          host.createDocument(other.id, "doc-1", objectValue({ title: stringValue("Nope") })),
+        );
+        expect(Result.isFailure(otherCollection)).toBe(true);
+      }),
+    ));
+
+  it("applies a transaction and bumps the version", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        const tx: TransactionEnvelope = {
+          id: "tx-1",
+          baseVersion: 1,
+          commands: [
+            { kind: "object.set", path: [], key: "title", value: stringValue("Updated") } as any,
+          ],
+        };
+        const result = yield* host.submitTransaction(collection.id, "doc-1", tx);
+        expect(result.accepted).toBe(true);
+        expect(result.version).toBe(2);
+
+        const fetched = yield* host.getDocument(collection.id, "doc-1");
+        expect((fetched.value as any).fields.title.value).toBe("Updated");
+        expect(fetched.version).toBe(2);
+      }),
+    ));
+
+  it("rejects a transaction with a stale base version", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        const tx: TransactionEnvelope = {
+          id: "tx-stale",
+          baseVersion: 99,
+          commands: [
+            { kind: "object.set", path: [], key: "title", value: stringValue("Nope") } as any,
+          ],
+        };
+        const result = yield* host.submitTransaction(collection.id, "doc-1", tx);
+        expect(result.accepted).toBe(false);
+        expect(result.reason).toContain("Version conflict");
+      }),
+    ));
+
+  it("migrates a document on load via schema reconcile (no data migration source)", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        // Publish v2 (adds a defaulted `count`). No eager push — the document
+        // migrates itself on the next load.
+        const updated = yield* host.updateCollectionSchema(collection.id, titleCountSchema);
+        expect(updated.schemaVersion).toBe(2);
+
+        const fetched = yield* host.getDocument(collection.id, "doc-1");
+        expect((fetched.value as any).fields.title.value).toBe("Hello");
+        expect((fetched.value as any).fields.count).toEqual(numberValue(0));
+      }),
+    ));
+
+  it("migrates a document on load via a bundled data migration (Sandbox-shaped executor)", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        // applyMigration publishes the new schema version with a bundled data
+        // migration source; documents run it lazily on load.
+        const report = yield* host.applyMigration(db.id, 2, "add-count", "checksum-v2", [
+          {
+            type: "update",
+            collection: "paywalls",
+            schema: titleCountSchema as any,
+            dataMigrationSource: ADD_COUNT_BUNDLE,
+          },
+        ]);
+        expect(report.state).toBe("succeeded");
+
+        const fetched = yield* host.getDocument(collection.id, "doc-1");
+        expect((fetched.value as any).fields.count).toEqual(numberValue(7));
+
+        const migrations = yield* host.listMigrations(db.id);
+        expect(migrations).toHaveLength(1);
+        expect(migrations[0]!.version).toBe(2);
+      }),
+    ));
+
+  it("mints and validates a single-use document token", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        const { token } = yield* host.createDocumentAuthToken(collection.id, "doc-1", "write", []);
+        const auth = yield* host.authenticateDocumentToken(token, collection.id, "doc-1", null);
+        expect(auth.permission).toBe("write");
+
+        // Single-use: the second validation must fail.
+        const second = yield* Effect.result(
+          host.authenticateDocumentToken(token, collection.id, "doc-1", null),
+        );
+        expect(Result.isFailure(second)).toBe(true);
+      }),
+    ));
+});
diff --git a/apps/mimic-db/tests/migrate-with-mimic-cli.test.ts b/apps/mimic-db/tests/migrate-with-mimic-cli.test.ts
new file mode 100644
index 000000000..f9ab1d5cd
--- /dev/null
+++ b/apps/mimic-db/tests/migrate-with-mimic-cli.test.ts
@@ -0,0 +1,156 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { Effect } from "effect";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+
+import { HostServiceTag } from "../src/app/hostService.js";
+import { LocalHostServiceDefault } from "../src/core/local-host-service.js";
+import { MigrationBundler } from "../../mimic-cli/src/services/MigrationBundler.js";
+import { MigrationLoader } from "../../mimic-cli/src/services/MigrationLoader.js";
+
+const originalCwd = process.cwd();
+const cliIndexPath = path.resolve(
+  import.meta.dirname,
+  "../../mimic-cli/src/index.ts",
+);
+
+afterEach(() => {
+  process.chdir(originalCwd);
+});
+
+describe("mimic-cli integration with mimic-db", () => {
+  it("compiles execute migrations that mimic-db can apply atomically", async () => {
+    const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-integration-"));
+    process.chdir(cwd);
+
+    try {
+      fs.writeFileSync(
+        path.join(cwd, "mimic.config.ts"),
+        `import { defineConfig } from ${JSON.stringify(cliIndexPath)};
+
+export default defineConfig({
+  url: "http://localhost:3000",
+  username: "root",
+  password: "secret",
+  database: "todos",
+});
+`,
+      );
+      fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
+      fs.writeFileSync(
+        path.join(cwd, "migrations/00001_create.ts"),
+        `import mimicConfig from "../mimic.config";
+import { m } from ${JSON.stringify(cliIndexPath)};
+
+const Todo = m.Struct({
+  title: m.String().required(),
+});
+
+export default mimicConfig.defineMigrations((migration) => [
+  migration.create({
+    collection: "todos",
+    schema: Todo,
+  }),
+]);
+`,
+      );
+      fs.writeFileSync(
+        path.join(cwd, "migrations/00002_add-slug.ts"),
+        `import mimicConfig from "../mimic.config";
+import { m } from ${JSON.stringify(cliIndexPath)};
+
+const OldTodo = m.Struct({
+  title: m.String().required(),
+});
+
+const Todo = m.Struct({
+  title: m.String().required(),
+  slug: m.String().required(),
+});
+
+export default mimicConfig.defineMigrations((migration) => [
+  migration.update({
+    collection: "todos",
+    oldSchema: OldTodo,
+    schema: Todo,
+    execute: (ctx) => {
+      const title = ctx.oldRoot.title.get();
+      if (title) {
+        ctx.root.update({
+          title,
+          slug: title.toLowerCase().replace(/\\s+/g, "-"),
+        });
+      }
+    },
+  }),
+]);
+`,
+      );
+
+      const program = Effect.gen(function* () {
+        const loader = yield* MigrationLoader;
+        const host = yield* HostServiceTag;
+        const migrations = yield* loader.load();
+        const database = yield* host.createDatabase("todos", "");
+
+        yield* host.applyMigration(
+          database.id,
+          migrations[0]!.version,
+          migrations[0]!.name,
+          migrations[0]!.checksum,
+          migrations[0]!.changes,
+        );
+
+        const collectionsAfterCreate = yield* host.listCollections(database.id);
+        const collection = collectionsAfterCreate[0]!;
+        const document = yield* host.createDocument(collection.id, "doc-1", {
+          kind: "object",
+          fields: {
+            title: {
+              kind: "string",
+              value: "Write Tests",
+            },
+          },
+        });
+
+        yield* host.applyMigration(
+          database.id,
+          migrations[1]!.version,
+          migrations[1]!.name,
+          migrations[1]!.checksum,
+          migrations[1]!.changes,
+        );
+
+        const collectionsAfterUpdate = yield* host.listCollections(database.id);
+        expect(collectionsAfterUpdate[0]?.schemaVersion).toBe(2);
+
+        const updated = yield* host.getDocument(collection.id, document.id);
+        expect(updated.value).toEqual({
+          kind: "object",
+          fields: {
+            title: {
+              kind: "string",
+              value: "Write Tests",
+            },
+            slug: {
+              kind: "string",
+              value: "write-tests",
+            },
+          },
+        });
+
+        const applied = yield* host.listMigrations(database.id);
+        expect(applied.map((entry) => entry.version)).toEqual([1, 2]);
+      }).pipe(
+        Effect.provide(MigrationLoader.Default),
+        Effect.provide(MigrationBundler.Default),
+        Effect.provide(LocalHostServiceDefault),
+      );
+
+      await Effect.runPromise(program as any);
+    } finally {
+      fs.rmSync(cwd, { recursive: true, force: true });
+    }
+  });
+});
diff --git a/apps/mimic-db/tests/unit/document-auth.test.ts b/apps/mimic-db/tests/unit/document-auth.test.ts
new file mode 100644
index 000000000..3974d04c6
--- /dev/null
+++ b/apps/mimic-db/tests/unit/document-auth.test.ts
@@ -0,0 +1,108 @@
+import { afterEach, describe, expect, it } from "vitest";
+
+import { buildDocumentConnectionUrl } from "../../src/api/handlers/document-auth.ts";
+import { getConfig } from "../../src/config.ts";
+
+const PATH = "/ws/v1/databases/db-1/collections/col-1/documents/doc-1";
+
+const relativeRequest = (headers: Record<string, string | undefined> = {}) => ({
+  url: PATH,
+  headers,
+});
+
+describe("buildDocumentConnectionUrl", () => {
+  it("uses an https public base URL and yields wss", () => {
+    const url = buildDocumentConnectionUrl(
+      "https://mimic-db.example.workers.dev",
+      relativeRequest({ "x-forwarded-proto": "http", host: "ignored.local" }),
+      "db-1",
+      "col-1",
+      "doc-1",
+    );
+    expect(url).toBe(`wss://mimic-db.example.workers.dev${PATH}`);
+  });
+
+  it("uses an http public base URL and yields ws", () => {
+    const url = buildDocumentConnectionUrl(
+      "http://localhost:1338",
+      relativeRequest(),
+      "db-1",
+      "col-1",
+      "doc-1",
+    );
+    expect(url).toBe(`ws://localhost:1338${PATH}`);
+  });
+
+  it("falls back to x-forwarded headers when the base URL is unset", () => {
+    const url = buildDocumentConnectionUrl(
+      undefined,
+      relativeRequest({
+        "x-forwarded-proto": "https",
+        "x-forwarded-host": "mimic.voidhash.com",
+      }),
+      "db-1",
+      "col-1",
+      "doc-1",
+    );
+    expect(url).toBe(`wss://mimic.voidhash.com${PATH}`);
+  });
+
+  it("falls back to the host header and ws when nothing else is present", () => {
+    const url = buildDocumentConnectionUrl(
+      undefined,
+      relativeRequest({ host: "localhost:1338" }),
+      "db-1",
+      "col-1",
+      "doc-1",
+    );
+    expect(url).toBe(`ws://localhost:1338${PATH}`);
+  });
+
+  it("derives scheme and host from an absolute request URL when the base URL is unset", () => {
+    const url = buildDocumentConnectionUrl(
+      undefined,
+      { url: `https://mimic.voidhash.com${PATH}`, headers: {} },
+      "db-1",
+      "col-1",
+      "doc-1",
+    );
+    expect(url).toBe(`wss://mimic.voidhash.com${PATH}`);
+  });
+
+  it("encodes path segments", () => {
+    const url = buildDocumentConnectionUrl(
+      "https://mimic-db.example.workers.dev",
+      relativeRequest(),
+      "db/1",
+      "col 1",
+      "doc#1",
+    );
+    expect(url).toBe(
+      "wss://mimic-db.example.workers.dev/ws/v1/databases/db%2F1/collections/col%201/documents/doc%231",
+    );
+  });
+});
+
+describe("publicBaseUrl config", () => {
+  const original = process.env.MIMIC_PUBLIC_BASE_URL;
+
+  afterEach(() => {
+    if (original === undefined) {
+      delete process.env.MIMIC_PUBLIC_BASE_URL;
+    } else {
+      process.env.MIMIC_PUBLIC_BASE_URL = original;
+    }
+  });
+
+  it("reads MIMIC_PUBLIC_BASE_URL when set", () => {
+    process.env.MIMIC_PUBLIC_BASE_URL = "https://mimic-db.example.workers.dev";
+    expect(getConfig().publicBaseUrl).toBe("https://mimic-db.example.workers.dev");
+  });
+
+  it("treats unset and blank values as undefined", () => {
+    delete process.env.MIMIC_PUBLIC_BASE_URL;
+    expect(getConfig().publicBaseUrl).toBeUndefined();
+    process.env.MIMIC_PUBLIC_BASE_URL = "  ";
+    expect(getConfig().publicBaseUrl).toBeUndefined();
+  });
+});
diff --git a/apps/mimic-db/tests/unit/document-session.test.ts b/apps/mimic-db/tests/unit/document-session.test.ts
new file mode 100644
index 000000000..d218078fe
--- /dev/null
+++ b/apps/mimic-db/tests/unit/document-session.test.ts
@@ -0,0 +1,321 @@
+import { objectValue, stringValue } from "@voidhash/mimic-core";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import type { PresenceEntry } from "../../src/app/hostService.ts";
+import {
+  AUTH_DEADLINE_MS,
+  handleDocumentSocketClose,
+  handleDocumentSocketMessage,
+  isolateSessionHook,
+  type DocumentSessionContext,
+  type SessionAttachment,
+} from "../../src/ws/document-session.ts";
+import type { ServerMessage } from "../../src/ws/protocol.ts";
+import { makeSessionRegistry, type SessionRegistryTimers } from "../../src/ws/session-registry.ts";
+
+interface FakeSocket {
+  attachment: SessionAttachment | null;
+  readonly sent: ServerMessage[];
+  closed: { code: number; reason: string } | null;
+}
+
+const docValue = objectValue({ title: stringValue("Hello") });
+
+const makeManualTimers = () => {
+  let currentNow = 0;
+  const scheduled: Array<{ at: number; fn: () => void; cancelled: boolean }> = [];
+  const timers: SessionRegistryTimers = {
+    now: () => currentNow,
+    schedule: (fn, ms) => {
+      const entry = { at: currentNow + ms, fn, cancelled: false };
+      scheduled.push(entry);
+      return () => {
+        entry.cancelled = true;
+      };
+    },
+  };
+  const advance = (ms: number) => {
+    currentNow += ms;
+    for (const entry of scheduled) {
+      if (!entry.cancelled && entry.at <= currentNow) {
+        entry.cancelled = true;
+        entry.fn();
+      }
+    }
+  };
+  return { timers, advance };
+};
+
+const makeHarness = (options?: {
+  readonly loadDocument?: DocumentSessionContext<FakeSocket>["loadDocument"];
+}) => {
+  const { timers, advance } = makeManualTimers();
+  const acceptedSeqs: number[] = [];
+  let lastAuthenticatedCloses = 0;
+  const registry = makeSessionRegistry<FakeSocket>({
+    authDeadlineMs: AUTH_DEADLINE_MS,
+    isAuthenticated: (socket) => socket.attachment?.authenticated === true,
+    close: (socket) => {
+      socket.closed = { code: 1008, reason: "Authentication deadline exceeded" };
+    },
+    timers,
+  });
+  const presence = new Map<string, PresenceEntry>();
+  const ctx: DocumentSessionContext<FakeSocket> = {
+    registry,
+    presence,
+    getAttachment: (socket) => socket.attachment,
+    setAttachment: (socket, attachment) => {
+      socket.attachment = attachment;
+    },
+    send: (socket, message) =>
+      Effect.sync(() => {
+        socket.sent.push(message);
+      }),
+    close: (socket, code, reason) =>
+      Effect.sync(() => {
+        socket.closed = { code, reason };
+      }),
+    authenticate: (token) =>
+      token === "good-token"
+        ? Effect.succeed({ tokenId: "tok-1", permission: "write" as const })
+        : Effect.fail(new Error("invalid token")),
+    loadDocument: options?.loadDocument ?? (() => Effect.succeed({ value: docValue, version: 1 })),
+    submitTransaction: (envelope) =>
+      Effect.succeed({ accepted: true, version: 2, transactionId: envelope.id }),
+    onAccepted: (seq) =>
+      Effect.sync(() => {
+        acceptedSeqs.push(seq);
+      }),
+    onLastAuthenticatedClose: () =>
+      Effect.sync(() => {
+        lastAuthenticatedCloses += 1;
+      }),
+  };
+
+  /** Simulates the DO `fetch` upgrade path for a fresh socket. */
+  const connectSocket = (connectionId: string): FakeSocket => {
+    const socket: FakeSocket = {
+      attachment: {
+        connectionId,
+        collectionId: "col-1",
+        documentId: "doc-1",
+        origin: null,
+        connectedAt: timers.now(),
+        authenticated: false,
+      },
+      sent: [],
+      closed: null,
+    };
+    registry.trackPending(connectionId, socket);
+    return socket;
+  };
+
+  const message = (socket: FakeSocket, frame: unknown): Promise<void> =>
+    Effect.runPromise(handleDocumentSocketMessage(ctx, socket, JSON.stringify(frame)));
+
+  const authenticateSocket = async (connectionId: string): Promise<FakeSocket> => {
+    const socket = connectSocket(connectionId);
+    await message(socket, { type: "auth", token: "good-token" });
+    socket.sent.length = 0;
+    return socket;
+  };
+
+  return {
+    ctx,
+    registry,
+    presence,
+    advance,
+    connectSocket,
+    message,
+    authenticateSocket,
+    acceptedSeqs,
+    lastAuthenticatedCloses: () => lastAuthenticatedCloses,
+  };
+};
+
+describe("document session protocol", () => {
+  it("answers a successful auth with auth_result, snapshot, and presence snapshot", async () => {
+    const harness = makeHarness();
+    const socket = harness.connectSocket("conn-1");
+
+    await harness.message(socket, { type: "auth", token: "good-token" });
+
+    expect(socket.sent).toEqual([
+      { type: "auth_result", success: true, tokenId: "tok-1", permission: "write" },
+      { type: "snapshot", value: docValue, version: 1 },
+      { type: "presence_snapshot", selfId: "conn-1", presences: {} },
+    ]);
+    expect(socket.attachment?.authenticated).toBe(true);
+    expect(harness.registry.authenticated()).toEqual([socket]);
+  });
+
+  it("rejects an invalid token without granting the session", async () => {
+    const harness = makeHarness();
+    const socket = harness.connectSocket("conn-1");
+
+    await harness.message(socket, { type: "auth", token: "wrong" });
+
+    expect(socket.sent).toEqual([
+      { type: "auth_result", success: false, error: "Invalid document token" },
+    ]);
+    expect(socket.attachment?.authenticated).toBe(false);
+    expect(harness.registry.authenticated()).toEqual([]);
+  });
+
+  it("never broadcasts to sockets that have not authenticated", async () => {
+    const harness = makeHarness();
+    const writer = await harness.authenticateSocket("writer");
+    const peer = await harness.authenticateSocket("peer");
+    const lurker = harness.connectSocket("lurker");
+
+    await harness.message(writer, {
+      type: "submit",
+      transaction: { id: "tx-1", baseVersion: 1, commands: [] },
+    });
+    await harness.message(writer, {
+      type: "presence_set",
+      data: objectValue({ name: stringValue("w") }),
+    });
+
+    expect(lurker.sent).toEqual([]);
+    expect(peer.sent.map((m) => m.type)).toEqual(["transaction", "presence_update"]);
+    expect(writer.sent.map((m) => m.type)).toEqual(["transaction", "presence_update"]);
+  });
+
+  it("sends an error frame and closes the socket when the snapshot load fails after auth", async () => {
+    const harness = makeHarness({
+      loadDocument: () => Effect.fail({ message: "database unreachable" }),
+    });
+    const socket = harness.connectSocket("conn-1");
+
+    await harness.message(socket, { type: "auth", token: "good-token" });
+
+    expect(socket.sent).toEqual([
+      {
+        type: "error",
+        transactionId: undefined,
+        reason: "Failed to load document: database unreachable",
+      },
+    ]);
+    expect(socket.closed).toEqual({ code: 1011, reason: "Document load failed" });
+    expect(harness.registry.authenticated()).toEqual([]);
+  });
+
+  it("broadcasts presence_remove to peers when a socket with presence closes", async () => {
+    const harness = makeHarness();
+    const leaver = await harness.authenticateSocket("leaver");
+    const peer = await harness.authenticateSocket("peer");
+
+    await harness.message(leaver, {
+      type: "presence_set",
+      data: objectValue({ name: stringValue("l") }),
+    });
+    peer.sent.length = 0;
+
+    await Effect.runPromise(handleDocumentSocketClose(harness.ctx, leaver));
+
+    expect(peer.sent).toEqual([{ type: "presence_remove", id: "leaver" }]);
+    expect(harness.presence.has("leaver")).toBe(false);
+    expect(harness.registry.authenticated()).toEqual([peer]);
+
+    // Closing a socket without presence broadcasts nothing.
+    peer.sent.length = 0;
+    const quiet = await harness.authenticateSocket("quiet");
+    await Effect.runPromise(handleDocumentSocketClose(harness.ctx, quiet));
+    expect(peer.sent).toEqual([]);
+  });
+
+  it("closes sockets that never authenticate once the deadline passes", async () => {
+    const harness = makeHarness();
+    const socket = harness.connectSocket("conn-1");
+
+    harness.advance(AUTH_DEADLINE_MS - 1);
+    expect(socket.closed).toBeNull();
+    harness.advance(1);
+    expect(socket.closed).toEqual({ code: 1008, reason: "Authentication deadline exceeded" });
+  });
+
+  it("keeps authenticated sockets alive past the auth deadline", async () => {
+    const harness = makeHarness();
+    const socket = await harness.authenticateSocket("conn-1");
+
+    harness.advance(AUTH_DEADLINE_MS * 10);
+    expect(socket.closed).toBeNull();
+    expect(harness.registry.authenticated()).toEqual([socket]);
+  });
+
+  it("reports the accepted sequence to the idle-notify host on submit", async () => {
+    const harness = makeHarness();
+    const writer = await harness.authenticateSocket("writer");
+
+    await harness.message(writer, {
+      type: "submit",
+      transaction: { id: "tx-1", baseVersion: 1, commands: [] },
+    });
+
+    // The stub submit returns version 2, so the current sequence is 1.
+    expect(harness.acceptedSeqs).toEqual([1]);
+  });
+
+  it("signals the idle-notify host only when the last authenticated socket closes", async () => {
+    const harness = makeHarness();
+    const first = await harness.authenticateSocket("first");
+    const second = await harness.authenticateSocket("second");
+
+    await Effect.runPromise(handleDocumentSocketClose(harness.ctx, first));
+    expect(harness.lastAuthenticatedCloses()).toBe(0);
+
+    await Effect.runPromise(handleDocumentSocketClose(harness.ctx, second));
+    expect(harness.lastAuthenticatedCloses()).toBe(1);
+  });
+
+  it("completes close cleanup even when an isolated onLastAuthenticatedClose hook dies", async () => {
+    const harness = makeHarness();
+    // The DO wires the storage-backed hook through `isolateSessionHook`; model a
+    // hook whose underlying storage effect DIES (a defect, not a typed failure).
+    const dyingCtx: DocumentSessionContext<FakeSocket> = {
+      ...harness.ctx,
+      onLastAuthenticatedClose: () =>
+        isolateSessionHook(Effect.die(new Error("storage unavailable")), "onLastAuthenticatedClose"),
+    };
+    const leaver = await harness.authenticateSocket("leaver");
+    await Effect.runPromise(
+      handleDocumentSocketMessage(
+        harness.ctx,
+        leaver,
+        JSON.stringify({ type: "presence_set", data: objectValue({ name: stringValue("l") }) }),
+      ),
+    );
+
+    // Must resolve (not reject) — the die is swallowed by the isolation wrapper —
+    // and the registry/presence cleanup still runs.
+    await Effect.runPromise(handleDocumentSocketClose(dyingCtx, leaver));
+
+    expect(harness.presence.has("leaver")).toBe(false);
+    expect(harness.registry.authenticated()).toEqual([]);
+  });
+});
+
+describe("isolateSessionHook", () => {
+  it("swallows a die and returns void so the caller proceeds", async () => {
+    let ran = false;
+    const result = await Effect.runPromise(
+      isolateSessionHook(Effect.die(new Error("boom")), "recordDirty").pipe(
+        Effect.tap(() =>
+          Effect.sync(() => {
+            ran = true;
+          }),
+        ),
+      ),
+    );
+    expect(ran).toBe(true);
+    expect(result).toBeUndefined();
+  });
+
+  it("passes a succeeding hook through untouched", async () => {
+    const result = await Effect.runPromise(isolateSessionHook(Effect.succeed(42), "recordDirty"));
+    expect(result).toBe(42);
+  });
+});
diff --git a/apps/mimic-db/tests/unit/idle-notify.test.ts b/apps/mimic-db/tests/unit/idle-notify.test.ts
new file mode 100644
index 000000000..82c31eb0d
--- /dev/null
+++ b/apps/mimic-db/tests/unit/idle-notify.test.ts
@@ -0,0 +1,122 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  IDLE_DIRTY_SEQ_KEY,
+  IDLE_NOTIFIED_SEQ_KEY,
+  makeIdleNotifier,
+  type IdleNotifyStorage,
+} from "../../src/ws/idle-notify.ts";
+
+interface Published {
+  readonly collectionId: string;
+  readonly documentId: string;
+  readonly seq: number;
+}
+
+const makeHarness = (options?: {
+  readonly authenticatedCount?: () => number;
+  readonly publishFails?: boolean;
+}) => {
+  const store = new Map<string, number>();
+  const alarms: number[] = [];
+  const published: Published[] = [];
+  const storage: IdleNotifyStorage = {
+    get: (key) => Effect.sync(() => store.get(key)),
+    put: (key, value) =>
+      Effect.sync(() => {
+        store.set(key, value);
+      }),
+    setAlarm: (scheduledTime) =>
+      Effect.sync(() => {
+        alarms.push(scheduledTime);
+      }),
+  };
+  let now = 1_000;
+  const notifier = makeIdleNotifier({
+    collectionId: "col-1",
+    documentId: "doc-1",
+    storage,
+    debounceMs: 15_000,
+    now: () => now,
+    authenticatedCount: options?.authenticatedCount ?? (() => 0),
+    publish: (message) =>
+      options?.publishFails
+        ? Effect.fail(new Error("queue down"))
+        : Effect.sync(() => {
+            published.push(message);
+          }),
+  });
+  return {
+    notifier,
+    store,
+    alarms,
+    published,
+    setNow: (value: number) => {
+      now = value;
+    },
+  };
+};
+
+describe("idle notifier", () => {
+  it("records the dirty sequence on an accepted transaction", async () => {
+    const h = makeHarness();
+    await Effect.runPromise(h.notifier.recordDirty(7));
+    expect(h.store.get(IDLE_DIRTY_SEQ_KEY)).toBe(7);
+  });
+
+  it("arms the debounce alarm when the last socket leaves a dirty document", async () => {
+    const h = makeHarness();
+    await Effect.runPromise(h.notifier.recordDirty(3));
+    await Effect.runPromise(h.notifier.onLastAuthenticatedClose());
+    expect(h.alarms).toEqual([1_000 + 15_000]);
+  });
+
+  it("does not arm an alarm when nothing new has been edited", async () => {
+    const h = makeHarness();
+    h.store.set(IDLE_DIRTY_SEQ_KEY, 5);
+    h.store.set(IDLE_NOTIFIED_SEQ_KEY, 5);
+    await Effect.runPromise(h.notifier.onLastAuthenticatedClose());
+    expect(h.alarms).toEqual([]);
+  });
+
+  it("does not arm an alarm while authenticated sockets remain", async () => {
+    const h = makeHarness({ authenticatedCount: () => 1 });
+    await Effect.runPromise(h.notifier.recordDirty(9));
+    await Effect.runPromise(h.notifier.onLastAuthenticatedClose());
+    expect(h.alarms).toEqual([]);
+  });
+
+  it("publishes the dirty sequence and records it as notified on alarm", async () => {
+    const h = makeHarness();
+    await Effect.runPromise(h.notifier.recordDirty(4));
+    await Effect.runPromise(h.notifier.onAlarm());
+    expect(h.published).toEqual([{ collectionId: "col-1", documentId: "doc-1", seq: 4 }]);
+    expect(h.store.get(IDLE_NOTIFIED_SEQ_KEY)).toBe(4);
+  });
+
+  it("skips publishing on alarm when a socket reconnected", async () => {
+    const h = makeHarness({ authenticatedCount: () => 1 });
+    await Effect.runPromise(h.notifier.recordDirty(4));
+    await Effect.runPromise(h.notifier.onAlarm());
+    expect(h.published).toEqual([]);
+    expect(h.store.get(IDLE_NOTIFIED_SEQ_KEY)).toBeUndefined();
+  });
+
+  it("does not re-notify an already-notified sequence", async () => {
+    const h = makeHarness();
+    h.store.set(IDLE_DIRTY_SEQ_KEY, 6);
+    h.store.set(IDLE_NOTIFIED_SEQ_KEY, 6);
+    await Effect.runPromise(h.notifier.onAlarm());
+    expect(h.published).toEqual([]);
+  });
+
+  it("leaves notifiedSeq unpersisted when the publish fails", async () => {
+    const h = makeHarness({ publishFails: true });
+    await Effect.runPromise(h.notifier.recordDirty(8));
+    await Effect.runPromise(h.notifier.onAlarm());
+    expect(h.store.get(IDLE_NOTIFIED_SEQ_KEY)).toBeUndefined();
+    // The dirty seq is untouched, so the next disconnect re-triggers.
+    expect(h.store.get(IDLE_DIRTY_SEQ_KEY)).toBe(8);
+  });
+});
diff --git a/apps/mimic-db/tests/unit/migration-executor.test.ts b/apps/mimic-db/tests/unit/migration-executor.test.ts
new file mode 100644
index 000000000..87b69d831
--- /dev/null
+++ b/apps/mimic-db/tests/unit/migration-executor.test.ts
@@ -0,0 +1,56 @@
+import type { Value } from "@voidhash/mimic-core";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  evaluateBundledMigration,
+  LocalMigrationExecutorLive,
+  MigrationExecutor,
+} from "../../src/core/migration-executor.ts";
+
+// A migration "bundle" of the shape `MigrationBundler` emits: a self-contained
+// script that registers a runner on `globalThis`. We exercise the QuickJS/vm
+// replacement directly — it must run with no `node:vm`.
+const ADD_COUNT_BUNDLE = `
+globalThis.__MIMIC_RUN_MIGRATION__ = function (input) {
+  var fields = Object.assign({}, input.oldValue.fields, {
+    count: { kind: "number", value: 42 },
+  });
+  return { value: { kind: "object", fields: fields } };
+};
+`;
+
+const oldValue: Value = {
+  kind: "object",
+  fields: { title: { kind: "string", value: "Hello" } },
+};
+
+describe("migration executor (node:vm / quickjs replacement)", () => {
+  it("evaluates a bundled migration in an isolated scope", () => {
+    const result = evaluateBundledMigration(ADD_COUNT_BUNDLE, oldValue);
+    expect((result as any).fields.count).toEqual({ kind: "number", value: 42 });
+    expect((result as any).fields.title).toEqual({ kind: "string", value: "Hello" });
+    // The host realm must be untouched by the bundle's globalThis assignment.
+    expect((globalThis as any).__MIMIC_RUN_MIGRATION__).toBeUndefined();
+  });
+
+  it("runs through the MigrationExecutor service", async () => {
+    const value = await Effect.runPromise(
+      Effect.gen(function* () {
+        const executor = yield* MigrationExecutor;
+        return yield* executor.run(ADD_COUNT_BUNDLE, oldValue);
+      }).pipe(Effect.provide(LocalMigrationExecutorLive)),
+    );
+    expect((value as any).fields.count).toEqual({ kind: "number", value: 42 });
+  });
+
+  it("fails with MigrationFailedError when the bundle registers no runner", async () => {
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const executor = yield* MigrationExecutor;
+        return yield* executor.run("// no runner", oldValue);
+      }).pipe(Effect.provide(LocalMigrationExecutorLive)),
+    );
+    expect(exit._tag).toBe("Failure");
+  });
+});
diff --git a/apps/mimic-db/tests/unit/pg-store.test.ts b/apps/mimic-db/tests/unit/pg-store.test.ts
new file mode 100644
index 000000000..aa7fd7cd6
--- /dev/null
+++ b/apps/mimic-db/tests/unit/pg-store.test.ts
@@ -0,0 +1,47 @@
+import { SqlError } from "effect/unstable/sql";
+import { describe, expect, it } from "vitest";
+
+import { isDdlDeniedError, isMissingTableError } from "../../src/core/pg-store.ts";
+
+// Mirrors the error node-postgres produces for a Postgres failure: the driver
+// error (with the SQLSTATE `code`) lands in the SqlError reason's `cause`.
+const sqlErrorWithCause = (cause: unknown): SqlError.SqlError =>
+  new SqlError.SqlError({
+    reason: new SqlError.UnknownError({
+      cause,
+      message: "Failed to execute statement",
+      operation: "execute",
+    }),
+  });
+
+const pgError = (code: string, message: string): Error => {
+  const error = new Error(message);
+  (error as Error & { code: string }).code = code;
+  return error;
+};
+
+describe("pg-store error classification", () => {
+  it("detects undefined_table (42P01) as a missing table", () => {
+    const error = sqlErrorWithCause(pgError("42P01", `relation "mimic_documents" does not exist`));
+    expect(isMissingTableError(error)).toBe(true);
+    expect(isDdlDeniedError(error)).toBe(false);
+  });
+
+  it("detects insufficient_privilege (42501) as a DDL denial", () => {
+    const error = sqlErrorWithCause(pgError("42501", `permission denied for schema public`));
+    expect(isDdlDeniedError(error)).toBe(true);
+    expect(isMissingTableError(error)).toBe(false);
+  });
+
+  it("treats other SQL failures as neither", () => {
+    const duplicate = sqlErrorWithCause(
+      pgError("23505", `duplicate key value violates unique constraint "mimic_documents_pkey"`),
+    );
+    expect(isMissingTableError(duplicate)).toBe(false);
+    expect(isDdlDeniedError(duplicate)).toBe(false);
+
+    const nonError = sqlErrorWithCause("connection reset");
+    expect(isMissingTableError(nonError)).toBe(false);
+    expect(isDdlDeniedError(nonError)).toBe(false);
+  });
+});
diff --git a/apps/mimic-db/tests/unit/prepare-document-heal.test.ts b/apps/mimic-db/tests/unit/prepare-document-heal.test.ts
new file mode 100644
index 000000000..bd9c1cc96
--- /dev/null
+++ b/apps/mimic-db/tests/unit/prepare-document-heal.test.ts
@@ -0,0 +1,90 @@
+import { Effect, Result } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeControlEngine } from "../../src/core/control-engine.ts";
+import { makeMemoryControlStore } from "../../src/core/memory-store.ts";
+import { objectValue, stringValue, titleSchema } from "../helpers.ts";
+
+/**
+ * Builds a control engine over a fresh in-memory store with a `voidhash`
+ * database and a `paywalls` collection, returning both the engine and the
+ * collection id — the fixture every case here reproduces the orphan on.
+ */
+const setup = Effect.gen(function* () {
+  const store = makeMemoryControlStore();
+  const control = makeControlEngine(store);
+  yield* control.ensureRootUser("root", "password");
+  const db = yield* control.createDatabase("voidhash", "test");
+  const collection = yield* control.createCollection(db.id, "paywalls", titleSchema);
+  return { control, collectionId: collection.id };
+});
+
+const materialized = () => Effect.succeed(true);
+const unmaterialized = () => Effect.succeed(false);
+
+describe("prepareDocument heals a half-dead index entry", () => {
+  it("re-registers a live same-collection index row whose document object holds no state", () =>
+    Effect.runPromise(
+      Effect.gen(function* () {
+        const { control, collectionId } = yield* setup;
+
+        // Reproduce the live-dev orphan: an index row that is live
+        // (deletedAt === null) AND points at the CURRENT collection, but whose
+        // per-document object was never materialized (or lost its state). This
+        // is what `deleteCollection`-then-reprovision leaves when the recreated
+        // collection reuses nothing of the old document object — the pointer is
+        // valid, the state is gone. A bare index-only conflict check would
+        // reserve the id forever (create conflicts, get reports NotFound).
+        yield* control.store.registerDocument("pw_orphan", collectionId);
+
+        const prepared = yield* control.prepareDocument(
+          collectionId,
+          "pw_orphan",
+          objectValue({ title: stringValue("Fresh") }),
+          unmaterialized,
+        );
+        expect(prepared.documentId).toBe("pw_orphan");
+
+        // The heal re-points the row at the current collection and clears
+        // deleted_at, so the id is readable again.
+        const index = yield* control.store.findDocumentIndex("pw_orphan");
+        expect(index?.collectionId).toBe(collectionId);
+        expect(index?.deletedAt).toBe(null);
+      }),
+    ));
+
+  it("still conflicts when the document object is materialized", () =>
+    Effect.runPromise(
+      Effect.gen(function* () {
+        const { control, collectionId } = yield* setup;
+        yield* control.store.registerDocument("pw_live", collectionId);
+
+        const result = yield* Effect.result(
+          control.prepareDocument(
+            collectionId,
+            "pw_live",
+            objectValue({ title: stringValue("Nope") }),
+            materialized,
+          ),
+        );
+        expect(Result.isFailure(result)).toBe(true);
+      }),
+    ));
+
+  it("still conflicts without a probe (index-only behaviour preserved)", () =>
+    Effect.runPromise(
+      Effect.gen(function* () {
+        const { control, collectionId } = yield* setup;
+        yield* control.store.registerDocument("pw_live", collectionId);
+
+        const result = yield* Effect.result(
+          control.prepareDocument(
+            collectionId,
+            "pw_live",
+            objectValue({ title: stringValue("Nope") }),
+          ),
+        );
+        expect(Result.isFailure(result)).toBe(true);
+      }),
+    ));
+});
diff --git a/apps/mimic-db/tests/unit/session-registry.test.ts b/apps/mimic-db/tests/unit/session-registry.test.ts
new file mode 100644
index 000000000..cd7a290ac
--- /dev/null
+++ b/apps/mimic-db/tests/unit/session-registry.test.ts
@@ -0,0 +1,164 @@
+import { describe, expect, it } from "vitest";
+
+import { makeSessionRegistry, type SessionRegistryTimers } from "../../src/ws/session-registry.ts";
+
+interface FakeSocket {
+  readonly id: string;
+  authenticated: boolean;
+  closed: boolean;
+}
+
+const makeSocket = (id: string, authenticated = false): FakeSocket => ({
+  id,
+  authenticated,
+  closed: false,
+});
+
+/** Manual clock + timer queue so deadlines are driven deterministically. */
+const makeManualTimers = () => {
+  let currentNow = 0;
+  const scheduled: Array<{ at: number; fn: () => void; cancelled: boolean }> = [];
+  const timers: SessionRegistryTimers = {
+    now: () => currentNow,
+    schedule: (fn, ms) => {
+      const entry = { at: currentNow + ms, fn, cancelled: false };
+      scheduled.push(entry);
+      return () => {
+        entry.cancelled = true;
+      };
+    },
+  };
+  const advance = (ms: number) => {
+    currentNow += ms;
+    for (const entry of scheduled) {
+      if (!entry.cancelled && entry.at <= currentNow) {
+        entry.cancelled = true;
+        entry.fn();
+      }
+    }
+  };
+  const setNow = (value: number) => {
+    currentNow = value;
+  };
+  return { timers, advance, setNow };
+};
+
+const makeRegistry = (timers: SessionRegistryTimers) =>
+  makeSessionRegistry<FakeSocket>({
+    authDeadlineMs: 10_000,
+    isAuthenticated: (socket) => socket.authenticated,
+    close: (socket) => {
+      socket.closed = true;
+    },
+    timers,
+  });
+
+describe("session registry", () => {
+  it("keeps pending sockets out of the authenticated set until promoted", () => {
+    const { timers } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a");
+
+    registry.trackPending("a", socket);
+    expect(registry.authenticated()).toEqual([]);
+
+    socket.authenticated = true;
+    registry.promote("a", socket);
+    expect(registry.authenticated()).toEqual([socket]);
+  });
+
+  it("closes sockets that do not authenticate within the deadline", () => {
+    const { timers, advance } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a");
+
+    registry.trackPending("a", socket);
+    advance(9_999);
+    expect(socket.closed).toBe(false);
+    advance(1);
+    expect(socket.closed).toBe(true);
+    expect(registry.authenticated()).toEqual([]);
+  });
+
+  it("cancels the deadline when the socket authenticates in time", () => {
+    const { timers, advance } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a");
+
+    registry.trackPending("a", socket);
+    advance(5_000);
+    socket.authenticated = true;
+    registry.promote("a", socket);
+    advance(60_000);
+    expect(socket.closed).toBe(false);
+    expect(registry.authenticated()).toEqual([socket]);
+  });
+
+  it("cancels the deadline when the socket closes first", () => {
+    const { timers, advance } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a");
+
+    registry.trackPending("a", socket);
+    registry.remove("a");
+    advance(60_000);
+    expect(socket.closed).toBe(false);
+  });
+
+  it("restores authenticated sockets straight into the broadcast set", () => {
+    const { timers } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a", true);
+
+    registry.restore("a", socket, true, 0);
+    expect(registry.authenticated()).toEqual([socket]);
+  });
+
+  it("restores a pending socket with the remainder of its deadline", () => {
+    const { timers, advance, setNow } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a");
+
+    setNow(4_000);
+    registry.restore("a", socket, false, 0);
+    advance(5_999);
+    expect(socket.closed).toBe(false);
+    advance(1);
+    expect(socket.closed).toBe(true);
+  });
+
+  it("closes a restored pending socket whose deadline already passed", () => {
+    const { timers, setNow } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a");
+
+    setNow(60_000);
+    registry.restore("a", socket, false, 0);
+    expect(socket.closed).toBe(true);
+    expect(registry.authenticated()).toEqual([]);
+  });
+
+  it("grants the full deadline to restored attachments without a connect time", () => {
+    const { timers, advance } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a");
+
+    registry.restore("a", socket, false, undefined);
+    advance(9_999);
+    expect(socket.closed).toBe(false);
+    advance(1);
+    expect(socket.closed).toBe(true);
+  });
+
+  it("filters de-authenticated sockets out of broadcasts (belt and braces)", () => {
+    const { timers } = makeManualTimers();
+    const registry = makeRegistry(timers);
+    const socket = makeSocket("a", true);
+
+    registry.promote("a", socket);
+    expect(registry.authenticated()).toEqual([socket]);
+
+    socket.authenticated = false;
+    expect(registry.authenticated()).toEqual([]);
+  });
+});
diff --git a/apps/mimic-db/tsconfig.json b/apps/mimic-db/tsconfig.json
new file mode 100644
index 000000000..b973ba8d7
--- /dev/null
+++ b/apps/mimic-db/tsconfig.json
@@ -0,0 +1,16 @@
+{
+  "extends": "@voidhash/tsconfig/typescript-6.json",
+  "compilerOptions": {
+    "types": ["bun"],
+    "noEmit": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitOverride": true,
+    "paths": {
+      "@/*": ["./src/*"]
+    }
+  },
+  "include": ["src", "tests"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/apps/mimic-db/vitest.mts b/apps/mimic-db/vitest.mts
new file mode 100644
index 000000000..51b79bb1e
--- /dev/null
+++ b/apps/mimic-db/vitest.mts
@@ -0,0 +1,22 @@
+import { defineConfig } from "vite-plus";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+
+const rootDir = dirname(fileURLToPath(import.meta.url));
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      "@voidhash/mimic-core": resolve(
+        rootDir,
+        "../../packages/mimic-core/src/index.ts",
+      ),
+    },
+  },
+  test: {
+    environment: "node",
+    include: ["./tests/**/*.test.ts"],
+    exclude: ["./node_modules/**"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/apps/studio/package.json b/apps/studio/package.json
index 8d6041b8f..de29cb21f 100644
--- a/apps/studio/package.json
+++ b/apps/studio/package.json
@@ -29,7 +29,7 @@
     "react": "catalog:",
     "react-dom": "catalog:",
     "tailwindcss": "^4.1.13",
-    "vite": "^7.0.0"
+    "vite": "7.3.5"
   },
   "devDependencies": {
     "@types/react": "catalog:",
diff --git a/apps/www/.env.example b/apps/www/.env.example
new file mode 100644
index 000000000..292af2b9a
--- /dev/null
+++ b/apps/www/.env.example
@@ -0,0 +1,20 @@
+# VITE_APP_API_URL=http://localhost:5001
+# VITE_APP_ENV=development
+
+# # WorkOS AuthKit / User Management
+# # Dashboard Redirect URIs:
+# # - http://localhost:3000/api/auth/callback
+# # - http://localhost:3000/api/auth/oauth/callback
+# # Dashboard password reset URL:
+# # - http://localhost:3000/auth/reset-password
+# WORKOS_API_KEY=sk_test_your-workos-api-key
+# WORKOS_CLIENT_ID=client_your-workos-client-id
+# WORKOS_COOKIE_PASSWORD=your-32-character-cookie-password
+# # Optional override for the AuthKit hosted callback. The app otherwise derives
+# # request-specific callback URLs for first-party auth routes.
+# WORKOS_REDIRECT_URI=http://localhost:3000/api/auth/callback
+# GITHUB_CLIENT_ID=your-github-client-id
+# GITHUB_CLIENT_SECRET=your-github-client-secret
+
+# EMAIL_FROM=noreply@tx.voidhash.com
+# RESEND_API_KEY=
diff --git a/apps/www/.gitignore b/apps/www/.gitignore
new file mode 100644
index 000000000..7b8da95f5
--- /dev/null
+++ b/apps/www/.gitignore
@@ -0,0 +1,42 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/versions
+
+# testing
+/coverage
+
+# next.js
+/.next/
+/out/
+
+# production
+/build
+
+# misc
+.DS_Store
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# env files (can opt-in for committing if needed)
+.env*
+!.env.example
+
+# vercel
+.vercel
+
+# typescript
+*.tsbuildinfo
+next-env.d.ts
diff --git a/apps/www/LICENSE.md b/apps/www/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/apps/www/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/apps/www/README.md b/apps/www/README.md
new file mode 100644
index 000000000..de84dfd02
--- /dev/null
+++ b/apps/www/README.md
@@ -0,0 +1,19 @@
+# www
+
+TanStack Start app deployed as a Cloudflare Worker through Alchemy.
+
+## Development
+
+Run the full Cloudflare-backed stack from the repository root:
+
+```bash
+pnpm dev
+```
+
+For an app-only build check:
+
+```bash
+pnpm --filter @voidhash/www build
+```
+
+`alchemy.run.ts` owns the Cloudflare deployment with `Cloudflare.Vite`; the app Vite config only contains the TanStack/React app plugins.
diff --git a/apps/www/design.generated.ts b/apps/www/design.generated.ts
new file mode 100644
index 000000000..9e905b47a
--- /dev/null
+++ b/apps/www/design.generated.ts
@@ -0,0 +1,21 @@
+/// <reference types="vite/client" />
+import { fromConfig } from 'fumadocs-mdx/runtime/vite';
+import type * as Config from './src/features/design/source.config';
+
+export const create = fromConfig<typeof Config>();
+
+export const docs = {
+  doc: create.doc("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
+    "base": "./src/features/design/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  })),
+  meta: create.meta("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
+    "import": "default",
+    "base": "./src/features/design/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  }))
+};
\ No newline at end of file
diff --git a/apps/www/docs.generated.ts b/apps/www/docs.generated.ts
new file mode 100644
index 000000000..3da900be7
--- /dev/null
+++ b/apps/www/docs.generated.ts
@@ -0,0 +1,21 @@
+/// <reference types="vite/client" />
+import { fromConfig } from 'fumadocs-mdx/runtime/vite';
+import type * as Config from './src/features/docs/source.config';
+
+export const create = fromConfig<typeof Config>();
+
+export const docs = {
+  doc: create.doc("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
+    "base": "./src/features/docs/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  })),
+  meta: create.meta("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
+    "import": "default",
+    "base": "./src/features/docs/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  }))
+};
\ No newline at end of file
diff --git a/apps/www/package.json b/apps/www/package.json
new file mode 100644
index 000000000..9312ba662
--- /dev/null
+++ b/apps/www/package.json
@@ -0,0 +1,127 @@
+{
+  "name": "@voidhash/www",
+  "version": "0.1.0",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "scripts": {
+    "dev": "vp dev",
+    "build": "pnpm run generate:docs && vp build --configLoader runner",
+    "preview": "vp preview",
+    "typecheck": "tsc --noEmit",
+    "generate:docs": "fumadocs-mdx src/features/docs/source.config.ts src/features/docs && fumadocs-mdx src/features/design/source.config.ts src/features/design"
+  },
+  "dependencies": {
+    "@apple/app-store-server-library": "^1.6.0",
+    "@axiomhq/pino": "^1.3.1",
+    "@basementstudio/shader-lab": "^1.3.14",
+    "@chronark/zod-bird": "^0.3.10",
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/modifiers": "^9.0.0",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@effect/platform-node": "catalog:",
+    "@fontsource-variable/geist": "catalog:",
+    "@fontsource-variable/geist-mono": "catalog:",
+    "@headless-tree/core": "^1.7.0",
+    "@headless-tree/react": "^1.7.0",
+    "@hookform/resolvers": "catalog:",
+    "@monaco-editor/react": "^4.7.0",
+    "@paper-design/shaders-react": "^0.0.71",
+    "@paralleldrive/cuid2": "^3.3.0",
+    "@pixi/layout": "^3.2.0",
+    "@pixi/react": "^8.0.0-beta.25",
+    "@pixi/ui": "^2.3.0",
+    "@radix-ui/react-slot": "^1.2.3",
+    "@react-three/drei": "^10.1.2",
+    "@react-three/fiber": "^9.1.2",
+    "@react-three/postprocessing": "^3.0.4",
+    "@t3-oss/env-core": "^0.13.8",
+    "@tanstack/react-query": "catalog:",
+    "@tanstack/query-core": "5.100.11",
+    "@tanstack/react-query-devtools": "catalog:",
+    "@tanstack/react-router": "catalog:",
+    "@tanstack/react-router-ssr-query": "catalog:",
+    "@tanstack/react-start": "catalog:",
+    "@tanstack/react-table": "catalog:",
+    "@tanstack/zod-adapter": "catalog:",
+    "@ai-sdk/react": "^4.0.0",
+    "@voidhash/ai-shared": "workspace:*",
+    "@voidhash/api-contracts": "workspace:*",
+    "@voidhash/core": "workspace:*",
+    "@voidhash/lib": "workspace:*",
+    "@voidhash/mimic": "workspace:*",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywall-build": "workspace:*",
+    "@voidhash/paywall-builtins": "workspace:*",
+    "@voidhash/paywall-renderer-preact": "workspace:*",
+    "@voidhash/paywall-renderer-web-core": "workspace:*",
+    "@voidhash/paywall-workspace": "workspace:*",
+    "@voidhash/rpc": "workspace:*",
+    "@voidhash/ui": "workspace:*",
+    "@voidhash/paywalls": "workspace:*",
+    "@workos-inc/node": "8.13.0",
+    "@workos/authkit-session": "0.5.2",
+    "@workos/authkit-tanstack-react-start": "0.8.2",
+    "ai": "^7.0.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "cross-fetch": "catalog:",
+    "effect": "catalog:",
+    "effect-query": "catalog:",
+    "esbuild-wasm": "^0.25.10",
+    "fractional-indexing-jittered": "^1.0.0",
+    "fumadocs-core": "15.8.2",
+    "fumadocs-mdx": "12.0.1",
+    "fumadocs-ui": "15.8.2",
+    "h3-v2": "npm:h3@2.0.1-rc.18",
+    "lucide-react": "catalog:",
+    "lucide-static": "^0.555.0",
+    "monaco-editor": "^0.52.2",
+    "motion": "^12.23.12",
+    "nanoid": "^5.1.6",
+    "next-themes": "^0.4.6",
+    "pino": "^9.7.0",
+    "pixi-viewport": "^6.0.3",
+    "pixi.js": "^8.2.6",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "react-easy-crop": "^6.0.2",
+    "react-hook-form": "catalog:",
+    "recharts": "^2.15.0",
+    "resend": "^4.5.1",
+    "server-only": "^0.0.1",
+    "slug": "^11.0.0",
+    "sonner": "catalog:",
+    "streamdown": "^2.0.0",
+    "stripe": "^18.0.0",
+    "tailwind-merge": "^3.3.1",
+    "three": "^0.178.0",
+    "vite-tsconfig-paths": "catalog:",
+    "voidhash": "0.0.1-alpha.4",
+    "y-protocols": "^1.0.6",
+    "yjs": "^13.6.27",
+    "zod": "catalog:",
+    "zod-openapi": "^5.3.1",
+    "zustand": "^5.0.8"
+  },
+  "devDependencies": {
+    "@effect/vitest": "catalog:",
+    "@tailwindcss/vite": "catalog:",
+    "@types/mdx": "^2.0.13",
+    "@types/node": "^20",
+    "@types/react": "catalog:",
+    "@types/react-dom": "catalog:",
+    "@vitejs/plugin-react": "catalog:",
+    "@vitest/ui": "4.1.0",
+    "@voidhash/tsconfig": "workspace:*",
+    "babel-plugin-react-compiler": "catalog:",
+    "dotenv-cli": "catalog:",
+    "tailwindcss": "catalog:",
+    "tw-animate-css": "catalog:",
+    "typescript": "catalog:",
+    "vite": "catalog:",
+    "vite-plus": "catalog:",
+    "vitest": "catalog:"
+  }
+}
diff --git a/apps/www/public/apple-icon.png b/apps/www/public/apple-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a501dc7d57d6e5a925cab728f31cf70bba33b272
GIT binary patch
literal 2903
zcmZvec{J4f8^^~Odzfr7_9b(LFp8^XOj*JegBhtwL$*oAQX>1zC}gRI(Ac7=Y04TJ
zV-3kN7%mklTTMfZ3ULYd+wc6&xxe!}_mA)Qd!Fy-dEU?SdCv1WpVtkv(+Np&m^cUo
zlC-z8b_Kq*zaCLx;C-}T7y$xF?6S8$hPf)RP|%Yq_lI24pk6=$`b9>q){OpdTKod&
zF%`27;b6IdIB<ZCc?&sM1!`Rop>@AfLu;J58&eQkUzs2`8u6yTg27JhPEA=hH*Y@e
zLfifM=guj(_OqHAlXlB}x2a&sX?6K-I{|PZmF8%34V6WCDyP9YJ=WtZTB{@+q~lOb
zTo2Oy15E4+RK6iYP)6qWWTNt`$8GOJ#*+s9YjikT=evl4z>=UY&Vh=;U3!PAfQ*xR
za$I#dITL2L^~q*lHDz**AfmlEH!l$kIV7@&)<FkDqA}tXAB#ccffqJhV+M$<mQB&O
z_zhKjIdtfR6m8{Lv8hSsg#+>$oRg~SA-dvFo@2T%?4*!rxSPm!{tZA!R-0z)CIEgv
zQu1eOtdS<La@^l!gb#S~VPR?4fNhA;UZNZIQN@iHI}K%ANhr9lg4JRLDghO_bPtCn
zp8>?{di!4-2VAW5+1nSfB-ERI<{}d1AhJ}s@n$7f0POi>VooZ@;Unab{3FExXF$Bj
zcgFTHP^Vj1YS@ob5SeeU8+<1fsOKMt`P$u+Y4!qO)hy-ovJjxKNtv3&yFfuE4KF-4
z+)1c4L(Rh}|2R;<?<2z(NaA-eBvh_kdj2b*fSd2sZBMxZ1-Kdqt33zggA)`z?Ex+O
z7tE*<@X!Gn9^t8%1`<$3VtmzyfQlYeQ^@OR5^57ojkA6LNOXw{&sYh77p-18#eHr5
z-|g<~JAy!HSte}X8N6rN_v)7Vr;cRla|$cT@k2Y4-juE6?bf(W-FwKm?=q1w+ugH(
z2PKTMclxo<GO9zT?d#WRtFd}w{w_($p8Gaw8|QKiPHW|x5i>=k)$HsPp*wFX@t;N>
zyVYF%Hq$a2JQz1OTvp@rN-AoFN8RN39C2O{n(I2kX^r2?1eE(;m*Z4p=^T7ZEH!=)
z#v;}(f<K{W9`fPNWNSi<IW%-yG<0L-f<@H#(kBC3UGH0VHrJLueQ1uUiQ9~5NZ5(L
zeI!=gM~$~M+1htQ7CtczBdyEriSveqZvTuj&wg<cFLC}Q_0#&dS&GmX!t&_O+jx!<
zl9#*RQ#`s>>9GIk>M^kALI29lt-qE}6d~haLGdZulPz&y7>_F31QfY-cm0bIJ`Rat
zv8(tI=`IyDH3gNSs&lm`cM-YdBnxA`QYDgP+AR~P5tsdWpfKxMz@S5S?}VDsrMC6O
zMU!ST>2OE?@H8P~@6>A+rVLZYfpOMiz+4=-Fy$R+51e%Oyw||3eHr!E?Uja(V9)%K
zQ4uin?wP5N(h^)Y;mHS|mKYgcce4<a=}OTPW|(?)oi+Pj^{)NN(q3|f^Os?50e?rs
z&@pK^nLbR=e@`t@6%8--7o4bulYk#-2PO#ZTAU$|Z$?m3T41`Kurp|9ZnzId=G&CP
zo(r()>~ag!*F)|;qW01@#o9H}Q#0pM-TiE{ZE@C`w(8<!wJMwPX@UJtpl^$lG}C}<
z*$rim4Lh>DOVL7OFk``~*XF<SNFY48g)%$=<z1mJG?V@|%9UEl-=F#>!#RSrQd2j}
z*#)L+A;M%nzQf@t$RFc_@jI9IM8|vD3Bp3>RArEqmOs8OP{P89-Y4pYVmeWuFM!%!
zj(|^@RuwxuFdPi}GMI{bL$_$NIT##wA#;3-ouzwH23zh@{oQIe?|UBhgJ5KD9hXfX
z1~pv@IJiV-)PznSryYs9G=i4p!P-Fo>8R1mO`38>61(Uq?#IHIw%a48y__vXB0jJw
zX3gnb(^XC2IIOXnqF49voR_hqTdo`J*CqI4O7vk(en3|^Xz-IqeGqN^Y>p9rzy7I;
zJAJuEeXJ{AAhRo90=l;zRB-4)cQ4O)8|Isb<VY%;UBv@~W~^!Lj-{FSBn3?{UHB6X
z+VtUWy-p9ehmKU-^WdKMjgiepyvW7zIs|dN)_8R6frg7<M)I?%Y2C(%#Z0(!Q8zG9
zP3{4hO|(2L`GQK3v^vrtW{rO(c^++?D1sS)%EO$U@+=ctrUVni&g1V3!ML+uW53PV
ztU>QWljqP}Izw>%ZMDy(6`sqfGVE;2A*e$dYm+!~)T?q<fN;cUwm;weg&O$Jiw1u6
zZde*JjwSe4H&t6|0kL`c-L_nc0-;ohZnD@GEuO~ceR}#CM8k(cZ7(nt^6cwWJjn5r
zQCg{I%s*5Rky3#g(1#fX{v(SL<R8UM21_4A?@g9c%>?FVg9V$?JcRQ+5LEWX5;yAa
z*VUu`5XN+T)Z4p&pZgH4!)czwFtZsf**14SZb1Y3;TdJIaGM6~Xg|#*ySfT-N^W>L
z7{a0yGv>KHPucRF5=|21{d!fuA`(TUSx=OnviAz@YKqbh-I->oqXq##cDXF-T)!eo
z%ri-c;|U3DE@xCAd|J{U1E&Dj+qt@9dv>~0DdWFMb9KWuuF*vgV0cw@Mq`62RtcY1
zg@}aeQ=W^4i^yVtO4gPpjW&NQUdEou#^;6K4w?$t%@Z>qydRv%Go6LoF|I{{8z^SE
za|Nh9^fCs&-g#m${rY7tn5sn#w1&NDYj?$(*AWUqGr2IvQ?{UK>Blxmbh;N~o*%#!
zn^JU<!DYY*Sb4TzS&}983Y^5uRf3a|tpe6k9>*W<-dsi;=OXKu2xNEc8ak__q-1JM
zLD1}HaorVg3cirOk?+qgJbX&QzyrF_@t9F_{$;Ay)-563AFFh-uy14JQjW!CE+p|x
z-Dz6b_vF2uVj45A{4CGveUrHMyC=tp`;%$AziS7Wpq8mee_dtv)LnezyS1^32>Ea%
zGFO>j^0lrw`aWXzk1RBt)a}!kV|eLPul(s}{uy45>fdG)DWCl&m|<4#<!3(KByjq_
z%N*n|=8HtCqgMkPqE{JHJ@%FOR)u>KMSbKf)V<5xh+@pBr!XY;dB|i=t`R=E$NTD4
zj|zM%AE~2x(_k^G^ebz3%x%WJS6h=pcK;fs<BF;=-ORE8xs1AQn^1Dop!%7M9R2~F
zO2lYjfxD40V8TBxR3pSP#+mt70&MZ&JWfo8fQt{fXZZid%z~^+t_E2RE`l$u0Fj;E
zAM3Jo5&$1{l4`N@1bB#*n4VAoU`l~XER_Y^zgI*KzYO_$6ino-6u9YfEE+EwoBxYZ
zFCIQnlsAxp%CEO<{U{b54;U%`V(dtV$6Fw@t;C@OD}S6_HVPLyhQ0|Izdfelx|gGH
z*6fZp*~~X0hGEeHBx42s4hIw8{#0>;|C`}SKq|Wd^zvw4Wp+OR5qo;uyD$LVJU;Y_
zDFJ-1*HoGO(;o*x&$klFk5M`R&Df=TDaHc~5g+brL<JZ^+l1o1?gB8x5VhI*KEM#2
zDWV;A2pw=?DREb{mXPR*b#K+tUmTKIZ^F9)M9S)Q{Lle%*pGJ=!vV;0E_Hkq(Xyu;
zXxW*IiXQTStNbX_xfV!9DEIcl0wGw;EOKZc04#M$WUNb@IR|@w3W;gU2Sdj5?=1W#
z42103Z!8=F^d`i$=7FNzx-<y1vvbH#^*MmY!oRp!5R?_z308Gh{DsXRdmAU~isN3C
FzX3_`Q6c~U

literal 0
HcmV?d00001

diff --git a/apps/www/public/auth/apple-icon.png b/apps/www/public/auth/apple-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a501dc7d57d6e5a925cab728f31cf70bba33b272
GIT binary patch
literal 2903
zcmZvec{J4f8^^~Odzfr7_9b(LFp8^XOj*JegBhtwL$*oAQX>1zC}gRI(Ac7=Y04TJ
zV-3kN7%mklTTMfZ3ULYd+wc6&xxe!}_mA)Qd!Fy-dEU?SdCv1WpVtkv(+Np&m^cUo
zlC-z8b_Kq*zaCLx;C-}T7y$xF?6S8$hPf)RP|%Yq_lI24pk6=$`b9>q){OpdTKod&
zF%`27;b6IdIB<ZCc?&sM1!`Rop>@AfLu;J58&eQkUzs2`8u6yTg27JhPEA=hH*Y@e
zLfifM=guj(_OqHAlXlB}x2a&sX?6K-I{|PZmF8%34V6WCDyP9YJ=WtZTB{@+q~lOb
zTo2Oy15E4+RK6iYP)6qWWTNt`$8GOJ#*+s9YjikT=evl4z>=UY&Vh=;U3!PAfQ*xR
za$I#dITL2L^~q*lHDz**AfmlEH!l$kIV7@&)<FkDqA}tXAB#ccffqJhV+M$<mQB&O
z_zhKjIdtfR6m8{Lv8hSsg#+>$oRg~SA-dvFo@2T%?4*!rxSPm!{tZA!R-0z)CIEgv
zQu1eOtdS<La@^l!gb#S~VPR?4fNhA;UZNZIQN@iHI}K%ANhr9lg4JRLDghO_bPtCn
zp8>?{di!4-2VAW5+1nSfB-ERI<{}d1AhJ}s@n$7f0POi>VooZ@;Unab{3FExXF$Bj
zcgFTHP^Vj1YS@ob5SeeU8+<1fsOKMt`P$u+Y4!qO)hy-ovJjxKNtv3&yFfuE4KF-4
z+)1c4L(Rh}|2R;<?<2z(NaA-eBvh_kdj2b*fSd2sZBMxZ1-Kdqt33zggA)`z?Ex+O
z7tE*<@X!Gn9^t8%1`<$3VtmzyfQlYeQ^@OR5^57ojkA6LNOXw{&sYh77p-18#eHr5
z-|g<~JAy!HSte}X8N6rN_v)7Vr;cRla|$cT@k2Y4-juE6?bf(W-FwKm?=q1w+ugH(
z2PKTMclxo<GO9zT?d#WRtFd}w{w_($p8Gaw8|QKiPHW|x5i>=k)$HsPp*wFX@t;N>
zyVYF%Hq$a2JQz1OTvp@rN-AoFN8RN39C2O{n(I2kX^r2?1eE(;m*Z4p=^T7ZEH!=)
z#v;}(f<K{W9`fPNWNSi<IW%-yG<0L-f<@H#(kBC3UGH0VHrJLueQ1uUiQ9~5NZ5(L
zeI!=gM~$~M+1htQ7CtczBdyEriSveqZvTuj&wg<cFLC}Q_0#&dS&GmX!t&_O+jx!<
zl9#*RQ#`s>>9GIk>M^kALI29lt-qE}6d~haLGdZulPz&y7>_F31QfY-cm0bIJ`Rat
zv8(tI=`IyDH3gNSs&lm`cM-YdBnxA`QYDgP+AR~P5tsdWpfKxMz@S5S?}VDsrMC6O
zMU!ST>2OE?@H8P~@6>A+rVLZYfpOMiz+4=-Fy$R+51e%Oyw||3eHr!E?Uja(V9)%K
zQ4uin?wP5N(h^)Y;mHS|mKYgcce4<a=}OTPW|(?)oi+Pj^{)NN(q3|f^Os?50e?rs
z&@pK^nLbR=e@`t@6%8--7o4bulYk#-2PO#ZTAU$|Z$?m3T41`Kurp|9ZnzId=G&CP
zo(r()>~ag!*F)|;qW01@#o9H}Q#0pM-TiE{ZE@C`w(8<!wJMwPX@UJtpl^$lG}C}<
z*$rim4Lh>DOVL7OFk``~*XF<SNFY48g)%$=<z1mJG?V@|%9UEl-=F#>!#RSrQd2j}
z*#)L+A;M%nzQf@t$RFc_@jI9IM8|vD3Bp3>RArEqmOs8OP{P89-Y4pYVmeWuFM!%!
zj(|^@RuwxuFdPi}GMI{bL$_$NIT##wA#;3-ouzwH23zh@{oQIe?|UBhgJ5KD9hXfX
z1~pv@IJiV-)PznSryYs9G=i4p!P-Fo>8R1mO`38>61(Uq?#IHIw%a48y__vXB0jJw
zX3gnb(^XC2IIOXnqF49voR_hqTdo`J*CqI4O7vk(en3|^Xz-IqeGqN^Y>p9rzy7I;
zJAJuEeXJ{AAhRo90=l;zRB-4)cQ4O)8|Isb<VY%;UBv@~W~^!Lj-{FSBn3?{UHB6X
z+VtUWy-p9ehmKU-^WdKMjgiepyvW7zIs|dN)_8R6frg7<M)I?%Y2C(%#Z0(!Q8zG9
zP3{4hO|(2L`GQK3v^vrtW{rO(c^++?D1sS)%EO$U@+=ctrUVni&g1V3!ML+uW53PV
ztU>QWljqP}Izw>%ZMDy(6`sqfGVE;2A*e$dYm+!~)T?q<fN;cUwm;weg&O$Jiw1u6
zZde*JjwSe4H&t6|0kL`c-L_nc0-;ohZnD@GEuO~ceR}#CM8k(cZ7(nt^6cwWJjn5r
zQCg{I%s*5Rky3#g(1#fX{v(SL<R8UM21_4A?@g9c%>?FVg9V$?JcRQ+5LEWX5;yAa
z*VUu`5XN+T)Z4p&pZgH4!)czwFtZsf**14SZb1Y3;TdJIaGM6~Xg|#*ySfT-N^W>L
z7{a0yGv>KHPucRF5=|21{d!fuA`(TUSx=OnviAz@YKqbh-I->oqXq##cDXF-T)!eo
z%ri-c;|U3DE@xCAd|J{U1E&Dj+qt@9dv>~0DdWFMb9KWuuF*vgV0cw@Mq`62RtcY1
zg@}aeQ=W^4i^yVtO4gPpjW&NQUdEou#^;6K4w?$t%@Z>qydRv%Go6LoF|I{{8z^SE
za|Nh9^fCs&-g#m${rY7tn5sn#w1&NDYj?$(*AWUqGr2IvQ?{UK>Blxmbh;N~o*%#!
zn^JU<!DYY*Sb4TzS&}983Y^5uRf3a|tpe6k9>*W<-dsi;=OXKu2xNEc8ak__q-1JM
zLD1}HaorVg3cirOk?+qgJbX&QzyrF_@t9F_{$;Ay)-563AFFh-uy14JQjW!CE+p|x
z-Dz6b_vF2uVj45A{4CGveUrHMyC=tp`;%$AziS7Wpq8mee_dtv)LnezyS1^32>Ea%
zGFO>j^0lrw`aWXzk1RBt)a}!kV|eLPul(s}{uy45>fdG)DWCl&m|<4#<!3(KByjq_
z%N*n|=8HtCqgMkPqE{JHJ@%FOR)u>KMSbKf)V<5xh+@pBr!XY;dB|i=t`R=E$NTD4
zj|zM%AE~2x(_k^G^ebz3%x%WJS6h=pcK;fs<BF;=-ORE8xs1AQn^1Dop!%7M9R2~F
zO2lYjfxD40V8TBxR3pSP#+mt70&MZ&JWfo8fQt{fXZZid%z~^+t_E2RE`l$u0Fj;E
zAM3Jo5&$1{l4`N@1bB#*n4VAoU`l~XER_Y^zgI*KzYO_$6ino-6u9YfEE+EwoBxYZ
zFCIQnlsAxp%CEO<{U{b54;U%`V(dtV$6Fw@t;C@OD}S6_HVPLyhQ0|Izdfelx|gGH
z*6fZp*~~X0hGEeHBx42s4hIw8{#0>;|C`}SKq|Wd^zvw4Wp+OR5qo;uyD$LVJU;Y_
zDFJ-1*HoGO(;o*x&$klFk5M`R&Df=TDaHc~5g+brL<JZ^+l1o1?gB8x5VhI*KEM#2
zDWV;A2pw=?DREb{mXPR*b#K+tUmTKIZ^F9)M9S)Q{Lle%*pGJ=!vV;0E_Hkq(Xyu;
zXxW*IiXQTStNbX_xfV!9DEIcl0wGw;EOKZc04#M$WUNb@IR|@w3W;gU2Sdj5?=1W#
z42103Z!8=F^d`i$=7FNzx-<y1vvbH#^*MmY!oRp!5R?_z308Gh{DsXRdmAU~isN3C
FzX3_`Q6c~U

literal 0
HcmV?d00001

diff --git a/apps/www/public/auth/favicon.ico b/apps/www/public/auth/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a21b640c1e28999dbec19f88eeb554710199c97a
GIT binary patch
literal 15086
zcmeI2&r2*v5XXC6MM1??R78X<LNLcigdiRy-t@2VT^{5tcrX|D6uf!WKS0Pu!H7tB
z7ykwk6e3|kgm~}=q7p>y^rv5H-)uX*JMNCVGszb8_D)Y%)wil^YHE5$sf^014<D52
z^Xk`cmHI&`mCyfsoKxygGnO+w=YMKf>K8NNJ2S_ysE?*GULzsqXVX5L_Lph8K@DB#
zL^l}TN)v`*)3iq6t)>SoV2VPY%%p1anspv*m5B9f7PhE*!5BtK_PcAFyAH&bJ16PK
z!Rui&h4{e?k)M+8Yac$ar{S9Q;RieS3E%mok2m_h8n-{VPsc5@C9mbvRtzL02HM)%
z^u)x3o|~HsZ8I}7y1TpEyIzx%lc9XGv$MLVr^m||S6=Du?bTabTiQo=cXxVaWkq*%
zbcABLxw#2teR_J**bo;^pPc^we!aiHABsT+A0HpB4Vg@)3=hXIFE29fRnMCG^u{$F
z1wX*R$vUuJqB~9avElai*4mI({K0i-Z*SLW^FR0@xgN+%&5r-h&Q86)zOJ92pDh;f
zxa|w-@?Y{&p-`xZe|~=6t`Y0xHi^NwdRM+2gTY7Gi4E8iMy?;^7+>Ktd>0pfpB!?a
zkHA9=k(Y?6w-7m-+~?C9*LXGjtP|HVHegRwN)mqY6*iD#qfip@b8m~f4oSq%IuK9T
zQ0;nX6n<(jYOye)c9Yl%_SAaV;LA(MqGk-%B0>H*|5F2FLs)%H?d;P<UZVC6<714P
zo!Z^U-x_c2TeM=}KM@0I-h%^s+V^kMzJJa;fVAExzz(JP{So-n{{9Xdcqf^bI09=J
zrQuozV<k%RI{5tV+Qap*X<Aa^2`s_))h=G&G5JZ}QF5<qls)K*^!>~W$XAs5oBkW6
zZs_}zD$;i<bwHn0sz9Il+H=^VuO2AyH{hQGj*Z`n^u~|kSMjs>odC(3_M>TU{7!4y
zu&kT*hiP%e6|#_t>`KI(xODpDpd*ZaH-kQ&xW~~Iq(<27+8};lP26*hI+j>#ls;Dv
zK8Q2UUHR3Ho2k1Rw*T#U_O}KG2K3n2SgDPUj=p-Y%zoeC;9zME^WkG(yq;@{J-F@d
zZGC)vTxy4hhkAK=S?6-OlI-E(VZFDvSDM58-Q8V_p&tF{I669dwe@*@eQozQ1;hCG
zxIR5SEt>}h{7{d6-fx8IM^O;Nd+GPtFNR)SU0FY{kNO_=vv<3*vtwl=pLTY3rtk0X
z1%d{{#>R#|KR+*x@uyfU>Zz$Ijc=q44GrmRHXC_Om<x~a(<2kvK|(hez#;@junKN^
zY^nE~3}TAd3KFte1NPj57=m;7Pb^8y)*6>S{rCpiU?4Wb2>tcGv#X>Zn<`<5!+!D_
zxh0sB$UWpB@hKR{QRJ%NJaQR1P3G0olT+QCOzw5RuOZIJ)%Z&qe64pDO{?*$t$Q<T
zAbBpShVi}5Q-3zQ{x%Tov)Oyu=#wkYALxgg`TX?-L1X;j+AX@JmuI3luM3HDWS5cI
zKj<r(orD9kt5C2z4P~ceKS0NU(N#1$(ak<Z&a}K~5%wv*H`9JIjcpEJT*)|dm<ta?
zAB9i&rH2PzWXafDdw6TnEqdzV6&beYKD@ZNXuqFYSXi*nDqUS&dTD9Nj!jQbm(6!=
z9vK<Y7Z(?{%#rWmr~xi7FYOrLWw|`TWA51}Cnt9P!^4C9-eYZTtyDX$uCCfzsjsgu
z^q$RqoO9Gu%!R1CkO3ZKf(0Gu3hH+MgB4;vHc-RK_b1qhtu9aS7+)a+-{C`Q6nx4U
qKCZXs3F<Qc>xlt)>y2Nofm$%Y1204mjwo^jv*j(AJ<wVS-hTkn<~aWV

literal 0
HcmV?d00001

diff --git a/apps/www/public/bg.jpg b/apps/www/public/bg.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..1bd49c47e1219a687d1858ec3dbba597ee4900d8
GIT binary patch
literal 520140
zcmeFZdsq{9+CMxPHCicYt6R|pqHDM6c3Y&{mQxtiN9ndowC=WjJP?(A7j0FHoP)`L
zsI*EGt?fcx%wS!K)(4_nYw!Srr8-y-p#~kdQ3D1X!Vp6a1IaKmym#F9`MuZm{`I@w
z-+z6!y}Xo!nfV^>`*VNp&wYPq^xkL}^4vR1|F9H^7!!fK4gVvfc4RRU@qhSV_$L2{
zw}^-sZAG4+F#hv#b&`nZkulFlNS==v{Q;39NW{2*-5dFT{)-qR89Q#gbi%}ECc!U!
z_Z%`NLLwP6Rx)nf*s<{2TKFCr`~0{UW+p5gKY8T_>2K6iUN1j*bi%AfXD<Khy`KhO
zn!j<!u8GgQI5m3O^xwWbd(Pb7EqLS2w-S?*7yrkSr5SJk;hj}~{L}j%eE6TMv;X{m
z{UvA9=8y973kr*hOEeX`_w23w<kNkhANu0UzgE|Lb@=OJe?MMtI&t!we|&rPyK|PN
z^B2Bv`{Bw}vi;hRw{4ww?o#*u`E&OpXHV~Ay3f_`_4xzr&~Pxsh36H4NdDK7{cB?X
zpLxL|M2s0bRx(x^o>#<}BKRYDe(boJ3FBW_xKg@7J^44Umrt0o=-|;amnY7e|K8xQ
zHtzW8nHOJL(EVF)cxq2)_P;l=UH`vk_P-|f|IX`YBvKLqn<sf5K@stVkLwnuk3*&)
zD<b~=*T0wG-&XK%NBB1u{2LDc9TEOJ8cwQkiMr-F5rr00|D1?7aiw1@=Dc^yo;BI{
zQN-ACq!0O7o8t7=Nj3*Y5tI(l$B|zv*J8gz-o$-N;GdycE+&1v%_U-1f85t)k#Pzx
zzfK|@MLHLXOUokVew*I~--~aLBGcg-xIbo{f?Ql<W982D2@7K}Q}|*0L9x_uEBsV*
z2p%JRgv`UN@GnJjN5okU!@WaKACf*^X6s*qM5onogJ{|p$ktqCuUNVwq5_^kaRwNr
zlqFYE{9$CCmPim6AnW&qpV{jce^WMQ0>hJV%UPW(!ngb#vaZ3!?L(ITYockF3gF_7
zjxp=G>Bt<UZcN!T|I_}8NVhWSFO>T2G21oX`vIrjoYXUlREmvbM${hTC}QqDc+g(8
zv6>x4q@r}25RqtQt#L<!)-BoINBFy=$Qn`gMh}t@;B?2*z8Xl5<9`wgBjzcRW}Q#l
zoztjsnrCS8G9GXN#wC0-#*nMKlrtNpSnGGc##Hga*padd$*le~V#Vtkv4T118Ah8!
zoG=s`!^*E4qZEpWX;Rd=6xTm6!}D3>YQnWHC$&o*RA1FLZxYRxcU_$8#51zQu+ii_
z(Vl6&nj9<k3YhA^gp|NAnW?twj_GTMW*9SZdKkORYmph=a+kG(t}iA{!4(nu37#iO
zPg07=JkoX;?Xq)Xi)QU}7;AXRkQG&WsDq`An~5MwnF3{5^U16vi9uI8%sxp9sHpTv
zZK-Z&ULbm!vn=hb4x_-#S`j)GHwB%YQBjJ}F^&;*>G8{SDx41HunQ)Ma?WqB%dw9l
zl$g<}z7p}+K?@(v4#p|`p&a|(Vd<2Qg+d<t6E{z)K#hu)7Ji67!OQFMy9D+yBIvi9
zY-ys2icLJ$du|lD+g!*OT|^3<_S!<mHv15smC-DxLb*OSSEe>BY-bE@a@u}(KdNFl
zY~FL6Q&FkPHYW0C%3Fs}8PhA|N2nc!?Iq6HsIq6mQOwwa?HENWume&BH_XXsqp|kz
zRJLV!giu`?dsQPg3(Z<?duilGJ&voCuLJ^~(z2GI%W67F*KuqQz8W=O=lDV-X_!Y+
zqp)_5{p6H*hO_WUR1>#D-C4j~P1a32#yLEFtqP6WYE~F@N32P+>{AL@mnD=-{IxZX
zA97PChZTuK%&kr57!O5LH^IVYsJ1Em4wj$a?!KDvu9Z_!AG?EN)Hq{Qq<D?@NavNb
zYSF^CeB6#?y8^;e?fiTB;pHC~vtE;@4=K(V&og?W<0qj+7}@&YR#?l%%2Ks??hIDY
zscN1#PK^5k`Qm>fQA*Mc)=BZ!DBP^{l1J&<4#MmcFP-gc?HWe%)A;Or+Ju3(zkYDX
zp(JR({j^lt;hctcv)rS@S*J?14+>nvWq)7qb(s5*zKqk+{3bw(G;S36z*T>DY?6mD
z)^eOaaoDQcZ1=IMF9V?oQp>huRe&)*dUng)H@?LvCYbiONU6<ENgL+}N0C&n!zL1G
z50d$^1SZ4<6lXX(I&jQpqRlMB)WsCWXw{vCOi-WpmC3B?cigswCZH>854B!apiv_2
zJ)T?5f-kPy8_ngU9r?B@Dk!Pd<R>1*-p33##lveQmX<tn@j&K0jT0Zd7J3ymU*!5K
z&XE4gtbnCy^Og|ie#hOPBNft?lt2uIXImR$N0CN5w&ql5LR4bwt)&U>+JM;7a`v}B
z1sK}Ga$Dv(?M<FeZkU!=>yprTA0LmA$A=^a)k3@RL6Ty=<Kh02qUW-CZ=YJ!9qHRp
zsuH6-HiCA1BWUtR5xLTr82I}nuXr{~XDoNw<&{2mc9MA3&8^|?KUd4P)9k=RE<k1$
zCmjQHZo~(jGV`iK`cb4u!?t$)W&c(m#byyjS|o`!&NrCW`l*&YO0T|&`Y5Y~9bUU=
z2<<6g%B>1=*<%x@Dx}22wsm`F$9nB?Awd@RPx9QeAFv^a{pL4kI3=lGkKK&!#iD+<
z^}_0pE@~YH=hnSaFK^Y|<4cDE;)_I=;J`zT%?s5=K4vn-8?Kw`=kRy!CBm?K`>(BQ
z^WB$8TTBnjW78Licq8E5!YHoXN;OS$4i35O4RTCp#Hbq^)%wKCX<b8{pV5DTDpb1W
zQAA1HKyr3zbv3iOxJv$Tp&NEGi@-NT@Rdpm7h4pv#?3`wJbk0cai8tjhRdGvjuEe6
zgRMTTY08?%oOT$#w4bi1=u=nWgPfpV^xsxm_1?T<4;4W2XWfg`Ezpc2xE4DVuzfs6
zuKUUwtJP-2l+yQp+M2d5z_O|`WXRpA#s`IrB!%}64rLbHcCT%)V}f<9MwbTQTlT{L
z1g-$=phtNeK_>-=I4*lOzH_6YeH^(ZN@lag2A$?CvT^%XVY6SnG=xa(sUvFRrTn49
zB=X!G9#xTM?WMAWzLdzp6mMs?cgQ+x-vWMEJnKWEc{EDOkl5k_8hSR%{6oB`OJ5&%
zPrwekI}EKk$K~ehUZmAkZdeq78WiJoM5jnJB#R%Pm}pobHOW_AO$qSd22eA@g{185
zQDpGp#;%-trMwzqg?SbJW4X%Wq?Dx3A7%2*;{E&?t5a!hsgQ|hP~2w9QX7Sd#~_FV
z&OUkdQj3bhRz&y6w$XC21@Hd(GYvl^9+va53b_9_2T4B@dO?;5yFVR+CzUs!4ejSd
zqHD|SqvFm2x>0w`U`o6U2$C+tvM`nH9*5tMSM&0>xJfn>O7omLaC{Vza3Ph4-6$Rw
z36pQKiMd*OFhnax@|2v|Ago2rsH*=FZSddYG&<szf$6=U2BRBAPED)`>PuLm*r_iY
zaUK$X&H1AUiWL`vD*+h>K0xo=09=RK_6YWZP+rF=!uP7MrdQB4D}%9xfW&)8$_mg*
z)2up_^2*<NU%a3N_joua+hR#0%Z(*2ym79GQ7k8AZDyA4k5{x1@0E@swfS*P#|7;}
zd~bJn^dfOXYKeB+sS^z2Aya*8#F!0s!bgW9hup54V}v(F!hAyogd4NoJwTY-XrL!|
zD&#i++Gg7ak8%8X!i+PFtuwQR)6eG$*tBNF-pzJV+TAnedF$Gd7t}&tNZ;}ZXSYX{
zT;_TLWdHn7_Uw+8_9r6I__x!Mk#Wa}S+zOkjGf}v!@~|t^a*HO9=^<J$|DyQALB)U
z?sbbfu{i@XI&EeX!!YmqVQtzl)hCew+CS~8lIRZFKJGQKW>(B`3L0I67)$EDYIoti
zMy-tD2-g2B7SC93EHtzYLc$=$+iP#j7+aB$zk%{P9n)xEV90q}|4_-ff}u**5nf%H
ze-vR9!Nj5ACj^+|X-swZqV7#CLYtII(LyZ43`@hGk0Ngg`2;N#MYYhjTDjR)LE%3d
z7>>2Ie*m)y=FaQKeuG-k>oMYjtw9J!Pa=eQN;=^3RQZj&e-dWcVedWtl9+P$eJ7x)
zjZb-xGFx+9M@Ny%HXA2iI2nVb5eH}Z4Vc#?#0P(ESJuFT#qr;(DRXXSONi5_9XYRx
zXVy<Xr!5J1xKjD5kQpu{WV3sLS>F`#J6BLVWVKngMCQBFFL1eFSLMHw{13>7B7RhS
z%Zd21Q6zIygp;ascNDf-F_Orvxz-2)>C`ClJ`z*j>J~L|A?8W(z=((99lWf+3*&BS
zh9x$0cUkiA*N$H1&M30_p_m>sJZwev6Z@8?Xmr2XU7gvC$y5a0fyl29l4k~ruO@3#
zo_SR$5m%2QZJ#7qL-J+MTYGB@Qhif1jacK6VMnQbL%9S(F@HgmABatvUg!f_KHPXJ
zYd{iklYwY3JZAd3FiX22%`iD_o=6$(fzO7ojJf#m=gp=0Oi;|)<#dHp_je*31Z!b}
zl_ACrhQo)_&WhdG2dsFhjfeZN0baMuz?}A+yBqL@;(e#H^_a<~HwK=(GK#3~67y&t
zy;XYq*{Qso@kC;{ErfA>v8+qbC2t|>qn+R=Ve7_^%PAJDn;3j}q-7L2fEg1;k$$HU
z;{wt(*pZ8Hug7r?dK768i|bIcEuh7wM6*_xIOU3E4fZZa{rCVexN6}}hEe33!;?b!
zA~7l8Sf`mYibOfedF|XvlT+JBSlK%R*xqEZ79M${Lrxth0G?*1)yR7UR4Azf)E*Ag
zg$syOfmL@0`19~ELX`2(k*R(m4Y#K5K&~x_EKG2_LOp?L*3;tIvILt=ZXgz+QHm4K
z)r7SUi+P!te>J|>VfVuVGC4n&O_nq!voU&Nt;R@HE?a>}vmWFbW$4O4t4psu9Z`Nc
zCdYPEG#c+aYdesXp`oh@!C{*Brz5nb1+|9yi|bTH%AkA@I~5IS>L_xpUrFoFjvGa+
zwy$AR#@PF32oq7K{-KH5CsAEAvGpzQ`}*TyCd?>uaPcHqy)Q5Hy^LBVA&edAgdZvX
z`BCIu<$2wj!sf<kSlIw8NIyc&2jH6)+P5fskR?O>yv=J<%#`W4qkDL-)DIyHLg^Pz
zrhA6%CKZVVH>d-kvG}leK6n-oe~pg#1X4f;?d{=y8lJ?Bj3V9q|DKHqsFiA-*++DV
z5e7epz2<0$&}!CjA=l|zCl8F>?g**hP6lf)Ikj2NEc)H}U$Pi0*~M`=`sOI~OXRhm
zs;b!7GY7QuJ?Z0bIWmu2$gzZ+cLDdsi$f7_8g`UsyKr+)f~OA|h_ETr>6Q#X-6SqG
zFip>-7$0C+N&ShbI>p=&mSxnU&$gx+TaMK+`r=!qMg7{?i$kC;V2@{Ni+M$!k$6ur
znCLvbu4NtCP`0eV(?2iCU7ItTF`l0>Wa0|@5>jaPmTcLfzWEf6Wy$&-)%g9HSp1eE
z`k>9%mlyg;z&;p7c7@#-JJ5_q%}WS%WjjKH$?=TWFE%foEyv9|M<cd+V?TKDD002`
zUXhK0gdzF;$pkBG<w`0|VU^ExTB2lZ{1q@ZvU3oPBP!QRt62e6Jlq9j0Ig(hmx&E7
zv+{hXj7}sic~`ZVD(n050zf#2<r|i-u=ILBRW!#`h(!D)FdEzisBkbHNX~MiVNd^d
zsX1h&1Hz`$SQ{GrxZ#I^G@N$fKb8ScxEuma0vxJe`~rJ_ToDAYJA34rfE5ttfNdyS
zRTSGl+thjI!`C>C22%|RzrTbT1G4L8m)*vODwAR`bkHrT@0MeDms!}khXhx%^Z}<S
z6PrQYcrw|`6V{z-hyNx5!L^C#W<{ODe0SF#@;pPTjfrB3Fc(wJh|Kelj7u!GrkzEO
zz@$ySxUa5pkISYGdMW@vN7SHd%1%HGhLQC(O(Zk1c+BKeB(rrA+>EOHVoBFe!SUr4
zK@9f`OHvLwxc--A5T0g{dG1<aP85N@A?P-U8r=dZ>{ix7eUb<YE9-ozLvCh6Zea!_
z;J9<21Sm~?%LXbGsnz;}MOOL`qsX#Uh%0S__mmLS6adS$LgLBOkWe~47cI8!BG#je
zg^L4H*5MJ)4#=&Pr8^X+IDn(f?QWNiht0sV`w+_q!e((J%<TuQQsQNTnh4O`lvdjf
zkl6+W%?kOQ<~Ll!=)4#@dgw{9)yy#WR=h?GmJUIddZ3VR2FPHY2QaF4xKia8P?c|v
zjNx1s_OyIM2W)pOhF{%3W)vv{5NagM2gm(p*DpESsz#l)`HcSWNQ&%-oaV3(mXyWu
zdHN*lGCZ4-AD5#pQC{?y3kcRq%xbq1NlsTQXA_%sDu};dmeDcV<ZL3*RaHnc%sW3b
zLV=$zi&EPd8%j0NmRS!EJ3tfEl?tt~oKbv;FTCcue5>TK;d5}`*r5oe)1#Nhewtct
z6pd#o){HURc1^zL<nn^FBCj6|nqr%<8ZG#u@t;nYK55tlo;BDl>=fR2P=}+iHZD)p
z4BwnC<=+ZDP;q@%Aof9^^1lmi*U-iZXqR>rna@M~nT^wZ<5et}&IZ3@>)C*6a526Z
z!kj_3DT=s5tij&ieiLOVF66m)1TzOC^bkD*{3c77+h>TnYKe&5LanBcUKO<6FowHd
z7kTVPhkz}-rDW1SriaB{<t{;)*{lJMd`G_tOiDbEUCSO@FY^m|9%0UDX#hA#BW68Q
zH#S<xgDjpWOjABYj|<r9NqwlW?!qV%Umw1XuP|b5d>}yD_HAGU?6Rbs>eu9n89K+F
z@b>670&6G5NeH?astf$To;09#fv1or`HfNJjqM$4vAq}yfi}qli0^wY+XmNZwrj)>
z7r=`4OqKa@v(r{vVAX(YJ(075_WLd^whFdHzU_+&&Mkb1&T{y9nab}1h4Q1Rlf6Uy
z8Bv?E4-1<IkOwm}II_pd3)(zE)06Yv3>Xn3PRKY3`dKXtEQUA{-!mrLv_U8yW+)eD
zlLZw^Xnq8Xw>HPa!dyVI375gop8)j6Y8qdbnRjLz=Xd%_*uWFTTpn)5mn}jwQzBqQ
z4JgBPgrBRMg~?5$$cckC^cEnlnMoIqz#cLCq-Iw5aJA&|Y~af+34%rwcPyp=Ny)du
zPV`%C++aEddx04hMEL3LFlDZEFI>r^(|<n(_ls&#I|p>CN><%GGDKSdcRTV9aUIh`
z!YEQ#r@>a)%vnu9SF;a?lhMCN(~3>^BrvkIKvUlN{TPji33;OKEVizVZ~xshzu2T@
zsx)9Fdef0uPKVie@r#JrDiZCAxHbP)vGrU+2Dnn&0MN<+676D0L}KtIk;;<@YNIfQ
zdouB=*6$&shg=n%`TcVNCBV@>$-=WLKHs6?bUAt<MQ#g(3Zk?1YEOtJww<>!_ko71
zwsM<hIQanQ>{sjW=MNBOl<-DpOBq%?FaBrDj-{Jnw+0=QbHn%qt0L$LxDEwJqRy6p
zmGjSmKlx(~<kRw=^6RPBuvQrcp$E|3{3yBy7(p7{<ZRp|!(o8DL=Fz$OZj^8kMV7O
zkN*i+-r|E~Fq~xff3rILn6wR`Quz5*qeucK3*S}dtq1+~%TZ(n#7CEi+Dy~x!ZIS5
z?-eqx`3x{zu^EwfVR9%)w(-Ke@!C9x?fx_Aa;Gg7)W)nju?fPi-y<$)Rpw@CE9q9$
zG~4`gnat0BYelO&3hTx(A_h!=N|(BX`GFxQQ>IU8l@c(hM8$|saXAc-L4%yO*~_#<
z+udqbc>P1jE9@?hs3VTZPe?<<PJ7sGzS)nhL(p5;e0Rv7E~Q1?rP7~-0tBMytumPz
zeqjw?i-&zpNPmjDVmjmtNkc=x9s%`WvT40#3U9hJsKHo5dHh8_eUUUMYcqucV~ocZ
zt67(Wa522sSc6d}fD9CW^j3?Os1EgXBxs(mDnw}ohaJoaP2!$J5Aos=_5B<}n=4(K
ziCX1!U`pg11ZKI$5~Cwv5!=T&4O#aXQt1zBeBkIkW3X}<sPNHx7*kqpBsap9mcK1A
z(cx8G?D$;9>{}lL5u(<>ggVBQ>QW(75o7<rT&sJAt@-|!8N4GhfU99q!kjV6JRtc2
zK4nlLXyip;%Rr^2UB$7SR@OM*cqF+LA9SELE)an(QkpCqt}3%hV%aJ_AF_5?e@pkI
z5LY191k%2`HGYoj)dH}mhtB7Qqi368KTH&EZFnz)t@%Xd>Q5fYG1Y5)if`XF^KnLe
z@aIT$zF}E5H@QlKD^Eg5q}tzvobg#ol+%53+kM(VnU#Y#$J_~P=%0NjjN=S`8&!|S
zXPw1V+kteK3p+2&gVAO>szcT>1}Jp0!F{6$#)j^xz`&WW9q@r>FF~!r+B6<I&z1%?
z3$F(%B%r-knpqd|H<$U#J#isOm1l>d@E?!BH{t}Mn`m@U@5`^tX`i@pKek#1rB6ql
zZns>ug%dWdnFJu-*ez<nrEk~3sCy~zR71E&z^sv;E|t{{ak>SOYYT^Gp|ruoyvsL6
zH~<R{QjT-up@hG-a0pEC`r+4J*_+mKkG0Z<w%C!|kR~rnuz{bF7^zSY85nZ|!pz`g
zIYq^K;bWI)$@lPAAk6C50B@S1(S3n|087jh@f&L+N0HYmy`G>ZCsiK-!3<L!ZdwoH
zd#z%SS8hwHpX%Uu$7)6}uBlI2k2XXIST%dX<G&9vNi?>3k8hBMxDl+fJA;2K*N=!8
z-JF7{j`9By&f?Pq?8uAar2z7^qi$RZvT{AhKUh}Xlr^;Q@o?EnU?(v1-gg|762k15
z{fHcXZh*@v_HlwN7Q&v)Z%5yGU&e5K3k+5cUxBurB#(o_f(O7tB419<p(x&&$OJs;
zs_)3`{yZQy9y0DohOh3mmlKDsVsU6(BD(TnwFz*_%s!5`o{53IXXwtKLO>)MK!99N
z%0Hn|Dj@!G7pxHwmGRP$hq7B-%)`&pQ`Q$b&qL-TF>7E<f<_`<dU^@93$rSStiTib
z9jG*0RJwaKW%^foyXS{lA>E}>WDin<m60K_r89Cd6&NBhDz@}5HNQHQu;-WAjx@%s
z0@WXOrLpX#)NICh<R2wn**1$#1GVQ6ru=60mN5|&-y`3$L$<j5>ReAQqardd4nKEH
zF(M|CV~hIL{DnvRRks|UiBHO64Or&x02fEg7l&Gi+aHYZWov7PP`cA=_cHrXb37wP
zhe;4_%Jt2a;??~8P=U?Xw7w`HVvPw5&_-;{9=GqQmz^d=GtjK`vlNHfP8SYyf&!dx
z+gT}YVi{326B>2U9^CI*j<pJ4-a|m$HPR4j01#mFO~OuysFxH__lmdDJuv_n`eZRy
zrdk~KpP7a3Al&P2t2FbHF1DClri(3cr(<h?_0QCz)>w4W_>>)`x923-ydu_Z7)Aax
z@2SNHJ6-{&@!~EA{?Yh2g6394fFFdc?;scv8s=|dZEw5;_ocexZ9GuVW^6SWYowfp
z8CSY)A~S*L!qo7cy0cQX8m>$gu<vW6u^|@FA??VH&G#g+DDH!_gDGG#F9XHj&tXcD
zpwlPn^TZOGh3i*9j)~Kv+O?!iYU>nR9O8wsG4K&M;Pg}AfL8840<wIV#JZNxcya%P
z1R$AfV9w?y3B*i5#{d*QU^a?AOBgdg2{%@0e%f$<*~(nt*v;d%la^e6aOHX?G+qYk
z@P15H^f1B>my#jR67V7>5RIXJNFh$Hxz5?FT>64QfF;dTiz3PW_Qoz)e4#|j$@@1;
z)$`Eyfnrj51AFc4xGN+CeZI-bJS>X@6#=(`7rU2~Et7fqGj7Vz@CvNdsYyUEF#N|a
zEil{;)ZDqO;P0T%0UqJ2p~;EEP&4Jd839ZBmLH|%S(luKW#NJpVSXLPRc8~G6z}J3
z(^h{Q{R?fNP0|R(LPm&1Pas(Ac@K5asMXG=LVwwhU52vUnwBn|BE^}iiOVylWcwFT
z^}+>c@bO~@c6<8K$u>u4+}je$r398*Ins<2VuGqmkycy!2ngWjCdf{|*W?9r>gNYB
zt~pO>Vmsq5gp1yNDN`m<Ku}L%S&LvR@{GxGXqzdVlHG?YS~nEV&~*5tv;l~ys0HqD
zP=6$+SUYyHBSj85sX~!5vLg0kkp-%JN5SlsKjhuU9T2j1wsCgwOteWBBGI0aRWhbj
zd%4`OQ>R*M@Vk~=5%T#9*t#WgEwzDmaFN7zeoi)sZ1J|!f7c}{WF0b-B})s$6K7Aa
zn-~JWQKS^r!;|~tA>)I#1)^a_Q}!SSkHCM(=gQS3R)TT`0!a+jydV}rEjKX7Ntsf$
zSUc(rr>rx;^J3H-C;uVfTmbbyULI6O!T4w})+Izk`rOLCDd0=Z61ZczkUvrZj%_Sm
z_4c@@F1}};yeg`;N{q?DZLt^qpbL29feN$9WQud(JJq)47sL4{g!teL%$g;j%XEv4
z%TuHP6e;@_()G%7G6gB&HT2ywL~#Myy9_>*3)VsW3Qe*Ml1_%~wmDAF`!<Ke?0P7X
zm>@2KcKv#aMjZ?Uu3)Oi0I$E+?Fw*FEe{0kd~WFGD_GVpjJj^-=hf{fxur;IcU|im
z>Q^L9Td>B<W9Ai+GNswPwxHE|a?JjC28wGnQi+e-A<f-(%&_)Q*(OUL?DD|OX(YNf
zr{Yi`?w{z&Ygb@_A^*N|H8Ihd8skK7<k=wkh}1+iH)~PhL(&$e8Y(LEsa{ivXy@r_
zd;HdABQHF~pdVn-ZzPZ>__QOHxtYR_lr!RAfmc0RpKWpW&v(=-3wW&ye)GT3YBu=n
z3~xYe)@rf?((m5o7dKthhDcv~z-8kee|Zs>4a_lH@vVzo8z<{#tn|$nWi{U`zBQ=o
zQLb|hB=7(AV&uvV<DQM2`{ANLhAlJD8cx`&pvoC?Tj|^TH9#@3!S7{$PK(N~yO!*g
zhU8|Ht{V<K3NyR|_c0Y2o6$>V9T^$B^1W~8{6f1eW12DR38?!Q&v>D<Nc>MOKT+Wg
z<}IxT+is*-ziWGD6RN6zJ5ETlHcD;33Sp`*zw4X91nBc_hP}){Ys_880o~Wb0oum8
z^rJ|9@!!$l|0V1s8pe?*{umQ-d{eI38b^@=Le7M9-u}|UTj;I1yL6xkct#OKW##?i
zf;AkUx(5vB8{sWf9>#q3ya!;Vfj|>7`ck~$ajZ4B0htjd(k7bgcrg-7wN09tp~OhL
zE5N^=bSxYQW}Nnla#M`|;c?jUgss8-c9@2Nh2XBbvs*OTaX)3q>cq0jw+BFh&O9<d
zs2Lg?uY!cqC+0&_0hmO3EL8BmqWP*jAIAHm1mFZ#DpVyPq8S2mB}D)i*JIV#<Nu0a
zTu-zb+UBo6P`T<f&}1SU=<(h#i%}i85=#gw@tfbLypX*sjS#lT+d(@(+F+0kx(yJW
z1H2VmBy&EwEw*@CQ;B%+i(nz2(Op3j=94BL^e-&5!?RS1lD^U$ym9GVaEk_^NFHb{
z;xxd8(Mm;$DIBsd{g5I(IqXzubhB!4>oiEppAA)l#P~knI;L1&-OV>QqmdU?obRQz
zm@&~!(jiSYtTrH6-FSs2ho{ZdAd~3;r`F8~XYY#hlGr3bygQIG1u<oCD#9n1=3RUI
zC1JicFy>3C{?hs)#+rF4$96jU5zqrF^d!PSx3Xw^SCO04K%XYudv8RNNK`L#w#)~j
zlE8bZ0H0xNkxl#BQO%mz`{N`o${c4D=EFi<z8SZ8x-{2T<-~Ju6iKMD06F5t%CLVQ
zQ@f3VzEmWf``+(^T0cDO=v8T~R2_gugkiGbHE5*4%&$})XmaUwM@EqdTdI&e1Q8%4
zss<;tUj{t?3_y2b;DzuwdjPmXuHg8&Yp(OeQ$g?EVo>4oKg_~l@(I7&3YzWiDQi>=
z-}(-uJF3BSg(mwx$68JFk}^dxq>Bcne_(FpqGT~A;Bk>5*W0hX_g|m=5<9S`KynF{
z9Nia)aI8v9vZgwz``Oe!WZkh^nROO)&*`*t{7ur#8W&XsreYRLj@@+VevZGwZHe&M
z0_}m}zLbDd(GQh%D;*TN;w`!BwYuF!Y2sNdi=fyOL_<Yb9tu~BJ8y$<rF+8h;^J1u
z6*R(wj1J|==ZJ2{!^9KT%u-QTakAB#u4ww^MI1J2bLTRNUD~f67>`LPQ@FNw0cb4H
z1kz&iN$;sCzq5QdNK#_U#<Gb3;AzcCvv#G&UY^Ee)Le<s5vn}WoSWOG06WF*c8!&d
zA|HZ-iyuCj1Nd?A^rZ66*ED$?SIb%(OMRQ*vze31K^VjEG5aTRAr1U+4@O<#vSMLR
z*IGN$(*r=a|7#+7T3mXB=n6Lztdqo!IMHsH-d(Hii-sV|_>fj6z$>B1roOqef)l@+
zx=A#CHB4LLnwO^O+W-}=yy7ko=^wTN%bzu6QWz(8x6-_Tast`4`QEF-N6~IWZXSEt
z9n}42Yc;4BVTugt_x2TPJN#hP1zoPH!>6zVdwxzRKcv^4hvkiOWX`p7r}wnNzq8Gj
z7{fyDwuMLgQKo%`B7r&)ZKWB|vEKz05wTY@dgjC&NJ7iHbc-1qWtwuERfP*FDl<D=
zQpu266ZjIhzD=LE96S`Nc?$(tyEP7cTe3I>NMF`Q$hCqq^@Jfd*+5PkZsiUaLbJ|w
zzS0lSS;SvK1aziB<&9O|-oF!wPzR{3Xn?qu-nSzobW2L0J*y&MWtl3dF*X~v8EcLU
zpwmh@s<T@7a2bFnlM{j}+ez%$zyO3CP<i5sW%+J!P-t26C^_JvRH%|iS-*H-AnHhS
z`87JOlIyXF-@zWP#NK`UR`fJTpoTow?x1&7xJRsGgJBz*w!L_mlh<oLhfN`r!42E<
zY(~D6i|p~@nU~bp!c?XX{ycm+B4BkH?^&^<NpTO-pF}hL+Vd>S@)|GHhY4lVir3ZT
z%0p08J!m|V(YZpR4noA@id;e6_|L{$rf1~(pI~vAZ0An^{;FQ6mB<zc7{_d=Dt>J@
zKt)5tJs7Vz<A{!don^%-4gPR>SXd)UAHOW!Davh@ZIy}q2@AmDx;D-wXim?_Bjw^T
zL6Mw&{$`k2wwbq!1lawz%P-}`7@*<GYlX6tPIUs}R=D48y(T~H2={y^_nsvTr1$0E
zOK9tR$Mksh&H_?V`B)KL9^RL_y<ZMVLV1QvjW-a^7s1AFjPJ^Wf=8ZJ*E+b#Qq2nS
zjQUf<;4r#YgW($?QB@5-a^Fh9YKMo=z4QM7Rw=fuhg*pgeic)0OfdAigJ6AcyeWs>
z87`UjU3uLvFh7%24>AsONM6~JUMJl?pK%%1#uT{>+k&jA7bEW!if01|Ew!1G((dag
zxQq(ngrC3kox^gSIx)#bIiOi5#}P89*KjRBarOqr0c9{ipG>O%zHPD(Kr{0}!-)Z%
zs%MzP_J9M5Enby4p1A8M%O_R2{*a+joxT}L+A6*M>xETOb-qklu8v<X#x?a!WoeAT
zepstbAZ=+iaEd|3PMMB{ad^9!Q>7z}ODE1g+E-d0wi8}LD08VQ_OdJByeEZEY_WTy
z`Gjk3e5bxNqLyPH<8;#%Piwz2#(55{Ug_>+vzisJ5vN4?g39dLY-1g5#7_*A+)B7>
zxCkEAy$7^qv89VNsZ5VhYi7wYHoyoo2(~YJ*bV*b!?9%U_1TaL?vBTLWZkxD(Qc^V
z|M5#mH+3kLF18HP-n2_<+c_D9UVlnkD*u&T<}xc4DG<JMZGO`>Y6NG^H_(Q0l8~mr
z<<V<3JCfDA?m7Y#$1jG*FD4shX7ehsbepwtju7s!in@^uvt{p3Xz#&hXtFImrTIhk
z&;=Vr_wfoPNX6LYDY`gEhoRSIX?{_A*5enFIliqfJJ7@FvK*OBkG^pXIusXj8Ro>i
z*0@WUKEVoonOELhvxXhG6rk389GV9lt|+D|U!GN)6X>7&PZl7(Xk-Mu!_8^C4gLcu
zKux!mKK`<rrHDXtp^Q1v#Bn$YICl5Ti<@caQhx5(G!mLvDot4r>AT<D4V7RuqsT4r
z$$JRXNt;z!0P=}L-&i1KNV%rjuw6Z%uMJzXuVN}l!!`>5n|mX5I}3-nVXNBiT2jG{
zh~D&Je(87x8F~cLcjp3^0Bo}I{`R=gkQ;AI=m0IY|3{1pgz>P8GqA(`QE$8P)@)l9
z-S;WrO#h?o78wyU#MpgKZ_Jsek#?aWt2Wzat53m6he8FTdDg)VpdSbyL0}4Quxm@A
z0lw)*EUS6*ekiXue*JuzbXFY6b5+h=%a;?N3u58aP?Y7)ARi~Q1L*u)n9TIsN`GLW
zBDa@ZN!B^jE;;3oCTSP}!qEwA-L_wAIIfiCee+6E<G%P1{gq9{V6LMH{26;~K1+6U
z+s9bg`%mwwyrPDuM@Mr8UBZE4{wZ83z$z|cHM{>jINu6lmeqE03f2a|4DGxk&<W~h
zG#yQUp2RpTxzrS`0}^Y*;}W!O?{EdP2HjR48BNbV40rc~hW`Or`BkT}$;k#3C1Mu;
zXYmpTqBU&Eb`o7xoBu=_Tg+=w>3Rn@LUixGns&+1W~$>en5Q*~dxc>~3~D~D2>ETM
zGowgMZQytxFxRLf20z28t2XX0nM7@O<EHhPHAX)lKmH1gkD*UbNS~3z<<zHaS0r=V
z&1*y%Yo|PY(Ad40@zm<1Rcg<Yv(SdQix|i8WZ1QtKa<`1x80!}i>)#7=qZPfX?gG#
zyUrp9UzGT**xL0uW=rRL-vRujxO^7u`g$;)sHA{|P@u|os9e{#c!IgX6mxLqmuu_G
z|NCU-FXfDC#9?InA}wJJ37aB*yi`Eyj>Y6#w?KbWZ@R2izDj?LSQc08v{UC^&xJ%V
zzGjkMN?5ut%T)`@@zvNMcv?AZd2h#9dr-H#RPGNXb;%77uGiq01J1}Tv3rb)C|QS>
zY{b&${1$9&P$;suZ_j!?Gr2H2)q87cu|kW+Jk?I{m2XxR4QO-~hZx?Fxmg<8c@~uE
zbeFM$I4Yz#Yvs0m;E2p=9h^wn?g?&-w)S3KI?<y)PXciqMdl#^Hu0(^uQjzt-I>?Q
z^zlDR^eKi_fjCHSQSZYNZHo3f=ks)qi?&XieNYdXWZZ*!Df-|2^=D9g`5(}bHld@4
z1SL0V!5UVZTsS$b(HNVo^6ONEHTzvKwNYd&3hg9_Ba;wv{ZFfF#N(M5sswjHanqEM
zH5jvXF{pdu=Tir7X^PVB%gobmu3ima^ScFUj1$jF8UQ}gLZ@ms+f|Gh1J1+^%<ksY
z<yF~7`Qn=?ka$z==<{usUQ%UFayj_9JBF!(VeQYXs@}<p4Ru`+a%E=1WjM`5`nN)r
z&n4`9BB$7%6uH5PFSgYV$7HvF;$x?=u$%*ZbdYec5?*-yqXs}m-TRu4<l!R==9=va
zG+vq2LO7Sl#|ITf=WsMQ7lWZ@EpqpGugML$Uh*`**>2+)QFl}*h&a@N;iTR~91Xnj
zK47{ASa78iJnT+eScaGBzCN@LeZ@oNzG5GIZU9qe;i@cIHn+WD7;DodPgtwbIMakd
zO@zn3U_ee`X#c|tdNNhR<-7G$Pr9pUMaoaU=^}9oAfdL1=Ac(_&=mIH8V5^JTB1QB
zzi!@^tclb&t3%V#Q<!Szn=M+{4d3nW_jqtJNo+YH-N0SMR5fn}&90)CTItTfEtw??
z>iFYwnWjCY#OGn`gNd*j9X1&wN}!E_wlRyc@FHHutZ2&Sq12KfYX0<FK^LdN+Mv1$
zfpU9HUPm5R-k<#EA~b96KSdO0b#*U4Bq}qZv?4P*A+b<0jRf_0>STGfImBh#e8;ML
zArjcRk+K!d#RC(g*?@D`d}}J*G8b?OcEtYYsW#uUmz<r>I3rnW@LOX*uWV6O2mV#j
z+qrv|3GEiO7e?}bgg`<uAtb`}xhDHO>x6?Zci!Zo^}I5q;`k-Ad}N)qUh(NHzU0yV
z5=>PV5m#yO8)d2M{SN&XKV$V5H6k+40GmUanO8wbv4mLx(e)Xr{Gn7gZQBDOk+}ka
zj3-u}$_*cZo!<N(vpNd;lJQ(&5}aIls@y7TFhFXn_2%2DLNQ&RcPokK^bcJ3ieM(D
z6SpV2pA<V|G)_Ong@%Q2mQSa$g(g}|1dXd8Med(=Jhu~vY_)(mHSelsh=zt+nY3Pg
ze~4d7G=TB106muB)-UXd!=BR$0+~yu{uO$kpn;^DzuE=ehg-avj=T76A$AyAudsE=
zpE>P@+=Y;37|%BJT6E1t7B;sAN=BB?C-kFnj;yc9)AH3|pXT6HP&<?>dIB-|JXWph
z9oU>`{}UGfL!_qrjbB>dk#s1ol30;Mrx}H0U3wIm*<5T@6nE8T#}s%v)a{Zl3Ov`W
zxvhbI1=5p~`lu}S^W^o1Y{8bAp7nuNeq=h-3rP+-d+$qXOLsv}m}9a1fON|~^HuJZ
zFk)-piU1CKj7k%(!kMv;&@PvdCN2uEvCLA_T{Y~&F|(Lr*q$6dLiMar@-cv{yth~Q
zSokQ#h#51n*N&N1B<ub|*eaBG9M+E~*`7e<&q383A)+#qPy@Plup}nmv<<Ai7tZ5^
zivw8J#r-_-TuMIKh$@dmRe~|Ir{RIyooJm^{?%34(SX}J#SLep{d}dM%RV!ZS&~F1
z^+^HQ%+jjq?~C6-iOk%wQFkQis^T9A5_hS<sZYLBB;ujKRJgyYCqAoLhSo4_AP{cc
z(|+GHiY&C(O_N%-7_ryhj!pvCfEonnhB8T{?vl5|a3c~Y7hvnaYS&ZTMjb|<^z;`G
zd+y7^(qDX&%4?-v2i;=obaQoAfEfl^O~e2~3d4Fq$SJ4v%I5cMTd^+a=m3(>3Y%U_
zoR!ML3C>2$guP=%;~5ZA7rIQxU}fi#nH8zB`Xq8&3G=61hI6Qxx&}BFJ&NeWV_pGj
zOI}A}mu}tMH6GwC%@v%($B&ahk=6_wR=?S9g<F~N$EeGJDZkt!p=_}Uf^?Q6?dlPt
z@d2DjnF@O3Ke1&A_r0RBUg72NcP!i4&=x|*JdP!Br42XDHe9dHwE|wWgQp9+MOA?z
znC2|Kk&K?^sm{F!UBGa-$_CvfsygwjG-DY=v@p}-Yp`|jZ2#04@KIV`890gExeSB4
z3$Z*X7K`hIi$$q<t>261W?u(E2zrO3tx8u=ZQrGRcER3r5OW=OpR^9iGm~RD!zwbf
z=GKmPpSFKYflxyzTPL8Z8(dCI7giR43;^0Y`cMMS2tJIS7OQw&8gfEmr|xgz=Z%y^
z*==WB&^3=9a9bNv^2HV<*AE80j#!S~D2}`DOlwXVlAK^U<JmQ;AQqHUx;-#*0K`2%
zmsnGWX^J0-JF+~c#Q>|&a0kBXACA<0<&44RQ%$7pyZ1g>2k|KvUC}x$X57O!7zStU
zE3{cXBgC^<SNKl8DUw?nF2G}%$ExCvj7w8N?J!<|y?+={?5gS!N;z>>bUPV4uK{#x
zFrgYVE$k$-9R~6sX=;=b@~49AV@Q}(@btz<*}j;lhxfgDO{wgA{MGPKy<mF-FDJ*y
zSK+z}lgW3vZ{k{l0-hoZ)-~<c#S}VQUPmN~VshKOq?vEPQ|zpqg<ggx<u=D+$5BO!
zM32aSEWzf5rI?*$UaNIltIHPqj||H65+ZviDGbi`8z=;cz~pIABlMGt=JVE%b`sS}
zW}UdG1tJ3{EImkpR%TsUj{6_H0o><1{;k*_X1S=21M{gEO%aIZ)0e|SDVg;|uQ20h
z?6n$qfJ}Qpsx<GrK~ve_Fe!aLJJ+;FJCZ|WTXkA(@}W#ec)gj-3c~CVG4uU-X2^w;
zoaUW6>3#ad*N(g8+SCfLFt$=1@Zcuf@s|N2dd^ODxS$@|8h9=;pH0oN4e}FWoBQCf
zA4uS3S+8pXeOj`vXMGXB<fW7$H+S@6DZU<UzbZBPp>H0d6xF^=&2u{3+LTtiBXV9T
zW-w=|Z7`6B&>FR6OaT|UUGc4ZAdPru`Ai2G#i^R_=;^<l4w;I+5?6Y-GXiUelMfTX
z+W|#5@<jOUGW_XH5wyjUMVdCgE?qVf8CAO?qF>n=HNR?zJeLB!Vq+H8zM#>nE6O`^
zPB_icsd4J1&2L34EoR-&8FRmI+O=8IBvbE&4|p{GRRUsEqO&&UpvP5lPmKNSgTn*O
z7>eVEnmckFCrDL#N|8Lv6wT}_bQGLxP6gZvb6J{;k}tgM!RwPtxu_k=3+D*xZ$!7S
zsodQQ%&Oesk1*&+DNeJ)F2}CbaJ~kRdJzWQG(?vkGMV6jR;*=NiSY|}NZ0&ou&gYf
zHWQB(iL<NnC|AZhES|A^K5{j_UYik}csUO5)UA8nEogs^TxE}D-Bc{RnSixs=D`tX
z^Shs@23aXy*QXJq+xs?Q0FWgGlR-}qFG@p#TGVKS4*)ZF1!C{9&J$@57RLP`rUnMS
zhw>7{FttXMc4FKoE^?c2^9=!*TivioJYUS|w3XP-DpssNg0uaykMlzu1E@LJm*BCV
z;GE_<)?;gsQ!bkryYo{U>ky^A-;{<@0I%y8rf#1f9Qo5z?f6;nfSN)W41a+Wv&*3I
zJdw5;wL$W>nFDD)Qe^-6C9P}0Y~qFe1~d9;Yfo*ylk@(un)Qhn`zw^-@%$bq1=Xvh
zo@_qv-7uSl%apXB!>J-2Az+MQmHqH3t>aY*X9*Bp`>WOu50RbQ(@Z#3AA6|<E5klG
zjazL^qDtB3hmn*`$681Bkl{om+vFp+tb!$Eng}?Z6#wq{B$_g|h&<Fy;EWQiq=_At
zvW?)2J#$op!;BRqvA{9#H8Yq1yjOyYB9&@mtC)^uDO_t7?mWk%$2$w>8*6t&@E7v#
zgUwz(3BP<@L<qBrSbsH->~s>#a2IGH-@MC-=b{H<B5X-Lc^<poVT$oChgU$1Y<aa}
z+Eug~Gh=}2VXi^(-#gDi_!63ltNRP#cDH`;g8>FAw|c~qp*Y8n-#DlTJ)rTKF@}wa
zaJLVj!p<F~MM<nF_b~jr?^j{);!bCKyELG7$<5Q)$1qz7<)Mh0&5%dixqEA|O4YI)
zp#SeYZEb*93ZL&y5CPOUqPqLRaS@}sP{yw-g7zed1x^xs9Z)1FKb{lLik=qo1Zla=
zpGNj8qB3T8<lU}*4>LoX8vldc#*eK3^GJ_Qv142uF#FKI!kTVlwo%)3**U8Ns}-kV
z2J1HG2!s`!3O%dPR{HrSF@FHe7VW=m=;i#k6s7rB=V|-5G%xXkF`aV&IL2txOm?%m
z*YNnTcuqXqC%ew|MLUU>3{$ps8(N?8B790jJit~zvk<MECSbzi7)`--;B7X}a$}jg
z+=$a@g4f!&`3*sbQK6?PmQeE9&q-npY%DHhyI;jrmG5e~5262NES4$!V?GHLxxlOT
z0GuZm7Cp)~CUd@Iz4n$&zD)g8NXl-yUn<wlZ|xCP)ORVGk3Im(a`CfSP#?4L^uE8s
zW^w|U^gRfoMrfa<31ao~oukOFp|3NVMB5FG7!J+S;e?^zQ9RL*)nbHSgTP?}!Hwua
zTNe?~7Rlv9iTVpUxH)#<!7-M$*Os!9^Zf}o<ue^BbUCK<4ZQrYIkDYsBxr-}JBdit
zZ}_0*qhHAJ$uTF!`fr!X$r!KgkS*>3d1m$r7m(`~j7pz+!l_8KQh|W8{PMuF@o++{
z@!`5HQe89A>TD@?<ByliL0dpkv|UoAw(IjQ%NtAF{hFW7;S?M~%1@V?OpD3P2O71l
zzL+6bfy81H<u@b-=oGf=HG>J1_ox_Kn(N@~C!%6g=-6^kYix3k{(f92TF!psGCR1T
zhzEuyXG{7lb4)3&W_H~<>vLcVtV<JEJ;SNUm~pVfPYtGy<eY3j<*vV|kgHz%d5gL4
zLIh6PXX|xMYgtBbs**nVZT-)=cZFX=fo;{}6iaNf&giro%L=$xHp6=e`euiq>rcG6
z-(fT*4JZRiBzrSuK?`;l0KGf}bUxqH(USu*6Rz6%JY|d}8d|X1GK#YghMtjb@GzcT
znd6h44)h(2Qu;y$3!K0n*~5*L_b0gxndiya<b2f3cw|687vAG52?%^f;WYX?IJ<NT
zs9&+}yr^=zF0;osfaALyew1?(fTaqk+^T|wW5BA>#uB+HXoDN;ssRCkXNoP^tuK{s
zFU_vffJ7Jhd2;tXofe#7IUI{JbkK}F09_RPC89m8kbi^8@#XezHI}(;^~s?B)VRer
z-gm%(3_c>?Vf~=D*=*@b%y$V`{PjV0%I(_^2<Sv^N?rqjA&OY1(Z^NP<}tMZ?#<dW
zyGl-#z}VJd4Y?cObzFlS$P(G$jF(|fO_yE$8OpqOSvb@_vKNOg8|p^U<0z1+`$@{&
z`|u>_&11w1hkPMy-5b6sm=W6c9kwc)*eEySA#J~7<~_Dw3C`<PnX?~OhZ87b5R*~j
z1W4T!-#YrW3N6%5S7WPnsu?hd)pl`0jWr9}&39=^orlPslBfM1Gt(fr{7FbDoDzj{
z4=!l(Zk5Wn7n{~Y=5b^c>3T-0NOo3b<JPLu{NXpCncElouuvKb#3uHmtKNAqQpt*0
zAVBIAm}&#-tWOe`R?i8eOyJ3D=mEenDGtX)Y?f*jbGmXI<8r`B>+IA!puRxyA71ez
zsM-r(PmW6FUQjd*NG%Nunl-~ySz+zE7GtHQzJxO<bFc27WTS--*UEbBNs2_;OP{dD
zM1rujoiMK(XBU;aQoyp^d3{e~jPG>IMkk)f9TK%Ap4;$B5&@3x*d9j@NV8-yoN;?`
z?Ca>{D=7tTVGFdkH|}zyg6=*SlLyrW-(^8JQz$9oVSl7sFAw)aDVGASwf3i6mqC1%
zchkdr6(MUZ98EmQt<QeAe{yb6euqd82l5#j@hr^gQd=(U83^Xjp6?N)DqFzqzP<lf
zaLO1?yIOp=u-|(r$7u=hI1m?tYf)>{1H$S}9nqB;Gz%e&9q;&CslgkYNXGa|c<(;R
z6DEjdeeLG{3>`2s=myG%#AwYv2eo_zTlVH5rXy~iRth2$72Tu%Lp}8M6Af>I`wdQx
zDb3+uFQ(BGso9VvQkf^lJ6$1BLM-!gd3V1IS2k26TnFA0{8XP9+j1$NmtnnnD4>{K
zSlg!trTHWchik-dUWGx`!CBTH=0fI@qri-6n*zjCFwxa;WNYGCZHmkm?d-&L^Fe+R
zG@Pbtxrqr5yYzyh<w$V(Q~5L->d`^WwHI88y{5<*CVr#Q44?d%6Od;hv|lh>r{vd@
z-he;{?V^K@USacz?@^U$Ey$xpb<3vjMiG;sn{-2gnJ@BtpNCW~71*R!G55odIZ8xo
zNHjA+uZiMIHKn!T-en6LZtw}aVjkQ3>t9MP(o3R8;WT7@F{m4NXUOQ&9{rI@izy3t
z?z+xtu~!C&70<<iYO>SoZue07acKa1XxsI5a{k2`(a_wgTv^U?6~^Yz<bzv%KyprL
zA{FD4b!&|ee~1&0%~pVVOF2Sf*4tTiLu|XmoAwo(R-64BJwZVpTvp1(HDmMbW=pE`
zbSh!~oN)~LqX*HfOZr;1eMX>%zE`$cH$5zKjLV%j^?p&bT-Z`z&BRrIIs3kCxx;+u
zod+JR{Ns<LF&cU-d#kv$Uy(Q?uQuoKcNQnHZlqv!!yRq{`g{EmsY0<MIj%XulX=}b
z$Ot7v0kmN%OKeS!lEXX4+<5L{Ylqvh^(_H=jnH6&;P(fb6M{LCMDS8QCeH{74vO`y
z22*m08{zD(%g~WyEbEC=I-!qQ&^p2HgSqdP(T<~x`~GmCPjNGj0Jg`O8LK#f$BYZ%
zwDDs5Phi?$;Gcqnptie?o&k8<S6o+4+=HO!zV=ypF$Rqry6JT!(}%@n^gbD%k%h!V
zgdy6Md5p)fwm>ATl>+K=b-e$C(@Xf|h-=Pi0n%)Kr*KmE(t?owYN^=LjHV8CvCJO<
zEC1AczX){S6wdQ_j?3k;qspv*ip>u$h<ZnY7Mj-@%o#rH%L?GeDwVFyc;^q83Wt(K
z_my4%7A5O=e1ASJ5-Uj-ZIm4cT?aI;X9cJ`-~5P3<Mb;#3q4{ngh58hEyS1rv9M&C
zyxU=;<Vy2Le<vE2IK(KhD&hBSydJ;qqnlR{jriU0@l|>54M2XI%ZT5C6M&f6C&L4m
zhz6-)*$!Qk^C;xSGoNx!zl`x{^dzeEsaY##J^rVs)qY|LnN6iV1g?CPpL2RQ3Gbj8
z4@W8Fb>D;qh--T2Mw)HohXd@dfNh=vO8)n^;aG)QpUiUE#8JS}3DApvp)f`oqWOfX
zd^c5J^6Eda)mYmn+f}W3c80w+><)yB*NiV9V|o(fV<P$%UY%bXAZZq@fQk<o#oqfs
z%!o#z(wP*ao7JK{PuIBv^l#xBAmI!*(ki1}MlIksx~$9%SV!GZppEvjY5Zxe?ki8<
z+YEVozfLn@MZ&!z7jCT!@aQwYzal`$JvGU&jUT?HP1a}R-aZ039;Mbxp#7`3U#sl+
z^QvCp&p}0n5^ygxUIEp_fw?}=W8(f6%I|y4VXYb|U_7|LFO&gqQ32NjT7%A#KhkK6
zr&-}eguSppcZm9zQ8^UK7CS=k{e!RYj$AAP#ZWCM@@ye3CM;h9nL(fp+R&GfYXdPw
zG0u=TB*Kg2<W#Q^-@Xi6o6YH4@P*{*Bo)k0)q{pb#~qRRY2qmI9tvsX$sOScP<LsF
z0>U~uS8jS#n$v-)uI`aTTP1|x0?XrQuo`*gLWijtw7Nm@>=UTaD`)%r-;zH<+d`P}
z)Im;16l?h1c21s|#9BkM@o##4;m1*rCjsa3tel4lf9}zD>2?ZQ=__A+9Nv;ANR&EA
z+bw=;7XIF36~%U9gBZMf<Hn+9F!qyfSdZA!+XJyg_XW7opi}L-=e42Leg8Lg-~Z55
zz5frPF4I_FOyRaMyLzMYt!P^DZJXvzDwAp6@?ODBqZ^v?O}=kz2O{N`+$|-=Y;Ky#
zG%rkV!jLaJ7|HOG3>|XFfx`xlaU6qfhi!**&iy>s=Z|=QK0jn;^Kkb1^8E66KAw-K
z2$mPLX!LL+U-O6Jhq^a7Me+7%yR~mN6ArKl0IR#VH&f(cp+w|mWbgkQHUaOR)5V7E
zQc27n`sH;?;Ey(ZFC`i7O~A_^+^-uJ>X$;2241Fe|I<)jNiU#F-Igzl!q?bhP#x~X
ztmwK^7LpF_65&nw&$P1q|97$7m@uw9p*w-)B&!K(Z@5A{M6(2K5!adByTO4{vthfX
z3h|)JdDNoCDszAggHw;f!P4Uu-BgROOL&?$wGJZfyJ5w`@)=+68rxCKs)V*otcPq~
zK-iPX{OVbsDVl0t6bi_QrV-98!@5W~hw@EzQVRn(LZ!v*d8*(MU%u9?7wLr9JlHrN
zT+@-=AN%dLWV@G~8Ra|?r=wm2{M~UOa@$dt#&iMi8;$&#WWTwA<%4E0qh|Li)}G$d
z?(2?NWo}8AOp_2FEqpQ#FkM4-d9yv1i!M~9&t_Vb`8Atw7Aq9(G1mRTrIETRlj3wq
zG~v)E=b0C^g0ABIo?AQb#op<7$*xNuwOctPA`mpbBl*O&zpTlF=})qt*B}a<Ed2r4
zDV^?Huy!Oh*W?A^6m}Gmyiief3gC?%RD?0?uiK^2o9$(1qv`ewUBYCZf;oihMfi8V
z`wyI`_*{oMT?qy;m^@lAF0~*lLo3A0g+M>2%T3~WDUx5FcB(FpdTks!KZU?ZC$sA?
zKoa;g@Vq(+vJg-k*;WxC*1n-!_&s}K^#;(A{cl(bjcj2J*8w;t6oULjf_;h*bOsA}
zM~fH(+f0G<rEy<1vosv9FhK{`x<_9yEo2rgjf}Bvx7Jvyy{eo}C}KkdC!8=*EWch-
ztKZNO9)OOBI_Zr0-6FU)lD4FkLZKzaVcYZ)&2OhK%R|yGYaxX|@Ej*=3?QnN@^!Oq
zSC{Y{y7wZ5W_|W6$Cy)Yum<9@wkF$vlBpfa#X%FOO{!UA@&2$Gu5i6+z&7=)ZEQ?0
z)_**bV0u8rbl9))?BkDCD7fGe6_wLYcW=De!f*LF(h>8$3rhB7hXQG4AN8|IcX`xd
z^Mc2b?uTTQ1z^OkN^VNC16@{^g5tgFIT8Y*|4uMOtvQhM@l%#rh7N{trYqHCCbwlf
zSROzIcRpUiQ&~PkBDJ+5Y0;7(vIX$+B{_i+L<8YPvO1JRLaK4-o)oFt=(bu_ozU7;
zKn+GNF#9GCCPhlgN-L+Rh>bUo#6y91AXg|r==3Lyl9f=nnR*MzLQ_aLa}pkPsthfb
z&HX(|8O-H&yG>|vML_ZOYYrMYej{%rgP6hHxUxOz%aA)nfIa*_RT;qyYV@dC7eb|0
zp?Bf$df6Ro0*V;a;i)@EgSk8ghmpBTRU>LdjP!o`HKG^(3}39SvPqjk=VN_}U8>Rk
zGA*?Pgw;@IfcdV%iBW618Kh_U0<hzulCei{%IEc7cC{l%f7cw+zGoQ=DtJ{QNn3GH
zf&LRqL)SeISH>UZBb=h6KBkohTUg`N4b#OzCUKR`glnXVYs+KMoe9Mf-FY<aIQZTk
zvSrCWw`ok}rRR@s>!A-kTBX-Zjs?FkP<Gx|-DcukE%<^eJZIto(lsm-v;?V^c|wj4
zibDc{(HC5q6X%_+r}-QAD+Jn_!SrILs$c5uMTF-$=$!?m+=c{g<fi)x^m;xGPE?}m
zR%;<vT`|rZ&|*F3uRgD;dmK8Y#`(h9b=Q_q&`312@;f+hH%x{D_A}HME|=}gG8CIw
zDWHoa+Ty0~vLX^7X@-L)LlP4ZILz2V<UtFmX!VOL-(`f1(FXdpYels^TNH{Gu@yo@
za0z^R$qDU1>--8bKR9EjyvpN|iEw<VtAp~LPA9$h4GsalOC^L*jJymXK|Sb_wf+^9
z^M3CT**Dg|pR@o3`<PHKLcIOq%DbTk5I5|o_YXTjkzQm(=+cX0S9U<at{2#9PY$2c
zUT_G`T?v~uLuVTpYf-4Pnvs!^vDUqqz@tRVu<Albzf}7EWeGW}nVEH6{yfrFi%d~1
znd;kM+~FYo^oJBU+*%WH^VW*cosoR?lkudVl&2!>G4*yh?NX&3(o+Imm79R8vQJ-J
z#{(DraK%rFZ~p(ThET(;x?=Zo=y#|!&YQYgKyXf%Z||$-sAaQ7@go^%U8xQzT8j0c
zy1d(g#*$vM-Fj-JpB{$wKNT)qW&AHF<He$^dY<CGO59qCZVJ~JhneqveDr@ZQ0X&<
zOHSw57?AwA`Mq)z0gI^46Op$WZSlhwL>4Pq5K|Q~-A$YYUwI1ihTU{3+h}>JG^1MP
z_~Vh%pj2T9mhT28?l%ctGS0JR#qdk0gV~ui5z&=2n)j>J6VEA_m?z7(0Q(3TIMFwk
zNX}F5&U6BFA!x?28Ux|X0l9;}M%au=F+n0(E%Rd2!j*4Wh^8jM`@<q^{e>nye;V+m
zAJS|&Ew;)5oLrx@FSgk=A@~Nz^cEaK9WeDLE4iM0)x>&JHmZFfB55QfNI+&>F6CCS
z^gI=((99Rry^UamZMQ)y!FAMA9kC&KPklckyuiNzPnhUvgZ|=T{Zg+bKDqLy+oF&8
z+yZr{BIaK^?6jiA75wYGe3JsAK~|J~Py^9}<yi<9MJU4ozxFgE@=%GlKT=E%yBK7^
zemDt$f>12TmlEu)R4e=z`$eK~#Pddd38A8QA^R;_@tvKVmF8FbuKQ*>bab(kKCl^L
zjY67Vz_c7dRmSyZ3q@KsPs43`0Dw)f%xBapjYqIgRwc<GMBK4H-h7~N<gQhO_mKSv
zR$E^igwXUXowz$gC0^_F`6IDV^ca-n;5}Ooyu|Xl37$l8S{f?5|BgBYnG-gG8_dvl
zVs&!i34q=t1Lpu^vQI13bbi2YiK3-_n<*i?)nKoyyrTRDLS5X<FJ*D^iFJyKvCFNc
zpcx}>#?5-Y;A;$6Smf*t0DM3(@p1-;PHMONoS5g2cWbF9+u%F2uz*KTmp&0@kNFi!
z!VcmRP=AEmo*5~+DF`qbb@LK%P2h)rGgo6JfTZdkz9jhtQ9bCdF>_V#jT#8#gcWrC
zy|bopM$Yd|gdSoM`1!_rv$osArH`j0+bck1#fMkt-8m%zn@SAr2zkO?DK1k2N!U?L
zXa5k@1tX}pOdO@0v<uEmlcV{ncMXJh99*d0!(j!AqC+NCVmg(O<LyJHYy<XbCLe<A
z2clXAOix)AHpy93Y=$sGlf>{;JJ0i=s8K*iYy<nF9Ww>AqOPxZLiHp~f=xB+!BjyB
ztkV|(R!mv?!<Y@;XCG$yiw&%xFBlp6V>Lov5!I%(y2nT%%FGu+jomwuw9i}yMJGs@
zlf5;^OIgEo8eD<ZRyV_cJIdv9r{0%fT4Ee(`Zy_FaFvmWZRJ$ygiN{DFlK=0rGuIm
zWp=8jpzJ}O@Pt@bk_+b%kQEK)Q{(Us@(`6c7g(}divjHG5%^|`7YttLMwDvdSnW)Z
zeHyN0j|ElE08c;fQY}fpX0SH{O3-ljDg$kHz{M`Rvv<|=h(3zZ1ReD&Bs%yRJ3|Zf
zxfQo0m@NeUR;YU=RO4b;)YC;pP;#phDKr$gfHUYX`?fQPs8gV&rA6$Mw;))+CKC%O
zcE8X4`fMAzI7Tvx*3YvWK!giPMHbEiGeGjK^GDw!2(a!vP<isfnOyQX_!H@fUSyf}
z@t`GJ{=m>zV|BW0K08Y<t>vxQ2?ai6#pGjIu0VkaGdQ&8V|jO1wz>S1U=-hkxJQc(
zt&JI0ppN_JO{C8@74>;I@FOMOTboscKIkNiey6K-9UXsFZsyX7dA0`G%*DOHf-pT?
z%L9=FkU<4|`SG30$lF`ca{H8jd1Ri;raK>Jp2WyL_~s8^;PqFytWHyoj{8zmg$xnv
z{v-|`_<yyg6d555d3lL$Uip*f_@V%rVF;2V;YGBJi8;MiQxX~)^SZLsVaU<hF%|TX
z`NOhenxnV~{a0E}UkJOmwj;+&bP3bxy<ztfx}=%DZeoU|6YdOqT?$>gz5INvG3@!2
zi+m6C4pC2nkERv7pWl>M6JWUi4SP!1eI{ZrAlSZco+^D5M%kzkF>rLdtEYPtKMs3>
z55%gP09g#cUiq_od*=iFOsxb$IsoQiXjd=U>$qs*x5yRh*;yDr6Z5(K8Y9-yIl6Vy
z@+_`L&<ueyE(fuUdAHS>O?k=`odG)^_R?1Avjm-z^Gj~NDR2FPu?n@rXEyM(BIvCP
zA5$rUH#yT9=-w}hRr-)x0;a9}c|U_WwHIPe(#XQ{n4J~JMB6&(l=mFAsB`cdOBcmO
z-GoCi)6E%GD<l=bNSaFAw|k*fM!3|>t{($61KN7XeHbKedHscX{QQ2qrc<4%d#IR9
z%{wZx7(`}r_Vc8iYvi;#a#OyIGdt7u_=?naIPOJsQeo7|Xgu(&*>l}VkY(2dk}90u
zMg1JU-ceICXrJTIe-saLaE5>t1I6yJC(pz<rp*bXk>~g-RB<(jmhN{9OT)g+haS5`
zyLE7ubSQtl{&72^?<9xAp5vNRq0B-aOq^wl!_P{y(Fd(FL8{~Ha8vB^g81ktdwD{1
zw>eh1_U2r$8LQd}7rkO~{?)}dW9NLFc`V<;n&wI)>AbW8yy;${@kpiu`_b9_{2I*0
zo%StDxc-yY#C^$kJMCQ4K+&iEv|+r_5Vn<1w-h>}%^R(}p7ykyfV|Zo+=u^r{&SmB
zep!ESerz>3=z6z?xeD$CWRTI(@QP#ea+4f$l;xkLgkLeGPla*Kt<c;85x_`!L_D|3
zp@Fdt9k}-AqJ>bLhE(Z@a`@m{3xA#n<@lV+e&B9MOw8l^_GiDG+MLjlu&lzGoIft&
zP9<%lO9`Al(8)Y+z;$1#3&^MPYfRT%z0!=Dn<h3n`}1%sB0{Ov=irqXDcgJV)@$&5
zNuEG52H7MWf(%VN?bXmFE|=z;-yl5(uI}LLPAHyX+d38&Lw6YlEF_HPLcC1=dW6IS
zX-KR1tSV=UF2$86bu^+S`~^!k>jQ~NuvN;4X>%;pM4F>VN#31{A#hE9GL1xv9k&(B
zI{c<|JMQCc?B#bj0a?X}hB1Yrl^zI6j|4Je&hbvpk%ikTc4QkRpiVZ<Q-Uwl-50WO
zTSYKaqqReOV=KJaNkjrS?1e$M+wD?nRXH8ob}JBQC0CiU{~K28@$;`JOQDT!<OXoj
z=rzLuat4~L9U7Zz2k0`q<^x&7#&`MfXNL#htS|#hfH@Ab$V6a)4k-FDEKWqtAX|c1
zoRv47`{eM|^~4ak2?Nnkc?G02fKZ8D`(ZQOnMzu^@}1@pp<aRf59C+&5B7s}3^+pK
z%#=`zshoWZf%?>k5NZLa69+mGR8=?=O;yESbULAZ5Nx@yLol7^c3a7OxZ-x}TRahv
z^yXTLSi?b(`8t^IvLw_mLcWJ}r-e@s!si`cT@TP`SmeZ-j*MuIbcW39*7ZQ*EkRN%
zL#gaD;X%74niilN?wnGIZG1!k?xGwji)0S0#f4@^pR}-hRHJK3mABqq-YNx|JqBF|
zp7h%<Sr#-IwEH--`4hm_kHd*SK`9l$rwtu3?BH@KiNrx|5WaOBE_$Iu%2}9++La|v
z8`PpKP;7jZ7zxEA(BY80w>$D`5V>?V6gU#iS<&{(LY1D?AmqLIe>vzBH`#=QEZ<VA
zRnKi#VHAt|)?$E8aCCf?nYm`?{)nr@_q()llu)FBb)}M?JZI^1=nZwNk+|^?kUD@4
z{MMWm!r6K6Ijr8;Mg54LkJN7z#X(5jqFkUt00%)<4PSHA3ncJovp)go^|LkLQ1z3%
zF|*?*sHq8m7C!jddb9@C$M5$!O%m~rI0B<SgZ+lmqYcw%L(N4kpSx;@T!BE06w+6*
z(b8;)iW*9BY*3zPUv_~TDM86#X&GbxJy1S#r+r#=!By><mzbwIGwM6v13Pn<jPx&i
zDW6mZ&ER=W&UZ`z){ao2I`)QdWhA@`V5!9Wc~UuD32Go2mt%~bI8_xjUYa}x$g6go
z2g4lJ?`T>x1pUo=kT3!MPpBvebr;W5D$g2QGiSF<N`qJdoJfqS?19Q?mz_Ip&emxG
z_D?N2SKD(A&57&D>3~3+3jaO>_c1Bd%!G8a^4p!DDF?9;z#`D>@RP9H40Ide#b4q>
zkH-U_M!X$5bYM9C=4n6F^i#(4DCiE;pO$Wbk5j8pn!vSnDpM1j%5Pq*eTkD*Ha+<N
zYKZVmWSHL(WzN9V)P0+1XP9K8#&I^nSOO$<Gk)6{ETBkoUm&b}#BP*^(}{5PG<h3$
z76b|3M4Mr}9JE*_lMwPpYlUf<<|_IC*1GoLY;kykNwUq90pmiD$W*BXcY1J3W23hZ
z2qzT*P~psu53^4Lf$TWe`^#K1-?offIzyQSr}t9Hjc&Tk&=;Y5KVL&nYc!QC<;nBV
z!=Z@N?dsV0nLNlT>@9@~pl2<;AcTR<yvbI4uT*m)b^6%;$bQ9QoED<Ka8W8qfJ8*`
z`c$2#cF7cRt?k1APpr02FVl}m5doteu0zul5c&NQQMXq0v!CGUvy%!(XBoHI<Fj?M
z^$(a*-$;H3N2;~ZuPMZ*i17Gv7U$z~wg(^dDo-ceSZr|Cqw^RE-xoH+d>^)Hz6+{@
zUnWDsUE#k^3tVCGxOO8JB%ikO-rI_rby`uZ1J7M#*XezupCy69@4Exy&10yR7-Yq5
zbXVtL5nObQ6Ju4RK%e#khplHT2dT|&US?^IinW2D^8s5Lva8`=;Wvq}^2E<phr_DH
zw0*{2<dPLCP9PfX*zNMCwPGEP851)u#L%nrHZ|?EI&|5sGcsd2CtulC6O@j6l6Y9y
zA3#w5c2-WOLbE;&Szp>K)wJ{9=9YH&llfV<gMTCL%<|u8uSeEL=Jm=;9oMM5Zqu@6
z-`Q1{vWg6EDSC2Fw?F?>RdcWOW8g4W4(3@VSdZ0z=Y#<vIgY?2Yr7^X)0XVJ-a&PP
zD9`-H+B96JJGHOSvLy%I8d(xQ!qcBIH?WsZ4_ZEKH3W-|t@~QAANs-ys41Zt#Fb6F
znx=chjp(<=c6pL(;xWI&!hvW6tM+x=<jb4C8<r}dm(3fgRS`oQEF5Gb?lkEX`8SgG
zD_TSTJ8o4)({~IX=9o!i*Z@up9LYjZ(i<%Fu)%|)-Nm|wwdL&eT<Pdy6YoOu?fqb7
zdW!L^*ITS_{kj%9cpR0Q(S=XF8or#9*KbdrA)H%Ql>SZFil*(W)2^7Oz4PoO)$Y~A
zJFna8z}^*=-bms<-*{}+{p;ijqx5gti<x$$E`H%izH+^DytKPRIKm#N9r_ohn9T|r
zZWEUyxd|gM6NNkPU4L(C0>=x?S3Tju&Nmqwy627*bj0?JEL3f;v_$o;xw%xcr4+cR
zD<FfrbDb^#i&T!RPUs$eM$S*<4&HPrU$V$sV`Xk|nX7CoH<D1lb-s|oilH3nHtp8c
zGJ7-(;0rBEZK1=qf!QS?0D_rQ#LCt!>jSD27R_x@Z71JEaf1jQYd?PSK2+SPVnG`y
zzQ2?Prc8V0Divy+0|Kpi96WxU6c{fUaWE%f1NmDY_Ynf(r}6lgR{>}Nja<mMJ4r}l
zqoB1($>xAGqxlmEu~+g_#`Ia*;JzG>u|)?5*9S_>h1~gzT-ji;J+q$;7iaBvTClq$
z@pif_1DN!X2?zzJf2cnXoIprvi3>Zi>{)arxt}h36whXwdsidcR3!4`520v7i074t
z$W8iVoG={IDgtJw>&6G67n<NrNfpSzxehy21sz<~SgH*R9`QMG2BiO!cp$Gd60Y^$
z|Gj$491ZLQWB*H0{3xjN+Nc>A(AES_7V5(n^Z{7H(fG&m;BxbH642n=sUpZ6{}c9h
z5>YEoqa^XE5P1L_)EM#(M^x|4#1kV0EFXFIg42-G>19g*9az4=CxEKFLGquADGt32
zk@TI2f0-}r<tG-n`s6QLCq0nIulkI`I_nn<63jQ(x#OU35S0ESm*=3g(hrvqIilv=
zD2I)D<!dnt!B=2mF0TjDJ4o>VdN<|obSbpog|??JH=UU2aKOZr-u;`A>mjN|-HY*T
zi*}m@bu!DoY=FP5g|7l_lW-g)-^Q@KGo)JT#SBs3SrG~ROg3DU2Y0IuP0IO68kR!D
zP08+p*b;iZb3x_Up-bn;q|<MGfk3`j{E<sAoKLt2PO;<EN+=pbE6zk`6H`U`x)Aa%
zG(L>41V0JjhrVaebp-b7jDxr#fYWs+cnDo7PjN-~+^U{<Qi=SGtt6qUfSK1r1PaBy
zrB<g!-&8`iPq7JzT0?4^4-Q$CYiw#ib&Zp$*Fz8kY&K+@B;?`g120Q*p!FLakrmme
zLMkAjo8<=eaX9~PzpnaumKG&@mG?XEY2ygGV2PQ0GiwH#Ejtr>6K6-a<zQs9B$RY4
zP^zIFNz#xzFVA$gh=H0jcAr;#vK0}E^9M;FbSu{V3;q6i2w#lTuQNi2Qj{(|n51c2
zwUt5RYKgqp*}9;>*jCKlJ7yuNH)kXm$cMr7OSifJbcaNpT!=@g7A3?@#OPd>xQ&$B
zlV|Cd54v=r9Vv!_@}{kYrl`pTa~&ee*j!6`cSD>^Qc2Y>_d_<Pi0|MA)~S&&fMRf}
zZ-;VI!f3dSFVtqU8v*2?CGG`qBA}l`=d~NetK(;U7snW*yb|l%BVKDkL0toe>cL)Y
zJ`N&AcDhvYZS^veXNh*I>X3*Vi|Hkh!T(8OIdce!86^Q96AsjfwI?8g4cR{ZEx2bA
zd*3G(hzf_%xb)0A`71kT+YD5#<fq}ePDWBi^nGH}g@}-Xz(rU912MQCR#pGYC$EIs
zR<JYZgU<6C;XO+i{<i;N<mLbMGWL?+NA&hk0B~3*S(pmGAed6n-5Z&4tq*@6Du_XV
z!C)Y+S1a*=22qw^c&!gwRM)}p?q73IYi;@s>*qr{E9u07$XB^xts)Cf+<+m!2B9Me
z=?nH-`Lj_zmkpzmLV~W(gP(`fs`dW<5dZ;%s_gzSro4csa@J_1xh2WuCx_^LNI*Dt
z=81fzRNKIprzV&M_ti^&1r(6c*L_=F3~B>jZD&&+R_)Io@WEv<+}efgT$;>ODdhs~
zR#}B}b54(;$7jd`^OcrhmK+pbm;jwaii`G;k3cWYXF7v}VoO89qMbHi*HZD1%k$0o
zgxwQmU&gWlvlVkR80hfaFo!b`Iot(Pm;CsqcA@@edFADZ2@u9qJ21|+EE`~S_gjYM
zQq4|{;IyDBis&}IE0lmyx$YyvObG&8kN&{Hq;g?mayuf#o9A0}78d8}UJ(CyVCAYN
zNLQ1#3V#UQ>o6z7wA`0K7V^hKb;m75VWwn1Z=<gZrtB2sDI!Qud6J2ak;r+8#V#hl
zzrcsTQxAb6)fDw@o=qRcnM%rYPDl$9bkN_3h_;1`59S_(V6~>wsaY*Dd@6+va^UxE
z59iGvPZ7|Eb2o$`$L1y8G1S&+9keuTT9c2lc)D$Fi*Oj%yquO*e~)R;2^8P!csU{#
z1>L778Ch}EW1^ILV^MG=veKO!-u-Az*BWeS1Vk1qv}Z3#(YQcyU9TVCe;|A?Qqu;B
zmX4KNXu{S#q71U}8Rz*XYJDpI3*ljQAM}4J=Lx>NxAMS=S))76iHMt=`)ecfZ2UyU
zHGX(^ceh=4<?qFfZS`4;wfuF`iGPKq<cNRug_KbE<OuZDEa1=Dnr437RcNF;lC-(`
zW_=VZ+TE{Q>s!Qc=Qh;tN<2VeAJ{Iu<g8K8M42~Y<3iE)&-OOa#XENi45*oTes^<>
zdU`xD@}v`YS$x->4dkWlM`ZAC!=>f<nqMJ*5jZ|e6)r7(v=6zCnVAJLdN^dXPPVHA
zYL!AJ1)1Ep8h5TN(_1`<>fxQI{G*XoeTbNynp?s$zHIFQw*HRc9KJaebB(AE#uH4L
zbUMI%Gru4xzgHLx3e(Oo#x&TLsT5_{__c)DL9+U*(ve)LSMxH_)UxkKg-lY{QhycN
z4&#-prP_46M)pjKqI5hZ;<G<Bwp#yw7hN%94fUU>?!U<95Ya57v?fp(<~4I)6`zpC
zW~&s|*qO%0`?g$`_~fI5FinA*==aSj(CwEGZ1zf~l5lwe)D)`rj7%MjWW5hLh(=C6
zZE9Zkw>KEEEU64#P|SvxZ@Y2xI`>LBzo>Hf;C$Tl-AI1rUycL91}Yq%yN+U<QH~>i
zA}LN>!WVpsfPkJnifU`YX|cV%#G$jC8KqNF2mSFoojEvx!_=tutCXHRYj0Yk9L+Fp
zO0qA_s1v=v76@!mCHO^)13&o?G-PwYtr(J}GN^>=M&ryPA->`DnrcK_muI`U%p3jM
zzK|~l!k~q8>wn4JZo)Lu-BLdn1~cEk1DSs7W7PeSgCV<@IISctvl~2rY#3&KgV%1Y
zJGFlliV+{B3ONAu;HuPirxlYSl2@B%!IB8Q^xP+qpUDC|q%#OJ2A|hy+QEI_l;<!C
zqoib{J?Ue4Ne3s-T4Qeipar%MJM;Um54_74DBE-6M~Mh5#(0`9wY(GhpG04rXEJ^j
z2*Xl|%JxL*%;*yk<REF!m=47n^t|^73Vq?|UyhTjfC7b2O0e|{sCJSq>hY2vTyV;e
z&@=uKa?9Ph+o8Xpir>npy;kSxMaU(f<^9y`(s5?|rlt+?X8i-Lw2@~fK_nE!((%5M
zbT-_;q?wUVF8;|w(HohtN5zb~Aj&btX!;+;1)yt+=u?DKY-r|%FSz~KS~nn4z?Yk&
zj3x;4oI-#eU_A)f0bp&!#W^EQ60ZeZ>nopv9T$;6WdoszTplP+;1=T2W>SJkQ1`?V
z$rLgIw91sQeC4YM#}7l8hh$R)n@N;#7|m0#Ac1@K8GpBLc?NE=p%^RShj&(K2Y!a{
zS>7B%ZFpYl8vi2v=L>)!JQJ=t4dKtU#fd3jx(r?$@UHn`rc~iGh}jXm{hwHr5)K2&
zI4Ki^voBIzd1hpESE~YnuNGn)*88|WsxXbNe;OZrHelJ@y%QGgG}686oQ`{iPMHwt
zS<o)Kq7>prEYGSyw@<EKOI=Y-yaMA>6v$n)KIIUci1jdpe538Fm#q-+!-W`1&oiZG
zs-aq@)uzhgyyKg#q-BzL@_QIj4(G`aDBM6ia`%QG{fa)Fr@SU;n-Z?(^T~%tfaXEc
zEC|brMg3b&%kouX!AXZ9mH8SlK$4m>SVAG@<uWil(%U(n$N?G&`?Z5E1r<JHyD(-H
z1}q1Qmt<O!IYmB)7Gm%n%eU<|4AVKZ;*SS}+hJz}jD4A*`F|FGXabTpuk-q{(9FIG
z-UIB*4?`Cjed?9?gbCpW2#i%i=HK@v*mw*w`neUW9JCKAr8KfEaOW~~&i3!y1}FF%
zy2PwI5Hk$Cd6<P~?a#JlCuZ1cG&;+i2<WA}6}f_#g$-$gV@po1TUF{%WmqjNJ!krc
zD2@mMpP`KcKh`;Kh$;I_$WG5wmUg&$*S-#>yV6RAq(OiP{KT~RBiYF8Q+a05o!XbW
z7TNoXIa=|r9LPG(b6OCH(oYWbNO1FX)DG0{Qs<eQp}z{NSS5ry*9JHumZ-lR<O`}O
z|ERi}h`zNEX0gJVL?AP8jIL{tX@WQ-<ssuAXniQu*aChVX=#MfAD`#hoXXrJjdbCi
zJllG=VV8kkiPJA01qk;+;1ejE;TDuYKLjc@x!=ji)GNy>{?`j!V^mV1+Z8BJLEqaN
z@nc{9P=T<!($WWdLtie@+o4t{D337g2|&89t>YWjeWV|Q6ERYbiq(!~6*bzAkVyIZ
zb%<6@B55$#yoi@tsVQ*`j*j>ps-1GN)!m>G%aF7%X#qYs<0nSQ0`d;E1T<kZtzkw8
zf)poB8`W$H^a}0zZ`gDGvhw#vD^;emeEBp;7S5t?1#*IA9m0k7%XU^1d^VxOBz{M%
zl`*Gnc4Nn?M8Z_}&P})-o=7%79IyE|K3<Olb`=i2)3MIM!d^t*u;JEg9>xHZ?9OuK
zYjBJ;HFGPjHWjQm_0$shRVh<JN0v%g&%5jM`k+t~mXB57y+|!^aPk9MEg047Y=8k^
z^B?lWbkcNRk>7#$-wtI#8<1UySo;s8D)k$eIS}*p9cW}h-iDA!T+7s3>aM$S%m4@T
z4+zL?@0vZ&z<f&s8?uj{z5>S-wZ-psL#0guLRUHTe$dw~7?oxkFrJyG`LrFpB%5H+
zt<g|p7kT}?d^6~xLD)ZD8PWyJIn$1&`$=CIM81m|sFDF&2~=M6V|(}|4oc<y@<XI5
z#O%DfxLpRS;rg)xj$@g@!^t2m1|M86=yd`(@jvjb#$(#^gJh8jeh#rM^qumGz*rx*
z{laqeCPJl3^{%LA@=5T@=AOE<fdWd2tdh$wS|y!zCzw{1zBVZIMz-_W`7RX<7~tH_
z>4e;@Tq5e9v17m=`0bxbh*)x$ntVR=Qy-YBr#0V@k#qw8ijO=6D2NSsE9=*oJx*)2
zrn5W=#^uZyYytQFPoauLzs7b<uyrGHVPxf%@2nIGO=EyQs-fJMiHgAqT{^YSIAJ?{
zYSksuw&}4#R|WL{Vl3frB}*DmM__Lgs@+`m8%zWkL6nIFbthUF-s_F6*}yJ1ixOlx
zbqzO5>iF~K!?2jt;n}P#(m&~j&@Wu-n4TSU2R;V&-KJ7jP-mq1z%X0STz%HU6PZ-m
zZQh~6^EoF%6&`+j((taZ?+ZqxyPpN96GS`zEGg20c!+U_;p3%di8sK0Pnu^IAOBFI
z3mVO1MJ)wkQQb>{)06BCEX>C)+<N`0fw&Z$AU>p57T<=|Cx%$Mpcy1Y9Ljjp2Y<I%
z#KT}&R{gdl+Nl-klSe=xBvO<ypc3IC(W*1EtLRoep2tsuLFH@cHL3Tt1GLe70{a8#
zXOONt1Cy)PIDIC}HpI+3ZLqoBUT9aP3|==h(!GASXkos}#POMQG41l^$v2(B*KA@k
zP2?Tt)dGt0fX><-gQgy2^X%ZK@n?o#ql*oYDy+6Tn4(}>s;zV>C*RhOuv5d$`DRY$
zsUithSU*E27W51Glo8JL-0_GAOMFMvGX6E+bvrBGU45zuSwS?_dUoYtDfeiw!dsGx
zQR4FHQd9b8iBH#D=d-t0KXXuiBdOTwwPIuPI9=KicxC-p=Z>wZIog${)uo4PbWYQI
z-?|-*bQz7*fq#Q?QKyprw=^bvPGq8{+2p7Yeb>UYwUEe%&<|p6J{O<7yI}VFXKQ>1
zki~h&!rZAgu=3P`VxH)(l{9?Nx`g+V9YnR_qZX*kACLK2`T6baCZCNAl3$;ojYyGM
z(l3@N*GE$c(LQ^1WWKe(>7H}U?;<7o?$c#$45+3Q8m%i?<?nQJG8*DL;(2eR=V4PL
z({Dn=0@^8t9Bn3uVpN5dCTld`d$9|%KS!wTth2AZljVTBa{NZa40-~6!{Nl6Gp3_Q
zGFWx&2t%@uH_&JWV<O)1Y&)4&&?HYPc712v){$?Ski`f<P-|AZ|Ng*i>wW`_tC@S6
zB#3uOg+Nin^Z6(9t-7U!f?vsl>ox<Qgco>y5L_wZKp(cR!8~TiP$7p_94~6gO7T!{
zP=z}hEzmavjC%CJ)r`X><Sf({5=Q<TR+BnRBFBK3{04*6ZtIY*hLn52%;n2TzpjTa
zBUgNSh*t2EP0C7W4me546n}Af;M1>eu=rRJXG{`DFn7yN)%mNfzFEU;t?aL0PuUlY
zYNTe8zy3PMXV;vl1&2Cx_0BC{>!3u4_kGZn^8Okp2$07+t%gq<LvR%d%61`dE%C&h
zq1V{vjH!|<%~zlU`%|E<grF?rSO`FL(0kvWcTmRB<g)l{D>QAiwAxo>uz~)L;!H-l
zEYpy!)hC0cOnSl}WO!JR>R&jbh^9pe{w{gaj1H{cNig$i{Us4L3w+?P@c6nzp=e4!
zn)KYeF979y5gP_^A-wvXDp;}j(#VJ@z5wPhvot_F+IfBnu#iEV_*)l(kL7e?*Ov0M
z97o?lphjVu#<H`c$#IhHR;-~Eh|Xns!R^rfF<?XnI*%i(23<#;CWC0B^;Fr}hi_lP
z)f#q!+ZPWs*?kw_djWiqM&5&E*G|oUjL9_c6N_2s8NT;}9zRsZ`-QK5AnBmj^cO!$
zFe~QCOUtxlbQz=+Z-W?ai~Khib8W_S5c;kHCTZCvxF`CfLJQOS<r3)spaL9E>KfB?
zA9CUI(D}nz<oB_flE5qbUi$q9Ki0CJP75u6a$HPh{3zV;sXRK&eM2C!=uaM6U`jn5
z?@)eYr%sjC!h_pFLGc3SGdMPIkdP-5=IT!j3qo$0vxLuz;x^mMk<`X_c^LIfJ%W3H
z@v}?U_dDq?(rDY6AT*PGE4|PPt$Q%>qOAu;l>q%C<;5m=GTzS|vyv1vUIu?tZn=v8
zifkr7y4<?Y6KM;{y7lxw0jAIbek>s0cd%5k;qSK*ZIF2^3p!iC@d}S~P8H6gFYL5U
z!F1=AXLAU6sqReS#d9?zX71Svj5-kG`Ns|@K|*RovGZ0fX0*8DjMPoT6Be%1b7tHX
zeR(cSuX7&%&yM;~F!15B>&tXvhs~z6sq*gE*??w_bOM0d066MD7G)X*YG^6-V(lx0
z_!MYC#NlSLm5#_1s}(wZUT}I6pb;S9R)JAvhuZ6}f$fadHSk$u=7Z8tj#n`VvL8^M
zWmb0=6wI0ALgvg?%-0n{D&fFKUoPnI35+`REX@zxh+PbtO&-Zu;K_Rlr2JLngfKD@
zSjOj=t5DBqKl~iGT+r;`XrxCi)GO&(aH7khdlc5{XmolJoyaM0R8KpPz7K@W%Fs$r
zM;k1#^pT}z_%b@;Nu(Z~ll$Cs=GOmB8Q&<_M7;;V%$RFn|GmAeGE$azD=aCZE*>`r
zowhlZt}lhcm3-tsGflRoA_k2frQdcbH;IgSw?04{j#ywo-Q(NL$%ytn|G0dut>&$I
zy2u@%XZL;;=I@G6o;F>%N$}pxdq>}+BPPNtdP@lSkpv_EN9=%dxR^%tr*<8Ffw1fP
zzLK}(tIJF4j563BrtR}M{_4CAt_mg^;(dAV+G;4|QsHi1g((}flBQuA%8#NcM0J66
z2G=A$t+{6Q`DfO(29taigPqw~os<^<<vKA;!CP18bw6yfK<G@boybLM^@b>Z{39f-
zfN7(s&tvP5PG=2dei$WrKo>DBkpLJ2FLbxVN|7>N*NF;U=3T`O8%eMoX3VC~FbfA%
zJ#ZOE*d8Cm>Gf@g=n}h7hd50SP6;1`65R_(2h1H9sS>68sCHSX(k_Cjo{ASBFbdtM
zrFOEA62^6%3eq+>EBf)31-3~PI<|%BkeNEFNyT5V;Y{dTF0UnW;!I>;qTdZ?nUKn6
zeRVScvJ1Y2p#+Kzs&4sun5WyS{2JLs9iodpksT^880#-WV@E?rnSB#_N^6Pc40REt
z=X;1ydV2=B3t=6s?~w3<opKn`33@(UEfz@$z_bYN!?)fC1clR|*;GU$yj%xA1>}b9
zZq3*5A6mjW%Citmd(vSc<d{$>J9&-_ed;7U6X}4^XMI;ZU!FjKHm7j=DWTpB+y{6X
zs=uM?0EJyp;S@>m%?7)l9*4*Q8Wc11JpCS+Cn<lKnuSQeZgKy%K#>dD)pQ^)u&5|F
zV-p*!Ud6vwg7fTgOApWQEphs|Y@RmzU@7M}&459Ino)b8a3u_}rsp`S3&<&Xi94WN
zGvr%|-n@6uzvJJxLue*g70JU@Nr<S7;pD5P&*PUoOruMtSn*a)XsId&MP=}>bZAHU
zRnRWI`zKm)<Slydox!5WwrNbIQ?L`pk#v%)m)Gky?+bwNvLRSjOV9_RgetLIaP8(J
zX)y)t67AHw39K8inEI!hXH8Bm24h}fjlbOgT_b_q)i$7i0s(pedEc2&n3f)$<Tq0Q
za*HpPN>U7&h^YM#8u{4_jht9R5FK{@#qUo8Y>hFTq~d;|K=?n>NNpAOin>7H{)qvh
zA_Fv!2-=^KXj+OT(ATOM%8Ym4iW5R2#zR)3sd_yX2JS(%P08koMoYgNMs*>4gFU`@
zyp17paJTcE7+PxcF%XzbppHNsVnC^<48b^{0`YScH>(S0T$aIU%nD7fv#q5HX=$YG
zl*_NbRqX5&vOW103ih}A+Z=~{$4z0JD3E7oor(5Eb%#kgdA;x49QAeINRrzI;K+4~
zPm>DZ6c<@;E*LLK7|A^As2=gWx;nm_+uXfhf2<X3cuP{6+j!26XdND>u2}x(N2?<@
z<yAnczv-Y%E#01m2hkSXEc)|`V)(F8(eBm_#YH>&><#f<iJr%NyhH1>+F?0Ec&V@2
z8kr`~BDUh1DMGJ{HE!C_m0!{Q*yqL%JswI?WV<r~x-%uwxOyQcw^NCXBtONUZ;m}%
z<kU;ND^Ojb)!Sston)6)V3mfLlXG%&BjX)M`~Obg1Nz<~qomTA^*W_^FN|02zTPDb
zlfTVn^P49_e!Tp}maNP>_x92I$1G_#E7h41R7#nAy}3#L@_8IGW~ON|I+a83Gc?RB
z;f7@o@$?)fcBwsHxG{D3D!?XyC>KB1z7A|(2QAgN6|oE(EOjZ{`@cfoqu>6)FcvJ{
z0RlOX7Vq-A2JY{$FwdtYMTV(W>mN_xKt;idSvVh@4>CpVvjwP4zwtXl@;We}<c8Y|
zlv*>lrHG}@xYJZ!#MC#PaN8u`{<uVfZ)r;Nqvt0dt%`SQ_2OT-K>1;aPx&=OlTEsF
z2K^6q03@&A$lO#MNDtQ{j3L61ZSstNYFptpp7Ko?Whh+v1{51|cM4UzrA5iwy8MZ^
z1iP{dgUHFM24tCY5HwnjTEPJR<-~9fVyYv>HibS9BDpEy31Mm;45@Hja6Gp!&EaoX
z$k$P)@Fc*-m^S0asS>xUo17j}7e8WezjIB#V^{q{&5_Ofv*a5|+td!GH8Skrn(<Pq
z3t5<pys{E<p&h^1yO+NJ%*RR#mz`ajyf7oyke<JT4o%RZ(~oY-mHIfl^K6ysH_CP^
zzvtYB?iFA|!aw?nReY)DV7?_8d77f<FS-MpxdN1Np?DU#;HEuUb56I-R%42OSPz$j
zY;J+@?QT^Cqd==HQ}xSuam`BzB#<NeYDA|@^bsS<(=ZV1pHO9|rNvJI@1V=31#CiR
z@sXL_H7;xY`>OL$q#`aixdM@0!VW({biE^_^F&|ofb!9?x#kFxM&e9dc^*{!!S2sN
zfGQ@b`@EuLT;5_IB$>~>YERyW2o_Yr{|^L@%?(>PE6Z@2`c>lL_y!5|G@bd~=KfN`
zne_+-@xTI@{$X1h8G<WF>Wf9P%mg}-F`kxR`JgAX1RqHNV+-((zM}lzu4@v;q$Wmo
zPTvr`|2*@r<W-4G%<!vgv3fxW&VjdCD1t(q{;RXnLi@DK7TVfV=h-j7iVTczMSrow
zkS<>oe(&N&08&6k@@sf-HaeA(0n<EzWcCBpnR(7fD<R^D3-AVhbD4wCQ-Fw%ryl{j
zV~5Afnm`-w>El*e$InWog|Q7nap2rh2<CsAh2g`v=g$?15Yo=dq#rB(<~#Sb9^YW)
zGg^Jl*pTAtwH+dSiWe$Gv&nxvrO;NG6gr;6`4&{LzkpYfV8OyCHK$vrZDF%g`KG;N
zY|uGeWj?^fRB~G($q>~qW?GT!RGVqy#a^`n(eELdZ=l7F0a>#pX22$+-mHu{ZBAub
zrf_vlz%u57(@~XOYnyuBp#FWjbt4DWg=914Ah|=xQFp-4!`2;yAFR8O1@#l=bk|Xa
zXU7>)HVjZlYHiJF(>61Tm?1z#ff&69Tjq1rZ&bm8q|H!s0TIJ5d@E1kE81tl_5X+|
zzbh3&l>y#*0u(VjvjysrJZN<hwEvLK0vCoj9v(hGfhyzu;V*DogS5XHAb8l@-xf%4
z%tz0A&LnO(3z{JpfwegQ)=32qN~fZex7uI;kIR+}EQ}okN7$j>CEexWHVxZC>A7eG
zly-0ge-nO%K<7c%aR^?Lt1~<<>-6__`cr{6gal9jdsb0t)rlIUh34m;OoK2ffZ*r<
z@#P2ur>wZ^AawnPI4b0975yhjwwo-y`+tl4>VKhjzG$I#jPSuZ{4z|Da$wrb+n_yA
zY35`oN4Gwv9<lopoLy^deGVIc-ukcvu9s37#P2MhiQ>Py7lJt$=ka*nBjJePG-!NO
zaWvnxg1HG#O_jnfPnmgQ`*|LOa(Def#ZsO!9~(SaA{Zis$CHW~qhvHZkh|7x8H~9`
z1<y|qF5F|CUjL%#Kmkig=XVKp<I9co%5zo_%J|2EfS&+?QkV@DX}c4uFsA8WU`gE4
zS!wZ2lL5MWv{3F&Nw?SFZcPgJ$00j$&L^1?)`z7tWz{ogo{GCRpjIAgGm3#7cw?b(
zjm6eSEcGNp#N*JxlxUdku<C(XAA@c!wa3GtvHBg5TJ2Q42~`Ie(=@Z}A~)}*og$nR
z@VnQC?Bf)@ajAlnkz6DIPA|u^&l)OFz~B@wb9D)(zu+=o@ke;5y)M5TI;Ux51bS|Y
zp2~piCKnMvRT}1=RAr%;puwliN3c_cI>BlFUIslMQW81ezQY;ZKa?I>DnJjzsJZsn
z!2D5_5a@}Gd(7xYve2Q|d44->KqrKO$9(n(eIVa-fChNx4ufvC{XUQat)HzDuFu23
zHU&nQ7ys}0Mk&0+K00naAY}l<>IRM!G9XJO(Gi}BmQ}w=A;un7>5%`N3|WP{ervxt
z3C=a2t>DABY@P)I_aZiE28+B{bJrFg9PxBvcPi3tN|hFv0Ye`L)C4+v<4M0=XvS2I
z&2VR6z)S&vJC-F*T!}h_+INNZl_YK@J;5rAE@&70>W1O<Q1P!H+M2*rUK9kQmi@6}
z5}f{F=Bhz^a=JQCy-=GvEDw*V?1#<{$yac53B&Gj_I8v0fd!3X8Try@DaH*=Ry?5O
z<aicFC^e2IHVobs(wSR?mk@DFRVc(gxjWBdT{<0zu@lZ}-=|EDgI)t8{NSuEi8iC6
zUuY!q{@{(*EadGp3px0atdI{YB$gh`MQG4Rtqi3z$(`IQOpLucUt2~jG9oHGXVp&z
zf&s65!(lzcHy<FzWlGV8%_6}745~0NO&k0(`z<1zsyqr~>#CGmu}m)A9xP?FwHM%P
z^iY+0NNcnTDJVyo>i+=8RUqCE&<n`CD)!*!Xh+PDCrPUQL`xWY@}v_H)nM<mdhS}4
zv}o4&->_T4w7D=9NGKTg<YT^x#3CIWWSBp4eO1d!=_7qpi=w>@Dt!sQ5g!bEO9y!b
zC=_?>6Kb<;KVX>%Uol#BC2GcA0}Wn^F{ArBQrrC@K`*g2wv4x=?OA`FEFuei%RsyB
zk4Jan!9sBTMeXa{`mKH{fFHHSyKPhCHmDvRrW+^ptu~7c$4BGv4xS^Ztn@-%?{1^T
z>>Hp9p0&Vm9+%m0%_VYx34c3j5{P!5ovUUH@(%X2pKu1Yu4>(1*FvT>nB6%Kh11E(
zq0xwAZxlKzm7^6mgklo%mw7Fq!0DiixYjUsyLnC#hb)(67<!0(`-|mQ2bdz1&~J)C
zuvAosw5^tAezqjqjrYwuSao6M<U10G)an{-=dXGiRa(i8`&MN0?fEclffaQVw?sRl
zBQ%MGE?X}N6lUGM9f#c5=h-FLRTY+C-eBT(C4O8G6*Kbjv#IxJxW@{a&AscbEFh6@
zsolcz1LL=%!lGm=fV@_76MsjDJ1m>|NkuP9d{8xg5~gh<;#UV(bU2RIs1L_Rjo80R
zNr)aXjDh?R;cL=kjZHa5zg)<Dy)U(tm4NrMz^ui0y+fr$vui{8p`h>m1%cKujk9jg
zqhxt1pT+-TsXuzz+3{Bu^(mw**#0`2BW%yYa?o1>t!~dq#@S_R=%CGaPQ+8n{2e{P
zpi@UB;+H0PQY)HsebOkk?dec(tH$WHLGPALGrrlY17@-rrm&QPSG<&-%WYSkT|R}>
zrAV@yFI8t5HXDbFe{~h+XtUUVZo6+gK3l)!VY#fxamI`uh@k$x|L;7{&N5d{l6?4c
zX6Ja5yYZ@Ri>zqlmFrz1`%!0LDmTB|J)X53<-O$yAf3+++((Mdy|$_A6$Fu-!E<Om
zpZ;qG@-!9^P(~0V)g0wF@x76(42;izt`Yb9kg1tqx^P6XygawW74+n3a>LCr#*;tn
z5}qfeddXK`gt^p?gs#L4{&h}%e-U|fAMzp78dp04^q=DPLmeZ9f~uoI_V&q=*t{Db
zv;ptbZP2u46%J`9I;W{BbWfKwcOF}uVE^$QIim_Ga_DKr=U=W)X^?&#p;^6tJS8^D
zY2J9-N;-FgtBVu-T+Yi6JTtG9{|@eS)<Dw<L1%~bpFoClNy5!;^KK-Pzk0r1p#Jbn
z;eZ=#T?hlf`;Ml>D$nsw2y_)DgXH{$;0lFSm8$v9a10)5{v>%JSv^9S(OB-Ld^-Qe
zz9{0({j6;FT`5!P^`cv>MZd;jS6;MW!Y{&h!)1;)bI8Kp^;bi#w~&D-j{eQ%tWd_=
z^*TlSt9cy}`bDnbd>CT`ez!b1F5c&=vFa5GE_|rsOQ1f^rQ^)xl^5@~WiFTHcX#D!
zq+S9)bw1_+0z4J6U(x$2>x`>{qE&mefH{NeIMZ@vC^ubM<%@=RE6;*of9+Et7~v6^
zZP7%;EJBt6@t2KYYRgy%+j+tdnm1RO#`j-=mT6Ct*QF9=zhv;W%!jkh=t)=K*KvlR
zefq}xDhgam`0EHfihBLrXRs0wOO`+b5a`d3`JcFMz;M;*8VnVm{`6WR^M|rZV1W4C
zOa_#`jsoaf-z85;@c%FdQn5zBmH=50{gRt*=ktXf3{P)Q{fTK&@Z#>wDy>$HCa_Gi
z8iw+L5aZ8(pms=L_FVTa-C3B(c@ExX-8BR(M7>eGhb~^e0JD&wSisJ}`^Odp0Zr&G
z8d4}2H7unt_3FVV00JY%Uo?YKKJd}T_l|nNs@A6<Pzo|`Ff^^bPHOw;^*EvHMuES|
zoXp}$yfr2fQYU*N0m`Hpp}&yTAsl6U`-pW1L%{8CSw1RY!c>@5yEB0m;;;D24!g|y
z0CLol{D%aVm)i6wB!^X+Tx>otDt{>tHr#p!9^JC=Wq2Nhon)bqme$5pQo@GLCt&s*
z3WyUwzL$0R;=f@{e-`QkIUjhR%>hK3FEsnoFOeR|-}a_KNmD3VYIVUQ{<W6L-+mM1
zL?HXXcNyh#ZfvX~f>rhlKV8GSDHxOV;MA>73J~#;xmqV~l^<S&o4CfxhD1%Jj!XXK
zAUtZd;Wz-|zUQwJf@^a~HOVgX3Dc)`#2uAP%@WMXJ1EnZVK`7^zDAKRwi#j1s$hIB
zI&$<?hgzYPDB8Ro9rjbdE6C!55?CeChC?s~8axo0ugX!Z-ecMZTMS3Vuh}D+Q~19z
z5NOOD$Y&63PQy##6v%ZXXGBC(tr^p}S_ld{|6)YHuoZ0|Pn$E$l1_`Wdu0&Z1txKZ
z=_+jHYx=aQ+EMAY9LT1Wt-i@}p#W(pf&I9me087v9@1eY#qzKX%5z%KJ5l?&Nk=<$
zzh-%uTAx2Wf#{NvN)vRBvEMtkH^lTvv69~L7eM&KVNCM*N4z%{%WH`{bW(w*|D$Rq
z!iE#^gjw{{kt_?OTnmk^4hY44LVd>gnqCD2Rt<U!avEB6pWqv{XJ{DsG|IF<G%^Ii
zuHjj5&>E1zRQ;!R%s}AGMnfoRY;@<GY?HAW0FODA-$N#E|7#2w(*^j$C|ZV8Wt(F9
z0s7oX-re60Jr7iy*-WV<PCEVv2IUGt;6bt#SRSEPI@N#*fKMYG;dMeGf*%1fp{mCt
z6uk@AcLaLhAv?bc@6cIgr%){_N$r2M7|w9ug}`)I(rl)Un%%k>PDijRXg3H`2N_7B
z@qq^+t1~3=GAR#ihS+wnN+yW+N~F^!u{MM-E1wj??QEQY<h+M@Tmk5`-eF#ZNDu;w
zVF>XsHt4YW{1cl}4)n!n-^jLMlAp!EnE_(QQ^I#6NXkVQMhdhrtrFv8pzY!CY^`=E
zb_}w^P#+^U0S10GL}ro+utF1l=!Crs#De;i-*HtgG6LPOFOg)C)7?jOLDc=v2pVqW
zo)RAm`f`!f#M`?i070*m`r2*OY8fP%$qt^jeKB;=N=A3o5;llX4}WA=nJK9DS#&##
z2sY3>6fx(j5@M|$2jyeF4j~$5`5{^;@jCA=n2;$X%oS~pB$bU%2Ys%wA)y|JDE>3v
z;Sz^dr$EU29UnjO2CS-g|JEg(49$J5XqsMg>X{(ruG7}nUjTC!fqKk#*95|b;TAm~
zqa$g|^KKp_w6?onN&PeC<iaSb1;mBM3=(G=N}NG<p$*@Gq>%$upa;H9V`AFTdS)tw
zf1PQ|u%Tn)i7@u#x_x=vpRYC=Ctdq4jq88Ce;w@!f&OQ-jvB(8K{C-dV5bE)i=ha>
zKn5vUQH5gBF#5a5sb#M1FRO>-=V>^mMBqz4Sjir4JYR~4_cLr8jU0=)hwQ*|?bG0%
zfJ(C%Rt#`!uK@~}Dc|{^6p`p_Jj88bA0QEJC!Ts=ti|Mo%*lH)RI-Bkr+!6&cVSG*
zdrHl4JnpW%cLb6A^F|Ini8w6g-6s86SUZTs5?A`A`*9C`Mj<(M$5uST>qdl#&VZ-d
zV9zcEsp0k<D8JU7=8I1)aGMO*eBh%a9<2rP7BKH$Po0G}?dOq>$=N|u0Q?t7KOSLk
z-bbfd%%Z^3HMnwQ7FrOBxHrjdIZ)<PJf6t#kj;27$kID}*C*wzx$^NJVL{Jg=QRUN
z%YCxg@)w>XmMXDVU=9549}LtR#GWFzpK1}`3?7RdiDW&{B#g)N*ZM{@zfT3c<i_)u
z76!^Gh}XN7UplIISH?4Inj@6`Y2p(*S|AOw0;0)n9I(ZC(BZ5lJsY`e`wDJO^39I^
z>gta(pL=K5-o|}Co6mM`;2t#Kz^usuM*8ScSbkq7RpOYMSRXx+_d$;ETOXWeVdvH#
z;fWN1+T_R^(~s6xJ1%!U9}(fyoYQ=rHl>ixFl}Ge!#)2H5?bvGc`#Z@p|QDmwd$$4
zyU=>1e%7Y@c=2ZUhemuVhcdps=Ci~Y!8K<uG9pyQv*KUNiR;XP_`358cVGhTy_qGC
zvs@Snb9cL4pRuC&hu5fO%Ciu$4Ihy>ogRA0ndXQlse;R>fe&rb91J3QbB~^AJq<~!
z2V^;#rL$9_n8C>s!u*lwz#R!@R(xB4O#KFT`ad&w?(eeYy!l?9vVA?NP|FI(U%6wQ
zQXsm_;KYv8=q_1-9FxEHC`rHEVY3=MKD+R}@!At0Zmeg-8}0$Zui54EctA5>Yq9ZE
z$?Ae1Hupel6nN-kRINx{FLajrKB~~Hht9b@%69o$ChE64a5bG2SRWzqv)RZC9g1eY
zk`<wOHE}9_PKN%ucS5(|jNInX)!zRC82R=vUYVvNH&VXFed{%(6G}(VTmBqk5Zv*O
zS5;V97kp8pj*375SDIh(!GC<vpFMdB0DC|JkdEd@nF)4_+LK?Mf1S#=s0rA-!@Fj4
zNdKT{nmG-1-yeUf&g2ST4I`z>o({X<pK*V>O}K_3tI+QFND^`mj$o<k1ONZw?d$)V
zs{8*@%2g_KV~Pb^U20f;6iF@a#xyUZykVND#oaV4G{Z6O8E!`<qm*m&ro;?3lw_C}
z%t{yv>|i7VNrnzN=750%$2g9`w!^l=Ij8SyegB5f=a=izg|MBQ_xt^NzMik=>-h>6
zlSF6*N3G3ozgq7FcPg}Ii^kyciNl`ANXi28Ncm&PjgaO{kxqP(15N-PUQ&$QSmIx?
zu){2CnzC?IBKgBdW=<$bcVPEdB&M^qg&^xo`9klPsxrisWEoTqR;(&&HUNRI9YC~=
z-_Lbvgv)QyQ`7Z}{qF~O^cf<0oaVBczo`68LwNQ#L)JGpM-YZ<ue&JS(U`-gdM--u
z3KrRVYhFVITIO6|0<dr6?=Qe&EI65lekoUf0epd=80OhZ&+TUfhiEiqrA<G$#%wel
z**hZ5bGYo9f3g)|X{Kl{cmU?M<wx+83x9@i>8t2qgU|^EgW7H^eu}kD&;Ef5#L#$M
z@V$$`P5}S2lXF%2u??&4Dl}IN%RmPMLGa*BcvlmH3+khD%})9$`|W5*hJeaG42DE7
zVdGNUd$E;V$?M=#BlP$iQ9YRm`(_CguoS#fOnLFcZ=h(FB4(lkw@*=AX&Grz+^?DU
z<#Hpu$|7dn?=GrfIPD20n5~Ok6!Jz5XlRQ;$2u|^5sFw8SvFu-W84qn%sJTMi}ijP
zYpLHTP=BS+zdZ0YUenS`@H%>bq|Lv>(HuJfQRs^={sj^?GT^V0jBqa$JhK<-S<O3_
zqZo1i9gYSDqmohuN=vV)Iz32&zZXoUpA7(a36)i*!b%RC&JE9oPsFyo378h@Yi<`%
z$@h19Xa8ov*x-Rx8<)cJdj!q!GfdDk9zDw>P-*>0M|@m$aNydwFyhLr8%DNP`$s?l
zeq#zBkbSh^*)VgLB*J!*oGzK(dJ7Oi`*QG<YkpeCKBS0WF)KO;+R_tRUNcop#bk(l
zbF}YmJPjBmwc&30FJLnpP{6_Fl}X-%XMhMQpUD9M!hf9xlPQvykOV+=WX#v1H7H_&
zDBki};?sYC*D7>+1^n&z=rw&eh?qaH9xlo9K2m+R_w&9qe^aot$fQwATL(^m(|uH&
z1KYS1#@!|)q1d1MVSon*-`xl`5R2(w7jGg7-wQpnDKzYlcTtN;W!VCaTg+jgtZ|d7
zU-ToNuRjc+X{$~7$3uV?b6^EAsn3w7W<B*-TF!bDF|~R*52lLm_AMWvCKkO;*hi(>
zvLjGC3M>%$24X|b5(r6?gE{$fn3tFWk^Cq24|JfhZ05hN?&|tKZPQ{ePzjO>C6Z}r
z%1?gFSsWUfq`nCq6(927t6$5+y*q1G;iM-I`mZ>f%vAi!(-a!~+&>uV(CiZbHgIoL
z@Pd`X>Pp}2JaL{MyUaz2?25B`q4kEr4!&2=7H)FkIzvc9OsZyE3GicBsY+tU4t&GC
zF5X4x&vOq=;dhm06JKA;>|*zOZ`j+Zu9e2_+)BMlZy*I3Gh)rSPRlzJm+}LC0}3&7
zeGl;PBR_6NY*96p-`*u@2vP}G1OyIsak;FNaHByTf(_Bhpct4|Uty(~N*}$4Bu%?+
zb5Xqzp8!@LCdON+Xht&G6>fC=1c`cL&$|+Y<FtCFh*kSRA%^UD(g)H5e>M@W1rt82
zqHCc5Hn7TewTB0!PUo#oJu1*qlVBUWA8<8v;sAIV4MkEYMDfNM6Y?;Gr*3tP9i<~}
z1}(gNDf>GXp{7_B$Z|!c+^0<fAbS7*&s*97>3ghFiK>#ot&a&>2J1#Wu#lQ$;#2~G
z031PZbsq;C4u$~{=mFFR)M5Q_upt#(;oOEi9!5EJ4*NgvBm)!)l+x>?tJJZ7`!Thq
zA1Xmb1rddM8_C+q>(Id#pWv0xNRI|b7>D+}3>CC05WQd$!9YNK-1pIkg;)>hXw@nV
z{%5?9RD#A?-8Y{C!%nAj`fMsC(W|)4%^ohaC;)@}y9u5L>DcW-w#j%i4A$P`tkNnP
ztg;%;>b)G5aAbWEGfUZvmLJvO-H4LWEaYab*ADI{p%wpPqn}?Y0O*ur!a4vY7o`h*
z&d2MAI>AW{PCXn^fc6>~Vd;}dixaZr1oI(1Za2nETSAuB!HEK;8+_d6Sg_aSnzCF9
zwouF}sJiigAA<b}<+Itqy}+rFulEMo@eQWlMlr+dz07bNa}b3G*BhXKaV`bLF2W@Y
zvS2Ki8w4LN-H2h*Qj;h_YNW|ABvnc{1BE!Ia@ce!EN*-<NujaV|MuHpo|nrY#cWHk
zI6Gw4=J~i)1yYKRyu#xQI9wWHESd;7Vq`0CM5Y^tl`2b>#^Dr_kWH!o*m}dN-179`
z9v8O_`5zI#G@S(DzY(UGO}wzs>XjZsl<Ilk6@F4czUgIn-=sI>Sng-Dm8y8;Vl<Mt
z?4SmlaP0=m!kafB*|lK2A08eJS;aImheH1L`@v43x`^@ofZmPzd;4i|diUEJ6Wotg
z%DfA|jVOw6;Q#rhBt;+-8<1i`^0(jH_bYkIB!nb`#q6?AWl($rYaIaUV3(Ar7mod&
z%EDr377RnETP{$b6WONW0n<0WAU0;h?$qV<2n;;|#frke{r-mm4{QLBEiNOu`N6}#
z(vf7|JeOT+gwY{-=nN<fbOO!Q1PRVulsCpC#|lLVtZ*m8UzO>51IR}8;QU;q7V~B!
z!}SftRfP(G3glnF)_}K+rgJk(t0>Rz)dNrc^#XtHN(B#AYl;exNly)=nm;W;_}o~*
znFkNX^t;A0BS%+SttJ&)`Jd>$VEXXRPE=W%oQr$1>swZ0iUG4`geky3sx&~=*PB;Y
zEQIDRLww@{?7OtujHt2<{-)Ht(2Cfm!m{9cKDh%>Gl6~n-}!e4NVL6Eqsv*iEP$ov
zMopHaX_7KO0rq8oUbD?A5lYX&ydqkN7m_S5(G?Y-()<#udS&}3*Y;P{Ya}mtjmde1
z)*3nQ9Z$_N58hCz7@${V@@w-4i@;s-m+cT`cEi-f)utL!7DBhZ#riWNZZggPTBu5}
z>G=mx^8|ljVLNZTn~9Z_RyVK~=h}4Lsirblgry3scTs({6wPV0N&AxzRYy=6fltht
zp|6e{7PaV~IQ`L?uj;^?LpVl~M!}M{K!2rf(%x<MN8`VT8{|2bs7tM69!jn5mj!Mj
zBJ>rDxY1<JSfuJRO+Vm8Wtit3P2LFoac+1ESI;dB$hVhe+4{=PZ2;5`TPNlGufBd+
zyZ6)#GF8nwuiwH~s}S)|R|zLLK*mp-MjQr>et!VFuQ2Pr87h0iggaqQm_?bi46~c~
z<#f!Hw_%2%?659Xc1{0fn#_+mQ%b;;J>?*OqswMg#W$OV!?YrqNEU7_5gE$-G3AEK
zu!4Ov0Tks;r*~-Ur3eofc=oNa>9}ptQx-+EsOPzodrRP*!9cIyO|fLI9UkHY4Uz&t
zOlx9)lCO1HPrV)n)gZ?eU?BWp=!V%?GO0|(+x>`If#<Vy-eoUy!I#J}xs<LtM5K%K
zGs{|b4OSCf5g}RIJ263HCwcEU6JWZi=)bw$WyV6@W1Z(_DMg#(>Pk(ux7|=xQ?~Lw
z(fjFxKfE?$A>o&8R#bATUG^K7M<}<G=FJog!cuOry9-YFiRXaIJ(3k#J(f>-9$npP
z=)60iMef}P#Lj|xsMP$Ov>|lT5+mhoGlu%F5BU)q0eYFU%N0M{Nt0@G#~Pv~f)c0s
z`-gHf^UVwGJ1Xg%`d(-us3}cfX0cp{oi_B-_E1c@DKp%#aLV2FR@A38VaeK^^m<fq
z&X~N+O1~KZy@i>9n+lb<&v_*}9bW#ANMZr=M1#GBu*jk&8@(@($1ZX_>Aas{`^_>L
zD0E0sks(>BPnzIIwmfFVUbDf!gUVY=Xfi-shNypdg|n^4eBS*yf`^^c#yyx~v_pwN
zMyMM~g@clBtfu<FSajW?*By+q*VKDnt?W#G9J5rvR<5cT9+VY2^`k59q6D1l36h8G
zXT^mj6XETPsxrC17|?Y|S`@=YE~dUGgFhUofjME$9p@pAU}Ium93ZZ}veuIm5z38d
zE5MEF;JlmFpJW5V&kc}61RH$*2}W`~4<L$>-7pW5P~h6(Z``vr3JK7|(#7PU`P>(r
zd(AUY&l88mqVecmN~viR=it4i@D1Km_b1AwF#Lz;5-TTNHS-``lhfY{^(d^E;h3dd
zG$6J}E^Q8o7H#hU;DK;jew06e*btL#$E>#7|KM}aQ_0!^I5~0Gl&aIsyxZ_4nKnr}
z<p!*}veZZH9RZJO&_?uLc)UnH!DT%Jk8X8n7~y%6{Ps##TfstGw>b5%(fN3DupDqD
z(+H`W8vpZck%A_tbM%O`m52m6wc{UvKe%*D9CCog);6?BiY+%f+(-W~Vr8lIQ8{cF
zdc+N1cSx}1FBey<(3Jph<7wNMnLQ1mcEWEqTn{&#Sd5f8_GMBGaK%3VENa$wls9Az
z{AJ+CIHWN*n5#iY3#^9?azl_!c~G?B0YGw$Ft`@|<>FxMB5YCf@~uAhEc{|21IUNV
zjeC^;k3ki7{)7L#uEVNZ?3l{S<iu2>MD^_k&Pkp;izxt1eeV`ZjIK~?U=5re<7=8j
zpYws4)?DNyDMQU$9_o<N;T4b-fd`}ezkP^WM|$NJ(2NkKtrro!H-gDo{?szMpkQnT
z$Vex_$<upI!N<w&AH#eTWHR4UZnGJbE!jN!%bo_v!l6$fcAemd^4<TJ)9&AoFqb&>
z6?Qn%pBNNj$AF?eJ6q2?OGRbtJ#N;bBCw7|6xuaGW;T^G`V<rAAnb7#07y~G-oEdb
zMwO+>pm7Ft&=*X3RLE5S81qGc%ZwNXv2cIsu<)t^opf|<siO`!)QDj5uv5>g%3Rs2
z0HTwZoOdtQ^y*XGhEYkDjK#4St2TN8X!CSreM?wua~8q*2A8#}1s9ja;yfH0(`Mt3
zvpiB>RfM_rb$An87)$bKCQ??CIqNNHv&c74*arrf|N2EMXx5MnWwd>tmzTn}vq9f3
zh!)gMNjdsQEEReH34~HIqI4CJ6x7Wg!K&b?R9~Khtpshqq<6m?0Ik5tB1U7cA}Q#E
zINi%4>fsm{f5~oz^Gs1m4c03mC(fRW*4SvV8%}cML+II!b7=*==Yb#Xy&x&HP`q~P
zk`J@;JR&Py02q17U&$X~*rtj~$U7&XU{pJ0cO+TV@zG*8wRA2z#0=UEI1>kh(1CA0
zIK^nLC?FDc0YkrajbsY#r;)Rj1~uF!?$Yz)_p-|ol{%5(O$1dM)&3NppQ8QCr#)-Q
zb=g%zZZ9jo0YKX;5P9M~;IPtvB>}j11Kh!~pi}~S+v0e44{0ba)ZvW`>m!cbGi8=3
zEq9MU3B;8+2Qb&6FwT%ds$~YW%|F-tlc&6pfNX>*m<zuQqG(Vku$!`BItm{~-v8cD
z)tewg2zZSPq~)eP#46ioBXA~O4!H`=@tve|PL|#33C?lHUaj$%n7Q<Np~Fr?YZR0X
z`2JS7r_<Yoz@gvM2|XMP>2#!+<iQq|S7*5$j6x5SC-z9)<HiC3Tz%&nsBUQ-l+{QQ
zK!(=Ax7=L-J6tJXQ1LRKW1$0H7$jAr?^hlsQ)9K2h7d@u5@0iW)!f1_IB>cCvQ}ps
zKPjNX95no#{ML_hD+XON6M*l@o~;Umhj9bF#LfAX*oDQPYi|0U(tvH=;Ik{SP-Bc_
zWt)Tq$*M&1B8dx=cY<ERD?Wtleu4f}17^ZhF+Xms+-bF9DoJ#KaknodoM^DaskDfC
zUl%fYZl09*9A1P@i|rL)gw;*X_GV<kL@V4YF8dJT1k$4YvG4!u<SWjS)4>5{X=D5d
z<~ta<itykODSVw09={nKF=?3U00aIQkCbm{tkUBb9z00Az(>Nt-Z&)7Q<kNRmw037
zr*&K7NWyey|6Pod!vVS;q!x<)XmB!}Bt{?D-Gpf~`^Wvz|2a)*k%@o9;$m1<lh2Z8
z801RhItyT}WKvrA@s?;`?T6&xKGE9&8mmaxDq-<(ZTKh*8nvJHwPW9f9XCSrcxR=&
z37$$6E_WbdDH7frkvj?0RqB1G@g?xlX-yVvrh4QD!VQZwBUW(yFJ(Ae51I(8*Bf2z
z$+n<~Mdw(RX|!0uk1?CWrB~TB#8^>73k`Kqqq^o9UKl<CXUb0;%nah%!5{zyy?oeU
zRY>WJNzH2EX&42enZC;Ldb4dLY-Y97V#HvAi0%zs1@()E1cZ}{RD&!WR+FC3{5q1{
z1ozRT73Ub<+cyGc&&2K`&vQ6lWb-iG(UAdMeWrs%&nPw_UpHTWa~~#EW-S0Q6Dmc|
z>qg?<U=+-m$4zMXUs8A+Z$|fr{Q-$a3UurkCUh|`{ZyJm3#v-JOwq3nd_=;)q}U-@
zp*hI6B53e{-ZOG%pZ1KA3Gs?E|LR)}U1%`+!&U@A>4_4t%e*MGc7JK3ZGYlM!AK*P
zxNi@H52o=DL5by$;&^gFo4V9D!cA~lEHlDV%M;!*|9&Fh{jxZ7t<BJFHaU~Di6*EY
zjdAi!FubGYsM~s@ZG||OBOm0BU6bN)!eLu^Pzv7&4^Xc2mw7^TA#n!PwwCseN98^W
zgEUqsOp4>0Qd4@aA#qmVfu`wTkyT!;GxRmWu_n0J1O^9z9;w|i7Ch+euy7GbS#(L_
z?Ms|XVCh^JK%pdVPekA!Q&W~$ZIL|TC&<Z+<X!jL{@U_rg357xnGZf=!?_`{sMII6
zS2JNGb^if{)I1<u#y|7zMEeb5DiSxGicYIbkSSx!2hQ2x3wPQ78hhY^a~ac%S^~-?
zE5Th}EjTF6+4l}Gp@NAgEeLpDsQ=8AWv~bsR>I_4x9?)EC;Cu8OYV}b-oZ5V%0m5a
zFEOuYhskG!-lK$rit6}i4)n97MZ}1SAZYWP+)+xX38N3A!OoPL4EM7wkp!>vblLWc
z(DDqYV5bw8JdJ=qkU;j;p#ag1P?_nCDcxr=S-QyKN41@#;eb!Q{#G_d8ia3VKQ8vm
z%sN?euoW%?&(ZI;muv?OET8{F6nLGSF}+Hi$S0pKzz^HJ6Vb!2tLSAo*%FGx>HAY2
z;O=xcv-prSWNnB2zS(%V>;>h;y%6E{BPZZw&(jOSTK5wU_T@6zr`w<*sHkkx_`p|3
z!0)hbhlOH=uKHW<=DYQO{2VReZ#sEeFKm@>GhK98>Ff|%=w=j`YMT=ZBbMT_zEtin
z%57zPvN;L46vV|5(I-O8H~i>Lf#$<C+VYh+v<w_ReBbZ=U}t05c4*ftCH6~(tqec8
zFj3t#pjkY-qu((R;bJ!hw7!yRJysWzPKPy8ZhZH?drWz*k?{VyCXy9INe_{!tVJqS
z(o1*ZG@Yb|KlaecDC)6EjQV!wX)kFB`3(zM*)yH7;thbx*T9|~f<xF%r1k!H%cIN=
zf{n_#`nuq9$THAQjWGT=pAWn#llr@2MWjyC&<<5Q-qGsxs!|gI{QwiQk>pqbRz1<&
z#TphrC%2wHtPquzBow*4e^JdllUF&R$sD!!<Oe%@Wc}h`u`Iu3s%G8-K7K&2N%tq2
z<}lCR_ZOH<Wm%8&b-c5q;?I>~gkfSq=6e6`+!h~YNAUzZI}qH?G=1A(YtFLC%2FfE
z8ZMb@esKdk;k0Ooi<WwEX7k>P*E(hfyDTT=QVAc$tsh;uj_d@Kia?Wgz-)PE39>2g
zu_UU*FoK?3RPUm$zhJO>M9Qs-t3ABSu<6c11%Oc)Wk$xAjhcg8q!#WR`Z{LZR{`)(
zNscat^_p^CV^p~;6v@oXl%fU-dIP)=Y7@SO(RXq|N;42k>NIHB1egFNa3Ggo278)n
z-4KPgohv3he(8Ew<zJ9$!|+YNunNHEzF+!X#t-{PBIG^r@)ya`q*3LS4ID|wN%=N-
z0CrFArD5j3{u}7RjJSn%1y6uo+z8iFAZMQXkri*A7|bT;<oR2-b$FPyqQ=+;^9f$k
z6s{MF;~_Bn6fJ1`{xG7A&wW2Q&_dl_R|NfUo+ZiRIj_^1fog+m9C>bo2{xnjeXR*|
z{lEsb3QiSH`EuM13ZO+tn9tm>=6m)DMyz_36DJ<$zi?{-{G`>f=yh<x@Z{n6@>rk6
zZ_TkszRl6TkFTQ&b2*#jZNG`&2Ww3ui~#v_w;)L_<hSQqUR)kVP)Hd5>FLK1O2+=!
zQ-~;dI=IzsLi`c0kwl6I=%~4iU^E?1@A+`=GI+o(lzgH3R@eW9h}&<bc#D6%5?4-G
zPs_mO3__t<t=?p2d)zY*%~dTHBVQx2;B01&YzN+#=5cBxTm1j_gW1_n>CeL?xg_&s
zECS`;&W5MrQp%%<(fl!Fg(TX!-6(;*!^e|PJ!^M-fS2Wfc+)c+=7|b}F&zQLWL}F4
zj#M|C32GGFwu5P|Sk@%vDa5ILjMfHLi%;-MyG16_DQi{C4bxd@u9lwP5~k^qNV1M_
zS&^0#`*29DK!88P<jum=Uy7wEE)?8>PtADC=X;UJQpGm652sdAfJWa2{;w|pr4Lk6
zlelhc@3};{xVubUAg=vWV9;b{!LsD3=fTS)dyxM?ltW+&5AG3xT_e2|;D~1ty?}~9
z6cV03gvZ&Yq5Pm)FFlfL?g7eo8R-4#bT^DrO$YEIY~XRMj3oT_d}}%o=0kuk%c-NV
z#_}lMoNln3JP6T__mIaM={<|U+B?x;HY%O48mziUEP_NfV%23nENWGXm(fY9rpbcY
z`rWer#>}-=_@yauz(#+XnZ<yunb#^$eb*<Cn24)@Y~>oRF!5DGy_X=(ry^j&ULx5@
zu~K~sQXKa(3jvT3^v6J)V@{i6P9e=}zc7#p53rc%ffM>bz4p9((qhy?E8@BT;b4{n
z*Wnp{9Bu@NBXA!6s8rog^YA}oZUUN%#7$mim5nYy61*!kd|X34%j}T~^s1qF)6v$A
zeSBY!<Te-c(c_n(IJ>~gWN=}i#`;FUhnQ%!iFuiX@xT_yX&;np;o?XinM_Wr9o|{d
za6~|pAh5;TuYy4B%08GELyM2igCXQ53aQ<D1y&36XDrtvo%rD%8Pa+w5@sTkYhvci
zDRdf@dYMVDdi4|LGWi>>$yg8+!<hu?0^izcLT*hn+&Xll-!3;y*Kw@0o3v|g?hF%n
z!ZxRSyhPq!f29f)Iu+8gvX^pGgukNYbgq~>^QXVDDvOcud)S5d7Q647ddr)x3kt6+
zFi=P-NB*TW`;@~dSwO%!*!lS(y~7uh*+00<)mE8oAVE-dPI{bdcI}5FN&QD8H;xB8
zNP)IzZC+d>w2JqQkm0`cuEyWh22T|83F}^ev%n<LrZcfS(c99QsgwGlmJT}7a{trg
z2Wzm~)bs-!9u+L;-(|ez%n!bKncYR}(aSlu3)T^}^t^F`DYaUAB6Vz2r@xnjs1u$S
zsC`+{vS&6@ZcV&0%Wx%2sUFgM&FDycrv^W84*9@0@w2Laz&5%(+(gi<DzQ|uR8wj}
z1o$L`J5b7edj#NJcb>}kL1&Rf>L`4?O6BE7#5P@qVT(;*fg;59l691PopHjgx4yfP
z9OYqBSZ-H#P3l5;mx5{JrOV6VU@<{~F?Z+y&|d^Oi_6C<s3;5PO#bQ}$<I5e=BQd9
z33jLfOh_BJ*R$YRwp=i}P0W*S%1B&E1nrfO&n@DpU=46AJo&0jZw^zZeQ*$l@krql
zA^HSaJ=1f<!G*yL_fkZox497r==y;(4K`fu-H#?((TB^yWrT@C(UIH18m3k&wyC83
z$6$xBMj$8_dBL>;iPyGP71(u#yUMU+VWqR5C)nJavra;|D5>2e5<6wlfmvM{BBpS7
z+g4lUy?upHxU={3maX5P0~;Gw^VW<wzxkoOuOn@WC}$h*dq<5655YDUszCa_>~5bE
zfL`zKheS+9;Q7b=Sh^T2SGRlj-xDyL8c^IrpBQGUV2UFb1}!Qn0wfiL%SGMCg5hf*
zzQ4*Si>Y_UBIX3Mn<HBE!-0Y=D;3S78doU-Z|Cl>2sq}BMFd3o-xpasZs=aw<t&3~
zaG6KZAyloSj=o}6qnauxGL6yvuu`ADt3P&$2MrH&_MAD=U}*?|MFM5dt@cXnUDMFe
zap1C@Y38X<Jjo5bG{xzxkHaqAOpu#Kr>4=Nf%C#na+G|0UHeDHt_exw3nf`}#2Cw*
zu+&yq!<D4;M?JP*zd{j$H;w%Gsph(CuROu#50zxM6Lx#|oT<xO8O?(Sxw!Swd;q2w
z>ojM8B1!1eVchG}N(LP%%ZAFoH1W7yvaDZPh_oJv355N#Jl|%;&f66}Z;50U$-~=E
zu5sz0HE#+xc(XQ#LA{eO{=zwWrV&ZBdc+^66jishMS*Mw)&EOf3JO#F5s>)kAiOm8
z43|47)~tv#pz6AW9U8zpg4ZQHzBQ0D`1Dv|)=95xya3+`=Zi);xDMbS*|Vj=u9J#%
zp~^>GX-eG=DE_rDKfDdN&7Z_z6f4WYdLoU?lKl{5Ip1;P&az`W@R7SrGLIiSd}vp8
z+lI-}H7(SH7$IFHVrgI;DLBv^J+|7KF5LfD4KI<qs{2HsV8S9Rza9`?HlsW5PTV*?
zQeVCb><HHj8^L+pwZSBML(Si0j@0=(Vn8nKE1{^HkCR>@j9DnjPhqrh6wxVVgK08i
z!#flYw2+6;?Vje<U@v^bYBR)yG_kdnp+~Y5K-Du>scG2J*OASC?W6Y%kbNh@;_2c|
zb0$l2%^_Lm>H<An*g%4NDq^}0H!_@GmVO9hR9?yLiqs7kfD`og>QT;!lkldS-d(@-
zMu@1y#fi^1%gnC~A9|xlNDGILxHZU|xa4hmIpBGlo>eQhl!#C2hPomyZ*f4|n^qD3
z5Gqwrtt61m#Ygpn`7wZCyV+tG&y*lf%)Q%dr^T~<N8|_LC0UArGBI16WyAb?urRZ*
zal*^2iFn;y`xbxEA`Oc0g`2i7?N6uoqg@Y#?x#+El-DITvqqx|VTfvEL`|dww0*F;
zzg~hmmTZZSN5VezCH7;lJB**fk5d|J-j{xLWTi1wJ;>t5#YpGbsv9XK_1y0~5p<c?
zz9qJRJ=z~1{H85nEn39u^yXN83I4FSl;ZWxXX-#EB)gv_1ONLzIN`7H%J)`;(%D{e
z_Ej^?wIp;_&-SHasd8d{8ZCiG&L@(aq)l16P0Ffp!p{FL8mO`&TDqvdB->IiX@<bd
zzc~LTKsM277Ny0*E_RMd_JYV1Q;sd~qNAnj7Ee1%+*9^=JqbJy&8vF({i!LPDyVJE
zxVX%$OgN~9wVWH6%o}`aXHT|OUYn&)DpGb<?H&0PdJN!TSN-`wTBI<Y*L7#Lz4zAU
zV3Y^EhH8xu%o3@&j(n?8uGVn)Ohb|uM)(@$stg7rVKu7%_WSwtHxLn!M9K6jBQ)cr
z445qQuI(hoLg5IF15wc4cObCCGq{@h?PX*q^=~7vGCF8TqJK^f|Kc?hh-)28(<AHD
zOU!AMFc==SrBC6;h_+e0B(`MbC)cH5gH!M#?87{2#>J=G!GPzmi*rUKJ954il<MG<
z-BY3(Da)CHH%7`6if6%b3ksZP+^@i??i(EtBRZ!5Y8FPX!6+|GbQDGyrP`PnSC?e-
zM(|jHKMN<puYu0~*Xtx5uH;(>F8V%L%sd%N=P=rbZ>g%;t%`h#8>n6#qr@QVn6HG`
zlF4lXNM_&(#_}JX*MZ+A*;je<O~<y1rGEeGZI&~v3h3GQcF!Dicd-VMfL2X>xFYUf
za=d!BQIY>RQkNppmIWpa8XR}T+D1rlXQnEi>f*(o4Xv>76j65!Y3d;mUX0F!$H3MF
zwObBJimkW9tbn|*Y8Ff_fKsI<p4w$m1;*ECjnZahMF0%YX`IpttIgo8Py^BsoOo7L
zGLxIt{+K(R_c-FAGLcbE@P?*g<}Mv5&0-?i*B1G0l`8WHW~0O}0Q@NinUvx(7@-x{
zNzywGg+=lN2*fY5$FUdchkD<Xu;H)BY_^92+B@C^OUl=G_Xx6Z`_Bs&>b?|9kWyr1
zJsJ;*rN4&w`TCqRsBU#}BWyj=cvBekLtzBc&I{|54bZ6SH5t4r^;j5mP3f87SzyXM
zWx=@4O^8%0hUFX3m&S%2evMQ*?+5CA=5d;NQl2kG&^XxN1;PqS`B6KhhyojRzGLaw
zY|=Q6ApIVta!7B%PmXdo&jjQA*4+^ls^>7MH0vCEIb9G)O*2UN8W%4fr9Wj607F%O
zA}T6SNnAl-a;3g!idx}AtM(_2BXmN)4ZqSrbAR!XcBJSg4`zup(f$T_31^g-sUjA}
zZI*O!EXrHQb9@aAYkb|<=WN0?E*AsxVB|pg@ocQq>7Zr^NbrP`OkF{XM<sEbQb6HS
z^d1P+Z+M|?@cMBW!N(wB+dTKsKV!du?;_mk-B4gcx}rtveHfsz9nk1idL75$0Kf!+
z>x7NYgNfyR%Q?f+VqmdAB?Bnt1k1}&dd<{6ql>AdTDHPiIQU#T8)n-=s`3u~YWV9A
z8SZv}3Y8j)VY`4^;rg_qV15$lgd90d7z)M1sO)i;*JZgF&GMdd8vU{Q@Di8KX$}hQ
z2IE@1=hI1o$NX1hj4*3Lz!3$(((vl1OELn@dhcLhg-ew#2Brb7Mk#`~r+hUd)@Pdx
z|NoDG*Do4+`(tg|To9$BK>D=s*i9gBS*JWO@Ew>&V}vl}0#i4Kjp!h?^4zhIaAk*r
zb8U9$s?F*)!0A|koOrxEsxXi*<w3o#`a*wLbDdLzUrE$on3G3k-LR-b9kw2J(~KR!
znlp{kMVeEt=|-q(f-Q@rk!{g{PDi%>X^^ZhyJ<vjnRvXE3YM2bJ4o`S%YXyF9-q6K
z-iJG!<3T*8NxFxyd!!#Fl5{LEU43uD$rydGo_KeVR7kEdDU~Pt=48VHLhv4-Ha$o@
z{nF!*I5jx%SSB7zM4(oLV#G^=T$4<1Cw?_vlf(FtLODOn5D~e~kgTAmG(tT7{9$lb
zSHX3uon3o1qi^mrCdV>Hsrau~bgHDX0P&=J6Cx`F#{+0Qc5=4o<f4P(x`u|wNb7{%
z)|0KTpPdUit*gH{M<r}D{JXC1E8QiaFAFDOc58QOC)n$J5w_l|Zlzr4sb4c#AyVbT
zh^Y{+^&*{Tr=>5=D^-u+s`Pr-{cwZVV$x{5L60C4wWxvEo5|n*jyro=?PX?or6~YV
zb`@AARRA6#?2XQ+wB!0N>^Dp$5;6Jy-YidmWuRP1AkJxG_B#@FWv*9PYq~f7L;#J@
z67;M&W~&ew$B&l@Z#|GA#mJvYbDS7Orc%sNHI&JuAuMm$-2uTwe^j8QsE6nvT4IZP
z6nxFBp9ciJw;r!zls_`pkFnza$PRW|X<qBa)h`b)e0_8Ce0Q?ogxD)~Yg9z{mcX^x
zD>?Q<(R(<x@zS%m#rpszNTYKG+EbLpN<tm4U3UmCbGe3{#w%3pcXuC{cuHdAQ5a69
zd^#!1%m+#;2Gqz~q6W8tkAYM$aRdBdj3garhRj}3Fqk(U5lan1K?eNcc6!xlj#oCj
zC(U6#ePhrmAJQMpdLT;~N+-p@1tp)&rRb>X)LOAP*LI>O_c|bm&OZft1WDZl7U^S7
zYahuOd;jOHPD7VTsUJ5axAIG=cPw;l<spC6+&#s7O!3~h7pEDyFy^{9@W5&so)4(&
zu4#hVSa|BmkXcb_mx72`<sqwX^%w8hdixhx0YomInhP)lcaHNoNzlfAr7J4iMSfbd
z>_y+17JnQJYCK%{&+eogknQ7Tg^*X*XT=Wyo8Vla8tHEoTCYq*LUd8Ho3c!3Y~P(u
zFLDF9=OYRy4uWp|`5DS~F{kt7%?||=j8bkPpD|ew{L@_#5hNWAN67QxJ1SLXFTlu4
zZzC`$6={9`NznN4;sap7$#X4u*VDEg7p4oot%-uTl9J%fnZ7^KU{_WZrpDymz+2k&
zN%tT_5ZwC~xi^Km2+dgZUURT?k#{)jbRVaEd-db>_4VaQO&wMPB>Z-^g7V`=2M0*v
zRIFonR{%yKjC_5~*QH9rP<t-y_VY7NVljg=S_a*^(CUaOBB&;Ht^~Q93zWu0@(y&F
z<}ds*cKffqd+nDAw=N~lNfwrEhlC#Z9Rc=;=aFzZP$s*6?Ffv<Gs#r<Q_C_zN!JOX
z$B|x12zrmFxdrimoR80Hdt8<wxgv=hj3z(7x)na5m@0&idD?DK^F6R-<^HFh3Z7Fa
zG8%%-F_yAj=9k`sLYbO(+PQ>C*muEDSLf(oZf?;XD8I%z0o}p=S8f_LP?{j`3y@*8
zRj98y)BgQVlPbuf$mGZ5`XBCk-}X@@nA06aq3L^LO7r&OY6_+IJlA4l)+ePh2sY$-
z`k=|XEYCo7fLI({^jyPc1*qs>fzDKH$X(lL>*J(cM_Tw4v3PdRvm)$Du(ZI|oe_{#
zcEn~;6PIZy3370L7&^ZAfuGxIh}q-da$AVtfR9(zJAJ7)>3D5gVhSJ1(wiTP<hvE|
zlIt@{W?Ya<7AOf%o^Qcfr5wX|pv+GS4*ZhsjZs`<Rak0|El5Z_0MUWyE2X8pJmtve
z?_X}$v97#AJZ4#G)`o+q>^f4e&6|F_j?p5Q-Z&D$;p=5BMdMjTvgl{#amA9q{g!A1
zyas_%PnsGAdH<8s7C3T0dzhoE*?S)MmEp}}&AghonWl~v;ay^p4m!7_?DEYCUqgiP
z25#i(8BSqz;9o@ySf~eQ8PVFgAIeL;MOMsGN4dSVr6D5|aR%e*l8N^REx{S0zFl{~
zbMkM$&EJA4=0R8Y%naTpv$t^2iJN3^p7gDhK@JRlGPUQOVGSMD4~@q~xU4-V3L<%G
zB^b+y)KHnwDkoULA`?IvSxbfk!9`{#H1vdx-5`%Wy9;`MWZVXjfbYucs63JK?sqY4
zOHdcI;r*E!T4dY)*xr5OzBE<dTIL?(&I<IKG{)>12DTjWN!B;L`-9cM_UNI5kLJFf
z2@rZ0)bCfdMRC^ZS;_+*+~w|iJz_5WoZ_543cD1@r!J(`zzSIqIs_^eXeM}b+}E1N
zJlR&TC&${uZk0ub_K0xPUzxMud6}Fq|K?9k8Y=AL@jkbk<(pyf9IXGp{dD$yV7>V(
zPw5XGr-GTMi=l=VJNXGB;58!Fr!~q0Pyz10-V^a%DIgXW*>Kj(`8rzidZrA6!-h`U
zEl{UaOe4iW8-5h=q_z+WAfqc(>_g9aWK;mqOW$u)ft@kLU7W<2pndTYM<JX0G#G=?
zZ@$9^{(>{{{w*TNChyc#Mf#hR@hdaz-9CVKaQfdn6=jw_Nk*g@^}ZNW1GjEwK7$j!
zyX5@vlvQpyY}Fme{GtE>ST%Mt427#JMjyTV(WH(uT(U<Dtv*p7IfMX;{#ELGz7r3q
zFUOwo``^wO<{(NqJ>T#XLyaLgZNhpI2ctn1+Y;j_Btb-Ee&W~yXe$g9T62s$W|U+T
z!AO$dN>849;m^=VxSv6)zq)}N{JHXnnUde2L(dv#2CqwlYes$uG<n1}0e;gR=&7L-
z;|D52Jd03I4iUVIlM=Xz2RE5JeMoRH$JPh%YB*bWx3m;?cc6-z@y$~<2vpUiWLDwS
z<JarpEdM5&9k{3}+@R8MzJ*`ZZ-he}_b!v}3Syg8(sGo&hK~IX>tN8{$^~*~39yJ-
zMcKp4Bva$2h`(lQd>-l<Gcb*Ct#`^!<^Y~1*J%i-r>d>Lh?q=?SI7Pi2(JU@tzh?S
z;P*grU*JKM4gvKJMAU@rK#wqthsPhL8Z0iHq649g6SMllA^`J1y;H}#WbcyxQ1MTt
z4BMRrW0jd0$Z9Vfhu=E^+3)Y*sb`#oU#EBT0j{h6L>_VYlej4ueCuIOE;PWbCTxbP
zPU(YUHmD7=sK#diT|omSBt9zd@jht~PY>d6n>QUpg)kU0k3!j|-Xn4hy!;g~O%nP$
zw-;OJbVQ+rk)aIgg&tAQwv8l8xTWhsmkHmnI1GAQOD!(u03f=W$2<_XJqiMD-s&qR
z^!mvDD?pFVLCTPoCYSsCGMN4K#S*v#ccNfxVL&s;^?AiSaJIgI`)op=h@t`f&*vl|
zN|lHC{(~odVcu7^h%rNhu#sDia(etJUtJ<T+E;HDU?x-hKR<xhMQA7ygco}W(hX1K
zA`~bfyL-ht01u0YGr_w{5GC-wM9~8!A1Ce1r-7IeDlE*rmMu>|mc)5&aJj18_jB(C
z^3)+*rhMrJU*0md+F=ynBs$D^gJ?u4t@PIfyDkhQAc+S!h|gxLJE>60DfZe+wjNOO
z@Nq-h6)6X)27$*S&5&F=@O@IV4edu-QHu(W8FY}QOC;j#HeQE6?s=$Ot`*$H)Qb9q
zDKKdx?{5ke(b33S@}*h<0M8C4bs8d1fR4wg4Wu{~hN5B!Pe19T28uR927%TT1$AZe
z*4jHb^q1m?vg9-9#Qbw06}asRL2E02Da#{<<tckN)|=!hICR*-*vW7PK0TFCrP1PO
zcz4UokBy+GjGEJuWuEK>oHMLNU>Ican|yHjd&&;`ZEbp#5D9ZgV2b*@KzP_8NXj(}
z4i;gFfBT)YsW&emM2YtONZ4kyYe>dxrJQ<$CiU1CvHVH9b9BA~$!%niGm15Ff>t%W
zl^Kfr^SlVu8hZPid2`hjsWM)mRhC&OHp>Q|i3AJ{4J8$&iTjOJ^}WXNdnVUcEq3_`
zyae2v%PtPn!&{?{X{dl{(w5_-O8pnP#vyd-drOy3+b%$r=0e|(%V6HiRp!({uOC2F
z*C3dxgmk?pvd8x$>P`bcQU05Qxqc9+tvLuW%@mNqu1B(+h=&WJ%!<bb$O0<wc%?7l
z_x%_}Ie<ZftlaeGW0Tr7or9iD!0r%U8wC1Z^8S_xn_Rt)$s&oWO7#flNPuDRxpr_)
zzN$rgYeXa)r4J%um*(BYK>c!LhZI#y{>w1N<1$v#9<w(iA{14dw|8pdd<Vsuzx^^2
z6KVKdh0-ub41*W>PTb!2%t19+>NtGK(2(+iZ8%kfv{oTJN4Sv%on``Th*^JC<7EUB
z5A0xd4SF@0KGElELm<798@Jq)g!j|5ysaPz@W3y@*;AoG#O+l|HT4`c+ru!5ypY3(
z`@|f>HJ0I8gg$;LWTNTh<M|k+blvplZ0(yP$4X|d(V;2d-4!w%@Dl!$?*cXJtD+;3
zAtI%e6=7C?c`9IS*OLhXAWNWR(X!{`t;Uk+U?#@z+7y|sTYX`z5WhmO>cwe?y+q6|
zusiWJ#!W*H+)UFkMvF6xK>7n|^zg8#J5?1NytQ+b5y+|McUmu}h?hwPdF@G=`9V~^
zy+<@2xb7tXO#h2o33nALJk>up$L0jNnTd-1&vZc~euHP}CUl!b){jcPRPzhsgV^`P
zTIhSwsQA}pIs_EZZ$)w?hk`DTqzHPIVfw_Pglwy4)O|lAh?FMH6rHrmo`$G=uNohr
zm#9^i`#&aj5>`td_9!Myt*&r)0K#xx)|6&YIULzqc+zxic|Mr`z2rMdQN;6%9rP55
z#B|v_cRQC?6`c`D*gCA6-<vkst#o=f2ZC<OSI1ZYb(NdSWHfs5qtp?Vr5UoC-iJQ7
z6KFqqL*9~VD%lgfhvu#bw<lCf^y4_af0wVC)bssXo#0)5yrNmIN}(fe3c|b$=k5|n
z-vzkc$!1k>Be^T}RiejImFi!Y)&Z2SU!q1`0u}$qo)cmIGGzs>zl1B!(zAY!6=XUc
zc-4>TkNBIFeXeBJPSh(7Y~jJ&5I3jPzdFPZ%t~rNSu$eUjn`eb)zmo+j(X;&W8A10
zVEl}(+G><>{h(Zeu9b4HA3VKN_>powcJbS1{l_JIO;ChYpQ_xge=)sqF0gViCZh3l
zHAlrphY@mO@5rk)?*Jh}y=ZlOA9qmdUmp<>+aKArvItM`rAOH4Yg3Sy0bij(P9G_A
z@V|5q%fxcwT4&y)x~)u;(!}iV7EDAjQ9kpTk7O0hD|;N__X&$@aC@c+Mj1(eY7V2N
zJDLA(xU3jB>v}?w)fV29i<{0hv~K?`nT}0>wj9`Pb0IRE`Red{fGIXPb)lnATVaH7
zLUkj`3tQfp!_+Ro9%-yN{mBbYc16CzrZ`{v&El(&iCV$(>%Oae^co3k_Odu|yH)??
z;1u2#ej=+S6mOrm)I?5$=#UHYso_$AW63k&vSLmA4;H2Lub|Pl_?zd&0JW_qG6g~m
zKH$SO#cC(?aFgbe)cP5N$L_$Y5&%!Ui@6FQI==Py;WSrFT9M(T;#!1m^+EJ5@CgSy
zBvJ?}=U>@+Sn=L_84{6k@gC`(V;2LJY8UCkN7ICjBf!|5{8ue+PF5QiQLjB*=4`n<
z1t~x2!qELwvyp^6D>TsVl9k72@_%7Px-Hr)?Ba(<PccpZ1s53a+-wNgUuy_x0ew+a
zGRN8N;Jtc8A|`^f7i;0X2h`~WVFH%C%FE38J~j4i#Hb%PE>tbd;Ik{XXNL2fiydtN
znen`?`24|)X!-Bwz6KT;bA1EnhG+M?IfJRA??n^AlGw`wKEREt??E16rweBP7V-@j
z(R1kt^Mgxq<P~4Q7mPi89BlSib~8nbjG-~P;E|7PVjDq79Q=ZVx*j}ddN5D7IPF-H
z_Bd($Pz;Hw6k12+4kzgKVpS$y)ynQWx2BO3MZ5JQva-{#yW6d@CQ;nd0^==6w&*<P
z3!VBcaR*vu<r%;QMzU4EL<+!$gRp?P@aQU4y`&(9uz3Q%oXCRFh79`W{!Y@1q@+Ic
zg2xgW`vVKL7`!8y_VepDu+eu5bQ-fwpA-=8`_(4xBmfwY?FVi1%}*=K1q*A6|H|je
zP#n(Kf}`5h4We5v^I=((1C$d&%rAq{!05WS!~tBVtl#OG@WVf8C|CeIsxKq0xUDE!
zRF-QqD#SAj<p-ZB4(R3d)8hT8<n5O=7~5jd#FkC{?Z<w#^$PH`o*a}Iz8l*NyfZcZ
z(LdnGrTuh&@08E-Xzl}qY^~>ojeKYx0UoFVtm9!N)_k&X8yF!5L2ov@KOAd#c>X3A
ztyT6yInHK*tUvtdQ+kl5ZOXM99M+qk4*}??ZD|5}ynRDjZKOL!x(=vYET$(y`lQPJ
z#e3V7x-x=%;V|guKG?fIs|BB2`QQKTL}Rhv;I4p-52&m$?)4mI*KFBS_VLK^=saDP
z&QRtPjpOVOIK|wKQL*!O;6H;?(2Kv#$k&JD4+n5bm>k?-xx*y*);Hxh2iYW%Aak;G
zev*B#I+?mpXPhYDUWvWtGHa@&O~=H@PQMV=yTAkYx<b3Nsp(~fP_0?R9!8W&(lSSc
zE&*`0Ksh$Ui=0+gA+J&UATk2340PTLF!=^pP=~U*5f}-J@c#Dugifbl<z0hshJiK$
z3lqoIHbEyV=|o+`YA{a0c5&hhLQsyhz>eWQbbqk|I-^aPx0v&14iqndj8>q~@uQEo
zlXmIvN|^Toy5ciS1ptFT^PxS9dX1aXu~6^S!^2X}*XOC}Nuvw?O#MJ^4FoWyQML1(
zfC9PV9M{bmR+VqXkyr+gFVbO#5HxA33awcqfIqmWk2Qh&*=A&i(*`ROFt?GkXTX3j
z4y02x-feZhrWW)$h6A0V^pKsJwm2<n-jGjTeI08@6a(mp<^C+dYGDSi98=Bn)e5SC
z?_#M&z~{!m!QfMj_dgVrAL%~`A0=oIblzvmJ>aSVsRr!6`6d_{l}JA%5xGUb+chX%
z4XzIe21^u<^W^%5R9MMjtrI>44%7HOJZ{MBiidoPp`+2fu?NgyA68yRl|kA7s);-4
zNbNN9E(2QDBVlkJ(}m>rCCpk#kSkKbuuJusuYNE@OV2Y<LYx+FyD}Rb1$~J_iQ!3r
zPDslfgzq#~@dRzh-)c0rhckRL#PAKdEciQYfTL1-sp>0>gF>2{QN0CL%0Y<YK-kYF
z8O=0kX1P*@q9456w`~Paobt8}GxQO5x!xeVZ)ILgf?stwd==K3uYyxmo?KXE0g-lv
zzO=KGbhuLCHZ)A5%&mjuaZ#U(P<0x|4NeDKd#m)ke1aBB@~4E-*BxG=MWui5Z@<+I
z@V*4fN6S~<hbP3KXbQdeH?M04>a7VIAupIFco&hDaJ&A1GCtg^Oxm95-6xUmw^%&;
z({e%Q($o?t+{(nN6iCO<fWue&<OK=hSxU?TlWG0s@o@sfB+W~ROlI&LfTEJGPy8f}
zEtfVoP`}7}GRZu+Try7`2JOZRgvg&cX2+nIEbOiX`H}*l*bQOph{4b~IY&&`4;$qf
zfw9WLH=u?~e<BS$Q2Bv47X(@(>8n098!?SQ<#M~md*B}tLA0#@s;SB}A>QY0{4HeC
z&WN+&2<(Av#v-S&zWI#?r}i9@BDtvpS+ElV^TYB|!siwo@TOS0QBazgyn27$yQxOa
zB{&-p@)yV(sdxJ3JB^<q+kZ{TtphJ95#}1rg7z%EC)4IGPSM<1R!eCMy~$6@)q}iC
z<Vn(fGq^c+8s5{EjTf86+0%7e<18LK_6O)V`n6ELYiSMTvbmuKT7wPO*AMKNmt%vm
zOr|1TkXgO;*cUG$I}<2oXKJDpYMPt3q*GCOc9WuCk`K=^iU4D>|3(+MrmvF&{hZ|V
zE9q=lxFqc~8B~_dahh7CMRV4seSqvZK-zQCqeqvrO*Dv{<h_?q+Tjf)u5wGIsrBf@
zEt+k&fPB!)`%|8hZzk__s8fEFmLjFpTY1yd*)Fv7Gwk-q{#Fe2QXX^7&M-p#NIQPL
z51BCihs?26_9Qn)kqC(f3gf@??gVUYqZ9XpWP`a~<9U`(k6bEf^*<Jz4ycL@^ZZML
zcsOC!<MMw_Qlw+y#ZI9PKyIz+*h`7Iy%>sUA4rTBHl=|Xufg;SyUC)6^tG=6vbf=d
z(wEO2U}SW8gbp{MPB7`&>Z{76oDmpu1980_-QAKyX0F7no)dokrzHPb&7yOx2b8_d
zXU{pGJ;Vyhw~PhEznA58gUT6s2i0Rh0Up^XfFpOT^$?e}ur0!({&1Ebu0NP-|ELmH
z%7oRq=8O_6HUG?JMRFbC9XDc4FkQ;?`L*>z9r;(HhMGNIvCE}DK(S55Nm)f@IaMd$
z&hwQV_o1ha9nquFfopi}x(|KA7ucGdj`Z|Z)5`A~g~A_Oc*+oDoi2qd=WM7IH1cuE
zy-{B=PVTjRR%ol$A|vkTg@pb9mp;tpS4V`NyBN~E$_X}xXklI9CynZx2gt;G0lIhN
z)=@2^YsU)6LGkbdIZPhnD6~87x?eJFG$M_pfg10NN_!$$oNDZI>5+JTLM=#!3HRPN
zrO7amDqVNjpp9*kMu3WG#trimJHzyF{Mg-U@Q?lv^Y62yctWI4at+UcT<zwE#T%FV
zs19gk1|qU2KP0@3D;A4IB?#eob3G@eSEJfkAdOus?E2$YvurI8NfD5>875}dtp8-6
z&{K%)z-s>3aQQ@GYGe>_FS=lOo!{1`m>^blJp@q$J^lQQQD2J+-%((B@rzhNDHVuL
zzV^V2dS1?f-Y|j<*bh{XomEc{-mA9LUogq(-5(_GKhRVoeUMY<+UJ!U%hC+j9tWoI
z&WNAWZ@9DGy9^mT_`7Lh!Fq#g|APU+TWj9pC()6MDDg1Jmabifoq47bBkKkLwkKZr
zXxpgttiQwE5n+am|I#|JA##ju_GzzLlOZ?znU&IfJ&$P1GE{V!Rdv+_=zgKEo_XFU
z#vf{;=l^sow#?l=7!X~?J{v5*TUU~9BKj2P`c9`^>tZc5*B4Olx8-xc{^A;Pndb?4
z8mjM{ru?;|v5NBM%r#wc1_g0-w{Ze`eYIZ-de0#{kl_uN+ap5doAxMHcElWsQ==F6
zo_Dy6dL(R%Mlc4$SN@~?^Sjq##|sNH3I`QUmO~=q_C8pb_yt4lkG5)MDK+nUf<4a2
zzj^9OFpn*<6g`euR8*23dWl$44Y5Y79%GImU+WFf0X4SiS%2(2-ooPaFJ@Pw>dzp7
zyUuV7i-fJ9u~0h}Z@s^3iYg>rT_WSrHc&({H7WsKt$@`8COR($a983A?`U`#r|KC?
z#H`Du!Z3K_0`6DMQaC=zu}v?i{W4bKJ-O|pahsec^&2j}>^lJngJ?C<J8;G@ZoC~Z
z+u`mKyDf`Kko-JrnW*c{&t6WfW84t6jzh=>1wby?RARv;3Tb)Nnc%d=N^su7U7AvU
zc%m@O>OE+;T$wl|iyD?L?D}Vu>w;D-fzu%w^&3TN>cOcmcue{A`#NA95AO<SSQHu(
z9k3ZHAU?JmfxF;#?1+7@(BgmUJwEX9;$8I04gZ2$=r!Fd{y8-yF!k{V=6bP$wT@^5
z+6)5rPd@3vVfU$Yt8TZ!FWYU=q%?DX1tl3Ab#vItC18#^d*rn7NO+IvNPbMtVu`5d
z-qL?=nk=<q<1eKB!eW;r>u?)ZvvW!7B!h+<0~dw>+g5ah$7>NgGGSyT@MpmCVqO46
z8H0*H*dnhq6hk-V{0xN<wLsUM3+HS1+fqTwT1vuKtE*OILW6#ob2iTdPptV+h0E@;
zl}$wYV~&d*DBP*g@+c8384Tq3t9(lrKz)CeU|Y|w4~HdMd-wAc2YT6>4%{%wcfl+j
zS*7Lx{Ukq>npq0RxZ2Q@_B~er7SdHnW{8=zP<U+00nS|<bO2-KIZ{(6pfdw{E#{$Y
zEro*H24n>afuI(;!odI;24?sS=o2B~bUq2ed3cr1Krx4;inErB8^2AErW8FhlOJsE
z-ZL$EzsszM`lt?)5wvC_)Qa%-lD5J;d@Md%l9{jb*L+d>q8h&YeHc+>`1GxE(peG=
zgV#c?XJ*N`=Y8XwtFHpL2iCrGjF5DUEp(d?g?F&a_rJr(s>4bJdZFW`ZO{v;+FAx&
zX=E37|2y$UpArNEotb`8^YEKn;=t<QG<66(^Z3Hv17YCK2$UZvxnfZ)ChgL~;Z*19
z<?lEc^i?P#8C8A%?!*=Xzzhy{cI7|8<OD?f-tj+*AKVcuR{!4B^1m&*I(@}otr>l~
z?dezCa9F)Pb1K40+#qyjuTvihQh!*EE<YFBWA6?|l&Sg}9&QIg%XZ||8M@tNC8@?p
ztImSso5fQYbiZ|8neELB0b3f)i0Sb6w8Zqaub;N1Y))2RYWHM`S$Tfg=jM&<WX}4T
z$08}d0UYWw#Az|g9CW?U;oKiD$&6A0lJFL0t9(#U3`cqu4+zKORt3vLhxZZYDoA(|
zXOj;|cc4x!Y^5f>*_H4>FaP2)^6@o*p{D_ZBWu^AYc!B;1c32m@N^EZ*w;uD4wRM&
zhIqkhf@+2VM%^y}fnSSv-)Jaq;K)ae_n*_nUk!vXhG4+6(aDi8x!$m#N|`6{NYO)L
zMvAJ?FPVbTVgMBkX9CBqx=4$ci7`)%1xb+;#axj`q$5-#g`mQj=x>dmW_Xx&3^p!g
z%;deb7?2T?AxJO~6*0Vx@b2Z|e2?%=P@)HlbV8@$+&=g-WC%pw-drc#`3m1aA2lRL
z-k0_r1X73w)v&(>8Jm_0Ua=YF7?86*dyvD>>zru6Yf>upo7ejQ=RZ9bKYzd=kYrEf
z&Nmfm2=$P9XU~f0Y=CdDvLk$XjBS_$)zBR3Xr$gt-uvX^y{sVy3H-er1%j8J0Sob7
zD_lbvqTJvI>Hgn-ubl;j6Qpv`OUyJiL!*;^6Z9%HM?VQU7`gV?J|qE3rWX3ZQ5_^T
zq+z3j(b_+Re_I3RlHRjD^SG~`Fm&{0>=v*<H<HswZ?5J*HdW`Ho9;_%*4~O7jS^u#
z1z#`y#<h1%aI6-*wI*C9;jve65#^VL5$M;(d&1?w=FO2d$2Pxl4J;K?n$gRN>#eX*
zL7*WvH_(y@g7&jRV(4@f;$At_k-C$zT}-i6MtcT7KQ7Mh4+Ep%9dHJgQY#vK<5yP%
z{y*B@{Go|+eIEv?rdCT@mkK=z(PE3$qlk843(<NMt4Q2!L5PayP*(^$!DLvfR7(?)
zTC{}(OEoTqXe)$82uLMxu!I_9s6i497{V9=Nd}UTne*Q9{TDvpA8Hk{%slfv_j=ve
zC9S3CQa9dHRPjy_{0EJNsB8!laFDF_x*8_%lMJ6gm=FoTh2^I@$#{jz)@j~T`6`#S
z(rd_O4rr1Hn<byE9dW~3Lw+8F7zbQj#T4>rk(VqU<Zzk?TlC|QQYvmWOCBpvfKh-P
z^pBtxf(19TIOjhXYcj@UQrs}5*$8qg=3%=-@SYyByog`Kz!fEh2uRQ*;E47%DoVSC
z)!U%Iu#Zu=L5xIeqb6<bUu~7b7d8sDNaTqI9;Uulw3?^)adJgg6vy^}Q-?X4cQmSP
z;Y~S6+y=j=&~xly7^DVw_B=tJPgh&xrnOb1Vdw*9*gPiB&Hf4J2*6W+tklN$X{EBH
z4o;LX43TVrWL);+DaB(j(6Q1|{-jn0*Ei&YX@FJr9#=`*vrM6c&_~sEwJ-^6*|xs}
zyRQ9tq~5_5UpCZoN#5jx2o7kq5M$eFG&RkzpSz#u!9o)eQ11Hil+4V_1j2fWxJn~q
z@3SA{CI<s2y=XL)aUZ%4pw=i5Z;Y8H7rmTh*NPzbT(X&IcM6dB$NLrMO;aBaO}f%N
zsK6c#>M$RDOho(${yS_oxLaA5O0`FG-P1Jz;wp-+I`{79pn`%Uq~uYJ9D3O!KIHx!
ztI33$&H*Y71nu9qrvWk%{LCb6(zNbN_v5PEtLeH4B4<Lrg2*;Uu9BeJ<tMeQKTi-x
z4noh%sV#qlC8~hwYk-ND%+w(g@{Ufgov8d_Ivd)sgywV&Y`Lx%%jj8<O6FQy%&Pcb
zdal?(m{WVp77rYDkp6n?PlG<6m!!*L`1q6r)k{w_TVjk(eycD<8C}Ut)i8P9(C}T*
z8-}^J(0JM+2%z9}RREOyKyoPV)1I7dgw8<A!cz_ILnT`02E@p4>H24p`W8K{00_W+
z^~~QQZ*<i>NHPK=roq5R=|ReRFKN$Ir<dO^3A2RpPhmDD<NfL<UrrkBw@gxLXTPg~
zYITt?PYKCRYtrLWE?n`G&CJ#DDX7$LDDJog*M0`-cDg=oN^~C@JB6Fo730*MYvIUr
z_*IaVV(PWBW?%-ipO)ZLKvDUFAow*h;d(nS1Iy1cjV$loD*;<{{GAw<1^Ne#nlV35
zeJ)SL0X+|}9&c+Gf@RFar?O|(kToxBrfWxnsq6}<-bzn~8bqblDesC(*^hu<aGQc2
zCXn=f-QwBNYBY-2$~@G;jade31ZG7x`uw)8QY|{=HP+OWrHU4VJk>iW)Vm~CP5p(#
zuwIYPuEWGYzh5@d9is9t14Zm#V9d@>_8G@T2jSl-P0z*1_@~~H>}V>zkn!j=#G!53
zWX`wnF!F23i_;<?{qzn?aP*yH+7wdEE;y7Ci<=zBFyiPI3Tt~P={x0`&Ky0qht9){
zTEJ*<`pThnTreU#M)k-^_ZLQDCZqjO&35w$m?!CWble0Yf|uVDULK*o=G3!tnQUxN
zC(OATP!;kpA_oo-s&bvZ__>W?P%}QGL{m=Qy)lJaV8DzB>w+MtGaqDWTn%Ljy*cUh
z<-K7x7cUUF4Fg@xoU?24S@T70K9n2GP&n<KH{}?yCXj&5%IO<AouyO+$ij1T^4Iyl
zmgqJ9pq&MCOyr?gk=3fRpNU;F!u&jF)}Hf0=#!ey-BHdN%t3LSQmELUt!tXC2Q?b5
zc-_c)S|a`Rs+Ghk@H^i5T67rjhUL455~?!{6t5AkRzVLL2)R~CB9H%=V&BF&Ckwpl
z0>UlK2K==t=88QG=&6^&b16Uj3F+n4%d>TMwhVb>jpiiop?0CoLt#*Ria(s^Go?#6
z<i={k$FucfUD2*#IBBDQXwC3H`=Q<Y{r(R3UL^IB9xubgh29}Iw=+s@;MuCnXMfH2
zF!p4QQKZd}yl3&Z9r1yzLomcB-Kqh5dY4zx>eC)3Y@$$3FC9ws9ou-M3kD7Ast8`D
z?foyD-sQhhqAcrnTnJ4N!anHypq>Ta+BikJljE~{BSO7$Lwr>nK}AA=YDY`UjPHSW
zko5l9qJCJO;4@uOl%Vi2meIszHbaH(jjL4qK^}xBPl;oiitz%Ofb~`urM`P@`}+3J
z4Y!7<5CT#AX9bC8E4|95Q&mX``Lnj|l=7jhgmgLU+-<_r^%`E9a<PEYli;8w_|?R#
zP?DNS2;P(929onw`O?@!jY?C=_g~0nRqedC6+vCApNjuB+0$s=p#*Q7w`UnZd||{l
z+MTEqK#|ZAV4Jj=K$havt|1M$w2eog-t<`ESN()f;mBmeW^?afopzwTM>c;ZbrpHR
zVb?Rh!Cx^3J%Z{lI<Y7TM8-ksbXl?%e9#iN8O3GXMnuJq5^7__`!vp%ENh(Nne)yY
z5Gl&!26Z*F;V=y>1#TfW5=ZRt4$<xvT4{8)ek9mtb`<R#js<9OB$4K`PomB<60;Ca
z73~&$_^p|>KwwwZei7h56l7TKOHd3zTB>yp#6oakYhS>4n7r1AvsB~HuK@kff_sp1
zgz~i)&n%dnq=0QO7R`6;4qn8Mh->$mko1xv?V&k&YU#<}bc^0Q%$!gHGF^7Vtc<P+
zR{(v%=Foxvv}x+0<m2ONf+O>8;oIrG2?72%(8<o*l$_em-Tn+v;f3k$$maQ`4nBx!
zT>_T*_O+-m+vnG(toLM&w=P13-M5<+7>$2l;fJ`V`aFtmbU2G&vQ$XNTWh!LwZP9M
zlRUd&{Z23|<Np<bf5l;&JGuj<1`pR<y_cHaz7AI*QMqd)-I>x%y{}R&bbyRh2wkNw
z`U~zS6OikEZHi`oqb{MKMY-SVeqoHwLw}y13RwfQK@gtu6@+>+J2Q93Kq?wgmVm4D
zLVhF5enO6pkqrYgr<}Y*KgB~E8T*xbOmP*KAB)W`sH3x@%DlszA|&2j`-5Kj@g><N
zE#tD;Mpi05;%Py?C>k_^>S&XULYS<SaV5QSL@~?<P+-f~qHAk~ZLF><W6W%6lK7j0
zT9}})(VMbInF3%;A66sAZy~T><VTh>9V!GsSbgOU;Fu}E_hGg>=GdJKtEvf7jUFVh
z%canfON0o6W5A64WE#hLyA66DoC<tw?IsC&=}1zkiva=Qb3qey0%XHVwe$e18f;)J
z1?CO=Ah}&|A7B&vaBH1n$bzsiF%k~R)nc`C-C8ZqY=n%@%_jy?h^r0I3Yk<D963PE
z$30-6IJ*4_aZ2%Ql5AR+>0Sm-G%_RAoo0fMoiTU?{s8_TfHJ=BVk%V9&z4_6M1Z#*
zoy}x{B5p54B7V~AW>@oF6MTwnF^uhP&NKk_8+@T`6J+rx!;XQl9E{LC<QR-<mO-Yd
z+Q~uTQZ^rR@*uUM5=(%ONn~&}kZF&A=zur|y@JfAj+X&)*d^i4#5*^)!f}K7Rlq;e
z(-&mIwa2>1bck(LuH09N0&HX)yt&{CY>TfT7l4%`YgPlXr`GVO{BGSG6$&Aw8fcwf
z0r)nCov?xyFIBakOR{0=>PBGiKYaj3Yqb&X!N(YK30$1X{w=7{BE@?Sx@$5)kmj)r
zF8t=Ok2{rff5Y;tj6e+3;<*2<Cs^h0P@xD};o^B}aOWi4Q`JZAq{j8hyJQ1oSZ%pB
zzkVeS5wPq71&S-4Ry=~lq(D<PX;MAI#A}$@H@AZ3b&>`7#$-PeriUgalV?>s8(9&O
z%%2FKDw5BV?ckb?YONT|h_lYTtxDpev%0EFT@*K4<w&5H?<CH62zzE<?XqLTQ`y-_
ztM<-b%c3Nf=(DV$R2*|PeKkxr^T{|97t*QPx{6ORZBIImIRqECga+2*R!7WJ&fq(a
z*?C0d$xt$Zfe!3Ejdp^=AJ@dHue+z|0jtoz-+LfkDH|?v*zi9i*sHXexB+>XVZrQF
zrNdywz<!?XW-Om}Hvhx{$$17ob%q+n&!)3jR?~w|sXs{iuGo(d02mGPfQD|vq|uQm
z*;D~B7Ch>G45+rtUU)f?Rfv?8XMkrW9l2y0e4?>6*W$Lp`+5jvTumRs>OiY(d`q7K
zHmKJa`D=p46)JAZYBi`uDbXB=KJCEHou-yOwa#ah8XeHb9D1B`3{(rH>o6kSA|Ehm
z5B5)ym%Fng2<nxa+vULI;&{sZbPm{6NQZy%G2l*qC?t>D-k5#LC3iu7-<r9w)ChSj
z73&W&!K@OpUOBwG5`kpq?&v$NyBdf#&NPhrkP;c(2y=No!mxvzH0?!T9=6IlT`n9z
z;IyjjlE^O9sdy@lo7TWqTczP^Y)x9uYJVYF&PV+02G<db)&;m|{)|Bm5N)yT$^Iy$
zfh+?6!hQ^7eX1Fo!|wtJ&Z(-Cc?FSyNk3>ayPOCAZPb7y0RRnwx>eBuhh`FBNn`)e
zbg6*_`^4=8k=6MsM6q)<V;1%APrnEvVGmm){Y?%9hHJLNW`sto(lI6duSwns+oS2Y
z+d|sj_tK~>i>Ie?X143yLKn4T<si_&j0AIw+Yzb1QCk88e?K<@{f(AWUt_3W39e^!
z8I*0v+F9P-NZ{5T7Ib3Tb=Q$rtA+_Ke89usA5;5V+5vha@YDxis|4NlyEs{$KN#o!
zzOIfvyCiA_TI9zTgoJZD+z1J_^Cb*1WGa9z$m+KU!X6O~H<SqL>4gd6uZArg^lAO7
zRX}eB>;KrqU-|DxT}7#)RJ91?UVHIhDgnG6IQmD;u%`A0hd|Jr0I!RhYjE+nJ&%`V
zPRocuYwyaW`+b>4>t9EH9|`t&J=jR*Oq0Q?qw3-#Qhm}7&6U5I<Pt5xQEZEyOdZXc
zD^3;b<-J8i86W>FQVk=RYRsF1?IW^p;R8I`Yl&AvI(<A+c!z~$lM%%7?>~Y-9G-jJ
z^ysQMRz!1>T3RJfxKDajM@U5R9zbCfe(tK@um7wXhJ({KDIX2?G`8o6pN1YLvRzp(
zs!_n1U}Fob)Z5-6v@XWZ1Hp7vYJYM_I9X?C&WRB{k36=LlanUbj&4~X4n3TDA=EoN
zq&v%|dipY?I@Yn`)Y)TTI;%PtZuVky<wjl!FVY)}ieB6*fuF8Pa~pUnaWZ@r3+Rts
zdE)4!l~j->)~cQI;&;e<W+LLJ{aNv0I$eUFxSrm?GxYEM>&#%oSG93T!&enc-v0|b
z5qf0QG$r^~#bLc7IxG*<6zQzO%ajZ0+g+?Tr;+%EJJ|@QQ0fX=ysIq1OLWkYwsh{>
z?WwAmW{^N&IAOvJ!pxDVMUq`3!PvmGcsABp3%3RCJ@$Bj)Ll6(UgOP<Ue`X0U#Alj
z&GF=!8|#r+x3PF1-l|C1LpzXw%4y>~nsD<_T5C7;Q`j@Hf`8QznJ>3co|OqeBn)6x
zHXo(Oc96VMu<l8qI6wY@rahPtOwiW^du0BTy?;LX?xsa@pxVK0>ytq3gI>IB`#Q4*
zn9JjvR(k|{ObCCzyB$h?y3>m4KIo05{CihXF<Pu%nh{QTLx4r$4Y~6IN$x!;!=bhd
z=a+RT<^OK?7)t1ubR3@l=T}z<!J(Y_H*Lne^C7B#hE9~h9D7ds!n+3{yyu`P4BXH!
z7-Y?uJ;F>`O_|yp@P1RaFEsstKMntVi5a{%Ob%?m(Vo@eI~ENId1QQDfbX9$Aq@l`
z5N<oBz-{MmS&+Ml85~TH3^CN}As%n~Xg5?&iR|O;GUA8;c;iZ+hDyV2Ds_HP>&k(I
z*L1|#n;alWa=MUxy~S@GE-0Gpetm2<mY>}^64_e@^eq#w;%C>qJ<%;Gso+}TH+fK+
zBQ8xhxXDht@b`g0d#FQNVJJ}h8;joV5r^97vs<g((JyWXUp?zb!9Op10*CGm=I?n0
z_6c;c?(nYdb->AO%=XqO8JG3q+4=yQ_;Sn36wj&!pQy*F%H~G5!|_T=W_EgTF}0LY
zh*aMMQI;oAlWc>#;ZM(dZK|Ey!a`qkbc3Gh_rcYug-0GaG2F|liagOCJd~g?cIOmp
zuO)B(GlCNc1lG1Cq(Xu_MV5N3q<_BTp_7qn?54g4n@o_eumLbA>lR~JyEKg^9xBp{
zx$T=$0e}VtNeTi=uud1{xX)xe-<uUt;mwM!T-XU{iBtKn^fKGJ_S^J}(+$<Hdj-&V
zWXOVgR;<tr?TXtz&V(Bn+CNkTXf&0ACuT!IOmZHerf1gh>pBhL-aJEq8X&6oMTx*>
zgq9lmsy|JXTFhg>J|K(wPia7D5=>5C-e>W>4Q0q2B(FvF0ld^fB`I*#1yO=Znb!z4
zB;s!nT=HJdFU7Bkn<dDL2rUXF!ntb`gOw2ysHba$g%@^7-3h@%PG7;6GRP^Ux}eT>
zDs2k;a+(!iy244yG(B&mkL8d|kSs;ZGOoK50PFySTM!`bTvHHWRQejqoMJ_x^~SKp
zwP6qRw~!Y94~_T;t7Ss9OSxg^Go&Zb@%92ttP?b)wj)$EeF@xd0~ED^&o?1}PC*_D
z#budG@x_d<xTpfobnCnDE6Hac#IvGPC=RE05VjrgTObE@>YFcvRr;}YFe0B6AN>61
z?JkHEFlRl?4_Mzj%rG!^vRG}8?p$OAV%JTU>1O?lA4y*5{oMaIlOMcHD5EzkUBoia
ze%EZ}`aH}rjW5X7s#J36cF!`#L32qFwe5;ol5j4=tR<=CQ*o@-^ZQFik*L%nF6npw
zTL3{pTfS?Xt7X?{<dqPkQKjRD`P~I7b<7qg7^~njDG3@)HFS#TR&n7g#t`RA`Fczv
z-+w|`KU5$YW;=oOx{D(zZ)HMT37ycRLO4v@+{Jz<&mWyJG_{yv6f3V$_NSI5UitY6
zp+&Ar;uY5^He)AF78a=Jsp>cRQ`o;X*UD>fb==809WF)37!UWbO??DDSLwua3f+X=
zF%+qkGvTC7PxIfr>u|@c7DqbRS<d(~k+s`X1>{HAqwhA5uk!>f=&2y5z05??pjN_9
z>SyU#s!<A!{}nt{&=JGBP_E!!qOVD0b=60FFUUjxni>m0nQZ%X2Bv%##i|OmO}C_i
z$zmcqAbEN4It$eA+DO_Cm4l3nl<hJrKjxsA%s9Z(O_5dd;oAy{qMB<P`>;PuP@V(f
z_^CF`tc7tZuQJF4?HZK512nfK<4^CQ6$*oGG*twb9nou=f}@2GAgK11#`bs?6XB3@
zW<*_x%3T$g)y0GXY8)!D+PVXo7@3^R`X{lx3Oo)EB81SYCe~Gy3v^^T0?N4bM4`sj
z99N3>u$&HpNz@x%H>=#eBC@uJ^~*9)=_ZkGw`xlaFn!!11Pru;3M&V7h{qn=Jz=t&
zV}O<Z+-(-!uq&sw6cV7v&HwYb=LLBLP(J|qN!^?$<sc~}g0eb9nR5fB?hm*a2JdkN
z!<*M1{WXZY`@DPl-nIN!22@M3W4YWYs8K#X{UFR+`&fD1NySXPyopiXUk5eL+Y^%g
zj5hQRkqkH_Hx_74&{g6TndBT>#dLB}$YB6iXn>)HeJ)-aTm*HW-1XY3*L74Y>Q}GY
zPGzU=t+b$W4CEqWNe_5A29L{M65o;z6rPNq%_qc9ok#dD-vQ2@4PIhmT1T_l{AEe;
z-=`=>A#iog`HpfB`b!R*zJl3U!-yy3e?!oY3OXU0aj|42<4k^NI@~*1S$}i81xWWY
zW3+-M3KTHlW-kk)vs3{Z7g@$QdUYYxlT}?61q@ijsyqzr8(QPnC}{eWYz)H^EI<nl
zYG1^0MEta2KKtUa8le1@DPKf5Pt`)`^l<xH4TRlGG!hw*OMzj#K5Yb9oRR-|taD9_
zF`IG{$DhN`t1IQD_+tq2ryszHhyFrz%8^+4_Ps{ATWzz4VklO^zEVajiZj4l7J?d3
z%P7)@`<eiaSoMz9={ODM%;l}UehH2{H1Hm$ygE0~U4cG;^B}~c3Wv=sUb}52JmY#K
z_Dbv?BK;Vj$qGt_?78%rirw*enGE8KXG++S1(oV!Nc<t)gfc-{4KwtldtRwD3CkqD
zSSTaHjC?4PpE|9?&A3x&D4VnmeWY;52}66}!&Q&tcxluwhuU3`48-o7U_lii<|=VK
zOwMFZ*gbpny|$afFyW0{dIX}^Pl+_GWj-(?xVM|1tkhj>eP;#BUFy&Gsr)`;5yPG7
zN`?Uh3@i<nIS|aDf38+Kl<;zF*RV!zt0g5F?>qvRojz9}k-(3GZ6N~WalW=sGM;k=
zAkYTr9R#Y!=%=BPv)_$X1Vk6CP9MCbH3@=0<l<RSqlnHm2%D4+Chu{|3F&b2tvH#*
z*dGoZwVwS4NP23=B-Rn2DR?CDH=#14dOQyFm;emAo@)majS23(5t6eCHinDZ=EhCO
zH+guoPnPqY-v9GZqs@@^Ds<lk!p<oLqTO|_Y?DSfcnPy-c5j8>bU^#1)CFbreeb^!
zY3!f4Kn3yv?|WR;n~~1x`&x7xRA#*AXrvzA6uq_@#D;}y*6zMCJS>&q(w#9NLz1MH
zJr7IL15r%GCGrq}y^)KPuAh$Yb&xT!!%2<ZPlR)n>^3P_>mEH;9J35;YoDlDzcpGV
z(2hSDA*XGiH$_YI^)vW2rK*g;3>5f-0*#l`OQV}U#ve^;$ag!E<D(;c{X(tc^?J=j
zh#O9!Gfwf&t`ZBxiZivYSQ<r26PFWAQ9L~E<<KpIt-seHXy9d{*0C+;qO-h&dU_L>
z&i$E`_ph^1IerXkDD!~d_-~j`+4=AN1(v+-<dm#2UV`s5h#NksinPG9EOlH~G+tR2
zU*;F=C-q+{Ts@1b*IqlekpWv(^<o3Tl3D$3sfDjAr5ifBBW3VdX?rXssLQ3;Hrqov
ztc+sppCm&2iobJ@u5Ly4Eo@>zo+;~YyI++4GE6T64phB=@Zx!y=}W)*xlzC=b(kH0
z$|3P^9_!8ct9_koy;1cH@8-7n7~X|!8SJNhwhU7_O)s|G%rekY%i#TDN>6@>%1;FY
z3b(~S3|!o^Zgh4hrV1Yq%?~yRxytw>kx~db;twGJSd|(3H+snE-@IH~aA8gIY#r{q
zRIu=82%}*qKH;dW|C||sGjj6pjjuh=mWJq;>KC3WFC9)f@d{QhTS-}-hg!SCCR71Z
zx~leQFZit!hzv#+9sRc#<(<#=rF#Yk`-G=;8j8!j&OP3MlQjz==g`etet{C)+5%LB
zNk6>?EWY9Ix&bkD;3}Ox7kAU34iM^DbX)1)Op(sIxf*`;2L}?%`Zd*&GA}foCVH-?
zhrMn4_$Gv`NyHaFz`O#29o|BTPM-BTErrL`6lkwA*$Xp_NtS;pusHtbGbY1zdWpcB
zryq?xNeSO6;$RSvy#-5e9o@W0N=sFHNe>nasnY$n&Z-1P;9~hUFs|W~*y!d3)7;(!
z;V)t)Ok{udx-wRdJ2}qjHV`c*l7_E@%A%}21Q)H=USBMvE<NygnL^bObt#Y;=J!i_
zfRC?#eq>ywudSnMHzVoZp9)OX$rJo?v)-5+5~5_UH=~~1&Va@LkzIH?yMFnNP6I`B
z1BB%^52dVLJ9Vez#|1F#GJ{lf&YKAx2ugk!4G~MKQ)8CrfYpgaU0Miz4_{%^8#1OS
z6t584sY;q>d+fJ6<aiP&oyuTNq<XV|Fzv0NT&}7<n7K8P=C@|nrp<1oGI8=9d3Bc*
z@XzmkGcC@smU&;Iw};IOQqtFac>RRqtoh1vsgH6Uzri-Oqc}ejUCiCrX?OeU<JzZo
zKG^iYu1H6MIBafSUCsqh587eLC4;d=+Bw9=97f}y{_BL5Wx{M#SCOuyW6C&^s`>~x
zTR`J)d=6NnLoiYv(OiB<tA-Ac+cSK_86%q$^8K>BfHfqlELB(;q5K|X#i-HG7j#VD
zGcda;`-!z>Ky$nEcen;3upWAI_ND)3HWkvuYc@Lzx>*e1OBc)xFhI~eKI=G?5diLP
z6iedo#&%>vmW1qmOR8^=Xs!qA2(1>zvawAGG#e455r>U$isqG-lx)42;U+MPD?~6e
z{3XLDfueQ^Lt%{5s%@ev(2+2>P$)d16@Ol8XI1mVJmK%EEv0OjD&GKYo@b6&^7Z=#
zQb97?LKg;UyhIxwh9;1uT_kmVBY-M`J<=y_0YcXW)*J1+U2e~t4%(nsS#7@1KnXH;
z{yN~p|6^mQ@LncF_&QeSgAJndu`-qW(|v;tV(IN*x`%NzI-Bz3Y8(HJtq>tO&VSE}
zI_#x#80b`m{-=WFP<q6sexA<&<&07OrVu5}n0yQG|DQ+CH`gM2)0{MCu@Vx~?XZHe
z@ojLbu+(8EnH)Cb|3SJi(~BijtS{T{l|KZN%n~BCEXUiiz@x&`p&POm34F|Gf6+uF
zZuLx6_uxzs>%2b1-JXn(J>Eb<dEdiWCjOh*e2?IE^9vV{99h@6(eU^irqDYAhAzjP
zbIJFBE5oVo^$I9LoP~bnVFwaNk9>*5;btrG7Ud4zIi9jsb<#08$}}1k&kS1B{76ST
zoXBh}wp+(SoPz%}g$Y8BNdJwhD&{!SjOt=l6n{0KU4K@Q)DkFK4tk=%gjFhMsIc?L
zfLYa^nWXB>MZ^*J^!_60{s|-7sknHTti?`zfwWSsb{pp2%~d^sMCsE35dGOyI%l<w
zMI^OJ+14N7{jh!F3biDS<*ii<S#0<h1F%qWit6V8+xEw8CWi<<lWYJ!0<v^4AfgFz
z{!Jp1=)18Hf`DnP+Q?My(zvV|bsn}3PM{i^I8>G!W)w1nz+@`mrLd`dcxl@>wVI2%
zg0v$MO&?x`h#&M=p-j*+3;1jbIVzZ+#7RE#Futj2BituCF%@y9T(SPDrt4Z0$vOQ$
z4^OD<<G?nrHAwaYcaapo5rb?yLZm}bB4Lxa8G85tBAo&M)gi?q8GHQZZP;QK_4PWE
z4_B><wm*O<ef%{ru9#fawcU-pQh+P0zS%}LrUPFSmqadZr|98N53uw=a0B%xIc`6b
z2XMb@@YyWZ!<j(PAG2(7x~hMsiR3E)Zpr|IT|<T6B3q#94Q&UQkb+ST2*g1~{3z=Z
ze4FvyhrfL6E;o$^Ba*7Hg%HGpw9<n6t>=CzaLY%We$``Rx8Evtjxx|^z;K`M9f}jw
z4IK*{UzjZ9`EmF(oD4Vk4G{brmWv9^ss{eLOS%x;U^S_{goFR{D39Qbs+_2EEDUMW
zI5F!2>aabLCAF$(v_0UE+Z<_@Cj{|vMh4UvSu%G4nN*x%{x)+TL}SdR43|$P1W1eh
zueh>XI$ghuNO{EFpD#|44WKs%^%`)0Zp2xHqOdkt>0u?dg>jsY?4%}>R0l$@;W!Z?
z6_RDV=Rd|nR#4qk06SxGt82QzF0rsy9l7p;u4pW9Y`ydWeOTV~<Oo6>>OJ)%CvyZu
zJyvW4oNRohKWH#Sve9s|3|y7{gaC{hh^24zFt~^?nln8-^;Hp#;Ozbg7>6Z+*!une
zf4R-CY{~?cZTA)4h|vrWkpe}*(=)6M4)HxA$6B<b(~XXoSD2=b5ZRfU+X)4(J9a@l
zd9O$;4S;8swoq(JuZ5C)8^?HtrIHzYMe#@splf8ELKR7=Mloy5slo)I<g<vT2Iqv`
za>OEd$Hm%t!97c4P~de5*D+xbTFXl(kzC)(k}=1W-1QH^+?5vGlw-1M#`>P;8PQrK
zuvbj16<*x07(XHHLUw3Q4(^5B*FX>(7zQyPk<>2#K8*jYOHl$j#qZ?3!i7NKN~~2%
zfllnk^=56KmN~2R2Qf#+U-Ycby|WA>JfM;(0W=F-$SU!{lZ{7=8cyjm$6}6B4ya@N
zh9%aZRXInP_i9{d7qWHE-Bi0X!(<e3+7@nMjB5=tSMUY3^C_n>CQx}j0rCnf$?tN9
z-)Zh7%*n^`+DTi_Cr+dc7^N8JVP?T=489B<2s<^6wC0#)|Nn(Zcp;pV3Q<))7>9;g
z!3?Qm%4o7f2cs5MJL_VdJXRM;dA{n&N*MZUmRyQ;H)w!3-jmEhL~z8afL1ZgbuS-O
z43YB{@YT$t-|vIABA|Vs>K&D)$J9&TLR2T4f?+J`$S@J_%=C@}$|VF#I)7luj~_B+
zZqd_K?5h!MEV?0PQY|wWR|3w&hL5cpBpRpvSRi^x{m21_0^vxmd;-g>arIZEP<BY#
zg!M+@B|7<a$<`7ZDOWo!30vLN_C{p%`Dvws284E@&~FxcbhdU9nZSu?!sNE;Q{VzG
z<n{B{_8!)YcBv^M!KH=!B`7X;1y@0bVz7%7-<E4o92b}8yc%^22!?Gd!-)OvLWXLb
z7UHy;A-)n8SZvr9777Th>UYTIxaMc0%tpOS0=dVpedi)7w>%966AY%~yy+L4L8PjO
zKGxBz3|LFoYQRw*L*kUD4L&9(qpdphz=XXdW*H<?92iQ-a5u(&F!Lh_eprY{u&SAx
zn+1`DL6)Fh{CHV5aM4XV&O-WZCJ{95?4ImSngEH`O^7%<BwMya;<&1-<4;-h&=t1e
zlDVMA0%X!ji!E6%BmrGcyuPf|E%a<R9onu?Q#|HvUTO#dG3}<KjvQZ&+DWje>!-7f
z+I|R<2T9jF-d*tHPE+;Q8aLDAslq(eWni7jrmId4ytrG$f%1*O^BAFlw6NgLGGE$U
zZf<1MkatLDKzWlTTlGOr5dv}9>rlO+5}DJ@&su?+fQyP<^MYx$YqCvwujaNNk+t(-
zVK1+a&rR<%2va~%cIvn2kkPf`Ug-Ft(UM0!KPaw}JR9-p2YXDoYX941<Fj>^)Z!M3
zaPzJ0^#Do@#H6Fqw?KP$V0^QW&r_k4&Q(#CCeOObK)Zo%jgfw~Wi(Y-Mw>Ki>r}6q
z=&J|zEW;q<ikT1HTo(j~I^BT_NceY^zL@roxvyqB2Ijx-<w~vDk!D7)?!!9@isl+T
z@cY8A=gnF>)%3ZK*VUNsN`Y1S<vS*K#M&o$vE|!#Zm;KPs(3S2#85YH`qG_3rJp{O
zzJrLYrG(&1ts0-HKVu3Vuq8O?jX)X4^1+-Ak4&>_zo<!AAeRbOKr_{8v@B_iBedfv
z)XJ86<rxbK@J@m)kQCqCVSx#s&3r)UJ-M*lnKQptN1n17)zvwPU$lXbL>;riJr$Og
zUS1AAk{k-gl)m65y*IIqH&5To14v8pE~%rPhj%BhNi9|$2(5`GSf2B53RhF=^h-_5
z@eotd&=B4NGHN;}*hZP%?`w^Bq<U0vJnepdV~&k(uUc?I?d&Ne_@r1N{l1mSVw?=s
z=>sS-5Ao~4A0PGG2QbvF@seSJhrQUmAkkMJY!pUPm_h1b46Xm5YD3Z=pl}xhs|9og
z?<tKc`f4htdYwL8e_ij}(Hx7!g)5VQpvM_As44lC&&v&)?2hy`_<I1V(R=kWNaEhY
zhV7@$USzJ-MAS2_1h+lMz;!nd$cFxZoog<TTuK#R0v3lJf%MwOm_q!~P_q_}=U2?#
zMYPOT*LvpX{&$?20eO3%X%+vCq;w$g2fpaFGI3pNxKs2;qGo~P^G8~cuN7>__t>oT
z193~wGJWp)4(Gef%ieI<@cv|amOdkyi<AG7$OLb?>8b!=>kVIW^8RT<aj^<0><+(`
zlOXd6KNtUSWuNox@BS32E{kT6aZVQAFz<Q^vAK1H8X6?lx7tJ6v)Y5bLdH@X#a~-e
zg3tv`k_+&G@4-n!I7`m34%%7*)D{yOK5-#C9%6OSf`C7Cg4h1d{9V+Nn!mP{8JecA
zVf|+hJgxOtgLSl`JR$$~n(Xkh9P#J=ALXp>EmHPofZDa*Unuo;g+79ALv<y5MGvr4
zF}jQcwvg*wFgh{R$54;~MTl0jikZxV8{bt1^|$(;Sfg45uit!Rmokc{4;~4@^{i^%
zfvx98!6TD3Gy4z5r>Yg<$&~#h{cOwB^WT$Az3!?y2fZ?z9hDw#6>bW~J9V_T(Hq!L
zQX>6b_j0|6yqzj)Lp}T|nb69E$qPA5h(U!zX8+XxZ&d4ryK;!=h|8<>Pl5dk>dAdF
zK<W*A(;hnclD|4ck6K#jAq#&h#K}WId|@HNJ1&QL_J|cS;OC1<S+VHN`%mBk#*d$p
za{dfBu-)_jTtUwBJ)61H)kNJ6^4HE>U#2}`kQBQ}%4-JTv6ZHS5A?=}AXTrPRl4iP
zMVu}YgwZZ}ko6G&HEI`JGUY|u0C3QUdIqcHC!3H6-dyiX{+f@WoSltXt#9%4GJ8T^
z4_C<<O$NSKs|USF6)r3n>9ton!_%&4IBa(5)2YC9bNRvT{1DY}v63CdZHZumSOgZA
z8I#M;athm+h5q7ZsRTy2o=&GV7}fHJ3x<l7Fw^5b=t7ns?XtLtRWlM8&rl#Qfyd91
zVW7WEaeb=lg5Y&X5Z`nMjN>jy6*$<?sb(`v9ry9y*<UFLMClshkzZW<m`LY+<)h?r
zmJCjkrK77574-k*`hrN<x$#$Em=g$yOQ;;RM5zcSKCFO;TdK0mpKwLS6Vs&Rhi!52
zv>D^%!O_4ZLs_O?q(W_@vGJ0}r_l+r#v7rIyO;<S^#%+~A=$*L&YuEqRf*L!c(c`A
zUuIou;v;R^l5K&nDyJV4X-3VhX_$Yn4uX()3M)28{|S+?tb}T3!N%4V>LE<wI7ogf
zjD(T2Bm`0dl5!B7Y=l;-UhoLiv*R|XqW|ZCz+G=<scg5lb~&|HD!`3KS<V4O((ML&
zczcrD+^{3F^^ISE7xxW!Z{X(l5ZvYNe??Pv^;Igh$_%@eyjS3I*IvnwKZoQfb5I)u
z{*=YG{u#3Y1~u50MGHUAoHH}bW0%j%U2=Tj$da$_Yy}|*mTGwS&+Z;XlKmj0F)F#^
zdDXu-fRrTfF7*-)q?$UWppLH>9_>A)fa%1rH<1>G5ZWg>b0=vyZBq5|7FM75r?H)!
z!so$7V#za`znp{0Zq-U2n`L}6!GZ2it4A12TdSl!qL>Vq6ILR=02Znd$l!wrn8i)H
z7Rj!H!58E{!OuDM?QDYSEN~d)(GiuipwbEtC0?`-*sYiV>u0HeJ3cu^_ypmkYMqvq
zV6xDPI<pqYf^D=3jV$EWc9^|B2GnNYNfmvqa+zHeZ&2Gtn1E7_9UFticWU`<t_IHd
zqNH$1mn>wl;fj)e$F%3ach&Ha3q8DU6Z~ij4Y%105qRe?u@ZSkjuW85Vx<=t32u>L
zoCsM6@t4ds!`%#W2o9ZYg+OChQ39mO=56m2?_B^yx9ACbzmVIV>>bf$wWs@i|0NQ;
z0PF^?#e1W8Hk(NTdT3JjjLR+9BYou_qEmXQBcLeJL3}j~u@q*T!;06c`7@P9P$Nv?
z<)l8fxXb?)vEyhLG-=Mz^TQAj<AO1at|7pn!GlC(uGJ@Czof#m5wqH8o{`G|tq=p8
zRbUz^C#nR^w~B=2P1Bj3{^Cfzvl%w!!+C1C%#pq~M{rPdl8;1C?N*ia=nhU_9~j0p
zaCe-*uD>)u835_aw0lml#f^srtqkJ;gu~&GST-hN&bbFT%gGuunE<zqO%YEEXzoqu
zasW699&*^gUir2#G9FkLH!2Oz0|=+hI4D{6Xu2tfH|CKEJ3OME;Bn3Di!*<KP5i45
z{6NCC!gSM6oD4ceGX^2iR&AX$|J&V;0ECnz;Hg5dy{gzd8`@&9<ZVeK2#YP1sc%=7
zG{CXFifk2XASc*ow$2q)s$HQX;{%#Vj%#cK^B{rck^Ivd5(yLxWH@(09?t{}*U56m
zcDG8(iHZc*gi30J1w(HR&q*gG!`d;wMH9*%?@P*n0;6(&Di8@<=D?nFi^VqcgER^s
z8m_Z-Dg`MHB);pvPs7f_oXSYJkPCVL*yfSd*~%+=8E*&R%^(_mFZ&djOXsL3Owkx^
ztcQ3<cbKhhk3|cEmT?e+!2Zj#dwXeQi=7ujGkscJx&F0`02jl$ybDo}VSQ8bYfh>c
zJzHPj=}cEf%{QtjA34B^avI0ypEKK6IkO!Op0GWr2M^bINm}riz+UDt3`<-<e6<3J
z3rk9pZ2cD0&I?*-HeKRqNI=a_sEu5ML5SGQYtE@hUCy|)!@22tb#s{EMlke>B5QUQ
z8tg0<7T@HVt{&IKPg$qOSYM4ndhA^vGNh-?H8h8ce*i#c3)%Q4?Bw#QC;FCF;KMa|
z)wR+r(45I;MxTp-^|D`xS^&qZHk9;hs=v8o`jVmx3Xf|x`h+M$CP(?qhBW02*+uut
z_7=*!9)9m7uIp4T#Sc(3%w^V|3z1iM7UJ$8ZahkhPt`PRy|b8>DD6_$ehwoc+C1T7
zcP7RE#vQ3#`&@X>nNa3U4WAcOG-;6a{RpLhf~9=1t#K^en=Hf48d^FtQchXgcaAa6
z%z)*AUhF%dF$31~z3oyMDiy<EbbF4igO>4byB}~Tt;jxtg2c{1)_QI2rjW%D7)O3a
z-P6A5Q_f20E0!ys{Q>bFEBfo3^_<4`uo6x4=f3{_!$x)frZ?f#071&}Gk}{#INVTK
zG!=kMdM3!5l_mZx+;kSq6x`HM4Fu8L0|AT;;+#a`>r65pxtBUscWW!$Pjx=9DT9Tv
z&pV-a7YhBv(6jOJsagQ#s#A)$<l5Rn+0TBnsK^aWLl;6#(hx#F_Jwkc;)cCwZ>*8^
z>a4AczwV+9mHjrQr-#IE<OHyLe?mCLYXU=BRn5Hff-*^UWb|f8H=&67@NytF+*`h{
z$1gNZX8>91h<d-LcfMP|s%}p*tDRcKjb-tlo6tLEtqd`A1_VPOY<LPcd3kQ}?o@Gd
zDn2=Byb$7JidhDJl9cG0pYMq;^D4Hd52Y;yo4(fAebeo1@Bt3`tpDP^0<BPgyEP!B
zn-Z1KPy5f!L3qYnNvi8DIh^6PlCSA(`t*zxD4qJbgai6>H4Mvi_12gvz(zLBE)KHO
zxVaJL8@NlJ@Z|0=Su@{e*$ZszXYVJ&h{SDGu#Yl2sDHkYc=9cO_OVwuxa`TLnhr+k
zi|C*{OaxR1HNPH&2Lp^Ab|CarH1>WUus?y$%$stx(t}l%3ID1BuNVs*)9R=j1EMR+
zR8V=P6r)$@!68XtW1!#x_tN#*zt^iyrJE%k7T$bOqq-^P8wn2SS@kb@>sn}2G_FcU
zf%$3a4Dj3bLtx#Vx5w+dgNQ68OhJ#gZ`-#5+J&g}hp%B7QQO%W>3W4V;+IL4Y=6<j
zIp`E(&O`2scPs9Syy!bL#RLw6vebf}`RDn{t8S1M+djkn0eHWrLrD`zX#}6?ojUO2
z5ZO5Y*c-c@yo{Hj1Vwgo6aUu5nP7mV<!vXuxvJhw<pwoly_)s41queu69ANu<JS*N
z3kRRB9hg$t|5Lhrj=)pY1taMQ6s%<%E<yoN_D9B{g*t0lnk%9ysKlx7D}C=}n4lTH
z9L6vF^jOaUsM4(ZFa=U$C^tam1bz6Kcu=8lhvi^B67FWfo=`k2YJVN(&YFW&FJ^@m
z^k(>e*n*&!eMQ5%46MXqS=UXCX0_8<f%o`1nACP=0W+^V)LJ0ac1$U6cV35552z`;
zOV+-dK&(|6%_h4+v9Lr62WU;HED5vvbh@$f$ytojikCroKNZAWBsk7S^6uiphUTzz
zSHwM-tiXyd96j-ud%5wRtM0(@tBt>7t&HfkV(A5zr|ren_F;Iu9Jr`xSBV))#I>FQ
zcWi$qF3YCg@#T!uZ}SY{h8y9C^EWW`L2rFOT&I^MJ;WKRrMl_=JVSQCBTnr6*mW=c
z|9rZlVt&td&%3agZGO!Xg1c_sGCfR!suXHDDt^<05ua0HGK;oT_H)HKJ2cM6PH48K
zd-75u%AKP4=1T$UE8)8=0>$_skBq1Y*kM#N!!p8?k@KUWJLHliF-!-9eM8Z)sMkWL
zMm@0eg73k@y4U-p&aW)tN<>96fX=kf%KoyFij_4Uxau=z>PRTbB%0h~9enL$pybg2
z<HC3<nKSVidyK?-)CYIaZ&Ns3lnQ66>qe{sin(pFQ7yk^3LEfix?|KTyu{2lcP0js
z4S%TQeg<KxJ=M7b>Uc)!N$|u;KQ3}jz6`U%EGUq;VQh@+a6;uL5PR_eA`p?al^(|D
zU!VC%TZo?=Jd^?DE`5>Bb`8e*N44q&NHGq4@c?wjN8A(5Ne-liYWGyy0L>Gm(mztL
z-Ch?CF|z><0iVrobAb>wJ4S|~98ea-CX7T<e|$MhqK8tLaq#9~t=8tok5Gv(JaFZH
zB;JKU+^;R=G@8i<3f}xQjL8GSB&7^#v$&8qZe@cQ9nR>25eoErof4IBtmMY9?1eDI
zVCNBt%3+fxl|t1g4s@`gxc)Fy!0H9M*@&9Gqy%>#CD=%N7a$U#`Uh5B7$DvAK8cL8
zs$d`@2`KyBvmPXs!@f6j5-txih8uxuC-{oR?vBLnN+R9!D2!HO&c2pls<p4`U&q{|
zYsPQg(+;hR7C-@EJvS-?TB`Tj7CfTD$!yB`_FSXe8p7Tm-w5Jv@L3eldk<US*fL!>
zlVy-MvsBpb%7a(khhs1-N$pNJx_-Q?sG=mfN!hCPx%9PSW~401Iu;!YABEzNAe}m6
zf+N_AFn>2<t**^_xh{L*(N6~<$v5<R(O}wA4y53fUU2!F2-ce%9Qz%6{H>6e5MCq>
zp^P&X%c~<b$5s)U2-^A5Z9p1F1EZC)Q*Q~Hn!nbouYCw5uNV`u&DG$j9ph`}n9vKn
z1c?!Mv4NW;Y1DaAu`QE|)s4?$2BGo@Wo{T_;<;pnt350!URUg}j!{lgCtlnL#H{AS
zE8vPNa=kPf#<gT#M(1ndd-++A^Nb^bqr;Fq`rl@*iIAM3s>O;ew^*PsT4kZ1));|b
zdx_mpqIQ$hf*aq9gVR=wk7-oFUP}dDWfp3k&WctHTNLgk-m=w+X;ev<PPiNpgbC}M
z-YGLbo>!$I{j@0Ou}D);(rbeP6SNPn>zg8=k&!VC=v8!NX0~D6r!|;H{UcqM!HDdV
z*<g1BuGfr%^$z+ZPdGa`{B2=ne}ar5T>AhpvBo#F>P26LFr&SBNc8L>+h{UxNWGnG
z{4Nl4jsypW=<fiLsfHp!j#jfJIGHhh4gezr7}v!bllpo)7q!wOBg%yNLN+!AGt2Nh
zfLEMmG9x6<dNU10yN38x@@MElnME^hM2CD}12U&4?4S#<Y{3uT0;S|Z;Q)C_=^&99
zz!<|BV>TzqCD7cTp~u~u6*mneGQM+rFWk8z8%BXjjW0e3<95&xj!geV5`aS!fS@EQ
z_6P<Q;vf3=r?CoeD<Lq)DvK3H$4t4|p`CEObKmr8-zO#YT6bR|(h1fx@|lqjr2~7i
z(x%eem=mT4`&Ps;SpY<*%iKs`SS+s5HVN{56H@@gQ(*GSW?3)jk|XgAu0NCxJq|p>
zPb8}vA%Q@!=r)jw;Q^(fj^!`1mXOH1Aqe!quouu3;GBrpqI-SJVCsbsEPo&gl;9&_
zuc8c?(f9<nMHEV+rSOGYLf{=vOYcezD1aQZ3%!aG!_!oCMwISghIFTPcHj+;H&pV&
zijFKw39gs<>aS?p*LY%ia7(AA1KT)#`Zz_`*oNBi<~n+)4LJ1kBlUmoln#+*2-W0e
zFzrD$at^HM@yyex%ZkKYTvf|EbnAjfX5@if@?LuRua8K@Ds6?18s+yiM-TMQ2l&?B
zVc0lZD_#P^w#FJq2r~UBQHOP6iN2p(Rsdtxz+&*_@hT$j?~KP)Nzxs5eVvy)I%_D=
z2Wz}N67gMR7g#Layyq@kJZD@3T?OZ=fk|DlO|^LZAEFAw#K%7uVgRmC&u3RR#sbcT
z{V*&3vR)XL+F{hx#)^M21blq-T|jp|GmNePVFWN8&A(jP6zbPpreAzOn40_g2)D)d
z;JSkcJ7oQr;4{EHHyoJ~y^*!Jcz`z9K4U25^MJAm(YiOiStw>9tG8~2dhEOtAwzk+
zIU?>w|8RYNswQ}7tChS5vu!a%DAYjhUiXFi@V9#sd|NtnnficWh*I4_z|dCMhD3&?
z^duE6E)sk5PD#t&f_Wxu>?TH^WcbEAWUWI!x=k+5YSkqG!#1DEq=xUYWI#sBS@reD
zcDOc{Y{|1onjd9@WW0T?MoT~QZsGYavV24Q3Ynqa1;Qrw9X%7<NVUIL3uFl`z-;O)
zSw2*t+@4yZLH%W3%$&rEh0;}dfTo1cTruy2Nl00mic*S|D|!zX4W)$6NE!HP-c7%K
zewTF_c<_*Zz%K|rca#N}%{#9)X~rFC9Q3oaUCJF88tw;@vby}B7A1g*blbpZx*j*J
zin^r<@G4gOs1Ejvsnb%g@BaR4gALrl!@cf$L)W40_jqDg;`K@9=XymzK|%MOLNNYs
z%JCOru}K(id^)yeLE1lf2W&t(iRLL6Pa0#F37QqCcJyl$BX~$WGzaDy^3bnF*xOTI
z&WgyFe7JJ{P0>S}xy&F(LnvN#-OIl}Rs0hMo&a-{oc6DMU0?J+k9TJ448F=!T-0|~
zRpeELtoSEJQJPt@Kd}sN(QEye5=Xxegod?d0<$gwrv-KB3pcGTCfm|X++32o-rpyD
z?|-RIFiyO4;7*8)fIZCVG81#1!AIq0dJY-QzBx?ZT@PU)B%A3`pY~?>U|K&N5QU>2
z?}A~Hf}X3pzlL4=x|Lg&284xzdqA6H6sH$`^1gd(j7HrOQvJOYv;$lmyTIfbejI*z
z8fc4>u#^K*iPGpuBS8ewr^^3Lka&!ReGJB7^P=2rJ>5eU#cj2PxPru~zd>Sk#C}c-
zDeBq#ewTc7b1f0g;=!ib#z^=QSr7}#k`U=|cDBSv7)@nX7wn5XZ5jUJB9Q586wm+j
zDhlgz@;hhPl);_410~%N1y=^v=B6Br-kKHww=ehy01Wj~wqbN_i~i02j2Aa{VNO9K
z5)}<}O=R;k4dU-|O!+A|?RR(IQ|L7ReGWcKi|%O6qSyIP4CUmcUf@~Y{OZP344m0R
z?gFTy>XcKFbjKB02Zi~L$;k&P8W6a{o!`V2UUwEqjwj@yC`+^<GN4KkU5-4Y_^3{K
zZ#MMfLyVoFWo7AO#E(|8)b&Xd6vsHpr)RDAj~MW#cxmeBskR&7WxBvH<}-#BP^esR
z?H^((9J_nTZ%E?HBWW*6f1hsh>Ka-S%@55Db0*|zfmqnLrSk7HSAOrA$5s2?OBAI9
zkFL$<9n4{YWrR=44J)#Ar=p^yE-4z&%uM}Ujjw=2L-z2K1ht$Q$%uE&H8>BI<hCy~
z2_-syy+_ep;or804JX|Bkki$^Fg(vBhN7z^KJ@{6g^A!hUq7jBLuGm=^hxVW8B0Ee
zruY4F(K9t5u8>RNnKy>m@cFlX20$9z!f{Z`Xv)GgG9a7{HvU-1hLORMkKB8Kob`2-
zB>HPceEldd@mgr2^u6EGNRI!%2zNcGig^7?DjM!xNAnutcY89{e_01-4dR=3B)9@t
zDc)W{M01NVhqVk+ddGDxdGB0Q(G_~6Bb;n@IdOyUy2Jl$LRcpqnCOqUA_IJVKQ1Xe
zf5bXqClwck|L4NjOWP?lOAam3wI--jnfgeCkv=m`?UBLlp+pL7WT0Wk23|AU6Q#0L
zwBIj<pOTHh)bZ764<2tqoKuz~tjF-NRJP)o-SIldJ&4Gb9T&D~ut?l+a<B<`mdi}d
zXL&cRXK~sp@T*f=CrIk#28Zi~O}xzTX#-=2y%0i>A6$ZQPMfg6$D|AiF9HNia3ve#
zggK3f^7iYLE4m34Er*LrqS8A%Z@T&#1d0sBxJQ(b$xGBodlE(>E`0>fgaeeuiH`j<
zT|oH>$w8u*He3OuVSSS*Xag&TRt1~eb0z^5tuF-Z!UVO=>5|~dMyT@p{Lf?lgT-5A
z4goTJwWmn|^=MX?*hU>r!Z@h2heb_csVq~NSOmek(}dY6Ni9~>2+yXn;KLfH#zwU>
z(2JAa{SXd?QOTNpaBw9R|MQ@;bl=)@GHd`pKUue6W>W-$CcA?q$Z}-T_@<+7jtovR
z*!nLg$p(M~Aa9G5TJht(nALFvUNkol8>%9XsE2%%H_Rq7>n3OgC}is2=YY~MIKQiZ
ze+y-OxIQ%)isO6ky&5~JhPpqvnqXqZkm6abN4OhY0XA~<nr9Tt9j$n~0edP?`Gy7&
z6#HkwR5QGsnFS@O0WUCf5-Z3~p@YEAhQvL15VOwbCiq`>by$WyOpn>?CxNS7a-?Yg
zuG=q{T`S(4vHbgW`}dynf5j@*x@h5+B_|YBGiTh?o_|D}83qv+K)Qt57hCOANT!ep
z{54Qn3sk<?TaL&uh08<FjAluP(Q&1%dEXEN#!o%;E{HDmO6#A?1Z=aKqyi%o*$964
zc;K^<NCyl_BrwD`Velc1Y=(&r8D^p1)zc=*ND4;gWIV9oe;chQki9na_Lnej5nraa
z=zG&mpeL1tO7)u9qe1QhuBj(s0ylt&G4y3n{@Bh9xn{e#oYmPLW}944`V4j>lJzp&
zOIXgLwp~kAZ4e!w*nLHyKyj(+v4`$n2C;dB&E^d8-r~g+s+?xcZLqC#6Vz&9A?j5G
z-nF@5&obvRNEx!e$OtXUa87#_OX8ohc~@cc*xuy;S1qz_3sm!m_*}GiLS5n}wt5IN
zl|TYD^=(l?k-j&XXB%O!2i^0`t}4ZQ7hX;H${uD=?l?h=fjPT{z9vX~O|lXmiZj9e
zd}NK033-ywLX0C+PPE>N!3~eu=n862M4egfqjw7UtAqA*p->r#m%L!WBjnlUt5KN&
zb2&f)U{6YQ+i#0}T*0m;uCR_a<<+m=VOiL02Jjsc)Z$$jA?Z@kgOyU_zK$~`1N(s*
zX4;_D)XrM-p#|<-5SKJ1)F6@_pNXVwO9*W5i6=kiyUU_|1#<T8e`J|OZR36t!_|H7
zk<DgIdZ-jqj;Pfj35bB4%twxW@Xyv)wf7eua}%nOPA@myegXy^=!$I{lF%Da6d@Jk
z?s4LMb3jZ(aqG-LsxacR*<7Ye)z<7hrvT^=8+$nO2}|WSNN`owju-Vv^|uhnZh*Xu
z$<nPFq)>$AJn~CM7tOk-6DV>NY?z^zsV3fR3L)$16Qk_o2GL)Z6T`zq`a<Acs=ofo
zG}o@zu+ThFyR^h5hcetaWWwN)f-=g8Y(`<Klez)DzMvkM0d32lva0Xvkit`Nq1T-T
zpURR>B#zX{`3j&7Bz->7;jWGm7FAUMqb1qtaHpBBIl?*W^Hg;YKgig<Pt7z!rW+4d
zwIY_Jy7Rvv9ar2GI^@hV+H`sk?xU(mAU&xi?>f@w#Et_NECGZUkmz3$)I|ncGy8o+
zwH4?dfC!9i-sjq=c^TY+<1lO$$?BGX02RVH55dTr!!iz5p=)BXqsEbl<P`SO^r4xZ
z3fI~X`P$4<+&)EHg!=dd6a&SBXjjqP0}<>|?YLkfR?UwC8~)R@={f<WN>OyB!jK!9
z@`>T<8`N4Y`r;j+t@u-Ltf@gXXFzZ4RMLaGsWc>QDyHTiZ)jQ29?jaH=2hooG!G>D
zx>T>F#%!Gb-x4`aaLg{+xe$L3mm<EubFm*adG%~e`$?t61Y^7px?YWE-8&75w!hGI
z(I?=1sBkEQW}5{$D?I;)KQy@Q3f}vDVD#Do^p4KfJ$ocbEERgMap#>X((}!Er+1Wj
z<YX+R#@G9{hjK?}|9KQ-%aC}OEQW$*U(@uwuUlTzFMhj|-fRx((1(CGVh8^fS^pCU
zW}8^D&$iVK>FM0|S)tw$`xAY_4X=3w-;yU`jnj%vTVnx7fKJebWhqqjH7AY{>ufi7
zz(|FYn0*8ida>ln2ZIs=S{<55&+hP|6_hVvsi0tf$vvKi#Q!o{=@T+!(1a(J73Jkd
z`rx+EWypEOFIyHl4(ANz*xF|Wxi%<fl`gKj61t3;<v+k3&<8NrwuI>A>yN%W`GE%E
zurSxzJ)4-bA_MBYJPuEYD=jTp%rXHF+53U^Dg-A+-i2HWtdN4kiO!kmpSrmNDgeNu
zIA@hsEs&s}Z8Qq&edqw5HEWCXnjZ&)AkyJ*lcbI&Aa>w52QCGoH)y;IOoZm$<mA2r
zRiT5Ousxk=htJ&`%CY9=*haJ3V<kTY2aj&uKE{Ud5xS=LWheXf;k@Z7<)0{1aA+os
zO(QWdH?~BEK~?c;@P5x$lPE!3%OhXob7OL#;IrxfW9`}>lDykDMo9-Jt;5s>;%1wz
zR%WifpdyxAuEU^{)mtW&?X|;F@swilXs)@ML(Q7CA=nYEDfO;WOGQ_S)+TOPxU{gq
z5b+EsJU%@8-cR3u;r(f?M4rRvbARspy07cH;di=@(!3N4dtAv>1+91p@nqI$yHKt8
zdCQ^a5G+vV+{I(ykaawh{$F9bX-MXN_^U6|VfF;<m(PG?f*~(kpK!%>F#nfaO}>aS
zV%-^jNE0;u@UKp6Dk@~xP%O>7$d)ic>!Y6N@>!^sf1Viw9i~-9?Y^w$wL=;HY{x5t
z?q9)yYuO=`tl{x_Bh4g6o*iswVFS-sc|M<rtw-jh(KWrTObYGjxNoE21xx@@^*}yp
zg59dLto|xelHsp>sgo9I72GwMwCGMwE5a`^a?3>_;_%A_ia4nGk=^;vZ67Zd6tY^w
z|2EK2`_z9(;}Ot{h4yG9<JLqoB|wFkWK`u?c{B8m)`I7udeDFsSasgvodZjv-8f@-
zr5+t(zNcP=${yHU!R@|=$^#c~*{m*P3a96kmsvAwxS7lH>F4;KC8&hJw}j%D^Lm}v
z9XEiJJ6rwPDVnd}2;8y{18AZf@_KCQvhU5eHwSn2<hyB}{}H~+rh|&Q|D_8|Wk4=B
z&<s)^ns42dBpx@oW7PgekRf)1wG2)ccVH$4cFF2P)>)d}qZ-y6Ohy1TAbDhv{o*O$
zS6(a$KFylwcZ1LkzT|i{-XQw?Z%LV08dqj(7C5Gme5RBH+99odlIKK9^b<e)o$C^{
z4i80bkf=u9WqCmwwYxrY<40Pc+8(u;rCB4Sft0XZqOe8(4!fxjU`OdF75<8Z7Y!$p
z2{=z#qij5J$)fhwSn-(Dp-_UN)Kjo}MQIkJ9QerM+F^C<*=6UjNso`zW?4wOra!#&
z?oWSc=PMH(f)f<yuoT4u>@6Th;1GmThuhxEo)JUKgS6~Xr%Aym{Z9`Db7^=`S`4gd
zmDTnGsP&o?@*^CSp9jM6t=jy))YNH}IL)mr#zPIONxgZmmVl!1TT6y8r04AwY2>Rj
z28Sh14b4trkDhu2>IxoA65WYIPn@4KD@u}-_4a@$B#Bd|5w<?W<+}6RLHqOHIM}ZI
zk}gTIh_|lww_y;H>)Q#~i{Hdpuzl>`?ejpY`ah&5d0w(a%!vyVbi7?8Da|k_8Zyv#
zLylMocs|c9OB`cs^7qyMj&1={%94`j+J?qdJogS;=v!whZqCY$QfO4M`oPj}rb^CP
z<dK>%fnIjr8~gGTNLP;BBQ-RXikup*0Se=1B{1z#j{R#RiK2|5p(b{NJjZ6^ysYOa
z8{G|z*!!bsQ9E+loey1pD_-bnBC~mvn|&es$H#lL+pKndeSLTq>Ac-&qK%vTMfVC*
zx+<d^_*!RLpR6=uMHCZG<XF|}EMM%;uS9q(92?sP0v(BUkRqF%p6BeB?C(O#8+Z@3
zc`07%877N!6Zp*Za2z3ESnbZ?3V@VTGfX%(SHj^J4t}RCYDbE#%*%e)g<SsVA5s81
ziZg!KLNZ72{PqE15f=$#*dpW{r+rcwS04)N-mWZs=tE44yThTKLUf5^UXN}1p)P#7
zTa$||0(%kX$|J~iB=%=~E11=YIY@V?e2lGf!^2(XK;V<+xiS-QM0fVS4ufE0@eF-(
z1rE^Ex8Q01^-_&kWhrt<q#%FC@6FWfO6=C5K%N!gSwv@3cj1iDZtDNru$Ij{NK#cn
zZvuKIU|V_RIfw{Jh#axL0KlMd)|Y{nk@mwH01xxL;GyueBUu0GPPp|x@5(tuQUvq5
zcV6GITKmNXD04VQn1j&`R}U_#(U*fduW$0c2z?0D21Et;*S~)HeAcP58#VAplU4EP
z&0}a!@&>sq;n)=QxMTmhw&2!b3lQ30Vr_4T1o{@_DIxMiC1i=9$&SXO@^b(AhZs8h
z9XPR%6Sk~-a+@&3w=T_R0*^klM1!h$4+o8aq+sDld5z6fT}>)7n;YMFa%$0TjuITf
z(hhm$4)B!Zn+83FQyML|_nKTg_6-_Tv`H~(a-uJaeW(^uT9it8atR#IyD8Hqu)8T;
z4A&kCPq2=mgC~C3wI&qkP)<uD6n^=#Pr$1j`VzSBca$8RMdM?U3S>R<W8#&ELituk
zON_vRqWQuUxq0X?5M_RW0~J>-R~s}AQ!Nw2Z?A<FQDVQj7HMMSo)&4?^<0)(RWb4U
z`}vPu2MXgPS(Br91eP+)J9C*J>RdhElLgn{S?chuXFpsy8{Ry!eIB_lMe9rj!`FwK
ze}MidOh!?1ELJau3;}_Nzi+Lr|Iit@{UIW&e!c7k8%69li_MZCbwValgJ9`Uge3Xf
zO=da3Q=X-ZJHqM_Wnj%xS0JZN{}jEKs8X=G!Nm@NUMr=Ys)7LKyjY1MyTFBe(I#Bf
z94^<bJR~nM^>!W#zeqs!sGBPY@+_InB?qt$zs(5b1A7HkZR!HEiv*}y0Tg)-#R3SO
zKT%btVUY(2tucI19OgP;99vTIcm#l{X<fhv$6U!wMGLWFFi!UZ;V3Rrsr8jKmC{KF
zwLyS>KQT5K7v00_-`bo9FmmjLz3EU(0pBGE&(OT@<S6A=etQAmgnnO54=+VZ_&edA
zF|dA_h3x)%ncj*EMNEJnp^pfCw_OCrD0Y7lq|YDKI~mr$zTYKEg~ti!OUz6g+?vkP
z;)A8=MyKr(z}A2!=X$hb^CeZ7wJpeDQ2DxW#rrjow5ECeCrRL#@RglM3)d{?#b|+E
ztTaO>&h9w1eS~aN2Y}2%SGkgC`ip=b)`RT){?>6O{jNL~;d42QVVx`OS&3J39)r@s
zZ)RxfU?Hogs53>Y^EQ;tkCDa7<VX8ymwqes<jhHt?nzPiq(~eKwICb03un*^-qQM&
zfR-)bu1HaHax_|bN@13<sB~T$9OZ$IJ$F=r7G*zsyF`^uOAgsHn^(P8ON_j-J<~tE
zMEJDrM8$E9CMDaIWnhu3qGGJsYYf?tq7mt&MSyHm**i1%>I-;=H^raxFYgxbiBF{P
zpb6!H?h$@5M;+Px1yi#{l0lLonxm~QvFgch&y;Y0g6AuOVp3B;0k_s5gH>4xO|KC$
z>QwPnt2a^uY8KiI7Xm6~X-_ks7wOz9SL^>WJ95{f)xC%RAr-x^jFTC3WvwPh66H~f
z-4DABreXxZ1_R69b$$HBwV)Q3UpmHpk&+z}FEuQLIVNyUjv&_ybp~P?ei*&bW&-nP
zx~DrY942cKR7c?8IU~QHBs{Y?V;@BSHp24A>|=W-MKCsXddMzTeh$B(;;lJHdIZH<
zS*ajD0gM<y%=~3CXG!s6kf07SP2mbMvn|8YO3xU~PRh8x$@MATunRvffX>#8)pL@#
znKV1IEopi9kXuWDlqNN9yA~pzx|SdwJUO|^on-3DPwOF3$lkWL6z%+rC*^jX4J?2I
zDAi;1y9Vz@no#=HuThI(0rk7c=-9x?Gsz(Umd!0z$JofVJ>!N?F2S!dehDQ9rkb<o
zx;()ZVxU;S3bAMOg|cXT{ym_MSw<GlD#kN=Y#as4pIor(2acK0AYwUC20<-*Z7i9E
z7HB2ipgp-W3ex02%kX>SE=~_**1JE94jYxNScR=2`Ly~p3vCNWPc`iN0L(mf&SC<A
zVxK&76uj_@H7_M8P^SuG;s{5bwpYj-Ps$tD3wrZmeojHmq%q0!a5MuhX83*Bkm7+e
z;BwIyl5Psi5?Z%idUGWnu*cpa^7)+wvx?NQGb|msAQ)%2j8jfMS%rfH;3d%1ZIe2C
z?ef(@$3qHYQiiido+(Y<rYi?qa2Kb_sM;;!K*MkMdbbEm@#zfaRB^b8=9x0w1Z{xb
zbq^gtZ-f`KesS$gfqYwQi$#(Vu2}eX{{H>eLtvhKnpoi|2onWh)dQdlosIYpNBs(n
zu_HL5>j|4Oox=^bXxKsWM#Hn)Kd@DSDq!v0JBrt@pQ-vTfCer|Bwx-lm`-P_-1>>O
z`lTxkHX;>*{`KOEX^nkcp14~oa?>c1Gp=uhUInoVF6`Y>v2bJsYf$s`s71EQ(qTPR
zdKb=8m`+j@X#Wr<`Soh$8{RH9J5F5zCiZpVsjg#yft?#E{co^dH`+txs&DiseX?;9
z7V~z~K8F1|1kYO^>;S@_PN7^S;f0O3N2u!$T+kaMVRP^1JTe>?Sn>_37)cT-Kz=`8
za{2Zw$c4P1`nu`I6~;T~YL1<b5<6Q!tpQJ?T~0ia>~;RE0QL;Fd#KFliP<#t%xgyC
z?bmR4JdS0=w?Yzr>1JPW!PlPOFe>PajLvDQmh{G`NU2*3mNDFDmZj)&qn7m$vDEqP
zeJLp=n^PiQ0aG{g@fm8XGZT-4YvYd$@IM|jpQct(8j>Q^HS{2B+7*yo!-ufn^gqMb
zIs7&fTTvPZ4y(lj!u=kj(&EBTp!G5H(_oMngv8%TX(gG)XsK6Ph`7CXrf*)CBA_ZO
z-Jsf&shL;1RNMBH@aBN${+Ca00k3_+;7uMKZe^cXw%rBE!=fJw{~<}TJY{up<gVi8
zeiov%)DV2{z{f3np;KWhr_g_uN^&u~3=q0821w~~{^c*deWgi4AwyGUP_e+m7O}Ly
zaYu0M1J@->ff7o)We<#TSJo?fp=peagui0f$v9yB8K+kf7D!9s79Hdpzm;YL6pTXS
z5uF(SrIZu+24Two$R*P78^<!j#J=a5ne)DTgoGsv)SKPxEIX@h@mCD<p%w2GV8w$4
z<)$!!Iw9lHM*Nq}OYRDWn^<jY)e)icQPNZHJ8%mtpfHJlcosXJdV=)7EfL(7MLA8~
zo()*?3Yf}62u&hLp3H%eR1;=1SoDEPa1-`{fww!{@@a(KG2W0&rLPI*LBD<hcq@6x
z&Y?DQKb4!=!cH-_Ylk4~1UiYEz_BNluGui|;zhPW2R9cmaJM4ODhCWa;m2kb>|}G4
zpn&X{ibpEMRK(OTG(8_q7<#cQ(6J=3q;Og2gwfi@;dUF?W0}`<z12W*$l3+tPWx#^
za+uHRqR{>%D6Myi7U&dx_I~(Qq8soD0an7OOE9>o8|=4vy6z$zt5&P5d=H1P<*>V{
z6XXW`OS01@=3mFF0^8A4hPGg@83Sl?Cz#6Vfw{9$epNVX8FZu*s$hg)F#&5^w{?-h
z3C?TV#47xkC%eEA4;Y`dj+rn}O9)U8yI!^PAbfGplFURcKtyNXFsxrAD@c$S?S{2H
z(s3oxQr{3OPkQOVMb!3j+T^A^u<4&b=5#z4bFqLEwewcpDX&q;;_L^-+nfjW_;i)B
zg|Db4$}4>9LoGaT%Ig59i_><n%ZfL^h&ot#5BOF`>a}W&(f>T;=$rAWN{gs*=dFg-
z;28r9DpwkT9!yNYVn48G{z0n3KIS#=FHjq}0ykcr@~Xn`M$h8G8-VcdJh?gt7i_yo
zly+9oArJ|V>j03F@F=J2qfP)?l@?>@|NGFayFQOeg$5DdiQ0y@!4bAI&koW-iMQG)
z`Y$-;aDp69Px;2~&U>w@dQpJdlPqc{!=R(c6s+N6-=okiPMgSN{5APdO)^N~32+n%
z)YwD6pl@chLjPfmk|XcU-vepGu*5w|u=S#E=|e08|Hd}l7p$SPfidMi18H2S)&_J4
z#{}ArRKVyCb<F%?<0V>wI$ta+E#UlB5eYqUME7c786}Y$B()nx=pjAEiTTIAC-Ro3
zy*pykGz|P^R~Ms27+nrQa_4Zh=Jh8h8qHl5CM_oG^wCtlF+kku`AkBV_lFjU^QvRn
zC`@=lt&oG>zj1F(hS@$&N@?cZ<_Fj<;Ng4)uoU4;_mC{8uGuU_D}aQN@Z8!#2NH=R
zKc=)zTSP@&S)N@u9g0P8fsswye4MWnbbbnjT#eDhi47I+rml<um9R>ouoGfnDj?{5
zY~qjY@4vfCq}R!z*`G-1Bs=5i_r$6Vug^dhq&9|v<%nE^I%j&pQh^oM$lzwQqMP&1
z0{RY`28$)JCS7l};UeVh&OD+i0zv@SA@x*)p5aPx-OZX5{*~>72}B?cIOU~!MYX8S
z!{$FW7ZeUG)2pQ^1w4xxd`ri$N55)2V#GT*ctfd*e~5J~FA?IXu6h*|*J@=o`yWyW
zi*GyC+r3*wEWMdkd_VY}qkYR*cC22dc@^@60Ch1&cn+ar;aDBfi!y}-hxkNpVi>+#
zd>#}|M_0zk_#;z*Xk}>+`v1F05~~WwuWhXEeutieXWFpIJ>uO0Ug32y0@`Ow#4`a-
zR|^JZQe0F%ezY%~Z)t!c_#7HPhS!tWq7|MWWpT6$U@Iq@k=;>8%>4qLR<B^YLaYyc
zVXLZ?;cc+gA$57ZOe>+V%z7Fa`{tQ6pLBQw7YME{6DDi-nuoPrVEZf&Ec`dI&zX{t
zH1bFQbJ$^3Z}{mD`>9-KPwM5rmu_wI6lM*<n6S*S{gNKZ*~b9W%I(e{)I2Z~vO9OL
zCWU%<m?RGRN&f_4kHj_pq&!yNJAv@9)&rZ%42nDK6m8LQvWIU{(@CHAE4Khe@%pS1
zJI(F!{<pggMUqR|AwSd_g>mHTMlH``!dD&Uj|>CI4jqAeLCwsmrT{v}O};Tm!i(T;
zUjj9Qg<tbCavx{tkhTcbzj!fmD%}OPyXPwJ!Hz3lU{C_qIPgPuXXd?GUEWQ2gj?|s
zY8oxo{_vo8=8kPxh-Y&s5FO|&4c9%{ooQNVAj(A$al=^{4pVzwqWfo3I!H4#DKcT4
z!eEvfd-%T&DZ8+`2L4E-%C1P%Xe*X)43(^yz7RF3j48!!)8{2;ikcEt1Q}==yS9}U
z$I{SOWT?G;{CYg*{uHD9l2bYH!IdtYVyhe4aJ_ND8Fh2G^Vog)>Lgw=_u9LFyx-z_
z<!ZC*gB&o&SnBEWr0kA^EQtT~!Ag85fjm@v_~H_!+;mlZ-rICnCN+Q&@Qhw)YvWS}
zQB$${Yv1X1=AfP&-f_vbtEGft!QI}!y2>PtQ*yh((>6F?7P7~BXd!IB`-I){{r`Rr
zE;wKas-TQ4$V#*M!BjmWuc^$Ju02lk$cM~4g4N^cPzxMS7QKB0fqLZqXu8v%BEwP#
zyQBuz;GH`gahM{lD(UUt5L~S0GJWd|QrZ}mn=P+gEavO_K5&U1l%+!I0KxEEYUE#F
zdC<62Yj@2!%YA7dw3uzoaD^gv31r~dL+FC*N7f$Ck<`F+D{HQ<x++8>1dnDQ?8gAW
zlD%%WaerJ<QBzZ!dxpiF+j-OsBqZl)SbhA&#!@d|7n{d}>8fJssi#4~hhYa)u7$5H
zD90uXBC_IdK0NIG4+*jW<<b@b#!=qmKRCNZ*A5kBOV|XA5*C_BN4$}3X6J03t#!34
zIA_r5VcXOio}HU3?YrRG@jb!^1Bd<x{fbd0J#^2Q(8D10WQ9E~0)mZrbu~nL<)ddm
zf)8%4)Yg{eTPNm&l@ZvVI(=@tjxL<l7$%G>a>5=OH%5azL5G3}!J=@k*yz4i9V0Z(
z;f9W82e(nUot6HxQlS~4d{7F@S9@X4hr9%V?)cGUL3^@ihB29&5`7pNOmFYF@m)~o
z(SYm~TuO?zdXr8!pI~I^(5J>9r{qXrh7KrYTbk6Au+;0|j{urouy#YXbrx+u9YRgy
zl~J@7^YG<3XrbTF-7NwWX?Q>Xo|2WsVui~(O_C^Y%W&z|Fx8ZI@w<Sjd^vY<4=%2A
z34NcZG>682lB@^v60-B{1PEky>%!^myEHu8W3)yRERjFz_!Pd+vF`|^7<tJN4c*xx
zsKiC3r5mKil%0!2`lsK3|8tQaH&eYuf5F70#c9L;o>aT_-JMoH<I^1V)m0RDBk^q1
z6u`c>nPBN4g}Y$1(ldb;ESsgMZ)G#n&>lxQ?UJW1fmwLB#NN+>o0&t)S3J)gZXNzf
ztl<GYM0nIG`facU2ym+?MU5JYVsCTCAKL>SL;tY{8|+(<(M;VW(f{tINeeeUEBW=U
z<};d`M!Zgxfk(0{vO-h6h#NfjZP;kHL{=Kbq6g*wH7<s(n(OGhT0jurS|lDB9MsXL
zyI9Sl<*QbPYaSEj$Yz8HxE?SZAvm|)71YKwG12rZgaq2sesPXeZf(K96=ZU22>cxE
z1eM9!w_M4IY)>`Ig2CR28&w|(tLa!Cyea?1V!1034#{8koGO`>`qA6-O*$;YU|VR%
z4#mLX*ndBAW{xF41xy2tqQ$higDSo2*rWAWwI0R3dt_~CYB4BZM_43sUhMgGa*a|0
zj_`H&T!wYHzaqt=m6TFz?Z14*8zy{Tc-4Jt9;0G^u)uBcw=}yw-1l;ys%QS+GbVbD
zgXh>6;om@#VQu{5ey;<(!JzCZ_-=`#yZe7Vqk2aDq$o75mcuK5^+OhP&)`TUttyBG
z!UtLYd%SGA@wMEZD0^OaT5l(-$kkgcPCJ{b>d@LJm0DZ%m!Ac)3&7;hp#}`BNb;8N
zbyN&$gNRiYJGPdwnRi3&!?s41U>v)i-#*QxWw|n#ZJEBM;<}%ZP^fH$VE!^UA7U6w
z-Cm%ijobUDeQ>218ttW7BuIskJT{xcRTUxtM}o~JG}7VSyhRXT2qu79Y0gC<ap%7d
zzjsh&?^QaFTujH|hqy>fS@?FO#3?TEvT~HHMvGP(hJ%A55Ds_W$Jn5eeUVLY4u(8I
z9+(vez1okUsRp#4hbB4?d=S-)yrW0bp$b5BdjS;zqoPjW!Nd4j$HevZd>BX;X~ima
z_=3GJ-eg`n*`YU;!iDvGo~2jCbL<syAR*hO6yKk}%@aZ?(gB@?3GCNX>0^W1A$Raf
z2326qpc9elwetb;#cxAR)4}nBL=SLyY;i8EYmTLZQ{uD${Eppr%X$Kc8yR<3>0Y>P
zE3rd?ynXh?swKGhz9%05O9C|e#P%0_z5`HSkmh_I8UvxYA@b&z@2e`0;QL-x`guX9
zO7fgi`Po6whoSQmVYkLae;|OMP?zT>fju!X{<;#hx4;5|T>bYXy0}!M95VoXTC#o<
z)k4fvfG@R2m!D8C>KBFJ{t_vGtD+^JK`YeFF%E@GjyiDzUVH5e*kygo!lebV=hUx)
z)y}r1QNV&mpq5seCFGk7(~Y;x7IosWx8`vw5oNeO<LRaBW{xXHE@rZ)bE+0QIRIIs
z1D+GZT64jDIww#K-lUI+M#^iZXQ;uu2gZZL(2x2r9`4-D0a?OMxR<?+;#dQb`R}~q
z4&S3zVV+mu&hBD)hFWybBvM?!?S6V{ftaz<k?@YkTp&kjeV;FW0%i3We(oU<$6+;L
zCicyr{*0`IDk+30(V(p$65uOi?htW&^N$U3Ei`eKaauJ-3b%H`9GwU?ITl64VvI4?
z8RN@=qrFlmvvsT~1~$zup=TGE9JYpc8ydoMB_EaFyy8j}6UoGrCPdEIGMG=JKK8HQ
znG08)hu>cOVs{<!fM&YE3JA6vrsk-%9W!t9THX{&ub1h8+#wu=`9iBdUkvRVcuC-0
zHHIC<e+dhGIoup_w2jHxdHc(^mM(Q2#P?mx(T*`SPG9-UqC@A`h7xy!G0Uj27!(pL
zld76txdm?O;TcH0kX=-@xB8VZy*X>Nd$d1@=tlF;{RRHx@Whvf&MJWM;S^uhS@6u!
zqRt-z3-@F(VC`}1aHQZm0cBg-)5l!Xuv!yp!y}b928i}OOz61+XIv~YvOSS2&ogN6
za7w;@vKTQvCuZ7f+S9%04zRys7~_As&4UGa{I@})_)-`YXma()wXN_VEF*pIOsTUQ
zRF158^gnVy-3Wf_YQ4_>dO=hQ#G308g=$r<w!#!x{1|mgp4l<ZbpW(Z%+kT)@{8{j
z`=B`;M!<c32bM}~ttD3;yPRErVkQ-*9h|u)7<4G{i~_4Gh*y}t$4#x{R3$}mJwqle
z&nhC}v{Lm<Yk(Et+OfNa<{RWp<;05Xk#!q)1J(wQl9gy_j}f$@6EJz&v1hzF$?JW%
zKKhAg8JcjFBvkgPHJ@RQ`jvP%_H;(|1vT4~y@rI(X~6b-W*WcBBG4SXYUM;GxbIv#
zE}hoom+woZ6y<6u(s;^o?yf805!%r)od&hFCvB2M`MR==!XlX{IKNmLUEVbe3;W(I
z6e}@?l?5z}lO74EXb!RF1M1q+Gv|xz>#^aEZA36q{^!H)!G&(J<xyc(p~u~`dOVJ3
zYOA>VJiy46{Mu*mES*Q^ElbKUPDzTQrIICi$3rI?eU|)<r`Ml6{Mf2P^|*J2k0~HQ
zXtw}`=QPR0$e7)ce3Y+49{kt<W@+%4W>xnG*$3Q711qv*b^DKk>F@ly>MjUoFCR9w
zpyQ-8veckthfC4EOTDf@b1n}Zo<Mfbm|~)b#9d8ZYpI?pQQ%Hm(&q;*7~g@IiMrNC
z^R#7j-qIp1>C=$?qHf8mOMe5&>M3xaR_b{r{p&7uj-?D1GFjfv?<n4ePU+q(XxQk`
z8$W#zZ5|NlboAxiRWy6^S~bi6bE*a1-&soWZS0X2MCueY&)UHj%eIRxhrxKT;l<Ar
zeRgv7<`99yWP<^F?*Q_^e**dNJxKH#slVI(=GxSL*5X#pUeI2^zv=pZf?LMfC%1aU
z(I#yJnVdksBwjhZgT4#B7J?#Vyw*_4W(#CgwmQzaf1C8%bYLWaQB?BAy8T7%v^_9C
zqHZKbnxm%pJO-W!%*gt-0YHUy?ioFEJF`>t3zLG{4V00-Pfp<tpE0{|DzM1g&v@iW
z-8$lE_HlpuJ&z=}#_Ps?y@bZ$W!1^!#b$Lvncd{yusmyoyGHPHKIf6%?^pcx$JbK(
zDFSH%9Zgkx_fI!SJ>VMQ9-ihT2J&J3S<ijcmeQQe<HW>=?N4PjvTHt+f2g_$2k(R1
zt~4>COOD<cBo!LWk{JteG9_#*Ipq))QK4NUz}m5W7;Ui)t?^9aB?R@&K(m*8J_qWg
z<8`W+C!={^r?+LYGY8w46j^D~k{!@XW1!e{r~s;7$m&lXAL02bl$+g*l3d9ecFNy}
z52(>GKqKMODi$kyRz!)DJwx-SFk3D5`4_*h1<$35kN~o`SrR-}xT?kEXP}ER#-Bt&
zb8cep5l)MoLX#_5nyWJmv~&_J)p>J!tMSWQ3%8o(Vn-8mxUsAAc!uf5{6o-uL^hlc
zyoXI5L<d@r+nB7jAalN37o{r0Fx57E@i@GUtpvDY8LL0DB|E5NPj+yBP!~Pw_1dNR
zTY&E~<=<azkwmG&M%XM(SWoIi>-<ArPain({r7lVY)z<`ZB;8byuP&&`ln#xoql#Z
z(>^R$m~{#eB%gmmoGKQyW~I`ubm9xIHK?>><WZB3o&Co_Ky^Tl5(yu>uvpn^H_I-=
zG1kwzz7_jUhyc0o<Z%-w|JtoH9wy<mTz?ZAhcP(pIjY|?wiJQkF6Bm>Am0jS<z{B8
z4LXr4VpU3e#UgH$w%b??ih3GMv2S)KZ`38iTkl(f;s~72i}>7-J!v%Axkd=?zwzR>
zRUC#|Pq+6IBKF#$jhqRLQKq>&A17bg{$H0U{2x*)z7NC`IE)|f{?w3TkxU;pTZ%f2
zz;>kk*D3rV5F&zZJHGoNIX|7w^DT8zyoViWmx|t0yzf_bOc|%ixl~>(m21FOe4r-W
zdquxh_abt>_K&x^)V&%C=YoL+nD6?+rSM3~j~KjtCVG4+TgJvh<@=)U8uyggO%~Tu
za-w2`Xhw5}|D8;``sL<VlVX*w2U^Df{PS}b1jbnPG+%+XLK9m%s6Hlb;B$0k`2Mdl
z2Ur@mI#!^&34mx$veJxfo3aAzV#gW$`!s`A%Y3yP;34RVFTbGHR&UIT4=)q%b~dM^
zsu6%mv7iM}EtY}}<HK4-?B9%-eHXMJ5y#w}YU#%S1+oHwhmc`lPH243*TCDv-X5P+
z{Q=q1{n<qlg_5%&oy8WpL+GDqg$WAvLNAwC94XM5^%r^=xQbC$erBT`M$7+JJ1CE_
z+OZmnEcEG|tDB)W@!k0(sxCk$MZV?nk#)^mAM<dxk=w{SKmRXLdtFWhbtWs|4o5~E
zYcyu{Y@9MkzF|_tsv@;kjj!Vp3W&nFnJMZBH+##V<V9^i)1;V}d2|dE3%cPAp5Zkh
z{|^<1;WXpiXqQL_^IL!M8}1gS`M{###pD~RLKp?$ulAVx9ENe@m#u0)nZweVPLth2
zc4C!!9_QXh>V<%*bGs*#krK%E4_-l*euCGBWUC6oOD79M@yJmN_j!Gw@fSHy)4Rv>
za+Y|ib+}9W)8Wrup$8Z`J01}-iUI`ak@m@bJAOCO+{xKu2S~+NRP!pwjv-Z`Na@E*
zIkDZ^YC8gANO*TxF4=CDZ?X`nUo3zO9FVV1dj_SLYTCps2OdT8)f?;+io?jxu2K9R
zb;SNcuZtjK)=on;K%!508gz&bY2tct-siL$FdIEDOk0i3?uwPw%k5)Si#|IAkW>8I
zN?;Y4RTd(p+|BsXMG-<m$LDJ-g9qokgpdI2n&k?IofE6)KdRCf*!vhdh|+}!>VQwX
zD0cH|Fiik|o4vbG5rhyz3eSN?%F0Lp(h&{k56FM-FDF<z_G^DZ^m=R~RnCF`avXbS
zo%+*nUi8A1M9hDsg=BGzzO@7Z$~)d=gvTcwX7CguZ*IHDaroba-{l-9xT<g>Av))&
zY0=+8NEZ9w+*;TUuocH-c0O5jmZ&rCO4J00$R)O4{B9_8{>AT35dSQ<c1K@^H$lMF
zg07o*oU&Zg+kfcvl+S6j_<RQ61jeJ`*po#CkXltz3_9l?8D(mZe6P)a<u7{yl{UK$
zeZq`~DXnQ>olt?@wY|EXpL$15B)V>p?x?Pxx^$YtDX12!``McJtDeCoYnAAAd-WCS
z*ib_^?oIP}UGX8ruHUcEbPr86I8Dl92D90+&KD*_LdscH0S}6=`!dQ6hR;41dWMW}
z-u>&7@yYs+A(QOe8L2K~PQU{nA0IY@Dc^2Yn_ef&^`e1XjsKUj<go@Gu=2P2)pp0x
zuF-h~xXO_ZSLV6+4By_{|BkJl1jD7!l&u$thBYvSj)3=?uNV9T$5eT+6%gAB;Pxo(
z0tcp|$%IFJRR$h0s7YCO`HmCWja2=1#Oy>xStd@N_xLp<Kd79*^TAS!lH(L;8aS=$
zga>19Xger2v)cLfq^Fty$HVL5`zbof)k+X%;?)d7x$TCmhr|@;#hz<{af6f5<v9Q8
zLxRZi56S)h4MF3e{DLbK4}Xw)o8t0Y3w0&2@_wG_&hxgkwgsy%G)MJXa$B!${Aw4B
zyBzFJ&OxaoKE{7YACE2Wco!~Mwf8cB@2FvvgI~~+%U2#czaFZ{JyH*l>dW_W7{V)5
zOLa^75HnEcW3#kR3<E7xy-xi5n<D1MJ#n2;9A6#&w*~71R7Yp;hvtxDZ~6o%>N(jH
zKE|ZQXF0o&Son4*hF$M<@x+%HTQok#f|!Z6AV|RoT0kMBw!5<zVHA3hW`o#Ilq6_o
zss8hZM&|JB(%zxQvTMV#vXX;_K8gg7L%g1RW;2lOP>9A<#ntJ7B`wD;R9C=QafGif
z?@yk<>yfI)3+66x!yO~3zGe2$2)}e3TF0S+&XtUF$;3u6bdAvF(bDY!%5o!`s|y2T
zZ)zdj=@9a?+Ur0cU|?+Ift$u;jwagE*3M(~<b*6n%0SSdtaDIvHB<ciQZV{%oI=~<
zA)OeOibcY4jUg()-pN8<KHTc#mm*`U8gcmp;U@Te;Da|j+GBZcnvL8LlU#jz4YQfz
zV|;hs$F$2o3nsFejdWfW%)(?g4t8$YG-h$_h*3Ss*<#LVW<ioCojrrG<g17<vXn;q
z9!yN+&L1H0sD7UO`39PYyFba+leVxhYpnhY7|Sx?T3hXO?sjI1*`If1&uHm+TYqz(
zS3B7FkrUT%g<G*CfxYYlzuaQkiUlxSRwm0Hl_W>_d*9}Pb%+zxJ340~7>G<WtLc<u
zd(ebE!O~Pi0hb>L4}0gb-wvZd!n%)7EsLjkcl|b*($vNavvyEpvRC(h26+nqiAwS3
ztZF7%LCGKT_uE68Pq%j47DgveDJZem{Jh4^bTyMs@h2B+XacF{CE8|%129p3IlL3z
z=)zfj?kiYfMnjH{LKk$T2UPsI%31Knf2wHtmTu3<98(272L@}|oZki)6F!Xm*Xs*l
z0maJpmyzwpG|i@Frm37P^_6-m0_=xHki49eB1+Y^wZ|zW+f;#O18Nxd?f!@KYyQ47
z(+~5Y8bTcJ1bl9yr5R01Uq^ry7VOg^MHj49PUFdCdT0lW?q}1okl6FB8ne8T|LdfR
z@kcQvU6GAI2c@O9w%{3N+sbuI&@s6CZy}A2mCJ3d+bjIy3zI|gVY)y-&9EKDgN3Fc
zx=p)KOgMM3(Z+mBOYRB-W5b@e`$$uiMGy_^zUw98k@;(GMfQprE&kosB8iX$a>KbV
zBs>QQU*}3xI_JO_UP`(evSRr$&&KQsf4`%*$*ibq=fQmumy?ACxyC=NFj!N=G%zc-
zrt@_zGCpK6)GTBdKDEz1xPzMDXku)p@K;m3UxUyDwu!Rl)-`58zHeP})PlQnC7~1E
zW^FVK6PsILN1-!%VOh5!Y=8XKB+<9-p1l67DIX<g&V~~KX}r0(KnY>?Dm(P3ruMb+
zP3Wun1DfByUe%BpY-$=1m;RUe@IZz6&OHdy&bhACKhr+^yp0oE?<9jCgpVdpf3+xY
z^L|w&JFvZUW2%q2s5#~IDh)X-PAc4=|EfCQ<0mkrM)=<}i5!{$`nSPYSZZS{rF?39
zK=fPb_$}A;!zkbk^$9zE;4*2(vCIIboo3gpYO>A06{j`9s<?b>-Sy5Cxwt!xO=Tl<
zTbS2+J7QFD`3W291=7+>Qb`@T(7Q;|NhV28{TWqR38H3bSzsJ~N9oqw7IP!$6^mtS
z)eJ>U^_-;uO7X`&UURNrm_+Gg(LAyv_wUJ%KYC~r!OOwEJIsgtW7f<D>6{RWCnfm{
z?4BgI{$R@z;CcJSely-=w+DD*V5^d_7|?3?(N*Am*m5Q?%%qnevuc$uHU6jm1_2Xz
zpu#$WPQj1)g`jsaI~Wx%5r|Q*&=GJw)KyS{WP0+qiRK`!6@>5Xdf~R41wagI5yIYs
z#*tUqU{eni%9N>|&i=K8h-Gy0F1#^kI?XFbIuasGSF=oHEt8&c`GO9GrV5~-PgT02
zMX?Ri6rGgjS?3Dwsxbb%Y3#<cn!!9a=LMxdbV}C#0&a51Pk+Lp1W_P%zsiC($T>k>
zQFnw?^;IV7)<#7lw+$kYJ>Ok|l&qN=cU2S>Gai2F0xJJpz4lk+>A1>HgciFiCTWAz
zBRP|0QD12C6OKw6|1x^#M5wjhBWv7~MU#+NX8Hb+jy0~%Eu-jUjoE9bijT!fLL_`Z
zUV13@3HRUU-kRIO8VZus1S~Yp&aw_23_;+~(}8l(wcX%4@UQrQ-0YNm-&H;nt;3D%
z5Vuo#8vyf#`SS~o&Mu=z?PF><k+O62;LT=Y!}SlqQgUWu%`3>V`^tpIxkIFZpu(UR
z7qnw~v_H_Y`qO+9bFf&W<YxNT4zYtzN!AdrTQ$2qzszXx6SVXrXpfsCr}^2BP>!bJ
z)!u*Q9?xPVaupR#&6#~spy&hzSlPg8v;1+GCm5q{%rwK8&iluS0f%p2bmv}<$3kp)
zE$1BVmDxG(yO}~yAx*BiFrn#Hdjm(vQgQfAg`b-~il+=}YHa2<R@nZY$@%f^dn1HX
zm@R6KoZd+P6}$e?s&Os$=;p`~WcL5El9(b<<=|UMxPy`}_PsyGw&rT97CC{pE?3wZ
z`H{I@`h1tT^w)N4)E@}nq*e5ggvnqmtNdDEf$;0Aft@HsinU2@=zg0SCM)H1Rkv><
zQ15pE)YH9o!_)zwIzT)_g`QEL5Pm?tkR=ypPr8tpI9bErcH6?4v9WTYb5}zNMgri>
zBohj>7<DffRufv)6Oj1Yjc}r|YXn_+)nI(qy9X>ZRWA#nrJ#htsS4hMRrmBJ=dP=I
z-9|E85egjsfT~5ldL0J&R@J>g@CX_S0L=HdpCB2s0tW_(y@<$Qu<2wP0n?+Hhz#4Z
z>No)7=kYpdR$I`na+Q}$^!%ttD!}?|HmB_kK=9r$n4Jl~r9l4QJ&tigE~~0?!MzgB
zkb6)Th9!qgV5*&vHC2)|334qq4VGUUC;aw7ME=t8HC1cvSG@&uhQas~0ai&Q5uEF`
zK#g;a;0NLJNWj3~6X?Vae|85WLEiy<M&YuQHLIVVq}Yk+Nt`P?BV9<9UiWHgC`5^S
z-)}8cyX{<b;=~)B@91>`!iW4er1E`YN$SqkV26HD!?Py1B}7(>;i(-_og3j-!~d<j
z&4A4eL%ziP?=Z0x`bK656qWPVEaNP`1<DM#_K<r7*S#`3iGmscByY4~N$hJKQSf;B
z)NaFCZ9swA+l~o_fI$zJ8Q0+^3!y5xE`-tBpGy2yM>>9PRLkh$fPmchAJV3Snb2Yi
ze|dS4556Dtb*ifzx<7-+J3U2g6!QKqrWs~)!o@W%ei7M-iG;3I9K$e3;g0g3pakk2
z6NAX=CQMeC<a3Avs@nt2@Rm)!xC*~^djWi|34mjZpcBSdtGjFuK_TdXpt(B-0oG|t
z2HD!8c1}eCM{iTluLU&)KYIX?0e8nxunvf&DE9WYH!-AA6q$GvS16ojT{m!7)H>AM
zoes4K!?K>LPKMsE#U5@y^e?k3AzB3=v(dczz@$=?B{cY3qFab~^YBWq18H&z69z&P
zC@fzG$0S)5HXE6Fg~xMD`v6Ysi5<J^;<d^!LBWF_n~kE%BC@vMl`!No)U(Se=u-Hq
zL3QXlG9M~&opTn?GD@Sw*v$nxbarN+(03fFqQlO#8a%=ag;Hl(H^V5<o&a^*y#jcl
zX?PVgus6TB)3-jTH7t(BDOh=E7Gyiwpp|e^n>1t<@3C1{nrSMiOs;weS=laPfwXp-
zynQsj7!t@&=;+uETZA_XV=n*$oP5~TVg?iiqEPh~88|`$xgTaRH|+5O_s`SREpiy<
zyR!ho@|$FSf=ZSv9ocN;V_B&v@HEhQ4ZXO^x9j_A)s~iF?FBe9>-*1yK>=d{g(0Ae
zKr?%*L5~t;m&Nn~P<$|IB0H((;bxJzG^l9ZEZFf0@T;HZ-b6uSg@K`+D2R6!Sx?l5
zzo&a0U`IKM+Ebb1(C)Sc_ze;Zzk31lUZWi?*pMY!A$+pPlORk%zAcWS!7)MQseR}N
zCxgbm&#^Qz7se~hlJjcSu`T1s6X^N#10Jca0QsM+%@+sIL*%-#p|veUJ*zBCMv*TM
z8yBoWP=gh;ZmCV2oyUHFXQ#Axv$iYkT`-p8APbF8!eymGn57iElW?;HRuc$#;9#3M
zFP`!3nlH><^3B1LQqi^Au)M_IllTb`)?#O{@8Y##e?l2iIqeY>sICH8GLPx+V=8V1
zJA{?X7|<E)oC3t|giQMKT{P422%ol~c0$F`7rwpgl1+=6k2+6JGgX0(w<@$aci8+$
zlJWYd6V+aU(2M{kouDgX$TK;pt5|w`4V9E4otSz&_|{%yYcEl-iAzIre0*r8@=!^T
z<QMAmsVQSNR`ZH!$(dq)UJL68dIUy<AN%GR>rwT>xg9|*^o;SA7QeR#YPk!JP3{7w
z^2>*hI0yTAlQn9^Dm9DU%$xkTC0w&AnaCvWOa9j8PYmh{*J`+wWBZRbRr*69gMn!6
zF_-QXE?;Y?(Qv0X+P(dx`x#}GTW1d@IuiM6o@z8B#$zm~)spYwVQ}1$Nk=?0{eRl3
zeoPe0{JfrZ<;#Oxyqo;HNNI)u`CYeuL4J-F76e#6jm=&E``Ilw`;&qsj@I#3e+q@k
z8V_z6TF*b)Gl?}Ip{Ey1?g!Kws<}}9kQH?1rptSH%V49y(BE@`Jg(_RSeAz=-#0@e
z2CDmyav-YzEODs~vQiilEKDWgVOGobR_!pZn(x~6X&rD2@Z*CfvQIzDIKmZ8w~r6%
z-rDk>5+)PEQTOlpnWQv-WkOl51#}-itT2F@yU@Nb2_?XcCrMczsp_iat)r)-U}~6V
z{<Y(TQnSRk4v^(~VVA=6RTQMXChyjM(ztq4Hji7^Lz8P40J&d?>?)p$t!)9<ZlGtY
z_jz(NDV4x^Lvh)IWEbo@Rnk4->|pr@7(5A}PMa|0nKP^oo)4njOhZ8UWv$*E9V7m?
zz0I9^%mZ}=<+jw^haeHO3wa1Z=j6c*Y<f>2vP^ozxIdk}d|INnKP#|Cx-3F-C)20V
zpd(*p8Oqw2ONoBugKt%g-H6hB`UI20SVp4MnyNzMF8EicJOx1tto-r!^*RmKI>j(z
z@|EIz*Rd%fPfsl&PPRXG5|6!harr<7y_rW3HPF99CmzPcfx`z}OE_?qfHAOx<k?LU
z*X^0Yf<Ymp#{NryK!;yunzisF%Z%mql$RYIMNLezuAD64)s(C4_`UPDEwJ=<XT38&
zlR32F3uw*$cTI8>xBJd$&RfKZ#%MgdT`Klz@|SZn`d374I1QfD9GDkm@A$FW1%KGO
zBN|)VCZ14EMTOL=FDO1wBJmm2$MDI`U&Yq?=Jutug$VQ&oD0{C;K`@D8t*#R`b5wr
zKVzye_i<U8Soaj$|3m&*{<C2{H1uEXVOg9cwzUASCd+~zjx7a2q-8Hcgx--)1ET4n
z$w6v_%j#oUhSmgM-s?)#jm#a|F{?Q$Qa4OXHHGK;gr%~~jkoFWG4v)?gXLYbwp&|!
zOl21Epv!l;ABjZm)!nUGz~ob{PUD(J$TC4^oKD4wu|N6jTNqJ?om`FfOkhboU3Hip
z#@g?OTK^D~F1pw1!A75jBACosaBi-I`f}$Y!WzW3@bCPzsZem{Bl;aCUv&fP3iaN|
zn3wS`eB{O2Uvp&AG~Y|U^&0l_te(__PvLD^XC0-@?TpV}MJv{6X|frb$o5w!W~s)Y
zs|@|?9Hrg*mMpgur>|f&h39rDX1)vL9b^~9?ttvMWp}RL8vtspcXOt9*yzv-#;^Fj
z?uhM6e=`LzjS_+6J_{VW>RS{8YB4n9Uo2~D1p1_C4f3{QjD5hUH-h^Ylt7A-7WHN-
z``&C(-UeDSS9FjmW@tfK0G)5|EtDIEYUO6C=y|Y)=9}^RSV0?ff9(wy&zQXX*Q#Gp
zVv~cK-Pj@H<!{>KRt7d_#kuh?2{Z_76iJVD_*9IXQ=&Ic{rH=>e525pEeUcOUtiJI
z!`T1|3)nTpqRo!_wM##y{#qK}k>yMEXKjWD<Jj9ptewiKOPqqftOCWtxav49X&aYl
zZt>5}{%>kqkiLv*6j4@B4`?S#JearP?~4GU%PA@7mA@wS2nEic^5&d=Z~tJYN0E#j
zE`PI!5*Q=1);)cH5ocLV>tNSawm=h5GyhBlG+lM}l+W(s;!86PVX2G)h0@#3!Rx+y
z<Dn&dQjl}lvExSB|7PqO$-`DgIl=*~u?TISQr=_-{~VLNJ^pDnZMwl%&$pNd^V6V(
zd{D_n59+R#kuih64>V6=l33U9deKU!bLc%J9E*oz@q)>Dir@k?VaKu~kl6dxcUDBH
zYFZ7nABY=LZ1i;Nhgk~WKt4V^v{d-7gkkMt)J7W0=w~B}1a7c~+<&Nq`y=!h6K@ae
zBj(Y7l8uL-vkY3I52xu+XExPJjNjnv!N$n=?i)(yILy82dE?E$nBw9i{gY<huv=Gw
z`U2qrz$qq{w0!}t9P=_`dEhn7WM6}gp|bb6*@!pI|LZ3&BO@<Ch-Zt4X~X=dcgc2J
zm))*420AUWQuYm?CSj-^%Z_EU!eOSaq59QF3yJj*_<+xQ?2UyKsIg$~eP~2btuHG5
zV2WRf#q0{!$y6rnbvXxmU9lISP%sf?(8M^D2pok&yB-i;ydfTFZzte<(KzR?<Baso
zzZko14Et>9ff9`2*h91xh{<faTX4CiL@T5}(2joo`DUV7sqJ-29`1yROhjy*)_MI`
zx{Bc--`w`&Gg8g<8w1Sf%bV#1R-Acl69QEY<dZNZT>vG@^*2q1r+}pc(XUKkb_i2B
zd58Xts%anHcD6B{oe6f7|B$4qYOpp@m{qR=iAQvt=`k4(k$9DhefaY^B{ry2p!WIl
z!0E*gex~xio|NQu=_nld1o1U>P&Zv>uNuVe8OHi~3dRpRvj>)WB5Gwor`@14cRszw
zI0{Zh5|S7(DV4t85{3<sJks-Wpu!N12;=l<bb0ldWde9bFeW|+guH|LYMyd~-S_Mv
zhIVk`uviXtQD!zB2%Mwd=(d}{4cK;o;)W*)1`xGw<l&*Rk}3;|JiSlz!c1`avc+#a
zStHk@H6xS+hg!^plO#wtQnlT6U?)64m$0BYiu*ty)2|xtQV5E-mi;jYi%hKU?Mxp;
z<CT%pZKr^O2NENCohoo_5UA4PAY5q2Zi3J2DTc0lrSCtaqh&ozQ$A>jI^uO<XgYZ0
zH1vJ|FPEHubZWZY27VkN)V{-?6Drf8m9WTOFXG3zgejQAAX|lc0w7?U%!980GT4dm
zbA4Yl10YJ)_@TC*Xb|Uq=S&6U>b>Z!6dgUwq*!Rkcd;{GJ>ghX{m~`%j@|X4E*Q&)
zcw)IP;4e}8M^TTlYWyeKb<Hu^i_3PiR7{gyD%u937-)_L#a#Y5)7-_TtZEKP5}L+X
zD`Do0)j6>=5D;~pO?||Lya&|Ud|^5xf)EWO{7PuvG)<~1BM)FT7)PUG4Q{O%Ox)Ck
z?#n4qM&f{hXixnK^=}RV$`MjvK&sw@LX|yfaKfZL)qm<#l`Grl5K{mho_-T}W+TU>
z3NP({!ZC~E*2B5-GB>f>5$BJ+zWz6HiFRY?@-7@vI$ev#5nX?%5NaEVIu==mrS%jf
z9%8?_sFUm1oT~eGgk$1bvdZ8{^;fQ&|327#TdE^w=@~|sFy88GKO_gpnSYM35kWC>
z;s!BrI>A+}-~G^8PR&v<$s`u{GJQffnwyPOQFT`{2s0yo2Fw<K%V<xhdec#cqK5@>
zS+e5bqKS4wgN6>5O=E|q_DnD}<OU|KV3TEQSvcPe#z8e0yrJUuc;@)TwedZMM6+j;
zp@xp8boAKBH`u>wZ+psL&{R58SE9Bh{Y4T*APee<gSia(@e2#q$v}dIV(NG(HNL+U
zPab~TVU<dRQ-WGr)Ejcw7mY&~&Z&RX%8|cb)(+D~1?n$r{p@5(s6p}daaSp1)PIkU
zO`>U-(pm6Klq?ht6o|1Tl20?KXUh+;ETAfOf)4>da0wqfxxCg;(d^bVmFCH#rKtg^
z4L>{3x#*4Iqw>kmD?*aj1bsV@(Ko#>eI&!Mr1;daAH>Mh7ph{$;<*V~9&#?p$1lFu
zW?aNF=SriKQwN>*_)0VSJ<$PZ$%swnW|*CmNtY&HoHISiVsn&My>`eeuw-vjh7Xvj
zP?Q@ce41C$iu#g>q0g?&StV$-+@_vN@o$&pzGhJ_knC-ow~upYK%)#Mi`1sV2@hGg
zN;5n!VD(z^O;*!F7(ra)Ln+p9e_G^(1p@DE90o$DPA)Dt8g6t4$yA>vM^R*}{Miw|
zWhWLPMawuPcE_B>uqtazwLNhxx<)G<{VlZ>&ILHqY1#2~{BoQV=a+|lwFrrA*nb=H
zfoaNKblCdgD)VVxf=RVUpet*J&enGC!>)uk{-sAh=+gM0vqQ7eQP&Ed=nN;&EZz^n
z<&6t_`iuKTsOL9Q#)a{|jJ{7cx)9}9@EJlb+SmmRh&<Z7w`xojA8fhcc!;E{7Dhwl
zz}i6ijgRU>OlMohP2`lh>QSLUchBfzJRkFf)sdC?{-gZ2n?+#IP<>UP%h7a<{*=G$
zqcu867OV6*aTI#JKu4CT0|Ioc7H`eMz6w3ObwW+2l((dZ?4ibHE?5(C6iaq@58gfi
zgY*K>$=3N9BvV*U!F@_$i0^~_<BJ!c`FK5%&+6>SY39~}pj-_%#5cQOb9nBlr_1s4
zKSR}m$S>^ODm}hp6-;tjon=*r#d%w_OQYZl{~>+)WfepKwByEg`Cbj<v7~X_Tp;{&
zHBle{q_u1p$^qCg&G))g05iln<bq=pmi|vR{s}f&uA?6)?`iM_k9D@Q+XIU7vyx{t
zX>9&_-KnRa*kA^fYsa_MaGwuPZ0XAPbt73FqabwtTF{)L{80V`eAJPTpFt=&IX_dK
zaL!cG6h^j_ZOy@}iGYOm5oe}LWb9`$^2GP`x_qMt67n<%a{mA5Fos2CYu!paPT}Ht
zstxdz{$|&_TmB|kaw?X-6P=Xgo)i^+-YJ-%E*uMzj+zO09S{}%NWy*{!HqLMlJ<CJ
z`j{HPhc!r>9aNBhsp4n&!p_p|7c6Gbum|T$s4?-+Zs#A%A5=mZ>|b}ic-W3jqHzEY
z8aomKQQ)aPxOFNt{&bLZc1klxZqaN26&{Y{gl3B2X>aipbV}Ts**9emBvg9ym;a(v
z+mqiNc8RB+%IgY{E7;A!T4_qxQ)ouNd3XKmKWjo<{Fi+cmd3QR+?oENzPFFPz19qV
z7viX@40ib0b-ufS!j_{X68oxeu3hq0v*_+?+k`aeu!(p7aHtHb%!c7YIh^~@6goZC
z-bPuSyn@%;wq^wryH<O|m5P0_aMobweo>~a$Epc;omj?mFtTBq?WB4do`J13=NkpZ
zs7V5iVEpb$_$?z)&Sq>^*c)jDd>uu1)?URo&q5=-Mg#JN#kw46oPSP-&2*|Ex<d}^
zXhE#&rk3PO@|Dg><|W2V%z-rFK~)!VHLpI}B0EoEx4CDAr5St%Wg(k;x2ayM_}X0_
z2V?d~vP4mL*y1|V?e(x$cO0FY$gMSkiRSZPTj)&M=*E}5I0Eu6mBr%vddafTcy_3)
zC$%knf-Kj4n8~SvmD<O7SoGgwc~yi($23rs6{c)b*k8R=6>59`fJRXfwm&W`PVrhG
zuQ~{@8^7%Rxr`23Y3OJxhH&=&5dfl|@1dN$RbBR5gG$kE09pd)%74rdz?Hk3gG#D0
z?J!G*-<uz2mV&UjpV%3Dh!iOH8;?>Hkue9T>@OPIvbJ&0uZ7=!-Yo|A8PqZIe9RzN
z-Tj}J_<v3oozWze-pf^oiIT((b=wl&%>@5aAW-l}rhjLnbM7k=OkEcSi+4Pd?}Jr;
zSc~?F#k!GyulgSu5qWNs;iaSYuq=VYUPeK4B@afsRJ#74+&>t9*|AXZo&dT!fXPxP
za6>$-O+yE616aq=p%_VkE$5*6SQfjSUjVwk@5|q^n-mdjf!glpVW1~1Zh$AHiU!^2
z>`NVJoVP(MBQiC~M;2U^iiLrx1%-1GyV)O_A5X8D=-busJ*rR8i|!Ib7)(?57_bSN
zO?_#-Hua7USYz}<v!IC)prg4sntjkdcz*ZmH&wUI6LG`C^;`lA?0>1SC+c{2^+sU<
z-)b}Iexh_$i|>vjBOH>cKpCrdA*Kjq*J1RC)kT&)ujgnS$hs>>I7AX~-3w&9qETCu
zK|*BtmfwRM1qoR$BFUb=O$WI<um2UUa?2XUkqtN;U{Dh6nqa(uZ>@#tV|*q50m21c
z!|1hDUFaAnP#-%Px@u?7(QAC2z81D-rRs8^4Had;Gr4fRS_21b&nzXx-q=+*LOm2W
z^D-<M?e9}60y?K%+XN<Z_`N>A$~kTk*T0x{?F*uc-3z3m`D>xSaGJK{vu~L*|BM2v
z4_{}xF%aD;I&tlbID&ix6>kOu1hRl4Jc+^=w7_2yG+bQ;94U~<f$A7|;xYDXU+go;
zt$OU#?b$WpQtE`_?ZusqkWtL_rBsE$-T5U4ZM#^g(~QldT2Vy)Tjl$IO`hDY&{bvO
zbhi3y16cyd1_YYk9U1g+*?D^-Xmo(YbPaZBBG7h>oECAggIZ=89AMXHZM(LldM^}R
z57h=IvhKE5*S=pu87~2&M+L4WpM%2SCHUuyFTqzqrvn?^wPuD3EDd3z6hUePrjyKd
z(=itn1xa7u-n4$?#dDzRpG~|!=0&N7`k9uJgWCF|)^9?3T`+R%Sl*F7A@2J;s#>Qr
z?_7jH7B)i9JApar%aK(&x<I;*K>F}sz>@h^9?S<G9c%{-4>oOo;8{Y&L9yR(fl2dt
zIF^-a6t7(O!4>Pk0+=>A+QpEUw*^Tu2Dd>Z1+g_`K^D8620p4Xxt75fK*RmUn?{9l
zQxlJ6&@1BFLPjN*$~h+vT$oT<>>mYMIyNeN)L$1{^tA?Wjdxqr|FQP&4@uwe`#5Gr
zM_8w&dvUOAv(?J9wSkIguIx1F++Jp4+2%T_cov1HX60%OG*@;Yup?PhYRlA8(OIIo
ziG@i`3kwX9JaJHX3haB+>-!&k-oI@I`aC=ykNdu_`@XJ=xTJ$NZG-CwL@fJ4uu^w}
zS<{cvQ75KTZg1IB>3j%pF=g2Y4Ae-Ni=05D9-|G~G{w9tg2E`U6qlVFsKw!vn++n-
zD|$(v+n4_vNxllgNv{UfO6ARm2tNM29Yd<gN^^<qm8<E-YrxVma<AUC#aU=8&F*~h
zv$BwT#Tsa_<K0U%<#a}}byT0r_uJr_4BB<)h~hBbV2!gqU$T21tfPYK+$!KaIAuC&
z#l}`}8T@$P!01?CmZk%NbfD}OmnpV!y(=v!ep-ezS|oeZuJd_aw)H)%J%(QJ>mHG#
z7F;*P5!72Su>@s>N@ERXT7mYNg+%|0(T)u;UY>cf{59f;iW8k1lH1-EFNl&snT_lu
z%(oTs>5!0w@x{@Q?(5H9)dv0$PG`KM!BC63JN-KDtR345R>x%3=9m3`dV96}jUaml
zD1jo;%+9O55EidH;z7JzWgiiaC<USNRm~s;41SpHy~IE6Q{*?;I`=%jSXn-0X%T9M
z{H!@~lf_I9<1^yxaaA;<U*jl}Xv;qSQbDD^?T#UkB@v59xnbJ5pn@-qC5+M%LB0UT
zM)!V@Uqb7)q~$4<6WKa`{*9G_=<xCly@UBJj_e^Q2>Act?+$fcR;<np67sQ|*h=Wd
zNR3!LXf~i7nT*5y+V!4;?4G!h9(Ek|59Tu*vsl;nS^G3mb#vQfb}FgF$mWf+7%zt$
zhkgE|-gpGyST*CJJ^x70{*OYMFbxxj!ILOFYJU!nbKoYj8=#3AT`{v0O?RFxwojdA
zOr&Z$%sqre>=%AHnHJ5*E)j*CPv?Vr3nD#t9q;u^ch7{CE!e7{I0A+{tiha4czGQx
zgV#i=A^yZ;QYd{4LW*8V)k?h+m=7|dHcF(eD5O85^Weybs^>9gMqIhy5HB&K53@PY
z-2Zvj*UGxrF4Eb>>9b=@g(eb6q|A~pisPkG`!F|vBNLsQ5V|@h$*)i>%}xr@V9$8L
zjf8lwVK~VEy&G}6OlI{6lnllU%p9e=bTdAFMP{=nX!NU3m46FeXGXz)UGXxQIXrdV
z$`>*F@x3igRBaNJbYI$FquQH)Ok_Y)+irFjMCe3viEq(mus!HsH(z}}W0ca?ewDV?
zPncKlzG$nYH}-2XEQ|Y}ZN`P_#Yz52Zr&ZS{K;5il`PIR5K#KnfW)F6a-LsI#CG69
z2SonKYGqO7#6%a>%H`Swpc5E<G<)=D${AY&03WaP=}SK9!YtN)Rtq0N^<L49RMf~w
zZs)}aQ~U8W3-ky-f<3s~=G=3m!K@1!el+v-c>)iYso0z}lj(9x=Pm;GlffaFJbZlI
zL*JiB@xaU|RC+c|&d~BW{a`Nk>b|qi_zA@3@=L(>o4Q&6w(i5!ps|J)vq5x*1?j8f
zyT>5FW~U4X3q`n0jdWsem#kW`CDM2RzzGlwAB@|#CYoCnl*`YgJ=DfkGOhzngS*;Q
zJKJafi91I#@pvO5;YavbUQd=Oa`A%Q&~9Xkj`h_f^UpQmCQl`<koosyp|f&}inbnc
zEc{cNEHBaM6_uMf7{!KXem)=O$%3CrO+g~yUK<*SwOIGS#WsX7^nT;dVBdp|$?TqI
z*fT&;221e(ecL%^1-pXm{nb6=xNK(NkDKOu50fLP=21_*@}~TgqyvZnWvY^WU~A7#
ztkdz5XpF;Vn6n=m><9ul&p7^<8cwB&zk<mNWoSSxXv}LsW4~*JxFxL@K*)EbcATFN
z>hWfRwughIv5mA$=r}_VI{FzXslizj_;Lp+Xa5YdM?;I(oEGiK7&~^+yZb!A06o_u
z09$Y;<(wNMkaVJzZ5j3~T!udCL4oQBGJEq??<#GaJKe$Ru*~}{h5_w9`}*g8JRV6n
z<D(4HvAE$y7?^LB!7Ev2wA=67ksFaaMm-_qP<n7zL9;!H^~>A<sNPq)W}7NkC)QmJ
z;>C$FwFEOQM6m_>0;&ZUl@Wcv`ob_9Ql$3uCP!dy^8#Ru5OzVXcMcK4n+3)ASyKr+
zPkn+k*iN~2ZszQq5ZX^eHZvM~(?U8Iu$GttK|yx5eQeQ=;By+fsv0#L<ac3Y?zAh!
zp{Cc5N^nAMEgc_~+Lkf&ICx``6pr@oqxF4(+_-pJcn~_HXGd1BT4g?Nh3TZLe~vXM
zqS>Z)9KAd%g&>P_Wc~~U&d@YIXGF>C8BWW=v)au;7=JjwL8`W5`t-`6Sl+lLXhLSc
zpL|owKn{!y8k)b5!QVC$?+veP+Q84}rFeSVl0w`omPcqRZIc`Ie5_8sDUO!RE8@$)
zOoEsM=-Zb!2{ACVJuXZN6g#W?ldzCjoqcl;O;?2F3gbLMw_J$o^0s{-hZJzxP~*LQ
zUth0vF9@8Gu90klPTRq#z)xY{?w<6JqcFzKh#8};Y)fu%aFUg!!7Xx_;<h9$6i2Y~
z^nBUlqy7wRknV!Wg#dT|c)SQp8R`o(DTwe442eq!0bFvveZn(XmC~w{#d&#hA0kUH
z(6Z`@rp+4dR^Z8Y{G5QL^aYaCISm9PZ1Wo{vWI>f_h{241?f_4ov2ZAgB|-d_QjO{
zGK?_O^4m(qmOLd5>rSO)B8_w5>6o3revjWP!povYC%QLLQBu~sHxR8&Uw*Ucm>>kB
z;lsRTnml`F#FTqn_AZ-q^Z$`(seADaT13D&zdKG4!C{}maOwX33=gNMHnTqX*MBj8
zA8;hxSM3_lVJO6pG*pFz_#koZ%s`mfwmd()0Br5;G(Saq?#4Cojyldg@C|>FPU@Lq
zDk|(q8?s20rpQ&!eK;&PnO`+FV0SRCuL6>~^C2cBxW<9!T89MDHN$W>N5;6!vlrv1
z+focl+FkRIJfTg{ud>;WIMVQjZy#xlb~?=MVI@XHg;--Y!fwC5m(|h&!l14x^J#0+
zT-zVdlvXCdGTTg6iMxpcgOgh)F1X=qe9FC4yA=;@Ihgt2uG$FR6gF<28L+w(;()!{
z9?)YR3)%s)p#Nh{FOw~RT`JNkVY~cO=G%M_GMZwfCYs*t8q*Of;fo+X1t<o}KJXF;
znZF|&5vVR4$V4K!d&hjOfhqmI@KqumeSXFHK;ZO*qxR-D41CZjg^k?1z1UKD%MJ2=
zd;c@1OD;WU-W4WnWbTBIOP6J(gO=@qj!9*+U&3dBC4;%~Wx$0s*~cFrEWk~;=elue
z$DP6F2j)J6U)vLC*PXg{0!#~_ZUN)7vbiuXWS6@+5yrE7A0YcGyt{owY4!xcNX56y
z_Fi{n%QbeBoUD_*xp3`NRh7arB<Ip<`#ZwWP+qK=tn0F)10FoYn(XAjOwv=YJHvq}
z$|dW9&m5fO3lX$No;zTLVKq1z?m_k`ZFe<3Q2R-Y<_5)%kimKSFjNMvD&il=ytNd(
zPQi>;=V(@4+o!f5t!P-~YkI;~P&E{rpj6&*<P$D4-D2gs&v#dgO?p5Fm+ru~Iz0k$
zO`JePh*RfF!cJYEhk)I|>@$z2gG~Wk;h`PV;o*pz4<OMpRo@1;dP1(~s!N#dwS)5R
z{`OHDB=O4@yf8cWtS8mNFi}Lw&Rd@@3Us$y6l9IEaOV|t;eaD$K5-rSY@mj`SYIe`
zO_9PaO~OOO97qbmtCYfFY*iC}uR(p`DG2o<hMVJk%PEGU+yVgct1Y93wo~Nir<lV~
zw%kVc6qEDag(FQX)gpK-c@>d@GfmJPGC=NT&(tfJrY=5vbaDst5SLth`5+A@PxtoV
zY;r;>z`@;V-h%6qdB*Wm>oTJAgsGJG3}UsWP;p0hJyK%mLf2eZyQWHxQhXz1(aDgx
zDo4<rr$m*GY2cU!U|kTN8Bc8r7QK?SrEG^9Djk5*4V7?G!o*cpEa{xV0G*KwOa9b=
zHmETZ_DkofDQR%<fl&N3!~s75iP>_-g6lWHD99Q1C+P4zNTk{`#~kdfdGLA-`)uJc
z;>OD!4!;+O=$-WC@738LEibRsbali^D@{!YYcIM!7Ha&t((V-NWY5Y%M|Z<ftm!3I
zlC>#{;Fmg^x&M>A?s5ovPT4L<Yw1iKX!!>}UJTD6krrUl+%ed=LG2~uoX1J9mH>90
zk4YVBXBjL_i4^nDX;58VaNR`0C?e|W?4tx{kO&4locG#Y#dUL(n-z_fVoQKppf23;
zzWu$2yHtg}DOZw2ji~I0hpzs5OqT_8&y+VX6!~EoVfnr9V;H{ZLPU&gHrK-f{J9O$
ztx`K4x;}J6$v|CADp`!>zY2)S;vW_Naj3*Ki2EXH#ths`ou@9h-kI5KXub+QVukA=
zw7^32`UjUuq_6PD==oNPCyi4I@k?d?xf1x(X^=#!g|R+2Rs^ID4KZFi#W&wq!W`fc
z&~em=qbZa=EU9~otCB(uiIC>e%Fsi5dy{!=meAsD(T-_jZxXg`K9pc3r*n?IePADl
z;*lG&J%xPUo%VniTip|PMRNyV`~XC9waz-|1gUNgTuQ`HHIk8!LjPH@Hk_Cv=dJ{1
zr<1$C3YEzuimQ&S-*;@qV*Ggn?mn0q!qa{&7|e?G#7vC(57#NgdE0C3j(_GK?lWB_
z^}t?glq}K(5pdU@w%F>#DtmBkek+P13{;gqsVT!N5h!tA&#Z2pfRFaih`v(n183-@
zA7%bgt~H*PY}J(xwMF=^U@7^TfuRjtpe_f@*2L$X;TS3Xnf01NB@rKHwU>z6)KbeG
z=xm5BFVda`&JtY}(Z4Wj$@QsUy4pfFcf*N&WQ^}#z(}MevG=Dp;e#)+k4}orPtYHS
zzE!2N{nyWX3bL|mdH|cX3!*2x4Mi(BQ!B=^A2{i%!q2E}nCWelmiIW;pW^7-{HqUK
zQj7|d>C;C=KQ`O5@)UL0t!_kX!_b9;z5og?ki$H-%2MjJt&-A&(H3=0?;=Jd`qSOU
z?rnYurQYte1@iXdy>hN!12Ly%ND(B;Qxam=;30X;9x&yTL9#JB?|_c{XE>G2yzB|0
zFzQ9^P{to#%6W~b4%r-!Zc*wryz~Lb8y-}Wb%93@t${B&W&dR@nm$M+%*t&aAoL{C
z*qS_-6WgAaL&NqlpXtrS@i=TQzk5Qag08r_9d-PR$-Kw}0Gg?dm~WzS+`NNpdPL{V
z&3!X(9fIE`J<luNQ)WO6K(yi|w}pE6^!9hh-sd1oRE4`G;xGU~mEgK~1dG9H>h%U&
z{Itoq$$_Uczq+hldIU7Wc7Cy#5Qp^^T^b+8N3WZxqcQf`vS4X%u3Y^Da;bQYdpjTd
zcB+Bzm`Nzkf^Y$P=6#T48#;iB?O=7scHnIF=Af*&b&U|Hnd#=A4nfL)duS~4$$X<c
zw1q~S(i9*7J>pw1ya$$=P7j!!u_ioFpZE9m5=RMje1^>1{pflOZ|B`yVX>up@3!jq
zSr%;$0~}i2_3b-rZo^<$`A<z7xxlh1nxt1^MTz*}#x6-vQs!l7yFVZItdK#Mp7kc2
zA}456mF`$IMQedD35%-31)edj`~LK0Y|;fmbGQ`v?Y6Hz_mw%P&IEYj`n_$&99GBo
z?AW5*Jbq$;uB0h*-fywJV=v$;L6h~1B|4ZklTZ}SzX!x&rvtbC42rVm?i12ONQ11`
z@!hYB;n*h03vDBc!|a{6@Wa#7)Q8|PNbFxek=!A&N7OIecmfBuc6%()u21~DK~m`z
z=Pt?<v4KEQP3qbCH2)P;@D29bP5-<&ze|bD$y8|C!Xp5Cxb&@yY9HxIm!X!=rd#v|
zK=I?m(Y5TjQ_og7R>6He-`xuK2a`qt@n?@aqiaL~>V-0paOCE|7Dx7+oX4%wlyk))
zRCDmlxA&m-X>MD0?sL=~T!(?OlZ?ignodnVvIi~~M3lf{;*CMnjlWDKutgd3qQocZ
zuHSNgMf5R21Ql#$$qLfBfeV}GopV&nH{ow2^8-^L6^PXS{tVUxM3qWQcSf{0tUGng
zV{mftIm*yh6@Y-;qb|Vo;k5al1GybKse6~GN^eWtwajv7H%!)s$MVuVn!WF6!3%VB
z5sR;YD#eKmy8)e4i5NnsC=wp31vfP}u%U9oxJxhkjja62omov-i9|x+SN9MICjPZg
zvVV$%dqBz?(*#?Zo4wsH*EiJnuq`@l-KWY>P?}?(+MYs0a5<*JoT)ndip*<z8$JPc
zV!<=9SbEvJ&aX(!y|gxQ2^C7uN7n$fSl0YRJ4+DTltBPOnl%1kRFG_SS*iPSdWlBR
zcq5V06Em(^0cm@~5`d)0?I(-%Rwq}~y<eBt_HCG;@BlC%Cgk1h=lH!3ceh#Oq+?+@
z&zvrN#p%H-4{$OW67$VO7_9Dp^!-XPBeW0k^6SWo<)3fc44Uk-7y6mZJ~R$jc9!Ac
zec{jTf6v!L3h>QS3oVfRSDbxh5I^BA>+XkaGE;nMhcheZ|Efk%LDCKo=?SWww%AP_
z0YW6CMx`V>PE|_>?_p+fx7(07{+L^rxRK9J{J=bre&yBEa~exll`~wjm0wnv)Rld8
zPC?bwdV6zIk{gydo<a;D)qd{k{!9BO@a^L%L7<)#+r&_Q>ENV0%ep7g6_qB6LgnEj
zTg7~4KO%kiACRFPcOIs~&H`?t(O|g>=Umx@R}Q+=kV35GaGaO=$d*I9dw+M<hVdLM
z`!BR`2m6TCOCtcFiC(BkIJnHY*NGrDXyB_<5*u_qnn$*ul>r=SKW<2nqvMW={fIBZ
zfKavM8O)W2ZFKo{YXkczu9t*ppTnF5Fu~~3M)0DWoZ(=n(j(}KRqMH2<T<2YM;%O%
z@boq6q#)DxIYevt@L%O;4V_(F=JR_*mse}2#<l~hQf3AMqJBEWH{|iIxAaF#%3zmF
zy1jAGDSeu=<MEWpr@mINWqWcye}Uasw&24?>`nxXxZAIO=cxs-haca*;}TU<KOkUj
zV}_lDJDoL9bv)uO>DcfG0sF=o{QMSdymyPqx?xS#(9YuSj|p^CEwx!jZ*Qr>%So@;
zNWN0_tb!MMFc2CDr=G5vdt7cA7?Lx}vygzN;b_>MVH_QBYMq4n?EYq0lOWl**rN?0
zIj<7gY(gS3?ddny@`0=H+z#CvF7*S&LALN2!41kJ`iM@}PTufrg^CFxSJU7cEd#ro
z{&N68Dd?kw%*AnQ?>dRpvhCR*vdi?k4=(^plNp@gx=U4HKZ@*uH(CRXkH!%LI*wDH
zrQalUo)W2tvt?5KuLV6<l}fXmd(0X9+VVU9BC->3_@p(_ls*aoC-y%SK$wP{tx`Ys
zalv~Q&y8P`D!-4t&jN*1(W~^&aq<Mv8yKx`qG1`GkV)QG+Z|XH%BkDe!_6Df&PZ+1
zi`YCAdNHjqdoSC*<35}&C%+oe^Ql9MMH-k-rozR1@@ui;fg{x^3qPVwX~W0sC=Nzl
zR_CpA&x}NViJO8*)hrra<kmgB-n}eRl3*|{bF~qNv6IYwY$$B%vyhFO;dFIyfWZK(
zkV9Y4ld36FjX3k|LcrlNKRzQXgBMyK1*)BoBjLPfYW*4*uwa7$lmD?4R>X7QpLb+z
zb9y+>T#+~q?t$P*7I)JVD&0{o{f*#B1=IuO*I}teI>Uf&BQ~M<gg;9|AZ<R^Q*EXp
zc+-XJ_^lmG9sF*;H;DA`eu%=B=QlHv;-qSji?J6Bz$6{KONR7g*!#Xly>s`x?_JA3
zv>p+216WRW){dJ9^P+2QXcv2u9Z0M2dDbfU#0R^t5G;|#r@*EW&D`Zv{Cd}N*|0B)
z>(aNaK+cnD^Nsp%K}HDHigb$+k{pnfN>e1<NLHx|-v^jF*gKXSLZO9XBK!6_(&opY
zq;L>wXLXBS(Ox{i_5I@7U~b-M0k*dzwJ$>_!3rd0yZ&(g7AbHg5=O$dqC&OW4zu$;
zPv6U1p`>7{5<*_W-qZ78kdJEVF)?0_LYx%6X|1$4R&*)6Jw3)Ij)Rqzj$g8EbW^ri
z_4@d9r9Ci39x5cDXjXoUHki?#)@Ie*f!8GD<|!x6c&6PAcp+es*$)puQV96}%?6r0
zs3#`QyF5TA^(iC$b^W6k6vf`75e$l_!E8ojeh_@$3xL#`B$@S-RA=43;~I%O5i~W)
z@tlXC;B?1^_%2vYZuO)XtT_>ZiP(rLNeg^|nIF<S(7(RYE4E~aH|WLQo7|p!6#fK^
zgx5$NKN3Vcq5CB*Invw|I6GpBUX)?h0Pl0e_hqK9mHW2WK58;WypBD^f3*VdmCSQ{
z`a3(mrGF(qq;(WH8h-zEBAx19+sii@a!Hh~sPL?Te@t7*Bh1Nb++tK$YU}p4I((Ps
zoibAXQ{A_+bwc>&wbRokYB_HnZ<VBij%p*mxEC@aFz}t3S1|u5Msu^?hj*KRqZ$g;
zo}Vkha*VJGB#`4*=B#KeU+?Lo!mtD(bgu~?Mt_GoGlT51YxFn@J!{b&BF9FoQe>wp
zf(XUVhxX&Gj@_u?#aC`E@1cqa6hA89_!X)^538)=f4FnOWxuW<i@v+3=(s#O#G<3l
z+u(X5?t7CUO>c1CdvVS;O*39I2c%iyv9Q_uE(lx;Sox_O3VmnI$)m9<cdVy;6aRWH
z5sh(EQRZgR`_=T-QQWW&l5AkYT8`rZk6iFkXj4+COS;z3<s@8$4e)Nm+|%s+@r3;-
zh?krWUp-asHRJi>-4giQGknMoUGI4RMGDb>^3(?RAVMxbPkGb6=HQhddII;3HMvpb
zHzy`e#!5VzBJdO{0MCFL9D^2IBjnJ<1-;SdG~!3I-4?|z`WLezsftz>CVk~(4nNue
z6VWDTd4+{7fPr{e^h3A+LD<oy-^p7bGchE8RWW|wCwiBA@Odyoa3`b~j#3v9Si4#v
zp)oqv9g;8%oYXI3`Bd<tO+LL+bw|PE;&)yi^Q1ue{wDZRqCbAyX@>VvzotyW_#CMZ
z9LOhG73H!XTMD8ylWtpxAx#uLFP86`^w3^7I1zSjgI*@FjQ##+seQ!02Onlj%m{wv
zzjO_h(&H^G*jene^Aa=3mxHeo?ym@(J-Hhf9x0jl!_yT+lQ`m>S#J=if<#NM;+0B!
z<!6s_lT}svrp&RXa7k%BE%8tU6C%zsgn0t8NLxhSjVui>O|NfO06ci%rW`ddcyzC{
zT{B$op&$xKjkLhDvhCa-k_47_o3L+=GAP;<51qHNbP#`#l@HR(KWKn_HynOzh9E)+
zK9D|L%D(VbE(>CWxoieN)NnX=9&7dwU=`}SFv;z@N_xKMjmz=kcQBP?$G6}6S>K*Y
zG0RC+7VvyYJoH`tiT`3g!tNElVp;K_LeSK@z*}W-q=4)5Y&g=O5mBx!Awd;G=4O}&
zx?^RLuU9A~{U8haKH?U>GP{8KKF~@33djvR7Vm~KMq0S+fP+i={!DaUd4Q#*p&>ZG
z)RQLgA+Fj|2~g6YKMTl^jz@1Y2gG|t48~s~xu_?3JB$JBYX7?&suu>x0dBx<5j4k1
ze5~s=s-x?4*MGd~icbqbqEvn4<b*<TSUv4`XdbhXCD-S%D0(!(RSKM;j%kI75#c_i
z1mL15R=Jc{Q%&tB!=ZpU?u;Ygvsv8*>=aG+^R7w|jJ>>E%`mBo>W5HJvT(7unVrXS
zIT<?M1mp`&rsl3o()FYJ@B}V@)}4jnaOk7}(K$Qolw@v%07!(~g&G?i$D&u07(Q@Y
z@SiKuy#gd2fM98KCa5)x9sxU8#Bk>!5)qI}%YgJkYBgsIpe1C1hga~BL1X1)pt;Q+
z@?K?8#|NXB{(3J0tG>mK2aziCpr1>p6o~}fr|K)S{eeloItl6`5!06rFy%LAT@{HV
zb1HvDu=uY;KbQm2zB>b(2i@x$7?Fq^$GrJeImMtVG`!%h3VOhQjVNV(enn9EP-qNp
zh%UFG#UuEr<iqb7yK-h6V%@q^Fh86E#;YAD5|9sT-(0=hrDf7}ch2W>P#jN0&{s(`
zd0E(vNEgP8Mf+E`v?!#P$K+frfz?2&T7{eBt9NCUxkUspFya6@+8GZXdXAJA*VgV*
zRoOEk2sd{|d;(z-3r{@pPZ?Nc=oOJqHbb{5ek)Lr9?bGj2O1q-A|;0^yF2|Q)mJ!l
z1vH@)ZSbwYiT_vr1-<V%&U}fA=%Ag{&Bct!G3+=xSijdg*!yi`CfM<*cYOZE+)S6#
zY8CMs;z1ZsP>DhRRFb_vjmQSkQJB^@r|T=~qQ%3n$|s}^@N}i#!gN$8I{!CWsjoaE
zyB<SWY0GOvymOT@ndyd%87x9n-DG%c*^e~2Rs?;JPH(%7!ilHHD|AW~+GU(is*^Dq
zN3OzZ$}@t!uilB2IVPcq(Cpxf&y@s%mtfI&%`r0tNM)A-k>Hx-&U27NO|l1~X=J5}
z^n9nu5r8n4_LGMld2kNX0hwm1CG!9wXhm1U>5K;sSYy6^knZ5t{)=(!_<*kbMeoV6
z(<SX(V)BK1vK}}L=R+y(VB>UMM!AmXB+^~uKlRA)GAQGtBTofz=>nbN4IDGK)=3%k
zHGseZ;D<0whE4N(d%<)u2L6|}<TSK4Ad1ipL-XyZtJ*l*Gw%Q_j&CO}i;NCg_T!nH
z$ZPoyWTSTZ(r=D~a)blB@7}uD<B`l9`HpLwT~u8S%-#3UeNBK9f4VRvFy;1!f6h2k
zh(L#eWG*Q7pR%RA&EP_UFin3S^2mAPL>k2gYv+@N-HD^OH$pu%;kO_h&?2006u<#7
z?M?{`wh2@}<8fxoe*lkSK9}#UCk4#07|e3hyjy$n69Dik!f<dAh(d3_z2-mQjC_wy
zKKU<Z(YT1AR9`>hkqO&mZ6Hwq%5ImaZ|`jxcYF->@rnUQ<|#jvWi>l5;gRbHFIP%?
zU#km2dao7j&e+lczh{49uuQ;y8P+;D(X~r0WIkR36K6p35Jx!tt_Y+SP$tS5Q{2aE
z`U6P1`x%-5NS&cTAOVGNOim5%5$kuaowR5j_Arnjbd_YWs^W+TfLp+Eg;^M8!SKog
zm<d}QFg9`2dC9z`6V3<wEO_bw?Xz>p3fjs%+n7b+*-$nY@@@l!yrWz9EOTVy-3txv
zqo@`(!@;K^PnU~_55q}Sd~VpU>!v{=jf&xf2a!HZPI1(%4Ro-la-?Q3<DJ!tJDM*2
zK;%t-xOZ4G4(xIGwJAi7Gf(v)tB;(wf3XMjj?}uYj-9v8$&bh_9(s_KH9rl7eoAGz
zVGt-IxoG-;yzGA?1c=`?n6)}9*1Z%=w?dW=GDJbpXPVg!jhP*=kk-wI-Zy1T-dPrU
z;ZwK{E51uf3rHtEjFrX9%9lJ3bS1}@7x!f4;$GHxhS>-DAW_M-(c9Z)(zCta?WuJ*
zuUdN8y3TvsAIJ<$SP0M0^~j2q26=mGgLB6fFxjvWWo2VV+aSd^0j5EMpodUv-rfYU
zY0vSgu-pxbpfSBtO{#iVd%;<UfHo*BQs|PifelO@0y>CVx~tiRsi7U$$xCf~=u7N3
ziAq>@G$qJY1wi#R7zq&JJL+a+HU5si9nXvvlzv?L;lfK@qeQTk{>gNQ5joY!n4)$G
z+>g=Nm;YojQ{tiH!@!oDmg(tOljZB%ajiynjpEyGA&3HFJsRX&ggy9<QTRMKfW!LI
z2KmPLGj3$Dh3-x^PdOS3zRvXg!?7La7M<Fp-(E64^HazxXXeBP3CHxdm>D8mMhliV
zvZF;C==Bc;1YTtXoLV4>`5de~W4G9`?}<n~jzZEA0R4ZOwfsJ@*uv_{2o|RFjL74w
zsRR~(We$ehx@Xn_U)PiM>f*l)t{<}p#Ed9PH9<lFC<k>Qw@bRLI2J0()Jf~;t8KnY
z@X-N(tI*ZD9NJGB&qXAWkT6CRu%cU={}+$DHtwI1){p568Pl2x8e%?`cIE*`4HTo9
za@17$dSPi(JEeu@=A}(-X&6iv@-#Po1X9_jjs+Cx9_{EFnYX<tw*eyvYg;KyexHFE
z$!l7?Wzc8lcr>&hn8Sg%DJw$2a_nK1chK=a(FwRW_q5_j!1lYKmh;k%=MU7o$7fD7
zemAG6zDJkne%BM5C*0EN40D0*<rk;k!(s3HZ|C%2ecEHGi%f-v{8q?&CmF1#HC>h9
zmpIy@&&@rGAzyBm$Ar8U><?qIyrMW6ubNmb{Q>*uSiF*u2Oyw3JU!hs7)ansZUn^f
zlbcow?cHYGyp|*GF1orAQ-fp`uz8$rOhj^*CnlAEuA1&-zVpGif=#&Tvng1gMZ*{^
zVV(y#uLbvp-<^1b`}b*$3-$jnTY{Or&XX|cPSNBxz2~LEpFNd*U*C0QNGd*$qYu-i
z*7#$W*Av$@Q?%w@{`UPj5mTDhdH#z@A=GU|m96Fl@?p}g&>8F9X_LV@>NKVgm#iMa
zzqHNn)ch%^kE`5NRNoeXtqVYREZJY-U>X-q^T$drlVO*664^R07o7<7C&PBZY%HNv
zyhX1Po?fvMnuUur3s|CHi*eL>4-TSluHH~T+sITrfBlc(n>N4Zi79Qgh)^__Clro6
zyM4y>uBNb5tM~6D%y3K%61*iG%`&dj_yo<E?<#uP2g3w9wNxANGcUI<w1s$Q3KqlG
z(LyY*eu>2!m{uD7+I|-o-`Bb*mk}&`8y>+jH`mi5!UJ87A{rZvHXRv5k?4fYSuq++
zN*g99CJuXpv2940=NbtrJIPXmsG1|?vmH$Vq!%p>O@6#sT2pea!Eo@4;@MA1^&OQ&
ztGrasjK>oa58A$T%IMZ)A9BC?qHT7rb&MEb3CdaDmfQjlWFA;acDu*{=;`C~s5#=;
zp+0|Bo}sXNBr++*=Pb~WI@O|M&2&H&oY5G)A+MWNe|dE$Ttv&EBlqp}a?$Y$cj5z9
zv)t2NRGUln7UczX-W9xya|JV%eL`YQjFF-*$k5#E(T>PHH0{&2*basPQlPRV=mlHU
zHg`i8e=U_T(xRaTF7Eq5^>*D=eG|)W(`ubTiL_r9pKJMe^Xw@YRs$iH#zumS0i0Ev
z$DMGnqd)k=Wy91IPn*Sm4asZ=Ro8XlAf#lGuD*^70Izdi>#v=>QlZTl^Adn=$I$Mz
z0W+7Y^DQdp)Swulo65tEn(aUJWjx+`LM9G51f&Lg>*5+xU@B%fJUfOxBWXqEs#_<-
zDwu;l54s(tdw1pd>4m40KwdTp)3ny#kI#x&;jCSE5XfI%n*(s1BrxW#8TL~vv4FpQ
z3F!_{<X&$}kUs->D*M6dTl^^mV{pD;ghmUGIB;`L<+q5`@GfG$hsFmZ3P?4)AZMRu
zwV0o+FhFYw9p|aHhR9A1Vmvf=JQXo)lcJXSS>1^Q$i?ypgYfc#46jj*56~AYTqsf4
z*8r5vo-|~QCGhDJuqtxv$5$d`fDxjxce|8)s}D(3!_C$dZiFRNyZX;F14^nq2sP5%
zu%zc3zJk#4k*gSTVoG9*3_}75^N|aF1ouaazT@JN-&N>C@Z&L}>=8l9*dPo^?#cBv
z-01;$oxhe-MXEON4;XFp6PUme82n7#sFZr!p*0`;`&$C|(#h;!Kl$^Bq9?q{jx-8Q
z*4F$ZTqrp>>cDhorMdq<3|V`Tl^;&bL`}l2qe!|MF<2&oialNVk?)o!zc$W8eCtR9
zG3lEC1Rf}aL`YZ6AC+qHs&2kmywy+c(@Fdae(3Z_bJp$ubP5=X^3OK~#EK6KP3Xzq
zSR0%38tldWYhw9<ao)qAXJ{sue(*Git-L%dqCSo`oW+KR+ACkRe5sRgWqx#qXFpPE
z@u6jU8=hURKY%a>fipjOb$~GmsxFGogGwAv`|bNlT{=e!OoB!-^ZybgSdo0P^RoKc
zonPs2DTLd=TkMR+D~S*I*a(K^zpK=!Wl0zL;yfqo|D<(5apT*aVC!Alht#*b|3u28
zjntE&kr>aJG#|DnB;g^^k2F=ZWWhE^Mvx%lTVlGiZt!1BvfVA<bYQGVawCug!iUj<
zH3sC{ugwm+*L-vgW1+31%E@An_cMcEGoQ(rRu*=XMmWnhj(dg1QO$3Ec0roEk9512
zXBg~8b{qx;?&MT(U{0-Yd^MgE2o}>CAvy*uh%@T}-QSZX7@0e(%Ra8T4yD3y7$DYn
zWX?KzBV3-%<(#1EhHM;S*9{t7;%zi2$(l`cy5X--$Zg~>b>lq@@U9EUyvF6wTc-C1
zq?>hQ$H9m2#XTWRQ?3&st>jm%&vZE@_xT#O`@B)wlb!76T?+L6WdNA3`6|Vd=qv<0
z%+}Fe!boBhNJBy@4)Yx|rrRA^nd!ida0wY*_b;{`tUH7n=R+b&y9K2}u(<QGUScr~
znLaLaS+@Y3cM3-T^*iDChaP9BW9c`r{0(-nCvz>x@kjI4N5$rR&_C7BfPO*<W#>se
zT9H5P+9{^M0`<X8fa?Fncne_6{uj7`R<!?Wr9`8EpILUEqIarcI4;e3-{4r#gFu2$
zs<;kAFyR`wdHB=lbNJ<Vcdw<xk(YVuE$mGxSQ~_!%3}Y6N7Z{9^HgMs#wPBp*iwa_
zc7wV@U_xg?uz_&lU+e;6{H%Hbve%ilAKzGe@XC&IS7XA2@-Ovwfc_6${)^244h|>$
zrh*|i5)wRckLpwOR{o{hKs1gBRN1?r2+mY7OtJNv4ir~o5`q<whh720nrdh=d=)Hn
zUDq_M%g~tu1Mg+O20esU<GubSNL-zjr1Lr={Fnd=aB5d?U8OsK$C#<X-N|Nx#VL9Y
zU1|y3(uBv0*5A{JD7yP>a<<b)@+PuLq?Q)<4@O4v<?%pi9cgekkFA1FLkkI605BsI
zft&qWh$hq|XteiqKDh|Pw<no!EnM$<x#4~07@EYelwJMSd1+a98Wi;4U{-IhCLp<#
zAtmTBEq?;nvb6&y#NAMmOiW1bOE#Cy^#w-0W8=nFRDbn7#pRJh4H7pR6a@Vz>30tx
zyJ5Xp`qteB4?%63-Y}q2-na`9#rXMBE*Spktz$hg`&pLY=lAwL^))2aAkV5EGJtd|
zJ^aaY5Ynp~DGNVLdq@fZRa1*T63i5!l?k<M!LV3h^MD%0>LOdi`&tO|&#kDkqrm58
zgFPV4$wA$r%-~+X$)Ao2O!oc`+J=o#9>DwoEM6TQgkH6g_HgjL6M(CD#liDw$WJ{&
zyh+i6h50plZUv)ifYm@>NW*ckj0BLKDs_oTN&P!^z1jPQE^m*^6V*OIEVrKf`szUh
zVLc*x1?#<mN{*&Wl@exl){a{UIEkkiKM!ZPprxY}A8suYO`{O9{>A*VBn!s8;n7UL
zldM;J+xC;4bs5AZwXPe9&N>4?bJcKgf{`+&!HS#?&N3LE>k**vY=dH}hT4T@RNQI?
zdIY48WAlDku3#WhS!0%<j{?n_Ra^!9xZoN5k;tF_P$~uOI<t;0-QeOtbH&3Ow-Dxw
zktmc$TAQ3_v14wO%9w>4V2>zO?}B{1y-m>}a$2?GMh1Zm=4?oDv85Z@4|_xOO$<r$
zkS$KK$#gnH`a_LtHw{@V*|~q%GX|6r<-}1i@@shyK=<xnpi>1${PIR6LAXD~Jy-2R
z>W&j(H_(b*Q%!4<@Gr8Qgw$p&z8qfZ^2DsA^ISu-1rPCzc+s`wp(3Hqmbkdr*uTq1
z=SZ6qS4m@Yy<HylZ}}U435TIQXH8>VvXZL7(x%F};wZ;V`hJ2;Rnl{fLp4w2(j%%#
z)w&DPxcI!@{`L1j&*&>&D!TV1K_>}qqaA>0DDV`{_XUKcT>R4{AHl=+;Q*bt7wH;K
zcT=%}`*#|aeDS@L`CN8m(t!N6jtBNiGZpdGL7Lo+FQHCXuV4*z4MJELKfQQ}H`YK*
zevwG^q@8f<4-ZuyYClLnlYgA(*3xB-bqn<v#Az&p8O^0I_G2-UeeJa4OI!MIv=afi
z$r|2%EnhC)ApPFK{pv;We_)IJwffi$Rs$x^tFZEp4>f)=wc&kIV$yB}@J3ZmH-h+i
zj;}`(do=h34DgUvgf_8`;x@wYYEetMIQUvF)pjBPDAF9k;V}a4*tStNoR=l8<hbXz
z#oL-z@?!WI4aAd8Aoj_<rrbVI<_iA!P{5ZUurO8oc0|SW49ZtaMCW~83^vP`iG)1W
zGI+_p)`@ToF;#_oLp78)KmlJg+wUkhCOl@n4uhK`F)8gWy|PlTP=4YHHcL)Ry2?Mc
zpVMAH{v|AaNb6^7Byhf{UM~(EI=aFiml2qSdm)du&*+5HyD6Tmdb|GKjGolS*c<CH
zc`ETH*g#-D<=O)$BIwU$3swtMDrppt6z)!KZt*ZYCWt{a2v`*sYucwfbR84GYeMen
zLBLJz`MN|?1c|w&df9;ls9m|*i<8%Zp`1pfPG9m!N2ImU?rnB0$~};2m<Ez!uFYv%
zd7`0Nv2|*XyJ=QmQkF2smR*Oaip{+46gxda_HM)N(;)*5z@B;0GpmK@keA#9gpBF!
zLvm%}WB6$lU3s`WPblCDXXF;PVZ-*!I{sHTB5f|fHR^d|^@~hx8KZjjylBP9LbbGi
zQ%M}j+Ll$A*Nhb;+j5pv2f+*IIC~HBj@BtPJbrCb?PO|mLrd^^_sWnZWkA3#+tiJ~
zTe42<59Bi{u?FZhOjpv@Yq$R5YQm8m^5dgpn)`^zPsOLU3|+~EQZQQ#4D4;~sXaX+
zs)wP7zZUEHelqLV%fJWv2;N3EKr=rtrs#yjejOvt<fznvfwnI<uS|oU*qym%Z5FEy
zGfG_qhehZv54cq@ncMV_^W1PPjcwL+?4RYpCi5*dd-aag_P?b7<%z<h<$MXz5s=z;
z@K+bC$W;2D_6g;m_ZFR-$Ts37(JOhnP8XM9+f>l`s9SS}=w@ExH(*(W1EXoSa!bcW
zSQ?jF3euVahXX8HTs}Wp9|<j7s5S$?yYn-IaR=vO7hm^J>8C(D01sifhxq@7s!3w$
zUS**;!r2W?ELfuud!|pJ;h<rNaVxZHO+$)J737Y;uWV6QlHUy3??&E)^2WJmDk5+J
z<>K=T`7i>EEmU~6F&M@J@Q=~o(4o2G&-csW_)j&<6O!<~B2XC_2RSLgG(VfJ^cs%?
z&(gtwl!g2~|GgOYrvnbjEDj@z9M3XD-W=HXiA(UaRl9D!Y@4DSA5lG^(1>pw2oHsT
z{##Amn|iWbMve%W(@eiK?UUoOvg2L3K!{Y5#d~f4*#b^PGPtn?Y34CP>VP~RtF!(9
z7NgFJ`AbZCNBaB(t0OC~Mba8`f81=pH$TB<=b&+<*TR%i7K9_i>eKMN#%w2EGgyis
z@!?_GNg_f@s$TxFi;Q+)?^ht4&E8Lz_QQ$#L6~fFrPN{^usNDmFyiy!aVTYsGJ;6#
zx10HQ`W#OR@nMfx;(;Q51IvkkYJ;0m&9Tq>IN^zb8kshvkIlMJj8_2v^u^vS&E!p4
z7KIcX^@{S|f9$NOoji}=VC#YkmEP)+;H&d+q%erLO6OG1O`2TwEh8;M?$gCT*SCZa
zsj@%W_}B3QQV6-(WVUCJYILW5hDPX;$7vCMU^m;(k$vY9=0I(~7S35PpyCHYSWrl$
zdkw!{Mz4MYVEc@vhCERKUMaE?AoePjd=E(29>w3&Kuv)6XU;Ut|EuNNgiQpTM$Ka>
zZ*Y&L+HYd)FzTerwZ#fk2b!<8N?s|Qo)&u!Q{FX#?eYk2Y)^hIX3Bf5dL1OmZYm;u
zi*1(5o$nt|^bdsH<wx;1kQL$WmL8TcZSY4}D-|)m+w|g1Iuj|s99jN(m%Vb&c&3f(
z<>TWyrm+C^$j}sioi<<h{IJDjsK{9nn5>jo9m#xa6U{KJms(x~54AHDYWp}I*<||L
z9aaFC&qh}{5XIXc$)HELn(GaR=<*1v1U#<>O=i5&Ce_m(U~L0RA2LI-i92sSX9%bR
zp~z12e6`G#PaBh8be=?__h6!sB6M6wS5R(kMD1U9wbP}BUVx$K3gS4oVkay)X8T97
z)*_X_G#KDaaUv><dbkgm8Ap^b?f+o0+y;U#718&h<kYkMfLPFkY=dP6gaimh<W6;G
zZX~=bW=ZP4&Xbr5S1-X%?wE8tWZBk`#q+L&CV;Nbsi)t>9{;gmjIiYF)pd#F)-F4O
zI=B@uN%nRXd{y;2$USn++(5GG=BT-B>*whNtW-sh5bG-6?7Vva!<=|~8XZ(TA&s4d
zGdS64;H?~eX#2wn(PEHjNhEb6f@sImb>Qp)>0G`*DK_PbH-Qz_w;ch$KqVnM^v%!f
zGRVrxO-`hhRB<Ku0IrMgNbXxH9EU=w^XX4==%>ZYG=j229^D8a9o%ar>?}m+q(|+$
z&kJ%*kIuBY+J1XZ`sLQQfN0=R+K8ON&FUQCclK>%E_KCIyW48Bv+lf{7$^p<?Bw5n
z9smZaUhVQ70Awi$Uq5S*HB@g<RMKcmcT7)rAZ4v^P3LsH6nj7_Isb6Zp><82?NBj8
z+U5&~c3rZiKU3cp(Af{qI2V2g(3E4?$wO8i3pxYIUB74|y5R2)8%Elf84|1{F^tWm
zXsGZnLELEBF9$C>xY3Ae>oeDp(pxedIIfd&ySY9F7=MD<A8Ee|g6Fzhfx0e%f)Hz`
z8Ft_y%BrOMo^h}K>166W$oWy?5$HYmsNktCZ#>$0HxE%M(6B}BLi3Q2gTD#Z1r_%W
zSe!L^J2&1F(ZQo#WAawXY7cpQdW5#Nz)?FsPENwcbNs9<^%_z$6o~a1Vb;Vc2Bnlj
zNbO^fCw;j&!Rc}D0TYtT6NHaahMJ()XA&nsqvG{H$R4EU!gob+OlbrSvPwQYv~MBP
zd;DpygY(a+xnh$Q_bS5<7SWa9du<pd%<rPfin%gv>g~<OWeY><pez;G6ei1LmvCXt
z&s#tzgMMxp`c95RJ0@=pyAO}97kUnAXq?#IZ`}iDlM@@-fQYzaIA5RNN`RYQeJ1}s
zz17AK;2=$<+hAMtZDpY2`G<9O{%cuO+P|1t2VpGk0dnpkeiKV+!qRLc^;yd8?f30Z
zT#Z;9#n+pFAJ*Iji*#XJ*BZvi=TM@9jPx58V1K&G8-8ljt<l33kSP|wLJWiCKe|yQ
z*h*(a<e<vY1XQN|@hY@)2WRF}EY0r&EZ7lx{`FlxsoJgiNU++q-UQra!;3Koo@5`x
z7d6)b%r$<Wcn?{iCME+g5$;VqSWTBy**MrE#C+OX#$B`GO*bjo<%)JKc=J>ns=JTi
znOlUqj^g(<C$7kD^SktFL!r<TT;)?jP>#a$R$Z1XF%v6IqojO+$*j3f5QS|Ctuzg(
za#bXms<Zfy2QSi$^JDs1A~qUFAdHC4DORsk9)JIE<{Bhgto=;AO~_-%-J!M6`N`cy
z7s@x{UEr;>D($IIYrzs?NPZ1+S#=-l+wceQ;{s@Fh;xSX>NM)hRK2pdDG;brO<^Da
z1?O2kj>$B<TmBbka4o~=#_HgoYiW^R?ytS{fD1)Aql(IPd1@Kw#IM)!a8`E-*DBw%
zpA44PuHI>Mn3i;F<Hvfn5B6sB_%(oOGbZ9zo;rB08d?%ky}$^nnriSN!@gb1pf-|{
zn#6y=glBOtP{U*9j<ocUCI`;OdL<?o@*Q_`i;AxoTVS(D&o2*Vs^ZnEEgMd=N9w)e
z2LMBl4mcg!&$f7trt9^HHQid&s&)R00peoE=8{4y8%@Gc3A%DWHRW%{?~p3yopmge
zF%&ADb@mZLu0c`S!z&1vL}8NARYdxPYG?(3(cNYqi)Un8`X{U3&=Rv?2F}HVEF1f|
z5XxG}se0&E-|g<|B5|m?sAZX6>5a*2W5hvQx#REpOWX1uV!cF{k}Y1mIcgEZ(@P0w
z|3X4mstLTB-Gm}t0lo3`x<#6HQAhRsSJjuwlwjY3?-Cy#toJSjkF>s5BcdD(HWYS|
zY(gZE+U&A6?Wx+If{ar<K_yn!7tk~MS;sO*`uiVxU`QJDA{M=@A9a_w-}EUNC~69S
z-OqMiFBq)<1nh$%v9im9VDUN)c6AiRmr3wuPQ=sTTPj6!!RKw5`ayPFqV3Mgqg4HA
zPSxBFsCoC)e${=V%n0H?=<Hl!5~eX#5pl`Qr^L{dp`b0>X8g3w3@{R$7PBYm!5vH|
zuk_HBjNaxgYj1h%8k5k{<NZ2}bY?bLLP$Y7pMu&1=UqJA)gG2m^rv^-F^F&&B7>V_
zq&z;*3NjAxC)wwrj5=+pyu45lWhzqNRctahOpN8%n7uYHxb5=7jgMSIh;iq!drYEC
zkI}Yu@0V25Z-3OfAf#`qj|ll<IAR3_xICuRxta-|*n<Wt#gKFd=wv|}A4$YO|I{|l
z`d4AC3;?*z3pZB#OC_rVOmf<KcPeJI-f)TvgFf8JF6+}}Ft-y>s!>T>`IoAQ0cORf
z#C3m1o&pXZvhK0;Ir=fiVrVyJ4DmD3M10vQBAjA_D=R@4qISJ|kj2~<kf)YZQ8o9U
zM$1$%M!kiicl-zsd-V=xbh2DU$kKHiv*LoDckQWTKL3g3GYzW~#$DDB2#Cc-*jKjn
zJf-N$NRg;Uw5|yo;RlD7z*9c=YPoFTG8p`+o%(C6bkj(#bw+9rsNrgqbx-pPE`Z;O
ztS8N93y>kYP!lvEgP(68(xvSu5vKp2c|vEf!;R?I!9DXkG+f8duS%+CDkO|(26^jB
zL!L@lG0AowM#5mZ{EPWKM6dE9X*x87SgC|rzw;IuLSWkajS&!~UO5iEI1{RCk0I5>
zpl>n^LXt!Y6JxcAYrE(UtUii-kv`CjI+_1JP4Tb4A@u~pcRevgCytsU-zL=QPaXW&
z9`MoAg{Ab9hL%wRhBI!mtdjUbayLHsEj%P88a86J5Jrbu1~YnMg{QI~K=^sP5l|kL
z4L2<@StSO?oubzlU_EiKR04?c06$$t&$lURBO&LxGf?fwkTVfEUwmeVti1MQg-p6M
zyUZDyt5j2a%xJPoukZWu5G3S{rs)V%pms1HoYB{}Va*zeiZ|AF;D5cN6>!QJq!#t}
zUZ?RkPf~3rg}`PT$%`MjGLF!%M2+MV0en{56e8`9u2WPxhyml&o&RFqO$x6JGw|zP
z(y&Iw-Bw7khSe~P#4I_UsVS5*frYSF*kJ?~%F$1D5d#tC)|D#Y5MGFwj;bvaS4b&(
zAZoO+oxydo<6&@rDMT5welIau?IYWlj3)Wn#(wJ#f`@IekRd5*<nCV+;&NvY2W6#W
z%nSd3cEIg)=e;lXZpq6n8iHiSY-bZjf4e>j<|5V|Vr)F~BvwU-?*)lug0dgpI@kEP
za=_IKWzAVJ?BM_-lqC6N>nET1fKkRza+N2XWH2J4BJAAi8r5@cKDz%Qdz;_?b5W2O
zh3Y&<$$Spgc@Oh2v@ar1+zZHGCz>376Q}2|lb2&RS#+XCHTf6v(wv-_5tV1t3Qle9
zN}J`KxNOYE9#cwe7?=$z9WxIG@M~tIed*vLD!|nzu4a!mt<5s=;w(CqidXj<kt94(
zKbur94}H%;n7RgM_#R)~D`Xu8Vf@7jObkqaD^erZ#aVsz%+jHHPr4)74g(0q%*GZr
z=8^z$%1nwkT{5?P3yLsrfuv<6*MSt5mT+b1uqpZpW`jyrsgm@{H4#9xOb}b31_sg5
z4US2G+|ue%sO5w24VdQJ$+ga0cn#<)j)3{B)Ysr78{r)?QF{o2)`9x>k5a_dG+d3S
zB<9C*h%W$J^mD*j8OSW`JwGD`bU;=h6991Ttb?Az%-twp!+znA?$Bh4H=C|IIFOl;
zZiCjTE%^1lF+3dnkRaNf<W3j4xGn~CO%p&eBqZ{wkAqvXEb^m@^)ogvc?Q?O#?AX}
zm)8Am<fnUIq%ApJHA=uHn4Dx?8H^di`qeDjVjUYBaAr7Dulxk;hBrzXy?7#u<Tm+5
zero+V9}$Vg^fL!sFb5daZZ3iJ9TAr$c>I(&@B-D@U`+-et=QO%%^d)Gp)sQ@mi$+2
z4zwZns%6oB%8CS!GkdK=&a9n<KSM%bxO)KaPG>&i(jD=&hrVmvSL{mu<(k4S<AAs$
zj;@<`>*P9auuLa|QJ82KAaV|-eH!`G1<}`L#MvqO7u<@Py?b92%*d5T2e7q?nFebb
zb=B_zz)Q7TzsVsh`L7#=mOdo<T_t=O;=qv&@OWgite^?dhD6JXy}NjwPiPSHIFA<v
z5_H|L>x8Cmer<r`(3<H`=ar*p&)g&O!JW(bJJv_ANyO?3TrIi;mkw<scmm2TJzToP
z2W6>56;C}znNs_#E;v+kf_zmkQtj9%oj4(?^Qi<eBryMG&%JtQ_$q8*<_NTAc1&{Z
z#;wmPIoRWU2-(C(6q?Az%o`_8LSwZ%3yBaW8yfVHYcIli3XcVnYU&_1D&1Q~KdCSo
zcCWnv@>0+$cHK_7lRw?Tp~>V1!NKQYzb{cgZ`r|lfPfAd?#!(lW+Ff=z(jgd`!FUs
z4`rteDWce&E+yB<Ukkl92j|H)If7-(5KPmd|6NnkGrQ}|nd>IPG?Nw5=qgg(rNEuH
zNN~ITyDTNcwN+GNZFL*n5oXk^`4+TS)kDUva<S^~);q{am{Y04XQ%2xrS!{<u+(o3
zTvd*=F(A}Af@>$Ay6^!;{1UKqdmv(wi8ZfFx9yRYP45LA9NAxm+i_}*3Z78VoXE9e
zNc!QrHAly@#u1TBcj4tWBhWpcX3KBGx8Wg+0(PFdIDn$RUZMEhv{T5y3@l@M4_Lw6
zmV52gr9iUjeefmL;OFCCclC~)b>;W~Dh0-6b45ZU#rfa2ADp2L!^^%&Yb<n<rP1nq
zL*$2oM7j`o6Mn$#g?%CEEZYWMx)T%OQeMfAn48$Z%7|dS7-o-g|F*c+@HamegVQ3A
z#Hl^8GK$@bI_RXCOSrJ3cXqhCb-k5+pEH|*S9TOjz8o~Z1B949pbiye>x5%a-LA9C
zNHj_tSMc)Jt5BX0=J16@a$+@sgtXzmT=G5SZt(ezv^K{|1tN(uvXPbigJ*mf7;|`n
zW>N4Z?j=ORmj19+U?~SsbEQf+Oog#ds{PyL5q%##I`R*X8tV0^$Po~`NHapa@cm-`
zONA`DvB>O<^%lu5z`POAWmRA+EMi960b><a>xjR*Q3sPCKQM#d5-jJ*e$I@RF;9E4
zLif}NiCO=0=GmV4T|Av_q`imDcC0us?(1u?kAp246x=C`x&{=)yNWyVjyWyz2rH2W
zryJx9G51B#Ln!~V=VLRL5L?c1WO@&y&qg_)!1J})pKNS}1>Jb!=>VUDm84QBZBxg)
z$L2zp$e@(4Kn@(nLT|rcQu;(lh~>E^->EtR>$ts&+xChMX~$qS2YbsTc!MEmJmr^t
za^(|EdGbHBLymMT*}!U`dY2HigxQqd2>k1T7sGSiP4nKPT|=E}Un@B`=mI?C#EBE3
z=SPlm4Av$F#HFnW#SG86p^CU>bd@dz7ZbnYXZQ%t4X^hky)+c~Q)zv@Mn_<@Ix$IR
zaB&dQlFe8jZ+A&_RkO}r^iuOH#1$~Kynp#gXBV;?8j(6}6(-jGuAwN0r7Fiq*YkDY
z^QLv_8I6}|*WGT93(D=1(wf{9GB2KP(I?r!Ja=TD$1PD9q0zZ8Wm60;W1?nS5|x-K
zKMdriiO=Ayb>(4|Fm7W7oMZRlAYa1KB&sIw#Nh%rZElhADBGCi7u=>W+G$^#?9GYL
zRvm5xm#kzPVa~&%K30xjw>$3#myEy8apd9${HHf*v!sd$W=tN6>^U7XOsBHN!^j&a
zvrr5f8w{xz?ke$_2;^3iK35Sx#nZd+MXwEnBqE`i5sg5MO#O6PKu?d`K)tR|z8ZU2
z>+5sbl`b{A*woJRpD7E4BAYv(J;y|dZI3aDuP;Gv{EI;>?QL7Yzkwc4rLE*k_$#L9
zfTblT4*G%BS@v)H-cs-iH6Q1nY}L49%XaxB7*JXAR~MXh(TM*ZA#Vmt#1gISx~r=s
zJ-?D){H9#YfgaVh3S`S0Zq*<~PSN6~GzGHR$&s$QS8Q%(K^XOI1l)Q#ExE`(9DoUr
z$eGo~HXo#`n*VNundGwRQ-Y&~A{r;Op_Lo_|B?3Xe@Wi`|CAN$1l4M3L#f$jt9zMR
z4HQIkWk<<cwV6rHHdj`PrxcS*bLDCVsWm$gXjWKFsjWmSMYBY+#D#^Wg$0I)XSh@l
zuKWAC`h5R``<MH%TMe%3eS96BhgJ|<U}@0Euh(cj^SeWca#^w4rFf0>5Pz`dt7EQ7
z&>NO@tyX}KhO)1PmnkBxYv>q@Vt_{o<?x&vLI?vk=pnqTQoO+S-cUS635IlbL`pRy
zM<ZXTSqd0vR(;ckYYI(F^R1J-gnBD4Nx3yU4@8^R)lFPMefs$7_1&KC6?N-WGAC#E
z!TA7Iy!p{Xp<~3S6Ez)Nj%Xx?JB2Czf>y&&ACH?&8n^Iej*w#-bWA)5OC;Zde)+w#
z4bmKwTR?Zb$}$fmmm@CAfr;&#9=ldoY!Y0e5eZ4?Nd1catpAUuLV>I7K{E*6IPO^t
z^qzPP{0c1K&=F?{upts(STH`#munIk@=&@h(X<m}R8iY$__htO>d!A0hP>*V<jbQN
z#FYX5XT!@7$mMwF?~d?fkPiPj!;PhK*I2p7N@n@wnqW2^hyPPx5TuiM{NOUKl8-FL
zZ?&6{qd;BYw;S|fqAbpD23ITZAh?FyJ_U+KG2O#}q4{!~i%t%TiB0h$K9la68LD}T
zQ_npy=d;8^6|Tp5Y0UcrKJAG(QT)Ll_^~_sCunbF=GFN*DWOn9R7=;-((L&W*{<$e
zNJxMR($*GIk=(!5b@I(nIFr73i79p|I|fw|kkI)^I1zElH#!|GPPus4im_h6jjZHX
z=}h)xTe8q-9#UifO(V5``>`ZN@{`oM=*Ps|E;8~EZWEK)Vy)HMaN#P?i?=01+^#g6
z&ehMcDGpZ8J<nyZ*O84YvG2?lrLJX&$QQq0T!7X<)rgfeRn4HxLYj#F57PaQOFRln
zMtYoe3ug)sBs3`9M!Wq;54Oc&Ed6IgU7v>p8>&&2B5*VjEjoP@*~NOgQYQh`DC%|n
z7A{<#rM1xzfkK*R>_!;e>}f+OPq^hJ5Qm&T7EFL`6rgfp()Cf&_4yN)>|e9Ptz2p7
z18##_(>$$(hU@}8s+1%(j&RkyF}uj!+C^>%NhG+GRsNw+DUWHCb@(Mk?3})s+pHf{
zYuroOlr*o*hQHeJk?;O&2$yr8_T3H&NJ9Fbql0tBVE5X;+7Cfqq&Yt|xHmVDk=PZ2
zP=8`wio)BkXfxEfxs!$F22*A~swb;%&A}UT94=0bE}ZHq*C}JRYNb+-ITwZT-wB`2
zg8+Hs|7g)L(RDR}B}nJittD7STvNeaTS_akK~8^7n+`I-^T$K)=Msb`p+JF2eQWBw
zN6?j~kvWF0-~(x1A#ZotkR5E*%MMRhCL&!pvyNr67F`{~VH`W*kgHIJbKA_Wu|9QP
zY|!Ype_J#rE6>cpoIs(_DM!T$2l(whq$Z}pvXh@q88j-@K)Gs<Vt&HdhHx%v(5v@;
zaB{WwrMN<(rnXP_!l-y0F@e^L+Lg54$JBv`01X^!E9mE_>_RD@JNld&(r>qLmj0Iz
zOF$fm!C!o-Tk%cMYU@6T{U&3e`Q%?E9=!pZ?G6<F{uJ6AK{CX^25-03cz&V!u*f7q
zpk48J3yk<E5tiuADXb8!MEV|4t=PwB4FIN~d?AfI<O7dlxe3?gxt*}Uvn)g92wP*v
zBE_O@o?xWzND;ijO9uJfP&tR_PH46N07r$n?Sm&(kD%ST*n?`0xi{=8glGV9df{0M
zDNM&_r4Q%M+3uS4)18xe?v(f$p4lj_I05WQZpqrC{V3zadvRqmh@_fK7&7I>cX%9N
z&k|^*GA5#Wc_(xUJk3$YI5pKkHJIuaKOcMW0N`CypYpwg5h;e&!HjA*5kK*-pP-3J
zDDOj5QWyr)_J4m5_Zo$Yn54EcdiDxDN?#QK_K3w;xB=CrFZrRiKH3INf^=Wh&O~f4
z?m?J(Z3~6y(kqZO!@p{}n+^Njc6%Ke>}e23kdq)SI{DF6_#EUtOU~dwFi79oO{?A7
zK07@ynF%~rt4`|5T=HvejHz$@MlK|SKS*lraV(0f4%Z$6y%e=<f`jHrV+B2qcIKoh
z@DJZ$8#@tTbF=ovOE?GiW)CXEy0X8C8N#aioA0bGl7{mi9Ci|h3f=_Ixw8jhn>w|)
zz!OM7WP^a8(WErjpd~ssei%I{41o2FkEH;Tf>R(=*uN!r?BkixNmLh7B`6RtsGSZk
z(1yao)6(#slt~}syc2<;ezNwA=a9+;E3z8~N{T-3m80@i&)w#>*+&e*+HA;s063%3
zhrz<QZ)iD9Hj88FSmKSN*qtRX!Fw}!ZV&iZ2JJx-X=hmR%H<4CL@fnQI`?t(JVXPR
z%$GOGQ_{e4l^2`L0<UTg)T0u=`3gE_xf7Z64oR&>Jg(oy17C<QN<P4-pkGdv98y-8
zvLzZjZ##Us-&xqXm~*m|oY+mUH<8(cBk<NSCJ5K+{=D}QyvtcIilsoM`!?gSu?=K5
zhOn~bp$n%rv9@aEOr=hsSpQ;c+Ns$`6rQGQPm?)AEER}G=t{!y=^UuL4!cBWGE;@n
z<S9)7{x<$&jcFZeDuzg`{VLs!Yw%nH^LF54qC@Rq;&h=0X1oP>`LJj<$fa%yRqJjt
zP$O<g@f^h_cm*jvB}t|0UaklHQz+cp5=`FNo_J$8MlQ3{*DdI9Q#fKkR8#4mVOlTA
z*_RUI;Ab8+<Td%Ujwri=<!H&AmG{6|`iI!?>|teyNGFBxao)c{^;aiB?vt9$J6tz@
zP!*X0+D*_|Jh7hY2~j@vAHf=b(FlziQPip%xXP{v6##p~$|$$<%0uTFi9|67IBn~(
zpPJ3*E5I|z@0S#n>^(2BUqI7m2<V+S(EWWF6xWblwY%-ftm90xNx4<!`t_LS`O7D<
z2U!!8yHhNBLpS-*l|<uP$=|N{B5sZiIcEgG)Nr+q5no55>9;LDNYa9*So3BPFLDBK
z3dKs|HLiBKm2tdC4#7w3cxbmOSeT;Ht;xaM@OMP!(T)K>q10IgeD6y<i%ZcfAlCro
zcy(J_n_6+mcVwhyMDO-&7*Ep*x1)1+TXdz9kYX%K+){aI1Ykba9XN~dpDI6LA=*WB
zRl1;GNT6NN0fNZEjSjDsn7=gJrstU@N*Ry-&EHG%8o@jp`)k8Lg}^!4jWSt($kffT
zDOU<%ouk$)4-N$LIRB$sb%4KM9bH+dG(Ow$H(-*%?vv=5Z%u$!#OCWz5JqeIYb@1_
zL1TUo*6Hwsjtob`Id_0bC(NR&s0BntxMiezw&%Su(1{a+8XuJUW=&wR`<=Si5^}_^
z=6?#xg|i*`JNI=0<cBx)Z0>GSb(BkIfPU<BGVw5xVrXd@^GiT9jrEitjs=IRiz(uD
zy3tBO--Fmd!i>sG7VNJo&f#}0fK(zIppvQ4FWN{Uhv&xnG*CteyP=sORys?fI&psW
zxj4*UasI2fZ^-_wMnNShmaZg9R>k2rgsqEG#nE)iJ3bF)#055ym~7haWz4im#1M`L
zY+$#&P~YD^n{-Y$-?lftX`G>ZoZ&+s9e{R2R+n<iddKAIp5Rz^p%q#&@uIlaj--`^
z&}9UcY#S7~E7u*>xr~7$uE!<m-{~hO8|(bc&s|xgtd~6(fw6Dx?P4ABkIX#HZg#3M
z(A(;~oul$<oCN_~HAwaLG3M7a1?vP}UF;*WRU~JTWqb>h1+=}JF0@&TEexB8+uuYA
ztnQ{ym^Lj@76murX}}y}e=!5PQwTZrs)z~|Bcr;8VklX<fn|a{bo3W>FFaiRX~LS+
zapF|ia6njg?(&YmP|EhK&zj@l!MlF>swGD)K4&{UzI07W6Y`&V``y-T5!%1C)8|J_
z3Zz(^()kBSj%D1gSYF)M!8>8r>zg(MZg$uCI-gN<vv|^4Qyq~)syu#!1t(y1*Ut@(
zl-o7QP27fI1I<*IN{-;gKa0awbz;zXRoQs6ZVW0T$l-(4{jgQyQgqiAf1kLZc2(k5
ztf6MaKzFUtxvuS|HLUn6QXl_>rLj7C&VD~A5RKS*1XismmR3S%WQQZL8M~P~nsqI_
zNHLglE_AD~eD+bVTD<^%)w3~E5R$4Zq&R|Q&dvsAcLkhEnWK(JGz^Z#=+9<EI=g;i
z+Z$PKI_;Olq~8dIT7s#~;=^5iY-=6+kkwRA;WJP4EF*s*I+AVWAv*wm9C9J|Sc6BI
zPllK^o<-tTcf7}oq@SCC(GMDt9l6Cyf8C(c^%glWJ6m{l7hFroz@s}5G?-Q;PS6$F
z0QG7&v}ww3o@|5oBJIOL7)d+b_j(7ab00KnQMWgc?U|6AKX#pn{babq7VEp0$IUT?
z)v+{%7eUrd@vdQ&$Sj~6H4L68(HVR`c0l<);@TmWcVa}Qlx4UDTW}bC57Le>1lV*?
z;re-p#9&P)`84nCKu7TWfMtRUG~*(NyA01A3{H|qNnqoLmPF2NvsutvC4k@iu(n8D
zV1P=dw6J5ajq+mX$K3xC@Jk}YH=BCEEHMdMQDsHf{uaEcdix>=dOzT(nWhE?>EAS1
zb99}ch$d|;eF*LE>V-~bcd(H2e~{5;9aww@DS;C5?Tc(kD$Fg15BUO|2Vf5_%81k#
zLr|EyY0c9_$2ej@WvL^M$s0>>fJmQiV0n=v?a^HY#BvdP@8gNEDbw+GHkHFi*W-b>
z-D@ShQ@NwuAVZ|A-*vZGTU%!Ag!YMf4)kxKWmmhqMn}bDrfP;+WDAYqm<p5=`~0QF
z6bFe%YClSIyK{L7d=A>Rw5G+}Fk;d$dBVsGr8{wJ5cJcSq5l3hCK6IrDd0e&ofZAb
z*38~|ow}4T732z@bKxJ32;oTM=qDyO=)~>jT%t^I;KM)Ba1No^X&5{h^qz@qnbp8t
z%NWe)qFIV>K}neNLh;F~<fc@K3e2A}tb$9^J?pPjvS9J@a!!N04PR2Mx`r?|Yd|~e
z>P~hAT;4|>E#|h4nVaJAODRe~Um?1DpNHqgP<6rHUG$BVdQg(+Jwz9GNHSd>?}eko
zY4h#L8)Henv;5D2rtm+R8vnBw@&4MGv#>C0n=|q?7L}&WE=Dg3S3Pe&mgV784)NWm
zVmq1N9{(c^hNU|UPI6dJ<E-(VPUF-6k<Puyg;p?moKcV|i&2X!Q+c6q`Sog^POw{t
zRc@lgfVT{~fCwe17MtFj-a!$^W2qyC4Ar|j>N^;+mmN_|as(;FH=(8)IKH7V-`oxG
zlMM8#CG}!IZu{UG30Mq37Q8e4Fs<KMV>GEHoLc$x{dbKc3Fb;D{!dok>Qz|{lyRz(
z2!#ff?zE@-Az5bC5o$AkIT8koB?xL8%(>E?I3khtU&4<d-C2;vP?U@v0S#ooC}^^H
zZf#RPPgg(D9@j3hGFR*D*m<BM@W%Adq14+?9*x;d0cYYPBmJX%=NmXeMs^P2uuM{G
z)*(Bxpov}Vf<;(*ZKYa+Bc?p929gdJ-2m_c9+$v4Yi#W-PmYA6etOtnsm+A7uCnUi
zmrRFGkf4?K{j4Jx;^5&mTHDwYSbDZ2wQv(QC&I&GH-3_LN<o;Zg(b02u~NyC3lJ>h
z8~!*b8bOKz5W6h&*4-OB33o4VfFGyNzY&Co83UAwVLJdH2KT0-5p`SgL*dCK-=&8m
z0Hi_0XQRQy8(#px{X9*^s+gm8pMJFDOd289X|TSV&3?p-9JG{tk3?jyjh(Y^wn7Hq
z)0#}pve@x_MER?-{@25E{yuelDH$>qRwJAimv@Y-PJ`s`9p-BKwR*-trI*?knT<%o
zUM)S=dYTL_j_`ffm$x(U<Vm&wS4~qhqNqY7X8&6+(5kwUHBKW?gecBiYLp(ukYL=0
z(HL41SUoMul~r#~wv_0|kNDr6WH~t3kRX$7JKQ24R$vGaNKShiwKVXxHE0H&#W>H-
z%CIHs$0P^D(_@^GwO1HqbB0E`RV@uU=X!5?5gFpL^LXZ7vB*hkH5nzc>kU2A6V|N6
z<N$cc?d|q+0q7??CSId}z`P6)OP|}Ug;4c16?ar(m5NzxHS3A|lwXo#{RS}RBtRpK
z#cmu>l}7)dltbVd@$;3nH$fcIz@TarGJ`4e!9KkHirT`yOHUPOWi0H$_Q9-NuvUXw
z^m@F3fcy^Fp~{=v$UyFJtUD?x)D2mfO4q;HbN+^?{pmgy)H&4l$?0}F>d`JNc9XVU
z_!pFp;AH*tv?D89WbR@rW~y(&v2bOdb>2b;u@{<RZVHZ4G(LE=cOHK&T#hz-RZ#lJ
z(wl>;Vh6o0%bpvfZn?<<X$&wG3aD^<t2j<X)Ra{7&c%m1p_vF*6S$7z{IEXXu`%+a
zgY$kl$wZ(F@{o(Cq%0{D@jrWK_k+ezbqpNG(61YYg#omTYd2g!f}}W_qKA^F23zW|
z9USwZdGzj&^}2^+2y5WOo$qCigl~cev9g7eM|or9LLI%|XbM}rb01uww*{Bhjn8nT
z7=<!}&5?A<vs(*jN!S~sdq!<hLptqX$($9hz)d9ymeDA;jV<Mqm<aXI8-?%3QMm&S
z*L{nEj7olOo?U5ZyACcAtMM0-NkKL+B)DAFMX0GuHd##l``vaaWM8x#sd6AP)0Wjh
zI}q`rx_M^p0AR{K`l3Hg4$YPrNBQpAGyH~oj|k=O9DKyPh2KBQL^^naDda<nkO~H>
zyGHUI3SQm<i16;tD+*{am|9{Z^pxG)CO;6SPOS3*<eB|s*=r=sa{CKe7mvC}7`}V=
z$cU*%_6x*M_;y}!^%cTNdf&qwbE|~K>|(SE`P9FALGmUK_By=l>33AuWYq!5)_R)3
zu5)GotPlJBKGRE3M3{M+;KYnqx}8%JPhQ>BHUP2x2ED6XRzOoxY$LkCg-28B;@NqP
zzzthNxfFbG;qFhxfi$=gY;S@s9g1JzscSd)L!)^hC~7OJQ(X7Rs|Hh-)Gu0sCo+j#
z<!x3(r62$s)Qg_uoNJl!v%;3xAmE0$rI=I^KH?CvG$eVBKWwZ!RCkIypq1m>U~#Lc
zO*db8IDR;yfC%!i^HvJ3T#thLPk2)IxX#p-We{46I~PUZZIefvDlDo9NM3#2M0+ho
zuOMX6JgwS(V!VUN1J{@N)8dVSeW~9dCBad)Bj|Y0IK{3cb+g>H(p8R23R$js&I5%C
zBcnsBMEoeN2Lt=DE-g5sKiA>^U&1I=)3tNgy*69b<z8a?>;&Z@>mFfXL%ktWm|rx!
z9SRMmL+_q|+NRlUMx;@Uyqz#D8w+xBW}vf0|A9w>qnJCyf&KPHKsj!`a*J6P$Vlj$
z<RzLH(KO}>yEA2}TTs%TWM|sKy<V&g*JOiie&m0AJvQNG9H=Q$GVU1W$AjUXseumI
zwBzIe(Oizvf>m;EbYl0Cz>;Cpr8;JaS34$}mf%)VoPeLq3bX~shIV~UWF)%N8>$<O
zIpRwhruyEHWzo$cERCgaZE>=bu*;h;)>>oA(`qNY81lpcMn17H|C7fLc-8bJKj}zf
z4%WE4Rd`T+z~E?FJLCSW-&|=8df}m9hIn#a`*1ZHN}>*62&7)f&YXJ4q(B>&JXN((
z^e(vr#AJ!xYl11dzx7&MH`}ulq%v*Y%HKNny75N}8fqFET%6J2?$|A-?(t@TF7Deb
zMiR(g3H%a4!C}#9P)OQ|Y}nIX8AtCpW@zS}_Aw{AU*kR|iM1NEOi#<bF+iFOTDq=6
z*WhoC(p{(_M~eU(gEaPeopIHow!FpqY3YGFO5B=t9(k<?QChv8yWTAVQTyzN4={D!
zUR>bLB^LC=uIiY!8|_IpiT$>m;h+X+a^P_V-gc?vMYcIrxC+1vdGATC01^VnCphRH
z;)w-qv2?=(vnZ-8*oo=qrVV?u3QsZ>rN;p*hRV^_SV}619N{Zo6Z}k5O3>YI2)`hM
z$=19Z^3IKh5+NMH_d^QYf&;sVn<vqkWEV@XGH^YFt)7zhJ&Uxqp||=`q9C2J*W8sB
zZ^~Wg&P-`|sga}C{}8@2$_zMQlvLmr5*HgB@phD$V;jr_drKLvH#VM<79)qgiQ>Aq
zfc)N<G7z^8Ov?LvHU9wY)CU(gY`!HL@ST~{v@FCA(JqW^5wCl;f?A2&gFxi4^Uv?&
z!JnhSAY&#srM#>3OH${tp;d)`G%Z2D+}4%c<D<Nm?C%)08;fD9y=aI|V}YmjJFc=T
zb{XPL4r=J}$q~8Im%~t*D)NLXGpyul_0wCK!k`*cTeHrU7z(JR_qtENf|8o8>&MVh
z01LH`^mg+S^e;t<EQnpRUu*iloUCT@5>UsQfL>L2YWoh<B)8h~o?yEYu?G#SvUwwh
z(i98oQpdKG(9`^N^kB^Se1OIEwow_u^s@~bpM?oK_x_}Vqe;_w_iVUM7{M<pS6Qe}
zw}q+T%!E{Bx~J*G`bn(+kgGwU%n^WokROGL9{l~P)lTwjDGe;CT)`ymx5ANp{hMFc
z6B#6=)-^>HQ3TxiZ&s(lblSb9A8DLYbxyDEAbE59Tc)L=-Eq<Rp*vwMbj%`nrzROZ
zoCe**SuP*02d~~66jWx>4N$W->L>!XwA6cf=RK?ptitVMypcI;yo8(xQKAY7PupLy
zU2=Xpi_LoYmIuNt=5wC1t(gL*O{52q&=4ivy5*xV58+QSOefH+CelZ`m_un~S+VUf
z_{o85ienw9H!4)c_tS)mveX=SRF{s#tBpnsky@v1F4%1o))Tz4N!t9dDmJW3=meC&
zd!rv{)1s{LM$CgU+%Vg^rqtQF$(I*t1hw3e-e!M1(?^^AIWm~gwVSGH73!)~$;Pxv
zyq4v7+SO=i-Be+q?B)%-U-MCgv_ivvGb}2OW;e(lXf@r=9R_)fG-Q;fRM7MTi&J3L
z#CXj-OS2vBM=8?)vy`{4`Yx0(;M~hzooqr){Vm*j`{MBBI8LxM6Z-BiK*4v%9;&X{
zjjQpHZp1_hGj!0I<a}U`9Ra?}H$OZdr?X;F3i)++=6$7SKCGk+{1nxDWzdxoaa>bB
z#89f+SrZ+6Cn0`Kw6AKcVR6*gnYUOWMA~2NzHpBLBJS6dee~h^Lta{Yrn2HM5u<Vv
z|3{7W*Z7Hq|0&s-;(L;iCni#}WFAs(y{T8gbK@fe-}dh&1O8g>VlfG_G+hopfI=!)
z0Q@PT#;L8?;08P>z8~qG4RS|C$s-~YX#zlq{cqn3EKj&lJ6fI8a*aaoE1JQxMKUKM
zqfEs&pZ#gQMM!JtRgTUG*0|o|ZM%9O@@qDyyN8g}!%XQ;c8#}maaAubVwK-QO$aKI
zOW6emm{noKuQ1fr4;1g<%Vzpb<40hM2>u;1M&7lx*J>q!o@r+vgmB`0GKl_cfsXx(
zo4gSVS!S)Vdl_wG+Y0cxdP;*J&){ZvFuN5cOg<lZaop4Dc7DW`irw7~hbI#Dhp<*2
zp$PHiGr-tkLqEJ24jGo2XCvwMblhXW|MiyuL)-CnlF2kO3=VMsovB>bZ%ebKy@%hj
z)ad&Q0dw{d@s7&f4K^&l%jsA&lua$zxrv)ebM_sClAX-Nd62ko4lF1jm){74Wm1eg
z(aqUMhFAkDeLUwf&=bmG>m`~-1<?t)_Vi>|er5~W&5LBF`QN=91mbO~LijT5#!Ihn
z@a$aX_2O@QlQ^Yg3df<;?Y9A2hUfZ9ISie@LUnEMcO@Ad7R>evBM{5y1yy5G*m>1D
z4fWJP=Yt@xTG){^+}mr^+6SK<D2f4_(Jc|27bgftEQIBMi7YjMJk%7H1d(;NQO_o<
zamPx!77O465TaB)fWMZqOt-yd9tFDQA^4#Wm<+cZbY8gS%TSSRZ=Q%W3UpP>ePPsv
zw_a@!Ah5p3r4WO}%=-XeQ84-C@9(*jHz9CG#PwRc7^F<-$Q+W2EC#id_jVZs>o9M3
z@RWpXh7mRmKaQEl=Ug2V+AMJ2d9QX7`1FrTij6yqE%-Z^{IT}5XJ8)@EEk!IDX*ZP
zl8LQecw#(;h<OPeT#bS`5tO$0)PX55tu4vmm1shh471&oT-y)LbH-ApcPc;4ER3i;
z731uQYgu_XJQQ!>4z1dev%`+La+Q&7YW0N|!GC}4If`^YDi&8XjC4(=hJ%`ftjg!F
zeZ6rlpy+oqZ=8TlM_sd=%6!odEb*^BuxvO!-$C!^{Cp?zd0GdzjmSJs)(JJgs*&f|
zy|ahjU_TvGu{f9<{?Mqo@Ot@u>{xN`#3o-nITi3l+n<0IGBg1;eW8%83aBb~Fz=5T
z+AP4(|6>D8nH4%TqtkR!**h$NvHjnxd~rT34ozrHvQgPQ%wmVVUY>77KEl3CaRI;~
zfsYOQH|X!aFd+iy-0Sm$T9Z^Ev<?K^Pk*}mecOuAF!EF^#hw~z_g)=6kHh-n`7T6i
zhHc5BI`#-_C1znz*o_@s9I31m(zMWbDbxraBD8h`ED`8JhtcjWCl+x+lA!?x^M<BH
zuLk-f;DI#gp0+fiTw%5)>7-%*ZryciHr&&rb8iilgO=lNFGniHGHlv@z4UQ0WE{zy
zZlsj$B;-`jyURX^BP?;=4<u(B`Px!$Tbq9ov+~9Z79@i|7vm^5S?D{2$|tiyJ5yY7
z<9j=Zk4(xD0{0BNH)XC6Mi$`{!AOfX44(!A%Ndxm8G8VGvV|vgZyR8N)TZJb<YH0S
zYP?Hs6;9UBEXEopB0&acr+(?!_Y<xOV(VG^>GhtFkhKO;{IPyxUU%9)9HG_nFB}&4
zr+n(%<Bg0@q1joa_LKaE3ya`uG;dmW6$#$_W4G2j_lm`i>tifWwdL#YVx7cQB5s~4
zhF#mveY_&XK?K<$lfx@XxN*owqw$x@0b%?i6&G8J_^G#t2&^5RMa9Ub0J4jXzi!3s
z{9OCQHg#rRuSV`n7^iV(vG-oLraiurHId4RNF%xn6psC}pAnPYfz0~r{t?B3Hm;b?
z0Fb0fsctoRT-|VG1)N0@kxAs*R?sp4u<8Xmb(?v~Sz^AxE`DH8M4TsDx!T#OATfZN
zY@}BipbhN$kDvn*J>xUBdtd|n>r0PYy~N)}0t8D;zEv}#6X_}!CGZfAM0fDCi1EOJ
z-8(g8&J%{)P#sfsKrm_&-|d00eC*zl`&sj0iJQfARm_pZ?vQ27{V4~pf{;A_>DkR0
zs)BkQWu_o_3;PY&TrU@W3TFZR8ykPueex$<wG&OhJEz$&uH2+tIIb!AYEQ4pu}^Jl
z4wv19PQ(fMl3bcg&FlDMG?xhpuHN3>DaLgV$M%`W{!5Vl6dr>I00FIU2CHk76yZhb
z0bbNKZ$d{SbP63cPas0H*~RXvz&h`cNi-S-?bXPfj9VLwtzxz*a1|x*XtIm*!p^F}
zvGRrKfkY|ong1qO7+b>KB+s$Z+I{tuNWXN#%}4^p(j79H=9F<iFTbHXNchvXtzy3@
zkIvraBxaz8NBdyS-Kmffy}Xz9h&F=n{NoCXbP7!wFnL57ZpaWBn7$O<g%ewcde}Hb
z?DSAkam1xj4?(h}+c$f-{?PfMkJ=1jv)&zqjL+5<a`c#zF_22CsCM_r6XnuS*G;S_
z*cVl14{}R#cw_<9iyA75n&R!dS1?+CV>29&jsu|jdgLCkHMS7EGHXmq*5QowHN0UR
zQ?S2c`8}w}<lx$4Qt-OCy)1&xh??*Y`7N?E6}33!i84bQG!U3%$W5&$KHik&ae85-
zI1c$k@L>GPj%k_A;^6h0hd{?~|C?cO4flh+@KW-kAtyyebCaZ6%R<)b;~P3g<ROq~
z=RgkO*r#7l+{_gvC@1I`u>Q)sl1=M^Z19|FfFC`L-4b78636;9O<EgHTH^=C^5~Uq
ze+3CS`RL8^LI{;y7>2^`0JOS0*fqZT@y=s5PZM~G{Je-i;f62ioU?6&PIsc@fW>Cr
z*NdFj<ESf+>FKS4cvTtQg#nnx5K*e&+)Z#`b@0<H-dyd+7Pnibf4Q#0U$+nm74L6>
znDIQx7h&6>^gHRdlfKgqE5Y{4*gQlpp)*%ve?>0JThuivKKoOXWaBhKZ19$lw1&c9
zh<*DX)@?!}5bzXy5;@qxcPbv~7i&v?z5L5Zq{-Pe{(X}zwlO`);7THI&HfCcc`_(l
z>f0=BvIzZ2mV2(3gdIW-sv|OnYi@=<*8-ld4z6(yG?Q}zx<lA$uXOHWJ#{0<cg@D3
zB0e5eldZih(<!gPaGE!spwC1ZZX(@<7fUR5VDZZogB}sgaUCSD-nNX)e!I2!5r8c^
zkdQ|=yqQDsO=-u2J8SyrE2Ljv{O*R2ppxt|Osrr;U8hy|Zoj<eOUDnlin4Qk<H6OX
zu#cxxP)2Tc+L4ltKQ5vqxQqWwz>0+R9Z4nbv%=t*GPUHaS;G$O%~OVGLvu9r6|%)@
z%=sDYGOToC!B|3XuPQ{@R&043#sQT**%ygzc8m4bA2zcC>wI;BkNZ#Kl)Wvk8?KL$
z++*M-!&G@(@0!FFlaF*<04Nj0|5+{Jp9*wzAUF7NGgb1cWZ$qi)7tSIus%5gt|5Pk
zh9%)$Df_bY?WN^Ied~$Rjnu(m*L9Yz{b!QEKJ(W+Cs$u`0FUp{l4z{&u*_Rff|uhS
z5tJNGKzv(fQ!+S6;k^7^Npn%FS2f>B{7H@OS|6R-V%`DAHpVF+DdAcdi_aU1hlin)
zw_@xLR*95knc%EhrtCB+1C`+xW~y#zxhRcw)xi_?e>x#U%*3kffGgw;s}8g$!WXW}
zbpY7WOqi59Xw+z1+_<X3{_HKCfR~q5Z~xSlmtg4-MM;6?(O9yS6AA^k7j-i)y*=L^
z7oeJ-=+u&6XP0<PKiRWthqDFyu0x{K*fKWc;djLXEUX_uKnBOJJ~0Q#A&L_X^{Bl<
zwf~vYhLyQi!OBFNH&w!_+lUdtMf&m2i*UezHQT)nU;h2Meu=&6%3st#R5T$EzKMak
zQ#h~f6~?Fm`)jeC{Ie84HQO)WmlXi}lt7@dI8R^3ojM6~(_$}?4gJ;mKXP4WC%WQ*
z9tbv`r!Q1;8s!Xb%S<s530Y*Z_Dj?Lf|)@HrndQpAu9V(_K1BtOI(@Q)<1SB9sE?3
zkw)0vKrWbq45X%Mv)(RP7P79(7Ymof)aJBrwcvAfVH`qY3X=PUoNIo(3mXQtF-?sq
z+B3c*LFt+THE}=P{IP9(&qlaBm$V_3;}J-I+ZLwA`B-%qWTt<4{AmP40wk6oqc}dm
z6M~f5!&uquD1`|wTmOn@PS_od&D`gvh&Ts95szAT{Sb`UP#Zt%Ac$sxw;e=e1_@S{
zmbUmgcAx)wo2?uccDE<XAagcq2LZbjrYS!17#c9}GREFI*7~b*HpisGoRPzwW{s`C
zHA3RxGa+5+{T}N6@05<iu<GU5=_EYuIeBXc2vmmhN{2#awP9!e)ILYaMx<sg9tfIE
z+ab0*0Q_qd3p@#)5^q=~)uCa)J=9pL6MxVEyQcBh-F<|2VXN`=wrI|k%?lhz6A)xf
z&+o#I0KrCbl1bkOzXPF(L;K&S^NCcIfHhMDDcQv6*-q6qokH$fZA1H?9XP9m^sq!p
zjs%iYH{F$4M>h-tCBE<@=1ekB^8K1cAA{4F+N;sd*{8`s^xEyK`7RPfMP184*i{R~
zBnGzP&QDu{sz;Paft{ti@Y?HZc&;pmFI1pPM)__J5=(NwUeLk!cU1Ih%6msGj}Lw_
zXHN&<Ys@HWO9DTnwvYaqK%gvuL^jku=47ny6+~ZN=G?>gu=@(q_?LL_o#wB<*h`=c
zTd*J+4Eu+&Q+{W177K`7%=?3_;v!kNVa31B&?5(GeFd~%ELj;Qjerftl@5emI*{25
z=|jfInJkdifKFvw6*3RUk#)a@4)q4;`kJ2R>=0p>ScQ*coD+b22ksXp^s8+~Y@I&A
z4ti@Px{0tTL5>Mhv4CNwZ{%%;PTG=Wzxito9#UF)I3C9_dAv^cPRTK7JfN&Q5xPS#
z8D=u%13T?m$5aHKxh1~deu5PeUjxl1+~f85yoH}|n{6X3RgOR;h)3)G&De+RS~tF9
ze0*COYZ{6=xUcVS2ER4)3J~)7Yc0|LiXI7JHM}o7wQ^)v+H?R2o)~YC%id*(MX{+i
z8+T{j1yBNhvMzV=7)c^i_`elbf*wIuey4Tbq7keL7JtiWPb<~n0Z&-cwel1|CSL+I
ze)=r8xu#J}WJB_H)=BK+vu-5VQ*^TMB$LLK>AQXK+8CeuMJ_bc!_Rz$kd^kqu)2Jt
z9Kc<mP%yMvvXOj<B?$?ZGG0D`V)^Kyx4+zA0nKm0yWkE#gUt-Pulwfr_CMCYhPL3O
zHz&pe_5$05ou?QmN$=&SzHPlDbEFj3uw`o55oj9JbQ29>V3`2}yR_&bkAG=$U3~UH
zGPbL{WSeK*V;ohW;l4wHG$tYY2tV-#{9xz2FC8hl$0)os@*%&dJY{Ep*y7b!%R8h3
z=DqlSbl8S@{Hoq1xxO8z;g^)T&E~@wp^6YP2WP!}Y{k@{@z9M9!2Qb#u>%M#+O`HK
zi1ObsgOBxVB<xUuK`rOUzrG;VgAxL=F`1(=qO@KsHR9}kNxq$We*f3}qTyKD2vr;x
zOE&A~?9YV?0;osif*y+v5s!lF=kV%<%pFuV+i0>48-Uv~>o3|@Tx(J<^r0(B@!ekA
zdZ1@VxN{FGgO#a*$-Q=1sw}MPjN>Afv)>=qk^^4OU0|>cGw&bn?G65?AHx0BL&&aR
zz>uM7h*O(I3TwsGazxD0Jb7qM^Ma71SFPZfUkZPDqKB%@`yT(yq26vEt1UIO2a5zi
zj;v+ZIqcFuy<(o;hOLtP!!BG;)mW4VJTg=f=WW@1ez|KMX-a~k#Q$gDcXG0T5mW0>
zo3zsFDrvcj?om4TpWExl_W;zg0DSBL^KdUV)$deL{U(KYt;#8{Mj68i?c2Z0@7I&~
zmpzCLp*b<r>WGDP<MePKd94e&hnHC`q#XuG%6Ae%#?csuYut+FQ)2>n+1v}VUn-Xy
zwGcpg4FUAF_~KdvHUE(0#KLqR!5P|4wH$=r_Or5ND0h{9#DexJY4gGVyjtwD;T66u
z(dMf&yCoVIr@Txc+6NO|8YnXshtG@DvoR;ve^{wBQ>(xmA(0Pc8~PKL{0RVNgcJ8=
z?cdnl*##bq8RQCTp))n{w$lA5ZFZ%kK5IG$0{_}cHR@aT0M(xCA<+1_H?IC`<tC8a
z9IJ-`mYK>svOE^*+PZkcNBoF$b4ce(VvOB>F@?QK4p*&ae)9P(cJcDXNyv-GF$(N+
z4Mu+Jx7$FxWz-V%I<EV`aJMt?KG4xm8{1@^(kJhajZkL9iz{AFu1Br$(0@qB(di`(
zv42A`=BvrMzQetuamoOCq&PmKx+w)Wm?b?G1^3Vh<I_~3nuU6Dthe8AgU7e*PS_+!
z&h!|FrV(&Xre@Gow=9G-UxSA@U9@8Az9G)}i>Kg9e+Jb}VsB0L{2}HtNJ|e$*x|xT
z_MdP}jQDWj0N}f)yAxgXf^@-}Wuy>qA7$zL>OnAygj7P4Lt;rSRqt1aa~<zgA+d3-
z-Sno(4Rnudu{*xt!F=$4qZ#F(mYeRYKT?}1sAzb2%cD6e-G6s{ut(vnQ~i#em~+k!
z7jX4ph40O2A_sV{bs6rS7qK17kDLrCjZDA(rXX2Kb350?TtlPes817d#y`ltM1qP3
z-~DVV^_sUYArOR(#YLdK7re3%UiU~tbUjZdBj%kZ(>q945?B$+f@eco8z4C!=?dqE
zyPek?1g#8no&c%{HIxq*pz2%QwP#TboHO3vN2EG@k)FyrKfz+_5rqtN8h(0ra0fav
zD??3n@Zb237=?qEy)cE-N`<F)fS1ak1Ry|GPFtHZpc`an$Ht$jPzCKb_b}J^WLn%5
zfAY-1-(-IY(G!qD_t2ePz2h}bg#^BbBqWYra}}}#MAQBgbhZ|D%%TxB6}C^6#0*U-
z4{Zzot?l4kn1H=Ee4}K}y^sc%+hf-(SxsH~Msag8#Etim?O%m9@kDa>mO&*2RUwAp
zugYLe4lRJ#;l$4blbo(Pbk0zyBr1x#Xmhx5LW7E$_emHd{_10H)q`4R)F|20=B{-q
zafb&%eSW<($(#KyJEz*k)jKY^p?>_`&gN$j+BKZzS8}^~+`OYJb<_~U?B_;D%;-N~
zuYu#rRN?LUu0?Pu#n}LiZ;Df%db|u)4-^=%i#3n(T~M8bBW26rUXD#TdHdqd{%Bxt
zVt=il#I0wTwb@Df8NQTQpZbrApQbHPWC}kYU>m2MuLC#uL9M*7>0q$UI-{W_X{4LU
z&!kfTN>Olwdyj2%Omx8cboj%1;zp{}{{dgLTSv2ZgGSVOPv~;U%K88Hf*lJGjzoy9
zlDng^kUF3(?x=9kRcfYRg33DkIlg_L=<fn-EQ80V==|Rhk5Hid*6^Vu7{$sK+{9~I
zo)3~EYCYucM5Y;7P5xE-GrH^3qv3plPHMT*DSL?9N&=&~ma%P%{s8-MK`qg`8~Kmq
zQ2gUCfkcBA;M)KM`>Xj38*d<ZYfF+X@3rjD8VDY+(nTDNtSi|*5W>q-Kfu8{^*51f
z$hLv{ut{nI8Otdt!@Yv|XG=q&gr>N*AXF_w;<Lr^^<93`u*)d`4lvo}fd^SIb-!-h
zof@BEgl)3S4|Vl=_AOMc60oYVFP2GN$ENK~pzw)`RiyX}`Lm!1TARJZ1W}9$L`WTJ
zj-Nqu9jh7u{f6No{sSynQ|2oU)`c$80{k$+yaYc#YNsoiEV7LCrr(O)y?7J|*|3`H
z_wlgLt^3+!pi=lCvW(^Si4qCb2>i2XPpBGXXle=usQr60?&*Lp_78N74A*=IPd31^
zty;b4G|gb;YOJWiXqmGTB2qv(e7xm@hAt?c1pWR$N_7z<SW5d?^MrE!VbzfTTYYXC
z9bKN#3%QFLqi&v|YelNl{LJ=Bk}n$FuT~&{q+cZxVeU5DpxD1sxgLS43aDJBEgh$>
zir2JoTP>(b`0!E{Tive)g|FIcX|_}+$Y+-y8Np<!2cvs$*fS=3s0(n7Q&4}^om|Ji
zG^{Ql>LB-cSv|~{hS=~XEU5;Ha-PP-xn>mf(P2;{#!BBxeuotz;RmbRu`@k@#?@Z7
zPBp2;Eb;)=@ESlppc|_9%x?r4Rcj*4AHsC7+%O)Ju*`GCm%^|++7C<phEZcH#?idI
z!_k1|^KFhA*BD*!R>Edu3PptW_h(<?OCdnv*(h%xo2rJrX~Yo83aArn(A#17`b4eJ
zN-^Jn|7aawGXJv@_|2Q{1<|0YW-^b9{_d~w;NcDbEw?Xw7lzN%03nuYuzs}p<D4!p
znRN?C>^g!^KKEL5hRhCfq|QP-`IrBXE#hFC2IsaM?qgF8*+@>^^(5HhKO|H0V>s$-
zX%4pT&J1OOvDXCQQu>N}@C0zI&!vJmz?>^TIi(M~DGZsYtHWn!ox2;6ZAN=-eCCq9
z@Gu(Kg6V4s@V}nsHqA?U_DU#@Z^o+0DnX{Pt->}o6PSAdoc%Qx+T7U#<GNE!poIK-
zS?e7}0=zyOtKvZ>^2k>>wL66wOgU_<A5np?gyuU)tvIngG*bKFe#td|#koH2u9+v+
zA=}-EI*^5h5Wc%Bo3$$UtH4ZXl@PfqDXP30<7|QS!M3+LEse*+JY=AN((!WexB}iL
zVTldO;L%`xVQx+wRu$MymzOje6mKe^+ylYitbocm0Hdi6#AnBkLUUy`d<-UEICV6N
zC_{=}V-Zfol4PabmU3a?#<?(aYH^xRh6KUn-|cZAIeXI+>U?>L7O;;nsEsvU*>EI`
z#;D3?O*BA1VPoP*$1rNhsd>G;Z@EIYCBPRl(s<F#Y@HOg?`s$`wOw)Z!k1VWgq>lt
z#z~svRc04MrkEIkCtDZ3gdbM}dr;Y#(PqSWBf4ZY?9}Femu5Z`b_&g^AfV6W%V1$o
zD8?ZzUF&aZ=ztS5h%n}oWHp4U9QW@}934wbOXUaI9fwc(H^!LKp3Rb@Ho=s%{}PlG
z$$>Fsao4FOumlI3!OKY$DSm)RWO%a#9i5$T2O*lye`o#X(f|{-6e|+F9F#&-1MHL&
zut0Z}eK}PHv=s+OX1H+$)&b{b*Q+J?9sZ&LPv$}COoCN{LhstUj>E2ZY?LvOaf1;+
z|6cJuNG^3cyju_%bQ9Lk6&`vM-!8I6QJ=p2_nO1M-_&XQv&ix5+PNkpgjeo^HtyT9
z?<E%402P;oD4g8=w|W&3zK1F3hr8cL<U^Ewbz#;-i^Yfq!ub%rdIKERvg-TD+MKOz
z)&%gYY%JrQe6fWijcZxAYMe={U=Pv2nx-Uj)4WAi^7rs^D(i=vIiD}eod^?jHsTpl
zy?n!6P-TJ^5Yog_LB@jbi|{+=1|$Y_#r_N51Vd<K6TYgW^>IZG7HjufRrofLNc!na
z@PvMiT}L&@jqCICVXV&Y$K7_qPkSH{N~b}H@^yl<>+@0hA+2{y@G+YNQ*a^_hUHdj
z<m#ELhQTG1{p1+g^Zvj$!G{#T-{%eZi{DB<b}+!)^(OQwj*g7f)BDl}wdN1PpPO%{
z@H5NIqqa!-fh0SdRoG*P&|>rtd4_Tiz_nz`h-9Nl!1+f3vw3z;(pZ%18eSwTKTvC~
zsW&El4NaTDxo&T4*{HIVMlncA*#DG09_qz!9ne-Nu(-YI5V8^3?&++k&g<(J$XlW1
z*{N0^^)+N}Hd>F^=HQKjTL&j#!2=fM?f(AJmN6D=o-(Q@w1<UleZkH;M#j+;RT+;|
zFfF0zRSNkmEStBVlcjwAIm%!YIi|7w?j*%Ks6Y(CvjFiebB~=w!{0BB7nPyC>i-=M
z$>F?wlL-~PzrJm(p+hJ|5p^UrjhnxBP_ts`XTX|~K_f+JP4S>t({$wyuVzEB%XCd1
z;{?7SpO;sB<KSR~0Vy*OC1gi=6!xcsj}OW?V@#Q$X@sKUwPS60*`hi9K=Urh%jTug
zXUC;PL*3iZ4#N89F8V@CAWz9U*PD?yYH*oh{3E|{7pt`PVWP#}Fn?CO(nZM*5<hU+
zTqZ22@b6b1gtAkQvRKa>tZ7gNwvYGS8~ZDsqcmP$`gzy#1s0vN>#}9^n(8`ldS8m=
zY6BisbbJcC(iU_!rJA6hl}r#tGCIcQI1MzsznS}<3k6h=*C-6$)2^GJKoKt^`e!me
zZT)@-+2M1B$wc1W;{gzbDktb#M(SPaO%`W{o_ydrSMg?~4V#>qmCrUc+R7gG>SQuH
zB}3~jmj&Gs^WLX0vPB$I8V(YC!M;v+u45BA#C{^mG}M$K{yKQWr!k&*spN~*;nQ?-
zDIft|$*$hyciVu*0MdpYbD()IeAVQa8%J>U&AZcAU9CrL`W%v{&F=dJg#~-sGMli>
zdouGMvEh*KZh-$~53P0a1cH;v>~$uwdwr2BHarfnRbc+;Y$)RjNbFh|h$}xY(r!4Y
z*#@Q|2SN%2X=`aT>YL9iy;}B8%Qzj&6DeL|h^FJGcX43Ur~*k|hA8`Ve7(|1cBrh#
z=m5&ld4RoXUtUh<moo|Ure!{kf9uu}hGMzwd|U76%*IYL;DP1sr{`PCopl0Vr~X{p
zgviVm$E+PNLyxjP|1W_J?CxMBtvavWKuISa8F8#h2wisOu)1?p_!_Z|Dy;^A)V?I2
z<Eg|C-D$gZP%XA1VPqw{px43VYQQ1E*W~=h1;5xKa~fyApXNK_Y;Yaa7SN@nYg-`O
zYXpWnuc@f{FeTeSn-6h5UB$e`=B^8_$SzRG*y_S%F4Svm_iG^P*z6<{KuH7k7?74g
zJ8dMlc$ih7a#BmL1(zm&b!USbqkxJR6xkH)@=F2sTPeMOU75jR9cliE@6rFCc?oL!
z5z<od!p+QU86(xwyS}~>38kC=63)|zYQ@6%uHg9wB9x~34t{gckqF2zFwrht>}1uc
zB@s%^wLmasD#H)dcMA8fPPD|Wv!!!Q$3}GXovJ%N{1F`uwX<l5A3OdexX_Jat$ti{
zUfXH@y)P3TJm)713*3DA9Xvj@5N+E3)uEMYFnuKS=GB9q_@^zi);g)R#qaO_a~H!U
zM)3Wbu{e7#MW7e^*aSrsOvL4eAz?_Z%M;eXWQ|F=r)8vR4Xw#HQY#~d?3(uG#BtVU
zUona7pLuPZz2;iJHFqs>NLOxDxw}=hk4?FwkX9))MPF$(hLIy!Q2MZA(mI&2l8jBB
zX8USew3XMZ#t5iWfk8~>n(7E{<t`>M_Zd!b0STTJ0N~m^PHV1rMI6B*fqm~xC75T(
z>W|-p=S(jLZdP^_K!^u3K^Ecd_269!aKR~uTTeB3i@<g<frN#F+_4OdoCYrkHbS$*
zN%)fw=5$Nx|4OyKbeF<);vQ~W1p}@dkw78{Zuy<tiU6V<gq?iQI;M}h!UaU+4zNrg
zzSXvpQjB%1rImbf)*__#AQThKgk}6Iv9V0Ln^K(WWD5EnYM&75j9epE7!->4JTq$V
zPDw>}t+%7@?hLmyNP%|)(L%XDe+H)5#H!DhMZii;pvnRT+NMH$?>$9;IAtega(e|?
zbPBbYY5>?(D!l1HCu}S$Iy5iPep^*V-bme=J&Rv?{E*wOU}%Ycu_s4O;W|Kum=Q}b
zX+5YaILb5ua9Ns{l-KyT?-uD?!1oz!4A-pwKjOXZHEU6{{Ss}}|E32#F`}rFur}GP
zV_JfTT52>JgWrrOOnogA?f)fEj~MK<F1qo;+(tlus{eUeJzp8B)w)#}QCB}5VO|Lw
z`z6%w1$0yy%SQO|;JV|^(0%I&g8~nl+C7&3fG37RnJp_qYzIaB&(iQxOr?M4NO}>V
z2qf3y)dNM4`X2^TCVo?18zF<3rdT=9z3<q)1kiMZoWp6eEsdxXKp)W1-8{ArtexkY
z>=0lxlhJGWz$vS-9*lt+MNEKB2>5yiw;gx!+X!(v!dZaGVh%|p;fUxp+t#mb=4e!Q
zMaK`s2zWXi3&y${hRH^eT|{t$c?j!mh$yv=+=l}Pt=K+hFHsL^G2&tVnOcp)AVn43
z5XeIl;w-*_OKa!a;p<XvLS0)Sn?L3G5-7;1_DsbSiW;DmOx=E(H0R3p+Mq1!iaVRZ
zSE0;p@$;|2a-$j;CbsPm@;%3@e#XBEx*f2O989*gf9E10jD^sZ2PJBoK*A1tUd=!v
z(kg9yryTX*ygF7anJ{e-0<6xRbzlC#F=Mc(#L+(#P>5#tHXGmFh$ji?EvUZ&mJno$
z@AEV5@5|QydU|P^F9Jt`#9RVYb(_602=a3OS}Ld1M<qY_zNGoCg9l}itPC|M6UJBT
zWQ3VJA5L7L8?fP?6oI2VzKaB0&IAN%WLCk{R-sW)Vbf`V)Us>l?{*aWC>rDF7zQHh
zYy5YDzHpR%ERC5u?xA6z>o>;z&vF(Y1zA<_WeJH+26JdI&B03*-H%RsNt)f_)iRS-
zPC<>?Q*QeXI~nceJw6(#nbA|gGS0dIGXw}s*E+8TOX=^>@0Frh5Qvp$^MgdX(qIpo
zDZ}=1@RY-Er_Fw9mfLK>C38*--?cI}mE3f1!E{CaT^s;eFi<6xy9$eql12fIcsF6y
zbjXJj9fx+n!M*{Tcml#}(Fi2YG@UlH*;4n}#}n(S<A*b(ODrXrcz0fS6<E0f$6#{z
zFU$a&PY4Ew++9k~spV`_|MCs>&{qN;1F*)?{^#;zet+J1t<`L>H;l(3UZFaVAtiBO
z#lQ3RC494V7_h}grPVeFa}mD%-^>*oY;yaGhE@3gm+(`Xc!?#tbw=dTzq2Olc|0CO
z4Y2$fJHFdzn;s1*F?b11Rm&rIyb+}gWRgpNSK|fEtB-LBt1x88?PZWrf&<Bj9spnP
zjHdn-Ct;oQe@h4cLFIA3SQhI#G+z9A?!%u$vHI|e4G11#y4}=j2Zl#F;>dwvHx5IN
zKFS)Hx&b5Ro4VJ|?MgOcX<0JXsr}avCPL}NvV241rWFezl=p8{c97-Q!AJ#ilxMS%
zcM2BEv?>6%ig&PT3!cTyi-0y(BfeQ=f$!pt_DU9T^yRoZF|Kg{+`9Q8EXW7oNlyN|
z<(HG-^H$O@9+5n}^Zh9(J>pk1v<0AH8TMk!ay$qS>mI($xf-Le^*fH7T$>EGxI$y^
zbJ?rQEinp18mr_%)pv!9&#r)Z((f<A7j(_S$r#Z4!5irAx+G|XE9|Gf=b-9-Yn$!6
zi;!s<Dp`B?U(V_scEQepiB&Zag^RvFxnbAbz;}~%*L-Rmsk@Q93wPJvQQRa=hGUCj
zR=p=%`?uBa000f&>8O}!HQ0x3hd+9T@34Fg7QQg-quf>eh%7Oa7})KL9NTiOiZ4mo
z?_QS5r|MC<;g<awYwwod3n5%L!t~BhqVPRmfo2|OV8iC2v8>;iJhIfkJ<@-4#C|jH
zo@2`9v13DyTZn8($5Lf(?HT*55YVR&6!lxgZ<IPX!6ZQ~$9kUVEp}vP8!=F$fKbXb
z%piS`e0AZnl`tO$Fh2szgtK$Kt9J!MHhR42L8KAnz4ctRf+vZJSyjQ3oxbmby0<AR
z>ViY6MCfDEg&`6f>YYHnU75<&l%p0Gl{;4z`RwN&&_n>9(NNM15BG&L{1Tc-lf08%
zRLt9^$6KyR*e1ILyF-Gj40J&c>Y6(M$UQ-qrworhyf-^x1w-;uQ4n_*e)~;klz&Hj
zE^kJ_!f86;`}+2Es@av7@D-~+i7%Hctljh`;!__{ETN{l8VncXKB-}Ry2bbk1wI~f
z?qkWkxR9m_34Y7;-7V_87sn2)>GD~pY&>+OTvk0T*?s;D!u*^Z>!9Ggb5pEW!()#S
zhd=C}ILcuMt0axJ>{Wj=jwN)aS*mH(PVOa3L;h6TA3%<J<V5FCFYF4yY94U)YCo($
zY;j`M&!G2{#&?ckyE0=~vOO)s%FVv|)V#K@S84O5P~?n=v{x~C>8TQZ@R5-Yr=y$x
z&*0-qxnQzMb->a^qr|SGMR<>!KdyO8XIUe-otPIu;jonEF(IAif-)#Gd^1OWpTKk5
z7stT?&`(7N<)}5WJ!dPUV{g2Yx~S`Ozx$_@c{zDX=X|mW{$%UQ{Kf&$E1pnK$!s5*
zJilZ7CoWDo=_@+}D1)JmIPAr=qa8<4m0@ClaqV8_m8m424t_#wVC><g2UcIvm1;pt
zW%5O-d2ZAJN_LWy>pI;8t}2Ac8Q!$0*TK0A<)~lYzra7po;9bQu4{J66Bm%yddTSX
zhLH&gaAWz+(&V$@-hCPyK18UW-yvQ*RiG1uEF(NLh?CcU*0%?5fNJtNt9}m2%#gcJ
z&-G~$6G8>NDCXhAa~l<sXy@`nYj4V#w60GW>8bje8h4l8jHdXdzQ`^a95gONCMe4D
zcdZNPBG7AW#~Cx5e0K|&S%X_})fW8*sQw?xny55nh?6Z&*@;WC4^w38OF2r=tvV0X
z$40~?O<U)cO^I}BE9Hv%Iz%E}2I^86gb|_UVQwhwCe!S}5xRlCSl+bE(_l`O)bsO~
zd<n~h@~{c%JOf21Slip3>gE?!vK30-cCsmQ@^`UY{AQ$8BDPo95w~MkM@F#w$gZb9
zlc6Gj)aD8@r4%O>BUP*@W<(v`-z)t9M``p&>12*r$R3T0El6Mt072gxKbk<CbWPQ1
zZf~f)y_np1TgiH3>Q$H0AMaQy!4X{3po0Q6rOdHEU(YHwr3dr<;@iiPbXDG@#qTRw
zCE2fGVoQGv1o6Irk-ntC>_nYbv|TWlbK)W#>|wYr+F~+Sxm5`qS^ZwU#k5KYPq@SD
zOzJE`e4CTpzevi6`(#)d58tN+=Dc?_Ht!8sr(nAdFAPONRZf(k&ra-tZA<dqH%AUN
zjGZ_&My<A?AQjLnwyI)zf>ctaIq&h#6C~z;ehiNs>~AHJohcGdCwRpJCDhn@{6xAl
zHNrcMD^PqJl18lDB9LkNe4=gLEQ&y<g_V`jM(fWIY}#KW)j5({pTJ%CZlrfKcae?>
zq~j(p&`(cv-LIn>&#m{v6tH;{L%Vzh@%5}m2KaZV)@%MWS-hk1+r@jgH{$ky1T0Vi
z@@d`lDJ;!T^Zt($_$Z%3K13WEcGrpq+pcbbBft^e{O4b^$ZT^nU-G-f?GmxzMrTWE
zKOCxZH=^sky*y~B$S8@b%8!5i!=HJtcmk&`uJ901MoCc77e+~c`4?)l$FciN<o}WO
z<$p<~Z~qz<Q%z7-lg_YI*4WgiOsyGQkXE%#+MCBzYG|@u5p%)dXihnqf!bot5NL~J
zjZ&YfG)vK(M6<-gqS8V`LnLzpl_Q+_UZ>|j_&z_(@+!fz-1l`~%X^tznJj6{Vf{z^
zni502yJ=apXIHg4@`5Yi3^jQMUv=n}86S!k)Zy3I_E>!|0p%7lnanc!lcEKl?bh$B
zL(G~+f-I?q2_kf7Y~n!93B9g`4o_LtndSs|3dD&;R}hZ(bTUqH%rIzZB`EF*9jgb2
z9DMbJ-1T>%SVfb*UdIirF7RthzwR#ODi4w@_t%tI5gl4ukwS_=e44eHH2E@V6CQVa
zt6@pK-t%6S2j0seH6&pn9F`GKv7A3PS<Tj!GOQG-6wHpBzC_p$qy5?LCGJ!NeV;d3
zyJR69L{#sG4OvwNN8Go|%*{k|cXP8Wy=5Ct2Wz&D`jPg&6df9Dm5PMPA0V~L5{ck>
zH>Rq!&5al$BO9xhkU%v8_9y+!IcyDO+0y@is)^H{l-X~6K#7$v6*4er_BgeUjK~|s
z?<CY@>26H5XnM1vfUL}CrVN^2NYoX73gC#%qrI~kRqg|TWWC+9<$(oGPr$T02O3l?
z84Hkv1%lRZa_!!bGNxZ}Qb)3YJRl;5kHncDZ?`Hrt57sWAgXwurfg;U^*v*mbq_EV
z)yZ!_QV&U&5ZwU%>~vGnd5u<Ek#@gZuTZI!eEAxpzR%VZ-N+umc+GwGXG;dKzj_>D
zZ7B4jv3ny~s$8>4Rt=)AW9L;MuU?VOsA=ew%{tV;VjWB{Wxpu$tgrtJ-X;R#a6H|J
z^1|l8Rd2Juv@U~$oDivc)d_lB(5<!@nyIV8@WW$;!fI>b)Z4MGE1<dduTuwl8^IeC
zETcRO0az1KopjWG59)d41%Q9C&V_Hcf(rHWSB0WKJ4d}b`PIg-RZgD}zqekmSx*z-
zvJupJ8PA9};+1;u{E*AJ_G!5IF_{Ye8YNtf*)f0b<=kER^ft8(w1^w`CQ?}%t#7M?
zsrvTCTrQL=btcp?Kk*+Nrbtq2t*8Y)p#&;_O#lfdKzyi0%)tD>OW^4Qa6Gk|pl~?~
zsH?Y?0px0^G@;g$n;-7nv@Sc?#=Kn>sJ1u`9HAYDuW$q#p#3bAC<Zj^w)Lh$miUoH
zXLkjv+Oz?`l;J~Q%Y1m$C$M`>i73j|*+UtIe2wU?_A8+KSX8Yff+Da&&WSc!+|18i
zVL<xVrj>aKV2<SvJOh&Tx$E9dz}$Yx@5V=8qv4xm)`#5K7vGQfk|7HnP(w|Os{zk<
z#l0j`j~R@phxe4ZPk;xdrCW9FYpyhr-UJN6bPS0c+jm;kmH{&G47^E^U@RumffRBG
z_$2G{3`#4!!dF8L{#?T4MUX<?yxiDY?kyy*1LT;4F}7?MBt;dGa_{p!s6D`bXSN#u
z4f;$+&{*VLT+Ns{a9)Ju@j4kMsiZT;Nv#Sz_x#%k2<NI+fE57<U@7?^%#}Ktfzo&2
z@?!g`wU9w0VJ=Px4W2B^82Iw}_+-eh0UfqBf1Z-bnrV|Obx?3sfBwM};?4t?8zVv=
zt(GW8*qs7*cC`6E%+}ZuD(?+mXtKowm!s@oa%Z0fa(j_%`}2LUp0YeSY_0{WW%;z{
z<KbFh@@6}G4xeNMzVk}}{F^Ca^07~QuM8oPJD_<sck>yUuhHfZuGU1x97xngE3Elf
zxkXm9O%zzMeGZ|yCElzxWoxYs^N+y8P)%6{W}b~%3qkm=!M9s)7vJynxdS64PVYn)
ztOy)f_lHbjvKCfr>5`Jr1ADc?iil^M?70V$06}*0`-XISx~V}hB56Oc_XUJR$HBdT
zfa=os;^y#h`kujf8E+Ruxdq=h0Wa^(zbpm&oB-%)7WfSoT^aKhb{wY(92(75V9Ef#
zc+k#*GG*DHV8v;toBN>d5D4UW`F3;5vrX_YY(}u&+;$`PTtz<|LC6lt7R~;bn-&DM
zr_RF_Dn_7ug2ww_Aye=tHt@D^lj&F3-uTL0vJv+5>QPW)+u1MfoQ5C%1bi<M;StF%
z3NF>x4qsq`m-iuzBZp=vnlnbDwO9>JB4*);r~4|{0bnoLbqN)+6oKzm62X4>DJ0}M
z7#KpEG5oA&i6VNy!J2oCZ3JzB41dzN*QEP)31{>0=JtLl1p^B*euQR%>Owx=KQP)q
z7H(E8|113v#*wtC4Vr>^<ykNKDU+bVqsp~u`l|<5UF!f;#+73<pJ70)MMyRfBkzLx
z*_yyGF|0ow4cvY;>$HP=@5rM~C*I30u}BZG2%pcwdBW^{a2o*60>2F;&!n}{<_-$s
zVI6(45&T*h7HfOL3{-$ogO@!S+?V^rv9h@iL_xSZNhI?zt>NAHTc!5$VJc5UyM$eN
zo4)?2y1sp(Hj}UIVwiLah3JZuw(Ersy}vIBP!_Dxtc8IW>a0wtD+Wi4uh7HfQDu7<
zw2vW%R^3k3-Z!GL%WBOTxok+FyU~fOL~!<DJ2y8av~yq6UN?|Env7$Q6Y;3Zd6i#>
zJb;`M_TYEkV}nZ>Rc;Nw8VaS=*s_S?5&Ec|^9pVo2GOy>>r%XlPv807OZ1Rp0lm($
zQ1E}A-s(Y8>7GF@(tU+U&>!AHFf|vldJfSp6he-T7s(V=hvUGl4{03+Nv$EpN9MZQ
zQWF@-tDBJXh=&6r>vzuA5M<DgQ820+0!vNr!(rry+Q(jjNH2Z^q5($57luxkuSq_q
zY+v5}#S@PU+3f;yLDGyk>|q7lY#ljX=SaXFj9v6qO^hgghRZSl+jnP5Gxy{!P+bjP
zfcxO2gt)q&(G>)5mV|;~LJ=zpI&8REvUNl~Pt21^2~EybzD}u`#zt{vQ~!=0*ffpL
z@Ls6$<%mGqDh_$ep#OB6@EM(4N6gL$FFQ1BbN>nYFxN_ZOIvpuGgF+YHsVKhUXAyn
zpv1qfk>?BH;pmVg(nMGkxff?pt2CikvIK(NhD>L3rmX%<ebXtB7IPff^`mp9)tIuK
zQOW3T>O)gy|8pIGTVQaXWf=bC?`D+7l6QR?%a}*r#6E1@9~cJjY)L_lOB$AIL=VpM
zEFcCLGM&5=XAj7(T83JGkNKiqv)RKXoR{NgkflU9WzsHo0nRCrksl0Mn5mF79p@SJ
zj}86Q&T9zzZnlg5pBUyq*4S0C5kOXb@beR#@o@kh@9Y$He>5l~$vbp~RR1lp|AVg<
z$5UG}Y;oABIR*(Zl!C917Te{2ioF_7Oocbb`3M9WB%%y-Q#_<Hp_e#lyd?6H=<r3V
z*LrB3^*~TyH`Q!(s<3q?j*g#=MFjCGKS}}4g>bSnuV8GHBgtn_qQHKL<Rd#R_QfL1
zYxfoY3AGZeRe3VQbDagdlq^5U?PES3|KlD!bJPB^ilbE8fF3^dDP~?y4{|Z{ih~7~
z-QRBzqI^vuQ7i9g;=R9*+;n%tixY=n&6STPc_=7yxtcRkYj^5;&@$w^L1a=Hnj_ou
z_*%P{mPjZLyyT@>-gNL6!@Yl<3Ld~}KJlMmS$n@XlTpLywiw030iVE%QVK2jHTvEO
z^FhF&sny{}Q)#lze{5@Mc)LRdoBt#)TlR3!E<lsNZawCoagEAk71u2Ev)iEoTj^_0
za*(4#S6k7KH|9f}GiMoey&whj>v5x#QCF}inJ;5$Hik9h>~Ec&;0u@dZfN9Wu9lcx
zRr9lD2;y_B&}$1k_w7FMBlvcED&@L$L$+V93mAI5IZO{Cf+f}h&mB32d^OEZdnbg_
zZ}zrq4jz|k4=i6+Wynb$qOXv0^M>p<UNn8-(15y`n5^8ali2~t@W4uY3mswbjrt9L
zy%!k<aWYEpfbyVp=ov)?-y{480vCwRbbAJ2G&fL@B}l+`pZ?x{yh#f7il9YoPv@%E
z(QFPxT{57cn{O{jLaIjYVPzRGY1&Z`<3Gafx87L$S;g^&wFR=4yWagRP3ZL7iA8{J
zl;D>_=xo1|_p;jl0k(yb)AfqR3VcJYxR0xrx#h3KksHCq!M-NRP&w0^XVQz`%(ATl
zf8K$q;)_=GMm0!*iCg(+R{M)sy4Y{06b|-?$1=x~-CJZWM=rl(L5JX<e+VjqP7=L*
zbpr@RZ3W92hX9)a;lchGlp57DcrrUZvOLH~b8Y@qP=CQ^%-pohfhHPuzbn~dY?8)K
z{{eRf2Md?d8lQ$3_COuVlUmiGk8sI5&90xnGFuGh7LuQQu+%`a2B?6jgmyur7Boq|
zI~F{9z+_MFXfiSkt{=jak?q{IoZ;wME-Z?ir}MQ0w)UyR<3s%bt)v6wnH}c5rx}Ai
z@=zb>iq!*se@FstWki?lrlzIMpd4}4i0saiql1sRbBR_PJW$zhp@2+iR_IDrn1;W_
z87^fLJs&jL&nf#CfA~M}P@F+ar4CGSl(SN(z@L^0px^*Zfh_sCR;93(A&Vv@10LIh
z%AoX_EtWb^o>OfHYV&iahp1K4ByunICzWbmoc2p%neBtG$5>HguR&+3VYpI0oC0nb
zoIB_9JdCDnaj;t;IBc2L$2mkuZy+@EovhT5N_#p7ilW4x7scji9crIe;>^>bpj&vQ
z&(vbTHG+rfy_HeW=+PXO$?p6`hxtq-wj2_qkzN*A!G!K5M`!=3eY^ENgz6Qq5h>)D
z*ger%Rk8e)oRtMoFRj%w-L})H*n~K?9_T}$;Y7npc^)h|<hXPPcX%tFLV>oG7KVWf
zABgP$*jQ!)_DD<o0CazjV%T|3FI@{cQT8?{Y>eP}Wf?gIGYCk|S=YRj4={Si$C8mp
zh45y<uNFUTO2fcl8|^n^%W=-U-6`z(e5cEILWs^`kD<NcT9k8(L_iU%gJ{^61qq&n
zA|%?(VUNF#p<qX0Fr!)XW~Kxm$Kd`btQW;|Vee)EZP|)S)Z%eK2?y5<M*<!HKm&_Y
zZ5I-iFUs5}O)pVZ1XfhMOQZ<rC+1&XCm0G;ePD%N0ty9W8@&dY=@1|V1V0O2cTdkl
zE=+DSZdu&`ZgktIXMvU9<w;O^%%-of51Xw<cZ)qC6Hmyk9S7i^iqf5-pWcL6(X@y~
z@Dc=Mjt26Q*#xky4~Wva7n)v_&B}<30H1H<Qd|vn?b^OM1TDzJiRHPhhLYb7hpoIp
z3_vLctv=ugnyg!g=gGSF+w_oZts9Hvdt~{f_NYTwo8`RcIO8LZWsYt-OL|Av*<umW
zIE{9i)^*Uqx_Nrm*2s4($8Oqd3cp(ouDAY!3ubMl5{D@QqfI0<7c2sQ0nW!Tyg!}p
z+->=k*yS%jtPkrtzW5<Jgp~*5#Uj)VXCLt4{Si`Yhy~t0Jx$x!{h&vaQQ#0kFg&=1
zSUh$qTqzB_>N8B4E+q)wi(R~LY6$T*HSl2!qTJv4n<sY_Orx?ELRZ`fQ5!0W9kX)g
zOu%?J?2hxK%$<!d-xVt%)F_``+)f1=Q^^WF2q{mz6Leeh&SZ0O7MH5quq1=Fudev_
zO%+hdDNX1%DwkD}2<eScuWiIAK-t+>{CEyDVg)T{Jyj~JZzUB8d^i8{Vx_9(z%-MN
zy=g<<U<0F*t<#t2wD$z=p|9+!dVCPogTc;Na&ZPxD+7IM3fC4pKM~J`=*yvhUi_X@
z=&i6}7mX?pa9>mC`xZk(^NAj|YZ8OKOzTbrBduX{+w&7|Vc-YPBs?*kFHYu~8b#%*
zbBDf-My;Rr{R%Dw@HZmO0D#GYBc%g7g1$i4$mqoRIirm&Mis28WG?)+gwsA-{<L7(
zi#AI{Dr0Xuujz<k+Kqy8h^v_E%lSzn0sd09k1?1`&8h%2Zpd(}XiEU(m5_P@m8Wi0
z@)1KZOWvWSpDdc@gF`55&(2hX_b)(<k^c-9ZT;!v{wpx40nA7rWL=bP8E2NPH9C&|
z>-01+d=NHKI=EMU*`ME(vy{WL@q)+G%necZ&~8I4!OB&k<z?|pK#*DV{SEwfkDeR_
zj?ehv8~|((D2&KJ1Uw6a3=+iucq+5v?wUUrZ!Cc-CW3ez%sQ3E20usO-Ti-l3cF=@
z@qs3)(avHuSwxyzuv9vNscI7;&TWsbhT3HrTu5h_1X2X-ueqUVwmxgOI4w}MM!6dh
zZg-vASQ@C=tVkF*$^X*Cnz=I3NIx&SB$Bh&^{-#D?)lQhOp)q@fDFRl#0vh_I#`>w
z^LhSJ;eA?3bft*?!E5!41<-VVn6}THDPpA~>wqyiH8$aMSUNnKi4KwSjnn{cczw|G
zQAwr+9KVi45Tc5GyN78uOm)t4&-3s<4moDL(KyAM#7SKYNcUbTYH{MpQ?{pDt-7O`
z%G4-FeZd&Gz}yD<AKP~ZmZ}efjQWT`MBUpCNz5o*Rp9pb4FG)C>GNpPzS_>jzuvLT
z*J|?LjJqWe;KWB+44JyRhN<(2Q{5zbKyrBEDM6-iH8n<+IPueDE&Q%a%xH)bFVoJH
z{AqPkxVb|^9BdE-?arTp>yX>#_&Jn?SdFOot7Vm(o`u>*uLdL_O<&}(en*LI%CCn+
zI4K57>odo!Oz%adRqg~ZFP9%?G$bt{{n*K#WmivqA~|bdbnf^p4!#%5XyMh4Zel=T
zX1*m|GBBbl)@w(l1JD|5{G3})ml`EEHum6q`vN|#Iv&boAB;+^axlGgv~%7C<v@5m
zOeunQ`wm;~+^w}31NxbLjT8~D4)nNsr$oR5VPAMaY?>k_ksEjOTP7d#<Gzyr-S3eL
znn0@S`2uOygeZ3^n-HjW^{s4p*TVH!P{x4@MCnbL4n2+k#B6Nt^y%W|gfx8RJJhqf
zQga5y<W^&zg<{y}YtV^#L+n0YrjsDX=c!+OQ+UPN!Wo=(QBJ-5%GR&XWVXh4g$&O6
zl@0!eb}Z=d1c(Gz7e1GZS}n6FlJL`|b*@BljRKE<MNh-yCaO636y%N{MZVeEopChR
zIszlBr!688@_XxaX$)V@ux-D`c+@HmhS%{2Q@%q)FC_hhi!%bivWcH54kk99sdJjt
zVwmtbF&|Pt9W3{*J#CI?$Ntp~<J?_|MAlE6#YESk!_K}lCG+vVu0vE>im`N-x-9}x
zfJ~83kV<)%t{R&%Hy)Ps!0}7>rfh|szpR;8BeWTcV^`PsZhSDiJ$cI$>Y*Xm(j);1
z{8ar6vjs-6kJi=NvpT588)^>7HmY9+`J`65n$4NJclUbxk;d76Z#RR=14ozrMU1uU
zpDJ%}zbI<xxLN{*wAA%K&Km#wGn)DVjZg;vd_9K_jPz+CwH~8WtGZ2%q?WG*Tr)HZ
zjIV3f;%8%>my{=#Z%QQk)_he*B{R(H)i>aeS9icOUNcoD9nb^~c9B8KtF@K49HKI7
zvu}|8rRpZRvJ;%ZUc(jZsmX&k?|$O1@x;cq-|*w2^o?pNc^&9~HX(s(f6hx4G*N*W
zqf6D66fdJI7*y<B_yaiAVRP0T{t0A-Kt6Kd)vqAB4Er!3>fTps)tWoFPXqiq0)V_o
z#sPJE5OJeM$u+MpR)HB<oc95UGu}t4I+<fxlZTCBSvA%7+LWK@o+dJZD!g6U8i$gS
z#s0#u({ej?<l<fU=~RbM&zomV>(LCy`TClrqVMl!LPnc(HWyCKpEtxV^7YS+26U1z
zlx)~`rNr8~Q+LERrPyykOK{at(^dV3BA6}Z=1)W-ufDFWr7}JXj-XNQ#}cb(cQ>wN
zK-2r>$+5wqHq<g`=r@+U>b^Y@>g!*Qco0=?cAsuj%~-#b#8G!LFco;MdgaWa8wWJk
zErtTNXkK>$L}Q=tPX+~+m$Uu@9`eF@XX9sr!`;75f-aWsjLw%H$|89+_||}Jp6Dt_
zg<|)dSS<DH{-jQXvURpR8cN6ZwPAp;h+LuT48`4m>vc^DmaZcmE8oK0-aODG5SLnv
zDng2nJX&pA2-!a{>i!3xFLW|_XE2H=e6S|OH6VVm4M47NvVAu|3C3$9KMKgNL#zdm
z*tjVKX-s0JDT_rL>t&L?dA5*q0mvf}a8NA`EHz|Tp~iqHUyFTSH}vO@flq2l{ZnWz
z(pSiMIb#v9+7KL%1`{XLv2SK_0-dv2OM{of+WeSurNr`2RcqA15MK5w`wQ`$t?f}&
z_ow72TKNMDOCmazi#C4sJK_4EEA~IeTk6B*`;(ULq9C$lGP_`@Q95`P=u*JJ73(En
zbB|{3(s{T!n8R+gV}J9YY90+c5B5X4t3b?TcyyAr6!9{9(qACD0Bs&3Tv7k5ogr$g
z<{si12?fJ-9vC&}K>lO4*t3=WlLr1TX7K`O)dI|lZZIt+IRewfKEp?R)w}8*!x@6B
zQJw<{{pr+-D`u-nN08amG7jj_ZZI|>!tu`uZ{^bD3gu!E-BYK_8+S$vfO3;&-H>}e
zmEPfqGnLpU6FqFaW>z~Pv#;sMm_azat{IzEtrK)g>Vq@z))@A{huhvGy)1wjE?X3M
z-_F294@XE%|2l<M2#?<V*J;soyS00G1hJlWhQdy@1WiB847Lp#11&R^rb7<Vw*sOK
z5{W=SgyCID+&D|U#ouoI%&_}xQ)xasL~RI1`IJ>0JPcxUVPAMarcosv&U1v5(#i;w
zrx(EV>)ZkOZsk7*`bO+`5TX4s-ZLNg(r{=sOX`a@ML;%6ZkqR^^l{NI@YvDLnFqF{
zgxvwPuBr6ipL^%;y-GL%n0UJ|dF16)LS>a*9a$}F!2(21+nz7=cg4TX18wE+ScO+G
zMZsJZ@0hobEFB{EaLl|Hzs_u(By^O4v))5sLPJ#bk~rbmtD?^24*(@~jOVob_rX2h
zeK?DthN#0bqT5$)fS3+l*c2=ZxYeHn%hyMLb@n89EE{MlPBDo2GADnDp6V3Ah(I7D
z`453)?{DL2fQc#8ur}+civ%CaxU^FMdUFV-29WDn?eqZ+KVnh}zPrE=0)<-1B<VHb
zqj>ALa|pWLZZ$o{1Qo^qX1c{SCtc=3Hb-|HL`Bn{yGDEpTbU<{QX)DyO(a`(IpY6w
zj;I`lb_FCx3t=2{kTo28gkE2PWYN<P^N)=)UiK=_1*s+I&hPrtKWSNaGlfwT0-z5s
zfP#iH(U}wQ3`Mso2e!tX3Gjn*h1RXckK~w?7LS!r2s@gd3Q|KRe0by&u_&cmX(vAw
zh!wKn;Xw;sLM`{phyE)xX78v*ZQU$>ZD%<|?=L<(5=1S*vM;X$23_QP==UR$jspc#
z>qE{hv-=X{p&=}}%@pBvq8Wk<5;6YELmami(JVt{GPp6g(>aIXTkFv#yseM@wQjmt
zmY&wd(m?S6zpfn|2%}*pwK63h6t3MMT^<4u7of-vEx{h1W)+pM{&9)}B)y?PH5V)%
z1Y+8~FB6zQ?k|dTlnrRu8+*j^_PFKpTx-#37r1@%XY1^(R<o%A@#+y@u)xfw>hG<N
zea72!-RdlKCA@7-cEsdshXP=|R7BSU+2y_HK?3%NHs3qnwNkSYQYC{{m+^iPgsf*%
zw_8>AG12w;-U<^~g=r#_V0$0<_TcmRNTs$HV0+;rshCwg05rFV$pz;h*iV&MmDb^$
z(ROx++-R1jeoFcxAO<a~=EAv~t+Z+_F-^?VHe0_7`g2c)|K5-(*1=kHmEDPT8brY0
z;PTmud!7`bIftO$5Q#4Fp^dX62n@{WFBW<sATnx!`a@u)=_P#d^?0?Ynccr6Ga8CV
z%=yQs$ij=AzJbGxA=kijS9ihw=IAzW{SN+ZJs=ss48~Gg$ws+G;rrp<mN%DIJVFOe
zcJ+WJ@WO|p%?K3J-v-UTp~_`BcxoHdylQRjD=(~q`-nV%iSB-xk%awGgO3hboc`N$
zX)SS70W!0eh5ePG+Vf=(SQqagkB=c6s@g$$*GFw0-lXX0=-Ra6(SQ{a3gZkBO9Gn4
z`rUgk2YB$o^CWq|?ihZ&-6I>PtqM_>-|S@r`sNhBIE{62?7~;J@8*gph?#1)nnnJ?
zm_*C7uxlpUVSq-!QFp7m{5HOCqynIQe3O3MgeAh`f{_clbzVFmuI4>DjwfjvSGDTs
z_@gKPn0vd*$Kgjm%*y5Iq#w^H+QZl==(XBNZ$Kd0)lEYy|6znRJm<P<_?zjw0>n%0
z<Y9|DtlG-(Q@8hzI^M}^2uw5SN}Bdu(~i_{xb+~JD}{77m#X24=e9>|y%;XfI_{&r
zZBHJu`y0)hOty(D{vP!kSFZ~7s#P1zdfC3%sh9tCn%wMf$dvad4Vt7c;_5fjri*`*
zF^s+@h*79Gc4AarQQ2YD&1v-=j(B|a-S_BIE8Vq{Vu4YyCiIdDL`-frUOjg=0*;^)
zm}<rwaT;^!pp&u0!>m?K3pfw&utU*KDa6P<T5I#?Nx_(qthjF+sC1)jj+r9Kwf_Wa
zOuVImhrPdYclR}^+r%=1YrwdUd*`(rvr%9B>=F8N%sTpD8Rcsi=w+v6wtwxIxB?hi
zKc|yH%ROdA=A^G`h}09~p!A$HdUAHHlViW{H~N<&N8$bZ<krL5I5F^gJWtxELw6fx
zezE)<e#8Fo0LTVElXhUaua~Ph%jBF5&ISvuI$s=WhE@fM0?n(5ZyYg;cxl?(n%O(~
zXJlug?0NN1DH8Gc2QgplrD0UIkF<hdwlH|r6HsRai0Vhi55|NN*Y+`;V@bYsuCrTr
z=OjIf=?1#X1I+uw2vYeqPcKemd=44vWJf++xF}}(oI3|%lUPb~A8qOgm!UD9v)>vw
zI_lVJw}Q3~Q0+l)ljyqlPNd4OkANtwPU~yRBstYggwaDh^6K4FDF=Qlm{_=vj$wce
z4dWB>NfP~{?d-?a-3I8mLZNZ$?|f=ffJ>;iGsC@8cq`dCHJIbs^i2KHA4H)8rqsDB
zd<i;PdSO+-%l>%aoc%-wP^7_>Y4m6N23UJesKJnyF>N8U{702l@p0s&8nqn^A%<S4
zi3#HCGMyWoYPM6-8g^XlfRsSVGWU6(T?_`3Q1D-`Bou@&8eV)w5hedTXp8m#HkAJA
zgo^}D5kmiL!i*@zhp~waw@Lz`WL=yox6ZMbI|uqv<-*`GCX?*Gd#Z!Itf!7JjdC7N
zjUexIvyHS-!^;v3F^OP<x=!|xduAVCiCLcJ72}p(4B8^DxHPWvQEzhZS9P}49v-t_
zoIThB2?a-MfBGvO0z4p2gFsn)HdpqJuhsc}-hYVu12h2c;p)A8vMVJ@iX&N~486OL
zgJO4mcy?m3H^WF3fb@1t0yQ?#98d;d=20lkZGjs-=Wv5a(@u$E#(Fi+7W>P5)uW15
z!kad|j?MhnNgpYDr^&Ah=nr1L|AnuD3|L6}$=f};f<!|xSj;utgnNPmII12_yj&~V
zl1L@N5GWRmDm5kRj0Ij*6X8f2dD;SAaIkdk<Ia+gqOm(z=?dy1|0yrPv+ebxjU#os
z8ACmvV|f;9gTUB1@9aA0jIdee!XKGq1(E`iNFg4k`j4-Okl(Ne1|5Q63srKPdal7F
zsg_Bt0aD{@K44bNht{>@nb3VkO@d(3c6VmF)vT9?Z-q2AGGP&L+RZ)xnLA?$rXVb~
zTE(d;oP#%vl-YkmHtuqSNd4WUl`UFL{mChadB1!4w)hfwzhrEA2?Y6wlTNi}APBsk
zVnMCuu-JD;AvHU>fNoWq2Ig!=<4}jUKolX^TJycj%2OsR08775-wb5pj^}QRL;d-n
z8A$Z#VpwKiXD{!0)n4lBYXCK6T)a?uIC*P7_8VLxh=dG{WwDe^Msr<&gXELJTh6md
z2qlMkXs?hJD3HE_hF11MNN*fRkGpE3wb_`^E4A5m@s3D6{Mo_#ah8#~?JY43W+}Ep
z9^G~AwTuHeNicI9kH`aDk~3ve+NJ;X>cdu+f-H!&e~Kc~G2)12Ro^#1BL%Mf1Xhl;
zauR?{Cd)V1_^f~2{CNZpO0Q;gz&1f^YnAj;)7_{84eLoP-Fub_`>Nba>`QbrRbh$H
zZwrJoqvs=Ro5tm=1~z9vOZ95xUBsUu>6@?PP=oI$)?^*S40hXdJ0^S`SQ?N9RAOMd
zdOcg4F(Cm&`a~;tQ)sO7LV(h&GnNC=(k6ZjEwowgdL@BT!;Y@kG53F4av=%c{Y!Xl
z50{f&+v7hab~oQf&opa)nhJkr9+&_OhgrK&i6UC5Ej7rbuMRUa)@o4D225{1f=JZT
z|AWjhAy?IeY*gnPS;w7Lr)j_!L&E0k`r1F7LLKh_#mnh;ei+~BA4QWI`?}RfwSbm^
za-AvIaXnoS@7_pL6M8B14z{tmr^N2(>^Gn(M*fk6`ib@D=DclInxV3};bbrO<JqE0
zw72TImp3bu<GY6*m_!epz82BmA@oS8Be84Db}K|vLOn)JDKBkcLdqm7XAb~Sl>MZV
zVDH1p8UKl!nnZ+Yu;V~ec%P1C)Y?<+uy{I#?KP^RiXQdnkvBGs0taG$VEMC6&PWy{
z#C;aj;S)9o#0H?I8H0gcX~~5v&Any^FBQDb9UO%bB?A>lh_p@sa2DLIhO<9HrR4l`
z?IoNfmmP=(pO~!S0y#<LkNrV6VC%y`txIPuJzfNIub}LhH(|#rTneY6azWUH1Zry7
zsu_5__?ZGGD6ss2<<Z{t5-uAF6BFR8JWaq}-vB$%{4|R<oY3iiq}6DawQMtu*X#1y
zATn9Yg%2Rie}88UOoBQ*VcP1wj;y3#H|Z!s|B+YEe+Qjg**iu6BH6X$@ia)(yei?@
zgq9;D{qaLk|3of>DGOK=f?TL6b7`Wwgr;gA#DoWauKBb#>ub6aS%yk6`L!cKevpyk
z9b8~>_hb&iC(Qx_=zT#XwtZ9P;*`iF!!7~JMOt^nWC`1hmK6T)RI#f<<v{q_W@&OJ
zKVs3z73m&;*aM55B`@JSIKY_6nZ1Fv%%rn3K^$yXG_)gZ=X33&HZTm(qb3hD2Uc8~
zd>U3Y3z!Qhw;%xy1`TT=Z+-^gEBO4myR-4fBv<=lP{|~?d3zG*oall?HRou2!1i@q
z6vAZ7Cj1FMy>&_}BOe3-4_|A|{DLoLvfF={GM8cPA}aWr0IR0W9I@y)zJJhFZ{d~g
z8t$$`6KV~1v0u*of=T@Y_g4!R92y4mgI%qod_H?QmKq3s9ssdIv`u%`5Pf?-1xg2M
z2Mw0u>nk>|Jh}8!u#J9UP-CNRP;~T{nC_n9^tR`L9;dcRw`Jzv*n_FypK@*sJTsMy
zweVe1@rCOD+U%zRHwT`}N;bPcvGy}dqgXk!<;4#WAx;1gi;41ew$=oVF-73M{*O6D
zAYJe=WI8-1bCkXqAqhhhp`ziiOn<BrfKh=4?Qgj-SIsgujwCyfg}<-3eVGGe4DSs@
zYapbvP+y3slN2wZ_h|P@25ubtReRo)9$C6=H(wKut$^h)KEuBHoL@XMRU?vX?Vz^B
zg02T_@jqb&zp$^~%2PLr7=(L#Nw`4^bxhd*z{CEyACd)*L{oc~&|^bpsuj@<U`PWY
zOjmed8@z_toexFy`g|kpT`5fT*25Qp*uvh+__(O6Jzp4v&>Tn|z0h=L*FD*Z3_rZ2
z7^=Mqa$Wz72)L4?q9qUash}0aF*iP+*(N|Xt2^|pT$S5*LGtXYT%1Fi5^@80OA0C+
zwATNE;Bm-XuQ}t1D~4Oee2lIEpUyv^chtT&d&Y)jz6}b^az>?f$&F*(NcQDZuuf{T
zJlUd)RR+63YYLm2<k?k|Eq?2A9J&t1{+nCg+~GoPf9Z3`^nSIn-|i>1!Vm_8Po8ax
zU_lGG$B|@*v?<gvf7SZI5itJrppa~69MlV4^v&y+4KCSeL$=S^@+p`iS5Wx!jg?k&
z_ZnJI1|5zr5%&=n9<EGaHMp6#*FNxB1uKDQZHn38C1%n8b=uIQR#2o{=k3Xuor<^v
z4^0W9lfCCY1<Zu^AKz*TG_rEL9P%yY6Q>3rL@_#hz-;MRo)*D^tnuEG4gK`LCF>?7
z)j<Zu3=+iOXvg<N(_ON;hcYF*Mlcva169%|*R)vqdM+8Vt1|Mqrpe8cqsejV8HkKN
zbN_@A%keiF(B6pxMq*~WgB(i4f9~$$4Im&O{wfJtmxCbjsSa=L+x)41;|{0roqUN=
zvM$qNdN2M`?mH4Z&%yhQc?0qWNS%kGcnte*{3`ms%@~0HmPV9Ino=vfo3$oQ#oi6r
zgKzTSFQd&nUwidPxdTi@uInp|d$OVHJE4lr4rOT$d;Q)~lE0s}@=u0Ij#MVoLfIk#
zX@5AANyvG}x;eH=-RTSEIlF+ByG9Jz4Q%WtUzW1=M_#IqfzmFe5~&R_$UOKXSWvx0
zvbulDKB7(%ia7C7wYH7*hgk3l5bT9h1^vw0t5&*MtK6IhdTN+UU6(AJ4jPb{YUYkI
ztYXEz<S8<N*vFn;CjKWjXr3<woFc%{`$jvwRvx7#F?uRJu2)r6jaIrg_<s012L86_
zb-4VM27v<e-NRAA%)iCVMU3`Vv5+SvjUhwZJ;toN{vxe7W~`qS45P$?I1MudFDKca
zY<TDw9>nl<%swr}QU#rn74mB<Bx`q|j#c%JLwZ>E=}xCAD>ab@rN=#1ZocV{+zA5c
z=OdHa9fu%^dvKybrqD@AZw!icz2hvV<q|;ua(E;e9xFdAWH4OKHRSv4$xg|=iQyTc
zur`g@p2OcjVx8MHmlzON!z^dJSsG%6!2w(PExSvHu)B7D(pzRSXhsLb0T*0Kka8PS
zH?`pz<GO2f^EOsAk&wc-OMs{1_cbZ0C3qG^1V^W^$dTl_2Ktepl9C_d8hF*Hbr-MJ
zYy^WoM)yLf1JIY*^&Oy8Ew)*~VHIFN%$P;&@C=t%5S>Bn&UfVxm1@eAItsUCa!a2S
zC8PpB9yWL9o;Ka*l^J6Ny>Ha(4CWfYuLmpVw`@Cl56(%5VE4~nfnT}(bI8rC<N<97
zXl0RSe{PSBVJ@rhz+g^l0zKhg_)k*K7=t^*oUI;B*_o<yZH+33AG&scHQ?Jpgv<k9
zPs6+7`(!DUO!NqI?DK|TQT2;6C*@yW(B0V+YMK4Ks@A?t<2iHV*Sn=VH+A#?QtZ`<
zSTMtb(bw#>;_<0fPVt5TSKBe8iebvK9aepZpNM?f2Jq_IF>rg9lxCnLP(y*;PVIXg
z|KZC*9sb@M<^UYi(Dz#d&NRjlm4yT`qq4b48eed(V$Y@wJEAo2baORJs`GqD?<Tbf
zERQ*!mXQmkH=)l%R9J`3ko;QP1<6*bw=n78<jknFH7xvTj`|qtk13l(<7U%;;idRf
zvO+^l+S_Jn`<gFR=Y=P9EyUI}Q@P671_~uMNi#tE*J;z@wWu9ZXy2A^v6AkWE_11U
zW}ATPX0$mGckbXoYT)+8o&E|#!#OHk#O7?ac8&>Ki`uX~E~ig!FNt1OS7#LS8;`SI
z6ndKCL7@QrQOwzu-RgTGghokW1H*9Z=6@Z@htLbnFgGqcLMu-;(4-iQU4s|vmj6mu
zK^Z7qeZs3dwda_Bra=-Nsm^%OjBvDgp)-sy1L~TRX$U1sCg64vnZC0MVNqcfL4duh
zZ~u8?m0Mi{(>G9Ea@Y&d0$W~{XMS4!dWufLYSRY{nbCdIw5YCsj%~;`MDa4)tlc1w
zOpt_z+zbKfDH}XTx|-^bPO<Sc#q(FfVg6(Tpmnd-XL1RO(51%Wz=u&O!7F5Ux@{&s
z2aIaO6$qeS;=iZ<Hz{B@8YO<`7f-uT<kG);iA_Rv{9WT0HM>3PHEOuG_wKQ`N2b#*
zd5O!>Gr9`jI&1sOtDpg$_bGXhmaf$^(DotIV}IDKE%OmJYF7?R+S4RTZB~-iep{AK
z9esC>(hM6R#j|O|!7$_mBUpJD2Y5Mnu-)hdy9p$d4m*4_;V+?&p(?sN>k+qr%+-ti
zcTa8^G2E`incc{aDbaW<21*rZaKAQbxGyf1!TP;|f60JTEGY><F6HE6zP3@25q@Q=
zg^G~M876=;Zv*J^g8_2xg-iE4NlA5@a7$})Z1R@UFWFvWKpDg$PWvM3P@S5-E{YkL
zR=)m3R&^(@lSS4PFV%>UaR=bqJv|px1IzASOO(pu&J>Uj-w&*`d<YNT^`q<|x^u|N
zushYZw>L5HFMYb8bLEykslkpfczv$xV7g0=l{M?8Jt3enZ`A)cJ)csF>-B={Oe<vr
zp@G%lqoza=I)%>aP5aD_Bi0iAp}V@>&RV8w5zCu_Mfhd2(N{VP_@LZ7Jwbf2y-&tg
zM0#~1?7RR_UB4M^>30U7MPx7-AgMLTcWc?_9+v5mVX6~r(W0@*R&_XuDI`zD%zD%|
z*zaU94@>#OyN5twZZRl*Ro|K*%{17v&sdGnxwdAw0NbP$*+Hzog`{*314auQb>rOw
zn3QA<4Qz)hGRX-qD$Dz7lH;N2`Uh5av@G3H7T2uYl?cc~HGURq@wNk0gn&qj7}I0p
zW61eL^Oo~+NJZirVe$%=OTlIn#@Cjx9Kz{5o5~Cf=Yf7sKT-z?2Y<^pm6p>n<XJl}
zH&4ASd+CA$)09?ZJxI$P*h1G?Uy7&gn@B2hA$yv)`A_>V6d6!E%+(CPyt)ZkeNgE8
z78xeZrq@GXs^p`W*tq1z(yUfLK8jIVu}l2sYX_!23CRKiy4|qk;daoJb>6XR-0fg!
zUor(GmSd~dHKk3jwacot+16<fAt$Q_>fIPTiOim1$01H6br<W~&fgAh=p{z_NpzBG
zv7*1y1pJX4z-}$G(HKy;jx%KW7GD6ux3gSRqRT-X5r4lZ`3)u;JEoPqgA2ai>Mc}h
zhK;Ch%P*>@ETx&(N<V6`Xb#48TTz+1VDboP6g3GX(K;E-A1FweDf95A?+G>$rx@pk
z{CNBF$~<JnFyt-Mv|qvfTTX;rVftXnTs@;lXO8d!0jQ^b=O-tc^d@yj9m-YYJH<W1
zx3!&i?Q)DNS8@3LzfO5-(FOQ;;9IysWcy+mRk}Evv;jwYx}}DElc{sek>zw9TeYbh
z@8T32DyeFtjVnRwfiZIZksgoiqpzM^s^J_&Br2_0x_#wNNZ=vsZhSs#LxnzFn`TjW
zlCK?E{@p&MbqHg1>~lFjG{lnV`U4&2;z_{v2KAgT6U|LqIZAl`ta?f0g-4FXV6JYy
zcM>kvTIlTw6B(J*5m+I=6c<ECtUyuW&E=?VVDn^<D+<;hSuW?VRME}t>uzfA@lE<h
zXN|dr->r3p=Cg8`yYl>{CGbDz+cV02Oman=wMQl^1=c<S!2h7zVX*ww81ZatJRCS0
z8^~7lrT+>^_^KqA8x+0;W_!M9)O8R9fGJ`NWE+r4fB2O%FianKTQ-xt5Rd{NZ%3}I
zN^}FzWS5$68TwG>zFyDWnm<cnR5OM&R#zJK^7*&Pz?|W{Fkg;9Aa=e!x7iiPKy?LH
z7(EmP&(romB@zku`qz_E5HKn2=?1Q4Wsza+0VOa5gf-AsfF8%Ie^L>WPbJ+@;}?fr
z=sdmnA->Og7tF`tlle2)k*fA1nvO32xS}hh`d<4pF5RqyP<L$2bR~t4@zrfs+RGc)
zgwKBYD`fg>)Y2_6o3v>3xA0+Y-{RFdqv=My#k6DI-j^%SZMHjDny}}~z71k!&)^I=
zkXpw)+~E-hpa-w$YtMQHzGG>OpNIiN04O`{a(|ve2TqX9+Iz@9gMM?909`QjN07hE
zZ>E~Wp}KZ-gp0n61sFo_$J@X6s<I6>@XeWbKj8G1)uW`M;9g9j6g{M!TO+q(+ic(D
z?haUps8O!gp7u)l2DfRwefhNdH-o~|Y)8<Sk@dCDgKM)qY$hwV+wyn`yB=V9aH}wp
z3-B~(sKFZ>C)aiQ3=4jdyW^lm-Hxt<I6PbTAz&^%jZl3dPQktTMy~+#qUGJ15{dwo
z4}hK2=1<RDxR2ymNdW*W0AZJ=4z7##Sv9$tBrNwPbFSN+tUVb=PqCqXzMKwP7564f
zjr3(_v{cDQezRg4O;dCiR#{g~2K{B__X6y`L6O&k0@G&o`Fso#P+z++)y_8S?H+JX
z7SA(v$c64pekp8UV?Pym8s^|RUtTAAdktMzpLY=B7}UDJiYulSCpzYiZGcu#LDJBW
zUG-Jmr!R;z(!y#9^zCdcBXiYS1%A%Doc*~M3YSJyuDSMWeH7lx?(K+G;V1Qp=~1Bu
zRg<9wj?YMq5uQfx>V1Q@W<{Ih`x)WFAYXzc5-LD1by)a$%K-I3G4y&Mzj6OfxG335
zPxp{(XXk``yjC5pvRJ0i!FtTmPh-|OtBq&uDIT(5U(HV6!j9VuzcUSu>yQOs|K!sw
zv+ta254=FxQhJ2M_8jKrC(Y;&0n}*2Cu54gcp17SHi7P$3tIX+CWs&MEbbKJu|+;D
zbY9CZxqmy5S%3^*m^+f9ybWECV}U8XWCdN!+YF*wA+lAFn2!g$8htUbm`F`*V7p$A
z!L#b8;c3hHdU~!?Ym~=zf-*E&yf4-^XIC;a-sA}1AbU6fGz=pvlF=~MFXNfI1VVW6
zu@2!8TrEmGer;4{oU3~Fh{(5FeBX6y>^sP1olXMv0cIr=W%r5M8VZS&*y$~RPW{S>
z*JAOk0Fifb=R&({DKT&KPHO|(!-H1pBrhJfIQGI5&uh>*PX`9Kvnv|2tj8o-m(2fp
z4Y=%@9fwyy3#cA)%~N+;qo@}QVkwPxEcu8zwR!5<FGKJ5yW85oOB_uw$<q6cY0{`d
z4bg4teUR$~q+s}!W4+!Av0t2<mCDw-qLapeaC(XTWR8v0EW2QC$?}i#m?4ll5kcMA
zI|EX;Kt#bGSB+{hI@%RLdXPjdQ*LbBnIjk#tj$dMAq-Q!QY^j_)d4~L>|6^`#k|GS
z1nib<ib<rM!6nRIeLPIKCpH2DniFnNM3Mt|Ii$HA{jkiN@MKiE><O8u%IgICa*2Xs
zozeHqV~PjO3|{Dt)lM_4hLo6PUA|rZ23M?aq;m2az0Rs^i!QB!c4I08*tFiIzQp{1
zl+`A2iWRKlqVH{=r?TQMp1vJqQ23=i?B$75+FN&9f%P&vIg02}2pJ>xVDHm8(7B-N
zdT!bII?7N@&lSojGEsLgh&}C)>RLbaN3Lc{lLdn`Vra<dfgJM28Yd^2K}B=Gxcws+
z7cP*zb0o}h1InTM?3kdXl-REVMkT5P3{x2p!pT5>!f61i+Ou5O&ZN(NQPLcKPjgA@
zOZeVhkPk-GEfUDvS&DGvMDVP_Vnx8^kcXLlI)$;)C_l=zY1aZqG*c>!9)^=`&g%=#
zYF;*)nwBY7P-A>#UaJqlV+9&czQcPfJ&(XJ6b2lzQg}J+qkCRpDuRqxvV7@R?o<g5
zYgHY-|DkX`>nF%QKr*2jnl&Ie9P?wJtm3NZPkxubv2*?2b2=+PtE&E2{@Ne?`I57P
z>`J7>3i_Zqzia&hR@>7s8>ZrU8?urZnsq$06eV3!w}mZfR#+XZ+Pcfj8rX-ECpYk$
zMBFa_zO8gH^;!VOa73_$=}5Gw3k1o$Ve$O6aM_Wdkgb5f3dv6V>?g(^3W-#-y{{XL
zx3MzOiNmw&t9tBZG|2k-Rz?7S>mj7L=8)hhE?P)`DkWWN0Q$kzK`ip+-a0j6MsIr@
zwNU+!FhMLwd`Uyux&#{BydM!`CxaZGCQi?^(q0n+Rg(RHQ_k7}=C%V=H4uUMS<FN%
z{p|~trVrXukn$V{mcOpV7sxoM(C1t|071<8o)F7G3#yD{(cJC=;+@K<OM}6c31K&$
z5~*U+v;0P6as@LsDWE^8W)%mwSv-^nJFK5nojG|Jy5K06R{G)69don^2??)Ii7Q1?
z0p4q><to?gLn8B^%r&V)0c=hCXG){!Qp{Y46Q1T?`ogx<76P`k8x!7d#Y4w7`T{th
zSr3E(SRWF20rX+T@=)tSfAruNa*$|6NROmiOGOr5GXGeyY6q&-V8r)}(g1L!?_#Q^
z=%<lby~~?VR~dcPZJKp)L?!D4GYRx$tFOnxLY+7~P7<CRn`nH^voDQrH!k@RXS)h3
zF9!t&z9G6AWxfnMa=~~^ud`Dp;FrTuwl6@$9-04_*~}R`rl2c6&ULnP8)N+py=wM=
zy69W|16zsXh()`TVAkCN!P<IPDtX;@2(d-1@66h=>D1vNqRg9*3BKMOx!pYU2C%?O
zNjyy?$f)(XVd2@PEkz&8<^%UVQkFT|sA3fegTqHG=GWY*4pti+sY6b7rkWmEstzr;
zdE9l5f_r)S*zO3tqGYv+TT|cu0mX_?|B?REvBKIA3p0}b8<4EQBn8s>^7#IiNR>tg
z$gylQHZ3He43bGv`Ek0W4HI3VNk_I`g97D|4(uY4TrEfi$4@(;P+AoqXd+>xJYByl
zxa||W!{T5H=izN3N7Auov=i<u8a;&}YPs5Edr4~Ek3q%*MS;p_pZ7tfvCN(SGbCn{
z?&31Va1K|eblpjb!2x8$?sy_<IDTmAsEj*l5M_$eQ*rkc9tY_P;9*HUm~ejFU(7)a
zQi<08E@kDq>zZ%%i2da?cQTp+BhsDKsy6+A#s-G)E?L07*U;O+;bc2pR%Q&WuU<L^
zoE7e562We?kMuRZ>RSQ7&%Ci!K&}T(V?GpSoWx+I)e-O7>(iVDdKOl*20~3l9CX}4
z7Y($7XH(F$OpC^-dsVjUJ1`*Gw|BK<qqd|;h-mI5y`Q{*>^ek&3&psSjS(A9<GuJ-
z)h#jfHjEwmP_Dcd_sBiuj4QL8hdTUqTed!dUQEt)J5y9q&Z;T9^4&Mta|vR-v0we7
zY$kB&*&jE~QrbW*()zJ1pZWmd<kg*vT}IcqVI1rs3<%&Do(TKshgtt{-B3d+paB;e
z;kriUbb^xlh&Avcn$Rr|ZP9I+@xC4%IX&H~utx82aUv!2)DV4Tv3&dePrn6#v%Tqy
z`RK`Mf+Itf80TWQ+7tm(6MPdL4*Q;<5Vb%z!~Os|n=5yL5B)@!*&8vTe*(HQ4(-b@
zANTh(tDat6bAv_uqG+XqLDR+pi~chNLr&`Dm2JT#u%^%q({KI>(6EASh;+T0vk?}A
zOOQ7!kZCTM+O4!UKUK+1VC#&=*;Om_QbUO$!b`zlDc8eQ9B~{iUUxHlSbQH^e@*O2
zvbFg4NAFmz!kXKFMF-&C+;FZ8%1VG}i!RMCn2J~De|T#9?R974%~+ECZ%{*esr_~z
z<R_8WuHpK8y7zVG0GDWmIS5eh5jebxYi_W_u*_R`)JlOFUW{C@IAAEGEot4Gi=V4y
zIrI83J_bY1o0k`X@B$!B;Y3oFp4&bEn$0M`M;l;l0k@Sy(}rD+Q&nioNI$|^^L~+*
zy9KWc9KUX5t!N%FOB9^LpgDlNR2B6&_J&19KvOhrU_}4)+-4b49K;S661DW~_luzc
zFwFlIPut7EnWhA<{N(-bR@A<nwe)_sU8ONTJK*a5;pA2pXCTc6mX@~fR*7ckBdmc}
z_fE6A0D?HCXxicus8=E4V_)A;IS#+Pd<<XgKtF+fbyL`WLvDodi^_}k=EEwz_+JTl
zbu?X=OS=f23w|Zl2MVg28zPY}CG4wt_})&KP0(ge(dqhWQtqq5&72pDS4+l8qnIN|
zwoYpwv$qhmiT1hXj5gQ-u=TIgY1W?8XIGB`<I9m>{!l=f_J!k;B$<FqZ@=o<289Nk
zP^Ur?HzAdn`z<37Ym;Bb0w)gSurHsS5spf#mC*H53$Be(0TvVZhu85>Sa&^QaeFX9
z0&pab!D1<z=uYmcK1Ncd)>3&;&_w@Q*P%en$N(-M0CUHfNPiLYR`Tv_t-^gkQ71Z)
zoz{(S%d|l*RmcX5sZLPYv=$CVqd~Vb`l+`FsW!f)hTo$`!j9&?!}opjO4ZHr)3bH9
zsDP-Jfu5e#TC8kp4nT05b@aCGM%bra`{wRA0$+M^AO7>Ge>9aDs50t_<)n-IX2v^-
zE`j8UgXLI$CA(Oj4&i0NDkSn)H%KZD+J#<UkWQSW{qyaXi5H-^g9|NMZ+Z})PtALH
za#V6Wp&}W~^sMcZhwG1jrkn!6YpSu|cA{F+1!8!CfUJza&MT=O_`DEGFQ+5~#3X=z
znB(6sv|VjeSe3#__kRLb3E&khQ+5)>st?R$2P-^tOTVM4Hh|!OR<ubsu}&T8^*+Bc
zTm|{k@X_OM%r&uIn$cE+IL65c)~kD<_ifIbTl{Y9!FHbPeXGUPxjKMEro9G9E|n#{
zPNX*uAtB=j)V#)>yiZUt)z%rb7dtA>>$Huz&f}+iiKW=kQKOBtj{%RUo&7hIySkWp
zY_2rQHK5<GS12qq1m=8@+Zp$fqC;pZ=di2-`wiaDYpG%GZP-e1QvAMws|V<KxsSep
z`HWHmZ?~&Crwy;0kA#hVLGBPMh-S@Em(WB;!w*n{RN>Zr<bKL_DzD2wHd#tqsxfXd
zK%#cyu)iKPL3krMhXx;JM^^{TB`6fg#*B0-qGWCMSQoQV@9t(8-KTD=t8E?SXJixt
z2&)8M3w2#M3#gpLWl!!Cn|)g;2|X=hDZPu|aT|EK*0=vUUH?!X<Bv)Xq6v1*-EZE$
z6J)iOzI$lUQ+UlDnF;Dv_Q5~4l~|$wmhOG_5G<Iy?)wBLn=l(SFr4^jPT#i}ul+>D
zT_8U1hVDz`Z+W9aW5*4;?a~zoUK5KpEba1r@(S*I_<NW1-OMeZ#mh4{6H;@2wz?8Z
z_5<qCYD*aKiUGi5&oIe3k;!(KI!i%y%(qKO9DzNYO`-z?6R94RrZ4;)vxwEYGA-pR
zN@kS!Vm@$<Av7P`H5Zd7SntmOUY#V;r^>f#$o+8QY~Hi)Rc!$K@=#s;{&^=ehIO8=
z@o?8U(X2m~;~DG<8I(IW1COQfrBkX5d9yqC$3isBf!8uiEF=Rr;SJTeNX(E@Cs}EJ
zm#zYJuvL~frON2;WYEq|u_3KVSOupr4REo;<VyGchD6r7Om4xrsvhf&3>^Ko<KkT?
zJ)+I^AJ^m&bgEk*hvx7)qh_>$8HnhF_cm4SxkLl3@SYm~D2BDt$#T5|4<nHU0FQ&)
z&6(Hh144d<brc$jL>?0KY1i&^zyv;pUy5rHmE7v}v9{6zWiX`nHO~62g!96O=UA-{
z9S3ErZ&&hQt=;GI(y3QEYzRB@M6CGgO?`2)Sbe?IOFhF`R`JhPD168U$`LpQ24wtU
z8Fpn<w*qb!IVVnl903^Cu}Vd;7xcd{A>jP+Tq2?(2xjlPrxz35<9%zXiJB5>3he?Q
z^SitD7?NS_ejnKaCxe;vhM7o63w!)McWyJ<tcl(A$x9tdR2s6yu|8V2&vV~Ea$>*J
zQU@~utn76bzqx~9Fv-XObiFuK<Pr~mD7wm8RxJ-7bTw-m>EVMY4$g*-hi#HB7cVmy
zAf1CzfB&2mDCJhHe`9jQ`|!*TB-a|d)xCw*BBB`!_)?yvC=BEoKCn=pgstuKwOXo*
zHmOX|S9^NmB+D~$95qR^EXzmJ?ws%0rJwaJ^1_6eNc8h$(WM86XkeztxT?Ck{th0F
zKW|_rs`GI9`ZK1UPxJnOBBFa(^c!qfyz|GaqzTK0%o?Zc2Cvu90er#1n=zLj{|d9<
zVb4R=oh;4f7Qqp#hjdR7B*c-&?hSHuMzGoFZb4-D;Q#MOB_HO4$fg$tN1?d7R{=-&
zCw~qn2LR4}7$j+;y|+HipgVY4*=zf1_0G8^S=~c${HQj<>(LSQ_P)A*ot*Oq1^{4q
zFwJfh6YnLqe(n5tk1iM9=jt)=ON{UiTTjnpCK(jNX`d78+Qk?DYKe!kS~(NY-r{6|
zL07UV$*i{hv&3=m8`$agAc|3?b*&57z1#Y+Ko7Y4{j85c$%a0wSw~d)x)N1I^QUq9
zNvaydqyGz~zFu!bV-U?i<rO&Km02$M`q@oCN=oW!E}9O9Mu`zckESvPyCrH%Kys98
z_pt+7^e!e0?3++CHdF{C4W_q$pL%h^wtI!;6+KX#edi>AG_m5ntw*C8Is}d2z<V&G
zB$YeJn=v6Oh^yI)ztWybQZ%kx?Fz(*kCAEJaMD01Y}N<$44_}P;(iB+xt%pEv^#*G
zL_-t+Vc3dK{80x%*8v?fioXk^8xwHt){liCvZ28!tfFdNo`Xd)*#7{jE&y$P>^35R
ztP-l0y?cO2qU-H_+j8-|#%T^rg4^w??|O#Q@eIjmxd~E6@1Ufpdh=kvC$%i$2AI!R
za4v`tI6jglXukZ=v>Ol`4yS~@T%c?mQ#9%Lw5!|kSn+@iEz-byFx@Sxh6h-WIo-Xn
z&AF1leJTsGuzNICE_`}cNk;Q6c-7`*X1uxx``_J^f`36}X9!Vi2SSeO(g9Z})?E8w
z^e_Mf=}{#iR~cNbsT-Q-hv#4ZikNEa)AnmRhOr}!S+G{)iS$-KvZjJzl>Sok+Zr&v
z@G|2LG@$#SE1C9u>L$ol{vT&w;?>02{STtXx{$h6uz^_7V)d&Cs0~YqJ1&&C+sYCZ
zTX!G?5Q52oSg95hky_M-L_~>8A=-*80)e6g#1b?>sHh1I7(zgnB#;c5d4G3&|AOCp
zjy*jG$Ykc3``qU)pZob#8=AS}7~2If7+Tf(a#Ehq0R<A%&T5?|$et4aECK?fL43n4
zkebKnf7a`y@`puNgCSfh48EhckB-s<aF5FPwO=o;t%jVBAuR!@WWrwovtx`0w=t-V
zZcJTAb3)Ob_4j9xyM@fB@k&Ub)rPYSSp1gTgf8RM&^av$11(gOSe`>Gx~hNyrptHq
zDu{hDLM!F&$L}qNGRL*8127I_NNaa~XYFrKQ0_CFT?GL@bY;)>233qGi~RXisXk)4
zFjUj_ER47;379`RN_8T$Jy|aeZT)8w5&`5n@U28y{>G4`wj_oXdJUFBeQ4f}_4niu
zu@<UOc0_CeP*af`0Y<dQiOQ^p%_phfyX&itzv0a<J>IkB#vnqjmD=#!<M(EbK{g=s
zdDVW^t6O6qCQmFU@HIAq9W3H}D$c_AZy{eRy0fzcvLj9NAG_Uxsx&a+?KbqPJkMDM
zcarfHxEhvP*ZkmKlKoFu86&nKe&d|ttUvbM+)c$|Oz7T_qt|clhwK(j;T<nnZu6=x
zm971r)hLVfNzpMRE-NA62ldu}yyUE>SN2Nq2gF76MVm(dj{nOI982^O!p!?yuI**4
z(U?(cD3BSf&HZnJac#cya&J7inTPoIWYUqp@h=~;ZbPkY%N(gq`PjRckwXD76&z7F
z4wtXmT4E^%jY~I1gA+O?$c2IZS0)_twurI08^6}TvoH)Z7o%zLaz_D}mRGkVsRnqv
zGR%OPzWgKnmZ)F(^<4Dw*bQ!1eRp0YU)=h~nZ6wt`?2}kithn*!io@pt|?&~$*OMb
z*hf`?ptE`39J`C6zh)Eo*|T{xs(x7KhFm#v_csEl2Ak%4Xk8j$THgaiTuvN=2j;I&
zL#h*Tm;{?xxMM{mD{FZ;HBv0;8tNmfD)0S}MV#83l0w^icz<vYadC0$v8;-NA$Kic
zGJz?Udc&@}w$C@Nf@2IXM?x-nNvSGBy}hzraIEs$y>(|0RDOF$I!i4jG*jTqE>9rZ
zD|73pfOZ@dR|Zp%Y(vLj&AqNF&0yU_Vb&sMWUe3?HU<h)_vUtD8fI-jtcG|sWsGgs
zQD*mPEbT9sY1BQ--uXFspr>>e{OaF?rU*!tgMM0AjP*bb^F3cG)%8mveFeqKBz7uL
z#@D~xAnZ^vBrF!EIqFg<FpW811SOr_V1Jcz+4c?^SV3l#%;T<tS=*LfurI^%s`Jl0
zx}0&sxe8N+n#*ASeNfvk0-(&#{mtPL2pc_0^Ptgo|1$zY1B@|id5H5y1Y;E*ZaCON
z=XZ91lQN>)I^mb^kK_>{w%wr}@j?s|gD|pHvZTLvuctKj6Ff<;ficck8B=Wb3j`9a
z_h}m09a1*QQ_B9)QGiGlkC5CoU5i2|Q6>Cz8B-R?*#@};V7?oTFtSon8@-%yNw0RX
zdt-}XFr+QN8+zZy)gA5Hp?0c@j-a{%?;V}dY0t$3`1sYFBZ}3lVa`OdI=Smqbwf|=
zgtZx=+D_m|V-%Krm_Q0YG<J$4yhHP>O0sv?n$^R2R$%&MPIVnQ!6}tol-xu!s@xt@
zN??))L%tbi7?J87(z`%BK1_aSc%!G2PPfn!X9|@dX)2#5U02=bNFlT9IG24$jEwa<
z2xnM>6P{N=`w}&c6aUj2l)HKaQY?rde~y$$dY#=_gUFi6Q=R(NQU`Z{&(v`bQ(FET
z88&B-jYDr%fwTf%l`hW3rQ&1BC#~lRD)&pT%1|?9KShx14?5XYFWDzgGpJBP|0+CQ
z??ErqXJsA|O^v6Xi#zys(v<+S1!N}CbE@We<+@B$E7M)t95s)(Q*bWyGXqeYt3Bv7
zb(}iVYNjh?NW{**5Dq;XXoNOxgVYzf)L-gJaaTO(_3@8eUGLiCE1vfKqN~s6LLM7=
z;L#bnRo8LH?yHf?!k=FRqiiPdF+g+udGbJ00Orrh5{s+x6<}>Zee#12qCUJLb<w~F
zM~X$^;YXwO(kC|iEZTZI^EMbJ!1o;jooiD$!UE>@>hYJDFf<k34N+{4CGTfpju~F_
z!PQbymPOHWiR96orpj}2I}AmN1dMf}n+fkHId%MD+Vf$WnT{ytB^oY#<FaLy83BRd
zL2|go)5WhIJ%rPJ6>V33fARhFEtzDQ=biC-@n%;CeWq?$`uxD60m8DcEd!X;^!76j
z6jNF$Oj-wmbRG*zJ>hzG3C#2lgIa?%lxH<Ont2JDIb)U6R=|yYSS~_XhRY78995*~
z;58bRTs1y^|0mK$2nhB7ddaWbJ--^8Nc#}Xl2M|v-f*`cXRxg9lH}jkr*f1|PD3L#
zel%?+FX`VR4G2$o1BR(0iKG@(CN+$Z9?$~!k1A)068<^1U)QxIT}-Bv-s)+tiW8&C
z1+lT43v$4(ovzY}w?k>@MNW*=AwJ0FL=moCLz3V9H@6sESB4J&+!ExMx;{*#q52!f
z>W2FI@u=|FeI(2Rgw`+#O_gmpcpxne#ki@<V`*l)H_Yu@$};n%d5a7JGBp%SHmYQd
zjB&*mY~Q{YQQx4K9nFe0>JkbbZZ=kH$EjnCX1VPuylPN8;o+>Wc9EZsT9njAI_zzK
zIP#b<9-i|#Y!lhjU)Y(BHPB;70nvlkMGUoZG#Z$fk-adIbk`tqmR{mLtf82C0^ZAh
zsoQiZF_65*AmaNerNt{UiJmx0)~gtLD)W7SbNj8Th;pQQ=HB(`H$e3HaEJRf4_C$Q
zBU#gCoZ)nkJna5v9V2JQ;#Ysd_gXn$yOGjCzyytNqSfdH1awP@_CmTlypTc-PwPQK
zrNRT&gnL990%*Jd77iTKHUVH&Bzf9XfwA7z%D4qv!$$C`PW+Y$ID=uL&Y#;F27F-<
zX{2YIW~)f561Pbs?&-xV;gIJK!7s{xPS5IiJdr__$#f#L2WXZ6*PxbY11O_i&Jg30
z#v>uka8{g}EiY=so&Va8cpGtsL@JHbsEt<Mzo+14_D}*2OQSRpz=nAaQulTDQPpM~
zzZuoz4?_%q0#{@Hznbifr9i_iXU+?BeuFRv(Nk^?cVQ|Ww1m||tw17ngVS<~M(vuZ
zh}MK!euH%!?)eOV@>6gKI?NSl*_X*Jhi9*Xzt6E8_*m?+ro%>vdZ=?t?g{l4B-3qo
zx~IVWLg(<j1I^|dWw)VeH69+na#@fZEY@8EMT7MxLN^AuRa#LBHzgilR!meTuv5e=
zEm$C9-hKPApws`WDq~#HM&3{Z#E|ZlKRN`&M2f^`6R8=l_DZN4SV|`bI9Kv$Mq#+Q
zK1d-@FaZtGA2aL#v+!CT&tJ?#qgoDLhnr9jl|(;&Ly9WN8>Ng4DDE1K>J`LUirQCx
zIu%QH^>ddF>P$8L&lt5#>*1GBcPSuwx}_i)<EaXRc;m4vIhKEtjiZ*;PSlKH963Lr
z*m?bc4XO1qmUKbxEJ5(n8*`Y$9cpHoh1_TtS7m^*_eU0Jb<bXKr+aKaOH3VbFfnv{
za%{L;p$w^jHvxs_H>?(v17hq0#@COw;#3F;Z6pg{1AR1-#H8p!e)YA^y>%IaBvxBx
zTH=6Ih8Rn>ClO<v5`_S}zX2@vRqqAOP>BUwa?A;C9O#U8e>{cZl^XGJ_<w(PognH0
z9X3W`@SeMnW~`lj3pR!WZO=<qYid&A%?t>*7s2g4f3yktSbt4q5UEShmEX6W28iRC
z$D5+6slphO6$>`Cd4Dy-5t>T1z^r4aARe!FHU<Mw6kj|EkIb!-{21c`?f`CiQ0HC+
zkD>s{LBQ+WpOgf(wEQ6&9+`3bq>CnR-H?EP79;t=_il&j4g!N~w0uQ&l6ETK<){SK
zI+&!#y61;D)AWJ+O~7KPL)q$rB~nexZG9KRMS&1QKALys2b{Z+NVxB2uE2k2K;_2d
z`=2roTsNGJUfFVqY*KdGOBJe>t&`dx0Uk>pDVI@oHudiR9#1~syDDso&<ZSB&xp+3
z_Vf3!c(xgfJcTF3Ji3xa^hl;&3x*wN%uJyB3Z>D-t&^_AfM|zC{cq@n0H`~&l~iGL
zDyk0of;i}^Hr#%=JQ8B$R64VSS(vakzze2hVFG$#4E*+S4;}FWF1$)!swbnZypt@4
zx6*tcnpGID;j#nMnh2Z>G5UdsUkv@~0XuSE@U#=5s_yjiQ1{ZH%KJs1$~Qn%bmB<X
z^2kk8Y4?Yeu}qyYBK8d7TnzGDnKf=T$)-5L=Z*1KswZ)IxLkehXyTW<NkS=@12Vby
zY@`G-Q<%rDK7>dbg`xVOy7Ig!L}l>&O)yE|@+CP1>V?sWGP+j0x~Oy=WNepVuUTi_
z6CEBJg*S6w8l@n3!9JdvH_!XaY()884CKtK9!u2!9-WPXCQtdyMF#X#7i8#M!;eHd
zEB9Dm^>0F?e+r)!!krGj3&!`Mt^scS#L3wN+`+5F6bLa=`Pfifc^+Vhez*_HvS80~
z8zL)C0Zj}LowEgRV3pfTr3D&2ROjGdOYUCDFilSYc;5jN+1=mw+NTAv)G<xFU6f2c
zgw)0Xr50vqPDUNNY|y}MYLodMf8lbyjY1j1{5_cUFP8!)?f%Tg@C1?!s$Te42_z#&
zWJE&VdHxqF_uZ^97zw#M<42gZS+RBP?tN`5{@y{PBU5lv-c45CJXW+73|N2rSYEen
zF6^PbUqT<P4fc+>qU|2J#A3px{j&K=kl1E#N)cQOY^{T=zZ?m>e(U_1F0OOse;n=_
z(*!}+KsA#w{}s?bPv{r;1mL_u#!dwgZB2Z6e)$?J6oGPB(gk83c6aBh?F%L|A1DIR
z6j%e<t4F*3z8p4x164SzY|*(YRFp$=i-LQOyS&NT+fn4764hZ(6Sr=ms#a~sJ{h;4
zPopHd;~I%^&y8!KM~R(Qq&3my${4&PRC*c9MdyA|6N*H_0~sx5OAnV|o(+Q;r5Uif
zFkV+4GE-9$3D8H@>Fv+Q_$OM|$F8xZ;gp1do=pQESPTE&g@8{rx&2w>VCh5LCEHal
zHBcB2Lm@z!2}y_@b)Ev$x$^K#MAEe=ymj>@shhlj=f6LyOkea#es=xK^#F?XkAmTk
zk$%J0YyiPQNhxDmRi(`yfQaqev^!X*AicWTPl;;g@;wGUCC0zk{aCr|$YlsjS>ByU
zQNZwO^MEameA|-@Mkjdz<($%p3M9**q^?u$%a~XW`y`J*NL2jTfhRL?d1S?_*x|*E
zmT8bo13N}*;N!*hm*yE&_DKqvspj|YDTMEZkSNB8c&|;M93C8XE4S$7(S9%D%u%5I
z0e%(nUX`ebtjd*N(vhek@fpCPRGZz6d9RwTcxb^K%yhD<VD;VYRjCGukxy-3?KfZ_
zi+2emB)UE%=S=g5XY?{YD2q27@K%Iiv2_2;p@t@(iT;#-^Xg!S*er9rQoJC6-;0f3
zqH$x3PC9U!0+7&B{p{Z^N({id_C%Ni=32kg-CH!Gb$d&a&C_bnkQuo!Oxo-0_@|3*
zJkM7&?1$<>n}c$w?X;Y;ur^|EH^xm{OIIFHTR@dtOy3X!UAahk>yM2wPry~Jo#3KS
z`;FAP>)m|S60U${9GnB2BxCNjC?GN&km%J;nen=oU9^rNIB8lhX`xx1^XBWA2M*I)
zhIvU1{Z@?os=IOwg|uKDF)~iZqL;l)gK-a<p}NZi;yfNjoa-56`3GF4GS4nr_Uc`}
zhj>lX#5JCYoBLs0&FOO8j&tz%FT4d3+3H~R4M@pc^?n57jtok39&^aX4|s(ll_c%%
z2@V$o^V{pV?{C-jG(25pCRAV?d)e)}H{yJUwow0%@9?s3>{Ln?Tu~WGrl#qg1mp!(
zz@7>&yN}`qTd5c2p0-ToD3C^R()j)2HQK{>joCYogTYuvKkdZ$tK8?f4JRon_P3iy
zJ*IAqZ6AFWlAl1xBg1Ta&bu7&oiqn${}~gP`}QRcGIzGj@aLv~7iYnXA&q7<KU2uT
zs~O>-4R9UrzzBt&(xxuK)t)%g-bO2W6@&u$5%di;dU2`C2u!(GE%%j#KBs94)XRy!
z4X6v`4=EfFi&Y!DS{t`nKX0b;6EEnXz;H{7{aG&{?`pJB0?uW2owHxP<=I}ZkI(#`
z)8rlo$tWLqNUJG_uw<?7ah!L%_Efd5?Ib}{T;0og?hlW6>BgdYna)?oN*$axk`9P@
z0q&cm_x<$a_WQ@rn?Y*P75Jl^%(z(p@#?6F6&Yy?zn+a;j$)LJy-8?5FC1qPWNUHY
zP<T&Mc|H?UBnQsW%bH^Ae%s4@p%(=gu~jB5L4T5Mr~hQB|85@x%sH}(mwD*XM+RuW
zA&o|*&J-joU3$2d_p$<s`fj?=PWIk4HLF@lue6!z0Q^d*U;3%8yTs1W$K*ClgqbdY
zUR?GD0oZ=SHwk@*7h+uO?dH975*=Zjh$_QKl(bzC10l6#$`$4Bh)iAi;u@zXiDq%H
z<fuu3$e-d0)c}s10+6eotsVfoD!t?=!2hYP(aG}kb~5{>xgG2t#dCJ7F`7MHfbSJg
zX<h0%Lm(Ms>^Pt>H0w)b^FSKSQW$lw2YM4WJa~mp{aB;EWSJMGeoVIN%PdWw)I3`u
zlYwrv{+Cl=2tFrL^pbGUR#F@HM$6mI5;?>djTT)g-Mhx4%+0rl{jO+1v3g*Eo3Gg4
zBpEW+O=J`vJsDVk94(vY0dm$u)eA<TIo+zzW6|F)gtr{Ac}=}j*#~~EO{r@_e*Lw)
zy&+GV-RnpZr8gh;g8@F4^w=J3eCx-6x4&%zY(;2X7O>UQ$T;@ylTX$86p{^{u1>eY
zH2;ngi04?zt4e^Rx2^U8+oC0}CUY_eLxZYX!D~M5Yj}`bPf3KvMiAmG{jzY>6N3D6
zQ^yd=fj3&g+vL$(zseB+8d0G<3uVyG3|$WsdFoyz&FeB5#lIF3LBoNtL0Id05=$1c
zAOEhQH@F1<aYGI>H2)7={;BRUJ%z1QX<X@Lh8D;na7svurKXOl6Js=mXGekW5g;7m
z0)*#6Fkl|^kGZ_i6s<Vv@B0(v+LIb3+8z}bQ~^4NdipuGK}Ea$af7dkfjXjX`loEk
z2_Z|7>73zS;T}*RXIQBW`3E;Jk`E<WPR?A+KfZTkKq}WH(6$tJ_wI%*jqG8}GujUY
z#s9AfOcr<QP&@zdpt4gXU*S+yR<C5mC|rz+aGfL%I|ewFb9hCyc>u=QPL1^XO4emM
zK4Ywu8l`Uw#1S8e;fJ>*739(iaeD*2>%G8vp6YnXKaru5(oO0&L;pbi85n?$pZ>KT
z*n-g}?kMmYcY;!Ifn4jQL<f+0GsU<x6Au(;$bvLK-P;3|YZ=VaI#5k@^m0?bO2*s*
z0Z^fnX%4k($OfR6aE>I32!5WBptFOB$NJf^3=Fvcjf!r9Ef@=HtA&6GgC49}OC6>s
z1y$_6U1C9DsJ&2LSdGBkFtE<-IX^|#Z56mxN$LTG@WWm1=}JUa%{z%5t2`;SbPbpY
z96UrJJ33%rJ|5_r)r>?`RBkA|nYyoS2|!9yi*Nimo4w93?7k%FhTA?N{Ae->o}bb5
z=)#onBr1lOj5v4CP#92sR4BlxQU@Wh)*Eo<vDPo(buM(040#M2`+V36eXedsQDDlR
zhGQAniA7ZX5OJ0A1D}E>yRsV(w#FS#x_@zov!9)jW9%0vS&FW%hiW$&V*zirK$8Qf
zcer4Akm&H|b^mQ<cm{G)qK1{wRbb_9UAuvT5J!sJa?l5lUrQ(ApARex_Jx%yQ3q8V
z;#hIf-d!-R5;hJ@e%Ky-rwgwvAMK*D>Ir}q0|qnl;Cw-6EHbEzU>*+wz31fz+_rqV
zU1T<>3K$qmPoxlpleo3RbG!I0hG9WcQlNU52W0D6^V~JMfy|Ty51ICO(Wg~1_%qq!
z^%wjhClz`;<~bu<dNX4%o<@)Pyjtqz6!Z?JT)db{nEs&8fIi8vy8|A9h@m(|8_3R%
zh)shXE~i=#1x|%%_-&=Uo-)~Z)~oEuwY?v?C)zNE`;tFC?I<x{fGNPusS34;it$B|
z0$Ki=tWiTH?$?~S?;}M#h7vKEi|W@TLNj=S3>p9*(K(k=@ZGJGPIjPp*6-UF3%7#>
zSma7b%Mvvo2&5!;?t&bkxH`DHtPTlG8A=DSUg4|q&MEPrQ;gJpb_JsOX>fXey8-j(
zGa4DJT3XSanm^Y|%)kR2dFXk*9bawM8w9-LH@)H6-r@3OAD~MR^N^{C7$91x+<4~|
zq1ZRE>$yM7+5xhUD+HQ@Il$LT0QQi5*=a(f#Dp!mH;Z6A#|u@vL6Wh6gC(IuxaYg_
z{3#t<PhXr59S3II{>pk(Z-<M~p2cs>1qagH<_$#{8N=(lU!deAXIpvP3q2QC{qu(q
zu|k?7d-XI8X)v1chzt`zyoxW*z$-Uj;n5%o3OI7v)JqUEum%}x_ZPpM%u<2A$+ep>
zZV&n~ec{`E3XkRe^ZBzG&@KVOERJ>0!`p9Ky`G@<=q>ldKDI7Uq!v_T_*A{rrk{OJ
zdh+jlD%`(({{B*>D>NCNfR@potc<KbA|-8=o3|(XVM#^{RVwvdc~h7L4GZ17r@fW_
zf|OGu<^eH+aTh^l<F}1eb?=rrYB&FQ1&ozpbkm-jV}$hN<%f%Q1cw~T)@VAUffSQ@
z_U{LxCF*xavJa*49(I@ptfN@m#$&eA7xTw$*q&xPG^8?S;(ms<>lqg82vHb-A;v9p
z>;YtxEv5C|59g7ZInl)Y7Cm4vSn4TT83{G@_Lp!-!M3=8<$KT|7fHm+Mirrt7XR>2
zXc=BGIjP@hv<?P|@ZI56VMrK3+zjulH*k?b5`I{U47w|BXkRw8y!L)DnC~I1cC-vA
zsG%)!D@$O|Z3W05bfqGam=i;=!5HhZ%i*oPX!Rn(kWO_B<oOaLnoCA%FSz;q3t2hB
z`Uw+pa5rbr5~#8SR!-Zs0zP0ouyzJCKA_4=0fyczm_D%qU(yMCnHfuhw^Ybn5&?gN
zmfg%~gzFZn50ijyl7bEiYlm-X32S+|4raQwSM?<pU`{hpo0dlB5O*-{7t#r%I2n@1
zim|K?;n7&2Q>xmq$etc^M<<ESEhj6X^YQCzWbcw3^udqLLAeMPS;=s25p4kq))!ov
z12sk!WK_~O(t3kef)EAV3r-{{>F^xy`%CHc6!Qp54M+Ah0eXfN*$v|o>N`&mM>PZD
z`Ls9sdAo*Lp>n9}QI|yW*G?GF2uke%DW}}6@ALk87H8ulQ1oN3I@Ofi-{GENP+I)%
z9>binfq24R>~Jel5uH)i^ofFXputHRxb7mc0>`?Bk!st-Ci;U}l&P6r-r7;Wj=EUy
z=kE*P2E2^=${!oLzNA?OnqvKVYuu7ujO~XgW!x~-M)G2LuN_RP^ZVeZaQ)!tLeo{P
zuAiX=qy+>av!oB^rCsu&Tk9!tOvdf4LXFIFqihbOvoM4ILsKY1=}PELrlgQVlYfT+
zG28{x4DdE*zI>OP=BJa#gd7&z69;xS0_X%s<|nWJM>I%sa&qxVyF`u+;Q7{jF4x7t
z_dJ^U(@9V3>IGwx9n6p@It;*8H-s|O5W12<N)WYRpI%i&Dct-<JsvbAd$<l<_TBa`
z(ei;Hk8;xbABU?G3^raY_b`nf%Mo|!ZhKOfor6K-7!Y}kvh9z@k~~`Cwf2ALQX+dR
zdhe6b^?9(3=0*yfsoXBvv8L;K6H(ch)i)^QmeSeo@8GOoz)R7)`K|mU+4VVf5GhQL
z_7*Bya2LS$A4=C;ryx?C%XdFT;IS~?zo|D8y4<ZEjFA0;pacDBHC^3?Q7&(6<cA#>
z3FP#HzNvx$>Qk6#No5Osd=l~5qP!Sl7QRicw$p}0?z~vvjw;`}B%L_l?^*D&$9C{z
zjUT+(_Gi_We(VDm%@jKrvdv8sg2LjxfANPc%P<IP6hY$Zp;QMgyTS8J06TM1aVCWU
zln-+*2RPTJ_t4C?C-Dl}_`wJ{*;t%;`*RJGC=;KX<22sXN50|q?Wua#x_|`Wb%kVH
zu|fx!pGZW#CfGxr$rcTAvP|)jzST7&UtW<HG71q7aV)GHnoTa320E`+>}+=I5bgvB
z)vPcCI_^g}p>z9SE@XPWUKYqvgD{MMzUCyd6dofhdv9|RWhy}0;|(p2R)G(1(>=)J
zW(XleA0#<!<g)P~vGh%5)C6|hJ~d>xMX2Z%c%<R~^KwhB3vd#RBeRwK0C#r!o??5*
ztsm>i%$CFAx4|U$^x=BxaRyjV`L$x$b?Wz^s#e9e=pHjY95`a{Jz1GK7I-$+-Nkx3
zTO~u7{Ct(B@{{i%SibM_oS`-Y&2mm=wz41~Hi@bfh87eTHzfx@#wBWt^!I!Zsm?ys
ztVPqB{0|4xpp9W?%vg$r$;|kn`~q@;uP|J1Y4WXiZ@mpw+m#rf@hT$N2@j2(giBKW
zbhmd!L)Dj|);<*R*QpD<jc}y)8qza)8)2RV$^oKRpj?>^?I>4(2nHT<7KxM59|~d1
zeaJl7jq#sco_Z)fOX;U{tx*QOE!Sd4W$>Ii*PwgAg7UBTKojDgnsVr{92R)j)~%KW
z6#Wfd50@9fmwJ@l+Xrq9hIUzLqMKW!9%&l7vW)JZ09R`LgP6~Wl*d9y**0ouAl*=M
zY^LlDPhiv?fAaVFU4wN0sblUN<9r81L&{lR*H*1h#glXeK0M@7byKqb!OLX~I4jtA
zlDP&%JALb$IN~FK_}seo5?N|gmD~YZtjZnW1UpdM^hOzEdwA7>Odj_X1QUE7$5Q)P
zu7>T>4gSj1=jC3Z@AWq+LZC;ZJywiYPKf@?>|s!;DPv9+qx~*KFA~cEf>pVqA|oyZ
z9qskgWecVBN<V2dT&Cy3R%lI5#F&8M-!6VvX1CsgYahoF$$++i?C*;d4(6!UI#w&f
zN0r6vgxem}HH`ED=>f`V=Os052==l7x(q6W@*O_@BS1y5M$DAC(6E#i_+q(iSy~L#
zVde#*W;g%AIKKu1bYw=JeF;3anD6jJ`7@LLf1Q3OrBy?xgU*o{G}L$bAHn&lY{oi+
z<}t5{T;h&j^twDIUoZdM21g9*Mi*i+)f=;okaDCG6o+F^oyz*v7H|}T+yJu_$`zK?
zRAywVAic;>=hv^fYo@0pKz_V@j=Dp{wHPe`nbZl6%7!2Rj3~?l?c)`!mMB?tE>qu<
zEpBBkIWEmHXyp5ya3*p((RI`^N?a0-%)$rx5Qz$9YcR42_A3I1?R}gIt%z2ztU{p-
z=+}UKW)qb-xAWJaIPalSj{?Kiej;`poea(re3)4NybuT@@FFm5ykrg_iX<#4n5_CX
zP(R}(9qjwIqX*s)ofHjd9bJonUs;dysabo<iHYDB2QRcOT6h1*jaj>IP>AV+A_Bmr
z&5VWICHDT-?Ri=xyFct1H#5;6z<-el>-pnN>r=^0nGCK|qLOWCn?k(F`5C&b4yk#>
z1)2~0df*DO`upVB6?3%XGTBOGn4#>9@ZK{)-y29)q_?}1duRg|-QCasS_mE`ZxIZ4
zc$oD<=?%jL1ICX;1}A2usonD>YL%fQQ!hS#bNT?r-#`W-8hd(&aF{#SaG_E@?PnIl
zw7|W}3OFsOb&Qj1y|vWnV1|;ov6ZSx{UBu-PmMA1^Q+yU`2%}tsOZkqqdvPy#wK_Y
zR#DR532Xg7`*|`MF&Q-UjNyJD_k!BevZwbxF{<1Za=_SI)Zz1dcDwc)1f-qH(@-yo
zU<(@I%Q_pk?%2kVlr+csjSQ$w#<Ph_=d&TO>sQO70Z#6mUnHWw1)Xv5fl!iKe~<nk
zIE2R*B2h-0`g<Bn1rCz|WMH%Sk&-T)fgLlR<w8&mh1~VMq-b1|A!pV9@Z<|<Q=UIM
z!_kfnf(ED2AmR2&q2gx73)_#txEn*JOUuNoqz`(}QooO}#x%cL0=rmVq)M|%OcIsa
zQeSjOA#EH6Zs5!A_dDp2O@qcHKjV7e*`<Y$r-QX{U&9R+$p@eI%4K@{pf5O|63C_8
z{^PJ@Zk?ukcuXeC^O*|eTn3cp)kc*Ii|Eg#L0?6q3PWnX+^z&W3!~}{s^WyTxfMW$
zUI=Sn)zw>O#~@tL*-h>0U0>M%9a{181@*!G%So`NL6yGM6o8tUA6NYbRQ#sbO9;9!
zB$_W5cJ?wtENh8DCnwah)XO+zfYI73yMQo3Y9bA~jzR|ra(h|xyCski6JIR_AQIeJ
z4|HT&TIX+LDEU`jx+Jo|MV*2|xlv|m&)wT$7p1T*K$X1nBhdQ(=eME4T+xtfF1lL%
za{lV#mo6vvt?w=VBMp)!xfEc#+p4ZS+JAA!m%EAQwu3lI5Nq(8j~PhLyO8@<V7vlY
zqLlP)ZH$!zN~D7ex2s?mX4|lDPR`}Mycdzvsj<Uw=NAjy{ShK!jkFEyyT>O0WD9yz
z*+SERf{_Lky#+C|LLBubkbm{J^paig?}Cq>pUnhgeB<7(GtIu2_InhTxNtI%y=q7W
z$*3gcQ|`!02+cA6@9(@9Ou@VrrY5!#hYX|swKvg6IORS|qIA*fG(FrXy7k^Jco#;y
zeCPV2O|!;yL)7{Ng`p!*wXFoa$)?ue81NPq=hy1h?ZQYAM=fR)`R>YxAKItw3Z4MA
zERYv)ol7y=%42h2&8=VFgR&|#32)fBj<$q;<C~cS%C3};nl9TrnKV?w1Xf6;RJt#+
z>GkzHmnT4tMJ1*)?kEq0-~aeke@BrGGsfG=x(+kQx_7D_<B~rI#Y@XDWsYq`$%ZY#
zJUuK*xqgQ{nNh1w<z@=#JRn_}OQ<M;n;JJ{QNU?y$C7nd8oF)C*B8*1amm9ZhK#W#
z{M>o+ly+x~fm$(`;{G1Y_9j69vIb1||AeezCWuxS14s$%;#=qwU+T}76l~I`+h7V`
zQ}F#p4PT;uzZ;U>OHbDHYdm@Y-C4N)#tOOi;%nLndJ07o0IBQS(EM`!Dgn)`3^AjJ
zX?C_TZJQR<VBqF{>X!;M*y;FcoqHwP1t|vrIm0F1oxqH&8#GGzSk3RZr%bEG9Zu@q
z32_3tKO5zUYA>Q;X1pBzIlJ+8UH?FX&ZRD8Fm~faQZHjsSBoFjBE2_eAL;#kHT2WR
zAI=o+teyuB>EV`bHc$j$rRD`!aZoWv(zin=#E+(tLQ@utr!EFmr_nO5k{1`;d9m`B
zs2g48-dLZhG~ly85$X;F`N_fC-=r%-GIfC{#~`dodQlwb_mOv@<v=8s1k)HyTNfq4
z@LlPD9JUVF#}h!f*xx3y1>Qh<$X1<UTd(K1--45$_5RCum9{1tfRyN=p(&P?(7Rb1
z!SHHC`&N9Vq%*K2w>3Her#&<6Le31old7&SKN(Mna_MriVm#73%kQ?6Z!)G&{*S|I
zn%*;8q<1@Sw3<Q60ABUUOwst)NTkU9EheW7Cw5sj1112%PnsMOjR~kuG(!ElQ>3Gy
zY=LeSI2;mu<<<)}o6K0+$2KU&bJGR-Y;{c8K*Jq&IRYK+t@h0Cr-9>8ewazkk+Nj2
z6lW%@c6PRKrziD`L}=%q5Nz~w4WvkvmAi|e_+roOp2m=UQEKe<qsOKUNo0N$Zo;e;
z9N<mRG9GC6Ck&{aM9xWg8GT&sMHL)Ph??UG85v}NUq@Z$y8B*Es_sSpFLS1%toj+?
zP#(fCHau6aW4a<PC95SWQ_Ph_Vw}cedleLl(tf@Ol}1LzrA2zThB|KNn!rqf?`Wy3
z(y4fTj>TwA^#0|)nw)8wAaJf9vR9HLeRhD3<1EK)6=iyVnrWsnTX|wX7tlA58q0cN
z(A;LTKgQ+3cl@ed^?6-g>0)-K^HZlxPAX@c8UPpIm8Qlut%Aei*8MXi)jV<8fWnQF
z`ev$RTU`HW;xMANiA(}Kf6#j%Q|DGkcJia?3WBRPEqJIT<|SCLrV_hj12i}I`I&=U
z%3;c(Lnfj(Ve$DTMgu`Eo_~&JKo7rnknksl0(Is*0X?Dly=acbI-_VJ!=ss^>siiL
z+$D)8d~zHLRW39$Ue(_a8~TpU2#>mXv2>uru=hB6Z6yXkf|gkKvneBWDLOwoKlefM
z%1uq%AwIeMRTrm@N2_=8>mh}pD5qgAUiHI_^FF8`2`Z1?eF4Hd2IX8Y2J~oMw)jJX
zI+7_3n;|>_rJ}4F`dGTAR5yE%8r|q4ke|zy7mfA>@}<<fD1!c(z0V8kBw=XTH1K!8
z<C}zX^^6cMyP0D({|$G<Lf);<M~n~W>(g8GBnz!!!69KIDLZYS48%0>62I;V!wXyk
zyW;%x>6tU}WNO~Mjn1EyEmD-}f;2bu((yBeb-zXM_jp|SIIuB)jm;!s!N2;}|JI01
zUl7xUjkwdfH4O$EMhYKMM79?GbR2#tt4>-V;F7~Zq*khua-JQBs+i4nGaqUmL;W3Y
zPjvEduEnrRy@SFspWm2*nzcA6-`42qoUKeK8i*rrrQ3PsBR%XoZ~GHfaqIcVaCSne
z%CS}|Js@lp?o_*DyrT;N<Mu%GZDpy!pf)Q*rLJ~|*+*f3m?9tCU{>gjS;FvC4xA77
zN&p-Cmu9fD--hoWMNJ07+Q>76;+p0`S)D&GX#_?|<=6VCIX1gOgZ3`tLZq5&LWd;E
z)K@^=iRaYE@B_s1?ZQZoQOQNr8VHHMfy}xIvS+QgvWh$A)N<Ip%;Nd@=svhl0Eti$
z8yMdgWm;UK7xC#&hF+A~CV<u9R8Rsn8|r-g*-bnS>iGIkqNi$vgYNxCuCC}4)HKlJ
zr=akreFHxJ3HvrLr300}1p*GBnj1P{yYW9#Y&q&~=!XL{#g$_ThSZ=(Fc7IxuXbyq
zq46+OrgG_5s@nwR5Tx+A=CNkSCjUgeTKFP?0#5uq=vdmZ@oqp&8!5@~q-pg*k9Zmw
zG%c_GN_pC(cB5H5vy5hXPb5<nkx-(+xDNb?D#;5Gie9*lKtU1XIYA*!Yv)x$MLh%t
z-H*ZZqGON9COe&Ku}&lt3TQ!+?G1lZVd3Jb-E!M^7Ms1fLQlnz=u*2M#@)RXSbt%B
z3FFIK<<1#aM8q}Y-_}3dK^*pu=urq<FmD9NggfA5w%luLg#TsCVfLcXfqX%S0Gh({
z#a;hC>MnT&U8=EjUWBe9{r>vT;T0`qOc5Ay9>bXpxV9xIL`SmbkN7J;JmDT(Ut<3h
zI4AEz@WiX+W&o0~HQsRp2vY;|0pvBP5XL&e!*E|O0&~DgFJcRK%q3oEbCMeXxVFPF
zZX**gFh--?5ccd_U^)~yoKkkyaST>&yjyAE{B&Zo<SOor7|b6S=(}8Y4-AbQx(aJT
zhf==r(QfoJ|MCOVfyZ7Ii1OW1_~**!7kO*r88Wq$FGBTsvsJS(zQ_8Xg^ht0PY{#z
z-@AT}1-AbA2)HBEMg~$fu^&bbXDb;Wa~2?>xUlIG4=Msvfpv?X^eq0bh46>?)gg@?
zFT=w}l*bI2iLQ&B%Ips{o^n!2_(;*6y0+#+KX;%*%20^SbAq}oYZnsHt+FfhhF)$n
zn{|RxSA9pp^pB-ng4y-jVnMJPo*S(;Soel|G(%Se*247V?jZY+Ayd}^O_IXIjSClS
zA=$K3F^*COfGjugWy#lJPqVtVkmM?2_}fKk0)k(_Y2lBT&bR{&;~X8viFlCl7ULsr
z-ShX8rNDe{(Ls<}RKM}<O2~Hp<IwQy`Cp(|pRBNH_lAEFV??VoFgmhW2nA-A)r6;v
z>^vuF)3iPs9$s{1jZ%k0;JoCqh~Wh@O3QYz&L7xo2Zkqo8M=4Z!Q-&B<Ex=q!D!SB
z_xbPL^~Irm3%7B^h_b{oV0>4eH|-G&U3Z&2cN^5h&|$X<>`|ga@MnCn96C#%Z$JR?
z756=5OfsmeN)EE9C!Ms;kprG<kpWLOW@UobCa*l<F9{23jfGP#^nu|FdhQ<4$zl+g
zRpx?%WpnFNA~cp|EtWCXS*cRn%6~$0VHmda<xMkQxe5xa4Oh5Rry>@G8q{kp^b*jp
z>Qxtp?N$6-NuH0;Bv`GJKc)xe8t<(blNqr0cTW-K*|a(+|1P|qFI47!=%PqqciFBl
z2)Qrpwh2u_ZcpZnm5>n1a$bnYCKM4{D)yhaa(=CP{r;n~Lhpw`(I1xezl{^MX0&h1
zgp)3F;nT3I82Ui~YvI2ipPjcn9I-%-{w-_|Rg$Xxoj38t!=Tt{Cw8ByWzW4;mZkH*
z53N8%Xg1DG*>eFN73NSL9Sr&OR6i_`yIen)sFJ^rnFYQH%qMPl<W(&{9Bk*bScLoE
zLsTnSah|&wUGZSdr~3b9{Ryfm(Od2U4KxxGOJ`i!mjUt>4_~@mo}ibNEEviX>qRJ6
zB-}!@0OUpIUamW%mr2)&4jaWh9x{DT9zkggLiFH07EXZ#0nXXXnRfhU%W1gtoktXC
zN!C24VS}=}BikSvYP%a;-@5UgTrC0dmaGo7q&D#I<CLy0d^d1+!3}`~4gn*cGuRt|
zfA_(0gdTjLq5eod;<LIUo)#ommN1!v1^Jrc_J7uazQNjfBSveWN&~xi0YU4IJmtT%
zA(GRHcCP8Vm<ii6>kkMm)!NNMlltMvXf?)erc?qqL*I`zN+=oV0S8%iG%k7WqKD6O
zD>3C;=wx`5DlE4fW13$EZ}0S3Q_~NmXW@uwN9@K6K`baUUmcWa{bS?EB-338Qe;Lc
zXM<zS#LWt~jcg2Q;<h}Wc){sRl%J~}@L)ozhsbo{=lG?;Xz3F&CGi6z^x8<jLjT?K
zAXaN#KJ3`GzfR!a1#$#>Ka8f&GhS)LxS!==kgV8!X1O8MwQ;m+G(oXOc`Rq<26FFT
z<BbY_dyUQ}DexWGp-X@Z%(pSX_}%_AGeS%-GS|c7XoA8RAi;Dx7eY?i(?kZUDB=5)
z!?_fErRWB@ikO&)3*9B562R-erjvl1E(p%a*T36NKsgGA3Uda`#I)!qB|QOpw|bx(
zKqg<?r~#m=pBI*B0}9z>beNw`GN1y>XHZ&j%D8co5+%mpj0U>r4+dSW|NYI0k%hHz
zk}O?EWvcyL8Vrizft`zx$hF<aV~lKXwR=@91=W*eYCqTh?`Z!R;UQw<z)oNFP0jaM
zz#s2i7F0TKe;lV{p7`>=o&Zd&Wp#ZWO?GlG(}}$;bW^4?zktAgvMI1iZs|vX&#Zwe
zVSoFa(F$9>@kU%ROc<<7<UoaN$HZ73P49&6`VNC9D1*bmf^0=EE&|FYRP5uEv{d6~
z*3ZAKsDHjqGbjfz)YmaGK#Vs8mFd-L;r7i6rcnwBgq6KTuPN~7{>R}_Qe7NKV4v~*
zZslPN_=<>pbM)LhJ0)H(UnB7IyyICiOB4e)r{;XM?oQwI4kI?HzK4w54))^9Rb|fe
zXS=^uoTe(|z*=>uKeJZIGB!T^<;It^9=5<{w|(%<<mxKF$qZk2w2utvF{OK{f+Nl?
zhp_)63twu~qKO&>HKU|cBw(HvrSFU>6Afputc>>zH<P4MBPPjD3`u@D_>leQ!)zfj
zYmqop^dE;gC)^Q7l^8I*oZQ;NZ>k`&gZFdh04*7A)N*ixD-=PCHvQEl>KYDaXT}@q
z3)H;_byC=dk!woCHk$DR9dY(ky5Ib>7&!UR-pqy5NzvqzP-o7iIF9f{qV)TA01CmR
zz$LApCnYwyrdqkPg^PA&i%jQ_qju-yb?|kmoAO<ooIg(`ll-dtGfj$l5GTKSoXhVQ
z91Uhw`~uVU9;LdXRptePH&LnlM<4`vAMND;(o=RNbt>09evs2%!eWMy*Su-Y0hRLi
z2Nnr*cg-W?^=X=BOP{}BF`NQc_a9~mHP{zMg?1A~U{tk>z3aZ-Z>he09NNIpl4vB{
z*N=d5UT0R)TzWSq1v)V0eo%af+_;P}$k0N#9=yCO#cXcc?BU|Z5w08fW{GQQ&q!n<
zK&{FhMyg%yj-xJm*YR-yBX9Q}zkdn~LKyXbvGMZkuMDc7{37PRNq(@p|6azQxICwC
z-UYPwqn@gCWpu88)b+MHXNDT&u*Q*?viAXlNT5V|?A9S2mW+gvNd{{o<3&p1!0X=z
zG$@=fYfoZaZt`V87eB%lbZZRvyzt5kEcD1>fa|i<c4~9B!}QDKJ1zs4c@LKRqWUvm
z#lS2M0gJPH&mU2^=-e^inyxW3iLvix;)jEsT_NNXV#%)zsf?x{o^d3{4ctaI_H~rn
zjxm&5UePo6%^?Zcu-rQ}e)hN}n?`)0*y+W15sT;2fxa?$%S*0nX)(q{A~rjYqEv<G
zOi~?_dD`7vcsS<TQr_G1j)wkv{h*6Z214wck;p?ZiH{yil`w~Sv>r15X!{;6JQaNB
z13AX-3%1m_)VL{bG;W0$clachXhf%U<kc}6dj0fLnRYQ)?lIsrXV|IMabqTnWk4X7
zuxh_N_hXFF;w-jW`eBiElAYp5ZBH1`9O`@si7tdNp9aaL?$-WHfg~i;`O2P;@Sa*$
z?^wSz({sFKWB@+ZrIX3sjy(9*5$GO*Bwn6(yM&G6mIVPvA*-=JRr={YZ_xdD9Hshk
zz|KFwzpv>4)z3o$4W2LRqP`dcu>LCwa-TR-`fby*)hbz(=58;I?$ET^Pr3cKi!kA{
z4sd8dlf_@Hw*G$l!8XU$6CD2k*|Hqx)j8^A-C{bs9UW@fj`8PtF^gjTJjGQaw%P^%
z7D4#0Po5ktok(X77}bH<9j-=n6j65`@B4zsQ0fGgq09YKrUPnRYV92tMKVI9BIy>V
zdtL|8_E$#i)M^)nQ7z+VQ1GDYvAqBV*hhjg3zSzXNitTbL@(vHARxBOhB)4>b{HoV
z>S7A%NKu}?8x&>)c7!pUWCUE;7WkABeS-kmONP{<kgFm5R9D~IincIic51z!!D1Xx
zLn$c;^%}N2;iS%<AMFh1e+Cr#J-=#H4}Ns>e*K6zMPsh^W654>bCg{67%AMr0?n@_
zLysj4Q^|WE?Zpxx(CbXy_YU?Cb~<%Cq0un(X=m65k~w4Y>qQ8#zxM|2$y&#PU-QSO
z+sy-(!hhw37u+Y3_q9Uq{5}AQge%(sY+^S;O48+|kVBqH=hzO**Y251#lf|&F&B1D
z7r<0*(NBe!5Z2Yffc?%_l@R2D>z{NRI~K?zN7*=r7N|EGwdM`sN58#9X7Y2DkyRN*
zYkGJ<(!23l*qtGj!O8*d=l+OKp>7y{tC%VT;cMf)DG>O5_-?*HvaUlVWWF#NMF59_
zIWn6g1lUZN2oXkC?A<kgpXYYN6Sdi+1c|)TI%`D;N!ATtr=;^M`1Eb(w>Do|L@{Yp
zZfw<1(Q`<Er-M{Qte-MecXyzDf7e(d{P4rEoVBYN&Pgs1Q(^}M6_7+cga!k_AVx2P
z|GfX1WL|WYj6=hdMa`*9-1#G{rD-m#oNeYEePCixWl)vahC&PDW5E0H-g>~=N`^@x
zIRDB&p>tABc3X4czM-tVo5_UPnjkrAU*B2(Fm$XK>4L-(njsON{K654E1}V4;i&A#
z|CpY*6&=91zrv>GpY5e7fCg!p=YM8N(Wf8(ymoH;gZo)3PdnmXhK|^|dDAMgj?SFm
zuF>1g_OhZoYv13Uxd_UZmQi~t{+;ox|6DHu88ILDb5S8YMYQeT^3Dku@0kL=#b>`f
z1Ab-?Hdu;E*J9x0Sf#JO?h7G>)|$WyA^e2~L)hN~Kz9g`2X&0Z!k4S#cDri1hwTvX
za}Sp10p`DW)rAr>YSSDy^CNFnQ)43EAQI&eTu`Ilc}PyoJ^rz9ic+eAOeTbALckdN
zmYz)i&o|6m+%{BjeD<M``w`PGthjI@ckk`vE?--bt;iF6+UNynh?Zwh05BDpGr*-5
z?jC`+^b?NYmA{<4{gHnb&dHE`AZEgo{BUSd{QU|Xq`auBW-|s_!(zJe<_ZlQ%bQ*<
z{p5@U`iJU)eMF>hF|C4Fw2&dI`b!pCNsjha%A_2Ne&z26FYb7_oE4=8s$6IgyZH|h
zosLuR9`-FDcDrTa6qTzRP=ffM>PJCi{d`4K3ABC>Zp*I%T~v~&E5VP}w`2p=<H*g`
za$!s@9d*WR#%KG^;8nUKh38k9fanmNN)d}K$2`}2nB<n8&5sTnIw-^*;n98f0U)cp
z>!gctx0z&THm8hW$FOUEKu?uC1>){dc83O4jr@>x9&$9`?&Xd`^lv;US;F%8R)K=g
z$XGB%E%4V#)-`!6*D{=gLyABD5aU8T?!$TEY_qxFuGER?ce++ycrYkMr&}Svf!=B%
zgoTZ`<GqUw;}ZKZ#;-^?#o00c%1XfM)lmn#(rCIj@s?_(T4r16Jn<z_+z&}wL-13<
zaGC@=HVe8Ff+=vVWe!T28J!#su<m0FP@1%uVz)5@1<6J$cX*A?n6@>C2#_KOQA~*U
zz8GUlrLvtU$I|4Fwt!gQH#3GQBxsqOFd1Q0U^4F;<`+kkofUMHA7t+uZK&gsjsc?S
zT4ES+p7$(!0}2|*xg^HF$NcD9wlj%<>GN2`$*ec`@RH1TV|$O~BVG_zOxgvS76j8-
z;N<WU!`+(~+P^6srJOR;bW}0BL!QKj6w|U|8)YXzqrFAWRs|)|pyZwp1`(8gYzfKB
zPMe^!lS-sP_QR@If3Wc<NMzb`h@9e=X=0>Siz3p`Jo5XSQxnKW@L0p2${zNsJ7nQg
z1^)!Swf)9I4WmdHDpod{=D0cN@9N|`ty8sKGgdFiN~=44_glYxYSe!E354u-DejZ1
zp#w6`H<cDpR!tAeT6CfDn-aWYlo?}s;>sN*QPmGT+}Ik^@3wW>U0=sA^W6V2D5&QH
z1b**t6O-fe8R0?vgW9xa)I3UYFRRvFN+I8hEBvtmR{O@ursYg^&|6<<y>CX{mw37X
zz}hLNq_Aqw^lW-82{=Fk(#<+QS{-{E(QimzMwQ*eWhM0owvlC+3G^g{rw2hQG-sJy
zZ3e+RnH5nN{OhB|xTlQbbdskyH<&Vblm=cR;{RX}1iiQzXnTSeq*WUv%<i^7|9k@L
zA9-#^280}B$W_N_&7Oia)FOwvPx|O=LuNO17=PpgGuRpw3!dGufXk`w0a%eqgkqc>
zIbh|^>oOwKO2qA2z2{JuUOW-O)?RsJ57N1=)eJHU%Rfnt^HxOW+G-5-O~D?balFO*
z#t6P&d&q5QE<wTC@X4d$plezrwZY;BoZ;UV6B)<J7vE3((mTxty6;SRxS5gKP=7^z
z9YY8(7Rplps@)rSNGA!s*5{n84DAjj4gIjMy>1(Tvk@rtuN_i&j*m)jA+M{UJI8(P
ze#8BHVvYx90FM5>2(l+A=@l$<#0S=r?=~z*nW~*SHT?`}OM?OmSLN5XeC^=O<5U|T
z#eUMak$x^HeFZQ(<tb@6^^Tn!9h!1DyFb0Y7ifI-vu9j{2VwQTccwFB!`S#5doXph
z&Ck_RM=pshyCt7>V9_Zz1@j=VTyIiDu4$S=N%-<gF&q=3;fv<6%1`spOk}_!Hie1w
znJD+r5<<QMmo@7}44LA?g7Kr(U58@5`+RE%PhtWzPJ|#i7_|pSO|ww{@@|owi1)*m
zPndQ@5_KK?WoLQ;TV-tGm-Y{c{U?_iAuj^JQtpd|p9Ri5<DbcHB8_*RG@_?j>O$jI
z{%Iu0b=2CZMaiGd$<vE@lgw_;<hNRidAvI?gW!nXDjF8Z3ExyRrDdo?X3=sKCjAPv
zc|=2O=0k0n&cO~2{?0nOuc3n!X#VmpEP<68=K}-uYt|^D+C?Unog4!qUlKKOdyl`I
z*6ftkP*2eV;LERp&e;chSYFiON`n*DF4x*Fr`PlgZ|DWrs@<!uTKY!#``{Pgd40cv
zI0}~>Tm!1-Q8ySl*4BMcr2;P#a1A~R-qSY2%N#ge10427wP<*;7l0jPFMh3PSmWT7
z-arC$=K<BQQ^z+r;E~o{99=*vRhG~nruz72YXTDt7fOk1#J~7{Heqwyb;JEaX7i}-
zOdPw#IsQ0Kwp}gl$eRbl&mL;II*?)>`S&`IKvEEhRCY|{S9)iQP&hLLi|xd=Gcb&$
z@j+Mng+zCK%S!;3|8_x*%41X?D9b1HCK;>=D3qv-&KC=>!voZQtIX+!Z*9#;Cq$dG
zGA;I`fp2C$4+JL0o)jzvWn)~&y^tgU>I-&#M9`i&9tA=9pvA}Snu;E7-U(+LpP~99
zua+JpmNZf>F)j_%B!Y3xP+PF2!H1<r^^m^Ehg?9j+$#q1n5}D54&hf7&3Z{odRkrI
z`7l`j&V~|87fC8R7?f`mjnKJ*jmftv8PEWH?**1vaW30zu#VDsNe1QPBk*+)cJ8%-
z$y-iU_wW>*iq2=B0p<a<+s}eKbrP~_jagPxFj(s}a0&rX{rpLlWzW#{@z@r7&tuJ{
zmW`4ajyVtvC|tlS`~f=Yc-0_W_gj0aY-qi0-v8XzC|J(at4lf?41Fmo);u?xh%0=L
zc;$5s`s}qNVBC>rCn?fhPiNlMCN$s&@AD-RNn^L|$UMDD@Q=P_NPQU^bp`_vlB(`Z
z!GU8!@Ak0A`;GW3OyjjwuC+usz^FdVVvL{%uY<*P;FI_f8iHJkNDnj`qfl>^!+OcJ
zbbm0XR&_$jB{{2>s_#e_y!(YD)j_lhCX^m)0C5k#DC%)?(3Rt;W{?bUk5WX$cQNA7
zCOAq6YOvaJYf-rl<4zIQx<J|VKBEhGuZ%HI2FS+2(oz7v!uVQ{<Q2fDVq>hlcPCgT
zocAAxreg}}NeF>{)eOG=xgTQNBiwjg((6wEqrj^>6W!dlGi~(~#y$E8-g{Bto*{@^
zNbp9(PCqN$M*i5oK;?7WmH?+q%dIUWE6&opORhxcfQ_wl16=^JPQXnd3FzfVXE96z
z(4eW~4%uS;6YWeY7JU_1+yt&lJ)j4nVw=+TaviY3?u16d?3d#SLn?6-D(wMW1TCv~
zDg3u+M<1|e3FyJ0!78J0s23DHWR@O)LMc?hN{CmcNE+wGtAutx1PqyfHl6XSuK~aw
zlE5JVz}#=Y4V+t4{2|Vy>06?JuZao<xCPc8&akKq8zlEn$j5rmZrqY@z=LTGdOL5)
zy(KqZf&;9vS9*(m)qpeVJ<BDwy>=h*v{$|O`8Ft2$qs@dB0<)>J{5MUMF`u~th>-B
z{T%!d2}_0#u$McjI$)KpW-QJ(;?j9G*aD2(RmY=ICDFNPRH;D);rPcZgVvo3#$#aL
zj-o>mzYyE^n?MLl*jk{nL>RS3bJ1%^c(&haoLuRPBVH_4^pc|KWk)}o<@_H9U<k!{
z<P%?{EJd`}!^##5nNZ7w)<NJ8PY$@{Tp=Reyscnug+OOJE?~@}lgMNthxQ)&;`q^?
zeQ-;NG0$J-3fi0SDPzPh+CmI0M4ffhe!c|>CFeCI2jwRBc$-c^0x(jJSAM+|VL?!k
zeWSmZ4u~=M)Ww92ZVX5Z)&XNPw8pa+V?dh=6FYg+F75zyZrWnOe;k?<lseU&0nuE*
zX2ILr0p6OW7T@Zvz=0i0DL@piFt<YZRQ_*7do~V`RFBE-RT@1tH*qZ$kS>O~w__Sv
z^EbE!Xtk%PjUt?J5oA?-Ua6%>01}pcM=vcQp0th|PqcoZRsJ#p1O%!O^)(;i&?vAm
zT`MZx`Nzt)*^8l%04_(u!i(eUsP9kCg3qO6r)<BDOT$wTak0uJZ0EN{#9`QywHFd#
z_|vA6Oyb^>Z*4!Yrv#8#Kmr#tYs-ZAjqWVCGiw0R#R%ItwQbS0z2K`PvVE^t;IQ*p
zASv|+lwo8o*Y=cqOaTgdR@?Qt3&Dv;@-_ptu!jup*s0e$Y?1BrI>!727UXDc`a$zZ
z;Vj79n*Uic<KC!FEXkqi?Hgf}WWe?VxZKQpsIw-rz1J7M!8mX)qyF_0P`a9+7YDnH
zI#FfeS?wIr?t92Gi8`xdH=#Vz0gES*s&_m0y!3=qjb)fQp)RT3&R~Fa((Z<?cmkq?
zC138>&NK+?hm<#5^}_?_Zp3eJ?!b87SsfZnPf}qN*|bWKe+HJ04wQD=`}ZyS6B-+M
zrT+|&TSo%p&7<0czgb=&Jg_Qr^X}l&xKtw>?zjI04hSqP>U%fR1lT(^ESMWEfns{=
z{0-q_`*rA06PJVTEZGW-SKn4&^-@z+B`V6x`j4|UkS9$hS^1}N%BTfYc7L`33z?d&
zO?0!mzpI6}vd_;878|&{9!vP25U*+3BOsvP@v2l?i9K=lAJc<t_$m&t8jqK*Phy!A
zHu&rC9c++UgpJgR{6Eg#{UOQw{U6uaqMGSCEnO&;9oNdt4tPL1En79nj+?2}sM%3P
zJYsNXR<7nCvsO8TtQ8%mRLf9Pv09=X#KNS~LPJF)LxEf67VdqnyZ84W_`ZJ3;O4%c
z_w#Ta9tTi$Mf|OUjfpMKS3qn@I?x^~_N`1ai{L1?4sI%iWK}u(_wh^pgH-!7KqFqS
zY|B6P+j_i`bReiT8Dzq<8vwrZ4H;_jG0~&ecg=e)*4s#Oq}t-?MWO|4(7!72G+`}^
zU6_qS2{dTzNP>aJt!>?VamGUvs*-!D$evfiD!U2&X6Kp+pDa8PeAAT7?O`R-*;|k%
z>4ieUMw5gy82hSE<Crr$oK-rvSSf>BRgA96lF7nk6!6wk6vMYi-A1%}=fNYdg)JB-
z2lV%Gex)gl=njsB5%IS;-S!x+xD2xdr^1x6s+l`JDW1kGtAq2znKD{dMg6$Ia~-=`
zelX>}ffN$cPW2!3mG*`n0cfgJt&H;E)ao_D@JOJ^Bc|FY;H;G+(Z}?Zx3G}h#fgD+
z1{yZz+1g(db%@Er>UE3bZSS*la!v(`2i&f8^SOHg^zQl)*5vXDdTd~_Yfn!9H1;9a
zpwBKwX!}-D_jO!(S5R>TDnlB-UUiqJ#w4Bho`6~4<)go$x%M<u(SDnAnKuwatkWMF
zFyzdUIVP<a98+ACcb(~D`oG(lQdk>I!de`9K6|2)-F!Ge!d=G?ZaqYr;6a11FblTS
zzz*~FIUg1TseRO_53Ntsc9rAEK%#3;)8*E26oZu}I_N&+s#`SrCt}vJAjQdwrXe>x
zMtRD?k2W!6z%9oEDP)AL+5j;P01s=<IDS<#t(v>^UsK-~0<<5mcsd<I8IVDC6{B9D
ztsgTyky@Y8uRrlPV%xb=n|<^goYM9oWXO{-dU-?r`sc*&#1tHLiN$;?ftlngkqHa$
zJ)g#&wN1tXT!4dmfs^T2;YPNAU?`cBm8m5y`s!mp7_QjQ)x$Z%YQhgsz?^z@qk)WP
zU2PxQwCLJ1sF24fT!LyH)x(mF^=WRMAGukoX%C(^qZY@<9kY@ZFjUb6LXOy-PYY*j
z{W|NpAY8i$(s>^F#i3F&_-t8fRo8rI&vyOea2F>bG8Fcu!+{_S!7+h@V#_H$;(JVr
z1WGt~MRqF5XLw+qI%=m>E8E|h2l<xi<E<lw5THgPF_*GCnKaB@58MaO<>{o%<*z!#
z@Bt<>x@4L@r&ZGOS&%8WPVc?(zFXdz){s5gzM#vLh<{x;k|X+1cQ+v;i1uoGPL^@w
zBv{6Gf(&D}=H*}_RSsJyw&`CDK*h&mv@GDje^%|h)Jq%6JG5F)9&%5KQ1O0O78g97
z`Pq6#P^+-itfKXDH7%LVmy5QdmiecXVVYE@(8`lkVSkBKC%Hy-Il=z2Hq=BA&2+QJ
zJ9~f4s(?XMJu^>R0$IJ{ni?o}aG*Tpog(e1Sq*h7`8B;U0_@^bS-o&p*c_e1P|QLF
zWvi-S;VV;?OyAC)wctCpsEgYYD+}#Y71}~IEc!<8@G7MS&z+?jWIL?dQWG;4_77Hj
zxW5c-{&{@{JCx7=N2(Gho1g8Qv<Jrhm^0$^CD`|`R(i_)x|ceF`)PgJ3q^F6>1qAy
zH2TSYIL+xxxz2YXT@|)~Q}D^|e=mrZ_0+cV@IwNhf9m!@TJaTug;w`<gX{E_kQAfN
zl-H~)0d$PX9JmiNLT+)NqS1)fZD)t35X<UiM8h-axlfd8O?AMaP+s2qH!-QP2GFjn
zh%h&6WF25rl3GXb`T@vno%$A$$4IaCW^i>_vY{&-KX+p-rt6zttkgci1d+oLKaonr
zijT|I-g`|@Y@!FoQ>t+v9@f`_^$8oFe+93jAtk&jP@BV6+*C22oOmuM03yc-#S=JU
z7ETNUz_~%IY3b8W<}x0?8TBqwfM{(GgS>nOeV8#9VjZw97EXJ3ww6)JZ4_Da25l&9
zcC*!ie>dxQCoiX!hmmvGVhcA5g|i5RYXIv7Sc56u>3VVsIuP2v-5@V>iHJ8f+z{OO
z=s4IvPJ!S`1;nYezHn6GaJi{oXN4!&p_|z#eexGP0DyJp8VwNtW0aGN@EKCy|Nk8h
zmrtFM)s^?4XC2Jr@p(fhKS$}=cf$qzFzK3!@nO<G3a}8YdAmnQ|A2QrLT7w$6!9+G
z?dd5)Hgo%ApVfxafgX*5+ON7BbQx9v#Cht}?IE$sTh%=^T!57DI6nZJ*M=)TekScT
z;nUz%6`{`-;X5GR0@j4QlVS+dsr#@E6lT~HB{&l01BZbIHAH#X`)kN42l51KSyH8h
z*dU7TfvETMV7D*dd>Kb%KV)5m(xnV-iP3=~YiW;4A&Y$Oe-`!?=p39Z#g!t31#s@0
zrvqmH31V8mMFZ|hlb+Hs9YN#Jp5MaK^6x4mbW)gkrk91pCRj^X7wtY-6@zFUV_x2N
z-M5}R2NoHtlg@<XT{NL$JygBSc*$O<Zo9!I|1<#(bIE@$IEbZg>07!Q&ev*Cs8OS@
zfVTNm3atA<_JlhVAsryZq0o2j(vvDBgYIwHmjvp>&h*iv0wg-7e6Xo++xSp~j#nmK
z2C&@fG(D=e`zrCOeQBSZ;9Jss%UWX{wsy90Fu(gm*D+=B!$!8UHQ2qs)nIIvR|U61
z`)0!_n7^jNS!RH!sF~VO;VK4c-PB0<qh*?#-C(kF)i(*ILNCQJzk{NtYx+!%%Jl9d
z`+**=b%<CSRm`Y9HIajytu0vQ5Vf^nnK}ozuK4OF1pA$NI<4(ESmJ<Cwuh&|7#$%5
z@+92u&O`28EDN0mFGftn)dzOSVYG-6`UNN8!Ec#b;EfGJQ{-+ZaCT?JWNGQyRxeEW
z)^uCU%b)kxAtcXnPuii{`{79326&A19(4CsZXJ%S`EUdozB_l<CMU8HPw-^HzYpw!
zS>JT!H@Lk2dFa{5EMOgY<}Ksvxlqu0dNG+|u$ckrK-M0hLh=E*6&Q}}ijfv)K%qjU
zE=kd3qXU1O0-F$c<wWpZ1VKGu2kfUAH*kby2_D)S#qIztD40VJ|CqpeB>=A{n2M1g
zbhQn0EL?nI#uunVxlSOde3ra1d*gRy3yS%O+yozC#WNl!KwNqV&~@8-9pEO*?j7hs
z4f4jm7x$)k`~k1w>B~99-Yqxo4Rvkd;pZWUtt{8>oJ~x;?novARlJJ2rL_(v%kYuV
z+nTp;f~i3~kDv-|a}ZYX?43nU=m$Zc!wSCyd+*B;pTc-n)8(TvVz97>V6ozv-bcA$
zdmzr+x^niwsv8@UV}Pmg6Z}Tgm0R10S=dmp1sq$jNsuf!5$x@pi}T^$0)Lbb4trbz
zL<q<)Zm+yvQZZSF0=8dkt2+a(Ba2ShzP*l!>@EgV=E*s`z5qIjGv(F0S-D$j|LCmx
zyMdq`eXVHIfd){EbJV>|C*t$Zn1j&hfCEKKI1K`}5?;Ows$R}i9Mm^AS7p4s3g#cr
zi5oiUKbS&Ou1lcT&w-u;UWGKhxs1T=RH<Ze-zLqK4D|h-e{NMwU2_BXg5lA;k<NZT
zAwGAOx0hLJZ4jxOiy}p5TlVJhM9qMt(R=G1kh^RJk>rMV0lwo!-6U$*Ti0ql>%_|y
z?2B^%kTdAl%RQXPFV7X@Zimx91b0gRfiShzE?9M=mM3Sz!i@>g^r<Y}6KDU;CPKiH
z>0gKiRXY4{4|>s7e`qahTjRYB9$#*O1~zr3ge1^0FFaz-gooVrXN?~iJAyohJl@&_
zrdD^scla694kk*iY9zkT%NYI*AOb6XA0J2CDu-fA4r)ew*8ZWRo6InM_Fi)Cr^m;5
zT2Lb~t9Xnhiz3JqrD_L`Jdtri?}CRqtn!Gqgfs(ryI623tOBi1GvuG0lz$a++?T2&
z4y2y$k%5T5e80~NvJtuIYEOkAS`>qX$t0Y2mtlOBSAb1{!xr~>vqp;F<=MP@r0mR|
zh$nGUEptQT=IjIH_E>GBfZlGPte8j90^h;@$HnXet(-xFjMKvI(|e)MVxP1}LX`#(
zp>u3r14bzCm{1?n65vcvVt)s@L_=KtGQClCQ2LOb`M&VRMLR4L%#jr*kiu^&Z0a?_
zZS&hL<7bj`$kHcT(S@GD_EGg5SOWL5XDCnpnHHpuk5d+dcwGqr7%V!mev*QmHRuwc
z)_CKrr=U*-X!g^W272VR0qX5YOeGe36U24Bp}3w5Yr7g6R}0FvZib*nI_19WKvza;
z*Km(jiD@-U^-Z_;s#)s3aiVTzYtMlmIjeLJBSf6^aY35RZ7{pktXrUkDQlaVhbbLn
z?lHhAd1MXmaGEME12Fvn*!shHt_+GIrp|eq`jD|1?3_HIq{8+g=>FBy2o$Z_U}**<
zz5(S7{(Xg?kKIS<A4ekfPTM(3eU^bADNXj;D$JJ2-g9&=iGlSz@s<NAQwX5ejD?4J
z$wo)nK<JQ%XJzaxoUXMa_x;Yub}SYrwF_bjens`ZElpre4*k^S>4G8H6-I2$Y_SoT
zr@#7y6+7MaWyh+voi9ZqM^Dbg#3?g1Br$SGU-8p{f%KDY@gVoRvD;%cfcBZ|`Z8Pk
zgMw;5Nn)8AvqujbDG6xc`8r(Y(=j`({Qo$kfs*w%C)E1BO>1>;<u7jKRJZp=UR(>Y
zP}MJtC8*=aqv<~3Q3fhiO{Oq{B^5)RFQGCTaGFlBewnGkTzdvVDjjQ@>rJ&G2x>uZ
z9_2`_l976ohBQrZnnuhAOW^5HWh>0mwYD!kR@Wdg5^=0niWE;NRyK7)b_la-v~$V`
zQzpF9LnH}DY$)vit4Yl?J!{5&4WVrS+PUw}HEG0S8LNF&#r$;V0!1r#4V?=m`hxIG
z(Te6t<vBZBbA(*8)?2+$5oGX$Jaq-IZcHjhNQOZeC=|EHPDf0Q_iJGNE&F=`#OQIL
zKW4=U&bISlPV8uUbXDK{RbiJTY2c7aHRTD<Y;ok{f1*K`eTdcd5#Dyf@WhdIVTW>f
z5?*djvYM*?9QwLYx@nSq+XfU~-dJ{F4ac$460FZtpu=2TX<TNn($Ls(ngB(FTE(r~
zbGF-5GqqO3$yKA*ZUJF15R`hrL5Y>Vv}>8IM{?eNn;+PGdCM`tE=k%i`IHUA+E2QT
z(F!?2nNP6m_X9eM{rqD;)r#gk>5gWZAQ-<BuEjob8FT~|O0{oDyJUE{#t0F8mR7!X
zI>EffD{|}gb^?*tUaAUmRARVv8H3)r6L?7Xq3i1i=QHT_LDechH;FUxhe(}P;TSi(
zN+9h;VwzcdCTfj&+R#2MHs`ZBn~Q!ur8Iy~{cm<G)l?Jg!V^6e%zNVyrmK3jR&Bg-
zUt>YK+HMeAPjNJj(wI9iZq?5q+D8ce8V}IsZ5+_cAi6Ht1e(a_OCSYts6=wRo9+GG
zNI4z04R>+;0Gw@AZQ%@ONEWKE8qQVgA3<nyW!J3!>BBHz9h{N!57c_n-UU#f1ZU^a
z3`4IYAx(8vwL>yn^=Sv6^6yDslAOVd)m&4#HPd+9$oQfhF>)m|kuC|z;D-+;U59r*
zaK4T>ByXBkeP$eaaAzN;Y0Mrt5q7@cAT^rt@%|<YAd8k0y<aFr|5k^khGktaX~-PA
zJ6h6k9;hYJL%6i}jn4=Obmh<r>9Ogj;`ao<98?niU?i;3!&NUM1J_s6XEPHJn#;8v
zczKE=t}@(1<}i4pc$wejNMQC*v=NC=fj<P7d798F#cw%EG5jD;!-v2IlBuYB#2sAC
zhSh^+hl>8SUA_WLP&?B0u*J#M>2wa;rL~ZPvwD#)6*8zx@JP&q9Id<q{YwMKw^q7p
zz8;=IDyLB~?kXkBg0B>42lnHR_GBB4eiDxjQ=O2S4A_Zx(TM!K-Hr8rM_=Lp1fp_T
z@1~mUf_SRrG8yZkxWTPF8C7fKjaE~h_VOZY4<PIgRueqxDEy#1kL~8A&xeVjwD&YF
z)5$cYDyCW*bH0B@dHmpO-A5f$`SOt9lEMgXjWoupbR?0FwBpF2k)TK5P%<A%O-u}S
zMlg`3fV+ib$qf`_NwVV+>!5ACXVqN?;+p2*V7B|d(lwwx1-)V1r<n<M<@VojE^*#6
zO@l9sw(6aG{lorjM($xP^m_U{smRM2(sUdI%<VGSIpq`Luru0>%}wxXOz7u?JA|9L
zE2I}Np%(LI=Wd8R3d)W0E`mBCwVoibDg1Ef!ABDyupHn&_zKz^e^2>t_p#6|w^mT1
zM}F=kx#H;tEqpri#VmMs%+s3)plVT@lQ;Ei5rqZlh5uZ}J=-(kD)EbrC!wke6aJ;z
z0Omr+LNoLhm2um5`-p_Fwh(IGaC_QKUyk*FRs$R?5^2GK@rwvBH%TM9K=~tsPp?Kn
zfg14h7ng=*S-XQd!t*`4AfQsv0T_9D^`-8R-Vn;eW(N&>e}Z*<GUVd$#3<lJInnDQ
zzsd%iju8BkrU-ft(_CT|c1kvVP4{7?BVhH-OEw>?GhE>{P}dV3!TPoCbSf3TJOI{V
z|LBBQSC+tejN}3fU2SkUml;m<$i8ej>8Vm0RE#tgB??OWt2$Pm^X$c|3J|OvopEmp
z1!}bGsTjKuKbV1sy)xV$^9sm`b(>NKVE0vtt^z)%nXy=r_<X*PQ(33dI0k%9>lGVU
z{x<3ouuUpSZ5o+&LNmkX$&82wJs^6FQf*f{G%-xpE@CKeegD-2UTTl}rb`lP!#6jN
zc=wJ8J7ak_0e?SOw@JV<G%NJdy*)>esksY8@dl%0upiz{#tzD0+@pC%j{-wNVJBQZ
zj-6dh0E?8%AqRm<3?10r!*BFK;iPQAA-Z}{AYB8E1<i`paw!x$1=G4c;rQ0U8}|p?
z)?$0qYkwmWc|hL1CIG~x`pko(ntOX5=(14^JNpZ9qxi`Az6F75MAjw&L}<59!Z973
zPkx&qltuhag$s)5{%S3Juq&kBCn6hWi^pDg0)+L~b)~@})!Mg4O(q^GJsC=9KSqEb
zjC}yCQT9!GL~M4Q41z9BH`ui+C-1!nf011y1hB-2w5FUriP&b|1N!d(rYtS^E@`<h
zBnY>H<%-Deoc;SI07z;QI%9JYd(xkecCY&iq;!b@b9e57q61!V!lR#<7^daWRDd6C
zi>!eu=1j4^^@n_V++;&onK4iDPIdEsYu}r@>*r2QxD?9v8nEd#He=*fB$A*lx2zj4
zkQx*UFb#cwH-}z)tZ!u|7wY+1!v(zRUB#B`6u4s4i*I_y9W_F3@K86cDL1p?=QZO*
za)#aXF<jegenzl|1wL58m@SUF&){&=*lPHARmqy+x3((acBXGuw+SJoFKU)61+%aE
zj5$7ois@kuqVBP!*wBd*x1F$rF=OW>1j?+}^d$$ph||cr`^KqnIKn|AmI_j*He=KE
zx_{DCn8R`WOom9#EF{@I&fD655w3tg!l5*EX;p=_THlbYD&{z6CsyVAjP&p}OTq^;
zQa+}W?#{lt2h^F*5HA~Z?EIpq9>E-dXKxsXf^i+z08S=uqCS{=e#TnU_u++qvmrKu
zbIthk(jb++$DWGzG=TvG5Tfs_Zw-@ag$^JKVeO3;NAd2nCqIyFs!*YFU2C#Yr{I47
z5Ho_2%h`9KfI!^X&8Jxca(aWvn-Xn95O_Qfhpl13Iv|xHPX0~$ywMPB<G)=0Hagp@
zAE?P88NDI>V=ob;rmjz{?C3|$ID)<If)-`*=oQEJQeKcJVktc);d#8wP#HeY1hYKs
z5$s&x4Rlzlg*6c-#=!-nd-nz6VXyX-xmloZBgm#7+ZPlrw|{kE5){Vdgeru);jug(
zp6TA1$9UVQJgFc622!Mq{6tKJ-SYQv`1cKuh)ic%{{US=m&{r6X}WGGDmo-5C(!BE
zEa4!H*Lk}`0k9EpKxw2yF)-p@It`ik+U9`ScY*;E(%RGgcs;mi)qJ329~381nE$$O
z=QamDISZXLIm)phk#y}7&T=aX1vs?bw}osFzJ3-v>r~rd>NY`&Dd`USYLxJmN+3Ao
zE{;{KFy`0SneF2qI}wWM>RaV87eIKFQoYF_R_u3q#jo~_&dthYDTxcfiQ8JgisS|p
zPf|H`?J{c8XO-m%t33F^^m<Qro}`5X{05*7_Dy;4MqY4if?g(5ULDXYeBauyoj#~6
zf+s5L4xjZxoRNf44vH%6yu7UZ`ZvfnBoc0oShkKaf2LtB-&3xn(P)@+&TM}Oo%;e4
z;K)4|!VdDYTXR~u4c7)}ro|P+@W`LkGH4ACB$WwiJ-T6>I#v97*ZyNlwYqTZq5ZXC
zrR3NvRI{2KYcz_VL?Qr8c08R1+{Qtd;psjuwIH|pt25ZMHmB*pPgvKkSztsnic;*=
z3bxMV?TL(ly09~Iz1C1*`$Nt>Wdl(fj;0W<<U;?WSmGU5@^<PuBZ9(IH}zLI^&wyK
zJkFcMdT7GN@VwX1kXG!t@Es0S9vH3MoK5N8&?(UMq2t83Qb_-o+{+V=Ub|}JZ-6@i
zyUHZ}OfQ2Fprnu#Ami3(VY1!>i6Z9Q>a1KKypVnQy}>p=lGx+QKOjI0adN%yQtCjD
zB*Pt}u+7!&o0>oA*Z?OY8E&oAs*;g_R=^wZsn*NM<V_{S;HIl*MFI>Ak(-|9+&3C?
zb-69RVyT5&{cJAM2IaV-oaq!3rg+N!EJ&{i<)?v(h9r>`)~|%%ZJsPtujFJ5i9w{3
z$w;rKsh{Pi5Yc{Z=jl`sWj46woMg<;*e=N!@@PqI|2)21SNMz?Z)}FDNY=@~Lp=5{
zo`iHuPwJ*=wt^19dG#zEHgps=tf9jUQqTvmNGl87<!?-F#$vKV3yI+^_w-@97_`EQ
zp=8Qg!RXD!Ir+F!t;I*QiPi_yr}-XAo#_{reT5mdX)YZK@&RI=Q+KtOmq@#1Qj`1D
zt*`a6;7G%_g&_RxCT<@i>b1G$u$65ePbt8tw_Dencv@gqBHcqCHFPP9`A~j^gcL=-
zgtNqGZF~?xXymqf#xM=FYI@8vT5w-ZO8s8F(YZ%)Ha_=H5eQr1o(*}TIH&VgPo9Qa
z|IM53oLz9j`!8S0u_IHoGOf&4=6!`2(!|YhCK!y>{py=Rb=4`bfAe*kI{7_JhoRGL
z?E<A%SIiy!y2%}S2f*O%3PAyaNUKa!$?nciFIo(&r9A|Yy=q;85#x_+?<az}k3U4>
zfFCkd#ZAk~wW&C!nzSCRy|1y^8n`dz__7}LegqS`s0#-`4ROI~o{*$#go2_DY+j$w
zfk(6{2>6)E;N0K4D%dKN6x_3F<Ux8_<YfcQMu_~iCtEqfibUuJLwoo&_VaI}-oV$G
zMj_Tu8`<wGDXaE9vzpk6lzL=72yajgw~WorL8`rSH319TkPc@&K7#v7KsmPB;FIQD
ztxl2Jh$UN{Jt5WVqjBJ|a$}D0%pRDRy>5TJt-_TrK=0sYnL%#1f%Ac+3SDcS0P5Ge
zruVVFIzzLq^S6Uq*xj&hxc_rpvs8vyYkeEb?JP_Q^^3Y!5Ko8plW`g*<Pfy8_OIYJ
zEN-eQ4}M0L@o;bgM=KmX7pmgx6^<{6ou+j@mcdoAB2avVa{JLIuy@bJz`qlpE*<+n
zHzi!E>jQ<f^!l($E;u0m20!xx=|x;7<_Jom=4GlQ^%<G0drZ?0%GN`%UZxf)I3R?I
zR9@XsATi18A0Tr=OHmW}|Ab~q#E15t)hp|4y1Q@bUrsDT)s52L{(45BCLgr?s-#Va
zCOeQ7&JfX4cRmI7kmzMR;<02Lge5b447voT-Ph1(LP4B8k*X)k$8=HCb>i$GKFw<P
zH(|-BFMwb!@1dAFfQaFu^c-}B5`Y=xjf%GDw2m(!?oc?E7}}{oEVUce7gU4MN{SL2
zdMJO3BOMqCP*V<!E$zLs6}^NP&xPw?IFxpPLeX|)?%pG_pqT|y?d(VK6P$u6Eol^x
zppahPuPnagONw%47;=HvTg>;kwT#m$plE?JEno9C<!kbAXsSUEE=|RXp%(pIyp?#i
zk>Ows?W9toGWx)>4>X)XjZ|+Jd{#c?%ZWtnnhWt`Xe_{wrY@zb;NUhTA{6<?Z4dk)
ze`cx_7Kf7jzI=Ph_v4Q*H3O>~Lk$iOA~o2(fjk_cur2@vSg~$s>nEQKD7cS5?gC*8
z;A>Ql{O-d>YyzxU0-@=os~i~5GN<?(kf<gAfLEO%R*j~Q7HHr41N96H>-k`zG@`j#
zxKxGo($rCY&J=Gd$zg>&x)|}_Pmn6s#)E#i1@wrhbq*Il)UogGn6C+_{vjax71ruQ
zDNmFWUXOU4p8sh7noBaHTCRt(E<Gw`qiEaLQ+I&~?Kua(s^m2z>^mTFZgL|y<R#6F
z>5s<EqR6!lt~fT2AYrt;BtUM_UyKUonAMCdIp{<hWJM{!Apz3@=fZE^t{qVsAnnfJ
z3eOv`q~fmdi}>G>K&g6=lWdSFuVg?hz4ZWyjXP5pZX28Fu&M?Bxd;UXgT-$WN~+8(
z)2%HtBA_a2SJ}-cpy>fA9+5LP-UKWdU1axi@(RCDnh0C;i{${o9OtUGspFu}CLi3o
zf6DD!`vBMQpUY>-WK<8Gm*|Awm95~g9gjJeOkY2ouHMlMM`qTul#R!r=EB4rze8^p
zB7+5@xJzXy*$Q8+1;t&Z#j+6UxkW`~!C7jPMERu4Q!ANsd(0bM@90w&$IvN2C0XIz
zli+7wGAICF1tvJWp`31|K^vqpIBr}Y)1z=uOr3-$$LN7S#)GO}@wpW+K$gW|egSM~
zV-Ms>V~#$XN?_g~rTB3(k#i8>C&2rnx9&i03_2kHUPyw(<dX&b@(2FJI*TMY9gwFq
zHRok+s~KKfu+;{-P+>|9ZO*QVK)J7(_PCPhk=(#sHQKa?@KvS!$)|uFo$*DjGa=jp
ziJ!4au^vpo*Es2aF>ctCVZxg<R294Se$mu>{=n*V{P6znOt3bSX)|95_<{B<bu{{o
zKQHfS9UDH#?o-E=Tqi2d(WA#IZFMiXqIG-_(l_d~RLZiwUoFY`{xIN01<=^wLEnLe
zI+KI_Ccxlm&rc@ZMV!%e@-Ib1q`GmF+=;CHIDIoNC<755Rhy)s`-QO?_|jnbXdXms
z@mNKZ{EW}YZ95)cy315huBzf06`gn1FV5j9VW#;`)S|GIK*i*dWq&;I!u5Cg>HQex
z8tQ%JebRU7@QV)D))bi4A!OLT=4EV*FcT-xu{y!DLp;5#&DPC@r9It}j-0;(ot{Wf
zH_4$`pL8|StGC#$bturzc(0a|?wMjwnLy`^D^;<>p|K{1Ty4@SziP}A7+zW(r9K@2
z$aHVbwG=#eatt`3bIeBJTji8BTBRMNxBg5w)o`&SQ%!h~n)M>;V9DYf(owx*C|Rw^
z%&Jx`EJ9$s%Wh}OTS8}Uv;zfooK1DhvGngZiy|!3zJQvsIScKvnIHWizjpCZPpP_-
zXAmP2DQnGH%Gnk$9)$ZIHBoepUd&O+C@ZujYkx;S?7k4R(JhD1_l(jzkZ+!;SSFkQ
z$&`0NX01{~x{0Eys$pyBnS0$1Bhstj6rNs>ES)niMub_2c1px38`WT^2xy)S+@5o%
z4_M}$UThGtm`@a1R2>Ongw=yJWqH2}4z*B>PrCt44zw|dP6t!hqa1ac=pjL4)!*Gq
zUh}CpQ~GqAh=cZ+j6JG#1Kz?IX)27l`|dM}t+>M6HEC7i(t#SfTH9P4kYB&v3FGUM
zqKW?j%$A+;w-a23{I$6fV1-asahGy`TC)Vd14_3Y@;0MVnqjB8Ty=<)%NjgdKw2lQ
ze^K7@c3b0)<*W5M!b5Hv7Xt*gX+6STEhiB?O;W_db2if{=1lR)rRw4}IZ0Fh*~c{D
zkk;O}ktRW<3$uJCjpzz)m+n76k9mzg+NlLV&&l`m<yR2@W%p~%hd55gY(T9O1%^Li
zZ)im#$Mg`VK?qI@FbmVnId7m{8wA^xwc&?~jMPw`Z<&v0p_=w67OFng9!!%%YtvnL
z8I@!*>V#!_o5>llkL3?&v}X@*{<$hdFqzV)4hpq}p`!tv`KKrx7TC&W)qb3+_o}n=
z+z#`0?%a<47DCrzP_@_v<n;>^HCKXDskQe9XdJaq>EG?b^i?`h?Fjv;;8-#*F<6Y6
z#AJ70#txG+9ZO#D3Fx|i)ly@FB!N?Fs;&0Trd;R>M6?}+rwIWzymD3U$zb-~umVy<
zPAr`<_<lMCZqI(6`u4!Uh;U<LY|sE~vQ3L&7ixGA;iONQ?-8soRZmN;r#o3u+wa~{
zp22_l0ogX%Px5_DBBv%zjqDfWXTH*|AmnA`>#IL5GmC0->rnkLvQ=C0EcsT}?>3Xd
z?&76pgmYo$e+bZ#nkR2zX`pSvnCK%^UJX*ul)R$4c*@qhF3iUj^H0O!0nDU@HhPq#
zlKC@NW%oV&&+ZQKN)@Tk$<<uAZ<IJREP^7koBNoqt^H*_m3FIplOYJ8XTg1WD#ol%
zz!`yiLd@-CvUJ^m<6M6=D0TL1|DlKwII!!fM4O@efu7WCs-5Z6J3L4=Q^^0^hc4G(
z7Jxy4$`CLZ__q<5b+614s#{pa6Bbll_%-9Q+nlKl3GHm3a{l+euR_s*nfd!_4MZd?
zL$4}X+Pm}!Nt$YZ=Wl>>YUOv%qd{{lJ63B{^g4K!@UD@IBGCEb39!FBUH^RzPoe`9
zG^5~~7TCF1y&>nQI;I-(wvy>yeik)T(2`U~lGeI6{Go&&4;%?tNe$|wqbXH76tCQS
zwsoiGE(X$53iKr|Wj*Qb3dAQ|Bs$5*7X11_LN#~M7jQ7aj~{#F@8M)!;Z1DE@@J1L
zvlTv;@7rzDwu8wfZ_MU>MedOwpaRy^-i>%J`^aqP^r#ye<QV_$(+-ONL%5x34!gl(
z)PQbelTxb2NxFgm<8!pVO+VD{pi`J~Eg9dWym5Y!2GimsmT|SG58_K_#f2D3qG9`I
zY1xZG90}Yh5^wfsg;Zx6kT;KpV@_l&87cZ0ItF~FXiBnG&5EmB3}`ToC6GfNp<?!`
zeb04;U^zl`b++sM$|0V$W|aqxKWKhatYvAJ2Zevs=jG<~JHlgl7%*RF`*-WKD2HlC
zw!xwQ<YpWN%q|Sdb*Uzi;O*alpj0AERYS^$OlNScr6wq-$0%O^vT`H@sA$K{dsSkA
zpN#cHED*aBP>bv-&@jJEwS5e1Of_n}^$NEaMJ#lJvh9(cCaAo}%hQ>(*6To+KS{WB
z80;iB?@%bu51N`u$`}*N#5&mn!tfXBgW0m6P;SnUCt?hj63Sn%QlLQkHJqgN>7ge*
zwQk-3FIc0y&;wVw=1oHawLz1U>8&7oa2a+8h&f39DBChh`EOq9gG2wD{WwYPhKBMv
zj;aFMGnWu(Vri_lX{kLDPX0c85@zgZ(#CA}mAqY64|qZzuTT2qFicuyvGa(3Cl{i5
zYIi`jQR~B8bHk`WuiIZMmAkgP@6-cZhavrAM5{F?Sq2HIAlTUGB0y@f1e%h$e<RSp
zoqNBANmWp_14mSj+#121(RA=2x>GXrg_IeG(B<~p>k!>5h8z!ZPZYCF)F`+$v>=C_
zEbuBitCKr`23%zxbj1-eybTa*y$JjWn2nY6Rw1OfN{u~5-}{W!`32?(NwQc!_$Xy|
z=boZZNB76APcWk(>&B0A*zl^_e%l72RIyI;Wy!@a+ae!%g6BAF>7{Mk9+6;C>#NlY
zDqXGg3AFQ?a+j`gsR=SlW0cPAV5UK)Gk~8h3?{(o*J1UTECh)L+MnI@x{qo7&@?n*
zTl&76(kh@E#1N&tD4&`QFERm2wGP;7)^s0PnqX4LNw3iaQfC}mvAHJH6S56Am0Lq!
z&$Hz3Mo-;L>Z4(ZND$5ubE3yTU!7(=#k3nBD0kVqX)EK=)OBnU<ki6Ti)Th?gr##w
zt*uP}3P@h`ruTGzlWiJ#hz-#!{L+cp{<+&zD8RD|@dPc}i+``Vq`Ux5km4b>Y*{0F
z(QD}044(OU#~@pX)Zxm4WQ}P347ZuGMqhqFgLAcm|13oVg0NRn9B{`9D&`t}@^@k|
zxlnJnK=+ge;#T-gThEb{Z_kHQ^;S2dR&I>GDXjeq#G4vEQE1U$?#+JCWL>!Ok}v=Y
z_8-%T2=&BA*|?Rz&5=~{;61WB%xE2C00i)4e95gHq}D)ydGNE_qEEN!3NL;;3%D%O
zE1nzZYd*?GpWg=?*3|Xz@N^cSQ@o2`5uhwM7J)hOo^eSTL`)1hSmty9vs`iQudS#(
zb;kMtEJ<~jzUG6B0;zt>^SQ7!V_l3J4N?nIt8TNWKrLU({jsP*@kXazo)GLyWP%W^
zpf`%e{zU5?Kz_f!P%y!L;_o%ecD4f#f*!&CDUkCW{0-)-vIrYD8H~iG5zqwjEyz9k
z_kr<@OH`u~O8t93$UI?sD7$vAyJP~-A|WpW>`Y!mFq*rKhe(${klP)VO3#kyfZu;7
zwq%f|%>j!(ASFcRPfsM;1#k{vrYmFCDpC8N-+?Og$8{G0x73VNh{xWmES7dMZkQmq
zk(;8S<KaAbYT;p`{W76~&4=q<YdCZKIRda~hZC&DiBI(|I`Qo{IiIE3P`w?IysY>+
z_x84NY%f}N3{&37&*0|0Dam2QuUJ{U=7t7pAVG9S!BIftAX^rn_||ohEgLk@8R=d{
zmqx?Yv2Mu1VM}^?+Fjp^s-rlKqu$N8En0nMt4pfhA*_%-r24+Rn0<CLJkF$=X^<qr
z#EeNZy}Lt%h=c638)J`x_n;GD<36VEJYi)j19!`aE4Hke2yrG2+K%6pc&hrA<Up+b
za}@h7;z7U+0niq3tk4oX_0;su28G>+uj*)cIg1GVH~y%?N1zd^4trl6y-f^qRDcF@
zGJgH{q$`1}m1=u$tbR8Kv-y%jJ!Hf*I%n23zO+Ci`TAD8+;b$99vs%jK9yn(W9CZ2
zzuXL!6CuA6@z}k#u!2os653Rs;}Xeh2W|L*1+%Hd2*icX?ncx!wLz1s;(fdOOx<TW
zv2yZGUk0d99||~ecHHhqA6Adw87o9sF$EqWdg+Ux1J+N_sZ$5)7i9QCHtoZ0raT$8
zUJujFvY1FfM}8)}M8}JRp&#5=zaZG~*xcbvf;Ra6OU`6pl0g?L<=pqJyfyfO19qst
zk9`ioh1|b1!5f0}Apu*7E(*O{c2JIWhs4Xkv9Ri$*t72%$1->2XHY!Z&J*}lmN#xo
z+I^Aw8BY+a^VLb+<m63j=+OB5>LS&@5MT->DY!xQ@G(e6M+beU+TV^&lj3F74yyU5
zg^|DB;|sFHc)B_N{1m_#-M6|_0-TeR*_Gxn%_A1sUlrM)tuY0LT*P9ar}f4GdSey*
z2VNC<{GXgt;WEM~=9?vWiG4!tLRlA|DHli%^&4`{qm$>HebQ_3+A5>0;|u<BhgAE_
z*cBZ>UjEz#HRiCb-HdeSQVL@Mm`dX#=lR09zU8J2fCrkOP<>Xdk5w1?%k9%E&Q|HP
zy1`VhP1}9bybba~pY&-S)cT3uwR#9Urj{X>0omBUL(%J7A<k_s=JbdSe!1GOO7L>D
zYyqUW2d-Xb@VG4kTH4H;wdS1m<VB<7Wk4DHzaR&FwZjFi;kl_eDk|FQk==WL3mo7O
zUGm$hzwbE2`M}33)9>31&2Bk=DWi!+XFcm$$Vdp#TJ;SlSA&_#;eYN*j!;b|=fRqz
zzRLFAk#+ca@4t5vMe(Kw9HOKUb9e%@nE)^>Wk%K$o6HRMETo`DKkQ_nI!5m`Fj)fS
z1Jo3<?|@?HX%r;epzj_}^Kgsx`jGJbeV+_Rg-12#CjfC|+oX=L4ac0YTrIBvR8A6$
z<UuY6TiiW21fcpw_aIrORM)K6!H=f9&(Zlx&R4sLGdx~<w{!CUkQ$tUL93v?kN>rc
z!39sTd%(?%8fvtAJzm^3gVaj9hgTk>rB@s47i^h-Iv$7Uq;a{j(3xfs_j2qxoDCHY
zbm-|W4~QjuLw;SwSNf@2hX;ck(5(#+zovt0-;zl=iGf<n#{g%#S=g9g4vMea;A#Jw
z5e!<OOxF5@@O6f}z*>k@fG$k*y4cZ+L1`pBj<0-pic=d_d8_HSXpjLCeqZyJPFR&S
zR)@L^1FO|h1`XM@p6>gSsMuC_ieVkC#k!V|hmyj?+mTeezA9j2LuY~(&_Odi<M66M
zhbQaju+#9afT&Y`j`3M>kXxxLOq{?xI6y`w?p+c|<R9w7ESMYufpn%IXj(EHWl_1A
zT~xK-Wv1=v%rBxyq}&E9&x9Gs0PGU}6b_AcOWD*c6@e|uJQYk%NOb8@19TUdXV;!l
zO$s#r3D&sYgVUhzN&v$dP~+O4ayb^LA0PoWdK=t_6Tk_yk*#1_H+Y|(ZF#ilQX|px
z1I-wJj<`=NfksfFirg-o!!jw+|I^Cd2B*!dlMql+Rqq7_!$Xp;S*(z>!6H32q+?c}
z9-FRj*2(3OMfK@ZUiUQjsW(u&N!~X=<3{jj%7VRSB|5OzU#np4?-N!c?nAw^ZRJRB
z4Py==+0d0eyE}xVg}_VICak(!&Wm*FbRY~|Mx99rsa&<G=}wM$g;^KvPT(AI^11nb
zB;U9AIWX`}3XOFu`uA}J#Dz&3n~$`^s0O<|pcqV0T*6D{pVD2?pSCvZbiE(xP62xT
zB{AIgAD<Ng!WM~%^cdy|9j}*Aj}r-AYC#|~>Q9*2a7KH~3y(Kye03V%f@MWh;q{#d
zXc!<zNO?qcV=ArEYB%Ip{=FiGrF}=G7&Md>Qu)Rj!QmphRHsQ=vEsgp5KKz{Ajkq$
zv9tpM+K08QrvF@^ZIC@Ng)0o{Cmo_Q*X7vsi&p<pPTUiEv+_1CGf&;oW0JJ$g{ONG
zzlImGtQxZnCo!CZXti@`&qg@z;ImVsl0eUZH6w(kX4{8sMpb9PCb+$qL&><p5k5}i
z2pIrNM2g5uwNTnZR>FcvaTlh;nPiYdQ};$PF%hB<Kjh+Mbf8O6Nh|H1jS#y@X^PEC
zG~QS6gM6ip$tX!-T{vM!w$D8_83e$%gPf&_aBv?MEY}VS1qc7<zC%E!@Gm}{1(C4f
z&~7KaNO@yl%jZV1E4E$o)>-PNy(McFKvAcZqzDD<QfgP)G=0n0`v5kA#kWt^iv(F3
zG1sW=ty3-AQ~|;D89W~Ue8{CTord*OMDn{C+!M$PsLRc};8R0`Zg{s%uZXKM!*l)T
zqTCMF4)CPaAx=6Sioeh0gK>Yth$i4>(-ZSVz|KB|Zv+`%6eU?<^y%ji76Kw&k1#ml
zO=5xM%*7$1kM)$*OJ|)mbotv=bOw#2h?%q625f~T<74T><<U=*48?bW$vY~$<mwD@
z+eGBmEr{0C3C`Y2=N=gIMdTxwK9F{TRe$N|{*!P|Mo)_NE`sS;DofL>-KROt7aaUs
zAkUg*|8N#w*g6;irMeNqeOge@2Rd`(w(rJg3lZo_T;UJ#+HK$c2uDvfxbn?iwVJMG
z#f*fAXx_`06JYPM6G`SF=!@J#)p2y+E9H|<_=1MjG>&wm_7>P<Z+W=#1kG6)pwkup
z=Ta4ZIeFQ5<%Xpst(?MoD3y1BWW%t?6&OzA!Pqo`O?!023SZJKgDDT^*tOA%Agn6<
z{$Slw6hx;hc`0gx_Im!@smW0=X8YlX1MS+V2$<hx3wlHFDxDLNbwqQvO@`rpxN05A
zt=S}`OFZq=;x~JBR{=9$ZR?T#=kk*y4Qoy6IjnfvMDK0CPUG1^Q{fdJySJyN_W9UZ
z#9R(*5rn;jUILN1;yXdQi;iEy1_%Z<ffK5|bNn<{Lx3En4dBp#SOUO)=>NW)8ljcZ
zl>Sz+q~Jz52x^#Y-n%A3z5&rP^friwYD-kauJAThyjl{BVHtgrH-MUMc|I;vtp};*
z^1dF)tKx2saUT->WOYHfLDLIZ8R&7M+Wk|{+KE7M^~KGQG;u@?`9Km+g0~>o5Ox^w
z6GkolkAUXe;^2Q)%V9UIx`z+z4yLG;$U~Eceg;yaI~yGL()niGGj~4O6HweVI`#@A
zT`9dkY|z4!WGT?W$Csenfb;J;gS9*Tc0qdA2U6Vt0;){?c2+396A>fW(AH>B$%npv
zzMM#5j)BH35aT6M;7Ry^FyJF1qBDLq9`a17!C@#4D7j;U?f}RQUIRr~c%?i_O}QTw
zrtos&0=Qyk#HS|=MRMPiv*GWKXYYR-Rq}iUv1@gK^6ME8zaj=V@dd1bg01kxQY#3M
zJyOD#i{mH!ylVn*tsy%o16K7~cs26e=U&k5Io{|A&jh#;6P982`g(dp!PZbKfKU5u
zFvSM9^Z_{Q;Ipa6mk;?0%0fNLj2bLu!o?G?{@gAG%<%os<qG|wgj;LqGyT2c!``#!
z7sv(lTG;wGgf!KGon4-5rp`iBKFpQO=k{#52nSlN@x-lJG1*tbO7+TX?Hu(AT@@7c
z0J!<}qZnQ9w~UE0897%6*>sORdE(>xU;jPrQC7oacL(zl_v$CU0-E;cc$u+TCbz2?
zpYPel-mS6`&KeYzoRNK(I@A7gR!bLT6QEC?N4BYB!jy;V`N-Al>xtsv>eo~5XRsx7
zH7qdCnj5EIPTd?Mfo>-1{9b)cwhvO66BYdweIvA^eE73V3j##Q({uizJe!j?#OEbn
ze!R~&>j8cckEYk+Ns*n`{q80?Fp8iQa_+t41B%=Vc4I<RN{{62D%VzG%6<FG5xFyU
zNlpr`T(H!|pz*nHGon6J{Ksnm-yOG`c&){uo?tSnXa~x3*VehPeGz7RP+7E)U113h
zrb26k#>?CAe&6^|&)V&J#UO(ANw^!KF9va)>DKk*lUYxisVaR=QZ3n%(Fhf3Scmrf
z8af0rQF*&<P|0o@##M2}+W``gT-<qm>H$XxB3TMcCC~g*$uGMv&TD}oAm*0JyWP<D
z@#obgu5Ae%kwFAgPQk3Xed{79IU{GgXT|UmxstN}Y5fkasp+3n_CGGn)5+tXN?JTS
zIn7P~fVcg-tuvo~hO>SC5eAxCI1>8h*aPu!#)a1^|DyU2O0wXHA51bwObc6^1pNpC
z8uM)e2-MuA*Zyr^6M<;H4z~wUjgDIqadOX3b$eh(>+P6c0!w!=c;M?zJc_AVV>RaF
z^iL=_u@(ZFU_b)@nIS2-WgblRyQ-#Hg6fKR!~k52Du<QFLM|NT3L&5TTPQQ?uJ%s_
zTXW}kb;MQMay-8Gf<-A^&-;?wHS)0*#@&C=XZoXJDMS~?@33e3QKC4R(u5Fh!+@Ef
zgx;SZhc)7%%;^4{YM^@6gnQS_Pyfh~xL_Ux-jmf-xvs_E0QG6){v=`LNTWy~0~xCV
z(VE9=bXw+MTsw928&59^OSZ0;k--itpnf*39I%mNfQ%wTZ;r==boagw3wZ2nj-`u!
z|CNK^fza?MBh6<h19uBebp%arN`x2N`OAA4jg#j9oupt{(f+^lHK_edZJVNN)z;ih
zt+FGlr<vpxq`u~LCwA5Vey?btF)qlaN4uAq@?HT6*_wHNj~VW^V_>JAFbz8Nc_J@4
zNcG<3zPFdkYnaW{uqB>J1e>oOJp@!q<DMwqsYDvJ-gC!bR-P{ZhiC!4sgtpI>Nnxb
z#MXwsW{Ft39uleMkbPRD@$q`gxcKfsltyF5s2X!zIL8V4F&tKY`4R2{dK3j}13V%9
z@^;%ViJ~F}M2h@}BOJ&>S(}Q~dr?OxHo5yM5H6_Q12K7&p6VRw+`C~&*#?FC&cI_5
zcs0&|Y#Ui`bJNg8ByXR+Gr%``fc%jbW?riA^*vuhBdtq<TI`^nI1FC|U0;Eiun$Ka
zRF?rmj;oN<EMGQwY9kDzGdW1SgxD(^)}^TQ)xdV`cBxsw@BSJZD!B5caL+@z1C$W&
zeoqn7{iF1<xOJbFRpF6Bh}i^_hkF{ORy#SPp`19Uxb=&T@N*h6J%-zu+A2<(34Qxj
zd)6wM-G)#Qwr#fI=g!?Xzha9Gp{=bPEwzrEX$ptyP<jpD>N^b1eFFl&Z23VvRKyiE
za3!a~VKCJ}{Rluq38{?QBaPd{eFSD9^j_UdW%0#a8|@afDk_m1@BnmEZN08Z`m03g
z<O&Oz>o{Vz=n5wS(Vlg<jeLj>!DKPr%j^$xs+Zy3nDZMQ!i4mp^K`t%HjPx~0Oo_a
zwr*e{gu`^`RyKCzLv?#373*^bOSsKixqP9PnVUrnSX3&b%pp<?e#r<n6m7t(-bZS%
zm+?5#yKo}FoX{ReUzR8?Be6;9|3q#-zb3@a*Ud?CjwBTtYp7<C+&dH?OZnbZ;uzkr
zKHTDkenixT#{7N2gsS=_@Yh~$HE;k-JAuH>r%t%Im59-`#!mKhIf&1+uO8tHwi)E>
zQuVj!FV3RZ^0FaNyI^);h%_c-GwhkI`@gHGg4-PU!Z8H;ksOA9#3DG80WfgX=N3>b
zAXrlu9VmCKYf0ANB-G-ng8NV^t3upV9h;<R{2&cS&gTi0+GohRlazz0DoCe1O7^i#
z=!^&Lpk3ePTJ5MrLeVQ{(ScL%XVIv&808@?xZf|xXgXn=`rt4h6Yv+L&9q`k9~RC@
z_Z;mEhU^`y^L@+x@C|X!Pe~*|&~hX0_D`+@5=4olAjCEQ(@dN=x9UF^D2`s4p&w+s
z(Vu!g6bpX2mh_Q8Tsh_+!I#E*x29kSiU~_1VTo9Mh$2Gos&-y4Z2{t^YV_o2Z|{TS
z{Dx2m18^&_r-35(Y6n3^8S~&DUm(@EyhG^-vU{@L2iRZz&jPVs!O|zf%HY(Rz+9CA
zqUCL@e?Rx0Y0uR(vcrxzGx8BFOZrY(<T9VfsWTddhxC~mA3CPCX*!((+vKj{v^3Du
z{IREIDY^58)&_x^t4^MBh@^mZ<>J|AGzmE;5K%{}Gu3>#nq?gn_|)lXd@g{ji@!2y
zFW$^Rq_sAqqqJvB`2;w+f%;sDcrs;niXlHT0O|=v-LsrwQYS}>-@L*46?WsHWYiOs
zWnmVf&-Q{!#ax(PP`VFj>61Q`f+*A8O8OLsW60JcHx<9zha+$Z;}d|Xu6+X4@Uy7h
zakL0FeIOc;wwQK|nzQ->8CnAnLL7u``JsKwwb3xJO1X8Ko6TW`$#er8z5BL}9-9LW
zw#xX2#f-F`5Bs*cr@`E0yf(cONJ^d$TMr#7E6x<mNh``_KS~0_GuDM{4h9fIlVh;>
zR|rX9K9u&-<**gFIZkv#nYZ}U+DrXNKMaiUlYFZFRa0-w<xd}MI4OuVsgyx_VPF@a
zySkyK_(^!kG4dGQ85<^jB8|}Hcgx1YU$Igk?MqZfbEXme625#fonr7&GMQ^kCtlrI
zJ*W7K<<DVt5z)#}a&bAw<OFPCB79Bu^h`J#M^=E6<L&%$Ga^iqU<wN&1=R}2joae*
zn=fWYI0FYQbV(3>Sv7?F2LQ^`H0!j-Lr8gL3VY|hYpS?Mr!wIcs8NGXXN+zTK3aL6
z<WtYZoWTI``yu5)i2sU}$E!h#gAKeNI({p^N9OazbeBHJhWna@Vu(>7IoN+<?bF*?
zUM8dVE(GFmpJBD(alo;L(Hi_}lP|5*aW4@_<w~E%O9$2hH$!&NhOZF5O*5%YZy7XJ
z9t_OCcYbseHF8aM>&J8g==Ao_>4o2jK=MZGK!SUY#CIuR5BUH+2K47$KG3(3uh2Mh
zqi-GuB1^MO*Uh+;W$LjJMfjrX;#%lPv_rc<Z2;a(_qq!M2Du=F0&}3q-mf`9IGSDC
zlM2gm+$_-ZwS1s|^Fj8-pN|gS%bWG-tN5hO4RA+KZ{Fw*t0KMymV_Wn1*e{=41Ugu
zFxtC=*%njud=VN?2pau=ws9Eno^SoV)d4LI+;s;a+i*U@<aHfc6cf90bJfaj5U5hX
zf!g`o2531rX>+c82}QO86MzqJ{PfmM+jFmf08a>zNM-N->&J-bF`4C>#`8-Ze7i}d
z01;QMCVAZIi^)-$Dq09kgcOp`zLiS9G*vu!G*9-nIY2G0;Kq;8ii2X?O8}JNa_bvK
z4jtxJ7tsq5@;LBbJmrEwln_&Tp<2l%7LRd3PM^71S4s`5aAx%G+vVw(R)olzriSxd
zwTgqubak^307q}}@Re-1cO?4w>5P>2WRn_o@Tr}RaP@|_bCB~>bMUmVvao;KDWI?N
zXm?@zKCe^PZDzZN5~9`Fuv6a;_M=SQ?80YSXEsw!&Ao=qH5ABmZ$~0qoFkVS{4})T
zX;9WyGymQE>h;Rg{$UsJXr*rewy^_{w<>Jt*`+aU9EcO!?1ux<?%f?rK=RBPl^f2C
zIZs5%gBYjj$fr#gUsV?+_P3k6!m=cw-bzN=gufD;hXqTOE7WXBRg2X6=!X*gtmBLB
zcu1{cB<x#VbUB5ncpQbYl|BEjdG92$W}|v3ol#lcDLcDy_rEC`let-Xg$AX-2Y?W6
zIpB55wR-{dN|BC30k*3hP{54$8W_qxYHFr4DlnTF54sF_H|$JJ0nIk@#IOoMmBWKh
zG3E<lL%CM*^Y;peKG!Y?H<=z0^kF^}cRRrr92z{nB)}KLUL|Di(7ei5pUogHV|z9h
z+V7=sE#JyPbt}pDQqw;`@O?IRBE^u0VJ8Doj04PH#1Fi~>_U|u#_5`&*Yql5%fa%N
zJMcH9>7!2$nO$n=o}b~%j4OM8F@k8AIzO)lC0)H)qfsy<&N*SxLl7d(g$9?lc5x0Q
z^vQlcrTS*svY#Mhxeq(t<*UMGXsEH44SMjBe~X6Cy$fS9iJ}SQAst|-p$$7<63em7
z*?nY=<Sk7E1<H!|7uPD*w|i|x?_+%AVO3hsPur5=IiWTd#)AA9+PDFSx#~ggNl!Ru
zwk<k+wlnfK_k>_qX(tfM%j(QO-2sdf$Ro?IWGy#L?g!_K6=G0-#eWRy{O9fsjMenl
zV~X~&a;CyQVry9|S53>{NN9mN$%Rc2U63@_{uF^HFrKl0Nt~<xW^D}*CnvX$vki0K
za=_nWN6wS0M3~Z!U;JFnFo5|rFEP<$0TR`hdHO7r#(%HDrP}Y{AatKmFR5y0UkS!T
z`RN;VORhs{vJ4E~;+^RyT)aLq(hTyLtW2TA(U<$vq9R)$=i`xGKIJK`u`V9LV6jYd
zT22KfAg~wa%u)N$naC43iu|7f^Z{f6e$SRo6I^P(5{R0A`W}YVK2|R{lEGsKwP*Ah
z|LBoGQ@1$b7ueTWg*k;C;1NEiC$Eu{SF^OI!2p^Vr{MJJjHAJn`4u+l>>yKvei%+$
zR_$$AumhB!=fU!+_%#c-^{Ys-<zZ#cy^+Kr)c&(RP6~1Il*M3Z){e|ecT@i7^7p9U
z_841g){pb{NjJf^_hSww$!Hq)yAm4Oj&)H7z+1IzA-rV`)FMp0pMm2Ug4_p^HIy?J
zfCOKCm{L8#a}^tAe$0`b9<)l{IHN`<?d{AaTJ$UOi2)cmo`bq<=V~YSF4JoY)$GA7
z{^3`yjQ#zQ;i^wxt$A=L?^Ocr_~ip|&A#r$$6xWausR-a8<K23i3u5$ClY%UdJV24
zM=#A6yHQm#1ueinF2_K&b$vsDaGkWUFxH7MadMP^stR-VHM?C1gN6MA#C3l8oSPma
zR8&97@Ici7bLLHNwa+7(2CslkrT(YzEm>rJp+TmX%Djv=?+Ns#E8|3OodL_dQCoja
zy1}iKT1OJLM95M59;>#n9`HsM3ZVPV_5rn@R`EjmSO>Sdc*m?5{q2xcqfSmS$cy=3
z&*y+T=zNj&*+LY?;NO~v2D;SZr288pp~D*4A2ib^Jj+ofZ97Cm&Wz}URLtt@=}jZi
z4Y}f28iPIxhQ3~>C3xg;_4HHoJV|}}=3A<R(2*NGod|T~mMJP3N<`w_{tPBVC1ucK
zLTvrSh!1jSKqd9S0SkVz7x^|Z7-vagg=KE_m1@yzr_btuf#>T%4^1{pByZJ-{K~x>
zKqUAR<OU(-?xy;lgZR&m;R1bAUchOD1)@i7$H$BQ#SdCvkuw0!kT$XF7riq{+i=b|
zk^ZfFpQ=q7L$h~lKtE|HJ5N)EOwrJ_4%^~i4j|F66py(JfsK#<ux}zn`l}yDB9TB%
zURh5+3ybfLb;^G(`A|hJ%8sKOpeh{t@?s<<&(TYBMO*P$cww8bU^e`0E0{zB<Jb%Y
z+E_<xPOL1BHuQ3)^MD*Rz*>iW0@FCM-Ef%BppVxwYR>>(@#qN#-P3a)a*_uqnnKh~
zi9E<#v9AwTx^lIl`i3mCN$p#p(#%95nOIB2XM^#jOS$UCF_?`;Vliv3MiDs+{O1f_
zMr;>w?yzHr9|*kkD7{UiC3Sz(^oh}Ow|f{s6XUB>Y31(N3%H7@F@-*LpJOF`$^V88
z`s~m&va8*i+e}}fvFFx}hke08Z*|q>HFu?>dY@bHzOUSUj;#65Wzm33B~uIAC@yX6
zT@}DwE07@nkFzg-XyR<U#s@34wcuK@1!AQZtB(t!EnA4x1y>?!#Uc<DEh-8`HVKlE
zqT+&yxFHr2aSNyrts;s-v{r&ei5etY(4YZB2*{EIk|CLXXMDcD;QdL(Fq66GzOVIM
z=SVG|4&j;wFZ(pt`f7CMpNacj>OVrM$~it-=BNE~{cg5Ic42mG0gT26YG6w0?r2GC
zJybbT^-2t-&%pOz2H=m?q#?;@hep+yCFE5V;F^pw9F>PuIFTi3BYg1>dkm_c%s>=z
z>aCeaRbkTO28X3LS~6wP{rsCRc(RDuV_k_{i=Ij?3AN6!F~^$Dq7i^ZmaYG%7|*2X
zWf;p4hc$r+No(yd8Hp`GBimeo+Tel2(KaXS#i#Kl8?c~HStVJ6^caJ$n2`CT&6_}B
zL}9T_SyOmaXi#?>ams6pFrR>E$NG2ukwokv&9TOpX{6}HrLf(U*#}Vqxo$+8pQbYL
z;b?DyV}K)Db{02pKJJfz+lis<ZXU3uXR%8X1Dy~rj6kj;l(w)S;&u?&KiTEOPOgD1
zg0zi2R%DIz$m#?fNr(<j(zqlj)i+r#={){y<(L%EuAD6Y*2+S`_*%pf!AXWm`N3^a
zm%=}Ver`@(MKN-Kg~y%1E_z!3o8=_Fa?4^*Iqn3D9HvJ`A)TPwu^tH!q2Pds2sEsX
zt_HpOHpQW<(#$ypbNX<lpLjhrOj*F+T+{_r?;vLEfT|-+vV3ue*F%g0;P3XN<tuo3
zF!_uoa5?n!+CyHR-Q=2X^RhIrg9&-@I@piD>4J?@IP+h-l{T(O!aB)v^ee80)1b@Y
zS+kc=&IJqNSx!nT*@yI@eOB=0{A5ijQAdm<!jK3M6P{Cfn}XO6WZFjM?8e|9%dK!l
zrRw)vPaOJ;CEnIg0#X<fQLnj#F{jS1m*)?C>fH=|rs=ifm0c0thn`In=UoZ$=IGkf
z3`(7<N8yaSl$BtMfS>%r*`Gr!$O-*1^T97`{B&*i)8~_0_d0iY=2(bh2LUD0E68hi
zL)Dcs=`q{TP{>FO;7bQDOIFfy)mQ<iwnz0T-l*sHxd>R*cfP0nIic^S!5tIUF;R<0
zb&alIs&af0Gl?x$;lFm5D&CG-h;3Bf{L6g0U!l*p7x)q+h6>`ya#Is_C3R;PIg0M9
zw4{Y@+;DXEL7BwV5_}n{L{I5{dECmK`0aVk$OX_^ret$}zU@2p<2<`93C)K)Cr5+W
zDQ5FFj3p;7`0g51sP9Ha?Ud%t7>6gtm#C|7cRd^$r|<pmq&_q+@G2CtF*h~<;<6@x
zx~9&7FhHk8vvz^o+S3<a=7d^AtVex1p=8dKO|BmWBRYc5aE<qXi*jH{Lc)p)MjV(_
z$3!^;iS)Z0A*z};Qz(}_hns#j!mCr{nbURfh5OkN9?pG?w~dAJ@yYIz=QoyIdwO!u
zC9g(7W`2@MbKAw1mcRPIS2SGX=w4mER#wUmeu)(C#ifJ36Yh+(V<`;Pe$iyqxCbF9
z70E9DKCzLsKANLY2AGYm=&YTxeL_dWsW(Q<lm>QXJnbWGX*=R4wITqwH6AU3K%GV@
z3Xll@E}l9YcFwb6H4X5|Fu@Uw0x_kV&2mxmPxZ5TXBce$o(xes(*c|&lSM1(0q3Fh
zZkfI4TH>>&XE6mM4n~yE?SVYdOK1ccsa5&QP@4oXg3DNBaYn{|h1no_`0aM*c2=yD
z>msA8MJw}<hCbrtFyC)R{7mF|D`IzcQS8_oVY-45SveD=<GedOJ1ve2pqEm_HT{_F
zu#U)2hcOALKZ+-X9<@D*XsE&F*(j0B)I`n0&3>9A0S+>}dqF(m-Z&fBCza{t3-kn$
zP#zg3D5&6R#OyiV8rF$lQ7XjYMHaMsyAQZFjQ5N>m0MYUE&`c}MX1Aa#Y*9N>veKa
zfy{}epF1B8jyly@>8X<SS_5R7Ulx6N&X(+2E-a#gm_x}P<;BS^#DD5h%PRe?^S&-e
zE)B6(Fd{`Keh;JT$$4A9DR=Nuyj9p20h`Mx_*Ip&*nYRSD=`QUptooovKw|`y7_yC
zR-~q`J->d`^=@WdIOQf&^!8izKip`94E>ao@3wadx1|v|N=ERDLt)3y%*c>OiiH*n
zfyyODBFU$vY#FIDjM`$ku2PA);s^D~KAoAzIL{ps?o*{+TkJ0abED1|$G%?R-4^qm
z%yTxOZ+*sEmP~k>U3wkLy{$hW7~J9HqCI$EI-E}LO94lwj5c)s(|EY|eusCny<96_
zX%RfQumRzZzV@eZ)@8cbcA{-gz<IaZOgoK(Byyp>A#aMhn<hC;@;IudQ-BG>eaL9H
zTg>F$-h+EcyO}XV%0JBA+Xn~muiet6j=Nnpk|MU9C?Vf5-~-e9Ufq(F-vcfyHGd<>
z6x>N0m7V;E%D*{;w|d8maL6a<Y{|F&ynSCMSLHjN(o<vh9Lb-KP+ny<bp#~{_39sP
zz)eUW|Gm7^mg4SXOLyAE6XYix6E6?c`fZ(inB0nLM#<pug8Xb_hn<Vjew^H89kugh
znQiGN$3vuLn0piYVmq8z8l8$c<D1fb(|*(;+gOt=jrAL(&$!<nzaT+X70kV#i|oY7
zw&u@x9GQI?idLOk9Bg4of=~R8vKG*N9`v3m8^%k!>4kbGKg$(6!2NqExRLx(x#Av4
z$h6*4T)oeDy9RI~-&8Dz^wxn~7uX>=LtExSBQJk(c}}OMk(o|-B9ji!_20zzD}gkU
zn#{n|Hl-zl$7!ctAbQOenMOqr=o9<EZcsO^#PaH(a!ILA%ZLtdjjHTd91f|~bI)7A
zoCwYgfm}=!-@89fd(&@~Ot0*Is^z}^G^l)>ythj(bxCo1;p+l7hEIOO%P`W0gh5E%
z)iV&Z<o^L{-S8W%w@O#-qwzS_smyq@r|uW|`)_JM!=EGCgVv~my*Q4I(#Rp9NoU)&
zSK}@V$sgA3!%TG;OwE!x0rjIj&I+_NCkO1_;l!R>=WCLW&ukE!PDHfZOxdwDa#^fs
zcap1vvG5~Qh(5<po#>-~7fxmtmf?bJx_+f-3HxcByOpI-J}*0@x5XH2e)!sYTVjXz
zi0X9DE}<?Pd#|{kj&7H3`Wl39y)Sn%(-<Lgi@dxvy{J-bqJn0<wczs2{?W!dB2rtv
zEh?M)yx2&nbXs$1^|T)*I^%inTbVuLZ7J_i#<hA`PW}A@CAARjISh$6m8WsNW6+5v
zV|}fU!+Kp<@ZE14rIyaRYkUH8q5r&JMnonn>r<BYDZtUh%@9>lr(E8lF@wN%ZYbWl
ze&fPVeKfaqT~Bk2uHN$A8)OPqfmwH1ZI2~<Cu%c56}xCq2GHlHg%EnSey+#JISE2Z
z_<$n_$68L`ppT+yLdbt!YQzSW6x>GEq%MpAFDb_@hHcQ;Hc#t<3y4j>W=k+9Jp(_?
z+B^&daL#n6WB$mJLM4S>`=Ph1cOZ+;(x|Ncrn<@Xv~ld7A6F|g>5IAy<`j&F=<8pk
zN^2kc5Y0pc@HtLRbxsl=xn5U~u@e~0dAAz7DcLvocPq5nnN)hu5$~?m5QyvT9nIj(
z@r5Mlu;E;De<5<qF|rH&mZ2X|Qr1D9E9k9_PZWQ&)V%;ZVkVZw-qzQ=NkYdVTHBhD
zR)$zX%37vD&Q=<1hM!h0otlI>f}~O3+PwR8`F%S1nYzh0P?Ro0q5BSB(h@=JkA9!=
ze<UdyoOuz75;9h>EX1<0{Xc?AnS6YLz%zfK-}Ie0SSAp0rlcm?Y3vK#B-bFZCWBJ@
zEF6mzeBF}`!#6gY9ISmV!a3=_eU}zRBwN;6#o{-1-pqs?bnv<6bRUT_CdQVmCJpvh
zh$dzC=`Bh}u}WL6#=DYftpko;XdFq+_MGldY>3RWihyLhycSWh_)HgJu=H6gRv$<N
zgK4+*L9I63&oZr`zv>+&ejA2aJUZ<91k08JW-3?_nBagDi+0Izj8*TZTTJLn$;O_+
zh9lLFL)K#S1p!WEQP{Is``m_``={%>zqLmL8s3~Kv!zYl=k3VL2cBwRB=cHl!G@W0
zSpTIs8p_>8wRA4P*Rb9GX(BU~C3w*7nr1BdcwOrnc~9dlg`_-?;#XE|xbc+>s|MeR
z34?Hf9td?@^RFH5Nely_PD8~xD$qtlkJg*pyaY|WsB(+qLSo>c@d{_W<@8i+_@pt)
z(JMgiO4bufMsC0>ssQNmvCW(D3~>!DXE05gpWM$V(m$`*QgUcsCbO~!LMol8K?CA$
zCfe^?y1?M@t-VqtmT-dep=H2b`z0-k7CO=1)NjNy>`l5)+m`<0i_bB{vT!U~aLc<2
z-Pvc8@mFL4Cz4klMnsN_=?xws$|7BUvQ=15koudSX>fE`B)JG5wC`|W>ukKxjbAp<
zr+LM@f}9!X?N~ns>4%4A#rmfEXjHJFk4oF-oj<S}F_%#;V`T-HkOH6;1CG1>ClaU~
z>4U6%aqTg6u-_UbX<PE?OqM8Uy-LOU`_B5WznHEk2Wlr*y_CCN{$s@KCEb9cCtGh>
zd%YrVXbQKCDxx^G8I52EB}2+&(!U>Gu!R={Np|r$4R>^Ok@{D}y0W}>qRx>=eM~)A
z?MM|a9v~hZn`CrQxB2#TS`zM;z68`2JdckXreOZW#%WpVu&qaKPEX@f39mlw*nFd0
zjBUP}lFk&i_-e>#aWAk)uafAH9!cUK=Un>x<kwtTBXS}VHS{1aYK;>^fSti~Lp#Lu
zs36p}`sBS(;_mAO3jY$q_*!cQ1=^&&ho4h2&b_Obk!30@AUO@HC2c?aaL~%4qqOFw
zpCnc@M_gGgR+-uspRFjqhq-8M_Z@#9Y|l=<b~nUVx>&adAOG*9(o?1T=`^8yqJ94A
zXBl)Y=4swo1DLA7Mp2nq{oS?s7aXj9I2pbgA*aXz$~j(VCmnZU2U2N?(2M6i`+5Nr
zY6u`g5TR4=xBA-B|7kvVO|&nsg77>4oXMq^`|$s30(^Y|mgwjiY;kj!P<4bjfk^@W
zK3d2uUCmwRSil>$n_cS1A5XbH!T)Sde3&|NQVWAam9s&#Fn;wx?0(y>Cud8SUfQXz
z=PK-#5=*n-1u9M!*Aero3a&Lm&j%8)a?aWiK$z&GYdJbdX-!Z(P0^48FKEQC^^0>O
zH@UqLRXwm8wY@*q+E8?=_!<ODJJtmtNp#}KrR)dSTYp^g(;P2zI!mGx6xcSmVqG{N
z$%HJ#^blmP1J7c!(3IeB%t+&}k;gIzIa_U;xxVfrm$T~9P*bz^oL=4V{?W+2@V$TW
zB|U|7U4PVOIrY_F83;ek?T{+yo%~<AtPeK2jwr?%YtUO|qwsxxY~p-7m;YHKy-Bfh
z$;roWCSl0ymK?`j;<94%t9kJpPALW{mED~yPF}n;`1e$+FO3hA4Xa)7Y=8G%?2>Ju
z^Hq8j72U+N6uLIf_?pa}S_USdGt9;-Er(Ynj@{hZ=Cm%|*J-^xz}m1q0^A2Jo6ngK
zl+(F~Yo(vTGO&8})FAMH#Njww2?@4;;n{kqJ-y|nwQz+sQ7_ZPix0&jL_mZwb-}w%
z|0t;h?r%47WDH%9UQ>pdQ0`|aHAy%+xg>VV4>zV9kEjH5ZjZpbo$047`4vHfsi`z1
znH(li?<V;i#px&KU3QPPIG*Wag><R>8PE)hGrQAkAF*2qJD3hZ7lm2lmNjnP`6}pz
z%A_H;`e>0(sNeZ$^<Qw%L8Gb`9Q+<J1ws^vXBag)VQH$p>-A${s3(3wH=LS>-WU*a
zHtg&)3u7H3^H9c4uZgEBXTO5ReOkwlaqjgRkv8KVIr390uX~CI3?de^1{_gZ8U8ld
zQ|Y5%O#Ad6bHCBprL^nGKVSZp5DXW#)TU33&T?<fvCK?mp**C<-ca{X99+qZNAcyf
zfMvvj6D<jH=KU4{XwTgx!D;WWL0Q4Jl*Y6?-SSA`EdOay^-i}YlO5OWcx@s;pI%%Q
z=hkPoc;D=(-7^EVhPpw0HPt`V*Das>siK*eozj-h^prF5uC&M?UI3Y@Fbn@Q<@9Jo
zj@;Gr11~`_PQg#py!j)BZI07_nD{3QLoI2VFxf{g2@y&LJHDw*b6LG?m+Z3h;vZf{
zIR(p}4rjZ9z(n7Fz5yy;-!IU7mXoRW*JN+xOFYhWX0%QD5xT`N|HgeIa;j6E$0I`Z
z=PC=eQkM;M3B&yI2~2-CA2Hv5X4>7?>QIq*^@$5tzEULlQ3i5KY@vOQ48W86oiute
zX4<r+L+cXq`!TM7J>+$q&Ka`Tkv8Vlounw;Tc;dyg$~tveOloRq~;wz*hSOChF9+y
z`=~$Y|AEBv-?T+Yad(G08f?@l>s8){!Z?e|2Uh%ZR-Q>?((dMpFZ_r(-zZVMnquG$
zPXESJ<?SltfNR64uzB?tYrA|}N`c6p;VpNG?G)D}GjG>ar#|^EA=tN5Mcn#nkb)ha
zKGfMBvwc0vLV-+WITg%;U<dy!e-05I&%Wp&GZja>oV(nCuhg!&rYzqk*pnc4u$Rb!
z{p#r?CGUwhbuQggj<Cn1R~s+A<~f7gRb|<q?tmXjVha@ZHu3u9cOPFEkzjO{2SfHS
z%3WZmW&Upzk<b^{X>7@3MNJt`odOk+@k5&(wX*Rc*Z+5EdaJA3#s}n!m_#JMGNE%7
zT_^+{b?u}sNr)PqRfVCQyQ)CuH8hB?R$09rnRGeQy7gJ60Qpu`*O6wvL}qkr;=VMx
z)gQYl#)2lJQ}XuX+D{zUudf-W>D8*F<>Bwjf-yj_r`g+0+#)uR391Vdksj^BG&%NG
z;60<F-0d%33fk{Unje*9TLR+#lB>5#J3p?XkmT=_OTrG7Yqb~1yxHb-oHmP-LdFoY
z0^0-bCYdh3sou_)q0%4m*-#@D{ge<mC|y&}KYra=4!?NH)|4_n$=L`+mHT9L`L;-^
zs*>e}(HsofjZF?xO4tArxYDQLq8RUZ*sl;*hs$%ne&5K5d~-MHU0Ima>xVl-x`<jA
zjo?<N9&Hc}j+p21MS}n?cfHC!qtG>6LI1*3f7}gY1MVih0`;}i>thIjMymQvrhd)U
zmY)0XN@j+sdj=}@FGLWB9d`@orSFnq32D9gomzF|wl+VJA_7(8y2P!kL?C*%rGBPP
zG1<c2{l*%lGmlUr{U*Ryq^R8iw<D7t$r2hAjKvHBtOB2-GGHfeHRs4V!Fl8c3<Yy=
zE<Dq1*t05e9QVy3x-#<IHB;r`B0_({lGyfr(^Mc=5o2(2TecJX<?sJ*dd+sr2Op}D
zmlqnDhR#g+)iZWfdK#`-1MSM_FSeN1E`jZAB<o!jh0TIfEyOWVrtu<JzbW3Dz&17?
z+lj^5mY=>X)XK_zt*TvC)eMfi65DpmP<d=6iybMpt^ZkCOX6$Z$1|#GV;qbcp+bp?
zYGhp;6|w9-5!xtW*CabSU1VN2Q-rE=1z<6_DaIOhU9m6sPg{Mc7Nr4n&4>txY#ZV$
z)`hLP=xcFWK93>7QaQ$}=MWfSe6kekdK^fvuwKWP41ZX%qT`$S+fi1)y~Fm0J+tdU
z>yKcRPT5S~*wmi|-X&y@vanafjwETb!QaOkrEk3IZz?&n&p#P(Hc!1dxpaTWEPtoC
z7Uu1iD6kYfbHdb6l-Wjj8rxZ4y&io9fLn#7^I+R=)ZOYy@?J{3H}T>2-v2CTElt*2
zh-tn&gy7hdj<dj+8}LS)YfdWNKXnOiZ%g^M&&`5e<i=W>;-U&){SYP%Ro*2OxS6dO
z+e*KD@pSK`ophyK1%N=5O8Ex_sO)pp)?h-h64lo;IO<>>JHOa(fK2LAW<I|&;U@i)
z`WuVS-D)GSgV$QP2lc-_J-_svNOZgOpO__CD>ga95<5=0dHUs@QAI|Eu)GD;<<pgU
z=NAQGne-d(=;qOi09JJ1LR%y1&q<rY=G9VYy0Im$KA7+oT)a#gzFR)j=3vnp6c`I`
zTOnM5n{Ie6e82!&`_DUD{<?8!vXic{SIf}e29MAiH6X;O$?}d((qRI)icqjlq^uO0
zw6S7Hn+-gAnrN*cQ+!x^lmBG0fapM(-IvZM>IqRy)#n?-=IJ}@W~8UN5Yudzt46$n
zg~>vbuDmG*P!XZjzLYr-pO)sd6*Yb!;Q1GyeMI}2Ztl6{qkzn_Iv+ejP&RnA9ie6p
zpsI)@I0YT!ZRrE(D>NIeF{Sy-(2X&Fbu7ao4!1FRPEQYZ?nxTBNw*eyXI-0lup@ih
z=3MK4{yeCcxI)Fr#=nUC0BvL^gC%s8d)k(^!y9DSWdnyM%P6UmmJFXzaqesPvr~{#
z?)xqzV%1yNnpptVT=HzIGAyKHbW^eKLERqse(RHlhkM4naBifW8$L&TQZlrDb@$#U
z4g2##{rTVmLOK$)=4{e(LhKDvB+ap|&b2^2ypO}PpCOYJ?iQ{s9sK_=#K|4o$Mlby
zY;@L=c;v`ekE~NRG0Xu$^FmEBldNg!*qgos8@s*Q*r2PkO@RQI;a3!Zoyu9l@RWNl
z>+slLKm<X0ufY?0sQs_@GmKq^Y(bT#oIWgvM`I}Vl+!(}vbR&!T@r=pPHMVc5emA7
z!Woh96&8Dy$vPPkBG^k22d`ri7<FJ9PM5jL-q!6e34qzNjLcA9y{}g=1artl>nEJ)
zbU^idN(G#dzCI@iw;`X^+QQrDWg)LkV$cL8$FPYbuO!YNiR?%8mkBY2{&HEvz8v9>
zO)Ine?lCJXJ(VUGk?~3*O;u%~f@Ew;Hmjug8E`LnK}8yWV)11n^oN7r+6$E?KwbGK
zzWDkfvGkOaQfx32kX_Him@W~q$dgK?&J`7x(HPvvuc!UCS65GnWBo`WCv0sWow8ka
z{G5c0m|m~2c<;l0C#{Yc6P~_<>8tH+F>1QUyWM@B+!p67Y(&AYEvVsQ^|SrWRh4p$
zSjv$~8DY!9|M4t0S%mg_D&3npQBXE}$<>Y&xusuzVIHPG9Jh>V_hS@V<#BwQLHElm
zh{c`#sgvTg@K0Sie|RKDUzYpXm_9nQ8^Ni&Q1V$w6hyRDuEaOuR^{{STh##i8D@pJ
z3YZzp3ULi@9pKGA(_snjoN4zI@@aBG;rd^^KS~DHf9m$85(1C+`xLU-+0cKT4?aqL
z%d{chon)U!DKki!`S7D0{nptGIeGO?YPG}Mu18o2-lGzt`9v*UAX)!e-@TS7b+-7Y
zcqWfDUTMW>DxTtt*B!HpJD>K5kT;)V$`(JFN{11Ya~Y1utvv~i{w;|f)`Uib!haJ&
zTn_O#{AQQ_qWDGiiGHm=FGX(ul5`6y*)&mNqT}uvAfCbrsrbVEBGY1JpK;a;3m>j)
zkYO_Dr+BJ@FMB@LS)ZZ1Z|cnEGyQr5*C$dOi6y7@9~>}3Z++hBmhYI#daXH@FQ~j~
zXZ>W;c6=K%;_>x+&{F?x0gvqV?cO;!(f)LGOe;3Q!sF?)#|hGi;a!a$!oPY09Rzc<
zKFlh5*m1$kEE?Vs^^$vElimH7rkq`x+Eu-5YjmxRZer|S)hxPe-*|J7F5Brr&LfBX
zc}HnOTm#$;IPgpp<PsO^?kFLrXK<qK7={b;j(sc_bH8>nnB#dy#ZyMZwH#o&;0>Bb
zjL5jx=Ya_^JVm?XWM9l-?K#&zJ6A9xKG14$70h(#mCw${)sYI|)~`SPTa#gqX0pRK
za<d(sm}!QU6_iw_S4TN~jTdDq`ZM6%IC-$mGdsn@L8wUDh&6cpaV+$&z#LtpjGrZ}
zX&EJV^;%8`t5tIU+!oKQaGbU(8*`?&yCC(-#!BLCwuh_QWSihcrPKai)lhi(TmelG
zf9p?XI?F9hI}Uty_qv`$<E3`X{WXYu`2QJ!s#_W_L2cO}#?M22TEE5-e^H&233(XL
zMpdsiJMp_ePE(bRDXs*bW()O;hs6DeH-fzUV~ualU3l!_)H|-e*~S_^Ge{>8J@`){
zs_9rynWQLhFymfdXLi~sox=Q_Cq-gcr8yZt@Q{%!bym2YiPmSkdFFrhM26Aw_xW+}
zr*qDDlyjc)JtUFVlVTHqdc%NI(V{c*)xCf14p=Rkr`eRfAYoD7BD%-=eikaL7CF;l
zd1_lQJ2HL9yo4t)WGaeJg^lA#t^bi!R<2>3=0ZR=IJOkjrztKQ#et$Tnr=m$LIO0i
z*Xa-_nR8#KC2Mc%#B(i5UE6wZybCD8QB^jZZ?d)0@3R!D94oR7g$4Z*AvvJE2Dhvz
z-BP7bGWX9s&Zi0?>VUPzjHcm9cqCkCzcUgKLjN?LMI!(Y+>?j@j6bK#ThmI?9k<NC
z=$9gOE7;j$l-EbUDF(}I<+jHY2U)E9oH)Tg-)1KvS$xZm;Uhise1aZlm=Kc<Vgc@O
zGX3^!E<u+7hs3hPcyXB(;)_8X1C`MAa~f!Imu4}7Y{c&$?i{K?p)pA@cQw6x)nsSU
zTgpNB0D5BC_TuPEhL3YAMQ3^_UNgPZol7=6Zo+$|KE2%!au!Xosq^W;3ki0{){UB8
zD+{M1-k)n^l{&JfOP0sXqYZ`Br2qZEq_|)n1JEs%=mvdUxjV3HCd^6q>@;;X`Z#L<
zo5z=&8O~>udRx*kijn&?QBxcsuDikhDHT^ebK4yU2Q`}BfP$Idzj?Fg)<Gu^mXN~_
z=wX~{?jJ+<5X?KmiN`C_(eVfAsMT^QET`6t=8czLZBUeQMOx$e7rz0^^j(*Ma!F=o
z#crl#7cTDoDA;}E%Pum??X}Rw=&~-vw)IOoNI1*-HpaS;_22(9fM$6-<nHg{%-yzm
zK6E0x8f)xT%3Io-K63Z+^-m9iWXD=AQ#UkEvO1JQq+Kso*t;~pnAX^3;}q>i8uCD`
zQsJRNpah~r9XSMlw{YgjEn1Xw1Tv~3g;9X!p5=2jy0$OHJzd62f#{IKJ#gY$6;ear
zyAr?yc~Tl9OWvxK(Nd=Ei~>-f$BI>^bqGrCR?W>aVY1d1_0NqZWCZaRVp{6w*s)`9
z3n|4fTXI1r)vw2|H-&`BN!x-kmxi~$useHWzY_zWP_4yStVM&03QASlF-1;trSzr)
z2avcOtk2#su(yRc)>89yhL*(RDSAuy$VwI*7{ap6OV*jFvS&`cla5)*L{y0++gA5X
ziiZu-GIF61Jl+L#nEloPe%9H~Ij{|Pvh--!9350YjN4c)Wg8kQ-j&3*P6({yC3TtX
zO`SH+h#4@7J93drJQz8sks+CzBab9jW|~S*O}ReLKbet*C^+DRYH-K|ypPIsZidOl
z)RGf%By78x{*o&;xw34j+VV(si?Os~^ZCW+tjH=9t*TF8I9gWkxyM!FdF3W5N%hI4
z`RVExkB&zf`{j|9x2&W=;d*r~?7+G(iuq`FwS!dYDsy`vo835g^MPEfIg4Wu*WS!e
zoHg%EI$%FSDe41Nr=NX+Mh(gczQS-#kCmC)sn6#=zf=6zbJj=PNFkVGbb51!*zo3#
zu7vgY#i&X59YmF~0Bu`>$?B&o`E34q20ey~B8}qq`XHI~Cl+br=c|&uU!}qh<hBH7
z3hR>?oHm|Q&j*Ryg|kVnHcz9KP9Hd>V9c(0H34<|$RK_JVIxlPMx$iA_kxYc^Bwe*
z5D`v9Ny^H@rnGG_aCJ+xwwdvsVuQLI)K;Y=SN68>k4Bi;>56NUh25^KTor=@s-4bQ
z1mZ}5lK)#ImuTg&r^qNKt03u5ziD^Aez>N<K@TXV&6n0F2;iu;KN(3~2|j0~%2f0}
zIp*&G$2#EcT8SC)<OP0PH&=W)oDjEC2@%T=Ly>EzQ~^pVJm;7fpEkYP2KJkC_+krk
zINbF?c(W`}@vL&kt7>@vjQ$Gzjelc=7eD{I;+)$dvgtWG8TfJf!@XnfZb+OD*4O&b
zRU5XJdCc#Wui&L<q+1)l$GTw0eqGHxP@ib8Q;G;hK-Jw)l!Ig9(8T?t<G_iX)edjP
z5_@}n{%^hw?ca6NpFe4LPuHdL(MkfU3cTdAuORB=<UJehk6EJF-2{27OFVb&!|BLX
ze_y~VoD9M!u!S&?H#8hT3zE}a-NR`BgxjQ18#?9E$h(H>9E1>wKQ2b)KcLGnkya-!
z!L-Qwy43e&iwcI%`<vw^uC*F30e#-2``B`*KjmboBNVU{FaF@r!^brzf-G9MH?K5f
z7Ja?o+k0F^8{tOC#fsgQ;Qi9O@ve%cM!AHUK#ksU`eArps8ypbFE^7bm(XRS_V+yi
za<P%&Fm2zzq*EF5hB;2=B(3NaoM&=fnq*Ysf#K0QTBu~;;7B?@`5~LrvKYnxW1ThQ
zv@ZQ7>m)8_YZt9bb~{C;IkFV&u;YiHL-7k{B}-{FtOWRlUTQ0=y}N2R*J!;nkWPer
z`El||e;Wb*C*Jb6YDO0OufF#e>F@MwPejn(&ZZs_vC_;-pD}p_C1d~fX0lq<HaLyo
z@MRi{@w^6|2GyJGBkrfU-R?sZN8SDI#Nib$<6V7uL>9xwwO;m_3Icla*JpyiZfX2e
z$YDel?_|u!FH+Pj%QbWBlZ-aM)!VnCL4l(jk_;<BxT$kBO8@uI&I*q-%jmR49QXYC
z&3y+aban(3RLQ8jeXNr!IHC(hh#{UM#rKO%Q1&p`$gtNRJn)e@yuQpS7ZI=BoXSc?
zY>N>DijgmlwXfLyNe8xPmzh6qQId7YIg6buaZ171XV>A`)o?wgn=zG^62tNxtK*Aq
z%U$oR_Tn_CRqt0sz$!mo;eh4Kc%(U|I)j%uuFRJD<=F+HdbvfX&hPofdMEc0Pyyt?
zo+;Vsb95+8vBLYScW_S7j@USg_V8BU)Izs6)+ptfagTKQ0(RMkK95|)v&J^Bas4fB
zvfT{jHB(>p66#Z0cohaL>xX`iHXra22DzljmCh430u*c*CCs%l>W~zbk49rSBc~2L
zWle`)*`){B=d7vx8m3L(`n%9V68Ek)I20;;sA=h`kqcY2g3Mm$N5pFU|6R-?JQ((`
z-RAsZ1CY|qPj>Ke;g2~MwzdpVO4Gn2ZYOO1u*PbZV?o`{M;%_G)JJU&vjI+m<pFEq
zT&ScTQcJ^)KDv7y{5&}`_1(oKY|OsRY;|5`^Ak9Y7oD;SugW!hPKYgdr>)S?LN>7f
zn#I0Rf>=@CXYyG#Zmq<mtN+z$8{miSGXlLSiRhDc#*K>^DW=w5LX<o1#xUUqpS}(!
zdzC6f<uhRueI;Xdcv=V6GuO&09I^5!23Jx%$~Oc+WX1G1?2M%3vBXJV+k+jkAh1*5
zn^<$te;t3GR&-Z8;aeHU{M9LMilH*@?-2}DyyME3u1nD6_gJ(5kgDEWvppEP11e#p
zndu-i>UF#4FGb41(0BW^GJ25~v@D%Lu-F@T#0p=N?w6_4#5M2p7vu<T**x`10nd%;
zDR?n*ftNrGW4EhXQ~s7>C}p=gSArg!rGMNC^2<A*`+BejuQ4Y>P+;j)xmMi}z4>+2
zJ|H@?z>?0*Dzq{KH3D_63uZ+9B4CsEoSnDBFVX0r5@k9FxdQgMN4d6LeN=@d|Bw9z
z!ax<H7-i(Q^5++l0d&hztYD}tNrObI>^$%5%2BG(HaUvUPE4=c5`>Adnv`&(sU<C=
zj>&V34<zfiTU?+*NpVz12IXY5vjgvc>$W34u$`BqJS{<KAj{```D*H}tYlxBlf+P?
z5y$Bl;h;n7WoW6`(;-+LB5I0uW-L#Td(4gjzD3##3K_D?mYTu5qxDcr89&Wn!YDHd
z={@c7ASWEmKo!YVGv$>?1uiE1&72BL9JUYQVw}gM#;vkgrhvf#8jGerEgWy`lE1Z~
zW<}b*LVWF$d6=#uScZaOey5gf=~?E7f0`18qU1v5zOy5fnL>-dkt+Km-PBlaDx|}4
za4z_HW9@B3Y~Z~<Z5EAAbpIZO^=^WW>72e$dNk%|fMBv*8k;xaMi^XHm`ktl1Z*Wz
zcYn86)d}hz-J^a*IR7w9X@Z{DolaZQw~yKrRP9W5@1vHVr!GY_Zm`PEPrAoozb783
z_0RXvzf8WY4(WsrS=HQqOlYdBRr;_<FxnvKdyHchYTc{VS%7H2E2Js|KYG3m;T#LA
z{m)F@Q(m;IPYtSXsZ?4dUAo-oRUT(1AWLxY{6J5aC8L^u`vW`dJnq8s`q33)eG5wj
zeu@9u4fkdUmF-)fIl5<#$S01njSBNX<pH`HthJ?#_UsgR>g16#n51ZOskO|yXmfau
zx_+I=TfQ{GY;-G&#9G?cEaPv`mY1fEv!%h>a+eVg_&+vfVO~IN>iwcg+{^3{5E9wq
zXDsu#w=6?o?5%z_Kf9f-mk?!7KY12S#mhs*?JSp`dt`>n_;AVGR?Cp|s{HI>jsXzB
zy|~2@H3ZzJpT8v3e3T#je`dw;v6r-VwmB5(MRVQ@5ucVrNy{&t-OSCW7{Un_HRtwP
z+EyR2>qvDgxDV4GeYNkyR&?s9^5K;-TLdwTaDTW0y7jg#jmGx7<&J47@VM0RKk*4E
z7)&@1^kT%(<<c><#NbWGf9=lV0qa>_IK8jPpCRyo7ikZukyP9?{Vhqr=Wrz94VOtI
zV7hSFiJKq1`3z1sl{fpW#imw0PUG>gH>gi#TD3~qP)tPJal%d?;8%W95@q9IAOAWv
zW(-QBX!x0imlZiOv|@eOJeE{OQdj)p3>`DAl&jzBo<W+%B5Y22u9^GjBP^a&2MR&q
zj8VfyUC-!f`Gw4ZcA+~0J3HmE#3(8)`rw-Y0u_so+j6d4_Ez0%&B7d~lKyn+Jg^Tg
ze`wF5q}3H??;vk&_9x&n9VNP#Nj{|qV*uHl8EDdUTPrf<uD7(aUyNQc?~)T=<C3H|
z3(Ta^RC;S_<>GmVjB>s>vY;Zx_$2X9Kj2#g_M&uX_6V^u27Kh;w}`q*(~_xtKvW)n
zyR_<!Sjngd{{8z=8LEqfQ^<$3_!ycB=Vw$Ac*qsN2vKT!wQMN8VRB7R^9Y4QBV_w*
z-p#6QV_q#9RiqWyx=Y^kqI<g{ZoKHUP(YWQE0<`j*SjL>pKZM4OV9vDcR)`{Dh^Nh
z)5(yXGPoyGWl`;NfBO8}d+~k%3|zBlgxc53wjLgOWCzo;Ew#gs&!8&0erwx&r#(Ex
zsLSUW?^mbsK{s=MJ3_6kTSg`^R7x7sGy#Z~Sas^6FGs_HiWSa^C_TlzD!^u`3j1pQ
zs6kY^r}}i~9=uuQ>?MFrZP@hD3Q^anGC*rmt+HmmD-||{lePudoj&tV9zXqGyI@%@
zG7CAI^|4{GeGD4Vy{c~A%Y4V3EFplU?M&|{DM~mOw*Kj}??_Zsf-`BryDtrdhZwv8
z1=YKc>XU5=wsck<7x)*|<5z3r+FSRy2u_iS{V4M`l-`<l2w&2$5En<<b<eE;P#1X|
zuk&I_)W*eU?|d&OP17dbI7brsEvltI8)1H^8@>||5FIOmBHHUOR>;K21tV8pQZ1c;
zsnSo97O+$~XXpJr<su5)Q0_HYz8t+Sbm@o+gvvRvURi|UNu0B~@FNl@?8{YrMy`x)
zcuFR=?cp!z!C*zz#v+zjrSj3&G$(0w5tCUU(AYkBO}Gs&$j+Kx@zssHA5qeI%E61z
zDV5{;nxhSmsK|i@%z@u8*iyc;2Z+s~Sbn>N&Pb@dyP>9jQ+d-;2gXTXtwiE464w@2
zKNH*`?*F*>uY)Yc1N0H><u|#?pGU2!Zr#g?tOB7swL7Zta)|Gl19QL^nikze628yo
zy`Fye#DajTQ)Gfs+he_CS#}n=^tbISv4nBbiKG2Fh6w%fV+LS4GRy?jqtfb4@qYPw
ze)y3=_d9|Lb&Y2f<>BdD*1Y*NFQ{A=SIX-vE`O6)&C04d4v9UJwW@5<*B9u?lJg7C
z_2|27-Y$&rf9-yNRPND?M+)`|)=78<AL~R+zgh*S<Or?mkH@oPDN)r+y_FOlhv<;Z
z)Uw?T9hrVgOkFpd$oW-WkKcHH_qo!I9%IjW$#>Pw#s=GrBkA-xOrya@*#FXqt@2}b
zP=-#gZxY6_4foE!+jgXR$Q&w4(#9J|)U7yo8GF{!NZ#szS20EFv28l_i_V?J3oe;&
z->9UsllG~%|2XiS(kfF#vJ_)RqV`G`{6pOwAf&@JK?Ll}r!Rs?n4K1XM|F!vM<x8S
z2*EuL_cWGVqM_0!Z#+D5tbH+Q3tIV0V*+6FA@>HUO)ls{@)}maM--kF{H7s=gh9cU
zHeBB{X&=i8P`J;k7ozA*InR+PU@Tt_I4Q0c9i?tErqey)(Y;)Y$p>3@!XH;H^FP-q
z7#BT7X<84fAse>u?yibKt~=WxF!<Ubpse5qici$0NiuoJUgCi);4UH7{?ZBmA9>*d
zIjkKM%9(ZCY%aRO)Q0N_0oixRms4$gBK}>~ZAPx%((f$im+iid3<#j$Y|uz=qYADg
zy{Ocqe{PQFVyV!G9uiPFBe2iMc)#5*->5qkgPt$?AipP4GRIoV?pAYRv&Q*D>iA)9
zw@Fj;pz4vxVpKWPSlv`)xn<ZCxwnJAa6{S=Z)1%v$LRAYnJTCt!t!n*NI~#&<j4@_
zXS-)Q?(_=^6!|7uzlh#W{zBz`Q$lbaCl3i`{us4;==kA0gCI*78~7w@I;Oy*>5ypm
zYqa-V4Jvn0o~e1%ePfXhfh~aILxT`URYh^tMdPfzwD=*8tZ(Gu(JIom=#P!tW-h#6
z?I$3HW#%YNtfivr6$i#Se;e&;W2RrrhHNKK<*%Z<NOpn<gmjz<UXSjP=|Sc1f(#DN
zr>3P>uYjtOEj1@c>85F9`bL+}nWGW;HSD0Xki27uU&t^qfVcLYTLJkW{vJ`P!sVEt
zpq<l7@?3fk-$YAdV>Ck=-p@>BfPrJmlwVFQ{t?TrJ@Yt$a?deG9a99q{+=mg7<?{#
zo%mJyzI0G0c_}5gXCGQk<YgDanRziZMik6SI&+%(4<PMVH)#FOReTjl1vTpG!LhSC
z<psg<Ivqb;7@6ioEDyL<P1LZvW*i3+OaFLpMpqLfm@Ax<Aa4EVkLX!vrTx_TrM~G2
z%7A7gC6YK7^9fa4uaDN1Jgj?UQb-HON2%(g$JY~U^Xq&+SIS)a?HT)9*6m0$bsZi3
zv6cMveLngd()M>SuMX0dU_T?NxfnAg->`o-g^14I$Y3j(o*AJpkuo%r$enJfwPJ<J
z;|uH$?ehy=tqFKrxIoCcQo_w9j}_Pcb7?w$P%80TjWgHepz?6G-m0+$vkFH3I#W=Q
z%;WzjQ+0-=a=+^BW;U5F5PH%G1W-_NpMxMRN?(t3`{Lz98x##k?v>j3mH*ngGKagQ
zQPE22`@mVs<d0SLkx&a{RuIRU61y72R$m`23~p}}kqe(oE!#2{FP?=sKOHp-qSu8<
zNHjJ=k?xN-`+$fTc3Mdq(J-xvXFAFJlUhc4W~$1A=dZxGMb)fVfCppi4K7YDK<O&4
zQV}yf+hX6(JTRVBBqze1x-W{<DpOodmMaS)eH|J}y)D=W1F0Vsc{|omw54u;8t=|b
zBeg6sJG|fay~LKJx14%JpU$ft{d$$8RV0#MB);16ie>?7$o=k5x)px^$@Xywm@p-J
z9p9s9V<wD$k771r?Z#_gMD$si%p^Fl(Jtc0(JGml5MGej5GU^Y=0ZO%tZv!~<q4<_
zn%y2$Mv%lp4Dzw`hOsQAum;O1J~7t1Xv;1-=xXtv(UN9Tyv-H{%PoVJdCu~73wjqE
zG(IXno7ipa42v^QnA(cM>C0sggq)gVXa=SAgno(Ngs{nA8WR-@G=m?JztQ;a(z|jn
zU){Od1&d}91hf824pVkDqARk-tDP^B2ww9vs@~!l1aK_#H*xxU>+jN@Z>>ir*`4{%
z|AnOfNTMq*>ZTLZ*TnRy*UrLP9kb5iv<j?voJf|V@5biUk#`X0%BI?RsRF2`KGN8+
z(>i1-5lOVhm~?#dH<Ij=<4Fuw^CeDqa}|MBh~7M%WBA}mD3q0hVDKc%GL_<88d;pm
z)VaFyN1Hu4APY&atR#X@X+)>`o`hka>mTF2OLa}G+>5@1sj7fqcF9Spz?d<jFH@yZ
zSsn$pNve`4k<}2&S26z^G1V&7qh%#>+b)^s{Ow=EXznh%LDZ7B5Y3x-gqU{&95FV&
z%*LOxh9)r`yi;dMXNipp=9HbZnKrct{I#1mOmxnY>;Y2Pk{C>zfEOX&xl5rJDlLZm
z0oBqKU%9aq9F>r`@R5SMq16e+u52O)h5mOyp3?!gs&ITsvutKohMu%R?6>q3#z?Qj
zM=>o5mZCBVL{~K%GX?xC9fb&Rv5ubpG)&nrpTUXDa@fseF`}MVypxrDJ}=W<>TYcF
z6t;?P8E2~ohd$m(Wg-(0y|2(+&OQ>&w59P~nLLcTC*9v#aU7h8wty<J*3^&K8&@PI
zJe%34r*;6$-x3=BrT9GuwV23_e>0g51`~t?=c;79j*B-(%oGqK%sgSSRrvhQ_h{%K
zVFd;y$(1i_!FP5PFaB_mHeiom5Md)x8%JcovhljkR{)SbZYIs3&(c1>qbt2|!Nxz|
zh8i35x;Q+|5Mk6H^RD;`2pF-%5?~upCC$G6J$*PWCx=Hf_UnYbPPDM?#ls^u1zF^5
zs@!DNR~$v4QgM3via&)dEQu>q!Hz6bFQR{`>BgFnr&MH9RMk#}L?WI2dRYX;YEW~p
zgw_K0lG|w2S^;M*Ljhf#D^Y(`2B2gJ-D_pB>8KLF<b@_pOtG;ZB&@+3?N&>Tl1R0U
z;Qwpa5?UC{+9$?C*KU%C)GsPSTh@fU9Hr{T5WK+GF|8k0q-$8dTXWV2ZQ}`pWpBl*
z9Nnu=>Fa!P6e3%j7}8z_RcI=$nKE6+qc%;Gsia~=#5@Q<GYmNv(At>r)=Ca*ES;q8
z>8T_W%p(}^Cj$dhfTe!=;>*!|0<KDmODw1*8*d|SHvD&z?w^X{zh0rOsqgg&iQpch
zLw!UrC5I-@m~!cJptu(3Mom_&nt<jKK8>zR>BmC6`Dn)4haAJ~g;z7Jcv<cJ4-<b1
z_#e!rQTU)+ZpLt?%@c08w7PiIB)v{vF6ouOPh0)SbvV|!e-sp8fCLc9^HGGk7FO-C
z^k?|-HF=?8qBq?MjM1{lm?SuX&Zy0ZcIxwjRIHGfM|}D)MHF?g!P9rcf!**z+VW;^
zE3e_%flIiiEfI=SV(JPHEG%2%;6FeMgRmW~2*h4uW#jW3A=qE-+Ib<922-rJIsr@S
zX8NdiwfgpzkeL}6%3dj|QZLP11_zk)Yz#%HYK}X~ivP6(8KA~=`42iW=pR{xdK#;M
zR>PX3X!mj5NgA>0e_nx3RffsOAH&er!_!voybOfOPsfB0Fsf~imhq-WKYcUl)G!ey
zV1`m_^iNg>&D*fhD?bsnN-eXStJa6a>Ei$`dUwOkVXhL4C(Hr92V?P9^cg9pHLMoq
zE$|fN;}Dw6xSgY=%$6=+8oFYgA0m=S;=#49B?)Ie8QENuYgVyVkjkPe4t<Td%qq_y
z4eD!Jb<?0O(^(a|64&PL?qKdqC9ye7@}<1Fs|mh1<C!yE{H)=t1CN>HW{uUb=-kB-
z0}nqJhT~JX9gIP`&lPMPI(>9c8eujXp#ylYpTtnv5;{28SL|fZ0565H?_TxRsfA~M
z%1~Pg8_{rf;j?-CH!Qhc7-?gLuVU$2i_h-A1udVCbq$v0m)ZDtN18}(_4WqON!1H_
zKsEI%I+%O`gy<X%%s@gTopaPOV}8K4ENwmim)t^eDB0q_apy`_;HyId8JNJ(b-XrF
z^7#B-`}|%%R8*EGVX#QIW_DbA^#KlPbS)PZc;7SH*j$rVIy?I&RW@~jW^up5yHi!n
z&<bN;U8zW&u5WRvqBqjE8PaR_Y^+?(hxEy~H5%~YRZGZ$>M;rgqAF;7t&UaWV_RKh
zFYtZ>TasLoOjcoWjdlN%_1lTdzlC1?Q&PSHm76tDgA=+`O8-@}ex$<-!?@in|Bb&9
zpfZZpj6bq<*oCn&j2DA?YMQrCzt&lyw|1v87Y(^~6oovF7ZU>OamwC*o_yi%<KNQj
z3)Qc|EiRg-hV5H=C;pXPnyT^ec6QH?=Zd`KON|<P=ZEk_7E0W3-rG3b@vr#!xx*ND
z?)95GJms!K|Bj)YpOlIl&V;(R4f^1hscU4;^zB`EB~E6F@(IGs>9$z{p0Oi9RFyYA
zQS01)<$^5|OpiK<cyAol3ECS`Wp_}l*61-+YM}1!|48n8IcEkX%Vn?NImNzuf9<pv
zQWL3e#8u-s7vg}`yGw6rsh}O3t~ehp$Qa6g!urhmK3Cu9dc&g@UZQL7hJ}BIT-T$K
zpYgd9x5+WHG}y`czK3@Q>l@}&16Ao~&E7O}l(}~(rktW2oUJk6V@KN@Q>PMxoXk#f
zS~Dp)Rs5QlZvfJVh}fq={*V=?B^y?Fa$k?o7&JKcD~QO~y#&~wY5sN=&ckkDeOiyI
z)FDK?e$68jT@g0;Xx(J0nl03>445$;nT+x$TmOE?-#^$E=0_b(?NVjb59>`gYj4h<
zs{&giKWo;z1#_T*Rh7<FsdMUfYRl##l>3nIC}KMt-=3XX(GJhXA~L#1Zx(I+MKMXQ
zmmHC}*%GpQL`^Pf!i4J3F+WzA=%vb63aGPAyReJL`!I5<y?*hN*kTj@_Jz2RZTr(L
z0hK;F;kKwMM_*B9sdp{ShD255Ul*Ea?{(Ni%FHU4@Xan{3l-IY-x_-CDBI1NGR|J$
zqiAhgwm6wky}^$uBo`6}B;E}ACqI+p7W<(Rg}KeI&0@(ru2QeGa2I1!!}k73n@4?*
ztD@Aw&eUmk;s-JwA7rEMvFEHSo6V+f$#)%0=b^Wm_sAQs^@w%Amg+(k$ji6&jadZb
zDl7<chaibD^O#u#5ej>A!jl!sI2zG&oRH?8c}uah%!GXYiL<}{ppH{?jn&r?wn&+l
zbvTr0w}oL1Luuwnl4bU-EO}0)2Spcm)jK-iylU!ymRtkwjR4WZToe~-tXy<)eYwxY
z9GH0vt&yy?e11oz&*$-FpjfWH!G@jM9rdjr(_xOM(O($H&rfRK(n(JL>!BRsLZ!n#
z1;4;YCwEP)4rUFi=7rKhnt%f>sUx?U-c$sy=ZKT>(xHzV`bg(%rVkRQjeXQFB`b9a
zKaPz9wUQ-y?1iC??`c>tDX2q5P-}iC{T-JcibK#07MkQ#`CR20x2o5)1mdMiEby+}
zH*;5azDOR$l137YZkBeIk}CTKn@!m>Homh{q_I+W8{lms9$D5(G~5K8sYR&E=L(gl
zWu9TLXT$c{{!*w|D0{9|kxCijinYh!HF~Kl<ND!8(s%Z^fBy#Hb%6SmJ+5~}m*MN3
zilU2cL(pdP6`%_F1p__jePe`=+W)m1DXjVF{}Q(&-ggjiyY4GkIc>h#|M4Bj2tt}w
zHOH^GtFyi*N2OvWh(tH0T~5D~#Fm<<b&itm0GW-b^^dwas0<~kN`Kq7y^I4^Pt<<e
z`?PK^KrL*lXF2H&<#FS?GGXtv)`Oc;rR{Il>n(7#0sq<^d9uRl_c@IN=6v%&FI;I!
z<F=)7bzu`@kZ<=nLEYIoGHoD9BPl}1;>PN7Q#(VYw;W_Cj86a#TYCb);Y#CkB*b)7
z*^W@5*)wJ{93D$ww6_EpuPi5}p41@iIUF`fqipw5B*=TMuy?bCruP_^^)pgYnaA*(
z@5>`t(tEJuWQRYWQ$zWn_a>SdvvUF>BSv<VO0<U;?N5l9`oe9?->PXWnB+p-Cs*ad
zT0qXBtn*!kyKUFLtb=qU{&wHOAy8>iV7{bAG5gt=<mFaqmeHyy3LwjeWR-d=g3l=>
zI*O-SHXEC>gubois4y~1NL4wM`_wJ0OTSEqXJ8UP%T`Jl3X7Osk{mc}r_ECZ5>=2`
zbX+`0_u_LVXNn)7zV$X@l`02e1lwZs(e%)@^<`t5m-_b0!$})U(%Kbqgr34hqwTvn
zeo+~nbvzT~wSr?xKMw@0OJx=Ec3ZmVKX<m2e16T_zWiMpfoyW17{M7J6c_(O`Aw=)
zs;ycJZ}dsA3WC(LfRNFlEo6lw_PCf<T=K<=msiiZAOy9VbP>je-@gQmg#(KDPNOcP
zu_>zJvyVCT`xTM%j|0t4F*Ff3o?V*1m!XwdNPd}m8T~FXk}&nl;fbAk3W?OP{!(&l
zEsD*hTSl*m1OZN*;#wyenl$?&I_g^ilSMbd;!NG55ZwcbXDT}=WP^KUN1}_p89CxR
z&&D25$lsKrjLDz$&lK5Z3qq^X^UeHSwp1{D;2(^ijwf<b|4?-sEyT$I%gN=5&HMsc
zKq|>VwsQDg*?%Wt?Zj^4h6<f@qOz7mDL!)V9>!zz$D->)!^iw%BT7C$sABgTsfsU0
zbCptLlN2QmHof|!{B=KGl1g(Ul#{D7C)pMqNB;kj9-|6#v#f4D2NJW00$v=bC&c=Q
zRRGbx1ySP9VEQTu(kMU@R3qOQPLy6a!FUTe(`@A@g$P+WN{^5yNk94Gs6786?2kW7
zlK#YlH~ll|)Msy|ME(3S55yspY3zslnvzBLtY*2zYEZlSspf^;UA?D$2rsI!%E?g8
zwmgX&9W#3AIi)k1VHKq154f40=F*cxr>5u3{B5De-RcD;FnMeBGa)_K{e)f#>s2R7
z>#=I?ef?U5ZxK(LWzEOz9Io0HnjBnvpi+p2X(F)kFwFbDTkcIkxt#`!JNK33pswD&
z^jx{7>&=ZI1m~_*w^>@8RR5-sOKV5jv80^fyD$PlyccvgEANIooc$w!=vZ1;86zQQ
zRj$?NdCufgRt;&e-buQ2?e6No{$?>y18BVHfDo)4Z}&=D_AYEx%J~Q(ejrulM_FFX
z-@5G>?e8LnuHsRVFRK^cZ|SrC!CQ%s6A{baj@;xdm$HQK9gK{Ockt_+WC`#>$rJ7E
z;rrYziDdVrFg1=#bHUIx@eVlZ(|kVgV=+~~_q)Rz?jG3P#+FtwWp&K?%Wgz3b#Ghj
zprumL>RqEfwp{fZQ{fF+OGiv{5lVKAl9xk69eLY|li9E6*0h@ph$FSQHT!uCdWvvk
z{{z*Skhp8x<9!oBz;9el>t*S=_qZQ+>Kb$89y-#n98%NIoI6<9wIs-^mM!_XS70*^
z33exli8!k4*M^I_&&H}m>~Ka+lFJ}!%yhE;x#zd`^=Z)pb+Jy6-*;u;_enxI!X{G!
z9EwSI9P48}yov~H#26^d=X>9TM^Bc_LY#1ZnwnFK?Q0_nHuSe|K0C=?DUiKI9?x1i
z5>g%Y&*p{i*x{oo@3rmlX|~0%rh~O~X!u#W>Y^#sTNP%}iQ`qh$BEM4qI$K;o8I~^
zMcLf2(PyVQLh?Z-i{$689{K&;n(#Eb*<gZj(#m<KWwm$E1pY#Pk(;lz2FTtD!|G~j
zaO%%@%V_r0YvWvc8UaO&B_i`1Rzybb-El}*4;74dPqpRXlTMm#g!lRJ6;)Z@E;-7Z
zgj_1&Aznt;|MT1u8Rk8tx3+{R+jgW@d#W=Oy~Wt>eAbIB)W^DqM2VPL1~QtZsEV0R
zZ{W<P19Q7&=~Bb+VTt2DpjSPvuaj&(U6(E^1>YbYK2nSq-&9tN5=*1%*O6(_<=kvB
z^3#EVQMGjDKz`w#ZBlS{xwsrtIJj`z9A^ZNq-4v!6whe=DzrYHNBinjkE_iZm%hId
zR=uxCnu!RC1yNf&*O~EhmXI~a>t*i{ZcV3Rsue|(lBG@jw^zLD)a+P@gh*VkD}CM-
zl6i}<Eg26=N>DsMoT0$7B;<(B3j?#0P=^|8<0pHyTGKymO3^9ab_yfU8%>xA09}D)
zII7lEMe1;|)We$UqZhp1Z@E179Nzf`jZ$kP!j4>RSvTUIe?}wI!M~R+k=&IbF0JC_
zEe@EstSNasFD+5m7UKsR;R<K(eiSagbPlkBfJ-R}7FqPmkyV>W=fw;dMQgPtI||aR
zX#$@BF;yXu9mqaMAi^KguL%CvPFc)iYpa*hbq=J2sN>3B0Bb*Nyp1Pv^n*`fY1UNX
zzs$~c02!LjsC)doiEkQr`)azcOoXS%e-5Et{@jJ8W}`#5$y9US#M=84&*g;s%NQO=
z!UBczmwmJH6q9tenG@jacQ|lLnF)2C_wUthNyHh#5a`6qhF)yA5yLUZ^EQ8g5gGHH
z6=iULP190=;}BmVIEKAVZdLi2D=^P%q)XNY8>?nZ%Q3-D#l<v@K(6u_>=M6qV<{3Q
zOzFQrzHJr+G{X~XeCm9oW&Y{BdJpMb5to8-3(QZh_G!bEw${JD#VIVs=Yp&1-FWPc
zK~$igTtDYt5znt57nuu0ifubJH|vc5upNYAoLps5$`Atw`RAHYa9KLndgoue<v27s
zUCXYIn+`}h(LC*)<4ZLA^i(iEzgtP0yp=-%@&ZY!Yvq0g@G<N^Z#1>iQ_bYnw<eg~
zXqC}j-_BWin$8E5y<^>TC=jW{>9(9&<me!JBi8Emmi*IOaM-hehiB=#-I%vc9Xzd=
z^Fa0OsE0p)z%3wK>$Bj#h@~jjN+puFtHf&DFvFJq-iwplJ`UzoFCTMBMRr!bpPJ|@
zjuh`^G7Tyb%kl2d9(0(evfBSoy7tH!V@GP2sZ;PuzT8W2A_CE%zT5=yg8#?am3TFA
zwqGr+bg@vk7Az1eTH4YUk=lkO#2r^C?nNOgTHGpPScA!kw&Fq)aj8o&QBfi)M64QI
zAXt<@Re}bIHE7VFAw*<J29hC}{_gnw2fuT^bNs5w<ehhU-e<Yby?DgVmP`%z&Xp{P
zE+5e_uph-;DG%qfIX&h@eKx;Fu%FI;D8~mMgdD(r*#Y*Je|=Fmzz11zr=GrKTmt(Z
zS+pm95TsWw>)Iz9e>UnV>llr413Wvq>cPQR_;4e#@0K%3PM0uj(e9~SP0wKT<y#iN
zgsVhf&;LiowU12IQ!BR-e#gQY-Ep?%u~vyc-(H4f0xbLBZ)3Cy1+K9k!O{CO-%~FI
zYJ+s-ay3pD*IyD>5|-@xCD}6fSG-f)de`UPT$d=+tFM)Smz36t9mpE>VpxEc$vlt|
zf>rc_*Q#h4XuqWMdv>U9X}cT#fBE+>1{#ldHYU2|G`eCoeK9dy$v0Cud7f=i&+hpW
z=bW!QwMEy-0Y=Gu+Wmwpn<CPS)2*n^AEdiK(3Xaf^fIB4bGDk&qj%HuJ~Uu4VOx{9
zCBd+M$%kyWjB;S9P8OquPt|liH(M2B?&u>|;zQ*F@Cmp{fzw=qEQ@OmFl8TfN+BcY
zuspcT_-D3}%uW%AAq$F`kd=T8<?uHZT%M(e!I{c5<^?d#pV6{hvN`TCS7)FnhFyUH
z=zBNTLi6ncsJ5P@FAp@5j+pu8M}BgxMLp{==j~Y`uLzH;aCmtCT!B`{j$H85!|m6)
z;npf?Sq$GMcc58~VnPgWPU6uvJkYi56k9|vrxP?FnWJ}oBB^Hbh>&}o0No1amgLH`
zWa*hvEbK`fFjj6)>CVrPMSV4c6Qi&T(rrdgU}@lLcnQ}&#txz!5?-}a=n6AchUDoM
zem9R+zMfSfF*;-lWvt#;uz2BjaX4^y_Y%2gI8`Mz>r3B%*0>k+h%`%ayaRZ4K^w1m
zmir`{IPQu`KAomz1}Qj@AGV$5?y5<Vm4@pUj>p^(yzwj4O0%;*(>Jtc{gtCoeDlOT
zDVlR2%_Ypj9CDL4!mVGhXKK6W%Pg9=EFBQ*UnVeHcEF`wx!CbenN?hQux<WQI9xfa
z&T<dgNfU<jaCc|X6`uB6?vb!wS2%q{GpQk)ENx$(xM0_z(qKA;7KXw3E}M4H2eFh?
z+U)UE_It+7UtH_f<RkY^C#YJf)Q+Od7&bL>G}EyP!WtVgXm?uYO*?=-iS7dCy4Q*i
z8s>rz7&iRqsX6Y%6ilyE7}#*?iWZy9e;VGe=~jD)o!Z?g_q`r8*FYv$mE#C^wYGC>
zeThk=-`2&c{%0AvpSVBKdHDc7V;F*_Fpo{B8u;3pYRb%Dh3om|ivT~FN$1_$srF@e
zY<tuunY`K;7p7G#!06XsdH+tA>w~4eSd!X{+m%~PHndS%UI9qNRMJVpp11(T57+m$
zwk5nCzRuBW>1dx(`cJIGc^yQM{HcnKB|zMNY4inq7e^#@>Nb3=Iszsau>n+&bJOSV
zx;V8h@az!K#C%bD20k!=jK|(doBVkh^WTM;V2j@w)j1(<{}&XWj)6*P>EUyq-WL2Z
zeAPA~Qr;OggywRx*U?kag-CtMx=MH6YTNy}n_0~h8DeXKbr&qVp9VHQ4V*nRhhkYD
zxjA}EuvwB_8<LsAQP=I?P)w4DJjMs-bsO3O@g^3m{<hSc!-6d83(!D0=4x*w0P|Hj
z-BK?*-#b9WhzQWNKfXL0KJS#1fz+eJgQ04goKS%agZS;#M(jJ$DIoKEU|>rT$Z;7&
zHWsRCIUyqm!kV+_IuY-2_}tJlk-5(Pw2p@ChlOi!C|*Yw>Qy$d-XB~9QwLt*lYz;N
z2L>l{kQ!?CNWoOMEolR_OS#EvG)PL_ExN{V5TgQ&FZy+Np$xdsgo+q#xy6zPX9v&g
zxvKTrkNCsV>vT~4U2OFN_=fh6!$$8~kR)yH<#fBa(z)+_3SAL;O5@;c&-Soklqi1f
z1OQBa*xmo{INnBCYxi%pCJs?D>&^M{4W7Ea$E4)cbL-j9Pb>V_oTFJM#(Aqr=jKp<
z#k1Sfus`1DO}(4}Sg)`8N>){`bKOrjRz?i8cL}Twg02{O(;sb5zPaw9ZZOJ9`4F<A
z#PH7)J+|+6`#|l=(F@0ZGm6*%Ic1^@%<xGn@Mb@H*T-;w{~7Bh0zp2OZD$KN8Yg5Y
z+2>j}mcg64fu#}z%pCWt5Giqm`U+E)kP~A4+&7S5Qg-x{>XM`&(3nmy+xd!+xb?J$
zxdgqvJJu9Z9v>JCPMhUbimd4(o`@H1U3Zf0DNm>f(FRBeS|vCVWa<1acDM(q-VNO~
zFvBZ5g(!k@6@OnPN>Of}r0YS)%uwy?FQ>-K^^zV!u8>#!4D2wpk~Vw_;FrZgEgA~1
zy5aIidb=P`R4J`=bpBK~;tq3ut7o`%JGmuEPdpFdH5BDL#YDnYU!q<>FKe0?hbXUg
z?*l(~J0Uf8t5p;BAm6DfaZiSudHwzA!YoZ0);CQJcOw9|Y$!4CSC4F>fa-n4{rmJT
zHSM#4<=QwXTO4l6(TWYr{IG|LBPwX3>F*(8uEwA2b1P-rLhlrNV4k^_f1bShJXkVc
zx=A?6_(4@2$Hm|O6E-hsX*RNQNkz)(8Fdle`L<U=kFde5X#r>a-&@KIx$4hU?@P-~
z{;Fl0vX@Iks#><!nTkUGxC1GYwyA|Ln3pt8?5r1ctKH;Vd`xc2QD<5_ZZJ1!mD2Io
zms3*41@Eu*Mp<>gZd<4i>%m_H0)#Dh9|Ol=mXjyEeOB3OvQVI*CwAX#`T61@G8y`?
z7C9aq|L&ut$Yx5I`FEcyY)Jih0;W>5if!oWSK$bh%sA|KDp8t3vNgQP91sNN!Lw^O
zWO=`h5cR3UYfPHa+vL`>BMFXg>Zp_&zF6LEzDdW&OnQ1T8&L~rQKj(vp4BcPrgVyr
zdCu2(o4SgLCROWdd;_sa)V6Rpds<zedtRD9X7}mKp<+z%-L(+t)q~F*7SwaoS7TLo
zO$FgNoZfoBW7(<n7E`I`vZlG~n9OL^xC5!)c}dnjlD;8m8frjDaWgcDh1~pq15O<a
z&v1rx+W7|az14q}-D5W=UCB-%+t?k=q9vB2Ov_aeuxc-m-yhf6uxZmkD#OiTeY_9t
zlr^Z?*Vei`<$g|axFE?;k;JrV0CYbBqkg!v4rTGM%`<MA3i{lXCDTY}bh--61(w$D
z_TP*wNHcQ6CD9cVYxvTo%vjDTYbQ?+HE)e6_ihg}y2(+eO46UWH&%{C;-%zrD35Hu
z)FYH#72(I%mV5$t9gph#h)VTVbMHWH>b1Zls~CIszX4O=YyapC7P(e2G0%O9`gDNY
z)aUacPKDB@L(KLOhUbaATPaHPT>!?(z5CDX?tWO5)$@`f_8!4DH#r3~aeAE$=Go0Q
z?v0mDe!|tAP|FqA<xlYo)deN%@m0m%mMD{&SNsY*n}^YGnQZ?&WH-Z6n)(Sxt+Lwc
z`L@2Z8y_>)kT0FhgFDH4Ipf`y#Qi!+a+k^ACT?T~z$s~6_1qoYIre_mq^(>{z=Vu`
zSqo4w43?!QL@bh<C7MWA)U&v0@Zl<vy4^6+QzU!VoG8AL;UhYfjiD^{zN~_G#C!P#
zS2llJRF6rXQXdtw*qexhdyQg`F1D(#eY`N+sN+QG6ivtI&dH&I_dWSqUzg)1+P#jJ
zt6;R8GY(|Xml1#M0rMBPbvdfsVcNeK*AU{l<9Bv6gPW;>ucfkm76!O7#;+&rV{&$>
z<u*-AmeH5p#&Do28t)-VlHqstwJ@c?s6YK(0JF=YHqx>~Mmy>JFm4rcIk0_g;XPxZ
zZJ4I<vgA?xg=PcQ786A3I_Vo~kBJC#IOU{8D-*1Xf6LJHC%*CU*A6<HAfW*E{L(x`
zLC%><#_hT}>^mk#v%LIx@S9XLViiT~EJ`oO+P(daYs-02>|*;V(YOC^XnNS-mP9$v
zD)o%c(lqwyC~{yncnnxZhj^x&I8suV^#;9{P=Vf{9^-bM^pUZvL)>^xB<OHWu;}i+
zA1>%3WLG=sNX7+ot@A~@N&D05X@eO|mRt_bML*R8Ev^MBHCC@uC>@s01(%qG)Fs~)
z64+^qLz`eRbEBW6blRKt$Vn}wKh7ZDPX9)cMhTF&i^@ha{&H!rMV?X(s04UCnzqx|
zu&--l9fa(`r39JIrmE#??oinfUKMP;e10mMkQ!((jKnpKityl8b1r82hB#Hy`yX{{
zIFZuhn?j%z+tPIBI5g-J&7ENPb@Z_72i{Aac-qp#l7@kpfKH%|Jrgc1x(*#ynQV?L
zTDXHah)zJ>Xe9RAxf*%&zsA$4Q3N8x6Gnu~OtUP&${PaH$FOowkY@b8;_l+P!4fxT
zN*lp7H>6plXAtup`J$KVbMiYa^_h@OieTJ}yO(BgafRdiRhlj7^>79OjjK!_<0dzo
zHSJ+S;@j-c%7ZKmW(|tM#6?(h3T&46l(u<D0E}L(p5sv^@){#_C#+(i)~9Xda=UAx
zX~ilY@o?^lvM+o?Y2jaHI-0Zo%D%=m`NDEz<xFb30p|6{gn#F*2c^NzBT*)rrGSfB
z%-Aj`8ZD2EM@&*v@&39_TVU~cBbo?g@*eo)E1$zN)b+3=rMUDNCw=~EB}pNUq*5#z
zg4fvJhwwpkd+g>1X|{lUY|O02(H?m1sO~BfwJ35TUA_68j0f?6m2P*fSu#m0Q6%@Q
zuRO|78a2Iugb;l3Z>7gnU%fu<J0H8={`tA&_FMmi*3~iahy>}e!22hGQ!P<iAwg@>
zTGi3g0;}`d;uEttqU<a^)#C(m1mxakd!o|svSC&@HZSjx;^6O}kS?L&L|9${obbpa
zt*&vNzUQtK5T59JyLbEwMnkVY;KQf-jP35pR>Q>)=BJf~fiA=3FOKpqeN<9uoB=1r
zGVh;mv8Y1mqIO$$|4Tq$M$-xx6^Z^WrdWDnuTfg@mst{xe%0@75Sm%GNS_4@T6^Jm
z_TUU!Cb#HAOaEEdiTasG>a?*vQ!SJf(DeASr9cR*9YNSv{tb05jD^Xpe}z9x=*5m!
zp=Po0{@i8%4m*QjZF<=&$Si%d_y=Is4>>v=M6luP`!!`ac=nHnCs}kV5KG<oSUz<z
zZtsm~mhC~|QdPbGHpAe^)6Gju7(^T@cGhI~b>3{TVK0NpTl?<5oP4zo&AL}&M9xL$
zXm@OBN9Ty*@nS>tBeRa$uLB7w)+gouJ8jUr(#WB(YR+*5X5M=8?XR_-G1WcZ9XhA`
zgUd638=vm}%n+&}NlVAQIHZbqO?0}{SOT2cK;_-XA280=wU0*-w{YXOa!dZ#JNY#A
z=Fl7(;n6I_BFhd&%^|2<1sh+HO_;faae~`#Ri%=h9cq=yAuD<OvYYqt{0#Soq<x%<
z`WQmf{apvTry8CHV(*MzexnbdAct2+TjZssF&0Xfc=Cgl(-OkK)sN#9S@~qmY~BsD
z!Co3WU{$)tTr<ccJT`I7$%TG5Y*nG1T7|BhnzxiL>Xx+5a`y&zO?7uos9Rp|s|hdc
z+!(X(5Hub)<WJ8|L;FU2usY!KtVKWHpL1~f^q7g9{^bG^lzX#gv~AOOejaP5Bt=;!
zaWiT1J1CofGT1RR(M_77mgB(ZQwuIL_f7X?Fp+aE3Rd-e^-JP{%f2}sl8rLiGnqy{
z>FcLM#tabg6fu@&n`><<777`k)EfV-k+jKO64PBn_^H1P3IRArtlEjpI_c$2FD%%H
zOCI!;a1o-CAgdyCxSRJkUA)4iI2DZ#;p5P%;A%uW^mM*7R~oix^R&|#hjjZ^N|4lr
z3>HsoJ@fOf;FQ;4Nj{qh#g(XN`YIQf+r5?WP{z+;HW;yt_`2~DP+Kn1O0*DwNGo*0
zp13~>-{jYhCl<}XVCW<#J)!`27S()eyN{^SrB=N7DP-zzRj9i@iHfV4jg{KEc14QR
z&??3<bLq=drY)r!R(Rpxw^C^+gWc|Qi3-cS{R%Qnp>=%}ZpGNKAf#Y8Aj`j}P-TO7
zyX?*<4|!Biz#$F&-shYFPEHSZuq)(g*}mpe3TUgKCOqh)&<@h1)asSG5r4wlKkpHw
zbcT5?Mz6X2xsYGiVaaP6|CyRno@q{W+NvxDv7LktG&6A53?+7t)$x0vWR5gNue#bP
zN!EGwp&izh_2DRbObct7w90DU$8nD?^iE?e71#fV;WzNr&XJ47QL%LadD76(nu&cj
z?|{%da?*~*v|n*&<0am0<J-pAyaw>aPog%e#N#b5UQ`xsjGQttqSfz~M`o>GOB%F1
z-PE({^gK(FD{b6?4KR;OcTTK{*<h=QIc_Sx*`d}RuUV`D-{iUR2eO%;Kk}Z>;GAuQ
znxiRtx3yr^;N6<S@!*xzz4i~RnbG2r8~J41OwGnYfxs{#H8RhKP*{GR8s$s48S*@6
zH8#1=OL97>4v`wu{qymBade6nsu@1~TFu6Td&U=RVdiA&m=wL=zmXNwqqrvd0w#rF
zk1X=wHlhDaC7b-Qn{vSB;PycSG|y}uH(OTqQ(n>BCf6XTu&gFqdc>%V=4(tx|5(93
z2eacG%H2?4-LF+}i}>3eP4nRD_T$d4UXrF(#oRSLO6q!!-~`U8v;L=BYa>|EH?kqp
z`I=ruj=q4%G6AV<R^XN$ejaR%ij!qAM3CxdkNuwhNhDOtzupIgKp)NOdgb3N7-lC5
z@&x3)$%O8S;e=*h<kUIgL`a?w9bZ;!Zq7L3(-S9RX-6Z(iG1&Mw$YIkAq))fc;P@+
zVQpXr^NK5Sot)?ty`@tdu{rZBY`y51$J!IWrq=a3HKJ2V-fU=WH{69wsmQ-G7WL|H
z5G~<<KcYL-Vc8cWSA<XTk%q54$r$wi1`JYv_xuO{q5)=cFlp9@n)j={yo!@?9&!=C
z;2Ofnx4d?DS0ob&p*Tq?j@{DS?+zt%Kl|5a)+^-R{t9hFhGk~R$Kb{AlPN;Ej5r=?
zi3{LM*GyS(<kv%o$d{wg#Us0w@607lM<19A9xNgv?@&`z(GxWRl8x_m=qo)qKT|YU
zcc+u7|5)z4WT!Krw(WH;A!nVoa>r1K!IeQ@8t&(=c$O~_(KoWY+XIrY1rL|o=!)-r
zW#;@2?S9!ErR{z=c4ifk^=lz~Jq5IKQjS}lDpyq3O_ob=ssr0S=uWm5;|@1%&rQ@9
z_tyFA&OoF|S7MM0gW6Xkqr%g@3~w+gc^ex80Dxh{oInvu4);kjHSo=ysE96<rzJ)*
z7#h<4EfE=$Tz#gM_Vs)*6JQwdKqyGjNfSrqsWIqTxs#SogE>(!g$P)>sT$EEzrv!h
zM3q~25%L|nl$Px@!HZU3bwct9ZcDnKr(#2Y`l}Q@>-56cJ}R!|c#E*Vzn}De>!^@h
zdTeHjmU3=ne;?z^t(J2nKIt9mNi*~BAW`bXJR%bTL}WysHSgs)t@Ae&;B3|DnRT7}
zYXN?;x}x5Z<Ic?gc61U&ALF+TBKBhMH2pW=C1QZSL9gie&4@GTI-gVxe<2oLaoDj%
z<<|3u>UK!?sQ+i`{Vhmz6gyLFzJE3E<CNcK9fB*}{ElyE-A%PELLdxzDtm@msHcx@
z4No<bH)~PNuyjyypg<qFl=hUK{3P<2)k3n0kq$k2E`!xt!Bu>do#C;)8v!FWsN;D~
zrvfIYoR8KY?AYJqtn?N7$}pTP*BbcSSDix6hjFxmTB{(+d6AuRV(v5>U4Tf3dm7}6
z@G5L9#524uBuJpwjT1+cs|hG^+~rxB9IVX5M1R%ze^s6^z}(un$KMZpcy^#s_A*;k
z-ucMGczP`hmr?)D%_#A=3E)Clcem{n8qn)Y$9VOs`OP9#vC*-pta&|?OBp{+&B-)s
z(I+amFP{1l=D0jFvf62F7f9~pFTK4EF;+0zyo6lpA?VWmxN%QEh^772>nspYa!uMe
zqfp_~r?$5W=!M$1_W5yR5+PY=$Pv2&i{2SMF)S&xvtCdDWKL>F&eLnp<Hqv%8e2!B
zNLm<q`61wKs+NN|F+&x~p59I|JJNv*yL{Bx*v38+LI=^m-bmI)ZN@E{wO_%u*pNqH
zX;jgnBXlE>F2|(|0q8jug9uHGPK%@Ts%Q^hs4-t45c$Zgwl<FC%2E79yOE(d1hdSh
z5Up9`8!p17^zh%gBVntZ!uJ+;*>Li>MVYn{PiBI?)HxSmdA{9bgG;{t+P;x=Y4i;`
z!9|f?&M>l+TJvB`wNfW12#Zt}_xjZDi*D71dik=sCX19diIFJ3)L70OSF&|!^rO~9
zCw<kj`*qQ!3DbUsosIwiLh4*B91DyLFn_|??|ZU%lN{OI9R{YKm5UL*UOV(33HDKw
zh82DA$;>s^KK=HVMNj!br@^e@x{{~w)4niK@Ymx%m^rL83N5x8?lX0q?MobHCF)&o
z|2ukNFFXWpF57E@VeU`3$PP_kwy5&-&MFOIaS2dsIC0|>jOFc%h0gwd;1yKI(jUab
zz|lVX+6z}hBX3aI>23<!7)Z5FK;?p{K8ilYJs;?SRq?aK*gn7h<vCR~*Z>40^{cR5
zEW99~<|pOQLaRhgcEmHBJ?Ix@Y|H4sb7<T{Oi=WAUCk2^z?7Cp0WtK;(7$(^XRmtW
zFFyd|<EH5hYs-v_+peudy!s$))UHMm*F~tEz2Iu6TpuoKZFl!O2DzGE)9KW)t|d=D
zz{6_+OP7|nlFk`sdT#0@L`FN1`rZ}hnQ#MH$J}Ijq9%cSI6?{L&>wa`x^Tn8@CWCr
z+U;$0YrHyya$mg10Y=<>@-&t#)a0O#P-*wpzr$>)+Q-b}pWS&sB(ERGY`&x<c|@5O
zfE>K6S<ez@mj3$t%4>fN7r8|qrl%nJE&S?1*z#QyTLeiBR0|=y)mt+3huK}9$AZX6
zksvdfcVEX-i|@Y;Oc~f{d<DH0iEj7(poX^HV`HTTjcR^vO^PdOLOPPrH&nwiM=$4o
zTh4&UxK*Omr4$K2ReX5#G@rawGi*N20Qp?e`1p%sQSvz~bdt8$$&)eJH|pQ0p_a^?
z*c&Nz3Pi`IPtuICals}Tr6N~Ui?f`$MoHK0_tslX#n+}*r8;A{n&Y(*BF@@Nzq~!?
zxQHv+$gU-g$_+k^X<^G5o;7ev?xeT-ol2{TIsGBtfOLF1%`-t*L94W0HNx;l5LdEL
zYX%SOY9AyUkTd7g5sfO0rNRShS@`qXz8oE!l{;To(5*v59uVm0c-?uzh&hpN-{<al
zxgQOwSS!E69+PYeM5%17)&&_%535$Ga&Q&4=ZJ@~R|lAXjmn|2^JP{9_6r-@0HMN@
za%ndm)lZttb}O9GkdvUUL2XjF)#&WrZ}Tlj|EQ`69yqWk*5RIW-UvmD3s^lf&mV=8
zZ}l7G5qZQU4c`>1RvMo&t)S2D4JQ<byTV!qOUolG9evKL-sYcdP8DFeNXC0wWmeM5
zO<u$}hdF04E|Y5=JIJ?304=>rE>&GI=l2CsiBMDVfq^5Y)S4<*_VqYKpBJ3WL2S3w
z(c40etmlD}u5s;W!I-U}ZW=qPX)}EI3<xs$hV{U`QtK3_SC5ICa-DCcMRE>!;DeN;
z)ho(xJBLHaSTeVw4;fi@SK2p0F_uZEGc_v;QtI8kB1C>i&WNUMb`0`V!Y36+IoiW_
z-`s!a_$j~RDU#?xY#-W}@Lc!L<XM;_YyYjAb<VOzt4_Je6Bwu^$`f<rk*`&CcRX6b
zl7L2SidJ`msXQ<R{r1@sh^V-|Ya>l)y>!N0o~oK0H_T6(>lA=sy4<WERE8st>F60-
z+6NLGRq4)&uPWS)HJ*OQqGF{po{5<WlRU#J=Hgr`aM6_>E#C>&Lr$4y(#_C-JR9p(
z-}xIiR2sR0nEz!|!V}oR<A=?)Zi9&-4Fz97=ddfPbly@*PwA+smsQRX1~`6qg*w!d
z*X1$2IcIB@#imKrdaZY1e>o1%icFY1#G=)S2N+AUNltEQ@K3WT!^@;QFO-hv+%wK-
zPj+~P=IunUdcjcky`*IO`VIf{u#D|dV#J*~LuK^l6wOuOo-|ZE_u0;Mt_e7TGiF$1
zF?UIqr>NXq&_w8<s>H>96AalKExKxQ<6PSs-fbVYq~dM?Xq@W}CkDDgC~0&^hfXV>
zC6(qz{GoJai=;%?yGuOfDvNHEh^tt458{}(pzQ2_xN;I3<7am^mEp~%mzZ;8F;hH$
z5%_c@WATsssdS*!w%|Q*wAP~R1cfKh<U9H{zB>Am@#z2XRYXG6cTKV*-ZpQIy}M?B
z7dXY**Gr?mE~K$IR6>Ya2RWVW{>BPyXzCSz0aH0(vZEf~br%fOEK5P=z94(E=eoK!
z_~lBR%20qTaLnF?(H|_D;wJWtwFP*+%ykJ0F2-{RWWaXLQ1fM_*)5b&uFxH=W3p2r
z()Bp@#L~f$u52izCpsn3*$sI6hrOTHz7DB!^Lx}fILO@~Z~qhTefPya6w)ePf_!N%
zC#zNyGe=x`#P3mkObAA$;x&RU5(B8%v0cW4>|Mm>tcZ`k`jo!z^I+#y^%%+g29HN3
zi`Hs7I-9B9m54DhK)>~k>oDt!JWsTFRz@uk8yQ1@vgP(UW{1|!K@aLO{!Mj+$eRQj
zzreZ_szMd4W*=EhHPVt1^jl{!Cq~yg{$-lC8Np3We~#TK=7Lw`{Y&>XV^l5R7itc|
zVKyidp413z&Na!U{|zwd=ufQ>N1g4o^<307-IPA52+Jm<Pw3Jhst0D}ZU8IVq9S{G
ze5IKk_$jKdQ&ZtJLE)Uxq<X1(cKeAIO>kgKq6?m**|#jO5XlCfE_F=04}F8k*X@lC
zEBG)7@xgj51mXZrjCXs8&J9P&p3>2%Ro$umhrtRRhEMNr_q)}_Wo-_bA_!vG1@0F7
zk}M-nHZG%q`{h!$M#wXkF|kAYml2D0y_(H4wfztPF90C*gKNFFz>{sSnTK}HccB@N
zW6G_$JP(l^!P^0}j?=I3FP+kk4HF>@yPuujp0x3N=0+9T0Fy>#*fa?<&c$d*4_FKh
z^*TJ#nbgDXu&CWB@mF9jt5cF%?Tc2npKK115FMpRkh;#qY>vayWAnf7C6K+4R;WC<
z!}KFguA0yg|8Gq&>Eyo-C!)!CButR^3uLaJhPh8FWq0HesjS%DLBJOfH&^`gtx+FZ
z!%>YI<gO$VY@G<Dh?^cf8QJJ8R&+0Oj{E;M$Yz=i`Ywbh+ctY9|04lmDiV(4e4*_9
z(`$a7M8UToEtS1+B;#&T?%m!fN~m_qh{<0$>HejJCE?E}1Ilqr8@a7UZ8w@qK0sna
zB$7^2TWF!(DO_W5aqaIgZ<NuOt6+36Ij*z17{qS2TL!Y!@QteEHVyjKcmm8bU@*n1
zU|YsktLy}IO`=syiaY-JF%hpSJt@Jig=-t}@W3UK=mMsx<hZJJA?!nm9i;B0l~(#L
zRb%8`1E98=i4Pj(JmeIm2hTGHs}1JTCF+?(85IE(wdlT<y6A~PkT2PTS-0pVwg{u{
zOhiUWA>#yA{VygN!)gTwT!hga&t%WsaCh$jxZ1<l-EP%)x3kr@2{+!yd-X|t2&w|t
zLaf@pc+R5Vf-DW02vxwJeE;oWV?(yp4B1iqLsjXligGS=sZ2WU*>_GwEKiIyZ0*H9
z=3INfEf+tVusR5CM1BA^K55J$!C5dtH=>O38MeFD%>sF~Qo-UC5${`e+#bK0^4M<e
zYwcegKNcXh59s%h9HuI+iN?IV*0Ou5#jJ6d_t&abY+&u<j*gzjYLuw;hGHLL)~npf
zFmyeiFGC}z7C`1SWB%6c<-4a=+uY@LzE*xku=tk=Z_Zx+*|u51c99PuQ-JIJj~&0B
z1tWpfU{W0~Z5P(;YD_u-r_FT2BB@7>;QI-?#`y@k^?C$`NS8F6!jC{t=RKWcvxhK6
zIvs4C3<3v^hr)`+>eHtYKg04in)LD}d>y%XSV83ew*i5U^{3MS2^x-PBwJ3bjk3^$
ze3@>`$9uXb>{@|DlhTf9v*?5qF4`t6#uM#hEHXv3TIG)G*7CCA{q?W|b|G~%$ntY^
zp|0C`m2pW5dhsvonv^^XRq497IA;86cQ<`E>v*rZqdu$D9t5zTYsrH^T)Xu7C6n|R
z9Bd52w{7=7Rm1-$68`vzkZF7*c)^kQ%aON5XD)7+ztA6dcEu#P_>GHKvze-O*M}$J
zW~cc8W>&%I*Sfg*Ck?>$6c+R|$TN-Q=&NlH@v*rrS7_CE2AU-42?PSDb-gc)T+iwQ
zzTCPF%)hK8O&ho6_mlWk$*!hr%N4~JUqzq1_Wbvid)^QCWHQ%^_~Ay_ds^l9>-kHN
zghH6aHFf!>OfQ>i%oF)F6Ea#k>*@QZsf!MM9xJWr;YN74Lmhqbf)T&3JhEbdjdXG@
z!0(O}2A<^VUZ&n27F2xGSQ!RHr&*ev6IZyVWM*R`rlBB3&*4L#&^M4l(X=t;E^PY!
zUvxM`%lMiBiDsvATh9+Xv`u%lwuOl}*oB4LElZhz_1L}VkOAJrHbr<8un4P8mT>T7
z)MR{JMK&Ca(kiu%Jda$~A8$}W*exx)4u}Q-b0kdBJ2K8Ove5aUcM=^Pb_Q_(*Q9bh
zzcl;A#l-|vWEOh20r}A;Fj~+3j{@q!*a3-(jZeBeWO6xoS#08o)Uj?|eYH+OdTX}T
zKL1J)Dg@Y1onOCWroGjzVOA;w_umdgUjxiJ_IyK+Pp`>lnf=CPuh!>*9d)4IqU)+3
zxd;*52<WA|T3h(y5bdM1j!svmC0af8W8ewK$2w@A%^VG3DtN<-?i>$RqD&^XeLdFA
zha&sT4V%M_3fpO>6oK2ZZh+Y#G1U)r{#6rtCTULWD7SWjE2WXhuR8^;L+s>4MnOv#
z0R^`+9cHces2C>7wc*}Aze2epx)30DenBrjTJmAbwS8yQa9nuZHVyCeYTOXMA4y0`
zQseoY$ae*k#YuBMde$M8naWJm%0s9|;raJY-l&|Mvp1B^>TpH*NE#Yv(>~0&4tLA6
z4XB7l*i6!|RzVN8<_AA_t<nboBI#9b>mtUjXxmW8U`K1yp);f4C2RK65yO5$2+F9!
zPR(@J8Y)q==(V8*_1l;EJ70NlJ)@-t#l|f4B*u|bwH!UO+g+)M$Y?PtRa*qspDHdf
zVaCR*PVQTTYYVk#?z%V8%iwQ0xiLBb422x3amG;QaEn^pMU^s>cdJBD_nH@kSJ}?u
z#dOuRCd#!Ht4Cj*7(_<o7`Ux2VcAa=yP0x;<?iGVyU1T>@FnCCZU^ueP<)HMptU2T
zZ&pt+=imPM&TJJ~^qdHK(L7jURZqINyr~f1e5M}Km?Y6S24^^dz#act)E(Mu5Bzvq
zq4xLtl~0YVBgqdCdqbh-jb~&<Zk<~cbK*8bOhX@zvve|z8beO`9Wm;-jp^p*?#CxO
zHZLPkssF*3!%5N0Cwj7}RNr$SGr3_)?LD=ElxwK#kLIMdXY+NkGv2QU31f;U9H{J+
zffO~M&g{zK$`s90t9?B}>im@(1`ESXW4coAt#omLZ%L446%?u*d1%ayjsn4ZShh55
zu*si+VlkIS`>KaBINCz`8JPI8I63XXTlvjNVpFJZpu38E3Jc;KI@Xt~xRIA9itv*j
zmn}0z^kfBiwfF#?KPVcOfH~;Xt96Qm!|nY2zm4)SsRnEgYl`QQh)j9o$9`b@EMnNc
znU=O_sE%&fJW*r$sZLZ$=$<G3LbMPGr&fuUu+^-I;oYRko$b@)xp}NF%fNiK>)jOE
zSI9P92<WzS{8Vd7aT4fa@6R6xS`C=K7eAG%bSE_I{2?6;GK*!uguVb30oC)wvGSr{
zGjFmr<rM8JNGf{g=MDv^Nc(Syv(8~Bz6{Rwf&7|?6J^ghf9#qIFG#lX>&GO?Vg7vt
zl8t<g>aD++E#>|-+)iHp2b%<aXe}}*xb%r7n)!dM(=;RsJVjZ?6LeC6?e(~npGw4n
ze0*X0I8y^<l0MP+mWiiFXK_;Aw69J1Bi5j!7LR6oaqQ|z5`bK4{nT66WhCT&cTlDQ
zTKR(^%1}=IbRm_ZH<X|MSHs4ur?+n51N#$f*31!eCr2JU3L_MX+wu<mu2vi2H_$mL
zKpDOLj4?nFmw|3JWTgJ5TN_`i@sU=P)waE7@(xAgW7xbH_<!s9?*(Z<KH6iu`VmT1
zp|m_dFHu?%o_ff&l<MqpWwokUfppkbG+~Bi_x9Bq4OiY7LlSWNGtfm4G@Bxpirqsk
zRpv&4%RN@FP|O;ul#|xi{F%6-bWU4;Dat)H#GLFQIa+;au?lGbkoCWOLuKYzde>b!
z$zqm?vN|-$(d+hy9({-kf^(eAsCj`(r|vN_=89t~|M!CIP%BqCKGeWtfOn%K)uzS#
z&l!fl+47Rxwca-M#wa&rMML{;e*ja{_;(6@9^q(b!+3!x6jyp4yvsj0-!U1~lI&$S
zONf#sS6c-sdbZj(cfKLA;J(sqMcIM@Du6Gzu0xxz;pA#%yv^&U`2*bl-+*wOl|LmP
z>e&GbWrPPu?H(FxD|&heH!>{l4=nhBj-g2f8P0JK^|2X|zZuS7>)PTPeEL(Y*u&qR
z*j>SGVSIyw^!?&r2X<Pb_q3AlhqJ6|V|#c@Kee!U$-NVv_^8UF=5@Wiq)N6FBk*ue
zAnC&gXAwHykw2IA(bwsf+a<aj^)qSZG0TEZ;PZG{vLKSmN{6D+9eo#T;vi5nX18wo
zl89H|DMEW~pTObaN6SoCJMOK6M9$u(N|6jKoUxm^Uz_w+le2pvVIJCaE?T8?4hgYC
z&AJIen3cYUSf|SXeY}(m$ZdfX^ccblzGab&{AHICe%9ORMmj2y&NPmQiACD{@bxl7
zIm&S$7_;hC$BQd28K{PHTT~FIjrr&Ce*-?2+}!s6Y~OwFljC4>hl?l&^9VnRR9arX
zWot>wOEhr)(r(LsS+YL4{V}n0$>bKXT#t@3%El2LYd?q#;zQM`w>&pcc=;khUlHq^
z(x{EGv<4;80wP$iuVCR;6cuVItF`Tmj!qkNKx@s8-Ip<?vNI5K_Ar>b`<%k{YhVL(
z&X1TB3Oe#K6!HM4E0gM0&uZf8$QLfo+sxJA*n=IC%cCpi1yOJyb3buBWRec&+~K9j
zYtxchmKUxi@02W_G;}aFOf(@CM#?J~MsvDidagwCD5-Q@NQaFQENV-v$uf#LlrXC;
zjPZq+cvRO2q@fy90bk6wMIO}p!kJS{EE~n5ZzTE(xpk4`eNX$!62wH{Q_GMyp#DMj
z`evH75sN23Iu&_sxtkg_f@(<*w0>+O9s4|p`lw{9`KURUEXJj(9K(|I1US3*ab~ul
zb+>FyrgubAnK#YL>9iq{c^kci3DZWehU=7T)+*c-6=^p`c<(dgSNj<xFR1LrtH*u*
zBf%x$9V@m=O48=H%^Mr5iRe$Us8!xIg0y?-^O@_c<io|Svj%7)RVGTB>3uJ~nqVRb
zsx7)As>f(U(fx@~&|7^X1(yXxbH>vgPeo;Bs8baif1z#d@EP0$Sp3Mt3{a@<kldkh
z^m2fgX>7V3gx+>*0MC>|6MNN4!E3<6F#8jBjTg)0FF@ZTVs|9`#@YAvF}7LL>d8A{
zJi%&$Z=VP>0c`zGKe8cDiJ>AXtn0<o7q+gsLRT*S`nXeo$H3z2@M&S>v@vm$I_=$g
zEPRX8Z3k!1*`Dur2P9;Y#(bL3{Njn3>kS(#S1TGX6zX+OLZ<UC5e#oK1hv1s&#=>!
zUfVCO;G;Lq9wA9k$tSeU7ei2I1Pu+I&(UQ8AGKYG(5C4+ejw%iq9>S4^T(f1o?zjk
z3(~c5`0FFr7+CT6e>`<vy|rM3eE6@&4nS|7xCq(OzyiR4TCwo`x(#7*HHa>@&e@Kq
zN~M>d#QZXQ*Xk%Zd1uk|i;W7V$gE+<=`82^i@sbg0}#U0R)2heK$j^YiF>s}J@pgv
zU+1m^ix&(z$+R=$IkG#_oh3}Eo*sCA1UAG}pszUaUlPbSssvp%=P<Op7YeyXH2-QR
zJUGP2rM3uT@MKQlNd}zLh+a{A=B?G<+<a#!9aYdzcE$&nUHSx$=@MV7Oowt)L%Ofa
zvf3pY+%~nAGd;|tKVgv;*j(?uyaH}X&s$I5JvNCYc^*Sd0jO?yQ+F7%(NxP4xzXI{
zW<huS5ct@`m&Deg3`IxDS@oA+iFb}(&GdHQq%vffxCV!vaZNH>NzDstH?(8wA+n6c
z+d9i#hlB-{!F_Nx4AozBCIJ4ogRjr)f==k!AGYZ!z+W0K4C4GH;q`FXy=TK#mb^fU
zFLZhe!1!h6d~?TR8KT8MQK><W?nsoJlfAq(?Ui6t6j`{~l?wKs10DvMuX{q6$j`-o
z*@s>3O4gqYT)B+kCWILso3b>|W+Mxf?2Frn_Po2-lX!v30@=AOE8;<W^6*)O5Veve
zM9Okm2QxrHdTyv9S|*dLCPBgV*^khx#a&D+9rlH@&gPSC%(wRoXP|ju^u*w12nuMe
z&YG+VZ=8*9JPx0Xj;!ED|LY1z|HRLAp0TxkHIu5GQOblAZRBN7;>e}>pD*jJ1G8qu
zy45Zo6*bkLadN)et}W$AmMu?fi#&K}eo-Lvp1~=A;#QM3>cN^PsXp%fnrJ?->Z)SR
zvIXcUA^ZNUft|2_)*@P#EwJhJ+#`Kv3_?aGp7`uhi%4dQq-8N#*#z$eQzTKF!Q2}y
zqc3=D&i->Oe)6H($UO{VTloM}1X(X!A3E~3ryDm`ea7Y|S82JwuWr7N*}gPfV5PZ}
zXuqpS^*Slwz1QrmfcNLe0p5oo+x-k^?RVaBWD$ESuWBs%ZnfEPc_m}_KmFrS8<%D3
z=`5hVdMVR4zYm|Pw!97pd{Tp>axvTWV)HHu&kQTJB`HTYp<qWL5|fImWob+hc|xPx
zeecyCC8`P|qZDRIL$_8{Mp~eGPw);mPR}RXgjqhOVpoXc=hFxFHmA9Vk`dY9zHVOL
z_wAE+khwO68dY+mZuj53)3@*Rp(pnGAP(E<LQRcTvXX+qygXLT1Ip>=$U+>yITG{Z
zzw*DQK~&%v#0fJ>L%E>Wp~pPGNWc<LfVbnwZ%H>9^eXqttQJ4|$obXKL#4eAu@<66
zxYo!u?hO}3N(;?<`G-iy5jN#i(g!>HvIeu+YLUZ7!jreA$OJ&uzn9Y4+S~Z^(;L!F
z!F4s8Vtl*UCX4v+u3tb1P}=VeuE`g!wJyPjHSTk|k)h9#x^F=*qj!CvbSZ`zBWs^l
zNvm`z=L@?7^2Lwp*e3CKzUJkO9i7O_FcpI;#Bh5HJVG=PNu2udRY^rz{t^2^&nM8T
z6COXr#8?#Mi<gtD(&|EeY#g?JZ+0q&`0Q5g-!mEW=S`}Y2@)^V3x?<`xg-DP75}+-
z5v>Xz@_m*%LRRh138@zq9<Ar;Z1q_|md(R7DkXQ4PL9^>gTIrn^H#xO_l=x7CaspG
z*(zeBuM|xuc@J<y7j&SI8vm|F;TABeuP$P<yJ}O^x;w=hHi_lU0)fK{Iv!jS3ABrt
z^P&(;kz8cHKI87KqHm<NM{alXdVVn!PseJRKh5avkVRLxgxwAw(;L&0Lq|mzkr3Xp
z^HG<mVmjZDXJm(VlH{9gVuR_x#(Y*nie?T73JAYJLQ5#uQl$R6FzE&5tkp#4p771#
znks{J5hD-uVK79(GOffJ>aA8Gqtc}2coJLO>PE9rJO<kG-UL`Ov^z+FhVu1f_n}Q}
z6WjcgiZO88HrL@D<90F<4hc`JQep0e`p`cx1qf;Dvrcj?x-tBQu5ptrnrKeh%-Qn?
zDV>XLJH3|g%c}8UJK4SUAzFp+mv!itp#vfcRbW6`I<O`>i>1-)uX3UY!LR7Tct5`a
z$pNSHvLSizajA)WsJJcDtky}PZ4Ivf^IsycXU#82+Fssk6gz!(i&ZF&`dE?LBI0^4
zG@~EaswQn}4)?3II7A7mUG>bg1zGOS>B<5K+Pk*54vq2tPvC^LuJ{6#^bRQ2aucd;
z+}tx7l>k~-!6}%cr9G2bw+I>UmMG$300E9)4ai(+ZyS!TKP85CRWGo#+>xh)7^UXB
zrUPkk#<()VeB9_GAlZ~OIIqtcEm#-;rx4Kn=G;%{`1BsDBV%w*L6Q|ZwK^#~qBX--
zbowG)F$c94DG>DEvspyra&fCq7e|m{DB*oCdwAEuAiSVI#rdnCyADP~t5e7$K6z+R
zk}o^7#Rm#i@;g-XvTmm;GPEVb$u}=1?A)fBp?f~z{6!1;#WGXrhj~}uJmdKFvK%Uj
zd&jG@wl%3VaE8jl&|lHl_sEFoF#3k*6zM#NOl5NZejeBU)^_BKBgu7BnVz58Ot?%2
z`r7qv*dOJ>XhK8utSuI)B4tfgI^i#LT-FW<Ori}k<s?(`^>n3$r1ZS<c5<w=5VI0@
zKT@UJZ}mUKh~RdrmLq!>A)r{i(iqjOm}EP*>u+3vaFK!zUu{9Z^_C=eDcd(>0r*sb
zkn`YaW9<IQG)=2e<s+6>5Ff4UV<GE8RB^vv?_A0q`2SV1@(WAybC@s&f3x()eb<)C
z&WFFWxm`%fX_jqd+eV3UwZ7}L7JH}CXn5T`8GR6Dz0$v|kM#h(kAnXO%%qRAOj=17
zllsNCQ50p750NYOR5@}jYMTZ@P}gu3V|jVB@+zxQbnN;<^$TbMC0p+DbRY`X#%5C<
z|55@FsVaTfuR*EXo*Y!gRDEs3vy+^Zal%PjCASkdSpeLfBMu$DocJ2?DjiRRGYmgH
z9dV40a84A%*h{k@OI%V&FaKuUuN)*I;Vk6}5LDP8NU~}V`I_Bpl5cEHRdd#-QN-Rl
zI9!S?MqQo>{k=<4QC(OQ;fC)Nz|A}2Tz{5PHZA?_TNwy~x=G{PsU|%Z)#3+fE6WOr
zD^eC?mb$FBQ`IM?sGr4;`>4xZfqSxm9&z8dhLhqfqmUml6+FLIh*KoIy-!jUSs)?~
zxwGKW!@xAXI609caB&shbUY^|{>SFiN@wU7eF!=tghIjluX1DFNPA5^XJ0O=fDa`N
z7FUEFAHSNVlSa*<-DJxo>nsdxP5b4rflSuf0D%3Cq^qQ*Xw9{u;)-jMJC*ESi}T!-
zPk$d4<VE$d)hjxyI`!hqdXJhtD0oh-TAtUEmm)*?Xpu-3*YVq>3A~gqn2_w5J)OR6
zh&g_LJm54$9akE7O*Um3;|(bsz0RvfonAQzK%w6OQQ}SnNv1<R!4Q)gha2fbSJofH
zkOeh2WN+fD743lyMVF_SeSM}rm=5p-aeQFqk=2LQMw^W#(>+CbLDb3EQva!YW~+5w
zky{Dru`syoe-xeVrDcd?fW47eUol0C$@f>dD;=HMF0<3Fn7r@01Aw1uYC4nWY@T()
zRFFYx&~5&*V&v>(l#>J_0YLukfE&<!LQi{!?RC**Xu^NL8#b$S4_bNA<*g7IOuCYE
z?c$#?7pgm|BP*gH+$G+W^@<p{KYo*eau9K!P9ow|bCII?N4!<Y$zr2C`YO1t^bvTQ
zzeRA<yzx5RLr%q2XGJh(b?%z=@AQ4V0I?#slyDOt)X)7?KbyHnz@x8)GFO?}@3L+#
z57Fs|i9lBYjjgFjk2-OUr+o#%D|6wDl1n)J$aU@+K*Zo*Df0f?fEl5O<?r3Ewz)nW
zT^fCyklj%r?1)o}F>Smq3L!x|N9FIND<tR+#$U<c_<cM)v0bRjXR|bh(!flcE1dz-
zSgwxW?yR%8!bopRLlbHOI9`rFr^W9-ZlX4GgG9mV7{v%C5aAtRlpErMkdA=U?VCmV
z(5##~?kw}}*BcK0yJE4`nJq~+87kI+9<yv5sMy7o+q-+u;XRABBcOrB)jX48gb!1{
z-xlB|Eg)oF+|xXCF1$Sp6zk|9FOk)ha+`|k)-i8m&1>zJ@dOV=G6uVpD>v%9%uvb`
zu_w&tSvqkN<Bq+z^u!lFp0$3caF?cNj0+Pp6_yj@jUb>%?`VVmOUfMcHf75!cez|=
zAuamynzbdrgR^~1tXAIBlBnP%>g3O`hN%A-SsH59ag;E+)$&PNFSXx|1;@sLTxnu&
zM+4%#t+ebk8$O5id(<~{`J=@K*9Jl=NOh*nn%=dP5nXUqN-HSxxxA3USsB^hK321&
zh&zg{dFF}b2r2sN*6#O=S`OcCRI*%K9>5RJx)eLg%NfqsFouS676t}=yr0;v5sN>M
z)k~e(GOONf7%`qvK(MbcI>DdOJt}X}A{|J%$wyCuK6}(j5&LWSuiinvk$2+Kk1g+_
z1|z-EpAlhnBhM^F_AF}7Cun1?BH3^IHMiK%O4M5nGNk(>sG$Q%jZ)F$yNMGW9mqx3
zY1XIHh&kz@9s1HN7|QDI&Yx6F@Y;Xx0V~HYF*}U1=x{;fY%6Z*9eA6mZdO)nw#%Ju
zDoOeUSNcu*$Ra)EyzLx7VHb*@U(7!_C3gd9ynvDk5nHgT_x$5;h{g0Jm%GS^&$KR6
zR^5s7(ie)J;YplwsCG%L;$!PW)4rRHx%v!!zBnir%G9?0<I4^A-;Z)ov``h&^w**G
zxcJwsL%bJAo5j_xWeWMOK|`E&Br<Q<O!|`5qk+9eiha?@>F>5>!pWo31C%9G9;GwR
z!G&fb*WpDC1}-2td(VM69=Vm=VrWeWnnJ!Z=wQ1C-&Q|!c*=EtDk-}(qj4^p7ttc%
z@5b8d;;1mLS^r?-`}QL8V}Ke-D&wmGYI{bF=-{7^{$x5-`gi2tG*{I|{_EXhg1;CB
zTB6TY3YC&9^9whU>J@o(1a&l5iQKnq#=bX=ii@n?V)fh7tWnac^xED5;sG_8=aX>D
zd+HkYWD#-n_oRo*ed0KNf#2qFVQ<B(095UK0>;{KPfaEKx*<IAguBw0uXp!*64v*4
z6NXD1`EwC*M(yn$k>M2@+PXC~f;0sLa6I_?D`h&w$=xa-iJhbT%iSVao8O|OVck`4
zf16duuEXn91t0jOb^7!aJ-VmB(i)z`;Uf-6ATpjOvXLPs9Ul$ZCUj5!(Q`}Qa@mWV
z?RA(Ar`s{}{WMxiuSpc}_haXb^NeW=1HtA#%((S4e}#NShmEZslgDpNH7|Q$=p29L
zchI!O?|cNEWV1yl%@+N1CVkvKrDF>+r58~Am$OWbZhG$TtNIM8mn+y6ghJOkRao!N
zQ3X}&C5f>Cu4OL{WWZLB{@mSA87x-a$unBn?DM63aH73yP_o2flqsNx-m+*j1Gzz)
zF@b&T8a-;Wdn46Pt8%qRYobELOm3uQ2x`D=leQoY8yQR((wLr5ISWd~u5_==fB~sS
zcUCm<bxQN*4`*c;yz!iQDc*e+^$G*0KE!S^lzz1ou<1*oV=7lAap&|1B)n*+wa#2;
zJeZAmy!Hk2%dxqk-ufJUfh=Xe_^NkDUfS(dOj&xV*Mi@1=<iAlMUxy?y=w@McRLG=
zCx-KQ7<7e4y3$D$O|O=1$<U<OZEmHT_)W!?xe@3*D4`r%oR99hIP_Lwm?R<GcAla?
z9~#G_`ekzGI0LOL;#5$4>C=O!nNt~Bq(a(#fRQs0(7G3TrLtr;3gxQ#?}5kUSIrh1
zTN5FY?Fg|qE`w)I%TlWSWD<ul0^BXB2re*h4ALjP{c}Q=fcwKI%^B)D{!d(C7L-Yb
zy%)u^C>$dHa<yUwok_t4ONKY%oF$;7JUD>GGxJ(MBe^D4OoH@bhLb2oJ^dxNg+^sV
zFo^V1lWT_4Gqmu}F2`PD5$@URqNQ?9CRgs00@1!}4=Moy({?`uc_%Er?2z-5Gj5%o
z`!&j<C}s43-jW6QrOxpvL6zuQ!r3-+LwBcoPM)nMxY_4@EdumT`;mXbsnqx&@S23^
zq5V(_$n_CpDd_nb81A>Dw}m2W;iOd(?!0wUl@2gDZ#E(!UYC24>V>Te#7)QCy)~1^
zn{gZo^N=sZ?vclU)-V;hJ3{ZRJHkMq4mk%#d7A+-6xyL=E9M`{7I>AnNBp2`V<3){
zFkJhRzHxKvGNZFKQLojqqPJa|d!5)vmwJ3A>xoh6Dn;8z%*4G83TF?lZem>rs{a;n
zW^De23u}`1Sb&=eA_6KGK`WCVTw<0)U8>)o<VvTnxtr|x=lxFmcL`6hE$B|G?^YDi
zbxKk0qyGj>p7tf9v$yC&BEA#BBgy?{y>kUu_W!R4>~;5oeAF2dgh~}Gg0w4Y-%&@(
zGL(%F1}Dv(PfLVYP|e)$8YW|ouJyW0icO7)jUyFy;dNXmMD^B0Er*k(Hfn9otm=0d
zh3#kCIsXl)rFn8=!;g{J5RTq#*q~4Jfcof^&nzeltaUi>p5%o>C-^Ci)S^3-6QZ`c
zPETM|Qax!E_64UuskDs7t_l|+xe)K}QTg=gF#y{R&Oj&t&bFJw;bN5d_pnHPGB&Hn
zh#QcTKsYeq^4X96*9^h3n&Z@W39SF<No|=fXsL+g64TNk#`PREb{XEL%;tXqINuVK
z!3O{MEMIKu>Ejxug(~Ho^e=~c0^w%wRd0M`-Wzz*mwWC&F8mk=&8ok)GT0dD<kP}y
zgn#@3${k&tGq^$OMs!=GPU(Vmw6Bn`jLzIMt^K_q2|{j{2?>j59N<%ao7_*hZ`UY}
z_gNms&~L%iJs9(2il#_lf@cOzoch4CQd|<%LlruSRXfVo*J;-+`$aA%TfaT^Pna+}
zRqZf#mzEPi8lLGuKI$-9Wo|%qms3}IZ8b2F0C%jwgtJWO;J%mkAP6d-D#&d4S^>Az
zfO{XU&E-c@^t1yb;)=Onz1{|UTk+v1xL%eHV|bfPW^I>Af92>yAiSR43mZC+ChBSe
zD~~=}k5jyHP9gX^H4F`H9O8h*<kgc?+usGE26o|KhW5#u<jF~-)+>7!s*@A=H#J+R
z!70-4Ud8mII_lA-pXQ|b@H@3Rb+58I8b-dBBP&7hfZBlp@+cVSERz-Cmx3tR$;;ma
zAZXM<sAq~fp0PYv&rUndicvURY>PS}uyS9|cT*t*z)LPxJ3147AFHET)T?DPb;q4q
zPGkb+ke0SsUe^;sVY&YOY?wvG-3!}QtX#XzVo$AE-%xakuI#kjeHb(^)rn0^mN_fJ
zDD)<vmP%i5+j#IGj-&aH`A&D%5hw=8oGjH!ql<F`D?9d-yH(>?Nmo$mAm+r!dKhge
zCo4w%qWLfZby?OfzZ<$=xIKtCigsZ_c>DU#FX2_CsO_mV;S#*gjrm{VKke&pV-#Ey
zC6YdTGIxz??(g$-4HuYH8t6W2x?vj#bt9Uj(G|1m2l~?Yh#MJME|^Q}(`zl~F(XvZ
zgxw%I5>?z8kb<DWVA^edBcfoLk_uSTGuIY!0;($Tp0$meGy9z9GB<Ag!!SCH5^WjS
zxSTZUoTj3{<o1_cGcFvb*)Zl^H~S*27ipQ(ttfohaicT}+?%;9jkP^$>O95|&T%Bk
zl}0$s+`q4_P?2_!Umo@lhTddtja1D;;M#;v%<s2hs`JB8Cg8@%1Mo7P(t~F=8gK&F
zfM3WHjq+Aw4++X>-w&LX&sVePQiI7_5_@9^+sD(2kfLJ|^J2EJm1vu}wL8?EWwO?A
zsizN5K7G?Z?b^5`7T_A5C=+W&`ZS$s-~H&oDgm9VG@*BXoi1MWjS30{i^u*L=Gheq
z6}IRn{R@d|m|877_pQkC8MXc-#dpoE-&wNjN6#r#YNyR&yZzlS!)LiCq;x>Q$WvZU
zJ<shs7K|0ZuADW94WBb6(V*=%mc)>*Z!SBIy@!ir<|oQ$;6Vdh;=*sZEk|z;#VL;v
z5*oH<Qgg9@NC59=YqUF|P_lBD69=c&A1=uiSM1<wrl6k*Z`kk{pdt(_86auy=@?Xa
zkZVN(<=~_a1CW9?=Q?k#S1B`Zsbg50QUQNE&03b)G4I}UE-Tk3n_*SKgbRsMS<d+%
zyF82W<3tS6uyVC)Oa0-`s<N#G-Reqi7259aO{?Ge8S+@i%G<+w)h{G*hZsy;@%`cK
zM2S^q2GlM_Al`8%Q*#w^Kia)1c_Q}_3^@AMzn{4(I9Yy$Tt)OTwU;S0Wa<rA*V5-m
zHsVe)sFt~+;xzGd7vP9ZdPLD2_rwN*s=Ul_U5eg0jiyjofoBsVD_ufQmWga#F#gqb
zVm8(Og^!=n3e1mH<F62)fjH}ry{}T?>2uU(vE$5s#)7wu9OGr`Hj^y+ug)bG8;Kz)
zQbP<gS=PORMVr4IrH(}afs;^+iq;FfOw(;9L#L=p_A&Mt&D!l!+HjCzj=Xz6@b?w8
zfVBbUp1gX~{HI_<GJ4Hpe-#PW2bAMGz+NRfts3u_7iDDM?!WUu6vj=UrK;iy^?fVh
zFI3T$6DOKrIb-HGi+qd*^dSRpVWvRD*u28aCrzWeU{XYoMmO*C%&O`(wq8Ov#aoFW
z(J%$*ovm(5{&~DT4&%06^pCt+!zr)o?Wpy=Zq*j_?}hlFD=W`mu|*o(Dcj&0<mvCb
zK9q>Rdz3y#5%E<iwVYs`qE9&fR^o5I<!|?zgoMJrzVCBHs9m^GCy(c3TB`gX^`~*H
zk`4QodZ#IqEvn|#Ox9p;b!{CP*_`g?{kF&WEHl7fP)NK5L0s!7|AMY@n+XqrPv2`u
zRexQdGJ4~Yi2vj4N*|iIyDpYiw6&y4t<nOq#mduKML;WC7_AE~NQ$;<Rfvifw~83n
zU@}@4)FKhBq6oy5XjS5lA`lfNC`!;EV+|TKNC**Gk^mW!dEPTV|H1oF3}NQC+~wSJ
z&$YO#Jo>!0c5<^%`PMeC<(KZ-a$6PD8nQ76a}A349+?GjC@9VZH7TQS4)*%D{ZDbP
z$?C!B-ibnr%=$)=W65knxAG_tb3?4IVIy&P1ar0K;S#cH&lcjfpEQC~T~0;}0!L1P
z@xF4<U~GE_tCV_NFP>wqyQFyBJ`F5>$=+g|`^)pZ56;*n<wqV?3GO<aRIkOOhuu(5
zc%!4+-YgHuOY-q7iKDh;akw!%jtkDP3Z7{IwBqtaj&R|AEw?%|%df^4C-1*bwQu&-
zZL@}QVtYkiy=pl7@9)Hg*4`oIF<Vc=3uMN21X+XN2b2$`1!+9OmE)yTU#J=IAjg11
z@~kPhA+v)Mnp72<T*)C6@^x-M7bs6z-)j}w2CZ)}6y*Dv^0H2LW(j3cxvZVHUffoH
zgamWmHuz%5uAtUbV$$T{BRbLM95`VhPOrhSuz9V(RJUv-MB|^SBjvSyjsZi(SI6bz
zLdFPooRpM_28kLGDA5@{VF&!jtqnIil5F-JT!BW4BCTtkrnY&X4t}L^3z32VCoH2O
zeTDu~yby#MOa%a$CyXh7S)ONUE{rfFPzJLn6jFL+60$ImS9T_3I18Cow|}-Tn9NI1
zZz>?T!Z~HGX%K&7u6;gOecIckdX-%uQ)fPjxPy7i%vVR_GP4?bjM;T&z_aEjs0X6S
zCTJzM_0|B)<g5<jb!Nh~{PIFq-Nlr@#vsdO1Do>97Frq^<Zc)58INnj23nhA0m&_J
zN+)H<+BI4Q5M|ue-cf(VGlKCUfht>=EQ>dKVKpj?@8Z6Fwu}dzzW+Ln9Arh$#G=))
zUnpOdDjP3OAq!mIP?>$*|IB63qSq0Ti!bTImp6)CS+zLjqLgo8RyBrR*M@Py-S<(A
zi~#i!1REy$;Yuz@%XCYKPxk#9(xb=fDUy^QJcXM=y@pqpkcW<4q%m&Gu5{g+J*^D@
zJ#D|u0?UOVDav?NM_@Z8<5!+X*v^zMt!)(Qr14E5NuFuO-e2Y9O)>H6;d4p>2RBO0
zr;5^L6-wTXo_``?ySoAsH0l`Un!Wg^gER^ZJt{M8soV{rrviZD4(F5zhkr;`nfe0v
zjD9y>7eW2FOKv_5dYM94>l#dcvkJ82(;L}(iz&9NRarUD*7E;tC^#T#afBWAk~O7A
zLEvSxvt7SA)p*<B;W|CgRP()3F(-vG&;x$vhrM)^XB_RW3bgx?3ahy**|E^YlkgH|
zI>_K<2BjPv<w+6<UaTh_OU0}3WOK`b6b!~^^`MK{|IsVKp;&zL6UG_VKYVU_I`B+a
zUh4V1<z%4}^;M;zSWc*=h|5`%{j>d^C*o4)0#dQ)%G|5UQ`i2YwWnX{>^$Ob{Y5*W
zxbJkebkd@$*Eya_HKjcj|2da!^x|qTDa*`7d%_BKSIQtqhO&UROMjFu=$ricOs&+E
z$>iVMVl_n%{*D926;GM1m)pFaKK@`Y_(G!#Lozq8r!4FM)ei%w2Bom`FvT{aI=5xZ
zs=t%HwYn~v&U&%7koPgJ^S*wj&B08x<9=0}W_PQc70L`n&G2cjStajZa)us;>szu9
ztk_Ty=jV+fteA)@i9KB#d}3rVE|fhz_Ib%G7O*HfF-kzjN9vAReY%RO$XjE4jcy;C
zPVOEVRRtYe-27}680uq4K~qF|nSY?QF_Bx1s1&&r&bE0xd;dngg&-BG`)5?M5I);K
zc>F!;11dN}y1dNN^Br1p`D(T%&@wI!`uH&1Rgc|#`3Z2CEgXoUwx7IeQ`A0o14S!K
z`I;xxdgTE+U;H;4b(w$gkzB9YNPOL!U^M2Uw-~9{tG~Xhg7ehpNp28JBuToNc&(R<
z9J3RWZ_z1COj(wg<JouS`~*x(z#AWi(kI$1s0q5+c2>(rGHn}Ijb|&!rxzTXQ9oJ$
zI)?g9Lw-2f(Uf8rQOEczQI(|MuGv)^*P7~ioeOA<irF6W?b<&aX=L`5*`F9KO{8=^
z$Oh4M*Cxzf{zT}&I7EUkP!(L&ek5;z&OZW;_}-NbS4ue#aR`uyG6yKOi#o^p)XjGt
znaAV@b+>7}ufg47vdT%+2FVJ#>jz((wFa|~m>oCIv^&<u9v_Wc-|qNk#e0TMo}}!;
zznj48pGEj~5%)j1`P~U%&$RuqKlRHn{6#0+%O^khu4$D{NoAjZVH6;Jn|<^pSS3V@
zf`oq-tY{51;LT;`-Ns#D%QQofsaHfz9el~>=XBWadZShCnGvxd0$zQ6#?-;VTPVu3
zF9@@UfNZ|JhSf}Vxb9SZb4N;Iiozsoo340G%kKAZz8cfLDtS(@kyh1k`;DQGKU}vf
zN2m1+tP~oz<OyqqS$XgFH2(FmpBiNiK)S@d`B3gRRUMvOrLT*<7AYoc=Af;6+L{QZ
zCNrs#B+QQ%1s}x$s5|7^AH$mHZgs?NykJ5JYj@_Zbir#ZksLa^7`A+VTf@sw;%oC(
zK>jWi=K{+7_aM=0G6#Qijwgy!;@x>t>Vk`{1p{vIkN**c1PM!BUz8-N%+8^P;tPdI
z=#}mm7%oYzNwtO!Vip=aFPnZvKztw^Qc?J0s{Y%tRrRW=3$SGsII74t7la+|YY-(@
zS-nsxX-vE~q@P92ebq|T_|2BjWB0}(dHt)GGTUlW7omgmKM^knL$iFAi@Dprnl%wO
z8;rZrj?jr#d2V%a>l!3%tS-`SVr($Zm%KbccWU-T<SxFZ&QWb_yJR0pt4+^;Lq%lO
z41yoQED`lJ(&o(h2*Uv1^vp>0B-Be7&meWo-$#A~qpGOspWqa|m)s_aHC6HaaSl8O
z@9YTC!$+A|^U}OO?mhX3I*p-aVjA<6<2<@JYiiigiV2VS6)y1`M`}$V624`(di3(4
zLrBD25|E0VKg8%-p%IdIRPI3wQ#@fts>{)COJG}_sL#^v8Nhz#R=bpfg1LkI{sD}H
zV`2S&Hh2}h2!jyFZ#|ZC7UYS_!3icNA*(>1UB{XAAmZ^D?Ao$hoX*=28koG*X#BaG
z{YAq6Nf&d)Gpm$^MvNAFdh)rI<vRQaS^-SG{loHaLcE|;W6TQo^EJh{-b2zO=pfGD
zQ!VMk=Fo$<4=$1&_q4$1?Aujukd)e(t9cm@h8v^_QiYA1AB*LyFpmjmUE0In$B~nz
z>nkXYRyQ<n_v~fEAtFf~Z6e3Y>psr7cuL8|z7;*;m7vwggP!j%!r!8-8!kK{R0@r(
z!d-PiJrs5ep0sYhvUP;9HJra*=-|k|xp0s<dA&7IYR)6+zV3U=z6KtVBe(av-bg1^
z^)PuU-2gNQQ}b*oKL<`guyMGU@YN`7)^jJP%>N4Fre>DUWi3ex8bZl)e)=XD`VmHL
zUY{hWs=G$ev_g-IAUIkZL{NDJ4Z_MmqM~-=r^{IzEeuHn{$%fYJ3f=#;#_dUg$h%~
zh+?5UbpF{cUn8LLUc+#AV@?0Zwf+8`p$c`C7o6|`yBlMcv*v>xO!jj9M|ot|1U4o0
z7>?FR3YbF=UhK-P-Ci?UT|O|hafpjoK~t=fH<gFoV>}FN1p?o@+Zdi-4L_z46L}A#
zIdDGT%3SsPo17cK2zC2)@)2=G;hrDG1q|~XQ*8Hh1GCw*U-ioBLh;t-E<W^tpaiXV
zBV1z8O>MMa3d^6_x^chXzWMPCm+2RsLG5oxhemje@X<<NinirFS^O^<T_sTXbXXj`
z@4vDutKQ@?H_63=Cu+FTn1AUmlD5~+(X}IXS~lU0W7W=@$Z(hJ2JSk8(jA6z?DyX~
zutE<F`@qs?4!bRdAq!V-GU#MREnDYm7S3EVy<+6j<Zi?1D!tX<=@|VTDo<Hy=NUXU
z-M5qPUIPXjjjP~&!E$dIi+8`u`fUt>Ou1!xLLQy9A(CHfG2%SW?5=G>cQ2r6Jx{V;
zIhjtN6pBDzz;6xBxfq%>&SGpCm!8avocUj;xVk|bgS?bD<>(&fo6wRwVAt&+-UgRQ
zzr4;`VV$KV>;?o{dp#bl#WQNYY6Tox;iW1lyWT3&D1`%6H@GBuD7KasS{*PpiZ_lW
zhP6o!zj9k^U{kWi-dQUNeZps4U@bYZ12J#Z`tME=N!Pf@yO6ZZlW2!uhw5Zk>-a87
zx!n<*Xv&oQ{cc$x4q3-X_ivjRGR9@HrR5`>$(We%&}$k1jOTYG_qbbVx^F{jP1u12
zP(oQJoP%L*j!pNN@?K&`xX-n5;Ss+S$3dUv4$1<`7u35?br~a?(k=FJAzQSe%g+-5
z1APT1e(x}c6PLLr?zHw8p6qBxa`rn4YG-Zh`rTZL<UvD8H_-`y%dF2H%qC5wnaP<P
zE|8RExkTRJ$_)j%(_WB^4qbJSd*iMNu|?1nlT)K|4-~V}PV}Ir^3EG@Kmf%|i@qao
zYv^}N+fg8z<VDgB<t<H_tZACEanltK&KuflHMpxUoSo}7WtW=Ab4@d4b~-kOl}*p_
z-zO#;|GLR765qG<v_TZ$yTae~Y-b=@@$pxgarP!dUhGQ*=kcbWz^)d^8w0&q5KSsj
zBT|b2nF<6mw@Cv`bV?6bU%S+5eLS0f7w!vQMn#vON?|JC1?f+F^q6uVhp-ureTavI
zB%`morJT{;x@C|`T&&&Axg}=%fD7?89DY|nbtJm2YM%m;Wg(7+B}(e$*w;cUt=~%=
zObxqkyv63Zy#&=7CNOo}u%!$1LH3sax9X=dr85Yn3?-j3g<EZDM9hm@Df|xoNT`4^
zsXa|k7}>Pm6z2RTSDa&OmMA^0E@imAoi>_qB>Dx%(h{*aK>g%Uid|uNoKkE{@*oPr
zd;7ZWqA$Z<DHa2mjyJWtV!mR5Sg9U<R{F+ha)@tZ5D38NCSQ5+D@!*m3DWO=PM~?8
z`3VIc+CD{Ad36t9$0>pi81tj;aL#%Fn@MXb_?^H^7TdBsl@0;)-RD2HazHhpKUs`c
zpcK2)7w6gF(fJlm#DVzFVpg0eraaS==srjK{IfKG>#pIQTkm^{VO@6++*5yi071`c
zxsAz?iCUsRp1KvIpm^+QIuQTC-p-l<XaR1B-JUdQ@b|O?g?EWSP_f&%Wz}Ax&A~A+
z8-o}8BEp}uZp<DPETqh;m^?Df5fJ?|g6L&>%vi?lGPhwUmbC|k33q?J&PPUt$*N*4
zMb{GrR4b2ET+b)RDvO8!UFhDmMLa@Lx9U)`om9~nbG!Zgz;IhPQLVHz-&`$Ku){~4
zW%9@XhLm|LhyELZ3nB1N(tDLRB%lq#fI(B!&o<2pmdG+Zc?rAUohtbcrde0ix><Ul
z=(ARE7}FUqDA}n;#P*aY6Y$iIv>~UNICMP5b%y4)zfV<d_$j%-C#qfRRq86&<t;ci
zn{HY4*MI>m(Mg}>s1ch=4zO;a-#^bT$TW5Iep>-KR`j~;<Mc27O6ay2Wbu*2-MAZ#
z;M=peCkE^sMLe>zkK5(N4<93p6&!=k6Hy}~Wh~qNg#zZvk!b%ECGqH8luw={JlmwT
z(@Bb-3LfaF>c=QSww)wn?rrO_^XC$X%W@*EFZe6FSeKe_e+0&%c}1(AQCe+gB=%VF
zgjO1RAsbZcm@{~_-?PNGWQAuq-xR&~-!*@D$tb=r8bK9Kv2|Q?rnTt7;xEVQc4$Fd
z-i4MY7klSB@%EH?0=7wA^W$!9ag46xg~;u+ks;8${qeg~I5W2=F7`Fe#xZ)|!Amb#
zk-`#Ua$p3`BBtDru4^rzlcK`TMVr9Jj}Dk|J_^|imfS!msvtbiH_=v~S#P(TT)-~Q
z_U-Kd;1|C)W?^Qmf2Q8Vq#<E^s&Srid;=j+d-6TRgx6tHEtcHi@cw5&K5s*U46`4@
z8WK$yDiQyYmTtIoG~J*nC;1&#%zoCPQ=MD@WV>;QZ;*<uzj!spN*5V-U5Q#Yozomh
z8;Z@ZuVMxkd=t1I)^^o|wejx(l*DgVdOBREhm#dH+!P0za_b~WxJ|7=_BD{!$d8&o
zDhj-d1?$Vw8=K-ztHQ1xXYDV>d?{L+sx=C0JJr$CZk(@lEBwzP_}^+fidqLy3MUsI
z317etO4IKXiGw$Yh77Qp7I14ZqORniQ;Sd|jmdY|MkEtYa_nfiX-=9pq+boDY%EPj
zFHJ!~Dd>O@oji`vb!0VkfZXZ5Y3(&>D!KbTt^qfo34uP?Grb=m`>fa73z~rpv&i$%
z9_erk27D+Ai8})PXvXu=c-kK$$_RdiEg4-8Q4XTcxZ5_QpN6}{xvD8yB?&u#E-K5!
ztZjd(^tv-%a&LRL^>dnxku|R!>Od7jralJM`@ZgTI-n0R84<(gqVu22Qc+fjxQh;Z
zj+=j>^OlonYo^|VtIFf9n=f9!?!bK)Y(JaHpVyXNK0dnY@FZ}Hw3gFl|7uv(CXD%r
zLGc6{%Lh}fyHFPYs;=eFVHZ`!%Hm#WM9-NPR8uHR_gg29`4&1z9BYFDQjbp}=oeBh
ze{%by*;?8$XL*LgLW@PR!r=7Rmw!LQffpnBF?lJxtU!!dMUHi4e#NaSV+|{yPnp|)
zLoDdngcVf-YWgX=J+HG}iUTYtAN>W?esR*80$uIa9zw=Lgn07h_ERuD<l>~y`?VM7
zmA&YHF)pm$SeO2ZrH5;{VO2-H8y&>T-zsk8eyb}skj76k(Nju>N(B7s+<R6M7A0*M
zju@jH0i(>5np(vru4{vM{d3gz%{0By-=E-{tLXVW!3$JE7EPIPyImG<?rq{!)o-*1
zi?Z&-X1&ZOym$$jNr9)?Zxg>cIZkSJNR;Xc+YZmSe8$AcKp8aBzkkatzt9kC>g};}
zHu{+s`Y&Qi?-4N#oidDLbIx4aeePtA<@N}}NcI#DSGjnq=WYm6FS-Yj_<P?LldXDA
zm&Gn72}9O_%$;l5qaEE}ADZX_z3@bnu59_sb33kBiq|)VqtvOAUpGo4$VHD1KOpLr
z&_SEn3JE9_{BMdyD?DDRo0sYp3Uy2YSzn!ahv&lEFi;%@GQUMt=$CmOTk`b&KAruV
z2;k%3VwVDYoI*Y_vtI+_vrqUNgvRYk;B<mrZXCHGtCZnJVr;K_<xkgS5Vv#qyCIn~
z$g29)I8{y$QU?W&>mK)a5^D}M))Apj!5duz{&e*Nlj09z$28;%=O4b|nvSZQCfj=(
z<D7?kUg{t0Iywm2o<88isN3r@x2PiGs0;26mZ4F!+I^;E<QS<u#-Vni6KG*&uwkq`
z^x*d8!KkL>CDI}~bH8rFwi34342hg4f*kZQF5JEu?H;`zWJaC&(G-!#Wob@fJ<L$W
z!ks{6bcU_JO+1r%fXcBY_U)7kkj;79v)k`Q$N<!E&paAAl~gE-HiWP_!<Kt1&|DAW
z;heh`N<q7_(4}U;kl)19xCPc@>Zs4IiPJ(w3Gms+3}IK*zEyAby&!LUhn4DsJ~Z3R
zl?fVSRn3}_H8aDbGCa-uwfp$qHi>gx*VTM0%q$>;xKQeJMP<U?4dG{M`b)}$c|!)6
zcE`8dQ4j*Rq&72?8*`#1Ko)B+NgleN%s{lB8wLF>Wg|dq3UPQ=uc6$9x9Ub_y#t22
zV&-i%eh2EE5R&l^PT0i~z5u`@x+kOLBQRtvunOAP?<6~NVELKy+3t!QtMT;9gl8;|
zH!w6^a`jW}oYdCihnyh(X4Pt%*~}13$!cuq;^A|U({CP?$|xy!z3zfn{`WG80qRG-
zHyMt#Ri`Q-qnJRICeL+s!<$?kywi{0Sy?#7-N%+Lo#mUJ(uX>al4I6d+<bgO6ZKws
z{cbxer)YhAa#u6T6!-?GJ5hZ&B4Hw{_+7p6rdMeqrdJV)r7oV|>1YVa?w67Xf_2l!
zlKrZfO$nCD=>e6(nb)qR_$Nq^lKYy?pA9x<iV3wMGRWAl2#4X&)$`lORHDkttyUNs
z3Z~72udJ<{5g}74JVluXsoXQwa%@H=>q1S;$A)Z(xS6ebyDSzUI=VG#o`dH7wXlH^
z6NK6J)Q63F+#u(Vu)me{mAc%gvvD*17YSep76xSHZFD6DNt6$Y5MX5lywT8tdR>Q$
zvuqPUv92I{$yHwzu+bKauBLT?UNSX?ImxNhLs##s?T?;!Bs&E<sb=_u1>e30ioc%X
zDd*Pa4RR%NLX(U&f6R2hZX;0=AJ>4!>%)~nZJA98y>$I<=w)G<_q`tbR__^hJv7OF
ziBNyuUKg|g?GIHG2lX-0B|^%>>qK3nFnpqY;@*weW5^LnmM!RgPEOqJ^#2Rghq#6d
znq8+8d+pZ)PpHw=gV5>pCt1+y5;8$vH@uyGKfgHsru;?mEAz9TWN2O>!(Iqwkq2gL
zz}!2fta7I8AeAZVUQ5}d_)6@!#wzKfEvCoR&XB<*)HQH=C0{D{mXTw10!1WQbygbB
z*DwRfThtrcL}wY4sMv_bquI%}^<`T%)o-w6KqbF!XVUA>!p3)fWY)by%qAedW}_Y}
zNthOW{T5rzKe#mmKOhX2^RYdv9g?q+0%|N@6i*8LRe|U|Gu1Bc1iE<&O}Fnj$ZM?B
z(ay}cf?#oor6wq>@akg4-4!Q_(haqJu{@^0TKeOcUYzB@2{w}MY<~tyKp&d@PKJ`!
zn>3v+k}Va@@A!@b><sJ}{u?%gfB(lpa`@%Pk6?W}?w(L6u!Z#osqtkA))BkIHr8S)
z#@`}|I788tYUfON>WMQZ`TZ{()hNBQbDqUnDj}CZu8I1fwzF3vPOynAZT6Bgtdgl%
z=f6~ZS%p)<OHWeQF8F04w=uFz>1VPS(DU;K0{#9;jVWs9;-i+~_B8H;l2>n<7L9a~
zRfOS&7d=n^JmNa~!*5gudXjVl^+(wD^Y`l#P4tGyVA?5tGcO3S{m#9d4ve!>4cB)R
zwNA5Q?we!%tg_1%ye5xu{Q4r|%0j`L1_Ys6n|^|B1{-TLC2q*R8KK%pFAxu@{@8`j
z6x(`KdIb9ykFy1OYWbb40%eTOaOM`!^w?==GgVlOY6-cQ*O!oM`R?s%z+>39+A9TR
zsj8TP@ZaWW#2U?~uauR`Fj-j#P6^RFYS&t3+5y;agRX%Q>};JT`ka<5Vt_`p#(S2p
zco33cRTWdk7E{c2M4POo@(q}QC$+RWl78^<L_58<xKUW}uOSz_l^A+4;=R}JT_CkF
z2{Pz<TPILOwA${5>x<qq1c1y{>ll@`h|??PDLrCOC9~ZF?@?f4j6^(pG|B_CF5}6~
zuZvl~NELM#x4m)1D;suc?0S2TSN@HADf1?>aOz94<Ch8yG$0&F|IU8*qabDOgCs8{
zqcB^Gs^0B+{hNR#%BwZk4qs|R^|33l=yU)J1GgFIFNVRNU?|pU(fiYL;}VXLL$qJM
zK7c`2aN?uo=t)lhf{pzM5V_W)4Um5~UmVh7(R+$-*!Lt&dN04J@L%fUd_(W`Zy-}D
z4!c@PLO+HTr}4hT#$gXH6ey)WTcs8I_oFdElX|)E6WlTFPq&PiO{|`a>KOE+UMGHA
zY#;Kgd-ppRVl!IT7EFao$C1fjEXa&~7H8Vh-kYbt-nQs${<y_MfMYOQGhOolyPlm^
zEQHR_4qm#b$1@npx1n*<91_9PnnS*a1HBq#a!;Ge;`Qv&s;r&of0(sZs^H45iG<P(
zVF$n<-NCM%!n84|g~&lhrXHHWoJYV7az4bDD+;h8V+Xb`Ix^Yqw2Bvi(ZBlPK7`@P
zc~ABcmb!A}QB;SsDKp*jXnf+-L(Y|C%%L8=asTaZ(BlM@+zOR`tnCLY?;{)(Z4^mT
zO;sm~ttK=KwEp=mSg2;*8QK6=7@JrCqHlkejuKhCSv~77hNNC5PIl|3(sZgKZ$Mkx
zil?RYP5+ZFY6(rZ+$SP1y8fD<iFz(L%Tl&V4}YJ@F}G>!gp~CBL|h5tE|hWJ&2ouI
zKuK|9LW8Sn_al4Oq2o&l?>ti46lAUZekG!RWx%noO&V@Sajm&VXw+EMY8sg!DcFAB
zg%4N*?|Ymt{KxP8I!)HJq|-@ZCv4^?a%=F2j2^Gj&a8aDf|JQ@^~aPZcGelduuo+1
z@zqk3^v&FErfd%Ko$IL{*eOS+lu_z$ozqU-J@V%n-A1XQH$l5!b9L(Ba|^5&UdhZ3
zf0y<7rm$usuCwW=T^vk8uhJSS{h3vy1igA8mNll-O{)owlN)XuSo%0}?LGU<U9N=J
zA!Z4kF4=5ec!@GOmZaWRTU!!(h4&Gt4!>JXzgtyIb$RwW<FqY7(ERhcn7-U^+30n<
z>Xnhs6B<>#umgFASA%iG6uahe<jr9jX5;Pdb2oG1Z_>~BRMvIo@bES$HRd6G6VJxS
z${QP{F+Bc<2?Yt@Yfi`^qqI%qrLpSByf`j6QAw{a=iu>XoJ}dVQjAALItr=fDvxA)
z5GKdMa8E}wELpL~QiG;DlJn$3_KZjuoSHlfjcCTSVmF#et<UDWd8XOLAq9SU`j((`
z0t;APuh-JdAx)-het?mJ*y*ted8NB9lp9*YWSE4hH!eg|{f|n;<daFv5(smtI*kiw
zvWL<B!IxT+wSYUk!(RAhm5O={#fq5b%kjb=OWxo6Wtjmw57%2}nIghXrB~0oR|XQy
zgNegg`8>rjL!kX4wRc9PxBOux@KGZs5ojKL3TZ~y8>%T;K|h38+}mqL58UJ+&c2&1
zeG@+h463_RW0f%tjfn=QZbOjjLu=JJEz<0=K}%p87*6xlXL^sp?G4Fl=QATX@{tJ(
zs}<nmBl!7RaTBZCH+V3`bA^;vYNeCAA#bqpHyt1Tb@+pkE_>6vyF;6tO+A+}N69<y
zWZbvM+`A3s;m2HtTLSeRH6isIpBY#%8*5&XJ#k9Q0K(wzEF&icEa~#kwYT-!cS@Bp
z8#ah9ppEo(`h4j0*A=~(q0j0c?jbqU#F-mBpUoa~?0%0}?bgJ)ol-?>*dZ^OU|DU#
zk+{%$Tt&IHuw?LHm{g1P-b(NO`H1=cI8|J>lkasMIHxRry%mC=_L}7Kwm;CcylJOQ
zo1Il5m+Pf-MX^~2_KTn#(Q6G_6Rxz{L}{YE#mDUF97RlcQE*&6i_Tyo?;_DqEmtZx
zY_(YFE${qu0H^~HO#8}%PVe>*C2XbS>y{>L_J=*T_T-syS}xT4cm`y{CjMaUX@A>)
z?dbRW?pBZh(0>P$KcEtWJiJ3UY~+c4*5Ql|dMjixb97xz6_-s?53h0J^)og=MexGu
zc$$&TI~c_%xxUvkWeR@e22nyK#<hM3#x4jucISZ#U*n*__Wdd<TL*Eq;jJ!ngXXYs
za1~400Uz~3hTXzT@8cY8@w;F3U6}05w%XdjP&%onbzJ&jRr&Ydo<PNKxHj@-foPCV
zA-N>M*ef$XImIhWL=>@X<it=?M%nw^cGvfq9Gj5tpag;<8O6BR_KXyvt{AI~h`Wdm
z#mTd}yWssYFw)nN<d!9CinACU0g(uZ3YVO{#9X^<RyKb}$drX5@`pT5?Z;<PIKUlX
zD?ZZ=ign2bp4waMf{_KED+~@XQ#d9qrDaq*pC7{$r%TPx^V{Xs_J^lFt5W+E$CLv7
z5V`6iK6ZoM5%-M4MMSS;a-?gRQZMUJX|fKU>LDwT==dJa#N$Y0ys1V?t{JYc+nYX!
zQ}Y*kUC<2;22Dz|b6}6P+o)Aqy{^u}4mc#EHkDYEIBLUq;}UdQ%dJ-NE$h8iY$9>X
z!V-0GExb6&C5ZCHPKHje12g~KUv0uTgKNWpx*^(Jb&73w0pMq1oDM7itPFuFJS90}
zNv9>0%w|H93-O5@*(5yl70;V_Jxy65omr*Q&TixJ9FU=Ij6sp6o+%#GJwhb$E>6&K
z4H+cL6Gc;C>G0x{UZ^)^<xdw`xOMbqzVqk!G69Matme~EG<|3BCR;}&8?%D<iRyO?
zcCxsDtSZ2&>fJbCr0a_iOA7~}IiNRJ9dYovm{C3<{Lb1Fh}{1-2mkX<@K7m@@qVjF
z6lIevSo@}DbD7jLJR(*uU+=P>@BHM<`m3fgCPulB`scHy=~?-7GP5+UgPt!FLiG5*
zPM-~vnx%3VyZ)*(5QLbUX*b_`mEBCV2X}jt9}}Mm>M09T-br#E_NcrHWcmf%3dXAs
z?N)lFu5b$j0SU`nUh)E^HQw~jg`#7~`mJR=!Z%)J?mj>NHj4yHh^GI*don<<h`YZY
z!{r!rUeoD8sE3w{357}1IlT4Xbze_gGK(pZaw8Cdt$8^jG~FN{Zc+syI1SP7rivl(
zBN_HVl*!ibE%>O`p7V`_iKXwDWs(4lIY1_<is`+#o{eFAuctP8I7CSX+DvZ<#E{-5
zT%k@Q<UFSblJIx}FPUM&(|*a{dX|7TqjfF-_3f(W1DrjmoSo=kqSXlS0wK~fe(Kg^
zo{kU<m@ape1yd{VtTc3a)WtVwsH=P^jK&SckL+9driTYe+_W6ZY>bZ5;W8B6g9WhI
zcc}uAyD!$>pwne{N>0?S$|rB7Cpif9)uf8}!>h8>h3Jrx{N}^klQQpFkrK^RK&IjI
zARW<dP%Nvzxw_4<<VwT|tLHev%Z9AL^?-IZ2(m>x&f0hNN2Uw-qEIBgbMwqlWN#EC
zPsHgG!hrJ|LM46kdZB<aGM-XOTW~;!!>bHfiPG2pu{>psi$<<D?ruMcVZuN72+S6P
zGM*|+nL8dcc$3;0zKy2DK-GPd7xGytNFLtv7{Gg7!nvrGf!(cs8f}Mj80x-?=>^wd
zQXeg_RFBq5>#SB4md=&NYz=Ttn=dk@)t_k5i+}^)%Y<#8@Q)pZm5eDXFD?sL%7c1T
zgh8Ph+A`0GJU_Y*khAGc&lhfp-202wwyL6*|6$mF#t-df7e3hHLCRXm9L;W4TnMeL
z%19Yy`D-+dszcMbfZhe`egsicGOBYifJ+&|{Pi-uy-(C#RK*tesKc{U9O4(<UB;G$
ze6v>LZDz#%*ItvoSHRrSM=su{hymn*T+dweKukFQdgBjbY@WEE`i-`B!HQs!=Vt;+
zxABgZAt^g}RfK8YD%2wd-~6v9ca~Ak{tY(h!~cJ<(qvbv4bf4?<~0XTp^nJz2o=47
zC3|25kJPM%jCNa_#%;y5AAD>M5+$#p8jh)B;%@t{&8;qi2pYO1J&v&af&X(#@t-gJ
zS=4EZD-<D=*qpU?m4&$}iTh<3+zYH|Bus8KZOC&Xz19{23c(hC1$390+8PW4Y(goi
zv4__;ADs;-XF?&9Dir%!OfACJaXh{ODG7nuxggN66Jo75$+0)=qknZs@D@QRE`*R{
z`Mq&k-BmVF5zPB%G!BvC;el`)l43!z1|MZh0fK-PSMhV>kkf6zVzN%sfVIztPhEiV
z1!f<vTyHAyqeV^gFHW2t53SlLR9;-9>%&h8eu;;Ae?P6FNYrWZkc1s-J05&|R&Z8D
zSGT)8M7G51yZ5hu<I2psICEP&9By{|lLKw+LLYwmk;8u(TFR9m7#Vowr9Y!&Q5ftC
zlTdE^Tx8H_w3=dmbNUyLj_wLykHz1QWez^l-OfOp3pENn>^=@tY(_K2og?<rJ%}6j
zohGVeh3N)`#F3yH%9+p7`sD_VRxS^;3k$CNi^gStX*d7PvlJs`69=B7PZWLvWO<+q
zlKlcg-t|uW&q|Ei>zukfSYMcmJJaW8RLO%ZFrLbXm`8@yx9qn|<IPXdkraG1Ln01z
zaG?KBdHiBQ`oIy?ii7OenX7|dj2VMhJTpSwr4BnGd!zA8x19MsTY$N?3Y$gc350TR
z?xWV4ZP44W-0$hOHeb$06A1@!$u1{@f;?vD3ncdX6sA0SPaWAPwV1Y2d62Ft*p}jz
zF=7AsnX7zzQ`*|vS^}iTdEV3L3^V#y`XJJ(ScjSgWz`&GiFyLl@(3>_Gz=LJp>}il
z1b;H&A3+LC{IcodGH6v;D?<$R7Y`^LDX5Bqg|81&%BfB(;(3UY<(xS_IqSNopQQ$z
z4!}F}#nm%E^&W0e3RF-UsVEXcCGzpt1gF9dMV#lC(m&6E+dm#_vPsemnF-G?W`oTN
z`PAzXNot!zcx$)^88H>h_cN;oYW}KSD~r+bZ%I$<L+5igu%2D8!3$LsT_itDR>MwR
zs7?NIlFG(QrCk|j^L*aSRjWO4cG}duga$ok6tLpJJ<K=P{!~cv(<SmSWyX^W2k#U&
zeeGc&ntEVP!ggHPe`5@*f3i3eIgwVY1!dFp<Wf9oW&;phVh>EM)tTr{%G`Y?Qb#>R
zYt$Vb)i_lgpi-_|k*-&mjQ3EXY-ah(#O5ci{dj>sc^kq`eArE6xVt-}z?Zx_rYKuo
z{HkfXXagsbA6f7ssNEWBJ$EEIfSuVyTfgB2xfBK`zfJW_??i^30mhQRM7CB&2HSVa
z%<lhnTI*poY@urVRVSW<OU<ap4A^RnKjn<jf4D+_+J5nV(+A><4gG$r27jb008sS1
zuLF&@Rf^@Vy!5?9SbvT?TQedTd$18RB6a(#bsIN|HUz5CSi(!#=lapIF`1)^zgBOG
zEhL<T&s@g^8qT=XUt&S~*j(0~D8SNp*>B92MX3$Y78x+SC@n3Gy|b@{bD&KY5jYZa
zY_oe^w{hMyyuK9AH<`&@+t`eu`pjUKule-1*>6k`C;ftLdX{|n1CJ*TPB2jyjX&#b
z7~7?+rmq&{4-jNGa5NoGD}X5L3Rx;wbk>@`Xb0JNK%0g5RVZB_G`xi<`hG=w4`@(}
zeW&c3{gazfC#xpVJm%S7?2k%y8R>QyYpS9D&At#=!<zZUQn}YvHnq8H$Q{o2p!1|L
zoHOp~P5r3Ob6(9*t@AZm-L1E++|4Qv2d@{Ca=2KliiL0XJ;e<~J<{Ahuu<Y%@FLw=
z<z5-m3{2uFyyU#x1P7_`53q-3#ubS>wYC*`oi*PT*RdV0MS3yek#*u)I;Sf*A@`9I
zC#fXw5fbmR{*6q=HBzyTPCi+{1_6>CfXCS;b1PR7S#Ar|YqMp`rlc?m$5>rQ<)^D1
zVh5r4dYhG}<Svn|&nG^9gxSwcLO#1ElS818uywvn0U}-IqS{PG;2_^**XP?Gjx5%a
zGMnTm$3`a-o4M65kJD_>pl<%1dZFopsEWnS+b;4D6_ozhX>!{lOcV!OD08JJ6gr5a
zKjUQa6-rx`hgkIG9NdhU-{*fNTawk#F#v2RmoVkLC;Qk~&ioEXJ{j9myTsC%sGiqe
zfI&0iiqG>YOS_pV4<DZcOI5XDB;A<FtpmZtk@k@QPu)l!ocmLr{`6bbQN8ja!dd5Q
z-)oqXRm+iF;)D)TZ{SdDv2`SRC%um6x5Z=au6~Ujb%Z;sUf45~F)lv#us^S4UPE34
z*LSu2eFg>$-9t}NR6+kBp5FpC1y*$7x0nHOo%9MxbX8*<zVsJ1S+FKdfq+?pU8VHA
z_@r*<B_&=l8sppxPGph<Q(P2~`8rpeG*tPjyz#!pP|J-}=6EUVa}R7^woyo#db31~
zx2g8E;z)eeL1m*uO&6y$kBa1#Z<SR^l(WuSr%t%ZD198Foq%<N;AbH(|I4ZPE=TfE
z*tP37f=s$+USht${Ny~;=a{l-@oF@3I(HKOCVL8T_|E@Zu(Qy`?5r*3UACxWO!V`{
zKyg}|{Za^bF0UkEe%X(rcCDdB$xE69Niy8Z%z`v^jChX#^7|WH2^kl2Nj=zx3zPlN
zM`_)lI`?)vBhCh9*J@YZ*+$%?b!HP8d5&vP)*~H%TDq0_>e>lqXpg@5m8#f_d3r_k
z37nr|Z<&(lBGjy+4(z;lG-ALb%pqk4s}ES7Hy>45icRV~MlXEt?_2%WCSAyo0;8?@
zUhjZCiGF}DdDQJia2aL1saNuA>7-Po^-{G{mM$jM>v@q3-@ECy$?ixW)O}wSnb%`I
z|H}O3NENHJq*Az>tmp9oa?$5_7253O2gVU;C`+7lGEhS50b@n`y%?0*-Hz7+qPLW5
ziXQjDWVJ!c6nohdtu!^qKYJX^jas8H?rvRt{P75$(g8%XWrJVzhG&nLq;e^=+uASZ
zn&h=Bs@0RFYNCkOpNJX#5BF(_qXLiapJc=&IVF#F_!T5n4Snhb^|;S>W$;M@Bh(O2
zN?u)DwKowu9>fwh9U1z9zZ`(gvwTtw0>NpuXP`>dR=CI~s-Z`(oX3bWngX=5yT(tU
zPPaQay~1ALvaKjxA;37liy{opc8ehs>|5iPQ}e?;fofp8u)4n0*RubqJ<PA;%3D$=
zw9G{t_z&{<4mvT&MA@zHPF?&558C_fb|#N3C=1IMQQ|S>`q}>rz`wbJ3mx_%!NTkH
zIgKoUZKvG$qyr#dZo9m;?h@t&2htL5q^w}=<HBwbp^dq03k(?O%!z$|&qNYbA>=Pm
z04`cr0w}h3IjfV;<Vik&qURWMA2LK!U47U!M=0#4YU3SbM?gSg9DX{!yeV-y>n;%5
zXzVx~=6fkqj-8BJ&FjlzbPfq`d-9YO>vCQy71Z(vW?6^HZu3;5=hf@4r%3ug$zn*U
zF<v?6lYugc*rhnWE}aAI9z2-I3hfk*nkIAR{%W-oRW2`YerFlK8|D>L8?G?1e<ExV
zkG}L3>oLs1%daqHvp)_NGO!<E2eceOvh`R32~ORam1_%KB4*~;8E;SKD)m+Lm*MFL
zhiUDMI2fg1YKbdK<uI`HO&@`&7X{JRC8*t_9~oIxxYC9gk&IX{)&2435#_QBz3!rs
zaUS|)Pa}dHpUGRS9|{YIh%KtxEsxf6AZXH(csGB#a7znvvAMxZW9v&|VWJK^g4}@M
z@G^-q3tAp(g?BOZ#!+zSLd)u{Fh>_}MqAw=p+;w1e79xlQ3;u0&=HIx;#Y=k%Edfr
zoDF*?GvOpzgoc8b5hthykqo`GudlWI@ev6dTe|CSA#$z?x&F^J#}jX(#)oNO-}gxl
z;n}58#@<#eCQ1(E`CWBxm4ShtqF8e~^<1HlS!xb_vs9=V;UHu#u-uCIGP~O`mN-tE
zzjdxlBpxQ4YSQd35nb=%KZGsyAaO=z-p+NxS=jF!mi_~qoZdRa#oLySHf5p7_$vwB
zX}b1>TR$lZUW(yJlj}b?fUgcH9B?2#HVcXBEmh>p@`}M=#Vfzc_nW#E*n5Y;1A|+>
z{uQhAWWsKWZke^!(u6-H=(Mj9;c1w%$eq3>_)3WUKzf9mgAL1_1BD;>9m&+ANi-d+
zKu=N6&|#=g6(vqvH_IjR<zd_^kti;U_s`;qf7<qC2^mjPJy&=yd`jUbQH=?@4w{68
zUsNOT1vrp(Xf#>ja?FA1xu(Nn8OY`@(&ohQcc>1y3P{Q`pj~yrU_Jf&W4!UkpK;Do
z)%rhEt#sXGwklPZ3bev%pSGfBA_`^S{LJwr4{r36QM$Ui*=I@@G!hs?uD-wv?vz%a
zkE{K6aczpRh68eo*G6#-;(;>qr+Qh6)n*w64&-{j+jiRE`RORE+Vv|)+!eJ^#%x=H
zEnOsP?6;7I<Dh75#_fhV&DetVtx080n2hzuBc6<AFZABGaiJt`DX~6i!XE4R88JF(
zxd`x&$&?*6YA$=R-f>iULd<dY?4*=WF5OtQ+Ssl(>B=Qov5z0{vB%!O49D*`B^m7c
z2}eX<VkU3|^ij~RFSoTHY50R&JWy(;IR*<+{T&YxwbkhOI)hG6@9S1|om-g8X-b9j
z>_ky#rO)*zjH2ml15Zd53K1E4%j++#`x4KfvR4)>CsUoya!L{QvQ+Pb_3mi8G6F&z
zgjyplbeZ*F@n^MMb1!7R(wqvOsz<kS@xtTBcN*XJ4<~*max{7K`HJS*0vVK|rJfF^
zEVvsF9ojVCABZWVXbulI563VZ<i=?pqFnW{yo248T49av^7h`^Yp{VXr;?0zUxnDh
znSQoshlnG%o6rzz_ZPjsTrR`t??=a-nFN*KR#ID5zUjLp>+f^GTqlb9OHLg1(DMQ`
zUX>?~{hb3`wJC0&h?z2m2_M-M+u>dbbOTJ3b-A@glS5-o(j^I5|K1OcbxQI)I~rx*
zTTHh4Tf|Ca#FmS7eOcnj$OIW5`evgZ{;u@x<x*AK5)IdRqRkwohwEW)ceeil6Vik;
z2VeK_FxSy>e+sLDZimJd1-jo8-hU6G*JkRA*KYvsWVl8ws+{f?Jp+^$UI5*5ZUt`1
zJ+1Yv@M<}5o<HKLGoOe>IPyLkBVEVKN<+w?pucfx^2)z#vgj|ikiif57PxqP;*ZER
zY{A#+ShD4Mdu^Yv*U>*9>w4qzV@lP-rhO%7DT-E}UAS$3UYtx5=-3cBqfIj$S>;;C
zCS^eGY?9wA-kC+#kd9PdSxM*Inl#1SADg&T5h**}7?+o69l9-F2BPu9kypHZyh`1+
z)}*O@Ot!eABVX?)@khm~9}bq`l$+=qZd|p^>JjV2Ig*uzo>`e%jh0@l2}yjre3bF_
zZME4m75OW3_g5Y4iLWuQ>)C1|M%kqI+>l0Otidn`m?+`l_8$8-URry0R;rISGtP+<
zAK8W6fGHlA>zJOX?+9h0FK0p4&T>m<AWavyF2D(}>~KTxJd>W}T@bdz3vxCld)8_^
zlGT2<HPC}A(J96YXfrT%`}F;?B`{W<-TySRw`<<OP3;a*&sXpqvRQnFi)63(g?4g4
zo0@OVO5-}#ummFkwRY9Y@vL;>V*6b+zq5t(A_zg`8U=eC9TIc@{645QJ)EMFD-zU#
zyUvXBZgz6EvS`P=pW-xGX)ZR4{;0wF;je|l`(zGkKI{-(4~so~a-N55vMTHj7ShHX
zaUVY_)f)`>lFS|zziah-_^aV}>W{MVM)*lV$GjjOk)vn0G3igus{y{>KR?YVt45M^
z%fzJbUNhfK3IpqWnekxC!pg!5DzD6i`;`>_LG*H;ZcP>o?J8Sqx@0I)5Oh7vLmAKL
z<Wt+HFG^_7x?!Y~<*av7`u{<JB<ZT2@-95kL$+?K=2{x_%PGf_$ZvKqrFkoy_!0XC
zIFDE%ElQJ1PO>lgP!O4>S8g)z3zKIydJGcInf*SGsJ3slBaciqsh3EpvPFkKMX!cs
zSwT7zJyY-Pqq8;_IYbcCq^)m9W7A)H)^Oy-E&LeaEhbU8NZkcXz8zAMN^kRzN|o7`
z`TuRS%@!ql=_38b8&fUq_0qkc$R0NJ0kA4^@pyVR9<pm%>eO8iv*t{D9+_w0-B63l
z2u|roh)Q&OttU_ljd9pZ5}5*em4icSpflg?B9Hv^BbYx#BNdL@@R+SepsU|gcEToE
zZt1$I5tw3R8`^>U9JU9G3DtxvB;fdmpj*}Js9Y(K-=MZ9SFux&t*0&aUmYJAc3<Hl
zTNIei_jrtkF%~?1@WnL&Zq^8|?_W=FNXQO-h7J7vPWES;Hm5R6-Vgdh56W8HmnR=g
zE_iWYg_-SyVQ49VGe2dd#lepeiwd3@^X9jl42`pZ<?*uoCE9Istj|)ErxL>xr0x)?
zu4T$@Zpk%epjmoAw)iIO1Z7Vx+KD*Y)<YPw@oGh<En|kbI&K*{eV%oDy)1u9IZq8u
z@<J;)rbUwPWiMl5At>&e(b>cOIs8@h&#*|Srej81WIo46Ac$whJBv=?u>jl;rTF&U
zBV+RDBseU-!uwRRW_0agQLL0-t-V3)5C;~ut~{Qk()S7-Y3}W49{j_58qDu1%g89T
zr*uOwTWOd-CuJ^kc%~bwAN_1SEeVjvX8HW6JNXC%)r1DEse1;0Z@BK@A5+<Sx)ndM
zgu=ek2UxtO-(v3O^-0%R+FJNeZk}Q9^~*iS7fvy;(ND4DMfkjEOZWKM0+WUrxRP)z
zi7n=LrAsTySptDWa_XdsEzD>-i|BYfmEg?rhAT<~jkx4&ZN`*^__n5nSQ!IPiM?kO
zKka|^)E5`3bQeXn2r2F>#`)T4#PWSPcIQ<{z(UI<dze#Ow3*4bRPp$Cissr5Q@rZp
zGV%}$Zfnd%&yeWN!}sPGT7QeuJj-TMLGWCDbA(0U+gf=x-b6pSw@vL%b70OeH%`68
z>mUG}|2oa?crv=H9abyi!U<%2V#h_*aCOpH9KR0TmfCCY%~@lljAhfy?%ez?_nzpB
z1%#oC`Bm$hF?HU>m83&#Gc<G;J^!7JT0kbbq%0&pHfBsY_6PaR%D3VmrWDN_67i>)
zvqe-GEsauheTngiis=_j`c@MLdvnPGe(m#*_OhS}R8w|J!Z9I~6RYZ##cGXekrBH7
zMn~erKk)#Hxk(Owq)QNjKe`}qel09h0PuE9Kg=g5*8(ytKf0Bsz<U++#;!_a0PROY
zNj*eN&U)#yWUxQpz@Rb7I+}~6Z2!-P&;J8z#VaPwc)O?V$vNYnqn0Gz>b4Uya&ke#
z{A||jStdq<tuHy61Yf~ydRwrgLqHw4pP(_d1ap}3K#aWFrSaVLH@ffOQ1u?z&soTO
zC?E%}e|&T?I4hsGg?qY1DC3`xW|tW4==tNOZVk&r)yft9jUBvy-aF!jFaLAMwI37n
zFZy+UQGoPDwI<$X!|$#e!QFO}h!mx8qh9{?BHs_NY<2s{7+H0uh|CD3MNb=E4#?Y(
zYUm0@Eu8R5Puc&^Czx~RBA?_crm?#LS%Jov`*aBV{#>6u!b>SItIjkTj5XgEfqG9y
z91efgjwWr1vvsH^>`v@IpDbS*A}e$`iZkVqTsacF{MtwlnUE2aRm7g3(vPqsFe3i$
z*VeEh01vM6gx>8z)|azIjhv&F7VHeMCmb`9rWB60d@fEm!zeJ(Wr2-s5^kQjo1;M2
zZ5m2@hOB&5aWx)m?2gVU6rn)-rj}LH#J#_tP6lAGnSMm9oc{oYw)wR$|Fc)JE!nVH
z)Jb_+W%E*xz1-G~AT-leDYc&aw{+$PQ0NY0=8a5du3QsL;1*pOFX)&=M*20NFu;4X
z0`&WmqH=QYf1TcJ(a}TFV?9-ZS-ZXjtq4s}hmOYCEj|FWr@Xufy?wY6byH}+-h%uf
zH3D|iZ*y{|VY@PvuS2+dTO_3^mZrhI^B0)M&zM{*HTPP=9O7wl-<&VTOEVsRTARqh
z>qOjciV_oCfMXxehR^fu{Xilx*c{@%4Wr!y7H+N#5h07SSUf(iiFkkOZ|;)DtDtYy
zqqg3^aA8~QaK|KLuR$v<3^ERB9sMccSjGt3Y4O@&tnN+OhY-VbEn{&R*QeWL_K66p
zDrRsZ52Ics!^o)OqZ5#q9=a3kX4|56Z%TL<pplCzBLI+tvGQq?NGPMWP}!=kRx}F`
z3RC;L->DXNHEERH5(ioIly?DJd#IZuiH&p#<x+%9Ui)R$VP6w{L5*$;3UyccDRw-U
zd04`p)^Mf5P>HbB2PmG5FVlfiqxf4{ZLvu{oZ6Kx+)GAshFcAmb8<&wyJKO^bKC)`
zEn8N7&4s^#R7*HR_iH=*cCIymmEu3jr1P<3hHSA$R^(5f*}tfpDNkN8=3Sb*6SlEo
zV_Ns^bC}UdyWhvvu=mU01*#^2UADwA@HVe3?Ez#(pkiYCY@A80&$?ld^CLJ*C#jYw
zj;SZGaTjjDf@PMGqVyDJMU+}`!Q&0ml9-!^W|9^7y6j;=>Yrw+f~r(Y;)r>a`O#E1
zH#6Hj9({H{%Rl@^YlyjS>z1vR36<dyLZSlSwzc=rqnM^R`BCqSRks|GP)q;dQVyu}
z6OK8HWS#FK#WyiNuU}Cb5hH`R44W5#Ed!cs0Xom?P&{ca07RRQ%hS8DKQqOu?iG`#
zmcJ-pgi=5b0(FJ@CpV2}c^Us&THtUMFU|6BW=~tMxTQJa1z{u?wKr_JY*NiryNCVz
zmZR5wb19w%j355PK_!V$A$zbxG^n4(J2bhyH}2&Q3yU!ydo%%$P=9xh#?vKMSHvTJ
znzn3A-=R6=t*_NlcH7&)w?IGF>>}p}{eG1xM%i+Qedi&)J=~C)ToV#o@HD?>(O+Pr
zdGkV01ykHG6sD?UwhlkbmxC6PwnoSv^U;~=3*G8?g~F(wd~2v{eOv$vQw`EHp`xY)
zs9^P2C*)g!Q1`}u=NqZSBxyIL=VbL{jaOceUYjX=JQ1o9z;!sJuPI8->-BUI<}qA_
zyl6EGPb+R2a=)^<Hgu~Ks)CFf({$Z?XVbivZ!E7!Q+2hy<tgQ%+@Dx``s@z!v^2?b
zU}k_?F!OtuCI%mO{IFvm=}M}LZR1Bx-N(9<+R2QV(-@>$6NI~=iFv;1!dih52Q~5X
zXMMt34pE;MFQfOSj<%OzNB&&-Z4a<B%vlCivZ{^FI@FvefM<`H4(sCDLu@g%X$$nS
z_$9vz$!K=?AlLuPVMK<qFtw^OST9`?xBEwB^_l$w%8Ds!qtY1<5yx=5-Kt(R_IEv-
z$#m#1TOB;f4LG;h&MSRd$jDA`2xyC2SSbUc_E3@ddrfgpys6`BMcu^2w-6^*#Nbk#
z|GX^X`SlYJlg`s~4b-V$-=T2VZ{uGDL6za&idc&KP~UZLG$QY7pRm{FE5>_k%Db5=
ziC@;?&{$)y>zco>)jd+&LrC%LWR{CyUR_+C*GUiOf`BdBQ@^$&#$OS5K8%!FGUDnw
zv-~vfo(cC=5d{gx-EJ4ZP}&mhJKnX3mhNvQozjN4^`@Mi>l&rK;b938Zr$=Wuw7$(
zd@;8u9<}&F59~NvP>2ANeH)SU|EAgu3$(uVPvsf{t@cm3aFDh%r&oCnJ~^2QyK`nS
ze~wsSed>7a<|PwEx&*3Y0vihs8J|<on_T2{i0g=bF9biYZkSw;EY7ZiT`A*nZ0hDY
z&L!+<KvTzsK}>X7o9#Vf`~Bmz)sSwLd?^V7@}iWzv3RD(VJ^?Yf1yQ!X6>s0b$iK&
zQQ+N$qRH(aEwBmY**y|uU-OysO};F?=&h;0vXipA%A`hJRni}xu#+wgi|Pq^mCNqO
zpNArdRte0u`p(ZVUAicesF34W?yhsmWKuC}j)mmL_GiN!Oc0owudE3$)>__)Q`Hk{
zabUZq!3y`OvbNf#hPG$P)}oz5HE5xNi2Z-;%CY$>NSYLJDZA6C7#&lNNmuKwY($Tf
zW*A{)Ch5B@s`E)x9}jWOOE#3JsU;4=Yjn{^@DUCdsktCTsIvzr7^4%P-PaV6@>i7*
zMJ)=5j(Qulj8ykBrA%0<MRg2hJ~)t<%l-!qw?!v*Ggq1NX+wN_EzA^J;*z-~x~>}m
zKJ_~CFq3C6J?j$pb-uj08f;eymy*32cN+`hMW|XsFeTS}G8*_Y^<1f~ojRW~5BcyZ
zME4-b5lvLmnCj?(Dy*lE$)rOM?hOTMzSf4r;p+_Yn8OGLk}<B#@|}P7vf$WI*o{>E
z$V973(pyC1zBv+ql#-Z?1zl3R5@@RqBnYhRj`7p}hSQzbZj_mOf4_O=?Yh5KYs<;V
zkRE7s(&@e?v+tQd0#xgRni5SW1ewtm>ug|>i;tZnU*Ue=r(i;S*Ox07Sylr<c!<DH
z;}fxg9m5NoL+L^DFH;ujsDp)%%~&ShU(Uty$rjJaG)b&!FJ#<SYM3u|8G_b(+q&EE
zdAx(y(-)s+pG)~c!BeU)*u{`nyTqkplP&^V)^vtBILh<M^Vk&neDQ=oDJ4SAeg}ss
zKun|^ygq6rw+l+3`xcQb#<zJPKi-IAiHxb?IYGT)yIIT1I&CS?x#5K@WBW_b9x2*>
zpbfkrg|R^rX3u?F$QFv`tvU}#@<K2N>X<rk5StwX+1HerpO@@^Rv!W@HIt$f^_|1*
zWJOuh<Tgjzk>d|oJ8Q5Mo$Q|Yr;or$1-jeOI2;pp^|1?3hnA_P-VFf_27<qgx>0nf
zyt#9#Nh6mZZBvu$Vl!j2CRf&y)T`K2-`sI^D1F!aryG>Y7~$h#xUolWuZ!F~NO~9D
zE^3K#N~r*ccd_Tph52HaB|^KBvk9Z_ui%HP{ulz9g5D;IlO7F?8_L!zvo)?VY<$`f
zxd5;Dw7rHL`|NydaqOzImy$f-+)PXybk~!4reA7KkJ)w6UI_~8K2rVaSGPo*=;bRt
zLpBE1km^R!ih3k|F~4_Az2zEc;FUNqtVp3)f90@ds6&ML4SAMU+;$A>?C}&vvcBh7
z=@)lTha`hyT!&F^1?dR|e=lkMlPMcG-H*aqk7=;p(%Z~)5Tx3UoSbz%R1~YU_(%<O
z?z)ygePXuOS&1A$XN#ol+spraIb@J*S*A=LRY0nrurhNMx%Z%Vr7-lS(0Q?e_M6Q|
za2C+&-omnJOh2u7%geACHOg!LX=e}sVya@{fWH$BErBgOVb%+tS~K)h+j~sjtd(`8
z&qW#GN)*!KFj<b|1jg`a;o_1eubV~q6Q>P0ZDnIKrp`aH*&TE0<OWMSSh`RbsC+z3
z!B@n07;6acDe0Tap^D!W3Z6ekr-)Yc1TR-U%;EBx8*L37;X4=6oFfRasix3m+R`SC
zDYdj2)e{atx86$k>2azedCMc}y~~J5*-ln{cT3O&4ld@iryQ<)L<-7infkoE<a0+@
zosjdN{@f90S0%IvZ*_-Sjkz@u^`qlUW6B7HMD~B2eT!dH_5Z&{MV3NlnkX<6lS&Pd
zRBq#VOVp61mKPM3Vv(ZY7zhm6(J=8sAdw;pn^&eOO!G4C^A>|hh7FkoGIhup69#N!
z?694F&*S&^7knO%9z6=i&N=V%dcWSU%k%Yot}$xbuf?zVI&-vEqNA*X4*xE2UN9@*
zhbZm@P5)!I`%^SovUTt?&EN03aHM)f%zUb4^>^ndLSWb4uVMqHoOr-&`UHqO+Zdfh
zjW~Xs;@O7fOwN`Vfw^D}T`Dly%Q|8Lf+i_86H1H4Ug;V&V}@a120d{xEf5muPnIm+
z^7|xG8KTkJT2}UgVZM?w42@w65$b8_5P5_yZ}AGaEtUPJ%|jHp+1u&DmL2H`!cA`3
zf&ChYw_-S{N5nr|i@t%pbpK7}Eq2a+YAQ@t5ZbOF^3y|ZjO85aY2Bx$#wh^F+B85y
z(PkquPFMM6wyzSX*F3expH4dUaNM-{c{YBXUM(u5%Wgk?`)+(kOgzfamiBv-C7zmR
zcdQDPo9^cKVz||Hz~kg0MipDiN1{3?+(Yi2{(Ej-ge`V6*w9-%?-{Zm<zZet@k3@s
zEY`ODmfP4xR)fu?bWgf6&B|C{P5I4BlhL2B><zgOY}*`xB{)V!S$vP)_0@RGFM5|-
zgWY4s?EB+8?{dh4`RI2nSOBt|-MVJ?UCRt004mwqF2+FNM2^&sSv8(hg3Ii*L9Ir@
z=IOKfKk~DnD+dQKv3{GL-s&7u&1(WZgOaBR&}QGA_N2yCRI;0)xaeKt@K<ovD*q|T
z^#R0eH(l1`ov&{C(tdaZ@?PSHaTzL!x0Cc%xIfjOJ>!!kni;hk7Xjzi;qBj;?r?xA
z2(bfu#>sdy6H-6=Z$$AD&9m&H%4no^PA%7gqdC*C=GBzmPjZ*1LN7hNOuu2d+z@Z*
z*gSV=XEz-|zrIq{S1U+1)UpFn27Ist_bzn)yux6z#kO8@iW$(AQ=?7xzVN`7oiuqy
zIZK0a1A}zYgszlcwsTw>m0cM9OMv_I#tpgifl7fkgYl)HWoIF3^Cj@vrYUTN2m2a4
zjzLMP0~%064VWf(MN!>}cQgnJ5?o2te%Io_@5p;Hi~ib!xyX!iO)98wjQ$o{W*p8}
zW4N?)o$eRLgOt4aBVVJEcZG7J0{go`oewa`?Ep|dJEESCQ|PiaYADzU+)W#5I#**<
zB)QRF>#u-bTyKD3jNXBBvh9wv8}4Ic^6-JY990f2_sXsstEgW2--z=7$|{1@W=(^v
z{c~E5S!zq~GRx)oorJXDPjm?v%~yM8jqVUe%h-PU=1JMHIKE7duxW@>Qs1ifRb3>)
zC1?C`)V1i|4@hsnOtZL#@*>!p<y})F4|JMk?%!}ZNJdqbId~SyKVy_OB>;)q98-J#
ze4)4{-|rS?wk<=}(K-ofQij-+Xt$p}Uqc=*BBha|x5`)I@lB}fO3C|h<Q1deE<yhA
z<%?n&lk?|GpP$y^{9t6vVoq+4BB8^ZI`|Rv$Z;f<-hC~Q^+K;8I(GRz_y#Y<FTlq{
zSKW8B2f74~R0r?YE2j;wj;q~`Ip;sxmMb`Y_Ue9%UUYL631mD47>qvgHBuR02h5pa
zsO6H>0O;h>o!IhH%f&>aawvPbwJY7lzqnuw7yXaRd%dO!`q=6H>T+i1p&wE4_TAps
zzx~$QqmYLe=IV1wRwqZm(jUoJ%^gtnj<)DZ{p*eOO83EuZr;VdR&W|%mzEtU_%Ij+
z4NGoQl2gs{#^obKDchGO<XCh78I?_V-BlP6?Apnhs8n6M%y^-?Be)?8H9t5;oht&-
zbglv;V)2Gux8#h@tzPAxG|{Zw)Bo6VUR<|FM$C=1A0dt}`d{HPZvsV}+$%gsT(tiH
zeZ&iNpNB!@mo+T(SFi)kI>~G2tpB2Ddi^D0?;ocO5?s^JIPv1Fk+t!_5<JRpxIEIi
z1H9tRG3wU$??ooAqi?Ai(I0!B&BL16<x%pekC7*TL`IUOEsUHAp}2^p=(l}SDsB<0
zp=*_YqMA2kRmcq|5jR;-Ve#Q`D*Kxd<GY${^f$jhCK{+#dAsZbAfZv+GFUIas?8(l
zh?jFJsc5<KnG*igvi2GSpd@@5&vWtS?>N1Wy0A)q$b{%@8~&0`Tl?^}g&_En1Iz6U
zc+lfXcsmvL+q*!iIz$0})mQS28Q5QSc43{)9_Y?Pu?>Qtd;VOk_D4ekmv&zlM!eTV
zb!9*O*vLd4N<^KP^^v=nK;ftQb?$scToE*#b0BoJ;C$FCUe>WxqCRKwl4XG;mC3oM
zxk#6l)=j8nZqcl8jbb|p#~$c}EcJ{0`Z3JeK&98`T_flkR~3eSPIe#pWWqXo2aQrN
ziuCU=kIm)H*5hHtQcG#s`zxvigC0DkN%124>Gze}UatO#yGALO2>tD3*vXd{nwY}q
zQxH!*Qwn)QG2%_Gdv=2WsdHOXZaSpx9jRUE0%3^d$;$4}!{wP$6%}n$C*fR%0>f|r
zrwi+Yxwm7QmEAvtmFYAWbq0-F?Q&hNZCyI1+1nmYy&LV_-<V=m8dR#hNV7=8ygk?G
zufvK$qa+gHi5?&obx09*M09P;3E9gt(~#9}sk{U*K*8^`LY46bI=x(n5#Y25x!cl`
zJjx9gtvWlM2sAQ*af5O0p};}Jxdl(r7`xnb-n@2TZdAmCcWHSCE2>?*!o2NeB`rTL
z?{hrR4lyg*xqc#ID^V3|VU|e){+xJ}Hh*4+I>KdgWga8jt7xfw_B&m1YB7rbfbO#(
zGcCDR0arJAL)Zu)VxQUgwM3vH1A##CLuP){vFU1c8Dnx7v4Iu<0s#=q%Qyz}Oet4s
zx7q{jv9~5Om+oLFc^ENSu89u4x%*Dn&#Sftx|&qk1VR2?x$XK{7K$(3;O4=r6X^F<
zSG*d!wfvE!h((0D^xAYMBA@vld(hxq)k+2}(O0YAv4Oj(zm=8$cf~oGr91xh^*{_T
zhE5*r$_Si_DmgbFp#Jv%gV#{dlb!mlD}xQctS<I5-yYAjwP3V<XJ=g7>>M_{yL*>V
zEO9rr%Q*2qerHj$4m>^r>G-Ccx&(iVzt&WGuv(7#b)+Nw7{(5?*>aubX?jZMEeM1(
zaq)1%C4aK}RW_?#Ub0<mVe)Q-wwDd+R}D^Z=Y8W43MMc4y{1OY)n(V*Yh}kS`ELZv
zAnydOCGybMq>ls{9Wy0$ixx+xoZW16@LD}J4FMD*Oo)>jL_T_oiZSTB$l$~08~5Lu
zK0=TlN~qm#Pctc1hm(Qs`5L&x0jn}V+p20?#sBTox?_Z=q?l9ee5O_?E?NyVNe+fd
zJ`V104LRXpldFs;5r^PlTi^BL^r$pYe;cV7{{WqSwZ;sbt?YT?!uMPil$il@7!RLI
zIs09Y!r7h*i}AWSrtMXX-&8<K4A|`5{)QHb6!!gkH#+%qP{j&Nda5NFf<-sSoC;mN
zkU{Q+Y}?dz_#@^eY5TBa=Oy0Rv0^r2d6Sh&`#TML(RPaAW+(}DX%l1#Yc$ee;rP+*
zPPH5!WgfKu&K5Yv#eDtlX`x(aOOFkaW68HCe(^(CAYX6R*E+i=S>Hc3@8CHCm6dTh
z5Zp;-0>De>*TE|+OJPX|oRB8Tqc_NCQjMJQM8Arq6_sm68GXjuF=0Pr3fHhotG0s~
z-k|QkQ@s*rH~4V~8PQ>~I6~v23hFVIHSfy-loM`#AlpM8;I*pd^5B-Gm)=2mA$fsK
z-jua=&UY7d4uL&0`yaZnFH|<fZyo<$ddPPd9Epp}@MR=d?}(kyu;RZFq~$b32E^g=
zf<cRN{20c#E!UQl8wc%gS`B(VMTg4Rf|K>Her}zFIQR~JK|mnqo_^@$p*g?w$So9g
zL?t#E9w&MJ_<PNZR(kS)xor`%Po!r&D4uz4A*}ENJbhR^b_Ftk4eY(I{!3Jto-jic
z3G=6#*3uQsB^HLyPDjoG;Y39+eXLMkQqmDp^k#B^L1a(TX=L#${<t=m*>u{F0#>-g
zx7CBAQqO(QFBaiJzjJU}x@(hrf^&RBHNT$T9B&}?gX5%e@->E`XchH#<HmUW>7%+=
z3)(p!BLUK8&%&%2$quSzoB-ezM`}SUw_BrL<fk%u;9UbbVRj#FJTnJ)t08jjhlEaM
zri)UqbfCDQzLbZgcFsJe@M1_yPt&nu-F7<CQ92QeI=+P8s+-Kp2Yw{fRvSBt@e=W7
zuei4q14Q`kv_U{mwtH%@1txwe#RjbjJE--fhv3-aQhJQ*8>p@=Mrpi(tB`jr;fX}&
zx<lFFBaO{lwS8CGYu`hC9fp*pV~O5OON;T+n;UuSmoq6H@7LqvNAkMT+oMfGI+06Y
zmMEhpf#c<WrNiuSNiLrpBh~5^VJ>e5=4rYDYG-Ns;XYqMxmDCwZ+|M$UT$~z8_ieF
z+Y#UqUZYChS_TxHe{i&$S7E=staMv-bzDOI_C-$!m;1U>fzIx$jNY)k>lLuOj;Xmb
zUPCWRTZ`b9i;&@xa;_xzokT*{sxf)Vo=-){Bn!Bp?i~hL7yEPXU?Wc{iNC1ea<~z|
zo6{3Jj~nU96kVAcA}CCwc9G)nGKJT~OYtB(g}l@@#y;#5mZWn|gU`}mC*J&HfQKob
z3(-w#*ap7)f_IYGHS#ENPO0;YldA)^-b6vY>dKRT#Tt=gD5U0|I+(v9DL~h~RA9NI
zSfddI#;BSEmVk4V%pRcpNRr^YH}$0;2g*ov@YlEaH>I6!UZ)*Fppo#N7Q+tI9b&lm
zk%QO9+T~Aw_Lf1ki{E5v<S97Y|6GYuA5w!8pU*B#qEI2!iZsV!(yM5#2$p%YNywD|
zVd>t->3(C|UkNu)XS(;R!SAZRWM~__6i-iH<K}}LDCB8ip|v~E-P4|<Qng&~q^q$r
z)&vPjVD3ld+C)6f)gGf-qMmyez!w#z;=6q)mpseX=vWTH<X2UVHPiQFtV-V%p!6&V
zb~l+XJQ%2{4m&S1Po{~S@bWHyg(dj=QXeMPRk_VVKm%~kV<(YV*BrA?K|Bu%vgl=&
zOY;!kkH-1OmD;o=Z^Ij6;R{Y72LukiiWJi_c92OKRV<$4$ILyZW(qYrGc~MQS=#aW
zX99?Oqf8UsocJa%Gc{zs`LB~q=4rTi4&vMDeh3Get(QCTRbT=-@T!|5epcpGr-iFi
zMiu2a7v|i3)%Y#`@#=fzn%cBP<B+y3hW!b;WN+>t(;Oq)G!WonV>`>s8b9ql`0F~r
z!4ZiP-tLajg}0~himDR$*wm}5f!l_M99@{C_!dJOt=?CutgZYNOb!4X<0QtV_KnU?
zOEQC9H((-IMOJKlThr$h;AUavI0w5A8k=%1upOZ>c=nCrQ*-H1)}Ln<yzxJ==r}1B
zX4gE)6v|7HbfRSIgOp5t)rGC#hC8nJ3QtV5nlI9<WbO=M^1G5&HZS8gAPY*bw&dT?
zf^DE|vt5Nx$Pi~anwTAHT#-i`UE~cAFJqI+5stJZ=Iy9HpoDVn0I$7tzP*}k80bZ;
zBmNfCtp=2^bawtmT+=~3but^CkP+EhJC+PTpL97BO4_%c1J}I|F}z_d7NwKuMos_&
z;GB5Yv+)aBOc?ry@kQJZ@7_A7c>Bgz{jCzNRKi7B1S^w5b30M>$YJx8{>IySO@`S}
zt5I7Vg1!AchE{g1Ge#T)rW=8-@Q3wp1_?c@1X*T_r6=;8Gs_adi9lhLgXSxOZeMT+
zryWyy)cPmE^Mset-#i+z<OrQc61YytBWTk$U1<81+((V=5v3&>h7NZ}jv4#u0O47f
zPR_)cx5@2?UBLWSWD9UJdUY{N4Z9p&u*;Xi6~aR~Jdj@+ZSNz)yXvQ~5p~fl26;h9
zr#|#Y;A#;j{lnQ(|A9MSWAWfO1}NMG+Lp>s7?5Ks)KJM0DLpTPvgy-FitqfEghBYR
zN6b;N9C6MJfBmzc1K*Q6*QDU`3?mLF0e?j<D<DJK=qLo*lJQTNc@%E$Z!>-3O_(hN
z#3qd~LWJt&h8`OIl%ugV$6wqp;uVsahMc$)!NTd)Z*OFR&AKAjVh#uufpgNgSL)-3
zumigy;IuE4nTAkGl!X)ydVp4DF3{v-b?g)t>i(@~N~w)xL@IDaiyGiD@ivLf7YcQa
zSZ~$*g}m)~c=Zr-uSy*ldD499H)0NqnsoLqx;o_wGbY|dH@p6BeW7}wXH+vY=VjN3
zb@+p2SF5qlMM1P!9DLGv-aIdoV0h5)2_AErcH<f%B797;ip0C$zVrPJ-1rx2nL!+G
z*U2L1#WT6}vxZSQ5SzFM2FxApgj(0N-b2nBNGFv|yH}IoiJnx_Faw#I(I%#^X;1cK
z-~}ezSDpjsO(~(gki76R$(7p2eOJECw-sLNwppn&{9B=yGrbBggvc@rHDN*ppc&)7
zW6of8clb@U^O+l~0s(8M{Yy{AGkg^X<^f`jto`>QqA?x+Psu;+KBA&PNB;`?y%o=+
zwuj1I&^*yWqN?lAcL7jlus<yn20H>jWIl53;TzY0l!3;(z(VA7__N3A^^QG1KgX{C
z*?BsW(zS;CQ%6VLy?Nx7g9$tx?w8w4=Dzerf)(|+^dRyQgAL7vp9bw5n@+CP{}EU4
zaJ=ly?3Y35L@-k&jhzthacCWt#?sveO|<@ZQf>FGn()UlEb%jHto`TJr25jM_rrje
z+Km~7n`cRNXW~NP{sx<crOR?@f5KUTvJwFHTMp%4Br+{*6nr+K@yU4ly7p<eF(%b#
zY&A_$$>9Q=E-|vW%Z^6-_o%7Dr-H;g{?xcdJM@Q}3ivq+wlkPjxlw+9MC@Mra3f;%
z7`e^k&P&3@zMA>t5zL(GYu`W$p7JcBtNptKA~Sbm(OBRGredl6F<FU=4t+Ck=NoMW
zWPUNxNQAuVRzLOlYRSERi@m=`ZP!+>AYZ_~?|HoK81;eJq#=~0#Qkw=ys=}Ds=dFA
zxR*m;gPPllb*g?;(4~f^U!z~8RwjjsLB$*zsnnrw!%?Y9To?avMw`>m$`8S&Y`yUP
z6Ad<ElqAgSnm0hEPyQR>;41gcvId^Pcb|CX;DkAx8Ef^CzDjA<;lmNG69J?aIXCkR
zD)y!M4uo^HM_@402QCxuP|+4UPd%Uv=6?VVAI9loZl997l*0fI*E1(Iqs9zFM_Tub
zONs&oHCc3a$bqw{#^XDbWzQV`c!^OCV(j|re;}N29hvj>X)LjauST!A#V#{8GHFqt
z)ka3`_(o^fNu;uHzj}vXJpapg=rorqQ8h`ZO6Sb-sia<hQtRB2p2AYfRM-Ak?09EU
zAw$^XZ+4n!cQ&lAW*9X~z6f~&+UIPJK_%Kg?ayT~9>gZpRut9WufGRb>daDhg0ly*
zzD+UH*J{+8H5hr}M*R6=BjV^qECrMO-jiPfCf?W`lz3G`m)Xl+vaA0afo09#ypihu
ze7C<YM5M_M6ncUY@g6jEv8o*twX!MVhP)xukXH0Y%=FLwvb5qTXxJ3ZCKtte#9Ogw
z!j2j(|Bg|Et)|J<*gu`d?B-0osEC7p8oNn#%?z_C$xe;?NY+44rbo1sBMlitj`Rw5
z$M$LUX=B)q3Nj>pNV(cM{LurLNiGVW172(-kE}4UslMKMuB+T4v)JBKBPwj$k0!Q8
z=cVrVEC2-FA)wz}IabCA%l5S(pT11BaN;=yW7r!;I(${qE<#}ghF+(^9Oh%C9IThq
z&5-x%A{TrS<L%h7IRrs*h*+KfbO|QmM46UGjzki1mjgdI6#b?+s!}*Z!cmppn^@@b
zX3#Hl(h@?2el~Z}y#OX`qH0oo3}n-xN>OH0e^dI);ppIT`|3K&TWtoz0G)522*+tX
zI{$SlPffH>)OtI6``=~{O*?sr&9MF<2z0K7?NiMMwYS*S!mk8b*?wwu@Y{Fc#MTB#
z9D9bzsI9a1y6)LaL<x(?nWozC1QKdL7GHq99ptk*FeR$89ho|ZZ|@8dbGDG3313R>
z^C2GX(_^3+<&oUME8oE-D5FK`C2FC(@BV1MjfaUXb|4v13j^*`uvgZgS-mLS&#aUN
z?^XtDn}r337<zK5m;Ysq3_OJ0_niT<Qr+@v618n@Nmf&BoyQSPAR<VZKv$=DEagO<
z=W7Ps-SV)h?!Q3DOGb>H=Q{*x8P6(y&R_h0uh+;QHRAB%9(pIn>lPV8j?NNtS9oe#
zbTehp(E?ewDhD*UFp(CxMvK+ltULK3WRxjEk}@n|P9Wx5)-g;1W=MLW5bkAE1jCi8
zRQCQkB#spFPQbrv<|G&=;n24d{H@vyMOoeR3)S=KYQpam5M=@!rlN)Ne3*xHdm|t%
z6rJ1H!W;~)-S@ZZ+DwMFXjS$C2WN5PIyHsr*ZIwBfNkD;)GsI67Sl`#J?fu+Gas8F
z$L>^c`HTxEI5AkDmD)N4gP%)*v8PN>FhKDp;^12jLj273?SCTzf6n@smWS-+X0!R=
z1=C2q+0>(1a*1P8?Uz{izrIfeaSV5}@o`qxH(aW{c2;Woz4fAWUybv=<{Z8rl!XD8
zpiLxXhdiHTC-Cg!i2R9KtkkWg9M7u57b~d~K!pL#SM*ai5pse`bOc(p(=VT5ytpg9
zbuPk+*>(zLZ-cgUcIr!B*5C3c);)jWo=TQ5^;$w_XvvN@m~91f@m%UoZ`)j6z9l-q
z2X*?<6bbeOOp`qV5EUL^F&EJ6Sn|#X$tDIk@vN4wn5h5y0@LK56VU{)otzA>sS;MF
zzj>Hp?odnYp6Az(VkZQ-^KEqDx8h=c_+a%uDWVpj*hb#zX*T7xMdz$)j&XLU25j=u
zC&ZixAn^r<-_lLg1+x~ozP@#IlF|t{aBwL)md7$L_s7pt*aN;|lSn7`4;GDzfhrD4
zV2hce?Amce0|v6|EcAkCmFp=vV-e%?4U9MUUHCFU*WZ;eKl(HVgoY#!FrZu$E#sSZ
z%j^AY3;tKod`ee<J;%#iDtsdN*0qF%7GAP>q@%2-+gIbBsE`qvf(vr3Bc80d>r|K!
zNOJz#tyfJn*F6;AmeeOkwV9MCItYvS;@Z7EGG+g|52UuILLx`y;kRg#W!MN}vTh%>
z1P|aT=tz46;ET~Q8;e~@Euz_Ml(a00fD%|WmwrpEX$AX7C*oP)0a)VF%M79Gq<E9N
zA5Hq03|}ANwqTdH9tMNuD+#No&gcZ+J=~RjJ9usGBpRY67yAL5c(HMbGpNbG)t<I0
z^opINwBax3ANjRHd4oaiVN&}Cl$>VFB*mgL+5HXRT=57gR4@AEJ)dcwX-N#`2V;g)
zR=X2Q;Mvaxu8&qrZTfC9LZ9*4LI=NxPN{cyj7h{BD~(ukj>6bx5rf)}T-6ov5myhA
zCV70==*02rup9o-(By^93KGFqvta9G+f(gTh#hEbbZBW1HnR2j5hnmCnk=^!ZXVT2
zli@%Eng}OhwB2E@aUl|Pt~3J*9bh@1K1nivv__w!&udk)72%HAvA;8(i908E4nl-B
znjK(Ka>87G`~F}NIwfjvZyOC_w#er8%KWCI=<Rn1*(3{6uGIS|8`Fh2I!kun!RTRk
z?KN+f&MpREhV1wuysWO?el^g+QK9EuWVX_kla>^v?Pi4uqZ~r<CF6Otu`r?bXk6(_
zs0$BRdmacrFFC{OiU_Yxt?$vO{u|L8C>-Cq9CqRN4eqXULynXiAI`HN;5l2V$Hug~
zHr-^<E3f^XW(G+pHf~&?I*DL@wD^Y}2#g}1$EX6gwi-FTMgD|ddYPVB<d+?^i``GB
z40-{SGgqR)S5Mo?(4nGn@OwGz3K><Hg%Sm+)4fpzn_NQCAMJ+<I#%M2MHw|`gfeOR
z&hh9y56<*a$)qIr9y>(5;$<;&Y^i$Z^*HAIDP+qzCUN|BL&js2YAXnXWu^}rPRjAE
z9RAlEP@nH_)kq~5cHcSm#{`Uh;+TEZy7HtV;a_qUmBe5WBEMpM{hsU-J_dSJpk=)J
zgKNJ<3ZFBBzy76Vgp%rx9}iinQTdl(5TuwJ4|B3%YIjB?mXsc~4Z5~AjFwP_-(0CC
zgttWiZP_c$)Vd{+KR;a`PWXV08ip0~cLhRMso!tYE@w+9zE~w$O%%r#qg+xod=dp=
z*~}@l@SF$H$W}ayC{9}3RG6M-)@xYLdPz}J%#!4ppMVivAjS+tNgOOF5y0=z<|Kw+
zzeiC#X6J;s%5gq8l=K=P?0kR2BVDU{XNC&T3!CBS*A_fNr_7e;6NhF@e=WvQZgBAG
zN`$=!r*77;I1Q|Pf*Zj^_fY&x{9+qk)T7~XJ_wf#7VnGHz|x>C*em#DbJt<|*0tGI
z;<)oAqe4=eHi&Vg7hOpUe%;;0uHe%|lymnsGNSFt)FkDA0|SL@j(^X(YY*RFac&~a
zHC%JhgLr!~yezp4F@E)^uiY(P$N?=n$@73SaXStz0ES?Pga5V0BG)?vMeo9x9DC|R
zabnu@TD>tDD&qrOL;8ff2zUx~h}9R;$2|P_b(f-kq@&9CaJ1^X6Bo`38CYoBJxJu>
zo-dkT%tsGL7#cP~gY%=4kS$i(MI3KCdwcl7Ut9+SPIoYX-glmXKwPRCJKeuWfvYuZ
z#cI*n>owKkCw!Xn@a4h7X-~=UzyD#f8g7dgiEFDxQNwR*ZrAjU`9($9oi8>z%bzKt
zBvPrl^DI{Pc<nXMz>LOprk-n1gdCfNLu}o=!;A6t8@mJ@o_wI$nImN%M7&bEQ>@IS
zM_$WyCVVlRx$%|7sBuP;40oK>veH<>$jU8RC_=<}tua)!Z^QCaAKp6ynd2C_WR-30
z&Mrnzj2g~xlFCeuKtZB?#wTnNKY95>KGf2mhkoVkMGf{8e!c7_^J?!CU$Ny2nfV%1
zgVg@s->;F>lWG#+QU>5t2?wjhxSCY&NJ}=)b^ShQl#$Y^CBj0=F~g0`Fs-0BvNs4P
ze2Aj|N_)E;$luFvr3p!02B?$szC)aUa~vK<Y*I!vau%+SG1C$+m?28}Tdp4OkQ<~O
zkVQ%Z-qAZGv-K0AE*6PFwCk!Sw7|6@P`X;K#9x{jA7FG4pWW;4_1jPnztqw}sOh%=
z=+T8J`pj20LYgaaB3~pa4N$rv9R#i9`8rsA+h%J=v}7}#3OSrVHv6FWcW~n%R`e8R
z+4Ms!m7Bf$BlO!J=iA;DvHkT*vcH#otufXu2-!X@R?a&xFC7E@ZthN5v<KS|z=UY>
z*H}2?DBHVe-VRuF{T{b_)?fE-HPfX_p7>_uM3KSb1^gb$o!LFznie42V-XD4>#|d7
zNl5|`CQPNaw9CcO6Dp94zLfv@WS&<XEk`Bk5y|3hKv$bWXKBRUSZY{a60&%*nq8)3
zH@YkUHv8%y{Ay;`o%!_!_Cfc$==xe=mDb~cKvZTm<kmB-f_08mcjN9w<VEc-A)E4=
z2cULwy6#H6)G|~E&XIu$-L3%&H>+oLs-jdttwrE&JHh$Q;Ml%EA%F3bkC(!wZ*H;D
zxHYaid;^=gTJydfZ<RE9C=Y~I0qk1TBnTe^21J+e8q?EvxuOm-woW%U6OsO%038#(
z!pTIIF5<Xr<*O8NqZH4~4`QbCzue-a5r;pi$SX8^p6H(KG6QkzJu)ih^9l#vp&W?)
zcg8lR`?VHQqbb(y-On#vKS`?1@@EG*Lc1toL<hg8&fP`9S^>aPJSZ6@!LMqYws&O%
z0M};+<;2b58GczqSGr57;r~W>(88^*>c_CLA@D3^gOc^;DGLM1j5q=G2O<6IpjE#w
z=bl{hJTUpc5!=tm{YG8JDCi4%YpSkk5GAY3U@Ki-Z^O{__FMK@FETdTjR-#s9e0Id
z<-i?BS|XMIYLRj@#p9s-ikR>7!Wa{!^UOf2_2O<f8TPh*AfVj{e_lHd`@<5g&*pf@
z51+fFByivv=mpSo&JxYxpnSC8Job#z=*!!U>Q%+h{z~rwYrWF@v0#w(1)_L#Yu(P2
z>$BP9!d#;|?~7jMt@O@`WeNk4ug{`kaGPo37)FA)Ee;@Qqz%1vMPvb-wKSV!>&Z4t
znUJ`<)+ZUCm>r;89bh#(tFeHVKV}>SCl~io#VAWp>uF~qD$UxtpXoC{$~s?RvCvn1
z;>zvv+~DY7o~YU;dGLQ!tX}gnLI6=%?CilAcxpmp3N3?z`VRxioS_(vfp+F%lhoKF
zQ2x3#j%ZHf8PWYnW*uS5RHlzEGnSRVOX=ZiGqxg@k&c(n=OC-w+9Kk%$oq)mt%G(%
zVM8byAyLN(j?bSE<5?b2KqYLC#7o!`L08Ayvhe_-G_6eT`Onjlm~@3-RoiFJbqLR;
z<teYhML<+NST{|T&;!GdHMe2MAOQbLSY1<?WNc*5c2=ES!4)@@&!eTXXQbkEdA-#U
zn4YH162Dk`0ZX8MjwoK!IsKX97W*o{F#EK&we^<oo+r%W_YK#f2uN~IpB~_>Qp=*%
z^2K6B#!G1{^>P9&pEYPA{Abt;h`j$9UH|56S2j7b-~5tvxq%Dfshi%=Tb!MKNe!lW
ziZzO7|K>Ng+HXZB%PnO;DN3<VgP-QL+D+~95_+91ZErNZW_ES|9qnOkBG6izY>9MD
zpCZ^oK-EC|_x^7%XTZL$$rk?&PZE9`YdqjmXl0l663S;0B@T8Hpm@jfQ8;;hm(GrU
z|MMHjwUT)x_p`e+SBF6JdCB|ory8zFZB|`8hZly9Y{U{Fv&N~};~xS7eT%LJpyHP2
zj3w}yJ*D@6h^5FvZGXu*mC2RyqN^9G_C4+(MVMQ>e)1915EbqvayH+gD2w&^txTrs
z2mg&~@Wv`3g4mIIhre~=^NMKHTYhEEHjq9NAx~Vn%9`cQ(x}+8Z+zGWgD7Mo;>6D~
z+zAT83x<7SmB{jN1j^VQM+(u6CpM)!Z`U7qWwMyV8k%+wNP-SeakwBoP5t$}S?`rD
z930fXKAZ^iDJ%Vr!GKw=#l|BZtIABY=z`%|#8QtLr9}sp5x%rLk1Fg3n|xjMkwgB3
z?p9!;zBNZO{?VA9*Ksg}R*(j2Oln=^yp2r->9g52z(9z#D&!NfOnB$hG>EeR*#eQn
z-lf5UJfjVVX7}`n3ey}TjN%nN#TL49{qL((Wm-!Q8W}HVRJdYifwFD&ccoqIpU)mb
zU_?l4!H(F9Q;+3X(rQ4&2}-N63)ZF2mz_DkTyZVr+(0cmVL5040oeKH+}B~%sZ(4@
z{n1pNx{z9TZe@4Gtm$u#vYI{H%$DBt8MjWUNi=U(f=T7x@w|&xI<o)Hpw;7x<iEe0
z`nSbg%L9dh6mO(BwgzFzvj<x2lYN_o1qPaA#gURTUoa^TC}Kt#=ycP*oK-ZR0RX86
zZvC4yKhvUVfHv+l6hdeT(M*17JpbTtHO+$J+@I;FR$Az2n6Youy6<o@a9c8$tiyax
z`5c{Oi2P}{iahgM#PKy3QB@;!;P{;KfT^rLI`R&{^`)+e&sr*{45H%ROIN2&$di~b
zfFl9ovGQB<{6m|4(fL3p;NN)zvm|DP3^}0TkEA=@i3+O6k$&HRN;p1R@%)v(r&K=y
z6tH-nPrD^}7KkNjUPYYw(jn3^JnR`#rT#kV->z6d7l5Ogi6p10!$HnWEImOOj2bF5
z?8|qIz%OAxp44+<9LacW2Vq!rw=ex#Yu30P#LtSTH{wTm__j6|q$q6x*qi}c$=pZI
zX)rZO`_9*r%)w@`X0X85*;~|jf-yjAUXFB#uQ2OhzNL@&0(<pQ_Ccd{>RoM4d^|S}
z^+}8OR_1o<^gn*&DbBaia`B259|#=QEPE1vEf5i<y;?45xy7N{+TYmM>W;ArFO`!d
zxX}INjmC>+Z?3{_g+$-o8)02P;sB~ya?eiJXdjRM#+x}e48mVm$m^m95L~yU`m_1p
zK)elojrO;S$Wk&&obNsyeQOdUBqQ|xdQ|#sPPACXT8$aH9||hE!kjO8io?=FquRzb
zvOh*g`xTN8_?j%zw~6#oP!DnXj_5v&aM|*aQz11#Q1{$Lg-PR=p9(eNOwAiDta76H
zw3CzQ;~iaxTX7W5`GyrmDC33fRD*s#^sQv5wEp4~MMyXX#}Dziv(o%|nW5HkKHjp@
zRD+^aD5kHhO@>e=MkGAOGDrbSQ=Vs=0D9#HTSDO1IH(y8O_z*JiLO=hOo?HfX}Ao!
zkO$^xSL3vy-$GT?piqkqngQc1h7Jc^;A<a4+JR75ru5ftn-4DuSzM2hawQqprlUj|
zbMplD2QZuTdu0w+D6c7p%s?qbG1Kl~^%W23#r^)EoNep`oDA!>HACI3W3-Z@bitlg
z&C7cM8+)Y4(%CJ9)~3Cv162Pk11Yvo?6)W(gh_SqjjOz^45t5)B3quRH5x<-JW-kX
zis-NQ8BHMNjVkgrE1e1Yw?D%k2~RO6Zb$HFPkH{3u&hTtevJO{Lp<~ec{r_=HfyPV
z^#9{mGf>#!{U8)}_-pMvoAr?27g(CV$En38Gb`Nr>L1@dVRkp7Khq>qvRTPU{slCy
zCOg)}8%!|c4_z0{9`V!#t&jMDQ5WMm_X(t*kNtY|v_OD}%H4h1>V;<AB`rQ`vAES=
zOxtsK8CMVO4o}B{8J-uIn}p9FDPazi7ptbvdJ`SWA+usN-&oj!-G*A=;sLtqzY$N*
zD4-GO2=%n{RR8{-572QFnQR&G3OOz2s`iPa+S{wv&Id^{y+m$k+6)vw;lg(Hl0<Pz
zXM8dzWQ!-8K4B-stTh|B{dDCh=8JW_pYPyD5_j>7mg~8v=qpPxS)t4^nO}w$`@kR4
zHRjw=A@`9w3xoxO=Gp{g4BP^@008Xe?n&LLFpn0W0UQmb#jBs-HFAX+oVZXK!P#Us
zHU>d+cPbOL^!79zfi7vz{av9%&US|Ku>1(ze$Dd<N=_eZpBAb_t}ALeNg%e7nzJs%
z<GNJ`;hCfqh2BNyHBzmmPE;e+-$o1Goqxu=zcvtBi}s9t?NAgzLc6Ci^=Am0nQ|=?
zl^)7)yI64Ngfi|)buv%@2d3=cXYq2?zX+^d;j=?I;U}&jJMl3@7g?qRDA8fxl8V`L
zr>v)2*Uqxv2+$$+67Kh@<+TAk(CVz2(kCz-eo#Y`0E&M<j<MN2f9is9+RC-|%ij2K
z9REw)ug!Msu_*^R2zgqs4saJ$wan>GP_AQ+@by`u6c7{&b@Ck)|Br8BMfjFB9iC?D
zbbF;XJEXu+NLmcjnYz@FXH4*|$Ysm11-(4d5`#V2Y~Ky|16>z%ZE2(0GKF8SE9Du)
zVYCNbHR*tPxRT5lNj}F?4NTdR3ZhVOw-6#yoXSDFbsN62^!zkSfITQ0z#yl`W0%YG
zxp;B|=ER-oD~p~~XR>t8P5p{^KCZ&SO0L)a@+iqB{E{9uIemm@QO+iQp}W;vbrSst
zlYYQg)FS&1FRpZnz)WNZG7*8QbQU%*o~XJnoqP(&tW0zz+R~eXg!l<r=VMDAt{}yt
z1LK&wX2a(F{awUoDVADx+UPB3s<Dec%M9B1c(X2~P`GDUt9n0IIn6^p+NI5GR5^N6
zyiXpA$3EnN>2mkgpUqhHD9v7Ml(&EVYg!fP*aYO!+Cil(r2U+H%eG51q=pMw=jEvR
zN8(US^a?QUQwlW>^1d$X`x|6FG7_{Zj)MACB~zWbjbC!&X3X~)FhT6NJ0^bB@;e=-
z=3N{$%O^_U66$WbR8yQl->~o15~?#Hng(`|OWAL7OH=Ka+#u!+KKJ3k)6l5e{UsQ^
z^1fP$ZWfMkzc#Wkoo&*HTP{Hei;GE%pOs#@YBs5W5Z>WRyE&rZ^Xa_YAwWai?EQs_
z=f3}PVcw4+BJndNYDgC^ucqZuwJYBqMPzcL{u{AI-INt`VV&<7avj7qSW$lJTLBik
zZ_n-CZ9s^^_pWsh6o?m^2ifTf0<H7O?Q7}EpO_U8wIaVxJ-AG-Af>PkiTSrqHRo?D
zUA<gp8Ol`2J^F&EvDu`wm^<HMO+9=Es3oaP#=h3}@UJh?YmwLvEW-<|qR**i>baX3
z>>^zC#s(QqYSn9P{YJwb9V*U^q2A>WR_9wtJ-K##4Vm0IXeK*_(EbP}Kl)#Vuv|TS
ze<VYy<u07?Do?Yzfzq6Iaqu2zSKElNn6|Bbb0Q4r$V>n2TBwo_xOvu8S0MBET{mE-
zjfTF5dr2R@1+s+()SRlFI0iBbHhM1`AqmZGV6y{HIy=yEdnT4ZNASAd{QSm3nWTfI
zWYT7F$#%IE<<g%d7M+SSw6iLc6f5iy(p-B47-w2O4)m16Ry&dhi_nW9x}1}*QDaD`
zo}S7;T^rekWpoC}a2&0BpGC}SYPp|br=w^TY4#Zb?{V^EJM%2|5n$F#@ko8JLq7e(
zr|AN1e@F+-EsA{&p$0YJ$tERoxr{hSsl#?pvLA9r7`G8Tj_S7l$ak?-E}Vg+E=sWk
zx4-nDd1R;#KHz*|QV*4Qd(;P|5bY+Fl5b<resuOb2tI2v@!rMTyAS+vc3~D$NU69p
zrQ6j#ZCw}(;s)2!opHc(Irr3g>I+GCe#Viw<qHZF?VjS(T2ISA&SyU()RwMr35Yqc
zOTD_-yvVPF!s2Um4XIwekO>iA6`tjt8v=E~BNbXhF3khw;zamI^3Kf9NU2s~P|N8D
zk-G$VG`i{t<2h5uxn9(QBu8sf2CH{?wtp{XLV)w<5CMDj5kOf+dmek@eDz@<8tBSr
z`ku(EX_G%Y-vF{~1}1JX)SP-a33u8RF5ib$$R<Z3sOl}o0h?(yGxvMOA0NA@C=Jw=
z1|@;=CK{wQa82D|)s;CaOD!+kA>e76iU)fmW}fjZV5w}>Zf*aA<U22SzK;X!#rbY9
z!^w+Nd(dEM{wJ0y-^l^?CmL(AAf--$d0C4M?L7*bupfZ2-e$!WzJYsE=bmN4{#HsD
z9DR|p-e!JGIcU(p|G;zuORj9#6oa7HtIJg;S)+8WIMr%I++FaHrTEi<_Y!&JZPJI9
znTZ4B+dUbNB8?2EMpVp_J&rHmQL82*S4|H}s$<q-(yV%QajK$Z_rjO)t^+eAT$9Si
z)2OZ)BY%CO?%E+^0@gFzTqk<eI?GB4iL55}_g`<(xewn<v<q^@q^XIdF5hy6b3|PW
zB&@axO|Su_E##*9gES9c#JeT+%sLm+WJ|>}uk{R62}2?&r6+>sqKFshCBwVD?H#4j
z;hc+_Q93K>`=dBtUL3=_(AnslRg=T?*?;WE4Ofui87gz>#RdxHro|~!dD*TnG{j&1
ztt$OS?4NssfvYyBu!V)$8S0$-{mrmRE}#S$I*1={CD(d~SCc-gavE|ZoZ1R6AH;rD
zjVFExtC6t6t76>A4`2EjH~I|F;-~Si@tOo#P6$EtOu;++<QGM=r$<!>3W-dWTEFp&
zQ;PCHxavMa9Ho<0GkPF+C&lkjCT};rVh8OF7|i3AYx!%=Bzkl4L~{s7<Ssvh;sVzf
zEd10~1C&Z_R=r*k{{Iz8LKl6+xd$d{t70+8QZHkg4Yjx>@4PeQ8JJ{GQF5_eqf~*X
z4>@yJ*-=&q&V9`P`?r_vGq^(ufYGx~5Mr)E?aup!Nd;sUez6DUaa&dB&ITviQ_m3C
zCSaCi+6^uD8=7K}CiNNh8d*uC8GM8D4t;E;i{za9g0Y8>5970;VWXUFcFZq$C~i)}
zD^+$TVyW74k$0QKFS7V2SAXBf?78$8`|X@gu$>J!`#V0xahh){^6g=Qkj`a97%6VB
z9Y#q&if#?eXVp@dwCEfI1Q{-Tz=X+`=oH+|xmp4ZumC+Wxb90k7&uZ%{W_K-o=e^{
zD6GG2Z9Hh6=6to+w?`ST)_5o)8u9J7=X22-B%>C~6*9B3E2KCtjX5=+ZqJmu!<B_{
z$+*<PE4@44TPWVdGxw-inQZy7C5+5l!a{>`ONjiquxO#K{EAU-p_jf&6?O!vyd~P)
zMqW3mjGL2(Idf#-QAN%<q_Pn3(q4bBtd^aXB=^jX<<3!oqR=K7q5W`u&4FB|C2!!h
z#o&z7GLs7}7vp;$Ka2#&pP|D?C@&54w8yB~spF4XKGUc>yq^=4<C>m&`;gy~>A2}b
zZ1A35RaVEOW0EieYhwL5Kyk)Eb2y0h0>%S!-+aUSnaZAP?y<P%Y-)X-rR&#P3?fck
z>?mUBjS)(jyV!(nCE1q8a3w&GR>%4)D<}S*RCdjxkm4aW9>Y*G;2UpZw~_ghn?S*k
zClDU)fk=^Xli6O5f`W4Hk+x&6Ji}R?%p;`c$#u-!znG2D1iAE2KTTnd^eduNkemIc
zi|@(%`MgZCUBOYe65;-h{H?%9U~{>As0bFGGucxx<kN6koNpOQ*G|^xZHY#On@(!T
z+6vH-%?+XX@WE3#^etb7jZSfIN&aBvTNAZ*hSf1RJ@nPBLDJ}WEpSsRy~@8kXaqYJ
zYA>|xpMsDY_*%QaD%)n&=|RN#y09kG%@1vZc!M(Pe&`uvEtx+sXxzY*IMTDKV04_R
z69SAs1{MzMvIR+2_M91?pv7pzp*K-!ax4RzA)PL-zjA}VVg_~l=nIb2cMHi)EQPo@
z<b-=K!#-ImR~PJ;-Rjud$7}mGJ>A*gIOI~*!dc^nohVjYE`J!upiI>v1&$!=;Fa$i
zcgrkO*n9{yB`d?vkF{?y6?#?`ir0YQk5F6wz3<cJ)cP0%Ptc1~6>j-G&rV*ZorCK(
zN`wI{Zg^q3AX>!VfcPPN+fEeX<JQKV3w}y7;4DyX)$ZtwrR)$0^OlC3sMF&qLiY1c
z{_%42T)7hLY<1CONa(8DN?G{sVT*FbT}~f^VqZ>1))>ovx~3ku?cA@33e2btG(W#C
z*XgiCe#gH|hR2OtV0TX&9+~Zn=}=^^=$mo-6w~O)6}pfb`M!x>vW2RwL__-pHh~H~
zUny%~qH~3Gu}vffaCXONZS|MmyT$;3f`6<#7Nt{GyR+0w-}`AClLU40|D<-@deu%?
zvV-J+1Ec?O=k<KC7<AC!u1sHtSm9yo#<2)<JJK*-zT@QGjZe@@kZZcPP;y47{Z4zU
zb!wa=h!hW`SHJNA^t@^L_~uSAcfh{XQ|#EYTVKdpJv%Kr{>*Xa;Gs<AN8H2`vy;B{
zb)LSb1;>St!94pUn&&kO#S&;8gvga9efx#$^GY0KBt7`K=-dcLD%<y$rGnw4-t>fF
zc`-vRKa8s84)U{*^XUr|aU99&U7uWvMb$^DZ~F5~iUHh=DZ493_N>lvo)Y8M6{zbo
zN|;hR^1;3Q`cYzV5*Hq2r*?5T@lmlb(eMs5>f|LqdG})!GLSD0>&O-tt^Dge`UwN{
zjdAQDg||B|C;V~UQ^(T4w{PG{?lYoq$o!XMaG{n%!WX!Cq@34iY)A3Sfk_-GX8Xco
zy4VT7W?guJ+Zh@qzC^`HJ*#++!3T=LSus;YxIHIr9{~b7=|FeTBMBb3ep~5X;R*kq
zJ8;5lhQ5tHoXm{e$R%xad`0awkEgh#cqnA<NyX<EN5G#ReHx0Zm33J4*=e+Yrx<#)
zq~WibNaZR`?vuTo%5H0eMd1M<<@zS-;e+N$uTYcHKMs;(e++#tEXT<i^LhEf*nvuT
z5z_*pcvF%tS97`}xzW{Q<tM-3^ho?5N0p5jHcBhrWUc+Q8F4b^G!NRSJsE(88PpUx
zHNbdy&+UB1!FU$xSh*f_x%GllBf&GfxL>Av=;X)t7t(>#^wPIS{BPKvX;B$v3W<!v
z;gs@?p?|$$A;7w2R7#53y!I0CT(-um&kf)Afv9DflB-nZwR&1s{9m=rxo;%Ez5xp0
zH{JPvi!C+#C^EvKtxU5R6siC_=~_3VfeCw1BX2MTU^V#dr9SrRJwIWS?UJi)I7(Y?
zar3cLGM~^}^aFa$fa<E8tCSPE!r_+7l%4LZ`ENv35FK)AkS^)=!FC{Y`mYZ!-;kQR
zr$Wd*YBV|6L2Gj--n_9OX*&*WizlI!?^%1zZK@X3h+RvayV?B1|Gc%!2%Lwi-^w;1
zVpP|iT?oU<wVUkMB7J8t{LsI+cJS2hY0(CQGJ4~JS8>dVXE-XJnH8qei!Ytzl%{|t
zb#ouO>|GWjf66BFOA_zjSmCRYka6$=Gm62eQ~q&}LaWz<PEH!pweKtoRUZe*(W&Hd
zWtHncKxDV^7njqReYEJL6O|H_`CS)(ac+84x<V@Rrv^QQ1$vONK*^^&mYM4u`bGLe
z$$g>fD=lMxxz#Wv@>AOf*w78Is68{j*iX?;r@gP<QI<h-uhcc3shrJ$HDTy6Qz%wT
z-RN><c!zrD{A*h;JNOoMg{OV6uCzOT39{eP{S6QVP$0Q0{WqSY?AXDiMoUnXZd{rC
zx8MT+Q3DZ{a&&ZxwX}Q3L*NTl10KX@nFM!5Z?So4-7%h#PMs#`S9+;}*PU6}g+DjW
zn)T(!97(XNP$M-nm)XgZ_s;y#j@q7RX^4CUIC2Wke)b7Q0dw}yk(DktpRDY{?t}|o
zZyi3upylyi#j2c=WK|j&(c1fW?U760@#$2p^r^qm*drPWYJCCL3R`>YVr2uRQqk^L
zt00i3d>U%g7NbG&Dw5)-AO<K2;Xbm?Eamk$LL{neabxATgCqh9;iN=`#73^QwHl`*
zyq3hrVPw1ekKHN(%z^(!`FDuYjkHkmyX)c<BmLd}?xiH<fYgnpb;U+}!tQ$`d6qY6
zvhir)G4)Ew@*YxCd^Hs#R#)%-<K@oR{swuXp>(wV=Y~<39OK5N8rAagk47QX+;}P!
zj(6Zs8nCiggR+>ge%u}ekzRS}{RUM@($WZW-RG~ytf&47l&;-edhmL25H8voem)sF
z8IMl4l^(2Xe`m|>SN5f5(O0(ePj+W8u$HxfTh?<+eW_@%M5|n^z7YQb<X_><q%C(X
z&Q!lr_*f}%D?KPTpf2iHJOcpT)!!(d*>5YaQpo_V&HR_pVNU*6YNXn1QN%eD2lyKy
zo-r8s?TQfWyG*k}9#w5v0uShy;sf7KSB7VtrlTAcbWsKG>+?wq$N3<x=W+lY6PO<Y
z4K+Wz!+=^qlvpPXj+QvJGJiVc9Y&yPHC&&G>1J({%YP#p`pYmQH>zT$j}3N9$&cy+
zN_^lE)VYsd53ja$kuGyU(xZN}gusC^EO$BaixeS?S>N-LZ+ZDiTl>eyb_pmKh1%Pr
zk$opb@;*boBme8fR;|0)qfD<UhknERDj0)wags`68Te>5uh-SqwKU{h*0<mP_TPwP
zq{PJ!u}Ha}4(dhXy68&^C#l;Xi<8^B_f66FXgm(t)5yZ)<ZD&SLqRa2%hEOV=WrJ{
z^1u4$;p<^16p*VOF?zI+RmcAVl^g{2Kh={QeXALqR(m=p(>DV@y!xz}ZxAo;DMVB9
zD+cNVR~_%67#*WG;~h5fES3i-*^m2e+BuNa4B9Ibmil8f&=G!+asGDSDcuP~ot@wc
z8mYE_l939-u4#^dQ~ujDR(5I+Ei9ss6`>k~UYa)k{;#|tp4xQBQ)izM5F&mw$k5mS
zxJ;hoS<Qw}ugoKmzd?pl0)`M+hK?XrAG&(=)Y}g#8N;k_eMvO>nORaPYdzW<1;69+
zA?M1hUWK}giW-8l*|XUXR(t60P*zqBtH3j}ItF$?SN#lsCUlYm5CmZ@Rdo!B91=3|
zFW{e-Z9^d2Z%~HCs16@!z{uSwD#M@$R;TWY(J{5Di0~6jo|%odmW1S4BdvJ<U{9h~
zz9LRpjMe-rj!;T$M911$-Eikk-20?BzTbXb6)@-c9R(93>qLS?*3aLiGtX~gA%;J|
zQnF~NgnY4Kxh)S?^k{!CsU!-JB^&0ABJVhfqcXuceb4lOp|hmr?+P=5qC?KfB%HWF
zzD4oc^{(%0c~rDyz^E!twLEQ^v(++u-y4X4t`xhH;KW&ud}Kd(NUI@q5>_@Fg1GRq
z%QEFmxo#&T3JlAXA|ZKj4dZ3W^pypuhn}I!SPtRM!U9*yK0>FaM5)@=Y}-@!!v6L3
z$c{$GsL;%#Z%p-PJFBF^c5x%h?=Mu8c}_mJlA`n5Yv+;SD5ok|oA`+3_rQ?vH%9mv
zFr9pKew4#hIH;5DaHY#Uco-)&IyT+q;<(7Yh0+Ra-a@skq*>~&%I@z6KlHEH=>ZHe
zAQa;%idT~_40?xf?VgthbCu+MVWF^EShO@g9?M)yiiY2vFARbb#)3eTBmJ`5^-()<
za7&wEl8YNhd5dpnBWySSQSCWQ#{j)jP0pFlPX9e{(3lmYu1RoV8{EhUY<x*@1;~b}
zt<L)l>HvEsh<)@*H(9YR_!bVH3%jXdo#;Ht-6V)PTpJo>&u^f}KK9f&U!|~mFR@U>
zE7WCuo7I<)r-Hm$Ot2bJ`n{vK0-lP}_f1r+0aF7Z4VFKv05H5fOKZ}+7<yN>P+@;d
zR0Os{ZEjXHo4=tNLk#2)|F~fKq7L0v%2QOuN7&(9{eAn%bj_pefVe@X3s4YQozf_X
zQRB@dZ{oEVQw$v{D8?4GKVdt3b1eYBe*5*jEiL;)2aGh&>~Y<Aa-9mVE~snsXYwF~
zl^NIElp$@9hV>K{Q5c{YK(Y~qR8|=xCk$y(4&zX+So*?<Lv;pHUOQ{ZIjB`)0mAM;
z&z1=|>@W&u`TP_u2cJo*5{7P`NMbAK3Y)nw(HWcm+&EU(uiz+hFz;vW#m}y6{s?;u
zAkeBPC`c+w`Sps0n&8As@%?7MU+B`=dG$)ZYNFAoQT4q<xQ%iRSKa>IN8qB3?VL@;
zv`SCE!o^$O{uS=G=0HLOns1L`2Bkr?bM_Es2oKj_8WWCV^G9bja;bfuJZE77vN3U{
z2fN>(cpngZNAjFlDe7~jhMh-6e$5#MqjHgR6BT{(IGUdm>*HZA$__WJ<}|&&b~(M_
zeU)$Qs!{&n>?ux5>e#0QH&thLbigd4p=`fsX{uI}rDL5j((iL=_xdcTF;L^sNT(BD
zp)b1O37%aE^0uewn_VQbiIm9Jco;7TOLT8BZe9JN*{@EgmM&Iny8QC!xql%B0byo?
zvX{Q{xi;j<u*(Tdfu%1Cu$+H#Yic{UrP?{8-c0WqcgNV8QRmfn;Q{<apY}`Uq^$k(
zt$L=q1^EQ<26=2VjX{mtMBjW@R3(V9Jat_qmM#*kNuX=e!NK+b9a|O^ae!pq?w~Ap
z4Ada|h}=ZyTc}R8C6>;i%F4}Dw3j*9QfJZb<v*Ak0>_(g512O$UVRs5N+-KYxifoW
zyb`v3yLsk^0Z!^4h39vBm_&kMD&r(<K!0Y_t!6tCmMVJT{~FPI28?imvt)7Z)9#%=
z70bovX!&gSl<ssoQ?!fC*^}Ei?~!CcFXxEFEzduYa9}Q*)wXD-iQ1D=uDstgY$bO&
zqsIf+W6=%RyIjTE5*pR1(lb;R39wD~wqsUrH4Od{nyRD^ax>tE*flp}jdbNZ%*ks|
zH$h|$iTOZk$vRjrdc>~G*i!mExrq1*+M<?{Xojy>Zn(ISGekD8vRAm1#6A0AsV_8@
zC^X34`QFE-Yq<&kbHTAku@>j`W%7i}_=_sMGsD8WHxJg21b9C^P^;;m`}<3$JBk-w
zfk?}uBko@~GsU~V4*tKK5(v~w*5f(0S##V`X%e-?*xa=jOP;Turi|w(G}z|6$W@z}
z(Brv3xp;`meo_{aA>ZEa3d<P5QmFvN9X)6<8xHG_0OdaQ8|8D<K&0WRG?}@CW$BFg
z=yiD9GCiI0blCKF#b#`h)Z>{yx&+v-+oJ9LP@HPo{pc5$!kqB)9iAk{;G!If8s;;I
zJw6WTQD>7O{@8Q|L*(b0@Y;*NGL=PIraNrdN5UHkmvpE1>$8O!k_Dtw<WUqR*1bWI
zoYi-e!LDvLD9GEC1t=(dS1j{y(+N_nuVp(=oM<pc-oR!2I0mY<{8J|QfM<sKA-@$o
z`2Q>`+J%|f7kOrTEZ83Z!L!@n+srtsioBTx9DLd^oF?>0Wn%vc>kQoi=3uM694*1#
z^VH<2t88ZQ2Y9I^@eOA>EA>P!582&2qfqjrlFbGtDSVK;`uqN__2J})ssVjQq#5DQ
zrL&GN5B2mIn$uILoVaRq8C0+Zq44{M$k8FOz39&YXR{ey2I8w36{k#eE~!rVGY$4p
z>Tlm`kF7aXp^3j|oR<l{xQ~AF4k;Tnps1$AuPZP8Y3ObGm(2n_G5y2uRa#s6Y+tBk
z_#?BSpgr~9h`FsM)8hiz_hoyA(Ng;Fj(_6es-@+}zcLSMVW?u^&3|4^HLK=>!vc2t
z=!y^5)M}?Eme#Fk!6&`eABW5IG0~~u-EoaybCyUAT(@J=&7aRT{VtI_%T=4S(&qwR
zUgXyuiHi7gGU~#9e?3|O8I~TA^9ln1r6elVne%cwBi5LiD;{u`I~A_`+O29izE=!Z
zSn^Z-5tHTfeVaKdJI$^b9!~DspM9by;Vzj8W}o!*z;U<@{p5R;dFCbmUS6v`=XSI~
zxuQ$rqxYDB!<#PMu=prZ9QrI<c<j*!{Ie{zUiw#|C-y>AO_d{%6(?Bx@VKVW<wOq!
z1*=a7g!1N?){8)IpX|!Ivh%&WW{<!$GG~?9!VaJDL!Ex#91AmX;Ziix?)og^5}8{?
z!0C<LOpK*H1g;YDo>S?;?tPz9yYU$|!AVGuU4N6=Ky~dwc~WK)Y6{I39%G1N{LW5m
zi;=+@cnm4yiau?YGx0bqwe-bLv`GH{ID7NICeHSITuWPOt5UUER6<%&d0Sf%t;!an
zqEa_fm%2k#v{*M}hhQ?bv_&f=QmVK>;vTI++$thVv?xJQf(98|kYEFbFtR2CNtjGO
zXZ(Kug6Eg#>C2GJa^Ls0oa<cY5+Mfz6;f*2FzOy<OJW4lbTd`^EDk?KHz$PdzITcB
z>Y^Ih6l}e{FA#||^08@lL%32}noI{p%CP}|LPTeQMo+O@RRh9tyQJ^&x<p*L@&$3%
z^VZ$o3Zi<Dk?#Gd0Un=|ChDFj)@A)5jkAFVm0+p^!kDn4bs;MyJd%vv?N%Qrgo}Vh
zG%wOb>=6!q;pkq$1-9JaDt6#!3bc=?jSH`zelLfrzv>uhmPfBJuYgz3p;WM%wq?3%
z{u{8STOM5?`DN_7vE0clNYi38;b?xkrS&r(jj=$rQUbrzd`7i_pi4E5hK-rexY~Y%
zYM!iT8EIggQ~fBN`-QMR9I7EX2sGCnWUlIXfVQvF%=RtF;a0-<b&ls<C%u?%XJBew
zQq4bsZmx0&0KKf)lNz<}>2=&cNtdbS;c*=eM~Ag*v8(BLO6xjuhz2R#%>6H!>xz;-
zFGK{zy`vlc2~NAtXmX6tldMfmudZd|?Qt4jT}F$Z+{XsR=me$q%k@u=pNf_01c44Y
zTj*z|enC5}eT<K8)88Iw93C9iW$L<M=79EflH=pQRFVx{Qi&C~hVcXnE6&C1_XXeL
zW`wh{((UVS-p7rxmuE4ilh|^_7U$%N^#2Lb$o1cV%W-QT$g#*o#9WTl<95<||69Xy
zbeP+bz6K4JDA!di$rlQtC~k{W*2W;ues)44+5a5_b9Ve;*uTu%Odz3XY>=jSodd*=
z>^po8v7U22F)H;YGNaD~bdvV`^Wc_31eU*g8)~I-Is(FL@61#DI3&0sTQA2Sdqm22
z|M==kcK?rMFVj^o<>w{6R3}-~wsh;n5CZ#~JT}^7Z6$QTEb`aPoLymV0EdZc;7g9&
zbH3kBsxQ(^Xq?Tl%E!?f1)GiQ-~BKXDprcXB$s-jx@-k(yJeiHkj9+HEKkjxEG>?R
z#j|AdmFQF1W(#{;YIqtMMLjT@_tne)db1+8s^Oq!$Jr#Q4!nurX9p!meKQC*mEFOI
z58lwsF{BY2DH&f_Vt?QkObo<DJGe;q@KtHYTv0IM3c1!pA?cejq}~A{W0_HbV3M?c
zy4khKAKIZxy`lT^1WrcMGED)yr>p!)E|inBR@_CK-<WG+ormt*x!Ug6VGynqSn7i!
zy?&_(Cv-?;{G-@)I}rXY9#&-4x>9WDTvzw@yAS|HrJ6!+f#($;f4y2*<FI6&v|6=S
zv^8-LUi6U`$|>>aoX>^>=NLCipxtEd%+4gz3sQ{!18NtV+v2JSOc2&Q?wD;-$^r*!
z<DN%p{!O{;$%@et+~upt>DTDkv1NJrBZj*!IVAFY?&p-mN|KsaEjKvG701uNfJd>7
z|9p;1eWp>fiKd$pMjj-{#+a)0hZ|V`3UtNf#nqQdORt?^)kRf4wFewZ6wNTSLRv&u
zZy(DnX?ZrxLzd34e0|qh2XSYrOar$ZKQ6L0#-P!(x_LTpui9mZQ%G;vcPs5Fl8yyj
zi~#{dENG3S?mM8j&eh6%M{r8Qiv*5cb}4I?YPVCPv-e#*3@Q?a`=WEvv7Y_lJyfr;
zfbyQp0E_V-g0gv0E{xOFHKX5nE)aqL-i!%55Ty>$7cx_Sgb)Z8o63!pugLt&1Ja&V
zj-GF0#d>E_yVLhai;~i-cPrU~=B^W<KH@w-$WK`8U`mB^RGG#Mlqb4%b!VV##TFkc
z{tl5Y^OgKcwe;Os39_{|*O12_Pt7siRH`=W+I;KLn35XR7FWHk=tMn<QlVu;5P##e
zWF~O<REfl4yi|%u6^q*babFny=d-l>hK)*f)4S54p&OQ?j~A8AqV;N^Z~UX_^j%}H
z=}=%d^V4K|?=;S~-5En{kcFcbiH5aHWv{*<)*a|HXLv;6XuZr>2E)r1XK!@wN!CFZ
z%a6Vv2(BOT>;V_*6r{y<NThE3^xbjJ&kAq{)aEhJV#0rz-|Z0by7yHA%-S=@+*t>-
z2O#tM5mnCZL7sV~#LyCnseW?CN{zP-hhtfN4-=9kloy^fKHno1dF4--Osp>}(~w_F
ze4wDqOg+|~y|3Mz8}D?xK(*O5P23ry3oauIz|HMnXbdj;BrdH}yCHUJim~joH>pd*
zn-oDsw>C9+#MLBOy)%Q;z0?D?EJN8QCr5qsvM{N}0&SLh`AK6zsOv}S=r-d*_`D?N
zHV<oXx*~<{@b_a}LlgraBh6fwz=OUKJIJmVw-hmwj|O}_@PCo+`O4KL_$V(9t)scU
z?EDv2jfkoORc4u7yf><-o&3$s_%t7eB%K*myvx@2VU%h^oYJJzT%b+vl$cYX8_cf%
zUL}k$$i<dU>*J{rxATdn-T&8#PrPa*af<2s<AH9lt?4*-b6oX|5p=kdOg>0u7+`hb
zzLR((QW7k<G+)IGLrwd_8Fz#jAV%Cm8h~x0)>R6T1h<owN#J%12<Kk(|02<PJ;S+I
ztzm>OHidG$iEQdkJMS_W={n=3ZTP>gJ6~-7^xqo?P%_c}(kOU0{g<bKN4`R3l~=5+
z*=TCKJq|w$PL?a7irYuGXZmZS&+Qt<EniuPmY@J+BMAwgN|5+X<du6~GDSjpnN*{F
zTDX7Qd^78@M>342JL_(r=8(Qee{z9N)1s2WE(myqVT2OkPcnFWU(P$D63WFUvx8r8
z`y~B^ECek_!OY-9s=={(%gncCO9)Z9%PG3uZq==XF7}ZFD|^|sj#No6ZJMEnf5+3h
zKN+rus}|snCf@$Hm%Tme;0JB8qq@B^81JTqC<6p{mOE-c#>x3AFE)lvb&GBe^enoc
zpyy&O>gso#pJRq^eVyDK$A+GdF$lWDfBzfP3N*B>;aCcg$o~dp2A5>UL3?w#x7bqK
zl*m6|Rz58LuJqT{^s7bF@3Lul#|q!-)QhD%cj%j!9Mjpol^2YfW&zhCd>?QjQjJYS
zIe&#?7<A7-=dW!HB<@ZWo3ickL6HhK*|XN=5^f}I;pg7qN`*KjCLVSB1bMZDSbQY1
z4TwA>YIf9|#YqJ&IA+SZTdeXzkSzSa0bdJ;z3B%gqmR70io3u&1^ZpF5XneFCn^fd
z3+Y&rHaO_d3w-seV92%^s^sfB&V8|qTaox^z82K6st;<>nG&IK%AOZEmc!yfw(#@q
z`OXxCGar1=A&E5T1<rn!x8r6mlr{?O*G~&cW+eG+M4C<mwFi}k{<nA|vWoLnL|ZT9
z5Y|S7?gS7Vk8uPZ33p#t?~i{|-J8p?b_gx*QXbEHaydHoX(XZop-~(Cuz1qL-T*Jh
z2z5j$mQrXs{#xa=#&KljK2oK(H?tugaNd;yL}r~m0h_Ktbl=*UO_9$xN{RO=$oFvM
zry-F=TT|Jx5=iw#nhn3Ss=mnFf8=A$D+zwD++a9AxnN4`KYX|$&`!`rPMb4xQ~UBy
zRv&gs@BiMkk<S)N%o#UlrO!py;YQSA(3N6x@*;R?&CAT6oU)&OatbeYK95u!(*^B$
z2h#p(x-=8<EiBs)Yk01>!6^zY*)Z6s5e&n=T5&#bctNtU&?b+LXgq6KR}t<5C*+hs
z&J?seK%mfM$&)F=;&g)Ig#0sJ+?cMmHDV$n5B*d&jDoqbCHk!dlPAItq3QhOuONid
z70`45l>L3Vk@grp<EZ;%!4t6A+(69uD}OOc44M_E-#&wvyTnBclN2_2zSk)%@#ep{
zfRHWJ*dj|O@%DI+MnFglRV%0($*@%@CGm#+JzQ->^ras#OkVX|k6+<GwV>9cREOnF
zg?fv*;n~FadxvCVGy=snq#BR!HISyO*CvW<Vidv+5YM=vlT1PHHSERfMJ4gp<^)!m
z`58(qZ>kc0!^i?rT{a>arwj_De<b%YQlU`$PZmZBs~FmB?LfWg4_@`r-(0lg3FSSs
z^ZK77#9%G+1`TyB^iVLSi`dKE){)b`tyzcd|7uY{B0mIusnWnPC+Z#8E#egY@HsYg
z+id{;`X2qW0o0)Efiz^FiLkt4*@m-L?&=A%#3X&86xb7c#;gT-ZuCu%Dsde-&($RF
zM)zR#XX^`LBUaCp<A1{!e(Z?%&fG(|-RZUhe+RjAmKgI-dd7P;=BDW)N{e0xWF&Es
znipqIN&JjklW2oQZZR01o+=%3=%pSW)ZnM}%1B~TS55o&Qio^29%4!<k-zxcgIFcC
z&n=AcQfrK@#1sKF@$uJ^I9Al`%V-8Jy#9?-iZ4H!E4>EMq-24{DV?4NkMT2G_{9f`
z7jjigJH<d4Q`v-~q`D0fqbj_HpjE2@MsoHQk*>he*T-?m@qkx2?>>k`fea!1A7dwd
zkqU+)ZRA(Ut8kGu3+2$ur_Jc!>4prU$R;TH@k<=gAh4lFP-`BvdD{r_#4oek?XvJv
zYSPriF(Q$Q%(Xl>W;kPPs5LCc%iW~XXX!1$r30~D>rRUZYIjBI0lP)13iIc6>swRn
zKCX@4JPpqz7VmVV8oe_t8O_K62G_SvM@PQp_=8dyYGU1QXk8Tq#8e0JDML0oZjsCF
zM{(z?FriK+)C%Be9(SO84o(=-%F$;tBB5^BZb;K#M03?>13T6_Jx6TLLVddPb!fEN
zwmJ~C0!`ECB#4eXCBv?2W4I-;#gVE-m^)n9$~82t<LDzBkVz)r#V%vl6e5Y*TRK>*
zKBDY$zIXIDq1a;PzLhyG8}VS)@5esiqYDYPt+`%f?X*nK!B!E+jPP{&(e11xktwPc
z>AL+J@fuhq8T&Cs8ZzXy=#Zn<%u+M_n!lnQOh5`A<dBD?zuOk2=AWwmY&=s^a{Fj7
zu0pdC3=S~ryZkGpnt|3zUJRF2W<3_X25m;Pmu~)Ec6N^&C_fy*NNx78Xq1ifv}w69
z4=6><UG(+K_bPt45{=W-u_;&st(%0_*>So#x$?+dqf3o(G$Z-t;ZmuAWJV~@p!>4Z
zHX+e`m*=av<?l)c=X(0Lx-L;`FsN;XLInCmHhX(mQB#l9*8W=Lu046TLU?fG?@I20
zk8!}eWpW{}CqNQQd=l#C@9)w3)-_z1<v)7$+Y_LgpGNA!Qe1hr2i8N@cAsuZ#`(V=
zf6)nA_yM{5Cq}(8Ce2Lhi>Rm9AWY5-_Qt{U$r@%xb=~$f8go1|JpVzM$#1*2lyZ!C
zO*m}M>Bk?xA@ztHMY=E0H7Rur^Ni`V^)jHDs*KBUSAc5v02Q-fp9fzKGJ@`4HGlmA
zFUl7AX7oY+e*@<I%-7>%B~^D7MLW$negyY9rHh@;66N~rH&sb0a@3zJ`g$ri3B!Vq
zIjl}F@u`~?vDh*yqiw^cW=FSnZ?=+D*2F;)r<fgUGMBdZOhYF2J$J2`vn=1ax7Ua+
zpB;#GM=yo=hFx|R3np(y3;T4C+Li-ilo1zo6A(f%ojp%_shA=&tzE`?72e|QNuDta
zh%F5GtLVaLGWu|tct4aB6)7HF$^Kf`^Fw84N+)foScMh?b9327Ri^M1(<7Yf-&z0Z
z&2KT7&hdPSQT?(36S*r=CDz9pq<g=$tC!)la3G7+|1R}fw2ljT&=}|Y8}h7>pqP3`
zRDmEyKYk;B(RaTXgh(A*-|l{3;sx}YYqM$Q7L}yIvS*C~7sbK6JKU9rv5Ed|GDSMS
z>fFc3DqiklF{1`8V@sNc9(^5ZRNjdfT)k86m*kz(o$5oy*mbJ6F~&pKV&AeH6`)t6
zob$cMCwRn8{~<I)5BY0hx>pi=<5Scq;56)CDkNQBd0(Yn#yjHun=+GMo$vjW>KU=e
zy&5B8Zn<PGG}XHX^`tz019;g!e8#=?_hOYjBHqB@?<0f07u6<hkJwyD_c2c4r%fh-
zGwuPErtsIg)N4Lcqe~9)z`aBdkt>x=`ujCGqyvnaQz!o9w)J<oJYCCB>K-fW_diz<
zN`~ep1W99<vOK|KeizKx4f`iN%KD&*aAf-Gc3LvJSE||dusJ*OZ+s{rymF%o-i_ga
zsCN<G-JzVAIR3H4WbfjN0E;#e7N>9)8?j&-e7;b(B;nLZOqwR{qP<s7vm0b(XTL!V
zqG6^M6JjO32VTOvjL?mDSqB=jCLf|~ntZ`KuKMRDD@(k5dgG02TeJQt>JOSnNp=RJ
zFU(cWt=6R>T`|e9i90R7JoWkrfI5s={=Wc2Yu?HKI{p0{5AklCd(-6<yL8uZl;0xn
z@8o#7RL=y@Qgr@tL%Q4{4pgp=#y-nG((<V>HxbRF>cVsJbK3WK3Wu2ulrxa8UKT#=
z?XLoG2&1FRF>SLo{nfhh8*q2&g+kSN-|!EipYh}~?qjjq+<5zp-T_NBUv2ZM?eC?O
z;+@^?`?RHrb6$+Jxp^d*_&~kbl7xZ_ZxZA11FP+cRyNJx1@H3g<EuD;S<?uBQw2gF
zQT6Rje|$MH;$AizT<&US-ADet)a;zfJ(RTNC%+0=I-gV(s^XsBzNn#4&_^5p2p4^~
zwy-U<kZbzw|1}auidZ#KT!ofGT6bPBdu096wv`L-f`(lnF*dj@YEP>L0ElASZ)z9L
z%CJ{VP_2Bu{Xh=7(xrq>v#veu`33gePfjWK{2QdQKVP_lD^Y8rl<Ez{p@5iHp!i64
zp=h7Q8U9V89?q9zgS%G*noEB*+Tv@j<jwAD&SWH>!~;P}fg`pKe#4BT_k@F3kZ-OJ
z(f9QBcCy~Q+pBl-^3aOxlr6Yww$r5J>Q=CDa+M@q(7Jdfs?+n<u4stUGkp#;8UT)c
z$^3c-p(6bKI0Wim*({W8So9~;4Sz=)!e`ZYFvUkc=AWXS{?@yl4sz#&(}WyX9MH%M
zl-RQ~O9%ye9UL*o+uuyey7PB@&9!4~(t&;2Xoy!NuE=SO=aAj=Yrvi5^%DyJcGdV@
zJUm;KZthc<Wm7J#wRVQbw|sj$C2ttV<+rx8(jkcz>#^U<p}o^zHHi(ian)Ym@I6^i
z_*f-P^;UmJ-*`6H^Y7kvu=*Dl-H>4cp5M5IK3#c@g2<1*OLxT2%X`o0nJe>$izj>{
z$w9JFfbq5+S<QeUtLwTS@9j)r%cABb;+@xA<*Tss;XKx3n*G%h!3UFBj^Y$PEGfVX
zHX<d!6S*gQ40Gpc{UEG%$a$U+Q5O9<lGHmLQahVhmP^jtioFsafKgWg8|5Oh$0K2U
z>Z*sU0Yh(#|9qk(-sqX`V&Ly@o4@_oGccmA`o9jfAng#&9)MIJc|=+!;ZmL2hmlMh
zwwhWK?i@;V3f*=BEX|Mf+SajVg%X{>LetY5%Pnj%2Ie+d`5^{x<-Kpt@77!zF{w!^
ztVC3UiRh2l!7R5XlrzPn23A5kNTjCQSDs6ZKmAQ`gCoHxK-adiC_fs~t7B&$<*N#1
zrM}vhYCr0}hXKbTg*O#V$H!0%-HU(`0PiK<n5eny!4r9KsJWM7lbaB0QO%qpgqV5!
z?^owf<Zxc%877ON+Px$(6<F@T2gX7@FNT^c;ezDG_<4uJ2HnwV2ug9!vs9En1pkVz
z>EW4Wf1BmnQ=Ntk$3DG(5pQZ?(;|)h6Q?M+$U2&0T4Tj^THx|XRnz5Ny@Knuq2(Cd
z`gKd<u2GBpOx@089hucOG_bZPF<|o|U-^bT!ME6wxDMZpm11~AW{5F1V!F;f7)mEf
zQhs{pKVA-_ne^n&XqSJr<3uQowB}{{TLN$*HQM0P)JMlI|9_&3j6xtBD$;nR)$1+q
zUN6hBpbS&;>luv{@Au9j4<n=8t-6J`5C@?jA8Lox&=o4*?T2ZWcw<FO+j=gSkO>bJ
z@zaTucdU%R_U81pv(zC7@Qvj$`=DuV)<wi+mi=&Av|^<T5A)rGL4EwEXMns6*^Eo{
z3~99c;fzt)`udF8o8Mv2_tzXV*<(ed@&Yq?W?x4*npT9(R*yZ&y|1pGn9?NlqV(>4
z&QQr?@HyJbZ@FRZz<p)aHHg)hyJ%mM_*uPPaLFH$G!|L*(b4omdnfI8`2?|FtU;Tl
z<baZkk<#sN<^XivJsBko3-oZr)Vj6pm`KA#sqchGJ0(QKkMp`weJT}E)$c@l-+D8A
zDq^9s66e!lH!B}Skuxhd$JzQEh|=WuB*!au4gb+wF4G2|xfx14yjG?pTL&MIt6<%9
zMth>W`2^;gvK~5uvW!(2l);AlZx_Q_%zXq}Dz|&~cdmVK43@dSGE?YG#zk_8Mb&Q}
zVMD+$-{wPstniVE1oi99Y%q1mB;WMz3Q42`SZnaf_{;0tLY(hCKrfhqkzO~{T|r=d
z$-@%qjxq0Dj>ydEYYZYB&!OJ}K00($ib4Pq@7h(%2@+1%aW#8fq*kC&QqN=H6iw*n
zL@;l;=6hmXkeimK!F;>LT+8OnZ<;gSHx-Q@F2Bi?Ce)Q8?GTS*UDdRuNQW^jjzd@Z
z@WgxjTHlRX`=GOrC{L`{$d0><b`b@dx*uINyBqrGYQgm9n9JbkjE4K3>EA+%Z9FS`
zxl%4PDVLG8{POP0-(nSzXS5WJ*qAxJ&5uUJHPrBOO<~=u5p6en{^Veyx+}gg?6ol!
zF}7Igo*kp7D;6WDXNyy2$LTLZvn|e?)u5bHn|Qe%TRQ78s%h$CcF-X0CrR!m)owQo
z-ni9~f_NV>y{qVs3H2z%6JHIYbmJ2$b-}kHGomsEW?0tlu4jwg7e~VYe(LS2*aMk$
z|Gw&&iaC^a-7%pB2DQ?Jwq8f=kB+GG3k3dmnzszj92$D^)phFmD<y3gGZiE1Pie($
zk-06<v2qsT3Mgt$&7m6`Z!+(RHXuQ+A(XPi!-)erpHSG}Q)9bzstqG3MT%#`U`gg@
zZ`h9^3K6b>aSL}D!l8BkJAk>pa^Y+403rQF`qsuOpI*xvPW)_mH5F&xQnRwqfi0Dl
zjd+=!H;+}CnC^eB6C~wKiJx}F;8PxDN|mk8f*vm4WTtRX08@bom~JAy0pj4V_KSi`
z;@DIqqT6waLi*fIUnNA5lrLK1UoS`j;DULZtn`+bggAmNYHHhv{5D>;+8I=l%>k!K
zJEX}K(_`TzHXPVhNcR{biaWP_^1#pCLF+tCxdeU3`%7#W=iWzKo!bFEM9hAVM_{D&
zLP20`;Ip`GA!1ZYKnrR6)Qe=gL|%-sVL8f|NmX6GIRyA{qjN`Orcfy7eM0Miv~n4R
zxLj9s5bI%1xB6=ZQ~k{kg3olhyahEUY}+BvSJh01S^-ebT*px06$cQW&SQ#y<-Q%{
zIl$ZC`F)1v=^y_V(zf=R-J%GaE}|q?BHz$g9oW67m+L_-I9)hrj(e|1e1-ICTTEuI
ziC455B!x}F`xKT<A+N;jCy#z>a9(#M6H;_STz6YGtN-WU!luis%2M3nufobI4x%%W
zzWN3Hy*T+;8<5v@mB#pk<SBxnak~)q$~4)oB(I2ThE5$W+MVWgWi_6Ns$B&av;z%h
zDcWEyS({KDJ9N52IL2RdzV!V<GhSn&=X=eAtwtCBHh*5gKz89df^ytMgGBwVG8sYI
zm3hzDP5g@gRonmVG<Wy5P(97`$7LqJE7wPW?Uqnj@V(EHCO1(2?R#9+k>B*eq^irD
z#qaqCmtfn3Io-gm9rTAd$3%*R=1T*RJ_bpph)@K+cn3Xfp_^8NF=C6&Cto`783-b@
zBjKdF+|jR@O4&@L9iyvmPJg@(FTQxcP!-HNec2g1T3WDI_Tlvbo*j)e*kCfZuM1Tf
z`r45)T&>qd1Mp*>gN2WE71w7r)Exwmki1amAnqdQN$WevraFZ>E={lz<!+A6bx+X6
zRkktUChlqDN8g;E@!tT~p7A69z@}+98?>tG6tLn01BK~!Pz@RduDEdXR{^OB+Gre@
zPb9y*n0Ba}X08$Co|;SnmFx-@LXb4TjV&y2#W2>%uqXv5@itzjqr2A|Ee+dS)BZ1+
zxi%dd)kcVtNye?4C?>nLc9T+T;4S-m%((fKT&#ZiTLAG}O2HpH)hIR5J)Qv;dt9z5
z7Z`JG!u;P4xB_&+{Rm|{{_qKzk6YR|4M+E6pRjqT>$!v#TTgG*T8uE`ZYt8zyCM?N
z%<sy*No_G1amsRiX+n9ZbIp?xF0WHSIcw1~O{=$fUU)hg8-~5<?P-!*+QCqwU#HbO
zp6}>ji;3`qAEc$RlBgghRU38ub=nhR-54#Z^h-DaGhuUP+HrINGmn@3-)s1yNPDDw
z4i$c*5%i0>fAu;t5k?5bI(yOz32_%M<NT9}Vv)+T6fFr-u-#1H=O?i_4ciJKZikQ@
zB&7fZ<{A6Y$Gfx9Qv<F~g6C1LG*4m1ZQ#YKdD~z=ku9AKf)D1z&P|r~A2s>Hd?JJc
zDeL-W6An`jc|<ODlfBxvGqWxBY2!~vR@5{2aq4OD#VQyP1O?N#eP{Xn&3I<2o0Y6i
zm_$Sn<gwc?_Li}RXYJ3gVM>85HS%Wa>IDCALhN;V41QeSUl111pG#ZKw8KP&|E^Gi
zkA0ifgb&gK0fjj^{CC)bC#`G5NLK1#a)MtJf70H%^Way&f8B647}R^V+CbJp{Q!fx
zs7$5vO<91lyuo9Y(Pa-YaWs6-5!I4_L~pS^O|B}82JD!hxBwxke&&HqZX$DTWc~T+
z--kwEu)_ok7q2h5qT=0l+ueYe9hvcYpYG>%6Mpw%`V)Gc0>|nlTQ5H09ej^iM%q&)
z?BSA#^EE*8*RBZv@W=&orU9FnY(~05l0{6i!&>m8Bkx1|s1LE5R**r)eYAJbswW6}
zrP`GoBS}~#JiyZ-H8dqxMQ(!)Lz5{6hY8;Gt4?9lJ`+q%KsOn_8*no0Y-*A*6Mbol
z7b$-)X8D$x`=(iRYO-E)QmY~!>RHW*Ki)1^hv*`T1VYRaz$7Z{zy5<Cbh0vqCf!0o
z@t^L?`<nBvzjMsD=zGuZvlA&5xW5y=kI67);(ccs1XFj+<Ba>;ZRvA2=`ogeXIy8c
zv7Ri&;8jjO6x$RM9OZ=@2ER%6+X|wEw#aSZeu&BCTd}7i&xcKurZ5uz_PyGb!u&z+
z3Wq9lL}FFT9dnq^ic^pY#2?NVnhZUjjhdsEPz{ltJ=vecCTq<GM>AkN_IBP>&OUdJ
zcQq^30GQ2TpTBT(*X>jQbB%A6<t8wDfWfW~_+(Lu=Pg8P@l@M%?XqPY#}u3}=0Hwb
zy+RtG)XF!C!b<<x(plRoZ~DqF_-u2ew~AoVTXs=&@tP+$G(qdgwO)+H1&2-8Ag>Ze
z95d^MFZH9(5j_m2hIMzs+ivBa3WFll%d4k-2z#D7^+|=R-H#DYAym^-H~c+7&_7i9
zvp<SHL6)@-u$@m`PMYA_LuEGb%h5KH`R5SxscWz*u!ASNP-V3`ecJ+PcT5E)nf#i+
zg%lPj1o5N6xqDi&w!n{#<uJYl;N#H^)0NRxO0&&PwnI4mO|4*AQdCbhp*t_ZBu^+R
z5flsb`>!*R^WFq3&X0vknP#6ia_<vcPfe$_w5}$m^EhJN6oPCRfb5rMrOq8(cp%Af
z%6>p3+$H2km!I1@DRI)!N;Z;*d{ww%_uoly`hX)%t+J9xp6n<(2cjlU?i(YzYEo}d
zcA3|f{WoBb*tBUnw=09B5+b;WdvLOHijRlPAAyMYl_Zm?Tl!B6cCvHl)ZC#e8j%fU
zs&OLT#}d`un}syst~=o=oZ@RY7792a|AM~fz~|Lpn;i+QLwz&d)OKEIkP>;JID6Fo
z?*vk*pc}1}&OgRNFYd#}H`Zn+UL5(rA?YH*a${;%#cmFPvcM;C9VzCTUOGsUQCqry
z%jXSN*IXlI8{BO$@aAJc?ujwl!qFVvj(<@Qh(3)?vrH%g{_v?_Hcv#{i3FUwg7z9D
zq*%9$*-7q(uLENoX(WV%I95=>&#_n+=QJ;p%r*9y?Y-WVS?A4u_1Aj)kVv^&5Z58l
z@If8f@&XSo8LbhUf$<L#as`wnb;G4XD2z?luXakZX5r1bLBsEY#D@z%GbUWZcAq%!
zUV<q@;)%ClVJ?jp;Lm|)BYad-kAAuxS6}Z6qO&4kRrGvrKh@pdr3r)u-)Dmfwjc5}
z*`ut&%J_=OgM`IPi!q5n^Z2L;wmc1_)}^^JmD0?n#;o;6lc^iUJla~Aqhe;ZAwYf4
zJ+lN8ILvz9z)rF>(pxXW9sTK#Zz2{5cs<t;_PsONjD8m;w_Z<}kBV4VW;z4aRVH*}
zvY+=As#V~u7#<}M+4ukleU`gC@H2XimutI>g4oco=iW0N@nWwd;ho$Mrnq>DS`;xh
z$>1!#O1+FbFF9tr*YWlBEWd*ux7%1$9ak(^@PU*l*fS(lL=}o`k)ucIWM#P~e_c>_
zMO<fnBlL4``ZpR#=B>9<`Y44et5vi&Gr3b9a+t;fDPMuXR1(P-w+i_^@47BqTL@IF
z1R*V9-U0I0u;2Vmj4&9PqxI1&Xs8nFa-SL?#{y-b5tyvoxlf<lKg?W_`pfD!NP2i?
z3V0j3!paPz!cD!mC$PKCuRS*v*_{s+O<AX*bI#uIozNN07OKho`F%)qB#!M{eUv%O
zENdTGJY-2e_Ahyi4~Ni26clIq!g89(?#u9TD!b&&Bz)NTGr!6a$q0q&7}+|hL7A0Z
z-`)SS;$4|isfrjXE$VF>i~K^Pv}Q~&UBftA+4{uMi~}4%&yvi*<<Zg`OuK_!An4VH
zo#<fMhwRcdA=qvz$m95V?D>qJ<<mnM9>a@Dch0g$X6p^-K~~FOM39Wjq$&TP(?{r|
z+~}>;ss!Cu#{S2vM7C_pVrcL?XJ}qn{{GRDX;cMSp%dJHW?$HU1F*tBZ2GkH4$qEj
zh{K-Krtw3Z+*#~%uNRjyKXyJRpaxQFyqQd;-Cz3J%_=qlf_pc`i!2PO9ja-Pr9b^$
zBcz!2niJ8`1Nf2k&ax#LUC2|eSIys~uBQq8$YL`#_0McEW{A0kSnuBL)cX4~UG_49
zG&qyoC>4Fa><76P+HSS<Xpooo%(aZbYZrd{x6#|%o%$gl!+1W{-$SA}`TjzrAktS$
z39*mab&~=}pEfM!jyWycTpf_Zd6&iS8*rGviyq&Qn;Mx$>Anse*dW(URL)YuAdp-U
zMsw-?h0K5lyi(uiLxmf*B&Y}+4tv`uGMWUs?D1YxFYk^ZAa!7kr|LpQ>e6<zb0?6!
zL+#}?O+y*$9i8{h04r|}t%!y-iOshu6$xylvf|VKg--+?(%We#+lVOv5Dj;)4)tu{
zfB*h8k;MyFmJV|CeF+Py5tb6`2E^%WLHL`abvchMwYbAf%%U(Ra9iMD2_Sj4u%*KP
zk2fiKh{MbQ3`ft@3rP}#XtjR|k@Px}G%u1c7=Zp*9)hm72S#uEvnk3hAE(645e}nS
zB1F5d+Tw`$=Z09x4EP9Q8-UE^7I3gIbZJzhO!Jg(*n^-Z2OV1Zs~XW}6+??nCeS-d
z$Qg?fWN!U{(@POQ`)@#X>)g601OLk3J%c+XmC5;=AI|&X=6vGVCtP%^idK6_{=J#T
z-v0e7U+|2be)w0+nEf<A9bpGkM4Q*&%{Vloo=HvZ4j=a6OO`kWCll9r8#yz=6lRfU
zARm=L<G$>D_Jo4{xa3prywR;t&gn%vzTQgN<I5wz`faGDKz7D6k5Il0pStbZ9Fhm!
z`driKR$<Q0zP5u@!#UgV!6-7=joqF9+-|adIqwn;%9K=CJ^B0zl68CZgbQfu?mZ0E
z2y^U=AjSInJUxcJya=`9B!EEX@I#X0;}W=}DnfWT;r{D&6IW0=JH%5=?-oxg&bXq=
zMDyG-Jp|Thaw%>z>n!osR;wc(ai`k0de_XI2XYJ?vOHVBwFI1-^3!R2L}#X2>=wE9
z7Dj{}Kb_#$*=|=pBGPBPSa>{v+uWPu+nq5ip}b{Mv;n6D_m8~!g!_QGydcE`!5vK|
z_!AKt^2Mv2>qA&+Iuz^FrpJkTXwT)~<H6hDCs>agDwV27S7>Js*DqRyuU7&I0*!L!
zheo~;zwX~|D9gPJvo8V!_ionb7b}E5<=sLhZrgu56t`IZftuUvr5g3zzZ6HcwnV<p
z&_lflTLmQ`pu%ED&6NPRM{#t!PKa?|<Szdm&gj0eC_v@wJG>(rh@S%`eAH~_hRZD5
ztQ@f4ZDO47B(6B3BtzoYg`iKY-qTi4xfr#or3lu-iTs0;;Tv<6RQT720WCag6e8G(
z|6COWABlbXjO86Vav*PN?J+mVC#b`0od$!Y;MStvnVBuWV}Z1Cl{&bHnS6fub?#La
zfro!5PZT6^q!I_(gh!Sp&RxCWYALt9Hb3-iY%JB`cf(S<*H?tj``|qZ2mR@mkW024
zyOHD+<{$hF;S`&2V{4RC#>+g4g(az1Vd+_~C5|nT`rlG2f)DG_!AImgYE6H^2{G4P
zE6eLjdC;kV%7x^`A`?c;Jv#Q4uBW#mj2P;+A<lgK+4SU5A6c|Q<tgwQJku1pbx0#r
zgv}d&T663xENYh3=^xabAY6I|fdz7g83zI^wAEyfyct8vAFaBY_3W*!LbVxPI<i0i
z$a=zivI!~FrMf?tTLQSAoTuKrQaSC&U`yL-e|_><Zg*$BIyiUCpHtr0c-~ZRah%Nx
zs9`{#>JjE_Fbh}Wnp$L{O0taWHlR+GEF@tMI<wpB8OMs!>Z5NaNHpOhLXNqISxUDj
z@s_m;L}jo>ih#&^wV&x1|FZQm)jVO7)!WtTnh^&XccS{oPBZEV%dSoVRk5(ez*x}=
zGt@OJli-tTx>Ns4n3yy>Uhf*dwVkT0j$?EtGxM*5_caZ?BK*O=UixllyKOMw%uhCH
z;4@A=c?+4LV<Rh-FX>yYceL#qW~5Q<$kVLQ@qa8r8rTu-hPX#FZoYT7KQH*GFg^O!
zBr&W#dvn%-Pl6KqP#Vu5a4r_5<HgoC&g4$P=C5Oi&IVHpq6SaT6{m1>e`ybYQ{nkQ
zd2@hc%;QQF^`3fQW<6x=fa9C&wMBb>%|_7M*woDi_46Yp2jUm^Ipe<o`HsCT#87KA
z_exMCnla?~`H88rWSn>x6ej75yJUPa3;h&FqZk?)V2W0cZeF6U;t5Y7O^s5M=H-n_
zl2$c?nPhv*q>PYsTeV?j<?5GfXRb@Nf513n(R?W(vgn^3(iSmx#`iv&LjEJZ$YKV;
z<kacbDN<}uXmT_QE=`&~yRzMIK1Ob4N{PV$5z!bw8H+c>+l#cc!^U#$j#TaHF(SRN
z%4)S<$YzfgAiZ#CDvgX~&7%2g?oB?@dF&&Z%rn7f^1n5_bWSa;*b*OHTIAPj)Y$tT
zm&)c90&zm?f9_CLlP=!vHsklROFQoAaAvrZ^3Ro23M)D12GkAzBFYWQi<L-{n3W4T
zBp+RrNMs17c-dOR*Qp<7J52jJL9*E>S-$h<ng-h1SCP#41#4>Q`=v`Nd>JgpmR_@b
z_Yc>z$8i!h>RSf|7D^8NqtRBKOfY#g{9e0r4e}&}14&+ym2`6ypoY{WCZMlk$wQII
zJWQdfA{ooRH8VFG7~iq8Y^>~sBY}Bmt2fNyO>lW&FBgakNwZVvyGBrX<RI(TG%p2v
zUTt?m{|7*C<$aiq<)ea~mVIq=tXlfALXCGcLJ{rY%8pNGb}CZL2*T7g^1AD}g^0Yz
zc9c%p*o&JLJ^DWP4MSw;0?ZRptWIJ}1AJ_8qp>Q{wq26B_l6pK80-_Bc<%`e1KOpk
zX2aKJAi%Vz5bF;qSR*6Uj?5-vr$#Ss?_tYirPfa|AI!)=h|w{ETB|EKKLR@rM|XMg
z2%Qn^Sr@ZDi){J#YHIGYF`NkMxxPbJn<S}Gg@TlzeYr+n@weBqJ7OQ3`(Do#1tl7T
zo!vD9TazoKlV`HqUZwVl$%c81XQ1aTv%<GeqIlla4b}>1MMB`*YTG;CT01K{6?O+S
z7GkrxG)~m^Y8rQW=A|I6-5#k@2?CACj<3<rx$$4Wp}cm}I!-8#td?n19##)$Eb=fl
z^^lyZ#1tCCg})ZW209KA)xk%pWl{n^({J7Iw7&$sd0vrOo%&OZ@Asj5V{B<pf39B3
zg+1pNh&&<%l6cQN;inEOM~Cw9!2&(?G~{45z^BJL2wimLMhocr4uj)rhNcOU$X(?N
zjrEK(xYVXQx3mMrrTi)APj5pc<SF5cE%!qRY#iBw;f4+jt;h>d<RP>Ph}SJTajdE%
zL;#RTt>P_^NSyzN=5Yf})ch4reBqRJ3oo`ih9Y|la)iike@6lKbL$~bDHp44iGVgS
z^T2wg(a!;COwOfAF0s7-27H8!_lI6!x^C>YCH)rA^HncH>DZYT4MkS9?C8Cf4q^r&
zG|jKfp-=bdzp>~aZ4&MmI(Ns|_`CBa8N}2@osVtPvF0R3!WNnIL9Y&4*|P9pOCWf#
zA;Jiwfy_|6a0-?VLdNg|*B0Spe*GyD9Pu1Ib;rak#jAJNhu8Q9Ib;2+2Uh!;x}fBD
z+`p`&p5>Ku5=C!+8zyzIE_APHG-I}KtvKbf9|~VMH02%j9Ut)vB=L^845%JiJ@l_o
zKf+`$F@Ui0>xW{c(1~iw@Gu6^j%9@K-p?A54z22UV&fEF>Gm2u9EuogMewnl$$KAM
z$xAVFUPil#%$0{^*DU`4(>qe$a}#Zp^l8Ji46R$Y_ii-j{{T$eB5RZ0ZZc*1Rl8j^
zD<)a+pv0puIHT4O7<|lFo66UFt4}(PAE|Q+$K{jwQo2w;F%N|Y|7Wp(*8#G<&561i
zE4w9jKA%I<+-w7qntL6d(q!#Uf;Q*h5I@yCmfrCp)IF@C^jfl)`}wj?ODYlmqYHTa
z^_eehm+<P5o<B>YMH*QZ>-Ne=;DGeCW>I8BI6QV|eg2J)JQaBX7K188r@vr4ey*M!
z;$ZnLHL^JlD4Ro&!+w98CLas7iHmxheVTCO$~4B~Ph>*mYuos~2BR{%0ApuQV}F&i
zis%chsQbSG6I7R&ci`0#F<BZfj&y#9RVq2c;rPy!@BjP*E4FOt$de>}rF$JP^N(Ri
zl-nBvKf-mYTA=ocXKjI!X59qh*#8Ng1bY*aU2cqSUg8*h^9~XNfuq-&e_HEI^a#K}
z8r>#VLPEV0zF=-!5I}}zN2Z|k(&@pc=hU~Q@=g1w1`iOVx#+3upWktjM~9`D2i3`@
zTIYZbd3>D6V)sm*p?AHw1-$uMXIQFiyz;NxCp)r`YG~%pPH|Q54po8aTz&iEwK@aY
zyr{G+FHo-MN0iZ|>&4R(T<e)kSRpEW&(`e+5W$-uJdgK#<N(=Cv8k-`h~LO(u1?7t
z9sH65`}%}RyOnPYkN@Yh7jL>rb$oCcyw4?~#Vjl4bMF>5uE8mZoKZh$E#|(o?&2M&
zl_PeqqaADlNI%6N9jNV(sYe8<MHuydyK3^9f3O<PX`AXnqEc-XRu7^(RNS;!`pbEg
zT-W9B7$6*~sZE*-3Bbkg$5~BX#x(j4mXdd)1;e(l)w5$-ZeR#PsGej1G`FIlsycO+
zz+x~5T?86bK`GLYktg`?go6Yk9u7z!^q}<`&dJt9Y6!M8X-<0-;5hNAv#G>tY=x}v
zM3_Em@3i;M_?siVpx*Vv?lPjqDM4G^wPQxBXZc0=`S2P<;V+ztGt&x1ZHAxE8dVX=
z*fc`9sj>LG2Z6-8yg`kqDM0(EO%jj&l)5FAoxvgb*azjYf8`=en?qX*9>!ju6*2#8
zaJt4$bD{qFH$Xn-`F3(~roYGPEfW%OShGr!@Z;0|N+p+!j}O(gV80ZP`Utj@Z)#^f
z^L)c&a#qBz5t(VqK2!;bpSfa!@drVQUE_LFxUAmu89B&)JRdIjp%WuYR6V^IJTbXm
z11sxh&-;)qv3hf;Nx6ofuHN1Ve^j8%D#2S^{!kgF(c##&2~y0<%S=mz2yp`-*k|<c
zO!n?Z$s+&E<Tb57xBMjB&xl&gh60IX^*jXpt}6$9^K+<wdwrpWC$c||9zAy6wRBa1
zul8$6szt8W<ZtJo&GmrdORyO#ueb%9JWFqTHa^!{?(Z12v#|exRwD?=a5zSQcC63e
zjuF?IEd5)12xln23IpV<tzh=!?Ox&ygTBa*ty1(-koE4Knq})Qf(sb1i959q(y^Sv
zm(NW#-(1Xl?--Y#Y_K%2XGSwu_Zmp_Rb%Jvs=0EOP<Hic)!PfAYt8Aci*7M!ESfy8
z|HQmwsj^aekeh|HpLoUQ6BJ6vL!P;Tt-mnK8LAP)>|>KXbw}IwcM;XoA9QL3x6Jb9
zIHbbqO9uUJ<=vJk(AS&${#h0wBdP`=4*PGJv)k{qreg2u?D|*O2vlWj$lZ2bgsc?G
zNvhKE9i1)CojdrD*;yFJ#@x}#@}R`q8#E@z2O%X!b-|Jy3+R`yaD!?#wN^|sL-+rN
zE>)cY(`vu-$H&dl!;C=N{B*JfaTLwfYn?;RU;}mCOA}~RwY_M{c|T|TZQMduN%(`6
z{f^uyp)pe+%v<`{XqT^`Sbj~cFAD$vo?gzDJU;#4T{mxem{Q*=yjL5y=EYD~14#92
z1-4$Z*8Otx<Bw@)bWO5T$em^{^^7T;m6X1^<Y4-Dqds7BBx>#LCyr<^c<eL+ebhkb
zgyHEOJ<{}-Y5I{<7Ca$H>piHN^g5D^DvfPm9&I1%Lv4CN=)@K!Y02@q_hd~H7BPtK
zHQSCqE^GNf2bI=p={r%A#%S61-txo99ga0a)jR6GXl1IPcJ81DTWRyYyS!3-k22L=
z&4x$&jEika>swMmk*RPrHbvO>^>4iI95Fk_0Av1CnqtbZIONT4;)?5K8nSsZV$ZYQ
z8ZuL;g~IJW*MI*RBq}zqTxbe59P$`UJ2EG~OHU>*{3H)9D{DN%#33gGIiA@$u_CIT
zZ&HnyM19gD=-NK^X6aWb=#&z}2KBixLKg$?O7a^Lx{~qh<Zc0-h4y%8_Xw5hr`IJu
zVhFQL&`^bs_V@Vfh=SCiN7>Ti_a790pounP(Z)@aKnEI(R;TO4)6EaEM&Q)C%_hP=
z8~>=D+fR??rluOLrqM!ucBbvJnk@PvD_dE`2n0^u(`&zHC^V!!>uP(at(z<e^%v-t
zX$wTr)5eOAjo|NQkjSQs*jwf`3y&6FC}+W<6=|upvre7Zg8B+{rIe=Qe=T{~jF6Gm
zJYc`ch6GyH?`P+U5W*?23c8UQ$Fe2Ee67J;iY(OUNA(>A1err$9Kjbai3fEZ%Cr#4
zB-#u)23zYU@93qt`9LCKo~z<bTbpWwRJep=L#-Fxx?8{Aia=l5JVnByRUB!=D5%JE
z+hsD@t%cmrqpbIDWDP+(!D7c@XuRHPp!;@NEWRh6ptt1<VN=p4ky-6#rayIH^|WBL
zd{i--5XDl^&TsEk+Yc3)ev6^BvZHr`jCfBsSGUD2ZFkOGy*V!PZ*5QKK5fk1>d>3M
zS&wING2P&KDIT&l$fYAuc~Zvl2=$6Qki>e>${ZMJxH&bhB5a{a<+4w{4i%hy;Y-cS
zM-w#IeL2>fpAfr4xi0WRe$~^fJ0I@+>56Y=ikBa@pdeL_sSt74Yjk1j+(zcZsmXVB
zqOe=;#-~>i;=55D{;w*s8{+J}t&)rc-gFzM(^GtO@ovMbdF2JtWTrH<z|VA{{qZDW
z4~dDr1(nZ1Te@SkAk|aN$vA=di6S3?d;9`99a0XX+K&zS-j#O0SegTtVTAa+Xm#JO
zpYMsgTM;WjKen(c*Lr8F0ajTYldBQ-FfwuT0?|uWs*B$Jr`zsE9PP+sh>DeggU8GG
z@<J8P!^-pXVB@+7k%b<6msL7tkPF_O_s&G?v>jk0;oOZOJd`@c_c3xyW*&eD_`@3$
zpqF>BAGDq!-u9T<sO*fv0}XO@*vkl%=}xTgH8}9%?u<whYcV`pv~y_iVS>8I|03^o
zG2D}6ptTRxq`o^B2@KYPE?6{Ti}Wp_;6w<7S_^Cp>`#hEk6F)-285e97XBZ@aq!O_
z{$Fr5kEAyv^j)`CbAALXm`(!2(wv*&LsdB}HA{(gwDZfs3InTdVV8b`Jw?@ssx;^k
zS``u|Ae0->hwzg61@9Hv>D1#)2|ZRzSSW)#BAYMRBOjl}@tgf%bg(fq&|<CyR&smU
zV}SpwCR|cmKH?KAxW*mvDN4Sfhc5)!)f%!sMQr&f9#pCCw``1~%oU+NwrJ`Cz(jRh
zzhj6tP7BFE!_UIct><KhJrM7k#iS)gu%)goI{&6Lz2BXtEw3;H3v;YaMT_2GT^`f*
z&->}>fp@i{-F`ZWe;GkW_uP8QmQl!YUdCm$XXZ*Q_2*sp#<xFzWqm!f4EAxUNcYEo
z1HN?o_sYq)zW-l{`)|$ByXZ-SQYF5?TuT@j8euRV^4GdoOZy$!B9&Mx@;O{`dq9kK
zuAuuat<|i^R>a(2-d|FTqaX2uo1T$a+XMrxDE}2W5$B#P<Z2&B&#1)~h#J~GY6QFf
z)IeFqnW8SVT21b~!n%uaatMdj=6yO&oXJs^rx|g&UM~_+^oJT1<pf1%<Y^SW)PRmI
zKsw5(DaW<40oRjsi(P(BQ>E`>`rlbT8C;V<eDc$dkDX$~Q{@BxyiBMMrN95g4ZJiP
zu{!zEL7&<zLT6ro?;H+AU7FU8U>T9$jRgy<CApC*$kIE83a++?4<pdYh1GqQPGq;U
zveF%EGLjvA@LG~L%$yM(LWlFZLn80laoPuGIOU`COk!wEyM7<*(FX#4*8g#is;dv0
zcoFmsK6e6BPEWM9b7s!;XTtm=ej_S`I(~!%VqYVlE&UZQz}z?7MaOp%T}*Hqs5!X)
z#qWSn5$lG_Bc|JuDgu)*=Jn?J{ea7a5B>#c@1t&8gn?YC@k}bYg@0@@IQq~!a>TL3
z;P|`8Pk+s&B72d_gfXi(Ot`wGlJHU6wUp!i*J+#vfAiWE`U^Z~abhP#8w)B+hkOi`
z32|0{5>gu1asf1}saNY7j-?V)qydETFHR!|LV=stxIT|zq1mkfgC%^(YG4FEK8%xV
z4GJcbQn<O(AmMW!a0E>2UFYX(moyVJn~o(3E4=|i#sX@$0gYYre-}2(ArgO;vOyel
zIkbCNH#+jGBLl|+B@jL$rZ^%0bEHw6PS?EPhIhT!2P>KzPgkN~((&VsLJ^fZ#n9z!
zC&a|5@1)KEHcu4&YDj|qa31D=PI=KcYrPCo+OY{iMzYH&KQFR(hSwZEj%cN(PACUE
zuICFMibBIqy1E4%8UuOi$;YY}aCz&+9f>8aaa3!vjz@^9&LzzaUwUTO!S|EVFNl>B
z^iQfn3f>bi@`eTP$MX3pZZ$Q~UAob7szgGp8@1A?v^?)+H{ZTkwY6>c?O-ko>l?Ka
zTN<WL`SA9c31{#{Gote{^!AKG=LPXO{N3b&+{bmzX0lsnBeEM-FPRXz?TBj&n}VM|
zWe(qy6J1<%`^AV;e3I8A*&`G!iGt=%=KjP&1KMNyP0RhwT8=|v)rlj@o;@24pYrGb
zFGCcwNrYq7b;rBQ>@Xc~oc3qt(Oux;G_RSPY*Kq*URFIO6ovc#wgXG1UXeWFqPIIT
zKZlbzyz67G_2PU&`KhTvxb@uz)1SK#@Lx$sni<$1Q%g*tZ+siCJ^jVSpd`N1#j_#G
z-G!unX`GIHEI3@KrsgIDr+d2;q{;+E0-JfAitrKHyypdsQ1hGnqclN$oof484EB1H
zE8NQ?a*8NhjLtH;DQ2C@<lG$}qM}u1i?^87SebVPa?!bUlDrQbwZ{k_@$MIz52eB}
z&xFe6=uu%Rm7Q^oP^QPVua5hJCw%!}HSCR;<IkPr0&M705)?hrRTUN(!$1p<EnPk9
znEtILatkX_wxrF?A|Z`HG3ghXfCLVv6)JKNe~<7HsWvzwyLB41Akag*M7HHlx2<1>
z^%CVziN4dizq?XvQz%L;?G*J(!LC^|GBXZETAMHnF~BXNr1wH>geFD*7UW|CT(aAb
zZ}^AEDp@$k%*H59xWpok6GC;p>7XDtVaCSIWFFyTs?Q(vH*xpotE)UP%KjA&{$A*&
zoe0kS+^<8)F1k&Uq$Q|Dj<KjSh9eFbH+yy`$@6W`Y{ZW}y%sy`;Fj;@ZLS_NvB`dH
z=Rcn(^;k!v=BEj3EQy+lKY3VDc?ieFQlDYfj=u1_#;2{~65h@SXx|irnGr}icdz@<
zSbsh>N|8IXF}J%qZef+9|1r{x^7Iz19|9#dx9>uk5-`gNE$fbMsTc!}#3yyT#a$Jb
zU~9#DI_^kvW0b9kRsTI~<?P3@hUIZ~nTDjm{FtWa{sp=pO@t!v60mkuO;=5t%3QZ4
zneWh!#LH^iNF+9FamQ$3#H~)P=ZkJ_e$=E-#gD=QXg|KnSg&lJ9N0R;gpNKd%?rRv
z>CQ!Z$HFBH5D+<<m(RgR>6-f4`fDR(kzgZt8|rB@d2W-pGk(I=0NDn*f^fSh`(`*m
z0q9Q>inCjC(<r%FZ)Z~~KUuZZ`4>EAUFo0f?X2HK;$_;P)JT}($oor<7Q6|c4zAUN
zHN<jb;WxCmt-809P|I+=B(0rV{&#k2mPuVmJ|`TdIEH5{@t`R8|1d*NW}bN-i;=<8
zq@Rti%<h<~5D4C@5D>#`G1aNZ?-y$pk2W}@`;T^ozBCj@_>#ac{<xm)%OOG__8%}7
z_+dj~gxijH>FJ!=bdH-DtaR>l(cP43{so79Qm~SIwLoOo*)eqB*|EZ{2u&h>+|tXJ
zk2aP@&2sMCY?wPP7S4=~(-s=*iXcpn!1t|+*e&xc7->d?Ijf~hmne?tp{~I^^3>E}
zaW_x=B<Vr3B*_(SI7|O7w^7lNIuY0{?&{TS3{B!ki+Th*{K4co!N>^3@I)9g48Euv
zB@9z?<uDEJYWtd5xD~Pf`Q6g+&equmvWpjp5jcl^NLor<%C!&&p{anGVr{W8^*k7t
zLW^!=%+9|=qPZ9|aF^>|QmTSBDnggEsGtTVi~3R{&Vex7zWx5DR@at0+9k@D9$nIR
zBE3**=-*!tr+qmi>u#_jPr{C0PzAHq<X)vhJjP}Xs~*tmKbpU!X`}HZG;{qgpY22W
zoFYP8DW^=?bwAOcBaw>L{){vrGmYDn#ge0s%kl`dX1&k716SGL(&ETWRXs*mHzIj_
z^w-jQ$Ce=!BQFRTm{!@>URyUU6$}KEb6Z?xw4Zx(;%MC*1rukc==-R8yP!7z?C)VT
zFIi`*PHBJ8Suy)UET>7zPe~IeX!zx?7HHMGeM!A~wAsF;Yw~0c1aEO}K!AU^cn1`M
zAT|?Rnu4Y9)t$WKMW7h=@}iu8f-7~a!I>({b?cea+rGBY#3JPeIbK4P%cSpu9*p}F
zPI+~z6l=!1oA4oo%SN}eqG&v;D5B(jQ4vNasFifj*oG)l6(r+VF|WpQZoBDqhz639
zLaK6*`403YHQ>jrV0|B}k2H}lZM{~yb!wK@*x)Hk>*+&NgO79fx47kUhoSUm6Jx2*
ze9i<A`<p|U639{?=@}7}gl-HRU9}$*_%Y`)vwkl|NJuVAw<lo=JYQ6ujfZk3b;MPD
zV>Y*yt(Qpu<<iFRkQ{&z7A9dNyeuXN{5n2T9Zku>oK}4H`+*%Ml3WkH*-e9Zw^`mm
zQ%#h{)SzFEzqMgE<=;U^+B`WotWfq==B9Oq0xpBNkY2AWzk(S~)#o%+=g86p*_cUa
zV!Hf{l%l7l-Vvc#?5NGLu+U%nK#_76BpA27O_t1izll~no<it=douG#fcJpkEd%$Z
zWo4VcABaw~71<dU^6fVq&AJ~7(N#z!Xk0!?rJIai1{cq?EHhbGq&ZiJkmKYGr>snq
z-t=~^q9L&@#@ZA)+8x43A9enDKiU?ZgTio{x~9J=&S3>Z*8Oa!8m+I72vTXJE|kXM
zI3VmSfByc4@^)tu+_FqY+6#z}-Wl+}N%;)-@$zg;uj$j>bo2b{dlx&6f~c3iAtrZ*
z>g6sUC*JMXNx|tq1SFYR|5o9m9f;1%?B=0%Fh4Yf(HA+uTt6FFN@2fd@&K)o1q%Pp
zsxxH7KfN%^&mh9cpv#~64!duxgE$H!;zJcKd+rx}wAV@KG?E+O^(arG3?;5>3WRO4
zJ7kAB7QJ(u%g?eRw2?i%5x!dIcs2y8E8qPswhm-bLGAqmQ8Wf&e6da0<hx_#r(6aA
z$_(`lEDd>*GgJWj1=?S3EE~stptStbC~W3VG+6h*IV^O3)<Srtp_q}@_!UYFOutgE
zr`FH^)s3goS^0H^+|ZXAj^$$tTGjP2cBQBAA|uPw8pDTK#*Fu56|Ay3cJgUAE>wE-
zWcXXcoK5YJq4a0JdGawB8AJqV!gnxX6VEF&@dOa_#}7uP3on`(E&pZR?Tc4Yl57IN
z|6A0RKAp|skcH$Y%x8no!NmSI;ERO|1ZA2W5^}gVB`2+I-wofSN7M-w>#*B9YYrt~
zXXCGwHYm0i!io<#SM$3xfZaRTbSg+f>-36S*XJ!M((-V++<=`tt69B4+_e32m{PsM
zhHqZFHu&tC6`d#uoKC>)sjtul510S*>Y$@&nlj>rpRUKjiTs~k`~lt+A$uYG6cMc&
zQ2fN@5||8KTa4Zd2>8QCPlZ^e-D^U0rcR3PkeJ#6z_?k9KOrkyGZ9CBhpp;j(8QRb
zYad?Q;*56!nUBF#u}ON3mqPI(MrW@M1Se*#I@{2qq6<N0IftdQZI1W*f1G{!Llfur
zK3;mIwhC2il?tR4m0DMzDqDzKMXM%Ott*f!DAol;HVG!9#fl4plvZ3I(W*pLh$~SP
z1~&qt1Pu}^V9+2TL}W<<Ntn$2KI8X4`22EjTawAlJLf&`InQ~{a}??x>P}C9=oihP
z#D2Q-0k_GONx${>cjt7_9RTeXq!vALW}-QHG{k|R9dh_H5vkKF&D5phVbBDkOTG>{
zvymrdV|)h=BDL&7kb0y4M+$eP9$`P8eE;}R(cJ_EsgkO#_!|+nM9a9n!s1C2D0Tqm
zsz~V41XW%hS(tI4os>am#yII)K$%J_tS$Uz!=RV1SoP;`2A2|*ittqR)e-*=;x9iV
zl6%b!TbctKIB}Qr=J5Ah|3BA8@BV3?i?x@!ROC~7haP{WZT0e6_(*RsRpRxB^!qaY
zsJ$XJ^>sA3(H^CjF8Y)`dCgK|fP2sQWt_!==1iH&9aW>@ukgYQ-5;aHmetG4f%}n;
zN-{dtwdlfQ#<kg#LVom#xBDuc#P(Q8%Pv#l8P9*FJo<wT5l}i+>dL88FOF&jvn5h1
z<|v7G>Mm;Q=4!^HarbehHV@5g>Uy?XvgMgCBfDc4Y+k#(!YRg>Yohu^r{-_M4k8N|
zeb&TI?rSkoK0@x+jZ+`KVqu7zkED*^#@6BO>(<W4_PzRog<xS&tt~!S=YEIg*Tz>I
z0*T0h-p!DO%_M8lGC7#~-b|j^`V)%cz!$B(g@2Jn6<vrzaRDERPEGPpn{^HKmvZ%~
z<DJx9&5~+k@5N>PN9tQ1m<*_p;?=e*c5k?J3Rw<Xi1TqLbR_ma*DfS%|FSZ-AZf<6
zta&@|JBxRD;ioz3I^u{CkvC8t@4G3(C)kK@#Z0`HgH*tYo@bCeU}9x)T7y)3h%Br*
zKr%aW|5ztVlvc)3hJUwn##}t6*dBbA^f1qaRiZ6<0-C6C_Tz*0c!2cvl2ZYm8sk`}
z?oOy>i$pI@VV)abY5-KW3()<U#~QT4ch>zI?I-f=u{ldHdaT|5CT_HE^!T3!X{i+Y
zZj$}KUQ>fBu8u`Ez$b_{|Go>Yb+4!Lu&4_M08S8mc4EP+8E!5;y_FQfsa%=VzD<HS
zYo(iuRS^^I)N>(wI*823$Q>~Z&f}$_0e;|T;gI3LVa{ZAR;0B2x&uq@QTiiux)S$h
z9;Qq73kg03bCB|%jy(m^CbR6Qr2I@E{wuX><WMAqjM5@3+jIJkGY#gD+PdPl!=39E
z(Osd_TfxeYinm>hNa^fzy38U_wcz*spUyiD2bA_@E&|9J4oksyc~g@Fj;-2^7B~bX
zl^hR=Y(tz1lr)B<LKl5HNN>@RUQ+q;cA;Sg^_avHc*bE}C36TF_tw)*ug?$$>Y<lD
zQ|3nJ-G(J?7>#3CZoW|D?sD5k2icNF>^tA*v<OO^q&wSQ>LQI19OM{2jH^tSY%_ac
z<EGx$88p*JuDv!Drq`t%WTpTa0RMA+dp&!?X518vWXABl9dN8cn7ubeKCtp2sB>jE
z|H=ci=II?QL4B&PUC0<L6&F)5xdFH5<3p6|@&&NGysZ-!Vc}aNn@s=V2JXG5mBw(z
zdEObK6Z|CRblN$#a-ovTsSFaa``t40m*;4%9{FJQ^zx)oeVSvY4C4_%(`EA!m}BLv
zEPFH+ySnPcjQJJU1fEQ))MNDYGG8A1MEv9c+Oi<bprzx|Ww^AbYcLc__=XKWu^D-S
zC@Gp^7uRopO-q;p{ou$Z2ypHb^DG`jXoQ@zxPI~nykkR;|2Z=S%FTjMEKOiax8&VP
z2=%D&Nc)ZYZJRoK=&V6{jmgFgl>GWpDN$5HtQ%ErLm6w`&Vg(^Fp2^6ar0O#o|^tI
z`B)eD@v@bBOLY1Q@2X03A08=?Tp`<jx1<A+@zX5d!3lkc41G1hfBz+B+?kC^ns)4u
zoja5J+**3|YAFVA53XOVJ4WwYT%H*nFhDtreGm-4P3Jq>A~<09M0%a+1;5PEIzUxh
z@1w!3rd>U}R>UT%J8O?*gyeIiGRI;ksabh@-`~A$6fGS2MoRdt?#{?{ljJ8;etu5Y
z)@wQDGy9n5x9N=snkD6l&00st+^mY^cHhR&9+3vKzh>tQ+>5(aCzAq<*F7K2oIj(g
zJL#J}wMVW>;>7<#5)-!2xC0`to0t@L*;nlO0bQ{*(*{*Gi`fF3=|Wlla63nK^g+4S
ztxxG{>yHq7E8QZ7A&C^YR%0u_pJwi>Qp(C)c>M0pr5bAZAQ*`D^z+!NAYDdd9HqFb
z|5*qsJ}l#t`-_;yOi9apVF|>%_Jj4<m#;A!8z0FaIBBpX1Y?Babj-DbXIuNZ`dz+c
zN1ExABvYT#owt6kb!F&7(!x<wE=ztnV6;eh`JBp1&-PtX0$jfuKI+CY6}3;PD&s7t
z?DUOO%-*~@={GtwC8}sgNSnW@BV?wzW&KoG-yD|WDm_=us~)9OJI!1^9*Ki$(ROgx
z_V;Qtc`B)srbog3Q}Z(<ukmt~SDy4LWkfW&E7q21`llE9;USIM)bUOi{ZF*kQSM6L
zGWY3jySgpgX#~lo-AVe1+plJ&PJN-zkQy>mf;@MU*EW|2{@Cd)5$VQ;L!lbAPLH3P
zI0!5dI#(ch(D>}BJ)V|XK2u7QR8(O;c_FSrQb4f@nS5~_X|T=dKXw>9AWb7bE-mo#
zH|fN8hu)EI2yr6k{=~Q<1W-%7eJ!@AQGmfjoVm)Mz)cDN-Pm7D<6M}fBZ+(>m|Q9x
zAblz`w|zA-D2XCnxSLxWY_+I0tbFgP<K(l;?k>NT%#xVt?W~7y{;&M^L(T(z_hNjx
znv?GbI5Dh0*+F1Sa_d$2wIsd|7`g;J>|=fXw#NUm_VntC*z7oKb42dfTZ?5xyM3OM
zwbz59{Sl8}+J>$x&cue6DIAuP>g%vEaLX+rAv2sNrbz4?M5sibbTM?dk%j;5r9*9Y
z4)=Q%)2X}^pKE{900$_k6$#^4(ZvADafobx*8_<Ae-1QBU+q}?Ba&Yk`@?iuHI9T!
zcd&;gmX!xa<^TcuDwR5U(+;l?p0c}Q@@A4{`NnVMvmU4>v83iJZ`OXp|F%5^@wW}_
zvvM3okG$ZwIN+HQZZ6<vGNg_3TT#C`!uUB>hk{>?C+({QNq*zE+6HK63gVTV%2jh-
zZYEeQnSiP`d;dvfs-*7Z6c=uA-sc;RcH_KJqpgVaI8oSao=or$egiY)Ayz0<<WKx(
z(#`eST4J#v!yB)i9q{X8h&>@paSCrDfQOqfHFfY&!2k^5$Otgnx=qtxd=<KIWbObu
z&R|c82kAQN;yAv(L9HIeQp(1coUTS#5l+T_#||b#`<=@q64_7fhY=#pKez%R!oUC*
z{cDD8Bde{SQG47Y0OQyBB5%X15<Lm^Z@j5|?p=)F<0$!v>(AS=3+%$uG_L)QnE2X|
zN*9GfK}RFC8p4het(&=|PJ@TQZJQJCbubx*0&ir$*K&hIP3g?aH_Y7Khj~1AVhX7?
z6}?;(fioCvg7to$hE6;0idQ${(`_-B*Ruw-7YIRShQ~FiOLA{$K014TewH1(_>(Kg
z^;G5swi9{fo_%6j?hRvq|5i1IE4F2t`;L9l4XnQ$RrGCQdtH-_7SjB#ro%s8sEM^i
zb-%}i&#gtd<T)gC2&eX6g_Rg~-uDRMfTzy`GiD_QCmE+B_7?s3uWxp6h9ZhV$AP)E
z<c*gw44<VkK!3<9Wmreqm;tV0v$tLw)(%Y(&<bq&e94LRE|x^)J7rt4eQVLMc7Wz)
zTi(zY@pKVaT1<p<c-5Si-sL$w!`#iCFsqiea~sqs`FCSxmwn6oeKiNR%TerubkKCQ
zYXZ3HcEM<L;P0+pgjowk7Z$W-&e_Q3C{c;NIPB^T1{!Q$;{;?Ff2+P2Ff>5Y;|I{z
zj>)>bC$BgNjzjZ!Tz`s~lIp3lMNNO^>i)Tu@(;+$Xj<Tr7XY0M&0Li$EiOx&_xWcF
zN1?L~CtI#<FzEBxF&~fQ_%Zi$b)zWJX~LZL&C05m`n1YCm-Y4l_$ty^cot|SO?u`B
z4nLy@*Et#C2tA@ia^mjipQk6bCA<0spN@sbUzMk8;R-x7&?<LtEV*SvLUd}aJx&>2
zx+5?FJtX6|J3nlXrDsvfH=U}Un_h%x(P)sNzAp|;i3rN<?sZFWpSa@b8|zmq=-pAw
z-p|g+!LgvRwI_riF@Vs`nG%sxgS9_OHvQtJS_CI#{!gR3+jzlEm~8Gx-`xxdy*!xY
z+7)WQ&YA#vh4`aVJkL08rOlS4;IgkbbSVW)+@x-cpOrhjk%oW`0S-$2=ZM=$$BT~l
zbP%o)*r1#fx8gj;dS(1!92d^9^QC5L*W0}Q>$|Sq7ZWz5%i_`$l`d-Dpf9sEdbMO5
z3PgjWn*80p$MKCBl1!_vFgRkhY3wo~!4aKRlOk)!vUj)duK8Y4?cSdfPm3gLL5-*H
z)*OHg-#90kwG%@bZaVYTrl)T|#sc<G7bxTDH4VXJ#vBGPD}1`t?6tQdSsBF2ccA)L
z+!l?0Hhy`7`Xycw%=|pr-uf)!x>84bQ7tad&maZ!-F(%m2*2G6oYktm39Qs}1-2<a
z$=vGahE^h}<xo}WlI3(+M31+m3up&@_j&dYhwYr9an_WS*t*ybQ>Aio<iB^BiY0$f
zR3=}k&W%k^^2jwQCtTlr)fYLm)j*FpwXrc&oGNdNlNdWB_s2~&oLQJr6Q}C7AyJfj
z<h?0%Vp>yUEJKv*+fy(%^_G99#<2P}jC%dY0Jrdw(-oSpq_pSfNr)3k#pI4Cnd*YF
zr`%1O$u%E-VMA#Aj{ocA3N`{Dm70^Y1wk}*ABL-}j1DnXmACZUVySzb>7AtyHD>FF
z@w+G+7{>*{$CX=ZmVFI7JVwvr2DWHxkrhF$ZSkEpFGLU4bT5jhei;=M(R~4M?UP25
z4>dvmP6WuB;*cOyukziHf0GXm_M!sep=*L~nQYJzP5wIxYls4HEx5ZxP`tLGm~;BV
zv3+uTGQmG^AMF8nds%8gKIT>EsD(hou=n$LaRx=GD6&^kI5*MvuRI#w1{X<-l3R7@
zQ5501T22_A9euS(sc!u?2ud}W=B4z4K4A--tZ;B6DZA4{-#uFe?R$4fxLGo8&rIB8
z3MY_Y&YNe8_c%fGTRd*&evFhNCiq}_r$mPVWIiuWXn5u6Co#+bYw)nDbbF6yL}*9j
z!Qg%K=(%ly0%GseC@+}SRKvS}{2RW7Q*gho(5G5@CXVkgTG5wF+N^`UAm&ZSVk_ot
zdM#-w!#l4<OiB-O6eQt4+U!Q<md8B8;<2Q!@jkc1irxIVSOFOn$|c;}8c`Z)QrqOn
zLR)=tTI}y9rB^>6N)s@@F5Mux1x2r4-pQ+%yZ#0QO;ugFw-gfnT%jeXE*uB?4RveW
zqLp)WsruX<{@PSp7@WIFBT`R0r6vrBeZTQC`gJIKDmeCEQ|p5|XgJ9Yy&ZbtjJ02|
zxZZTILdLEjzOTVpduG3jhSeiMC>?1omWcLk<1LO*v*Fyrt$Oi`!$}>YredNsYD#H;
zqLE0lPI;D{+f46z9}9y|w8bsc;Anj?YLU$R3XbC3*zU~TCij#`-5GPAP3ua8ht>Sn
zOW(2ic)pC(x%E<P-Wju2JY-{BUWYxH;Xtt-WHop>d7W;K+7sgG^e5BMVQWKkw&?6A
z?Oua&w>`k@2z}3{jA2BQxv_?KzSt<Rj`2iWulueRyOTcioILVZ2AWj2&3{O6U3kVe
zcF0dpNz!a;p9jx?2OHyCCvx?xfe@G3o-!z=^M4K#P3CFD3-V1xwiQh*O%6csjHahc
z>>NkeiOC|IS64j<kF*P>3SUFRp5U_79I4qtkM{u*F|%!|)tyjCS-dSzNwhNp{2z=y
z(ylN1#V<S69=R>unGg2nu3XaF`7Zw)JCH)NA%5;i5b92%-5ESBa1iOvQ7VOhrzN4v
zO|ngAG=Bzj$4|!1@Rhz%aCQD}Mhi<e8xb#VU0wM&e34ClywR9$R>oT5%{9Im#DHwZ
z9bXbw#84)RgEpJNk{IsY-+AtLn(co2I?{aQCc`;`1-^OZ-?q!CI5u+!F`!Ooo^TVd
z>T^?vrH@MbdJy1FXX1+iuAMc4;Z+xQA`93*(oAniZQv|TuJBeEDJS*kr{q#J5La!*
znxTDrK(>nNNlC<oS<8d)y7?;l?tKk&L=Nd2WKy^Xh{EjGE0ygmUr<56CU{RIlY>Q2
z1H2`Eotxm-q0g|Q-(52kIL3mNMiqF#vxQgHDljT^Hv<os$d$No;XW@X$}Tk8go0(a
zBuv#rUi5^Um+ar$XLBJQq$7nO%ITY*6Z~nIqyUVjle*9fksjNg+now1!E&VGv?)%+
z+Ho>?fXuj$9{+!#(l~&EGuCY{R0vIubqUIE;zDrC>-O9gxtB@1{AvgnMb_?4Sz{r>
zCv~MmVo)ZxStsA=6W|iF_B;j})5lZg7HyI6DwWCldl_BIDGW-5fT|=v-PZ;bkv=X(
z8zle2Z+3xotD0<`LfEVvRl_TZ=@9(hbB(ldYAfhoDWYE%!R#;)`#xT>p_P?pMYA<J
zA^?3rV&rd)nWTouZ@sb6t8Ik0<wYT5M!S;Z5#6WV>eMOJRz?B|th4r&5)=uoe{9~v
z2Y?R$r$oRhk(%jWzbizgIQ+EV$Lh`IR2%RCMv{N!1az(q=mdVR8c~A4g7iM4r81#;
z7`JvFEQqgu@>fcVkaMCJ+1>9YWBN1KKR_{$Qxsq$#0|4EaUW^@RZh~`nRNs|MtZvF
z_!W4cAi``Du??%qo*!_?+KHoGgrcW~-o0uC-&}icfeYC~-9pP?;pz8l$9ga=l4!2O
z@)lhn4V0N>?)!5>M{U20Y!<OxuWz{c5zntzb76dzKc`|_8&mON-Oc!W2K$yR<QsC#
z(iB7?gi<~NBAT1CgrssC7Q+y>;`OV{b=i)lN<?W921qqB&vWLVNc>>CEus+^ND*`G
z%KEX@XlcP$rmLN<Pw+`#`_duSAd^iU$v4xRvY3#0PJ+Kp#Hq$<7Nq`VCSj<3wr#Og
ziX-ll1p1WiJ4+@L=mV|(4rLG}9Mqi&mH!HHzdJY5d~F9<4aN@Xl>G$=Y^$_E=@Fx}
zsSSH;0^@<+ywC4vUYxn^)ubCz6I#Q#u^sPSEWN6~%ZL{cz5Io_=f>4@oPzL(x2WsC
z3*tfGxgJh*RXii`wJTCd7Zt*LlGUIpD0=zR)2;U3-o1PI0*;mGL;31U8y&0>BQozN
zWnrik!WuAayTAJTMj9$y9;B`?@qTy?vlo$7kKM*pKllafM|*jkz;>eu);sl}&G8{N
zD*%kJ-bn@eRKrUxKx|C%xL=~LMgtr1z%xO0jd6UJvZuPU(_|z@zV{T}S`-;So0(uP
zH=CfFA`}vHILg^!f4wUv)f8I6N$$G~N>Ay#=XX4(-fc_cLD&F~g8Q(MENN-t@)OtW
z9Dd!k{F3z(SEDjuq)!B#Y~NS3-5s`KoK%3gfe7Y&uisa5{5|*M*DmGzpzHL{5R?^q
zw0eckTy%h^RP*%iL+O&?6BIfLKh9*|Iq{+o#+3+8m0y#(+hc2q?AlzdTYYz)m;{$g
zH7uU(bQNW!Tb)$5A?#=19B2?_nJve@1PjrqM}&9rZ%`=RmkQyCKdDTn2)i)zio&w;
zA_5DUJvwHjee>%1$ZW%#$n#rW4J`??vkOdYa`CUM)?{0&JpJj}+Zg@@u3Rt{e6zGQ
z{$93Yre2-T9%P_}TQ`3!Ue>koQ0zarqI++rp<xsyNVP_dkb0|}tixrYtR9Z9iXAW@
zH*RgkR#+}-Ao`e(NchVW3*o3^$}y1aDWAiLVSeGYT&2cqvl%Tq<N3hokNP>Xo)cVe
zl?=ANTAU&bh~-JH&phZO_AlqWMVrs*T_&%Y1*(zA^@pX>9=TDDxXnZ7I@;qOwf*E`
zv2%k_%=twLi|nen3ggow2i&=lqolggU2_J9SeI_`8Xqyife~?Yhij-sFWXYv7h*mp
zRifk6XG8#J4?lNkhXDK#ois@D#9UCyg!uHRSCjtcu}K@yP_1Hp<?BgDJ&x-uO{`3I
zX_{-Z$4$vhYu-@e#5bHb4F)s4!hiI<U2IVqSw~2AuPA_7^Kp76U;D5?iVlHqlECmX
zon!X8?`jg#;z2AUyj%U51+S*AZy*5=*Tg<rggBg7Ma5&|*+p|x32%kETT69q`SQqe
zGhNo*P-@gum8{Se{@8pP+t)ubTeNiwss_94gA7^ph?y|sx7)E$$eyC)T9w((xp2Ah
z$lFKg4dfIq5^aog*p|fZ2jbzPCZ}f$@Z1~ujIVr|m`r`zM;+{>IcpCtVqW2)JD6bS
zK)5_G7|^4==~^^=TNc4o4f<0t=~X53<JfoC{WSO13AjjuPVR1_2VQT*PC*p3gS-&M
z#PTIkUH-v0)6e6K<WIX5r5C@J9OJT?EGmOkw<7eS2Ker!<5Y$^T9Oyp^ct)bw+Aqo
zAc<6ePpQiPe%zSQ{W>qP3mf=3+6FU2H?{ouVVa~aLL)oF-Vtk76o8N<;~9*f_j-Df
z%PmH`w^A#?*kUFma(fVG$SBK0R;8BrTz)roT3ILUc0dfN1WUim{~T7%XFE@37LbYP
zY;^}DU9L3(tz7<Q4eo${VkA0l`8%EyirPefLoJb8KT~7-Fz-B`KO%+pa?=@1dNrwE
z^LRc)z4fx$f0P)rl%%P7hmcTA#P?<9+JnJjT)cK)Znk=qi4Ju`#$i-$d*}JphxuIJ
zN}8|A%C^;S{}2VP$452}jxvr;HOMy*Z)M(Crt;ijSd)BWVegoTH4A%vvcK^fe|?)S
zhJct@*_+GB9bo7m(6u{p8)MhZAe-amR)%074n=d0-{AqO><$G9nbxaMBgSi%kgQu(
zceeBqOf(nXG70d2%eF*{BUxL+eXOY`UuaCPhhgJjTV@T<t_UuBY3s$^e0@JG0pE~3
zh4UI!^><Z!fJy7|`Z!x4WCtP>{LxZIFU;-u&`;0!mk3+1j_u-Z)8;xh$V8=Ozh95B
zS;=FiDUG`9JG5A$emmzOhVt~Iz<*mieF)ABWsK!3Iq!b!P9cY<%5NgZ3?sxuxF!u5
z*TyNh&A5R!(x|%FV>YB@4ezwOs5~1AwB$#vQl0_IRo2pYd6MlnTbBHcUX|Gul!WB#
z?K-s$=LN>k`CKytZ%Whk)c=PV?D62L(vv-lbsYT*7MTHakbbxc3nz+NB73zmPxt;7
zq`>YqDUNGO)3NS3)abyWEiGcqahZi!&dIC6mCb3k!;NqpS%w!`I+%8Dgr}L_e?^qf
zs|HDMREmubZ#szd<tAfMDjzzVJ_X2d!Ma*Ow*lteZLnY}vb&rh%$9};Xcy09{EI4`
zSh~<$A=t3a2a9i{J_%|bn%RZj6m@2l<C%Y$16Xz<mptFlZ5-21cxUWV6ekDuDcESw
z#Mdpt!E5Pa>XE*|OXV&qOKqhD!Z;H7UDqJ!C{;h5BAM1Gx)r2tOjS8yO=`a14%?+~
z_{5-7Lq%2S)c7UyUV}y+ecThxfx(@IvWJnjq*0yXTW*<)k<N_SGP=_)BGntl=@@Wn
zz&S+cnS!0OzA;mNth^=66WCrpMY@*83(tF~HQVg-UB1ap&~nbZp`d>%oS(#>)>jk4
z;qm6~nI?#mNmmhoPl@Kw!R??H)cDM<@or4%tqh9osA30>bYiqLnr)v7%oRI?{o0@i
z2g&SobNeTaIooF?*kUb&t(&sAj|qp+ATkSYkyu+6*q@u&;&QqZt;}t~n&)6yMW;A+
z{2o`S3ns%uxF#z(6hZ-Jqk|yhu2~tU&QiLQr$_u0PN>5TJNfOddWGy~2ybRA#9W0$
z=~MgaQ;2-_+WFP%<1AQvY(LGRq>)-9?o1xRW6`8h-(gsW=k9R`mgEaVBC;C^^Y!#g
z`0Ne>?tZ0Pzht)ENzGEF@3>uP->R`u|7Bcp<8CLuZZ`GP|BZ6<Uxx(&&ZXWBPGG5t
zPqfFKgdlMh{ms-Kg@|p_$yjObK078(4U<_2{;@sd1v*W!e+PBP!=-jZjv2(FqGEDY
zth3qNk(#R1qFAy*26~y4Vi_G^uIMtn6_j}&Z8qD9OXiUh^UZxGo#vZJ!ggKtT4HYH
zR4`5FW&F624Gk#j^Y?E7cqmuG<L?&{%qhM$gVFtE*<++$*3G2^N`yuaJHax1_>wqE
z<nYUN^#vkUB6$JFf`(INrv5<q#<)4@n|}z{A0o+S3{DXdUBJ{NJ%sJ$C5OV1R)_Xi
z95uq6&8)5me{9){CDclfcdwoI&+M?F6I?)U>86+bHtcA(ja3w)%@pBO>BgvOSpEZr
zRbhQwym*ikYG~|TAN;{dE{vaz7t}RC<ftHx6q~4QE&lP0R-=MeIzo_>ZK;!oIc9KE
z2(d<{eH1ft)7o(?or>bv%qo-xaSD6*)|n`${7+E;zh&|iU)*+ML4bIdR!@iM#1r$U
zZcx4a%Og(J1zOZColNxNg;V_Ig9GDe#1#HT7k6U()v|+Mnsii4CN1Z+Oe}KYL-p7{
z7H95wr!IXX#0;op%=dcRyNL;1>hgG4RZfd~g~uP+6Yx)I@V%<(YAzp3<+vcbfP=_3
zLxInjZTjlvztHpAV<|W)Mv`XGmSv_%-{L!xmH{-m_WeGvjb4pK<ZMo}qIosphnIQ&
zp559}Xr{C_i`=i|@GYFI%Y5sx6(*fQ;UUpA8ec+=UJk2ih=^Rhyg}+ns!}Wbl$POO
z<itx5(NRk_eBAcNNfX98?-Q-=)r(8L=@AXwu&K}w8!ZDQtwZj|;R;jYi%NFB>fZ)A
zLL5r-vpVeC4u2|$vv#9AoZ_6K4)g!l-uX_RL@eKk7gw;+g(oA?;<Gqq)wXd_j1RAT
z%|Q_4^ISa8m#N*Q$=QaB!%zik#qoy%)fH*301TKq0gDew%t70+I-t&aZvHLiq`vMi
z4>sg>?rCL(iOaJ}Zr(7{CFV(<i7*BY)ibeZm>f}7*buCYOn+=P1u75)hW(o<8pxmq
zc-CG^(@11iGgw1B5*>);SMp0dJrgkdiy|to>_?}p4SI~lUdx}x&k<^5=Gzw=ublHB
zW$zl$H|?EcrM>1M*qqM`=Sa=|ol0%kG>lqAytm!G`lpa^!S5kwI@DBe^QMxB>5OwI
zcrkFXBvUpQh*7cVZrr+$y4%Bdm0}ZJUC#~3@TEs7-lexRr<lQz4>;XBeuym-<Pf@y
z`2Mx;Oy08iAYC_Qb@x_NZ*L&nzYze>&4jLu{40)<PE5GEnuEQB_S(;H`-pRKc4gTF
z5j~GUqCbFi3=DUFsF27Yj)(;6=~h?RR=D&htg&Iv#vmZ6t^Q`^>9;qRL$LjAwWn0u
zp>!wgbBcVK6ZBldysU*<u@r1$_N+doE-(3MbJbBWqeMc&ncaV=D8^8r{!gr!7HhN$
znP-q#H+`YGZ5yhGvi67N5HM1)-Z~4f3EQpA5?S595be8|jI{Iu8rRSf?oawMJu-K(
zfs|?v82C6?Oh*{3$9b`HNG<3Z(f@KJf*a^eO^rf5kQqG1`I@^#kT)&zVlpiZG-G^C
z?XugduNI&WU+Al+NT;U&9X1{2F@?MVlz@;tKU4X7>W8b}d0xdv5fWm*4)ZDyT*xBr
zJ)O$mJuN(zCce(`+;wdhqwm&(nMGK^-&>!h;N4L}VMCH`Onq9bJpRgauY#LGA2&2)
zNS+u&W-{?3BT{2oAD7X>l5G<MS|^Fi{wP$y`aVhsh&->Q2%^ZvcD9Quv&w%e()Z6s
z8%-=J&zQbr>&%Hr6F>)FOTrEDTR3cEO|rqP2)CE4xc&8`!(v1v`3t~6a_hE52?@Tz
zHopLl4ly;fU~*asW!y<b^0zN;&|%Vj1N#>Ik^WJXu!31>vl{|neu2AFaiF6fQQ$Hr
z;sVdD);AM5*ridNG(L~p_4<!6!Kb{RC9|ng1oKpH=iwaOI)4w}Mq23&QMpEI3djh?
z-?wa>_#2LP`tryDoed4$3RRXwAsc@+CRU@f42X%N7dkd{nQbd~=B#goNJ>8<wE+rk
zoh=SCHc??I_By4cKfNDkBSO<t=n=W+U!FPuIcsAl#AH`)KX^w(N?Yfz#toF^#{TXE
zaAX4dm9k^^W$KinLT;cyFtq;6<Ht?+g3m=VD%~=x=&rf*>Bb2du*=XUh<fdy8qC(D
z%$<tGCv&DQ;m98J_-s%2YQyCA3^G$*JaG^r?sD_^W%QjST0V-mxTUX#%^A>XkE_3)
zEkCwDN!|6e@RpuJC!Os4295dl<d;VvBCnzdrC|S)^AnF|)1tGI2XaO-A1-Ko$C;tq
z>>Q;!v-)O~S7c<94dC?AiY@r7x^>>Uc}pOWLJgl`JL-LToqh56%7c&QCQi$S<qER?
zbm48&+Gzhi)8(;vKZXx>(dwBprOYHB^;BIXFe-aK3}pAWUT4}+ox13o70c-2Z^uGg
z7^bV_yg6ABqtv~#V}j>~*N9dhPD+07BpWN@)b(M;v7PX;Ol7B^>$E4Jc0iAvf-gyS
zI7#`{UDLCL$k3)v?P*x@1MZ}nvA0hqxAQm$`wWIm#m!9`ZUaS?5WLEJFoZYQ_m__P
zBOI!h^LUD$V-y5l8tAYmk$nJ!;Wfsj5ZQK|yg~Ittk%R14B1`%nBO(slOqj{O!zns
zdQkN15+aP#e0(AF7k-gfQ#Zy$Ta}`w<PHV5RPY%<ZIs@u$DjVs;aDGC!v2ALvZv3a
zlj<|H?L3}(JlL?#K&B7J<)MkxTz1lyHC&yQ5ood}E83VL)kRQzY+OH+tP-(WWT&6x
zX4{$t{|SijH<+~P^}{yt%spmGIDZ->cO|VtqcSvmO($jw9IqB>)S8A5qKHvQQxv3V
zD+2W%>d8Bpyl9^@kDcbAW8dzDj$xJ_Q?Bi3NSMlzEFUzu*^aZ`kUmsRwf@r@^MNk5
zf3mH|FR0HmC_{R?vbQ<?<Y<fln?h!>I46SkcI+*0BP6;ta>61c3jdYpRJ6w{*x%O+
zv_ZZ8l$9NK)bE40I(vECOi=CmseQ^&v_g^@^Szbf$?O_XqY)=Nj<kz}!kFSq<jU;a
zek2O!kLu>nW2&jUNJFNg;cnn?n=W%VAg;3Gk3hA5lm1$6g~t1)<a?bpI|4<eaSa*1
zFOT15)gK0htY7Tki^&10FH<DZabok#5zsg2`O<8_e8e7~S<Q*=F4I>5N!m8PtP_|1
zG$Ss3ySs0B&3qTvdo22Hd=;imSa(06I~B5)A0*|!iis%?#hOglr%Wc?rKax;C(V5W
zg#$&msaWv?R^cL|zBz|5U<!1%z+(_QFuwA`d_jM#!LalmibUqx_04<5w;ghwZ#Q={
z<G(ALm-O3lIM;z|CYN4ldZ`!BX7l{U8XIF%GwG{N-T}h5``w*X4UOVmRI+Q^kJ!)r
zuKRQ`7Di?n)8f2GOdaJc<@$AEjxXYT=#ZH{hx_I~<cK+oX}2g&XiN7=|KBz0=BYiN
z68g4dk;{6u;eIQPiesynJ&`UMlx;EU?Eyk|K*s)T0;xvfC%Xqh^_N=ke+}w`;xa|f
z$yDa-x?hK?8$aVf<fLan6OV|Nre~DhHsqSjXA;(RG+Y!CGNVI6@LjhA#8p3w9eM}C
z35&!rHI*D+%Yf_}f#d<XJ7pQeKANg}{Qi^9RD~`>Sei^-ysM_%gXme`QT@G?osHs8
z%hIp<@1k+ONB-82^+3jhx4fJp8nFmoYtM8bJNye|IEO1f>)G(SFu0gLj-6CSO7wL<
z<H&<Vt9B)s&shh+HAz*7IG&?p*y6u{C&UCC)T2U&@3R|JJw4Vv?XM?sWP0Zj;N4qb
z*=`dTTm>%qyZrD37q^v{cH;gMJtnTcmh}yE<@9!M#o8taH!FGXD0~0cucy)ucs1rm
zg0IXB7nNyMSBmzbt;K8|=9~&o0~wy;!(i&D+ZU8(Vp<j<DQNO}_Kh7<LI4$niY;yV
z%<ar!{>Nq>>m-3$(`)>3Y+Ri3fLFIGs9!j%jh(s8*pYGb#mI!#wY7hz#44goudC5R
z95yY78b0r*fJ~J9-!Za@8%<-ED~V8(@|Kn|dE8Vp$XeIHgR4B6ylD<!{k-Ii=j!Z&
z4t#Geci&mt&X6}|h3wta#5waXVNrkQo+Ge%`Ri>%RnJRK_x2xI&V*GTyq0&;#J6Eb
zkBK+pul4W#;$V6uUvKURJNkF^!D&H2eyjp$MuxsXUG`x+P!TCdYB2((es*&HyT5~o
zEELZs7Uz}-enaVGe)ptrbwz<p`}3c^isyHJtEoq=roA<5(u7WxNiV*Ou3QApGE3Y)
zfq($``SNk$pDKFp>7+&$UGhF%CVO{LElaS+|8Q`li#y@b#9<ZKB3uEL$ADL*Dqxgf
zZ064Oyk<h-hCA!)*!Lkv!ZRS;o;)Md++fph|A9Oa%e!LMd022Tx%_0<ht)sv3<Nj(
zwz~)aChh!ii%9`dp}ZSl^gPE--Vh%nvXcrK0`xg6)zvmC;{b}3H=qjN-6_HF&$i@_
ze_dZ!T)}PEUMr*tJey8ap!~((gtLiQ&^E7a>qVcLY53=?jXWdF;sS^^XPzPT1Wou#
z8e=CtOXBB?L}|du?ZlE}1N33j@}53Jk1|bgQ~f}|S;x51&EUsRa#V3z=<y|IIPI;5
z50k!i^Jog`aVKq>aOpojS5*VK&dHq$tD~`fkRv859GRP7Paa;N>+v%?`RlqlX@b{2
zi}k4tK~0uh-rt?7V%7EoIapf}vY3zO=kDt^^|fU3tBajXFL*8SvyUAW`)gS|bytOO
z>uM#xoe8}3FPzT!py%4DNYJ0*g4bObEw#Kv4&1UBax@~6ujqE@URwcN_KwKu<7Izx
ziN4FiY#f=JZRN#H&uVX+Bj%(e+O%rhi-L)HM<Y+~eVNFS1@+S5^vMYwSiZHVDq1e4
zIJY>zmh9nZHPg2cP?|6U>4yattast2>F-e@Nm|kOw`-2yv5MyH0Yz(yG}lqz(ZC7;
zw0@74Pe1q_8&?u18}#WZ#wCl2B`BFZ`)aWiRhI{i9;G3LYyZwTaP1dAMUYWrd>@<_
z;-{;Hlh{w6xDovmjtXstB*R6U-q$9)u+tPUrfRmWy9Qb}lAg`20UKzXEIqY<G2+me
z`IzGy@5dr^c#+&Dm$hGF*U*E`ts6H)>2X5Gk{C=s<ldnNb_<3L#HabQ6+FFuIU-Q&
zXfGJJ&n%%;CnlUF7?_)NV|7;}N(g6_R^7?Jp{05=!1LR38bBpG)89a+oXkPTgLbbz
zLn?MDj#KDOohQXx|L1Vx+ExUnBRNU~uzcf5?)<~BmO`f}vmWzFN)n#VK~)%eNueM^
z8H_Nz(jII3x@H*)&YZ3xp6e;m-6Tqw+|jUyyTxCEZb8l)+eu6dsPy5$<zf`7rt5O!
z&1*m4e1WV)*z3}Oevg27OljM)?qi=%7ziOf*27{<n3o`_DT_07teJ_R<~f)^twS1-
zlZ9d&h|uSIP<d#FIJ64x*GXc^<2@9O=zq8#bLV^dA6=Hd0iCPPfzB`fIu|HY*yN3)
z?<AIYP?<3b@s`of>t~AA)DRCSQ?s)<9UGMhdzrhxg;<RBlxZdB7aiM!|G3?nICoK^
z;a;Df7IZ7mZ_<Fr#+|!5<Am+#t`2>6r!7j&P$j_o4DojL<jBI0d*=Sn;b@4U3Q$np
zUlm``gigg+8>q%Q+lZ$z7EZmSB}AO(0xpuM>5kC%XOYbIeo;=0#c@$=qmJVJO5{ZQ
zJ&l?WJvR}6z8f97Lv+he5q*<|tSxdTl6)IX;?lQ%hQ=QDRSV5JhMB;`-kEav9f!<d
z%BUiHbZWV-Vsa;1YEI=GuV5>!AWlusJ%2vEp?!{mildV~B$@BBMf-iSMzf3zgKq-I
zXEa?r#*4$4TW)<4>X1)Pk%-6R+vit6V4b{V%bKw616GEiCwvpJrZ}!D%lmT6lgP^J
zdq3==g&d`BwLCG>6i(J-ON=_ql3F4APdx0q0I<IHKKFy>#odZwyFMh-VMLYQa!8l0
z!9Gge3UYiEjT!;J@__g*5*(6cG+jP*4ZpJIR}CMG?>qDt$V!8VV7ot1)krLV61Dgo
zWO9UPBKRuU+NmHNZ&hk#?35KV@6hCsReZy?bEe`3c%!nn!!@Kf+Y+VDYG~g&fuV^A
zS1lRQH!Viiq_K6h&1nSI-@!ParyKL_WRa}4V##EpP+}%5V<WYa-87#YV!9C1qbk0H
zE$q~K;xN(GK$IJww=9m+<O+jR9c8g%Za~uIQ<`d{Ax7ErKCY?>>nH6Kx!fMUlPCQ(
z#qLsz*ktXg2EIYrU8d<8e9pGL=+gE8&Er1xk}?aAB&DVxW9IIaJCBtR{J3c`tD>7~
zpZpo(CQ7alAf&w#h<DoxT^BX&8b4Z6?OFvIuR?O6V3P}B*y$s><!)3<Ju~d&w}#cQ
zLYh=g-~gR0807CaN(p`zJHyxR0;45J8^xKN4uCKWTQy1^n%?EB5^L=1+qX<*K<A=|
z!I~F;)BK!vXkgaFs^rlEbGfJ6;O>Q_p}+@-Fk#r_eL!#0`3HRw(8~&U*|0TG&xA`|
zE$oq6JMmLXWNro;*i~YV8|FQX%|^x1cLK34M#gVfw)_yQutdg*L-^Yw6O`e9X~a1G
ztg9cvYv9LCU-R5+1ic@GE)d}HFi-vyg-x8DMo-KxH)J@wcu5u~7R1QVaBHOp##AH4
zc5F;&K@mk@6O~T%7i2-5hTj#Ex+l;ht|lO=K|Z(go}%zaTtyLMh-TjIKYx1Xdia_8
zdMjMq1D)^wOc=+}E3MXKlm6wAgId`IYFAZDGsec{KHJGMRaSM<DS$M>^Ws3iNAz3?
z4AEe_`G@kBlk9YbKxa}ob*8kgW5HjPe_<Z=Ns_<9Pq$YYWcOCpUOK!a*iQcNgQV!w
zme`I;)Vi}fo-U$q7<)|P;Puc6G(_KsAzMA}16P%Wa6{rAYM|cXAjy$PpDY!H{@Rio
zuXM|Bh9Kz$t<y>WVzupkDm^OHo?O*F%VhXd7&utGt4jLR=As16w0oz(<+u@Z7)Ynw
zh%fok%`Z|p2bKJC)&ovj_+Pn*+ij7=%E3s(-BV0x`+h7vLD`_QF}$E_G9eD>{$}Zb
z{~PbVyEduadvAHWNP6qbZ`>Pho9weHoJ^iwtr_GCIw?u73bXAYe0*&l5+y0^+d_t@
zvDGKq-;T`pO}7j0RT?@Q)b3lLQ%(IhrkXrDo?Rx^=&pRCQx!<<oM27YhjLb0zJT?v
zUZT8}RF;P{St6TFC_@Ls>!UjUWyKw=Wgb=bW|u*Xa*WkbsXV_7=g6GW5cJaC26=+|
zA)HiSm|Pl!_jk`8^ayn*j`B^%+NsqxVbRA4E7rqwGQ64YWUV73kZLojXmXa@#Le(E
zV7SwxeqJ|^FV4fil<z7WI``4`p|F8#9urrXCOA7`i)XKW1Q{kYIF5B{D2*9eTgbuR
z8+X8c($g>VDQH#w2e%qNkhnmXTBbky>Juhz&jKuLsDHK*9|e~OB8VJac4y7j{7FnT
zYMe(|W1;~KB}Ef=1xwWWmu0E<+*riBN{Ek7?fNeRnDNKV66MCBk1kUdB#8Pa_wYQi
zcn?bBPMq);FGdzX<nh*DqVTe^f8FnBNfG!Ix3^-qEReEVVlCpW7l%z42GT%#pO;!r
z8XhIgUpXC|S<%KnI7%b5Um4bRRNRj=Vj`R)M?FC4M-4z_LJU0TE%%&=!!OX~!a?70
zn0PVw$cC!AK75W-eZfYv<KGpWS<jnoqUTbQ2O!O_`3E3rx&WV^t1rjW3lQLfG)QlH
zHZB~PNU$apX-vk;MVo#b_IxM<m8%aK_8s{LWD(51)wVgkX*dKO%=17vneH;%2d*?o
z=ZEygM!T)r=)aBRlJDAMh9zLo0UfGsfUmGHovLLT)M@MMr}Ndwt-O}gv1)5li$I9L
zU(M(9?)|1R&j6%(NtE~b_p|UG;xb?>6N`s6m|!_`6NEu<7?-PmT8Kds3P__DCu=i6
z%~{8=w;l6cVhm~(b#Si<YSeohYH9wFg!@U0_z3^^gV`cCc}W1(^{)!`dTs|gKszyP
z3Pk0>q?!}ji?yC3#Dm<vA><U2Z>qnGQ%S8lxdk5w;zfixAILt_!PH7PH6>?!H)9Ui
zcU$v)-ZLee6YIY&IU9KD$A6D~@jr*}Un3MBmVg!HXv3CDi2JS27`6=}#n(P^i7Dfc
zt3ETi$Cau^iE{djL8pGS^-h{l;}V)Vx3OCz+m<0ncq?C4tn4-ioc_SQJPrCN?!Fz5
zw!5C14Q3Y}e$i*VcP5)~{(w=2mx7hu64W}>whsxj|IAdeiJAfUq1iV!63cgyu-?)|
z-|;M|76%~=?ad)Dn%-IReum}Pg<#IV-=$X=?*-r1YhK@6#{9=At=)}zJRa9MAidjy
z+Re#l+$JVBjmsbW7c!0c#Lrk(R^D%4i$5CQCrwF{3MdXVM_Jr5+l0KO%r(aR8e(PN
z?(3jq4?SCf=-~JG9~-mQwL?d0S4~{Tt-ec0D=(e8*Ul}pb3FX%Qt#XivXeGJp0@}{
z<FJGdgOV-8RQn8#WYMy#wKwPO(Tb7Ry9=}$PW6bIBmY#b$RHG~aB_cg8}S*ISZ3hr
zm>Nc4zcEv^Bd%7s)5$|RgY43%BhE0R>7-@5lxNsN(OD^9P_|WY^5HJdX#}>HF#vKp
zObK@!AMpR{ME3DcoU}Lgfg#rSn@J((jRyP18FVDhoLM1K3xHrlrcAbxQAS$}LAO)z
zRqKE+44PfTnW`&qNzl4?+onWB1`SvE8BEY0wDt=!7K#R5ViJ3!HlwV`60G5GTM@@+
z!YTXO){pr2@%P;?&D2hw%y7v6?o;iQ2YdDU8UZoM86~&YIOm1%Yar~!&*$S%b#}U<
zRa@=8bs2fa_cOAt9d)D$0GryAX`a7~ne`H}R}{$x_r$I4aoFL-OL=nynQBZ6K>b-V
zvw8D*tJPVF$*j(w(oy23t^N#<^80VD1jET86qFzl1V6v&BO%)TxYfwS`dd$xNz`@r
zWMy$IkZ3&-cBmCj+QndN55%vq9*P6C4eZ#AQcR@9&ARs@8#tV$R%6OvE+Iy%=$VCm
zU&vMI5?RcJ4nvJoeQ4T~nMp=`c7P<DthpMqbSLvGEu%@?$Z-cPrnsJ15UNqPxw<N4
z@09A=IIE;+)&Cr(ks^tD(U8g31jWy22WpW0=Q>z4IcCcdhB+r<ef!6iSewM4X~<on
znd8Rz7{^5fE?GmIHX9gS%Mav$$@7n~BxLkm<kJI|GA7f4=LEJfW-5f+<+TEBty$^5
z)iv;A*M=-`&{1b^8bwb-v-7S;a|JPWJpF@IlwTkUFfBL1pfvS11G&vs&FFW193By;
zq3EchKo@24w>LLTeF3u|cspmX(KK##w8SgcK03;vvU{H3(G7$dZ9A{7N53NO`Ih#f
zSgp1`#OML|UT^c|$jZMC9E5&4P5O>DZ#!}doBb#w9w`ehJGao5m3?Tx2?{wUhEI?3
zGT7sN{*vLc_2=f*C$(?%+Axebzj6Gpug@(OrLkm2RPDA-1eDLO-@l9iZs0kVX2zPr
z-W^UpW{zM>#K?~)ReDtZ08^z+&}~)_{GT3`fnhEL9KU!haO?be3d%^4e@6nKe{ol?
zCi0$adOuezNP-zW%m_^E$X+8?VW!j&(qsP+GZ_DDdon9Wn^}GPg77Xlix@!snDHyt
z_wzJQ5<iLhCf&o=DlTi9cFJHBt?i7mBqyIJy_3`cwpb)5$LM5@rFV6lN>s1>aJN{F
zBIyv};IU?Ew~3<P&IraKeZp*G#-DsvRehG?jO<A=8D5N9Xd_m^4CakBs=Zu0)pC(<
zI=$vXG<}S|D|_BLqzSy5YMXWFRlS)iud3mEc7n|*lHeT;pYQ{X<=_MKEg$2>l4#K!
z=5DmC^bzGDXWO!=UoY1fn|8~HWiw3godZ~kS`P%VGnyFdvCSVAqe7BGc|3{cSu#MG
zau4vJ#O7hbz$C010PJRxS8eO@^rCc*W=<xUJa$pO4^gj4GH*xN`ZCT?LvVAO<D2Vw
zD>u9%&5U4?Oa9pax5N*;xBd#xZbkk1>oZf}Wr(mz|8sZ}9iqBmGWBw}r2(01vf)38
zu!V&BJo#pypRO*o@mFV_ELwABlx{q533=n9;?khrGCC!h{$w7w3msMZ?A)XN6+7eR
zz!&geke(A@$r@X2%nlAq=205h6T*LfN;sKGOEKr^#PqWJZkYv2+12)udjTh$qB+v0
zzU-;!Cq}rD-kq%`EeVE<a-C~c`=_huoHw;qMI`#wcJI@Qo1jOcPH#@v>6dCQ<WL+l
z!Bed-&y9?#%aDj&q;Eepxs}Hwm#{#maJH|;-$8u#sv%eRJ3EuVc8PVU70N!QF<#ar
zvto`gP~fPkCEsDwK*fLD5wqEimYy!JG|_;x)6DN|!yCHkn{x4i&~Bxh$*s91^GO6b
zH?we24mET)>C&?yyOJUucy3wh43}u}@5vuYxfc+Hc4^YuerQS8xn<X7h&uVR_m=y2
zyv~11by_BOsH=PGep5t~6N1Ehel=He-s>dXzxaF{uke*qF(r+E;DhjhtG_N6Q>PEQ
z@1MX&^lCnD|50_PL&i7oEx)>Us8pFUxobsWO7A~#i87;yq)XFPPnAb`95+a!g@KV-
zDtpoK^8ohm-NH`8X%hB;ovf7mR|tJkMf_SEgKF>HD&}nr0l0Iozt+uT;EoWT#-OO{
z-;^^GK4>E2w095X>+VtW{;!Dsf`Gxz5mLTU?7~e}*1@sMmX0jrq0xmCnz7I^BRK6(
zBPmsq<{iVOyoa&(4A~8CBKNDWa(I?N$XZafXXVX=$4;NPS~_e;@<m!AHK^3T4vy+}
z7qB3CaVJ)D$IjZ$QF6(%FTYGwc%t5Y$=uh;y9KwKFF77hmEBEbrIFeYu#)eLh(RWt
zL-~>60yoBW^J*?~a4sh^NE((Q?MosTp3sjbk6p5T;LOBcu}?XRgU$+~_u0KCZ*&%t
zg(A4NO1|3MBom(jQ`JiU0$CN_gUa;)-ND0uI=TF3hQNB`2(y8^T?}&IUtG9d928qO
zqiYF0G#taF&Sx2gUpSAryardYZw>;hISEDIvIxA$9*>FhmU*~DOYDT<dGTSC+i<5-
zw9IYbGMD0mQ-MxmFkqa55Y(fjU}#;ykz$x^W^15{0s7Ph3;v3;VF&Wwg?&L}Z9dB2
zIn>tprwAC0w1~_!vA>8wBkf%EpCU5NT=@2V^}MrP?>SS>l8yy5=8c9iOY#-K2h7i#
zP4m=yX@>|kqoQbse>eSrSOkCZ{|;IsdX-GXzN#Ma!gUK={TuSqpA)oQeGHnXmdU5T
za1DLt^D8g94D2Js483~k<Rh!l(iqOc?CufjLBdB2mj@kd&Aq11u-Id-kp^wJFU}<-
z7<;8IOt{Z~ab%UbAV4h98I&!8SjzTh^4&uj@BZ+lP-b{wzW267|G2dq@6BsDvo;_I
zphB_T|LcF^#}bn8+cx4)Uijmk2wArs9#E2!al2!$DpOa%zEqTZdGo>Az93V%j#PV;
z<@t|j7{uK3najJY?lrq*?DDs>{dJrJeHa_{xOe7{e|zETnY`T*a@HS-a~7Vbw<?u{
zdgJZO{5j?Rc4*5)u>)|}-kE?L97yWL@I{^U<<)bMSt);RfZ(~Zr>K(YhcM2}jK=?2
zhNs$4!pTU+>)d*Ac!T_1OZ357u#MCj8Fy=uPl?9X_-ZP6^XRSAqJj>Xy5u({k{{+k
zc-#PI{neMuzyJd+Y6?)Vi0UI&-F`Om>iTsWu};z>G+Z0bB>HVzByjik=rwa`L`fHi
z1JMyj%_EBFr1z_r!$RLYjjsq}?0zP1-Lap+w5D&W2IYMLdYXkm1MElGPf{aKzZ~<`
z>gCi&fmpF%z3;ATJHV$0x&E1JB7sMm0b3Y$f2I|Jo*>n%d?qm?hChzpKAdjh#BhC^
zz|;4iK&&o6Kq&fWhFgNIww{zY4LRa+Wc;HJlxiZ&?d&`821}I8vU6rS@{W}MIV@-b
zx3chH9nwpnd1T8pKkCQm{Nj&F)2J4#=vG^Ml|c!?|F(IXp7Crdo0*oq@Yr`@7Zund
zF=hyioogrLeGv)NhN*4jXPpfAdA*BNYw5P^@V3>Xa#qvYCBprqUHjuqEaP75aMkmI
zh3?)&@^@@+nh1*PqztQ-i2M>~&bufeGI?jHOr1oaGfq$STIumGyR_6!N_cB`e~j$c
z6{rXP<ifUr^dibji+EOmh)U+0z=TC*^A7RM{x!(^&GgMJVISY(rfyN>;}DNDgTg_O
zXaEoTq7JX;BOU*?PU_ZY%K{hn{1k$d_Y|tR&3(bN<PGLdCxTSnGyQP!zP)K~qS6YU
ztk}D*_haR@tD-ydVoGmcjW;t7`FsDTZ+pirhy8JQaUH4pC5sB~@|j276)csy@7Sef
zvwxhMbz==?Rsk><rqrIdodg!%J|*OhTJB^}1QFZ`{wIGVXU}!1?nW<HkjVesdCRE^
z{<r-Z0g|{>4NIFF)vXw~aq^OX=s7x>ma;0Zm~AT>|6L&J<l6t|Fe!ohH24I2i`xx|
z&VwN}+-<a67KA<Istk485wJ4)M=7f73P+R4?yHc$X|&ZdPc|8axUFhcwP_^fn>p7m
z#NfEA+?A6#oLiwfYoDD59i6kse}gHt1SWE-kbUahOc(w-%)O7u)mf0Bxa|s_$<@an
zUr6X~Y_u!ScR~8Rps%yWcj>!UG%2G*Tp)oO04=;U<2`sp$ku-!FC=Q_qtUHy<<6tw
zO+Pm6%`}#KQN~))^dV_8NcHLajj?)-mxPvw-?g2rx^p#d$fT5nJ~sl7BPkk3GL@>z
zBrt*<7n&3@(u?xzFf47d|MzJR9O8k)3FgZ7h1zacjQo3>&$B^+_vI>tRhUC#%<Kn?
z#HyWsSkQarLk>bj=WnAqHf?%JpIL8^>~5g%m>BjABIwu?crwo0T>wVRd-FPR*LxV$
zTQGQ&&cxFBoAf5z++z|j0n#Q{!o!yeJTxu3q9r&1ZVyTK!iF-nag-QNJFc2BKjRp$
z!Uz!w7oMFnXU3T8*}gmZFAf}3T5-&z=_P^+`;&%FxdG~!TlVAQo=D)-wwLK*b9U0E
zRo`y1b6k*&E<TYCRr@zIuXO!{FPe@4W+ByCLpc~dB6+}(-rUrb0~}-R@foKyO54jL
z2Pj`_e}b)Np(i_Sdb*f|=K8Y6O}h*=E<u^bdz63c^=!QyWx=?rzD^u6m46(dlC=dD
z#8KrNt9Ja8u^%@LHFfmN&_34UC@HfJ;xYeoz!3|&`kmvC!-B|V!xs8!y>9Cy5w$v2
zj(SAyNi1_&A^(F<%!h9yJ_MiD<aXQYhcNWBwD8uQ0=sSK@DG70qHsmlOP$l1NAvP-
zXozfM!&aes)oY8jkCv%A-_Luv)6Yy@zvqsr%cA3#*Ck?w8id;o#lUj*AxT?Td6;d-
zeCX02KhWXGBOb)}2*Pcn<o2!hb>_%zyIOjLWKE!s>|r$Hx3)%1ktCVb9}MmDd5*@u
z4{_qMTS}R0XF7sKb&gb6b*zaaGrrg|pC^US=Vyqm28DECNm#K-o+FJD^N5m$<eNS1
z<hlDh0`1H>PCeSx#AK#PO&c~Eu2HPN=|$W;#I=-@Xip!jx<TVP<H@)eM0r2Ss{5^i
z-L2sOmDX3jz2+^<VKM>dc|3l20A^+o%6Bf*lO`;)B>=x1D_I;-Kyf)s9rR*5h*>yB
zh!Y$R#~?S$ewI41??jpu?5pCuwA~xdkl?G_9EUQ{R72REEOBE5<)_b9XOPP5A77Kt
zeX=_=a<snaF1(ghU#V~kf|Sw!97e_1pj2X2035o{LbtQ%Y+YXkXF&S|L|jgQ1e%Y2
zeBt(i9%a_@KFY;pFx34)7<l@lG*${{?C9E^0cMEE8L}D*3SzMEZ*0S37|2Rmv{&Vk
zW*x9MQ_AO(he*J#HtJx`B3NwTZ!xzPo0VP}Y#)wGx%SLIb{u}P)+PN0DD$bQ168Ax
z`9j~eL6t3ZZg*<=v0g9ihdsEF<C+U@I!*pUrI%xRLPyq84JyPhA%`u!)IRm+KLcDu
zkXH$ERD`BJKSLV7g4@|X%Pn1y82msM8k;KSy39Q~U_Y`TG!txR7JWecOXpbSH&K%H
zSy|;uz3TO0rV%>HY&lFj(-QTQ#ocO$9Rf*sY*uBTzN2EEna+9Z&VhUGfACF@H)b6x
z+<NsAZeu*!*wj7aXpeA-x^YU#Y?IEtgbqK~5*eA^dbkfXG}=Lp$>k(J?B;(KHV+ri
z_VfJ2sBTMUolvaaCPZgUPtWzyVlvawUt7Rt=$7A&7?O%>nO|%6MAxK53bZmc{hwVO
z*>#69VhraW*+q==xMlgCR2nV2zhfG4{|^nkN1grJ2{)nBw!X0$g4jcxsWbkQk=xR&
zHQm#yjGZCiO{kx3EBX&Mn)&~6_T3Ln-TV7my;571svV#}s#s}jD<ZWLAVlk`qoj3L
zl&GjUL1YJ$BX!`wAW}snB#uh73K3Ui#z{bhpg}^75Nv=Dj>t#?<dB^Eed7K81)tyU
zwIn&`Jzn#9Jx^0}EY;N9je4`9tLiH8Fji2ub*;fq#pdo5NNvLHb*JB!vSnr3_*riI
zoD^@wB@iceTEt@!Z)osfy3vZ?blrjLO*U%K*ETj6A^4MI+)$l?|HG$o`tFJjxJOIJ
zazzt;ka*ZZ(gg9F&LE96Q55KRh*je(Ws*8Mn5w?Ou{s%0mo6w%XlBtRiZ{jE`kfFD
zvhCYnun(g)$IkinpetP_F&OF3z>cq8|LMx-u-dbURc;96tq7yfy;<@3()ORHyf2g%
zjo6*H2z(isB$>VDu@xmIvN;eDT0)s)z|+bb=%ZS19ivY;JHgJg?GZV|x9!KiPM}1R
zy<%dzKamkK4_CD7W7GqwX534Lglkwgyy0_vPj~%^m_Ee8p$$6#;h=0E;VQ+~?>2~S
z1_=mp!!7w|O24SM1QVFwd=CA~x@cRsrP>EoU-fW&zJKEi{S`Npw!n?g|4+<3QcDlN
zV6>iehJJaQv%>xA-y_NtYPxjc7gD(z^=fw%NZQ|b!tA@Iukf-Fk~d~5F8^@Axc96^
zZ;qr~Hd0Z_$S(XHc>slWgm=r?bbgX02#5-vX6>Y{$3Ef-655Dr!G1a9nAVNl7%Y{j
z(3b(ks(8W_b}=qZljFsxdI%%IV1T{z4d~mg*$bpg*CR?415euKAhOwdq*l+s8)>Y9
zy9nB!)lDL`-3G;4YA_rcDfQf3uwlH(;sjL#7^+2Yr9o-=Esw5C@d4#*Y5<3g%olZN
zsR2brTgcdNj5NO>U56pkqaDEPc$CV>T{G0C8OLD#@fLUSEX%Z3%3wSD_COK#LSv|H
zOR*3pOoA?r36iFfX0{AH4{UtnF87bW-Qyf#utq1pMp%^IShOKX0$J?~-ak12Aw(#~
zHq7~#Iqzm1+05ZYuq#!7SLO6>>8`(#%9d*Iw3dO5MQ^Z~TWW~9#|MKXT$9E|m;Rc)
z(uSBL<)`<P4F+)9pN&H?Z)@q|k6x;WBj%F(Pkj0zdIpHExte8LgAN{?@%(*`18@rl
zgfp(>>8I*66|Y7>Sy(C|Z3T2<-kTt-hsD0SO{fD#Ztszo3SZ<226Ej;j-U%qoiP1@
zWC{BE=h>mRZ=v{<SB(jlRg;%>s^(yZ2xO5tk*?YEkY1ed73WNk7K1qS3TsM2tqEDt
z#>$$eJqwKWLb`Mo9SiO_XdrbZeg0|p>k-s?&?*q;T$B@UFMa#o@-JA+uoO=7b1yI(
zQe*X9=E}TJvr5)j$4((E-DZ^|RsZPuFF8J&+LO{|t0I?R*rx71->qPNH!ovKY|ulE
zVwu`i8K%~hI>u{>&^7L#Y`R}WOn{=g*}d$J6#ukf?(g4<B|@IS1EgF<>TH~~ypb0=
z`o><3p&)tQvRtzAJq#!f5Q`?^Ln*X*xUebrjoZVQtnP}^1Tyf`GKEodHlHB5wRPT+
zIHrFx+6e}?Xu3cDm#Ktrt}|A8inG$ge)pX($jjx-+)FxWBVg))4%$?llD|OaUeLZE
z6#k1NdgYBLkiERGPz8oFa-o=bbZzTX(2fnVL?o*4#!S2KimJ`%m~A?L7r`P)(wvsF
z!9O>8H!pG#NgfSQF+(s3DEln%sSRz9d1)g%mFz4?sW?BB&tAa1#RYE@_i$4*O~^oT
zR{D41@eH>Qp&t?jnSc&eONAjKx8QnHv{7@}s0p%(!Tu9=rq0u3Oe4CO9{b|{z4Yu=
zkOEhE!feVQHJjabC$OcHrP)`F^!y`Qs*|iu@S{ZW2BCucu)FhjBv^30h1;~Vn}p|L
z$^G_dA^m#Kx6E6%U&ap7rPMgC?kHvbnLSgoK5{Os>>Fw_SNrqm+kvk>do~^_76uy&
zf}^oxPCd+4*hc&IGnRyr>1tUS;h!=^Frg~SSJX!WD7+-K_wlBdE2~Brdb|`pwBXdJ
z+2HJX{Y#@%)^cCp9<4rF1;`D#zICjZY_^COONHy&{xkQIL#dVvrqJUmS9WL$`^m-Z
z%jLcv0?DBTtN?*PwDIPikMRfIpfBDA67-~~d-sRpv&(gu(3=}Qq7oFj0#0aswQs+n
z5iNrJoJ9(pv3oA7(PK&rQ+t${g#Un=he#f^F<hN2QClfG@!D73C98^Rw?zhvkT(Pu
znlJCUVg00e8V;IPZKDgzBT#7zui_tmx}E^pPtcjm5r`ztBWICqoDRMsqssd44MggM
z2B?P(sp!G54W)ClM3**xz7t;v$*2pydlYa>q5EC$qOL&Byg(O^{>Jg1>BDFInRTl3
zayfikT|A5(9K}ROUeW$&t^xXVbdLQhb8(V@edIV!VAk+RQzspC`&4It)}j!{=d)Z{
z_(n3e*#I&Jj4M2)YATCIZ`vd>yFejB{n@cCV+fdy#N*$w1{+SY8PWB8B4-PNCx^*!
zeTwgVb9lJQ+|kBV<+49|0{Jm}?7Qen(A&`0j;G~f&e?nqDqof>D9+WCFP-4!#t$&1
zMq4^p%j0E{#gxsKicW?6)uXxK<aOy(y;1gf=51;0M3zMKbT)5>1hZo4^rY~DNzpaQ
z+B7Z*Es3u05fnCQZ<yLPf3wXVDYNp}KaC-(c_=3UzVUWXhA}?AjnY;(upKf~I!B?8
z$oBNoU~?uCs<5RErAaX_96+!5y4LBL*7`J-s%Au(Rw51Nw@=b>)Uw4qOGl3{T}0gb
zhaS4gAbxF-JY`{1UK9`p%!T@9+rIeQw)Zwa@9u-dcZ4dqo?-B~p(Ay-2eh4N5kD?Q
z-pCE5lZv-avnM6RHw#!%ILSIZ-ArryT(P7}dsPs`eR0@e@jPE0Z4R=MW;3!efC~B}
zeZP<ia&E2cwDR^I@{r_58T;dmMsgWu16&u?*?vUIZU69ympVD^sjb&&GZ9(Gb!{Eb
zJLNV;@rLPqKjq#q*Lw!aaxEL7cHROb;A8ZE@~rXWMFxdi7bjGjJAGF3ShDhRVK#4v
zU2vSTzMFP30kw7)Wr35a*TX#1*yg~z5vQ}aPYB8xHoIxGutCYJ78C|L(gDge!Ljug
zdYkwRPOVDA^kW=cOk`SnfzD!VR(CqawD}4TXHIZJ`>3Dw>6+x3_Jsn8MrUmOK{Uc*
zNFA)g*h5Q4`F2Pe9gBoy5k04s)Cgz4nZLj^=>yjG{|;)MgFtNXU)`Ol-J)*M`dHHJ
zRZu-G8)urV&Bm|SUE~Cp?DoZJ2(|MI#JpNL7B=J<rCV2Kj~_4jt=971=@*ajt@h2J
z%QhhQTm!W1^Zq7*Q=nvTvp$`)w(4MXo$xs(p#dmj;vd0DVV=^V`go?973}BY`DOP^
z&tEG84p&rGPD&O(JW;B$Op3pN8i(b&15t&nz0hpTAn$ula^CH)cV|9%PLN2X-+80x
z)_%`9!f9u-JvhWu_z&hcE-fYMBqtQOSqU2|E6pwyl?M52VU*SE@>dHU;vM#B{)vcQ
z)sl4WNxpKnrb{(r>N=+g@rAL~PVxxfw)pVt#?-Xx^G_+z%F7X2GDuAYXO_R2bzdde
zH(0|`ahCmF=;$V|`wzZwNDp1yw%3(=FQu#h|BUzn$?=<XjdW<Uhwc;u_kWjZ@N0-O
zhZh>tE${eka=rF%GqnB&u@s}l4<#y@;=J3ID+EWyA*C^2Dud~M6@$Ar%%!t7dO2pf
zpXemEL8E-q0Nxd|J%({MtjKo+BYlFMLtIqs%eK;hIHu(>ey1-*dKJ*1Qh}r<x<ezk
z{@`pP`x5bD^B8ZmTE<hgyzHCvd2B}iE?ZgmL(-@*g1P>-wb#N`dsAvOkaW`7M5x4|
z>j4@WCSGG2i!OOT{W*QhnU+V=a?|^Nrf+{?pt-UNZVN5A?WoF=wm)vA*#>=n=P=Z-
zMn(jp*njlWdCXkdQjWg(?pEMR<LgUy2OZc3J)$=8_J5zuQ9?+92jje^?O0ftGT2J$
zOl<n1#r%>r4-vr0QJCtd`dk^uV`iU1tz?uF)x-9dn)1}&jFG8j80>N5QS@gezXP!Y
zAk*xA4>lKp@k_Dg7T41ExnC0PqUzt&EQ~&D-0wP3oP#SR>hV!as*6w=K_UJ5xBnd^
z^ykIgx9C$xNrh8#r?$PAbZ#I?{|AdmH`~bEF{U2|jtn+vyNw+cy+K)Ss~iw&;Dpn^
z_Uy9xL5hY)uQlY3!H@f{&TvK*RVFAq^)eV&+rD*2O*-ei!v~$mH~l^4<~*#V-GA&i
zE~Hi-?BAV{RwHow>>sC_`0%4wY>lOTwG$QZ(I_ztD{86=m<}pJRpcxuF2+m0A31Tg
zdofnYL?>b}ct+bIsobEEzEPVDCIF2vx;gc$gFzw_sWus{e3ZMt+H(BD>iMh%@<^`C
z9l~A36FldxMu)1?sJ?6<MVhr<1t@m*!wMWc^5=k{B&^55E&EH{GRb@kZbr(CP#HaZ
zgL9<PMmcNhfw&2W_fCw6bm{{aCqLlxPk|`eJ)Qjs*-`~3(&(MpRDDpb4k6Z=>1)9$
z*nqeGG)t*r&5JFMhlMyaGX<dk$;)UIQA%Tf+H$pUgEKn~KQDQD)|iUM+>ito+NfN}
zgQ*-j-}{zD+~z+cO**+=qt-P#qWdc)zXOAxX6j$H+$*vlcH-SmH0&*)pDB%<zonbd
zI3i5ZjF_J;LI?LC#Ag+j=EyJJGu<p|JHB|0qX{zc0jekYMV^ize$EAF+AZgoU9Pwo
zXls<jU@jK1Ti3@Q>I^#B8{6YZ*PLkt#z}I5ne5zPC)W;9x2`Myu&S`A=R40BBz(q<
z3Z-@O?WGP&MutJ8p%B6b*86^aDotRNGBjZ2^XzvqQzaS>NfmAgVb5Y6w)DMS5L6mn
z)A9bR)7Q_e5yBx(<;Cce#iy=8+G^=MPhq1}-J{B7+ESP=moz%VxF(<95X_I#0W!fS
zvdo|TeHH-t6{XHK2Aw<mH{oth-R-5JTnxRp?HX43C*{GePLilWD!+Z9`?O6>1~)1i
zXpJ|Lh*K9NsK#~ruli{P6WyU%qZFCJNiU<bXFJ}1>3UumUV}<|*xgqZ6c_XO?P7_b
z(Kgto2uhSbGtUghE<O9xElQJ4^Wt%Ygtxbc^4Spay~X`$MWoUiecwGPwVA(A^(hm)
zHaPw}7v-tN3J!R@EMD3v5;+<>j`WtC-9)dCQkEqRF{%UC8%l#VA^7x7DEq^JW({EV
zf*c7u>(;^*#l2<+^^&`P@5L<iUEhDUXVS_x)-?8DWfLc~$-uh2XW)2-2O{AP$;0zl
zrW4<~6(f<e6qc;<7%vYclz|>ms=LOcdmGrGLF|0DRf5Wi$!)yY*G!qfx&7u>AVKcW
zNLA$jm3-Gte5T2*7ktoqZTH2q4ab)kfs}!9H_b$uly@y=FyVwv&=%+vf)ZMQl=$W1
z?DH2gE!LysnM1^dtkMOVvP6r@>9di4Ub4ry7n7t;s>t;hFnh=Rv$k<VvGfhFlCQU1
z=%ep=pIN7?4QJ0bgA4N4=A|cwRr8^x$ZQ_t-`7hmkB((b3-?G#HIb4qGZo%_tz}}y
z_3WYyD#mSusTNCAce(81d+`6ev2h9LCsi7fm6jP}(gPn1xo4;~45`5s%$(N)%V$b$
z9?40LowZHN(kmEqI%_=GO3kH>EmyWViW{0U59p>;+Qk+S!zwgZO*UHz1hOk_i&MYX
z+D7@d?MXxl%^-}<=2?fAKK7Eamx(2(`3p4p{vV~_NS~is;2M-7MJ#RcxEs_|yLRcB
z2eVY3ZT?Z3RFQ|1-tu@eb1c!%sQcq{6)^{4pOczA`^3I*kK+immT$_yo2c5Hyt?Va
z>i>n=(IZt$M$qm9us%44Gjbj$3I1BrP+CZ8jWsm8?t<g5YAY)?KokzX<9K*9bJ3%D
zifUgCW@)!qA%ZS)U9=|sw9@)nPURlC88qqB(Rg+TY_6IEf&tf=IIWP@xPtn7T|va#
zlqsW615+tU<C^+w7iRr9knV#vYfPs`f!$qmJpu-zDg2w!8Kg#L=+~DKs_CE~b<qKb
zGktO(?PX=GZ4P5|*CLEYEmJVyx@aAXfJ2!cC6RJuO;JkYZ*W&x%#i#?o9{w<z=i5_
zFBUMLaC+!6y%<Fhnn62X8Ov^Fdp}fbgT$v!D>RnK{%F?#bi+#7V<tXi@j)I%VaMCA
zH9Mg9mOY<u<Pl3*2{xeDd3E1o^ip9_OP8VZfXU-v=6wrz_&LEz19QbkyfZB=QeFEN
zoz2-aaQF=3Ep@#kF~79gtIufM(Q7r{wxw>;a59m9E}aPc2@6m~-{0dS>?`Qzmv=})
zwK!`bZWL;Co8}r=><Xv^dQnF+y}csYq~e#UMXT>CNYi+UQpnCt>@~aCe1AtdU%{=~
zs}tX7DC>OM6)G;<v`NzH*K6rKn>N$F*Pdi6IwQ{qV_QdyDQvh$V-8{8%jfjh?IJZM
zlWA`68k?roGSDIAeq9MTtCaf)&f)U4NN5dq+9Nj79euiphDahuccL0JB|^f!E~?Y=
z?<M%ehX`wC2n6#Z8j1v=>wuD~XSUBzY)S@Ath2kRV_|WejbRO`Dd$uPh<Jmk$CFhi
zL5s4Q6N{>2o&6a_CV4Lwe1Qmm!~vG|o{jILB{f?02L+K72@e%=M2_GxlFSu?;f8<^
zLRSSN`4Zv#BgHMfjjXLGc1T(%TRbc}^`w7NT>GeR$D@i}Bq%-1M`wwwT_TnoX1e>S
zJPY)JF*8P5X;xBJ*@Jj@PWvoZw?Ry=poV~2c^|H0>l_e&*GI~OvOFcV&Qbl;nC;`W
zl%-6A*y5=)_l~W+phFZcldIkRqf~*ytWQBP`hmmF?maZNdhk$#W>A<g=LRoIC%o0!
zfSvowqU9plIg(*9)LUHcG4-B-yq*QK7b^N0T@4Fq1x6#HnC|v8OpVL(odZwuqR#9Z
zmWkUZE7|5pC)_Xh6^VwZ+<1fci;x)5LBz}C4g=O>l}o~;XmP1k8EB|o|Hmwq<}b_|
zXOfE7a{vf#qBjl^-c|a!Gv7Mxb}H-u`0>ZZp$fR2FP*-OZW~n5Hq6<rNnC1=PRD=*
zb>|N(pyc0~kQ)R3J}j`iL$X(mK!aE_{8g`=op;YeaG-m?j#&|iR;u`-*vzFFU36I!
zHtvO+GdtOjYVPh4^L9twhq7(FY)|HC-HE1PmajxMbTB3SutPEj@jMLR;A5ibHda8m
zNDwIWsg1e(-U!vKbeN)^v3_ky-D0Vy6uP=}>A~<SWHE9)LI`7+rt5c`|Nj}$Q#uS&
zY+)jOy}(Z|{ej>ne60R5JT*+mN;ckSnSR-!p}3mU_gq*id2LgaDl}T7X*_Gjb!V$-
zx1T;>^&8TbB=xEMT-z7S;9kX}O4hqqf5_0QtwLpYb%IoCW2<Dd#@c8ntvV36$%$BG
zVqJ2t)>g)?yFkU*6kGvY{Pnm2nr{Jz$;TQL%1NOuJe5Z+TjQWM%D=b<H2++6gXK4)
zXdo#T{HKE3Tfr>VO~_ik@gSq_-p5BQS0O+~-|G27r9z#}g$pJc^oCy{%pVB=+RA~x
zH7v!tB#WZ~Kq=fls$stYQYzMr)WGpB2I^%wEGefy%6@;%m!GaYVkI7~Wjl)bD-TZi
zH~*^%O?8eC9EtE8a{1d|yLN27kpf!65NXViWPKq<Ff`qH>w8_gqA3RM`L!g(O1GbX
zzI4*EN<11ucRwmV?*foHU{((*Wfjm~s2SIE+w4SjfGGrV&Cf^~_jOYiCF4*)x7zRR
z9t;J{YhD9{<3(2{0#kPI0r50n39oU?_c$m`i-xOEnPVyy?g=ER$(>q$Y~w7xY7VJo
zwi5sfMe)4b2R?<2@W~-0I28!74|rVWU(Vt<YD%oq9u~E+YGdVW`qazeTT714eX2ED
z1%bpOQu_T!P@t3%b<Izq1*(YPF?K>6H}ClAM{To=r0_KlZ^AwYrKx9kPcKJa)PQT4
z0k+0WE;uMWw*sX=Ct!@u{BO~lDb%00a2Te?GCMnj4;6+qE(VFG9x8w(pf_I%jOnn_
zWuQLrYc0A`{R#o~&f8wgC__*Ky6!Eiy>UMQaLBn^$L?xw`hzWvV1GxX+>U)9z^6^~
zv82GSK2d6cvbP#8+XKF-bR@&v)*YYYC-c~OAAba!R$)xGCffsImx&ee7VybA(Aw^C
z(DPYWWUXIGiS2&&Xh?qLoW<e-oV?=;I&{;MXdMFU(O_r46#G-W|3rut>0TbGu{06;
z?EEQzkHr&fEdQKEn~1CV>507GzyfN&{Xm}8+#WN}XpePB-dfCTO)8yWL(8M1@D`(K
z^)eAZ0DQ7md%&tClVj#J@WJomfWk-&H1VM5BKvNgqgI?>`t+lOJpD4NwoUk`eMdrN
zXW^~iH~bRwle9_@J~uXWQyapG0nOaat-G8c`?&Y%w=Zvn!vMMe77uflfgfg{0^XZQ
zhn(`24dAQ6546GikXxS_Q($~6|1_z7tA^m9E>$n~Z<QbCq~G$kC!YTF4`dadR1B-2
zLg_W*?<<D$FP-e$tP>v;RH%$;%W9}(9ogUMdhva?E8SoGPvCx18|WtX(Y5=p{5upI
zQg1wPWOg7mK(DsJ%cYF_ru4fiHR4x@l`hFshB_H^>?Qj14B5J{nRNJEkH`B!S=INB
z*=rf}-$DLB`xHL+XiH!lw2HtO)%M##iWbNa+<zN<ye+`3TVrPLBgLYZSKOziPYV*`
z?xySV*&e6%HWF8!f59&rb9FFfG3pd=(tiE6)@D0?;T0BROp1OGeG$WBqnzumN)R1*
zUKnvII4MKylaZ|U65kyfMbB1+U6|_F%=+|@AyNgq*|}R4Tw5!%^LRHmS-u+C3B;Q~
zl%_-uHm4O$`P}E3ktDD$jpOeu5csCkoYnx*Z>smR9SG<YK5tU;iO@3)gRN<4d!*}_
zAxLaO?ZX5);1*tsH9<-`-qGj7Q1~oPK9S3#W8M0G<e+%=-$5n2S&Cr(w4nV|ckQxP
z`Rnc39>beGa@d2RjmEcsrNTSQOg}6Qds!@IRv2ps(o9uubw41;e0E}{)u^@gvEPis
zE*KCN>~Mu`uw3tW?R>6}E+JBuym%jgKYPh}7T4KBIQkCc!%Pdl4XXs#>#ne{Zc64<
zLvCZu+6IiFU-}Bx^y>%&mNJ^p_x-&PA<IWg6&6b9MA~i;&PFOuykp$t@rMXciBWd~
z+%Q#7TCPlpk2Tn)`E+&|`#;K@BKU$a6Udy25j2rDdw+U0Q>78UZf%Kk)3w;QkH1Ul
zUrW@opvF_vGx1l+&wdamwlkG_rF(+W_<QsYU@an+3N}W#24!^^-z7z<mMnj=inJ&G
z=f(J9vEp){u`|u^+inADoe<D1F5aYf0^{9UoJO*CIWzJ2BK<;Ag7H`7l4!M7=$Wmm
zb<0Ehm%cV3Qosgsm`oKnT1m~1sJ$xkp!Ui<;N?D$M)spYE-XY5|GG?reYTE1-AC~R
zVJLAN+}IM2-0LgVJ6FjPD7Po|2Gx_Q*-Non(5`<s;fX$;M|i8WT@<zQmj(s6e%d%Q
zGC4g1<u~Iz5LlU#p{Df^-8>ojEM@ZC5L-7auqaAX8ura6Na|q6HkaDV#AXp56a4hS
ztFW)B5>p3F_&<J16^#66bcV`AfxWByuUCLKZT@Cmrz0m?I=vo~4>Tga5bMh6@n1c8
z#jQQ;C>65Rw(jgWFn*KEyry&@D1A3g4k9$JJ@Um3)J9w9oaE+pSkq4j8OqpP4feTe
zi&-<rb@95OO>=w6x4vLOri59_OPk(5T=|~#(JUU6dws<Z_x=1%kTo+eHKcu-{7v<2
z{S{k)JwVSSzyI$b>|~+~nndUVHgAG^wc87{K~kAJ5A^bwAT9qz>)5Y~{3@k8H7Z&s
z4dh4N3k*McXoJ_D=?(l+RfNJYDM{q^2Eqoe3$->y?tCQ^ND}lW3&?v_igq0cf{&xn
z?(B#mb!9%)m<j?_&70q!gn&}nLYGuzKqMUu3%`wKvF&rtsWgCEy3UlHg?oB>^LCkO
za$jU<PJ}%mu^vOn5*6h^*ylR0`Gr0WCJ&Z?@Eu+ntCL4cntg)|qO^xzYFj|>wd_Xw
z_t5$@j<)kF3GTUauUscC5y6j=sHAJE%KGfP6c$7DkGP#G>iPqY%#E0;Q+b?=u38+&
zed!=!dpgIP{SZ~I(FNd^jfG#ZFl1}~r-G3Fr&!iQ96GHyNhG=gn)zXyQ|KP{xJreQ
z;AZkiXkkXZ+cnSW9d{orh*nGHC<{rY$?{jW8n*0^_MLB}K}Xql^|&andpYTZC0z@Z
zk)gg7<WgPBt4>Pyx6y>`4XxKu9Z`{LXoD|Qtqr57x~1ED@VHVdeIQ^;KGo45X{FEl
zvQf&fsP^~JUE@+PBQ=NcCs%jK<JA!jhX%sS{KX|byn$2;wg2pC{5tly(4F`~vFju)
zuhSFk4H}P<?sorpa}%gP0fVUQka6BWWz7~o({@u^KkymjS<`YRPQel#1Yqe~V?E_T
zDXG+nVS_qqqAOW{k2g<HAf>sle)q*Wy`{~+&+g20F*JI&f4Gg6Vo0xv(nvMAPQm7P
zi}{CQRbJQ27nbvH)*}v0Ky@C@8YcYo4>1-!%a2q}O5QILCRV)Ny2nbav1>m9as=SC
zP~X%(<~?_7wYoTs)G%jc6Pl+uGZG0@Wk*gLHEOuIomF52>!fex#9U<iePcm_mrHG(
z)-ALS5q@}YNb3H6k0@R0ZW#`9vNOEEqe`bqvCaF1CF@f+jjrGQbERsAx5m(i6wjJY
zV-f483rfsnYAPiz6A6B}MaygA9YIDCwj_)nU12uJcJ8lm3-=5Zt>5@w;+OxgeW<dr
zY1DpsgGUZ$P?*R=su>FsH$<qiO$^Ob?8)eRea7n9Dkh6L<h4ZksR%bbq<xhmujEen
zhn-HQ#<6@vBSf)*!a}#Xe<@_j%Lti25j$<T6-RZaS_YZ!-7BB&Bg)owLYbDKvB=u~
zQy}VP`5HB43p|0atr+SG{-UwPxTw!1AFk?3{=a7wtOQqO*=}ABix;M5ZN(Qpa|%m!
zUe=-XIOFb9Z}(R_bQsCD!5VR6iP^&zOLkb7;b6lsuK5r^ZLv=>?V+?9oO5#&ELaz(
zmfQORVpNQ@uu6k0qOt6OLf=o^BWs7qTQnyF2(j|^QeCH2_v-+hDcL2T%`bFtr>kxA
zhHy0;4#{C1)XRYzA~^SkEC;Gx=G`9;^o6dAoqt{>vl=AZfq!-~Kg8)yHfXv(Wtckp
z`RwlmpJIg#J#(zF+`6l(O@5G|N0UBDfBX|~K-c&Uf%O+{29#EzN`8x5_ohWn-6`W8
zT<UUr8;(ID5q$6Kyo{lKD=(wJrLnZyorbI$lVO_l*|kNCv;TZXkaxQ~RslHx^~0Ab
zsK(=HSm;wFtMLyOb?xr|5s0QMU)<q3M0y>t9pFS5hO><$hC5-$yA0|sQtY&*VLI;P
zw_<)Ni>Ra*D1O0}`1q_h_&lsCwKbZQl*^AzaY+2qygu-RhnL1Yn8Tf6-+N?m2Y3nl
zl<xEW5x>5gs;fJ6_!Q4s77fO07E=|0x;&-^`o~QSJ`m%1CyCyFx1*N7BUf|`nx7_H
zL4TOmL!UeK@#B+MJiyLk!2t89-XA!KgYu5drimp4rI50ATo_YVo}J;{zmErb+Pv8E
zl_2xKgR>V5>i#9>4h`dkeM<iHvRt66D*lY7qb*=MutEB23d-w=J5Y&6gK-m!ExB%?
z1^O376FgTS*WKorD4;L06jM1ap7J&Asn?$W4djd@-G3%~pI-V~IYwfn=d1C>?b|*N
z3C^(>hh6bR5!4=qfm$S<J9ie3{RS76-5h2;3*Zo-dXmVx{|<_B{NTWm+SF)zK6`3e
z13UQcLWn=W=L~9eMCVt>Ua_UftTZ1;jtNt=@8}}F_AIo;tnX$8_9Apey08$*t6*l&
z%oHne&(6bWufK$IjuP>~6M7?&JU|7!x1Q=4OS{Cn7Z{PUP0*m)<D+T{_`?UhJw@5~
zF;a%oL|(eTXgz{=6+8KH>;p&*ptp|Szv!WqF$@-^)MNyTDgV6yfqm!dm3{Z{IkthZ
zru{%Keap_iI$m0PBLxNn%CL~Yr7@U?=76_@hiqVwIsY){{0+1ZG>z}42CT+)J~_QJ
z_j@f{_sJD(MAi*V{(iLMf^X>Jnzm!_DV$V!k>gI&=|y;mrB7zWl*iB9j~lHtc`aL0
zjsXO4UbXQEwn@p&+cgeyI&;}*+TM@`iJS?6PNU$xn!#q=ZCh9QGDR(pZu9R>wi<Lt
z8y5G>JaDA8E9j!k*x4!8o!aJl^Sonyx)%OvuAb&3;PC}nouW}-?MH+HVYre_!FlD;
zXzb^SXDeAZ(;nn4$3l%d^S?Fi`D&?ul#xyfXP@{oTDLi<yc_Wr;@gmnVSNU05!m=Q
z+jgw@;XOs}6~DlEvkGK6C22c%N3Z<bap8Ij-qSyAI?4xV#E;6jXC9g?{3CC<i7v92
zqh0fU>iMC25n)No=QT0510e*|s{faGoZ-t2YE9Z~l1?O-|Lr~+4le8KNYoQFN=$U^
z^Y31MiC=XAsIAZgPjo4u#vK-=l5VJ43a(Om!Q8J3rglc03G5~%q2dPrfn^5&_q{$q
z>BGx7cRnPm{RJ$mSDl1CC*l3sp@bvf`YBt|)<&t^Mma$*7(bLk7iZ7AF)u=*0U{S+
zhv#(ztO|M^tt^h!Ao8#dMHHG@mpP;A;uK;rWnZ|W$T_ly#jXxew-($u(WT4Wpy_gL
zif6oeA<e$zSnYQ|rYd9;28wA(ng--bwkx3xzc^rxo$iu38X54cR#BWAe_OQm?BtaF
zIxn+Ij(|aTn=^CST%~~&*8>DEZQUL9YxCAKJvzD!+6%e8wPlf{qtddwLnD&~D`aof
zGe(7CVPCX-Gin4o^Nm)g8FF@QU8o%LZu7nm>YSzP=TD#Jt7K>5iT+}K_U!9O)qZ-R
z(#3L~{b(;uocWyn%tV=0vOuxuZ1qxWS~jf3zAwWd9&cc$u=cP=@R~l{BS&j<h65Z_
zcV7ZMilMaof;plAVOHVVTOIY=B2_Y`!BY(i3&FQ*PolmD5bdZ))}b$`Q4(orqtaTp
z3uO3H-=}>CR387dfyMNSquBI#$)%dH?<Q<WH^O5{LWdjMcT8^V!~J+8AGn$gg7DL*
zhIL|;`=P7yZq<@Ym@+jDPdDm%I_(LnV9DxM1-E~a4vHoCLwb(6Q^@SCRJy)zE|9k?
z_l)B(&Nw+b%bm)wv#M;Mwd1_bzWwQ8VXrL(Hs5uKpK>;;h3gKqYzCKUs#viED!ESF
z(6W~^)hM(hgkCf^k>b(VcS9~G*Z0qox4)E+rK81uO0`z&o^Z_(;GJj@TwLsEqbZk}
zQTt&{L2<sbFK)8Y8%MkJ!y~FzR%tXn3&_0c_v!2Q&EFu5)L2?xr^?q#Gzu6_gXGeC
zR)32%ogmF~=NfFiN~?{%q_Y+zQ8<K)&%3fyG@70c2Yd`9$Kzo(vPPr#P+(K6sVqKI
zX@9slEScuG#TjIrSplXoMBUlQe%FO3P6l8zC9~Uogk`5vb9!O?E_z`X*BsxXWE)tl
zq-KNs-;r~+>`5Q)W$Hlx^PSTMCB`8f*vQ0FcqL6&<J%*`MAgn{q1`{)V$>Y19>`j>
z?!(mxr?4pYopv7P%zYgPBYo6cH>e>Z(GV<HR7v(=L%H7RsaoKc6}FlGj^I0^7|9}>
zs~rqU=$uY|5ki`vHq10In*3B{KIP7n9IT@(0@jAxl98#RZY!R0C#39)O4oHk-*(Wn
zL`qZ}+9`dCSK4pQl3N8tSMzrZGzA!R>ZQ68E1Qp=rq>Xwc*II(bEhK$+5ts4S2KzJ
zYf`h_Z^ob5J-}OPIu)yQKT-l*nVYVZ$yN#vKs>l<G1~X0YU^|w3voA$LCaahSf#n5
z@0zy5VCQ)ohw#e~5phhW0#}us)Y+(L$1=hD-P3dyPdlwh<8nif2`&zI#2zkQm*z_}
znU?68T7#X7=7Y-GQ4Pj}4OGo5lhyuIWxMqj!gENRWuXt9oA@_7HLv3=y@t=m@MJH!
zwrf<|fU89tafd?<42<-0SJfiwR7#yl)sk$|Di3cfk=@Zvn3=1{E917DclDI26?X(#
z_~8+?I?ALlryrAJ<Wm8@%#d4>hf?;N*LwWYZ(e=99Wb`9x$Mly;=DTu5_jdDU^B4T
z=jpPN)`ASW1c&+PFM?w#o7k=xGkpQmAjh@@l{g3Ai}?(ZK5TdSu0F@Yc9?V(!G-11
zot9OSs%VkHjqkh2o{3s?7URSRoHAyUcz<rRD7t$3Lf61JoP1d+k7n?1kL?~R8e0*#
zez5k-m<jWz`&9m$gK6mk_F2bI&;Dy*aQU<ZvZ8r#dPbXnlfmUmB%*~km5vemmn8>!
z4SxiLxrxk9>6-QgGgA)kG|hUzb&~H_6N5!23@Nw?ZGC1Y3;|FDA*bvJ9*0n23Cg?8
zY3o^uAQ889f0t?J%HG)d4|z?yeMHm;gPCoEVCaL6;tC=na)mUr7WAG=BsG15%wJw{
zGb_*CGfc`fIciJo%`+oGKUCN@=u45ArHa@c;1*`IEzcfDE5L#Cp>vOaw`xe>sD&=d
zW!hUv(lr0hz=QAOxec0@pmKHcC=LFZb%_6Wi2ClxL8-~F-BO2G^wQ}4sUw8Dw@(7c
z0$%lDP`?Z7(9cSDmdTjfm9%n~0v6;1B0fT9{E+bIzu&3T{t;#E+U+~jafQ0aI`(Ak
zPrMk4qKOJ&X@A9d(^wvU+BS0P-tV~&!n@l3k07SO6MF{f6^d3?w5mt%$DZ~DBPF;o
z%gfauW2*w6=N54VitqR4No|9ixfT4u`tHhJ>L>&zP!6y?a_LZU&MQMXzXnO5e1*9#
zMH6(nqRjVt1H<H@(}{H~_ElX=%@?@FVqdLGhvw4KfsPjWIzsj(?4!dC%RePDbh$w#
zkPTUeSG*1@D>I@CHMU2uz<ITyxfLe2O}FA)Ja)<`4~U|fxSTQM3N2-0%W4reQSXMx
z*#@<&1s3a)Vm4p*f>ulpkRgtNpC84iRvvlZL*%}g;)pO(%st!*y5^+5s_n(jMQEPv
z$1nPyoAs>>xFy)?!=q4*#M6pjUR$knrb~Cc&o&yTAS<-W&Rocwu8@82w4X-jxpU3?
zxy{Yk150b*%B!8<>hI@`-i8{|><1WKz@}YSrU5Xd>Nn4O?R150NO#!hz2jbexAhdq
zqu!E#pcgf%kUx(MM#8VQCB>6#?w_5wM53XFz-6#1tH9)P+i|P_Ytf*SElLuE9ep(&
zXE6WK{_YNh_b5=jD4N(ib<)uVYHiw6IalfN^7-&_-tCXdBq<s#TjtRKiK&5OC@?sZ
zrRdZcEM3&P-KWYOqp<~F2k9-nfiznZx$C0m3JgY`@zA}Yqwg84twkI0tlSqf=Kj4P
zkWYBm#NmTu@j>$sNBqTNU1$z|+B`!&-0|)v5Pc$2oBKDCv7n1?3~5jP<wehG{+wCH
z29``t?yp(3cC!}WcWA1&!qU2W4h{A<vq#BB=wxNjy?#8+q~bi&EcbejqA6Rp6baPn
z6-9ge`WPu1TerCM*VC`E=Ve^!?5uDDw<(3bN>U`2?d-(Or~vhuRg2ypfQCG3m05rN
z?#DFPC_UDT1ORG>APJ9mzKFm0BV}N`ePKIC03{;OJwX??h{hxV%(gu)hhuIhR30Tj
zjGbpm;Od;UoO_Ml^We&M0YM0w`?wDLtCueMC^7{Es%0jW^t<G?&uv*7hI@kNT+F5(
z+Paa7NGu3?%#Emz*JZxaX<kEYjg^Q&$aPVfA&%Y$2j|MGaC3;!ta5e7VtIEt6o4Ib
z27n-qm%`XOv>n1D=Kw1uQ`n9zLNjZuf0*Mf{teE9a&$i-KJ^^41-KsHO<6T}3&?WN
zD6P*5u^|TzhZf)eIxLor4*-%1pBs9htv>(o)0_0IANR|#ML*xjvyoeCZwoIgRMbG_
zDdhV>zBDsW?~6BjO4Z)T6Af{^s+?ipJ#YJ8l<$S<?}GDeMf#Hoonl{WY-Q6&uY7Sw
z?QuUI!$JU6)2?S!M5Sp&22!ofxrouYLiO;m5pEv3O!p#m@<dQ9khVpRS^wWbdOA32
zKb^Gl@2!pBUH1`QWF?98P7<_MI<^bKmxLhkkhM48KitG<sUGGlE;On=*=y^Lh7w0^
zeI>6rwR%KaaOvzOH-nHBkkozl`C`<d^Hb(-S~R|kg@YBEqGQ^um%Le{4i}%iI*K=d
z`nTFub^hIydEO<B-~H*=Y+$5BB!#(`+U?&KW?FQn|78rSE7KxggFUhnr!j2CqAkXg
zSM_cbpU;|(VOMEs5aGMJ*m<OytQoBn`=r8n)VWuE!wtz9je|4s*9Q8cQ14!v+$oA`
z%=^V#MbY^&KXElg$sTzbE6QlDG?P@{MM;bLhQFtG|D-Hc&|N!U5&D`Jx3}u77j~{|
z;Sjg=@pe9}&PVw%>3^SY<aRj?vqxoEt{_V&pPQ`6^eDUQ7Eh|&zg`9e`>oC3h&nke
zNa~?G?bM=U`A0n}JX?;-tsEAl;BpB;0H4__-f{K{zFPkfL4s8;M8uQ#&Cf3v<J`{K
zAEV-M9RZgvpL0&Q<Aycm9c5=>7VqRJf5Fh?h0pRGLAzpfe3ZuG4tgR|P$p9TcnR;#
zO*mhkM5JrnRqiH>+qmG(S3WKdwEH&=uH|{?_FYz33fJnO1G!*GJ1<SfG1g;bEmg|C
zduu>Jnjt(-P{Qd8tjfBJ7%vfDY+dyM0mO=hfR^yEo6!uvR3$SoTJ4_Tl*+ggXsWkd
zMw>;}!(eZ?bkjy>8O;DaRxOsm<j6>~d#61Sfu7;IYp2Z)GtG;3Yf#3_MCFH!N~JKD
z{&-6ZtiBi9^og9)0^N76G?+Ot!=bVfIU)MP5UoUG)idndA3uG@EJ5xeEBUDbdAMMK
zRTZ%{a_(XYw7Is0sV#b=i0blZtf_h$ifxx<jeNar{dE6<KBMY4r8H8277rZKftHAi
z9}7H6d7GkOqA3BhFw!1xDGbz%Tb(qJ#OEXI;MFoeX~D80&6-=K5iyqV7vu);!Zeq*
zv|JfQye!YCCnRLrLzzp};*+qYYU*{$glufuqd0w`@|=xyXdSCNC!j`;jjX7&vy>YA
zukXaspfn0S5c*2d-aM~}K1WR0uVz=oUK8EME6rj4oE8s#&ZJr<?p6N4iI&KvKSp8~
zw>zkanp~f(!&_Qo#w}E8f<%--ffkqskcrZyPhQC_{SiNfXheE130yonS$Cq5g^>1G
zXbgDS_+5N}<y_jLf7i)?&O-aSrFs6sKtqqR#i-T!UDMj(j^9n+0~KgkiPgu?P^J#$
z8`>##eY5FzXqoZe%~f{MYvanJ=%}-&U-(9J$T8<k#eKQO*v1a^wRSn_RhQQP^XFgl
zIU3MKAcfeyfLB#aaN}jRk<UW-1Xo2npQ`vLO`nDnZqoN$(}IHEn`}K4E}p-@T4_*(
z5~qDv%LTb>8wk`tTz1U#f}p8jol?r0H}9pwTlrL#ubZ5D$t#lN|7=1pIY?s2NGk_o
zJe1qj$oF4ko#}`H(p}jcg1a+ZjubugW?34|kb{f&aVgC|)EsT;fT5-etliHLt@3tQ
z6C0bkNH!BkY{40XgO89l79ay|SG=*={oiZ$g~mUhA53^d->p|!7XAA|vxz?48BrS7
zwxyxZ(R-5l{53#G=<Afwx#l4en<pr3#1DJ>e#7FT)#vfoT*G;#bO|+r5c-F^Gc&&`
zqt}GkI`5pVf5M4FnkSneE%4GHw&f~&EUwH$82P}LCZh)4w-|!TyNqSxV!#cC+c+)C
zwH9OfFy27)?}c${#BaP4I++0@!-sf0YDB6zP?&Sbr+-VvKeW4`&mLb>WwCX}Um!7`
zJch^TGw+egJ+ttVCXrVDlyY?Z|8VAz-HL|3(cop=|5_XzRRb?S_*%A3W~ooPL}_hB
zSGQ>mtr+EIq@mMJIy5*!8J3IfSgWf#>YsQ;)L=I{t9+J{CG-)QFPGKXhENFgUVL)L
zx6-{kHL8Ldamt=(-1lydjgYnLE{A8-81^Lz_3_bfnayFYe>EI=tB{qF=dusCCFn0(
z!RD5cHd`zG;5^=#dw6f39HdC+M9#Hgo@IWvewfw_<TfW2Ha}de`svPr`txsD`;<eS
zm-WYf%0+dZp0k5`XC60-w;n||=be_Ju^p024w|Q~uW+6Qy_kK!e2)`KX$e7hD}rpP
zZp-C6NWj4q6B!mm^JLDKn+%o;t8fn|TB(>6HZkI`!;l%<e)w@v-+eEN-f#bxl`vcZ
z-+5;!9N7L!dbN|{u9Lex1aI$FJJY^%sl&a-4$i0*C#6OG!3v0F8pS?Gf5FSVROC0I
z`dK^zWPg4Yp3I<<umZo%jLJu-UYMNhT(npEJ^_1pM!MLqI>E`qZfE*kaeUjhytk9f
zn@8}RYhyd#4r*TzU2{}I{`UTycl|KJ9?XQAMFW6z^^)Hsv70@g<L(-%`u>fIgQ_=O
z|F`+(uRmBZaFLy&_Ef`pOisfcuNk6c<ohavOZ3S#sUNYwS1@L1R+(0=n>8$v7D$qt
zMrFCW2?njIYR6hfG}vl(`+2!m0s$ZDpKAF*aGF~;5OnWLQt9rTA9c@#R%9;8z?cv&
z;>vob5tet+7MrQshvu#DexlQyqBp>F9I|`&ISFz`IcThn+8>lAIy19D@Gs&UPYG8h
zH(!KNM&S=VmI6|Zqs)rdmae&e3qUBkXuAv0n;M;>oxcsSSLCb^bW3R`E_u<U>uH<j
zOMB%x_%|aJ-BWDE@JCjs4fJk8MOs%#;niFEjys}a!*#{`JmOURJ3y?Jj+Ek0a8vvz
z&l7)>(mo``5$+jEx5E?4zQ=t{nR9goxGZ+(jb%83P-u%i-tqY=L~Zv$uDZ(7mo_Z_
zyW93eAp-*ehaF^SpSbzc?l;9YJ8vbxLFXLa(KKlpk}qSYs44mt1Qo{o!9Kw-<nymC
ze>!&`HNcBg^|W(ZLgvpuoRFukA3luF+5-k`j1X$(e%15+nEgVCsBmhc>WU^(vSst^
zypyA5_3Cq@gk@!~fouE!(S9vBS>qeoq5*p%z&d58o(~_127L2AiA*XDRs8C-g!tBo
zLMT~vI_q08E0_h7d~Yo3=Rd#t?hGN0>ck2z*ltYC3;StBkRd;zLrFxiPa`OYnilG>
z*SP;Kk+O6B`;?(2X)5EoUr$x7vTR)8ha#1Xh>TR`k3oeXg#Kz`Opv(I7Kb_{L~ngi
z7Pjx)@i}->P5pv1l}7dLm<RKpUWD&^e2{Gr=8(B#9fbwW(tn?Ry+DRak5X=F-;qDI
z;70u9Wh%jIVQDGHwK~a;e`>#jPaTvY4!ZT-A(eTOsYBII-*q7mn7IaOJc4+LODvI^
z%wF)BHjtgdTfBk6rM<8Gy{R3oAURpXqur8X9>fhecBIo$?Uos#37}=D*mgMKbq>zc
zyyF?S6?vI9R^^Fq6xCBA{yRvGk>|7ZZO0Ygqf1aL^3Y2)I_PPt42~X$Mc4CV2#%!n
z^ruv}I_<xMe#MCiD*f$r0|Nvo+4s#fkYwDF>v>R(6bT5!S>wTAkSKsJbP6HqiK3HM
zE#J(~D)DGI@{k7?Wul|jjlLYA$d`0IYH#ofDPM<!7XRZhua%B7Y3oI|1K5@AJF_;d
zDe^?U0&fU?+nf*`PO-%FIC8i(2gR?@P~hF#^}x&$+Z%lqS+~AIc$#sD&QU@t*K5WN
zNlx_{MNgssOvg#j+vN(Bkz+}y%?Bfw#Jf-+3g8%Sh0EdM#=HB(+lHUAgN+%iG>Of1
zPZl~B+A-a+F*d?K#ug>K*sV`ByX1v=JI0CW;>d=K2v!j^ecmX8be#NxZ2vC^vNdGo
zm$7|NHB)XNQ@eat=I$6ytT{PM|2oEY-;k~m2eX4?jxWpghV0XTvy+w5_vlG&jq{q9
z%T0JO^k2}js>uqewJ<A`u6i$RYMi_8Dph;T><;_dQz1b)3TY@JGq)Arrp$$7-nt~O
zW<B2Q;eH(@;C<t`^H;8|E5R3)oC+~DNm?{rlpv;75}iA}ZAl)=f@*VlQq0>O^Wb{u
zvMs1_oUk|a2vS`7+?n*c#J`vQm`2*yCPeicgb=E{N0~c+S@LS?qoc1)YGDo`TTAJ6
zmu4Whgh^lBIK6PHEmh1Km52x68lJ<-t^w96{YwIBxog8^K@zdg0=9*$e>EK*2><nu
zt_G$f%<GSVbnZE6RsUJ3<3^n6`Uf)^2u>|ZjmVtx+r_Q7uQx3SWfftcTZD<{gYl8D
z<!qJ`(9B+ClaGj>SU&dbyQN|BxWFV{Qny+Wygl*u51b7HMMPTDo`mx0#MG2w8Ce&0
zr45yw3p%HlbEQ{o2k|H<5ab@QDL2LV_1YG!MF54I2lsW13>8;UZy$B`bm=gXwNbim
z+uuwX4wCu%85&BhiHa7M2-X$qYt!Gd0$xOazgXHl^=%)iamvuBYoe8Jj$$z2&f&d|
zW$7E%8HH;>3NDr<{DqiXW*gM{+82m<=tMXz-R&<}D~#S#tV8HG`{$pcG_pZ4dW~?u
zSQ;32CHi}|PjP`NvJ2BsrBw@NJZT-b+K}At^NwJcB#RtvCp_=EdDS!H_waW+d8HZb
ztnTWyuK+*w#wx;l>^pe3DZY>8Pj3=Rr5?9OZK#SQTPH-CL=3?h7xNIcDRWAMBNmJq
zw|bvr&s5UcZv#F`nTSdTSF@qGxQ}tZnxCW>X0aEEcln=$P?G5+`@1w*SpCWf2Rx)z
zv2NHqvXT`0XwIoPM(vD|e-$5ruX7-WHWv#R5(SIx|77WeiY;%9c7B3hldLuV_UxDP
z&ruOKYF(>+l`f>@=}d33rs^r=U56Sh6iO?_LjSlKGfj{p9qxc|3x+Py8B7S#@^9|(
z{Zo<mvq>XPifck+da5NOu2ywc*J34pPL+FgVKw$u3nWNl?1?9ur^#K7Z3~-6GzpL^
z*`u;~wBRr1?_B&5TIw4jgIP!DIqdx5l=(^|f61lqZ8T9Q>H7Idhe#mdZcu`?J8x4n
zq|+3Z`qVpo;=6QG+x4Y0eM=4xO=!-iUUE<ZZrX%5swIxJv4*h{D=Tk=;QoxH=Wgnz
zqm&wtGZjuO>%`pNP(@<)saG0Mfre=UWAtKnaKnGXz53F>iBS-w)Jk3WAkk>0hxpn3
zdHfxdQ9Ne!Pad<Y!(dGf6Q$9LW!4zR(@WuAFZtzrG7WY?61UJbNUy>Dv6$>rhO^1$
zjSYQT3dBWVa#W)|{_Cp((IuF-m2ZC#8`NZf7ZK#d9Fp<-Lb?q2`%9_$T0G_lx|d~h
zh8td|JwvbFN2&jvIaMrB@a!Z0GS`5vSH?!DZV6KiJN2UdwofGOY|)fGT<qK&ATg=C
zFGqI2(5YWqBW^8TUiqiIgAV0ND@UL15c1;sz|;}`svzS|-#;NM3_UtQYs4xNGd{LM
zpQ8ux(z?k)dDLG+20jl7@sM>hCgYA+iFN+RVbFc{xAW5s{h}>5BW)!z#lM-l!ap6g
zuaV93#0sfECtY?nbE@3@a;p6Y#p#^S2eLYM5i-rLp<by2O&-BMN`focCyqK>rQoV4
zb5G~_>HMHb`5T@2`G`qEn@PpQ__AOHASm2A$)28xoNkjfUj5{iF>+afO=)%Nfywh(
z_RTgO2dqr$r|X8wNModttr1*I;!&~s6G?;x`j^K}4@i4-eAzAm+3u}2HE=_Vs2iR(
zRenH{#oV@FNo>_(LSt5VPnyFOO1fU{y``O<#m?X3ER)GS8g4$`()iy&Nu-tkXa+FM
z<0aCaQD&-#X~=gNYU|D^`QmJgjtCi{@>6n^IyYXgQ6=5uup;)@iRk@bvME?Y-ICls
zATrkq6Ko0hRSS2nvMB~(f+&@08fc1li+LOUtL~{~j8R8B>swuca7Zu&Mr*nZ;!`8F
z@62)w<!Js=r3anV`|D#s#52UjkZNk*#&wjf`v+etb4+M-j!QE5Sv*Rul|z_-ROl{E
zjg&yl<R<}F!XX!59r@kvg@btD-QWa9S-W31n@=NcB3m$6Pe^U!_dZg&LyL*US>pVg
z+Rw{Vu?VT3tQ~Pj$R~)RqXxIJShL<GP7*U+SbO~5`i=j>f}@&gPC;I)akChc#RtM_
zw_sKs^9b>96J)3Bz2;O$p{qk&I?R6*hVZZHaET9%gXSwmpZ(NaVa(9&SGhDr-)kNs
zw*7nR5o!|ly)^bYV`2MnWiX39p?1(LrQjQ%P+gGZcy9=w`j9gxHO!<RWdE?zUFkNY
z>X!~j<*+G(AiLgrdA$x7_up6M`=nZeUSqK4<M&=aNiuR(*K^xX|L4IBMSQn`6qX7k
zvf4obE-YeHKSO0>QQ5XrGL(LA_tcLn)14uecZfM^mrkyx0pYgwFh||yr)Q@uLz7;#
zbU-&(X0nyp4|$)nR8W+`#q4IE{TQtur%cP`{ffv4o+A(v--3jOBXZ~ofd9omaW9AC
z|5^|c1)oB>72TN@d&u1qTx45!|F7(R;#Ye>JV=V2gv!P%TfNI^t|UTH*Tj$o>+D32
z|4XSO@ZYAGjZ$%!oi_?IR4B7cuXi?H{Y7Tqo1&%cL9Jy;$FwBc3W<~ngWDIily&4@
zoTSLR->R{PH5-v<C=9MPK5xax=tvL2^GHw+p9tTx_l`4ZOTo4}@{(_#vyJwLYDzA(
z4SsOv7~^06JYt<wtKZ53bQ#vX--rGRwh9M^{p1ds8F`E5q*$(oWcJvd>I&ZDWNX8~
zmWlt2N$Yp}c<KEXPow}ny&k8oVOIOy&xn*5Mys8-KjfSEZxY9jQozbF(4o0oJZ^#>
z4<OFMXvI9|K65i7RAN!%)W?&5b}r*Uks*A4hq)bN98ydB8iz_l+HVk07DWri7cF`E
z$;ZDyEb;K|!rIvCMEv?}vau*^A`WkB;7kSw^KmAnbWxjwkEs(ky{q|ZCj=bMJcS3D
zpKf1>I3`4M9kCdtS@IQuIIQG&`b0^KQ7EAmtw3sx!4kHYr}GlWT%qi2U!_7*GbHuj
zqVwO!tDCoH`LSt5B*&!D4J$f7^-|hOkJtPlg@Lhz2ht|?U)vbSa<7ly$9Cq>cl?lM
zPAr-*#dquJ<r0+ZxdNTUD|y|or|XbjG*pfKZVInYuW`~in5~eV)W7&HhvQiTq?)G3
zL4A}bmswi3D=KovTf-%sr`J`1{CTktl8`te6d$$Y^VLqdEX8SdDB<6Jpbia9Y1WOT
z)j7_QTq4pWEcNGE9&C9|XgF14uh9HGgo=su7OjMv3+4izMiT6$o55pEh*?DgVKQEO
zs!Wc<VIO(^`=q_}Du@Hc1||s@9BxFZZ-?f>XKWcskQf?>HITAMqu{S6#6wXSF1}J`
zSod4b@%00W9$P#j%-@%ZcyVaIU~4fR1MI)o5^e){gwV54Lv+D$q#9Qv!N9|SATj@p
zsuKxcU9JNs1WB<cFH5#ywB}_IA!b)kNl-m&JEm1_jEywWfi(1&J%a|g(W`GfkXx1g
zkmW7%{2^xE$wTc<9ufmYb;h-&;zT|B2ZXwglrK_wne5l6(Q;|&4p%t&e8XHW!kgI1
zBcXZ6iqbd;;Fx(Am$t$=qkqaUiDnXW(#!YwDLI_>fbNj_i|1UxNf`4$%*$!4cSWXk
zSEUb`FW8pj6F+&SAK?1C6Ifjf-t^ZUMSZmiq)Jcz>C{NLJ0;RWXuF+P51-m{8ypIT
zj#c9h9XWXj*gxzVFO?_0oA;?B(Qt?v<3h5Ru6wv&6qOeG+8(9cyMN8!DRbA+|ISi+
z1-%Xv`;U64AY}QmAT%NSKsuT=QK8X-+}xuyp`!K5lD5=iA2r%|beJ0v#4=T_xg0YO
z<P7-o-`aJD0-`MCe1B?0+`B2Sa7nmqvgQ>#`Rl!QCvZS-&`IdKKS-(Z^FziQGHNvY
ztEUHq$z=K!(711NWbV}4pBe5^DuT02si#buA958^n$WcFaz%~lmi6Qivr*$0Xj17_
zWdZ75iMV0pg`da&cTjB-Jx4xk!Ffxrv=yAYh-;(1+&kFf<XY}W-(?@<`dr&=j|lvc
zQ0;ZjogQ@eo^6Bb*{kX1Nh7VBgrx<>$5X>=U-^143f~1t9-7(Qr)M+SzAJpd0~IQY
z1q*|y?_xGOEQ*Tfiz(ZJcMORd!^@N*&#m|S#mEPRBgHvRO$jzuIcf~Qwh)eJcK%TT
zai;5`BU`p}{4hy#&}&L8F1Yb6cP4OTbL6xilN6UKMk}L9;kV3A93F79{rP@_ev0Vr
zH0wP|nSIp@cy2GINGOmG&>vnZq`LcKnQjDCWYWw;SqohijEY<pj_^078Z=<di#2vE
zm~r%%V|SAb`An5O(nP+vfv<$f!(z~<D4HkJccK3Jj*zT1TxJ=WTc;Am^oIu#R*cr<
zI<6^u@UQ=mw6Fh5>iqw&+;VND@7A`mRJN?S*1MdU%R8iXzcSgftmO@rmEB5+HwnR6
zwPiKK%$1qS=~i;3)XGRrskw<}iG@mqiG_-IGE_j|c+T1Pb$b5?pYJa{9s$BR*SW6O
z?eq0~c8j0}A;+TWVv_di%MJ(W?=*%N+70LOLNm@>)}Q>f%BJ%1$%X(_>u9lXRzZ9F
z(?|2~xUqhdd9f|#c5z0@@4wQvnWG_>y`7Q9RF-|G`aDIQwA&lPxEASd+moX)KJp=a
zD;c^KWXQi)<K+8~e(|GRh-L2FdSOa{kUkhT$6|;=@Mqi29L$mCTf&I9&C5gKYwy#c
z<k?>{V+~orlSk|eo%j=fmv1P|{e)ZltzQ0x0+=_3i>QaSk*n|iRcke%@*s12r$JLQ
z`!jR85$>$Z_lsYZqwCey&VNV!D0N~{v&3K^7Uw|*$HwZj_ciexTM@KTc4gb+in*Kt
zefCR0o%=acFgVv-tnces+QffRpH*ma7{ZCcXI97?%K-;C@Ihn3pxMcXHu||EbaQ~N
z&W72UEI&12sSBW`0j7FbQm4i+@(?i0=ldmmbyzLnhyvg-mBEem2Bf*R9G09l;GNXi
zKj|QjnpO{y)iqd?t|h9gK&$RV{%dGntA~XLR=IJj27p7~Am7B2bH(KaIk{jH<ed9i
z3h^=#EEbkP>{kU&4oDsWT<*N~i8_xr0v^SV=(*AWkGI{k!Eb>bli3jI<%s8$6eagS
z0D*Y~LPtT&%(^mD0fc1_eCAjQW<?#sIMA{{Msv3^Z|2ftwDYFxImmaEKzz67W-><`
z7cymm2(DLrc-%WP%M^;sPXp)Xn<ZEFvPy-v5hxB$Le*d;(3X~!aajdbQ#VL}_D#OB
zE&^__bVVa-Ap!E*af$6<Y1u=|=m;L-1Mq{M$)akD+9806g!s4`j$hQb{jK!f=aqOQ
zsGVI0oe5<EYWl5Y%Prk<IpJl0$t=s-N}nVps^5I?U^Ch~kCn$_i=Q`Onm@<`(mN1V
zF6npyUvZ`E8)?m9f?~pulg3t~CaAYBPU<<>AgEdF42RMh;@7Q}zWg&crsmwsG7}UZ
zb0+AEUx3g`25h)Ux8Py$C(WsW1!t--t(q8qDfcaFsAj>FY^xr7YM*fMU|+BY@R<8B
zt1DadvPLepJBAufBb=NQ!mQ@Qbs>U6TV3#5rsa`>K5(YVl>lSWQ10K2W60h`V5~i$
z)kiUK9lr6CqI*g;f^kniMO1@kvuaCtjqNnt#JQ0wE4Bq@*)LUBrjOXCJad&R<Wn#y
zS>4A4FZUGg_Dnx1GUFrHzcCgLs@O6YNH@JieSQ=tU1lBmb43H8Di(cDRS?y@<^13n
ze1sI(Cb9A&M$#Gag@ZXQhWSUU018)Aq*U8lwl9S6Lgq{0;_?aLZ#ldLLkbWhm*#1#
zlbNoY{3TNKXOqolIDW)lu?l*MHsz~Qn9e~LW_V^5isM3E`hOHDA(D{i$Hd@paquXa
zzc#ruA%?rq7h+LI253v!3pg0A$M44ZF$1B`MOED%1lbLvXR0YXUgW6T6<c+zrjmn?
zl=Yv_r{dfY?@?BRj~71aQ3ZrubxHbxm&lwWpgp(saF)T<yS=lM`a}-AKxJf>-Uf*#
zxx+WUnpL9GC?fBwB7eE2W2-dpz&z!@TCHk()o3S-9{fD^>kK*Ub3t|^PUSf#s9CW#
zrVugQgW`q%<JmuN&CzDphVdQ{D*N~9>e;904QHKJXm8s8p22f4E6w21^u6n;S>M(m
z+OAb_D)Vfcnt0h&^`4!BAc%Lt!>sE30=hA}=5R8c(^fgI(4xQD8<HICtGnBjEQ$z5
zVvv|j=T36ZfnZLpYVbe*M}XBRn@Li{=BXL=;#f}s3c%^n&&+xy!j^mA%No5r?{Uh=
z9ZE3@dV|@EF->!pF}x^9W*4*C`qb2v_d$zSj+o3;Sm7Fa#IyH~bIvHPSEbu?m5f!k
z-%ul5mkOX!u|R)5Q-B-+%MJ97ny2UbO-@(BO%HBsVPAj)X6FPv-A&>vq!lG5B5H-D
zKl{-pX$x$4c^}Jx(56iIp9BIP4U>;aony|zQ~V207*K1qgrP9ybsjOz&*b;?l>-i-
zRpA+ALS={rx^`c~STdqTQ&=WM3P-MH5e3TW1j+t%H*8El)mw%Qf-HBW%DfwFA)Sd#
zEqA0lS@kSvsQxd#Xp@75{+xIpM`EEYc+1i12aeX2wwwsM@d=l!!OfP@f0ZAFhigL4
zz5>11E07y~%1c=M&mKC?hy#AtQl<PP-U@}`dzoY2-w1Isu<_@qW8ATry2W0(z<mYZ
zhFeRcW_|1zM1(6NllQZ_qHk`yxQT~JSz~xo)nG7n=nhn72ff|tUyi<+a~{m(T&nfS
z<b6wiwi<%T5N}cSpt=IPw{;_uGkqu+!_)weNVAvyLetK`Wi*WLOtiuHjdwNPHjuL$
zLW6_{V4Aw5m#m$I-hwR;mt520294LvLRytF?wg#8up{rDUP0ThBjL)tYVNqH|C~BZ
zFOx<V1Y#1gw^zCknVK@xNg~$xP3zar*oAgR$cE}d21H0%Bofm5%k@3SMmIql$K6+>
zjG*EG8<p5f-+S=RXNCT%*X|l+Ftq^^q%USW&-s>Yi-cs-<S6V)um-CjM|$&^&iecQ
zeuyxJLQ@C_b{xy9B;g^F$j6%h&NAUCCYwPkXFsgm%mgE+wrV*!x8DseWDEyW9CEV_
z2v?<5=l;Ht#lv(Oy@E+%#Q|8U(jBud_zjqnEQGS2xCw0yfpe;i>p-+1&L9zja_|%=
z!hNdwuz+jg?{9>ztD-m3&23o#y4Wd&oyrV?<bVrYuMKbDnQN8ShSSx+ts~BW9hK8M
zt{B`jnueC#oB6ckdx7{f?QVRM3!X+H2CKE~Tq<lVyjrn<{Ri9|OS9?&cA3z<X9YY{
z!MVOH9C|1h?#<M4VJZkl3too6Tt58V(Y3vgHBXRuMB594A%Oq0Q>hvcI1*iZJzzci
zHbkodH?xjARk|Hp=b$b>)PtNM3us<VH9b#|jF58fhp1*jWLF<O*N>K_)QRYcA^<e?
z=}GPY;T8;_s{M~T=Im_GkMUyi9EN8Jed3zGDt*?B(23Fgt$pnVUAR)lKwoWKwhE%`
zkj;LWyd!c-f}9(5a`~t%1J1`{mT{{ezlIDcF*w|CSk<lG=PLX1&N{cFt3Z4n*?8s?
zW0*x1Zj^WOvkwTO9~NsvwwTF{UB_#)3?OKld0+@oO&ezwb3HcPE|n1DQ>p3<h!U8)
zS|AfapgWhB7D~FG$27UNevplZwXl)9Xn<K<=*O8;T(Y~fLDDHZqE!aLTdmi`oUf9k
zvKB~<9Hu7Mr{!xbAwIKV@6b{bZY!pNc5_C9Nqxa=y|xCzYL^{<Zc7r~2uJf^O)b}=
zqAgVQ1jF=gNzbizs^Wo%%E4RLR9W;PBqZT4v*p0%U%jS;`}cF^SzAK;pw@KXd=iGC
zcC&Y0fFxr256`?1wTIyX86v&?`&-)Po1N3@;-r5c%$yQrXh9Z12B8>JvQk&DY{?(B
zTB!M0?QixiUC)C1%&&x<3_E0`;nNyreQIxpQ4asFG6MS!EJ7<p^n@#oz636ORfItT
z1-Ya*PvBLMGglokC|$F~)!%#*Y?cO%$-R1F%kYfxe5o_2(`G<_#8d)l!n!XWR3$uf
zmsuaU4A#$g_G_sLk6|9}QQBLi9^ZsSX)pAC9s8EUvR(3=g4P04$DrwcU5GSfO^@Ol
z%nALjnvL>J4)5pQg<{Sje#NeMa290h{-oz>PkaQCvc2!E<v)Y#A^v&!j1+VxN-nV)
zr6T_CbU>X+jFHn(kFxdf{wcOzSFhj)!&V=?Oi-XJS-FE95Jo>N)eUuget%ZVUwi_v
zI(N%i{s(A+B^xs%%x)|PoB@DV`Ds)&>(OfGFv-5rE9^8{uXl$(NC#?HDEfc3FGOG%
z4Dz~#mhH>9+<jr?Dg>?HnJbmaVv$IH9dRymdIkL@j}{pinSCMN%Og=z91sRok5`9L
ze55Y-O$N?G@AIr))k{|uS(R5S4yXT!!jOu})zhH&Y)j7D%+J!_hosM-40G$UWZAE`
zE9Lj4ypIx;>?rG$CN}nF+&`YfR5c>6UwvYZI=<RHBAt0FN3CG3eEhJB4~0r)>5(&2
zRNggcvp7hljA(&q3fk+w=cvQ0awG^V^0`6lIcU9JSmp*sT3I?W-cRe~H+KyM=%huV
z+jCE6wL?J!*gh4U;t<?|8wyeN!JiZeWJ2pl>Yryu4151Os%sPYDtzq%?!C-#Jxu@Z
zOfq0tZ-$y%>utP~#OYckmgY@~kqDBJ$Zz<L1WO6`-P*omoGt5GT4hvNy($GpCNee8
zXTfZI{ESVT3|Th#;z*-LqB{PYZQk$DrU9ugK>}frG4KAfZB`1gqNm2NpvyZsL?~u9
z@%5UP=+#O#6cd~iq0|L9@DI+8K<*5op~P`D*?-Tm0twWu!$zb<tN@AsxrW9Izh9~F
ze#6)MdU`X*seJ~hpDuSNgxZj{zxTX6TF3J13q5!$*f;<kH4fZT9upp9eKxC6hQ#}8
z3F~z^!p2%M{V-^E9h5`U2Tmd6kpGVQD*2n=<#sz&vt*{S2|0N^rUuo@7th^|#DRCI
z^{56d4%FZrj1qdRq^$~e6Gpd-nf1oNLezPZ4hBb^D9{5|*rLT8ZIE(o^r#T~1W*Xj
zE0`vjfY>1Rw|A!;zwud+&Dtp#Z#dil_MG=q1=oSuIiOmQb=j_y1GhoV>##xzPjVQI
z9c?pFyr1rzvuTaWII+lTYp9}-?&iqlF7m}{q}~W!zs}J=S&)sX(WY+s7CKdNB-IF$
z>Kp1rpkLD)nnt(5F0N^NL7cG<QRuS82+QH~y-m&T)&tS(+ugyd6lG*;Z$J6d$0+zJ
zAa8omWgJvH#Hc2#0A|$Dfd#E|ZnvHSf-c&6d~1~4v%0iX!RGA6){+|Bu5`u#QLRD=
zxBuSu{r%Zp%bh^wJn3|`n1hJYe6{h7O2Ug=;!BYJl3*-5A|ZIj)Fb_-VhRb@`v>nN
z#YmuI0^lGAO=g?H(=haSu}B<`W)kl8t1+a?W>VV3hm%>JX?8-zRJoQfc0!5nhz@UG
zuQZYel=bhR?kbIbjEp`452}xNT8Ii9l>g8Zp%7-p)okBu2GhUSk@OA9W?NuUz<Rt7
zc|Ry6jbs&2pdQu%k`HOFxYbBVK$4QvO0xVG9YFKqmFTJV*g;gKZKmR%5xlHKUmf(c
zN`!l=4&>3?kB3||GI7yhPGOFQL9C}K0Tci}n8kXmWTRd3mPl8mQImb&-n8!n-?Cj?
zBei1MpHyX85i-ZG?+c%-kAs3tk^sGrC(5q7#f7;oqa)>0>zk3eFK=re>h?a1_<4U&
zLzqw`Okha-t?MBOn2waP$~w+y>y!2~RS|BP(#)2k=c@CzPbwf)hE5^KM^L5Ijz|&W
zF7skmGn+!2&)$Yvb%TdB+{ol>vNt#MuXzRsjK@FZexMLaf48IyshSoJ@CpyX!v&ZB
zxjN|ceg3^cgeusD$t(1<=7D^-spBvBb?j<86ga-9xAlTlh-jhxKV6L0+FU7n(`a+w
zLPPUt$z|zZw|=iNV~F3q_?pAtg{9VsD@F}0TgVLZG)^(S2v*9gVE_E=_wI*$Ug6YC
z*3m=%7tIOKs(Ams<D=4E9nNV<P`t9Lnup;9M!Y`|8Qz`3kUh<YZTxdowk2y&<#8Wp
zEaYkDx6<c=ff)Y;2^4+AL8lZ7GHYhR5j8uI__QY%L;+f5_)DIRVZ6oBO68R6$rN`?
ztyBOw<eJikkvmup)&No(;;NN-Qbpn-k^3j^kV%s+giXaNF*k|xFX2vCU>TATA(MUR
zt|cmW;_Lj_YGt0yF~&*i^BTFJJ>d#rVGcE>6p4WVV!*)pl>*g|^Gc(|Wb4=IUX-w~
zB(x`!Of!|+-uOZM1}kR!bq6F0Vi)=u@PzLw>*Uv3B9N$Af%btvD!Txa85&}wt(N`-
zH3kAV3$=7d0lZWFpAToR{Q!_yv)n&jafM9xWEBAvt1k>DHzq?_X7R5Zx6Q5n=iOk)
z)Bo-xLyfRXc-xb7u$t6D$VECoc5yN=M-Ih0y#qDk$bF!mI`|c<UKD~3GK`<z{%Obl
zaEO&~J-b$leAvpWzq|s3kl+%_x#RZy@Cqy+qBg}8&kytNs7Aa)j5iqBvhQN*I2k*k
z`l{6o+5m%m!Mnoy^pnZAtbo0~{L?qkZ@>iN11{M=#{K8?o1M@0-?!p0a?}iHlJlTZ
z7K0OI8-=@8xVa;kihW?P-A#ESW!d_h7q>Rr%o-hP!2tqx^J4mpXt<YFJ)}OYgt#Bm
ztaHLqZGH%(bXh5Nt}ITxsyILywd2o)-@*D8O4$)G|Bt8q#f1Xw)QjtU2g1n^qf(>s
z@Jxl4i^3+$`5qpZcFjZS*!{iVH?eR%DGpt~BoQj9V~d|`g?IuL7mgpvAs4=`+`Iq?
z3mR`;{O|0PPBBAnKrPQeh+E5nA?E8GHY9JpYgl<2P>M=WGH26hF{mNPYzbR8EQ3o)
z4jB=1WB~d?SeQ(7VoT)Z1kf&L1I0k)=1}OurT6VAClSEMeF^;sCiX`_CEeFN%wGXq
zd0L>GzHy?L<t}rqU$P5A;s>;91a0VW?Uqd|%vz6Lp^#*T*!$ytkm`H(PA22Q;ol5F
z<7;(FXZTs5QOW}4RWPH+?#08pVSi``i7Qd0YZPRE;s1^*dbd8;_fD2~8_B)Bk)>w6
z+;j+Ww@5>L)(ivvJ5pQppEEVpA+S_P{$_RrptUw_g?Q<Shpyyyd=<R>RF6l29D_Js
zztMC8Xj_!8nvOzDN>w^1U5kDK6YzeT3L2>uaM6#p=EqK7yBM&&B=;Jv#3<T*G4R_e
z8rnsKAgsor(iY9T36|#5k^bP~<T9s6LwNc1?RzJeY>p{r{Vl}B5QP-&dN<&WTOXLn
z*!)P=#AbJO37+WlRB>YQ{y(>IqgqmNbdAW>`_e$^T8NfpdU`CoH*%VitHN~IGP(EJ
z(ocw{qqOPbXnT*<8hi>V^pPRVAoFgIej@$f6n^a4pkYr~q)?t_ka=w>6Z+za&&7Gp
zQ)7cMRkx;CC<)m*S}hCQ1zh<_dnXs8(C#meDAoA-GD8hgJ|z-txxFsju)h)Rx^vQO
ziwzed5@AZ;*K`Q#hgm`rrf>6YIqc+Vh8SJL^Z!8Nk3hGH@c*2f^c-vGDm2JF8T_`}
zQIMhdtOElJ@xu=t1X2hctgnB+_ihXH?)CWiNM~}W_gw-{)Y(kO%LDcFuT87_K6`>j
z9x+MNk^+T%gj`F?j6;F!n_nfldgnvI>s~5zWTNUu@gErlv-T#(>GM4K+3}Z$LZo9u
ztoQ%u0jB|V+Ttf?2dF}e>IXrZ%J;nbm1N<kE9vSnRsqT&L-3r-y{DuE0m)W;uxBc@
zKQCY@3&z0}?fbcW%|U&(te6#+==w<od>NRY3xA>)J{OZ@h_$m5g72UvW-osPw$DcV
z+$?c|z0hVgW40;%Sqbt3v`#oj6By-H<)OAVm?WxZ5T0=RDoW8uU)Ie7jW`^y!{n~7
zwun(wCX1vG>dxTdsd<nRes#dRdWBW(Q!&ME!h0lJAP0n_V)arMj|24O_+-H72fD5I
z13F+*d@-|M+McMm34(k&W%-9I-Vp#Om-sys+EoV%EvVY7(pHi@HJ4JlbNU|S!dIcS
zI_GHB^t^8&PMFVr6h{D<Q7(2ciWcV|c%ZxhM8N-!+JM``63bWrqo%VS%{1j*uzjg^
zTvGHszTNXM3N^C@DG-Xi!ti8%j`|aR`qb0p`|Uw0gB~AGt4N<~ilW!JXFYU*$kb_7
zSfTeQS4=NCp909Q|GC>ktKhAaz6ELfeS^DD%?#rW&#lSsPp`mED`N+kA!b`Z*FpCi
znM!|6nCNTJ^@FdP95R(7hm|EFM-w6Grk^T~J=$)rMPs3g;v!KNhtAzC$a$<M%H}J=
z4-W+a-LF(y-836OS&w4Dq>$nSJ__^36z^>i$X*1}MN;u)e(cVq<;9{3y8+8_6iUAK
zeDLt^ZPm%{UCfX{a(N_sQ7(o<N8mvK-^44()XMp9`8cweCeu|+UhpGySh7;B^)?F4
z{PCxbzgH%Fv~QjWR^}O;9qUy-*m-b$Q_hTJ%|SVQjn!C&a3Wg3iuEMU0tYo<_y~@U
zS2bV47W-$3Ke^&F*$)cy<k(wc$j@xd>QOGHgBvPh^O&sC14kPZnX06h%ae@feKnHK
z509<Xx4luHdvoHf2)V!@#T`IeI2WKd`45FTpJ7%*i_l7jpPpmt+0u<Hng?Bo>ymbF
zQI+si2>&ODAKam&@t>|G8@epEI(IIwUs5D&+xu>x_b#U^(-6%zZ%&|iY9FX6x*H*F
z;DA;xKRD7(BC_hL9AhwrbRi()x5g4p)%5#O%T^Ph9l2N6ZLec%<py;L*y^ICHb}I}
z=@VV{NF51kpjunt+<2rlOK!w-&QP2#-cJg8muVNp0>%PJ11`amWh-elJ{@AT0Of#D
z<|H!PZsmdvkq=Eu_y{Q^MJm|HD<3OaabZe%ThAI1{LQOh{;T|v3V#l0_&@h59n1(b
z#X->X1(|Z63odXok*;BY8!9(}6I7@l4+rFq064c5PxojZSk8&(J!o3C&~9#c<Ns3y
zc&PiPBsBFU)w9%0roQ-VtJ~QiW_V4z(7Rf=Z});Z%4>W2uT<J?Ph1el)CTlrMa%dg
zROf2YE3DW*+hH^VQu%;fnlpm2`e*|#?U0h<LId<@XTu^M!iIEjpFW4D1v^sodJ=Rc
z0W@(v{VkIzSj&MVct|9CA6j&39EPWTTRaDy;A(UJq5pIs>`{9aw;Sfk^fFURHY-yR
zf9Zy)S)ADW^)?vuX<6T4mcNucIaP1I<Y5%x$+WJrU|8N1Vk~M)H+Ab8Vi#v~G%VPE
zM#U#(b^ngK;ymG-;{*VDhqMDN4OKdj`AT_s@oF=u{#<!kuRhR~#%LS@c|d;iV?33d
zENiTPY$p9q77EkrjUfE)v<*L2Vyzf?;NVV^6D~3RYGM{Io9__dsaD3yhiuWX!gh=C
z>dL)4>2!WHi5Z|d#8cgDP=yx>PKK@xR|4M?@eM~qO&j1U8vmFkMIQ}1(lKcyUtPQu
z)IaEbDo&`ng9`dzs4tnewLTkXxIm2kfC2c_ED`UY#fXLo-z#RmFHE}KpH$?1++I#$
zAFx?@98TFnYH_Y+)LPhlsLkoVuDFtbB6d6O9Z(mbA8dHD0#7{u35RX*RdR}IjPiBe
z#eebMzyOw#0r$aPL_b-C_$YOz-bU;t=loOuRyfLEZ6JYcSZTFVl{<wQ?*pl4ClcKf
z0J=fA(2%vyU+wDJCM%G)hrg^5Df;bxj&X&ltRGJbvJX%jT$qE$^L*iI<mX|(_bPNP
z5hLQmIXRNU7`lg72#vq>Bb6EA#Z)=C2FC}%os{Q5uvry(Nt0VBt*C%uG=L{9p?qwf
zoi6GU!kyiy0m}wk`*6j79Y>VExxfDW|2RuRYwURf&LfCq`7d-gcpuKuGLD1*d}T))
zsfXt)FD@9xh_BA%$TdTCu8U2a0W+={tf>yYz;oJNrEvP#e@Df~BQl%ComLgVdg0R)
zz~nQP<?F393_sv~I1=r^MGLpEgQ|8V1;_)cyq)FFQ#k<YqV12EY;%Ye#FUzLij(am
znX|xby1pc#*t}|3hga@l2IyJYPE~h=y!J|!sG~Gy@I{l2s-fB~lz00JfV;L;0jCBP
zBGM0x60?ke$#t|su!G^83(9wD^e#)EAnFJNHdGVfxPZo<)50n0?<RMOUqj{tZP~Be
z?$c?CJJg+6M#~>@tTH_)_wM_Ln7y`k&=Xj$b}ylgdCL_GAs1izXUF`YbziP&*;o3`
z)ir~M2GHm0a`t)E@!Jm<Uwaoajn4LBvE*W8YHR54nMZ(NaU{)4<xx5vhDEx7imCx3
zv$HU2;@ASrmoph)Oy$0?78{ph(8eQ<L&RYR**37gtjLbjPd=L;lnQ<rwPf$<Y-`Zr
zH+R#a=(x4G_$+`M5~R%V%!}ine4K^zAZijLUHq73(P>oq$cgnpg5vEa^dv*zn_~YR
z74Wn&VfM4#k#O`{PBJ)_`=+<w`=Xe7$&4K+8)T5it(DvxNh2!Zsg?q7>%i(sK(6Hq
z_s%#50@G(#JelN@&5plo@2>+K(Z!E%Ugm(ki}{!~_w4%ur0_#iR;6uO!>JO2RqKQ>
zs#g^7P7*Ey0fU#`@@EkXb)>2_7=0O2m*%?k2C2Q38X{LGTRZbkr4rKc$GPvqhX|Qe
zkm9OiLB>>i&h!hUd6YcqH~x}_78p6C7+{)yO{t6CDOZD1N8^WJ`I!h#$)H|)wuu6?
zwPWg%{ArjvmPZK+0eLpbY@hm1Zb>gP#(lAa-Us;0|K$If-jY8}Z(+JdLLFsvj#C?v
zm_kp6k4$|4gS8MMZ2-|Z*TZi^Ddy<TLFn^*TUtu*0%Ln`<gl5GJvuv4`W(wv>wTpi
zwNEQAg{u=bG+H%Whqo}zH=3&6uU2Xcg+^B7(Y5JX$^&A>qH%g9G_1AB>%ub$l9^$U
z1e-y?qe=i6lX$%*FslfdA@Tm2e@7h)xwE{RLP9zM=V)7De#2sRq`_fNPTd2R6oyES
z_hxAk$84Nf{Ti@fSAOLpKvOm{F#BR4D}dg9cc2&Y>Al3~1xugZD2<y~LW=a-{CjZ?
zry-nU8Bt4{;#W2_Cb9a~48V|~9Lu?v>_;!$aZp}742VH@Cvj~<ivo1~mg==!Q|={5
zc0hfK)22AFiaIiwm;BdBo<l-=5{*K;<8iv;5lkg9?&Sb@SrKLR6r>t1fB<$J;DEM2
zNu%;$o;y`s>lNY#yAYQo2WSS%(zqU<eR``dD98)Ob>%WBY1}!%3E2Oz>tM}!n`bIM
zAQIJ7V>?<c#Oh05R(l;gypNd;Y|j!>fV;=<T?>ghnFfR3EKL3A_iu0kEY756G?KY{
z=?^bMPaOeIk39g={RZDK#>(>bYB(*|3YJBK#m;qA6=yI7BOqEeLXVnkUny@+spIEZ
z`wyCQ`1my?Egkb_jAz1J?ecEjz_sD5R+b5ftnL}$`GLSE3%3^Uy28bVsM|B$DOMxX
zf8Ar+O~t+lpgFe0fRjtq)P#z+oV%LyCq%hPD;TWoEijnk+ATe6yddijdwgm7!u!TD
zabXUX;Ty&?v5N|3&0(qW#Sd82bwL{Oy}`@<)w-sQVmL9IA5^oi0$tJ_zUI6UA7`AO
zRZ8P~XD~MytVWMfiCUj$$;_)pcJq@JVi7Go_Fua?V({5HPmoNp2Ew#sA1htvIZO!f
zmS871pXyan6I626kzn5}LlDH-+CO@z{FQs+UOoWK>tVh0zC{(arVoj~QXIO^XV3^h
z!Y21J;c2zD<f0f!hoPLg0|6kihL0F(f<B#liMsb&&mykMW0=NEcnK{kpZUL6nrV#8
zqTgwXI;gae2RaS97r7`3XU=WS*{WNG!bGj2#OCP^X;La9D9MM&Xb7{QJe}<I!V*45
z+ZDb!z+CSNY+`*(UUrnVBpGXlDjk477ZC`=Ois0U91OSQf%9uQ0DZ~pU(vBI`+~{b
zU@lCkW`CQvSxp|e{vK|Sh7O|jR_|K8r^k2hyMQZWL0V{<jVYF9`u@C6Aey=AYN5Sl
zXHq0HbQ8}uY*uY{G@{9#&k~1%-Ug|RkiY+ND+vl4_Ybt$rl@UzhP;4bFJPJ(Oz-!}
zQ)0rT?NowdPp&kyQ(y`En-2$@7`<ShAUl%f4v9((W8<+Ek*jcsd@#WAP@@DS+hPqr
z4W*dOnQGkm!QbwYR0qUO;deisyVa5bgTQ|;bz)hGR>S#Gn?RvYHSw`LuW#|$#~t?)
zbYY?ZNj1-GErFGVe*E-|O0pv%J=Hs3%`oUSSr$iOA>iw_#DYKWL>^4Ln+w5|JshQO
zX+NDC4KprE7vI@7pE+58g*2M<PH6}<gXmDT85q9k*r+}W7!?!y+(!vO0gT_=!jFks
zK!=@LV&auLb{HAVB9SPmt1`CRZ&56MKzR*`znsy8!~&?n7qIu5AobbCb1*DptYMB7
zOQl5u>W8kyIiHy^(@9sYB*blb=PplW=ah=r%|2RbHBu(N<PqfCQA{GtW4~8HR$gWp
zr@jE2B=~waWE;hakD*R}KMQ3ee*;NcGu}1_(lCw&Xv6f~KpX{w<%Ch;Xi+41tnAu4
z=%4}%wgy8~LEnc$iCD4+p?gH81|&nxQ28ig*i0cXBISSlvC?#^doLLAK1wup5+$yN
z#=8jyEg%|Bw>kdPZM5sFYIFjuxUY7cufkbx81Sjy=36nR!%Q)_efs@R1=)`%G3B%d
zPNwATO=~cF3U!B!?%fgYuyu{3^tV{mtkX+S_yrpO6Zc3rVvGCi9Go<lYh#wneZ8PT
zvL+;36*jE$SbziDD?H0_)k+42Z=@z%#)SzoPOQ6Df=c*Y*(*{k;#zzPsA(LSxS3Ws
zu`nH4r>z==hH)es(i^#4za=)0SfI!E1o&V&ivcF3$(affSi;#Edxf@Jg6Z$zm?yR%
zsv+!fHd`K9G@Cgo&AGRH1XEa_&%x7rzd>aY34_!D_r)v!9mN+qXKL}?kuN+H_}l`7
zbNbG-Dga<h?n_DaYhk0nsZ$h7&pF5K20RRLn8`%y>mLOB=Bi`G`(Dy+5q}d$byJ*y
zlu16`fSGn!n?%Z~-=&gbvGUO3@5vync~Eat*My9Jx)<6UCXKjfFXrSzN`@=W!}>ET
zh_P<Wn*6KWR9QEjp4y=)$UWO(a3bLVU>kEQ+0>)uN*i%vvdnhzmRo3-m=XDW6c8qu
z`+xY~1>AX1JTeCekb!f&`n^7PfY;WsV^a)xZh`1vs=}!=kHmANuM?%NckR8RN|7M9
z>Fa5>5$df$$^8fSbwFXRwk7exeHAG0LOo%mb1@yXaJR2S+S-(RKW@`j-g+4~fkYV8
z4dR$d@-+hI(7{tUdzBONcE8X|9^|MwKdOE}+%6RY2#wdEQ`*|so7-M4h?5(u`W2VH
zWB$qSW#!3cWOJ{43HHIR>sDHS6-yN+i$aJwHUv-tzLSa*W^XRYi?Iov*ZPMby$Xff
zIWnT4PW}u+CgD!kgFgphEn6-Xu&WVH@rBYmA|VHVS*-7IRfLU*GK^PoHwZNHz%iQj
zh;oydeM$7+J6d6fF5dj`wRiPc5zAj2%uIH@VZWN(U;gi?%adWyJA<eZZ_iMN*Pfrz
zm6)rQc3KW)G|f~xSaKUaPPtAm1G&l6scc^l>TXlOA$Ay$1OWW=-9sPhpVLonB;{mE
z_zbzh#gX-Y743$<bM-@vCK}bF9+Qnhy>Q|8IyfLFMFYV`Wzua9HCB&erlI!?x;rdJ
z^I(5r!kuw)cAwU19r@dDiigocWEeCOf|tv#EH7W(4-l{Ou3(2bP&H*b?N;E<Ao@v8
z37PKPONtXY%^>(=VVntAC?~~?r*0yDNjooF#xf2TuThBL-n0XgA;X^mb9W45=|{Lu
zc@-`O%&Yt!d+>o-OGr=0E9G*6G33rUgR+|U`5vO95KOpkt{#TlZ9P)~k~s1kOsiNl
z9i{MvtpIX$P7o-_6pnUv8>YJ>gnefre%%PLDu^dQ^V^>fO%wQ(^%_SGT^pObgVja@
zhH6b3rL%u6<18QSnA#K#aRtKp#?u{q2b1;T6aQiO>#_p3Pyg8V#p|nA;Jv4wU+2<I
z>-Ml{7*xmy<Zn=P$su|qiu$1MsUO{9#u0cKJbI8ffM^6S=8f(&D7$sKDX{vbyYhFQ
zngxY_T#9OJUbA=nN&8=N+}dpJfXYIS74Dn8wK3u(lIb%<{bWY5+cP%24Z?9ZC|ZH$
z70AB1&A6nOu_2`MS2@HR|B9XuzoZ|W=~dxf%eZP+!$ADDlwFyJL_tO;PX(Xje0pz2
zG}@Xe`58cAA&IgnUfHkW{1NR-XfUzyt$zpy%@o^589y&n3wcWZ=d4#6Mi-B$-hFXy
z+qaQj=MBy9cL?55n;YkU`eDRrHdiJKKTmD7etK`~liNRi!!l|$EOxD~t<uL2OIQb?
z$qm_nslNX$6T(pvMmOfOiH3t=;#eUfEr)gv2w8~gZuUmFb83}kAt_WGD+B`?+nQy^
z`c_^KBH*+rsj{<X%{aRiieIA8b4#hEzrsX9xV{T5W?~oTm4kdeC}nTEIZrBdQyQ{T
zOb#AkC1yesUFkkFKN8~6su=uUU%L>N+oE@lj~*;o22ToJ&j|r#Vk8oXsD>$J@gBPS
zJ<`xxm1gTFLHP}uO|Y!RPY~D_MZ=nbW|)9w)>IfP>SkY@MCVO%{x*32`Clv82{^nX
zttoFEX9vSE7zo3kEE&18OuF<}roT2wEjy56CaNT>Q|k7@PO;gi$pAPW(+C@U%(^7~
z5oDs;yF*!&vg{%lLC3VeVlu!<cYYfwgEfPu!Jh^3XqzztN>)TAQafojgQL}kLp}gp
z&O2@2{svGq_#zZgRcSEZ!oN7T3qV~%u%)00w729sXiH9_Qwl2Z_Vy~6u@cn{Kt&#S
z4m!0<wm<$cByg{XeE~gXL^r0OZw$2q8y@`xwZWhar1j)D2!cTJ7}@wD0BY?=7G#ye
zy!bSk;)aR1Rfw=xwgtS)A-Nuq^?><wi<mal8<MLXz}nMPZRP7G<SHN|S(lW5zju_6
zjghU<N?y#m1Zh)0_?=1Da0#m^gy$H^67DLN9DVpMbQGK#YYR3g&Z{HC^YQ58yH`KC
z&e?mc6;Fh`INWJcd4(KoD`h|Gm`Bxs4IqxeCOhx-C#yC)KFC)3iMGCDp0)YxH~mff
zgcJ4IQ5vtK4cDT+{q0Q{E2)S%PqaK@FjprT6@I%okAp4V0Vrys;q*;Z9fai^#MC~8
zHZRAuVGxbGop|#radqXUVeigC?G0w;kB86D9T1@Bhg3mXo6WV5{Jz%3Ylm;m9M9LE
zSFsukA-r^l;gg}jH8Y}Zb`Qt_Dzk>`f{KgtY|q*Pw*Fz1?DrhQcH)KN(@D?>LSoXt
zjiMKC&~plIAfQJMNtfo%yb7~DH89G1n%2YBiDZKFI(}u&gipX2I<_n{T4spRC@Xa+
z7i}~LM(H?ziz&1O!z5k2ocbmvb8;YrLyzeX$GGbqyk<e_a1)D6;m>S&0)<ZEJ$*Ay
z8$OvJ7M2>phGrM0y<OgI#rFvey~`IbU!aE_-LvK_mvm)EwF9JZUcg)bH9Z?qB8W>Z
zhS8YO#-Eof5kYVzSd!MqpZwAx+HX}e^1Q;)_}00wdqu2krys$uLxl2G5)#=y0$`$+
z)VkGkVJi_IvUlIq-Lz5_D#xLD@6TFQHM__U>-k(<&BC8~s7G~qFH~Q}|2j>MR<rwF
zPqqWpP+GJcdg-N)-4+@9?-o?^>Vmxx2=YnsvoRMMZSTWS_JV_^Y_^Q8Rd`AZKg|2W
zA|7LAaH242c=bHd{$RUgHyu|y$35Da1cd_`GYCh%lb$ky2(eE-{m#{2D+Ot0(7Tsp
z*u5*RJI#0|v+Vt9l`Jy<Eh~pG1v`I3ahkB_@eFAVkw|1~@q`6)AJBI*_A}3qk@^OM
zqF7uw81?uH1Snj`j0%YF?<T!o0ZPd#W{|oo;GAUl$!;Cq`;9`W$r5|t?bl`<k6hHV
z>fHgDkVpuGBNOq2!9L*O`WRe)(vp~=CUyiFiuiqJ`n`MaQ7(v-Q_5wZVZfs!zAvzQ
z8Vf}Mxin7*vOa)My!Wzjxc572zbf)>XJTRE@z^$-?>PX6p8QLdRhXDH9^51=GYs$P
zhUKh1*>mJf1Hlxg7@Q(^!#gCHjVf<=*tIQlk!YC!jxXk>v^RYndz9}{HPo+m4*LSw
z3I~^0`p7AVt&uw=rp#R{D`5r?tCEUt<|j4c&mcV{j{XL<K(InSKUH{Ce7kIe<t?I4
z=3%%Y_-b{1@~XE}9_y|$N01+zhnrjlYakg)o0nWug!rj&?CIm}#LZ_ENV<{}wm@SU
z*|-bn1xzIqlcey3f~+b>dI`X=YzebK*#)9autuDr<$)7&X2k#n_w+fqSQg%)2X-@9
zrTT`(AM?$iiDzNnTB9e%_!(ida9WR?Aw(ISll0y%N%qDjkTrxy^<MB!nSqyY^cePZ
zL)ogK>xIf!_h92L3YNprxV2Qt3%K7;A%00neCC%hc>-?SA^rlv6bLK6cAUY*Q!E;-
z`Yu=HoL>NA2LQuWzx4;A0c2u@i!+fCJ18kqG7hvQBU(5`jl{8PIOZ+O#G&3FSj~l5
zL*jd&E~0OR2_DXc$!3cl47~n}s!W9zy+6P|+$X+tuqj<rT*Pu;9ll=lZ9p>6LW;ev
zf39+6kp~Qg$$V`I<JSq-GVnce?!!0hm2k9?vy&wG^}+UF6Q)({<F(z|yHi(P={I|K
zlK!NQQpOjES-<buZ`4}}Wz*PQTX7=KsnnKNwZDrjhlmdv!tbgW3lX$sH02R2NV%gQ
zpp*cqqt6J(7tDHoIQ=wSJ+n<}ubXahEC7>uwN|tIOk?*OA;w`c-9#0SSy&^OWbKth
z@Q>Px-N+Ab?-JmYPYF?FSqV|5@{!-IAw=uc6Gw7Y-8v7vGtqUhANxt+jDZEte6xx|
z3C0;iWXOPkE*wVieqOHF2sk}J!{d`m>vHddL?cv0QdKY`Q@QgGu6plOy}aAP$b%2N
zTP!!cjb#~X&^Q(vPbLd;v`mQn{mv9AO99NshW$}h%$L4&OWtpHmG80Wr2gm5z#uP7
zjL|I!lJ$zHN^RfiEAiKP@+3-5w?1&eqRQu{C%Q%gHP&3H!gQGKbAc#yyeJZKPLyE5
z;2l?uL}pVT#xI`7I!oXpfj632`la56PZAHmDYZL?zmw)q@p4V#5l~X!cm@s#V@ON6
zwomS@*=WX`He&G*145k;#t$K4ug#5WGdTv1E2d!k<xUDW$gK~8h5?cl4L`@x+R9b>
zWq3bS?bBsvw?YL4^kxOA5MR0N@}&LX56XxAI%|!bi}Bp2SZz(q1c?B;3`t?c!zv(R
zozn_|+l5rExxc2W^tOOgT(Dt|guGi9l4`u*lO>c)m<`x#Fo+y=>X2q|h^U*Sd1kcr
z15d4Y5wv3TI7V?Ya|%Qpr;QBL?(X{{Y5AS?&qP6QnKvac@FW7ehxJT=Jm%>TX19ia
zB{wW~oc;exP~zRYa{>L5G0Lqo#qNTcS}bNwpZ_8v1S5AkhTpo})HRPtgz1JBn++?B
z1{;BaefZo1ADWj8k&_!Uq;pv2*a@!z`!=C)$<3}Mf<C8M5kmp1=PSz^)f}b#>?qYM
zLW#2D386-7w7}d>0}^)_9#r<fqhh1p*ARDXnzzCmAiH2Rsly9JJ7xo>9c;n*t>^$D
zL^2I#HoO26A25A#URh#=0S&EQTfT;N>&=|j5jsBzfk8DJOfT5}h=!N7H(KvF5!8m9
zg`mudZ!cwGIH#?f#)Gk~cP?fll)_2$X>>z0Y@)t}1M~6MM!~KyIvG^?eE;Q2C!Drw
zM0zZ<z(%@$_+(z@@h9`3ukj{mT`ZlCd{GNmk6O+>^}}1hA(OixFWD3n{o5k2x=7se
z58-vVidG4OQi9fODKurkS@)lZPr{7<^j!F3C=he>rgLp`|GBu0^@<WXsdcxvZk*u?
zHE5Xa=bOwMi#hbCzjzLmmKu7kHohb0xxZsSta`}5qZVtPjf}LJ&g6f^lF?s=^|||c
zVLMhmdNS`jn-x>vG~y}7_Gr_a9hq`jl9Qk=$;v`4Pb)XWQc(9)_^C1eT9-0+xUyzm
zcGqqgtnj?u@QI`-*oLPxz*3Z^EQ;TL4K`fg-{+0qkRK=w)Uv@MdY)eN^82;9PQIGE
z22sJZwudiV=fTTA%_~GuZWJ&ngh<M7Cvux#hUU&P_3I>h&4AT6P(zPK=!gDSxZG`j
zBqLaE&Ty6Fv?fvr50E%ed2VU$Y)DO&G+S^^pCBQ0553)o0wc~Y0Cr08Sx{e}RHd=q
z+?hL;5LFc#bIp3a7hh96=`Gwuo}Bn-8u0#h8ScJ;FE%-a(h1ygSG4%D<9|b_o(<?R
z>FkRE71ue7{!%Dokz5LKUv2oZ9K2pPf4>rb5^@bwP*M?#6jg^`mUc3djy93VtH)6Q
z?iMQ{-hb|bZdNCdOkS?)sUoYNOk42Vv){b~`T|TUZheZab5LJ4srvdzI#o{PK#uVW
zS_FGiAX>fTjk0S4pG<|LLuM2#1zJLxttV2}OjUGc8=dKabOyxfc6v<|rdsH2e+bn4
z<X%YRGfbjl9WA}|E!WkE$6OPn-3;PdnnWzN7U<EMApN$(u821-Iz{&jubz%!z_8be
zW$#8A^A_)@zfpRwBLJ$M!Od5Y>FajAnD^%0CNy9EDWsY^70tM}O#^%M+J>TyieFdt
z?w!0PMerg(<aQK}8nB!eE?C*Rc0nWne6-MUpE)6W2&S(L=UxO(SbOX=RbBn>D3vU}
z_2ShNhB->P#`fiVTLq*D7uQq=ya0gI0yeH}UpYnMG_@3p#iY}U<;2W#7Aylb_)1;Z
z%2Hi;HP6XA#R`AkbDJLcxQ0ZB_|R_f*gVC7!4^JI?NHf_ztIHWJ$s~W)a@DTo0#)l
zJE(kvjn!1T`Wz(laGlj3edu&)k<=8rv4d5~A|`+1EG35D8d{L0hu9Gs8slT0O;r1w
z@8X|Cyp?%=fb|)DFVQk1+R8dIb{<n5StOblaIQSuJoqhJ;XE}vL4IBh7vVz$d4#p{
zp?x~~V(yISutb34pizf4vWnryYpy~<18&r3n;*7jwKIqavKl2Q%9Vdv!iHJY?Kks3
z=Su;(nB!@CZ&RY2zdRIHbEx7^Xr)A*3K>Z(Ll&DQKd+m0;9gb1GTL&aCDe`|Z0BL-
zKA}NwXjkqek?8r6hQme~6VDQ+necQI`^9HhAY_YEjkRM$wp^|pvL3Lv^&DSPaJL_x
zk9A5tjvny7U0rf9*9<4|YX3`CJv33%uBiFz{Dvj~1FVrCcNlMi?zmE~P$XS)(G&vJ
zSP0toPjM&`xm+P;Yvd+%&_8Vdi|1(E1Dp6&4=RJ%;!%{z-s?U+w}b|@WL%`f;f=)K
zdUS}b!JI>))t)c$)BRz!h%+qBSYqp!d|>cAI5*9Wm(IsQDonDEkILgO<}vMXqZS5h
z)A(RUo=l988<@QIPmIt!U)f_B^D>iTaq_^a^hwk8Y;4Fi5OTH?9n0k)0vBXeBit))
ztME7Mpo7Q45=$7=^;DYynm?|A^ls+qj)WSeY&j>MS?L~`QNmZ8=f_Z<A0=q@=RpPB
za=l${AJ;N9#wl@yl1X;yD&Y0C1Q_rBsxmmlv83p`uGhEt0P$nxtc;#m08J^qQ!s+E
ze_Vww<omo-8MPQ1C6V3@C%>LKS51v`qtC{*4`LH^9uL%x5uW69SQ|7xtkdVZ_lDb*
z7s3xKy96y2AU@EyJX8r9$9h#18m05Jm~dl_;Azj~1vWeKV9Ew`vn0c-qRYt2)@Ta5
z-$h>ad<%8Q=Or1WIv|iP<7tZnn%Eu{>C~Ms8f$779Mm!>d9AGbzH8fs`aBkWaO;!a
z*i6mi-43^mBu;sYOw9z!Xg<`(zqsP`0VN*SPGOqyR8-E#c{V&}a)a7oK)-9Zn;MM4
zj~D0BnZe$hS8nQkl}Xj=iq4VO7hxZnoF^eQLZYX{<kI77>pds6fUZZ!tz_z6*1No<
z^~mI=g{;PGaS<yr6U)s5fSlGc>2#h=0g<8Gl9;RNSb;TM*}^BsBr8fl_a68Zei_u&
z2<-h*bPfAJA|N~*3_r(v{1_ZqiNss?w2P&Bj_E!Gr}{NBSs?VNc{@@!shvdBPV41v
zI|m%q(V9FsL4AMk0UQ2z0>B5bwnz>vnKd98A_N67F`uQDR0~ERvJJl41B)(53E%=|
z9N?onlUVg{nITqHEVXWKJfh`P;eCtKFjC;$kcILvz22D+o>>i?WJp{@yPV``;wv+%
zPWXECt2LhKYRy3Zh6<Rj0IJB@&(lYKQNuRngTVPNu8EvCb52da(hsboxD<S45Dr$k
zZ+ykvVWKJ@ir3K5K1jxHhMvxOSizqv5FlwHKToDBDUpV8Fqa=sh^2Q8*|E{9!Q5z_
zxQD_B>CkOTv1nHC6dI?f=GJ9^?*mpBnD>(diO!_DV5^4#t$k*9Q3lTC<Plz}q61{$
z4RcG9d5^$gs{>Sp6LX6mvFX^2Z=IJXz!yuD0InLfnJF6742GqeaUuVQ4)7bZWeQWT
zZRpt%a!wC?`J>-hfPm4rK#~378Y0X_DC6aiet|bk2g7W>x?sF3n<JN%!j*y)G~Vn7
zmSDe2U4SaMDI}E{>=kS*OqU^{$a-Rq2zf-mYm`4)lpG-SM<YPnS~xz%;N8%uR#Vf&
zFI~>=^wBXmNCX;Le2XhP$MHjf(ozW_@kZ#sR9VzRzMvDQ4tiW&N^ZP=Hh%`s)U?8=
zEE5c3heAgKeb#C*aFd7+(Lgmn%&cv#u&Te)Ws#ymt;Q#KK1YPwdR8H=B*$j#UBF!K
zGz^3Z$kAP0YoVv4YZM7h_7CYKq<@HjfnstY<GVhQGCb6BHc1aN*5<bRw?{_Al|<DE
zwalx^n>hkd+9Ui!5eqB?>($wUHu%u_f=VI9`8hn_kc|k=K(c>mHl`hn^SiatET)7P
zgsHAtX@wVCxma76YCQs-R!6F)^$T#*a!6lWj~rHOAySJ0Bu~hh5is;|)Ic<c$&xFT
zOUNHknLNnWuVV6?Qz2cv2G6f+a?NiV1e5QUIg16*KhAX+<*(;`Z+-Ixy!lO4ABCkl
zckj08Bk}hJb$a<4R}YhIhW!DP=ZC<~9C(nfsmW8kx^$<Y3cJ`hUm9Y(6EfaY2%Sx<
z?b8Wm=+S~VrIzQZW~8rU#rG;;LQ!*z1taNszEI7{(<^Kj=2RtB?!47+!DJVkH?vTy
z*^y}VOuycKo47MlYByPCT6NsnJ8Muh39lkzII87?Km1=O-r?`uI5JNm1Ze?y!nyFY
z(FX1L{$}BLJ0Y~_JOZ^!+t4VN&r{wYGNqEkSM8#dG99<JxR*sHGKB|C+JXCC8IKul
zsL%}kx2F4^c3W7YHzCc`>jpoun%Z7~PJAFSf0U~YPteJkH#KthO30*aR_H{s{CO0D
z8&G5WlYJD>CFqqu7~qM4Lt<ri_d+h>OlwWW0Pf`qQ*CA`gdT8YGr0hOL1NBBfd3s~
z(R_*8KnD`=4Ydkqle^RYcn!Eba>qv+TnxagzepAeZk1KEk*eVg`~w39HU;PY4`AiM
zoEgrQ!_3;Q&qgS-pUE~EHp`Jvk_TK}_%jxSARizorFadQ7H;)l?!*NKVkh){sG3&*
z8TzVp608GEx9i(zQugs-Ag6x9t#ncajGRpAdnb2&%@urhoa%V%ypw&GAAXX^gdYua
z-}U0ZTQ6Z0A9^v6=j`74aLLaGy$tLXsHaaKIS0Qz(r_@GLSdF)cN|K<IjiWPaEQZ}
z8GsV0G+{Op_YfxEjRV6f3xVyg-wpU2>kL;b!6M_~5iZ@8e-Sx2{Up=U!nbvLCYFGA
zZ!0zU!RTWzbUTd9<*{9$%^?7}hnUZpE2i{?7vTwaLQt7D@X0vfh=A3v-wigrcg1B&
zdbS_S21@yJ9rJENnVsa|&PgTpga}8DuwARU9_LCkT__|UlK%JrY5BcvTQs0laVwiW
zV0)ZW7cT%Q5I_SBu^M_RzX(U+nFw}4!ej*EG29khcJv{Js1P78NzVDYa1g>eDGMzY
z0BnjBqsE>c`QL=YC>2yaG=r}zeL`b!DEJ@5rxvd)rGzflUg4y;iRa8FYT2>ek}xsr
zm>Sb}z{en&3H%KNV^P>b*S&$2LNoz@XV7^fs#l-UhkkrX09yeuX3K|44Xl7Av~_@*
z=9Y(r*%r-t7a0TH)iLi4Ww;QkqZfVAwgf08i}fc`7C}vC>e6bM{lc*=+kEuSw7%tZ
zCQ$bzU5{(z#F%X~n6}R>nOz(>S9y)vUIL8>J4d!AH7PSZ6EjKl**{{(I|3{aK2%2@
zUDfT(JrV?$VxU9;he4OHhda3(e2#{C?~i9T8&R2RIBbro+fCQd(Wo5{Y58F)?aK+y
ztW+DM0+P_^!IGztlDG8?iqSbNxnss3dW~lAEeogG+W@HYVjfKo3>#PN1Rl0;m8JG?
z*UVgBYFN{AGmi+~{6BKwL0E!NNJyXcX5E8zzzF-7(WR%ClY90~);=nVzrAjP0XAb_
zMCmg;L9d4*waT=y?qYK<@C}nGUrwMz5NaEoeSi3Z3lVQW<~(%`xO^DwT8+&VGplG~
z{x?3La^*$Vx$_&;PfOSCF1feOWdHaYpBVAZP&1kSG0SB9t^M41rS|nodG?PDCVg>e
zLJ4f9l~2~fGSzH<a^~+|ka`G5V-e|XQkH*xTQ7Z`Fc~ysAJeJ+uEkmxppgnUjc+>+
zU7#&XxpJAZ#vf~^5~p8#@$FuZd24yV#V-xvXXQF==E8NtWn7Q`p)cK4oXs{Gi@*+C
zDHe;5JWTigz}Oo~-Se(qF5?Kw5axunnPWZPu;fm&SyHrn>5rckkmFoZ`c)d-UB=9g
zERTPZ9+(9@v+m<V(m@^v&)(x!ap{E!+|1)kz9fW*Bgb5Zf*@H`dWu5DV=Ag{EoJ$?
zQYT2NM}&-8A6dlkC;ZDhiXj~rcL4Czdg;Y(+7ahp%>Vp=L=;}+_DzsMUhP@;hX||?
z@2|y>)r(n%Y@=j{aefr+ORQ&_1yvC_P2xim;qS%MpllIqEL$%2*Z58euaj)8q|M|a
zh$?^%&h(q|g1T8;$U7`)Pi$Yqx6JvTezz+$y@cNVz7|zd=+xM{;}E$_co_oru9#<2
zE318@V56?=i5s4vmvPvQEracXgjPOM>z<!ZEOpOH9JId?v1(llKa5N;YJev5iv0)y
z_P7SjOX_`}5_5i!GVc|c!eBvoI_jgrUM8Yyv1qixo=^EJf-6tFRQqb2RADyT7^M~|
zzv)@A8UPcF+M6We=IpK*r-p&4)K7w`_<LIqJ4f7BxU~KGJN^+G=bBi|=2AC%5t*i%
z9mG#ZVC;de1=X?YE;Myj$RY78TYxxCa1^a%a>zJ3xF7|S)R2)9zqGqD_jmF2xmu4t
z<jQtqjS>>v_48mk&%PuIsm}+^?L4bBIC%c7j6UkMrx_qVTenp-@nBzS6iOrLywEG(
zmG}r0mk+u2h3sSA#12b%x)xA(gUn>y<2iHy)@DdID&mFGQ0ZA!EMI+tCO00K*)+0a
zzCv5ZB<oduNchrik9olp^9(xlNBxB`H(BAZM^n({Zrq~+d=lr2D<qj|z{qcyw4g}6
zl#5k(Y$hsCvb-TmYcPhjbTpdbN`@w(AOXP1nf9%~M%?Xx!;*OgU*%7?W5wvxsWDb-
zxb!}PTcU)0R_B4N?%B}vTDC#7g2k!z%)ZK~f652l$1O%V{NUMw3dUmC3Q^j2>h$lI
zeM2YwcfX5s*w_~?H3Xa2yx0iWbO~&)qc)Fl2l>FPIT(nVfpwYf>o;%ODi~2XP#3V3
zufAZyeh%SjnZgetgo4shKr*2$r3MS`T2+x9&j?ZY-IAog`3vs;g}_vv5f!%<oWZFX
z6+6kj#uAS`6sy^&Re&%%a46^5+H`i3W~G#~I79y_OaK-;!rmYCxCfwWo^b0!M1A8v
z!KOq4M5}HZiUX1@upo{6S?}O+Y}_`5T?U5{C{?hZ9<HaZL--8fnp1D@)tw1P(MY9w
zh*+8k;m&<J!@Dvpszw-S!-SU<TcL0@Wu;>0rs=GAx*%>93+LRci5?@M;&_hKUXWk?
zG&j$NXe`aEfmj&6w7yXs$0wQYKV~230VE%tc_eMuHv%ElvP8WzMQt$Y`vh(2ROQKz
zDtcJ4hO>XGJLuj6HCHOA;Qk2wvi82YEBdMZLAdd%)gI^u(h=+M816|rl7e03HLYq$
z6(0i0kLDR)wSv1UBSx*(HV*X75x+Hz1F1*;K{Z>pX_>p`OGp)gjDE?gbiK82J_^pL
zjR?r%J-vt{tB^jmc{1|FyikK8BD)br9xclO_{2<|4qdc1WuSAMG%}gVuNxgEUH<<_
zdl$bZ&a@3!ODnal^6pxzD3GeHth!3kS~-Q$TD2;YDjvFmq!twq6+}cJn2gpc)hcMM
zMG+J66wyL@5CIWJizQNoph2R71Pu_v$T1lp!_4e=jo<hE1Mj=P-|n^$GV`47=RREb
zbv;k>V=m#e^o~Yr$V{m$%r+2}hC4H4*RXJW|DR|#^7u14c&}<*aX(>d+dAG%Sy1mV
z$I01(ZD1_kFa1dBw7PH($U*pFA2fkjfLQhnQh8WR+htXW{c(S@$5+v&v@G@{N!#(5
zCS+x=G&pE;j=pr}jzGKF-S+Up8SaMhh9Hk0ZITVB5Fa}aVnKfnP)bVz?Cn#-!D7U;
z7ud(ZxVWK<G$?<(KBvRvVl(0?-!7KYpTLO+Z%y#-LOB$9#wosHEGO7R6k7A<j-De>
zmj-<2@CuH~`;$D8-t7_BkXXH7eu|3P&EhGFF;J_Rcg(fMnl?9BeX41Ln{56HGaV~M
zk4t~2{yaDy`Q2^q%_?~WnQG;(#!xx{QrF8Xdl^0;Z|`D!F7g87!P<>&&;=)CH9pRc
z7)>B>^s|VNc(d8$p(ga1sT=8j6@+Z+-;OD{DHOk?a{oO_AJmi8Q?tuuY|w`0-r!Sz
z%||j6hmW31aU(U;*D$}HwivTUQW@aH*x{y{_KBIn@eO~gixmo}XS#D{c}vG*P3&A(
zOC!4Nu^CNl`*^eJrc{xzF1942bq;aQ%@lkqigMncBW|xk9n!!$ySKJNtFr#ZaC^wn
z2ZsD_iG1H3($dAa&|u~+84{Ezy(!#^uicTvDV77@*U1eDR+oI=7GP1&>M-Xx06M_1
z)Gyp32{(hz)N|Y7k~s&>MZ29tqI#IIbiE&KtDajOy2Z@G+wW^|;jDhrnV|viFjlka
z;7yzjw}P`=pJbPh(+h?xOJZFG*AxMvBwh2opVGvx0yZQH;BGSO2=7LNc%X*J(?Mc%
zRJz`*ehjxOB7PCWrWe@YUu}if&+`FA0&CG;BIqx$IjmHh4?@K+8LQE$U|vp<v%N++
zea=XJh&DgxNW&{>Qm+!_R-@d+TuL<?@j?d&Zzli-Nbu{fnrK!PHKw;6rGg+*9kBWk
z*ywi+ssWhFJCAfF*ocxC`jw>u1Yf)S8bTLGG3p;d(b(q#ISetW5A6_RkrS&?#*GsQ
zlX8*ED<So|()q&8v|;%nB(Ak&#m!$(eEnDMMA6)`FD0gVXc|Gqc#2ytp*xL_wEgSa
z4?~;M5fxZ%S#bkw>y00rKi&N2evV?x_8Ze{<2ueOmwvW)u!mO?pSlgig)hj!(J!eO
zin#=wCRn@S?@#yhiyRKj*pj*#&tBnB5&wq&)5R!W7(z;>SQg2<q^&*XmCB)s&x`qe
z_s1c}68ebB(j@NJB#U%e?C|$abte&OV!4y;L+AZ*=vO#@%$cMkLmQthD(JnJ_x=5c
zK3}hj0_<x308h?0muz<rkJOl)<0l76Z1p|;dEXm~HXJ5pA!OEWE-BZ7yR5DpvkE8X
z%hi%*i|)C2-&+B$X?qoRT?}!v)=MH(!FLlGdfoq=y$K>I6_tJ7%gt8LY4j4|H={c`
zvHAq+(+2?sA-E;=w5CkT!f}SXedpsJVCZZ=4iok;fCZnhb*=kHhJ&hv#>3UgBl<~=
z=`vQ<TX(MQJE6;_T6ml^eVPzOV-J{sH|Ff?-dg<xQ*>q_$f`m3e^nW*xeO|lE*=FC
zlxR_tD9<pln9_qryuMJ#1tv(+bz6b>&xa^=WhbR!ew$e!K}e~?sPewAB10Z+rSjmc
zY>$RdPZ${VFcuuCLe?-3D{}vIxO5ggy-165P>Dz2-Dya1kSjLE5D~%#K^ZtweGr}C
zUzRL=vy4-fbkB11{k3bMmg$e>_f%PYkoW7cH#T2YX@p<;4DVb0I0fbbG&FhNKM5Aq
zIX_(m0pqyiMmTWJE_b9)1|~nq_`5Ns-#ZL&G8)l)>y0BFe>jtKsl02=-((hG4#R((
zwv*6hch!%@cn>wsmXKH>`J<yzfDDcY3TuQwYJl6@3J2JTwhMS|r>EYSw%PDUP2J1_
z=LzIr)cM!9f;eSiPX?q0vi-KA9wNJcGV*%Z%f_~+GZCcX*mO7lEnsVd086zAOE-Yn
zPmFp1(-?H*URZucD|R<Lub8ii(P#!#)X}Y1lkpZgprukI|9Gv*;_Q`@A#p5o4Sn*J
z@OD*Q6Td>K&!6e%{5WO6>IYZ1k4XtfC=63tG_}YR9Do1-|98kg)^z;i{0RjAk56y#
zyAzbs<mgJ5$DHN2T>bfzBNg+ljt-hOX@vY0SGK#WG~J8mt5RWejtdL7o|MxpAZD{R
zmzqsD1i(7P>Vi*0*5}%)5r9@KcCn^cIui_$N&U=UYq1Z0*+h_biPdYrPTq6*vas-Q
z_T-*=4I~$;m2BPNEeW%aaD&)*BlzSWhX?E%;Qe04x2sOEM(gK~U<e94K4g_-XdGI4
z_F89$t^H@LS0Mo~^79Ukg<RqSao%qpe5q3Y(GX?I!pQT6cLY@~OB7CZTQo+~zJ_S6
zF2tH1^>o~n3G<Jr<UENuEXm(r6TjfYUe8-9kEnW=EP)7}GKk8-bUcu{HjGnCL8j}r
zXO~x@#a89f5Br@trM@!s>;X5f(0ji|>tWwl^HxM%`|L2b@Vu<$N2!|^*OacMCV5LM
zSH0n;(Jn_awvV|~1;0|B9a%FcieniXN6U2EbIo<TBydETyTxNe;ytdYqcd>Flz879
z7*HMaV5vjziSX*3ugK#oto``eI=vy57CdwJQdsq%D6`3%8r!kIN=9IVMn(Yu2Z`R8
zo@2PKGhWx&X*$!t<4RFI&gH1Y(xi_44pErR?_xW09&euk(qW`qddvlG5fz%m`{l&D
zeq?syh&~cXiK5D|?#}%f99BZRzJuepCchNbLlna)4}r|E*aj4t88ee#e*7Der)0fK
zsp`x8XJSdmTC?dn+-N3VeTxiBFTVtYi)mhb@=-gX=Ln)V=~C5B53an^--^3Pu6>=%
z>it)|khf^|-3CQ;`fY&-dmQCC;QmWinffV4dw+er;d#1V8lR=GI57hoV=3(0gCAD&
zkeFcKk;G`MK}{#BHnlDlfmPcdZ&9JDT<Gxd_{ysLCUN*u#PrIi|I;4(coUZnmQP1T
zb8lP)7nd0-hw%2j2$PUMHr)6dj&U6ax3+2nOb;%dn$t35@Yf*!Kk488dbt7kxhei%
zR#i|ky2UA6SV}T160vq0o*P}olQPzLe?8tr=YpG&Kd=PTwEHvvQY-~4fADsS9Rhcl
zMuX#*hEjP>&@%-F9_Jpb0;#fIN23^G>X{rSlx)YkEkeg|hsI#K@vqjw`w=?4guJCD
zrjsy4@+B~arN6eQD3KQn$aPlu<)dR@(In(3tgPE)K0Q*UmUolSzcYLlsA*2IXtmn4
zC^qZpFIs=^f@Q|X3nUQ?Y!Y`h9Dyxfd(MYE`Ey2ZePz|@e!a6pLu<6J{r*!a5{O)e
z<Ng`g++g#mKUG;0^1nm=W6+Z2e|!VX*s?WkrDTp*r>6Oxbi-kM(X7d^*?_7rk7sqz
zBK9k&=QeS2Q;W*nZPv}bDU=X|v3Y`b8mL#k`|6#j96?ny2e4GC@aMsVNHXE!!>2qy
zY!r?{&Nn}!bG~0S9=v0mn6lGYs}`WoWp0B&WH`rKd%4f%U`DRg3+M*XHr{>KwsmX~
zE{4t&=+VcUgUtf&mNjAYe|{B7pG|^?fzU)Ixup5(=b7m*%o@h@Yu*fnL`7wU2+~4*
z<jE;w0*WV(PsiMnrpsl+rRgzd4B&lZESsWIDddi#5&g(u$gez{dk?uyqb_u)Co%2}
zm%+4LbDEncv)da!eWofINf_p<Q}_{!W-??tvg=D<E+I`{xSmj-;{0vZ3;ith>XUee
z{891r;x7}0;)GG&my<ebx``YvT~YP-U|*dr+(cE_Ooj5o@0h+mn(-L)(jHFRUb@sE
zuQV`k1H7Iu6u(K{yA3!=@8=)1YR?!|YE43MZpzka_+k_DWVog>%X)-GADh}O^o2)(
zP!dSP2Y+j@OH21+^W>H#dis_R3$#DBe!$f8$+KrbFd$GjK%_DQ?cW(}<+GfFY>%ep
z_=q2nZRkTFd=NrBaiHo{7gj3+9XZ=m89}LxZJ6ck@0T<SE<LYB6qDh5baa2Bm?1FT
zn`I<wy5meoBvym>xwkXxw_m;qCvV{x8@s1uH{gGwfRRR}l|)YQ_mM$$!pEm}jgZeN
zheb;?RAiPSUG>cVpTD=+6Dd*+8<hWupnFG|JZHwKsgP(7ySm7G?^F+H5NguWYt{f~
zy@gMH)9s2tr8}$R^dVXGb|;l-zX9xPX>>JiU|g9e*@V!-u1@7%gUMTa&THUGEJ;J;
z?EnsWH6Qs)NS|lA=}MQNus2?!kQU!ljP27=Uy$8%fP7!`*S@)L{IBB%zg<Cb<w~WJ
z_qTAHhw`jiXgt;F>h0HLEs>Z&7q{2VVu;w`$AEH0WvM&BC$6Elm&%DRh<|S&)!Gwk
z<!a6I3+RL0(!V#3?oem-IF-Ko$Ykv`LDym;smee8X9&s`PKU=k|ESPvY5O2$*nZH5
zuxeroh2*ZfYb-4?4v-=`@6KT9Qgn9BFZC5XhskJYk;+dYJk?S!?s8J)B755+=H0io
zOg-wL`|`^)_6|DD{Jj2S_^mo5158&+2=MGes${EZ8cCcZ7AdA<D0*AE^^!{C9~2`*
zQJh=mdLfyR$%N7*_K_C;Cg)1}&;@Fm(+knqeFFmVe3d7qjioyw*vUS2bpr69CL>Rt
zPc%0V6_RGp{TJL%8!$P+*B>kuMpBwqpV8ZJ`RZ<uL5)zjrQdY@hkxzBq6#-3_+~%a
zauR!P!i(!afFSECiA&EHAQ*Tb#qi)ou3b}pL-ssuVoFREhryD+HuqI+M6#rA<`lOu
zK}qt-u21uEa`>6}FDXCQ9oHZs%Z#qN8|0<!@2y3Lrp*l*cWj9PYhh<#T}8vi&$ak=
zhA*XLOY$cG2M;j*e)QM-TXnL?B5C?|%S59cZ`}Lx^O3%f$rX#TX%obH*Oo6l^y9ZF
zcrQ6w%Se{A9l8GR9dtd6CTZ}KfVgzZ%vIh}*^1z-clxaiGy2xXhX0rEbK+dGtj2|@
z+V1}4Qy+9aydMl4g`uJ62xb9LDl+5#?;EAQVE^fM^jT1?`)p%uC~WQ_vEN*^p-EHL
z5Z&YMUY^9=L^Fw!B4|O<HCqe=24X+OY{&)5+8+4U(@_NsXht9>+55o={d^;a7)(?v
zqNdej+J9NQ;cwDl9l!+M*p?KE8RoawiZ4@4uKp0<aVs(qN5qa2Y>o^W-MW^1RIxwN
z!lvJgvZXbif=j;XDj-_@s_*_zZYL#}Oj;dZcjE{sr^Z1xnrRRDMG;@&v2&qor1r<)
zy}Md(P9l1R67qf>0m-okMNA*TN118v+QwO%Dbd?DH7ps=^-Dsci373YzJDSTp0V`{
zLykHVI_O$Ux)yZH=%yySQ5HfJ6(KPgZS9NR-yi-b_HYZoEq)`0BG<;+y%*X9j|3O5
zThO6_bVpU#Hj*mHz@{uaF^$y34Cg3*QEu$GpTp1Gu@!wZNjDG=N@O`C1a-x_=FJ)h
zOMZSlT(?JZPS~TGFN%!s22DP=6<T|KHk;IE;mNm$j7>>NiGQp}^c-$I{B$;<qgNSO
z^M=k0rqtZLWUQ5PasjZj{(<ERBwOgBiyOaQ6>D!J4UA*<^{oI&Q=zQqKQgRE2p;-5
z7SG7}oiwc@pT7*zp?>4YU1|ITTfygaK*?rp>n@SC_ohSm@uxW$1p!&ltHGMO@|;(<
zL+$Cv{G%W;b7P=zfep~!{9KPup@xQ3Q^2E@U3@H`5b*8^L<^DM?YkKzu^O4&(F;KI
z9}7k)7J6=X(Kl*!suHeV!K<=0kiZa*Pb{EN_F~>Aml&UpFDF}grSRQVeJ$#trW~sc
zIEkqz7nplyhx|ksDWfiL>&efyxsP%+kXo5MzFwWhu#c|du7OzeW&`Zh-X#)BOR3D(
zZfytVib0D--VzCRquOk>ZOy*=^S50F8qy1tEL1qV?df|Lf!9}c2Ev{7&f0(+e8blO
zaa|6Y6Dp(ABjP&@{@hikNrR5q@XT`AO-XSLJ{hcaxAgQ^dDzh0Htf)EgN6uU4@m0F
zF3t^Kr*CQ9dhsv&NCkS)I4M}d{SU8*dSus!k|P7G-ntvUj#iEIR@J+Yo2*i_fCErr
zTXfz2@d^yUc37gdb(r55J}!dJQ7t@CGJII)tsax8Lb1q0*mGi4$1;C)Ce~ta_RakU
z|0c#uZ4O-&Tzht@xIWyRhTx4QT&k<h!38*M>a3I_09Oe&f4YpxUY@8<?&xB?^ArhV
zy&A7)LBruE%!;mdPMX%<8Se<{Q7hhBvbG&zgh0)8Gqo>V7?>_fOHGX-aa<D^fAQ1w
z`lWHU{b+2q88cJ8Yy7#I1A`D)$qtJ0w09j#d1x&FR$e$BQ7J}@U&lH?w2Z%U^+>Gt
zziSt6rh_@RfM4j;q-JBOLX*3We4Y07x}^tuOpLdth9B;*HD()Hd6!In*O>d|0cbAK
zXVdkdO^&!@cp_W~QKu68H>j+XEIoz+<bpZZMQl4b)FCLR`j@`&7pE+8@0W>0MybpK
zjRNnFtObZFfnPEsm<Y;Jc*&@kl%3I;{O1WSaoFEFqa-5U=^gksBv}T_W32^k(wkrl
zce3*}r)PW}^8w>u;c=pThs?dJO?5#!CElm~u0K*E*N#p%J@y*utI12|ddat{s-GKT
z<)T919*4fvt;piuulHjhCJ)Tg1hk*OGd(Tds10J@@kk&li=<(vJ)V8}5a|=gJ&$Nw
z7zN*7UI!lIVKE#5?cGGrl(eNHzGx@zL~wQ=;3<hcjfC?7F3yHf1&L7xH*ZXLa;jTV
z+~FV0n975AjEHp_vc=EKf*ComG^2&zbKiN3<;|Mbj|xi3`K(*Z<6T4I&LC&N&8~<S
zAwR|F<C_z&u?op_y1pkzba&AOjj!9^Jh`(`7_dlpDh9t&dDQy9+Frgh!e9OW&@;vT
z_)m3wrwr;PSYP|ho%qv%^=E!1GD7{U7cJKlOVYNTsOrbZyM?dE(9XV&1`9y-3iWmX
z=}PX!iwPd#ZF${=#GNWibJ;C6VrKx<Zfv|<%jhmu>{KchK>Y~cY>C-l&#@<ry^O^l
zB?kezO@}JL!pgZ3_t#6&mq^^k2ak?{Q6>f?hk)!N*Of;Db=SbVh9c7VDFeI^I`eO1
zAa0DDNQXfldpnBTmj)8V|J<N-b6fc}j9F_~cN;Zu)oJ&3zt{O~pKxZhti={En8EKr
z*upv(Hm+(J+NHPyB;7S0$v@ISufT`4w2m3OY}1nwM-8H_Y*x*NcfO9y;}2mbWi&Gi
z{5Znw5txLBWcR0VCUnjpioukDs=?!3?J29b!))(&j)aq1_5lEWowBeRH&fkZ@q>`<
z7=m6|jVW`SqE}TItc7#n$y5KBu@2iln3kJ*Kg1&=SC3b#A4`nsWawGpazuU`^_(X?
zPqZ&Z+L1C<42Su_V%EL`T~@ZXh`hb7lwaX|I_L-u!*Usy&)V-4NGPRroXNOM)v-?b
z_Ts?N2{kj5Jz$v9!y44&(EZ21FrUqbBlNN6^3C>X;xkE8=6Fpcnvk4O<dU{~P~I1W
z(yqYi3zXOi?YCuAjUaUkO5g&Rikw)vUKm--QJ>v`W9$(lYe7Dyj&9iD*JYa7NSR{k
z-Z67j=0|XtZ}+~VrVO<`dPoTVcZfU1;DWvLHgc14s_xHG1H1dUK=q<_-`k_-V9t=@
z9!TI&ZqYgVxHa0-nkXZ3Adl`DWS1emQlJJiu;PFNWLGHdhp54xpAnjsU^TnHh|n+v
zh{s)pH_Bns6&?Kh-s#$)J}YhB|D%6U&x#iDBtGX8u%~X<mkzd1U|9y<QmCpl^<4Q>
z4?OS$FK=?wIpr4ybqKVRgVb51#u&s@#{s+;JDo%-gud|tnjyhmXP&-@&Wbk`$TChC
zt_USpV+Y7PT{dU(c~XbIr@>#|4`NU7@on+dz9wn$rb~Q1xfW@=I4g!<mQ1c5UrebU
zx4XHfon!jA-~RKr+*n{Hd*2q_#TjS!YI>77vaF$3_Dw^9SXhe~HCP(1;00Mu&sp*V
z$zON=4?%}CMS#Nd&qJ$*1d4Lvj71lAWMtN^Nqb$!f=1Xts8do#b<X>E$XWZ#Bx#Dn
z&)U;x@EZ!h6w&w)>YywrWfyI;nbM?fg9s4557q$8zjKI-bdg+^OSH4=*aW*>0@GOb
zLtB#VC8>$y_^F~d(9wp~rYk!gZYEI{FvS7?9~rV#pkTyqpx6CvBA;voY9{jTG7NfP
z4;p;kddVEUmjmg1iK+Epwhn`~fO?mg%K-{`pXPBtOMDkuPB{BG<sXLUD@$V0kNy!z
zPPNQe9zA*_L#KA(gvd!<lcbx}k}|!_+bx#f*C0r&hcD{+X$d8z*8Ygd($X>{@MV!x
z!LbT&=MA?Qvq^3fvhhMhNczKEK$%q8A;fcR5c&#by;8MGyq%hUDi)O(&gGw1?f07Y
z`Hk6yJ!^`#iLT0oKXYbMJ~m_oUSXkbrHUh+2fC@FZ?8P12WrUR6mBACAvc}s!mpCL
z#UGGIMG*rq8lAxL)|gN?;8S`b(T&qd|F!vSDSp#6;N}YV)?}5swR|hf-!`UwEzSU$
zcX4mC(yt4iOOPga+s;En1x>Tc>jK{K;>K7S6X1L8pDs3yp*~%Y5rmhoL6suqxXGzZ
zv8PwIB^)_A3K;ZgP#tPzaE#@q7m)~zJ!@D6s6j_2V~f;1_$F?{x%6&{tcMF6Sy*0k
z{FndytHXp?kWqQvVr)k*%qSUg0&nKZ{qp%Q&|4-?nCW#NofPMbt+^y7X?IOt-7L{M
z7(>uILb3tT3x@g#I(jGfbqIuzeUF=&@>biC&TV6?SGr}gZp8ZFjJa_n6Gb|ry0Y}Z
ztIe|Ws|HrlgA)W!ZM2ghy@iYB<B-$gN8;0z1QEqHSr9eki>dGXk3L@FW(5sIt;0G=
z8_N5hd?;Rt17vB7)=A#}a5Wp{WXTD%4L&*0t|pfI_cnLMo{C3*aK)CrZpQ9={KDPv
zn{|baGte`Gn>z0OSXBvePl)2CB~_bE_v&Vt$z{yop)zszdXdLG<Mg#)jD1#h!N=GG
zX0&U^e8-~XWjt=A>raF)ynv(?uiBKO1ECO(-M3#ZLT9VI%uH#)2fR=PleCW1P1;;3
zr#Z8{=GR<@SEEKF;rG}xpU&Er%Q_!F2|O|Ft2A?{FKnz3c`EPwT06ukCPJo^UwpEN
zHfbm6w6Y$<)+e$*uql>VK8(Rm$$1|PtVJDq8Dc8zx1^QZWVpEyr_Gk>Gz@}^QNw_i
zI2)i0jIQZna%)W>Cax_M+qYGctn8b}rz^-%B6pj6F*_bRLsi1=0rT4zkNw&LRbR3a
zyxi=M7kBZqRyJxL<-g*DvLV0JkK{2IXf-F*Qh1gNhf)i?G-~2k!gu}FQZi&@0K@b>
zk!>fR!z;%3cJpE-JaR)eyg0(*th*YkWeSd8-+&6t^F#9=T?L<RRV_2w%?Q^=6VJ4Y
zQ40GK49CeQTys}_w)G<XC|uY7A{AmAG+yJ(LWPe0`m09DDzS3Y7Kl5A%K076f=bG}
z9+YG_(d9G+`v_8Zd#a+makX7)T{3oq$6y-uyo;&0X0?kklg_{v{cBI6{#=)%-(cIf
zQfr0#vFyUkjq8us0-9zWu%}<jL5iOQL)mbbcdYeJk~K(${5=5NEL(X?-2Gi2j<{!g
zj52M18&N&=<Y${N4yKvwZTgth`s2suvb(OW@~M3UZxD=%9oDgIw4<+Cxb+rzgzeL1
zox*i5N%u>I)ss)LssqyASbGMaD|{xCooeC_`GJK$AiAe*N8qD)oKZP&z9Q?ccp^S<
zvl$|T3q8}r7=2T+|Nq}IPIIZrnou;p^))*T?w-<Fho#!nVrxb6$dO2Cob#?#^z;ty
zTjYz!lgIFN9^VF7by9NVIqUmE;pNLeta_s{-b@($7(YyFuFsZM`E}lf91wz7tm+~n
z>{CsmXuuSG-*yRdEh&#rKi9Dm{LD#CF~cmswXPW!3aHYeOV#CYgJ2sN&q6EbS5C_0
z-Iuko#0pTHc4GPZ+GhxbQU&l@Qx^O9&awD6E0umQgPM@IOmzw~?QHVfR9Y$WeQ5z+
z!xnBSO1)md42&=vAMd7(>5&2bdQ)cVv<@f25oQ$m%}^U?vG^oweb8GGeeJWc6}d9<
zH|(_KwY%}9_8^|nwOd*v#XYoZzW2PWetu{0{?eUEeHTDMDf3gW*B7W7vcCFOq3H9x
z8u8bC7}mSb%qEE@IMsBHuFstjXU{|Gyp%jutZ!S?a$E>q-2bZCfn4`y{Qs1Ky*-Wp
z-PL*5{?8WWcRp=OwomUeiK-p+SYb8Bf$Qo~=f_lzOF@hIIDNd<dSt`M_4hJ-FQvNE
z2CZ&SlX51C8(~$i)DS{t4^&E0cmM6LnD&_gkfYo3!QgI7$$SkQLpka!zFE;a@^Ywe
zy1tw1o-#!)o`qvppnP#^@5gXaIeHzV{|2j|9Ch}uDyx%r9{&SucX0c(YHW<!IsC+p
z!5N~VER1=Mh?;KH%r3#&)uctoy{!aVd7hD(2(S-se%*5acN!3^v_PB!GslWV#0f(2
z@Ivx?LD?Q5bl}2jm}c9(Fx;H>ESTCSM5TjE$7sCjJiR0`Dltx@qvZOWE>pL`zd-DD
zZ^g#N_P)Pmy)j)z%7KLMo!cjJlL^;HoqE{lG&K8Fyi790JS(5(Juz8_lX!P}n}UZ3
z*g%i5;RRlbd$WXE12h$>wsMLMmb8-iMYA(t*#|{&MSIQqSXCes#71cyt>;%@^=(w8
z{JwgdpnOkI07X`oxZY+4{jYF#FG?^FMhxW5SBi4A@^&04In*r+8GUcL!s?~TMK1je
zzj!Cd=9}4Pht$ZLI!R60yIGVjobKN`e>;N-)y<q4XTHK%?Tm1C$n2lc4v6u=?$-W{
z-E#|6V8ul=ZsUkuxDwk_T3ap%H)pf|(?V71D%tw&Lw*y~rDgR;;=sL?n_6YZ#I!#L
zkhhJj@Z?2bA2TjS7A8hWQH+?3!JE0_;S^$-N#1z)ae<saG7_mg?)z8}_22|Hz&U^+
zknWrsA^Kwcgc4QHEP<S{kR*Dp>_iF=+8V%K40wgikwm&V3{*>4oIn2VOi3}xP?wbo
z`zw+n$`A*YMxkq7{lTGk`hv6erI&fCz6JU!-?R=UOwM+GEPUC8f?`Gg>>1(zDM{d`
zr--+Ws9>+Fl~rQw8q(Cwt*>0ClAr8T<lYk2UK9Nw=bK3=9lwlY`YoWN-s9+9tCEvd
zZ-_=h+d9GT{j3cbfL}j*WTfolGbSBJV7uI3gPfuB&Cjb<g`S2;DM;g`lOcbkBmfU2
zadqgbW~Du8>KTaYl}Z;X3&p_qj``jik;M$}#JK5ylP)TCExOo98I_-K?C!U51*<-F
zF)XKr#SXnU_r_APjxsslVxhm@J5O_0bwTHRU63A#_P$wvZEgMb4qAIw7n3a(3won=
zD#%owKdZ1_Y0WOdYd<tp?fQKjI=uXfi}aIBI#2LbSW6cYqeh0q!!Nm+xOOXoR#Kk!
zZFIWaZmREYfAi(yU+NRhv6a0Yy~cHm63Ak_aH>h^m8~&kL4C>)mDOi!jJ5Y-WRJ`&
zBR9!qAKdGMDtU^fcDK7%(Yt5trf_o?W9n(cJgmZLymfGtTA9?fZ?9XnL06DJt=>?e
zezslv{KiGO@CK!OFkBPLyTW9K^w{XbsXlt0oL<*;`C`HLK~~y9+Y7%_Bmdj{xyy-a
z;2i<Imoo!f10lm6POj$e8nP|g(6dFtqV~AQwVyP?Wvul<&DqV_r46$vgk{8$|E>DR
zYfuf@2_M3nOX{;;8WN}p{V2{XmAM-}P^2$!_~JD|<<zVE^#vhu;NTeYsWLez%@4xU
z@%yu)jqj==Nz+;5%h&An>;|=KkR>YtjWQ~#+gz8q^+xXyRv0VHO#oajxKPW(SubW|
zCMZ-%NNtnpqnFAJSNb^z%%7=cgFBm&Zq%8K`(!Mil4^#`3}MTA?y!tCI1SE;KM2`m
zmCb|#gb4E>Zj&K>T-#WzyvC`gdhc|O-Garf%kD7wiL^eN(5)E&#F*<!<^!7WsStg_
z0K%#P^~t3yyb$>gg`*>uHs)DU#s29RBs*|bZhT4TQ57eo{bLZDXdq*})*IQc{aF2h
zuY{AEfl@`L^3>I#$OKy@T4Vlf3Uzm30v?MH1x7$F6ug&;XKF*sQt=Q%xO#nU)L)PQ
zH1<wWq>WwxhIH2Pc*pGXQTR$a_7?t$1bNX2v5n)?N7}EvMr?B@?~KDQ?<e6&m=j9&
zcR@%#A0E2DHftBY@jjWgO1o(@ri-@r4jy`!|40EPpF|7seC?EX#q=>c7&H&_f3T13
zmN^}g)JXkUi*Cu&nNvjb_4t^VhToIOaQYU#d*e)mBobUq>`i;uUt93pkL8aJ1;h`K
z`|#x`c5GM!-)+C%lf3N5QMx@t*Itg0qs=AAgH+G+rkw2y-Ig@Y!g-3^^xKAW4ug{;
zPJ2DGhcARxqI-L1hXRVUlblt(h-`L4;^}781ns6Jxq3SNilBZ54>f$@!mFSCJ<sq>
zN`Id_n9Aa8;h&P}Ek##1>~#d$8#Kmln?te|tpX0Q$aHiRBTzFpPU2V(t2-7fv`Xy0
z$b1#hF*#EU#?r?-l}K=S+fkIMkLD9T4sG7cCqaCHOmnrY`^VXS73|8m>BCQgtRny-
zpq+tMFXnpmlm8AmeSISk<uKHXe>wsRFa_*XiPQfjNQf_M5S$h?#hir=mCpGvEIrb!
zu`_*o(^-U}NDlj6+=zkn2&GHzLQ5{2^G!F^`{$mNp`!-H@feMhQIKVH&FS#ozBb4^
zN4d<t6`hB6o}2G!%&~L<gF=Xv-ap_b2V<3D-%-o*3tv`>1)T8nJ4A(YLf4!Wd@C-z
zd<$OkCjMt_#802R>23%vv^X^?H+<RU)<ZmBiptLD@<o$4!DF|>f+h=O^=cYt;_l-T
z%`G%02k@{gmJimX>el_l!7oJh@aG)y5Ika4ukS0QY4fifskI$`vQl*hG?XRM5fdx+
zJ0SK^$nN%caMM1oopa<C@?Uj#uRi0^{pkznS`Ie7>4nJf6?^xj94<fDu%e%2mak(+
z;dVhnPdRPD9DZ}Gdm?hXxE`nGZ@!8rc8>s#tm&WEc)}pJ3ZuoMh5omT8{0x99P$?i
z>)M6eif(OKGA<u|<txNP^66Y_H;-^))`H2<&KXX~$ucmu#Bq)=M+dT(rQyK6#g?(X
zAC3%U6U${<e+Lp`rfXqJ!21gyE&X~~Q<S}<URz)>>=<$_OeLT6C51XxX~)gYpL?X+
z)v_z@1iv%zYp`EE`uwNG?I|p;I_2oP?UJ{(_7)0(2M?!=nwHiq6uu;VLd}0?0?eYl
z_i&c@X0=Ii15pHci_@4Tn;*f+hcCN1C^-JH)w8fmuR5E|73PkX(?#bqk<7!CU&$^H
z=%G9Axfo40eF?F3>m`2ra2K~0y)H7@mX^}f9`I=Dkq3*FWo2o584ty4ihcD#f=jN4
zu<0u9FB9`CU&iPqk#~jtY}l%Q%h6tZuqVsfLz~-^x(s{9NujrgT?~iLdss(SoVf={
zrZhB5zUypk$pJu<W*d(Ad6j(6vb%`XnCtO<)0e?o?xVC)H#lKOJ%o)pd*jqf!hls`
zvKQNSmYgf*2@x>VV`EpPglg*cYFm9y`4Jf^6ngY&0X+}mPm1**_VK!=#7@$u*Z<wx
z!QYD>$M!P@+mSeZ<bFHU!x0;n4vvN^?K3ceLS{ddN<U`{GxUz!Nb@SRtrikiYEpf-
zqiJN6l_RdT%}GX`KT=__Js#{EJ!2U%cd6HF=SWa$Cn729#EgK*lD}K+1!5gwe6i=}
zLv}8*2=R25a?Ew4aPAiQpbD<opz@S<yJnB=oZ_z{9^oj;#9u;~Z?Zitj#a;D1+Upl
zx46ak{ly^Z{<<bb{B2uWfF-*N)TkQioeFY|i+7BhgpX;|+Ao}8xr&6KdzHP(O;J5#
z5#Gh61!NsgedQ3}X&?VvdT$_tssMgUJQ@DOX&;0-pUrTkg3lfEHR*2ndufkkhLY$f
z4W*K@`u}mp<msl3$+8-eYl*~Bc!Z{^)<uC7rYY~ELW!YZdA-pk?d*=Zo-?!X(z;J(
zq`c$fFqouD*d_Mf%QqIy5%YYbsz0W5P8xmutl*!$q!JYoGW@rA1yD(R1SU;xA4vb&
zRo1fj@8+U+eE0yI$d*RY1>XlJ{+052#;KV8a^Gq)BltAadcJR-VVh_WzDG#Amm|>f
zb!k(JwHB2TfQ1jf2lK2X^+o-!z-+tukTZh^Gb}EYbCN_TCC2S(B%9~sVAz?l;Z8Lv
zC-=DRf!3pc{;y|J9kx3t%GGNkUi=<=-@llm3+4?MJH!P_>#5*3VFG|!g%S@h9eopR
z#s9uA9eSC1mSm4kzTc29i0gI%ZG{${L?nYduyIN<h5|az4~tbwM3Sk(v4;(P`U07r
zhSb{_T*qX1Ls~2?pG{>rcaPdF>qWufNJ`3E9=RC!_r+)n?{;pX&ffmDudh4+Znj(H
z;lEel5|Eo#wR==-vkMe4;PQ3~=9<#i{UPeI>uzOy$Yb)?IR9bQ7<;d@+9%?uqZtd8
z2M%T~HS`USG8xho@*VG48c5)puEZkfzP4X%M-oa_?|&QZg`-ijSo_arv}zPErZ_ZQ
z6J;hlC~raOt7ktIt3>quSzqAKbV%yI?#($a;T6OiW_rCaOk-MJOc}5|#F8}-Qbg<r
zQHbHiUK-G}MCOad5Xh*_&ol!#N3WkBXC!o2+&P0xxAq_mSSe|`=MVoSm`pr&(c0h^
zspa||lhmhwxhOu2-8_TRy<hEH5yW&D?Lls;MrJx(azrKT&7I?r!3xjnG2|t8+~eQ8
z5^Hzrka<4)SAwV#61iT}8z%&-vsC%hZN}}qPYgvy{#k-2K?(5=ZS=a3Rx;f4kG3i3
z|L+*s!}g8F^D-QFD<sX)I{ywsjuqtCg93T^ro5nSGJGdpO$f{Tq4!DM;MEidIUQ>|
zPpm`c>qV?+)(V~t3|sWR)yQS>zHDuQ7+p8LB`(CN@6?)RG!}WdpnqYI)M&H~!%Hym
zXUM_aHI(|M8|u}k3>I_d4~=wZefKjRoxMi5McofB!h~iR)xM6|<8c;OgIegd433DU
zzi{=|X=C$}gZFDp6EC&pI}-;%64_Vi6z?&)=1Ppkb0^`WZP8e(<1zU^q7+~7RV$8G
z3n`;9X|=s%uypY~i?&qxZETCqI-r<-7Yi@su0N3K@bsnA;%~e6R|n^hF|lM`$s^_o
ztDmE(ZX~UF{iA}Q*SL#U^p6d)*Mod-My4R29?;K!<L%Slb)(X5+;&Kvwd)RDleHs|
zZMI&HuXyc`Sop6keDVQd-F1{9ht5gKic7P6kl<qWYt5#R`)>f0s~$5r%W_lrf;jr;
z|56@M3=oFiaecVg%RRX{jfym<`Z+8&eDA&1?4e-V=K_G{R`7i8TT0g;+!!~RuIfNV
z^aplh0g#qGL;5=!2ECBTbTowtxmM>cZmz#XChkOQgJL6G$lF3m>;}(xJ@Ep`u1IyE
zE%QCI>AX-d6z*G|be6uLNg0VI_j*_(G)(AZb~l3;k4V0!OK)8ULCX0!DsQJ^4{@wT
zV$Fn4O`{bMzWL#gW*IzCPO^8Lm`g??tuin~N>oeZ(_0|PyPn@u#`XHv8=vM7G!{@h
za1a7GpyrU69Kos3?pZiB!^xYb2_rClYn`fzh=-+ABqf(C9t1;+P{9dJ!ddu+0DdA>
zCW5Q;*CMJ%lg4c+1xU?m^3UAFAsp#twz9h~`>I~W2<j&gs$jpIUxE&C($u^{IQ4wx
z>CFlFXI(RLiHygH|18FST$?s}%TXZAy+&+4y_AI+<QL?Q8jGq0_8=$Zi*ZBmE2mxv
z^~AI7jMZ<nm~AEKqNV7A)9=^V2NWs&ZE>h${4KjdA#D*=i*d|=nvxFRvGqEV6zj;Q
z8JBQl3DiHoP-HoX)Eq<|%r6^OcoBvcc69}!_bF~G2$|K?tq+|w0Oj*7KYmMsU*rUS
z+3>)(DGO#wBeUvbwte|``S(dg2n^<oTO?Cr56_wKGH4WcbL4k})+_KCPv@?ru4OLx
zaX$)n3H`Tkcd5U#=El0KsN{<qg8q>%{N`FS@{|zmtb6b?Wx9VI2iR<C3b|;hA!n57
zw4T0BrtQezq2@Z#%_{n6{c(pk72FVC?pjdub^ej!Slo$;uMkx9ebpkP(@jswtW56n
zSCFMq8!G0}28luU+(5nWaOBqN=z1|pK633hC%=q0a_kO_;&{b)u)X4k+uXM<aT6!m
zmsRwmnR(XA!5{b2PQ=DiWwK;#BYeNyA70se<K#7Z@|)=T0&Iw9OYmagKDBqDQie46
zGXfk$4474mEMHcM%@hM?{&J#^t6=5l<J0enfi~cB;D5!;8*gaR8PfjvWH@YJiE1yI
z+M9cUu-OpU5B)s@nGTf(j(6j&!9)&s0JB%YG|nDViIl|shjf=fA%D2z8KFOp&B;WK
zWh!1ZS7YVm`>t=KZ?I@O`|b{}I;%*O%A8hkb!{?bXc?+`*8&7}1Hp=f4@P|JW)qZT
zhT`e$Q353`Xlz{gLuIF3fqtNrts)hyp-EZ18_nc1UpkC+=3MX|{rD88@oqNSfJrOI
z&}*+A#a6oX_$fA*>BZ;c@>hYA7>y!k&O)zUsMK&SN$^nk#q(GHhOMAOYzW3}lpGhI
zq?1rlLFELYE8V(8w{}Xy(^>zX=A!0$I+Oc@R2zD#)@B;RKq-r2(eU|Rp(zZ`H}=Tc
zn;qz|q&q)3Qap13Ng}Ra{hLMuPS}|U6LX2C$LM?zk}Y^cChgH4>t`Faj0rkTAGkSt
z^jfFQ^!ldUm8wmL<t7{aQn!(F`(1(5v(XOj<D;^$&v1MH=*sCm9FE(~8eK?Q{`oWT
zHD;|M=$^Kq&*LCz6ns|*Ixctyj0@Xzb;F<Y+udZUStka*N;HHPT?^ZEc*EhQ^xlB(
z0N`Ov)+4LzVs-;Xiy3#btI>n8-WX&VYe~yeJL2&}P>6YrKVIQ(&;|ARSH~gvuKR0k
z=BuV@qflI&HgZ-+7kxyj48GOZs(XsV`rG+40;X@BYbxzjCix8+WOpulE_(_`(!|6g
z=9)Q|-$@t>Bs%-$tK-UJQCHeEhLqdQT9aC<7HXZhU@jmG{j;_nd&AsaR-hs6POl>5
zVYdu^w)V`si_^=}3LzUTiR2f#JR1!CK2Iz$JW5Rs*7k6}(I%*V9FAz2B95tfh7iC?
z^b#DXODl5vQI^3w#4X+7-v!F*gUR}ctX=e9K1j=CFznBlT4y{rYm5@Bz3Q!~*2wc+
zHr)CZ+(3D7egwYDaoGClX#zq#@(9(cV8r|d<1{#=?@SgJ5eHK=?c{5!pK7st=<JA>
zb9jG#5n(OVFNyiOb$zi1AMao+Hhf9dqQIyXxO0XHfv|Ovr<?ele#`|8+c_Hyzu51)
z%v}Q`v(omzE{S`*(%+01&<*S?(K5{wVs`{nmq}LGKWXxT4-UnXb$`Y%tj3Tw%cgdH
zUy_quYv&g4>}pu%gxaH`S?MNk(S*(T)cO+FM*rKGQjI*K8O7PU)=SlQ3}pMW{bZ!V
zqt9xpcScXlu7%uQF(N>kO^Gu)`!1Z`^WP!&FzD`KU9U&i<0bTah8lycx?4p!N4c-J
zC<zIq_m-hkABF-+39T`A#-_ijwqY5l`)_lFT_?=koBCSSu6S_q%|LI}@r<BdAH*4S
z+7$}7Z}ts5+&Qb2YMK=%N%zh!kJlI3*j-md4+ZGoksAk8K$iEuW<`UQsn=4vHR3xf
zyndY=omO#Yeh2L^dYoo^u+!xkEjIRWf4k7N>f9yD&_+!4zxgA&%h`M?((*P8y#^W2
zr5Q9Ip%(M8?9u50`BsJKY-TX$4&21=yK_pu1O6l9)So;qaw|Rm=l<G?ig%u&3XH#%
zD@2A_T|?Se&$=AE6n3Wf3`0E!;>v@{1-1W#ZxX9V`l_FilQeRz!lPJ4o<wD(g*2_<
zV+3XS&wASF=zxi(|5FtFJY|OF5%o7_bm4mz25vbS{A||FL5ENr@%M@whF&<3l%sqU
z9}rE!r_~tW_1^*vM25AYqQD$m7IOo?2gbz3?3m<LWVs<#mApW#w4aa7D{JlI_dK*a
z`|AFDuT6nL<9tf5c~7s{iQuE7o=us~Jq;&PofETvk0@P@REJ{NmUW3^n8(Y^)~6@`
zsscvpj(vPFHluoKxc8X{Tl=`#!mYs()5Qu9Tbh4{MAl$W*%@5H&%dkM^lTqNpMR&;
z4cIxL{dz9e%s<xfFqY+r6)}?mSb#zxd^(mp0J3vZe(dU9B|O;U*!NdXV0X*!BG&@$
zYtLKYh_dl>fe!XKBU~Q@;Xqe`qwjGHqgQG2;*XoPy02!{;fu6zo1JfT*&{WkV`oxB
zc_L$eJGrE)q6_<^;Dra?0UP@{^IAiS)#Or>cFryKi-20Oz?FORfEm5<^p#Nq8pC6z
zf-6?;+*lb~=z~JLFg9dRP?!8c8*Ga!du@4CZtlQgXo8cK0yzKma(g*=p=(8sB$3;?
z;t<9ooHCa=!L$1<F@x`(A~$qKuI8X`S~Pv1KZ7Cx?TmJn`W~q*)c}u~vFzE|Q+S6`
z#X(i+MKsaMV#~~<eUwC#vfq4}SM`%(J=XW)zK+}UfB<d_#lFm{{Kob{8^w7_RqII;
zZqCc@&2|&R4K$B*PVz{ZPio8;o|wDe#viVM3*g$ldK40eO5go8f>Ix{b8E!U#q!wT
z0voSdDlU}n_7-Vs3mfJ2gsvvvI@nLenykXM#K&s{h|rK3O%sU7I9M+49&3T(2LY-%
zLI&E^Q<AaeubkFLHVmaX*6PppUx_vJaJi;+XS>c9Dpc1fJlbvj#eMZAqlvEV^lOgl
z$%$1aV9{^is1J|44V%C8*8>OrkwsDqYUFu|nA84BUb(%0j(LZ;@Lj=#t|e-q`Tsx>
zD|-2>+GoxErz#>YJ+8|r^|PL{W?!h3m&MYIV~FFP0oaL<6!MFJu&!K6Qih~T_u$?g
zZoMo>7tR)1={n6)LX%;}OrAPm4c7iv?$4lTkXD`n5NlWaYYLVBScl%lcwCSz61Mep
z4s}N9+N8h7)#ojo)wLAiyXqY5BoLZ2Qb6RR`bo6+H8>(|K2E|!QO?$Mn;X`?i=K-f
z>VEzEn%*tBF08%nIyZk(1IgSZnIhpQoG4O$%0wEk3B{@l2bC$&5}C1Km3Iq3DyXp=
z)<HtAcMR}QiuByIBs@y3t(l-$r|MfPo_7RwMec`Xi6#K3&+Uhr5hi-=^;fOPk{aSZ
zp~Zp(KU&=I+Et53K(vD+ao6U)Vt`Uw)?kNstvtQB1DmMuIf@6W3mDUG;Z#xX|NM8z
z@-m!x^l8o(uhYYF<b;|~nzsw_q9lf5G@mdCzy1GXldVf#ozvjzVsKj7M}PgKVcLSc
zaQ+=2x_K8LMy{cotR~q;{n)X&qv}QfT{Hl`O+tjA#0U$*)YE4^n5?8X-}~)}qgi8D
zYmdYUu9;7WVwPWcXlQ>QjY7BFWUtzMv1-(Zu9Kil2E6)R1wU=$M59+gf;X2Q`|vt$
zQuGao1}fFcYAUn!d)#aTvF;;$Ep)Z(^Rxhotoju%??4n>CL|M>55x3EO*j8hK(uk}
z<N|=4CWmnbPZqRrrBeRdMlsUJpH9Fvd$T*vQLeD7pB1b8`?`LKhC__h#tRspNUC+o
z_!`w%%Vm_<RG-<+*-LXl8V(Tth9z#Hg$_Lczs(zVPFwW}irq~A8E<l6QrS*I54$e+
zOg4Bfi*?5=>jvCvux2PkFdwegllWcmcY-T`O1U-@+X+^vSe=uwI?!q@PJQw?aZ$1B
zmW&jyA!85kKP+FQD%IV35D1qh$B*1&M_t64^*@2f^`n2;M7h!TpZdi5+&?BE1<Hi-
z9JL;LX*Ev>+Ky24wYla{jm}taDujf@h3Vk%7F;<Z>u<Bh!RW_I$w<7UsKZ9UTo&k7
ze39f4Z!?+A>LkwDT5!Z%DGXDeJ$k+#on<96LdNfN?n2c%JiX;!t_50fz4F%W?$Zgv
z#@LJgr9z)v!SZxq;mh;G*74iTR1=!n85$U9@`n#cIBbR&{_r6r^0iNAdz}pvO4syq
zF<Z}KH|r1TpVx|)xDM~A)iC|k-G?)=)$g71gY6>H;jOfS-1SCzPsYN}$6Y@nPO5F(
z<Rv=i>fdsrL`7_V_(^y%cqg{D4y<7xt?yWS_4_BYTX^tBaa4xGazvGMEzJJ$kxT(y
zf%e8Pkn?wTaCUWO4&{R$z^Ai5964>l@_uev?SuEDfKZd`BrgKSJy=Q3`m%Vs<XkuE
z{zf*Mux93m8M3dUv#+-oAg)7+{~a<xV^4dQvg!IN61&cL|KThziLRE+vPhQGS&CIx
zOG!Am?OQJsiJ{LFySl!WCfNp5<EE;~y7I$I!EpP*YRi=hmo#vo{A!W5m*i}5f>dm3
zkw>~NN_{F=efAIA{;Cx@@e6!_@koB0LF)XZ!#Q7li`llS8nMB+DQRw9G-K(8EAZR0
zWgshgu=0a{#<Qx^7Os!E7Pd~5K}0h^EvD@B`zH`@2ui<+*UpZcs!{3>C9`}$PrZMe
zbZ~jch^R1Jvd5YRx|pUEyWnbS-(qiguyO=<giVh(mAW=di!+g3ZD~Io#sh+~<AjUJ
ztZra;Hw`*G;sEoJ^-R+sup+Ld+lO@VaYB+l^wy5JMa0)9W$kT2Wwg;h$le~PP&hnO
zhFwOxvt8=u<OZJl8?>&kXR03f4174HLH-fm)yLpD3)C?W`!p!OGqw4X#}D+gz)^f@
z^+;?zFb6)_p0a}U<(f)#Ij)L7{}XN-wqd?E*-K>1qlI_R%5ZLU11_tGyg!|%y<hzc
zB)b$_$-2x`F^#=^4)5o6o1ArzB@c{*#2pM+OuzoJG-b!4kS2vk{}r@Hx6Te0zV33D
zLe4^c%0YM3qVoai+>=Ok$2{v*N{a;-Po+JmU%cv;rvT9hZ|htPSw@+%JML5`S>KIk
zCe-4W$Hus$!2!35>g<%1dGU!O2Dnr?>`TE|3zK6l<iWwQdlXqH!jPN_lBs^JwSaNr
za*q7E@7poL1$Su=&67*u(_Sfp`-6dg9b;**n58%4%h4~I-I_5QKdtqEjd#IS^ju_5
zk_NH~{Y*tyCY)dT>*TxBk0m?0xB=-bjfzXi2!q3R|KoyKtp(5Q^nZ~SLz!N9`ykI8
zZvv|p{J^4)#bB1@LY#L|ZwbCYcks(LwIG>mF6M65v#Q-A5NU5+BMy8XaQ<NQpZB(y
zp*FNEuC$})STw8d#U|J=rkKoHEq0ffy1Y-l{jk-QpvhpgMdOxPFcS6>?Lz)@3LJRm
zwd_mR=1hp+hCs6X=YA={%lVj-b2|9s(?!7OAzP_Cktm^^WY*zO`RSnk-F935HXOfw
z%`tkX5NV-pN9tna1R4NUA^y40ZkyhsYn(vZO;mI8OJx#W9utYCil=|>r0Zc$QjNd<
zN&Xy=fPbV16NhC$N&PIMv0*W5;N@ER2^V|nF{gN|yUMK*qW5VtcTMc0aVwyoVQD-Y
zXKPo)o3s@A8N{EN=<R3=g`r`_7rSVmLsHd2^Hco~wQ@e<qV)b+d^N_y1b%&fLNTSS
zMXOouik+A}jbk5Rmd-u5v)Fi^G*D~(soVmQvLQyG>KZQ$7jE?kN!X#F!D2~M(}KHI
z8>jgA3=oN2z*o2@cD+-VIE6qcJ6!BnD0??=M(jX9pHTee7D6oktEWU@DJW*U<k)Fg
zP^<3w3bUg$GQ-9m5Vw(I)a;Bo*wAH)A*XXdvs;E+TlY~FgrfO97}VZCXl8E-)>yIx
zZ%_%w)u7`R3ucTJJ8Fl{GMdx17&!t=1;8!@cI8)aXT$=C<_lK`AaDh-p%4~7SawEM
zyeihFx_DZ0PxXFZ+c2`YN@l@%GmeHE`Wzs~dFZ0@j5B&t=Yk%VvceqfB>4#do~5^r
zS?Vv7+9qinlTCo1SB<xB1sehC0k^$M6dn+x9jWzjyIX7DuB%kuAiD$2zlz}+i2U}F
z>1|S+C~4u9odxECWhrc9<5{n4Jl3SX0D*B=9a(Aa@j7|t#9I1~UOpJp<7>ulO6BIf
z6uypbC)`@H5-h)VCU>3rxxndT(EVI`cE8Th)k_*j<pm6WOUNU&^j}NWn(h>`Y`3vf
zd}mYB<eiHMU4c!l)wOO-&LrztbORWb(*w!1&hJ0RP7_L!Ie)8*=hawb<;b;W(RWMU
zT^st$J`lCPqvM`FR&iRI(3w|&=&ysi^p`TBi{^<_-|>Xpu4z`J%s*M|?C+|NxwdT2
zpM70ce*1uO@Xasz<UZc_j<q%=ZFqUi(#p`Mn4punu#huE&(*k&ymvIcDb8lXuG57?
zXI4?|{U!a8%WN&yCvyP0!x5O(yhI2m(nVkU|KO^>A-_d{aAK}lrqrj$_}(*oJ<=TU
z1#;X(vFVF3-CVjiMaX-~74MZKl8MVW>e>*GIQ=}qlY(2`RRtr4ET<dqbMI4>=d^nq
zHe(R(tfUJpywK9Q-l19}<vC2DQE5&RGzxB@9srqWy!vrpAIuB?5$>am7e34Db<XmD
zFr<>pPHMS1axf8Q0Ed8dYW=%nE~t<Mxf<Odjjwm6sG@Y90WbE7R_tD+&<MBN+ca8U
zr!mF)GTbiiRzatW<hgUCIn@r(Hm;C)0`*8&pk3#xk_f*~&ENuT(8TL@fuF8kD-0Eq
zv56{8HIKY`MW@7M=E+kjFpV@vtu5|Ch?l3?fdpqwBrm$dw$*BlXdc)7#gie#TbF*_
z^H+y}vYe9*bWGVUV%I}ai-nT*)(otV+c^Qd#~~c+vI|MMqa=*;%N?_?Mp5t-`#e{!
z@WesG4D9~5a>Yhco{9$NKX3f-_>J5zMh?q`-vI>Jscuq(rx90j!=?~4gwHNWtdnTx
zDlKADp?I7(57TJ>04Yb7cXefz%QkD;(Bw;Zj`2?4qq(OVi(&#KCNh}jH5uC0&)q10
zL3tA*?MA$W%>F@`bELnXib!uwQO0jY$|3iyqKU`xxD%kF=eKRX2T6z{2^K7UJ6XML
z)nt4zyWnz=moLXB(MCJto_j%h7<D?j)5}dXDQS97Q1JU!SNwdb;cR%CEJl+m<)JJ0
zB|H;q(n|4se;Sf*qEuXuA;OaW&FY>ED124+Ob@0^j=}WTEd}myPp^5S2kQm=YxHy(
zTOMCTve#=?y?GKv+a9}xPTO2fv!<w(74zDX%l*ABQ1<?@dhfB|mJOHReG~{g2AP!Z
zh4Jb@Mv}wO42_-$?NSCaPTqbHxQCj!U_ClZdc2+g0A3z%RP*rPr)9mJ%0*H#1KqZR
z_=0t}@;?DlX#0|}b{_i3xSi?S6}eG?2##(6xA-9NpQwh8qN@qR5KH#UX<t^}e>&4>
zwUTsc^FGR8O^1?|lUR2F3+T+$YC)FcvhPk)nlx=5%O=?BJqwOF9>6V-wKV@7S}*SG
z$7ds&j#y3XR}TG+kK(%a{hqTOmK<1hi%%Kr%%i?-3&}NVY!!M)c404vPr(>dwU*i^
zOE+Q{6nl+#aUkBW^B3frz=g_uC80Yjs16=_(k~P{c%QZ<xwjoQr~sdGu%ogZuP{Zz
z%}lfd#J2OpNB<#^hThivRb#@tNZ9~cnOk+D>k)5mu{}um5WYe?n39#sk~g+$t+B`#
zUj-39-TlD`R60nFO_WU#hF^>ple%&5Z+$qMM3e*_!oSTYzq#rI>3RlY<NV!hdev-v
z;)lVb?}}Rh7>N0qPXLmUu};uCus<HeorM8tY^$$+j3YzOM|4;FlXUY{1qM24!8C-p
zsNq~ZFQz|APoBSqJ?}VrftdLPvWsvch1o#7n|p+kWtj4X)H>p|xn&&5GFx@e5IeK&
zn=i%P`K<;H4g4XE)jR0uq*bWw=ljfi-g8H)FCv-;t?A|0SFP@cIr;fg4!~VZZPJcm
zfxSE9(cRt_$R1(n$l6CCr#Cn{>Vr>vSe#*Eun@L@un!*kOzpG~m6LRIM_ukpp#Ed^
zHAyElpDN=F$d5_ei=F_oL+R$-v8SDq`U-JIPF;I7xb^VnB$A|sP(rgLPxUf?;@q;d
zlwF1aMRX50WpL@ZoC)<#x|6I<NmG8$8v8Eg%n;4QmEv-LqB*Lac*jc<L2YhqT#(~)
zs_7Z2Pm2Qw`0IS!;XQ*9r5n-Zt$HohL41+i1yA<Zc3<;rIV&YIak$?w-|4#(e9MCP
zR%enP>X@-YgDlC!R7)O_7oUE+X(xGU#_qL1W3Aoum)&pdB<(ld@tU$Lbb}y!8ZH~y
zDWcJY>n`47EBb{jHqKb+#f>}%9~f(9f4q+O2ed=cqmPk!1`L&HO3T6k7no!5h_=-m
z3#gdW>}$N1law)of3Hwt`h>CT_>y85hZX(;^RVy06r3r$12-baexX%9_Q$_=|39Q%
ziC+`v*2dCGtqN_mbpxW+TW;&86qf=*m|APC8>y(Z7lo+UtKxzf0SS=NQsrtXXl=y>
zGj0&Eh3Hq6O&BeeU{Qhwj1@3okPspSNCL?)GyR_N`xEZ(SNqc}lXp4qdC&5k=V&U4
zaHqEI*quP4t9@vZiAx@F6J^sd-#UqzXT%#C($J%^l;zu!Je@4^ZMl22VHd=1_uo+9
zUa1eRkJIXajDTiRH|+kWY#h-!hX#B<(akqF*y37+AC@MuuSCrsN%gz2yFF-0t;!Fm
zgszzzlI(~<l}<A@XZ`IqSYyAl^ir6hZ?C^u+-APpm3C#AM!lV}EqOMOBeZmn1<;6+
z)>e{)q%H#niN0APuI?GMYJ$N9=;f=L;O7xsAoJX`FGvHNDpBigBGx@fzyWusP%fdC
zPB~ZZRXbH2(#Oa>x!7+)wsDHI?xx*9$tUyFJ{);Us_iopOEL(=5n3Id+Y)$MYO{^m
zTa8;Av-?%C<BROAkabemH&m760<8|eC%1UqY|wO$Oc}T&D{=jL@Ll!;X@O_jt1U<M
zSSkd&g5SDNIz<Rf9ry*4BQ=a&G*<|gt0m4EGnj-4T_Hv@FW+67+059B?U3P-Nm?H`
z4|{@}mbwh~f84DsvvRTBD&-UVn;-eW{g>F9#@}B6Gz&^u58RLIfA}Q%KWkkI*mA*_
zcEc{}w+-Fxuti$U{Y~wB;+50c+xbvVQHfyI<NuEY-|cwWE3L8qBu}3N3NYAo_|Q_^
za$ctw_48C*0Gjw2bB)=6spT#D7<azox5qg%z?xH@%vFtedA_Ntxq-H!GPFg25w&cn
zomBGF0f}HLN4<8RlRjrshlT-rLNaB{z{SVG$tWIudWu{N{!~(n@`f3}Ga7ndyI<@8
z@hyA5h1Mci!h+BX<y3fCut6`u;I?vW@ri&Dr_ehCN>Nu5{recfjIX&=5)8sc#1!Y3
z3Z*jsu>$C<kno>zlbbsx={bJHHK#}t*n$V?P<|}zLu>~0q&GGX#*K6MHa~wY`+W(%
zEhe?(pXcauT%2v+Vy;4<3zDETpra8QdMn6%YHk}U^Y{geiGyUcW@^RD9?jwdP%Gn?
zp<)Tib9s!R;8|XUL&x4Bot_*|_Re)n_SL9GIXk_KPT9(MS(2R0AuZAB6<try3~k!%
zQk=PE41H?`;!w3r{bCFcebhQ81UZP4go<3op;3mkm&rcO>RW6M*6ry2Tb+tC9^S?q
zas=gKlhKF5p_7O!<(_}LJ;a8?#XGwRmr}9MZ`z`H1A-9j?|)dQEmoX)1!%1yq;20k
zsadHjmZ}ve#a-XbEH<ano|RGZt@+P|ivl2ZQ^U|8D|5<pO@1>C`r4lV#bZap{^Whi
z6CW@8F+|P>X~pr*>_1QmZKv}ThP?FC51*n;y?^6Qz>pk{&J>46To8@xF<Yx<-8!Hc
zxWt}!y%U%e&q^gNsd>nyc0Y$t3g6d;X2ne6n@U$JRGNh`_1!Mm{o8e>rOB>eE+PYD
zdswoNo?q%qtFAb-<d^d&SPX&w5?%Ny`gcR`+PLK~6np1we;>V<ZNyo|VQMPc!H3Cr
zIFpl;->|BmG06kP?6A^MBid={dbRO2em8;&=oT){&;c(I!ccVT=x?%PJk~wbEy#L*
zdM6ga87Kau9f{~7YrX4zI!Ds}=Gp(s*dO-E-B<Qa(-u2L>w%n-Wj($#F%>dON=^))
z$4N>pceV9{bsiNV5PbjNxw6P1x6;sfWiBr|WNo6llB`gg2ZzmeCW%7^>*9NYx;#LF
zCGBUw^WGg|tA5>7ps`z?oI?4eGgB%JSK0XmstIiJXdIjkFjPVM622D`jcy@-r)m-L
zhykmlnTxF|ZhuL1G!_B*8~x+@(QBceo1I0U8ODRL_=Sgk!r%nsjSw>H1Dq4!AG{jv
za1){ze@_WmI>tuv6~s-FbU4YV1E2z8j74IcD9Hx=*$i4lLTkqUTUSwb81Pokonb5D
zEQ2FmI3=(!lp(9h<CNa99`vbPWE&sPWZRnhev#_`d@9v{0%!z;$7C;@TI~9d2Z>Ye
zzHG}1CqgFX=537LYH`}fL6&)$YiPBqnS5kC5PJe5rjUERvsDOfHSEfd6x@^^AK~;5
z<{uXRac>s}Wt#hIbQNypMPEHg>UyQI+2h{@P<FI>78HS*wr8Ykie0?a^ype9zR@>>
zyoJ-lDW;`UYSL!mQxMaC5JsC+E=7z6;tD&T$e)c_OZ6x7tQ>0C*~G+n9)1iATL0(Q
zzNsf*d0pux8Fna95bv)JVf<uo`(ZMtV#^u&J>4{qVwFowsEWkfw$%1vV6_s4T|CUR
z-+(qyAkb+P!q*OGq~7kWnqZ=rkrWgO$^oXchkoj7cAyqtTP%Mx>+?e|_ei(#OF6TP
zoJ>f<=e>2facRtFaG}iE6D)Obw0$q=b+3X?73K$7l|wq?w9KY`fbuhMIgS036HVXD
z1h<td?T!lTEH!OhZ<r5%!;m$syN11<iHVxAbx}WzL8N2xkMU?nUZ*(eP1Wj9XF#_K
z)Y$awRf7ItSdBYF`rGsbwG#c8;kd75(4l(TVMDuvSSKf``M++4Dt<UOQ$X~Bis&bk
zi(KJKw?r095~=}?<Hb)uSrlh$YJ%{A;t9$F_X>EM_+kHyvvq5HW-|<9``@4Mk3|}(
z=I5^=Uw%PI$n~N58aAzC+k_~r85{hevWga&u5ux#p3Du!$QmAm6#xcCN)_#gA6qGn
zUJt;>C>f06-{xX|l87%KTfSX{5o8zGeFW?~o^lk3EI2W-UwG-z+ga15Q@RR;knhm_
zF?=PN5&qp}Lq@cmJlZT*BwYJ9rGB<`0<5D`4*u60|M<!*RCnt&D%(Kes;6c<4fmsJ
z(g(su<<sq7c)1wHsLz%}pV_ne<I?jf_%)Zp>nr%T3c^&3es0nv2|(vZ1>@hjdo`(3
z(b0l~TnA)*v4j8o!I``1UQ(VW{v$FnvH6%_SIhEM>LzALbFi@S^GJn&SymnWr~JVx
zv>v$oV+OX6SKA&Htok?t?zOr+;>%~(Ruiy2+J+_;_@m^Z^4XU>P94OKx!fp)<#n?>
zHt#R&x>R3tL>zeur2-8PmJfQ1^uVvho<}e7uIj^^_G{EoTMZbQ=_|M&>K1N~K<!x!
z3&N{Y9BgGlA!m&I@Ozwy{ml;~Og9YIW_bxGS5%&nE5k~vKZJ#g-fc%e+C{v@49PlY
zKP^~|@liF`G#)Soe%*Z5&mdaS9KWVJ6_Z@~nb0lHg-1A0osZI{p{$_$bHBXqCv<03
z-)W=oLRuVTMr__nWZ*}xM3X)dO)nEw6^EJ}J;aAXJ_CMUnsHDmAmxA2^$pzdHjk^j
z^L7G+gh6D^_=LJX<BKm%j}^p;)+|#~aa*(wgP-NX!W4RBnAsuRGAM<8W9-mX8}e}|
zj8%DWidU*wH<Kum-g5KLi1m{UYLCu<Zl}zdkoOW|KXf<(N_^ixL6`t;YU5F@g07uY
zDoh0#ku4X4f?gn;sYVb-`SX%(8%uez!*^#$|01=x%+_SLF1q&G%6rn;MJe7%gIc@M
zer|d86EgbjBs6c<n3X}kuJK{{)VztnB4|r`HDMVZFcO0NLb*lc{D`h(Y~U1IvY}xo
z-+t7fZ#WWc;o}bnTZK4@4BmBlDw7@-tPQ`(Cz~~j=KkRy*l?sEE*V~15o%AXO0si=
z=R9omgaOAZIYFf`A@omY_9sspwZ~*AXlJs&B;E+-TRS%90D{#pV5#xp=}2+@zV^?h
zDn$sB<Rj-N-0BKgA((QHE(YV&{|7$8euHve0<SppMSJCXQ=HlnpX6;f(F&D#7&5Z*
zaAdTA9hy5`@ydiCO&b^;sQFF(&t>a^+3Inc@Cux=6WTCbivb7jb8-?*(C~17=j2I#
z-U%$Hm1%U@)yE1t-iY329c`ptT77YwbCr$b=}RuX-7#?;y81rA;y33Ikn<a3lHx6T
z8j@~tTr|PJ17^OaqXA~5mKBp@s?*|E2yMPj$QVJJji4>?YYFvPtvt1bZ%g?EP>{6W
zm_%*ZUwK+iLFzlFcY~?Y!A0ej50RAACg7w6&B(uAT0s`xq>GG6ifBru;D9cB)Dee)
zpY$a4q;sDCu^Y!n;iG_{cT<-xA>v(_dZ?qad|MGs!nStbFjC>mrOjI}?_)-7%mX6N
zA|Ox7SpxcZtvv==0*TGw`f>J3gcbEY|ELAAb9Il2c0$IKFuK1#eLod9ILZgiE_=UJ
zzr#JLk`Qhtw)~-tcBpeuIy5;i&Phy9r5x?2%f0&i&}w$>v7dp$36O!UneGK)Es#Xd
z(OChb*0<i>4YS){tKBf0ve_@<Vv!$)KabBXn2N&^323^7X;}V4ixp?hb!Yiqv|XtD
z+pT_UoGx!E)Ov>`koD5&dsugv<-7odkH%dN<w5&|43C|J&|A%?u`@lRQq_VhP__7c
zd!SR0y*a1WAa!(pEpQ<3Tk$>G;_y4odpw;9^S$e}1>dN+<o#ilCt1t;FbW9so{40l
zLFMS2iEyCArCGNsa1c-Vw3KcoqZHr*0^J`0cp9Y=@b>DiXEYng&INv{`WP>2%f_+Q
z!(Cvzo&Npr=*gw>xWUdqBAZ5x8Qb^F`#We8GJ1Y)uA;IMHz!f|GD#pkqPFRyX?@2&
z@Az)L5GXP=WHow5#lhF^ZXfriU_(jQVP9@KS{rPnB+mcN+U2(i^olAQ4o=hgzy_FD
znda)jLH;Hmr|oS{Z31b9ZM5MT44Urh52aCqI)0M%vA>|6ANIV;@105;5d)L{slxIV
z9#k40SrJ%TF#>zfTp=ZSn<4Ei`O7b~Q$*F0{XNY}Pq_?J>mpSvBA((e25#LtLk>Ha
zkvm+6%F~tUBJHaQ0|Ttb>I6$3?RDSbxN+R$AArCnAfnSb0$2RK7?m5hh#pb<d~+f<
zqtHPfsI(lyUT|~mV~g9EO#T!6_RyYRFS3ku$IU_~Srs6)0$$75CzVea01a$fvbEm*
z_ODHq1~Kkmi=yowKqj<fuxDSfJ{0hHv)RJUTaGr=2k!svHhgF+{)dH3pXC{BIl6DJ
z>6rdpdyH;E=)`boW2Lo%JpK#}q(}w3f9<&KHy+J+*z!G>=s&sZJ(OAPdOS1rwDg`|
z|3CkWu4e*k=^Ji2v?<#LI*JPu28sMvVwCfZltMhu{jnTsb039xazgQuk?EO9gFd8G
zTJ>Xq1erm~(%^o>OQjy)t@FqtG}qBFwiv(_IW(ACr(^<5$so=4#JasI`Z$dY?k-PK
z6unq8zmp_n-4e!N<%=H^zmSn0>VDr`N2j>L_6VH24Ek9-GN3Ka27`JhQRP|*HbI!h
z2XC@U3pDpme?0<q*sY(u`i4MmwF|N!QTbA)UiTgxM2@YP2(40R?VQhkwAb|L1biVn
zC&$r@B-OvVt^8j5*q2(%+u!`Kg=|$2D3OIu7AKqPbx{NgOhC9Jsmeday9My!a>Z0O
z>qDqV^afreba<fyAgGS+RmJ>uFX58g=R-(%LB;w3Y9b_^Y+cjv@ipV{65ROYYoHUk
z%$M(5Ii2b9cUjm=CI0=8hLQ{HAb%Y@FV&k$@Hc7phTpGA;-Ix(MEH)5{O0|zOV?d^
z{8z4#r!H#9s2v!=*|tbkbIdQRZY6w)^PgtSz)wKIY@Jo#OU^_G%WjL|9dNp%)XMp8
z+1u_-W}ejaS|U}ubv^*731_lZzFKva6w^5N_L5eBSM*2GK-p1vo~_!@R+a_=2c;>f
zTO0bQz<|?MbYa<%fC1q*`hSVwZ_Jpr5VD7V@@0)n?K6m*dqah1Qivv*BlEYW@ZTMV
zqOKv8B=ZFEV3**hZCoG!BH1ByBhlL}K)JkBoDTxJQu?%^i9$v>7-3&I(jq5?x&fHO
zd&ACDr)7^fDhbtibM;k9CIEQAZId)@w4=K-jhM9vx$EDHBi3MmmC*<Mp!Vt7hM#<g
zqfXk~uq$Z%ZDZb+JgkAfecOb$r;Bvy7UirUjrS{QWy+xs%+K*o<NcMes4SHiZnFV*
zCkXSoIZ8-s;H{!V-Md$BU<S0$wc(mRYtz?SRB-Bg<_M6RHV1oXfmbbPhe-#@NA%x-
zpGTm^xzGU54+-=_2dlV#{^uXYOdHLOfP9)fvNc;8X21(OIqQlRm5kg@IwQ<+`4o-@
zHbdS2aRh4X$;fR5lXq6K%F2qx-JQhoZL0<QyaSclfTtEr-Yy?7hVeJaAGS@T^bTg+
zgk%AaL>I2wk0=fStYCqaifvqu*hdHYnFTsr{CBs@HZgLq{@LctuZ}7Q<ao=F3~QfL
zgt)v$4NrC$b*xeC3aP%J>*dS1jzbpVY#sWiA|yA<6=c?$otuNE=Kq<pO^s5OgoV|K
z*cSj(Mx}8!uxFggo3mpAu0K?4i)vZpeoI#{xB)LyNoL6E$@4!VqR9R2b{MR%YEjW_
zWxP3i8UNn(m2xzr1q9q*THd#_{ajx&JZz@fv`^;z>QA-W5wk^$eX05}!`vh?^=Udn
z+7CZ~mjL%9R_Hh!t=P0563Y?l{_C)PPyR328@B1Nfr8JdsBDbg2IED3>H`71<$Z(@
zoLs1iukv4lu;ddz;4q%|ps)q=-vQ7*%tOzu*mbFiA)<DMilxNTQ-bgEuyk^q7N4Q=
zA}^IQskIScB<TnW@PVxqhqooM7*g-f$YUkF?Eoz}8HL+w8Pb998N>x(o#rV?<tMDe
z8$Xiq+{LBMSU#};XC+E7VF0zUnfmLz;_3jC?|NP!9C{=Lj<Gf;nTzH)2zu{soc}u#
z61N<aH|x#1LSG%`EhQE#B*Y$v0t_l~1x-n{PYRdQmfjgK_fny1GOR|mGdKP*GfLLo
z^sVdWpQ}R!wRR~vqxY6ZAH)W9H&sNOS_r-*b{N0;xqgB%y)$0#a`<c=l8C=wJ<qQn
zr{F}JUpNk}&L>+TnNYpemeU=|TWRJ>IalVcZ_+8l==R(f3N-rRqhL4;!`ii!YHoaD
z5(hLZXP+ucNtjpwOPj8VLdDdN@Zu2NDXk7@`mq9L?&Ir$LdGN#tB~OV{!26Nxb`ec
zf1pknXGFuzA$is);AqqK`soNgmfhR%2)9f<%+q?AKG@{pZoxD<6Fjsafpm1dBGG33
z6`I~8cC{PnhpODzv)#O@>*M`3cM0n3pV>=_5*mugn-Ncqw5ZlwrXkN+|1^328^w6S
zaz6`9@{x!S#bli{)u)A|FMR?9;dmTeJ_yh={iQ#=mTU=Me9k-Njo6I|?^38~j_Z-=
zUR6ky;mP9Qnqcg!+EUx@4~6Z)PilYdw`_ejfTy?LQ&CKb%upW~e|M^Y8?byEf7?U#
z&Jy5wPzE(|oo9OtwKKqFEDm)yl*#OZx$Jz;BqaWTJlZup9CSxq>ZVLP7d+;k@Dum2
zvoG~vREw;^nC?<~qz>5~D%iaYx9EO+p2mgv<QRU@_BYlIHr-oiz}ZZD7H4hpk;^if
zr0&~B<pmhlf0Q;A7P?@gcAYNu2|MYheokG|ni^5?2&LXuCm427cUtN~1~`e)p$%_1
zBOxrv$dndB=yn~*-if$;4E4O*@-*jK=`0E+c7{XOJE6QYsD|Gg<{Y%zU+uv1@nmBD
z&XgvJjlXG!{pQh5)PRpZ&o8Xywh(#}ee{&{J;@OowGl+G3~k^P`?YZoq~SEFQq4b2
zi?l4ih>8q8jrbn-bxv3<N%J0;PO^wSg;kI>V_kNh%5n6+$B~7vwLtfij3#?~L$KUq
z?u}wrWQjZRuvx~<Zca2mR(vf4gVP6hE~O}3(TR@b8oG_2$_^C7^`Z_RKE(H@d!+tV
zd1Y&@>%$2o1G2D+t4b9<gqKD7We2h@4O=%@bY0{bR13Fo$vgC)2H)h{%4w~_U_zf`
zm_B>BZ;*CYDi<seAWP(#r9X0E-FIMn>X?#lgV5Q$L-es4{r?8XBmjLgQI5!wC*le_
zyVgA=PmY^(3b3u>HrJRm>~jBTd;uiN_qAH7g(+PO_kix0L~Efh-pl7>I{0gj6#n#Z
zt2`L}0HdrhzN>y{SzHUQX7Xexw!Eo+xxpCm+`>b-HzGvO)FVWXQ7xAQCUFYsu6-1;
z54CX`EBhGQ&Vzq_a|5N<>#`i+gB>Jn{I6j<=AreqYlo%(6$363qSmHSuRQ%@an#&?
zAtG?l$6nDLSN_~kTe}`cx!t0y2+;RpF^e6X|2_ZfP>GDKZ0Pu1WhF;zOWKb?W)JEW
zPg2#+A7H>(AGUmKTLxr{JjDo$?&=v#SpzU3qR%c4w3Ri(5WK6DL--y9{sp^Qo3cl5
zO*y3eT#N_nvJBZbi!1nTq(9Acj^?Rs%F-N;3VF(gku6lTB)Sf8II~6jwXOj^29Ej4
z1SEW;)R<^Tl?1+k*xdq6qaT=-xylf2ID>CRjh8YuHeF1HrtLL0HO)EQt%q#6>^@db
zK|i{%n4lE$Jp;r#Zd>q@C;X(D#bw2{J?~(Lis*-vsM;o-AwOQHR#Z&)^Y_=1v|77u
z?XHR&2;bu)0kgHfRL0I==zaH0&lAcx%klxcwfOj>k}~uv5>8IZ=29&@D&lx-oDN+e
zT=Fe`T`)iD<3nY-;+>DXbyuq6*)9<qq~=I0RpG16WLQS1@`BFSkl}HCK~4*1){w-8
zq~63jimQK2i*L5GL!Prj-u4{+;Uw%97Gv-oTnKom<I^?NPAog^k@b1nqL?qA^N{|p
z@TQt(to1P;-L<>Zep$rK*|`nHPHCJ4hW)qbdhr^js`_&-TSrd&Z~C6SbU<cGUfPIl
zpA46nv%#c6E^#Aw?lsp8`sQ-OgISk&UNVX|^}3>peJhk)NPD8i$;p|+AxZsY2O>9r
zysBLm!x{~0ald@vGHTK<9WeQX9Mgk&Asy!<l4wolYWKL!<5Ci<gDhJ0`Vn(TX*L@e
zweQPC;|F{Qj^wr{Toy`X_VDE%tnVo)=w;oYQVgcP7s2^!EVi*G*PvF_<`7^&t_%lc
z#naDabjf3o$iBP}i%CE4@CnIksqk=hJ5>E%knR9On-;Cr<LxT4swQtoXeCeS9Ilb*
zKg4EkW(O}r88X?h1(6rT6$mqyFrubZ5vG*xqYFj%ndI0BcpZ|ce9W&tF97@XWLH}g
z4-QO3>JF^N{*<x@{S^T0+wGSnWpJy#U<=PjkU#R=_xwxD&igp1u!#n*{$4msNURp6
z3-mou*!#Ea0uuSbER=$0<p<3F1!0CVa#@UJp+687pEkbleqhT9J$^@Bes8ZIJ7^U!
z{Zkj>i@oF&+>I0|WIg5r#mo_1{6aq-leyG)7;NqJ7x5)2LbYexIQTr=HaxNX8!7VU
zgyniqkgtp(mEXY==BC3C9-`Ycc&5H}G3<>&vrE3G`~21{;WFbAyuBngX2{;&ulRZE
z&+mTWC5fiA4R)WQN5aBko{h7<B(=f{4Gj%-=Iz$`jz=JzuaG$`kH0#+eC)~huA(PK
zrn``Sh<r5Lb^QOQ{ZFw+aHt}56hg@^&uyzPR!i@kWqZRe+Uq=`&s<4M1K$pUGQFg~
zbEEDbqn-SsdSihWywGQU!e^af2ULGOKDxHom#WRG%2K_PYM>lofxGwD7kj5><tj=X
zw}R@DwF~s(ZC}Gl2dN{GzvT?db(@OP=HDXncg+`jq4}6~C-gBlEo#VXRLY(g0R~?-
zfyj$R5vbY$>^bx$DGlgqHuhS1P$xJF$FlchX5=_b2x5(97&1GIQf^y4dzHO@@Aeqq
z=0TJ0iZ8lP=~nxP{DgaG`;ti>S!qt=)bZv9+kP+uO<x$Y6V8oPT5}{2mvlDW>fvHu
z0I-ju#2eE_^U0dxv&R0gieDBIVK4i_J%oR{q_C4jIK3_MrKQ$7v0yE7++@^<1=)%;
zi7%yk&VBrY#0fh#_%f(645gFTr;yYw(xJ)Qu2P-cYG82e)@FOy_;qQ-5>RUL6FUws
zPlhlanyiou;I3g1E{p6d6_@su?j1dqAT0Gi1-en|@ZQnf%>*^~d;yo%63YMkL5^9?
z4(qBqYBx7<L1A<)>T@g6?15?_Yi-j;$=i*3gMGlNEdl!uc$N4Y2z$Jpp)pe$T^8Z%
zv=@%G!cPEE4j{>x?;3tDhb9mqSP1WkoHIW_1d7n7t<1|y$54W6E{Q~x97TV!g~VK(
zD1<oQp03yoT`Z>SK5RgY+CC>DYH$c&qk0$h*tO_%81Dodxh+yK-K8gEqseoVWiRVi
zpc)EbmqNZHPvFp)So>u>yJ(9F<1sZHAu6#F%H>;7w`SnJzAnD*J8jUylb(>jKh-Fi
z>)DRg!C^4&MhY-PXU4VMHCBkbx7Du12rV6<1Rfrm35r#d^5@udNP{|<EQ~my-mZym
z;LgS3g+Wg*E5HUCk?F~)UvMj&T(XoOuK>;kQ_bC@(FJx-nhr{sg`=r_5Qvm3sJ3-H
zzSbUzqfNpD=R6eLyxe#tY9kyT1RTO|P!&6+4bkWXhetZMOF<u4a}5HsCBHn&U}ou>
zE_t7>3*N#k7=}{<sk48(d2c?)R^F69G?9}{#T!!VGD2mR`nL?ZV=}>9c<DMWe_SYs
zR}(NjAFuFJ1z9`gxo_?B7_S{~zYQCZF9R=6p(f7mqX|tK&s+UUG!dV4FMT3NQ!g5-
z0yzT5C$%amsFPf``*o8_loOYzY6ch@Ppk<X#q?=z%t|ZUB?nM$ekyl3!ds*}W;vFP
zh;ybqM(i<LYvR92`7Gp~$GNV(cf011*`Zk~_57tw6JwwLBo1YAAtUH)MegR_POqXM
zV#Vq@ti8$gcGsw<l6-kzmdAW0;T<6x2l6m~<+m9Qw1;fj*F#31&)U@iy*JqwGyoy_
zHDQ9o>Uc(dB*U;9zcb{1o04@Vxh@3^aT9{(hQ8E!a*x0b<z<_4(eOK1q*6(B7fiHZ
zs&^<pJ?PC1Uj&NgP$sLQZ@KnftQ32V0Ig)5;-+V*&);qu@swJq9BJ>M=$dQoZ+v;C
zK_@D}rDD3|Sod^OsX-!mZlw#ncBhF+CE=MS{;*WgeoWHi<2)IVlyyNDbgPp%YSFeP
zzcUjO&@Z~ySs697WfJ=5pwUQ3!i$tdpLwtEju`;f-NM8Krr-n<YW)Oe#r+MyoPbYo
zbPF*vtvtcx(`P;vEwuGaH>o<7k|e}?TggK{*TiO<deXEq3W|rl)&s-a$fe!Fkq_fa
zAp@aI(#1UR>^(D~E!fZMdUsNJVGCpH?vX@#3&`xYiV!9v5SZ_!eQy?rn;cAoY%45x
z1*&o{=xLR?-`e^93zJ{3Pl@rI!&Gp`53uhr(9{ef*EqSw>Cgt-rzK1t^cc@xU3yxO
zxuwUSBD|R0@jiyShOW2!kkR&12=hUl?qAmS?_7#XRn?B|fxC=NICWI`>^n<;h8d~m
z(%NkZ3WXW;^GB`{FiaM~X6t%CHo08z5F7ma$0R`)5T=JmN-32<-qG`Z*Cc!|aU4z%
z`f?rYQf|X1Ya4>g3G|P~M<q)#{A~zUm@_^GWseX2%b`;lGoO;ZX&!r~%=P@Vtn>Y@
znKRe7;BJTA4@Mx6zTPUwuUMU69{hPmMxX<%pBOnVHcC>s0EgG#vY`O+M}0lkm$G5}
zo*#OjaKQkrdz4m|_H1)D!vE_Wb8>~vydq^@pm=`oNsJ^T?vIAR2aqIO1N$$jD-elP
zcYLP}R~Zb&=U}kLm`CGHy}8+ca1UP@MGRX&;yPB!<Fj1W2+Y7@UC_~QE;c<#mPS>$
z6Y8C$8!5FtM0!F!xr6noj5E<v$^6;%SYv^oLmVL3wT$hZo)?DaJ5n5$gu!c*L;ENd
zDV6lcFTRct4=!*=iA*8BQEvZBA$OF#%U<Q>NrQIB+(4EnDsv6!&qm|Qe#G)ZnP#ab
z?z#3HBhr~8+V#*L6&|FeceDXK*-gc&Xu+GYaY-Ww^!mG&M!CH?P@%jK8p9;njfa(S
z6)nkpTu0b9D$;Mz!OrL$I#3qlf#L~*EJRO2TTGdSi$px)(VJH_YCn2oh{J<5hBhol
zX$HUEK<y}lXH{*YY?+DnsV>n&tQM*w3uc(ji0p3MX@)m0S9miC1*FN$Y<qkf9?1UZ
zWl;v!t(oAWTWz;-oo=Yr_9t<R?hWyQ0;k8TpSGk7Z5H3|`C`E6!^L`|Qm+R7yNfO}
z{HMi~_0+({R0pxYy)3)f!Ohs|-8A4@%Wz+?zkBTzml!9LMCaZD=nxc;7SU>d!uDoO
zGAHk&G&kbygZIBEJ?P4~!o>5T8;=PWN=^8p+PUmQ^8NqXo<|$xSJU;BO|wFm>9FSJ
z_Dd`b%EsJQWIB9EqN>+}$*t!^_je$Tm%{(k-6QOTMx_6Cu~nZh5yv9K?~5MsUSFmi
zG8QXNYRv)<uL`v0`~<hOMeFv-vYK=EOc?Ch0<*i-KiJIf>t<wGugw(#To*;aqIYv!
zd}*bJ+SP4-`U|6HT<^deLR%)Rr&MOnqB2xt$+a0RIHGI)z|}uO>$39W>yZ5WQlxhn
z*26FnJZ;CN*O-ft(x{Zg7cI@?K}9b2fp9D$JsE}QVG}dIPE0Fjn|ay8Ul6!Z*C$~+
zi=pZg$2GYW(s0?MGlG8ok}pGDc&&Y$GOQv6O{|TN3JE7FrX1}f(ROjIqsI?8=GB5l
z@W}A7zl&%$n$uYv31rguNhK1SE1spN!#Xe4Gml@(Co~GBRPAV9Vb7;Nr3=HXgx(=S
zJt>+YY&j_fCvfA|pMoY{tDYH~u_tKaR-BxlsLmOYG2WxMPDtK|65ic#Oaud7=~(=e
z(x3zUX+Nf_oyt;69(-|4FsxCL;HAaVhzV`m<)e#*EF^h^wIf#D2$=KvZ}4%V-`gwv
zDLxa7e+1~iuJPFEmQ+U~s!d5!A6;HJ1#bnlZtgW(l=1<%7Cl1M?bY|F@RMe9*ItLl
zbr+cdx)tS@uR}DoE=%MG<FEkwvkoGB5#nLQN#q|MWAw;8-<{7A{=J~N8Qbl`@%mxR
zKSp!mgx5KfUOnErwtBId)I<%;kuX+<jQ%cNCEa<#Tj73GV}I{j1g{qI08q{P=OwL@
zl^Q(HY|izhA|EU!ag5i_;ATc_0$-$t<co{;S~O>Gy=s{-vs^f}R4<diWQ4g}H^GwY
zUgMkIua!53<sZUZy&q5W2(`Ok?cB9HB~i1BSn_0U$N&T}|9k#*)|UOeE3GeUk-+6t
zcNyEQ-}n>du;@y9C2hInOpYt53rnB)!Pie_*>ot$if{W3+GNn!%co{X0t^BRds*XR
z*h4%$VZP5*FuqI^vS^M+f0BA5_w_HXY!4q>_8(-}yc9coEkaQ0>h~JJ6S)6s7WZ2w
zd>SCN42X+8nS~vQ3OP2s8@YK3Tq$#bGMYZ|120(ngsHdiC!KKI>E-_De<A;IIE+s9
zbFf#!lJEauF*bq?o*aiO(dZb^N>s5AmV>i#>2gwibMFR?xFW@q$35>rr!0IP#ck6(
zcgfwmW`q08Gwqj!h_%y_{)GiX)bN#s8^tBl2K*|6!&=G{k+T6;PG%v$mLK)=I=P*l
z6=biIWof2*n+`Xk<G{&lo8kJTaU)j$X79$PwPtHo&(~->V)IDL*%x+;)uMIJC8aSB
z3zt2ByU+*GYsyyJxsSwq`PEClDe!umRQ?5H<w@Z(!KOq59IyJ#p+`an2B*4q@A|M2
zDo8+=sC4*?%WT_A#!2F9@Iw~Aye%q4{^gX|8+;K#>RAay(9!r|Hsf#|znF2*&f^aB
zve_@M79pU?{<TCX?$BhCVN}j@txuX|;mV%55yeucC<%p(L;tZ_4cM1()#EjUgLH0m
z-9*RZ+Z7sPx4xh~q1B|6tx|PF9^)&~qNHm5kg16l2N<%|?H@MicmG7$H5r3q90=Vx
zjp>wn%gyg2V$vC7aRD>nokdiix-@snf~3$rw=`{;Sx-^e@?nJv%osvZsm6n-NB3h;
zF}Uv=X)2A4L!t}4Dqh{6Es0aFYu)vUx!bHi5>C!)5cW*EtJ~$9E~-7&R6ojeDi08@
zg|d%kSe<=_{MWU9s??POl-|Kjv0)ke5qCTu&z5u_HETjs*1vp1o-Gi1T<5Rv+HM!m
z<B4bwsd_5)RsNcJW++<04%we%H5E(N2i>k4VbM-iE!$k^jU6?UmV0?C$(PyK12wIi
zGTk$eX|Hx0#Cv^zLIo@nV}eaEh79(0cn?#~qvCJ(1kGs>gxs7#VAN~Ik?vQk#jkgY
zU#|<h=q5XrT3b=AGTD4kf1}+w+jTV4UAwIBI}`WbPj~#C?X8=Yq}RH5tu*}F&j?jt
zaaE7Ac1pbWXiK%z_DoeTi(i%30TZ!dXP<$fg1YVA>mBBXji;#{ucA2+GxDZQN%NIY
zpSF~CAEvf)X$Jk-4+6{iYi^IdGdGcrp<K_CHKEzNMu!RMSHAeVjITUz^=43pFq9}R
z?Ouct@8G7$ILte)VP{WBybcqo7B3=>$1kO%_)6ucnC?L&(%Q;Z>ktk138>!%D593s
zHlza2w4ofGgf(s{kj1hi!Ke|IH3=M1_J&WnwAt3?UGdJ87!}$t2wKw7kQ36)ZEHNp
z_BHIm7dB<9!;!EqWl+J!)AMCv&klx_uqmwyKWaDmM)1Kr1Be^BfRU}Zv&3n8+Xt<d
zTvZ63q;fbPr*epCaNC+k0$sJB85iJDZLC0TgHq&*d?7UQTHJl6GtduY&O#rMiDPdb
z+TG1<EtXVW*;&0ixmto3y$1#^%bwgXoP%Pt;*wIjsCeSKB#k(jW%^wF9$7M!%Q%91
zuCqm-`g$b5@RVNH=ksB3j&T1xAdi%?21k)0fuCPq!V=p0p=`M_F6=@D1nU$&@$ICN
zc2jY9h^hEhVRbHb@Hg2*yLokS`$xsldk)1<x#esQ{wCe;DSdRhn^AllH^^`VaSr`y
zmT3a<b6TczW}JXx`Xb6uYq5Kapyp8R3T2yq3I1*GoH0p4c7AG;{bHVgXSrAYa+&`c
z0c6eztwVLsZwli4_yqBA9bMc1J~kPS$f0r_q?M{WcBB+Lbrzq{S=h_#&?1<;3AY0N
zXnmk!?&z+tZOJa&4V`~zoe`xorD0Srng9M4T2Q9r0-y4r)tB3vm_3|i{?%ZDYU`RQ
zA@#XKUOOMZbDAV9FlR^FdAbh2d15ne<!;vyd0;82cNy5j9o!zFd*v|xm7U(3D;2a<
z<qI1Ceqz4&BL{zzb5EiLEK+WSU|f#6&X;)vKJDfbVd_7G=a8+pXo23yeU$nL3^!hu
z`rtyO5h9zkjsDXn(Gob@mXtj`TV>mt$XiKvJf~2U6hF&Dcg5P&<O2+#{?5!epaYmI
zFvs<-J)_!TL=##|br1@K3-yf7@eUNJwjZ56m-T5bg(;hN4YRo7BcAe<o^o_8ceu!^
z9Zmei-*+07RJKd2a(e!Q)^4yVyqFE;XW4n#XpC7!RlRADSZrozXNZgULL#O9)7?SF
zV)(r#wW`Q-M}<g>ny=z^S9v7`mj9r4AvBcYOx=f*Ajv8&HU0GYryOzDY#RL6o-w;%
zje3$f^IZv(8*bdb>tc0SiJ5wXZo}@q4xfy;l^S)pOmA6&={Q`9{r7iVx4{7D1OVTg
zaSVbKIZbBKKUoWXXW^35k3T)N&53){?bAhM6*H(YJv~PgX2k{tMpVbJ-_58~oT-47
zME$%dFixju4|Tvl>8u#%+8&5=_%%ss@)wm{>gYxwcbJQ<Iw@DA32v`;g?s$nfzEhy
zXRwD4f8w3d^n1wyjC@8BruM~FF+Nc&Q9o~BmJ9YKGxXhaK+X*Mj?dN}a|oc$Mt*Ej
z*uUQ=)wJ59*z8Ow*!|8Qcc(UqsOK-H2l^xCvZgcjw)DQH|HOZZ1$z1QF9Ilq^32tG
zV+jCQ>H7`L&_J=Hf0&{&m#Rr1`12wEJ`mRruQlcD7^SkrUF~+XI!N25Q!U#_OJKUQ
zfB2KBn{u<nX`mYpjp-${S|)KAL3G4}WH{^TAL}3BI7V6ZXGdDh&NSkqttv$OLHyQX
z&{HllN>8^rbF*6L!ZnWPe2ke}%Q7RY32$<0lWTxkfu+|Ufz-mm*g$A$9E}XMR8AnR
zLi`ekE`o26o)psBw61r~NUNPqrHh`$Ls@84iY+26xCDj1CO_AJCQj0ue*?O^3rZId
zHpRDnN3AaimFW&)vGz~oE7A!6n}omZD5a`btkQ66?TDQo4iPLdK5g4VbX7p5JmUUB
zL4wxxBALIwO{LZG9`o_a4q`qEc~L4!aIx1(r%0z~{_?_I(YKpGt!LXR!Xh;%H?<#t
z<}sN+uZsSj7qJ?_>9=XF;CQZ9nK~n0-YRlW;UkcUuc(a&V1x5&AtNYURTUoYU!8zm
zd_H~I#XI-sXyR|7=$MQ;7&P(8|I9mg>ru{!MqBvbZUtLkWVrJp!GMgt?r#C}_u`j2
z@bTVIIRuX>hZhm~WY!Ek5<jR|VB<-x^x-wh)ulLp8)Vij`0b5689wJFzS>e=%)WIC
zUxR5>LC;iPKY#qp5axSQcqpXxY%A#{S+-f+JBtwYKEPVxQgb#-9n7&0%np+-Nb_uW
z3PM&toth(o?o&7Zc+k!&(vLYbHk3uYcWAbYR4Q(gk&S}&>To>-*yXOfOi6R3$_YZp
zYH9q|ABSsT^Y@B9^vCqd@PHp;F!0U?=Qr)+W}BN)NNTzJ;0v67=<&qnU7<rMis;I}
zd@nQ=9Yz`M|4)7QC&^k<XD}Nc6m+*WbI&{1Hb2D_fqh3?Dw#g(4@ESa7BuLQ7b|#k
z`g6a6rO}zy95mHC(=nktE1i%mOPCw`6?_%iPPdL!RuEo)?3$O<?XcW#lmM=s=X}XS
z;`(toTV`r7ehYrfu5I5;69Uc8IYjVL)b-gd>Zd*4nOTaG+qcaQBRw~EIfSXG`lw)u
zPr3bDrUIHbnoD_f8TKDt_`^o)AVgm9=fpBTMfT+S53sWM%7yt~OcL&{S~d&FBDj{d
zTKkMIehTOYU56J>8>zxAd5;^H>X0xn-eMjd-jRlNiCHS3yN0#VsB{pL?V!;&KX;AA
z4=bkar+o$ZB(gr1{`km(m%Hbh_yKGt;hOoPkeA>kU9<1W_Gg8Q6~iy5V0~E8dkc4-
zsYv?`Cre!3Sm2_Oh8K8o(r|ZP>1_$_nuqgga;9Xy@c>(JZYv&<2M7PIyB$SK_SX39
z=gwWSy2B)xF(!VH3X&SfG()FbwIohr(JZ)S@7l2nCB{NbKKep2uDn48P9q&XTQGNf
z=OPYYo~p?pY8!?W$^5$bM=%lpxGo;y9&gAxo4LoN+_fv&G{K}A|6nyz-!FsVXjrU$
zZkUQK&op|kmnj`W6)^C(c+*tUZ8{5<Z*ZBhWyZNn&RgTm$1frn=A4>7<PhoI&8Pui
zzRJcfA1ml+-fQ<K9DNIfWR&gEwbdVEo;>Zokf8YqKYCPul+5l$ZTB&YnOY)1mykn>
zEHH6v8C~(Sa=tQyc0Xo?*xw0Df^x;<W;IwbjuYKZtIMeGGr4Dlm0E>Vz~cw2fKhn-
z(-$E}5Fj|#q%760JhhTMho#cbZ)4udq?W;gEMBSiVI~&EePkNlx``?Zs?pq7bfuLq
zx&J{^9QL#E&y_fCPM-q?YtvOm9y9*-)TV}wzX-wiNc#s+D`i<;+GjGYzP>%v{ch*y
z!FN1Wh{=+-K3HXIQ2gx{AtrKcnq^+=d|!J*kjb{%0VT%9?VQAUZ6DAQ;hN&$@!F|*
zLYgVZaS1{ciGALC`nO{mA0j%yncFIBSe+sXu$6Pa_k<awyF-}x{rbP%{+-wTYQ9h~
zz+aoz@_VN7$63K_knxJcT%DXR9KXg|xW@~d!-Lzi{&q9gAt#{<8tcjtyoeb9zUl9c
zOcbft!CLN-r^uE*Nu}r8@Y7_}cZTK|JO4j1`#e@?++uv37oMbQx<heREb6YHV2#J*
z%|1?dzoPg~4{7|7ksXyo-~%dppKon%g-ei?%Q$XX7Ku@1^zCWE!t&y_!!*3)9ito$
zmb)}g;(ndj%E?`+e|G3lv4FnbX>zL1?&C6^i%shC#>RlJ+tXwBqUf{|Cds$bP_+<3
zgkbMMn?|*37Lk+M=klx=cg+U63QLKMCM@>??RClSlqp+7X>YtHaFa@P6OWXaD+98E
zjpz<2shVJ%dtYFRldTobe%b3%)%G+o+@1E_Zru%)aTb$_Q!EbVMZ!__oRUguOQsT%
zc%>#YX->s?L9((g+E^ZY<~*J4x;tRUD3u<owYxfmGPxvCc(8A}gRc-;8SfDhIBn?J
zHAUf7yg<{CB1dB}zbUfrxTV0gz;2&%Oc!K!ZN6lr;(FiD)81S6w_B3bva5wH>$6z0
zsE5FcI}s8b&Q<3@6F+Ksn=jrH!O>Ly=X*OPV%efFAjlD%1)i2m`C$eq7TL6H^7$Qa
zLz4FDOyE+PhsLBtlhQLd$cOZgiyrO$Bu+?7*K1F+H)$XpRwfFUaNjKvC(k0$a7Hu>
zgahV8zD&9%&UAIq+Ou1n<`vwPwkTw)ll-DcK|R#lbeB%U{nv_2#KRoIfxKtJlv>E~
zFQaGhauE*>zdr>p4rk<EhCktaWhX=hbwx}>2kn6GRi10ehGq^V2?Sw$_@B~GN8tuU
zx5BD0-XO8@i^fWU$9hB|-STEJ@C05q$0Zz-V$Zl*8y7NMX6AuCVTV=)BRsf21?*^N
zPXfC;P#^;<1bJk*+^cFbpBt~W=V^;Ur6yo>Dz~9h>5mpOZsQ7X15R4%fqOiEil6rv
zd;$#4C^@ae5Hi?nV{+nztJ{A{5=rq_H0Z2-Y%5mZqxP)2(r^$eGmLK3`@vj#K}b}E
zOHY}L%-cvOIxaHrkVN=7rC2VqrSp3Wc6TGc8l6}IRWu!)gAUN6hK}B{>}N8E)~}M0
z(WIJUKLW<d#UAWoZ8gDRJo-F6&AS_g92!3{^~H4V=?xy%)QmZ9h6ot5{>u~@u8GPx
z!dC3ywvXsm+bhYe%ChMv2}$%#GCG*^0PzrM>0#xmFQgy;l7?nfx(=$gW;RO`ap53c
z*uTy|qIE#rmmSbwh2vO)4H|Buc817w**1QvT*xO#8_R*YC<NHUHTi#n%s6)(>0kH%
zzVx%vRyd*3en)4{dOrhte>Ax^LNK|1?5aS`L2=X{qIP~NUAW+9%-6X=3eGzl?62HJ
zpU=gIn1{H0Y(B^ynFnE;k05f$hLjjO&Vrza#Bw(Q?|4~wx07~lyi1M)O520ro57Gm
zZ&#@Vo)cSr%-Y0ytmNaZ|FW$u&UyYo5hB2JfGHaKqov8kY}yPkBGht3d!<!Z?_Zo_
z*2ifZX1h=yVLRs9c&@f5YAym?ef=XLwQ47^_d71xQoYyvnA4k&@%a$GsAVmAyoy#)
zagy4~3yVP{ZgRAKg?+CgqoY4-*=n%2DBL9CQma9wwue3}v07A;MS9zq$s(B@<@tQ2
zB=)p0UN#`mj(!$5bK);%YlsEiI=!kj04)n!IK_PI4u6eZ@fP%^a*?Y&W#hS;neQjF
zHnV}vjz^a;=%FLB5z11rRzY%7)01;ogGIB}*v_%PB5yG4zi3SS^6PJVrW3}jo2{NV
z_v`8FZvHBXR(-V_l>NCA-)+Ls<!Jotc~KN?$e*uq`ktJ+|I;TeW$J$Zcz0CnFl7}$
zj~-X-Z2ZyY1eGN&2hNy#&zmB3@uzNsM22tk=BcMh{b^ie`+{&E#Od{Pzr`w%f;x=%
zs1XxxW@}xr*h^B|TQmF&c0fSF=zQs3oZYonCW}ki6UvuZ?tFxbzzWjm559sv>0s7V
zvF^|*Yrp5^Jl$?%9w2f=-V&+T;=nulJq;#h3PARs(0Mxhm`p&G)fI&EAEfj!`<juZ
z%$%oW$?!6!*utnxmXe-|**X^M9wJ2lrFyO1R~fYuhQc2rh)rP@jr4==${y(T=uEIQ
zK*6Lm;=Wwk+y6oYWq|~xkOmDWxP)zv4g3bGRtY)MZeK063SAihX-ums;Q+%X;k@Oq
zhCcDP)G^-+Xos4?%gZ)Gy=w96KY&2=Dc+T8n4Xy_Z~VfiqcRF<M*7c!fUNtGWbYDI
zv)XUh*oi5E{WzuZe2mYjMnZQ9ltUpuooFSsmep4mW5w{_psyD$6~c7*S}nL*vR|d*
z`o+@)zDB?vb+CO6`W3A>*S^0OhP+q<A}4&dje2geJ}O+w@Dw{tSOnAKT~ks25`x%}
zcIT6Vt=qcKE!~!g@(F#!m%D>Z=N#JTn{qEr`Xl5Fa6sC(DE~N|MvOAC1b*c}<Ton*
zv(mw-#SUYatjSy#+dxMh#<jvFXOGTI>PDF!QLDV!zil<4Q@1e#>|wg*$j9>>Op?i6
zEm2fohcA^OMTT?6tWOMC<XxD%!R#J5Y5QS|{QJ<4FA+-FMEzHXQ=){y=4{l_WWX&{
zMrn)P-RY~w^izK=PK7A>Th7lAFCGhHH8W8Y!|m0$&y8JJKt{sYc`!NNk~yZq;WON0
zh4UEu!<Kw}9-)BytFB`=)Kl7i%Vc6GRghL!!mR)IwFo<gZvy=c4kA4%=&h`I@mA%D
z0fM?TSO^FjJYB~1?n&fp&UkrK9dI^62MS|m9mB2nx7*^kht~kI<P+b$zp3E%pr!6G
zHcG;9qhn@_f$~O$o1(|CZpg@rLt>s5E(HeL#eaSo)dy<x+neM=kW7-IcTHan>@e13
z4i*P!KhvO>hn+$GTcp^wFyvqF<`qjV@olAMty6%h9F6>t>Q$sMY4@)CzxRnjCuT-5
zV>re2%al+Z02CPrk&Y!jw@`dBZn(TH7t4>I=zUCReerC}e$9Pu9qOe8Q+2de8)wtT
znD0cK`5x67<?s!@JI9bjzXw$I6V(4=(K@%Fd_duI*PSso`OsR?rRwPm5g@nEjllM(
z!5wug#y(i%AUKo~qmIaO?!1D8Fnpc(EQE)tB2oGLrfiHozvUM@Oro!MkzF2LX+uYq
zvKOzdnI}jWiiWYx``@F@)gQ$xJwMSD$64-t02Jn&l`od4ds2M8b`B4!CXUZai$8yg
z#fbP3mro1QlE%lR_cb*=K6)%Og<o`7;N6Wvf<UODkTz;OKyc|wGP~R*XOhXa$Mb2a
z+0!$iTjxS^R>pX^DCOOYm@f7mxT7y$7jqJE2>LP~ytevnzK}~0vOc|kyY1>Ww7G1}
z?k?L`mtiEc!Kklc3DenbL&l27381cSj@LPV@YP`>oD=bZ4Yz9s;q!7qlheDqgvw<t
zOrA)^rqixqhm}&i-lD5Frf1274!*rhXrMik*#j+Bs)3}`yOJ-P_#$s@Ekw}gz-X-)
z_zx;|(`IGMew7y5kH3k&SYv~Xy+H%!TbfYQRr}=u%HLAbK-cVzTgH7fe1y>_MZP)f
z?8*V<H?ZAtgC=Fir@Jx-eA51RcS;1<eALr|K8{Ca>Fe%j*&I(T8`b!ME1Np+)|y>|
zO1=>+>FG!{pzhKeNFO$7Y+(Dm+yr)!xYXUpD`<|asUW&O>EscQ{A35Q%(JC0s{+n|
z*AvXzLB|J<(G*Wpgtp5Qy5yeKRKPkbrlJ0FhP5+AX09LFth~vL%0*fbMX8-KpfLE#
zjn)@l%M!F<s-h77>==!g(E5Ns;(|bc;nUn~yrP{Jug|XX%Q~OEMF`h&Cr&f_Jj8NS
zCYYRp*`bv*WoA(4EIg~#plL|x{xQTm@s@Ue_I5Ydi?9?%5QD-yEn1WELLcX0yYHz&
zmI0xdZ@?V$?M{t?e+oxPGyYZIt+I8g7@E2!P@ZBlSei=N?1x#~$SQ^CQVNda47ygU
z#+LIp<uQGo1T{8A0t0DnGgJ`J`|H=*HD)Ili^LO$`pj{&$Ha?Fthg+}yb>^&23%B9
zSSkiCO=96w2JVM#lS1{qn3-rTjta%`ajrMmwPxW?QR#)0&_^BYYt7*RooRgtZL3iK
zLFTY;+2CD9M@Ob<8<sbN`YlI>(A9_QuvOd^@27}>w@>1@6n>ql_u_MYd$8TWEJboW
zu+Jbcf-zmmlmjf~kAoROg6EA%l*_O*6exa-h28@|s`<_Q+wHlT`^c{-EL|-!Wk-&+
z3Z5>+|AZRu4te5qh7LnDvo;`k@6AjE+ixG6wjc@B9%g6CD%8&6dC~i|42CLl4l7q<
z;nkAp^aguD2dO6YOegGaphZgF^`$dhe3aNMOB2?Po80k$_u?lxFowV+i_4~CIq{_q
z>)?+9K2iPbeXBaI*O)Es6$&@vP>l^6cybG4A1|sO5EsZ^^6(6UFo781JoH@X?%A3W
zc5#7;FaKdFq_1#c3op5X2uut(fgoFI+w_wo$_bVIozN$w<X)=bBdrU*L*_%MB@}Yp
zN3x;Ype@{2EYYeEeNH2gq!-+`_mXK3jAw7lU&dkrWktGT%VL^lx@PXA4)bM-Z`(;s
zUzJKqcEOq~3_XYoJUR7%wlb^~+#-VoyIpn%Sh1JJ`D>8>u-l_r#Ay|htAI&lZ3~=v
z>WA8e`gQ|L7*sXOTRySgHtMJaAfl<5&VWmj6)z;ssRQ`_o5!-H3wXH_?HUXGc=GvR
zfRus!>Oawn|95wq4Mfl`aaSBxL9fK06H?m{52mkW{mJdV^OEX_F_g*_VQ@6Bd&JY9
zm6KIS%(%P<EzOC;k10rf+f!pllfITd-!sA7bcG#?0kfrh_nl$)Vd~XBuNcbGs^dUg
z(x;nq7{Pco_G{Fn3Jz2Xc2RcZalP8nr0$xzgU1h>21mD0{d<ipsd;Bcg@P2i&`&8P
z>hKo(ae4A-I-F3qWg!X@>wS|)lb9X-t~qvBLX*QaL;5si8e`YStuXWPcdh>_Rh%ZN
z)-`Z|<C>nUSCp3wylQ;h$8aIJ8-LsVLI@UjjBdGsUQzyy0i`_7k5<RV!kP#FLO_%v
zj`ti&tF7G-xEa?yZbZ}dg-`Ve92H$OBs59PWR+{nq;fA1u7xP8=;+6m#V`GIlrkNM
zYr$92jW4DI@wqWDW_^M+68Rc4DAMn9J6k}dL_M8z#iA=l!&p)$@H?@Amr74HmG`sb
z)O+6Vp^VLMixs(9@m6>^dZq%o#$@Og)z05Hzsm3`^^O*gjdI0xPn<;2z2yu7Nyve1
zjl*FyTQ%NPTpb!egHBnN%pb?Mp8Su}q;~iW*%)JI>{{r|-TaM7N11HlRBT7fp5@=4
z7S!yK%@*zUG?^hgKW*MiSqBl=AWyICIK?LsIp6+wJfts~jfS=MWd+sEW^7vV)$H(!
ze-2CXQp;`;`vC|k>BzQ_HaGG7Aa*EiuMfy)4|RW92^cuj{F?VJk9--^r)x6k^CKZP
zXrX4YUGbB&hZvPlO;<uQ6JTmr@fCC5tUS|q^s$1<Np)!DL@SIF`>>D{`KF^tO0f1i
z!E%4dU%TQdx|g7pE&x-?85H1L2RpMJ8y7j~@C*{I;N?j~-3bz8x5y+9iKMD9>IV@J
zK=^LbS~8NmEf|{oI=H4tnMkMX0W8CBFnL60JUV8g?$~Bo1U(>~g6Da%Axxsk<el>6
zn)`etzs77%`y@e>10BdJxu6T1ke?iIDYE(3FR+x&Y9JmK3QX@pcQ2O*#^V4cs}Y71
zPv3oMMD)IfGFHf;^2}wOzDM5!1|v^Hwvi*>xQIt;Iz)Qlmw3SqFU)Q9(@FZ#IdcPs
zqQ8e%y_O){g$Vy=^qiRp1iPLgF(?I-0yHj8JM<T~Fa$$Z>_??WnPNjYPFfo$|5>*!
z3v8tU7zIcA*4>Xdid!1VztX}n!~V)YOe2?h<;9~znTgw0Pxc-iRV`RTkJ9&FhA?&A
z$qyCT3>fdcSV$@1aDvb@j#0$y7Xl#5NXl~Y8-aF`KPo8MHcdJo&y(E7>)%6-CVhYj
z|86>G)fsxbLA1Q(v=Eo;oruR;N_rQ~M^eJep_v;S{f(dLIrsJ6?WDi{3jZ%_129r(
z9nJk~tEGL(_(YS3cdM^bS$WfTKMLajQPT{fYtVZVLe1)<O|(bR=Q8&4v8(5kAW{5h
z=YDe#?J3zdXBXT-<jD;JRuddSq^K4#Gl}bdY@V5$7Lhp3!&@YkYAr|8??k3ySdJNA
z?2WVOl?D@WAmU6R0%HqS)%PxP;Yys^KX89LY_!HdOIU|J>`dQnlO4#r6TnGDy%FKc
z8bvZy;*_BnpV=tRzx!b6jTVgTL4pHi%7}dpv2?I|d{e<-_fd@uET3N;r5rb^FH4W{
zl;hmw?d?E@{>7HbnSWo8fSb%T^&(|-S(MxU3NhtzR*9+D_vsmXgg~qLjX{VUM=hG}
z?S_sE=UQ#rV2AeVW%y);{}Y*mpoWfi+&rw=uZ+)L#*s(4*>!VPl6r@2Zf4or2SFup
zLlRb%ZPKia{7^}ryL=oPrDm_V!ev#;J;mjHrydBx;-DQSaP`1HD)ev%LB3{!gE$a-
zv5e@tBV4VHOTAbh6Z6&OxZMqh++&y_6z+A$k~t^O=TPmTfe?2u+cCkOo%)%uRa0(P
z2<QbHh&M6HCCiQk!c<~Ss-k$;o(IdxsxbWI(epnS;<82FEyLkgVl``=Y2+IZ7AMV+
z;CkeU{KYpJN=rq@gY#oaG^sy_epuA}+og3WI9kjxaC$C<pR|&_J9engk{tm$O@t&K
zsqWn$3zLG(L5_w<5&Z|TTNi3#JA?v-<;Xki7$Y>*lBTEo25VF+l;MkXy>$W3CzSHw
zApqLHf-m${==$E*&ABPq!mzZLSa5UpNgT8D8DSM-t++;%y$-CV(cgRk@k)M={?e;q
zjJY9EWXvvj7ppgV<VyZTYx`!_5oFY>ZQ6>0905)topM{-|9`A~i(eCG+BVj$bZdpS
z+IkA4UAv{$PpGAqV;B!>X+4mtRrggSb!iu+Er^j*AQ>&IwAK=RZHos?w2BdZA$F@G
zB8(O_TGUX34izwHkRe12kPIZl%=Ej4_xlgN{r&pe15IW!&)m=bT=#un_jOz5x~|4B
zG;Katl?{-{HKB^p9Zj4gzP5zS(qB&7%`InUe&pOVhu0u>t{5E#e0lf8idbx>XO~aB
z!O;4?ux8JbL<P5e@Cf7dKdWl)WLiT|5uOyo%AS?F8U)=m2D@yI-J0Ta8u*QIIn$<@
z4^3#^TcE^NJ^h+}r-4}f$!0bzkfxHpPyY;6lrhKRa+BfYHg^ofLUU+mmSL6>M0D!p
z4{%El;4Hrk_vlTBFb0xt)@)L@8EjUL|7IEJ7UERyaRy&wQJLe7DwDGOSqvcRlJ;ry
z#?N;KwV%71M>GjBqt8xH8XlCtoswETkX3TTd>q@iIp$Jm*`pCITxFotHo$qGCnkkN
zI-5G>$ud^)zD#Bt+}fMa_hMQ=sHN4c>PxtwzB*kBXSSffThRUyp#4|7Wm2~$&0Zba
z!W3QaO^lKbXGBPFVAX@67nm~kR$yUAj^*<y6Y!gy<CK6g@Jbo-2Tj=ybIP3*={f3E
z+8tezTe`8<(eJ#(Ww~!<vAuVp^djvzqoR}_m7D6dh9uPe?9?aK7rzyY2{)qLJ)ZRQ
z=Yy!K0^6W;K#QN$;No8$s4qS&;MmV8?~T85W4HtZuULlDeWaG8_Uo_i$dMvz)txK$
zCuB0tnrVI9l$a69(|Ns7iKd};->YN$`5Hc7i1FTBZJZ~g5UEVcc%m7CF-C$p<=b;p
zB3$t=%;nE-MtzoLE7bM$l<%p^ZR6Z1{HMBHi}ttT9<={^E62{uB$~4^xvz60vC4{&
ze;g39^t3&{WD2vqJo@31hr$j(<&RvuWtMnQ2}fWxUi<CF><GMF?%d%mFm~3W6zgXE
zgrzU_BXW4Ho%Zs|Ox5LV>q9@bud4Iz@QYG6hHl==LTsoaHq}7N4AgvMAF$c#u?Mt8
zxt$87?btI3zhm3pW<31UxHQmUtKQ^5(m~h|qpC=5C(Oo^&r@i0GvtTiaNAV|xaQM+
z`7)OVM`5&;iBD~R92Nl@rr-Z<Tikdt;b7cmHx!d5MxneS){b#M(jSY}YCXNn9zi?+
z5aUnb(^IX-62XSbc9q0sJ;r0s$D?<AP4)A^P)dto<Hs-B8-uinsqK}_J|_#WW$Jtb
zA9(?9E5%56#^q*24>^oUv06>qnS@Lv>htq?<7{c@2Qnn#4>yeoq%oJu@4S_iY2=9|
z1X`bANK0!R)yX1cf5hjR-^diz9q&s+E4>rLN@|?=S<_w-_Z?@bwF;uDZU+S^Q`*`%
zr=51*iY!q?^K}sFgst}2_o@MPf@xbOH8(2AASiW5N`k<8Ij$DZ*!$fQ0r9$<!kPU0
z0V;UDZL(ue^G4z+NjfVIu62l=^500Ufq6OBGjZdP_;;t%Zcbuumt;CMq^fjL@B#jR
zDz%kDPF?NxtgTNXuVy_?q$xu6!6u0s`5{T)5{RlJxdkkvx6+0(c|&<3RvBAPce&cn
zqhXg?8p(xPsx!0&<mzPmx0JcDX%+f+@ynY=L0BRnxJm828f{6G;s(Ax71L^S3;Lbb
zWR0fZ)w;C|LOg&;+&~Dv5YZ?;^Rj~?9vI%ky9iR8h`I1bK*&72bpGA@s=PKxv0Hz#
ze4fn?b(MqY4t83aJqfIc3^Bz}_wRyKy3DZs=S?;@YWHD3O1V_)+}5A%Y=}_jp=HKj
zf8K;~t8F`$(cFN|+jF_ya!iBKlJ@xQ5JiF23V_&^kV$7+y#6nmGThGA{!8L~Glnml
zGm%`1qE?vxi6X?%9|1GgzwQu~Dw_xMFqXAbW{Psa!jjvKU2HFYbwJ4+uN&$x(Oh#4
zxdzsg3$tuxY*mg$p;|J*RBbj-tA4$_(S+)Y=iUP>OQ6Z|h<p4_^|2rfDAy&_y*-zy
z9MOo?J(p}n)`en!uRYg$sXHn0^VCU-O_9c5akRj@qveSvRlaq(IvlSB&F==K6pbBa
z+XFEs_jN0JsXl63g(_L?3wv65eIs3Db2^tj%5+JiCEx(9z8szi+J|kpG9wk0&(jl(
z4X2!~CSBJ3pEvn;FgMTeJo(mtqQyZfRVZ}MXe&`l`H9lk_0rih>i6r@&c^g;3PLr;
z&m9BrvbDqJp#YttU`qk}3M11Mrk;9dIDfPE9*UoiQ$@$JZau>b#Th~*<gAr_cJ!RT
z>)(=X{Tva#Vc*4s`V0M!zhKgaG;SehPRMZXbxX{U%SUn*X4h@|9ZugbZN|BCk*O?n
z@Vll18w88GEfJ_CI(SimK}e|VAZ<^$c(jH$?)GQnuyq{)dsmK@+%4ic3+)lcJxAW=
zz5LT`52nIw6$5t!w!(E4XK><QJZ@jAjbj~c!YI_~Y@D-+2!hZ9>FF)H)@@_mZ3$We
z@*$L&OscEX_SmXXLl_X|bIvbNU{jDno|URYV&Ov(+-f-^XDXMGNVJS7omO2!Um`rQ
z^CRj3KkOy@=A<BD>$(EoK7+q6p2$L_EL!dn5;IfCH-D_hOgt&vAeg(m++cP=HJU<_
z!*8pR=3iIYPyQQa0P-Lz53FYjQY_IUO%+=u$T=W;(>AH&v%d**HqQRwd-&xiGx3{{
zdQ=^lI2)+HWAvqyi-7{H;xirTr)SRUuq{4~P3vmPBbb*?>|PCE((p44&uN4#XZVPP
zzJ1!wK=BEa+<a=g7c5WPl=C8WG;SJTv(<qn&O3$nVmQLl|G?|<0$fDPHZvwhAgs45
z!4L3}%WM*Z)AmH{t!>#AdcO{LXIwYemy?9b$-Qi}LeQ41jJ**&&D4ydfi<Ldvr`f~
z^6h{9{ooM2he1bPYDrmI<%Y@WRIqOvDj^O;EFgvX?v~l_jL1J|zWaKVqTU4l6hHj1
zl0ZQkY3!M^9_Xu}(MeY+G#h8#v(YM76WX@%{h~_>pVMLv7<3`sHW!__nwKRaa5_OS
zley6Ee*{$c`_br7QM7+Gc~B&`L1qUP?#hY}g!WZt_8$vA&s78;A{d#$cPne9gsCXA
zXW*T05X_m^ULUP7v`m8d|5n;Whn|tHMJ|?Zd%-e>4^~+ffl{3_{Zo@q;tZYY$f85?
z#hU2Mq=SCz!rzjlDn1s475=g!6-OrL?`@^cq4mEsm!iJ??X(%Bk!{|+CL~Dd%QB*>
zaR0jtH$OUyYU=f<?8kG2*sSZ$UUBw`<Lk@OBM7g={e$s$<XA%uNPOK{^WI6@vOT!L
zSx1A8NOqhJ^nl^y{PrbeFl9&Yy*92aO@A#*RA$-gmi;%}33XIr1F6J-!xRP$lLy!G
zqUU|<Kjst+StRU9EiA{33WN(*z(#RbpIvG42bwcABUyhN3}JODxEx-dGA$OzNIeN+
zt@L2|=+|hD>P)Q9i{^&2A66)lNvBT2RyTbpwzyjgFxrw+ud=q{uN_mSlPTmK%XS&b
zd0be}y4hd}RSKVfHrcNaw#W1!;r4c5;4$6N6~nkbX7Uaq(U&#<Im0=wV6cPn4i1)o
zScP4{i}Q;H@~>v~x>`diy=x`RGqbIVocmy)fJ}({SexY(C*DFAgODq)J*E({jMkl-
zuZ3_M$1OWBQ;92+;q42?8H#O`t_Cs0L2gBb|2xzjeB`W4#lU8YYn^FEPxsTyKu-Hf
zimf3u6+F(?-xHhKTE?_E4h@=aGCu6|)!!n{JUwhF?#>gbl!UtTX*KWo*@y!Gz+}TH
zvg>WkIRCREk`Aj=>-T|SP}^^r?AX~4MW0C=Gbv;QF4K@3mC1i%6oJd~u8($YQS-IL
z`q|j~!`1K~z1^{ClPwRvRPRc}?e_2aw8CFvchP3Zv+sOPljGjK;wC*1Q8w05)^E69
z_M(CeKh(K=8QMR!fw$h+RU+2Ce~qt;^;%Vxt4;@fu^dRaNfk*fe!-HGa1?TO6~oF4
z$@j^<nS5NoyAA42w&EK@=loK+OqDlAEF5CWJVj1h1(&UWe!R;){r#Lj0zBg2`&VaK
zJ7PVL3(%e*jv9$;{ysV<FoD`NxwomyNZ^cZ2ri3ayNQU*d2{%L@6;6R1?>1C)P?T+
z`JBE<Gv0Dok(4O6?k^{l1M}441z^=x6QVMmwqwLaW=DppXLgtnffy`Do5xcY`)gSi
zP3hY;yKdfxuk{QaUc@ygk$t~BvG{b!BBg({vRp{`5tGV>Sd8M%B&rhX>-5R}7FCma
zMp=}mOzpIpv1yK{^-aH4*lvfK_SvbmCMxMny#4MkT@y*419NsVJ^Rl@^jrp%1{dfu
z)cVL!BV7(rPx!-t7?3Eiho-`0h{a+t&41bm#7e>Sj}VY*DHw#1iSOQ(68>2pa-~Sk
zvFkI8Otsn<q)q?sj0ostUK*3%GKcTb#(B9^Cok#`A|5*GK?L7uK2-a&?XcBGbh5q1
ztHrNi92!Ti-TeFuO=N<gWS!o@icQlAN%oBD41ZwtxSCUsTgibpW2mDEnaCggJ;P~i
z-W2UFV`4(vx6O{&7Y^S5kGLzt%XnkZP10Uha0l2~b(ecPU-~Id4#a;C%JP#H(J@`6
z(NZ44mHA2_m(?0*N8KSM`WgT&W#V*50|7?G<vLn41_`fIof6_COLt4a<-$Cr`f6-i
z#Uv}1>6N9}pHjMKL*tDNgn2Qji(9z@+hX)6G;)0G_9vZbWvuI#5|NR60e|Ht!*S)+
zcKX`rRH`CG-=(OlQ<t1xi^L&Vmxb1TTAC%WAQ1lj(jNgYYBk!Cl&saXd!foEo}HLm
zA2(bkLR(?sc05lVxpoIdQrY5XZku~NA?SQ8V@xvIX2(kstK^y>fiStU2iTTKyI-Tp
zmfQ3h2-gza+`#L@@UFp#aify6o&Jy0Y|S3-b{C6GgzhQIsH`C`j%(L^vN^EYR;E)~
z->EU;I9J_8kmLc4V4zp~{m^q_afoG-5IpUFIX9%LT)hS_rP}D9O3ACVwZaF1tYW%a
zN73y<c2LGaqLNk-Ge;{TeO``S-n=pPg_}yWLLWD$Wv&u5$&p6WF-2`~=JJJZWb~HN
zVzAN3KOab-&&wK5vR5X423vf}48XeUF;4f!_>T>VbMKW#AxCN4WmM7fB)iqvUmBsP
zBf&}4=>V8-w_jy!lcw37UO?izJ#Vggg3>WwvMTR1P)R0zZoIuUI{uUXTZ*4sjm(Eq
zi|3SHA@|AT$tZ{ku?1P~{WlwJ{bIdVd|*Ed6F-#Ua`xVe+sp@JG4_1;hy%`mv;-Xi
zS?je#@UAvaB!thqO5Z)}6u#(OBGJ$p-@C878=ywRXDxfg_*P@@9CLS0^svrsK}T%d
zcin;pM0wIIzmEKXf`O@asqmathmB<8F_NH9InE-xPMHUKUPq@vjn^q?(EH(kSWdxT
zddFj*HqUEMtRfnY%aFyr6MqThB?~wI?PwvdGYdPx@bn^F@Z5oOlP2@Ueus^{`OnT7
zJHz;*rooG@)&b`A!@oX|CPgc`mc?9wc9y@4H25l{5SCPZwXH5m4WTX8qIz_1&7uq=
z{h$R#%{BXfrA86^e)$h1?*lNMKvri7`N?QDd);$_T_yYY_jLctzUbIl(q*vUf#Z2A
zsO=N+75(9!jnTK_a^HdU?JBqF!yuC_VGH94Ev5%dpXIw->3&QXeQJ|txSxaeNVa3z
z?QdTi;x(BJonic{Xms^YsQVCwn}^80d-ehGydDI+(;<GwGbjY&RqoHl68o~9hwyab
zh4bi91{7D2R(0lDB8vMK=RIL=hQ_x@m8P(3W1$I2MqES9Cdk?u$b0eGXy=aSzYub&
z9|^A(Fq8vkf$R^~FeMcdXDc9hp~qd2ZY&#g(|_4Q*(vYv8gFx?b#W&o)AfB_d%Zn8
zYPo60-9X$5A>Ty0&e~1<)L=2NvCp5rC6%Jf<B<K`>f?)So?x}8hDFne4(^et*0?&6
zr$NGGBG2g(d95EdzNH91_WxmUlk)?Yc22HBAix<1YKkex%iSn}W`HY7hXA`nD|G~!
z@MjRvIj33a;+ANWVv#Hr)*~dYBu|oS1CU<#ixYlDp}f)S4?3~f{HhwnMSsHgA4r}7
z44JiLW#Z`7ug}I*vP$VR$44=g!}8DLXkA#A>EXA0nBKe{34DADy~$y?+ub8uPu56Z
zhxSRyn1hd3lesK3i-xhkJ;IycUHElz4#s2(aZ~QT{pLu9M&e->K#X*Hgez-Du;0lI
zuSjW7qO<5!pOU0)W{>>a5&rl4zY)mXR#A65e@*;6rz2ERli=^QO{$zgnS4&pOWy#=
z1R6VUF%{N$Pp{3eZxa9K**_Mn@v8LKPIKCZtzn^d#%~;mT&?2j&VQTnM&`yq+GC}t
z$yT82(vvpERh?%0XMK-Y`{I}w!Z@ire{^eWYae<B&Qj=T=#aQl<m&%UlkK^sBrSf#
z(=#Bhl<CVncP4_kyz7N#M*=`vW@Bhs|IRzfXChpTIR9tN^j3MA*iP=w^fg@5X&P<t
zq9%Bpb$N@!p9RUu1?X1L+V_3X+PL&Vov!X$Z?Dhc?_YV0GIg$(x{Mwak9nfe$>)|}
zrhsYP)eP6+bX5d6jD79-A+<Qg+&0%9WPb^W-@~9?wkO^1Pc7q0&V_CnWM#v_mCNv>
z^M5clGF-1vXz66^&Q>$EDbhE5cL#YpTpGTI6hmI7&QRQ@7ta#Gi(ON;ReS;6{@Ta!
zv-r10$p&4wChlZR<gH320HJRCj@54Lfuf=u4#PHxl-OX+Z;Nj3$D!MIxu!=UB+_C0
z;LX(s#JZU+M`^aY?Ts+MhudtaW>y~iRcYlBZ=B!k^m(jJo3GC8!n`bzdb^pb{PXC3
z#9uga6E-Sko$F5|NO(kiZ^v4gG)62Fq>kz1YdU4(cO#g+YPIw(R>`IkC3zyI%M9R3
zttNif|4uc%mIqPTET_$GJS472Kb)RI-8J6**Vf|hIPiC><2T0iq&MH3P|8mratUPv
zv{Sj<u9NqsC1t+VrqPHY?*(V=77Ly&C+3>Eh}@313J{Ci{Au^@ERbTCn&cZf4`X%z
zC8|oHFLZi2#kQ2c9{xD=&t9j?lA<Z8JFnd!L9ZRyu(P8C0IR--PnbV(Tbr`2fujxi
zmd`!Tk4_-oSo58<XZscem((y}v?-x}Z@f->Wh8-4ty#|VU_hmw%__sNsESZF8NLBK
zs--GxScp+<dSBEgPGacEiuKH=72njhF<hE4>F98_wI*Fh+GgyNK3w(7lc9KhVTs1u
zGpd&xJcI2k5q_|-TGn3H=0{KJ4mLUIW6>Q`P$s~>t-FL>i?PT~Uy!}cpth#OIjXdZ
zHwGnjMzWzBKlW0{xzsQ-8faU%!gC4rZJ{>t&p#qj&2>+$ODfQk#wPJ!hV<_xzRLUM
zukDea%eF#S{+xsF%UUwxP#ls1rT?p`E<1hLvRH5F=hK^Ue1EeqUj+#yyURuoT#e<j
zy+b{I9x>-!_19EYuslL%bm*;NXTsh>&EaHDcXZ5kJeNjLU=i8<$yYp7kNr+Px$*HH
z=Wac@TuAKHcvjrnBVO3iMfM?=+%<W~>13y20GSZ|@Z>#mZ30PmHkr9+)`a*bU1R8O
zVm|E|YrGM|iuLQLumKA@DgF~7z-`+RbD*^;h8Nwwtk&~8hs1r?70RS7IVYC^hNYxR
z1rX<-&!IlW-y+b#Vc|SM>!QHrrp$P`mEj`@vUpuqE^B3a@`rd*ezlaqQkFhU(3Of*
z;1I?W^VW|OeN5f#2+ti&@#$)|m1~MhV;v@l8~QjcCbpgNif4jImzx%!9cOnK>SA?N
z(&-w$VgCqW=B`AwL{n`>-cZka2E?SUVXEUB>b1={6RO_MvLtH;CPGX;;WHg|=zv}c
ztBBuhjrR8LFaN7#dYvB3mlfwyrekq}wx&B)h=eW=etr|f<M6x@rG19iMq2z94R8qN
z&oo7V7v_hxaly3TA<Jr2EQwhEXYn5|Gx9CnvFt6PbltsD0@@j+>?waGT|bQa*IbIK
zQle3euGSIUg9=i$rR?rm1j{)S^DK|{w9<45#tV!wqU1pCiitwLh7<Q@@Je~3%h@Ex
z^e);*uAL7teYQE$ZN<;;>-peGtoYX$auvVb@a2<)b5<R>HxxZ>!SVfI{Zu5|OL3(i
z4%bq;mP;M-jDznfzUt_hV#uVqMV*$LjGb#*+kTyiXFIYl#ye=bYJ(>jk8Jc_el69U
z;Flz?E1RKa@Habm8_p<2wdG%84Ajkh-UK1$$i7@bF|(fjYkj>DNv`KS2CX(gQ4;JD
zW^E}Og4iM63Aq%Wu=5QfMWOd?_Iigv4>IeFw&`!RyZpmBR~1?MbzGydeE@~(8&%LG
zT<OOwfv9oq1rV?w;v)@bq-aMZcd5Z%6jKhyH{{0f<XkbKEfoYWIHHRwpSk7lQhoNB
zwPx#~7nO1*BuiA=E5kEK&eC@BB6Qg6>oi{}na8Bn*0v1A0+f8RqVQVl+b_2zrh-^O
zHjIwpmE|(~ouUI)e4bTxelp%Snjd%zDFywR@Qh100W%RihHC^Rxzuj<UwWs8QbISN
zQwq`G*rrlki`%F6vN6sN8m*%I2|Go1Ks4y@c!eeQPC;8>2z1i3W$m#T`ogyMO(!VW
z)q`#Am#hk%Q9sQOo)YS{8fUisIAp}B4tMK~vDxh7NWBZ~1@U$o2hBDKhSQy|Z_=>V
zP=-1dj7_zpG=j#*udPC-@|s6N;hvmXP8w6R<>szP!#GF;2^bDj2thkL{VDfz?tr{_
ze#yaq=M7z(eE|7tD)jJ8$<ZA?*GWb!7XQS0UHTOGONI;HN4Tn2J!;BO`WVF@0rG~B
ze`}Wd3n_%!0ftNk5$EPUJDxG*2;}=86SAPalBACo5{qhdzMgO&l2nR%-XH1!!T!vm
z9Dkv(`Ed~PEkVD$>{UdA>tVQ15^XWBE}nViCQ3R(Q<V7QC^~*TMw1b57Dv>oT<g?i
z3iayF_Byqzb&n7nqS1yOxDf-WB~JS11HPu$=i#p=n$mx0<^R@sIjlz+$d~m$CYOI`
z&k0|56m49B+S~I%$oZnCPfQUmL`1KupZWWsW7+_>OCcWQ46pt>e>+2w4IsRI<=ELA
zgRpcgg=_n}s4>KWdH*5M|7^ghY2^WLa#@dq)vdf&@y1hgTU&IgB}LVt2Ze1|VI*Ad
zZjtMCMPboH@kU+Cga}(Mw)}$bSL3q7;9?9y5*hR(+EoPIT8mbJ=yY_MXb?~57h{eO
zxh4=(QDBz*PEYevi8ira&I%ha{ZT-wJ7$pAQr6WZcrKq8asE?J2&*5uPtz-@v63Y}
zl*1&zQo9^TIh<(HD}M_Dlj}%M1Siv)YTrK^&YDg6Qm3F0nXVr5KWE6?UvU`zVE7UI
z9V9$!<f3`uv#MfcL%q=!BFYz|ZfLT3j^Pcto#I?T5kJ*)$xc<p3b6oG@$5-#<Dp`<
zmFDIG$+&t&EyfY7r#gzg2z1TXW)*``$8zQ!cQxdONB6^DGiQKxtjONEZah86=%LV1
zn2Pl1ZK=xmG!8L2{lJE;H!JZhtcUpDF=$?KK(di>SMV3{M5<VeP%;QQ_)D}`$OhFD
z*NJ%&5y&`@F6CEY%OtejxD~I@`sMWEqfjLZ*`EqSF5EW3hV1<Njhy&Dvwp9futP=o
zzDO)uv1yMe)rA8d+muyT+BPPz3n7t2`(GjvN${4mkqdve;8hdcy+E#%@Bi)n!*e@P
zt3xx>NH*Wxs2pJb8mJ#gBr2@F+>^`B+WS`dwfB#GJ?IsyF)jE(D=JpXX7nPLnt^oX
z5w^->@w0AWKrz@<4#PgMK$NETfinmlF0IX2mg;f4SnSStUG~DY!~PuA-Lv+8;NG*)
z{U}T0F}loKIi3VYO&3!k_*10@A!1DIPS)`flAmnP3h4|>q53Xw5tODFNMtb8a}8(G
z7lhHAq^6cf(EURCccSNS_?&NaLvW^()4~>xy8ZjZva8wK4IVoV2fh|#(a-z^wQZq(
ze)T6qp%%(ad~JPTP3|@!&*z;^IN|@p-6mZ}s_C$GQ)F|&j^7p^6;q5PI^K@%u#_Yi
zRpk5@N6Gie+>`YNxVnMRsb!<LB4gTb4T<yIKPer-%Mn=2o72{p7b57&axDWFL(-cs
z+>9XcIu3cRMhj}%oE*H=l69|g(SRLR@#QjIfoLdd$myA7h;bW?#zWTRoHGO@?x!zo
z$Iq^Q?KwpO1e2@|J6-<yvDKx<LxRIEV@|n^;@M~1PLl$I@5nV7Be1%mB-q^++>cih
z%|xGAhQ$;9{@bEW3kc@$q!=gbwIuKU=ot7{r~q}?mmB*NjQWa@^Zm&p`OTYd?p$px
zCv4PU9!mAV326j_x#_4K7NXkHVK2?P=#bN=-0s!Wb);mG&#jgcfzb2Y(PD{KV9-W=
z@gZyBii&*hWs?u8U}P6TPPUjnAHQ?YE=BZ^Gs#Wekc67RS<DS3j3Jg3(@V+sajBLn
zNd`s;%mll=gCrhF1rT{tJ+`$54YDa3$eQ{bKV8JeTqaf}kl-65x!Eezrd4NJ%%Itj
z^p7(nQ5~xB+FD1S*U`Ewx`T`@|I2q&qZpiZNf<5*)oN=(h~wyP)h(E=Q`x%XiIBII
zA&R^X;k|^t@pn!bBQ7K6v-QotU~Se0nvz+!%k|}wgaSO~_L}sySL{vM@!o{?M7m5n
zE}Wbt#R#-xUG8w_ldzwx^VyKV_-rTUp|upkCWPFOE{zaq3N^{RmmFR3cc#zs<cr2x
ztu?ME`FtGGpDwl=3GQ*yTAUnPYko~MvA5K%ZE8@yK_vS|>hkrT?tcBjR){;qms}Q-
z@<W9a-&p{n0I_N_qCc=HBFhH3&0+e1*eT`9Z&abR@QQs;ncBjL>axzQU%nyXTi?fB
zy}mJzk$#LYClBb3?FY{?FbYpJ`o`Keb`sNSY8t#1T(~K3L>Cp6wxG<Ohs92d&HOp*
zD)P@vAm6URIWD1{Jl*e($!<>8UzW?*eg{hWdZCH!dL5#4-RkSTyKtO_@0I-%$3*5^
zYCEUuBh9ZyJ=YIEs9I`G4$k~X+{ztmuQNd2XvrF%JIS%zKoBD-n3s}W$0)iJa|p0-
z&ALQ$hBD)KCwj3b;MOOHJd$84-90_a=DekDa+m=lCb?T=kJRNt{<n5pnP;nhAaaC>
zRQa@(;)Cq;-1#r)`<W6l!qmL;j_QU1yDoTLuBH>w#@Aj#AiLGAnJ!!Bv+HVU<0INg
z%bwG{Coy??R8g3M19TKFGDcN$D!tqKVVpRxG}<o}99>6bQ%%tdB_XWymF&CJu{nmi
zCOci7a*#lmdM@N#f@K2<hep}US4G`GNuXho3``+f;g3(Xz2Y&PR{!^-uJ9+tihg>M
z*D1=2SC_)xy;FXGA$Np7F;Jx@!ls|6PCV_gbN0Rko(OnGUC}pc%dz~cN<|igWw@m`
zWQ~%qc;{@wzc%wVqouWFlE5hfIgUE|y2Dj;&Fa{CHQMRRy8n%2oh*lBu9Mp_b!V>A
z7aAQCpT+CnsS(I>LHG3Q@lifZB{45=HLB(<346O4juGcW(Zn2u$1oS;h+M6v`FBf5
zqNm~9KGz-tI>2}KU&oH`r{AfuiRVS*ohvtS_;KelEZxNQt4if!L;LZ%h6D9>0J|&g
zKBE~t0^d85*XHIk5{%@UBIycvC0AO^;NvW74K}xUzF2WNtPk<Y9%mba<MM+>1Pc(W
z993ImNr@fqZ*uU$VvjV)MEEb0pWKzf*!7+!QL!=hqnd1VyyFK=9GO^Fno;L{s*Ovl
zu1=tqgRF46h6<)JBMs*(+2hDfg$Txg;^&fl{>^;qsO-LG!|$qoyEsOe5Jfgl?olYK
zq8}5hliQISQPJ<2{tYGwzZr5r@u6=8XIZc`A^y(&$#BJZ8fThSAeD(i&bSsL$=}JP
zmK4i0eE}gG)Vk4KNHAXlgTH>>n8_C(6NFeTbw)wZ2%@JbSM!r<#I@9|_lP%>VeBTh
zXQGO3cUEq*njRMDRNHmuj(}2Emxv#stxK3|>}OhKC3a>28Q$Lnlu({v8FDbkpjCfN
zZ5+s2t~1_g=R|29PXi=w{|E@JizPWqm2Sk!Qa1|ks&0E(&$u>?cu=f23K`92>FKc3
zXh$p8lA$EUYKl6BI(Y1VKkO3g6n|^ygoJ%=`Z)K|St%fyTWb$dTWdJov{y!#q)&xG
z`TXA;aKo<<yS8C2J(19!b#D(MHb`}!QWFh~Sm2*oc=<IHTN5rAJvSGXnt9Nj$h#*w
z{%`FfS&F8EzrKR$e8@{)p4mzfCFHF!Z{-m?0ciV>@<s;qZpL1DV_3K1J)IGEM9fiy
z<Fx)kx!|)XJw@0o-X0Xo5xy@Rf(@$Zy=}vYf8w>V<eu9Zc-JYI+U0Cn++U&=f=wwz
z=<iaX@}Yk_86-f=j8psA*#~wdZy-vv!PP3u-NTKKg!CC-8!ZOJpl$uW=IT~y<&qoJ
zVnBZ@8xJLmQx%^l;mHLZl|Vm8^X&TnZ?Ki-evMq^O_*=O5f6`XiR(x4o}I%Ct?1`+
z<@1${kdA{(_Vl$|qo!3P_!)CjpqaU^w`5}20@M9!fuVt>`#80CC_W^v-d@ZT$~#|;
zLLINBx5&w#Gx_shaScfxfRBN?RqAM$nEwu%-F_KKI*^TAi^`%OSTFH1R&5j#pmP_;
zy=5)T6-cX(TfUZ3T_EY6$ue94)hoMEQ%PbBi}}OmWKuuh>xKOLhok(d9y#L=dbove
z@RLSW4{^Du)&}gB|Ef0F%Q_9}J&-ihBXR#jU99;PFHZJK1&UOCp~gKEWV(Yu_rysd
zTrQmwINKvU)<@z-cP6N!9?!ryxZ9_6<O6sL{!K*mMZQ2V*vE?apwZ<+yX|H)K1s(W
zC&Z>z%Ti5VQ-Kcntfv8E2iZ1+@pK3h<9f5^3@{Ov;Z<oVQVt^hN2IKu!SRH(Z{j<H
zFk{#8J5(i+a`1}PkAIhR=YtZ*){_X_KaKEZA=kVj4DMDH(c=)Qh*#6GdDem@B71Ys
zl$ZB^Iu<qBw`Aj%?fyVN@?}OsCe$^g`Bk@78zrUCs_5|}7#zpLr4tf8rZO=N`7+#f
z9(;S@^|_2<RHrc|lCSkxY8(q9u<O?ZIW8p#YF8VET3Y7bt%O4I3T>QQ(r$S_vN_E*
z&C76``Pi|`#Cj>gbJ|kmg65e0kdS|3S#^OsgX-g)8Q{E{TtXplDe7$!w2FTh3=+qo
z{z-cl-5weMRbw8u(Oqs3^uw&x)4y;E`C>VOYAo8k#R3sP9v9OLZ7Zhd<3V!wOgfBX
zA-s5iwa{%V>`y$y-;98_%e!VNJT_Yb4rsRjqw;Eg{DPUtFVI}muBaqFZA(GF%byyr
zoBbmmbp84R;sv{t=H?F-IQTKjg=hXcgar7gRY-$B>6!Y|)q+9D1v2K!72+eL=QS_E
znFR$_EB*-hAx@SnyjfFRkWa3zG@Dg>dg7y8m&9bfRbG{c)vkA+x08o|ME9#G@4LKp
z3x14*TsQN|x@86m6I;y7ldu{n5%%6c7&|l#dI4z9aa;st7KQio6UuRTK*(o6ONQq;
zt>)yrJG60lYG6h<`ECOHVz&hugp=Lc_X9tDO(I4i1lyRYQ&LH$W{sHgJ=oo^(_Txa
z6;58Ihym@zI&JcaB}4qL%R(om1;%5dY_gc=YQ24OA3i{Pzny^d!x=PgXPP;o{{EJL
zQG8&{F%#<f^`CnDZn!_2yjEt=lBQ(PGUl@J%a_kwym6hE-x#aa9USgDy&Me#5SDwP
zr!A<yZlgk17f3@JvKwrA+suWIf5$RAhlki(U}z8D@qD)*S?_W7Mud6AKHG9+YZfV!
z04&;#9(~g&qp5s0q6-eM{q_cNERR6(=jzb7R9jiL#o2r5%IXR`BFnd%FIY0-NdwOn
zXtMk(Fw~0m{l(0XF4cfo75=bbS3aRvdb$(N6iTZsqyxIH3aRyU45Ps}%tk5lOgE$h
z(>ufH4V^SB%VlrnF^cm;is=>7a<DZEGdUq~OuTxl)nq;;7yqXu4$-opy)qrey#>!{
zM(b4`dyR~#N^dSzS^5WN?1Qo5n|X&El(GuG%6LVMH|3E>p#x@G(Z~JbXkb+ZX1<`i
zvU>$D!hv`uyc=y*SxobbY)u+j(1l`1;a7)9zlyJa(E78}wUw_)9{$8ouzauxskRQt
z&OZ?dRaJDzs1VEXhb8}9^)@`s5IccLn#&lwl#KP*#y7t^U-#_tY8(k#i@RG}Hw?j>
zG^gRMSv$%Jm-S-?+}Bs^?k%%8&G2T&jzaN&GtFDoy)GdruB0yC>pfxwM3l_wsRz^+
zA_xx^go^XS{RYfBJ%}gNGt9b6R-dTNGMejFz2&!)E^E`;iv?)|%z%(^!PZs1*I$&^
zYcn5riRw#2WMbUfg^UVor<>=tFjguhkI@fO3)8jWOMC14x|}8xn>lL{!-np4iaO(#
z*;W`^U&paw+^bK%G^)rq?3J-hS<YZ+TP=l#(*#o02<Hu%ec-RS&Y`OXzggF*YpYsO
zIjRl{R9hj&Jq%8J6U5j7DVFA@PImb?eMX?)l}NCewz-})ScP*-+CN}+!T=MBPBHTD
z!@_@INV>7nbm#yTREDffKfSfZvp?p%{$4&hBn9%-OFluF*|{lNo?NoG$ItS`R-8$T
z#Hq(?f4-GB`EkM4GUlE!TCI{sR#_9;g*;>v$XEl3SZvFTuab0id5(dLqfsvKzJr9^
zHUueqd)p%~S~DyL!aCm`67(@P!dSw#bhspu<qR<jA0NAX*^IsOHpM!4P%#9x|Bl)(
zL4af7nddUpYzI3yWHrlG=@}$iQcqO@aqutv&V|;vtR4qMa?%Z-u~Yt0WD6l8$hmgf
zJ9!Lx3SG;-gR_tQ4Dy?O78T>9D+2Y)oeLqpDb}m@`l(8&*+6_|XtI~#Nu>om4!k*X
z)%YKbke5JT@e;m_Ore@XTdWx|CqTbxk(B}}&tuGrM3+l%J>2X1Z6x?)kJnrf|M7%%
z(v+=C-?eEygRQXk0$#|gQK{z4Yn-=tx3TXigAczdL1;7EiM+3naCCS;XWXVt7zwye
zsq@V~Ff7Pjwdcn>y9>Nx_=W7rkDuu(jY4)#NO`2zrD#-i|AcBkmsX~cZ5BVODJ3Ni
zd*y}m$r)}_g_ziuZ6%cpOJ9v@->$nLL&@P3Q3;UAKaWqLlPiNTO_OiW@^b~lNUOHf
zed3uIJn?2!3P#&J7S=ktd`ZKBfq`MMuiYwFWdfB>NRE*NhddLa(3PX%SV$NHk9rZ}
zpQ@4T709>saH2LJAo~8YT^aJP;rh{Qm^bKjhcCjJT|DE!Bi|Q(axYqF9j*1+?FC?5
zt7sEiqoq*7Y<RGHS1{R!i3*{{Ig3PjDLdrtL2CTTKr4vmX(9fhTV&~I-m~lxlt0c+
zjB*INgQ}_@As!Ouw91onWGL#aCCx6nYobdE$nE0fzyI@rsD%W2uKZVNma-o_xo?n=
z;E7}5Znf*uw6-BkwG4@_=yJh^*i)*$0SZHU#!stwtgF*%1_y~-<&EHsRVH-Q8}I?{
z>)rYWYT!7vSJmfn3G4sF5PN&=w$ar5{RfKRIx<}+YM(bS{6_c=*X>MLtocHOpu$;l
z`ZJlMI&<lhK&R!=q640w%-SbtR*;0)w`+1NIwDw8{Hi+KzGu=JPsflDc?qLmFz*W9
z8{-kY1Wl+is8UQ!kY1f{U5yi}^TmEI^LFd_UHcq<F+@;!{LO6!%-I-v5=b&4Ii>Vf
z^|*GY3sQylq&H>TZsdjNULoWEQ~Yp1<<X_)jDzA4&!NC9y%?rAUp91!>o0l_GLap+
zvFyhY^Lvzpa%0?XpG@}-m-(rXd8S?yHW0vsi06jT+O*pyD|z^BeB~qOK&@>F`~1fR
z8X*AUAWIFV&?i8b)$qfCU897#+$L1{3gnAlNW^wrtyj6c!8)V4UVG6xFm!}#dKqUW
zT3}XAMB;ZYgsk77*5M^1_O1@jyqp$@tHc-Fi2z}=HrsVdg>wC8;v5YQPtjOh_l_Lr
zV{VX<vGc=2&N+yL0J%>3P`gmnbqB~9V~-}w<?fy1uEeT`WP2sEy306i3Nkq9&+ygs
zGODT_r>uD|(z9qR@OPd=>{nkvt_%kGLObi;3BaX;#8G+Q-C;!7#4IgbV}kDr1T}+Q
z+~VXxzHXQ__E(NS^>+X(3*X<W&q%l7X)X;nz;+&75si#o$Q0{V-~`?3FOe4$Ccj)f
zfwl;CU<N*MRBodEL&pFa;7k%T841q<pg*t#dnEX)=rIq-f&RY{vp^_cgktc`I5G9*
z%2{YDeVba^+;ru{Im_se_N|hQTfbLz99(jE$nAR{-$_1=8&cR1NUIxfeQCoE2;6R&
z&r=Z1{EHbrf;vXzevXIK)jvGF(~{M}>~0%xr#@%9HHKm;-FDzp-B}#l>Azw(WeVA$
z!IK$cu~(tnlIrZ)xMT%eP<Z-NQ%g?XC5PgC@WS#in|t^?v8R5Roe6)8ek5DJY!Y);
zsWTDF+r&dJ7`EIlRnnB>iy?RQXTbBv2*p6O+ioB+4>9@E0v+*JVe^{+JGvj4$=8Rv
z17o~yo6K|dvjvK}*g9&e?o;xT4W#b#7eeiwdZo>EWqmo))26jMmiWaPoY#K5Bg=}Z
zWB)GbiyiK&LcRm2`EdGbmM0@-W_#Ck+YK@CSO~EO#&l)|-uvz!b7;7iDMEI=<L6e~
z*|14zJF7j<&bF3|cspkEKdLHyesJSH^Mus$<h9O%{ua#&0IdI39sa-^L0dhvHZj8i
zFRIqNtPj9X{lfP)<}zph4ukzNeijIag`;=wE;DB2O*%orEo)xNdO*deQC`OB+VZw$
zMHt$M2@8L<+)t*Q&mRh@#p`Bk!fc#w<<SxCHu4Va;QHv{5@eQSn1ylo*UXzpVgA}B
z)^g(L>g?Xuu(DBXXnP?2QaY(S_$!t*_}a#dy|_&9W!7Q#xIQug^Y2HRudls$`_);z
zMXo1P4Ak;uJTKYc5uT-tXkr5R&UvC82qFkw{#8QAtJ-Alipxy^fzEbV{5Z#TzXGvI
zU7UXcOcP7nw_u!&&@0~7)lr8+H23zUE4$vG^vR2wo#G@%V90q<ez4+Y+&5))Nl*+X
z50i~{PIIT?3!$+7(+YBxNIl;c3##4)9pUh;Q0o?qoVZI{DXae-KUx86k%oMBQnu;F
zY(=c7Ak4Q0Lql<Y)HQ#=MO9yQw1Len;8!&EHI)-Ich7E<P31j2W%b=QeDkUB_IKOv
zBM8POZN`685>M6C5#^?g9q>nw<G=%p#wIpoAsfi!-{PN)Rm87$J>x@mX`-$GjrI6e
zylkWDv=$%|85%w5%P8%h3hu8;uWOl%L*Wikw8{q7FjuYgec_c;F(KIc)(%q0PQE`f
z4e#Ny{cam&w}DdrhFT)~DLmI1L#%p<bcBxNxBDDL1$sd2Ax91SQu=%(=!(br!2ba~
zj;}4*<{2XMYNT>2Km}_z7%Y@a49PoERvv|Z8Ll}8jou`)BSu2o9(mk3jAnvD5&YF{
zBeaH9cehQS_4_0|C&TZk|6=ssC3alDG7<dWHHF*kVxGy`1rTv<tq-95B9|>W8QcuN
zW?+WV>c;n6r!u`RP9&AqNjGKm!~`QE6Ek@sN<;2(iv_ul*M4uc;Yc-K8rDD9Q%3Gt
zS<WD(QOfp&g&~yxS36CZ<F&K8V}loiRg!~+M%}1uVy*|<gr3Aycv;tSsVBD~*kCWA
zNVa*2Slqg^@SMzJr#<D!R;@gHgz*=Os)OKc)Os9*nM&HrD=x+W^YjOelqggeqGT|l
zxr5>nn=EbiLY<a8Io8OXI&jYIZc$&dq8xg%qDy)zBkLP`fTR1|k2;Cm`G#OJ!@gMe
zch_ABg^@;nDmG2!@Q$f_j2VIFLdb;3mcFcIoy)LY*SPtHocA=C9XE?^(;Y00Nxn}N
zvqS4&e>~XHzjJ7^RTrDu%nqRoyzYZ8xF+h@8`I3u4s$icUheLIott|eSbfkd>97l=
z?sr#-g|5y@#9j0G;+xC>ZoAD|5jNS93iejP=9~Y^Q+RjPTNw_sx<{)SfT;4K0|S!1
z<ip+|P0$u>GtZ@EAB%EZ$#*esGoT8p3NCKW8oS94!pyY(o8crORYils(}Wz+d@eI=
zr;r3V<`p(n1QJHGmkPgBYj#))bFHVW1IJL<Qf;gml9~>YHmE&r&1A$xG_n15Lt?6Q
z&yH~QH*d^<M5_V&?akyX>IjhZIQ}_75$uPRRN^j3JmJ`~OPRz-k(d{QD+RBk4XYxB
zr`+7VAw1-i3@Zfjd5!MBtP`N7p#W_AXE@piXv#kgR=H<{SVJtzkwXnJ?HE}q+s(Q_
z>2e{{Ps^jstbfcCLddt0s)mI7SIe)(d=De|u-!X2@&hvLIQ`c@o3g*KZvIBTR>*^)
z-&wRzS}*>E`@=e_??LS$@C*XjX+`2wC12o%PdzY#lX?B(kpt2zpdXGLyjvzqyQMqf
zyD~d@A(sS7ENOT896-aY?o7Cn0_&7}@+@9L<^?EbVoq;sHGQvi*20yzL_D=-yJj=K
zufok;M-G_0KpOAL-`!ffwWKcYlaI-y3&H(wibgt3B>R{s2mMGS^IqnM#S5XD+&=<d
z`{=B!Ra|B7cQLjnQ)`Xti{2Q{Al{it)%J;}ClVl${Z<G)enXa2L1Ale>;BONaP>g!
z&n*}LmL9FQ7-E~-A&XLN7xJBC>E5)E{HxDQR&eYzIwUr2OgSY%i!H07l&Iv7&kY4!
zh4-)xOs*+x*r%g##>|Q$ji&gW+;chCI@L>Wgv}&^t$b-)l)}n7dwELusOAC|?#fLX
zjYIxt*1V#Nm)pP*>gT7c10%&sZs-5Wvd;D8z+ah^njhGSv#GffDvoqDYXr^a3JOh^
zVF%pfbA5wX6Bman2vf+P>^EX0tK;~hT&G(k6OQyl{JrIX-rNku3*apFqZn`(PJU~p
z{6n0)amV#W4C1=Vn0+Ofoh$FJsC9MCIP%Mk{#3v34T)C$Y`}lwzh2UmG>-z~P?0z~
zUO$hFXO0IRcG^uJjz7h1mU&!{H_cH9iVb*KYs6~XBY!~s!PtIlrrK^cDJ$iV?r6mW
znP=O#D6F<V;Tg+(gF-vqiJ@v|&)C;JGi&!&E>%H3`}xy+<YNW$4Q`uWy{JzLOx}Z+
za!SpRjHpexP~_MA=HGUort7GXSPlLhVX6^}Tt>QQdSy6OIfzV6AP&R9QI=zBuVrZq
z3~x30=r_s9Hk&DTut`^dw6Ep3SE68W{MYb9wOo@zDw5m^PB~4k3H}w^3w5ov>_pyk
z-2$~0PjF8oOPcOamg`N^c#+U+o~;EFZM_guKUYv&{CwQQt#)b&jE*A09}1D2E~Tws
z%ugUUYQ)S&w^&=8WWb&ygv>`bSDD*w+(6KNX$vxkju1>dUZy}!k+QU-aI}x*VDrHZ
ziW4>%j-;-#H%n>>#5m+T;QT+Rbz}0y(+t#=P7x;g>Rc6_g@eUA3|*Fdaqo#FDIF%s
zn06rG|0{E@j*>gCoshF%kY-=OSW!p)y47?7qV{#!GGG9hec1{X8-cQJpkLbH{3y(<
zs=_t+$gL-UYjyJ%L)qoln|lDm2_JE{;pdO`<%X=>JNBblb5AS|9KBj9kg_egvT@*9
zgAI&_K$cOG&jdn$agS`=ieE>vw%79Bu|Wle|9Vt+7V>=N1YfUxzwH1v94!Ve#ZugD
z*oym`h{d^1iz9u_8phwcBF&!RIM+u8&2kx&a|RveIRHssxAR`3scXfRKoiOEwI6%j
z`)j#;9YsW3L<OB=WkHHaXNj?j5Xgh7GpwguB<~6fm&t;OVrpKjV`ny01=3Z0GeJD9
zD}>Or?MQ2*mv3EpN}`7xpC)(UDcJ7vFXZr=s{y=<PF6RXIxR(5sc@kFlt}kV(_Q=@
z$UUq->4Mq}x&PkKgttQXS>^;EBZ3O#zn)&kbFIqjx~Q4&o@WtDjoPdknh@%!SNFn%
zd#tXH3{n(+sF~_8|FEC<UI;9*O(v|)$B|qPn=77SAw}W8PyZ1Rmwk7zdg)wCmW_bu
z-oi74FH`Aq&%`jNlWWXmcxCW&S=NyA&y%~|yRvNZg@tzdhbzaZljKSmcif9(9Ifm{
zhb{C7YekzZKu?gU=Z5*ZjOZw0yW*VFXUx!^Xg1=dqwi`Rjwd94HpYATf{hy$idelV
z{r5%SwsfzuLIn~r>hX?tjUmwG%buplDr&k@F_VDu?P}tx1K^;lbqzS>_T^Sck@Y*3
z2X2xV?VPg<9h)#))t%xo&R$;;U*}=13n6-`DH-RqHXFrihxc(%y8Gu$40)4CD5cU*
zxgBy&qwx+t(Z+>#YB#h)oSJyC<~+7IT4x@auZ@1eZ(OYAJ;o%TYsm-PgriiWdD((Y
zlTI<qWl7q{M&DG$x&7pB6e!l7;R7=qc0Lj^pRQJP2zbL0)>3_=bDehQ%3~`;x9fOE
zv%hr;dAE*KJRP{du>Du%T7XnHeXiq9vYjTW{^^S__B<3YQRUfD4&z!-LC~h|@SgIB
zgpmMlD0uH$JHzj<`V=tX+Xig#lsatUga`8rY+bmPx#y37!(cv9w96mVZo>nX*)V&a
ze-{%PlI@J|n_BoJH1B{J(drHY3FXw``Xju6-k)rp%{nmSfJvISG$4~?=Ynaz)5dtj
z>X~sO(U-U#)fE8l%>_#&x29~CYCm_kV(gH|zkE4@YW(p=1ove%)8sMy5l}){H7A|x
zJmDNx#yoeppEf&e14PNFp%c`7Fk0*=SS&5P5p-d2lI17sx*}1V1Q;V$ZmL1{_mQxE
zs?VxBsL`Z(ueqD{gY7}=QWy4ORxkIgJh~IE$r7R&I&x3dFIM9;hS=qtNi2_=@&n}o
zcT)_7mBWcTVZ7UE^T4t8m~KK&55EJ|2upQU(8g#+|A?+z6>SrZyRe@)v}6*ltcrZW
zuEk@_j13;w9j6O5HUZ7P(G_t3<FxI?<lLxiw?zS%;c^y%;UG$)A&q^WsZ@XH!QjKU
zqPaoSEu64GISD^*@}Lks45x4OH1}UwR?2#sk_D=&p(xE+<k#(GpwzLP!JZU!nFlgm
zY&8pEjcUKV6Os-WlTt{!3%;#+3IEAJ!oj?dU|l`>s(Q0=yL0|hHWU9et-a5y#cA=I
z5)LLsE`gemnUGo+eLLj55c`5b1COF#SP1+-%Y!LFxiW(S`E#SLzG&ds{%)D51%E0x
zfEmrRJ&~4-G1|xx9u7EwUm97n>kBF%uxw=b#&w~<w)~W>_gwFNfl9f6*P3u}gJ)z1
zv&Wl@Gkdg2`Hm(HS@vS0rf|p~Y~&~tYwq}0n>LSS%z^p_GdrQC6i1EfmF4hkTc(~5
zZeXp+ULjUHU5!tB$2HKcwlJf|W<OO<)}l-mypL=kFO9R$hYE_Q`RB>K*cU9dHv_%X
z@j}9B^|N?C&Yo~bOPLo%y^_EWfsK=YvkLiZGPbFooyy00+^oBIH`4OB>DS5kq|>c-
zGOM7*8`NSVQiPm%kgBv;>nO9O+S@=dgsr4~7Qan)>Bhgt_2fSpWi8Yu`rV09{=g`9
zC?CU|j437>a@EYGq4Jv$i@{~TQlSY>YyWbb9qh`VIJqUzv&1iO#gWp+aDH7&m~{rD
zZ5msCLxvweAnvXGxkL#ZN?TIun``RV-GrDInF7{#b@c-wYXQnk-`_;V*Jws?@A5wN
zJw4Zih%NS;T771UuB@LwH&m`|@q<#)4)nF%!8-h#!BGQ%lSdibrJgJKKuFo3!|Qd4
z<g*8${EH;|NxY;K)$ugSXEbM;j|FLdLkOqJy&oru?%-4idc7dWE9N8gMr@~p&Zb$M
zmxjQGpm~oJ4;B9M@QGLl=R}(7lyAR;C&Lk~y}F0fDG1q6NWpObvaT5*cuPsO@i~Mr
z--zxA84~NNFGH{jt~=XFvp*hPVhAej-0x4@L5Woze;GGO!cQ<NH*7+hwi*om=Z%eh
zR^P+J_}`e~+2w&L)2NtOX}j|(@qY$?kS+$%``c(v69cyFWTSD3r6ci4<(G~RtbPZ9
zmHnR$>WCiUOC%uvcAfFKb`Aoqj$bDAI8J$=b<k~U9v*#rx@;S10TaaC&}>AR!>D}p
zp~McsKvnd>N78))@k{x2$*WzikswCaSX3@V^10?V*>?PlFu!`)@8Qy(eYL#yDU9q6
zxahk3^QOOE>$}H)&QJJHK;8cbm;<tI2E@Mw1Rn2c5)$hIMs0Pu><Pkv?t=IF;5+2v
zK#UWK=}d(|(ezJ$;(nv+%}9i6W&{+YKVjZn>jV2Mp&QI_!V&cl%L)HwqG7LM%i}yt
zQjOEFB{czS11dlOC(D7XRcpW3GU<rNpJ|83+|r^Uw=z{~kzBYIaBc$}%2<v@Qebb6
zqn}Y|g@2PlOTcTG3%c)GPQ&Tu*Y9JcR>S!s0s}LOlT%tjXcE%H;z_Q)3|D-01?gH;
zSjuk1YjrKnA4CRdFUzmDS;e4(0Bl9dgt{WXctJ}V&58|@?__;}P+KJ%{tO=#N}3kN
zeJi~R>OQ4><n)(8D_l<BpD3E0CO%Gw_nj0A7fr-IOIx4Rb8caC=Ba{gm#7(Xi;AZO
z?cK+6x)EZDkO+n9$992$qQyCiY0`Lc3PHbsTzRU9AJ%)EZVAIGY1<dI>7z=1hlLgU
z`Mi^hQ|n@SE&f3<rRA9M3&PxU7pP$(p2U{&rC9&Fqa-QN&y=r5FbG@5Dg?W{`~m@j
zf8#$&xc5y9x$WsNsDCCM7@DwjlZ5+e_e6-rk*rf%Ybidb%$Kv{zSn)p^q&A^t^Ia`
zjZ6J`<-U1cXkP3em0tB!*9rVC)Q%<{x-<Q$2~$pfOZ@79_{eE2HsyxYIm1h7Roc5_
z@prPV;JPyPr0nC=dstfBu6abpx;AKtL36JqLy^a&Mt3elj-T}pzWGN0*%cky#*umt
z%YoET+iPZBX63b9ly|AB9~u3?d%^LV=arAHgZ;W$MXPGCYnKGVZ`JDCk%&ExSLu?e
zxgE=F1Fp;{QPp=%$<<v6Z01N~<?2$9kH=NB73nIQ_B>y|%Grb&Nf<(*5!3D&qo4(`
z_S*^6THT|rA8<r%iI?HpPD{uKy^xNduKVYX)nAaMru}^Bjg5-n(EDWrvGUKgvEJ8K
z|1jj|sj#0u7#gS>#=vEY+}nHKSp0yt8)1-VDsu4-FgyB+2Ft7JgG0^CxZv0oJJ=l)
zR*r$TR5%S0=RX3na>08mEHzbqS!AP<Q$sY|kjrW_gLiEkJ_|R|wt=r-dD~ik=6*Zz
z>P3bsbR1{-;8zNUy(iA|W4qkKhE^M=Rn-#3Dd)u05~1c#Hj0n(YvLwayP(q_<+nG1
zHWAs3{bxhUt7;EVsOEk5Ju-Tg)mBwc<I>-m$&!hMSYpI4Peb8`e9=#pSA%f<DEEoe
znla0uVMXX&_j<(2p=`Qqg{_x{cyJULz;&~{Rv9`pT`R22dGS2e)Bbps6%+pWcV&}y
z>Mdv>#=qW%M5pj>{gYB*;kn*+V&7y3WFe<<Y~_U7A^x3eNUH+#L#3x>bg+2@9U-?$
z$3f>Wl)PK6PB0>$B+AxG+yhrZHXli|6QmR{Quo#y8`0a=>U^Rzw9H;e!Z82q$L}s&
z2Mr;?UMd@s3%Wb$8Z3PdU~hRvuaEqm^#_e}i-{_a;mpDu7d-s!nTwFWA)FcEZVw0G
z_0!GOM%c=q3h&q9y!zTD&f5;5@47K2sh>&pXsBcyT6KN4uIVU?d)=nv9bVWW3XYF~
zk4#FBu%I0)A!r||A$KNegkB7xU<91g<MQD5J!&o-hWp^(s>MO(e`z6lrd7L|hlx_}
zwsuhhX9IC})a`);OS2P6^f&O{Bl~dMyAF_vRXx8H<H2wc-LG8O{spEL4<0nCT$y`2
z7`~Gur(xT<R+e`yJ2*(GaA+MR$dF)+#nlqO9Bc#}9!r&;<UfBIFP%`S8mTid@nZ)h
zv%D)O(8P8@j8XJIp2eP6ZnrL~5*FNaL2ZCN6)5YAWJCYujqVt7_1-p~_TwA$7u$~_
zd^7rIJUg{Jk0)gE&o^JY<SJ4cF~eo8++LG>)BZ>|<o$hvpX~wI6*3#lREB!dJ~#KR
z!tD|e+C$k~=@)ee3G;;JN)T5vEmDqS=|w;%Eh%sC=Zp+N`e7^SYU~W}C~#26c}k|$
zYNj%7j!gOZk%@o4-TIGF{48JSL9uSS+Ar4CjW%M0MF-LYq&W#$QD1Hh;u~>N43@tG
z{gM9k=qL&`woJ21JaqyK0%A;|SbrWMAQO8&!5^ZC6F<HK&H~M@^9;i02z3jPSi(Bt
z&2wHqzQDu5(+ETYqU0)CZyh))Wys0!hflgm(>lwfCmJM!-cd_S#Qq$lCE@bsJ&7N6
zecCz3UcL1H()R9QP26ewxGk-0J;3g2SFJ$mx?5`dDq3{qV3@jY%X%VJtM*kOTDvdx
z1X2!>Kr&iZ*;<!qZN&p7S_{#-kh)bP$I(&^E@G%bV+{~6KnM{6BttU8%<S(T_j_I6
zKYstd-|OntRtb}t`FuXlb3e~>Klj6I8NIg>O@{LO5`<1f3EexBXT7?<V7gy*@MAF;
z@M0yp=MC-&jb*bVbaJO@Q`9xes@sjRn8c;*NAI;Ec={wbTwSYL-n?<~i7av@Z1lJo
zHli*;Z{?IeJXJk5*>z-WH+^1H%=8o5y)UR|3^Wtlu_aNfUldg*M+e^{JdjQ<Tn)3f
zp(3Qi>9BUZp3$U@<;E-b+YA{=+r4-T^8TC6PS9Q3G2Hw+b7!df1a}ds+1b4u+4)&@
zaR!1T-4i^&xpgra9mqsQz^WJVWfK$$t6^$JL<aoo`fY1r!9d9Ex~VY)=x{<J8!j{B
z;0;Y!>z$?;LBM>;V!f|hyteXync)Zt`R{S-aTRXy3D5O(^sVZete?t^oqJXy)}DBB
zz|P|9>8&*_l2q(0NHHYSGh)J!zQ63<F6uc|doHBYV88je#0&Qp?0fcJf!2mt1t`$|
zmufK9M+?M83)xlF#<ti4leHaGQ{<<K!58TP%hW273X=Enq6N!Tq2q*DG*dP@4G_=!
zZ27ZA-D76DhfPoL2kG`Kt|&7auEyNE*Cb2*vg+B^U_`hIy^Hi#aTmNPVvr-y6~{zm
zLHV-TA9@-D0ccDgvjrK#6n<BW!&(+5Z0q%5k2YmUe{4%A>?e{)^VNA<y{h&>LP3QK
zRMB+j3=i{s)yaa#;!SkFSQi?AY0GQ_YaUu5N0{1Cn@6~|>yMAj5O26g$}YrQL?ID-
zI^|E@HNtNY3D<m9V;?qGMq8|41HBQ3nghh!#PL-~Vdq}2`Cf=&iwl=@vc;v&TCd_o
z!Yw>+H@3Z|)-z+H9MJK)xtGNqQK{>G%>&Z15%;k~$eC+n2gB_1gbh$_@DZBnsEgS3
z=v;p$;7FESsG%ZM(!CC2l6`IBiq)SrnGpdQPPBLM$ZkZoM$~Cy{kLR`yZD@Gi%MK*
zK}g}Qy^@?gI6vPpWAue7y2g;KwIUimaoUtb&Z`~s@zI#O)Fgrw)Oap^R%1x0C1(Y)
z-T2hwToI-pX%k9we8PXD-S=wZ{Hl8RiwrkL5^;45PqKoqQtT-vhu$3&(ilmqy?bqj
zc(Gb-hP!cbmK7z6*%d2~lp-%LPMVTFBZZX&T4OU1`@C~^p^-t3Gv>l46Y=yX?yC^B
znL54}>zrsWUXnz;N=*3QNiYB3t301P>bWOddQ=EH?64nwr{04RG{L=b68Wl;#5H`P
za++f2PMa!!GZ`2crY#Mrs|(2smxhpW1~cno)PKahhS`;I!-CRh>Q$%08|7u(@0<~2
zXqkj@WsihZ{pDv&?v$k}l9%sG=v2QC3W-&h(jd%)P$R;!Ul4b2R3zuP3lS7Cw;qJi
zJw6AEo$bZ}f-3h0KG+To#GbQ*u}=Gt36bqoD|}}tD^-6;mD{ag)&zO`NLU*Sler#m
zF@YRPg!Pnu7l%qFu?oX!o&%E~;ZjK0Sf_)dxjkgU$DwZXh)};&$h1b-izJn=OXM!4
z5;h8=fPB0JDRhjy*qDNP6z}n$Wf41sF0;bFXErZ<1~SJ?NT#D#mX(lZ&gVQtS}W?v
zUy++hx$~b>bR!G!QP*m675M<axQ1->2&y-Zjn$DAW8==-DAD7x|G~KE8qE3SdFl6p
zDgcX5ua6`V#qzTN3UpR*K*@$-vmOQqbZBzpSfNZFP>p)!<v%!alyzPjSu5zZe!P*J
zUx$))U#5@=JdN3AZ3=EwsEbqG)H#LBr5oYZ5lgnLRg(`L$o;xWe3e;xu^f+bDVv+d
z5sk?Y^w%-vRD3ic3=f9bGk1qYOm24-tuLSd?e&RCov$wxozvw%?_E@It9+IIuv4=x
zF!GD;tiZ2hq~D5!XLjt$6(r?~()3BnkG2sO%C){(j|JJR8k?%sS!wr(ee2KT`1mxa
z+6VlLma}>O{{O?bRT!*=_SqbHgGLFHsxbCX8%IhE3~f3)aQ`9#ck~$RPT+2znWlNl
zE#%UcG`FQ#uRVXZY;N2rZ6CZ!Up=}~2xc~4qlSWm231Ny8hYK-C*4tXbxg;F*4vf&
zJJu@shn5WU<^dKQ<APB>`ip3gcmGwf@{=cH0(HPARJ0vgY%vge{Zcbkwn@dYc4Tjg
zxQ@@@c0$-3??8`r>CcFC_9i$CNpBcz<{_(dq^&X|AoYEJwSvd{9yU1{FrA0r2Q~R?
zU&vo_JNTDNQfhsV*|}_p8FQqvO%B&7F~tev*vVAOQmMIWrT_c7+A~M0Bu<T$3RAy!
zaW#^GoNwUr3U)V3Hn^zH_$At;gt{8%?;OUk!)dw|POs}{#y<veq%xMc!%=01oEOHN
zLlRyjT*Ta(<96{MRPOdr4ug4EReL&Orl_*aI+2Xd8Q64N)uAOdcAI=IvhqJEj4mdR
zoppna2)ON53kO!Qg3l+lx?cHW(z=?c?8ii%{3FuK;+EEV@1H7h+nqiBoH-a?p+g;}
zQxj}t2;qA^ulLj!Lak1}@)CI?>Lj@-$LAHQXRu;BQN)>Q)TZ4zJqV9%J_KRF(8>_A
z)q?F}!e+!oUIt;$yqa@~kO(V+h@b4VIpfEI_Kd*j7*%PU78!mJ!9fafZ$Z-F7?RW<
zuT39iHX)_k!|%c%ETU3L>Nb^uN;A}CaE!e2RSCnlLrJA5$V2;hXuc0af2Puo8uDMV
zpz(RtN1ZrFC6G&P7BE5c1VSOEqRLUO1tjObvgTe5zb>9H*ZXD8`s38@@nwO*I>_ri
z=I_0LyG0lC4m8@=j9gwJFF!@zOc6Fo6VrjVfHEEkVU}LfigLxd9T{Hv{d#H$Ls9B}
z|J$n5jMBrDA;rwG>*pxR8}dkha5R%^_X@Sv^^@sQ=v923da2S*a?g1Sss;6*bD@-_
zk_Oy&Uf!`8e8vx}AUuWiYI}Sdnv%^uvNIS>!mGcg(ogv@aaMt%2V#aQXOvEKH;p@B
z39k5r)5aW@_Aq0b;b!9F8i6#>_KQ2PYBHx2<#fV~6)@Q7=8ac;9M&Xn>NoZbH#U3G
z<aWX|HH*Qp=z96d<qYu9T+}8qfA$=63yEC;^)~>EhS~yK!50w3g-I6mCe*b!Ee~f5
z9NLkBzd<u}yocY3zxp(0vDaxZV$f#e`Z)@K;C47@re40#o>Z@@IW)bP&$M%_e-u%H
zoU|Khqi(BL$QZO=qk2Xr+si|UF!jkW{Mzf#CFx8crKBP1E8kdAI{vN{8l3i4GA_9R
z$hPb0>*Tt?N1=@XC8$pocqlsX(jE8({Mx*y{utB60qeyWll28<&bPgy>$#Eq*zZxF
zS48M8-Vo|CHEzqI<)0%{N=-J6_jjsQ=B`rpIHv(@Dz(naJ$DhIp&aD>aHx?`vC@RI
zzk0gonTU*)zF5!!0u_$*f*=+7M=5kSw&_f>55+<|xxqQPeF3uPkNmd@(|>3(K48^k
zJKp!K#UXZ!zU6T4fGy!m#=uNGokCt>CWOSLu`2Svf{q<!*ECyL^kM&pXhH`rWRU5P
zUd=(8>4rJ-R3(JLxL>ZL1(;nTFfHsKvMjbU$ZXJWyXkWl-L1hMrUS=;(^C@1I}+M5
zZSET^#N=1R`t0VBd5(Wd^Vn>M<!E3`wI_?jnnArSdHb$OY1aD0YjN9%&t`N#(aje_
z6&bN$F$4~|8WIVk&N;w*gu#6lAt}0E3LV;5Q&?zHVn%Y<o;Rw-_?vg<c?a`^0-w{+
z74XVVlo5bK){=D!7b+4nd=g##9500IUik{YUW3(n)w~9pMsx5z-2j1dL@e_>&Qd4U
zDfO-ZfTR%&Zg@ewId<EA!jizTX+cYJh|a1CUY!6E7Z!JBb*{rg8Krsd{kP+{MIzAL
zw${?baz*Lxfz~u>oZl?>-n?UW2KqNH2J$91TnF-^z1HhUnzF0~0YpXNY2@9jZF1Ml
ze@d148WXWU9JTBMSSkb>r$vX@`<f@C8&d;^i>n-$MaGbPpPZ|g1F)R<C{6RBw8qyx
zlqer=4ue_?uj)cQY3s5aC*upxGy6P{+lIR2)SBWKgv8P`eHgnhe@nh<<6AaPyz<7y
z{W!vg+SP5UOuNBitt2a^y_3azSno8#q3NOB#iiaAeNzv#y`^**^@gsNV>GutYaWWx
zz(JG$^HAH*ex%@uBhn$_p0aZ5#a;2U%kz~w)2Dld4+i7s;ZO@T#iHG{P#4<hFd;_5
z?{Y}G_f!GqMgfF)+TQEnl&a_>`G=2MzKb1=d<(u`hDP?9x<+R>8SNSX@JcRi0^v1>
zYdFoq2zNoOVhfNPJ@%10;mfK6YEKiu?S4l2S!w3etbQe#`Xx{<0{pOz2y=f(vluI*
zi}f~p7`<rTW*CS9s_86DO%PX<7Q`hbmdErjxH(9adex93+j?;)euB7gCN{D4sHK%m
zEln#=`n`zD@5b8OSyUq+l{4(HN1WFaU&$7qMPp(QB6AMn3|`PRwIb@DUq$Kp-v@F&
zO!u?<ALTe=akHA+u=7^bozNixi1+ShfH481CN}PxGP8ybDy9zZ<&^&(_gB$s_&$9y
z$meGcxLVZ_S58mFwlB=2v6@i!hAst;irBBNic_oUc}w~1nOYo(SJkQ-m8w6i(Aht;
zMrTOnScu<Yz$?TpU?$~5FSH9J`!kN~rsKAke{6>`;HclBuaG^7oK*%02Uqz<x@>{t
zWoA}j@Bd;C;(tbdetMmw<_A+r!9CzUt2)Efsv=8Rt~oeZv+Ql8uVd~lo#8&RKzA1?
z@>z@Y{+ghR&gq_3bpbul==0o?M3N=W-B&qCRUKtm_1@q@dwKAZ>|2CIn0a^UQMX4M
zKYEAeYS!S03Dx`5aEV2$gfO3*`L#&MhrrzcpEr>ulStOynRgygbvOrg=LiI~I_roj
zJYY)oiFPO)c3|_=!XbbxdkNlJ@#IAU`Jf)-Y{(597$VlAt`_o`SyBPEB(hwjoTPgr
z8K(`3RPQG4LU9v44Q*1Gs0{Bk-73f`a`|h-={ai2L(h9$CIc;=VyRh#_-MYS!0rQa
zs&GWm+V$PiK2bRJ(%&~%a0Xt^j!c8hPZ6}>)&P+4!F;Oy0X2)PBtmglt1v~)z|R-z
z$gTsNhDgP&^y*NG8X~(2aS)0?Sbj;!5@dm~2XY~V8nPAaljD>#tj1EY5ilY|{QezL
z7XjD?giL;pK7dMRWuc6tLZbq|6=IOK4?Nh;;~<2H?*j?{Yq=0LCG{hcWKs*BNNv5x
zh1frS)FMcntO1{CV?(|6L*$Usk2FMoJhs!#X;SLH__*A&+ku*3&N}ndzevXGc7p7j
zE!yv`5VjK!#Fpk4!Pq9nEf`aN5+@dOAyA!m|H%aR5j^3Wr}2++cYIm2r+Ga#ubVqK
zH~#RRg&zDilAFKV0Apd6I1iQ0r7n%aQy*wM7CR_aeJ?C=xb3myzr-s-9OUYQC&2X^
zCf1Y=4|oQ&@s1$Fj(SuW5IUSe8jXD#PslB-CPV*rK4<_KC1APx4Qgv8bYMaV+6rm7
zP)XCmZ))oYsyDHIi+*+7LM#?3FD|T3GZy3rnR-ly=`(u2<-;r52^pcgdr3UTv|;Jb
zl1gdp=%~ZxX<fHkh@i^L<Qesk`{QHG_<dGQCS6?tyo8mnyh_U4vVOnU`yOeolp<M|
z@<uD<y=wep2ep?nh<+Ydd~=>ssVp7!JD2cz(;cENg#umP=P$3=IFio#`2>F8`(=o;
z2nR@(t)-_5>}Y@uB)pSiSMBD>)%`K^@vWQn2F4WjV2<1ac2o8%JDbQrepE@9<?BL7
zc@gIQ+K%@ALDU3kZuQh!mL`9nLpk(~YITuDPI`r;*WqN8FRSwBjS0tBFH%W%hDhXs
z5xo$Yzp@C}0@RG<ESPlqrbb0XVQi-$F|*rdAh^OamLtS6G+ED9nFBtF!xVUMQ6R0{
z<bttK*5U!2Q%23oLVix5(siA0w2qP*+Q6K%8#2(hma}S42Dxi2*Tgt9JIaU=E@7}~
z=<@Q%b_L_N4vmC`%4JO!yKZ>Aj@T^#g*_-Z)SD8o^jKuGmZ@and7}d9eEg+hg!~l3
z$&bqB4P?0d#cjmVfkzI@Y}<YefQPEcrJYu?rrb=n6xeoxs0|#sN9?`a+!v1+z7pb;
zEX+&YinTtQ<tiF`Uzq3VMF5axl30Qd6__(1DV|y<ba}Id<6sgA+Ty$I_Orkl+B&JK
zzltxYv8yKZrpQy~+UcDs8M{ZrYufS!dAG!SXdTrH0peYUdVQ`y-c{q*8#cD0qM_wO
zakdOVr@6o*B=;61?=H$Ys$$_FH9j7yvwo9Y?zMD$IiPp@)fXVzrbN7YqNXkyFCeJc
zu20o%a`yS`G&8l#sB;3fd_9ODLQF*Dzo&QVX_w2d3_*&g-TDQYOYQ4yD7Ir9iq-d|
zn6$8CC!v-ICzv#9!Pp=wwZrb*zgni}!WHC0o3hyR(5~`RdhWSpY1VSW9M0x&I~WdK
z+5GmcUd;Ds2esM`IY~%PBd5^Hlc8=)uc_I(*@hN#FQ$R2h;^lE`IESHy<~~QEo=ym
z3M7zLc_8=Gjv`5kY}c5tFD|I{C)7q}USO_Rob}gyZjzF{H(BR3Te*0zuQ@Wq-IGpf
z&StTM<zFyIxvsMVkIZZAw1eFOa<X;@I&EDv#VuH&K0dOW+}OU|S{)IV?a^g8bxi=7
zx7HrF7eS}<FLMSeYXIF}^S2kzeX7dGih<Mt8V^!szt76^33c$xo69{-7ONzcn1VFw
z05UjZMT<EwbJHJkD98UeTsnmg&(At$Qobw`lc2BmBK09i*lmSrI$5%xHW}Bo(WtZl
z@SWJZMO7V=A5vt@GWG7Lsx@UUb=d6sUF20u=_oR8qQ5%za9VDh*Tlqf(!3jknTZLM
z6;;nxg=pO?tRApYU=G-yF=_`q#j-y@(n7J4we~)@&k=ONBjmYFUCnF1VmXR1vu#Nv
zG9YJ9^YIaN!Cg<|gpZ0(!Z6tJHAT{T&r(IEwLW-+9sAYO;PE0IyukAvBe=J_MGbwV
zINLIz_+g5SIDbU?`dWz;+Zk1#O%tz2oPjv_(*DHOZQ!0+QOw%f?4J;#;@Le5kc1^N
z(R3mAj2(c9M;Uk0m{8>?-g_^8+Y7n+X5@}=*h8KS-W;${!CF;ZkoJV%^$w0$1NiZ~
zl-rDz`CE=!i?NLh?)T35b4rKPR_eVI9xp86vsUWNMnfYAO0#MV;lvtEYGP_kP|#t^
zT2vk&?$%BjHt&n&;xLnYEOaExwE|X{S6>8tt0yf}V$8<Mym62lb=ce}l(SwN`%iJ1
z`x^?g-8e5~R8qsWcyZ4Ke+b`U=<oRSpow9fl~NPN4ECZ@8|7{(i!$luhzX3@E(=kd
z>9$8o_p$#|oQnz>pZuIu(`DtHR-<7_Wq!^ZW8|iGDB{<Ak$EpJ&1Q5RrG2qtMA179
z-}+;8K)oc*=hEs@>+X@YQIEy7Z%whwR(Z`&G6T>_Qx?FtzZjrHK<$JFJ0H`R*IA0~
z=^VNp-5iF{6Ul*2VchhOd{8aB;f&O$=hJ=LvkHKdg{vPrkJ*Y%(`R(*EZ6er^Ct@I
zf5$6sM<wphqtbivO4=mNgk7<MF5>y{m@NhO6;=D5a(KVlK*`nnN=Mzd!aBC{N|pU=
zkj296+dDg<R+A*nl;Ps_L)Sk-5Io9Dht0FY->AAmBT%X!3^$T7I>5<f1r!eHa<Pfw
z3*mSJtUlaf${&_qSH<O^Z2&adRPOyM@&tp#0{i&JOpT~Gy(A<HWO8^Axtn4>NU<+7
zSx4AyT-*~(+zCifDBW$twkfi7&wHwHTDd~s?aY;@hoIJk0EZ!0y%m?!hgKPO3Y$%f
zU%V+t0+PCWcyc?>4vjN=O@>zO&#`q&G5&@+ZnqwpQXJ>qFYJk@JvYLB4QZ9|?2vSk
z22Q*>*Q5Q}bt6ckS=u&<pCcDV)sM^}H@guN=wwLh{;gXG(wzIIJK-;4zeC01Xr1?w
zl6GL%A3cCCmd}TbZN;}j?bZI*NDS<Hq?YKXKRef$it^DkpNCpGH`{xanr}`x>3|s8
zKtTOAhQ4Aq+A_1UM|_a)Sq6PPB0?u`RXjPC?*@6P;F(MbI;(%<zcGL?n=!9CB_bsR
z10t)TqR}6sXTuy2PCxTTvY1Cl?jsB*oG-W$0p8@ZR)XnH-Jd`4j(`P>Lr%(CRynxP
zJ)st?x+&ZnvaA>RlKrSMjB7`<Y(@SDtrF4V<7j{M?!@Oum=Dt7qu2Ds4ZHg1q!gB9
zfGT`#ayzRqJsTLTbFO4tN@jf{GMfp<K&d(!N_E<d1rrr6Cd<VRukE3BKdUkX1BmH1
z9lX^%BHGvA{syRxa&m}lKG?WKNxe?I{C^7s|9hNvn7$aHwsf?6D7eRdXq;jsOj&Fi
zB8t9qp5yaGfXdn5n^tV1lHMYMEV`sB&qJh9xey(3;up(3H%$hkKB=~wk6$NTNhS9d
zYLenY>Z+Ya1JRX;c)Wz0-vB`vX`DJ$duB`r;_p@A8g>n6)nO52w6K>wH9`J>x<r^-
z<26=Jr^hI>a0xA_8dgGqgU;N`=jWs2N;r9`j;N>~M#$C^0E(l1SVrACR`;+Si<FY!
zw6a!NlbJ(=n7~Lulu7#8eg8xrK2HAYhcS%|&_7haX$d0Vo=4L%#9;vQQQZJG3zoaz
z2HMP4*OBoPdGw4@O;yOv$SqGdHVs3G$hrkf*6keO>VVb7FFzofD7HTee-iVgREGPI
z!Ht?*-~+@14Qx?r0@Xcc`5E7gB5yE!BR~>h3MhX4O=oYpxoVcgumXiqEYj&RcQZu+
zQd_sc<X$bhF{TIxc@`SxK`nXZ5(cgG6DP0%{0_zkHu|$O{-PgyWE1{rdynMF?vIX|
znBFsDR)FOaNsG))xm%ObRgDixqgR77jhtKCPB!I0FgLdDP3wK6TYECWVwf<Vs?>=+
zZAZ@bp7|GwbME)!7j3lDuOK#-m*}=;t^V^)1cvGl3zLvO6e0T!1o?YJp%sIBaQfF5
zk@gf$K+OC<VE(%*{T_f{_3TzyU_#PIyrK|4co(l~aQQLQwr6q@^sTj|f_u4V#7N$H
zMmSo!bl~u4u+A(wX>J|;cCCU_<vw=p)TfupIq@x57VdX*8hsea*1gesjZx;L)bqxX
zS4gNgG3xZ-i%yq~^O{nl-S6vG8`y$cs?(MaW(Wp`WODc7gtSOY!kL;U$9@_RD}gf{
zs9*8Y>;6l!onmYnD8>$w5A9})BiS^TRmmu7VWc5tEJJk-mK1Gq)PV|WCsd`)fib^H
znm9r)+6XJa6YhUCP;`cCw|(&Al#X_4N}w2HU&fvdhz;Z}w0GGy8a9%a-k4vx;dol|
z$Jn%~3>8(v2!DyJk;8a-jQOGMmPll!1GI4Bo@%F<+w8Ot&vUQL&L41f3p?&T9{75Y
zlUawC9Bc7O?q52MJ3WX**l)`CT-&!?qEl}$s{cJs_=nPYY6n74`TeRL8|20Qj0ZNA
zI=>j?#*%e|NpX;k{HJimW}sUYM&PaIEyBb}8n3B77JcRYUtYmuT2t-%vmWo*SO%|Z
z_}&yo(i&XN_Hu!}*FuT?3}TF%qTI>L^=Hp>ti%0C`QfQA?Cb`+Ajw#&=ko@fkdU-<
zj_?Keu-n&LRXe~FUtsUuz^)O&#i5x-1LJ-wt&+ZB*o_U*iwnxnn8weRm<^G1qr=x1
zy}sFLOKOjY&P-yncLcY~fACz`Coz#Dh${@7a8=>F-z1CVv&RM#G6Fks#sHfXrw(#8
z`v5PzY_4AM5JCwgS<dcyJ^f5w9U=D)tR~zd#GJk(<qEg(DrU3RAI=55mkAVv(w_<J
z0FUh2_y?`5vi-O{>YY9!Q?%^ns=>IU0sajOMcY65(ns5!6!|83{45?qWTWa@Exop$
z9-h>F@nV8tU<HGJVomYSU~Juv)7C%g1M3~!hk(RtK3C8I)tE(<I`YYq1%9{9&~@x-
zu)1^|wb{qWvHjlqlJh)nFF^BmyLkytjG*gsJ$qw;+*h<ZViDAYtgR`Je2~BpK5*Dx
z-myt6pb|gyWTEH%m}U4W7)x#%-Z1=)FA)|<a|A<s(I0dqjdwQw$)M|w+j8BBDq7Oj
z<p1O&gPh)_&H5ZSvv~v6b#1a~m@Ni{AG!wX?*X=nO@d8{!V3ErQxq3om^2BUSxnk7
z`n=AHGo6<klBOD?+=E{G>fnP;P8GL>m)1;(6;G%T1j!!lY2QxPsPgO#*|5Zmkk&pN
zar+_!@AcebF8uSg`EtDZ$nrD0jhQx$VOME{%y}=yDFx*mimL*F1_4FK6@hwT24;yI
z#Z0Kn!WAqhf=%HU9_NUP(C1YCV=Y;(!m^u!Ki%v8qtfGoxp(jWBaTJt*9T$8y?yZ-
z_aU+W1v9L$2K)I1H_Zv1S$3m(JjwD!QK#8{(dFl>pZ5f7+lwScPh{3Z1>%asZNG}h
zqjNuEcs-evWo^rLTsVK4wV_Z0?!K9;{$Q~WJ>pB8)1|Tf<Zr8>?S|iDgx_KwJsLGt
zadbqhKEo~Uwvs5B?!7i;klPwI+^VhW%$BOFE;+r^7B`LX?=<>chn=79jdj}&=Xz`l
z84kfPoJ8;I>5k&O{usZR%xqE61$Jxu<zyRvuyt7|j>?ueT{^XDEhuMr*iYvT-?>MG
zv^k97(y_wETN?@Oc`yKx#RK1h-z%uh#_8ti=BaZ=MeAA~)=pK_e>ezvjaZ-W&g`%W
zWeK9t+Xn6hb5f@5LU1@4f#Jwiu{fus{A9D8MXQ6dxZQ4C_Gp{UW|!6g>m&VgP>*yr
zqr_CZw^hHOU(IopZYwRt<f!km7Cn>KX#xi#yoSy0i_0u@?|Wx$2}jud3`pc;3Ta6E
zNOuu>W4fSL96Qg2L2NehL0)?r+GI#V4&L{>Y#-hyQZcS#p%7)UOeV_=(dQv$R_RZ7
z|C1co(=G4)=sjjHPx!04(0bOiYHh~%@JvBYp@#Wju_96{U22MDA-xplU6;KUEFRY8
z88iK+Z#jE-*uEr<Nwd^VdsD|!JzE!}If^!uXZxOGkM%!~iXi%9X$gVMB;-moAF52U
zzPF+SrQSn3#J0^B$$$j70n(A}jOUS7MJ)*}kHrFM5942kCaysteJhl77ds7+MCzAW
zpP%%@<+Uu%;=XTr?sl|2qHdp9VQ}SXPQr-V*W9eH1<R(rS{*j(eBq;B0RxP1bj5N+
zv0is>`aRh>lQgdQ3Ii)Ci#ov^XlK&GvT3ItNxFx<s0j2!G@IdoV?d^zsASoYGh|p!
z!WH}kfkK~%^tl)Bky>Sr>)u{=lD9SD8UM-stbC(L3>;Kywn*9HPF5YRiq&So+{qvK
zCw_Kh>Fg0l--1ChEac3btf(Kbx8;G|MfoCrNq^!z2eY1^rLA&Vt}TBV`Yw1a|A@y}
zT0`UFZAK|sQs4+j<%+71;CjJ^tzJTltYP7j%)`Zd%`r2a?6!XC(j3g&9V1h2q0>Nd
zz3gwD%KWtbhqayBIEB0PelM<hMIxeZ`QH2OiPYNp%3muBi%$%AZhwMDbIZ^wQxBEA
zE$z3J5ssrR`=YfRJ#brf?=N^0NT_5>7U5GEg4FKdq<exR_0ze_u9a}9*Kko=%VNLT
zRh*!umOjm!TD9MtlTXSXkn+qL5s614bl2=iZVx&QwU0Y+EOnSy%t-5$rJ1frVUzAV
z$8cr#kI+y&F4Po!)#%R`_WDg$PFt6DS{@)EN_2stx~Sg(sn4pRMn;8`(|u3~uS&pz
z?MEOlJ93(86jBg3UlB_#Ed64X+d?+6eW$+{)I~4P>uS#MGNk;$f&U`Sq(RNczYngt
z+<G<(31Y8@mvcY14_L9_TJ#gRKg`q747xd-oYTD=3HB|$;1}@8t8{X&koicIB?rZA
z0#*;oHZxBZMY%aD>4#tH$RUh@Tym3iw;(vvd3_f%u!NOQs<Bh8cVB`}b6$PzO?(Gl
z;gUnte-W?zKM62G!@r9=oV&z1<m8_03sa6rUkX=UHzoXR>M4bd$#CsJ3VdJAbj}?7
z#a>_7epBljA)idGHl*$gj|pDl12vS6fDXKGD!;y#9>a(KhEZ(O(N#g4Ka5w)kW^yS
zTf$?dL#q6ty*y?CONP`Q_fT69C6(zNbXaHRz$qfi-HU_b^VoOO1mP_dP}EzI;5mMy
zu7C;#(uqMdKnheqct4N4!IPDzgWV&7uE$^0l4Y^@2He8xMb7SsIuKOigy$80jyUOF
zZ$T1^me4)Vq5(~V-9i|8v4R)G!?TB@LLiOkZ25`b5uq5nWgh1^%tF^d<JJCrmV{D?
z-S?d9cAm2(-=R@ocO`a6QM|)K{9r#(i?it!k(jzwj^+9Wx6Kq(2Q$;1Q>{IIMX0O8
zK9A}?LFy`rdvU)4ZqU)yI7GCIbX&WFh~tFZ5I7W-UQ@5Lx@@hRa5qemF);kTZau$?
zX1IpC!Hj2sSF&PEfn)##Boz?!8nzj-OxCHEf$jz|cK@Y0(o&y?9nz%V@y#eQh~trN
zi9iZYXVG~@%^Mg`DD?sDFw}|jhH&Jyy#cU`0+1=Quw;p^=5tmZq2<3nHE)qv%s6`%
zznWx6L(D1!HiX;yrzkKZNrUg}o=9=qR~(o+xE|DE`SBVd=%SsqdwA8muP<5-M_e}n
z?-P|rVd8;JBxsA1Hr4F=pNsRWe(TjWpw?R9W`4@F3)9sq=;2Y29L;n!$8$wwfV3|C
zBtPdi0gt0I8oD;AYsi%GF!tHgV!Fqa5k-ao>pg_->s<S=e80luVx+;JMw{2h=giig
zKZ-Wo4Z7Ws{xMo0Gv;*nXW8}gj8?_%==Z;=sUSOHFTO-uDWrgIwZ%FtcFylJS8N0+
zlOw*Wn|pa9ZkZYAk56bry1Oc(qpFXHtISA13Qpb_<@_nPPw=c+3RzYo#X!9hmIelN
z)m2`E$3u>yz+s8}9FAoiqA0?BeK!^>BcnE&tFH@Y%&v|zqol5#*|nY<uw^tEN;(GP
z732-Y4M~ad1^*KIYd&6$^1xZpt)r}}jvt&}+Bv%lFzH{q#WaK<M&E?_db3$^wMNyR
zvu8;T0#PadZk$hg8BkoD3J{X86AQnx^6%NUB!@AxKR?I86@Lk`HfFD!Tp=&gHyPxn
zp|DV6YTQwNerECBZ+l%T(TGTikTN^EAcg7)GYtuR%~)>m(17;A4mCM6%BX)YH>)1=
zyMZP~wiV{$Os5qK)P<?72-zwdl34B-qMVGOsgk$z^L^+7h-lk(3dIcH*tPmIIx?<z
z1icRJ*<)i9b)=UK)jQwUV{1_B4IjGS>EjT0e2|-mJxC6@F#eU?^fdlpRzLBag|ZsD
z7*UU9^G<_r%pWe07QtZXetn5n`?C*EPG}Y~R^NbscVK(#_Dkv#W;?&xkUNhoCqqdu
zeJcSF2)7mf>}(Qm?!4czahp-%Z4E*CzUsE*ip2wFOqZ~&UQ24)QDwaC@#<Ph&7vLH
zr~cil!FW_85=cwUADyTJByeQWbiLW>$IcLzA!i`+PK&<lv^Nc-Ooz8*)oP7%q*p0y
z_7@M$3|A42G$H%f#nq%-WE;|0n$%RP<Oyp`ci2$)%up6|keJi$nM1&MB<O}lrzs4O
zu5$?a0M{x^S)xB_h4bwH0k5{-ybQ<sO8#mRlCrJ^h8ox|5mM%>>&7%&Et=aG-^YVq
zk8-2w_`Rx#^IWv>ZoaowQK>-1Rj7X=x|aT#)ha?40lliPvdGj^0`)iM9|AlnFnAI7
zqB%<-x`lAF;YB+Q*$>N_m33dZv8^ZDEe{k~w2w&ECGCBpTdWg1CXSzW1-Mf}O~~Xy
zRi1+b_p&(wYBCf(@^o#<DO(2hHSB!z#M-RD7L^j|{O`?pk1*f=9yd3!S=h|jDl3?5
z*M*wmPzr)sCB#1H<qtdn<ZMjZ)X(OTsnpO9={R4l4qa;gda+Btolh<Ro;|L6*qG9B
zX3x9!PeM`1)0<g=uy)Kt#twpAQ^;gCb3l_6ukiWZiG;4NL5tMLP2ji0^hP!lGfz|j
zQ7%kO^HNcetRYEygnOrLxrsDD`^wakkNKLa$Dz;S2czWrNVFDVmc3=mi1bDAXu~G_
zedXO`=(U|;x^r&c?0oN=X?T4A>oW%2p2OQpCl%)(-WE|<7xoMjyYFbkFG7@fcqA{j
zap35FT{>}m`^9HhG9Ia-BzJ?->=>J#*R9_Bt=QCB6p{hCbav#sbN^IIyuKxAHtwyg
z$>Q`e;^u^zLrbOz;i`J=msz2w&2pspr(yBrta8+2O21wFVbyV66b1pjgFZ%VNbbc&
zND(74#NSLJ?wH1r7&5Wx2;z-T3$4E!?GCj*3L6V~umS+CnrwI;8{T5zp0m~Mbr<Sx
zWSbaT8uB4ijq59#@I8#1Rm{e)^nx{a*B<AoyU{J=-)K)uX5pR28)bLLVEE~l0z2L&
z9^%!>78gx44H3o4Jq#2`RHPyPU?O97^y9q^-w{`llGiGbkbMsIMe|{2aYM@|&v~?a
zK6bjVXQ6ZRW=&<%TfuNX@skb}w0BVGi(qsL(b=uCw>Z4S+gZNf73=mt(^*tw6W4D*
zCh)p8+U_1G^>wEevLQj$V)|+gZbojI`ke<2+V%v;5<c_J1V=A}#Ib`_9zAOExtMk0
z7wUau<MW)FrpxydTj@>({k8BHIo?|19e?n-Zkp935fO9b;P;^ja6&GYz{Kv7)_g^y
z%M<7vZU%Peu1e;oOPUNl^u6FD?n4-As9fxjYrqI;OnKzC?yHlIWrz6(ZpU}`3fDq*
zE2jQ|Fu6Q!&I?Oa+q3duWvI%sIcgn21a|Jab;lgkx;x<;33-m&kyj6gf>{zqj_hhs
zr~{5L-&1IPNSTFIwLnrY!{lS?Z)eT*FvX4j%;H}-%9G->;}e(M|Ae+RVUP4Br0Ys(
z3~IUV3m@|bmHKXQbwyR^s%Yq~H+aEjoE91EmFRkZ@pOTw<-_8Pevqu#tJLbhMh?&R
zhL7Zh@5$tN_(eNAI8C@Rz%QsWJ;}6&(H^U0RW{umvQePc8hCX+Ec8n?2I~_1Pm;7~
z)%{-eR`tKfDY<!&$IciA1Y9zb=j!<C-{am(g58oI7;SmZrO80{oCT`-`bqEV0gDAA
z(@y7&P7-rbnE|IRz4oJLDocTJI{SHnN_klKr+d*JA;v848CXWXN;MwVp`}*heUPF=
zR#$IF(16rO5fdvmBHt|{i65hBd{>m0DShAjq8KKpew_wCC(5hqxaZJUB%C{?-E#e;
zh@&5$yHkW!%S(UF<HcvnWFo0e{oGyr5e(3})d+uJgiieRe)W_RnwdP;y}Skk5s^%i
z-~Z*+l}D=TNbI+=Z#Pei7OpNSrxp;e{=b0YA*F}L<vx)Tv)-QYQmhj>ARaIIc(C)-
zxMZK>g)z;lkOb`yr`$bmL{|*;LuaP8E;LNnl)wqnm%7&hP=bltJ*zz)5mQ8I+7L=W
zJ$yD#{_>a3q5dpP>=EjkrwP<NYAE;V^OLrPk7-D+%Xb@&3swT!`Y5?_x6JV0-he;B
zhxb9Bo!3DUfvDls!fK_?t8F(WV@OOeudYu)DxYvlWf(ENKFWOuOWr*wu_CzleK=N3
z=?G_Kp7XMv2cd0gFX-5yBTgwDL-t8G@-h6}HFOfNmZ8BYEVkDg;|$lh9%|r=&_g4^
zLaKj*pI=}*X+LJ3!1_|p;Ya0sP4+ZSxIV)y6O3JdF7w)jP?@_W6(|p2W!UW_8i_7J
zuIQCG+caJw>(o|Tef{Sw`L`@Kn;%c!`xxyIk1*W22p^AhH^=)q>;vRAHJE#?E+~Wp
z737)(8XJD;vnQ`ZY7Xtj+bZB00MZqw#@%uB5p0KDrau4jN)|h#MG-=V!9Dq&&e87-
z<_M<PT&W_=hIFD4z|f!r(F0fIB!Tc-@c*Ucl5K9=RAjVXAfbT+t@jAZY0<ckiPc=8
z<|`GTfW_$W_st`daTWPGL=F!h3KiW4b@bI5^`>3_h{Bx{oBk5Xt88-i>Fa<CnA^#K
zzx`tK!rR!+q<n5-knqmhZ89Oa2Y%pzoPC7+|Hj{(x$%ip+aB%GI2n@euet{N?CuWo
z-f$c%c38sWvPZ+eJ*H$p5HYy^`CQh$=oVJjcvQ?7M}l=9*qMEer_96QrjLg25NA#2
zZj*POoWX&l92vT$ZOOuao1rD8DIkkBVI$q(;|7dfmNgJBY7nNsx7VbO>GoPUhiko>
zLT+~MA((lkC^PXpFCTr_&+*Ik>c{flv4RdG^=?gw2xItJ?cYV?+1-PCIpX*$$ITDa
zH7-iuwiZAm)xf&C=aG5~?eVY<F{jv!t)V^;>9h_Cr^g1)U+--9ny34S656S4WvIzi
zs9P3zF(t#cUf(sM>>Jzs&*V-A#Q><hhQvL%CyOs{+@u(B_g1*5l8Q55BzAGtN8N>X
zcOZViPr|M(Bx=|J6-;q<3o1(ZC)sJBmO-{gG#EwX5xGGY$Z*M5|H%v!X)sXkzTlUa
z<AXyO^ooHcT+#F7Iz}LhRzL~~mM`Qb@vwPz2d8mDm`=~odev1IUoeI_rYli(>e;PW
zwm%kk=gu5()1EuuVx?GP*TrNzDFYzLot8_OVDnP7KbK>{ck;Uyz3I>2Zl!wsqf;a7
za*HuMK+o`ig3qhxe7v^g{KgTLr`u?~>iHJxeE<&JoDTba!N`12VB5TUi72J?@LqdM
z{v<DxWpSBOA2p){M3cug+*qmow9&24=w}Z)0&I{+N22*}(VIEK74Sze?QmlsjHs(^
zPX;h@WPMVoq4hx)fh3BHJznO*Wru__WM{G25<KKMW==hm|I=NehgH|rXikrKI_%n0
zIW5tergP%4NVB$_LdFj7W?Z`5%Dwe-UT)iBa#_G3alBuq2jmns^i7aEd#Q+PO5#uR
zWQ1UldF|6V_i5{}BwDD&(&Wl}+jULPO2y~IcmMEwuVAo{?$sDmLawn(^vrM35MyO6
zjXTIFH(7GLy=c$@2t|*I1dwvwf{WRd<C05{`n+E#e3t6Rw1l##krAsfZlL`aICi{J
z1T+=@T3bC>O~jK8s+%>8au^oG&^@P}+@vNg5_lAwp>1B5AOrdH3BFLMtpl$I3JF&F
ze_r#bv#_~ulV-K@0se1;)q3?xyC(prv|EW51wgP-sQh{3MejM(b=Omm#&?yx<3Kxo
zJIhQst&*gZ)5ZC?7{y7-qg-{hb;0QatU@fbYSdo?9STA_IZyZS@8btQ2{kf;x=#9f
zFN^~^KMTw-lAI*P(m&5*s!TX(P9>ww5nn<@oRHVZ`g^i=11Nmo8Vw?(K(4!gQD!zc
z81m+Ka<kz)N-dRz-?t36lK7(IZ=huf8}d<<wP|otspyP_WdFVG@H#9#5ipz#9hnyC
zwzaTM<X7ve7BbbKXM&=#_NU!wDIOyNTWyq9rTQL7fGIC)7ps=F9#FZ(zV69Jb8k@w
zJ2r*QEajDx()23|`U>!tbzb{nC`v4Z@tXxOXEkv12ijwWx+=nXG;#5XXBZa46g^%a
zmnkf74!cPPGDa|1_cc#tzIw(Iz?=QIKXw}FmgI&)Ndq@5kYV1{tHn112|JHP2<2kN
zv+6T(c#i=@A}25kCR?qpD{0)D(U|E%!bErB+g@+f=_Z6(!!}AUGvH2s`}ydcm7Zw|
zIO2zh&xwjfZ-Qwc&x7~4o9tk{nss(BS8eIVChQq$QCNoXI~xEBLzB^b@hJ0XaX#dd
zEQ3M?bwqq77Ysv9z*HG?FE+^Q3?4eSQglxG536b`D*S?R^3R-VuXA|R7fvmHhEv3;
z>sO3B$E9meno=7$Qnw~?K8~M<=HFhd&Z7yZJ}}(zIioqnB8EOF)Tn-NeoEXJBem`M
z&fh;`Y7uW3+;5vH)Gt@5&-78;FEh|m&SyM&D}PII8<Hn<^<jRFHxD;Wf-Ibho$I)U
zq9@=-?I-!l?li;my7|a~517@erK~D0_ofL|RD*d0R^eA(*a5*f0#~rq!O-Cvv=~4m
zhx@gdFJ`xW=Jav#8iBe9ri+>?VP3`qZ2-@{oyl?Pl4^YkC)wO{I6G9AsTs=%Z>$Jm
z%;hh|n!gj4ML2&8?CmFRRA#slSWi(z8kW(5wu&CFdkg7?`l0&MFt5-UFE)eHmL?@D
zgOgfgUxm+62v@F8VYgWd1I4v|=ULCn6Jn#hZ=bfPION@TRSN{=NWA0M-C|lwRK$F>
zy|6gTy!4L8lo~T&b|k)qM2~CJ<L66Yb=9X1Iy9*ZEG^wfF#x`Q0lhFqbQDFRupb~M
zRBiqTih?c07#yro`?5qeN@J$@F69rc)ArC$$Fa_0p*?h5Nc)^DHAVFI%-IeZ1rJm3
z*LID!_|FJkH0832H(}-BG1`zw{$^IXQdcnYXAdtmoxQys!1iUcGtHjE=c)JCXdSJp
z7<!!3`!x?^6nM4APL6od$+c-p?t&HxzSL>%i=T2R85Y*aFjJbTe?7LDt-HCW{{Ufi
zwqeAS&gGb;eZ7*!r#PaEsywd%-BeU?d_{{>4a@gx@07ejQa(b++#oH5WIz?WMlqO<
zpMblqKW(KYi+z;g?e^u35T^eTXWBjLUMFh2?iF`-Q|scj*Q>zmX&RZ5^CtI<Wn?{a
zvTRT9lpMh7E5fxYIm?b@sfh=;`vo=M<~{qw&=3D}u8DrxKV@MRRe3Hmdc_m!WX}WU
zGV}WXHoyP>OdJYHy?!rRW5RIkmLRin_63JMX0#F2+KR&xs|#4_)gnu<&m;vTT&mSq
zZs+X}ulYRP&ujT=iBK<9>RP=&<&IGa_4(?Q8}maW4PmS!oG^X2&|?`AO1j#hL1x)M
zVDWmaXJgN^`GWKvzTiif#xx^XCv%x1uK2kKov38W8N&$kWj@Q(EU|WD&Y7P~>SBh4
zy}kiKilnPhfymW^{WKDSx!9xb0j{PS#c*LGc3-I5`CSAcq;Q@C%v*zVU*c=%zQw8P
z=F5y*ZTs1^p!l;zwD7U4k<@hYd-eE8>bWv&7ZP6W>J8y0ta&IXx%=(+Iw%|g{a?OQ
zV~B~{<|~hf&-~h5W)M_=682)@iwsGxPc%eDS&Us?3``nE{;_JnbiV{95|+uz4m?W5
zyE6!6gZ&Uuc|6>=nYRz|m{<kEg+N*VPiDJ8BbITi$3qZGi!=<oPTm6yIt{8mXw;WG
z4^><njM$GIn5yL|{Xz>K8`F-MLn4=fD6twJo&hmPSSBU{&erDgWFz>&K0U->Xm+%X
zEJ`5^1T{DnCtzbhjhTkx;ZWs=2s_d5vRJ;pt}v1l=Udlgihx0X4;F3>;VvI5@c7m9
z%vRK8F8ElyTR!&<fEi#MhTODo;UHoGcpy4Eo*RQTZT%OhCjF1e6;F`bOpO<&CT|yq
zF<9%rcEWtaIezJZIk>odRGcVD-fuu30yC;7uYZG^S&i2{>tCv2-7wa{ZINw3<042W
zMb7Yq^O^#OO^QhS4SX;vkbxmBDP|a+^m+MV!U-oe(ubjJ+gF0zOI*@C{Gl7H724FB
z$&4)=^<2He?EHy5Q~SdcnvbRF+k|dQrtj+9v7P6AJ}#=-@-EtQoJ?3~x=vS*mcBZx
zOj>|<EFTJQh%q@17asHRQsOIY^iHy2XNN<EpA~sq_poD%PHlaa-)X#m22mcb3>iaj
zHMQUq)lhJz*=@N->UJo;$3vH;kIr2#?g7r!y)815qQaS*CYLVt3Myt7w_`DtHX*d9
z9fM6R+FH;sGj%`Nn=HF0^r}?}8-;rJU`)i%Zd3V7v#)&;9OIDu4KVk9do8d0d%_u3
zAbW(RU|&f}k{xz~d`0hLq#H#Ht3L`^6I38-P&9dztii-0JQ4TBoQo<u+MymgdcC%~
zYR*oktfe+o`Tb@}4pj>vfCoh?vdbq|n9DqU2kxmUc`7rwz{gdA@?ZUOj*%G{+2Hn~
z=ayP$)gXkm-bxS)vzrzDw{<Ea6ejL(RU9FcH;lLf53*c-47UEhMH-)*LE=-J#(QL|
zkePSV;`pn2IZ86WH5hvQ@MyjBNI)=N&S$LHfw~~|Eu&19Ie`#T>R!ZXn@C-TcVI)A
zp6;ovmkFV1>Q4u;<GV+NQcHb_l{4adE0z+7d(b(23z9kN(lm$<pGrqjybFo&&)14a
zLhbk-g&>;6$+~~)3m<bpNKpU^SlQP1+Q77d)cCWkE6sdGVzEQr*2cw|LLMA1Zari|
zD%oSFZD^FJ96Un?L3@XKLxkvl^)kwQ>DuWETp{qv!9gNQ)X(C!d(}9c-C-Tq>QBM_
zlJds)+ML%3;e7ua@cA{u^vVot4!@Z+orRKihF6f1U(LY+Jw$|1B#Ihyqf{FF$r9mH
zgk(0zRYSoiSk}Of6^+N)AiC98AZVv1di+z%D3_3OMfk^alsS-w1zC9lUExV*uE^5u
zVs0O8Vm`nSw-DMf4QSn5y|o4h6P-)4)92M{`65AnLTpeH{xNSaAKR;oqfywAyO3Nm
zxF*aL)B3S)3zNHpR5<y(-IhNZK)W)Ebu;?gUJHbf>Us8aT|+-n;!5&kFjXWUMGXzU
zPIU3oP-G(AhvfGqe|U&G6`86UC#fW&pd-FMYcm$S5;~;SSY8R8mOh;}GoHhwrUFz5
zZlXH>Q9%=nZ9i43rJO9QzW(jHe|o_2`vP+^XrX%U0ds1e@ZW+CX=PHbYdV_(%#0<P
zeBpGxu1O-pYrHU!2-G1(-@N|P0GeJZ_t#iq4-E32)+2dXwRX(%3VX;cCWjQ$6jCzc
zgokc)yUZ<XkXlSGus@_8@Y48+*R!Y7zT4!zP(8V+z-r`vWryTC-pKxzl=fILQo?kX
z6$Kqgs0*pvM9Oc|Fa*l5ySm}&TuAi1h_^_w7=A_GgOwBBADqUGPL-hTM&i_diFvM{
zk_&9t0hRY+yWPw8L1nW5uSC9oqlL8y<2pM8hO6VROSJK8;S$lpK4+y&*Y3>?n;wz{
znGBbSG-0Cs@iH$*hBgV)aZ`Mv+foI^eXxO0U44sJa8Z0g!xEIA0@>XD@IKgXOpW{Z
zxZm>`egHPF#^i=L)XTU{cWX3FB*ppY0h%@`WB(B%N77+?#yUmcUNc!9Bhh{L<Wvdf
z<%v3=24TeygWaUAJYO?Bikl`ko%52io(%KwG(|>}rTCF+K-e2ABHNY%K0&VN!aShG
zU7CiG@OUx_35W`EmKW33??bMCk2Fbj+1;<IiwSpKd>L=hGB}CP#4c_$F+QN-f+BI0
z&mbx_776O&rJ)7us1xX!DIZ5mP!uZ=!Za1}3<i1?f<v`$9=XK92C>>0H}mEIyv&1I
zI~WzfW}jbIS8;VxvV4Iik?g-E)>i0|c7+hzM;=!qec=oHDK}v!WT>+RDoBykaYo51
zhceAnP+6E=)CdVl*iCzJo`oILi{FZK49}j?DcSYKo=nr$m8G%NBC!HFX{Mk*oPCq~
z=lr;jiu1GXlr=k9?3X{b)}Ru7kn$a9^tf~d#hgR4#@D|ik22KX%G%DO^wH2aCx%m*
zX3X}n%57h~-it#C-`b6aLHGiL_qqOPt7exrH2CtJh=8x30p<>-ZQ%CJ`erD)_`1_*
ziJ<<*T~B`ejAARMScI9>dyT?Ac=`W!7xK%)MCHoO{Eai!Hl!EHp&veiq{RaMli;p_
z$Hf^Y76Y2yHZ~<_HcY4>b2i=>ZJvi#x|Z0wS036Ql+b7Y>c8VWJj{)$_LeoXWa?H`
z4Kq4+b<^+04$2Zv(k2*x3r9zRJN05S>7ocPr+BnI{RCGf)Ysc}D-it|P7J=bJrzmz
zyU{Czt#^NHe)DY2r2D&Hd~^~koIG#FMW=Tn4OshZ8wM>3!Heee#+|&_3*TAU`Pz=n
zTeDx=KJmor*2)8SU+Why*qGe0P4T{0d92w_mh7$zjW*oV{OgDRCBgLnUlRMdvFoOo
z+c7w(^;B}pxL-J82k!7nbr?;1jv?}=pX+c09S(C`HtotmxQcdEJaO=@Fr6XTWi@n%
zyzP1WC0B80h?32;^yf#+-!6ocm-dmxNugN*Z$R~K+!`T;tXMMkbXH<G3t5~!p#X7)
ztAyKU6T%3C+Y|C`tRoV=KX^YKe<z;xx*vQ+xZ*X^{`4rB`6!=xJ9EJ9I)ycmUqJEC
zZKfwl^bulGj4&@$Q&uh%r7M)L(PNf5AWRjBH~a$p`+@=)AA50W=AiUDk(8%V1+g&y
zf#(52@=1*}ZktPnjLj9xU7VM0?2jLVIb5`qOgd418+X%4+#}4ZCIqDl8fS)%Zb_An
zk-8T3mpi)`<+9TJ^e7TY(_+If7SDNEfjztbp}j;~^D5w!iGbD(YDMIxVEX<j=+48_
z+*ZWMUs{Cf!ADVZsm}iTjUi{$6y{{bt;1X`TqF)Cwd8~{SK{=3OX<>hwQiO_)aw!w
zYQ?Bzg$K75<-U$$+7B>JW?iash$wrB<?R;gZUP?QyOVeWPA0P$bJRfvM;eRV&??6y
zQJ7NO<5T3r_CJiZ$XQ!YV8Smv3`-tkbDyzI<Ynr@@6CWBn8hW0OFr07h!l12)G5ew
z@C5iF^I)$K0)Iu~Z-tsD_*#-r7QhXGo576P_FLtmI!$*Jt_ktTv)law^{0867VK^<
zc_v7P{~FwxV*$_M2#1e0l`C^Z0Ug497M(`W(L`d*?Xkx!v|N{yjeCfq^p5L1`G&#;
zyExnz??VEP?EG9yn1Jv8k!DDG+p|$YIm+sCxq`wW?8K#60cWxLgoDu*-mh3mDR`-p
z$vd3v^O$3#=4)h>`kh5l@nx98oWMqA-*_+6{yW7$Tc;!=Db7L}ILYdKpWXW*!n{Vz
zu;a#ruyt!8QCddndn%3yxHFk9Wl?>@egH&a*$k60^XckEzt`&-MDTheC#k`x&Fkk0
z{bdeH7CAHgjp7Sc6GxZ(I^5UnL)MiUM<}^h*JGM()9g@@hJfO6r}o-UG{3n1nz8Hv
zjK0PjZVFQ^coa;!hlLZ&l@SK3EUP^A=EPDZQZnC>_u{r)eUqyYR7(m^=f`h0a`8XG
zB0X9)rqNfbs#PkexuckHc{O8j8+M=O|7#w}I$ZqQLIG%8PB_PtcCw10SGxmqH?B?`
z&k84foHC?sQp8uw;fXDC7q@4WpSD|)s1pNisOi^{cOtY`T6OfbYvL09vGp`p(mZ!S
z?f3SNhU*%PJ*Lz`%KNR19kC5^Y<*$9Zb%^?A|y92W_Wejs(Z`JZ0YqXHD9l4IGJse
zr`FLw?U-5jXA{&DThxmHCNxbw0cD{AE7!bZo>G;d6RHb3)cK>H_F~LsmOCFMdxgY+
zK=C^Y9;>OLcqujW?`S*ev0;Kv7syGF#8;m<w^9}e_1KK`x2Wn0SE>FPW{U=K)}>yT
z$VU$v@w5S_Qo549aX45y_!~F)7XqGXF_RsR!?cmMk05IBqSHg<WSTJqSTV`c%Rnhh
zw|W|QdxvHsFmu^_uGK3Mv=ye?|7LN+Tc@E&00W`Qhq|9?EQfNjs#_^ou<KQ~<cn$j
zS0Wn!#<TNKXvLzareQC4NQMoeYJYLOZoVa4t8<E+^@?edKbZgGWOIa?&wyNT%JjKm
z9XhM**x<bUb=R3{cyCng#n_*!?A!i%4ekV4@wb5hKuhS%^F!JO_e3}i1rO%r75%|}
zA3U5*oipuv3n!#r0T|ZWJ}sdwJ(%I~Ed)cwujqFt{=tq46atc}YgSz8QbDyFbraN_
z%A?tJz1UW`^q1dU0slliu4m8E0x+3n==^E1*kawP2erdK=$mZUF&-N?=OQwcM*01F
z{KAPIKT`Kd@aB)H60dGd(8?{>bUHaS;VQD-JOS9n#bXH?n038&)`%|NZe+RS4+fZh
z8Q%T{wxQ9{h_BGNi;7kv_VOjUEJ;wk6ATlxYX3WS^!+asJZ@yn7TgfC-mFkZt=h64
zNhXU$2)n{P6ge4hGR2cWg_xe(#0*%E?q9vqVxaNCzp};Vs_;ZTWSjCu6o-vc`vZ@M
ztFfBRjg1552x^_KAqe+1Z86RGrV&T|x8uoUuyuC;C{j0t2zAw?B5{4!>lw-0KF!>3
zq9m27Xz+*4nZV^k*jSrBem!HAGh8Mqmj!#Bl`l<&5rwohlw`nm*<9Ry!vWj(_k<4(
z8Sas(*T@?_&dVe2KP1Lg!qR4-F$13*r2Hg)+idHwl;XEcKxqP95MlPueN*Rq%vNK1
z2OsQmCEH7S5SL&p5rJ9P$s!1Wm!q_a7Hu((K{T~h+#{~y2A9Sf{(7%aEdq1*h<8#c
zm<||$AeL(u$W9bAV`r7zeJ>M98qUWh!OHXR>foc~M}~eDiljsmaW5-z0l*%*s{DsS
zsS)!NG*G;G8me*`KkiMy(Ibw89c6@UrbxtG-<d^lf7xb{#^U{|CCWC1h)S&=p?L@F
zd<ma{Cwag=yO|~f^0N|%ml4G=E`&%s85`D9WN}?Wf}r{{oxWbJD}nwZRJ^fL)dvSl
zyFXH}+pMlZrRE)c8z>WaVsh2nnSm{7LDon^xiaJ%`r;?gnl<I3dVkko^`m6RbSbX8
z&YY1{ml%UE!R6wU@lv}o2zTS2t)`J!lS^ZWyfAS1KIQuVczge_Chl}^7`2scwXplN
zJ=6-MySAlWk5YfF0)|n$EoZBeYHK}*U#Ydb)LMy%5D6qxOO;)9p<TDqB4lhWMr$>8
zs|LYjw5&#p7;BKR28=d92qOeYh9r}j>H8V?y`J}auJiACpS`xbmlcwk@Av+Ff9}tX
zpmy~>H$x3PmlC`;&$YK<bo-F;Ioposx8mB}()6*ZHK<W#O6PQ276rcmR}Q_2zN7Uy
zmoALc6Tk9z7B{R{tm=O26C8F}aU%+dk@UAHKmJRjKHzk@Ste<YoTfPgahvcHv+G@)
z`^0|hB9>|JUW?1nSF9=(4F|WNGj1C}=yUW5e*I~~nM~{R`EvALj1$V`B09t8%~K20
z@JbC}X`Yby+I<<Afk|2oeS0C9N!5WDd7B4gy|4VsNyjwF6C7P%6bYDELw@~wfNawy
z{j=w_D;SQg&vP?(GPp-N8$S4{=u0;Q=)#rhU*+L4(X(Gxbfh&7A|YX>@|An{)0>+s
zJ3s9Gu;-;8W&^i|ZMsEA<SWSC{b`XOmV`y#U>!v9mM?`a9JjrwUA-mY1q2~!vT?#P
zdD(vT24Ehswd2=BEqYHs$Nc+sIUO^hfLYkUc)k5gm;CSj@Bi-_`2Vs0n^<#@UGl%G
zuBLg+eNL)msAlq<hM1@PPIpq;d57U(O~d$8#wAmeUr-W8T_Gk-zI%V_<}9+<Q5^A{
z@o?uMa($bkt@18naSJiY81cD{8!Qre$UU-Tkt1oF*W%;2;j}OK@^@2Np1zZc<HnKH
zCJ|2}sO1Oe<I+=oQhGI3)1&7fa5v3?qd>JZ9*u(roubGszO4W#yvmKPWQ`EC=WGmC
z#P*0=-N6K`uD3I_>m#oTCo!1$5d<RGW{wD%XF-yU^E_IKf8KjiK!6gSfJ43HQJ9ZE
zCjhZZuB7CL;acKN77Y&mII1I>$e;p9I)2$`a8Rivs0erHVN{B_kVO7kg%4uS^M-tx
zrB*$%oW@J2oxuqJLBys1AeKEC+B#(J=?m``qNA>0tP*GOx*uIz;+ZcX3hyYqtf>Dv
z=DT_WqHz5zF;7X{trBYGusHG)3I%Yy+hkM33opVo(O&nh9q@(;++ZrAe*8_EAW?Ow
zZJ7r_EZWv72aNM1{Smjxv~ozyAD^(4M=4>DDA27bki}anXq-^ucR7>YUdy_H2hd4w
zt)$I!pnXhFq_S@D_;`xb<Q(DoHP6b1=+9klMn(7fZ{`K1^_X96R{S+1B2ZkjL^4>M
z1SxHIM{eZ7-ciUCqt%m!Bo*1U8|5)|`!K^dqtbvzZmKD<fA@W~OpE_>k^IDL>P}p5
z(O}q1W|b5WxbZ`Q!9}G>sBsYSX2p&<?zQ4pn)>AOq%u6AsDH@sJoFsm9keLpp<c!V
z@lN+B2#jK1bRO=2Z#*a2z%QUVfUqP>SIkV~SmS5oLdokmzozJa8FElI;4Q%m_efZY
zywNZ!V+e_x3|;qkm74dRBgD$lu%a^P58rS*G_Xdq&QjF6-5<NmnDb+p<}Y~iJPevy
zAP%O&kmSJLzW8kzHjaZjj)JEUt(>`gp{t?W{5}3*rBoI0)DRBCCwc8&oD_EhX+A&j
zoDz@PpnEi|m0qXtoAJC3-9uvK?Vr3ZA=759EzoIA9WDzBOsUq^Txq)VS{~}iY{OR8
z{*B2{9~|<DN>n>8YuU(9|MYL6DuBWp#Yo6R(!7Bx{W`PIs~@Kan4Zwil5Vd#IAlM=
zUBH)uxGW*MH+Z}2mdpitET^gl+#W}~4bl@PyoA~Jcqzyog?ee<z9b-s@mdD5ch8dq
zCNn`ZcStO=pj*-Ezqy*^Z#ujUZ+cueA4d3joVu}FW=OazNgsFxV=)WP$r~vVexn=x
zt~D(~&VS^*b2b#+!*f_^51fQjf5h}JpM_50%1k`HkX)~%zNiiOL8IlOG4)mUeC92~
zaz_E(Wof>L=dj9ia1og7EoQUV?B>l(v9<zZ_v|vQo|qNYiQ;@1+#8d1T3icnwd&T~
zmh$N)_C$m}^mEMgO|7ocn|Z+g!no=JQsND62%#-h>S^HrsvSK2dW<M{=sk`VuR*-n
z;Q@>y`bCY)bjcBsi>Tfosuy}S3<B=*3_S2(g2FbB^VCD~iE^Fq=4|wa3^O;K%H3Ja
z`5l~~E0j@BKw~8YEOm`e&T9T+cfP!Y(p>)~wwK}yn(w&1K?l30L)-*2asJ6VbsK|d
zEjK~?xkNeW%wXg!etIT8<Y50j!7WUYsQth=;7RVjE}IvO#zm{NgclIM;x$)J;q1Q~
zC$Wl%Tc<_E6_gKh^kYDh`$8;?8Wp&Y6l9y77LLXGlNNNJfh#!QD*v52(6Rcy1?&3B
zw*USM=^yNo^g7sIApQY-V3+g@r~Pz~)pGv{5TM{lnc{$ftpC>|$<0=E|LVH-J`vcs
z^cn}Iad^5eXu<<9y=%q;bUSb1I%7={yKmWg*lqgIg&q+5QId7-!amUHf*K8<FhUZJ
z7O#np$V+@&fyiHEeFk<Ifze>Z2D5>O^|76)8_7EEcH6f&jE^tIdcv>Kctj*}Yj3!R
z2d$(@(hW|`thPk35t-Be7Ey;-NqtoK#9;A7CEDhhy<7Wh3L|8$L@Kd{@>UOcA;lh@
zE|f^M9Z2&95$A|6*1P+_fJi^8RRxA_PH;sK)!!Qzz7t#J<9YLuo4xBTNE}TCi@d?d
zI#1g00@t)+8QR9T)tf(W<_kHyM%^|eV*8^-)^6DN4MC|6I|XVr0ijhgU9ZO>xFK%U
z!?TCMz&7sRl`85!=?KHA`6HA4d0M~gV^^dM+!1~p)*ZtHgC!`Ecj;eg-=>foc6)0N
zgOL0dAJK@VL&a-qGQ2L@nb~{iS9af;D+}PYuI0PMV*8kbn_;<*7BE%)Q70xX;B9s~
z|2UNp_0^v97hgy>$Vgm7A64S7<pk+>v$JFY+dhex32;`)L|!up%rrGZ64}E}%Yo0&
z+({;880V&;DzU6Dg(p|!_mtx|UUVDh)Dy3-fsU#=^Uu{Bv{aHGhZ9TD*_RK@=;`-`
ze7yNw{!Rb2aR6-R)!3SSFLC$5-0i}Jc-LZR_!;5b$elO$TyKSX1h9@BD@N48$L2iY
ziG&7qTZzMi<#z*c-dyj3R3Bt`JfRGO8{J#t4-aIm2-x3Evq)!m^=CuiRFLZ$lY55I
zME%n+E%Z~3Jif|1(GZYue>o?g)dj!_V#@UF350j$-O`Lj@qV8I6@Z#e$<!MASSa~G
zNhCCs^*bYlo=th2_;btx%>VK9!OiQ32}hm*kBhaPeNe;0PW<xG@+robx1}tO`)71w
z+PO)`iK%b*(_A2GTdJQgfA-SWZxGJ-o!5+F`jcs=Tznu2@nUXsYpbZFsT9*0AN#=>
z8K}0@&_g%r4dmwibe)-29nbo<A~?SUFOBW;<>Y@XEM$N`gc2m5EWw;>EIA0y*G=Kc
z{u1gvEQt3qkCl)s)<yvqkfz@_VIjPMgP)>l_5Q;7h*5`+yjS^MQBzss`T7@S3)DPs
zdH?Kn^IqP51-;728}ep9JGie6i~j<8d;u4#UWi=Vqg{oJ^?|(a{$$#(I=2?+VO1df
zddWMox-)m6muV7RyI>Xv-DKRoia7-OVxV~2uLlquD?2Tarl(iGMPubwV5(FAO%y!r
zYo+oQBl5Z|b$V|j^PQspe{iAug#Q)-FMeT><9J0(d^pbbrMNO?cGh9y)$~XA#BG~I
z{CS{wN$jeNbITXaU_M{ubsFa}hc8X+ee;ggOkn*ry|};jeh44GG^`zXD4FU_ROAq5
zqhB?4&x(n<bAyY9{2<G!IeCMpGo<N|t+E(gbd5+-iyYjYw<VjujlYRB5&hmt$yU4P
z;=CF%c|&a<dJxJBJ}#M7^^-3;=Y!rIQc~vtuW*?+nKI8%)V@n@lVzR9kXeIbo!^~=
z;Yxl`fv|0vVFon@lagz)ZE$lEom-78uM|`P0)5y!vDPWYokx1^R690%Iifmpm28~P
zfLKvFYoy+%y`~_zGwugUQQ9$l4Y4rBXbu?izk%uDtlRn0LrPK}#U1fC!{aOI)BwBO
z43T>voz5>~ohIPINzp)iN2i5?a%7HM#Al#yLPPmk2pgduxfkn&W^60*?a?nneFI}&
znd_bY_(1p$nL6TILlR@|&UAG1{)xB^t**z^^qpiH!8_z|im|s?(p8YglPEi*iPD{n
zLjWwO7m|g~M@2AXrH}7(mW)Dz&&@-ahN=SbJr(hdxuy8cQQ_<kNAR*pTz$8$zXyhd
z`6*v|iz<Qv6W^pHi&r)eoa<6*2w!FjOH2QT=P*JpjXi(O7+6hybbw-l_&{&{bbLNL
zJcT2fB3t8wN!0))R-$2y3<Y#o52`h6K+Wi1l7DoBuf1ANqHI3sA5M}DWl*q_#%9(R
z{0d<Vnfpl?7uj>oFkE$dOF3wIzNQS~03D3Rx^YP6btS_O`JC>LhuC4_Uz{TS35YK(
zP10NA9(E`UQkhZ2#u?9;f}c7WGL=1XXPYN-XDqWyz#Wfd$gJzc9ZfgpO^nSmurMsG
z17@D-6X)D^GlqRrYgGX(Z;PW}c~l?W2q`!@MN$APbqVFVy$)O25T*I<Ljn74yqb=o
zYua4Ad}=Cd-SI%NgOn`U<fmW3i@Uu{;J0X9AiZ#F3l*!_pl6gYJz?swsM=Kj)Jn&k
zf`1czw{CGsZMKOqF0w}+M{dl8S|zQ*jkY50b+@k}hFBpg|G@fo9p5OxDCSQBc!j(^
zHZ@v9nqKsU4OzRi&O%K)?+*<;64?O%yi>0S@giTd`S~6oc}$$<qcVZ<HJzGD6`4ll
zK<*+n*U2|yLJf@pH2#D9`hoO9Kw_WWkqYt_t8$`5*L{x{+V{b*o$f<vaH!^7O}b3O
zjL;`EbASGVfOHB1+#eGZGqz%|yP~AKf5_5qRy{>;dfd<Ug>6;evfMB^$?Y`f>4IpL
z_i20)eUReD{Cz$8o*tvMI?+3FNm`F36Q}Zeh`R_|m@AdHBK$jM7cDIMY;nc<LyLS_
z3k@xmbt^S)=@-w>S^y$~z=>Ac(YaM5E}1|f<2%K_ORWlQq$8T!q6T5<o8724@MFZo
zr&7aD%Gm$>YJ=E97J#c*y8=)ql8P+&!;twZgxTD4{B)cK3QMWk%?_uWauVMkAu{kg
z)&<e+%b}p#CBqvnJtaX8htz^P^c-?c1Kpn?{hNggm*1P-S{t}Xq#}A+v5M?+<JF$5
z`zgqL-!m?qys<0yz>s?}IQQgqYN1=)8Vi<WI?LR6)*SiIZZh+>yBC>_yHsvlKD~Bf
z&mmWC;2H{;XARhK+-2HNa|4Mk9Y#sXH-<XPhAA)Yk;o^TQVgx2dQ{PYfwd4kb~%{~
zU~PbvUdo|xmusH{_Ixaf@=4_)hDy<1WLL(bXmxJPCwES3<yZ7t6Cq*Y9c~UgGi`T~
zSvquijI@tticR8%)AhhzmUYj=ws~|svPiZcB$P;E&qqR2cGp*)FUCT-G?<e$&qJrt
zGka186}@60<swgJ<MT(zb5dRJYMp%Y=nr|(iSe%8vez%pq8~T+&o1V01CDnAws|Rk
z18z$*_#L(sQTLM*)YOGV>fs;JFRQEAO;w_`v=|nqg9t0$Pt%oI23wFYE~V@OQ71Rk
z<>^K#CUO$d`wq<J4*@E%2Bd>I65X{OiE2LJ*I^tVEZ2fp@{zf?>$r7tpcWrqx4f8%
z#E^0NIn4DP&xFYw+`#)Yr8iJYb&XwH-NSp6nuEgT7t#yswaCxtBY8cIu$CH<@{~PW
zVKC6f*v_r?_hh;>UC=GX9#C6UD!V@#bbjS!jCVNhiACOKe@9}M9KW#b{>SKeV4#4T
zs3^TYINiMJT5lPsaKt=kKh)dIVwb9V&^<ep)GQ@ppYJ6O&8b6Qws1J~+)p~Z=1*|2
z?i)Qfk;!F)^gKcu4<Y~XxuwYm`(=#k9qpqt#-27{ktL;Rdo0pIxAA)LC^7);V*uyX
zp1HqBvVQBtH$@7q8PY^6eO0U?s_|#%6H0=3SI&#T0Eoq{bn5Tv<Fz0*>?A2CVZvA<
zJtv^EVe&3gUNcp%|BGN}0n8=O&D_tOrjNJ2vj|IggkJJ}D5+aC<dAQmLMs~7nN{EV
z?G~@Y87b|j7WNI&4xW2{L0H#>BFf=2f<1D{p)wy!WEc}n=Fv!*!W;}q$EPjUc@?UF
z({~#{9O<MuOI~JyLQ>n#;VPG+Ad9Fg%EE9Zh}f{C(?(-y7Ch?|T_MW<=Ea3IWK&`f
zejd5l!+z(e)QZW0!W83NQlYxSeG!UUvv66E>>)RBKvZ^>X&FHkbe^G)VuYp}8B=M9
z_DyL<ozn0$uni4{`RZXcMRC2W_t};gg`8vDz2}O+L{BdroSdCyR^B%RZ#=mVX<qxV
zo;bQwXUJEA+R)^2))Qui4=5JU@d1ujuPJuzRF+6-ghUq)JSQ%U{Jp7X+@+q~iXdci
zmgN8oR@xycal-OL)^t>7Cx)a}*q;J$m)$=9u^se@;&#6adbLoF3jBQ%37Wsxduk7R
zO_@CzMk-H6cM<I6M@bZ}dR%}>^Kl1{SAZ%-jGgZXALB3JM%BzuF+tz^+2kcVxek68
z!(?*)lp3Bu6{90FtT!|&<2K}_$}#x?jmMG+rZq1!>3(IORNv2T%**DIjvQ?ureo#~
zd;t2g>*oF8o1OQy{x?l>f%VcPL^?#H>UVOK;CvI|E>=&}Ekvj;{Q}7Yee8jhF+ep!
zad+#p-;zbn`6%&<jPh;HpNx<32>kUeq?7S>u0=0G7coqNT@p#}$dOhV)+wE(kN3-U
zr(CuRv#of5=7n0Gtd2MoJD)eSPO0x9kHblQ@u<&9>(;_Yg?}UOzw;h4t`$Cf8VPj^
zF5f6rtZptz{p9S2JwkN7Ks>xpG{BOLk-z!lEV<Xk{bQ0e4Fo0*!;=0cS;EBfhp?5A
zlNv(<n;##I^{)GG0rLM?jrf1Z-th(1PQD@DjAivFV}>iV_WlZyIPC98wvpZ<#wX?E
zB@FyxT+jn{FaBN@cr(eKNU_Y=ThomrUlo?gw4oS;2{@5^ie8TZOzt}*qTyKl>sarh
z{ky~b){yu1b{M^Ck$B2Mf9|&r>dD_ufUDUg8a}V}h7FlE<4IXg`0iB5gyGISJ`_yS
z7aO17fQHo4CX9{Bdj+<w7sv@NrG62=^&XB-h>=sof;S%BGaA;HaDwu;d(mawDcRP+
z9OKKH{TjI*8#dC78PGa3p77a!K1g_A1)fw5JNZB))Jg87MjX7Q8$Fv5)?eG+d=LY$
z7by-|Yh{}t5|k$lqrwdm>agBQ+<6)$Yf^lDqL1mb9H&Zp-iHiQV_v2vvq_dyA9*fP
z9kGYWrQztcB$?CN-2T-%sTjyXBpkSLbW%k%f}mf^vSuDzEN#68hteeeCt-rD35HW^
z<peBLsz5?_`~8d>=({Fhyr0w~<s2|9qXMGgY*f^LB^R<yO~cZ%I7C-%a%Jg*{4%^g
z1{1pzL+qZ~Q4}*?<Le-sXR)3F7B^3xFs;)x%>-#Wm}U=4eJ%~vBNkmqc1s6qky)xP
z;#0L~J;EZW8MgD)Z9bQIfPiPcQLhao!FdpPhS{pa9@dXA)%%!p3Vv`zC*GAi;HpT+
zn(u~hlN5=1?=ugevF&2aM8RD06*SQ<X<cK958cxf|NiEqE@mWj={FmT7|X_C_({NS
zAt}|JnT^EMG9jz@RwGU=OlTwjDLcdOddFEiVNxw+GTS<LrLv65ZYsDX-g*%BgdOFg
zZN_u88n44+6s_g5XUX|5Qq_LKNN+0>whg4A|0i&<gHX?O=^5E7WSN$hI0lO)11+`u
zD<ztH=2#KEg>?sM&$=JIW>a=UU=TN~Zs$=ETr)0Me$;Ip>(0N8a--ld_tm!!nR*cS
zOcykNv;Za@*+u5@qZHX!lcAFfF?Z=Jn?#tTc8C7vM3TA_JLVWOm1<Os`keYuR2T9U
zwcb?W)H01!K?6Daf-LpHDI9nzj%k*FHmKG+l(m4bjQ)$BuFlMbf`KH8b^92jQl(bE
zrh>1cO`RCy!<ABl&pE;(L5vPz)qC%;uQ1ufCE;M&3-!d(5|N0vyOZqMbJMX-#z57$
z%l~k!RFd_#c@oz65QKe1CJ$g;mdK`V66F&iek?u!&B^|7mBZ3AfJo%P?A_$P+qhzG
za2l@zJA+m#=&vzQjKOW7w}m7+b<jO$3mNZ}!#&1pUhuBYM+;M2n>aeF88E$20#R!*
z(~RkO#gnII&hooAvQ}Z7>`f4G_y83W=1C?X_2xyYublStMNCHsZTJ*X8x?Mz8Nw`p
z-f*DQ<j@~uEb6-UZ*O~AwIZBWtkAMk7Z65~4(EU&`L<P@oj{T*C`j%DIE{iHaLw!R
z7sMR{{WM``g3c~~U+27G(gDp^9w~VQL*~LFj8xSkPi6SG=?L`93v58V933LJ#vb_H
z=*%ds<elMa(%HA^M%`7hHJJDiCZxm)0EE*|r7pmai+b^N63@H5VrgPLEQ9i^$T6lx
zXw?ztj!G)QZ!)RI)=>e!r1E4fR0nWlgBen-4W7YB{`m~lNumwU_eih{H&gotu!THl
zS0=FI$XO9?Z6w#KKa*9~;a#)2MLO*-E?JooC#K7~iLqHZ{#{%Klm_JC%38TVGn;W=
z|86Hb(EK-?;!|)~MrGlW5|IiO^u!i<0xTOGLUv$&z3EUrat^>SKG747KAV}5elZzO
z<3(JhW*zOL!L@Okj<W0S>h|HzJjg@!3|e=56P>CW6K5x0epebEcS{da<dW`1@^4w#
z&Q&DZ$+8<L$|a5T@!Qr5my@L*@qmgEQw2`c90m_`2RvjE^2_nz=TeyCI$(gaD=Idp
zuR^+@QVn`m=5kJ^ZxEa+fgx$J;q}PbAo?$3gR(K|GVW71et1csuTBP(d?yIQ=UV_?
zQK1khwHRhtNaHp~8UdWVLGe3RPiQQ%qszEa9ZqM(qL{sQ&0#N{2}?8Q#ZROP!3HM!
z$^PDY;WUHX?A?hK$u@U2TNQr$PqN{G6oK>EnqYL5?~2EIv52F{K3~nNN8C3)+kiJ|
z61UzgBjawOdTLUUrZ*aG7?HSi`1>y8Zce0pcSXI!xfnb<CnGiz_kZmuq%kM;`gm|^
zaL6f$y0XwAbgHp7X&K@NIn#|TXv}YrGDU;!%hKMD{VQMTDOEEbpZRSCbI47(d#9yP
z_B~qO>pH+v$5#Ih>YbrM!80&l&1jtJmhXl`q23CJ6o5mgW{$JWXiy;5YC~M}nPgid
z3?uEGkC?1YZ0p~MDg+jyBe$$jj1qrI`b5$vnD>bbQ}>^4@j3H@_fC?!;px@@hXL3&
z%ZifgyCda~Uuo6za&mPJi@*#Ag{Yp$%&3dD8WcqM?aWQ7-heZkVFX+DRb@o5*=XuI
zPH`5|p6%YAcdINXcjJZ@i=*JyyFf};d_)j!rfW~8QRJ9p)v*J9y~Y%|<({de)N|(9
zv)$Es6}l20MSVvgpV~Vx6B7OgZGL&0-`Ehk91MBPO_|XCJG4*WZjwwyclvB-YE4!)
znWs$?`1S1a&s-)IRz%Eq3-Q<h`_>0(Ec4Cykb^xh)$TW6PHkI?+zFjKdQG=p=Na=+
zD*~MTr-!bbhS#Lk`O?oZFVL#oax$k}3_UhyNJ5Am_6yWP5ANtV^=FyAhCP03gY?Fa
zFQN~-c=I9*;Y@Hoy}DnlwB_jd@e`eN!C=oOlbQNy$J7e66==eo+*5KHRoQqlO!P^w
zH^IDNF?{8R4n<8y+%_JLLuyXL3L1lA_W6!L3p1h{CkgwiuXUqXXq#amy=mZIL|etY
zr2lkCXhBy+`b9Ss64C2x{Z9h&yHi%cuDx}_Bk-~aZ#JJfxF0XszeezfXqI0Rk26eT
zrEO@GkjzKsP$m84$@`(QM81+I?^Pw2AJ|VL&dotkjThVo@H!syDMtj5NL#Q0g*D#Q
zjES|TDunJSP!MU`_?NCJLMtLG>1>sj9eRyK-SwnA5RAI9Y!LS8eR*l8BL-tW{UA1#
z%4zz=4f(R!>V60}DhTw^|6J+z3fn@$bDi1h>yaNZQvB!tlmmF+(sqbt39zlm^f~{V
zDS;rYilQKL?;XkdyC^-eoK^+_9QkPf8Ic5a1`}w4EYWu_x8zjPj==DIBO2u4&|~I)
z`Y4Lx<VE-O!Dn@Q0`eeN8vnYR=R}y3H?nhcHE1o%(@?1HT0!1sH*mA$C+tsjV=$_I
z1Ks^$imgOAbHA+mUt1(AVOGycE61kWs5E+p8=fcgH7Qpv*O9LvcHs_~vGj;M`p{k@
z8gwF={o7oOP_n`WvMy38gT9Y^$6TZ){?7;R{~bco=f9f47rN4tPsRww-bv!Tn<L86
ztA?FB#7$UXF+o&b8qjGIljBW^AUj5=3E6%%E~`&kGFY)?g3q=12Mnm9))bSWD+P(e
z49e%PlAcIMiG=H1QOZZ}BnE>sEZODq7JxgVo6%g6qbSB7pRLpxGJAOP-?jL&h2xXv
zW3VH?y4dYvA_{x=D#&Kn7ZLE@Fs(w>nW2V4*XTv1wMC3){ld$(Xsnk3BOqa%b4#wS
z7f^j--YS4IzHyY`iiT8(C9nwLr%4}QD|L{4j%f}s7Rc>4I-<RnA^R5<`!+@|taec2
zrTPpSo+Y1>PO@&A>sBESX2-V0nls&>Bmh&^1w<^__VDyEG1Eo^{=-~Ze3rgD?o_kQ
zG<v=__CO3?Qy~h%i0eBFn03a}olW4+(m{YC*%j&d`##Ma(xGtre38{NQ6?JtQ7_e_
znZQ9NxS-sJ5GQ#<yM2y`qB_zsLDZvM`60vw`%Min`d`UyLi1(B`$%HCXM>k-#2z^4
z4fB=bQp=QpRCicUI!sE#m#?W%ahmQ&u?TUu53yM{lE}>Bm+->zv_EEmoa4t-`{ge}
z0FOQhjfL=^N+#=$N8#M<PDydd;?9jVY0j+|IPbs8=>pN4q|B7Q^VZx<hS+03{Nwu_
zeT>^>NED-P55xzs{eTbHuO9{Dw!RAiKAtjlPKn!j98BF?7yJQMrBh9`3iNWZr{I{q
z&!{AR<yibCAGnWFuc_iBGr9D~L@9ss%W3wf6AMkro&G))1}2~ex6Y_q<llR>f_s8f
z)FwUn&=4YMAT+8^AEYA?u`7900qtQj8%J*+QIher$$b!PWi+UHTgkOk!9TqCSA1cu
zbY=iC*R03+t&xo;w#?k0@if-hB%itD^9`4%a9Y*m$lCqEA95;u%#}Rv1Hp4Chls0s
zgYl%XzOv5X_HN4ft8x}H#mu9<(<EbaEOFTDN>j!@=C?R7bP6o2RnG0}iqE%z)L9tO
zC01<xBFdr%#&BLkr?HmTncFO$ikZ(`@@96IxQ*4Lp|4c3COraa`N+SK^B)}xwsax4
zseUy%yMl9=j(FUkFOJLJ0N$a8*uoY~``SW1nfj{qUtWNN5i6vxBEyJ`oEGkIic6J!
zG`n?!NuB%o%S3jyAWdSJL>cDL=Iq>XTWZ{DC_@GL=<tO^UMDH;GUl9A7NyqtPy$9c
zEleT`L|w?+Q0j4R&*Dr$d#S0LUI>A)+15_w!67|*&hMx!aqiMS0FwHvw-#=qj$2=C
zrBmCSfgwyXsd-4((KudX9`u(Us)5|+>?ALX=_EILwY)b$Lg$nI)Nix3zzh#m&A_3A
z`9FOq66Q9ZOOjzRZ`Ac1yWpT%k@%dYzTfNWb28eu6I`5n*1fZ*m}_~XemAtt?H>7R
zH9{sAzF^kG!6+EhnT@>0Iy}uMfh=rT<$U}VHB-R?h#U7uvE00>BoalzwIm$+s#R(&
z16Ny!wYbH6^{`>rbPkW4stR=NhEEc;)(<4Iwz2N6jXrS3lNJPdYr0{<T3GO7)#S?7
zTll^fE&+MHq_kss%|vIEJ}OGv%TOz1Fmd@Y6%fARwc{qeY}f`fFiJb?cc(ZvIoqn+
znWb@<L6@g{zp2mJ#N_r=^rYYO2a@)FEIk1uqZ{{FaSam!GYv|OYx#K8-<z@cm)nv8
zY=nBR@cR8ie@;-c=`uALgRP~sS$kAHGF7ILOQDmi6pi@ZV|4rJXxZ}%G;|ZV;aJBe
z>>`KZKt9vi8kKpqy1KRc-wlCAdHfAq<Bq9B9juYSYahQ~aTcv*%ZHPOXw9q&FoTvQ
z5DXn2Cm42ZhdDyG7uf3ccRP+7b5W-{zI)v~ECVJRGi4(5zQKfuPGkD05b;07Ih|_|
z$fufnypp~(*YY>;TSK;gQ@2nJs2HsNuphQu7ko@1r-~m7f!CX`qDe7N&1l7UEJ9;5
zbbtUXD*nLm^MTwk=~VP&a5y74w%qY88`=;$kTS_!8L}4`jm^H>R3@$?#{i^TqKnMg
ziqbO1EFF>LYFvJodj#_xOZp|7x;p6J^uKz^*_3y%ydT9{W{jnU7o5TxK1AmaRrm+)
z%`Sgxlr=7r4@&cWO%atk*8Ogd%d+w;zw<5&_2?S%K~h6$aLWAP>bjtHzH~ZL6RRAR
zYktzf`m|#qfF1$sOn_CKSq6DJcC!#@3K$9fSAU0e<5y;bYZx07$}q;}$MQ6f5Kv*Q
z359flhDRy*!fRn%U~%#yC4=gx+WnCesxc?V=_{su?4}N7guLbzQ{z;9uYV~jD6%fN
z3zRu5$zt=Ex3<s6!fk`X2(itv1Gu2b<cea!*0=~K&lSVhn#0A|?xDYB-mf0<{TLDm
zzPonR@xTvcT|0K;xR;$d?Gv^CAiEB~nw2yH-{csPxtAuv(aZ_Vst87nby7<xF-}=5
zmLOvkbg*x~U+|32cbd74XZ`4mAX!ODZC3ns^}ae^MWv0b{%kqtR57aScM;LJy9<Tr
zt4&2MA-Wv{?f=%uahAH3Wzy-#jB^dvSf5k)IBY{ZP;he<@XPz^%gMDuOft6Ck$Hua
z>-PdqW9~cLN!9IZKV-86ho8%&vKNgz!jpVm)B>&o@SfAb=jZ$NmeY+3n2PSQ;YFy5
z#?7%SK1VX3VwnhidARz@EhbQ*F7=ab#H_z3i^@e8RTho?Z}XUmyN~l_gLv=(>vWs@
zE6I{)Y$(PGdTew%Ok){_lpjmtsnkmSnv=n)qnCY-x3=-4ov^z>H5|~|CpWHK+-mqY
zL0>d&Jm@%7B19DC$0}hmsi1ACwkKEJ>I~BDo1tvxB9G~Am9rVN2Iwp+e(k1x$A&4*
z_g()eJ8?#`j_xtc5TdKVeCrKK^)--!F7ueLPjhxffJp-QBKhFxozbj?FQHOu(=Uta
z9qoPmhVZV3I4?rPMdNnnSOPo<#nIqP1#+JE_0QIMEoaWnP~7#|j|@D{yCIOr=@IRt
zlC6Lu2Jh~5xg)yL!MRI@{4z`+R~H8<Kkf#v(91=!Ho_hW5!WycgDS`S38$&lA6&s{
z4TS<C9EyF(-eGYBE$FV1ZA~-(x}0Q5S`%J)?~FtpmKtjQuIA6=;e#GYHBmjAL6Kv8
zfpEw{-?0lFG-!$}{nI28v_r1QuG#huF?C6-fPg&m#FwtPO)wI<+5yBv#1Z_Hvm(tR
zS0{AD*rP;UIOGWgLtiE$2rIXlg(@YX&;%GEcu>U-$Dv<qNH6!x^gs}MkB{TuLK)_6
zhmT~W_&ZgZXhQ8N5k_w}or0R2ZQIX}LB``lf1wI&bUWuERA6IQBN`<Kf6~A<Rr_0?
z%oVC69a-=^>I8qolH5W!!@EaZ2R`#ec!PSUD*Sq2HaLFT`N&^r)*r9Z3>c{1&H$;d
zC7lP%Xw1*Ue#Qy~$^HT1S^>Zz0|_LGxP}Q7)=|%qDqgn)@Te+2m;g>vaG?Ftv4VmV
zV$6L*%lG3EQtc|Af(g<~K-+?92%hQKN*8Vel|c;dN_yXh?zPxdM=IE2{5>I=+lXp3
zD``{lLebFL@KWXWk?sE%dH@f`Ov^kO!)2b`L#_fgnt3e7&vJvC)1C_W&U>zT-j5k4
zI;Tb_?eUlk;<Dz)H1cJB=7~if*ApzqX31&i;VG^?Tw=iOT%2s>4X^vnn<Nnjvhv&u
z`totGw`N(6C9qBhPJ}o|%+$-F)QLhfsq*@HgP|5y>h5`cJI_GAVlU-+1Ag2q>zKh`
zSC70*-vP8uvQCPS)IW=zqrN4v7OWQx@?MKabsxH-!&C^Mr@g%HdJMJ>`naHXaOnZ!
z*d%x&&X8F(dgwICv|HPFOJBdD7ddrOJehMG^LlQt_XL@bx$}2ZBUlXxU$7LCE73Pv
zt2qXh<(eLS!~r!79>mr|iJl8jsb-5wJJ7|Bh%bx7nkfI1sO4)+?rZ9R3vLF1*`i5m
z7PFAO3J*+}Vhm7nvS54oopZQwcdh#B`z>&C(g(1=vjKC_l!))dv%~%ytdHLfA_Q1_
zB5xOTVk|zaac&}y0d+$-O`v&y?g_d#fO#I7h8cAV7}Udsd~MMg0R+2`kmuD*(YZ<T
zfYv<V6YsnRhqS>}Xc|mFWkaYMBii>+7|T4idL1m!4sWdw&alfvch!@yHCKL@V6uQy
zGb@|UnN4?;4uwL|?|AL7ZB&~~*kPKutHeT*)o+c`mqi4~*4XFaqcLjAxC7G>mVP=M
zUtk|uygp?SjvItah#qmjb&&^QtIR&#=UHBR_Cd=EuVUYpIrb-7VTV8AH;r|T-`FKf
z0V0jOC|}BXjwDrp?X=lMGMlVKmiUYs)#xz!s!+~*T$5@jtU<L!C7t`Sq~5)eXQgFc
z%#=Oht5K$lx*s~c$K3}(Z|HMxiX{ow+&gXYuN+E!ElOb?^Sh5qt-1N7dYi;QqBMJ5
zpr;ZZl=r@wQUZWYsJ%4T%c$)K{67X+hNr3CX-Vm@)zgR-h1^jU;|2cW{gk3{b?tFx
zBcoawTO{v+Qy0+=>LQRthgv=$m6{)Zj`_ooTmRx>uSGpD=c?f|`-_**4^wB}3O-48
zvF(;3DL3c)_*f$mSA}#`=~L4(w?>ZPnS59N-`EJ9x$j2l@HBoDOr$WgGWNSp#dfZZ
z1l1#&)Aek~I*ActgDfYMTsFyULpNx}xk^`N&*N0EC0A%$JdP}i@UjuPuI~Hm!mor(
z-Bzo>KXc*?_ID?V)s^xz_t)1E++ZKKt)5)DAz%%<{RxZLk6hH3`*>;EomHgIjmqs3
zcMk)W0=iB$-*J~8w-c1tF4qs$eSD1wEQ5hIeAl}bcT0`2&f4t1`^o#gwt)oNq;5Ot
zchO5Od6axei7@WY+Ih})X(D5z_O88GLaH-1G6(Ka0niSG&JQ^rL#639h74xCmvM|d
z>Jl&uwCK*bM2SVzr=}~k!r2sJBM+kZbK}2sp)p_cnM4Gk<o}xEQUU<2X}381{>c0w
z>lzjl4q11^)--}V6(jvUCXr~>gfrJpk?nHXDQUQM=gU|v!l8pH%3$mqZY=V`%JTBe
zmf1AZQ(STtMai1xp!EBn>J4jM92d#${|;9~{@dAo?i&{zNvcXx?HJ=S|4M*HTIFzd
zm?GtF)vVvq%gO!QGn)mm<!wGn^<@vb;k#2;e!X_VzAk->+aDZ@o>MqRhlGI7_#dd&
zIW0YCx8IW1tGaI4>O(>G@y{W`mWc9*8veOjNDY-;J9=EyFLXmGc3vw(Ii+D#LVnnP
zU8>6`S1x18SuH)O9h+`5Q@u$xTeWlho{A9_nS-4W*0U!q?Y#*)U2f~xjhROcIlgO-
zNRYT9Vx1{%PBGO93Ef)hIPBoTK<7M%Z%F)wFC1_mUCrphRNLnZl~*sYks}1bu6)Tc
zHa@Jk-*uws4Vem8=<lU^Lu}JY+i4$vGfz@uidj)-&h7->e(bkMn#`WgyeP^LO&R!k
zjJtmj73k?3#Z94|<w8827=3$vGOaEFLO5ErAJe9goL@c=#Van3dYe5=)9O!<m=VX%
z%PU{Jt^(tGbM+OvQM-~X_&MhLuYhetUm=9BhDcpWnpb8O4Q*#xSEl&>`GMzFTS$D~
zcc}~tp5E}3*4p=Afgs_L{v!xycv}DcYP8kp%(`ov2~>8>4OoF!fE-++6*4IivQ!N#
zWhpCuC|j*X(}jM&Fydu7KIDB&miPC`0*Yz608vPnCJEk;N>&m+GMAu=4mQJ8r{Swg
zk@l-psbkFuF6bpak#PhgBYyryNx2*V-Ls=j#+i-M+9V_0?w0F?>}%K_o3D+Oq4@B@
zOt>}XW%G}alNNLu7UQ?sP|~}&ugu2f{W`-&)s0ZVnY$bF1tzD<TyWsEey~{h#)4zN
z#U2<ONOfPurqUDlYUcTwpd(qJ3dHROmv+c({;1Q~j{m4%ip)93Qzbq(#qOaT^Zh6g
z=kjA(cas3p(nH1#?><Ym(N0T2V=>ope{85XqiN9XCc_KK8&!nEHgEgYIZl?n_#k4Q
ztIU|qww|Vh>7}>Fb9BD$SIIUw0PfOI_;0Yhc$eIbn}YYIOVcAgo19IjT%)n!vT+6V
zV$C*tBF0wFag4X$PO4JFL>1;CHCWU&>T*pxxZi6okf)QC{38n?KiQ5`!JGL#lS##q
zG>&x|8)QiHq=P;mIeSM+WWx{GbYok;J*2FKm!U=-eXsZ1$Xds6L4ECKTZbw%UkT&E
z!0>ikBbL}krs|9*BXtpU3?|-!WKwfc>^paT+}RraE2e*6B^0FeO%s9-+8gpC*c)Ta
zMl*7t*4IHppXf;$Rj7-s5zO)hBAl4{V!zsJUSkm9fX^-SnhFlmnpNlQ?|GU-eF5?f
z6f(p-E%GpdPPsNoX8>p!o5@RF{G(cyLl5?^Njja@PG-k5X|u68Oi$dUSA7}mg%E`Y
z{=+kNHS79rI7W~ULJl#r*}T8jtf(Vag=@QZOEz*=Rw+pXa7><i8LstJ<u+eL-c#8%
z?&8IXtXd6Mk~_Ja^U&e4AZY6X=#2T37}6Px>^9yBNrqrVUS8CN|9<y2FA*U6&3~sq
z2m`5RxJ~D%&(XpQZw0uFY$F@bqtYs=w|(giU`7c=PkI!8QR?Kyn0btnNR{a97q+n-
ziSFwzr}S{VisesGwd6IDdc|1CVC+H8Kn@fJp>9lAEWUOf9dS^nVFfy2{)lW?k345F
z=S}N?El2dxHts%=w~Pch>x9D!a*)0s5P3m~ZXhs6oECd*c^%~#iJr?t8cxZz*^Byr
zo*{GSwo&O6Ap@V8!R}gnAi0Y0TA@zH`iJqaJfi+C<$#%~?Tf6|Kr@eBC<V8zWUV~)
zs1mmax1jchA1q6BciD`sh7~KQf(Yh=FgTsG84=#Kx>+HKZs##SACj^ZHSb(Q8uS$+
z@*{F!uXZY<{OBuk<Z`p}7MV{F=T-u{iy9u><XpF00B+Mg)P5CqOQet8ybkQ*85wQ@
z$dXsoCM@K9n9!c{5QdKQ;+)lPgwFYwX}t1eSwgSQwY?fXaA4y9Uu-A;$Cl1DgM^}}
zGe$aaXR9#Jcw1QiglFX9lE?NGrf|JdqON3*_kjJCn0Zo~ApXa>v~$ACC1B|TK<WKt
zp`<1aX%4ugZq<hMhN04pqjdL#uy>$bQA>^}a)@K#6py%<%RgRO<rBVfCvH6-^s@Ie
zg*L-P<ZhNXOS(yladvM}j$8xAJ1Df#1!StKUthE39jUb%o-#Jz8pD=ikw~P*(*J}w
zwKx@N+E5??H*3@xC2+F>Eky3bEz!S(9u=Av8`R$0pN1r)ZHD?-0$Wg|eBHGtvFyn!
z1cn+sBVPCM=RqU)B4pxD=?RqGE#?`K^#?BF%gm6jM<Uh2bU!BDnhi;y3a_CLV}4NW
z^hK&wsRXMIPrxF~ikfbc|F%BW0xB^*-4qrvXs0tMsx9WzhGvtz0M<4V^ueDKY{6Zg
z7s-EDNc6h|9@W<g!lq9tM>pgTigzpl91fkSsJ@}L?vP<ho^Wvd&@*BIW)_9tO$h7A
zy$#5GI1Jo(?MMZ~vzs3P!oY*%{kO5OLh3Gx>`w)s_!$r3S@PZ_O9Wqfx3*~lTo*Kb
z8--P^L7%^?u???#`~y)*wxLYJ-37Beeo}QphmU}MGxb$+Z;Vi1+zqFfqyO$v_@>3E
z$UTm7Jq(g^=kq8}I!FB2YXk2QwcV9*Yd1IdBC=jwqqmY%OB^lMUBI0rzA(?8T-{)J
zI&rhAq(LwHSqsD8izQ#=Ljvu<w99fSiPv{cSUN7g3<P)Qdefoww~i<|8$~#o@5R{@
zz0<t4ZKh_a^5>WxtI4i*bs%>Grm<+QUmE=b3jdA=sv7nbp71dZKadW`^4zfs5tH#K
z#8@A26l6AFNb^mpvf?$BWu>H{ak#iwzKfrLQ5z~RaM`}%$y7HEt{|6}-hfkBD`w`q
zslDGivD+nJuZ&_~z(1CcYHu0&w<$l4t8cWjkryBvnN?WYvgcR!yalNXePWr^@)(6#
z!j_P;sXm9FVl0u8Z%fuizWPeHiHoR(ud9aP+@qD2n`J7R-NSK?lo9W))Cd<4zK>X=
zt%GK_W7B&a%Dx_7Pyo|l$4rsu0$>KdeV*J08z&qad{!SV#yU=~C0PI|Bj%uUCTYNo
zB}Yx~pHq05+7bR^XD!f?*wJ-<$}wyzF4(8br;S}~@s=#vsz<2o62Dxnf#3y`U{Pt>
z`=ej;Hw@X$lV-SG*H)28bzbck_46UC+i$2>UNM5!vLZNR%o|8GY1F<vt<!Q8BQZ0B
zQ$N0mL2QA(#AZvRY0F+PO7Q}<vGRh1E|sciTYsZ44xLQ?i8k)mP@lN7+2+E<06=0m
zn+sn0>F9pHFFdXunFxz7M&CPCP#;?Yas^z(_Krk{gCC$%JJZhE^r+mD;TiuZ;l|nR
zd)<fGOXEM)le6>{p(x$H%H*OAJ$^HG?~&-d8^zZ3zBL_@e08hs=a@cJZ8P|Yj&8MF
zn#WJ5Jzi1j8>&6@Nai0A@92NBIY?(9+B${u`S{wtJvUO0;--`FFs&z4W>wu~ce|AM
zYF1HkM6b*u!}0GT5+rl^Q1^ygAwS49wM_nnOXzYOv)}EmnZvlAt=C}PqquS7-}mFC
zkCM50^Oz$-bUjABTDGQ+IlbPov7}&EH03KY)8Z;M)zy2C__}M-6@km*b1lLUU}oI4
z>FS-eM}rpi<=hkRb3u`Cm}pgDMQ-~aL1zL^k8%G&eXDvjXPo|i*g-pSLvi}-cpa8Q
z1%m^&yKdgu*WWTbs_9I*$xDl=fQ!0#bbrUjZzcMwt0>`gUH)EYHkwJ!O-~e#Bu6fi
z4$f1RwQ!>$p}@+QB?&yA%l{Ar@tPUE7JX~z;C?mjCl5+z5rUkz?2njAz2Ks$0zu3i
z1S-EhiI;~UDZgGbBr8;e4*$kG$*jO^076Q@SVH(k;hs%><5X@+cmm-GbK^pFQpGN)
zE-VGC9*D(^HtQLfk)VB*b8@|&zVnyN^Hil6&-o?tVY(Q+@re9bdfktU#)Fw><3RwP
z^m`6z1gJoZds0rBVX)2zhXHx=x+$ly*^fF$?$(=MauGxj36Qmq8$1F?^Q;*|W@rnR
zxf4JnoUQJ~O;dn02kukUr#i5jDAO8sUA?_~E!GmNP2Rnff#f>~8Y>zU3(=K|rB#7}
z*$~C6da(A~27@euAw~-bKdb&>r=Exhj=-;y5;1zyBQ=`IjG+@}z&>5j9hXs3uZ<8a
zT1eN=8*o}0R^wPYmw@@e3Zt`ANB8dM^2y9wWrHmbhor`n7@v5ts+2d_ysjAmQ-^5{
zO9mKcdrMOA7T9QczVgE55Q_qJsv)*Oziq)Qxnz!p@s9;>IdKP*Fp`qgFg2v8HU~V$
z$@*V_s1wU^k_6$DkTE2^g{`PjKCam56My(2P#M)<aQjiIS_v}IKU^Nas){(4l(Stm
zn$)o7qPU~OrCty?ZLKgY%-t2Y&HJ?U#3bs-G)EX6a0H$=oEw5ZZy(->>G{(Exjdz;
zDfdR+f~2S_h`KuU8yVcUG+^t4J7OUwwFPHF7c16tCTREhAyMaVcB<4Jvnj&Xlac$9
zBkV;!jP1tY-?V^W@~qXMY9C%lU5iTj->_9i<&grH*h9>=6@0GuhqrPZTVy_dC*FkP
z9P1s4nKWZh;pyzcu%5xS4`x^iq-W}xJN0Q^;MRg3%eVa~ML5t`X}8g}o?|?>Os=Z4
zqtpt0tf5m47(Zr29%Sx<Pexjj5pcREC4tOwjypEdgH#tmiMiP?rmhT1E&h$IDP~2l
z_ZpWN4cx}N0y}#YqIK$Q-GML10LnLAtFbq%|2)>b!nV$h3>e&ri8_*KGlmyeOal8i
z$JhKEBd3pd7Sv`o7|x0W-(&5ONECwaR(FWA>m*wJdj~k9LcSV$-(1kNV9!Bd$WXr<
z46$SYqcqR;H%HEzBgh4Mi+pfk=4*u(PX}ULbr*eoJ!X%<pL-<_TyK$(a9ED9!^KC+
zWxq~emGqM`p%T1=Ta#L#eky3!WsspjhFI^lg~fb{->#5a_T9t5h6x$m&W>K2i~U|A
z5!WEe9l(HavB_qJvmc#z*=vN_2?Na~I#QhyNC1{dzeS}A?CFGmr;iRkoKHnqd1UWy
z8}Xu32zk$NkD1wTub)SkfTuTQN{tUVXb)bbPSJS3bgn<&A<D)1f}9sFqoa?|qb~Lc
zk{JMRv=~`jwMG9;g!3GqHw2VGQ?Z-F;<(DzfzQxfNVd}1=iWxCSbpwDJD{$lLyGxq
z9P1DXb)Y_fcFHW`C<G6lrFh<D$SNl_kj4v$LUmL2YkY>(pykrCZ6Sqoj2A&GF0}r|
ziun7ud!$IFXyMlj<8lgAZ~(0dQr-J(IZ96f)=qxk)GjITu5-(eNoCO%&>QWn(0WGg
z>OlD6wK!Tc`z9u*z{u|s-p%E373?~-8scQT3zHWwHM0;x;kO#p7e;zAkf2l__|qZi
zlkls&-kJUJwf~Ki@c)R?pZlNtQ&KZnqk&y7oF7v(J{%vLSQ~IX7E{F9)g$)BB}*pz
zHNA@vr)A!Z*=&!cMm&n_-*Lgg=O&QG&1oq{TSGDPgx`5$LTz4!RDM3?^t^^>>2QpW
zr0j~<_LRZHpd&^Wy!piWP#Pzl843q`18Yb*_PqOHQUIx`AvRIU{IP%gZl1%pWQ$l<
z6RAa+zY1`;Dj)o@UAZ~)paAfU^aNoJzd0P2Wmb=Zksf{||3%^cK_52QKD$WrqDa5+
zJb7*%{8+RNE9Y@hc4hGr@|=*Vt`=S>JWV*JVVbaOJJiJ-iCynDuU68I9MlryMcius
z6EwD&V-?%kk|Ad+*2fM?2l2nGKk#Uk%Zy}=t%$zX%5F-P30}HB5Yu-v5&fLY9$_WH
zc8%jYC&YRnA)60U?*(Hq?O>Gtp6RahhOtHjU$_m0{z#nl+adHt3^O9L|DvPA8G`jC
zo-}sD9bK)v-!4HLk7C-TUo?`A&!GZ4l+fT`1NZNG<2gC}&L?MQpmFeq0u`IlI8aO^
z5e}%#`_ftZ5&>3ZKEx&e-M{I$qU$>Y;jOxm@Hpl(U20}HXZK#;Pz~)J^F|UL$-vNq
z5P#)zBEDC}2+!fuzyV-aDpeMuCf?(}T?;qa8gr+6EWYICp3qfQBDr|$g#?i}Rs}#G
zm$cU((F){izN_&Q8*lGJWjU-_nFan%pTlBStL<iu`ju8IQ;5`c*FY=3@dvfc$4Xrq
z7e*UAlm-W#fUBW$|I0_KI^O^6vT!lIEF_dvHSmwN(T!i94OSSEq8qiXv!^ANp7Sv^
zRp^livZY)xI>eYfCuCJxN?t7y!b1FfbC;jKyKw{4sZ15OTK(t-ggtyTDjNP?vhh|_
zJ#2GH<Yv@P5^m02<S^eIvL`tJRC`Q4X4#a$@q-BhTzK=nv4@`8+feGK);k7YcwuG6
z_zz_6ELg7g7Su`%_4#yQxN5On0hD1syEX+iJZgdq-6j>pGdF*GW>2kV3~UT9Kc_k+
zaD!*hwn)kc^%ki`stx=wS?6Jm?wZ&XbML&4j6wR2`Ui-JTD_)EpPowh#{?Q`9YU5R
zGw6qPk%@YNc=G#vV+l`@1x7HGDDG^*DZ`r7ae+s*Ed|-PT$_SE1N+9_z(#om)G9|G
zH&kQ&6Ji2f+9%c8fb&~dUx;%SZ8sK2IM%HMrA^`WMn94TNnO6yxmL^vq3nU7J);h?
zT?jcopYI0?UC@@JJ)<vme&y@Yl?6^QS)~qd&8Iy4^&F;t14jI&@vK|@OlNA5<Dg*s
zIVP*`+g~<dNm;}`dAI)*$1xh4t6aPwi8?my7Fs?(C*`L%Ohx-9jX0J;s|Q15>Pk@E
z3`_gmPp1ZytvZj{^4{k3&A&a<5~NuTQ!$)i;l^lBMQADoHWa@-uQ>c#e>5n(h%{j%
zHw4Gf)_vKNZ2S<Rmak^py?4)?g0s8~gbU&eLVcNY9-WFetwG607+uq076?ba&b@qm
z=-^7X+0!)avRR8lLpP@Ey*EM1a+=TuuLvLyx(nzJmyc$ND83X+js0TCWm1!EyR?X{
zApz#GZmrgBTG?VfjlJ@xfl^zcAf2ZE3h(0AXbsSO>3>~r$%S(Ffg4n+7$c^RsUqi7
zL*zb$qjvoQ7sBlkaRJ?UwukDgv70@v#A1h{O672ntz%M4YlOv7GOE_VJojkQsLN?f
zzYpoK1NF{o^&kz`pJD@#rXWM{*y61jJ`Ia%`S=uwU7YlDOuLOqSR7)hg2oafcxMCe
zBCHmR5)69cjt*I3EB(*)HRQ7NQojEf%m~~0<@gY=34gw`O=u|;7IDawz@XPEL=6cN
z{i_m@ly$cYqP9fiZ0~bPvEH{6VYB#JkjK$?Vc4iw8M(b~%lWn@1Ns~2+-f=uE*>zi
z6go$|MBSK@csLbf{(x{vmIQV%i}M@P;ccS`YvRvpB^#%=2;zh2t2hV9*(d#Cr5hW<
zPTN4a!XU=)-I9h|UWEhksp{RS0cQEe5I1u_lZ~pytO{&o^MW+&_Az-o+b;SJ?EcZR
zcU`&~2ZDZTMASb|s2f9we(o4u<1F2NYKP;RBETsAe6{>5TdNzSrcSWCbcK9<+TOEY
z`}O;$qRU`f<Qq0raZM!pw^Hn-%G>)RG_6|BTDqr=%Z-RF8HItQ2WLtOt=a890f5c1
zvy`db^wAk5!Mm|Xxr^fdfz`*WL7vq<5^bq*5RRJ0dBa5frBaht)csxFOO{(cc^k{u
znhjLv`c7ajzW4J|<1Jm2#n&R8-Jd^vuja?A<$fmlPOmXTnr0#?ID)N7K?p`2Yc_q+
zJy-dS94KVO_pRw5KM_fjCi@_bV5@>tYuA<d&wFf>=Wq{b*^A^tl0ptT7X8reFtL67
zJ15sBWLBG>Dg)I?)uD9lPt*cyrZ=p$wfF|BJNlR(Sh^_W&I(Q0>+tZ>!5NcMPA!<V
zR!?A1*xL3P_}f1T`uXDrau3C0HyTbOKHIR9ntKa(r0%kAP2wv<T;O`>M^0Dz*uuqA
zi>Y?_(&WxFrx3}o)<*aK=+_HU;90}0R;t)|V3I=_w`iI;k1zEy0EFtXear=xfI%#o
zR4UUq>oc|}mDcpvnxS;G%riD`K(8ES*qeKR^uVYJ;y3j|vGkV<#}EUOao}4~w&Pz_
zbK%Kf_?1iS59q*hi&Yf)S`;}DWHa2Gsdlp|ZD{*7t>5|VZv6hasC{#fLuE2OH9kQ8
z>SDU{@t$MoGB5jaFuwC6k~nY>pn*2@UcYhU3^5xwkAV?T+V67yWh7JaSEvy3xTIb2
z3hA4@l3sbZl@{jY^|YvY<`j=EB)qjZ*rXK=`{FPth)<61Tmf-*f^K<qcw4Hd2K|x}
z(S)HtD>5|XayApM%(h>Fzi&Zk8XccXNpy-3y-suB2cLqj7^gOWRLCIPz_h*Ys2K}+
znoG#GO@W*9Y6CpN%$(UDfa<@+0H-X^`2shfqI0y<Aw9YLy=lqxc7Y@Y(gXKP(xTzl
z9b<q7fH8LwqT+2s(js2<0s{Q-#3DJaF%YVpRBxp6>kO9e8w1LFx3RibqCIY*eyw!+
z!I=hyQ?T8g7v_Qvc<z+LkEM}qTW_w!VY!+=lXXF?l!#+9F>+H$n}4mANtcd&n1XQ~
z3iFM}k%X?w{|h!&$fd|MnV%AGgTd+RC~yF0WT%|~nPvQh;1|Bi?AsBg<<9Z@&&mtu
zEt)>xA7~`vUnjsog(p6_9~X%k-=*R^=&mip(DCR(v_Brr{QHM;(foW`dgNg52me<J
z<^Nv@9vj#Akid`grD+#ph`=H)$zTHI`(oqd|Cn&jPhBeY59%*1zBVCTToa$7R84a{
zt*c!n1K-cL#0X-bMkuM(WH0jGMB%qW6QB!j#eB#IIt^JSPtA|P3q(7a>f4|>3zU4o
zh4V4abJGEIDHZLU&~+XsS^%!t$$C;{A06V~k|Q_jHo>CgDBg9}BF=sha6~C_p&-;D
z^FjN16;C$AA(*U&Je<&v-$p?QSGrYElU`^Ji~6t~J&T>b%{2KDO)+M(!n?;XU-pDk
zd~~0sPkdUDO<eX%2J3*Z%r{$Bw8IspR|&Jl5_wjRt82SsYp(=k`1vtK7lp^DhU-|d
zXh>+0%Aw)UyJ<IX_}tr@B-ix<RSp9E-DbITtZ7zz?IoQaL3KLwB$<oB>m8^>ptUaS
z5JY9m`pn2sL;qfstnXToxB*N0|4{e#VNIRszA%W&v|8xiItOimIBloe=@x3yQ9i<w
zdaS!viPqgRTRu`tr)vE`%9kW23w4yXc0i|Nu~Z0ZHMS1KPOE$gOQjktN~l4WW59qB
zLRdl|$%15Mt=02e^p8E)^}gpiXRh}>bG`3B)*{Jz*7MxY{rS6pHyNE_Eu}{t&Pkxr
z!$|TRZf(Ul+E4KYX*R}-9ahr2U?|!=<}q!OxJofb*zf*Wwbg2pkZKQQD|{TO6YKTa
z+{h&e-}i`uFhAM50jycu?)wElN@4@iz6jEU0gD{?VCWIwo}OWIm(d`Pxvl|_;o21H
zhGPPOXv3pupV&kIm9rYOIZDhIS$~BcAI9Axx=NXw&{~L!FBSVew&(IZ?eXw$Rl!&t
z!JGwS14B8g@(0xd5or$}E2&tPQ0AVTNG+&B#Q^Q`iSV~e*W|@snWq+Bh%e-=_H&NY
z_seH+ZXSePEhq=>*<aZ`I_)`sDtAXDMr|`$n_hd#&9}%pxCb>*FcpM?`3g~SN1R{C
z{?yx>-z&(!B2zscTDio$9OG`gtOreRdt#A6G9rrUvW5RBs5Cfp-}I*D;XJXSz<j=5
z&|I<U(p+ki`^tKQEJF&cv8nm3j4#NRkYQT4!mIXNFO014T_F|9A=G`Djske3jaiJQ
zx^5PTSu(9BoTwZH)oZCzYgSzWqt)fmXRhX4iCAT~7<OtDi<SMzp&zb+mTf!T{QCL&
z3A9v>F($*VVE9^gnsw~_%$K!m7^D;TQ+!(jN`!VIsWPWyW~TKy?#*<u2`VG~I#qqY
z*2%#;`CRAF8LcJqMb^^Q(cE2y>7tJA7E*2!;gK)rbl7WAyH8)W+^p32^Tnp=l@m_J
z?0iMsqg}y!?DWuTg_%=EU+oE8?6hY!bfpXfN53G^%eJy6S1_2g!^AQGS9|?UiC{J?
z58fV<<F(N~wT(HP&JW{WM{vVubP{7NJ5*>&MnBS5Cs3#n7Vigj;&4B$e2I_CHqV<F
zc?@Hi;c~G^iO|(oMQwqoTj!+tLYsW-(<?V_47bOCgTPDbk}*j^uP&Sz?q0V$@@@h!
zu5gDf<pr>{p+f)w;jn6`+ns?Nr-m6dX6k;ZK)+wcJ?d6>3Lg(wrZ|jPqt0dRj4>fM
zxT_rQ;ddBwX4I%S!C&}Oz?ya1ic&~zHkbLa<k!|_h-F&cos0ekE5ARn#WKg#|0!ei
zhHq#<1(}^;aHQjd_X@Yy+YOPT)j%7n--Ng@PVq20TeCoia(-qc=D4U-<VNI~l=>w7
zPU_@s>u6s30n_<$#>3joh5=RM-E%$%lIC>k_U5hRtm|qn(;9&|YC-ef0!Qrw%Fy<9
zyPSMOo(&6iQY^=OyoS58(9{)0sRpBc;~-t=`xFi~4ct1}@;4|lU6u}x%DJ5jhzGA~
zD~J}W3wjbstO()XKqsPCw&s(<o=-N@ZYNsz4Z;r0xO<9U{5K1?6Y6AhE#<S(#L<+c
z9?+^4FqFx(ZR8Slu7+H{7Z5|^Y_rD+jOf}|#BC$PUZ<}+#xfU0AnV5WGc<|Lp_cR|
z>BJ2N3Er<!j5Ew-%uILYz2azGhBAJ})>G%njro9R42FlG{t+a=v7U{vm@=%L;}mk4
z?wDbW!&7bUocTe#`eQgNW&MUpE#9oFIrXii4Z2u)qu8`XqG%3crNQF0I~s?#S-9@>
z`<Eb87PCQLH|6Vb3r-KGkhK<!H=YS+r5;YbOSyEiRusIH^lpRAE@*It6&M`i2O#k4
z+3JRpv|%`-h2`&C<sOIn<6lhJOPahB#_+eb+5`77mGvIbSj;<RIzzgkv~HVDe(xXi
zvEZTEKxyygIbFk>th|t$1pr2I|0g+OcuCyYepCO-3Eb#~OJ0yW9XsNc?bcs?uxv;k
z@3F~{7hFpa4#Uw(7<pQ&E713TVFs0zzR#jVT#zFjDIX|}tP-hpra6ob84mh7sQgZf
zWIx!x$R!r^KFt(Ve!nbD)FO_MT7{zPqJ%^zb8CiFjhB_qkp~lLIa1>XTsp;0>cjap
zP!Jian&t+s$Ui>L`}dlIYqY0kJ5S>bCiusjb#z~~g}HF)yRd{%r6E=<<afOas_$C1
zw%vj=8~wMYJyfDqW!KM_>6Do?0``k0zDaH6k~Ga^fk9)KIH);DtN@i!`wKaF<ZaZF
z|0vHwaMFVNS9GnNIA;2WVXs_|&oqQf1{E68Fa3v0$ye=)wS9s~xXtw=2*JRZnETW=
z^o4?sGR>xMmM;<$xXiEgK#aIM&!O@__r_q_(lQ}#{Y`=V@(uX>;>9q8y<kc`icrqL
zBuNlMqHOIo<V(=Gfp|iSpzspAH+xPUTPiki2LZ`;iWtF4ZUp>JJRwLq;*6&9uw{}P
z%a_L<(?Wku_Gm^5ob0M@spK4U!8ZeK=oNoNm|Um6KrDC+6*CMXxEsSaM(T=v_StYL
zU7d&^u-EhE8*o1eJ0aw(T3QZ2?F?QQcD}ov49$>81U-@`SVQT1YvxMXUK4v-1NT^}
z+Vx2LGCC{KnvAzmxTJ9eh|lIo@90-)H<!omgGA_g;_M$dK`tj20bd*8$kE(iK360$
zq-oN_WcuHpiB(iKQCBCqU&aDVUbVQ`cK}<nYcrez0JX2pk8agcBrD|2f+L``Z@Bqu
zVY>{kpA0}Z+dok>`Fn2Xqz{cT9_f#X*f;UJnyY=~(@5`cpHlch_k^j87<Yt(rS<IR
z$T}b;R1VKrF*+R&F)(CnjPxPi5sQQC#y=PwPdtD0MivKsg)+pEHo9FG_0Q=4{QHrS
zv8fR%cs>`m1X_ycAI>f*jMy#lFrDiT=%zA6pD9zEUlr*I_<iBS32xkBIj+hcE?GY1
z)j%g5aCjMOH=J;mf*QP}NG#;?62$ax*{YyjK&V<O0~o6zIk+hx`dJ5a9LH^(Z>{`1
zV3{dd1N!b~$M~_^MIofAvvkdvag9H+5Rzi%TX0O^W?8P;m2K@5$k6qrDlIyQFNlrX
ze-+w)nXuDyJmPmq)ldo}pbj+aD~SM04~!ZrJZb9%6>H}B;<`Xl1D-=&b&%MM>PWB5
ze#AF6>>cxbDKm$PwencP&aFqdNA&vGx+cJF(SACSuz5BPgkae7WCn>?@-ZDF?6xuH
zXW3I6e~^l9^9U<V{WR`|PLzB=C;WhD#_l7$Z}S==ZCt>}fxA0~h13zHfuHRVBXHYm
zeNrD(#tEp*k!B~?nX!wAUSX~!+CG+w5X#%3Lrx&awmgsV5S107=vrvK{z5kqa08eQ
zR1P*@2t#`+Ro3PTGl5_-7k;I5iAt*_SCMlKBjO7Ha7KsFl)>81Z3)vVyY3m5Bh4aR
zq7QA&nk1_UJG#VfuR@`g^}x9YBptcMDQay7MR>QBwoaJLO#5;!yVU+V*i6L6Ctwvq
zt)1&$Rl%ROnd$J+1qk;zvGU^VT+VN|SfQ!)Ri`***-?Dm!Sh-&9~baJB&9cyZtH&E
zcReUzozuoQw@r%tSlIDD#Uka=R(o+P=keECJCOT9LFICc$>y=~!P{{TGaK-_T~{rx
zS*1pu!VF{q{A3KDDbpR6d>OjZ8b8B)*Aq--(UCo80iWyjX`iKl%N*nLyVJ&w=jbxz
z^5wiHcw@BrTT%BX+ME@?#G)+c`9}W2{Wj^!g=dx|{Tg2e+whqaT{U1GsouuUO4!`#
z$~F_FR2GhO=svm6%(^?-!HWuUZu|^!_d~bIW9oh1007oPVJ8mMkZ8(NlNH~~>;}R_
z5gUwC%C%Gh>+tP!Q0z&I;!W=izCpLCbx1=9zmpX2sP>&<QQ6hSPrL&ZGR`i`wd|B#
zRMKmW78B2*t%!_zS?$lXQbU>>RuD)40b%$(n1<<rW$N5v^Kq4(lBID2rKb1bRS{Hj
zsit9@_i@4$>+k|pd&IODnncQRM6VTx6AOHUkyeyKQ~9xEcnMaT9Smcd%E%0Cuugjw
z=qlfsRYvoGn?ImVm$5(Q@<@@EDl*7KHF(Ca_{9Il3JEO|pSh=YaBgHVg@d8?*v<-D
zdnWFvAkfusHE35xm)YQWY=fW#02GF=W=c0O-nX-A*GBlo7btHa_AAlp&EW;o$cr#F
z=9F6YzL+|qncxqA9fxz@m`n7T_r94oF(ND;)&Q@CVRPykrnz?dV!U6Qkm>I4DdZ-Q
zDZBy3AkH!nrH;gNO6Ot<>9bv5`^PbVc8Bmx4LjJJf~yZ(GOzt5k`O7+xShuH=r5?A
zL8^C&-nR#lWq$MUQJN@A*8CN7=Fn&CFfbMn(`)YyPi(V7NM}qZlTl*9#&?|)pBVQ|
zv+h{Z+!OhQYAdaI^MD9jCMr8&d`!)!m7LRc4~R0Q+vhf8CPC8-xNX(f8wwF`Kq-By
zUI+;u1<pu!M%AH1jE!2-OMq%x`TI@LC)cSaMl`YGk<Ir(!pZKW?jWIlf1Fk<wdC~_
zMmrV|!cOn-h@3FJW$ojHHUoRssZZHvS?j#mWdRkc$#%DZ!)^W(5q8VKZu2nSyr(oG
zS^9-o?aEJ9=Na9JE&P@Nw;SLrxz5q8+IIW?XSX@D!1`wBMtSOTzW7~dgOXyo`T9yn
z@b4Kr;B2I0=<vG*n5Ek&YCADgl3)~6f1`+zv0j|j&K$F~)~iYUvr|gfq@sg73Zlk%
zW{%1=CBbF`^9XcWw|hV_Da@I_W7>QV-y{b($C!K?!hhMf$Ea<}7caPGiWE)QbZ27r
zA3>V^v_Kwn>U{;4(Tg9Zf#h<842dyOssbv*S^!eeP4@-0(yTSTYPd6ee{dZxFWi%B
zAk}fX99fO7r!3V?iL1NBOP@LZmI#?h_#n=oZLS5Z1MZcwU|W92m*e~%s_!q2J9`Y-
zIj!SN=PX~2S!P>Hl=ZvZFT~4-y@t;kaqa>0M_CL&tHsBv6SL&R4CLN;Z6?LXzm6#F
z`(1KPeC`BmJ6>SdPY%)h)RWoVtX6SE<^AQM^Vzw*fu&iUs)wNUhnupGqa;e|N7%4=
znGsF$Z@rjYPaYK^f7DH+gxLv0(gzy%(Dcw}L8SGKGzrU%()fAGlvEIC9gJ6x4;CUF
zq}N($F!H_xrg7Go!`bIkZj`<0HjnQKxXEB7+Efs9<=LQ0UO)#3B0(=v@ZfpPPXXZ~
zRk}fUTBZkYFIc1z<oE0K>w2v6_yVyiS7tvO2A`yVf=roRn~Zsh^0?5;W9-R(De5@)
zc<Qr}pTmTFqPE4d`dbo?9(GMoeFV^u)v+29r|dd~7D*V)e3bcdf|yn_8-&tD%S1i)
zk!u>HkcGh<2A4(h*yc+1SZ5r&1^-i;Gfsf46S~WcpR$8*h!>c_7x9&5@#5V{Z-{+p
z9>CTs3&0+QUlTU*#R@=`q~Yt@paB#c7G?>#=p%Mm@C8TSxQjJcbK*((cF22eOoNh}
zKyJNu9RNW9#yNbqDV;B5Fbzx4!_0$s<rQq;;PWK08ieczP#{_%sbRNw{jG@uqBaSH
zS!ipLIO1W=u#Pp4*^pua@8E=Z@?Ct%7~?tlfFkQ&-un21&G0>fUk2cfIa^;94K3HK
z-2M5NFCJVOc0LXH-JcC{jr4Z(!{?zcD_=-UdAgBzOBmif;Ccn+7(4Se5G3SVPnLi2
zG1kQnJ-?+6_9f$;S=XMwv3-EKlDPf9a*6*Okni6=?>XCkYj}32$CzAkK32>PxFjeN
zY>|I6?#XQ(`~|x#Kps<B{45evl@&xr?Dc?ImQV87VdG9?z}u0FjtnUcq(h_*bx$+(
z4eulMWR+Z;L^1rfNi`VgaM19=z!@alSYVcB>OKMH44Uz3_t|S*$Z=pd7#fD3ORARq
zI}DQbpomx5{ADh2GzeODs@*m0ge~8gBI3#(^k36xftE1Y9UXxY-#``;>|+tD7DJ0O
z3U4-p2xSj{?FL%yoLr8>c`fkF1jMJND+H}W2sn=17=*iqp>PkS(?Ud&q=Vg5@?g;`
zWsp{AU4n2#hXw~EHK>f{Cih5-o797&US=|wJv^1TmHhW;cZh-zvW&d#<6vmJ^M8PR
zQzqYV`8(#3`_|&q4fn4?eVA!p$fmo#0^Z+lc6O?<3e+&3H~>@~M*`D|9=XvxUobCY
z3WVon<_=j~t&iU#)^;L1>K8RDC_U1rCVi8PBpLB>urFigk&)$cfL{09l8stlL|%or
z_6e!AXRN!LxRMIeNVy!&*8!Yh@vQ2PLd`@U>u_GS$p=MBahV8}0<xlr*tw>xvrOsw
z&TL<A_|w>Eszg`dDT?zD8F7)wF7e!0viN$NvZ=5zA0KfC8Q(yeP)Ab+!!zY{8|4vu
zC(of%S!Kuk-eF6rDz1Ps;gRRIBh!3XhslkxkJNe0l~Z~TD&1rJPJ!q%2-?Jx<EGm6
zk9HyPNyy%u*ov8FcQp5llRv@$6d|Q&pd?Ns2jg2}MRB5s)S<IZyPr0x4e>ahL+&J_
z!vmnDp>%Yy7K?7d*t_2{J47w4OcG{wi_eyxjfj)Ams@yF;};hS^ipNl7X^2Q>HGyY
z;)K!H9-Kj3uNc?F@1c~&(O-HfQ?q4>m%JQiVCc%Cg78q2<zvzgTL+a#YN_Z|wd#VQ
zr7mNzLEBSGu6d|hj|^`iio#-6s>j!?TRIS>Z3YMX`cknu7DQE9Egoda4DI)bg_JUh
zEYlM3N@RV|ndk7G1^g7l?=1tIh87k+JRnoLOG(q1bNPtb(o7w+Ot|m99QUs68&3U+
z7!gx?wUpso`n85+LD_STb#Ib_$%|Sl`Bk}mtJMzveReuaH#FCZI-vG+dRygWZj9Ri
zmg-P+DN~%~U61Qxb6MDYoC)`h<pjShLB5dNCZw9hz>OqoIp98f8yXjxbG=ghD>Ut5
zKlxTL`c-QW2YGl+j!!ofI_XZ8Sx-0mG)xAfR4a+FHT7VjiF9~a6fE8>sD*(l2At~5
zxTdm^+$be70(-u-8qf_AGg3J4wUhH%JalUciC``9%JEY1VkoE`hfQbC07KUFF=h2;
z)$(#w$6gaw%?0Xb=jXO_ZwX4a|8Ex86GY0kLBQpehc{QMj%%AP+g#y$kB?!ZBj@br
z&Qrcr3<KW=IVd(?j4^wRdSCml2wqfcI4kF@r!q$Tg;5Rif3;+#F5S$#QKDA^Fq5H7
zJoU(6c^%m=rL&0(Frwx`J3cPZl4v*g@Ebv3__x%yYMT8v4nzHbKR`<17W(>JzCnrK
zQ@+%7;Zoz-1eUMoxyYVZ@tqQ5u%XNs+HP?$KIQ2z=#G%Uai`N^3ZGau*>az%H+jsP
z9JhPOwzY;Ivn-o(xJ(O|3k=Eitx8cgqG?D~c;B62XoEZZ#F=}lL&ql^MnJJPu*|hE
zM$e<(mHrzcU8nR$D!YWRWkc|aoZOp0uJB8YdBDDn`xdEkVZ$q}c5_7iNe+|d^7(vr
z297?OHdCf`CS;Daq^|R}mi%M0l1^6@D@>;-Ppxz3gK;*TEY|zj+0F?A(eP71d1yW8
zVIUatCrKzYeV-}$LW=W_NdB72`YpfT30=Ea&~8yG+@<}u%himePrESqeb2Cvh4fnp
zk(}7H$iwBV1#c^*J(ao#jWWJH<@?B}<9QPpe7`2M>(Du=IkZMRg-jcJ@2Xwz;sU)h
zv5N_^Q$PzpPMN@wb^#Edkvm1A60}44<EA-|9xGrm%Bs!_SwLdaw{jyIc^h&{%T<+4
zuS4N0=~oOG*+TJ8PW7;CFwYVPU$819PNcg9mMrhi#%*T(s=N7xj4wC*-BM#X%dIB~
z=Jx_zJ~*La1v_>2XX(+0`2%176mTL1`XBDZwYkPUw#Z|Ip6(85Lbrm|Ged+RpS@{r
zLg6x~u6~kwo_V+kd8yjE=~8w|?`2$b-m8%MkpP%jzY8AF`*3WY(cLTvBgC&4M?hA7
z8&z0Uvnj{BPSR?Csvdq%ViQJg_$72^SH(6V_r(qUoN(eM=~Gc2U3bIe8>qO7;q_uu
zVlPrpN_+Sl5gqk7D6!!!8N7?=b+C65N>SaBxN}@e{=rMaD$o~CvDmt|X5J3jLDb;*
zB~Oc42h;bNl(nWG%&m%T#!t9MsI!9JC;f5U2>yx0zL?by2HfJsS%gmNTa@W%r$r+Z
zD{;g9@x|h$prG&_B%g|Uk!P6+)nj0xTq)(WK<_;A^jB%If0!>tS336){2L{ml=jM2
z<-m*5Io+Oldwa^PB?}M08N%*JKH{$?T|x0b(xQI-OtR|I3j061Z2R}FR-kWA<S8QA
zYIlz$RRz1R$2wV0uj)_ayw_~A11jRc2<WpD85P%wfS`Se$90OGm%{!3QhBmy)}KO?
z^?zDas@EsySPfES-aj}6p!HSTOURHoO!1z+MQqkUKW2OqV7Ial)oOSQjr)<1Q3dnM
znuX?yrW>3#Sn>$2z<<#^m<b>9cu2N)bLB7CsyKWfI}i~XRI9b~iaiCO5F5H8q_&NO
zsKYgd+*m17a;&!l(fu;DU#uH$SDX)GTj#TMD}fXWzqB>h)2{N5?!Mx1ta6y`W=tBD
z(Z1ry?!6_TV?(5xv8)Eoc3NWe!C=IPJkg?S%@wO;H0EtK!My?LolLCJ7E_M>X4efU
z(TyWAJJ1DnA(a)BtStgFbV{AW_`So*HpD@`VmRY;d%VXpnW11iNducjv@~DkO1I;h
z$9g#S)CIrLH7xA89LxAV0b;?&c%-y8xPT(}Nn$fREUt!Wg+i=?BqOOMZyfW1HE)X~
z*q%^==FCm|d2v3E^v@GvGS&_@1NPGAQ-d%ov@ug2D%YHqe)C~q<y~iqPUm5+OthXt
zykn?~#xh5HSA7-nQlkF3F}hm~T*(EYP?XhFV)O~rTk!c)bNJnSj?Y%vo$XMhjyv2c
zRpLI3<v5u9l4>*Yp+i>_8`-mHmCn&m`4aD|u}zy|=WsR-G{kjIy85X?K@hVP>BQ4v
zz(grp22f*XJ#uQf=7zJwt#BdTPNr^$_cl7=A9mb+@WODX|A-jb6K`vNIaJZ8Y2@NH
zefqvyhl^#jeHLG&p07-f^IVHYjLAmOfbMHk+`fh8y6Z26$iJza9=tsp!<p2F#t_a`
z6Ti|=z_wWxRMy%ew7a{8kB5`&SJr+B6dj}%T9pQeCem8MRJ~gukDs|Txk+%FW;^u;
z){f7uwXSkl6ig%4{}nWXoziMv!`d^y<$pUYM3rk(ALqmjtt$0~Mfus48y-Y=|6(~V
zZk}@z?G)nU4*iaOe)+$RU!+EdXy3wFNxC$x_P)NEc$}nJiu7jp0I|XEfl<269Pf1n
z>ua?-rJkO;UQ7`PLxX=BlnmjzXA))GzKTsWO6p_9t39N_>=Gg#`5Cog?SC7&S7;e|
zXJ!abu2I{mZ%lG^BXlUR1*J5nF=)8d6tX<R0}ei>WIyHt0K%R1FmhudGbp~r2I|tl
zG{T8#xq~lQNhADV!W|)wP(*s%Hg#&vNo|JyIE$*|^2~Y@=F&;^8nKAOkV!Xxzc*1=
zrVRmhq5j510iWffGRg~!S5+IBiIMME<-V}7N5N^f-~^zNT*0#|%jID^7J9{qtX+<G
z$9bL~p1AM-UCedDwC8QHB9`BM4!H)afz>QF-;9QftGwN@PQ!_^&xH`xJGv}Jy{Fnx
zX#-8PX_P1DwKA8n(z0YZ^;EPF^+n+xA@P;wdm1ZUF>ZMnrOJC&PX|YEn>)qW#ZL1L
zR5H<gLfwi+l^E?PGf{Lw2mA&~lj75+ILxMX?BARhbzf78wf?Ao$GyLtI}&g63{>Ev
zQN14Vl2PANyR)HD$)2yW%i3y)GelHHW22}f+Qd0(QC3z??)#A$h$8iU9whjZ%C`<7
z6|kLHisa#s|CzYAQu8ej=RtW{4B^oC<4YAE?>y&3%2}ntK<iAO?y|OGaD*@`Z~p+l
zvA;9WKISn(CCo1;YW86srDvm5(W}3%&b`d5ZDRuQ3@~z3b#Q_Hq}%T&+S`6?MB0ZQ
z1vw;RZhip*l?wjM_rayc(Xam}XqI<P_1nG@E8^L9`2q#!Bj56jES9X&DB}*3$3|9A
zMwvjKCII4Sfqb=j#M;?p<sT}=OPkNfKKKfg;p@0UsJmk*6!>grdHuCFkWbr>9Q(XU
zKeyQ9XCKLmsdthK1#m@}d1V&EUA&@~S_~t<dTma4uF1!-+~Mr@CnV!On(Om1Ll}?1
zv0)CAjlay=EAL8~5yL!~W#oyIn-q0KSyMchXOW(RF5eM&MpkqvFKI=3#RF=UIq<Mc
zF;3J-a{@NWwQ8sSc(zxSDKj63l)|p_zmXW(^&q=BT}J3#_EFo}anDImrdyRLl@-_>
z*5^VMVl%lY>9t`C7#p{qt+!if{x#N^aUJL0cX5W8i7b@E7pf#PLJ?kYe)t(Q;!dt7
z=FJa24O^Uc?ofG3#I;-TC4I@g3*$d|0hQuA-v!(Xx57aDZkpuerbBDf_u*I&57Cc!
zw?MoAHvv9@_PeyGxhEggO}aB}4&RTYBjmxrp#v=#v;>O%C}}U4y7xYXh8UXsJ3HwM
zJUE0bIopYgl8SP_a*4EOkOF`@ujm+X(!F@#dy@|j6TeQu7XW9*PCm|a8V;BE&U=R>
z$BM11!Fm#@_M>>6QNr+j%r)r=CU7_7nMpCPV=%}RteWkPdHtAV73iV&KHaqIR+xVu
z_gMKC`1&h=|D>&cI^e6iY4aWrSUsh8?aQgsXI-(}SZKiCXHNcUEgJum2dO*}<djzx
zeZw9H9T5;V*O-u(FxL7UYfS7Zo?jgho&1N&B>4?bEb-a&oW17q03y7y&e^@UTMQbT
z6MIU03KCRi-;p0Mw903aoSPV{W9?RQ=$=aB&mEi>ae2Ibnd8bhUz(;%QqVj0TqY8G
zHwPzv&NnTy%Wu8N6(E~g)4EBgOd}VWYt&<<*GtjVRx7N?Dr2c`nPJ&=%_`hNi1wCY
z%*Q0t1IdiH$gYcFC^4LyJ1lB6gFMlS(HZlg3z+dou@euZBm5BhJHPg@meQl^*Y_jN
zc5r^LoRC4>qJc_l_JeVT(@wEdL9*hY+QE3gMhW{p6^@m%)F%8c<_J)8iI+G~18F^E
zDzbm)iWQ((!apm%`ZAh=1=#Bg2@Y~4HrH{S?YPSIS}-!OC~r*7SB<s5e7{M}RX)ah
zd(E^5W}@+j!63Q3kTn|GDl6+fw!K{qMB{0`DepE-kIulC+J*P0ilku~q1PVQPC4o^
zXSw*LNLKw-%JC`b&-SslGm7Wlepg+xEa*h!m!%uGdIS<8o>4T9SYdHHyqOmL&gG}`
z5JqXRRVPkkf$5+D*mHOD*|}UKx!xqDUn<7^fLh1rM~r(ISnSK@9}8<9eQ+vazpjOG
zUg6jQX=ZTW1;%PW%QY<}N3A8bEXZ&8YzDn*x#KqIJ9NdBwMN@D8hNgoZ+`vlR=a^*
zZ@m~=WvflgJM$e+Rp&b=z7et0>1E1_%asZ}=A>)nahc}&)~yaZWAU&TF_y~!aIAb7
z6WQ6=R(p-Yj;;!{U3=y6PID?D|853&^Zbq00x~|Bt{RU}{fm{$AHL%gEP~jm%nutv
z%%Qwvh-#~<H=6Z&FSmJUk@*C9)#;+aez9Vd7N<E4Hpkr+I=wPm02|=3lc;J@@e4`A
ztAsM0s@9OtjnvD^%r2RZI4Jf1qo=<#qm2Gmt4>{6+m_zKPuv(^hR(kZ3i&k-_5QHx
z?=F1jcTVik1l7b9Obk87`)p%Ufj0#;8YAHRryHO&zmJcE=P7T<6?3PFsj2F1c}TR6
zUeN(flEcp1Y>7CpkrDz`+8NtCsZsYd7{2Du(cRR_;ffsJpjb;pkOtHGZQG)aDTZ>h
z^WuY&x^Ta`fH6M!h12^T>Ze@uDfB$u<Eg$Dd4qk7u^9UIGRMsW?m^11P)_{H>hh3X
z7L<CR(~fw>|73*t4b6y^2V|g{B2z-gjA<kb+=fINP+M84I3EoIvk`;Z6SQv!a^vhs
z&gC<W+r@&v`ZR4Lp-lUI>dt=i{0O2Z+k|Y?n;MT}0-oEK@e{*vcAY<J%V&t$CPHaG
z?>KV(1#7jSg8%5-pWh`m<<mdh^PR{sm!>_rs=t&Jsf^RO#*St|()Nm56T|ukQ6oMh
zMY)EVVdtBqH-e0K9Z_JJ&x&->odc$R-HN-tT#23G%gH;^+=*4qRLO^Np|lz1j@9Ny
zqxqa~$o&G)EQX|$D`tvmc~I-6zFUd9y{`!t?F`e-rin1QMx`6Gb!g|ZBT~`A@T+s;
zHf{)Di(~bsK7bO6UM6IE*#>S9mMHa*mG^_^;qHbyB#dd&t6BKh31iL68caOci*`<l
zb)e~0;88{8oom7T__$3v+010Tk+0M)6n>}(9-AQS$NlfYIGUt3hxSuB4y2y()fe8p
zJ{M9*v)s%V^az8NM{Vtf`76bmYOdPvS6qj2p!mQX{I>6BE{tE|GT%)zKTVdg=6)2r
zTNY0fRxG|kNFKrBkKtt=DvydkBn8i5*c}XqNuM^o;`*_AYyx0Bv(pMBd-L$;hXU~Q
zlBqiWkCF$(R#i>f*V$(2V+?=bRw6tRe)`-~$AZwSDqaE^3k;liY+B+rHW0WQmgbAr
zNL(v5)Ja(G%TW^CYt*`X`qrFKEWhvjTk~-k)>QKFv?zSj;FLES0&aypxt=^W{rxQ1
z!i@corv#kr+jZ-yiC=zyD=_=9Dx5QnEI0Q{*wfQsR4GrH;e?*+dhp)SYb4{DwHW`G
zfl25n3ZcwVvx)v>_djD;(f^h2{O|ED|Ans!qV?v)V-7mf7~YGN_>{^xfkgi>^-Y2}
zwJ6|Jc<J`Th1Zuo%;6%h7R{>7dgJAQ2qMj6s;inNkBu-INZMd7>G_B*@a97JVKS!5
zZq7Om;=qi%wzESyED7AuL_o71lVaLKS2&JmR!4h@J5cM70>->K&}3*<6}G@Sn8`W<
zoqeVbt(Ma5>>i(lXr%k^PIY{8M7oO6$wi^pq1?!g!M<D^)c(CXrNXeRS4|#}!D*7w
z1C)%pMJD9g=kuZ4LH&V4fuKc_wAIqj6(`zsNyC`+n5myfrcz9Y;vvDc48{G6umy*z
z>^cF<U9CRkw1lfvezZ-jlyzMZ-j`tcKrmxy1`b~H@~#l1E|l~-=?|rM=I+4&=20Pn
zHDz1naowm~PS*5s8f!FjmimkcY1&0r5{4C|1IB9_<Y8bwy^owlyXGYPYc_o*u1P~y
z=epTBdf#53U3Ty_V?=1*>un%;7(Y+lB-Wb~LjFc%oT5vA<hIhVe@hCQPldc@t4H6b
zD>Ql6s*9`sCO#$pR;(1ZODVdNz19eheK_{%a0%9XSm_3WkyKoRSwxE5vQ5=<d>n13
z9}voxnyn64OC_Bjq1jO_iaiM34z)54W5&bC-3-I!&&K2?>EFLXJi%Bw;Xf)@QCVLF
z?G<7yqrt4W5pQFp*oke3nYv@Sya<2x;7jqcjQZY>$&#M}a;%&?2@zwNl4<&bY`t}_
zh1Z^vE<mc5I#TPQ_11|rjPu#+;k{S5%%Iso&{-5^N^f?q#ieaP5}00}b2&jgF3z7T
zz9WsCiR#HUpAq*vUHn3D#qKEb%ynERo{0|+U6cE8gOb2ZP^zsex~#I+LfO3AcFfh$
zCs>aIlmxAMGx(^?V(3jW?=xNLHjl+l@0w2!<qTVE*NEXW*CTBs>Z~8Y4*66sa@7TN
z&a<vqF@s7LPhnYkPpP*}EOpdE9Tq3$@QrTsSYm~gbaBrRo678NkLQlA%x>1T#SWV`
zc!P#0xzm^0KNL-r(ms!oH4Z?R(4cs`=gev%-}*7{ZcKYz_9x@0VhQ9Sge%*Gf=KIp
zku=w4)v@f5s?zqU5ZV;R`Xwz^mGAJ9KydDVuZ8Z&<RO{R=gLIgXngLEe<WYaqSg|I
zsA58)t!E&-+@JyyKpW5$qoY}P6ZEFPvCq={L_mITNafMj(As)`oY}Dg)Ni8ZLP!A7
z7TNS|>oC2)^=kzs3BOrpYE82dNv8Q7;;|d!_Q4DYT*en-g?a|ZOn~>-_d9u<-vhD=
zMG!8oQ`n|KBVLDACCaIDWXofGG29|G8yjrys^A3coo3ZEuGW#|-Jy0&l$gwOkThk-
zxy@s<M=*xQ`)q@G%nS+#`ew|C8mx&sPtCz3z26vcMTpl`i>xM|1ygiK0pPo9@N)HB
zNxgl(1JgMAxPu?5G(Ahwht28HXRel1pv>4lJ*TqgbETeabGpuJ3+D&({z$#~>|`et
zbaD!t1tUSUrXg9}ELM;~-gVFwq_O}0)rWaQi%eAxpMRD`rwS%vhuj4--A2mbLmz{z
z06(C)6_j1tAM(szKE~2H=98^(7<=bqq2{MZnysdYTRJ-&^#pNA3U3e!i+hmQ-N+TM
zo+VOA`iU9k1rgWu*$3jsh2?2KW*;g)SMp$>TpGCMnRzEIWv01qBx-Bg){<Lczd?|<
z{8muidqosau)ag((~s3xZAIKQvm^fC7RjYHhb>Mo=_`-A$^blBcoN`uB{Mn{wWZF<
z;I^fM!FBNnWF#eQam{2@*BP_&s(@>^CT6v*?!CR;F)Jmx8k=!&>on;v9KV0@wd|PX
zX=%4-d{jOyJ7y)uZy=2=br6Zv!WD}#HGAuCU&MoHPs?H)&0EqU?o7<W*Q0b_^K-dg
zdF=Dk+0qBjeN>JB_AhhMH3;BsZF$3@b3Y{P`X{k-{cnYzj@GJaH|*BxfGGDMVY-;T
z{INR!W;(oM%1G>BTxJBN>+?J)dg6YIk9=l9;8K~gV_jh5@!p_e-B{JMZcQ*~6WYeA
zrgoEMa^UYxo~mg*k76O!s*b=qF0_poD=)2^@~)8hIgEkZ_jW+HrXDTVxXZtRw(KBv
z*NdJoc4#Tv@_={b0s{MrfCWd2^@;a=LX4p5m~w8`k-hCPow<(I!Iu^}joRfwwUNIt
zRxx+8eMd^}@9!!KFkY00zy>Omrf^$TV51?+@Gx#ys4_#1#+0oP$azn6+iGo$Y3k^%
z5HjS2YDtG@6g^!!cl>%xw@QmJ?GzxPO)K%M{ojUVJ1qKStBG-zEP!qyYizt#*ES;7
zM7ggovhwVNQ^%|U)w387wrto+W!-$J+t5xtMMzr4cL3FNB+0(-CQVfWc|ywX^UEX?
z6lMLeu_4zKS<g+##IKd3E6~Cr*3QZno34k%jjqz~u?5UD3#+(8bx20UjU86yvf*m?
zS_0#)5F8faUiMqgPftLe_>+HKwQSrbrK^B$JdXudFZC53d=zOdlbt{U+<Wb5ka3I#
z^}}nozkTC|ttO|G+&)GJaN1l+xcfT@#X_9{H}`VDLr;)QZ_qBXj`FuCP-3q$9tVYe
zwB$svrx+mLEu$Sv-v)K4Py3(TWOr0+jn2$Bux9ZWC!_%RFd6E$8lK1S1uJK9Kk<Do
zw>ijBaxC)Cc<+H|!Yf1eX5i`4?PMjX%*yzVykddwB$6zE=Lo+lkS$*}kLBYu@p%K4
zx_)mlYSI`<yOU7RiS}<GKk7I4;F6a0%II}H!!+$0A4VwB^(Ee-(G~Jwq&L^`2{NS`
zqq*A*N=oFd;g7y65D6vSZt(;8d8HFf1HT@KW|sGOfCRFYkZbb$t#EodeuRJ%%XOxI
zUt%rWpgY^UnSmvv4`bD=d-hT@D1Ep4IkjdBMYeTnDH@}=XxQ~cp2e&dzC;E+9mG$Y
zsm`?e#5r7vLUqo;!G%XHXVZ#2$9{{ht)ya+N3Ma>{RC=hnGG1~IubLY5+hLty$2s3
zdLR_zknU&~1XV7g9W+0tYl++|DHPVb&o==>`h7YuBMx(rZq&KT#QBa+G7n<x$?=C|
zv`L?Qav#)=@+FhPEdoZGcD}g__E1obpdT1Lr^OglE`GLevamO49J^Xj;rFANm=kND
z2vfzU@W+gD!qCVItFm)e{_yy@qVLQB0Gy$w^x=X5n02h-=FdS(^B8^sG{XnCBA8Lq
zo6=$cD#JH5O}iB)X?o%Ps4ev<04Q${%{>WydK75)sIaibBVjXt+*Mb9(zYh8Bk^rX
zfgd`+X_aQENVqa!aYgKc=;Vi^M(Nv{dvAqFYP9Prer-|<y8^b<eTo}+;8s{f%cRbg
zwCPPLpt$pgThCw90At1f0Xe^hk8ya2>(7wwTehQd76|2oTO}QhN+cFsg?t^JFgSNI
zS{hsZVEayxrO#RnEV5X$7AZ!o;`o2S4|o7`QkQnau-Ns=Ke-|F?<<S{C{fD?E{x2L
z_lwHXhyWSL(<8naK4LinK+p2P_7F{QhkAUf&R%*sAR;bYqgjTIr6g1GzoT}jGzUC;
zHnLey`PxH?%3m~S-=0rpnL6|44l~w-34MQ;sM{|j{N-0<6zqJcD|@9?mt3hEeHGnc
zoFoQhyS!;P2!*~H&;gMt<b%Q!x4pPSktQh6E0VLEY+0BE8m-R6Ce%n=EDwTmu4`BW
zT2BN3f>NLO=e=48V}^R?e4KX>UHenOS#2)9n)Q}KP3#4KVOTepIfs`ole8U^wa!lw
zsCkE@o@ckrHJa~NR%kaGj63g<(#`Fb=_qjNzW`oBEW<^PruZy7NW+y}cZSV6#u^E`
zZ(pu>sR429XI6Tb9jOI*y)nY4*F$woU5vtA@dvP8W?cpu7km%dblr}`el#}g($wUq
zP?vG(Mq#71raV|qnR-byv?Mv8D6_1l8a@71PCV<lKY4@s(91-b9e5DX(*y*WAzX>O
zC-lNgVf=(lM?3C)J^niSoi89H1K=;T%{MMp;uPffaK+lr=5T%zXp)tFh@+=tKR+?-
z5Ld<v0_L_MsB59T+2&G5G6!mo3JLfA08MSWcL-BQqxibr(I6VmLtC*-9cFFY^>&)q
zsiHy8MHJ{f`?HuIL3g!hKcV+#mbTq1$HlcKpTcI>c1J6)Z}FMDRN26!0^Bb;3p1>A
ziA_caAYLmcZ=;|v!Qi+;PPuIQjAh)9WFyyIpfn2!h&6#)<NYWz0M!$MP;>~eWZwc5
zqc9H9HLfR(ZPJPOi#25c7_0#<8iOUVpIiSZKQP(iEvKqqqR>f^C2XI(qo)I*;|y%I
zs6K=|FW`A_A~6^Z=oe%;fKrj1`Uogx6qp}LALzTc7cC6_YtR$MptUbcn(^?4x?r3N
zVIMo$yD;%>{EfjQ4?bQXR(la_zNFX02cQv5RkWTo@!#DILJ(FEn6uKjOQOcwIH`Z$
zzV#x`&VVp!hG6~hy$WM?PI9l5Vi^s_1G@Uk3oupw=gP#*m}DD;cgxsR{>6bub0r6q
z6M`gfP|CjG9i)PTgyK|kNb96UMQx!Jhn*epE7btdisVr|6en?B(r@!_g&}i-lJFE^
z|Kcwmh0O#%)+EC&rcQ%?bn-Bg@QcVB%)2$O?(>rZ7I`@ZF9(eV!15IA8NO>G0CEIU
zJZQkncauy$)I45hObM6&zvOoQFV~_S2?e&>JZG3Lc_JXNDAs<4P^P&{2Nwi%6Z)i2
zG%+UPM1s9MV1^yshn!d5C~OJbZQA4U43``aIc27jmo2gAO`X#c#pCFzC&ZKS?;Xf;
zIlWr7VcsmRH{{g5Ra3KdE&6B8zZB4N@=h4l{MdY=?~^>nBs(E$Nwe6zogfCXkK4@-
zc8=uCF^=>2^K2v#|7Q2}vYjwIgA1#LJf;39^`?`JP#>R&psHo`D^%aGnd?|4Yb%k5
zX1OhUJ77;4$RX@%^?pjCHXMzYnv{ASlg<E|_xPoJtS?teN}5McWPv$l3vo_M&_m%Q
zR~N*q3ZxoVFS+^(R!a3wk4*p^GhRg=NZbo)ye&*~T6J!ALRgTB?9aJi0DU^4%sNG=
z+tq{=(zF=b6v>Bp(LV%Cp{Q16GpnGr$<$vq-y=bb(ey<G%|mPbh16|K4c#WeOW;|w
z%Z27YhjJtHX<P-Jp*m2?j_6oR-6i~Il$B*{`B%JG%Z?x&t*>?QO@;bhz%m#Tui&!j
zOtpQ<P+ZJ<<SqCo@j+%6VUitq3@U$<P|!)340?1^aEJp8XaU5)T+guhDj{Te@PkJ1
zMg_(iBkG}9(S57xQ!16r%^*(A+5wE%J=@%c>z{rg_=vbF@lHBkuuTk49Q$Ay##zER
z4LQBrFrbvZeFYa${8Q3#|K^LNe!X|Bw7tYC^@I8GeiLGCfVNVn>=(&5$qo{VkaabP
zWSM@wv5&(5C7cx;Z|Dt2R%aT#(Nfpfl<u&y7Su)Q`w7hER-}o_1MvqueyZ2XJ&J!8
z>t;gK+VmGdLrEAg<ipG{-Gr$RX<lUV4V@>*6(X+i$3!ngXh6F1UBJKYmh}xYuP-;_
zdC@nCRtanMRn?c+l#R#}_4pd)NWlODW^juatWMv-Y)skV-D?VFiaI;DE)1RX(<M08
zpVJC72$TB<7f2;t7*ESh<@K*6XY4X!T?T%gc5ivq6ck;tZ3kzkOAoJ_T@whVlC#s_
zhnMwb*i5`LB&(<%DlQuOE8yp-cx1*wpr9dRMQID_ln>{g&hB1wyDlxQ<8IoT+gW&&
z1c*nJ^Q1(IqhPptlt%fb2&Ju))vm6+NcbKI6RD7**#-n-X+e;r15Y3--}ivjWxS9^
z^zG+APWdI=Fn87Bq1gdXC6V4u2m&|aP{+d9tf3y=fMj6CP)gdX<lYy4w^@=!H>)>`
zb0q)nA+_S=OYZjnNy+nnEB^goDx&{G-||>+l5WhHu`4)ZIb*$76lR9azB`Vo3GGkJ
z*nwNnL>>-)Bh-*(o@e7j*Vy*1d{k{Q_|5@-*>kRF^LhJF%#}xSBK+Ng2&6+clFG8~
zDKbOtu3$9fSw4A~vntC$F{C{I$xGomB~}cZ5p#E-dwC@@6sar9<;Um~AnjS9z^V5c
z4Lo8KGfj3Xm2D@$XKe@<bIH_FWW~5*c9{3u>Akx5VOP8}I80IOj>WyykV=DRv4Ap`
zD>OZN!r&;}g6uTRQMBIddweTAm@H*f5g_t<)*TYV8f9>gB9E?~^wm|}ByHn@5l#8k
z;kPLt9>R#q(LSHYDUzWs1l|V5y@`RqXw$EOYfwqMS#BRBoUP>p^=E##Vky~gfF4uy
zqWFuQ`W0gOJq-wIq7d~6MD*=H5FpD#zQMbr1^>*cWk{G$d_+-(*9#rw!WLu=4Q4Za
zo-mH^PO7poKG-479f=bYJ;7(FuD`%7jaG`a>?Bo4#(rrv7vL1g<wOe)5R==r3C>EE
zP^beCpB*k0FDxDw@_q{VwUGa0w$4qDF=C;<pEfXG2f*_%v%(Xy+YT<@CBtUAcuit+
zXNL8*bFfTlya@*pdV_cfe}%?h62(6|h4^u?X~~nPN)&KW6IfiwJ9q`=tkVL`*82-A
zqlw6neh+G-O0pmn2_NHNs=;I1?;WeG^mI|9E#k#|huKi3yrjhK?1yF&;qEM?s)_0(
z!ffWu=3T-1gv|-kUD{YMEV*u>6IEifXf5qtfZxs*F^0p6+r2M-<RT-y2=oOWrE}k}
z;Pw=2h#6u$nXY{gEl{|YiGNm#zp&yN)5IhZoEG@FRQ=);(IqYt^J&B3`UoT=v2F(f
z$QJZ`O%cEIqcmI;eL`%;KpyB`RDTvrFX`C?t7GUht<IEG))WM0fEUZ`_YOPl4q?0H
z@nDS>+J2~&5OPDHqZWrrx&UDZyDt79*$#qY4|;CE5jHY=x{g*u%LgsKilNhz*J;JC
z{$>R<m7J;>M{Br2@(({;B0*!cqb67ZbdY=@*32$~{>FO;zDYuxjRcmXo`ts=3QX>u
zZLq_~TMj)&z7^_5jqJ+G%L}BfoBFfUH5B;oLCBuu`iqDv{jSH8plW{#h}c&|Wnrmv
zNS$MO8eyuQhmT^RRZ}NRf7@XPGMaS*Xw-D9`9jj9)+(J%RAX)Jr7&K92?L{~_idCF
zQO%`H+B*y3J#PfV4b-Dk@(6`c-@s99-Q}kxDea8GTJc#E|8X?rqxh^LtA*ds6DEwF
z5-;t?ixpFBW?Ws#KN@BJAJTyTSm3)mA+sdr6Y-MUv^~>oSRIhw!gP;@_NvsmBN(J-
z<u8Y>Q@Dqj%0Q;_*dxXJOOR)xo}8V1Ir4K8nGvT}Psm>ms2~nIOVpto+GARc%2%gw
z1=m+?;<V{*TJ9h(;~I(08{eOjKkT{jtlNfO^jmK@tRt2m?(2#UL};rf7|gm<Y$U36
zCR_(xitNiyGn+7Onh#QYgkG&U6;8QZtp=60Vvi7~m8MWkRd(G#geQhpQ3}S3&<3ig
zL({ZFh*rRJDxs9gJs<*MhG2d#@J;dXIK;#HWeEjBu*amw#Ait;z7UV8#CHn9MVTo<
zO~x2!8-Pidk?dJ`dkBnn$%L#?0xLLxE&v15I$5L|?W??td)3r@s)k%moFmb({#iT3
z!)9P>4>#r9g^a~uM(Uf;po_%@-%FB}FYgY{GSIROU=9w2^hYZ7{Z{(oUST&wTdZc#
z*Fp5Ba$6@LTA!Wt`$_h%L?Fk0nOKn^u_`XfI-JYdfxO~8zpSPrDO}85q)wk@FqkoI
z%_oqiWZrKMEyK;r06yIVab)W~*be*vQ;e(~8I-V-GGtWLi~m8UCr}vKSBnDtS#q9+
zG$FY8`jGex#k!!TPLiKW6T%bnk?%s=yH+w{hGUeSO4AmKxg#?A2Vj+a!NBsAnsjMn
z<?xyNs3(TI38YJdc=)2v8Zv2SRVtoKN{2QAPwLKHO%igCj#a$Op{)oE_Kw?Yv=tgm
z5@V8eT}`Wm+?jTYL915q_5t7&_8WMD4|ShE#be%^V)a(57`{zemgN#;d>oWbscWnC
zJl#tf7A0NJmO3j;hE56^-f(mBaEkeW_837;7TX-1KkkAq5jP3TA~3w#a$5?`k-UAl
zS0V#JD1Jm|#^!>4Mg8XUe(c<eMv1}PMcAp+@zCDlze!j;C$uH<d+rE4!T3;SO0+(-
z-#aQuq3W)BD1^2M99H9cWCx!H+QVda*RI{4*h8+##lIC#<_MAgLZ0SD@=6we4d+6Z
zuGV59-f1Fv@LmCE*$}Cgwjejbq7I!kbQMa?+%_5}1w}yMIVOZQu(|1^Tv}QOEC;S$
z<DpNN!vX`Y9qNWvH~lybt~qV>9s+%!+k#hGt~|*%;uS}ila(>Iizq!WGjp1$CLgmL
zP1KT1d?b=*G+!MMfpQTq^6aCZUB6p_D2!s=mtvOVwMqIxG&V}-?%J!w(+%F-`QSx(
z1EhK&=$4#s?*@3ND7kX}PddW*OMpG?UmPOMFwzDBR<C^qZL7jOd>w3&U0*$qf;c^c
z`38uuzC$*nOZN~B56H8UPo{_$q|hr{jI1>B<F{ViN8aYOPNwl?)I2~g`$Af@Wh6kY
zvX#2UwPE5hr$E%D*`)7j#)Ljq$_xrOoBFN2^n?+qoAP(99>}csnavJxf|On^HCIpV
zK~d|cfam67F|81l`M1&D1y2NE^#2s2IoGTNyr#M9^f$m{=-6F${T@O7L5vlRs44iS
z<p=|Q$5UL-S4wQo!7z`9A2z>PwfPgIOAam)W#(@n$Q-@gEI!R;b)HBop7Vc?cnJKb
zjEVd&gvCGnydZky(@%QEjGqD?ifQEmX%CNB!dbbzG+~xys*SFiGQrR%0^F5fhTBR_
zpF|dQOvw!n?=3am&37`##o74|L1{;xWExZXx66WJjV-bHQU?ym`}-!tMeAr(pih1L
zgV1D^@G6=7679KEEhyP1-_5r>e50YkzP$>im%LM5BqtN0p^cs7@lnb^A)7rE+>y;2
z`+b?dAAKUq2HYL1Q!FD<pfMx~ahapc8gdl;g!RR8udEC-xF+x0p$Z47+?_Ky?2!fV
zOHm!ofUhDHe`FD@arv?~n0J4m6z>~8w~m@9`M08GnSPf8RRy>fY>4$(FR%^SD5;+^
z^x1`68MO08u<C$!!sYo|0i&gFW1j@bX-pz(sX5ROlW}$-u87N7RgdmKr)3$J0~y05
zT9FR6FwLcj*`%&RBQJyyLM5HvgY2U9tjeG3fHXc+B-V=6%s>;W+;`yPK}dyNPuGII
z4jrAPE`l>MM@;r>gp_DQy{gB``VWLlel#jX_FMDBT8HqvWXf)-1#*(EBHEf7YMdq~
z#%twR`30C=IgA2MUbh_AUS=271ABd2#aG5}h;X4yUFFz<p`IYlTJ`gGVIFYdY`lmZ
zgh~hZ>cnP+XMCLf8s3d#!a5qtEEmXVH}39fFR2(2%MMd$b%akRv+Fx0g?H18bR)Mz
zP;QbGEMl5U0UE-L+`)$Ci|9Zdk(IH+OD4NfOO`40nJck*So6SQ_7Pkx?njl*-A*8l
z8P5*;@OAs3H!~2+V@yy56=}Vt?3XAdYN(fl#MkWt;flGdiG%$&5hcGtpp7;afcgdP
z#&bpTRR*_bJ}(|k@fCxyyLLx|I0b3jR{NM(LHuTxa$&P_R5d;g-MlFyQJTq2!c$Ri
zilPqby@M)oPqr0Gl;sd$16Qs~ylOXdSdMIReEG(o0**N+_@4r9ee@|(B9(Q+Qs<16
zNW6^fKzAAka@-QA6W=wgUP(WYVI+Mv+3Ey8Qe2*-D2833L*wQ)zEQX$B@)XLze_`q
znc~N;FUoPiA63@&ak*0VG3mY)hQ8~>q#w>+Cyj7DQ`cKLG<e*Tc+zkXGP{MBu(~Y=
z_-gpjl~*d`k)FJL2pVu5oFY@*X2=vbCTjnz9KjadjGll9DsOkkh~(K}2Kx_ZSL)F(
z<Drp>&KQm?rI8C2rii*bO==9J&>aoyj;2tDKpay8(4$X~k`@JcU7WA)pjzA$>V}IJ
z&HTVk^NS>{L|O#jimRmDtpt*_03{<>3T(*OukrJtD<p+w7cBs4NhfcnlAAs7&KeI$
z3#rTZNJ$z~gxve<tF{~%nA?*DE1l!~Bh-1-nq{Ue`aT9)ffAPJLyH~q;~OA-++P<^
zZD_tRJQwDJFBYx53;;(ZS%&X4cizsDV2_5zQ6G5)KSonv4m13QH5o_k{-wVMAW$cg
z<4&%C^{`@YO&BP=8t!65D|W-~isp{yQEV2Ion!Kb_M3(X;rED?m5!0MLJCWBYX1BA
zxa>49%Fkj`$d>KVI?R6IpDbb{Df?7B?S~3HyUfIOqtEajJ=4Q7tr+_B2Gzqske^IP
zX&8RSM><6tTpji8T5R&nF#ovN3}6@lmnFpzGxpYeM63I;pwy3H=JlrY^{|NmM7D3C
ztU}>=%8LE`?ehwzMAv3OX#HbawDn@87U9^E-`HdS|5R`L`$#Cf?qPQOA|FmS*%Khv
zIgVrU?BJ@jkY%=}fQY&qe3EQMXK(iL{E;mI?TRzmcirC7WFMFPF;Sy?csV&a#+Nq{
z6cL|id#2Qj<0q0U;;g%7=0|?sE24;|Umm(M9YvuwOj!?zv<1%}8y^hav@h0k<5o1`
zQkL{Cu*(eEWFmtMQNQ=cCi1^qp$}$WR(!AB%!>LGOqb4DYo|Gj`Q7LQTdkR*cHSN5
zC5hiPj>?sCwEc>+U4yF~(sUM<1J(M(S5WHLXK9JZ7vQK#ZgD@Nml)vgaf9h<84@3%
zx-zz_4;;l~M%vmGNSe4;N{zfa+o)LMF=>B6RIh-GvxqP$GAeD&g-|&|sCYZFT%nBi
zGJ&WKI~5mgHhU~>uDcjrXz)I@H^Gg#McHpO&sHkES&ULQv_#n9f}S}y!=zmn&Z+#k
z?dKS%xW-aNBPSFL@0xIOaN*^3{1XJ@;kBwmPJZE?EMePus+e^$@UH$MVECIhkW4Ih
zim&9MVO;OKawg0|k2F9)Gm@k<?7tg9&q1-|Rcl_e2I&B){J61b?F8D{s+-AUDl&u8
zA>`P2m<Fpc%$OOzEK3rj?1O#K;THvRJ-Nc7Q=)}|>mZ_CzF^<*PzbrPKp<b#K7%Qq
z9=kr)s6vIEbIDreO;jrwAy9q-UgJraR;ufS2~3!F_s|wfXA_jQlaXTw(H=ME5JEIt
zC|~{^U&a;bn1U>F($oh9E8AZ;T}85fYz_O({ezM&sv3#z_|)Ryy<BF=0QBod7V2gn
zY?Y^0Sn2H6MvMtD?Fv%Lun4)oltMHalN1X{YcnJxe0uK9Nj|<~BUE1#*(+{3OoXmL
z9z^O#M4^rHVYwLNN>>8selT9Zs-QijvZEE<%^}t!94V>W9}eA(wi^`SXuKIyiPMH4
z8|!&!8pw{+3EVJU<tLvt<51)alC9`+66b6cutap=*qcdH24zSaUy?FIvQ?-RKy^El
z@vp$*SB*^NCIq$iJ7s5d778RRtQMAze(5~y%P}WMreeml<;0Or4`X(4((=v%eP`h>
zu(RZ-c-edpu~TgyOV7esZH$CZH&(wmX%Wnw@c6n=6)8ecgDWv)^Wa@Uu^0`E8cH7~
zQgZmi*;7#U#r&gq@#(5|Eu>YJ<-)+1jui1b2hxN9bjHviV}<~Kr!=`|_yihX^7`{R
zMsp-a=3KJzy^RO1nL6A*TQD;ab31h)E|wVn;L3pen^eBM6Xxil@ZVcy(75D>NHu}O
zW4&Zhi`kjj!bB_-ka1~m(3>Fr2Z`Y`QDl%sr>DH+Y7`*BOp@M`kmD_ZlV_lt@P;6~
zuGvct-A~eK<Lq<cOjLs;4of?R@kA*4?3^nq`-bAxnM0^ZiZZ?8*yo5<qFbOo=oRR6
zuf+LU&etOVF`FHC2lU)vladu*p?W5A#bcj4+U2WkA~`Qn+E{)G?7wxyN|h~d9TwD+
zqPg-)6Bg0}1MnQ&9=q38i<WR)UvgkRDb{L{@f8;vvW$OqK77$)O1T4D_~GY-U2pcF
z`0+g6v|9Vl4s8PnG{jBf?s4Zzd>Mo$fU1V4?df<$OWDUBExHeBhw&hE%i%+uBM*n%
zZ$d@H;d=vxQ4DL#(&ULvgg!e42ly=Iomi|h@y%M@E~U$VY23e`_Bc8`T>fRxBqpzE
z75p8sY4wGV+W#MfCI4_7^Z)7x0v?NiVVZ_XNIaqMTRvU!6;mES?i8uLrUyCRoRWh@
zAx-i2KP5JW<mg)Fe^wR5hJzLUQz7RQSL|#OwFCOtjP@9vF`~FrrJd`zU(&?7$h?b#
zf!!G4SQ4sO0oaDw;Z@dx-{!+$iZ0#Yb-jRz_u4i8qrLBeisHWa1&P_FBy95ZJ~R<V
zpFP3boJuU_1kl~_PZQI|y4t*Vy;o&NOK#OBg-`@^ad$8@Ay&(poAyd9>|l&8xhV{J
zRX_wrLv=AEE^*N{L0xgdWf^f<c8A>=W+v}5^qqV9dVAhG@167dZu>lm<^*<kX6N_&
zegAyEpYP{Odj;={7{=p=T_KLXFX-chcd%q6-G|)Uu|qpm;q*_iRRTy`Ml+5oRuOD0
z`*|$id~_CgQU|2`XmBk0e)={?`Mv?~xB&Wz?O-Nejf#5SrR!5ue%V1vA0MJ9cfD<k
zjbKKXtnrCeI0v9B)Yrt$!oCNls~A-xPDvlN4bt&1O;206j&p$4ibR=HXnUb)_`fJL
zBQ!8t5TtJN@v3R>Wo>E@W_czJkb^-F$9kP-aCm%IkcTsZ^?XP`wKz|GR|Y6vHRcUr
z=;uFb7Gfp>;LVXVYq4+~LF3w;aws@J#kbMYO}sBIm2X|YQ6`{8E`1lxti@i~Hiy2A
zY(zAemefVM$)WWmPLA&T-2-9dJ)<%CbWc51^&-h*l7W$dAn@gypL8k4TQGQzPTC!u
z=0<JWj}(LJ=|fY!A=Kh)ple|u1i-?NzDYPixuK=IGi9CkBUgMXJUz2<6h%@H^4$~0
zFWjx$JYm5}d!&%EOONf|qIb=k<e31Btw&x8_oWkYm#*<K-%-dMgDN7Qy@)65_u3<l
z5IO@m>d=EUi#4A0{6Hz(SOpbf3d12y>y(xgWHV=%pMDo_xV?sojA1ppEHt);Oo~5=
zV+2BPYlc*$*>#-GCzoNj;KnucX4t76<6y7>_j$v4;wWQVf|!v#mAcZ_0tqj8v^U}M
zlyNvK@>i)oNg(*vXjH8^tx{`Yx%TQW!46=`Vk$lhNiif~{9U;Y2arYs+(9!;M`Wt=
zJIGd1rEy90Hy3B}twL-vRko{~v#46vm^uYcQSXpp7X)WX!h|68D!*=!j-+yPk*8i6
z$tH(>0Bw?>50hnZJC)E;sq)Oz9N%)<xCjo>`uoROQ=#J7WH>FETFVe1si5_q5C8Fp
z#$dqUzHfbaF#A$=fD<Os(3+|2#jPD`!4oGu!}WM>3q7))Eyhb5Q4p2jk{-Ec#>#|=
zmj+l1G)VPQbXEi~)HGVa<E|U&!O97=)NIYbhk)mUQa+y68@R`A?UB~!mV-@y$>co<
zrjDu`g(?7fc*9CLhr}S}vFFCHHTx_;S~EqR0Z03m#U6?G`9R~^hWZQT3C*evBaG*N
z;FGZ@vEeP97+t<RU!E$Jcj|=reg*@3%8{lBGq9+FXgT1hMaLN?H3xyteLg_<XUSc4
z<^E>%<V-jL@Hz`HsImCk%K`B+f~g>U$6@(d4O#QbMPt{55nvF+Vs3t6NNw>-(Hq~M
zCYH_v?UbX?AgOk|L2E_q&08<3dtpe}?{a9$##9Hj_%3<LilCB#L8-A>l)GB?ggljE
zsmm3b@e!W7`uxg&?~vC2$`!omP;^^jLeQNZIO@MXo={mdM=IgH%kvqNdMY7px4&i0
ziKlb(mn)W%<+m$R*^D_0p>WYQ&$?zPaoD?#8Q*wADtNH`R=(kMVE*=SpoRY4a<1`|
z{7hnYz_F|>gf%?ta&C#3D8xiJ2iw{L44X7f1|fdWP1=C-i6YhE2oc~K($13|R+<>S
z!KH3hEZfn4E*noS{xwE<aMDT^Nx1iu!Jr7wt972{fF20#5{my&9Q&84j!F+d5C+sr
zZz6lhZ;@=!mgu+<LG&ZilDmiKHSt#pGF#y~Hn@(@SKF~o?o2HqiKb<x0p4xaDhAZ}
zmw$t>Q`yyLUPdGS57yey$_CkOVe2SiYT6B`T0r7)7!u}|WT~Z#y3(a2IRn0~>`UdZ
zS-Vamer3i>TUzzFdVDKJA2>wWvR$;z|AlsLsLXhhHnqEtWIcR*s!VQZR~c5I&yr0y
zkdhow*W6i?K14fqf{!A}ww34vHn++E<g<cN)$xUfh>$E3<(6RDR~#<txLCEW%`FCT
z<KHWXuff&NonV+=kEyqf7En1jG*=TG`7{%%+~{MH9*SGGA3c!<#nB+gj!5@1#nBbI
z50o4^{AC44jo!3ivX(BbScG5j*)Q*lMggBZe?~f>?h!)J#ciDb1zdE?QPn~-4U-zK
zCdrJP%>*W7&L#Gd&?U{0Qjm$^lxP#4^D1FIYH8+DjV`T=a~2+d9CPouUU^c03DU~A
zB$`P}Q-OvBd|oEPn64h7OF8dNLy`<_A$i(*zbNRT<j?hx@Jn>h@p2n|^}}(w!l0-f
zVNsn;MfE`9%N`bBFktmDgRIkd(?Qz>n3W1HfO6h;;XTMeJOJxsSWT`YiOAS>OZDGs
zt07>X7Nmv3m`)2#wW5J`&gp||8d-MtjVN^SoO_4-&_CuHm*RUyy_-uPj!J%ytYt!!
z_n*?4Zy78a00rlWFC#%I;ZeGTRm!N#DP5f|D0L}+FQuxdV2}DY@1f0%4FXj*{6!&&
zGQqa8J#?8+;K=J<*cx$BO{m>YhtZ8mntj&Cb_N^L<ALiIg{*r@l%Z08=P4PAas9aj
zFYZIyI!%atBtpPf=)K45?#&}Ki;m|l#NWeYE!w=gP`Z{Ssyf1dm;CrwF#XV-p{|5f
zQ+VnSU6nTVwkzntCAl=3=*eVJYr=B$XDcKVFSq3PZLm4Em7GFSLN0zi${$q91r#3M
zfd|2^2L3M_$oDf$=3JVL^wYVE(`~JxpB#oP>JN)N=}bV}KtHXXq4QdK?jPZWUzi(;
z2ASb6|9eo4(~jA(O7DvWMbKnbEz;)zq1)*fY@G&+jBR@E-aPv4px5U-k)!+#{+}9d
zJG19oo!H!s<SZ1}jZDp?^iwT~^a^^9TYZo_e0zakk{&K40zs4HLEK2KN3OtjY<UM}
zf?TWQh6j!lkdvZ6oH^a(wIBzRJp6H+qt@cV;-TMk%eM^>_Q9|@br)!Gn+|NC4^x!Q
z(Mjqp82uFiYWs$`AFc0Xz{oT{WnW3Uhh3sl^a6>HFq*=tzs26HC!6+xnd}m8S4^nC
z+4!4JU;hi@dH*5q^si*6yx*1K`2|iTJkeP-=n~bvjva|*<(Al8OZB^oCF=iq!n3ra
zGjiQ#c69zUp`ZuqG6gl0a@%>lftz*F-BbiQ-aTm85&d)B{@O$yp5QYylXjE^Lj(N4
zHy%3(;y~16;)iC0J?UNIsIha+tI^ppeqgw@x1qBBuHMU?ShpwW#f;-t;m*?rjCD1A
z;IctQIRjDl;TlYgFZQ+h#eng~Z>za?oiL)0#H%ndV<o*9I&?l`<>kZB<-y!D^DE`b
zZ5)pFfI!|RL0SyzQ3x-$)kH%s(O>->RM#<f4x5cd_~F5>%k&T?wiw29@Vsi~#zW@Y
zSmLzKtn=Tp&{PBdu<N5|1-IWNy1lcp+h9(v(@!JRf*_}Jj`Z_Y%4)>Zd-M69XQKOO
z6{c0n-9aVW$T<f;BY6$vz|BHf9<iI)fZ~L#XhDBdu7}fv0`4wGVh-+R(;Nj%cnA*&
z8*#MRGpvxW$-Y0J)0!hy_NtxY?>w1-m<4bFU#_4>mSd>}+T8>T1`hZf<$mWT?9s3W
zxs9r;gpfG33uhwZ2(>`c=3*@XS47Pxs&d|c9IWH75^QHSuZKZ#IR)62`QUUof&BJL
z+lNRuU;Rtm0k1{9d~+SgA^>z_sM1m870vzRRf0Lfm?Agr0QZ$W$<Wl~3K<co1<ISW
z=W>PT6Q9>N9N+K42a`jB?1sr~Pr+Ptg?<4sy_;8wH-B%H8@LytYn#{koiVi>>10$M
zNns1PVeOzM_ah%k@hSB1iV_cnqBkpCA^#I9UlCEr$5(f$bF%O{J7jk+w<R-SOc%3&
zmy;xcG8umjQT3Fq^S9O0Y2&Bb(Onq=WxRIkHR}k%Kijqm{Rh0eApp{>KZ1}~6CK7j
z+f?P`5Uns&5kkLzpf%bK9(D%IktbN~`xP;cwQTFc`p2sZ7)m`&1jgSRRBUOL8P39h
z9aC0wW^bVZky)y^bWQHZ<!N2I1uqACA|q|erVC26IiLewKb_Nt^my#Jia%}2YPB}N
zi2<Td>GDyw+I-&Qt*$v1dDNkDRkz8<yt8ctSlu-B*0Jg}!yz8a%Hud8mRGyBxrjj_
z?Yp?dy!@s3XlNpGFNq2^5+sQ6j;5s6y(L%&mMc0xpZ0#5TV5i!m)<iVdDx~DEby}i
zq(sZ7^q2PGA)$&Q5kdQEPzbRHnYGa|*OQ0NKz*l@8;plT%8nF<<X8Bw(Tta%Hql-Y
z7c5Qj4GKI{I1b|uM~r6}!TlLrV(7(*RJVz@`N#=9*4$D)8Lc<+G(`(V*#XT3VQZZ8
z$tVgWt5y#4@q#OUhJ8>blcr1dGq{&VU91EvJ(0?ytH73ivLrQ+B-cQaqVXTzeIwy7
z7Ge4082#(HcK&h&ATGi0s2ZsKsl~q5@;Q)PAgu`jXw#~-lj`Z9$XLHhcq)jFs^i|R
z#?Ejh#?yuaj_WZkK_5H?<JF$<vVL7%&fGEg#JNj`(@q7@Gxe6vTs|v$&q^--uKN^m
zL~Wt%qw}Sg5%oDLo!OJ}Mu9_mst@*)P25|%0*216HYNL5zpcFjrDf9X%T7OmuzR!m
zHIhMLIMiIK;5N4Gaw@Mr{))9_)6Uo?2!LgcDF)6Z|J)ej*L#PztMnD$zl_YyaXX#$
ze(WQm4M%bTCiSg?^<aV*elI1`R_cjT<3EXo`cZgDuaQ4^1o41ElPj0e4pefjoj`>+
zl<RU2L}S9_LV+Bb=b@1G(=`Zv_w^7%s;!Q5&%XET0r@;&7##|!QZ)|UHI6OpRrOJT
zF{t(OYI!xRuk`T&j37M#=@mIm<8647gtSh5L|MeG!97t|{phi2LPy4Pu*|F`YV=jY
zWBs4US)LWVFaJP`FepY&%<{B)fo)!~M?S{Aq4bj8DhSFm9=YN%#<Ne!QH&>P$}@`K
zcqdOs66nOZAQwl~yyx_+a7X)-Nja$kOKCt}vvkWwB^S~#abZ@oD;^O9;6oeGafX14
zkkiU(W>`$t3|f{?j(qkEexbI%`V<?HjUljZBBJf@T_$$Z4Bq+N9q!gc!F?DSL|)3e
z$rK@Vf0Y{)G#G=Rc?gtaW4r-ZsalD{j#zVv;0lP=@<=qaf(oH%_R8qoAYQ6(qN%{z
zOtkWUc{UrTHz%Yn)pyn9k~Opg-f6i&_+LnsQy{)TzfT;BxdGdL^TA9p;2<gY%?dO;
z6sbQY-Trv2{uw;<9)nV>t+W$~Gg|BVsS~sbay5PF92@;z5a292sLI!aTWF>w#j>lO
z5Slp?%eA(US|(xsVbKWaOmG46oeJ@Qdswa-K2LZ*U8<g`VyQc{bc5`vPk?iPj%(in
zY!)<jOw`lfdMn~OQ~?H8Sk!%*W!)$SpC5!(-*dn%qJ;^4WYi(rq1K7=qDPTH0LWjX
z0XvPA4B94DOZ5q)`6q}&fXZ*g?`SE1pQ)f|Or5Q}q3o$3s{-CI(7#;|bz(CZ8CuxN
zdz~X$*xs(j85}w<TV%`rYx(jX2^|Moat2f`Zw&SBp-hpN;kMjM0X%=WITB6&<7K3r
z$al^rH`S#cL8<sj%U0U42aAyHw&bHe0N=5gCc-hWis~{H+9X{^y$g*1thSh9PzaFf
zZ@(A1^OS;e{s-pwEB;?`(Es-sn13<|{Wm|<6$EQh3U|#5Nc5J9#i1ha^<9SM+<fm+
z`kcJt+e-!v&3ho^%wNpNxN3(Xn%N`y=WlnmtSK5P3f|ozD<l=HC`hX&^`<RD5KBo{
zvX=q41#9PlPo``S96V?>ESse+{qc;UU7+;P`)?7ZEkE3s2}jtJ<Z$}>Z3H@g(I6m=
z#e=Mzcwk>#-|O{?Wl5(V!v4e_dRo7Vbg}E`l%K_1TV9$rSPhl)-gX$#3hrVzIDV;*
z=-u@$ap>V$wE}?vg8pzXkXx*GUi;qjDs%X>07ptS>{ajG+&>_52>|sL$}~0IYJ-dq
z$6?13H@Fao_vRCg&wzIjCS=Tsdpa6&7sVC24sn5$ECDKrzlN_xR;}G`r`A@Vq%hp*
z3l-a`yNYtgXCWBBKreptfP_GYyR3hz%HycB7gaN+bv~`70_>knRWgC1X+zmXnO*?q
zdH)9bcV(v<`>Af{T4I=wj@e(rX|a{VirU^ozp^}4#vh?-*jR<ZYUDn(dmJ}wtKk39
z(`KPJ@BH%W!!en3eZcp{=EgK!qUk7p>80iqL$%c;899>V8J8=)Xpi!E2(=x!0Ge>D
zjd;z_nPio4kH@4d8bgsHO%bv5^0_#H?A2hgq(r~2(%xXKYGTYa2XRZZ{)wnoAcRSL
zknSGMLFs1pOb~sXREM!rUV>mba0D=l{MZczaX!yMSZ!^9)#21GrVl-ZE7Z~K=BVBT
zYXR2Ik6ve`(iSCEp#Qnb=nL4r;p6pDL@Jd|w35(_Mo1zli%!HhaUNn+78^he4)ooF
zw_qVe+}VahI~jnOL6W`DJ&xOhbTL6+*ZysynZN}|I3i%Oe9hRYa!Qe69l>+Kvj-)g
z^Wfz<Y8`MEPS_elS==2At+3z%-l8P~C~Ar4Q<D#%6e&-YXbdXc2rpMk<zWFRcP_~;
zLCfHnXeBSkG=4UcB4DL}Kkro%Kt<%K^{Hx81`2}#QTn{$6~%_g?Eu)d`n6!)U#-Ww
z@GM|^+&!vy_<ox4ZG{C|Zkw%>5vt1BC79idYxb{CXAs^#jrgvdrqok2WEE^Qb^)o-
z_-JJjuH3V6O2ruYR|Y0N*Q%5L2r>BC5;|`eNF8sEy`o(t-N~-LzFo^6nz>$}Bg6tD
z_pU~nsqJr7GP?zC^Zckx&KDG1ad|$rE-C|8yXt77&DuB(&i~V0V$id^R-F?P>QmjA
z;hT4|xp;(@<Xu7#s(c7T^IrcSc1g8{ufzI38$?Ji%9YtFwZW}f*kjU2D(wBwp83XK
zQ9SvFic~XLv$6~oD>i@u!3bS`vpZ_IkQ;GlTxJdnH1=$A)GwvT>5h(Yb=46=`5s`M
zzI%xe8LFboi=!8L7dt;};trdS1bxE|Z$$6qRy%!jU9HZf`O;;SdJSX~-+Z=wyCXM-
zGjK6D_L*K91L$f!YpiRx8PzXh$3SKmzC6bXt;6xsRGG{=pNSE!ab2%lO<@)!68}uQ
zuQKwp@Y41$H0KWc`^_$`ktLgCU)={;`R^#j(O^_D)kp6f03RriJRYkG#%&!4U@aTs
z@`WzM8TcMgye9!hbjW3aiDS(y#8D5LUIhg@ENe;03v?zFtEeTkp7I1kVgxz}Q*V@)
z_@puM)dk<s<`k<%5;*W9kC#of*d-dr)sC~hISKdib$WqwI3Si#>~Omv7!+=c`k!Ya
z!~c$piiF%e|01HyMwBivl~qo(b{#`>7_?LCy0ktJ@1e~gNlU?aJ@Pdo61qean?NKq
z{~CpLy<vHmt?sLYPZ0xQ>p$!dNBK1%nyDxCU~aC(08_^05$g=3KB$9zOB#-g`_JM$
z&?HP1`a&6MLT!hAr@X>7io!qxxA(e@`9&%>Jd9UclcZAEt*X%^IoB^J`eBeWO&-ry
zt$2^%*B*2aL*E_I@>RzB9>GM_v948Nx0dHdCtVzkf!c^O${wHc36i=^1o#d($K;;3
zp5$BQM`ljCL_t=&e%Y<%Xb<4wAjF4pa35J2!)m{V#pCVaQIh(xfo8ouc?I~`U6F}k
zpbhqn@ivFtt<z-hJ0!)cdb-2dNxD}@V}aV2^yt1MCQ^fH@z{Wve>@Y$p|M*&Q;0hJ
z%aW}o=tg_E0Z#G9@OmsdU7Rm5`7W~|_eX~izB<9paC%sLZJxM{CI{}a+P)uO2lh1#
z!~GmgfbBm%0=SfVD%l<x-7Sy6j$e6QHPh$-Uyvna2kcI9sg@jQvKk%d?*h%Zvn*Xb
z{XVXC%>=sDE<Asxa2@J_pgn0)J!a<elw28=jkOVV&oKyrsApz?g)zM(sH0w>sZS1!
zq<W-il)mz_pwHNK0|74}iT6>_{j5~q?fojDAEh-z1FRx7Jkj_40jQ^Mrn`46_=bcz
zN*RJc)Hh0-HEpxa$tKjk<i`MN4<tFwI<Z@{fV`eOJOICAH5CP=zyuI;Gc&#`afz1<
zjFRN0jWYSk4VvvCpVRt`3IRQlCTz`K%|X=c?J`qdQxC}isPM2kvQ>jh)<-<O5b%||
z9mgUruOrK@wr<kE6Ce%pYEODy5oBwk>UQ|BWIWP+6Y}0}NRN>W3K~}{ym$apZ|(fr
zzlq}hZ$yTF{?DBK+H(oZ%PuV2?wL0=v0Ls;*^y|ebY~AGxpg}J?F;mRON$b2*|HZ_
zW0p+S93*u0N!7b`VRyk2W?Sg)_mR_WR_6mA5BQu-Xj6bxJyHZC;~jZ0`>gvV(N_1-
zH6{0RL}=diDIJr-WLi$}QkF+r|AY>+?LG<(v>3ahJ07PuVcT)vs<39c`~$4HbA^9m
zC?Tyg9?fXVrK{3^nT*A~l^pbjW5|5<ucDa<+EP{1fB$UGDCyAejY@WR{jpXph`H`Y
zq<dz6{8o7^HaQk@H~lTL;B(3zyysAdc37R*cuw;o?|)T0e2nmgjTq02?QI-dq*9O%
zn{EX=qX#eW^Rj{0V(9bX<HZbYlOWka4k+P97ENOMl{bx(qB@}u^%xuDoLBsIb@>MI
zCpg+G<d)XMZcfyt`_yB+qc;B(@s^E5126`Pcw4f^uHD9#QaidMa_4Vr)f#v3JaMHG
zUW4o-4~wH&=(@Q{STV5=b}offD8I5q`e8+i0fKq~{@~V^g5W|UeBKrxCuaqj?g4qx
zbe%$3t!;mRp?%x!O-nG{`#A*9-3>5Yehewr!F-U;w7AQ^%0_#eV4xc-0kXlStbp!M
z=MqFTH@=@L7b-hpv(q^C6HI9dxI|uAhY*8B!TuYB*Qb<@WRNNsi3`gQ76F}Mwc&RU
zXy<6^e85BOo4lBfh}A-}9W=&Q-a@Y(TB4l8!i60PMAZh(`30`omRbj6BE7j@*^ToU
z#uSm;)eX6gMx_Ot=HtNi$uUfY)<Wk@>3U||9OEZuEyQd|jFOf<kJH^%gSY}N`cMeN
zG*7!k7~Ju5^eB%B+0ktS>46D9m)6OpoTTvXR<s`x@vZztS$d6J2XF?Y0#tNf2Vfg7
z4I$!c<^sk_sruS6Q+K~**BE9Jk$r1p`~?#`hxZ~dd?1a>WS!!ehW||Dy%Do9kks9Z
z7#mUH#N=nGt-a{}^^C8C>Aie+zN-)|a-_3$_8uf7lXr=$J}=Wl&MOnpmw-`|PLKtl
z3Aa+&9F3$H_Tb6eAiVkoYQmo3iAT!mJeF6sP`&nmY6+acG<it6A&P#>WW#gj@|i--
zi`tNEY?SF0>Asaxnc%ON+xrN7bE&x~J{486{j~>+zqI#4ELzeHpX%tcVlZ|#5-)++
z67{Dw$g4rFzE$Pn3OYZ+w6WO_au|g{FvDZDf#?N#-6Hij1ccVreP9c1kczbc+BhZG
zylk_*tJ0n{>qjddz5M83Xh+N+Lz90PO8%+e)lXzy!nBZwawN-ENt$(S#<CLh=e62g
z+`>q<|LuYFc*3gkp(4j?xy5$ge!?<t;-o3XxHZ#O=}T*m`K$Fht<=y+Kgaq;6J12F
z$DuPDbWU^5duZ4i;JT6i=*;wCvdRfH0<|3x%ed11D$wm!kpWH&3^?kzZ>|m@fI6#(
z3X^CfKd9e`?ZA0gpn*v#FHxuMktc+pfiiLG968J&ycC2q&E+1h-wV93Z<(6p1kHaW
zjl`j0*EM9t^?d>w?P}K(sL&Yqd4i(7&=r}S#0l<&CKh5<x*IGOzh|5ry0Z^KM8!M4
zN<pp5jggo4fjv?LU9GBC=#<etNo_@!Xlh07b|@>s7H^}w@A1Q^*SAMRCgL)msL-#*
zjl2^**0%FU^K5ff+)$Nx0b5nZ@k4ipZ9d&?$WqId;&>f>3$^8KUR8G(+c6LxgE+|-
zJZ=*9HWt-KaGUhvle%HpL-Q(HI%Ca7!|(T!VC_z1a<*=KMRHS;gyeaMsDi(aTp;y@
z_yNiy-N@(2q3yU}=$e+xYL8(h5czegqNjMkX3%}jfF}^O7BGRUo9>W+{UcQNY&uEw
zjvrI!WvW&hc`V9Fe!I(wPZ-Utr%e270KV)eFur!~GA&lUjZcSY1=C~Tz};^#v}@UF
z*EYpKl1vSaIaHXOyoSL8o{4V(C-kmlV*>01<VQ4UpoadtDL}fn5s&J_el*J`DsWPH
z-LhXQ@eg>wYY^}-&#5(aV8uH0UORr7h~(fw|LHN<5oxN}^O3wLMVoH`(`fp0Z<wHH
z0R=LrejRdzuM$>0zT&T@g7H5$6G^Y@I}=`Xvs>&%@ybifQra*pBf(8I(J2PoyAKqd
zy;z?ViT1eW=aVma=M3fV>wh%qG`S+%y&~%!Y)N+-1Op2TdGJ8!l*+y$ccHnsI*<lK
zA{%d|Vph~#f1jg6xTJ-zapOwG`th!icVW|#c(Es3j}z-Yaqe0o0#qs(4+M|Q#5QW+
z0*+%jvVjEU{+@b@5Mr68jzaMsG|uR5V)gS35Dwb{3^!GuQ1yS8DGEU$>MC@dN|t;>
z$wEX-blYl+DnS}Cb6(_CQZxJqExw|ZLgLvOx6-EYF)bzm4-iflzmg4=O>5%mrlDMV
z$(OJXTG!wslCF8aa7!O?bWCJN>yv83UMGGNLA!Dd0LplYyxM6-hx%Sxh^K|&(kv?6
zry1;MNdSo?dN+Go1?{T@&}qW5esHW>v8*S`q9COfi9qL~GW|__dGIf;a#v33o#r}2
zmS~xpwZfvQ)954pB@!49lGb#ftbsJuSX@0SmZ1`K)mmiFuib!a!G|)yTiAtOj90(L
zSK8Mx41$uzcHCzJT1(P9b)X6OmnLZ`)$rEIkb6*YrTfQaSTBh1O(~?)DI3qZ$^FC-
z{bu>(`9x*Q5*O>F@ZsG{;n?%K-O^~cEL_+<gxdAmBGf<VP2fy@m=F?y$HRC}2XIG0
z=<}M^!$1FrECJescz8(l$ib7U!`;j%g~ehDO>D8ejAerqnos@V1W9-X*h0Yjz0C+@
zPy_4YC~#IM{q|{dxPc^wFXbvG%0_-YN$Ow5m@CI&mlW$6Xg+wPiKu={pw+a^W#H0v
z#iOu(a)P$EW&{w?NL7XABJUAc)po18>i0WMmTX$#b&uS+x;Y7PpC|10EY;$0^dK0X
zFOFO2U!aRo`7z1gGc&t=k?Zp$*q}F!Z~g)+guKdxr21Jo{WnyE_wXn)+kc!Ya6PGf
zU?RzZU`6L-*LBh?SS`ZVDfO#_39ocl$C^yzlFInkz>?{a9wV*Cuj1u8GkG>5r7)l3
zS=M0jc&gL#_Wvir2)<_WJEObnXWqPdGNHieV~Mxn*Xk0UfFGc01)cZHidjYYi63hA
zGodky)&W_45|XjkXlAbjiCH8(k+GZjfea`BZ+y}}CYDB}^)v1PONQ65^(Pbp7M5{L
z*v}H4aMvToh$a+}z*Pr+o`50i^1)p}xFPKW$hA1-Y-mNY_NgY*TKer35BkRx(j8|u
zC9Iv&n-w}YAurHpYs28%2N(KypvDhehtrM64AzmvvU%^gvK7dap^XLqY)W{Rh{)=(
z*5leuskYOa#_khcb)4w~O*ogMob2(0C*DHpfU(}BB=;qD08Yg%i(|O#Koai$9qsy1
z>Sm4o2?aTBg7sXjcm&;)DuZ|Kk1D&B9k|-1;{No&pL$Na@I)b56Tq8X_%x<q`in2O
z=Ex%u@-6IbMX@inC<=_Ze6l`i4^Ar?AQan<gqv0!5GikclJ@8W#_Q{ocKk(3hWwSH
z8vjZFyZ`<ET}@cJza00M<Nn$FOJ~*IKgIV?@%>YL{}liEt5x@R-Ths6f7ksraUt)o
S=Ka;YkDUCUM$}(@@!tR|NURwE

literal 0
HcmV?d00001

diff --git a/apps/www/public/chiron.svg b/apps/www/public/chiron.svg
new file mode 100644
index 000000000..a42a6e6e9
--- /dev/null
+++ b/apps/www/public/chiron.svg
@@ -0,0 +1,9 @@
+<svg width="147" height="35" viewBox="0 0 147 35" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path fill-rule="evenodd" clip-rule="evenodd" d="M5.68089 0C2.54342 0 0 2.61167 0 5.83333V29.1667C0 32.3883 2.54342 35 5.68089 35H28.4045C31.5419 35 34.0854 32.3883 34.0854 29.1667V5.83333C34.0854 2.61167 31.5419 0 28.4045 0H5.68089ZM17.0427 33.5417C17.0427 24.6821 24.0371 17.5 32.6651 17.5C24.0371 17.5 17.0427 10.3179 17.0427 1.45833C17.0427 10.3179 10.0483 17.5 1.42022 17.5C10.0483 17.5 17.0427 24.6821 17.0427 33.5417Z" fill="white"/>
+<path d="M68.7598 11.9898H64.9833C64.8381 11.1612 64.5677 10.4321 64.1723 9.80232C63.7769 9.17258 63.2927 8.63814 62.7198 8.19898C62.1469 7.75982 61.5054 7.42838 60.7953 7.20466C60.0932 6.98094 59.3468 6.86908 58.556 6.86908C57.1277 6.86908 55.8487 7.23781 54.719 7.97526C53.5973 8.71271 52.7097 9.79403 52.056 11.2192C51.4105 12.6444 51.0877 14.3845 51.0877 16.4394C51.0877 18.5109 51.4105 20.2592 52.056 21.6844C52.7097 23.1096 53.6013 24.1868 54.7311 24.916C55.8608 25.6451 57.1317 26.0097 58.5439 26.0097C59.3266 26.0097 60.069 25.902 60.771 25.6866C61.4812 25.4628 62.1227 25.1355 62.6956 24.7047C63.2685 24.2738 63.7527 23.7476 64.1481 23.1262C64.5516 22.4964 64.83 21.7756 64.9833 20.9635L68.7598 20.976C68.5581 22.2272 68.1667 23.3789 67.5857 24.4312C67.0128 25.4753 66.2744 26.3784 65.3706 27.1407C64.4749 27.8948 63.4501 28.4789 62.2962 28.8932C61.1422 29.3075 59.8834 29.5147 58.5197 29.5147C56.3732 29.5147 54.4607 28.9927 52.7823 27.9486C51.1038 26.8963 49.7805 25.3924 48.8121 23.4369C47.8519 21.4814 47.3717 19.1489 47.3717 16.4394C47.3717 13.7216 47.8559 11.3891 48.8242 9.44188C49.7926 7.48639 51.1159 5.98662 52.7944 4.94259C54.4728 3.89027 56.3813 3.36411 58.5197 3.36411C59.835 3.36411 61.0615 3.55883 62.1993 3.94827C63.3452 4.32943 64.3741 4.89287 65.2859 5.63861C66.1978 6.37607 66.9522 7.27924 67.5494 8.34813C68.1465 9.40874 68.55 10.6226 68.7598 11.9898Z" fill="white"/>
+<path d="M75.8823 17.8314V29.1667H72.2631V3.71212H75.8338V13.183H76.0638C76.4996 12.1555 77.1653 11.3394 78.061 10.7345C78.9567 10.1296 80.1268 9.82718 81.5712 9.82718C82.8462 9.82718 83.9598 10.0965 84.912 10.6351C85.8722 11.1736 86.6146 11.9774 87.1392 13.0463C87.6717 14.1069 87.938 15.4326 87.938 17.0236V29.1667H84.3189V17.471C84.3189 16.0707 83.9679 14.9852 83.2658 14.2146C82.5638 13.4357 81.5874 13.0463 80.3366 13.0463C79.4812 13.0463 78.7146 13.2327 78.0368 13.6056C77.367 13.9785 76.8385 14.5253 76.4512 15.2462C76.0719 15.9588 75.8823 16.8205 75.8823 17.8314Z" fill="white"/>
+<path d="M92.0859 29.1667V10.0758H95.705V29.1667H92.0859ZM93.9136 7.13009C93.2842 7.13009 92.7435 6.91465 92.2917 6.48378C91.8478 6.04462 91.6259 5.52261 91.6259 4.91773C91.6259 4.30457 91.8478 3.78255 92.2917 3.35168C92.7435 2.91252 93.2842 2.69294 93.9136 2.69294C94.543 2.69294 95.0797 2.91252 95.5235 3.35168C95.9754 3.78255 96.2013 4.30457 96.2013 4.91773C96.2013 5.52261 95.9754 6.04462 95.5235 6.48378C95.0797 6.91465 94.543 7.13009 93.9136 7.13009Z" fill="white"/>
+<path d="M99.8922 29.1667V10.0758H103.39V13.1084H103.584C103.923 12.081 104.52 11.2731 105.375 10.6848C106.239 10.0882 107.215 9.78989 108.305 9.78989C108.531 9.78989 108.797 9.79818 109.104 9.81475C109.418 9.83132 109.664 9.85203 109.842 9.87689V13.4316C109.697 13.3902 109.438 13.3446 109.067 13.2949C108.696 13.2369 108.325 13.2079 107.954 13.2079C107.098 13.2079 106.336 13.3943 105.666 13.7672C105.004 14.1317 104.48 14.6413 104.092 15.2959C103.705 15.9422 103.511 16.6797 103.511 17.5083V29.1667H99.8922Z" fill="white"/>
+<path d="M119.458 29.552C117.715 29.552 116.194 29.1418 114.895 28.3215C113.595 27.5012 112.587 26.3536 111.868 24.8787C111.15 23.4038 110.791 21.6803 110.791 19.7082C110.791 17.7279 111.15 15.9961 111.868 14.5129C112.587 13.0297 113.595 11.878 114.895 11.0576C116.194 10.2373 117.715 9.82718 119.458 9.82718C121.201 9.82718 122.722 10.2373 124.021 11.0576C125.32 11.878 126.329 13.0297 127.047 14.5129C127.765 15.9961 128.124 17.7279 128.124 19.7082C128.124 21.6803 127.765 23.4038 127.047 24.8787C126.329 26.3536 125.32 27.5012 124.021 28.3215C122.722 29.1418 121.201 29.552 119.458 29.552ZM119.47 26.4323C120.6 26.4323 121.536 26.1257 122.278 25.5125C123.02 24.8994 123.569 24.0832 123.924 23.064C124.287 22.0449 124.469 20.9221 124.469 19.6958C124.469 18.4777 124.287 17.3591 123.924 16.34C123.569 15.3125 123.02 14.488 122.278 13.8666C121.536 13.2451 120.6 12.9344 119.47 12.9344C118.332 12.9344 117.388 13.2451 116.638 13.8666C115.895 14.488 115.342 15.3125 114.979 16.34C114.624 17.3591 114.447 18.4777 114.447 19.6958C114.447 20.9221 114.624 22.0449 114.979 23.064C115.342 24.0832 115.895 24.8994 116.638 25.5125C117.388 26.1257 118.332 26.4323 119.47 26.4323Z" fill="white"/>
+<path d="M135.102 17.8314V29.1667H131.482V10.0758H134.956V13.183H135.186C135.614 12.1721 136.284 11.3601 137.196 10.7469C138.116 10.1338 139.273 9.82718 140.67 9.82718C141.936 9.82718 143.046 10.1006 143.998 10.6475C144.95 11.1861 145.689 11.9898 146.213 13.0587C146.738 14.1276 147 15.4492 147 17.0236V29.1667H143.381V17.471C143.381 16.0872 143.03 15.0059 142.328 14.227C141.626 13.4399 140.661 13.0463 139.435 13.0463C138.596 13.0463 137.849 13.2327 137.196 13.6056C136.55 13.9785 136.038 14.5253 135.658 15.2462C135.287 15.9588 135.102 16.8205 135.102 17.8314Z" fill="white"/>
+</svg>
diff --git a/apps/www/public/design/apple-icon.png b/apps/www/public/design/apple-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a501dc7d57d6e5a925cab728f31cf70bba33b272
GIT binary patch
literal 2903
zcmZvec{J4f8^^~Odzfr7_9b(LFp8^XOj*JegBhtwL$*oAQX>1zC}gRI(Ac7=Y04TJ
zV-3kN7%mklTTMfZ3ULYd+wc6&xxe!}_mA)Qd!Fy-dEU?SdCv1WpVtkv(+Np&m^cUo
zlC-z8b_Kq*zaCLx;C-}T7y$xF?6S8$hPf)RP|%Yq_lI24pk6=$`b9>q){OpdTKod&
zF%`27;b6IdIB<ZCc?&sM1!`Rop>@AfLu;J58&eQkUzs2`8u6yTg27JhPEA=hH*Y@e
zLfifM=guj(_OqHAlXlB}x2a&sX?6K-I{|PZmF8%34V6WCDyP9YJ=WtZTB{@+q~lOb
zTo2Oy15E4+RK6iYP)6qWWTNt`$8GOJ#*+s9YjikT=evl4z>=UY&Vh=;U3!PAfQ*xR
za$I#dITL2L^~q*lHDz**AfmlEH!l$kIV7@&)<FkDqA}tXAB#ccffqJhV+M$<mQB&O
z_zhKjIdtfR6m8{Lv8hSsg#+>$oRg~SA-dvFo@2T%?4*!rxSPm!{tZA!R-0z)CIEgv
zQu1eOtdS<La@^l!gb#S~VPR?4fNhA;UZNZIQN@iHI}K%ANhr9lg4JRLDghO_bPtCn
zp8>?{di!4-2VAW5+1nSfB-ERI<{}d1AhJ}s@n$7f0POi>VooZ@;Unab{3FExXF$Bj
zcgFTHP^Vj1YS@ob5SeeU8+<1fsOKMt`P$u+Y4!qO)hy-ovJjxKNtv3&yFfuE4KF-4
z+)1c4L(Rh}|2R;<?<2z(NaA-eBvh_kdj2b*fSd2sZBMxZ1-Kdqt33zggA)`z?Ex+O
z7tE*<@X!Gn9^t8%1`<$3VtmzyfQlYeQ^@OR5^57ojkA6LNOXw{&sYh77p-18#eHr5
z-|g<~JAy!HSte}X8N6rN_v)7Vr;cRla|$cT@k2Y4-juE6?bf(W-FwKm?=q1w+ugH(
z2PKTMclxo<GO9zT?d#WRtFd}w{w_($p8Gaw8|QKiPHW|x5i>=k)$HsPp*wFX@t;N>
zyVYF%Hq$a2JQz1OTvp@rN-AoFN8RN39C2O{n(I2kX^r2?1eE(;m*Z4p=^T7ZEH!=)
z#v;}(f<K{W9`fPNWNSi<IW%-yG<0L-f<@H#(kBC3UGH0VHrJLueQ1uUiQ9~5NZ5(L
zeI!=gM~$~M+1htQ7CtczBdyEriSveqZvTuj&wg<cFLC}Q_0#&dS&GmX!t&_O+jx!<
zl9#*RQ#`s>>9GIk>M^kALI29lt-qE}6d~haLGdZulPz&y7>_F31QfY-cm0bIJ`Rat
zv8(tI=`IyDH3gNSs&lm`cM-YdBnxA`QYDgP+AR~P5tsdWpfKxMz@S5S?}VDsrMC6O
zMU!ST>2OE?@H8P~@6>A+rVLZYfpOMiz+4=-Fy$R+51e%Oyw||3eHr!E?Uja(V9)%K
zQ4uin?wP5N(h^)Y;mHS|mKYgcce4<a=}OTPW|(?)oi+Pj^{)NN(q3|f^Os?50e?rs
z&@pK^nLbR=e@`t@6%8--7o4bulYk#-2PO#ZTAU$|Z$?m3T41`Kurp|9ZnzId=G&CP
zo(r()>~ag!*F)|;qW01@#o9H}Q#0pM-TiE{ZE@C`w(8<!wJMwPX@UJtpl^$lG}C}<
z*$rim4Lh>DOVL7OFk``~*XF<SNFY48g)%$=<z1mJG?V@|%9UEl-=F#>!#RSrQd2j}
z*#)L+A;M%nzQf@t$RFc_@jI9IM8|vD3Bp3>RArEqmOs8OP{P89-Y4pYVmeWuFM!%!
zj(|^@RuwxuFdPi}GMI{bL$_$NIT##wA#;3-ouzwH23zh@{oQIe?|UBhgJ5KD9hXfX
z1~pv@IJiV-)PznSryYs9G=i4p!P-Fo>8R1mO`38>61(Uq?#IHIw%a48y__vXB0jJw
zX3gnb(^XC2IIOXnqF49voR_hqTdo`J*CqI4O7vk(en3|^Xz-IqeGqN^Y>p9rzy7I;
zJAJuEeXJ{AAhRo90=l;zRB-4)cQ4O)8|Isb<VY%;UBv@~W~^!Lj-{FSBn3?{UHB6X
z+VtUWy-p9ehmKU-^WdKMjgiepyvW7zIs|dN)_8R6frg7<M)I?%Y2C(%#Z0(!Q8zG9
zP3{4hO|(2L`GQK3v^vrtW{rO(c^++?D1sS)%EO$U@+=ctrUVni&g1V3!ML+uW53PV
ztU>QWljqP}Izw>%ZMDy(6`sqfGVE;2A*e$dYm+!~)T?q<fN;cUwm;weg&O$Jiw1u6
zZde*JjwSe4H&t6|0kL`c-L_nc0-;ohZnD@GEuO~ceR}#CM8k(cZ7(nt^6cwWJjn5r
zQCg{I%s*5Rky3#g(1#fX{v(SL<R8UM21_4A?@g9c%>?FVg9V$?JcRQ+5LEWX5;yAa
z*VUu`5XN+T)Z4p&pZgH4!)czwFtZsf**14SZb1Y3;TdJIaGM6~Xg|#*ySfT-N^W>L
z7{a0yGv>KHPucRF5=|21{d!fuA`(TUSx=OnviAz@YKqbh-I->oqXq##cDXF-T)!eo
z%ri-c;|U3DE@xCAd|J{U1E&Dj+qt@9dv>~0DdWFMb9KWuuF*vgV0cw@Mq`62RtcY1
zg@}aeQ=W^4i^yVtO4gPpjW&NQUdEou#^;6K4w?$t%@Z>qydRv%Go6LoF|I{{8z^SE
za|Nh9^fCs&-g#m${rY7tn5sn#w1&NDYj?$(*AWUqGr2IvQ?{UK>Blxmbh;N~o*%#!
zn^JU<!DYY*Sb4TzS&}983Y^5uRf3a|tpe6k9>*W<-dsi;=OXKu2xNEc8ak__q-1JM
zLD1}HaorVg3cirOk?+qgJbX&QzyrF_@t9F_{$;Ay)-563AFFh-uy14JQjW!CE+p|x
z-Dz6b_vF2uVj45A{4CGveUrHMyC=tp`;%$AziS7Wpq8mee_dtv)LnezyS1^32>Ea%
zGFO>j^0lrw`aWXzk1RBt)a}!kV|eLPul(s}{uy45>fdG)DWCl&m|<4#<!3(KByjq_
z%N*n|=8HtCqgMkPqE{JHJ@%FOR)u>KMSbKf)V<5xh+@pBr!XY;dB|i=t`R=E$NTD4
zj|zM%AE~2x(_k^G^ebz3%x%WJS6h=pcK;fs<BF;=-ORE8xs1AQn^1Dop!%7M9R2~F
zO2lYjfxD40V8TBxR3pSP#+mt70&MZ&JWfo8fQt{fXZZid%z~^+t_E2RE`l$u0Fj;E
zAM3Jo5&$1{l4`N@1bB#*n4VAoU`l~XER_Y^zgI*KzYO_$6ino-6u9YfEE+EwoBxYZ
zFCIQnlsAxp%CEO<{U{b54;U%`V(dtV$6Fw@t;C@OD}S6_HVPLyhQ0|Izdfelx|gGH
z*6fZp*~~X0hGEeHBx42s4hIw8{#0>;|C`}SKq|Wd^zvw4Wp+OR5qo;uyD$LVJU;Y_
zDFJ-1*HoGO(;o*x&$klFk5M`R&Df=TDaHc~5g+brL<JZ^+l1o1?gB8x5VhI*KEM#2
zDWV;A2pw=?DREb{mXPR*b#K+tUmTKIZ^F9)M9S)Q{Lle%*pGJ=!vV;0E_Hkq(Xyu;
zXxW*IiXQTStNbX_xfV!9DEIcl0wGw;EOKZc04#M$WUNb@IR|@w3W;gU2Sdj5?=1W#
z42103Z!8=F^d`i$=7FNzx-<y1vvbH#^*MmY!oRp!5R?_z308Gh{DsXRdmAU~isN3C
FzX3_`Q6c~U

literal 0
HcmV?d00001

diff --git a/apps/www/public/design/favicon.ico b/apps/www/public/design/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a21b640c1e28999dbec19f88eeb554710199c97a
GIT binary patch
literal 15086
zcmeI2&r2*v5XXC6MM1??R78X<LNLcigdiRy-t@2VT^{5tcrX|D6uf!WKS0Pu!H7tB
z7ykwk6e3|kgm~}=q7p>y^rv5H-)uX*JMNCVGszb8_D)Y%)wil^YHE5$sf^014<D52
z^Xk`cmHI&`mCyfsoKxygGnO+w=YMKf>K8NNJ2S_ysE?*GULzsqXVX5L_Lph8K@DB#
zL^l}TN)v`*)3iq6t)>SoV2VPY%%p1anspv*m5B9f7PhE*!5BtK_PcAFyAH&bJ16PK
z!Rui&h4{e?k)M+8Yac$ar{S9Q;RieS3E%mok2m_h8n-{VPsc5@C9mbvRtzL02HM)%
z^u)x3o|~HsZ8I}7y1TpEyIzx%lc9XGv$MLVr^m||S6=Du?bTabTiQo=cXxVaWkq*%
zbcABLxw#2teR_J**bo;^pPc^we!aiHABsT+A0HpB4Vg@)3=hXIFE29fRnMCG^u{$F
z1wX*R$vUuJqB~9avElai*4mI({K0i-Z*SLW^FR0@xgN+%&5r-h&Q86)zOJ92pDh;f
zxa|w-@?Y{&p-`xZe|~=6t`Y0xHi^NwdRM+2gTY7Gi4E8iMy?;^7+>Ktd>0pfpB!?a
zkHA9=k(Y?6w-7m-+~?C9*LXGjtP|HVHegRwN)mqY6*iD#qfip@b8m~f4oSq%IuK9T
zQ0;nX6n<(jYOye)c9Yl%_SAaV;LA(MqGk-%B0>H*|5F2FLs)%H?d;P<UZVC6<714P
zo!Z^U-x_c2TeM=}KM@0I-h%^s+V^kMzJJa;fVAExzz(JP{So-n{{9Xdcqf^bI09=J
zrQuozV<k%RI{5tV+Qap*X<Aa^2`s_))h=G&G5JZ}QF5<qls)K*^!>~W$XAs5oBkW6
zZs_}zD$;i<bwHn0sz9Il+H=^VuO2AyH{hQGj*Z`n^u~|kSMjs>odC(3_M>TU{7!4y
zu&kT*hiP%e6|#_t>`KI(xODpDpd*ZaH-kQ&xW~~Iq(<27+8};lP26*hI+j>#ls;Dv
zK8Q2UUHR3Ho2k1Rw*T#U_O}KG2K3n2SgDPUj=p-Y%zoeC;9zME^WkG(yq;@{J-F@d
zZGC)vTxy4hhkAK=S?6-OlI-E(VZFDvSDM58-Q8V_p&tF{I669dwe@*@eQozQ1;hCG
zxIR5SEt>}h{7{d6-fx8IM^O;Nd+GPtFNR)SU0FY{kNO_=vv<3*vtwl=pLTY3rtk0X
z1%d{{#>R#|KR+*x@uyfU>Zz$Ijc=q44GrmRHXC_Om<x~a(<2kvK|(hez#;@junKN^
zY^nE~3}TAd3KFte1NPj57=m;7Pb^8y)*6>S{rCpiU?4Wb2>tcGv#X>Zn<`<5!+!D_
zxh0sB$UWpB@hKR{QRJ%NJaQR1P3G0olT+QCOzw5RuOZIJ)%Z&qe64pDO{?*$t$Q<T
zAbBpShVi}5Q-3zQ{x%Tov)Oyu=#wkYALxgg`TX?-L1X;j+AX@JmuI3luM3HDWS5cI
zKj<r(orD9kt5C2z4P~ceKS0NU(N#1$(ak<Z&a}K~5%wv*H`9JIjcpEJT*)|dm<ta?
zAB9i&rH2PzWXafDdw6TnEqdzV6&beYKD@ZNXuqFYSXi*nDqUS&dTD9Nj!jQbm(6!=
z9vK<Y7Z(?{%#rWmr~xi7FYOrLWw|`TWA51}Cnt9P!^4C9-eYZTtyDX$uCCfzsjsgu
z^q$RqoO9Gu%!R1CkO3ZKf(0Gu3hH+MgB4;vHc-RK_b1qhtu9aS7+)a+-{C`Q6nx4U
qKCZXs3F<Qc>xlt)>y2Nofm$%Y1204mjwo^jv*j(AJ<wVS-hTkn<~aWV

literal 0
HcmV?d00001

diff --git a/apps/www/public/docs/apple-icon.png b/apps/www/public/docs/apple-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a501dc7d57d6e5a925cab728f31cf70bba33b272
GIT binary patch
literal 2903
zcmZvec{J4f8^^~Odzfr7_9b(LFp8^XOj*JegBhtwL$*oAQX>1zC}gRI(Ac7=Y04TJ
zV-3kN7%mklTTMfZ3ULYd+wc6&xxe!}_mA)Qd!Fy-dEU?SdCv1WpVtkv(+Np&m^cUo
zlC-z8b_Kq*zaCLx;C-}T7y$xF?6S8$hPf)RP|%Yq_lI24pk6=$`b9>q){OpdTKod&
zF%`27;b6IdIB<ZCc?&sM1!`Rop>@AfLu;J58&eQkUzs2`8u6yTg27JhPEA=hH*Y@e
zLfifM=guj(_OqHAlXlB}x2a&sX?6K-I{|PZmF8%34V6WCDyP9YJ=WtZTB{@+q~lOb
zTo2Oy15E4+RK6iYP)6qWWTNt`$8GOJ#*+s9YjikT=evl4z>=UY&Vh=;U3!PAfQ*xR
za$I#dITL2L^~q*lHDz**AfmlEH!l$kIV7@&)<FkDqA}tXAB#ccffqJhV+M$<mQB&O
z_zhKjIdtfR6m8{Lv8hSsg#+>$oRg~SA-dvFo@2T%?4*!rxSPm!{tZA!R-0z)CIEgv
zQu1eOtdS<La@^l!gb#S~VPR?4fNhA;UZNZIQN@iHI}K%ANhr9lg4JRLDghO_bPtCn
zp8>?{di!4-2VAW5+1nSfB-ERI<{}d1AhJ}s@n$7f0POi>VooZ@;Unab{3FExXF$Bj
zcgFTHP^Vj1YS@ob5SeeU8+<1fsOKMt`P$u+Y4!qO)hy-ovJjxKNtv3&yFfuE4KF-4
z+)1c4L(Rh}|2R;<?<2z(NaA-eBvh_kdj2b*fSd2sZBMxZ1-Kdqt33zggA)`z?Ex+O
z7tE*<@X!Gn9^t8%1`<$3VtmzyfQlYeQ^@OR5^57ojkA6LNOXw{&sYh77p-18#eHr5
z-|g<~JAy!HSte}X8N6rN_v)7Vr;cRla|$cT@k2Y4-juE6?bf(W-FwKm?=q1w+ugH(
z2PKTMclxo<GO9zT?d#WRtFd}w{w_($p8Gaw8|QKiPHW|x5i>=k)$HsPp*wFX@t;N>
zyVYF%Hq$a2JQz1OTvp@rN-AoFN8RN39C2O{n(I2kX^r2?1eE(;m*Z4p=^T7ZEH!=)
z#v;}(f<K{W9`fPNWNSi<IW%-yG<0L-f<@H#(kBC3UGH0VHrJLueQ1uUiQ9~5NZ5(L
zeI!=gM~$~M+1htQ7CtczBdyEriSveqZvTuj&wg<cFLC}Q_0#&dS&GmX!t&_O+jx!<
zl9#*RQ#`s>>9GIk>M^kALI29lt-qE}6d~haLGdZulPz&y7>_F31QfY-cm0bIJ`Rat
zv8(tI=`IyDH3gNSs&lm`cM-YdBnxA`QYDgP+AR~P5tsdWpfKxMz@S5S?}VDsrMC6O
zMU!ST>2OE?@H8P~@6>A+rVLZYfpOMiz+4=-Fy$R+51e%Oyw||3eHr!E?Uja(V9)%K
zQ4uin?wP5N(h^)Y;mHS|mKYgcce4<a=}OTPW|(?)oi+Pj^{)NN(q3|f^Os?50e?rs
z&@pK^nLbR=e@`t@6%8--7o4bulYk#-2PO#ZTAU$|Z$?m3T41`Kurp|9ZnzId=G&CP
zo(r()>~ag!*F)|;qW01@#o9H}Q#0pM-TiE{ZE@C`w(8<!wJMwPX@UJtpl^$lG}C}<
z*$rim4Lh>DOVL7OFk``~*XF<SNFY48g)%$=<z1mJG?V@|%9UEl-=F#>!#RSrQd2j}
z*#)L+A;M%nzQf@t$RFc_@jI9IM8|vD3Bp3>RArEqmOs8OP{P89-Y4pYVmeWuFM!%!
zj(|^@RuwxuFdPi}GMI{bL$_$NIT##wA#;3-ouzwH23zh@{oQIe?|UBhgJ5KD9hXfX
z1~pv@IJiV-)PznSryYs9G=i4p!P-Fo>8R1mO`38>61(Uq?#IHIw%a48y__vXB0jJw
zX3gnb(^XC2IIOXnqF49voR_hqTdo`J*CqI4O7vk(en3|^Xz-IqeGqN^Y>p9rzy7I;
zJAJuEeXJ{AAhRo90=l;zRB-4)cQ4O)8|Isb<VY%;UBv@~W~^!Lj-{FSBn3?{UHB6X
z+VtUWy-p9ehmKU-^WdKMjgiepyvW7zIs|dN)_8R6frg7<M)I?%Y2C(%#Z0(!Q8zG9
zP3{4hO|(2L`GQK3v^vrtW{rO(c^++?D1sS)%EO$U@+=ctrUVni&g1V3!ML+uW53PV
ztU>QWljqP}Izw>%ZMDy(6`sqfGVE;2A*e$dYm+!~)T?q<fN;cUwm;weg&O$Jiw1u6
zZde*JjwSe4H&t6|0kL`c-L_nc0-;ohZnD@GEuO~ceR}#CM8k(cZ7(nt^6cwWJjn5r
zQCg{I%s*5Rky3#g(1#fX{v(SL<R8UM21_4A?@g9c%>?FVg9V$?JcRQ+5LEWX5;yAa
z*VUu`5XN+T)Z4p&pZgH4!)czwFtZsf**14SZb1Y3;TdJIaGM6~Xg|#*ySfT-N^W>L
z7{a0yGv>KHPucRF5=|21{d!fuA`(TUSx=OnviAz@YKqbh-I->oqXq##cDXF-T)!eo
z%ri-c;|U3DE@xCAd|J{U1E&Dj+qt@9dv>~0DdWFMb9KWuuF*vgV0cw@Mq`62RtcY1
zg@}aeQ=W^4i^yVtO4gPpjW&NQUdEou#^;6K4w?$t%@Z>qydRv%Go6LoF|I{{8z^SE
za|Nh9^fCs&-g#m${rY7tn5sn#w1&NDYj?$(*AWUqGr2IvQ?{UK>Blxmbh;N~o*%#!
zn^JU<!DYY*Sb4TzS&}983Y^5uRf3a|tpe6k9>*W<-dsi;=OXKu2xNEc8ak__q-1JM
zLD1}HaorVg3cirOk?+qgJbX&QzyrF_@t9F_{$;Ay)-563AFFh-uy14JQjW!CE+p|x
z-Dz6b_vF2uVj45A{4CGveUrHMyC=tp`;%$AziS7Wpq8mee_dtv)LnezyS1^32>Ea%
zGFO>j^0lrw`aWXzk1RBt)a}!kV|eLPul(s}{uy45>fdG)DWCl&m|<4#<!3(KByjq_
z%N*n|=8HtCqgMkPqE{JHJ@%FOR)u>KMSbKf)V<5xh+@pBr!XY;dB|i=t`R=E$NTD4
zj|zM%AE~2x(_k^G^ebz3%x%WJS6h=pcK;fs<BF;=-ORE8xs1AQn^1Dop!%7M9R2~F
zO2lYjfxD40V8TBxR3pSP#+mt70&MZ&JWfo8fQt{fXZZid%z~^+t_E2RE`l$u0Fj;E
zAM3Jo5&$1{l4`N@1bB#*n4VAoU`l~XER_Y^zgI*KzYO_$6ino-6u9YfEE+EwoBxYZ
zFCIQnlsAxp%CEO<{U{b54;U%`V(dtV$6Fw@t;C@OD}S6_HVPLyhQ0|Izdfelx|gGH
z*6fZp*~~X0hGEeHBx42s4hIw8{#0>;|C`}SKq|Wd^zvw4Wp+OR5qo;uyD$LVJU;Y_
zDFJ-1*HoGO(;o*x&$klFk5M`R&Df=TDaHc~5g+brL<JZ^+l1o1?gB8x5VhI*KEM#2
zDWV;A2pw=?DREb{mXPR*b#K+tUmTKIZ^F9)M9S)Q{Lle%*pGJ=!vV;0E_Hkq(Xyu;
zXxW*IiXQTStNbX_xfV!9DEIcl0wGw;EOKZc04#M$WUNb@IR|@w3W;gU2Sdj5?=1W#
z42103Z!8=F^d`i$=7FNzx-<y1vvbH#^*MmY!oRp!5R?_z308Gh{DsXRdmAU~isN3C
FzX3_`Q6c~U

literal 0
HcmV?d00001

diff --git a/apps/www/public/docs/favicon.ico b/apps/www/public/docs/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a21b640c1e28999dbec19f88eeb554710199c97a
GIT binary patch
literal 15086
zcmeI2&r2*v5XXC6MM1??R78X<LNLcigdiRy-t@2VT^{5tcrX|D6uf!WKS0Pu!H7tB
z7ykwk6e3|kgm~}=q7p>y^rv5H-)uX*JMNCVGszb8_D)Y%)wil^YHE5$sf^014<D52
z^Xk`cmHI&`mCyfsoKxygGnO+w=YMKf>K8NNJ2S_ysE?*GULzsqXVX5L_Lph8K@DB#
zL^l}TN)v`*)3iq6t)>SoV2VPY%%p1anspv*m5B9f7PhE*!5BtK_PcAFyAH&bJ16PK
z!Rui&h4{e?k)M+8Yac$ar{S9Q;RieS3E%mok2m_h8n-{VPsc5@C9mbvRtzL02HM)%
z^u)x3o|~HsZ8I}7y1TpEyIzx%lc9XGv$MLVr^m||S6=Du?bTabTiQo=cXxVaWkq*%
zbcABLxw#2teR_J**bo;^pPc^we!aiHABsT+A0HpB4Vg@)3=hXIFE29fRnMCG^u{$F
z1wX*R$vUuJqB~9avElai*4mI({K0i-Z*SLW^FR0@xgN+%&5r-h&Q86)zOJ92pDh;f
zxa|w-@?Y{&p-`xZe|~=6t`Y0xHi^NwdRM+2gTY7Gi4E8iMy?;^7+>Ktd>0pfpB!?a
zkHA9=k(Y?6w-7m-+~?C9*LXGjtP|HVHegRwN)mqY6*iD#qfip@b8m~f4oSq%IuK9T
zQ0;nX6n<(jYOye)c9Yl%_SAaV;LA(MqGk-%B0>H*|5F2FLs)%H?d;P<UZVC6<714P
zo!Z^U-x_c2TeM=}KM@0I-h%^s+V^kMzJJa;fVAExzz(JP{So-n{{9Xdcqf^bI09=J
zrQuozV<k%RI{5tV+Qap*X<Aa^2`s_))h=G&G5JZ}QF5<qls)K*^!>~W$XAs5oBkW6
zZs_}zD$;i<bwHn0sz9Il+H=^VuO2AyH{hQGj*Z`n^u~|kSMjs>odC(3_M>TU{7!4y
zu&kT*hiP%e6|#_t>`KI(xODpDpd*ZaH-kQ&xW~~Iq(<27+8};lP26*hI+j>#ls;Dv
zK8Q2UUHR3Ho2k1Rw*T#U_O}KG2K3n2SgDPUj=p-Y%zoeC;9zME^WkG(yq;@{J-F@d
zZGC)vTxy4hhkAK=S?6-OlI-E(VZFDvSDM58-Q8V_p&tF{I669dwe@*@eQozQ1;hCG
zxIR5SEt>}h{7{d6-fx8IM^O;Nd+GPtFNR)SU0FY{kNO_=vv<3*vtwl=pLTY3rtk0X
z1%d{{#>R#|KR+*x@uyfU>Zz$Ijc=q44GrmRHXC_Om<x~a(<2kvK|(hez#;@junKN^
zY^nE~3}TAd3KFte1NPj57=m;7Pb^8y)*6>S{rCpiU?4Wb2>tcGv#X>Zn<`<5!+!D_
zxh0sB$UWpB@hKR{QRJ%NJaQR1P3G0olT+QCOzw5RuOZIJ)%Z&qe64pDO{?*$t$Q<T
zAbBpShVi}5Q-3zQ{x%Tov)Oyu=#wkYALxgg`TX?-L1X;j+AX@JmuI3luM3HDWS5cI
zKj<r(orD9kt5C2z4P~ceKS0NU(N#1$(ak<Z&a}K~5%wv*H`9JIjcpEJT*)|dm<ta?
zAB9i&rH2PzWXafDdw6TnEqdzV6&beYKD@ZNXuqFYSXi*nDqUS&dTD9Nj!jQbm(6!=
z9vK<Y7Z(?{%#rWmr~xi7FYOrLWw|`TWA51}Cnt9P!^4C9-eYZTtyDX$uCCfzsjsgu
z^q$RqoO9Gu%!R1CkO3ZKf(0Gu3hH+MgB4;vHc-RK_b1qhtu9aS7+)a+-{C`Q6nx4U
qKCZXs3F<Qc>xlt)>y2Nofm$%Y1204mjwo^jv*j(AJ<wVS-hTkn<~aWV

literal 0
HcmV?d00001

diff --git a/apps/www/public/favicon.ico b/apps/www/public/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a21b640c1e28999dbec19f88eeb554710199c97a
GIT binary patch
literal 15086
zcmeI2&r2*v5XXC6MM1??R78X<LNLcigdiRy-t@2VT^{5tcrX|D6uf!WKS0Pu!H7tB
z7ykwk6e3|kgm~}=q7p>y^rv5H-)uX*JMNCVGszb8_D)Y%)wil^YHE5$sf^014<D52
z^Xk`cmHI&`mCyfsoKxygGnO+w=YMKf>K8NNJ2S_ysE?*GULzsqXVX5L_Lph8K@DB#
zL^l}TN)v`*)3iq6t)>SoV2VPY%%p1anspv*m5B9f7PhE*!5BtK_PcAFyAH&bJ16PK
z!Rui&h4{e?k)M+8Yac$ar{S9Q;RieS3E%mok2m_h8n-{VPsc5@C9mbvRtzL02HM)%
z^u)x3o|~HsZ8I}7y1TpEyIzx%lc9XGv$MLVr^m||S6=Du?bTabTiQo=cXxVaWkq*%
zbcABLxw#2teR_J**bo;^pPc^we!aiHABsT+A0HpB4Vg@)3=hXIFE29fRnMCG^u{$F
z1wX*R$vUuJqB~9avElai*4mI({K0i-Z*SLW^FR0@xgN+%&5r-h&Q86)zOJ92pDh;f
zxa|w-@?Y{&p-`xZe|~=6t`Y0xHi^NwdRM+2gTY7Gi4E8iMy?;^7+>Ktd>0pfpB!?a
zkHA9=k(Y?6w-7m-+~?C9*LXGjtP|HVHegRwN)mqY6*iD#qfip@b8m~f4oSq%IuK9T
zQ0;nX6n<(jYOye)c9Yl%_SAaV;LA(MqGk-%B0>H*|5F2FLs)%H?d;P<UZVC6<714P
zo!Z^U-x_c2TeM=}KM@0I-h%^s+V^kMzJJa;fVAExzz(JP{So-n{{9Xdcqf^bI09=J
zrQuozV<k%RI{5tV+Qap*X<Aa^2`s_))h=G&G5JZ}QF5<qls)K*^!>~W$XAs5oBkW6
zZs_}zD$;i<bwHn0sz9Il+H=^VuO2AyH{hQGj*Z`n^u~|kSMjs>odC(3_M>TU{7!4y
zu&kT*hiP%e6|#_t>`KI(xODpDpd*ZaH-kQ&xW~~Iq(<27+8};lP26*hI+j>#ls;Dv
zK8Q2UUHR3Ho2k1Rw*T#U_O}KG2K3n2SgDPUj=p-Y%zoeC;9zME^WkG(yq;@{J-F@d
zZGC)vTxy4hhkAK=S?6-OlI-E(VZFDvSDM58-Q8V_p&tF{I669dwe@*@eQozQ1;hCG
zxIR5SEt>}h{7{d6-fx8IM^O;Nd+GPtFNR)SU0FY{kNO_=vv<3*vtwl=pLTY3rtk0X
z1%d{{#>R#|KR+*x@uyfU>Zz$Ijc=q44GrmRHXC_Om<x~a(<2kvK|(hez#;@junKN^
zY^nE~3}TAd3KFte1NPj57=m;7Pb^8y)*6>S{rCpiU?4Wb2>tcGv#X>Zn<`<5!+!D_
zxh0sB$UWpB@hKR{QRJ%NJaQR1P3G0olT+QCOzw5RuOZIJ)%Z&qe64pDO{?*$t$Q<T
zAbBpShVi}5Q-3zQ{x%Tov)Oyu=#wkYALxgg`TX?-L1X;j+AX@JmuI3luM3HDWS5cI
zKj<r(orD9kt5C2z4P~ceKS0NU(N#1$(ak<Z&a}K~5%wv*H`9JIjcpEJT*)|dm<ta?
zAB9i&rH2PzWXafDdw6TnEqdzV6&beYKD@ZNXuqFYSXi*nDqUS&dTD9Nj!jQbm(6!=
z9vK<Y7Z(?{%#rWmr~xi7FYOrLWw|`TWA51}Cnt9P!^4C9-eYZTtyDX$uCCfzsjsgu
z^q$RqoO9Gu%!R1CkO3ZKf(0Gu3hH+MgB4;vHc-RK_b1qhtu9aS7+)a+-{C`Q6nx4U
qKCZXs3F<Qc>xlt)>y2Nofm$%Y1204mjwo^jv*j(AJ<wVS-hTkn<~aWV

literal 0
HcmV?d00001

diff --git a/apps/www/public/github.svg b/apps/www/public/github.svg
new file mode 100644
index 000000000..dd289610c
--- /dev/null
+++ b/apps/www/public/github.svg
@@ -0,0 +1,10 @@
+<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
+<g clip-path="url(#clip0_533_40)">
+<path d="M12.0001 0C5.37347 0 0 5.50147 0 12.2881C0 17.7173 3.43838 22.3235 8.20641 23.9483C8.80613 24.062 9.02634 23.6817 9.02634 23.3571C9.02634 23.0641 9.01509 22.0961 9.01003 21.0694C5.67159 21.8126 4.96716 19.6195 4.96716 19.6195C4.42125 18.1992 3.63469 17.8214 3.63469 17.8214C2.54597 17.0588 3.71681 17.0746 3.71681 17.0746C4.92178 17.1612 5.55628 18.3408 5.55628 18.3408C6.62662 20.2193 8.36362 19.6763 9.04837 19.3622C9.15609 18.5681 9.46706 18.0259 9.81028 17.7191C7.14487 17.4084 4.34297 16.3548 4.34297 11.6463C4.34297 10.3047 4.81172 9.20851 5.57934 8.34797C5.45475 8.03846 5.04403 6.78874 5.69559 5.09606C5.69559 5.09606 6.70331 4.76582 8.99653 6.35568C9.95372 6.08342 10.9803 5.94691 12.0001 5.94221C13.0199 5.94691 14.0473 6.08333 15.0063 6.35568C17.2967 4.76592 18.303 5.09616 18.303 5.09616C18.9562 6.78864 18.5452 8.03856 18.4207 8.34797C19.1901 9.20851 19.6556 10.3047 19.6556 11.6463C19.6556 16.366 16.8484 17.4052 14.1762 17.7094C14.6066 18.0907 14.9902 18.8386 14.9902 19.985C14.9902 21.6291 14.9763 22.9523 14.9763 23.3571C14.9763 23.6842 15.1923 24.0673 15.8005 23.9465C20.5659 22.32 24 17.7156 24 12.2882C24 5.50147 18.6273 0 12.0001 0ZM4.49447 17.5046C4.46803 17.5657 4.37419 17.584 4.28878 17.5421C4.20169 17.502 4.15284 17.4188 4.18097 17.3576C4.20684 17.2947 4.30087 17.2771 4.38769 17.3193C4.47487 17.3594 4.52456 17.4434 4.49447 17.5046ZM5.08472 18.044C5.02753 18.0983 4.91559 18.0731 4.83966 17.9872C4.76119 17.9016 4.74647 17.787 4.8045 17.7319C4.86356 17.6775 4.97203 17.703 5.05069 17.7886C5.12925 17.8753 5.14444 17.9891 5.08472 18.044ZM5.48972 18.734C5.41612 18.7863 5.29594 18.7373 5.22159 18.628C5.14809 18.5188 5.14809 18.3877 5.22319 18.3352C5.29772 18.2827 5.41613 18.33 5.49141 18.4384C5.56472 18.5495 5.56472 18.6805 5.48962 18.7341L5.48972 18.734ZM6.17447 19.5332C6.10875 19.6075 5.96859 19.5876 5.86603 19.4862C5.76112 19.3871 5.73197 19.2466 5.79797 19.1723C5.86453 19.0978 6.00544 19.1187 6.10875 19.2193C6.21281 19.3182 6.24469 19.4598 6.17447 19.5332ZM7.05966 19.803C7.03059 19.8993 6.89559 19.943 6.75975 19.9021C6.624 19.86 6.53522 19.7473 6.56259 19.65C6.59081 19.5531 6.72638 19.5076 6.86325 19.5514C6.99881 19.5932 7.08788 19.7051 7.05966 19.803ZM8.06691 19.9175C8.07028 20.0188 7.95506 20.1028 7.81238 20.1047C7.66894 20.108 7.55278 20.026 7.55119 19.9261C7.55119 19.8239 7.66387 19.7407 7.80741 19.7382C7.95009 19.7353 8.06691 19.8167 8.06691 19.9175ZM9.05644 19.8786C9.0735 19.9775 8.97441 20.0791 8.83266 20.1061C8.69344 20.1322 8.56444 20.0711 8.54672 19.9731C8.52947 19.8717 8.63044 19.7701 8.76947 19.7439C8.91141 19.7187 9.03834 19.7781 9.05644 19.8786Z" fill="white"/>
+</g>
+<defs>
+<clipPath id="clip0_533_40">
+<rect width="24" height="24" fill="white"/>
+</clipPath>
+</defs>
+</svg>
diff --git a/apps/www/public/logo.svg b/apps/www/public/logo.svg
new file mode 100644
index 000000000..16b17f055
--- /dev/null
+++ b/apps/www/public/logo.svg
@@ -0,0 +1,4 @@
+<svg width="414" height="78" viewBox="0 0 414 78" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M60 39L90 8.5L120 8.5L120 39H90V69.5L60 69.5L60 39ZM0 39H30L30 8.5L60 8.5V39L30 69.5H0V39Z" fill="white"/>
+<path d="M162.631 16.27L175.861 53.377L188.965 16.27H196.273L180.082 61H171.577L155.386 16.27H162.631ZM211.365 61.756C208.173 61.756 205.38 61.042 202.986 59.614C200.592 58.186 198.723 56.17 197.379 53.566C196.077 50.92 195.426 47.833 195.426 44.305C195.426 40.777 196.077 37.711 197.379 35.107C198.723 32.461 200.592 30.424 202.986 28.996C205.38 27.568 208.173 26.854 211.365 26.854C214.515 26.854 217.287 27.568 219.681 28.996C222.075 30.424 223.923 32.461 225.225 35.107C226.569 37.711 227.241 40.777 227.241 44.305C227.241 47.833 226.569 50.92 225.225 53.566C223.923 56.17 222.075 58.186 219.681 59.614C217.287 61.042 214.515 61.756 211.365 61.756ZM211.365 55.96C214.179 55.96 216.363 54.931 217.917 52.873C219.513 50.815 220.311 47.959 220.311 44.305C220.311 40.651 219.513 37.795 217.917 35.737C216.363 33.679 214.179 32.65 211.365 32.65C208.551 32.65 206.346 33.679 204.75 35.737C203.154 37.753 202.356 40.609 202.356 44.305C202.356 48.001 203.154 50.878 204.75 52.936C206.346 54.952 208.551 55.96 211.365 55.96ZM238.404 27.61V61H231.726V27.61H238.404ZM238.593 16.333V22.696H231.6V16.333H238.593ZM268.259 16.27H274.937V61H268.7L268.511 56.212C267.545 57.934 266.138 59.299 264.29 60.307C262.442 61.273 260.384 61.756 258.116 61.756C255.26 61.756 252.761 61.042 250.619 59.614C248.477 58.186 246.839 56.17 245.705 53.566C244.571 50.92 244.004 47.833 244.004 44.305C244.004 40.777 244.571 37.711 245.705 35.107C246.839 32.461 248.477 30.424 250.619 28.996C252.761 27.568 255.26 26.854 258.116 26.854C260.3 26.854 262.295 27.316 264.101 28.24C265.907 29.164 267.293 30.445 268.259 32.083V16.27ZM267.629 50.479C268.385 48.715 268.763 46.657 268.763 44.305C268.763 41.911 268.385 39.811 267.629 38.005C266.915 36.199 265.886 34.813 264.542 33.847C263.198 32.881 261.623 32.398 259.817 32.398C257.087 32.398 254.924 33.49 253.328 35.674C251.732 37.816 250.934 40.693 250.934 44.305C250.934 47.875 251.732 50.731 253.328 52.873C254.966 54.973 257.129 56.023 259.817 56.023C261.623 56.023 263.198 55.54 264.542 54.574C265.886 53.608 266.915 52.243 267.629 50.479ZM287.35 16.27V35.107L286.405 34.792C287.035 32.062 288.316 30.067 290.248 28.807C292.18 27.505 294.49 26.854 297.178 26.854C300.622 26.854 303.352 28.009 305.368 30.319C307.426 32.587 308.455 35.653 308.455 39.517V61H301.777V41.911C301.777 38.845 301.252 36.556 300.202 35.044C299.152 33.532 297.514 32.776 295.288 32.776C292.852 32.776 290.92 33.574 289.492 35.17C288.064 36.724 287.35 38.971 287.35 41.911V61H280.672V16.27H287.35ZM313.941 37.627C314.613 34.267 316.188 31.642 318.666 29.752C321.186 27.82 324.378 26.854 328.242 26.854C332.778 26.854 336.243 28.072 338.637 30.508C341.073 32.944 342.291 36.451 342.291 41.029V53.44C342.291 54.28 342.459 54.889 342.795 55.267C343.173 55.603 343.698 55.771 344.37 55.771H345.693V61H343.614L342.858 61.063C341.052 61.021 339.519 60.643 338.259 59.929C336.999 59.173 336.306 57.808 336.18 55.834C335.34 57.556 333.996 58.984 332.148 60.118C330.3 61.21 328.053 61.756 325.407 61.756C321.963 61.756 319.086 60.895 316.776 59.173C314.508 57.451 313.374 55.141 313.374 52.243C313.374 50.101 313.878 48.379 314.886 47.077C315.894 45.775 317.28 44.767 319.044 44.053C320.808 43.339 323.139 42.709 326.037 42.163L335.613 40.273C335.571 37.585 334.941 35.59 333.723 34.288C332.505 32.944 330.678 32.272 328.242 32.272C326.31 32.272 324.714 32.776 323.454 33.784C322.194 34.75 321.333 36.178 320.871 38.068L313.941 37.627ZM320.304 52.117C320.304 53.419 320.85 54.49 321.942 55.33C323.076 56.17 324.714 56.59 326.856 56.59C328.536 56.548 330.048 56.128 331.392 55.33C332.736 54.532 333.786 53.335 334.542 51.739C335.34 50.101 335.739 48.127 335.739 45.817V45.376L328.62 46.636C328.284 46.678 327.948 46.741 327.612 46.825C325.89 47.119 324.546 47.434 323.58 47.77C322.614 48.064 321.816 48.568 321.186 49.282C320.598 49.954 320.304 50.899 320.304 52.117ZM369.51 38.131C369.174 36.409 368.292 35.023 366.864 33.973C365.436 32.923 363.819 32.398 362.013 32.398C360.249 32.398 358.779 32.839 357.603 33.721C356.427 34.561 355.839 35.695 355.839 37.123C355.881 38.467 356.574 39.517 357.918 40.273C359.304 40.987 361.089 41.575 363.273 42.037C366.297 42.583 368.775 43.255 370.707 44.053C372.639 44.809 374.151 45.859 375.243 47.203C376.335 48.505 376.881 50.206 376.881 52.306C376.881 54.364 376.251 56.107 374.991 57.535C373.773 58.963 372.114 60.034 370.014 60.748C367.956 61.42 365.688 61.756 363.21 61.756C360.396 61.756 357.876 61.294 355.65 60.37C353.424 59.446 351.639 58.144 350.295 56.464C348.993 54.742 348.258 52.747 348.09 50.479L354.957 50.038C355.209 51.298 355.671 52.39 356.343 53.314C357.057 54.238 357.981 54.952 359.115 55.456C360.291 55.96 361.635 56.212 363.147 56.212C364.953 56.212 366.528 55.876 367.872 55.204C369.258 54.49 369.951 53.419 369.951 51.991C369.951 51.025 369.657 50.248 369.069 49.66C368.481 49.072 367.746 48.631 366.864 48.337C366.024 48.043 364.89 47.749 363.462 47.455C363.042 47.329 362.58 47.224 362.076 47.14C359.22 46.51 356.889 45.859 355.083 45.187C353.277 44.473 351.786 43.486 350.61 42.226C349.476 40.966 348.909 39.328 348.909 37.312C348.909 35.17 349.455 33.322 350.547 31.768C351.681 30.172 353.256 28.954 355.272 28.114C357.33 27.274 359.745 26.854 362.517 26.854C366.171 26.854 369.258 27.841 371.778 29.815C374.298 31.789 375.831 34.435 376.377 37.753L369.51 38.131ZM388.054 16.27V35.107L387.109 34.792C387.739 32.062 389.02 30.067 390.952 28.807C392.884 27.505 395.194 26.854 397.882 26.854C401.326 26.854 404.056 28.009 406.072 30.319C408.13 32.587 409.159 35.653 409.159 39.517V61H402.481V41.911C402.481 38.845 401.956 36.556 400.906 35.044C399.856 33.532 398.218 32.776 395.992 32.776C393.556 32.776 391.624 33.574 390.196 35.17C388.768 36.724 388.054 38.971 388.054 41.911V61H381.376V16.27H388.054Z" fill="white"/>
+</svg>
diff --git a/apps/www/public/overwatch/apple-icon.png b/apps/www/public/overwatch/apple-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a501dc7d57d6e5a925cab728f31cf70bba33b272
GIT binary patch
literal 2903
zcmZvec{J4f8^^~Odzfr7_9b(LFp8^XOj*JegBhtwL$*oAQX>1zC}gRI(Ac7=Y04TJ
zV-3kN7%mklTTMfZ3ULYd+wc6&xxe!}_mA)Qd!Fy-dEU?SdCv1WpVtkv(+Np&m^cUo
zlC-z8b_Kq*zaCLx;C-}T7y$xF?6S8$hPf)RP|%Yq_lI24pk6=$`b9>q){OpdTKod&
zF%`27;b6IdIB<ZCc?&sM1!`Rop>@AfLu;J58&eQkUzs2`8u6yTg27JhPEA=hH*Y@e
zLfifM=guj(_OqHAlXlB}x2a&sX?6K-I{|PZmF8%34V6WCDyP9YJ=WtZTB{@+q~lOb
zTo2Oy15E4+RK6iYP)6qWWTNt`$8GOJ#*+s9YjikT=evl4z>=UY&Vh=;U3!PAfQ*xR
za$I#dITL2L^~q*lHDz**AfmlEH!l$kIV7@&)<FkDqA}tXAB#ccffqJhV+M$<mQB&O
z_zhKjIdtfR6m8{Lv8hSsg#+>$oRg~SA-dvFo@2T%?4*!rxSPm!{tZA!R-0z)CIEgv
zQu1eOtdS<La@^l!gb#S~VPR?4fNhA;UZNZIQN@iHI}K%ANhr9lg4JRLDghO_bPtCn
zp8>?{di!4-2VAW5+1nSfB-ERI<{}d1AhJ}s@n$7f0POi>VooZ@;Unab{3FExXF$Bj
zcgFTHP^Vj1YS@ob5SeeU8+<1fsOKMt`P$u+Y4!qO)hy-ovJjxKNtv3&yFfuE4KF-4
z+)1c4L(Rh}|2R;<?<2z(NaA-eBvh_kdj2b*fSd2sZBMxZ1-Kdqt33zggA)`z?Ex+O
z7tE*<@X!Gn9^t8%1`<$3VtmzyfQlYeQ^@OR5^57ojkA6LNOXw{&sYh77p-18#eHr5
z-|g<~JAy!HSte}X8N6rN_v)7Vr;cRla|$cT@k2Y4-juE6?bf(W-FwKm?=q1w+ugH(
z2PKTMclxo<GO9zT?d#WRtFd}w{w_($p8Gaw8|QKiPHW|x5i>=k)$HsPp*wFX@t;N>
zyVYF%Hq$a2JQz1OTvp@rN-AoFN8RN39C2O{n(I2kX^r2?1eE(;m*Z4p=^T7ZEH!=)
z#v;}(f<K{W9`fPNWNSi<IW%-yG<0L-f<@H#(kBC3UGH0VHrJLueQ1uUiQ9~5NZ5(L
zeI!=gM~$~M+1htQ7CtczBdyEriSveqZvTuj&wg<cFLC}Q_0#&dS&GmX!t&_O+jx!<
zl9#*RQ#`s>>9GIk>M^kALI29lt-qE}6d~haLGdZulPz&y7>_F31QfY-cm0bIJ`Rat
zv8(tI=`IyDH3gNSs&lm`cM-YdBnxA`QYDgP+AR~P5tsdWpfKxMz@S5S?}VDsrMC6O
zMU!ST>2OE?@H8P~@6>A+rVLZYfpOMiz+4=-Fy$R+51e%Oyw||3eHr!E?Uja(V9)%K
zQ4uin?wP5N(h^)Y;mHS|mKYgcce4<a=}OTPW|(?)oi+Pj^{)NN(q3|f^Os?50e?rs
z&@pK^nLbR=e@`t@6%8--7o4bulYk#-2PO#ZTAU$|Z$?m3T41`Kurp|9ZnzId=G&CP
zo(r()>~ag!*F)|;qW01@#o9H}Q#0pM-TiE{ZE@C`w(8<!wJMwPX@UJtpl^$lG}C}<
z*$rim4Lh>DOVL7OFk``~*XF<SNFY48g)%$=<z1mJG?V@|%9UEl-=F#>!#RSrQd2j}
z*#)L+A;M%nzQf@t$RFc_@jI9IM8|vD3Bp3>RArEqmOs8OP{P89-Y4pYVmeWuFM!%!
zj(|^@RuwxuFdPi}GMI{bL$_$NIT##wA#;3-ouzwH23zh@{oQIe?|UBhgJ5KD9hXfX
z1~pv@IJiV-)PznSryYs9G=i4p!P-Fo>8R1mO`38>61(Uq?#IHIw%a48y__vXB0jJw
zX3gnb(^XC2IIOXnqF49voR_hqTdo`J*CqI4O7vk(en3|^Xz-IqeGqN^Y>p9rzy7I;
zJAJuEeXJ{AAhRo90=l;zRB-4)cQ4O)8|Isb<VY%;UBv@~W~^!Lj-{FSBn3?{UHB6X
z+VtUWy-p9ehmKU-^WdKMjgiepyvW7zIs|dN)_8R6frg7<M)I?%Y2C(%#Z0(!Q8zG9
zP3{4hO|(2L`GQK3v^vrtW{rO(c^++?D1sS)%EO$U@+=ctrUVni&g1V3!ML+uW53PV
ztU>QWljqP}Izw>%ZMDy(6`sqfGVE;2A*e$dYm+!~)T?q<fN;cUwm;weg&O$Jiw1u6
zZde*JjwSe4H&t6|0kL`c-L_nc0-;ohZnD@GEuO~ceR}#CM8k(cZ7(nt^6cwWJjn5r
zQCg{I%s*5Rky3#g(1#fX{v(SL<R8UM21_4A?@g9c%>?FVg9V$?JcRQ+5LEWX5;yAa
z*VUu`5XN+T)Z4p&pZgH4!)czwFtZsf**14SZb1Y3;TdJIaGM6~Xg|#*ySfT-N^W>L
z7{a0yGv>KHPucRF5=|21{d!fuA`(TUSx=OnviAz@YKqbh-I->oqXq##cDXF-T)!eo
z%ri-c;|U3DE@xCAd|J{U1E&Dj+qt@9dv>~0DdWFMb9KWuuF*vgV0cw@Mq`62RtcY1
zg@}aeQ=W^4i^yVtO4gPpjW&NQUdEou#^;6K4w?$t%@Z>qydRv%Go6LoF|I{{8z^SE
za|Nh9^fCs&-g#m${rY7tn5sn#w1&NDYj?$(*AWUqGr2IvQ?{UK>Blxmbh;N~o*%#!
zn^JU<!DYY*Sb4TzS&}983Y^5uRf3a|tpe6k9>*W<-dsi;=OXKu2xNEc8ak__q-1JM
zLD1}HaorVg3cirOk?+qgJbX&QzyrF_@t9F_{$;Ay)-563AFFh-uy14JQjW!CE+p|x
z-Dz6b_vF2uVj45A{4CGveUrHMyC=tp`;%$AziS7Wpq8mee_dtv)LnezyS1^32>Ea%
zGFO>j^0lrw`aWXzk1RBt)a}!kV|eLPul(s}{uy45>fdG)DWCl&m|<4#<!3(KByjq_
z%N*n|=8HtCqgMkPqE{JHJ@%FOR)u>KMSbKf)V<5xh+@pBr!XY;dB|i=t`R=E$NTD4
zj|zM%AE~2x(_k^G^ebz3%x%WJS6h=pcK;fs<BF;=-ORE8xs1AQn^1Dop!%7M9R2~F
zO2lYjfxD40V8TBxR3pSP#+mt70&MZ&JWfo8fQt{fXZZid%z~^+t_E2RE`l$u0Fj;E
zAM3Jo5&$1{l4`N@1bB#*n4VAoU`l~XER_Y^zgI*KzYO_$6ino-6u9YfEE+EwoBxYZ
zFCIQnlsAxp%CEO<{U{b54;U%`V(dtV$6Fw@t;C@OD}S6_HVPLyhQ0|Izdfelx|gGH
z*6fZp*~~X0hGEeHBx42s4hIw8{#0>;|C`}SKq|Wd^zvw4Wp+OR5qo;uyD$LVJU;Y_
zDFJ-1*HoGO(;o*x&$klFk5M`R&Df=TDaHc~5g+brL<JZ^+l1o1?gB8x5VhI*KEM#2
zDWV;A2pw=?DREb{mXPR*b#K+tUmTKIZ^F9)M9S)Q{Lle%*pGJ=!vV;0E_Hkq(Xyu;
zXxW*IiXQTStNbX_xfV!9DEIcl0wGw;EOKZc04#M$WUNb@IR|@w3W;gU2Sdj5?=1W#
z42103Z!8=F^d`i$=7FNzx-<y1vvbH#^*MmY!oRp!5R?_z308Gh{DsXRdmAU~isN3C
FzX3_`Q6c~U

literal 0
HcmV?d00001

diff --git a/apps/www/public/overwatch/favicon.ico b/apps/www/public/overwatch/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a21b640c1e28999dbec19f88eeb554710199c97a
GIT binary patch
literal 15086
zcmeI2&r2*v5XXC6MM1??R78X<LNLcigdiRy-t@2VT^{5tcrX|D6uf!WKS0Pu!H7tB
z7ykwk6e3|kgm~}=q7p>y^rv5H-)uX*JMNCVGszb8_D)Y%)wil^YHE5$sf^014<D52
z^Xk`cmHI&`mCyfsoKxygGnO+w=YMKf>K8NNJ2S_ysE?*GULzsqXVX5L_Lph8K@DB#
zL^l}TN)v`*)3iq6t)>SoV2VPY%%p1anspv*m5B9f7PhE*!5BtK_PcAFyAH&bJ16PK
z!Rui&h4{e?k)M+8Yac$ar{S9Q;RieS3E%mok2m_h8n-{VPsc5@C9mbvRtzL02HM)%
z^u)x3o|~HsZ8I}7y1TpEyIzx%lc9XGv$MLVr^m||S6=Du?bTabTiQo=cXxVaWkq*%
zbcABLxw#2teR_J**bo;^pPc^we!aiHABsT+A0HpB4Vg@)3=hXIFE29fRnMCG^u{$F
z1wX*R$vUuJqB~9avElai*4mI({K0i-Z*SLW^FR0@xgN+%&5r-h&Q86)zOJ92pDh;f
zxa|w-@?Y{&p-`xZe|~=6t`Y0xHi^NwdRM+2gTY7Gi4E8iMy?;^7+>Ktd>0pfpB!?a
zkHA9=k(Y?6w-7m-+~?C9*LXGjtP|HVHegRwN)mqY6*iD#qfip@b8m~f4oSq%IuK9T
zQ0;nX6n<(jYOye)c9Yl%_SAaV;LA(MqGk-%B0>H*|5F2FLs)%H?d;P<UZVC6<714P
zo!Z^U-x_c2TeM=}KM@0I-h%^s+V^kMzJJa;fVAExzz(JP{So-n{{9Xdcqf^bI09=J
zrQuozV<k%RI{5tV+Qap*X<Aa^2`s_))h=G&G5JZ}QF5<qls)K*^!>~W$XAs5oBkW6
zZs_}zD$;i<bwHn0sz9Il+H=^VuO2AyH{hQGj*Z`n^u~|kSMjs>odC(3_M>TU{7!4y
zu&kT*hiP%e6|#_t>`KI(xODpDpd*ZaH-kQ&xW~~Iq(<27+8};lP26*hI+j>#ls;Dv
zK8Q2UUHR3Ho2k1Rw*T#U_O}KG2K3n2SgDPUj=p-Y%zoeC;9zME^WkG(yq;@{J-F@d
zZGC)vTxy4hhkAK=S?6-OlI-E(VZFDvSDM58-Q8V_p&tF{I669dwe@*@eQozQ1;hCG
zxIR5SEt>}h{7{d6-fx8IM^O;Nd+GPtFNR)SU0FY{kNO_=vv<3*vtwl=pLTY3rtk0X
z1%d{{#>R#|KR+*x@uyfU>Zz$Ijc=q44GrmRHXC_Om<x~a(<2kvK|(hez#;@junKN^
zY^nE~3}TAd3KFte1NPj57=m;7Pb^8y)*6>S{rCpiU?4Wb2>tcGv#X>Zn<`<5!+!D_
zxh0sB$UWpB@hKR{QRJ%NJaQR1P3G0olT+QCOzw5RuOZIJ)%Z&qe64pDO{?*$t$Q<T
zAbBpShVi}5Q-3zQ{x%Tov)Oyu=#wkYALxgg`TX?-L1X;j+AX@JmuI3luM3HDWS5cI
zKj<r(orD9kt5C2z4P~ceKS0NU(N#1$(ak<Z&a}K~5%wv*H`9JIjcpEJT*)|dm<ta?
zAB9i&rH2PzWXafDdw6TnEqdzV6&beYKD@ZNXuqFYSXi*nDqUS&dTD9Nj!jQbm(6!=
z9vK<Y7Z(?{%#rWmr~xi7FYOrLWw|`TWA51}Cnt9P!^4C9-eYZTtyDX$uCCfzsjsgu
z^q$RqoO9Gu%!R1CkO3ZKf(0Gu3hH+MgB4;vHc-RK_b1qhtu9aS7+)a+-{C`Q6nx4U
qKCZXs3F<Qc>xlt)>y2Nofm$%Y1204mjwo^jv*j(AJ<wVS-hTkn<~aWV

literal 0
HcmV?d00001

diff --git a/apps/www/public/studio/apple-icon.png b/apps/www/public/studio/apple-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a501dc7d57d6e5a925cab728f31cf70bba33b272
GIT binary patch
literal 2903
zcmZvec{J4f8^^~Odzfr7_9b(LFp8^XOj*JegBhtwL$*oAQX>1zC}gRI(Ac7=Y04TJ
zV-3kN7%mklTTMfZ3ULYd+wc6&xxe!}_mA)Qd!Fy-dEU?SdCv1WpVtkv(+Np&m^cUo
zlC-z8b_Kq*zaCLx;C-}T7y$xF?6S8$hPf)RP|%Yq_lI24pk6=$`b9>q){OpdTKod&
zF%`27;b6IdIB<ZCc?&sM1!`Rop>@AfLu;J58&eQkUzs2`8u6yTg27JhPEA=hH*Y@e
zLfifM=guj(_OqHAlXlB}x2a&sX?6K-I{|PZmF8%34V6WCDyP9YJ=WtZTB{@+q~lOb
zTo2Oy15E4+RK6iYP)6qWWTNt`$8GOJ#*+s9YjikT=evl4z>=UY&Vh=;U3!PAfQ*xR
za$I#dITL2L^~q*lHDz**AfmlEH!l$kIV7@&)<FkDqA}tXAB#ccffqJhV+M$<mQB&O
z_zhKjIdtfR6m8{Lv8hSsg#+>$oRg~SA-dvFo@2T%?4*!rxSPm!{tZA!R-0z)CIEgv
zQu1eOtdS<La@^l!gb#S~VPR?4fNhA;UZNZIQN@iHI}K%ANhr9lg4JRLDghO_bPtCn
zp8>?{di!4-2VAW5+1nSfB-ERI<{}d1AhJ}s@n$7f0POi>VooZ@;Unab{3FExXF$Bj
zcgFTHP^Vj1YS@ob5SeeU8+<1fsOKMt`P$u+Y4!qO)hy-ovJjxKNtv3&yFfuE4KF-4
z+)1c4L(Rh}|2R;<?<2z(NaA-eBvh_kdj2b*fSd2sZBMxZ1-Kdqt33zggA)`z?Ex+O
z7tE*<@X!Gn9^t8%1`<$3VtmzyfQlYeQ^@OR5^57ojkA6LNOXw{&sYh77p-18#eHr5
z-|g<~JAy!HSte}X8N6rN_v)7Vr;cRla|$cT@k2Y4-juE6?bf(W-FwKm?=q1w+ugH(
z2PKTMclxo<GO9zT?d#WRtFd}w{w_($p8Gaw8|QKiPHW|x5i>=k)$HsPp*wFX@t;N>
zyVYF%Hq$a2JQz1OTvp@rN-AoFN8RN39C2O{n(I2kX^r2?1eE(;m*Z4p=^T7ZEH!=)
z#v;}(f<K{W9`fPNWNSi<IW%-yG<0L-f<@H#(kBC3UGH0VHrJLueQ1uUiQ9~5NZ5(L
zeI!=gM~$~M+1htQ7CtczBdyEriSveqZvTuj&wg<cFLC}Q_0#&dS&GmX!t&_O+jx!<
zl9#*RQ#`s>>9GIk>M^kALI29lt-qE}6d~haLGdZulPz&y7>_F31QfY-cm0bIJ`Rat
zv8(tI=`IyDH3gNSs&lm`cM-YdBnxA`QYDgP+AR~P5tsdWpfKxMz@S5S?}VDsrMC6O
zMU!ST>2OE?@H8P~@6>A+rVLZYfpOMiz+4=-Fy$R+51e%Oyw||3eHr!E?Uja(V9)%K
zQ4uin?wP5N(h^)Y;mHS|mKYgcce4<a=}OTPW|(?)oi+Pj^{)NN(q3|f^Os?50e?rs
z&@pK^nLbR=e@`t@6%8--7o4bulYk#-2PO#ZTAU$|Z$?m3T41`Kurp|9ZnzId=G&CP
zo(r()>~ag!*F)|;qW01@#o9H}Q#0pM-TiE{ZE@C`w(8<!wJMwPX@UJtpl^$lG}C}<
z*$rim4Lh>DOVL7OFk``~*XF<SNFY48g)%$=<z1mJG?V@|%9UEl-=F#>!#RSrQd2j}
z*#)L+A;M%nzQf@t$RFc_@jI9IM8|vD3Bp3>RArEqmOs8OP{P89-Y4pYVmeWuFM!%!
zj(|^@RuwxuFdPi}GMI{bL$_$NIT##wA#;3-ouzwH23zh@{oQIe?|UBhgJ5KD9hXfX
z1~pv@IJiV-)PznSryYs9G=i4p!P-Fo>8R1mO`38>61(Uq?#IHIw%a48y__vXB0jJw
zX3gnb(^XC2IIOXnqF49voR_hqTdo`J*CqI4O7vk(en3|^Xz-IqeGqN^Y>p9rzy7I;
zJAJuEeXJ{AAhRo90=l;zRB-4)cQ4O)8|Isb<VY%;UBv@~W~^!Lj-{FSBn3?{UHB6X
z+VtUWy-p9ehmKU-^WdKMjgiepyvW7zIs|dN)_8R6frg7<M)I?%Y2C(%#Z0(!Q8zG9
zP3{4hO|(2L`GQK3v^vrtW{rO(c^++?D1sS)%EO$U@+=ctrUVni&g1V3!ML+uW53PV
ztU>QWljqP}Izw>%ZMDy(6`sqfGVE;2A*e$dYm+!~)T?q<fN;cUwm;weg&O$Jiw1u6
zZde*JjwSe4H&t6|0kL`c-L_nc0-;ohZnD@GEuO~ceR}#CM8k(cZ7(nt^6cwWJjn5r
zQCg{I%s*5Rky3#g(1#fX{v(SL<R8UM21_4A?@g9c%>?FVg9V$?JcRQ+5LEWX5;yAa
z*VUu`5XN+T)Z4p&pZgH4!)czwFtZsf**14SZb1Y3;TdJIaGM6~Xg|#*ySfT-N^W>L
z7{a0yGv>KHPucRF5=|21{d!fuA`(TUSx=OnviAz@YKqbh-I->oqXq##cDXF-T)!eo
z%ri-c;|U3DE@xCAd|J{U1E&Dj+qt@9dv>~0DdWFMb9KWuuF*vgV0cw@Mq`62RtcY1
zg@}aeQ=W^4i^yVtO4gPpjW&NQUdEou#^;6K4w?$t%@Z>qydRv%Go6LoF|I{{8z^SE
za|Nh9^fCs&-g#m${rY7tn5sn#w1&NDYj?$(*AWUqGr2IvQ?{UK>Blxmbh;N~o*%#!
zn^JU<!DYY*Sb4TzS&}983Y^5uRf3a|tpe6k9>*W<-dsi;=OXKu2xNEc8ak__q-1JM
zLD1}HaorVg3cirOk?+qgJbX&QzyrF_@t9F_{$;Ay)-563AFFh-uy14JQjW!CE+p|x
z-Dz6b_vF2uVj45A{4CGveUrHMyC=tp`;%$AziS7Wpq8mee_dtv)LnezyS1^32>Ea%
zGFO>j^0lrw`aWXzk1RBt)a}!kV|eLPul(s}{uy45>fdG)DWCl&m|<4#<!3(KByjq_
z%N*n|=8HtCqgMkPqE{JHJ@%FOR)u>KMSbKf)V<5xh+@pBr!XY;dB|i=t`R=E$NTD4
zj|zM%AE~2x(_k^G^ebz3%x%WJS6h=pcK;fs<BF;=-ORE8xs1AQn^1Dop!%7M9R2~F
zO2lYjfxD40V8TBxR3pSP#+mt70&MZ&JWfo8fQt{fXZZid%z~^+t_E2RE`l$u0Fj;E
zAM3Jo5&$1{l4`N@1bB#*n4VAoU`l~XER_Y^zgI*KzYO_$6ino-6u9YfEE+EwoBxYZ
zFCIQnlsAxp%CEO<{U{b54;U%`V(dtV$6Fw@t;C@OD}S6_HVPLyhQ0|Izdfelx|gGH
z*6fZp*~~X0hGEeHBx42s4hIw8{#0>;|C`}SKq|Wd^zvw4Wp+OR5qo;uyD$LVJU;Y_
zDFJ-1*HoGO(;o*x&$klFk5M`R&Df=TDaHc~5g+brL<JZ^+l1o1?gB8x5VhI*KEM#2
zDWV;A2pw=?DREb{mXPR*b#K+tUmTKIZ^F9)M9S)Q{Lle%*pGJ=!vV;0E_Hkq(Xyu;
zXxW*IiXQTStNbX_xfV!9DEIcl0wGw;EOKZc04#M$WUNb@IR|@w3W;gU2Sdj5?=1W#
z42103Z!8=F^d`i$=7FNzx-<y1vvbH#^*MmY!oRp!5R?_z308Gh{DsXRdmAU~isN3C
FzX3_`Q6c~U

literal 0
HcmV?d00001

diff --git a/apps/www/public/studio/favicon.ico b/apps/www/public/studio/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a21b640c1e28999dbec19f88eeb554710199c97a
GIT binary patch
literal 15086
zcmeI2&r2*v5XXC6MM1??R78X<LNLcigdiRy-t@2VT^{5tcrX|D6uf!WKS0Pu!H7tB
z7ykwk6e3|kgm~}=q7p>y^rv5H-)uX*JMNCVGszb8_D)Y%)wil^YHE5$sf^014<D52
z^Xk`cmHI&`mCyfsoKxygGnO+w=YMKf>K8NNJ2S_ysE?*GULzsqXVX5L_Lph8K@DB#
zL^l}TN)v`*)3iq6t)>SoV2VPY%%p1anspv*m5B9f7PhE*!5BtK_PcAFyAH&bJ16PK
z!Rui&h4{e?k)M+8Yac$ar{S9Q;RieS3E%mok2m_h8n-{VPsc5@C9mbvRtzL02HM)%
z^u)x3o|~HsZ8I}7y1TpEyIzx%lc9XGv$MLVr^m||S6=Du?bTabTiQo=cXxVaWkq*%
zbcABLxw#2teR_J**bo;^pPc^we!aiHABsT+A0HpB4Vg@)3=hXIFE29fRnMCG^u{$F
z1wX*R$vUuJqB~9avElai*4mI({K0i-Z*SLW^FR0@xgN+%&5r-h&Q86)zOJ92pDh;f
zxa|w-@?Y{&p-`xZe|~=6t`Y0xHi^NwdRM+2gTY7Gi4E8iMy?;^7+>Ktd>0pfpB!?a
zkHA9=k(Y?6w-7m-+~?C9*LXGjtP|HVHegRwN)mqY6*iD#qfip@b8m~f4oSq%IuK9T
zQ0;nX6n<(jYOye)c9Yl%_SAaV;LA(MqGk-%B0>H*|5F2FLs)%H?d;P<UZVC6<714P
zo!Z^U-x_c2TeM=}KM@0I-h%^s+V^kMzJJa;fVAExzz(JP{So-n{{9Xdcqf^bI09=J
zrQuozV<k%RI{5tV+Qap*X<Aa^2`s_))h=G&G5JZ}QF5<qls)K*^!>~W$XAs5oBkW6
zZs_}zD$;i<bwHn0sz9Il+H=^VuO2AyH{hQGj*Z`n^u~|kSMjs>odC(3_M>TU{7!4y
zu&kT*hiP%e6|#_t>`KI(xODpDpd*ZaH-kQ&xW~~Iq(<27+8};lP26*hI+j>#ls;Dv
zK8Q2UUHR3Ho2k1Rw*T#U_O}KG2K3n2SgDPUj=p-Y%zoeC;9zME^WkG(yq;@{J-F@d
zZGC)vTxy4hhkAK=S?6-OlI-E(VZFDvSDM58-Q8V_p&tF{I669dwe@*@eQozQ1;hCG
zxIR5SEt>}h{7{d6-fx8IM^O;Nd+GPtFNR)SU0FY{kNO_=vv<3*vtwl=pLTY3rtk0X
z1%d{{#>R#|KR+*x@uyfU>Zz$Ijc=q44GrmRHXC_Om<x~a(<2kvK|(hez#;@junKN^
zY^nE~3}TAd3KFte1NPj57=m;7Pb^8y)*6>S{rCpiU?4Wb2>tcGv#X>Zn<`<5!+!D_
zxh0sB$UWpB@hKR{QRJ%NJaQR1P3G0olT+QCOzw5RuOZIJ)%Z&qe64pDO{?*$t$Q<T
zAbBpShVi}5Q-3zQ{x%Tov)Oyu=#wkYALxgg`TX?-L1X;j+AX@JmuI3luM3HDWS5cI
zKj<r(orD9kt5C2z4P~ceKS0NU(N#1$(ak<Z&a}K~5%wv*H`9JIjcpEJT*)|dm<ta?
zAB9i&rH2PzWXafDdw6TnEqdzV6&beYKD@ZNXuqFYSXi*nDqUS&dTD9Nj!jQbm(6!=
z9vK<Y7Z(?{%#rWmr~xi7FYOrLWw|`TWA51}Cnt9P!^4C9-eYZTtyDX$uCCfzsjsgu
z^q$RqoO9Gu%!R1CkO3ZKf(0Gu3hH+MgB4;vHc-RK_b1qhtu9aS7+)a+-{C`Q6nx4U
qKCZXs3F<Qc>xlt)>y2Nofm$%Y1204mjwo^jv*j(AJ<wVS-hTkn<~aWV

literal 0
HcmV?d00001

diff --git a/apps/www/public/studio/file.svg b/apps/www/public/studio/file.svg
new file mode 100644
index 000000000..004145cdd
--- /dev/null
+++ b/apps/www/public/studio/file.svg
@@ -0,0 +1 @@
+<svg fill="none" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M14.5 13.5V5.41a1 1 0 0 0-.3-.7L9.8.29A1 1 0 0 0 9.08 0H1.5v13.5A2.5 2.5 0 0 0 4 16h8a2.5 2.5 0 0 0 2.5-2.5m-1.5 0v-7H8v-5H3v12a1 1 0 0 0 1 1h8a1 1 0 0 0 1-1M9.5 5V2.12L12.38 5zM5.13 5h-.62v1.25h2.12V5zm-.62 3h7.12v1.25H4.5zm.62 3h-.62v1.25h7.12V11z" clip-rule="evenodd" fill="#666" fill-rule="evenodd"/></svg>
\ No newline at end of file
diff --git a/apps/www/public/studio/globe.svg b/apps/www/public/studio/globe.svg
new file mode 100644
index 000000000..567f17b0d
--- /dev/null
+++ b/apps/www/public/studio/globe.svg
@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><g clip-path="url(#a)"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.27 14.1a6.5 6.5 0 0 0 3.67-3.45q-1.24.21-2.7.34-.31 1.83-.97 3.1M8 16A8 8 0 1 0 8 0a8 8 0 0 0 0 16m.48-1.52a7 7 0 0 1-.96 0H7.5a4 4 0 0 1-.84-1.32q-.38-.89-.63-2.08a40 40 0 0 0 3.92 0q-.25 1.2-.63 2.08a4 4 0 0 1-.84 1.31zm2.94-4.76q1.66-.15 2.95-.43a7 7 0 0 0 0-2.58q-1.3-.27-2.95-.43a18 18 0 0 1 0 3.44m-1.27-3.54a17 17 0 0 1 0 3.64 39 39 0 0 1-4.3 0 17 17 0 0 1 0-3.64 39 39 0 0 1 4.3 0m1.1-1.17q1.45.13 2.69.34a6.5 6.5 0 0 0-3.67-3.44q.65 1.26.98 3.1M8.48 1.5l.01.02q.41.37.84 1.31.38.89.63 2.08a40 40 0 0 0-3.92 0q.25-1.2.63-2.08a4 4 0 0 1 .85-1.32 7 7 0 0 1 .96 0m-2.75.4a6.5 6.5 0 0 0-3.67 3.44 29 29 0 0 1 2.7-.34q.31-1.83.97-3.1M4.58 6.28q-1.66.16-2.95.43a7 7 0 0 0 0 2.58q1.3.27 2.95.43a18 18 0 0 1 0-3.44m.17 4.71q-1.45-.12-2.69-.34a6.5 6.5 0 0 0 3.67 3.44q-.65-1.27-.98-3.1" fill="#666"/></g><defs><clipPath id="a"><path fill="#fff" d="M0 0h16v16H0z"/></clipPath></defs></svg>
\ No newline at end of file
diff --git a/apps/www/public/studio/icon0.svg b/apps/www/public/studio/icon0.svg
new file mode 100644
index 000000000..250b124b0
--- /dev/null
+++ b/apps/www/public/studio/icon0.svg
@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.dev/svgjs" width="1052" height="1052" viewBox="0 0 1052 1052"><image width="1052" height="1052" xlink:href="data:image/png;base64,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"></image><style>@media (prefers-color-scheme: light) { :root { filter: none; } }
+@media (prefers-color-scheme: dark) { :root { filter: none; } }
+</style></svg>
\ No newline at end of file
diff --git a/apps/www/public/studio/icon1.png b/apps/www/public/studio/icon1.png
new file mode 100644
index 0000000000000000000000000000000000000000..3e78cc6b39fc62a0230b953e35fcf339d34400bf
GIT binary patch
literal 1804
zcmV+n2lM!eP)<h;3K|Lk000e1NJLTq003YB003YJ1^@s6;+S_h00001b5ch_0Itp)
z=>Px*#z{m$RCr$Poo$F!MHt6_bIx5|Ur<nCLBT#0QDD%^7cpHo1Pu&H%i3O)EG$<H
zQdbQt+pHvY)gW;#QA4e^EDcFWLD0>_FTFs567?ZLK~TZPm({)JOwQdsdfmNu&pCI`
zz2oja^J%$fW}b8ZznSMeXLjy9ikL;u#N{F*Xk{eI8H=yRq4XGFG%ysD8?(zER$Y6*
zCEzq#oxst@(Ef4CILk23tKFFEk&B946VT&%3@7z0=t{tdJ|s^2UR<{s_zTog{Pb>h
zl;5I$*GK?#6(dNyt8u6X$^j>;fj(Bx2U_rHB;_qrhdCei{ksI9t0>2Jr-7~m^<Y?M
zay?rCeG1h3INm;Wn3jCn<OQH7F`QO+CGfJinu3Q`Gn%jH=e?&6aUoYPIRWU&4C0#8
zfKo>MNN%d&TkQP}HCpdtfM25ya;4+f?Idny<lk^Mi1>+)j5Y}U{DmE7!W{rIKHqcK
zqnIZnKT!atGYvH0c#E^233mdhbe{vZh|f=4{GdY<uFh3W-gm(Vw*X{9P2c$i)B{B`
zFCCkSa1zI_3_{e~0LHspad=fUDuDt%+tg9-HDf6QpzRIUZ2|_Cz`U4%tN31}d1F?Y
zwViXRk3lbyH{6nq4Ik7RD$?&NJ&6ih-5-F*OJ-gS83m3}=FL#Ll1IQjERj#iM@2K*
zdqU}nP7PXZD!F+vcyp;p&sTbayAzdJ?~zh!1vI;qu5|tY^>C?ei@i+z`KQvAu34oU
zCW2T|;GzML2739w5v_<D#i(Zhm_;HfmJ|>GmV^(?3IG9MSpm!DWd;ZU%L-UFFEc;@
zSXRKYd6@wMz_J3C&C3iB0G1W7Z2s<<0d5N17;A#Q59!vz<#Sv}rQ)?Wt7cv+7~2Vz
zy8}SQJy5*}2F3WfLF;w+x*pE_6JH7g`{^3E|Iv6mU$ura|H7_Mz>oDijJ)?~AAk{K
z!8({RKmKmWOBY~TMSK9Stbp0e!Pt&ljPP~UaAa@XmO1O&2hguS)NY0;vkLn{6Jv-t
zU@$zt2<EIP%vR9qr>(H|jqdf)-nwrAFeBdp7&y3l;_crKYvy*Zk3I#!xSCnZyFc;+
z$pt{x;0tp><pZI*ws4=HYn%&!7yyjhd7%~zh@^@DhyWlM`Q3fs$_xk@wz*tT;PaCn
z`SJ|N0V5ZH?!@^~+?2SWJT54yI6n-60LTL%sW@K%gelMgK+<u3nECzNV9o1cwIW^b
z`ESBgh9n>7he`M8o3OVbtX8D!Js-gKmC48XT}k)z4%n~&TCPSCIIL1~08HGya3ef9
zJIrP>*Np(*)EB<Ia9}6Y&x0G+lewP)dr1z!^cr~UvjT4;W-~7hJ61tsJsdE<eJ-H%
zIsi+*fT<<=nXz#@J6C}Lam4JdFQD{309#<{oC1`H(d6o7_;x*fX-?5;F9M)lh@~X}
zU`D<HaP6`H=rnGN2_W$K*&|<OKnDcH0uV$yfzR(qUR+R-U664*CfdmtcME_b0SHEZ
zF1M3C3j{zB0A$DcVQ-uQpa=l6<NUBFRRAOiAXl6(0Kyb#zrN&icq(%URN*C8oFCSk
z%z$=<CQgUCMlhRR<Cd=C{II_Eor9sn!)kT7u3^t6*tocDIm2Q}ZZXaX|MJ@~>RwPW
z&U!UFj{p80erzaAj8XT&i?vYJKe~)pnxSz$ock|&n<CXr4uH8q#{su2-i~9_E}ib)
zZsSy0o9(E@^9q9<wf`9Pk_8aMuvBeRKmb@C2?9U>SXRKYd6@wMz_J3C&C3iB0G1W7
zY+h!70I;lpW%Duv1b}4)ESr~uTkQhK9Na2L7u$nijxLtNyY1<34)2!Z>n-YUj<1&l
z4)y?K5;#Z-6I%e9!K(_A`0N43*}9WHYWG*lyk~+mRv&?0Dru}rHWW-6tF=_5-;qRa
zCDZ&4L$?#T1s`ikWmq~C9a9+^%k9ZLn<RC4u{r2dIR1oA$viU<B%N)s)z6>KwtW_q
z<GbsCn)pW;7W>|NeE%BFW?XMk-h|E>2$Isg7^I`6G{5ygp3ESwISrCmJ`ome;t%j^
z)IqLv>@n{y+P0bCeu&~FN%UDT2;=j2QRb~shcK(ool2M6m~|EAnJ^9X2a@VME(Cq@
z<}T$r9B*H?&yPF<vMXjn)U>-Ahiaf)-k9^kFsFLA;L}LTTNZ?xU7?Gykv~X%o|>8Y
z3my{JbW2*}YEFP^!cTv1Qk6%YFR=h*q9l_7{URf1WhBZOi?7C^^cY|?sG)rzFQo_i
u5^x%=PT=TcX#Y56oMjm2)ox-PtNuTkwcLk8(`x1b0000<MNUMnLSTaR^GWFd

literal 0
HcmV?d00001

diff --git a/apps/www/public/studio/manifest.json b/apps/www/public/studio/manifest.json
new file mode 100644
index 000000000..b79da156c
--- /dev/null
+++ b/apps/www/public/studio/manifest.json
@@ -0,0 +1,21 @@
+{
+  "name": "Voidhash",
+  "short_name": "Voidhash",
+  "icons": [
+    {
+      "src": "/web-app-manifest-192x192.png",
+      "sizes": "192x192",
+      "type": "image/png",
+      "purpose": "maskable"
+    },
+    {
+      "src": "/web-app-manifest-512x512.png",
+      "sizes": "512x512",
+      "type": "image/png",
+      "purpose": "maskable"
+    }
+  ],
+  "theme_color": "#ffffff",
+  "background_color": "#ff3e03",
+  "display": "standalone"
+}
diff --git a/apps/www/public/studio/next.svg b/apps/www/public/studio/next.svg
new file mode 100644
index 000000000..5174b28c5
--- /dev/null
+++ b/apps/www/public/studio/next.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 394 80"><path fill="#000" d="M262 0h68.5v12.7h-27.2v66.6h-13.6V12.7H262V0ZM149 0v12.7H94v20.4h44.3v12.6H94v21h55v12.6H80.5V0h68.7zm34.3 0h-17.8l63.8 79.4h17.9l-32-39.7 32-39.6h-17.9l-23 28.6-23-28.6zm18.3 56.7-9-11-27.1 33.7h17.8l18.3-22.7z"/><path fill="#000" d="M81 79.3 17 0H0v79.3h13.6V17l50.2 62.3H81Zm252.6-.4c-1 0-1.8-.4-2.5-1s-1.1-1.6-1.1-2.6.3-1.8 1-2.5 1.6-1 2.6-1 1.8.3 2.5 1a3.4 3.4 0 0 1 .6 4.3 3.7 3.7 0 0 1-3 1.8zm23.2-33.5h6v23.3c0 2.1-.4 4-1.3 5.5a9.1 9.1 0 0 1-3.8 3.5c-1.6.8-3.5 1.3-5.7 1.3-2 0-3.7-.4-5.3-1s-2.8-1.8-3.7-3.2c-.9-1.3-1.4-3-1.4-5h6c.1.8.3 1.6.7 2.2s1 1.2 1.6 1.5c.7.4 1.5.5 2.4.5 1 0 1.8-.2 2.4-.6a4 4 0 0 0 1.6-1.8c.3-.8.5-1.8.5-3V45.5zm30.9 9.1a4.4 4.4 0 0 0-2-3.3 7.5 7.5 0 0 0-4.3-1.1c-1.3 0-2.4.2-3.3.5-.9.4-1.6 1-2 1.6a3.5 3.5 0 0 0-.3 4c.3.5.7.9 1.3 1.2l1.8 1 2 .5 3.2.8c1.3.3 2.5.7 3.7 1.2a13 13 0 0 1 3.2 1.8 8.1 8.1 0 0 1 3 6.5c0 2-.5 3.7-1.5 5.1a10 10 0 0 1-4.4 3.5c-1.8.8-4.1 1.2-6.8 1.2-2.6 0-4.9-.4-6.8-1.2-2-.8-3.4-2-4.5-3.5a10 10 0 0 1-1.7-5.6h6a5 5 0 0 0 3.5 4.6c1 .4 2.2.6 3.4.6 1.3 0 2.5-.2 3.5-.6 1-.4 1.8-1 2.4-1.7a4 4 0 0 0 .8-2.4c0-.9-.2-1.6-.7-2.2a11 11 0 0 0-2.1-1.4l-3.2-1-3.8-1c-2.8-.7-5-1.7-6.6-3.2a7.2 7.2 0 0 1-2.4-5.7 8 8 0 0 1 1.7-5 10 10 0 0 1 4.3-3.5c2-.8 4-1.2 6.4-1.2 2.3 0 4.4.4 6.2 1.2 1.8.8 3.2 2 4.3 3.4 1 1.4 1.5 3 1.5 5h-5.8z"/></svg>
\ No newline at end of file
diff --git a/apps/www/public/studio/web-app-manifest-192x192.png b/apps/www/public/studio/web-app-manifest-192x192.png
new file mode 100644
index 0000000000000000000000000000000000000000..9a57c60857235b2d85c676119381e1d490a6751d
GIT binary patch
literal 2644
zcmZuzc_5T)7k}q9G?v^MO}1N>A?uWhXt531iAh<@QX+eckbTB=8N=16L{yd}8EeRw
zFiL~EDm#&z$WmxT7>1eq_`ZL?KW5JRyyraU{LcQSlI$&aipYvU5VX_U%FGea*6klk
z2>d&K3f=)hBEr^YCa13>=I>im4F`6&>nq79CZS=9a*|zI`P08ukfsW5!bMa~%wcgg
z+Ook1TG5eUv$LsciJF3#*MI4|9Jq(xjl^JHVrJMuFWjSg*#nH0w&!cSulFjWod*nO
zHtplW8EHc+{2$_c6K`)A<vl)qYU8~)JdT&ng<$E%E$j{G$c|(cLN%29L!ZUQ5TO_a
z*K}(Lk^V8V>>njEv`Va&z6C^U*{7Q=A;dgII?$wsi$u2?i8xy*lOc=wW4i2JM2M^A
zDw7H1YUcWz9Dv+IZ(k(L(8ZCRaItbUz$hETzOaE1<q}_(N#HtZp=8(z0Lnt;r{D;5
zDEYf4>pjrtmw3LxNLYbv#I<qK0rYOcaD@YmD)`XiIA90lRZ2@DmDU9SN1&(r91^@q
zI&f-|0yI+mhY2tONifZR@{<Uo#)*f5XDO{EvglS7(_l7mceb$^+mH&u!)DY44*=Pt
zA$vj(c$|l-X%2$-iWbbZoIHzzQ3@EV<N)Baf9<6U_o)zUg}ixg1V9^^|J_X$M}{OQ
zV!C2)x>Nwzhvz%w02H|wHYaKU{a89&V+p`^R66zr189005y6z!XGd}5kkpz47bKeK
zvQV580wn+c`IrRJC9W{X6bLGIC#8Zkyq*_z+YM}rP*m)I`wD(uon>eQl7zZ8NDynu
zfneA441pL0G88?F)5QZwk`E_a<xl`pqt(tdV2Cw)gaA|8rpb`FEqyW%NaTjfzmdNK
z!5qDp#<L0c4=_)~y9hCzeR!6hX<KVp?uDp~5$BF3w<{TRzN=hspsu2_*uIs>^}efz
ze<<&F=o+61?6RC{c*9iE3XxJT@R=zM3GdRu&MB@pFUi(x%ts%Gyq4FSo#nIn77uQv
zIV8!ewW}|knmXzez=`AD9XycbrLu-EFpmhU`0R4q=j-84+krCDGXAXTa__3=n=Pxq
zI6+a?`tC2|)wRxD)aZ0ua*rs7`Sx;e(XB%ZoLkPe%bcw9(~{(idEef$-H3{eVF&C=
z!xG84@k=4i%eq8J^fPYQ#nF1TM|Dh4cEL0%B<#MfbXA4^S<|3e-^pjl_k)O;PD4?D
zN`(XwVwi1k<~8}(MkiN{%HEO$;Z8`GOP>?iB;`HUWIES`gVH*7EF@IlD}dXQugN3^
zYa^>uN&2H(Nf#Rze&W0Br+4d^L%YAIihFR6CQMv?E0zMiz5HH=Wq7Z0^MT;i_V1y=
zZF7~S6p@W5fz7V*sj(<q4`tZuMBV&#Uf>`3obHZ4KOq{>XQ$fYi#dHEH!dRLUf)3z
zA=}ac!**3B(=pC-?9c`^0~(o|ytZ@(wcsm{_d%k|6@z+z?t1X;S<0=1ouwgqy2|8`
zx8Fm(5^mj`*_0WfLE6N3gkt%yjqhwXg|@{>@l@#i+CQpI4zYZhhZiZsAN6wf!ql-t
zp)uNPI}jIynl4{YxEs>A6eH<+L@Xr)6rCPMgE_|TzT48f>2xjL4@`rng&qdg{G^@_
z8-}8Ixg>!Z&_2sYvWEZm3djkKF%Z2?b<=KtEV5c@a9fcqy|DQA!xF7$tWLE!NiF|Q
zsi{IS#B2W)uQL-alF^dX%#$Pd*ePR^<1Jdh`Su8oGlRAsQn%{KeA9zAdF<sa(W?CA
z7)iC={JnzFEo5Vcbo}92W__%EOZ}9Q!c&M>IKjSU?AXbFeB{xBy5MGZQ=MT6IX);%
z*x0`2L1s!_Da^_9H&i#a`EgipO;3O$W$LxERrc$KlTU!Au0T`yD<gVJJr!PzTQtP2
zhDF_&=8iK?4-Z@|*QQWmPHoPn`9F-Y(pRB3V<fv_hP6Tw6g#E0E_zO#C$B-j6mwvx
zx0WpF8UkYkt2>Grf3laWT+DfvxVqLNkUZaGSN?j%k@EZiyR){>QTjh0B<F9(XjVxQ
z457}^o&2YB3754lVJ*DuAOzl`VYOAOE_^%w-IjP90!eStH2ShtJVRq05A!|<df)K-
zw`U!-#El-AgX(}SK4U3M8<jKhe}g9GhOU2Q+8<wcV@kSeg6WZKe?pb{C*9A?LfsTX
z>=CbJ_7cWcFE7bwO#SG2l%PPKdTl&Z*e5kwN2|92#@V^@VV+OgwtHgx9Q;|=c;>%g
zgN<R!Bt<gx>=NtOy#%h(QQRIdVwwAR+N0N|*6;+r)vB1S0v&p#ef2!=#o#y1cf9mS
zV6rQym``Up#2Scp=_fYlf&n$y@WzD)9GIJ1^9u?CP4#j=*DSAOyT#;$&9G$o{T3XR
zN1!&iyn8P3LjhWGp?9x*%Tb&($F|PlvX+bc7K7e7TrU}w`v3<;8hveV2;V%Tzj3lV
zc8PhK;5kde2rlMQ$F!<^_vJ62fqs)b@aqIC#x*0AXold3OeH8!Af{%rEwdWUId(sR
zS<q!&p_MBU=FgA+_^5KRB4Z_aV$+3Jwr3Z}KFM9*2$L~H`@Azc?M|fBVjs4x3g2H;
z`rNsL$1K`l3t#Pz&Td~d{?D4j{;hVu{e)dq4QOUMa+dS1JM@$FhWzs_d)6Wta#xlI
z)`iVi7`<WrQBT`joOrZ7Tp>y)%(2KVU$rTS@IVzr?4WvOL2xN8f4m+H?2)|+@nA6)
zXv8NDfoUBWN#-~SpT-gg8imCv9$=|R2^d@K1B-XTAe;^6*9&RRK@E_Tz?mm8*<iV`
zNSqyCUV(}`=Wc@21)D&&KUF3ff>C`U5>HGZM1O&O7Xg$=j&pjZRh<TgSeHR}I0+1@
zg(jMV7B31<ilqU)=2v#%Wf4eph0@nkw}~bQY(<(kI>#KO_SI|qW+2cUai`G_^nWd(
z=2R6>SattVr5ngA-Y(@+YFitSICtjw`F#L^#O+iJSU9LrSqV*m;C6vsdNsH(Joqcq
z^_K>k_)9#~%NZ27rl-&idkA61Mz8w<51&r>F3tkE|FLBR>AIJMQiu{jP}o8!0EEoH
zKJ4rLB(R_pGfmvV1^0zLQL3O=Z+f4VNxJb4#Nb^W%`6Piqovw@IzW|91+HfgpyFle
zAH@*JZac<^Rb4$ELk!xh^tl)?9Pfz@0<XK>J30?<HyKv-k9rFTQ8##S>4c3!A#`(^
z<&9PY1&)1bM=u2z`rp%CFd%v;zeF<tp(rA`i3SX+6Lc(U0lT(B=_eLY5n6f=9_S68
zvoa6_dJ}OzhioClq0vU^)P@JFZ173Q=PO>%+yW0m+aHAj5W|K<|Gh>h7`%b3&F#%9
IO}!KU1@1V1tpET3

literal 0
HcmV?d00001

diff --git a/apps/www/public/studio/web-app-manifest-512x512.png b/apps/www/public/studio/web-app-manifest-512x512.png
new file mode 100644
index 0000000000000000000000000000000000000000..b3d21ab08fe12a3895af6e0657cff378d6882f02
GIT binary patch
literal 10540
zcmYj%c_7sJ|NncYQ6t45M^vVSLXM=`O=c>_7NK%Q%%D&dwsL1?YB%L>6(Yw{%1zD`
zW>ZR(RE|oqIaiKCIWjZ9=X>7oKHuM8dpzgyem)=1`}KOcY;9?_e5uk>1VNVX{mtYc
zf)L?fi3oWy{9`)k%{+ooki90mY=Q`*AMB&gIv-y0W!H)oxsjYKHw)_5-3NMiOJ9yx
zG`A>Num0P*+L@2Eyy=hL>(+if&uR3!YNB><%N4hKdi&f!<Z^CJ-O7)19|NClykAg}
zu5vi4cIawF=akb_?GIY$;Ek!BO9W;dgg_*bugX%8XPfSw7pG9^9Ns@%r1w51Sh0eF
zEY+#`3l(Hm((QDSo98V>qDXNv@>u@JJrbEhwRY~EoEPIXuU?>`U!!bLqas%wPd%1_
zuhGwPvq7dR?u1IH*1yq_4dq??)aV?9J3>?#Q9yJYx>Vu62*hI~5@)k{p*8x$J34+3
z!U?_A7tdiZ6M)@)`D{G~voByG)mah6@IlZZP9S7H+N|{#N+nO?$dP))uk=!}hzp$n
zGTu6^E4a)NWVx4}L^$3TB9ZsSynv4DJIE*U_G+HOY`GvoMlR@<OrpQctl>3%lRz}?
zS6>r(YuP3$vaI$&B>GF>aJyX>xuM<{ATm_1goEgP`J@?xDZJqV3Tt9QF@+_du*5uH
z4_9ah3J?D}jw@UW3UvzZ;tJn_LeC%7NtnWopzvNn<T^~@5UNn4KO9q-2?~3&G%w={
znV_)liW%w{g!?av#Q8VTW)~JDRssZK|5c-l*hkgjqm`M@)?yz`g^&6S_8&lhN@r~#
z5LkBxY?h(nv{C3P4=1n=ZH&V#T?CO|v?=ExZs{Ocn(7q1UKDvn1|3oK*eJIfjc2=9
zWiAuxVl=yBc|`^KREgYW82u7wpda9}X1^$%E>bASMF)ndD4=J#CqFA7m2y)-7)1_H
z<gL@>VibLVVoB|FPmJQY7>P5UWKF;+CILm~H%1X6if44F$eB7$jumE2Kt5RW{CSxu
z81zmek>1(tIf(;1QQ&}490t?|;DewXQL49#1r!7D!wUl}rK$i}W$yV22W9~9+_VuE
zsWX}Ytnteck!lzFj%sXeEyI9G08DE3c!dLdP@ve(3{2w&09JeDSYW1pM>Y1mB%?p2
zXYL>nGViMyxMGgeGX=-3h-^e7OdzH~G}1OD|A*JwaVV%9|1C>J(HP!GM}|+_vq(f$
z<VjfA)+2h?Zu(>V&A=M7sAGA!H8o((f7&r7qG;4eQ;?d&nzDG69_r9VEOL))i=y%J
zG6#9twEMa`s=`Jgxe{{2(JEV7lyEvE5=SSoX+269%H|E^#-S)B+^JNcSn^xWZy3cK
zpqTve%_WRtFi@OR+q?^>Xa*El<u#(^P9VlWEyn1^|A(r8b`lH}2mK8-MHIap>4;ZI
zuth9Ju?3}=RN#*}ya6aSM7f{9Db@kSIiDDji%BVR6ePu2Nfym%DB{yVu_f2r2cvig
zC=NeNmd7bp0Yw*PwycPvIwYKW(&L+W`ga4x(-O*96t_SWw^VP)5qYs)Y!Ic`(<O~L
z{4`i|+T3k7Zp~$|M(yhA3#j4bEl`YGDycbpFyACX-8eM9J%9lZ0q{_>>t-C73&2}9
zS7Rx@Wjz4P6?5={ON4}Tc=7HE1~dSmfw}8C9N2_vtXLg|X<P@uyOf+=xW+;NcD!%H
zfU*FTZDz^f!2eK<k5^-1+yY_TQbNuVg{ECB5jZ-0?3NaJoHs%w@<z;AA}?Ayvtj^f
z_-1v2NMivMRlx&960gP%l;e{R2QXkB0P_|k@q+8f1DW|pER4KJkVVc);x*NQQf&Qr
z1;d>H*@<aMylgsPE;t<ODaB;_K(_CTq&dd017+CR(}u}3L8dt>xeu2Wfh<&P6&A$;
zU|7HzkH^{bfyB2?-ZGJEc%K0Hsb3OLV#hm7#LHE#Mbw(e+Q3kI*|;AD%tYC5?f6F<
z17-m*t6P$RX><hkUdPm0u<&a`-e_MMv&MmG01W7OXn_IU0O<Bc63;0|aE;e-!<Iiq
zKGlZsYm>(Ga9|+-D?1u|FyJ}>u4|FRQ^OJb=5^Av1<M<4;Hb?RrQpC?0DkXy6paB#
z0XX_d5|6MWIMvJFwna2y$SuIJWtoqtGvCp9>A@$`Q$M@eq2Hmi>|kuzxm-XC1q#&;
znz*C$$|-bg5r_sb;0!(~rJ#1_Nt8R)BQM9_C9f1!aq@mTk{r{)!>t(rYZC3BbYs?7
zfHf8+7x7+nvQrl+uQm3-HWv?QR35H|8?Zw4stqS(ev{iw6Xl=Y1sEHP^46jO&#a;U
zfI=NBzOoW+lnA#8s<>(Iay*P75XNEGYb~NRfouU3EtZ|wj(!CwLNB7Ld_J0pQ9K9~
z4_aQpdyxzDqL9NIr?5sP3lwGDlp-;T(}#d!tK;>J7)1-982yTlQ@jln)9sp%VA*H_
z6iwnU;-mN+jN<7E7Y|Y5lGK5sy6YA)Msc_hC|1cCFfoc;ph(DCn<7_zuw^tUi?(*2
zX)3H57CL9vYn%u>J?&{Gj2X6%D%!8%7o#|$-=-C&d-70U{lz9GgKaaNYNp#UuVs%6
z`#x_8GT=HrX%HCCr)JUg=8MgQ_lCD^eCexX_)&fSL$>hnbbYKKw5^_2Q<*`(n7iaL
zMJmeW-_YZ!O1|>yE4QmizpuX}m>;gXRAdMva7&F|PDL5-THo~~Q?~mw^Kv+Ucuw~H
z%;T-a<VPN}iD$!oZRRetvDeQRX4P+<H^^dc3;C#`eA1ko-`J-T(lr&T8BpO)3^u;E
zFDz~Aw&*bxhHz?lCMLb=iAQ&b`>}hhoiE<s5WlfLUP!P1b^Iy&CVP8juuSy+xkSm%
zrGGwH7r%=-(`SBCg1e<9!>7!%<lU!SHI<aL23GU5)$K#Y=9{m2ZjaNgup^N;c6JYq
zawtJZm;HW!IQaV3t?x{Ub5fJOjVG-xr~fEz+e&$w@HV^8|1Dohjaun-Jjwp=aY}0w
zqLeD_lwl~2oGVH_%+!pppQ^X&9_?2ldzLS398LFU3yQW1{bQZSR&k#^=EudQ*E1qx
zDsR!lGx$M9L#NvK{w!+wD@^-$>8EVg<ZX6R<+ei>#h#6O43<4&>@cMY&$Y<1UFs~$
z4y_p+TrPHMRb2CzUv3<G(|)Yk_lu6ksaK>}@rB<<hnUo%iR13}@99)w&5ufDqoR>L
zlehU#7+>dJvwh0NNs}W->UIx!YA7~SWXX`BR3*2w+y^((gw+McS6--pS(5fVF!#T~
ziMgqY(YJi%UkXF&G&L6eD9<kX)v<ob%<~Tu@2<~@aTorhF$sSE%7><syMIquA{S~Q
z_*2-BJvb_`-b__L)p_}AxOz<o2Sz7vUGl?^#JNL%_IUcXChNAn6CCa{R%O-;;y36r
z8S{%u+jA6t>r}R&jfSXx4?9Z89BMb1QRU`8iJcgrcio+<Xc8;&esZd=f%*NxQVR2g
z0r{wPV8yA$UCtM$;|6t3r0?PIek0OWJnp8=FUn#X)G%0kxOFP($aHPEhZTnxPMqs_
zI%ik$c1n{Mo*lfE8w+ucm2b8YrzG3-hUmYml?tspduH?mX{*98{|b>lq2(nYkw@3X
zvo9t3?n~I&lNXSrZxr$W?TDk)FWFyjgfZtsA8lpsl2MM~RTB9$7i5^d+!l^ZgG8FV
z)bp8}t?BlJPv$Z7{jkmq*5s$qO}Wa9w!odED@ktlswJsBa;pr&a4<EbQ2o;B;YuHz
zKka&JKz>xj$gJcb)}ee`tIYE}E0ZgM#yBL7r`RfoG&-2s0^}||ePLon;IUSIS38;V
z8-YNTJ3}NfR?IeS(6m~3dzx1FhCHgP_l!*BZP3b<B$8q!`o)E@{udJ1R4<aH3<a?~
z=&wv5?vz-SwqStthqqQFhn^<(S^S15dTz4a4QIby>0hQEWzgn&$k1_a!{&ASeRTxF
zts_mwEyP+1R+8pZYTpK|)qAyGjB~~A&?eHz(*EWjleYz<mV&eOQZ{vea*z_S#0VMc
z%bQ?roXgNee^0+m%;wzE5em}iXw^=+qaHsolB6LFi>P0aqgTwgo3lKjt9t%wwVuv8
z#$B+fH~KpC<HwLK=i2SQFWC~&b{UA?yU4r<`f~2V`uYWv`q5yyOh$X&dcD7)|E<mW
zn@n*q=?(F}dS4|VV?=@SPKMaGdJm%LyWiG?b(E`e`O|oC*OWa{nlDW)i30ngQidqh
zl8Zd4C%Y!(_#fMfRh(5zl6jYwKyZ%O8cHi#^}ajs>ReXOwh$MwOEC-%&loziaY(v3
zhbKeqjK0t<ECKT%2-+L<21`jC{Z3n35<|K=WW^+}Av~=MR!$2T%@(BNibRsS!Yo(u
z>pyKOGJMB2Lt;KTI>eg5dUMTIfm<h5B=ef>Fdbpmnvayi_LY1P#>Bzb4y4$fm%skJ
z3m{vp^&3#^ztW~6x3ie|h@o1N$g6$=S>fz-O?ue2S6~0@6UNUE?12yLX-|f9*8DOX
z^yygJlqTJ03-R;P=&&;cR)4##GB=zw`A3F^aFpNj&O-bQOgqt8hehE&c$1ODFJm5$
zPr0i92d~SNjJOvUkC4lC;@SO4>@P|DP^XN7IcdecaLPMw*uFbcmm3z$tb3#T!}do?
z&09N)Vl9KfnwGOu;cgY196L9)Km0DU@cG6RIc_No+|o|_vn0nAPphVPhJ^Nbmv7&7
zdYzx2UL6<F6DZ}!)6I!<uEsM_;sX&sf<k*ZFUbXJu!*TnRFg);`=87Xn$3Fv%Wou`
z?il)?mzN@Pc86m~9SYUq7XP|L@M}t;CL9ja5r<&Hs&qPmt85Z8b1A%axHGCq+UrPW
z<1~q*^toUk(OZ1MVb$z-1nSEo28S*I+pa`DOOn*MqT2Q9+0Nm>C_y#^%9(6){U&04
z>{k0;)?uznT*C*oki{J6NcWWp#7%JS+EjS)9z}6auSQn%4zpGy-ktzO{xXW57Q7TW
z+u?YNlnBE^nD&Xj5}DMbL%SiD!=hJStvP6tX~oTmK0ee$3th~eJ*fIJiGJ(tQskPQ
zQz2<k7C@`rXN~5D!bKPeQ2B#j2N{`CT%&(?%*~YAc?9Rs3wMZd96uL25)a|UEO^tW
z9EWhPL$ABeT5g`np$pP!Rtv#zg$%I~+fTj3_Ghw4USV~JxP@xGhS2D%=S+fdOAcdg
z2^@DyHdI}ZR@_ZxeoWFpOL>oW?m9`yk(FfRTgQ>dBp6ZKzBhHwdInDRn7ukJ{=Z#5
zQ<WQL-V+vBKRTzyiOo5cM|vTDC#V>)_HS>uV1;rQ^fJPjLR2_r_61J<DbRyb93>Oh
zLU#y{_6^Tsh8Oq>mS#5XO|elR_Cy~JR||1396Uqfq<k(qK}=nGM0ZV4Tm!UKw11ZI
z?E9`~#1<LC_9{AqWFFvtZhSDllJC;yOMx0L=6SkvW*EMCwrSCb_1S^;{k=Y1mB{-O
ztNF%wA%seVX)|V%h8-6{*cU~ymXefYtL<8b>e?n0@an4KCAs}EW5N!czUcTNmyDe4
zbQyr|S<UF4<>031UFHcNZzzru4E+BelCE}a>Dv{-e+Q{(q4wpg;_$b&9{Ji_yWq`4
z`arw=4z2{TN9DfM&e6{3LIz8d+xmp=8!h-W%#12B{COZ_nQ|wh+-XMhs#!wTnHZi8
zaqh4Bp+~HhIyBk$jgDjgk&%i{<~LH&3Q}C8V0buKj=EKeTPs#4t@=Q9ek_ZoCTdz8
zf59Yvbs|}UJ0P}3A)@7{3+d_oJ#ww#r>2=P;h%?v6#nP7RG)SYHKd%sI-Zs`p!8vL
z&fMtmM6}@Ea8HL+taA5yqw+D*s|oS1SDUkjW*mIVH<2cv`%Knb@q2rpQiTEi@=KO1
znTxpT8+Wp9%r`vaaZyJWNBG6*$hGF7tF$X0)B}2y_?z0MXnCnmwlZ_%V0gYD&dI)&
z?R)#yJzM(DhD;Aa=JN@d|K*c2cYQCN6ijEhQUeT$p%VQ|N{tK|O+C%wT9r_ArqD#b
z%NsM<{Fda73)xH!nEaYt-A1}qoS+<cL<%v_csm7oH?LE@&q9M1G%(}-`5=tH1o3_q
zubo<qX20vAWTI!@1qXGE^l0Xs{xNJErba1mB29kloO2w7@xr>xT@FP`D6>R|?7QJP
zrBPaJ?t+ad9vP9`bQOMZ+mzgTv}aR$?U7CAq`I}$rzF~@_+7xM%c)mZ|Di;7Jry4y
z2)9}62%)<B?>~jY$H|YrWqXryD6<aB{+g&2WOWU~Eb)SqK{e#{krIc{iAH^{w`nJN
zRO?HdV(+asrVN&u^xoeILN*MRReKBSpC>IipXDD<-Zey2iJhw-#U~Q13Ar4&<!o}S
z>Q^DS1Q%Y|F-{?>L~6Q7^9R~!GR~^>-gN|~3tYINH?J?tcuU+Ti;aLY>T(kKh7J|E
zajI_(v6dW0RiDpmNZ%zA=*ams`xCG$S-$uKTF%1APZ9ZsE?|87rAdx*K}?HL!!`rt
zDCLrK48na)>JB#rROFhvb<i2p7nsTk&yn7K6$*s&J@nA`!NFU&@}$^|h12za{&Ia0
zw^7Vu!VM5^(o9(|C#uz~84ViY`!d5F&^>-$+W1|jr+-OX&~^1+#GMi|`UI!4-h;AL
z6t4qRb}K9#pPnVlaxEcSEEQgqn~V21(S%*Pp)O(@Y#+FZkLt4iNPsSxVAIXWT+IzT
z$xff0x)p9I7%PanP8oKAOS5osIlU5kT|N^e&Vorz9`BZB3@?nxFoyZE{q5sIQiuFg
zsqam)?7Diki<m>GaV+eeELaj)5_vb)k|q-tCLd*Fj3(I=E^gQ-P3n;Ld-EDpzCPM*
z$y&{gYjkCXcfnvr`#U8WG>UG*0_0|cjJ_UgV=8?xn_qmM!D13xY0jYVL*q_T;)>a$
zt47t@n5*zy;D9|uURWhVy(E`+yN|0IDR_w00D<^JLh)a1@QL>78R=wZZ<+rk1rv7o
zG|Vn#^k#Yr_PQzM9YhFE9VO66cm8xXy3RlfTBxyZl!4#M&UKr!bhx@tc&)L5f}fuy
zCBj2NVp+g?q8X7HmFBq$-Otf!_<E`0m=WkRT00|~Y}cEr-<`4MyY6E<xLxDnS1pbX
zy-f!~zZW;c|758X8q$B}OpZ*@?qyf`%INr}mgK=K(yYIrApNvi5d5iLdxRfw2J+~z
z*s{9IAiDh56H1peRoJVmJ4ZV{v(^Z`TY3$2UZ*Nu;a#D_E+Xum$o1cY?`_@0#vV9%
zceONSlYO+}btjsW=6CK)PlgtNURh?YhDANCLNCFeWUO#&Rc(_M;B=u35~cmF?gu~Y
zzhxB5^B~S8*3EU)q2~#Y*2xV}B|oov_DJ+c%&j_C5?3{|IwV)FGmjH|5(>!Y)W8+e
z3z^xV?zyaC-DtG;iqtuSx(^llW#J@ar9<cTPAmM}`y5<&(p7NMuWXxiASNvhTYoC#
z@O0A8rH=Zt4tkY9>ALHEsN~#QqyO7Oyv4VV2S6U6H|f2<^<F5QdNy2q>3<4UKw(D3
z=GOrvW6Ggm+v#NpUgsThe$yv`;K|2Ebv3*ni+bCkX!}JwErt3r1Jw1TT>lzE44!1~
zUuC?A4t_!FS)SD58VbvLs6p$UjbG|E?64A`=a(eN0n$8F=e+X{1EwX_N>CirFwjJs
zakp1Roow*d6oO#-{IsTczj#km{j13QYjkO_?dfi<(;5T~VOp2bW!_z4Y-K70IW^TY
zMz^=0CRz%Q!>^_%wFE1;3#zmvzSTee2HZ+gi-$c}VgF03vMsu^ut$@0zcuG0*&Vq$
zL{cQ=!{d6wRkj!xmZ-}#DE#V&X>}0podkn-P*CV){u3G4L!UzdH)JFT9lZ0Eh$Kts
ziI#N#L%(pP%pT9x2_W9|uv}@>`zyy)smN&d&^=XhzsB5v#(b?&<kyb^Zl*NV8aD1b
zr7!Y~4)?nIpH81;%D>0zjO#*bIZXpIX|&dHdl(4ck{Im0|0}|?&<}p~E_@|H%!vG;
zpz^bn&WR_F)j>e(&ZqaJ@;u!h>Kcuz#1+E5A@?uXSelOMI!zB{O%9o{U8b!Von*?e
z4X=Dgfr5PBcH_h!#f|iy=%VMUUmh!dzt@%_E9w;zTwT-7O4(UEqXh|cuLbvvY4@19
zYYOxw|5*9X-mS&cl<grhY|OfsEmgHORpO|1tI%Z|`=XhpHmiCgn7VPr?UjA?Zi=+)
ziyuB3`>g-*wG{aElJi(HZ%6Fd`wte>;*Q$TvWSos+yKa{fR4d2eK}n-i9f`hT=LGH
zh)&`+m$vK31vT8-c5h%6cfn=;{^>P+<159M?Tmp_Tuk4J>;=zdlM`)xB`QVzgjJ+}
zx+34Zts+58pnpn`G5pSh*mEgjz)I*FQ^?5lhO9^%_z_^C)^p_rt&vdbY2K{yNHNJ&
zbPTeTe%j+n+cIum*5x%s4l^Ea)!O%f=$1Bk=MapXLwhX^Ufg#}&X&6QRmy@j`f^gE
zd?A;%h$m^KJ9Blx_{aM@zxK!-a9DcDz|m#CbtZoHw!xY{9pVSLJQ>?$Tepq>+0AiI
z-Ec1M^ymrYrTr?NJJr^tra9Anx+d+{$3;F7?4RzAiwU>_<8Ep~ZSuA-YJ76wFJi1=
z8W2qzuu&aQd;8!Fzh6<0nRQJ_-Em#4@s~})fKSK2CXdb~2}|=&u8r4?TSy2BTl})M
zacl9-M>%2U5mphq>;9OIEqxxpQaOe$gj`7VPS)T*cr$CJU%Qa2O3T^Go=L8{Z=t+F
zp`yHromn>IEzqrbpQKDa`m`m`EX=`ZtJRsgysHbmn_>SQO(#tWs=eVZ&V$pkZN91X
za*&hF!u>WCm7NX2KIPv?tAh7I>h62~-;)r}Wx+p&=cKIb5_hugf27aO*Utarf5GT0
zZHL9=Q90$4Qru<MzL7&hyXhS!ty)Ci%VTU4+9~6a@H(ZT=Lfv&ypIY31K)Se>=4pl
zHo^p%cX++f$6KiVKJn;`uQXpB{aV;Pri&O^{^UCD!nJ*iUo3eNR4>mT%2wH?a#omg
zV93{uePo&)n{H2X%dViZBwxc->+29D(K9Rg%vw0YmRhLq6+PvQWWbwHvg4Z|(S>d1
zBFK~rrkhQnY1=4R3#Xy9rgIqBh3#{wgy*_f#NkdjvxYN21ob~?Z76!#qIeyFm!&YS
z1^VjIF7}2N2eFIGKOnlWrN0L6zixK_9aP-W$rRj!`nY#A2D`9TlBXa_E~^fyqL<)=
zZ><_|VeaXDRCHncvH%+E=&NK!XqR~sci6C9vMin5v6m$Vlnq0nu^h&rwKJVR1r(>|
zmC_J`o@u8wf{>fgzYBoRY}p8>pL^QsrZ`<EpzG8%i_zT$bpJ8cSHtNp0NsVgSUP$G
zPf7vbr#Q*T!i79)nJ&0Z`|nXj45$ylQZfD2IB+unH@}D#Js$kusSO9J0Z?shI|f_}
zz`q~s$>G4?0r-1ItmwIdlma6y<?vEjxY-tI1k1H^#~d&q+W)Woska;l-UZ;@kFn6`
zP*WikDGrMhs5o#F05^>XVL<dzpKGcoh65)7I5`+Ay2~foK_|3h60s);!nb1JSn&6F
zvIxjJ2JRjZ^Ftpm&|LTxfWMB%?h|RWgXv{A5a@@?96{zd8H<I~4*m?n?opr@E(-x!
z$oE*$qZ7#voNAXHh`xED-%J5n%6zQov5I5|r(L`AfeyH=24ppYSnLld?7%g4u7T)Z
zJD|9CAbY3PJBt}A28N2AiGVCc-Bzp%B<dG?U{RC@hVmMLbPUM;-|YpY4V~o*Kv%yA
zRSZ}K?8{3fJ$8v0$^%3BfdKT+4?rVZ3vyUX%XJN=5%Pw$%O?U)jVe_DmdSfy;g<)B
z^4S4Y9B2+e^L$qw3<%+8t@Vn)BU}ZkQC_jeL-deIk_V3Rt^pJr=nX(`EjMEf2vKAa
zjz&;%Q=v@CtJFQPyzu~z9vT4%4vYd|RKA-f2J`@+2de=>j27*Ch|Rkr3T4<UQyCOZ
z*`(49tY~}kpxj2DB`ZKi!Jd5p3Prl}CHyN|w4y21+1P^mjl=T+|NE3LR>!URdFLW>
zoCk!_<Gi6ZR<!jeA^pa_>BD&hpn6fz7bNm`L0>?Nwh%f>VR8H%`aXnkSCUAamDbDg
zzU0e<j>3*<iANKhYyoSch2@E#VUz-jQu#+?F^X^iV!2s2pc^Vs`~k%<@1RkJHLV1o
znDDz&G)@upzii%jT?3<N4HPM_(T7BoVmRmz?|5c`y)qpIibt<5#zQ=_o{CJDI}T#m
zuMQN|&u>Bh-~;+ny)IBJ{<azWn;kt^y!FJhcj0}h7Di}oVe%aIkR}c)#3{=m!{8Nt
zWWov#Pw<+QETT9HRXe)h>t__>fMQ&}#|w<26;QOITWMeppMlOWeeaY9RyW_ln(v>c
z(4L8AYB2zdwLCv!Kq&x98Ck)5AX*zUS^&Hs;DHrY0QBB~oGB9=*b2bbe9v(VXa+#D
z?N)eg%z$y&djV=|0B8(wn_7<pCjf{&3ZO-`1b|DnSm7x?1JyWPe^C>SFoEa<0e4CW
zCSs0bli;U+*xD=-MWYKYbGu|(8t~k3hyB65AX^hlI6H`j-H|oWL{P`6z<#WFOsyTO
z)Jh0=C2#U)Z`ck$-R_+$1IED#sT4M3{cB6`nPmosGaUC<ph=8ymy3}&%l|gQbAy%$
zf$Ip#!~WpM2LkT%s2}}fAT&4HAaHGVHajujz?5VyS}%oDjDuo~uFBEGYHA1)Zb&8=
zbrU+XOyH-FY;9#l6t|nf@pQ@45BNv*LBHrO9Oc++0VhI>HGw}Zh4#a6K71A{4Fgbb
z;Ma}MFco{CA9&K1A*we^_@(77|0TG>qo5GIx5gBLqqd7RKF1aQ?^;=;5KQYek>B=H
zAv6&N)AbvsP!<%*T6aT#5&0WxQIQ>EiwzAO=u<jt{n4nQ*?%6MVqCAa<1%ot4)LoR
zF1rXa_cU85Y4{&S=zR^hK>;@gPP+7K*X*!T+^!DSGz}#%Ku~?fs#N67Vee~L(M*6x
zdv2BN!DSE_8^@Csm~0PlpgcrF23rTy9L^RMAM?=1ZvwFg%&cqZ6#`eZ*R%tp6Iw+s
zqO_oZZg}ItVhaO`UTbKtk9mxOgvmlUG9MtENDw@>wKqToSHV5c*b)fVW4ys6!%pXR
z_yW}$R-X-m<(XlaJD`b*u2NAGZb5)wH5bDKMIBWHlE5)rQSJQ+l7~^n@E(Oq;BL)2
z_*=V3attJQ&5QjoNhMFX2tkCx&CM??5CmC_E;Wmg?ll{9_P?gXnu8#FO)X7|cC*g^
EKfm=BW&i*H

literal 0
HcmV?d00001

diff --git a/apps/www/public/studio/window.svg b/apps/www/public/studio/window.svg
new file mode 100644
index 000000000..b2b2a44f6
--- /dev/null
+++ b/apps/www/public/studio/window.svg
@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill-rule="evenodd" clip-rule="evenodd" d="M1.5 2.5h13v10a1 1 0 0 1-1 1h-11a1 1 0 0 1-1-1zM0 1h16v11.5a2.5 2.5 0 0 1-2.5 2.5h-11A2.5 2.5 0 0 1 0 12.5zm3.75 4.5a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5M7 4.75a.75.75 0 1 1-1.5 0 .75.75 0 0 1 1.5 0m1.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5" fill="#666"/></svg>
\ No newline at end of file
diff --git a/apps/www/public/web-app-manifest-192x192.png b/apps/www/public/web-app-manifest-192x192.png
new file mode 100644
index 0000000000000000000000000000000000000000..9a57c60857235b2d85c676119381e1d490a6751d
GIT binary patch
literal 2644
zcmZuzc_5T)7k}q9G?v^MO}1N>A?uWhXt531iAh<@QX+eckbTB=8N=16L{yd}8EeRw
zFiL~EDm#&z$WmxT7>1eq_`ZL?KW5JRyyraU{LcQSlI$&aipYvU5VX_U%FGea*6klk
z2>d&K3f=)hBEr^YCa13>=I>im4F`6&>nq79CZS=9a*|zI`P08ukfsW5!bMa~%wcgg
z+Ook1TG5eUv$LsciJF3#*MI4|9Jq(xjl^JHVrJMuFWjSg*#nH0w&!cSulFjWod*nO
zHtplW8EHc+{2$_c6K`)A<vl)qYU8~)JdT&ng<$E%E$j{G$c|(cLN%29L!ZUQ5TO_a
z*K}(Lk^V8V>>njEv`Va&z6C^U*{7Q=A;dgII?$wsi$u2?i8xy*lOc=wW4i2JM2M^A
zDw7H1YUcWz9Dv+IZ(k(L(8ZCRaItbUz$hETzOaE1<q}_(N#HtZp=8(z0Lnt;r{D;5
zDEYf4>pjrtmw3LxNLYbv#I<qK0rYOcaD@YmD)`XiIA90lRZ2@DmDU9SN1&(r91^@q
zI&f-|0yI+mhY2tONifZR@{<Uo#)*f5XDO{EvglS7(_l7mceb$^+mH&u!)DY44*=Pt
zA$vj(c$|l-X%2$-iWbbZoIHzzQ3@EV<N)Baf9<6U_o)zUg}ixg1V9^^|J_X$M}{OQ
zV!C2)x>Nwzhvz%w02H|wHYaKU{a89&V+p`^R66zr189005y6z!XGd}5kkpz47bKeK
zvQV580wn+c`IrRJC9W{X6bLGIC#8Zkyq*_z+YM}rP*m)I`wD(uon>eQl7zZ8NDynu
zfneA441pL0G88?F)5QZwk`E_a<xl`pqt(tdV2Cw)gaA|8rpb`FEqyW%NaTjfzmdNK
z!5qDp#<L0c4=_)~y9hCzeR!6hX<KVp?uDp~5$BF3w<{TRzN=hspsu2_*uIs>^}efz
ze<<&F=o+61?6RC{c*9iE3XxJT@R=zM3GdRu&MB@pFUi(x%ts%Gyq4FSo#nIn77uQv
zIV8!ewW}|knmXzez=`AD9XycbrLu-EFpmhU`0R4q=j-84+krCDGXAXTa__3=n=Pxq
zI6+a?`tC2|)wRxD)aZ0ua*rs7`Sx;e(XB%ZoLkPe%bcw9(~{(idEef$-H3{eVF&C=
z!xG84@k=4i%eq8J^fPYQ#nF1TM|Dh4cEL0%B<#MfbXA4^S<|3e-^pjl_k)O;PD4?D
zN`(XwVwi1k<~8}(MkiN{%HEO$;Z8`GOP>?iB;`HUWIES`gVH*7EF@IlD}dXQugN3^
zYa^>uN&2H(Nf#Rze&W0Br+4d^L%YAIihFR6CQMv?E0zMiz5HH=Wq7Z0^MT;i_V1y=
zZF7~S6p@W5fz7V*sj(<q4`tZuMBV&#Uf>`3obHZ4KOq{>XQ$fYi#dHEH!dRLUf)3z
zA=}ac!**3B(=pC-?9c`^0~(o|ytZ@(wcsm{_d%k|6@z+z?t1X;S<0=1ouwgqy2|8`
zx8Fm(5^mj`*_0WfLE6N3gkt%yjqhwXg|@{>@l@#i+CQpI4zYZhhZiZsAN6wf!ql-t
zp)uNPI}jIynl4{YxEs>A6eH<+L@Xr)6rCPMgE_|TzT48f>2xjL4@`rng&qdg{G^@_
z8-}8Ixg>!Z&_2sYvWEZm3djkKF%Z2?b<=KtEV5c@a9fcqy|DQA!xF7$tWLE!NiF|Q
zsi{IS#B2W)uQL-alF^dX%#$Pd*ePR^<1Jdh`Su8oGlRAsQn%{KeA9zAdF<sa(W?CA
z7)iC={JnzFEo5Vcbo}92W__%EOZ}9Q!c&M>IKjSU?AXbFeB{xBy5MGZQ=MT6IX);%
z*x0`2L1s!_Da^_9H&i#a`EgipO;3O$W$LxERrc$KlTU!Au0T`yD<gVJJr!PzTQtP2
zhDF_&=8iK?4-Z@|*QQWmPHoPn`9F-Y(pRB3V<fv_hP6Tw6g#E0E_zO#C$B-j6mwvx
zx0WpF8UkYkt2>Grf3laWT+DfvxVqLNkUZaGSN?j%k@EZiyR){>QTjh0B<F9(XjVxQ
z457}^o&2YB3754lVJ*DuAOzl`VYOAOE_^%w-IjP90!eStH2ShtJVRq05A!|<df)K-
zw`U!-#El-AgX(}SK4U3M8<jKhe}g9GhOU2Q+8<wcV@kSeg6WZKe?pb{C*9A?LfsTX
z>=CbJ_7cWcFE7bwO#SG2l%PPKdTl&Z*e5kwN2|92#@V^@VV+OgwtHgx9Q;|=c;>%g
zgN<R!Bt<gx>=NtOy#%h(QQRIdVwwAR+N0N|*6;+r)vB1S0v&p#ef2!=#o#y1cf9mS
zV6rQym``Up#2Scp=_fYlf&n$y@WzD)9GIJ1^9u?CP4#j=*DSAOyT#;$&9G$o{T3XR
zN1!&iyn8P3LjhWGp?9x*%Tb&($F|PlvX+bc7K7e7TrU}w`v3<;8hveV2;V%Tzj3lV
zc8PhK;5kde2rlMQ$F!<^_vJ62fqs)b@aqIC#x*0AXold3OeH8!Af{%rEwdWUId(sR
zS<q!&p_MBU=FgA+_^5KRB4Z_aV$+3Jwr3Z}KFM9*2$L~H`@Azc?M|fBVjs4x3g2H;
z`rNsL$1K`l3t#Pz&Td~d{?D4j{;hVu{e)dq4QOUMa+dS1JM@$FhWzs_d)6Wta#xlI
z)`iVi7`<WrQBT`joOrZ7Tp>y)%(2KVU$rTS@IVzr?4WvOL2xN8f4m+H?2)|+@nA6)
zXv8NDfoUBWN#-~SpT-gg8imCv9$=|R2^d@K1B-XTAe;^6*9&RRK@E_Tz?mm8*<iV`
zNSqyCUV(}`=Wc@21)D&&KUF3ff>C`U5>HGZM1O&O7Xg$=j&pjZRh<TgSeHR}I0+1@
zg(jMV7B31<ilqU)=2v#%Wf4eph0@nkw}~bQY(<(kI>#KO_SI|qW+2cUai`G_^nWd(
z=2R6>SattVr5ngA-Y(@+YFitSICtjw`F#L^#O+iJSU9LrSqV*m;C6vsdNsH(Joqcq
z^_K>k_)9#~%NZ27rl-&idkA61Mz8w<51&r>F3tkE|FLBR>AIJMQiu{jP}o8!0EEoH
zKJ4rLB(R_pGfmvV1^0zLQL3O=Z+f4VNxJb4#Nb^W%`6Piqovw@IzW|91+HfgpyFle
zAH@*JZac<^Rb4$ELk!xh^tl)?9Pfz@0<XK>J30?<HyKv-k9rFTQ8##S>4c3!A#`(^
z<&9PY1&)1bM=u2z`rp%CFd%v;zeF<tp(rA`i3SX+6Lc(U0lT(B=_eLY5n6f=9_S68
zvoa6_dJ}OzhioClq0vU^)P@JFZ173Q=PO>%+yW0m+aHAj5W|K<|Gh>h7`%b3&F#%9
IO}!KU1@1V1tpET3

literal 0
HcmV?d00001

diff --git a/apps/www/public/web-app-manifest-512x512.png b/apps/www/public/web-app-manifest-512x512.png
new file mode 100644
index 0000000000000000000000000000000000000000..b3d21ab08fe12a3895af6e0657cff378d6882f02
GIT binary patch
literal 10540
zcmYj%c_7sJ|NncYQ6t45M^vVSLXM=`O=c>_7NK%Q%%D&dwsL1?YB%L>6(Yw{%1zD`
zW>ZR(RE|oqIaiKCIWjZ9=X>7oKHuM8dpzgyem)=1`}KOcY;9?_e5uk>1VNVX{mtYc
zf)L?fi3oWy{9`)k%{+ooki90mY=Q`*AMB&gIv-y0W!H)oxsjYKHw)_5-3NMiOJ9yx
zG`A>Num0P*+L@2Eyy=hL>(+if&uR3!YNB><%N4hKdi&f!<Z^CJ-O7)19|NClykAg}
zu5vi4cIawF=akb_?GIY$;Ek!BO9W;dgg_*bugX%8XPfSw7pG9^9Ns@%r1w51Sh0eF
zEY+#`3l(Hm((QDSo98V>qDXNv@>u@JJrbEhwRY~EoEPIXuU?>`U!!bLqas%wPd%1_
zuhGwPvq7dR?u1IH*1yq_4dq??)aV?9J3>?#Q9yJYx>Vu62*hI~5@)k{p*8x$J34+3
z!U?_A7tdiZ6M)@)`D{G~voByG)mah6@IlZZP9S7H+N|{#N+nO?$dP))uk=!}hzp$n
zGTu6^E4a)NWVx4}L^$3TB9ZsSynv4DJIE*U_G+HOY`GvoMlR@<OrpQctl>3%lRz}?
zS6>r(YuP3$vaI$&B>GF>aJyX>xuM<{ATm_1goEgP`J@?xDZJqV3Tt9QF@+_du*5uH
z4_9ah3J?D}jw@UW3UvzZ;tJn_LeC%7NtnWopzvNn<T^~@5UNn4KO9q-2?~3&G%w={
znV_)liW%w{g!?av#Q8VTW)~JDRssZK|5c-l*hkgjqm`M@)?yz`g^&6S_8&lhN@r~#
z5LkBxY?h(nv{C3P4=1n=ZH&V#T?CO|v?=ExZs{Ocn(7q1UKDvn1|3oK*eJIfjc2=9
zWiAuxVl=yBc|`^KREgYW82u7wpda9}X1^$%E>bASMF)ndD4=J#CqFA7m2y)-7)1_H
z<gL@>VibLVVoB|FPmJQY7>P5UWKF;+CILm~H%1X6if44F$eB7$jumE2Kt5RW{CSxu
z81zmek>1(tIf(;1QQ&}490t?|;DewXQL49#1r!7D!wUl}rK$i}W$yV22W9~9+_VuE
zsWX}Ytnteck!lzFj%sXeEyI9G08DE3c!dLdP@ve(3{2w&09JeDSYW1pM>Y1mB%?p2
zXYL>nGViMyxMGgeGX=-3h-^e7OdzH~G}1OD|A*JwaVV%9|1C>J(HP!GM}|+_vq(f$
z<VjfA)+2h?Zu(>V&A=M7sAGA!H8o((f7&r7qG;4eQ;?d&nzDG69_r9VEOL))i=y%J
zG6#9twEMa`s=`Jgxe{{2(JEV7lyEvE5=SSoX+269%H|E^#-S)B+^JNcSn^xWZy3cK
zpqTve%_WRtFi@OR+q?^>Xa*El<u#(^P9VlWEyn1^|A(r8b`lH}2mK8-MHIap>4;ZI
zuth9Ju?3}=RN#*}ya6aSM7f{9Db@kSIiDDji%BVR6ePu2Nfym%DB{yVu_f2r2cvig
zC=NeNmd7bp0Yw*PwycPvIwYKW(&L+W`ga4x(-O*96t_SWw^VP)5qYs)Y!Ic`(<O~L
z{4`i|+T3k7Zp~$|M(yhA3#j4bEl`YGDycbpFyACX-8eM9J%9lZ0q{_>>t-C73&2}9
zS7Rx@Wjz4P6?5={ON4}Tc=7HE1~dSmfw}8C9N2_vtXLg|X<P@uyOf+=xW+;NcD!%H
zfU*FTZDz^f!2eK<k5^-1+yY_TQbNuVg{ECB5jZ-0?3NaJoHs%w@<z;AA}?Ayvtj^f
z_-1v2NMivMRlx&960gP%l;e{R2QXkB0P_|k@q+8f1DW|pER4KJkVVc);x*NQQf&Qr
z1;d>H*@<aMylgsPE;t<ODaB;_K(_CTq&dd017+CR(}u}3L8dt>xeu2Wfh<&P6&A$;
zU|7HzkH^{bfyB2?-ZGJEc%K0Hsb3OLV#hm7#LHE#Mbw(e+Q3kI*|;AD%tYC5?f6F<
z17-m*t6P$RX><hkUdPm0u<&a`-e_MMv&MmG01W7OXn_IU0O<Bc63;0|aE;e-!<Iiq
zKGlZsYm>(Ga9|+-D?1u|FyJ}>u4|FRQ^OJb=5^Av1<M<4;Hb?RrQpC?0DkXy6paB#
z0XX_d5|6MWIMvJFwna2y$SuIJWtoqtGvCp9>A@$`Q$M@eq2Hmi>|kuzxm-XC1q#&;
znz*C$$|-bg5r_sb;0!(~rJ#1_Nt8R)BQM9_C9f1!aq@mTk{r{)!>t(rYZC3BbYs?7
zfHf8+7x7+nvQrl+uQm3-HWv?QR35H|8?Zw4stqS(ev{iw6Xl=Y1sEHP^46jO&#a;U
zfI=NBzOoW+lnA#8s<>(Iay*P75XNEGYb~NRfouU3EtZ|wj(!CwLNB7Ld_J0pQ9K9~
z4_aQpdyxzDqL9NIr?5sP3lwGDlp-;T(}#d!tK;>J7)1-982yTlQ@jln)9sp%VA*H_
z6iwnU;-mN+jN<7E7Y|Y5lGK5sy6YA)Msc_hC|1cCFfoc;ph(DCn<7_zuw^tUi?(*2
zX)3H57CL9vYn%u>J?&{Gj2X6%D%!8%7o#|$-=-C&d-70U{lz9GgKaaNYNp#UuVs%6
z`#x_8GT=HrX%HCCr)JUg=8MgQ_lCD^eCexX_)&fSL$>hnbbYKKw5^_2Q<*`(n7iaL
zMJmeW-_YZ!O1|>yE4QmizpuX}m>;gXRAdMva7&F|PDL5-THo~~Q?~mw^Kv+Ucuw~H
z%;T-a<VPN}iD$!oZRRetvDeQRX4P+<H^^dc3;C#`eA1ko-`J-T(lr&T8BpO)3^u;E
zFDz~Aw&*bxhHz?lCMLb=iAQ&b`>}hhoiE<s5WlfLUP!P1b^Iy&CVP8juuSy+xkSm%
zrGGwH7r%=-(`SBCg1e<9!>7!%<lU!SHI<aL23GU5)$K#Y=9{m2ZjaNgup^N;c6JYq
zawtJZm;HW!IQaV3t?x{Ub5fJOjVG-xr~fEz+e&$w@HV^8|1Dohjaun-Jjwp=aY}0w
zqLeD_lwl~2oGVH_%+!pppQ^X&9_?2ldzLS398LFU3yQW1{bQZSR&k#^=EudQ*E1qx
zDsR!lGx$M9L#NvK{w!+wD@^-$>8EVg<ZX6R<+ei>#h#6O43<4&>@cMY&$Y<1UFs~$
z4y_p+TrPHMRb2CzUv3<G(|)Yk_lu6ksaK>}@rB<<hnUo%iR13}@99)w&5ufDqoR>L
zlehU#7+>dJvwh0NNs}W->UIx!YA7~SWXX`BR3*2w+y^((gw+McS6--pS(5fVF!#T~
ziMgqY(YJi%UkXF&G&L6eD9<kX)v<ob%<~Tu@2<~@aTorhF$sSE%7><syMIquA{S~Q
z_*2-BJvb_`-b__L)p_}AxOz<o2Sz7vUGl?^#JNL%_IUcXChNAn6CCa{R%O-;;y36r
z8S{%u+jA6t>r}R&jfSXx4?9Z89BMb1QRU`8iJcgrcio+<Xc8;&esZd=f%*NxQVR2g
z0r{wPV8yA$UCtM$;|6t3r0?PIek0OWJnp8=FUn#X)G%0kxOFP($aHPEhZTnxPMqs_
zI%ik$c1n{Mo*lfE8w+ucm2b8YrzG3-hUmYml?tspduH?mX{*98{|b>lq2(nYkw@3X
zvo9t3?n~I&lNXSrZxr$W?TDk)FWFyjgfZtsA8lpsl2MM~RTB9$7i5^d+!l^ZgG8FV
z)bp8}t?BlJPv$Z7{jkmq*5s$qO}Wa9w!odED@ktlswJsBa;pr&a4<EbQ2o;B;YuHz
zKka&JKz>xj$gJcb)}ee`tIYE}E0ZgM#yBL7r`RfoG&-2s0^}||ePLon;IUSIS38;V
z8-YNTJ3}NfR?IeS(6m~3dzx1FhCHgP_l!*BZP3b<B$8q!`o)E@{udJ1R4<aH3<a?~
z=&wv5?vz-SwqStthqqQFhn^<(S^S15dTz4a4QIby>0hQEWzgn&$k1_a!{&ASeRTxF
zts_mwEyP+1R+8pZYTpK|)qAyGjB~~A&?eHz(*EWjleYz<mV&eOQZ{vea*z_S#0VMc
z%bQ?roXgNee^0+m%;wzE5em}iXw^=+qaHsolB6LFi>P0aqgTwgo3lKjt9t%wwVuv8
z#$B+fH~KpC<HwLK=i2SQFWC~&b{UA?yU4r<`f~2V`uYWv`q5yyOh$X&dcD7)|E<mW
zn@n*q=?(F}dS4|VV?=@SPKMaGdJm%LyWiG?b(E`e`O|oC*OWa{nlDW)i30ngQidqh
zl8Zd4C%Y!(_#fMfRh(5zl6jYwKyZ%O8cHi#^}ajs>ReXOwh$MwOEC-%&loziaY(v3
zhbKeqjK0t<ECKT%2-+L<21`jC{Z3n35<|K=WW^+}Av~=MR!$2T%@(BNibRsS!Yo(u
z>pyKOGJMB2Lt;KTI>eg5dUMTIfm<h5B=ef>Fdbpmnvayi_LY1P#>Bzb4y4$fm%skJ
z3m{vp^&3#^ztW~6x3ie|h@o1N$g6$=S>fz-O?ue2S6~0@6UNUE?12yLX-|f9*8DOX
z^yygJlqTJ03-R;P=&&;cR)4##GB=zw`A3F^aFpNj&O-bQOgqt8hehE&c$1ODFJm5$
zPr0i92d~SNjJOvUkC4lC;@SO4>@P|DP^XN7IcdecaLPMw*uFbcmm3z$tb3#T!}do?
z&09N)Vl9KfnwGOu;cgY196L9)Km0DU@cG6RIc_No+|o|_vn0nAPphVPhJ^Nbmv7&7
zdYzx2UL6<F6DZ}!)6I!<uEsM_;sX&sf<k*ZFUbXJu!*TnRFg);`=87Xn$3Fv%Wou`
z?il)?mzN@Pc86m~9SYUq7XP|L@M}t;CL9ja5r<&Hs&qPmt85Z8b1A%axHGCq+UrPW
z<1~q*^toUk(OZ1MVb$z-1nSEo28S*I+pa`DOOn*MqT2Q9+0Nm>C_y#^%9(6){U&04
z>{k0;)?uznT*C*oki{J6NcWWp#7%JS+EjS)9z}6auSQn%4zpGy-ktzO{xXW57Q7TW
z+u?YNlnBE^nD&Xj5}DMbL%SiD!=hJStvP6tX~oTmK0ee$3th~eJ*fIJiGJ(tQskPQ
zQz2<k7C@`rXN~5D!bKPeQ2B#j2N{`CT%&(?%*~YAc?9Rs3wMZd96uL25)a|UEO^tW
z9EWhPL$ABeT5g`np$pP!Rtv#zg$%I~+fTj3_Ghw4USV~JxP@xGhS2D%=S+fdOAcdg
z2^@DyHdI}ZR@_ZxeoWFpOL>oW?m9`yk(FfRTgQ>dBp6ZKzBhHwdInDRn7ukJ{=Z#5
zQ<WQL-V+vBKRTzyiOo5cM|vTDC#V>)_HS>uV1;rQ^fJPjLR2_r_61J<DbRyb93>Oh
zLU#y{_6^Tsh8Oq>mS#5XO|elR_Cy~JR||1396Uqfq<k(qK}=nGM0ZV4Tm!UKw11ZI
z?E9`~#1<LC_9{AqWFFvtZhSDllJC;yOMx0L=6SkvW*EMCwrSCb_1S^;{k=Y1mB{-O
ztNF%wA%seVX)|V%h8-6{*cU~ymXefYtL<8b>e?n0@an4KCAs}EW5N!czUcTNmyDe4
zbQyr|S<UF4<>031UFHcNZzzru4E+BelCE}a>Dv{-e+Q{(q4wpg;_$b&9{Ji_yWq`4
z`arw=4z2{TN9DfM&e6{3LIz8d+xmp=8!h-W%#12B{COZ_nQ|wh+-XMhs#!wTnHZi8
zaqh4Bp+~HhIyBk$jgDjgk&%i{<~LH&3Q}C8V0buKj=EKeTPs#4t@=Q9ek_ZoCTdz8
zf59Yvbs|}UJ0P}3A)@7{3+d_oJ#ww#r>2=P;h%?v6#nP7RG)SYHKd%sI-Zs`p!8vL
z&fMtmM6}@Ea8HL+taA5yqw+D*s|oS1SDUkjW*mIVH<2cv`%Knb@q2rpQiTEi@=KO1
znTxpT8+Wp9%r`vaaZyJWNBG6*$hGF7tF$X0)B}2y_?z0MXnCnmwlZ_%V0gYD&dI)&
z?R)#yJzM(DhD;Aa=JN@d|K*c2cYQCN6ijEhQUeT$p%VQ|N{tK|O+C%wT9r_ArqD#b
z%NsM<{Fda73)xH!nEaYt-A1}qoS+<cL<%v_csm7oH?LE@&q9M1G%(}-`5=tH1o3_q
zubo<qX20vAWTI!@1qXGE^l0Xs{xNJErba1mB29kloO2w7@xr>xT@FP`D6>R|?7QJP
zrBPaJ?t+ad9vP9`bQOMZ+mzgTv}aR$?U7CAq`I}$rzF~@_+7xM%c)mZ|Di;7Jry4y
z2)9}62%)<B?>~jY$H|YrWqXryD6<aB{+g&2WOWU~Eb)SqK{e#{krIc{iAH^{w`nJN
zRO?HdV(+asrVN&u^xoeILN*MRReKBSpC>IipXDD<-Zey2iJhw-#U~Q13Ar4&<!o}S
z>Q^DS1Q%Y|F-{?>L~6Q7^9R~!GR~^>-gN|~3tYINH?J?tcuU+Ti;aLY>T(kKh7J|E
zajI_(v6dW0RiDpmNZ%zA=*ams`xCG$S-$uKTF%1APZ9ZsE?|87rAdx*K}?HL!!`rt
zDCLrK48na)>JB#rROFhvb<i2p7nsTk&yn7K6$*s&J@nA`!NFU&@}$^|h12za{&Ia0
zw^7Vu!VM5^(o9(|C#uz~84ViY`!d5F&^>-$+W1|jr+-OX&~^1+#GMi|`UI!4-h;AL
z6t4qRb}K9#pPnVlaxEcSEEQgqn~V21(S%*Pp)O(@Y#+FZkLt4iNPsSxVAIXWT+IzT
z$xff0x)p9I7%PanP8oKAOS5osIlU5kT|N^e&Vorz9`BZB3@?nxFoyZE{q5sIQiuFg
zsqam)?7Diki<m>GaV+eeELaj)5_vb)k|q-tCLd*Fj3(I=E^gQ-P3n;Ld-EDpzCPM*
z$y&{gYjkCXcfnvr`#U8WG>UG*0_0|cjJ_UgV=8?xn_qmM!D13xY0jYVL*q_T;)>a$
zt47t@n5*zy;D9|uURWhVy(E`+yN|0IDR_w00D<^JLh)a1@QL>78R=wZZ<+rk1rv7o
zG|Vn#^k#Yr_PQzM9YhFE9VO66cm8xXy3RlfTBxyZl!4#M&UKr!bhx@tc&)L5f}fuy
zCBj2NVp+g?q8X7HmFBq$-Otf!_<E`0m=WkRT00|~Y}cEr-<`4MyY6E<xLxDnS1pbX
zy-f!~zZW;c|758X8q$B}OpZ*@?qyf`%INr}mgK=K(yYIrApNvi5d5iLdxRfw2J+~z
z*s{9IAiDh56H1peRoJVmJ4ZV{v(^Z`TY3$2UZ*Nu;a#D_E+Xum$o1cY?`_@0#vV9%
zceONSlYO+}btjsW=6CK)PlgtNURh?YhDANCLNCFeWUO#&Rc(_M;B=u35~cmF?gu~Y
zzhxB5^B~S8*3EU)q2~#Y*2xV}B|oov_DJ+c%&j_C5?3{|IwV)FGmjH|5(>!Y)W8+e
z3z^xV?zyaC-DtG;iqtuSx(^llW#J@ar9<cTPAmM}`y5<&(p7NMuWXxiASNvhTYoC#
z@O0A8rH=Zt4tkY9>ALHEsN~#QqyO7Oyv4VV2S6U6H|f2<^<F5QdNy2q>3<4UKw(D3
z=GOrvW6Ggm+v#NpUgsThe$yv`;K|2Ebv3*ni+bCkX!}JwErt3r1Jw1TT>lzE44!1~
zUuC?A4t_!FS)SD58VbvLs6p$UjbG|E?64A`=a(eN0n$8F=e+X{1EwX_N>CirFwjJs
zakp1Roow*d6oO#-{IsTczj#km{j13QYjkO_?dfi<(;5T~VOp2bW!_z4Y-K70IW^TY
zMz^=0CRz%Q!>^_%wFE1;3#zmvzSTee2HZ+gi-$c}VgF03vMsu^ut$@0zcuG0*&Vq$
zL{cQ=!{d6wRkj!xmZ-}#DE#V&X>}0podkn-P*CV){u3G4L!UzdH)JFT9lZ0Eh$Kts
ziI#N#L%(pP%pT9x2_W9|uv}@>`zyy)smN&d&^=XhzsB5v#(b?&<kyb^Zl*NV8aD1b
zr7!Y~4)?nIpH81;%D>0zjO#*bIZXpIX|&dHdl(4ck{Im0|0}|?&<}p~E_@|H%!vG;
zpz^bn&WR_F)j>e(&ZqaJ@;u!h>Kcuz#1+E5A@?uXSelOMI!zB{O%9o{U8b!Von*?e
z4X=Dgfr5PBcH_h!#f|iy=%VMUUmh!dzt@%_E9w;zTwT-7O4(UEqXh|cuLbvvY4@19
zYYOxw|5*9X-mS&cl<grhY|OfsEmgHORpO|1tI%Z|`=XhpHmiCgn7VPr?UjA?Zi=+)
ziyuB3`>g-*wG{aElJi(HZ%6Fd`wte>;*Q$TvWSos+yKa{fR4d2eK}n-i9f`hT=LGH
zh)&`+m$vK31vT8-c5h%6cfn=;{^>P+<159M?Tmp_Tuk4J>;=zdlM`)xB`QVzgjJ+}
zx+34Zts+58pnpn`G5pSh*mEgjz)I*FQ^?5lhO9^%_z_^C)^p_rt&vdbY2K{yNHNJ&
zbPTeTe%j+n+cIum*5x%s4l^Ea)!O%f=$1Bk=MapXLwhX^Ufg#}&X&6QRmy@j`f^gE
zd?A;%h$m^KJ9Blx_{aM@zxK!-a9DcDz|m#CbtZoHw!xY{9pVSLJQ>?$Tepq>+0AiI
z-Ec1M^ymrYrTr?NJJr^tra9Anx+d+{$3;F7?4RzAiwU>_<8Ep~ZSuA-YJ76wFJi1=
z8W2qzuu&aQd;8!Fzh6<0nRQJ_-Em#4@s~})fKSK2CXdb~2}|=&u8r4?TSy2BTl})M
zacl9-M>%2U5mphq>;9OIEqxxpQaOe$gj`7VPS)T*cr$CJU%Qa2O3T^Go=L8{Z=t+F
zp`yHromn>IEzqrbpQKDa`m`m`EX=`ZtJRsgysHbmn_>SQO(#tWs=eVZ&V$pkZN91X
za*&hF!u>WCm7NX2KIPv?tAh7I>h62~-;)r}Wx+p&=cKIb5_hugf27aO*Utarf5GT0
zZHL9=Q90$4Qru<MzL7&hyXhS!ty)Ci%VTU4+9~6a@H(ZT=Lfv&ypIY31K)Se>=4pl
zHo^p%cX++f$6KiVKJn;`uQXpB{aV;Pri&O^{^UCD!nJ*iUo3eNR4>mT%2wH?a#omg
zV93{uePo&)n{H2X%dViZBwxc->+29D(K9Rg%vw0YmRhLq6+PvQWWbwHvg4Z|(S>d1
zBFK~rrkhQnY1=4R3#Xy9rgIqBh3#{wgy*_f#NkdjvxYN21ob~?Z76!#qIeyFm!&YS
z1^VjIF7}2N2eFIGKOnlWrN0L6zixK_9aP-W$rRj!`nY#A2D`9TlBXa_E~^fyqL<)=
zZ><_|VeaXDRCHncvH%+E=&NK!XqR~sci6C9vMin5v6m$Vlnq0nu^h&rwKJVR1r(>|
zmC_J`o@u8wf{>fgzYBoRY}p8>pL^QsrZ`<EpzG8%i_zT$bpJ8cSHtNp0NsVgSUP$G
zPf7vbr#Q*T!i79)nJ&0Z`|nXj45$ylQZfD2IB+unH@}D#Js$kusSO9J0Z?shI|f_}
zz`q~s$>G4?0r-1ItmwIdlma6y<?vEjxY-tI1k1H^#~d&q+W)Woska;l-UZ;@kFn6`
zP*WikDGrMhs5o#F05^>XVL<dzpKGcoh65)7I5`+Ay2~foK_|3h60s);!nb1JSn&6F
zvIxjJ2JRjZ^Ftpm&|LTxfWMB%?h|RWgXv{A5a@@?96{zd8H<I~4*m?n?opr@E(-x!
z$oE*$qZ7#voNAXHh`xED-%J5n%6zQov5I5|r(L`AfeyH=24ppYSnLld?7%g4u7T)Z
zJD|9CAbY3PJBt}A28N2AiGVCc-Bzp%B<dG?U{RC@hVmMLbPUM;-|YpY4V~o*Kv%yA
zRSZ}K?8{3fJ$8v0$^%3BfdKT+4?rVZ3vyUX%XJN=5%Pw$%O?U)jVe_DmdSfy;g<)B
z^4S4Y9B2+e^L$qw3<%+8t@Vn)BU}ZkQC_jeL-deIk_V3Rt^pJr=nX(`EjMEf2vKAa
zjz&;%Q=v@CtJFQPyzu~z9vT4%4vYd|RKA-f2J`@+2de=>j27*Ch|Rkr3T4<UQyCOZ
z*`(49tY~}kpxj2DB`ZKi!Jd5p3Prl}CHyN|w4y21+1P^mjl=T+|NE3LR>!URdFLW>
zoCk!_<Gi6ZR<!jeA^pa_>BD&hpn6fz7bNm`L0>?Nwh%f>VR8H%`aXnkSCUAamDbDg
zzU0e<j>3*<iANKhYyoSch2@E#VUz-jQu#+?F^X^iV!2s2pc^Vs`~k%<@1RkJHLV1o
znDDz&G)@upzii%jT?3<N4HPM_(T7BoVmRmz?|5c`y)qpIibt<5#zQ=_o{CJDI}T#m
zuMQN|&u>Bh-~;+ny)IBJ{<azWn;kt^y!FJhcj0}h7Di}oVe%aIkR}c)#3{=m!{8Nt
zWWov#Pw<+QETT9HRXe)h>t__>fMQ&}#|w<26;QOITWMeppMlOWeeaY9RyW_ln(v>c
z(4L8AYB2zdwLCv!Kq&x98Ck)5AX*zUS^&Hs;DHrY0QBB~oGB9=*b2bbe9v(VXa+#D
z?N)eg%z$y&djV=|0B8(wn_7<pCjf{&3ZO-`1b|DnSm7x?1JyWPe^C>SFoEa<0e4CW
zCSs0bli;U+*xD=-MWYKYbGu|(8t~k3hyB65AX^hlI6H`j-H|oWL{P`6z<#WFOsyTO
z)Jh0=C2#U)Z`ck$-R_+$1IED#sT4M3{cB6`nPmosGaUC<ph=8ymy3}&%l|gQbAy%$
zf$Ip#!~WpM2LkT%s2}}fAT&4HAaHGVHajujz?5VyS}%oDjDuo~uFBEGYHA1)Zb&8=
zbrU+XOyH-FY;9#l6t|nf@pQ@45BNv*LBHrO9Oc++0VhI>HGw}Zh4#a6K71A{4Fgbb
z;Ma}MFco{CA9&K1A*we^_@(77|0TG>qo5GIx5gBLqqd7RKF1aQ?^;=;5KQYek>B=H
zAv6&N)AbvsP!<%*T6aT#5&0WxQIQ>EiwzAO=u<jt{n4nQ*?%6MVqCAa<1%ot4)LoR
zF1rXa_cU85Y4{&S=zR^hK>;@gPP+7K*X*!T+^!DSGz}#%Ku~?fs#N67Vee~L(M*6x
zdv2BN!DSE_8^@Csm~0PlpgcrF23rTy9L^RMAM?=1ZvwFg%&cqZ6#`eZ*R%tp6Iw+s
zqO_oZZg}ItVhaO`UTbKtk9mxOgvmlUG9MtENDw@>wKqToSHV5c*b)fVW4ys6!%pXR
z_yW}$R-X-m<(XlaJD`b*u2NAGZb5)wH5bDKMIBWHlE5)rQSJQ+l7~^n@E(Oq;BL)2
z_*=V3attJQ&5QjoNhMFX2tkCx&CM??5CmC_E;Wmg?ll{9_P?gXnu8#FO)X7|cC*g^
EKfm=BW&i*H

literal 0
HcmV?d00001

diff --git a/apps/www/public/x-com.svg b/apps/www/public/x-com.svg
new file mode 100644
index 000000000..36748835f
--- /dev/null
+++ b/apps/www/public/x-com.svg
@@ -0,0 +1,10 @@
+<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
+<g clip-path="url(#clip0_533_43)">
+<path d="M14.2833 10.1571L23.2178 0H21.1006L13.3427 8.8193L7.14656 0H0L9.36984 13.3363L0 23.9877H2.11732L10.3098 14.6742L16.8534 23.9877H24L14.2827 10.1571H14.2833ZM11.3833 13.4538L10.4339 12.1258L2.88022 1.55881H6.1323L12.2282 10.0867L13.1776 11.4147L21.1016 22.4998H17.8495L11.3833 13.4544V13.4538Z" fill="white"/>
+</g>
+<defs>
+<clipPath id="clip0_533_43">
+<rect width="24" height="24" fill="white"/>
+</clipPath>
+</defs>
+</svg>
diff --git a/apps/www/src/app/apple-icon.png b/apps/www/src/app/apple-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..a501dc7d57d6e5a925cab728f31cf70bba33b272
GIT binary patch
literal 2903
zcmZvec{J4f8^^~Odzfr7_9b(LFp8^XOj*JegBhtwL$*oAQX>1zC}gRI(Ac7=Y04TJ
zV-3kN7%mklTTMfZ3ULYd+wc6&xxe!}_mA)Qd!Fy-dEU?SdCv1WpVtkv(+Np&m^cUo
zlC-z8b_Kq*zaCLx;C-}T7y$xF?6S8$hPf)RP|%Yq_lI24pk6=$`b9>q){OpdTKod&
zF%`27;b6IdIB<ZCc?&sM1!`Rop>@AfLu;J58&eQkUzs2`8u6yTg27JhPEA=hH*Y@e
zLfifM=guj(_OqHAlXlB}x2a&sX?6K-I{|PZmF8%34V6WCDyP9YJ=WtZTB{@+q~lOb
zTo2Oy15E4+RK6iYP)6qWWTNt`$8GOJ#*+s9YjikT=evl4z>=UY&Vh=;U3!PAfQ*xR
za$I#dITL2L^~q*lHDz**AfmlEH!l$kIV7@&)<FkDqA}tXAB#ccffqJhV+M$<mQB&O
z_zhKjIdtfR6m8{Lv8hSsg#+>$oRg~SA-dvFo@2T%?4*!rxSPm!{tZA!R-0z)CIEgv
zQu1eOtdS<La@^l!gb#S~VPR?4fNhA;UZNZIQN@iHI}K%ANhr9lg4JRLDghO_bPtCn
zp8>?{di!4-2VAW5+1nSfB-ERI<{}d1AhJ}s@n$7f0POi>VooZ@;Unab{3FExXF$Bj
zcgFTHP^Vj1YS@ob5SeeU8+<1fsOKMt`P$u+Y4!qO)hy-ovJjxKNtv3&yFfuE4KF-4
z+)1c4L(Rh}|2R;<?<2z(NaA-eBvh_kdj2b*fSd2sZBMxZ1-Kdqt33zggA)`z?Ex+O
z7tE*<@X!Gn9^t8%1`<$3VtmzyfQlYeQ^@OR5^57ojkA6LNOXw{&sYh77p-18#eHr5
z-|g<~JAy!HSte}X8N6rN_v)7Vr;cRla|$cT@k2Y4-juE6?bf(W-FwKm?=q1w+ugH(
z2PKTMclxo<GO9zT?d#WRtFd}w{w_($p8Gaw8|QKiPHW|x5i>=k)$HsPp*wFX@t;N>
zyVYF%Hq$a2JQz1OTvp@rN-AoFN8RN39C2O{n(I2kX^r2?1eE(;m*Z4p=^T7ZEH!=)
z#v;}(f<K{W9`fPNWNSi<IW%-yG<0L-f<@H#(kBC3UGH0VHrJLueQ1uUiQ9~5NZ5(L
zeI!=gM~$~M+1htQ7CtczBdyEriSveqZvTuj&wg<cFLC}Q_0#&dS&GmX!t&_O+jx!<
zl9#*RQ#`s>>9GIk>M^kALI29lt-qE}6d~haLGdZulPz&y7>_F31QfY-cm0bIJ`Rat
zv8(tI=`IyDH3gNSs&lm`cM-YdBnxA`QYDgP+AR~P5tsdWpfKxMz@S5S?}VDsrMC6O
zMU!ST>2OE?@H8P~@6>A+rVLZYfpOMiz+4=-Fy$R+51e%Oyw||3eHr!E?Uja(V9)%K
zQ4uin?wP5N(h^)Y;mHS|mKYgcce4<a=}OTPW|(?)oi+Pj^{)NN(q3|f^Os?50e?rs
z&@pK^nLbR=e@`t@6%8--7o4bulYk#-2PO#ZTAU$|Z$?m3T41`Kurp|9ZnzId=G&CP
zo(r()>~ag!*F)|;qW01@#o9H}Q#0pM-TiE{ZE@C`w(8<!wJMwPX@UJtpl^$lG}C}<
z*$rim4Lh>DOVL7OFk``~*XF<SNFY48g)%$=<z1mJG?V@|%9UEl-=F#>!#RSrQd2j}
z*#)L+A;M%nzQf@t$RFc_@jI9IM8|vD3Bp3>RArEqmOs8OP{P89-Y4pYVmeWuFM!%!
zj(|^@RuwxuFdPi}GMI{bL$_$NIT##wA#;3-ouzwH23zh@{oQIe?|UBhgJ5KD9hXfX
z1~pv@IJiV-)PznSryYs9G=i4p!P-Fo>8R1mO`38>61(Uq?#IHIw%a48y__vXB0jJw
zX3gnb(^XC2IIOXnqF49voR_hqTdo`J*CqI4O7vk(en3|^Xz-IqeGqN^Y>p9rzy7I;
zJAJuEeXJ{AAhRo90=l;zRB-4)cQ4O)8|Isb<VY%;UBv@~W~^!Lj-{FSBn3?{UHB6X
z+VtUWy-p9ehmKU-^WdKMjgiepyvW7zIs|dN)_8R6frg7<M)I?%Y2C(%#Z0(!Q8zG9
zP3{4hO|(2L`GQK3v^vrtW{rO(c^++?D1sS)%EO$U@+=ctrUVni&g1V3!ML+uW53PV
ztU>QWljqP}Izw>%ZMDy(6`sqfGVE;2A*e$dYm+!~)T?q<fN;cUwm;weg&O$Jiw1u6
zZde*JjwSe4H&t6|0kL`c-L_nc0-;ohZnD@GEuO~ceR}#CM8k(cZ7(nt^6cwWJjn5r
zQCg{I%s*5Rky3#g(1#fX{v(SL<R8UM21_4A?@g9c%>?FVg9V$?JcRQ+5LEWX5;yAa
z*VUu`5XN+T)Z4p&pZgH4!)czwFtZsf**14SZb1Y3;TdJIaGM6~Xg|#*ySfT-N^W>L
z7{a0yGv>KHPucRF5=|21{d!fuA`(TUSx=OnviAz@YKqbh-I->oqXq##cDXF-T)!eo
z%ri-c;|U3DE@xCAd|J{U1E&Dj+qt@9dv>~0DdWFMb9KWuuF*vgV0cw@Mq`62RtcY1
zg@}aeQ=W^4i^yVtO4gPpjW&NQUdEou#^;6K4w?$t%@Z>qydRv%Go6LoF|I{{8z^SE
za|Nh9^fCs&-g#m${rY7tn5sn#w1&NDYj?$(*AWUqGr2IvQ?{UK>Blxmbh;N~o*%#!
zn^JU<!DYY*Sb4TzS&}983Y^5uRf3a|tpe6k9>*W<-dsi;=OXKu2xNEc8ak__q-1JM
zLD1}HaorVg3cirOk?+qgJbX&QzyrF_@t9F_{$;Ay)-563AFFh-uy14JQjW!CE+p|x
z-Dz6b_vF2uVj45A{4CGveUrHMyC=tp`;%$AziS7Wpq8mee_dtv)LnezyS1^32>Ea%
zGFO>j^0lrw`aWXzk1RBt)a}!kV|eLPul(s}{uy45>fdG)DWCl&m|<4#<!3(KByjq_
z%N*n|=8HtCqgMkPqE{JHJ@%FOR)u>KMSbKf)V<5xh+@pBr!XY;dB|i=t`R=E$NTD4
zj|zM%AE~2x(_k^G^ebz3%x%WJS6h=pcK;fs<BF;=-ORE8xs1AQn^1Dop!%7M9R2~F
zO2lYjfxD40V8TBxR3pSP#+mt70&MZ&JWfo8fQt{fXZZid%z~^+t_E2RE`l$u0Fj;E
zAM3Jo5&$1{l4`N@1bB#*n4VAoU`l~XER_Y^zgI*KzYO_$6ino-6u9YfEE+EwoBxYZ
zFCIQnlsAxp%CEO<{U{b54;U%`V(dtV$6Fw@t;C@OD}S6_HVPLyhQ0|Izdfelx|gGH
z*6fZp*~~X0hGEeHBx42s4hIw8{#0>;|C`}SKq|Wd^zvw4Wp+OR5qo;uyD$LVJU;Y_
zDFJ-1*HoGO(;o*x&$klFk5M`R&Df=TDaHc~5g+brL<JZ^+l1o1?gB8x5VhI*KEM#2
zDWV;A2pw=?DREb{mXPR*b#K+tUmTKIZ^F9)M9S)Q{Lle%*pGJ=!vV;0E_Hkq(Xyu;
zXxW*IiXQTStNbX_xfV!9DEIcl0wGw;EOKZc04#M$WUNb@IR|@w3W;gU2Sdj5?=1W#
z42103Z!8=F^d`i$=7FNzx-<y1vvbH#^*MmY!oRp!5R?_z308Gh{DsXRdmAU~isN3C
FzX3_`Q6c~U

literal 0
HcmV?d00001

diff --git a/apps/www/src/app/favicon.ico b/apps/www/src/app/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a21b640c1e28999dbec19f88eeb554710199c97a
GIT binary patch
literal 15086
zcmeI2&r2*v5XXC6MM1??R78X<LNLcigdiRy-t@2VT^{5tcrX|D6uf!WKS0Pu!H7tB
z7ykwk6e3|kgm~}=q7p>y^rv5H-)uX*JMNCVGszb8_D)Y%)wil^YHE5$sf^014<D52
z^Xk`cmHI&`mCyfsoKxygGnO+w=YMKf>K8NNJ2S_ysE?*GULzsqXVX5L_Lph8K@DB#
zL^l}TN)v`*)3iq6t)>SoV2VPY%%p1anspv*m5B9f7PhE*!5BtK_PcAFyAH&bJ16PK
z!Rui&h4{e?k)M+8Yac$ar{S9Q;RieS3E%mok2m_h8n-{VPsc5@C9mbvRtzL02HM)%
z^u)x3o|~HsZ8I}7y1TpEyIzx%lc9XGv$MLVr^m||S6=Du?bTabTiQo=cXxVaWkq*%
zbcABLxw#2teR_J**bo;^pPc^we!aiHABsT+A0HpB4Vg@)3=hXIFE29fRnMCG^u{$F
z1wX*R$vUuJqB~9avElai*4mI({K0i-Z*SLW^FR0@xgN+%&5r-h&Q86)zOJ92pDh;f
zxa|w-@?Y{&p-`xZe|~=6t`Y0xHi^NwdRM+2gTY7Gi4E8iMy?;^7+>Ktd>0pfpB!?a
zkHA9=k(Y?6w-7m-+~?C9*LXGjtP|HVHegRwN)mqY6*iD#qfip@b8m~f4oSq%IuK9T
zQ0;nX6n<(jYOye)c9Yl%_SAaV;LA(MqGk-%B0>H*|5F2FLs)%H?d;P<UZVC6<714P
zo!Z^U-x_c2TeM=}KM@0I-h%^s+V^kMzJJa;fVAExzz(JP{So-n{{9Xdcqf^bI09=J
zrQuozV<k%RI{5tV+Qap*X<Aa^2`s_))h=G&G5JZ}QF5<qls)K*^!>~W$XAs5oBkW6
zZs_}zD$;i<bwHn0sz9Il+H=^VuO2AyH{hQGj*Z`n^u~|kSMjs>odC(3_M>TU{7!4y
zu&kT*hiP%e6|#_t>`KI(xODpDpd*ZaH-kQ&xW~~Iq(<27+8};lP26*hI+j>#ls;Dv
zK8Q2UUHR3Ho2k1Rw*T#U_O}KG2K3n2SgDPUj=p-Y%zoeC;9zME^WkG(yq;@{J-F@d
zZGC)vTxy4hhkAK=S?6-OlI-E(VZFDvSDM58-Q8V_p&tF{I669dwe@*@eQozQ1;hCG
zxIR5SEt>}h{7{d6-fx8IM^O;Nd+GPtFNR)SU0FY{kNO_=vv<3*vtwl=pLTY3rtk0X
z1%d{{#>R#|KR+*x@uyfU>Zz$Ijc=q44GrmRHXC_Om<x~a(<2kvK|(hez#;@junKN^
zY^nE~3}TAd3KFte1NPj57=m;7Pb^8y)*6>S{rCpiU?4Wb2>tcGv#X>Zn<`<5!+!D_
zxh0sB$UWpB@hKR{QRJ%NJaQR1P3G0olT+QCOzw5RuOZIJ)%Z&qe64pDO{?*$t$Q<T
zAbBpShVi}5Q-3zQ{x%Tov)Oyu=#wkYALxgg`TX?-L1X;j+AX@JmuI3luM3HDWS5cI
zKj<r(orD9kt5C2z4P~ceKS0NU(N#1$(ak<Z&a}K~5%wv*H`9JIjcpEJT*)|dm<ta?
zAB9i&rH2PzWXafDdw6TnEqdzV6&beYKD@ZNXuqFYSXi*nDqUS&dTD9Nj!jQbm(6!=
z9vK<Y7Z(?{%#rWmr~xi7FYOrLWw|`TWA51}Cnt9P!^4C9-eYZTtyDX$uCCfzsjsgu
z^q$RqoO9Gu%!R1CkO3ZKf(0Gu3hH+MgB4;vHc-RK_b1qhtu9aS7+)a+-{C`Q6nx4U
qKCZXs3F<Qc>xlt)>y2Nofm$%Y1204mjwo^jv*j(AJ<wVS-hTkn<~aWV

literal 0
HcmV?d00001

diff --git a/apps/www/src/app/icon0.svg b/apps/www/src/app/icon0.svg
new file mode 100644
index 000000000..af4962acb
--- /dev/null
+++ b/apps/www/src/app/icon0.svg
@@ -0,0 +1,17 @@
+<svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" width="1000" height="1000"><style>
+    #light-icon {
+      display: inline;
+    }
+    #dark-icon {
+      display: none;
+    }
+
+    @media (prefers-color-scheme: dark) {
+      #light-icon {
+        display: none;
+      }
+      #dark-icon {
+        display: inline;
+      }
+    }
+  </style><g id="light-icon"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" width="1000" height="1000"><g clip-path="url(#SvgjsClipPath1085)"><rect width="1000" height="1000" fill="#ffffff"></rect><g transform="matrix(0.9505703422053232,0,0,0.9505703422053232,0,0)"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" width="1052" height="1052" viewBox="0 0 1052 1052"><image width="1052" height="1052" xlink:href="data:image/png;base64,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"></image></svg></g></g><defs><clipPath id="SvgjsClipPath1085"><rect width="1000" height="1000" x="0" y="0" rx="250" ry="250"></rect></clipPath></defs></svg></g><g id="dark-icon"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" width="1000" height="1000"><g clip-path="url(#SvgjsClipPath1086)"><rect width="1000" height="1000" fill="#000000"></rect><g transform="matrix(0.9505703422053232,0,0,0.9505703422053232,0,0)"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" width="1052" height="1052" viewBox="0 0 1052 1052"><image width="1052" height="1052" xlink:href="data:image/png;base64,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"></image></svg></g></g><defs><clipPath id="SvgjsClipPath1086"><rect width="1000" height="1000" x="0" y="0" rx="250" ry="250"></rect></clipPath></defs></svg></g></svg>
\ No newline at end of file
diff --git a/apps/www/src/app/icon1.png b/apps/www/src/app/icon1.png
new file mode 100644
index 0000000000000000000000000000000000000000..b67264abef186e7ed452bf827c9b1578f298c805
GIT binary patch
literal 1185
zcmeAS@N?(olHy`uVBq!ia0vp^2_VeD1|%QND7Ro>U<vbdaSW+od^5{7=(T}J>w0FM
z|0X&OZM+vYvRIWdm^e5dW#AQY5R^(-q0zv0gHhIdK{7K)L4Di&Ju>{WDkncznWpsG
zs;d3rG2xrnCZ1njz4qdgpvUu9F^fI~5-ba{_H!@_G;Cr%_2~=)Q$U$R<UC0ShEseR
zr;V9891b=Lc^WZKNfcmU)UaNlbDl?mA(ef~)0vDc3*IzrvN3L8m?9f6EuHO;J;Rjw
zTb2NgNHt(VXurvrTA7Bfm6bW;dTk~{O>OPT<Hy_g?BBngH|G1#pEuv#jGFiV-@kKf
z(~q&-oj-s6w7<9J>998Z{#_jz8#{IBQq{<~xIF0{d8w(c@7}%3nQy*VZbN^6fAQ<T
zw#)YJwPoD1MVVjz6+^<Yg9jTAOgMeo`=oSwdb*LV?b{T`tx;3Ie*JnUD$Pe+Tzu2!
z&C227;eNX!%~vuX$f>HSnG&^jn(4l2x%~Y6y64U3)zsBZyL<QU6_@KmZ6D*}<IT(7
z{)v@s=>E9Qzq+DAgX8+|v$b~jnO`xSaTcv~nQ3hN|K-b-9-6QBEoT4l>zCGwpB&lc
zOm_rq8~*;Sb=-07&mu_|ZU*D~Q|3;eK7CPb$vb;5h7~_&eC0?_XSyq)+K^Q{w|`dr
zvzhrn+*l7Bx4JJO{7OQUVa-Rug=ao56lP_(QuFx`@5Xcfla921&y<hlXIL$JrP}3}
z3!~k#Wy|)gEU{%+QzEeN+Rx9QKR11FJs{1n#zIU?OvO`ZwS<g}Pq}KYd`3lu#ods@
z?^L$rzMnsP_T=r`x0eVD{0^*q{O3>1g51^D-&Ex@YzXbnP<yg@@A~!rW@cuWKHOaI
z7JrZ7&b@nV(*Lhro2Jm#*4C6Mruu}JA!x@6$60mm?(Ua2ZQi?AckkZ4%XY5rzsJy0
zkeHk6E1<Z=DYJql;Le1=&mT7(JtHqEsp;pj@cAX?16|Bt<rY5he>iC=dqSA?#w&l^
z7A<9Mn3;ddk7xB<x5sC{2QfLEH8;M`V{$E7lX1a4<)nE()10PqIrO})NiNyE*qmXi
z*YnuK-u?`;i2H9nC;fPLY1jU9vA?IznK^Ufym|BP=a;dALThX6b70E2-FbDr-z1k~
z$BxZ89{v8%?fvEqn>TNMX~wuMYvbh%;UBpgS^G{0-@S9^#G^-xZoGKdzV}CNhUBzu
z_ZSks<>%#{I(f1)bk4kaTs(!Q$wfs*e-rh8om|}ey05P<B`N7p>v#L_CAS{%GO#s$
zcc`!5&%?v>gfE7_V#j^cfI}Dj<zi!=bKNejS^MrY*Mg}6=Tog67;f%k$yRMh2utS{
zbl9eUFp5)Q#?_lnEEC>(ZwO=JNGshYz?kw|Xw6iHrpURvSLQNon!i*#n$tm28g~W-
z=P-xw3;}YP;M})?Q0~iR5UKse4=i8)|L>Ym4Pvl?N*HDa#^Ss@PT313KoJH{S3j3^
HP6<r_tVtPW

literal 0
HcmV?d00001

diff --git a/apps/www/src/app/manifest.json b/apps/www/src/app/manifest.json
new file mode 100644
index 000000000..3543d960e
--- /dev/null
+++ b/apps/www/src/app/manifest.json
@@ -0,0 +1,21 @@
+{
+  "name": "Voidhash",
+  "short_name": "Voidhash",
+  "icons": [
+    {
+      "src": "/web-app-manifest-192x192.png",
+      "sizes": "192x192",
+      "type": "image/png",
+      "purpose": "maskable"
+    },
+    {
+      "src": "/web-app-manifest-512x512.png",
+      "sizes": "512x512",
+      "type": "image/png",
+      "purpose": "maskable"
+    }
+  ],
+  "theme_color": "#ffffff",
+  "background_color": "#ffffff",
+  "display": "standalone"
+}
diff --git a/apps/www/src/components/auth-shader.tsx b/apps/www/src/components/auth-shader.tsx
new file mode 100644
index 000000000..c2d5ebbfe
--- /dev/null
+++ b/apps/www/src/components/auth-shader.tsx
@@ -0,0 +1,155 @@
+import { lazy, Suspense, type ComponentProps } from "react";
+import { type ShaderLabConfig } from "@basementstudio/shader-lab";
+
+type ShaderLabCompositionProps = ComponentProps<
+  typeof import("@basementstudio/shader-lab").ShaderLabComposition
+>;
+
+const ShaderLabComposition = import.meta.env.SSR
+  ? null
+  : lazy(async () => {
+      const module = await import("@basementstudio/shader-lab");
+
+      return {
+        default: module.ShaderLabComposition,
+      };
+    });
+
+const config: ShaderLabConfig = {
+  layers: [
+    {
+      blendMode: "normal",
+      compositeMode: "filter",
+      maskConfig: {
+        invert: false,
+        mode: "multiply",
+        source: "luminance",
+      },
+      hue: 1,
+      id: "c111758c-4650-48be-85fc-a16b2b665dc8",
+      kind: "effect",
+      name: "Fluted Glass",
+      opacity: 1,
+      params: {
+        preset: "painterly",
+        frequency: 36,
+        amplitude: 0.078,
+        warp: 0,
+        irregularity: 0,
+        angle: 0,
+      },
+      saturation: 1.44,
+      type: "fluted-glass",
+      visible: true,
+    },
+    {
+      blendMode: "normal",
+      compositeMode: "filter",
+      maskConfig: {
+        invert: false,
+        mode: "multiply",
+        source: "luminance",
+      },
+      hue: 0,
+      id: "99109d60-a6ce-44a8-9832-24905d6c14bb",
+      kind: "effect",
+      name: "Pattern",
+      opacity: 0.42,
+      params: {
+        cellSize: 11,
+        preset: "bars",
+        colorMode: "source",
+        monoColor: "#f5f5f0",
+        bgOpacity: 0.16,
+        invert: false,
+        customColorCount: 4,
+        customLuminanceBias: 0,
+        customBgColor: "#F5F5F0",
+        customColor1: "#0d1014",
+        customColor2: "#4d5057",
+        customColor3: "#969aa2",
+        customColor4: "#e1e2de",
+        bloomEnabled: true,
+        bloomIntensity: 0.93,
+        bloomThreshold: 0.13,
+        bloomRadius: 9.5,
+        bloomSoftness: 0.7,
+      },
+      saturation: 1.23,
+      type: "pattern",
+      visible: false,
+    },
+    {
+      blendMode: "normal",
+      compositeMode: "filter",
+      maskConfig: {
+        invert: false,
+        mode: "multiply",
+        source: "luminance",
+      },
+      hue: 0,
+      id: "a924d323-7026-4b54-8738-355ef0d17009",
+      kind: "source",
+      name: "Gradient",
+      opacity: 1,
+      params: {
+        preset: "custom",
+        activePoints: 4,
+        point1Color: "#09090B",
+        point1Position: [-0.94, -0.26],
+        point1Weight: 3,
+        point2Color: "#005EFF",
+        point2Position: [-0.49, 0.44999999999999996],
+        point2Weight: 0.27,
+        point3Color: "#B74394",
+        point3Position: [0.8399999999999999, 0.6600000000000001],
+        point3Weight: 0.07,
+        point4Color: "#FF8400",
+        point4Position: [1.15, 1.02],
+        point4Weight: 0.6,
+        point5Color: "#e6ebe0",
+        point5Position: [0.6, -0.8],
+        point5Weight: 1,
+        noiseType: "turbulence",
+        noiseSeed: 39.5,
+        warpAmount: 0.04,
+        warpScale: 0.28,
+        warpIterations: 2,
+        warpDecay: 1.2,
+        warpBias: 0.5,
+        vortexAmount: 0,
+        animate: true,
+        motionAmount: 0.51,
+        motionSpeed: 0.21,
+        falloff: 3.5,
+        tonemapMode: "totos",
+        glowStrength: 0,
+        glowThreshold: 0,
+        grainAmount: 0,
+        vignetteStrength: 0,
+        vignetteRadius: 0,
+        vignetteSoftness: 0.74,
+      },
+      saturation: 1.52,
+      type: "gradient",
+      visible: true,
+    },
+  ],
+  timeline: {
+    duration: 8,
+    loop: true,
+    tracks: [],
+  },
+};
+
+export function AuthShader() {
+  if (!ShaderLabComposition) {
+    return <div className="absolute inset-0 bg-[#09090b]" />;
+  }
+
+  return (
+    <Suspense fallback={<div className="absolute inset-0 bg-[#09090b]" />}>
+      <ShaderLabComposition config={config as ShaderLabCompositionProps["config"]} />
+    </Suspense>
+  );
+}
diff --git a/apps/www/src/components/default-catch-boundary.tsx b/apps/www/src/components/default-catch-boundary.tsx
new file mode 100644
index 000000000..c73379adc
--- /dev/null
+++ b/apps/www/src/components/default-catch-boundary.tsx
@@ -0,0 +1,42 @@
+import type { ErrorComponentProps } from "@tanstack/react-router";
+import { ErrorComponent, Link, rootRouteId, useMatch, useRouter } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui";
+
+export function DefaultCatchBoundary({ error }: ErrorComponentProps) {
+  const router = useRouter();
+  const isRoot = useMatch({
+    select: (state) => state.id === rootRouteId,
+    strict: false,
+  });
+
+  return (
+    <div className="flex min-h-screen flex-col items-center justify-center gap-4 p-4">
+      <ErrorComponent error={error} />
+      <div className="flex flex-wrap items-center gap-2">
+        <Button
+          onClick={() => {
+            router.invalidate();
+          }}
+          variant="secondary"
+        >
+          Try Again
+        </Button>
+        {isRoot ? (
+          <Button asChild>
+            <Link to="/">Home</Link>
+          </Button>
+        ) : (
+          <Button
+            onClick={(event) => {
+              event.preventDefault();
+              window.history.back();
+            }}
+            variant="outline"
+          >
+            Go Back
+          </Button>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/components/grain-gradient.tsx b/apps/www/src/components/grain-gradient.tsx
new file mode 100644
index 000000000..d83331830
--- /dev/null
+++ b/apps/www/src/components/grain-gradient.tsx
@@ -0,0 +1,28 @@
+import { lazy, Suspense, type ComponentProps } from "react";
+
+type GrainGradientProps = ComponentProps<typeof import("@paper-design/shaders-react").GrainGradient>;
+
+const ClientGrainGradient = import.meta.env.SSR
+  ? null
+  : lazy(async () => {
+      const module = await import("@paper-design/shaders-react");
+
+      return {
+        default: module.GrainGradient,
+      };
+    });
+
+/**
+ * Renders the Paper Design grain shader only in the browser.
+ */
+export function GrainGradient(props: GrainGradientProps) {
+  if (!ClientGrainGradient) {
+    return null;
+  }
+
+  return (
+    <Suspense fallback={null}>
+      <ClientGrainGradient {...props} />
+    </Suspense>
+  );
+}
diff --git a/apps/www/src/components/not-found.tsx b/apps/www/src/components/not-found.tsx
new file mode 100644
index 000000000..539a76646
--- /dev/null
+++ b/apps/www/src/components/not-found.tsx
@@ -0,0 +1,21 @@
+import { Link } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui";
+
+export function NotFound({ children }: { children?: React.ReactNode }) {
+  return (
+    <div className="flex min-h-screen flex-col items-center justify-center gap-4 p-4">
+      <h1 className="text-4xl font-bold">404</h1>
+      <div className="text-muted-foreground">
+        {children || <p>The page you are looking for does not exist.</p>}
+      </div>
+      <div className="flex flex-wrap items-center gap-2">
+        <Button onClick={() => window.history.back()} variant="outline">
+          Go Back
+        </Button>
+        <Button asChild>
+          <Link to="/">Start Over</Link>
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/components/voidhash-gradient-background.tsx b/apps/www/src/components/voidhash-gradient-background.tsx
new file mode 100644
index 000000000..9450994f6
--- /dev/null
+++ b/apps/www/src/components/voidhash-gradient-background.tsx
@@ -0,0 +1,224 @@
+"use client";
+
+import { lazy, Suspense, useCallback, useEffect, useMemo, useState, type CSSProperties } from "react";
+
+import { cn } from "@/lib/utils";
+
+import { VoidhashGradientControls } from "./voidhash-gradient-controls";
+import {
+  DEFAULT_VOIDHASH_GRADIENT_SETTINGS,
+  mergeVoidhashGradientSettings,
+  VOIDHASH_GRADIENT_CONTROLS_STORAGE_KEY,
+  VOIDHASH_GRADIENT_STORAGE_KEY,
+  type VoidhashGradientSettings,
+} from "./voidhash-gradient-settings";
+
+const VoidhashGradientCanvas = lazy(async () => {
+  const module = await import("./voidhash-gradient-canvas");
+
+  return {
+    default: module.VoidhashGradientCanvas,
+  };
+});
+
+type VoidhashGradientPlacement = "bottom" | "top";
+type ReadyPlacements = Record<VoidhashGradientPlacement, boolean>;
+
+function getFadeMask(settings: VoidhashGradientSettings, placement: VoidhashGradientPlacement) {
+  const start = Math.min(settings.fadeStart, settings.fadeEnd - 1);
+  const end = Math.max(settings.fadeEnd, start + 1);
+  const mid = start + (end - start) * 0.35;
+  const direction = placement === "top" ? "to top" : "to bottom";
+
+  return `linear-gradient(${direction}, transparent 0%, transparent ${start}%, rgba(0, 0, 0, 0.12) ${mid}%, black ${end}%, black 100%)`;
+}
+
+function getLayerStyle(settings: VoidhashGradientSettings, placement: VoidhashGradientPlacement): CSSProperties {
+  return {
+    [placement]: `${placement === "top" ? settings.topOffset : settings.bottomOffset}%`,
+    filter: `blur(${settings.blur}px)`,
+    height: `${settings.effectHeight}%`,
+    maskImage: getFadeMask(settings, placement),
+    WebkitMaskImage: getFadeMask(settings, placement),
+  };
+}
+
+function VoidhashGradientEntryVeil({ isVisible }: { isVisible: boolean }) {
+  return (
+    <div
+      aria-hidden
+      className={cn(
+        "pointer-events-none absolute inset-0 z-20 bg-black transition-opacity duration-1000 ease-out motion-reduce:transition-none",
+        isVisible ? "opacity-100" : "opacity-0",
+      )}
+    />
+  );
+}
+
+function VoidhashGradientLayer({
+  isRevealed,
+  onReady,
+  placement,
+  settings,
+}: {
+  isRevealed: boolean;
+  onReady: (placement: VoidhashGradientPlacement) => void;
+  placement: VoidhashGradientPlacement;
+  settings: VoidhashGradientSettings;
+}) {
+  const [isCanvasReady, setIsCanvasReady] = useState(false);
+
+  return (
+    <div aria-hidden className="absolute inset-x-[-10%] overflow-hidden" style={getLayerStyle(settings, placement)}>
+      <div
+        className={cn(
+          "absolute inset-0 transition-[opacity,transform] duration-1000 ease-out will-change-[opacity,transform]",
+          isCanvasReady && isRevealed ? "translate-y-0 opacity-100" : "translate-y-4 opacity-0",
+        )}
+      >
+        <VoidhashGradientCanvas
+          inverted={placement === "top"}
+          onReady={() => {
+            setIsCanvasReady(true);
+            onReady(placement);
+          }}
+          seed={placement === "top" ? settings.topSeed : settings.bottomSeed}
+          settings={settings}
+        />
+      </div>
+    </div>
+  );
+}
+
+export type VoidhashGradientBackgroundProps = {
+  className?: string;
+  controlsQueryParam?: string;
+  controlsStorageKey?: string;
+  controlsTitle?: string;
+  settings?: Partial<VoidhashGradientSettings>;
+  settingsStorageKey?: string;
+};
+
+/** Renders the reusable blurred Three.js gradient background used across Voidhash surfaces. */
+export function VoidhashGradientBackground({
+  className,
+  controlsQueryParam = "gradientControls",
+  controlsStorageKey = VOIDHASH_GRADIENT_CONTROLS_STORAGE_KEY,
+  controlsTitle = "Gradient FX",
+  settings: settingsProp,
+  settingsStorageKey = VOIDHASH_GRADIENT_STORAGE_KEY,
+}: VoidhashGradientBackgroundProps) {
+  const baseSettings = useMemo(
+    () => mergeVoidhashGradientSettings(settingsProp ?? DEFAULT_VOIDHASH_GRADIENT_SETTINGS),
+    [settingsProp],
+  );
+  const [isMounted, setIsMounted] = useState(false);
+  const [canDropEntryVeil, setCanDropEntryVeil] = useState(false);
+  const [hasRevealed, setHasRevealed] = useState(false);
+  const [readyPlacements, setReadyPlacements] = useState<ReadyPlacements>({ bottom: false, top: false });
+  const [settings, setSettings] = useState<VoidhashGradientSettings>(baseSettings);
+  const [showControls, setShowControls] = useState(false);
+
+  useEffect(() => {
+    setIsMounted(true);
+
+    const params = new URLSearchParams(window.location.search);
+    const controlsEnabled = params.has(controlsQueryParam) || localStorage.getItem(controlsStorageKey) === "1";
+    const savedSettings = localStorage.getItem(settingsStorageKey);
+
+    if (savedSettings) {
+      try {
+        setSettings(mergeVoidhashGradientSettings(JSON.parse(savedSettings), baseSettings));
+      } catch {
+        localStorage.removeItem(settingsStorageKey);
+      }
+    }
+
+    if (controlsEnabled) {
+      setShowControls(true);
+      localStorage.setItem(controlsStorageKey, "1");
+    }
+  }, [baseSettings, controlsQueryParam, controlsStorageKey, settingsStorageKey]);
+
+  useEffect(() => {
+    if (!isMounted) {
+      return;
+    }
+
+    const veilTimer = window.setTimeout(() => setCanDropEntryVeil(true), 1800);
+
+    return () => window.clearTimeout(veilTimer);
+  }, [isMounted]);
+
+  useEffect(() => {
+    if (isMounted && showControls) {
+      localStorage.setItem(settingsStorageKey, JSON.stringify(settings));
+    }
+  }, [isMounted, settings, settingsStorageKey, showControls]);
+
+  const handleLayerReady = useCallback((placement: VoidhashGradientPlacement) => {
+    setReadyPlacements((current) => {
+      if (current[placement]) {
+        return current;
+      }
+
+      return { ...current, [placement]: true };
+    });
+  }, []);
+
+  const isShaderReady = readyPlacements.bottom && (!settings.topEnabled || readyPlacements.top);
+
+  useEffect(() => {
+    if (!hasRevealed && isMounted && (isShaderReady || canDropEntryVeil)) {
+      setHasRevealed(true);
+    }
+  }, [canDropEntryVeil, hasRevealed, isMounted, isShaderReady]);
+
+  const rootClassName = cn("relative isolate h-full w-full overflow-hidden bg-black", className);
+
+  if (!isMounted) {
+    return (
+      <div className={rootClassName}>
+        <VoidhashGradientEntryVeil isVisible={!hasRevealed} />
+      </div>
+    );
+  }
+
+  return (
+    <div className={rootClassName}>
+      <Suspense fallback={null}>
+        <VoidhashGradientLayer
+          isRevealed={hasRevealed}
+          onReady={handleLayerReady}
+          placement="bottom"
+          settings={settings}
+        />
+        {settings.topEnabled ? (
+          <VoidhashGradientLayer
+            isRevealed={hasRevealed}
+            onReady={handleLayerReady}
+            placement="top"
+            settings={settings}
+          />
+        ) : null}
+      </Suspense>
+      <VoidhashGradientEntryVeil isVisible={!hasRevealed} />
+
+      {showControls ? (
+        <VoidhashGradientControls
+          onChange={setSettings}
+          onHide={() => {
+            setShowControls(false);
+            localStorage.removeItem(controlsStorageKey);
+          }}
+          onReset={() => {
+            setSettings(baseSettings);
+            localStorage.removeItem(settingsStorageKey);
+          }}
+          settings={settings}
+          title={controlsTitle}
+        />
+      ) : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/components/voidhash-gradient-canvas.tsx b/apps/www/src/components/voidhash-gradient-canvas.tsx
new file mode 100644
index 000000000..3c437287c
--- /dev/null
+++ b/apps/www/src/components/voidhash-gradient-canvas.tsx
@@ -0,0 +1,328 @@
+"use client";
+
+import { Canvas, useFrame } from "@react-three/fiber";
+import { useEffect, useMemo, useRef } from "react";
+import * as THREE from "three";
+
+import type { VoidhashGradientSettings } from "./voidhash-gradient-settings";
+
+const vertexShader = `
+uniform float uTime;
+uniform float uAmplitude;
+uniform float uFrequency;
+uniform float uMidFrequency;
+uniform float uHighFrequency;
+uniform float uLift;
+uniform float uSeed;
+
+varying vec2 vUv;
+varying vec3 vNormal;
+varying vec3 vViewPosition;
+varying float vWave;
+
+vec4 mod289(vec4 x) {
+  return x - floor(x * (1.0 / 289.0)) * 289.0;
+}
+
+vec3 mod289(vec3 x) {
+  return x - floor(x * (1.0 / 289.0)) * 289.0;
+}
+
+vec4 permute(vec4 x) {
+  return mod289(((x * 34.0) + 10.0) * x);
+}
+
+vec4 taylorInvSqrt(vec4 r) {
+  return 1.79284291400159 - 0.85373472095314 * r;
+}
+
+float snoise(vec3 v) {
+  const vec2 c = vec2(1.0 / 6.0, 1.0 / 3.0);
+  const vec4 d = vec4(0.0, 0.5, 1.0, 2.0);
+
+  vec3 i = floor(v + dot(v, c.yyy));
+  vec3 x0 = v - i + dot(i, c.xxx);
+
+  vec3 g = step(x0.yzx, x0.xyz);
+  vec3 l = 1.0 - g;
+  vec3 i1 = min(g.xyz, l.zxy);
+  vec3 i2 = max(g.xyz, l.zxy);
+
+  vec3 x1 = x0 - i1 + c.xxx;
+  vec3 x2 = x0 - i2 + c.yyy;
+  vec3 x3 = x0 - d.yyy;
+
+  i = mod289(i);
+  vec4 p = permute(permute(permute(
+    i.z + vec4(0.0, i1.z, i2.z, 1.0))
+    + i.y + vec4(0.0, i1.y, i2.y, 1.0))
+    + i.x + vec4(0.0, i1.x, i2.x, 1.0));
+
+  float n_ = 0.142857142857;
+  vec3 ns = n_ * d.wyz - d.xzx;
+
+  vec4 j = p - 49.0 * floor(p * ns.z * ns.z);
+
+  vec4 x_ = floor(j * ns.z);
+  vec4 y_ = floor(j - 7.0 * x_);
+
+  vec4 x = x_ * ns.x + ns.yyyy;
+  vec4 y = y_ * ns.x + ns.yyyy;
+  vec4 h = 1.0 - abs(x) - abs(y);
+
+  vec4 b0 = vec4(x.xy, y.xy);
+  vec4 b1 = vec4(x.zw, y.zw);
+
+  vec4 s0 = floor(b0) * 2.0 + 1.0;
+  vec4 s1 = floor(b1) * 2.0 + 1.0;
+  vec4 sh = -step(h, vec4(0.0));
+
+  vec4 a0 = b0.xzyw + s0.xzyw * sh.xxyy;
+  vec4 a1 = b1.xzyw + s1.xzyw * sh.zzww;
+
+  vec3 p0 = vec3(a0.xy, h.x);
+  vec3 p1 = vec3(a0.zw, h.y);
+  vec3 p2 = vec3(a1.xy, h.z);
+  vec3 p3 = vec3(a1.zw, h.w);
+
+  vec4 norm = taylorInvSqrt(vec4(
+    dot(p0, p0),
+    dot(p1, p1),
+    dot(p2, p2),
+    dot(p3, p3)
+  ));
+  p0 *= norm.x;
+  p1 *= norm.y;
+  p2 *= norm.z;
+  p3 *= norm.w;
+
+  vec4 m = max(0.6 - vec4(
+    dot(x0, x0),
+    dot(x1, x1),
+    dot(x2, x2),
+    dot(x3, x3)
+  ), 0.0);
+  m = m * m;
+
+  return 42.0 * dot(m * m, vec4(
+    dot(p0, x0),
+    dot(p1, x1),
+    dot(p2, x2),
+    dot(p3, x3)
+  ));
+}
+
+float surfaceHeight(vec2 p, float time) {
+  vec2 seedOffset = vec2(uSeed * 1.37, uSeed * -0.73);
+  vec2 q = vec2(p.x * uFrequency, p.y * uFrequency * 2.55) + seedOffset;
+  float seedTime = time + uSeed * 0.11;
+  float low = snoise(vec3(q, seedTime));
+  float mid = snoise(vec3(q * uMidFrequency + vec2(7.4, -3.2) + seedOffset * 0.43, seedTime * 1.65));
+  float high = snoise(vec3(q * uHighFrequency + vec2(-2.0, 5.7) - seedOffset * 0.26, seedTime * 2.4));
+
+  return (low * 0.62 + mid * 0.28 + high * 0.1) * uAmplitude;
+}
+
+void main() {
+  vUv = uv;
+
+  float lift = smoothstep(0.02, 0.92, uv.y);
+  float height = surfaceHeight(position.xy, uTime) * (0.72 + lift * 0.62);
+  float epsilon = 0.08;
+  float heightX = surfaceHeight(position.xy + vec2(epsilon, 0.0), uTime);
+  float heightY = surfaceHeight(position.xy + vec2(0.0, epsilon), uTime);
+
+  vec3 displaced = position;
+  displaced.y += lift * uLift;
+  displaced.z += height;
+
+  vec3 displacedNormal = normalize(vec3(
+    (height - heightX) / epsilon,
+    (height - heightY) / epsilon,
+    1.0
+  ));
+
+  vec4 mvPosition = modelViewMatrix * vec4(displaced, 1.0);
+
+  vNormal = normalize(normalMatrix * displacedNormal);
+  vViewPosition = -mvPosition.xyz;
+  vWave = height;
+
+  gl_Position = projectionMatrix * mvPosition;
+}
+`;
+
+const fragmentShader = `
+uniform vec3 uBaseColor;
+uniform vec3 uFresnelColor;
+uniform float uFresnelPower;
+uniform float uFresnelStrength;
+uniform float uHorizonStrength;
+uniform float uLateralStrength;
+uniform float uIntensity;
+uniform float uBaseGlow;
+uniform float uOpacity;
+
+varying vec2 vUv;
+varying vec3 vNormal;
+varying vec3 vViewPosition;
+varying float vWave;
+
+void main() {
+  vec3 normal = normalize(vNormal);
+  vec3 viewDirection = normalize(vViewPosition);
+  float fresnel = pow(1.0 - max(dot(normal, viewDirection), 0.0), uFresnelPower);
+  float horizon = smoothstep(0.18, 0.94, vUv.y);
+  float lateralFresnel = smoothstep(0.18, 1.0, vUv.x);
+  float blue = clamp(
+    fresnel * uFresnelStrength
+      + horizon * uHorizonStrength
+      + lateralFresnel * uLateralStrength
+      + vWave * 0.08,
+    0.0,
+    1.0
+  );
+  float alpha = smoothstep(0.0, 0.1, vUv.y) * (1.0 - smoothstep(0.8, 1.0, vUv.y));
+  float intensity = clamp(uIntensity + fresnel * 0.28 + horizon * 0.12, 0.0, 1.0);
+  float purpleBalance = clamp(uBaseGlow, 0.0, 1.5);
+  vec3 color = mix(uBaseColor, uFresnelColor, blue) * intensity;
+  color = mix(color, uBaseColor * intensity, min(purpleBalance, 1.0));
+  color = min(color, max(uBaseColor, uFresnelColor));
+
+  gl_FragColor = vec4(color, alpha * uOpacity);
+}
+`;
+
+function setUniformColor(color: THREE.Color, hex: string) {
+  const value = Number.parseInt(hex.slice(1), 16);
+
+  color.r = ((value >> 16) & 255) / 255;
+  color.g = ((value >> 8) & 255) / 255;
+  color.b = (value & 255) / 255;
+}
+
+function AnimatedPlane({
+  inverted,
+  onReady,
+  seed,
+  settings,
+}: {
+  inverted: boolean;
+  onReady?: () => void;
+  seed: number;
+  settings: VoidhashGradientSettings;
+}) {
+  const materialRef = useRef<THREE.ShaderMaterial>(null);
+  const didReportReadyRef = useRef(false);
+  const isMountedRef = useRef(true);
+  const uniforms = useMemo(() => {
+    const baseColor = new THREE.Color();
+    const fresnelColor = new THREE.Color();
+
+    setUniformColor(baseColor, settings.baseColor);
+    setUniformColor(fresnelColor, settings.fresnelColor);
+
+    return {
+      uBaseColor: { value: baseColor },
+      uFresnelColor: { value: fresnelColor },
+      uAmplitude: { value: settings.amplitude },
+      uBaseGlow: { value: settings.baseGlow },
+      uFresnelPower: { value: settings.fresnelPower },
+      uFresnelStrength: { value: settings.fresnelStrength },
+      uFrequency: { value: settings.frequency },
+      uHighFrequency: { value: settings.highFrequency },
+      uHorizonStrength: { value: settings.horizonStrength },
+      uIntensity: { value: settings.intensity },
+      uLateralStrength: { value: settings.lateralStrength },
+      uLift: { value: settings.lift },
+      uMidFrequency: { value: settings.midFrequency },
+      uOpacity: { value: settings.opacity },
+      uSeed: { value: seed },
+      uTime: { value: 0 },
+    };
+  }, [seed, settings]);
+
+  useEffect(() => {
+    return () => {
+      isMountedRef.current = false;
+    };
+  }, []);
+
+  useEffect(() => {
+    uniforms.uAmplitude.value = settings.amplitude;
+    setUniformColor(uniforms.uBaseColor.value, settings.baseColor);
+    uniforms.uBaseGlow.value = settings.baseGlow;
+    setUniformColor(uniforms.uFresnelColor.value, settings.fresnelColor);
+    uniforms.uFresnelPower.value = settings.fresnelPower;
+    uniforms.uFresnelStrength.value = settings.fresnelStrength;
+    uniforms.uFrequency.value = settings.frequency;
+    uniforms.uHighFrequency.value = settings.highFrequency;
+    uniforms.uHorizonStrength.value = settings.horizonStrength;
+    uniforms.uIntensity.value = settings.intensity;
+    uniforms.uLateralStrength.value = settings.lateralStrength;
+    uniforms.uLift.value = settings.lift;
+    uniforms.uMidFrequency.value = settings.midFrequency;
+    uniforms.uOpacity.value = settings.opacity;
+    uniforms.uSeed.value = seed;
+  }, [seed, settings, uniforms]);
+
+  useFrame(({ clock }) => {
+    if (materialRef.current) {
+      materialRef.current.uniforms.uTime.value = clock.elapsedTime * settings.speed;
+    }
+
+    if (!didReportReadyRef.current) {
+      didReportReadyRef.current = true;
+      requestAnimationFrame(() => {
+        if (isMountedRef.current) {
+          onReady?.();
+        }
+      });
+    }
+  });
+
+  return (
+    <group scale={[1, inverted ? -1 : 1, 1]}>
+      <mesh position={[0, settings.planeY, 0]} rotation={[settings.rotationX, 0, 0]} scale={[settings.scaleX, settings.scaleY, 1]}>
+        <planeGeometry args={[14, 6.4, 180, 90]} />
+        <shaderMaterial
+          ref={materialRef}
+          blending={THREE.NormalBlending}
+          depthWrite={false}
+          fragmentShader={fragmentShader}
+          side={THREE.DoubleSide}
+          transparent
+          uniforms={uniforms}
+          vertexShader={vertexShader}
+        />
+      </mesh>
+    </group>
+  );
+}
+
+/** Renders the WebGL plane used by reusable Voidhash gradient backgrounds. */
+export function VoidhashGradientCanvas({
+  inverted = false,
+  onReady,
+  seed,
+  settings,
+}: {
+  inverted?: boolean;
+  onReady?: () => void;
+  seed: number;
+  settings: VoidhashGradientSettings;
+}) {
+  return (
+    <Canvas
+      camera={{ fov: 34, position: [0, 0, 6] }}
+      dpr={[1, 1.5]}
+      gl={{ alpha: true, antialias: true, powerPreference: "high-performance" }}
+      onCreated={({ gl }) => {
+        gl.outputColorSpace = THREE.SRGBColorSpace;
+        gl.setClearColor(0x000000, 0);
+      }}
+    >
+      <AnimatedPlane inverted={inverted} onReady={onReady} seed={seed} settings={settings} />
+    </Canvas>
+  );
+}
diff --git a/apps/www/src/components/voidhash-gradient-controls.tsx b/apps/www/src/components/voidhash-gradient-controls.tsx
new file mode 100644
index 000000000..2f49f5f00
--- /dev/null
+++ b/apps/www/src/components/voidhash-gradient-controls.tsx
@@ -0,0 +1,175 @@
+"use client";
+
+import { useState, type Dispatch, type SetStateAction } from "react";
+
+import type { VoidhashGradientSettings } from "./voidhash-gradient-settings";
+
+type NumericSettingKey = {
+  [Key in keyof VoidhashGradientSettings]: VoidhashGradientSettings[Key] extends number ? Key : never;
+}[keyof VoidhashGradientSettings];
+
+type BooleanSettingKey = {
+  [Key in keyof VoidhashGradientSettings]: VoidhashGradientSettings[Key] extends boolean ? Key : never;
+}[keyof VoidhashGradientSettings];
+
+type ColorSettingKey = {
+  [Key in keyof VoidhashGradientSettings]: VoidhashGradientSettings[Key] extends string ? Key : never;
+}[keyof VoidhashGradientSettings];
+
+const booleanControls: Array<{ key: BooleanSettingKey; label: string }> = [
+  { key: "topEnabled", label: "Top effect" },
+];
+
+const numericControls: Array<{
+  key: NumericSettingKey;
+  label: string;
+  min: number;
+  max: number;
+  step: number;
+}> = [
+  { key: "blur", label: "Blur", min: 0, max: 90, step: 1 },
+  { key: "effectHeight", label: "Height", min: 70, max: 180, step: 1 },
+  { key: "bottomOffset", label: "Bottom", min: -60, max: 20, step: 1 },
+  { key: "topOffset", label: "Top", min: -20, max: 60, step: 1 },
+  { key: "bottomSeed", label: "Bottom seed", min: 0, max: 80, step: 0.1 },
+  { key: "topSeed", label: "Top seed", min: 0, max: 80, step: 0.1 },
+  { key: "fadeStart", label: "Fade start", min: 0, max: 80, step: 1 },
+  { key: "fadeEnd", label: "Fade full", min: 10, max: 100, step: 1 },
+  { key: "planeY", label: "Plane Y", min: -2.4, max: 0.2, step: 0.01 },
+  { key: "rotationX", label: "Tilt", min: -1.4, max: -0.25, step: 0.01 },
+  { key: "scaleX", label: "Width", min: 0.8, max: 2.2, step: 0.01 },
+  { key: "scaleY", label: "Depth", min: 0.5, max: 1.8, step: 0.01 },
+  { key: "amplitude", label: "Amplitude", min: 0, max: 1.8, step: 0.01 },
+  { key: "frequency", label: "Frequency", min: 0.05, max: 0.5, step: 0.01 },
+  { key: "midFrequency", label: "Mid noise", min: 0.8, max: 4, step: 0.01 },
+  { key: "highFrequency", label: "Fine noise", min: 1.5, max: 7, step: 0.01 },
+  { key: "speed", label: "Speed", min: 0, max: 0.2, step: 0.001 },
+  { key: "lift", label: "Lift", min: 0, max: 1, step: 0.01 },
+  { key: "fresnelPower", label: "Fresnel pow", min: 0.5, max: 4, step: 0.01 },
+  { key: "fresnelStrength", label: "Fresnel", min: 0, max: 3, step: 0.01 },
+  { key: "horizonStrength", label: "Horizon", min: 0, max: 2, step: 0.01 },
+  { key: "lateralStrength", label: "Blue bias", min: 0, max: 1.5, step: 0.01 },
+  { key: "intensity", label: "Intensity", min: 0.2, max: 2, step: 0.01 },
+  { key: "baseGlow", label: "Purple mix", min: 0, max: 1.5, step: 0.01 },
+  { key: "opacity", label: "Opacity", min: 0, max: 1, step: 0.01 },
+];
+
+const colorControls: Array<{ key: ColorSettingKey; label: string }> = [
+  { key: "baseColor", label: "Base" },
+  { key: "fresnelColor", label: "Fresnel" },
+];
+
+function formatValue(value: number) {
+  if (Math.abs(value) >= 10) {
+    return value.toFixed(0);
+  }
+
+  return value.toFixed(2);
+}
+
+/** Renders the debug tuner for Voidhash gradient background settings. */
+export function VoidhashGradientControls({
+  onChange,
+  onHide,
+  onReset,
+  settings,
+  title = "Gradient FX",
+}: {
+  onChange: Dispatch<SetStateAction<VoidhashGradientSettings>>;
+  onHide: () => void;
+  onReset: () => void;
+  settings: VoidhashGradientSettings;
+  title?: string;
+}) {
+  const [copied, setCopied] = useState(false);
+
+  return (
+    <div className="fixed right-4 bottom-4 z-50 flex max-h-[calc(100vh-2rem)] w-[320px] flex-col overflow-hidden rounded-lg border border-border bg-background/95 text-foreground shadow-2xl backdrop-blur-xl">
+      <div className="flex items-center justify-between border-border border-b px-3 py-2">
+        <div className="font-medium text-sm">{title}</div>
+        <button className="text-muted-foreground text-xs hover:text-foreground" onClick={onHide} type="button">
+          Hide
+        </button>
+      </div>
+
+      <div className="flex-1 space-y-3 overflow-auto p-3">
+        {booleanControls.map((control) => (
+          <label className="grid grid-cols-[88px_1fr_44px] items-center gap-2 text-xs" key={control.key}>
+            <span className="text-muted-foreground">{control.label}</span>
+            <input
+              aria-label={control.label}
+              checked={settings[control.key]}
+              className="h-4 w-4 accent-primary"
+              onChange={(event) => {
+                onChange((current) => ({
+                  ...current,
+                  [control.key]: event.target.checked,
+                }));
+              }}
+              type="checkbox"
+            />
+            <span className="text-right font-mono text-muted-foreground">{settings[control.key] ? "on" : "off"}</span>
+          </label>
+        ))}
+
+        {colorControls.map((control) => (
+          <label className="grid grid-cols-[88px_1fr_76px] items-center gap-2 text-xs" key={control.key}>
+            <span className="text-muted-foreground">{control.label}</span>
+            <input
+              aria-label={control.label}
+              className="h-8 w-full cursor-pointer rounded border border-border bg-transparent"
+              onChange={(event) => {
+                onChange((current) => ({
+                  ...current,
+                  [control.key]: event.target.value,
+                }));
+              }}
+              type="color"
+              value={settings[control.key]}
+            />
+            <span className="font-mono text-muted-foreground">{settings[control.key]}</span>
+          </label>
+        ))}
+
+        {numericControls.map((control) => (
+          <label className="grid grid-cols-[88px_1fr_44px] items-center gap-2 text-xs" key={control.key}>
+            <span className="text-muted-foreground">{control.label}</span>
+            <input
+              aria-label={control.label}
+              className="accent-primary"
+              max={control.max}
+              min={control.min}
+              onChange={(event) => {
+                onChange((current) => ({
+                  ...current,
+                  [control.key]: Number(event.target.value),
+                }));
+              }}
+              step={control.step}
+              type="range"
+              value={settings[control.key]}
+            />
+            <span className="text-right font-mono text-muted-foreground">{formatValue(settings[control.key])}</span>
+          </label>
+        ))}
+      </div>
+
+      <div className="flex gap-2 border-border border-t p-3">
+        <button
+          className="flex-1 rounded-md border border-border px-3 py-2 text-xs hover:bg-card"
+          onClick={async () => {
+            await navigator.clipboard.writeText(JSON.stringify(settings, null, 2));
+            setCopied(true);
+            window.setTimeout(() => setCopied(false), 1200);
+          }}
+          type="button"
+        >
+          {copied ? "Copied" : "Copy JSON"}
+        </button>
+        <button className="rounded-md border border-border px-3 py-2 text-xs hover:bg-card" onClick={onReset} type="button">
+          Reset
+        </button>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/components/voidhash-gradient-settings.ts b/apps/www/src/components/voidhash-gradient-settings.ts
new file mode 100644
index 000000000..bf826f336
--- /dev/null
+++ b/apps/www/src/components/voidhash-gradient-settings.ts
@@ -0,0 +1,102 @@
+export type VoidhashGradientSettings = {
+  blur: number;
+  effectHeight: number;
+  bottomOffset: number;
+  topEnabled: boolean;
+  topOffset: number;
+  bottomSeed: number;
+  topSeed: number;
+  fadeStart: number;
+  fadeEnd: number;
+  planeY: number;
+  rotationX: number;
+  scaleX: number;
+  scaleY: number;
+  amplitude: number;
+  frequency: number;
+  midFrequency: number;
+  highFrequency: number;
+  speed: number;
+  lift: number;
+  fresnelPower: number;
+  fresnelStrength: number;
+  horizonStrength: number;
+  lateralStrength: number;
+  intensity: number;
+  baseGlow: number;
+  opacity: number;
+  baseColor: string;
+  fresnelColor: string;
+};
+
+export const VOIDHASH_GRADIENT_STORAGE_KEY = "voidhash:gradient-background-settings";
+export const VOIDHASH_GRADIENT_CONTROLS_STORAGE_KEY = "voidhash:gradient-background-controls";
+
+export const DEFAULT_VOIDHASH_GRADIENT_SETTINGS: VoidhashGradientSettings = {
+  blur: 7,
+  effectHeight: 98,
+  bottomOffset: 0,
+  topEnabled: false,
+  topOffset: 0,
+  bottomSeed: 0,
+  topSeed: 28.7,
+  fadeStart: 22,
+  fadeEnd: 58,
+  planeY: -2.4,
+  rotationX: -0.86,
+  scaleX: 1.42,
+  scaleY: 0.96,
+  amplitude: 1.42,
+  frequency: 0.19,
+  midFrequency: 0.8,
+  highFrequency: 1.5,
+  speed: 0.072,
+  lift: 0.58,
+  fresnelPower: 0.96,
+  fresnelStrength: 1.7,
+  horizonStrength: 0,
+  lateralStrength: 0.52,
+  intensity: 1.03,
+  baseGlow: 0,
+  opacity: 1,
+  baseColor: "#7f14ff",
+  fresnelColor: "#0673ff",
+};
+
+const HEX_COLOR_PATTERN = /^#[0-9a-f]{6}$/i;
+
+/** Merges persisted or caller-provided values with the supported gradient settings. */
+export function mergeVoidhashGradientSettings(
+  value: unknown,
+  defaults: VoidhashGradientSettings = DEFAULT_VOIDHASH_GRADIENT_SETTINGS,
+): VoidhashGradientSettings {
+  if (!value || typeof value !== "object") {
+    return defaults;
+  }
+
+  const settings: VoidhashGradientSettings = { ...defaults };
+  const entries = Object.entries(value as Partial<Record<keyof VoidhashGradientSettings, unknown>>);
+
+  for (const [key, entryValue] of entries) {
+    if (!(key in settings)) {
+      continue;
+    }
+
+    const settingKey = key as keyof VoidhashGradientSettings;
+    const defaultValue = settings[settingKey];
+
+    if (typeof defaultValue === "number" && typeof entryValue === "number" && Number.isFinite(entryValue)) {
+      settings[settingKey] = entryValue as never;
+    }
+
+    if (typeof defaultValue === "boolean" && typeof entryValue === "boolean") {
+      settings[settingKey] = entryValue as never;
+    }
+
+    if (typeof defaultValue === "string" && typeof entryValue === "string" && HEX_COLOR_PATTERN.test(entryValue)) {
+      settings[settingKey] = entryValue.toLowerCase() as never;
+    }
+  }
+
+  return settings;
+}
diff --git a/apps/www/src/features/auth/components/auth-layout.tsx b/apps/www/src/features/auth/components/auth-layout.tsx
new file mode 100644
index 000000000..cf97eee44
--- /dev/null
+++ b/apps/www/src/features/auth/components/auth-layout.tsx
@@ -0,0 +1,59 @@
+import { Link } from "@tanstack/react-router";
+import { Logo } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+import { VoidhashGradientBackground } from "@/components/voidhash-gradient-background";
+
+const authGradientSettings = {
+  topEnabled: false,
+  effectHeight: 70,
+} as const;
+
+export type AuthLayoutProps = {
+  children: ReactNode;
+};
+
+/**
+ * Shared shell for the auth surfaces. Renders the blurred Voidhash gradient
+ * behind a backdrop-blurred form column with the logo (linking home), matching
+ * the sign-in / sign-up layout. Page content is centred in a `max-w-sm` column.
+ */
+export function AuthLayout({ children }: AuthLayoutProps) {
+  return (
+    <div className="relative grid min-h-svh overflow-hidden bg-background lg:grid-cols-12">
+      <VoidhashGradientBackground
+        className="absolute inset-0"
+        controlsQueryParam="authGradientControls"
+        controlsStorageKey="voidhash:auth-gradient-controls"
+        controlsTitle="Auth FX"
+        settings={authGradientSettings}
+        settingsStorageKey="voidhash:auth-gradient-settings"
+      />
+      <div className="relative z-10 col-span-6 flex flex-col gap-4 bg-background/95 p-6 backdrop-blur-xl md:p-10 lg:border-r lg:border-border/50">
+        <div className="flex justify-center gap-2 md:justify-start">
+          <Link className="flex gap-2 font-medium" to="/">
+            <Logo />
+          </Link>
+        </div>
+        <div className="flex flex-1 items-center justify-center">
+          <div className="w-full max-w-sm">{children}</div>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+export type AuthHeaderProps = {
+  title: string;
+  description?: ReactNode;
+};
+
+/** Left-aligned heading block used at the top of each auth page's content column. */
+export function AuthHeader({ title, description }: AuthHeaderProps) {
+  return (
+    <div className="flex flex-col items-start gap-2 text-left">
+      <h1 className="text-3xl">{title}</h1>
+      {description ? <p className="text-muted-foreground text-sm">{description}</p> : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/auth/globals.css b/apps/www/src/features/auth/globals.css
new file mode 100644
index 000000000..629e41a6d
--- /dev/null
+++ b/apps/www/src/features/auth/globals.css
@@ -0,0 +1,224 @@
+/** biome-ignore-all lint/nursery/noUnknownAtRule: tailwind */
+@import "tailwindcss";
+
+@import "tw-animate-css";
+@import "@fontsource-variable/geist";
+@import "@fontsource-variable/geist-mono";
+@import "@voidhash/ui/styles/brand-theme.css";
+
+@source "../../../packages/ui";
+@source "../../../packages/features";
+
+@custom-variant dark (&:is(.dark *));
+
+::selection {
+  background: #0673ff80;
+  color: #fff;
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+  body {
+    @apply bg-background text-foreground;
+  }
+}
+/*
+:root {
+	--background: oklch(0.99 0 0);
+	--foreground: oklch(0.2 0 0);
+	--card: oklch(0.99 0 0);
+	--card-foreground: oklch(0.2 0 0);
+	--popover: oklch(0.99 0 0);
+	--popover-foreground: oklch(0.44 0 0);
+	--primary: oklch(0.83 0.13 160.91);
+	--primary-foreground: oklch(0.26 0.01 166.46);
+	--secondary: oklch(0.99 0 0);
+	--secondary-foreground: oklch(0.2 0 0);
+	--muted: oklch(0.95 0 0);
+	--muted-foreground: oklch(0.24 0 0);
+	--accent: oklch(0.95 0 0);
+	--accent-foreground: oklch(0.24 0 0);
+	--destructive: oklch(0.55 0.19 32.73);
+	--destructive-foreground: oklch(0.99 0.0 17.21);
+	--border: oklch(0.9 0 0);
+	--input: oklch(0.97 0 0);
+	--ring: oklch(0.83 0.13 160.91);
+	--chart-1: oklch(0.83 0.13 160.91);
+	--chart-2: oklch(0.62 0.19 259.81);
+	--chart-3: oklch(0.61 0.22 292.72);
+	--chart-4: oklch(0.77 0.16 70.08);
+	--chart-5: oklch(0.7 0.15 162.48);
+	--sidebar: oklch(0.99 0 0);
+	--sidebar-foreground: oklch(0.55 0 0);
+	--sidebar-primary: oklch(0.83 0.13 160.91);
+	--sidebar-primary-foreground: oklch(0.26 0.01 166.46);
+	--sidebar-accent: oklch(0.95 0 0);
+	--sidebar-accent-foreground: oklch(0.24 0 0);
+	--sidebar-border: oklch(0.9 0 0);
+	--sidebar-ring: oklch(0.83 0.13 160.91);
+	--font-sans: Geist, sans-serif;
+	--font-serif: Geist, sans-serif;
+	--font-mono: Geist Mono, monospace;
+	--radius: 0.5rem;
+	--shadow-2xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-sm: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-md: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 2px 4px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-lg: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 4px 6px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 8px 10px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-2xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.43);
+	--tracking-normal: 0.025em;
+}
+
+.dark {
+	--background: oklch(0.18 0 0);
+	--foreground: oklch(0.93 0.01 255.51);
+	--card: oklch(0.2 0 0);
+	--card-foreground: oklch(0.93 0.01 255.51);
+	--popover: oklch(0.26 0 0);
+	--popover-foreground: oklch(0.73 0 0);
+	--primary: oklch(0.55 0.25 261.78);
+	--primary-foreground: oklch(1.0 0 0);
+	--secondary: oklch(0.26 0 0);
+	--secondary-foreground: oklch(0.99 0 0);
+	--muted: oklch(0.24 0 0);
+	--muted-foreground: oklch(0.71 0 0);
+	--accent: oklch(0.31 0 0);
+	--accent-foreground: oklch(0.99 0 0);
+	--destructive: oklch(0.31 0.09 29.79);
+	--destructive-foreground: oklch(0.94 0.0 34.31);
+	--border: oklch(0.28 0 0);
+	--input: oklch(0.26 0 0);
+	--ring: oklch(0.58 0.21 257.16);
+	--chart-1: oklch(0.58 0.21 257.16);
+	--chart-2: oklch(0.87 0.15 194.78);
+	--chart-3: oklch(0.9 0.15 96.47);
+	--chart-4: oklch(0.72 0.17 353.44);
+	--chart-5: oklch(0.83 0.11 74.12);
+	--sidebar: oklch(0.18 0 0);
+	--sidebar-foreground: oklch(0.63 0 0);
+	--sidebar-primary: oklch(0.44 0.1 156.76);
+	--sidebar-primary-foreground: oklch(0.92 0.01 167.16);
+	--sidebar-accent: oklch(0.31 0 0);
+	--sidebar-accent-foreground: oklch(0.99 0 0);
+	--sidebar-border: oklch(0.28 0 0);
+	--sidebar-ring: oklch(0.8 0.18 151.71);
+	--font-sans: Geist, sans-serif;
+	--font-serif: Geist, sans-serif;
+	--font-mono: Geist Mono, monospace;
+	--radius: 0.5rem;
+	--shadow-2xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-sm: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-md: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 2px 4px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-lg: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 4px 6px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 8px 10px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-2xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.43);
+}
+
+@theme inline {
+	--color-background: var(--background);
+	--color-foreground: var(--foreground);
+	--color-card: var(--card);
+	--color-card-foreground: var(--card-foreground);
+	--color-popover: var(--popover);
+	--color-popover-foreground: var(--popover-foreground);
+	--color-primary: var(--primary);
+	--color-primary-foreground: var(--primary-foreground);
+	--color-secondary: var(--secondary);
+	--color-secondary-foreground: var(--secondary-foreground);
+	--color-muted: var(--muted);
+	--color-muted-foreground: var(--muted-foreground);
+	--color-accent: var(--accent);
+	--color-accent-foreground: var(--accent-foreground);
+	--color-destructive: var(--destructive);
+	--color-destructive-foreground: var(--destructive-foreground);
+	--color-border: var(--border);
+	--color-input: var(--input);
+	--color-ring: var(--ring);
+	--color-chart-1: var(--chart-1);
+	--color-chart-2: var(--chart-2);
+	--color-chart-3: var(--chart-3);
+	--color-chart-4: var(--chart-4);
+	--color-chart-5: var(--chart-5);
+	--color-sidebar: var(--sidebar);
+	--color-sidebar-foreground: var(--sidebar-foreground);
+	--color-sidebar-primary: var(--sidebar-primary);
+	--color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+	--color-sidebar-accent: var(--sidebar-accent);
+	--color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+	--color-sidebar-border: var(--sidebar-border);
+	--color-sidebar-ring: var(--sidebar-ring);
+
+	--font-sans: var(--font-sans);
+	--font-mono: var(--font-mono);
+	--font-serif: var(--font-serif);
+
+	--radius-sm: calc(var(--radius) - 4px);
+	--radius-md: calc(var(--radius) - 2px);
+	--radius-lg: var(--radius);
+	--radius-xl: calc(var(--radius) + 4px);
+
+	--shadow-2xs: var(--shadow-2xs);
+	--shadow-xs: var(--shadow-xs);
+	--shadow-sm: var(--shadow-sm);
+	--shadow: var(--shadow);
+	--shadow-md: var(--shadow-md);
+	--shadow-lg: var(--shadow-lg);
+	--shadow-xl: var(--shadow-xl);
+	--shadow-2xl: var(--shadow-2xl);
+
+	--tracking-tighter: calc(var(--tracking-normal) - 0.05em);
+	--tracking-tight: calc(var(--tracking-normal) - 0.025em);
+	--tracking-normal: var(--tracking-normal);
+	--tracking-wide: calc(var(--tracking-normal) + 0.025em);
+	--tracking-wider: calc(var(--tracking-normal) + 0.05em);
+	--tracking-widest: calc(var(--tracking-normal) + 0.1em);
+	--animate-accordion-down: accordion-down 0.2s ease-out;
+	--animate-accordion-up: accordion-up 0.2s ease-out;
+
+	@keyframes accordion-down {
+		from {
+			height: 0;
+		}
+		to {
+			height: var(--radix-accordion-content-height);
+		}
+	}
+
+	@keyframes accordion-up {
+		from {
+			height: var(--radix-accordion-content-height);
+		}
+		to {
+			height: 0;
+		}
+	}
+} */
+
+/* @layer base {
+	* {
+		@apply border-border outline-ring/50;
+	}
+	body {
+		@apply bg-background text-foreground;
+	}
+}
+
+body {
+	letter-spacing: var(--tracking-normal);
+} */
diff --git a/apps/www/src/features/auth/lib/auth-api.ts b/apps/www/src/features/auth/lib/auth-api.ts
new file mode 100644
index 000000000..bba5ad99c
--- /dev/null
+++ b/apps/www/src/features/auth/lib/auth-api.ts
@@ -0,0 +1,126 @@
+type AuthApiErrorPayload = {
+  error?: string;
+};
+
+type AuthRedirectResponse = {
+  redirectTo?: string;
+};
+
+/**
+ * Fields returned by sign-up / sign-in when the account exists but its email is
+ * not yet verified. The client uses these to drive the verify-email step.
+ */
+type EmailVerificationChallenge = {
+  email?: string;
+  emailVerificationRequired?: boolean;
+  pendingAuthenticationToken?: string;
+  userId?: string;
+};
+
+type SignUpResponse = AuthRedirectResponse & EmailVerificationChallenge;
+
+type SignInResponse = AuthRedirectResponse & EmailVerificationChallenge;
+
+type VerifyEmailResponse = AuthRedirectResponse & {
+  verified?: boolean;
+};
+
+type ResendVerificationResponse = {
+  ok?: boolean;
+};
+
+type ForgotPasswordResponse = {
+  message?: string;
+};
+
+type SignInPasswordInput = {
+  email: string;
+  password: string;
+  returnPathname?: string;
+};
+
+type SignUpPasswordInput = {
+  email: string;
+  firstName: string;
+  lastName: string;
+  password: string;
+  returnPathname?: string;
+};
+
+type ForgotPasswordInput = {
+  email: string;
+};
+
+type ResetPasswordInput = {
+  password: string;
+  token: string;
+};
+
+type VerifyEmailInput = {
+  code: string;
+  email?: string;
+  pendingAuthenticationToken?: string;
+  returnPathname?: string;
+};
+
+type ResendVerificationInput = {
+  email?: string;
+  userId?: string;
+};
+
+const postAuthJson = async <TResponse>(
+  path: string,
+  body: object,
+  fallbackError: string,
+): Promise<TResponse> => {
+  const response = await fetch(path, {
+    body: JSON.stringify(body),
+    headers: { "Content-Type": "application/json" },
+    method: "POST",
+  });
+  const payload = (await response.json()) as AuthApiErrorPayload & TResponse;
+
+  if (!response.ok) {
+    throw new Error(payload.error ?? fallbackError);
+  }
+
+  return payload;
+};
+
+export const signInWithPassword = (input: SignInPasswordInput) =>
+  postAuthJson<SignInResponse>("/api/auth/password/sign-in", input, "We could not sign you in.");
+
+export const verifyEmailCode = (input: VerifyEmailInput) =>
+  postAuthJson<VerifyEmailResponse>(
+    "/api/auth/email/verify",
+    input,
+    "We could not verify your email.",
+  );
+
+export const resendVerificationCode = (input: ResendVerificationInput) =>
+  postAuthJson<ResendVerificationResponse>(
+    "/api/auth/email/resend",
+    input,
+    "We could not send a new code.",
+  );
+
+export const signUpWithPassword = (input: SignUpPasswordInput) =>
+  postAuthJson<SignUpResponse>(
+    "/api/auth/password/sign-up",
+    input,
+    "We could not create your account.",
+  );
+
+export const requestPasswordReset = (input: ForgotPasswordInput) =>
+  postAuthJson<ForgotPasswordResponse>(
+    "/api/auth/password/forgot-password",
+    input,
+    "We could not send a reset link.",
+  );
+
+export const resetPassword = (input: ResetPasswordInput) =>
+  postAuthJson<AuthRedirectResponse>(
+    "/api/auth/password/reset-password",
+    input,
+    "We could not reset your password.",
+  );
diff --git a/apps/www/src/features/auth/lib/email-verification-storage.ts b/apps/www/src/features/auth/lib/email-verification-storage.ts
new file mode 100644
index 000000000..ce282abbb
--- /dev/null
+++ b/apps/www/src/features/auth/lib/email-verification-storage.ts
@@ -0,0 +1,52 @@
+const STORAGE_KEY = "voidhash.email-verification";
+
+/**
+ * The context the verify-email page needs to complete (and resend) a 6-digit
+ * email verification. It is written by sign-up / sign-in when WorkOS reports
+ * `email_verification_required`.
+ *
+ * Stored in `sessionStorage` so it survives a page refresh but is intentionally
+ * dropped when the tab closes — at which point the user re-authenticates, which
+ * issues a fresh token and code.
+ */
+export type EmailVerificationState = {
+  email: string;
+  next?: string;
+  pendingAuthenticationToken?: string;
+  userId?: string;
+};
+
+export const saveEmailVerificationState = (state: EmailVerificationState): void => {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    window.sessionStorage.setItem(STORAGE_KEY, JSON.stringify(state));
+  } catch {
+    // sessionStorage can be unavailable (private mode, storage disabled). The
+    // verify page degrades to the email search param, so this is non-fatal.
+  }
+};
+
+export const loadEmailVerificationState = (): EmailVerificationState | null => {
+  if (typeof window === "undefined") {
+    return null;
+  }
+  try {
+    const raw = window.sessionStorage.getItem(STORAGE_KEY);
+    return raw ? (JSON.parse(raw) as EmailVerificationState) : null;
+  } catch {
+    return null;
+  }
+};
+
+export const clearEmailVerificationState = (): void => {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    window.sessionStorage.removeItem(STORAGE_KEY);
+  } catch {
+    // Ignore — nothing actionable if the entry can't be removed.
+  }
+};
diff --git a/apps/www/src/features/auth/lib/provision-user.ts b/apps/www/src/features/auth/lib/provision-user.ts
new file mode 100644
index 000000000..57cef84ae
--- /dev/null
+++ b/apps/www/src/features/auth/lib/provision-user.ts
@@ -0,0 +1,30 @@
+import { getCurrentUser } from "@/features/studio/lib/tanstack-query/users";
+
+/** Hard cap so a slow/cold backend can never block the post-sign-up redirect. */
+const PROVISION_TIMEOUT_MS = 5000;
+
+/**
+ * Eagerly provisions the just-authenticated user's local DB record in the
+ * backend, before the client navigates to the dashboard.
+ *
+ * The local `user` row is otherwise created lazily by the backend auth
+ * middleware on the first dashboard request. `getCurrentUser` is a server
+ * function that forwards the freshly-set session cookie to the backend, whose
+ * auth middleware runs `resolveLocalUser` — so the row already exists by the
+ * time the dashboard loads and its first request is a plain read. The frontend
+ * never touches the database directly; the backend owns the write.
+ *
+ * Best-effort and time-boxed: sign-up must never block on (or fail because of)
+ * this, and the lazy middleware path remains the fallback when it does not
+ * complete in time.
+ */
+export const provisionCurrentUser = (): Promise<void> =>
+  Promise.race([
+    getCurrentUser().then(
+      () => undefined,
+      () => undefined,
+    ),
+    new Promise<void>((resolve) => {
+      setTimeout(resolve, PROVISION_TIMEOUT_MS);
+    }),
+  ]);
diff --git a/apps/www/src/features/auth/lib/tanstack-query/index.ts b/apps/www/src/features/auth/lib/tanstack-query/index.ts
new file mode 100644
index 000000000..fc09266fe
--- /dev/null
+++ b/apps/www/src/features/auth/lib/tanstack-query/index.ts
@@ -0,0 +1,2 @@
+export { queryKeys } from "./query-keys";
+export * from "./user-api-keys";
diff --git a/apps/www/src/features/auth/lib/tanstack-query/query-keys.ts b/apps/www/src/features/auth/lib/tanstack-query/query-keys.ts
new file mode 100644
index 000000000..f345c931b
--- /dev/null
+++ b/apps/www/src/features/auth/lib/tanstack-query/query-keys.ts
@@ -0,0 +1,9 @@
+const userApiKeyKeys = {
+  all: ["userApiKeys"] as const,
+  list: () => [...userApiKeyKeys.all, "list"] as const,
+};
+
+export const queryKeys = {
+  invalidateAll: () => [],
+  userApiKey: userApiKeyKeys,
+};
diff --git a/apps/www/src/features/auth/lib/tanstack-query/user-api-keys.ts b/apps/www/src/features/auth/lib/tanstack-query/user-api-keys.ts
new file mode 100644
index 000000000..99fda99e6
--- /dev/null
+++ b/apps/www/src/features/auth/lib/tanstack-query/user-api-keys.ts
@@ -0,0 +1,23 @@
+import { VoidhashRpc, eq } from "@/lib/effect-query";
+
+import { queryKeys } from "./query-keys";
+
+export const createUserApiKeyOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { name: string; prefix: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateUserApiKey(variables)),
+    mutationKey: ["createUserApiKey"],
+  });
+
+export const revokeUserApiKeyOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { userApiKeyId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RevokeUserApiKey(variables)),
+    mutationKey: ["revokeUserApiKey"],
+  });
+
+export const listUserApiKeysOptions = () =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListUserApiKeys({})),
+    queryKey: queryKeys.userApiKey.list(),
+  });
diff --git a/apps/www/src/features/auth/lib/validation.ts b/apps/www/src/features/auth/lib/validation.ts
new file mode 100644
index 000000000..58ae84442
--- /dev/null
+++ b/apps/www/src/features/auth/lib/validation.ts
@@ -0,0 +1,83 @@
+/**
+ * Security validation utilities for OIDC flows
+ */
+
+/**
+ * Validates that a redirect URL is safe (relative path or same-origin).
+ * Prevents open redirect vulnerabilities.
+ */
+export const isValidRedirect = (url: string, origin: string): boolean => {
+  // Allow relative paths that don't start with // (protocol-relative URLs)
+  if (url.startsWith("/") && !url.startsWith("//")) {
+    return true;
+  }
+
+  try {
+    const parsed = new URL(url, origin);
+    return parsed.origin === origin;
+  } catch {
+    return false;
+  }
+};
+
+export const toSafeReturnPathname = (
+  url: string | null | undefined,
+  origin?: string,
+): string | undefined => {
+  if (!url) {
+    return undefined;
+  }
+
+  if (url.startsWith("/") && !url.startsWith("//")) {
+    return url;
+  }
+
+  if (!origin || !isValidRedirect(url, origin)) {
+    return undefined;
+  }
+
+  try {
+    const parsed = new URL(url, origin);
+    return parsed.origin === origin
+      ? `${parsed.pathname}${parsed.search}${parsed.hash}`
+      : undefined;
+  } catch {
+    return undefined;
+  }
+};
+
+/**
+ * Validates that a redirect URL is a localhost URL.
+ * Used for device authorization flow to prevent SSRF.
+ */
+export const isValidLocalRedirect = (url: string): boolean => {
+  try {
+    const parsed = new URL(url);
+    return (
+      parsed.hostname === "localhost" ||
+      parsed.hostname === "127.0.0.1" ||
+      parsed.hostname === "[::1]"
+    );
+  } catch {
+    return false;
+  }
+};
+
+/**
+ * Device authorization code expiration time in milliseconds (10 minutes)
+ */
+export const DEVICE_CODE_EXPIRY_MS = 10 * 60 * 1000;
+
+/**
+ * Checks if a device authorization timestamp has expired
+ */
+export const isDeviceCodeExpired = (expiresAt: string | undefined): boolean => {
+  if (!expiresAt) {
+    return false;
+  }
+  try {
+    return new Date(expiresAt).getTime() < Date.now();
+  } catch {
+    return true; // Invalid date format = treat as expired
+  }
+};
diff --git a/apps/www/src/features/auth/lib/workos-user-management.server.test.ts b/apps/www/src/features/auth/lib/workos-user-management.server.test.ts
new file mode 100644
index 000000000..7bf198296
--- /dev/null
+++ b/apps/www/src/features/auth/lib/workos-user-management.server.test.ts
@@ -0,0 +1,92 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  authenticateWithOrganizationSelectionChallenge,
+  getOrganizationSelectionChallenge,
+} from "./workos-user-management.server";
+
+describe("getOrganizationSelectionChallenge", () => {
+  it("extracts the WorkOS organization-selection challenge", () => {
+    expect(
+      getOrganizationSelectionChallenge({
+        code: "organization_selection_required",
+        pendingAuthenticationToken: "pat_123",
+        rawData: {
+          organizations: [
+            { id: "org_1", name: "Acme" },
+            { id: "org_2", name: "Beta" },
+          ],
+        },
+      }),
+    ).toEqual({
+      organizations: [
+        { id: "org_1", name: "Acme" },
+        { id: "org_2", name: "Beta" },
+      ],
+      pendingAuthenticationToken: "pat_123",
+    });
+  });
+
+  it("reads the pending token from rawData and ignores malformed organizations", () => {
+    expect(
+      getOrganizationSelectionChallenge({
+        rawData: {
+          code: "organization_selection_required",
+          organizations: [{ id: "org_1" }, { name: "Missing id" }, null],
+          pending_authentication_token: "pat_456",
+        },
+      }),
+    ).toEqual({
+      organizations: [{ id: "org_1", name: "org_1" }],
+      pendingAuthenticationToken: "pat_456",
+    });
+  });
+
+  it("returns null for non-organization-selection errors", () => {
+    expect(
+      getOrganizationSelectionChallenge({
+        code: "email_verification_required",
+        pendingAuthenticationToken: "pat_123",
+      }),
+    ).toBeNull();
+  });
+});
+
+describe("authenticateWithOrganizationSelectionChallenge", () => {
+  it("authenticates against the first organization returned by WorkOS", async () => {
+    const authenticateWithOrganizationSelection = async (payload: unknown) => {
+      expect(payload).toEqual({
+        clientId: "client_123",
+        organizationId: "org_1",
+        pendingAuthenticationToken: "pat_123",
+        session: {
+          cookiePassword: "cookie_secret",
+          sealSession: true,
+        },
+      });
+
+      return { sealedSession: "sealed_session" };
+    };
+
+    const result = await authenticateWithOrganizationSelectionChallenge(
+      {
+        userManagement: {
+          authenticateWithOrganizationSelection,
+        },
+      } as never,
+      {
+        code: "organization_selection_required",
+        pendingAuthenticationToken: "pat_123",
+        rawData: {
+          organizations: [
+            { id: "org_1", name: "Acme" },
+            { id: "org_2", name: "Beta" },
+          ],
+        },
+      },
+      { clientId: "client_123", cookiePassword: "cookie_secret" },
+    );
+
+    expect(result).toEqual({ sealedSession: "sealed_session" });
+  });
+});
diff --git a/apps/www/src/features/auth/lib/workos-user-management.server.ts b/apps/www/src/features/auth/lib/workos-user-management.server.ts
new file mode 100644
index 000000000..48d86d272
--- /dev/null
+++ b/apps/www/src/features/auth/lib/workos-user-management.server.ts
@@ -0,0 +1,355 @@
+import { getAuthkit } from "@workos/authkit-tanstack-react-start";
+import { WorkOS, type AuthenticationResponse } from "@workos-inc/node";
+
+import { toSafeReturnPathname } from "./validation";
+
+type JsonBody = Record<string, unknown>;
+
+export type WorkosAuthConfig = {
+  apiKey: string;
+  clientId: string;
+  cookiePassword: string;
+};
+
+export type WorkosOrganizationSelectionChallenge = {
+  organizations: ReadonlyArray<{
+    id: string;
+    name: string;
+  }>;
+  pendingAuthenticationToken: string;
+};
+
+const providerBySlug = {
+  github: "GitHubOAuth",
+  google: "GoogleOAuth",
+  microsoft: "MicrosoftOAuth",
+} as const;
+
+export type OAuthProviderSlug = keyof typeof providerBySlug;
+
+const getRequiredEnv = (name: string) => {
+  const value = process.env[name]?.trim();
+  if (!value) {
+    throw new Error(`Missing required environment variable: ${name}`);
+  }
+  return value;
+};
+
+export const getWorkosAuthConfig = (): WorkosAuthConfig => ({
+  apiKey: getRequiredEnv("WORKOS_API_KEY"),
+  clientId: getRequiredEnv("WORKOS_CLIENT_ID"),
+  cookiePassword: getRequiredEnv("WORKOS_COOKIE_PASSWORD"),
+});
+
+export const createWorkosClient = (config = getWorkosAuthConfig()) => {
+  const { apiKey, clientId } = config;
+  return new WorkOS(apiKey, { clientId });
+};
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null;
+
+const getRawData = (error: unknown) => {
+  if (!isRecord(error) || !isRecord(error.rawData)) {
+    return undefined;
+  }
+
+  return error.rawData;
+};
+
+const getErrorCode = (error: unknown) => {
+  if (!isRecord(error)) {
+    return undefined;
+  }
+
+  const rawData = getRawData(error);
+  return error.code ?? rawData?.code ?? rawData?.error;
+};
+
+const getPendingAuthenticationToken = (error: unknown) => {
+  if (!isRecord(error)) {
+    return undefined;
+  }
+
+  const rawData = getRawData(error);
+  if (typeof error.pendingAuthenticationToken === "string") {
+    return error.pendingAuthenticationToken;
+  }
+
+  return typeof rawData?.pending_authentication_token === "string"
+    ? rawData.pending_authentication_token
+    : undefined;
+};
+
+const getOrganizations = (error: unknown) => {
+  const rawData = getRawData(error);
+  if (!Array.isArray(rawData?.organizations)) {
+    return [];
+  }
+
+  return rawData.organizations.flatMap((organization) => {
+    if (!isRecord(organization) || typeof organization.id !== "string") {
+      return [];
+    }
+
+    return [
+      {
+        id: organization.id,
+        name: typeof organization.name === "string" ? organization.name : organization.id,
+      },
+    ];
+  });
+};
+
+/**
+ * Extracts WorkOS's organization-selection challenge from an authentication
+ * error. Multi-organization users receive this challenge before WorkOS can mint
+ * a session-bound access token.
+ */
+export const getOrganizationSelectionChallenge = (
+  error: unknown,
+): WorkosOrganizationSelectionChallenge | null => {
+  if (getErrorCode(error) !== "organization_selection_required") {
+    return null;
+  }
+
+  const pendingAuthenticationToken = getPendingAuthenticationToken(error);
+  const organizations = getOrganizations(error);
+
+  if (!pendingAuthenticationToken || organizations.length === 0) {
+    return null;
+  }
+
+  return { organizations, pendingAuthenticationToken };
+};
+
+/**
+ * Completes a WorkOS organization-selection challenge using the first
+ * organization WorkOS returned. The app loads all local memberships after the
+ * session is saved, so this selection only provides the org context WorkOS
+ * needs to issue the AuthKit session.
+ */
+export const authenticateWithOrganizationSelectionChallenge = async (
+  workos: WorkOS,
+  error: unknown,
+  options: Pick<WorkosAuthConfig, "clientId" | "cookiePassword">,
+): Promise<AuthenticationResponse | null> => {
+  const challenge = getOrganizationSelectionChallenge(error);
+  const organizationId = challenge?.organizations[0]?.id;
+
+  if (!challenge || !organizationId) {
+    return null;
+  }
+
+  return workos.userManagement.authenticateWithOrganizationSelection({
+    clientId: options.clientId,
+    organizationId,
+    pendingAuthenticationToken: challenge.pendingAuthenticationToken,
+    session: {
+      cookiePassword: options.cookiePassword,
+      sealSession: true,
+    },
+  });
+};
+
+const appendHeaders = (target: Headers, source?: Record<string, string | string[]>) => {
+  if (!source) {
+    return;
+  }
+
+  for (const [key, value] of Object.entries(source)) {
+    if (Array.isArray(value)) {
+      for (const item of value) {
+        target.append(key, item);
+      }
+      continue;
+    }
+
+    target.append(key, value);
+  }
+};
+
+export const jsonResponse = (
+  body: JsonBody,
+  init: ResponseInit = {},
+  extraHeaders?: Record<string, string | string[]>,
+) => {
+  const headers = new Headers(init.headers);
+  headers.set("Content-Type", "application/json");
+  appendHeaders(headers, extraHeaders);
+  return new Response(JSON.stringify(body), { ...init, headers });
+};
+
+export const authErrorResponse = (message: string, status = 400) =>
+  jsonResponse({ error: message }, { status });
+
+/**
+ * Detects whether a WorkOS authentication error means "the user exists but
+ * their email is not yet verified". WorkOS surfaces this two ways depending on
+ * the environment's email-verification configuration:
+ *
+ *   - the structured `email_verification_required` auth-error code (carries a
+ *     `pendingAuthenticationToken` for the inline-code step-up), or
+ *   - a `GenericServerException` whose message is
+ *     "Email ownership must be verified before authentication." (email-link mode).
+ *
+ * Both mean the same thing for sign-up: the account was created and the user
+ * must verify their email before they can authenticate.
+ */
+export const isEmailVerificationRequiredError = (error: unknown): boolean => {
+  if (typeof error !== "object" || error === null) {
+    return false;
+  }
+  const candidate = error as {
+    code?: unknown;
+    rawData?: { code?: unknown } | null;
+    message?: unknown;
+  };
+  if (
+    candidate.code === "email_verification_required" ||
+    candidate.rawData?.code === "email_verification_required"
+  ) {
+    return true;
+  }
+  return (
+    typeof candidate.message === "string" &&
+    /email ownership must be verified|email[_\s-]?verification|verify your email/i.test(
+      candidate.message,
+    )
+  );
+};
+
+/**
+ * The pieces of an "email verification required" error that the client needs to
+ * complete the inline 6-digit-code step-up.
+ *
+ *   - `pendingAuthenticationToken` lets us call `authenticateWithEmailVerification`,
+ *     which both verifies the code and mints a session (the user lands logged in).
+ *   - `userId` / `email` let us (re)send a verification code via
+ *     `sendVerificationEmail` and look the account up later.
+ */
+export type EmailVerificationChallenge = {
+  email?: string;
+  pendingAuthenticationToken?: string;
+  userId?: string;
+};
+
+/**
+ * Extracts the email-verification challenge from a WorkOS authentication error.
+ * Returns `null` when the error is not an email-verification-required error.
+ *
+ * The structured `email_verification_required` error (code mode) carries the
+ * `pending_authentication_token` and the `user` object; link-mode
+ * (`GenericServerException`) carries neither, so the corresponding fields are
+ * left undefined and the caller falls back to an email lookup.
+ */
+export const getEmailVerificationChallenge = (
+  error: unknown,
+): EmailVerificationChallenge | null => {
+  if (!isEmailVerificationRequiredError(error)) {
+    return null;
+  }
+  const candidate = error as {
+    pendingAuthenticationToken?: unknown;
+    rawData?: {
+      pending_authentication_token?: unknown;
+      user?: { id?: unknown; email?: unknown } | null;
+    } | null;
+  };
+  const token =
+    typeof candidate.pendingAuthenticationToken === "string"
+      ? candidate.pendingAuthenticationToken
+      : typeof candidate.rawData?.pending_authentication_token === "string"
+        ? candidate.rawData.pending_authentication_token
+        : undefined;
+  const user = candidate.rawData?.user ?? null;
+  return {
+    email: typeof user?.email === "string" ? user.email : undefined,
+    pendingAuthenticationToken: token,
+    userId: typeof user?.id === "string" ? user.id : undefined,
+  };
+};
+
+/**
+ * Looks up a WorkOS user id by email. Used to (re)send verification codes when
+ * we don't already have the user id from an authentication error.
+ */
+export const findUserIdByEmail = async (
+  workos: WorkOS,
+  email: string,
+): Promise<string | undefined> => {
+  if (!email) {
+    return undefined;
+  }
+  const { data } = await workos.userManagement.listUsers({ email });
+  return data[0]?.id;
+};
+
+export const getJsonBody = async <T extends object>(request: Request): Promise<Partial<T>> => {
+  try {
+    return (await request.json()) as Partial<T>;
+  } catch {
+    return {} as Partial<T>;
+  }
+};
+
+export const getSafeReturnPathnameFromRequest = (request: Request, fallback = "/studio") => {
+  const url = new URL(request.url);
+  return toSafeReturnPathname(url.searchParams.get("returnPathname"), url.origin) ?? fallback;
+};
+
+export const getSafeReturnPathname = (
+  request: Request,
+  value: string | null | undefined,
+  fallback = "/studio",
+) => toSafeReturnPathname(value, new URL(request.url).origin) ?? fallback;
+
+export const responseWithSession = async (
+  authResponse: AuthenticationResponse,
+  body: JsonBody,
+  init: ResponseInit = {},
+) => {
+  if (!authResponse.sealedSession) {
+    throw new Error("WorkOS did not return a sealed session");
+  }
+
+  const authkit = await getAuthkit();
+  const sessionResult = await authkit.saveSession(undefined, authResponse.sealedSession);
+  const headers =
+    sessionResult.headers ??
+    (sessionResult.response?.headers.get("Set-Cookie")
+      ? { "Set-Cookie": sessionResult.response.headers.get("Set-Cookie") as string }
+      : undefined);
+
+  return jsonResponse(body, init, headers);
+};
+
+export const redirectWithSession = async (
+  authResponse: AuthenticationResponse,
+  location: string,
+  status = 303,
+) => {
+  if (!authResponse.sealedSession) {
+    throw new Error("WorkOS did not return a sealed session");
+  }
+
+  const authkit = await getAuthkit();
+  const sessionResult = await authkit.saveSession(undefined, authResponse.sealedSession);
+  const headers = new Headers({ Location: location });
+  appendHeaders(headers, sessionResult.headers);
+
+  const setCookie = sessionResult.response?.headers.get("Set-Cookie");
+  if (setCookie) {
+    headers.append("Set-Cookie", setCookie);
+  }
+
+  return new Response(null, { headers, status });
+};
+
+export const getProviderForSlug = (slug: string | undefined) => {
+  if (!slug || !(slug in providerBySlug)) {
+    return undefined;
+  }
+
+  return providerBySlug[slug as OAuthProviderSlug];
+};
diff --git a/apps/www/src/features/auth/lib/workos.ts b/apps/www/src/features/auth/lib/workos.ts
new file mode 100644
index 000000000..c92eec6ab
--- /dev/null
+++ b/apps/www/src/features/auth/lib/workos.ts
@@ -0,0 +1,18 @@
+import { toSafeReturnPathname } from "./validation";
+
+const buildAuthUrl = (
+  pathname: string,
+  paramName: "returnTo",
+  rawValue: string | undefined,
+  fallback: string,
+) => {
+  const origin = window.location.origin;
+  const safeValue = toSafeReturnPathname(rawValue, origin) ?? fallback;
+  const url = new URL(pathname, origin);
+  url.searchParams.set(paramName, safeValue);
+  return url.toString();
+};
+
+export const redirectToSignOut = (returnTo = "/") => {
+  window.location.href = buildAuthUrl("/auth/logout", "returnTo", returnTo, "/");
+};
diff --git a/apps/www/src/features/auth/middleware/auth.ts b/apps/www/src/features/auth/middleware/auth.ts
new file mode 100644
index 000000000..1874aa84e
--- /dev/null
+++ b/apps/www/src/features/auth/middleware/auth.ts
@@ -0,0 +1,13 @@
+import { redirect } from "@tanstack/react-router";
+import { createMiddleware } from "@tanstack/react-start";
+import { getAuth } from "@workos/authkit-tanstack-react-start";
+
+export const authMiddleware = createMiddleware().server(async ({ next }) => {
+  const auth = await getAuth();
+
+  if (!auth.user) {
+    throw redirect({ to: "/auth/login" });
+  }
+
+  return await next();
+});
diff --git a/apps/www/src/features/design/components/docs/component-registry.tsx b/apps/www/src/features/design/components/docs/component-registry.tsx
new file mode 100644
index 000000000..69a0576b4
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-registry.tsx
@@ -0,0 +1,32 @@
+"use client";
+
+// Re-export all UI components from @voidhash/ui for use in MDX
+export * from "@voidhash/ui";
+
+// Export common icons used in examples
+export {
+  AlertCircleIcon,
+  ArrowLeftIcon,
+  ArrowRightIcon,
+  BoldIcon,
+  CalendarIcon,
+  CheckIcon,
+  ChevronDownIcon,
+  ChevronLeftIcon,
+  ChevronRightIcon,
+  ChevronUpIcon,
+  CopyIcon,
+  ItalicIcon,
+  LoaderIcon,
+  MailIcon,
+  MenuIcon,
+  MoonIcon,
+  PlusIcon,
+  SearchIcon,
+  SettingsIcon,
+  SunIcon,
+  TrashIcon,
+  UnderlineIcon,
+  UserIcon,
+  XIcon,
+} from "lucide-react";
diff --git a/apps/www/src/features/design/components/docs/preview.tsx b/apps/www/src/features/design/components/docs/preview.tsx
new file mode 100644
index 000000000..06a4dc86d
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/preview.tsx
@@ -0,0 +1,24 @@
+"use client";
+
+import { cn } from "@/features/design/lib/cn";
+import type { ReactNode } from "react";
+
+interface PreviewProps {
+  children: ReactNode;
+  className?: string;
+  centered?: boolean;
+}
+
+export function Preview({ children, className, centered = true }: PreviewProps) {
+  return (
+    <div
+      className={cn(
+        "not-prose rounded-lg border bg-background p-6",
+        centered && "flex items-center justify-center",
+        className,
+      )}
+    >
+      {children}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/layout/docs.tsx b/apps/www/src/features/design/components/layout/docs.tsx
new file mode 100644
index 000000000..9acf43481
--- /dev/null
+++ b/apps/www/src/features/design/components/layout/docs.tsx
@@ -0,0 +1,229 @@
+"use client";
+
+import {
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger,
+  Sidebar,
+  SidebarContent,
+  SidebarGroup,
+  SidebarGroupContent,
+  SidebarGroupLabel,
+  SidebarInset,
+  SidebarMenu,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarProvider,
+} from "@voidhash/ui";
+import { Link as FrameworkLink, usePathname } from "fumadocs-core/framework";
+import type { PageTree } from "fumadocs-core/server";
+import { TreeContextProvider, useTreeContext } from "fumadocs-ui/contexts/tree";
+import { ChevronRight } from "lucide-react";
+import { CirclePlay } from "lucide-static";
+import {
+  type ComponentProps,
+  type ComponentType,
+  type ReactElement,
+  type ReactNode,
+  useMemo,
+} from "react";
+
+import { NavBar } from "../nav-bar";
+import { DocsThemeToggle } from "../theme-toggle";
+
+export interface DocsLayoutProps {
+  tree: PageTree.Root;
+  children: ReactNode;
+}
+
+export function DocsLayout({ tree, children }: DocsLayoutProps) {
+  return (
+    <SidebarProvider
+      className="flex flex-col [--header-height:calc(theme(spacing.14))]"
+      defaultOpen={true}
+    >
+      <TreeContextProvider tree={tree}>
+        <NavBar />
+
+        <div className="flex flex-1">
+          <DocsSidebar />
+
+          <SidebarInset className="top-[var(--header-height)] flex-1 transition-all duration-75">
+            <div className="flex w-full">{children}</div>
+          </SidebarInset>
+        </div>
+      </TreeContextProvider>
+    </SidebarProvider>
+  );
+}
+
+function DocsSidebar() {
+  const { root } = useTreeContext();
+  const pathname = usePathname();
+
+  const groups = useMemo(() => {
+    function transformNode(node: PageTree.Node): {
+      icon?: ReactElement;
+      title: string;
+      url: string;
+      isActive?: () => boolean;
+      items?: {
+        title: string;
+        url: string;
+        isActive?: () => boolean;
+      }[];
+    } | null {
+      if (node.type === "page") {
+        return {
+          icon: node.icon as ReactElement,
+          isActive: () => pathname === node.url,
+          title: typeof node.name === "string" ? node.name : String(node.name),
+          url: node.url,
+        };
+      }
+
+      if (node.type === "folder") {
+        const items = node.children
+          .map(transformNode)
+          .filter((item): item is NonNullable<typeof item> => item !== null);
+
+        if (node.index) {
+          return {
+            icon: node.icon as ReactElement,
+            isActive: () => pathname === node.index?.url || items.some((item) => item.isActive?.()),
+            items: items.length > 0 ? items : undefined,
+            title: typeof node.name === "string" ? node.name : String(node.name),
+            url: node.index.url,
+          };
+        }
+
+        if (items.length > 0) {
+          return {
+            icon: node.icon as ReactElement,
+            isActive: () => items.some((item) => item.isActive?.()),
+            items,
+            title: typeof node.name === "string" ? node.name : String(node.name),
+            url: "#",
+          };
+        }
+      }
+
+      return null;
+    }
+
+    const itemsWithDefaultGroup: PageTree.Node[] = [
+      {
+        $id: "get-started",
+        children: root.children.filter((item) => item.type === "page"),
+        icon: CirclePlay as unknown as ReactElement,
+        index: {
+          $id: "index.mdx",
+          $ref: {
+            file: "index.mdx",
+          },
+          name: "Index",
+          type: "page",
+          url: "/design",
+        },
+        name: "Get Started",
+        type: "folder",
+      },
+      ...root.children.filter((item) => item.type === "folder"),
+    ];
+
+    return itemsWithDefaultGroup
+      .map(transformNode)
+      .filter((item): item is NonNullable<typeof item> => item !== null);
+  }, [root, pathname]);
+
+  return (
+    <Sidebar className="!top-[var(--header-height)] !h-[calc(100svh-var(--header-height))] fixed min-w-64 border-r bg-background transition-all duration-75">
+      <SidebarContent className="gap-0">
+        <NavMain groups={groups} link={SidebarLink} />
+        <DocsThemeToggle className="mt-2 ml-5 block md:hidden" />
+      </SidebarContent>
+    </Sidebar>
+  );
+}
+
+function SidebarLink(props: ComponentProps<"a">) {
+  const href = props.href ?? "#";
+  return <FrameworkLink {...props} href={href} />;
+}
+
+export function NavMain({
+  link: Link,
+  groups,
+}: {
+  link: ComponentType<ComponentProps<"a">> | "a";
+  defaultOpenNested?: boolean;
+  groups: {
+    title: string;
+    icon?: ReactElement;
+    items?: {
+      title: string;
+      url: string;
+      icon?: ReactElement;
+      isActive?: () => boolean;
+      items?: {
+        title: string;
+        url: string;
+        isActive?: () => boolean;
+      }[];
+    }[];
+  }[];
+  tooltips?: "enabled" | "disabled";
+}) {
+  return (
+    <>
+      {groups.map((group) => (
+        <Collapsible
+          className="group/collapsible"
+          defaultOpen
+          key={group.title}
+          title={group.title}
+        >
+          <SidebarGroup className="p-0">
+            <SidebarGroupLabel
+              asChild
+              className="group/label -mt-px rounded-none border-border border-y px-6 py-5 text-sidebar-foreground text-sm hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"
+            >
+              <CollapsibleTrigger className="cursor-pointer">
+                <div
+                  className="*:-ml-0.5 *:mr-2 *:size-4 *:text-muted-foreground"
+                  // biome-ignore lint/security/noDangerouslySetInnerHtml: It is safe - static icon markup
+                  dangerouslySetInnerHTML={{
+                    __html: group.icon as unknown as string,
+                  }}
+                />
+                {group.title}
+                <ChevronRight className="ml-auto size-4 transition-transform group-data-[state=open]/collapsible:rotate-90" />
+              </CollapsibleTrigger>
+            </SidebarGroupLabel>
+            <CollapsibleContent className="pt-1">
+              <SidebarGroupContent className="p-2 pb-[9px]">
+                <SidebarMenu>
+                  {group.items?.map((item) => (
+                    <SidebarMenuItem
+                      className="px-1 font-normal text-muted-foreground"
+                      key={item.title}
+                    >
+                      <SidebarMenuButton asChild isActive={item.isActive?.()}>
+                        <Link
+                          className="px-3 font-normal data-[active=true]:bg-muted data-[active=true]:font-normal data-[active=true]:text-foreground"
+                          href={item.url}
+                        >
+                          {item.title}
+                        </Link>
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                  ))}
+                </SidebarMenu>
+              </SidebarGroupContent>
+            </CollapsibleContent>
+          </SidebarGroup>
+        </Collapsible>
+      ))}
+    </>
+  );
+}
diff --git a/apps/www/src/features/design/components/layout/page.tsx b/apps/www/src/features/design/components/layout/page.tsx
new file mode 100644
index 000000000..ae7705f6f
--- /dev/null
+++ b/apps/www/src/features/design/components/layout/page.tsx
@@ -0,0 +1,120 @@
+"use client";
+import { type PageTree } from "fumadocs-core/server";
+
+import { Card, CardContent, CardDescription, CardTitle } from "@voidhash/ui";
+import { Link, usePathname } from "fumadocs-core/framework";
+import { useTreeContext } from "fumadocs-ui/contexts/tree";
+import { ChevronLeftIcon, ChevronRightIcon } from "lucide-react";
+import { type ComponentProps, type ReactNode, useMemo } from "react";
+
+import { cn } from "../../lib/cn";
+
+export interface DocsPageProps {
+  children: ReactNode;
+}
+
+export function DocsPage({ ...props }: DocsPageProps) {
+  return (
+    <main className="flex w-full min-w-0 flex-col">
+      <article className="flex w-full max-w-[860px] flex-1 flex-col gap-6 px-4 py-8 md:mx-auto md:px-6">
+        {props.children}
+        <Footer />
+      </article>
+    </main>
+  );
+}
+
+export function DocsBody(props: ComponentProps<"div">) {
+  return (
+    <div {...props} className={cn("prose ", props.className)}>
+      {props.children}
+    </div>
+  );
+}
+
+export function DocsDescription(props: ComponentProps<"p">) {
+  // don't render if no description provided
+  if (props.children === undefined) {
+    return null;
+  }
+
+  return (
+    <p {...props} className={cn("mt-1 text-muted-foreground", props.className)}>
+      {props.children}
+    </p>
+  );
+}
+
+export function DocsTitle(props: ComponentProps<"h1">) {
+  return (
+    <h1 {...props} className={cn("mt-8 font-semibold text-3xl tracking-right", props.className)}>
+      {props.children}
+    </h1>
+  );
+}
+
+function Footer() {
+  const { root } = useTreeContext();
+  const pathname = usePathname();
+  const flatten = useMemo(() => {
+    const result: PageTree.Item[] = [];
+
+    function scan(items: PageTree.Node[]) {
+      for (const item of items) {
+        if (item.type === "page") {
+          result.push(item);
+        } else if (item.type === "folder") {
+          if (item.index) {
+            result.push(item.index);
+          }
+          scan(item.children);
+        }
+      }
+    }
+
+    scan(root.children);
+    return result;
+  }, [root]);
+
+  const { previous, next } = useMemo(() => {
+    const idx = flatten.findIndex((item) => item.url === pathname);
+
+    if (idx === -1) {
+      return {};
+    }
+    return {
+      next: flatten[idx + 1],
+      previous: flatten[idx - 1],
+    };
+  }, [flatten, pathname]);
+
+  return (
+    <div className="flex flex-row items-center justify-between gap-8">
+      {previous ? (
+        <Link className="flex-1" href={previous.url}>
+          <Card className="rounded-none hover:bg-card">
+            <CardContent>
+              <CardDescription className="mt-1 flex items-center">
+                <ChevronLeftIcon className="-ml-1 mr-1 size-4" /> <span>Previous Page</span>
+              </CardDescription>
+              <CardTitle className="mt-2 font-normal text-md">{previous.name}</CardTitle>
+            </CardContent>
+          </Card>
+        </Link>
+      ) : null}
+      {next ? (
+        <Link className="flex-1" href={next.url}>
+          <Card className="rounded-none hover:bg-card">
+            <CardContent className="flex w-full flex-col items-end">
+              <CardDescription className="mt-1 flex items-center">
+                <span>Next Page</span>
+                <ChevronRightIcon className="-mr-1 ml-1 size-4" />{" "}
+              </CardDescription>
+              <CardTitle className="mt-2 font-normal text-md">{next.name}</CardTitle>
+            </CardContent>
+          </Card>
+        </Link>
+      ) : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/nav-bar.tsx b/apps/www/src/features/design/components/nav-bar.tsx
new file mode 100644
index 000000000..463815de1
--- /dev/null
+++ b/apps/www/src/features/design/components/nav-bar.tsx
@@ -0,0 +1,66 @@
+"use client";
+
+import { Button, CommandShortcut, Logo, cn, useSidebar } from "@voidhash/ui";
+import { useSearchContext } from "fumadocs-ui/contexts/search";
+import { MenuIcon, SearchIcon } from "lucide-react";
+import type { ComponentProps } from "react";
+
+import { DocsThemeToggle } from "./theme-toggle";
+
+function SearchToggle(props: ComponentProps<"button">) {
+  const { enabled, setOpenSearch } = useSearchContext();
+  if (!enabled) {
+    return;
+  }
+
+  return (
+    <button
+      {...props}
+      className={cn(
+        "flex min-w-[200px] items-center gap-2 bg-transparent text-sm md:bg-muted",
+        props.className,
+      )}
+      onClick={() => setOpenSearch(true)}
+    >
+      <SearchIcon className="size-4 cursor-pointer text-muted-foreground " />
+      <span className="mr-4 hidden flex-1 text-left text-muted-foreground md:block">Search...</span>
+      <CommandShortcut className="hidden md:block">⌘K</CommandShortcut>
+    </button>
+  );
+}
+
+export function NavBar() {
+  return (
+    <div className="fixed z-10 flex h-[var(--header-height)] w-full flex-row items-center justify-between border-border border-b bg-background transition-all duration-75">
+      <div className="flex flex-1 items-center justify-between px-4 py-2">
+        <div className="mr-7 flex items-center">
+          <a className="flex items-center gap-3" href="https://voidhash.com">
+            <Logo className="ml-2 h-4" color="mono" variant="symbol" />
+            <span className="rounded-md border-border bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
+              Design System
+            </span>
+          </a>
+        </div>
+        <div className="flex items-center gap-2 md:flex-1">
+          <div className="md:flex-1">
+            <SearchToggle className="ml-8 cursor-pointer rounded-lg bg-muted p-2 px-3 hover:bg-accent" />
+          </div>
+          <DocsThemeToggle />
+          <SidebarToggle />
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function SidebarToggle() {
+  const { openMobile, setOpenMobile } = useSidebar();
+  const handleToggle = () => {
+    setOpenMobile(!openMobile);
+  };
+  return (
+    <Button className={cn("md:hidden")} onClick={handleToggle} variant="ghost">
+      <MenuIcon className="size-4" />
+    </Button>
+  );
+}
diff --git a/apps/www/src/features/design/components/theme-toggle.tsx b/apps/www/src/features/design/components/theme-toggle.tsx
new file mode 100644
index 000000000..87c810b14
--- /dev/null
+++ b/apps/www/src/features/design/components/theme-toggle.tsx
@@ -0,0 +1,15 @@
+"use client";
+import { ThemeToggle, cn } from "@voidhash/ui";
+import { useTheme } from "next-themes";
+
+export function DocsThemeToggle({ className }: { className?: string }) {
+  const { theme, setTheme } = useTheme();
+
+  return (
+    <ThemeToggle
+      className={cn("hidden md:block", className)}
+      setTheme={setTheme}
+      theme={theme ?? "system"}
+    />
+  );
+}
diff --git a/apps/www/src/features/design/content/docs/components/accordion.mdx b/apps/www/src/features/design/content/docs/components/accordion.mdx
new file mode 100644
index 000000000..9f384c78f
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/accordion.mdx
@@ -0,0 +1,115 @@
+---
+title: Accordion
+description: A vertically stacked set of interactive headings that reveal content.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Accordion type="single" collapsible className="w-full">
+    <AccordionItem value="item-1">
+      <AccordionTrigger>Is it accessible?</AccordionTrigger>
+      <AccordionContent>Yes. It adheres to the WAI-ARIA design pattern.</AccordionContent>
+    </AccordionItem>
+    <AccordionItem value="item-2">
+      <AccordionTrigger>Is it styled?</AccordionTrigger>
+      <AccordionContent>
+        Yes. It comes with default styles that match your design system.
+      </AccordionContent>
+    </AccordionItem>
+    <AccordionItem value="item-3">
+      <AccordionTrigger>Is it animated?</AccordionTrigger>
+      <AccordionContent>
+        Yes. It's animated by default with smooth expand/collapse transitions.
+      </AccordionContent>
+    </AccordionItem>
+  </Accordion>
+</Preview>
+
+```tsx
+import {
+  Accordion,
+  AccordionContent,
+  AccordionItem,
+  AccordionTrigger,
+} from "@voidhash/ui";
+
+<Accordion type="single" collapsible>
+  <AccordionItem value="item-1">
+    <AccordionTrigger>Is it accessible?</AccordionTrigger>
+    <AccordionContent>Yes. It adheres to the WAI-ARIA design pattern.</AccordionContent>
+  </AccordionItem>
+</Accordion>;
+```
+
+## Components
+
+### Accordion
+
+The root container that manages the accordion state.
+
+### AccordionItem
+
+A single collapsible item within the accordion.
+
+### AccordionTrigger
+
+The button that toggles the accordion item's content.
+
+### AccordionContent
+
+The content revealed when the accordion item is expanded.
+
+## Examples
+
+### Multiple Items Open
+
+<Preview centered={false}>
+  <Accordion type="multiple" className="w-full">
+    <AccordionItem value="item-1">
+      <AccordionTrigger>First Item</AccordionTrigger>
+      <AccordionContent>Content for the first item.</AccordionContent>
+    </AccordionItem>
+    <AccordionItem value="item-2">
+      <AccordionTrigger>Second Item</AccordionTrigger>
+      <AccordionContent>Content for the second item.</AccordionContent>
+    </AccordionItem>
+  </Accordion>
+</Preview>
+
+```tsx
+<Accordion type="multiple">
+  <AccordionItem value="item-1">
+    <AccordionTrigger>First Item</AccordionTrigger>
+    <AccordionContent>Content for the first item.</AccordionContent>
+  </AccordionItem>
+  <AccordionItem value="item-2">
+    <AccordionTrigger>Second Item</AccordionTrigger>
+    <AccordionContent>Content for the second item.</AccordionContent>
+  </AccordionItem>
+</Accordion>
+```
+
+## Props
+
+### Accordion Props
+
+<TypeTable
+  type={{
+    type: {
+      description: "Whether single or multiple items can be opened",
+      type: "'single' | 'multiple'",
+      default: "Required",
+    },
+    collapsible: {
+      description: "Allow closing all items (only for type='single')",
+      type: "boolean",
+      default: "false",
+    },
+    defaultValue: {
+      description: "Default expanded item(s)",
+      type: "string | string[]",
+      default: "undefined",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/alert-dialog.mdx b/apps/www/src/features/design/content/docs/components/alert-dialog.mdx
new file mode 100644
index 000000000..045d41615
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/alert-dialog.mdx
@@ -0,0 +1,119 @@
+---
+title: Alert Dialog
+description: A modal dialog that interrupts the user with important content and expects a response.
+---
+
+## Usage
+
+<Preview>
+  <AlertDialog>
+    <AlertDialogTrigger asChild>
+      <Button variant="outline">Delete Account</Button>
+    </AlertDialogTrigger>
+    <AlertDialogContent>
+      <AlertDialogHeader>
+        <AlertDialogTitle>Are you absolutely sure?</AlertDialogTitle>
+        <AlertDialogDescription>
+          This action cannot be undone. This will permanently delete your account and remove your
+          data from our servers.
+        </AlertDialogDescription>
+      </AlertDialogHeader>
+      <AlertDialogFooter>
+        <AlertDialogCancel>Cancel</AlertDialogCancel>
+        <AlertDialogAction>Continue</AlertDialogAction>
+      </AlertDialogFooter>
+    </AlertDialogContent>
+  </AlertDialog>
+</Preview>
+
+```tsx
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  AlertDialogTrigger,
+} from "@voidhash/ui";
+
+<AlertDialog>
+  <AlertDialogTrigger asChild>
+    <Button variant="outline">Delete Account</Button>
+  </AlertDialogTrigger>
+  <AlertDialogContent>
+    <AlertDialogHeader>
+      <AlertDialogTitle>Are you absolutely sure?</AlertDialogTitle>
+      <AlertDialogDescription>This action cannot be undone.</AlertDialogDescription>
+    </AlertDialogHeader>
+    <AlertDialogFooter>
+      <AlertDialogCancel>Cancel</AlertDialogCancel>
+      <AlertDialogAction>Continue</AlertDialogAction>
+    </AlertDialogFooter>
+  </AlertDialogContent>
+</AlertDialog>;
+```
+
+## Components
+
+### AlertDialog
+
+The root component that manages dialog state.
+
+### AlertDialogTrigger
+
+The element that opens the dialog.
+
+### AlertDialogContent
+
+The modal content container with overlay.
+
+### AlertDialogHeader
+
+Container for title and description.
+
+### AlertDialogTitle
+
+The title of the alert dialog.
+
+### AlertDialogDescription
+
+A description of the alert dialog's purpose.
+
+### AlertDialogFooter
+
+Container for action buttons.
+
+### AlertDialogAction
+
+The primary action button (styled as default button).
+
+### AlertDialogCancel
+
+The cancel button (styled as outline button).
+
+## Props
+
+### AlertDialog Props
+
+<TypeTable
+  type={{
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+    defaultOpen: {
+      description: "Initial open state for uncontrolled usage",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/alert.mdx b/apps/www/src/features/design/content/docs/components/alert.mdx
new file mode 100644
index 000000000..f3bb020d9
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/alert.mdx
@@ -0,0 +1,85 @@
+---
+title: Alert
+description: Displays a callout for user attention with different severity levels.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Alert>
+    <AlertCircleIcon />
+    <AlertTitle>Heads up!</AlertTitle>
+    <AlertDescription>You can add components to your app using the CLI.</AlertDescription>
+  </Alert>
+</Preview>
+
+```tsx
+import { Alert, AlertDescription, AlertTitle } from "@voidhash/ui";
+import { AlertCircleIcon } from "lucide-react";
+
+<Alert>
+  <AlertCircleIcon />
+  <AlertTitle>Heads up!</AlertTitle>
+  <AlertDescription>You can add components to your app using the CLI.</AlertDescription>
+</Alert>;
+```
+
+## Variants
+
+<div className="grid gap-4">
+  <Preview centered={false}>
+    <Alert variant="default">
+      <AlertCircleIcon />
+      <AlertTitle>Default</AlertTitle>
+      <AlertDescription>This is a default alert.</AlertDescription>
+    </Alert>
+  </Preview>
+  <Preview centered={false}>
+    <Alert variant="success">
+      <CheckIcon />
+      <AlertTitle>Success</AlertTitle>
+      <AlertDescription>Your changes have been saved.</AlertDescription>
+    </Alert>
+  </Preview>
+  <Preview centered={false}>
+    <Alert variant="destructive">
+      <XIcon />
+      <AlertTitle>Error</AlertTitle>
+      <AlertDescription>Something went wrong.</AlertDescription>
+    </Alert>
+  </Preview>
+</div>
+
+```tsx
+<Alert variant="default">...</Alert>
+<Alert variant="success">...</Alert>
+<Alert variant="destructive">...</Alert>
+```
+
+## Components
+
+### Alert
+
+The main container component with variant styling.
+
+### AlertTitle
+
+The title of the alert message.
+
+### AlertDescription
+
+The description or body text of the alert.
+
+## Props
+
+### Alert Props
+
+<TypeTable
+  type={{
+    variant: {
+      description: "The visual style of the alert",
+      type: "'default' | 'success' | 'destructive'",
+      default: "'default'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/avatar.mdx b/apps/www/src/features/design/content/docs/components/avatar.mdx
new file mode 100644
index 000000000..353d2d3eb
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/avatar.mdx
@@ -0,0 +1,110 @@
+---
+title: Avatar
+description: An image element with a fallback for representing the user.
+---
+
+## Usage
+
+<Preview>
+  <Avatar>
+    <AvatarImage src="https://github.com/shadcn.png" alt="@shadcn" />
+    <AvatarFallback>CN</AvatarFallback>
+  </Avatar>
+</Preview>
+
+```tsx
+import { Avatar, AvatarFallback, AvatarImage } from "@voidhash/ui";
+
+<Avatar>
+  <AvatarImage src="https://github.com/shadcn.png" alt="@shadcn" />
+  <AvatarFallback>CN</AvatarFallback>
+</Avatar>;
+```
+
+## Components
+
+### Avatar
+
+The root container that wraps the image and fallback.
+
+### AvatarImage
+
+The image element that displays the user's avatar.
+
+### AvatarFallback
+
+A fallback element shown when the image fails to load.
+
+## Examples
+
+### With Fallback
+
+<Preview>
+  <Avatar>
+    <AvatarImage src="/broken-image.jpg" alt="User" />
+    <AvatarFallback>JD</AvatarFallback>
+  </Avatar>
+</Preview>
+
+```tsx
+<Avatar>
+  <AvatarImage src="/broken-image.jpg" alt="User" />
+  <AvatarFallback>JD</AvatarFallback>
+</Avatar>
+```
+
+### Different Sizes
+
+<Preview>
+  <div className="flex items-center gap-4">
+    <Avatar className="size-6">
+      <AvatarImage src="https://github.com/shadcn.png" />
+      <AvatarFallback>S</AvatarFallback>
+    </Avatar>
+    <Avatar className="size-8">
+      <AvatarImage src="https://github.com/shadcn.png" />
+      <AvatarFallback>M</AvatarFallback>
+    </Avatar>
+    <Avatar className="size-12">
+      <AvatarImage src="https://github.com/shadcn.png" />
+      <AvatarFallback>L</AvatarFallback>
+    </Avatar>
+  </div>
+</Preview>
+
+```tsx
+<Avatar className="size-6">...</Avatar>
+<Avatar className="size-8">...</Avatar>
+<Avatar className="size-12">...</Avatar>
+```
+
+## Props
+
+### Avatar Props
+
+<TypeTable
+  type={{
+    className: {
+      description: "Additional CSS classes for sizing",
+      type: "string",
+      default: "size-8",
+    },
+  }}
+/>
+
+### AvatarImage Props
+
+<TypeTable
+  type={{
+    src: {
+      description: "The image source URL",
+      type: "string",
+      default: "Required",
+    },
+    alt: {
+      description: "Alternative text for the image",
+      type: "string",
+      default: "undefined",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/badge.mdx b/apps/www/src/features/design/content/docs/components/badge.mdx
new file mode 100644
index 000000000..dfae9b3cf
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/badge.mdx
@@ -0,0 +1,89 @@
+---
+title: Badge
+description: Displays a small label or indicator for status, categories, or counts.
+---
+
+## Usage
+
+<Preview>
+  <Badge>Badge</Badge>
+</Preview>
+
+```tsx
+import { Badge } from "@voidhash/ui";
+
+<Badge>Badge</Badge>;
+```
+
+## Variants
+
+<div className="flex flex-wrap gap-4">
+  <Preview className="p-4">
+    <Badge variant="default">Default</Badge>
+  </Preview>
+  <Preview className="p-4">
+    <Badge variant="secondary">Secondary</Badge>
+  </Preview>
+  <Preview className="p-4">
+    <Badge variant="destructive">Destructive</Badge>
+  </Preview>
+  <Preview className="p-4">
+    <Badge variant="outline">Outline</Badge>
+  </Preview>
+</div>
+
+```tsx
+<Badge variant="default">Default</Badge>
+<Badge variant="secondary">Secondary</Badge>
+<Badge variant="destructive">Destructive</Badge>
+<Badge variant="outline">Outline</Badge>
+```
+
+## Examples
+
+### With Icon
+
+<Preview>
+  <Badge>
+    <CheckIcon /> Verified
+  </Badge>
+</Preview>
+
+```tsx
+<Badge>
+  <CheckIcon /> Verified
+</Badge>
+```
+
+### As Link
+
+Use the `asChild` prop to render the badge as a link:
+
+<Preview>
+  <Badge asChild>
+    <a href="#">Clickable Badge</a>
+  </Badge>
+</Preview>
+
+```tsx
+<Badge asChild>
+  <a href="/category">Category</a>
+</Badge>
+```
+
+## Props
+
+<TypeTable
+  type={{
+    variant: {
+      description: "The visual style of the badge",
+      type: "'default' | 'secondary' | 'destructive' | 'outline'",
+      default: "'default'",
+    },
+    asChild: {
+      description: "Render as a child element using Radix Slot",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/breadcrumb.mdx b/apps/www/src/features/design/content/docs/components/breadcrumb.mdx
new file mode 100644
index 000000000..497641d38
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/breadcrumb.mdx
@@ -0,0 +1,132 @@
+---
+title: Breadcrumb
+description: Displays the path to the current resource using a hierarchy of links.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Breadcrumb>
+    <BreadcrumbList>
+      <BreadcrumbItem>
+        <BreadcrumbLink href="/">Home</BreadcrumbLink>
+      </BreadcrumbItem>
+      <BreadcrumbSeparator />
+      <BreadcrumbItem>
+        <BreadcrumbLink href="/components">Components</BreadcrumbLink>
+      </BreadcrumbItem>
+      <BreadcrumbSeparator />
+      <BreadcrumbItem>
+        <BreadcrumbPage>Breadcrumb</BreadcrumbPage>
+      </BreadcrumbItem>
+    </BreadcrumbList>
+  </Breadcrumb>
+</Preview>
+
+```tsx
+import {
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+} from "@voidhash/ui";
+
+<Breadcrumb>
+  <BreadcrumbList>
+    <BreadcrumbItem>
+      <BreadcrumbLink href="/">Home</BreadcrumbLink>
+    </BreadcrumbItem>
+    <BreadcrumbSeparator />
+    <BreadcrumbItem>
+      <BreadcrumbLink href="/components">Components</BreadcrumbLink>
+    </BreadcrumbItem>
+    <BreadcrumbSeparator />
+    <BreadcrumbItem>
+      <BreadcrumbPage>Breadcrumb</BreadcrumbPage>
+    </BreadcrumbItem>
+  </BreadcrumbList>
+</Breadcrumb>;
+```
+
+## Components
+
+### Breadcrumb
+
+The root navigation element.
+
+### BreadcrumbList
+
+The ordered list container for breadcrumb items.
+
+### BreadcrumbItem
+
+A single item in the breadcrumb trail.
+
+### BreadcrumbLink
+
+A clickable link within a breadcrumb item.
+
+### BreadcrumbPage
+
+The current page indicator (non-clickable).
+
+### BreadcrumbSeparator
+
+The separator between breadcrumb items (default: chevron).
+
+### BreadcrumbEllipsis
+
+An ellipsis indicator for collapsed breadcrumb items.
+
+## Examples
+
+### With Ellipsis
+
+<Preview centered={false}>
+  <Breadcrumb>
+    <BreadcrumbList>
+      <BreadcrumbItem>
+        <BreadcrumbLink href="/">Home</BreadcrumbLink>
+      </BreadcrumbItem>
+      <BreadcrumbSeparator />
+      <BreadcrumbItem>
+        <BreadcrumbEllipsis />
+      </BreadcrumbItem>
+      <BreadcrumbSeparator />
+      <BreadcrumbItem>
+        <BreadcrumbLink href="/docs">Documentation</BreadcrumbLink>
+      </BreadcrumbItem>
+      <BreadcrumbSeparator />
+      <BreadcrumbItem>
+        <BreadcrumbPage>Current</BreadcrumbPage>
+      </BreadcrumbItem>
+    </BreadcrumbList>
+  </Breadcrumb>
+</Preview>
+
+```tsx
+<BreadcrumbItem>
+  <BreadcrumbEllipsis />
+</BreadcrumbItem>
+```
+
+## Props
+
+### BreadcrumbLink Props
+
+<TypeTable
+  type={{
+    href: {
+      description: "The URL to navigate to",
+      type: "string",
+      default: "undefined",
+    },
+    asChild: {
+      description: "Render as child element",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/button.mdx b/apps/www/src/features/design/content/docs/components/button.mdx
new file mode 100644
index 000000000..2a7bf9ea9
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/button.mdx
@@ -0,0 +1,188 @@
+---
+title: Button
+description: A versatile button component with multiple variants and sizes.
+---
+
+## Usage
+
+<Preview>
+  <Button>Click me</Button>
+</Preview>
+
+```tsx
+import { Button } from "@voidhash/ui";
+
+<Button>Click me</Button>;
+```
+
+## Variants
+
+The Button component supports the following visual variants:
+
+<div className="grid grid-cols-2 md:grid-cols-4 gap-4">
+  <Preview className="p-4">
+    <Button variant="default">Default</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="secondary">Secondary</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="destructive">Destructive</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="success">Success</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="outline">Outline</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="ghost">Ghost</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="link">Link</Button>
+  </Preview>
+</div>
+
+```tsx
+<Button variant="default">Default</Button>
+<Button variant="secondary">Secondary</Button>
+<Button variant="destructive">Destructive</Button>
+<Button variant="success">Success</Button>
+<Button variant="outline">Outline</Button>
+<Button variant="ghost">Ghost</Button>
+<Button variant="link">Link</Button>
+```
+
+## Sizes
+
+<div className="flex flex-wrap items-center gap-4">
+  <Preview className="p-4">
+    <Button size="sm">Small</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button size="default">Default</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button size="lg">Large</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button size="icon">
+      <PlusIcon />
+    </Button>
+  </Preview>
+</div>
+
+```tsx
+<Button size="sm">Small</Button>
+<Button size="default">Default</Button>
+<Button size="lg">Large</Button>
+<Button size="icon"><PlusIcon /></Button>
+```
+
+## Examples
+
+### With Icon
+
+<Preview>
+  <Button>
+    <MailIcon /> Login with Email
+  </Button>
+</Preview>
+
+```tsx
+<Button>
+  <MailIcon /> Login with Email
+</Button>
+```
+
+### Disabled State
+
+<Preview>
+  <Button disabled>Disabled</Button>
+</Preview>
+
+```tsx
+<Button disabled>Disabled</Button>
+```
+
+### Loading State
+
+Use the `loading` prop to show a spinner and disable the button:
+
+<Preview>
+  <Button loading>Loading</Button>
+</Preview>
+
+```tsx
+<Button loading>Loading</Button>
+```
+
+<div className="flex flex-wrap items-center gap-4">
+  <Preview className="p-4">
+    <Button loading>Saving...</Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="secondary" loading>
+      Processing
+    </Button>
+  </Preview>
+  <Preview className="p-4">
+    <Button variant="outline" loading>
+      Loading
+    </Button>
+  </Preview>
+</div>
+
+```tsx
+<Button loading>Saving...</Button>
+<Button variant="secondary" loading>Processing</Button>
+<Button variant="outline" loading>Loading</Button>
+```
+
+### As Link
+
+Use the `asChild` prop to render the button as a child element, like a link:
+
+<Preview>
+  <Button asChild>
+    <a href="#">Link Button</a>
+  </Button>
+</Preview>
+
+```tsx
+<Button asChild>
+  <a href="/dashboard">Go to Dashboard</a>
+</Button>
+```
+
+## Props
+
+<TypeTable
+  type={{
+    variant: {
+      description: "The visual style of the button",
+      type: "'default' | 'destructive' | 'success' | 'outline' | 'secondary' | 'ghost' | 'link'",
+      default: "'default'",
+    },
+    size: {
+      description: "The size of the button",
+      type: "'default' | 'sm' | 'lg' | 'icon'",
+      default: "'default'",
+    },
+    asChild: {
+      description: "Render as a child element using Radix Slot",
+      type: "boolean",
+      default: "false",
+    },
+    disabled: {
+      description: "Whether the button is disabled",
+      type: "boolean",
+      default: "false",
+    },
+    loading: {
+      description: "Whether the button is in a loading state (shows spinner and disables button)",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/calendar.mdx b/apps/www/src/features/design/content/docs/components/calendar.mdx
new file mode 100644
index 000000000..264279b4a
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/calendar.mdx
@@ -0,0 +1,93 @@
+---
+title: Calendar
+description: A date picker component for selecting dates.
+---
+
+## Usage
+
+<Preview>
+  <Calendar mode="single" className="rounded-md border" />
+</Preview>
+
+```tsx
+import { Calendar } from "@voidhash/ui";
+
+<Calendar mode="single" />;
+```
+
+## Examples
+
+### Single Date Selection
+
+<Preview>
+  <Calendar mode="single" className="rounded-md border" />
+</Preview>
+
+```tsx
+const [date, setDate] = useState<Date | undefined>(new Date());
+
+<Calendar mode="single" selected={date} onSelect={setDate} />;
+```
+
+### Range Selection
+
+<Preview>
+  <Calendar mode="range" numberOfMonths={2} className="rounded-md border" />
+</Preview>
+
+```tsx
+<Calendar mode="range" numberOfMonths={2} selected={dateRange} onSelect={setDateRange} />
+```
+
+### Multiple Months
+
+<Preview>
+  <Calendar mode="single" numberOfMonths={2} className="rounded-md border" />
+</Preview>
+
+```tsx
+<Calendar mode="single" numberOfMonths={2} />
+```
+
+### Disabled Dates
+
+```tsx
+<Calendar mode="single" disabled={(date) => date < new Date()} />
+```
+
+## Props
+
+<TypeTable
+  type={{
+    mode: {
+      description: "Selection mode",
+      type: "'single' | 'range' | 'multiple'",
+      default: "'single'",
+    },
+    selected: {
+      description: "Selected date(s)",
+      type: "Date | DateRange | Date[]",
+      default: "undefined",
+    },
+    onSelect: {
+      description: "Callback when selection changes",
+      type: "(date: Date | DateRange | Date[]) => void",
+      default: "undefined",
+    },
+    numberOfMonths: {
+      description: "Number of months to display",
+      type: "number",
+      default: "1",
+    },
+    disabled: {
+      description: "Disable specific dates",
+      type: "Matcher | Matcher[]",
+      default: "undefined",
+    },
+    defaultMonth: {
+      description: "Initial month to display",
+      type: "Date",
+      default: "new Date()",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/card.mdx b/apps/www/src/features/design/content/docs/components/card.mdx
new file mode 100644
index 000000000..5b6d9720d
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/card.mdx
@@ -0,0 +1,153 @@
+---
+title: Card
+description: A container component for grouping related content and actions.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Card className="w-full max-w-md">
+    <CardHeader>
+      <CardTitle>Card Title</CardTitle>
+      <CardDescription>Card description with additional context.</CardDescription>
+    </CardHeader>
+    <CardContent>
+      <p>Card content goes here. This can contain any content you need.</p>
+    </CardContent>
+    <CardFooter>
+      <Button>Action</Button>
+    </CardFooter>
+  </Card>
+</Preview>
+
+```tsx
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+
+<Card>
+  <CardHeader>
+    <CardTitle>Card Title</CardTitle>
+    <CardDescription>Card description.</CardDescription>
+  </CardHeader>
+  <CardContent>
+    <p>Card content goes here.</p>
+  </CardContent>
+  <CardFooter>
+    <Button>Action</Button>
+  </CardFooter>
+</Card>;
+```
+
+## Components
+
+### Card
+
+The main container with optional variant styling.
+
+### CardHeader
+
+Container for title, description, and optional action.
+
+### CardTitle
+
+The card's heading text.
+
+### CardDescription
+
+Secondary text describing the card's purpose.
+
+### CardAction
+
+An action element positioned in the header.
+
+### CardContent
+
+The main content area of the card.
+
+### CardFooter
+
+Container for action buttons at the bottom.
+
+## Variants
+
+<div className="grid gap-4">
+  <Preview centered={false}>
+    <Card variant="default" className="w-full max-w-md">
+      <CardHeader>
+        <CardTitle>Default Card</CardTitle>
+        <CardDescription>Standard card styling.</CardDescription>
+      </CardHeader>
+      <CardContent>Default variant content.</CardContent>
+    </Card>
+  </Preview>
+  <Preview centered={false}>
+    <Card variant="destructive" className="w-full max-w-md">
+      <CardHeader>
+        <CardTitle>Destructive Card</CardTitle>
+        <CardDescription>Card with destructive border.</CardDescription>
+      </CardHeader>
+      <CardContent>Destructive variant content.</CardContent>
+    </Card>
+  </Preview>
+</div>
+
+```tsx
+<Card variant="default">...</Card>
+<Card variant="destructive">...</Card>
+```
+
+## Examples
+
+### With Action Button
+
+<Preview centered={false}>
+  <Card className="w-full max-w-md">
+    <CardHeader>
+      <CardTitle>Settings</CardTitle>
+      <CardDescription>Manage your account settings.</CardDescription>
+      <CardAction>
+        <Button variant="outline" size="sm">
+          Edit
+        </Button>
+      </CardAction>
+    </CardHeader>
+    <CardContent>
+      <p>Your current settings are displayed here.</p>
+    </CardContent>
+  </Card>
+</Preview>
+
+```tsx
+<Card>
+  <CardHeader>
+    <CardTitle>Settings</CardTitle>
+    <CardDescription>Manage your account settings.</CardDescription>
+    <CardAction>
+      <Button variant="outline" size="sm">
+        Edit
+      </Button>
+    </CardAction>
+  </CardHeader>
+  <CardContent>...</CardContent>
+</Card>
+```
+
+## Props
+
+### Card Props
+
+<TypeTable
+  type={{
+    variant: {
+      description: "The visual style of the card",
+      type: "'default' | 'destructive'",
+      default: "'default'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/carousel.mdx b/apps/www/src/features/design/content/docs/components/carousel.mdx
new file mode 100644
index 000000000..efa44ca04
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/carousel.mdx
@@ -0,0 +1,126 @@
+---
+title: Carousel
+description: A slideshow component for cycling through elements.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Carousel className="w-full max-w-sm">
+    <CarouselContent>
+      {Array.from({ length: 5 }).map((_, index) => (
+        <CarouselItem key={index}>
+          <Card>
+            <CardContent className="flex aspect-square items-center justify-center p-6">
+              <span className="text-4xl font-semibold">{index + 1}</span>
+            </CardContent>
+          </Card>
+        </CarouselItem>
+      ))}
+    </CarouselContent>
+    <CarouselPrevious />
+    <CarouselNext />
+  </Carousel>
+</Preview>
+
+```tsx
+import {
+  Carousel,
+  CarouselContent,
+  CarouselItem,
+  CarouselNext,
+  CarouselPrevious,
+} from "@voidhash/ui";
+
+<Carousel>
+  <CarouselContent>
+    <CarouselItem>Slide 1</CarouselItem>
+    <CarouselItem>Slide 2</CarouselItem>
+    <CarouselItem>Slide 3</CarouselItem>
+  </CarouselContent>
+  <CarouselPrevious />
+  <CarouselNext />
+</Carousel>;
+```
+
+## Components
+
+### Carousel
+
+The root container with carousel state.
+
+### CarouselContent
+
+The scrollable container for items.
+
+### CarouselItem
+
+A single slide in the carousel.
+
+### CarouselPrevious
+
+Button to go to the previous slide.
+
+### CarouselNext
+
+Button to go to the next slide.
+
+## Examples
+
+### Multiple Items Per View
+
+<Preview centered={false}>
+  <Carousel className="w-full max-w-md">
+    <CarouselContent className="-ml-4">
+      {Array.from({ length: 5 }).map((_, index) => (
+        <CarouselItem key={index} className="basis-1/3 pl-4">
+          <Card>
+            <CardContent className="flex aspect-square items-center justify-center p-6">
+              <span className="text-2xl font-semibold">{index + 1}</span>
+            </CardContent>
+          </Card>
+        </CarouselItem>
+      ))}
+    </CarouselContent>
+    <CarouselPrevious />
+    <CarouselNext />
+  </Carousel>
+</Preview>
+
+```tsx
+<CarouselItem className="basis-1/3">...</CarouselItem>
+```
+
+### Vertical Orientation
+
+```tsx
+<Carousel orientation="vertical">
+  <CarouselContent className="h-[200px]">
+    <CarouselItem>...</CarouselItem>
+  </CarouselContent>
+</Carousel>
+```
+
+## Props
+
+### Carousel Props
+
+<TypeTable
+  type={{
+    orientation: {
+      description: "Scroll orientation",
+      type: "'horizontal' | 'vertical'",
+      default: "'horizontal'",
+    },
+    opts: {
+      description: "Embla Carousel options",
+      type: "EmblaOptionsType",
+      default: "{}",
+    },
+    setApi: {
+      description: "Callback to receive carousel API",
+      type: "(api: EmblaCarouselType) => void",
+      default: "undefined",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/chart.mdx b/apps/www/src/features/design/content/docs/components/chart.mdx
new file mode 100644
index 000000000..0b30dcc3f
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/chart.mdx
@@ -0,0 +1,138 @@
+---
+title: Chart
+description: A wrapper around Recharts for consistent chart styling.
+---
+
+## Usage
+
+The Chart components provide a styled wrapper around Recharts library.
+
+```tsx
+import {
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  ChartLegend,
+  ChartLegendContent,
+} from "@voidhash/ui";
+import { Bar, BarChart, XAxis, YAxis } from "recharts";
+
+const chartConfig = {
+  desktop: {
+    label: "Desktop",
+    color: "hsl(var(--chart-1))",
+  },
+  mobile: {
+    label: "Mobile",
+    color: "hsl(var(--chart-2))",
+  },
+};
+
+const data = [
+  { month: "January", desktop: 186, mobile: 80 },
+  { month: "February", desktop: 305, mobile: 200 },
+  { month: "March", desktop: 237, mobile: 120 },
+];
+
+<ChartContainer config={chartConfig} className="h-[300px]">
+  <BarChart data={data}>
+    <XAxis dataKey="month" />
+    <YAxis />
+    <ChartTooltip content={<ChartTooltipContent />} />
+    <ChartLegend content={<ChartLegendContent />} />
+    <Bar dataKey="desktop" fill="var(--color-desktop)" />
+    <Bar dataKey="mobile" fill="var(--color-mobile)" />
+  </BarChart>
+</ChartContainer>;
+```
+
+## Components
+
+### ChartContainer
+
+The main wrapper that provides chart configuration and styling.
+
+### ChartTooltip
+
+A styled tooltip for displaying data on hover.
+
+### ChartTooltipContent
+
+The content rendered inside the tooltip.
+
+### ChartLegend
+
+A legend component for the chart.
+
+### ChartLegendContent
+
+The content rendered inside the legend.
+
+## Configuration
+
+Define a chart config object to map data keys to labels and colors:
+
+```tsx
+const chartConfig = {
+  revenue: {
+    label: "Revenue",
+    color: "hsl(var(--chart-1))",
+  },
+  expenses: {
+    label: "Expenses",
+    color: "hsl(var(--chart-2))",
+  },
+};
+```
+
+## Available Chart Types
+
+You can use any Recharts chart type:
+
+- AreaChart
+- BarChart
+- LineChart
+- PieChart
+- RadarChart
+- RadialBarChart
+
+## Props
+
+### ChartContainer Props
+
+<TypeTable
+  type={{
+    config: {
+      description: "Chart configuration object",
+      type: "ChartConfig",
+      default: "Required",
+    },
+    className: {
+      description: "CSS classes for sizing",
+      type: "string",
+      default: "undefined",
+    },
+  }}
+/>
+
+### ChartTooltipContent Props
+
+<TypeTable
+  type={{
+    hideLabel: {
+      description: "Hide the label in tooltip",
+      type: "boolean",
+      default: "false",
+    },
+    hideIndicator: {
+      description: "Hide the color indicator",
+      type: "boolean",
+      default: "false",
+    },
+    indicator: {
+      description: "Indicator style",
+      type: "'line' | 'dot' | 'dashed'",
+      default: "'dot'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/checkbox.mdx b/apps/www/src/features/design/content/docs/components/checkbox.mdx
new file mode 100644
index 000000000..909059860
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/checkbox.mdx
@@ -0,0 +1,105 @@
+---
+title: Checkbox
+description: A control that allows the user to toggle between checked and not checked.
+---
+
+## Usage
+
+<Preview>
+  <div className="flex items-center gap-2">
+    <Checkbox id="terms" />
+    <Label htmlFor="terms">Accept terms and conditions</Label>
+  </div>
+</Preview>
+
+```tsx
+import { Checkbox } from "@voidhash/ui";
+import { Label } from "@voidhash/ui";
+
+<div className="flex items-center gap-2">
+  <Checkbox id="terms" />
+  <Label htmlFor="terms">Accept terms and conditions</Label>
+</div>;
+```
+
+## Examples
+
+### Checked by Default
+
+<Preview>
+  <div className="flex items-center gap-2">
+    <Checkbox id="default-checked" defaultChecked />
+    <Label htmlFor="default-checked">Checked by default</Label>
+  </div>
+</Preview>
+
+```tsx
+<Checkbox defaultChecked />
+```
+
+### Disabled
+
+<Preview>
+  <div className="flex flex-col gap-4">
+    <div className="flex items-center gap-2">
+      <Checkbox id="disabled" disabled />
+      <Label htmlFor="disabled">Disabled unchecked</Label>
+    </div>
+    <div className="flex items-center gap-2">
+      <Checkbox id="disabled-checked" disabled defaultChecked />
+      <Label htmlFor="disabled-checked">Disabled checked</Label>
+    </div>
+  </div>
+</Preview>
+
+```tsx
+<Checkbox disabled />
+<Checkbox disabled defaultChecked />
+```
+
+### With Form
+
+<Preview centered={false}>
+  <div className="grid gap-4">
+    <div className="flex items-center gap-2">
+      <Checkbox id="newsletter" />
+      <Label htmlFor="newsletter">Subscribe to newsletter</Label>
+    </div>
+    <div className="flex items-center gap-2">
+      <Checkbox id="marketing" />
+      <Label htmlFor="marketing">Receive marketing emails</Label>
+    </div>
+  </div>
+</Preview>
+
+## Props
+
+<TypeTable
+  type={{
+    checked: {
+      description: "Controlled checked state",
+      type: "boolean | 'indeterminate'",
+      default: "undefined",
+    },
+    defaultChecked: {
+      description: "Initial checked state",
+      type: "boolean",
+      default: "false",
+    },
+    onCheckedChange: {
+      description: "Callback when checked state changes",
+      type: "(checked: boolean | 'indeterminate') => void",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the checkbox is disabled",
+      type: "boolean",
+      default: "false",
+    },
+    required: {
+      description: "Whether the checkbox is required",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/collapsible.mdx b/apps/www/src/features/design/content/docs/components/collapsible.mdx
new file mode 100644
index 000000000..fb3bbca1e
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/collapsible.mdx
@@ -0,0 +1,101 @@
+---
+title: Collapsible
+description: An interactive component that expands and collapses content.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Collapsible className="w-full max-w-md space-y-2">
+    <div className="flex items-center justify-between space-x-4 px-4">
+      <h4 className="text-sm font-semibold">@peduarte starred 3 repositories</h4>
+      <CollapsibleTrigger asChild>
+        <Button variant="ghost" size="sm">
+          <ChevronDownIcon className="h-4 w-4" />
+          <span className="sr-only">Toggle</span>
+        </Button>
+      </CollapsibleTrigger>
+    </div>
+    <div className="rounded-md border px-4 py-2 font-mono text-sm shadow-sm">
+      @radix-ui/primitives
+    </div>
+    <CollapsibleContent className="space-y-2">
+      <div className="rounded-md border px-4 py-2 font-mono text-sm shadow-sm">
+        @radix-ui/colors
+      </div>
+      <div className="rounded-md border px-4 py-2 font-mono text-sm shadow-sm">@stitches/react</div>
+    </CollapsibleContent>
+  </Collapsible>
+</Preview>
+
+```tsx
+import { Collapsible, CollapsibleContent, CollapsibleTrigger } from "@voidhash/ui";
+
+<Collapsible>
+  <div className="flex items-center justify-between">
+    <span>Toggle content</span>
+    <CollapsibleTrigger asChild>
+      <Button variant="ghost" size="sm">
+        <ChevronDownIcon />
+      </Button>
+    </CollapsibleTrigger>
+  </div>
+  <CollapsibleContent>Hidden content here</CollapsibleContent>
+</Collapsible>;
+```
+
+## Components
+
+### Collapsible
+
+The root component managing collapse state.
+
+### CollapsibleTrigger
+
+The element that toggles the collapsed state.
+
+### CollapsibleContent
+
+The content that is shown/hidden.
+
+## Examples
+
+### Controlled
+
+```tsx
+const [isOpen, setIsOpen] = useState(false);
+
+<Collapsible open={isOpen} onOpenChange={setIsOpen}>
+  <CollapsibleTrigger>Toggle</CollapsibleTrigger>
+  <CollapsibleContent>Content</CollapsibleContent>
+</Collapsible>;
+```
+
+## Props
+
+### Collapsible Props
+
+<TypeTable
+  type={{
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    defaultOpen: {
+      description: "Initial open state",
+      type: "boolean",
+      default: "false",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the collapsible is disabled",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/command.mdx b/apps/www/src/features/design/content/docs/components/command.mdx
new file mode 100644
index 000000000..87cfa6e99
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/command.mdx
@@ -0,0 +1,159 @@
+---
+title: Command
+description: A command palette component for searching and selecting commands.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Command className="rounded-lg border shadow-md w-full max-w-md">
+    <CommandInput placeholder="Type a command or search..." />
+    <CommandList>
+      <CommandEmpty>No results found.</CommandEmpty>
+      <CommandGroup heading="Suggestions">
+        <CommandItem>
+          <CalendarIcon className="mr-2 h-4 w-4" /> Calendar
+        </CommandItem>
+        <CommandItem>
+          <SearchIcon className="mr-2 h-4 w-4" /> Search
+        </CommandItem>
+        <CommandItem>
+          <SettingsIcon className="mr-2 h-4 w-4" /> Settings
+        </CommandItem>
+      </CommandGroup>
+      <CommandSeparator />
+      <CommandGroup heading="Actions">
+        <CommandItem>
+          <UserIcon className="mr-2 h-4 w-4" /> Profile
+        </CommandItem>
+        <CommandItem>
+          <MailIcon className="mr-2 h-4 w-4" /> Mail
+        </CommandItem>
+      </CommandGroup>
+    </CommandList>
+  </Command>
+</Preview>
+
+```tsx
+import {
+  Command,
+  CommandEmpty,
+  CommandGroup,
+  CommandInput,
+  CommandItem,
+  CommandList,
+  CommandSeparator,
+} from "@voidhash/ui";
+
+<Command>
+  <CommandInput placeholder="Search..." />
+  <CommandList>
+    <CommandEmpty>No results found.</CommandEmpty>
+    <CommandGroup heading="Suggestions">
+      <CommandItem>Calendar</CommandItem>
+      <CommandItem>Search</CommandItem>
+    </CommandGroup>
+  </CommandList>
+</Command>;
+```
+
+## Components
+
+### Command
+
+The root command palette container.
+
+### CommandInput
+
+The search input field.
+
+### CommandList
+
+The scrollable list of results.
+
+### CommandEmpty
+
+Message shown when no results match.
+
+### CommandGroup
+
+A group of related items with a heading.
+
+### CommandItem
+
+An individual selectable item.
+
+### CommandSeparator
+
+A visual divider between groups.
+
+### CommandShortcut
+
+Displays keyboard shortcut text.
+
+### CommandDialog
+
+A dialog-wrapped command palette.
+
+## Examples
+
+### Command Dialog
+
+<Preview>
+  <Button variant="outline" className="text-muted-foreground">
+    <SearchIcon className="mr-2 h-4 w-4" />
+    <span>Search...</span>
+    <CommandShortcut className="ml-4">⌘K</CommandShortcut>
+  </Button>
+</Preview>
+
+```tsx
+import { CommandDialog } from "@voidhash/ui";
+
+const [open, setOpen] = useState(false);
+
+<CommandDialog open={open} onOpenChange={setOpen}>
+  <CommandInput placeholder="Search..." />
+  <CommandList>
+    <CommandEmpty>No results found.</CommandEmpty>
+    <CommandGroup heading="Actions">
+      <CommandItem>New File</CommandItem>
+      <CommandItem>New Folder</CommandItem>
+    </CommandGroup>
+  </CommandList>
+</CommandDialog>;
+```
+
+### With Keyboard Shortcut
+
+```tsx
+useEffect(() => {
+  const down = (e: KeyboardEvent) => {
+    if (e.key === "k" && (e.metaKey || e.ctrlKey)) {
+      e.preventDefault();
+      setOpen((open) => !open);
+    }
+  };
+  document.addEventListener("keydown", down);
+  return () => document.removeEventListener("keydown", down);
+}, []);
+```
+
+## Props
+
+### CommandItem Props
+
+<TypeTable
+  type={{
+    onSelect: {
+      description: "Callback when item is selected",
+      type: "(value: string) => void",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the item is disabled",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/context-menu.mdx b/apps/www/src/features/design/content/docs/components/context-menu.mdx
new file mode 100644
index 000000000..8307b555e
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/context-menu.mdx
@@ -0,0 +1,127 @@
+---
+title: Context Menu
+description: A menu that appears on right-click or long-press.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <ContextMenu>
+    <ContextMenuTrigger className="flex h-[150px] w-[300px] items-center justify-center rounded-md border border-dashed text-sm">
+      Right click here
+    </ContextMenuTrigger>
+    <ContextMenuContent className="w-64">
+      <ContextMenuItem>
+        Back
+        <ContextMenuShortcut>⌘[</ContextMenuShortcut>
+      </ContextMenuItem>
+      <ContextMenuItem disabled>
+        Forward
+        <ContextMenuShortcut>⌘]</ContextMenuShortcut>
+      </ContextMenuItem>
+      <ContextMenuItem>
+        Reload
+        <ContextMenuShortcut>⌘R</ContextMenuShortcut>
+      </ContextMenuItem>
+      <ContextMenuSeparator />
+      <ContextMenuCheckboxItem checked>
+        Show Bookmarks Bar
+        <ContextMenuShortcut>⌘⇧B</ContextMenuShortcut>
+      </ContextMenuCheckboxItem>
+      <ContextMenuCheckboxItem>Show Full URLs</ContextMenuCheckboxItem>
+      <ContextMenuSeparator />
+      <ContextMenuRadioGroup value="pedro">
+        <ContextMenuLabel inset>People</ContextMenuLabel>
+        <ContextMenuSeparator />
+        <ContextMenuRadioItem value="pedro">Pedro Duarte</ContextMenuRadioItem>
+        <ContextMenuRadioItem value="colm">Colm Tuite</ContextMenuRadioItem>
+      </ContextMenuRadioGroup>
+    </ContextMenuContent>
+  </ContextMenu>
+</Preview>
+
+```tsx
+import {
+  ContextMenu,
+  ContextMenuCheckboxItem,
+  ContextMenuContent,
+  ContextMenuItem,
+  ContextMenuLabel,
+  ContextMenuRadioGroup,
+  ContextMenuRadioItem,
+  ContextMenuSeparator,
+  ContextMenuShortcut,
+  ContextMenuTrigger,
+} from "@voidhash/ui";
+
+<ContextMenu>
+  <ContextMenuTrigger>Right click here</ContextMenuTrigger>
+  <ContextMenuContent>
+    <ContextMenuItem>Back</ContextMenuItem>
+    <ContextMenuItem>Forward</ContextMenuItem>
+    <ContextMenuSeparator />
+    <ContextMenuCheckboxItem checked>Show Toolbar</ContextMenuCheckboxItem>
+  </ContextMenuContent>
+</ContextMenu>;
+```
+
+## Components
+
+### ContextMenu
+
+The root component.
+
+### ContextMenuTrigger
+
+The element that triggers the menu on right-click.
+
+### ContextMenuContent
+
+The popup menu content.
+
+### ContextMenuItem
+
+A clickable menu item.
+
+### ContextMenuCheckboxItem
+
+A menu item with a checkbox.
+
+### ContextMenuRadioGroup / ContextMenuRadioItem
+
+Radio button items for single selection.
+
+### ContextMenuLabel
+
+A non-interactive label.
+
+### ContextMenuSeparator
+
+A visual divider.
+
+### ContextMenuShortcut
+
+Displays keyboard shortcut text.
+
+### ContextMenuSub / ContextMenuSubTrigger / ContextMenuSubContent
+
+Submenu components.
+
+## Props
+
+### ContextMenuItem Props
+
+<TypeTable
+  type={{
+    inset: {
+      description: "Add left padding for alignment",
+      type: "boolean",
+      default: "false",
+    },
+    disabled: {
+      description: "Disable the item",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/dialog.mdx b/apps/www/src/features/design/content/docs/components/dialog.mdx
new file mode 100644
index 000000000..87d66544b
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/dialog.mdx
@@ -0,0 +1,156 @@
+---
+title: Dialog
+description: A modal window that appears on top of the main content.
+---
+
+## Usage
+
+<Preview>
+  <Dialog>
+    <DialogTrigger asChild>
+      <Button variant="outline">Open Dialog</Button>
+    </DialogTrigger>
+    <DialogContent>
+      <DialogHeader>
+        <DialogTitle>Edit Profile</DialogTitle>
+        <DialogDescription>
+          Make changes to your profile here. Click save when you're done.
+        </DialogDescription>
+      </DialogHeader>
+      <div className="grid gap-4 py-4">
+        <div className="grid gap-2">
+          <Label htmlFor="name">Name</Label>
+          <Input id="name" defaultValue="John Doe" />
+        </div>
+        <div className="grid gap-2">
+          <Label htmlFor="email">Email</Label>
+          <Input id="email" defaultValue="john@example.com" />
+        </div>
+      </div>
+      <DialogFooter>
+        <Button type="submit">Save changes</Button>
+      </DialogFooter>
+    </DialogContent>
+  </Dialog>
+</Preview>
+
+```tsx
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui";
+
+<Dialog>
+  <DialogTrigger asChild>
+    <Button variant="outline">Open Dialog</Button>
+  </DialogTrigger>
+  <DialogContent>
+    <DialogHeader>
+      <DialogTitle>Edit Profile</DialogTitle>
+      <DialogDescription>Make changes to your profile here.</DialogDescription>
+    </DialogHeader>
+    <div className="py-4">{/* Dialog content */}</div>
+    <DialogFooter>
+      <Button type="submit">Save changes</Button>
+    </DialogFooter>
+  </DialogContent>
+</Dialog>;
+```
+
+## Components
+
+### Dialog
+
+The root component that manages dialog state.
+
+### DialogTrigger
+
+The element that opens the dialog when clicked.
+
+### DialogContent
+
+The modal content container with close button and overlay.
+
+### DialogHeader
+
+Container for title and description.
+
+### DialogTitle
+
+The dialog's heading text.
+
+### DialogDescription
+
+A description of the dialog's purpose.
+
+### DialogFooter
+
+Container for action buttons at the bottom.
+
+### DialogClose
+
+An element that closes the dialog when clicked.
+
+## Examples
+
+### Simple Confirmation
+
+<Preview>
+  <Dialog>
+    <DialogTrigger asChild>
+      <Button>Confirm Action</Button>
+    </DialogTrigger>
+    <DialogContent>
+      <DialogHeader>
+        <DialogTitle>Confirm</DialogTitle>
+        <DialogDescription>Are you sure you want to continue?</DialogDescription>
+      </DialogHeader>
+      <DialogFooter>
+        <DialogClose asChild>
+          <Button variant="outline">Cancel</Button>
+        </DialogClose>
+        <Button>Continue</Button>
+      </DialogFooter>
+    </DialogContent>
+  </Dialog>
+</Preview>
+
+```tsx
+<DialogClose asChild>
+  <Button variant="outline">Cancel</Button>
+</DialogClose>
+```
+
+## Props
+
+### Dialog Props
+
+<TypeTable
+  type={{
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+    defaultOpen: {
+      description: "Initial open state",
+      type: "boolean",
+      default: "false",
+    },
+    modal: {
+      description: "Whether to render as modal",
+      type: "boolean",
+      default: "true",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/drawer.mdx b/apps/www/src/features/design/content/docs/components/drawer.mdx
new file mode 100644
index 000000000..8e7603a80
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/drawer.mdx
@@ -0,0 +1,169 @@
+---
+title: Drawer
+description: A touch-friendly panel that slides from any edge with gesture support.
+---
+
+## Usage
+
+<Preview>
+  <Drawer>
+    <DrawerTrigger asChild>
+      <Button variant="outline">Open Drawer</Button>
+    </DrawerTrigger>
+    <DrawerContent>
+      <DrawerHeader>
+        <DrawerTitle>Drawer Title</DrawerTitle>
+        <DrawerDescription>This is a drawer with touch gestures support.</DrawerDescription>
+      </DrawerHeader>
+      <div className="p-4">
+        <p>Drawer content goes here.</p>
+      </div>
+      <DrawerFooter>
+        <Button>Submit</Button>
+        <DrawerClose asChild>
+          <Button variant="outline">Cancel</Button>
+        </DrawerClose>
+      </DrawerFooter>
+    </DrawerContent>
+  </Drawer>
+</Preview>
+
+```tsx
+import {
+  Drawer,
+  DrawerClose,
+  DrawerContent,
+  DrawerDescription,
+  DrawerFooter,
+  DrawerHeader,
+  DrawerTitle,
+  DrawerTrigger,
+} from "@voidhash/ui";
+
+<Drawer>
+  <DrawerTrigger asChild>
+    <Button variant="outline">Open Drawer</Button>
+  </DrawerTrigger>
+  <DrawerContent>
+    <DrawerHeader>
+      <DrawerTitle>Drawer Title</DrawerTitle>
+      <DrawerDescription>Description here.</DrawerDescription>
+    </DrawerHeader>
+    <div className="p-4">Content</div>
+    <DrawerFooter>
+      <Button>Submit</Button>
+      <DrawerClose asChild>
+        <Button variant="outline">Cancel</Button>
+      </DrawerClose>
+    </DrawerFooter>
+  </DrawerContent>
+</Drawer>;
+```
+
+## Components
+
+### Drawer
+
+The root component managing drawer state.
+
+### DrawerTrigger
+
+The element that opens the drawer.
+
+### DrawerContent
+
+The sliding panel with a handle indicator.
+
+### DrawerHeader
+
+Container for title and description.
+
+### DrawerTitle
+
+The drawer's heading.
+
+### DrawerDescription
+
+A description of the drawer's purpose.
+
+### DrawerFooter
+
+Container for action buttons.
+
+### DrawerClose
+
+An element that closes the drawer.
+
+## Examples
+
+### Different Directions
+
+<Preview>
+  <div className="flex gap-2">
+    <Drawer direction="bottom">
+      <DrawerTrigger asChild>
+        <Button variant="outline">Bottom</Button>
+      </DrawerTrigger>
+      <DrawerContent>
+        <DrawerHeader>
+          <DrawerTitle>Bottom Drawer</DrawerTitle>
+        </DrawerHeader>
+      </DrawerContent>
+    </Drawer>
+    <Drawer direction="left">
+      <DrawerTrigger asChild>
+        <Button variant="outline">Left</Button>
+      </DrawerTrigger>
+      <DrawerContent>
+        <DrawerHeader>
+          <DrawerTitle>Left Drawer</DrawerTitle>
+        </DrawerHeader>
+      </DrawerContent>
+    </Drawer>
+    <Drawer direction="right">
+      <DrawerTrigger asChild>
+        <Button variant="outline">Right</Button>
+      </DrawerTrigger>
+      <DrawerContent>
+        <DrawerHeader>
+          <DrawerTitle>Right Drawer</DrawerTitle>
+        </DrawerHeader>
+      </DrawerContent>
+    </Drawer>
+  </div>
+</Preview>
+
+```tsx
+<Drawer direction="bottom">...</Drawer>
+<Drawer direction="left">...</Drawer>
+<Drawer direction="right">...</Drawer>
+```
+
+## Props
+
+### Drawer Props
+
+<TypeTable
+  type={{
+    direction: {
+      description: "The edge to slide from",
+      type: "'top' | 'right' | 'bottom' | 'left'",
+      default: "'bottom'",
+    },
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+    shouldScaleBackground: {
+      description: "Whether to scale the background",
+      type: "boolean",
+      default: "true",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/dropdown-menu.mdx b/apps/www/src/features/design/content/docs/components/dropdown-menu.mdx
new file mode 100644
index 000000000..cd33c5250
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/dropdown-menu.mdx
@@ -0,0 +1,195 @@
+---
+title: Dropdown Menu
+description: A menu with a set of actions triggered by a button.
+---
+
+## Usage
+
+<Preview>
+  <DropdownMenu>
+    <DropdownMenuTrigger asChild>
+      <Button variant="outline">Open Menu</Button>
+    </DropdownMenuTrigger>
+    <DropdownMenuContent>
+      <DropdownMenuLabel>My Account</DropdownMenuLabel>
+      <DropdownMenuSeparator />
+      <DropdownMenuItem>
+        <UserIcon /> Profile
+      </DropdownMenuItem>
+      <DropdownMenuItem>
+        <SettingsIcon /> Settings
+      </DropdownMenuItem>
+      <DropdownMenuSeparator />
+      <DropdownMenuItem variant="destructive">
+        <TrashIcon /> Delete
+      </DropdownMenuItem>
+    </DropdownMenuContent>
+  </DropdownMenu>
+</Preview>
+
+```tsx
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuLabel,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+
+<DropdownMenu>
+  <DropdownMenuTrigger asChild>
+    <Button variant="outline">Open Menu</Button>
+  </DropdownMenuTrigger>
+  <DropdownMenuContent>
+    <DropdownMenuLabel>My Account</DropdownMenuLabel>
+    <DropdownMenuSeparator />
+    <DropdownMenuItem>Profile</DropdownMenuItem>
+    <DropdownMenuItem>Settings</DropdownMenuItem>
+  </DropdownMenuContent>
+</DropdownMenu>;
+```
+
+## Components
+
+### DropdownMenu
+
+The root component managing menu state.
+
+### DropdownMenuTrigger
+
+The element that opens the menu.
+
+### DropdownMenuContent
+
+The popup content container.
+
+### DropdownMenuItem
+
+A clickable menu item.
+
+### DropdownMenuLabel
+
+A non-interactive label.
+
+### DropdownMenuSeparator
+
+A visual divider between items.
+
+### DropdownMenuCheckboxItem
+
+A menu item with a checkbox.
+
+### DropdownMenuRadioGroup / DropdownMenuRadioItem
+
+Radio button items for single selection.
+
+### DropdownMenuShortcut
+
+Displays keyboard shortcut text.
+
+### DropdownMenuSub / DropdownMenuSubTrigger / DropdownMenuSubContent
+
+Nested submenu components.
+
+## Examples
+
+### With Checkbox Items
+
+<Preview>
+  <DropdownMenu>
+    <DropdownMenuTrigger asChild>
+      <Button variant="outline">View Options</Button>
+    </DropdownMenuTrigger>
+    <DropdownMenuContent>
+      <DropdownMenuLabel>Appearance</DropdownMenuLabel>
+      <DropdownMenuSeparator />
+      <DropdownMenuCheckboxItem checked>Show Toolbar</DropdownMenuCheckboxItem>
+      <DropdownMenuCheckboxItem>Show Sidebar</DropdownMenuCheckboxItem>
+      <DropdownMenuCheckboxItem>Show Status Bar</DropdownMenuCheckboxItem>
+    </DropdownMenuContent>
+  </DropdownMenu>
+</Preview>
+
+```tsx
+<DropdownMenuCheckboxItem checked>Show Toolbar</DropdownMenuCheckboxItem>
+```
+
+### With Keyboard Shortcuts
+
+<Preview>
+  <DropdownMenu>
+    <DropdownMenuTrigger asChild>
+      <Button variant="outline">Edit</Button>
+    </DropdownMenuTrigger>
+    <DropdownMenuContent className="w-56">
+      <DropdownMenuItem>
+        Cut
+        <DropdownMenuShortcut>⌘X</DropdownMenuShortcut>
+      </DropdownMenuItem>
+      <DropdownMenuItem>
+        Copy
+        <DropdownMenuShortcut>⌘C</DropdownMenuShortcut>
+      </DropdownMenuItem>
+      <DropdownMenuItem>
+        Paste
+        <DropdownMenuShortcut>⌘V</DropdownMenuShortcut>
+      </DropdownMenuItem>
+    </DropdownMenuContent>
+  </DropdownMenu>
+</Preview>
+
+```tsx
+<DropdownMenuItem>
+  Cut
+  <DropdownMenuShortcut>⌘X</DropdownMenuShortcut>
+</DropdownMenuItem>
+```
+
+### Destructive Item
+
+<Preview>
+  <DropdownMenu>
+    <DropdownMenuTrigger asChild>
+      <Button variant="outline">Actions</Button>
+    </DropdownMenuTrigger>
+    <DropdownMenuContent>
+      <DropdownMenuItem>Edit</DropdownMenuItem>
+      <DropdownMenuItem>Duplicate</DropdownMenuItem>
+      <DropdownMenuSeparator />
+      <DropdownMenuItem variant="destructive">
+        <TrashIcon /> Delete
+      </DropdownMenuItem>
+    </DropdownMenuContent>
+  </DropdownMenu>
+</Preview>
+
+```tsx
+<DropdownMenuItem variant="destructive">
+  <TrashIcon /> Delete
+</DropdownMenuItem>
+```
+
+## Props
+
+### DropdownMenuItem Props
+
+<TypeTable
+  type={{
+    variant: {
+      description: "Visual variant",
+      type: "'default' | 'destructive'",
+      default: "'default'",
+    },
+    inset: {
+      description: "Add left padding for alignment",
+      type: "boolean",
+      default: "false",
+    },
+    disabled: {
+      description: "Disable the item",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/dropzone.mdx b/apps/www/src/features/design/content/docs/components/dropzone.mdx
new file mode 100644
index 000000000..1ae1f3641
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/dropzone.mdx
@@ -0,0 +1,102 @@
+---
+title: Dropzone
+description: A file upload zone with drag and drop support.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Dropzone className="w-full max-w-md" />
+</Preview>
+
+```tsx
+import { Dropzone } from "@voidhash/ui";
+
+<Dropzone
+  onDrop={(files) => console.log(files)}
+  accept={{ "image/*": [".png", ".jpg", ".jpeg"] }}
+/>;
+```
+
+## Examples
+
+### With Custom Content
+
+```tsx
+<Dropzone>
+  <div className="flex flex-col items-center gap-2">
+    <UploadIcon className="h-8 w-8 text-muted-foreground" />
+    <p className="text-sm text-muted-foreground">Drag and drop files here, or click to browse</p>
+  </div>
+</Dropzone>
+```
+
+### Accept Specific File Types
+
+```tsx
+<Dropzone
+  accept={{
+    "image/*": [".png", ".jpg", ".jpeg", ".gif"],
+    "application/pdf": [".pdf"],
+  }}
+/>
+```
+
+### With Max File Size
+
+```tsx
+<Dropzone
+  maxSize={5 * 1024 * 1024} // 5MB
+  onDropRejected={(files) => {
+    toast.error("File too large");
+  }}
+/>
+```
+
+### Multiple Files
+
+```tsx
+<Dropzone
+  multiple
+  onDrop={(files) => {
+    console.log("Dropped files:", files);
+  }}
+/>
+```
+
+## Props
+
+<TypeTable
+  type={{
+    onDrop: {
+      description: "Callback when files are dropped",
+      type: "(files: File[]) => void",
+      default: "undefined",
+    },
+    onDropRejected: {
+      description: "Callback when files are rejected",
+      type: "(files: FileRejection[]) => void",
+      default: "undefined",
+    },
+    accept: {
+      description: "Accepted file types",
+      type: "Accept",
+      default: "undefined",
+    },
+    maxSize: {
+      description: "Maximum file size in bytes",
+      type: "number",
+      default: "undefined",
+    },
+    multiple: {
+      description: "Allow multiple files",
+      type: "boolean",
+      default: "false",
+    },
+    disabled: {
+      description: "Disable the dropzone",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/form.mdx b/apps/www/src/features/design/content/docs/components/form.mdx
new file mode 100644
index 000000000..89986f6b4
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/form.mdx
@@ -0,0 +1,186 @@
+---
+title: Form
+description: Form components with validation using react-hook-form and zod.
+---
+
+## Usage
+
+The Form components integrate with react-hook-form for validation and error handling.
+
+```tsx
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useForm } from "react-hook-form";
+import * as z from "zod";
+import {
+  Form,
+  FormControl,
+  FormDescription,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui";
+
+const formSchema = z.object({
+  username: z.string().min(2, {
+    message: "Username must be at least 2 characters.",
+  }),
+});
+
+function ProfileForm() {
+  const form = useForm<z.infer<typeof formSchema>>({
+    resolver: zodResolver(formSchema),
+    defaultValues: {
+      username: "",
+    },
+  });
+
+  function onSubmit(values: z.infer<typeof formSchema>) {
+    console.log(values);
+  }
+
+  return (
+    <Form {...form}>
+      <form onSubmit={form.handleSubmit(onSubmit)} className="space-y-8">
+        <FormField
+          control={form.control}
+          name="username"
+          render={({ field }) => (
+            <FormItem>
+              <FormLabel>Username</FormLabel>
+              <FormControl>
+                <Input placeholder="username" {...field} />
+              </FormControl>
+              <FormDescription>This is your public display name.</FormDescription>
+              <FormMessage />
+            </FormItem>
+          )}
+        />
+        <Button type="submit">Submit</Button>
+      </form>
+    </Form>
+  );
+}
+```
+
+## Components
+
+### Form
+
+The root form provider that wraps react-hook-form.
+
+### FormField
+
+Connects a form field to react-hook-form's control.
+
+### FormItem
+
+Container for a single form field.
+
+### FormLabel
+
+The label for a form field.
+
+### FormControl
+
+Wrapper for the form input element.
+
+### FormDescription
+
+Helper text for the form field.
+
+### FormMessage
+
+Displays validation error messages.
+
+## Examples
+
+### With Multiple Fields
+
+```tsx
+<Form {...form}>
+  <form onSubmit={form.handleSubmit(onSubmit)} className="space-y-4">
+    <FormField
+      control={form.control}
+      name="email"
+      render={({ field }) => (
+        <FormItem>
+          <FormLabel>Email</FormLabel>
+          <FormControl>
+            <Input type="email" {...field} />
+          </FormControl>
+          <FormMessage />
+        </FormItem>
+      )}
+    />
+    <FormField
+      control={form.control}
+      name="password"
+      render={({ field }) => (
+        <FormItem>
+          <FormLabel>Password</FormLabel>
+          <FormControl>
+            <Input type="password" {...field} />
+          </FormControl>
+          <FormMessage />
+        </FormItem>
+      )}
+    />
+    <Button type="submit">Submit</Button>
+  </form>
+</Form>
+```
+
+### With Select
+
+```tsx
+<FormField
+  control={form.control}
+  name="role"
+  render={({ field }) => (
+    <FormItem>
+      <FormLabel>Role</FormLabel>
+      <Select onValueChange={field.onChange} defaultValue={field.value}>
+        <FormControl>
+          <SelectTrigger>
+            <SelectValue placeholder="Select a role" />
+          </SelectTrigger>
+        </FormControl>
+        <SelectContent>
+          <SelectItem value="admin">Admin</SelectItem>
+          <SelectItem value="user">User</SelectItem>
+        </SelectContent>
+      </Select>
+      <FormMessage />
+    </FormItem>
+  )}
+/>
+```
+
+### With Checkbox
+
+```tsx
+<FormField
+  control={form.control}
+  name="terms"
+  render={({ field }) => (
+    <FormItem className="flex items-start space-x-3 space-y-0">
+      <FormControl>
+        <Checkbox checked={field.value} onCheckedChange={field.onChange} />
+      </FormControl>
+      <div className="space-y-1 leading-none">
+        <FormLabel>Accept terms and conditions</FormLabel>
+        <FormDescription>You agree to our Terms of Service.</FormDescription>
+      </div>
+    </FormItem>
+  )}
+/>
+```
+
+## Dependencies
+
+The Form component requires:
+
+```bash
+npm install react-hook-form @hookform/resolvers zod
+```
diff --git a/apps/www/src/features/design/content/docs/components/hover-card.mdx b/apps/www/src/features/design/content/docs/components/hover-card.mdx
new file mode 100644
index 000000000..66405abc1
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/hover-card.mdx
@@ -0,0 +1,137 @@
+---
+title: Hover Card
+description: A card that appears when hovering over an element.
+---
+
+## Usage
+
+<Preview>
+  <HoverCard>
+    <HoverCardTrigger asChild>
+      <Button variant="link">@nextjs</Button>
+    </HoverCardTrigger>
+    <HoverCardContent>
+      <div className="flex justify-between space-x-4">
+        <Avatar>
+          <AvatarImage src="https://github.com/vercel.png" />
+          <AvatarFallback>VC</AvatarFallback>
+        </Avatar>
+        <div className="space-y-1">
+          <h4 className="text-sm font-semibold">@nextjs</h4>
+          <p className="text-sm">The React Framework – created and maintained by @vercel.</p>
+          <div className="flex items-center pt-2">
+            <CalendarIcon className="mr-2 h-4 w-4 opacity-70" />
+            <span className="text-xs text-muted-foreground">Joined December 2021</span>
+          </div>
+        </div>
+      </div>
+    </HoverCardContent>
+  </HoverCard>
+</Preview>
+
+```tsx
+import { HoverCard, HoverCardContent, HoverCardTrigger } from "@voidhash/ui";
+
+<HoverCard>
+  <HoverCardTrigger asChild>
+    <Button variant="link">@nextjs</Button>
+  </HoverCardTrigger>
+  <HoverCardContent>
+    <div className="space-y-1">
+      <h4 className="text-sm font-semibold">@nextjs</h4>
+      <p className="text-sm">The React Framework.</p>
+    </div>
+  </HoverCardContent>
+</HoverCard>;
+```
+
+## Components
+
+### HoverCard
+
+The root component managing hover state.
+
+### HoverCardTrigger
+
+The element that triggers the card on hover.
+
+### HoverCardContent
+
+The popup card content.
+
+## Examples
+
+### Simple Hover Card
+
+<Preview>
+  <HoverCard>
+    <HoverCardTrigger asChild>
+      <span className="text-primary underline cursor-pointer">Hover me</span>
+    </HoverCardTrigger>
+    <HoverCardContent>
+      <p className="text-sm">This is additional information.</p>
+    </HoverCardContent>
+  </HoverCard>
+</Preview>
+
+```tsx
+<HoverCard>
+  <HoverCardTrigger asChild>
+    <span className="underline cursor-pointer">Hover me</span>
+  </HoverCardTrigger>
+  <HoverCardContent>
+    <p>Additional information.</p>
+  </HoverCardContent>
+</HoverCard>
+```
+
+## Props
+
+### HoverCard Props
+
+<TypeTable
+  type={{
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+    openDelay: {
+      description: "Delay before opening in ms",
+      type: "number",
+      default: "700",
+    },
+    closeDelay: {
+      description: "Delay before closing in ms",
+      type: "number",
+      default: "300",
+    },
+  }}
+/>
+
+### HoverCardContent Props
+
+<TypeTable
+  type={{
+    side: {
+      description: "Side to display the card",
+      type: "'top' | 'right' | 'bottom' | 'left'",
+      default: "'bottom'",
+    },
+    align: {
+      description: "Alignment along the side",
+      type: "'start' | 'center' | 'end'",
+      default: "'center'",
+    },
+    sideOffset: {
+      description: "Distance from trigger in pixels",
+      type: "number",
+      default: "4",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/input-otp.mdx b/apps/www/src/features/design/content/docs/components/input-otp.mdx
new file mode 100644
index 000000000..4cddb0fa0
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/input-otp.mdx
@@ -0,0 +1,136 @@
+---
+title: Input OTP
+description: A one-time password input component for verification codes.
+---
+
+## Usage
+
+<Preview>
+  <InputOTP maxLength={6}>
+    <InputOTPGroup>
+      <InputOTPSlot index={0} />
+      <InputOTPSlot index={1} />
+      <InputOTPSlot index={2} />
+    </InputOTPGroup>
+    <InputOTPSeparator />
+    <InputOTPGroup>
+      <InputOTPSlot index={3} />
+      <InputOTPSlot index={4} />
+      <InputOTPSlot index={5} />
+    </InputOTPGroup>
+  </InputOTP>
+</Preview>
+
+```tsx
+import { InputOTP, InputOTPGroup, InputOTPSeparator, InputOTPSlot } from "@voidhash/ui";
+
+<InputOTP maxLength={6}>
+  <InputOTPGroup>
+    <InputOTPSlot index={0} />
+    <InputOTPSlot index={1} />
+    <InputOTPSlot index={2} />
+  </InputOTPGroup>
+  <InputOTPSeparator />
+  <InputOTPGroup>
+    <InputOTPSlot index={3} />
+    <InputOTPSlot index={4} />
+    <InputOTPSlot index={5} />
+  </InputOTPGroup>
+</InputOTP>;
+```
+
+## Components
+
+### InputOTP
+
+The root component managing OTP input state.
+
+### InputOTPGroup
+
+A group of OTP slots.
+
+### InputOTPSlot
+
+A single input slot for one character.
+
+### InputOTPSeparator
+
+A visual separator between groups.
+
+## Examples
+
+### 4-Digit Code
+
+<Preview>
+  <InputOTP maxLength={4}>
+    <InputOTPGroup>
+      <InputOTPSlot index={0} />
+      <InputOTPSlot index={1} />
+      <InputOTPSlot index={2} />
+      <InputOTPSlot index={3} />
+    </InputOTPGroup>
+  </InputOTP>
+</Preview>
+
+```tsx
+<InputOTP maxLength={4}>
+  <InputOTPGroup>
+    <InputOTPSlot index={0} />
+    <InputOTPSlot index={1} />
+    <InputOTPSlot index={2} />
+    <InputOTPSlot index={3} />
+  </InputOTPGroup>
+</InputOTP>
+```
+
+### Controlled
+
+```tsx
+const [value, setValue] = useState("");
+
+<InputOTP maxLength={6} value={value} onChange={setValue}>
+  ...
+</InputOTP>;
+```
+
+### Pattern Validation
+
+```tsx
+<InputOTP maxLength={6} pattern={REGEXP_ONLY_DIGITS}>
+  ...
+</InputOTP>
+```
+
+## Props
+
+### InputOTP Props
+
+<TypeTable
+  type={{
+    maxLength: {
+      description: "Maximum number of characters",
+      type: "number",
+      default: "Required",
+    },
+    value: {
+      description: "Controlled value",
+      type: "string",
+      default: "undefined",
+    },
+    onChange: {
+      description: "Callback when value changes",
+      type: "(value: string) => void",
+      default: "undefined",
+    },
+    pattern: {
+      description: "Regex pattern for validation",
+      type: "string | RegExp",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Disable the input",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/input.mdx b/apps/www/src/features/design/content/docs/components/input.mdx
new file mode 100644
index 000000000..5e4072f5a
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/input.mdx
@@ -0,0 +1,113 @@
+---
+title: Input
+description: A basic text input field for user data entry.
+---
+
+## Usage
+
+<Preview>
+  <Input placeholder="Enter text..." />
+</Preview>
+
+```tsx
+import { Input } from "@voidhash/ui";
+
+<Input placeholder="Enter text..." />;
+```
+
+## Examples
+
+### With Label
+
+<Preview centered={false}>
+  <div className="grid gap-2 w-full max-w-sm">
+    <Label htmlFor="email">Email</Label>
+    <Input id="email" type="email" placeholder="email@example.com" />
+  </div>
+</Preview>
+
+```tsx
+<div className="grid gap-2">
+  <Label htmlFor="email">Email</Label>
+  <Input id="email" type="email" placeholder="email@example.com" />
+</div>
+```
+
+### Input Types
+
+<Preview centered={false}>
+  <div className="grid gap-4 w-full max-w-sm">
+    <Input type="text" placeholder="Text input" />
+    <Input type="email" placeholder="Email input" />
+    <Input type="password" placeholder="Password input" />
+    <Input type="number" placeholder="Number input" />
+    <Input type="search" placeholder="Search input" />
+  </div>
+</Preview>
+
+```tsx
+<Input type="text" placeholder="Text input" />
+<Input type="email" placeholder="Email input" />
+<Input type="password" placeholder="Password input" />
+<Input type="number" placeholder="Number input" />
+<Input type="search" placeholder="Search input" />
+```
+
+### Disabled
+
+<Preview>
+  <Input disabled placeholder="Disabled input" />
+</Preview>
+
+```tsx
+<Input disabled placeholder="Disabled input" />
+```
+
+### With Error State
+
+<Preview>
+  <Input aria-invalid placeholder="Invalid input" />
+</Preview>
+
+```tsx
+<Input aria-invalid placeholder="Invalid input" />
+```
+
+### File Input
+
+<Preview>
+  <Input type="file" />
+</Preview>
+
+```tsx
+<Input type="file" />
+```
+
+## Props
+
+The Input component accepts all standard HTML input attributes.
+
+<TypeTable
+  type={{
+    type: {
+      description: "The input type",
+      type: "string",
+      default: "'text'",
+    },
+    placeholder: {
+      description: "Placeholder text",
+      type: "string",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the input is disabled",
+      type: "boolean",
+      default: "false",
+    },
+    "aria-invalid": {
+      description: "Indicates an error state",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/label.mdx b/apps/www/src/features/design/content/docs/components/label.mdx
new file mode 100644
index 000000000..eb2344556
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/label.mdx
@@ -0,0 +1,81 @@
+---
+title: Label
+description: Renders an accessible label associated with form controls.
+---
+
+## Usage
+
+<Preview>
+  <div className="grid gap-2">
+    <Label htmlFor="name">Name</Label>
+    <Input id="name" placeholder="Enter your name" />
+  </div>
+</Preview>
+
+```tsx
+import { Label } from "@voidhash/ui";
+import { Input } from "@voidhash/ui";
+
+<div className="grid gap-2">
+  <Label htmlFor="name">Name</Label>
+  <Input id="name" placeholder="Enter your name" />
+</div>;
+```
+
+## Examples
+
+### With Checkbox
+
+<Preview>
+  <div className="flex items-center gap-2">
+    <Checkbox id="agree" />
+    <Label htmlFor="agree">I agree to the terms</Label>
+  </div>
+</Preview>
+
+```tsx
+<div className="flex items-center gap-2">
+  <Checkbox id="agree" />
+  <Label htmlFor="agree">I agree to the terms</Label>
+</div>
+```
+
+### With Required Indicator
+
+<Preview>
+  <div className="grid gap-2">
+    <Label htmlFor="required-field">
+      Email <span className="text-destructive">*</span>
+    </Label>
+    <Input id="required-field" type="email" required />
+  </div>
+</Preview>
+
+```tsx
+<Label htmlFor="email">
+  Email <span className="text-destructive">*</span>
+</Label>
+```
+
+### Disabled State
+
+The label automatically adjusts its style when associated with a disabled input.
+
+<Preview>
+  <div className="grid gap-2">
+    <Label htmlFor="disabled-input">Disabled Field</Label>
+    <Input id="disabled-input" disabled placeholder="Disabled" />
+  </div>
+</Preview>
+
+## Props
+
+<TypeTable
+  type={{
+    htmlFor: {
+      description: "The ID of the form element this label is for",
+      type: "string",
+      default: "undefined",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/menubar.mdx b/apps/www/src/features/design/content/docs/components/menubar.mdx
new file mode 100644
index 000000000..a8d6bd2ef
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/menubar.mdx
@@ -0,0 +1,136 @@
+---
+title: Menubar
+description: A horizontal menu bar with dropdown menus.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Menubar>
+    <MenubarMenu>
+      <MenubarTrigger>File</MenubarTrigger>
+      <MenubarContent>
+        <MenubarItem>
+          New Tab <MenubarShortcut>⌘T</MenubarShortcut>
+        </MenubarItem>
+        <MenubarItem>
+          New Window <MenubarShortcut>⌘N</MenubarShortcut>
+        </MenubarItem>
+        <MenubarSeparator />
+        <MenubarItem>Share</MenubarItem>
+        <MenubarSeparator />
+        <MenubarItem>Print</MenubarItem>
+      </MenubarContent>
+    </MenubarMenu>
+    <MenubarMenu>
+      <MenubarTrigger>Edit</MenubarTrigger>
+      <MenubarContent>
+        <MenubarItem>
+          Undo <MenubarShortcut>⌘Z</MenubarShortcut>
+        </MenubarItem>
+        <MenubarItem>
+          Redo <MenubarShortcut>⇧⌘Z</MenubarShortcut>
+        </MenubarItem>
+        <MenubarSeparator />
+        <MenubarItem>Cut</MenubarItem>
+        <MenubarItem>Copy</MenubarItem>
+        <MenubarItem>Paste</MenubarItem>
+      </MenubarContent>
+    </MenubarMenu>
+    <MenubarMenu>
+      <MenubarTrigger>View</MenubarTrigger>
+      <MenubarContent>
+        <MenubarCheckboxItem>Show Toolbar</MenubarCheckboxItem>
+        <MenubarCheckboxItem checked>Show Statusbar</MenubarCheckboxItem>
+      </MenubarContent>
+    </MenubarMenu>
+  </Menubar>
+</Preview>
+
+```tsx
+import {
+  Menubar,
+  MenubarCheckboxItem,
+  MenubarContent,
+  MenubarItem,
+  MenubarMenu,
+  MenubarSeparator,
+  MenubarShortcut,
+  MenubarTrigger,
+} from "@voidhash/ui";
+
+<Menubar>
+  <MenubarMenu>
+    <MenubarTrigger>File</MenubarTrigger>
+    <MenubarContent>
+      <MenubarItem>New Tab</MenubarItem>
+      <MenubarItem>New Window</MenubarItem>
+    </MenubarContent>
+  </MenubarMenu>
+</Menubar>;
+```
+
+## Components
+
+### Menubar
+
+The root horizontal menu container.
+
+### MenubarMenu
+
+A single menu in the menubar.
+
+### MenubarTrigger
+
+The trigger button for a menu.
+
+### MenubarContent
+
+The dropdown content of a menu.
+
+### MenubarItem
+
+A clickable menu item.
+
+### MenubarCheckboxItem
+
+A menu item with a checkbox.
+
+### MenubarRadioGroup / MenubarRadioItem
+
+Radio button items.
+
+### MenubarLabel
+
+A non-interactive label.
+
+### MenubarSeparator
+
+A visual divider.
+
+### MenubarShortcut
+
+Displays keyboard shortcut text.
+
+### MenubarSub / MenubarSubTrigger / MenubarSubContent
+
+Submenu components.
+
+## Props
+
+### MenubarItem Props
+
+<TypeTable
+  type={{
+    inset: {
+      description: "Add left padding for alignment",
+      type: "boolean",
+      default: "false",
+    },
+    disabled: {
+      description: "Disable the item",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/meta.yaml b/apps/www/src/features/design/content/docs/components/meta.yaml
new file mode 100644
index 000000000..59124c47c
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/meta.yaml
@@ -0,0 +1,50 @@
+icon: Component
+title: Components
+pages:
+  - accordion
+  - alert
+  - alert-dialog
+  - avatar
+  - badge
+  - breadcrumb
+  - button
+  - calendar
+  - card
+  - carousel
+  - chart
+  - checkbox
+  - collapsible
+  - command
+  - context-menu
+  - dialog
+  - drawer
+  - dropdown-menu
+  - dropzone
+  - form
+  - hover-card
+  - input
+  - input-otp
+  - label
+  - menubar
+  - navigation-menu
+  - pagination
+  - popover
+  - progress
+  - radio-group
+  - resizable
+  - scroll-area
+  - select
+  - separator
+  - sheet
+  - sidebar
+  - skeleton
+  - slider
+  - sonner
+  - switch
+  - table
+  - tabs
+  - textarea
+  - toggle
+  - toggle-group
+  - tooltip
+  - underline-tabs
diff --git a/apps/www/src/features/design/content/docs/components/navigation-menu.mdx b/apps/www/src/features/design/content/docs/components/navigation-menu.mdx
new file mode 100644
index 000000000..323c64429
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/navigation-menu.mdx
@@ -0,0 +1,155 @@
+---
+title: Navigation Menu
+description: A collection of links for navigating websites with dropdown menus.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <NavigationMenu>
+    <NavigationMenuList>
+      <NavigationMenuItem>
+        <NavigationMenuTrigger>Getting Started</NavigationMenuTrigger>
+        <NavigationMenuContent>
+          <ul className="grid gap-3 p-4 md:w-[400px] lg:w-[500px] lg:grid-cols-[.75fr_1fr]">
+            <li className="row-span-3">
+              <NavigationMenuLink asChild>
+                <a
+                  className="flex h-full w-full select-none flex-col justify-end rounded-md bg-gradient-to-b from-muted/50 to-muted p-6"
+                  href="/"
+                >
+                  <div className="mb-2 mt-4 text-lg font-medium">Voidhash</div>
+                  <p className="text-sm leading-tight text-muted-foreground">
+                    Build your next project faster.
+                  </p>
+                </a>
+              </NavigationMenuLink>
+            </li>
+            <li>
+              <NavigationMenuLink asChild>
+                <a href="/docs">Introduction</a>
+              </NavigationMenuLink>
+            </li>
+            <li>
+              <NavigationMenuLink asChild>
+                <a href="/docs/installation">Installation</a>
+              </NavigationMenuLink>
+            </li>
+          </ul>
+        </NavigationMenuContent>
+      </NavigationMenuItem>
+      <NavigationMenuItem>
+        <NavigationMenuTrigger>Components</NavigationMenuTrigger>
+        <NavigationMenuContent>
+          <ul className="grid w-[400px] gap-3 p-4 md:w-[500px] md:grid-cols-2">
+            <li>
+              <NavigationMenuLink asChild>
+                <a href="/docs/components/button">Button</a>
+              </NavigationMenuLink>
+            </li>
+            <li>
+              <NavigationMenuLink asChild>
+                <a href="/docs/components/card">Card</a>
+              </NavigationMenuLink>
+            </li>
+          </ul>
+        </NavigationMenuContent>
+      </NavigationMenuItem>
+      <NavigationMenuItem>
+        <NavigationMenuLink href="/docs">Documentation</NavigationMenuLink>
+      </NavigationMenuItem>
+    </NavigationMenuList>
+  </NavigationMenu>
+</Preview>
+
+```tsx
+import {
+  NavigationMenu,
+  NavigationMenuContent,
+  NavigationMenuItem,
+  NavigationMenuLink,
+  NavigationMenuList,
+  NavigationMenuTrigger,
+} from "@voidhash/ui";
+
+<NavigationMenu>
+  <NavigationMenuList>
+    <NavigationMenuItem>
+      <NavigationMenuTrigger>Item One</NavigationMenuTrigger>
+      <NavigationMenuContent>
+        <ul className="grid gap-3 p-4 w-[400px]">
+          <li>
+            <NavigationMenuLink href="/link1">Link 1</NavigationMenuLink>
+          </li>
+          <li>
+            <NavigationMenuLink href="/link2">Link 2</NavigationMenuLink>
+          </li>
+        </ul>
+      </NavigationMenuContent>
+    </NavigationMenuItem>
+  </NavigationMenuList>
+</NavigationMenu>;
+```
+
+## Components
+
+### NavigationMenu
+
+The root navigation container.
+
+### NavigationMenuList
+
+The list of navigation items.
+
+### NavigationMenuItem
+
+A single navigation item.
+
+### NavigationMenuTrigger
+
+A button that opens a dropdown.
+
+### NavigationMenuContent
+
+The dropdown content area.
+
+### NavigationMenuLink
+
+A navigation link.
+
+### NavigationMenuIndicator
+
+Visual indicator for the active item.
+
+### NavigationMenuViewport
+
+The viewport for dropdown content.
+
+## Props
+
+### NavigationMenu Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "Controlled active item",
+      type: "string",
+      default: "undefined",
+    },
+    defaultValue: {
+      description: "Initial active item",
+      type: "string",
+      default: "undefined",
+    },
+    onValueChange: {
+      description: "Callback when active item changes",
+      type: "(value: string) => void",
+      default: "undefined",
+    },
+    orientation: {
+      description: "Menu orientation",
+      type: "'horizontal' | 'vertical'",
+      default: "'horizontal'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/pagination.mdx b/apps/www/src/features/design/content/docs/components/pagination.mdx
new file mode 100644
index 000000000..458dc1758
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/pagination.mdx
@@ -0,0 +1,146 @@
+---
+title: Pagination
+description: Navigation component for paginated content.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Pagination>
+    <PaginationContent>
+      <PaginationItem>
+        <PaginationPrevious href="#" />
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationLink href="#">1</PaginationLink>
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationLink href="#" isActive>
+          2
+        </PaginationLink>
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationLink href="#">3</PaginationLink>
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationEllipsis />
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationNext href="#" />
+      </PaginationItem>
+    </PaginationContent>
+  </Pagination>
+</Preview>
+
+```tsx
+import {
+  Pagination,
+  PaginationContent,
+  PaginationEllipsis,
+  PaginationItem,
+  PaginationLink,
+  PaginationNext,
+  PaginationPrevious,
+} from "@voidhash/ui";
+
+<Pagination>
+  <PaginationContent>
+    <PaginationItem>
+      <PaginationPrevious href="#" />
+    </PaginationItem>
+    <PaginationItem>
+      <PaginationLink href="#">1</PaginationLink>
+    </PaginationItem>
+    <PaginationItem>
+      <PaginationLink href="#" isActive>
+        2
+      </PaginationLink>
+    </PaginationItem>
+    <PaginationItem>
+      <PaginationNext href="#" />
+    </PaginationItem>
+  </PaginationContent>
+</Pagination>;
+```
+
+## Components
+
+### Pagination
+
+The root navigation container.
+
+### PaginationContent
+
+The list container for pagination items.
+
+### PaginationItem
+
+A single item in the pagination.
+
+### PaginationLink
+
+A page number link.
+
+### PaginationPrevious
+
+The previous page button.
+
+### PaginationNext
+
+The next page button.
+
+### PaginationEllipsis
+
+An ellipsis indicator for skipped pages.
+
+## Examples
+
+### Simple Pagination
+
+<Preview centered={false}>
+  <Pagination>
+    <PaginationContent>
+      <PaginationItem>
+        <PaginationPrevious href="#" />
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationLink href="#" isActive>
+          1
+        </PaginationLink>
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationLink href="#">2</PaginationLink>
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationLink href="#">3</PaginationLink>
+      </PaginationItem>
+      <PaginationItem>
+        <PaginationNext href="#" />
+      </PaginationItem>
+    </PaginationContent>
+  </Pagination>
+</Preview>
+
+## Props
+
+### PaginationLink Props
+
+<TypeTable
+  type={{
+    href: {
+      description: "The URL for the page",
+      type: "string",
+      default: "undefined",
+    },
+    isActive: {
+      description: "Whether this is the current page",
+      type: "boolean",
+      default: "false",
+    },
+    size: {
+      description: "Size of the link button",
+      type: "'default' | 'sm' | 'lg' | 'icon'",
+      default: "'icon'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/popover.mdx b/apps/www/src/features/design/content/docs/components/popover.mdx
new file mode 100644
index 000000000..94a9e7385
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/popover.mdx
@@ -0,0 +1,146 @@
+---
+title: Popover
+description: Displays rich content in a portal, triggered by a button.
+---
+
+## Usage
+
+<Preview>
+  <Popover>
+    <PopoverTrigger asChild>
+      <Button variant="outline">Open Popover</Button>
+    </PopoverTrigger>
+    <PopoverContent>
+      <div className="grid gap-4">
+        <div className="space-y-2">
+          <h4 className="font-medium leading-none">Dimensions</h4>
+          <p className="text-sm text-muted-foreground">Set the dimensions for the layer.</p>
+        </div>
+        <div className="grid gap-2">
+          <div className="grid grid-cols-3 items-center gap-4">
+            <Label htmlFor="width">Width</Label>
+            <Input id="width" defaultValue="100%" className="col-span-2 h-8" />
+          </div>
+          <div className="grid grid-cols-3 items-center gap-4">
+            <Label htmlFor="height">Height</Label>
+            <Input id="height" defaultValue="25px" className="col-span-2 h-8" />
+          </div>
+        </div>
+      </div>
+    </PopoverContent>
+  </Popover>
+</Preview>
+
+```tsx
+import { Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
+
+<Popover>
+  <PopoverTrigger asChild>
+    <Button variant="outline">Open Popover</Button>
+  </PopoverTrigger>
+  <PopoverContent>Popover content here.</PopoverContent>
+</Popover>;
+```
+
+## Components
+
+### Popover
+
+The root component that manages popover state.
+
+### PopoverTrigger
+
+The element that opens the popover when clicked.
+
+### PopoverContent
+
+The content displayed in the popover.
+
+### PopoverAnchor
+
+An optional anchor element to position the popover.
+
+## Examples
+
+### Different Alignments
+
+<Preview>
+  <div className="flex gap-4">
+    <Popover>
+      <PopoverTrigger asChild>
+        <Button variant="outline">Start</Button>
+      </PopoverTrigger>
+      <PopoverContent align="start" className="w-48">
+        <p>Aligned to start</p>
+      </PopoverContent>
+    </Popover>
+    <Popover>
+      <PopoverTrigger asChild>
+        <Button variant="outline">Center</Button>
+      </PopoverTrigger>
+      <PopoverContent align="center" className="w-48">
+        <p>Aligned to center</p>
+      </PopoverContent>
+    </Popover>
+    <Popover>
+      <PopoverTrigger asChild>
+        <Button variant="outline">End</Button>
+      </PopoverTrigger>
+      <PopoverContent align="end" className="w-48">
+        <p>Aligned to end</p>
+      </PopoverContent>
+    </Popover>
+  </div>
+</Preview>
+
+```tsx
+<PopoverContent align="start">...</PopoverContent>
+<PopoverContent align="center">...</PopoverContent>
+<PopoverContent align="end">...</PopoverContent>
+```
+
+## Props
+
+### Popover Props
+
+<TypeTable
+  type={{
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+    defaultOpen: {
+      description: "Initial open state",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
+
+### PopoverContent Props
+
+<TypeTable
+  type={{
+    side: {
+      description: "Side of the trigger to display",
+      type: "'top' | 'right' | 'bottom' | 'left'",
+      default: "'bottom'",
+    },
+    align: {
+      description: "Alignment along the side",
+      type: "'start' | 'center' | 'end'",
+      default: "'center'",
+    },
+    sideOffset: {
+      description: "Distance from trigger in pixels",
+      type: "number",
+      default: "4",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/progress.mdx b/apps/www/src/features/design/content/docs/components/progress.mdx
new file mode 100644
index 000000000..81bc6240f
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/progress.mdx
@@ -0,0 +1,92 @@
+---
+title: Progress
+description: Displays an indicator showing the completion progress of a task.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Progress value={33} className="w-full max-w-md" />
+</Preview>
+
+```tsx
+import { Progress } from "@voidhash/ui";
+
+<Progress value={33} />;
+```
+
+## Examples
+
+### Different Values
+
+<Preview centered={false}>
+  <div className="grid gap-4 w-full max-w-md">
+    <div className="space-y-1">
+      <p className="text-sm">0%</p>
+      <Progress value={0} />
+    </div>
+    <div className="space-y-1">
+      <p className="text-sm">25%</p>
+      <Progress value={25} />
+    </div>
+    <div className="space-y-1">
+      <p className="text-sm">50%</p>
+      <Progress value={50} />
+    </div>
+    <div className="space-y-1">
+      <p className="text-sm">75%</p>
+      <Progress value={75} />
+    </div>
+    <div className="space-y-1">
+      <p className="text-sm">100%</p>
+      <Progress value={100} />
+    </div>
+  </div>
+</Preview>
+
+```tsx
+<Progress value={0} />
+<Progress value={25} />
+<Progress value={50} />
+<Progress value={75} />
+<Progress value={100} />
+```
+
+### With Label
+
+<Preview centered={false}>
+  <div className="w-full max-w-md space-y-2">
+    <div className="flex justify-between text-sm">
+      <span>Uploading...</span>
+      <span>66%</span>
+    </div>
+    <Progress value={66} />
+  </div>
+</Preview>
+
+```tsx
+<div className="space-y-2">
+  <div className="flex justify-between text-sm">
+    <span>Uploading...</span>
+    <span>66%</span>
+  </div>
+  <Progress value={66} />
+</div>
+```
+
+## Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "Current progress value (0-100)",
+      type: "number",
+      default: "0",
+    },
+    max: {
+      description: "Maximum value",
+      type: "number",
+      default: "100",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/radio-group.mdx b/apps/www/src/features/design/content/docs/components/radio-group.mdx
new file mode 100644
index 000000000..5e908a336
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/radio-group.mdx
@@ -0,0 +1,146 @@
+---
+title: Radio Group
+description: A set of checkable buttons where only one can be checked at a time.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <RadioGroup defaultValue="option-one">
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="option-one" id="option-one" />
+      <Label htmlFor="option-one">Option One</Label>
+    </div>
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="option-two" id="option-two" />
+      <Label htmlFor="option-two">Option Two</Label>
+    </div>
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="option-three" id="option-three" />
+      <Label htmlFor="option-three">Option Three</Label>
+    </div>
+  </RadioGroup>
+</Preview>
+
+```tsx
+import { RadioGroup, RadioGroupItem } from "@voidhash/ui";
+import { Label } from "@voidhash/ui";
+
+<RadioGroup defaultValue="option-one">
+  <div className="flex items-center space-x-2">
+    <RadioGroupItem value="option-one" id="option-one" />
+    <Label htmlFor="option-one">Option One</Label>
+  </div>
+  <div className="flex items-center space-x-2">
+    <RadioGroupItem value="option-two" id="option-two" />
+    <Label htmlFor="option-two">Option Two</Label>
+  </div>
+</RadioGroup>;
+```
+
+## Components
+
+### RadioGroup
+
+The root container that manages the radio group state.
+
+### RadioGroupItem
+
+An individual radio button within the group.
+
+## Examples
+
+### Horizontal Layout
+
+<Preview>
+  <RadioGroup defaultValue="sm" className="flex gap-4" orientation="horizontal">
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="sm" id="sm" />
+      <Label htmlFor="sm">Small</Label>
+    </div>
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="md" id="md" />
+      <Label htmlFor="md">Medium</Label>
+    </div>
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="lg" id="lg" />
+      <Label htmlFor="lg">Large</Label>
+    </div>
+  </RadioGroup>
+</Preview>
+
+```tsx
+<RadioGroup className="flex gap-4" orientation="horizontal">
+  ...
+</RadioGroup>
+```
+
+### Disabled
+
+<Preview centered={false}>
+  <RadioGroup defaultValue="option-one" disabled>
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="option-one" id="disabled-one" />
+      <Label htmlFor="disabled-one">Disabled One</Label>
+    </div>
+    <div className="flex items-center space-x-2">
+      <RadioGroupItem value="option-two" id="disabled-two" />
+      <Label htmlFor="disabled-two">Disabled Two</Label>
+    </div>
+  </RadioGroup>
+</Preview>
+
+```tsx
+<RadioGroup disabled>...</RadioGroup>
+```
+
+## Props
+
+### RadioGroup Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "Controlled selected value",
+      type: "string",
+      default: "undefined",
+    },
+    defaultValue: {
+      description: "Initial selected value",
+      type: "string",
+      default: "undefined",
+    },
+    onValueChange: {
+      description: "Callback when selection changes",
+      type: "(value: string) => void",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Disable all items in the group",
+      type: "boolean",
+      default: "false",
+    },
+    orientation: {
+      description: "Layout orientation",
+      type: "'horizontal' | 'vertical'",
+      default: "'vertical'",
+    },
+  }}
+/>
+
+### RadioGroupItem Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "The unique value for this item",
+      type: "string",
+      default: "Required",
+    },
+    disabled: {
+      description: "Disable this specific item",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/resizable.mdx b/apps/www/src/features/design/content/docs/components/resizable.mdx
new file mode 100644
index 000000000..43e43ca94
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/resizable.mdx
@@ -0,0 +1,144 @@
+---
+title: Resizable
+description: A component for creating resizable panel layouts.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <ResizablePanelGroup direction="horizontal" className="min-h-[200px] max-w-md rounded-lg border">
+    <ResizablePanel defaultSize={50}>
+      <div className="flex h-full items-center justify-center p-6">
+        <span className="font-semibold">Panel One</span>
+      </div>
+    </ResizablePanel>
+    <ResizableHandle />
+    <ResizablePanel defaultSize={50}>
+      <div className="flex h-full items-center justify-center p-6">
+        <span className="font-semibold">Panel Two</span>
+      </div>
+    </ResizablePanel>
+  </ResizablePanelGroup>
+</Preview>
+
+```tsx
+import { ResizableHandle, ResizablePanel, ResizablePanelGroup } from "@voidhash/ui";
+
+<ResizablePanelGroup direction="horizontal">
+  <ResizablePanel defaultSize={50}>Left Panel</ResizablePanel>
+  <ResizableHandle />
+  <ResizablePanel defaultSize={50}>Right Panel</ResizablePanel>
+</ResizablePanelGroup>;
+```
+
+## Components
+
+### ResizablePanelGroup
+
+The root container for resizable panels.
+
+### ResizablePanel
+
+An individual resizable panel.
+
+### ResizableHandle
+
+The draggable handle between panels.
+
+## Examples
+
+### Vertical Layout
+
+<Preview centered={false}>
+  <ResizablePanelGroup direction="vertical" className="min-h-[300px] max-w-md rounded-lg border">
+    <ResizablePanel defaultSize={25}>
+      <div className="flex h-full items-center justify-center p-6">
+        <span className="font-semibold">Header</span>
+      </div>
+    </ResizablePanel>
+    <ResizableHandle />
+    <ResizablePanel defaultSize={75}>
+      <div className="flex h-full items-center justify-center p-6">
+        <span className="font-semibold">Content</span>
+      </div>
+    </ResizablePanel>
+  </ResizablePanelGroup>
+</Preview>
+
+```tsx
+<ResizablePanelGroup direction="vertical">
+  <ResizablePanel defaultSize={25}>Header</ResizablePanel>
+  <ResizableHandle />
+  <ResizablePanel defaultSize={75}>Content</ResizablePanel>
+</ResizablePanelGroup>
+```
+
+### Three Panels
+
+<Preview centered={false}>
+  <ResizablePanelGroup direction="horizontal" className="min-h-[200px] max-w-lg rounded-lg border">
+    <ResizablePanel defaultSize={25}>
+      <div className="flex h-full items-center justify-center p-4">
+        <span className="font-semibold">Sidebar</span>
+      </div>
+    </ResizablePanel>
+    <ResizableHandle />
+    <ResizablePanel defaultSize={50}>
+      <div className="flex h-full items-center justify-center p-4">
+        <span className="font-semibold">Main</span>
+      </div>
+    </ResizablePanel>
+    <ResizableHandle />
+    <ResizablePanel defaultSize={25}>
+      <div className="flex h-full items-center justify-center p-4">
+        <span className="font-semibold">Panel</span>
+      </div>
+    </ResizablePanel>
+  </ResizablePanelGroup>
+</Preview>
+
+## Props
+
+### ResizablePanelGroup Props
+
+<TypeTable
+  type={{
+    direction: {
+      description: "Layout direction",
+      type: "'horizontal' | 'vertical'",
+      default: "Required",
+    },
+    onLayout: {
+      description: "Callback when layout changes",
+      type: "(sizes: number[]) => void",
+      default: "undefined",
+    },
+  }}
+/>
+
+### ResizablePanel Props
+
+<TypeTable
+  type={{
+    defaultSize: {
+      description: "Initial size as percentage",
+      type: "number",
+      default: "undefined",
+    },
+    minSize: {
+      description: "Minimum size as percentage",
+      type: "number",
+      default: "10",
+    },
+    maxSize: {
+      description: "Maximum size as percentage",
+      type: "number",
+      default: "undefined",
+    },
+    collapsible: {
+      description: "Allow panel to collapse",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/scroll-area.mdx b/apps/www/src/features/design/content/docs/components/scroll-area.mdx
new file mode 100644
index 000000000..56827d09b
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/scroll-area.mdx
@@ -0,0 +1,109 @@
+---
+title: Scroll Area
+description: A custom scrollbar component with consistent styling across browsers.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <ScrollArea className="h-72 w-48 rounded-md border">
+    <div className="p-4">
+      <h4 className="mb-4 text-sm font-medium leading-none">Tags</h4>
+      {Array.from({ length: 50 }).map((_, i) => (
+        <div key={i} className="text-sm py-1">
+          Tag {i + 1}
+        </div>
+      ))}
+    </div>
+  </ScrollArea>
+</Preview>
+
+```tsx
+import { ScrollArea } from "@voidhash/ui";
+
+<ScrollArea className="h-72 w-48 rounded-md border">
+  <div className="p-4">{/* Long content here */}</div>
+</ScrollArea>;
+```
+
+## Components
+
+### ScrollArea
+
+The main scrollable container with custom scrollbars.
+
+### ScrollBar
+
+The scrollbar track and thumb, customizable for horizontal or vertical.
+
+## Examples
+
+### Horizontal Scroll
+
+<Preview centered={false}>
+  <ScrollArea className="w-96 whitespace-nowrap rounded-md border">
+    <div className="flex w-max space-x-4 p-4">
+      {Array.from({ length: 20 }).map((_, i) => (
+        <div key={i} className="w-32 h-24 rounded-md bg-muted flex items-center justify-center">
+          Item {i + 1}
+        </div>
+      ))}
+    </div>
+    <ScrollBar orientation="horizontal" />
+  </ScrollArea>
+</Preview>
+
+```tsx
+<ScrollArea className="w-96 whitespace-nowrap rounded-md border">
+  <div className="flex w-max space-x-4 p-4">{/* Horizontal content */}</div>
+  <ScrollBar orientation="horizontal" />
+</ScrollArea>
+```
+
+### Card List
+
+<Preview centered={false}>
+  <ScrollArea className="h-80 w-full max-w-md rounded-md border">
+    <div className="p-4 space-y-4">
+      {Array.from({ length: 10 }).map((_, i) => (
+        <Card key={i}>
+          <CardHeader>
+            <CardTitle>Card {i + 1}</CardTitle>
+            <CardDescription>Card description</CardDescription>
+          </CardHeader>
+        </Card>
+      ))}
+    </div>
+  </ScrollArea>
+</Preview>
+
+## Props
+
+### ScrollArea Props
+
+<TypeTable
+  type={{
+    className: {
+      description: "CSS classes for the container",
+      type: "string",
+      default: "undefined",
+    },
+    type: {
+      description: "Scrollbar visibility behavior",
+      type: "'auto' | 'always' | 'scroll' | 'hover'",
+      default: "'hover'",
+    },
+  }}
+/>
+
+### ScrollBar Props
+
+<TypeTable
+  type={{
+    orientation: {
+      description: "Scrollbar orientation",
+      type: "'vertical' | 'horizontal'",
+      default: "'vertical'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/select.mdx b/apps/www/src/features/design/content/docs/components/select.mdx
new file mode 100644
index 000000000..a80da32d8
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/select.mdx
@@ -0,0 +1,185 @@
+---
+title: Select
+description: A dropdown component for selecting from a list of options.
+---
+
+## Usage
+
+<Preview>
+  <Select>
+    <SelectTrigger className="w-[180px]">
+      <SelectValue placeholder="Select a fruit" />
+    </SelectTrigger>
+    <SelectContent>
+      <SelectItem value="apple">Apple</SelectItem>
+      <SelectItem value="banana">Banana</SelectItem>
+      <SelectItem value="orange">Orange</SelectItem>
+      <SelectItem value="grape">Grape</SelectItem>
+    </SelectContent>
+  </Select>
+</Preview>
+
+```tsx
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+
+<Select>
+  <SelectTrigger className="w-[180px]">
+    <SelectValue placeholder="Select a fruit" />
+  </SelectTrigger>
+  <SelectContent>
+    <SelectItem value="apple">Apple</SelectItem>
+    <SelectItem value="banana">Banana</SelectItem>
+    <SelectItem value="orange">Orange</SelectItem>
+  </SelectContent>
+</Select>;
+```
+
+## Components
+
+### Select
+
+The root component managing select state.
+
+### SelectTrigger
+
+The button that toggles the dropdown.
+
+### SelectValue
+
+Displays the selected value or placeholder.
+
+### SelectContent
+
+The dropdown content container.
+
+### SelectItem
+
+An individual selectable option.
+
+### SelectGroup
+
+Groups related options together.
+
+### SelectLabel
+
+A label for a group of options.
+
+### SelectSeparator
+
+A visual separator between options.
+
+## Examples
+
+### With Groups
+
+<Preview>
+  <Select>
+    <SelectTrigger className="w-[200px]">
+      <SelectValue placeholder="Select a timezone" />
+    </SelectTrigger>
+    <SelectContent>
+      <SelectGroup>
+        <SelectLabel>North America</SelectLabel>
+        <SelectItem value="est">Eastern Time (ET)</SelectItem>
+        <SelectItem value="cst">Central Time (CT)</SelectItem>
+        <SelectItem value="pst">Pacific Time (PT)</SelectItem>
+      </SelectGroup>
+      <SelectSeparator />
+      <SelectGroup>
+        <SelectLabel>Europe</SelectLabel>
+        <SelectItem value="gmt">Greenwich Mean Time (GMT)</SelectItem>
+        <SelectItem value="cet">Central European Time (CET)</SelectItem>
+      </SelectGroup>
+    </SelectContent>
+  </Select>
+</Preview>
+
+```tsx
+<SelectGroup>
+  <SelectLabel>North America</SelectLabel>
+  <SelectItem value="est">Eastern Time</SelectItem>
+  <SelectItem value="cst">Central Time</SelectItem>
+</SelectGroup>
+<SelectSeparator />
+```
+
+### Small Size
+
+<Preview>
+  <Select>
+    <SelectTrigger size="sm" className="w-[150px]">
+      <SelectValue placeholder="Size" />
+    </SelectTrigger>
+    <SelectContent>
+      <SelectItem value="sm">Small</SelectItem>
+      <SelectItem value="md">Medium</SelectItem>
+      <SelectItem value="lg">Large</SelectItem>
+    </SelectContent>
+  </Select>
+</Preview>
+
+```tsx
+<SelectTrigger size="sm">
+  <SelectValue placeholder="Size" />
+</SelectTrigger>
+```
+
+### Disabled
+
+<Preview>
+  <Select disabled>
+    <SelectTrigger className="w-[180px]">
+      <SelectValue placeholder="Disabled" />
+    </SelectTrigger>
+    <SelectContent>
+      <SelectItem value="option">Option</SelectItem>
+    </SelectContent>
+  </Select>
+</Preview>
+
+## Props
+
+### Select Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "Controlled value",
+      type: "string",
+      default: "undefined",
+    },
+    onValueChange: {
+      description: "Callback when value changes",
+      type: "(value: string) => void",
+      default: "undefined",
+    },
+    defaultValue: {
+      description: "Initial value",
+      type: "string",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the select is disabled",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
+
+### SelectTrigger Props
+
+<TypeTable
+  type={{
+    size: {
+      description: "Size of the trigger",
+      type: "'default' | 'sm'",
+      default: "'default'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/separator.mdx b/apps/www/src/features/design/content/docs/components/separator.mdx
new file mode 100644
index 000000000..ffe2ddb9e
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/separator.mdx
@@ -0,0 +1,84 @@
+---
+title: Separator
+description: Visually separates content into distinct groups.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <div className="w-full max-w-md">
+    <div className="space-y-1">
+      <h4 className="font-medium text-sm leading-none">Radix Primitives</h4>
+      <p className="text-sm text-muted-foreground">An open-source UI component library.</p>
+    </div>
+    <Separator className="my-4" />
+    <div className="flex h-5 items-center space-x-4 text-sm">
+      <div>Blog</div>
+      <Separator orientation="vertical" />
+      <div>Docs</div>
+      <Separator orientation="vertical" />
+      <div>Source</div>
+    </div>
+  </div>
+</Preview>
+
+```tsx
+import { Separator } from "@voidhash/ui";
+
+<div>
+  <div>Content above</div>
+  <Separator className="my-4" />
+  <div>Content below</div>
+</div>;
+```
+
+## Examples
+
+### Horizontal
+
+<Preview centered={false}>
+  <div className="w-full max-w-md space-y-4">
+    <p>First section</p>
+    <Separator />
+    <p>Second section</p>
+    <Separator />
+    <p>Third section</p>
+  </div>
+</Preview>
+
+```tsx
+<Separator />
+```
+
+### Vertical
+
+<Preview>
+  <div className="flex h-5 items-center space-x-4 text-sm">
+    <div>Home</div>
+    <Separator orientation="vertical" />
+    <div>About</div>
+    <Separator orientation="vertical" />
+    <div>Contact</div>
+  </div>
+</Preview>
+
+```tsx
+<Separator orientation="vertical" />
+```
+
+## Props
+
+<TypeTable
+  type={{
+    orientation: {
+      description: "The orientation of the separator",
+      type: "'horizontal' | 'vertical'",
+      default: "'horizontal'",
+    },
+    decorative: {
+      description: "Whether the separator is purely decorative",
+      type: "boolean",
+      default: "true",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/sheet.mdx b/apps/www/src/features/design/content/docs/components/sheet.mdx
new file mode 100644
index 000000000..1f1e6fe0e
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/sheet.mdx
@@ -0,0 +1,177 @@
+---
+title: Sheet
+description: A panel that slides out from the edge of the screen.
+---
+
+## Usage
+
+<Preview>
+  <Sheet>
+    <SheetTrigger asChild>
+      <Button variant="outline">Open Sheet</Button>
+    </SheetTrigger>
+    <SheetContent>
+      <SheetHeader>
+        <SheetTitle>Sheet Title</SheetTitle>
+        <SheetDescription>
+          This is a sheet description. Make changes to your settings here.
+        </SheetDescription>
+      </SheetHeader>
+      <div className="p-4">
+        <p>Sheet content goes here.</p>
+      </div>
+      <SheetFooter>
+        <Button>Save changes</Button>
+      </SheetFooter>
+    </SheetContent>
+  </Sheet>
+</Preview>
+
+```tsx
+import {
+  Sheet,
+  SheetContent,
+  SheetDescription,
+  SheetFooter,
+  SheetHeader,
+  SheetTitle,
+  SheetTrigger,
+} from "@voidhash/ui";
+
+<Sheet>
+  <SheetTrigger asChild>
+    <Button variant="outline">Open Sheet</Button>
+  </SheetTrigger>
+  <SheetContent>
+    <SheetHeader>
+      <SheetTitle>Sheet Title</SheetTitle>
+      <SheetDescription>Sheet description.</SheetDescription>
+    </SheetHeader>
+    <div className="p-4">Content here</div>
+    <SheetFooter>
+      <Button>Save</Button>
+    </SheetFooter>
+  </SheetContent>
+</Sheet>;
+```
+
+## Components
+
+### Sheet
+
+The root component managing sheet state.
+
+### SheetTrigger
+
+The element that opens the sheet.
+
+### SheetContent
+
+The sliding panel content.
+
+### SheetHeader
+
+Container for title and description.
+
+### SheetTitle
+
+The sheet's heading.
+
+### SheetDescription
+
+A description of the sheet's purpose.
+
+### SheetFooter
+
+Container for action buttons.
+
+### SheetClose
+
+An element that closes the sheet.
+
+## Examples
+
+### Different Sides
+
+<Preview>
+  <div className="flex gap-2">
+    <Sheet>
+      <SheetTrigger asChild>
+        <Button variant="outline">Left</Button>
+      </SheetTrigger>
+      <SheetContent side="left">
+        <SheetHeader>
+          <SheetTitle>Left Side</SheetTitle>
+        </SheetHeader>
+      </SheetContent>
+    </Sheet>
+    <Sheet>
+      <SheetTrigger asChild>
+        <Button variant="outline">Right</Button>
+      </SheetTrigger>
+      <SheetContent side="right">
+        <SheetHeader>
+          <SheetTitle>Right Side</SheetTitle>
+        </SheetHeader>
+      </SheetContent>
+    </Sheet>
+    <Sheet>
+      <SheetTrigger asChild>
+        <Button variant="outline">Top</Button>
+      </SheetTrigger>
+      <SheetContent side="top">
+        <SheetHeader>
+          <SheetTitle>Top Side</SheetTitle>
+        </SheetHeader>
+      </SheetContent>
+    </Sheet>
+    <Sheet>
+      <SheetTrigger asChild>
+        <Button variant="outline">Bottom</Button>
+      </SheetTrigger>
+      <SheetContent side="bottom">
+        <SheetHeader>
+          <SheetTitle>Bottom Side</SheetTitle>
+        </SheetHeader>
+      </SheetContent>
+    </Sheet>
+  </div>
+</Preview>
+
+```tsx
+<SheetContent side="left">...</SheetContent>
+<SheetContent side="right">...</SheetContent>
+<SheetContent side="top">...</SheetContent>
+<SheetContent side="bottom">...</SheetContent>
+```
+
+## Props
+
+### SheetContent Props
+
+<TypeTable
+  type={{
+    side: {
+      description: "The edge of the screen to slide from",
+      type: "'top' | 'right' | 'bottom' | 'left'",
+      default: "'right'",
+    },
+  }}
+/>
+
+### Sheet Props
+
+<TypeTable
+  type={{
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/sidebar.mdx b/apps/www/src/features/design/content/docs/components/sidebar.mdx
new file mode 100644
index 000000000..1fbcde07b
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/sidebar.mdx
@@ -0,0 +1,179 @@
+---
+title: Sidebar
+description: A collapsible sidebar component for application navigation.
+---
+
+## Usage
+
+The Sidebar component provides a complete sidebar navigation system with collapsible behavior.
+
+```tsx
+import {
+  Sidebar,
+  SidebarContent,
+  SidebarGroup,
+  SidebarGroupContent,
+  SidebarGroupLabel,
+  SidebarHeader,
+  SidebarMenu,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarProvider,
+} from "@voidhash/ui";
+
+<SidebarProvider>
+  <Sidebar>
+    <SidebarHeader>
+      <h2>App Name</h2>
+    </SidebarHeader>
+    <SidebarContent>
+      <SidebarGroup>
+        <SidebarGroupLabel>Navigation</SidebarGroupLabel>
+        <SidebarGroupContent>
+          <SidebarMenu>
+            <SidebarMenuItem>
+              <SidebarMenuButton asChild>
+                <a href="/dashboard">
+                  <HomeIcon /> Dashboard
+                </a>
+              </SidebarMenuButton>
+            </SidebarMenuItem>
+            <SidebarMenuItem>
+              <SidebarMenuButton asChild>
+                <a href="/settings">
+                  <SettingsIcon /> Settings
+                </a>
+              </SidebarMenuButton>
+            </SidebarMenuItem>
+          </SidebarMenu>
+        </SidebarGroupContent>
+      </SidebarGroup>
+    </SidebarContent>
+  </Sidebar>
+  <main>Content</main>
+</SidebarProvider>;
+```
+
+## Components
+
+### SidebarProvider
+
+Provides context for sidebar state management.
+
+### Sidebar
+
+The main sidebar container.
+
+### SidebarHeader
+
+The header section of the sidebar.
+
+### SidebarContent
+
+The main content area with scroll support.
+
+### SidebarFooter
+
+The footer section of the sidebar.
+
+### SidebarGroup
+
+A group of related menu items.
+
+### SidebarGroupLabel
+
+A label for a group of items.
+
+### SidebarGroupContent
+
+The content of a group.
+
+### SidebarMenu
+
+A navigation menu container.
+
+### SidebarMenuItem
+
+A single menu item.
+
+### SidebarMenuButton
+
+A clickable button within a menu item.
+
+### SidebarTrigger
+
+A button to toggle sidebar visibility.
+
+### SidebarRail
+
+The collapsed rail for the sidebar.
+
+## Examples
+
+### With useSidebar Hook
+
+```tsx
+import { useSidebar } from "@voidhash/ui";
+
+function SidebarToggle() {
+  const { open, setOpen, toggleSidebar } = useSidebar();
+
+  return <Button onClick={toggleSidebar}>{open ? "Close" : "Open"} Sidebar</Button>;
+}
+```
+
+### Controlled State
+
+```tsx
+const [open, setOpen] = useState(true);
+
+<SidebarProvider open={open} onOpenChange={setOpen}>
+  <Sidebar>...</Sidebar>
+</SidebarProvider>;
+```
+
+## Props
+
+### SidebarProvider Props
+
+<TypeTable
+  type={{
+    open: {
+      description: "Controlled open state",
+      type: "boolean",
+      default: "undefined",
+    },
+    onOpenChange: {
+      description: "Callback when open state changes",
+      type: "(open: boolean) => void",
+      default: "undefined",
+    },
+    defaultOpen: {
+      description: "Initial open state",
+      type: "boolean",
+      default: "true",
+    },
+  }}
+/>
+
+### Sidebar Props
+
+<TypeTable
+  type={{
+    side: {
+      description: "Which side to display",
+      type: "'left' | 'right'",
+      default: "'left'",
+    },
+    variant: {
+      description: "Sidebar variant",
+      type: "'sidebar' | 'floating' | 'inset'",
+      default: "'sidebar'",
+    },
+    collapsible: {
+      description: "Collapse behavior",
+      type: "'offcanvas' | 'icon' | 'none'",
+      default: "'offcanvas'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/skeleton.mdx b/apps/www/src/features/design/content/docs/components/skeleton.mdx
new file mode 100644
index 000000000..225bce0e8
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/skeleton.mdx
@@ -0,0 +1,91 @@
+---
+title: Skeleton
+description: A placeholder loading state for content that is still loading.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <div className="flex items-center space-x-4">
+    <Skeleton className="h-12 w-12 rounded-full" />
+    <div className="space-y-2">
+      <Skeleton className="h-4 w-[250px]" />
+      <Skeleton className="h-4 w-[200px]" />
+    </div>
+  </div>
+</Preview>
+
+```tsx
+import { Skeleton } from "@voidhash/ui";
+
+<div className="flex items-center space-x-4">
+  <Skeleton className="h-12 w-12 rounded-full" />
+  <div className="space-y-2">
+    <Skeleton className="h-4 w-[250px]" />
+    <Skeleton className="h-4 w-[200px]" />
+  </div>
+</div>;
+```
+
+## Examples
+
+### Card Skeleton
+
+<Preview centered={false}>
+  <div className="flex flex-col space-y-3 w-full max-w-md">
+    <Skeleton className="h-[125px] w-full rounded-xl" />
+    <div className="space-y-2">
+      <Skeleton className="h-4 w-full" />
+      <Skeleton className="h-4 w-4/5" />
+    </div>
+  </div>
+</Preview>
+
+```tsx
+<div className="flex flex-col space-y-3">
+  <Skeleton className="h-[125px] w-full rounded-xl" />
+  <div className="space-y-2">
+    <Skeleton className="h-4 w-full" />
+    <Skeleton className="h-4 w-4/5" />
+  </div>
+</div>
+```
+
+### List Skeleton
+
+<Preview centered={false}>
+  <div className="space-y-4 w-full max-w-md">
+    {[1, 2, 3].map((i) => (
+      <div key={i} className="flex items-center space-x-4">
+        <Skeleton className="h-10 w-10 rounded-full" />
+        <div className="space-y-2 flex-1">
+          <Skeleton className="h-4 w-3/4" />
+          <Skeleton className="h-3 w-1/2" />
+        </div>
+      </div>
+    ))}
+  </div>
+</Preview>
+
+### Table Skeleton
+
+<Preview centered={false}>
+  <div className="w-full max-w-md space-y-2">
+    <Skeleton className="h-8 w-full" />
+    <Skeleton className="h-12 w-full" />
+    <Skeleton className="h-12 w-full" />
+    <Skeleton className="h-12 w-full" />
+  </div>
+</Preview>
+
+## Props
+
+<TypeTable
+  type={{
+    className: {
+      description: "CSS classes for width, height, and shape",
+      type: "string",
+      default: "undefined",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/slider.mdx b/apps/www/src/features/design/content/docs/components/slider.mdx
new file mode 100644
index 000000000..4430ab1fc
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/slider.mdx
@@ -0,0 +1,105 @@
+---
+title: Slider
+description: An input component for selecting a value from a range.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Slider defaultValue={[50]} max={100} step={1} className="w-full max-w-md" />
+</Preview>
+
+```tsx
+import { Slider } from "@voidhash/ui";
+
+<Slider defaultValue={[50]} max={100} step={1} />;
+```
+
+## Examples
+
+### Range Slider
+
+<Preview centered={false}>
+  <Slider defaultValue={[25, 75]} max={100} step={1} className="w-full max-w-md" />
+</Preview>
+
+```tsx
+<Slider defaultValue={[25, 75]} max={100} step={1} />
+```
+
+### With Step
+
+<Preview centered={false}>
+  <Slider defaultValue={[50]} max={100} step={10} className="w-full max-w-md" />
+</Preview>
+
+```tsx
+<Slider defaultValue={[50]} max={100} step={10} />
+```
+
+### Disabled
+
+<Preview centered={false}>
+  <Slider defaultValue={[50]} max={100} disabled className="w-full max-w-md" />
+</Preview>
+
+```tsx
+<Slider disabled defaultValue={[50]} />
+```
+
+### Vertical Orientation
+
+<Preview>
+  <Slider defaultValue={[50]} max={100} orientation="vertical" className="h-44" />
+</Preview>
+
+```tsx
+<Slider defaultValue={[50]} orientation="vertical" className="h-44" />
+```
+
+## Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "Controlled value(s)",
+      type: "number[]",
+      default: "undefined",
+    },
+    defaultValue: {
+      description: "Initial value(s)",
+      type: "number[]",
+      default: "[min, max]",
+    },
+    onValueChange: {
+      description: "Callback when value changes",
+      type: "(value: number[]) => void",
+      default: "undefined",
+    },
+    min: {
+      description: "Minimum value",
+      type: "number",
+      default: "0",
+    },
+    max: {
+      description: "Maximum value",
+      type: "number",
+      default: "100",
+    },
+    step: {
+      description: "Step increment",
+      type: "number",
+      default: "1",
+    },
+    orientation: {
+      description: "Slider orientation",
+      type: "'horizontal' | 'vertical'",
+      default: "'horizontal'",
+    },
+    disabled: {
+      description: "Whether the slider is disabled",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/sonner.mdx b/apps/www/src/features/design/content/docs/components/sonner.mdx
new file mode 100644
index 000000000..090024575
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/sonner.mdx
@@ -0,0 +1,120 @@
+---
+title: Sonner (Toast)
+description: A toast notification component for displaying brief messages.
+---
+
+## Usage
+
+To use toasts, add the `Toaster` component to your app layout:
+
+```tsx
+import { Toaster } from "@voidhash/ui";
+
+export default function Layout({ children }) {
+  return (
+    <>
+      {children}
+      <Toaster />
+    </>
+  );
+}
+```
+
+Then use the `toast` function from sonner to show notifications:
+
+```tsx
+import { toast } from "sonner";
+
+toast("Event has been created", {
+  description: "Sunday, December 03, 2023 at 9:00 AM",
+});
+```
+
+## Examples
+
+### Success Toast
+
+```tsx
+toast.success("Success!", {
+  description: "Your changes have been saved.",
+});
+```
+
+### Error Toast
+
+```tsx
+toast.error("Error!", {
+  description: "Something went wrong.",
+});
+```
+
+### Warning Toast
+
+```tsx
+toast.warning("Warning!", {
+  description: "Please check your input.",
+});
+```
+
+### Info Toast
+
+```tsx
+toast.info("Info", {
+  description: "Here's some information.",
+});
+```
+
+### With Action
+
+```tsx
+toast("Event deleted", {
+  action: {
+    label: "Undo",
+    onClick: () => console.log("Undo"),
+  },
+});
+```
+
+### Promise Toast
+
+```tsx
+toast.promise(saveData(), {
+  loading: "Saving...",
+  success: "Data saved!",
+  error: "Failed to save.",
+});
+```
+
+## Props
+
+### Toaster Props
+
+<TypeTable
+  type={{
+    position: {
+      description: "Position of the toasts",
+      type: "'top-left' | 'top-right' | 'bottom-left' | 'bottom-right' | 'top-center' | 'bottom-center'",
+      default: "'bottom-right'",
+    },
+    richColors: {
+      description: "Use rich colors for toast types",
+      type: "boolean",
+      default: "false",
+    },
+    expand: {
+      description: "Expand toasts by default",
+      type: "boolean",
+      default: "false",
+    },
+    duration: {
+      description: "Default duration in ms",
+      type: "number",
+      default: "4000",
+    },
+    closeButton: {
+      description: "Show close button",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/switch.mdx b/apps/www/src/features/design/content/docs/components/switch.mdx
new file mode 100644
index 000000000..4aed7def8
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/switch.mdx
@@ -0,0 +1,105 @@
+---
+title: Switch
+description: A control that allows the user to toggle between on and off states.
+---
+
+## Usage
+
+<Preview>
+  <div className="flex items-center gap-2">
+    <Switch id="airplane-mode" />
+    <Label htmlFor="airplane-mode">Airplane Mode</Label>
+  </div>
+</Preview>
+
+```tsx
+import { Switch } from "@voidhash/ui";
+import { Label } from "@voidhash/ui";
+
+<div className="flex items-center gap-2">
+  <Switch id="airplane-mode" />
+  <Label htmlFor="airplane-mode">Airplane Mode</Label>
+</div>;
+```
+
+## Examples
+
+### Checked by Default
+
+<Preview>
+  <div className="flex items-center gap-2">
+    <Switch id="default-on" defaultChecked />
+    <Label htmlFor="default-on">Notifications enabled</Label>
+  </div>
+</Preview>
+
+```tsx
+<Switch defaultChecked />
+```
+
+### Disabled
+
+<Preview>
+  <div className="flex flex-col gap-4">
+    <div className="flex items-center gap-2">
+      <Switch id="disabled-off" disabled />
+      <Label htmlFor="disabled-off">Disabled off</Label>
+    </div>
+    <div className="flex items-center gap-2">
+      <Switch id="disabled-on" disabled defaultChecked />
+      <Label htmlFor="disabled-on">Disabled on</Label>
+    </div>
+  </div>
+</Preview>
+
+```tsx
+<Switch disabled />
+<Switch disabled defaultChecked />
+```
+
+### In a Form
+
+<Preview centered={false}>
+  <div className="grid gap-4 w-full max-w-sm">
+    <div className="flex items-center justify-between">
+      <Label htmlFor="marketing">Marketing emails</Label>
+      <Switch id="marketing" />
+    </div>
+    <div className="flex items-center justify-between">
+      <Label htmlFor="security">Security alerts</Label>
+      <Switch id="security" defaultChecked />
+    </div>
+  </div>
+</Preview>
+
+## Props
+
+<TypeTable
+  type={{
+    checked: {
+      description: "Controlled checked state",
+      type: "boolean",
+      default: "undefined",
+    },
+    defaultChecked: {
+      description: "Initial checked state",
+      type: "boolean",
+      default: "false",
+    },
+    onCheckedChange: {
+      description: "Callback when checked state changes",
+      type: "(checked: boolean) => void",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the switch is disabled",
+      type: "boolean",
+      default: "false",
+    },
+    required: {
+      description: "Whether the switch is required",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/table.mdx b/apps/www/src/features/design/content/docs/components/table.mdx
new file mode 100644
index 000000000..94266f5c5
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/table.mdx
@@ -0,0 +1,148 @@
+---
+title: Table
+description: A responsive table component for displaying tabular data.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Table>
+    <TableHeader>
+      <TableRow>
+        <TableHead>Name</TableHead>
+        <TableHead>Email</TableHead>
+        <TableHead>Role</TableHead>
+      </TableRow>
+    </TableHeader>
+    <TableBody>
+      <TableRow>
+        <TableCell>John Doe</TableCell>
+        <TableCell>john@example.com</TableCell>
+        <TableCell>Admin</TableCell>
+      </TableRow>
+      <TableRow>
+        <TableCell>Jane Smith</TableCell>
+        <TableCell>jane@example.com</TableCell>
+        <TableCell>User</TableCell>
+      </TableRow>
+      <TableRow>
+        <TableCell>Bob Wilson</TableCell>
+        <TableCell>bob@example.com</TableCell>
+        <TableCell>User</TableCell>
+      </TableRow>
+    </TableBody>
+  </Table>
+</Preview>
+
+```tsx
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@voidhash/ui";
+
+<Table>
+  <TableHeader>
+    <TableRow>
+      <TableHead>Name</TableHead>
+      <TableHead>Email</TableHead>
+    </TableRow>
+  </TableHeader>
+  <TableBody>
+    <TableRow>
+      <TableCell>John Doe</TableCell>
+      <TableCell>john@example.com</TableCell>
+    </TableRow>
+  </TableBody>
+</Table>;
+```
+
+## Components
+
+### Table
+
+The root table container with horizontal scroll support.
+
+### TableHeader
+
+The table header section containing column headers.
+
+### TableBody
+
+The table body section containing data rows.
+
+### TableFooter
+
+The table footer section for summary data.
+
+### TableRow
+
+A single row in the table.
+
+### TableHead
+
+A header cell in the table.
+
+### TableCell
+
+A data cell in the table.
+
+### TableCaption
+
+An optional caption describing the table.
+
+## Examples
+
+### With Caption and Footer
+
+<Preview centered={false}>
+  <Table>
+    <TableCaption>A list of recent invoices.</TableCaption>
+    <TableHeader>
+      <TableRow>
+        <TableHead>Invoice</TableHead>
+        <TableHead>Status</TableHead>
+        <TableHead className="text-right">Amount</TableHead>
+      </TableRow>
+    </TableHeader>
+    <TableBody>
+      <TableRow>
+        <TableCell>INV001</TableCell>
+        <TableCell>Paid</TableCell>
+        <TableCell className="text-right">$250.00</TableCell>
+      </TableRow>
+      <TableRow>
+        <TableCell>INV002</TableCell>
+        <TableCell>Pending</TableCell>
+        <TableCell className="text-right">$150.00</TableCell>
+      </TableRow>
+    </TableBody>
+    <TableFooter>
+      <TableRow>
+        <TableCell colSpan={2}>Total</TableCell>
+        <TableCell className="text-right">$400.00</TableCell>
+      </TableRow>
+    </TableFooter>
+  </Table>
+</Preview>
+
+```tsx
+<Table>
+  <TableCaption>A list of recent invoices.</TableCaption>
+  <TableHeader>...</TableHeader>
+  <TableBody>...</TableBody>
+  <TableFooter>
+    <TableRow>
+      <TableCell colSpan={2}>Total</TableCell>
+      <TableCell className="text-right">$400.00</TableCell>
+    </TableRow>
+  </TableFooter>
+</Table>
+```
+
+## Props
+
+All table components accept standard HTML table element props.
diff --git a/apps/www/src/features/design/content/docs/components/tabs.mdx b/apps/www/src/features/design/content/docs/components/tabs.mdx
new file mode 100644
index 000000000..fd1c2bce0
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/tabs.mdx
@@ -0,0 +1,126 @@
+---
+title: Tabs
+description: A set of layered sections of content that display one panel at a time.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Tabs defaultValue="account" className="w-full max-w-md">
+    <TabsList>
+      <TabsTrigger value="account">Account</TabsTrigger>
+      <TabsTrigger value="password">Password</TabsTrigger>
+    </TabsList>
+    <TabsContent value="account">
+      <Card>
+        <CardHeader>
+          <CardTitle>Account</CardTitle>
+          <CardDescription>Manage your account settings.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p>Account settings content here.</p>
+        </CardContent>
+      </Card>
+    </TabsContent>
+    <TabsContent value="password">
+      <Card>
+        <CardHeader>
+          <CardTitle>Password</CardTitle>
+          <CardDescription>Change your password.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p>Password settings content here.</p>
+        </CardContent>
+      </Card>
+    </TabsContent>
+  </Tabs>
+</Preview>
+
+```tsx
+import { Tabs, TabsContent, TabsList, TabsTrigger } from "@voidhash/ui";
+
+<Tabs defaultValue="account">
+  <TabsList>
+    <TabsTrigger value="account">Account</TabsTrigger>
+    <TabsTrigger value="password">Password</TabsTrigger>
+  </TabsList>
+  <TabsContent value="account">Account content here.</TabsContent>
+  <TabsContent value="password">Password content here.</TabsContent>
+</Tabs>;
+```
+
+## Components
+
+### Tabs
+
+The root container that manages tab state.
+
+### TabsList
+
+The container for tab triggers.
+
+### TabsTrigger
+
+A button that activates its associated content panel.
+
+### TabsContent
+
+The content panel associated with a trigger.
+
+## Examples
+
+### With Icons
+
+<Preview centered={false}>
+  <Tabs defaultValue="overview" className="w-full max-w-md">
+    <TabsList>
+      <TabsTrigger value="overview">
+        <UserIcon /> Overview
+      </TabsTrigger>
+      <TabsTrigger value="settings">
+        <SettingsIcon /> Settings
+      </TabsTrigger>
+    </TabsList>
+    <TabsContent value="overview" className="p-4">
+      Overview content
+    </TabsContent>
+    <TabsContent value="settings" className="p-4">
+      Settings content
+    </TabsContent>
+  </Tabs>
+</Preview>
+
+```tsx
+<TabsTrigger value="overview">
+  <UserIcon /> Overview
+</TabsTrigger>
+```
+
+## Props
+
+### Tabs Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "Controlled active tab",
+      type: "string",
+      default: "undefined",
+    },
+    defaultValue: {
+      description: "Initial active tab",
+      type: "string",
+      default: "undefined",
+    },
+    onValueChange: {
+      description: "Callback when active tab changes",
+      type: "(value: string) => void",
+      default: "undefined",
+    },
+    orientation: {
+      description: "Orientation of the tabs",
+      type: "'horizontal' | 'vertical'",
+      default: "'horizontal'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/textarea.mdx b/apps/www/src/features/design/content/docs/components/textarea.mdx
new file mode 100644
index 000000000..f08c262d2
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/textarea.mdx
@@ -0,0 +1,96 @@
+---
+title: Textarea
+description: A multi-line text input for longer form content.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <Textarea placeholder="Type your message here..." className="w-full max-w-md" />
+</Preview>
+
+```tsx
+import { Textarea } from "@voidhash/ui";
+
+<Textarea placeholder="Type your message here..." />;
+```
+
+## Examples
+
+### With Label
+
+<Preview centered={false}>
+  <div className="grid gap-2 w-full max-w-md">
+    <Label htmlFor="message">Message</Label>
+    <Textarea id="message" placeholder="Enter your message..." />
+  </div>
+</Preview>
+
+```tsx
+<div className="grid gap-2">
+  <Label htmlFor="message">Message</Label>
+  <Textarea id="message" placeholder="Enter your message..." />
+</div>
+```
+
+### Disabled
+
+<Preview centered={false}>
+  <Textarea disabled placeholder="Disabled textarea" className="w-full max-w-md" />
+</Preview>
+
+```tsx
+<Textarea disabled placeholder="Disabled textarea" />
+```
+
+### With Error State
+
+<Preview centered={false}>
+  <Textarea aria-invalid placeholder="Invalid textarea" className="w-full max-w-md" />
+</Preview>
+
+```tsx
+<Textarea aria-invalid placeholder="Invalid textarea" />
+```
+
+### With Default Value
+
+<Preview centered={false}>
+  <Textarea
+    defaultValue="This is the default content of the textarea."
+    className="w-full max-w-md"
+  />
+</Preview>
+
+```tsx
+<Textarea defaultValue="This is the default content..." />
+```
+
+## Props
+
+The Textarea component accepts all standard HTML textarea attributes.
+
+<TypeTable
+  type={{
+    placeholder: {
+      description: "Placeholder text",
+      type: "string",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the textarea is disabled",
+      type: "boolean",
+      default: "false",
+    },
+    rows: {
+      description: "Number of visible text lines",
+      type: "number",
+      default: "undefined",
+    },
+    "aria-invalid": {
+      description: "Indicates an error state",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/toggle-group.mdx b/apps/www/src/features/design/content/docs/components/toggle-group.mdx
new file mode 100644
index 000000000..6f09e25bf
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/toggle-group.mdx
@@ -0,0 +1,152 @@
+---
+title: Toggle Group
+description: A set of two-state buttons that can be toggled on or off.
+---
+
+## Usage
+
+<Preview>
+  <ToggleGroup type="single" defaultValue="center">
+    <ToggleGroupItem value="left" aria-label="Align left">
+      <ChevronLeftIcon />
+    </ToggleGroupItem>
+    <ToggleGroupItem value="center" aria-label="Align center">
+      <MenuIcon />
+    </ToggleGroupItem>
+    <ToggleGroupItem value="right" aria-label="Align right">
+      <ChevronRightIcon />
+    </ToggleGroupItem>
+  </ToggleGroup>
+</Preview>
+
+```tsx
+import { ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+
+<ToggleGroup type="single" defaultValue="center">
+  <ToggleGroupItem value="left" aria-label="Align left">
+    <AlignLeftIcon />
+  </ToggleGroupItem>
+  <ToggleGroupItem value="center" aria-label="Align center">
+    <AlignCenterIcon />
+  </ToggleGroupItem>
+  <ToggleGroupItem value="right" aria-label="Align right">
+    <AlignRightIcon />
+  </ToggleGroupItem>
+</ToggleGroup>;
+```
+
+## Components
+
+### ToggleGroup
+
+The root container managing toggle group state.
+
+### ToggleGroupItem
+
+An individual toggle button within the group.
+
+## Examples
+
+### Multiple Selection
+
+<Preview>
+  <ToggleGroup type="multiple">
+    <ToggleGroupItem value="bold" aria-label="Bold">
+      <BoldIcon />
+    </ToggleGroupItem>
+    <ToggleGroupItem value="italic" aria-label="Italic">
+      <ItalicIcon />
+    </ToggleGroupItem>
+    <ToggleGroupItem value="underline" aria-label="Underline">
+      <UnderlineIcon />
+    </ToggleGroupItem>
+  </ToggleGroup>
+</Preview>
+
+```tsx
+<ToggleGroup type="multiple">
+  <ToggleGroupItem value="bold">Bold</ToggleGroupItem>
+  <ToggleGroupItem value="italic">Italic</ToggleGroupItem>
+</ToggleGroup>
+```
+
+### Outline Variant
+
+<Preview>
+  <ToggleGroup type="single" variant="outline" defaultValue="a">
+    <ToggleGroupItem value="a">A</ToggleGroupItem>
+    <ToggleGroupItem value="b">B</ToggleGroupItem>
+    <ToggleGroupItem value="c">C</ToggleGroupItem>
+  </ToggleGroup>
+</Preview>
+
+```tsx
+<ToggleGroup type="single" variant="outline">
+  ...
+</ToggleGroup>
+```
+
+### With Spacing
+
+<Preview>
+  <ToggleGroup type="single" spacing={4} defaultValue="a">
+    <ToggleGroupItem value="a">A</ToggleGroupItem>
+    <ToggleGroupItem value="b">B</ToggleGroupItem>
+    <ToggleGroupItem value="c">C</ToggleGroupItem>
+  </ToggleGroup>
+</Preview>
+
+```tsx
+<ToggleGroup type="single" spacing={4}>
+  ...
+</ToggleGroup>
+```
+
+## Props
+
+### ToggleGroup Props
+
+<TypeTable
+  type={{
+    type: {
+      description: "Single or multiple selection",
+      type: "'single' | 'multiple'",
+      default: "Required",
+    },
+    value: {
+      description: "Controlled value(s)",
+      type: "string | string[]",
+      default: "undefined",
+    },
+    defaultValue: {
+      description: "Initial value(s)",
+      type: "string | string[]",
+      default: "undefined",
+    },
+    onValueChange: {
+      description: "Callback when value changes",
+      type: "(value: string | string[]) => void",
+      default: "undefined",
+    },
+    variant: {
+      description: "Visual variant",
+      type: "'default' | 'outline' | 'primary'",
+      default: "'default'",
+    },
+    size: {
+      description: "Size of toggle items",
+      type: "'default' | 'sm' | 'lg'",
+      default: "'default'",
+    },
+    spacing: {
+      description: "Gap between items in pixels",
+      type: "number",
+      default: "0",
+    },
+    disabled: {
+      description: "Disable all items",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/toggle.mdx b/apps/www/src/features/design/content/docs/components/toggle.mdx
new file mode 100644
index 000000000..721c75e71
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/toggle.mdx
@@ -0,0 +1,152 @@
+---
+title: Toggle
+description: A two-state button that can be either on or off.
+---
+
+## Usage
+
+<Preview>
+  <Toggle aria-label="Toggle bold">
+    <BoldIcon />
+  </Toggle>
+</Preview>
+
+```tsx
+import { Toggle } from "@voidhash/ui";
+import { BoldIcon } from "lucide-react";
+
+<Toggle aria-label="Toggle bold">
+  <BoldIcon />
+</Toggle>;
+```
+
+## Variants
+
+<div className="flex flex-wrap gap-4">
+  <Preview className="p-4">
+    <Toggle variant="default" aria-label="Default">
+      <BoldIcon />
+    </Toggle>
+  </Preview>
+  <Preview className="p-4">
+    <Toggle variant="outline" aria-label="Outline">
+      <ItalicIcon />
+    </Toggle>
+  </Preview>
+  <Preview className="p-4">
+    <Toggle variant="primary" aria-label="Primary">
+      <UnderlineIcon />
+    </Toggle>
+  </Preview>
+</div>
+
+```tsx
+<Toggle variant="default">...</Toggle>
+<Toggle variant="outline">...</Toggle>
+<Toggle variant="primary">...</Toggle>
+```
+
+## Sizes
+
+<div className="flex flex-wrap items-center gap-4">
+  <Preview className="p-4">
+    <Toggle size="sm" aria-label="Small">
+      <BoldIcon />
+    </Toggle>
+  </Preview>
+  <Preview className="p-4">
+    <Toggle size="default" aria-label="Default">
+      <BoldIcon />
+    </Toggle>
+  </Preview>
+  <Preview className="p-4">
+    <Toggle size="lg" aria-label="Large">
+      <BoldIcon />
+    </Toggle>
+  </Preview>
+</div>
+
+```tsx
+<Toggle size="sm">...</Toggle>
+<Toggle size="default">...</Toggle>
+<Toggle size="lg">...</Toggle>
+```
+
+## Examples
+
+### With Text
+
+<Preview>
+  <Toggle aria-label="Toggle italic">
+    <ItalicIcon /> Italic
+  </Toggle>
+</Preview>
+
+```tsx
+<Toggle aria-label="Toggle italic">
+  <ItalicIcon /> Italic
+</Toggle>
+```
+
+### Pressed by Default
+
+<Preview>
+  <Toggle defaultPressed aria-label="Toggle">
+    <BoldIcon />
+  </Toggle>
+</Preview>
+
+```tsx
+<Toggle defaultPressed>
+  <BoldIcon />
+</Toggle>
+```
+
+### Disabled
+
+<Preview>
+  <Toggle disabled aria-label="Disabled">
+    <BoldIcon />
+  </Toggle>
+</Preview>
+
+```tsx
+<Toggle disabled>...</Toggle>
+```
+
+## Props
+
+<TypeTable
+  type={{
+    variant: {
+      description: "The visual style of the toggle",
+      type: "'default' | 'outline' | 'primary'",
+      default: "'default'",
+    },
+    size: {
+      description: "The size of the toggle",
+      type: "'default' | 'sm' | 'lg'",
+      default: "'default'",
+    },
+    pressed: {
+      description: "Controlled pressed state",
+      type: "boolean",
+      default: "undefined",
+    },
+    defaultPressed: {
+      description: "Initial pressed state",
+      type: "boolean",
+      default: "false",
+    },
+    onPressedChange: {
+      description: "Callback when pressed state changes",
+      type: "(pressed: boolean) => void",
+      default: "undefined",
+    },
+    disabled: {
+      description: "Whether the toggle is disabled",
+      type: "boolean",
+      default: "false",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/tooltip.mdx b/apps/www/src/features/design/content/docs/components/tooltip.mdx
new file mode 100644
index 000000000..bf4f9ddad
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/tooltip.mdx
@@ -0,0 +1,140 @@
+---
+title: Tooltip
+description: A popup that displays information related to an element when focused or hovered.
+---
+
+## Usage
+
+<Preview>
+  <Tooltip>
+    <TooltipTrigger render={<Button variant="outline">Hover me</Button>} />
+    <TooltipPopup>
+      <p>This is a tooltip</p>
+    </TooltipPopup>
+  </Tooltip>
+</Preview>
+
+```tsx
+import { Tooltip, TooltipPopup, TooltipTrigger } from "@voidhash/ui";
+
+<Tooltip>
+  <TooltipTrigger render={<Button variant="outline">Hover me</Button>} />
+  <TooltipPopup>
+    <p>This is a tooltip</p>
+  </TooltipPopup>
+</Tooltip>;
+```
+
+## Components
+
+### Tooltip
+
+The root component that wraps the trigger and popup. Automatically provides a
+`TooltipProvider` with a zero open delay, so isolated tooltips work without any
+extra setup.
+
+### TooltipTrigger
+
+The element that triggers the tooltip on hover/focus. Pass the rendered element
+via the `render` prop, or use the legacy `asChild` pattern for backwards
+compatibility.
+
+### TooltipPopup
+
+The popup content displayed when triggered. Internally renders a Base UI
+`Portal`, `Positioner`, `Popup`, and `Viewport`. `TooltipContent` is exported as
+an alias for backwards compatibility.
+
+### TooltipProvider
+
+Provides shared delay / grouping behavior for nested tooltips. Mount this once
+near the root of the app (or sidebar) when many tooltips should share a single
+delay timer.
+
+### IconButtonTooltip
+
+Convenience wrapper for the common pattern of tooltipping an icon button.
+
+## Examples
+
+### Icon button
+
+<Preview>
+  <IconButtonTooltip label="Add item">
+    <Button variant="ghost" size="icon">
+      <PlusIcon />
+    </Button>
+  </IconButtonTooltip>
+</Preview>
+
+```tsx
+import { IconButtonTooltip } from "@voidhash/ui";
+
+<IconButtonTooltip label="Add item">
+  <Button variant="ghost" size="icon">
+    <PlusIcon />
+  </Button>
+</IconButtonTooltip>;
+```
+
+### Different Positions
+
+<Preview>
+  <div className="flex gap-4">
+    <Tooltip>
+      <TooltipTrigger render={<Button variant="outline" size="icon"><ChevronUpIcon /></Button>} />
+      <TooltipPopup side="top">
+        <p>Top</p>
+      </TooltipPopup>
+    </Tooltip>
+    <Tooltip>
+      <TooltipTrigger render={<Button variant="outline" size="icon"><ChevronRightIcon /></Button>} />
+      <TooltipPopup side="right">
+        <p>Right</p>
+      </TooltipPopup>
+    </Tooltip>
+    <Tooltip>
+      <TooltipTrigger render={<Button variant="outline" size="icon"><ChevronDownIcon /></Button>} />
+      <TooltipPopup side="bottom">
+        <p>Bottom</p>
+      </TooltipPopup>
+    </Tooltip>
+    <Tooltip>
+      <TooltipTrigger render={<Button variant="outline" size="icon"><ChevronLeftIcon /></Button>} />
+      <TooltipPopup side="left">
+        <p>Left</p>
+      </TooltipPopup>
+    </Tooltip>
+  </div>
+</Preview>
+
+```tsx
+<TooltipPopup side="top">Top</TooltipPopup>
+<TooltipPopup side="right">Right</TooltipPopup>
+<TooltipPopup side="bottom">Bottom</TooltipPopup>
+<TooltipPopup side="left">Left</TooltipPopup>
+```
+
+## Props
+
+### TooltipPopup Props
+
+<TypeTable
+  type={{
+    side: {
+      description: "The side of the trigger to show the tooltip",
+      type: "'top' | 'right' | 'bottom' | 'left'",
+      default: "'top'",
+    },
+    sideOffset: {
+      description: "Distance from the trigger in pixels",
+      type: "number",
+      default: "4",
+    },
+    align: {
+      description: "Alignment along the side",
+      type: "'start' | 'center' | 'end'",
+      default: "'center'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/components/underline-tabs.mdx b/apps/www/src/features/design/content/docs/components/underline-tabs.mdx
new file mode 100644
index 000000000..6c70e8c49
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/underline-tabs.mdx
@@ -0,0 +1,97 @@
+---
+title: Underline Tabs
+description: A tabs component with an underline indicator style.
+---
+
+## Usage
+
+<Preview centered={false}>
+  <UnderlineTabs defaultValue="account" className="w-full max-w-md">
+    <UnderlineTabsList>
+      <UnderlineTabsTrigger value="account">Account</UnderlineTabsTrigger>
+      <UnderlineTabsTrigger value="password">Password</UnderlineTabsTrigger>
+      <UnderlineTabsTrigger value="settings">Settings</UnderlineTabsTrigger>
+    </UnderlineTabsList>
+    <UnderlineTabsContent value="account" className="pt-4">
+      <p>Account settings content.</p>
+    </UnderlineTabsContent>
+    <UnderlineTabsContent value="password" className="pt-4">
+      <p>Password settings content.</p>
+    </UnderlineTabsContent>
+    <UnderlineTabsContent value="settings" className="pt-4">
+      <p>Other settings content.</p>
+    </UnderlineTabsContent>
+  </UnderlineTabs>
+</Preview>
+
+```tsx
+import {
+  UnderlineTabs,
+  UnderlineTabsContent,
+  UnderlineTabsList,
+  UnderlineTabsTrigger,
+} from "@voidhash/ui";
+
+<UnderlineTabs defaultValue="account">
+  <UnderlineTabsList>
+    <UnderlineTabsTrigger value="account">Account</UnderlineTabsTrigger>
+    <UnderlineTabsTrigger value="password">Password</UnderlineTabsTrigger>
+  </UnderlineTabsList>
+  <UnderlineTabsContent value="account">Account content</UnderlineTabsContent>
+  <UnderlineTabsContent value="password">Password content</UnderlineTabsContent>
+</UnderlineTabs>;
+```
+
+## Components
+
+### UnderlineTabs
+
+The root container managing tab state.
+
+### UnderlineTabsList
+
+The container for tab triggers with underline styling.
+
+### UnderlineTabsTrigger
+
+A tab button with underline indicator.
+
+### UnderlineTabsContent
+
+The content panel for each tab.
+
+## Comparison with Tabs
+
+The UnderlineTabs component uses an underline indicator style, while the regular Tabs component uses a pill/segment style. Choose based on your design needs:
+
+- **UnderlineTabs**: Minimal, underline indicator, good for content sections
+- **Tabs**: Pill/segment style, good for switching between views
+
+## Props
+
+### UnderlineTabs Props
+
+<TypeTable
+  type={{
+    value: {
+      description: "Controlled active tab",
+      type: "string",
+      default: "undefined",
+    },
+    defaultValue: {
+      description: "Initial active tab",
+      type: "string",
+      default: "undefined",
+    },
+    onValueChange: {
+      description: "Callback when active tab changes",
+      type: "(value: string) => void",
+      default: "undefined",
+    },
+    orientation: {
+      description: "Layout orientation",
+      type: "'horizontal' | 'vertical'",
+      default: "'horizontal'",
+    },
+  }}
+/>
diff --git a/apps/www/src/features/design/content/docs/introduction.mdx b/apps/www/src/features/design/content/docs/introduction.mdx
new file mode 100644
index 000000000..abb6a1772
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/introduction.mdx
@@ -0,0 +1,4 @@
+---
+title: Voidhash Design System
+description: Introduction to Voidhash Design System.
+---
diff --git a/apps/www/src/features/design/content/docs/meta.yaml b/apps/www/src/features/design/content/docs/meta.yaml
new file mode 100644
index 000000000..b2c62f6c5
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/meta.yaml
@@ -0,0 +1,5 @@
+title: guide
+root: true
+pages:
+  - introduction
+  - components
diff --git a/apps/www/src/features/design/lib/basepath.ts b/apps/www/src/features/design/lib/basepath.ts
new file mode 100644
index 000000000..c99d371e3
--- /dev/null
+++ b/apps/www/src/features/design/lib/basepath.ts
@@ -0,0 +1 @@
+export { DESIGN_PATH as BASE_PATH } from "@/lib/paths";
diff --git a/apps/www/src/features/design/lib/cn.ts b/apps/www/src/features/design/lib/cn.ts
new file mode 100644
index 000000000..8e473dac8
--- /dev/null
+++ b/apps/www/src/features/design/lib/cn.ts
@@ -0,0 +1 @@
+export { twMerge as cn } from "tailwind-merge";
diff --git a/apps/www/src/features/design/lib/layout.shared.tsx b/apps/www/src/features/design/lib/layout.shared.tsx
new file mode 100644
index 000000000..5d392edbb
--- /dev/null
+++ b/apps/www/src/features/design/lib/layout.shared.tsx
@@ -0,0 +1,8 @@
+import type { BaseLayoutProps } from "fumadocs-ui/layouts/shared";
+
+export const baseOptions: BaseLayoutProps = {
+  links: [],
+  nav: {
+    title: "Voidhash Design System",
+  },
+};
diff --git a/apps/www/src/features/design/lib/source.ts b/apps/www/src/features/design/lib/source.ts
new file mode 100644
index 000000000..8675371fb
--- /dev/null
+++ b/apps/www/src/features/design/lib/source.ts
@@ -0,0 +1,33 @@
+import { loader } from "fumadocs-core/source";
+import * as icons from "lucide-static";
+
+import { docs } from "@generated/design";
+import { createViteSource } from "@/lib/create-vite-source";
+import { DESIGN_PATH } from "@/lib/paths";
+
+type DesignSource = ReturnType<typeof loader>;
+
+let sourcePromise: Promise<DesignSource> | undefined;
+
+/**
+ * Returns the loaded design documentation source without evaluating MDX imports at module load.
+ */
+export const getSource = (): Promise<DesignSource> => {
+  sourcePromise ??= createViteSource(docs.doc, docs.meta).then((docsSource) =>
+    loader({
+      baseUrl: DESIGN_PATH,
+      icon(icon) {
+        if (!icon) {
+          return;
+        }
+
+        if (icon in icons) {
+          return icons[icon as keyof typeof icons] as unknown as React.ReactElement;
+        }
+      },
+      source: docsSource,
+    }),
+  );
+
+  return sourcePromise;
+};
diff --git a/apps/www/src/features/design/source.config.ts b/apps/www/src/features/design/source.config.ts
new file mode 100644
index 000000000..a5283b326
--- /dev/null
+++ b/apps/www/src/features/design/source.config.ts
@@ -0,0 +1,30 @@
+import {
+  defineConfig,
+  defineDocs,
+  frontmatterSchema,
+  metaSchema,
+} from "../fumadocs-config.ts";
+
+// You can customise Zod schemas for frontmatter and `meta.json` here
+// see https://fumadocs.vercel.app/docs/mdx/collections#define-docs
+export const docs = defineDocs({
+  dir: "src/features/design/content/docs",
+  docs: {
+    schema: frontmatterSchema,
+  },
+  meta: {
+    schema: metaSchema,
+  },
+});
+
+export default defineConfig({
+  mdxOptions: {
+    // MDX options
+    remarkNpmOptions: {
+      persist: {
+        id: "package-manager",
+      },
+    },
+    valueToExport: ["elementIds", "toc"],
+  },
+});
diff --git a/apps/www/src/features/design/source.generated.ts b/apps/www/src/features/design/source.generated.ts
new file mode 100644
index 000000000..6aae24421
--- /dev/null
+++ b/apps/www/src/features/design/source.generated.ts
@@ -0,0 +1,21 @@
+/// <reference types="vite/client" />
+import { fromConfig } from 'fumadocs-mdx/runtime/vite';
+import type * as Config from './source.config';
+
+export const create = fromConfig<typeof Config>();
+
+export const docs = {
+  doc: create.doc("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
+    "base": "./src/features/design/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  })),
+  meta: create.meta("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
+    "import": "default",
+    "base": "./src/features/design/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  }))
+};
\ No newline at end of file
diff --git a/apps/www/src/features/design/styles/globals.css b/apps/www/src/features/design/styles/globals.css
new file mode 100644
index 000000000..bfe24c965
--- /dev/null
+++ b/apps/www/src/features/design/styles/globals.css
@@ -0,0 +1,32 @@
+@import "@fontsource-variable/geist";
+@import "tailwindcss";
+@import "fumadocs-ui/css/shadcn.css";
+@import "fumadocs-ui/css/preset.css";
+@import "@voidhash/ui/styles/brand-theme.css";
+
+@source "../../../../packages/ui";
+@source "../../src";
+
+@custom-variant dark (&:is(.dark *));
+
+::selection {
+  background: #0673ff;
+  color: #fff;
+}
+
+:root {
+  --color-fd-primary: var(--primary);
+}
+
+.dark {
+  --color-fd-primary: var(--primary);
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+  body {
+    @apply bg-background text-foreground;
+  }
+}
diff --git a/apps/www/src/features/docs/components/layout/docs.tsx b/apps/www/src/features/docs/components/layout/docs.tsx
new file mode 100644
index 000000000..53e8318d4
--- /dev/null
+++ b/apps/www/src/features/docs/components/layout/docs.tsx
@@ -0,0 +1,229 @@
+"use client";
+
+import {
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger,
+  Sidebar,
+  SidebarContent,
+  SidebarGroup,
+  SidebarGroupContent,
+  SidebarGroupLabel,
+  SidebarInset,
+  SidebarMenu,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarProvider,
+} from "@voidhash/ui";
+import { Link as FrameworkLink, usePathname } from "fumadocs-core/framework";
+import type { PageTree } from "fumadocs-core/server";
+import { TreeContextProvider, useTreeContext } from "fumadocs-ui/contexts/tree";
+import { ChevronRight } from "lucide-react";
+import { CirclePlay } from "lucide-static";
+import {
+  type ComponentProps,
+  type ComponentType,
+  type ReactElement,
+  type ReactNode,
+  useMemo,
+} from "react";
+
+import { NavBar } from "../nav-bar";
+import { DocsThemeToggle } from "../theme-toggle";
+
+export interface DocsLayoutProps {
+  tree: PageTree.Root;
+  children: ReactNode;
+}
+
+export function DocsLayout({ tree, children }: DocsLayoutProps) {
+  return (
+    <SidebarProvider
+      className="flex flex-col [--header-height:calc(theme(spacing.14))]"
+      defaultOpen={true}
+    >
+      <TreeContextProvider tree={tree}>
+        <NavBar />
+
+        <div className="flex flex-1">
+          <DocsSidebar />
+
+          <SidebarInset className="top-[var(--header-height)] flex-1 transition-all duration-75">
+            <div className="flex w-full">{children}</div>
+          </SidebarInset>
+        </div>
+      </TreeContextProvider>
+    </SidebarProvider>
+  );
+}
+
+function DocsSidebar() {
+  const { root } = useTreeContext();
+  const pathname = usePathname();
+
+  const groups = useMemo(() => {
+    function transformNode(node: PageTree.Node): {
+      icon?: ReactElement;
+      title: string;
+      url: string;
+      isActive?: () => boolean;
+      items?: {
+        title: string;
+        url: string;
+        isActive?: () => boolean;
+      }[];
+    } | null {
+      if (node.type === "page") {
+        return {
+          icon: node.icon as ReactElement,
+          isActive: () => pathname === node.url,
+          title: typeof node.name === "string" ? node.name : String(node.name),
+          url: node.url,
+        };
+      }
+
+      if (node.type === "folder") {
+        const items = node.children
+          .map(transformNode)
+          .filter((item): item is NonNullable<typeof item> => item !== null);
+
+        if (node.index) {
+          return {
+            icon: node.icon as ReactElement,
+            isActive: () => pathname === node.index?.url || items.some((item) => item.isActive?.()),
+            items: items.length > 0 ? items : undefined,
+            title: typeof node.name === "string" ? node.name : String(node.name),
+            url: node.index.url,
+          };
+        }
+
+        if (items.length > 0) {
+          return {
+            icon: node.icon as ReactElement,
+            isActive: () => items.some((item) => item.isActive?.()),
+            items,
+            title: typeof node.name === "string" ? node.name : String(node.name),
+            url: "#",
+          };
+        }
+      }
+
+      return null;
+    }
+
+    const itemsWithDefaultGroup: PageTree.Node[] = [
+      {
+        $id: "get-started",
+        children: root.children.filter((item) => item.type === "page"),
+        icon: CirclePlay as unknown as ReactElement,
+        index: {
+          $id: "index.mdx",
+          $ref: {
+            file: "index.mdx",
+          },
+          name: "Index",
+          type: "page",
+          url: "/docs",
+        },
+        name: "Get Started",
+        type: "folder",
+      },
+      ...root.children.filter((item) => item.type === "folder"),
+    ];
+
+    return itemsWithDefaultGroup
+      .map(transformNode)
+      .filter((item): item is NonNullable<typeof item> => item !== null);
+  }, [root, pathname]);
+
+  return (
+    <Sidebar className="!top-[var(--header-height)] !h-[calc(100svh-var(--header-height))] fixed min-w-64 border-r bg-background transition-all duration-75">
+      <SidebarContent className="gap-0">
+        <NavMain groups={groups} link={SidebarLink} />
+        <DocsThemeToggle className="mt-2 ml-5 block md:hidden" />
+      </SidebarContent>
+    </Sidebar>
+  );
+}
+
+function SidebarLink(props: ComponentProps<"a">) {
+  const href = props.href ?? "#";
+  return <FrameworkLink {...props} href={href} />;
+}
+
+export function NavMain({
+  link: Link,
+  groups,
+}: {
+  link: ComponentType<ComponentProps<"a">> | "a";
+  defaultOpenNested?: boolean;
+  groups: {
+    title: string;
+    icon?: ReactElement;
+    items?: {
+      title: string;
+      url: string;
+      icon?: ReactElement;
+      isActive?: () => boolean;
+      items?: {
+        title: string;
+        url: string;
+        isActive?: () => boolean;
+      }[];
+    }[];
+  }[];
+  tooltips?: "enabled" | "disabled";
+}) {
+  return (
+    <>
+      {groups.map((group) => (
+        <Collapsible
+          className="group/collapsible"
+          defaultOpen
+          key={group.title}
+          title={group.title}
+        >
+          <SidebarGroup className="p-0">
+            <SidebarGroupLabel
+              asChild
+              className="group/label -mt-px rounded-none border-border border-y px-6 py-5 text-sidebar-foreground text-sm hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"
+            >
+              <CollapsibleTrigger className="cursor-pointer">
+                <div
+                  className="*:-ml-0.5 *:mr-2 *:size-4 *:text-muted-foreground"
+                  // biome-ignore lint/security/noDangerouslySetInnerHtml: It is safe - static icon markup
+                  dangerouslySetInnerHTML={{
+                    __html: group.icon as unknown as string,
+                  }}
+                />
+                {group.title}
+                <ChevronRight className="ml-auto size-4 transition-transform group-data-[state=open]/collapsible:rotate-90" />
+              </CollapsibleTrigger>
+            </SidebarGroupLabel>
+            <CollapsibleContent className="pt-1">
+              <SidebarGroupContent className="p-2 pb-[9px]">
+                <SidebarMenu>
+                  {group.items?.map((item) => (
+                    <SidebarMenuItem
+                      className="px-1 font-normal text-muted-foreground"
+                      key={item.title}
+                    >
+                      <SidebarMenuButton asChild isActive={item.isActive?.()}>
+                        <Link
+                          className="px-3 font-normal data-[active=true]:bg-muted data-[active=true]:font-normal data-[active=true]:text-foreground"
+                          href={item.url}
+                        >
+                          {item.title}
+                        </Link>
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                  ))}
+                </SidebarMenu>
+              </SidebarGroupContent>
+            </CollapsibleContent>
+          </SidebarGroup>
+        </Collapsible>
+      ))}
+    </>
+  );
+}
diff --git a/apps/www/src/features/docs/components/layout/page.tsx b/apps/www/src/features/docs/components/layout/page.tsx
new file mode 100644
index 000000000..5f232566e
--- /dev/null
+++ b/apps/www/src/features/docs/components/layout/page.tsx
@@ -0,0 +1,150 @@
+"use client";
+import { Card, CardContent, CardDescription, CardTitle } from "@voidhash/ui";
+import { Link, usePathname } from "fumadocs-core/framework";
+import type { PageTree, TableOfContents, TOCItemType } from "fumadocs-core/server";
+import { AnchorProvider, useActiveAnchors } from "fumadocs-core/toc";
+import { useTreeContext } from "fumadocs-ui/contexts/tree";
+import { ChevronLeftIcon, ChevronRightIcon } from "lucide-react";
+import { type ComponentProps, type ReactNode, useMemo } from "react";
+
+import { cn } from "../../lib/cn";
+
+export interface DocsPageProps {
+  toc?: TableOfContents;
+
+  children: ReactNode;
+}
+
+export function DocsPage({ toc = [], ...props }: DocsPageProps) {
+  return (
+    <AnchorProvider toc={toc}>
+      <main className="flex w-full min-w-0 flex-col">
+        <article className="flex w-full max-w-[860px] flex-1 flex-col gap-6 px-4 py-8 md:mx-auto md:px-6">
+          {props.children}
+          <Footer />
+        </article>
+      </main>
+      {toc.length > 0 && (
+        <div className="sticky top-(--header-height) h-[calc(100dvh-var(--header-height))] w-[286px] shrink-0 overflow-auto p-4 max-xl:hidden">
+          <p className="mb-2 text-fd-muted-foreground text-sm">On this page</p>
+          <div className="flex flex-col">
+            {toc.map((item) => (
+              <TocItem item={item} key={item.url} />
+            ))}
+          </div>
+        </div>
+      )}
+    </AnchorProvider>
+  );
+}
+
+export function DocsBody(props: ComponentProps<"div">) {
+  return (
+    <div {...props} className={cn("prose ", props.className)}>
+      {props.children}
+    </div>
+  );
+}
+
+export function DocsDescription(props: ComponentProps<"p">) {
+  // don't render if no description provided
+  if (props.children === undefined) {
+    return null;
+  }
+
+  return (
+    <p {...props} className={cn("mt-1 text-muted-foreground", props.className)}>
+      {props.children}
+    </p>
+  );
+}
+
+export function DocsTitle(props: ComponentProps<"h1">) {
+  return (
+    <h1 {...props} className={cn("mt-8 font-semibold text-3xl tracking-right", props.className)}>
+      {props.children}
+    </h1>
+  );
+}
+
+function TocItem({ item }: { item: TOCItemType }) {
+  const isActive = useActiveAnchors().includes(item.url.slice(1));
+
+  return (
+    <a
+      className={cn("py-1 text-fd-foreground/80 text-sm", isActive && "text-fd-primary")}
+      href={item.url}
+      style={{
+        paddingLeft: Math.max(0, item.depth - 2) * 16,
+      }}
+    >
+      {item.title}
+    </a>
+  );
+}
+
+function Footer() {
+  const { root } = useTreeContext();
+  const pathname = usePathname();
+  const flatten = useMemo(() => {
+    const result: PageTree.Item[] = [];
+
+    function scan(items: PageTree.Node[]) {
+      for (const item of items) {
+        if (item.type === "page") {
+          result.push(item);
+        } else if (item.type === "folder") {
+          if (item.index) {
+            result.push(item.index);
+          }
+          scan(item.children);
+        }
+      }
+    }
+
+    scan(root.children);
+    return result;
+  }, [root]);
+
+  const { previous, next } = useMemo(() => {
+    const idx = flatten.findIndex((item) => item.url === pathname);
+
+    if (idx === -1) {
+      return {};
+    }
+    return {
+      next: flatten[idx + 1],
+      previous: flatten[idx - 1],
+    };
+  }, [flatten, pathname]);
+
+  return (
+    <div className="flex flex-row items-center justify-between gap-8">
+      {previous ? (
+        <Link className="flex-1" href={previous.url}>
+          <Card className="rounded-none hover:bg-card">
+            <CardContent>
+              <CardDescription className="mt-1 flex items-center">
+                <ChevronLeftIcon className="-ml-1 mr-1 size-4" /> <span>Previous Page</span>
+              </CardDescription>
+              <CardTitle className="mt-2 font-normal text-md">{previous.name}</CardTitle>
+            </CardContent>
+          </Card>
+        </Link>
+      ) : null}
+      {next ? (
+        <Link className="flex-1" href={next.url}>
+          <Card className="rounded-none hover:bg-card">
+            <CardContent className="flex w-full flex-col items-end">
+              <CardDescription className="mt-1 flex items-center">
+                <span>Next Page</span>
+                <ChevronRightIcon className="-mr-1 ml-1 size-4" />{" "}
+              </CardDescription>
+              <CardTitle className="mt-2 font-normal text-md">{next.name}</CardTitle>
+            </CardContent>
+          </Card>
+        </Link>
+      ) : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/docs/components/nav-bar.tsx b/apps/www/src/features/docs/components/nav-bar.tsx
new file mode 100644
index 000000000..472932e6d
--- /dev/null
+++ b/apps/www/src/features/docs/components/nav-bar.tsx
@@ -0,0 +1,68 @@
+"use client";
+
+import { Button, CommandShortcut, Logo, cn, useSidebar } from "@voidhash/ui";
+import { useSearchContext } from "fumadocs-ui/contexts/search";
+import { MenuIcon, SearchIcon } from "lucide-react";
+import type { ComponentProps } from "react";
+
+import { DocsThemeToggle } from "./theme-toggle";
+
+function SearchToggle(props: ComponentProps<"button">) {
+  const { enabled, setOpenSearch } = useSearchContext();
+  if (!enabled) {
+    return;
+  }
+
+  return (
+    <button
+      {...props}
+      className={cn("flex items-center gap-2 bg-transparent text-sm md:bg-muted ", props.className)}
+      onClick={() => setOpenSearch(true)}
+    >
+      <SearchIcon className="size-4 cursor-pointer text-muted-foreground " />
+      <span className="mr-4 hidden flex-1 text-left text-muted-foreground md:block">
+        Search documentation...
+      </span>
+      <CommandShortcut className="hidden md:block">⌘K</CommandShortcut>
+    </button>
+  );
+}
+
+export function NavBar() {
+  return (
+    <div className="fixed z-10 flex h-[var(--header-height)] w-full flex-row items-center justify-between border-border border-b bg-background transition-all duration-75">
+      <div className="flex flex-1 items-center justify-between px-4 py-2">
+        <div className="mr-7 flex items-center">
+          <a className="flex items-center gap-3" href="https://voidhash.com">
+            <Logo className="ml-2 h-6" color="mono" variant="default" />
+            <span className="rounded-md border-border bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
+              Docs
+            </span>
+          </a>
+        </div>
+        <div className="flex items-center gap-2 md:flex-1">
+          <div className="md:flex-1">
+            <SearchToggle className="ml-8 cursor-pointer rounded-lg bg-muted p-2 px-3 hover:bg-accent" />
+          </div>
+          <DocsThemeToggle />
+          <SidebarToggle />
+          <a className="hidden md:block" href="https://app.voidhash.com">
+            <Button variant="outline">Dashboard</Button>
+          </a>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function SidebarToggle() {
+  const { openMobile, setOpenMobile } = useSidebar();
+  const handleToggle = () => {
+    setOpenMobile(!openMobile);
+  };
+  return (
+    <Button className={cn("md:hidden")} onClick={handleToggle} variant="ghost">
+      <MenuIcon className="size-4" />
+    </Button>
+  );
+}
diff --git a/apps/www/src/features/docs/components/theme-toggle.tsx b/apps/www/src/features/docs/components/theme-toggle.tsx
new file mode 100644
index 000000000..87c810b14
--- /dev/null
+++ b/apps/www/src/features/docs/components/theme-toggle.tsx
@@ -0,0 +1,15 @@
+"use client";
+import { ThemeToggle, cn } from "@voidhash/ui";
+import { useTheme } from "next-themes";
+
+export function DocsThemeToggle({ className }: { className?: string }) {
+  const { theme, setTheme } = useTheme();
+
+  return (
+    <ThemeToggle
+      className={cn("hidden md:block", className)}
+      setTheme={setTheme}
+      theme={theme ?? "system"}
+    />
+  );
+}
diff --git a/apps/www/src/features/docs/components/where-to-find-guide.tsx b/apps/www/src/features/docs/components/where-to-find-guide.tsx
new file mode 100644
index 000000000..5be78e108
--- /dev/null
+++ b/apps/www/src/features/docs/components/where-to-find-guide.tsx
@@ -0,0 +1,88 @@
+"use client";
+
+import {
+  Button,
+  cn,
+  Sheet,
+  SheetContent,
+  SheetDescription,
+  SheetHeader,
+  SheetTitle,
+  SheetTrigger,
+} from "@voidhash/ui";
+import { CircleHelpIcon, ExternalLinkIcon } from "lucide-react";
+import { type ReactNode, useState } from "react";
+
+import { GuideBody } from "@/features/docs/lib/guide-content";
+import { DOCS_PATH } from "@/lib/paths";
+
+/**
+ * A reusable "Where to find?" affordance. Renders an inline link-style button
+ * that opens a Sheet showing a documentation guide (authored as MDX under the
+ * docs collection) so users can learn where to obtain a value without leaving
+ * the form. The same guide is published at `/docs/<guide>` for SEO, linked from
+ * the sheet footer.
+ *
+ * The guide MDX chunk is only fetched the first time the sheet is opened.
+ *
+ * @param guide - Guide slug, matching its public path at `/docs/<guide>`
+ *   (e.g. `guides/payment-providers/apple-app-store/bundle-id`).
+ * @param fieldLabel - The field name, used in the sheet title.
+ * @param label - Trigger text. Defaults to "Where to find?".
+ */
+export function WhereToFindGuide({
+  guide,
+  fieldLabel,
+  label = "Where to find?",
+  className,
+}: {
+  guide: string;
+  fieldLabel?: ReactNode;
+  label?: string;
+  className?: string;
+}) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <Sheet onOpenChange={setOpen} open={open}>
+      <SheetTrigger asChild>
+        <Button
+          className={cn(
+            "h-auto gap-1 p-0 font-normal text-muted-foreground hover:text-foreground",
+            className,
+          )}
+          size="sm"
+          type="button"
+          variant="link"
+        >
+          <CircleHelpIcon />
+          {label}
+        </Button>
+      </SheetTrigger>
+      <SheetContent className="flex w-full flex-col gap-0 p-0 sm:max-w-lg" side="right">
+        <SheetHeader className="border-b">
+          <SheetTitle>
+            {fieldLabel ? <>Where to find your {fieldLabel}</> : "Where to find this"}
+          </SheetTitle>
+          <SheetDescription>
+            Follow these steps, then copy the value back into Voidhash.
+          </SheetDescription>
+        </SheetHeader>
+        <div className="min-h-0 flex-1 overflow-y-auto px-4 py-5">
+          {open ? <GuideBody slug={guide} /> : null}
+        </div>
+        <div className="border-t p-4">
+          <a
+            className="inline-flex items-center gap-1.5 text-muted-foreground text-sm hover:text-foreground"
+            href={`${DOCS_PATH}/${guide}`}
+            rel="noreferrer"
+            target="_blank"
+          >
+            Open full guide
+            <ExternalLinkIcon className="size-3.5" />
+          </a>
+        </div>
+      </SheetContent>
+    </Sheet>
+  );
+}
diff --git a/apps/www/src/features/docs/content/docs/basic-usage.mdx b/apps/www/src/features/docs/content/docs/basic-usage.mdx
new file mode 100644
index 000000000..a3c541950
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/basic-usage.mdx
@@ -0,0 +1,216 @@
+---
+title: Basic Usage
+description: Learn how to identify users, build paywalls, and handle purchases with Voidhash.
+---
+
+## Setup
+
+### Wrap Your App with the Provider
+
+Wrap your app with the Voidhash Provider to enable hooks throughout your application:
+
+```tsx title="app/_layout.tsx"
+import { voidhash } from "utils/voidhash/client";
+
+export default function RootLayout() {
+  return <voidhash.Provider>{/* Your app content */}</voidhash.Provider>;
+}
+```
+
+## User Identification
+
+### Identifying Users
+
+After a user signs in with your authentication system, identify them with Voidhash using a unique, hard-to-guess identifier:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+const handleSignIn = async (email: string) => {
+  // Your authentication logic
+  const user = await yourAuthService.signIn(email);
+
+  // Identify the user with Voidhash
+  await voidhash.client.identify(user.id, {
+    email: user.email,
+    name: user.name,
+  });
+};
+```
+
+<Callout type="warn" title="Security">
+  The identifier should be unique and hard to guess (like a UUID). Never use predictable values like
+  sequential IDs or email addresses as the primary identifier.
+</Callout>
+
+### Signing Out
+
+When a user signs out, make sure to also sign them out from Voidhash:
+
+```tsx
+const handleSignOut = async () => {
+  // Your sign-out logic
+  await yourAuthService.signOut();
+
+  // Sign out from Voidhash
+  await voidhash.client.signOut();
+};
+```
+
+## Building a Paywall
+
+### Fetching Products
+
+Use the `useProducts` hook to fetch available products defined in your schema:
+
+```tsx title="app/paywall.tsx"
+import { voidhash } from "utils/voidhash/client";
+
+export default function PaywallScreen() {
+  const { data: products, isLoading } = voidhash.useProducts();
+
+  if (isLoading) {
+    return <LoadingSpinner />;
+  }
+
+  return (
+    <View>
+      {products.toList().map((product) => (
+        <View key={product.slug}>
+          <Text>{product.name}</Text>
+          <Text>{product.price}</Text>
+          <Text>{product.currency}</Text>
+        </View>
+      ))}
+    </View>
+  );
+}
+```
+
+### Making a Purchase
+
+Use the `usePurchase` hook to handle purchases:
+
+```tsx
+const { purchase, isLoading: isPurchasing } = voidhash.usePurchase();
+
+purchase(product);
+```
+
+The purchase flow is handled automatically by Voidhash, including:
+
+- Initiating the payment with the app store
+- Verifying the receipt
+- Activating the subscription
+- Updating the person's perks
+
+### Complete Paywall Example
+
+Here's a full paywall implementation with product selection:
+
+```tsx title="app/paywall.tsx"
+import type { SubscriptionProduct } from "@voidhash/react-native/build/core/entities/product";
+import { useState } from "react";
+import { Text, TouchableOpacity, View } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+export default function PaywallScreen() {
+  const [selectedProduct, setSelectedProduct] = useState<SubscriptionProduct | null>(null);
+
+  const { purchase, isLoading: isPurchasing } = voidhash.usePurchase();
+  const { data: products, isLoading: areProductsLoading } = voidhash.useProducts();
+
+  if (areProductsLoading) {
+    return <LoadingSpinner />;
+  }
+
+  const handlePurchase = () => {
+    if (!selectedProduct) {
+      return;
+    }
+    purchase(selectedProduct);
+  };
+
+  return (
+    <View>
+      <Text>Choose a plan to continue</Text>
+
+      <View>
+        {products.toList().map((product) => (
+          <TouchableOpacity key={product.slug} onPress={() => setSelectedProduct(product)}>
+            <View>
+              <Text>{product.name}</Text>
+              <Text>{Math.round(product.price * 100) / 100}</Text>
+            </View>
+          </TouchableOpacity>
+        ))}
+      </View>
+
+      <Button
+        onPress={handlePurchase}
+        disabled={!selectedProduct || isPurchasing}
+        title={isPurchasing ? "Purchasing..." : "Continue"}
+      />
+    </View>
+  );
+}
+```
+
+## Accessing Person Data
+
+### Current Person Information
+
+Use the `useCurrentPerson` hook to access the current person's subscription and perk information:
+
+```tsx title="app/person.tsx"
+import { voidhash } from "utils/voidhash/client";
+
+export default function PersonScreen() {
+  const { data: person, isLoading, error } = voidhash.useCurrentPerson();
+
+  if (isLoading) {
+    return <LoadingSpinner />;
+  }
+
+  if (error) {
+    return <ErrorMessage error={error} />;
+  }
+
+  return (
+    <View>
+      <Text>Person ID: {person?.id}</Text>
+      <Text>Active Subscriptions: {person?.subscriptions?.length}</Text>
+      {/* Display person information */}
+    </View>
+  );
+}
+```
+
+## Platform-Specific Features
+
+### iOS-Only Features
+
+Voidhash provides iOS-specific methods for managing subscriptions:
+
+```tsx
+import { Platform } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+export default function PersonScreen() {
+  const { client } = voidhash.useVoidhash();
+
+  return (
+    <View>
+      {Platform.OS === "ios" && (
+        <>
+          <Button onPress={() => client.iosPresentCodeRedemptionSheet()} title="Redeem Code" />
+          <Button
+            onPress={() => client.iosShowManageSubscriptions()}
+            title="Manage Subscriptions"
+          />
+        </>
+      )}
+    </View>
+  );
+}
+```
diff --git a/apps/www/src/features/docs/content/docs/concepts/meta.yaml b/apps/www/src/features/docs/content/docs/concepts/meta.yaml
new file mode 100644
index 000000000..be96eb1fb
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/concepts/meta.yaml
@@ -0,0 +1,5 @@
+icon: BookOpenText
+title: Concepts
+pages:
+  - products
+  - perks
diff --git a/apps/www/src/features/docs/content/docs/concepts/perks.mdx b/apps/www/src/features/docs/content/docs/concepts/perks.mdx
new file mode 100644
index 000000000..384dabf01
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/concepts/perks.mdx
@@ -0,0 +1,274 @@
+---
+title: Perks
+description: Understanding perks and how they control access to features
+---
+
+Perks are the features, content, or capabilities that users gain access to when they purchase a product. They're the building blocks of your app's access control system.
+
+## What is a Perk?
+
+A perk represents a specific feature or piece of content that can be unlocked through purchases. Think of perks as permissions or entitlements that control what users can access in your app.
+
+Examples of perks:
+
+- Access to premium features
+- Ad-free experience
+- Unlimited usage
+- Priority support
+- Exclusive content
+- Advanced tools
+
+## Creating Perks
+
+Perks are defined in your schema configuration using the `unlockablePerk` helper:
+
+```ts
+import { schemaConfiguration, unlockablePerk } from "@voidhash/react-native";
+
+export const sc = schemaConfiguration({
+  providers: {
+    googlePlay: true,
+    appleAppStore: true,
+  },
+  perks: {
+    allAccess: unlockablePerk("all-access", {
+      name: "All Access",
+    }),
+    premiumFeatures: unlockablePerk("premium-features", {
+      name: "Premium Features",
+    }),
+    adFree: unlockablePerk("ad-free", {
+      name: "Ad-Free Experience",
+    }),
+  },
+});
+```
+
+## Perk Configuration
+
+### Key (Identifier)
+
+The key is how you reference the perk in your code. It should be camelCase and descriptive. In most cases, it is similar to the slug, just in a .js/.ts friendly way.
+
+```ts
+schemaConfiguration({
+  providers: { /* ... */ },
+  perks: {
+    allAccess: unlockablePerk(...),      // Good
+    premiumFeatures: unlockablePerk(...), // Good
+  },
+});
+```
+
+### Slug
+
+The slug is a unique identifier for your perk across Voidhash. It should be lowercase with hyphens or underscores. Do not use spaces or special characters.
+
+```ts
+unlockablePerk("all-access", { ... });      // Good
+unlockablePerk("premium-features", { ... }); // Good
+unlockablePerk("AllAccess", { ... });        // Bad: Use lowercase
+```
+
+### Name
+
+The name is a human-readable display name. It could be shown to users in your app but is primarily used for admin purposes.
+
+```ts
+unlockablePerk("all-access", {
+  name: "All Access",
+});
+```
+
+## Assigning Perks to Products
+
+Perks are unlocked by products. When a user purchases a product, all the perks assigned to that product are automatically activated:
+
+```ts
+export const monthlySub = sc.subscription("monthly_sub", {
+  name: "Monthly Premium",
+  perks: {
+    allAccess: true, // This perk will be unlocked
+    premiumFeatures: true, // This perk will be unlocked
+    // adFree not listed, so it stays locked
+  },
+  providers: {
+    // ... providers configuration
+  },
+});
+```
+
+## Checking Perk Access
+
+TODO: Add documentation about checking perk access.
+
+## Perk Lifecycle
+
+### Activation
+
+Perks are automatically activated when:
+
+- A user purchases a product that includes the perk
+- An active subscription that grants the perk is in good standing
+
+### Deactivation
+
+Perks are automatically deactivated when:
+
+- A subscription expires
+- A subscription payment fails and grace period ends
+
+### Expiration
+
+For subscription-based perks:
+
+- Perks remain active as long as the subscription is active
+- When a subscription expires, associated perks are automatically deactivated
+- Voidhash handles this synchronization automatically
+
+## Perk Strategies
+
+### Feature-Based Perks
+
+Group features into logical perks:
+
+```ts
+export const sc = schemaConfiguration({
+  providers: {
+    /* ... */
+  },
+  perks: {
+    basicEditor: unlockablePerk("basic-editor", {
+      name: "Basic Editor",
+    }),
+    advancedEditor: unlockablePerk("advanced-editor", {
+      name: "Advanced Editor",
+    }),
+    exportFeatures: unlockablePerk("export-features", {
+      name: "Export Features",
+    }),
+  },
+});
+```
+
+### Tier-Based Perks
+
+Create perks for different subscription tiers:
+
+```ts
+export const sc = schemaConfiguration({
+  providers: {
+    /* ... */
+  },
+  perks: {
+    basicTier: unlockablePerk("basic-tier", {
+      name: "Basic Tier",
+    }),
+    proTier: unlockablePerk("pro-tier", {
+      name: "Pro Tier",
+    }),
+    enterpriseTier: unlockablePerk("enterprise-tier", {
+      name: "Enterprise Tier",
+    }),
+  },
+});
+
+// Products
+export const basic = sc.subscription("basic", {
+  name: "Basic",
+  perks: {
+    basicTier: true,
+  },
+  providers: {
+    /* ... */
+  },
+});
+
+export const pro = sc.subscription("pro", {
+  name: "Pro",
+  perks: {
+    basicTier: true,
+    proTier: true, // Pro gets both basic and pro perks
+  },
+  providers: {
+    /* ... */
+  },
+});
+```
+
+### Content-Based Perks
+
+Control access to specific content categories:
+
+```ts
+export const sc = schemaConfiguration({
+  providers: {
+    /* ... */
+  },
+  perks: {
+    freeContent: unlockablePerk("free-content", {
+      name: "Free Content",
+    }),
+    premiumContent: unlockablePerk("premium-content", {
+      name: "Premium Content",
+    }),
+    exclusiveContent: unlockablePerk("exclusive-content", {
+      name: "Exclusive Content",
+    }),
+  },
+});
+```
+
+## Best Practices
+
+### Hierarchical Access
+
+Design your perks so higher tiers include lower tier perks:
+
+```ts
+// Free tier gets nothing
+export const freeTier = sc.subscription("free", {
+  name: "Free",
+  perks: {}, // No perks
+  providers: {
+    /* ... */
+  },
+});
+
+// Basic tier gets basic features
+export const basicTier = sc.subscription("basic", {
+  name: "Basic",
+  perks: {
+    adFree: true,
+  },
+  providers: {
+    /* ... */
+  },
+});
+
+// Pro tier gets basic + pro features
+export const proTier = sc.subscription("pro", {
+  name: "Pro",
+  perks: {
+    adFree: true,
+    premiumFeatures: true,
+  },
+  providers: {
+    /* ... */
+  },
+});
+
+// Premium tier gets everything
+export const premiumTier = sc.subscription("premium", {
+  name: "Premium",
+  perks: {
+    adFree: true,
+    premiumFeatures: true,
+    exclusiveContent: true,
+    prioritySupport: true,
+  },
+  providers: {
+    /* ... */
+  },
+});
+```
diff --git a/apps/www/src/features/docs/content/docs/concepts/products.mdx b/apps/www/src/features/docs/content/docs/concepts/products.mdx
new file mode 100644
index 000000000..135459ef1
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/concepts/products.mdx
@@ -0,0 +1,204 @@
+---
+title: Products
+description: Understanding products and how they work in Voidhash
+---
+
+Products represent the purchasable items in your app that people can buy through app stores. They define what's available for sale and how it connects to your payment providers and perks.
+
+## What is a Product?
+
+A product in Voidhash is a purchasable item that:
+
+- Has a **unique identifier** (slug) that you define in your schema
+- Has a **name** that's displayed to users
+- Is configured for **payment providers** (Apple App Store, Google Play, or both)
+- **Unlocks specific perks** when purchased
+- Contains **pricing and billing information** from the app stores
+
+## Product Types
+
+### Subscription Products
+
+Currently, Voidhash supports subscription products, which provide recurring access to features or content.
+
+```ts
+import { schemaConfiguration, unlockablePerk } from "@voidhash/react-native";
+
+export const sc = schemaConfiguration({
+  providers: {
+    googlePlay: true,
+    appleAppStore: true,
+  },
+  perks: {
+    allAccess: unlockablePerk("all-access", {
+      name: "All Access",
+    }),
+  },
+});
+
+export const monthlySub = sc.subscription("monthly-sub", {
+  name: "Monthly",
+  perks: {
+    allAccess: true,
+  },
+  providers: {
+    googlePlay: {
+      productId: "com.yourapp.monthly",
+    },
+    appleAppStore: {
+      productId: "monthly_subscription",
+    },
+  },
+});
+```
+
+## Product Configuration
+
+### Slug
+
+The slug is a unique identifier for your product across Voidhash.:
+
+```ts
+sc.subscription("monthly-sub", { ... });
+sc.subscription("yearly-premium", { ... });
+sc.subscription("lifetime-access", { ... });
+```
+
+### Name
+
+The name is a human-readable display name, that could be shown to users.
+
+```ts
+sc.subscription("monthly-sub", {
+  name: "Monthly Premium",
+  // ...
+});
+```
+
+### Payment Provider Configuration
+
+Each product must be configured for the payment providers you want to support. The configuration links your Voidhash product to the actual in-app purchases in the app stores.
+
+#### Apple App Store
+
+For Apple App Store, you need to provide the product identifier that matches your App Store Connect configuration:
+
+```ts
+sc.subscription("monthly-sub", {
+  name: "Monthly",
+  perks: {
+    /* ... */
+  },
+  providers: {
+    appleAppStore: {
+      productId: "monthly-subscription",
+    },
+  },
+});
+```
+
+#### Google Play
+
+For Google Play, provide the product ID and optionally a base plan ID for subscriptions:
+
+```ts
+sc.subscription("monthly-sub", {
+  name: "Monthly",
+  perks: {
+    /* ... */
+  },
+  providers: {
+    googlePlay: {
+      productId: "com.yourapp.monthly",
+      basePlanId: "com.yourapp.monthly.base", // Optional
+    },
+  },
+});
+```
+
+<Callout type="info" title="Base Plan ID">
+  The `basePlanId` is only needed for Google Play subscriptions that use base plans. This is a
+  Google Play feature that allows you to offer different billing periods and pricing for the same
+  product.
+</Callout>
+
+### Perk Configuration
+
+Products define which perks they unlock when purchased. You configure this by specifying which perks should be activated:
+
+```ts
+sc.subscription("premium-sub", {
+  name: "Premium",
+  perks: {
+    allAccess: true,
+    premiumFeatures: true,
+    adFree: true,
+  },
+  providers: {
+    /* ... */
+  },
+});
+```
+
+Only list the perks you want to unlock. Perks not listed will remain locked.
+
+## Product Properties
+
+When you fetch products using `useProducts()`, each product loads additional information from the app stores and contains the following properties:
+
+```ts
+{
+  id: string; // Internal Voidhash ID
+  slug: string; // Your schema slug
+  name: string; // Display name
+  description: string; // Description from app store
+  displayName: string; // Formatted display name
+  displayPrice: string; // Formatted price (e.g., "$9.99")
+  price: number; // Raw price value
+  currency: string; // Currency code (e.g., "USD")
+  type: string; // Product type
+  platform: "ios" | "android"; // Current platform
+  interval: string; // For subscriptions: "month", "year", etc.
+}
+```
+
+### Using Product Properties
+
+Here's how to display product information in your UI:
+
+```tsx
+import type { SubscriptionProduct } from "@voidhash/react-native";
+
+function ProductCard({ product }: { product: SubscriptionProduct }) {
+  return (
+    <View>
+      <Text>{product.name}</Text>
+      <Text>{product.displayPrice}</Text>
+      <Text>Billed {product.interval}</Text>
+      <Text>{product.description}</Text>
+    </View>
+  );
+}
+```
+
+## Development vs Production
+
+During development, you can disable payment providers to use a development paywall for testing without actual purchases:
+
+```ts
+export const sc = schemaConfiguration({
+  providers: {
+    // Leave empty to use a development paywall
+  },
+  perks: {
+    /* ... */
+  },
+});
+```
+
+When you're ready to publish:
+
+1. Enable the payment providers in your schema
+2. Configure the product IDs in App Store Connect and Google Play Console
+3. Push the schema to Voidhash
+4. Test the purchase flow with sandbox accounts
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-apple-id.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-apple-id.mdx
new file mode 100644
index 000000000..1fc749100
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-apple-id.mdx
@@ -0,0 +1,43 @@
+---
+title: Find your App Apple ID
+description: Locate the numeric Apple ID that identifies your app in App Store Connect.
+---
+
+Your **App Apple ID** is the numeric identifier Apple automatically generates for your app
+(commonly around 10 digits, for example `1234567890`). It is different from your Bundle ID and
+from your personal Apple Account login, and is used by Voidhash to reference your app in
+Apple's APIs.
+
+<Steps>
+
+<Step>
+### Open App Store Connect
+
+Go to [App Store Connect](https://appstoreconnect.apple.com), open **Apps**, and select your
+app.
+</Step>
+
+<Step>
+### Open App Information
+
+In the sidebar choose **General → App Information**. On this page the read-only **Apple ID** is
+listed among your app's properties, alongside your Bundle ID.
+
+<Callout type="info" title="Which Apple ID?">
+Here **Apple ID** means your app's numeric identifier — not your personal Apple Account login.
+Apple auto-generates it, and you can't edit it.
+</Callout>
+</Step>
+
+<Step>
+### Copy the number
+
+Copy the digits exactly (no spaces) and paste them into the **App Apple ID** field in Voidhash.
+
+<Callout type="info" title="Shortcut">
+If your app is already live, the App Apple ID also appears in its App Store URL:
+`https://apps.apple.com/app/id1234567890` — the number after `id` is your App Apple ID.
+</Callout>
+</Step>
+
+</Steps>
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-store-connect-api.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-store-connect-api.mdx
new file mode 100644
index 000000000..bde160819
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/app-store-connect-api.mdx
@@ -0,0 +1,74 @@
+---
+title: Set up the App Store Connect API
+description: Create an App Store Connect API key and find your Vendor Number so Voidhash can import products and financial reports.
+---
+
+The **App Store Connect API** key lets Voidhash import your products and keep their metadata
+in sync. You'll need the key's **Issuer ID** and **Key ID** (plus the private `.p8` key that
+authenticates calls), along with your **Vendor Number** for downloading financial reports.
+
+<Steps>
+
+<Step>
+### Open the Integrations Team Keys
+
+In [App Store Connect](https://appstoreconnect.apple.com) go to **Users and Access**, click the
+**Integrations** tab, and under **App Store Connect API** select **Team Keys**. A team key works
+across all apps in the account, which suits product and metadata sync.
+
+<Callout type="info" title="Who can do this?">
+Only the **Account Holder** can first enable App Store Connect API access for the team. After
+that, the **Account Holder** or an **Admin** can generate Team keys — if you have Developer or
+App Manager access, ask one of them to create it.
+</Callout>
+</Step>
+
+<Step>
+### Copy the Issuer ID
+
+The **Issuer ID** is a UUID (e.g. `c055ca8c-e5a8-4836-b61d-aa5794eeb3f4`) shown above the
+**Active** keys table. It's shared by every key in the team. Copy it into the **Issuer ID**
+field in Voidhash.
+</Step>
+
+<Step>
+### Generate a Team key
+
+Click **Generate API Key**, give it a name (for your reference only), and choose an access role.
+**App Manager** is the recommended minimum for importing products and metadata; **Admin** grants
+broader access. Click **Generate** — the name and access level can't be edited afterward, so
+revoke and recreate the key to change them.
+</Step>
+
+<Step>
+### Copy the Key ID and download the .p8
+
+The new key appears with its **Key ID**, a 10-character value (e.g. `T9GPZ92M7K`) — copy it into
+the **Key ID** field in Voidhash. Then click **Download API Key** to save the private `.p8` file;
+Voidhash needs it together with the Issuer ID and Key ID to authenticate API calls.
+
+<Callout type="warn" title="Download the .p8 now — only once">
+Apple lets you download the private `.p8` key **only once**, at creation time. If you lose it,
+you must revoke the key and generate a new one.
+</Callout>
+</Step>
+
+<Step>
+### Find your Vendor Number
+
+From the App Store Connect home, open **Payments and Financial Reports**, then select **Reports**
+at the top of the page. Your **Vendor Number** appears in the top-left under your **Legal Entity
+Name**, labeled `Vendor #`. Copy that number into the **Vendor Number** field in Voidhash.
+
+<Callout type="info" title="Multiple legal entities?">
+If the top-left menu lists more than one legal entity, open it and pick the vendor number for the
+entity whose App Store sales you're syncing. Viewing this area requires the **Account Holder**,
+**Admin**, or **Finance** role.
+</Callout>
+</Step>
+
+</Steps>
+
+{/* To add a screenshot, drop an image at
+apps/www/public/docs/guides/payment-providers/apple-app-store/app-store-connect-api.png and reference it:
+![Integrations tab showing the Issuer ID and Team Keys](/docs/guides/payment-providers/apple-app-store/app-store-connect-api.png) */}
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-server-notifications.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-server-notifications.mdx
new file mode 100644
index 000000000..fb90cba67
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-server-notifications.mdx
@@ -0,0 +1,56 @@
+---
+title: Configure Apple Server Notifications
+description: Point App Store Server Notifications V2 at Voidhash so renewals, cancellations, and refunds are processed automatically.
+---
+
+**App Store Server Notifications** let Apple push subscription events — purchases, renewals,
+cancellations, and refunds — straight to Voidhash. You don't copy this value out of App Store
+Connect; instead you paste the URL Voidhash provides into Apple's notification settings and
+select Version 2.
+
+<Steps>
+
+<Step>
+### Copy your Voidhash notification URL
+
+On the **Apple Server notification** tab of this payment provider in Voidhash, copy the
+**Apple Server Notification URL** using the copy button next to it. It is a publicly reachable
+HTTPS endpoint; your server must support TLS 1.2 or later for Apple to deliver notifications.
+</Step>
+
+<Step>
+### Open your app's notification settings
+
+In [App Store Connect](https://appstoreconnect.apple.com), open **Apps → your app**, then in
+the sidebar under **General** click **App information**. Scroll to **General Information** and
+find the **App Store Server Notifications** section.
+
+<Callout type="info" title="You need the right role">
+Editing these URLs requires the **Account Holder**, **Admin**, **App Manager**, or
+**Marketing** role in App Store Connect.
+</Callout>
+</Step>
+
+<Step>
+### Set the Production Server URL to Version 2
+
+Under **Production Server URL**, click **Set Up URL** (or **Edit** next to an existing URL).
+Paste your Voidhash notification URL, choose **Version 2** (Apple offers "Version 1
+(deprecated) or Version 2 notifications"), and click **Save**.
+</Step>
+
+<Step>
+### Set the Sandbox Server URL to Version 2
+
+Under **Sandbox Server URL**, click **Set Up URL**, paste the same Voidhash notification URL,
+choose **Version 2**, and click **Save**. Each environment stores its URL and version
+independently.
+
+<Callout type="warn" title="Routing fallback">
+If you don't provide a **Sandbox Server URL**, Apple sends notifications for *both*
+environments to the Production URL. If you provide *only* a Sandbox URL, no notifications are
+sent in production. Sandbox changes can take up to about an hour to take effect.
+</Callout>
+</Step>
+
+</Steps>
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-small-business-program.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-small-business-program.mdx
new file mode 100644
index 000000000..57682ab97
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/apple-small-business-program.mdx
@@ -0,0 +1,67 @@
+---
+title: Find your Small Business Program dates
+description: Determine the Start date and optional End date for your Apple App Store Small Business Program enrollment so Voidhash's commission math matches Apple's reduced rate.
+---
+
+The **Start date** is when your reduced ~15% App Store commission under the Apple Small Business
+Program became effective, and the **End date** is when it ended if you left or no longer qualify.
+Apple does not show these as fields in App Store Connect, so you derive the Start date from your
+enrollment approval, and leave the End date blank unless the standard rate has resumed.
+
+<Steps>
+
+<Step>
+### Confirm eligibility and enroll
+
+Sign in to [App Store Connect](https://appstoreconnect.apple.com) as the **Account Holder**. You
+qualify if you (and any associated accounts) made up to 1,000,000 USD in proceeds in the prior
+calendar year, or you are new to the App Store. Review the
+[Small Business Program](https://developer.apple.com/app-store/small-business-program/) page and
+submit the enrollment form via the **Learn More** block on the App Store Connect home page.
+</Step>
+
+<Step>
+### Accept the Paid Apps agreement
+
+The program requires the current Paid Apps agreement to be active. In App Store Connect choose
+**Business** at the top of the page, open the **Agreements** tab, find the **Paid Apps** row, and
+click **View and Agree to Terms**. Its status must show **Active**.
+</Step>
+
+<Step>
+### Capture the approval date from Apple's email
+
+After you submit, Apple emails a confirmation and later an approval email when you are accepted.
+Record the date in that approval email — Apple does not expose an enrollment date or effective-start
+field anywhere in the App Store Connect UI.
+
+<Callout type="warn" title="The approval date is not the start date">
+The reduced rate is not effective on the approval date. Apple adjusts your proceeds fifteen days
+after the end of the fiscal calendar month in which your enrollment is approved — for example,
+approved February 10, 2022 means proceeds adjust starting March 14, 2022.
+</Callout>
+</Step>
+
+<Step>
+### Verify the rate and enter the Start date
+
+Confirm the 15% rate is live before trusting the computed date: download your app's pricing/proceeds
+report and check that Year 1 and Year 2 proceeds are equal and roughly 15% below the list price. Use
+the date the reduced rate first appears as the authoritative value, then paste it (a plain
+month/day/year) into the **Start date** field in Voidhash.
+</Step>
+
+<Step>
+### Leave the End date blank unless you left the program
+
+There is no fixed end date and no annual re-confirmation — membership carries over each calendar year
+while you stay eligible and keep the Paid Apps agreement active. Set the **End date** in Voidhash only
+if you exceeded 1,000,000 USD in proceeds this calendar year (the standard rate then applies to future
+sales) or you formally left, using the date the standard rate resumed.
+</Step>
+
+</Steps>
+
+{/* To add a screenshot, drop an image at
+apps/www/public/docs/guides/payment-providers/apple-app-store/small-business-program.png and reference it:
+![App Store Connect Agreements tab](/docs/guides/payment-providers/apple-app-store/small-business-program.png) */}
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/bundle-id.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/bundle-id.mdx
new file mode 100644
index 000000000..fec3e9759
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/bundle-id.mdx
@@ -0,0 +1,43 @@
+---
+title: Find your App Bundle ID
+description: Locate the Bundle ID for your app in App Store Connect or Xcode so it matches your Voidhash configuration.
+---
+
+Your **App Bundle ID** is the reverse-domain identifier for your app, for example
+`com.yourcompany.yourapp`. It must match the bundle identifier in your Xcode project and the
+App ID registered in your Apple Developer account.
+
+<Steps>
+
+<Step>
+### Open App Store Connect
+
+Go to [App Store Connect](https://appstoreconnect.apple.com), sign in, open **Apps**, and
+select your app.
+</Step>
+
+<Step>
+### Open App Information
+
+In the sidebar choose **General → App Information**, then locate the **Bundle ID** field. It
+shows the reverse-domain value, not the numeric **Apple ID** listed on the same page.
+</Step>
+
+<Step>
+### Copy the identifier
+
+Copy the value (e.g. `com.yourcompany.yourapp`) and paste it into the **App Bundle ID** field
+in Voidhash.
+
+<Callout type="info" title="Prefer Xcode?">
+You can also find it in Xcode: select your app under **TARGETS**, then read the **Bundle
+Identifier** in the **General** tab under **Identity** (it also appears in **Signing &
+Capabilities**). The two must be identical.
+</Callout>
+</Step>
+
+</Steps>
+
+{/* To add a screenshot, drop an image at
+apps/www/public/docs/guides/payment-providers/apple-app-store/bundle-id.png and reference it:
+![App Information showing the Bundle ID](/docs/guides/payment-providers/apple-app-store/bundle-id.png) */}
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/in-app-purchase-key.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/in-app-purchase-key.mdx
new file mode 100644
index 000000000..b210dcd57
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/in-app-purchase-key.mdx
@@ -0,0 +1,55 @@
+---
+title: Create an In-App Purchase key
+description: Generate the In-App Purchase key (Issuer ID, Key ID, and .p8 file) Voidhash uses to verify StoreKit transactions.
+---
+
+The **In-App Purchase key** lets Voidhash securely verify StoreKit 2 transactions and look up
+purchase data through the App Store Server API. You'll collect three values: the **Issuer ID**
+(a team-wide UUID), the **Key ID** (a 10-character identifier), and the downloadable **`.p8`**
+private key file.
+
+<Steps>
+
+<Step>
+### Open the Integrations keys
+
+In [App Store Connect](https://appstoreconnect.apple.com) go to **Users and Access**, open the
+**Integrations** tab, and select **In-App Purchase** under **Keys**. You'll need the **Account
+Holder** or **Admin** role to generate keys.
+</Step>
+
+<Step>
+### Generate a key
+
+Click **Generate In-App Purchase Key** (or the **+** icon if you already have one), give it a
+name such as `Voidhash`, and create it. The name is for your reference only and can't be edited
+afterwards.
+</Step>
+
+<Step>
+### Copy the Issuer ID and Key ID
+
+- The **Key ID** is the 10-character identifier shown in the key's row under **Active** — copy
+  it into the **Key ID** field in Voidhash.
+- The **Issuer ID** is shown at the top of the keys page — copy it into the **Issuer ID** field.
+
+<Callout type="info" title="No Issuer ID shown?">
+If the Issuer ID is missing, generate any **App Store Connect API** key once (under
+**Integrations → App Store Connect API**; the name and access level don't matter). The Issuer
+ID is a single team-wide value and will then appear on both tabs.
+</Callout>
+</Step>
+
+<Step>
+### Download the .p8 file
+
+Click **Download Key** to save the `.p8` private key, then upload that file to the **P8 key
+file** field in Voidhash.
+
+<Callout type="warn" title="You can only download it once">
+Apple lets you download each private key a single time. Store it somewhere safe — if you lose
+it you'll need to revoke the key and generate a new one.
+</Callout>
+</Step>
+
+</Steps>
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/meta.yaml b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/meta.yaml
new file mode 100644
index 000000000..94c8ca13c
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/meta.yaml
@@ -0,0 +1,10 @@
+title: Apple App Store
+pages:
+  - bundle-id
+  - app-apple-id
+  - in-app-purchase-key
+  - app-store-connect-api
+  - apple-server-notifications
+  - apple-small-business-program
+  - storekit-subscription-offer-key
+  - storekit-testing-certificate
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-subscription-offer-key.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-subscription-offer-key.mdx
new file mode 100644
index 000000000..4328aa31a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-subscription-offer-key.mdx
@@ -0,0 +1,75 @@
+---
+title: Find your StoreKit Subscription Offer key
+description: Export the private key that signs auto-renewable subscription promotional offers from your Xcode StoreKit configuration file, or generate the production key in App Store Connect.
+---
+
+Your **StoreKit Subscription Offer key** is the EC private key (a `.p8` file) used to
+cryptographically sign auto-renewable subscription promotional offers. For local testing,
+Voidhash expects the key Xcode embeds in your `.storekit` configuration file — not the
+production In-App Purchase key from App Store Connect. Use the production key only when signing
+live offers.
+
+<Steps>
+
+<Step>
+### Open your StoreKit configuration file in Xcode
+
+In your Xcode project, open your `.storekit` configuration file (for example
+`Configuration.storekit`). If you don't have one, create it via **File → New → File**, search
+for **StoreKit**, and add a StoreKit Configuration File with an auto-renewable subscription and
+at least one promotional offer.
+</Step>
+
+<Step>
+### Open the Subscription Offers Key panel
+
+With the `.storekit` file focused, choose **Editor → Subscription Offers Key** from the macOS
+menu bar. Xcode generates one key pair per configuration file and reveals it here.
+
+<Callout type="info" title="Verify the menu label">
+This menu path is the long-standing Xcode behavior but isn't in Apple's current first-party
+docs, and StoreKit UI labels have changed between versions — confirm the exact wording in your
+installed Xcode.
+</Callout>
+</Step>
+
+<Step>
+### Copy the Key ID and the private key
+
+The panel shows a **Key ID** (a short hex string, e.g. `BD3A7A04`) and the EC private key.
+Paste the Key ID into the Voidhash **Key ID** field and the private key text into the Voidhash
+**StoreKit Subscription Offer key** field. A mismatched Key ID fails signature validation.
+
+<Callout type="info" title="Need a .p8 file?">
+Xcode shows the test key as text rather than downloading a file. If Voidhash requires a file,
+paste the key into one named `SubscriptionKey_<KEYID>.p8` (e.g. `SubscriptionKey_BD3A7A04.p8`).
+</Callout>
+</Step>
+
+<Step>
+### Production alternative: generate the App Store Connect key
+
+For live offer signing, go to [App Store Connect](https://appstoreconnect.apple.com), open
+**Users and Access**, click the **Integrations** tab, then under the **Keys** sidebar heading
+click **In-App Purchase**. Click **Generate In-App Purchase Key**, enter a name, and click
+**Generate**. This requires the Account Holder or Admin role.
+
+<Callout type="warn" title="You can only download it once">
+Download the `.p8` immediately — App Store Connect lets you download the In-App Purchase key
+only once, then deletes it from Apple's servers. The Key ID appears in the **Key ID** column.
+</Callout>
+</Step>
+
+<Step>
+### Paste into Voidhash
+
+Enter the private key value into the Voidhash **StoreKit Subscription Offer key** field — the
+Xcode test key for sandbox and local testing, or the App Store Connect In-App Purchase key for
+production — along with its matching **Key ID**.
+</Step>
+
+</Steps>
+
+{/* To add a screenshot, drop an image at
+apps/www/public/docs/guides/payment-providers/apple-app-store/storekit-subscription-offer-key.png and reference it:
+![Xcode Subscription Offers Key panel](/docs/guides/payment-providers/apple-app-store/storekit-subscription-offer-key.png) */}
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-testing-certificate.mdx b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-testing-certificate.mdx
new file mode 100644
index 000000000..28a249988
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/apple-app-store/storekit-testing-certificate.mdx
@@ -0,0 +1,60 @@
+---
+title: Export your StoreKit testing certificate
+description: Export the public root certificate from your StoreKit configuration file in Xcode so Voidhash can verify transactions made in the local StoreKit testing environment.
+---
+
+The **StoreKit testing framework (.cer certificate)** is the public root certificate that Xcode's
+local StoreKit testing environment uses to sign receipts and transactions. Voidhash needs it
+because local test purchases are signed with a different key than Sandbox and Production (which
+use the Apple Inc. Root certificate). You export it as a `.cer` file from your `.storekit`
+configuration file in Xcode and upload that file to Voidhash.
+
+<Steps>
+
+<Step>
+### Create a StoreKit configuration file (if you don't have one)
+
+In Xcode, choose **File → New → File from Template**. Type `storekit` in the Filter field, select
+**StoreKit Configuration File**, click **Next**, and save it into your project. The test
+certificate is derived from this file.
+</Step>
+
+<Step>
+### Select the .storekit file in the Project navigator
+
+In Xcode's Project navigator (left sidebar), click the StoreKit configuration file so it is the
+active item. The **Save Public Certificate** command is only available when the configuration
+file is selected.
+</Step>
+
+<Step>
+### Choose Editor → Save Public Certificate
+
+From the Xcode menu bar, choose **Editor → Save Public Certificate**, then select a location in
+your project and save the file. Apple doesn't prescribe a folder or filename, so you can name it
+anything.
+
+<Callout type="info" title="It's a root certificate">
+The test environment's certificate is a root certificate, so there's no certificate chain to
+validate when verifying the receipt signature.
+</Callout>
+</Step>
+
+<Step>
+### Upload the .cer to Voidhash
+
+Upload the exported `.cer` file into the **StoreKit testing framework (.cer certificate)** field
+in Voidhash.
+
+<Callout type="warn" title="Local testing only">
+This certificate verifies only transactions and receipts produced by Xcode's local StoreKit
+testing environment. Those receipts aren't signed by the App Store and aren't valid in Sandbox or
+Production, which use the Apple Inc. Root certificate.
+</Callout>
+</Step>
+
+</Steps>
+
+{/* To add a screenshot, drop an image at
+apps/www/public/docs/guides/payment-providers/apple-app-store/storekit-testing-certificate.png and reference it:
+![Xcode Editor menu showing Save Public Certificate](/docs/guides/payment-providers/apple-app-store/storekit-testing-certificate.png) */}
diff --git a/apps/www/src/features/docs/content/docs/installation.mdx b/apps/www/src/features/docs/content/docs/installation.mdx
new file mode 100644
index 000000000..b2b581b5a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/installation.mdx
@@ -0,0 +1,107 @@
+---
+title: Installation
+description: Learn how to add Voidhash to your project.
+---
+
+<Steps>
+
+<Step>
+### Install the Package
+
+Let's start by adding Voidhash CLI to your react-native project:
+
+```package-install
+npm i voidhash-cli -D
+```
+
+</Step>
+
+<Step>
+### Initialize Voidhash
+Run the following command in the root of your Expo / React Native project:
+
+```package-install
+npx voidhash-cli init
+```
+
+</Step>
+
+<Step>
+### Configure schema
+After initialization, a schema file will be created in your selected folder. Use this file to define your payment providers, perks, and products all in one place.
+
+```ts title="schema.ts"
+import { schemaConfiguration, unlockablePerk } from "@voidhash/react-native";
+
+export const sc = schemaConfiguration({
+  // Payment Providers
+  providers: {},
+
+  // Perks
+  perks: {
+    allAccess: unlockablePerk("all-access", {
+      name: "All Access",
+    }),
+    premiumFeatures: unlockablePerk("premium-features", {
+      name: "Premium Features",
+    }),
+  },
+});
+
+// Products
+export const monthlySub = sc.subscription("monthly_sub", {
+  name: "Monthly",
+  perks: {
+    allAccess: true,
+  },
+  providers: {},
+});
+
+export const yearlySub = sc.subscription("yearly_sub", {
+  name: "Yearly",
+  perks: {
+    allAccess: true,
+    premiumFeatures: true,
+  },
+  providers: {},
+});
+```
+
+#### Configuration Breakdown
+
+**Perks**: Define the features or content that users gain access to when they purchase products. Each perk has a key (for code reference), a slug (for database storage), and a display name.
+
+**Products**: Define your subscription products using `sc.subscription()`. Each product specifies which perks it unlocks and its product IDs for each payment provider.
+
+**Payment Providers**: Enable the app stores you want to support (Apple App Store, Google Play, or both). For development, you can leave them empty to test with a development-only paywall.
+
+</Step>
+
+<Step>
+### Configure payment providers and push the schema
+This step can be delayed until you're ready to test with real purchases or sandbox accounts - it's not required for development. This command syncs your local schema with the Voidhash API and automatically detects if you need to configure payment providers, guiding you through the complete setup process step by step.
+
+<Callout type="info" title="When to push your schema">
+  Push your schema whenever you make changes to products, perks, or payment provider configuration.
+  During development, you can work with an empty providers configuration to test your paywall
+  without actual purchases.
+</Callout>
+
+```package-install
+npx voidhash-cli push
+```
+
+</Step>
+
+<Step>
+### Development build with expo-dev-client (Expo only)
+
+If you're using Expo, you'll need to create a development build to include the native capabilities required for in-app purchases. You can read more about this in the [Expo documentation](https://docs.expo.dev/develop/development-builds/create-a-build/).
+
+</Step>
+
+<Step>
+### Thats it! 🎉
+You are ready to start selling!
+</Step>
+</Steps>
diff --git a/apps/www/src/features/docs/content/docs/introduction.mdx b/apps/www/src/features/docs/content/docs/introduction.mdx
new file mode 100644
index 000000000..8d9e1c25a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/introduction.mdx
@@ -0,0 +1,14 @@
+---
+title: Introduction
+description: Introduction to Voidhash.
+---
+
+Voidhash is an in-app purchases and subscription management platform designed for **React Native**. Implementing in-app purchases has always been about as enjoyable as debugging production code at 3 AM. With Voidhash, you get server-side receipt validation, CRM, analytics, and more in under 5 minutes. Built by developers who've felt your pain. And the best part? It's Open Source.
+
+## Features
+
+- Google Play and App Store support
+- Server-side receipt validation
+- Person Management
+- Analytics
+- Powerful CLI
diff --git a/apps/www/src/features/docs/content/docs/meta.yaml b/apps/www/src/features/docs/content/docs/meta.yaml
new file mode 100644
index 000000000..e2af68e82
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/meta.yaml
@@ -0,0 +1,7 @@
+title: guide
+root: true
+pages:
+  - introduction
+  - installation
+  - basic-usage
+  - concepts
diff --git a/apps/www/src/features/docs/lib/basepath.ts b/apps/www/src/features/docs/lib/basepath.ts
new file mode 100644
index 000000000..529aef223
--- /dev/null
+++ b/apps/www/src/features/docs/lib/basepath.ts
@@ -0,0 +1 @@
+export { DOCS_PATH as BASE_PATH } from "@/lib/paths";
diff --git a/apps/www/src/features/docs/lib/cn.ts b/apps/www/src/features/docs/lib/cn.ts
new file mode 100644
index 000000000..8e473dac8
--- /dev/null
+++ b/apps/www/src/features/docs/lib/cn.ts
@@ -0,0 +1 @@
+export { twMerge as cn } from "tailwind-merge";
diff --git a/apps/www/src/features/docs/lib/guide-content.tsx b/apps/www/src/features/docs/lib/guide-content.tsx
new file mode 100644
index 000000000..5bdb36617
--- /dev/null
+++ b/apps/www/src/features/docs/lib/guide-content.tsx
@@ -0,0 +1,75 @@
+"use client";
+
+import { docs } from "@generated/docs";
+import { lazy, Suspense, useMemo } from "react";
+
+import { DocsBody } from "@/features/docs/components/layout/page";
+import { docsMdxComponents } from "@/features/docs/lib/mdx-components";
+
+/** Strips the generated doc-map decorations from a key: `./a/b.mdx` -> `a/b`. */
+const normalizeKey = (key: string): string =>
+  key.replace(/^\.\//, "").replace(/\.mdx?$/, "");
+
+const guideKeyBySlug = new Map<string, string>(
+  Object.keys(docs.doc).map((key) => [normalizeKey(key), key]),
+);
+
+/**
+ * Resolves a guide slug — the same path used for its public page at
+ * `/docs/<slug>` — to the exact key in the generated doc map, or `undefined`
+ * when no guide exists for that slug.
+ */
+export const resolveGuideKey = (slug: string): string | undefined => {
+  const normalized = slug
+    .replace(/^\/+/, "")
+    .replace(/^docs\//, "")
+    .replace(/\/+$/, "");
+
+  return guideKeyBySlug.get(normalized);
+};
+
+/** Returns true when a guide exists for the given slug. */
+export const hasGuide = (slug: string): boolean => resolveGuideKey(slug) !== undefined;
+
+/**
+ * Lazily renders a documentation guide's compiled MDX body using the shared
+ * docs component map ({@link docsMdxComponents}), so a guide looks identical
+ * here and on the public docs site. The MDX chunk is only fetched once this
+ * component mounts.
+ */
+export function GuideBody({ slug }: { slug: string }) {
+  const key = resolveGuideKey(slug);
+
+  const Content = useMemo(() => {
+    if (!key) {
+      return undefined;
+    }
+
+    const loader = docs.doc[key];
+    return loader ? lazy(loader) : undefined;
+  }, [key]);
+
+  if (!Content) {
+    console.warn(`[where-to-find] No documentation guide found for "${slug}"`);
+    return <p className="text-muted-foreground text-sm">This guide is not available yet.</p>;
+  }
+
+  return (
+    <Suspense fallback={<GuideBodySkeleton />}>
+      <DocsBody>
+        <Content components={docsMdxComponents} />
+      </DocsBody>
+    </Suspense>
+  );
+}
+
+function GuideBodySkeleton() {
+  return (
+    <div aria-hidden className="flex animate-pulse flex-col gap-3">
+      <div className="h-4 w-2/3 rounded bg-muted" />
+      <div className="h-4 w-full rounded bg-muted" />
+      <div className="h-4 w-5/6 rounded bg-muted" />
+      <div className="mt-2 h-40 w-full rounded bg-muted" />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/docs/lib/layout.shared.tsx b/apps/www/src/features/docs/lib/layout.shared.tsx
new file mode 100644
index 000000000..de34f4b59
--- /dev/null
+++ b/apps/www/src/features/docs/lib/layout.shared.tsx
@@ -0,0 +1,8 @@
+import type { BaseLayoutProps } from "fumadocs-ui/layouts/shared";
+
+export const baseOptions: BaseLayoutProps = {
+  links: [],
+  nav: {
+    title: "Voidhash Docs",
+  },
+};
diff --git a/apps/www/src/features/docs/lib/mdx-components.tsx b/apps/www/src/features/docs/lib/mdx-components.tsx
new file mode 100644
index 000000000..9d383d6de
--- /dev/null
+++ b/apps/www/src/features/docs/lib/mdx-components.tsx
@@ -0,0 +1,55 @@
+"use client";
+
+import { Accordion, Accordions } from "fumadocs-ui/components/accordion";
+import { Callout } from "fumadocs-ui/components/callout";
+import { File, Files, Folder } from "fumadocs-ui/components/files";
+import { Step, Steps } from "fumadocs-ui/components/steps";
+import { Tab, Tabs } from "fumadocs-ui/components/tabs";
+import { TypeTable } from "fumadocs-ui/components/type-table";
+import defaultMdxComponents from "fumadocs-ui/mdx";
+import type { ComponentProps } from "react";
+
+import { DOCS_PATH } from "@/lib/paths";
+
+/**
+ * Renders links authored inside MDX. Root-relative hrefs (e.g. `/foo`) are
+ * rewritten under the docs base path so they resolve to `/docs/foo`, while
+ * absolute and protocol-relative URLs are left untouched.
+ */
+export function DocsMdxLink(props: ComponentProps<"a">) {
+  const href = props.href;
+  if (!href) {
+    return <a {...props} />;
+  }
+
+  const normalizedHref =
+    href.startsWith("/") && !href.startsWith(DOCS_PATH) && !href.startsWith("//")
+      ? `${DOCS_PATH}${href}`
+      : href;
+
+  return <a {...props} href={normalizedHref} />;
+}
+
+/**
+ * Shared MDX component registry used to render documentation content both on
+ * the public docs site (`/docs/$`) and inside in-app guide sheets, so a guide
+ * looks identical in either place. Register any custom MDX component here once.
+ */
+export const docsMdxComponents = {
+  ...defaultMdxComponents,
+  Accordion,
+  Accordions,
+  Callout,
+  File,
+  Files,
+  Folder,
+  Step,
+  Steps,
+  Tab,
+  Tabs,
+  TypeTable,
+  a: DocsMdxLink,
+  iframe: (props: ComponentProps<"iframe">) => (
+    <iframe {...props} className="h-[500px] w-full" />
+  ),
+};
diff --git a/apps/www/src/features/docs/lib/source.ts b/apps/www/src/features/docs/lib/source.ts
new file mode 100644
index 000000000..0b1f4ecd3
--- /dev/null
+++ b/apps/www/src/features/docs/lib/source.ts
@@ -0,0 +1,33 @@
+import { loader } from "fumadocs-core/source";
+import * as icons from "lucide-static";
+
+import { docs } from "@generated/docs";
+import { createViteSource } from "@/lib/create-vite-source";
+import { DOCS_PATH } from "@/lib/paths";
+
+type DocsSource = ReturnType<typeof loader>;
+
+let sourcePromise: Promise<DocsSource> | undefined;
+
+/**
+ * Returns the loaded documentation source without evaluating MDX imports at module load.
+ */
+export const getSource = (): Promise<DocsSource> => {
+  sourcePromise ??= createViteSource(docs.doc, docs.meta).then((docsSource) =>
+    loader({
+      baseUrl: DOCS_PATH,
+      icon(icon) {
+        if (!icon) {
+          return;
+        }
+
+        if (icon in icons) {
+          return icons[icon as keyof typeof icons] as unknown as React.ReactElement;
+        }
+      },
+      source: docsSource,
+    }),
+  );
+
+  return sourcePromise;
+};
diff --git a/apps/www/src/features/docs/source.config.ts b/apps/www/src/features/docs/source.config.ts
new file mode 100644
index 000000000..f7eafc90b
--- /dev/null
+++ b/apps/www/src/features/docs/source.config.ts
@@ -0,0 +1,30 @@
+import {
+  defineConfig,
+  defineDocs,
+  frontmatterSchema,
+  metaSchema,
+} from "../fumadocs-config.ts";
+
+// You can customise Zod schemas for frontmatter and `meta.json` here
+// see https://fumadocs.vercel.app/docs/mdx/collections#define-docs
+export const docs = defineDocs({
+  dir: "src/features/docs/content/docs",
+  docs: {
+    schema: frontmatterSchema,
+  },
+  meta: {
+    schema: metaSchema,
+  },
+});
+
+export default defineConfig({
+  mdxOptions: {
+    // MDX options
+    remarkNpmOptions: {
+      persist: {
+        id: "package-manager",
+      },
+    },
+    valueToExport: ["elementIds", "toc"],
+  },
+});
diff --git a/apps/www/src/features/docs/source.generated.ts b/apps/www/src/features/docs/source.generated.ts
new file mode 100644
index 000000000..7c5e2c6e7
--- /dev/null
+++ b/apps/www/src/features/docs/source.generated.ts
@@ -0,0 +1,21 @@
+/// <reference types="vite/client" />
+import { fromConfig } from 'fumadocs-mdx/runtime/vite';
+import type * as Config from './source.config';
+
+export const create = fromConfig<typeof Config>();
+
+export const docs = {
+  doc: create.doc("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
+    "base": "./src/features/docs/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  })),
+  meta: create.meta("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
+    "import": "default",
+    "base": "./src/features/docs/content/docs",
+    "query": {
+      "collection": "docs"
+    }
+  }))
+};
\ No newline at end of file
diff --git a/apps/www/src/features/docs/styles/globals.css b/apps/www/src/features/docs/styles/globals.css
new file mode 100644
index 000000000..67c9e116b
--- /dev/null
+++ b/apps/www/src/features/docs/styles/globals.css
@@ -0,0 +1,33 @@
+/** biome-ignore-all lint/nursery/noUnknownAtRule: tailwind */
+@import "@fontsource-variable/geist";
+@import "tailwindcss";
+@import "fumadocs-ui/css/shadcn.css";
+@import "fumadocs-ui/css/preset.css";
+@import "@voidhash/ui/styles/brand-theme.css";
+
+@source "../../../../packages/ui";
+@source "../../src";
+
+@custom-variant dark (&:is(.dark *));
+
+::selection {
+  background: #0673ff;
+  color: #fff;
+}
+
+:root {
+  --color-fd-primary: var(--primary);
+}
+
+.dark {
+  --color-fd-primary: var(--primary);
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+  body {
+    @apply bg-background text-foreground;
+  }
+}
diff --git a/apps/www/src/features/fumadocs-config.ts b/apps/www/src/features/fumadocs-config.ts
new file mode 100644
index 000000000..f0eb1f979
--- /dev/null
+++ b/apps/www/src/features/fumadocs-config.ts
@@ -0,0 +1,118 @@
+import type { StandardSchemaV1 } from "@standard-schema/spec";
+import { z } from "zod";
+
+type CollectionSchema<Schema extends StandardSchemaV1, Context> =
+  | Schema
+  | ((ctx: Context) => Schema);
+
+type MetaCollection<Schema extends StandardSchemaV1 = StandardSchemaV1> = {
+  type: "meta";
+  dir: string | string[];
+  files?: string[];
+  schema?: CollectionSchema<
+    Schema,
+    {
+      path: string;
+      source: string;
+    }
+  >;
+};
+
+type DocCollection<
+  Schema extends StandardSchemaV1 = StandardSchemaV1,
+  Async extends boolean = boolean,
+> = {
+  type: "doc";
+  dir: string | string[];
+  files?: string[];
+  async?: Async;
+  schema?: CollectionSchema<
+    Schema,
+    {
+      path: string;
+      source: string;
+    }
+  >;
+};
+
+type DocsCollection<
+  DocSchema extends StandardSchemaV1 = StandardSchemaV1,
+  MetaSchema extends StandardSchemaV1 = StandardSchemaV1,
+  Async extends boolean = boolean,
+> = {
+  type: "docs";
+  dir: string;
+  docs: DocCollection<DocSchema, Async>;
+  meta: MetaCollection<MetaSchema>;
+};
+
+type FumadocsConfig = {
+  mdxOptions?: {
+    remarkNpmOptions?: {
+      persist?: {
+        id: string;
+      };
+    };
+    valueToExport?: string[];
+  };
+};
+
+export const metaSchema = z.object({
+  title: z.string().optional(),
+  pages: z.array(z.string()).optional(),
+  description: z.string().optional(),
+  root: z.boolean().optional(),
+  defaultOpen: z.boolean().optional(),
+  icon: z.string().optional(),
+});
+
+export const frontmatterSchema = z.object({
+  title: z.string(),
+  description: z.string().optional(),
+  icon: z.string().optional(),
+  full: z.boolean().optional(),
+  _openapi: z.looseObject({}).optional(),
+});
+
+export const defineDocs = <
+  DocSchema extends StandardSchemaV1 = typeof frontmatterSchema,
+  MetaSchema extends StandardSchemaV1 = typeof metaSchema,
+  Async extends boolean = false,
+>(options: {
+  dir?: string;
+  docs?: Omit<DocCollection<DocSchema, Async>, "dir" | "type">;
+  meta?: Omit<MetaCollection<MetaSchema>, "dir" | "type">;
+}): DocsCollection<DocSchema, MetaSchema, Async> => {
+  const dir = options.dir ?? "content/docs";
+
+  return {
+    type: "docs",
+    dir,
+    docs: {
+      type: "doc",
+      dir,
+      schema: frontmatterSchema as unknown as CollectionSchema<
+        DocSchema,
+        {
+          path: string;
+          source: string;
+        }
+      >,
+      ...options.docs,
+    },
+    meta: {
+      type: "meta",
+      dir,
+      schema: metaSchema as unknown as CollectionSchema<
+        MetaSchema,
+        {
+          path: string;
+          source: string;
+        }
+      >,
+      ...options.meta,
+    },
+  };
+};
+
+export const defineConfig = <T extends FumadocsConfig>(config: T): T => config;
diff --git a/apps/www/src/features/studio/account/user-avatar.tsx b/apps/www/src/features/studio/account/user-avatar.tsx
new file mode 100644
index 000000000..8888b6885
--- /dev/null
+++ b/apps/www/src/features/studio/account/user-avatar.tsx
@@ -0,0 +1,74 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { toast } from "sonner";
+import { AvatarUploader } from "@/features/studio/components/avatar-uploader";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import {
+  removeUserAvatarOptions,
+  setUserAvatarOptions,
+} from "@/features/studio/lib/tanstack-query/users";
+import { SettingsCard, SettingsRow, SettingsSection } from "@/features/studio/settings";
+
+const errorMessage = (error: unknown, fallback: string): string =>
+  error && typeof error === "object" && "message" in error && typeof error.message === "string"
+    ? error.message
+    : fallback;
+
+export function UserAvatarForm({
+  user,
+}: {
+  user: { id: string; name: string; image: string | null };
+}) {
+  const queryClient = useQueryClient();
+  const invalidate = () => queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+
+  const setAvatar = useMutation({
+    ...setUserAvatarOptions(),
+    onSuccess: () => {
+      toast.success("Avatar updated");
+      invalidate();
+    },
+    onError: (error) => toast.error(errorMessage(error, "Failed to update avatar")),
+  });
+
+  const removeAvatar = useMutation({
+    ...removeUserAvatarOptions(),
+    onSuccess: () => {
+      toast.success("Avatar removed");
+      invalidate();
+    },
+    onError: () => toast.error("Failed to remove avatar"),
+  });
+
+  const isPending = setAvatar.status === "pending" || removeAvatar.status === "pending";
+
+  return (
+    <SettingsSection title="Avatar">
+      <SettingsCard
+        footer={
+          <span className="text-[12px] text-muted-foreground">
+            An avatar is optional but strongly recommended.
+          </span>
+        }
+      >
+        <SettingsRow
+          control={
+            <AvatarUploader
+              fallback={user.id}
+              isPending={isPending}
+              name={user.name}
+              onRemove={() => removeAvatar.mutate()}
+              onUpload={({ imageBase64, contentType }) =>
+                setAvatar.mutate({ imageBase64, contentType })
+              }
+              src={user.image}
+            />
+          }
+          description="Click on the avatar to upload a custom one from your files."
+          title="This is your avatar."
+        />
+      </SettingsCard>
+    </SettingsSection>
+  );
+}
diff --git a/apps/www/src/features/studio/account/user-settings-modal.tsx b/apps/www/src/features/studio/account/user-settings-modal.tsx
new file mode 100644
index 000000000..9377439b5
--- /dev/null
+++ b/apps/www/src/features/studio/account/user-settings-modal.tsx
@@ -0,0 +1,67 @@
+"use client";
+
+import { cn, Dialog, DialogContent, DialogDescription, DialogTitle } from "@voidhash/ui";
+import { useState } from "react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { UserAvatarForm } from "./user-avatar";
+
+type AccountSection = "account";
+
+const NAV_ITEMS: ReadonlyArray<{ id: AccountSection; label: string }> = [
+  { id: "account", label: "Account" },
+];
+
+/**
+ * User account settings rendered inside a large modal with a left nav sidebar
+ * styled to match the organization/project settings navigation. Controlled by
+ * the caller (the nav-bar user dropdown opens it).
+ */
+export function UserSettingsModal({
+  open,
+  onOpenChange,
+}: {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+}) {
+  const { user } = useAuth();
+  const [section, setSection] = useState<AccountSection>("account");
+
+  return (
+    <Dialog onOpenChange={onOpenChange} open={open}>
+      <DialogContent className="flex h-[54rem] max-h-[85vh] gap-0 overflow-hidden p-0 sm:max-w-5xl">
+        <DialogTitle className="sr-only">User settings</DialogTitle>
+        <DialogDescription className="sr-only">Manage your account settings.</DialogDescription>
+
+        <aside className="flex w-52 shrink-0 flex-col gap-1 border-border/60 border-r bg-muted/30 p-3">
+          <div className="px-2 py-2 font-semibold text-foreground text-sm">Settings</div>
+          {NAV_ITEMS.map((item) => (
+            <button
+              className={cn(
+                "rounded-md px-2 py-1.5 text-left text-sm transition-colors",
+                section === item.id
+                  ? "bg-accent font-medium text-accent-foreground"
+                  : "text-muted-foreground hover:bg-accent/50 hover:text-foreground",
+              )}
+              key={item.id}
+              onClick={() => setSection(item.id)}
+              type="button"
+            >
+              {item.label}
+            </button>
+          ))}
+        </aside>
+
+        <div className="flex-1 overflow-y-auto">
+          <div className="flex flex-col gap-8 p-6 pt-8">
+            <div className="flex flex-col gap-1">
+              <h2 className="font-semibold text-foreground text-lg tracking-tight">Account</h2>
+              <p className="text-[13px] text-muted-foreground">{user.email}</p>
+            </div>
+            {section === "account" ? <UserAvatarForm user={user} /> : null}
+          </div>
+        </div>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/ai/attachments.ts b/apps/www/src/features/studio/ai/attachments.ts
new file mode 100644
index 000000000..2c3163521
--- /dev/null
+++ b/apps/www/src/features/studio/ai/attachments.ts
@@ -0,0 +1,123 @@
+import type { FileUIPart } from "ai";
+
+/** Image types the server accepts (kept in sync with the server-side allow-list). */
+export const ACCEPTED_IMAGE_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/webp",
+  "image/gif",
+] as const;
+
+/** Text/code files are read client-side and inlined into the prompt; these extensions are offered. */
+const TEXT_ACCEPT = [
+  "text/*",
+  ".ts",
+  ".tsx",
+  ".js",
+  ".jsx",
+  ".json",
+  ".md",
+  ".css",
+  ".html",
+  ".txt",
+] as const;
+
+/** `accept` attribute for the composer's file input (images + common text/code files). */
+export const ATTACHMENT_ACCEPT = [...ACCEPTED_IMAGE_TYPES, ...TEXT_ACCEPT].join(",");
+
+/** Max decoded size the server accepts for an image attachment (8 MiB). */
+export const MAX_ATTACHMENT_BYTES = 8 * 1024 * 1024;
+
+/** Max size of a text/code attachment inlined into the prompt (256 KiB). */
+export const MAX_TEXT_ATTACHMENT_BYTES = 256 * 1024;
+
+/** One attachment queued in the composer, tracked through upload/read to ready. */
+export interface PendingAttachment {
+  readonly id: string;
+  readonly name: string;
+  readonly contentType: string;
+  readonly sizeBytes: number;
+  readonly kind: "image" | "text";
+  status: "uploading" | "ready" | "error";
+  /** Image: uploaded public URL (once ready). */
+  url?: string;
+  /** Image: local object URL for preview while uploading. */
+  previewUrl?: string;
+  /** Text: file contents inlined into the prompt (once read). */
+  text?: string;
+  error?: string;
+}
+
+export const isImageType = (contentType: string): boolean =>
+  (ACCEPTED_IMAGE_TYPES as readonly string[]).includes(contentType);
+
+/** Whether a selected file should be treated as an inlined text/code attachment. */
+export const isTextFile = (file: File): boolean =>
+  file.type.startsWith("text/") ||
+  /\.(ts|tsx|js|jsx|json|md|css|html|txt|yml|yaml|toml)$/i.test(file.name);
+
+/** Read a file as a `data:` URL (base64, prefix kept — the server strips it). */
+export const readAsDataUrl = (file: Blob): Promise<string> =>
+  new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onloadend = () => resolve(reader.result as string);
+    reader.onerror = () => reject(reader.error ?? new Error("Failed to read file"));
+    reader.readAsDataURL(file);
+  });
+
+/** Read a file as UTF-8 text. */
+export const readAsText = (file: Blob): Promise<string> =>
+  new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onloadend = () => resolve(reader.result as string);
+    reader.onerror = () => reject(reader.error ?? new Error("Failed to read file"));
+    reader.readAsText(file);
+  });
+
+/** Short human-readable byte count (e.g. "1.2 MB"). */
+export function formatBytes(bytes: number): string {
+  if (bytes < 1024) {
+    return `${bytes} B`;
+  }
+  const units = ["KB", "MB", "GB"];
+  let value = bytes / 1024;
+  let unitIndex = 0;
+  while (value >= 1024 && unitIndex < units.length - 1) {
+    value /= 1024;
+    unitIndex += 1;
+  }
+  return `${value.toFixed(value >= 10 || unitIndex === 0 ? 0 : 1)} ${units[unitIndex]}`;
+}
+
+/**
+ * Builds the outgoing message payload from composer text plus ready
+ * attachments: images become AI SDK `file` parts (pointing at their uploaded
+ * URLs) and text/code files are inlined into the prompt as labelled fenced
+ * blocks so the model sees their contents.
+ */
+export function composeMessage(
+  text: string,
+  attachments: ReadonlyArray<PendingAttachment>,
+): { text: string; files: FileUIPart[] } {
+  const files: FileUIPart[] = [];
+  const inlined: string[] = [];
+
+  for (const attachment of attachments) {
+    if (attachment.status !== "ready") {
+      continue;
+    }
+    if (attachment.kind === "image" && attachment.url) {
+      files.push({
+        type: "file",
+        url: attachment.url,
+        mediaType: attachment.contentType,
+        filename: attachment.name,
+      });
+    } else if (attachment.kind === "text" && attachment.text !== undefined) {
+      inlined.push(`\`\`\`${attachment.name}\n${attachment.text}\n\`\`\``);
+    }
+  }
+
+  const composedText = [text.trim(), ...inlined].filter((part) => part.length > 0).join("\n\n");
+  return { text: composedText, files };
+}
diff --git a/apps/www/src/features/studio/ai/components/chat-history-menu.tsx b/apps/www/src/features/studio/ai/components/chat-history-menu.tsx
new file mode 100644
index 000000000..eed2ac438
--- /dev/null
+++ b/apps/www/src/features/studio/ai/components/chat-history-menu.tsx
@@ -0,0 +1,177 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type { UIMessage } from "ai";
+import {
+  Button,
+  cn,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuLabel,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+  Spinner,
+} from "@voidhash/ui";
+import { HistoryIcon, PlusIcon, Trash2Icon } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+
+import {
+  deleteAiChatOptions,
+  getAiChatOptions,
+  listAiChatsOptions,
+  queryKeys,
+} from "@/features/studio/lib/tanstack-query";
+
+import type { SurfaceAgent } from "../contract";
+
+interface ChatHistoryMenuProps {
+  agent: SurfaceAgent;
+  /** The chat currently shown, so deleting it can reset to a new chat. */
+  currentChatId: string;
+  /** Start a fresh chat. */
+  onNewChat: () => void;
+  /** Reopen a stored chat with its decoded messages. */
+  onSelectChat: (chatId: string, messages: UIMessage[]) => void;
+}
+
+/** Short relative time (e.g. "just now", "3h ago", "2d ago"). */
+function relativeTime(date: Date): string {
+  const seconds = Math.round((Date.now() - date.getTime()) / 1000);
+  if (seconds < 60) {
+    return "just now";
+  }
+  const minutes = Math.round(seconds / 60);
+  if (minutes < 60) {
+    return `${minutes}m ago`;
+  }
+  const hours = Math.round(minutes / 60);
+  if (hours < 24) {
+    return `${hours}h ago`;
+  }
+  const days = Math.round(hours / 24);
+  return `${days}d ago`;
+}
+
+/**
+ * Panel-header controls for a persistent chat surface: a "new chat" button and a
+ * "history" dropdown listing this surface/paywall's stored chats (newest first).
+ * Selecting a row fetches its full messages and reopens it; the trash button
+ * deletes it. The history dropdown only renders for a `persistent` surface.
+ */
+export function ChatHistoryMenu({
+  agent,
+  currentChatId,
+  onNewChat,
+  onSelectChat,
+}: ChatHistoryMenuProps) {
+  const queryClient = useQueryClient();
+  const [open, setOpen] = useState(false);
+  const [loadingChatId, setLoadingChatId] = useState<string | null>(null);
+
+  const { organizationId, projectId, paywallId } = agent.context;
+  const surface = agent.surfaceId;
+  const isPersistent = agent.persistence?.chatType === "persistent";
+  const hasScope = Boolean(organizationId && projectId);
+  const scope = { organizationId, projectId, surface, paywallId };
+
+  const chatsQuery = useQuery({
+    ...listAiChatsOptions(scope),
+    enabled: open && isPersistent && hasScope,
+  });
+
+  const deleteChat = useMutation(deleteAiChatOptions());
+
+  const handleSelect = async (chatId: string) => {
+    setLoadingChatId(chatId);
+    try {
+      const chat = await queryClient.fetchQuery(getAiChatOptions(chatId));
+      const parsed = JSON.parse(chat.messages) as UIMessage[];
+      onSelectChat(chatId, parsed);
+      setOpen(false);
+    } catch {
+      toast.error("Could not open that chat.");
+    } finally {
+      setLoadingChatId(null);
+    }
+  };
+
+  const handleDelete = (chatId: string) => {
+    deleteChat.mutate(
+      { chatId },
+      {
+        onSuccess: () => {
+          void queryClient.invalidateQueries({ queryKey: queryKeys.aiChat.list(scope) });
+          if (chatId === currentChatId) {
+            onNewChat();
+          }
+        },
+        onError: () => toast.error("Could not delete that chat."),
+      },
+    );
+  };
+
+  const chats = chatsQuery.data ?? [];
+
+  return (
+    <div className="flex items-center gap-1">
+      <Button aria-label="New chat" onClick={onNewChat} size="icon-sm" title="New chat" variant="ghost">
+        <PlusIcon className="size-4" />
+      </Button>
+
+      {isPersistent ? (
+        <DropdownMenu onOpenChange={setOpen} open={open}>
+          <DropdownMenuTrigger asChild>
+            <Button aria-label="Chat history" size="icon-sm" title="Chat history" variant="ghost">
+              <HistoryIcon className="size-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-72">
+            <DropdownMenuLabel>Chat history</DropdownMenuLabel>
+            <DropdownMenuSeparator />
+            {chatsQuery.isLoading ? (
+              <div className="flex items-center justify-center gap-2 px-2 py-4 text-sm text-muted-foreground">
+                <Spinner /> Loading…
+              </div>
+            ) : chats.length === 0 ? (
+              <div className="px-2 py-4 text-center text-sm text-muted-foreground">
+                No previous chats
+              </div>
+            ) : (
+              <div className="max-h-80 overflow-y-auto">
+                {chats.map((chat) => (
+                  <div
+                    key={chat.id}
+                    className={cn(
+                      "group flex items-center gap-1 rounded-sm px-2 py-1.5 hover:bg-accent",
+                      chat.id === currentChatId && "bg-accent/50",
+                    )}
+                  >
+                    <button
+                      className="flex min-w-0 flex-1 flex-col items-start text-left"
+                      disabled={loadingChatId !== null}
+                      onClick={() => void handleSelect(chat.id)}
+                      type="button"
+                    >
+                      <span className="w-full truncate text-sm">{chat.title}</span>
+                      <span className="text-xs text-muted-foreground">
+                        {loadingChatId === chat.id ? "Opening…" : relativeTime(chat.updatedAt)}
+                      </span>
+                    </button>
+                    <Button
+                      aria-label={`Delete ${chat.title}`}
+                      className="shrink-0 opacity-0 group-hover:opacity-100"
+                      onClick={() => handleDelete(chat.id)}
+                      size="icon-xs"
+                      variant="ghost"
+                    >
+                      <Trash2Icon className="size-3.5" />
+                    </Button>
+                  </div>
+                ))}
+              </div>
+            )}
+          </DropdownMenuContent>
+        </DropdownMenu>
+      ) : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/ai/components/chat-shell.tsx b/apps/www/src/features/studio/ai/components/chat-shell.tsx
new file mode 100644
index 000000000..e0c606fb7
--- /dev/null
+++ b/apps/www/src/features/studio/ai/components/chat-shell.tsx
@@ -0,0 +1,359 @@
+import { useMutation } from "@tanstack/react-query";
+import type { UIMessage } from "ai";
+import { isToolUIPart } from "ai";
+import {
+  Attachment,
+  AttachmentContent,
+  AttachmentGroup,
+  AttachmentMedia,
+  AttachmentTitle,
+  Bubble,
+  BubbleContent,
+  cn,
+  Message,
+  MessageContent,
+  MessageScroller,
+  MessageScrollerButton,
+  MessageScrollerContent,
+  MessageScrollerItem,
+  MessageScrollerProvider,
+  MessageScrollerViewport,
+} from "@voidhash/ui";
+import type { ReactNode } from "react";
+import { useCallback, useEffect, useState } from "react";
+import { toast } from "sonner";
+import { Streamdown } from "streamdown";
+
+import { uploadAiChatAttachmentOptions } from "@/features/studio/lib/tanstack-query";
+
+import {
+  composeMessage,
+  isImageType,
+  isTextFile,
+  MAX_ATTACHMENT_BYTES,
+  MAX_TEXT_ATTACHMENT_BYTES,
+  type PendingAttachment,
+  readAsDataUrl,
+  readAsText,
+} from "../attachments";
+import type { SurfaceAgent } from "../contract";
+import { useSurfaceChat } from "../use-surface-chat";
+import { PromptInput } from "./prompt-input";
+import { ToolCallView } from "./tool-call";
+
+interface ChatShellProps {
+  agent: SurfaceAgent;
+  /** Identity of the chat being shown; hosts remount (keyed by this) to switch chats. */
+  chatId: string;
+  /** Seed messages when reopening a stored chat. */
+  initialMessages?: UIMessage[];
+  /** Rendered in the message area when there are no messages yet. */
+  emptyState?: ReactNode;
+  /** Called right before each user message is sent (e.g. to open a checkpoint window). */
+  onBeforeSend?: () => void;
+  className?: string;
+}
+
+/** Whether a message has any visible text content (used to gate the "thinking" marker). */
+function hasRenderedText(message: UIMessage): boolean {
+  return message.parts.some(
+    (part) => part.type === "text" && part.text.trim().length > 0,
+  );
+}
+
+/** Render a sent image `file` part as a vertical image-variant attachment card. */
+function ImageAttachment({ url, name }: { url: string; name: string }) {
+  return (
+    <Attachment orientation="vertical">
+      <AttachmentMedia variant="image">
+        {/* eslint-disable-next-line @next/next/no-img-element */}
+        <img alt={name} src={url} />
+      </AttachmentMedia>
+      <AttachmentContent>
+        <AttachmentTitle>{name}</AttachmentTitle>
+      </AttachmentContent>
+    </Attachment>
+  );
+}
+
+/** Render the parts of one assistant message: text via Streamdown, tool calls via ToolCallView. */
+function AssistantMessage({ message }: { message: UIMessage }) {
+  return (
+    <Message align="start">
+      <MessageContent>
+        {message.parts.map((part, index) => {
+          const key = `${message.id}-${index}`;
+          if (part.type === "text") {
+            return (
+              <Streamdown
+                key={key}
+                className="prose prose-sm dark:prose-invert max-w-none min-w-0"
+              >
+                {part.text}
+              </Streamdown>
+            );
+          }
+          if (part.type === "dynamic-tool" || isToolUIPart(part)) {
+            return <ToolCallView key={key} part={part} />;
+          }
+          if (part.type === "reasoning" && part.text.trim().length > 0) {
+            return (
+              <div
+                key={key}
+                className="text-xs text-muted-foreground italic wrap-break-word"
+              >
+                {part.text}
+              </div>
+            );
+          }
+          return null;
+        })}
+      </MessageContent>
+    </Message>
+  );
+}
+
+/** Render one user message as an end-aligned bubble with its text and image attachments. */
+function UserMessage({ message }: { message: UIMessage }) {
+  const text = message.parts
+    .filter((part) => part.type === "text")
+    .map((part) => (part.type === "text" ? part.text : ""))
+    .join("");
+  const imageParts = message.parts.filter(
+    (part) => part.type === "file" && part.mediaType.startsWith("image/"),
+  );
+
+  return (
+    <Message align="end">
+      <MessageContent className="items-end">
+        {imageParts.length > 0 ? (
+          <AttachmentGroup>
+            {imageParts.map((part, index) =>
+              part.type === "file" ? (
+                <ImageAttachment
+                  key={`${message.id}-img-${index}`}
+                  url={part.url}
+                  name={part.filename ?? "attachment"}
+                />
+              ) : null,
+            )}
+          </AttachmentGroup>
+        ) : null}
+        {text.trim().length > 0 ? (
+          <Bubble align="end">
+            <BubbleContent className="whitespace-pre-wrap">{text}</BubbleContent>
+          </Bubble>
+        ) : null}
+      </MessageContent>
+    </Message>
+  );
+}
+
+/**
+ * Host-agnostic, full-height chat surface. Renders the message list inside an
+ * anchored scroller (with a scroll-to-bottom button), a "thinking" shimmer while
+ * the assistant is working with no text yet, and the composer at the bottom.
+ * Owns the composer's attachment queue: images upload to R2 (under this chat)
+ * and text/code files are read and inlined at send time. Contains no fixed
+ * positioning — the host decides where the shell lives.
+ */
+export function ChatShell({
+  agent,
+  chatId,
+  initialMessages,
+  emptyState,
+  onBeforeSend,
+  className,
+}: ChatShellProps) {
+  const { messages, sendMessage, status, stop } = useSurfaceChat(agent, {
+    chatId,
+    initialMessages,
+  });
+
+  const uploadAttachment = useMutation(uploadAiChatAttachmentOptions());
+  const [attachments, setAttachments] = useState<PendingAttachment[]>([]);
+
+  const patch = useCallback((id: string, next: Partial<PendingAttachment>) => {
+    setAttachments((prev) =>
+      prev.map((attachment) => (attachment.id === id ? { ...attachment, ...next } : attachment)),
+    );
+  }, []);
+
+  const addFiles = useCallback(
+    (files: File[]) => {
+      for (const file of files) {
+        const id = crypto.randomUUID();
+
+        if (isImageType(file.type)) {
+          if (file.size > MAX_ATTACHMENT_BYTES) {
+            toast.error(`"${file.name}" is too large (max 8 MB).`);
+            continue;
+          }
+          const previewUrl = URL.createObjectURL(file);
+          setAttachments((prev) => [
+            ...prev,
+            {
+              id,
+              name: file.name,
+              contentType: file.type,
+              sizeBytes: file.size,
+              kind: "image",
+              status: "uploading",
+              previewUrl,
+            },
+          ]);
+          void (async () => {
+            try {
+              const dataBase64 = await readAsDataUrl(file);
+              const result = await uploadAttachment.mutateAsync({
+                chatId,
+                organizationId: agent.context.organizationId,
+                name: file.name,
+                contentType: file.type,
+                dataBase64,
+              });
+              patch(id, { status: "ready", url: result.url });
+            } catch (error) {
+              patch(id, {
+                status: "error",
+                error: error instanceof Error ? error.message : "Upload failed",
+              });
+            }
+          })();
+        } else if (isTextFile(file)) {
+          if (file.size > MAX_TEXT_ATTACHMENT_BYTES) {
+            toast.error(`"${file.name}" is too large to inline (max 256 KB).`);
+            continue;
+          }
+          setAttachments((prev) => [
+            ...prev,
+            {
+              id,
+              name: file.name,
+              contentType: file.type || "text/plain",
+              sizeBytes: file.size,
+              kind: "text",
+              status: "uploading",
+            },
+          ]);
+          void (async () => {
+            try {
+              const content = await readAsText(file);
+              patch(id, { status: "ready", text: content });
+            } catch (error) {
+              patch(id, {
+                status: "error",
+                error: error instanceof Error ? error.message : "Could not read file",
+              });
+            }
+          })();
+        } else {
+          toast.error(`"${file.name}" is not a supported attachment type.`);
+        }
+      }
+    },
+    [agent.context.organizationId, chatId, patch, uploadAttachment],
+  );
+
+  const removeAttachment = useCallback((id: string) => {
+    setAttachments((prev) => {
+      const target = prev.find((attachment) => attachment.id === id);
+      if (target?.previewUrl) {
+        URL.revokeObjectURL(target.previewUrl);
+      }
+      return prev.filter((attachment) => attachment.id !== id);
+    });
+  }, []);
+
+  // Revoke any outstanding preview object URLs when the shell unmounts.
+  useEffect(
+    () => () => {
+      setAttachments((prev) => {
+        for (const attachment of prev) {
+          if (attachment.previewUrl) {
+            URL.revokeObjectURL(attachment.previewUrl);
+          }
+        }
+        return prev;
+      });
+    },
+    [],
+  );
+
+  const submit = (rawText: string) => {
+    const { text, files } = composeMessage(rawText, attachments);
+    if (text.length === 0 && files.length === 0) {
+      return;
+    }
+    onBeforeSend?.();
+    if (text.length === 0) {
+      void sendMessage({ files });
+    } else {
+      void sendMessage({ text, files });
+    }
+    // Clear the queue (previews are freed on removal/unmount; the sent images
+    // now render from their uploaded URLs in the message list).
+    for (const attachment of attachments) {
+      if (attachment.previewUrl) {
+        URL.revokeObjectURL(attachment.previewUrl);
+      }
+    }
+    setAttachments([]);
+  };
+
+  const isBusy = status === "submitted" || status === "streaming";
+  const lastMessage = messages[messages.length - 1];
+  const showThinking =
+    isBusy &&
+    (!lastMessage ||
+      lastMessage.role !== "assistant" ||
+      !hasRenderedText(lastMessage));
+
+  return (
+    <div className={cn("flex size-full min-h-0 flex-col", className)}>
+      <MessageScrollerProvider autoScroll defaultScrollPosition="end">
+        <MessageScroller className="flex-1">
+          <MessageScrollerViewport className="px-4">
+            <MessageScrollerContent className="mx-auto w-full max-w-2xl py-4">
+              {messages.length === 0 && emptyState ? (
+                <div className="flex flex-1 items-center justify-center text-sm text-muted-foreground">
+                  {emptyState}
+                </div>
+              ) : null}
+
+              {messages.map((message) => (
+                <MessageScrollerItem key={message.id} messageId={message.id}>
+                  {message.role === "user" ? (
+                    <UserMessage message={message} />
+                  ) : (
+                    <AssistantMessage message={message} />
+                  )}
+                </MessageScrollerItem>
+              ))}
+
+              {showThinking ? (
+                <MessageScrollerItem messageId="thinking" scrollAnchor>
+                  <div className="shimmer w-fit text-sm text-muted-foreground">
+                    Thinking…
+                  </div>
+                </MessageScrollerItem>
+              ) : null}
+            </MessageScrollerContent>
+          </MessageScrollerViewport>
+          <MessageScrollerButton direction="end" />
+        </MessageScroller>
+      </MessageScrollerProvider>
+
+      <div className="mx-auto w-full max-w-2xl px-4 pb-4">
+        <PromptInput
+          attachments={attachments}
+          isStreaming={isBusy}
+          onAddFiles={addFiles}
+          onRemoveAttachment={removeAttachment}
+          onStop={() => void stop()}
+          onSubmit={submit}
+        />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/ai/components/prompt-input.tsx b/apps/www/src/features/studio/ai/components/prompt-input.tsx
new file mode 100644
index 000000000..374ed92cb
--- /dev/null
+++ b/apps/www/src/features/studio/ai/components/prompt-input.tsx
@@ -0,0 +1,187 @@
+import {
+  Attachment,
+  AttachmentActions,
+  AttachmentAction,
+  AttachmentContent,
+  AttachmentDescription,
+  AttachmentGroup,
+  AttachmentMedia,
+  AttachmentTitle,
+  Button,
+  cn,
+  Spinner,
+  Textarea,
+} from "@voidhash/ui";
+import { ArrowUp, FileText, Paperclip, Square, X } from "lucide-react";
+import { useRef, useState } from "react";
+
+import { ATTACHMENT_ACCEPT, formatBytes, type PendingAttachment } from "../attachments";
+
+interface PromptInputProps {
+  /** Whether the assistant is currently generating (disables send, shows stop). */
+  isStreaming: boolean;
+  /** Submit the trimmed prompt text (attachments are composed in by the host). */
+  onSubmit: (text: string) => void;
+  /** Abort the in-flight generation. */
+  onStop: () => void;
+  /** Attachments queued for the next message. */
+  attachments: ReadonlyArray<PendingAttachment>;
+  /** Add files picked from the file dialog (or pasted/dropped). */
+  onAddFiles: (files: File[]) => void;
+  /** Remove a queued attachment by id. */
+  onRemoveAttachment: (id: string) => void;
+  className?: string;
+}
+
+const attachmentState = (status: PendingAttachment["status"]) =>
+  status === "ready" ? "done" : status;
+
+/**
+ * Bottom composer for the chat shell: queued-attachment chips, an autosizing-ish
+ * textarea, an attach button, and a send button. Enter submits; Shift+Enter
+ * inserts a newline. While streaming the send button becomes a stop button.
+ * Send is disabled until every attachment has finished uploading, and requires
+ * either some text or at least one ready attachment.
+ */
+export function PromptInput({
+  isStreaming,
+  onSubmit,
+  onStop,
+  attachments,
+  onAddFiles,
+  onRemoveAttachment,
+  className,
+}: PromptInputProps) {
+  const [value, setValue] = useState("");
+  const fileInputRef = useRef<HTMLInputElement>(null);
+
+  const trimmed = value.trim();
+  const isUploading = attachments.some((attachment) => attachment.status === "uploading");
+  const hasReadyAttachment = attachments.some((attachment) => attachment.status === "ready");
+  const canSend = !isStreaming && !isUploading && (trimmed.length > 0 || hasReadyAttachment);
+
+  const submit = () => {
+    if (!canSend) {
+      return;
+    }
+    onSubmit(trimmed);
+    setValue("");
+  };
+
+  const pickFiles = (fileList: FileList | null) => {
+    if (fileList && fileList.length > 0) {
+      onAddFiles(Array.from(fileList));
+    }
+  };
+
+  return (
+    <form
+      className={cn(
+        "flex flex-col gap-2 rounded-xl border border-border bg-card p-2",
+        className,
+      )}
+      onSubmit={(event) => {
+        event.preventDefault();
+        submit();
+      }}
+    >
+      {attachments.length > 0 ? (
+        <AttachmentGroup className="px-1">
+          {attachments.map((attachment) => (
+            <Attachment key={attachment.id} size="sm" state={attachmentState(attachment.status)}>
+              <AttachmentMedia variant={attachment.kind === "image" ? "image" : "icon"}>
+                {attachment.status === "uploading" ? (
+                  <Spinner />
+                ) : attachment.kind === "image" && (attachment.previewUrl ?? attachment.url) ? (
+                  // eslint-disable-next-line @next/next/no-img-element
+                  <img alt={attachment.name} src={attachment.previewUrl ?? attachment.url} />
+                ) : (
+                  <FileText />
+                )}
+              </AttachmentMedia>
+              <AttachmentContent>
+                <AttachmentTitle>{attachment.name}</AttachmentTitle>
+                <AttachmentDescription>
+                  {attachment.status === "error"
+                    ? (attachment.error ?? "Upload failed")
+                    : formatBytes(attachment.sizeBytes)}
+                </AttachmentDescription>
+              </AttachmentContent>
+              <AttachmentActions>
+                <AttachmentAction
+                  aria-label={`Remove ${attachment.name}`}
+                  onClick={() => onRemoveAttachment(attachment.id)}
+                  type="button"
+                >
+                  <X />
+                </AttachmentAction>
+              </AttachmentActions>
+            </Attachment>
+          ))}
+        </AttachmentGroup>
+      ) : null}
+
+      <Textarea
+        aria-label="Message"
+        autoFocus
+        className="max-h-48 min-h-0 resize-none border-0 bg-transparent px-1 py-1.5 shadow-none focus-visible:ring-0"
+        onChange={(event) => setValue(event.target.value)}
+        onKeyDown={(event) => {
+          if (event.key === "Enter" && !event.shiftKey) {
+            event.preventDefault();
+            submit();
+          }
+        }}
+        placeholder="Ask anything…"
+        rows={3}
+        value={value}
+      />
+
+      <div className="flex items-center gap-2">
+        <input
+          accept={ATTACHMENT_ACCEPT}
+          className="hidden"
+          multiple
+          onChange={(event) => {
+            pickFiles(event.target.files);
+            // Reset so selecting the same file again re-fires change.
+            event.target.value = "";
+          }}
+          ref={fileInputRef}
+          type="file"
+        />
+        <Button
+          aria-label="Attach files"
+          onClick={() => fileInputRef.current?.click()}
+          size="icon-sm"
+          type="button"
+          variant="ghost"
+        >
+          <Paperclip className="size-4" />
+        </Button>
+        {isStreaming ? (
+          <Button
+            aria-label="Stop"
+            className="ml-auto"
+            onClick={onStop}
+            size="icon-sm"
+            type="button"
+            variant="secondary"
+          >
+            <Square className="size-3.5" />
+          </Button>
+        ) : (
+          <Button
+            aria-label="Send"
+            className="ml-auto"
+            disabled={!canSend}
+            size="icon-sm"
+            type="submit"
+          >
+            <ArrowUp className="size-4" />
+          </Button>
+        )}
+      </div>
+    </form>
+  );
+}
diff --git a/apps/www/src/features/studio/ai/components/tool-call.tsx b/apps/www/src/features/studio/ai/components/tool-call.tsx
new file mode 100644
index 000000000..10d961540
--- /dev/null
+++ b/apps/www/src/features/studio/ai/components/tool-call.tsx
@@ -0,0 +1,102 @@
+import type { DynamicToolUIPart, ToolUIPart } from "ai";
+import {
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger,
+  cn,
+  Spinner,
+} from "@voidhash/ui";
+import { AlertCircle, ChevronRight, CheckCircle2, Wrench } from "lucide-react";
+
+/** Any tool invocation part — statically-typed or the dynamic (server-declared) shape. */
+type AnyToolPart = ToolUIPart | DynamicToolUIPart;
+
+/** Human-facing tool name for both dynamic and static tool parts. */
+function toolNameOf(part: AnyToolPart): string {
+  return part.type === "dynamic-tool" ? part.toolName : part.type.slice("tool-".length);
+}
+
+/** Stringify tool input/output for display; strings pass through, objects pretty-print. */
+function formatValue(value: unknown): string {
+  if (value === undefined || value === null) {
+    return "";
+  }
+  if (typeof value === "string") {
+    return value;
+  }
+  try {
+    return JSON.stringify(value, null, 2);
+  } catch {
+    return String(value);
+  }
+}
+
+/** Status icon for the tool's current lifecycle state. */
+function StatusIcon({ state }: { state: AnyToolPart["state"] }) {
+  if (state === "output-error") {
+    return <AlertCircle className="size-3.5 text-destructive" />;
+  }
+  if (state === "output-available") {
+    return <CheckCircle2 className="size-3.5 text-muted-foreground" />;
+  }
+  // input-streaming | input-available (and any approval states): still working.
+  return <Spinner className="size-3.5" />;
+}
+
+/**
+ * Renders a single tool invocation as a collapsed, subtle row: header shows the
+ * tool name and a status icon; expanding reveals the pretty-printed input and,
+ * when available, the tool output (or the error text). Closed by default.
+ */
+export function ToolCallView({ part }: { part: AnyToolPart }) {
+  const name = toolNameOf(part);
+  const input = formatValue(part.input);
+  const output =
+    part.state === "output-error"
+      ? part.errorText
+      : part.state === "output-available"
+        ? formatValue(part.output)
+        : "";
+
+  return (
+    <Collapsible className="w-fit max-w-full min-w-0">
+      <CollapsibleTrigger
+        className={cn(
+          "group/tool flex items-center gap-1.5 rounded-md border border-border bg-sidebar px-2 py-1 text-xs text-muted-foreground transition-colors hover:text-foreground",
+        )}
+      >
+        <ChevronRight className="size-3.5 transition-transform group-data-[state=open]/tool:rotate-90" />
+        <Wrench className="size-3.5" />
+        <span className="font-medium">{name}</span>
+        <StatusIcon state={part.state} />
+      </CollapsibleTrigger>
+      <CollapsibleContent className="mt-1 min-w-0">
+        <div className="flex flex-col gap-2 rounded-md border border-border bg-muted/40 p-2 text-xs">
+          {input && (
+            <div className="min-w-0">
+              <div className="mb-1 font-medium text-muted-foreground">Input</div>
+              <pre className="max-h-48 overflow-auto rounded bg-background p-2 font-mono text-[11px] leading-relaxed whitespace-pre-wrap wrap-break-word">
+                {input}
+              </pre>
+            </div>
+          )}
+          {output && (
+            <div className="min-w-0">
+              <div className="mb-1 font-medium text-muted-foreground">
+                {part.state === "output-error" ? "Error" : "Output"}
+              </div>
+              <pre
+                className={cn(
+                  "max-h-48 overflow-auto rounded bg-background p-2 font-mono text-[11px] leading-relaxed whitespace-pre-wrap wrap-break-word",
+                  part.state === "output-error" && "text-destructive",
+                )}
+              >
+                {output}
+              </pre>
+            </div>
+          )}
+        </div>
+      </CollapsibleContent>
+    </Collapsible>
+  );
+}
diff --git a/apps/www/src/features/studio/ai/contract.ts b/apps/www/src/features/studio/ai/contract.ts
new file mode 100644
index 000000000..334f380fa
--- /dev/null
+++ b/apps/www/src/features/studio/ai/contract.ts
@@ -0,0 +1,84 @@
+import type { Surface } from "@voidhash/ai-shared";
+
+/** Whether a chat is listed in the history UI, or stored-but-hidden. */
+export type AiChatType = "persistent" | "single_use";
+
+/**
+ * One client-executed tool call handed to a {@link SurfaceAgent.executeTool}
+ * seam. `input` is the model's raw argument object (the executor validates it
+ * against the shared tool schema); `toolName` selects the tool. `chatId` +
+ * `turnId` (the id of the current user turn — the last user message) identify the
+ * chat turn the designer's `apply_changes` threads to the server for checkpoint
+ * capture.
+ */
+export interface SurfaceToolCall {
+  toolName: string;
+  toolCallId: string;
+  input: unknown;
+  chatId: string;
+  turnId?: string;
+}
+
+/**
+ * The result an executor folds every tool call into — a model-facing string plus
+ * whether it represents an error. Executors NEVER throw into the AI SDK: a failure
+ * is folded into `{ output, isError: true }` so the model sees a readable message
+ * and can recover.
+ */
+export interface SurfaceToolResult {
+  output: string;
+  isError: boolean;
+}
+
+/**
+ * How a surface's chats are persisted. `persistent` chats appear in the history
+ * dropdown and can be reopened; `single_use` chats are still stored (for
+ * audit/debug) but never listed. Omit to make a surface's chats ephemeral —
+ * they are still saved as `single_use`.
+ */
+export interface SurfaceChatPersistence {
+  chatType: AiChatType;
+}
+
+/**
+ * Everything a chat surface contributes to the shared chat core: which surface
+ * it is, the request context sent with every message, how its chats persist, and
+ * (for surfaces with client tools) how to execute a tool call.
+ *
+ * The designer surface's tools are CLIENT-EXECUTED: the backend declares them
+ * schema-only, so the model calling a tool ends the SSE stream; the browser runs
+ * {@link SurfaceAgent.executeTool} against the local fork and the chat
+ * auto-continues (AI SDK v5 client-tool round-trip). A surface with no client
+ * tools omits `executeTool` and remains a pure chat UI.
+ */
+export interface SurfaceAgent {
+  surfaceId: Surface;
+  /** Extra request context sent with each chat request. */
+  context: { organizationId: string; projectId: string; paywallId?: string };
+  /**
+   * Executes one client-side tool call and resolves a model-facing result. The
+   * chat core wires this to the AI SDK's `onToolCall` → `addToolResult` and
+   * auto-continues the conversation. Executors MUST NOT throw — a failure is
+   * folded into `{ output, isError: true }`. Omit for a surface with no client
+   * tools (server-only tools or none).
+   */
+  executeTool?: (call: SurfaceToolCall) => Promise<SurfaceToolResult>;
+  /**
+   * Extra request context resolved fresh at SEND time (merged into the body per
+   * turn, overriding {@link SurfaceAgent.context}). Use for live UI state that
+   * must reflect the moment the user hit send — e.g. the designer's current
+   * selection — rather than the values at hook-mount time. Omit if the surface
+   * has none.
+   */
+  getDynamicContext?: () => Record<string, unknown>;
+  /**
+   * Awaited immediately before each send's POST (inside the transport's
+   * `prepareSendMessagesRequest`). Use to flush live UI state the server must see
+   * with THIS turn — e.g. the designer draining its code-editor flush queue so the
+   * agent reads the user's latest code. Rejections are swallowed (a failed flush
+   * must not block the message). Omit if the surface has none.
+   */
+  beforeSend?: () => Promise<void> | void;
+  /** Persistence policy for this surface's chats. Defaults to `single_use`. */
+  persistence?: SurfaceChatPersistence;
+}
diff --git a/apps/www/src/features/studio/ai/index.ts b/apps/www/src/features/studio/ai/index.ts
new file mode 100644
index 000000000..8cffc87fb
--- /dev/null
+++ b/apps/www/src/features/studio/ai/index.ts
@@ -0,0 +1,16 @@
+export type {
+  AiChatType,
+  SurfaceAgent,
+  SurfaceChatPersistence,
+  SurfaceToolCall,
+  SurfaceToolResult,
+} from "./contract";
+export { ChatShell } from "./components/chat-shell";
+export { ChatHistoryMenu } from "./components/chat-history-menu";
+export {
+  newChatId,
+  useSurfaceChat,
+  type SurfaceChat,
+  type SurfaceChatSession,
+} from "./use-surface-chat";
+export { createVoidhashAiTransport } from "./transport";
diff --git a/apps/www/src/features/studio/ai/transport.test.ts b/apps/www/src/features/studio/ai/transport.test.ts
new file mode 100644
index 000000000..a1da3732f
--- /dev/null
+++ b/apps/www/src/features/studio/ai/transport.test.ts
@@ -0,0 +1,181 @@
+import { chatRequestBodySchema } from "@voidhash/ai-shared";
+import { describe, expect, it, vi } from "vite-plus/test";
+
+import type { SurfaceAgent } from "./contract";
+import { buildSendMessagesBody, createVoidhashAiTransport } from "./transport";
+
+const agent: SurfaceAgent = {
+  surfaceId: "designer",
+  context: { organizationId: "org_1", projectId: "proj_1", paywallId: "pw_1" },
+  persistence: { chatType: "persistent" },
+};
+
+/**
+ * The server now executes the agent's tools and persists the chat
+ * authoritatively, so the request body must carry the `chatId` (the client-minted
+ * persistence key) alongside the surface + context. `body` is protected on the
+ * AI SDK transport; the test reads it structurally.
+ */
+describe("createVoidhashAiTransport", () => {
+  it("sends surface, chatId, and the request context on the body", () => {
+    const transport = createVoidhashAiTransport(agent, "ai_chat_abc");
+    const body = (transport as unknown as { body: Record<string, unknown> }).body;
+    expect(body).toMatchObject({
+      surface: "designer",
+      chatId: "ai_chat_abc",
+      organizationId: "org_1",
+      projectId: "proj_1",
+      paywallId: "pw_1",
+    });
+  });
+
+  it("scopes the chatId per session (distinct chat ids yield distinct bodies)", () => {
+    const a = createVoidhashAiTransport(agent, "chat_a");
+    const b = createVoidhashAiTransport(agent, "chat_b");
+    const bodyA = (a as unknown as { body: Record<string, unknown> }).body;
+    const bodyB = (b as unknown as { body: Record<string, unknown> }).body;
+    expect(bodyA.chatId).toBe("chat_a");
+    expect(bodyB.chatId).toBe("chat_b");
+  });
+});
+
+/**
+ * Cross-package wire-contract test: the body the client transport builds for a
+ * send must satisfy the shared `chatRequestBodySchema` the backend route decodes
+ * with. This pins the regression where a custom `prepareSendMessagesRequest`
+ * dropped the SDK's `messages` from the body (the SDK sends the returned body
+ * verbatim), so the server rejected the POST with 400. Building the body via the
+ * SAME `buildSendMessagesBody` the transport uses keeps the two sides from
+ * drifting.
+ */
+describe("chat request body ↔ server schema contract", () => {
+  const staticBody = {
+    surface: agent.surfaceId,
+    chatId: "ai_chat_abc",
+    ...agent.context,
+  };
+  const sdkFields = {
+    id: "ai_chat_abc",
+    messages: [{ id: "msg_1", role: "user", parts: [{ type: "text", text: "hi" }] }],
+    trigger: "submit-message" as const,
+    messageId: undefined,
+  };
+
+  it("carries messages and the surface/scope fields (the SDK does NOT re-inject them)", () => {
+    const body = buildSendMessagesBody(staticBody, sdkFields, {});
+    expect(Array.isArray(body.messages)).toBe(true);
+    expect(body.surface).toBe("designer");
+    expect(body.chatId).toBe("ai_chat_abc");
+    expect(body.paywallId).toBe("pw_1");
+  });
+
+  it("is accepted by the shared server schema for a designer send with selection", () => {
+    const body = buildSendMessagesBody(staticBody, sdkFields, {
+      selectedNodeIds: ["node_a", "node_b"],
+    });
+    const result = chatRequestBodySchema.safeParse(body);
+    expect(result.success).toBe(true);
+    if (result.success) {
+      expect(result.data.messages).toHaveLength(1);
+      expect(result.data.selectedNodeIds).toEqual(["node_a", "node_b"]);
+    }
+  });
+
+  it("is accepted with no dynamic context (selectedNodeIds omitted)", () => {
+    const body = buildSendMessagesBody(staticBody, sdkFields, {});
+    expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
+  });
+
+  it("is REJECTED when messages is dropped (the pre-fix bug that caused the 400)", () => {
+    const { messages: _dropped, ...withoutMessages } = buildSendMessagesBody(
+      staticBody,
+      sdkFields,
+      {},
+    );
+    expect(chatRequestBodySchema.safeParse(withoutMessages).success).toBe(false);
+  });
+
+  it("matches the full transport → send pipeline for a dynamic-context surface", async () => {
+    const dynamicAgent: SurfaceAgent = { ...agent, getDynamicContext: () => ({ selectedNodeIds: ["n1"] }) };
+    const transport = createVoidhashAiTransport(dynamicAgent, "ai_chat_abc");
+    const prepare = (
+      transport as unknown as {
+        prepareSendMessagesRequest: (opts: {
+          id: string;
+          messages: unknown;
+          trigger: "submit-message" | "regenerate-message";
+          messageId: string | undefined;
+        }) => Promise<{ body: Record<string, unknown> }>;
+      }
+    ).prepareSendMessagesRequest;
+    // `prepareSendMessagesRequest` is async now (it awaits the surface's `beforeSend`
+    // barrier before the POST), so the pipeline body is resolved.
+    const { body } = await prepare(sdkFields);
+    const result = chatRequestBodySchema.safeParse(body);
+    expect(result.success).toBe(true);
+    if (result.success) {
+      expect(result.data.selectedNodeIds).toEqual(["n1"]);
+      expect(result.data.messages).toHaveLength(1);
+    }
+  });
+
+  it("awaits `beforeSend` before building the body (flush barrier)", async () => {
+    const calls: string[] = [];
+    const barrierAgent: SurfaceAgent = {
+      ...agent,
+      beforeSend: async () => {
+        calls.push("beforeSend");
+      },
+    };
+    const transport = createVoidhashAiTransport(barrierAgent, "ai_chat_abc");
+    const prepare = (
+      transport as unknown as {
+        prepareSendMessagesRequest: (opts: typeof sdkFields) => Promise<{ body: Record<string, unknown> }>;
+      }
+    ).prepareSendMessagesRequest;
+    const { body } = await prepare(sdkFields);
+    expect(calls).toEqual(["beforeSend"]);
+    expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
+  });
+
+  it("sends the message even when `beforeSend` rejects (flush must not block)", async () => {
+    const failingAgent: SurfaceAgent = {
+      ...agent,
+      beforeSend: () => Promise.reject(new Error("flush failed")),
+    };
+    const transport = createVoidhashAiTransport(failingAgent, "ai_chat_abc");
+    const prepare = (
+      transport as unknown as {
+        prepareSendMessagesRequest: (opts: typeof sdkFields) => Promise<{ body: Record<string, unknown> }>;
+      }
+    ).prepareSendMessagesRequest;
+    const { body } = await prepare(sdkFields);
+    expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
+  });
+
+  it("sends the message even when `beforeSend` HANGS (flush barrier times out, not blocks forever)", async () => {
+    // The designer's `beforeSend` is a synchronous Monaco flush, but the transport
+    // still defends against a surface whose barrier never resolves by racing it
+    // against a timeout and proceeding. Fake timers keep the test instant.
+    vi.useFakeTimers();
+    try {
+      const hangingAgent: SurfaceAgent = {
+        ...agent,
+        beforeSend: () => new Promise<void>(() => {}), // never resolves
+      };
+      const transport = createVoidhashAiTransport(hangingAgent, "ai_chat_abc");
+      const prepare = (
+        transport as unknown as {
+          prepareSendMessagesRequest: (opts: typeof sdkFields) => Promise<{ body: Record<string, unknown> }>;
+        }
+      ).prepareSendMessagesRequest;
+      const pending = prepare(sdkFields);
+      // Advance past the barrier timeout so the send proceeds with the (stale) fork.
+      await vi.advanceTimersByTimeAsync(3000);
+      const { body } = await pending;
+      expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+});
diff --git a/apps/www/src/features/studio/ai/transport.ts b/apps/www/src/features/studio/ai/transport.ts
new file mode 100644
index 000000000..29923b5a2
--- /dev/null
+++ b/apps/www/src/features/studio/ai/transport.ts
@@ -0,0 +1,133 @@
+import { DefaultChatTransport } from "ai";
+
+import { env } from "@/lib/env";
+
+import type { SurfaceAgent } from "./contract";
+
+/** Backend chat endpoint base, with any trailing slashes trimmed. */
+const apiBaseUrl = env.VITE_APP_API_URL.replace(/\/+$/, "");
+
+/**
+ * How long the `beforeSend` barrier may block a chat send before the send
+ * proceeds anyway. The barrier flushes the code-editor Monaco buffers into the
+ * store fork so the client tool executor reads the user's latest code; that is a
+ * synchronous local operation, but the bounded race is kept defensively so a
+ * surface whose `beforeSend` ever hangs cannot block every send indefinitely.
+ */
+const BEFORE_SEND_TIMEOUT_MS = 3000;
+
+/**
+ * Race `barrier` against a timeout so a hung flush cannot block the send forever.
+ * Resolves when the barrier settles OR the timeout elapses, whichever is first;
+ * the timer is always cleared. Never rejects — a barrier rejection is swallowed by
+ * the caller, and a timeout is a normal "proceed anyway" outcome.
+ */
+function raceBeforeSend(barrier: Promise<void>): Promise<void> {
+  return new Promise<void>((resolve) => {
+    const timer = setTimeout(resolve, BEFORE_SEND_TIMEOUT_MS);
+    const settle = () => {
+      clearTimeout(timer);
+      resolve();
+    };
+    barrier.then(settle, settle);
+  });
+}
+
+/**
+ * The AI SDK fields a custom `prepareSendMessagesRequest` must forward onto the
+ * body itself. When NO `prepareSendMessagesRequest` is given, the SDK appends
+ * these to the body automatically; when one IS given, the SDK sends the returned
+ * body VERBATIM (see `HttpChatTransport.sendMessages`), so a custom function must
+ * re-include them or the POST loses its `messages` (server → 400) and turn ids.
+ */
+interface AiSdkRequestFields {
+  readonly id: string;
+  readonly messages: unknown;
+  readonly trigger: "submit-message" | "regenerate-message";
+  readonly messageId: string | undefined;
+}
+
+/**
+ * Build the request body for a send, merging the transport's static context, the
+ * SDK's per-turn fields (`id`/`messages`/`trigger`/`messageId`), and any fresh
+ * dynamic context. Extracted so the exact wire body can be asserted against the
+ * server's chat-request schema in a contract test.
+ */
+export function buildSendMessagesBody(
+  staticBody: Record<string, unknown>,
+  sdkFields: AiSdkRequestFields,
+  dynamicContext: Record<string, unknown>,
+): Record<string, unknown> {
+  return {
+    ...staticBody,
+    id: sdkFields.id,
+    messages: sdkFields.messages,
+    trigger: sdkFields.trigger,
+    messageId: sdkFields.messageId,
+    ...dynamicContext,
+  };
+}
+
+/**
+ * Build the AI SDK transport for a surface agent. The transport POSTs to
+ * `${VITE_APP_API_URL}/api/ai/chat` with cookie auth (`credentials: "include"`)
+ * and merges the surface id, its request context, and the `chatId` into every
+ * request body (the AI SDK appends `messages`/`id`/`trigger`).
+ *
+ * The designer's tools are CLIENT-EXECUTED (the backend declares them
+ * schema-only and ends the stream at a tool call; the browser runs them and the
+ * chat auto-continues), but the server still persists the chat authoritatively,
+ * so it needs the `chatId` (the client-minted persistence key) on every turn's
+ * body — including each auto-continuation request.
+ *
+ * When the agent exposes {@link SurfaceAgent.getDynamicContext}, its result is
+ * merged into the body at SEND time via `prepareSendMessagesRequest`, so live UI
+ * state (e.g. the designer's current selection) reflects the moment the user hit
+ * send rather than when this transport was built.
+ *
+ * NOTE: a custom `prepareSendMessagesRequest` REPLACES the SDK's default body
+ * assembly — the SDK sends the returned body verbatim and does NOT re-append
+ * `messages`/`id`/`trigger`/`messageId`. {@link buildSendMessagesBody} therefore
+ * re-includes them explicitly; dropping them loses `messages` and the server
+ * rejects the request with 400.
+ */
+export function createVoidhashAiTransport(agent: SurfaceAgent, chatId: string) {
+  const getDynamicContext = agent.getDynamicContext;
+  const beforeSend = agent.beforeSend;
+  const staticBody = {
+    surface: agent.surfaceId,
+    chatId,
+    ...agent.context,
+  };
+  // A custom `prepareSendMessagesRequest` is needed when the surface has dynamic
+  // context to merge OR a `beforeSend` barrier to await (the designer drains its
+  // code-editor flush queue here so the agent reads the user's latest code). It may
+  // be async — the SDK awaits it before the POST.
+  const needsPrepare = getDynamicContext !== undefined || beforeSend !== undefined;
+  return new DefaultChatTransport({
+    api: `${apiBaseUrl}/api/ai/chat`,
+    credentials: "include",
+    body: staticBody,
+    prepareSendMessagesRequest: needsPrepare
+      ? async ({ id, messages, trigger, messageId }) => {
+          if (beforeSend !== undefined) {
+            // A failed OR hung flush must not block the message: race the barrier
+            // against a bounded timeout (a hung flush would otherwise block every
+            // send forever) and swallow any rejection.
+            try {
+              await raceBeforeSend(Promise.resolve(beforeSend()));
+            } catch {
+              // swallow — send the message regardless.
+            }
+          }
+          return {
+            body: buildSendMessagesBody(
+              staticBody,
+              { id, messages, trigger, messageId },
+              getDynamicContext?.() ?? {},
+            ),
+          };
+        }
+      : undefined,
+  });
+}
diff --git a/apps/www/src/features/studio/ai/use-surface-chat.ts b/apps/www/src/features/studio/ai/use-surface-chat.ts
new file mode 100644
index 000000000..be0244f50
--- /dev/null
+++ b/apps/www/src/features/studio/ai/use-surface-chat.ts
@@ -0,0 +1,150 @@
+import { useChat } from "@ai-sdk/react";
+import { useQueryClient } from "@tanstack/react-query";
+import { lastAssistantMessageIsCompleteWithToolCalls, type UIMessage } from "ai";
+import { useMemo, useRef } from "react";
+
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import type { SurfaceAgent } from "./contract";
+import { createVoidhashAiTransport } from "./transport";
+
+/** Identity for one chat session. The id is minted client-side so attachments can be uploaded before the first save. */
+export interface SurfaceChatSession {
+  readonly chatId: string;
+  /** Seed messages when reopening a stored chat; omit/empty for a new chat. */
+  readonly initialMessages?: UIMessage[];
+}
+
+/** Mint a fresh client-side chat id (fits the 64-char id column with room to spare). */
+export const newChatId = (): string => `ai_chat_${crypto.randomUUID().replace(/-/g, "")}`;
+
+/**
+ * Safety cap on client-tool auto-continuations for a single user turn. The
+ * backend already caps server steps with a `stepCountIs` backstop; this guards
+ * the CLIENT loop so a model that keeps calling tools without ever producing a
+ * final answer cannot round-trip forever. Reset when the user sends a new
+ * message (the count only bounds an in-flight agentic turn).
+ */
+const MAX_AUTO_CONTINUATIONS = 64;
+
+/**
+ * Surface-agnostic chat hook. Wraps the AI SDK `useChat` with the Voidhash
+ * transport.
+ *
+ * When the agent exposes {@link SurfaceAgent.executeTool}, its tools are
+ * CLIENT-EXECUTED: the backend declares them schema-only, so the model calling a
+ * tool ends the stream; this hook runs the executor via `onToolCall`, feeds the
+ * result back with `addToolResult`, and auto-continues via
+ * `sendAutomaticallyWhen: lastAssistantMessageIsCompleteWithToolCalls` (bounded by
+ * {@link MAX_AUTO_CONTINUATIONS}). A surface with no `executeTool` is a pure chat
+ * UI (server-only tools or none) and never auto-continues.
+ *
+ * Persistence is server-authoritative (the server upserts the full transcript in
+ * the stream's `onFinish`), so this hook only invalidates the cached history on
+ * finish so the dropdown refetches the server's freshly-persisted list/snapshot.
+ *
+ * A session is identified by `session.chatId`; hosts remount this hook (keyed by
+ * chatId) to switch between a new chat and a reopened one.
+ */
+export function useSurfaceChat(agent: SurfaceAgent, session: SurfaceChatSession) {
+  const queryClient = useQueryClient();
+  const { chatId } = session;
+
+  const transport = useMemo(() => createVoidhashAiTransport(agent, chatId), [agent, chatId]);
+
+  const { organizationId, projectId, paywallId } = agent.context;
+  const surface = agent.surfaceId;
+
+  const executeTool = agent.executeTool;
+  // Bound the client auto-continuation loop. A ref (not state) so it does not
+  // re-render; the `sendAutomaticallyWhen` closure reads the live count.
+  const continuationsRef = useRef(0);
+
+  const chat = useChat({
+    id: chatId,
+    messages: session.initialMessages,
+    transport,
+    // Execute a client tool call and feed its result back. The executor folds
+    // every failure into `{ output, isError }`, so this never throws into the SDK.
+    onToolCall:
+      executeTool === undefined
+        ? undefined
+        : async ({ toolCall }) => {
+            // The current user turn = the last user message; threaded so the
+            // designer's `apply_changes` can capture a per-turn server checkpoint.
+            const turnId = [...chat.messages].reverse().find((m) => m.role === "user")?.id;
+            const result = await executeTool({
+              toolName: toolCall.toolName,
+              toolCallId: toolCall.toolCallId,
+              input: toolCall.input,
+              chatId,
+              turnId,
+            });
+            chat.addToolResult({
+              tool: toolCall.toolName,
+              toolCallId: toolCall.toolCallId,
+              output: result.output,
+            });
+          },
+    // Auto-continue the conversation once the assistant's turn is complete with
+    // client tool results, bounded so a runaway tool loop cannot spin forever.
+    sendAutomaticallyWhen:
+      executeTool === undefined
+        ? undefined
+        : ({ messages }) => {
+            if (continuationsRef.current >= MAX_AUTO_CONTINUATIONS) {
+              return false;
+            }
+            if (!lastAssistantMessageIsCompleteWithToolCalls({ messages })) {
+              return false;
+            }
+            continuationsRef.current += 1;
+            return true;
+          },
+    onFinish: ({ isError, isAbort }) => {
+      // The server persisted the transcript authoritatively; just refresh the
+      // client history caches so the dropdown and any reopened snapshot are fresh.
+      if (isError || isAbort || !organizationId || !projectId) {
+        return;
+      }
+      void queryClient.invalidateQueries({
+        queryKey: queryKeys.aiChat.list({ organizationId, projectId, surface, paywallId }),
+      });
+      void queryClient.invalidateQueries({ queryKey: queryKeys.aiChat.get(chatId) });
+    },
+  });
+
+  const {
+    messages,
+    sendMessage: rawSendMessage,
+    status,
+    error,
+    stop,
+    regenerate: rawRegenerate,
+  } = chat;
+
+  // Wrap `sendMessage` so a fresh USER turn resets the auto-continuation budget
+  // (the cap bounds one agentic turn, not the whole chat).
+  const sendMessage = useMemo(
+    () =>
+      ((...args: Parameters<typeof rawSendMessage>) => {
+        continuationsRef.current = 0;
+        return rawSendMessage(...args);
+      }) as typeof rawSendMessage,
+    [rawSendMessage],
+  );
+
+  // Regenerating a turn is a fresh agentic turn too, so reset the budget.
+  const regenerate = useMemo(
+    () =>
+      ((...args: Parameters<typeof rawRegenerate>) => {
+        continuationsRef.current = 0;
+        return rawRegenerate(...args);
+      }) as typeof rawRegenerate,
+    [rawRegenerate],
+  );
+
+  return { messages, sendMessage, status, error, stop, regenerate };
+}
+
+export type SurfaceChat = ReturnType<typeof useSurfaceChat>;
diff --git a/apps/www/src/features/studio/analytics/analytics-scaffold-page.tsx b/apps/www/src/features/studio/analytics/analytics-scaffold-page.tsx
new file mode 100644
index 000000000..365fb2462
--- /dev/null
+++ b/apps/www/src/features/studio/analytics/analytics-scaffold-page.tsx
@@ -0,0 +1,33 @@
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
+
+import { Page } from "@/features/studio/shell";
+
+interface AnalyticsScaffoldPageProps {
+  title: string;
+  description: string;
+}
+
+export function AnalyticsScaffoldPage({ title, description }: AnalyticsScaffoldPageProps) {
+  return (
+    <Page>
+      <div className="mx-auto max-w-4xl">
+        <div>
+          <h1 className="font-normal text-3xl tracking-right">{title}</h1>
+          <p className="mt-3 text-muted-foreground">{description}</p>
+        </div>
+
+        <Card className="mt-8 border-dashed">
+          <CardHeader>
+            <CardTitle>{title} analytics</CardTitle>
+            <CardDescription>
+              This page has been scaffolded and is ready for analytics widgets and data queries.
+            </CardDescription>
+          </CardHeader>
+          <CardContent className="text-sm text-muted-foreground">
+            No charts, tables, or filters have been added yet.
+          </CardContent>
+        </Card>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/analytics/overview/query-builders.ts b/apps/www/src/features/studio/analytics/overview/query-builders.ts
new file mode 100644
index 000000000..01ad33c67
--- /dev/null
+++ b/apps/www/src/features/studio/analytics/overview/query-builders.ts
@@ -0,0 +1,326 @@
+import type {
+  AnalyticsFieldValueType,
+  AnalyticsFilterType,
+  AnalyticsGranularityType,
+  AnalyticsTimeRangeType,
+  BuiltInInsightIdType,
+  QueryAnalyticsInsightsRequestType,
+} from "@voidhash/rpc";
+
+import type {
+  DateRange,
+  Granularity,
+} from "@/features/studio/organizations/overview/date-range-filter";
+import type { MetricValueFormat } from "@/features/studio/organizations/overview/format";
+
+export interface AnalyticsMetricDefinition {
+  id: BuiltInInsightIdType;
+  key: string;
+  label: string;
+  valueFormat: MetricValueFormat;
+}
+
+export const OVERVIEW_INSIGHTS: readonly AnalyticsMetricDefinition[] = [
+  {
+    id: "builtin/revenue",
+    key: "overview_revenue",
+    label: "Revenue",
+    valueFormat: "currency",
+  },
+  {
+    id: "builtin/mrr",
+    key: "overview_mrr",
+    label: "MRR",
+    valueFormat: "currency",
+  },
+  {
+    id: "builtin/arr",
+    key: "overview_arr",
+    label: "ARR",
+    valueFormat: "currency",
+  },
+  {
+    id: "builtin/new_persons",
+    key: "overview_new_persons",
+    label: "New People",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/active_subscriptions",
+    key: "overview_active_subscriptions",
+    label: "Active Subscriptions",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/new_subscriptions",
+    key: "overview_new_subscriptions",
+    label: "New Subscriptions",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/churned_subscriptions",
+    key: "overview_churned_subscriptions",
+    label: "Churned Subscriptions",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/arpu",
+    key: "overview_arpu",
+    label: "ARPU",
+    valueFormat: "currency",
+  },
+  {
+    id: "builtin/trials",
+    key: "overview_trials",
+    label: "Trials",
+    valueFormat: "number",
+  },
+] as const;
+
+export const REVENUE_ANALYTICS_INSIGHTS: readonly AnalyticsMetricDefinition[] = [
+  {
+    id: "builtin/revenue",
+    key: "revenue_revenue",
+    label: "Revenue",
+    valueFormat: "currency",
+  },
+  {
+    id: "builtin/mrr",
+    key: "revenue_mrr",
+    label: "MRR",
+    valueFormat: "currency",
+  },
+  {
+    id: "builtin/mrr_growth_rate",
+    key: "revenue_mrr_growth_rate",
+    label: "MRR Growth Rate",
+    valueFormat: "percent",
+  },
+  {
+    id: "builtin/arr",
+    key: "revenue_arr",
+    label: "ARR",
+    valueFormat: "currency",
+  },
+] as const;
+
+export const SUBSCRIBER_ANALYTICS_INSIGHTS: readonly AnalyticsMetricDefinition[] = [
+  {
+    id: "builtin/active_subscriptions",
+    key: "subscribers_active_subscriptions",
+    label: "Active Subscriptions",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/active_subscribers_growth",
+    key: "subscribers_active_subscribers_growth",
+    label: "Active Subscribers Growth",
+    valueFormat: "percent",
+  },
+  {
+    id: "builtin/new_subscriptions",
+    key: "subscribers_new_subscriptions",
+    label: "New Subscribers",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/churned_subscriptions",
+    key: "subscribers_churned_subscriptions",
+    label: "Churned Subscribers",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/arpu",
+    key: "subscribers_arpu",
+    label: "ARPU",
+    valueFormat: "currency",
+  },
+  {
+    id: "builtin/subscriber_lifetime_value",
+    key: "subscribers_subscriber_lifetime_value",
+    label: "Subscriber Lifetime Value",
+    valueFormat: "currency",
+  },
+] as const;
+
+export const TRIAL_ANALYTICS_INSIGHTS: readonly AnalyticsMetricDefinition[] = [
+  {
+    id: "builtin/trials",
+    key: "trials_new_trials",
+    label: "New Trials",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/trial_conversion_rate",
+    key: "trials_trial_conversion_rate",
+    label: "Trial Conversion Rate",
+    valueFormat: "percent",
+  },
+  {
+    id: "builtin/active_trials",
+    key: "trials_active_trials",
+    label: "Active Trials",
+    valueFormat: "number",
+  },
+  {
+    id: "builtin/trial_conversions",
+    key: "trials_trial_conversions",
+    label: "Converted Trials",
+    valueFormat: "number",
+  },
+] as const;
+
+export const CHURN_ANALYTICS_INSIGHTS: readonly AnalyticsMetricDefinition[] = [
+  {
+    id: "builtin/churn_rate",
+    key: "churn_subscriber_churn_rate",
+    label: "Subscriber Churn Rate",
+    valueFormat: "percent",
+  },
+  {
+    id: "builtin/churned_revenue",
+    key: "churn_churned_revenue",
+    label: "Churned Revenue",
+    valueFormat: "currency",
+  },
+] as const;
+
+const buildPredicate = (
+  field: string,
+  op: "eq" | "neq" | "in" | "not_in" | "gt" | "gte" | "lt" | "lte" | "contains" | "exists",
+  value: AnalyticsFieldValueType,
+): AnalyticsFilterType => ({
+  field,
+  op,
+  type: "predicate",
+  value,
+});
+
+const startOfToday = () => {
+  const now = new Date();
+  return new Date(now.getFullYear(), now.getMonth(), now.getDate());
+};
+
+const buildYesterdayRange = (): AnalyticsTimeRangeType => {
+  const todayStart = startOfToday();
+  return {
+    end: new Date(todayStart.getTime() - 1),
+    preset: "custom",
+    start: new Date(todayStart.getTime() - 24 * 60 * 60 * 1000),
+  };
+};
+
+const buildPreviousRange = (range: DateRange): AnalyticsTimeRangeType => {
+  const now = new Date();
+  const durationDays = range === "last_7d" ? 7 : range === "last_30d" ? 30 : 90;
+  const currentStart = new Date(now.getTime() - durationDays * 24 * 60 * 60 * 1000);
+
+  return {
+    end: currentStart,
+    preset: "custom",
+    start: new Date(currentStart.getTime() - durationDays * 24 * 60 * 60 * 1000),
+  };
+};
+
+const mapGranularity = (granularity: Granularity): AnalyticsGranularityType => {
+  switch (granularity) {
+    case "daily":
+      return "day";
+    case "weekly":
+      return "week";
+    case "monthly":
+      return "month";
+  }
+};
+
+const buildProjectFilter = (projectId?: string): AnalyticsFilterType | undefined =>
+  projectId ? buildPredicate("project.id", "eq", projectId) : undefined;
+
+export const buildMetricsAnalyticsRequest = ({
+  dateRange,
+  granularity,
+  metrics,
+  organizationId,
+  projectId,
+}: {
+  dateRange: DateRange;
+  granularity: Granularity;
+  metrics: readonly AnalyticsMetricDefinition[];
+  organizationId: string;
+  projectId?: string;
+}): QueryAnalyticsInsightsRequestType => {
+  const baseFilter = buildProjectFilter(projectId);
+  const context = {
+    organizationId,
+  } as const;
+  const queries = metrics.flatMap((metric) => [
+    {
+      context,
+      filter: baseFilter,
+      granularity: mapGranularity(granularity),
+      insightId: metric.id,
+      key: `${metric.key}:current`,
+      timeRange: {
+        preset: dateRange,
+      },
+    },
+    {
+      context,
+      filter: baseFilter,
+      granularity: mapGranularity(granularity),
+      insightId: metric.id,
+      key: `${metric.key}:previous`,
+      timeRange: buildPreviousRange(dateRange),
+    },
+  ]);
+
+  return {
+    queries: queries as unknown as QueryAnalyticsInsightsRequestType["queries"],
+  };
+};
+
+export const buildOverviewAnalyticsRequest = ({
+  dateRange,
+  granularity,
+  organizationId,
+  projectId,
+}: {
+  dateRange: DateRange;
+  granularity: Granularity;
+  organizationId: string;
+  projectId?: string;
+}): QueryAnalyticsInsightsRequestType => {
+  return {
+    queries: [
+      {
+        context: {
+          organizationId,
+        },
+        filter: buildProjectFilter(projectId),
+        granularity: "hour",
+        insightId: "builtin/revenue",
+        key: "today_revenue_current",
+        timeRange: {
+          preset: "today",
+        },
+      },
+      {
+        context: {
+          organizationId,
+        },
+        filter: buildProjectFilter(projectId),
+        granularity: "hour",
+        insightId: "builtin/revenue",
+        key: "today_revenue_previous",
+        timeRange: buildYesterdayRange(),
+      },
+      ...buildMetricsAnalyticsRequest({
+        dateRange,
+        granularity,
+        metrics: OVERVIEW_INSIGHTS,
+        organizationId,
+        projectId,
+      }).queries,
+    ],
+  };
+};
diff --git a/apps/www/src/features/studio/analytics/overview/result-mappers.ts b/apps/www/src/features/studio/analytics/overview/result-mappers.ts
new file mode 100644
index 000000000..02548edc6
--- /dev/null
+++ b/apps/www/src/features/studio/analytics/overview/result-mappers.ts
@@ -0,0 +1,94 @@
+import type {
+  AnalyticsInsightResponseItemType,
+  AnalyticsInsightResultType,
+  AnalyticsSummaryType,
+} from "@voidhash/rpc";
+
+import { OVERVIEW_INSIGHTS, type AnalyticsMetricDefinition } from "./query-builders";
+import type { OverviewMetricCardData } from "@/features/studio/organizations/overview/overview-section";
+import type { OverviewTimeSeriesPoint } from "@/features/studio/organizations/overview/today-chart";
+
+const toSeries = (result: AnalyticsInsightResultType): OverviewTimeSeriesPoint[] => {
+  switch (result.kind) {
+    case "metric":
+      return result.sparkline.map((point) => ({
+        date: point.timestamp.toISOString(),
+        value: point.value,
+      }));
+    case "timeseries":
+      return result.series.map((point) => ({
+        date: point.timestamp.toISOString(),
+        value: point.value,
+      }));
+    case "breakdown":
+      return [];
+  }
+};
+
+const toSummary = (result: AnalyticsInsightResultType): AnalyticsSummaryType | undefined => {
+  switch (result.kind) {
+    case "metric":
+    case "timeseries":
+      return result.summary;
+    case "breakdown":
+      return result.summary;
+  }
+};
+
+const calculatePercentChange = (current: number, previous: number | null): number | null => {
+  if (previous === null) {
+    return null;
+  }
+
+  if (previous === 0) {
+    return current > 0 ? 100 : null;
+  }
+
+  return ((current - previous) / previous) * 100;
+};
+
+export const mapAnalyticsResultsByKey = (results: readonly AnalyticsInsightResponseItemType[]) =>
+  new Map(results.map((result) => [result.key, result]));
+
+export const buildMetricCards = (
+  insights: readonly AnalyticsMetricDefinition[],
+  resultsByKey: Map<string, AnalyticsInsightResponseItemType>,
+): OverviewMetricCardData[] =>
+  insights.map((insight) => {
+    const current = resultsByKey.get(`${insight.key}:current`);
+    const previous = resultsByKey.get(`${insight.key}:previous`);
+    const currentSummary = current ? toSummary(current.result) : undefined;
+    const previousSummary = previous ? toSummary(previous.result) : undefined;
+
+    return {
+      currentValue: currentSummary?.value ?? 0,
+      id: insight.key,
+      label: insight.label,
+      percentChange: calculatePercentChange(
+        currentSummary?.value ?? 0,
+        previousSummary?.value ?? null,
+      ),
+      previousValue: previousSummary?.value ?? null,
+      timeSeries: current ? toSeries(current.result) : [],
+      valueFormat: insight.valueFormat,
+    };
+  });
+
+export const buildOverviewMetricCards = (
+  resultsByKey: Map<string, AnalyticsInsightResponseItemType>,
+): OverviewMetricCardData[] => buildMetricCards(OVERVIEW_INSIGHTS, resultsByKey);
+
+export const buildTodayChartData = (
+  resultsByKey: Map<string, AnalyticsInsightResponseItemType>,
+) => {
+  const current = resultsByKey.get("today_revenue_current");
+  const previous = resultsByKey.get("today_revenue_previous");
+
+  return {
+    grossRevenue:
+      toSummary(current?.result ?? { kind: "metric", sparkline: [], summary: { value: 0 } })
+        ?.value ?? 0,
+    timeSeries: current ? toSeries(current.result) : [],
+    yesterdayRevenue: previous ? (toSummary(previous.result)?.value ?? null) : null,
+  };
+};
diff --git a/apps/www/src/features/studio/analytics/project-analytics-page.tsx b/apps/www/src/features/studio/analytics/project-analytics-page.tsx
new file mode 100644
index 000000000..593f1c33a
--- /dev/null
+++ b/apps/www/src/features/studio/analytics/project-analytics-page.tsx
@@ -0,0 +1,111 @@
+import { useQuery } from "@tanstack/react-query";
+import { useState } from "react";
+import type { QueryAnalyticsInsightsResponseType } from "@voidhash/rpc";
+import {
+  Card,
+  CardContent,
+  Page,
+  PageHeader,
+  PageHeaderTitle,
+} from "@voidhash/ui";
+
+import {
+  buildMetricCards,
+  mapAnalyticsResultsByKey,
+} from "@/features/studio/analytics/overview/result-mappers";
+import {
+  buildMetricsAnalyticsRequest,
+  type AnalyticsMetricDefinition,
+} from "@/features/studio/analytics/overview/query-builders";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { queryAnalyticsInsightsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import {
+  OverviewMetricsGrid,
+  type OverviewMetricCardData,
+} from "@/features/studio/organizations/overview/overview-section";
+import {
+  DateRangeFilter,
+  type DateRange,
+  type Granularity,
+} from "@/features/studio/organizations/overview/date-range-filter";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+interface ProjectAnalyticsPageProps {
+  columns?: 2 | 3;
+  metrics: readonly AnalyticsMetricDefinition[];
+  organizationSlug: string;
+  projectSlug: string;
+  title: string;
+}
+
+export const ProjectAnalyticsPage = ({
+  columns = 2,
+  metrics,
+  organizationSlug,
+  projectSlug,
+  title,
+}: ProjectAnalyticsPageProps) => {
+  const { user } = useAuth();
+  const [dateRange, setDateRange] = useState<DateRange>("last_7d");
+  const [granularity, setGranularity] = useState<Granularity>("daily");
+  const activeOrganization = user.organizations.find(
+    (organization) => organization.slug === organizationSlug,
+  );
+  const project = CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug);
+
+  if (!activeOrganization || !project) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Project not found" }} />;
+  }
+
+  const analyticsQuery = useQuery(
+    queryAnalyticsInsightsOptions(
+      buildMetricsAnalyticsRequest({
+        dateRange,
+        granularity,
+        metrics,
+        organizationId: activeOrganization.id,
+        projectId: project.id,
+      }),
+    ),
+  );
+
+  if (analyticsQuery.error) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "ANALYTICS_ERROR",
+          message: analyticsQuery.error.message,
+        }}
+      />
+    );
+  }
+
+  const analyticsData = analyticsQuery.data as QueryAnalyticsInsightsResponseType | undefined;
+  const resultsByKey = mapAnalyticsResultsByKey(analyticsData?.results ?? []);
+  const metricCards: OverviewMetricCardData[] = buildMetricCards(metrics, resultsByKey);
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={
+          <DateRangeFilter
+            dateRange={dateRange}
+            granularity={granularity}
+            onDateRangeChange={setDateRange}
+            onGranularityChange={setGranularity}
+          />
+        }
+      >
+        <PageHeaderTitle>{title}</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-7xl px-4 pt-4">
+        <Card>
+          <CardContent className="px-0 py-0">
+            <OverviewMetricsGrid columns={columns} metrics={metricCards} />
+          </CardContent>
+        </Card>
+      </div>
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/api-keys/api-key-record-skeleton.tsx b/apps/www/src/features/studio/api-keys/api-key-record-skeleton.tsx
new file mode 100644
index 000000000..a859a1a88
--- /dev/null
+++ b/apps/www/src/features/studio/api-keys/api-key-record-skeleton.tsx
@@ -0,0 +1,21 @@
+"use client";
+
+import { Skeleton } from "@voidhash/ui";
+
+export function ApiKeyRecordSkeleton() {
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="w-42">
+            <Skeleton className="h-4 w-24" />
+          </div>
+
+          <div className="w-64">
+            <Skeleton className="h-4 w-full" />
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/api-keys/api-key-record.tsx b/apps/www/src/features/studio/api-keys/api-key-record.tsx
new file mode 100644
index 000000000..daa6c59e8
--- /dev/null
+++ b/apps/www/src/features/studio/api-keys/api-key-record.tsx
@@ -0,0 +1,156 @@
+"use client";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { ApiKey, ApiKeyWithRawKey } from "@voidhash/rpc";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Tooltip,
+  TooltipContent,
+  TooltipProvider,
+  TooltipTrigger,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import {
+  deleteApiKeyOptions,
+  queryKeys,
+  rotateSecretKeyOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { SecretKeyRevealModal } from "./secret-key-reveal-modal";
+
+export function ApiKeyRecord({ apiKey }: { apiKey: typeof ApiKey.Type }) {
+  const queryClient = useQueryClient();
+  const [secretKey, setSecretKey] = useState<typeof ApiKeyWithRawKey.Type | null>(null);
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  const copyToClipboard = (text: string) => {
+    navigator.clipboard.writeText(text);
+    toast.success("Copied to clipboard");
+  };
+
+  // Rotate key
+  const { mutate: rotateSecretKey, status: rotateSecretKeyStatus } = useMutation({
+    ...rotateSecretKeyOptions(),
+    onSuccess: () => {
+      toast.success("Key successfully rotated");
+      queryClient.invalidateQueries({ queryKey: queryKeys.apiKey.all });
+    },
+    onError: () => {
+      toast.error("Failed to rotate key");
+    },
+  });
+
+  const handleRotateKey = async () => {
+    const res = await openDialog({
+      confirmText: "Rotate",
+      description:
+        "Are you sure you want to rotate this key? It may break any services that are using it.",
+      title: "Rotate key",
+    });
+    if (res) {
+      rotateSecretKey({
+        apiKeyId: apiKey.id,
+      });
+    }
+  };
+
+  // Delete key
+  const { mutate: deleteSecretKey, status: deleteSecretKeyStatus } = useMutation({
+    ...deleteApiKeyOptions(),
+    onSuccess: () => {
+      toast.success("Key successfully deleted");
+      queryClient.invalidateQueries({ queryKey: queryKeys.apiKey.all });
+    },
+    onError: () => {
+      toast.error("Failed to delete key");
+    },
+  });
+
+  const handleDeleteKey = async () => {
+    const res = await openDialog({
+      confirmText: "Delete",
+      description:
+        "Are you sure you want to delete this key? It may break any services that are using it. This action cannot be undone.",
+      title: "Delete key",
+    });
+    if (res) {
+      deleteSecretKey({
+        apiKeyId: apiKey.id,
+      });
+    }
+  };
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="w-42">{apiKey.name}</div>
+
+          {apiKey?.isPublic ? (
+            <TooltipProvider>
+              <Tooltip>
+                <TooltipTrigger asChild>
+                  <button
+                    className="cursor-pointer text-left"
+                    onClick={() => copyToClipboard(apiKey.key)}
+                    type="button"
+                  >
+                    <p className="w-64 whitespace-pre-wrap break-words text-muted-foreground">
+                      {apiKey.key}
+                    </p>
+                  </button>
+                </TooltipTrigger>
+                <TooltipContent>
+                  <p>Click to copy</p>
+                </TooltipContent>
+              </Tooltip>
+            </TooltipProvider>
+          ) : (
+            <p className="w-64 whitespace-pre-wrap text-muted-foreground">
+              {apiKey.prefix}...{apiKey.end}
+            </p>
+          )}
+        </div>
+        <div className="flex items-center gap-2">
+          {/* Only secret keys are deletable */}
+          {!apiKey.isPublic && (
+            <DropdownMenu>
+              <DropdownMenuTrigger asChild>
+                <Button className="z-20" size="icon" variant="outline">
+                  <EllipsisVerticalIcon className="h-4 w-4" />
+                </Button>
+              </DropdownMenuTrigger>
+              <DropdownMenuContent align="end" className="w-48">
+                <DropdownMenuItem
+                  className="cursor-pointer"
+                  disabled={rotateSecretKeyStatus === "pending"}
+                  onClick={handleRotateKey}
+                >
+                  Rotate key
+                </DropdownMenuItem>
+                <DropdownMenuItem
+                  className="cursor-pointer"
+                  disabled={deleteSecretKeyStatus === "pending"}
+                  onClick={handleDeleteKey}
+                >
+                  Delete key
+                </DropdownMenuItem>
+              </DropdownMenuContent>
+            </DropdownMenu>
+          )}
+        </div>
+      </div>
+      <ConfirmationDialog />
+      <SecretKeyRevealModal
+        apiKey={secretKey}
+        onClose={() => setSecretKey(null)}
+        open={!!secretKey}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/api-keys/create-secret-key-modal-button.tsx b/apps/www/src/features/studio/api-keys/create-secret-key-modal-button.tsx
new file mode 100644
index 000000000..9e055735d
--- /dev/null
+++ b/apps/www/src/features/studio/api-keys/create-secret-key-modal-button.tsx
@@ -0,0 +1,32 @@
+"use client";
+
+import type { ApiKeyWithRawKey } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui/button";
+import { useState } from "react";
+
+import { CreateSecretKeyModal } from "./create-secret-key-modal";
+import { SecretKeyRevealModal } from "./secret-key-reveal-modal";
+
+export function CreateSecretKeyModalButton({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+  const [secretKey, setSecretKey] = useState<typeof ApiKeyWithRawKey.Type | null>(null);
+  return (
+    <>
+      <CreateSecretKeyModal
+        onClose={() => setOpen(false)}
+        onSuccess={(apiKey) => {
+          setOpen(false);
+          setSecretKey(apiKey);
+        }}
+        open={open}
+        projectId={projectId}
+        trigger={<Button onClick={() => setOpen(true)}>Create secret key</Button>}
+      />
+      <SecretKeyRevealModal
+        apiKey={secretKey}
+        onClose={() => setSecretKey(null)}
+        open={!!secretKey}
+      />
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/api-keys/create-secret-key-modal.tsx b/apps/www/src/features/studio/api-keys/create-secret-key-modal.tsx
new file mode 100644
index 000000000..ce275242e
--- /dev/null
+++ b/apps/www/src/features/studio/api-keys/create-secret-key-modal.tsx
@@ -0,0 +1,125 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { ApiKeyWithRawKey } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { createSecretKeyOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+const createSecretKeySchema = z.object({
+  name: z
+    .string()
+    .min(3, "Name must be at least 3 characters long")
+    .max(32, "Name must be less than 32 characters"),
+});
+
+type CreateSecretKeyForm = z.infer<typeof createSecretKeySchema>;
+
+interface CreateSecretKeyModalProps {
+  open: boolean;
+  onClose: () => void;
+  trigger: React.ReactNode;
+  projectId: string;
+  onSuccess?: (apiKey: typeof ApiKeyWithRawKey.Type) => void;
+}
+
+export function CreateSecretKeyModal({
+  open,
+  onClose,
+  trigger,
+  projectId,
+  onSuccess,
+}: CreateSecretKeyModalProps) {
+  const form = useForm<CreateSecretKeyForm>({
+    defaultValues: {
+      name: "",
+    },
+    resolver: zodResolver(createSecretKeySchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: createSecretKey, status: createSecretKeyStatus } = useMutation({
+    ...createSecretKeyOptions(),
+    onSuccess: (data) => {
+      onSuccess?.(data);
+      toast.success("Key successfully created");
+      queryClient.invalidateQueries({ queryKey: queryKeys.apiKey.all });
+    },
+    onError: () => {
+      toast.error("Failed to create key");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreateSecretKeyForm) => {
+    createSecretKey({ ...data, projectId });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create Secret Key</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Key Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Production API Key" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={createSecretKeyStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createSecretKeyStatus === "pending"} type="submit">
+                {createSecretKeyStatus === "pending" ? "Creating Key..." : "Create Key"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/api-keys/secret-key-reveal-modal.tsx b/apps/www/src/features/studio/api-keys/secret-key-reveal-modal.tsx
new file mode 100644
index 000000000..075a09f3a
--- /dev/null
+++ b/apps/www/src/features/studio/api-keys/secret-key-reveal-modal.tsx
@@ -0,0 +1,61 @@
+"use client";
+
+import type { ApiKeyWithRawKey } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui/button";
+import { CopyText } from "@voidhash/ui/copy-text";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@voidhash/ui/dialog";
+
+interface SecretKeyRevealModalProps {
+  open: boolean;
+  onClose: () => void;
+  apiKey: typeof ApiKeyWithRawKey.Type | null;
+}
+
+export function SecretKeyRevealModal({
+  open,
+  onClose,
+
+  apiKey,
+}: SecretKeyRevealModalProps) {
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+    }
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogContent className="max-w-sm">
+        <DialogHeader>
+          <DialogTitle>Your New Secret Key</DialogTitle>
+          <DialogDescription>
+            Make sure to copy your new secret key now - you won&apos;t be able to see it again!
+          </DialogDescription>
+        </DialogHeader>
+        <div className="flex flex-col space-y-4 pt-4">
+          <div className="space-y-2">
+            <label className="font-medium text-sm" htmlFor="secret-key">
+              Secret Key
+            </label>
+            <CopyText
+              className="w-full rounded-md border border-border bg-card p-2 text-muted-foreground"
+              text={`${apiKey?.rawKey}`}
+            />
+          </div>
+          <DialogFooter>
+            <Button className="mt-4 w-full" onClick={() => handleOpenChange(false)} type="button">
+              Close
+            </Button>
+          </DialogFooter>
+        </div>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/components/auth-context.tsx b/apps/www/src/features/studio/components/auth-context.tsx
new file mode 100644
index 000000000..2d8e5b4cc
--- /dev/null
+++ b/apps/www/src/features/studio/components/auth-context.tsx
@@ -0,0 +1,26 @@
+import type { User } from "@voidhash/rpc";
+import { type ReactNode, createContext, useContext } from "react";
+
+interface AuthContextType {
+  user: typeof User.Type;
+}
+
+// Default context – will trigger error if used without provider
+const AuthContext = createContext<AuthContextType | undefined>(undefined);
+
+interface AuthProviderProps {
+  children: ReactNode;
+  user: typeof User.Type;
+}
+
+export function AuthProvider({ children, user }: AuthProviderProps) {
+  return <AuthContext.Provider value={{ user }}>{children}</AuthContext.Provider>;
+}
+
+export function useAuth(): AuthContextType {
+  const context = useContext(AuthContext);
+  if (context === undefined) {
+    throw new Error("useAuth must be used within an AuthProvider");
+  }
+  return context;
+}
diff --git a/apps/www/src/features/studio/components/avatar-uploader.tsx b/apps/www/src/features/studio/components/avatar-uploader.tsx
new file mode 100644
index 000000000..17bca75a9
--- /dev/null
+++ b/apps/www/src/features/studio/components/avatar-uploader.tsx
@@ -0,0 +1,236 @@
+"use client";
+
+import {
+  Button,
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  GradientAvatar,
+  Slider,
+} from "@voidhash/ui";
+import { useCallback, useRef, useState } from "react";
+import Cropper, { type Area } from "react-easy-crop";
+import { toast } from "sonner";
+// v6 ships positioning styles as a separate stylesheet (not auto-injected); the
+// cropper renders broken without it.
+import "react-easy-crop/react-easy-crop.css";
+
+/** Accepted upload types — kept in sync with the server-side allow-list. */
+const ACCEPTED_TYPES = "image/png,image/jpeg,image/webp";
+
+/** Edge length the cropped square is resized to before upload (keeps payloads tiny). */
+const OUTPUT_SIZE = 512;
+
+const createImage = (url: string): Promise<HTMLImageElement> =>
+  new Promise((resolve, reject) => {
+    const image = new Image();
+    image.addEventListener("load", () => resolve(image));
+    image.addEventListener("error", (error) => reject(error));
+    image.src = url;
+  });
+
+const blobToBase64 = (blob: Blob): Promise<string> =>
+  new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onloadend = () => {
+      const result = reader.result as string;
+      // Strip the `data:<type>;base64,` prefix — the server accepts raw base64.
+      const comma = result.indexOf(",");
+      resolve(comma === -1 ? result : result.slice(comma + 1));
+    };
+    reader.onerror = reject;
+    reader.readAsDataURL(blob);
+  });
+
+/**
+ * Draws the selected crop area to an offscreen canvas, resizing to a fixed
+ * square, and returns the result as a base64 WebP (no data-URL prefix).
+ */
+const getCroppedImage = async (
+  imageSrc: string,
+  pixelCrop: Area,
+): Promise<{ imageBase64: string; contentType: string }> => {
+  const image = await createImage(imageSrc);
+  const canvas = document.createElement("canvas");
+  canvas.width = OUTPUT_SIZE;
+  canvas.height = OUTPUT_SIZE;
+  const ctx = canvas.getContext("2d");
+  if (!ctx) {
+    throw new Error("Could not get canvas context");
+  }
+  ctx.drawImage(
+    image,
+    pixelCrop.x,
+    pixelCrop.y,
+    pixelCrop.width,
+    pixelCrop.height,
+    0,
+    0,
+    OUTPUT_SIZE,
+    OUTPUT_SIZE,
+  );
+  const blob = await new Promise<Blob | null>((resolve) =>
+    canvas.toBlob(resolve, "image/webp", 0.85),
+  );
+  if (!blob) {
+    throw new Error("Could not produce cropped image");
+  }
+  const imageBase64 = await blobToBase64(blob);
+  return { imageBase64, contentType: "image/webp" };
+};
+
+export interface AvatarUploaderProps {
+  /** Display name (used for alt text). */
+  readonly name: string;
+  /** Stable id used to seed the gradient fallback. */
+  readonly fallback: string;
+  /** Current avatar URL, or `null` to show the generated gradient. */
+  readonly src: string | null;
+  /** Disables interaction while a mutation is in flight. */
+  readonly isPending: boolean;
+  readonly onUpload: (input: { imageBase64: string; contentType: string }) => void;
+  readonly onRemove: () => void;
+}
+
+/**
+ * Click-to-upload avatar with a 1:1 crop dialog. Clicking the avatar opens the
+ * file picker; selecting an image opens a {@link Cropper} locked to a square
+ * aspect, and saving renders the crop to a 512×512 WebP that is handed to
+ * `onUpload` as base64. A "Remove" action appears once a custom avatar is set.
+ */
+export function AvatarUploader({
+  name,
+  fallback,
+  src,
+  isPending,
+  onUpload,
+  onRemove,
+}: AvatarUploaderProps) {
+  const inputRef = useRef<HTMLInputElement>(null);
+  const [imageSrc, setImageSrc] = useState<string | null>(null);
+  const [crop, setCrop] = useState({ x: 0, y: 0 });
+  const [zoom, setZoom] = useState(1);
+  const [croppedAreaPixels, setCroppedAreaPixels] = useState<Area | null>(null);
+  const [isSaving, setIsSaving] = useState(false);
+
+  const onCropComplete = useCallback((_area: Area, areaPixels: Area) => {
+    setCroppedAreaPixels(areaPixels);
+  }, []);
+
+  const closeDialog = () => {
+    if (imageSrc) {
+      URL.revokeObjectURL(imageSrc);
+    }
+    setImageSrc(null);
+    setCrop({ x: 0, y: 0 });
+    setZoom(1);
+    setCroppedAreaPixels(null);
+  };
+
+  const handleFileSelected = (event: React.ChangeEvent<HTMLInputElement>) => {
+    const file = event.target.files?.[0];
+    // Reset so selecting the same file again re-triggers onChange.
+    event.target.value = "";
+    if (!file) {
+      return;
+    }
+    setImageSrc(URL.createObjectURL(file));
+  };
+
+  const handleSave = async () => {
+    if (!imageSrc || !croppedAreaPixels) {
+      return;
+    }
+    setIsSaving(true);
+    try {
+      const result = await getCroppedImage(imageSrc, croppedAreaPixels);
+      onUpload(result);
+      closeDialog();
+    } catch {
+      toast.error("Failed to process the image. Please try another file.");
+    } finally {
+      setIsSaving(false);
+    }
+  };
+
+  return (
+    <div className="flex flex-col items-end gap-2">
+      <button
+        aria-label="Upload avatar"
+        className="rounded-full ring-offset-background transition-opacity hover:opacity-90 focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50"
+        disabled={isPending}
+        onClick={() => inputRef.current?.click()}
+        type="button"
+      >
+        <GradientAvatar
+          alt={name}
+          className="size-16 rounded-full"
+          fallback={fallback}
+          src={src ?? undefined}
+        />
+      </button>
+      {src ? (
+        <Button
+          disabled={isPending}
+          onClick={onRemove}
+          size="xs"
+          type="button"
+          variant="ghost"
+        >
+          Remove
+        </Button>
+      ) : null}
+
+      <input
+        accept={ACCEPTED_TYPES}
+        className="hidden"
+        onChange={handleFileSelected}
+        ref={inputRef}
+        type="file"
+      />
+
+      <Dialog onOpenChange={(open) => (open ? null : closeDialog())} open={imageSrc !== null}>
+        <DialogContent>
+          <DialogHeader>
+            <DialogTitle>Crop avatar</DialogTitle>
+            <DialogDescription>Drag to reposition and use the slider to zoom.</DialogDescription>
+          </DialogHeader>
+          <div className="relative h-72 w-full overflow-hidden rounded-md bg-muted">
+            {imageSrc ? (
+              <Cropper
+                aspect={1}
+                crop={crop}
+                cropShape="round"
+                image={imageSrc}
+                onCropChange={setCrop}
+                onCropComplete={onCropComplete}
+                onZoomChange={setZoom}
+                showGrid={false}
+                zoom={zoom}
+              />
+            ) : null}
+          </div>
+          <Slider
+            aria-label="Zoom"
+            max={3}
+            min={1}
+            onValueChange={(value) => setZoom(value[0] ?? 1)}
+            step={0.01}
+            value={[zoom]}
+          />
+          <DialogFooter>
+            <Button onClick={closeDialog} type="button" variant="ghost">
+              Cancel
+            </Button>
+            <Button disabled={isSaving} onClick={handleSave} type="button">
+              {isSaving ? "Saving..." : "Save"}
+            </Button>
+          </DialogFooter>
+        </DialogContent>
+      </Dialog>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/components/default-cache-boundary.tsx b/apps/www/src/features/studio/components/default-cache-boundary.tsx
new file mode 100644
index 000000000..3dabea7b9
--- /dev/null
+++ b/apps/www/src/features/studio/components/default-cache-boundary.tsx
@@ -0,0 +1,46 @@
+import type { ErrorComponentProps } from "@tanstack/react-router";
+import { ErrorComponent, Link, rootRouteId, useMatch, useRouter } from "@tanstack/react-router";
+
+export function DefaultCatchBoundary({ error }: ErrorComponentProps) {
+  const router = useRouter();
+  const isRoot = useMatch({
+    select: (state) => state.id === rootRouteId,
+    strict: false,
+  });
+
+  return (
+    <div className="flex min-w-0 flex-1 flex-col items-center justify-center gap-6 p-4">
+      <ErrorComponent error={error} />
+      <div className="flex flex-wrap items-center gap-2">
+        <button
+          className="rounded-sm bg-gray-600 px-2 py-1 font-extrabold text-white uppercase dark:bg-gray-700"
+          onClick={() => {
+            router.invalidate();
+          }}
+          type="button"
+        >
+          Try Again
+        </button>
+        {isRoot ? (
+          <Link
+            className="rounded-sm bg-gray-600 px-2 py-1 font-extrabold text-white uppercase dark:bg-gray-700"
+            to="/"
+          >
+            Home
+          </Link>
+        ) : (
+          <Link
+            className="rounded-sm bg-gray-600 px-2 py-1 font-extrabold text-white uppercase dark:bg-gray-700"
+            onClick={(e) => {
+              e.preventDefault();
+              window.history.back();
+            }}
+            to="/"
+          >
+            Go Back
+          </Link>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/components/not-found.tsx b/apps/www/src/features/studio/components/not-found.tsx
new file mode 100644
index 000000000..7be6d2dbe
--- /dev/null
+++ b/apps/www/src/features/studio/components/not-found.tsx
@@ -0,0 +1,26 @@
+import { Link } from "@tanstack/react-router";
+
+export function NotFound({ children }: { children?: React.ReactNode }) {
+  return (
+    <div className="space-y-2 p-2">
+      <div className="text-gray-600 dark:text-gray-400">
+        {children || <p>The page you are looking for does not exist.</p>}
+      </div>
+      <p className="flex flex-wrap items-center gap-2">
+        <button
+          className="rounded-sm bg-emerald-500 px-2 py-1 font-black text-sm text-white uppercase"
+          onClick={() => window.history.back()}
+          type="button"
+        >
+          Go back
+        </button>
+        <Link
+          className="rounded-sm bg-cyan-600 px-2 py-1 font-black text-sm text-white uppercase"
+          to="/"
+        >
+          Start Over
+        </Link>
+      </p>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/components/relative-time.tsx b/apps/www/src/features/studio/components/relative-time.tsx
new file mode 100644
index 000000000..6db75a8a3
--- /dev/null
+++ b/apps/www/src/features/studio/components/relative-time.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "@voidhash/ui";
+import { formatDistance } from "date-fns";
+import { useEffect, useState } from "react";
+
+const RELATIVE_TIME_REFRESH_MS = 30_000;
+
+const utcFormatter = new Intl.DateTimeFormat(undefined, {
+  dateStyle: "medium",
+  timeStyle: "long",
+  timeZone: "UTC",
+});
+
+const formatUnixTimestamp = (date: Date) => Math.floor(date.getTime() / 1000).toString();
+
+export function RelativeTime({ value }: { value: Date | string }) {
+  const date = value instanceof Date ? value : new Date(value);
+  const [now, setNow] = useState(() => Date.now());
+  const [isMounted, setIsMounted] = useState(false);
+  const [deviceTimeZone, setDeviceTimeZone] = useState<string | null>(null);
+
+  useEffect(() => {
+    setIsMounted(true);
+    setDeviceTimeZone(Intl.DateTimeFormat().resolvedOptions().timeZone ?? null);
+
+    const interval = window.setInterval(() => {
+      setNow(Date.now());
+    }, RELATIVE_TIME_REFRESH_MS);
+
+    return () => {
+      window.clearInterval(interval);
+    };
+  }, []);
+
+  const relativeLabel = formatDistance(date, now, {
+    addSuffix: true,
+  });
+  const deviceFormatter = isMounted
+    ? new Intl.DateTimeFormat(undefined, {
+        dateStyle: "medium",
+        timeStyle: "long",
+      })
+    : null;
+
+  return (
+    <TooltipProvider>
+      <Tooltip>
+        <TooltipTrigger asChild>
+          <time
+            className="cursor-default text-muted-foreground text-sm underline decoration-dotted underline-offset-4"
+            dateTime={date.toISOString()}
+            suppressHydrationWarning
+          >
+            {relativeLabel}
+          </time>
+        </TooltipTrigger>
+        <TooltipContent align="end" className="max-w-xs">
+          <div className="space-y-3">
+            <div className="space-y-1">
+              <p className="font-medium text-foreground text-xs">
+                Your device{deviceTimeZone ? ` (${deviceTimeZone})` : ""}
+              </p>
+              <p className="text-muted-foreground text-xs">
+                {deviceFormatter ? deviceFormatter.format(date) : date.toISOString()}
+              </p>
+            </div>
+            <div className="space-y-1">
+              <p className="font-medium text-foreground text-xs">UTC</p>
+              <p className="text-muted-foreground text-xs">{utcFormatter.format(date)}</p>
+            </div>
+            <div className="space-y-1">
+              <p className="font-medium text-foreground text-xs">Unix timestamp</p>
+              <p className="font-mono text-muted-foreground text-xs">{formatUnixTimestamp(date)}</p>
+            </div>
+          </div>
+        </TooltipContent>
+      </Tooltip>
+    </TooltipProvider>
+  );
+}
diff --git a/apps/www/src/features/studio/development-paywall/development-paywall-page.tsx b/apps/www/src/features/studio/development-paywall/development-paywall-page.tsx
new file mode 100644
index 000000000..53e221735
--- /dev/null
+++ b/apps/www/src/features/studio/development-paywall/development-paywall-page.tsx
@@ -0,0 +1,3 @@
+export default function DevelopmentPaywallPage() {
+  return <div>DevelopmentPaywallPage</div>;
+}
diff --git a/apps/www/src/features/studio/enterprise/enterprise-audit-log-slot.tsx b/apps/www/src/features/studio/enterprise/enterprise-audit-log-slot.tsx
new file mode 100644
index 000000000..925bbd367
--- /dev/null
+++ b/apps/www/src/features/studio/enterprise/enterprise-audit-log-slot.tsx
@@ -0,0 +1,10 @@
+interface EnterpriseAuditLogSlotProps {
+  readonly entityId: string;
+  readonly entityType: string;
+  readonly projectId: string;
+}
+
+/** Community extension slot reserved for a host-provided audit-log panel. */
+export function EnterpriseAuditLogSlot(_props: EnterpriseAuditLogSlotProps) {
+  return null;
+}
diff --git a/apps/www/src/features/studio/enterprise/runtime-capabilities.ts b/apps/www/src/features/studio/enterprise/runtime-capabilities.ts
new file mode 100644
index 000000000..c4afc2d8e
--- /dev/null
+++ b/apps/www/src/features/studio/enterprise/runtime-capabilities.ts
@@ -0,0 +1,40 @@
+import { useQuery } from "@tanstack/react-query";
+
+import { env } from "@/lib/env";
+
+const disabledCapabilities = {
+  enterprise: { auditLogs: false, billing: false },
+} as const;
+
+const loadRuntimeCapabilities = async () => {
+  try {
+    const apiBaseUrl = env.VITE_APP_API_URL.replace(/\/+$/, "");
+    const response = await fetch(`${apiBaseUrl}/api/runtime-capabilities`, {
+      credentials: "include",
+    });
+    if (!response.ok) return disabledCapabilities;
+
+    const body = (await response.json()) as {
+      readonly enterprise?: {
+        readonly auditLogs?: unknown;
+        readonly billing?: unknown;
+      };
+    };
+    return {
+      enterprise: {
+        auditLogs: body.enterprise?.auditLogs === true,
+        billing: body.enterprise?.billing === true,
+      },
+    };
+  } catch {
+    return disabledCapabilities;
+  }
+};
+
+/** Reads the backend composition's UI capabilities once per browser session. */
+export const useRuntimeCapabilities = () =>
+  useQuery({
+    queryFn: loadRuntimeCapabilities,
+    queryKey: ["runtime-capabilities"],
+    staleTime: Number.POSITIVE_INFINITY,
+  });
diff --git a/apps/www/src/features/studio/experiments/create-experiment-modal.tsx b/apps/www/src/features/studio/experiments/create-experiment-modal.tsx
new file mode 100644
index 000000000..d4ae90e95
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/create-experiment-modal.tsx
@@ -0,0 +1,163 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Dialog,
+  DialogContent,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+  Input,
+  Label,
+  Textarea,
+} from "@voidhash/ui";
+import { useState } from "react";
+
+import { createExperimentOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+
+/**
+ * Parse a comma / newline separated string of event names into a de-duplicated
+ * list, dropping blanks. Mirrors how the treatments/metrics fields accept free
+ * text but persist a clean array.
+ */
+const parseEventNames = (value: string): string[] =>
+  Array.from(
+    new Set(
+      value
+        .split(/[\n,]/)
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0),
+    ),
+  );
+
+export function CreateExperimentModal({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+  const [name, setName] = useState("");
+  const [key, setKey] = useState("");
+  const [description, setDescription] = useState("");
+  const [hypothesis, setHypothesis] = useState("");
+  const [primaryMetricEventName, setPrimaryMetricEventName] = useState("");
+  const [secondaryMetricEventNames, setSecondaryMetricEventNames] = useState("");
+  const queryClient = useQueryClient();
+
+  const createExperiment = useMutation({
+    ...createExperimentOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.experiment.list({ projectId }),
+      });
+      setOpen(false);
+      setName("");
+      setKey("");
+      setDescription("");
+      setHypothesis("");
+      setPrimaryMetricEventName("");
+      setSecondaryMetricEventNames("");
+    },
+  });
+
+  const handleNameChange = (value: string) => {
+    setName(value);
+    setKey(
+      value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-|-$/g, ""),
+    );
+  };
+
+  return (
+    <Dialog onOpenChange={setOpen} open={open}>
+      <DialogTrigger asChild>
+        <Button>Create Experiment</Button>
+      </DialogTrigger>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>Create Experiment</DialogTitle>
+        </DialogHeader>
+        <form
+          className="space-y-4"
+          onSubmit={(e) => {
+            e.preventDefault();
+            const secondary = parseEventNames(secondaryMetricEventNames);
+            createExperiment.mutate({
+              description: description || undefined,
+              hypothesis: hypothesis || undefined,
+              key,
+              name,
+              primaryMetricEventName,
+              projectId,
+              secondaryMetricEventNames: secondary.length > 0 ? secondary : undefined,
+            });
+          }}
+        >
+          <div className="space-y-2">
+            <Label htmlFor="experiment-name">Name</Label>
+            <Input
+              id="experiment-name"
+              onChange={(e) => handleNameChange(e.target.value)}
+              placeholder="My Experiment"
+              value={name}
+            />
+          </div>
+          <div className="space-y-2">
+            <Label htmlFor="experiment-key">Key</Label>
+            <Input
+              id="experiment-key"
+              onChange={(e) => setKey(e.target.value)}
+              placeholder="my-experiment"
+              value={key}
+            />
+          </div>
+          <div className="space-y-2">
+            <Label htmlFor="experiment-primary-metric">Primary metric event</Label>
+            <Input
+              id="experiment-primary-metric"
+              onChange={(e) => setPrimaryMetricEventName(e.target.value)}
+              placeholder="purchase_completed"
+              value={primaryMetricEventName}
+            />
+          </div>
+          <div className="space-y-2">
+            <Label htmlFor="experiment-secondary-metrics">Secondary metrics (optional)</Label>
+            <Input
+              id="experiment-secondary-metrics"
+              onChange={(e) => setSecondaryMetricEventNames(e.target.value)}
+              placeholder="trial_started, paywall_viewed"
+              value={secondaryMetricEventNames}
+            />
+            <p className="text-muted-foreground text-xs">Comma separated event names.</p>
+          </div>
+          <div className="space-y-2">
+            <Label htmlFor="experiment-hypothesis">Hypothesis (optional)</Label>
+            <Textarea
+              id="experiment-hypothesis"
+              onChange={(e) => setHypothesis(e.target.value)}
+              placeholder="What do you expect to happen and why?"
+              value={hypothesis}
+            />
+          </div>
+          <div className="space-y-2">
+            <Label htmlFor="experiment-description">Description (optional)</Label>
+            <Textarea
+              id="experiment-description"
+              onChange={(e) => setDescription(e.target.value)}
+              placeholder="What does this experiment change?"
+              value={description}
+            />
+          </div>
+          <div className="flex justify-end gap-2">
+            <Button onClick={() => setOpen(false)} type="button" variant="outline">
+              Cancel
+            </Button>
+            <Button
+              disabled={!name || !key || !primaryMetricEventName || createExperiment.isPending}
+              type="submit"
+            >
+              {createExperiment.isPending ? "Creating..." : "Create"}
+            </Button>
+          </div>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-lifecycle-controls.tsx b/apps/www/src/features/studio/experiments/experiment-lifecycle-controls.tsx
new file mode 100644
index 000000000..0e7b6816a
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-lifecycle-controls.tsx
@@ -0,0 +1,187 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { RpcExperimentVariant } from "@voidhash/rpc";
+import {
+  Button,
+  Dialog,
+  DialogContent,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+  Label,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { Pause, Play, Trophy } from "lucide-react";
+import { useState } from "react";
+
+import { EXPERIMENT_STATUS } from "./experiment-status";
+import {
+  archiveExperimentOptions,
+  concludeExperimentOptions,
+  pauseExperimentOptions,
+  queryKeys,
+  restoreExperimentOptions,
+  startExperimentOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+function ConcludeExperimentDialog({
+  experimentId,
+  variants,
+  disabled,
+  onConcluded,
+}: {
+  experimentId: string;
+  variants: readonly (typeof RpcExperimentVariant.Type)[];
+  disabled?: boolean;
+  onConcluded: () => void;
+}) {
+  const [open, setOpen] = useState(false);
+  const [winningVariantId, setWinningVariantId] = useState("");
+
+  const conclude = useMutation({
+    ...concludeExperimentOptions(),
+    onSuccess: () => {
+      onConcluded();
+      setOpen(false);
+      setWinningVariantId("");
+    },
+  });
+
+  return (
+    <Dialog onOpenChange={setOpen} open={open}>
+      <DialogTrigger asChild>
+        <Button disabled={disabled} variant="outline">
+          <Trophy className="mr-2 h-4 w-4" />
+          Conclude
+        </Button>
+      </DialogTrigger>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>Conclude Experiment</DialogTitle>
+        </DialogHeader>
+        <div className="space-y-4">
+          <p className="text-muted-foreground text-sm">
+            Concluding stops assignment. Optionally pick the winning variant.
+          </p>
+          <div className="space-y-2">
+            <Label>Winning variant (optional)</Label>
+            <Select onValueChange={setWinningVariantId} value={winningVariantId}>
+              <SelectTrigger>
+                <SelectValue placeholder="No winner" />
+              </SelectTrigger>
+              <SelectContent>
+                {variants.map((variant) => (
+                  <SelectItem key={variant.id} value={variant.id}>
+                    {variant.name || variant.key}
+                    {variant.isControl ? " (control)" : ""}
+                  </SelectItem>
+                ))}
+              </SelectContent>
+            </Select>
+          </div>
+          <div className="flex justify-end gap-2">
+            <Button onClick={() => setOpen(false)} type="button" variant="outline">
+              Cancel
+            </Button>
+            <Button
+              disabled={conclude.isPending}
+              onClick={() =>
+                conclude.mutate({
+                  id: experimentId,
+                  winningVariantId: winningVariantId || undefined,
+                })
+              }
+            >
+              {conclude.isPending ? "Concluding..." : "Conclude"}
+            </Button>
+          </div>
+        </div>
+      </DialogContent>
+    </Dialog>
+  );
+}
+
+export function ExperimentLifecycleControls({
+  experimentId,
+  status,
+  archivedAt,
+  variants,
+}: {
+  experimentId: string;
+  status: number;
+  archivedAt: Date | null;
+  variants: readonly (typeof RpcExperimentVariant.Type)[];
+}) {
+  const queryClient = useQueryClient();
+
+  const invalidate = () => {
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.experiment.getExperiment(experimentId),
+    });
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.experiment.all,
+    });
+  };
+
+  const start = useMutation({ ...startExperimentOptions(), onSuccess: invalidate });
+  const pause = useMutation({ ...pauseExperimentOptions(), onSuccess: invalidate });
+  const archive = useMutation({ ...archiveExperimentOptions(), onSuccess: invalidate });
+  const restore = useMutation({ ...restoreExperimentOptions(), onSuccess: invalidate });
+
+  const isArchived = archivedAt !== null;
+  const isRunning = status === EXPERIMENT_STATUS.running;
+  const isConcluded = status === EXPERIMENT_STATUS.concluded;
+  const canStart = status === EXPERIMENT_STATUS.draft || status === EXPERIMENT_STATUS.paused;
+
+  return (
+    <div className="flex gap-2">
+      {!isArchived && !isConcluded && (
+        <>
+          {canStart && (
+            <Button disabled={start.isPending} onClick={() => start.mutate({ id: experimentId })}>
+              <Play className="mr-2 h-4 w-4" />
+              {start.isPending ? "Starting..." : status === EXPERIMENT_STATUS.paused ? "Resume" : "Start"}
+            </Button>
+          )}
+          {isRunning && (
+            <Button
+              disabled={pause.isPending}
+              onClick={() => pause.mutate({ id: experimentId })}
+              variant="outline"
+            >
+              <Pause className="mr-2 h-4 w-4" />
+              {pause.isPending ? "Pausing..." : "Pause"}
+            </Button>
+          )}
+          <ConcludeExperimentDialog
+            disabled={status === EXPERIMENT_STATUS.draft}
+            experimentId={experimentId}
+            onConcluded={invalidate}
+            variants={variants}
+          />
+        </>
+      )}
+
+      {isArchived ? (
+        <Button
+          disabled={restore.isPending}
+          onClick={() => restore.mutate({ id: experimentId })}
+          variant="outline"
+        >
+          {restore.isPending ? "Restoring..." : "Restore"}
+        </Button>
+      ) : (
+        <Button
+          disabled={archive.isPending}
+          onClick={() => archive.mutate({ id: experimentId })}
+          variant="destructive"
+        >
+          {archive.isPending ? "Archiving..." : "Archive"}
+        </Button>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-record-skeleton.tsx b/apps/www/src/features/studio/experiments/experiment-record-skeleton.tsx
new file mode 100644
index 000000000..5e295f8ac
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-record-skeleton.tsx
@@ -0,0 +1,18 @@
+"use client";
+
+import { Skeleton } from "@voidhash/ui";
+
+export function ExperimentRecordSkeleton() {
+  return (
+    <div className="flex items-center justify-between gap-4 px-6 py-4">
+      <div className="space-y-2">
+        <Skeleton className="h-4 w-40" />
+        <Skeleton className="h-3 w-24" />
+      </div>
+      <div className="flex items-center gap-2">
+        <Skeleton className="h-4 w-16" />
+        <Skeleton className="h-5 w-16 rounded-full" />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-record.tsx b/apps/www/src/features/studio/experiments/experiment-record.tsx
new file mode 100644
index 000000000..20c83f81d
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-record.tsx
@@ -0,0 +1,52 @@
+"use client";
+import { Link } from "@tanstack/react-router";
+import type { RpcExperimentListItem } from "@voidhash/rpc";
+import { Badge } from "@voidhash/ui";
+
+import { ExperimentStatusBadge } from "./experiment-status-badge";
+
+/**
+ * A single experiment row in the A/B tests list. Links to the experiment detail
+ * page and surfaces the variant count and lifecycle status.
+ */
+export function ExperimentRecord({
+  experiment,
+  organizationSlug,
+  projectSlug,
+}: {
+  experiment: typeof RpcExperimentListItem.Type;
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  return (
+    <Link
+      className="group relative isolate flex items-center justify-between gap-4 px-6 py-4 transition-colors hover:bg-accent/30"
+      params={{ id: experiment.id, organizationSlug, projectSlug }}
+      to="/studio/$organizationSlug/$projectSlug/experiments/$id"
+    >
+      <div className="min-w-0 flex-1">
+        <div className="flex items-center gap-2">
+          <span className="truncate font-medium text-sm">{experiment.name}</span>
+        </div>
+        <div className="mt-0.5 flex items-center gap-2">
+          <code className="text-muted-foreground text-xs">{experiment.key}</code>
+          {experiment.description && (
+            <>
+              <span className="text-muted-foreground text-xs">·</span>
+              <span className="truncate text-muted-foreground text-xs">
+                {experiment.description}
+              </span>
+            </>
+          )}
+        </div>
+      </div>
+      <div className="flex shrink-0 items-center gap-2">
+        <span className="text-muted-foreground text-xs">
+          {experiment.variantCount} variant{experiment.variantCount === 1 ? "" : "s"}
+        </span>
+        <ExperimentStatusBadge status={experiment.status} />
+        {experiment.archivedAt && <Badge variant="outline">Archived</Badge>}
+      </div>
+    </Link>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-settings-form.tsx b/apps/www/src/features/studio/experiments/experiment-settings-form.tsx
new file mode 100644
index 000000000..283e47a3f
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-settings-form.tsx
@@ -0,0 +1,164 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+  Input,
+  Label,
+  Separator,
+  Textarea,
+} from "@voidhash/ui";
+import { useState } from "react";
+
+import { queryKeys, updateExperimentOptions } from "@/features/studio/lib/tanstack-query";
+
+type ExperimentData = {
+  description: string | null;
+  hypothesis: string | null;
+  id: string;
+  name: string;
+  primaryMetricEventName: string;
+  secondaryMetricEventNames: readonly string[] | null;
+};
+
+const parseEventNames = (value: string): string[] =>
+  Array.from(
+    new Set(
+      value
+        .split(/[\n,]/)
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0),
+    ),
+  );
+
+export function ExperimentSettingsForm({
+  experiment,
+  readOnly,
+}: {
+  experiment: ExperimentData;
+  readOnly?: boolean;
+}) {
+  const initialSecondary = (experiment.secondaryMetricEventNames ?? []).join(", ");
+  const [name, setName] = useState(experiment.name);
+  const [description, setDescription] = useState(experiment.description ?? "");
+  const [hypothesis, setHypothesis] = useState(experiment.hypothesis ?? "");
+  const [primaryMetricEventName, setPrimaryMetricEventName] = useState(
+    experiment.primaryMetricEventName,
+  );
+  const [secondaryMetricEventNames, setSecondaryMetricEventNames] = useState(initialSecondary);
+  const queryClient = useQueryClient();
+
+  const updateExperiment = useMutation({
+    ...updateExperimentOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.experiment.getExperiment(experiment.id),
+      });
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.experiment.all,
+      });
+    },
+  });
+
+  const hasChanges =
+    name !== experiment.name ||
+    description !== (experiment.description ?? "") ||
+    hypothesis !== (experiment.hypothesis ?? "") ||
+    primaryMetricEventName !== experiment.primaryMetricEventName ||
+    secondaryMetricEventNames !== initialSecondary;
+
+  const reset = () => {
+    setName(experiment.name);
+    setDescription(experiment.description ?? "");
+    setHypothesis(experiment.hypothesis ?? "");
+    setPrimaryMetricEventName(experiment.primaryMetricEventName);
+    setSecondaryMetricEventNames(initialSecondary);
+  };
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Settings</CardTitle>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        <div className="space-y-2">
+          <Label htmlFor="experiment-name">Name</Label>
+          <Input
+            disabled={readOnly}
+            id="experiment-name"
+            onChange={(e) => setName(e.target.value)}
+            value={name}
+          />
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="experiment-description">Description</Label>
+          <Textarea
+            disabled={readOnly}
+            id="experiment-description"
+            onChange={(e) => setDescription(e.target.value)}
+            value={description}
+          />
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="experiment-hypothesis">Hypothesis</Label>
+          <Textarea
+            disabled={readOnly}
+            id="experiment-hypothesis"
+            onChange={(e) => setHypothesis(e.target.value)}
+            value={hypothesis}
+          />
+        </div>
+
+        <Separator />
+
+        <div className="space-y-2">
+          <Label htmlFor="experiment-primary-metric">Primary metric event</Label>
+          <Input
+            disabled={readOnly}
+            id="experiment-primary-metric"
+            onChange={(e) => setPrimaryMetricEventName(e.target.value)}
+            placeholder="purchase_completed"
+            value={primaryMetricEventName}
+          />
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="experiment-secondary-metrics">Secondary metrics</Label>
+          <Input
+            disabled={readOnly}
+            id="experiment-secondary-metrics"
+            onChange={(e) => setSecondaryMetricEventNames(e.target.value)}
+            placeholder="trial_started, paywall_viewed"
+            value={secondaryMetricEventNames}
+          />
+          <p className="text-muted-foreground text-xs">Comma separated event names.</p>
+        </div>
+      </CardContent>
+      {hasChanges && !readOnly && (
+        <CardFooter className="flex justify-end gap-2 border-t pt-4">
+          <Button onClick={reset} variant="outline">
+            Reset
+          </Button>
+          <Button
+            disabled={!name || !primaryMetricEventName || updateExperiment.isPending}
+            onClick={() => {
+              const secondary = parseEventNames(secondaryMetricEventNames);
+              updateExperiment.mutate({
+                description: description || null,
+                hypothesis: hypothesis || null,
+                id: experiment.id,
+                name,
+                primaryMetricEventName,
+                secondaryMetricEventNames: secondary.length > 0 ? secondary : null,
+              });
+            }}
+          >
+            {updateExperiment.isPending ? "Saving..." : "Save Changes"}
+          </Button>
+        </CardFooter>
+      )}
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-setup-panel.tsx b/apps/www/src/features/studio/experiments/experiment-setup-panel.tsx
new file mode 100644
index 000000000..0152c8a41
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-setup-panel.tsx
@@ -0,0 +1,294 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Alert,
+  AlertDescription,
+  Button,
+  Card,
+  CardContent,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+  Input,
+  Label,
+  Switch,
+} from "@voidhash/ui";
+import { Info, Plus, Trash2 } from "lucide-react";
+import { useState } from "react";
+
+import { queryKeys, replaceExperimentVariantsOptions } from "@/features/studio/lib/tanstack-query";
+
+type LocalVariant = {
+  _id: string;
+  key: string;
+  name: string;
+  isControl: boolean;
+  weightBps: number;
+};
+
+type ExperimentVariant = {
+  key: string;
+  name: string;
+  isControl: boolean;
+  weightBps: number;
+};
+
+const VARIANT_COLORS = [
+  "bg-blue-500",
+  "bg-emerald-500",
+  "bg-amber-500",
+  "bg-purple-500",
+  "bg-rose-500",
+  "bg-cyan-500",
+  "bg-orange-500",
+  "bg-indigo-500",
+];
+
+let variantCounter = 0;
+
+export function ExperimentSetupPanel({
+  experimentId,
+  readOnly,
+  variants,
+}: {
+  experimentId: string;
+  readOnly?: boolean;
+  variants: ExperimentVariant[];
+}) {
+  const [localVariants, setLocalVariants] = useState<LocalVariant[]>(
+    variants.map((variant) => ({
+      _id: `v-${variantCounter++}`,
+      key: variant.key,
+      name: variant.name,
+      isControl: variant.isControl,
+      weightBps: variant.weightBps,
+    })),
+  );
+  const queryClient = useQueryClient();
+
+  const replaceVariants = useMutation({
+    ...replaceExperimentVariantsOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.experiment.getExperiment(experimentId),
+      });
+    },
+  });
+
+  const totalWeight = localVariants.reduce((sum, variant) => sum + variant.weightBps, 0);
+  const controlCount = localVariants.filter((variant) => variant.isControl).length;
+  const hasBlankKey = localVariants.some((variant) => variant.key.trim().length === 0);
+  const isValid =
+    localVariants.length >= 2 &&
+    totalWeight === 10000 &&
+    controlCount === 1 &&
+    !hasBlankKey;
+
+  const addVariant = () => {
+    setLocalVariants([
+      ...localVariants,
+      {
+        _id: `v-${variantCounter++}`,
+        key: "",
+        name: "",
+        isControl: localVariants.length === 0,
+        weightBps: 0,
+      },
+    ]);
+  };
+
+  const removeVariant = (index: number) => {
+    setLocalVariants(localVariants.filter((_, variantIndex) => variantIndex !== index));
+  };
+
+  const updateVariant = (index: number, updates: Partial<LocalVariant>) => {
+    setLocalVariants(
+      localVariants.map((variant, variantIndex) =>
+        variantIndex === index ? { ...variant, ...updates } : variant,
+      ),
+    );
+  };
+
+  // Only one variant may be the control; setting a new one clears the rest.
+  const setControl = (index: number) => {
+    setLocalVariants(
+      localVariants.map((variant, variantIndex) => ({
+        ...variant,
+        isControl: variantIndex === index,
+      })),
+    );
+  };
+
+  const distributeEvenly = () => {
+    if (localVariants.length === 0) {
+      return;
+    }
+
+    const baseWeight = Math.floor(10000 / localVariants.length);
+    const remainder = 10000 - baseWeight * localVariants.length;
+    setLocalVariants(
+      localVariants.map((variant, index) => ({
+        ...variant,
+        weightBps: baseWeight + (index < remainder ? 1 : 0),
+      })),
+    );
+  };
+
+  return (
+    <Card>
+      <CardHeader className="flex flex-row items-center justify-between">
+        <CardTitle>Variants</CardTitle>
+        <div className="flex gap-2">
+          {localVariants.length > 1 && (
+            <Button disabled={readOnly} onClick={distributeEvenly} size="sm" variant="outline">
+              Distribute Evenly
+            </Button>
+          )}
+          <Button disabled={readOnly} onClick={addVariant} size="sm" variant="outline">
+            <Plus className="mr-1 h-4 w-4" />
+            Add Variant
+          </Button>
+        </div>
+      </CardHeader>
+      <CardContent>
+        {readOnly && (
+          <Alert className="mb-4">
+            <Info className="h-4 w-4" />
+            <AlertDescription>
+              Variants and weights are locked while the experiment is running. Pause it to make
+              changes.
+            </AlertDescription>
+          </Alert>
+        )}
+
+        {localVariants.length === 0 ? (
+          <p className="text-muted-foreground text-sm">
+            No variants yet. Add at least a control and one treatment variant.
+          </p>
+        ) : (
+          <div className="space-y-4">
+            {localVariants.map((variant, index) => (
+              <div className="space-y-3 rounded-md border p-3" key={variant._id}>
+                <div className="flex items-end gap-3">
+                  <div className="flex-1 space-y-1">
+                    <Label>Name</Label>
+                    <Input
+                      disabled={readOnly}
+                      onChange={(event) =>
+                        updateVariant(index, {
+                          name: event.target.value,
+                        })
+                      }
+                      placeholder="Variant name"
+                      value={variant.name}
+                    />
+                  </div>
+                  <div className="flex-1 space-y-1">
+                    <Label>Key</Label>
+                    <Input
+                      disabled={readOnly}
+                      onChange={(event) =>
+                        updateVariant(index, {
+                          key: event.target.value,
+                        })
+                      }
+                      placeholder="variant-key"
+                      value={variant.key}
+                    />
+                  </div>
+                  <div className="w-24 space-y-1">
+                    <Label>Weight</Label>
+                    <div className="relative">
+                      <Input
+                        className="pr-6"
+                        disabled={readOnly}
+                        onChange={(event) => {
+                          const percent = Number.parseFloat(event.target.value) || 0;
+                          updateVariant(index, {
+                            weightBps: Math.round(percent * 100),
+                          });
+                        }}
+                        step="0.1"
+                        type="number"
+                        value={(variant.weightBps / 100).toFixed(1)}
+                      />
+                      <span className="pointer-events-none absolute top-1/2 right-2 -translate-y-1/2 text-muted-foreground text-sm">
+                        %
+                      </span>
+                    </div>
+                  </div>
+                  <Button
+                    disabled={readOnly}
+                    onClick={() => removeVariant(index)}
+                    size="icon"
+                    variant="ghost"
+                  >
+                    <Trash2 className="h-4 w-4" />
+                  </Button>
+                </div>
+
+                <div className="flex items-center gap-2">
+                  <Switch
+                    checked={variant.isControl}
+                    disabled={readOnly || variant.isControl}
+                    id={`control-${variant._id}`}
+                    onCheckedChange={() => setControl(index)}
+                  />
+                  <Label className="text-muted-foreground text-sm" htmlFor={`control-${variant._id}`}>
+                    Control
+                  </Label>
+                </div>
+
+                {variant.weightBps > 0 && (
+                  <div
+                    className={`h-1 rounded-full ${VARIANT_COLORS[index % VARIANT_COLORS.length]}`}
+                    style={{
+                      width: `${Math.min((variant.weightBps / 10000) * 100, 100)}%`,
+                    }}
+                  />
+                )}
+              </div>
+            ))}
+
+            <div className="space-y-2">
+              <div className="flex h-2 overflow-hidden rounded-full bg-muted">
+                {localVariants.map((variant, index) => (
+                  <div
+                    className={`${VARIANT_COLORS[index % VARIANT_COLORS.length]} transition-all`}
+                    key={variant._id}
+                    style={{
+                      width: `${(variant.weightBps / 10000) * 100}%`,
+                    }}
+                  />
+                ))}
+              </div>
+              <div className="text-sm">
+                <span className={totalWeight === 10000 ? "text-muted-foreground" : "text-destructive"}>
+                  Total: {(totalWeight / 100).toFixed(1)}%
+                </span>
+                {totalWeight !== 10000 && (
+                  <span className="ml-2 text-destructive">— must sum to 100%</span>
+                )}
+                {controlCount !== 1 && (
+                  <span className="ml-2 text-destructive">— exactly one control required</span>
+                )}
+              </div>
+            </div>
+          </div>
+        )}
+      </CardContent>
+      <CardFooter className="flex justify-end border-t pt-4">
+        <Button
+          disabled={readOnly || !isValid || replaceVariants.isPending}
+          onClick={() =>
+            replaceVariants.mutate({
+              experimentId,
+              variants: localVariants.map(({ _id: _variantId, ...variant }) => variant),
+            })
+          }
+        >
+          {replaceVariants.isPending ? "Saving..." : "Save Variants"}
+        </Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-status-badge.tsx b/apps/www/src/features/studio/experiments/experiment-status-badge.tsx
new file mode 100644
index 000000000..d9dde7318
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-status-badge.tsx
@@ -0,0 +1,14 @@
+import { Badge } from "@voidhash/ui";
+
+import { EXPERIMENT_STATUS, experimentStatusLabel } from "./experiment-status";
+
+const STATUS_VARIANTS: Record<number, "default" | "secondary" | "destructive" | "outline"> = {
+  [EXPERIMENT_STATUS.draft]: "secondary",
+  [EXPERIMENT_STATUS.running]: "default",
+  [EXPERIMENT_STATUS.paused]: "outline",
+  [EXPERIMENT_STATUS.concluded]: "secondary",
+};
+
+export function ExperimentStatusBadge({ status }: { status: number }) {
+  return <Badge variant={STATUS_VARIANTS[status] ?? "secondary"}>{experimentStatusLabel(status)}</Badge>;
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-status.ts b/apps/www/src/features/studio/experiments/experiment-status.ts
new file mode 100644
index 000000000..403b858fe
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-status.ts
@@ -0,0 +1,25 @@
+/**
+ * Local mirror of the `ExperimentStatus` numeric enum from `@voidhash/db`
+ * (draft=1, running=2, paused=3, concluded=4). Kept here as a plain map so the
+ * studio UI does not need to import the db package just for labels/lifecycle
+ * gating, matching how the flags UI derives display state locally.
+ */
+export const EXPERIMENT_STATUS = {
+  draft: 1,
+  running: 2,
+  paused: 3,
+  concluded: 4,
+} as const;
+
+export type ExperimentStatusValue =
+  (typeof EXPERIMENT_STATUS)[keyof typeof EXPERIMENT_STATUS];
+
+export const EXPERIMENT_STATUS_LABELS: Record<number, string> = {
+  [EXPERIMENT_STATUS.draft]: "Draft",
+  [EXPERIMENT_STATUS.running]: "Running",
+  [EXPERIMENT_STATUS.paused]: "Paused",
+  [EXPERIMENT_STATUS.concluded]: "Concluded",
+};
+
+export const experimentStatusLabel = (status: number): string =>
+  EXPERIMENT_STATUS_LABELS[status] ?? "Unknown";
diff --git a/apps/www/src/features/studio/experiments/experiment-treatments-panel.tsx b/apps/www/src/features/studio/experiments/experiment-treatments-panel.tsx
new file mode 100644
index 000000000..0c797ddc3
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiment-treatments-panel.tsx
@@ -0,0 +1,312 @@
+import { useMutation, useQuery, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
+import type {
+  PaywallLocationTreatmentConfig,
+  RpcExperimentTreatment,
+  RpcExperimentVariant,
+} from "@voidhash/rpc";
+import { EXPERIMENT_TREATMENT_TYPES } from "@voidhash/rpc";
+import {
+  Alert,
+  AlertDescription,
+  Badge,
+  Button,
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  Label,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { Info, Trash2 } from "lucide-react";
+import { useMemo, useState } from "react";
+
+import {
+  getPaywallDraftReleaseOptions,
+  listPaywallDeploysOptions,
+  listPaywallLocationsOptions,
+  listPaywallsOptions,
+  queryKeys,
+  removeExperimentTreatmentOptions,
+  upsertExperimentTreatmentOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+const TREATMENT_TYPE = "paywall_location" as const;
+
+/** Narrow an unknown treatment config to the paywall_location shape. */
+const asPaywallLocationConfig = (
+  config: unknown,
+): PaywallLocationTreatmentConfig | null => {
+  if (
+    typeof config === "object" &&
+    config !== null &&
+    "paywallLocationId" in config &&
+    "paywallId" in config &&
+    "paywallReleaseId" in config
+  ) {
+    return config as PaywallLocationTreatmentConfig;
+  }
+  return null;
+};
+
+/**
+ * Resolve the set of releases a user can bind for a given paywall. The backend
+ * exposes no dedicated "list releases" RPC, so we reuse the existing paywall
+ * surface: published/deployed releases come from `ListPaywallDeploys` (matched
+ * by the paywall's slug) and the current draft comes from
+ * `GetPaywallDraftRelease`. Deduplicated by release id, newest version first.
+ */
+function useReleaseOptions(projectId: string, paywallId: string, paywallSlug: string | undefined) {
+  const { data: deploys = [] } = useQuery({
+    ...listPaywallDeploysOptions({ projectId }),
+    enabled: paywallId.length > 0,
+  });
+  const { data: draft } = useQuery({
+    ...getPaywallDraftReleaseOptions({ paywallId }),
+    enabled: paywallId.length > 0,
+  });
+
+  return useMemo(() => {
+    const byReleaseId = new Map<string, { releaseId: string; version: number | null }>();
+    if (paywallSlug) {
+      for (const deploy of deploys) {
+        for (const paywall of deploy.paywalls) {
+          if (paywall.slug === paywallSlug && paywall.releaseId) {
+            byReleaseId.set(paywall.releaseId, {
+              releaseId: paywall.releaseId,
+              version: paywall.version,
+            });
+          }
+        }
+      }
+    }
+    if (draft) {
+      byReleaseId.set(draft.releaseId, {
+        releaseId: draft.releaseId,
+        version: draft.version,
+      });
+    }
+    return Array.from(byReleaseId.values()).sort((a, b) => (b.version ?? 0) - (a.version ?? 0));
+  }, [deploys, draft, paywallSlug]);
+}
+
+function VariantTreatmentEditor({
+  experimentId,
+  projectId,
+  readOnly,
+  variant,
+  treatment,
+}: {
+  experimentId: string;
+  projectId: string;
+  readOnly?: boolean;
+  variant: typeof RpcExperimentVariant.Type;
+  treatment: typeof RpcExperimentTreatment.Type | undefined;
+}) {
+  const existingConfig = treatment ? asPaywallLocationConfig(treatment.config) : null;
+
+  const [paywallLocationId, setPaywallLocationId] = useState(
+    existingConfig?.paywallLocationId ?? "",
+  );
+  const [paywallId, setPaywallId] = useState(existingConfig?.paywallId ?? "");
+  const [paywallReleaseId, setPaywallReleaseId] = useState(
+    existingConfig?.paywallReleaseId ?? "",
+  );
+
+  const queryClient = useQueryClient();
+
+  const { data: locations } = useSuspenseQuery(listPaywallLocationsOptions({ projectId }));
+  const { data: paywalls } = useSuspenseQuery(listPaywallsOptions({ projectId }));
+
+  const selectedPaywall = paywalls.find((paywall) => paywall.id === paywallId);
+  const releaseOptions = useReleaseOptions(projectId, paywallId, selectedPaywall?.slug);
+
+  const upsertTreatment = useMutation({
+    ...upsertExperimentTreatmentOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.experiment.getExperiment(experimentId),
+      });
+    },
+  });
+
+  const removeTreatment = useMutation({
+    ...removeExperimentTreatmentOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.experiment.getExperiment(experimentId),
+      });
+    },
+  });
+
+  const canSave =
+    paywallLocationId.length > 0 && paywallId.length > 0 && paywallReleaseId.length > 0;
+
+  return (
+    <div className="space-y-3 rounded-md border p-3">
+      <div className="flex items-center justify-between">
+        <div className="flex items-center gap-2">
+          <span className="font-medium">{variant.name || variant.key}</span>
+          {variant.isControl && <Badge variant="outline">Control</Badge>}
+          <span className="font-mono text-muted-foreground text-xs">{variant.key}</span>
+        </div>
+        {treatment && (
+          <Button
+            disabled={readOnly || removeTreatment.isPending}
+            onClick={() => removeTreatment.mutate({ id: treatment.id })}
+            size="icon"
+            variant="ghost"
+          >
+            <Trash2 className="h-4 w-4" />
+          </Button>
+        )}
+      </div>
+
+      <div className="grid grid-cols-3 gap-3">
+        <div className="space-y-1">
+          <Label>Location</Label>
+          <Select
+            disabled={readOnly}
+            onValueChange={setPaywallLocationId}
+            value={paywallLocationId}
+          >
+            <SelectTrigger>
+              <SelectValue placeholder="Select location" />
+            </SelectTrigger>
+            <SelectContent>
+              {locations.map((location) => (
+                <SelectItem key={location.id} value={location.id}>
+                  {location.name} ({location.slug})
+                </SelectItem>
+              ))}
+            </SelectContent>
+          </Select>
+        </div>
+
+        <div className="space-y-1">
+          <Label>Paywall</Label>
+          <Select
+            disabled={readOnly}
+            onValueChange={(value) => {
+              setPaywallId(value);
+              setPaywallReleaseId("");
+            }}
+            value={paywallId}
+          >
+            <SelectTrigger>
+              <SelectValue placeholder="Select paywall" />
+            </SelectTrigger>
+            <SelectContent>
+              {paywalls.map((paywall) => (
+                <SelectItem key={paywall.id} value={paywall.id}>
+                  {paywall.name} ({paywall.slug})
+                </SelectItem>
+              ))}
+            </SelectContent>
+          </Select>
+        </div>
+
+        <div className="space-y-1">
+          <Label>Release</Label>
+          <Select
+            disabled={readOnly || paywallId.length === 0}
+            onValueChange={setPaywallReleaseId}
+            value={paywallReleaseId}
+          >
+            <SelectTrigger>
+              <SelectValue placeholder="Select release" />
+            </SelectTrigger>
+            <SelectContent>
+              {releaseOptions.map((release) => (
+                <SelectItem key={release.releaseId} value={release.releaseId}>
+                  {release.version !== null ? `v${release.version}` : release.releaseId}
+                </SelectItem>
+              ))}
+            </SelectContent>
+          </Select>
+        </div>
+      </div>
+
+      <div className="flex justify-end">
+        <Button
+          disabled={readOnly || !canSave || upsertTreatment.isPending}
+          onClick={() =>
+            upsertTreatment.mutate({
+              config: { paywallId, paywallLocationId, paywallReleaseId },
+              experimentId,
+              treatmentType: TREATMENT_TYPE,
+              variantId: variant.id,
+            })
+          }
+          size="sm"
+        >
+          {upsertTreatment.isPending ? "Saving..." : treatment ? "Update Treatment" : "Add Treatment"}
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+export function ExperimentTreatmentsPanel({
+  experimentId,
+  projectId,
+  readOnly,
+  treatments,
+  variants,
+}: {
+  experimentId: string;
+  projectId: string;
+  readOnly?: boolean;
+  treatments: readonly (typeof RpcExperimentTreatment.Type)[];
+  variants: readonly (typeof RpcExperimentVariant.Type)[];
+}) {
+  const treatmentByVariant = useMemo(() => {
+    const map = new Map<string, typeof RpcExperimentTreatment.Type>();
+    for (const treatment of treatments) {
+      if (treatment.treatmentType === TREATMENT_TYPE) {
+        map.set(treatment.variantId, treatment);
+      }
+    }
+    return map;
+  }, [treatments]);
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Treatments</CardTitle>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        <p className="text-muted-foreground text-sm">
+          Bind each variant to a{" "}
+          <span className="font-medium">{EXPERIMENT_TREATMENT_TYPES.paywall_location.name}</span>:
+          which paywall release to serve at a location for users assigned to that variant.
+        </p>
+
+        {variants.length === 0 ? (
+          <Alert>
+            <Info className="h-4 w-4" />
+            <AlertDescription>
+              Add variants in the Setup tab before configuring treatments.
+            </AlertDescription>
+          </Alert>
+        ) : (
+          <div className="space-y-4">
+            {variants.map((variant) => (
+              <VariantTreatmentEditor
+                experimentId={experimentId}
+                key={variant.id}
+                projectId={projectId}
+                readOnly={readOnly}
+                treatment={treatmentByVariant.get(variant.id)}
+                variant={variant}
+              />
+            ))}
+          </div>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx b/apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx
new file mode 100644
index 000000000..d3c6725fc
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx
@@ -0,0 +1,22 @@
+"use client";
+
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
+
+import { CreateExperimentModal } from "./create-experiment-modal";
+
+export function ExperimentsPageEmptyState({ projectId }: { projectId: string }) {
+  return (
+    <Card className="mx-auto w-full max-w-5xl text-center">
+      <CardHeader>
+        <CardTitle>No A/B tests yet</CardTitle>
+        <CardDescription className="mx-auto max-w-md text-balance">
+          Run experiments to split traffic across variants and measure the impact of a change on
+          the metrics that matter. Create your first experiment to get started.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <CreateExperimentModal projectId={projectId} />
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx b/apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx
new file mode 100644
index 000000000..3534905b6
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx
@@ -0,0 +1,21 @@
+import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+
+import { ExperimentRecordSkeleton } from "./experiment-record-skeleton";
+
+export function ExperimentsPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>A/B Tests</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        <Card className="grid gap-0 divide-y p-0">
+          {Array.from({ length: 4 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <ExperimentRecordSkeleton key={index} />
+          ))}
+        </Card>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/create-flag-modal.tsx b/apps/www/src/features/studio/feature-flags/create-flag-modal.tsx
new file mode 100644
index 000000000..a7f3df4b9
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/create-flag-modal.tsx
@@ -0,0 +1,107 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Dialog,
+  DialogContent,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+  Input,
+  Label,
+  Textarea,
+} from "@voidhash/ui";
+import { useState } from "react";
+
+import { createFeatureFlagOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+
+export function CreateFlagModal({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+  const [name, setName] = useState("");
+  const [key, setKey] = useState("");
+  const [description, setDescription] = useState("");
+  const queryClient = useQueryClient();
+
+  const createFlag = useMutation({
+    ...createFeatureFlagOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.list({ projectId }),
+      });
+      setOpen(false);
+      setName("");
+      setKey("");
+      setDescription("");
+    },
+  });
+
+  const handleNameChange = (value: string) => {
+    setName(value);
+    setKey(
+      value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-|-$/g, ""),
+    );
+  };
+
+  return (
+    <Dialog onOpenChange={setOpen} open={open}>
+      <DialogTrigger asChild>
+        <Button>Create Flag</Button>
+      </DialogTrigger>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>Create Feature Flag</DialogTitle>
+        </DialogHeader>
+        <form
+          className="space-y-4"
+          onSubmit={(e) => {
+            e.preventDefault();
+            createFlag.mutate({
+              description: description || undefined,
+              key,
+              name,
+              projectId,
+            });
+          }}
+        >
+          <div className="space-y-2">
+            <Label htmlFor="flag-name">Name</Label>
+            <Input
+              id="flag-name"
+              onChange={(e) => handleNameChange(e.target.value)}
+              placeholder="My Feature Flag"
+              value={name}
+            />
+          </div>
+          <div className="space-y-2">
+            <Label htmlFor="flag-key">Key</Label>
+            <Input
+              id="flag-key"
+              onChange={(e) => setKey(e.target.value)}
+              placeholder="my-feature-flag"
+              value={key}
+            />
+          </div>
+          <div className="space-y-2">
+            <Label htmlFor="flag-description">Description (optional)</Label>
+            <Textarea
+              id="flag-description"
+              onChange={(e) => setDescription(e.target.value)}
+              placeholder="What does this flag control?"
+              value={description}
+            />
+          </div>
+          <div className="flex justify-end gap-2">
+            <Button onClick={() => setOpen(false)} type="button" variant="outline">
+              Cancel
+            </Button>
+            <Button disabled={!name || !key || createFlag.isPending} type="submit">
+              {createFlag.isPending ? "Creating..." : "Create"}
+            </Button>
+          </div>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-general-form.tsx b/apps/www/src/features/studio/feature-flags/flag-general-form.tsx
new file mode 100644
index 000000000..42de096be
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-general-form.tsx
@@ -0,0 +1,171 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+  Input,
+  Label,
+  Separator,
+  Slider,
+  Switch,
+  Textarea,
+} from "@voidhash/ui";
+import { Info } from "lucide-react";
+import { useState } from "react";
+
+import { queryKeys, updateFeatureFlagOptions } from "@/features/studio/lib/tanstack-query";
+
+import type { FlagType } from "./flag-type";
+
+type FlagData = {
+  description: string | null;
+  enabled: boolean;
+  id: string;
+  key: string;
+  name: string;
+  rolloutBps: number;
+};
+
+export function FlagGeneralForm({
+  flag,
+  flagType,
+  readOnly,
+}: {
+  flag: FlagData;
+  flagType: FlagType;
+  readOnly?: boolean;
+}) {
+  const [name, setName] = useState(flag.name);
+  const [key, setKey] = useState(flag.key);
+  const [description, setDescription] = useState(flag.description ?? "");
+  const [enabled, setEnabled] = useState(flag.enabled);
+  const [rolloutBps, setRolloutBps] = useState(flag.rolloutBps);
+  const queryClient = useQueryClient();
+
+  const updateFlag = useMutation({
+    ...updateFeatureFlagOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.getFlag(flag.id),
+      });
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.all,
+      });
+    },
+  });
+
+  const hasChanges =
+    name !== flag.name ||
+    key !== flag.key ||
+    description !== (flag.description ?? "") ||
+    enabled !== flag.enabled ||
+    rolloutBps !== flag.rolloutBps;
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>General</CardTitle>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        <div className="flex items-center justify-between">
+          <div>
+            <Label htmlFor="flag-enabled">Enabled</Label>
+            <p className="text-muted-foreground text-sm">Toggle the flag on or off globally.</p>
+          </div>
+          <Switch
+            checked={enabled}
+            disabled={readOnly}
+            id="flag-enabled"
+            onCheckedChange={setEnabled}
+          />
+        </div>
+
+        {flagType === "multivariant" ? (
+          <div className="flex items-center gap-2 rounded-md bg-muted/50 px-3 py-2 text-muted-foreground text-sm">
+            <Info className="h-4 w-4 shrink-0" />
+            <span>Rollout is managed by variant weights.</span>
+          </div>
+        ) : (
+          <div className="space-y-2">
+            <Label>Rollout Percentage</Label>
+            <div className="flex items-center gap-4">
+              <Slider
+                disabled={readOnly}
+                max={10000}
+                min={0}
+                onValueChange={([v]) => setRolloutBps(v ?? 0)}
+                step={100}
+                value={[rolloutBps]}
+              />
+              <span className="w-16 text-right text-sm">{(rolloutBps / 100).toFixed(0)}%</span>
+            </div>
+          </div>
+        )}
+
+        <Separator />
+
+        <div className="space-y-2">
+          <Label htmlFor="flag-name">Name</Label>
+          <Input
+            disabled={readOnly}
+            id="flag-name"
+            onChange={(e) => setName(e.target.value)}
+            value={name}
+          />
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="flag-key">Key</Label>
+          <Input
+            disabled={readOnly}
+            id="flag-key"
+            onChange={(e) => setKey(e.target.value)}
+            value={key}
+          />
+        </div>
+        <div className="space-y-2">
+          <Label htmlFor="flag-description">Description</Label>
+          <Textarea
+            disabled={readOnly}
+            id="flag-description"
+            onChange={(e) => setDescription(e.target.value)}
+            value={description}
+          />
+        </div>
+      </CardContent>
+      {hasChanges && !readOnly && (
+        <CardFooter className="flex justify-end gap-2 border-t pt-4">
+          <Button
+            onClick={() => {
+              setName(flag.name);
+              setKey(flag.key);
+              setDescription(flag.description ?? "");
+              setEnabled(flag.enabled);
+              setRolloutBps(flag.rolloutBps);
+            }}
+            variant="outline"
+          >
+            Reset
+          </Button>
+          <Button
+            disabled={updateFlag.isPending}
+            onClick={() =>
+              updateFlag.mutate({
+                description: description || null,
+                enabled,
+                id: flag.id,
+                key,
+                name,
+                rolloutBps,
+              })
+            }
+          >
+            {updateFlag.isPending ? "Saving..." : "Save Changes"}
+          </Button>
+        </CardFooter>
+      )}
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx b/apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx
new file mode 100644
index 000000000..65385c46d
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx
@@ -0,0 +1,161 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Input,
+  Label,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Switch,
+} from "@voidhash/ui";
+import { Plus, Trash2 } from "lucide-react";
+import { useState } from "react";
+
+import {
+  archiveFeatureFlagOverrideOptions,
+  queryKeys,
+  upsertFeatureFlagOverrideOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+type Override = {
+  forcedEnabled: boolean | null;
+  id: string;
+  identityType: number;
+  identityValue: string;
+  note: string | null;
+};
+
+const IDENTITY_TYPE_LABELS: Record<number, string> = {
+  1: "Person ID",
+  2: "App User ID",
+};
+
+export function FlagOverridesPanel({
+  featureFlagId,
+  overrides,
+}: {
+  featureFlagId: string;
+  overrides: Override[];
+}) {
+  const [identityType, setIdentityType] = useState("2");
+  const [identityValue, setIdentityValue] = useState("");
+  const [forcedEnabled, setForcedEnabled] = useState(true);
+  const [note, setNote] = useState("");
+  const queryClient = useQueryClient();
+
+  const invalidate = () => {
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.featureFlag.getFlag(featureFlagId),
+    });
+  };
+
+  const upsertOverride = useMutation({
+    ...upsertFeatureFlagOverrideOptions(),
+    onSuccess: () => {
+      invalidate();
+      setIdentityValue("");
+      setNote("");
+    },
+  });
+
+  const archiveOverride = useMutation({
+    ...archiveFeatureFlagOverrideOptions(),
+    onSuccess: invalidate,
+  });
+
+  return (
+    <div className="space-y-6">
+      <form
+        className="space-y-3 rounded-md border p-3"
+        onSubmit={(e) => {
+          e.preventDefault();
+          upsertOverride.mutate({
+            featureFlagId,
+            forcedEnabled,
+            identityType: Number.parseInt(identityType, 10),
+            identityValue,
+            note: note || undefined,
+          });
+        }}
+      >
+        <div className="flex items-end gap-3">
+          <div className="space-y-1">
+            <Label>Identity Type</Label>
+            <Select onValueChange={setIdentityType} value={identityType}>
+              <SelectTrigger className="w-36">
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectItem value="1">Person ID</SelectItem>
+                <SelectItem value="2">App User ID</SelectItem>
+              </SelectContent>
+            </Select>
+          </div>
+          <div className="flex-1 space-y-1">
+            <Label>Identity Value</Label>
+            <Input
+              onChange={(e) => setIdentityValue(e.target.value)}
+              placeholder="Enter identifier..."
+              value={identityValue}
+            />
+          </div>
+          <div className="flex items-center gap-2">
+            <Label>Force Enabled</Label>
+            <Switch checked={forcedEnabled} onCheckedChange={setForcedEnabled} />
+          </div>
+        </div>
+        <div className="flex items-end gap-3">
+          <div className="flex-1 space-y-1">
+            <Label>Note (optional)</Label>
+            <Input
+              onChange={(e) => setNote(e.target.value)}
+              placeholder="Reason for override..."
+              value={note}
+            />
+          </div>
+          <Button disabled={!identityValue || upsertOverride.isPending} size="sm" type="submit">
+            <Plus className="mr-1 h-4 w-4" />
+            Add Override
+          </Button>
+        </div>
+      </form>
+
+      {overrides.length > 0 ? (
+        <div className="divide-y rounded-md border">
+          {overrides.map((override) => (
+            <div className="flex items-center justify-between px-3 py-2" key={override.id}>
+              <div>
+                <span className="text-sm">
+                  {IDENTITY_TYPE_LABELS[override.identityType]}: {override.identityValue}
+                </span>
+                <span className="ml-3 text-muted-foreground text-xs">
+                  {override.forcedEnabled === true && "Forced ON"}
+                  {override.forcedEnabled === false && "Forced OFF"}
+                </span>
+                {override.note && (
+                  <span className="ml-2 text-muted-foreground text-xs">({override.note})</span>
+                )}
+              </div>
+              <Button
+                disabled={archiveOverride.isPending}
+                onClick={() =>
+                  archiveOverride.mutate({
+                    id: override.id,
+                  })
+                }
+                size="icon"
+                variant="ghost"
+              >
+                <Trash2 className="h-4 w-4" />
+              </Button>
+            </div>
+          ))}
+        </div>
+      ) : (
+        <p className="text-muted-foreground text-sm">No overrides configured.</p>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-record-skeleton.tsx b/apps/www/src/features/studio/feature-flags/flag-record-skeleton.tsx
new file mode 100644
index 000000000..e4b739c98
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-record-skeleton.tsx
@@ -0,0 +1,18 @@
+"use client";
+
+import { Skeleton } from "@voidhash/ui";
+
+export function FlagRecordSkeleton() {
+  return (
+    <div className="flex items-center justify-between gap-4 px-6 py-4">
+      <div className="space-y-2">
+        <Skeleton className="h-4 w-40" />
+        <Skeleton className="h-3 w-24" />
+      </div>
+      <div className="flex items-center gap-2">
+        <Skeleton className="h-5 w-16 rounded-full" />
+        <Skeleton className="h-5 w-16 rounded-full" />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-record.tsx b/apps/www/src/features/studio/feature-flags/flag-record.tsx
new file mode 100644
index 000000000..dfa1befa1
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-record.tsx
@@ -0,0 +1,66 @@
+"use client";
+import { Link } from "@tanstack/react-router";
+import type { RpcFeatureFlagListItem } from "@voidhash/rpc";
+import { Badge } from "@voidhash/ui";
+import { FlaskConical } from "lucide-react";
+
+import { FlagTypeBadgeFromCount } from "./flag-type-badge";
+
+/**
+ * A single feature-flag row in the flags list. Links to the flag detail page and
+ * surfaces the flag's type, rollout / variant summary, and enabled state.
+ */
+export function FlagRecord({
+  flag,
+  organizationSlug,
+  projectSlug,
+}: {
+  flag: typeof RpcFeatureFlagListItem.Type;
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  return (
+    <Link
+      className="group relative isolate flex items-center justify-between gap-4 px-6 py-4 transition-colors hover:bg-accent/30"
+      params={{ id: flag.id, organizationSlug, projectSlug }}
+      to="/studio/$organizationSlug/$projectSlug/flags/$id"
+    >
+      <div className="min-w-0 flex-1">
+        <div className="flex items-center gap-2">
+          <span className="truncate font-medium text-sm">{flag.name}</span>
+          {flag.internal && (
+            <Badge variant="outline">
+              <FlaskConical className="mr-1 h-3 w-3" />
+              Internal
+            </Badge>
+          )}
+        </div>
+        <div className="mt-0.5 flex items-center gap-2">
+          <code className="text-muted-foreground text-xs">{flag.key}</code>
+          {flag.description && (
+            <>
+              <span className="text-muted-foreground text-xs">·</span>
+              <span className="truncate text-muted-foreground text-xs">{flag.description}</span>
+            </>
+          )}
+        </div>
+      </div>
+      <div className="flex shrink-0 items-center gap-2">
+        <FlagTypeBadgeFromCount variantCount={flag.variantCount} />
+        {flag.variantCount === 0 ? (
+          <span className="text-muted-foreground text-sm">
+            {(flag.rolloutBps / 100).toFixed(0)}%
+          </span>
+        ) : (
+          <span className="text-muted-foreground text-xs">
+            {flag.variantCount} variant{flag.variantCount === 1 ? "" : "s"}
+          </span>
+        )}
+        <Badge variant={flag.enabled ? "default" : "secondary"}>
+          {flag.enabled ? "Enabled" : "Disabled"}
+        </Badge>
+        {flag.archivedAt && <Badge variant="outline">Archived</Badge>}
+      </div>
+    </Link>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx b/apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx
new file mode 100644
index 000000000..4b585a76c
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx
@@ -0,0 +1,181 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Input,
+  Label,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { Plus, Trash2 } from "lucide-react";
+import { useState } from "react";
+
+import {
+  archiveFeatureFlagTargetOptions,
+  queryKeys,
+  upsertFeatureFlagTargetOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+type Target = {
+  id: string;
+  identityType: number;
+  identityValue: string;
+  listType: number;
+};
+
+const IDENTITY_TYPE_LABELS: Record<number, string> = {
+  1: "Person ID",
+  2: "App User ID",
+};
+
+export function FlagTargetingPanel({
+  featureFlagId,
+  targets,
+}: {
+  featureFlagId: string;
+  targets: Target[];
+}) {
+  const [identityType, setIdentityType] = useState("2");
+  const [identityValue, setIdentityValue] = useState("");
+  const [listType, setListType] = useState("1");
+  const queryClient = useQueryClient();
+
+  const invalidate = () => {
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.featureFlag.getFlag(featureFlagId),
+    });
+  };
+
+  const upsertTarget = useMutation({
+    ...upsertFeatureFlagTargetOptions(),
+    onSuccess: () => {
+      invalidate();
+      setIdentityValue("");
+    },
+  });
+
+  const archiveTarget = useMutation({
+    ...archiveFeatureFlagTargetOptions(),
+    onSuccess: invalidate,
+  });
+
+  const allowTargets = targets.filter((t) => t.listType === 1);
+  const denyTargets = targets.filter((t) => t.listType === 2);
+
+  return (
+    <div className="space-y-6">
+      <form
+        className="flex items-end gap-3"
+        onSubmit={(e) => {
+          e.preventDefault();
+          upsertTarget.mutate({
+            featureFlagId,
+            identityType: Number.parseInt(identityType),
+            identityValue,
+            listType: Number.parseInt(listType),
+          });
+        }}
+      >
+        <div className="space-y-1">
+          <Label>List</Label>
+          <Select onValueChange={setListType} value={listType}>
+            <SelectTrigger className="w-28">
+              <SelectValue />
+            </SelectTrigger>
+            <SelectContent>
+              <SelectItem value="1">Allow</SelectItem>
+              <SelectItem value="2">Deny</SelectItem>
+            </SelectContent>
+          </Select>
+        </div>
+        <div className="space-y-1">
+          <Label>Identity Type</Label>
+          <Select onValueChange={setIdentityType} value={identityType}>
+            <SelectTrigger className="w-36">
+              <SelectValue />
+            </SelectTrigger>
+            <SelectContent>
+              <SelectItem value="1">Person ID</SelectItem>
+              <SelectItem value="2">App User ID</SelectItem>
+            </SelectContent>
+          </Select>
+        </div>
+        <div className="flex-1 space-y-1">
+          <Label>Identity Value</Label>
+          <Input
+            onChange={(e) => setIdentityValue(e.target.value)}
+            placeholder="Enter identifier..."
+            value={identityValue}
+          />
+        </div>
+        <Button disabled={!identityValue || upsertTarget.isPending} size="sm" type="submit">
+          <Plus className="mr-1 h-4 w-4" />
+          Add
+        </Button>
+      </form>
+
+      {allowTargets.length > 0 && (
+        <div>
+          <h4 className="mb-2 font-medium text-sm">Allow List</h4>
+          <div className="divide-y rounded-md border">
+            {allowTargets.map((target) => (
+              <div className="flex items-center justify-between px-3 py-2" key={target.id}>
+                <span className="text-sm">
+                  {IDENTITY_TYPE_LABELS[target.identityType]}: {target.identityValue}
+                </span>
+                <Button
+                  disabled={archiveTarget.isPending}
+                  onClick={() =>
+                    archiveTarget.mutate({
+                      id: target.id,
+                    })
+                  }
+                  size="icon"
+                  variant="ghost"
+                >
+                  <Trash2 className="h-4 w-4" />
+                </Button>
+              </div>
+            ))}
+          </div>
+        </div>
+      )}
+
+      {denyTargets.length > 0 && (
+        <div>
+          <h4 className="mb-2 font-medium text-sm">Deny List</h4>
+          <div className="divide-y rounded-md border">
+            {denyTargets.map((target) => (
+              <div className="flex items-center justify-between px-3 py-2" key={target.id}>
+                <span className="text-sm">
+                  {IDENTITY_TYPE_LABELS[target.identityType]}: {target.identityValue}
+                </span>
+                <Button
+                  disabled={archiveTarget.isPending}
+                  onClick={() =>
+                    archiveTarget.mutate({
+                      id: target.id,
+                    })
+                  }
+                  size="icon"
+                  variant="ghost"
+                >
+                  <Trash2 className="h-4 w-4" />
+                </Button>
+              </div>
+            ))}
+          </div>
+        </div>
+      )}
+
+      {allowTargets.length === 0 && denyTargets.length === 0 && (
+        <p className="text-muted-foreground text-sm">
+          No targeting rules configured. The flag will be evaluated based on rollout percentage
+          only.
+        </p>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-type-badge.tsx b/apps/www/src/features/studio/feature-flags/flag-type-badge.tsx
new file mode 100644
index 000000000..b19c5c2b9
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-type-badge.tsx
@@ -0,0 +1,34 @@
+import { Badge } from "@voidhash/ui";
+import { Braces, Layers, ToggleLeft } from "lucide-react";
+
+import {
+  type FlagType,
+  FLAG_TYPE_LABELS,
+  deriveFlagType,
+  deriveFlagTypeFromCount,
+} from "./flag-type";
+
+const FLAG_TYPE_ICONS: Record<FlagType, React.ElementType> = {
+  boolean: ToggleLeft,
+  json: Braces,
+  multivariant: Layers,
+};
+
+export function FlagTypeBadge({ flagType }: { flagType: FlagType }) {
+  const Icon = FLAG_TYPE_ICONS[flagType];
+
+  return (
+    <Badge variant="outline">
+      <Icon className="mr-1 h-3 w-3" />
+      {FLAG_TYPE_LABELS[flagType]}
+    </Badge>
+  );
+}
+
+export function FlagTypeBadgeFromVariants({ variants }: { variants: { payload?: unknown }[] }) {
+  return <FlagTypeBadge flagType={deriveFlagType(variants)} />;
+}
+
+export function FlagTypeBadgeFromCount({ variantCount }: { variantCount: number }) {
+  return <FlagTypeBadge flagType={deriveFlagTypeFromCount(variantCount)} />;
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-type.ts b/apps/www/src/features/studio/feature-flags/flag-type.ts
new file mode 100644
index 000000000..157fa1b1c
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-type.ts
@@ -0,0 +1,28 @@
+export type FlagType = "boolean" | "multivariant" | "json";
+
+export function deriveFlagType(variants: readonly { payload?: unknown }[]): FlagType {
+  if (variants.length === 0) {
+    return "boolean";
+  }
+  if (
+    variants.length === 1 &&
+    variants[0]?.payload !== null &&
+    variants[0]?.payload !== undefined
+  ) {
+    return "json";
+  }
+  return "multivariant";
+}
+
+export function deriveFlagTypeFromCount(variantCount: number): FlagType {
+  if (variantCount === 0) {
+    return "boolean";
+  }
+  return "multivariant";
+}
+
+export const FLAG_TYPE_LABELS: Record<FlagType, string> = {
+  boolean: "Boolean",
+  json: "JSON",
+  multivariant: "Multi-variant",
+};
diff --git a/apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx b/apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx
new file mode 100644
index 000000000..e5c50c326
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx
@@ -0,0 +1,312 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+  Input,
+  Label,
+  Textarea,
+} from "@voidhash/ui";
+import { Plus, Trash2 } from "lucide-react";
+import { useState } from "react";
+
+import { queryKeys, updateFeatureFlagVariantsOptions } from "@/features/studio/lib/tanstack-query";
+
+import type { FlagType } from "./flag-type";
+
+type Variant = {
+  _id: string;
+  key: string;
+  name: string;
+  payload?: unknown;
+  weightBps: number;
+};
+
+type FeatureFlagVariant = {
+  key: string;
+  name: string;
+  payload: unknown;
+  weightBps: number;
+};
+
+const VARIANT_COLORS = [
+  "bg-blue-500",
+  "bg-emerald-500",
+  "bg-amber-500",
+  "bg-purple-500",
+  "bg-rose-500",
+  "bg-cyan-500",
+  "bg-orange-500",
+  "bg-indigo-500",
+];
+
+let variantCounter = 0;
+
+export function FlagVariantsPanel({
+  featureFlagId,
+  flagType,
+  readOnly,
+  variants,
+}: {
+  featureFlagId: string;
+  flagType: FlagType;
+  readOnly?: boolean;
+  variants: FeatureFlagVariant[];
+}) {
+  const [localVariants, setLocalVariants] = useState<Variant[]>(
+    variants.map((variant) => ({
+      _id: `v-${variantCounter++}`,
+      key: variant.key,
+      name: variant.name,
+      payload: variant.payload,
+      weightBps: variant.weightBps,
+    })),
+  );
+  const queryClient = useQueryClient();
+
+  const updateVariants = useMutation({
+    ...updateFeatureFlagVariantsOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.getFlag(featureFlagId),
+      });
+    },
+  });
+
+  const totalWeight = localVariants.reduce((sum, variant) => sum + variant.weightBps, 0);
+  const isValid = localVariants.length === 0 || totalWeight === 10000;
+  const isJsonMode = flagType === "json";
+
+  const addVariant = () => {
+    setLocalVariants([
+      ...localVariants,
+      { _id: `v-${variantCounter++}`, key: "", name: "", weightBps: 0 },
+    ]);
+  };
+
+  const removeVariant = (index: number) => {
+    setLocalVariants(localVariants.filter((_, variantIndex) => variantIndex !== index));
+  };
+
+  const updateVariant = (index: number, updates: Partial<Variant>) => {
+    setLocalVariants(
+      localVariants.map((variant, variantIndex) =>
+        variantIndex === index ? { ...variant, ...updates } : variant,
+      ),
+    );
+  };
+
+  const distributeEvenly = () => {
+    if (localVariants.length === 0) {
+      return;
+    }
+
+    const baseWeight = Math.floor(10000 / localVariants.length);
+    const remainder = 10000 - baseWeight * localVariants.length;
+    setLocalVariants(
+      localVariants.map((variant, index) => ({
+        ...variant,
+        weightBps: baseWeight + (index < remainder ? 1 : 0),
+      })),
+    );
+  };
+
+  return (
+    <Card>
+      <CardHeader className="flex flex-row items-center justify-between">
+        <CardTitle>Variants</CardTitle>
+        <div className="flex gap-2">
+          {localVariants.length > 1 && (
+            <Button disabled={readOnly} onClick={distributeEvenly} size="sm" variant="outline">
+              Distribute Evenly
+            </Button>
+          )}
+          {!isJsonMode && (
+            <Button disabled={readOnly} onClick={addVariant} size="sm" variant="outline">
+              <Plus className="mr-1 h-4 w-4" />
+              Add Variant
+            </Button>
+          )}
+        </div>
+      </CardHeader>
+      <CardContent>
+        {localVariants.length === 0 ? (
+          <div className="space-y-2">
+            <p className="text-muted-foreground text-sm">
+              No variants configured. The flag behaves as a boolean toggle.
+            </p>
+            {isJsonMode && (
+              <Button
+                disabled={readOnly}
+                onClick={() => {
+                  setLocalVariants([
+                    {
+                      _id: `v-${variantCounter++}`,
+                      key: "value",
+                      name: "Value",
+                      payload: {},
+                      weightBps: 10000,
+                    },
+                  ]);
+                }}
+                size="sm"
+                variant="outline"
+              >
+                <Plus className="mr-1 h-4 w-4" />
+                Add JSON Value
+              </Button>
+            )}
+          </div>
+        ) : (
+          <div className="space-y-4">
+            {isJsonMode && (
+              <p className="text-muted-foreground text-sm">
+                JSON flags return a single value to the SDK.
+              </p>
+            )}
+
+            {localVariants.map((variant, index) => (
+              <div className="space-y-3 rounded-md border p-3" key={variant._id}>
+                <div className="flex items-end gap-3">
+                  <div className="flex-1 space-y-1">
+                    <Label>Name</Label>
+                    <Input
+                      disabled={readOnly}
+                      onChange={(event) =>
+                        updateVariant(index, {
+                          name: event.target.value,
+                        })
+                      }
+                      placeholder="Variant name"
+                      value={variant.name}
+                    />
+                  </div>
+                  <div className="flex-1 space-y-1">
+                    <Label>Key</Label>
+                    <Input
+                      disabled={readOnly}
+                      onChange={(event) =>
+                        updateVariant(index, {
+                          key: event.target.value,
+                        })
+                      }
+                      placeholder="variant-key"
+                      value={variant.key}
+                    />
+                  </div>
+                  {!isJsonMode && (
+                    <div className="w-24 space-y-1">
+                      <Label>Weight</Label>
+                      <div className="relative">
+                        <Input
+                          className="pr-6"
+                          disabled={readOnly}
+                          onChange={(event) => {
+                            const percent = Number.parseFloat(event.target.value) || 0;
+                            updateVariant(index, {
+                              weightBps: Math.round(percent * 100),
+                            });
+                          }}
+                          step="0.1"
+                          type="number"
+                          value={(variant.weightBps / 100).toFixed(1)}
+                        />
+                        <span className="pointer-events-none absolute top-1/2 right-2 -translate-y-1/2 text-muted-foreground text-sm">
+                          %
+                        </span>
+                      </div>
+                    </div>
+                  )}
+                  {!isJsonMode && (
+                    <Button
+                      disabled={readOnly}
+                      onClick={() => removeVariant(index)}
+                      size="icon"
+                      variant="ghost"
+                    >
+                      <Trash2 className="h-4 w-4" />
+                    </Button>
+                  )}
+                </div>
+
+                {isJsonMode && (
+                  <div className="space-y-1">
+                    <Label>Payload (JSON)</Label>
+                    <Textarea
+                      className="font-mono text-sm"
+                      disabled={readOnly}
+                      onChange={(event) => {
+                        try {
+                          const parsed = JSON.parse(event.target.value);
+                          updateVariant(index, {
+                            payload: parsed,
+                          });
+                        } catch {
+                          // Allow typing invalid JSON temporarily
+                        }
+                      }}
+                      placeholder='{ "key": "value" }'
+                      rows={4}
+                      value={
+                        variant.payload !== null && variant.payload !== undefined
+                          ? JSON.stringify(variant.payload, null, 2)
+                          : ""
+                      }
+                    />
+                  </div>
+                )}
+
+                {!isJsonMode && variant.weightBps > 0 && (
+                  <div
+                    className={`h-1 rounded-full ${VARIANT_COLORS[index % VARIANT_COLORS.length]}`}
+                    style={{
+                      width: `${Math.min((variant.weightBps / 10000) * 100, 100)}%`,
+                    }}
+                  />
+                )}
+              </div>
+            ))}
+
+            {!isJsonMode && localVariants.length > 0 && (
+              <div className="space-y-2">
+                <div className="flex h-2 overflow-hidden rounded-full bg-muted">
+                  {localVariants.map((variant, index) => (
+                    <div
+                      className={`${VARIANT_COLORS[index % VARIANT_COLORS.length]} transition-all`}
+                      key={variant._id}
+                      style={{
+                        width: `${(variant.weightBps / 10000) * 100}%`,
+                      }}
+                    />
+                  ))}
+                </div>
+                <div className="text-sm">
+                  <span className={isValid ? "text-muted-foreground" : "text-destructive"}>
+                    Total: {(totalWeight / 100).toFixed(1)}%
+                  </span>
+                  {!isValid && <span className="ml-2 text-destructive">— must sum to 100%</span>}
+                </div>
+              </div>
+            )}
+          </div>
+        )}
+      </CardContent>
+      <CardFooter className="flex justify-end border-t pt-4">
+        <Button
+          disabled={readOnly || !isValid || updateVariants.isPending}
+          onClick={() =>
+            updateVariants.mutate({
+              featureFlagId,
+              variants: localVariants.map(({ _id: _variantId, ...variant }) => variant),
+            })
+          }
+        >
+          {updateVariants.isPending ? "Saving..." : "Save Variants"}
+        </Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx b/apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx
new file mode 100644
index 000000000..303ad2362
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx
@@ -0,0 +1,22 @@
+"use client";
+
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
+
+import { CreateFlagModal } from "./create-flag-modal";
+
+export function FlagsPageEmptyState({ projectId }: { projectId: string }) {
+  return (
+    <Card className="mx-auto w-full max-w-5xl text-center">
+      <CardHeader>
+        <CardTitle>No feature flags yet</CardTitle>
+        <CardDescription className="mx-auto max-w-md text-balance">
+          Feature flags let you roll out changes gradually, target specific people, and serve
+          multiple variants without shipping new code. Create your first flag to get started.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <CreateFlagModal projectId={projectId} />
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx b/apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx
new file mode 100644
index 000000000..5923e4142
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx
@@ -0,0 +1,21 @@
+import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+
+import { FlagRecordSkeleton } from "./flag-record-skeleton";
+
+export function FlagsPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Feature Flags</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        <Card className="grid gap-0 divide-y p-0">
+          {Array.from({ length: 4 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <FlagRecordSkeleton key={index} />
+          ))}
+        </Card>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/person-flag-overrides-panel.tsx b/apps/www/src/features/studio/feature-flags/person-flag-overrides-panel.tsx
new file mode 100644
index 000000000..a31b82261
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/person-flag-overrides-panel.tsx
@@ -0,0 +1,193 @@
+import { useMutation, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
+import {
+  Badge,
+  Button,
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  Input,
+  Label,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Switch,
+} from "@voidhash/ui";
+import { Plus, Trash2 } from "lucide-react";
+import { useState } from "react";
+
+import {
+  archiveFeatureFlagOverrideOptions,
+  listFeatureFlagOverridesByPersonOptions,
+  listFeatureFlagsOptions,
+  queryKeys,
+  upsertFeatureFlagOverrideOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+export function PersonFlagOverridesPanel({
+  personId,
+  projectId,
+}: {
+  personId: string;
+  projectId: string;
+}) {
+  const [selectedFlagId, setSelectedFlagId] = useState("");
+  const [forcedEnabled, setForcedEnabled] = useState(true);
+  const [note, setNote] = useState("");
+  const queryClient = useQueryClient();
+
+  const { data: overrides } = useSuspenseQuery(
+    listFeatureFlagOverridesByPersonOptions({
+      identityType: 1,
+      identityValue: personId,
+      projectId,
+    }),
+  );
+
+  const { data: flags } = useSuspenseQuery(listFeatureFlagsOptions({ projectId }));
+
+  const flagMap = new Map(flags.map((flag) => [flag.id, flag]));
+
+  const invalidate = () => {
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.featureFlag.overridesByPerson({
+        identityType: 1,
+        identityValue: personId,
+        projectId,
+      }),
+    });
+  };
+
+  const upsertOverride = useMutation({
+    ...upsertFeatureFlagOverrideOptions(),
+    onSuccess: () => {
+      invalidate();
+      setSelectedFlagId("");
+      setNote("");
+    },
+  });
+
+  const archiveOverride = useMutation({
+    ...archiveFeatureFlagOverrideOptions(),
+    onSuccess: invalidate,
+  });
+
+  const overriddenFlagIds = new Set(overrides.map((o) => o.featureFlagId));
+  const availableFlags = flags.filter(
+    (f) => !overriddenFlagIds.has(f.id) && !f.internal && !f.archivedAt,
+  );
+
+  return (
+    <Card className="gap-0 overflow-hidden pb-0">
+      <CardHeader className="pb-4">
+        <CardTitle className="flex items-center gap-4">Feature Flag Overrides</CardTitle>
+      </CardHeader>
+      <CardContent className="divide-y divide-border border-border border-t px-0">
+        {overrides.length > 0 ? (
+          <>
+            {overrides.map((override) => {
+              const flag = flagMap.get(override.featureFlagId);
+              return (
+                <div className="flex items-center justify-between px-4 py-2.5" key={override.id}>
+                  <div className="min-w-0 flex-1">
+                    <div className="flex items-center gap-2">
+                      <span className="font-medium text-sm">{flag?.name ?? "Unknown flag"}</span>
+                      {flag?.key && (
+                        <span className="font-mono text-muted-foreground text-xs">{flag.key}</span>
+                      )}
+                      <Badge variant={override.forcedEnabled ? "default" : "secondary"}>
+                        {override.forcedEnabled ? "Forced ON" : "Forced OFF"}
+                      </Badge>
+                    </div>
+                    {override.note && (
+                      <p className="mt-0.5 text-muted-foreground text-xs">{override.note}</p>
+                    )}
+                  </div>
+                  <Button
+                    disabled={archiveOverride.isPending}
+                    onClick={() =>
+                      archiveOverride.mutate({
+                        id: override.id,
+                      })
+                    }
+                    size="icon"
+                    variant="ghost"
+                  >
+                    <Trash2 className="h-4 w-4" />
+                  </Button>
+                </div>
+              );
+            })}
+          </>
+        ) : (
+          <div className="flex h-full flex-col items-center justify-center py-6">
+            <div className="text-muted-foreground text-sm">
+              No feature flag overrides for this person.
+            </div>
+          </div>
+        )}
+
+        {availableFlags.length > 0 && (
+          <form
+            className="space-y-3 px-4 py-3"
+            onSubmit={(e) => {
+              e.preventDefault();
+              if (!selectedFlagId) {
+                return;
+              }
+              upsertOverride.mutate({
+                featureFlagId: selectedFlagId,
+                forcedEnabled,
+                identityType: 1,
+                identityValue: personId,
+                note: note || undefined,
+              });
+            }}
+          >
+            <div className="flex items-end gap-3">
+              <div className="flex-1 space-y-1">
+                <Label>Flag</Label>
+                <Select onValueChange={setSelectedFlagId} value={selectedFlagId}>
+                  <SelectTrigger>
+                    <SelectValue placeholder="Select a flag..." />
+                  </SelectTrigger>
+                  <SelectContent>
+                    {availableFlags.map((flag) => (
+                      <SelectItem key={flag.id} value={flag.id}>
+                        {flag.name}
+                      </SelectItem>
+                    ))}
+                  </SelectContent>
+                </Select>
+              </div>
+              <div className="flex items-center gap-2">
+                <Label>Force Enabled</Label>
+                <Switch checked={forcedEnabled} onCheckedChange={setForcedEnabled} />
+              </div>
+            </div>
+            <div className="flex items-end gap-3">
+              <div className="flex-1 space-y-1">
+                <Label>Note (optional)</Label>
+                <Input
+                  onChange={(e) => setNote(e.target.value)}
+                  placeholder="Reason for override..."
+                  value={note}
+                />
+              </div>
+              <Button
+                disabled={!selectedFlagId || upsertOverride.isPending}
+                size="sm"
+                type="submit"
+              >
+                <Plus className="mr-1 h-4 w-4" />
+                Add Override
+              </Button>
+            </div>
+          </form>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/feedback/feedback-button.tsx b/apps/www/src/features/studio/feedback/feedback-button.tsx
new file mode 100644
index 000000000..2062b8591
--- /dev/null
+++ b/apps/www/src/features/studio/feedback/feedback-button.tsx
@@ -0,0 +1,184 @@
+"use client";
+
+import { useMutation } from "@tanstack/react-query";
+import { useLocation, useParams } from "@tanstack/react-router";
+import {
+  FeedbackSentiment,
+  type FeedbackSentimentValue,
+  FeedbackTopicLabels,
+  type FeedbackTopicValue,
+  FeedbackTopicValues,
+} from "@voidhash/lib";
+import {
+  Button,
+  cn,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Textarea,
+} from "@voidhash/ui";
+import { Annoyed, Frown, Laugh, type LucideIcon, Smile } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { submitFeedbackOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+/** Sentiment scale rendered as lucide icons, mapped to the ordinal 1–4 value. */
+const SENTIMENT_OPTIONS: ReadonlyArray<{
+  value: FeedbackSentimentValue;
+  label: string;
+  Icon: LucideIcon;
+}> = [
+  { value: FeedbackSentiment.Frown, label: "Very unhappy", Icon: Frown },
+  { value: FeedbackSentiment.Annoyed, label: "Unhappy", Icon: Annoyed },
+  { value: FeedbackSentiment.Smile, label: "Happy", Icon: Smile },
+  { value: FeedbackSentiment.Laugh, label: "Very happy", Icon: Laugh },
+];
+
+/**
+ * Navbar "Feedback" button. Opens a compact popover (not a modal) with a
+ * product-area topic select, a message field, and an optional sentiment. On
+ * submit it captures the current user (via `useAuth`), the org/project (resolved
+ * from the route params), and the current page path — no extra network calls —
+ * and relays them through the `SubmitFeedback` RPC, which persists the row and
+ * posts it to Slack.
+ */
+export function FeedbackButton() {
+  const { user } = useAuth();
+  const params = useParams({ strict: false }) as {
+    organizationSlug?: string;
+    projectSlug?: string;
+  };
+  const pathname = useLocation({ select: (location) => location.pathname });
+
+  const [open, setOpen] = useState(false);
+  const [topic, setTopic] = useState<FeedbackTopicValue | undefined>(undefined);
+  const [sentiment, setSentiment] = useState<FeedbackSentimentValue | null>(null);
+  const [message, setMessage] = useState("");
+
+  const { mutate, status } = useMutation({
+    ...submitFeedbackOptions(),
+    onError: () => {
+      toast.error("Failed to send feedback. Please try again.");
+    },
+    onSuccess: () => {
+      toast.success("Thanks for your feedback!");
+      setMessage("");
+      setSentiment(null);
+      setTopic(undefined);
+      setOpen(false);
+    },
+  });
+
+  const isPending = status === "pending";
+  const trimmedMessage = message.trim();
+  const canSubmit = Boolean(topic) && trimmedMessage.length > 0 && !isPending;
+
+  const handleSubmit = () => {
+    if (!topic || !trimmedMessage || isPending) {
+      return;
+    }
+    const organization = params.organizationSlug
+      ? user.organizations.find((o) => o.slug === params.organizationSlug)
+      : undefined;
+    const project =
+      params.organizationSlug && params.projectSlug
+        ? CurrentUser.getProjectBySlugs(user, params.organizationSlug, params.projectSlug)
+        : undefined;
+
+    mutate({
+      topic,
+      message: trimmedMessage,
+      sentiment: sentiment ?? undefined,
+      organizationId: organization?.id,
+      projectId: project?.id ?? undefined,
+      pathname,
+      userAgent: typeof navigator === "undefined" ? undefined : navigator.userAgent,
+    });
+  };
+
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <PopoverTrigger asChild>
+        <Button variant="outline">Feedback</Button>
+      </PopoverTrigger>
+      <PopoverContent align="end" className="w-96 overflow-hidden p-0">
+        <form
+          onSubmit={(event) => {
+            event.preventDefault();
+            handleSubmit();
+          }}
+        >
+          <div className="flex flex-col gap-2 p-2">
+            <Select
+              onValueChange={(value) => setTopic(value as FeedbackTopicValue)}
+              value={topic}
+            >
+              <SelectTrigger className="w-full" id="feedback-topic">
+                <SelectValue placeholder="Select a topic…" />
+              </SelectTrigger>
+              <SelectContent>
+                {FeedbackTopicValues.map((value) => (
+                  <SelectItem key={value} value={value}>
+                    {FeedbackTopicLabels[value]}
+                  </SelectItem>
+                ))}
+              </SelectContent>
+            </Select>
+
+            <Textarea
+              autoFocus
+              aria-label="Your feedback"
+              className="min-h-32 resize-none"
+              onChange={(event) => setMessage(event.target.value)}
+              onKeyDown={(event) => {
+                // ⌘/Ctrl + Enter submits, matching common feedback widgets.
+                if ((event.metaKey || event.ctrlKey) && event.key === "Enter") {
+                  event.preventDefault();
+                  handleSubmit();
+                }
+              }}
+              placeholder="Your feedback…"
+              value={message}
+            />
+          </div>
+
+          <div className="flex items-center justify-between border-t px-2 py-2">
+            <div className="flex items-center gap-0.5">
+              {SENTIMENT_OPTIONS.map(({ value, label, Icon }) => {
+                const active = sentiment === value;
+                return (
+                  <button
+                    aria-label={label}
+                    aria-pressed={active}
+                    className={cn(
+                      "flex h-8 w-8 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent hover:text-foreground",
+                      active && "bg-accent text-foreground",
+                    )}
+                    key={value}
+                    onClick={() => setSentiment(active ? null : value)}
+                    title={label}
+                    type="button"
+                  >
+                    <Icon className="h-4 w-4" />
+                  </button>
+                );
+              })}
+            </div>
+
+            <Button disabled={!canSubmit} size="sm" type="submit">
+              {isPending ? "Sending…" : "Send"}
+            </Button>
+          </div>
+        </form>
+      </PopoverContent>
+    </Popover>
+  );
+}
diff --git a/apps/www/src/features/studio/lib/basepath.ts b/apps/www/src/features/studio/lib/basepath.ts
new file mode 100644
index 000000000..54c55a2ef
--- /dev/null
+++ b/apps/www/src/features/studio/lib/basepath.ts
@@ -0,0 +1 @@
+export { STUDIO_PATH as BASE_PATH } from "@/lib/paths";
diff --git a/apps/www/src/features/studio/lib/effect-query.ts b/apps/www/src/features/studio/lib/effect-query.ts
new file mode 100644
index 000000000..1685f8814
--- /dev/null
+++ b/apps/www/src/features/studio/lib/effect-query.ts
@@ -0,0 +1,9 @@
+export {
+  LiveLayer,
+  VoidhashRpc,
+  eq,
+  managedRuntime,
+  queryClient,
+  RpcProtocolLive,
+  type EffectQueryType,
+} from "@/lib/effect-query";
diff --git a/apps/www/src/features/studio/lib/env.ts b/apps/www/src/features/studio/lib/env.ts
new file mode 100644
index 000000000..bd7d1aa99
--- /dev/null
+++ b/apps/www/src/features/studio/lib/env.ts
@@ -0,0 +1 @@
+export { env } from "@/lib/env";
diff --git a/apps/www/src/features/studio/lib/nextjs.ts b/apps/www/src/features/studio/lib/nextjs.ts
new file mode 100644
index 000000000..c45963f12
--- /dev/null
+++ b/apps/www/src/features/studio/lib/nextjs.ts
@@ -0,0 +1,7 @@
+import type { useRouter } from "next/navigation";
+
+export function nextRenderRedirect(router: ReturnType<typeof useRouter>, path: string) {
+  setTimeout(() => {
+    router.push(path);
+  }, 1);
+}
diff --git a/apps/www/src/features/studio/lib/payment-providers/app-store.ts b/apps/www/src/features/studio/lib/payment-providers/app-store.ts
new file mode 100644
index 000000000..4ed330377
--- /dev/null
+++ b/apps/www/src/features/studio/lib/payment-providers/app-store.ts
@@ -0,0 +1,105 @@
+import { AppleLogo } from "@/features/studio/projects/settings/payment-providers/logos/apple-logo";
+import { z } from "zod/v3";
+
+import { createPaymentProvider } from "./core";
+import type { PaymentProviderProductEditorSheetSection } from "./types";
+
+export const appleAppStoreGlobalConfigurationSchema = z.object({
+  appAppleId: z
+    .string()
+    .min(1, {
+      message: "App Apple ID is required",
+    })
+    .regex(/^[1-9]\d{0,14}$/, {
+      message: "App Apple ID must be a positive numeric Apple app identifier",
+    }),
+  bundleId: z.string().min(1, {
+    message: "Bundle ID is required",
+  }),
+  inAppPurchaseKeyIssuerId: z.string().min(1, {
+    message: "Issuer ID is required",
+  }),
+  inAppPurchaseKeyId: z.string().min(1, {
+    message: "Key ID is required",
+  }),
+  inAppPurchasePrivateKey: z.string().min(1, {
+    message: "Private key is required",
+  }),
+  appStoreConnectApiIssuerId: z.string().min(1, {
+    message: "Issuer ID is required",
+  }),
+  appStoreConnectApiKeyId: z.string().min(1, {
+    message: "Key ID is required",
+  }),
+  appStoreConnectApiVendorNumber: z.string().min(1, {
+    message: "Vendor Number is required",
+  }),
+  appleServerNotificationForwardingUrl: z
+    .string()
+    .url({ message: "Forwarding URL must be a valid URL" })
+    .or(z.literal("")),
+  appleSmallBusinessProgramStartDate: z.string().optional(),
+  appleSmallBusinessProgramHasEndDate: z.boolean(),
+  appleSmallBusinessProgramEndDate: z.string().optional(),
+  storeKitSubscriptionOfferKey: z.string().optional(),
+  storeKitTestingFrameworkCertificate: z.string().optional(),
+  trackNewPurchasesFromAppleServerNotifications: z.boolean(),
+});
+
+export type AppleAppStoreGlobalConfiguration = z.infer<
+  typeof appleAppStoreGlobalConfigurationSchema
+>;
+
+const appStoreProductConfigurationSchema = z.object({
+  productId: z.string().min(1, {
+    message: "Product ID is required",
+  }),
+});
+
+export const appleAppStore = createPaymentProvider({
+  defaultGlobalConfiguration: {
+    appAppleId: "",
+    bundleId: "",
+    inAppPurchaseKeyIssuerId: "",
+    inAppPurchaseKeyId: "",
+    inAppPurchasePrivateKey: "",
+    appStoreConnectApiIssuerId: "",
+    appStoreConnectApiKeyId: "",
+    appStoreConnectApiVendorNumber: "",
+    appleServerNotificationForwardingUrl: "",
+    appleSmallBusinessProgramStartDate: "",
+    appleSmallBusinessProgramHasEndDate: false,
+    appleSmallBusinessProgramEndDate: "",
+    storeKitSubscriptionOfferKey: "",
+    storeKitTestingFrameworkCertificate: "",
+    trackNewPurchasesFromAppleServerNotifications: true,
+  },
+  defaultProductConfiguration: {
+    productId: "",
+  },
+  getProductConfigurationSheet(): {
+    sections: PaymentProviderProductEditorSheetSection[];
+  } {
+    return {
+      sections: [
+        {
+          input: {
+            placeholder: "example_app.1_month_subscription",
+            type: "text",
+          },
+          key: "productId",
+          label: "Product ID",
+          name: "productId",
+          type: "text-input",
+        },
+      ],
+    };
+  },
+  globalConfigurationSchema: appleAppStoreGlobalConfigurationSchema,
+  id: "apple-app-store",
+  logo: AppleLogo,
+  productConfigurationKeyProperties: ["productId"],
+  productConfigurationSchema: appStoreProductConfigurationSchema,
+  title: "Apple App Store",
+  type: "native",
+});
diff --git a/apps/www/src/features/studio/lib/payment-providers/core.ts b/apps/www/src/features/studio/lib/payment-providers/core.ts
new file mode 100644
index 000000000..30bc8f42f
--- /dev/null
+++ b/apps/www/src/features/studio/lib/payment-providers/core.ts
@@ -0,0 +1,10 @@
+import type { z } from "zod/v3";
+
+import type { PaymentProvider } from "./types";
+
+export const createPaymentProvider = <
+  TGlobalConfigurationSchema extends z.ZodSchema,
+  TProductConfigurationSchema extends z.ZodSchema,
+>(
+  options: PaymentProvider<TGlobalConfigurationSchema, TProductConfigurationSchema>,
+) => options;
diff --git a/apps/www/src/features/studio/lib/payment-providers/google-play.ts b/apps/www/src/features/studio/lib/payment-providers/google-play.ts
new file mode 100644
index 000000000..58949ffff
--- /dev/null
+++ b/apps/www/src/features/studio/lib/payment-providers/google-play.ts
@@ -0,0 +1,120 @@
+import { GooglePlayLogo } from "@/features/studio/projects/settings/payment-providers/logos/google-play-logo";
+import { z } from "zod/v3";
+
+import { createPaymentProvider } from "./core";
+import type { PaymentProviderProductEditorSheetSection } from "./types";
+
+const PACKAGE_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9_]*(\.[A-Za-z][A-Za-z0-9_]*)+$/;
+const ENCRYPTED_SECRET_PREFIX = "v1.aesgcm:";
+const RTDN_TOPIC_PATTERN = /^projects\/[^/]+\/topics\/[^/]+$/;
+
+const isGoogleServiceAccountKey = (value: string): boolean => {
+  if (value.startsWith(ENCRYPTED_SECRET_PREFIX)) {
+    return true;
+  }
+
+  try {
+    const parsed = JSON.parse(value) as Record<string, unknown>;
+    return (
+      parsed.type === "service_account" &&
+      typeof parsed.project_id === "string" &&
+      parsed.project_id.length > 0 &&
+      typeof parsed.private_key_id === "string" &&
+      parsed.private_key_id.length > 0 &&
+      typeof parsed.private_key === "string" &&
+      parsed.private_key.length > 0 &&
+      typeof parsed.client_email === "string" &&
+      parsed.client_email.length > 0 &&
+      typeof parsed.client_id === "string" &&
+      parsed.client_id.length > 0
+    );
+  } catch {
+    return false;
+  }
+};
+
+export const googlePlayGlobalConfigurationSchema = z.object({
+  googleRealTimeDeveloperNotificationForwardingUrl: z
+    .string()
+    .url({ message: "Forwarding URL must be a valid URL" })
+    .or(z.literal("")),
+  googleRealTimeDeveloperNotificationTopicName: z
+    .string()
+    .regex(RTDN_TOPIC_PATTERN, {
+      message: "Topic name must use projects/{project}/topics/{topic}",
+    })
+    .or(z.literal("")),
+  packageName: z
+    .string()
+    .min(1, {
+      message: "Package name is required",
+    })
+    .regex(PACKAGE_NAME_PATTERN, {
+      message: "Package name must be a valid Android package name",
+    }),
+  serviceAccountKey: z
+    .string()
+    .min(1, {
+      message: "Service account key file is required",
+    })
+    .refine(isGoogleServiceAccountKey, {
+      message: "Service account key file must be a Google service account JSON",
+    }),
+});
+
+export type GooglePlayGlobalConfiguration = z.infer<typeof googlePlayGlobalConfigurationSchema>;
+
+const googlePlayProductConfigurationSchema = z.object({
+  basePlanId: z.string().optional(),
+  productId: z.string().min(1, {
+    message: "Product ID is required",
+  }),
+});
+
+export const googlePlay = createPaymentProvider({
+  defaultGlobalConfiguration: {
+    googleRealTimeDeveloperNotificationForwardingUrl: "",
+    googleRealTimeDeveloperNotificationTopicName: "",
+    packageName: "",
+    serviceAccountKey: "",
+  },
+  defaultProductConfiguration: {
+    basePlanId: "",
+    productId: "",
+  },
+  getProductConfigurationSheet(): {
+    sections: PaymentProviderProductEditorSheetSection[];
+  } {
+    return {
+      sections: [
+        {
+          input: {
+            placeholder: "monthly_subscription",
+            type: "text",
+          },
+          key: "productId",
+          label: "Product ID",
+          name: "productId",
+          type: "text-input",
+        },
+        {
+          input: {
+            placeholder: "monthly-base-plan",
+            type: "text",
+          },
+          key: "basePlanId",
+          label: "Base Plan ID",
+          name: "basePlanId",
+          type: "text-input",
+        },
+      ],
+    };
+  },
+  globalConfigurationSchema: googlePlayGlobalConfigurationSchema,
+  id: "google-play",
+  logo: GooglePlayLogo,
+  productConfigurationKeyProperties: ["productId", "basePlanId"],
+  productConfigurationSchema: googlePlayProductConfigurationSchema,
+  title: "Google Play",
+  type: "native",
+});
diff --git a/apps/www/src/features/studio/lib/payment-providers/payment-providers.ts b/apps/www/src/features/studio/lib/payment-providers/payment-providers.ts
new file mode 100644
index 000000000..6b78b7860
--- /dev/null
+++ b/apps/www/src/features/studio/lib/payment-providers/payment-providers.ts
@@ -0,0 +1,5 @@
+import { appleAppStore } from "./app-store";
+import { googlePlay } from "./google-play";
+import { stripe } from "./stripe";
+
+export const paymentProviders = [appleAppStore, googlePlay, stripe];
diff --git a/apps/www/src/features/studio/lib/payment-providers/stripe.ts b/apps/www/src/features/studio/lib/payment-providers/stripe.ts
new file mode 100644
index 000000000..d9d269ebc
--- /dev/null
+++ b/apps/www/src/features/studio/lib/payment-providers/stripe.ts
@@ -0,0 +1,142 @@
+import { StripeLogo } from "@/features/studio/projects/settings/payment-providers/logos/stripe-logo";
+import { z } from "zod/v3";
+
+import { createPaymentProvider } from "./core";
+import type { PaymentProviderProductEditorSheetSection } from "./types";
+
+const ENCRYPTED_SECRET_PREFIX = "v1.aesgcm:";
+const STRIPE_ACCOUNT_ID_PATTERN = /^acct_[A-Za-z0-9]+$/;
+const STRIPE_WEBHOOK_SECRET_PATTERN = /^whsec_[A-Za-z0-9]+$/;
+const STRIPE_PRODUCT_ID_PATTERN = /^prod_[A-Za-z0-9]+$/;
+const STRIPE_PRICE_ID_PATTERN = /^price_[A-Za-z0-9]+$/;
+
+const isEncryptedSecret = (value: string): boolean =>
+  value.startsWith(ENCRYPTED_SECRET_PREFIX);
+
+const stripeCredentialsSchema = (mode: "live" | "test") =>
+  z.object({
+    secretKey: z
+      .string()
+      .min(1, {
+        message:
+          mode === "live"
+            ? "Live API key is required"
+            : "Test API key is required",
+      })
+      .refine(
+        (value) =>
+          isEncryptedSecret(value) ||
+          value.startsWith(`sk_${mode}_`) ||
+          value.startsWith(`rk_${mode}_`),
+        {
+          message:
+            mode === "live"
+              ? "Live API key must start with sk_live_ or rk_live_"
+              : "Test API key must start with sk_test_ or rk_test_",
+        },
+      ),
+    webhookSecret: z
+      .string()
+      .min(1, {
+        message:
+          mode === "live"
+            ? "Live webhook signing secret is required"
+            : "Test webhook signing secret is required",
+      })
+      .refine(
+        (value) =>
+          isEncryptedSecret(value) || STRIPE_WEBHOOK_SECRET_PATTERN.test(value),
+        {
+          message: "Webhook signing secret must start with whsec_",
+        },
+      ),
+  });
+
+export const stripeGlobalConfigurationSchema = z.object({
+  accountId: z
+    .string()
+    .min(1, {
+      message: "Stripe account ID is required",
+    })
+    .regex(STRIPE_ACCOUNT_ID_PATTERN, {
+      message: "Stripe account ID must start with acct_",
+    }),
+  live: stripeCredentialsSchema("live"),
+  test: stripeCredentialsSchema("test"),
+});
+
+export type StripeGlobalConfiguration = z.infer<
+  typeof stripeGlobalConfigurationSchema
+>;
+
+const stripeProductConfigurationSchema = z.object({
+  priceId: z
+    .string()
+    .min(1, {
+      message: "Price ID is required",
+    })
+    .regex(STRIPE_PRICE_ID_PATTERN, {
+      message: "Price ID must start with price_",
+    }),
+  productId: z
+    .string()
+    .min(1, {
+      message: "Product ID is required",
+    })
+    .regex(STRIPE_PRODUCT_ID_PATTERN, {
+      message: "Product ID must start with prod_",
+    }),
+});
+
+export const stripe = createPaymentProvider({
+  defaultGlobalConfiguration: {
+    accountId: "",
+    live: {
+      secretKey: "",
+      webhookSecret: "",
+    },
+    test: {
+      secretKey: "",
+      webhookSecret: "",
+    },
+  },
+  defaultProductConfiguration: {
+    priceId: "",
+    productId: "",
+  },
+  getProductConfigurationSheet(): {
+    sections: PaymentProviderProductEditorSheetSection[];
+  } {
+    return {
+      sections: [
+        {
+          input: {
+            placeholder: "prod_123456789",
+            type: "text",
+          },
+          key: "productId",
+          label: "Product ID",
+          name: "productId",
+          type: "text-input",
+        },
+        {
+          input: {
+            placeholder: "price_123456789",
+            type: "text",
+          },
+          key: "priceId",
+          label: "Price ID",
+          name: "priceId",
+          type: "text-input",
+        },
+      ],
+    };
+  },
+  globalConfigurationSchema: stripeGlobalConfigurationSchema,
+  id: "stripe",
+  logo: StripeLogo,
+  productConfigurationKeyProperties: ["productId", "priceId"],
+  productConfigurationSchema: stripeProductConfigurationSchema,
+  title: "Stripe",
+  type: "web-checkout",
+});
diff --git a/apps/www/src/features/studio/lib/payment-providers/types.ts b/apps/www/src/features/studio/lib/payment-providers/types.ts
new file mode 100644
index 000000000..02b7c0fa4
--- /dev/null
+++ b/apps/www/src/features/studio/lib/payment-providers/types.ts
@@ -0,0 +1,43 @@
+import type { z } from "zod/v3";
+
+export interface PaymentProvider<
+  TGlobalConfigurationSchema extends z.ZodSchema,
+  TProductConfigurationSchema extends z.ZodSchema,
+> {
+  id: string;
+  title: string;
+  type: "native" | "web-checkout";
+  logo: React.ComponentType;
+  globalConfigurationSchema: TGlobalConfigurationSchema;
+  productConfigurationSchema: TProductConfigurationSchema;
+  defaultGlobalConfiguration: z.infer<TGlobalConfigurationSchema>;
+  productConfigurationKeyProperties: (keyof z.infer<TProductConfigurationSchema>)[];
+  defaultProductConfiguration: z.infer<TProductConfigurationSchema>;
+  getProductConfigurationSheet: (params: CreateProductEditorSheetParams) => {
+    sections: PaymentProviderProductEditorSheetSection[];
+  };
+}
+
+interface PaymentProviderTextInputSection {
+  type: "text-input";
+  name: string;
+  label: string;
+  input: {
+    type: "text" | "password";
+    placeholder?: string;
+  };
+}
+
+interface PaymentProviderCopyTextSection {
+  type: "copy-text";
+  label: string;
+  text: string;
+}
+
+export interface CreateProductEditorSheetParams {
+  productId: string;
+}
+
+export type PaymentProviderProductEditorSheetSection = {
+  key: string;
+} & (PaymentProviderTextInputSection | PaymentProviderCopyTextSection);
diff --git a/apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts b/apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts
new file mode 100644
index 000000000..24dab32cb
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts
@@ -0,0 +1,63 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+// Queries
+
+/** List a paywall/surface's persistent chats (metadata only), newest first. */
+export const listAiChatsOptions = (options: {
+  organizationId: string;
+  projectId: string;
+  surface: string;
+  paywallId?: string;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListAiChats(options)),
+    queryKey: queryKeys.aiChat.list(options),
+  });
+
+/** Load one full chat (including its serialized messages). */
+export const getAiChatOptions = (chatId: string) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetAiChat({ chatId })),
+    queryKey: queryKeys.aiChat.get(chatId),
+  });
+
+// Mutations
+
+/** Upsert a chat by its (client-minted) id. */
+export const saveAiChatOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      id: string;
+      organizationId: string;
+      projectId: string;
+      surface: string;
+      chatType: string;
+      paywallId?: string;
+      title: string;
+      messages: string;
+    }) => VoidhashRpc.request((rpc) => rpc.SaveAiChat(variables)),
+    mutationKey: ["saveAiChat"],
+  });
+
+/** Delete one chat. */
+export const deleteAiChatOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { chatId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteAiChat(variables)),
+    mutationKey: ["deleteAiChat"],
+  });
+
+/** Upload an image attachment under a chat; returns its public URL. */
+export const uploadAiChatAttachmentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      chatId: string;
+      organizationId: string;
+      name: string;
+      contentType: string;
+      dataBase64: string;
+    }) => VoidhashRpc.request((rpc) => rpc.UploadAiChatAttachment(variables)),
+    mutationKey: ["uploadAiChatAttachment"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/analytics.ts b/apps/www/src/features/studio/lib/tanstack-query/analytics.ts
new file mode 100644
index 000000000..27a3efe9e
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/analytics.ts
@@ -0,0 +1,27 @@
+import { Effect } from "effect";
+import type { QueryAnalyticsInsightsRequestType } from "@voidhash/rpc";
+
+import { VoidhashRpc, eq } from "../effect-query";
+import { queryKeys } from "./query-keys";
+
+export const queryAnalyticsInsightsOptions = (options: QueryAnalyticsInsightsRequestType) =>
+  eq.queryOptions({
+    queryFn: (() =>
+      Effect.gen(function* queryAnalyticsInsightsQueryFn() {
+        const analytics = yield* VoidhashRpc.request((rpc) => rpc.QueryAnalyticsInsights(options));
+        return analytics;
+      })) as never,
+    queryKey: queryKeys.analytics.query(options),
+  });
+
+export const listRecentAnalyticsEventsOptions = (options: { projectId: string; limit: number }) =>
+  eq.queryOptions({
+    queryFn: () =>
+      VoidhashRpc.request((rpc) =>
+        rpc.ListRecentAnalyticsEvents({
+          limit: options.limit,
+          projectId: options.projectId,
+        }),
+      ),
+    queryKey: queryKeys.analytics.recentEvents(options),
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/api-keys.ts b/apps/www/src/features/studio/lib/tanstack-query/api-keys.ts
new file mode 100644
index 000000000..050234961
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/api-keys.ts
@@ -0,0 +1,42 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listApiKeysOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () =>
+      VoidhashRpc.request((rpc) =>
+        rpc.ListApiKeys({
+          projectId: options.projectId,
+        }),
+      ),
+    queryKey: queryKeys.apiKey.list(options),
+  });
+
+export const getApiKeyByIdOptions = (options: { apiKeyId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetApiKeyById({ apiKeyId: options.apiKeyId })),
+    queryKey: queryKeys.apiKey.getApiKey(options.apiKeyId),
+  });
+
+export const createSecretKeyOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { projectId: string; name: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateSecretKey(variables)),
+    mutationKey: ["createSecretKey"],
+  });
+
+export const rotateSecretKeyOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { apiKeyId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RotateSecretKey(variables)),
+    mutationKey: ["rotateSecretKey"],
+  });
+
+export const deleteApiKeyOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { apiKeyId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteApiKey(variables)),
+    mutationKey: ["deleteApiKey"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/experiments.ts b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
new file mode 100644
index 000000000..30c46567c
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
@@ -0,0 +1,114 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+// Queries
+export const listExperimentsOptions = (options: {
+  projectId: string;
+  includeArchived?: boolean;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListExperiments(options)),
+    queryKey: queryKeys.experiment.list({ projectId: options.projectId }),
+  });
+
+export const getExperimentOptions = (options: { id: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetExperiment(options)),
+    queryKey: queryKeys.experiment.getExperiment(options.id),
+  });
+
+// Mutations
+export const createExperimentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      projectId: string;
+      key: string;
+      name: string;
+      description?: string;
+      hypothesis?: string;
+      primaryMetricEventName: string;
+      secondaryMetricEventNames?: string[];
+    }) => VoidhashRpc.request((rpc) => rpc.CreateExperiment(variables)),
+    mutationKey: ["createExperiment"],
+  });
+
+export const updateExperimentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      id: string;
+      name?: string;
+      description?: string | null;
+      hypothesis?: string | null;
+      primaryMetricEventName?: string;
+      secondaryMetricEventNames?: string[] | null;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdateExperiment(variables)),
+    mutationKey: ["updateExperiment"],
+  });
+
+export const replaceExperimentVariantsOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      experimentId: string;
+      variants: Array<{
+        key: string;
+        name: string;
+        isControl: boolean;
+        weightBps: number;
+      }>;
+    }) => VoidhashRpc.request((rpc) => rpc.ReplaceExperimentVariants(variables)),
+    mutationKey: ["replaceExperimentVariants"],
+  });
+
+export const upsertExperimentTreatmentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      experimentId: string;
+      variantId: string;
+      treatmentType: string;
+      config: unknown;
+    }) => VoidhashRpc.request((rpc) => rpc.UpsertExperimentTreatment(variables)),
+    mutationKey: ["upsertExperimentTreatment"],
+  });
+
+export const removeExperimentTreatmentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RemoveExperimentTreatment(variables)),
+    mutationKey: ["removeExperimentTreatment"],
+  });
+
+export const startExperimentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.StartExperiment(variables)),
+    mutationKey: ["startExperiment"],
+  });
+
+export const pauseExperimentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.PauseExperiment(variables)),
+    mutationKey: ["pauseExperiment"],
+  });
+
+export const concludeExperimentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string; winningVariantId?: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ConcludeExperiment(variables)),
+    mutationKey: ["concludeExperiment"],
+  });
+
+export const archiveExperimentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ArchiveExperiment(variables)),
+    mutationKey: ["archiveExperiment"],
+  });
+
+export const restoreExperimentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RestoreExperiment(variables)),
+    mutationKey: ["restoreExperiment"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts b/apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts
new file mode 100644
index 000000000..2d909341e
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts
@@ -0,0 +1,120 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+// Queries
+export const listFeatureFlagsOptions = (options: {
+  projectId: string;
+  includeArchived?: boolean;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListFeatureFlags(options)),
+    queryKey: queryKeys.featureFlag.list({ projectId: options.projectId }),
+  });
+
+export const getFeatureFlagOptions = (options: { id: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetFeatureFlag(options)),
+    queryKey: queryKeys.featureFlag.getFlag(options.id),
+  });
+
+export const listFeatureFlagOverridesByPersonOptions = (options: {
+  projectId: string;
+  identityType: number;
+  identityValue: string;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListFeatureFlagOverridesByPerson(options)),
+    queryKey: queryKeys.featureFlag.overridesByPerson(options),
+  });
+
+// Mutations
+export const createFeatureFlagOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      projectId: string;
+      key: string;
+      name: string;
+      description?: string;
+    }) => VoidhashRpc.request((rpc) => rpc.CreateFeatureFlag(variables)),
+    mutationKey: ["createFeatureFlag"],
+  });
+
+export const updateFeatureFlagOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      id: string;
+      name?: string;
+      description?: string | null;
+      enabled?: boolean;
+      rolloutBps?: number;
+      key?: string;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdateFeatureFlag(variables)),
+    mutationKey: ["updateFeatureFlag"],
+  });
+
+export const archiveFeatureFlagOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ArchiveFeatureFlag(variables)),
+    mutationKey: ["archiveFeatureFlag"],
+  });
+
+export const restoreFeatureFlagOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RestoreFeatureFlag(variables)),
+    mutationKey: ["restoreFeatureFlag"],
+  });
+
+export const upsertFeatureFlagOverrideOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      featureFlagId: string;
+      identityType: number;
+      identityValue: string;
+      forcedEnabled?: boolean | null;
+      note?: string;
+    }) => VoidhashRpc.request((rpc) => rpc.UpsertFeatureFlagOverride(variables)),
+    mutationKey: ["upsertFeatureFlagOverride"],
+  });
+
+export const archiveFeatureFlagOverrideOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ArchiveFeatureFlagOverride(variables)),
+    mutationKey: ["archiveFeatureFlagOverride"],
+  });
+
+export const upsertFeatureFlagTargetOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      featureFlagId: string;
+      listType: number;
+      identityType: number;
+      identityValue: string;
+    }) => VoidhashRpc.request((rpc) => rpc.UpsertFeatureFlagTarget(variables)),
+    mutationKey: ["upsertFeatureFlagTarget"],
+  });
+
+export const archiveFeatureFlagTargetOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ArchiveFeatureFlagTarget(variables)),
+    mutationKey: ["archiveFeatureFlagTarget"],
+  });
+
+export const updateFeatureFlagVariantsOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      featureFlagId: string;
+      variants: Array<{
+        key: string;
+        name: string;
+        payload?: unknown;
+        weightBps: number;
+      }>;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdateFeatureFlagVariants(variables)),
+    mutationKey: ["updateFeatureFlagVariants"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/feedback.ts b/apps/www/src/features/studio/lib/tanstack-query/feedback.ts
new file mode 100644
index 000000000..af78f9905
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/feedback.ts
@@ -0,0 +1,21 @@
+import type { FeedbackTopicValue } from "@voidhash/lib";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+/** Variables accepted by the feedback submission mutation. */
+export interface SubmitFeedbackVariables {
+  readonly topic: FeedbackTopicValue;
+  readonly message: string;
+  readonly sentiment?: number;
+  readonly organizationId?: string;
+  readonly projectId?: string;
+  readonly pathname?: string;
+  readonly userAgent?: string;
+}
+
+export const submitFeedbackOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: SubmitFeedbackVariables) =>
+      VoidhashRpc.request((rpc) => rpc.SubmitFeedback(variables)),
+    mutationKey: ["submitFeedback"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/index.ts b/apps/www/src/features/studio/lib/tanstack-query/index.ts
new file mode 100644
index 000000000..37f8c27fa
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/index.ts
@@ -0,0 +1,24 @@
+export * from "./ai-chats";
+export * from "./api-keys";
+export * from "./analytics";
+export * from "./persons";
+export * from "./experiments";
+export * from "./feature-flags";
+export * from "./feedback";
+export * from "./notifications";
+export * from "./organizations";
+export * from "./payment-provider-configurations";
+export * from "./payment-provider-products";
+export * from "./paywall-assets";
+export * from "./paywall-components";
+export * from "./paywall-deploys";
+export * from "./paywall-locations";
+export * from "./paywalls";
+export * from "./perks";
+export * from "./product-perks";
+export * from "./products";
+export * from "./projects";
+export { queryKeys } from "./query-keys";
+export * from "./users";
+export * from "./voidql";
+export * from "./webhooks";
diff --git a/apps/www/src/features/studio/lib/tanstack-query/notifications.ts b/apps/www/src/features/studio/lib/tanstack-query/notifications.ts
new file mode 100644
index 000000000..6a83bc26a
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/notifications.ts
@@ -0,0 +1,61 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listPushNotificationConfigurationsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPushNotificationConfigurations(options)),
+    queryKey: queryKeys.pushNotificationConfiguration.list(options),
+  });
+
+export const getPushNotificationConfigurationOptions = (options: { id: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetPushNotificationConfiguration(options)),
+    queryKey: queryKeys.pushNotificationConfiguration.getPushNotificationConfiguration(options),
+  });
+
+export const createPushNotificationConfigurationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { projectId: string; providerId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreatePushNotificationConfiguration(variables)),
+    mutationKey: ["createPushNotificationConfiguration"],
+  });
+
+export const updatePushNotificationConfigurationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      id: string;
+      enabled: boolean;
+      name: string;
+      configuration: Record<string, unknown>;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdatePushNotificationConfiguration(variables)),
+    mutationKey: ["updatePushNotificationConfiguration"],
+  });
+
+export const deletePushNotificationConfigurationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { pushNotificationConfigurationId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeletePushNotificationConfiguration(variables)),
+    mutationKey: ["deletePushNotificationConfiguration"],
+  });
+
+export const listPushNotificationSendsOptions = (options: { projectId: string; limit: number }) =>
+  eq.queryOptions({
+    queryFn: () =>
+      VoidhashRpc.request((rpc) =>
+        rpc.ListPushNotificationSends({
+          limit: options.limit,
+          projectId: options.projectId,
+        }),
+      ),
+    queryKey: queryKeys.pushNotificationSend.list(options),
+  });
+
+export const getPushNotificationSendDeliveriesOptions = (options: {
+  projectId: string;
+  sendId: string;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetPushNotificationSendDeliveries(options)),
+    queryKey: queryKeys.pushNotificationSend.deliveries(options),
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/organizations.ts b/apps/www/src/features/studio/lib/tanstack-query/organizations.ts
new file mode 100644
index 000000000..3e93fe2e4
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/organizations.ts
@@ -0,0 +1,85 @@
+import type { QueryClient } from "@tanstack/react-query";
+import type { User } from "@voidhash/rpc";
+
+import { VoidhashRpc, eq } from "../effect-query";
+import { queryKeys } from "./query-keys";
+
+interface CreatedOrganization {
+  readonly id: string;
+  readonly name: string;
+  readonly slug: string;
+}
+
+/** Adds a newly created organization to the cached current-user session. */
+export const addCreatedOrganizationToCurrentUserCache = (
+  queryClient: QueryClient,
+  createdOrganization: CreatedOrganization,
+) => {
+  queryClient.setQueryData<typeof User.Type>(queryKeys.user.getUser(), (previous) => {
+    if (!previous) {
+      return previous;
+    }
+
+    const alreadyCached = previous.organizations.some(
+      (organization) =>
+        organization.id === createdOrganization.id ||
+        organization.slug === createdOrganization.slug,
+    );
+
+    if (alreadyCached) {
+      return previous;
+    }
+
+    return {
+      ...previous,
+      organizations: [
+        ...previous.organizations,
+        {
+          id: createdOrganization.id,
+          logo: null,
+          name: createdOrganization.name,
+          slug: createdOrganization.slug,
+          workosOrganizationId: null,
+          // Optimistic entry; the real resolved flags arrive on the next
+          // CurrentUser refetch.
+          internalFeatureFlags: [],
+        },
+      ],
+    };
+  });
+};
+
+export const createOrganizationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { name: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateOrganization(variables)),
+    mutationKey: ["createOrganization"],
+  });
+
+export const updateOrganizationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { organizationId: string; name: string }) =>
+      VoidhashRpc.request((rpc) => rpc.UpdateOrganization(variables)),
+    mutationKey: ["updateOrganization"],
+  });
+
+export const deleteOrganizationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { organizationId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteOrganization(variables)),
+    mutationKey: ["deleteOrganization"],
+  });
+
+export const setOrganizationAvatarOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { organizationId: string; imageBase64: string; contentType: string }) =>
+      VoidhashRpc.request((rpc) => rpc.SetOrganizationAvatar(variables)),
+    mutationKey: ["setOrganizationAvatar"],
+  });
+
+export const removeOrganizationAvatarOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { organizationId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RemoveOrganizationAvatar(variables)),
+    mutationKey: ["removeOrganizationAvatar"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/payment-provider-configurations.ts b/apps/www/src/features/studio/lib/tanstack-query/payment-provider-configurations.ts
new file mode 100644
index 000000000..4c51906ef
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/payment-provider-configurations.ts
@@ -0,0 +1,41 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listPaymentProviderConfigurationsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPaymentProviderConfigurations(options)),
+    queryKey: queryKeys.paymentProviderConfiguration.list(options),
+  });
+
+export const getPaymentProviderConfigurationOptions = (options: { id: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetPaymentProviderConfiguration(options)),
+    queryKey: queryKeys.paymentProviderConfiguration.getPaymentProviderConfiguration(options),
+  });
+
+export const createPaymentProviderConfigurationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { projectId: string; providerId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreatePaymentProviderConfiguration(variables)),
+    mutationKey: ["createPaymentProviderConfiguration"],
+  });
+
+export const updatePaymentProviderConfigurationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      id: string;
+      enabled: boolean;
+      name: string;
+      configuration: Record<string, unknown>;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdatePaymentProviderConfiguration(variables)),
+    mutationKey: ["updatePaymentProviderConfiguration"],
+  });
+
+export const deletePaymentProviderConfigurationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { paymentProviderConfigurationId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeletePaymentProviderConfiguration(variables)),
+    mutationKey: ["deletePaymentProviderConfiguration"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/payment-provider-products.ts b/apps/www/src/features/studio/lib/tanstack-query/payment-provider-products.ts
new file mode 100644
index 000000000..d0ec92229
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/payment-provider-products.ts
@@ -0,0 +1,44 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listProviderProductsByProductIdOptions = (options: { productId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListProviderProductsByProductId(options)),
+    queryKey: queryKeys.paymentProviderProduct.listByProduct(options),
+  });
+
+export const createPaymentProviderProductOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      productId: string;
+      paymentProviderConfigurationId: string;
+      configuration: Record<string, unknown>;
+    }) => VoidhashRpc.request((rpc) => rpc.CreatePaymentProviderProduct(variables)),
+    mutationKey: ["createPaymentProviderProduct"],
+  });
+
+export const updatePaymentProviderProductOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string; configuration: Record<string, unknown> }) =>
+      VoidhashRpc.request((rpc) => rpc.UpdatePaymentProviderProduct(variables)),
+    mutationKey: ["updatePaymentProviderProduct"],
+  });
+
+export const deletePaymentProviderProductOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeletePaymentProviderProduct(variables)),
+    mutationKey: ["deletePaymentProviderProduct"],
+  });
+
+export const setActivePaymentProviderProductOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      productId: string;
+      paymentProviderConfigurationId: string;
+      providerProductKey: string;
+    }) => VoidhashRpc.request((rpc) => rpc.SetActivePaymentProviderProduct(variables)),
+    mutationKey: ["setActivePaymentProviderProduct"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywall-assets.ts b/apps/www/src/features/studio/lib/tanstack-query/paywall-assets.ts
new file mode 100644
index 000000000..f7b2db8bb
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywall-assets.ts
@@ -0,0 +1,38 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+// Queries
+export const listPaywallAssetsOptions = (options: { organizationId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPaywallAssets(options)),
+    queryKey: queryKeys.paywallAsset.list(options),
+  });
+
+// Mutations
+export const uploadPaywallAssetOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      organizationId: string;
+      name: string;
+      contentType: string;
+      imageBase64: string;
+      width?: number;
+      height?: number;
+    }) => VoidhashRpc.request((rpc) => rpc.UploadPaywallAsset(variables)),
+    mutationKey: ["uploadPaywallAsset"],
+  });
+
+export const renamePaywallAssetOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { assetId: string; name: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RenamePaywallAsset(variables)),
+    mutationKey: ["renamePaywallAsset"],
+  });
+
+export const deletePaywallAssetOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { assetId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeletePaywallAsset(variables)),
+    mutationKey: ["deletePaywallAsset"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywall-components.ts b/apps/www/src/features/studio/lib/tanstack-query/paywall-components.ts
new file mode 100644
index 000000000..480ccd248
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywall-components.ts
@@ -0,0 +1,20 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+// The wire `manifest` field stays `unknown` here — the designer feature layer
+// decodes it with `ComponentManifestSchema` from `@voidhash/core`.
+export const listPaywallComponentsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPaywallComponents(options)),
+    queryKey: queryKeys.paywallComponent.list(options),
+  });
+
+export const getPaywallComponentVersionsOptions = (options: {
+  projectId: string;
+  refs: ReadonlyArray<{ slug: string; version: number }>;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetPaywallComponentVersions(options)),
+    queryKey: queryKeys.paywallComponent.versions(options),
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywall-deploys.ts b/apps/www/src/features/studio/lib/tanstack-query/paywall-deploys.ts
new file mode 100644
index 000000000..51d368be7
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywall-deploys.ts
@@ -0,0 +1,18 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listPaywallDeploysOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPaywallDeploys(options)),
+    queryKey: queryKeys.paywallDeploy.list(options),
+  });
+
+// `VoidhashRpc.use` (not `.request`) keeps the rpc's typed error union, so
+// consumers can match on the namespaced `Rpc/*` failure tags.
+export const setActivePaywallReleaseOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { releaseId: string }) =>
+      VoidhashRpc.use((rpc) => rpc.SetActivePaywallRelease(variables)),
+    mutationKey: ["setActivePaywallRelease"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts b/apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts
new file mode 100644
index 000000000..c74041bc3
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts
@@ -0,0 +1,62 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listPaywallLocationsOptions = (options: {
+  projectId: string;
+  includeArchived?: boolean;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPaywallLocations(options)),
+    queryKey: queryKeys.paywallLocation.list(options),
+  });
+
+export const listPaywallLocationShowingsOptions = (options: { locationId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPaywallLocationShowings(options)),
+    queryKey: queryKeys.paywallLocation.showings(options),
+  });
+
+export const createPaywallLocationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      description?: string;
+      name: string;
+      projectId: string;
+      slug: string;
+    }) => VoidhashRpc.request((rpc) => rpc.CreatePaywallLocation(variables)),
+    mutationKey: ["createPaywallLocation"],
+  });
+
+export const updatePaywallLocationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { description?: string | null; locationId: string; name?: string }) =>
+      VoidhashRpc.request((rpc) => rpc.UpdatePaywallLocation(variables)),
+    mutationKey: ["updatePaywallLocation"],
+  });
+
+export const archivePaywallLocationOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { locationId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ArchivePaywallLocation(variables)),
+    mutationKey: ["archivePaywallLocation"],
+  });
+
+export const assignPaywallLocationShowingOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      featureFlagId?: string;
+      locationId: string;
+      paywallId?: string;
+      type: "feature_flag" | "paywall_release";
+    }) => VoidhashRpc.request((rpc) => rpc.AssignPaywallLocationShowing(variables)),
+    mutationKey: ["assignPaywallLocationShowing"],
+  });
+
+export const clearPaywallLocationShowingOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { locationId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ClearPaywallLocationShowing(variables)),
+    mutationKey: ["clearPaywallLocationShowing"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts b/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
new file mode 100644
index 000000000..7862a0e7e
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
@@ -0,0 +1,65 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listPaywallsOptions = (options: { projectId: string; includeArchived?: boolean }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPaywalls(options)),
+    queryKey: queryKeys.paywall.list(options),
+  });
+
+export const createPaywallOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { projectId: string; name: string; slug: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreatePaywall(variables)),
+    mutationKey: ["createPaywall"],
+  });
+
+export const renamePaywallOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { paywallId: string; name: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RenamePaywall(variables)),
+    mutationKey: ["renamePaywall"],
+  });
+
+export const archivePaywallOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { paywallId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.ArchivePaywall(variables)),
+    mutationKey: ["archivePaywall"],
+  });
+
+export const restorePaywallOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { paywallId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RestorePaywall(variables)),
+    mutationKey: ["restorePaywall"],
+  });
+
+export const deletePaywallOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { paywallId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeletePaywall(variables)),
+    mutationKey: ["deletePaywall"],
+  });
+
+export const createPaywallReleaseOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { paywallId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreatePaywallRelease(variables)),
+    mutationKey: ["createPaywallRelease"],
+  });
+
+export const publishPaywallReleaseOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { releaseId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.PublishPaywallRelease(variables)),
+    mutationKey: ["publishPaywallRelease"],
+  });
+
+export const getPaywallDraftReleaseOptions = (options: { paywallId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetPaywallDraftRelease(options)),
+    queryKey: queryKeys.paywall.draft(options),
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/perks.ts b/apps/www/src/features/studio/lib/tanstack-query/perks.ts
new file mode 100644
index 000000000..5ecb0ea5c
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/perks.ts
@@ -0,0 +1,24 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listPerksOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPerks(options)),
+    queryKey: queryKeys.perk.list(options),
+  });
+
+export const createPerkOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { projectId: string; name: string; slug: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreatePerk(variables)),
+    mutationKey: ["createPerk"],
+  });
+
+export const deletePerkOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { perkId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeletePerk(variables)),
+    mutationKey: ["deletePerk"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/persons.test.ts b/apps/www/src/features/studio/lib/tanstack-query/persons.test.ts
new file mode 100644
index 000000000..0846e50c4
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/persons.test.ts
@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { getPersonByDistinctIdOptions } from "./persons";
+import { queryKeys } from "./query-keys";
+
+describe("person query options", () => {
+  it("uses the distinct-id person query key", () => {
+    const options = getPersonByDistinctIdOptions({
+      distinctId: "distinct_123",
+      projectId: "project_123",
+    });
+
+    expect(options.queryKey).toEqual(
+      queryKeys.person.getPersonByDistinctId("project_123", "distinct_123"),
+    );
+  });
+});
diff --git a/apps/www/src/features/studio/lib/tanstack-query/persons.ts b/apps/www/src/features/studio/lib/tanstack-query/persons.ts
new file mode 100644
index 000000000..cdeeab661
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/persons.ts
@@ -0,0 +1,32 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listPersonsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListPersons({ projectId: options.projectId })),
+    queryKey: queryKeys.person.list(options.projectId),
+  });
+
+export const getPersonByDistinctIdOptions = (options: { projectId: string; distinctId: string }) =>
+  eq.queryOptions({
+    queryFn: () =>
+      VoidhashRpc.request((rpc) =>
+        rpc.GetPersonByDistinctId({
+          distinctId: options.distinctId,
+          projectId: options.projectId,
+        }),
+      ),
+    queryKey: queryKeys.person.getPersonByDistinctId(options.projectId, options.distinctId),
+  });
+
+export const createPersonOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      projectId: string;
+      distinctId: string;
+      name?: string;
+      email?: string;
+    }) => VoidhashRpc.request((rpc) => rpc.CreatePerson(variables)),
+    mutationKey: ["createPerson"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/product-perks.ts b/apps/www/src/features/studio/lib/tanstack-query/product-perks.ts
new file mode 100644
index 000000000..223c192dd
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/product-perks.ts
@@ -0,0 +1,29 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listProductPerksByProductIdOptions = (options: { productId: string }) =>
+  eq.queryOptions({
+    queryFn: () =>
+      VoidhashRpc.request((rpc) =>
+        rpc.ListProductPerksByProductId({ productId: options.productId }),
+      ),
+    queryKey: queryKeys.productPerk.listByProduct({
+      productId: options.productId,
+    }),
+  });
+
+export const createProductPerkOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { productId: string; perkId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateProductPerk(variables)),
+    mutationKey: ["createProductPerk"],
+  });
+
+export const deleteProductPerkOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteProductPerk(variables)),
+    mutationKey: ["deleteProductPerk"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/products.ts b/apps/www/src/features/studio/lib/tanstack-query/products.ts
new file mode 100644
index 000000000..af60a0bfc
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/products.ts
@@ -0,0 +1,42 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export const listProductsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListProducts(options)),
+    queryKey: queryKeys.product.list(options),
+  });
+
+export const getProductOptions = (options: { productId: string }) =>
+  eq.queryOptions({
+    queryFn: () =>
+      VoidhashRpc.request((rpc) =>
+        rpc.GetProduct({
+          id: options.productId,
+        }),
+      ),
+    queryKey: queryKeys.product.getProduct(options),
+  });
+
+export const createProductOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { projectId: string; name: string; slug: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateProduct(variables)),
+    mutationKey: ["createProduct"],
+  });
+
+export const updateProductOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string; name: string; slug?: string }) =>
+      VoidhashRpc.request((rpc) => rpc.UpdateProduct(variables)),
+    mutationKey: ["updateProduct"],
+  });
+
+export const deleteProductOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteProduct(variables)),
+    mutationKey: ["deleteProduct"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/projects.ts b/apps/www/src/features/studio/lib/tanstack-query/projects.ts
new file mode 100644
index 000000000..ad555d229
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/projects.ts
@@ -0,0 +1,92 @@
+import { Effect } from "effect";
+import type { QueryClient } from "@tanstack/react-query";
+import type { User } from "@voidhash/rpc";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+interface CreatedProject {
+  readonly id: string;
+  readonly name: string;
+  readonly organizationId: string;
+  readonly slug: string;
+}
+
+/** Adds a newly created project to the cached current-user session. */
+export const addCreatedProjectToCurrentUserCache = (
+  queryClient: QueryClient,
+  createdProject: CreatedProject,
+) => {
+  queryClient.setQueryData<typeof User.Type>(queryKeys.user.getUser(), (previous) => {
+    if (!previous) {
+      return previous;
+    }
+
+    const alreadyCached = previous.projects.some(
+      (project) =>
+        project.id === createdProject.id ||
+        (project.organizationId === createdProject.organizationId &&
+          project.slug === createdProject.slug),
+    );
+
+    if (alreadyCached) {
+      return previous;
+    }
+
+    return {
+      ...previous,
+      projects: [
+        ...previous.projects,
+        {
+          id: createdProject.id,
+          logo: null,
+          name: createdProject.name,
+          organizationId: createdProject.organizationId,
+          slug: createdProject.slug,
+        },
+      ],
+    };
+  });
+};
+
+export const listProjectsOptions = (options: { organizationId: string }) =>
+  eq.queryOptions({
+    queryFn: () =>
+      VoidhashRpc.request((rpc) => rpc.ListProjects({ organizationId: options.organizationId })),
+    queryKey: queryKeys.project.list(options),
+  });
+
+export const createProjectOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { name: string; organizationId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateProject(variables)),
+    mutationKey: ["createProject"],
+  });
+
+export const updateProjectOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string; name: string }) =>
+      VoidhashRpc.request((rpc) => rpc.UpdateProject(variables)),
+    mutationKey: ["updateProject"],
+  });
+
+export const deleteProjectOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteProject(variables)),
+    mutationKey: ["deleteProject"],
+  });
+
+export const setProjectAvatarOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string; imageBase64: string; contentType: string }) =>
+      VoidhashRpc.request((rpc) => rpc.SetProjectAvatar(variables)),
+    mutationKey: ["setProjectAvatar"],
+  });
+
+export const removeProjectAvatarOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RemoveProjectAvatar(variables)),
+    mutationKey: ["removeProjectAvatar"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
new file mode 100644
index 000000000..cfdb65f53
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
@@ -0,0 +1,183 @@
+const apiKeyKeys = {
+  all: ["apiKeys"] as const,
+  getApiKey: (apiKeyId: string) => [...apiKeyKeys.all, "getApiKey", { apiKeyId }] as const,
+  list: ({ projectId }: { projectId: string }) =>
+    [...apiKeyKeys.all, "list", { projectId }] as const,
+};
+
+const userKeys = {
+  all: ["users"] as const,
+  getUser: () => [...userKeys.all, "getUser"] as const,
+};
+
+const organizationKeys = {
+  all: ["organizations"] as const,
+  getOrganization: (organizationId: string) =>
+    [...organizationKeys.all, "getOrganization", { organizationId }] as const,
+};
+
+const personKeys = {
+  all: ["persons"] as const,
+  getPersonByDistinctId: (projectId: string, distinctId: string) =>
+    [...personKeys.all, "getPersonByDistinctId", { distinctId, projectId }] as const,
+  list: (projectId: string) => [...personKeys.all, "list", { projectId }] as const,
+};
+
+const perkKeys = {
+  all: ["perks"] as const,
+  list: (options: { projectId: string }) => [...perkKeys.all, "list", options] as const,
+};
+
+const productKeys = {
+  all: ["products"] as const,
+  getProduct: (options: { productId: string }) =>
+    [...productKeys.all, "getProduct", options] as const,
+  list: (options: { projectId: string }) => [...productKeys.all, "list", options] as const,
+};
+
+const projectKeys = {
+  all: ["projects"] as const,
+  list: (options: { organizationId: string }) => [...projectKeys.all, "list", options] as const,
+};
+
+const productPerkKeys = {
+  all: ["productPerks"] as const,
+  listByProduct: (options: { productId: string }) =>
+    [...productPerkKeys.all, "listByProduct", options] as const,
+};
+
+const paymentProviderConfigurationKeys = {
+  all: ["paymentProviderConfigurations"] as const,
+  getPaymentProviderConfiguration: (options: { id: string }) =>
+    [...paymentProviderConfigurationKeys.all, "getPaymentProviderConfiguration", options] as const,
+  list: (options: { projectId: string }) =>
+    [...paymentProviderConfigurationKeys.all, "list", options] as const,
+};
+
+const pushNotificationConfigurationKeys = {
+  all: ["pushNotificationConfigurations"] as const,
+  getPushNotificationConfiguration: (options: { id: string }) =>
+    [...pushNotificationConfigurationKeys.all, "getPushNotificationConfiguration", options] as const,
+  list: (options: { projectId: string }) =>
+    [...pushNotificationConfigurationKeys.all, "list", options] as const,
+};
+
+const pushNotificationSendKeys = {
+  all: ["pushNotificationSends"] as const,
+  deliveries: (options: { projectId: string; sendId: string }) =>
+    [...pushNotificationSendKeys.all, "deliveries", options] as const,
+  list: (options: { projectId: string; limit: number }) =>
+    [...pushNotificationSendKeys.all, "list", options] as const,
+};
+
+const paymentProviderProductKeys = {
+  all: ["paymentProviderProducts"] as const,
+  listByProduct: (options: { productId: string }) =>
+    [...paymentProviderProductKeys.all, "listByProduct", options] as const,
+};
+
+const paywallKeys = {
+  all: ["paywalls"] as const,
+  draft: (options: { paywallId: string }) => [...paywallKeys.all, "draft", options] as const,
+  list: (options: { projectId: string; includeArchived?: boolean }) =>
+    [...paywallKeys.all, "list", options] as const,
+};
+
+const paywallComponentKeys = {
+  all: ["paywallComponents"] as const,
+  list: (options: { projectId: string }) => [...paywallComponentKeys.all, "list", options] as const,
+  versions: (options: {
+    projectId: string;
+    refs: ReadonlyArray<{ slug: string; version: number }>;
+  }) => [...paywallComponentKeys.all, "versions", options] as const,
+};
+
+const paywallDeployKeys = {
+  all: ["paywallDeploys"] as const,
+  list: (options: { projectId: string }) => [...paywallDeployKeys.all, "list", options] as const,
+};
+
+const paywallLocationKeys = {
+  all: ["paywallLocations"] as const,
+  list: (options: { projectId: string; includeArchived?: boolean }) =>
+    [...paywallLocationKeys.all, "list", options] as const,
+  showings: (options: { locationId: string }) =>
+    [...paywallLocationKeys.all, "showings", options] as const,
+};
+
+const paywallAssetKeys = {
+  all: ["paywallAssets"] as const,
+  list: (options: { organizationId: string }) =>
+    [...paywallAssetKeys.all, "list", options] as const,
+};
+
+
+const aiChatKeys = {
+  all: ["aiChats"] as const,
+  list: (options: {
+    organizationId: string;
+    projectId: string;
+    surface: string;
+    paywallId?: string;
+  }) => [...aiChatKeys.all, "list", options] as const,
+  get: (chatId: string) => [...aiChatKeys.all, "get", { chatId }] as const,
+};
+
+const webhookKeys = {
+  all: ["webhooks"] as const,
+  deliveries: (options: { projectId: string; endpointId?: string }) =>
+    [...webhookKeys.all, "deliveries", options] as const,
+  getDelivery: (deliveryId: string) => [...webhookKeys.all, "getDelivery", { deliveryId }] as const,
+  getEndpoint: (endpointId: string) => [...webhookKeys.all, "getEndpoint", { endpointId }] as const,
+  list: (options: { projectId: string }) => [...webhookKeys.all, "list", options] as const,
+};
+
+const featureFlagKeys = {
+  all: ["featureFlags"] as const,
+  getFlag: (id: string) => [...featureFlagKeys.all, "getFlag", { id }] as const,
+  list: (options: { projectId: string }) => [...featureFlagKeys.all, "list", options] as const,
+  overridesByPerson: (options: {
+    projectId: string;
+    identityType: number;
+    identityValue: string;
+  }) => [...featureFlagKeys.all, "overridesByPerson", options] as const,
+};
+
+const experimentKeys = {
+  all: ["experiments"] as const,
+  getExperiment: (id: string) => [...experimentKeys.all, "getExperiment", { id }] as const,
+  list: (options: { projectId: string }) => [...experimentKeys.all, "list", options] as const,
+};
+
+const analyticsKeys = {
+  all: ["analytics"] as const,
+  query: (options: unknown) => [...analyticsKeys.all, "query", options] as const,
+  recentEvents: (options: { projectId: string; limit: number }) =>
+    [...analyticsKeys.all, "recentEvents", options] as const,
+};
+
+export const queryKeys = {
+  analytics: analyticsKeys,
+  apiKey: apiKeyKeys,
+  person: personKeys,
+  aiChat: aiChatKeys,
+  experiment: experimentKeys,
+  featureFlag: featureFlagKeys,
+  invalidateAll: () => [],
+  organization: organizationKeys,
+  paymentProviderConfiguration: paymentProviderConfigurationKeys,
+  paymentProviderProduct: paymentProviderProductKeys,
+  pushNotificationConfiguration: pushNotificationConfigurationKeys,
+  pushNotificationSend: pushNotificationSendKeys,
+  paywall: paywallKeys,
+  paywallAsset: paywallAssetKeys,
+  paywallComponent: paywallComponentKeys,
+  paywallDeploy: paywallDeployKeys,
+  paywallLocation: paywallLocationKeys,
+  perk: perkKeys,
+  product: productKeys,
+  productPerk: productPerkKeys,
+  project: projectKeys,
+  user: userKeys,
+  webhook: webhookKeys,
+};
diff --git a/apps/www/src/features/studio/lib/tanstack-query/users.ts b/apps/www/src/features/studio/lib/tanstack-query/users.ts
new file mode 100644
index 000000000..8a5fbdc36
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/users.ts
@@ -0,0 +1,38 @@
+import { createServerFn } from "@tanstack/react-start";
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq, managedRuntime } from "../effect-query";
+
+const currentUserEffect = () =>
+  VoidhashRpc.request((rpc) =>
+    Effect.gen(function* queryFn() {
+      yield* Effect.log("Fetching user");
+      const user = yield* rpc.CurrentUser();
+      yield* Effect.log("User fetched");
+      return user;
+    }),
+  );
+
+export const getCurrentUser = createServerFn({ method: "GET" }).handler(async () =>
+  managedRuntime.runPromise(currentUserEffect()),
+);
+
+export const currentUserOptions = () =>
+  eq.queryOptions({
+    queryFn: () => currentUserEffect(),
+    queryKey: queryKeys.user.getUser(),
+  });
+
+export const setUserAvatarOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { imageBase64: string; contentType: string }) =>
+      VoidhashRpc.request((rpc) => rpc.SetUserAvatar(variables)),
+    mutationKey: ["setUserAvatar"],
+  });
+
+export const removeUserAvatarOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (_variables: void) => VoidhashRpc.request((rpc) => rpc.RemoveUserAvatar()),
+    mutationKey: ["removeUserAvatar"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/voidql.ts b/apps/www/src/features/studio/lib/tanstack-query/voidql.ts
new file mode 100644
index 000000000..8dcd9ad67
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/voidql.ts
@@ -0,0 +1,13 @@
+import { VoidhashRpc, eq } from "../effect-query";
+
+/**
+ * Execute a VoidQL query. Modelled as a mutation (not a query) because it is
+ * triggered imperatively by the "Run" button rather than on mount — the tenant
+ * scope is applied server-side, so the client only sends the org id + query text.
+ */
+export const runVoidQlQueryOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { organizationId: string; text: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RunVoidQlQuery(variables)),
+    mutationKey: ["runVoidQlQuery"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/webhooks.ts b/apps/www/src/features/studio/lib/tanstack-query/webhooks.ts
new file mode 100644
index 000000000..b2b785ec6
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/webhooks.ts
@@ -0,0 +1,83 @@
+import { Effect } from "effect";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+// Queries
+export const listWebhookEndpointsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListWebhookEndpoints(options)),
+    queryKey: queryKeys.webhook.list(options),
+  });
+
+export const getWebhookEndpointOptions = (options: { endpointId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetWebhookEndpoint(options)),
+    queryKey: queryKeys.webhook.getEndpoint(options.endpointId),
+  });
+
+export const listWebhookDeliveriesOptions = (options: { projectId: string; endpointId?: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListWebhookDeliveries(options)),
+    queryKey: queryKeys.webhook.deliveries(options),
+  });
+
+export const getWebhookDeliveryOptions = (options: { deliveryId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetWebhookDelivery(options)),
+    queryKey: queryKeys.webhook.getDelivery(options.deliveryId),
+  });
+
+// Mutations
+export const createWebhookEndpointOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      projectId: string;
+      name: string;
+      url: string;
+      events: string[];
+      description?: string;
+    }) => VoidhashRpc.request((rpc) => rpc.CreateWebhookEndpoint(variables)),
+    mutationKey: ["createWebhookEndpoint"],
+  });
+
+export const updateWebhookEndpointOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      endpointId: string;
+      name?: string;
+      url?: string;
+      events?: string[];
+      status?: "active" | "disabled";
+      description?: string | null;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdateWebhookEndpoint(variables)),
+    mutationKey: ["updateWebhookEndpoint"],
+  });
+
+export const deleteWebhookEndpointOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { endpointId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteWebhookEndpoint(variables)),
+    mutationKey: ["deleteWebhookEndpoint"],
+  });
+
+export const rotateWebhookSecretOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { endpointId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RotateWebhookSecret(variables)),
+    mutationKey: ["rotateWebhookSecret"],
+  });
+
+export const testWebhookEndpointOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { endpointId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.TestWebhookEndpoint(variables)),
+    mutationKey: ["testWebhookEndpoint"],
+  });
+
+export const retryWebhookDeliveryOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { deliveryId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RetryWebhookDelivery(variables)),
+    mutationKey: ["retryWebhookDelivery"],
+  });
diff --git a/apps/www/src/features/studio/lib/types.ts b/apps/www/src/features/studio/lib/types.ts
new file mode 100644
index 000000000..b29912efa
--- /dev/null
+++ b/apps/www/src/features/studio/lib/types.ts
@@ -0,0 +1 @@
+export type QueryData<T extends (...args: unknown[]) => Promise<unknown>> = Awaited<ReturnType<T>>;
diff --git a/apps/www/src/features/studio/lib/useInternalFeatureFlag.ts b/apps/www/src/features/studio/lib/useInternalFeatureFlag.ts
new file mode 100644
index 000000000..23c0a857c
--- /dev/null
+++ b/apps/www/src/features/studio/lib/useInternalFeatureFlag.ts
@@ -0,0 +1,29 @@
+import { useParams } from "@tanstack/react-router";
+import type { InternalFeatureFlagKey } from "@voidhash/rpc";
+
+import { useAuth } from "../components/auth-context";
+
+/**
+ * Check whether an internal (voidhash-internal) feature flag is enabled for the
+ * organization currently in context. Reads the flags resolved on the
+ * `CurrentUser` bootstrap (no extra network call) and scopes them to the active
+ * `$organizationSlug` route param.
+ *
+ * Returns `false` when there is no organization in context.
+ *
+ * @example
+ * if (useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.notifications.key)) {
+ *   // render notification management
+ * }
+ */
+export function useInternalFeatureFlag(key: InternalFeatureFlagKey): boolean {
+  const { user } = useAuth();
+  const { organizationSlug } = useParams({ strict: false });
+
+  if (!organizationSlug) {
+    return false;
+  }
+
+  const organization = user.organizations.find((org) => org.slug === organizationSlug);
+  return organization?.internalFeatureFlags.includes(key) ?? false;
+}
diff --git a/apps/www/src/features/studio/lib/utils/current-user.ts b/apps/www/src/features/studio/lib/utils/current-user.ts
new file mode 100644
index 000000000..ba823a84e
--- /dev/null
+++ b/apps/www/src/features/studio/lib/utils/current-user.ts
@@ -0,0 +1,19 @@
+import type { User } from "@voidhash/rpc";
+
+function getProjectBySlugs(
+  currentUser: typeof User.Type,
+  organizationSlug: string,
+  projectSlug: string,
+) {
+  const organization = currentUser.organizations.find((o) => o.slug === organizationSlug);
+  if (!organization) {
+    return null;
+  }
+  return currentUser.projects.find(
+    (p) => p.slug === projectSlug && p.organizationId === organization.id,
+  );
+}
+
+export const CurrentUser = {
+  getProjectBySlugs,
+} as const;
diff --git a/apps/www/src/features/studio/lib/zod-error.ts b/apps/www/src/features/studio/lib/zod-error.ts
new file mode 100644
index 000000000..78dd6401b
--- /dev/null
+++ b/apps/www/src/features/studio/lib/zod-error.ts
@@ -0,0 +1,15 @@
+// Credited to https://github.com/unkeyed/unkey
+import type { z } from "zod";
+
+export function parseZodErrorMessage(err: z.ZodError): string {
+  try {
+    const arr = JSON.parse(err.message) as {
+      message: string;
+      path: string[];
+    }[];
+    const { path, message } = arr[0] ?? { message: err.message, path: [] };
+    return `${path.join(".")}: ${message}`;
+  } catch {
+    return err.message;
+  }
+}
diff --git a/apps/www/src/features/studio/organizations/create-organization-modal.tsx b/apps/www/src/features/studio/organizations/create-organization-modal.tsx
new file mode 100644
index 000000000..7d38ac4df
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/create-organization-modal.tsx
@@ -0,0 +1,126 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import {
+  addCreatedOrganizationToCurrentUserCache,
+  createOrganizationOptions,
+} from "@/features/studio/lib/tanstack-query/organizations";
+import { z } from "zod/v3";
+
+const createOrganizationFormSchema = z.object({
+  name: z
+    .string()
+    .min(3, "Organization name must be at least 3 characters")
+    .max(32, "Organization name must be less than 32 characters"),
+});
+
+type CreateOrganizationForm = z.infer<typeof createOrganizationFormSchema>;
+
+interface CreateOrganizationModalProps {
+  open: boolean;
+  onClose: () => void;
+  trigger: React.ReactNode;
+}
+
+export function CreateOrganizationModal({ open, onClose, trigger }: CreateOrganizationModalProps) {
+  const navigate = useNavigate();
+  const form = useForm<CreateOrganizationForm>({
+    defaultValues: {
+      name: "",
+    },
+    resolver: zodResolver(createOrganizationFormSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: createOrganization, status: createOrganizationStatus } = useMutation({
+    ...createOrganizationOptions(),
+    onSuccess: (data) => {
+      toast.success("Organization created successfully");
+      addCreatedOrganizationToCurrentUserCache(queryClient, data);
+      navigate({
+        params: {
+          organizationSlug: data.slug,
+        },
+        to: "/studio/$organizationSlug",
+      });
+    },
+    onError: () => {
+      toast.error("Failed to create organization");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreateOrganizationForm) => {
+    createOrganization({ name: data.name });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create New Team</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Team Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Acme Inc." {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={createOrganizationStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createOrganizationStatus === "pending"} type="submit">
+                {createOrganizationStatus === "pending" ? "Creating Team..." : "Create Team"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/delete-organization-modal.tsx b/apps/www/src/features/studio/organizations/delete-organization-modal.tsx
new file mode 100644
index 000000000..e34d40fa5
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/delete-organization-modal.tsx
@@ -0,0 +1,110 @@
+import { zodResolver } from "@hookform/resolvers/zod";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useForm } from "react-hook-form";
+import { z } from "zod/v3";
+
+interface DeleteOrganizationModalProps {
+  open: boolean;
+  onClose: () => void;
+  onDelete: () => void;
+  trigger: React.ReactNode;
+  organizationSlug: string;
+}
+
+interface DeleteOrganizationForm {
+  confirmation: string;
+}
+
+export function DeleteOrganizationModal({
+  open,
+  onClose,
+  onDelete,
+  trigger,
+  organizationSlug,
+}: DeleteOrganizationModalProps) {
+  const deleteOrganizationSchema = z.object({
+    confirmation: z.string().refine((value) => value === `${organizationSlug}`, {
+      message: "Please enter the text exactly as it is shown to confirm deletion",
+    }),
+  });
+
+  const form = useForm<DeleteOrganizationForm>({
+    defaultValues: {
+      confirmation: "",
+    },
+    resolver: zodResolver(deleteOrganizationSchema),
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+    }
+  };
+
+  const onSubmit = () => {
+    onClose();
+    onDelete();
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm">
+        <DialogHeader>
+          <DialogTitle>Delete Team</DialogTitle>
+          <DialogDescription>
+            This action cannot be undone. This will permanently delete the organization and all
+            associated data.
+          </DialogDescription>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="mt-2 space-y-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="confirmation"
+              render={({ field }) => (
+                <FormItem>
+                  <FormLabel>
+                    Please type <span className="select-text font-mono">{organizationSlug}</span> to
+                    confirm
+                  </FormLabel>
+                  <FormControl>
+                    <Input placeholder={`${organizationSlug}`} {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <DialogFooter className="justify-between">
+              <Button className="mt-3" onClick={onClose} variant="outline">
+                Cancel
+              </Button>
+              <Button className="mt-3" type="submit" variant="destructive">
+                Delete Team
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/overview/date-range-filter.tsx b/apps/www/src/features/studio/organizations/overview/date-range-filter.tsx
new file mode 100644
index 000000000..3a91c6028
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/overview/date-range-filter.tsx
@@ -0,0 +1,85 @@
+import {
+  Button,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import { PlusIcon } from "lucide-react";
+
+export type DateRange = "last_7d" | "last_30d" | "last_90d";
+export type Granularity = "daily" | "weekly" | "monthly";
+
+interface DateRangeFilterProps {
+  dateRange: DateRange;
+  granularity: Granularity;
+  onDateRangeChange: (range: DateRange) => void;
+  onGranularityChange: (granularity: Granularity) => void;
+}
+
+const DATE_RANGE_OPTIONS: { value: DateRange; label: string }[] = [
+  { value: "last_7d", label: "7D" },
+  { value: "last_30d", label: "30D" },
+  { value: "last_90d", label: "90D" },
+];
+
+const GRANULARITY_OPTIONS: { value: Granularity; label: string }[] = [
+  { value: "daily", label: "Daily" },
+  { value: "weekly", label: "Weekly" },
+  { value: "monthly", label: "Monthly" },
+];
+
+const isDateRange = (value: string): value is DateRange =>
+  DATE_RANGE_OPTIONS.some((opt) => opt.value === value);
+
+const isGranularity = (value: string): value is Granularity =>
+  GRANULARITY_OPTIONS.some((opt) => opt.value === value);
+
+export const DateRangeFilter = ({
+  dateRange,
+  granularity,
+  onDateRangeChange,
+  onGranularityChange,
+}: DateRangeFilterProps) => (
+  <div className="flex items-center gap-3">
+    <ToggleGroup
+      onValueChange={(value: string) => {
+        if (value && isDateRange(value)) {
+          onDateRangeChange(value);
+        }
+      }}
+      type="single"
+      value={dateRange}
+      variant="outline"
+    >
+      {DATE_RANGE_OPTIONS.map((option) => (
+        <ToggleGroupItem key={option.value} value={option.value} className="cursor-pointer">
+          {option.label}
+        </ToggleGroupItem>
+      ))}
+    </ToggleGroup>
+
+    <Select
+      onValueChange={(v: string) => {
+        if (isGranularity(v)) {
+          onGranularityChange(v);
+        }
+      }}
+      value={granularity}
+    >
+      <SelectTrigger className="cursor-pointer">
+        <SelectValue />
+      </SelectTrigger>
+      <SelectContent>
+        {GRANULARITY_OPTIONS.map((option) => (
+          <SelectItem key={option.value} value={option.value} className="cursor-pointer">
+            {option.label}
+          </SelectItem>
+        ))}
+      </SelectContent>
+    </Select>
+  </div>
+);
diff --git a/apps/www/src/features/studio/organizations/overview/format.ts b/apps/www/src/features/studio/organizations/overview/format.ts
new file mode 100644
index 000000000..f30b715b5
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/overview/format.ts
@@ -0,0 +1,65 @@
+// ---------------------------------------------------------------------------
+// Formatting utilities for the organization overview dashboard.
+// Uses Intl.NumberFormat, matching existing patterns (kpi-card.tsx).
+// ---------------------------------------------------------------------------
+
+const currencyFormatter = new Intl.NumberFormat("en-US", {
+  style: "currency",
+  currency: "USD",
+  minimumFractionDigits: 0,
+  maximumFractionDigits: 0,
+});
+
+const currencyDecimalFormatter = new Intl.NumberFormat("en-US", {
+  style: "currency",
+  currency: "USD",
+  minimumFractionDigits: 2,
+  maximumFractionDigits: 2,
+});
+
+const numberFormatter = new Intl.NumberFormat("en-US");
+const percentValueFormatter = new Intl.NumberFormat("en-US", {
+  minimumFractionDigits: 1,
+  maximumFractionDigits: 1,
+});
+
+export type MetricValueFormat = "currency" | "number" | "percent";
+
+export const formatCurrency = (value: number): string => {
+  if (Number.isInteger(value)) {
+    return currencyFormatter.format(value);
+  }
+  return currencyDecimalFormatter.format(value);
+};
+
+export const formatNumber = (value: number): string => numberFormatter.format(value);
+
+export const formatPercentValue = (value: number): string =>
+  `${percentValueFormatter.format(value)}%`;
+
+export const formatMetricValue = (value: number, valueFormat: MetricValueFormat): string => {
+  switch (valueFormat) {
+    case "currency":
+      return formatCurrency(value);
+    case "percent":
+      return formatPercentValue(value);
+    case "number":
+    default:
+      return formatNumber(value);
+  }
+};
+
+export const formatPercentChange = (change: number): string => {
+  const sign = change >= 0 ? "+" : "";
+  return `${sign}${change.toFixed(1)}%`;
+};
+
+export const formatCompactCurrency = (value: number): string => {
+  if (value >= 1_000_000) {
+    return `$${(value / 1_000_000).toFixed(1)}M`;
+  }
+  if (value >= 1_000) {
+    return `$${(value / 1_000).toFixed(0)}k`;
+  }
+  return `$${value}`;
+};
diff --git a/apps/www/src/features/studio/organizations/overview/metric-card.tsx b/apps/www/src/features/studio/organizations/overview/metric-card.tsx
new file mode 100644
index 000000000..e1532e2af
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/overview/metric-card.tsx
@@ -0,0 +1,98 @@
+import {
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  cn,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+import { formatMetricValue, formatPercentChange, type MetricValueFormat } from "./format";
+import type { OverviewTimeSeriesPoint } from "./today-chart";
+
+interface MetricCardProps {
+  label: string;
+  currentValue: number;
+  previousValue: number | null;
+  percentChange: number | null;
+  valueFormat: MetricValueFormat;
+  timeSeries: OverviewTimeSeriesPoint[];
+  chartColor?: string;
+  className?: string;
+}
+
+export const MetricCard = ({
+  label,
+  currentValue,
+  previousValue,
+  percentChange,
+  valueFormat,
+  timeSeries,
+  className,
+  chartColor = "var(--chart-1)",
+}: MetricCardProps) => {
+  const isPositive = percentChange === null ? true : percentChange >= 0;
+  const dataKey = "value";
+
+  const chartConfig = {
+    [dataKey]: {
+      color: chartColor,
+      label,
+    },
+  } satisfies ChartConfig;
+
+  return (
+    <div className={cn("ring-0 rounded-none", className)}>
+      <div className="px-4 py-4">
+        <div className="text-muted-foreground text-sm">{label}</div>
+        <div className="mt-1 flex items-baseline gap-3 my-2 pt-1">
+          <span className="font-medium text-lg leading-none sm:text-2xl">
+            {formatMetricValue(currentValue, valueFormat)}
+          </span>
+          <span
+            className={`inline-flex items-center gap-0.5 text-sm ${isPositive ? "text-success" : "text-destructive"}`}
+          >
+            {percentChange === null ? "—" : formatPercentChange(percentChange)}
+          </span>
+        </div>
+        <div className="mt-1 text-muted-foreground text-sm">
+          {previousValue === null
+            ? "— previous period"
+            : `${formatMetricValue(previousValue, valueFormat)} previous period`}
+        </div>
+      </div>
+      <div className="px-4 py-4">
+        <ChartContainer config={chartConfig}>
+          <LineChart accessibilityLayer data={timeSeries} margin={{ left: 12, right: 12 }}>
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="date"
+              tickFormatter={(value: string) => {
+                const d = new Date(value);
+                return d.toLocaleDateString("en-US", { month: "short", day: "numeric" });
+              }}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey={dataKey}
+              dot={false}
+              stroke={`var(--color-${dataKey})`}
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </div>
+    </div>
+  );
+};
diff --git a/apps/www/src/features/studio/organizations/overview/organization-overview.tsx b/apps/www/src/features/studio/organizations/overview/organization-overview.tsx
new file mode 100644
index 000000000..d70b4d14b
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/overview/organization-overview.tsx
@@ -0,0 +1,113 @@
+import { useQuery } from "@tanstack/react-query";
+import { useState } from "react";
+import type { QueryAnalyticsInsightsResponseType } from "@voidhash/rpc";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  Page,
+  PageHeader,
+  PageHeaderTitle,
+} from "@voidhash/ui";
+
+import {
+  buildOverviewMetricCards,
+  buildTodayChartData,
+  mapAnalyticsResultsByKey,
+} from "@/features/studio/analytics/overview/result-mappers";
+import { buildOverviewAnalyticsRequest } from "@/features/studio/analytics/overview/query-builders";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { queryAnalyticsInsightsOptions } from "@/features/studio/lib/tanstack-query";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+import { type DateRange, type Granularity } from "./date-range-filter";
+import { OverviewSection } from "./overview-section";
+import { TodayChart } from "./today-chart";
+
+interface OrganizationOverviewProps {
+  organizationSlug: string;
+}
+
+export const OrganizationOverview = ({ organizationSlug }: OrganizationOverviewProps) => {
+  const { user } = useAuth();
+  const [dateRange, setDateRange] = useState<DateRange>("last_7d");
+  const [granularity, setGranularity] = useState<Granularity>("daily");
+
+  const activeOrganization = user.organizations.find((org) => org.slug === organizationSlug);
+
+  // Hooks must run unconditionally, so the analytics query is declared before
+  // the missing-org guard and gated with `enabled`.
+  const analyticsQuery = useQuery({
+    ...queryAnalyticsInsightsOptions(
+      buildOverviewAnalyticsRequest({
+        dateRange,
+        granularity,
+        organizationId: activeOrganization?.id ?? "",
+      }),
+    ),
+    enabled: Boolean(activeOrganization),
+  });
+
+  if (!activeOrganization) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Organization not found" }} />;
+  }
+
+  const analyticsData = analyticsQuery.data as QueryAnalyticsInsightsResponseType | undefined;
+  const resultsByKey = mapAnalyticsResultsByKey(analyticsData?.results ?? []);
+  const todayChart = buildTodayChartData(resultsByKey);
+  const metrics = buildOverviewMetricCards(resultsByKey);
+
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>{activeOrganization.name}</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-7xl px-4 pt-4">
+        {analyticsQuery.isError ? (
+          // Keep the org shell rendered — a transient analytics/provisioning
+          // hiccup shouldn't blank the whole page. Offer a retry inline.
+          <Card>
+            <CardHeader>
+              <CardTitle>Analytics temporarily unavailable</CardTitle>
+            </CardHeader>
+            <CardContent className="flex flex-col items-start gap-3">
+              <p className="text-muted-foreground text-sm">
+                We couldn't load analytics for this organization. This can happen briefly while a
+                new organization is being set up.
+              </p>
+              <Button onClick={() => analyticsQuery.refetch()} variant="outline">
+                Retry
+              </Button>
+            </CardContent>
+          </Card>
+        ) : (
+          <>
+            <Card>
+              <CardHeader>
+                <CardTitle>Today</CardTitle>
+              </CardHeader>
+              <CardContent className="px-0 py-0">
+                <TodayChart
+                  grossRevenue={todayChart.grossRevenue}
+                  timeSeries={todayChart.timeSeries}
+                  yesterdayRevenue={todayChart.yesterdayRevenue}
+                />
+              </CardContent>
+            </Card>
+            <div className="mt-4">
+              <OverviewSection
+                dateRange={dateRange}
+                granularity={granularity}
+                metrics={metrics}
+                onDateRangeChange={setDateRange}
+                onGranularityChange={setGranularity}
+              />
+            </div>
+          </>
+        )}
+      </div>
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/organizations/overview/overview-section.tsx b/apps/www/src/features/studio/organizations/overview/overview-section.tsx
new file mode 100644
index 000000000..1d313906d
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/overview/overview-section.tsx
@@ -0,0 +1,97 @@
+import { type DateRange, DateRangeFilter, type Granularity } from "./date-range-filter";
+import { MetricCard } from "./metric-card";
+import type { MetricValueFormat } from "./format";
+import type { OverviewTimeSeriesPoint } from "./today-chart";
+import { Card, CardAction, CardContent, CardHeader, CardTitle, cn } from "@voidhash/ui";
+
+export interface OverviewMetricCardData {
+  currentValue: number;
+  id: string;
+  label: string;
+  percentChange: number | null;
+  previousValue: number | null;
+  timeSeries: OverviewTimeSeriesPoint[];
+  valueFormat: MetricValueFormat;
+}
+
+interface OverviewSectionProps {
+  columns?: 2 | 3;
+  dateRange: DateRange;
+  granularity: Granularity;
+  metrics: OverviewMetricCardData[];
+  onDateRangeChange: (range: DateRange) => void;
+  onGranularityChange: (granularity: Granularity) => void;
+  title?: string;
+}
+
+const CHART_COLORS = [
+  "var(--chart-1)",
+  "var(--chart-2)",
+  "var(--chart-3)",
+  "var(--chart-4)",
+  "var(--chart-5)",
+];
+
+interface OverviewMetricsGridProps {
+  columns?: 2 | 3;
+  metrics: OverviewMetricCardData[];
+}
+
+export const OverviewMetricsGrid = ({ columns = 3, metrics }: OverviewMetricsGridProps) => (
+  <div
+    className={cn(
+      "grid gap-0 py-0",
+      columns === 2 ? "grid-cols-1 md:grid-cols-2" : "grid-cols-1 lg:grid-cols-3",
+    )}
+  >
+    {metrics.map((metric, index) => (
+      <MetricCard
+        key={metric.id}
+        chartColor={CHART_COLORS[index % CHART_COLORS.length] ?? CHART_COLORS[0]}
+        className={cn(
+          "border-border",
+          index > 0 && "border-t",
+          columns === 2 && index % 2 > 0 && "md:border-l",
+          columns === 2 && index < 2 && "md:border-t-0",
+          columns === 2 && index >= 2 && "md:border-t",
+          columns === 3 && index % 3 > 0 && "lg:border-l",
+          columns === 3 && index < 3 && "lg:border-t-0",
+          columns === 3 && index >= 3 && "lg:border-t",
+        )}
+        currentValue={metric.currentValue}
+        label={metric.label}
+        percentChange={metric.percentChange}
+        previousValue={metric.previousValue}
+        timeSeries={metric.timeSeries}
+        valueFormat={metric.valueFormat}
+      />
+    ))}
+  </div>
+);
+
+export const OverviewSection = ({
+  columns = 3,
+  dateRange,
+  granularity,
+  metrics,
+  onDateRangeChange,
+  onGranularityChange,
+  title = "Your overview",
+}: OverviewSectionProps) => (
+  <Card>
+    <CardHeader>
+      <CardTitle>{title}</CardTitle>
+      <CardAction>
+        <DateRangeFilter
+          dateRange={dateRange}
+          granularity={granularity}
+          onDateRangeChange={onDateRangeChange}
+          onGranularityChange={onGranularityChange}
+        />
+      </CardAction>
+    </CardHeader>
+    <CardContent className="px-0 py-0">
+      <OverviewMetricsGrid columns={columns} metrics={metrics} />
+    </CardContent>
+  </Card>
+);
diff --git a/apps/www/src/features/studio/organizations/overview/today-chart.tsx b/apps/www/src/features/studio/organizations/overview/today-chart.tsx
new file mode 100644
index 000000000..8a3354e5e
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/overview/today-chart.tsx
@@ -0,0 +1,98 @@
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  cn,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis } from "recharts";
+
+import { formatCurrency } from "./format";
+
+export interface OverviewTimeSeriesPoint {
+  date: string;
+  value: number;
+}
+
+interface TodayChartProps {
+  className?: string;
+  grossRevenue: number;
+  timeSeries: OverviewTimeSeriesPoint[];
+  yesterdayRevenue: number | null;
+}
+
+const chartConfig = {
+  value: {
+    color: "var(--chart-1)",
+    label: "Revenue",
+  },
+} satisfies ChartConfig;
+
+export const TodayChart = ({
+  className,
+  grossRevenue,
+  yesterdayRevenue,
+  timeSeries,
+}: TodayChartProps) => (
+  <div className={cn("flex flex-col py-4 sm:py-0", className)}>
+    <div className="p-0! flex flex-col items-stretch border-b sm:flex-row">
+      <div className="flex min-w-48 flex-col justify-center gap-1 px-6 py-4 text-left odd:border-r sm:px-8 sm:py-6">
+        <span className="text-muted-foreground text-sm">Gross Revenue</span>
+        <span className="mt-1 font-medium text-lg leading-none sm:text-2xl">
+          {formatCurrency(grossRevenue)}
+        </span>
+      </div>
+      <div className="flex min-w-48 flex-col justify-center gap-1 px-6 py-4 text-left odd:border-r sm:px-8 sm:py-6">
+        <span className="text-muted-foreground text-sm">Yesterday</span>
+        <span className="mt-1 font-medium text-lg text-muted-foreground leading-none sm:text-xl">
+          {yesterdayRevenue === null ? "—" : formatCurrency(yesterdayRevenue)}
+        </span>
+      </div>
+    </div>
+    <div className="px-2 sm:p-6">
+      <ChartContainer className="h-62.5 w-full" config={chartConfig}>
+        <LineChart accessibilityLayer data={timeSeries} margin={{ left: 12, right: 12 }}>
+          <CartesianGrid vertical={false} />
+          <XAxis
+            axisLine={false}
+            dataKey="date"
+            minTickGap={32}
+            tickFormatter={(value: string) => {
+              const d = new Date(value);
+              return d.toLocaleTimeString("en-US", {
+                hour: "numeric",
+                minute: "2-digit",
+              });
+            }}
+            tickLine={false}
+            tickMargin={8}
+          />
+          <ChartTooltip
+            content={
+              <ChartTooltipContent
+                className="w-[150px]"
+                labelFormatter={(value: string) =>
+                  new Date(value).toLocaleTimeString("en-US", {
+                    hour: "numeric",
+                    minute: "2-digit",
+                  })
+                }
+                nameKey="value"
+              />
+            }
+          />
+          <Line
+            dataKey="value"
+            dot={false}
+            stroke="var(--color-value)"
+            strokeWidth={2}
+            type="monotone"
+          />
+        </LineChart>
+      </ChartContainer>
+    </div>
+  </div>
+);
diff --git a/apps/www/src/features/studio/organizations/projects/empty-state.tsx b/apps/www/src/features/studio/organizations/projects/empty-state.tsx
new file mode 100644
index 000000000..fbabdfe76
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/projects/empty-state.tsx
@@ -0,0 +1,39 @@
+"use client";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { useState } from "react";
+import { CreateProjectModal } from "@/features/studio/projects/create-project-modal";
+
+export function EmptyState({
+  organizationId,
+  organizationSlug,
+}: {
+  organizationId: string;
+  organizationSlug: string;
+}) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <Card className="mx-auto w-full max-w-5xl text-center">
+      <CardHeader>
+        <CardTitle>No projects yet</CardTitle>
+        <CardDescription>Create a project to get started.</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <CreateProjectModal
+          onClose={() => setOpen(false)}
+          open={open}
+          organizationId={organizationId}
+          organizationSlug={organizationSlug}
+          trigger={<Button onClick={() => setOpen(true)}>Create project</Button>}
+        />
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/projects/projects-list.tsx b/apps/www/src/features/studio/organizations/projects/projects-list.tsx
new file mode 100644
index 000000000..888795763
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/projects/projects-list.tsx
@@ -0,0 +1,106 @@
+import { Link } from "@tanstack/react-router";
+import {
+  Button,
+  Card,
+  CardAction,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  cn,
+  GradientAvatar,
+  ScrollArea,
+} from "@voidhash/ui";
+import { PlusIcon } from "lucide-react";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+import { EmptyState } from "./empty-state";
+import { CreateProjectModal } from "../../projects/create-project-modal";
+import { useState } from "react";
+
+export const ProjectsList = ({
+  organizationSlug,
+  className,
+}: {
+  organizationSlug: string;
+  className?: string;
+}) => {
+  const { user } = useAuth();
+  const [createProjectModalOpen, setCreateProjectModalOpen] = useState(false);
+
+  const activeOrganization = user.organizations.find(
+    (organization) => organization.slug === organizationSlug,
+  );
+  if (!activeOrganization) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "NOT_FOUND",
+          message: "Organization not found",
+        }}
+      />
+    );
+  }
+  const projects = user.projects.filter(
+    (project) => project.organizationId === activeOrganization?.id,
+  );
+  if (projects.length === 0) {
+    return (
+      <EmptyState organizationId={activeOrganization?.id} organizationSlug={organizationSlug} />
+    );
+  }
+  return (
+    <Card className={cn("min-h-0 justify-start flex-col", className)}>
+      <CardHeader>
+        <CardTitle>Projects</CardTitle>
+        <CardAction>
+          <CreateProjectModal
+            open={createProjectModalOpen}
+            onClose={() => setCreateProjectModalOpen(false)}
+            trigger={
+              <Button
+                variant="outline"
+                size="icon"
+                className="cursor-pointer"
+                onClick={() => setCreateProjectModalOpen(true)}
+              >
+                <PlusIcon className="h-4 w-4" />
+              </Button>
+            }
+            organizationId={activeOrganization.id}
+            organizationSlug={organizationSlug}
+          />
+        </CardAction>
+      </CardHeader>
+      <CardContent className={cn("gap-0 p-0 min-h-0 flex-1 overflow-hidden")}>
+        <ScrollArea className="h-full" fadeHint>
+          <div className="divide-y divide-border">
+            {projects?.map((project) => (
+              <div className="group relative isolate px-6 py-4 hover:bg-accent/30" key={project.id}>
+                <Link
+                  className="absolute inset-0 h-full w-full"
+                  params={{ organizationSlug, projectSlug: project.slug }}
+                  to="/studio/$organizationSlug/$projectSlug"
+                />
+                <div className="flex flex-row items-center justify-between">
+                  <div className="flex items-center gap-4">
+                    <GradientAvatar
+                      alt={project.name}
+                      className="h-8 w-8 rounded-lg text-xs"
+                      fallback={project.id}
+                      src={project.logo ?? undefined}
+                    />
+                    <div className="flex flex-col">
+                      <p>{project.name}</p>
+                      <p className="mt-1 text-muted-foreground text-sm">No URL specified</p>
+                    </div>
+                  </div>
+                </div>
+              </div>
+            ))}
+          </div>
+        </ScrollArea>
+      </CardContent>
+    </Card>
+  );
+};
diff --git a/apps/www/src/features/studio/organizations/projects/projects-page.tsx b/apps/www/src/features/studio/organizations/projects/projects-page.tsx
new file mode 100644
index 000000000..35d26c450
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/projects/projects-page.tsx
@@ -0,0 +1,22 @@
+"use client";
+import { useParams } from "next/navigation";
+import { Page } from "@/features/studio/shell";
+
+import { ProjectsList } from "./projects-list";
+
+export function ProjectsPage() {
+  const { organizationSlug } = useParams();
+  return (
+    <Page>
+      <div className="mx-auto max-w-4xl">
+        <h1 className="font-normal text-3xl tracking-right">Projects</h1>
+        <p className="mt-3 text-muted-foreground">
+          All projects of organization {organizationSlug}
+        </p>
+        <div className="mt-8">
+          <ProjectsList organizationSlug={organizationSlug as string} />
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/projects/projects-skeleton.tsx b/apps/www/src/features/studio/organizations/projects/projects-skeleton.tsx
new file mode 100644
index 000000000..ecfb1a171
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/projects/projects-skeleton.tsx
@@ -0,0 +1,24 @@
+import { Card, Skeleton } from "@voidhash/ui";
+
+export function ProjectsSkeleton() {
+  return (
+    <Card className="grid gap-0 divide-y p-0">
+      {Array.from({ length: 3 }).map((_, index) => (
+        <div
+          className="group relative isolate px-6 py-4 hover:bg-accent/30"
+          // biome-ignore lint/suspicious/noArrayIndexKey: just a skeleton
+          key={index}
+        >
+          <div className="flex flex-row items-center justify-between">
+            <div className="flex items-center gap-4">
+              <Skeleton className="h-8 w-8 rounded-lg" />
+              <div className="flex flex-col">
+                <Skeleton className="h-4 w-32" />
+              </div>
+            </div>
+          </div>
+        </div>
+      ))}
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/settings/data-table.tsx b/apps/www/src/features/studio/organizations/settings/data-table.tsx
new file mode 100644
index 000000000..7db0782e6
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/settings/data-table.tsx
@@ -0,0 +1,115 @@
+"use client";
+
+import { type ColumnDef, flexRender, getCoreRowModel, useReactTable } from "@tanstack/react-table";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@voidhash/ui";
+import { EllipsisIcon } from "lucide-react";
+
+interface DataTableProps<TData, TValue> {
+  columns: ColumnDef<TData, TValue>[];
+  data: TData[];
+  emptyMessage?: string;
+  actions: {
+    onClick: (data: TData) => void;
+    label: string;
+    icon: React.ReactNode;
+  }[];
+}
+
+export function DataTable<TData, TValue>({
+  columns,
+  data,
+  emptyMessage = "No data",
+  actions = [],
+}: DataTableProps<TData, TValue>) {
+  const table = useReactTable({
+    columns,
+    data,
+    getCoreRowModel: getCoreRowModel(),
+  });
+
+  return (
+    <div className="rounded-lg border border-separator-2">
+      <Table>
+        <TableHeader className="bg-surface-2">
+          {table.getHeaderGroups().map((headerGroup) => (
+            <TableRow key={headerGroup.id}>
+              {headerGroup.headers.map((header) => (
+                <TableHead key={header.id}>
+                  {header.isPlaceholder
+                    ? null
+                    : flexRender(header.column.columnDef.header, header.getContext())}
+                </TableHead>
+              ))}
+              <th />
+            </TableRow>
+          ))}
+        </TableHeader>
+        <TableBody>
+          {table.getRowModel().rows?.length ? (
+            table.getRowModel().rows.map((row) => (
+              <TableRow data-state={row.getIsSelected() && "selected"} key={row.id}>
+                {row.getVisibleCells().map((cell) => (
+                  <TableCell key={cell.id}>
+                    {flexRender(cell.column.columnDef.cell, cell.getContext())}
+                  </TableCell>
+                ))}
+
+                {/* Actions */}
+                <td className="relative bg-white">
+                  <span className="flex h-full w-full items-center justify-end px-2">
+                    <DropdownMenu>
+                      <DropdownMenuTrigger asChild>
+                        <Button variant="outline">
+                          {/* <span className="mr-2">Actions</span> */}
+                          <span className="flex items-center space-x-1">
+                            <EllipsisIcon
+                              className="text-onsurface-secondary"
+                              size={16}
+                              strokeWidth={2}
+                            />
+                          </span>
+                        </Button>
+                      </DropdownMenuTrigger>
+                      <DropdownMenuContent align="end" className="w-56">
+                        {actions.map((action) => (
+                          <DropdownMenuItem asChild className="cursor-pointer" key={action.label}>
+                            <button
+                              className="flex w-full cursor-pointer items-center gap-2 text-left"
+                              onClick={() => action.onClick(row.original)}
+                              type="button"
+                            >
+                              <span className="text-onsurface-secondary">{action.icon}</span>
+                              <span>{action.label}</span>
+                            </button>
+                          </DropdownMenuItem>
+                        ))}
+                      </DropdownMenuContent>
+                    </DropdownMenu>
+                  </span>
+                </td>
+              </TableRow>
+            ))
+          ) : (
+            <TableRow>
+              <TableCell className="h-24 text-center" colSpan={columns.length}>
+                {emptyMessage}
+              </TableCell>
+            </TableRow>
+          )}
+        </TableBody>
+      </Table>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/settings/general/settings-general-layout.tsx b/apps/www/src/features/studio/organizations/settings/general/settings-general-layout.tsx
new file mode 100644
index 000000000..460ef4f23
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/settings/general/settings-general-layout.tsx
@@ -0,0 +1,7 @@
+import type { ReactNode } from "react";
+
+import { SettingsPage } from "@/features/studio/settings";
+
+export function SettingsGeneralLayout({ children }: { children: ReactNode }) {
+  return <SettingsPage title="Team Settings">{children}</SettingsPage>;
+}
diff --git a/apps/www/src/features/studio/organizations/settings/general/team-avatar.tsx b/apps/www/src/features/studio/organizations/settings/general/team-avatar.tsx
new file mode 100644
index 000000000..6f623b015
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/settings/general/team-avatar.tsx
@@ -0,0 +1,74 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { toast } from "sonner";
+import { AvatarUploader } from "@/features/studio/components/avatar-uploader";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import {
+  removeOrganizationAvatarOptions,
+  setOrganizationAvatarOptions,
+} from "@/features/studio/lib/tanstack-query/organizations";
+import { SettingsCard, SettingsRow, SettingsSection } from "@/features/studio/settings";
+
+const errorMessage = (error: unknown, fallback: string): string =>
+  error && typeof error === "object" && "message" in error && typeof error.message === "string"
+    ? error.message
+    : fallback;
+
+export function TeamAvatarForm({
+  organization,
+}: {
+  organization: { id: string; name: string; logo: string | null };
+}) {
+  const queryClient = useQueryClient();
+  const invalidate = () => queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+
+  const setAvatar = useMutation({
+    ...setOrganizationAvatarOptions(),
+    onSuccess: () => {
+      toast.success("Team avatar updated");
+      invalidate();
+    },
+    onError: (error) => toast.error(errorMessage(error, "Failed to update team avatar")),
+  });
+
+  const removeAvatar = useMutation({
+    ...removeOrganizationAvatarOptions(),
+    onSuccess: () => {
+      toast.success("Team avatar removed");
+      invalidate();
+    },
+    onError: () => toast.error("Failed to remove team avatar"),
+  });
+
+  const isPending = setAvatar.status === "pending" || removeAvatar.status === "pending";
+
+  return (
+    <SettingsSection title="Team Avatar">
+      <SettingsCard
+        footer={
+          <span className="text-[12px] text-muted-foreground">
+            An avatar is optional but strongly recommended.
+          </span>
+        }
+      >
+        <SettingsRow
+          control={
+            <AvatarUploader
+              fallback={organization.id}
+              isPending={isPending}
+              name={organization.name}
+              onRemove={() => removeAvatar.mutate({ organizationId: organization.id })}
+              onUpload={({ imageBase64, contentType }) =>
+                setAvatar.mutate({ organizationId: organization.id, imageBase64, contentType })
+              }
+              src={organization.logo}
+            />
+          }
+          description="Click on the avatar to upload a custom one from your files."
+          title="This is your team's avatar."
+        />
+      </SettingsCard>
+    </SettingsSection>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/settings/general/team-delete.tsx b/apps/www/src/features/studio/organizations/settings/general/team-delete.tsx
new file mode 100644
index 000000000..4cc67c131
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/settings/general/team-delete.tsx
@@ -0,0 +1,75 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { useNavigate, useParams } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui";
+import { useState } from "react";
+import { toast } from "sonner";
+import { DeleteOrganizationModal } from "@/features/studio/organizations/delete-organization-modal";
+import { SettingsCard, SettingsRow, SettingsSection } from "@/features/studio/settings";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import { deleteOrganizationOptions } from "@/features/studio/lib/tanstack-query/organizations";
+
+export function TeamDelete({ organizationId }: { organizationId: string }) {
+  const { organizationSlug } = useParams({
+    strict: false,
+  });
+  const navigate = useNavigate();
+
+  const queryClient = useQueryClient();
+  const { mutate: deleteOrganization, status: deleteOrganizationStatus } = useMutation({
+    ...deleteOrganizationOptions(),
+    onSuccess: () => {
+      toast.success("Organization deleted successfully");
+      queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+      navigate({ to: "/studio" });
+    },
+    onError: () => {
+      toast.error("Failed to delete organization");
+    },
+  });
+
+  const handleDelete = () => {
+    deleteOrganization({
+      organizationId,
+    });
+  };
+
+  const [deleteModalOpen, setDeleteModalOpen] = useState(false);
+  const isPending = deleteOrganizationStatus === "pending";
+
+  if (typeof organizationSlug !== "string") {
+    return null;
+  }
+
+  return (
+    <SettingsSection title="Danger zone">
+      <SettingsCard variant="destructive">
+        <SettingsRow
+          control={
+            <DeleteOrganizationModal
+              key={deleteModalOpen ? "open" : "closed"}
+              onClose={() => setDeleteModalOpen(false)}
+              onDelete={handleDelete}
+              open={deleteModalOpen}
+              organizationSlug={organizationSlug}
+              trigger={
+                <Button
+                  disabled={isPending}
+                  onClick={() => setDeleteModalOpen(true)}
+                  size="sm"
+                  variant="destructive"
+                >
+                  {isPending ? "Deleting..." : "Delete team"}
+                </Button>
+              }
+            />
+          }
+          description="Permanently delete your team and all associated data. This action cannot be undone."
+          destructive={true}
+          title="Delete team"
+        />
+      </SettingsCard>
+    </SettingsSection>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/settings/general/team-name.tsx b/apps/www/src/features/studio/organizations/settings/general/team-name.tsx
new file mode 100644
index 000000000..d5070d2cf
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/settings/general/team-name.tsx
@@ -0,0 +1,107 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormMessage,
+  Input,
+} from "@voidhash/ui";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { SettingsCard, SettingsRow, SettingsSection } from "@/features/studio/settings";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import { updateOrganizationOptions } from "@/features/studio/lib/tanstack-query/organizations";
+import { z } from "zod/v3";
+
+const updateTeamNameSchema = z.object({
+  name: z
+    .string()
+    .min(1, "Team name is required")
+    .max(32, "Team name must be less than 32 characters"),
+});
+
+type UpdateTeamNameForm = z.infer<typeof updateTeamNameSchema>;
+
+export function TeamNameForm({
+  organization,
+}: {
+  organization: {
+    id: string;
+    name: string;
+  };
+}) {
+  const form = useForm<UpdateTeamNameForm>({
+    defaultValues: {
+      name: organization?.name,
+    },
+    resolver: zodResolver(updateTeamNameSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: updateTeamName, status: updateTeamNameStatus } = useMutation({
+    ...updateOrganizationOptions(),
+    onSuccess: () => {
+      toast.success("Team name updated successfully");
+      queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+    },
+    onError: () => {
+      toast.error("Failed to update team name");
+    },
+  });
+
+  const onSubmit = (data: UpdateTeamNameForm) => {
+    if (!organization) {
+      return;
+    }
+    updateTeamName({
+      name: data.name,
+      organizationId: organization.id,
+    });
+  };
+
+  const isPending = updateTeamNameStatus === "pending";
+
+  return (
+    <SettingsSection title="Team">
+      <Form {...form}>
+        <form onSubmit={form.handleSubmit(onSubmit)}>
+          <SettingsCard
+            footer={
+              <>
+                <span className="text-[12px] text-muted-foreground">
+                  Use up to 32 characters.
+                </span>
+                <Button disabled={isPending} size="sm" type="submit">
+                  {isPending ? "Saving..." : "Save"}
+                </Button>
+              </>
+            }
+          >
+            <SettingsRow
+              control={
+                <FormField
+                  control={form.control}
+                  name="name"
+                  render={({ field }) => (
+                    <FormItem className="w-full sm:w-64">
+                      <FormControl>
+                        <Input placeholder="Enter team name" {...field} />
+                      </FormControl>
+                      <FormMessage />
+                    </FormItem>
+                  )}
+                />
+              }
+              title="Team name"
+            />
+          </SettingsCard>
+        </form>
+      </Form>
+    </SettingsSection>
+  );
+}
diff --git a/apps/www/src/features/studio/organizations/settings/members/columns.tsx b/apps/www/src/features/studio/organizations/settings/members/columns.tsx
new file mode 100644
index 000000000..e4bab3687
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/settings/members/columns.tsx
@@ -0,0 +1,28 @@
+import type { ColumnDef } from "@tanstack/react-table";
+import { format } from "date-fns";
+
+const formatDate = (date: Date) => format(date, "MM/dd/yyyy");
+
+// This type is used to define the shape of our data.
+// You can use a Zod schema here if you want.
+export const membersColumns: ColumnDef<unknown>[] = [
+  {
+    accessorKey: "name",
+    header: "Name",
+  },
+  {
+    accessorKey: "email",
+    header: "Email",
+  },
+  {
+    accessorKey: "role",
+    cell: (props) => <span>{props.getValue() as string}</span>,
+    header: "Role",
+  },
+
+  {
+    accessorKey: "invitedAt",
+    cell: (props) => <span>{formatDate(props.getValue() as Date)}</span>,
+    header: "Joined",
+  },
+];
diff --git a/apps/www/src/features/studio/organizations/settings/pending-invites/columns.tsx b/apps/www/src/features/studio/organizations/settings/pending-invites/columns.tsx
new file mode 100644
index 000000000..1885823f1
--- /dev/null
+++ b/apps/www/src/features/studio/organizations/settings/pending-invites/columns.tsx
@@ -0,0 +1,38 @@
+import type { ColumnDef } from "@tanstack/react-table";
+import { Badge, CopyText } from "@voidhash/ui";
+import { format } from "date-fns";
+
+import { getAppUrl } from "@/lib/origin";
+
+const formatDate = (date: Date) => format(date, "MM/dd/yyyy");
+
+// This type is used to define the shape of our data.
+// You can use a Zod schema here if you want.
+export const invitationsColumns: ColumnDef<unknown>[] = [
+  {
+    accessorKey: "name",
+    cell: (props) => <span>{props.getValue() as string}</span>,
+    header: "Name",
+  },
+  {
+    accessorKey: "status",
+    cell: (props) => (
+      <Badge variant={props.getValue() === "pending" ? "default" : "secondary"}>
+        {props.getValue() as string}
+      </Badge>
+    ),
+    header: "Status",
+  },
+  {
+    accessorKey: "invitedAt",
+    cell: (props) => <span>{formatDate(props.getValue() as Date)}</span>,
+    header: "Invited",
+  },
+  {
+    accessorKey: "id",
+    cell: (props) => (
+      <CopyText text={getAppUrl(`/app/team/join/${props.getValue() as string}`)} />
+    ),
+    header: "Invite link",
+  },
+];
diff --git a/apps/www/src/features/studio/overview/overview-page.tsx b/apps/www/src/features/studio/overview/overview-page.tsx
new file mode 100644
index 000000000..f2cbe3bbd
--- /dev/null
+++ b/apps/www/src/features/studio/overview/overview-page.tsx
@@ -0,0 +1,47 @@
+"use client";
+import { Page } from "@/features/studio/shell";
+
+import { TodayRevenueChart } from "./today-revenue-chart";
+import { ActiveSubsChartWidget } from "./widgets/active-subs-chart-widget";
+import { ActiveTrialsChartWidget } from "./widgets/active-trials-chart-widget";
+import { ARPPUChartWidget } from "./widgets/arppu-chart-widget";
+import { ARPUChartWidget } from "./widgets/arpu-chart-widget";
+import { ARRChartWidget } from "./widgets/arr-chart-widget";
+import { MRRChartWidget } from "./widgets/mrr-chart-widget";
+import { NewSubsChartWidget } from "./widgets/new-subs-chart-widget";
+import { NewTrialsChartWidget } from "./widgets/new-trials-chart-widget";
+import { NewUsersChartWidget } from "./widgets/new-users-chart-widget";
+import { RenewalCanceledSubsChartWidget } from "./widgets/renewal-canceled-subs-chart-widget";
+import { RevenueChartWidget } from "./widgets/revenue-chart-widget";
+
+export const OverviewPage = () => (
+  <Page>
+    {/* Key is used to reload the default form data when the organization slug changes */}
+    <div className="mx-auto max-w-6xl">
+      <div className="flex flex-row items-center justify-between">
+        <h1 className="font-normal text-3xl tracking-right">Today</h1>
+      </div>
+
+      <div className="mt-8">
+        <TodayRevenueChart />
+      </div>
+
+      <div className="mt-8 flex flex-row items-center justify-between">
+        <h1 className="font-normal text-3xl tracking-right">Overview</h1>
+      </div>
+      <div className="mt-8 grid grid-cols-3 gap-4">
+        <RevenueChartWidget />
+        <MRRChartWidget />
+        <ARRChartWidget />
+        <ARPUChartWidget />
+        <ARPPUChartWidget />
+        <NewUsersChartWidget />
+        <ActiveTrialsChartWidget />
+        <NewTrialsChartWidget />
+        <NewSubsChartWidget />
+        <ActiveSubsChartWidget />
+        <RenewalCanceledSubsChartWidget />
+      </div>
+    </div>
+  </Page>
+);
diff --git a/apps/www/src/features/studio/overview/today-revenue-chart.tsx b/apps/www/src/features/studio/overview/today-revenue-chart.tsx
new file mode 100644
index 000000000..963a4fb0a
--- /dev/null
+++ b/apps/www/src/features/studio/overview/today-revenue-chart.tsx
@@ -0,0 +1,137 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import * as React from "react";
+import { CartesianGrid, Line, LineChart, XAxis } from "recharts";
+
+export const description = "An interactive line chart";
+
+const chartData = [
+  {
+    date: "2024-04-01",
+    gross: 222,
+    withoutTax: 150,
+    withoutTaxAndStoreFees: 100,
+  },
+  {
+    date: "2024-04-02",
+    gross: 97,
+    withoutTax: 180,
+    withoutTaxAndStoreFees: 100,
+  },
+  {
+    date: "2024-04-03",
+    gross: 167,
+    withoutTax: 120,
+    withoutTaxAndStoreFees: 100,
+  },
+  {
+    date: "2024-04-04",
+    gross: 242,
+    withoutTax: 260,
+    withoutTaxAndStoreFees: 100,
+  },
+  {
+    date: "2024-04-05",
+    gross: 373,
+    withoutTax: 290,
+    withoutTaxAndStoreFees: 100,
+  },
+];
+
+const chartConfig = {
+  gross: {
+    color: "var(--chart-1)",
+    label: "Gross",
+  },
+  views: {
+    label: "Page Views",
+  },
+  withoutTax: {
+    color: "var(--chart-2)",
+    label: "Without tax",
+  },
+  withoutTaxAndStoreFees: {
+    color: "var(--chart-3)",
+    label: "Without tax and store fees",
+  },
+} satisfies ChartConfig;
+
+export function TodayRevenueChart() {
+  const [activeChart] = React.useState<keyof typeof chartConfig>("gross");
+
+  return (
+    <Card className="py-4 sm:py-0">
+      <CardHeader className="!p-0 flex flex-col items-stretch border-b sm:flex-row">
+        <div className="flex min-w-48 flex-col justify-center gap-1 border-t px-6 py-4 text-left even:border-l sm:border-t-0 sm:border-l sm:px-8 sm:py-6">
+          <span className="text-muted-foreground text-sm">Gross Revenue</span>
+          <span className="mt-1 text-lg leading-none sm:text-2xl">$123,540</span>
+        </div>
+        <div className="flex min-w-48 flex-col justify-center gap-1 border-t px-6 py-4 text-left even:border-l sm:border-t-0 sm:border-l sm:px-8 sm:py-6">
+          <span className="text-muted-foreground text-sm">Yesterday</span>
+          <span className="mt-1 font-semibold text-lg text-muted-foreground leading-none sm:text-xl">
+            $100,540
+          </span>
+        </div>
+      </CardHeader>
+      <CardContent className="px-2 sm:p-6">
+        <ChartContainer className="aspect-auto h-[250px] w-full" config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="date"
+              minTickGap={32}
+              tickFormatter={(value) => {
+                const date = new Date(value);
+                return date.toLocaleDateString("en-US", {
+                  day: "numeric",
+                  month: "short",
+                });
+              }}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <ChartTooltip
+              content={
+                <ChartTooltipContent
+                  className="w-[150px]"
+                  labelFormatter={(value) =>
+                    new Date(value).toLocaleDateString("en-US", {
+                      day: "numeric",
+                      month: "short",
+                      year: "numeric",
+                    })
+                  }
+                  nameKey="views"
+                />
+              }
+            />
+            <Line
+              dataKey={activeChart}
+              dot={false}
+              stroke={`var(--color-${activeChart})`}
+              strokeWidth={2}
+              type="monotone"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/active-subs-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/active-subs-chart-widget.tsx
new file mode 100644
index 000000000..0c9fd2e02
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/active-subs-chart-widget.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for Active Subscriptions";
+
+const chartData = [
+  { activeSubs: 120, month: "January" },
+  { activeSubs: 140, month: "February" },
+  { activeSubs: 158, month: "March" },
+  { activeSubs: 170, month: "April" },
+  { activeSubs: 192, month: "May" },
+  { activeSubs: 217, month: "June" },
+];
+
+const chartConfig = {
+  activeSubs: {
+    color: "var(--chart-1)",
+    label: "Active Subscriptions",
+  },
+} satisfies ChartConfig;
+
+export function ActiveSubsChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">
+          Active Subscriptions
+        </CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">217</div>
+        <div className="mt-2 text-muted-foreground text-sm">192 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="activeSubs"
+              dot={false}
+              stroke="var(--color-activeSubs)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/active-trials-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/active-trials-chart-widget.tsx
new file mode 100644
index 000000000..4ec29fa92
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/active-trials-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for Active Trials";
+
+const chartData = [
+  { activeTrials: 45, month: "January" },
+  { activeTrials: 60, month: "February" },
+  { activeTrials: 55, month: "March" },
+  { activeTrials: 50, month: "April" },
+  { activeTrials: 65, month: "May" },
+  { activeTrials: 70, month: "June" },
+];
+
+const chartConfig = {
+  activeTrials: {
+    color: "var(--chart-1)",
+    label: "Active Trials",
+  },
+} satisfies ChartConfig;
+
+export function ActiveTrialsChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">Active Trials</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">70</div>
+        <div className="mt-2 text-muted-foreground text-sm">65 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="activeTrials"
+              dot={false}
+              stroke="var(--color-activeTrials)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/arppu-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/arppu-chart-widget.tsx
new file mode 100644
index 000000000..3d730d619
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/arppu-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for ARPPU";
+
+const chartData = [
+  { arppu: 24.8, month: "January" },
+  { arppu: 30.4, month: "February" },
+  { arppu: 23.6, month: "March" },
+  { arppu: 7.2, month: "April" },
+  { arppu: 20.8, month: "May" },
+  { arppu: 21.4, month: "June" },
+];
+
+const chartConfig = {
+  arppu: {
+    color: "var(--chart-1)",
+    label: "ARPPU",
+  },
+} satisfies ChartConfig;
+
+export function ARPPUChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">ARPPU</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">$21.40</div>
+        <div className="mt-2 text-muted-foreground text-sm">$20.80 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="arppu"
+              dot={false}
+              stroke="var(--color-arppu)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/arpu-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/arpu-chart-widget.tsx
new file mode 100644
index 000000000..9ba15de7f
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/arpu-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for ARPU";
+
+const chartData = [
+  { arpu: 12.4, month: "January" },
+  { arpu: 15.2, month: "February" },
+  { arpu: 11.8, month: "March" },
+  { arpu: 3.6, month: "April" },
+  { arpu: 10.4, month: "May" },
+  { arpu: 10.7, month: "June" },
+];
+
+const chartConfig = {
+  arpu: {
+    color: "var(--chart-1)",
+    label: "ARPU",
+  },
+} satisfies ChartConfig;
+
+export function ARPUChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">ARPU</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">$10.70</div>
+        <div className="mt-2 text-muted-foreground text-sm">$10.40 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="arpu"
+              dot={false}
+              stroke="var(--color-arpu)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/arr-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/arr-chart-widget.tsx
new file mode 100644
index 000000000..6d62de4a9
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/arr-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for ARR";
+
+const chartData = [
+  { arr: 223_200, month: "January" },
+  { arr: 366_000, month: "February" },
+  { arr: 284_400, month: "March" },
+  { arr: 87_600, month: "April" },
+  { arr: 250_800, month: "May" },
+  { arr: 256_800, month: "June" },
+];
+
+const chartConfig = {
+  arr: {
+    color: "var(--chart-1)",
+    label: "ARR",
+  },
+} satisfies ChartConfig;
+
+export function ARRChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">ARR</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">$256,800</div>
+        <div className="mt-2 text-muted-foreground text-sm">$250,800 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="arr"
+              dot={false}
+              stroke="var(--color-arr)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/mrr-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/mrr-chart-widget.tsx
new file mode 100644
index 000000000..ef10cbade
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/mrr-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for MRR";
+
+const chartData = [
+  { month: "January", mrr: 18_600 },
+  { month: "February", mrr: 30_500 },
+  { month: "March", mrr: 23_700 },
+  { month: "April", mrr: 7300 },
+  { month: "May", mrr: 20_900 },
+  { month: "June", mrr: 21_400 },
+];
+
+const chartConfig = {
+  mrr: {
+    color: "var(--chart-1)",
+    label: "MRR",
+  },
+} satisfies ChartConfig;
+
+export function MRRChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">MRR</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">$21,400</div>
+        <div className="mt-2 text-muted-foreground text-sm">$20,900 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="mrr"
+              dot={false}
+              stroke="var(--color-mrr)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/new-subs-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/new-subs-chart-widget.tsx
new file mode 100644
index 000000000..fe4ddcdb4
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/new-subs-chart-widget.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for New Subscriptions";
+
+const chartData = [
+  { month: "January", newSubs: 15 },
+  { month: "February", newSubs: 20 },
+  { month: "March", newSubs: 18 },
+  { month: "April", newSubs: 12 },
+  { month: "May", newSubs: 22 },
+  { month: "June", newSubs: 25 },
+];
+
+const chartConfig = {
+  newSubs: {
+    color: "var(--chart-1)",
+    label: "New Subscriptions",
+  },
+} satisfies ChartConfig;
+
+export function NewSubsChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">
+          New Subscriptions
+        </CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">25</div>
+        <div className="mt-2 text-muted-foreground text-sm">22 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="newSubs"
+              dot={false}
+              stroke="var(--color-newSubs)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/new-trials-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/new-trials-chart-widget.tsx
new file mode 100644
index 000000000..0cc08c50e
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/new-trials-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for New Trials";
+
+const chartData = [
+  { month: "January", newTrials: 30 },
+  { month: "February", newTrials: 40 },
+  { month: "March", newTrials: 35 },
+  { month: "April", newTrials: 25 },
+  { month: "May", newTrials: 45 },
+  { month: "June", newTrials: 50 },
+];
+
+const chartConfig = {
+  newTrials: {
+    color: "var(--chart-1)",
+    label: "New Trials",
+  },
+} satisfies ChartConfig;
+
+export function NewTrialsChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">New Trials</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">50</div>
+        <div className="mt-2 text-muted-foreground text-sm">45 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="newTrials"
+              dot={false}
+              stroke="var(--color-newTrials)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/new-users-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/new-users-chart-widget.tsx
new file mode 100644
index 000000000..cdf82b443
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/new-users-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for New Users";
+
+const chartData = [
+  { month: "January", newUsers: 150 },
+  { month: "February", newUsers: 200 },
+  { month: "March", newUsers: 180 },
+  { month: "April", newUsers: 200 },
+  { month: "May", newUsers: 250 },
+  { month: "June", newUsers: 200 },
+];
+
+const chartConfig = {
+  newUsers: {
+    color: "var(--chart-1)",
+    label: "New Users",
+  },
+} satisfies ChartConfig;
+
+export function NewUsersChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">New Users</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">200</div>
+        <div className="mt-2 text-muted-foreground text-sm">250 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="newUsers"
+              dot={false}
+              stroke="var(--color-newUsers)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/renewal-canceled-subs-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/renewal-canceled-subs-chart-widget.tsx
new file mode 100644
index 000000000..ffaec0279
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/renewal-canceled-subs-chart-widget.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart for Renewal Canceled Subscriptions";
+
+const chartData = [
+  { month: "January", renewalCanceledSubs: 5 },
+  { month: "February", renewalCanceledSubs: 8 },
+  { month: "March", renewalCanceledSubs: 6 },
+  { month: "April", renewalCanceledSubs: 10 },
+  { month: "May", renewalCanceledSubs: 7 },
+  { month: "June", renewalCanceledSubs: 9 },
+];
+
+const chartConfig = {
+  renewalCanceledSubs: {
+    color: "var(--chart-1)",
+    label: "Renewal Canceled",
+  },
+} satisfies ChartConfig;
+
+export function RenewalCanceledSubsChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">
+          Renewal Canceled
+        </CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">9</div>
+        <div className="mt-2 text-muted-foreground text-sm">7 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="renewalCanceledSubs"
+              dot={false}
+              stroke="var(--color-renewalCanceledSubs)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/overview/widgets/revenue-chart-widget.tsx b/apps/www/src/features/studio/overview/widgets/revenue-chart-widget.tsx
new file mode 100644
index 000000000..091340873
--- /dev/null
+++ b/apps/www/src/features/studio/overview/widgets/revenue-chart-widget.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+} from "@voidhash/ui";
+import { CartesianGrid, Line, LineChart, XAxis, YAxis } from "recharts";
+
+export const description = "A line chart";
+
+const chartData = [
+  { month: "January", revenue: 186 },
+  { month: "February", revenue: 305 },
+  { month: "March", revenue: 237 },
+  { month: "April", revenue: 73 },
+  { month: "May", revenue: 209 },
+  { month: "June", revenue: 214 },
+];
+
+const chartConfig = {
+  revenue: {
+    color: "var(--chart-1)",
+    label: "Revenue",
+  },
+} satisfies ChartConfig;
+
+export function RevenueChartWidget() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="font-semibold text-muted-foreground text-sm">Revenue</CardTitle>
+        <div className="mt-1 font-semibold text-lg leading-none sm:text-2xl">$1,234,567</div>
+        <div className="mt-2 text-muted-foreground text-sm">$1,100,362 previous period</div>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig}>
+          <LineChart
+            accessibilityLayer
+            data={chartData}
+            margin={{
+              left: 12,
+              right: 12,
+            }}
+          >
+            <CartesianGrid vertical={false} />
+            <XAxis
+              axisLine={false}
+              dataKey="month"
+              tickFormatter={(value) => value.slice(0, 3)}
+              tickLine={false}
+              tickMargin={8}
+            />
+            <YAxis
+              axisLine={false}
+              orientation="right"
+              tickLine={false}
+              tickMargin={8}
+              width={50}
+            />
+            <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+            <Line
+              dataKey="revenue"
+              dot={false}
+              stroke="var(--color-revenue)"
+              strokeWidth={2}
+              type="natural"
+            />
+          </LineChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-assets/asset-library.tsx b/apps/www/src/features/studio/paywall-assets/asset-library.tsx
new file mode 100644
index 000000000..3ea0222f9
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-assets/asset-library.tsx
@@ -0,0 +1,170 @@
+"use client";
+
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type { PaywallAssetSchema } from "@voidhash/rpc";
+import { Button, Skeleton, cn } from "@voidhash/ui";
+import { ImagesIcon, UploadIcon } from "lucide-react";
+import { useRef, useState } from "react";
+import { toast } from "sonner";
+import {
+  listPaywallAssetsOptions,
+  queryKeys,
+  uploadPaywallAssetOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { AssetTile } from "./asset-tile";
+import {
+  ACCEPTED_ASSET_ACCEPT,
+  AssetUploadValidationError,
+  prepareAssetUpload,
+} from "./upload-image";
+
+type PaywallAsset = typeof PaywallAssetSchema.Type;
+
+export interface AssetLibraryProps {
+  organizationId: string;
+  /** When true, tiles are clickable and invoke {@link onSelect}. */
+  selectable?: boolean;
+  onSelect?: (asset: PaywallAsset) => void;
+  className?: string;
+}
+
+const GRID_CLASSES = "grid grid-cols-2 gap-4 sm:grid-cols-3 md:grid-cols-4 lg:grid-cols-5";
+
+/** Maps a server-side upload failure to a friendly message (surfacing validation text). */
+function uploadErrorMessage(error: unknown, fileName: string): string {
+  const fallback = `Failed to upload "${fileName}"`;
+  return error && typeof error === "object" && "_tag" in error && error._tag === "EffectQueryFailure"
+    ? (error as unknown as {
+        match: (matcher: {
+          "Rpc/PaywallAssetValidationError": (failure: { message: string }) => string;
+          "Rpc/ActionForbiddenError": (failure: { message: string }) => string;
+          OrElse: () => string;
+        }) => string;
+      }).match({
+        "Rpc/ActionForbiddenError": (failure) => failure.message,
+        "Rpc/PaywallAssetValidationError": (failure) => failure.message,
+        OrElse: () => fallback,
+      })
+    : fallback;
+}
+
+/**
+ * Organization-scoped paywall image library. Renders a responsive thumbnail
+ * grid with per-asset actions (rename / copy URL / delete) and an upload
+ * affordance backed by a hidden multi-file input. Uploads are validated
+ * client-side (type + 8 MiB cap), stamped with natural dimensions, and sent as
+ * original bytes — no re-encoding. When `selectable`, clicking a tile calls
+ * `onSelect`; the same component powers both the management page and the
+ * designer picker.
+ */
+export function AssetLibrary({
+  organizationId,
+  selectable,
+  onSelect,
+  className,
+}: AssetLibraryProps) {
+  const queryClient = useQueryClient();
+  const inputRef = useRef<HTMLInputElement>(null);
+  const [isUploading, setIsUploading] = useState(false);
+
+  const { data: assets, isPending } = useQuery(listPaywallAssetsOptions({ organizationId }));
+
+  const uploadAsset = useMutation({
+    ...uploadPaywallAssetOptions(),
+  });
+
+  const handleFilesSelected = async (event: React.ChangeEvent<HTMLInputElement>) => {
+    const files = Array.from(event.target.files ?? []);
+    // Reset so selecting the same file again re-triggers onChange.
+    event.target.value = "";
+    if (files.length === 0) {
+      return;
+    }
+
+    setIsUploading(true);
+    let uploaded = 0;
+    try {
+      // Sequential uploads keep memory low and give per-file error toasts.
+      for (const file of files) {
+        try {
+          const prepared = await prepareAssetUpload(file);
+          await uploadAsset.mutateAsync({ organizationId, ...prepared });
+          uploaded += 1;
+        } catch (error) {
+          if (error instanceof AssetUploadValidationError) {
+            toast.error(error.message);
+          } else {
+            toast.error(uploadErrorMessage(error, file.name));
+          }
+        }
+      }
+    } finally {
+      setIsUploading(false);
+    }
+
+    if (uploaded > 0) {
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallAsset.list({ organizationId }),
+      });
+      toast.success(uploaded === 1 ? "Image uploaded" : `${uploaded} images uploaded`);
+    }
+  };
+
+  const uploadButton = (
+    <Button disabled={isUploading} onClick={() => inputRef.current?.click()} size="sm" type="button">
+      <UploadIcon />
+      {isUploading ? "Uploading..." : "Upload"}
+    </Button>
+  );
+
+  const hiddenInput = (
+    <input
+      accept={ACCEPTED_ASSET_ACCEPT}
+      className="hidden"
+      multiple
+      onChange={(event) => void handleFilesSelected(event)}
+      ref={inputRef}
+      type="file"
+    />
+  );
+
+  return (
+    <div className={cn("flex flex-col gap-4", className)}>
+      <div className="flex items-center justify-end">{uploadButton}</div>
+      {hiddenInput}
+
+      {isPending ? (
+        <div className={GRID_CLASSES}>
+          {Array.from({ length: 10 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: fixed-length skeleton grid
+            <Skeleton className="aspect-square w-full rounded-md" key={index} />
+          ))}
+        </div>
+      ) : !assets || assets.length === 0 ? (
+        <div className="flex flex-col items-center justify-center gap-3 rounded-lg border border-dashed py-16 text-center">
+          <ImagesIcon className="size-8 text-muted-foreground" />
+          <div className="flex flex-col gap-1">
+            <p className="font-medium text-sm">Upload your first image</p>
+            <p className="text-muted-foreground text-xs">
+              PNG, JPEG, WebP, or GIF up to 8 MB. Uploaded images can be used as paywall backgrounds.
+            </p>
+          </div>
+          {uploadButton}
+        </div>
+      ) : (
+        <div className={GRID_CLASSES}>
+          {assets.map((asset) => (
+            <AssetTile
+              asset={asset}
+              key={asset.id}
+              onSelect={onSelect}
+              organizationId={organizationId}
+              selectable={selectable}
+            />
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-assets/asset-picker-dialog.tsx b/apps/www/src/features/studio/paywall-assets/asset-picker-dialog.tsx
new file mode 100644
index 000000000..ac9fc6599
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-assets/asset-picker-dialog.tsx
@@ -0,0 +1,68 @@
+"use client";
+
+import type { PaywallAssetSchema } from "@voidhash/rpc";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogHeader,
+  DialogTitle,
+} from "@voidhash/ui";
+
+import { AssetLibrary } from "./asset-library";
+
+type PaywallAsset = typeof PaywallAssetSchema.Type;
+
+export interface AssetPickerDialogProps {
+  /**
+   * Organization whose asset library is shown. When `null` (route slugs not
+   * resolvable) the library grid is hidden, since images can only come from the
+   * organization's asset library.
+   */
+  organizationId: string | null;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  onSelect: (asset: PaywallAsset) => void;
+}
+
+/**
+ * Modal that hosts the {@link AssetLibrary} in selectable mode for choosing a
+ * background image from the organization's asset library. Selecting a tile
+ * hands the asset back and closes the dialog. Uploading is available inline.
+ */
+export function AssetPickerDialog({
+  organizationId,
+  open,
+  onOpenChange,
+  onSelect,
+}: AssetPickerDialogProps) {
+  return (
+    <Dialog onOpenChange={onOpenChange} open={open}>
+      <DialogContent className="max-w-3xl">
+        <DialogHeader>
+          <DialogTitle>Choose an image</DialogTitle>
+          <DialogDescription>
+            Pick an image from your library or upload a new one.
+          </DialogDescription>
+        </DialogHeader>
+
+        {organizationId ? (
+          <div className="max-h-[60vh] overflow-y-auto">
+            <AssetLibrary
+              onSelect={(asset) => {
+                onSelect(asset);
+                onOpenChange(false);
+              }}
+              organizationId={organizationId}
+              selectable
+            />
+          </div>
+        ) : (
+          <p className="rounded-md border border-dashed py-8 text-center text-muted-foreground text-sm">
+            Your asset library is unavailable here.
+          </p>
+        )}
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-assets/asset-tile.tsx b/apps/www/src/features/studio/paywall-assets/asset-tile.tsx
new file mode 100644
index 000000000..694fc0321
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-assets/asset-tile.tsx
@@ -0,0 +1,169 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { PaywallAssetSchema } from "@voidhash/rpc";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { CopyIcon, MoreHorizontalIcon, PencilIcon, Trash2Icon } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import { deletePaywallAssetOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { CheckerboardBackground } from "@/features/studio/paywalls/designer/components/ui/color-picker/checkerboard-background";
+
+import { RenameAssetDialog } from "./rename-asset-dialog";
+import { formatBytes } from "./upload-image";
+
+type PaywallAsset = typeof PaywallAssetSchema.Type;
+
+export interface AssetTileProps {
+  organizationId: string;
+  asset: PaywallAsset;
+  selectable?: boolean;
+  onSelect?: (asset: PaywallAsset) => void;
+}
+
+/**
+ * A single square thumbnail in the asset library grid. Shows the image over a
+ * checkerboard (so transparency reads), the name + human-readable size, and a
+ * kebab menu with rename / copy-URL / delete. When `selectable`, the whole tile
+ * is a button that calls `onSelect`.
+ */
+export function AssetTile({ organizationId, asset, selectable, onSelect }: AssetTileProps) {
+  const queryClient = useQueryClient();
+  const [renameOpen, setRenameOpen] = useState(false);
+  const [deleteOpen, setDeleteOpen] = useState(false);
+
+  const { mutate: deleteAsset, status: deleteStatus } = useMutation({
+    ...deletePaywallAssetOptions(),
+    onError: () => toast.error("Failed to delete image"),
+    onSuccess: async () => {
+      toast.success("Image deleted");
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallAsset.list({ organizationId }),
+      });
+      setDeleteOpen(false);
+    },
+  });
+
+  const isDeleting = deleteStatus === "pending";
+
+  const copyUrl = async () => {
+    try {
+      await navigator.clipboard.writeText(asset.url);
+      toast.success("Image URL copied");
+    } catch {
+      toast.error("Could not copy the URL");
+    }
+  };
+
+  const thumbnail = (
+    <div className="relative aspect-square w-full overflow-hidden rounded-md border bg-muted">
+      <CheckerboardBackground />
+      <img
+        alt={asset.name}
+        className="absolute inset-0 size-full object-cover"
+        loading="lazy"
+        src={asset.url}
+      />
+    </div>
+  );
+
+  return (
+    <div className="group flex flex-col gap-1.5">
+      <div className="relative">
+        {selectable ? (
+          <button
+            aria-label={`Select ${asset.name}`}
+            className="block w-full rounded-md ring-offset-background transition-opacity hover:opacity-90 focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2"
+            onClick={() => onSelect?.(asset)}
+            type="button"
+          >
+            {thumbnail}
+          </button>
+        ) : (
+          thumbnail
+        )}
+
+        <div className="absolute top-1.5 right-1.5 opacity-0 transition-opacity group-hover:opacity-100 focus-within:opacity-100">
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button
+                aria-label="Image actions"
+                className="size-6 bg-background/80 backdrop-blur-sm"
+                size="icon-sm"
+                variant="secondary"
+              >
+                <MoreHorizontalIcon />
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="end">
+              <DropdownMenuItem onSelect={() => setRenameOpen(true)}>
+                <PencilIcon />
+                Rename
+              </DropdownMenuItem>
+              <DropdownMenuItem onSelect={() => void copyUrl()}>
+                <CopyIcon />
+                Copy URL
+              </DropdownMenuItem>
+              <DropdownMenuItem onSelect={() => setDeleteOpen(true)} variant="destructive">
+                <Trash2Icon />
+                Delete
+              </DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+        </div>
+      </div>
+
+      <div className="flex flex-col">
+        <span className="truncate text-xs font-medium" title={asset.name}>
+          {asset.name}
+        </span>
+        <span className="text-[11px] text-muted-foreground">{formatBytes(asset.sizeBytes)}</span>
+      </div>
+
+      <RenameAssetDialog
+        asset={asset}
+        onOpenChange={setRenameOpen}
+        open={renameOpen}
+        organizationId={organizationId}
+      />
+
+      <AlertDialog onOpenChange={setDeleteOpen} open={deleteOpen}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>Delete image</AlertDialogTitle>
+            <AlertDialogDescription>
+              Delete <span className="font-medium">{asset.name}</span>? Paywalls already using this
+              image URL will no longer be able to load it.
+            </AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel disabled={isDeleting}>Cancel</AlertDialogCancel>
+            <AlertDialogAction
+              disabled={isDeleting}
+              onClick={(event) => {
+                event.preventDefault();
+                deleteAsset({ assetId: asset.id });
+              }}
+            >
+              {isDeleting ? "Deleting..." : "Delete"}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-assets/rename-asset-dialog.tsx b/apps/www/src/features/studio/paywall-assets/rename-asset-dialog.tsx
new file mode 100644
index 000000000..0f2a389be
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-assets/rename-asset-dialog.tsx
@@ -0,0 +1,98 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  Input,
+  Label,
+} from "@voidhash/ui";
+import { useEffect, useState } from "react";
+import { toast } from "sonner";
+import { queryKeys, renamePaywallAssetOptions } from "@/features/studio/lib/tanstack-query";
+
+export interface RenameAssetDialogProps {
+  organizationId: string;
+  asset: { id: string; name: string };
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+}
+
+/** Small controlled dialog that renames a paywall asset via `RenamePaywallAsset`. */
+export function RenameAssetDialog({
+  organizationId,
+  asset,
+  open,
+  onOpenChange,
+}: RenameAssetDialogProps) {
+  const queryClient = useQueryClient();
+  const [name, setName] = useState(asset.name);
+
+  useEffect(() => {
+    if (open) {
+      setName(asset.name);
+    }
+  }, [open, asset.name]);
+
+  const { mutate: rename, status } = useMutation({
+    ...renamePaywallAssetOptions(),
+    onError: () => toast.error("Failed to rename image"),
+    onSuccess: async () => {
+      toast.success("Image renamed");
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallAsset.list({ organizationId }),
+      });
+      onOpenChange(false);
+    },
+  });
+
+  const isPending = status === "pending";
+  const trimmed = name.trim();
+  const canSubmit = trimmed.length > 0 && trimmed !== asset.name && !isPending;
+
+  return (
+    <Dialog onOpenChange={onOpenChange} open={open}>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>Rename image</DialogTitle>
+        </DialogHeader>
+        <form
+          className="flex flex-col gap-4"
+          onSubmit={(event) => {
+            event.preventDefault();
+            if (canSubmit) {
+              rename({ assetId: asset.id, name: trimmed });
+            }
+          }}
+        >
+          <div className="flex flex-col gap-2">
+            <Label htmlFor="rename-asset-name">Name</Label>
+            <Input
+              autoFocus
+              id="rename-asset-name"
+              onChange={(event) => setName(event.target.value)}
+              value={name}
+            />
+          </div>
+          <DialogFooter>
+            <Button
+              disabled={isPending}
+              onClick={() => onOpenChange(false)}
+              type="button"
+              variant="ghost"
+            >
+              Cancel
+            </Button>
+            <Button disabled={!canSubmit} type="submit">
+              {isPending ? "Saving..." : "Save"}
+            </Button>
+          </DialogFooter>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-assets/upload-image.ts b/apps/www/src/features/studio/paywall-assets/upload-image.ts
new file mode 100644
index 000000000..a79630380
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-assets/upload-image.ts
@@ -0,0 +1,87 @@
+/** Accepted upload MIME types — kept in sync with the server-side allow-list. */
+export const ACCEPTED_ASSET_TYPES = ["image/png", "image/jpeg", "image/webp", "image/gif"] as const;
+
+/** `accept` attribute value for the hidden file input. */
+export const ACCEPTED_ASSET_ACCEPT = ACCEPTED_ASSET_TYPES.join(",");
+
+/** Maximum decoded image size the server accepts (8 MiB). */
+export const MAX_ASSET_BYTES = 8 * 1024 * 1024;
+
+/** Payload handed to the {@link uploadPaywallAssetOptions} mutation. */
+export interface PreparedAssetUpload {
+  name: string;
+  contentType: string;
+  imageBase64: string;
+  width?: number;
+  height?: number;
+}
+
+/** Error thrown by {@link prepareAssetUpload} when a file fails client-side validation. */
+export class AssetUploadValidationError extends Error {}
+
+/** Formats a byte count as a short human-readable string (e.g. "1.2 MB"). */
+export function formatBytes(bytes: number): string {
+  if (bytes < 1024) {
+    return `${bytes} B`;
+  }
+  const units = ["KB", "MB", "GB"];
+  let value = bytes / 1024;
+  let unitIndex = 0;
+  while (value >= 1024 && unitIndex < units.length - 1) {
+    value /= 1024;
+    unitIndex += 1;
+  }
+  return `${value.toFixed(value >= 10 || unitIndex === 0 ? 0 : 1)} ${units[unitIndex]}`;
+}
+
+const readAsDataUrl = (file: Blob): Promise<string> =>
+  new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onloadend = () => resolve(reader.result as string);
+    reader.onerror = () => reject(reader.error ?? new Error("Failed to read file"));
+    reader.readAsDataURL(file);
+  });
+
+const readImageDimensions = (dataUrl: string): Promise<{ width: number; height: number } | null> =>
+  new Promise((resolve) => {
+    const image = new Image();
+    image.addEventListener("load", () =>
+      resolve({ height: image.naturalHeight, width: image.naturalWidth }),
+    );
+    // Dimensions are best-effort metadata; a decode failure here shouldn't block
+    // an otherwise valid upload (e.g. some GIFs), so resolve null instead.
+    image.addEventListener("error", () => resolve(null));
+    image.src = dataUrl;
+  });
+
+/**
+ * Validates a selected file against the type allow-list and 8 MiB cap, reads its
+ * natural dimensions, and returns the original bytes as base64 (the `data:`
+ * prefix is kept — the server strips it). Background images are uploaded as-is:
+ * no re-encoding or downscaling, since the original fidelity is what matters.
+ *
+ * @throws {AssetUploadValidationError} when the type or size is rejected.
+ */
+export async function prepareAssetUpload(file: File): Promise<PreparedAssetUpload> {
+  if (!(ACCEPTED_ASSET_TYPES as readonly string[]).includes(file.type)) {
+    throw new AssetUploadValidationError(
+      `"${file.name}" is not a supported image type. Use PNG, JPEG, WebP, or GIF.`,
+    );
+  }
+  if (file.size > MAX_ASSET_BYTES) {
+    throw new AssetUploadValidationError(
+      `"${file.name}" is ${formatBytes(file.size)}. Images must be 8 MB or smaller.`,
+    );
+  }
+
+  const dataUrl = await readAsDataUrl(file);
+  const dimensions = await readImageDimensions(dataUrl);
+
+  return {
+    contentType: file.type,
+    height: dimensions?.height,
+    imageBase64: dataUrl,
+    name: file.name,
+    width: dimensions?.width,
+  };
+}
diff --git a/apps/www/src/features/studio/paywall-deploys/activate-paywall-release-button.tsx b/apps/www/src/features/studio/paywall-deploys/activate-paywall-release-button.tsx
new file mode 100644
index 000000000..34349374b
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-deploys/activate-paywall-release-button.tsx
@@ -0,0 +1,110 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  Button,
+} from "@voidhash/ui";
+import { Loader2Icon } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import { queryKeys, setActivePaywallReleaseOptions } from "@/features/studio/lib/tanstack-query";
+
+interface ActivatePaywallReleaseButtonProps {
+  paywallSlug: string;
+  projectId: string;
+  releaseId: string;
+  version: number | null;
+}
+
+/**
+ * Rollback affordance for a code-deployed paywall release: a confirm dialog
+ * that calls `SetActivePaywallRelease` and refreshes the deploy + location
+ * queries so active-state badges update everywhere.
+ */
+export function ActivatePaywallReleaseButton({
+  paywallSlug,
+  projectId,
+  releaseId,
+  version,
+}: ActivatePaywallReleaseButtonProps) {
+  const [open, setOpen] = useState(false);
+  const queryClient = useQueryClient();
+
+  const { mutate: activateRelease, status } = useMutation({
+    ...setActivePaywallReleaseOptions(),
+    onError: (error) => {
+      toast.error(
+        error._tag === "EffectQueryFailure"
+          ? error.match({
+              "Rpc/PaywallDeployValidationError": (f) => f.message,
+              "Rpc/ActionForbiddenError": (f) => f.message,
+              "Rpc/ReleaseNotFoundError": () => `Release not found`,
+              OrElse: () => "Failed to activate release",
+            })
+          : "Failed to activate release",
+      );
+    },
+    onSuccess: async () => {
+      toast.success(
+        version === null
+          ? `Activated release for "${paywallSlug}"`
+          : `Activated "${paywallSlug}" v${version}`,
+      );
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallDeploy.list({ projectId }),
+      });
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.all,
+      });
+      setOpen(false);
+    },
+  });
+
+  const isActivating = status === "pending";
+  const versionLabel = version === null ? "this release" : `v${version}`;
+
+  return (
+    <AlertDialog open={open} onOpenChange={setOpen}>
+      <Button size="sm" variant="outline" onClick={() => setOpen(true)}>
+        Activate
+      </Button>
+      <AlertDialogContent>
+        <AlertDialogHeader>
+          <AlertDialogTitle>Activate release</AlertDialogTitle>
+          <AlertDialogDescription>
+            Make {versionLabel} of paywall <span className="font-mono">{paywallSlug}</span> the
+            active release. Any currently active release for this paywall will be replaced.
+          </AlertDialogDescription>
+        </AlertDialogHeader>
+        <AlertDialogFooter>
+          <AlertDialogCancel disabled={isActivating}>Cancel</AlertDialogCancel>
+          <AlertDialogAction
+            disabled={isActivating}
+            onClick={(event) => {
+              // Keep the dialog open while the mutation runs; onSuccess closes it.
+              event.preventDefault();
+              activateRelease({ releaseId });
+            }}
+          >
+            {isActivating ? (
+              <>
+                <Loader2Icon className="mr-2 size-4 animate-spin" />
+                Activating...
+              </>
+            ) : (
+              "Activate"
+            )}
+          </AlertDialogAction>
+        </AlertDialogFooter>
+      </AlertDialogContent>
+    </AlertDialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-deploys/paywall-deploy-record.tsx b/apps/www/src/features/studio/paywall-deploys/paywall-deploy-record.tsx
new file mode 100644
index 000000000..b9c40b4fe
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-deploys/paywall-deploy-record.tsx
@@ -0,0 +1,146 @@
+"use client";
+
+import type { RpcPaywallDeploy } from "@voidhash/rpc";
+import { Badge, Button } from "@voidhash/ui";
+import { ChevronDownIcon, ChevronRightIcon } from "lucide-react";
+import { useState } from "react";
+
+import { ActivatePaywallReleaseButton } from "./activate-paywall-release-button";
+
+const formatDate = (value: Date) =>
+  new Intl.DateTimeFormat(undefined, {
+    dateStyle: "medium",
+    timeStyle: "short",
+  }).format(value);
+
+const shortHash = (hash: string) => hash.slice(0, 12);
+
+const shortDeployId = (id: string) => (id.length > 18 ? `${id.slice(0, 18)}…` : id);
+
+interface PaywallDeployRecordProps {
+  deploy: typeof RpcPaywallDeploy.Type;
+  projectId: string;
+}
+
+/**
+ * One row in the deploys list: deploy id, author, status and versions, with an
+ * expandable detail listing the deployed paywalls (with the activate/rollback
+ * affordance per release) and components.
+ */
+export function PaywallDeployRecord({ deploy, projectId }: PaywallDeployRecordProps) {
+  const [expanded, setExpanded] = useState(false);
+
+  return (
+    <div className="px-4 py-4">
+      <div className="flex flex-wrap items-start justify-between gap-3">
+        <div className="min-w-0">
+          <div className="flex flex-wrap items-center gap-2">
+            <span className="font-medium font-mono text-sm" title={deploy.id}>
+              {shortDeployId(deploy.id)}
+            </span>
+            <Badge variant={deploy.status === "ready" ? "secondary" : "outline"}>
+              {deploy.status}
+            </Badge>
+          </div>
+          <div className="mt-1 text-muted-foreground text-xs">
+            {formatDate(deploy.createdAt)} · {deploy.createdByName}
+          </div>
+          <div className="mt-0.5 text-muted-foreground text-xs">
+            runtime v{deploy.runtimeVersion} · cli v{deploy.cliVersion}
+          </div>
+        </div>
+
+        <div className="flex items-center gap-3">
+          <span className="text-muted-foreground text-xs">
+            {deploy.paywalls.length} paywall{deploy.paywalls.length === 1 ? "" : "s"} ·{" "}
+            {deploy.components.length} component{deploy.components.length === 1 ? "" : "s"}
+          </span>
+          <Button size="sm" variant="outline" onClick={() => setExpanded((current) => !current)}>
+            {expanded ? (
+              <ChevronDownIcon className="size-4" />
+            ) : (
+              <ChevronRightIcon className="size-4" />
+            )}
+            {expanded ? "Hide" : "Details"}
+          </Button>
+        </div>
+      </div>
+
+      {expanded ? (
+        <div className="mt-3 space-y-3">
+          <div className="rounded-md border">
+            <div className="border-b px-3 py-2 font-medium text-muted-foreground text-xs uppercase tracking-wide">
+              Paywalls
+            </div>
+            {deploy.paywalls.length === 0 ? (
+              <div className="px-3 py-2 text-muted-foreground text-sm">
+                No paywalls in this deploy.
+              </div>
+            ) : (
+              <div className="divide-y">
+                {deploy.paywalls.map((paywall) => (
+                  <div
+                    className="flex flex-wrap items-center justify-between gap-2 px-3 py-2 text-sm"
+                    key={`${paywall.slug}-${paywall.contentHash}`}
+                  >
+                    <div className="min-w-0">
+                      <span className="font-medium font-mono">{paywall.slug}</span>
+                      <span className="ml-2 text-muted-foreground text-xs">
+                        {paywall.version === null ? "no release" : `v${paywall.version}`}
+                      </span>
+                      <span
+                        className="ml-2 font-mono text-muted-foreground text-xs"
+                        title={paywall.contentHash}
+                      >
+                        {shortHash(paywall.contentHash)}
+                      </span>
+                    </div>
+                    {paywall.releaseId !== null ? (
+                      <ActivatePaywallReleaseButton
+                        paywallSlug={paywall.slug}
+                        projectId={projectId}
+                        releaseId={paywall.releaseId}
+                        version={paywall.version}
+                      />
+                    ) : null}
+                  </div>
+                ))}
+              </div>
+            )}
+          </div>
+
+          <div className="rounded-md border">
+            <div className="border-b px-3 py-2 font-medium text-muted-foreground text-xs uppercase tracking-wide">
+              Components
+            </div>
+            {deploy.components.length === 0 ? (
+              <div className="px-3 py-2 text-muted-foreground text-sm">
+                No components in this deploy.
+              </div>
+            ) : (
+              <div className="divide-y">
+                {deploy.components.map((component) => (
+                  <div
+                    className="flex flex-wrap items-center gap-2 px-3 py-2 text-sm"
+                    key={`${component.slug}-${component.contentHash}`}
+                  >
+                    <span className="font-medium font-mono">{component.slug}</span>
+                    <span className="text-muted-foreground text-xs">
+                      {component.version === null ? "no version" : `v${component.version}`}
+                    </span>
+                    <span
+                      className="font-mono text-muted-foreground text-xs"
+                      title={component.contentHash}
+                    >
+                      {shortHash(component.contentHash)}
+                    </span>
+                  </div>
+                ))}
+              </div>
+            )}
+          </div>
+        </div>
+      ) : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx b/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx
new file mode 100644
index 000000000..3d9ecbd46
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx
@@ -0,0 +1,20 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import { useState } from "react";
+
+import { CreatePaywallLocationModal } from "./create-paywall-location-modal";
+
+export function CreatePaywallLocationModalButton({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <CreatePaywallLocationModal
+      onClose={() => setOpen(false)}
+      onSuccess={() => setOpen(false)}
+      open={open}
+      projectId={projectId}
+      trigger={<Button onClick={() => setOpen(true)}>Add Location</Button>}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal.tsx b/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal.tsx
new file mode 100644
index 000000000..db6632a93
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal.tsx
@@ -0,0 +1,183 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { createSlug } from "@voidhash/core/utils";
+import { InfoTooltip } from "@voidhash/ui";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useEffect } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { createPaywallLocationOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+const createPaywallLocationSchema = z.object({
+  description: z.string().max(255, "Description must be less than 255 characters").optional(),
+  name: z
+    .string()
+    .min(3, "Name must be at least 3 characters long")
+    .max(64, "Name must be less than 64 characters"),
+  slug: z
+    .string()
+    .min(3, "Slug must be at least 3 characters long")
+    .max(64, "Slug must be less than 64 characters")
+    .regex(
+      /^[a-z0-9_-]+$/,
+      "Slug must contain only lowercase letters, numbers, underscores, and hyphens",
+    ),
+});
+
+type CreatePaywallLocationForm = z.infer<typeof createPaywallLocationSchema>;
+
+interface CreatePaywallLocationModalProps {
+  onClose: () => void;
+  onSuccess?: (location: { id: string }) => void;
+  open: boolean;
+  projectId: string;
+  trigger: React.ReactNode;
+}
+
+export function CreatePaywallLocationModal({
+  onClose,
+  onSuccess,
+  open,
+  projectId,
+  trigger,
+}: CreatePaywallLocationModalProps) {
+  const form = useForm<CreatePaywallLocationForm>({
+    defaultValues: {
+      description: "",
+      name: "",
+      slug: "",
+    },
+    resolver: zodResolver(createPaywallLocationSchema),
+  });
+  const name = form.watch("name");
+
+  useEffect(() => {
+    if (name && !form.formState.touchedFields.slug) {
+      form.setValue("slug", createSlug(name), { shouldValidate: false });
+    }
+  }, [name, form]);
+
+  const queryClient = useQueryClient();
+  const { mutate: createLocation, status: createLocationStatus } = useMutation({
+    ...createPaywallLocationOptions(),
+    onError: () => {
+      toast.error("Failed to create paywall location");
+    },
+    onSuccess: (data) => {
+      onSuccess?.(data);
+      toast.success("Paywall location created");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.all,
+      });
+      handleOpenChange(false);
+    },
+  });
+
+  const handleOpenChange = (isOpen: boolean) => {
+    if (!isOpen) {
+      onClose();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreatePaywallLocationForm) => {
+    createLocation({
+      description: data.description || undefined,
+      name: data.name,
+      projectId,
+      slug: data.slug,
+    });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create Paywall Location</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Onboarding Upsell" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="slug"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>
+                    <span>Location Slug</span>
+                    <InfoTooltip info="Slug is immutable and used in app code to resolve a paywall." />
+                  </FormLabel>
+                  <FormControl>
+                    <Input placeholder="onboarding" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="description"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Description</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Shown on first app launch" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <DialogFooter className="flex gap-2 sm:justify-between">
+              <Button
+                className="hidden md:block"
+                disabled={createLocationStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createLocationStatus === "pending"} type="submit">
+                {createLocationStatus === "pending" ? "Creating..." : "Create Location"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx b/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
new file mode 100644
index 000000000..89ae1fc21
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
@@ -0,0 +1,162 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useEffect } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { queryKeys, updatePaywallLocationOptions } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+const editPaywallLocationSchema = z.object({
+  description: z.string().max(255, "Description must be less than 255 characters").optional(),
+  name: z
+    .string()
+    .min(3, "Name must be at least 3 characters long")
+    .max(64, "Name must be less than 64 characters"),
+});
+
+type EditPaywallLocationForm = z.infer<typeof editPaywallLocationSchema>;
+
+interface EditPaywallLocationModalProps {
+  initialDescription?: string | null;
+  initialName: string;
+  locationId: string;
+  onClose: () => void;
+  open: boolean;
+  projectId: string;
+  trigger: React.ReactNode;
+}
+
+export function EditPaywallLocationModal({
+  initialDescription,
+  initialName,
+  locationId,
+  onClose,
+  open,
+  projectId,
+  trigger,
+}: EditPaywallLocationModalProps) {
+  const form = useForm<EditPaywallLocationForm>({
+    defaultValues: {
+      description: initialDescription ?? "",
+      name: initialName,
+    },
+    resolver: zodResolver(editPaywallLocationSchema),
+  });
+
+  useEffect(() => {
+    form.reset({
+      description: initialDescription ?? "",
+      name: initialName,
+    });
+  }, [form, initialDescription, initialName]);
+
+  const queryClient = useQueryClient();
+  const { mutate: updateLocation, status: updateLocationStatus } = useMutation({
+    ...updatePaywallLocationOptions(),
+    onError: () => {
+      toast.error("Failed to update paywall location");
+    },
+    onSuccess: () => {
+      toast.success("Paywall location updated");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.list({ projectId }),
+      });
+      handleOpenChange(false);
+    },
+  });
+
+  const handleOpenChange = (isOpen: boolean) => {
+    if (!isOpen) {
+      onClose();
+      form.reset({
+        description: initialDescription ?? "",
+        name: initialName,
+      });
+    }
+  };
+
+  const onSubmit = (data: EditPaywallLocationForm) => {
+    updateLocation({
+      description: data.description || null,
+      locationId,
+      name: data.name,
+    });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Edit Paywall Location</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <FormField
+              control={form.control}
+              name="description"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Description</FormLabel>
+                  <FormControl>
+                    <Input {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <DialogFooter className="flex gap-2 sm:justify-between">
+              <Button
+                className="hidden md:block"
+                disabled={updateLocationStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={updateLocationStatus === "pending"} type="submit">
+                {updateLocationStatus === "pending" ? "Saving..." : "Save"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx b/apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx
new file mode 100644
index 000000000..60f7ba433
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx
@@ -0,0 +1,232 @@
+"use client";
+
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type { Paywall, RpcPaywallLocation } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui/button";
+import { useEffect, useState } from "react";
+import { toast } from "sonner";
+import {
+  archivePaywallLocationOptions,
+  assignPaywallLocationShowingOptions,
+  clearPaywallLocationShowingOptions,
+  listPaywallLocationShowingsOptions,
+  queryKeys,
+} from "@/features/studio/lib/tanstack-query";
+
+import { EditPaywallLocationModal } from "./edit-paywall-location-modal";
+
+const formatDate = (value: Date | null | undefined) => {
+  if (!value) {
+    return "-";
+  }
+
+  return new Intl.DateTimeFormat(undefined, {
+    dateStyle: "medium",
+    timeStyle: "short",
+  }).format(value);
+};
+
+interface PaywallLocationRowProps {
+  location: typeof RpcPaywallLocation.Type;
+  paywalls: ReadonlyArray<typeof Paywall.Type>;
+  projectId: string;
+}
+
+export function PaywallLocationRow({ location, paywalls, projectId }: PaywallLocationRowProps) {
+  const [editOpen, setEditOpen] = useState(false);
+  const [historyOpen, setHistoryOpen] = useState(false);
+  const [selectedPaywallId, setSelectedPaywallId] = useState(
+    location.activeShowing?.paywallId ?? "",
+  );
+
+  useEffect(() => {
+    setSelectedPaywallId(location.activeShowing?.paywallId ?? "");
+  }, [location.activeShowing?.paywallId]);
+
+  const queryClient = useQueryClient();
+
+  const { data: showings = [], isPending: isLoadingShowings } = useQuery({
+    ...listPaywallLocationShowingsOptions({
+      locationId: location.id,
+    }),
+    enabled: historyOpen,
+  });
+
+  const invalidateLocationQueries = async () => {
+    await queryClient.invalidateQueries({
+      queryKey: queryKeys.paywallLocation.list({ projectId }),
+    });
+    await queryClient.invalidateQueries({
+      queryKey: queryKeys.paywallLocation.showings({ locationId: location.id }),
+    });
+  };
+
+  const { mutate: assignShowing, status: assignStatus } = useMutation({
+    ...assignPaywallLocationShowingOptions(),
+    onError: () => {
+      toast.error("Failed to assign paywall showing");
+    },
+    onSuccess: async () => {
+      toast.success("Paywall showing assigned");
+      await invalidateLocationQueries();
+    },
+  });
+
+  const { mutate: clearShowing, status: clearStatus } = useMutation({
+    ...clearPaywallLocationShowingOptions(),
+    onError: () => {
+      toast.error("Failed to clear paywall showing");
+    },
+    onSuccess: async () => {
+      toast.success("Paywall showing cleared");
+      await invalidateLocationQueries();
+    },
+  });
+
+  const { mutate: archiveLocation, status: archiveStatus } = useMutation({
+    ...archivePaywallLocationOptions(),
+    onError: () => {
+      toast.error("Failed to archive location");
+    },
+    onSuccess: async () => {
+      toast.success("Location archived");
+      await invalidateLocationQueries();
+    },
+  });
+
+  const isMutating =
+    assignStatus === "pending" || clearStatus === "pending" || archiveStatus === "pending";
+
+  const activePaywallLabel =
+    location.activeShowing?.paywall?.name ?? location.activeShowing?.paywallId;
+
+  const activeReleaseLabel = location.activeShowing?.paywallRelease
+    ? `v${location.activeShowing.paywallRelease.version}`
+    : null;
+
+  return (
+    <div className="space-y-3 px-4 py-4">
+      <div className="flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <div className="flex items-center gap-2">
+            <div className="font-medium">{location.name}</div>
+            {location.archivedAt ? (
+              <span className="rounded border px-2 py-0.5 text-xs">Archived</span>
+            ) : null}
+          </div>
+          <div className="mt-0.5 font-mono text-muted-foreground text-sm">{location.slug}</div>
+          {location.description ? (
+            <p className="mt-1 text-muted-foreground text-sm">{location.description}</p>
+          ) : null}
+          <p className="mt-2 text-muted-foreground text-xs">
+            Active: {activePaywallLabel ?? "none"}
+            {activeReleaseLabel ? ` (${activeReleaseLabel})` : ""}
+          </p>
+        </div>
+
+        <div className="flex flex-wrap gap-2">
+          <EditPaywallLocationModal
+            initialDescription={location.description}
+            initialName={location.name}
+            locationId={location.id}
+            onClose={() => setEditOpen(false)}
+            open={editOpen}
+            projectId={projectId}
+            trigger={
+              <Button
+                disabled={location.archivedAt !== null}
+                size="sm"
+                variant="outline"
+                onClick={() => setEditOpen(true)}
+              >
+                Edit
+              </Button>
+            }
+          />
+          <Button size="sm" variant="outline" onClick={() => setHistoryOpen((current) => !current)}>
+            {historyOpen ? "Hide History" : "Show History"}
+          </Button>
+          <Button
+            disabled={isMutating || location.archivedAt !== null}
+            size="sm"
+            variant="outline"
+            onClick={() => archiveLocation({ locationId: location.id })}
+          >
+            Archive
+          </Button>
+        </div>
+      </div>
+
+      <div className="flex flex-wrap items-center gap-2">
+        <select
+          className="h-9 min-w-56 rounded-md border bg-background px-3 text-sm"
+          disabled={location.archivedAt !== null || isMutating}
+          value={selectedPaywallId}
+          onChange={(event) => setSelectedPaywallId(event.target.value)}
+        >
+          <option value="">Select paywall</option>
+          {paywalls.map((paywall) => (
+            <option key={paywall.id} value={paywall.id}>
+              {paywall.name} ({paywall.slug})
+            </option>
+          ))}
+        </select>
+        <Button
+          disabled={location.archivedAt !== null || isMutating || selectedPaywallId.length === 0}
+          size="sm"
+          onClick={() =>
+            assignShowing({
+              locationId: location.id,
+              paywallId: selectedPaywallId,
+              type: "paywall_release",
+            })
+          }
+        >
+          Assign
+        </Button>
+        <Button
+          disabled={location.archivedAt !== null || isMutating || location.activeShowing === null}
+          size="sm"
+          variant="outline"
+          onClick={() => clearShowing({ locationId: location.id })}
+        >
+          Clear
+        </Button>
+      </div>
+
+      {historyOpen ? (
+        <div className="rounded-md border">
+          {isLoadingShowings ? (
+            <div className="px-3 py-2 text-muted-foreground text-sm">Loading history...</div>
+          ) : showings.length === 0 ? (
+            <div className="px-3 py-2 text-muted-foreground text-sm">No showing history yet.</div>
+          ) : (
+            <div className="divide-y">
+              {showings.map((showing) => {
+                const showingPaywallLabel =
+                  showing.paywall?.name ?? showing.paywallId ?? "Unknown paywall";
+                const showingReleaseLabel = showing.paywallRelease
+                  ? `v${showing.paywallRelease.version}`
+                  : "";
+
+                return (
+                  <div className="space-y-1 px-3 py-2 text-sm" key={showing.id}>
+                    <div className="font-medium">
+                      {showingPaywallLabel} {showingReleaseLabel}
+                    </div>
+                    <div className="text-muted-foreground text-xs">
+                      Started: {formatDate(showing.startedAt)}
+                    </div>
+                    <div className="text-muted-foreground text-xs">
+                      Ended: {formatDate(showing.endedAt)}
+                    </div>
+                  </div>
+                );
+              })}
+            </div>
+          )}
+        </div>
+      ) : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/create-paywall-button.tsx b/apps/www/src/features/studio/paywalls/create-paywall-button.tsx
new file mode 100644
index 000000000..51c8612a9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/create-paywall-button.tsx
@@ -0,0 +1,24 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import { useState } from "react";
+
+import { CreatePaywallModal } from "./create-paywall-modal";
+
+interface CreatePaywallButtonProps {
+  projectId: string;
+}
+
+export function CreatePaywallButton({ projectId }: CreatePaywallButtonProps) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <CreatePaywallModal
+      onClose={() => setOpen(false)}
+      onSuccess={() => setOpen(false)}
+      open={open}
+      projectId={projectId}
+      trigger={<Button onClick={() => setOpen(true)}>Create Paywall</Button>}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/create-paywall-card.tsx b/apps/www/src/features/studio/paywalls/create-paywall-card.tsx
new file mode 100644
index 000000000..0764afb95
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/create-paywall-card.tsx
@@ -0,0 +1,46 @@
+"use client";
+
+import { Plus } from "lucide-react";
+import { useState } from "react";
+
+import { CreatePaywallModal } from "./create-paywall-modal";
+
+interface CreatePaywallCardProps {
+  projectId: string;
+}
+
+export function CreatePaywallCard({ projectId }: CreatePaywallCardProps) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <CreatePaywallModal
+      onClose={() => setOpen(false)}
+      onSuccess={() => setOpen(false)}
+      open={open}
+      projectId={projectId}
+      trigger={
+        <button
+          className="group relative w-full cursor-pointer overflow-hidden rounded-xl border-2 border-muted-foreground/25 border-dashed bg-muted/30 transition-all hover:border-muted-foreground/50 hover:bg-muted/50"
+          onClick={() => setOpen(true)}
+          type="button"
+        >
+          {/* Height spacer - matches PaywallCard structure */}
+          <div className="invisible">
+            <div className="aspect-3/4" />
+            <div className="p-4">
+              <div className="h-5" />
+              <div className="mt-0.5 h-5" />
+            </div>
+          </div>
+          {/* Centered content */}
+          <div className="absolute inset-0 flex flex-col items-center justify-center">
+            <div className="flex h-12 w-12 items-center justify-center rounded-full bg-muted transition-colors group-hover:bg-muted-foreground/20">
+              <Plus className="h-6 w-6 text-muted-foreground" />
+            </div>
+            <span className="mt-3 font-medium text-muted-foreground text-sm">Create Paywall</span>
+          </div>
+        </button>
+      }
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/create-paywall-modal.tsx b/apps/www/src/features/studio/paywalls/create-paywall-modal.tsx
new file mode 100644
index 000000000..bae69c017
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/create-paywall-modal.tsx
@@ -0,0 +1,156 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { createSlug } from "@voidhash/core/utils";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useEffect } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { createPaywallOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+const createPaywallSchema = z.object({
+  name: z
+    .string()
+    .min(3, "Name must be at least 3 characters long")
+    .max(32, "Name must be less than 32 characters"),
+  slug: z
+    .string()
+    .min(3, "Slug must be at least 3 characters long")
+    .max(32, "Slug must be less than 32 characters")
+    .regex(/^[\da-z-]+$/, "Slug can only contain lowercase letters, numbers, and hyphens"),
+});
+
+type CreatePaywallForm = z.infer<typeof createPaywallSchema>;
+
+interface CreatePaywallModalProps {
+  open: boolean;
+  onClose: () => void;
+  trigger: React.ReactNode;
+  projectId: string;
+  onSuccess?: (paywall: { id: string }) => void;
+}
+
+export function CreatePaywallModal({
+  open,
+  onClose,
+  trigger,
+  projectId,
+  onSuccess,
+}: CreatePaywallModalProps) {
+  const form = useForm<CreatePaywallForm>({
+    defaultValues: {
+      name: "",
+      slug: "",
+    },
+    resolver: zodResolver(createPaywallSchema),
+  });
+  const name = form.watch("name");
+
+  useEffect(() => {
+    if (name && !form.formState.touchedFields.slug) {
+      form.setValue("slug", createSlug(name), { shouldValidate: false });
+    }
+  }, [name, form]);
+
+  const queryClient = useQueryClient();
+  const { mutate: createPaywall, status: createPaywallStatus } = useMutation({
+    ...createPaywallOptions(),
+    onSuccess: (data) => {
+      onSuccess?.(data);
+      toast.success("Paywall created successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.paywall.list({ projectId }),
+      });
+      handleOpenChange(false);
+    },
+    onError: () => {
+      toast.error("Failed to create paywall");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreatePaywallForm) => {
+    createPaywall({ ...data, projectId });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create New Paywall</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-6 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Paywall Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="My Paywall" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="slug"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Slug</FormLabel>
+                  <FormControl>
+                    <Input placeholder="my-paywall" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={createPaywallStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createPaywallStatus === "pending"} type="submit">
+                {createPaywallStatus === "pending" ? "Creating Paywall..." : "Create Paywall"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
new file mode 100644
index 000000000..78c9784b2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
@@ -0,0 +1,126 @@
+"use client";
+
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { cn } from "@voidhash/ui";
+import type { UIMessage } from "ai";
+import { useCallback, useRef, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { ChatHistoryMenu, ChatShell, newChatId } from "@/features/studio/ai";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+
+import { Panel } from "../components/ui/panel";
+import { PANEL_DIMENSIONS } from "../panels/constants";
+import { setAiPanelWidth } from "../state/actions/ai-panel-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import { useDesignerAgent } from "./use-designer-agent";
+
+interface ChatSession {
+  chatId: string;
+  initialMessages?: UIMessage[];
+}
+
+/**
+ * Fixed overlay panel hosting the Voidhash AI chat, anchored to the left edge
+ * below the top panel. Visible in design and code modes; slides out (via
+ * `-translate-x-full`) when closed or while in preview mode. Gated behind the
+ * `voidhash_ai` internal feature flag so the store slice stays inert when off.
+ *
+ * The panel is closed from the top bar (its Sparkles toggle), so the header
+ * carries only the "new chat" and history controls; document reverting is
+ * handled elsewhere.
+ */
+export function AiPanel() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const agent = useDesignerAgent();
+
+  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAi.key);
+  const panelOpen = useStore(store, (state) => state.ai.panelOpen);
+  const mode = useStore(store, (state) => state.mode);
+  const width = useStore(store, (state) => state.ai.width);
+  const isPreviewMode = mode === "preview";
+
+  // Current chat identity; changing chatId remounts the shell (fresh useChat).
+  const [session, setSession] = useState<ChatSession>(() => ({ chatId: newChatId() }));
+
+  // Drag-to-resize: capture the pointer on the right-edge handle and translate
+  // horizontal movement into width updates (clamped by the setter). Held in a
+  // ref so the move handler reads the drag origin without re-subscribing.
+  const dragOrigin = useRef<{ startX: number; startWidth: number } | null>(null);
+
+  const handleResizeStart = useCallback(
+    (event: React.PointerEvent<HTMLDivElement>) => {
+      event.preventDefault();
+      dragOrigin.current = { startX: event.clientX, startWidth: store.getState().ai.width };
+      event.currentTarget.setPointerCapture(event.pointerId);
+    },
+    [store],
+  );
+
+  const handleResizeMove = useCallback(
+    (event: React.PointerEvent<HTMLDivElement>) => {
+      const origin = dragOrigin.current;
+      if (!origin) return;
+      dispatch(setAiPanelWidth)({ width: origin.startWidth + (event.clientX - origin.startX) });
+    },
+    [dispatch],
+  );
+
+  const handleResizeEnd = useCallback((event: React.PointerEvent<HTMLDivElement>) => {
+    if (!dragOrigin.current) return;
+    dragOrigin.current = null;
+    event.currentTarget.releasePointerCapture(event.pointerId);
+  }, []);
+
+  if (!enabled) {
+    return null;
+  }
+
+  const hidden = !panelOpen || isPreviewMode;
+
+  return (
+    <div
+      className={cn(
+        "fixed bottom-0 left-0 z-40 flex flex-col border-border border-r bg-panel",
+        "transition-transform duration-300 ease-in-out",
+        hidden && "-translate-x-full",
+      )}
+      style={{
+        top: PANEL_DIMENSIONS.TOP_HEIGHT,
+        width,
+      }}
+    >
+      <div
+        role="separator"
+        aria-orientation="vertical"
+        aria-label="Resize AI panel"
+        onPointerDown={handleResizeStart}
+        onPointerMove={handleResizeMove}
+        onPointerUp={handleResizeEnd}
+        onPointerCancel={handleResizeEnd}
+        className="group absolute inset-y-0 -right-1 z-10 w-2 cursor-col-resize touch-none"
+      >
+        <div className="mx-auto h-full w-px bg-transparent transition-colors group-hover:bg-primary" />
+      </div>
+      <Panel className="overflow-hidden">
+        <div className="flex items-center justify-between px-3 py-2">
+          <span className="font-medium text-sm">Voidhash AI</span>
+          <ChatHistoryMenu
+            agent={agent}
+            currentChatId={session.chatId}
+            onNewChat={() => setSession({ chatId: newChatId() })}
+            onSelectChat={(chatId, messages) => setSession({ chatId, initialMessages: messages })}
+          />
+        </div>
+        <ChatShell
+          key={session.chatId}
+          agent={agent}
+          chatId={session.chatId}
+          initialMessages={session.initialMessages}
+          className="min-h-0 flex-1"
+        />
+      </Panel>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
new file mode 100644
index 000000000..e9cde483f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
@@ -0,0 +1,502 @@
+import type { PipelineResult } from "../code-mode/compile-pipeline";
+import { describe, expect, test } from "vite-plus/test";
+
+import type { SurfaceToolCall } from "@/features/studio/ai";
+
+import type { CodeEditorHandle } from "../code-mode/code-editor-context";
+import type { PaywallCodeTarget } from "../hooks/use-paywall-code-target";
+import { createDesignerStore, type PaywallDesignerStoreType } from "../state/designer-store";
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../state/testing/offline-document";
+import { insertCodeComponent } from "../state/utils/code-component-writes";
+import {
+  renderCompileDiagnostics,
+  runDesignerTool,
+  type DesignerToolDeps,
+} from "./tool-executor";
+
+const PAYWALL_ID = "pw-1";
+const PAYWALL_SLUG = "checkout";
+const target: PaywallCodeTarget = { projectId: "proj-1", paywallSlug: PAYWALL_SLUG };
+
+/** Records every reseed/rename the executor drives on Monaco. */
+interface FakeHandle extends CodeEditorHandle {
+  reseeds: Array<{ key: string; source: string }>;
+  renames: Array<{ from: string; to: string }>;
+}
+
+function makeFakeHandle(): FakeHandle {
+  const handle: FakeHandle = {
+    reseeds: [],
+    renames: [],
+    undo() {},
+    redo() {},
+    setBufferContent(key, source) {
+      handle.reseeds.push({ key, source });
+    },
+    saveBuffer() {
+      return false;
+    },
+    saveAll() {},
+    renameModel(from, to) {
+      handle.renames.push({ from, to });
+    },
+  };
+  return handle;
+}
+
+/** A real designer store over an offline document + a production-shaped dispatch. */
+async function makeStore(
+  doc: OfflineDesignerDocument,
+): Promise<{ store: PaywallDesignerStoreType; dispatch: DesignerToolDeps["dispatch"] }> {
+  await doc.connect();
+  const store = createDesignerStore(doc as unknown as Parameters<typeof createDesignerStore>[0]);
+  const storeApi = store as unknown as {
+    getState: () => unknown;
+    setState: (partial: unknown) => void;
+  };
+  const dispatch = ((command: { fn: (ctx: unknown, params: unknown) => unknown }) =>
+    (params: unknown) => {
+      const ctx = {
+        getState: storeApi.getState,
+        setState: storeApi.setState,
+        dispatch,
+        transaction: <R>(fn: (root: unknown) => R): R => doc.transaction(fn as never) as R,
+        get root() {
+          return doc.root;
+        },
+      };
+      return command.fn(ctx, params);
+    }) as unknown as DesignerToolDeps["dispatch"];
+  return { store, dispatch };
+}
+
+/** Inserts a code-component definition into the document (a local component file). */
+function insertComponent(doc: OfflineDesignerDocument, path: string, source: string): void {
+  doc.transaction((root) => {
+    if (insertCodeComponent(root, { path, source }) === null) {
+      throw new Error("failed to insert code component");
+    }
+  });
+}
+
+interface CheckpointCall {
+  chatId: string;
+  turnId: string;
+  paywallId: string;
+}
+
+/** Deps for the runner: real store + injectable compile/read/checkpoint seams. */
+function makeDeps(
+  store: PaywallDesignerStoreType,
+  dispatch: DesignerToolDeps["dispatch"],
+  overrides: Partial<DesignerToolDeps> = {},
+): DesignerToolDeps & { handle: FakeHandle; checkpoints: CheckpointCall[] } {
+  const handle = (overrides.handle as FakeHandle | undefined) ?? makeFakeHandle();
+  const checkpoints: CheckpointCall[] = [];
+  return {
+    store,
+    dispatch,
+    target,
+    paywallId: PAYWALL_ID,
+    capturedTurns: new Set<string>(),
+    compile: async (): Promise<PipelineResult> => ({
+      ok: true,
+      manifest: { manifestVersion: 2, props: {} },
+      previewTrees: {},
+      hasPanel: false,
+    }),
+    readPaywallDocument: async () => ({ slug: "", name: "", paywallId: "", document: null }),
+    captureCheckpoint: async (input) => {
+      checkpoints.push(input);
+      return { captured: true };
+    },
+    ...overrides,
+    handle,
+    checkpoints,
+  } as DesignerToolDeps & { handle: FakeHandle; checkpoints: CheckpointCall[] };
+}
+
+/** A minimal snapshot node: `{ id, type, data: { style }, children }`. */
+interface SnapshotNode {
+  id: string;
+  data?: { style?: Record<string, unknown> };
+  children?: readonly SnapshotNode[];
+}
+
+/** Find a node by id in the engine snapshot roots and return its `data.style`. */
+function findNodeStyle(
+  snapshot: readonly SnapshotNode[] | undefined,
+  id: string,
+): Record<string, unknown> | undefined {
+  const walk = (node: SnapshotNode): Record<string, unknown> | undefined => {
+    if (node.id === id) return node.data?.style;
+    for (const child of node.children ?? []) {
+      const found = walk(child);
+      if (found !== undefined) return found;
+    }
+    return undefined;
+  };
+  for (const root of snapshot ?? []) {
+    const found = walk(root);
+    if (found !== undefined) return found;
+  }
+  return undefined;
+}
+
+/** Build a `SurfaceToolCall` (input is assumed already schema-valid). */
+const call = (
+  toolName: string,
+  input: unknown,
+  extra: Partial<SurfaceToolCall> = {},
+): SurfaceToolCall => ({
+  toolName,
+  toolCallId: "call-1",
+  input,
+  chatId: "ai_chat_1",
+  ...extra,
+});
+
+describe("runDesignerTool — get_document", () => {
+  test("serializes the open document as cleaned JSON, scoped by nodeId", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(deps, call("get_document", { nodeId: screenId }));
+    expect(result.isError).toBe(false);
+    const parsed = JSON.parse(result.output) as { id: string; type: string };
+    expect(parsed.id).toBe(screenId);
+    expect(parsed.type).toBe("screen");
+  });
+
+  test("an unknown nodeId folds into a readable error", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(deps, call("get_document", { nodeId: "ghost" }));
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("ghost");
+  });
+});
+
+describe("runDesignerTool — edit_document", () => {
+  test("a valid batch applies and returns minted ids", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "edit_document",
+        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
+        { turnId: "turn-1" },
+      ),
+    );
+    expect(result.isError).toBe(false);
+    const parsed = JSON.parse(result.output) as { ok: boolean; mintedIds: Record<string, string[]> };
+    expect(parsed.ok).toBe(true);
+    expect(parsed.mintedIds["0"]?.length).toBe(1);
+  });
+
+  test("a lone backgroundColor update auto-enables the background in the store", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    // Insert a fresh view (defaults backgroundEnabled=false), then set only its color.
+    const inserted = await runDesignerTool(
+      deps,
+      call(
+        "edit_document",
+        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
+        { turnId: "turn-1" },
+      ),
+    );
+    const viewId = (JSON.parse(inserted.output) as { mintedIds: Record<string, string[]> })
+      .mintedIds["0"]![0]!;
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "edit_document",
+        { edits: [{ op: "update", nodeId: viewId, set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } } }] },
+        { turnId: "turn-2" },
+      ),
+    );
+    expect(result.isError).toBe(false);
+
+    const style = findNodeStyle(
+      store.getState().mimic.snapshot as unknown as readonly SnapshotNode[],
+      viewId,
+    );
+    expect(style?.backgroundEnabled).toBe(true);
+    expect(style?.backgroundColor).toBe("rgba(1, 2, 3, 1)");
+  });
+
+  test("a validation error is returned verbatim (isError) and applies nothing", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "edit_document",
+        { edits: [{ op: "insert", parentId: "nope", node: { type: "view" } }] },
+        { turnId: "turn-1" },
+      ),
+    );
+    expect(result.isError).toBe(true);
+    const parsed = JSON.parse(result.output) as {
+      ok: boolean;
+      errors: Array<{ code: string }>;
+    };
+    expect(parsed.ok).toBe(false);
+    expect(parsed.errors[0]?.code).toBe("unknownParent");
+  });
+
+  test("captures a pre-turn checkpoint exactly once per turn", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const editCall = () =>
+      runDesignerTool(
+        deps,
+        call(
+          "edit_document",
+          { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
+          { turnId: "turn-42" },
+        ),
+      );
+    await editCall();
+    await editCall();
+
+    expect(deps.checkpoints).toEqual([
+      { chatId: "ai_chat_1", turnId: "turn-42", paywallId: PAYWALL_ID },
+    ]);
+  });
+
+  test("a checkpoint RPC failure is swallowed and the edit still applies", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch, {
+      captureCheckpoint: async () => {
+        throw new Error("offline");
+      },
+    });
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "edit_document",
+        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
+        { turnId: "turn-1" },
+      ),
+    );
+    expect(result.isError).toBe(false);
+  });
+});
+
+describe("runDesignerTool — components", () => {
+  test("write_component compiles then creates a new local component", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "write_component",
+        { path: "components/hero.tsx", source: "export default () => null;" },
+        { turnId: "turn-1" },
+      ),
+    );
+    expect(result.isError).toBe(false);
+    expect(result.output).toContain("Created");
+    // Reseeds the open Monaco buffer for the canonical path.
+    expect(deps.handle.reseeds).toEqual([
+      { key: "components/hero.tsx", source: "export default () => null;" },
+    ]);
+    // The definition landed in the document library.
+    const nodes = store.getState().mimic.snapshot;
+    expect(JSON.stringify(nodes)).toContain("components/hero.tsx");
+  });
+
+  test("write_component UPDATES an existing component's source (via the undoable save)", async () => {
+    const doc = createOfflineDesignerDocument();
+    insertComponent(doc, "components/hero.tsx", "export const Old = 1;");
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "write_component",
+        { path: "components/hero.tsx", source: "export const New = 2;" },
+        { turnId: "turn-1" },
+      ),
+    );
+    expect(result.isError).toBe(false);
+    // Existing path → "Updated", not "Created".
+    expect(result.output).toContain("Updated");
+    const snapshot = JSON.stringify(store.getState().mimic.snapshot);
+    expect(snapshot).toContain("export const New = 2;");
+    expect(snapshot).not.toContain("export const Old = 1;");
+    // The open Monaco buffer is reseeded with the new source.
+    expect(deps.handle.reseeds).toEqual([
+      { key: "components/hero.tsx", source: "export const New = 2;" },
+    ]);
+  });
+
+  test("write_component compile failure commits NOTHING", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch, {
+      compile: async (): Promise<PipelineResult> => ({
+        ok: false,
+        diagnostics: [{ message: "Unexpected token", phase: "compile", line: 1 }],
+      }),
+    });
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "write_component",
+        { path: "components/broken.tsx", source: "export default (" },
+        { turnId: "turn-1" },
+      ),
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("did not compile");
+    expect(result.output).toContain("Unexpected token");
+    // No definition created, no buffer reseeded.
+    expect(JSON.stringify(store.getState().mimic.snapshot)).not.toContain("components/broken.tsx");
+    expect(deps.handle.reseeds).toEqual([]);
+  });
+
+  test("read_component returns the local source by path", async () => {
+    const doc = createOfflineDesignerDocument();
+    insertComponent(doc, "components/widget.tsx", "// widget source");
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(deps, call("read_component", { path: "components/widget.tsx" }));
+    expect(result).toEqual({ output: "// widget source", isError: false });
+  });
+
+  test("rename_component renames the definition and drives a Monaco rename", async () => {
+    const doc = createOfflineDesignerDocument();
+    insertComponent(doc, "components/widget.tsx", "// widget");
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(
+      deps,
+      call(
+        "rename_component",
+        { fromPath: "components/widget.tsx", toPath: "components/hero.tsx" },
+        { turnId: "turn-1" },
+      ),
+    );
+    expect(result.isError).toBe(false);
+    expect(deps.handle.renames).toEqual([
+      { from: "components/widget.tsx", to: "components/hero.tsx" },
+    ]);
+    expect(JSON.stringify(store.getState().mimic.snapshot)).toContain("components/hero.tsx");
+  });
+
+  test("delete_component removes the definition", async () => {
+    const doc = createOfflineDesignerDocument();
+    insertComponent(doc, "components/widget.tsx", "// widget");
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(
+      deps,
+      call("delete_component", { path: "components/widget.tsx" }, { turnId: "turn-1" }),
+    );
+    expect(result.isError).toBe(false);
+    expect(JSON.stringify(store.getState().mimic.snapshot)).not.toContain("components/widget.tsx");
+  });
+
+  test("get_components lists local components (manifest note when un-compiled)", async () => {
+    const doc = createOfflineDesignerDocument();
+    insertComponent(doc, "components/widget.tsx", "// widget");
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+
+    const result = await runDesignerTool(deps, call("get_components", {}));
+    expect(result.isError).toBe(false);
+    const parsed = JSON.parse(result.output) as {
+      catalog: unknown[];
+      local: Array<{ path: string; note?: string }>;
+    };
+    expect(parsed.local[0]?.path).toBe("components/widget.tsx");
+    expect(parsed.local[0]?.note).toContain("not compiled");
+  });
+});
+
+describe("runDesignerTool — read_paywall + guards", () => {
+  test("read_paywall returns the other paywall's cleaned document JSON", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch, {
+      readPaywallDocument: async (projectId, slug) => {
+        expect(projectId).toBe("proj-1");
+        expect(slug).toBe("other");
+        return { slug: "other", name: "Other", paywallId: "pw-2", document: { id: "root", type: "root" } };
+      },
+    });
+
+    const result = await runDesignerTool(deps, call("read_paywall", { slug: "other" }));
+    expect(result.isError).toBe(false);
+    const parsed = JSON.parse(result.output) as { slug: string; document: { type: string } };
+    expect(parsed.slug).toBe("other");
+    expect(parsed.document.type).toBe("root");
+  });
+
+  test("read_paywall folds an RPC failure into an error string", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch, {
+      readPaywallDocument: async () => {
+        throw new Error("not found");
+      },
+    });
+
+    const result = await runDesignerTool(deps, call("read_paywall", { slug: "ghost" }));
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("not found");
+  });
+
+  test("no open paywall (null target) folds a mutating tool into an error", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch, { target: null });
+
+    const result = await runDesignerTool(deps, call("get_document", {}));
+    expect(result).toEqual({ output: "No paywall is open to edit.", isError: true });
+  });
+});
+
+describe("renderCompileDiagnostics", () => {
+  test("renders phase, message, and location", () => {
+    const rendered = renderCompileDiagnostics([
+      { message: "boom", phase: "compile", line: 3, column: 5 },
+    ]);
+    expect(rendered).toContain("[compile] boom");
+    expect(rendered).toContain("line 3:5");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
new file mode 100644
index 000000000..8b5dc5480
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
@@ -0,0 +1,495 @@
+"use client";
+
+import {
+  designerToolSchemas,
+  editDocumentResultSchema,
+  serializeDocument,
+  type DesignerToolName,
+  type DocumentEdit,
+} from "@voidhash/ai-shared";
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { listBuiltinComponents } from "@voidhash/paywall-builtins";
+import { docRelativeFromFileName, validateComponentFileName } from "@voidhash/paywall-workspace";
+import { useParams } from "@tanstack/react-router";
+import { useCallback, useEffect, useMemo, useRef } from "react";
+import type { z } from "zod";
+
+import type { SurfaceToolCall, SurfaceToolResult } from "@/features/studio/ai";
+import { managedRuntime, VoidhashRpc } from "@/features/studio/lib/effect-query";
+
+import { useCodeEditor, type CodeEditorHandle } from "../code-mode/code-editor-context";
+import { CompilePipeline, type PipelineResult } from "../code-mode/compile-pipeline";
+import { hashSource } from "../code-mode/hash";
+import { uploadComponentManifest } from "../code-mode/manifest-upload";
+import { usePaywallCodeTarget, type PaywallCodeTarget } from "../hooks/use-paywall-code-target";
+import { closeTab } from "../state/actions";
+import {
+  createCodeComponent,
+  deleteCodeComponent,
+  renameComponentFile,
+  saveCodeComponentSource,
+} from "../state/actions/code-component-actions";
+import { applyDocumentEdits } from "../state/actions/document-edit-actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+  type PaywallDesignerDispatch,
+  type PaywallDesignerStoreType,
+} from "../state/designer-store";
+import {
+  codeComponentDefinitions,
+  componentFileName,
+  definitionForComponentPath,
+  selectCodeComponentNodes,
+} from "../state/utils/code-components";
+import { selectDocumentRoot } from "../state/utils/document-root";
+
+/** Result of reading another paywall's cleaned document (`read_paywall`). */
+interface ReadPaywallDocumentResult {
+  slug: string;
+  name: string;
+  paywallId: string;
+  document: unknown;
+}
+
+/**
+ * The seam {@link runDesignerTool} operates through — the designer store +
+ * dispatch, the open-paywall target (or `null`), the route paywall id, the
+ * optional Monaco handle (buffers only exist while code mode is open), a compile
+ * pipeline for `write_component`, and the two RPC callbacks (`read_paywall` and
+ * the per-turn checkpoint). `capturedTurns` tracks which turns already captured a
+ * checkpoint so the runner (which is re-invoked per tool call) fires it at most
+ * once per turn. Injected so the runner is a plain function testable against a
+ * real store without React.
+ */
+export interface DesignerToolDeps {
+  store: PaywallDesignerStoreType;
+  dispatch: PaywallDesignerDispatch;
+  target: PaywallCodeTarget | null;
+  paywallId: string | null;
+  /** The open Monaco editor handle, or `null` when code mode is not mounted. */
+  handle: CodeEditorHandle | null;
+  /** Compiles a component's TSX to a manifest/preview trees (or diagnostics). */
+  compile: (source: string) => Promise<PipelineResult>;
+  /** Reads ANOTHER paywall's cleaned document JSON for reference (`read_paywall`). */
+  readPaywallDocument: (projectId: string, slug: string) => Promise<ReadPaywallDocumentResult>;
+  /**
+   * Captures the pre-turn document checkpoint for a mutating turn (best-effort;
+   * server is first-write-wins). Rejects only on a genuine RPC failure.
+   */
+  captureCheckpoint: (input: {
+    chatId: string;
+    turnId: string;
+    paywallId: string;
+  }) => Promise<{ captured: boolean }>;
+  /** Turn ids that already captured (or attempted) a checkpoint this session. */
+  capturedTurns: Set<string>;
+}
+
+/** The mutating designer tools — the ones that take a pre-turn checkpoint. */
+const MUTATING_TOOLS: ReadonlySet<DesignerToolName> = new Set([
+  "edit_document",
+  "write_component",
+  "rename_component",
+  "delete_component",
+]);
+
+/**
+ * Runs one validated designer client-tool call against the CURRENTLY OPEN paywall
+ * (its mimic document + local components) and folds every outcome — success OR
+ * failure — into a model-facing `{ output, isError }` string. NEVER throws.
+ *
+ * Composition is authored as mimic document edits (`edit_document` → the
+ * `applyDocumentEdits` store action); there is no code fork or apply step. Code
+ * components are compiled in-browser and written straight to the document. Before
+ * the FIRST mutating tool call of a turn a pre-turn server checkpoint is captured
+ * (best-effort — an RPC failure is logged and the tool proceeds). `read_paywall`
+ * is the only cross-paywall (read-only) tool.
+ *
+ * Input is validated by the caller ({@link useDesignerToolExecutor}); this runner
+ * assumes `call.input` already matches the tool's schema.
+ */
+export async function runDesignerTool(
+  deps: DesignerToolDeps,
+  call: SurfaceToolCall,
+): Promise<SurfaceToolResult> {
+  const { store, dispatch, target, paywallId, handle } = deps;
+  const name = call.toolName as DesignerToolName;
+  const input = call.input;
+
+  // `read_paywall` reads ANOTHER paywall's document — no open paywall needed
+  // beyond the project the route resolves.
+  if (name === "read_paywall") {
+    return readPaywall((input as { slug: string }).slug);
+  }
+
+  // `get_document` / `get_components` / `read_component` need the open document
+  // but not a checkpoint (read-only). The mutating tools additionally checkpoint.
+  if (target === null || paywallId === null) {
+    return { output: "No paywall is open to edit.", isError: true };
+  }
+
+  if (MUTATING_TOOLS.has(name)) {
+    await ensureCheckpoint(deps, call.chatId, call.turnId, paywallId);
+  }
+
+  switch (name) {
+    case "get_document": {
+      const { nodeId, depth } = input as { nodeId?: string; depth?: number };
+      return getDocument(nodeId, depth);
+    }
+    case "get_components":
+      return getComponents();
+    case "read_component":
+      return readComponent((input as { path: string }).path);
+    case "edit_document":
+      return editDocument((input as { edits: readonly DocumentEdit[] }).edits);
+    case "write_component": {
+      const { path, source } = input as { path: string; source: string };
+      return writeComponent(path, source);
+    }
+    case "rename_component": {
+      const { fromPath, toPath } = input as { fromPath: string; toPath: string };
+      return renameComponent(fromPath, toPath);
+    }
+    case "delete_component":
+      return deleteComponent((input as { path: string }).path);
+    default:
+      return { output: `Unknown tool "${name}".`, isError: true };
+  }
+
+  function getDocument(nodeId: string | undefined, depth: number | undefined): SurfaceToolResult {
+    const root = selectDocumentRoot(store.getState());
+    const cleaned = serializeDocument([root], { nodeId, depth });
+    if (cleaned === null) {
+      return { output: `No node "${nodeId}" in the document.`, isError: true };
+    }
+    return { output: JSON.stringify(cleaned), isError: false };
+  }
+
+  function getComponents(): SurfaceToolResult {
+    const state = store.getState();
+    const catalog = Object.values(state.componentCatalog.components).map((entry) => ({
+      kind: "catalog" as const,
+      slug: entry.slug,
+      title: entry.title,
+      version: entry.latestVersion,
+      description: entry.latest.manifest.description,
+      props: entry.latest.manifest.props,
+      actions: entry.latest.manifest.actions,
+      previewStates: entry.latest.previewStates,
+      slot: entry.latest.manifest.slot ?? false,
+    }));
+
+    const localDefinitions = codeComponentDefinitions(selectCodeComponentNodes(state));
+    const local = localDefinitions.map((definition) => {
+      const manifest = state.codeComponents.compiled[definition.id]?.artifact?.manifest;
+      return manifestSummary(definition.path, manifest);
+    });
+
+    // Slot builtins are hidden for now — the edit canvas cannot mount document
+    // children inside the builtin preact island yet (matches the add-component
+    // dialog's filter).
+    const builtins = listBuiltinComponents()
+      .filter((builtin) => builtin.manifest.slot !== true)
+      .map((builtin) => ({
+      kind: "builtin" as const,
+      slug: builtin.slug,
+      name: builtin.name,
+      description: builtin.description,
+      props: builtin.manifest.props,
+      actions: builtin.manifest.actions,
+      previewStates: builtin.manifest.previewStates,
+      slot: builtin.manifest.slot ?? false,
+      // Builtins are first-party and UNPINNED: place them with these identity
+      // fields only — no componentVersion/contentHash/componentPath.
+      insertAs: { componentSource: "builtin", componentSlug: builtin.slug },
+    }));
+
+    return { output: JSON.stringify({ catalog, local, builtins }), isError: false };
+  }
+
+  function readComponent(path: string): SurfaceToolResult {
+    const definition = definitionForComponentPath(store.getState(), path);
+    if (definition === undefined) {
+      return { output: `No local component "${path}".`, isError: true };
+    }
+    return { output: definition.source, isError: false };
+  }
+
+  function editDocument(edits: readonly DocumentEdit[]): SurfaceToolResult {
+    const { result } = dispatch(applyDocumentEdits)({ edits });
+    // Build the wire result through the shared schema (the designer-surface wire
+    // contract) so it can never drift from the type MCP/backend agree on. The
+    // validator errors are the model-facing convergence signal — passed verbatim.
+    const wire = editDocumentResultSchema.parse(
+      result.ok
+        ? { ok: true, mintedIds: result.mintedIds }
+        : { ok: false, errors: result.errors },
+    );
+    return { output: JSON.stringify(wire), isError: !result.ok };
+  }
+
+  async function writeComponent(rawPath: string, source: string): Promise<SurfaceToolResult> {
+    const fileName = componentFileName(rawPath.trim());
+    const invalid = validateComponentFileName(fileName);
+    if (invalid !== undefined) {
+      return { output: `Cannot write "${rawPath}": ${invalid}`, isError: true };
+    }
+    const path = docRelativeFromFileName(fileName);
+
+    // Compile FIRST — commit nothing on a compile/runtime error.
+    const compiled = await deps.compile(source);
+    if (!compiled.ok) {
+      return {
+        output: `Component did not compile — nothing was written:\n${renderCompileDiagnostics(
+          compiled.diagnostics,
+        )}`,
+        isError: true,
+      };
+    }
+
+    const existing = existingDefinitionId(path);
+    if (existing !== undefined) {
+      // Route the update through the undoable save action (the same path Monaco's
+      // manual save uses) — one save, one undo entry — not a raw transaction.
+      dispatch(saveCodeComponentSource)({ nodeId: existing, source });
+    } else {
+      dispatch(createCodeComponent)({ fileName, source });
+    }
+
+    uploadComponentManifest(hashSource(source), compiled);
+    // Reseed the open Monaco buffer (if any) so the editor mirrors the write.
+    handle?.setBufferContent(path, source);
+
+    return {
+      output: `${existing !== undefined ? "Updated" : "Created"} component ${path}.`,
+      isError: false,
+    };
+  }
+
+  function renameComponent(fromPath: string, toPath: string): SurfaceToolResult {
+    const definitionId = existingDefinitionId(normalizeComponentPath(fromPath));
+    if (definitionId === undefined) {
+      return { output: `No local component "${fromPath}" to rename.`, isError: true };
+    }
+    const toFileName = componentFileName(toPath.trim());
+    const invalid = validateComponentFileName(toFileName);
+    if (invalid !== undefined) {
+      return { output: `Cannot rename to "${toPath}": ${invalid}`, isError: true };
+    }
+
+    const result = dispatch(renameComponentFile)({ id: definitionId, fileName: toFileName });
+    if (result.previousPath === null || result.nextPath === null) {
+      return {
+        output: `Could not rename "${fromPath}" to "${toPath}" (name collision or invalid name).`,
+        isError: true,
+      };
+    }
+    // Follow the move in Monaco (preserve text/view state) so open tabs update.
+    handle?.renameModel(result.previousPath, result.nextPath);
+    return { output: `Renamed ${result.previousPath} to ${result.nextPath}.`, isError: false };
+  }
+
+  function deleteComponent(rawPath: string): SurfaceToolResult {
+    const path = normalizeComponentPath(rawPath);
+    const definitionId = existingDefinitionId(path);
+    if (definitionId === undefined) {
+      return { output: `No local component "${rawPath}" to delete.`, isError: true };
+    }
+    dispatch(deleteCodeComponent)({ id: definitionId });
+    // Close any open tab for the deleted component's file.
+    if (store.getState().codeComponents.openTabs.includes(path)) {
+      dispatch(closeTab)({ path });
+    }
+    return {
+      output: `Deleted component ${path}. Existing instances now render a placeholder — replace or remove them.`,
+      isError: false,
+    };
+  }
+
+  /** Resolves a component path (any accepted form) to its definition node id, if present. */
+  function existingDefinitionId(path: string): string | undefined {
+    return definitionForComponentPath(store.getState(), path)?.id;
+  }
+
+  async function readPaywall(readSlug: string): Promise<SurfaceToolResult> {
+    if (target === null) {
+      return { output: "No project is open.", isError: true };
+    }
+    try {
+      const result = await deps.readPaywallDocument(target.projectId, readSlug);
+      return {
+        output: JSON.stringify({ slug: result.slug, name: result.name, document: result.document }),
+        isError: false,
+      };
+    } catch (error) {
+      return { output: `Could not read paywall "${readSlug}": ${unwrapRpcError(error)}`, isError: true };
+    }
+  }
+}
+
+/**
+ * Captures the per-turn pre-mutation checkpoint at most once per turn.
+ * Best-effort: a missing `turnId` skips it (nothing to key on) and an RPC failure
+ * is logged and swallowed (the server is first-write-wins, so a later retry is
+ * safe and a failed capture must not block the edit).
+ */
+async function ensureCheckpoint(
+  deps: DesignerToolDeps,
+  chatId: string,
+  turnId: string | undefined,
+  paywallId: string,
+): Promise<void> {
+  if (turnId === undefined || deps.capturedTurns.has(turnId)) {
+    return;
+  }
+  deps.capturedTurns.add(turnId);
+  try {
+    await deps.captureCheckpoint({ chatId, turnId, paywallId });
+  } catch (error) {
+    console.warn("[designer-ai] checkpoint capture failed; proceeding", error);
+  }
+}
+
+/**
+ * Normalizes a model-supplied component path to the canonical
+ * `components/<name>.tsx` document-relative form used as the definition identity.
+ */
+function normalizeComponentPath(rawPath: string): string {
+  return docRelativeFromFileName(componentFileName(rawPath.trim()));
+}
+
+/** A `get_components` entry for a local component, degrading gracefully when un-compiled. */
+function manifestSummary(
+  path: string,
+  manifest: ComponentManifest | undefined,
+):
+  | {
+      kind: "local";
+      path: string;
+      title?: string;
+      description?: string;
+      props: ComponentManifest["props"];
+      actions: ComponentManifest["actions"];
+      previewStates?: readonly string[];
+      slot: boolean;
+    }
+  | { kind: "local"; path: string; note: string } {
+  if (manifest === undefined) {
+    return {
+      kind: "local",
+      path,
+      note: "manifest unavailable (component not compiled yet — open it in code mode or write it to compile).",
+    };
+  }
+  return {
+    kind: "local",
+    path,
+    title: manifest.title,
+    description: manifest.description,
+    props: manifest.props,
+    actions: manifest.actions,
+    previewStates: manifest.previewStates,
+    slot: manifest.slot ?? false,
+  };
+}
+
+/** Renders compile diagnostics into a readable block for the model. */
+export function renderCompileDiagnostics(
+  diagnostics: readonly { message: string; line?: number; column?: number; phase: string }[],
+): string {
+  return diagnostics
+    .map((diagnostic) => {
+      const at =
+        diagnostic.line !== undefined ? ` (line ${diagnostic.line}${diagnostic.column !== undefined ? `:${diagnostic.column}` : ""})` : "";
+      return `  - [${diagnostic.phase}] ${diagnostic.message}${at}`;
+    })
+    .join("\n");
+}
+
+/**
+ * Unwraps an effect-query RPC failure to a readable message. effect-query wraps
+ * the RPC error (a tagged failure under a `Rpc/`-tagged cause / a `.failure`
+ * field); we surface the innermost human message when present, else the raw one.
+ */
+function unwrapRpcError(error: unknown): string {
+  if (error !== null && typeof error === "object") {
+    const failure = (error as { failure?: unknown }).failure;
+    if (failure !== null && typeof failure === "object" && "message" in failure) {
+      return String((failure as { message: unknown }).message);
+    }
+    if ("message" in error) {
+      return String((error as { message: unknown }).message);
+    }
+  }
+  return String(error);
+}
+
+/**
+ * The designer client-tool executor hook. Returns an `executeTool` function
+ * matching {@link @/features/studio/ai#SurfaceAgent.executeTool}: it validates
+ * each call's input against the shared {@link designerToolSchemas} and delegates
+ * to {@link runDesignerTool} against the open paywall's mimic document + local
+ * components. A schema failure or an unknown tool is folded into a readable error
+ * result; the executor NEVER throws into the AI SDK.
+ */
+export function useDesignerToolExecutor(): (call: SurfaceToolCall) => Promise<SurfaceToolResult> {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { handle } = useCodeEditor();
+  const target = usePaywallCodeTarget();
+  const { id: paywallId = null } = useParams({ strict: false });
+
+  // One compile pipeline per executor mount (owns an esbuild worker + sandbox);
+  // destroyed on unmount.
+  const pipeline = useMemo(() => new CompilePipeline(), []);
+  useEffect(() => () => pipeline.destroy(), [pipeline]);
+
+  // Turn ids that already captured a checkpoint this mount (survives the
+  // per-call re-invocation of the pure runner).
+  const capturedTurns = useRef<Set<string>>(new Set());
+
+  return useCallback(
+    async (call: SurfaceToolCall): Promise<SurfaceToolResult> => {
+      const schema = designerToolSchemas[call.toolName as DesignerToolName] as
+        | z.ZodTypeAny
+        | undefined;
+      if (schema === undefined) {
+        return { output: `Unknown tool "${call.toolName}".`, isError: true };
+      }
+      const parsed = schema.safeParse(call.input);
+      if (!parsed.success) {
+        const message = parsed.error.issues
+          .map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`)
+          .join("; ");
+        return { output: `Invalid input for ${call.toolName}: ${message}`, isError: true };
+      }
+
+      const deps: DesignerToolDeps = {
+        store,
+        dispatch,
+        target,
+        paywallId,
+        handle,
+        capturedTurns: capturedTurns.current,
+        compile: (source) => pipeline.compile(source),
+        readPaywallDocument: (projectId, slug) =>
+          managedRuntime.runPromise(
+            VoidhashRpc.request((rpc) => rpc.ReadPaywallDocument({ projectId, slug })),
+          ),
+        captureCheckpoint: (checkpoint) =>
+          managedRuntime.runPromise(
+            VoidhashRpc.request((rpc) => rpc.CaptureAiCheckpoint(checkpoint)),
+          ),
+      };
+      try {
+        return await runDesignerTool(deps, { ...call, input: parsed.data });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { output: `${call.toolName} failed: ${message}`, isError: true };
+      }
+    },
+    [dispatch, handle, paywallId, pipeline, store, target],
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts
new file mode 100644
index 000000000..2cacdc7c1
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts
@@ -0,0 +1,81 @@
+import { formatComponentPath, formatCompositionPath } from "@voidhash/paywall-workspace";
+import { describe, expect, test } from "vite-plus/test";
+
+import { displayToolPath, resolveToolPath } from "./tool-paths";
+
+const SLUG = "checkout";
+
+describe("resolveToolPath", () => {
+  test("resolves the composition by its bare name", () => {
+    expect(resolveToolPath(SLUG, "paywall.tsx")).toEqual({
+      ok: true,
+      path: formatCompositionPath(SLUG),
+    });
+  });
+
+  test("resolves a component by its relative name", () => {
+    expect(resolveToolPath(SLUG, "components/hero.tsx")).toEqual({
+      ok: true,
+      path: formatComponentPath(SLUG, "hero.tsx"),
+    });
+  });
+
+  test("strips a leading ./", () => {
+    expect(resolveToolPath(SLUG, "./paywall.tsx")).toEqual({
+      ok: true,
+      path: formatCompositionPath(SLUG),
+    });
+  });
+
+  test("accepts an already-absolute path for THIS paywall", () => {
+    const absolute = formatComponentPath(SLUG, "hero.tsx");
+    expect(resolveToolPath(SLUG, absolute)).toEqual({ ok: true, path: absolute });
+  });
+
+  test("rejects an absolute path for a DIFFERENT paywall", () => {
+    const result = resolveToolPath(SLUG, formatComponentPath("other", "hero.tsx"));
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.reason).toContain("open paywall");
+    }
+  });
+
+  test("rejects the reserved /components/* namespace", () => {
+    const result = resolveToolPath(SLUG, "/components/shared.tsx");
+    expect(result.ok).toBe(false);
+  });
+
+  test("rejects a component name without .tsx", () => {
+    const result = resolveToolPath(SLUG, "components/hero");
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.reason).toContain(".tsx");
+    }
+  });
+
+  test("rejects a nested component path", () => {
+    expect(resolveToolPath(SLUG, "components/nested/hero.tsx").ok).toBe(false);
+  });
+
+  test("rejects an unknown top-level name", () => {
+    expect(resolveToolPath(SLUG, "index.ts").ok).toBe(false);
+  });
+
+  test("rejects an empty path", () => {
+    expect(resolveToolPath(SLUG, "   ").ok).toBe(false);
+  });
+});
+
+describe("displayToolPath", () => {
+  test("shows the composition as paywall.tsx", () => {
+    expect(displayToolPath(formatCompositionPath(SLUG))).toBe("paywall.tsx");
+  });
+
+  test("shows a component as components/<name>.tsx", () => {
+    expect(displayToolPath(formatComponentPath(SLUG, "hero.tsx"))).toBe("components/hero.tsx");
+  });
+
+  test("returns the raw path for an unrecognized input", () => {
+    expect(displayToolPath("/weird/path")).toBe("/weird/path");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts
new file mode 100644
index 000000000..fe42cbbd9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts
@@ -0,0 +1,92 @@
+import {
+  COMPOSITION_FILENAME,
+  formatComponentPath,
+  formatCompositionPath,
+  parseWorkspacePath,
+} from "@voidhash/paywall-workspace";
+
+/**
+ * Resolve a model-supplied file name to a workspace-absolute path within the
+ * OPEN paywall (`paywallSlug`). The AI tools address files by their name within
+ * the open paywall — `paywall.tsx` (the composition) or `components/<name>.tsx`
+ * (a component) — so this scopes every write/read to that one paywall: the agent
+ * cannot reach another paywall's files even by passing an absolute path.
+ *
+ * Accepts either the bare paywall-relative form (`paywall.tsx`,
+ * `components/hero.tsx`) OR the already workspace-absolute form for THIS paywall
+ * (`/paywalls/<slug>/…`). A path that resolves to a component file must end in
+ * `.tsx`. Returns `{ ok: false, reason }` for anything else (a foreign paywall,
+ * the reserved top-level `/components/*`, or a malformed name) so the executor
+ * can fold it into a readable tool error.
+ */
+export type ResolveToolPathResult =
+  | { readonly ok: true; readonly path: string }
+  | { readonly ok: false; readonly reason: string };
+
+export function resolveToolPath(paywallSlug: string, rawPath: string): ResolveToolPathResult {
+  const trimmed = rawPath.trim();
+  if (trimmed.length === 0) {
+    return { ok: false, reason: "path is empty" };
+  }
+
+  // Already workspace-absolute: accept only when it names a file in THIS paywall.
+  if (trimmed.startsWith("/")) {
+    const parsed = parseWorkspacePath(trimmed);
+    if (!parsed.ok) {
+      return { ok: false, reason: parsed.error.reason };
+    }
+    if (parsed.path.paywallSlug !== paywallSlug) {
+      return {
+        ok: false,
+        reason: `"${trimmed}" is not a file of the open paywall — you can only edit the open paywall.`,
+      };
+    }
+    return { ok: true, path: trimmed };
+  }
+
+  // Strip a leading `./` for convenience.
+  const relative = trimmed.startsWith("./") ? trimmed.slice(2) : trimmed;
+
+  if (relative === COMPOSITION_FILENAME) {
+    return { ok: true, path: formatCompositionPath(paywallSlug) };
+  }
+
+  const componentsPrefix = "components/";
+  if (relative.startsWith(componentsPrefix)) {
+    const fileName = relative.slice(componentsPrefix.length);
+    if (fileName.length === 0 || fileName.includes("/")) {
+      return { ok: false, reason: `invalid component file name in "${rawPath}"` };
+    }
+    if (!fileName.endsWith(".tsx")) {
+      return { ok: false, reason: `component file must end with ".tsx": "${rawPath}"` };
+    }
+    // Validate the assembled path through the canonical parser.
+    const candidate = formatComponentPath(paywallSlug, fileName);
+    const parsed = parseWorkspacePath(candidate);
+    if (!parsed.ok) {
+      return { ok: false, reason: parsed.error.reason };
+    }
+    return { ok: true, path: candidate };
+  }
+
+  return {
+    ok: false,
+    reason: `"${rawPath}" is not a file of the open paywall — use "paywall.tsx" or "components/<name>.tsx".`,
+  };
+}
+
+/**
+ * The model-facing display name for a workspace-absolute path within the open
+ * paywall — the inverse of {@link resolveToolPath}. `paywall.tsx` for the
+ * composition, `components/<name>.tsx` for a component, or the raw path as a
+ * fallback.
+ */
+export function displayToolPath(workspacePath: string): string {
+  const parsed = parseWorkspacePath(workspacePath);
+  if (!parsed.ok) {
+    return workspacePath;
+  }
+  return parsed.path.kind === "composition"
+    ? COMPOSITION_FILENAME
+    : `components/${parsed.path.fileName}`;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
new file mode 100644
index 000000000..0bf0c8657
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
@@ -0,0 +1,86 @@
+"use client";
+
+import { useParams } from "@tanstack/react-router";
+import { useCallback, useMemo } from "react";
+
+import type { SurfaceAgent } from "@/features/studio/ai";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { useCodeEditor } from "../code-mode/code-editor-context";
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { selectedNodeIdsFromPresence } from "../state/utils/presence";
+import { useDesignerToolExecutor } from "./tool-executor";
+
+/**
+ * Assembles the designer {@link SurfaceAgent} consumed by the AI panel: its
+ * surface id, the request context (organization / project / paywall ids resolved
+ * from the route + the authenticated user), the client tool executor, and the
+ * per-send hooks.
+ *
+ * The agent's tools are CLIENT-EXECUTED (the backend declares them schema-only
+ * and ends the stream at a tool call; the chat auto-continues after the browser
+ * runs the tool). {@link useDesignerToolExecutor} runs each tool directly against
+ * the open paywall's mimic document.
+ *
+ * `getDynamicContext` carries the current node selection with each send (read on
+ * demand, not subscribed). `beforeSend` saves the open Monaco buffers to their
+ * `codeComponent` nodes so the agent reads the user's latest committed code — a
+ * purely local, synchronous operation.
+ */
+export function useDesignerAgent(): SurfaceAgent {
+  const { user } = useAuth();
+  const store = usePaywallDesignerStore();
+  const { handle } = useCodeEditor();
+  const executeTool = useDesignerToolExecutor();
+  const { organizationSlug, projectSlug, id: paywallId } = useParams({ strict: false });
+
+  const getDynamicContext = useCallback(
+    () => ({
+      selectedNodeIds: selectedNodeIdsFromPresence(store.getState().mimic.presence?.self),
+    }),
+    [store],
+  );
+
+  // Save the open Monaco buffers to their `codeComponent` nodes before each send
+  // so the client tool executor reads the user's latest committed code (a no-op
+  // when code mode is not open / nothing is dirty). Purely local + synchronous.
+  const beforeSend = useCallback(() => {
+    handle?.saveAll();
+  }, [handle]);
+
+  const organization = useMemo(
+    () =>
+      organizationSlug
+        ? user.organizations.find((candidate) => candidate.slug === organizationSlug)
+        : undefined,
+    [user, organizationSlug],
+  );
+  const project = useMemo(
+    () =>
+      organizationSlug && projectSlug
+        ? CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug)
+        : null,
+    [user, organizationSlug, projectSlug],
+  );
+
+  const projectId = project?.id ?? "";
+
+  return useMemo<SurfaceAgent>(
+    () => ({
+      surfaceId: "designer",
+      context: {
+        organizationId: organization?.id ?? "",
+        projectId,
+        paywallId,
+      },
+      getDynamicContext,
+      beforeSend,
+      executeTool,
+      // Designer chats are context-specific and resumable: scoped to the paywall
+      // and listed in the panel's history dropdown.
+      persistence: { chatType: "persistent" },
+    }),
+    [organization?.id, projectId, paywallId, getDynamicContext, beforeSend, executeTool],
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/bounding-box-manager.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/bounding-box-manager.tsx
new file mode 100644
index 000000000..d9bec148f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/bounding-box-manager.tsx
@@ -0,0 +1,155 @@
+"use client";
+
+import {
+  createContext,
+  type PropsWithChildren,
+  useCallback,
+  useContext,
+  useEffect,
+  useRef,
+} from "react";
+
+import { updateBoundingBoxes } from "../state/actions";
+import { usePaywallDesignerActions } from "../state/designer-store";
+import { useViewport } from "./viewport";
+
+// ============================================================================
+// Types
+// ============================================================================
+
+interface BoundingBox {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+interface BoundingBoxManagerContextValue {
+  registerElement: (nodeId: string, element: Element) => void;
+  unregisterElement: (nodeId: string) => void;
+}
+
+const BoundingBoxManagerContext = createContext<BoundingBoxManagerContextValue | null>(null);
+
+// ============================================================================
+// Constants
+// ============================================================================
+
+// Epsilon for floating point comparison to avoid jitter from subpixel rendering
+const POSITION_EPSILON = 0.1;
+
+function boxesEqual(a: BoundingBox | undefined, b: BoundingBox): boolean {
+  if (!a) {
+    return false;
+  }
+  return (
+    Math.abs(a.x - b.x) < POSITION_EPSILON &&
+    Math.abs(a.y - b.y) < POSITION_EPSILON &&
+    Math.abs(a.width - b.width) < POSITION_EPSILON &&
+    Math.abs(a.height - b.height) < POSITION_EPSILON
+  );
+}
+
+// ============================================================================
+// Provider Component
+// ============================================================================
+
+export function BoundingBoxManagerProvider({ children }: PropsWithChildren) {
+  const dispatch = usePaywallDesignerActions();
+  const viewport = useViewport();
+
+  // Registry of elements keyed by node ID
+  const elementsRef = useRef<Map<string, Element>>(new Map());
+
+  // Cache of last known bounding boxes for change detection
+  const cachedBoxesRef = useRef<Map<string, BoundingBox>>(new Map());
+
+  // RAF loop ID
+  const rafIdRef = useRef<number | null>(null);
+
+  // Measure all registered elements and update store with changed values
+  const measureAllElements = useCallback(() => {
+    const transform = viewport.getTransform();
+    const changedBoxes: Array<{ id: string; boundingBox: BoundingBox }> = [];
+
+    for (const [nodeId, element] of elementsRef.current.entries()) {
+      // Skip if element is not connected to DOM
+      if (!element.isConnected) {
+        continue;
+      }
+
+      const rect = element.getBoundingClientRect();
+      const canvasCoords = viewport.screenToCanvas(rect.left, rect.top);
+      const canvasWidth = rect.width / transform.scale;
+      const canvasHeight = rect.height / transform.scale;
+
+      const newBox: BoundingBox = {
+        height: canvasHeight,
+        width: canvasWidth,
+        x: canvasCoords.x,
+        y: canvasCoords.y,
+      };
+
+      const cached = cachedBoxesRef.current.get(nodeId);
+      if (!boxesEqual(cached, newBox)) {
+        changedBoxes.push({ boundingBox: newBox, id: nodeId });
+        cachedBoxesRef.current.set(nodeId, newBox);
+      }
+    }
+
+    if (changedBoxes.length > 0) {
+      dispatch(updateBoundingBoxes)({ boxes: changedBoxes });
+    }
+
+    // Continue the loop
+    rafIdRef.current = requestAnimationFrame(measureAllElements);
+  }, [viewport, dispatch]);
+
+  // Start/stop the RAF loop based on registered elements
+  useEffect(() => {
+    // Start the loop
+    rafIdRef.current = requestAnimationFrame(measureAllElements);
+
+    return () => {
+      // Stop the loop on unmount
+      if (rafIdRef.current !== null) {
+        cancelAnimationFrame(rafIdRef.current);
+        rafIdRef.current = null;
+      }
+    };
+  }, [measureAllElements]);
+
+  // Register an element for measurement
+  const registerElement = useCallback((nodeId: string, element: Element) => {
+    elementsRef.current.set(nodeId, element);
+  }, []);
+
+  // Unregister an element
+  const unregisterElement = useCallback((nodeId: string) => {
+    elementsRef.current.delete(nodeId);
+    cachedBoxesRef.current.delete(nodeId);
+  }, []);
+
+  const contextValue: BoundingBoxManagerContextValue = {
+    registerElement,
+    unregisterElement,
+  };
+
+  return (
+    <BoundingBoxManagerContext.Provider value={contextValue}>
+      {children}
+    </BoundingBoxManagerContext.Provider>
+  );
+}
+
+// ============================================================================
+// Hook
+// ============================================================================
+
+export function useBoundingBoxManager() {
+  const context = useContext(BoundingBoxManagerContext);
+  if (!context) {
+    throw new Error("useBoundingBoxManager must be used within a BoundingBoxManagerProvider");
+  }
+  return context;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
new file mode 100644
index 000000000..76b5451a4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
@@ -0,0 +1,244 @@
+"use client";
+
+import { useCallback, useEffect, useRef } from "react";
+
+import { DesignerContextMenu } from "../components/designer-context-menu";
+import { CANVAS_DEFAULTS } from "../constants";
+import {
+  cancelDragSelect,
+  clearHighlight,
+  clearSelection,
+  endDragSelect,
+  saveCanvasState,
+  startDragSelect,
+  textEditingStopped,
+  updateDragSelect,
+} from "../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import { BoundingBoxManagerProvider } from "./bounding-box-manager";
+import { NodeTreeRenderer } from "./node-tree-renderer";
+import { GradientOverlay } from "./overlay/gradient-overlay";
+import { SelectionOverlay } from "./overlay/selection-overlay";
+import { useViewport, Viewport, type ViewportTransform } from "./viewport";
+
+// Minimum distance in pixels to consider it a drag vs click
+const DRAG_THRESHOLD = 5;
+
+/**
+ * Canvas background component that handles drag-to-select.
+ * Must be inside Viewport to use the viewport context.
+ */
+function CanvasBackground() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const viewport = useViewport();
+  const isDraggingRef = useRef(false);
+  const startScreenPointRef = useRef<{ x: number; y: number } | null>(null);
+  const hasDraggedRef = useRef(false);
+
+  const handleMouseEnter = () => {
+    // Clear highlight when entering the canvas background (empty space)
+    dispatch(clearHighlight)({});
+  };
+
+  const handleMouseDown = (e: React.MouseEvent<HTMLDivElement>) => {
+    // Only handle left mouse button and direct clicks on background
+    if (e.button !== 0 || e.target !== e.currentTarget) {
+      return;
+    }
+
+    e.preventDefault();
+
+    isDraggingRef.current = true;
+    hasDraggedRef.current = false;
+    startScreenPointRef.current = { x: e.clientX, y: e.clientY };
+
+    // Convert screen coordinates to canvas coordinates
+    const canvasPoint = viewport.screenToCanvas(e.clientX, e.clientY);
+
+    dispatch(startDragSelect)({
+      point: canvasPoint,
+      shiftKey: e.shiftKey,
+    });
+  };
+
+  useEffect(() => {
+    const handleMouseMove = (e: MouseEvent) => {
+      if (!isDraggingRef.current) {
+        return;
+      }
+
+      // Check if we've exceeded the drag threshold
+      if (!hasDraggedRef.current && startScreenPointRef.current) {
+        const dx = e.clientX - startScreenPointRef.current.x;
+        const dy = e.clientY - startScreenPointRef.current.y;
+        const distance = Math.hypot(dx, dy);
+
+        if (distance >= DRAG_THRESHOLD) {
+          hasDraggedRef.current = true;
+        }
+      }
+
+      // Only update if we're actually dragging
+      if (hasDraggedRef.current) {
+        const canvasPoint = viewport.screenToCanvas(e.clientX, e.clientY);
+        dispatch(updateDragSelect)({ point: canvasPoint });
+      }
+    };
+
+    const handleMouseUp = (e: MouseEvent) => {
+      if (!isDraggingRef.current) {
+        return;
+      }
+
+      isDraggingRef.current = false;
+
+      if (hasDraggedRef.current) {
+        // Finish drag selection
+        dispatch(endDragSelect)({});
+      } else {
+        // It was just a click on background, clear selection and exit text editing mode
+        dispatch(cancelDragSelect)({});
+        dispatch(textEditingStopped)({ id: "" });
+        if (!e.shiftKey) {
+          dispatch(clearSelection)({});
+        }
+      }
+
+      startScreenPointRef.current = null;
+      hasDraggedRef.current = false;
+    };
+
+    const handleKeyDown = (e: KeyboardEvent) => {
+      if (e.key === "Escape") {
+        if (isDraggingRef.current) {
+          isDraggingRef.current = false;
+          hasDraggedRef.current = false;
+          startScreenPointRef.current = null;
+          dispatch(cancelDragSelect)({});
+        } else {
+          // Don't clear selection if exiting text editing mode
+          // (text-node-renderer handles the Escape key and exits edit mode)
+          const state = store.getState();
+          if (!state.textEditingNodeId) {
+            dispatch(clearSelection)({});
+          }
+        }
+      }
+    };
+
+    document.addEventListener("mousemove", handleMouseMove);
+    document.addEventListener("mouseup", handleMouseUp);
+    // Use capture phase so this runs BEFORE text-node-renderer's handler
+    // This allows us to check textEditingNodeId before it's cleared
+    document.addEventListener("keydown", handleKeyDown, true);
+
+    return () => {
+      document.removeEventListener("mousemove", handleMouseMove);
+      document.removeEventListener("mouseup", handleMouseUp);
+      document.removeEventListener("keydown", handleKeyDown, true);
+    };
+  }, [viewport, dispatch, store]);
+
+  return (
+    <DesignerContextMenu source="canvas">
+      <div
+        aria-label="Canvas background"
+        className="absolute inset-0"
+        onMouseDown={handleMouseDown}
+        onMouseEnter={handleMouseEnter}
+        role="button"
+        tabIndex={0}
+      />
+    </DesignerContextMenu>
+  );
+}
+
+export function Canvas() {
+  const dispatch = usePaywallDesignerActions();
+  const containerRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    // Set overscroll-behavior on html and body to prevent overscroll navigation
+    const htmlElement = document.documentElement;
+    const bodyElement = document.body;
+
+    const originalHtmlOverscrollX = htmlElement.style.overscrollBehaviorX;
+    const originalBodyOverscrollX = bodyElement.style.overscrollBehaviorX;
+    const originalHtmlOverscrollY = htmlElement.style.overscrollBehaviorY;
+    const originalBodyOverscrollY = bodyElement.style.overscrollBehaviorY;
+
+    htmlElement.style.overscrollBehaviorX = "none";
+    bodyElement.style.overscrollBehaviorX = "none";
+    htmlElement.style.overscrollBehaviorY = "none";
+    bodyElement.style.overscrollBehaviorY = "none";
+
+    return () => {
+      htmlElement.style.overscrollBehaviorX = originalHtmlOverscrollX;
+      bodyElement.style.overscrollBehaviorX = originalBodyOverscrollX;
+      htmlElement.style.overscrollBehaviorY = originalHtmlOverscrollY;
+      bodyElement.style.overscrollBehaviorY = originalBodyOverscrollY;
+    };
+  }, []);
+
+  const handleTransformChange = useCallback(
+    (newTransform: ViewportTransform) => {
+      dispatch(saveCanvasState)({
+        scale: newTransform.scale,
+        x: newTransform.x,
+        y: newTransform.y,
+      });
+    },
+    [dispatch],
+  );
+
+  const handleMouseLeave = () => {
+    // Clear highlight when mouse leaves the canvas area
+    dispatch(clearHighlight)({});
+  };
+
+  return (
+    <div
+      className="absolute inset-0 h-full w-full overflow-hidden"
+      onMouseLeave={handleMouseLeave}
+      ref={containerRef}
+      style={{
+        background: CANVAS_DEFAULTS.BACKGROUND_COLOR,
+      }}
+    >
+      <Viewport onTransformChange={handleTransformChange}>
+        <BoundingBoxManagerProvider>
+          <div
+            className="absolute"
+            style={{
+              // Large canvas area for clicking to clear selection
+              height: CANVAS_DEFAULTS.WORLD_HEIGHT,
+              // Center the canvas so screens at (0,0) appear in the middle-ish
+              left: -CANVAS_DEFAULTS.WORLD_WIDTH / 2,
+              top: -CANVAS_DEFAULTS.WORLD_HEIGHT / 2,
+              width: CANVAS_DEFAULTS.WORLD_WIDTH,
+            }}
+          >
+            <CanvasBackground />
+            <div
+              style={{
+                // Offset to place (0,0) at center of the world
+                left: CANVAS_DEFAULTS.WORLD_WIDTH / 2,
+                position: "absolute",
+                top: CANVAS_DEFAULTS.WORLD_HEIGHT / 2,
+              }}
+            >
+              <NodeTreeRenderer />
+            </div>
+          </div>
+        </BoundingBoxManagerProvider>
+      </Viewport>
+
+      {/* Pixi overlay for selection visualization */}
+      <SelectionOverlay containerRef={containerRef} />
+
+      {/* Gradient start/end point controls for the selected node */}
+      <GradientOverlay containerRef={containerRef} />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx
new file mode 100644
index 000000000..27ed74b69
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx
@@ -0,0 +1,217 @@
+// @vitest-environment jsdom
+
+import { TextNode, ViewNode } from "@voidhash/mimic-schema";
+import { act, cleanup, fireEvent, render } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+} from "../../state/testing/offline-document";
+import { createDesignerStore, PaywallStoreContext } from "../../state/designer-store";
+import type { PaywallDesignerStoreType } from "../../state/designer-store";
+import { Viewport } from "../viewport";
+import { Selectable } from "./selectable";
+
+afterEach(cleanup);
+
+/** Inserts one absolutely positioned view under the seeded screen. */
+function insertAbsoluteView(store: PaywallDesignerStoreType): string {
+  const doc = store.getState().mimic.document;
+  const { screenId } = seededIds(doc as never);
+  let viewId = "";
+  (doc as never as { transaction: (fn: (root: never) => void) => void }).transaction(
+    (root: never) => {
+      const screen = (root as { findByIdAcrossTree: (id: string) => unknown }).findByIdAcrossTree(
+        screenId,
+      );
+      const view = (
+        screen as { children: { insertLast: (v: unknown) => { id: string; as: (n: unknown) => { data: { style: { update: (s: unknown) => void } } } } } }
+      ).children.insertLast({ type: "view" });
+      viewId = view.id;
+      view.as(ViewNode).data.style.update({ position: "absolute", left: 5, top: 5 });
+    },
+  );
+  return viewId;
+}
+
+/** Inserts one absolutely positioned text node under the seeded screen. */
+function insertAbsoluteText(store: PaywallDesignerStoreType): string {
+  const doc = store.getState().mimic.document;
+  const { screenId } = seededIds(doc as never);
+  let textId = "";
+  (doc as never as { transaction: (fn: (root: never) => void) => void }).transaction(
+    (root: never) => {
+      const screen = (root as { findByIdAcrossTree: (id: string) => unknown }).findByIdAcrossTree(
+        screenId,
+      );
+      const text = (
+        screen as { children: { insertLast: (v: unknown) => { id: string; as: (n: unknown) => { data: { style: { update: (s: unknown) => void } } } } } }
+      ).children.insertLast({ type: "text" });
+      textId = text.id;
+      text.as(TextNode).data.style.update({ position: "absolute", left: 5, top: 5 });
+    },
+  );
+  return textId;
+}
+
+/** Injects a self-presence selecting `nodeId` so `canSelectNode` permits the drag. */
+function selectInPresence(store: PaywallDesignerStoreType, nodeId: string): void {
+  act(() => {
+    store.setState((state) => ({
+      ...state,
+      // The offline stub transport never echoes presence, so inject `self`
+      // directly (only `selectedNodeIds` is read here) to mark the node
+      // selectable; the fuller presence shape is irrelevant to the drag path.
+      mimic: {
+        ...state.mimic,
+        presence: {
+          self: {
+            selectedNodeIds: [{ id: "e0", pos: "a0", value: nodeId }],
+            user: { color: "#fff", name: "Tester" },
+          },
+        } as never,
+      },
+    }));
+  });
+}
+
+/** Renders a single `Selectable` wrapping a plain div that spreads its handlers. */
+function renderSelectable(store: PaywallDesignerStoreType, nodeId: string) {
+  return render(
+    <PaywallStoreContext.Provider value={store}>
+      <Viewport>
+        <Selectable nodeId={nodeId}>
+          {(handlers) => <div data-testid="target" {...handlers} />}
+        </Selectable>
+      </Viewport>
+    </PaywallStoreContext.Provider>,
+  );
+}
+
+describe("Selectable — unmount mid-drag cleanup", () => {
+  test("unmounting during a drag removes listeners, restores the cursor, and cancels the move", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = createDesignerStore(doc as never);
+    const viewId = insertAbsoluteView(store);
+    selectInPresence(store, viewId);
+
+    const view = renderSelectable(store, viewId);
+    const target = view.getByTestId("target");
+
+    // Press, then cross the 3px threshold so a draft-backed move starts.
+    act(() => {
+      fireEvent.mouseDown(target, { button: 0, clientX: 0, clientY: 0 });
+    });
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mousemove", { clientX: 20, clientY: 20 }));
+    });
+
+    expect(store.getState().move.isActive).toBe(true);
+    expect(document.body.style.cursor).toBe("move");
+    expect(store.getState()._commander.activeDraft).not.toBeNull();
+
+    // Unmount mid-drag (e.g. the node was deleted by a collaborator).
+    act(() => {
+      view.unmount();
+    });
+
+    // Listeners + cursor + move state + draft are all torn down.
+    expect(document.body.style.cursor).toBe("");
+    expect(store.getState().move.isActive).toBe(false);
+    expect(store.getState()._commander.activeDraft).toBeNull();
+
+    // A stray document mousemove after unmount must not resurrect the move.
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mousemove", { clientX: 60, clientY: 60 }));
+    });
+    expect(store.getState().move.isActive).toBe(false);
+  });
+
+  test("a completed drag (mouseup) leaves nothing to clean up on later unmount", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = createDesignerStore(doc as never);
+    const viewId = insertAbsoluteView(store);
+    selectInPresence(store, viewId);
+
+    const view = renderSelectable(store, viewId);
+    const target = view.getByTestId("target");
+
+    act(() => {
+      fireEvent.mouseDown(target, { button: 0, clientX: 0, clientY: 0 });
+    });
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mousemove", { clientX: 20, clientY: 20 }));
+    });
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mouseup", { button: 0, clientX: 20, clientY: 20 }));
+    });
+
+    // Move committed and ended cleanly.
+    expect(store.getState().move.isActive).toBe(false);
+    expect(document.body.style.cursor).toBe("");
+
+    // Unmount afterwards is a no-op for the gesture.
+    act(() => {
+      view.unmount();
+    });
+    expect(store.getState().move.isActive).toBe(false);
+  });
+
+  test("a non-primary mouseup does not end an in-flight drag", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = createDesignerStore(doc as never);
+    const viewId = insertAbsoluteView(store);
+    selectInPresence(store, viewId);
+
+    const view = renderSelectable(store, viewId);
+    const target = view.getByTestId("target");
+
+    act(() => {
+      fireEvent.mouseDown(target, { button: 0, clientX: 0, clientY: 0 });
+    });
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mousemove", { clientX: 20, clientY: 20 }));
+    });
+    expect(store.getState().move.isActive).toBe(true);
+
+    // A right-button release must be ignored — the drag stays live.
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mouseup", { button: 2, clientX: 20, clientY: 20 }));
+    });
+    expect(store.getState().move.isActive).toBe(true);
+
+    // Clean up: the primary release ends it.
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mouseup", { button: 0, clientX: 20, clientY: 20 }));
+    });
+    expect(store.getState().move.isActive).toBe(false);
+  });
+
+  test("an absolute text node is draggable — crossing the threshold starts a move", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = createDesignerStore(doc as never);
+    const textId = insertAbsoluteText(store);
+    selectInPresence(store, textId);
+
+    const view = renderSelectable(store, textId);
+    const target = view.getByTestId("target");
+
+    act(() => {
+      fireEvent.mouseDown(target, { button: 0, clientX: 0, clientY: 0 });
+    });
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mousemove", { clientX: 20, clientY: 20 }));
+    });
+
+    // The text node gate now permits the drag just like a view node.
+    expect(store.getState().move.isActive).toBe(true);
+    expect(store.getState().move.nodes[textId]).toBeDefined();
+    expect(document.body.style.cursor).toBe("move");
+
+    act(() => {
+      document.dispatchEvent(new MouseEvent("mouseup", { button: 0, clientX: 20, clientY: 20 }));
+    });
+    expect(store.getState().move.isActive).toBe(false);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx
new file mode 100644
index 000000000..be16baf7e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx
@@ -0,0 +1,309 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useEffect, useRef } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import { useDesignerDraft } from "../../hooks/use-designer-draft";
+import { DesignerContextMenu } from "../../components/designer-context-menu";
+import {
+  cancelMove,
+  endMove,
+  nodeClicked,
+  nodeDoubleClicked,
+  nodeMouseEnter,
+  nodeMouseLeave,
+  nodeMouseOver,
+  selectNode,
+  startMove,
+  updateMove,
+} from "../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import { documentRootFromSnapshot } from "../../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+import {
+  getSelectedStateIdForNode,
+  resolveEffectiveStyle,
+} from "../../state/utils/state-overrides";
+import { canSelectNode } from "../../state/utils/selection-level";
+import { excludeNestedNodes, findNodeById } from "../../state/utils/tree";
+import { useViewport } from "../viewport";
+
+/**
+ * Screen-space distance (px) the pointer must travel from mousedown before a
+ * drag begins. Below it the gesture stays a plain click so selection,
+ * shift-select, and double-click drill-down keep working.
+ */
+const MOVE_DRAG_THRESHOLD = 3;
+
+export interface SelectableProps {
+  children: ({
+    onContextMenu,
+    onDoubleClick,
+    onMouseDown,
+    onMouseEnter,
+    onMouseLeave,
+    onMouseOver,
+    role,
+  }: {
+    onContextMenu: (e: React.MouseEvent) => void;
+    onDoubleClick: (e: React.MouseEvent) => void;
+    onMouseDown: (e: React.MouseEvent) => void;
+    onMouseEnter: (e: React.MouseEvent) => void;
+    onMouseLeave: (e: React.MouseEvent) => void;
+    onMouseOver: (e: React.MouseEvent) => void;
+    role: string;
+  }) => React.ReactNode;
+  nodeId: string;
+}
+
+export function Selectable({ children, nodeId }: SelectableProps) {
+  const store = usePaywallDesignerStore();
+  const isSelected = useStore(
+    store,
+    useShallow((state) =>
+      selectedNodeIdsFromPresence(state.mimic.presence?.self).includes(nodeId),
+    ),
+  );
+  const dispatch = usePaywallDesignerActions();
+  const viewport = useViewport();
+  const { begin: beginDraft, commit: commitDraft, discard: discardDraft } = useDesignerDraft(store);
+
+  // Teardown for an in-flight drag gesture (document listeners + cursor + move
+  // state). Set only while a gesture is active so a plain click stays zero-cost;
+  // the unmount effect runs it if this node is removed mid-drag (e.g. deleted by
+  // a collaborator) — otherwise the listeners, `cursor: "move"`, and an active
+  // `move` state would all leak.
+  const activeGestureCleanupRef = useRef<(() => void) | null>(null);
+
+  useEffect(
+    () => () => {
+      activeGestureCleanupRef.current?.();
+      activeGestureCleanupRef.current = null;
+    },
+    [],
+  );
+
+  // Helper to check if this node can be interacted with at the current selection level
+  const canInteract = () => {
+    const state = store.getState();
+    const documentRoot = documentRootFromSnapshot(state.mimic.snapshot);
+    const selectedNodeIds = selectedNodeIdsFromPresence(state.mimic.presence?.self);
+    return canSelectNode(documentRoot, nodeId, selectedNodeIds);
+  };
+
+  /**
+   * Whether `node` is a draggable node type (view, scrollView or text) whose
+   * effective style is absolutely positioned. All carry `position`/`left`/`top`
+   * and are state-capable, so `resolveEffectiveStyle` reads them uniformly.
+   */
+  const isAbsolutePositioned = (node: SnapshotNode | null | undefined, id: string): boolean => {
+    if (!node || (node.type !== "view" && node.type !== "scrollView" && node.type !== "text")) {
+      return false;
+    }
+    const selectedStateId = getSelectedStateIdForNode(store.getState().stateOverrideSelection, id);
+    return resolveEffectiveStyle(node, selectedStateId)["position"] === "absolute";
+  };
+
+  /** Whether this node is an absolutely positioned draggable (view or text) node. */
+  const isAbsoluteDraggableNode = () => {
+    const state = store.getState();
+    const root = documentRootFromSnapshot(state.mimic.snapshot);
+    return isAbsolutePositioned(findNodeById<SnapshotNode>(root, nodeId), nodeId);
+  };
+
+  /**
+   * The absolutely positioned view/text nodes that should move together: every
+   * selected absolute node, always including the pressed node. A node whose
+   * selected ancestor is also a target is dropped — moving the ancestor already
+   * shifts it, so keeping it would apply the drag delta twice.
+   */
+  const collectMoveTargets = () => {
+    const state = store.getState();
+    const root = documentRootFromSnapshot(state.mimic.snapshot);
+    const selectedNodeIds = selectedNodeIdsFromPresence(state.mimic.presence?.self);
+    const ids = new Set(selectedNodeIds);
+    ids.add(nodeId);
+
+    const absoluteIds = [...ids].filter((id) =>
+      isAbsolutePositioned(findNodeById<SnapshotNode>(root, id), id),
+    );
+
+    return excludeNestedNodes(root, absoluteIds);
+  };
+
+  const dispatchClick = (shiftKey: boolean) => {
+    dispatch(nodeClicked)({ id: nodeId, shiftKey });
+  };
+
+  const handleMouseDown = (e: React.MouseEvent) => {
+    // Only handle if node can be selected at current level
+    if (!canInteract()) {
+      return; // Let event bubble to parent
+    }
+    e.stopPropagation();
+
+    // Non-primary buttons (context menu etc.) keep click semantics only.
+    // Non-absolute nodes are not draggable — behave exactly as before.
+    if (e.button !== 0 || !isAbsoluteDraggableNode()) {
+      dispatchClick(e.shiftKey);
+      return;
+    }
+
+    const startClientX = e.clientX;
+    const startClientY = e.clientY;
+    const shiftKey = e.shiftKey;
+    let dragging = false;
+
+    // Removes the document listeners + restores the cursor, and clears the
+    // unmount hook (so a later unmount does not re-run a finished gesture).
+    const cleanup = () => {
+      document.removeEventListener("mousemove", onMouseMove);
+      document.removeEventListener("mouseup", onMouseUp);
+      document.removeEventListener("keydown", onKeyDown);
+      document.body.style.cursor = "";
+      activeGestureCleanupRef.current = null;
+    };
+
+    // Runs on unmount MID-DRAG: tears down the gesture and, if a move is still
+    // in flight, cancels it (resetting `move.isActive`) and discards its draft —
+    // `cleanup` alone would leave the move state active.
+    const cancelActiveGesture = () => {
+      const wasDragging = dragging;
+      cleanup();
+      if (wasDragging) {
+        dispatch(cancelMove)({});
+        discardDraft();
+      }
+    };
+
+    const onMouseMove = (moveEvent: MouseEvent) => {
+      if (!dragging) {
+        const dx = moveEvent.clientX - startClientX;
+        const dy = moveEvent.clientY - startClientY;
+        if (Math.hypot(dx, dy) < MOVE_DRAG_THRESHOLD) {
+          return;
+        }
+        // Threshold crossed: select the pressed node (unless it is part of a
+        // multi-selection being dragged), then begin the draft-backed move.
+        if (!isSelected) {
+          dispatchClick(shiftKey);
+        }
+        const nodeIds = collectMoveTargets();
+        if (nodeIds.length === 0) {
+          cleanup();
+          return;
+        }
+        beginDraft();
+        dispatch(startMove)({
+          nodeIds,
+          screenPoint: { x: startClientX, y: startClientY },
+        });
+        document.body.style.cursor = "move";
+        dragging = true;
+        // Now that a draft-backed move is live, an unmount must tear it down.
+        activeGestureCleanupRef.current = cancelActiveGesture;
+      }
+      dispatch(updateMove)({ screenPoint: { x: moveEvent.clientX, y: moveEvent.clientY } });
+    };
+
+    const onMouseUp = (upEvent: MouseEvent) => {
+      // Only the primary button ends the drag; a secondary/middle release must
+      // not commit a move mid-gesture.
+      if (upEvent.button !== 0) {
+        return;
+      }
+      cleanup();
+      if (!dragging) {
+        // No drag occurred — treat as a plain click (select / drill parent).
+        dispatchClick(shiftKey);
+        return;
+      }
+      // Commit the draft BEFORE endMove: while a draft is active the commander
+      // skips undo recording, so endMove must run draft-free to land its single
+      // undo entry on the stack (mirrors endResize).
+      commitDraft();
+      dispatch(endMove)({ screenPoint: { x: upEvent.clientX, y: upEvent.clientY } });
+    };
+
+    const onKeyDown = (keyEvent: KeyboardEvent) => {
+      if (keyEvent.key === "Escape" && dragging) {
+        cleanup();
+        dispatch(cancelMove)({});
+        discardDraft();
+      }
+    };
+
+    document.addEventListener("mousemove", onMouseMove);
+    document.addEventListener("mouseup", onMouseUp);
+    document.addEventListener("keydown", onKeyDown);
+    // Before the threshold is crossed the only in-flight resource is these
+    // listeners; register a teardown so an unmount during the press removes
+    // them (the pre-drag path has no move/draft to cancel yet).
+    activeGestureCleanupRef.current = cancelActiveGesture;
+  };
+
+  const handleDoubleClick = (e: React.MouseEvent) => {
+    // Only handle double-click if node can be selected at current level
+    if (!canInteract()) {
+      return; // Let event bubble to parent
+    }
+    e.stopPropagation();
+    // Convert screen coordinates to canvas coordinates for drill-down
+    const canvasCoords = viewport.screenToCanvas(e.clientX, e.clientY);
+    dispatch(nodeDoubleClicked)({
+      id: nodeId,
+      canvasX: canvasCoords.x,
+      canvasY: canvasCoords.y,
+    });
+  };
+
+  const handleContextMenu = (e: React.MouseEvent) => {
+    // Only handle context menu if node can be selected at current level
+    if (!canInteract()) {
+      return; // Let event bubble to parent
+    }
+    e.stopPropagation();
+
+    // Auto-select node if not already selected (standard UX pattern)
+    if (!isSelected) {
+      dispatch(selectNode)({ id: nodeId, many: false });
+    }
+  };
+
+  const handleMouseEnter = (e: React.MouseEvent) => {
+    const result = dispatch(nodeMouseEnter)({ id: nodeId }) as
+      | { shouldPropagate?: boolean }
+      | undefined;
+    if (!result?.shouldPropagate) {
+      e.stopPropagation();
+    }
+  };
+
+  const handleMouseOver = (e: React.MouseEvent) => {
+    const result = dispatch(nodeMouseOver)({ id: nodeId }) as
+      | { shouldPropagate?: boolean }
+      | undefined;
+    if (!result?.shouldPropagate) {
+      e.stopPropagation();
+    }
+  };
+
+  const handleMouseLeave = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    dispatch(nodeMouseLeave)({ id: nodeId });
+  };
+
+  return (
+    <DesignerContextMenu nodeId={nodeId} source="canvas">
+      {children({
+        onContextMenu: handleContextMenu,
+        onDoubleClick: handleDoubleClick,
+        onMouseDown: handleMouseDown,
+        onMouseEnter: handleMouseEnter,
+        onMouseLeave: handleMouseLeave,
+        onMouseOver: handleMouseOver,
+        role: "button",
+      })}
+    </DesignerContextMenu>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx
new file mode 100644
index 000000000..495cf39f2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx
@@ -0,0 +1,217 @@
+import { getBuiltinComponent } from "@voidhash/paywall-builtins";
+import { mountBuiltinPreview } from "@voidhash/paywall-renderer-preact";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { TriangleAlertIcon } from "lucide-react";
+import { useEffect, useRef, type ReactNode } from "react";
+import { useStore } from "zustand/react";
+
+import { PreviewTreeRenderer } from "../../components/component-preview/preview-tree-renderer";
+import { useComponentPreviewTree } from "../../components/component-preview/use-preview-tree";
+import { useComponentNodeWarnings } from "../../hooks/use-component-node-warnings";
+import { usePaywallDesignerStore } from "../../state/designer-store";
+import type { LocalComponentArtifact } from "../../state/designer-store-state";
+import { definitionForComponentPath } from "../../state/utils/code-components";
+import { Selectable } from "../helpers/selectable";
+
+/**
+ * Resolves the preview state to render from the spec §6 fallback chain: each
+ * candidate (local override → persisted `previewState` → `"default"`) must be
+ * listed in the catalog's `previewStates` to win; when none are, the first
+ * available state is used. Returns undefined only when the catalog lists no
+ * states at all.
+ */
+function resolvePreviewState(
+  previewStates: readonly string[],
+  candidates: ReadonlyArray<string | undefined>,
+): string | undefined {
+  for (const candidate of candidates) {
+    if (candidate !== undefined && previewStates.includes(candidate)) {
+      return candidate;
+    }
+  }
+  return previewStates[0];
+}
+
+function PlaceholderChip({ label }: { label: string }) {
+  return (
+    <div className="inline-flex max-w-full items-center self-start truncate rounded-sm border border-border border-dashed bg-muted px-1.5 py-0.5 text-[10px] text-muted-foreground">
+      {label}
+    </div>
+  );
+}
+
+function ComponentPreviewContent({
+  artifactBaseUrl,
+  contentHash,
+  state,
+  renderSlot,
+}: {
+  artifactBaseUrl: string;
+  contentHash: string;
+  state: string;
+  renderSlot: () => ReactNode;
+}) {
+  const query = useComponentPreviewTree({ artifactBaseUrl, contentHash, state });
+
+  if (query.isPending) {
+    return <div className="min-h-12 min-w-24 animate-pulse rounded-sm bg-muted/60" />;
+  }
+  if (query.data === undefined) {
+    return <PlaceholderChip label={`Component preview "${state}" failed to load`} />;
+  }
+  return <PreviewTreeRenderer renderSlot={renderSlot} tree={query.data} />;
+}
+
+/**
+ * Renders a LOCAL component instance from its in-browser compiled artifact
+ * (kept in the store, keyed by the definition id) — the same trusted
+ * `PreviewTreeRenderer`, so slot mounting and affordances match the catalog
+ * path exactly.
+ */
+function LocalComponentPreviewContent({
+  artifact,
+  candidates,
+  renderSlot,
+}: {
+  artifact: LocalComponentArtifact;
+  candidates: ReadonlyArray<string | undefined>;
+  renderSlot: () => ReactNode;
+}) {
+  const states = Object.keys(artifact.previewTrees);
+  const state = resolvePreviewState(states, candidates);
+  const tree = state !== undefined ? artifact.previewTrees[state] : undefined;
+  if (tree === undefined) {
+    return <PlaceholderChip label="Component has no preview state" />;
+  }
+  return <PreviewTreeRenderer renderSlot={renderSlot} tree={tree} />;
+}
+
+/**
+ * Renders a BUILTIN component instance by mounting the renderer's REAL preact
+ * implementation as a small island inside the React canvas (the same package
+ * whose sources already compile into this app for preview mode). Literal
+ * document props resolve like production; variable references are inert on
+ * the edit canvas, as are `actionBindings`. Builtins take no slot content
+ * yet, so the node's editor children are not mounted inside the island. A
+ * slug missing from the registry degrades to a labeled placeholder chip.
+ */
+function BuiltinComponentContent({ node }: { node: ComponentSnapshotNode }) {
+  const containerRef = useRef<HTMLDivElement | null>(null);
+  const slug = node.data.componentSlug;
+  const props = node.data.props;
+  const definition = getBuiltinComponent(slug);
+
+  useEffect(() => {
+    const container = containerRef.current;
+    if (container === null || definition === undefined) {
+      return;
+    }
+    return mountBuiltinPreview(container, { slug, props });
+  }, [definition, slug, props]);
+
+  if (definition === undefined) {
+    return <PlaceholderChip label={`Built-in component "${slug}" not available`} />;
+  }
+  return <div ref={containerRef} />;
+}
+
+/**
+ * Canvas renderer for `component` document nodes: renders the pinned preview
+ * tree (trusted artifact) with the node's editor children mounted at the
+ * tree's slot marker — or, for `componentSource: "builtin"`, the renderer's
+ * real implementation as a preact island. Only the root element is selectable/registered for
+ * bounding boxes — preview-tree internals are inert, while slotted children
+ * are real editor nodes with full affordances. An amber badge surfaces §7.4
+ * validation warnings.
+ */
+export function ComponentNodeRenderer({
+  node,
+  children,
+  ref,
+}: {
+  node: ComponentSnapshotNode;
+  children: React.ReactNode;
+  ref?: React.RefObject<HTMLDivElement | null>;
+}) {
+  const store = usePaywallDesignerStore();
+  const isLocal = node.data.componentSource === "local";
+  const isBuiltin = node.data.componentSource === "builtin";
+  const catalogEntry = useStore(
+    store,
+    (state) => state.componentCatalog.byContentHash[node.data.contentHash],
+  );
+  const localDefinitionId = useStore(store, (state) =>
+    isLocal ? definitionForComponentPath(state, node.data.componentPath)?.id : undefined,
+  );
+  const localArtifact = useStore(store, (state) =>
+    localDefinitionId !== undefined
+      ? state.codeComponents.compiled[localDefinitionId]?.artifact
+      : undefined,
+  );
+  const localStatus = useStore(store, (state) =>
+    localDefinitionId !== undefined
+      ? state.codeComponents.compiled[localDefinitionId]?.status
+      : undefined,
+  );
+  const localDefinitionExists = localDefinitionId !== undefined;
+  const localPreviewState = useStore(
+    store,
+    (state) => state.componentPreviewStateSelection[node.id],
+  );
+  const warnings = useComponentNodeWarnings(node.id);
+  const hasWarning = warnings.some((warning) => warning.severity === "warning");
+
+  const previewState =
+    !isLocal && catalogEntry
+      ? resolvePreviewState(catalogEntry.previewStates, [
+          localPreviewState,
+          node.data.previewState,
+          "default",
+        ])
+      : undefined;
+
+  const stateCandidates = [localPreviewState, node.data.previewState, "default"];
+
+  return (
+    <Selectable nodeId={node.id}>
+      {(selectableProps) => (
+        <div className="relative" ref={ref} {...selectableProps}>
+          {isBuiltin ? (
+            <BuiltinComponentContent node={node} />
+          ) : isLocal ? (
+            localArtifact !== undefined ? (
+              <LocalComponentPreviewContent
+                artifact={localArtifact}
+                candidates={stateCandidates}
+                renderSlot={() => children}
+              />
+            ) : !localDefinitionExists ? (
+              <PlaceholderChip label={`Missing component file — ${node.data.componentPath}`} />
+            ) : localStatus === "error" ? (
+              <PlaceholderChip label={`Component file ${node.data.componentPath} has errors`} />
+            ) : (
+              <div className="min-h-12 min-w-24 animate-pulse rounded-sm bg-muted/60" />
+            )
+          ) : catalogEntry !== undefined && previewState !== undefined ? (
+            <ComponentPreviewContent
+              artifactBaseUrl={catalogEntry.artifactBaseUrl}
+              contentHash={node.data.contentHash}
+              renderSlot={() => children}
+              state={previewState}
+            />
+          ) : (
+            <PlaceholderChip label={`Component "${node.data.componentSlug}" not in catalog`} />
+          )}
+          {hasWarning && (
+            <span
+              className="pointer-events-none absolute -top-1.5 -right-1.5 z-10 flex size-3.5 items-center justify-center [&_svg]:size-3"
+              title="This component has validation warnings"
+            >
+              <TriangleAlertIcon className="fill-background text-amber-500" />
+            </span>
+          )}
+        </div>
+      )}
+    </Selectable>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/layouts/flex-layout-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/layouts/flex-layout-renderer.tsx
new file mode 100644
index 000000000..4565462aa
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/layouts/flex-layout-renderer.tsx
@@ -0,0 +1,30 @@
+import type { ViewStyleInput } from "@voidhash/paywall-renderer-web-core";
+import { buildViewStyles } from "@voidhash/paywall-renderer-web-core";
+
+interface FlexLayoutRendererProps {
+  style: ViewStyleInput;
+  children: React.ReactNode;
+  initialStyle?: React.CSSProperties;
+  ref?: React.RefObject<HTMLDivElement | null>;
+}
+
+export function FlexLayoutRenderer({
+  children,
+  ref,
+  style,
+  initialStyle = {},
+  ...rest
+}: FlexLayoutRendererProps) {
+  return (
+    <div
+      ref={ref}
+      style={{
+        ...(buildViewStyles(style) as React.CSSProperties),
+        ...initialStyle,
+      }}
+      {...rest}
+    >
+      {children}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/path-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/path-node-renderer.tsx
new file mode 100644
index 000000000..adb9fab40
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/path-node-renderer.tsx
@@ -0,0 +1,41 @@
+import { buildPathStyles, type PathSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { Selectable } from "../helpers/selectable";
+
+export function PathNodeRenderer({
+  node,
+  ref,
+}: {
+  node: PathSnapshotNode;
+  ref?: React.RefObject<SVGPathElement | null>;
+}) {
+  const pathStyles = buildPathStyles(node.data.style);
+
+  // Build the <path> element with styles and optional transform
+  return (
+    <Selectable nodeId={node.id}>
+      {(selectableProps) => {
+        // Extract only the event handlers we need, excluding role which is not valid for SVG
+        const { role: _, ...svgProps } = selectableProps;
+        return (
+          <path
+            d={node.data.d}
+            fill={pathStyles.fill}
+            fillOpacity={pathStyles.fillOpacity}
+            fillRule={pathStyles.fillRule}
+            opacity={pathStyles.opacity}
+            ref={ref}
+            stroke={pathStyles.stroke}
+            strokeLinecap={pathStyles.strokeLinecap}
+            strokeLinejoin={pathStyles.strokeLinejoin}
+            strokeOpacity={pathStyles.strokeOpacity}
+            strokeWidth={pathStyles.strokeWidth}
+            transform={node.data.transform}
+            vectorEffect="non-scaling-stroke"
+            {...svgProps}
+          />
+        );
+      }}
+    </Selectable>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/screen-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/screen-node-renderer.tsx
new file mode 100644
index 000000000..0ac4bca7a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/screen-node-renderer.tsx
@@ -0,0 +1,78 @@
+import type { ScreenSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { buildScreenContainerStyles } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand";
+
+import { usePaywallDesignerStore } from "../../state/designer-store";
+import { localizedBackgroundImage, selectDefaultLocale } from "../../state/utils/localization";
+import {
+  getSelectedStateIdForNode,
+  resolveEffectiveStyle,
+} from "../../state/utils/state-overrides";
+import { Selectable } from "../helpers/selectable";
+import { FlexLayoutRenderer } from "./layouts/flex-layout-renderer";
+
+export function ScreenNodeRenderer({
+  node,
+  children,
+  ref,
+}: {
+  node: ScreenSnapshotNode;
+  children: React.ReactNode;
+  ref?: React.RefObject<HTMLDivElement | null>;
+}) {
+  const store = usePaywallDesignerStore();
+  const overrideDims = useStore(store, (state) => {
+    const { resize } = state;
+    if (!resize.isActive) {
+      return null;
+    }
+    return resize.currentNodeDimensions[node.id] ?? null;
+  });
+  const selectedStateId = useStore(store, (state) =>
+    getSelectedStateIdForNode(state.stateOverrideSelection, node.id),
+  );
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const defaultLocale = useStore(store, selectDefaultLocale);
+  const effectiveStyle = resolveEffectiveStyle(node, selectedStateId) as ScreenSnapshotNode["data"]["style"];
+  // Substitute the locale-specific background image ONLY when a real override
+  // exists — otherwise the render style stays byte-identical to today's.
+  const localizedBg = localizedBackgroundImage(node.data, activeLocale, defaultLocale);
+  const renderStyle =
+    localizedBg === null ? effectiveStyle : { ...effectiveStyle, backgroundImage: localizedBg };
+
+  const width = overrideDims?.width ?? effectiveStyle.width;
+  const height = overrideDims?.height ?? effectiveStyle.height;
+
+  return (
+    <div className="absolute" ref={ref} style={{ left: node.data.style.x, top: node.data.style.y }}>
+      <Selectable nodeId={node.id}>
+        {(selectableProps) => (
+          <div
+            style={{
+              ...(buildScreenContainerStyles(renderStyle) as React.CSSProperties),
+              width,
+              height,
+            }}
+            {...selectableProps}
+          >
+            <FlexLayoutRenderer
+              initialStyle={{
+                height,
+                width,
+              }}
+              style={{
+                ...renderStyle,
+                borderTopLeftRadius: 0,
+                borderTopRightRadius: 0,
+                borderBottomRightRadius: 0,
+                borderBottomLeftRadius: 0,
+              }}
+            >
+              {children}
+            </FlexLayoutRenderer>
+          </div>
+        )}
+      </Selectable>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/scrollview-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/scrollview-node-renderer.tsx
new file mode 100644
index 000000000..9e92d7f85
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/scrollview-node-renderer.tsx
@@ -0,0 +1,96 @@
+import type { ScrollViewSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand";
+
+import { usePaywallDesignerStore } from "../../state/designer-store";
+import { localizedBackgroundImage, selectDefaultLocale } from "../../state/utils/localization";
+import {
+  getSelectedStateIdForNode,
+  resolveEffectiveStyle,
+} from "../../state/utils/state-overrides";
+import { Selectable } from "../helpers/selectable";
+import { FlexLayoutRenderer } from "./layouts/flex-layout-renderer";
+
+/**
+ * Edit-canvas renderer for a `scrollView` node. Mirrors the view renderer's
+ * flex layout + resize/state handling, then layers the RN ScrollView overflow
+ * semantics on top via `initialStyle`: vertical scroll by default, horizontal
+ * (row flow) when `horizontal`, and scrollbar suppression when
+ * `showsScrollIndicator` is false. The overflow is applied here rather than in
+ * `buildScrollViewStyles` because the canvas builds base styles through
+ * `FlexLayoutRenderer`/`buildViewStyles`; the CSS lowering is identical.
+ */
+export function ScrollViewNodeRenderer({
+  node,
+  children,
+  ref,
+}: {
+  node: ScrollViewSnapshotNode;
+  children: React.ReactNode;
+  ref?: React.RefObject<HTMLDivElement | null>;
+}) {
+  const store = usePaywallDesignerStore();
+  const overrideDims = useStore(store, (state) => {
+    const { resize } = state;
+    if (!resize.isActive) {
+      return null;
+    }
+    return resize.currentNodeDimensions[node.id] ?? null;
+  });
+  const selectedStateId = useStore(store, (state) =>
+    getSelectedStateIdForNode(state.stateOverrideSelection, node.id),
+  );
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const defaultLocale = useStore(store, selectDefaultLocale);
+
+  const effectiveStyle = resolveEffectiveStyle(
+    node,
+    selectedStateId,
+  ) as ScrollViewSnapshotNode["data"]["style"];
+  // Substitute the locale-specific background image ONLY when a real override
+  // exists for the active locale — otherwise leave the state-resolved style
+  // byte-identical to today's behavior.
+  const localizedBg = localizedBackgroundImage(node.data, activeLocale, defaultLocale);
+  const renderStyle =
+    localizedBg === null ? effectiveStyle : { ...effectiveStyle, backgroundImage: localizedBg };
+
+  const style = overrideDims
+    ? {
+        ...renderStyle,
+        width: overrideDims.width ?? renderStyle.width,
+        height: overrideDims.height ?? renderStyle.height,
+      }
+    : renderStyle;
+
+  const overflowStyle: React.CSSProperties = node.data.horizontal
+    ? { flexDirection: "row", overflowX: "auto", overflowY: "hidden" }
+    : { overflowX: "hidden", overflowY: "auto" };
+  const initialStyle: React.CSSProperties = {
+    ...overflowStyle,
+    WebkitOverflowScrolling: "touch",
+    // Yoga defaults a flex item's min main size to 0, but CSS defaults it to
+    // `auto` (content floor) — without `min-*: 0` a content-tall scrollView can
+    // never shrink and `overflowY: auto` never engages. Mirror
+    // `buildScrollViewStyles`, defaulting only when the author left it unset so
+    // `buildViewStyles` (spread first via FlexLayoutRenderer) keeps its value.
+    ...(style.minHeight === undefined ? { minHeight: 0 } : {}),
+    ...(style.minWidth === undefined ? { minWidth: 0 } : {}),
+    // Inline styles cannot target ::-webkit-scrollbar; scrollbarWidth hides it
+    // on Firefox/standards engines only.
+    ...(node.data.showsScrollIndicator ? {} : { scrollbarWidth: "none" }),
+  };
+
+  return (
+    <Selectable nodeId={node.id}>
+      {(selectableProps) => (
+        <FlexLayoutRenderer
+          style={style}
+          initialStyle={initialStyle}
+          {...selectableProps}
+          ref={ref}
+        >
+          {children}
+        </FlexLayoutRenderer>
+      )}
+    </Selectable>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/shape-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/shape-node-renderer.tsx
new file mode 100644
index 000000000..d5a5adffc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/shape-node-renderer.tsx
@@ -0,0 +1,54 @@
+import { buildShapeContainerStyles, type ShapeSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand";
+
+import { usePaywallDesignerStore } from "../../state/designer-store";
+import { Selectable } from "../helpers/selectable";
+
+export function ShapeNodeRenderer({
+  node,
+  children,
+  ref,
+}: {
+  node: ShapeSnapshotNode;
+  children: React.ReactNode;
+  ref?: React.RefObject<HTMLDivElement | null>;
+}) {
+  const store = usePaywallDesignerStore();
+  const overrideDims = useStore(store, (state) => {
+    const { resize } = state;
+    if (!resize.isActive) {
+      return null;
+    }
+    return resize.currentNodeDimensions[node.id] ?? null;
+  });
+
+  const style = overrideDims
+    ? {
+        ...node.data.style,
+        width: overrideDims.width ?? node.data.style.width,
+        height: overrideDims.height ?? node.data.style.height,
+      }
+    : node.data.style;
+
+  const containerStyles = buildShapeContainerStyles(style);
+  const viewBox = node.data.viewBox;
+  const viewBoxString = `${viewBox.minX} ${viewBox.minY} ${viewBox.width} ${viewBox.height}`;
+
+  return (
+    <Selectable nodeId={node.id}>
+      {(selectableProps) => (
+        <div ref={ref} style={containerStyles as React.CSSProperties} {...selectableProps}>
+          <svg
+            height="100%"
+            preserveAspectRatio={style.preserveAspectRatio}
+            style={{ display: "block" }}
+            viewBox={viewBoxString}
+            width="100%"
+          >
+            {children}
+          </svg>
+        </div>
+      )}
+    </Selectable>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/text-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/text-node-renderer.tsx
new file mode 100644
index 000000000..4889c8280
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/text-node-renderer.tsx
@@ -0,0 +1,244 @@
+import { resolveText } from "@voidhash/mimic-schema";
+import { buildTextStyles, type TextSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useCallback, useEffect, useRef } from "react";
+import { useStore } from "zustand/react";
+
+import {
+  selectNode,
+  textEditingStarted,
+  textEditingStopped,
+  updateNodeTranslation,
+  updateTextNode,
+} from "../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import { documentRootFromSnapshot } from "../../state/utils/document-root";
+import { selectDefaultLocale } from "../../state/utils/localization";
+import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+import { canSelectNode } from "../../state/utils/selection-level";
+import {
+  getSelectedStateIdForNode,
+  resolveEffectiveStyle,
+} from "../../state/utils/state-overrides";
+import { Selectable } from "../helpers/selectable";
+
+export function TextNodeRenderer({
+  node,
+  ref,
+}: {
+  node: TextSnapshotNode;
+  /**
+   * Ref to the single styled element (accepts a callback or object ref). The
+   * caller registers this element with the bounding-box manager, so it MUST be
+   * the element carrying `buildTextStyles` output (position + offsets).
+   */
+  ref?: React.Ref<HTMLDivElement>;
+}) {
+  const store = usePaywallDesignerStore();
+  const editingNodeId = useStore(store, (state) => state.textEditingNodeId);
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const defaultLocale = useStore(store, selectDefaultLocale);
+  const selectedStateId = useStore(store, (state) =>
+    getSelectedStateIdForNode(state.stateOverrideSelection, node.id),
+  );
+  const isTextEditingMode = editingNodeId !== null;
+  const isFocused = editingNodeId === node.id;
+  // `null` (default locale) resolves byte-for-byte to today's `node.data.text`.
+  const isBaseLocale = activeLocale === null || activeLocale === defaultLocale;
+  const resolvedText = resolveText(node.data, activeLocale, defaultLocale);
+  // A non-default locale that resolves back to the base text has no override —
+  // dim it in place so untranslated content is scannable without shifting layout.
+  const isMissingTranslation = !isBaseLocale && resolvedText === node.data.text;
+  const effectiveStyle = resolveEffectiveStyle(
+    node,
+    selectedStateId,
+  ) as TextSnapshotNode["data"]["style"];
+  const editableRef = useRef<HTMLDivElement>(null);
+  // Track if focus came from a click (place cursor) vs double-click (select all)
+  const focusedViaClickRef = useRef(false);
+  const dispatch = usePaywallDesignerActions();
+
+  // The styled element carries `buildTextStyles` output (position + offsets),
+  // so it MUST also be the element the bounding-box manager registers — an
+  // absolute text node has to leave the flow on the very element selection
+  // boxes and drag math measure. Point both the internal `editableRef`
+  // (content/focus) and the forwarded `ref` (bounding-box manager) at it,
+  // supporting either a callback or object ref from the caller.
+  const setElementRef = useCallback(
+    (element: HTMLDivElement | null) => {
+      editableRef.current = element;
+      if (typeof ref === "function") {
+        ref(element);
+      } else if (ref) {
+        ref.current = element;
+      }
+    },
+    [ref],
+  );
+
+  // Initialize content when entering text editing mode
+  // All text nodes need their content set via refs since React doesn't render children in editing mode
+  useEffect(() => {
+    if (isTextEditingMode && editableRef.current) {
+      editableRef.current.textContent = resolvedText;
+    }
+  }, [isTextEditingMode, resolvedText]);
+
+  // Focus and select text when this node becomes focused via double-click
+  // (not when switching from another text node - that uses click position)
+  useEffect(() => {
+    if (isFocused && editableRef.current) {
+      // Skip if focus came from a click (cursor already placed)
+      if (focusedViaClickRef.current) {
+        focusedViaClickRef.current = false;
+        return;
+      }
+
+      // Use requestAnimationFrame to ensure DOM is ready
+      requestAnimationFrame(() => {
+        if (editableRef.current) {
+          editableRef.current.focus();
+          // Select all text when entering via double-click
+          const range = document.createRange();
+          range.selectNodeContents(editableRef.current);
+          const selection = window.getSelection();
+          selection?.removeAllRanges();
+          selection?.addRange(range);
+        }
+      });
+    }
+  }, [isFocused]);
+
+  const handleDoubleClick = (e: React.MouseEvent<HTMLDivElement>) => {
+    // In text editing mode, all text nodes are editable regardless of selection level
+    if (!isTextEditingMode) {
+      // Check if this text node can be interacted with at the current selection level
+      const state = store.getState();
+      const documentRoot = documentRootFromSnapshot(state.mimic.snapshot);
+      const selectedNodeIds = selectedNodeIdsFromPresence(state.mimic.presence?.self);
+
+      if (!canSelectNode(documentRoot, node.id, selectedNodeIds)) {
+        return; // Let event bubble to parent
+      }
+    }
+
+    e.stopPropagation();
+    dispatch(textEditingStarted)({ id: node.id });
+  };
+
+  const handleMouseDown = (
+    e: React.MouseEvent<HTMLDivElement>,
+    selectableOnMouseDown?: (e: React.MouseEvent<HTMLDivElement>) => void,
+  ) => {
+    // In text editing mode, handle focus switching between text nodes
+    if (isTextEditingMode) {
+      e.stopPropagation();
+
+      if (!isFocused) {
+        // Mark that focus came from a click (not double-click)
+        // This prevents the useEffect from selecting all text
+        focusedViaClickRef.current = true;
+
+        // Let the browser handle focus and cursor placement naturally
+        // (don't call preventDefault - let mousedown focus the contentEditable)
+
+        // Update state to track this node as the editing node
+        dispatch(textEditingStarted)({ id: node.id });
+
+        // Also select this node so the blue selection rectangle moves
+        dispatch(selectNode)({ id: node.id, many: false });
+      }
+      return;
+    }
+
+    // Not in text editing mode - use the selectable's mouse down handler
+    selectableOnMouseDown?.(e);
+  };
+
+  const handleBlur = (e: React.FocusEvent<HTMLDivElement>) => {
+    const finalValue = editableRef.current?.textContent ?? "";
+
+    // Save the changes against the active locale. Base-locale edits keep
+    // dispatching `updateTextNode`; a non-default locale routes to
+    // `updateNodeTranslation` (empty value clears the override → base fallback).
+    if (finalValue !== resolvedText) {
+      if (activeLocale === null || activeLocale === defaultLocale) {
+        dispatch(updateTextNode)({
+          id: node.id,
+          updates: { text: finalValue },
+        });
+      } else {
+        dispatch(updateNodeTranslation)({
+          id: node.id,
+          locale: activeLocale,
+          text: finalValue,
+        });
+      }
+    }
+
+    // Check if focus is moving to another text node
+    const relatedTarget = e.relatedTarget as HTMLElement | null;
+    const isMovingToAnotherTextNode = relatedTarget?.closest("[data-text-node]") !== null;
+
+    if (!isMovingToAnotherTextNode) {
+      // Exit text editing mode entirely
+      dispatch(textEditingStopped)({ id: node.id });
+    }
+  };
+
+  const handleKeyDown = (e: React.KeyboardEvent<HTMLDivElement>) => {
+    if (e.key === "Enter") {
+      e.preventDefault();
+      e.currentTarget.blur();
+    }
+    if (e.key === "Escape") {
+      e.preventDefault();
+      // Reset content to original value (discard changes)
+      if (editableRef.current) {
+        editableRef.current.textContent = resolvedText;
+      }
+      // Exit text editing mode directly (don't save)
+      dispatch(textEditingStopped)({ id: node.id });
+      // Remove focus
+      e.currentTarget.blur();
+    }
+  };
+
+  return (
+    <Selectable nodeId={node.id}>
+      {(selectableProps) => {
+        // Extract onDoubleClick since text nodes use their own handler for text editing
+        const { role, onMouseDown, onDoubleClick: _, ...otherSelectableProps } = selectableProps;
+        const elementRole = isFocused ? "textbox" : role;
+        return (
+          // biome-ignore lint/a11y/noStaticElementInteractions: We need a div to support both selectable (button role) and editable (textbox role) modes
+          // biome-ignore lint/nursery/noNoninteractiveElementInteractions: We need a div to support both selectable (button role) and editable (textbox role) modes
+          <div
+            contentEditable={isTextEditingMode}
+            data-text-node="true"
+            key={isTextEditingMode ? "editing" : "display"}
+            onBlur={handleBlur}
+            onDoubleClick={handleDoubleClick}
+            onKeyDown={handleKeyDown}
+            onMouseDown={(e) => handleMouseDown(e, onMouseDown)}
+            ref={setElementRef}
+            role={elementRole}
+            style={{
+              ...(buildTextStyles(effectiveStyle) as React.CSSProperties),
+              // Editor-specific overrides
+              userSelect: isTextEditingMode ? "text" : "none",
+              cursor: isTextEditingMode ? "text" : "default",
+              outline: "none",
+              // Subtle missing-translation affordance (does not alter layout).
+              ...(isMissingTranslation && !isTextEditingMode ? { opacity: 0.5 } : {}),
+            }}
+            suppressContentEditableWarning
+            {...otherSelectableProps}
+          >
+            {/* In editing mode, content is managed via refs for all text nodes */}
+            {!isTextEditingMode && resolvedText}
+          </div>
+        );
+      }}
+    </Selectable>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/view-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/view-node-renderer.tsx
new file mode 100644
index 000000000..a772079b4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/view-node-renderer.tsx
@@ -0,0 +1,61 @@
+import type { ViewSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand";
+
+import { usePaywallDesignerStore } from "../../state/designer-store";
+import { localizedBackgroundImage, selectDefaultLocale } from "../../state/utils/localization";
+import {
+  getSelectedStateIdForNode,
+  resolveEffectiveStyle,
+} from "../../state/utils/state-overrides";
+import { Selectable } from "../helpers/selectable";
+import { FlexLayoutRenderer } from "./layouts/flex-layout-renderer";
+
+export function ViewNodeRenderer({
+  node,
+  children,
+  ref,
+}: {
+  node: ViewSnapshotNode;
+  children: React.ReactNode;
+  ref?: React.RefObject<HTMLDivElement | null>;
+}) {
+  const store = usePaywallDesignerStore();
+  const overrideDims = useStore(store, (state) => {
+    const { resize } = state;
+    if (!resize.isActive) {
+      return null;
+    }
+    return resize.currentNodeDimensions[node.id] ?? null;
+  });
+  const selectedStateId = useStore(store, (state) =>
+    getSelectedStateIdForNode(state.stateOverrideSelection, node.id),
+  );
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const defaultLocale = useStore(store, selectDefaultLocale);
+
+  const effectiveStyle = resolveEffectiveStyle(node, selectedStateId) as ViewSnapshotNode["data"]["style"];
+  // Substitute the locale-specific background image ONLY when a real override
+  // exists for the active locale — otherwise leave the state-resolved style
+  // byte-identical to today's behavior.
+  const localizedBg = localizedBackgroundImage(node.data, activeLocale, defaultLocale);
+  const renderStyle =
+    localizedBg === null ? effectiveStyle : { ...effectiveStyle, backgroundImage: localizedBg };
+
+  const style = overrideDims
+    ? {
+        ...renderStyle,
+        width: overrideDims.width ?? renderStyle.width,
+        height: overrideDims.height ?? renderStyle.height,
+      }
+    : renderStyle;
+
+  return (
+    <Selectable nodeId={node.id}>
+      {(selectableProps) => (
+        <FlexLayoutRenderer style={style} {...selectableProps} ref={ref}>
+          {children}
+        </FlexLayoutRenderer>
+      )}
+    </Selectable>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-tree-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-tree-renderer.tsx
new file mode 100644
index 000000000..9dc5d71e7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-tree-renderer.tsx
@@ -0,0 +1,137 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useCallback, useLayoutEffect, useRef } from "react";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { selectRenderRoot } from "../state/utils/document-root";
+import { useBoundingBoxManager } from "./bounding-box-manager";
+import { ComponentNodeRenderer } from "./node-renderers/component-node-renderer";
+import { ScrollViewNodeRenderer } from "./node-renderers/scrollview-node-renderer";
+import { ViewNodeRenderer } from "./node-renderers/view-node-renderer";
+import { PathNodeRenderer } from "./node-renderers/path-node-renderer";
+import { ScreenNodeRenderer } from "./node-renderers/screen-node-renderer";
+import { ShapeNodeRenderer } from "./node-renderers/shape-node-renderer";
+import { TextNodeRenderer } from "./node-renderers/text-node-renderer";
+
+export function NodeRenderer({ node }: { node: SnapshotNode }) {
+  const children = node.children;
+  const elementRef = useRef<HTMLDivElement>(null);
+  const pathElementRef = useRef<SVGPathElement>(null);
+  const { registerElement, unregisterElement } = useBoundingBoxManager();
+
+  // Register element with the centralized bounding box manager. View/scrollView/
+  // screen/shape/component/path nodes render a STABLE styled element, so a mount-time
+  // effect reading the ref once suffices. Text is the exception: its styled
+  // element is keyed on edit mode and remounts, so it registers via a callback
+  // ref (`registerTextElementRef` below) that re-fires on every swap — this
+  // effect deliberately skips text to avoid pinning the detached old element.
+  useLayoutEffect(() => {
+    if (node.type === "root" || node.type === "text") {
+      return;
+    }
+
+    const element = node.type === "path" ? pathElementRef.current : elementRef.current;
+    if (!element) {
+      return;
+    }
+
+    registerElement(node.id, element);
+
+    return () => {
+      unregisterElement(node.id);
+    };
+  }, [node.id, node.type, registerElement, unregisterElement]);
+
+  // Callback ref for the text node's remounting styled element: register the
+  // fresh element on mount/remount and unregister on detach, so the manager
+  // always measures the connected element (never the swapped-out one).
+  const registerTextElementRef = useCallback(
+    (element: HTMLDivElement | null) => {
+      if (element) {
+        registerElement(node.id, element);
+      } else {
+        unregisterElement(node.id);
+      }
+    },
+    [node.id, registerElement, unregisterElement],
+  );
+
+  if (node.type === "root") {
+    return (
+      <>
+        {children.map((child) => (
+          <NodeRenderer key={child.id} node={child} />
+        ))}
+      </>
+    );
+  }
+  if (node.type === "screen") {
+    return (
+      <ScreenNodeRenderer node={node} ref={elementRef}>
+        {children.map((child) => (
+          <NodeRenderer key={child.id} node={child} />
+        ))}
+      </ScreenNodeRenderer>
+    );
+  }
+  if (node.type === "text") {
+    return <TextNodeRenderer node={node} ref={registerTextElementRef} />;
+  }
+
+  if (node.type === "view") {
+    return (
+      <ViewNodeRenderer node={node} ref={elementRef}>
+        {children.map((child) => (
+          <NodeRenderer key={child.id} node={child} />
+        ))}
+      </ViewNodeRenderer>
+    );
+  }
+
+  if (node.type === "scrollView") {
+    return (
+      <ScrollViewNodeRenderer node={node} ref={elementRef}>
+        {children.map((child) => (
+          <NodeRenderer key={child.id} node={child} />
+        ))}
+      </ScrollViewNodeRenderer>
+    );
+  }
+
+  if (node.type === "shape") {
+    return (
+      <ShapeNodeRenderer node={node} ref={elementRef}>
+        {children.map((child) => (
+          <NodeRenderer key={child.id} node={child} />
+        ))}
+      </ShapeNodeRenderer>
+    );
+  }
+
+  if (node.type === "path") {
+    return <PathNodeRenderer node={node} ref={pathElementRef} />;
+  }
+
+  if (node.type === "component") {
+    return (
+      <ComponentNodeRenderer node={node} ref={elementRef}>
+        {children.map((child) => (
+          <NodeRenderer key={child.id} node={child} />
+        ))}
+      </ComponentNodeRenderer>
+    );
+  }
+
+  return null;
+}
+
+export function NodeTreeRenderer() {
+  const store = usePaywallDesignerStore();
+  const documentRoot = useStore(store, selectRenderRoot);
+
+  return (
+    <div className="relative">
+      <NodeRenderer node={documentRoot} />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/cursors-overlay.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/cursors-overlay.tsx
new file mode 100644
index 000000000..42e184002
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/cursors-overlay.tsx
@@ -0,0 +1,79 @@
+import { forwardRef } from "react";
+import { useStore } from "zustand/react";
+
+import { useCursorUpdater } from "../../hooks/use-cursor-updater";
+import { usePaywallDesignerStore } from "../../state/designer-store";
+import { useViewport } from "../viewport";
+
+export const MultiplayerCursor = forwardRef<
+  HTMLDivElement,
+  {
+    x: number;
+    y: number;
+    name?: string;
+    color?: string;
+  }
+>(({ x, y, name, color, ...rest }, ref) => (
+  <div
+    ref={ref}
+    style={{
+      left: 0,
+      position: "absolute",
+      top: 0,
+      transform: `translate(${x}px, ${y}px)`,
+    }}
+    {...rest}
+  >
+    <svg width="20" viewBox="0 0 51 59" fill="none" xmlns="http://www.w3.org/2000/svg">
+      <title>{name}'s cursor</title>
+      <path
+        d="M12.5 55L3 3.5L46.5 30L25.5 36L12.5 55Z"
+        fill="black"
+        stroke="white"
+        strokeWidth="3"
+      />
+    </svg>
+    {name && color && (
+      <div
+        className="-mt-1 ml-3 rounded-full rounded-tl-sm py-0.5 pl-1 pr-1.5 text-xs text-white"
+        style={{
+          backgroundColor: color,
+        }}
+      >
+        {name}
+      </div>
+    )}
+  </div>
+));
+
+export function CursorsOverlay() {
+  const store = usePaywallDesignerStore();
+  const others = useStore(store, (state) => state.mimic.presence?.others);
+  const { canvasToScreen } = useViewport();
+
+  const cursors = [...(others?.values() ?? [])].flatMap((value) => {
+    const data = value.data;
+    if (!data) {
+      return [];
+    }
+    const screenPos = canvasToScreen(data.cursor?.x ?? 0, data.cursor?.y ?? 0);
+    return [
+      {
+        color: data.user.color,
+        name: data.user.name,
+        x: screenPos.x,
+        y: screenPos.y,
+      },
+    ];
+  });
+
+  useCursorUpdater();
+
+  return (
+    <div className="pointer-events-none absolute w-screen h-screen inset-0" style={{ zIndex: 11 }}>
+      {cursors.map((cursor) => (
+        <MultiplayerCursor key={cursor.name} {...cursor} />
+      ))}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/gradient-overlay.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/gradient-overlay.tsx
new file mode 100644
index 000000000..f2763a936
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/gradient-overlay.tsx
@@ -0,0 +1,318 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { useCallback, useEffect, useRef, useState } from "react";
+
+import { updateFillStyle } from "../../state/actions";
+import { isStatefulNodeType } from "../../state/actions/node-resolver";
+import type { StyleTarget } from "../../state/actions/features/style-action-helpers";
+import type { BackgroundGradient } from "../../state/actions/features/fill-style-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import type { DesignerStoreState } from "../../state/designer-store-state";
+import type { BoundingBox } from "../../state/utils/bounding-box";
+import {
+  getSelectedStateIdForNode,
+  isStateCapableNode,
+  resolveEffectiveStyle,
+} from "../../state/utils/state-overrides";
+import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+import { findNodeById } from "../../state/utils/tree";
+import { selectRenderRoot } from "../../state/utils/document-root";
+
+const HANDLE_HIT_SIZE = 18;
+
+/** The decoded gradient read shape: scalar fields plain, array elements wrapped. */
+interface DecodedGradient {
+  kind: "linear" | "radial";
+  startX: number;
+  startY: number;
+  endX: number;
+  endY: number;
+  stops: Array<{ value?: { color: string; position: number } }>;
+}
+
+interface GradientOverlayState {
+  target: StyleTarget;
+  box: BoundingBox;
+  gradient: BackgroundGradient;
+  scale: number;
+  panX: number;
+  panY: number;
+}
+
+/** Unwrap the CRDT-decoded gradient into the logical write shape. */
+function toWriteGradient(decoded: DecodedGradient): BackgroundGradient {
+  const stops = decoded.stops
+    .map((entry) => entry.value)
+    .filter((stop): stop is { color: string; position: number } => stop !== undefined)
+    .map((stop) => ({ color: stop.color, position: stop.position }));
+  return {
+    kind: decoded.kind,
+    startX: decoded.startX,
+    startY: decoded.startY,
+    endX: decoded.endX,
+    endY: decoded.endY,
+    stops,
+  };
+}
+
+/**
+ * Reads the single-selected node's gradient overlay geometry from the store, or
+ * `null` when the overlay should not render (multi/no selection, non-gradient
+ * fill, disabled background, missing bounding box).
+ */
+function readOverlayState(state: DesignerStoreState): GradientOverlayState | null {
+  const selectedNodeIds = selectedNodeIdsFromPresence(state.mimic.presence?.self);
+  if (selectedNodeIds.length !== 1) return null;
+  const nodeId = selectedNodeIds[0]!;
+
+  const box = state.canvas.boundingBoxes[nodeId];
+  if (!box) return null;
+
+  // Draft-aware so the handle markers track the cursor live during a drag; the
+  // dispatched endpoint writes land in the active draft, not `mimic.snapshot`.
+  const root = selectRenderRoot(state);
+  const node = findNodeById<SnapshotNode>(root, nodeId);
+  if (!node || !isStateCapableNode(node) || !isStatefulNodeType(node.type)) return null;
+
+  const stateId = getSelectedStateIdForNode(state.stateOverrideSelection, nodeId);
+  const effective = resolveEffectiveStyle(node, stateId);
+  if (effective.backgroundEnabled !== true || effective.backgroundType !== "gradient") return null;
+
+  const decoded = effective.backgroundGradient as DecodedGradient | undefined;
+  if (!decoded) return null;
+
+  return {
+    target: { nodeId, nodeType: node.type },
+    box,
+    gradient: toWriteGradient(decoded),
+    scale: state.canvas.scale,
+    panX: state.canvas.x,
+    panY: state.canvas.y,
+  };
+}
+
+/**
+ * Renders draggable start/end handles for the selected node's linear/radial
+ * gradient. Screen-space DOM/SVG layer that mirrors `SelectionOverlay`'s
+ * drag/wheel/Escape lifecycle. Writes flow through `updateFillStyle` into the
+ * active draft so the canvas preview updates live.
+ */
+export function GradientOverlay({
+  containerRef,
+}: {
+  containerRef: React.RefObject<HTMLDivElement | null>;
+}) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { begin: beginDraft, commit: commitDraft, discard: discardDraft } = useDesignerDraft(store);
+
+  const [overlay, setOverlay] = useState<GradientOverlayState | null>(null);
+
+  useEffect(() => {
+    const update = () => setOverlay(readOverlayState(store.getState() as DesignerStoreState));
+    update();
+    const unsubscribe = store.subscribe(update);
+    return () => unsubscribe();
+  }, [store]);
+
+  const startHandleRef = useRef<HTMLDivElement>(null);
+  const endHandleRef = useRef<HTMLDivElement>(null);
+
+  // Removes the document listeners for the in-flight drag, if any. Held in a ref
+  // so an unmount mid-drag can tear the listeners down (see the effect below).
+  // This only detaches listeners; the draft itself is discarded by
+  // `useDesignerDraft`'s own unmount teardown, so we must not double-discard.
+  const dragCleanupRef = useRef<(() => void) | null>(null);
+
+  useEffect(
+    () => () => {
+      dragCleanupRef.current?.();
+      dragCleanupRef.current = null;
+    },
+    [],
+  );
+
+  // Non-passive wheel re-dispatch so zoom keeps working while hovering handles.
+  useEffect(() => {
+    const container = containerRef.current;
+    const handleWheel = (e: WheelEvent) => {
+      e.preventDefault();
+      e.stopPropagation();
+      if (container) {
+        container.dispatchEvent(
+          new WheelEvent("wheel", {
+            bubbles: true,
+            cancelable: true,
+            clientX: e.clientX,
+            clientY: e.clientY,
+            ctrlKey: e.ctrlKey,
+            deltaMode: e.deltaMode,
+            deltaX: e.deltaX,
+            deltaY: e.deltaY,
+            deltaZ: e.deltaZ,
+            metaKey: e.metaKey,
+            shiftKey: e.shiftKey,
+          }),
+        );
+      }
+    };
+    const els = [startHandleRef.current, endHandleRef.current].filter(
+      (el): el is HTMLDivElement => el !== null,
+    );
+    for (const el of els) {
+      el.addEventListener("wheel", handleWheel, { passive: false });
+    }
+    return () => {
+      for (const el of els) {
+        el.removeEventListener("wheel", handleWheel);
+      }
+    };
+  }, [containerRef, overlay !== null]);
+
+  const onHandleMouseDown = useCallback(
+    (e: React.MouseEvent, endpoint: "start" | "end") => {
+      e.preventDefault();
+      e.stopPropagation();
+
+      const initial = readOverlayState(store.getState() as DesignerStoreState);
+      if (!initial) return;
+      const { target, box } = initial;
+      const other =
+        endpoint === "start"
+          ? { x: initial.gradient.endX, y: initial.gradient.endY }
+          : { x: initial.gradient.startX, y: initial.gradient.startY };
+
+      beginDraft();
+
+      const cleanup = () => {
+        document.removeEventListener("mousemove", onMouseMove);
+        document.removeEventListener("mouseup", onMouseUp);
+        document.removeEventListener("keydown", onKeyDown);
+        dragCleanupRef.current = null;
+      };
+
+      const onMouseMove = (moveEvent: MouseEvent) => {
+        const s = store.getState() as DesignerStoreState;
+        const { scale, x: panX, y: panY } = s.canvas;
+        const current = readOverlayState(s);
+        // Prefer the fresh box (mousedown snapshot may be stale after a resize);
+        // fall back to the snapshot when the node no longer resolves mid-drag.
+        const activeBox = current?.box ?? box;
+        // Screen → normalized node space. The overlay layer is absolute inset-0
+        // over the same container the pan/scale are expressed in, so the
+        // container offset cancels (mirrors selection-overlay's math). A zero
+        // (or non-finite) box dimension would yield Infinity/NaN, so skip the
+        // move entirely rather than write a non-finite coord into the document.
+        if (
+          !Number.isFinite(activeBox.width) ||
+          !Number.isFinite(activeBox.height) ||
+          activeBox.width === 0 ||
+          activeBox.height === 0
+        ) {
+          return;
+        }
+        let gx = ((moveEvent.clientX - panX) / scale - activeBox.x) / activeBox.width;
+        let gy = ((moveEvent.clientY - panY) / scale - activeBox.y) / activeBox.height;
+
+        // Shift constrains the line to 0/45/90° relative to the fixed endpoint.
+        if (moveEvent.shiftKey) {
+          const dx = gx - other.x;
+          const dy = gy - other.y;
+          const angle = Math.atan2(dy, dx);
+          const snapped = (Math.round(angle / (Math.PI / 4)) * Math.PI) / 4;
+          const len = Math.hypot(dx, dy);
+          gx = other.x + Math.cos(snapped) * len;
+          gy = other.y + Math.sin(snapped) * len;
+        }
+
+        // Final guard: division could still produce non-finite values if scale
+        // is 0 or an input was non-finite. Never dispatch a non-finite coord.
+        if (!Number.isFinite(gx) || !Number.isFinite(gy)) return;
+
+        const gradient = current?.gradient ?? initial.gradient;
+        const next: BackgroundGradient =
+          endpoint === "start"
+            ? { ...gradient, startX: gx, startY: gy }
+            : { ...gradient, endX: gx, endY: gy };
+        dispatch(updateFillStyle)({ nodes: [target], style: { backgroundGradient: next } });
+      };
+
+      const onMouseUp = () => {
+        // Commit the draft BEFORE any terminal action so the write lands on the
+        // undo stack draft-free (mirrors selection-overlay ordering).
+        commitDraft();
+        cleanup();
+      };
+
+      const onKeyDown = (keyEvent: KeyboardEvent) => {
+        if (keyEvent.key === "Escape") {
+          discardDraft();
+          cleanup();
+        }
+      };
+
+      document.addEventListener("mousemove", onMouseMove);
+      document.addEventListener("mouseup", onMouseUp);
+      document.addEventListener("keydown", onKeyDown);
+      dragCleanupRef.current = cleanup;
+    },
+    [store, dispatch, beginDraft, commitDraft, discardDraft],
+  );
+
+  if (!overlay) return null;
+
+  const { box, gradient, scale, panX, panY } = overlay;
+  const sx = (box.x + gradient.startX * box.width) * scale + panX;
+  const sy = (box.y + gradient.startY * box.height) * scale + panY;
+  const ex = (box.x + gradient.endX * box.width) * scale + panX;
+  const ey = (box.y + gradient.endY * box.height) * scale + panY;
+
+  return (
+    <div className="pointer-events-none absolute inset-0" style={{ zIndex: 12 }}>
+      <svg className="absolute inset-0 h-full w-full overflow-visible">
+        <title>Gradient controls</title>
+        <line
+          x1={sx}
+          y1={sy}
+          x2={ex}
+          y2={ey}
+          stroke="#ffffff"
+          strokeWidth={1.5}
+          strokeOpacity={0.9}
+        />
+        <line x1={sx} y1={sy} x2={ex} y2={ey} stroke="#005eff" strokeWidth={0.75} />
+        {/* Start handle: filled. End handle: outlined. */}
+        <circle cx={sx} cy={sy} r={5} fill="#ffffff" stroke="#005eff" strokeWidth={1.5} />
+        <circle cx={ex} cy={ey} r={5} fill="#005eff" stroke="#ffffff" strokeWidth={1.5} />
+      </svg>
+      <div
+        ref={startHandleRef}
+        onMouseDown={(e) => onHandleMouseDown(e, "start")}
+        style={{
+          cursor: "grab",
+          height: HANDLE_HIT_SIZE,
+          left: sx - HANDLE_HIT_SIZE / 2,
+          pointerEvents: "auto",
+          position: "absolute",
+          top: sy - HANDLE_HIT_SIZE / 2,
+          width: HANDLE_HIT_SIZE,
+        }}
+      />
+      <div
+        ref={endHandleRef}
+        onMouseDown={(e) => onHandleMouseDown(e, "end")}
+        style={{
+          cursor: "grab",
+          height: HANDLE_HIT_SIZE,
+          left: ex - HANDLE_HIT_SIZE / 2,
+          pointerEvents: "auto",
+          position: "absolute",
+          top: ey - HANDLE_HIT_SIZE / 2,
+          width: HANDLE_HIT_SIZE,
+        }}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/selection-overlay.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/selection-overlay.tsx
new file mode 100644
index 000000000..381df1776
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/selection-overlay.tsx
@@ -0,0 +1,677 @@
+"use client";
+
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { Application, Graphics } from "pixi.js";
+import { useCallback, useEffect, useRef, useState } from "react";
+
+import { CANVAS_DEFAULTS } from "../../constants";
+import {
+  cancelResize,
+  endResize,
+  startResize,
+  updateResize,
+} from "../../state/actions/resize-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import type { DesignerStoreState, ResizeHandle } from "../../state/designer-store-state";
+import type { BoundingBox } from "../../state/utils/bounding-box";
+import { calculateCombinedBoundingBox } from "../../state/utils/bounding-box";
+import { documentRootFromSnapshot } from "../../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+import { getChildrenIds } from "../../state/utils/selection-level";
+
+// ============================================================================
+// Types
+// ============================================================================
+
+interface SelectionBox {
+  id: string;
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+interface Point {
+  x: number;
+  y: number;
+}
+
+// =============================================================================
+// Transform Handle Constants
+// =============================================================================
+
+const HANDLE_SIZE = 8;
+const HANDLE_COLOR = CANVAS_DEFAULTS.PRIMARY_COLOR;
+const HANDLE_FILL = 0xff_ff_ff;
+const HIT_AREA_PADDING = 4;
+const EDGE_HIT_THICKNESS = 8;
+
+const HANDLE_CURSORS: Record<ResizeHandle, string> = {
+  e: "ew-resize",
+  n: "ns-resize",
+  ne: "nesw-resize",
+  nw: "nwse-resize",
+  s: "ns-resize",
+  se: "nwse-resize",
+  sw: "nesw-resize",
+  w: "ew-resize",
+};
+
+interface HandlePosition {
+  handle: ResizeHandle;
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+/**
+ * Normalize selection rectangle (handle negative dimensions from dragging in any direction).
+ */
+function normalizeRect(
+  start: Point,
+  end: Point,
+): { x: number; y: number; width: number; height: number } {
+  const x = Math.min(start.x, end.x);
+  const y = Math.min(start.y, end.y);
+  const width = Math.abs(end.x - start.x);
+  const height = Math.abs(end.y - start.y);
+  return { height, width, x, y };
+}
+
+/**
+ * Draw a dashed line using Pixi.js Graphics.
+ */
+function drawDashedLine(
+  graphics: Graphics,
+  x1: number,
+  y1: number,
+  x2: number,
+  y2: number,
+  color: number,
+  strokeWidth: number,
+  dashLength: number,
+  gapLength: number,
+): void {
+  const dx = x2 - x1;
+  const dy = y2 - y1;
+  const length = Math.sqrt(dx * dx + dy * dy);
+  if (length === 0) {
+    return;
+  }
+  const unitX = dx / length;
+  const unitY = dy / length;
+
+  let currentLength = 0;
+  let drawing = true;
+
+  while (currentLength < length) {
+    const segmentLength = drawing ? dashLength : gapLength;
+    const endLength = Math.min(currentLength + segmentLength, length);
+
+    if (drawing) {
+      const startX = x1 + unitX * currentLength;
+      const startY = y1 + unitY * currentLength;
+      const endX = x1 + unitX * endLength;
+      const endY = y1 + unitY * endLength;
+
+      graphics.moveTo(startX, startY);
+      graphics.lineTo(endX, endY);
+      graphics.stroke({ color, width: strokeWidth });
+    }
+
+    currentLength = endLength;
+    drawing = !drawing;
+  }
+}
+
+/**
+ * Draw a dashed rectangle using Pixi.js Graphics.
+ */
+function drawDashedRect(
+  graphics: Graphics,
+  x: number,
+  y: number,
+  width: number,
+  height: number,
+  color: number,
+  strokeWidth: number,
+  dashLength: number = 4,
+  gapLength: number = 4,
+): void {
+  // Draw each edge as dashed line
+  drawDashedLine(graphics, x, y, x + width, y, color, strokeWidth, dashLength, gapLength);
+  drawDashedLine(
+    graphics,
+    x + width,
+    y,
+    x + width,
+    y + height,
+    color,
+    strokeWidth,
+    dashLength,
+    gapLength,
+  );
+  drawDashedLine(
+    graphics,
+    x + width,
+    y + height,
+    x,
+    y + height,
+    color,
+    strokeWidth,
+    dashLength,
+    gapLength,
+  );
+  drawDashedLine(graphics, x, y + height, x, y, color, strokeWidth, dashLength, gapLength);
+}
+
+/**
+ * Draw transform handles (only corners) on the combined selection box.
+ */
+function drawTransformHandles(
+  graphics: Graphics,
+  screenX: number,
+  screenY: number,
+  screenW: number,
+  screenH: number,
+): void {
+  const half = HANDLE_SIZE / 2;
+
+  // Corner handles (squares) - 2D scaling
+  const corners = [
+    { x: screenX, y: screenY },
+    { x: screenX + screenW, y: screenY },
+    { x: screenX, y: screenY + screenH },
+    { x: screenX + screenW, y: screenY + screenH },
+  ];
+
+  for (const corner of corners) {
+    graphics.rect(corner.x - half, corner.y - half, HANDLE_SIZE, HANDLE_SIZE);
+    graphics.fill({ color: HANDLE_FILL });
+    graphics.stroke({ color: HANDLE_COLOR, width: 1.5 });
+  }
+}
+
+/**
+ * Calculate handle positions for DOM hit areas.
+ * Corner handles are small squares, edge handles are full-length thin strips.
+ */
+function calculateHandlePositions(
+  screenX: number,
+  screenY: number,
+  screenW: number,
+  screenH: number,
+): HandlePosition[] {
+  const cornerHitSize = HANDLE_SIZE + HIT_AREA_PADDING * 2;
+  const edgeInset = cornerHitSize / 2;
+
+  return [
+    // Corner handles (small squares)
+    {
+      handle: "nw",
+      height: cornerHitSize,
+      width: cornerHitSize,
+      x: screenX,
+      y: screenY,
+    },
+    {
+      handle: "ne",
+      height: cornerHitSize,
+      width: cornerHitSize,
+      x: screenX + screenW,
+      y: screenY,
+    },
+    {
+      handle: "sw",
+      height: cornerHitSize,
+      width: cornerHitSize,
+      x: screenX,
+      y: screenY + screenH,
+    },
+    {
+      handle: "se",
+      height: cornerHitSize,
+      width: cornerHitSize,
+      x: screenX + screenW,
+      y: screenY + screenH,
+    },
+    // Edge handles (full-length thin strips, inset to not overlap corners)
+    {
+      handle: "n",
+      height: EDGE_HIT_THICKNESS,
+      width: screenW - edgeInset * 2,
+      x: screenX + screenW / 2,
+      y: screenY,
+    },
+    {
+      handle: "s",
+      height: EDGE_HIT_THICKNESS,
+      width: screenW - edgeInset * 2,
+      x: screenX + screenW / 2,
+      y: screenY + screenH,
+    },
+    {
+      handle: "w",
+      height: screenH - edgeInset * 2,
+      width: EDGE_HIT_THICKNESS,
+      x: screenX,
+      y: screenY + screenH / 2,
+    },
+    {
+      handle: "e",
+      height: screenH - edgeInset * 2,
+      width: EDGE_HIT_THICKNESS,
+      x: screenX + screenW,
+      y: screenY + screenH / 2,
+    },
+  ];
+}
+
+// ============================================================================
+// Selection Overlay Component
+// ============================================================================
+
+interface SelectionOverlayProps {
+  containerRef: React.RefObject<HTMLDivElement | null>;
+}
+
+export function SelectionOverlay({ containerRef }: SelectionOverlayProps) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const canvasRef = useRef<HTMLDivElement>(null);
+  const appRef = useRef<Application | null>(null);
+  const graphicsRef = useRef<Graphics | null>(null);
+  // Track initialization state
+  const isInitializedRef = useRef(false);
+
+  // State for handle positions (for DOM hit areas)
+  const [handlePositions, setHandlePositions] = useState<HandlePosition[]>([]);
+  const [showHandles, setShowHandles] = useState(false);
+
+  // Draw function that reads directly from store - use ref to avoid stale closures
+  // biome-ignore lint/suspicious/noEmptyBlockStatements: Initial no-op function for ref
+  const drawRef = useRef<() => void>(() => {});
+
+  // Update drawRef to always have the latest implementation
+  drawRef.current = () => {
+    const graphics = graphicsRef.current;
+    if (!graphics) {
+      return;
+    }
+    if (!isInitializedRef.current) {
+      return;
+    }
+
+    graphics.clear();
+
+    // Draw selections
+    const state = store.getState() as DesignerStoreState;
+    const selectedNodeIds = selectedNodeIdsFromPresence(state.mimic.presence?.self);
+    const previewSelectedNodeIds = state.dragSelect.previewSelectedNodeIds ?? [];
+    const { canvas, highlightedNodeId } = state;
+    const { boundingBoxes } = canvas;
+    const { x: panX, y: panY, scale } = canvas;
+
+    // Build selection boxes from both confirmed and preview selections
+    // Use a Set to avoid duplicates
+    const allSelectedIds = new Set([...selectedNodeIds, ...previewSelectedNodeIds]);
+    const boxes: SelectionBox[] = [];
+
+    for (const nodeId of allSelectedIds) {
+      const box = boundingBoxes[nodeId];
+      if (box) {
+        boxes.push({ id: nodeId, ...box });
+      }
+    }
+
+    // Selection style - constant screen-space thickness
+    const strokeWidth = 1.5;
+    const strokeColor = CANVAS_DEFAULTS.PRIMARY_COLOR;
+
+    for (const box of boxes) {
+      // Convert canvas coordinates to screen coordinates
+      const screenX = box.x * scale + panX;
+      const screenY = box.y * scale + panY;
+      const screenWidth = box.width * scale;
+      const screenHeight = box.height * scale;
+
+      graphics.rect(screenX, screenY, screenWidth, screenHeight);
+      graphics.stroke({ color: strokeColor, width: strokeWidth });
+    }
+
+    // Draw drag selection rectangle if active
+    const { dragSelect, textEditingNodeId } = state;
+    const isTextEditingMode = textEditingNodeId !== null;
+
+    // Draw node highlight (disabled during drag selection and if node is already selected)
+    const isHighlightedNodeSelected = allSelectedIds.has(highlightedNodeId ?? "");
+    if (highlightedNodeId && !dragSelect.isActive && !isHighlightedNodeSelected) {
+      const box = boundingBoxes[highlightedNodeId] ?? null;
+      if (box) {
+        const highlightStrokeWidth = 2;
+        const screenX = box.x * scale + panX;
+        const screenY = box.y * scale + panY;
+        const screenWidth = box.width * scale;
+        const screenHeight = box.height * scale;
+
+        if (isTextEditingMode) {
+          // Dotted rectangle during text editing mode
+          drawDashedRect(
+            graphics,
+            screenX,
+            screenY,
+            screenWidth,
+            screenHeight,
+            strokeColor,
+            highlightStrokeWidth,
+          );
+        } else {
+          // Solid rectangle normally
+          graphics.rect(screenX, screenY, screenWidth, screenHeight);
+          graphics.stroke({ color: strokeColor, width: highlightStrokeWidth });
+        }
+      }
+
+      // Draw dotted rectangles around direct children of the highlighted node
+      const snapshot = documentRootFromSnapshot(state.mimic.snapshot);
+      const childrenIds = getChildrenIds(snapshot, highlightedNodeId);
+      const childStrokeWidth = 1.5;
+
+      for (const childId of childrenIds) {
+        const childBox = boundingBoxes[childId];
+        if (childBox) {
+          const childScreenX = childBox.x * scale + panX;
+          const childScreenY = childBox.y * scale + panY;
+          const childScreenWidth = childBox.width * scale;
+          const childScreenHeight = childBox.height * scale;
+
+          drawDashedRect(
+            graphics,
+            childScreenX,
+            childScreenY,
+            childScreenWidth,
+            childScreenHeight,
+            strokeColor,
+            childStrokeWidth,
+            4,
+            4,
+          );
+        }
+      }
+    }
+    if (dragSelect.isActive && dragSelect.startPoint && dragSelect.currentPoint) {
+      const selectionRect = normalizeRect(dragSelect.startPoint, dragSelect.currentPoint);
+
+      // Convert canvas coordinates to screen coordinates
+      const screenX = selectionRect.x * scale + panX;
+      const screenY = selectionRect.y * scale + panY;
+      const screenWidth = selectionRect.width * scale;
+      const screenHeight = selectionRect.height * scale;
+
+      // Draw selection rectangle with semi-transparent fill and border
+      graphics.rect(screenX, screenY, screenWidth, screenHeight);
+      graphics.fill({ alpha: 0.1, color: strokeColor });
+      graphics.stroke({ alpha: 0.8, color: strokeColor, width: 1 });
+    }
+
+    // Draw combined selection rectangle when multiple nodes are selected
+    if (selectedNodeIds.length > 1) {
+      const combinedBounds = calculateCombinedBoundingBox([...selectedNodeIds], boundingBoxes);
+      if (combinedBounds) {
+        const screenX = combinedBounds.x * scale + panX;
+        const screenY = combinedBounds.y * scale + panY;
+        const screenWidth = combinedBounds.width * scale;
+        const screenHeight = combinedBounds.height * scale;
+
+        graphics.rect(screenX, screenY, screenWidth, screenHeight);
+        graphics.stroke({ color: strokeColor, width: strokeWidth });
+      }
+    }
+
+    // Draw transform handles if there are selected nodes and not in text editing mode
+    // Show handles even during resize (visual feedback), but hide hit areas during resize
+    const shouldDrawHandles =
+      selectedNodeIds.length > 0 && !isTextEditingMode && !dragSelect.isActive;
+
+    // Only show hit areas when not actively resizing
+    const shouldShowHitAreas = shouldDrawHandles && !state.resize.isActive;
+
+    if (shouldDrawHandles) {
+      const combinedBounds = calculateCombinedBoundingBox([...selectedNodeIds], boundingBoxes);
+
+      if (combinedBounds) {
+        const handleScreenX = combinedBounds.x * scale + panX;
+        const handleScreenY = combinedBounds.y * scale + panY;
+        const handleScreenW = combinedBounds.width * scale;
+        const handleScreenH = combinedBounds.height * scale;
+
+        drawTransformHandles(graphics, handleScreenX, handleScreenY, handleScreenW, handleScreenH);
+
+        if (shouldShowHitAreas) {
+          // Update handle positions for DOM hit areas
+          const positions = calculateHandlePositions(
+            handleScreenX,
+            handleScreenY,
+            handleScreenW,
+            handleScreenH,
+          );
+          setHandlePositions(positions);
+          setShowHandles(true);
+        } else {
+          setShowHandles(false);
+        }
+      } else {
+        setShowHandles(false);
+      }
+    } else {
+      setShowHandles(false);
+    }
+  };
+
+  // Stable draw function that delegates to ref
+  const draw = useCallback(() => {
+    drawRef.current();
+  }, []);
+
+  // Initialize Pixi Application - only depends on containerRef
+  useEffect(() => {
+    const container = canvasRef.current;
+    const resizeTarget = containerRef.current;
+    if (!container) {
+      return;
+    }
+
+    const app = new Application();
+    let mounted = true;
+
+    const initApp = async () => {
+      await app.init({
+        antialias: true,
+        autoDensity: true,
+        backgroundAlpha: 0,
+        resizeTo: resizeTarget ?? undefined,
+        resolution: typeof window !== "undefined" ? window.devicePixelRatio : 1,
+      });
+
+      // Check if component was unmounted during async init
+      if (!mounted) {
+        app.destroy(true, { children: true });
+        return;
+      }
+
+      // Add canvas to DOM
+      container.append(app.canvas);
+
+      // Create graphics for drawing selections
+      const graphics = new Graphics();
+      app.stage.addChild(graphics);
+
+      appRef.current = app;
+      graphicsRef.current = graphics;
+      isInitializedRef.current = true;
+
+      // Initial draw after initialization
+      draw();
+    };
+
+    initApp();
+
+    return () => {
+      mounted = false;
+      isInitializedRef.current = false;
+      // Cleanup
+      if (appRef.current) {
+        appRef.current.destroy(true, { children: true });
+        appRef.current = null;
+        graphicsRef.current = null;
+      }
+    };
+  }, [containerRef, draw]);
+
+  // Subscribe to state changes that affect selection rendering
+  useEffect(() => {
+    // Subscribe to all state changes - the draw function will read what it needs
+    const unsubscribe = store.subscribe(() => draw());
+
+    return () => {
+      unsubscribe();
+    };
+  }, [store, draw]);
+
+  // Refs for handle elements to attach non-passive wheel listeners
+  const handleRefs = useRef<Map<ResizeHandle, HTMLDivElement>>(new Map());
+
+  // Set up non-passive wheel listeners on handle elements
+  useEffect(() => {
+    const container = containerRef.current;
+
+    const handleWheel = (e: WheelEvent) => {
+      // Prevent browser zoom
+      e.preventDefault();
+      e.stopPropagation();
+
+      // Re-dispatch wheel event to the canvas container so zoom gestures work
+      if (container) {
+        const wheelEvent = new WheelEvent("wheel", {
+          bubbles: true,
+          cancelable: true,
+          clientX: e.clientX,
+          clientY: e.clientY,
+          ctrlKey: e.ctrlKey,
+          deltaMode: e.deltaMode,
+          deltaX: e.deltaX,
+          deltaY: e.deltaY,
+          deltaZ: e.deltaZ,
+          metaKey: e.metaKey,
+          shiftKey: e.shiftKey,
+        });
+        container.dispatchEvent(wheelEvent);
+      }
+    };
+
+    // Add non-passive wheel listeners to all handle elements
+    const refs = handleRefs.current;
+    for (const el of refs.values()) {
+      el.addEventListener("wheel", handleWheel, { passive: false });
+    }
+
+    return () => {
+      for (const el of refs.values()) {
+        el.removeEventListener("wheel", handleWheel);
+      }
+    };
+  }, [containerRef, showHandles, handlePositions]);
+
+  // Draft management for optimistic resize preview
+  const { begin: beginDraft, commit: commitDraft, discard: discardDraft } = useDesignerDraft(store);
+
+  // Handle mouse down on a resize handle
+  const onHandleMouseDown = useCallback(
+    (e: React.MouseEvent, handle: ResizeHandle) => {
+      e.preventDefault();
+      e.stopPropagation();
+
+      // Begin draft for optimistic preview
+      beginDraft();
+
+      dispatch(startResize)({
+        handle,
+        screenPoint: { x: e.clientX, y: e.clientY },
+      });
+
+      const cleanup = () => {
+        document.removeEventListener("mousemove", onMouseMove);
+        document.removeEventListener("mouseup", onMouseUp);
+        document.removeEventListener("keydown", onKeyDown);
+      };
+
+      const onMouseMove = (moveEvent: MouseEvent) => {
+        dispatch(updateResize)({
+          maintainAspectRatio: moveEvent.shiftKey,
+          screenPoint: { x: moveEvent.clientX, y: moveEvent.clientY },
+        });
+      };
+
+      const onMouseUp = () => {
+        // Commit the draft BEFORE dispatching endResize: while a draft is
+        // active the commander skips undo recording (hasDraft guard), and
+        // endResize writes its normalization through the live document
+        // transaction anyway, so it must run draft-free to land on the undo
+        // stack.
+        commitDraft();
+        dispatch(endResize)({});
+        cleanup();
+      };
+
+      const onKeyDown = (keyEvent: KeyboardEvent) => {
+        if (keyEvent.key === "Escape") {
+          dispatch(cancelResize)({});
+          discardDraft();
+          cleanup();
+        }
+      };
+
+      document.addEventListener("mousemove", onMouseMove);
+      document.addEventListener("mouseup", onMouseUp);
+      document.addEventListener("keydown", onKeyDown);
+    },
+    [dispatch, beginDraft, commitDraft, discardDraft],
+  );
+
+  return (
+    <>
+      <div
+        className="pointer-events-none absolute inset-0"
+        ref={canvasRef}
+        style={{ zIndex: 10 }}
+      />
+      {showHandles && (
+        <div className="pointer-events-none absolute inset-0" style={{ zIndex: 11 }}>
+          {handlePositions.map((pos) => (
+            <div
+              key={pos.handle}
+              ref={(el) => {
+                if (el) {
+                  handleRefs.current.set(pos.handle, el);
+                } else {
+                  handleRefs.current.delete(pos.handle);
+                }
+              }}
+              style={{
+                cursor: HANDLE_CURSORS[pos.handle],
+                height: pos.height,
+                left: pos.x - pos.width / 2,
+                pointerEvents: "auto",
+                position: "absolute",
+                top: pos.y - pos.height / 2,
+                width: pos.width,
+              }}
+              onMouseDown={(e) => onHandleMouseDown(e, pos.handle)}
+            />
+          ))}
+        </div>
+      )}
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.test.ts b/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.test.ts
new file mode 100644
index 000000000..08e781c16
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.test.ts
@@ -0,0 +1,115 @@
+import { renderPaywallToHtml } from "@voidhash/paywall-renderer-preact";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  applyStyleUpdate,
+  type StyleTarget,
+} from "../state/actions/features/style-action-helpers";
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../state/testing/offline-document";
+import { selectDocumentRoot, selectRenderRoot } from "../state/utils/document-root";
+
+// The preview iframe renders `renderPaywallToHtml(<snapshot>, ...)`. These tests
+// pin the snapshot source the preview must read so a gradient edit reaches the
+// phone frame — the staleness bug was rendering a frozen `selectDocumentRoot`
+// capture instead of the live, draft-aware `selectRenderRoot` the canvas uses.
+
+const GRADIENT = {
+  kind: "linear" as const,
+  startX: 0,
+  startY: 0,
+  endX: 1,
+  endY: 1,
+  stops: [
+    { color: "rgba(255, 0, 0, 1)", position: 0 },
+    { color: "rgba(0, 0, 255, 1)", position: 1 },
+  ],
+};
+
+function makeDesignerDoc() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  let viewId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    viewId = screen.children.insertLast({ type: "view", name: "Card" }).id;
+  });
+  return { doc, viewId };
+}
+
+function mimicOf(doc: OfflineDesignerDocument) {
+  return { document: doc, snapshot: doc.getSnapshot() } as never;
+}
+
+/** Store-state shape the preview reads its render root from. */
+function stateOf(doc: OfflineDesignerDocument) {
+  return { mimic: { snapshot: doc.getSnapshot() } } as never;
+}
+
+function paintGradient(doc: OfflineDesignerDocument, viewId: string): void {
+  const nodes: StyleTarget[] = [{ nodeId: viewId, nodeType: "view" }];
+  applyStyleUpdate(
+    mimicOf(doc),
+    nodes,
+    { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: GRADIENT },
+    {},
+    ((fn: never) => doc.transaction(fn)) as never,
+  );
+}
+
+describe("preview snapshot reflects gradient edits", () => {
+  test("committed gradient reaches renderPaywallToHtml via the preview's render root", () => {
+    const { doc, viewId } = makeDesignerDoc();
+
+    // A snapshot captured once on preview entry (the old one-shot behaviour).
+    const frozenCapture = selectDocumentRoot(stateOf(doc));
+
+    paintGradient(doc, viewId);
+
+    // Fail-before: the frozen capture never sees the later edit, so the phone
+    // frame would keep rendering the pre-edit solid background.
+    const frozen = renderPaywallToHtml(frozenCapture, { hydrate: true }).html;
+    expect(frozen).not.toContain('"backgroundType":"gradient"');
+
+    // Pass-after: the preview reads the live render root each render, so the
+    // committed gradient edit now appears without re-entering preview mode.
+    const live = renderPaywallToHtml(selectRenderRoot(stateOf(doc)), { hydrate: true }).html;
+    expect(live).toContain("data:image/svg+xml,");
+    expect(live).toContain('"backgroundType":"gradient"');
+  });
+
+  test("selectRenderRoot surfaces an in-progress draft gradient that selectDocumentRoot misses", () => {
+    const { doc, viewId } = makeDesignerDoc();
+
+    // A style-panel drag stages its writes in a mimic draft; the committed
+    // document (and therefore selectDocumentRoot) stays on the pre-edit value.
+    const draft = doc.createDraft();
+    const nodes: StyleTarget[] = [{ nodeId: viewId, nodeType: "view" }];
+    applyStyleUpdate(
+      { document: doc, snapshot: draft.getSnapshot() } as never,
+      nodes,
+      { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: GRADIENT },
+      {},
+      ((fn: never) => draft.transaction(fn)) as never,
+    );
+
+    const state = {
+      mimic: { snapshot: doc.getSnapshot() },
+      _commander: { activeDraft: draft },
+    } as never;
+
+    // The old preview path (selectDocumentRoot, committed doc) would render the
+    // pre-edit solid background; the canvas/preview render root shows the draft.
+    const committed = renderPaywallToHtml(selectDocumentRoot(state), { hydrate: true }).html;
+    expect(committed).not.toContain('"backgroundType":"gradient"');
+
+    const rendered = renderPaywallToHtml(selectRenderRoot(state), { hydrate: true }).html;
+    expect(rendered).toContain('"backgroundType":"gradient"');
+
+    draft.discard();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx
new file mode 100644
index 000000000..966171a22
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx
@@ -0,0 +1,228 @@
+"use client";
+
+import { useQueries } from "@tanstack/react-query";
+import {
+  renderPaywallToHtml,
+  type ComponentArtifacts,
+} from "@voidhash/paywall-renderer-preact";
+import type { PreviewTree, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useCallback, useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import {
+  componentPreviewTreeOptions,
+  type ComponentPreviewTreeOptions,
+} from "../components/component-preview/use-preview-tree";
+import { CANVAS_DEFAULTS } from "../constants";
+import { PANEL_DIMENSIONS } from "../panels/constants";
+import { usePaywallDesignerStore } from "../state/designer-store";
+import type {
+  CodeComponentCompiled,
+  ComponentCatalogByContentHash,
+} from "../state/designer-store-state";
+import { codeComponentDefinitions, selectCodeComponentNodes } from "../state/utils/code-components";
+import { selectRenderRoot } from "../state/utils/document-root";
+
+/**
+ * Persisted-state fallback chain for preview mode (spec §8): the document's
+ * `previewState` → `"default"` → first catalog state. Local editor overrides
+ * are intentionally ignored — the preview reflects the document.
+ */
+function resolvePersistedPreviewState(
+  previewStates: readonly string[],
+  previewState: string,
+): string | undefined {
+  for (const candidate of [previewState, "default"]) {
+    if (previewStates.includes(candidate)) {
+      return candidate;
+    }
+  }
+  return previewStates[0];
+}
+
+/**
+ * Walks the preview snapshot for component nodes and resolves one preview-tree
+ * fetch request per (contentHash, state) against the catalog mirror. Nodes
+ * whose contentHash is not mirrored are skipped — they render the renderer's
+ * built-in placeholder.
+ */
+function collectComponentTreeRequests(
+  snapshot: SnapshotNode,
+  byContentHash: ComponentCatalogByContentHash,
+): ComponentPreviewTreeOptions[] {
+  const requests: ComponentPreviewTreeOptions[] = [];
+  const seen = new Set<string>();
+
+  const visit = (node: SnapshotNode): void => {
+    if (node.type === "component") {
+      const entry = byContentHash[node.data.contentHash];
+      if (entry) {
+        const state = resolvePersistedPreviewState(entry.previewStates, node.data.previewState);
+        const key = state === undefined ? undefined : `${node.data.contentHash}/${state}`;
+        if (key !== undefined && state !== undefined && !seen.has(key)) {
+          seen.add(key);
+          requests.push({
+            artifactBaseUrl: entry.artifactBaseUrl,
+            contentHash: node.data.contentHash,
+            state,
+          });
+        }
+      }
+    }
+    for (const child of node.children) {
+      visit(child);
+    }
+  };
+
+  visit(snapshot);
+  return requests;
+}
+
+/**
+ * Walks the preview snapshot for local (in-document) code-component instances
+ * and maps each referenced `componentPath` to its in-browser compiled preview
+ * trees, resolving path → definition id → compiled artifact via `idByPath`.
+ * Instances whose definition file is missing or has not compiled to a ready
+ * artifact are skipped — the renderer shows its built-in placeholder for those.
+ * Returns undefined when no local component resolves, keeping the embedded
+ * hydration payload minimal.
+ */
+function collectLocalComponentTrees(
+  snapshot: SnapshotNode,
+  compiled: Record<string, CodeComponentCompiled>,
+  idByPath: ReadonlyMap<string, string>,
+): ComponentArtifacts["localTrees"] {
+  const localTrees: Record<string, Record<string, PreviewTree>> = {};
+
+  const visit = (node: SnapshotNode): void => {
+    if (
+      node.type === "component" &&
+      node.data.componentSource === "local" &&
+      node.data.componentPath !== "" &&
+      !(node.data.componentPath in localTrees)
+    ) {
+      const definitionId = idByPath.get(node.data.componentPath);
+      const artifact = definitionId !== undefined ? compiled[definitionId]?.artifact : undefined;
+      if (artifact) {
+        localTrees[node.data.componentPath] = artifact.previewTrees;
+      }
+    }
+    for (const child of node.children) {
+      visit(child);
+    }
+  };
+
+  visit(snapshot);
+  return Object.keys(localTrees).length === 0 ? undefined : localTrees;
+}
+
+export function PreviewCanvas() {
+  const store = usePaywallDesignerStore();
+  // Derive the preview snapshot reactively from the same draft-aware render root
+  // the design canvas uses (`selectRenderRoot`), so the preview reflects the
+  // current document live — committed edits (and in-progress drafts) reach the
+  // iframe without a manual refresh. Reading a snapshot captured once on preview
+  // entry left the phone frame frozen on the pre-edit document (e.g. a solid
+  // background after the user switched it to a gradient).
+  const previewSnapshot = useStore(store, selectRenderRoot);
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const previewScale = useStore(store, (state) => state.previewScale);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const compiledCodeComponents = useStore(store, (state) => state.codeComponents.compiled);
+  const codeNodes = useStore(store, selectCodeComponentNodes);
+
+  const treeRequests = useMemo(
+    () => collectComponentTreeRequests(previewSnapshot, byContentHash),
+    [previewSnapshot, byContentHash],
+  );
+
+  // Trees still loading or failed are simply absent from the artifacts — the
+  // renderer shows a labeled placeholder for those nodes instead of throwing.
+  const combineLoadedTrees = useCallback(
+    (results: Array<{ data: PreviewTree | undefined }>): ComponentArtifacts => {
+      const trees: ComponentArtifacts["trees"] = {};
+      results.forEach((result, index) => {
+        const request = treeRequests[index];
+        if (!request || result.data === undefined) {
+          return;
+        }
+        (trees[request.contentHash] ??= {})[request.state] = result.data;
+      });
+      return { trees };
+    },
+    [treeRequests],
+  );
+
+  const catalogArtifacts = useQueries({
+    combine: combineLoadedTrees,
+    queries: treeRequests.map((request) => componentPreviewTreeOptions(request)),
+  });
+
+  // Local code components are not in the catalog and pin a sentinel
+  // `contentHash: ""`, so their in-browser compiled trees are threaded through
+  // `localTrees` (keyed by `componentPath`) alongside the catalog trees.
+  const idByPath = useMemo(() => {
+    const map = new Map<string, string>();
+    for (const definition of codeComponentDefinitions(codeNodes)) {
+      map.set(definition.path, definition.id);
+    }
+    return map;
+  }, [codeNodes]);
+  const localTrees = useMemo(
+    () => collectLocalComponentTrees(previewSnapshot, compiledCodeComponents, idByPath),
+    [previewSnapshot, compiledCodeComponents, idByPath],
+  );
+
+  const componentArtifacts = useMemo<ComponentArtifacts>(
+    () => ({ trees: catalogArtifacts.trees, localTrees }),
+    [catalogArtifacts, localTrees],
+  );
+
+  const html = useMemo(
+    () =>
+      renderPaywallToHtml(previewSnapshot, {
+        componentArtifacts,
+        hydrate: true,
+        locale: activeLocale ?? undefined,
+      }).html,
+    [previewSnapshot, componentArtifacts, activeLocale],
+  );
+
+  return (
+    <div
+      className="absolute inset-0 flex items-center justify-center overflow-hidden"
+      style={{
+        backgroundColor: CANVAS_DEFAULTS.BACKGROUND_COLOR,
+        backgroundImage: "radial-gradient(circle, rgba(255,255,255,0.08) 1px, transparent 1px)",
+        backgroundSize: "16px 16px",
+        top: PANEL_DIMENSIONS.TOP_HEIGHT,
+      }}
+    >
+      {/* Phone mockup container - maintains aspect ratio and scales to fit */}
+      <div className="relative flex h-full w-full items-center justify-center p-8">
+        <div
+          className="relative h-full max-h-[812px] w-full max-w-[375px]"
+          style={{
+            aspectRatio: "375 / 812",
+            transform: `scale(${previewScale})`,
+            transformOrigin: "center center",
+          }}
+        >
+          {/* Phone frame */}
+          <div className="h-full w-full overflow-hidden rounded-[40px] border-8 border-zinc-800 bg-zinc-800 shadow-2xl">
+            {/* sandbox without allow-same-origin keeps the srcdoc document on an
+                opaque origin: the hydration runtime only reads its embedded JSON
+                and posts paywall:* messages to the parent, both of which
+                allow-scripts permits. */}
+            <iframe
+              className="h-full w-full bg-white"
+              sandbox="allow-scripts"
+              srcDoc={html}
+              title="Paywall Preview"
+            />
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/viewport.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/viewport.tsx
new file mode 100644
index 000000000..80bd12987
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/viewport.tsx
@@ -0,0 +1,530 @@
+"use client";
+
+import {
+  createContext,
+  type PropsWithChildren,
+  useCallback,
+  useContext,
+  useEffect,
+  useLayoutEffect,
+  useRef,
+} from "react";
+
+import { CANVAS_DEFAULTS, INIT_SCREEN_DATA } from "../constants";
+
+const INTERACTION_END_DEBOUNCE_MS = 120;
+// Base snap step at DPR=1; actual step is derived by dividing by current DPR.
+const TRANSFORM_SNAP_STEP = 1 / 512;
+
+// ============================================================================
+// Types
+// ============================================================================
+
+export interface ViewportTransform {
+  x: number;
+  y: number;
+  scale: number;
+}
+
+interface ViewportContextValue {
+  /**
+   * Convert a point from screen/viewport coordinates to canvas coordinates
+   */
+  screenToCanvas: (screenX: number, screenY: number) => { x: number; y: number };
+  /**
+   * Convert a point from canvas coordinates to screen/viewport coordinates
+   */
+  canvasToScreen: (canvasX: number, canvasY: number) => { x: number; y: number };
+  /**
+   * Get the current viewport transform (for reading purposes)
+   */
+  getTransform: () => ViewportTransform;
+}
+
+const ViewportContext = createContext<ViewportContextValue | null>(null);
+
+// ============================================================================
+// Viewport Component
+// ============================================================================
+
+export type ViewportProps = PropsWithChildren<{
+  onTransformChange?: (transform: ViewportTransform) => void;
+}>;
+
+type ZoomRenderMode = "interactive-transform" | "committed-zoom" | "committed-transform";
+
+export function Viewport({ children, onTransformChange }: ViewportProps) {
+  const containerRef = useRef<HTMLDivElement>(null);
+  const panRef = useRef<HTMLDivElement>(null);
+  const zoomRef = useRef<HTMLDivElement>(null);
+
+  // Store transform in ref to avoid re-renders during pan/zoom
+  const transformRef = useRef<ViewportTransform>({
+    scale: 0.8,
+    x: 0,
+    y: 0, // Start at 80% zoom (matching pixi-viewport's zoomPercent(-0.2))
+  });
+
+  const supportsCssZoomRef = useRef<boolean>(
+    typeof CSS !== "undefined" && typeof CSS.supports === "function" && CSS.supports("zoom", "1.1"),
+  );
+  const isInteractingRef = useRef(false);
+  const interactionEndTimeoutRef = useRef<number | null>(null);
+  const renderModeRef = useRef<ZoomRenderMode>("interactive-transform");
+  const committedTransformScaleRef = useRef<number | null>(null);
+
+  // Touch tracking for pinch gestures
+  const touchStateRef = useRef<{
+    initialDistance: number;
+    initialScale: number;
+    initialMidpoint: { x: number; y: number };
+    lastMidpoint: { x: number; y: number };
+  } | null>(null);
+
+  const getTransformSnapStep = useCallback(() => {
+    const dpr = Math.max(window.devicePixelRatio || 1, 1);
+    return TRANSFORM_SNAP_STEP / dpr;
+  }, []);
+
+  const snapScale = useCallback(
+    (scale: number) => {
+      const step = getTransformSnapStep();
+      const snappedScale = Math.round(scale / step) * step;
+      return Math.min(Math.max(snappedScale, CANVAS_DEFAULTS.MIN_ZOOM), CANVAS_DEFAULTS.MAX_ZOOM);
+    },
+    [getTransformSnapStep],
+  );
+
+  const clearInteractionEndTimeout = useCallback(() => {
+    if (interactionEndTimeoutRef.current === null) {
+      return;
+    }
+
+    window.clearTimeout(interactionEndTimeoutRef.current);
+    interactionEndTimeoutRef.current = null;
+  }, []);
+
+  // Apply transform to DOM layers
+  const applyTransform = useCallback(() => {
+    const panLayer = panRef.current;
+    const zoomLayer = zoomRef.current;
+    if (!panLayer || !zoomLayer) {
+      return;
+    }
+
+    const { x, y, scale } = transformRef.current;
+    panLayer.style.transform = `translate3d(${x}px, ${y}px, 0)`;
+
+    if (renderModeRef.current === "committed-zoom") {
+      zoomLayer.style.setProperty("zoom", `${scale}`);
+      zoomLayer.style.transform = "matrix(1, 0, 0, 1, 0, 0)";
+    } else {
+      zoomLayer.style.removeProperty("zoom");
+      const visualScale =
+        renderModeRef.current === "committed-transform"
+          ? (committedTransformScaleRef.current ?? scale)
+          : scale;
+      zoomLayer.style.transform = `matrix(${visualScale}, 0, 0, ${visualScale}, 0, 0)`;
+    }
+
+    onTransformChange?.({ scale: transformRef.current.scale, x, y });
+  }, [onTransformChange]);
+
+  const commitSharpRender = useCallback(() => {
+    if (supportsCssZoomRef.current) {
+      renderModeRef.current = "committed-zoom";
+      committedTransformScaleRef.current = null;
+      applyTransform();
+      return;
+    }
+
+    const snappedScale = snapScale(transformRef.current.scale);
+    transformRef.current.scale = snappedScale;
+    committedTransformScaleRef.current = snappedScale;
+    renderModeRef.current = "committed-transform";
+    applyTransform();
+  }, [applyTransform, snapScale]);
+
+  const beginInteraction = useCallback(() => {
+    clearInteractionEndTimeout();
+    if (isInteractingRef.current) {
+      return;
+    }
+    isInteractingRef.current = true;
+
+    const panLayer = panRef.current;
+    const zoomLayer = zoomRef.current;
+    if (panLayer) {
+      panLayer.style.willChange = "transform";
+    }
+    if (zoomLayer) {
+      zoomLayer.style.willChange = "transform";
+    }
+
+    if (renderModeRef.current !== "interactive-transform") {
+      renderModeRef.current = "interactive-transform";
+      committedTransformScaleRef.current = null;
+      applyTransform();
+    }
+  }, [applyTransform, clearInteractionEndTimeout]);
+
+  const endInteraction = useCallback(() => {
+    clearInteractionEndTimeout();
+    if (!isInteractingRef.current) {
+      return;
+    }
+    isInteractingRef.current = false;
+
+    const panLayer = panRef.current;
+    const zoomLayer = zoomRef.current;
+    if (panLayer) {
+      panLayer.style.willChange = "";
+    }
+    if (zoomLayer) {
+      zoomLayer.style.willChange = "";
+    }
+
+    commitSharpRender();
+  }, [clearInteractionEndTimeout, commitSharpRender]);
+
+  const scheduleInteractionEnd = useCallback(() => {
+    clearInteractionEndTimeout();
+    interactionEndTimeoutRef.current = window.setTimeout(() => {
+      endInteraction();
+    }, INTERACTION_END_DEBOUNCE_MS);
+  }, [clearInteractionEndTimeout, endInteraction]);
+
+  // Calculate initial position to center the screen
+  const initializePosition = useCallback(() => {
+    const container = containerRef.current;
+    if (!container) {
+      return;
+    }
+
+    const { scale } = transformRef.current;
+    const containerRect = container.getBoundingClientRect();
+
+    // Center the initial screen in the viewport
+    const scaledScreenWidth = INIT_SCREEN_DATA.width * scale;
+    const scaledScreenHeight = INIT_SCREEN_DATA.height * scale;
+
+    transformRef.current.x =
+      (containerRect.width - scaledScreenWidth) / 2 - INIT_SCREEN_DATA.x * scale;
+    transformRef.current.y =
+      (containerRect.height - scaledScreenHeight) / 2 - INIT_SCREEN_DATA.y * scale;
+
+    applyTransform();
+    commitSharpRender();
+  }, [applyTransform, commitSharpRender]);
+
+  // Initialize position on mount
+  useLayoutEffect(() => {
+    initializePosition();
+  }, [initializePosition]);
+
+  // Zoom towards a specific point
+  const zoomAtPoint = useCallback(
+    (newScale: number, pointX: number, pointY: number) => {
+      const { x, y, scale } = transformRef.current;
+
+      // Clamp scale to min/max
+      const clampedScale = Math.min(
+        Math.max(newScale, CANVAS_DEFAULTS.MIN_ZOOM),
+        CANVAS_DEFAULTS.MAX_ZOOM,
+      );
+
+      if (clampedScale === scale) {
+        return;
+      }
+
+      // Zoom towards the point: adjust position so the point stays in the same place
+      const scaleRatio = clampedScale / scale;
+      transformRef.current = {
+        scale: clampedScale,
+        x: pointX - (pointX - x) * scaleRatio,
+        y: pointY - (pointY - y) * scaleRatio,
+      };
+
+      applyTransform();
+    },
+    [applyTransform],
+  );
+
+  // Pan by delta
+  const pan = useCallback(
+    (deltaX: number, deltaY: number) => {
+      transformRef.current.x -= deltaX;
+      transformRef.current.y -= deltaY;
+      applyTransform();
+    },
+    [applyTransform],
+  );
+
+  // Wheel handler for trackpad pan and pinch-to-zoom
+  useEffect(() => {
+    const container = containerRef.current;
+    if (!container) {
+      return;
+    }
+
+    const handleWheel = (e: WheelEvent) => {
+      e.preventDefault();
+      beginInteraction();
+
+      // Trackpad pinch gesture sets ctrlKey to true
+      if (e.ctrlKey) {
+        // Pinch-to-zoom
+        const rect = container.getBoundingClientRect();
+        const mouseX = e.clientX - rect.left;
+        const mouseY = e.clientY - rect.top;
+
+        // deltaY is negative when zooming in (pinch out), positive when zooming out
+        // Apply smooth zoom factor
+        const zoomFactor = 1 - e.deltaY * 0.01;
+        const newScale = transformRef.current.scale * zoomFactor;
+
+        zoomAtPoint(newScale, mouseX, mouseY);
+      } else {
+        // Trackpad pan
+        pan(e.deltaX, e.deltaY);
+      }
+
+      scheduleInteractionEnd();
+    };
+
+    container.addEventListener("wheel", handleWheel, { passive: false });
+
+    return () => {
+      container.removeEventListener("wheel", handleWheel);
+    };
+  }, [beginInteraction, pan, scheduleInteractionEnd, zoomAtPoint]);
+
+  // Touch handlers for pinch-to-zoom and two-finger pan
+  useEffect(() => {
+    const container = containerRef.current;
+    if (!container) {
+      return;
+    }
+
+    const getDistance = (touch1: Touch, touch2: Touch) => {
+      const dx = touch1.clientX - touch2.clientX;
+      const dy = touch1.clientY - touch2.clientY;
+      return Math.hypot(dx, dy);
+    };
+
+    const getMidpoint = (touch1: Touch, touch2: Touch) => {
+      const rect = container.getBoundingClientRect();
+      return {
+        x: (touch1.clientX + touch2.clientX) / 2 - rect.left,
+        y: (touch1.clientY + touch2.clientY) / 2 - rect.top,
+      };
+    };
+
+    const handleTouchStart = (e: TouchEvent) => {
+      if (e.touches.length !== 2) {
+        return;
+      }
+      e.preventDefault();
+      beginInteraction();
+      const touch1 = e.touches.item(0);
+      const touch2 = e.touches.item(1);
+      if (!touch1) {
+        return;
+      }
+      if (!touch2) {
+        return;
+      }
+      const midpoint = getMidpoint(touch1, touch2);
+
+      touchStateRef.current = {
+        initialDistance: getDistance(touch1, touch2),
+        initialMidpoint: midpoint,
+        initialScale: transformRef.current.scale,
+        lastMidpoint: midpoint,
+      };
+    };
+
+    const handleTouchMove = (e: TouchEvent) => {
+      if (e.touches.length !== 2) {
+        return;
+      }
+      if (!touchStateRef.current) {
+        return;
+      }
+      e.preventDefault();
+
+      const touch1 = e.touches.item(0);
+      const touch2 = e.touches.item(1);
+      if (!touch1) {
+        return;
+      }
+      if (!touch2) {
+        return;
+      }
+      const currentDistance = getDistance(touch1, touch2);
+      const currentMidpoint = getMidpoint(touch1, touch2);
+
+      const { initialDistance, initialScale, lastMidpoint } = touchStateRef.current;
+
+      // Calculate new scale from pinch
+      const scaleRatio = currentDistance / initialDistance;
+      const newScale = initialScale * scaleRatio;
+
+      // Apply zoom at the current midpoint
+      zoomAtPoint(newScale, currentMidpoint.x, currentMidpoint.y);
+
+      // Apply pan from midpoint movement
+      const panDeltaX = lastMidpoint.x - currentMidpoint.x;
+      const panDeltaY = lastMidpoint.y - currentMidpoint.y;
+      pan(panDeltaX, panDeltaY);
+
+      touchStateRef.current.lastMidpoint = currentMidpoint;
+      scheduleInteractionEnd();
+    };
+
+    const handleTouchEnd = (e: TouchEvent) => {
+      if (e.touches.length < 2) {
+        touchStateRef.current = null;
+        scheduleInteractionEnd();
+      }
+    };
+
+    // Prevent iOS gesture zoom
+    const handleGestureStart = (e: Event) => {
+      e.preventDefault();
+    };
+
+    const handleGestureChange = (e: Event) => {
+      e.preventDefault();
+    };
+
+    const handleGestureEnd = (e: Event) => {
+      e.preventDefault();
+    };
+
+    container.addEventListener("touchstart", handleTouchStart, {
+      passive: false,
+    });
+    container.addEventListener("touchmove", handleTouchMove, {
+      passive: false,
+    });
+    container.addEventListener("touchend", handleTouchEnd);
+    container.addEventListener("touchcancel", handleTouchEnd);
+    container.addEventListener("gesturestart", handleGestureStart);
+    container.addEventListener("gesturechange", handleGestureChange);
+    container.addEventListener("gestureend", handleGestureEnd);
+
+    return () => {
+      container.removeEventListener("touchstart", handleTouchStart);
+      container.removeEventListener("touchmove", handleTouchMove);
+      container.removeEventListener("touchend", handleTouchEnd);
+      container.removeEventListener("touchcancel", handleTouchEnd);
+      container.removeEventListener("gesturestart", handleGestureStart);
+      container.removeEventListener("gesturechange", handleGestureChange);
+      container.removeEventListener("gestureend", handleGestureEnd);
+    };
+  }, [beginInteraction, pan, scheduleInteractionEnd, zoomAtPoint]);
+
+  useEffect(() => {
+    return () => {
+      clearInteractionEndTimeout();
+    };
+  }, [clearInteractionEndTimeout]);
+
+  // Coordinate conversion functions
+  const screenToCanvas = useCallback(
+    (screenX: number, screenY: number): { x: number; y: number } => {
+      const container = containerRef.current;
+      if (!container) {
+        return { x: 0, y: 0 };
+      }
+
+      const rect = container.getBoundingClientRect();
+      const { x, y, scale } = transformRef.current;
+
+      // Convert from screen coordinates to canvas coordinates
+      const relativeX = screenX - rect.left;
+      const relativeY = screenY - rect.top;
+
+      return {
+        x: (relativeX - x) / scale,
+        y: (relativeY - y) / scale,
+      };
+    },
+    [],
+  );
+
+  const canvasToScreen = useCallback(
+    (canvasX: number, canvasY: number): { x: number; y: number } => {
+      const container = containerRef.current;
+      if (!container) {
+        return { x: 0, y: 0 };
+      }
+
+      const rect = container.getBoundingClientRect();
+      const { x, y, scale } = transformRef.current;
+
+      // Convert from canvas coordinates to screen coordinates
+      return {
+        x: canvasX * scale + x + rect.left,
+        y: canvasY * scale + y + rect.top,
+      };
+    },
+    [],
+  );
+
+  const getTransform = useCallback(() => ({ ...transformRef.current }), []);
+
+  const contextValue: ViewportContextValue = {
+    canvasToScreen,
+    getTransform,
+    screenToCanvas,
+  };
+
+  return (
+    <ViewportContext.Provider value={contextValue}>
+      <div
+        className="absolute inset-0 overflow-hidden"
+        ref={containerRef}
+        style={{ touchAction: "none" }}
+      >
+        <div
+          className="absolute origin-top-left"
+          ref={panRef}
+          style={{
+            transform: "translate3d(0px, 0px, 0)",
+            transformOrigin: "top left",
+          }}
+        >
+          <div
+            className="absolute origin-top-left"
+            ref={zoomRef}
+            style={{
+              transform: "matrix(1, 0, 0, 1, 0, 0)",
+              transformOrigin: "top left",
+            }}
+          >
+            {children}
+          </div>
+        </div>
+      </div>
+    </ViewportContext.Provider>
+  );
+}
+
+// ============================================================================
+// Hook
+// ============================================================================
+
+/**
+ * Hook to access viewport coordinate conversion functions.
+ * Does NOT cause re-renders when the viewport transforms - use for event handlers
+ * that need to convert coordinates.
+ */
+export function useViewport() {
+  const context = useContext(ViewportContext);
+  if (!context) {
+    throw new Error("useViewport must be used within a Viewport");
+  }
+  return context;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-context.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-context.tsx
new file mode 100644
index 000000000..eafdfc662
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-context.tsx
@@ -0,0 +1,76 @@
+"use client";
+
+import { createContext, useCallback, useContext, useMemo, useState } from "react";
+
+/**
+ * Imperative surface the code editor exposes to the tab bar and AI panel:
+ * text-level undo/redo (owned by Monaco), programmatic reseed, per-buffer save,
+ * and rename. Monaco buffers are edited freely; a MANUAL save commits a buffer's
+ * text to its `codeComponent` node in the document (one save = one undoable
+ * transaction).
+ */
+export interface CodeEditorHandle {
+  undo(): void;
+  redo(): void;
+  /**
+   * Programmatically replace the buffer identified by `key` (a workspace path)
+   * with `source`, adopting it as the new baseline so the edit reads as
+   * already-saved (clears the dirty flag). Used when the document `source`
+   * changes underneath the editor (undo, AI `write_component`, or a WS fanout
+   * from another client); a no-op when that buffer is not open or already holds
+   * `source`.
+   */
+  setBufferContent(key: string, source: string): void;
+  /**
+   * Save one open buffer's current text to its `codeComponent` node (an undoable
+   * document transaction) and adopt the saved value as the buffer's new baseline.
+   * A no-op when the buffer is not open or is not dirty. Returns `true` when a
+   * save was committed.
+   */
+  saveBuffer(key: string): boolean;
+  /**
+   * Save every dirty open buffer to its `codeComponent` node. Used by the tab
+   * bar's Save action (Cmd/Ctrl+S) and before an AI send so the agent reads the
+   * user's latest committed source. Each buffer is its own transaction.
+   */
+  saveAll(): void;
+  /**
+   * Re-key an open model from workspace path `from` to `to`, preserving its
+   * current text, view state, and undo history by recreating the model at the
+   * new URI and reseeding it. A no-op when `from` is not open. Used by the file
+   * tree's rename so the buffer follows the file (the model URI is derived from
+   * the path).
+   */
+  renameModel(from: string, to: string): void;
+}
+
+interface CodeEditorContextValue {
+  handle: CodeEditorHandle | null;
+  registerHandle(handle: CodeEditorHandle | null): void;
+}
+
+const CodeEditorContext = createContext<CodeEditorContextValue | null>(null);
+
+/**
+ * Provides the shared editor handle. The editor registers its imperative handle
+ * on mount (and clears it on unmount); the tab bar reads it to drive undo/redo
+ * and the save lifecycle. Kept out of the zustand store since it holds a live
+ * Monaco reference.
+ */
+export function CodeEditorProvider({ children }: { children: React.ReactNode }) {
+  const [handle, setHandle] = useState<CodeEditorHandle | null>(null);
+  const registerHandle = useCallback((next: CodeEditorHandle | null) => {
+    setHandle(next);
+  }, []);
+  const value = useMemo(() => ({ handle, registerHandle }), [handle, registerHandle]);
+  return <CodeEditorContext.Provider value={value}>{children}</CodeEditorContext.Provider>;
+}
+
+/** Reads the editor handle and its registration callback. Must be used within `CodeEditorProvider`. */
+export function useCodeEditor(): CodeEditorContextValue {
+  const value = useContext(CodeEditorContext);
+  if (!value) {
+    throw new Error("Missing CodeEditorProvider");
+  }
+  return value;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-pane.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-pane.tsx
new file mode 100644
index 000000000..1f5f1d25b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-pane.tsx
@@ -0,0 +1,411 @@
+"use client";
+
+import Editor, { type BeforeMount, loader, type OnMount } from "@monaco-editor/react";
+import { sandboxDts } from "@voidhash/paywalls/sandbox-dts";
+import { parseWorkspacePath } from "@voidhash/paywall-workspace";
+import type { editor } from "monaco-editor";
+import * as monaco from "monaco-editor";
+import { useTheme } from "next-themes";
+import { useEffect, useRef } from "react";
+
+import { saveCodeComponentSource } from "../state/actions/code-component-actions";
+import { setCodeComponentDirty } from "../state/actions/code-component-editor-actions";
+import { usePaywallDesignerActions } from "../state/designer-store";
+import type { CompileDiagnostic } from "../state/designer-store-state";
+import { useCodeEditor, type CodeEditorHandle } from "./code-editor-context";
+import "./monaco-env";
+import { defineVoidhashThemes, voidhashThemeFor } from "./monaco-theme";
+
+// Use the bundled npm monaco (offline, matches our worker wiring) instead of a CDN.
+loader.config({ monaco });
+
+let defaultsInstalled = false;
+function installTypescriptDefaults(m: typeof monaco): void {
+  if (defaultsInstalled) {
+    return;
+  }
+  defaultsInstalled = true;
+  const ts = m.languages.typescript;
+  ts.typescriptDefaults.setCompilerOptions({
+    allowNonTsExtensions: true,
+    // Components import each other by relative, extension-carrying paths
+    // (`./other.tsx`); allow that so cross-file imports resolve across the eager
+    // `file:///` models.
+    allowImportingTsExtensions: true,
+    esModuleInterop: true,
+    jsx: ts.JsxEmit.ReactJSX,
+    jsxImportSource: "@voidhash/paywalls",
+    module: ts.ModuleKind.ESNext,
+    moduleResolution: ts.ModuleResolutionKind.NodeJs,
+    noEmit: true,
+    strict: true,
+    target: ts.ScriptTarget.ES2020,
+  });
+  ts.typescriptDefaults.setEagerModelSync(true);
+  // The generated `.d.ts` uses `declare module`, so an ambient path is fine.
+  ts.typescriptDefaults.addExtraLib(sandboxDts, "file:///paywalls-sandbox.d.ts");
+}
+
+function applyMarkers(
+  m: typeof monaco,
+  model: editor.ITextModel,
+  diagnostics: readonly CompileDiagnostic[] | undefined,
+): void {
+  const markers = (diagnostics ?? [])
+    .filter((diagnostic) => diagnostic.line !== undefined)
+    .map((diagnostic) => ({
+      endColumn: (diagnostic.column ?? 0) + 2,
+      endLineNumber: diagnostic.line as number,
+      message: diagnostic.message,
+      severity: m.MarkerSeverity.Error,
+      startColumn: (diagnostic.column ?? 0) + 1,
+      startLineNumber: diagnostic.line as number,
+    }));
+  m.editor.setModelMarkers(model, "paywall-compile", markers);
+}
+
+/**
+ * A single open buffer's inputs. `key` is the workspace path (the tab key),
+ * `definitionId` the `codeComponent` node id a save writes to, and `source` the
+ * current document source (seeds the model, and reseeds a non-dirty buffer when
+ * it changes externally). `diagnostics` drives Monaco markers.
+ */
+export interface OpenBuffer {
+  key: string;
+  definitionId: string;
+  source: string;
+  diagnostics: readonly CompileDiagnostic[] | undefined;
+}
+
+export interface CodeEditorPaneProps {
+  buffers: readonly OpenBuffer[];
+  activeKey: string;
+}
+
+/** Per-model bookkeeping for dirty tracking, saving, and disposal. */
+interface ModelEntry {
+  model: editor.ITextModel;
+  /** The `codeComponent` node id this buffer saves to. */
+  definitionId: string;
+  /** The last saved (or reseeded) source; dirty = current value differs from this. */
+  baseline: string;
+  disposeContentListener: monaco.IDisposable;
+  /**
+   * True while a PROGRAMMATIC `setValue` (reseed from the document) is in flight —
+   * the content listener skips dirty recomputation so the reseeded value reads as
+   * clean, not as a fresh edit.
+   */
+  suppressDirty: boolean;
+}
+
+/**
+ * Maps a workspace path (the tab key) to its Monaco model URI. A component
+ * becomes `file:///components/<basename>.tsx`, mirroring the relative import
+ * graph (`./other.tsx`), so cross-file imports resolve across the eager model
+ * set with no extra-lib juggling.
+ */
+function modelUri(m: typeof monaco, key: string): monaco.Uri {
+  const parsed = parseWorkspacePath(key);
+  if (parsed.ok && parsed.path.kind === "component") {
+    return m.Uri.parse(`file:///components/${parsed.path.fileName}`);
+  }
+  // Defensive: an unrecognized key still gets a stable, unique URI.
+  return m.Uri.parse(`file:///${encodeURIComponent(key)}.tsx`);
+}
+
+/**
+ * A single persistent Monaco editor that manages one model per open buffer.
+ *
+ * The editor is mounted once and never torn down while code mode is open;
+ * models are created, switched, and disposed manually. Each buffer keeps its own
+ * undo history and view state. Text edits stay in Monaco; a MANUAL save commits a
+ * buffer's text to its `codeComponent` node (an undoable document transaction),
+ * which the compile pipeline then picks up (it watches the definition nodes).
+ * Dirty state (buffer text vs the saved baseline) is mirrored into the store so
+ * the tab bar + file tree can render unsaved dots.
+ */
+export function CodeEditorPane({ buffers, activeKey }: CodeEditorPaneProps) {
+  const dispatch = usePaywallDesignerActions();
+  const { registerHandle } = useCodeEditor();
+  const { resolvedTheme } = useTheme();
+  const themeName = voidhashThemeFor(resolvedTheme);
+
+  const editorRef = useRef<editor.IStandaloneCodeEditor | null>(null);
+  const monacoRef = useRef<typeof monaco | null>(null);
+  const mountedRef = useRef(false);
+
+  const modelsRef = useRef<Map<string, ModelEntry>>(new Map());
+  const viewStatesRef = useRef<Map<string, editor.ICodeEditorViewState | null>>(new Map());
+  const activeKeyRef = useRef(activeKey);
+  const currentModelKeyRef = useRef<string | null>(null);
+
+  // Keep the latest buffers on a ref so the imperative handle closures always
+  // read current diagnostics/definition ids without being rebuilt.
+  const buffersRef = useRef(buffers);
+  buffersRef.current = buffers;
+
+  // Recompute a buffer's dirty flag (current text vs saved baseline) and mirror
+  // it into the store. Skipped during a programmatic reseed.
+  const recomputeDirty = (key: string, entry: ModelEntry): void => {
+    if (entry.suppressDirty) {
+      return;
+    }
+    dispatch(setCodeComponentDirty)({ path: key, dirty: entry.model.getValue() !== entry.baseline });
+  };
+
+  // Ensure a model exists for `key`, wiring the dirty-tracking content listener
+  // on first creation. `source` seeds the buffer once; later changes to it flow
+  // through `syncModels`' reseed of non-dirty buffers.
+  const ensureModel = (m: typeof monaco, buffer: OpenBuffer): ModelEntry => {
+    const existing = modelsRef.current.get(buffer.key);
+    if (existing) {
+      return existing;
+    }
+    const uri = modelUri(m, buffer.key);
+    const model =
+      m.editor.getModel(uri) ?? m.editor.createModel(buffer.source, "typescript", uri);
+    const entry: ModelEntry = {
+      model,
+      definitionId: buffer.definitionId,
+      baseline: buffer.source,
+      suppressDirty: false,
+      disposeContentListener: model.onDidChangeContent(() => {
+        recomputeDirty(buffer.key, entry);
+      }),
+    };
+    modelsRef.current.set(buffer.key, entry);
+    return entry;
+  };
+
+  // Save one buffer's text to its `codeComponent` node (an undoable document
+  // transaction) and adopt it as the new baseline (clears dirty). No-op when the
+  // buffer is absent or unchanged.
+  const saveModel = (key: string, entry: ModelEntry): boolean => {
+    const source = entry.model.getValue();
+    if (source === entry.baseline) {
+      return false;
+    }
+    dispatch(saveCodeComponentSource)({ nodeId: entry.definitionId, source });
+    entry.baseline = source;
+    dispatch(setCodeComponentDirty)({ path: key, dirty: false });
+    return true;
+  };
+
+  // Reseed a buffer from the document `source` WITHOUT marking it dirty. Skips a
+  // dirty buffer (never clobber the user's unsaved edits) and a buffer already
+  // holding `source`.
+  const reseedModel = (entry: ModelEntry, source: string): void => {
+    if (entry.model.getValue() === source) {
+      entry.baseline = source;
+      return;
+    }
+    // A dirty buffer holds unsaved user edits — do not overwrite them.
+    if (entry.model.getValue() !== entry.baseline) {
+      return;
+    }
+    entry.baseline = source;
+    entry.suppressDirty = true;
+    try {
+      entry.model.setValue(source);
+    } finally {
+      entry.suppressDirty = false;
+    }
+  };
+
+  const handleBeforeMount: BeforeMount = (mountingMonaco) => {
+    defineVoidhashThemes(mountingMonaco);
+  };
+
+  const handleMount: OnMount = (mountedEditor, mountedMonaco) => {
+    editorRef.current = mountedEditor;
+    monacoRef.current = mountedMonaco;
+    mountedRef.current = true;
+    installTypescriptDefaults(mountedMonaco);
+    currentModelKeyRef.current = null;
+    syncModels(mountedMonaco);
+    syncActive(mountedMonaco, mountedEditor);
+  };
+
+  // Reconcile the live model set with `buffers`: create missing models (EAGERLY —
+  // every open component gets a model so cross-file imports resolve), reseed a
+  // non-dirty model whose document source changed, and dispose models for keys no
+  // longer open.
+  const syncModels = (m: typeof monaco): void => {
+    const openKeys = new Set(buffersRef.current.map((buffer) => buffer.key));
+    for (const buffer of buffersRef.current) {
+      const entry = ensureModel(m, buffer);
+      entry.definitionId = buffer.definitionId;
+      reseedModel(entry, buffer.source);
+    }
+    for (const [key, entry] of modelsRef.current) {
+      if (!openKeys.has(key)) {
+        entry.disposeContentListener.dispose();
+        entry.model.dispose();
+        modelsRef.current.delete(key);
+        viewStatesRef.current.delete(key);
+      }
+    }
+  };
+
+  // Switch the editor to the active buffer's model, preserving per-key view
+  // state, then apply that buffer's markers.
+  const syncActive = (m: typeof monaco, ed: editor.IStandaloneCodeEditor): void => {
+    const nextKey = activeKeyRef.current;
+    const entry = modelsRef.current.get(nextKey);
+    if (!entry) {
+      return;
+    }
+
+    if (currentModelKeyRef.current !== nextKey) {
+      const outgoing = currentModelKeyRef.current;
+      if (outgoing !== null) {
+        viewStatesRef.current.set(outgoing, ed.saveViewState());
+      }
+      ed.setModel(entry.model);
+      const saved = viewStatesRef.current.get(nextKey);
+      if (saved) {
+        ed.restoreViewState(saved);
+      }
+      currentModelKeyRef.current = nextKey;
+    }
+
+    const activeBuffer = buffersRef.current.find((buffer) => buffer.key === nextKey);
+    applyMarkers(m, entry.model, activeBuffer?.diagnostics);
+  };
+
+  activeKeyRef.current = activeKey;
+
+  // Keep the model set in sync with the open buffers.
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  useEffect(() => {
+    const m = monacoRef.current;
+    if (m && mountedRef.current) {
+      syncModels(m);
+    }
+  }, [buffers]);
+
+  // Switch models / re-apply markers when the active buffer or its diagnostics
+  // change.
+  const activeBuffer = buffers.find((buffer) => buffer.key === activeKey);
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  useEffect(() => {
+    const m = monacoRef.current;
+    const ed = editorRef.current;
+    if (m && ed && mountedRef.current) {
+      syncActive(m, ed);
+    }
+  }, [activeKey, activeBuffer?.diagnostics]);
+
+  // Register the imperative handle. Rebuilt only when `dispatch` changes
+  // (stable) — the closures read live state via refs.
+  useEffect(() => {
+    const handle: CodeEditorHandle = {
+      undo() {
+        editorRef.current?.trigger("code-editor", "undo", null);
+      },
+      redo() {
+        editorRef.current?.trigger("code-editor", "redo", null);
+      },
+      setBufferContent(key, source) {
+        const entry = modelsRef.current.get(key);
+        if (!entry) {
+          return;
+        }
+        entry.baseline = source;
+        if (entry.model.getValue() === source) {
+          dispatch(setCodeComponentDirty)({ path: key, dirty: false });
+          return;
+        }
+        entry.suppressDirty = true;
+        try {
+          entry.model.setValue(source);
+        } finally {
+          entry.suppressDirty = false;
+        }
+        dispatch(setCodeComponentDirty)({ path: key, dirty: false });
+      },
+      saveBuffer(key) {
+        const entry = modelsRef.current.get(key);
+        return entry ? saveModel(key, entry) : false;
+      },
+      saveAll() {
+        for (const [key, entry] of modelsRef.current) {
+          saveModel(key, entry);
+        }
+      },
+      renameModel(from, to) {
+        const m = monacoRef.current;
+        const ed = editorRef.current;
+        if (m === null || from === to) {
+          return;
+        }
+        const entry = modelsRef.current.get(from);
+        if (!entry) {
+          return;
+        }
+        // Monaco models are keyed by immutable URI, so a rename recreates the
+        // model at the new URI, carrying over the current text + view state (its
+        // undo stack cannot move across models — a known Monaco limitation).
+        const wasActive = ed !== null && currentModelKeyRef.current === from;
+        const text = entry.model.getValue();
+        const savedViewState =
+          wasActive && ed ? ed.saveViewState() : (viewStatesRef.current.get(from) ?? null);
+
+        entry.disposeContentListener.dispose();
+        entry.model.dispose();
+        modelsRef.current.delete(from);
+        viewStatesRef.current.delete(from);
+
+        const created = ensureModel(m, {
+          key: to,
+          definitionId: entry.definitionId,
+          source: text,
+          diagnostics: undefined,
+        });
+        created.baseline = entry.baseline;
+        if (savedViewState !== null) {
+          viewStatesRef.current.set(to, savedViewState);
+        }
+        if (wasActive && ed) {
+          currentModelKeyRef.current = null;
+          activeKeyRef.current = to;
+          syncActive(m, ed);
+        }
+      },
+    };
+    registerHandle(handle);
+    return () => {
+      registerHandle(null);
+    };
+  }, [dispatch, registerHandle]);
+
+  // Dispose all models when the pane unmounts (code mode closed).
+  useEffect(() => {
+    return () => {
+      for (const entry of modelsRef.current.values()) {
+        entry.disposeContentListener.dispose();
+        entry.model.dispose();
+      }
+      modelsRef.current.clear();
+      viewStatesRef.current.clear();
+      mountedRef.current = false;
+    };
+  }, []);
+
+  return (
+    <Editor
+      beforeMount={handleBeforeMount}
+      keepCurrentModel
+      language="typescript"
+      onMount={handleMount}
+      options={{
+        automaticLayout: true,
+        fontSize: 13,
+        minimap: { enabled: false },
+        scrollBeyondLastLine: false,
+        tabSize: 2,
+      }}
+      theme={themeName}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-tabs.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-tabs.tsx
new file mode 100644
index 000000000..cd3ba2975
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/code-editor-tabs.tsx
@@ -0,0 +1,189 @@
+"use client";
+
+import { Button, cn, useConfirmDialog } from "@voidhash/ui";
+import { parseWorkspacePath } from "@voidhash/paywall-workspace";
+import { Redo2, Undo2, X } from "lucide-react";
+import { useCallback, useEffect, useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import { closeTab, openTab } from "../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import {
+  codeComponentDefinitions,
+  selectCodeComponentNodes,
+} from "../state/utils/code-components";
+import { docRelativeComponentPath } from "@voidhash/paywall-workspace";
+import { useCodeEditor } from "./code-editor-context";
+
+/** The display label for a component tab key (its `<basename>.tsx` file name). */
+function labelForKey(key: string): string {
+  const parsed = parseWorkspacePath(key);
+  if (parsed.ok && parsed.path.kind === "component") {
+    return parsed.path.fileName;
+  }
+  return key;
+}
+
+/**
+ * Horizontal tab bar of the open code-editor buffers, sitting directly above the
+ * Monaco editor. Renders one tab per `openTabs` entry (a component workspace
+ * path), highlights the active tab, shows an unsaved dot when a buffer is dirty,
+ * and closes a tab on its hover-revealed X (confirming when the buffer has
+ * unsaved edits, then reverting to the document source).
+ *
+ * The right edge carries Undo/Redo plus Save. Save commits every dirty buffer to
+ * its `codeComponent` node (one buffer = one undoable transaction) and is bound
+ * to Cmd/Ctrl+S.
+ */
+export function CodeEditorTabs() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+  const { handle } = useCodeEditor();
+
+  const openTabs = useStore(store, (state) => state.codeComponents.openTabs);
+  const activeTabPath = useStore(store, (state) => state.codeComponents.activeTabPath);
+  const dirty = useStore(store, (state) => state.codeComponents.dirty);
+  const nodes = useStore(store, selectCodeComponentNodes);
+
+  const hasActive = activeTabPath !== null && handle !== null;
+  const anyDirty = useMemo(() => Object.values(dirty).some(Boolean), [dirty]);
+
+  // Cmd/Ctrl+S saves every dirty buffer, wherever focus is.
+  useEffect(() => {
+    const onKeyDown = (event: KeyboardEvent) => {
+      if ((event.metaKey || event.ctrlKey) && event.key.toLowerCase() === "s") {
+        event.preventDefault();
+        handle?.saveAll();
+      }
+    };
+    window.addEventListener("keydown", onKeyDown);
+    return () => {
+      window.removeEventListener("keydown", onKeyDown);
+    };
+  }, [handle]);
+
+  const activate = useCallback(
+    (key: string) => {
+      dispatch(openTab)({ path: key });
+    },
+    [dispatch],
+  );
+
+  // Reverts a buffer to its document `source` (its `codeComponent` node) so a
+  // closed tab's unsaved edits do not linger. A no-op when the definition is gone.
+  const revertBuffer = useCallback(
+    (key: string) => {
+      const docRelative = docRelativeComponentPath(key);
+      if (docRelative === undefined) {
+        return;
+      }
+      const definition = codeComponentDefinitions(nodes).find(
+        (candidate) => candidate.path === docRelative,
+      );
+      if (definition !== undefined) {
+        handle?.setBufferContent(key, definition.source);
+      }
+    },
+    [handle, nodes],
+  );
+
+  const handleClose = useCallback(
+    async (key: string) => {
+      if (dirty[key]) {
+        const confirmed = await openDialog({
+          confirmText: "Discard",
+          description: `“${labelForKey(key)}” has unsaved changes that will be lost.`,
+          title: "Discard changes?",
+          variant: "destructive",
+        });
+        if (!confirmed) {
+          return;
+        }
+        // Reset the buffer to its saved source before closing so its unsaved
+        // edits don't survive as a stale dirty flag.
+        revertBuffer(key);
+      }
+      dispatch(closeTab)({ path: key });
+    },
+    [dirty, dispatch, openDialog, revertBuffer],
+  );
+
+  return (
+    <div className="flex h-9 shrink-0 items-stretch border-border border-b">
+      <div className="flex min-w-0 flex-1 items-stretch overflow-x-auto">
+        {openTabs.map((key) => {
+          const isActive = key === activeTabPath;
+          const isDirty = Boolean(dirty[key]);
+
+          return (
+            <div
+              className={cn(
+                "group flex shrink-0 cursor-pointer items-center gap-2 border-border border-r px-3 text-xs outline-none",
+                "hover:bg-accent/50",
+                isActive && "bg-accent text-accent-foreground hover:bg-accent",
+              )}
+              key={key}
+              onClick={() => activate(key)}
+              onKeyDown={(event) => {
+                if (event.key === "Enter" || event.key === " ") {
+                  event.preventDefault();
+                  activate(key);
+                }
+              }}
+              role="button"
+              tabIndex={0}
+            >
+              <span className="truncate">{labelForKey(key)}</span>
+              <span className="flex size-3.5 shrink-0 items-center justify-center">
+                {isDirty && (
+                  <span className="size-1.5 rounded-full bg-current/70 group-hover:hidden" />
+                )}
+                <button
+                  aria-label={`Close ${labelForKey(key)}`}
+                  className="hidden size-3.5 items-center justify-center rounded-sm hover:bg-accent group-hover:flex [&_svg]:size-3.5"
+                  onClick={(event) => {
+                    event.stopPropagation();
+                    void handleClose(key);
+                  }}
+                  type="button"
+                >
+                  <X />
+                </button>
+              </span>
+            </div>
+          );
+        })}
+      </div>
+      <div className="flex shrink-0 items-center gap-0.5 border-border border-l px-1.5">
+        <Button
+          disabled={!hasActive}
+          onClick={() => handle?.undo()}
+          size="icon-sm"
+          title="Undo"
+          variant="ghost"
+        >
+          <Undo2 className="size-4" />
+        </Button>
+        <Button
+          disabled={!hasActive}
+          onClick={() => handle?.redo()}
+          size="icon-sm"
+          title="Redo"
+          variant="ghost"
+        >
+          <Redo2 className="size-4" />
+        </Button>
+        <Button
+          className="ml-1"
+          disabled={!anyDirty}
+          onClick={() => handle?.saveAll()}
+          size="sm"
+        >
+          Save
+        </Button>
+      </div>
+      <ConfirmationDialog />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
new file mode 100644
index 000000000..bda1f2488
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
@@ -0,0 +1,153 @@
+"use client";
+
+import { docRelativeComponentPath } from "@voidhash/paywall-workspace";
+import {
+  ResizableHandle,
+  ResizablePanel,
+  ResizablePanelGroup,
+  Spinner,
+} from "@voidhash/ui";
+import { lazy, Suspense, useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import { PANEL_DIMENSIONS } from "../panels/constants";
+import { usePaywallDesignerStore } from "../state/designer-store";
+import {
+  codeComponentDefinitions,
+  selectCodeComponentNodes,
+  type CodeComponentDefinition,
+} from "../state/utils/code-components";
+import type { OpenBuffer } from "./code-editor-pane";
+import { CodeEditorTabs } from "./code-editor-tabs";
+import { ComponentPreviewPane } from "./component-preview-pane";
+
+const CodeEditorPane = lazy(() =>
+  import("./code-editor-pane").then((module) => ({ default: module.CodeEditorPane })),
+);
+
+function CenteredMessage({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="flex h-full items-center justify-center p-8 text-center text-muted-foreground text-sm">
+      {children}
+    </div>
+  );
+}
+
+const EDITOR_FALLBACK = (
+  <div className="flex h-full items-center justify-center">
+    <Spinner className="size-5" />
+  </div>
+);
+
+/**
+ * Resolves the code-component definition an editor tab key (a workspace
+ * component path, `/paywalls/<slug>/components/<basename>.tsx`) refers to, by its
+ * canonical document-relative path.
+ */
+function definitionForTabKey(
+  definitions: readonly CodeComponentDefinition[],
+  key: string,
+): CodeComponentDefinition | undefined {
+  const docRelative = docRelativeComponentPath(key);
+  if (docRelative === undefined) {
+    return undefined;
+  }
+  return definitions.find((definition) => definition.path === docRelative);
+}
+
+/**
+ * The code-mode canvas region: a horizontal split of a persistent multi-model
+ * Monaco editor (with its tab bar) and a live component preview pane. Buffers,
+ * tabs, diagnostics, and Monaco models all key on the component's workspace PATH;
+ * their source lives directly on the `codeComponent` nodes in the document (no
+ * fork). A manual save commits a buffer to its node.
+ */
+export function CodeModeWorkspace() {
+  const store = usePaywallDesignerStore();
+
+  const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
+  const aiWidth = useStore(store, (state) => state.ai.width);
+  const aiOffset = aiPanelOpen ? aiWidth : 0;
+
+  const openTabs = useStore(store, (state) => state.codeComponents.openTabs);
+  const activeTabPath = useStore(store, (state) => state.codeComponents.activeTabPath);
+  const nodes = useStore(store, selectCodeComponentNodes);
+  const compiled = useStore(store, (state) => state.codeComponents.compiled);
+  const definitions = useMemo(() => codeComponentDefinitions(nodes), [nodes]);
+
+  // Build the open buffers from the live code-component definitions, keyed by
+  // workspace path. A tab whose definition vanished (deleted mid-session) is
+  // dropped. Each buffer carries the definition source (seed + external-update
+  // reseed) and its compile diagnostics.
+  const buffers = useMemo<OpenBuffer[]>(() => {
+    const result: OpenBuffer[] = [];
+    for (const key of openTabs) {
+      const definition = definitionForTabKey(definitions, key);
+      if (definition === undefined) {
+        continue;
+      }
+      const compileState = compiled[definition.id];
+      const diagnostics = compileState?.status === "error" ? compileState.diagnostics : undefined;
+      result.push({
+        key,
+        definitionId: definition.id,
+        source: definition.source,
+        diagnostics,
+      });
+    }
+    return result;
+  }, [openTabs, definitions, compiled]);
+
+  if (buffers.length === 0) {
+    return (
+      <Region aiOffset={aiOffset}>
+        <CenteredMessage>Select or create a code component to start editing.</CenteredMessage>
+      </Region>
+    );
+  }
+
+  const hasActiveBuffer =
+    activeTabPath !== null && buffers.some((buffer) => buffer.key === activeTabPath);
+  const activeKey = hasActiveBuffer ? (activeTabPath as string) : (buffers[0]?.key ?? "");
+  const activeDefinitionId = buffers.find((buffer) => buffer.key === activeKey)?.definitionId;
+
+  return (
+    <Region aiOffset={aiOffset}>
+      <ResizablePanelGroup direction="horizontal">
+        <ResizablePanel defaultSize={55} minSize={25}>
+          <div className="flex h-full flex-col">
+            <CodeEditorTabs />
+            <div className="relative min-h-0 flex-1">
+              <Suspense fallback={EDITOR_FALLBACK}>
+                <CodeEditorPane activeKey={activeKey} buffers={buffers} />
+              </Suspense>
+            </div>
+          </div>
+        </ResizablePanel>
+        <ResizableHandle withHandle />
+        <ResizablePanel defaultSize={45} minSize={25}>
+          {activeDefinitionId !== undefined ? (
+            <ComponentPreviewPane definitionId={activeDefinitionId} />
+          ) : (
+            <CenteredMessage>No preview for this file.</CenteredMessage>
+          )}
+        </ResizablePanel>
+      </ResizablePanelGroup>
+    </Region>
+  );
+}
+
+/** Fixed positioning shell for the code-mode region (right of left panel, below top panel). */
+function Region({ aiOffset, children }: { aiOffset: number; children: React.ReactNode }) {
+  return (
+    <div
+      className="absolute inset-0 bg-background transition-[left] duration-300 ease-in-out"
+      style={{
+        left: aiOffset + PANEL_DIMENSIONS.LEFT_WIDTH,
+        top: PANEL_DIMENSIONS.TOP_HEIGHT,
+      }}
+    >
+      {children}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/compile-pipeline.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/compile-pipeline.ts
new file mode 100644
index 000000000..24e6b3945
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/compile-pipeline.ts
@@ -0,0 +1,130 @@
+import type {
+  ComponentManifest,
+  PreviewTree,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import wasmURL from "esbuild-wasm/esbuild.wasm?url";
+
+import type { CompileDiagnostic } from "../state/designer-store-state";
+import { SandboxHost } from "./sandbox-host";
+
+export type PipelineResult =
+  | {
+      ok: true;
+      manifest: ComponentManifest;
+      previewTrees: Record<string, PreviewTree>;
+      /** Whether the definition declared a custom editor panel. */
+      hasPanel: boolean;
+      /**
+       * The compiled author CJS module — retained ONLY when `hasPanel` is true,
+       * so the panel sandbox can evaluate it. `undefined` otherwise (never ship
+       * or retain code for a component without a panel).
+       */
+      code?: string;
+    }
+  | { ok: false; diagnostics: CompileDiagnostic[] };
+
+/**
+ * esbuild-wasm may only be initialized once per thread, so the module + init
+ * promise are module-scoped and shared across pipeline instances. Lazily
+ * imported on first compile (keeps the ~1MB out of the base designer bundle).
+ * Default `worker: true` runs the wasm in esbuild's own worker — the main
+ * thread stays responsive without us wrapping it in a second worker (nested
+ * workers were the source of hangs).
+ */
+const ESBUILD_INIT_TIMEOUT_MS = 15000;
+
+type EsbuildModule = typeof import("esbuild-wasm");
+let esbuildReady: Promise<EsbuildModule> | null = null;
+function ensureEsbuild(): Promise<EsbuildModule> {
+  if (esbuildReady === null) {
+    esbuildReady = (async () => {
+      const mod = await import("esbuild-wasm");
+      // Bound init: a wasm/worker load that never settles must surface as an
+      // error, not hang the compile forever ("stuck compiling").
+      await Promise.race([
+        mod.initialize({ wasmURL }),
+        new Promise<never>((_resolve, reject) =>
+          setTimeout(() => reject(new Error("esbuild-wasm init timed out")), ESBUILD_INIT_TIMEOUT_MS),
+        ),
+      ]);
+      return mod;
+    })().catch((error: unknown) => {
+      // Allow a later retry if init failed (e.g. transient asset load).
+      esbuildReady = null;
+      throw error;
+    });
+  }
+  return esbuildReady;
+}
+
+/**
+ * Compiles a component's source (esbuild-wasm transform) and renders it in the
+ * sandbox to a validated artifact. Errors at either stage return diagnostics —
+ * neither stage can hang (transform is promise-based; the sandbox has ready +
+ * render timeouts).
+ */
+export class CompilePipeline {
+  private readonly host = new SandboxHost();
+
+  async compile(source: string): Promise<PipelineResult> {
+    let code: string;
+    try {
+      const esbuild = await ensureEsbuild();
+      // CJS so the sandbox can run it via `new Function` with a `require` shim
+      // returning the SDK global — no ES-module loading inside the iframe.
+      const result = await esbuild.transform(source, {
+        format: "cjs",
+        jsx: "automatic",
+        jsxImportSource: "@voidhash/paywalls",
+        loader: "tsx",
+        target: "es2022",
+      });
+      code = result.code;
+    } catch (error) {
+      return { diagnostics: toCompileDiagnostics(error), ok: false };
+    }
+
+    // The whole render is wrapped so `compile()` ALWAYS resolves — a rejection
+    // here (rather than a returned outcome) would strand the caller on
+    // "compiling" forever.
+    try {
+      const rendered = await this.host.render(code);
+      if (!rendered.ok) {
+        console.warn("[paywall-compile] render failed:", rendered.error);
+        return { diagnostics: [{ message: rendered.error, phase: "runtime" }], ok: false };
+      }
+      return {
+        // Retain the compiled module only for panel-bearing components — the
+        // panel sandbox evaluates it; a panel-less component never needs it.
+        code: rendered.hasPanel ? code : undefined,
+        hasPanel: rendered.hasPanel,
+        manifest: rendered.manifest,
+        ok: true,
+        previewTrees: rendered.previewTrees,
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      console.warn("[paywall-compile] render threw:", message);
+      return { diagnostics: [{ message, phase: "runtime" }], ok: false };
+    }
+  }
+
+  destroy(): void {
+    this.host.destroy();
+  }
+}
+
+function toCompileDiagnostics(error: unknown): CompileDiagnostic[] {
+  const maybe = error as {
+    errors?: Array<{ text: string; location?: { line: number; column: number } | null }>;
+  };
+  if (Array.isArray(maybe?.errors) && maybe.errors.length > 0) {
+    return maybe.errors.map((message) => ({
+      column: message.location?.column,
+      line: message.location?.line,
+      message: message.text,
+      phase: "compile",
+    }));
+  }
+  return [{ message: error instanceof Error ? error.message : String(error), phase: "compile" }];
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx
new file mode 100644
index 000000000..8db0631d6
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx
@@ -0,0 +1,118 @@
+"use client";
+
+import { cn, Spinner, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import { useRef } from "react";
+import { useStore } from "zustand/react";
+
+import { PreviewTreeRenderer } from "../components/component-preview/preview-tree-renderer";
+import { setCodeEditorPreviewState } from "../state/actions/code-component-editor-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import type { LocalComponentArtifact } from "../state/designer-store-state";
+import { selectCodeComponentCompiled } from "../state/utils/code-components";
+
+/** Preview-state fallback: local selection → "default" → first available. */
+function resolvePreviewState(available: readonly string[], selected: string | null): string | undefined {
+  for (const candidate of [selected, "default"]) {
+    if (candidate !== null && candidate !== "" && available.includes(candidate)) {
+      return candidate;
+    }
+  }
+  return available[0];
+}
+
+/**
+ * Live preview of the selected code component: renders the compiled preview
+ * tree with the trusted `PreviewTreeRenderer`, a preview-state switcher, and a
+ * diagnostics panel. Keeps the last good tree visible during recompiles so the
+ * preview never flashes empty on every keystroke.
+ */
+export function ComponentPreviewPane({ definitionId }: { definitionId: string }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  // Read the component's compile — driven by the compile pipeline watching its
+  // `codeComponent` node, so a save (or any source change) recompiles the preview.
+  const compiled = useStore(store, selectCodeComponentCompiled(definitionId));
+  const previewState = useStore(store, (state) => state.codeComponents.previewState);
+
+  const lastGood = useRef<LocalComponentArtifact | null>(null);
+  if (compiled?.status === "ready" && compiled.artifact) {
+    lastGood.current = compiled.artifact;
+  }
+
+  const status = compiled?.status ?? "idle";
+  const artifact = compiled?.artifact ?? lastGood.current;
+  const states = artifact ? Object.keys(artifact.previewTrees) : [];
+  const activeState = resolvePreviewState(states, previewState);
+  const tree = artifact && activeState ? artifact.previewTrees[activeState] : undefined;
+  const isStale = status !== "ready" && artifact !== null;
+
+  return (
+    <div className="flex h-full flex-col bg-muted/20">
+      <div className="flex h-9 shrink-0 items-center justify-between gap-2 border-border border-b px-2">
+        <div className="flex items-center gap-2">
+          {states.length > 1 && (
+            <ToggleGroup
+              onValueChange={(value) => {
+                if (value) {
+                  dispatch(setCodeEditorPreviewState)({ state: value });
+                }
+              }}
+              size="sm"
+              type="single"
+              value={activeState}
+              variant="outline"
+            >
+              {states.map((state) => (
+                <ToggleGroupItem className="text-xs" key={state} size="sm" value={state}>
+                  {state}
+                </ToggleGroupItem>
+              ))}
+            </ToggleGroup>
+          )}
+        </div>
+        {status === "compiling" && (
+          <span className="flex items-center gap-1.5 text-muted-foreground text-xs">
+            <Spinner className="size-3" /> Compiling…
+          </span>
+        )}
+      </div>
+
+      <div className="relative flex flex-1 items-center justify-center overflow-auto p-6">
+        {tree ? (
+          <div
+            className={cn(
+              "w-full max-w-[375px] overflow-hidden rounded-xl border border-border bg-white shadow-sm transition-opacity",
+              isStale && "opacity-60",
+            )}
+          >
+            <PreviewTreeRenderer tree={tree} />
+          </div>
+        ) : status === "compiling" || status === "idle" ? (
+          <div className="h-40 w-full max-w-[375px] animate-pulse rounded-xl bg-muted" />
+        ) : (
+          <p className="text-muted-foreground text-sm">No preview available</p>
+        )}
+      </div>
+
+      {status === "error" && compiled?.diagnostics && compiled.diagnostics.length > 0 && (
+        <div className="max-h-40 shrink-0 overflow-auto border-border border-t bg-destructive/5 p-2">
+          {compiled.diagnostics.map((diagnostic, index) => (
+            <div
+              className="flex items-start gap-2 py-0.5 font-mono text-[11px] text-destructive"
+              // biome-ignore lint/suspicious/noArrayIndexKey: diagnostics are positional and ephemeral
+              key={index}
+            >
+              <span className="shrink-0 rounded-sm bg-destructive/10 px-1 uppercase">
+                {diagnostic.phase}
+              </span>
+              <span className="min-w-0">
+                {diagnostic.line !== undefined ? `Line ${diagnostic.line}: ` : ""}
+                {diagnostic.message}
+              </span>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/has-panel-threading.test.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/has-panel-threading.test.ts
new file mode 100644
index 000000000..af8974308
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/has-panel-threading.test.ts
@@ -0,0 +1,79 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import type {
+  CodeComponentCompiled,
+  LocalComponentArtifact,
+} from "../state/designer-store-state";
+import { selectLocalComponentArtifact } from "../state/utils/code-components";
+import { SANDBOX_DOCUMENT } from "./sandbox-document";
+
+/**
+ * A minimal §2-shaped manifest for the store-shape round-trips. The threading
+ * tests care about the `hasPanel` sibling + `code` retention, not manifest
+ * validation (the sandbox host owns that).
+ */
+const MANIFEST = {
+  slug: "widget",
+  title: "Widget",
+  props: [],
+  actions: [],
+  previewStates: ["default"],
+  slots: 0,
+} as const;
+
+describe("hasPanel threading — preview guest posts the flag", () => {
+  test("the preview guest describes the component and posts hasPanel", () => {
+    // The guest switched from extractComponentManifest to describeComponent (which
+    // returns {manifest, hasPanel}) and posts the flag as a sibling of manifest —
+    // it never calls definition.panel.
+    expect(SANDBOX_DOCUMENT).toContain("describeComponent");
+    expect(SANDBOX_DOCUMENT).toContain("hasPanel: hasPanel");
+    expect(SANDBOX_DOCUMENT).not.toContain("definition.panel(");
+  });
+});
+
+/**
+ * The retention rule threaded through both the compile pipeline and the compile
+ * hook: the compiled module (`code`) is kept ONLY when the component declares a
+ * panel. Expressed as a pure helper so the rule is locked without running
+ * esbuild + the iframe.
+ */
+const retainCode = (hasPanel: boolean, code: string): string | undefined =>
+  hasPanel ? code : undefined;
+
+describe("hasPanel threading — code retention + store shape", () => {
+  test("code is retained only when hasPanel is true", () => {
+    expect(retainCode(true, "compiled")).toBe("compiled");
+    expect(retainCode(false, "compiled")).toBeUndefined();
+  });
+
+  test("a panel artifact round-trips hasPanel + code through the store selector", () => {
+    const artifact: LocalComponentArtifact = {
+      manifest: MANIFEST as never,
+      previewTrees: {},
+      hasPanel: true,
+      code: retainCode(true, "module.exports = {}"),
+    };
+    const compiled: CodeComponentCompiled = { status: "ready", sourceHash: "h", artifact };
+    const state = { codeComponents: { compiled: { "node-1": compiled } } } as never;
+
+    const read = selectLocalComponentArtifact("node-1")(state);
+    expect(read?.hasPanel).toBe(true);
+    expect(read?.code).toBe("module.exports = {}");
+  });
+
+  test("a panel-less artifact carries no code", () => {
+    const artifact: LocalComponentArtifact = {
+      manifest: MANIFEST as never,
+      previewTrees: {},
+      hasPanel: false,
+      code: retainCode(false, "module.exports = {}"),
+    };
+    const compiled: CodeComponentCompiled = { status: "ready", sourceHash: "h", artifact };
+    const state = { codeComponents: { compiled: { "node-2": compiled } } } as never;
+
+    const read = selectLocalComponentArtifact("node-2")(state);
+    expect(read?.hasPanel).toBe(false);
+    expect(read?.code).toBeUndefined();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/hash.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/hash.ts
new file mode 100644
index 000000000..94f6682df
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/hash.ts
@@ -0,0 +1,9 @@
+/**
+ * Cheap, non-cryptographic string hash (djb2) used to key compilation state by
+ * source. Re-exported from `@voidhash/paywall-workspace` so the browser
+ * compile pipeline and the server-side manifest cache hash source identically —
+ * the manifest upload keys rows by this hash and the server resolves manifests
+ * by re-hashing each code-component's source, so any drift would silently break
+ * server-side registry resolution.
+ */
+export { hashSource } from "@voidhash/paywall-workspace";
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts
new file mode 100644
index 000000000..01abafe06
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts
@@ -0,0 +1,63 @@
+import { Effect } from "effect";
+
+import { managedRuntime, VoidhashRpc } from "@/features/studio/lib/effect-query";
+
+import type { CompileDiagnostic } from "../state/designer-store-state";
+import type { PipelineResult } from "./compile-pipeline";
+
+/**
+ * Source hashes already uploaded (or in flight) this session, so we never fire a
+ * second `RecordComponentManifest` for a source we've already recorded. Manifests
+ * are content-addressed (pure derivations of source), so one upload per distinct
+ * hash per tab is sufficient — the server row is idempotent regardless.
+ */
+const uploadedHashes = new Set<string>();
+
+/**
+ * Fire-and-forget upload of a finished compile's manifest/diagnostics to the
+ * server manifest cache, keyed by `sourceHash`. This is what makes any component
+ * ever compiled in a designer session server-resolvable (so the document-first
+ * AI/MCP tools can resolve its props/actions server-side).
+ *
+ * Deliberately non-blocking and silent-on-failure: the compile path must never
+ * wait on or fail from this. It runs at most once per `sourceHash` per session
+ * (idempotent server-side too), and logs — never throws — on error.
+ */
+export function uploadComponentManifest(sourceHash: string, result: PipelineResult): void {
+  if (uploadedHashes.has(sourceHash)) {
+    return;
+  }
+  uploadedHashes.add(sourceHash);
+
+  const payload = result.ok
+    ? { sourceHash, status: "ready" as const, manifest: result.manifest }
+    : {
+        sourceHash,
+        status: "error" as const,
+        diagnostics: result.diagnostics.map(toWireDiagnostic),
+      };
+
+  void managedRuntime
+    .runPromise(VoidhashRpc.use((rpc) => rpc.RecordComponentManifest(payload)))
+    .catch((error: unknown) => {
+      // Best-effort: a failed upload just means a later server read may miss this
+      // manifest and degrade the projection. Roll back the dedup so a retry is
+      // possible on the next compile.
+      uploadedHashes.delete(sourceHash);
+      console.warn(`Failed to upload component manifest ${sourceHash}`, error);
+    });
+}
+
+function toWireDiagnostic(diagnostic: CompileDiagnostic): {
+  message: string;
+  phase?: string;
+  line?: number;
+  column?: number;
+} {
+  return {
+    message: diagnostic.message,
+    phase: diagnostic.phase,
+    line: diagnostic.line,
+    column: diagnostic.column,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-env.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-env.ts
new file mode 100644
index 000000000..167cd2cbb
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-env.ts
@@ -0,0 +1,16 @@
+import editorWorker from "monaco-editor/esm/vs/editor/editor.worker?worker";
+import tsWorker from "monaco-editor/esm/vs/language/typescript/ts.worker?worker";
+
+/**
+ * Wires Monaco's web workers through Vite's `?worker` imports. Side-effect
+ * import — pull it in once before the editor mounts (client-only).
+ * `MonacoEnvironment` is declared globally by monaco-editor's own types.
+ */
+self.MonacoEnvironment = {
+  getWorker(_workerId: string, label: string): Worker {
+    if (label === "typescript" || label === "javascript") {
+      return new tsWorker();
+    }
+    return new editorWorker();
+  },
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-module-resolution.test.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-module-resolution.test.ts
new file mode 100644
index 000000000..f03606b97
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-module-resolution.test.ts
@@ -0,0 +1,301 @@
+import { describe, expect, test } from "vite-plus/test";
+import ts from "typescript";
+
+/**
+ * De-risking regression test for the multi-file paywall code editor.
+ *
+ * We are moving the paywall code editor from a single ambient buffer to a file
+ * tree where `paywall.tsx` imports sibling component files by RELATIVE PATH
+ * (e.g. `import PricingOption from "./components/pricing-option"`), each edited
+ * as its own Monaco model. The load-bearing assumption we must prove BEFORE
+ * building on it: the TypeScript module resolution that Monaco's TS worker
+ * performs over its in-memory file host resolves relative imports between
+ * sibling virtual files keyed by `file:///` URIs — both extensionless and
+ * `.tsx`-suffixed — under the compiler options we ship.
+ *
+ * WHY THIS IS A FAITHFUL MIRROR OF MONACO'S WORKER
+ * ------------------------------------------------
+ * monaco-editor@0.52.2 embeds TypeScript 5.4.5 and, inside its
+ * `ts.worker.js`, stands up a real `ts.createLanguageService(host)` where the
+ * host's file universe is `models ∪ extraLibs`:
+ *   - open models (our per-buffer `file:///<key>.tsx` script files) are the
+ *     ROOT files returned from `getScriptFileNames`;
+ *   - `addExtraLib(...)` files are NOT root files but ARE consulted by the
+ *     host's `fileExists` / `readFile` / `getScriptSnapshot`.
+ * Module resolution is delegated to the embedded TS compiler's default Node
+ * resolver, which probes the host via `fileExists`/`readFile`. This test
+ * reconstructs exactly that host shape in Node and asserts the resolver's
+ * diagnostics, so a green run here means the real worker resolves the same way.
+ *
+ * CAVEAT ON TS VERSION: this test links the workspace `typescript` (currently
+ * 6.0.3) rather than the 5.4.5 that Monaco bundles. Node10 relative resolution
+ * and `allowImportingTsExtensions` (TS >= 5.0) are stable across that range, so
+ * a newer compiler is a strictly-stronger check of the same behavior. If a
+ * future Monaco bump changes its embedded compiler, this test still guards the
+ * resolution contract we depend on.
+ */
+
+/**
+ * Compiler options mirroring today's Monaco setup in `code-editor-pane.tsx`
+ * (`typescriptDefaults.setCompilerOptions`), PLUS the two options the multi-file
+ * design adds: `allowImportingTsExtensions` (so `./x.tsx` imports are legal) and
+ * `noEmit` (already set today, restated here as the resolution config requires
+ * it alongside `allowImportingTsExtensions`).
+ *
+ * The enum numeric values are pinned to what Monaco's `ts.languages.typescript`
+ * enums produce (verified against TS 6.0.3): JsxEmit.ReactJSX=4, ModuleKind
+ * .ESNext=99, ModuleResolutionKind.NodeJs=2 (classic "node10"), ScriptTarget
+ * .ES2020=7. We reference `ts.*` directly so the test tracks the linked
+ * compiler's enums rather than hard-coding integers.
+ */
+const COMPILER_OPTIONS: ts.CompilerOptions = {
+  allowNonTsExtensions: true,
+  esModuleInterop: true,
+  jsx: ts.JsxEmit.ReactJSX,
+  jsxImportSource: "@voidhash/paywalls",
+  module: ts.ModuleKind.ESNext,
+  // Monaco's `ModuleResolutionKind.NodeJs` === TS `NodeJs` (classic node10).
+  moduleResolution: ts.ModuleResolutionKind.NodeJs,
+  noEmit: true,
+  strict: true,
+  target: ts.ScriptTarget.ES2020,
+  // The two additions the multi-file design relies on:
+  allowImportingTsExtensions: true,
+};
+
+/**
+ * Minimal ambient `.d.ts` mimicking the shape `@voidhash/paywalls` exposes via
+ * `jsxImportSource` + the sandbox d.ts, WITHOUT depending on the real package.
+ * It gives JSX a valid runtime and a `Component` type the sibling files export,
+ * so the only thing that can produce TS2307 is a failed module resolution — not
+ * a missing JSX runtime or a missing React-like type.
+ */
+const PAYWALLS_AMBIENT_DTS = `
+declare module "@voidhash/paywalls/jsx-runtime" {
+  export const jsx: any;
+  export const jsxs: any;
+  export const Fragment: any;
+}
+declare module "@voidhash/paywalls" {
+  export interface ComponentProps {
+    label?: string;
+  }
+  export type Component = (props: ComponentProps) => unknown;
+}
+declare namespace JSX {
+  interface Element {}
+  interface IntrinsicElements {
+    [elemName: string]: any;
+  }
+}
+`;
+
+/** A sibling component file, default-exporting a typed React-like component. */
+const PRICING_OPTION_TSX = `
+import type { Component } from "@voidhash/paywalls";
+
+const PricingOption: Component = ({ label }) => <text>{label}</text>;
+
+export default PricingOption;
+`;
+
+const HERO_TSX = `
+import type { Component } from "@voidhash/paywalls";
+
+const Hero: Component = ({ label }) => <view>{label}</view>;
+
+export default Hero;
+`;
+
+/**
+ * The composition buffer. Imports one sibling EXTENSIONLESS and the other with
+ * an explicit `.tsx` suffix, uses both in JSX, and default-exports an object —
+ * matching the printed form the multi-file editor will emit.
+ */
+const PAYWALL_TSX = `
+import PricingOption from "./components/pricing-option";
+import Hero from "./components/hero.tsx";
+
+const Paywall = () => (
+  <view>
+    <Hero label="Welcome" />
+    <PricingOption label="Pro" />
+  </view>
+);
+
+export default { root: Paywall };
+`;
+
+/** URIs mirror the app's `file:///<key>.tsx` model scheme. */
+const PAYWALL_URI = "file:///paywall.tsx";
+const PRICING_OPTION_URI = "file:///components/pricing-option.tsx";
+const HERO_URI = "file:///components/hero.tsx";
+const AMBIENT_URI = "file:///paywalls-sandbox.d.ts";
+
+interface HostFile {
+  content: string;
+  /**
+   * Root files === Monaco open models (returned by `getScriptFileNames`).
+   * Non-root files === `addExtraLib` files (present to `fileExists`/`readFile`
+   * but not enumerated as root files). This is the exact distinction the worker
+   * host draws between `_models` and `_extraLibs`.
+   */
+  root: boolean;
+}
+
+/**
+ * Build a `ts.LanguageService` over an in-memory host shaped like Monaco's TS
+ * worker host. This deliberately mirrors the EXACT method surface the worker's
+ * `TypeScriptWorker` class implements (verified against monaco 0.52.2's
+ * `ts.worker.js`): only
+ *   getCompilationSettings, getScriptFileNames, getScriptVersion,
+ *   getScriptSnapshot, getCurrentDirectory, getDefaultLibFileName,
+ *   fileExists, readFile
+ * are provided. It notably does NOT implement `directoryExists`,
+ * `getDirectories`, or `readDirectory`.
+ *
+ * That omission is load-bearing: if the host DID delegate `directoryExists` to
+ * the real filesystem (`ts.sys.directoryExists`), TS's Node resolver would ask
+ * whether `/components` exists on disk, get `false`, and refuse to probe our
+ * virtual `file:///components/*.tsx` siblings — yielding spurious TS2307. By
+ * omitting directory methods (as the worker does), TS falls back to
+ * `fileExists`-only probing over the in-memory file set, which is what actually
+ * happens in the editor. `getScriptFileNames` returns only ROOT files (open
+ * models); `fileExists`/`readFile`/`getScriptSnapshot` consult the FULL set
+ * (models + extra libs), with a real-FS fallback used ONLY to serve the
+ * compiler's default lib — exactly as the worker serves its bundled libs.
+ */
+function createLanguageService(files: Map<string, HostFile>): ts.LanguageService {
+  const defaultLibFileName = ts.getDefaultLibFilePath(COMPILER_OPTIONS);
+
+  const has = (fileName: string): boolean => files.has(fileName) || ts.sys.fileExists(fileName);
+  const read = (fileName: string): string | undefined => {
+    const local = files.get(fileName);
+    if (local) {
+      return local.content;
+    }
+    return ts.sys.readFile(fileName);
+  };
+
+  const host: ts.LanguageServiceHost = {
+    getCompilationSettings: () => COMPILER_OPTIONS,
+    // Root files only — mirrors `getScriptFileNames` returning open models.
+    getScriptFileNames: () =>
+      [...files.entries()].filter(([, file]) => file.root).map(([name]) => name),
+    getScriptVersion: () => "1",
+    getScriptSnapshot: (fileName) => {
+      const content = read(fileName);
+      return content === undefined ? undefined : ts.ScriptSnapshot.fromString(content);
+    },
+    getCurrentDirectory: () => "/",
+    getDefaultLibFileName: () => defaultLibFileName,
+    fileExists: has,
+    readFile: read,
+    // Intentionally NO directoryExists / getDirectories / readDirectory — see
+    // the doc comment above. This matches the worker's host surface exactly.
+  };
+
+  return ts.createLanguageService(host, ts.createDocumentRegistry());
+}
+
+/** Collect semantic + syntactic diagnostics for a file as `{code, message}`. */
+function diagnosticsFor(service: ts.LanguageService, fileName: string) {
+  return [
+    ...service.getSemanticDiagnostics(fileName),
+    ...service.getSyntacticDiagnostics(fileName),
+  ].map((diagnostic) => ({
+    code: diagnostic.code,
+    message: ts.flattenDiagnosticMessageText(diagnostic.messageText, "\n"),
+  }));
+}
+
+/** TS2307 is "Cannot find module '...'" — the resolution failure we guard against. */
+const CANNOT_FIND_MODULE = 2307;
+
+describe("Monaco TS worker module resolution (paywall multi-file spike)", () => {
+  test("resolves extensionless AND .tsx-suffixed sibling imports when siblings are root models", () => {
+    const files = new Map<string, HostFile>([
+      [AMBIENT_URI, { content: PAYWALLS_AMBIENT_DTS, root: false }],
+      [PAYWALL_URI, { content: PAYWALL_TSX, root: true }],
+      [PRICING_OPTION_URI, { content: PRICING_OPTION_TSX, root: true }],
+      [HERO_URI, { content: HERO_TSX, root: true }],
+    ]);
+
+    const service = createLanguageService(files);
+    const diagnostics = diagnosticsFor(service, PAYWALL_URI);
+    const moduleErrors = diagnostics.filter((d) => d.code === CANNOT_FIND_MODULE);
+
+    // Both `./components/pricing-option` (extensionless) and
+    // `./components/hero.tsx` (.tsx-suffixed) must resolve → zero TS2307.
+    expect(moduleErrors).toEqual([]);
+  });
+
+  test("resolves sibling imports when siblings are EXTRA LIBS (non-root), not open models", () => {
+    // Only the composition buffer is a root model; the components are provided
+    // the way `addExtraLib` provides files — present to the host's fileExists /
+    // readFile but NOT enumerated as root files. This is the case where a
+    // component file is closed in the editor but still referenced.
+    const files = new Map<string, HostFile>([
+      [AMBIENT_URI, { content: PAYWALLS_AMBIENT_DTS, root: false }],
+      [PAYWALL_URI, { content: PAYWALL_TSX, root: true }],
+      [PRICING_OPTION_URI, { content: PRICING_OPTION_TSX, root: false }],
+      [HERO_URI, { content: HERO_TSX, root: false }],
+    ]);
+
+    const service = createLanguageService(files);
+    const diagnostics = diagnosticsFor(service, PAYWALL_URI);
+    const moduleErrors = diagnostics.filter((d) => d.code === CANNOT_FIND_MODULE);
+
+    expect(moduleErrors).toEqual([]);
+  });
+
+  test("a broken relative import DOES produce TS2307 (guards against a vacuous pass)", () => {
+    const brokenPaywall = `
+import Missing from "./components/does-not-exist";
+
+const Paywall = () => <view><Missing /></view>;
+
+export default { root: Paywall };
+`;
+    const files = new Map<string, HostFile>([
+      [AMBIENT_URI, { content: PAYWALLS_AMBIENT_DTS, root: false }],
+      [PAYWALL_URI, { content: brokenPaywall, root: true }],
+      [PRICING_OPTION_URI, { content: PRICING_OPTION_TSX, root: true }],
+      [HERO_URI, { content: HERO_TSX, root: true }],
+    ]);
+
+    const service = createLanguageService(files);
+    const diagnostics = diagnosticsFor(service, PAYWALL_URI);
+    const moduleErrors = diagnostics.filter((d) => d.code === CANNOT_FIND_MODULE);
+
+    expect(moduleErrors.length).toBeGreaterThan(0);
+    expect(moduleErrors[0].message).toContain("./components/does-not-exist");
+  });
+
+  test("the resolved sibling's default export TYPE flows through (not just name resolution)", () => {
+    // Passing a prop of the wrong type to an imported component must surface a
+    // type error — proving resolution returns the real module's types, so
+    // downstream editor features (hover, completions) work across files.
+    const typoPaywall = `
+import PricingOption from "./components/pricing-option";
+
+// \`label\` is \`string | undefined\`; a number must be a type error.
+const Paywall = () => <PricingOption label={123} />;
+
+export default { root: Paywall };
+`;
+    const files = new Map<string, HostFile>([
+      [AMBIENT_URI, { content: PAYWALLS_AMBIENT_DTS, root: false }],
+      [PAYWALL_URI, { content: typoPaywall, root: true }],
+      [PRICING_OPTION_URI, { content: PRICING_OPTION_TSX, root: true }],
+    ]);
+
+    const service = createLanguageService(files);
+    const diagnostics = diagnosticsFor(service, PAYWALL_URI);
+
+    // No resolution failure...
+    expect(diagnostics.filter((d) => d.code === CANNOT_FIND_MODULE)).toEqual([]);
+    // ...but the cross-file type IS enforced (some type-mismatch diagnostic).
+    expect(diagnostics.length).toBeGreaterThan(0);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts
new file mode 100644
index 000000000..d1f9b2ed4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts
@@ -0,0 +1,311 @@
+import type * as monaco from "monaco-editor";
+
+/**
+ * Voidhash-branded Monaco themes for the paywall code editor.
+ *
+ * Colors are the sRGB resolutions of the OKLCH brand palette in
+ * `packages/ui/styles/brand-theme.css`. Syntax hues follow a fixed role→family
+ * mapping (violet keywords, green strings, amber numbers, blue types, fuchsia
+ * regex/escapes, red invalids) so the light and dark variants read as the same
+ * theme at different lightness.
+ *
+ * Scope note: monaco-editor's bundled TypeScript mode ships only the Monarch
+ * grammar and registers no document-semantic-tokens provider, so identifiers
+ * are colored purely lexically — `type.identifier` (any capitalized name: types,
+ * classes, JSX components) vs `identifier` (everything else). Distinct colors
+ * for functions/properties/parameters would require registering a custom
+ * `DocumentSemanticTokensProvider` backed by an extended TS worker that exposes
+ * `getEncodedSemanticClassifications` (encoding: `type = value >> 8`,
+ * `modifiers = value & 255`); the stock worker proxy does not expose it.
+ */
+
+/** Brand palette (subset used by the themes), stored with a leading `#`. */
+const P = {
+  white: "#ffffff",
+  zinc50: "#fafafa",
+  zinc100: "#f4f4f4",
+  zinc200: "#e4e4e4",
+  zinc300: "#d4d4d4",
+  zinc400: "#a0a0a0",
+  zinc500: "#727272",
+  zinc600: "#535353",
+  zinc700: "#404040",
+  zinc800: "#272727",
+  zinc900: "#181818",
+  zinc950: "#101010",
+  blue50: "#edf8ff",
+  blue300: "#83d1ff",
+  blue400: "#48b7ff",
+  blue500: "#1e93ff",
+  blue600: "#0673ff",
+  blue700: "#005eff",
+  blue950: "#0e285d",
+  violet300: "#c0a6ff",
+  violet400: "#a373ff",
+  violet700: "#7000f0",
+  fuchsia300: "#f49cff",
+  fuchsia400: "#ef61ff",
+  fuchsia700: "#ab00cb",
+  red400: "#ff5d78",
+  red500: "#ff244f",
+  red600: "#f00040",
+  orange400: "#ff9d32",
+  orange700: "#cc4902",
+  amber400: "#ffdf1b",
+  amber500: "#ffbf00",
+  amber700: "#bb6802",
+  amber800: "#985008",
+  amber300: "#ffed46",
+  pistachio300: "#dffe58",
+  pistachio400: "#ccf526",
+  pistachio600: "#91bd00",
+  pistachio700: "#658506",
+  pistachio800: "#51690b",
+} as const;
+
+export const VOIDHASH_DARK_THEME = "voidhash-dark";
+export const VOIDHASH_LIGHT_THEME = "voidhash-light";
+
+/**
+ * Per-role syntax colors. Only roles that the Monarch TypeScript grammar
+ * actually emits are represented. Shades differ per variant; roles do not.
+ */
+interface SyntaxRoles {
+  comment: string;
+  keyword: string;
+  string: string;
+  escape: string;
+  number: string;
+  regexp: string;
+  type: string;
+  punctuation: string;
+  variable: string;
+  invalid: string;
+}
+
+/** Monaco token rules expect `RRGGBB` (no leading `#`). */
+const bare = (hex: string): string => hex.replace("#", "");
+
+/**
+ * Builds the token-rule table from a variant's role palette. Every token here
+ * is emitted by monaco's bundled TypeScript Monarch tokenizer.
+ */
+function tokenRules(r: SyntaxRoles): monaco.editor.ITokenThemeRule[] {
+  const rule = (token: string, color: string, fontStyle?: string) =>
+    fontStyle ? { token, foreground: bare(color), fontStyle } : { token, foreground: bare(color) };
+
+  return [
+    // Comments
+    rule("comment", r.comment, "italic"),
+    rule("comment.doc", r.comment, "italic"),
+    // Keywords / storage (const, function, import, typeof, namespace, …)
+    rule("keyword", r.keyword),
+    rule("keyword.other", r.keyword),
+    // Strings
+    rule("string", r.string),
+    rule("string.escape", r.escape),
+    rule("string.invalid", r.invalid),
+    rule("string.escape.invalid", r.invalid),
+    // Numbers
+    rule("number", r.number),
+    rule("number.hex", r.number),
+    rule("number.float", r.number),
+    rule("number.binary", r.number),
+    rule("number.octal", r.number),
+    // Regular expressions
+    rule("regexp", r.regexp),
+    rule("regexp.escape", r.escape),
+    rule("regexp.escape.control", r.escape),
+    rule("regexp.invalid", r.invalid),
+    // Capitalized identifiers: types, classes, enums, JSX component tags
+    rule("type", r.type),
+    rule("type.identifier", r.type),
+    // Punctuation, operators and brackets (all emitted as `delimiter*`)
+    rule("delimiter", r.punctuation),
+    rule("delimiter.bracket", r.punctuation),
+    // Everything else (variables, function names, props, params)
+    rule("identifier", r.variable),
+  ];
+}
+
+const darkRoles: SyntaxRoles = {
+  comment: P.zinc500,
+  keyword: P.violet300,
+  string: P.pistachio300,
+  escape: P.fuchsia400,
+  number: P.amber300,
+  regexp: P.fuchsia300,
+  type: P.blue300,
+  punctuation: P.zinc400,
+  variable: P.zinc100,
+  invalid: P.red400,
+};
+
+const lightRoles: SyntaxRoles = {
+  comment: P.zinc500,
+  keyword: P.violet700,
+  string: P.pistachio800,
+  escape: P.fuchsia700,
+  number: P.amber800,
+  regexp: P.fuchsia700,
+  type: P.blue700,
+  // Distinct from `comment` (also a gray) so delimiters and trailing comments
+  // never collapse to one hue in light mode.
+  punctuation: P.zinc600,
+  variable: P.zinc900,
+  invalid: P.red600,
+};
+
+const darkTheme: monaco.editor.IStandaloneThemeData = {
+  base: "vs-dark",
+  inherit: true,
+  rules: tokenRules(darkRoles),
+  colors: {
+    "editor.background": P.zinc950,
+    "editor.foreground": P.zinc200,
+    "editorCursor.foreground": P.blue500,
+    "editorLineNumber.foreground": P.zinc500,
+    "editorLineNumber.activeForeground": P.zinc200,
+    "editor.lineHighlightBackground": "#18181880",
+    "editor.selectionBackground": "#0d419b66",
+    "editor.inactiveSelectionBackground": "#0d419b33",
+    "editor.selectionHighlightBackground": "#1e93ff26",
+    "editor.wordHighlightBackground": "#1e93ff1f",
+    "editor.wordHighlightStrongBackground": "#0673ff33",
+    "editor.findMatchBackground": "#ffbf0066",
+    "editor.findMatchHighlightBackground": "#ffbf0033",
+    "editorIndentGuide.background1": P.zinc800,
+    "editorIndentGuide.activeBackground1": P.zinc600,
+    "editorWhitespace.foreground": P.zinc800,
+    "editorGutter.background": P.zinc950,
+    "editorBracketMatch.background": "#1e93ff20",
+    "editorBracketMatch.border": P.blue500,
+    "editorBracketHighlight.foreground1": P.blue400,
+    "editorBracketHighlight.foreground2": P.violet400,
+    "editorBracketHighlight.foreground3": P.fuchsia400,
+    "editorBracketHighlight.foreground4": P.amber400,
+    "editorBracketHighlight.foreground5": P.pistachio400,
+    "editorBracketHighlight.foreground6": P.orange400,
+    "editorBracketHighlight.unexpectedBracket.foreground": P.red500,
+    "editorError.foreground": P.red500,
+    "editorWarning.foreground": P.amber500,
+    "editorInfo.foreground": P.blue400,
+    "editorHint.foreground": P.violet400,
+    "editorGutter.modifiedBackground": P.blue500,
+    "editorGutter.addedBackground": P.pistachio600,
+    "editorGutter.deletedBackground": P.red500,
+    "editorWidget.background": P.zinc900,
+    "editorWidget.foreground": P.zinc200,
+    "editorWidget.border": P.zinc800,
+    "editorHoverWidget.background": P.zinc900,
+    "editorHoverWidget.border": P.zinc800,
+    "editorSuggestWidget.background": P.zinc900,
+    "editorSuggestWidget.foreground": P.zinc200,
+    "editorSuggestWidget.border": P.zinc800,
+    "editorSuggestWidget.selectedBackground": P.blue950,
+    "editorSuggestWidget.highlightForeground": P.blue400,
+    "list.hoverBackground": P.zinc800,
+    "list.focusBackground": P.blue950,
+    "input.background": P.zinc800,
+    "input.foreground": P.zinc100,
+    "input.border": P.zinc700,
+    "focusBorder": P.blue600,
+    "scrollbar.shadow": "#00000000",
+    "scrollbarSlider.background": "#40404080",
+    "scrollbarSlider.hoverBackground": "#535353aa",
+    "scrollbarSlider.activeBackground": "#727272aa",
+    "minimap.background": P.zinc950,
+    "editorOverviewRuler.border": "#00000000",
+    "editorOverviewRuler.errorForeground": P.red500,
+    "editorOverviewRuler.warningForeground": P.amber500,
+  },
+};
+
+const lightTheme: monaco.editor.IStandaloneThemeData = {
+  base: "vs",
+  inherit: true,
+  rules: tokenRules(lightRoles),
+  colors: {
+    "editor.background": P.white,
+    "editor.foreground": P.zinc900,
+    "editorCursor.foreground": P.blue600,
+    "editorLineNumber.foreground": P.zinc500,
+    "editorLineNumber.activeForeground": P.zinc700,
+    "editor.lineHighlightBackground": "#f4f4f480",
+    "editor.selectionBackground": "#83d1ff66",
+    "editor.inactiveSelectionBackground": "#83d1ff33",
+    "editor.selectionHighlightBackground": "#0673ff1f",
+    "editor.wordHighlightBackground": "#0673ff17",
+    "editor.wordHighlightStrongBackground": "#0673ff26",
+    "editor.findMatchBackground": "#ffbf0088",
+    "editor.findMatchHighlightBackground": "#ffdf1b66",
+    "editorIndentGuide.background1": P.zinc200,
+    "editorIndentGuide.activeBackground1": P.zinc400,
+    "editorWhitespace.foreground": P.zinc300,
+    "editorGutter.background": P.white,
+    "editorBracketMatch.background": "#0673ff17",
+    "editorBracketMatch.border": P.blue500,
+    "editorBracketHighlight.foreground1": P.blue700,
+    "editorBracketHighlight.foreground2": P.violet700,
+    "editorBracketHighlight.foreground3": P.fuchsia700,
+    "editorBracketHighlight.foreground4": P.amber800,
+    "editorBracketHighlight.foreground5": P.pistachio700,
+    "editorBracketHighlight.foreground6": P.orange700,
+    "editorBracketHighlight.unexpectedBracket.foreground": P.red600,
+    "editorError.foreground": P.red600,
+    "editorWarning.foreground": P.amber700,
+    "editorInfo.foreground": P.blue600,
+    "editorHint.foreground": P.violet700,
+    "editorGutter.modifiedBackground": P.blue500,
+    "editorGutter.addedBackground": P.pistachio700,
+    "editorGutter.deletedBackground": P.red600,
+    "editorWidget.background": P.zinc50,
+    "editorWidget.foreground": P.zinc900,
+    "editorWidget.border": P.zinc200,
+    "editorHoverWidget.background": P.white,
+    "editorHoverWidget.border": P.zinc200,
+    "editorSuggestWidget.background": P.white,
+    "editorSuggestWidget.foreground": P.zinc900,
+    "editorSuggestWidget.border": P.zinc200,
+    "editorSuggestWidget.selectedBackground": P.blue50,
+    "editorSuggestWidget.highlightForeground": P.blue600,
+    "list.hoverBackground": P.zinc100,
+    "list.focusBackground": P.blue50,
+    "input.background": P.white,
+    "input.foreground": P.zinc900,
+    "input.border": P.zinc200,
+    "focusBorder": P.blue500,
+    "scrollbar.shadow": "#00000000",
+    "scrollbarSlider.background": "#a0a0a066",
+    "scrollbarSlider.hoverBackground": "#72727288",
+    "scrollbarSlider.activeBackground": "#53535388",
+    "minimap.background": P.white,
+    "editorOverviewRuler.border": "#00000000",
+    "editorOverviewRuler.errorForeground": P.red600,
+    "editorOverviewRuler.warningForeground": P.amber700,
+  },
+};
+
+let themesDefined = false;
+
+/**
+ * Registers the Voidhash light/dark Monaco themes. Idempotent — safe to call on
+ * every editor mount; the definitions are applied to the shared monaco instance
+ * once.
+ */
+export function defineVoidhashThemes(m: typeof monaco): void {
+  if (themesDefined) {
+    return;
+  }
+  themesDefined = true;
+  m.editor.defineTheme(VOIDHASH_DARK_THEME, darkTheme);
+  m.editor.defineTheme(VOIDHASH_LIGHT_THEME, lightTheme);
+}
+
+/**
+ * Maps a `next-themes` resolved theme to the matching Voidhash Monaco theme.
+ * Defaults to dark (the app's default theme).
+ */
+export function voidhashThemeFor(resolvedTheme: string | undefined): string {
+  return resolvedTheme === "light" ? VOIDHASH_LIGHT_THEME : VOIDHASH_DARK_THEME;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-document.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-document.ts
new file mode 100644
index 000000000..06f68e98f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-document.ts
@@ -0,0 +1,118 @@
+/**
+ * The sandbox iframe document. Rendered via `<iframe sandbox="allow-scripts">`
+ * (no `allow-same-origin` → opaque origin: no cookies, storage, or parent DOM;
+ * CSP `connect-src 'none'` blocks network). The inline bootstrap freezes time,
+ * randomness, `performance.now`, and `requestAnimationFrame` for deterministic
+ * caching, then, per postMessage `render` request: evals the OSS sandbox
+ * runtime IIFE (sets a global), runs the compiled component (CJS) via
+ * `new Function` with a `require` shim that maps every author-importable module
+ * specifier onto the sandbox global's `modules`, extracts the manifest, renders
+ * every preview state to a §3 node tree via the real react-reconciler path
+ * (async), and posts the result back.
+ *
+ * Untrusted code executes via `eval`/`new Function` (hence CSP `'unsafe-eval'`),
+ * but the opaque origin + `connect-src 'none'` are the real isolation: it has
+ * no cookies, no network, and cannot reach the parent DOM — it can only return
+ * data the host re-validates.
+ *
+ * Determinism: the reconciler render mounts, flushes passive effects, and
+ * settles one macrotask. Freezing `Date.now`/`Math.random`/`performance.now`
+ * keeps hook-driven values stable; `requestAnimationFrame` is a deterministic
+ * no-op that NEVER runs its callback (so animation loops can't push
+ * nondeterministic state into the committed tree, and can't leak past settle).
+ *
+ * The bootstrap is authored without backticks or `${` so it embeds safely in
+ * this template literal.
+ */
+const BOOTSTRAP = `
+(function () {
+  try { Date.now = function () { return 1700000000000; }; } catch (e) {}
+  try { Math.random = function () { return 0.42; }; } catch (e) {}
+  try {
+    if (typeof performance !== "undefined") { performance.now = function () { return 0; }; }
+  } catch (e) {}
+  // A deterministic rAF: register an id but never invoke the callback, so no
+  // animation frame runs during (or after) the render settle. cancel is a no-op.
+  try {
+    var rafId = 0;
+    window.requestAnimationFrame = function () { return ++rafId; };
+    window.cancelAnimationFrame = function () {};
+  } catch (e) {}
+
+  var sandbox = null;
+  function ensureSandbox(code) {
+    if (!sandbox) {
+      (0, eval)(code);
+      sandbox = window.__VOIDHASH_PAYWALLS_SANDBOX__;
+    }
+    return sandbox;
+  }
+
+  function toMessage(err) { return err && err.message ? String(err.message) : String(err); }
+
+  function handle(msg) {
+    var runtime = ensureSandbox(msg.sandboxCode);
+    if (!runtime) { throw new Error("sandbox runtime failed to load"); }
+    // Map every author-importable specifier onto the bundled global's modules
+    // (react, react/jsx-runtime, @voidhash/paywalls, its jsx runtimes, …).
+    var requireShim = function (specifier) {
+      var mod = runtime.modules[specifier];
+      if (mod === undefined) { throw new Error("Cannot find module '" + specifier + "'"); }
+      return mod;
+    };
+    var moduleObj = { exports: {} };
+    var factory = new Function("require", "module", "exports", msg.compiledCode);
+    factory(requireShim, moduleObj, moduleObj.exports);
+
+    var definition = moduleObj.exports && (moduleObj.exports.default || moduleObj.exports.definition);
+    if (!definition || typeof definition.render !== "function") {
+      throw new Error("Component must export a default defineComponent({ ... })");
+    }
+
+    // describeComponent returns the strict §2 manifest plus a sibling hasPanel
+    // flag (whether the definition declared a custom editor panel); the panel
+    // function itself never crosses the boundary — only the flag does.
+    var described = runtime.describeComponent(definition);
+    var manifest = described.manifest;
+    var hasPanel = described.hasPanel;
+    var states = (manifest.previewStates && manifest.previewStates.length)
+      ? manifest.previewStates : ["default"];
+    var previewTrees = {};
+    var chain = Promise.resolve();
+    states.forEach(function (state) {
+      chain = chain.then(function () {
+        var fixture = (definition.previews && definition.previews[state]) || {};
+        var hostData = Object.assign({}, runtime.defaultHostData(), fixture.data || {});
+        return runtime.renderComponentToTree(definition, {
+          state: state, props: fixture.props, hostData: hostData
+        }).then(function (tree) { previewTrees[state] = tree; });
+      });
+    });
+    return chain.then(function () {
+      parent.postMessage({ type: "result", requestId: msg.requestId, ok: true,
+        manifest: manifest, hasPanel: hasPanel, previewTrees: previewTrees }, "*");
+    });
+  }
+
+  window.addEventListener("message", function (event) {
+    var msg = event.data;
+    if (!msg || msg.type !== "render") { return; }
+    Promise.resolve().then(function () { return handle(msg); }).catch(function (err) {
+      parent.postMessage({ type: "result", requestId: msg.requestId, ok: false,
+        error: toMessage(err) }, "*");
+    });
+  });
+
+  parent.postMessage({ type: "ready" }, "*");
+})();
+`;
+
+export const SANDBOX_DOCUMENT = `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; connect-src 'none';">
+<script>${BOOTSTRAP}</script>
+</head>
+<body></body>
+</html>`;
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-host.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-host.ts
new file mode 100644
index 000000000..dd6d58f26
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/sandbox-host.ts
@@ -0,0 +1,304 @@
+import {
+  ComponentManifestSchema,
+  countSlotNodes,
+  PreviewTreeSchema,
+  SIZE_CAPS,
+  strictParseOptions,
+  type ComponentManifest,
+  type PreviewTree,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { sandboxRuntimeBundle } from "@voidhash/paywalls/sandbox-bundle";
+import { Schema } from "effect";
+
+import { SANDBOX_DOCUMENT } from "./sandbox-document";
+
+const decodeManifest = Schema.decodeUnknownSync(ComponentManifestSchema, strictParseOptions);
+const decodeTree = Schema.decodeUnknownSync(PreviewTreeSchema, strictParseOptions);
+
+const RENDER_TIMEOUT_MS = 4000;
+const READY_TIMEOUT_MS = 6000;
+
+export type SandboxOutcome =
+  | {
+      ok: true;
+      manifest: ComponentManifest;
+      previewTrees: Record<string, PreviewTree>;
+      /** Whether the definition declared a custom editor panel (sibling of `manifest`). */
+      hasPanel: boolean;
+    }
+  | { ok: false; error: string };
+
+interface RawResult {
+  requestId: string;
+  ok: boolean;
+  error?: string;
+  manifest?: unknown;
+  hasPanel?: unknown;
+  previewTrees?: Record<string, unknown>;
+}
+
+interface IncomingMessage {
+  type?: string;
+  requestId?: string;
+  ok?: boolean;
+  error?: string;
+  manifest?: unknown;
+  hasPanel?: unknown;
+  previewTrees?: Record<string, unknown>;
+}
+
+/** One queued render request awaiting its turn on the single iframe. */
+interface QueuedRender {
+  readonly compiledCode: string;
+  readonly resolve: (result: SandboxOutcome) => void;
+}
+
+/**
+ * Manages the hidden sandbox iframe that executes compiled components. The host
+ * trusts nothing the sandbox returns: every preview tree is strict-decoded,
+ * size-capped, and slot-checked; the manifest is decoded against §2. Hung
+ * renders are killed by a watchdog that restarts the iframe.
+ *
+ * All renders are serialized through an in-host FIFO queue with at most one
+ * in-flight render, because the studio fires a `compile()` per changed
+ * component definition without awaiting. A single hung render must fail ONLY
+ * itself: its watchdog rejects just the in-flight request and restarts the
+ * iframe, then the queue keeps draining against the fresh iframe. Without the
+ * queue, one hung render's restart would reject every concurrent sibling.
+ */
+export class SandboxHost {
+  private iframe: HTMLIFrameElement | null = null;
+  private readyPromise: Promise<void> | null = null;
+  private readyResolve: (() => void) | null = null;
+  private counter = 0;
+  private destroyed = false;
+  /**
+   * Set synchronously while `pump` owns the drain — including across the `await`
+   * on the ready race, before `inFlight` is assigned — so a concurrent `render`
+   * call can never shift a second job onto the iframe.
+   */
+  private pumping = false;
+  private readonly queue: QueuedRender[] = [];
+  /** The single in-flight render, or null when idle. */
+  private inFlight: {
+    readonly requestId: string;
+    readonly resolve: (result: SandboxOutcome) => void;
+    readonly timer: ReturnType<typeof setTimeout>;
+  } | null = null;
+
+  render(compiledCode: string): Promise<SandboxOutcome> {
+    if (this.destroyed || typeof document === "undefined") {
+      return Promise.resolve({ error: "sandbox unavailable", ok: false });
+    }
+    return new Promise<SandboxOutcome>((resolve) => {
+      this.queue.push({ compiledCode, resolve });
+      void this.pump();
+    });
+  }
+
+  /**
+   * Drains the queue one render at a time. Re-entrant calls are no-ops while a
+   * render is in flight; the completion/timeout paths re-invoke `pump` to pick
+   * up the next queued request.
+   */
+  private async pump(): Promise<void> {
+    if (this.pumping || this.inFlight || this.destroyed) {
+      return;
+    }
+    const next = this.queue.shift();
+    if (!next) {
+      return;
+    }
+    this.pumping = true;
+
+    // Resolve this job, release the drain lock, and pick up the next queued
+    // render. Every non-dispatch exit routes through here so `pumping` is always
+    // cleared and the queue keeps draining.
+    const finishWithout = (outcome: SandboxOutcome): void => {
+      next.resolve(outcome);
+      this.pumping = false;
+      void this.pump();
+    };
+
+    if (!this.iframe) {
+      this.mount();
+    }
+    if (!this.iframe || !this.readyPromise) {
+      finishWithout({ error: "sandbox unavailable", ok: false });
+      return;
+    }
+
+    // Bound the ready wait: a sandbox that never signals ready (blocked load /
+    // CSP) must surface an error, not hang the whole compile forever. Restart so
+    // the NEXT queued render gets a fresh attempt.
+    const ready = await Promise.race([
+      this.readyPromise.then(() => true),
+      new Promise<boolean>((resolve) => setTimeout(() => resolve(false), READY_TIMEOUT_MS)),
+    ]);
+    if (this.destroyed) {
+      // Destroyed mid-await: this job was already shifted off the queue, so
+      // `destroy` never saw it — resolve it here so its caller isn't stranded.
+      next.resolve({ error: "sandbox destroyed", ok: false });
+      this.pumping = false;
+      return;
+    }
+    if (!ready) {
+      this.restartIframe();
+      finishWithout({ error: "component sandbox failed to initialize", ok: false });
+      return;
+    }
+
+    const target = this.iframe?.contentWindow;
+    if (!target) {
+      finishWithout({ error: "sandbox unavailable", ok: false });
+      return;
+    }
+
+    const requestId = String((this.counter += 1));
+    const timer = setTimeout(() => {
+      // Reject ONLY the in-flight request, then restart the iframe and keep
+      // draining — sibling renders queued behind a hung one still run.
+      this.inFlight = null;
+      this.restartIframe();
+      next.resolve({ error: "component render timed out", ok: false });
+      void this.pump();
+    }, RENDER_TIMEOUT_MS);
+    this.inFlight = { requestId, resolve: next.resolve, timer };
+    // The render is now in flight; `inFlight` guards re-entry, so release the
+    // synchronous drain lock. The result/timeout paths re-invoke `pump`.
+    this.pumping = false;
+    target.postMessage(
+      { compiledCode: next.compiledCode, requestId, sandboxCode: sandboxRuntimeBundle, type: "render" },
+      "*",
+    );
+  }
+
+  destroy(): void {
+    this.destroyed = true;
+    if (this.inFlight) {
+      clearTimeout(this.inFlight.timer);
+      this.inFlight.resolve({ error: "sandbox destroyed", ok: false });
+      this.inFlight = null;
+    }
+    for (const queued of this.queue.splice(0)) {
+      queued.resolve({ error: "sandbox destroyed", ok: false });
+    }
+    this.teardown();
+  }
+
+  private mount(): void {
+    if (typeof document === "undefined") {
+      return;
+    }
+    const iframe = document.createElement("iframe");
+    iframe.setAttribute("sandbox", "allow-scripts");
+    iframe.setAttribute("aria-hidden", "true");
+    iframe.title = "Paywall component sandbox";
+    iframe.style.display = "none";
+    iframe.srcdoc = SANDBOX_DOCUMENT;
+    this.readyPromise = new Promise((resolve) => {
+      this.readyResolve = resolve;
+    });
+    window.addEventListener("message", this.handleMessage);
+    document.body.appendChild(iframe);
+    this.iframe = iframe;
+  }
+
+  private readonly handleMessage = (event: MessageEvent): void => {
+    if (!this.iframe || event.source !== this.iframe.contentWindow) {
+      return;
+    }
+    const data = event.data as IncomingMessage;
+    if (data.type === "ready") {
+      this.readyResolve?.();
+      return;
+    }
+    if (data.type === "result" && typeof data.requestId === "string") {
+      const entry = this.inFlight;
+      // Ignore results that don't match the current in-flight request — a stale
+      // message from an iframe restarted after its watchdog fired.
+      if (!entry || entry.requestId !== data.requestId) {
+        return;
+      }
+      clearTimeout(entry.timer);
+      this.inFlight = null;
+      entry.resolve(
+        this.validate({
+          error: data.error,
+          manifest: data.manifest,
+          hasPanel: data.hasPanel,
+          ok: data.ok ?? false,
+          previewTrees: data.previewTrees,
+          requestId: data.requestId,
+        }),
+      );
+      void this.pump();
+    }
+  };
+
+  private validate(raw: RawResult): SandboxOutcome {
+    if (!raw.ok) {
+      return { error: raw.error ?? "unknown render error", ok: false };
+    }
+    let manifest: ComponentManifest;
+    try {
+      manifest = decodeManifest(raw.manifest);
+    } catch (error) {
+      return { error: `invalid manifest: ${errorMessage(error)}`, ok: false };
+    }
+    const previewTrees: Record<string, PreviewTree> = {};
+    for (const [state, tree] of Object.entries(raw.previewTrees ?? {})) {
+      previewTrees[state] = validateTree(tree, state);
+    }
+    // `hasPanel` is host-only preview metadata (not part of the strict manifest
+    // schema): coerce to a plain boolean, defaulting false for older guests.
+    return { hasPanel: raw.hasPanel === true, manifest, ok: true, previewTrees };
+  }
+
+  /**
+   * Tears down and re-mounts the iframe WITHOUT touching the queue or the
+   * in-flight request — the caller (a render watchdog or ready timeout) has
+   * already resolved the one request it is failing. Subsequent queued renders
+   * run against the fresh iframe.
+   */
+  private restartIframe(): void {
+    this.teardown();
+    if (!this.destroyed) {
+      this.mount();
+    }
+  }
+
+  private teardown(): void {
+    if (typeof window !== "undefined") {
+      window.removeEventListener("message", this.handleMessage);
+    }
+    this.iframe?.remove();
+    this.iframe = null;
+    this.readyPromise = null;
+    this.readyResolve = null;
+  }
+}
+
+function validateTree(tree: unknown, state: string): PreviewTree {
+  try {
+    const size = new TextEncoder().encode(JSON.stringify(tree)).byteLength;
+    if (size > SIZE_CAPS.previewTree) {
+      throw new Error("preview tree exceeds size cap");
+    }
+    const decoded = decodeTree(tree);
+    if (countSlotNodes(decoded.root) > 1) {
+      throw new Error("a component may declare at most one <Slot />");
+    }
+    return decoded;
+  } catch (error) {
+    return {
+      root: { reason: `invalid preview: ${errorMessage(error)}`, type: "placeholder" },
+      state,
+      treeVersion: 1,
+    };
+  }
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/scaffold.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/scaffold.ts
new file mode 100644
index 000000000..fc4b3c684
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/scaffold.ts
@@ -0,0 +1,32 @@
+/** Starter source for a newly created code component — compiles + previews immediately. */
+export const SCAFFOLD_SOURCE = `import { defineComponent, View, Text, Slot } from "@voidhash/paywalls";
+
+export default defineComponent({
+  props: (p) => ({
+    title: p.string().default("Hello"),
+    accentColor: p.string().editor("color").default("#6366f1"),
+  }),
+  previews: {
+    default: {},
+  },
+  render: ({ props }) => (
+    <View
+      style={{
+        paddingTop: 16,
+        paddingRight: 16,
+        paddingBottom: 16,
+        paddingLeft: 16,
+        gap: 8,
+        backgroundColor: props.accentColor,
+        borderTopLeftRadius: 12,
+        borderTopRightRadius: 12,
+        borderBottomRightRadius: 12,
+        borderBottomLeftRadius: 12,
+      }}
+    >
+      <Text style={{ color: "white", fontSize: 18, fontWeight: "700" }}>{props.title}</Text>
+      <Slot />
+    </View>
+  ),
+});
+`;
diff --git a/apps/www/src/features/studio/paywalls/designer/components/component-preview/preview-tree-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/components/component-preview/preview-tree-renderer.tsx
new file mode 100644
index 000000000..9a1732b14
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/component-preview/preview-tree-renderer.tsx
@@ -0,0 +1,75 @@
+"use client";
+
+import {
+  buildPreviewNodeStyles,
+  previewResizeModeToObjectFit,
+  type PreviewNode,
+  type PreviewTree,
+} from "@voidhash/paywall-renderer-web-core";
+import type { ReactNode } from "react";
+
+export interface PreviewTreeRendererProps {
+  tree: PreviewTree;
+  /** Rendered in place of the tree's `slot` marker (defaults to nothing). */
+  renderSlot?: (() => ReactNode) | undefined;
+}
+
+function PreviewNodeView({
+  node,
+  renderSlot,
+}: {
+  node: PreviewNode;
+  renderSlot: (() => ReactNode) | undefined;
+}): ReactNode {
+  switch (node.type) {
+    case "view":
+    case "pressable":
+    case "scroll":
+      return (
+        <div style={buildPreviewNodeStyles(node.style, node.type, node.motion)}>
+          {node.children.map((child, index) => (
+            <PreviewNodeView
+              // biome-ignore lint/suspicious/noArrayIndexKey: preview trees are immutable per contentHash+state
+              key={index}
+              node={child}
+              renderSlot={renderSlot}
+            />
+          ))}
+        </div>
+      );
+    case "text":
+      return <div style={buildPreviewNodeStyles(node.style, "text", node.motion)}>{node.text}</div>;
+    case "image":
+      return (
+        <img
+          alt=""
+          src={node.src}
+          style={{
+            ...buildPreviewNodeStyles(node.style, "image", node.motion),
+            objectFit: previewResizeModeToObjectFit(node.resizeMode),
+          }}
+        />
+      );
+    case "slot":
+      return renderSlot?.() ?? null;
+    case "placeholder":
+      return (
+        <div className="inline-flex max-w-full items-center self-start truncate rounded-sm bg-muted px-1.5 py-0.5 text-[10px] text-muted-foreground">
+          {node.reason}
+        </div>
+      );
+    default:
+      return null;
+  }
+}
+
+/**
+ * Pure presentational recursive renderer over a contract §3 preview tree
+ * (trusted, fixture-rendered output of a deployed component). Pressables are
+ * inert; the `slot` marker delegates to `renderSlot`. No data fetching, no
+ * selection logic — wrapping renderers (canvas node renderer, library
+ * thumbnails) add those concerns.
+ */
+export function PreviewTreeRenderer({ tree, renderSlot }: PreviewTreeRendererProps) {
+  return <PreviewNodeView node={tree.root} renderSlot={renderSlot} />;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/component-preview/use-preview-tree.ts b/apps/www/src/features/studio/paywalls/designer/components/component-preview/use-preview-tree.ts
new file mode 100644
index 000000000..a177d0266
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/component-preview/use-preview-tree.ts
@@ -0,0 +1,45 @@
+"use client";
+
+import { queryOptions, useQuery, type UseQueryResult } from "@tanstack/react-query";
+import { Schema } from "effect";
+import { PreviewTreeSchema } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { PreviewTree } from "@voidhash/paywall-renderer-web-core";
+
+const decodePreviewTree = Schema.decodeUnknownSync(PreviewTreeSchema);
+
+export interface ComponentPreviewTreeOptions {
+  contentHash: string;
+  state: string;
+  /** Server-constructed `…/c/<contentHash>` base, no trailing slash. */
+  artifactBaseUrl: string;
+}
+
+/**
+ * Query factory for a component preview tree artifact
+ * (`<artifactBaseUrl>/previews/<state>.json`). Artifacts are immutable per
+ * contentHash, hence `staleTime: Infinity`. Fetch rejections and decode
+ * failures surface as query errors — consumers render a placeholder for both
+ * (the route cannot distinguish 404 from network failure).
+ */
+export const componentPreviewTreeOptions = (options: ComponentPreviewTreeOptions) =>
+  queryOptions({
+    queryFn: async (): Promise<PreviewTree> => {
+      const response = await fetch(`${options.artifactBaseUrl}/previews/${options.state}.json`);
+      if (!response.ok) {
+        throw new Error(
+          `Failed to fetch preview tree ${options.contentHash}/${options.state}: ${response.status}`,
+        );
+      }
+      return decodePreviewTree(await response.json());
+    },
+    queryKey: ["componentPreviewTree", options.contentHash, options.state],
+    retry: 1,
+    staleTime: Number.POSITIVE_INFINITY,
+  });
+
+/** Hook form of {@link componentPreviewTreeOptions}. */
+export function useComponentPreviewTree(
+  options: ComponentPreviewTreeOptions,
+): UseQueryResult<PreviewTree> {
+  return useQuery(componentPreviewTreeOptions(options));
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/designer-context-menu.tsx b/apps/www/src/features/studio/paywalls/designer/components/designer-context-menu.tsx
new file mode 100644
index 000000000..438a61941
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/designer-context-menu.tsx
@@ -0,0 +1,250 @@
+"use client";
+
+/**
+ * Designer Context Menu Component.
+ *
+ * Renders a context menu with actions from the registry, organized by groups.
+ * Used for both canvas nodes and layers panel items.
+ */
+
+import {
+  ContextMenu,
+  ContextMenuContent,
+  ContextMenuItem,
+  ContextMenuSeparator,
+  ContextMenuShortcut,
+  ContextMenuTrigger,
+} from "@voidhash/ui";
+import { Fragment, useCallback, useMemo, useRef } from "react";
+import { useContextMenuContext } from "../hooks/use-context-menu-context";
+import { isMacPlatform } from "../utils/platform";
+import { contextMenuRegistry, initializeContextMenuActions } from "../state/context-menu";
+import type {
+  ActionGroup,
+  ContextMenuContext as ContextMenuContextType,
+  ResolvedAction,
+} from "../state/context-menu/types";
+import { usePaywallDesignerActions } from "../state/designer-store";
+
+// =============================================================================
+// Initialize Actions
+// =============================================================================
+
+// Ensure actions are registered when this module loads
+initializeContextMenuActions();
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Format a keyboard shortcut for display.
+ */
+function formatShortcut(shortcut: { key: string; modKey?: boolean; shiftKey?: boolean }): string {
+  const parts: string[] = [];
+  const isMac = isMacPlatform();
+
+  if (shortcut.modKey) {
+    parts.push(isMac ? "\u2318" : "Ctrl");
+  }
+  if (shortcut.shiftKey) {
+    parts.push(isMac ? "\u21E7" : "Shift");
+  }
+
+  // Format key
+  let keyDisplay = shortcut.key;
+  if (keyDisplay === "Backspace") {
+    keyDisplay = isMac ? "\u232B" : "Del";
+  } else if (keyDisplay === "Delete") {
+    keyDisplay = isMac ? "\u2326" : "Del";
+  } else if (keyDisplay === "Escape") {
+    keyDisplay = "Esc";
+  } else {
+    keyDisplay = keyDisplay.toUpperCase();
+  }
+
+  parts.push(keyDisplay);
+
+  return isMac ? parts.join("") : parts.join("+");
+}
+
+// =============================================================================
+// Components
+// =============================================================================
+
+interface ContextMenuItemRowProps {
+  resolved: ResolvedAction;
+  onSelect: () => void;
+}
+
+function ContextMenuItemRow({ resolved, onSelect }: ContextMenuItemRowProps) {
+  const { action, isEnabled } = resolved;
+
+  return (
+    <ContextMenuItem disabled={!isEnabled} onSelect={onSelect}>
+      <span>{action.label}</span>
+      {action.shortcut && (
+        <ContextMenuShortcut>{formatShortcut(action.shortcut)}</ContextMenuShortcut>
+      )}
+    </ContextMenuItem>
+  );
+}
+
+// =============================================================================
+// Main Component
+// =============================================================================
+
+export interface DesignerContextMenuProps {
+  /** The trigger element (will be wrapped) */
+  children: React.ReactNode;
+  /** Build params for context when menu opens */
+  source: "canvas" | "layers-panel";
+  /** ID of the node being right-clicked (null for background) */
+  nodeId?: string | null;
+  /** Callback when context menu opens */
+  onOpenChange?: (open: boolean) => void;
+}
+
+/**
+ * Context menu wrapper for designer elements.
+ *
+ * Context is built lazily when the menu opens to avoid unnecessary re-renders.
+ *
+ * @example
+ * ```tsx
+ * <DesignerContextMenu source="canvas" nodeId={nodeId}>
+ *   <div>Right-click me</div>
+ * </DesignerContextMenu>
+ * ```
+ */
+export function DesignerContextMenu({
+  children,
+  source,
+  nodeId = null,
+  onOpenChange,
+}: DesignerContextMenuProps) {
+  const dispatch = usePaywallDesignerActions();
+  const { buildContext } = useContextMenuContext();
+
+  // Use a ref to store context - this avoids async state timing issues
+  // The ref is updated synchronously when the menu opens
+  const contextRef = useRef<ContextMenuContextType | null>(null);
+
+  // Build context and get grouped actions synchronously
+  // This is called during render when the menu is open
+  const getMenuContent = useCallback(() => {
+    const context = buildContext({
+      source,
+      clickedNodeId: nodeId,
+      canvasPosition: null, // Canvas position not currently used by actions
+    });
+    contextRef.current = context;
+    return contextMenuRegistry.getGroupedActions(context);
+  }, [buildContext, source, nodeId]);
+
+  const handleOpenChange = useCallback(
+    (open: boolean) => {
+      if (!open) {
+        contextRef.current = null;
+      }
+      onOpenChange?.(open);
+    },
+    [onOpenChange],
+  );
+
+  // Create execute handler using the ref context
+  const createExecuteHandler = useCallback(
+    (resolved: ResolvedAction) => () => {
+      if (!resolved.isEnabled || !contextRef.current) {
+        return;
+      }
+      try {
+        resolved.action.execute(contextRef.current, dispatch);
+      } catch (error) {
+        console.error(`[ContextMenu] Action "${resolved.action.id}" failed:`, error);
+      }
+    },
+    [dispatch],
+  );
+
+  // Get grouped actions - computed fresh each render when menu is visible
+  const groupedActions = useMemo(() => getMenuContent(), [getMenuContent]);
+
+  return (
+    <ContextMenu onOpenChange={handleOpenChange}>
+      <ContextMenuTrigger asChild>{children}</ContextMenuTrigger>
+      <ContextMenuContent className="w-56">
+        {groupedActions.map(([groupId, actions], groupIndex) => (
+          <Fragment key={groupId}>
+            {groupIndex > 0 && <ContextMenuSeparator />}
+            {actions.map((resolved) => (
+              <ContextMenuItemRow
+                key={resolved.action.id}
+                onSelect={createExecuteHandler(resolved)}
+                resolved={resolved}
+              />
+            ))}
+          </Fragment>
+        ))}
+      </ContextMenuContent>
+    </ContextMenu>
+  );
+}
+
+// =============================================================================
+// Standalone Content Component
+// =============================================================================
+
+export interface DesignerContextMenuContentProps {
+  /** The context to use for action visibility/enablement */
+  context: ContextMenuContextType;
+}
+
+/**
+ * Standalone context menu content for manual control.
+ *
+ * Use this when you need more control over the context menu trigger,
+ * such as with imperative context menu positioning.
+ */
+export function DesignerContextMenuContent({ context }: DesignerContextMenuContentProps) {
+  const dispatch = usePaywallDesignerActions();
+
+  // Get grouped actions - computed once per context change
+  const groupedActions = useMemo(() => contextMenuRegistry.getGroupedActions(context), [context]);
+
+  // Create execute handler
+  const createExecuteHandler = useCallback(
+    (resolved: ResolvedAction) => () => {
+      if (!resolved.isEnabled) {
+        return;
+      }
+      try {
+        resolved.action.execute(context, dispatch);
+      } catch (error) {
+        console.error(`[ContextMenu] Action "${resolved.action.id}" failed:`, error);
+      }
+    },
+    [context, dispatch],
+  );
+
+  if (groupedActions.length === 0) {
+    return null;
+  }
+
+  return (
+    <ContextMenuContent className="w-56">
+      {groupedActions.map(([groupId, actions], groupIndex) => (
+        <Fragment key={groupId}>
+          {groupIndex > 0 && <ContextMenuSeparator />}
+          {actions.map((resolved) => (
+            <ContextMenuItemRow
+              key={resolved.action.id}
+              onSelect={createExecuteHandler(resolved)}
+              resolved={resolved}
+            />
+          ))}
+        </Fragment>
+      ))}
+    </ContextMenuContent>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx b/apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx
new file mode 100644
index 000000000..9d3d45a2f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx
@@ -0,0 +1,95 @@
+"use client";
+
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+} from "@voidhash/ui";
+import { CheckCircle2Icon, ExternalLinkIcon, Loader2Icon } from "lucide-react";
+
+interface PublishConfirmationDialogProps {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  onConfirm: () => void;
+  isPublishing: boolean;
+  draftVersion?: number;
+  publishedUrl?: string;
+}
+
+export function PublishConfirmationDialog({
+  open,
+  onOpenChange,
+  onConfirm,
+  isPublishing,
+  draftVersion,
+  publishedUrl,
+}: PublishConfirmationDialogProps) {
+  const isPublished = !!publishedUrl;
+
+  return (
+    <AlertDialog open={open} onOpenChange={onOpenChange}>
+      <AlertDialogContent>
+        <AlertDialogHeader>
+          <AlertDialogTitle>
+            {isPublished ? "Paywall Published" : "Publish Paywall"}
+          </AlertDialogTitle>
+          <AlertDialogDescription asChild>
+            {isPublished ? (
+              <div className="space-y-3">
+                <div className="flex items-center gap-2 text-green-600">
+                  <CheckCircle2Icon className="size-5" />
+                  <span>Version {draftVersion} is now live!</span>
+                </div>
+                <div className="rounded-md border bg-muted/50 p-3">
+                  <p className="mb-1 text-xs font-medium text-muted-foreground">Preview URL</p>
+                  <a
+                    href={publishedUrl}
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    className="flex items-center gap-1 text-sm text-primary hover:underline"
+                  >
+                    <span className="truncate">{publishedUrl}</span>
+                    <ExternalLinkIcon className="size-3 shrink-0" />
+                  </a>
+                </div>
+              </div>
+            ) : (
+              <div>
+                This paywall will be rolled out to all users.
+                {draftVersion !== undefined && (
+                  <span className="mt-2 block text-xs text-muted-foreground">
+                    Version {draftVersion}
+                  </span>
+                )}
+              </div>
+            )}
+          </AlertDialogDescription>
+        </AlertDialogHeader>
+        <AlertDialogFooter>
+          {isPublished ? (
+            <AlertDialogAction onClick={() => onOpenChange(false)}>Done</AlertDialogAction>
+          ) : (
+            <>
+              <AlertDialogCancel disabled={isPublishing}>Cancel</AlertDialogCancel>
+              <AlertDialogAction onClick={onConfirm} disabled={isPublishing}>
+                {isPublishing ? (
+                  <>
+                    <Loader2Icon className="mr-2 size-4 animate-spin" />
+                    Publishing...
+                  </>
+                ) : (
+                  "Publish"
+                )}
+              </AlertDialogAction>
+            </>
+          )}
+        </AlertDialogFooter>
+      </AlertDialogContent>
+    </AlertDialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx
new file mode 100644
index 000000000..e36362e72
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx
@@ -0,0 +1,83 @@
+"use client";
+
+import { Button, Card } from "@voidhash/ui";
+import { MinusIcon, PlusIcon } from "lucide-react";
+
+import {
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSubSectionTitle,
+} from "../ui/panel-section";
+import { PredicateEditor } from "./predicate-editor";
+import type { CRDTVariable, LocalConjunction, LocalPredicate } from "./types";
+
+interface ConjunctionEditorProps {
+  conjunction: LocalConjunction;
+  onRemove: () => void;
+  onAddPredicate: () => void;
+  onRemovePredicate: (predicateIndex: number) => void;
+  onUpdatePredicate: (predicateIndex: number, predicate: LocalPredicate) => void;
+  canRemove: boolean;
+  variables: readonly CRDTVariable[];
+}
+
+/**
+ * Editor for a single conjunction (AND group) containing multiple predicates.
+ * Displayed as a card with "IF ALL OF THESE ARE TRUE" header.
+ */
+export function ConjunctionEditor({
+  conjunction,
+  onRemove,
+  onAddPredicate,
+  onRemovePredicate,
+  onUpdatePredicate,
+  canRemove,
+  variables,
+}: ConjunctionEditorProps) {
+  return (
+    <Card className="w-full gap-0 p-0 py-0">
+      <PanelSectionHeader className="px-3 py-2">
+        <PanelSubSectionTitle>IF ALL OF THESE ARE TRUE</PanelSubSectionTitle>
+        <PanelSectionHeaderActions>
+          <Button
+            onClick={onAddPredicate}
+            size="icon-sm"
+            title="Add condition"
+            variant="secondary"
+          >
+            <PlusIcon />
+          </Button>
+          {canRemove && (
+            <Button
+              onClick={onRemove}
+              size="icon-sm"
+              title="Remove this group"
+              variant="ghost"
+            >
+              <MinusIcon />
+            </Button>
+          )}
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+
+      <div className="flex flex-col gap-2 px-3 pb-3">
+        {conjunction.value.length === 0 ? (
+          <div className="py-4 text-center text-muted-foreground text-xs">
+            No conditions - always true
+          </div>
+        ) : (
+          conjunction.value.map((predicate, predicateIndex) => (
+            <PredicateEditor
+              canRemove={conjunction.value.length > 1}
+              key={`${predicate.type}-${predicate.value.left.type}-${predicateIndex}`}
+              onChange={(p) => onUpdatePredicate(predicateIndex, p)}
+              onRemove={() => onRemovePredicate(predicateIndex)}
+              predicate={predicate}
+              variables={variables}
+            />
+          ))
+        )}
+      </div>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/crdt-variable-selector.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/crdt-variable-selector.tsx
new file mode 100644
index 000000000..2e2be73b4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/crdt-variable-selector.tsx
@@ -0,0 +1,64 @@
+"use client";
+
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@voidhash/ui";
+import { useMemo } from "react";
+
+import type { CRDTVariable } from "./types";
+
+interface CRDTVariableSelectorProps {
+  variableId: string | null;
+  onChange: (variableId: string) => void;
+  variables: readonly CRDTVariable[];
+  placeholder?: string;
+  className?: string;
+}
+
+/**
+ * Variable selector that works with CRDT variable format.
+ * Used for the left side of predicates (always a variable reference).
+ */
+export function CRDTVariableSelector({
+  variableId,
+  onChange,
+  variables,
+  placeholder = "Select...",
+  className,
+}: CRDTVariableSelectorProps) {
+  const currentVariable = useMemo(() => {
+    if (!variableId) {
+      return null;
+    }
+    return variables.find((v) => v.id === variableId) ?? null;
+  }, [variableId, variables]);
+
+  return (
+    <Select onValueChange={onChange} value={variableId ?? ""}>
+      <SelectTrigger className={className ?? "h-7 min-w-28 text-xs"} size="sm">
+        <SelectValue placeholder={placeholder}>
+          {currentVariable ? (
+            <>
+              {currentVariable.value.name}
+              {currentVariable.ownerLabel ? (
+                <span className="ml-1 text-muted-foreground">
+                  from {currentVariable.ownerLabel}
+                </span>
+              ) : null}
+            </>
+          ) : (
+            placeholder
+          )}
+        </SelectValue>
+      </SelectTrigger>
+      <SelectContent>
+        {variables.map((variable) => (
+          <SelectItem key={variable.id} value={variable.id}>
+            <span>{variable.value.name}</span>
+            {variable.ownerLabel ? (
+              <span className="text-muted-foreground text-xs">from {variable.ownerLabel}</span>
+            ) : null}
+          </SelectItem>
+        ))}
+      </SelectContent>
+    </Select>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx
new file mode 100644
index 000000000..15c1e8162
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx
@@ -0,0 +1,72 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import { PlusIcon } from "lucide-react";
+
+import { ConjunctionEditor } from "./conjunction-editor";
+import type { CRDTVariable, LocalDNF, LocalPredicate } from "./types";
+
+interface DNFEditorProps {
+  dnf: LocalDNF;
+  onAddConjunction: (variables: readonly CRDTVariable[]) => void;
+  onRemoveConjunction: (index: number) => void;
+  onAddPredicate: (conjunctionIndex: number, variables: readonly CRDTVariable[]) => void;
+  onRemovePredicate: (conjunctionIndex: number, predicateIndex: number) => void;
+  onUpdatePredicate: (
+    conjunctionIndex: number,
+    predicateIndex: number,
+    predicate: LocalPredicate,
+  ) => void;
+  variables: readonly CRDTVariable[];
+}
+
+/**
+ * Editor for DNF (Disjunctive Normal Form) conditions.
+ * Displays a list of AND groups (conjunctions) separated by OR dividers.
+ */
+export function DNFEditor({
+  dnf,
+  onAddConjunction,
+  onRemoveConjunction,
+  onAddPredicate,
+  onRemovePredicate,
+  onUpdatePredicate,
+  variables,
+}: DNFEditorProps) {
+  return (
+    <div className="flex flex-col gap-3">
+      {dnf.value.map((conjunction, conjunctionIndex) => (
+        <div key={`conjunction-${conjunction.type}-${conjunctionIndex}`}>
+          {conjunctionIndex > 0 && (
+            <div className="flex items-center gap-2 py-2">
+              <div className="h-px flex-1 bg-border" />
+              <span className="font-medium text-muted-foreground text-xs">OR</span>
+              <div className="h-px flex-1 bg-border" />
+            </div>
+          )}
+          <ConjunctionEditor
+            canRemove={dnf.value.length > 1}
+            conjunction={conjunction}
+            onAddPredicate={() => onAddPredicate(conjunctionIndex, variables)}
+            onRemove={() => onRemoveConjunction(conjunctionIndex)}
+            onRemovePredicate={(predicateIndex) =>
+              onRemovePredicate(conjunctionIndex, predicateIndex)
+            }
+            onUpdatePredicate={(predicateIndex, predicate) =>
+              onUpdatePredicate(conjunctionIndex, predicateIndex, predicate)
+            }
+            variables={variables}
+          />
+        </div>
+      ))}
+
+      {/* Add OR group button */}
+      <div className="flex items-center justify-center">
+        <Button size="sm" variant="secondary" onClick={() => onAddConjunction(variables)}>
+          <PlusIcon />
+          OR
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/index.ts b/apps/www/src/features/studio/paywalls/designer/components/state-manager/index.ts
new file mode 100644
index 000000000..a50b78964
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/index.ts
@@ -0,0 +1,8 @@
+/**
+ * StateManager module - manages paywall states and their DNF conditions.
+ *
+ * Only the main StateManagerSheet component is publicly exported.
+ * All sub-components, hooks, and utilities are internal implementation details.
+ */
+export { StateManagerSheet } from "./state-manager-sheet";
+export type { StateManagerSheetProps, CRDTState, CRDTVariable } from "./types";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/operand-editor.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/operand-editor.tsx
new file mode 100644
index 000000000..8a1d9fee5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/operand-editor.tsx
@@ -0,0 +1,41 @@
+"use client";
+
+import type { VariableTypeKey } from "@voidhash/mimic-schema";
+import { useMemo } from "react";
+
+import { VariableInput } from "../variables/variable-input";
+import type { CRDTVariable, LocalOperand } from "./types";
+import { toFlatVariables } from "./utils";
+
+interface OperandEditorProps {
+  operand: LocalOperand;
+  onChange: (operand: LocalOperand) => void;
+  variables: readonly CRDTVariable[];
+  expectedType?: VariableTypeKey;
+  className?: string;
+}
+
+/**
+ * Operand editor that wraps VariableInput with CRDT variable conversion.
+ * Converts CRDT variables to flat Variables for use with VariableInput.
+ */
+export function OperandEditor({
+  operand,
+  onChange,
+  variables,
+  expectedType,
+  className,
+}: OperandEditorProps) {
+  // Convert CRDT variables to flat variables for VariableInput
+  const flatVariables = useMemo(() => toFlatVariables(variables), [variables]);
+
+  return (
+    <VariableInput
+      expectedType={expectedType}
+      onChange={onChange}
+      value={operand}
+      variables={flatVariables}
+      className={className}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/predicate-editor.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/predicate-editor.tsx
new file mode 100644
index 000000000..b5a80c606
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/predicate-editor.tsx
@@ -0,0 +1,143 @@
+"use client";
+
+import {
+  Button,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { MinusIcon } from "lucide-react";
+import { useMemo } from "react";
+
+import { PREDICATE_LABELS, type PredicateType } from "../../constants";
+import { createDefaultOperand } from "../variables/utils";
+import { CRDTVariableSelector } from "./crdt-variable-selector";
+import { OperandEditor } from "./operand-editor";
+import type { CRDTVariable, LocalOperand, LocalPredicate } from "./types";
+import { PREDICATES_BY_TYPE } from "./utils";
+
+interface PredicateEditorProps {
+  predicate: LocalPredicate;
+  onChange: (predicate: LocalPredicate) => void;
+  onRemove: () => void;
+  canRemove: boolean;
+  variables: readonly CRDTVariable[];
+}
+
+/**
+ * Editor for a single predicate: [Variable] [Operator] [Value/Variable]
+ */
+export function PredicateEditor({
+  predicate,
+  onChange,
+  onRemove,
+  canRemove,
+  variables,
+}: PredicateEditorProps) {
+  // Get the variable ID from the left operand (should always be a variable reference)
+  const leftVariableId = useMemo(() => {
+    if (predicate.value.left.type === "variable-reference") {
+      return (predicate.value.left.value as { id: string }).id;
+    }
+    return null;
+  }, [predicate.value.left]);
+
+  // Get the type from the selected variable
+  const leftVariable = useMemo(() => {
+    if (!leftVariableId) {
+      return null;
+    }
+    return variables.find((v) => v.id === leftVariableId) ?? null;
+  }, [leftVariableId, variables]);
+
+  const leftType = leftVariable?.value.value.key ?? "boolean";
+  const availablePredicates = PREDICATES_BY_TYPE[leftType];
+
+  const handleVariableChange = (newVariableId: string) => {
+    const newVariable = variables.find((v) => v.id === newVariableId);
+    if (!newVariable) {
+      return;
+    }
+
+    const newType = newVariable.value.value.key;
+    const currentPredicateType = predicate.type;
+
+    // Check if current predicate type is valid for new variable type
+    const validPredicates = PREDICATES_BY_TYPE[newType];
+    let newPredicateType: PredicateType;
+    if (validPredicates.includes(currentPredicateType)) {
+      newPredicateType = currentPredicateType;
+    } else {
+      newPredicateType = validPredicates[0] ?? "equals";
+    }
+
+    // Reset right operand to match the new variable type
+    const newRight = newType !== leftType ? createDefaultOperand(newType) : predicate.value.right;
+
+    onChange({
+      type: newPredicateType,
+      value: {
+        left: { type: "variable-reference", value: { id: newVariableId } },
+        right: newRight,
+      },
+    });
+  };
+
+  const handlePredicateTypeChange = (type: PredicateType) => {
+    onChange({
+      ...predicate,
+      type,
+    });
+  };
+
+  const handleRightChange = (right: LocalOperand) => {
+    onChange({
+      ...predicate,
+      value: { ...predicate.value, right },
+    });
+  };
+
+  return (
+    <div className="flex flex-row items-center gap-1 rounded-md bg-muted/50 p-2">
+      {/* Left side: Variable selector */}
+      <CRDTVariableSelector
+        onChange={handleVariableChange}
+        variableId={leftVariableId}
+        variables={variables}
+        className="flex-1"
+      />
+
+      {/* Predicate type selector */}
+      <Select onValueChange={handlePredicateTypeChange} value={predicate.type}>
+        <SelectTrigger className="h-7 text-xs" size="sm">
+          <SelectValue>{PREDICATE_LABELS[predicate.type]}</SelectValue>
+        </SelectTrigger>
+        <SelectContent>
+          {availablePredicates.map((p) => (
+            <SelectItem key={p} value={p}>
+              {PREDICATE_LABELS[p]}
+            </SelectItem>
+          ))}
+        </SelectContent>
+      </Select>
+
+      {/* Right operand: Value or Variable */}
+      <OperandEditor
+        expectedType={leftType}
+        className="flex-1"
+        onChange={handleRightChange}
+        operand={predicate.value.right}
+        variables={variables}
+      />
+
+      {/* Remove button */}
+      {canRemove && (
+        <Button onClick={onRemove} size="icon-sm" variant="ghost">
+          <MinusIcon />
+        </Button>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx
new file mode 100644
index 000000000..d1ce6202a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx
@@ -0,0 +1,351 @@
+"use client";
+
+import { Button, cn, useConfirmDialog } from "@voidhash/ui";
+import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
+import { Sheet, SheetClose, SheetContent } from "@voidhash/ui/sheet";
+import { PencilIcon, PlusIcon, Trash2Icon, XIcon } from "lucide-react";
+import { useCallback, useEffect, useMemo, useState } from "react";
+
+import { PANEL_DIMENSIONS } from "../../panels/constants";
+import { Panel } from "../ui/panel";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+} from "../ui/panel-section";
+import { DNFEditor } from "./dnf-editor";
+import type { StateManagerSheetProps } from "./types";
+import { useDNFEditor } from "./use-dnf-editor";
+import { useEditingState } from "./use-editing-state";
+import { usePendingState } from "./use-pending-state";
+
+/**
+ * StateManagerSheet - A slide-out sheet for managing paywall states.
+ *
+ * Features:
+ * - Left sidebar with list of states (add, edit name, remove)
+ * - Right panel with DNF condition editor for selected state
+ * - Save/cancel footer when changes are pending
+ */
+export function StateManagerSheet({
+  onAddState,
+  onOpenChange,
+  onRemoveState,
+  onUpdateStateCondition,
+  onUpdateStateName,
+  open,
+  states,
+  variables,
+}: StateManagerSheetProps) {
+  const existingStateNames = new Set(states.map((s) => s.value.name));
+  const [selectedStateId, setSelectedStateId] = useState<string | null>(null);
+  const { openDialog, ConfirmationDialog } = useConfirmDialog();
+
+  // Find selected state
+  const selectedState = useMemo(
+    () => states.find((s) => s.id === selectedStateId) ?? null,
+    [states, selectedStateId],
+  );
+
+  // DNF editor hook
+  const {
+    addConjunction,
+    addPredicate,
+    cancel: cancelDNFEditing,
+    editingDNF,
+    getDNFForSave,
+    hasChanges,
+    removeConjunction,
+    removePredicate,
+    reset: resetDNFEditor,
+    startEditing: startDNFEditing,
+    updatePredicate,
+  } = useDNFEditor();
+
+  // Pending state hook (for adding new states)
+  const {
+    handleKeyDown: handleAddKeyDown,
+    inputRef: addInputRef,
+    isPending,
+    pendingState,
+    save: saveAdd,
+    startAdding,
+    updateName: updateAddName,
+  } = usePendingState({
+    existingStateNames,
+    onAddState,
+  });
+
+  // Editing state hook (for editing state names)
+  const {
+    editingState,
+    handleKeyDown: handleEditKeyDown,
+    inputRef: editInputRef,
+    isEditing,
+    save: saveEdit,
+    startEditing,
+    updateName: updateEditName,
+  } = useEditingState({
+    existingStateNames,
+    onUpdateStateName,
+  });
+
+  // Handle state selection
+  const handleSelectState = useCallback(
+    (stateId: string) => {
+      // Don't change selection while editing name
+      if (editingState) {
+        return;
+      }
+
+      if (selectedStateId === stateId) {
+        return;
+      }
+
+      // If there are unsaved changes, prompt user
+      if (hasChanges) {
+        const confirmed = window.confirm("You have unsaved changes. Discard them?");
+        if (!confirmed) {
+          return;
+        }
+      }
+
+      setSelectedStateId(stateId);
+      const state = states.find((s) => s.id === stateId);
+      if (state) {
+        startDNFEditing(state.value.condition);
+      }
+    },
+    [selectedStateId, hasChanges, states, startDNFEditing, editingState],
+  );
+
+  // Handle delete with confirmation
+  const handleDeleteState = useCallback(
+    async (stateId: string, stateName: string) => {
+      const confirmed = await openDialog({
+        confirmText: "Delete",
+        description: `Are you sure you want to delete the state "${stateName}"? This action cannot be undone.`,
+        title: "Delete state",
+        variant: "destructive",
+      });
+
+      if (confirmed) {
+        onRemoveState(stateId);
+      }
+    },
+    [openDialog, onRemoveState],
+  );
+
+  // Handle save
+  const handleSave = useCallback(() => {
+    if (!selectedStateId) {
+      return;
+    }
+    const dnf = getDNFForSave();
+    if (!dnf) {
+      return;
+    }
+
+    onUpdateStateCondition(selectedStateId, dnf);
+    // Re-sync with saved state
+    const state = states.find((s) => s.id === selectedStateId);
+    if (state) {
+      startDNFEditing(state.value.condition);
+    }
+  }, [selectedStateId, getDNFForSave, onUpdateStateCondition, states, startDNFEditing]);
+
+  // Auto-select first state when sheet opens
+  useEffect(() => {
+    if (open && states.length > 0 && !selectedStateId) {
+      const firstState = states[0];
+      if (firstState) {
+        setSelectedStateId(firstState.id);
+        startDNFEditing(firstState.value.condition);
+      }
+    }
+  }, [open, states, selectedStateId, startDNFEditing]);
+
+  // Reset when sheet closes
+  useEffect(() => {
+    if (!open) {
+      setSelectedStateId(null);
+      resetDNFEditor();
+    }
+  }, [open, resetDNFEditor]);
+
+  // Update DNF editor when selected state's condition changes externally
+  useEffect(() => {
+    if (selectedState && !hasChanges) {
+      startDNFEditing(selectedState.value.condition);
+    }
+  }, [selectedState?.value.condition, hasChanges, startDNFEditing, selectedState]);
+
+  return (
+    <>
+      <ConfirmationDialog />
+      <Sheet onOpenChange={onOpenChange} open={open}>
+        <SheetContent
+          className="flex flex-row gap-0 p-0 sm:max-w-220"
+          hideCloseButton={true}
+          hideOverlay={true}
+          side="right"
+        >
+          {/* Sidebar - State list */}
+          <div
+            className="flex flex-col border-border border-r bg-sidebar"
+            style={{
+              width: PANEL_DIMENSIONS.RIGHT_WIDTH,
+            }}
+          >
+            <Panel>
+              <PanelSection>
+                <PanelSectionHeader>
+                  <PanelSectionTitle>States</PanelSectionTitle>
+                  <PanelSectionHeaderActions>
+                    <Button onClick={startAdding} size="icon-sm" variant="secondary">
+                      <PlusIcon />
+                    </Button>
+                  </PanelSectionHeaderActions>
+                </PanelSectionHeader>
+
+                {(states.length > 0 || isPending) && (
+                  <PanelSectionContent className="border-border border-t pt-2">
+                    <div className="flex flex-col">
+                      {states.map((state, index) => (
+                        <button
+                          className={cn(
+                            "flex h-7 w-full cursor-pointer items-center rounded-sm px-2 text-left font-medium text-muted-foreground text-xs transition-all hover:bg-accent/50 hover:text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50",
+                            selectedStateId === state.id &&
+                              "bg-accent text-accent-foreground hover:bg-accent",
+                            selectedStateId === state.id &&
+                              index < states.length - 1 &&
+                              "rounded-b-none",
+                            selectedStateId === states[index - 1]?.id && "rounded-t-none",
+                          )}
+                          key={state.id}
+                          onClick={() => handleSelectState(state.id)}
+                          type="button"
+                        >
+                          {state.value.name}
+                        </button>
+                      ))}
+                      {isPending && (
+                        <InputGroup className="h-7 flex-1 rounded-sm border-none dark:bg-input/60">
+                          <InputGroupInput
+                            aria-label="State name"
+                            className="h-7 px-1 py-0 pl-2 text-xs"
+                            onBlur={saveAdd}
+                            onChange={(e) => updateAddName(e.target.value)}
+                            onKeyDown={handleAddKeyDown}
+                            placeholder="State name..."
+                            ref={addInputRef}
+                            value={pendingState ?? ""}
+                          />
+                        </InputGroup>
+                      )}
+                    </div>
+                  </PanelSectionContent>
+                )}
+              </PanelSection>
+            </Panel>
+          </div>
+
+          {/* Detail panel - DNF editor */}
+          <div className="flex flex-1 flex-col">
+            <Panel className="flex-1">
+              <PanelSection>
+                <PanelSectionHeader>
+                  <PanelSectionTitle>
+                    {selectedState && isEditing(selectedState.id) ? (
+                      <InputGroup className="h-7 flex-1 rounded-sm border-none dark:bg-input/60">
+                        <InputGroupInput
+                          aria-label="State name"
+                          className="h-7 px-1 py-0 pl-2 text-xs"
+                          onBlur={saveEdit}
+                          onChange={(e) => updateEditName(e.target.value)}
+                          onKeyDown={handleEditKeyDown}
+                          ref={editInputRef}
+                          value={editingState?.name ?? ""}
+                        />
+                      </InputGroup>
+                    ) : (
+                      <div className="flex flex-row items-center gap-1">
+                        <span className="mr-4">
+                          {selectedState?.value.name ?? "Select a state"}
+                        </span>
+                        {selectedState && !isEditing(selectedState.id) && (
+                          <>
+                            <Button
+                              onClick={() =>
+                                startEditing(selectedState.id, selectedState.value.name)
+                              }
+                              size="icon-sm"
+                              variant="secondary"
+                            >
+                              <PencilIcon />
+                            </Button>
+                            <Button
+                              onClick={() =>
+                                handleDeleteState(selectedState.id, selectedState.value.name)
+                              }
+                              size="icon-sm"
+                              variant="secondary"
+                            >
+                              <Trash2Icon />
+                            </Button>
+                          </>
+                        )}
+                      </div>
+                    )}
+                  </PanelSectionTitle>
+                  <PanelSectionHeaderActions>
+                    {hasChanges ? (
+                      <>
+                        <Button size="sm" onClick={cancelDNFEditing} variant="outline">
+                          Cancel
+                        </Button>
+                        <Button size="sm" variant="default" onClick={handleSave}>
+                          Save Changes
+                        </Button>
+                      </>
+                    ) : (
+                      <SheetClose asChild>
+                        <Button size="icon-sm" variant="ghost">
+                          <XIcon />
+                        </Button>
+                      </SheetClose>
+                    )}
+                  </PanelSectionHeaderActions>
+                </PanelSectionHeader>
+
+                {selectedState && editingDNF ? (
+                  <PanelSectionContent className="border-border border-t pt-2">
+                    <DNFEditor
+                      dnf={editingDNF}
+                      onAddConjunction={addConjunction}
+                      onAddPredicate={addPredicate}
+                      onRemoveConjunction={removeConjunction}
+                      onRemovePredicate={removePredicate}
+                      onUpdatePredicate={updatePredicate}
+                      variables={variables}
+                    />
+                  </PanelSectionContent>
+                ) : (
+                  <PanelSectionContent className="border-border border-t pt-2">
+                    <div className="py-8 text-center text-muted-foreground text-sm">
+                      {states.length === 0
+                        ? "No states yet. Create one to get started."
+                        : "Select a state from the list to edit its conditions."}
+                    </div>
+                  </PanelSectionContent>
+                )}
+              </PanelSection>
+            </Panel>
+          </div>
+        </SheetContent>
+      </Sheet>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/types.ts b/apps/www/src/features/studio/paywalls/designer/components/state-manager/types.ts
new file mode 100644
index 000000000..7ded3be6e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/types.ts
@@ -0,0 +1,82 @@
+import type { DNF, VariableType } from "@voidhash/mimic-schema";
+
+import type { DnfInput } from "../../state/utils/replay";
+import type { VariableInputValue } from "../variables/types";
+
+/**
+ * Variable with nested value structure (as stored in CRDT).
+ * This differs from the mimic-schema Variable type which has a flat structure.
+ * `ownerLabel` is set for variables declared on an ancestor node (rendered as
+ * secondary "from …" text by selector UIs).
+ */
+export interface CRDTVariable {
+  readonly id: string;
+  readonly ownerLabel?: string;
+  readonly value: {
+    readonly name: string;
+    readonly value: VariableType;
+  };
+}
+
+/**
+ * State with nested value structure (as stored in CRDT).
+ */
+export interface CRDTState {
+  readonly id: string;
+  readonly value: {
+    readonly name: string;
+    readonly condition: DNF;
+  };
+}
+
+/**
+ * Props for the StateManagerSheet component.
+ */
+export interface StateManagerSheetProps {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  states: readonly CRDTState[];
+  variables: readonly CRDTVariable[];
+  onAddState: (name: string, condition: DnfInput) => void;
+  onRemoveState: (stateId: string) => void;
+  onUpdateStateName: (stateId: string, newName: string) => void;
+  onUpdateStateCondition: (stateId: string, newCondition: DnfInput) => void;
+}
+
+/**
+ * Local operand type for editing (same as VariableInputValue).
+ */
+export type LocalOperand = VariableInputValue;
+
+/**
+ * Local predicate type for editing DNF conditions.
+ */
+export interface LocalPredicate {
+  type:
+    | "equals"
+    | "not-equals"
+    | "greater-than"
+    | "greater-than-or-equal"
+    | "less-than"
+    | "less-than-or-equal";
+  value: {
+    left: LocalOperand;
+    right: LocalOperand;
+  };
+}
+
+/**
+ * Local conjunction (AND group) for editing.
+ */
+export interface LocalConjunction {
+  type: "and";
+  value: LocalPredicate[];
+}
+
+/**
+ * Local DNF (Disjunctive Normal Form) for editing.
+ */
+export interface LocalDNF {
+  type: "or";
+  value: LocalConjunction[];
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-dnf-editor.ts b/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-dnf-editor.ts
new file mode 100644
index 000000000..8bf03dbc1
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-dnf-editor.ts
@@ -0,0 +1,159 @@
+import type { DNF } from "@voidhash/mimic-schema";
+import { useCallback, useMemo, useState } from "react";
+
+import type { DnfInput } from "../../state/utils/replay";
+import type { CRDTVariable, LocalDNF, LocalPredicate } from "./types";
+import {
+  createDefaultConjunction,
+  createDefaultPredicate,
+  deepClone,
+  deepEqual,
+  dnfToLocal,
+  localToDnfInput,
+} from "./utils";
+
+/**
+ * Hook for editing DNF (Disjunctive Normal Form) conditions.
+ * Manages local state, change tracking, and CRUD operations.
+ */
+export function useDNFEditor() {
+  const [editingDNF, setEditingDNF] = useState<LocalDNF | null>(null);
+  const [originalDNF, setOriginalDNF] = useState<LocalDNF | null>(null);
+
+  const startEditing = useCallback((dnf: DNF) => {
+    const local = dnfToLocal(dnf);
+    setEditingDNF(deepClone(local));
+    setOriginalDNF(local);
+  }, []);
+
+  const cancel = useCallback(() => {
+    if (!originalDNF) {
+      return;
+    }
+    setEditingDNF(deepClone(originalDNF));
+  }, [originalDNF]);
+
+  const reset = useCallback(() => {
+    setEditingDNF(null);
+    setOriginalDNF(null);
+  }, []);
+
+  const hasChanges = useMemo(() => {
+    if (!editingDNF) {
+      return false;
+    }
+    if (!originalDNF) {
+      return false;
+    }
+    return !deepEqual(editingDNF, originalDNF);
+  }, [editingDNF, originalDNF]);
+
+  const addConjunction = useCallback((variables: readonly CRDTVariable[]) => {
+    setEditingDNF((prev) => {
+      if (!prev) {
+        return prev;
+      }
+      return {
+        ...prev,
+        value: [...prev.value, createDefaultConjunction(variables)],
+      };
+    });
+  }, []);
+
+  const removeConjunction = useCallback((index: number) => {
+    setEditingDNF((prev) => {
+      if (!prev || prev.value.length <= 1) {
+        return prev;
+      }
+      return {
+        ...prev,
+        value: prev.value.filter((_, i) => i !== index),
+      };
+    });
+  }, []);
+
+  const addPredicate = useCallback(
+    (conjunctionIndex: number, variables: readonly CRDTVariable[]) => {
+      setEditingDNF((prev) => {
+        if (!prev) {
+          return prev;
+        }
+        const existingConjunction = prev.value[conjunctionIndex];
+        if (!existingConjunction) {
+          return prev;
+        }
+
+        const newValue = [...prev.value];
+        newValue[conjunctionIndex] = {
+          type: "and" as const,
+          value: [...existingConjunction.value, createDefaultPredicate(variables)],
+        };
+        return { type: "or" as const, value: newValue };
+      });
+    },
+    [],
+  );
+
+  const removePredicate = useCallback((conjunctionIndex: number, predicateIndex: number) => {
+    setEditingDNF((prev) => {
+      if (!prev) {
+        return prev;
+      }
+      const conjunction = prev.value[conjunctionIndex];
+      if (!conjunction || conjunction.value.length <= 1) {
+        return prev;
+      }
+
+      const newValue = [...prev.value];
+      newValue[conjunctionIndex] = {
+        type: "and" as const,
+        value: conjunction.value.filter((_, i) => i !== predicateIndex),
+      };
+      return { type: "or" as const, value: newValue };
+    });
+  }, []);
+
+  const updatePredicate = useCallback(
+    (conjunctionIndex: number, predicateIndex: number, predicate: LocalPredicate) => {
+      setEditingDNF((prev) => {
+        if (!prev) {
+          return prev;
+        }
+        const existingConjunction = prev.value[conjunctionIndex];
+        if (!existingConjunction) {
+          return prev;
+        }
+        const newValue = [...prev.value];
+        const newPredicates = [...existingConjunction.value];
+        newPredicates[predicateIndex] = predicate;
+        newValue[conjunctionIndex] = {
+          type: "and" as const,
+          value: newPredicates,
+        };
+        return { type: "or" as const, value: newValue };
+      });
+    },
+    [],
+  );
+
+  const getDNFForSave = useCallback((): DnfInput | null => {
+    if (!editingDNF) {
+      return null;
+    }
+    return localToDnfInput(editingDNF);
+  }, [editingDNF]);
+
+  return {
+    addConjunction,
+    addPredicate,
+    cancel,
+    editingDNF,
+    getDNFForSave,
+    hasChanges,
+    removeConjunction,
+    removePredicate,
+    reset,
+    startEditing,
+    updatePredicate,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-editing-state.ts b/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-editing-state.ts
new file mode 100644
index 000000000..f9e36e6e6
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-editing-state.ts
@@ -0,0 +1,92 @@
+import { useCallback, useRef, useState } from "react";
+import { toast } from "sonner";
+
+interface UseEditingStateOptions {
+  existingStateNames: Set<string>;
+  onUpdateStateName: (stateId: string, newName: string) => void;
+}
+
+interface EditingState {
+  id: string;
+  name: string;
+  originalName: string;
+}
+
+/**
+ * Hook for managing the "edit state name" flow.
+ * Handles input focus, name validation, and keyboard events.
+ */
+export function useEditingState({ existingStateNames, onUpdateStateName }: UseEditingStateOptions) {
+  const [editingState, setEditingState] = useState<EditingState | null>(null);
+  const inputRef = useRef<HTMLInputElement>(null);
+
+  const startEditing = useCallback((stateId: string, currentName: string) => {
+    setEditingState({
+      id: stateId,
+      name: currentName,
+      originalName: currentName,
+    });
+    setTimeout(() => {
+      inputRef.current?.focus();
+      inputRef.current?.select();
+    }, 50);
+  }, []);
+
+  const cancel = useCallback(() => {
+    setEditingState(null);
+  }, []);
+
+  const save = useCallback(() => {
+    if (editingState === null) {
+      return;
+    }
+
+    const trimmedName = editingState.name.trim();
+
+    if (!trimmedName || trimmedName === editingState.originalName) {
+      setEditingState(null);
+      return;
+    }
+
+    if (trimmedName.length > 32) {
+      toast.error("State name must be less than 32 characters");
+      setEditingState(null);
+      return;
+    }
+
+    if (existingStateNames.has(trimmedName) && trimmedName !== editingState.originalName) {
+      toast.error("A state with this name already exists");
+      setEditingState(null);
+      return;
+    }
+
+    onUpdateStateName(editingState.id, trimmedName);
+    setEditingState(null);
+  }, [editingState, existingStateNames, onUpdateStateName]);
+
+  const updateName = useCallback((name: string) => {
+    setEditingState((prev) => (prev ? { ...prev, name } : null));
+  }, []);
+
+  const handleKeyDown = useCallback(
+    (e: React.KeyboardEvent<HTMLInputElement>) => {
+      if (e.key === "Escape") {
+        cancel();
+      } else if (e.key === "Enter") {
+        save();
+      }
+    },
+    [cancel, save],
+  );
+
+  return {
+    cancel,
+    editingState,
+    handleKeyDown,
+    inputRef,
+    isEditing: (stateId: string) => editingState?.id === stateId,
+    save,
+    startEditing,
+    updateName,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-pending-state.ts b/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-pending-state.ts
new file mode 100644
index 000000000..ea0e1312c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/use-pending-state.ts
@@ -0,0 +1,84 @@
+import { useCallback, useRef, useState } from "react";
+import { toast } from "sonner";
+
+import type { DnfInput } from "../../state/utils/replay";
+import { createDefaultCondition } from "./utils";
+
+interface UsePendingStateOptions {
+  existingStateNames: Set<string>;
+  onAddState: (name: string, condition: DnfInput) => void;
+}
+
+/**
+ * Hook for managing the "add new state" flow.
+ * Handles input focus, name validation, and keyboard events.
+ */
+export function usePendingState({ existingStateNames, onAddState }: UsePendingStateOptions) {
+  const [pendingState, setPendingState] = useState<string | null>(null);
+  const inputRef = useRef<HTMLInputElement>(null);
+
+  const startAdding = useCallback(() => {
+    setPendingState("");
+    setTimeout(() => {
+      inputRef.current?.focus();
+    }, 50);
+  }, []);
+
+  const cancel = useCallback(() => {
+    setPendingState(null);
+  }, []);
+
+  const save = useCallback(() => {
+    if (pendingState === null) {
+      return;
+    }
+
+    const trimmedName = pendingState.trim();
+
+    if (!trimmedName) {
+      setPendingState(null);
+      return;
+    }
+
+    if (trimmedName.length > 32) {
+      toast.error("State name must be less than 32 characters");
+      setPendingState(null);
+      return;
+    }
+
+    if (existingStateNames.has(trimmedName)) {
+      toast.error("A state with this name already exists");
+      setPendingState(null);
+      return;
+    }
+
+    onAddState(trimmedName, createDefaultCondition());
+    setPendingState(null);
+  }, [pendingState, existingStateNames, onAddState]);
+
+  const updateName = useCallback((name: string) => {
+    setPendingState(name);
+  }, []);
+
+  const handleKeyDown = useCallback(
+    (e: React.KeyboardEvent<HTMLInputElement>) => {
+      if (e.key === "Escape") {
+        cancel();
+      } else if (e.key === "Enter") {
+        save();
+      }
+    },
+    [cancel, save],
+  );
+
+  return {
+    cancel,
+    handleKeyDown,
+    inputRef,
+    isPending: pendingState !== null,
+    pendingState,
+    save,
+    startAdding,
+    updateName,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/utils.ts b/apps/www/src/features/studio/paywalls/designer/components/state-manager/utils.ts
new file mode 100644
index 000000000..4880f244f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/utils.ts
@@ -0,0 +1,211 @@
+import type { DNF, VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+
+import { type PredicateType, VARIABLE_TYPE_REGISTRY } from "../../constants";
+import type { DnfInput } from "../../state/utils/replay";
+import { isLiteralValue, isVariableReference, type LabeledVariable } from "../variables/types";
+import { createDefaultOperand } from "../variables/utils";
+import type {
+  CRDTVariable,
+  LocalConjunction,
+  LocalDNF,
+  LocalOperand,
+  LocalPredicate,
+} from "./types";
+
+/**
+ * Derive PREDICATES_BY_TYPE from VARIABLE_TYPE_REGISTRY.
+ * This provides the available predicates for each variable type.
+ */
+export const PREDICATES_BY_TYPE: Record<VariableTypeKey, PredicateType[]> = Object.fromEntries(
+  Object.entries(VARIABLE_TYPE_REGISTRY).map(([key, config]) => [key, [...config.predicates]]),
+) as Record<VariableTypeKey, PredicateType[]>;
+
+/**
+ * Converts a CRDT variable to the flat Variable type used by VariableInput,
+ * propagating the owner label when present.
+ */
+export function toFlatVariable(crdtVar: CRDTVariable): LabeledVariable {
+  return {
+    id: crdtVar.id,
+    name: crdtVar.value.name,
+    ownerLabel: crdtVar.ownerLabel,
+    value: crdtVar.value.value,
+  };
+}
+
+/**
+ * Converts an array of CRDT variables to flat Variables.
+ */
+export function toFlatVariables(crdtVars: readonly CRDTVariable[]): LabeledVariable[] {
+  return crdtVars.map(toFlatVariable);
+}
+
+/**
+ * Gets the variable type key from a CRDT variable by ID.
+ */
+export function getCRDTVariableType(
+  variableId: string,
+  variables: readonly CRDTVariable[],
+): VariableTypeKey {
+  const variable = variables.find((v) => v.id === variableId);
+  return variable?.value.value.key ?? "boolean";
+}
+
+/**
+ * Creates a default DNF condition (always true: true === true) in write-input
+ * shape.
+ */
+export function createDefaultCondition(): DnfInput {
+  return {
+    type: "or",
+    value: [
+      {
+        type: "and",
+        value: [
+          {
+            type: "equals",
+            value: {
+              left: {
+                type: "literal",
+                value: { key: "boolean", value: true },
+              },
+              right: {
+                type: "literal",
+                value: { key: "boolean", value: true },
+              },
+            },
+          },
+        ],
+      },
+    ],
+  };
+}
+
+/**
+ * Creates a default predicate, using the first variable if available.
+ */
+export function createDefaultPredicate(variables: readonly CRDTVariable[]): LocalPredicate {
+  const firstVariable = variables[0];
+  if (firstVariable) {
+    const varType = firstVariable.value.value.key;
+    return {
+      type: "equals",
+      value: {
+        left: { type: "variable-reference", value: { id: firstVariable.id } },
+        right: createDefaultOperand(varType),
+      },
+    };
+  }
+  // Fallback when no variables exist
+  return {
+    type: "equals",
+    value: {
+      left: createDefaultOperand("boolean"),
+      right: createDefaultOperand("boolean"),
+    },
+  };
+}
+
+/**
+ * Creates a default conjunction (AND group) with one predicate.
+ */
+export function createDefaultConjunction(variables: readonly CRDTVariable[]): LocalConjunction {
+  return {
+    type: "and",
+    value: [createDefaultPredicate(variables)],
+  };
+}
+
+/**
+ * Gets the operand type from a local operand.
+ */
+export function getOperandType(
+  operand: LocalOperand,
+  variables: readonly CRDTVariable[],
+): VariableTypeKey {
+  if (operand.type === "literal") {
+    return (operand.value as VariableType).key;
+  }
+  const variableRef = operand.value as { id: string };
+  return getCRDTVariableType(variableRef.id, variables);
+}
+
+/**
+ * Converts a decoded DNF snapshot (conjunction/predicate levels are
+ * `{id, pos, value}` entry-wrapped) to the local editing format.
+ */
+export function dnfToLocal(dnf: DNF): LocalDNF {
+  return {
+    type: "or",
+    value: dnf.value.flatMap((conjunctionEntry) => {
+      const conjunction = conjunctionEntry.value;
+      if (conjunction === undefined) {
+        return [];
+      }
+      return [
+        {
+          type: "and" as const,
+          value: conjunction.value.flatMap((predicateEntry) => {
+            const predicate = predicateEntry.value;
+            if (predicate === undefined) {
+              return [];
+            }
+            return [
+              {
+                type: predicate.type,
+                value: {
+                  left: predicate.value.left,
+                  right: predicate.value.right,
+                },
+              },
+            ];
+          }),
+        },
+      ];
+    }),
+  };
+}
+
+function operandToInput(operand: LocalOperand) {
+  if (isLiteralValue(operand)) {
+    return { type: "literal" as const, value: operand.value };
+  }
+  if (isVariableReference(operand)) {
+    return { type: "variable-reference" as const, value: operand.value };
+  }
+  throw new Error(`Unknown operand type: ${operand.type}`);
+}
+
+/**
+ * Converts the local editing format back into condition write input (plain
+ * arrays, unlike the entry-wrapped snapshot).
+ */
+export function localToDnfInput(local: LocalDNF): DnfInput {
+  return {
+    type: "or",
+    value: local.value.map((conj) => ({
+      type: "and" as const,
+      value: conj.value.map((pred) => ({
+        type: pred.type,
+        value: {
+          left: operandToInput(pred.value.left),
+          right: operandToInput(pred.value.right),
+        },
+      })),
+    })),
+  };
+}
+
+/**
+ * Creates a deep clone of an object using JSON serialization.
+ */
+export function deepClone<T>(obj: T): T {
+  return JSON.parse(JSON.stringify(obj));
+}
+
+/**
+ * Performs a deep equality check using JSON serialization.
+ */
+export function deepEqual(a: unknown, b: unknown): boolean {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-input.tsx
new file mode 100644
index 000000000..38de1fdb4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-input.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-input";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/checkerboard-background.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/checkerboard-background.tsx
new file mode 100644
index 000000000..ce3935fae
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/checkerboard-background.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/checkerboard-background";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-picker-content.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-picker-content.tsx
new file mode 100644
index 000000000..249308ee3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-picker-content.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/color-picker-content";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-swatch.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-swatch.tsx
new file mode 100644
index 000000000..ca107fbab
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-swatch.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/color-swatch";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-utils.ts b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-utils.ts
new file mode 100644
index 000000000..3ae7b6381
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/color-utils.ts
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/color-utils";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/eyedropper-button.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/eyedropper-button.tsx
new file mode 100644
index 000000000..a384b3b51
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/eyedropper-button.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/eyedropper-button";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/hue-slider.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/hue-slider.tsx
new file mode 100644
index 000000000..d48c9d7d9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/hue-slider.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/hue-slider";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/opacity-slider.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/opacity-slider.tsx
new file mode 100644
index 000000000..e19f53830
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/opacity-slider.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/opacity-slider";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/saturation-brightness-picker.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/saturation-brightness-picker.tsx
new file mode 100644
index 000000000..711a4e47b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/color-picker/saturation-brightness-picker.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/color-picker/saturation-brightness-picker";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/gradient-stop-bar.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/gradient-stop-bar.tsx
new file mode 100644
index 000000000..fedd1fce0
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/gradient-stop-bar.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/gradient-stop-bar";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
new file mode 100644
index 000000000..081d6c167
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
@@ -0,0 +1,50 @@
+"use client";
+
+import { ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import { Code2, Eye, Languages, Paintbrush } from "lucide-react";
+import type { LucideIcon } from "lucide-react";
+import { useStore } from "zustand/react";
+
+import { setMode } from "../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import type { DesignerMode } from "../../state/designer-store-state";
+
+const MODES: readonly { value: DesignerMode; label: string; icon: LucideIcon }[] = [
+  { icon: Paintbrush, label: "Design", value: "design" },
+  { icon: Eye, label: "Preview", value: "preview" },
+  { icon: Code2, label: "Code", value: "code" },
+  { icon: Languages, label: "Translate", value: "translation" },
+];
+
+export function ModeToggle() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const mode = useStore(store, (state) => state.mode);
+
+  return (
+    <ToggleGroup
+      indicatorClassName="duration-150"
+      onValueChange={(value) => {
+        if (value) {
+          dispatch(setMode)({ mode: value as DesignerMode });
+        }
+      }}
+      size="sm"
+      type="single"
+      value={mode}
+      variant="outline"
+    >
+      {MODES.map(({ icon: Icon, label, value }) => (
+        <ToggleGroupItem
+          className="gap-1.5 text-muted-foreground hover:text-foreground"
+          key={value}
+          size="sm"
+          value={value}
+        >
+          <Icon />
+          {label}
+        </ToggleGroupItem>
+      ))}
+    </ToggleGroup>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/panel-section.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/panel-section.tsx
new file mode 100644
index 000000000..d748089fc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/panel-section.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/panel-section";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/panel.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/panel.tsx
new file mode 100644
index 000000000..9b9edd3fe
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/panel.tsx
@@ -0,0 +1,23 @@
+import { cn } from "@voidhash/ui";
+
+export function Panel({ children, className }: { children: React.ReactNode; className?: string }) {
+  return (
+    <div className={cn("relative flex flex-1 flex-col divide-y divide-border", className)}>
+      {children}
+    </div>
+  );
+}
+
+export function PanelFooter({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return (
+    <div className={cn("sticky right-0 bottom-0 left-0 bg-panel px-4 pt-4 pb-4", className)}>
+      {children}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/popover-header.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/popover-header.tsx
new file mode 100644
index 000000000..51122a64e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/popover-header.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/popover-header";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/select-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/select-input.tsx
new file mode 100644
index 000000000..beb16b93c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/select-input.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/select-input";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/text-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/text-input.tsx
new file mode 100644
index 000000000..40e45d955
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/text-input.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/text-input";
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/zoom-controls.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/zoom-controls.tsx
new file mode 100644
index 000000000..bda27fe02
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/zoom-controls.tsx
@@ -0,0 +1,48 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import { MinusIcon, PlusIcon } from "lucide-react";
+import { useStore } from "zustand/react";
+
+import { setPreviewScale } from "../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+
+const ZOOM_STEP = 0.1;
+const MIN_ZOOM = 0.5;
+const MAX_ZOOM = 2;
+
+export function ZoomControls() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const scale = useStore(store, (state) => state.previewScale);
+
+  const zoomIn = () => {
+    dispatch(setPreviewScale)({ scale: scale + ZOOM_STEP });
+  };
+
+  const zoomOut = () => {
+    dispatch(setPreviewScale)({ scale: scale - ZOOM_STEP });
+  };
+
+  const resetZoom = () => {
+    dispatch(setPreviewScale)({ scale: 1 });
+  };
+
+  return (
+    <div className="flex items-center gap-1">
+      <Button disabled={scale <= MIN_ZOOM} onClick={zoomOut} size="icon-sm" variant="ghost">
+        <MinusIcon />
+      </Button>
+      <button
+        className="min-w-14 px-2 text-muted-foreground text-xs transition-colors hover:text-foreground"
+        onClick={resetZoom}
+        type="button"
+      >
+        {Math.round(scale * 100)}%
+      </button>
+      <Button disabled={scale >= MAX_ZOOM} onClick={zoomIn} size="icon-sm" variant="ghost">
+        <PlusIcon />
+      </Button>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx
new file mode 100644
index 000000000..c580a36c4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx
@@ -0,0 +1,29 @@
+"use client";
+
+import { ToggleGroup, ToggleGroupItem, cn } from "@voidhash/ui";
+
+export interface BooleanInputProps {
+  value: boolean;
+  onChange: (value: boolean) => void;
+  className?: string;
+}
+
+export function BooleanInput({ value, onChange, className }: BooleanInputProps) {
+  return (
+    <ToggleGroup
+      className={cn("h-7 flex items-center", className)}
+      onValueChange={(v) => onChange(v === "true")}
+      size="sm"
+      type="single"
+      value={value ? "true" : "false"}
+      variant="outline"
+    >
+      <ToggleGroupItem className="h-7 px-2 text-xs flex-1" size="sm" value="true">
+        True
+      </ToggleGroupItem>
+      <ToggleGroupItem className="h-7 px-2 text-xs flex-1" size="sm" value="false">
+        False
+      </ToggleGroupItem>
+    </ToggleGroup>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/number-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/number-input.tsx
new file mode 100644
index 000000000..b86f2dc9a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/number-input.tsx
@@ -0,0 +1,29 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
+
+export interface NumberInputProps {
+  value: number;
+  onChange: (value: number) => void;
+  min?: number;
+  max?: number;
+  step?: number;
+  className?: string;
+}
+
+export function NumberInput({ value, onChange, min, max, step, className }: NumberInputProps) {
+  return (
+    <InputGroup className={cn("h-7 w-20 rounded-sm border-none dark:bg-input/60", className)}>
+      <InputGroupInput
+        className="h-7 px-1 py-0 pl-2 text-xs"
+        max={max}
+        min={min}
+        onChange={(e) => onChange(Number(e.target.value) || 0)}
+        step={step}
+        type="number"
+        value={value}
+      />
+    </InputGroup>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/product-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/product-input.tsx
new file mode 100644
index 000000000..e48f47029
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/product-input.tsx
@@ -0,0 +1,135 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
+import {
+  cn,
+  Combobox,
+  ComboboxContent,
+  ComboboxEmpty,
+  ComboboxInput,
+  ComboboxItem,
+  ComboboxList,
+} from "@voidhash/ui";
+import { Loader2Icon } from "lucide-react";
+import { useMemo, useState } from "react";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { listProductsOptions } from "@/features/studio/lib/tanstack-query/products";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export interface ProductInputProps {
+  value: { productId: string | null };
+  onChange: (value: { productId: string | null }) => void;
+  className?: string;
+}
+
+export function ProductInput({ value, onChange, className }: ProductInputProps) {
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
+  const { user } = useAuth();
+  const [searchQuery, setSearchQuery] = useState<string | null>(null);
+
+  const project = useMemo(() => {
+    if (!organizationSlug || !projectSlug) return null;
+    return CurrentUser.getProjectBySlugs(user, organizationSlug as string, projectSlug as string);
+  }, [user, organizationSlug, projectSlug]);
+
+  const {
+    data: products,
+    isLoading,
+    isError,
+  } = useQuery({
+    ...listProductsOptions({ projectId: project?.id ?? "" }),
+    enabled: !!project?.id,
+  });
+
+  const selectedProduct = useMemo(() => {
+    if (!value.productId || !products) return null;
+    return products.find((p) => p.id === value.productId) ?? null;
+  }, [value.productId, products]);
+
+  // Filter products based on search query
+  const filteredProducts = useMemo(() => {
+    if (!products) return [];
+    if (searchQuery === null || searchQuery === "") return products;
+    const query = searchQuery.toLowerCase();
+    return products.filter((p) => p.name.toLowerCase().includes(query));
+  }, [products, searchQuery]);
+
+  // Display value: show search query when searching, otherwise show selected product name
+  const displayValue = searchQuery !== null ? searchQuery : (selectedProduct?.name ?? "");
+
+  const handleValueChange = (newValue: string | null) => {
+    onChange({ productId: newValue });
+    setSearchQuery(null); // Reset to show product name
+  };
+
+  const handleInputChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+    setSearchQuery(e.target.value);
+  };
+
+  const handleFocus = () => {
+    // When focused, start with empty search to show all products
+    setSearchQuery("");
+  };
+
+  const handleBlur = () => {
+    // When blurred without selection, reset to show product name
+    setSearchQuery(null);
+  };
+
+  if (isLoading) {
+    return (
+      <div
+        className={cn(
+          "flex h-7 min-w-24 flex-1 items-center rounded-sm px-2 dark:bg-input/60",
+          className,
+        )}
+      >
+        <Loader2Icon className="size-3 animate-spin text-muted-foreground" />
+        <span className="ml-2 text-xs text-muted-foreground">Loading...</span>
+      </div>
+    );
+  }
+
+  if (isError || !project) {
+    return (
+      <div
+        className={cn(
+          "flex h-7 min-w-24 flex-1 items-center rounded-sm px-2 text-xs text-destructive dark:bg-input/60",
+          className,
+        )}
+      >
+        Failed to load products
+      </div>
+    );
+  }
+
+  return (
+    <Combobox onValueChange={handleValueChange} value={value.productId}>
+      <ComboboxInput
+        className={cn(
+          "h-7 min-w-24 flex-1 rounded-sm border-none text-xs dark:bg-input/60",
+          className,
+        )}
+        onBlur={handleBlur}
+        onChange={handleInputChange}
+        onFocus={handleFocus}
+        placeholder="Select product..."
+        showTrigger
+        value={displayValue}
+      />
+      <ComboboxContent>
+        <ComboboxList>
+          {filteredProducts.length === 0 && <ComboboxEmpty>No products found</ComboboxEmpty>}
+          {filteredProducts.map((product) => (
+            <ComboboxItem key={product.id} value={product.id}>
+              <span>{product.name}</span>
+              <span className="ml-auto text-xs text-muted-foreground">{product.type}</span>
+            </ComboboxItem>
+          ))}
+        </ComboboxList>
+      </ComboboxContent>
+    </Combobox>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/string-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/string-input.tsx
new file mode 100644
index 000000000..ee17ea738
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/string-input.tsx
@@ -0,0 +1,31 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
+
+export interface StringInputProps {
+  value: string;
+  onChange: (value: string) => void;
+  placeholder?: string;
+  className?: string;
+}
+
+export function StringInput({
+  value,
+  onChange,
+  placeholder = "Value...",
+  className,
+}: StringInputProps) {
+  return (
+    <InputGroup
+      className={cn("h-7 min-w-20 flex-1 rounded-sm border-none dark:bg-input/60", className)}
+    >
+      <InputGroupInput
+        className="h-7 px-1 py-0 pl-2 text-xs"
+        onChange={(e) => onChange(e.target.value)}
+        placeholder={placeholder}
+        value={value}
+      />
+    </InputGroup>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/literal-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/literal-input.tsx
new file mode 100644
index 000000000..a1e5f1d8a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/literal-input.tsx
@@ -0,0 +1,25 @@
+"use client";
+
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+
+import { renderVariableInput } from "./variable-type-renderers";
+
+export interface LiteralInputProps {
+  value: VariableType;
+  onChange: (value: VariableType) => void;
+  /** If set, constrains to this type and hides type selector */
+  expectedType?: VariableTypeKey;
+  /** Custom literal renderer; defaults to the per-type input switch. */
+  renderLiteral?: (value: VariableType, onChange: (value: VariableType) => void) => React.ReactNode;
+  className?: string;
+}
+
+export function LiteralInput({ value, onChange, renderLiteral, className }: LiteralInputProps) {
+  return (
+    <div className={className ?? "flex flex-row gap-1"}>
+      {renderLiteral
+        ? renderLiteral(value, onChange)
+        : renderVariableInput(value, onChange, "flex-1")}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/types.ts b/apps/www/src/features/studio/paywalls/designer/components/variables/types.ts
new file mode 100644
index 000000000..1c74daa3b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/types.ts
@@ -0,0 +1,53 @@
+import type { Variable, VariableType } from "@voidhash/mimic-schema";
+
+/**
+ * Flat variable optionally annotated for picker UIs: `ownerLabel` marks
+ * variables declared on an ancestor node (rendered as secondary "from …"
+ * text), `aliasId` is an alternate id (array-entry vs internal) that stored
+ * references may use instead of `id`.
+ */
+export interface LabeledVariable extends Variable {
+  readonly ownerLabel?: string;
+  readonly aliasId?: string;
+}
+
+/**
+ * Finds a variable by a stored reference id, matching either the primary id
+ * or the alias id (entry and internal ids both appear in stored references).
+ */
+export function findVariableByRef(
+  variables: readonly LabeledVariable[],
+  referenceId: string | null | undefined,
+): LabeledVariable | undefined {
+  if (!referenceId) {
+    return undefined;
+  }
+  return variables.find((v) => v.id === referenceId || v.aliasId === referenceId);
+}
+
+/**
+ * Represents either a literal value or a reference to a variable.
+ * This is the core type for the VariableInput component.
+ */
+export interface VariableInputValue {
+  type: "literal" | "variable-reference";
+  value: VariableType | { id: string };
+}
+
+/**
+ * Type guard to check if a VariableInputValue is a literal.
+ */
+export function isLiteralValue(
+  value: VariableInputValue,
+): value is { type: "literal"; value: VariableType } {
+  return value.type === "literal";
+}
+
+/**
+ * Type guard to check if a VariableInputValue is a variable reference.
+ */
+export function isVariableReference(
+  value: VariableInputValue,
+): value is { type: "variable-reference"; value: { id: string } } {
+  return value.type === "variable-reference";
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/utils.ts b/apps/www/src/features/studio/paywalls/designer/components/variables/utils.ts
new file mode 100644
index 000000000..c1466e3cd
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/utils.ts
@@ -0,0 +1,45 @@
+import type { Variable, VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+
+import { VARIABLE_TYPE_REGISTRY } from "../../constants";
+import type { VariableInputValue } from "./types";
+
+/**
+ * Creates a default operand (literal value) for a given variable type.
+ */
+export function createDefaultOperand(type: VariableTypeKey = "boolean"): VariableInputValue {
+  return {
+    type: "literal",
+    value: VARIABLE_TYPE_REGISTRY[type].defaultValue,
+  };
+}
+
+/**
+ * Gets the variable type key from a variable input value.
+ * For literals, returns the type from the value itself.
+ * For variable references, looks up the variable and returns its type.
+ */
+export function getOperandType(
+  operand: VariableInputValue,
+  variables: readonly Variable[],
+): VariableTypeKey {
+  if (operand.type === "literal") {
+    return (operand.value as VariableType).key;
+  }
+  const variableRef = operand.value as { id: string };
+  const variable = variables.find((v) => v.id === variableRef.id);
+  return variable?.value.key ?? "boolean";
+}
+
+/**
+ * Creates a deep clone of an object using JSON serialization.
+ */
+export function deepClone<T>(obj: T): T {
+  return JSON.parse(JSON.stringify(obj));
+}
+
+/**
+ * Performs a deep equality check using JSON serialization.
+ */
+export function deepEqual(a: unknown, b: unknown): boolean {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/variable-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/variable-input.tsx
new file mode 100644
index 000000000..b7d54d350
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/variable-input.tsx
@@ -0,0 +1,168 @@
+"use client";
+
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+import {
+  Button,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  cn,
+} from "@voidhash/ui";
+import { DiamondIcon } from "lucide-react";
+import { useMemo } from "react";
+import { toast } from "sonner";
+
+import { VARIABLE_TYPE_REGISTRY } from "../../constants";
+import { LiteralInput } from "./literal-input";
+import { findVariableByRef } from "./types";
+import type { LabeledVariable, VariableInputValue } from "./types";
+
+export interface VariableInputProps {
+  value: VariableInputValue;
+  onChange: (value: VariableInputValue) => void;
+  /** Available variables that can be referenced */
+  variables: readonly LabeledVariable[];
+  /** If set, only allows this type (filters variables, constrains literals) */
+  expectedType?: VariableTypeKey;
+  /** Custom literal renderer; defaults to the per-type input switch. */
+  renderLiteral?: (value: VariableType, onChange: (value: VariableType) => void) => React.ReactNode;
+  className?: string;
+}
+
+export function VariableInput({
+  value,
+  onChange,
+  variables,
+  expectedType,
+  renderLiteral,
+  className,
+}: VariableInputProps) {
+  const isLiteral = value.type === "literal";
+
+  // Filter variables by expected type
+  const compatibleVariables = useMemo(() => {
+    if (!expectedType) {
+      return variables;
+    }
+    return variables.filter((v) => v.value.key === expectedType);
+  }, [variables, expectedType]);
+
+  // Get current variable info for display
+  const currentVariableId = useMemo(() => {
+    if (value.type !== "variable-reference") {
+      return null;
+    }
+    return (value.value as { id: string }).id;
+  }, [value]);
+
+  const currentVariable = useMemo(
+    () => findVariableByRef(variables, currentVariableId),
+    [currentVariableId, variables],
+  );
+
+  // Get current type from value
+  const currentType = useMemo((): VariableTypeKey => {
+    if (value.type === "literal") {
+      return (value.value as VariableType).key;
+    }
+    return currentVariable?.value.key ?? "boolean";
+  }, [value, currentVariable]);
+
+  const handleSourceChange = (source: "literal" | "variable") => {
+    if (source === "literal") {
+      onChange({
+        type: "literal",
+        value: VARIABLE_TYPE_REGISTRY[expectedType ?? currentType].defaultValue,
+      });
+    } else {
+      // Find first compatible variable
+      const firstVariable = compatibleVariables[0];
+      if (firstVariable) {
+        onChange({
+          type: "variable-reference",
+          value: { id: firstVariable.id },
+        });
+      } else {
+        toast.error("No compatible variables available");
+      }
+    }
+  };
+
+  const handleVariableChange = (variableId: string) => {
+    onChange({
+      type: "variable-reference",
+      value: { id: variableId },
+    });
+  };
+
+  const handleLiteralChange = (literalValue: VariableType) => {
+    onChange({
+      type: "literal",
+      value: literalValue,
+    });
+  };
+
+  return (
+    <div className={cn("flex flex-row ring-1 ring-border rounded-md items-center", className)}>
+      {/* Value/Variable input */}
+      {isLiteral ? (
+        <LiteralInput
+          className="flex-1"
+          expectedType={expectedType}
+          onChange={handleLiteralChange}
+          renderLiteral={renderLiteral}
+          value={value.value as VariableType}
+        />
+      ) : (
+        <Select onValueChange={handleVariableChange} value={currentVariable?.id ?? ""}>
+          <SelectTrigger className="h-7 min-w-24 text-xs flex-1" size="sm">
+            <SelectValue placeholder="Select variable">
+              {currentVariable ? (
+                <>
+                  {currentVariable.name}
+                  {currentVariable.ownerLabel ? (
+                    <span className="ml-1 text-muted-foreground">
+                      from {currentVariable.ownerLabel}
+                    </span>
+                  ) : null}
+                </>
+              ) : (
+                "Unknown"
+              )}
+            </SelectValue>
+          </SelectTrigger>
+          <SelectContent>
+            {compatibleVariables.map((variable) => (
+              <SelectItem key={variable.id} value={variable.id}>
+                <span>{variable.name}</span>
+                {variable.ownerLabel ? (
+                  <span className="text-muted-foreground text-xs">from {variable.ownerLabel}</span>
+                ) : null}
+              </SelectItem>
+            ))}
+          </SelectContent>
+        </Select>
+      )}
+
+      {/* Toggle between literal and variable */}
+      <Button
+        onClick={() => {
+          if (isLiteral) {
+            handleSourceChange("variable");
+            return;
+          }
+          handleSourceChange("literal");
+        }}
+        size="icon-sm"
+        variant="ghost"
+      >
+        <DiamondIcon
+          className={cn("text-muted-foreground", !isLiteral && "text-primary")}
+          fill={isLiteral ? "transparent" : "currentColor"}
+        />
+      </Button>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/variable-selector.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/variable-selector.tsx
new file mode 100644
index 000000000..e0d218e58
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/variable-selector.tsx
@@ -0,0 +1,59 @@
+"use client";
+
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@voidhash/ui";
+import { useMemo } from "react";
+
+import { findVariableByRef } from "./types";
+import type { LabeledVariable } from "./types";
+
+export interface VariableSelectorProps {
+  variableId: string | null;
+  onChange: (variableId: string) => void;
+  variables: readonly LabeledVariable[];
+  placeholder?: string;
+  className?: string;
+}
+
+export function VariableSelector({
+  variableId,
+  onChange,
+  variables,
+  placeholder = "Select...",
+  className,
+}: VariableSelectorProps) {
+  const currentVariable = useMemo(
+    () => findVariableByRef(variables, variableId) ?? null,
+    [variableId, variables],
+  );
+
+  return (
+    <Select onValueChange={onChange} value={currentVariable?.id ?? ""}>
+      <SelectTrigger className={className ?? "h-7 min-w-28 text-xs"} size="sm">
+        <SelectValue placeholder={placeholder}>
+          {currentVariable ? (
+            <>
+              {currentVariable.name}
+              {currentVariable.ownerLabel ? (
+                <span className="ml-1 text-muted-foreground">
+                  from {currentVariable.ownerLabel}
+                </span>
+              ) : null}
+            </>
+          ) : (
+            placeholder
+          )}
+        </SelectValue>
+      </SelectTrigger>
+      <SelectContent>
+        {variables.map((variable) => (
+          <SelectItem key={variable.id} value={variable.id}>
+            <span>{variable.name}</span>
+            {variable.ownerLabel ? (
+              <span className="text-muted-foreground text-xs">from {variable.ownerLabel}</span>
+            ) : null}
+          </SelectItem>
+        ))}
+      </SelectContent>
+    </Select>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/variable-type-renderers.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/variable-type-renderers.tsx
new file mode 100644
index 000000000..952273e6b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/variable-type-renderers.tsx
@@ -0,0 +1,58 @@
+"use client";
+
+import type { VariableType } from "@voidhash/mimic-schema";
+
+import { BooleanInput } from "./inputs/boolean-input";
+import { NumberInput } from "./inputs/number-input";
+import { ProductInput } from "./inputs/product-input";
+import { StringInput } from "./inputs/string-input";
+
+/**
+ * Renders the appropriate input for a given variable type.
+ * Uses pattern matching to ensure type safety.
+ */
+export function renderVariableInput(
+  value: VariableType,
+  onChange: (value: VariableType) => void,
+  className?: string,
+): React.ReactNode {
+  switch (value.key) {
+    case "boolean":
+      return (
+        <BooleanInput
+          className={className}
+          onChange={(v) => onChange({ key: "boolean", value: v })}
+          value={value.value}
+        />
+      );
+    case "number":
+      return (
+        <NumberInput
+          className={className}
+          onChange={(v) => onChange({ key: "number", value: v })}
+          value={value.value}
+        />
+      );
+    case "string":
+      return (
+        <StringInput
+          className={className}
+          onChange={(v) => onChange({ key: "string", value: v })}
+          value={value.value}
+        />
+      );
+    case "product":
+      return (
+        <ProductInput
+          className={className}
+          onChange={(v) =>
+            onChange({
+              key: "product",
+              value: v.productId === null ? {} : { productId: v.productId },
+            })
+          }
+          value={{ productId: value.value.productId ?? null }}
+        />
+      );
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/constants.ts b/apps/www/src/features/studio/paywalls/designer/constants.ts
new file mode 100644
index 000000000..46df4d624
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/constants.ts
@@ -0,0 +1,103 @@
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+
+// ================================
+// Debug
+// ================================
+export const SHOW_GRID = false;
+
+export const CANVAS_DEFAULTS = {
+  WORLD_WIDTH: 20_000,
+  WORLD_HEIGHT: 20_000,
+  MIN_ZOOM: 0.1,
+  MAX_ZOOM: 5,
+  GRID_SIZE: 20,
+  // Colors
+  PRIMARY_COLOR: 0x00_5e_ff,
+  GRID_COLOR: 0x3f_3f_3f,
+  BACKGROUND_COLOR: "#121212",
+} as const;
+
+export const INIT_SCREEN_DATA = {
+  backgroundColor: "#ffffff",
+  height: 844,
+  width: 390,
+  x: 0,
+  y: 0,
+} as const;
+
+// ================================
+// Variable Types
+// ================================
+
+/** Predicate types for comparing variable values */
+export type PredicateType =
+  | "equals"
+  | "not-equals"
+  | "greater-than"
+  | "greater-than-or-equal"
+  | "less-than"
+  | "less-than-or-equal";
+
+/** Configuration for each variable type */
+export interface VariableTypeConfig {
+  /** Display label for the type */
+  label: string;
+  /** Short label for compact UIs */
+  shortLabel: string;
+  /** Available predicates for this type in conditions */
+  predicates: readonly PredicateType[];
+  /** Default value when creating a new literal of this type */
+  defaultValue: VariableType;
+  /** Category for grouping in menus */
+  category: "primitive" | "entity";
+}
+
+/** Registry of all available variable types and their configurations */
+export const VARIABLE_TYPE_REGISTRY: Record<VariableTypeKey, VariableTypeConfig> = {
+  boolean: {
+    category: "primitive",
+    defaultValue: { key: "boolean", value: true },
+    label: "Boolean",
+    predicates: ["equals", "not-equals"],
+    shortLabel: "Bool",
+  },
+  number: {
+    category: "primitive",
+    defaultValue: { key: "number", value: 0 },
+    label: "Number",
+    predicates: [
+      "equals",
+      "not-equals",
+      "greater-than",
+      "greater-than-or-equal",
+      "less-than",
+      "less-than-or-equal",
+    ],
+    shortLabel: "Num",
+  },
+  product: {
+    category: "entity",
+    // absence means "no product selected" (the schema has no null values)
+    defaultValue: { key: "product", value: {} },
+    label: "Product",
+    predicates: ["equals", "not-equals"],
+    shortLabel: "Product",
+  },
+  string: {
+    category: "primitive",
+    defaultValue: { key: "string", value: "" },
+    label: "Text",
+    predicates: ["equals", "not-equals"],
+    shortLabel: "Text",
+  },
+};
+
+/** Human-readable labels for predicate types */
+export const PREDICATE_LABELS: Record<PredicateType, string> = {
+  equals: "equals",
+  "greater-than": ">",
+  "greater-than-or-equal": ">=",
+  "less-than": "<",
+  "less-than-or-equal": "<=",
+  "not-equals": "not equals",
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/actions-inspector.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/actions-inspector.tsx
new file mode 100644
index 000000000..e818e9312
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/actions-inspector.tsx
@@ -0,0 +1,185 @@
+"use client";
+
+import { Button, Input } from "@voidhash/ui";
+import { SearchIcon, TrashIcon } from "lucide-react";
+import { useCallback, useEffect, useRef, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { JsonTreeViewer } from "./json-tree-viewer";
+
+interface ActionLogEntry {
+  id: number;
+  timestamp: Date;
+  type: "snapshot" | "presence";
+  description: string;
+  data: unknown;
+}
+
+let actionId = 0;
+
+export function ActionsInspector() {
+  const store = usePaywallDesignerStore();
+  const snapshot = useStore(store, (state) => state.mimic.snapshot);
+  const presence = useStore(store, (state) => state.mimic.presence);
+
+  const [actionLog, setActionLog] = useState<ActionLogEntry[]>([]);
+
+  const [searchQuery, setSearchQuery] = useState("");
+  const [selectedAction, setSelectedAction] = useState<ActionLogEntry | null>(null);
+
+  const prevSnapshotRef = useRef<unknown>(null);
+  const prevPresenceRef = useRef<unknown>(null);
+  const isInitialMount = useRef(true);
+
+  // Track snapshot changes
+  useEffect(() => {
+    if (isInitialMount.current) {
+      prevSnapshotRef.current = snapshot;
+      return;
+    }
+
+    if (snapshot !== prevSnapshotRef.current) {
+      const entry: ActionLogEntry = {
+        id: ++actionId,
+        timestamp: new Date(),
+        type: "snapshot",
+        description: "Document changed",
+        data: {
+          previous: prevSnapshotRef.current,
+          current: snapshot,
+        },
+      };
+      setActionLog((prev) => [entry, ...prev].slice(0, 100)); // Keep last 100
+      prevSnapshotRef.current = snapshot;
+    }
+  }, [snapshot]);
+
+  // Track presence changes
+  useEffect(() => {
+    if (isInitialMount.current) {
+      prevPresenceRef.current = presence;
+      isInitialMount.current = false;
+      return;
+    }
+
+    if (presence !== prevPresenceRef.current) {
+      const entry: ActionLogEntry = {
+        id: ++actionId,
+        timestamp: new Date(),
+        type: "presence",
+        description: "Presence updated",
+        data: {
+          previous: prevPresenceRef.current,
+          current: presence,
+        },
+      };
+      setActionLog((prev) => [entry, ...prev].slice(0, 100));
+      prevPresenceRef.current = presence;
+    }
+  }, [presence]);
+
+  const handleClearLog = useCallback(() => {
+    setActionLog([]);
+    setSelectedAction(null);
+  }, []);
+
+  const filteredLog = searchQuery
+    ? actionLog.filter(
+        (entry) =>
+          entry.description.toLowerCase().includes(searchQuery.toLowerCase()) ||
+          entry.type.toLowerCase().includes(searchQuery.toLowerCase()) ||
+          JSON.stringify(entry.data).toLowerCase().includes(searchQuery.toLowerCase()),
+      )
+    : actionLog;
+
+  return (
+    <div className="flex h-full">
+      {/* Action List */}
+      <div className="flex w-80 shrink-0 flex-col border-border border-r">
+        <div className="flex items-center gap-2 border-border border-b p-2">
+          <div className="relative flex-1">
+            <SearchIcon className="absolute top-1/2 left-2 size-4 -translate-y-1/2 text-muted-foreground" />
+            <Input
+              type="text"
+              placeholder="Search actions..."
+              value={searchQuery}
+              onChange={(e) => setSearchQuery(e.target.value)}
+              className="h-8 pl-8 font-mono text-xs"
+            />
+          </div>
+          <Button
+            variant="ghost"
+            size="icon"
+            className="size-8"
+            onClick={handleClearLog}
+            title="Clear log"
+          >
+            <TrashIcon className="size-4" />
+          </Button>
+        </div>
+        <div className="flex-1 overflow-auto">
+          {filteredLog.length === 0 ? (
+            <div className="flex h-full items-center justify-center p-4 text-center text-muted-foreground text-xs">
+              {actionLog.length === 0
+                ? "No actions recorded yet. Make changes in the designer to see them here."
+                : "No actions match your search."}
+            </div>
+          ) : (
+            <div className="divide-y divide-border">
+              {filteredLog.map((entry) => (
+                <button
+                  key={entry.id}
+                  type="button"
+                  className={`w-full p-2 text-left hover:bg-accent/50 ${
+                    selectedAction?.id === entry.id ? "bg-accent" : ""
+                  }`}
+                  onMouseDown={() => setSelectedAction(entry)}
+                >
+                  <div className="flex items-center justify-between gap-2">
+                    <span
+                      className={`rounded-sm px-1.5 py-0.5 font-mono text-xs ${
+                        entry.type === "snapshot"
+                          ? "bg-blue-100 text-blue-700 dark:bg-blue-900 dark:text-blue-300"
+                          : "bg-green-100 text-green-700 dark:bg-green-900 dark:text-green-300"
+                      }`}
+                    >
+                      {entry.type}
+                    </span>
+                    <span className="text-muted-foreground text-xs">
+                      {entry.timestamp.toLocaleTimeString()}
+                    </span>
+                  </div>
+                  <div className="mt-1 truncate font-medium text-xs">{entry.description}</div>
+                </button>
+              ))}
+            </div>
+          )}
+        </div>
+      </div>
+
+      {/* Action Details */}
+      <div className="flex flex-1 flex-col overflow-hidden">
+        {selectedAction ? (
+          <>
+            <div className="shrink-0 border-border border-b p-3">
+              <div className="flex items-center justify-between">
+                <span className="font-semibold text-sm">{selectedAction.description}</span>
+                <span className="text-muted-foreground text-xs">
+                  {selectedAction.timestamp.toLocaleString()}
+                </span>
+              </div>
+            </div>
+            <div className="flex-1 overflow-auto p-4">
+              <JsonTreeViewer data={selectedAction.data} searchQuery="" />
+            </div>
+          </>
+        ) : (
+          <div className="flex h-full items-center justify-center text-muted-foreground text-sm">
+            Select an action to view details
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-layers-panel.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-layers-panel.tsx
new file mode 100644
index 000000000..7b0d39b74
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-layers-panel.tsx
@@ -0,0 +1,275 @@
+"use client";
+
+import {
+  cn,
+  ContextMenu,
+  ContextMenuContent,
+  ContextMenuItem,
+  ContextMenuTrigger,
+} from "@voidhash/ui";
+import {
+  ChevronDown,
+  ChevronRight,
+  Columns2Icon,
+  Rows2Icon,
+  Smartphone,
+  SquareDashedIcon,
+  TypeIcon,
+} from "lucide-react";
+import { useCallback, useState } from "react";
+
+import { deleteNodes, selectNode } from "../state/actions";
+import { usePaywallDesignerActions } from "../state/designer-store";
+
+/**
+ * Structural view of designer snapshot nodes carrying just the fields the
+ * dev layers tree reads. Snapshot nodes nest their payload under `data`;
+ * `style` stays untyped because each node type carries a different struct.
+ */
+interface SnapshotNode {
+  id: string;
+  type: string;
+  // `path`/`source` (a `codeComponent`'s data) keep this from being a "weak
+  // type" so the whole `RootSnapshotNode` tree assigns here.
+  data?: {
+    name?: string;
+    style?: Record<string, unknown>;
+    path?: string;
+    source?: string;
+  };
+  children?: readonly SnapshotNode[];
+}
+
+interface DevLayersPanelProps {
+  snapshot: SnapshotNode | null;
+  selectedNodeId: string | null;
+  onSelectNode: (nodeId: string, jsonPath: string) => void;
+}
+
+interface LayerItemProps {
+  node: SnapshotNode;
+  depth: number;
+  basePath: string;
+  selectedNodeId: string | null;
+  expandedIds: Set<string>;
+  onToggle: (id: string) => void;
+  onSelect: (nodeId: string, jsonPath: string) => void;
+}
+
+const INDENT_WIDTH = 16;
+
+const typeIcons = {
+  column: Rows2Icon,
+  root: null,
+  row: Columns2Icon,
+  screen: Smartphone,
+  text: TypeIcon,
+  view: SquareDashedIcon,
+} as const;
+
+function getIconType(node: SnapshotNode): keyof typeof typeIcons {
+  if (node.type === "view") {
+    const hasChildren = (node.children?.length ?? 0) > 0;
+    if (!hasChildren) return "view";
+    return node.data?.style?.["flexDirection"] === "column" ? "column" : "row";
+  }
+  return node.type as keyof typeof typeIcons;
+}
+
+function LayerItem({
+  node,
+  depth,
+  basePath,
+  selectedNodeId,
+  expandedIds,
+  onToggle,
+  onSelect,
+}: LayerItemProps) {
+  const hasChildren = (node.children?.length ?? 0) > 0;
+  const isExpanded = expandedIds.has(node.id);
+  const isSelected = selectedNodeId === node.id;
+  const iconType = getIconType(node);
+  const Icon = typeIcons[iconType];
+  const displayName = node.data?.name ?? node.type;
+
+  // Skip root node in display but process children
+  if (node.type === "root") {
+    return (
+      <>
+        {node.children?.map((child, index) => (
+          <LayerItem
+            key={child.id}
+            node={child}
+            depth={depth}
+            basePath={`${basePath}.children.${index}`}
+            selectedNodeId={selectedNodeId}
+            expandedIds={expandedIds}
+            onToggle={onToggle}
+            onSelect={onSelect}
+          />
+        ))}
+      </>
+    );
+  }
+
+  const handleToggle = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    e.preventDefault();
+    onToggle(node.id);
+  };
+
+  const handleMouseDown = (e: React.MouseEvent) => {
+    // Only handle left click
+    if (e.button !== 0) return;
+    onSelect(node.id, basePath);
+  };
+
+  const indentStyle = { paddingLeft: `${depth * INDENT_WIDTH}px` };
+
+  return (
+    <>
+      <LayerItemContextMenu
+        nodeId={node.id}
+        nodeType={node.type}
+        onSelectNode={() => onSelect(node.id, basePath)}
+      >
+        <div
+          className={cn(
+            "flex h-7 items-center gap-1 rounded-sm px-1 cursor-pointer hover:bg-accent/50",
+            isSelected && "bg-accent text-accent-foreground",
+          )}
+          style={indentStyle}
+          onMouseDown={handleMouseDown}
+        >
+          <button
+            className="flex shrink-0 items-center rounded-sm p-0.5 hover:bg-accent"
+            onMouseDown={handleToggle}
+            type="button"
+          >
+            {hasChildren ? (
+              isExpanded ? (
+                <ChevronDown className="size-3 text-muted-foreground" />
+              ) : (
+                <ChevronRight className="size-3 text-muted-foreground" />
+              )
+            ) : (
+              <span className="size-3" />
+            )}
+          </button>
+          <div className="flex flex-1 items-center gap-1.5 overflow-hidden">
+            {Icon && (
+              <span className="flex size-3.5 shrink-0 items-center justify-center">
+                <Icon className="size-3.5 text-muted-foreground" />
+              </span>
+            )}
+            <span className="truncate font-medium text-xs">{displayName}</span>
+          </div>
+        </div>
+      </LayerItemContextMenu>
+      {isExpanded &&
+        node.children?.map((child, index) => (
+          <LayerItem
+            key={child.id}
+            node={child}
+            depth={depth + 1}
+            basePath={`${basePath}.children.${index}`}
+            selectedNodeId={selectedNodeId}
+            expandedIds={expandedIds}
+            onToggle={onToggle}
+            onSelect={onSelect}
+          />
+        ))}
+    </>
+  );
+}
+
+function LayerItemContextMenu({
+  children,
+  nodeId,
+  nodeType,
+  onSelectNode,
+}: {
+  children: React.ReactNode;
+  nodeId: string;
+  nodeType: string;
+  onSelectNode: () => void;
+}) {
+  const dispatch = usePaywallDesignerActions();
+
+  // Don't allow deleting root or screen nodes
+  const canDelete = nodeType !== "root" && nodeType !== "screen";
+
+  const handleDelete = () => {
+    // First select the node in the designer store to ensure it's the deletion target
+    dispatch(selectNode)({ id: nodeId, many: false });
+    // Update the local dev-mode selection state
+    onSelectNode();
+    // Then delete it
+    dispatch(deleteNodes)({});
+  };
+
+  return (
+    <ContextMenu>
+      <ContextMenuTrigger asChild>{children}</ContextMenuTrigger>
+      <ContextMenuContent className="w-48">
+        <ContextMenuItem onSelect={handleDelete} disabled={!canDelete}>
+          Delete node
+        </ContextMenuItem>
+      </ContextMenuContent>
+    </ContextMenu>
+  );
+}
+
+export function DevLayersPanel({ snapshot, selectedNodeId, onSelectNode }: DevLayersPanelProps) {
+  const [expandedIds, setExpandedIds] = useState<Set<string>>(() => {
+    // Start with all nodes expanded for dev inspection
+    const ids = new Set<string>();
+    const collectIds = (node: SnapshotNode) => {
+      ids.add(node.id);
+      for (const child of node.children ?? []) {
+        collectIds(child);
+      }
+    };
+    if (snapshot) {
+      collectIds(snapshot);
+    }
+    return ids;
+  });
+
+  const handleToggle = useCallback((id: string) => {
+    setExpandedIds((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) {
+        next.delete(id);
+      } else {
+        next.add(id);
+      }
+      return next;
+    });
+  }, []);
+
+  if (!snapshot) {
+    return (
+      <div className="flex h-full items-center justify-center text-muted-foreground text-xs">
+        No snapshot data
+      </div>
+    );
+  }
+
+  return (
+    <div className="h-full overflow-auto p-2">
+      <div className="mb-2 px-1 font-semibold text-muted-foreground text-xs uppercase tracking-wide">
+        Layers
+      </div>
+      <LayerItem
+        node={snapshot}
+        depth={0}
+        basePath="root"
+        selectedNodeId={selectedNodeId}
+        expandedIds={expandedIds}
+        onToggle={handleToggle}
+        onSelect={onSelectNode}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx
new file mode 100644
index 000000000..9b4695e69
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx
@@ -0,0 +1,60 @@
+"use client";
+
+import { Button, Tabs, TabsList, TabsTrigger } from "@voidhash/ui";
+import { XIcon } from "lucide-react";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import type { DevModeTab } from "../state/designer-store-state";
+import { setDevModeTab, toggleDevMode } from "../state/actions/dev-mode-actions";
+import { PANEL_DIMENSIONS } from "../panels/constants";
+import { ActionsInspector } from "./actions-inspector";
+import { PresenceInspector } from "./presence-inspector";
+import { SnapshotInspector } from "./snapshot-inspector";
+
+const DEV_MODE_TABS: { value: DevModeTab; label: string }[] = [
+  { value: "snapshot", label: "Snapshot" },
+  { value: "presence", label: "Presence" },
+  { value: "actions", label: "Actions" },
+];
+
+export function DevModeView() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const activeTab = useStore(store, (state) => state.devMode.activeTab);
+
+  const handleTabChange = (value: string) => {
+    dispatch(setDevModeTab)({ tab: value as DevModeTab });
+  };
+
+  const handleClose = () => {
+    dispatch(toggleDevMode)({});
+  };
+
+  return (
+    <div
+      className="fixed inset-0 z-40 flex flex-col bg-background"
+      style={{ top: PANEL_DIMENSIONS.TOP_HEIGHT }}
+    >
+      <div className="flex items-center justify-between border-border border-b px-4 py-2">
+        <Tabs value={activeTab} onValueChange={handleTabChange}>
+          <TabsList>
+            {DEV_MODE_TABS.map((tab) => (
+              <TabsTrigger key={tab.value} value={tab.value}>
+                {tab.label}
+              </TabsTrigger>
+            ))}
+          </TabsList>
+        </Tabs>
+        <Button variant="ghost" size="icon" onClick={handleClose}>
+          <XIcon className="size-4" />
+        </Button>
+      </div>
+      <div className="flex-1 overflow-hidden">
+        {activeTab === "snapshot" && <SnapshotInspector />}
+        {activeTab === "presence" && <PresenceInspector />}
+        {activeTab === "actions" && <ActionsInspector />}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/json-tree-viewer.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/json-tree-viewer.tsx
new file mode 100644
index 000000000..d4a581380
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/json-tree-viewer.tsx
@@ -0,0 +1,473 @@
+"use client";
+
+import {
+  cn,
+  ContextMenu,
+  ContextMenuContent,
+  ContextMenuItem,
+  ContextMenuSeparator,
+  ContextMenuTrigger,
+} from "@voidhash/ui";
+import { ChevronDown, ChevronRight } from "lucide-react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+
+interface JsonTreeViewerProps {
+  data: unknown;
+  highlightPath?: string | null;
+  searchQuery?: string;
+  onPathChange?: (path: string | null) => void;
+}
+
+interface JsonNodeProps {
+  value: unknown;
+  path: string;
+  keyName?: string;
+  depth: number;
+  highlightPath: string | null;
+  searchQuery: string;
+  matchingPaths: Set<string>;
+  expandedPaths: Set<string>;
+  onToggle: (path: string) => void;
+  onPathChange?: (path: string | null) => void;
+}
+
+const INDENT_WIDTH = 16;
+
+function getValueType(value: unknown): string {
+  if (value === null) return "null";
+  if (Array.isArray(value)) return "array";
+  return typeof value;
+}
+
+function getPreview(value: unknown): string {
+  if (value === null) return "null";
+  if (Array.isArray(value)) {
+    return `Array(${value.length})`;
+  }
+  if (typeof value === "object" && value !== null) {
+    const keys = Object.keys(value);
+    if (keys.length === 0) return "{}";
+    if (keys.length <= 3) {
+      return `{ ${keys.join(", ")} }`;
+    }
+    return `{ ${keys.slice(0, 3).join(", ")}, ... }`;
+  }
+  return "";
+}
+
+// Copy to clipboard helper
+async function copyToClipboard(text: string) {
+  try {
+    await navigator.clipboard.writeText(text);
+  } catch {
+    // Fallback for older browsers
+    const textArea = document.createElement("textarea");
+    textArea.value = text;
+    document.body.appendChild(textArea);
+    textArea.select();
+    document.execCommand("copy");
+    document.body.removeChild(textArea);
+  }
+}
+
+// Highlight matching text in a string
+function HighlightedText({
+  text,
+  query,
+  className,
+}: {
+  text: string;
+  query: string;
+  className?: string;
+}) {
+  if (!query) {
+    return <span className={className}>{text}</span>;
+  }
+
+  const lowerText = text.toLowerCase();
+  const lowerQuery = query.toLowerCase();
+  const index = lowerText.indexOf(lowerQuery);
+
+  if (index === -1) {
+    return <span className={className}>{text}</span>;
+  }
+
+  return (
+    <span className={className}>
+      {text.slice(0, index)}
+      <mark className="bg-yellow-300 dark:bg-yellow-600 rounded-sm px-0.5">
+        {text.slice(index, index + query.length)}
+      </mark>
+      {text.slice(index + query.length)}
+    </span>
+  );
+}
+
+// Context menu for JSON nodes
+function JsonNodeContextMenu({
+  children,
+  value,
+  path,
+  keyName,
+}: {
+  children: React.ReactNode;
+  value: unknown;
+  path: string;
+  keyName?: string;
+}) {
+  const type = getValueType(value);
+
+  const handleCopyValue = () => {
+    if (type === "object" || type === "array") {
+      copyToClipboard(JSON.stringify(value, null, 2));
+    } else if (value === null) {
+      copyToClipboard("null");
+    } else {
+      copyToClipboard(String(value));
+    }
+  };
+
+  const handleCopyJson = () => {
+    copyToClipboard(JSON.stringify(value, null, 2));
+  };
+
+  const handleCopyJsonCompact = () => {
+    copyToClipboard(JSON.stringify(value));
+  };
+
+  const handleCopyPath = () => {
+    // Convert internal path format to a more readable format
+    // e.g., "root.children.0.id" -> "children[0].id"
+    const readablePath = path.replace(/^root\.?/, "").replace(/\.(\d+)/g, "[$1]");
+    copyToClipboard(readablePath || "(root)");
+  };
+
+  const handleCopyKey = () => {
+    if (keyName !== undefined) {
+      copyToClipboard(keyName);
+    }
+  };
+
+  return (
+    <ContextMenu>
+      <ContextMenuTrigger asChild>{children}</ContextMenuTrigger>
+      <ContextMenuContent className="w-48">
+        <ContextMenuItem onSelect={handleCopyValue}>Copy value</ContextMenuItem>
+        {(type === "object" || type === "array") && (
+          <>
+            <ContextMenuItem onSelect={handleCopyJson}>Copy JSON (formatted)</ContextMenuItem>
+            <ContextMenuItem onSelect={handleCopyJsonCompact}>Copy JSON (compact)</ContextMenuItem>
+          </>
+        )}
+        <ContextMenuSeparator />
+        <ContextMenuItem onSelect={handleCopyPath}>Copy path</ContextMenuItem>
+        {keyName !== undefined && (
+          <ContextMenuItem onSelect={handleCopyKey}>Copy key</ContextMenuItem>
+        )}
+      </ContextMenuContent>
+    </ContextMenu>
+  );
+}
+
+function JsonNode({
+  value,
+  path,
+  keyName,
+  depth,
+  highlightPath,
+  searchQuery,
+  matchingPaths,
+  expandedPaths,
+  onToggle,
+  onPathChange,
+}: JsonNodeProps) {
+  const nodeRef = useRef<HTMLDivElement>(null);
+  const type = getValueType(value);
+  const isExpandable = type === "object" || type === "array";
+  const isExpanded = expandedPaths.has(path);
+  const isHighlighted = highlightPath === path;
+  const isSearchMatch = matchingPaths.has(path);
+
+  // Scroll into view when highlighted
+  useEffect(() => {
+    if (isHighlighted && nodeRef.current) {
+      nodeRef.current.scrollIntoView({
+        behavior: "smooth",
+        block: "center",
+      });
+    }
+  }, [isHighlighted]);
+
+  const handleToggle = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    e.preventDefault();
+    onToggle(path);
+  };
+
+  const handleMouseDown = (e: React.MouseEvent) => {
+    // Only handle left click
+    if (e.button !== 0) return;
+    onPathChange?.(path);
+  };
+
+  const renderValue = () => {
+    const stringValue = String(value);
+    switch (type) {
+      case "string":
+        return (
+          <span className="text-green-600">
+            &quot;
+            <HighlightedText text={stringValue} query={searchQuery} />
+            &quot;
+          </span>
+        );
+      case "number":
+        return <HighlightedText text={stringValue} query={searchQuery} className="text-blue-600" />;
+      case "boolean":
+        return (
+          <HighlightedText text={stringValue} query={searchQuery} className="text-purple-600" />
+        );
+      case "null":
+        return <span className="text-gray-500">null</span>;
+      case "undefined":
+        return <span className="text-gray-500">undefined</span>;
+      default:
+        return null;
+    }
+  };
+
+  const indentStyle = { paddingLeft: `${depth * INDENT_WIDTH}px` };
+
+  if (!isExpandable) {
+    return (
+      <JsonNodeContextMenu value={value} path={path} keyName={keyName}>
+        <div
+          ref={nodeRef}
+          className={cn(
+            "flex items-center py-0.5 hover:bg-accent/30 cursor-pointer rounded-sm",
+            isHighlighted && "bg-yellow-200/50 dark:bg-yellow-800/30",
+            isSearchMatch && !isHighlighted && "bg-orange-100/50 dark:bg-orange-900/30",
+          )}
+          style={indentStyle}
+          onMouseDown={handleMouseDown}
+        >
+          <span className="w-4" />
+          {keyName !== undefined && (
+            <>
+              <HighlightedText text={keyName} query={searchQuery} className="text-foreground" />
+              <span className="text-muted-foreground">:&nbsp;</span>
+            </>
+          )}
+          {renderValue()}
+        </div>
+      </JsonNodeContextMenu>
+    );
+  }
+
+  const entries =
+    type === "array"
+      ? (value as unknown[]).map((v, i) => [String(i), v] as const)
+      : Object.entries(value as Record<string, unknown>);
+
+  const preview = getPreview(value);
+  const bracketOpen = type === "array" ? "[" : "{";
+  const bracketClose = type === "array" ? "]" : "}";
+
+  return (
+    <div>
+      <JsonNodeContextMenu value={value} path={path} keyName={keyName}>
+        <div
+          ref={nodeRef}
+          className={cn(
+            "flex items-center py-0.5 hover:bg-accent/30 cursor-pointer rounded-sm",
+            isHighlighted && "bg-yellow-200/50 dark:bg-yellow-800/30",
+            isSearchMatch && !isHighlighted && "bg-orange-100/50 dark:bg-orange-900/30",
+          )}
+          style={indentStyle}
+          onMouseDown={handleMouseDown}
+        >
+          <button
+            className="flex w-4 shrink-0 items-center justify-center"
+            onMouseDown={handleToggle}
+            type="button"
+          >
+            {isExpanded ? (
+              <ChevronDown className="size-3 text-muted-foreground" />
+            ) : (
+              <ChevronRight className="size-3 text-muted-foreground" />
+            )}
+          </button>
+          {keyName !== undefined && (
+            <>
+              <HighlightedText text={keyName} query={searchQuery} className="text-foreground" />
+              <span className="text-muted-foreground">:&nbsp;</span>
+            </>
+          )}
+          {!isExpanded && <span className="text-muted-foreground">{preview}</span>}
+          {isExpanded && <span className="text-muted-foreground">{bracketOpen}</span>}
+        </div>
+      </JsonNodeContextMenu>
+      {isExpanded && (
+        <>
+          {entries.map(([key, val]) => (
+            <JsonNode
+              key={key}
+              value={val}
+              path={`${path}.${key}`}
+              keyName={key}
+              depth={depth + 1}
+              highlightPath={highlightPath}
+              searchQuery={searchQuery}
+              matchingPaths={matchingPaths}
+              expandedPaths={expandedPaths}
+              onToggle={onToggle}
+              onPathChange={onPathChange}
+            />
+          ))}
+          <div style={indentStyle} className="py-0.5">
+            <span className="w-4 inline-block" />
+            <span className="text-muted-foreground">{bracketClose}</span>
+          </div>
+        </>
+      )}
+    </div>
+  );
+}
+
+// Helper to expand all paths to a given node
+function getPathsToExpand(targetPath: string): string[] {
+  const parts = targetPath.split(".");
+  const paths: string[] = [];
+  for (let i = 1; i <= parts.length; i++) {
+    paths.push(parts.slice(0, i).join("."));
+  }
+  return paths;
+}
+
+// Find all paths that match the search query (exported for use by parent components)
+export function findMatchingPaths(data: unknown, query: string, path = "root"): string[] {
+  if (!query) return [];
+
+  const matches: string[] = [];
+  const lowerQuery = query.toLowerCase();
+
+  const checkMatch = (text: string) => text.toLowerCase().includes(lowerQuery);
+
+  if (data === null || data === undefined) {
+    return matches;
+  }
+
+  if (typeof data === "object" && !Array.isArray(data)) {
+    for (const [key, val] of Object.entries(data)) {
+      const childPath = `${path}.${key}`;
+
+      // Check if key matches
+      if (checkMatch(key)) {
+        matches.push(childPath);
+      }
+
+      // Check primitive values
+      if (typeof val === "string" || typeof val === "number" || typeof val === "boolean") {
+        if (checkMatch(String(val))) {
+          matches.push(childPath);
+        }
+      }
+
+      // Recurse into nested objects/arrays
+      if (typeof val === "object" && val !== null) {
+        matches.push(...findMatchingPaths(val, query, childPath));
+      }
+    }
+  } else if (Array.isArray(data)) {
+    for (const [index, val] of data.entries()) {
+      const childPath = `${path}.${index}`;
+
+      // Check primitive values
+      if (typeof val === "string" || typeof val === "number" || typeof val === "boolean") {
+        if (checkMatch(String(val))) {
+          matches.push(childPath);
+        }
+      }
+
+      // Recurse into nested objects/arrays
+      if (typeof val === "object" && val !== null) {
+        matches.push(...findMatchingPaths(val, query, childPath));
+      }
+    }
+  }
+
+  return matches;
+}
+
+export function JsonTreeViewer({
+  data,
+  highlightPath,
+  searchQuery = "",
+  onPathChange,
+}: JsonTreeViewerProps) {
+  const [expandedPaths, setExpandedPaths] = useState<Set<string>>(() => new Set(["root"]));
+
+  // Find matching paths for search
+  const matchingPaths = useMemo(() => {
+    if (!searchQuery) return new Set<string>();
+    return new Set(findMatchingPaths(data, searchQuery));
+  }, [data, searchQuery]);
+
+  // When highlight path changes, ensure all parent paths are expanded
+  useEffect(() => {
+    if (highlightPath) {
+      const pathsToExpand = getPathsToExpand(highlightPath);
+      setExpandedPaths((prev) => {
+        const next = new Set(prev);
+        for (const p of pathsToExpand) {
+          next.add(p);
+        }
+        return next;
+      });
+    }
+  }, [highlightPath]);
+
+  // When search query changes, expand all paths to matching nodes
+  useEffect(() => {
+    if (matchingPaths.size > 0) {
+      setExpandedPaths((prev) => {
+        const next = new Set(prev);
+        for (const matchPath of matchingPaths) {
+          const pathsToExpand = getPathsToExpand(matchPath);
+          for (const p of pathsToExpand) {
+            next.add(p);
+          }
+        }
+        return next;
+      });
+    }
+  }, [matchingPaths]);
+
+  const handleToggle = useCallback((path: string) => {
+    setExpandedPaths((prev) => {
+      const next = new Set(prev);
+      if (next.has(path)) {
+        next.delete(path);
+      } else {
+        next.add(path);
+      }
+      return next;
+    });
+  }, []);
+
+  return (
+    <div className="font-mono text-xs leading-relaxed">
+      <JsonNode
+        value={data}
+        path="root"
+        depth={0}
+        highlightPath={highlightPath ?? null}
+        searchQuery={searchQuery}
+        matchingPaths={matchingPaths}
+        expandedPaths={expandedPaths}
+        onToggle={handleToggle}
+        onPathChange={onPathChange}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/mimic-preview-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/mimic-preview-renderer.tsx
new file mode 100644
index 000000000..50cc5a5f9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/mimic-preview-renderer.tsx
@@ -0,0 +1,246 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import {
+  buildViewStyles,
+  buildPathStyles,
+  buildScreenContainerStyles,
+  buildShapeContainerStyles,
+  buildTextStyles,
+  type SnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import { MoonIcon, SunIcon } from "lucide-react";
+import type { CSSProperties } from "react";
+import { useMemo, useState } from "react";
+
+type PreviewBackground = "dark" | "light" | "checkerboard";
+
+interface MimicPreviewRendererProps {
+  node: SnapshotNode;
+  maxWidth?: number;
+  maxHeight?: number;
+}
+
+function PreviewNodeRenderer({ node }: { node: SnapshotNode }) {
+  const children = node.children;
+
+  if (node.type === "root" || node.type === "component") {
+    return (
+      <>
+        {children.map((child) => (
+          <PreviewNodeRenderer key={child.id} node={child} />
+        ))}
+      </>
+    );
+  }
+
+  if (node.type === "screen") {
+    const containerStyles = buildScreenContainerStyles(node.data.style) as CSSProperties;
+
+    return (
+      <div
+        style={{
+          ...containerStyles,
+          width: node.data.style.width,
+          height: node.data.style.height,
+          position: "relative",
+        }}
+      >
+        <div
+          style={{
+            ...(buildViewStyles({
+              ...node.data.style,
+              borderTopLeftRadius: 0,
+              borderTopRightRadius: 0,
+              borderBottomRightRadius: 0,
+              borderBottomLeftRadius: 0,
+            }) as CSSProperties),
+            width: "100%",
+            height: "100%",
+          }}
+        >
+          {children.map((child) => (
+            <PreviewNodeRenderer key={child.id} node={child} />
+          ))}
+        </div>
+      </div>
+    );
+  }
+
+  if (node.type === "view") {
+    const viewStyles = buildViewStyles(node.data.style) as CSSProperties;
+
+    return (
+      <div style={viewStyles}>
+        {children.map((child) => (
+          <PreviewNodeRenderer key={child.id} node={child} />
+        ))}
+      </div>
+    );
+  }
+
+  if (node.type === "text") {
+    const textStyles = buildTextStyles(node.data.style) as CSSProperties;
+
+    return <div style={textStyles}>{node.data.text}</div>;
+  }
+
+  if (node.type === "shape") {
+    const containerStyles = buildShapeContainerStyles(node.data.style) as CSSProperties;
+    const viewBox = node.data.viewBox;
+    const viewBoxString = `${viewBox.minX} ${viewBox.minY} ${viewBox.width} ${viewBox.height}`;
+
+    return (
+      <div style={containerStyles}>
+        <svg
+          height="100%"
+          preserveAspectRatio={node.data.style.preserveAspectRatio}
+          style={{ display: "block" }}
+          viewBox={viewBoxString}
+          width="100%"
+        >
+          {children.map((child) => (
+            <PreviewNodeRenderer key={child.id} node={child} />
+          ))}
+        </svg>
+      </div>
+    );
+  }
+
+  if (node.type === "path") {
+    const pathStyles = buildPathStyles(node.data.style);
+
+    return (
+      <path
+        d={node.data.d}
+        fill={pathStyles.fill}
+        fillOpacity={pathStyles.fillOpacity}
+        fillRule={pathStyles.fillRule}
+        opacity={pathStyles.opacity}
+        stroke={pathStyles.stroke}
+        strokeLinecap={pathStyles.strokeLinecap}
+        strokeLinejoin={pathStyles.strokeLinejoin}
+        strokeOpacity={pathStyles.strokeOpacity}
+        strokeWidth={pathStyles.strokeWidth}
+        transform={node.data.transform}
+        vectorEffect="non-scaling-stroke"
+      />
+    );
+  }
+
+  return null;
+}
+
+const BACKGROUND_STYLES: Record<PreviewBackground, CSSProperties> = {
+  dark: { backgroundColor: "#1a1a1a" },
+  light: { backgroundColor: "#f5f5f5" },
+  checkerboard: {
+    backgroundImage: `
+			linear-gradient(45deg, #ccc 25%, transparent 25%),
+			linear-gradient(-45deg, #ccc 25%, transparent 25%),
+			linear-gradient(45deg, transparent 75%, #ccc 75%),
+			linear-gradient(-45deg, transparent 75%, #ccc 75%)
+		`,
+    backgroundSize: "16px 16px",
+    backgroundPosition: "0 0, 0 8px, 8px -8px, -8px 0px",
+    backgroundColor: "#fff",
+  },
+};
+
+function BackgroundIcon({ background }: { background: PreviewBackground }) {
+  if (background === "dark") {
+    return <MoonIcon className="size-3" />;
+  }
+  if (background === "light") {
+    return <SunIcon className="size-3" />;
+  }
+  return (
+    <svg className="size-3" viewBox="0 0 16 16" fill="currentColor">
+      <rect x="0" y="0" width="8" height="8" opacity="0.3" />
+      <rect x="8" y="8" width="8" height="8" opacity="0.3" />
+    </svg>
+  );
+}
+
+export function MimicPreviewRenderer({
+  node,
+  maxWidth = 260,
+  maxHeight = 180,
+}: MimicPreviewRendererProps) {
+  const [background, setBackground] = useState<PreviewBackground>("dark");
+
+  const cycleBackground = () => {
+    setBackground((prev) => {
+      if (prev === "dark") return "light";
+      if (prev === "light") return "checkerboard";
+      return "dark";
+    });
+  };
+
+  const { scale, contentWidth, contentHeight } = useMemo(() => {
+    const style =
+      node.type === "screen" || node.type === "view" || node.type === "shape"
+        ? node.data.style
+        : undefined;
+
+    // Get content dimensions, defaulting to reasonable values
+    const width = typeof style?.width === "number" ? style.width : 200;
+    const height = typeof style?.height === "number" ? style.height : 100;
+
+    // Calculate scale to fit within max bounds
+    const scaleX = maxWidth / width;
+    const scaleY = maxHeight / height;
+    const computedScale = Math.min(scaleX, scaleY, 1);
+
+    return {
+      scale: computedScale,
+      contentWidth: width,
+      contentHeight: height,
+    };
+  }, [node, maxWidth, maxHeight]);
+
+  return (
+    <div className="mb-4 rounded-md border border-border">
+      {/* Background toggle */}
+      <div className="flex items-center justify-end border-border border-b px-2 py-1">
+        <Button
+          variant="ghost"
+          size="icon"
+          className="size-6"
+          onClick={cycleBackground}
+          title={`Background: ${background}`}
+        >
+          <BackgroundIcon background={background} />
+        </Button>
+      </div>
+      {/* Preview area */}
+      <div
+        className="flex items-center justify-center overflow-auto p-4"
+        style={{
+          ...BACKGROUND_STYLES[background],
+          minHeight: 80,
+          maxHeight: maxHeight + 32,
+        }}
+      >
+        <div
+          style={{
+            width: contentWidth * scale,
+            height: contentHeight * scale,
+            flexShrink: 0,
+          }}
+        >
+          <div
+            style={{
+              width: contentWidth,
+              height: contentHeight,
+              transform: `scale(${scale})`,
+              transformOrigin: "top left",
+            }}
+          >
+            <PreviewNodeRenderer node={node} />
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/node-details-panel.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/node-details-panel.tsx
new file mode 100644
index 000000000..ec83c0947
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/node-details-panel.tsx
@@ -0,0 +1,309 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { cn, ScrollArea } from "@voidhash/ui";
+import { ChevronRightIcon } from "lucide-react";
+import type { ReactNode } from "react";
+import { useMemo, useState } from "react";
+
+import { MimicPreviewRenderer } from "./mimic-preview-renderer";
+
+// Collapsible Section component
+function Section({
+  title,
+  children,
+  defaultExpanded = true,
+}: {
+  title: string;
+  children: ReactNode;
+  defaultExpanded?: boolean;
+}) {
+  const [isExpanded, setIsExpanded] = useState(defaultExpanded);
+
+  return (
+    <div className="mb-3">
+      <div
+        className="mb-2 flex cursor-pointer items-center gap-1.5 border-border border-b pb-1 font-medium text-muted-foreground text-xs hover:text-foreground"
+        onMouseDown={() => setIsExpanded(!isExpanded)}
+      >
+        <ChevronRightIcon
+          className={cn("size-3 transition-transform", isExpanded && "rotate-90")}
+        />
+        <span>{title}</span>
+      </div>
+      {isExpanded && <div className="space-y-px">{children}</div>}
+    </div>
+  );
+}
+
+interface NodeDetailsPanelProps {
+  node: SnapshotNode | null;
+}
+
+// Color swatch for color values
+function ColorSwatch({ color }: { color: string }) {
+  return (
+    <span
+      className="mr-1 inline-block size-3 shrink-0 rounded-sm border border-border/60"
+      style={{ backgroundColor: color }}
+    />
+  );
+}
+
+// Check if a value looks like a color
+function isColorValue(value: unknown): string | null {
+  if (typeof value === "string") {
+    if (value.startsWith("#") || value.startsWith("rgb") || value.startsWith("hsl")) {
+      return value;
+    }
+  }
+  return null;
+}
+
+// Format value for display
+function formatValue(value: unknown): React.ReactNode {
+  if (value === undefined) return <span className="text-gray-500">-</span>;
+  if (value === null) return <span className="text-gray-500">null</span>;
+
+  // Handle color values
+  const colorStr = isColorValue(value);
+  if (colorStr) {
+    return (
+      <>
+        <ColorSwatch color={colorStr} />
+        <span>{colorStr}</span>
+      </>
+    );
+  }
+
+  // Handle objects with value/unit
+  if (typeof value === "object" && value !== null && "value" in value) {
+    const obj = value as { value?: number; unit?: string };
+    return (
+      <span>
+        {obj.value}
+        {obj.unit ?? ""}
+      </span>
+    );
+  }
+
+  // Handle other objects
+  if (typeof value === "object") {
+    return <span className="text-gray-500">{JSON.stringify(value)}</span>;
+  }
+
+  // Handle primitives
+  if (typeof value === "string") {
+    return <span>{value}</span>;
+  }
+  if (typeof value === "number") {
+    return <span className="text-blue-400">{value}</span>;
+  }
+  if (typeof value === "boolean") {
+    return <span className="text-purple-400">{String(value)}</span>;
+  }
+
+  return <span>{String(value)}</span>;
+}
+
+// Property row with expandable support
+function PropertyRow({
+  name,
+  value,
+  expandable = false,
+}: {
+  name: string;
+  value: unknown;
+  expandable?: boolean;
+}) {
+  const [isExpanded, setIsExpanded] = useState(false);
+  const isObject = typeof value === "object" && value !== null && !Array.isArray(value);
+  const isArray = Array.isArray(value);
+  const canExpand = expandable && (isObject || isArray);
+
+  return (
+    <div>
+      <div
+        className={cn(
+          "flex items-center gap-1 py-px font-mono text-[11px]",
+          canExpand && "cursor-pointer hover:bg-accent/30",
+        )}
+        onMouseDown={canExpand ? () => setIsExpanded(!isExpanded) : undefined}
+      >
+        {canExpand ? (
+          <ChevronRightIcon
+            className={cn(
+              "size-3 shrink-0 text-muted-foreground transition-transform",
+              isExpanded && "rotate-90",
+            )}
+          />
+        ) : (
+          <span className="w-3 shrink-0" />
+        )}
+        <span className="shrink-0 text-purple-400">{name}</span>
+        <span className="text-muted-foreground">:</span>
+        <span className="ml-1 truncate">{formatValue(value)}</span>
+      </div>
+      {canExpand && isExpanded && (
+        <div className="ml-4 border-border/60 border-l pl-2">
+          {isArray
+            ? (value as unknown[]).map((v, i) => (
+                <PropertyRow key={i} name={String(i)} value={v} expandable />
+              ))
+            : Object.entries(value as Record<string, unknown>).map(([k, v]) => (
+                <PropertyRow key={k} name={k} value={v} expandable />
+              ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+// Get basic node properties for display
+function getBasicProperties(node: SnapshotNode): Array<[string, unknown]> {
+  const props: Array<[string, unknown]> = [];
+
+  props.push(["id", node.id]);
+  props.push(["type", node.type]);
+
+  if ("name" in node.data && node.data.name) {
+    props.push(["name", node.data.name]);
+  }
+
+  if (node.type === "text" && node.data.text) {
+    props.push(["text", node.data.text]);
+  }
+
+  return props;
+}
+
+export function NodeDetailsPanel({ node }: NodeDetailsPanelProps) {
+  if (!node) {
+    return (
+      <div className="flex h-full items-center justify-center text-muted-foreground text-sm">
+        Select a node to view details
+      </div>
+    );
+  }
+
+  const basicProperties = useMemo(() => getBasicProperties(node), [node]);
+  const style: Record<string, unknown> = "style" in node.data ? { ...node.data.style } : {};
+  const states =
+    "states" in node.data
+      ? node.data.states.flatMap((entry) =>
+          entry.value === undefined
+            ? []
+            : [{ condition: entry.value.condition, id: entry.id, name: entry.value.name }],
+        )
+      : [];
+  const localVariables =
+    "localVariables" in node.data
+      ? node.data.localVariables.flatMap((entry) =>
+          entry.value === undefined
+            ? []
+            : [{ id: entry.id, name: entry.value.name, value: entry.value.value }],
+        )
+      : [];
+  const linkedVariables =
+    "linkedVariables" in node.data
+      ? node.data.linkedVariables.flatMap((entry) =>
+          entry.value === undefined ? [] : [entry.value],
+        )
+      : [];
+
+  return (
+    <ScrollArea className="h-full">
+      <div className="p-3">
+        {/* Node Header */}
+        <div className="mb-2 flex items-center gap-2">
+          <span className="rounded bg-accent px-1.5 py-0.5 font-mono text-xs">{node.type}</span>
+          <span className="font-medium text-sm">
+            {("name" in node.data && node.data.name) || node.type}
+          </span>
+        </div>
+
+        {/* Rendered Preview */}
+        <MimicPreviewRenderer node={node} />
+
+        {/* Properties Section */}
+        <Section title="Properties">
+          {basicProperties.map(([key, value]) => (
+            <PropertyRow key={key} name={key} value={value} />
+          ))}
+        </Section>
+
+        {/* Style Section */}
+        <Section title="Style">
+          {Object.keys(style).length > 0 ? (
+            Object.entries(style).map(([key, value]) => (
+              <PropertyRow key={key} name={key} value={value} expandable />
+            ))
+          ) : (
+            <div className="text-muted-foreground text-xs">No styles</div>
+          )}
+        </Section>
+
+        {/* States Section */}
+        <Section title="States">
+          {states.length > 0 ? (
+            states.map((state) => (
+              <PropertyRow
+                key={state.id}
+                name={state.name}
+                value={{ condition: state.condition }}
+                expandable
+              />
+            ))
+          ) : (
+            <div className="text-muted-foreground text-xs">No states</div>
+          )}
+        </Section>
+
+        {/* Local Variables Section */}
+        <Section title="Local Variables">
+          {localVariables.length > 0 ? (
+            localVariables.map((variable) => (
+              <PropertyRow
+                key={variable.id}
+                name={variable.name}
+                value={variable.value}
+                expandable
+              />
+            ))
+          ) : (
+            <div className="text-muted-foreground text-xs">No local variables</div>
+          )}
+        </Section>
+
+        {/* Linked Variables Section */}
+        <Section title="Linked Variables">
+          {linkedVariables.length > 0 ? (
+            linkedVariables.map((variable, index) => (
+              <PropertyRow
+                key={`${variable.name}-${variable.nodeId}-${index}`}
+                name={variable.name}
+                value={variable.nodeId}
+              />
+            ))
+          ) : (
+            <div className="text-muted-foreground text-xs">No linked variables</div>
+          )}
+        </Section>
+      </div>
+    </ScrollArea>
+  );
+}
+
+// Helper function to find a node by ID in the snapshot tree
+export function findNodeById(node: SnapshotNode, targetId: string): SnapshotNode | null {
+  if (node.id === targetId) {
+    return node;
+  }
+
+  for (const child of node.children) {
+    const found = findNodeById(child, targetId);
+    if (found) return found;
+  }
+
+  return null;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/presence-inspector.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/presence-inspector.tsx
new file mode 100644
index 000000000..08bd47eb9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/presence-inspector.tsx
@@ -0,0 +1,95 @@
+"use client";
+
+import { Input } from "@voidhash/ui";
+import { SearchIcon, UserIcon, UsersIcon } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { JsonTreeViewer } from "./json-tree-viewer";
+
+export function PresenceInspector() {
+  const store = usePaywallDesignerStore();
+  const self = useStore(store, (state) => state.mimic.presence?.self);
+  const others = useStore(store, (state) => state.mimic.presence?.others);
+
+  const [searchQuery, setSearchQuery] = useState("");
+
+  // Convert Map to array for display
+  const othersArray = useMemo(() => {
+    if (!others) return [];
+    return Array.from(others.entries()).map(([id, entry]) => ({
+      id,
+      ...entry,
+    }));
+  }, [others]);
+
+  return (
+    <div className="flex h-full flex-col">
+      <div className="shrink-0 border-border border-b p-2">
+        <div className="relative">
+          <SearchIcon className="absolute top-1/2 left-2 size-4 -translate-y-1/2 text-muted-foreground" />
+          <Input
+            type="text"
+            placeholder="Search presence data..."
+            value={searchQuery}
+            onChange={(e) => setSearchQuery(e.target.value)}
+            className="h-8 pl-8 font-mono text-xs"
+          />
+        </div>
+      </div>
+      <div className="flex-1 overflow-auto">
+        <div className="p-4">
+          {/* Current User Section */}
+          <div className="mb-6">
+            <div className="mb-2 flex items-center gap-2">
+              <UserIcon className="size-4 text-muted-foreground" />
+              <span className="font-semibold text-sm">Current User (self)</span>
+              {self?.user && (
+                <span
+                  className="size-3 rounded-full"
+                  style={{ backgroundColor: self.user.color }}
+                />
+              )}
+            </div>
+            <div className="rounded-md border border-border bg-muted/30 p-2">
+              <JsonTreeViewer data={self} searchQuery={searchQuery} />
+            </div>
+          </div>
+
+          {/* Other Users Section */}
+          <div>
+            <div className="mb-2 flex items-center gap-2">
+              <UsersIcon className="size-4 text-muted-foreground" />
+              <span className="font-semibold text-sm">Other Users ({othersArray.length})</span>
+            </div>
+            {othersArray.length > 0 ? (
+              <div className="space-y-3">
+                {othersArray.map((other) => (
+                  <div key={other.id} className="rounded-md border border-border bg-muted/30 p-2">
+                    <div className="mb-2 flex items-center gap-2">
+                      {other.data?.user && (
+                        <>
+                          <span
+                            className="size-3 rounded-full"
+                            style={{ backgroundColor: other.data.user.color }}
+                          />
+                          <span className="font-medium text-xs">{other.data.user.name}</span>
+                        </>
+                      )}
+                    </div>
+                    <JsonTreeViewer data={other} searchQuery={searchQuery} />
+                  </div>
+                ))}
+              </div>
+            ) : (
+              <div className="rounded-md border border-border bg-muted/30 p-4 text-center text-muted-foreground text-xs">
+                No other users connected
+              </div>
+            )}
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/snapshot-inspector.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/snapshot-inspector.tsx
new file mode 100644
index 000000000..f1eba1d5a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/snapshot-inspector.tsx
@@ -0,0 +1,211 @@
+"use client";
+
+import { Button, Input } from "@voidhash/ui";
+import { ChevronDownIcon, ChevronUpIcon, SearchIcon } from "lucide-react";
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { selectDocumentRoot } from "../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../state/utils/presence";
+import { DevLayersPanel } from "./dev-layers-panel";
+import { JsonTreeViewer, findMatchingPaths } from "./json-tree-viewer";
+import { NodeDetailsPanel, findNodeById } from "./node-details-panel";
+
+interface SnapshotNode {
+  id: string;
+  type: string;
+  children?: readonly SnapshotNode[];
+}
+
+export function SnapshotInspector() {
+  const store = usePaywallDesignerStore();
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const designerSelectedNodeIds = useStore(
+    store,
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self)),
+  );
+
+  // Initialize with the first selected node from the designer
+  const [selectedNodeId, setSelectedNodeId] = useState<string | null>(() => {
+    const state = store.getState();
+    const ids = selectedNodeIdsFromPresence(state.mimic.presence?.self);
+    return ids[0] ?? null;
+  });
+  const [highlightPath, setHighlightPath] = useState<string | null>(null);
+  const [searchQuery, setSearchQuery] = useState("");
+  const [currentResultIndex, setCurrentResultIndex] = useState(0);
+
+  // Sync selection when designer selection changes
+  useEffect(() => {
+    if (designerSelectedNodeIds.length > 0 && designerSelectedNodeIds[0]) {
+      setSelectedNodeId(designerSelectedNodeIds[0]);
+    }
+  }, [designerSelectedNodeIds]);
+
+  // Compute matching paths
+  const matchingPaths = useMemo(() => {
+    if (!searchQuery) return [];
+    return findMatchingPaths(documentRoot, searchQuery);
+  }, [documentRoot, searchQuery]);
+
+  const totalResults = matchingPaths.length;
+
+  // Find the selected node data
+  const selectedNode = useMemo(() => {
+    if (!selectedNodeId) return null;
+    return findNodeById(documentRoot, selectedNodeId);
+  }, [selectedNodeId, documentRoot]);
+
+  // Reset index when search query changes
+  useEffect(() => {
+    setCurrentResultIndex(0);
+    if (matchingPaths.length > 0) {
+      setHighlightPath(matchingPaths[0] ?? null);
+    } else {
+      setHighlightPath(null);
+    }
+  }, [searchQuery, matchingPaths]);
+
+  const handleSelectNode = (nodeId: string, jsonPath: string) => {
+    setSelectedNodeId(nodeId);
+    setHighlightPath(jsonPath);
+  };
+
+  const handlePathChange = (path: string | null) => {
+    // When clicking in JSON, try to find the node id at that path
+    if (path) {
+      const nodeId = findNodeIdAtPath(documentRoot, path);
+      setSelectedNodeId(nodeId);
+    } else {
+      setSelectedNodeId(null);
+    }
+    setHighlightPath(path);
+  };
+
+  const goToNextResult = useCallback(() => {
+    if (totalResults === 0) return;
+    const nextIndex = (currentResultIndex + 1) % totalResults;
+    setCurrentResultIndex(nextIndex);
+    setHighlightPath(matchingPaths[nextIndex] ?? null);
+  }, [currentResultIndex, totalResults, matchingPaths]);
+
+  const goToPreviousResult = useCallback(() => {
+    if (totalResults === 0) return;
+    const prevIndex = currentResultIndex === 0 ? totalResults - 1 : currentResultIndex - 1;
+    setCurrentResultIndex(prevIndex);
+    setHighlightPath(matchingPaths[prevIndex] ?? null);
+  }, [currentResultIndex, totalResults, matchingPaths]);
+
+  // Keyboard shortcuts for navigation
+  const handleKeyDown = useCallback(
+    (e: React.KeyboardEvent) => {
+      if (e.key === "Enter") {
+        if (e.shiftKey) {
+          goToPreviousResult();
+        } else {
+          goToNextResult();
+        }
+        e.preventDefault();
+      }
+    },
+    [goToNextResult, goToPreviousResult],
+  );
+
+  return (
+    <div className="flex h-full">
+      <div className="w-64 shrink-0 border-border border-r">
+        <DevLayersPanel
+          snapshot={documentRoot}
+          selectedNodeId={selectedNodeId}
+          onSelectNode={handleSelectNode}
+        />
+      </div>
+      <div className="flex min-w-0 flex-1 flex-col overflow-hidden">
+        <div className="shrink-0 border-border border-b p-2">
+          <div className="flex items-center gap-2">
+            <div className="relative flex-1">
+              <SearchIcon className="absolute top-1/2 left-2 size-4 -translate-y-1/2 text-muted-foreground" />
+              <Input
+                type="text"
+                placeholder="Search keys and values..."
+                value={searchQuery}
+                onChange={(e) => setSearchQuery(e.target.value)}
+                onKeyDown={handleKeyDown}
+                className="h-8 pl-8 pr-24 font-mono text-xs"
+              />
+              {searchQuery && (
+                <div className="absolute top-1/2 right-2 flex -translate-y-1/2 items-center gap-1">
+                  <span className="text-muted-foreground text-xs">
+                    {totalResults > 0
+                      ? `${currentResultIndex + 1} of ${totalResults}`
+                      : "No results"}
+                  </span>
+                </div>
+              )}
+            </div>
+            {searchQuery && totalResults > 0 && (
+              <div className="flex items-center">
+                <Button
+                  variant="ghost"
+                  size="icon"
+                  className="size-8"
+                  onMouseDown={goToPreviousResult}
+                  title="Previous result (Shift+Enter)"
+                >
+                  <ChevronUpIcon className="size-4" />
+                </Button>
+                <Button
+                  variant="ghost"
+                  size="icon"
+                  className="size-8"
+                  onMouseDown={goToNextResult}
+                  title="Next result (Enter)"
+                >
+                  <ChevronDownIcon className="size-4" />
+                </Button>
+              </div>
+            )}
+          </div>
+        </div>
+        <div className="flex-1 overflow-auto p-4">
+          <JsonTreeViewer
+            data={documentRoot}
+            highlightPath={highlightPath}
+            searchQuery={searchQuery}
+            onPathChange={handlePathChange}
+          />
+        </div>
+      </div>
+      {/* Node Details Panel */}
+      <div className="w-80 shrink-0 border-border border-l">
+        <NodeDetailsPanel node={selectedNode} />
+      </div>
+    </div>
+  );
+}
+
+// Helper to find a node id at a given JSON path
+function findNodeIdAtPath(snapshot: SnapshotNode | null, path: string): string | null {
+  if (!snapshot || !path) return null;
+
+  const parts = path.split(".");
+  let current: unknown = snapshot;
+
+  // Skip "root" prefix
+  for (let i = 1; i < parts.length; i++) {
+    const part = parts[i];
+    if (part === undefined) continue;
+    if (current === null || typeof current !== "object") {
+      return null;
+    }
+    current = (current as Record<string, unknown>)[part];
+  }
+
+  if (current && typeof current === "object" && "id" in current) {
+    return (current as SnapshotNode).id;
+  }
+
+  return null;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/global.d.ts b/apps/www/src/features/studio/paywalls/designer/global.d.ts
new file mode 100644
index 000000000..1794cd359
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/global.d.ts
@@ -0,0 +1,24 @@
+/** biome-ignore-all lint/style/noNamespace: <explanation> */
+
+// import type { LayoutContainer } from '@pixi/layout/components';
+import type { PixiReactElementProps } from "@pixi/react";
+// import type { Input } from '@pixi/ui';
+import type { Application } from "pixi.js";
+import type { PropsWithChildren } from "react";
+
+declare global {
+  namespace React {
+    namespace JSX {
+      interface IntrinsicElements extends PixiElements {
+        pixiViewportWrapper: PropsWithChildren<PixiReactElementProps<ViewportWrapper>> & {
+          app: Application;
+        };
+        // pixiContainer: PropsWithChildren<PixiReactElementProps<Container>>;
+        // pixiInput: PropsWithChildren<PixiReactElementProps<Input>>;
+
+        pixiLayoutContainer: PropsWithChildren<PixiReactElementProps<LayoutContainer>>;
+        pixiHTMLText: typeof pixiHTMLText;
+      }
+    }
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-code-component-compilation.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-code-component-compilation.ts
new file mode 100644
index 000000000..9d98631a7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-code-component-compilation.ts
@@ -0,0 +1,136 @@
+"use client";
+
+import { useEffect, useMemo, useRef } from "react";
+import { useStore } from "zustand/react";
+
+import { CompilePipeline } from "../code-mode/compile-pipeline";
+import { hashSource } from "../code-mode/hash";
+import { uploadComponentManifest } from "../code-mode/manifest-upload";
+import {
+  pruneCodeComponentsCompiled,
+  setCodeComponentCompiled,
+} from "../state/actions/code-component-editor-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import {
+  codeComponentDefinitions,
+  selectCodeComponentNodes,
+} from "../state/utils/code-components";
+
+/**
+ * Watches the paywall's code-component definitions and compiles each in-browser
+ * (esbuild-wasm → sandbox render) whenever its source changes, dispatching the
+ * validated artifact into the store. The pipeline (worker + iframe) is created
+ * lazily on the first compile and destroyed on unmount. Mount once inside the
+ * designer, alongside `usePaywallComponentCatalog`.
+ */
+export function useCodeComponentCompilation(): void {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const nodes = useStore(store, selectCodeComponentNodes);
+  const definitions = useMemo(() => codeComponentDefinitions(nodes), [nodes]);
+
+  const pipelineRef = useRef<CompilePipeline | null>(null);
+  const compiledHashes = useRef(new Map<string, string>());
+  const mountedRef = useRef(true);
+
+  useEffect(() => {
+    // Reset on (re)mount — React StrictMode runs mount→cleanup→mount in dev, and
+    // the cleanup flips this false; without re-arming it, every compile result
+    // would be dropped and the component would stick on "compiling".
+    mountedRef.current = true;
+    return () => {
+      mountedRef.current = false;
+      pipelineRef.current?.destroy();
+      pipelineRef.current = null;
+      compiledHashes.current.clear();
+    };
+  }, []);
+
+  useEffect(() => {
+    const liveIds = new Set(definitions.map((definition) => definition.id));
+
+    // Forget compile state for deleted definitions so a re-created id recompiles
+    // and instances of the deleted definition drop to the "deleted" placeholder.
+    for (const id of compiledHashes.current.keys()) {
+      if (!liveIds.has(id)) {
+        compiledHashes.current.delete(id);
+      }
+    }
+    dispatch(pruneCodeComponentsCompiled)({ keepIds: [...liveIds] });
+
+    for (const definition of definitions) {
+      const sourceHash = hashSource(definition.source);
+      if (compiledHashes.current.get(definition.id) === sourceHash) {
+        continue;
+      }
+      compiledHashes.current.set(definition.id, sourceHash);
+
+      pipelineRef.current ??= new CompilePipeline();
+      const pipeline = pipelineRef.current;
+
+      dispatch(setCodeComponentCompiled)({
+        compiled: { sourceHash, status: "compiling" },
+        id: definition.id,
+      });
+
+      const definitionId = definition.id;
+      const applyError = (message: string) => {
+        if (!mountedRef.current || compiledHashes.current.get(definitionId) !== sourceHash) {
+          return;
+        }
+        dispatch(setCodeComponentCompiled)({
+          compiled: { diagnostics: [{ message, phase: "runtime" }], error: message, sourceHash, status: "error" },
+          id: definitionId,
+        });
+      };
+
+      pipeline
+        .compile(definition.source)
+        .then((result) => {
+          // Upload the manifest/diagnostics to the server cache (fire-and-forget,
+          // deduped per sourceHash). Keyed by content, so it is valid regardless
+          // of whether this run is still current — do it before the staleness
+          // guard below so a superseded-but-finished compile still contributes.
+          uploadComponentManifest(sourceHash, result);
+
+          // Apply unless unmounted or superseded — a compile started in a prior
+          // effect run (e.g. before a rename re-ran this effect) must still land,
+          // guarded only by the source-hash staleness check, never by a per-run
+          // cancellation flag (which would strand it in "compiling").
+          if (!mountedRef.current || compiledHashes.current.get(definitionId) !== sourceHash) {
+            return;
+          }
+          if (result.ok) {
+          dispatch(setCodeComponentCompiled)({
+            compiled: {
+              artifact: {
+                code: result.hasPanel ? result.code : undefined,
+                hasPanel: result.hasPanel,
+                manifest: result.manifest,
+                previewTrees: result.previewTrees,
+              },
+              sourceHash,
+              status: "ready",
+            },
+            id: definition.id,
+          });
+        } else {
+          dispatch(setCodeComponentCompiled)({
+            compiled: {
+              diagnostics: result.diagnostics,
+              error: result.diagnostics.map((diagnostic) => diagnostic.message).join("; "),
+              sourceHash,
+              status: "error",
+            },
+            id: definitionId,
+          });
+        }
+        })
+        // A rejection would otherwise strand the component on "compiling"; the
+        // pipeline is designed never to reject, but guard defensively.
+        .catch((error: unknown) => {
+          applyError(error instanceof Error ? error.message : String(error));
+        });
+    }
+  }, [definitions, dispatch]);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-component-manifest.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-component-manifest.ts
new file mode 100644
index 000000000..77e2eaf2e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-component-manifest.ts
@@ -0,0 +1,45 @@
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { getBuiltinComponent } from "@voidhash/paywall-builtins";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { definitionForComponentPath } from "../state/utils/code-components";
+
+/**
+ * Resolves the {@link ComponentManifest} for a component instance node from the
+ * correct source: local (in-document) code components read their compiled
+ * artifact manifest, resolved from the instance's `componentPath` → definition
+ * → compiled entry; builtin components read their manifest from the static
+ * registry by stable `componentSlug`; catalog components read the pinned version
+ * by `contentHash`. Returns `undefined` when no manifest is available yet (local
+ * component still compiling / its file missing, unknown builtin slug, or catalog
+ * version not mirrored into the project).
+ *
+ * This is the shared resolution used by the Props and Actions sections; it
+ * matches `useComponentNodeWarnings` and fixes the historical bug where local
+ * component instances resolved catalog-only and reported "not in catalog".
+ */
+export function useComponentManifest(
+  node: ComponentSnapshotNode,
+): ComponentManifest | undefined {
+  const store = usePaywallDesignerStore();
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const compiled = useStore(store, (state) => state.codeComponents.compiled);
+  const definitionId = useStore(store, (state) =>
+    node.data.componentSource === "local"
+      ? definitionForComponentPath(state, node.data.componentPath)?.id
+      : undefined,
+  );
+
+  if (node.data.componentSource === "local") {
+    return definitionId !== undefined ? compiled[definitionId]?.artifact?.manifest : undefined;
+  }
+  if (node.data.componentSource === "builtin") {
+    // The builtin manifest is the same §2 shape but declared in
+    // @voidhash/paywalls/schema, whose scalar `default` fields widen to
+    // `unknown`; panels only read it, so bridge the nominal divergence.
+    return getBuiltinComponent(node.data.componentSlug)?.manifest as ComponentManifest | undefined;
+  }
+  return byContentHash[node.data.contentHash]?.manifest;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-component-node-warnings.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-component-node-warnings.ts
new file mode 100644
index 000000000..ec32c1ee2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-component-node-warnings.ts
@@ -0,0 +1,88 @@
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { getBuiltinComponent } from "@voidhash/paywall-builtins";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { codeComponentDefinitions, selectCodeComponentNodes } from "../state/utils/code-components";
+import type { AncestorVariablesSnapshotNode } from "../state/utils/ancestor-variables";
+import {
+  collectAncestorVariableIds,
+  validateComponentNode,
+  type ComponentNodeWarning,
+} from "../state/utils/component-validation";
+import { selectDocumentRoot } from "../state/utils/document-root";
+import { findNodeById } from "../state/utils/tree";
+
+const NO_WARNINGS: ComponentNodeWarning[] = [];
+
+/**
+ * Per-node memoized component validation selector. Returns spec §7.4 warnings
+ * for the component node `nodeId` (empty for non-component nodes and nodes
+ * not in the snapshot) so canvas badges, layers glyphs and the right panel
+ * can share one source. Works for unselected nodes — only the snapshot and
+ * catalog mirror are read.
+ */
+export function useComponentNodeWarnings(nodeId: string): ComponentNodeWarning[] {
+  const store = usePaywallDesignerStore();
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const compiled = useStore(store, (state) => state.codeComponents.compiled);
+  const codeNodes = useStore(store, selectCodeComponentNodes);
+
+  return useMemo(() => {
+    const node = findNodeById<SnapshotNode>(documentRoot, nodeId);
+    if (!node || node.type !== "component") {
+      return NO_WARNINGS;
+    }
+    const variableScopeRoot: AncestorVariablesSnapshotNode = documentRoot;
+    const availableVariableIds = collectAncestorVariableIds(variableScopeRoot, nodeId);
+    const validationInput = {
+      actionBindings: node.data.actionBindings,
+      children: node.children,
+      contentHash: node.data.contentHash,
+      props: node.data.props,
+    };
+
+    if (node.data.componentSource === "local") {
+      const componentPath = node.data.componentPath;
+      const definition = codeComponentDefinitions(codeNodes).find(
+        (candidate) => candidate.path === componentPath,
+      );
+      if (!definition) {
+        return [
+          {
+            kind: "component-unresolved",
+            message: `Missing component file — ${componentPath}`,
+            severity: "warning",
+            componentPath,
+          },
+        ];
+      }
+      const manifest = compiled[definition.id]?.artifact?.manifest;
+      // Still compiling — no manifest to validate against yet.
+      if (manifest === undefined) {
+        return NO_WARNINGS;
+      }
+      return validateComponentNode(validationInput, manifest, availableVariableIds);
+    }
+
+    // Builtins resolve their manifest by stable slug, not the catalog hash
+    // mirror — a resolvable builtin must not surface a "not in catalog"
+    // (manifest-missing) warning. An unknown slug degrades like an
+    // unresolvable catalog component (undefined manifest).
+    if (node.data.componentSource === "builtin") {
+      // The builtin definition's manifest is the same §2 shape but is declared
+      // in @voidhash/paywalls/schema, whose scalar `default` fields widen to
+      // `unknown`; validation only reads it, so bridge the nominal divergence.
+      const manifest = getBuiltinComponent(node.data.componentSlug)?.manifest as
+        | ComponentManifest
+        | undefined;
+      return validateComponentNode(validationInput, manifest, availableVariableIds);
+    }
+
+    const manifest = byContentHash[node.data.contentHash]?.manifest;
+    return validateComponentNode(validationInput, manifest, availableVariableIds);
+  }, [documentRoot, byContentHash, compiled, codeNodes, nodeId]);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-context-menu-context.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-context-menu-context.ts
new file mode 100644
index 000000000..59515820a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-context-menu-context.ts
@@ -0,0 +1,204 @@
+"use client";
+
+/**
+ * Hook to build ContextMenuContext from current state.
+ *
+ * This hook provides the context needed for context menu action
+ * visibility and enablement decisions.
+ */
+
+import { useCallback } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+import { isEditableNodeType } from "@voidhash/mimic-schema";
+
+import type {
+  ClickContext,
+  ContextMenuContext,
+  ContextSource,
+  NodeType,
+  SelectionContext,
+} from "../state/context-menu/types";
+import { usePaywallDesignerStore } from "../state/designer-store";
+import type { ComponentCatalogByContentHash } from "../state/designer-store-state";
+import { selectDocumentRoot } from "../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../state/utils/presence";
+import type { SnapshotNode } from "../state/utils/selection-level";
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Get node type from snapshot by ID.
+ */
+function getNodeTypeById(snapshot: SnapshotNode | null, nodeId: string): NodeType | null {
+  if (!snapshot) {
+    return null;
+  }
+
+  const findNode = (node: SnapshotNode): SnapshotNode | null => {
+    if (node.id === nodeId) {
+      return node;
+    }
+    if (node.children) {
+      for (const child of node.children) {
+        const found = findNode(child);
+        if (found) {
+          return found;
+        }
+      }
+    }
+    return null;
+  };
+
+  const node = findNode(snapshot);
+  if (!node) {
+    return null;
+  }
+
+  return isEditableNodeType(node.type) ? node.type : null;
+}
+
+/**
+ * Get types for a list of node IDs.
+ */
+function getNodeTypes(snapshot: SnapshotNode | null, nodeIds: string[]): NodeType[] {
+  return nodeIds
+    .map((id) => getNodeTypeById(snapshot, id))
+    .filter((type): type is NodeType => type !== null);
+}
+
+/**
+ * Check if all types in the array are the same.
+ */
+function areTypesHomogeneous(types: NodeType[]): boolean {
+  if (types.length <= 1) {
+    return true;
+  }
+  const firstType = types[0];
+  return types.every((type) => type === firstType);
+}
+
+// =============================================================================
+// Hook
+// =============================================================================
+
+export interface BuildContextParams {
+  /** Where the context menu was triggered */
+  source: ContextSource;
+  /** ID of the clicked node (null for background) */
+  clickedNodeId?: string | null;
+  /** Canvas coordinates (null for layers panel) */
+  canvasPosition?: { x: number; y: number } | null;
+}
+
+export interface UseContextMenuContextResult {
+  /** Build a context from click/trigger params */
+  buildContext: (params: BuildContextParams) => ContextMenuContext;
+  /** Get current selection context (for non-click operations) */
+  getSelectionContext: () => SelectionContext;
+}
+
+/**
+ * Hook to build ContextMenuContext for context menu operations.
+ */
+export function useContextMenuContext(): UseContextMenuContextResult {
+  const store = usePaywallDesignerStore();
+  const snapshot: SnapshotNode = useStore(store, selectDocumentRoot);
+  const selectedNodeIds = useStore(
+    store,
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self)),
+  );
+  const textEditingNodeId = useStore(
+    store,
+    useShallow((state) => state.textEditingNodeId),
+  );
+  const componentCatalogByContentHash = useStore(
+    store,
+    (state) => state.componentCatalog.byContentHash,
+  );
+
+  const getSelectionContext = useCallback((): SelectionContext => {
+    const nodeIds = [...selectedNodeIds];
+    const selectedNodeTypes = getNodeTypes(snapshot, nodeIds);
+
+    return {
+      selectedNodeIds: nodeIds,
+      selectedNodeTypes,
+      isHomogeneousSelection: areTypesHomogeneous(selectedNodeTypes),
+      isTextEditing: textEditingNodeId !== null,
+    };
+  }, [snapshot, selectedNodeIds, textEditingNodeId]);
+
+  const buildContext = useCallback(
+    (params: BuildContextParams): ContextMenuContext => {
+      const { source, clickedNodeId = null, canvasPosition = null } = params;
+
+      const selection = getSelectionContext();
+
+      // Determine click context
+      const clickedNodeType = clickedNodeId ? getNodeTypeById(snapshot, clickedNodeId) : null;
+
+      // Check if clicked inside selection
+      const clickedInsideSelection =
+        clickedNodeId !== null && selectedNodeIds.includes(clickedNodeId);
+
+      const click: ClickContext = {
+        source,
+        clickedNodeId,
+        clickedNodeType,
+        clickedInsideSelection,
+        canvasPosition,
+      };
+
+      return {
+        selection,
+        click,
+        snapshot,
+        componentCatalogByContentHash,
+      };
+    },
+    [snapshot, selectedNodeIds, getSelectionContext, componentCatalogByContentHash],
+  );
+
+  return {
+    buildContext,
+    getSelectionContext,
+  };
+}
+
+/**
+ * Build a context for keyboard shortcuts (no click info needed).
+ */
+export function buildKeyboardContext(
+  snapshot: SnapshotNode | null,
+  selectedNodeIds: readonly string[],
+  textEditingNodeId: string | null,
+  componentCatalogByContentHash: ComponentCatalogByContentHash,
+): ContextMenuContext {
+  const nodeIds = [...selectedNodeIds];
+  const selectedNodeTypes = getNodeTypes(snapshot, nodeIds);
+
+  const selection: SelectionContext = {
+    selectedNodeIds: nodeIds,
+    selectedNodeTypes,
+    isHomogeneousSelection: areTypesHomogeneous(selectedNodeTypes),
+    isTextEditing: textEditingNodeId !== null,
+  };
+
+  const click: ClickContext = {
+    source: "canvas",
+    clickedNodeId: null,
+    clickedNodeType: null,
+    clickedInsideSelection: false,
+    canvasPosition: null,
+  };
+
+  return {
+    selection,
+    click,
+    snapshot,
+    componentCatalogByContentHash,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-cursor-updater.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-cursor-updater.ts
new file mode 100644
index 000000000..ac1c71b6a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-cursor-updater.ts
@@ -0,0 +1,21 @@
+import { useEffect } from "react";
+
+import { useViewport } from "../canvas/viewport";
+import { updateCursor } from "../state/actions";
+import { usePaywallDesignerActions } from "../state/designer-store";
+
+export function useCursorUpdater() {
+  const dispatch = usePaywallDesignerActions();
+  const { screenToCanvas } = useViewport();
+
+  useEffect(() => {
+    const handleMouseMove = (e: MouseEvent) => {
+      const canvasPos = screenToCanvas(e.clientX, e.clientY);
+      dispatch(updateCursor)(canvasPos);
+    };
+    document.addEventListener("mousemove", handleMouseMove);
+    return () => {
+      document.removeEventListener("mousemove", handleMouseMove);
+    };
+  }, [dispatch, screenToCanvas]);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-designer-draft.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-designer-draft.ts
new file mode 100644
index 000000000..f73d634ba
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-designer-draft.ts
@@ -0,0 +1,91 @@
+import type { DraftHandle } from "@voidhash/mimic/client";
+import { clearActiveDraft, setActiveDraft } from "@voidhash/mimic/zustand-commander";
+import type { PaywallDesignerDocument } from "@voidhash/mimic-schema";
+import { useCallback, useEffect, useRef, useSyncExternalStore } from "react";
+
+import type { PaywallDesignerStoreType } from "../state/designer-store";
+
+export interface UseDesignerDraftReturn {
+  readonly draft: DraftHandle<typeof PaywallDesignerDocument> | null;
+  readonly begin: () => void;
+  readonly commit: () => void;
+  readonly discard: () => void;
+}
+
+/**
+ * Designer-typed replica of `useDraft` from `@voidhash/mimic/zustand`.
+ * The package hook types its store as `MimicSlice<TPrimitive, TPresence>`,
+ * which collapses the presence INPUT type to the presence SNAPSHOT type —
+ * the designer store keeps them distinct (`PresenceInput` writes vs decoded
+ * `PresenceSnapshot` reads), so the package signature cannot accept it.
+ * Behavior is identical: one active draft at a time, registered with the
+ * commander so undoable actions write into it, discarded on unmount.
+ */
+export function useDesignerDraft(store: PaywallDesignerStoreType): UseDesignerDraftReturn {
+  const draftRef = useRef<DraftHandle<typeof PaywallDesignerDocument> | null>(null);
+  const versionRef = useRef(0);
+
+  const subscribe = useCallback(
+    (onStoreChange: () => void) => store.subscribe(onStoreChange),
+    [store],
+  );
+
+  const getSnapshot = useCallback(() => versionRef.current, []);
+  useSyncExternalStore(subscribe, getSnapshot, getSnapshot);
+
+  const bumpVersion = useCallback(() => {
+    versionRef.current += 1;
+  }, []);
+
+  const begin = useCallback(() => {
+    if (draftRef.current !== null) {
+      throw new Error("A draft is already active. Commit or discard it first.");
+    }
+    const draft = store.getState().mimic.document.createDraft();
+    draftRef.current = draft;
+    setActiveDraft(store, draft);
+    bumpVersion();
+  }, [store, bumpVersion]);
+
+  const commit = useCallback(() => {
+    if (draftRef.current === null) {
+      return;
+    }
+    clearActiveDraft(store);
+    draftRef.current.commit();
+    draftRef.current = null;
+    bumpVersion();
+  }, [store, bumpVersion]);
+
+  const discard = useCallback(() => {
+    if (draftRef.current === null) {
+      return;
+    }
+    clearActiveDraft(store);
+    draftRef.current.discard();
+    draftRef.current = null;
+    bumpVersion();
+  }, [store, bumpVersion]);
+
+  useEffect(
+    () => () => {
+      if (draftRef.current !== null) {
+        try {
+          clearActiveDraft(store);
+          draftRef.current.discard();
+        } catch {
+          // Ignore stale draft cleanup errors.
+        }
+        draftRef.current = null;
+      }
+    },
+    [store],
+  );
+
+  return {
+    draft: draftRef.current,
+    begin,
+    commit,
+    discard,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-keyboard-shortcuts.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-keyboard-shortcuts.ts
new file mode 100644
index 000000000..c28b05c3d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-keyboard-shortcuts.ts
@@ -0,0 +1,118 @@
+"use client";
+
+import { performRedo, performUndo } from "@voidhash/mimic/zustand-commander";
+import { useEffect } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import { contextMenuRegistry, initializeContextMenuActions } from "../state/context-menu";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import { selectDocumentRoot } from "../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../state/utils/presence";
+import type { SnapshotNode } from "../state/utils/selection-level";
+import { isMacPlatform } from "../utils/platform";
+
+import { buildKeyboardContext } from "./use-context-menu-context";
+
+// Ensure actions are registered
+initializeContextMenuActions();
+
+/**
+ * Checks if the event target is an editable element that should take priority
+ * over global keyboard shortcuts.
+ */
+export function isEditableElement(target: EventTarget | null): boolean {
+  if (!(target && target instanceof HTMLElement)) {
+    return false;
+  }
+
+  const { tagName } = target;
+  const isInput = tagName === "INPUT" || tagName === "TEXTAREA";
+  const isContentEditable = target.contentEditable === "true" || target.isContentEditable;
+
+  return isInput || isContentEditable;
+}
+
+/**
+ * Hook that sets up global keyboard shortcuts for the designer.
+ * Shortcuts are disabled when typing in input fields or contenteditable elements.
+ *
+ * Uses the action registry to match keyboard events against registered actions,
+ * ensuring consistency between keyboard shortcuts and context menu items.
+ */
+export function useKeyboardShortcuts() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const snapshot: SnapshotNode = useStore(store, selectDocumentRoot);
+  const selectedNodeIds = useStore(
+    store,
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self)),
+  );
+  const textEditingNodeId = useStore(
+    store,
+    useShallow((state) => state.textEditingNodeId),
+  );
+  const componentCatalogByContentHash = useStore(
+    store,
+    (state) => state.componentCatalog.byContentHash,
+  );
+
+  useEffect(() => {
+    const handleKeyDown = (e: KeyboardEvent) => {
+      // Skip shortcuts if user is typing in an editable element
+      if (isEditableElement(e.target)) {
+        return;
+      }
+
+      // Undo/redo route to the commander's history (Cmd/Ctrl+Z, Shift for
+      // redo, Ctrl+Y on non-mac). Skipped while text-editing so the native
+      // contenteditable history applies instead of reverting whole
+      // transactions mid-edit.
+      const modKey = isMacPlatform() ? e.metaKey : e.ctrlKey;
+      const key = e.key.toLowerCase();
+      if (modKey && (key === "z" || key === "y")) {
+        if (textEditingNodeId !== null) {
+          return;
+        }
+        e.preventDefault();
+        if (key === "y" || e.shiftKey) {
+          performRedo(store);
+        } else {
+          performUndo(store);
+        }
+        return;
+      }
+
+      // Build context for action lookup
+      const context = buildKeyboardContext(
+        snapshot,
+        selectedNodeIds,
+        textEditingNodeId,
+        componentCatalogByContentHash,
+      );
+
+      // Find matching action from registry
+      const action = contextMenuRegistry.findByShortcut(context, {
+        key: e.key,
+        metaKey: e.metaKey,
+        ctrlKey: e.ctrlKey,
+        shiftKey: e.shiftKey,
+      });
+
+      if (action) {
+        e.preventDefault();
+        try {
+          action.execute(context, dispatch);
+        } catch (error) {
+          console.error(`[KeyboardShortcuts] Action "${action.id}" failed:`, error);
+        }
+      }
+    };
+
+    window.addEventListener("keydown", handleKeyDown);
+
+    return () => {
+      window.removeEventListener("keydown", handleKeyDown);
+    };
+  }, [dispatch, store, snapshot, selectedNodeIds, textEditingNodeId, componentCatalogByContentHash]);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-localizable-props.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-localizable-props.ts
new file mode 100644
index 000000000..d31823925
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-localizable-props.ts
@@ -0,0 +1,62 @@
+"use client";
+
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { LocalizablePropDescriptor } from "@voidhash/mimic-schema";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useCallback } from "react";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { definitionForComponentPath } from "../state/utils/code-components";
+
+/**
+ * A localizable component prop descriptor extended with the manifest prop kind,
+ * so the translation table can render string props as text cells and image
+ * props as image cells. Assignable wherever a plain
+ * {@link LocalizablePropDescriptor} is expected.
+ */
+export interface LocalizablePropInfo extends LocalizablePropDescriptor {
+  readonly kind: "string" | "image";
+}
+
+/** Maps a component instance node to its localizable props with kind info. */
+export type GetLocalizablePropInfos = (
+  node: ComponentSnapshotNode,
+) => readonly LocalizablePropInfo[];
+
+/**
+ * Enumerates a component node's literal-bound localizable string/image props
+ * from its resolved manifest (catalog by contentHash, or local by componentPath
+ * → compiled artifact) — the synchronous, store-state-backed lookup that lets
+ * coverage and the translation table include component-prop slots.
+ */
+export function useGetLocalizableProps(): GetLocalizablePropInfos {
+  const store = usePaywallDesignerStore();
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const compiled = useStore(store, (state) => state.codeComponents.compiled);
+
+  return useCallback<GetLocalizablePropInfos>(
+    (node) => {
+      const state = store.getState();
+      let manifest: ComponentManifest | undefined;
+      if (node.data.componentSource === "local") {
+        const definitionId = definitionForComponentPath(state, node.data.componentPath)?.id;
+        manifest =
+          definitionId !== undefined ? compiled[definitionId]?.artifact?.manifest : undefined;
+      } else {
+        manifest = byContentHash[node.data.contentHash]?.manifest;
+      }
+      if (manifest === undefined) {
+        return [];
+      }
+      const descriptors: LocalizablePropInfo[] = [];
+      for (const [propName, def] of Object.entries(manifest.props)) {
+        if ((def.kind === "string" || def.kind === "image") && def.localizable === true) {
+          descriptors.push({ kind: def.kind, label: def.label ?? propName, propName });
+        }
+      }
+      return descriptors;
+    },
+    [store, byContentHash, compiled],
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-code-target.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-code-target.ts
new file mode 100644
index 000000000..62d706081
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-code-target.ts
@@ -0,0 +1,51 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
+import { useMemo } from "react";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+/**
+ * The identifiers the code tab needs to derive a component's workspace path: the
+ * backing `projectId` and the paywall's stable `slug`. Resolved from the route +
+ * the authenticated user's project list; `null` until they can be resolved
+ * (project not found, paywall list not loaded, or slug unknown).
+ */
+export interface PaywallCodeTarget {
+  projectId: string;
+  paywallSlug: string;
+}
+
+/**
+ * Resolves the current designer's {@link PaywallCodeTarget} from the route params
+ * and the paywall list query. Returns `null` while the project or the paywall's
+ * slug cannot yet be resolved.
+ */
+export function usePaywallCodeTarget(): PaywallCodeTarget | null {
+  const { user } = useAuth();
+  const { organizationSlug, projectSlug, id: paywallId } = useParams({ strict: false });
+
+  const projectId = useMemo(
+    () =>
+      organizationSlug && projectSlug
+        ? (CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug)?.id ?? null)
+        : null,
+    [user, organizationSlug, projectSlug],
+  );
+
+  const { data: paywalls } = useQuery({
+    ...listPaywallsOptions({ projectId: projectId ?? "" }),
+    enabled: projectId !== null,
+  });
+
+  return useMemo(() => {
+    if (projectId === null || paywallId === undefined) {
+      return null;
+    }
+    const slug = paywalls?.find((paywall) => paywall.id === paywallId)?.slug;
+    return slug === undefined ? null : { projectId, paywallSlug: slug };
+  }, [projectId, paywallId, paywalls]);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-component-catalog.ts b/apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-component-catalog.ts
new file mode 100644
index 000000000..b944806e7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/hooks/use-paywall-component-catalog.ts
@@ -0,0 +1,151 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
+import { Schema } from "effect";
+import { useEffect, useMemo } from "react";
+import { useStore } from "zustand/react";
+import { ComponentManifestSchema } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import {
+  getPaywallComponentVersionsOptions,
+  listPaywallComponentsOptions,
+} from "@/features/studio/lib/tanstack-query/paywall-components";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import {
+  mergeComponentCatalogVersions,
+  setComponentCatalogComponents,
+} from "../state/actions/component-catalog-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import type { ComponentCatalogEntry, ComponentCatalogVersion } from "../state/designer-store-state";
+import { selectDocumentRoot } from "../state/utils/document-root";
+
+const decodeManifest = Schema.decodeUnknownSync(ComponentManifestSchema);
+
+interface RawVersionDetail {
+  slug: string;
+  version: number;
+  contentHash: string;
+  manifest: unknown;
+  hasPanel: boolean;
+  previewStates: readonly string[];
+  artifactBaseUrl: string;
+  createdAt: Date;
+}
+
+function decodeVersionDetail(raw: RawVersionDetail): ComponentCatalogVersion | null {
+  try {
+    return {
+      artifactBaseUrl: raw.artifactBaseUrl,
+      contentHash: raw.contentHash,
+      createdAt: raw.createdAt,
+      hasPanel: raw.hasPanel,
+      manifest: decodeManifest(raw.manifest),
+      previewStates: raw.previewStates,
+      slug: raw.slug,
+      version: raw.version,
+    };
+  } catch (error) {
+    console.warn(
+      `[paywall-component-catalog] Skipping component "${raw.slug}"@${raw.version}: invalid manifest`,
+      error,
+    );
+    return null;
+  }
+}
+
+function collectMissingComponentRefs(
+  root: SnapshotNode,
+  knownContentHashes: ReadonlySet<string>,
+): Array<{ slug: string; version: number }> {
+  const refs: Array<{ slug: string; version: number }> = [];
+  const seen = new Set<string>();
+
+  const walk = (node: SnapshotNode): void => {
+    if (
+      node.type === "component" &&
+      node.data.componentSource !== "local" &&
+      !knownContentHashes.has(node.data.contentHash)
+    ) {
+      const key = `${node.data.componentSlug}@${node.data.componentVersion}`;
+      if (!seen.has(key)) {
+        seen.add(key);
+        refs.push({ slug: node.data.componentSlug, version: node.data.componentVersion });
+      }
+    }
+    for (const child of node.children) {
+      walk(child);
+    }
+  };
+
+  walk(root);
+  return refs;
+}
+
+/**
+ * Mirrors the project's component catalog into the designer store for
+ * synchronous gate/action/validation code. Mount once inside the designer:
+ * fetches the latest-version list, decodes manifests (invalid entries are
+ * skipped with a warning), and additionally batch-fetches pinned versions for
+ * component nodes in the document whose contentHash is not mirrored yet.
+ * Versions the backend does not know (silently omitted from the response)
+ * stay absent — validation reports them as manifest-missing.
+ */
+export function usePaywallComponentCatalog(): void {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
+  const { user } = useAuth();
+
+  const project = useMemo(() => {
+    if (!organizationSlug || !projectSlug) return null;
+    return CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug);
+  }, [user, organizationSlug, projectSlug]);
+  const projectId = project?.id;
+
+  const { data: components } = useQuery({
+    ...listPaywallComponentsOptions({ projectId: projectId ?? "" }),
+    enabled: !!projectId,
+  });
+
+  useEffect(() => {
+    if (!components) return;
+    const decoded: ComponentCatalogEntry[] = [];
+    for (const component of components) {
+      const latest = decodeVersionDetail(component.latest);
+      if (!latest) continue;
+      decoded.push({
+        latest,
+        latestVersion: component.latestVersion,
+        slug: component.slug,
+        title: component.title,
+      });
+    }
+    dispatch(setComponentCatalogComponents)({ components: decoded });
+  }, [components, dispatch]);
+
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+
+  const missingRefs = useMemo(
+    () => collectMissingComponentRefs(documentRoot, new Set(Object.keys(byContentHash))),
+    [documentRoot, byContentHash],
+  );
+
+  const { data: pinnedVersions } = useQuery({
+    ...getPaywallComponentVersionsOptions({ projectId: projectId ?? "", refs: missingRefs }),
+    enabled: !!projectId && missingRefs.length > 0,
+  });
+
+  useEffect(() => {
+    if (!pinnedVersions) return;
+    const decoded = pinnedVersions
+      .map(decodeVersionDetail)
+      .filter((version): version is ComponentCatalogVersion => version !== null);
+    if (decoded.length === 0) return;
+    dispatch(mergeComponentCatalogVersions)({ versions: decoded });
+  }, [pinnedVersions, dispatch]);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor-field.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor-field.tsx
new file mode 100644
index 000000000..fc40dafca
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor-field.tsx
@@ -0,0 +1,48 @@
+"use client";
+
+import type { ComponentBoundAction } from "@voidhash/mimic-schema";
+
+import type { LabeledVariable } from "@/features/studio/paywalls/designer/components/variables/types";
+
+import { ActionEditor } from "./action-editor";
+
+/**
+ * Props for the `actionEditorField` wire node. A thin renaming of
+ * {@link ActionEditor}'s props (`action` → `value`); every value is either
+ * serializable plain JSON (`value`, `variables`, `productVariables`,
+ * `payloadFields`) or a callback, so it maps 1:1 to the wire contract.
+ */
+export interface ActionEditorFieldProps {
+  /** The component-bound action as plain JSON. */
+  value: ComponentBoundAction;
+  onChange: (action: ComponentBoundAction) => void;
+  /** Variables offered to set-variable targets and value pickers. */
+  variables: readonly LabeledVariable[];
+  /** Product-typed subset of `variables`, offered to purchase-product. */
+  productVariables: readonly LabeledVariable[];
+  /** Payload field names of the emitting component action; enables "From action payload" sources. */
+  payloadFields?: readonly string[];
+}
+
+/**
+ * Host-side kit target for the `actionEditorField` wire node. Wraps the shared
+ * {@link ActionEditor} controlled view, renaming its `action` prop to `value`
+ * to match the wire surface.
+ */
+export function ActionEditorField({
+  value,
+  onChange,
+  variables,
+  productVariables,
+  payloadFields,
+}: ActionEditorFieldProps) {
+  return (
+    <ActionEditor
+      action={value}
+      onChange={onChange}
+      payloadFields={payloadFields}
+      productVariables={productVariables}
+      variables={variables}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor.tsx
new file mode 100644
index 000000000..26ca8c871
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-editor.tsx
@@ -0,0 +1,110 @@
+"use client";
+
+import type { ComponentBoundAction, ComponentBoundActionType } from "@voidhash/mimic-schema";
+
+import { SelectInput } from "@/features/studio/paywalls/designer/components/ui/select-input";
+import type { LabeledVariable } from "@/features/studio/paywalls/designer/components/variables/types";
+import { VARIABLE_TYPE_REGISTRY } from "@/features/studio/paywalls/designer/constants";
+
+import { PurchaseProductPayloadEditor, SetVariablePayloadEditor } from "./action-payloads";
+
+const ACTION_OPTIONS: { value: ComponentBoundActionType; label: string }[] = [
+  { label: "None", value: "none" },
+  { label: "Set variable", value: "set-variable" },
+  { label: "Close paywall", value: "close-paywall" },
+  { label: "Purchase product", value: "purchase-product" },
+];
+
+/** Display labels for action types, shared by interaction and component rows. */
+export const ACTION_TYPE_LABELS: Record<ComponentBoundActionType, string> = {
+  "close-paywall": "Close paywall",
+  none: "None",
+  "purchase-product": "Purchase product",
+  "set-variable": "Set variable",
+};
+
+export interface ActionEditorProps {
+  action: ComponentBoundAction;
+  onChange: (action: ComponentBoundAction) => void;
+  /** Variables offered to set-variable targets and value pickers. */
+  variables: readonly LabeledVariable[];
+  /** Product-typed subset of `variables`, offered to purchase-product. */
+  productVariables: readonly LabeledVariable[];
+  /** Payload field names of the emitting component action; enables "From action payload" sources. */
+  payloadFields?: readonly string[];
+}
+
+/**
+ * The reusable action editor core (action type select + per-type payload
+ * editors). Works on the component-bound action vocabulary, which is a
+ * superset of the visual interaction `Action`; callers without
+ * `payloadFields` never receive action-payload sources.
+ */
+export function ActionEditor({
+  action,
+  onChange,
+  variables,
+  productVariables,
+  payloadFields,
+}: ActionEditorProps) {
+  const handleActionTypeChange = (actionType: ComponentBoundActionType) => {
+    switch (actionType) {
+      case "none":
+        onChange({ type: "none" });
+        break;
+      case "set-variable": {
+        const firstVariable = variables[0];
+        onChange({
+          payload: {
+            newValue: {
+              type: "literal",
+              value: VARIABLE_TYPE_REGISTRY[firstVariable?.value.key ?? "string"].defaultValue,
+            },
+            variableId: firstVariable?.id ?? "",
+          },
+          type: "set-variable",
+        });
+        break;
+      }
+      case "close-paywall":
+        onChange({ type: "close-paywall" });
+        break;
+      case "purchase-product":
+        onChange({
+          payload: { productId: "", type: "literal" },
+          type: "purchase-product",
+        });
+        break;
+    }
+  };
+
+  return (
+    <div className="flex flex-col gap-2">
+      <span className="text-muted-foreground text-xs font-medium">Action</span>
+      <SelectInput
+        label="Action"
+        onChange={handleActionTypeChange}
+        options={ACTION_OPTIONS}
+        value={action.type}
+      />
+
+      {action.type === "set-variable" && (
+        <SetVariablePayloadEditor
+          action={action}
+          onActionChange={onChange}
+          payloadFields={payloadFields}
+          variables={variables}
+        />
+      )}
+
+      {action.type === "purchase-product" && (
+        <PurchaseProductPayloadEditor
+          action={action}
+          onActionChange={onChange}
+          payloadFields={payloadFields}
+          productVariables={productVariables}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/action-payload-source-hint.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/action-payload-source-hint.tsx
new file mode 100644
index 000000000..ea0c90d11
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/action-payload-source-hint.tsx
@@ -0,0 +1,15 @@
+"use client";
+
+/**
+ * Subdued explainer shown when an "action payload" value source is selected:
+ * payload values only exist once the published paywall runs real component
+ * code — the static editor preview ignores them (spec §3.2).
+ */
+export function ActionPayloadSourceHint() {
+  return (
+    <p className="text-muted-foreground/80 text-[10px] leading-snug">
+      Uses the value the component emits when this action fires. Applies once the paywall is
+      published — the static preview ignores payload values.
+    </p>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/index.ts b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/index.ts
new file mode 100644
index 000000000..1a158242d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/index.ts
@@ -0,0 +1,3 @@
+export { ActionPayloadSourceHint } from "./action-payload-source-hint";
+export { PurchaseProductPayloadEditor } from "./purchase-product-payload";
+export { SetVariablePayloadEditor } from "./set-variable-payload";
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/purchase-product-payload.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/purchase-product-payload.tsx
new file mode 100644
index 000000000..a0283d947
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/purchase-product-payload.tsx
@@ -0,0 +1,133 @@
+"use client";
+
+import type { ComponentBoundAction, ComponentProductSource } from "@voidhash/mimic-schema";
+import { Button, cn } from "@voidhash/ui";
+import { DiamondIcon } from "lucide-react";
+import { toast } from "sonner";
+
+import { SelectInput } from "@/features/studio/paywalls/designer/components/ui/select-input";
+import { TextInput } from "@/features/studio/paywalls/designer/components/ui/text-input";
+import { VariableSelector } from "@/features/studio/paywalls/designer/components/variables/variable-selector";
+import type { LabeledVariable } from "@/features/studio/paywalls/designer/components/variables/types";
+
+import { ActionPayloadSourceHint } from "./action-payload-source-hint";
+
+type PurchaseProductBoundAction = Extract<ComponentBoundAction, { type: "purchase-product" }>;
+
+export interface PurchaseProductPayloadEditorProps {
+  action: PurchaseProductBoundAction;
+  onActionChange: (action: PurchaseProductBoundAction) => void;
+  productVariables: readonly LabeledVariable[];
+  /** Payload field names of the emitting component action; enables the "From action payload" product source. */
+  payloadFields?: readonly string[];
+}
+
+export function PurchaseProductPayloadEditor({
+  action,
+  onActionChange,
+  productVariables,
+  payloadFields,
+}: PurchaseProductPayloadEditorProps) {
+  const payload = action.payload;
+  const isLiteral = payload.type === "literal";
+  const isPayloadSource = payload.type === "action-payload";
+  const hasPayloadFields = (payloadFields?.length ?? 0) > 0;
+
+  const setPayload = (newPayload: ComponentProductSource) => {
+    onActionChange({
+      ...action,
+      payload: newPayload,
+    });
+  };
+
+  const handleSourceToggle = () => {
+    if (isLiteral) {
+      const firstVariable = productVariables[0];
+      if (firstVariable) {
+        setPayload({ type: "variable-reference", variableId: firstVariable.id });
+      } else {
+        toast.error("No product variables available");
+      }
+      return;
+    }
+    setPayload({ productId: "", type: "literal" });
+  };
+
+  const handlePayloadSourceChange = (source: "custom" | "action-payload") => {
+    if (source === "action-payload") {
+      setPayload({ field: payloadFields?.[0] ?? "", type: "action-payload" });
+      return;
+    }
+    setPayload({ productId: "", type: "literal" });
+  };
+
+  return (
+    <div className="flex flex-col gap-2 border-border/30 border-l-2 pl-2">
+      {hasPayloadFields && (
+        <div className="flex flex-row items-center gap-2">
+          <span className="min-w-16 text-muted-foreground text-xs">Source</span>
+          <SelectInput
+            className="flex-1"
+            label="Product source"
+            onChange={handlePayloadSourceChange}
+            options={[
+              { label: "Custom product", value: "custom" },
+              { label: "From action payload", value: "action-payload" },
+            ]}
+            value={isPayloadSource ? "action-payload" : "custom"}
+          />
+        </div>
+      )}
+
+      {isPayloadSource ? (
+        <>
+          <div className="flex flex-row items-center gap-2">
+            <span className="min-w-16 text-muted-foreground text-xs">Field</span>
+            <SelectInput
+              className="flex-1"
+              label="Payload field"
+              onChange={(field) => setPayload({ field, type: "action-payload" })}
+              options={(payloadFields ?? []).map((field) => ({ label: field, value: field }))}
+              placeholder="Select field"
+              value={payload.type === "action-payload" ? payload.field : ""}
+            />
+          </div>
+          <ActionPayloadSourceHint />
+        </>
+      ) : (
+        <div className="flex flex-row items-center gap-2">
+          <span className="min-w-16 text-muted-foreground text-xs">Product</span>
+          <div className="flex flex-1 flex-row items-center rounded-md ring-1 ring-border">
+            {payload.type === "literal" ? (
+              <TextInput
+                className="h-7 flex-1 border-none text-xs shadow-none"
+                label="Product ID"
+                onChange={(productId) => setPayload({ productId, type: "literal" })}
+                value={payload.productId}
+              />
+            ) : (
+              <VariableSelector
+                className="h-7 min-w-24 flex-1 border-none text-xs shadow-none"
+                onChange={(variableId) => setPayload({ type: "variable-reference", variableId })}
+                placeholder="Select product variable"
+                variableId={payload.type === "variable-reference" ? payload.variableId : null}
+                variables={productVariables}
+              />
+            )}
+
+            <Button
+              onClick={handleSourceToggle}
+              size="icon-sm"
+              variant="ghost"
+            >
+              <DiamondIcon
+                className={cn("text-muted-foreground", !isLiteral && "text-primary")}
+                fill={isLiteral ? "transparent" : "currentColor"}
+              />
+            </Button>
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/set-variable-payload.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/set-variable-payload.tsx
new file mode 100644
index 000000000..a9d745b9b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/action-payloads/set-variable-payload.tsx
@@ -0,0 +1,229 @@
+"use client";
+
+import type {
+  ComponentActionValueSource,
+  ComponentBoundAction,
+  VariableTypeKey,
+} from "@voidhash/mimic-schema";
+import { useMemo } from "react";
+
+import { SelectInput } from "@/features/studio/paywalls/designer/components/ui/select-input";
+import { VariableSelector } from "@/features/studio/paywalls/designer/components/variables/variable-selector";
+import { VariableInput } from "@/features/studio/paywalls/designer/components/variables/variable-input";
+import {
+  findVariableByRef,
+  isLiteralValue,
+} from "@/features/studio/paywalls/designer/components/variables/types";
+import type {
+  LabeledVariable,
+  VariableInputValue,
+} from "@/features/studio/paywalls/designer/components/variables/types";
+import { VARIABLE_TYPE_REGISTRY } from "@/features/studio/paywalls/designer/constants";
+
+import { ActionPayloadSourceHint } from "./action-payload-source-hint";
+
+type SetVariableBoundAction = Extract<ComponentBoundAction, { type: "set-variable" }>;
+
+export interface SetVariablePayloadEditorProps {
+  action: SetVariableBoundAction;
+  onActionChange: (action: SetVariableBoundAction) => void;
+  variables: readonly LabeledVariable[];
+  /** Payload field names of the emitting component action; enables the "From action payload" value source. */
+  payloadFields?: readonly string[];
+}
+
+export function SetVariablePayloadEditor({
+  action,
+  onActionChange,
+  variables,
+  payloadFields,
+}: SetVariablePayloadEditorProps) {
+  const selectedVariable = useMemo(
+    () => findVariableByRef(variables, action.payload.variableId) ?? null,
+    [variables, action.payload.variableId],
+  );
+
+  const selectedVariableType = useMemo((): VariableTypeKey | undefined => {
+    return selectedVariable?.value.key;
+  }, [selectedVariable]);
+
+  const newValue = action.payload.newValue;
+  const isPayloadSource = newValue.type === "action-payload";
+  const hasPayloadFields = (payloadFields?.length ?? 0) > 0;
+
+  // Convert the value source to VariableInputValue (payload sources are
+  // rendered by the dedicated field select instead)
+  const inputValue = useMemo((): VariableInputValue => {
+    if (newValue.type === "literal") {
+      return {
+        type: "literal",
+        value: newValue.value,
+      };
+    }
+    if (newValue.type === "variable-reference") {
+      return {
+        type: "variable-reference",
+        value: { id: newValue.value.id },
+      };
+    }
+    return {
+      type: "literal",
+      value: VARIABLE_TYPE_REGISTRY[selectedVariableType ?? "string"].defaultValue,
+    };
+  }, [newValue, selectedVariableType]);
+
+  const handleVariableChange = (variableId: string) => {
+    const variable = findVariableByRef(variables, variableId);
+    if (!variable) {
+      return;
+    }
+
+    // Reset the value to the new variable type's default, keeping a payload
+    // source selection intact
+    const nextValue: ComponentActionValueSource = isPayloadSource
+      ? newValue
+      : {
+          type: "literal",
+          value: VARIABLE_TYPE_REGISTRY[variable.value.key].defaultValue,
+        };
+
+    onActionChange({
+      ...action,
+      payload: {
+        ...action.payload,
+        newValue: nextValue,
+        variableId: variable.id,
+      },
+    });
+  };
+
+  const handleValueChange = (newInputValue: VariableInputValue) => {
+    let nextValue: ComponentActionValueSource;
+    if (isLiteralValue(newInputValue)) {
+      nextValue = {
+        type: "literal",
+        value: newInputValue.value,
+      };
+    } else {
+      nextValue = {
+        type: "variable-reference",
+        value: { id: (newInputValue.value as { id: string }).id },
+      };
+    }
+
+    onActionChange({
+      ...action,
+      payload: {
+        ...action.payload,
+        newValue: nextValue,
+      },
+    });
+  };
+
+  const handleSourceChange = (source: "custom" | "action-payload") => {
+    if (source === "action-payload") {
+      onActionChange({
+        ...action,
+        payload: {
+          ...action.payload,
+          newValue: {
+            type: "action-payload",
+            value: { field: payloadFields?.[0] ?? "" },
+          },
+        },
+      });
+      return;
+    }
+    onActionChange({
+      ...action,
+      payload: {
+        ...action.payload,
+        newValue: {
+          type: "literal",
+          value: VARIABLE_TYPE_REGISTRY[selectedVariableType ?? "string"].defaultValue,
+        },
+      },
+    });
+  };
+
+  const handleFieldChange = (field: string) => {
+    onActionChange({
+      ...action,
+      payload: {
+        ...action.payload,
+        newValue: { type: "action-payload", value: { field } },
+      },
+    });
+  };
+
+  if (variables.length === 0) {
+    return (
+      <div className="border-border/30 border-l-2 pl-2">
+        <p className="text-muted-foreground text-xs">
+          Add a variable to this element or an ancestor first
+        </p>
+      </div>
+    );
+  }
+
+  return (
+    <div className="flex flex-col gap-2 border-border/30 border-l-2 pl-2">
+      <div className="flex flex-row items-center gap-2">
+        <span className="min-w-16 text-muted-foreground text-xs">Variable</span>
+        <VariableSelector
+          className="h-7 min-w-24 flex-1 text-xs"
+          onChange={handleVariableChange}
+          placeholder="Select variable"
+          variableId={action.payload.variableId}
+          variables={variables}
+        />
+      </div>
+
+      {hasPayloadFields && (
+        <div className="flex flex-row items-center gap-2">
+          <span className="min-w-16 text-muted-foreground text-xs">Source</span>
+          <SelectInput
+            className="flex-1"
+            label="Value source"
+            onChange={handleSourceChange}
+            options={[
+              { label: "Custom value", value: "custom" },
+              { label: "From action payload", value: "action-payload" },
+            ]}
+            value={isPayloadSource ? "action-payload" : "custom"}
+          />
+        </div>
+      )}
+
+      {isPayloadSource ? (
+        <>
+          <div className="flex flex-row items-center gap-2">
+            <span className="min-w-16 text-muted-foreground text-xs">Field</span>
+            <SelectInput
+              className="flex-1"
+              label="Payload field"
+              onChange={handleFieldChange}
+              options={(payloadFields ?? []).map((field) => ({ label: field, value: field }))}
+              placeholder="Select field"
+              value={newValue.type === "action-payload" ? newValue.value.field : ""}
+            />
+          </div>
+          <ActionPayloadSourceHint />
+        </>
+      ) : (
+        selectedVariable && (
+          <div className="flex flex-row items-center gap-2">
+            <span className="min-w-16 text-muted-foreground text-xs">Value</span>
+            <VariableInput
+              className="flex-1"
+              expectedType={selectedVariableType}
+              onChange={handleValueChange}
+              value={inputValue}
+              variables={variables}
+            />
+          </div>
+        )
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx
new file mode 100644
index 000000000..c5173fcc2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx
@@ -0,0 +1,346 @@
+import type { AlignItems, FlexDirection, JustifyContent } from "@voidhash/mimic-schema";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuCheckboxItem,
+  DropdownMenuContent,
+  DropdownMenuTrigger,
+  cn,
+} from "@voidhash/ui";
+import {
+  AlignCenterHorizontal,
+  AlignCenterVertical,
+  AlignEndHorizontal,
+  AlignEndVertical,
+  AlignStartHorizontal,
+  AlignStartVertical,
+  Settings2Icon,
+} from "lucide-react";
+
+interface FlexAlignmentInputProps {
+  flexDirection: FlexDirection;
+  alignItems: AlignItems;
+  justifyContent: JustifyContent;
+  onChange: (changes: { alignItems: AlignItems; justifyContent: JustifyContent }) => void;
+}
+
+const ALIGN_VALUES = ["flex-start", "center", "flex-end"] as const;
+
+const DOT_CLASS =
+  "group-hover:hidden block -translate-x-1/2 -translate-y-1/2 before:-translate-x-1/2 before:-translate-y-1/2 absolute top-1/2 left-1/2 before:absolute before:top-1/2 before:left-1/2 before:block before:h-0.5 before:w-0.5 before:rounded-full before:bg-muted-foreground before:content-['']";
+
+interface GridItem {
+  icon: React.ReactNode;
+  justifyContent: (typeof ALIGN_VALUES)[number];
+  alignItems: (typeof ALIGN_VALUES)[number];
+}
+
+function createGridInfo() {
+  const columnIcons = [AlignStartVertical, AlignCenterVertical, AlignEndVertical];
+  const rowIcons = [AlignStartHorizontal, AlignCenterHorizontal, AlignEndHorizontal];
+
+  const createGrid = (isColumn: boolean): GridItem[][] =>
+    ALIGN_VALUES.map((_, rowIndex) =>
+      ALIGN_VALUES.map((_, columnIndex) => {
+        const Icon = isColumn ? columnIcons[columnIndex] : rowIcons[rowIndex];
+
+        if (!Icon) {
+          throw new Error("Invalid icon index");
+        }
+
+        return {
+          alignItems: ALIGN_VALUES[isColumn ? columnIndex : rowIndex],
+          icon: <Icon className="size-3" />,
+          justifyContent: ALIGN_VALUES[isColumn ? rowIndex : columnIndex],
+        } as GridItem;
+      }),
+    );
+
+  return {
+    column: createGrid(true),
+    row: createGrid(false),
+  };
+}
+
+const GRID = createGridInfo();
+
+function StretchIllustration({
+  direction,
+  alignItems,
+  className,
+}: {
+  direction: FlexDirection;
+  alignItems: AlignItems;
+  className?: string;
+}) {
+  const isRow = direction === "row";
+  const barClass = cn("rounded-md bg-[currentColor]", isRow ? "h-2 w-0.5" : "h-0.5 w-2");
+
+  return (
+    <div
+      className={cn(
+        "flex flex-1 items-center justify-around",
+        className,
+        isRow ? "flex-row" : "flex-col",
+      )}
+      style={{ alignItems }}
+    >
+      <div className={barClass} />
+      <div className={barClass} />
+      <div className={barClass} />
+    </div>
+  );
+}
+
+function DotIndicator() {
+  return <span aria-hidden="true" className={DOT_CLASS} />;
+}
+
+export function FlexAlignmentInput({
+  flexDirection,
+  alignItems,
+  justifyContent,
+  onChange,
+}: FlexAlignmentInputProps) {
+  const isSpaceBetween = justifyContent === "space-between";
+  // Stretch mode reduces the grid to a justify-only strip (alignItems is fixed
+  // to "stretch"); space-between wins if both are set.
+  const isStretch = alignItems === "stretch" && !isSpaceBetween;
+  const defaultGridItem = GRID.row[0]?.[0];
+
+  const getGridItem = (rowIndex: number, columnIndex: number): GridItem => {
+    return (
+      GRID[flexDirection]?.[rowIndex]?.[columnIndex] ??
+      defaultGridItem ?? {
+        alignItems: "flex-start",
+        icon: <AlignStartHorizontal className="size-3" />,
+        justifyContent: "flex-start",
+      }
+    );
+  };
+
+  const getAlignValue = (index: number) => {
+    return ALIGN_VALUES[index] ?? "flex-start";
+  };
+
+  const isSelected = (itemAlignItems: AlignItems, itemJustify: JustifyContent) =>
+    alignItems === itemAlignItems && justifyContent === itemJustify;
+
+  return (
+    <>
+      <div className="flex flex-1 shrink-0 rounded-sm bg-input/60">
+        {/* Shows a 3x3 grid of alignment options. */}
+        {!isSpaceBetween && !isStretch && (
+          <div className="flex flex-1 flex-col">
+            {ALIGN_VALUES.map((_, rowIndex) => (
+              <div className="flex flex-1 flex-row" key={`row-${rowIndex}-${flexDirection}`}>
+                {ALIGN_VALUES.map((_, columnIndex) => {
+                  const item = getGridItem(rowIndex, columnIndex);
+                  const selected = isSelected(item.alignItems, item.justifyContent);
+
+                  return (
+                    // biome-ignore lint/a11y/noStaticElementInteractions: Grid cell interaction
+                    // biome-ignore lint/a11y/useKeyWithClickEvents: Grid cell interaction
+                    <div
+                      className="group relative w-7 flex-1 items-center justify-center py-1 hover:bg-input/80"
+                      key={`cell-${rowIndex}-${columnIndex}-${flexDirection}`}
+                      onClick={() =>
+                        onChange({
+                          alignItems: item.alignItems,
+                          justifyContent: item.justifyContent,
+                        })
+                      }
+                      style={{ minWidth: 16 }}
+                    >
+                      {!selected && <DotIndicator />}
+                      <div
+                        className={cn(
+                          "-translate-x-1/2 -translate-y-1/2 absolute top-1/2 left-1/2 hidden text-gray-400 group-hover:block",
+                          selected && "block text-white group-hover:block group-hover:text-white",
+                        )}
+                      >
+                        {item.icon}
+                      </div>
+                    </div>
+                  );
+                })}
+              </div>
+            ))}
+          </div>
+        )}
+
+        {/* Shows a 3 rows of vertical alignment options . */}
+        {isSpaceBetween && flexDirection === "row" && (
+          <div className="flex flex-1 flex-col">
+            {ALIGN_VALUES.map((_, rowIndex) => {
+              const itemAlignItems = getAlignValue(rowIndex);
+              const selected = itemAlignItems === alignItems;
+
+              return (
+                // biome-ignore lint/a11y/noStaticElementInteractions: Grid cell interaction
+                // biome-ignore lint/a11y/useKeyWithClickEvents: Grid cell interaction
+                <div
+                  className={cn(
+                    "group group relative flex w-21 flex-1 flex-row items-center justify-center py-1 text-gray-400 hover:bg-input/80",
+                    selected && "bg-input/80",
+                  )}
+                  key={`row-${rowIndex}-${flexDirection}`}
+                  onClick={() =>
+                    onChange({
+                      alignItems: itemAlignItems,
+                      justifyContent: "space-between",
+                    })
+                  }
+                >
+                  {!selected && <DotIndicator />}
+                  <StretchIllustration
+                    alignItems={itemAlignItems}
+                    className={cn(selected ? "flex text-white" : "hidden group-hover:flex")}
+                    direction="row"
+                  />
+                </div>
+              );
+            })}
+          </div>
+        )}
+
+        {/* Shows a 3 columns of horizontal alignment options. */}
+        {isSpaceBetween && flexDirection === "column" && (
+          <div className="flex flex-1 flex-row items-center">
+            {ALIGN_VALUES.map((_, columnIndex) => {
+              const itemAlignItems = getAlignValue(columnIndex);
+              const selected = itemAlignItems === alignItems;
+
+              return (
+                // biome-ignore lint/a11y/noStaticElementInteractions: Grid cell interaction
+                // biome-ignore lint/a11y/useKeyWithClickEvents: Grid cell interaction
+                <div
+                  className={cn(
+                    "group group relative flex h-full w-7 flex-1 flex-col items-center justify-center py-1 text-gray-400 hover:bg-input/80",
+                    selected && "bg-input/80",
+                  )}
+                  key={`col-${columnIndex}-${flexDirection}`}
+                  onClick={() =>
+                    onChange({
+                      alignItems: itemAlignItems,
+                      justifyContent: "space-between",
+                    })
+                  }
+                >
+                  {!selected && <DotIndicator />}
+                  <StretchIllustration
+                    alignItems={itemAlignItems}
+                    className={cn(selected ? "flex text-white" : "hidden group-hover:flex")}
+                    direction="column"
+                  />
+                </div>
+              );
+            })}
+          </div>
+        )}
+
+        {/* Stretch mode: children fill the cross axis, so only the MAIN-axis
+            justify position varies. Row → horizontal justify strip. */}
+        {isStretch && flexDirection === "row" && (
+          <div className="flex flex-1 flex-row items-center">
+            {ALIGN_VALUES.map((_, columnIndex) => {
+              const itemJustify = getAlignValue(columnIndex);
+              const selected = itemJustify === justifyContent;
+
+              return (
+                // biome-ignore lint/a11y/noStaticElementInteractions: Grid cell interaction
+                // biome-ignore lint/a11y/useKeyWithClickEvents: Grid cell interaction
+                <div
+                  className={cn(
+                    "group group relative flex h-full w-7 flex-1 flex-col items-center justify-center py-1 text-gray-400 hover:bg-input/80",
+                    selected && "bg-input/80",
+                  )}
+                  key={`stretch-col-${columnIndex}-${flexDirection}`}
+                  onClick={() =>
+                    onChange({
+                      alignItems: "stretch",
+                      justifyContent: itemJustify,
+                    })
+                  }
+                >
+                  {!selected && <DotIndicator />}
+                  <StretchIllustration
+                    alignItems="stretch"
+                    className={cn(selected ? "flex text-white" : "hidden group-hover:flex")}
+                    direction="row"
+                  />
+                </div>
+              );
+            })}
+          </div>
+        )}
+
+        {/* Column → vertical justify strip. */}
+        {isStretch && flexDirection === "column" && (
+          <div className="flex flex-1 flex-col">
+            {ALIGN_VALUES.map((_, rowIndex) => {
+              const itemJustify = getAlignValue(rowIndex);
+              const selected = itemJustify === justifyContent;
+
+              return (
+                // biome-ignore lint/a11y/noStaticElementInteractions: Grid cell interaction
+                // biome-ignore lint/a11y/useKeyWithClickEvents: Grid cell interaction
+                <div
+                  className={cn(
+                    "group group relative flex w-21 flex-1 flex-row items-center justify-center py-1 text-gray-400 hover:bg-input/80",
+                    selected && "bg-input/80",
+                  )}
+                  key={`stretch-row-${rowIndex}-${flexDirection}`}
+                  onClick={() =>
+                    onChange({
+                      alignItems: "stretch",
+                      justifyContent: itemJustify,
+                    })
+                  }
+                >
+                  {!selected && <DotIndicator />}
+                  <StretchIllustration
+                    alignItems="stretch"
+                    className={cn(selected ? "flex text-white" : "hidden group-hover:flex")}
+                    direction="column"
+                  />
+                </div>
+              );
+            })}
+          </div>
+        )}
+      </div>
+      <DropdownMenu>
+        <DropdownMenuTrigger asChild>
+          <Button size="icon-sm" variant="secondary">
+            <Settings2Icon className="size-3.5" />
+          </Button>
+        </DropdownMenuTrigger>
+        <DropdownMenuContent align="end">
+          <DropdownMenuCheckboxItem
+            checked={isSpaceBetween}
+            onCheckedChange={() =>
+              onChange({
+                alignItems,
+                justifyContent: isSpaceBetween ? "flex-start" : "space-between",
+              })
+            }
+          >
+            <span>Space between</span>
+          </DropdownMenuCheckboxItem>
+          <DropdownMenuCheckboxItem
+            checked={isStretch}
+            onCheckedChange={() =>
+              onChange({
+                alignItems: isStretch ? "flex-start" : "stretch",
+                justifyContent,
+              })
+            }
+          >
+            <span>Stretch</span>
+          </DropdownMenuCheckboxItem>
+        </DropdownMenuContent>
+      </DropdownMenu>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/chrome.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/chrome.tsx
new file mode 100644
index 000000000..3bcd19a00
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/chrome.tsx
@@ -0,0 +1,141 @@
+import { cn } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+/**
+ * Small chrome/layout primitives for the panel-tree renderer. The wire has
+ * `row`/`column`/`field`/`text`/`callout` chrome nodes with no existing kit
+ * component; these are the minimal host targets, following the layout
+ * conventions of the current sections (labeled rows are a fixed-width muted
+ * label + a flexible control column).
+ */
+
+type Align = "start" | "center" | "end" | "stretch";
+type Justify = "start" | "center" | "end" | "between";
+
+const ALIGN_CLASS: Record<Align, string> = {
+  start: "items-start",
+  center: "items-center",
+  end: "items-end",
+  stretch: "items-stretch",
+};
+
+const JUSTIFY_CLASS: Record<Justify, string> = {
+  start: "justify-start",
+  center: "justify-center",
+  end: "justify-end",
+  between: "justify-between",
+};
+
+export interface PanelRowProps {
+  gap?: number;
+  align?: Align;
+  justify?: Justify;
+  className?: string;
+  children?: ReactNode;
+}
+
+/** Horizontal flex row. */
+export function PanelRow({ gap = 2, align = "center", justify, className, children }: PanelRowProps) {
+  return (
+    <div
+      className={cn(
+        "flex flex-row",
+        ALIGN_CLASS[align],
+        justify ? JUSTIFY_CLASS[justify] : undefined,
+        className,
+      )}
+      style={{ gap: `${gap * 0.25}rem` }}
+    >
+      {children}
+    </div>
+  );
+}
+
+export interface PanelColumnProps {
+  gap?: number;
+  align?: Align;
+  className?: string;
+  children?: ReactNode;
+}
+
+/** Vertical flex column. */
+export function PanelColumn({ gap = 2, align = "stretch", className, children }: PanelColumnProps) {
+  return (
+    <div
+      className={cn("flex flex-col", ALIGN_CLASS[align], className)}
+      style={{ gap: `${gap * 0.25}rem` }}
+    >
+      {children}
+    </div>
+  );
+}
+
+export interface PanelFieldProps {
+  label: string;
+  icon?: ReactNode;
+  className?: string;
+  children?: ReactNode;
+}
+
+/**
+ * A labeled control row: a fixed-width truncating muted label (with an optional
+ * leading icon) followed by the control(s). Mirrors the labeled-row layout the
+ * sections use (e.g. component props, action payload rows).
+ */
+export function PanelField({ label, icon, className, children }: PanelFieldProps) {
+  return (
+    <div className={cn("flex flex-row items-center gap-2", className)}>
+      <span
+        className="flex min-w-16 max-w-24 items-center gap-1 truncate text-muted-foreground text-xs"
+        title={label}
+      >
+        {icon}
+        {label}
+      </span>
+      <div className="flex min-w-0 flex-1 flex-row items-center gap-1">{children}</div>
+    </div>
+  );
+}
+
+type TextTone = "default" | "muted";
+
+export interface PanelTextProps {
+  content: string;
+  variant?: "body" | "label";
+  tone?: TextTone;
+  className?: string;
+}
+
+/** Inline text node (`body`/`label` variants, default/muted tone). */
+export function PanelText({ content, variant = "body", tone = "default", className }: PanelTextProps) {
+  return (
+    <span
+      className={cn(
+        variant === "label" ? "font-medium text-xs" : "text-xs",
+        tone === "muted" && "text-muted-foreground",
+        className,
+      )}
+    >
+      {content}
+    </span>
+  );
+}
+
+type CalloutTone = "info" | "warning" | "danger";
+
+const CALLOUT_TONE_CLASS: Record<CalloutTone, string> = {
+  info: "text-muted-foreground",
+  warning: "text-amber-600 dark:text-amber-500",
+  danger: "text-destructive",
+};
+
+export interface PanelCalloutProps {
+  message: string;
+  tone?: CalloutTone;
+  className?: string;
+}
+
+/** A short inline explainer/warning line. */
+export function PanelCallout({ message, tone = "info", className }: PanelCalloutProps) {
+  return <p className={cn("text-xs", CALLOUT_TONE_CLASS[tone], className)}>{message}</p>;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-input.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-input.tsx
new file mode 100644
index 000000000..572a88c19
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-input.tsx
@@ -0,0 +1,152 @@
+"use client";
+
+import { Popover, PopoverContent, PopoverTrigger, cn } from "@voidhash/ui";
+import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
+import { PercentIcon } from "lucide-react";
+import { useEffect, useState } from "react";
+
+import { ColorPickerContent } from "./color-picker/color-picker-content";
+import { ColorSwatch } from "./color-picker/color-swatch";
+import { hexOpacityToRgba, rgbaToHexOpacity } from "./color-picker/color-utils";
+import { TextInput } from "./text-input";
+import { PopoverHeader } from "./popover-header";
+
+export interface ColorInputProps {
+  /** RGBA color string (e.g., "rgba(255, 255, 255, 1)") */
+  value: string;
+  /** Callback when color changes, returns RGBA string */
+  onChange: (value: string) => void;
+  /** Indicates values differ across multi-selection. */
+  mixed?: boolean;
+  /** Placeholder label when mixed is true. */
+  mixedLabel?: string;
+  /** Called when user starts dragging (mouse down on picker/slider). Use for beginning deferred edits. */
+  onDragStart?: () => void;
+  /** Called when user finishes dragging (mouse up). Use for committing deferred edits. */
+  onCommit?: () => void;
+  /** Called when user cancels during drag (Escape key). Use for discarding deferred edits. */
+  onDiscard?: () => void;
+  className?: string;
+}
+
+const HEX_REGEX = /^[0-9A-Fa-f]{6}$/;
+
+export function ColorInput({
+  value = "rgba(255, 255, 255, 1)",
+  onChange,
+  mixed = false,
+  mixedLabel = "Mixed",
+  onDragStart,
+  onCommit,
+  onDiscard,
+  className,
+}: ColorInputProps) {
+  const [isOpen, setIsOpen] = useState(false);
+  const [isHexFocused, setIsHexFocused] = useState(false);
+
+  // Parse RGBA to internal hex + opacity representation
+  const { hex: initialHex, opacity: initialOpacity } = rgbaToHexOpacity(value);
+  const [internalHex, setInternalHex] = useState(initialHex);
+  const [internalOpacity, setInternalOpacity] = useState(initialOpacity);
+
+  // Sync internal state when external value changes
+  useEffect(() => {
+    const { hex, opacity } = rgbaToHexOpacity(value);
+    setInternalHex(hex);
+    setInternalOpacity(opacity);
+  }, [value]);
+
+  const emitChange = (hex: string, opacity: number) => {
+    onChange(hexOpacityToRgba(hex, opacity));
+  };
+
+  const handleColorChange = (newHex: string) => {
+    setInternalHex(newHex);
+    emitChange(newHex, internalOpacity);
+  };
+
+  const handleOpacityChange = (newOpacity: number) => {
+    setInternalOpacity(newOpacity);
+    emitChange(internalHex, newOpacity);
+  };
+
+  const handleHexInputChange = (inputValue: string) => {
+    const cleaned = inputValue.replace("#", "").toUpperCase();
+    setInternalHex(cleaned);
+    if (HEX_REGEX.test(cleaned)) {
+      emitChange(cleaned, internalOpacity);
+    }
+  };
+
+  const handleHexInputBlur = () => {
+    setIsHexFocused(false);
+    if (!HEX_REGEX.test(internalHex)) {
+      const { hex } = rgbaToHexOpacity(value);
+      setInternalHex(hex);
+    }
+  };
+
+  return (
+    <div className={cn("flex items-center gap-2", className)}>
+      <InputGroup className="h-7 flex-1 rounded-sm border-none dark:bg-input/60">
+        <Popover onOpenChange={setIsOpen} open={isOpen}>
+          <PopoverTrigger asChild>
+            <button
+              aria-label="Open color picker"
+              className="flex h-7 shrink-0 items-center justify-center rounded-sm px-1.5 transition-colors hover:bg-accent dark:bg-input/60 dark:hover:bg-accent/50"
+              type="button"
+            >
+              <ColorSwatch color={internalHex} opacity={internalOpacity} />
+            </button>
+          </PopoverTrigger>
+          <PopoverContent
+            align="start"
+            className="w-auto rounded-2xl p-3"
+            side="left"
+            sideOffset={8}
+          >
+            <PopoverHeader title="Color" onClose={() => setIsOpen(false)} />
+            <ColorPickerContent
+              color={internalHex}
+              onColorChange={handleColorChange}
+              onDiscard={onDiscard}
+              onDragEnd={onCommit}
+              onDragStart={onDragStart}
+              onOpacityChange={handleOpacityChange}
+              opacity={internalOpacity}
+            />
+          </PopoverContent>
+        </Popover>
+        <InputGroupInput
+          aria-label="Hex color code"
+          className="h-7 px-2 py-0 text-xs"
+          maxLength={6}
+          onBlur={handleHexInputBlur}
+          onChange={(e) => handleHexInputChange(e.target.value)}
+          onFocus={(e) => {
+            setIsHexFocused(true);
+            if (mixed) {
+              setInternalHex("");
+            }
+            e.target.select();
+          }}
+          placeholder={mixed && !isHexFocused ? mixedLabel : undefined}
+          value={mixed && !isHexFocused ? "" : internalHex}
+        />
+      </InputGroup>
+
+      <TextInput
+        className="w-16"
+        icon={<PercentIcon />}
+        label="Opacity"
+        maxValue={100}
+        minValue={0}
+        onChange={(opacityValue) => {
+          handleOpacityChange(Number.parseInt(opacityValue, 10));
+        }}
+        type="number"
+        value={internalOpacity.toString()}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/checkerboard-background.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/checkerboard-background.tsx
new file mode 100644
index 000000000..933483634
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/checkerboard-background.tsx
@@ -0,0 +1,19 @@
+import { cn } from "@voidhash/ui";
+
+export function CheckerboardBackground({ className }: { className?: string }) {
+  return (
+    <div
+      className={cn("pointer-events-none absolute inset-0", className)}
+      style={{
+        backgroundImage: `
+          linear-gradient(45deg, #808080 25%, transparent 25%),
+          linear-gradient(-45deg, #808080 25%, transparent 25%),
+          linear-gradient(45deg, transparent 75%, #808080 75%),
+          linear-gradient(-45deg, transparent 75%, #808080 75%)
+        `,
+        backgroundPosition: "0 0, 0 4px, 4px -4px, -4px 0",
+        backgroundSize: "8px 8px",
+      }}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-picker-content.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-picker-content.tsx
new file mode 100644
index 000000000..d80bd974e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-picker-content.tsx
@@ -0,0 +1,256 @@
+"use client";
+
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { InputGroup, InputGroupAddon, InputGroupInput } from "@voidhash/ui/input-group";
+import { PercentIcon } from "lucide-react";
+import { useEffect, useState } from "react";
+
+import { TextInput } from "../text-input";
+import { type ColorMode, type HSV, hexToRgb, hsvToRgb, rgbToHex, rgbToHsv } from "./color-utils";
+import { EyedropperButton } from "./eyedropper-button";
+import { HueSlider } from "./hue-slider";
+import { OpacitySlider } from "./opacity-slider";
+import { SaturationBrightnessPicker } from "./saturation-brightness-picker";
+
+export interface ColorPickerContentProps {
+  color: string;
+  opacity: number;
+  onColorChange: (color: string) => void;
+  onOpacityChange: (opacity: number) => void;
+  onDragStart?: () => void;
+  onDragEnd?: () => void;
+  onDiscard?: () => void;
+}
+
+const HEX_REGEX = /^[0-9A-Fa-f]{6}$/;
+
+export function ColorPickerContent({
+  color,
+  opacity,
+  onColorChange,
+  onOpacityChange,
+  onDragStart,
+  onDragEnd,
+  onDiscard,
+}: ColorPickerContentProps) {
+  const [mode, setMode] = useState<ColorMode>("hex");
+  const rgb = hexToRgb(color);
+  const hsv = rgbToHsv(rgb.r, rgb.g, rgb.b);
+
+  const [internalHsv, setInternalHsv] = useState<HSV>(hsv);
+  const [hexInput, setHexInput] = useState(color);
+  const [rgbInput, setRgbInput] = useState(rgb);
+
+  // Sync internal state when external color changes
+  useEffect(() => {
+    const newRgb = hexToRgb(color);
+    const newHsv = rgbToHsv(newRgb.r, newRgb.g, newRgb.b);
+    setInternalHsv(newHsv);
+    setHexInput(color);
+    setRgbInput(newRgb);
+  }, [color]);
+
+  const handleSaturationBrightnessChange = (s: number, v: number) => {
+    const newHsv = { ...internalHsv, s, v };
+    setInternalHsv(newHsv);
+    const newRgb = hsvToRgb(newHsv.h, newHsv.s, newHsv.v);
+    const hex = rgbToHex(newRgb.r, newRgb.g, newRgb.b);
+    setHexInput(hex);
+    setRgbInput(newRgb);
+    onColorChange(hex);
+  };
+
+  const handleHueChange = (h: number) => {
+    const newHsv = { ...internalHsv, h };
+    setInternalHsv(newHsv);
+    const newRgb = hsvToRgb(newHsv.h, newHsv.s, newHsv.v);
+    const hex = rgbToHex(newRgb.r, newRgb.g, newRgb.b);
+    setHexInput(hex);
+    setRgbInput(newRgb);
+    onColorChange(hex);
+  };
+
+  const handleHexInputChange = (value: string) => {
+    setHexInput(value.toUpperCase());
+    if (HEX_REGEX.test(value)) {
+      const newRgb = hexToRgb(value);
+      const newHsv = rgbToHsv(newRgb.r, newRgb.g, newRgb.b);
+      setInternalHsv(newHsv);
+      setRgbInput(newRgb);
+      onColorChange(value.toUpperCase());
+    }
+  };
+
+  const handleRgbInputChange = (channel: "r" | "g" | "b", value: string) => {
+    const num = Number.parseInt(value, 10);
+    if (Number.isNaN(num)) {
+      return;
+    }
+    const clampedValue = Math.max(0, Math.min(255, num));
+    const newRgb = { ...rgbInput, [channel]: clampedValue };
+    setRgbInput(newRgb);
+    const hex = rgbToHex(newRgb.r, newRgb.g, newRgb.b);
+    const newHsv = rgbToHsv(newRgb.r, newRgb.g, newRgb.b);
+    setInternalHsv(newHsv);
+    setHexInput(hex);
+    onColorChange(hex);
+  };
+
+  const handleColorPick = (pickedColor: string) => {
+    const newRgb = hexToRgb(pickedColor);
+    const newHsv = rgbToHsv(newRgb.r, newRgb.g, newRgb.b);
+    setInternalHsv(newHsv);
+    setHexInput(pickedColor);
+    setRgbInput(newRgb);
+    onColorChange(pickedColor);
+  };
+
+  return (
+    <div className="flex w-[260px] flex-col gap-4">
+      {/* Saturation/Brightness picker */}
+      <SaturationBrightnessPicker
+        brightness={internalHsv.v}
+        hue={internalHsv.h}
+        onChange={handleSaturationBrightnessChange}
+        onDiscard={onDiscard}
+        onDragEnd={onDragEnd}
+        onDragStart={onDragStart}
+        saturation={internalHsv.s}
+      />
+
+      {/* Sliders row */}
+      <div className="flex items-center gap-3">
+        <EyedropperButton onColorPick={handleColorPick} />
+        <div className="flex flex-1 flex-col gap-2.5">
+          <HueSlider
+            hue={internalHsv.h}
+            onChange={handleHueChange}
+            onDiscard={onDiscard}
+            onDragEnd={onDragEnd}
+            onDragStart={onDragStart}
+          />
+          <OpacitySlider
+            color={color}
+            onChange={onOpacityChange}
+            onDiscard={onDiscard}
+            onDragEnd={onDragEnd}
+            onDragStart={onDragStart}
+            opacity={opacity}
+          />
+        </div>
+      </div>
+
+      {/* Input row */}
+      <div className="flex items-center gap-2">
+        <Select onValueChange={(v) => setMode(v as ColorMode)} value={mode}>
+          <SelectTrigger className="h-7 w-[70px] gap-1 rounded-sm border-none px-2 text-xs dark:bg-input/60">
+            <SelectValue />
+          </SelectTrigger>
+          <SelectContent>
+            <SelectItem value="hex">Hex</SelectItem>
+            <SelectItem value="rgb">RGB</SelectItem>
+          </SelectContent>
+        </Select>
+
+        {mode === "hex" ? (
+          <>
+            <InputGroup className="h-7 flex-1 rounded-sm border-none dark:bg-input/60">
+              <InputGroupInput
+                aria-label="Hex color"
+                className="h-7 px-2 py-0 text-xs"
+                maxLength={6}
+                onBlur={() => {
+                  if (!HEX_REGEX.test(hexInput)) {
+                    setHexInput(color);
+                  }
+                }}
+                onChange={(e) => handleHexInputChange(e.target.value)}
+                onFocus={(e) => e.target.select()}
+                value={hexInput}
+              />
+            </InputGroup>
+            <TextInput
+              className="w-16"
+              icon={<PercentIcon />}
+              label="Opacity"
+              maxValue={100}
+              minValue={0}
+              onChange={(opacityValue) => {
+                onOpacityChange(Number.parseInt(opacityValue, 10));
+              }}
+              type="number"
+              value={opacity.toString()}
+            />
+          </>
+        ) : (
+          <>
+            <InputGroup className="h-7 w-11 shrink-0 rounded-sm border-none dark:bg-input/60">
+              <InputGroupInput
+                aria-label="Red"
+                className="h-7 px-1.5 py-0 text-center text-xs"
+                max={255}
+                min={0}
+                onChange={(e) => handleRgbInputChange("r", e.target.value)}
+                type="number"
+                value={rgbInput.r}
+              />
+            </InputGroup>
+            <InputGroup className="h-7 w-11 shrink-0 rounded-sm border-none dark:bg-input/60">
+              <InputGroupInput
+                aria-label="Green"
+                className="h-7 px-1.5 py-0 text-center text-xs"
+                max={255}
+                min={0}
+                onChange={(e) => handleRgbInputChange("g", e.target.value)}
+                type="number"
+                value={rgbInput.g}
+              />
+            </InputGroup>
+            <InputGroup className="h-7 w-11 shrink-0 rounded-sm border-none dark:bg-input/60">
+              <InputGroupInput
+                aria-label="Blue"
+                className="h-7 px-1.5 py-0 text-center text-xs"
+                max={255}
+                min={0}
+                onChange={(e) => handleRgbInputChange("b", e.target.value)}
+                type="number"
+                value={rgbInput.b}
+              />
+            </InputGroup>
+            <InputGroup className="h-7 w-[52px] shrink-0 rounded-sm border-none dark:bg-input/60">
+              <InputGroupInput
+                aria-label="Opacity"
+                className="h-7 px-2 py-0 text-xs"
+                max={100}
+                min={0}
+                onBlur={(e) => {
+                  const val = Number.parseInt(e.target.value, 10);
+                  if (Number.isNaN(val)) {
+                    onOpacityChange(100);
+                  }
+                }}
+                onChange={(e) => {
+                  const val = Number.parseInt(e.target.value, 10);
+                  if (!Number.isNaN(val)) {
+                    onOpacityChange(Math.max(0, Math.min(100, val)));
+                  }
+                }}
+                type="number"
+                value={opacity}
+              />
+              <InputGroupAddon align="inline-end" className="pr-2 text-xs">
+                %
+              </InputGroupAddon>
+            </InputGroup>
+          </>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-swatch.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-swatch.tsx
new file mode 100644
index 000000000..f163975ec
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-swatch.tsx
@@ -0,0 +1,25 @@
+import { cn } from "@voidhash/ui";
+
+import { CheckerboardBackground } from "./checkerboard-background";
+
+export interface ColorSwatchProps {
+  color: string;
+  opacity?: number;
+  className?: string;
+}
+
+export function ColorSwatch({ color, opacity = 100, className }: ColorSwatchProps) {
+  return (
+    <div className={cn("relative size-5 shrink-0 overflow-hidden rounded-[3px]", className)}>
+      <CheckerboardBackground />
+      <div
+        className="absolute inset-0"
+        style={{
+          backgroundColor: `#${color}`,
+          opacity: opacity / 100,
+        }}
+      />
+      <div className="absolute inset-0 rounded-[3px] ring-1 ring-white/20 ring-inset" />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-utils.ts b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-utils.ts
new file mode 100644
index 000000000..4e66c5c49
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/color-utils.ts
@@ -0,0 +1,166 @@
+export interface HSV {
+  h: number;
+  s: number;
+  v: number;
+}
+
+export interface RGB {
+  r: number;
+  g: number;
+  b: number;
+}
+
+export interface RGBA {
+  r: number;
+  g: number;
+  b: number;
+  a: number;
+}
+
+export type ColorMode = "hex" | "rgb";
+
+const HEX_REGEX = /^#?([a-f\d]{2})([a-f\d]{2})([a-f\d]{2})$/i;
+export function hexToRgb(hex: string): RGB {
+  const result = HEX_REGEX.exec(hex);
+  if (!result) {
+    return { b: 255, g: 255, r: 255 };
+  }
+  return {
+    b: Number.parseInt(result.at(3) ?? "ff", 16),
+    g: Number.parseInt(result.at(2) ?? "ff", 16),
+    r: Number.parseInt(result.at(1) ?? "ff", 16),
+  };
+}
+
+export function rgbToHex(r: number, g: number, b: number): string {
+  const toHex = (n: number) => {
+    const hex = Math.round(Math.max(0, Math.min(255, n))).toString(16);
+    return hex.length === 1 ? `0${hex}` : hex;
+  };
+  return `${toHex(r)}${toHex(g)}${toHex(b)}`.toUpperCase();
+}
+
+export function rgbToHsv(r: number, g: number, b: number): HSV {
+  const rNorm = r / 255;
+  const gNorm = g / 255;
+  const bNorm = b / 255;
+
+  const max = Math.max(rNorm, gNorm, bNorm);
+  const min = Math.min(rNorm, gNorm, bNorm);
+  const diff = max - min;
+
+  let h = 0;
+  const s = max === 0 ? 0 : diff / max;
+  const v = max;
+
+  if (diff !== 0) {
+    if (max === rNorm) {
+      h = ((gNorm - bNorm) / diff) % 6;
+    } else if (max === gNorm) {
+      h = (bNorm - rNorm) / diff + 2;
+    } else {
+      h = (rNorm - gNorm) / diff + 4;
+    }
+    h = Math.round(h * 60);
+    if (h < 0) {
+      h += 360;
+    }
+  }
+
+  return { h, s, v };
+}
+
+export function hsvToRgb(h: number, s: number, v: number): RGB {
+  const c = v * s;
+  const x = c * (1 - Math.abs(((h / 60) % 2) - 1));
+  const m = v - c;
+
+  let r = 0;
+  let g = 0;
+  let b = 0;
+
+  if (h >= 0 && h < 60) {
+    r = c;
+    g = x;
+    b = 0;
+  } else if (h >= 60 && h < 120) {
+    r = x;
+    g = c;
+    b = 0;
+  } else if (h >= 120 && h < 180) {
+    r = 0;
+    g = c;
+    b = x;
+  } else if (h >= 180 && h < 240) {
+    r = 0;
+    g = x;
+    b = c;
+  } else if (h >= 240 && h < 300) {
+    r = x;
+    g = 0;
+    b = c;
+  } else {
+    r = c;
+    g = 0;
+    b = x;
+  }
+
+  return {
+    b: Math.round((b + m) * 255),
+    g: Math.round((g + m) * 255),
+    r: Math.round((r + m) * 255),
+  };
+}
+
+const RGBA_REGEX = /^rgba?\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*(?:,\s*([\d.]+)\s*)?\)$/;
+
+export function parseRgba(rgba: string): RGBA {
+  const match = RGBA_REGEX.exec(rgba);
+  if (!match) {
+    return { a: 1, b: 255, g: 255, r: 255 };
+  }
+  return {
+    a: Math.min(1, Math.max(0, Number.parseFloat(match.at(4) ?? "1"))),
+    b: Math.min(255, Math.max(0, Number.parseInt(match.at(3) ?? "255", 10))),
+    g: Math.min(255, Math.max(0, Number.parseInt(match.at(2) ?? "255", 10))),
+    r: Math.min(255, Math.max(0, Number.parseInt(match.at(1) ?? "255", 10))),
+  };
+}
+
+export function rgbaToString(r: number, g: number, b: number, a: number): string {
+  return `rgba(${Math.round(r)}, ${Math.round(g)}, ${Math.round(b)}, ${a})`;
+}
+
+export function hexOpacityToRgba(hex: string, opacity: number): string {
+  const rgb = hexToRgb(hex);
+  return rgbaToString(rgb.r, rgb.g, rgb.b, opacity / 100);
+}
+
+export function rgbaToHexOpacity(rgba: string): {
+  hex: string;
+  opacity: number;
+} {
+  const { r, g, b, a } = parseRgba(rgba);
+  return {
+    hex: rgbToHex(r, g, b),
+    opacity: Math.round(a * 100),
+  };
+}
+
+/**
+ * Linearly interpolates between two RGBA color strings at fraction `t` (clamped
+ * to `[0, 1]`), returning a new `rgba(...)` string. Used to derive the color of
+ * a gradient stop inserted between two neighbors.
+ */
+export function interpolateRgba(from: string, to: string, t: number): string {
+  const clamped = Math.max(0, Math.min(1, t));
+  const a = parseRgba(from);
+  const b = parseRgba(to);
+  const mix = (x: number, y: number) => x + (y - x) * clamped;
+  return rgbaToString(
+    mix(a.r, b.r),
+    mix(a.g, b.g),
+    mix(a.b, b.b),
+    Math.round(mix(a.a, b.a) * 1000) / 1000,
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/eyedropper-button.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/eyedropper-button.tsx
new file mode 100644
index 000000000..5b1b36cff
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/eyedropper-button.tsx
@@ -0,0 +1,41 @@
+"use client";
+
+import { PipetteIcon } from "lucide-react";
+
+export interface EyedropperButtonProps {
+  onColorPick: (color: string) => void;
+}
+
+export function EyedropperButton({ onColorPick }: EyedropperButtonProps) {
+  const handleEyedropper = async () => {
+    if (!("EyeDropper" in window)) {
+      return;
+    }
+
+    try {
+      // @ts-expect-error - EyeDropper API is not yet in TypeScript types
+      const eyeDropper = new window.EyeDropper();
+      const result = await eyeDropper.open();
+      // Result is in format "#rrggbb"
+      const hex = result.sRGBHex.slice(1).toUpperCase();
+      onColorPick(hex);
+    } catch {
+      // User cancelled or API not supported
+    }
+  };
+
+  if (!("EyeDropper" in window)) {
+    return null;
+  }
+
+  return (
+    <button
+      aria-label="Pick color from screen"
+      className="flex size-8 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent hover:text-accent-foreground"
+      onClick={handleEyedropper}
+      type="button"
+    >
+      <PipetteIcon className="size-4" />
+    </button>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/hue-slider.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/hue-slider.tsx
new file mode 100644
index 000000000..c5d75ac16
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/hue-slider.tsx
@@ -0,0 +1,97 @@
+"use client";
+
+import { useCallback, useEffect, useRef } from "react";
+
+export interface HueSliderProps {
+  hue: number;
+  onChange: (hue: number) => void;
+  onDragStart?: () => void;
+  onDragEnd?: () => void;
+  onDiscard?: () => void;
+}
+
+export function HueSlider({ hue, onChange, onDragStart, onDragEnd, onDiscard }: HueSliderProps) {
+  const containerRef = useRef<HTMLDivElement>(null);
+  const isDragging = useRef(false);
+
+  const updateHue = useCallback(
+    (clientX: number) => {
+      const container = containerRef.current;
+      if (!container) {
+        return;
+      }
+
+      const rect = container.getBoundingClientRect();
+      const x = Math.max(0, Math.min(clientX - rect.left, rect.width));
+      const h = (x / rect.width) * 360;
+      onChange(h);
+    },
+    [onChange],
+  );
+
+  const handleMouseDown = (e: React.MouseEvent) => {
+    e.preventDefault();
+    isDragging.current = true;
+    onDragStart?.();
+    updateHue(e.clientX);
+  };
+
+  useEffect(() => {
+    const handleMouseMove = (e: MouseEvent) => {
+      if (isDragging.current) {
+        updateHue(e.clientX);
+      }
+    };
+
+    const handleMouseUp = () => {
+      if (isDragging.current) {
+        isDragging.current = false;
+        onDragEnd?.();
+      }
+    };
+
+    const handleKeyDown = (e: KeyboardEvent) => {
+      if (e.key === "Escape" && isDragging.current) {
+        isDragging.current = false;
+        onDiscard?.();
+      }
+    };
+
+    document.addEventListener("mousemove", handleMouseMove);
+    document.addEventListener("mouseup", handleMouseUp);
+    document.addEventListener("keydown", handleKeyDown);
+
+    return () => {
+      document.removeEventListener("mousemove", handleMouseMove);
+      document.removeEventListener("mouseup", handleMouseUp);
+      document.removeEventListener("keydown", handleKeyDown);
+    };
+  }, [updateHue, onDragEnd, onDiscard]);
+
+  return (
+    <div
+      aria-label="Hue slider"
+      aria-valuemax={360}
+      aria-valuemin={0}
+      aria-valuenow={Math.round(hue)}
+      className="relative h-3 w-full cursor-pointer rounded-full"
+      onMouseDown={handleMouseDown}
+      ref={containerRef}
+      role="slider"
+      style={{
+        background:
+          "linear-gradient(to right, #ff0000, #ffff00, #00ff00, #00ffff, #0000ff, #ff00ff, #ff0000)",
+      }}
+      tabIndex={0}
+    >
+      {/* Slider handle */}
+      <div
+        className="-translate-x-1/2 -translate-y-1/2 pointer-events-none absolute top-1/2 size-3.5 rounded-full border-2 border-white shadow-[0_0_0_1px_rgba(0,0,0,0.3)]"
+        style={{
+          backgroundColor: `hsl(${hue}, 100%, 50%)`,
+          left: `${(hue / 360) * 100}%`,
+        }}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/opacity-slider.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/opacity-slider.tsx
new file mode 100644
index 000000000..bfedbc80e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/opacity-slider.tsx
@@ -0,0 +1,110 @@
+"use client";
+
+import { useCallback, useEffect, useRef } from "react";
+
+import { CheckerboardBackground } from "./checkerboard-background";
+
+export interface OpacitySliderProps {
+  color: string;
+  opacity: number;
+  onChange: (opacity: number) => void;
+  onDragStart?: () => void;
+  onDragEnd?: () => void;
+  onDiscard?: () => void;
+}
+
+export function OpacitySlider({
+  color,
+  opacity,
+  onChange,
+  onDragStart,
+  onDragEnd,
+  onDiscard,
+}: OpacitySliderProps) {
+  const containerRef = useRef<HTMLDivElement>(null);
+  const isDragging = useRef(false);
+
+  const updateOpacity = useCallback(
+    (clientX: number) => {
+      const container = containerRef.current;
+      if (!container) {
+        return;
+      }
+
+      const rect = container.getBoundingClientRect();
+      const x = Math.max(0, Math.min(clientX - rect.left, rect.width));
+      const o = Math.round((x / rect.width) * 100);
+      onChange(o);
+    },
+    [onChange],
+  );
+
+  const handleMouseDown = (e: React.MouseEvent) => {
+    e.preventDefault();
+    isDragging.current = true;
+    onDragStart?.();
+    updateOpacity(e.clientX);
+  };
+
+  useEffect(() => {
+    const handleMouseMove = (e: MouseEvent) => {
+      if (isDragging.current) {
+        updateOpacity(e.clientX);
+      }
+    };
+
+    const handleMouseUp = () => {
+      if (isDragging.current) {
+        isDragging.current = false;
+        onDragEnd?.();
+      }
+    };
+
+    const handleKeyDown = (e: KeyboardEvent) => {
+      if (e.key === "Escape" && isDragging.current) {
+        isDragging.current = false;
+        onDiscard?.();
+      }
+    };
+
+    document.addEventListener("mousemove", handleMouseMove);
+    document.addEventListener("mouseup", handleMouseUp);
+    document.addEventListener("keydown", handleKeyDown);
+
+    return () => {
+      document.removeEventListener("mousemove", handleMouseMove);
+      document.removeEventListener("mouseup", handleMouseUp);
+      document.removeEventListener("keydown", handleKeyDown);
+    };
+  }, [updateOpacity, onDragEnd, onDiscard]);
+
+  return (
+    <div
+      aria-label="Opacity slider"
+      aria-valuemax={100}
+      aria-valuemin={0}
+      aria-valuenow={opacity}
+      className="relative h-3 w-full cursor-pointer overflow-hidden rounded-full"
+      onMouseDown={handleMouseDown}
+      ref={containerRef}
+      role="slider"
+      tabIndex={0}
+    >
+      <CheckerboardBackground />
+      <div
+        className="absolute inset-0"
+        style={{
+          background: `linear-gradient(to right, transparent, #${color})`,
+        }}
+      />
+      {/* Slider handle */}
+      <div
+        className="-translate-x-1/2 -translate-y-1/2 pointer-events-none absolute top-1/2 size-3.5 rounded-full border-2 border-white shadow-[0_0_0_1px_rgba(0,0,0,0.3)]"
+        style={{
+          backgroundColor: `#${color}`,
+          left: `${opacity}%`,
+        }}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/saturation-brightness-picker.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/saturation-brightness-picker.tsx
new file mode 100644
index 000000000..8f468a61e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/color-picker/saturation-brightness-picker.tsx
@@ -0,0 +1,141 @@
+"use client";
+
+import { useCallback, useEffect, useRef } from "react";
+
+import { hsvToRgb } from "./color-utils";
+
+export interface SaturationBrightnessPickerProps {
+  hue: number;
+  saturation: number;
+  brightness: number;
+  onChange: (s: number, v: number) => void;
+  onDragStart?: () => void;
+  onDragEnd?: () => void;
+  onDiscard?: () => void;
+}
+
+export function SaturationBrightnessPicker({
+  hue,
+  saturation,
+  brightness,
+  onChange,
+  onDragStart,
+  onDragEnd,
+  onDiscard,
+}: SaturationBrightnessPickerProps) {
+  const containerRef = useRef<HTMLDivElement>(null);
+  const isDragging = useRef(false);
+
+  const updateColor = useCallback(
+    (clientX: number, clientY: number) => {
+      const container = containerRef.current;
+      if (!container) {
+        return;
+      }
+
+      const rect = container.getBoundingClientRect();
+      const x = Math.max(0, Math.min(clientX - rect.left, rect.width));
+      const y = Math.max(0, Math.min(clientY - rect.top, rect.height));
+
+      const s = x / rect.width;
+      const v = 1 - y / rect.height;
+      onChange(s, v);
+    },
+    [onChange],
+  );
+
+  const handleMouseDown = (e: React.MouseEvent) => {
+    e.preventDefault();
+    isDragging.current = true;
+    onDragStart?.();
+    updateColor(e.clientX, e.clientY);
+  };
+
+  useEffect(() => {
+    const handleMouseMove = (e: MouseEvent) => {
+      if (isDragging.current) {
+        updateColor(e.clientX, e.clientY);
+      }
+    };
+
+    const handleMouseUp = () => {
+      if (isDragging.current) {
+        isDragging.current = false;
+        onDragEnd?.();
+      }
+    };
+
+    const handleKeyDown = (e: KeyboardEvent) => {
+      if (e.key === "Escape" && isDragging.current) {
+        isDragging.current = false;
+        onDiscard?.();
+      }
+    };
+
+    document.addEventListener("mousemove", handleMouseMove);
+    document.addEventListener("mouseup", handleMouseUp);
+    document.addEventListener("keydown", handleKeyDown);
+
+    return () => {
+      document.removeEventListener("mousemove", handleMouseMove);
+      document.removeEventListener("mouseup", handleMouseUp);
+      document.removeEventListener("keydown", handleKeyDown);
+    };
+  }, [updateColor, onDragEnd, onDiscard]);
+
+  const hueRgb = hsvToRgb(hue, 1, 1);
+  const hueColor = `rgb(${hueRgb.r}, ${hueRgb.g}, ${hueRgb.b})`;
+
+  return (
+    // biome-ignore lint/nursery/noNoninteractiveElementInteractions: TODO: Fix accessibility issues
+    <div
+      aria-label={`Color picker. Saturation: ${Math.round(saturation * 100)}%, Brightness: ${Math.round(brightness * 100)}%`}
+      className="relative h-[200px] w-full cursor-crosshair rounded-md"
+      onKeyDown={(e) => {
+        const step = e.shiftKey ? 0.1 : 0.01;
+        if (e.key === "ArrowRight") {
+          e.preventDefault();
+          onChange(Math.min(1, saturation + step), brightness);
+        } else if (e.key === "ArrowLeft") {
+          e.preventDefault();
+          onChange(Math.max(0, saturation - step), brightness);
+        } else if (e.key === "ArrowUp") {
+          e.preventDefault();
+          onChange(saturation, Math.min(1, brightness + step));
+        } else if (e.key === "ArrowDown") {
+          e.preventDefault();
+          onChange(saturation, Math.max(0, brightness - step));
+        }
+      }}
+      onMouseDown={handleMouseDown}
+      ref={containerRef}
+      role="application"
+      style={{ backgroundColor: hueColor }}
+      // biome-ignore lint/a11y/noNoninteractiveTabindex: TODO: Fix accessibility issues
+      tabIndex={0}
+    >
+      {/* White gradient (left to right) */}
+      <div
+        className="absolute inset-0 rounded-md"
+        style={{
+          background: "linear-gradient(to right, white, transparent)",
+        }}
+      />
+      {/* Black gradient (top to bottom) */}
+      <div
+        className="absolute inset-0 rounded-md"
+        style={{
+          background: "linear-gradient(to bottom, transparent, black)",
+        }}
+      />
+      {/* Picker handle */}
+      <div
+        className="-translate-x-1/2 -translate-y-1/2 pointer-events-none absolute size-4 rounded-full border-2 border-white shadow-[0_0_0_1px_rgba(0,0,0,0.3),inset_0_0_0_1px_rgba(0,0,0,0.3)]"
+        style={{
+          left: `${saturation * 100}%`,
+          top: `${(1 - brightness) * 100}%`,
+        }}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.test.ts
new file mode 100644
index 000000000..2527eea21
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.test.ts
@@ -0,0 +1,169 @@
+import type { AlignItems, AlignSelf } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  customAlignSelf,
+  dimensionModeWrite,
+  getDimensionState,
+  hugAlignSelf,
+  type DimensionAxis,
+} from "./dimension-field";
+
+/** A minimal flex-sizing node for the pure derivation under test. */
+const node = (
+  over: Partial<{
+    width: number | "auto";
+    height: number | "auto";
+    flex: number | undefined;
+    alignSelf: AlignSelf;
+  }> = {},
+) =>
+  ({
+    width: "auto",
+    height: "auto",
+    flex: undefined,
+    alignSelf: "auto",
+    ...over,
+    // The kit types the node through NodeEditorProps; this shape is sufficient.
+  }) as never;
+
+describe("getDimensionState — cross axis (parent stretches the axis)", () => {
+  // Width is the cross axis under a COLUMN parent.
+  test("numeric cross size is custom even when parent + alignSelf stretch", () => {
+    expect(getDimensionState("width", node({ width: 120, alignSelf: "stretch" }), "column", "stretch")).toBe(
+      "custom",
+    );
+  });
+
+  test("auto cross size + explicit alignSelf stretch is fill (any parent alignItems)", () => {
+    expect(getDimensionState("width", node({ alignSelf: "stretch" }), "column", "flex-start")).toBe("fill");
+  });
+
+  test("auto cross size + alignSelf auto + parent stretch is fill (container-driven)", () => {
+    expect(getDimensionState("width", node({ alignSelf: "auto" }), "column", "stretch")).toBe("fill");
+  });
+
+  test("auto cross size + alignSelf auto + parent NOT stretch is hug", () => {
+    expect(getDimensionState("width", node({ alignSelf: "auto" }), "column", "flex-start")).toBe("hug");
+  });
+
+  test("auto cross size + explicit non-stretch alignSelf is hug", () => {
+    expect(getDimensionState("width", node({ alignSelf: "center" }), "column", "stretch")).toBe("hug");
+  });
+
+  test("height is the cross axis under a ROW parent", () => {
+    expect(getDimensionState("height", node({ alignSelf: "auto" }), "row", "stretch")).toBe("fill");
+    expect(getDimensionState("height", node({ height: 80 }), "row", "stretch")).toBe("custom");
+  });
+});
+
+describe("getDimensionState — main axis (fill via flex)", () => {
+  test("flex:1 on the main axis is fill", () => {
+    expect(getDimensionState("width", node({ flex: 1 }), "row", "stretch")).toBe("fill");
+  });
+
+  test("auto main size (no flex) is hug", () => {
+    expect(getDimensionState("width", node({ width: "auto" }), "row", "stretch")).toBe("hug");
+  });
+
+  test("numeric main size is custom", () => {
+    expect(getDimensionState("width", node({ width: 200 }), "row", "stretch")).toBe("custom");
+  });
+
+  test("height is the main axis under a COLUMN parent", () => {
+    expect(getDimensionState("height", node({ flex: 1 }), "column", "stretch")).toBe("fill");
+    expect(getDimensionState("height", node({ height: "auto" }), "column", "stretch")).toBe("hug");
+  });
+});
+
+describe("hugAlignSelf", () => {
+  test("preserves an explicit non-stretch alignment", () => {
+    expect(hugAlignSelf("center", "stretch")).toBe("center");
+    expect(hugAlignSelf("flex-end", "flex-start")).toBe("flex-end");
+  });
+
+  test("opts out of a stretch-by-default parent with flex-start", () => {
+    expect(hugAlignSelf("auto", "stretch")).toBe("flex-start");
+    expect(hugAlignSelf("stretch", "stretch")).toBe("flex-start");
+  });
+
+  test("stays auto when the parent does not stretch", () => {
+    expect(hugAlignSelf("auto", "flex-start")).toBe("auto");
+    expect(hugAlignSelf("stretch", "center")).toBe("auto");
+  });
+});
+
+describe("customAlignSelf", () => {
+  test("clears auto/stretch to auto (numeric size defeats stretch)", () => {
+    expect(customAlignSelf("auto")).toBe("auto");
+    expect(customAlignSelf("stretch")).toBe("auto");
+  });
+
+  test("preserves an explicit alignment", () => {
+    expect(customAlignSelf("center")).toBe("center");
+    expect(customAlignSelf("flex-end")).toBe("flex-end");
+  });
+});
+
+describe("dimensionModeWrite", () => {
+  const opts = (over: Partial<{ parentAlignItems: AlignItems; currentAlignSelf: AlignSelf }> = {}) => ({
+    effectivePx: 100,
+    parentDirection: "column" as const,
+    parentAlignItems: "stretch" as AlignItems,
+    currentAlignSelf: "auto" as AlignSelf,
+    ...over,
+  });
+
+  test("fill on the cross axis writes auto + alignSelf stretch", () => {
+    expect(dimensionModeWrite("width", "fill", opts())).toEqual({ width: "auto", alignSelf: "stretch" });
+  });
+
+  test("fill on the main axis writes auto + flex:1", () => {
+    const write = dimensionModeWrite("width", "fill", { ...opts(), parentDirection: "row" });
+    expect(write).toEqual({ width: "auto", flex: 1 });
+  });
+
+  test("hug on the cross axis opts out with flex-start under a stretch parent", () => {
+    expect(dimensionModeWrite("width", "hug", opts())).toEqual({ width: "auto", alignSelf: "flex-start" });
+  });
+
+  test("hug on the cross axis preserves an explicit alignment", () => {
+    expect(dimensionModeWrite("width", "hug", opts({ currentAlignSelf: "center" }))).toEqual({
+      width: "auto",
+      alignSelf: "center",
+    });
+  });
+
+  test("hug on the main axis clears flex", () => {
+    const write = dimensionModeWrite("width", "hug", { ...opts(), parentDirection: "row" });
+    expect(write).toEqual({ width: "auto", flex: undefined });
+    expect("flex" in write).toBe(true);
+  });
+
+  test("custom on the cross axis writes px + clears stretch to auto", () => {
+    expect(dimensionModeWrite("width", "custom", opts({ currentAlignSelf: "stretch" }))).toEqual({
+      width: 100,
+      alignSelf: "auto",
+    });
+  });
+
+  test("custom on the cross axis preserves an explicit alignment", () => {
+    expect(dimensionModeWrite("width", "custom", opts({ currentAlignSelf: "center" }))).toEqual({
+      width: 100,
+      alignSelf: "center",
+    });
+  });
+
+  test("custom on the main axis writes px + clears flex", () => {
+    const write = dimensionModeWrite("width", "custom", { ...opts(), parentDirection: "row" });
+    expect(write).toEqual({ width: 100, flex: undefined });
+  });
+
+  test("height axis targets the height key", () => {
+    const axis: DimensionAxis = "height";
+    expect(dimensionModeWrite(axis, "fill", { ...opts(), parentDirection: "row" })).toEqual({
+      height: "auto",
+      alignSelf: "stretch",
+    });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx
new file mode 100644
index 000000000..28850f83f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx
@@ -0,0 +1,369 @@
+import type { AlignItems, AlignSelf, FlexDirection } from "@voidhash/mimic-schema";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { Schema } from "effect";
+import { ChevronDownIcon } from "lucide-react";
+
+import type { NodeEditorProps } from "../panels/types";
+import { TextInput } from "./text-input";
+
+/**
+ * The subset of style properties a dimension field reads and writes. Both the
+ * width and height axes share this shape; the axis parameter selects which
+ * primary dimension (`width`/`height`) is edited and which parent direction
+ * collapses the flex-child sizing to `stretch`.
+ */
+type DimensionNode = NodeEditorProps<
+  "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
+>["node"];
+
+export type DimensionAxis = "width" | "height";
+export type DimensionState = "fill" | "hug" | "custom";
+
+/**
+ * The px value shown in the `Fixed … (N px)` menu label (and seeded when
+ * switching to a fixed size) when the node has no live bounding box.
+ */
+export const FALLBACK_FIXED_PX = 100;
+
+export interface DimensionFieldProps {
+  axis: DimensionAxis;
+  node: DimensionNode;
+  onNodeChange: (node: DimensionNode) => void;
+  disabled?: boolean;
+  parentDirection: FlexDirection;
+  /**
+   * The parent's resolved `alignItems`. Drives container-driven stretch: an
+   * `alignSelf: "auto"` child fills its cross axis only when this is
+   * `"stretch"` (the schema default).
+   */
+  parentAlignItems?: AlignItems;
+  /** Live computed pixel value from the canvas bounding box, used for hug/fill labels. */
+  computed?: number | null;
+  /** Called on each keystroke so the caller can stage a draft; falls back to `onNodeChange`. */
+  onDraftChange?: (node: DimensionNode) => void;
+  onCommit?: () => void;
+}
+
+/**
+ * The parent flex direction under which this axis is stretched via `alignSelf`
+ * (rather than `flex: 1`). Width stretches in a column parent, height in a row
+ * parent; along the main axis, fill is expressed as `flex: 1`.
+ */
+export function stretchDirectionFor(axis: DimensionAxis): FlexDirection {
+  return axis === "width" ? "column" : "row";
+}
+
+/**
+ * Derives the fill/hug/custom mode for one axis from a node's flex sizing style,
+ * its parent's flex direction, and the parent's `alignItems`. Exported so a panel
+ * DEFINITION can compute the wire `mode` for a `dimensionField` node author-side.
+ *
+ * CSS ground truth: a child fills its CROSS axis iff its resolved alignment is
+ * stretch AND its cross size is `auto`. So on the cross axis a numeric size wins
+ * (custom, checked first); an `auto` size fills when `alignSelf` is `"stretch"`,
+ * or when `alignSelf` is `"auto"` and the parent's `alignItems` is `"stretch"`;
+ * otherwise it hugs. On the MAIN axis `flex: 1` fills, `auto` hugs, numeric is
+ * custom.
+ */
+export function getDimensionState(
+  axis: DimensionAxis,
+  node: DimensionNode,
+  parentDirection: FlexDirection,
+  parentAlignItems: AlignItems = "stretch",
+): DimensionState {
+  const stretchDirection = stretchDirectionFor(axis);
+  const size = node[axis];
+
+  if (parentDirection === stretchDirection) {
+    // Cross axis.
+    if (size !== "auto") {
+      return "custom";
+    }
+    if (
+      node.alignSelf === "stretch" ||
+      (node.alignSelf === "auto" && parentAlignItems === "stretch")
+    ) {
+      return "fill";
+    }
+    return "hug";
+  }
+
+  // Main axis.
+  if (node.flex === 1) {
+    return "fill";
+  }
+  if (size === "auto") {
+    return "hug";
+  }
+  return "custom";
+}
+
+/**
+ * The `alignSelf` to write when switching a CROSS-axis dimension to Hug:
+ * preserve an explicit non-stretch alignment; otherwise opt out of a
+ * stretch-by-default parent with `"flex-start"` (so Hug is actually reachable —
+ * an `"auto"` child would keep stretching); otherwise `"auto"`.
+ */
+export function hugAlignSelf(currentAlignSelf: AlignSelf, parentAlignItems: AlignItems): AlignSelf {
+  if (currentAlignSelf !== "auto" && currentAlignSelf !== "stretch") {
+    return currentAlignSelf;
+  }
+  return parentAlignItems === "stretch" ? "flex-start" : "auto";
+}
+
+/**
+ * The `alignSelf` to write when giving a CROSS-axis dimension a numeric (Fixed)
+ * size: numeric size defeats stretch, so clear an `auto`/`stretch` alignSelf to
+ * `"auto"` while preserving any explicit alignment the author chose.
+ */
+export function customAlignSelf(currentAlignSelf: AlignSelf): AlignSelf {
+  return currentAlignSelf === "stretch" || currentAlignSelf === "auto" ? "auto" : currentAlignSelf;
+}
+
+/** A flex-sizing style patch a fill/hug/custom mode switch writes. */
+export interface DimensionModeWrite {
+  width?: number | "auto";
+  height?: number | "auto";
+  /** `undefined` clears the flex field (main-axis hug/custom). */
+  flex?: number | undefined;
+  alignSelf?: AlignSelf;
+}
+
+/**
+ * The style patch to write when a dimension axis switches fill/hug/custom mode —
+ * the single source of truth for the CSS-correct `alignSelf`/`flex` pairing on
+ * both axes, shared by the kit component and the wire panel definitions so they
+ * never drift.
+ */
+export function dimensionModeWrite(
+  axis: DimensionAxis,
+  mode: DimensionState,
+  opts: {
+    effectivePx: number;
+    parentDirection: FlexDirection;
+    parentAlignItems: AlignItems;
+    currentAlignSelf: AlignSelf;
+  },
+): DimensionModeWrite {
+  const isStretchParent = opts.parentDirection === stretchDirectionFor(axis);
+  const patch: DimensionModeWrite = {};
+
+  if (mode === "fill") {
+    patch[axis] = "auto";
+    if (isStretchParent) patch.alignSelf = "stretch";
+    else patch.flex = 1;
+    return patch;
+  }
+
+  if (mode === "hug") {
+    patch[axis] = "auto";
+    if (isStretchParent) {
+      patch.alignSelf = hugAlignSelf(opts.currentAlignSelf, opts.parentAlignItems);
+    } else {
+      patch.flex = undefined;
+    }
+    return patch;
+  }
+
+  // custom
+  patch[axis] = opts.effectivePx;
+  if (isStretchParent) patch.alignSelf = customAlignSelf(opts.currentAlignSelf);
+  else patch.flex = undefined;
+  return patch;
+}
+
+/**
+ * The unified width/height editor. Parameterized by `axis`, it preserves the
+ * exact fill/hug/custom mode derivation, computed-px menu labels, direct
+ * (non-draft) menu writes with paired `alignSelf`/`flex` resets, and
+ * draft-callback typing of the two original mirror inputs.
+ */
+export function DimensionField({
+  axis,
+  node,
+  onNodeChange,
+  disabled = false,
+  parentDirection,
+  parentAlignItems = "stretch",
+  computed,
+  onDraftChange,
+  onCommit,
+}: DimensionFieldProps) {
+  const state = getDimensionState(axis, node, parentDirection, parentAlignItems);
+
+  const stored = node[axis];
+  const effective = computed ?? (stored === "auto" ? FALLBACK_FIXED_PX : stored);
+
+  const applyMode = (mode: DimensionState) => {
+    onNodeChange({
+      ...node,
+      ...dimensionModeWrite(axis, mode, {
+        effectivePx: effective,
+        parentDirection,
+        parentAlignItems,
+        currentAlignSelf: node.alignSelf,
+      }),
+    });
+  };
+
+  const handleSelectCustom = () => applyMode("custom");
+  const handleSelectHug = () => applyMode("hug");
+  const handleSelectFill = () => applyMode("fill");
+
+  const displayValue =
+    state === "custom" && stored !== "auto"
+      ? stored.toString()
+      : (computed?.toString() ?? "-");
+
+  const label = axis === "width" ? "Width" : "Height";
+  const letter = axis === "width" ? "W" : "H";
+  const fixedLabel = axis === "width" ? "Fixed width" : "Fixed height";
+
+  return (
+    <TextInput
+      disabled={disabled || state !== "custom"}
+      icon={<div className="font-bold text-xs">{letter}</div>}
+      label={label}
+      onChange={(value) => {
+        const updated = { ...node, [axis]: Number(value) };
+        if (onDraftChange) {
+          onDraftChange(updated);
+        } else {
+          onNodeChange(updated);
+        }
+      }}
+      onCommit={onCommit}
+      trailing={
+        !disabled && (
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button
+                className="bg-transparent pr-3 dark:bg-transparent"
+                size="sm"
+                variant="secondary"
+              >
+                {state === "custom" && <ChevronDownIcon className="size-3.5" />}
+                {state === "hug" && <div className="font-bold text-xs">Hug</div>}
+                {state === "fill" && <div className="font-bold text-xs">Fill</div>}
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent>
+              <DropdownMenuItem onSelect={handleSelectCustom}>
+                {fixedLabel} ({effective} px)
+              </DropdownMenuItem>
+              <DropdownMenuItem onSelect={handleSelectHug}>Hug content</DropdownMenuItem>
+              <DropdownMenuItem onSelect={handleSelectFill}>Fill container</DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+        )
+      }
+      type="number"
+      typeNumberStepIncrement={1}
+      validator={Schema.String}
+      value={displayValue}
+    />
+  );
+}
+
+/**
+ * Presentational (wire-driven) width/height field. It is the render half of
+ * {@link DimensionField} with the flex-sizing derivation lifted out: a panel
+ * DEFINITION computes the `mode` (via {@link getDimensionState}), passes the
+ * numeric `value` (the stored dimension, or the effective fallback when the axis
+ * is `auto`) and the raw `computed` bounding-box px, and this view reconstructs
+ * the exact display string + `Fixed … (N px)` menu label the monolith drew. The
+ * host reports gestures back — `onChange`/`onCommit` for typing the custom value
+ * (as a numeric string), and `onModeChange(mode)` when the fill/hug/custom menu
+ * is picked (the definition owns the paired `alignSelf`/`flex`/`width` writes per
+ * mode). Byte-matches the monolith's markup so the flag-on panel looks identical.
+ */
+export interface DimensionFieldViewProps {
+  axis: DimensionAxis;
+  /** The derived fill/hug/custom mode (input is enabled only in `custom`). */
+  mode: DimensionState;
+  /**
+   * The numeric value: the stored dimension in `custom` mode (what the enabled
+   * input shows), and the effective px fallback (e.g. `100`) in `hug`/`fill` —
+   * the base for the `Fixed … (N px)` menu label when there is no bounding box.
+   */
+  value: number;
+  /** The raw bounding-box px; drives the hug/fill display and the menu effective px. */
+  computed: number | null;
+  label: string;
+  disabled?: boolean;
+  mixed?: boolean;
+  onChange: (value: string) => void;
+  onCommit?: () => void;
+  onModeChange: (mode: DimensionState) => void;
+}
+
+/** The render half of {@link DimensionField}, driven purely by wire props. */
+export function DimensionFieldView({
+  axis,
+  mode,
+  value,
+  computed,
+  label,
+  disabled = false,
+  mixed = false,
+  onChange,
+  onCommit,
+  onModeChange,
+}: DimensionFieldViewProps) {
+  const letter = axis === "width" ? "W" : "H";
+  const fixedLabel = axis === "width" ? "Fixed width" : "Fixed height";
+  // Effective px in the `Fixed … (N px)` menu item: the live bounding box when
+  // present, else the numeric value the definition supplied (stored / auto→100).
+  const effective = computed ?? value;
+  // Display string: the stored value in `custom` (input enabled), else the live
+  // computed px (or `-` when no bounding box exists) — the monolith's exact rule.
+  const displayValue =
+    mode === "custom" ? value.toString() : (computed?.toString() ?? "-");
+
+  return (
+    <TextInput
+      disabled={disabled || mode !== "custom"}
+      icon={<div className="font-bold text-xs">{letter}</div>}
+      label={label}
+      mixed={mixed}
+      onChange={onChange}
+      onCommit={onCommit}
+      trailing={
+        !disabled && (
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button
+                className="bg-transparent pr-3 dark:bg-transparent"
+                size="sm"
+                variant="secondary"
+              >
+                {mode === "custom" && <ChevronDownIcon className="size-3.5" />}
+                {mode === "hug" && <div className="font-bold text-xs">Hug</div>}
+                {mode === "fill" && <div className="font-bold text-xs">Fill</div>}
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent>
+              <DropdownMenuItem onSelect={() => onModeChange("custom")}>
+                {fixedLabel} ({effective} px)
+              </DropdownMenuItem>
+              <DropdownMenuItem onSelect={() => onModeChange("hug")}>Hug content</DropdownMenuItem>
+              <DropdownMenuItem onSelect={() => onModeChange("fill")}>
+                Fill container
+              </DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+        )
+      }
+      type="number"
+      typeNumberStepIncrement={1}
+      validator={Schema.String}
+      value={displayValue}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx
new file mode 100644
index 000000000..bf3c33299
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx
@@ -0,0 +1,523 @@
+"use client";
+
+import { useParams } from "@tanstack/react-router";
+import {
+  Button,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  ToggleGroup,
+  ToggleGroupItem,
+  cn,
+} from "@voidhash/ui";
+import {
+  FlipHorizontalIcon,
+  ImageIcon,
+  ImagePlusIcon,
+  PlusIcon,
+  RotateCwIcon,
+  TrashIcon,
+  XIcon,
+} from "lucide-react";
+import { useCallback, useMemo, useState } from "react";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { AssetPickerDialog } from "@/features/studio/paywall-assets/asset-picker-dialog";
+import type {
+  BackgroundGradient,
+  BackgroundImage,
+  BackgroundType,
+} from "@/features/studio/paywalls/designer/state/actions/features/fill-style-actions";
+
+import { CheckerboardBackground } from "./color-picker/checkerboard-background";
+import { ColorPickerContent } from "./color-picker/color-picker-content";
+import { ColorSwatch } from "./color-picker/color-swatch";
+import { hexOpacityToRgba, rgbaToHexOpacity } from "./color-picker/color-utils";
+import { ColorInput } from "./color-input";
+import { GradientStopBar } from "./gradient-stop-bar";
+import { PopoverHeader } from "./popover-header";
+import { SelectInput } from "./select-input";
+import { TextInput } from "./text-input";
+
+const GRADIENT_KIND_OPTIONS: { value: "linear" | "radial"; label: string }[] = [
+  { label: "Linear", value: "linear" },
+  { label: "Radial", value: "radial" },
+];
+
+const RESIZE_MODE_OPTIONS: { value: BackgroundImage["resizeMode"]; label: string }[] = [
+  { label: "Cover", value: "cover" },
+  { label: "Contain", value: "contain" },
+  { label: "Stretch", value: "stretch" },
+  { label: "Center", value: "center" },
+];
+
+/**
+ * The full public surface of the fill composite. Mirrors
+ * `FillEditorPopoverContentProps` 1:1 plus the fill-row bits (`label`, `open`,
+ * `onOpenChange`). `onGestureStart` is the row-level rename of the popover's
+ * `onDragStart` (begin-draft); its wiring is otherwise identical.
+ */
+export interface FillFieldProps {
+  /** The compact row label shown next to the preview swatch (e.g. `#RRGGBB`, `Linear`, `Image`, `Mixed`). */
+  label: string;
+
+  backgroundType: BackgroundType;
+  isTypeMixed: boolean;
+  onTypeChange: (type: BackgroundType) => void;
+
+  backgroundColor: string;
+  onColorChange: (value: string) => void;
+
+  gradient: BackgroundGradient;
+  onGradientChange: (gradient: BackgroundGradient) => void;
+  onStopColorChange: (index: number, color: string) => void;
+  onStopPositionChange: (index: number, position: number) => void;
+  onAddStop: () => void;
+  onAddStopAt: (position: number, color: string) => void;
+  onRemoveStop: (index: number) => void;
+  selectedStopIndex: number | null;
+  onSelectStop: (index: number) => void;
+
+  image: BackgroundImage;
+  onImageUrlChange: (url: string) => void;
+  onImageResizeModeChange: (resizeMode: BackgroundImage["resizeMode"]) => void;
+
+  /** Begin a deferred edit (drag start on picker/slider/stop marker). */
+  onGestureStart: () => void;
+  onCommit: () => void;
+  onDiscard: () => void;
+
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+}
+
+/** Wraps a URL in a CSS `url("…")` token, escaping `\` and `"` so arbitrary paste URLs can't break the declaration. */
+function cssUrl(url: string): string {
+  return `url("${url.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}")`;
+}
+
+/** Builds a left→right CSS `linear-gradient` preview from stops sorted by position. */
+function buildPreviewGradient(gradient: BackgroundGradient): string {
+  if (gradient.stops.length === 0) {
+    return "transparent";
+  }
+  const sorted = [...gradient.stops].sort((a, b) => a.position - b.position);
+  const segments = sorted.map(
+    (stop) => `${stop.color} ${(Math.max(0, Math.min(1, stop.position)) * 100).toFixed(2)}%`,
+  );
+  return `linear-gradient(to right, ${segments.join(", ")})`;
+}
+
+/**
+ * Rotates a 2D point around a pivot by 90° clockwise in the normalized fill
+ * coordinate space (y-down, so a clockwise screen rotation).
+ */
+function rotate90(x: number, y: number, cx: number, cy: number): { x: number; y: number } {
+  const dx = x - cx;
+  const dy = y - cy;
+  return { x: cx - dy, y: cy + dx };
+}
+
+/**
+ * The compact preview swatch shown in the fill row. Renders a solid color, a
+ * gradient sample, or an image thumbnail depending on `type`.
+ */
+function FillPreviewSwatch({
+  type,
+  color,
+  gradient,
+  image,
+}: {
+  type: BackgroundType;
+  color: string;
+  gradient: BackgroundGradient;
+  image: BackgroundImage;
+}) {
+  if (type === "solid") {
+    const { hex, opacity } = rgbaToHexOpacity(color);
+    return <ColorSwatch color={hex} opacity={opacity} />;
+  }
+  if (type === "gradient") {
+    return (
+      <div className="relative size-5 shrink-0 overflow-hidden rounded-[3px]">
+        <CheckerboardBackground />
+        <div className="absolute inset-0" style={{ background: buildPreviewGradient(gradient) }} />
+        <div className="absolute inset-0 rounded-[3px] ring-1 ring-white/20 ring-inset" />
+      </div>
+    );
+  }
+  return (
+    <div className="relative flex size-5 shrink-0 items-center justify-center overflow-hidden rounded-[3px] bg-muted">
+      {image.url ? (
+        <div
+          className="absolute inset-0"
+          style={{
+            backgroundImage: cssUrl(image.url),
+            backgroundPosition: "center",
+            backgroundSize: "cover",
+          }}
+        />
+      ) : (
+        <ImageIcon className="size-3 text-muted-foreground" />
+      )}
+      <div className="absolute inset-0 rounded-[3px] ring-1 ring-white/20 ring-inset" />
+    </div>
+  );
+}
+
+/**
+ * The Image fill tab body: a preview tile that doubles as the picker trigger,
+ * followed by a resize-mode select (shown only once an image is set).
+ *
+ * The tile shows the current image over a {@link CheckerboardBackground} (so
+ * transparency reads) with a small remove affordance, or a dashed empty state
+ * when no image is set. Clicking the tile opens the organization asset picker;
+ * selecting a library asset writes its URL through `onUrlChange`.
+ *
+ * The picker is a modal Dialog opened from inside the Fill Popover. It portals
+ * to the document body and owns its own focus trap, so it survives the Popover
+ * dismissing underneath it; the selected URL is committed regardless of the
+ * Popover's open state. When the organization id cannot be resolved (missing
+ * route slugs) the tile still renders, but no images are selectable — the
+ * library grid needs the org context to list assets.
+ */
+/** Props for the reusable image-tab body (shared by fill-field + the standalone image-field). */
+export interface ImageFillContentProps {
+  image: BackgroundImage;
+  onUrlChange: (url: string) => void;
+  onResizeModeChange: (resizeMode: BackgroundImage["resizeMode"]) => void;
+}
+
+export function ImageFillContent({
+  image,
+  onUrlChange,
+  onResizeModeChange,
+}: ImageFillContentProps) {
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
+  const { user } = useAuth();
+  const [pickerOpen, setPickerOpen] = useState(false);
+
+  const organizationId = useMemo(() => {
+    if (!organizationSlug || !projectSlug) return null;
+    return (
+      CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug)?.organizationId ?? null
+    );
+  }, [user, organizationSlug, projectSlug]);
+
+  const hasImage = image.url.trim() !== "";
+
+  return (
+    <div className="flex flex-col gap-2">
+      <div className="relative">
+        <button
+          aria-label={hasImage ? "Change image" : "Add image"}
+          className={cn(
+            "relative flex h-24 w-full items-center justify-center overflow-hidden rounded-sm text-xs outline-none transition-colors",
+            "focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-1 focus-visible:ring-offset-background",
+            hasImage
+              ? "border border-border/60"
+              : "flex-col gap-1 border border-dashed border-input text-muted-foreground hover:text-foreground dark:bg-input/60 dark:hover:bg-input/80",
+          )}
+          onClick={() => setPickerOpen(true)}
+          type="button"
+        >
+          {hasImage ? (
+            <>
+              <CheckerboardBackground />
+              <img
+                alt="Selected background"
+                className="absolute inset-0 size-full object-cover"
+                loading="lazy"
+                src={image.url}
+              />
+            </>
+          ) : (
+            <>
+              <ImagePlusIcon className="size-5" />
+              <span>Add image</span>
+            </>
+          )}
+        </button>
+        {hasImage ? (
+          <button
+            aria-label="Remove image"
+            className={cn(
+              "absolute top-1 right-1 flex size-5 items-center justify-center rounded-sm text-white/90 outline-none transition-colors",
+              "bg-black/45 hover:bg-black/65 focus-visible:ring-2 focus-visible:ring-ring",
+            )}
+            onClick={() => onUrlChange("")}
+            type="button"
+          >
+            <XIcon className="size-3.5" />
+          </button>
+        ) : null}
+      </div>
+
+      {hasImage ? (
+        <SelectInput
+          label="Resize mode"
+          onChange={onResizeModeChange}
+          options={RESIZE_MODE_OPTIONS}
+          value={image.resizeMode}
+        />
+      ) : null}
+
+      <AssetPickerDialog
+        onOpenChange={setPickerOpen}
+        onSelect={(asset) => onUrlChange(asset.url)}
+        open={pickerOpen}
+        organizationId={organizationId}
+      />
+    </div>
+  );
+}
+
+/**
+ * The body of the Fill editor popover: a type tab row followed by the tab body
+ * for the active background type. All state lives in the caller; this component
+ * is a controlled view over it.
+ */
+function FillEditorPopoverContent({
+  backgroundType,
+  isTypeMixed,
+  onTypeChange,
+  backgroundColor,
+  onColorChange,
+  gradient,
+  onGradientChange,
+  onStopColorChange,
+  onStopPositionChange,
+  onAddStop,
+  onAddStopAt,
+  onRemoveStop,
+  selectedStopIndex,
+  onSelectStop,
+  image,
+  onImageUrlChange,
+  onImageResizeModeChange,
+  onGestureStart,
+  onCommit,
+  onDiscard,
+}: Omit<FillFieldProps, "label" | "open" | "onOpenChange">) {
+  const { hex, opacity } = rgbaToHexOpacity(backgroundColor);
+
+  const handleSolidHex = useCallback(
+    (nextHex: string) => {
+      onColorChange(hexOpacityToRgba(nextHex, opacity));
+    },
+    [onColorChange, opacity],
+  );
+
+  const handleSolidOpacity = useCallback(
+    (nextOpacity: number) => {
+      onColorChange(hexOpacityToRgba(hex, nextOpacity));
+    },
+    [onColorChange, hex],
+  );
+
+  const handleFlip = useCallback(() => {
+    onGradientChange({
+      ...gradient,
+      startX: gradient.endX,
+      startY: gradient.endY,
+      endX: gradient.startX,
+      endY: gradient.startY,
+    });
+  }, [gradient, onGradientChange]);
+
+  const handleRotate = useCallback(() => {
+    const cx = (gradient.startX + gradient.endX) / 2;
+    const cy = (gradient.startY + gradient.endY) / 2;
+    const start = rotate90(gradient.startX, gradient.startY, cx, cy);
+    const end = rotate90(gradient.endX, gradient.endY, cx, cy);
+    onGradientChange({
+      ...gradient,
+      startX: start.x,
+      startY: start.y,
+      endX: end.x,
+      endY: end.y,
+    });
+  }, [gradient, onGradientChange]);
+
+  return (
+    <div className="flex w-[260px] flex-col gap-3">
+      <ToggleGroup
+        className="w-full"
+        onValueChange={(value) => {
+          if (value === "solid" || value === "gradient" || value === "image") {
+            onTypeChange(value);
+          }
+        }}
+        size="sm"
+        type="single"
+        value={isTypeMixed ? "" : backgroundType}
+        variant="outline"
+      >
+        <ToggleGroupItem className="flex-1" size="sm" value="solid">
+          Solid
+        </ToggleGroupItem>
+        <ToggleGroupItem className="flex-1" size="sm" value="gradient">
+          Gradient
+        </ToggleGroupItem>
+        <ToggleGroupItem className="flex-1" size="sm" value="image">
+          Image
+        </ToggleGroupItem>
+      </ToggleGroup>
+
+      {isTypeMixed ? (
+        <p className="text-muted-foreground text-xs">
+          Selection has mixed fill types. Pick a type to apply it to all.
+        </p>
+      ) : backgroundType === "solid" ? (
+        <ColorPickerContent
+          color={hex}
+          onColorChange={handleSolidHex}
+          onDiscard={onDiscard}
+          onDragEnd={onCommit}
+          onDragStart={onGestureStart}
+          onOpacityChange={handleSolidOpacity}
+          opacity={opacity}
+        />
+      ) : backgroundType === "gradient" ? (
+        <div className="flex flex-col gap-3">
+          <div className="flex flex-row items-center gap-2">
+            <SelectInput
+              className="flex-1"
+              label="Gradient type"
+              onChange={(kind) => onGradientChange({ ...gradient, kind })}
+              options={GRADIENT_KIND_OPTIONS}
+              value={gradient.kind}
+            />
+            <Button
+              aria-label="Flip gradient direction"
+              onClick={handleFlip}
+              size="icon-sm"
+              variant="secondary"
+            >
+              <FlipHorizontalIcon />
+            </Button>
+            <Button
+              aria-label="Rotate gradient 90 degrees"
+              onClick={handleRotate}
+              size="icon-sm"
+              variant="secondary"
+            >
+              <RotateCwIcon />
+            </Button>
+          </div>
+
+          <GradientStopBar
+            onAddStop={onAddStopAt}
+            onDiscard={onDiscard}
+            onDragEnd={onCommit}
+            onDragStart={onGestureStart}
+            onPositionChange={onStopPositionChange}
+            onSelect={onSelectStop}
+            selectedIndex={selectedStopIndex}
+            stops={gradient.stops}
+          />
+
+          <div className="flex flex-col gap-2">
+            <div className="flex flex-row items-center justify-between">
+              <span className="text-muted-foreground text-xs font-medium">Stops</span>
+              <Button aria-label="Add stop" onClick={onAddStop} size="icon-sm" variant="ghost">
+                <PlusIcon />
+              </Button>
+            </div>
+            {gradient.stops.map((stop, index) => (
+              // Stops are positional; no stable id exists on the write shape, so
+              // the index is the key.
+              // biome-ignore lint/suspicious/noArrayIndexKey: positional stop row
+              <div
+                className="flex flex-row items-center gap-2"
+                key={index}
+                onPointerDownCapture={() => onSelectStop(index)}
+              >
+                <TextInput
+                  className="w-16"
+                  label="Stop position"
+                  maxValue={100}
+                  minValue={0}
+                  onChange={(value) => {
+                    const percent = Number.parseFloat(value);
+                    if (!Number.isNaN(percent)) {
+                      onStopPositionChange(index, percent / 100);
+                    }
+                  }}
+                  type="number"
+                  value={Math.round(stop.position * 100).toString()}
+                />
+                <ColorInput
+                  className="flex-1"
+                  onChange={(color) => onStopColorChange(index, color)}
+                  onCommit={onCommit}
+                  onDiscard={onDiscard}
+                  onDragStart={onGestureStart}
+                  value={stop.color}
+                />
+                <Button
+                  aria-label="Remove stop"
+                  disabled={gradient.stops.length <= 2}
+                  onClick={() => onRemoveStop(index)}
+                  size="icon-sm"
+                  variant="ghost"
+                >
+                  <TrashIcon />
+                </Button>
+              </div>
+            ))}
+          </div>
+        </div>
+      ) : (
+        <ImageFillContent
+          image={image}
+          onResizeModeChange={onImageResizeModeChange}
+          onUrlChange={onImageUrlChange}
+        />
+      )}
+    </div>
+  );
+}
+
+/**
+ * The complete fill composite: the fill row (preview swatch + label + popover
+ * trigger) and the fill editor popover (solid / gradient / image tabs). This is
+ * the host-side kit target for the `fillField` wire node; the popover editor,
+ * gradient stop rows and the org-scoped image picker all stay inside so the
+ * wire never carries app context (router/auth/react-query).
+ */
+export function FillField({
+  label,
+  open,
+  onOpenChange,
+  ...content
+}: FillFieldProps) {
+  const previewType = content.isTypeMixed ? "solid" : content.backgroundType;
+
+  return (
+    <Popover onOpenChange={onOpenChange} open={open}>
+      <PopoverTrigger asChild>
+        <button
+          aria-label="Edit fill"
+          className={cn(
+            "flex h-7 flex-1 items-center gap-2 rounded-sm px-1.5 transition-colors dark:bg-input/60 dark:hover:bg-accent/50",
+          )}
+          type="button"
+        >
+          <FillPreviewSwatch
+            color={content.backgroundColor}
+            gradient={content.gradient}
+            image={content.image}
+            type={previewType}
+          />
+          <span className="truncate text-xs">{label}</span>
+        </button>
+      </PopoverTrigger>
+      <PopoverContent align="start" className="w-auto rounded-2xl p-3" side="left" sideOffset={8}>
+        <PopoverHeader title="Fill" onClose={() => onOpenChange(false)} />
+        <FillEditorPopoverContent {...content} />
+      </PopoverContent>
+    </Popover>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/gradient-stop-bar.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/gradient-stop-bar.tsx
new file mode 100644
index 000000000..59c850516
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/gradient-stop-bar.tsx
@@ -0,0 +1,187 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { useCallback, useEffect, useRef } from "react";
+
+import { CheckerboardBackground } from "./color-picker/checkerboard-background";
+import { interpolateRgba } from "./color-picker/color-utils";
+
+export interface GradientStopBarStop {
+  color: string;
+  position: number;
+}
+
+export interface GradientStopBarProps {
+  /** Logical gradient stops (unsorted); rendered sorted by position. */
+  stops: GradientStopBarStop[];
+  /** Index of the currently selected stop, or `null` when none is selected. */
+  selectedIndex: number | null;
+  /** Selects a stop (e.g. on marker mousedown or track add). */
+  onSelect: (index: number) => void;
+  /** Live position update for the stop at `index` (position clamped to `[0, 1]`). */
+  onPositionChange: (index: number, position: number) => void;
+  /**
+   * Adds a stop at `position` with `color`. Returns nothing; the parent is
+   * responsible for selecting the new stop if desired.
+   */
+  onAddStop: (position: number, color: string) => void;
+  /** Called when a marker drag begins. Use for beginning a deferred edit. */
+  onDragStart?: () => void;
+  /** Called when a marker drag ends (mouse up). Use for committing the edit. */
+  onDragEnd?: () => void;
+  /** Called when a marker drag is cancelled (Escape). Use for discarding the edit. */
+  onDiscard?: () => void;
+  className?: string;
+}
+
+/** Builds a left→right CSS `linear-gradient` from stops sorted by position. */
+function buildTrackGradient(stops: GradientStopBarStop[]): string {
+  if (stops.length === 0) {
+    return "transparent";
+  }
+  const sorted = [...stops].sort((a, b) => a.position - b.position);
+  const segments = sorted.map(
+    (stop) => `${stop.color} ${(Math.max(0, Math.min(1, stop.position)) * 100).toFixed(2)}%`,
+  );
+  return `linear-gradient(to right, ${segments.join(", ")})`;
+}
+
+/**
+ * Interpolates the color for a stop inserted at `position` from the two nearest
+ * neighbors in `stops` (linear blend of their rgba values). Falls back to the
+ * single nearest stop's color when there is only one neighbor on either side.
+ */
+function colorAtPosition(stops: GradientStopBarStop[], position: number): string {
+  if (stops.length === 0) {
+    return "rgba(255, 255, 255, 1)";
+  }
+  const sorted = [...stops].sort((a, b) => a.position - b.position);
+  const before = [...sorted].reverse().find((s) => s.position <= position);
+  const after = sorted.find((s) => s.position >= position);
+  if (before && after) {
+    if (after.position === before.position) {
+      return before.color;
+    }
+    const t = (position - before.position) / (after.position - before.position);
+    return interpolateRgba(before.color, after.color, t);
+  }
+  return (before ?? after ?? sorted[0]!).color;
+}
+
+/**
+ * Figma-style gradient preview track with draggable square stop markers over a
+ * checkerboard. Dragging a marker updates its position live; clicking an empty
+ * area of the track inserts a new stop with an interpolated color.
+ *
+ * The dragged stop is tracked by the index captured at drag start. Positions are
+ * not reordered on write (only on add), so the index stays stable mid-drag.
+ */
+export function GradientStopBar({
+  stops,
+  selectedIndex,
+  onSelect,
+  onPositionChange,
+  onAddStop,
+  onDragStart,
+  onDragEnd,
+  onDiscard,
+  className,
+}: GradientStopBarProps) {
+  const trackRef = useRef<HTMLDivElement>(null);
+  const draggingIndex = useRef<number | null>(null);
+
+  const fractionFromClientX = useCallback((clientX: number) => {
+    const track = trackRef.current;
+    if (!track) {
+      return 0;
+    }
+    const rect = track.getBoundingClientRect();
+    const x = Math.max(0, Math.min(clientX - rect.left, rect.width));
+    return rect.width === 0 ? 0 : x / rect.width;
+  }, []);
+
+  const handleMarkerMouseDown = (index: number) => (e: React.MouseEvent) => {
+    e.preventDefault();
+    e.stopPropagation();
+    draggingIndex.current = index;
+    onSelect(index);
+    onDragStart?.();
+  };
+
+  const handleTrackMouseDown = (e: React.MouseEvent) => {
+    // Only reached when the target is the track itself (markers stop propagation).
+    e.preventDefault();
+    const position = fractionFromClientX(e.clientX);
+    onAddStop(position, colorAtPosition(stops, position));
+  };
+
+  useEffect(() => {
+    const handleMouseMove = (e: MouseEvent) => {
+      if (draggingIndex.current !== null) {
+        onPositionChange(draggingIndex.current, fractionFromClientX(e.clientX));
+      }
+    };
+
+    const handleMouseUp = () => {
+      if (draggingIndex.current !== null) {
+        draggingIndex.current = null;
+        onDragEnd?.();
+      }
+    };
+
+    const handleKeyDown = (e: KeyboardEvent) => {
+      if (e.key === "Escape" && draggingIndex.current !== null) {
+        draggingIndex.current = null;
+        onDiscard?.();
+      }
+    };
+
+    document.addEventListener("mousemove", handleMouseMove);
+    document.addEventListener("mouseup", handleMouseUp);
+    document.addEventListener("keydown", handleKeyDown);
+
+    return () => {
+      document.removeEventListener("mousemove", handleMouseMove);
+      document.removeEventListener("mouseup", handleMouseUp);
+      document.removeEventListener("keydown", handleKeyDown);
+    };
+  }, [fractionFromClientX, onPositionChange, onDragEnd, onDiscard]);
+
+  return (
+    <div
+      className={cn(
+        "relative h-7 cursor-copy overflow-hidden rounded-md ring-1 ring-white/10 ring-inset",
+        className,
+      )}
+      onMouseDown={handleTrackMouseDown}
+      ref={trackRef}
+    >
+      <CheckerboardBackground />
+      <div
+        className="pointer-events-none absolute inset-0"
+        style={{ background: buildTrackGradient(stops) }}
+      />
+      {stops.map((stop, index) => (
+        // Stops are positional; the logical write shape has no stable id, so the
+        // index is the key.
+        // biome-ignore lint/suspicious/noArrayIndexKey: positional stop marker
+        <button
+          aria-label={`Gradient stop ${index + 1}`}
+          className={cn(
+            "-translate-x-1/2 -translate-y-1/2 absolute top-1/2 size-3.5 cursor-grab rounded-[3px] border shadow-[0_0_0_1px_rgba(0,0,0,0.4)] active:cursor-grabbing",
+            index === selectedIndex
+              ? "border-white ring-2 ring-white"
+              : "border-white/80",
+          )}
+          key={index}
+          onMouseDown={handleMarkerMouseDown(index)}
+          style={{
+            backgroundColor: stop.color,
+            left: `${Math.max(0, Math.min(1, stop.position)) * 100}%`,
+          }}
+          type="button"
+        />
+      ))}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/image-field.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/image-field.tsx
new file mode 100644
index 000000000..f7a30a2a4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/image-field.tsx
@@ -0,0 +1,56 @@
+"use client";
+
+import type { BackgroundImage } from "@/features/studio/paywalls/designer/state/actions/features/fill-style-actions";
+
+import { ImageFillContent } from "./fill-field";
+
+type ResizeMode = BackgroundImage["resizeMode"];
+
+/**
+ * The host-side kit target for the `imageField` wire node. A thin standalone
+ * wrapper over {@link ImageFillContent} (the image-tab body reused from the fill
+ * composite): a preview tile that opens the org-scoped asset picker, a remove
+ * affordance, and a resize-mode select. The wire node carries only the resolved
+ * URL + resize mode; the picker's app context (router/auth/react-query) stays
+ * inside {@link ImageFillContent}, never crossing the panel wire.
+ *
+ * The wire callbacks are split from the fill composite's single `onUrlChange`:
+ * selecting a library asset fires {@link ImageFieldProps.onPick} with the picked
+ * URL, the remove affordance fires {@link ImageFieldProps.onClear}, and the
+ * resize-mode select fires {@link ImageFieldProps.onResizeModeChange}.
+ */
+export interface ImageFieldProps {
+  /** The current image URL (already scheme-allowlisted by the renderer), or absent. */
+  url?: string;
+  /** How the image fits its box. */
+  resizeMode?: ResizeMode;
+  /** Fires with the picked asset URL when a library image is selected. */
+  onPick?: (url: string) => void;
+  /** Fires when the resize mode changes. */
+  onResizeModeChange?: (mode: ResizeMode) => void;
+  /** Fires when the image is removed. */
+  onClear?: () => void;
+}
+
+export function ImageField({
+  url,
+  resizeMode = "cover",
+  onPick,
+  onResizeModeChange,
+  onClear,
+}: ImageFieldProps) {
+  const image: BackgroundImage = { url: url ?? "", resizeMode };
+  return (
+    <ImageFillContent
+      image={image}
+      onResizeModeChange={(mode) => onResizeModeChange?.(mode)}
+      onUrlChange={(next) => {
+        if (next === "") {
+          onClear?.();
+        } else {
+          onPick?.(next);
+        }
+      }}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/kit.ts b/apps/www/src/features/studio/paywalls/designer/panel-kit/kit.ts
new file mode 100644
index 000000000..acc47fd35
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/kit.ts
@@ -0,0 +1,101 @@
+import type { PanelNodeType } from "@voidhash/paywalls/schema";
+import {
+  Button,
+  Slider,
+  Switch,
+  ToggleGroup,
+} from "@voidhash/ui";
+import type { ComponentType } from "react";
+
+import { ActionEditorField } from "./action-editor-field";
+import { FlexAlignmentInput } from "./alignment-grid";
+import { ColorInput } from "./color-input";
+import { ColorPickerContent } from "./color-picker/color-picker-content";
+import { ColorSwatch } from "./color-picker/color-swatch";
+import { DimensionField } from "./dimension-field";
+import { FillField } from "./fill-field";
+import { GradientStopBar } from "./gradient-stop-bar";
+import { PanelCallout, PanelColumn, PanelField, PanelRow, PanelText } from "./chrome";
+import {
+  PanelSection,
+  PanelSectionHeaderActions,
+  PanelSubSection,
+} from "./panel-section";
+import { OverrideResetAffordance } from "./reset-affordance";
+import { SelectInput } from "./select-input";
+import { TextInput } from "./text-input";
+import { VariableBindingField } from "./variable-binding-field";
+
+/**
+ * A kit component target for a wire node type. Props are intentionally erased:
+ * the renderer phase writes a per-node prop-adapter that maps the validated
+ * wire props/events onto each component's concrete signature, so this map only
+ * needs to centralize the type → component association.
+ */
+// biome-ignore lint/suspicious/noExplicitAny: renderer supplies the adapted props per node type
+type KitComponent = ComponentType<any>;
+
+/**
+ * Central wire-node-type → host kit component registry. The panel-tree renderer
+ * (next phase) looks components up here and applies a prop-adapter. Structural /
+ * pure-container node types that carry no component of their own (`panel`,
+ * `popover`, `popoverTrigger`, `popoverContent`, `menu`, `imageField`,
+ * `propField`, `defaultProps`) are intentionally absent — the renderer handles
+ * them directly (Radix `Popover`, container `<div>`s, or context) rather than
+ * through a single kit component.
+ */
+export const PANEL_KIT: Partial<Record<PanelNodeType, KitComponent>> = {
+  // Chrome / layout.
+  /** `section` → bordered section wrapper (title/header rendered by the renderer). */
+  section: PanelSection,
+  /** `sectionActions` → right-aligned header action row. */
+  sectionActions: PanelSectionHeaderActions,
+  /** `subsection` → nested sub-section wrapper. */
+  subsection: PanelSubSection,
+  /** `row` → horizontal flex row (gap/align/justify). */
+  row: PanelRow,
+  /** `column` → vertical flex column (gap/align). */
+  column: PanelColumn,
+  /** `field` → labeled control row (muted label + control column). */
+  field: PanelField,
+  /** `text` → inline text (variant/tone). */
+  text: PanelText,
+  /** `callout` → short inline explainer / warning line. */
+  callout: PanelCallout,
+
+  // Controls.
+  /** `textField` → the battle-tested `TextInput` (drag-scrub, stepper, mixed, validators). */
+  textField: TextInput,
+  /** `selectField` → `SelectInput` (mixed-aware Radix select). */
+  selectField: SelectInput,
+  /** `toggleGroup` → shared `ToggleGroup` (single-select segmented control). */
+  toggleGroup: ToggleGroup,
+  /** `switchField` → shared `Switch`. */
+  switchField: Switch,
+  /** `button` → shared `Button`. */
+  button: Button,
+  /** `sliderField` → shared `Slider`. */
+  sliderField: Slider,
+  /** `resetAffordance` → the override reset pip wrapper. */
+  resetAffordance: OverrideResetAffordance,
+
+  // Composites.
+  /** `colorField` → `ColorInput` (swatch + hex + opacity, popover picker). */
+  colorField: ColorInput,
+  /** `colorPicker` → `ColorPickerContent` (saturation/hue/opacity/eyedropper). */
+  colorPicker: ColorPickerContent,
+  /** `gradientStops` → `GradientStopBar` (draggable stop markers; id↔index in adapter). */
+  gradientStops: GradientStopBar,
+  /** `swatch` → `ColorSwatch` (compact color/opacity preview chip). */
+  swatch: ColorSwatch,
+  /** `alignmentGrid` → `FlexAlignmentInput` (3×3 + space-between alignment grid). */
+  alignmentGrid: FlexAlignmentInput,
+  /** `dimensionField` → `DimensionField` (unified width/height, axis-parameterized). */
+  dimensionField: DimensionField,
+  /** `fillField` → `FillField` (fill row + solid/gradient/image popover editor). */
+  fillField: FillField,
+  /** `variableField` → `VariableBindingField` (literal↔variable-reference, serializable literal kinds). */
+  variableField: VariableBindingField,
+  /** `actionEditorField` → `ActionEditorField` (action type + per-type payload editors). */
+  actionEditorField: ActionEditorField,
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/panel-section.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/panel-section.tsx
new file mode 100644
index 000000000..fec986f4d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/panel-section.tsx
@@ -0,0 +1,89 @@
+import { cn } from "@voidhash/ui";
+
+export function PanelSection({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return <div className={cn("border-b border-border", className)}>{children}</div>;
+}
+
+export function PanelSectionHeader({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return (
+    <div className={cn("my-2 flex h-7 flex-row items-center justify-between px-4", className)}>
+      {children}
+    </div>
+  );
+}
+
+export function PanelSectionTitle({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return <div className={cn("font-medium text-sm", className)}>{children}</div>;
+}
+
+export function PanelSectionHeaderActions({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return (
+    <div className={cn("flex flex-row items-center justify-end gap-2", className)}>{children}</div>
+  );
+}
+
+export function PanelSectionContent({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return <div className={cn("space-y-4 px-4 pb-4", className)}>{children}</div>;
+}
+
+export function PanelSubSection({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return <div className={className}>{children}</div>;
+}
+
+export function PanelSubSectionTitle({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return (
+    <div className={cn("font-medium text-muted-foreground text-xs", className)}>{children}</div>
+  );
+}
+
+export function PanelSubSectionContent({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return <div className={cn("pt-2", className)}>{children}</div>;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx
new file mode 100644
index 000000000..466031105
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx
@@ -0,0 +1,15 @@
+import { Button } from "@voidhash/ui";
+import { XIcon } from "lucide-react";
+
+export function PopoverHeader({ title, onClose }: { title: string; onClose?: () => void }) {
+  return (
+    <div className="flex flex-row p-2 -mx-2 -mt-3 justify-between items-center">
+      <span className="text-sm font-medium">{title}</span>
+      {onClose && (
+        <Button variant="secondary" size="icon-sm" onClick={onClose}>
+          <XIcon />
+        </Button>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx
new file mode 100644
index 000000000..1a4891d47
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx
@@ -0,0 +1,435 @@
+"use client";
+
+import type { ComponentPropDefinition } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+import { Badge, Button } from "@voidhash/ui";
+import { MinusIcon, PlusIcon, RotateCcwIcon } from "lucide-react";
+import { useMemo } from "react";
+
+import { BooleanInput } from "@/features/studio/paywalls/designer/components/variables/inputs/boolean-input";
+import { NumberInput } from "@/features/studio/paywalls/designer/components/variables/inputs/number-input";
+import { StringInput } from "@/features/studio/paywalls/designer/components/variables/inputs/string-input";
+import { isLiteralValue } from "@/features/studio/paywalls/designer/components/variables/types";
+import type {
+  LabeledVariable,
+  VariableInputValue,
+} from "@/features/studio/paywalls/designer/components/variables/types";
+import { VARIABLE_TYPE_REGISTRY } from "@/features/studio/paywalls/designer/constants";
+import {
+  manifestDefaultPropValue,
+  readBooleanArray,
+  readNumberArray,
+  readStringArray,
+  scalarVariableTypeKeyForProp,
+  type ComponentPropBindingPlain,
+  type ComponentPropValuePlain,
+} from "@/features/studio/paywalls/designer/state/utils/component-prop-values";
+
+import { hexColorToRgbaString, rgbaStringToHexColor } from "../panels/right-panel/utils/component-color";
+import { ColorInput } from "./color-input";
+import { SelectInput } from "./select-input";
+import { VariableInput } from "@/features/studio/paywalls/designer/components/variables/variable-input";
+
+type ScalarArrayKey = "string-array" | "number-array" | "boolean-array";
+
+/** Structural deep equality used to detect a uniform value across multiple targets. */
+function deepEqual(a: unknown, b: unknown): boolean {
+  if (a === b) return true;
+  if (a == null || b == null) return false;
+  if (typeof a !== typeof b) return false;
+  if (typeof a !== "object") return false;
+  if (Array.isArray(a)) {
+    if (!Array.isArray(b) || a.length !== b.length) return false;
+    return a.every((value, index) => deepEqual(value, b[index]));
+  }
+  const objectA = a as Record<string, unknown>;
+  const objectB = b as Record<string, unknown>;
+  const keysA = Object.keys(objectA);
+  const keysB = Object.keys(objectB);
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every((key) => deepEqual(objectA[key], objectB[key]));
+}
+
+function scalarArrayKeyForProp(def: ComponentPropDefinition): ScalarArrayKey | undefined {
+  if (def.kind !== "array") {
+    return undefined;
+  }
+  switch (def.item.kind) {
+    case "string":
+    case "select":
+    case "image":
+      return "string-array";
+    case "number":
+      return "number-array";
+    case "boolean":
+      return "boolean-array";
+    default:
+      return undefined;
+  }
+}
+
+function isCodeConfiguredKind(def: ComponentPropDefinition): boolean {
+  if (def.kind === "component") {
+    return true;
+  }
+  return def.kind === "array" && (def.item.kind === "component" || def.item.kind === "ref");
+}
+
+function scalarPropValueToVariableType(value: ComponentPropValuePlain): VariableType | undefined {
+  switch (value.key) {
+    case "string":
+    case "number":
+    case "boolean":
+      return value;
+    case "product":
+      return {
+        key: "product",
+        value: value.value.productId == null ? {} : { productId: value.value.productId },
+      };
+    default:
+      return undefined;
+  }
+}
+
+/**
+ * A per-target binding for one prop: the target node id and its stored binding
+ * for the prop (`undefined` when the target has no stored value → manifest
+ * default).
+ */
+export interface PropTargetBinding {
+  id: string;
+  storedBinding: ComponentPropBindingPlain | undefined;
+}
+
+/** Injectable write path so a later phase can swap single-node dispatch for a batched multi-node action. */
+export interface PropWriteCallbacks {
+  onSetProp: (propName: string, binding: ComponentPropBindingPlain) => void;
+  onResetProp: (propName: string) => void;
+}
+
+/**
+ * Per-locale editing context for a localizable string/image prop. When present,
+ * the row edits the active locale's override rather than the base literal: it
+ * shows a locale `badge`, and its reset (revert-to-base) affordance appears when
+ * `hasOverride` is true — independent of whether a base value is stored. The
+ * section supplies the resolved localized value through `targets` and routes
+ * `onSetProp`/`onResetProp` to the per-locale write/clear path.
+ */
+export interface PropLocaleEditing {
+  badge: string;
+  hasOverride: boolean;
+}
+
+export interface PropFieldRowProps extends PropWriteCallbacks {
+  propName: string;
+  def: ComponentPropDefinition;
+  /** One entry per selected component node (node id + stored binding for this prop). */
+  targets: readonly PropTargetBinding[];
+  variables: readonly LabeledVariable[];
+  /** Present only when the row edits a per-locale override (string/image props). */
+  localeEditing?: PropLocaleEditing;
+}
+
+function PropRowShell({
+  label,
+  badge,
+  children,
+  onReset,
+}: {
+  label: string;
+  badge?: string;
+  children: React.ReactNode;
+  onReset?: () => void;
+}) {
+  return (
+    <div className="flex flex-row items-center gap-2">
+      <span className="flex min-w-16 max-w-24 items-center gap-1 truncate text-muted-foreground text-xs">
+        <span className="truncate" title={label}>
+          {label}
+        </span>
+        {badge && (
+          <Badge className="px-1 py-0 text-[10px]" variant="secondary">
+            {badge}
+          </Badge>
+        )}
+      </span>
+      <div className="flex min-w-0 flex-1 flex-row items-center gap-1">
+        {children}
+        {onReset && (
+          <Button onClick={onReset} size="icon-sm" title="Reset to default" variant="ghost">
+            <RotateCcwIcon />
+          </Button>
+        )}
+      </div>
+    </div>
+  );
+}
+
+function ReadOnlyPropRow({ label, message }: { label: string; message: string }) {
+  return (
+    <PropRowShell label={label}>
+      <span className="flex h-7 flex-1 items-center rounded-sm px-2 text-muted-foreground text-xs dark:bg-input/30">
+        {message}
+      </span>
+    </PropRowShell>
+  );
+}
+
+/** True when every target shares an identical (deep-equal) stored binding for the prop. */
+function bindingsUniform(targets: readonly PropTargetBinding[]): boolean {
+  if (targets.length <= 1) return true;
+  const [first, ...rest] = targets;
+  return rest.every((target) => deepEqual(target.storedBinding, first?.storedBinding));
+}
+
+function ScalarPropRow({
+  propName,
+  def,
+  targets,
+  variables,
+  expectedType,
+  localeEditing,
+  onSetProp,
+  onResetProp,
+}: PropFieldRowProps & { expectedType: VariableTypeKey }) {
+  const label = def.label ?? propName;
+  const uniform = bindingsUniform(targets);
+  const representative = targets[0]?.storedBinding;
+  const isStored = targets.length > 0 && targets.every((t) => t.storedBinding !== undefined);
+  // In per-locale mode the reset (revert-to-base) shows when an override exists,
+  // not merely when a base value is stored.
+  const showReset = localeEditing ? localeEditing.hasOverride : isStored;
+
+  const inputValue = useMemo((): VariableInputValue => {
+    const storedBinding = uniform ? representative : undefined;
+    if (storedBinding?.type === "variable-reference") {
+      return { type: "variable-reference", value: { id: storedBinding.value.id } };
+    }
+    if (storedBinding?.type === "literal") {
+      const literal = scalarPropValueToVariableType(storedBinding.value);
+      if (literal !== undefined && literal.key === expectedType) {
+        return { type: "literal", value: literal };
+      }
+    }
+    const fallback = manifestDefaultPropValue(def);
+    const fallbackLiteral =
+      fallback === undefined ? undefined : scalarPropValueToVariableType(fallback);
+    if (fallbackLiteral !== undefined && fallbackLiteral.key === expectedType) {
+      return { type: "literal", value: fallbackLiteral };
+    }
+    return { type: "literal", value: VARIABLE_TYPE_REGISTRY[expectedType].defaultValue };
+  }, [uniform, representative, def, expectedType]);
+
+  const handleChange = (next: VariableInputValue) => {
+    const binding: ComponentPropBindingPlain = isLiteralValue(next)
+      ? { type: "literal", value: next.value }
+      : { type: "variable-reference", value: { id: (next.value as { id: string }).id } };
+    onSetProp(propName, binding);
+  };
+
+  const renderLiteral = useMemo(() => {
+    if (def.kind === "string" && def.editor === "color") {
+      return (value: VariableType, onChange: (value: VariableType) => void) => (
+        <ColorInput
+          className="flex-1"
+          onChange={(rgba) => onChange({ key: "string", value: rgbaStringToHexColor(rgba) })}
+          value={hexColorToRgbaString(value.key === "string" ? value.value : "")}
+        />
+      );
+    }
+    if (def.kind === "select") {
+      const options = def.options.map((option) => ({ label: option, value: option }));
+      return (value: VariableType, onChange: (value: VariableType) => void) => (
+        <SelectInput
+          className="flex-1"
+          label={label}
+          onChange={(option) => onChange({ key: "string", value: option })}
+          options={options}
+          placeholder="Select…"
+          value={value.key === "string" ? value.value : ""}
+        />
+      );
+    }
+    return undefined;
+  }, [def, label]);
+
+  return (
+    <PropRowShell
+      badge={localeEditing?.badge}
+      label={label}
+      onReset={showReset ? () => onResetProp(propName) : undefined}
+    >
+      <VariableInput
+        className="min-w-0 flex-1"
+        expectedType={expectedType}
+        onChange={handleChange}
+        renderLiteral={renderLiteral}
+        value={inputValue}
+        variables={variables}
+      />
+    </PropRowShell>
+  );
+}
+
+function ArrayPropRow({
+  propName,
+  def,
+  targets,
+  arrayKey,
+  onSetProp,
+  onResetProp,
+}: Omit<PropFieldRowProps, "variables"> & { arrayKey: ScalarArrayKey }) {
+  const label = def.label ?? propName;
+  const uniform = bindingsUniform(targets);
+  const representative = targets[0]?.storedBinding;
+  const isStored = targets.length > 0 && targets.every((t) => t.storedBinding !== undefined);
+
+  const items = useMemo((): readonly (string | number | boolean)[] => {
+    const storedBinding = uniform ? representative : undefined;
+    let source: unknown;
+    if (storedBinding?.type === "literal" && storedBinding.value.key === arrayKey) {
+      source = storedBinding.value.value;
+    } else {
+      const fallback = manifestDefaultPropValue(def);
+      source = fallback?.key === arrayKey ? fallback.value : undefined;
+    }
+    switch (arrayKey) {
+      case "string-array":
+        return readStringArray(source);
+      case "number-array":
+        return readNumberArray(source);
+      case "boolean-array":
+        return readBooleanArray(source);
+    }
+  }, [uniform, representative, def, arrayKey]);
+
+  const rewrite = (next: readonly (string | number | boolean)[]) => {
+    let value: ComponentPropValuePlain;
+    switch (arrayKey) {
+      case "string-array":
+        value = {
+          key: "string-array",
+          value: next.filter((item): item is string => typeof item === "string"),
+        };
+        break;
+      case "number-array":
+        value = {
+          key: "number-array",
+          value: next.filter((item): item is number => typeof item === "number"),
+        };
+        break;
+      case "boolean-array":
+        value = {
+          key: "boolean-array",
+          value: next.filter((item): item is boolean => typeof item === "boolean"),
+        };
+        break;
+    }
+    onSetProp(propName, { type: "literal", value });
+  };
+
+  const handleAdd = () => {
+    const defaultItem = arrayKey === "string-array" ? "" : arrayKey === "number-array" ? 0 : false;
+    rewrite([...items, defaultItem]);
+  };
+
+  const handleRemove = (index: number) => {
+    rewrite(items.filter((_, i) => i !== index));
+  };
+
+  const handleItemChange = (index: number, item: string | number | boolean) => {
+    rewrite(items.map((existing, i) => (i === index ? item : existing)));
+  };
+
+  return (
+    <div className="flex flex-col gap-1">
+      <div className="flex h-7 flex-row items-center justify-between">
+        <span className="min-w-16 truncate text-muted-foreground text-xs" title={label}>
+          {label}
+        </span>
+        <div className="flex flex-row items-center gap-1">
+          {isStored && (
+            <Button
+              onClick={() => onResetProp(propName)}
+              size="icon-sm"
+              title="Reset to default"
+              variant="ghost"
+            >
+              <RotateCcwIcon />
+            </Button>
+          )}
+          <Button onClick={handleAdd} size="icon-sm" variant="secondary">
+            <PlusIcon />
+          </Button>
+        </div>
+      </div>
+      {items.length > 0 && (
+        <div className="flex flex-col gap-1">
+          {items.map((item, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: rows are positional; the whole binding is rewritten per change
+            <div className="flex flex-row items-center gap-1" key={index}>
+              {arrayKey === "string-array" && (
+                <StringInput
+                  className="flex-1"
+                  onChange={(next) => handleItemChange(index, next)}
+                  value={typeof item === "string" ? item : ""}
+                />
+              )}
+              {arrayKey === "number-array" && (
+                <NumberInput
+                  className="flex-1"
+                  onChange={(next) => handleItemChange(index, next)}
+                  value={typeof item === "number" ? item : 0}
+                />
+              )}
+              {arrayKey === "boolean-array" && (
+                <BooleanInput
+                  className="flex-1"
+                  onChange={(next) => handleItemChange(index, next)}
+                  value={item === true}
+                />
+              )}
+              <Button onClick={() => handleRemove(index)} size="icon-sm" variant="ghost">
+                <MinusIcon />
+              </Button>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+/**
+ * One editable row for a single component prop, extracted from the Props
+ * section. Parameterized by `targets` (node ids + their stored bindings, with
+ * deep-equal detection of a uniform value across targets) and by injectable
+ * write callbacks (`onSetProp`/`onResetProp`) so the write path can be a
+ * single-node dispatch today or a batched multi-node action later.
+ *
+ * Preserves the per-kind mapping verbatim: code-configured kinds render a
+ * read-only "Configured in code" row; scalar kinds render a {@link VariableInput}
+ * with `color`/`select` literal overrides; scalar arrays render add/remove rows
+ * with whole-array rewrite; everything else renders "Unsupported property type".
+ * The reset affordance appears only when every target has a stored value.
+ */
+export function PropFieldRow(props: PropFieldRowProps) {
+  const { propName, def } = props;
+  const label = def.label ?? propName;
+
+  if (isCodeConfiguredKind(def)) {
+    return <ReadOnlyPropRow label={label} message="Configured in code" />;
+  }
+
+  const expectedType = scalarVariableTypeKeyForProp(def);
+  if (expectedType !== undefined) {
+    return <ScalarPropRow {...props} expectedType={expectedType} />;
+  }
+
+  const arrayKey = scalarArrayKeyForProp(def);
+  if (arrayKey !== undefined) {
+    return <ArrayPropRow {...props} arrayKey={arrayKey} />;
+  }
+
+  return <ReadOnlyPropRow label={label} message="Unsupported property type" />;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/reset-affordance.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/reset-affordance.tsx
new file mode 100644
index 000000000..577cbc385
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/reset-affordance.tsx
@@ -0,0 +1,62 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { Undo2Icon } from "lucide-react";
+
+interface OverrideResetAffordanceProps {
+  show: boolean;
+  label: string;
+  onReset: () => void;
+  children: React.ReactNode;
+  className?: string;
+}
+
+export function OverrideResetAffordance({
+  show,
+  label,
+  onReset,
+  children,
+  className,
+}: OverrideResetAffordanceProps) {
+  return (
+    <div className={cn("relative", className)}>
+      {children}
+      {show && (
+        <button
+          aria-label={`Reset ${label} override`}
+          className={cn(
+            "group/reset-button absolute right-0 bottom-0 z-10 inline-flex origin-right translate-x-[6px] translate-y-[6px] items-center justify-center overflow-hidden whitespace-nowrap rounded-full bg-transparent text-transparent outline-none transition-all duration-200 ease-out",
+            "h-3 w-3 p-0",
+            "hover:h-6 hover:w-20 hover:bg-primary hover:px-2 hover:text-primary-foreground hover:shadow-sm",
+            "focus-visible:h-6 focus-visible:w-20 focus-visible:bg-primary focus-visible:px-2 focus-visible:text-primary-foreground focus-visible:shadow-sm focus-visible:ring-1 focus-visible:ring-ring",
+          )}
+          onClick={(event) => {
+            event.stopPropagation();
+            onReset();
+          }}
+          onMouseDown={(event) => {
+            event.stopPropagation();
+          }}
+          type="button"
+        >
+          <span
+            aria-hidden="true"
+            className={cn(
+              "pointer-events-none absolute h-2 w-2 rounded-full bg-primary transition-opacity duration-150",
+              "group-hover/reset-button:opacity-0 group-focus-visible/reset-button:opacity-0",
+            )}
+          />
+          <span
+            className={cn(
+              "pointer-events-none inline-flex items-center gap-1 opacity-0 transition-opacity duration-150",
+              "group-hover/reset-button:opacity-100 group-focus-visible/reset-button:opacity-100",
+            )}
+          >
+            <span className="font-medium text-[11px]">Reset</span>
+            <Undo2Icon className="size-3" />
+          </span>
+        </button>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/select-input.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/select-input.tsx
new file mode 100644
index 000000000..30da98fb9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/select-input.tsx
@@ -0,0 +1,73 @@
+"use client";
+
+import type * as React from "react";
+
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  cn,
+} from "@voidhash/ui";
+import { InputGroup, InputGroupAddon } from "@voidhash/ui/input-group";
+
+export interface SelectInputProps<T extends string> {
+  value: T;
+  onChange: (value: T) => void;
+  mixed?: boolean;
+  mixedLabel?: string;
+  options: { value: T; label: string }[];
+  label: string;
+  icon?: React.ReactNode;
+  placeholder?: string;
+  disabled?: boolean;
+  className?: string;
+}
+
+export function SelectInput<T extends string>({
+  value,
+  onChange,
+  mixed = false,
+  mixedLabel = "Mixed",
+  options,
+  label,
+  icon,
+  placeholder,
+  disabled = false,
+  className,
+}: SelectInputProps<T>) {
+  const selectedOption = options.find((opt) => opt.value === value);
+
+  return (
+    <InputGroup className={cn("h-7 rounded-sm border-none dark:bg-input/60", className)}>
+      {icon ? (
+        <InputGroupAddon className="py-1 pr-0.5 pl-2">
+          <div className="flex size-3.5 items-center justify-center">{icon}</div>
+        </InputGroupAddon>
+      ) : null}
+      <Select
+        disabled={disabled}
+        onValueChange={(nextValue) => onChange(nextValue as T)}
+        value={mixed ? undefined : value}
+      >
+        <SelectTrigger
+          aria-label={label}
+          className="h-7 min-w-0 flex-1 rounded-none border-0 bg-transparent px-1 py-0 text-xs shadow-none focus-visible:ring-0 dark:bg-transparent"
+          size="sm"
+        >
+          <SelectValue placeholder={mixed ? mixedLabel : placeholder}>
+            {!mixed ? (selectedOption?.label ?? value) : undefined}
+          </SelectValue>
+        </SelectTrigger>
+        <SelectContent>
+          {options.map((option) => (
+            <SelectItem key={option.value} value={option.value}>
+              {option.label}
+            </SelectItem>
+          ))}
+        </SelectContent>
+      </Select>
+    </InputGroup>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/text-input.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/text-input.tsx
new file mode 100644
index 000000000..efc35aa0d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/text-input.tsx
@@ -0,0 +1,358 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { InputGroup, InputGroupAddon, InputGroupInput } from "@voidhash/ui/input-group";
+import type { Schema } from "effect";
+import { Schema as S } from "effect";
+import { useCallback, useEffect, useRef, useState } from "react";
+
+export interface TextInputProps {
+  value: string;
+  onChange: (value: string) => void;
+  mixed?: boolean;
+  mixedLabel?: string;
+  /** Called when the user finishes editing (blur, Enter, drag end, stepper end). Use for committing deferred edits. */
+  onCommit?: () => void;
+  type?: "text" | "number";
+  typeNumberStepIncrement?: number;
+  minValue?: number;
+  maxValue?: number;
+  icon?: React.ReactNode;
+  trailing?: React.ReactNode;
+  label: string;
+  validator?: Schema.Decoder<string>;
+  className?: string;
+  disabled?: boolean;
+}
+
+function useNumberStepper(
+  step: number,
+  getValue: () => string,
+  onValueChange: (value: string) => void,
+  minValue?: number,
+  maxValue?: number,
+  disabled?: boolean,
+) {
+  const incrementInterval = useRef<NodeJS.Timeout | null>(null);
+  const decrementInterval = useRef<NodeJS.Timeout | null>(null);
+
+  const clampValue = (val: number): number => {
+    if (minValue !== undefined && val < minValue) {
+      return minValue;
+    }
+    if (maxValue !== undefined && val > maxValue) {
+      return maxValue;
+    }
+    return val;
+  };
+
+  const startIncrement = () => {
+    if (disabled || incrementInterval.current) {
+      return;
+    }
+    const newValue = clampValue(Number(getValue()) + step);
+    onValueChange(newValue.toString());
+    incrementInterval.current = setInterval(() => {
+      const currentValue = clampValue(Number(getValue()) + step);
+      onValueChange(currentValue.toString());
+    }, 100);
+  };
+
+  const startDecrement = () => {
+    if (disabled || decrementInterval.current) {
+      return;
+    }
+    const newValue = clampValue(Number(getValue()) - step);
+    onValueChange(newValue.toString());
+    decrementInterval.current = setInterval(() => {
+      const currentValue = clampValue(Number(getValue()) - step);
+      onValueChange(currentValue.toString());
+    }, 100);
+  };
+
+  const stopIncrement = () => {
+    if (incrementInterval.current) {
+      clearInterval(incrementInterval.current);
+      incrementInterval.current = null;
+    }
+  };
+
+  const stopDecrement = () => {
+    if (decrementInterval.current) {
+      clearInterval(decrementInterval.current);
+      decrementInterval.current = null;
+    }
+  };
+
+  return {
+    startDecrement,
+    startIncrement,
+    stopDecrement,
+    stopIncrement,
+  };
+}
+
+export function TextInput({
+  value,
+  onChange,
+  mixed = false,
+  mixedLabel = "Mixed",
+  onCommit,
+  icon,
+  trailing,
+  label,
+  type = "text",
+  typeNumberStepIncrement = 1,
+  minValue,
+  maxValue,
+  validator = S.String,
+  className,
+  disabled = false,
+}: TextInputProps) {
+  const [internalValue, setInternalValue] = useState(value);
+  const [isFocused, setIsFocused] = useState(false);
+  const internalValueRef = useRef(internalValue);
+
+  // Keep ref in sync with state for use in intervals
+  useEffect(() => {
+    internalValueRef.current = internalValue;
+  }, [internalValue]);
+
+  // Sync internal value when external value changes
+  useEffect(() => {
+    setInternalValue(value);
+  }, [value]);
+
+  // Save the value to the internal state only (for typing)
+  const handleInputChange = useCallback((newValue: string) => {
+    setInternalValue(newValue);
+  }, []);
+
+  // Clamp value between min and max if they are defined
+  const clampValue = useCallback(
+    (val: number): number => {
+      if (minValue !== undefined && val < minValue) {
+        return minValue;
+      }
+      if (maxValue !== undefined && val > maxValue) {
+        return maxValue;
+      }
+      return val;
+    },
+    [minValue, maxValue],
+  );
+
+  // Save to internal state AND propagate to parent (for dragging/incrementing)
+  const handleLiveChange = useCallback(
+    (newValue: string) => {
+      if (disabled) {
+        return;
+      }
+      if (type === "number") {
+        const numValue = Number(newValue);
+        if (!Number.isNaN(numValue)) {
+          const clampedValue = clampValue(numValue);
+          setInternalValue(clampedValue.toString());
+          onChange(clampedValue.toString());
+          return;
+        }
+      }
+      setInternalValue(newValue);
+      onChange(newValue);
+    },
+    [onChange, type, clampValue, disabled],
+  );
+
+  // When editing is complete, validate the value and save it to the parent if valid, else reset to the previous state
+  const handleBlur = () => {
+    setIsFocused(false);
+    if (mixed && internalValue.trim() === "") {
+      setInternalValue(value);
+      onCommit?.();
+      return;
+    }
+    try {
+      let result = S.decodeUnknownSync(validator)(internalValue);
+      // Apply min/max constraints for number type
+      if (type === "number") {
+        const numValue = Number(result);
+        if (!Number.isNaN(numValue)) {
+          result = clampValue(numValue).toString();
+        }
+      }
+      onChange(result);
+    } catch {
+      setInternalValue(value);
+    }
+    onCommit?.();
+  };
+
+  const { startIncrement, startDecrement, stopIncrement, stopDecrement } = useNumberStepper(
+    typeNumberStepIncrement,
+    () => internalValueRef.current,
+    handleLiveChange,
+    minValue,
+    maxValue,
+    disabled,
+  );
+
+  const isDragging = useRef(false);
+  const dragStartValue = useRef<number>(0);
+  const accumulatedMovement = useRef<number>(0);
+  const dragButtonRef = useRef<HTMLDivElement>(null);
+  const pixelsPerStep = 5; // Pixels of movement per step increment
+
+  useEffect(() => {
+    if (type !== "number") {
+      return;
+    }
+
+    const handleGlobalMouseMove = (e: MouseEvent) => {
+      if (!isDragging.current) {
+        return;
+      }
+      // Use movementX for pointer lock, accumulate the movement
+      accumulatedMovement.current += e.movementX;
+      const steps = Math.round(accumulatedMovement.current / pixelsPerStep);
+      const newValue = dragStartValue.current + steps * typeNumberStepIncrement;
+      const clampedValue = clampValue(newValue);
+      handleLiveChange(clampedValue.toString());
+    };
+
+    const handleGlobalMouseUp = () => {
+      if (isDragging.current) {
+        isDragging.current = false;
+        accumulatedMovement.current = 0;
+        document.exitPointerLock();
+        onCommit?.();
+      }
+    };
+
+    document.addEventListener("mousemove", handleGlobalMouseMove);
+    document.addEventListener("mouseup", handleGlobalMouseUp);
+
+    return () => {
+      document.removeEventListener("mousemove", handleGlobalMouseMove);
+      document.removeEventListener("mouseup", handleGlobalMouseUp);
+    };
+  }, [type, typeNumberStepIncrement, handleLiveChange, clampValue, onCommit]);
+
+  const handleIconMouseDown = (e: React.MouseEvent) => {
+    if (type !== "number" || disabled) {
+      return;
+    }
+    e.preventDefault();
+    isDragging.current = true;
+    dragStartValue.current = Number(internalValue) || 0;
+    accumulatedMovement.current = 0;
+    // Lock the pointer to keep cursor in place
+    dragButtonRef.current?.requestPointerLock();
+  };
+
+  const handleIconKeyDown = (e: React.KeyboardEvent) => {
+    if (type !== "number") {
+      return;
+    }
+    if (e.key === "ArrowRight") {
+      e.preventDefault();
+      startIncrement();
+    } else if (e.key === "ArrowLeft") {
+      e.preventDefault();
+      startDecrement();
+    }
+  };
+
+  const handleIconKeyUp = (e: React.KeyboardEvent) => {
+    if (type !== "number") {
+      return;
+    }
+    if (e.key === "ArrowRight") {
+      stopIncrement();
+      onCommit?.();
+    } else if (e.key === "ArrowLeft") {
+      stopDecrement();
+      onCommit?.();
+    }
+  };
+
+  const handleKeyDown = (e: React.KeyboardEvent<HTMLInputElement>) => {
+    if (e.key === "Enter") {
+      // @ts-expect-error: Element may not always be present, but we're in an event handler so it's safe
+      e.target.blur();
+    }
+    if (type === "number" && !disabled && e.key === "ArrowUp") {
+      startIncrement();
+      // Prevent default scrolling
+      e.preventDefault();
+    }
+    if (type === "number" && !disabled && e.key === "ArrowDown") {
+      startDecrement();
+      e.preventDefault();
+    }
+  };
+
+  const handleKeyUp = (e: React.KeyboardEvent<HTMLInputElement>) => {
+    if (type === "number" && e.key === "ArrowUp") {
+      stopIncrement();
+      onCommit?.();
+    }
+    if (type === "number" && e.key === "ArrowDown") {
+      stopDecrement();
+      onCommit?.();
+    }
+  };
+
+  return (
+    <InputGroup className={cn("h-7 rounded-sm border-none dark:bg-input/60", className)}>
+      <InputGroupInput
+        aria-label={label}
+        className="h-7 px-1 py-0 pl-2 text-xs"
+        disabled={disabled}
+        placeholder={mixed && !isFocused ? mixedLabel : undefined}
+        onBlur={() => handleBlur()}
+        onChange={(e) => handleInputChange(e.target.value)}
+        onFocus={(e) => {
+          setIsFocused(true);
+          if (mixed) {
+            setInternalValue("");
+          }
+          e.target.select();
+        }}
+        onKeyDown={handleKeyDown}
+        onKeyUp={handleKeyUp}
+        value={mixed && !isFocused ? "" : internalValue}
+      />
+      {icon ? (
+        <InputGroupAddon className="py-1 pr-0.5 pl-2">
+          {type === "number" ? (
+            // biome-ignore lint/a11y/noStaticElementInteractions: We need to use a div to get the pointer lock to work
+            // biome-ignore lint/nursery/noNoninteractiveElementInteractions: We need to use a div to get the pointer lock to work
+            // biome-ignore lint/a11y/useAriaPropsSupportedByRole: We need to use a div to get the pointer lock to work
+            <div
+              aria-label="Drag to adjust value"
+              className={cn(
+                "flex size-3.5 select-none items-center justify-center border-0 bg-transparent p-0",
+                disabled ? "cursor-not-allowed opacity-50" : "cursor-ew-resize",
+              )}
+              onKeyDown={handleIconKeyDown}
+              onKeyUp={handleIconKeyUp}
+              onMouseDown={handleIconMouseDown}
+              ref={dragButtonRef}
+              tabIndex={disabled ? undefined : -1}
+            >
+              {icon}
+            </div>
+          ) : (
+            <div className="flex size-3.5 items-center justify-center">{icon}</div>
+          )}
+        </InputGroupAddon>
+      ) : null}
+
+      {trailing ? (
+        <InputGroupAddon align="inline-end" className="py-1 pr-0.5 pl-2">
+          {trailing}
+        </InputGroupAddon>
+      ) : null}
+    </InputGroup>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/variable-binding-field.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/variable-binding-field.tsx
new file mode 100644
index 000000000..e9a4f25f1
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/variable-binding-field.tsx
@@ -0,0 +1,96 @@
+"use client";
+
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+import { useMemo } from "react";
+
+import type {
+  LabeledVariable,
+  VariableInputValue,
+} from "@/features/studio/paywalls/designer/components/variables/types";
+import { VariableInput } from "@/features/studio/paywalls/designer/components/variables/variable-input";
+
+import { hexColorToRgbaString, rgbaStringToHexColor } from "../panels/right-panel/utils/component-color";
+import { ColorInput } from "./color-input";
+import { SelectInput } from "./select-input";
+
+/**
+ * Serializable selector for a built-in literal renderer, standing in for
+ * {@link VariableInput}'s non-serializable `renderLiteral` render prop:
+ *
+ * - `color` → a {@link ColorInput} editing an `rgba`↔hex string literal.
+ * - `select` → a {@link SelectInput} over `options` (a string literal).
+ * - omitted → the default per-type literal input switch.
+ */
+export type LiteralKind =
+  | { kind: "color" }
+  | { kind: "select"; options: readonly string[] }
+  | undefined;
+
+export interface VariableBindingFieldProps {
+  /** The literal-or-reference value as plain data (VariableInputValue-shaped). */
+  value: VariableInputValue;
+  onChange: (value: VariableInputValue) => void;
+  /** Available variables that can be referenced. */
+  variables: readonly LabeledVariable[];
+  /** If set, only allows this type (filters variables, constrains literals). */
+  expectedType?: VariableTypeKey;
+  /** Serializable literal-renderer selector; replaces the render-prop path for the wire. */
+  literalKind?: LiteralKind;
+  /** Accessible label used by the `select` literal renderer. */
+  label?: string;
+  className?: string;
+}
+
+/**
+ * Host-side kit target for the `variableField` wire node. Wraps the shared
+ * {@link VariableInput} with a serializable surface: instead of a `renderLiteral`
+ * render prop it takes a {@link LiteralKind} token and reconstructs the matching
+ * literal editor host-side. `VariableInput` itself is unchanged — this is only a
+ * wrapper, so existing render-prop consumers keep working.
+ */
+export function VariableBindingField({
+  value,
+  onChange,
+  variables,
+  expectedType,
+  literalKind,
+  label = "Value",
+  className,
+}: VariableBindingFieldProps) {
+  const renderLiteral = useMemo(() => {
+    if (literalKind?.kind === "color") {
+      return (literal: VariableType, onLiteralChange: (value: VariableType) => void) => (
+        <ColorInput
+          className="flex-1"
+          onChange={(rgba) => onLiteralChange({ key: "string", value: rgbaStringToHexColor(rgba) })}
+          value={hexColorToRgbaString(literal.key === "string" ? literal.value : "")}
+        />
+      );
+    }
+    if (literalKind?.kind === "select") {
+      const options = literalKind.options.map((option) => ({ label: option, value: option }));
+      return (literal: VariableType, onLiteralChange: (value: VariableType) => void) => (
+        <SelectInput
+          className="flex-1"
+          label={label}
+          onChange={(option) => onLiteralChange({ key: "string", value: option })}
+          options={options}
+          placeholder="Select…"
+          value={literal.key === "string" ? literal.value : ""}
+        />
+      );
+    }
+    return undefined;
+  }, [literalKind, label]);
+
+  return (
+    <VariableInput
+      className={className}
+      expectedType={expectedType}
+      onChange={onChange}
+      renderLiteral={renderLiteral}
+      value={value}
+      variables={variables}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.test.ts
new file mode 100644
index 000000000..8a8182f1c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.test.ts
@@ -0,0 +1,162 @@
+import { describe, expect, test, vi } from "vite-plus/test";
+
+import { createPanelGestureController, type DraftPairing } from "./gesture-controller";
+
+const makePairing = () => {
+  const calls: string[] = [];
+  const pairing: DraftPairing = {
+    begin: () => calls.push("begin"),
+    commit: () => calls.push("commit"),
+    discard: () => calls.push("discard"),
+  };
+  return { pairing, calls };
+};
+
+describe("gesture-controller — active gesture + echo freeze", () => {
+  test("beginGesture freezes the node's value props; endGesture drops the freeze", () => {
+    const controller = createPanelGestureController();
+    const node = { id: 7, props: { value: "50", disabled: false } };
+
+    // No gesture: props pass through unchanged.
+    expect(controller.filterNodeProps(node)).toEqual({ value: "50", disabled: false });
+    expect(controller.isGestureActive(7)).toBe(false);
+
+    // Begin a gesture on node 7 with the frozen props.
+    controller.beginGesture(7, { value: "50", disabled: false });
+    expect(controller.isGestureActive(7)).toBe(true);
+    expect(controller.activeGestureNode()).toBe(7);
+
+    // A later tree emits value "80"; the frozen "50" is used for node 7.
+    const echoed = controller.filterNodeProps({ id: 7, props: { value: "80", disabled: false } });
+    expect(echoed.value).toBe("50");
+
+    // A different node is unaffected mid-gesture.
+    const other = controller.filterNodeProps({ id: 9, props: { value: "abc" } });
+    expect(other.value).toBe("abc");
+
+    // End the gesture: authoritative value re-applies.
+    controller.endGesture();
+    expect(controller.isGestureActive(7)).toBe(false);
+    const afterEnd = controller.filterNodeProps({ id: 7, props: { value: "80" } });
+    expect(afterEnd.value).toBe("80");
+  });
+
+  test("handlers are always taken from the live node, even mid-gesture", () => {
+    const controller = createPanelGestureController();
+    const staleHandler = () => "stale";
+    const liveHandler = () => "live";
+    controller.beginGesture(1, { value: "1", onChange: staleHandler });
+    const filtered = controller.filterNodeProps({
+      id: 1,
+      props: { value: "2", onChange: liveHandler },
+    });
+    // Value frozen, handler live.
+    expect(filtered.value).toBe("1");
+    expect(filtered.onChange).toBe(liveHandler);
+  });
+});
+
+describe("gesture-controller — draft pairing state machine", () => {
+  test("first live intent begins the draft exactly once; commit commits", () => {
+    const { pairing, calls } = makePairing();
+    const controller = createPanelGestureController();
+    controller.attachDraftPairing(pairing);
+
+    expect(controller.isDraftOpen()).toBe(false);
+    controller.onLiveIntent();
+    controller.onLiveIntent();
+    controller.onLiveIntent();
+    expect(controller.isDraftOpen()).toBe(true);
+    expect(calls).toEqual(["begin"]); // begin ONCE across three live intents
+
+    controller.onGestureCommit();
+    expect(controller.isDraftOpen()).toBe(false);
+    expect(calls).toEqual(["begin", "commit"]);
+  });
+
+  test("gesture-discard discards the open draft", () => {
+    const { pairing, calls } = makePairing();
+    const controller = createPanelGestureController();
+    controller.attachDraftPairing(pairing);
+    controller.onLiveIntent();
+    controller.onGestureDiscard();
+    expect(controller.isDraftOpen()).toBe(false);
+    expect(calls).toEqual(["begin", "discard"]);
+  });
+
+  test("selection change discards the open draft", () => {
+    const { pairing, calls } = makePairing();
+    const controller = createPanelGestureController();
+    controller.attachDraftPairing(pairing);
+    controller.onLiveIntent();
+    controller.notifySelectionChange();
+    expect(calls).toEqual(["begin", "discard"]);
+    expect(controller.lastDiscardReason()).toBe("selection-change");
+  });
+
+  test("session death discards the open draft and clears gesture state", () => {
+    const { pairing, calls } = makePairing();
+    const controller = createPanelGestureController();
+    controller.attachDraftPairing(pairing);
+    controller.beginGesture(3, { value: "x" });
+    controller.onLiveIntent();
+    controller.notifySessionDeath();
+    expect(calls).toEqual(["begin", "discard"]);
+    expect(controller.isGestureActive(3)).toBe(false);
+    expect(controller.activeGestureNode()).toBe(null);
+  });
+
+  test("10s inactivity discards the open draft (fake timers)", () => {
+    vi.useFakeTimers();
+    try {
+      const { pairing, calls } = makePairing();
+      const controller = createPanelGestureController({ inactivityMs: 10_000 });
+      controller.attachDraftPairing(pairing);
+
+      controller.onLiveIntent();
+      expect(controller.isDraftOpen()).toBe(true);
+
+      // 9s: not yet discarded.
+      vi.advanceTimersByTime(9_000);
+      expect(controller.isDraftOpen()).toBe(true);
+      expect(calls).toEqual(["begin"]);
+
+      // Another live intent resets the idle timer.
+      controller.onLiveIntent();
+      vi.advanceTimersByTime(9_000);
+      expect(controller.isDraftOpen()).toBe(true);
+
+      // Cross the 10s idle window with no further intents → discard.
+      vi.advanceTimersByTime(1_500);
+      expect(controller.isDraftOpen()).toBe(false);
+      expect(calls).toEqual(["begin", "discard"]);
+      expect(controller.lastDiscardReason()).toBe("inactivity");
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  test("commit clears the idle timer (no late inactivity discard)", () => {
+    vi.useFakeTimers();
+    try {
+      const { pairing, calls } = makePairing();
+      const controller = createPanelGestureController({ inactivityMs: 10_000 });
+      controller.attachDraftPairing(pairing);
+      controller.onLiveIntent();
+      controller.onGestureCommit();
+      // Even after the idle window elapses, no extra discard fires.
+      vi.advanceTimersByTime(30_000);
+      expect(calls).toEqual(["begin", "commit"]);
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  test("live/commit are no-ops when no pairing is attached", () => {
+    const controller = createPanelGestureController();
+    controller.onLiveIntent();
+    controller.onGestureCommit();
+    controller.onGestureDiscard();
+    expect(controller.isDraftOpen()).toBe(false);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.ts
new file mode 100644
index 000000000..d05b40f25
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/gesture-controller.ts
@@ -0,0 +1,230 @@
+/**
+ * Uniform gesture bookkeeping shared by every {@link PanelTransport} engine, so
+ * the renderer and the draft plumbing behave identically whether a panel runs
+ * in-process or (Phase 3) in a sandbox.
+ *
+ * It owns two mechanisms:
+ *
+ * 1. GESTURE-LOCAL ECHO — while a gesture is active on node `N`, the kit input
+ *    for `N` holds its own internal value mid-drag. Incoming tree revisions must
+ *    apply everywhere EXCEPT `N`'s value props, or an echoed authoritative value
+ *    (arriving a frame late from the sandbox) would fight the input's local
+ *    state and cause a visible snap-back. The renderer routes every node's props
+ *    through {@link PanelGestureController.filterNodeProps}: for the gesture node
+ *    it returns the props frozen at gesture start (value props stay put; the
+ *    node's own handlers still fire), for every other node it returns props
+ *    unchanged. The authoritative values re-apply automatically at gesture end
+ *    (the freeze is dropped and the next render reads the fresh tree). For the
+ *    in-process transport authority is synchronous so the frozen and incoming
+ *    values already match — the mechanism is a no-op there, but uniform.
+ *
+ * 2. DRAFT PAIRING — a designer "draft" batches a drag's intermediate writes
+ *    into ONE undo entry (see `use-designer-draft.ts`). A sandbox panel emits
+ *    `live` set-prop intents during a drag and a `gesture-commit`/`gesture-
+ *    discard` at the end; this controller maps that intent stream onto a host
+ *    draft via {@link PanelGestureController.attachDraftPairing}: the first
+ *    `live` opens the draft, `gesture-commit` commits it, and `gesture-discard`,
+ *    session death, a selection change, or 10s of inactivity discards it. Built-
+ *    in panels don't use this path (they run draft logic in-process), so nothing
+ *    calls it in production yet — it is built + unit-tested here for Phase 3.
+ */
+
+/** The three callbacks that pair a sandbox gesture-intent stream to a host draft. */
+export interface DraftPairing {
+  /** Opens a host draft (first `live` intent of a gesture). */
+  begin(): void;
+  /** Commits the open draft into one undo entry (`gesture-commit`). */
+  commit(): void;
+  /** Discards the open draft (explicit discard, death, selection change, timeout). */
+  discard(): void;
+}
+
+/** The reason a draft was auto-discarded, surfaced for diagnostics/tests. */
+export type DraftDiscardReason =
+  | "gesture-discard"
+  | "session-death"
+  | "selection-change"
+  | "inactivity";
+
+/** A minimal node shape the controller needs to freeze a gesture node's props. */
+export interface GestureFilterableNode {
+  readonly id: number;
+  readonly props: { readonly [key: string]: unknown };
+}
+
+/** Options for {@link createPanelGestureController}. */
+export interface PanelGestureControllerOptions {
+  /**
+   * Idle window (ms) after which an open draft is auto-discarded if no further
+   * `live` intent arrives. Defaults to 10_000. Injectable for tests.
+   */
+  readonly inactivityMs?: number;
+  /** Timer scheduler seam (defaults to `setTimeout`). Injectable for fake timers. */
+  readonly setTimer?: (fn: () => void, ms: number) => ReturnType<typeof setTimeout>;
+  /** Timer clear seam (defaults to `clearTimeout`). */
+  readonly clearTimer?: (handle: ReturnType<typeof setTimeout>) => void;
+}
+
+const DEFAULT_INACTIVITY_MS = 10_000;
+
+/**
+ * The controller handle. One per panel session; the transport owns its lifetime.
+ */
+export interface PanelGestureController {
+  // ── Active-gesture tracking (renderer echo) ──────────────────────────────
+  /** Marks a gesture active on `nodeId`, freezing its current props for echo. */
+  beginGesture(nodeId: number, props: { readonly [key: string]: unknown }): void;
+  /** Ends the active gesture (the freeze is dropped; authority re-applies). */
+  endGesture(): void;
+  /** True while a gesture is active on `nodeId`. */
+  isGestureActive(nodeId: number): boolean;
+  /** The node id of the active gesture, or `null`. */
+  activeGestureNode(): number | null;
+  /**
+   * Returns the props the renderer should use for `node`: the frozen props for
+   * the active gesture node (value props held mid-gesture), otherwise the node's
+   * own props unchanged. Handlers are always taken from the LIVE node so a
+   * mid-gesture handler swap is never stale.
+   */
+  filterNodeProps(node: GestureFilterableNode): { readonly [key: string]: unknown };
+
+  // ── Draft pairing (sandbox intents → host draft) ──────────────────────────
+  /** Installs the draft callbacks that a sandbox gesture stream drives. */
+  attachDraftPairing(pairing: DraftPairing): void;
+  /** Feeds a `live` set-prop intent: opens the draft (once) + resets the idle timer. */
+  onLiveIntent(): void;
+  /** Feeds a `gesture-commit` intent: commits the open draft. */
+  onGestureCommit(): void;
+  /** Feeds a `gesture-discard` intent: discards the open draft. */
+  onGestureDiscard(): void;
+  /** True while a paired draft is open. */
+  isDraftOpen(): boolean;
+  /** The reason the last draft was discarded (diagnostics/tests), or `null`. */
+  lastDiscardReason(): DraftDiscardReason | null;
+
+  // ── Lifecycle discard triggers ────────────────────────────────────────────
+  /** The panel's selection changed: discards any open draft. */
+  notifySelectionChange(): void;
+  /** The session died (error/restart/dispose): discards any open draft + clears state. */
+  notifySessionDeath(): void;
+  /** Tears the controller down (clears timers + open state). */
+  dispose(): void;
+}
+
+/**
+ * Creates a {@link PanelGestureController}. Pure bookkeeping — it holds no React
+ * state and no transport reference; the transport and renderer call into it.
+ */
+export const createPanelGestureController = (
+  options: PanelGestureControllerOptions = {},
+): PanelGestureController => {
+  const inactivityMs = options.inactivityMs ?? DEFAULT_INACTIVITY_MS;
+  const setTimer = options.setTimer ?? ((fn, ms) => setTimeout(fn, ms));
+  const clearTimer = options.clearTimer ?? ((handle) => clearTimeout(handle));
+
+  // Active-gesture echo state.
+  let gestureNodeId: number | null = null;
+  let frozenProps: { readonly [key: string]: unknown } | null = null;
+
+  // Draft-pairing state.
+  let pairing: DraftPairing | null = null;
+  let draftOpen = false;
+  let idleTimer: ReturnType<typeof setTimeout> | null = null;
+  let lastDiscardReason: DraftDiscardReason | null = null;
+
+  const clearIdleTimer = (): void => {
+    if (idleTimer !== null) {
+      clearTimer(idleTimer);
+      idleTimer = null;
+    }
+  };
+
+  const armIdleTimer = (): void => {
+    clearIdleTimer();
+    idleTimer = setTimer(() => {
+      idleTimer = null;
+      discardDraft("inactivity");
+    }, inactivityMs);
+  };
+
+  const discardDraft = (reason: DraftDiscardReason): void => {
+    clearIdleTimer();
+    if (!draftOpen) return;
+    draftOpen = false;
+    lastDiscardReason = reason;
+    pairing?.discard();
+  };
+
+  return {
+    beginGesture(nodeId, props) {
+      gestureNodeId = nodeId;
+      frozenProps = props;
+    },
+    endGesture() {
+      gestureNodeId = null;
+      frozenProps = null;
+    },
+    isGestureActive(nodeId) {
+      return gestureNodeId === nodeId;
+    },
+    activeGestureNode() {
+      return gestureNodeId;
+    },
+    filterNodeProps(node) {
+      if (gestureNodeId !== node.id || frozenProps === null) {
+        return node.props;
+      }
+      // Freeze value props at gesture start, but always take handlers from the
+      // live node (a re-render may have swapped a handler closure).
+      const merged: Record<string, unknown> = { ...frozenProps };
+      for (const [key, value] of Object.entries(node.props)) {
+        if (typeof value === "function") {
+          merged[key] = value;
+        }
+      }
+      return merged;
+    },
+
+    attachDraftPairing(next) {
+      pairing = next;
+    },
+    onLiveIntent() {
+      if (pairing === null) return;
+      if (!draftOpen) {
+        draftOpen = true;
+        pairing.begin();
+      }
+      armIdleTimer();
+    },
+    onGestureCommit() {
+      clearIdleTimer();
+      if (!draftOpen) return;
+      draftOpen = false;
+      pairing?.commit();
+    },
+    onGestureDiscard() {
+      discardDraft("gesture-discard");
+    },
+    isDraftOpen() {
+      return draftOpen;
+    },
+    lastDiscardReason() {
+      return lastDiscardReason;
+    },
+
+    notifySelectionChange() {
+      discardDraft("selection-change");
+    },
+    notifySessionDeath() {
+      discardDraft("session-death");
+      gestureNodeId = null;
+      frozenProps = null;
+    },
+    dispose() {
+      discardDraft("session-death");
+      gestureNodeId = null;
+      frozenProps = null;
+      pairing = null;
+    },
+  };
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.test.tsx b/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.test.tsx
new file mode 100644
index 000000000..12411db65
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.test.tsx
@@ -0,0 +1,969 @@
+// @vitest-environment jsdom
+
+import { PANEL_NODE_SPECS, PANEL_TREE_VERSION } from "@voidhash/paywalls/schema";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import type { ReactNode } from "react";
+import { afterEach, describe, expect, test, vi } from "vite-plus/test";
+
+// The image field (and the fill field's image tab) read TanStack Router params
+// and the studio auth context. Outside a real route, `useParams({strict:false})`
+// returns `{}` — mock that faithfully so image nodes mount in a bare test.
+vi.mock("@tanstack/react-router", () => ({
+  useParams: () => ({}),
+}));
+
+import { AuthProvider } from "@/features/studio/components/auth-context";
+
+import { PanelTreeView } from "./host-renderer";
+import { decodePanelTree, type PanelTree } from "./schema";
+import type { PanelDispatchEvent, PanelSnapshot, PanelTransport } from "./transport";
+
+afterEach(() => cleanup());
+
+/** Renders under the minimal app providers the designer kit components expect. */
+const renderPanel = (ui: ReactNode) =>
+  // The auth user is never dereferenced in these tests (org id resolves to null
+  // via the mocked empty route params before `user` is read). A QueryClient is
+  // provided because the `productField` view renders a `ProductInput` whose
+  // `useQuery` needs a client in context (the query itself stays disabled without
+  // a resolved project id).
+  render(
+    <QueryClientProvider client={new QueryClient()}>
+      <AuthProvider user={null as never}>{ui}</AuthProvider>
+    </QueryClientProvider>,
+  );
+
+/**
+ * A stub transport over a fixed tree. Records every dispatch and lets a test
+ * inspect what {@link PanelDispatchEvent}s the rendered nodes fired.
+ */
+const stubTransport = (tree: PanelTree) => {
+  const dispatched: PanelDispatchEvent[] = [];
+  const snapshot: PanelSnapshot = { status: "ready", tree, revision: 1 };
+  const transport: PanelTransport = {
+    kind: "in-process",
+    update: () => {},
+    dispatch: (event) => dispatched.push(event),
+    subscribe: () => () => {},
+    getSnapshot: () => snapshot,
+    restart: () => {},
+    dispose: () => {},
+  };
+  return { transport, dispatched };
+};
+
+let nextId = 0;
+const id = () => nextId++;
+
+/**
+ * A fully-populated valid panel tree containing EVERY node type in the v1
+ * vocabulary (adapted from the schema contract fixture). Every node carries the
+ * events it supports so the renderer wires a handler per event name.
+ */
+const fullTree = () => {
+  nextId = 0;
+  return {
+    version: PANEL_TREE_VERSION,
+    root: {
+      type: "panel",
+      id: id(),
+      props: {},
+      events: [],
+      children: [
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Layout", collapsible: true, defaultCollapsed: false },
+          events: ["onToggle"],
+          children: [
+            {
+              type: "sectionActions",
+              id: id(),
+              props: {},
+              events: [],
+              children: [
+                {
+                  type: "button",
+                  id: id(),
+                  props: { label: "Add", icon: "plus", variant: "ghost", size: "icon-sm" },
+                  events: ["onClick"],
+                },
+              ],
+            },
+            {
+              type: "subsection",
+              id: id(),
+              props: { title: "Size" },
+              events: [],
+              children: [
+                {
+                  type: "row",
+                  id: id(),
+                  props: { gap: "sm", width: "full", align: "center", justify: "between" },
+                  events: [],
+                  children: [
+                    {
+                      type: "column",
+                      id: id(),
+                      props: { gap: "xs", width: "auto", align: "start" },
+                      events: [],
+                      children: [
+                        {
+                          type: "field",
+                          id: id(),
+                          props: { label: "Align", icon: "a" },
+                          events: [],
+                          children: [
+                            {
+                              type: "alignmentGrid",
+                              id: id(),
+                              props: {
+                                flexDirection: "row",
+                                alignItems: "center",
+                                justifyContent: "space-between",
+                                mixed: false,
+                              },
+                              events: ["onChange"],
+                            },
+                            {
+                              type: "dimensionField",
+                              id: id(),
+                              props: {
+                                axis: "width",
+                                mode: "custom",
+                                value: 240,
+                                label: "Width",
+                                mixed: false,
+                                disabled: false,
+                                computed: 240,
+                              },
+                              events: ["onChange", "onCommit", "onModeChange"],
+                            },
+                          ],
+                        },
+                      ],
+                    },
+                  ],
+                },
+              ],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Content", collapsible: true },
+          events: ["onToggle"],
+          children: [
+            { type: "text", id: id(), props: { content: "Edit.", variant: "body" }, events: [] },
+            {
+              type: "callout",
+              id: id(),
+              props: { message: "Product is unset.", tone: "warning" },
+              events: [],
+            },
+            {
+              type: "textField",
+              id: id(),
+              props: {
+                kind: "text",
+                value: "Hello",
+                mixed: false,
+                placeholder: "heading",
+                trailingMenu: {
+                  items: [
+                    { value: "auto", label: "Auto" },
+                    { value: "fixed", label: "Fixed" },
+                  ],
+                  value: "auto",
+                },
+              },
+              events: ["onChange", "onCommit", "onTrailingSelect"],
+            },
+            {
+              type: "selectField",
+              id: id(),
+              props: {
+                value: "cover",
+                options: [
+                  { value: "cover", label: "Cover" },
+                  { value: "contain", label: "Contain" },
+                ],
+                placeholder: "mode",
+                mixed: false,
+                disabled: false,
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "toggleGroup",
+              id: id(),
+              props: {
+                value: "left",
+                options: [
+                  { value: "left", label: "Left" },
+                  { value: "center", label: "Center" },
+                ],
+                mixed: false,
+                disabled: false,
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "switchField",
+              id: id(),
+              props: { checked: true, mixed: false, label: "Visible", disabled: false },
+              events: ["onChange"],
+            },
+            {
+              type: "sliderField",
+              id: id(),
+              props: { value: 50, min: 0, max: 100, step: 1, mixed: false, disabled: false },
+              events: ["onChange", "onCommit"],
+            },
+            {
+              type: "resetAffordance",
+              id: id(),
+              props: { show: true, label: "Reset" },
+              events: ["onReset"],
+              children: [
+                { type: "text", id: id(), props: { content: "overridden" }, events: [] },
+              ],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Fill" },
+          events: [],
+          children: [
+            {
+              type: "field",
+              id: id(),
+              props: { label: "Fill" },
+              events: [],
+              children: [
+                {
+                  type: "swatch",
+                  id: id(),
+                  props: { color: "rgba(0,0,0,1)", imageUrl: null },
+                  events: [],
+                },
+              ],
+            },
+            {
+              type: "popover",
+              id: id(),
+              props: { open: true },
+              events: ["onOpenChange"],
+              children: [
+                {
+                  type: "popoverTrigger",
+                  id: id(),
+                  props: {},
+                  events: [],
+                  children: [
+                    {
+                      type: "button",
+                      id: id(),
+                      props: { label: "Edit fill" },
+                      events: ["onClick"],
+                    },
+                  ],
+                },
+                {
+                  type: "popoverContent",
+                  id: id(),
+                  props: { align: "start", side: "bottom" },
+                  events: [],
+                  children: [
+                    {
+                      type: "colorField",
+                      id: id(),
+                      props: { value: "rgba(0,0,0,1)", mixed: false, disabled: false },
+                      events: ["onChange", "onDragStart", "onCommit", "onDiscard"],
+                    },
+                    {
+                      type: "colorPicker",
+                      id: id(),
+                      props: { color: "000000", opacity: 100 },
+                      events: ["onColorChange", "onOpacityChange"],
+                    },
+                    {
+                      type: "gradientStops",
+                      id: id(),
+                      props: {
+                        stops: [
+                          { id: 0, position: 0, color: "rgba(0,0,0,1)" },
+                          { id: 1, position: 1, color: "rgba(255,255,255,1)" },
+                        ],
+                        selectedStopId: 0,
+                      },
+                      events: ["onSelect", "onAddStop", "onMoveStop"],
+                    },
+                    {
+                      type: "imageField",
+                      id: id(),
+                      props: { url: "", resizeMode: "cover" },
+                      events: ["onPick", "onResizeModeChange", "onClear"],
+                    },
+                    {
+                      type: "fillField",
+                      id: id(),
+                      props: {
+                        label: "Fill",
+                        backgroundType: "solid",
+                        isTypeMixed: false,
+                        backgroundColor: "rgba(0,0,0,1)",
+                        gradient: {
+                          kind: "linear",
+                          startX: 0,
+                          startY: 0,
+                          endX: 1,
+                          endY: 1,
+                          stops: [
+                            { color: "rgba(0,0,0,1)", position: 0 },
+                            { color: "rgba(255,255,255,1)", position: 1 },
+                          ],
+                        },
+                        selectedStopIndex: 0,
+                        image: { url: "", resizeMode: "cover" },
+                        open: false,
+                      },
+                      events: ["onTypeChange", "onColorChange", "onOpenChange"],
+                    },
+                  ],
+                },
+              ],
+            },
+            {
+              type: "menu",
+              id: id(),
+              props: {
+                items: [
+                  { value: "solid", label: "Solid" },
+                  { value: "gradient", label: "Gradient" },
+                ],
+                value: "solid",
+                align: "end",
+              },
+              events: ["onSelect"],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Binding" },
+          events: [],
+          children: [
+            {
+              type: "variableField",
+              id: id(),
+              props: {
+                variableId: "var_1",
+                variableName: "isPro",
+                variableType: "boolean",
+                allowedKinds: ["boolean"],
+                label: "Visible when",
+              },
+              events: ["onBind", "onUnbind", "onCreate"],
+            },
+            {
+              type: "actionEditorField",
+              id: id(),
+              props: {
+                value: {
+                  type: "set-variable",
+                  payload: {
+                    variableId: "var_1",
+                    newValue: { type: "literal", value: { key: "boolean", value: true } },
+                  },
+                },
+                variables: [
+                  { id: "var_1", name: "isPro", value: { key: "boolean", value: true } },
+                ],
+                productVariables: [],
+                payloadFields: [],
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "productField",
+              id: id(),
+              props: {
+                productId: "prod_1",
+                placeholder: "Select product…",
+                disabled: false,
+                label: "Product",
+              },
+              events: ["onChange"],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Component" },
+          events: [],
+          children: [
+            { type: "propField", id: id(), props: { name: "heading" }, events: [] },
+            { type: "defaultProps", id: id(), props: { exclude: ["heading"] }, events: [] },
+          ],
+        },
+      ],
+    },
+  };
+};
+
+describe("host-renderer — conformance", () => {
+  test("decodes and mounts a tree with every node type without crashing", () => {
+    const decoded = decodePanelTree(fullTree());
+    expect(decoded.ok, decoded.ok ? "" : decoded.error).toBe(true);
+    if (!decoded.ok) return;
+
+    const { transport } = stubTransport(decoded.tree);
+    expect(() => renderPanel(<PanelTreeView transport={transport} />)).not.toThrow();
+    // Text content from the fixture proves recursion reached leaf nodes.
+    expect(screen.getByText("Edit.")).toBeTruthy();
+    expect(screen.getByText("Product is unset.")).toBeTruthy();
+  });
+
+  test("the fixture exercises every node type in the vocabulary", () => {
+    const seen = new Set<string>();
+    const walk = (node: { type: string; children?: unknown[] }) => {
+      seen.add(node.type);
+      for (const child of node.children ?? []) {
+        walk(child as { type: string; children?: unknown[] });
+      }
+    };
+    walk(fullTree().root as never);
+    for (const type of Object.keys(PANEL_NODE_SPECS)) {
+      expect(seen.has(type), `fixture is missing node type "${type}"`).toBe(true);
+    }
+  });
+
+  test("loading snapshot renders a skeleton, error renders restart chrome", () => {
+    // Snapshots MUST be stable objects — useSyncExternalStore loops if getSnapshot
+    // returns a new object each call.
+    const loadingSnapshot: PanelSnapshot = { status: "loading" };
+    const loading: PanelTransport = {
+      ...stubTransport(decodeOrThrow(fullTree())).transport,
+      getSnapshot: () => loadingSnapshot,
+    };
+    const { container: loadingContainer } = renderPanel(<PanelTreeView transport={loading} />);
+    expect(loadingContainer.querySelector('[aria-busy="true"]')).toBeTruthy();
+    cleanup();
+
+    const restart = vi.fn();
+    const errorSnapshot: PanelSnapshot = { status: "error", message: "boom", restartable: true };
+    const errored: PanelTransport = {
+      ...stubTransport(decodeOrThrow(fullTree())).transport,
+      getSnapshot: () => errorSnapshot,
+      restart,
+    };
+    renderPanel(<PanelTreeView transport={errored} />);
+    expect(screen.getByText("boom")).toBeTruthy();
+    fireEvent.click(screen.getByText("Restart"));
+    expect(restart).toHaveBeenCalledTimes(1);
+  });
+});
+
+const decodeOrThrow = (tree: unknown): PanelTree => {
+  const decoded = decodePanelTree(tree);
+  if (!decoded.ok) throw new Error(decoded.error);
+  return decoded.tree;
+};
+
+describe("host-renderer — event dispatch", () => {
+  const findEventNode = (
+    tree: PanelTree,
+    predicate: (node: { type: string; events: readonly string[] }) => boolean,
+  ): number => {
+    let found = -1;
+    const walk = (node: { id: number; type: string; events: readonly string[]; children?: unknown[] }) => {
+      if (found === -1 && predicate(node)) found = node.id;
+      for (const child of node.children ?? []) {
+        walk(child as never);
+      }
+    };
+    walk(tree.root as never);
+    return found;
+  };
+
+  test("textField onChange dispatches {nodeId, name}", () => {
+    const tree = decodeOrThrow(fullTree());
+    const { transport, dispatched } = stubTransport(tree);
+    const nodeId = findEventNode(tree, (n) => n.type === "textField");
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.change(screen.getByLabelText("heading"), { target: { value: "New" } });
+    fireEvent.blur(screen.getByLabelText("heading"));
+    const change = dispatched.find((e) => e.nodeId === nodeId && e.name === "onChange");
+    expect(change).toBeTruthy();
+  });
+
+  test("button onClick dispatches {nodeId, name}", () => {
+    const tree = decodeOrThrow(fullTree());
+    const { transport, dispatched } = stubTransport(tree);
+    const nodeId = findEventNode(tree, (n) => n.type === "button" && n.events.includes("onClick"));
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.click(screen.getByText("Add"));
+    const click = dispatched.find((e) => e.nodeId === nodeId && e.name === "onClick");
+    expect(click).toBeTruthy();
+  });
+
+  test("switchField onChange dispatches {nodeId, name}", () => {
+    const tree = decodeOrThrow(fullTree());
+    const { transport, dispatched } = stubTransport(tree);
+    const nodeId = findEventNode(tree, (n) => n.type === "switchField");
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    const toggle = container.querySelector('[data-slot="switch"]');
+    expect(toggle).toBeTruthy();
+    fireEvent.click(toggle!);
+    const change = dispatched.find((e) => e.nodeId === nodeId && e.name === "onChange");
+    expect(change).toBeTruthy();
+  });
+
+  test("textField trailingMenu (object shape) renders the trailing DropdownMenu trigger", () => {
+    // The lineHeight Auto/Fixed control is the first real use of `trailingMenu`.
+    // The wire carries the OBJECT `{ items, value? }` (not the array the OSS author
+    // type annotates); the renderer must accept that shape and mount the trailing
+    // DropdownMenu. (The onTrailingSelect dispatch is exercised end-to-end in the
+    // typography-panel definition test through the transport — Radix's pointer-
+    // driven open is not reliably reproducible in jsdom.)
+    const tree = decodeOrThrow({
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: "textField",
+            id: 1,
+            props: {
+              kind: "number",
+              value: "Auto",
+              placeholder: "Line Height",
+              disabled: true,
+              trailingMenu: {
+                items: [
+                  { value: "auto", label: "Auto" },
+                  { value: "fixed", label: "Fixed" },
+                ],
+                value: "auto",
+              },
+            },
+            events: ["onChange", "onCommit", "onTrailingSelect"],
+          },
+        ],
+      },
+    });
+    const { transport } = stubTransport(tree);
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    // The trailing slot hosts a DropdownMenu trigger button (proves the object
+    // trailingMenu shape decoded and reached the renderer).
+    expect(container.querySelector('[data-slot="dropdown-menu-trigger"]')).toBeTruthy();
+  });
+
+  test("resetAffordance onReset dispatches {nodeId, name}", () => {
+    const tree = decodeOrThrow(fullTree());
+    const { transport, dispatched } = stubTransport(tree);
+    const nodeId = findEventNode(tree, (n) => n.type === "resetAffordance");
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.click(screen.getByLabelText("Reset Reset override"));
+    const reset = dispatched.find((e) => e.nodeId === nodeId && e.name === "onReset");
+    expect(reset).toBeTruthy();
+  });
+
+  test("dimensionField onChange dispatches the typed value in custom mode", () => {
+    const tree = decodeOrThrow(fullTree());
+    const { transport, dispatched } = stubTransport(tree);
+    const nodeId = findEventNode(tree, (n) => n.type === "dimensionField");
+    renderPanel(<PanelTreeView transport={transport} />);
+    // The fixture field is axis:"width", mode:"custom" (input enabled, label "Width").
+    fireEvent.change(screen.getByLabelText("Width"), { target: { value: "300" } });
+    fireEvent.blur(screen.getByLabelText("Width"));
+    const change = dispatched.find((e) => e.nodeId === nodeId && e.name === "onChange");
+    expect(change).toBeTruthy();
+  });
+
+  test("dimensionField renders the fill/hug/custom menu trigger (onModeChange wired)", () => {
+    const tree = decodeOrThrow(fullTree());
+    const nodeId = findEventNode(tree, (n) => n.type === "dimensionField");
+    const { transport } = stubTransport(tree);
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    // The trailing slot mounts a DropdownMenu whose items dispatch onModeChange
+    // (Radix's pointer-open is unreliable in jsdom; the definition test drives the
+    // mode change end-to-end through the transport).
+    expect(container.querySelector('[data-slot="dropdown-menu-trigger"]')).toBeTruthy();
+    expect(nodeId).toBeGreaterThanOrEqual(0);
+  });
+
+  test("alignmentGrid onChange dispatches {alignItems, justifyContent}", () => {
+    const tree = decodeOrThrow(fullTree());
+    const { transport, dispatched } = stubTransport(tree);
+    const nodeId = findEventNode(tree, (n) => n.type === "alignmentGrid");
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    // The alignment grid renders clickable cells; clicking one emits the paired
+    // { alignItems, justifyContent } object the definition writes DIRECT.
+    const cell = container.querySelector(".group.relative");
+    expect(cell).toBeTruthy();
+    fireEvent.click(cell!);
+    const change = dispatched.find((e) => e.nodeId === nodeId && e.name === "onChange");
+    expect(change).toBeTruthy();
+    expect(change?.args[0]).toMatchObject({
+      alignItems: expect.any(String),
+      justifyContent: expect.any(String),
+    });
+  });
+
+  test("alignmentGrid in stretch mode emits {alignItems: 'stretch', justifyContent}", () => {
+    const tree = decodeOrThrow({
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: "alignmentGrid",
+            id: 1,
+            props: {
+              flexDirection: "row",
+              alignItems: "stretch",
+              justifyContent: "flex-start",
+              mixed: false,
+            },
+            events: ["onChange"],
+          },
+        ],
+      },
+    });
+    const { transport, dispatched } = stubTransport(tree);
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    // Stretch mode renders the justify-only strip; clicking a cell keeps
+    // alignItems stretch and writes the picked justifyContent.
+    const cell = container.querySelector(".group.relative");
+    expect(cell).toBeTruthy();
+    fireEvent.click(cell!);
+    const change = dispatched.find((e) => e.name === "onChange");
+    expect(change?.args[0]).toMatchObject({ alignItems: "stretch" });
+  });
+
+  /**
+   * A single `fillField` node with the eight WRITE-bearing events wired. The
+   * popover open state and selected gradient stop are HOST-LOCAL (never on the
+   * wire — the fillField composite has 15 events but the per-node cap is 8), so
+   * the fixture never carries `open`/`selectedStopIndex` as live wire props.
+   */
+  const fillFieldTree = (): PanelTree =>
+    decodeOrThrow({
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: "fillField",
+            id: 1,
+            props: {
+              label: "Fill",
+              backgroundType: "solid",
+              isTypeMixed: false,
+              backgroundColor: "rgba(0,0,0,1)",
+              gradient: {
+                kind: "linear",
+                startX: 0,
+                startY: 0,
+                endX: 1,
+                endY: 1,
+                stops: [
+                  { color: "rgba(0,0,0,1)", position: 0 },
+                  { color: "rgba(255,255,255,1)", position: 1 },
+                ],
+              },
+              image: { url: "", resizeMode: "cover" },
+            },
+            // The eight write-bearing events (the pure-UI open + stop selection are
+            // host-local); stop-shape mutations consolidate into onGradientChange.
+            events: [
+              "onTypeChange",
+              "onColorChange",
+              "onGradientChange",
+              "onImageUrlChange",
+              "onImageResizeModeChange",
+              "onGestureStart",
+              "onCommit",
+              "onDiscard",
+            ],
+          },
+        ],
+      },
+    });
+
+  test("fillField mounts the composite and opens its popover body host-locally", () => {
+    const { transport } = stubTransport(fillFieldTree());
+    // The composite renders the trigger button; the popover open state is host-
+    // local so it starts closed and opens on trigger click, exposing the
+    // Solid/Gradient/Image type toggle (proves the FillEditorPopoverContent mounts).
+    expect(() => renderPanel(<PanelTreeView transport={transport} />)).not.toThrow();
+    fireEvent.click(screen.getByLabelText("Edit fill"));
+    expect(screen.getByText("Solid")).toBeTruthy();
+    expect(screen.getByText("Gradient")).toBeTruthy();
+  });
+
+  test("fillField onTypeChange dispatches the picked background type", () => {
+    const { transport, dispatched } = stubTransport(fillFieldTree());
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.click(screen.getByLabelText("Edit fill"));
+    // Switching the type tab to Gradient dispatches onTypeChange("gradient").
+    fireEvent.click(screen.getByText("Gradient"));
+    const change = dispatched.find((e) => e.nodeId === 1 && e.name === "onTypeChange");
+    expect(change).toBeTruthy();
+    expect(change?.args[0]).toBe("gradient");
+  });
+
+  /** A `fillField` whose active type is `gradient` (so the gradient body renders). */
+  const gradientFillFieldTree = (): PanelTree => {
+    const raw = JSON.parse(JSON.stringify(fillFieldTree())) as {
+      root: { children: { props: { backgroundType: string } }[] };
+    };
+    raw.root.children[0]!.props.backgroundType = "gradient";
+    return decodeOrThrow(raw);
+  };
+
+  test("fillField consolidates a stop color change into a whole-gradient onGradientChange", () => {
+    const { transport, dispatched } = stubTransport(gradientFillFieldTree());
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.click(screen.getByLabelText("Edit fill"));
+    // The gradient tab renders a per-stop ColorInput with an inline hex field;
+    // typing a new hex fires the composite's onStopColorChange, which the host
+    // view consolidates into a single onGradientChange carrying the WHOLE rebuilt
+    // stops array (per-stop events are NOT on the wire).
+    const hexInputs = screen.getAllByLabelText("Hex color code");
+    fireEvent.change(hexInputs[0]!, { target: { value: "112233" } });
+    const change = dispatched.find((e) => e.nodeId === 1 && e.name === "onGradientChange");
+    expect(change).toBeTruthy();
+    const nextGradient = change?.args[0] as { stops: { color: string; position: number }[] };
+    // Two stops survive the rebuild (the regression this consolidation guards).
+    expect(nextGradient.stops).toHaveLength(2);
+    expect(nextGradient.stops[0]!.color).toContain("17, 34, 51");
+    // No granular stop event ever crosses the wire.
+    expect(dispatched.some((e) => e.name === "onStopColorChange")).toBe(false);
+  });
+
+  test("fillField add-stop consolidates into an onGradientChange appending a stop", () => {
+    const { transport, dispatched } = stubTransport(gradientFillFieldTree());
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.click(screen.getByLabelText("Edit fill"));
+    // The gradient tab's "Add stop" button appends a stop via the host view's
+    // consolidation → one onGradientChange with THREE stops.
+    fireEvent.click(screen.getByLabelText("Add stop"));
+    const change = dispatched.find((e) => e.nodeId === 1 && e.name === "onGradientChange");
+    expect(change).toBeTruthy();
+    const next = change?.args[0] as { stops: { position: number }[] };
+    expect(next.stops).toHaveLength(3);
+    expect(dispatched.some((e) => e.name === "onAddStop")).toBe(false);
+  });
+
+  test("fillField remove-stop honors the ≤2 guard (disabled, no dispatch at two stops)", () => {
+    const { transport, dispatched } = stubTransport(gradientFillFieldTree());
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.click(screen.getByLabelText("Edit fill"));
+    // With exactly two stops, every per-stop remove button is disabled (the old
+    // section's `≤2` guard, replicated host-local) — clicking dispatches nothing.
+    const removeButtons = screen.getAllByLabelText("Remove stop");
+    expect(removeButtons).toHaveLength(2);
+    for (const button of removeButtons) expect((button as HTMLButtonElement).disabled).toBe(true);
+    fireEvent.click(removeButtons[0]!);
+    expect(dispatched.some((e) => e.name === "onGradientChange")).toBe(false);
+    expect(dispatched.some((e) => e.name === "onRemoveStop")).toBe(false);
+  });
+
+  test("fillField remove-stop above the guard consolidates into onGradientChange", () => {
+    // A three-stop gradient: removing one drops back to two via a single
+    // whole-gradient onGradientChange.
+    const raw = JSON.parse(JSON.stringify(fillFieldTree())) as {
+      root: { children: { props: { backgroundType: string; gradient: { stops: unknown[] } } }[] };
+    };
+    const node = raw.root.children[0]!;
+    node.props.backgroundType = "gradient";
+    node.props.gradient.stops = [
+      { color: "rgba(0,0,0,1)", position: 0 },
+      { color: "rgba(128,128,128,1)", position: 0.5 },
+      { color: "rgba(255,255,255,1)", position: 1 },
+    ];
+    const { transport, dispatched } = stubTransport(decodeOrThrow(raw));
+    renderPanel(<PanelTreeView transport={transport} />);
+    fireEvent.click(screen.getByLabelText("Edit fill"));
+    const removeButtons = screen.getAllByLabelText("Remove stop");
+    expect(removeButtons).toHaveLength(3);
+    for (const button of removeButtons) expect((button as HTMLButtonElement).disabled).toBe(false);
+    fireEvent.click(removeButtons[1]!);
+    const change = dispatched.find((e) => e.nodeId === 1 && e.name === "onGradientChange");
+    expect(change).toBeTruthy();
+    const next = change?.args[0] as { stops: { position: number }[] };
+    expect(next.stops).toHaveLength(2);
+    expect(next.stops.map((s) => s.position)).toEqual([0, 1]);
+  });
+});
+
+describe("host-renderer — layout parity fixes", () => {
+  /** A `panel` root wrapping `children`, decoded through the host gate. */
+  const treeWithChildren = (children: unknown[]): PanelTree =>
+    decodeOrThrow({
+      version: PANEL_TREE_VERSION,
+      root: { type: "panel", id: 0, props: {}, events: [], children },
+    });
+
+  test("A1: a toggleGroup does NOT get a `w-full` class (sizes to content)", () => {
+    // A fillRule-style group sitting in a `justify-between` row must stay
+    // content-sized (`w-fit`, the kit default) so the row's `−` button keeps its
+    // gap — the legacy sections never set `w-full` on the group itself.
+    const tree = treeWithChildren([
+      {
+        type: "row",
+        id: 1,
+        props: { justify: "between" },
+        events: [],
+        children: [
+          {
+            type: "toggleGroup",
+            id: 2,
+            props: {
+              value: "nonzero",
+              options: [
+                { value: "nonzero", label: "Nonzero" },
+                { value: "evenodd", label: "Even-odd" },
+              ],
+            },
+            events: ["onChange"],
+          },
+          { type: "button", id: 3, props: { icon: "minus", size: "icon-sm" }, events: ["onClick"] },
+        ],
+      },
+    ]);
+    const { transport } = stubTransport(tree);
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    const group = container.querySelector('[data-slot="toggle-group"]')!;
+    expect(group).toBeTruthy();
+    // The group is content-sized: `w-fit` from the kit, no `w-full` override.
+    expect(group.classList.contains("w-full")).toBe(false);
+    expect(group.classList.contains("w-fit")).toBe(true);
+    // Items keep `flex-1`, byte-matching the old segmented-control markup.
+    const items = container.querySelectorAll('[data-slot="toggle-group-item"]');
+    expect(items.length).toBe(2);
+    for (const item of items) expect(item.classList.contains("flex-1")).toBe(true);
+  });
+
+  test("A2: a section whose only child is sectionActions renders no content container", () => {
+    // The enable `+` button lives in the header via `sectionActions`; with no body
+    // children the section must render NO `PanelSectionContent` (its `px-4 pb-4`
+    // container would otherwise add ~16px of dead space).
+    const tree = treeWithChildren([
+      {
+        type: "section",
+        id: 1,
+        props: { title: "Border" },
+        events: [],
+        children: [
+          {
+            type: "sectionActions",
+            id: 2,
+            props: {},
+            events: [],
+            children: [
+              { type: "button", id: 3, props: { icon: "plus", size: "icon-sm" }, events: ["onClick"] },
+            ],
+          },
+        ],
+      },
+    ]);
+    const { transport } = stubTransport(tree);
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    // The header + its action button render…
+    expect(screen.getByText("Border")).toBeTruthy();
+    expect(container.querySelector("button")).toBeTruthy();
+    // …but the content container (`px-4 pb-4` from PanelSectionContent) does not.
+    expect(container.querySelector(".pb-4.px-4, .px-4.pb-4")).toBeNull();
+  });
+
+  test("A2: a section WITH body children still renders the content container", () => {
+    const tree = treeWithChildren([
+      {
+        type: "section",
+        id: 1,
+        props: { title: "Fill" },
+        events: [],
+        children: [
+          {
+            type: "sectionActions",
+            id: 2,
+            props: {},
+            events: [],
+            children: [
+              { type: "button", id: 3, props: { icon: "minus", size: "icon-sm" }, events: ["onClick"] },
+            ],
+          },
+          { type: "text", id: 4, props: { content: "Body" }, events: [] },
+        ],
+      },
+    ]);
+    const { transport } = stubTransport(tree);
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    expect(screen.getByText("Body")).toBeTruthy();
+    expect(container.querySelector(".px-4.pb-4, .pb-4.px-4")).toBeTruthy();
+  });
+});
+
+describe("host-renderer — image url scheme allowlist", () => {
+  const treeWith = (nodeType: "swatch" | "imageField", url: string): PanelTree => {
+    const props =
+      nodeType === "swatch"
+        ? { color: "rgba(0,0,0,1)", imageUrl: url }
+        : { url, resizeMode: "cover" };
+    const raw = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: nodeType,
+            id: 1,
+            props,
+            events: nodeType === "imageField" ? ["onPick", "onResizeModeChange", "onClear"] : [],
+          },
+        ],
+      },
+    };
+    return decodeOrThrow(raw);
+  };
+
+  test("rejects a javascript: url on swatch (renders no image)", () => {
+    const { transport } = stubTransport(treeWith("swatch", "javascript:alert(1)"));
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    expect(container.querySelector("img")).toBeNull();
+  });
+
+  test("rejects a http: (non-https) url on imageField (renders no image)", () => {
+    const { transport } = stubTransport(treeWith("imageField", "http://evil.test/x.png"));
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    expect(container.querySelector("img")).toBeNull();
+  });
+
+  test("accepts an https: image url on swatch (renders the image)", () => {
+    const { transport } = stubTransport(treeWith("swatch", "https://cdn.test/x.png"));
+    const { container } = renderPanel(<PanelTreeView transport={transport} />);
+    expect(container.querySelector("img")).toBeTruthy();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx
new file mode 100644
index 000000000..47ba6f750
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx
@@ -0,0 +1,1144 @@
+"use client";
+
+/**
+ * Renders a decoded, host-trusted {@link PanelTree} with real kit components.
+ *
+ * {@link PanelTreeView} subscribes to a {@link PanelTransport} via
+ * `useSyncExternalStore` and renders its snapshot: `loading` → a skeleton,
+ * `error` → the error chrome (message + optional Restart), `ready` → the
+ * recursive {@link PanelNodeView} over the tree root.
+ *
+ * {@link PanelNodeView} is the wire→host bridge: it maps each node's `type` to a
+ * kit component and adapts the validated wire props/events onto that component's
+ * concrete signature. Event props are created ONLY for names present in
+ * `node.events`; each dispatches back through `transport.dispatch(...)`. Every
+ * string renders as React text — there is NO `dangerouslySetInnerHTML` anywhere,
+ * and image URLs are scheme-allowlisted before they reach a DOM attribute.
+ */
+import {
+  AlertDialog,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  Slider,
+  Switch,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import type { IconName } from "@voidhash/paywalls/schema";
+import { RotateCwIcon } from "lucide-react";
+import {
+  Fragment,
+  type ReactNode,
+  useCallback,
+  useEffect,
+  useMemo,
+  useState,
+  useSyncExternalStore,
+} from "react";
+
+import type {
+  ComponentBoundAction,
+  VariableType,
+  VariableTypeKey,
+} from "@voidhash/mimic-schema";
+
+import {
+  PanelCallout,
+  PanelColumn,
+  PanelField,
+  PanelRow,
+  PanelText,
+} from "../panel-kit/chrome";
+import { ActionEditorField } from "../panel-kit/action-editor-field";
+import { VariableBindingField } from "../panel-kit/variable-binding-field";
+import { ProductInput } from "../components/variables/inputs/product-input";
+import type {
+  LabeledVariable,
+  VariableInputValue,
+} from "../components/variables/types";
+import { FlexAlignmentInput } from "../panel-kit/alignment-grid";
+import { ColorInput } from "../panel-kit/color-input";
+import { ColorPickerContent } from "../panel-kit/color-picker/color-picker-content";
+import { ColorSwatch } from "../panel-kit/color-picker/color-swatch";
+import { rgbaToHexOpacity } from "../panel-kit/color-picker/color-utils";
+import {
+  DimensionFieldView,
+  type DimensionAxis,
+  type DimensionState,
+} from "../panel-kit/dimension-field";
+import { FillField } from "../panel-kit/fill-field";
+import { nextStopPosition } from "../panels/right-panel/utils/gradient-stops";
+import { GradientStopBar } from "../panel-kit/gradient-stop-bar";
+import { ImageField } from "../panel-kit/image-field";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+  PanelSubSectionTitle,
+} from "../panel-kit/panel-section";
+import { OverrideResetAffordance } from "../panel-kit/reset-affordance";
+import { SelectInput } from "../panel-kit/select-input";
+import { TextInput } from "../panel-kit/text-input";
+import type {
+  BackgroundGradient,
+  BackgroundImage,
+  BackgroundType,
+} from "../state/actions/features/fill-style-actions";
+import { renderPanelIcon } from "./icon-registry";
+import type { PanelGestureController } from "./gesture-controller";
+import type { PanelNode } from "./schema";
+import type { PanelTransport } from "./transport";
+
+/**
+ * Optional per-render seams the host supplies. `expandPropField` /
+ * `expandDefaultProps` are provided by the component-panel slot in Phase 3 (a
+ * `propField`/`defaultProps` node expands to the real host prop editor there);
+ * when absent they render nothing (with a dev warning). `gestures` routes each
+ * node's props through gesture-local echo.
+ */
+export interface PanelRenderContext {
+  /** Expands a `propField` node to the host's real prop-row editor (Phase 3). */
+  expandPropField?: (name: string) => ReactNode;
+  /** Expands a `defaultProps` node to the host's manifest-driven prop rows (Phase 3). */
+  expandDefaultProps?: (exclude: readonly string[]) => ReactNode;
+  /** Gesture-local echo controller; freezes the active gesture node's value props. */
+  gestures?: PanelGestureController;
+}
+
+const isDev = import.meta.env.DEV;
+
+const devWarn = (message: string): void => {
+  if (isDev) {
+    // eslint-disable-next-line no-console
+    console.warn(`[panel-runtime] ${message}`);
+  }
+};
+
+/**
+ * Fallbacks for a `fillField` whose gradient/image props are absent or `null`.
+ * The host `FillField` composite requires non-null `gradient`/`image`; a
+ * definition that renders a solid fill still carries a placeholder gradient so
+ * the gradient tab has something to show if the user switches to it.
+ */
+const EMPTY_GRADIENT: BackgroundGradient = {
+  kind: "linear",
+  startX: 0.5,
+  startY: 0,
+  endX: 0.5,
+  endY: 1,
+  stops: [
+    { color: "rgba(255, 255, 255, 1)", position: 0 },
+    { color: "rgba(255, 255, 255, 0)", position: 1 },
+  ],
+};
+const EMPTY_IMAGE: BackgroundImage = { url: "", resizeMode: "cover" };
+
+// =============================================================================
+// Value helpers
+// =============================================================================
+
+const asString = (value: unknown): string | undefined =>
+  typeof value === "string" ? value : undefined;
+const asNumber = (value: unknown): number | undefined =>
+  typeof value === "number" ? value : undefined;
+const asBool = (value: unknown): boolean | undefined =>
+  typeof value === "boolean" ? value : undefined;
+const asIcon = (value: unknown): IconName | undefined =>
+  typeof value === "string" ? (value as IconName) : undefined;
+
+/** Options passed to `selectField`/`toggleGroup`/`menu`. */
+interface WireOption {
+  value: string;
+  label?: string;
+  icon?: IconName;
+  disabled?: boolean;
+}
+
+const asOptions = (value: unknown): WireOption[] =>
+  Array.isArray(value) ? (value as WireOption[]) : [];
+
+/**
+ * Scheme allowlist for any URL that reaches a DOM attribute (image `src`, CSS
+ * `url(...)`). Only `https:`, `blob:`, and `data:image/` are honored; anything
+ * else (including `javascript:`) renders no image.
+ */
+const isAllowedImageUrl = (url: string): boolean => {
+  if (url.startsWith("https:")) return true;
+  if (url.startsWith("blob:")) return true;
+  if (url.startsWith("data:image/")) return true;
+  return false;
+};
+
+const safeImageUrl = (url: string | undefined): string | undefined =>
+  url && isAllowedImageUrl(url) ? url : undefined;
+
+/**
+ * Builds a handler that dispatches `name` for `nodeId` — but ONLY if `name` is in
+ * the node's event allowlist. Returns `undefined` otherwise, so the kit prop is
+ * simply omitted (no dead handlers cross the boundary).
+ */
+const eventHandler = (
+  transport: PanelTransport,
+  node: PanelNode,
+  name: string,
+): ((...args: unknown[]) => void) | undefined => {
+  if (!node.events.includes(name)) return undefined;
+  return (...args: unknown[]) => {
+    transport.dispatch({ nodeId: node.id, name, args });
+  };
+};
+
+// =============================================================================
+// Children
+// =============================================================================
+
+const renderChildren = (
+  children: readonly PanelNode[] | undefined,
+  transport: PanelTransport,
+  ctx: PanelRenderContext,
+): ReactNode =>
+  children?.map((child) => (
+    <PanelNodeView ctx={ctx} key={child.id} node={child} transport={transport} />
+  ));
+
+// =============================================================================
+// Per-type adapters
+// =============================================================================
+
+/** The gradient stop shape the wire carries (id-keyed). */
+interface WireGradientStop {
+  id: number;
+  position: number;
+  color: string;
+}
+
+const renderNode = (
+  node: PanelNode,
+  props: { readonly [key: string]: unknown },
+  transport: PanelTransport,
+  ctx: PanelRenderContext,
+): ReactNode => {
+  const children = renderChildren(node.children, transport, ctx);
+
+  switch (node.type) {
+    // ── Chrome / layout ──────────────────────────────────────────────────────
+    case "panel":
+      return <>{children}</>;
+
+    case "section": {
+      const onToggle = eventHandler(transport, node, "onToggle");
+      // A `sectionActions` child renders in the section HEADER (a per-section
+      // affordance like the fill/stroke enable +/− button), mirroring the legacy
+      // sections' `PanelSectionHeaderActions`. It is hoisted out of the content
+      // flow so the remaining children stay in the body; when a section carries
+      // both an `onToggle` toggle and `sectionActions`, both render in the header.
+      const actionsChild = node.children?.find((child) => child.type === "sectionActions");
+      const bodyNodes = node.children?.filter((child) => child.type !== "sectionActions") ?? [];
+      const bodyChildren = renderChildren(bodyNodes, transport, ctx);
+      const headerActions = actionsChild
+        ? renderChildren(actionsChild.children, transport, ctx)
+        : null;
+      const hasHeader =
+        asString(props.title) !== undefined ||
+        node.events.includes("onToggle") ||
+        actionsChild !== undefined;
+      return (
+        <PanelSection>
+          {hasHeader && (
+            <PanelSectionHeader>
+              <PanelSectionTitle>{asString(props.title) ?? ""}</PanelSectionTitle>
+              {(onToggle || headerActions) && (
+                <PanelSectionHeaderActions>
+                  {onToggle && (
+                    <Button
+                      onClick={() => onToggle(!(asBool(props.defaultCollapsed) ?? false))}
+                      size="icon-sm"
+                      variant="ghost"
+                    >
+                      {renderPanelIcon("chevronDown", "size-3.5")}
+                    </Button>
+                  )}
+                  {headerActions}
+                </PanelSectionHeaderActions>
+              )}
+            </PanelSectionHeader>
+          )}
+          {/* Skip the content container entirely when every child was hoisted to
+              the header (a section whose only child is `sectionActions`) — the
+              legacy sections gate their `PanelSectionContent` on having body
+              content, so an empty div would add ~16px of dead vertical space. */}
+          {bodyNodes.length > 0 && <PanelSectionContent>{bodyChildren}</PanelSectionContent>}
+        </PanelSection>
+      );
+    }
+
+    // A top-level (non-section-header) `sectionActions` still renders its own
+    // header-actions row; inside a `section` it is hoisted into the header above.
+    case "sectionActions":
+      return <PanelSectionHeaderActions>{children}</PanelSectionHeaderActions>;
+
+    case "subsection":
+      return (
+        <PanelSubSection>
+          {asString(props.title) !== undefined && (
+            <PanelSubSectionTitle>{asString(props.title)}</PanelSubSectionTitle>
+          )}
+          <PanelSubSectionContent>{children}</PanelSubSectionContent>
+        </PanelSubSection>
+      );
+
+    case "row":
+      return (
+        <PanelRow
+          align={asString(props.align) as never}
+          justify={asString(props.justify) as never}
+        >
+          {children}
+        </PanelRow>
+      );
+
+    case "column":
+      return <PanelColumn align={asString(props.align) as never}>{children}</PanelColumn>;
+
+    case "field":
+      return (
+        <PanelField
+          icon={props.icon ? renderPanelIcon(asIcon(props.icon)!, "size-3.5") : undefined}
+          label={asString(props.label) ?? ""}
+        >
+          {children}
+        </PanelField>
+      );
+
+    case "text":
+      return (
+        <PanelText
+          content={asString(props.content) ?? ""}
+          tone={asString(props.tone) === "muted" ? "muted" : "default"}
+          variant={asString(props.variant) === "label" ? "label" : "body"}
+        />
+      );
+
+    case "callout": {
+      const tone = asString(props.tone);
+      return (
+        <PanelCallout
+          message={asString(props.message) ?? ""}
+          tone={tone === "warning" ? "warning" : tone === "error" ? "danger" : "info"}
+        />
+      );
+    }
+
+    // ── Popover (composed Radix) ───────────────────────────────────────────────
+    case "popover": {
+      const onOpenChange = eventHandler(transport, node, "onOpenChange");
+      const open = asBool(props.open);
+      return (
+        <Popover
+          onOpenChange={onOpenChange ? (next) => onOpenChange(next) : undefined}
+          open={open}
+        >
+          {children}
+        </Popover>
+      );
+    }
+
+    case "popoverTrigger":
+      return <PopoverTrigger asChild>{children}</PopoverTrigger>;
+
+    case "popoverContent":
+      return (
+        <PopoverContent
+          align={(asString(props.align) as "start" | "center" | "end" | undefined) ?? "start"}
+          side={asString(props.side) as never}
+        >
+          {children}
+        </PopoverContent>
+      );
+
+    // ── Menu (composed Radix DropdownMenu) ─────────────────────────────────────
+    case "menu": {
+      const onSelect = eventHandler(transport, node, "onSelect");
+      const items = asOptions(props.items);
+      return (
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button size="icon-sm" variant="ghost">
+              {renderPanelIcon("chevronDown", "size-3.5")}
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent
+            align={(asString(props.align) as "start" | "center" | "end" | undefined) ?? "end"}
+          >
+            {items.map((item) => (
+              <DropdownMenuItem
+                disabled={item.disabled}
+                key={item.value}
+                onSelect={() => onSelect?.(item.value)}
+              >
+                {item.icon ? renderPanelIcon(item.icon, "mr-2 size-3.5") : null}
+                {item.label ?? item.value}
+              </DropdownMenuItem>
+            ))}
+          </DropdownMenuContent>
+        </DropdownMenu>
+      );
+    }
+
+    // ── Controls ───────────────────────────────────────────────────────────────
+    case "textField": {
+      const onChange = eventHandler(transport, node, "onChange");
+      const onCommit = eventHandler(transport, node, "onCommit");
+      const onTrailingSelect = eventHandler(transport, node, "onTrailingSelect");
+      const rawValue = props.value;
+      const value =
+        rawValue === null || rawValue === undefined ? "" : String(rawValue);
+      const trailingMenu = props.trailingMenu as
+        | { items: WireOption[]; value?: string }
+        | undefined;
+      return (
+        <TextInput
+          disabled={asBool(props.disabled)}
+          icon={props.icon ? renderPanelIcon(asIcon(props.icon)!, "size-3.5") : undefined}
+          label={asString(props.placeholder) ?? "Value"}
+          maxValue={asNumber(props.max)}
+          minValue={asNumber(props.min)}
+          mixed={asBool(props.mixed)}
+          onChange={onChange ? (next) => onChange(next) : () => {}}
+          onCommit={onCommit ? () => onCommit(value) : undefined}
+          type={asString(props.kind) === "number" ? "number" : "text"}
+          typeNumberStepIncrement={asNumber(props.step) ?? 1}
+          trailing={
+            trailingMenu && onTrailingSelect ? (
+              <DropdownMenu>
+                <DropdownMenuTrigger asChild>
+                  <Button size="sm" variant="secondary">
+                    {renderPanelIcon("chevronDown", "size-3.5")}
+                  </Button>
+                </DropdownMenuTrigger>
+                <DropdownMenuContent>
+                  {trailingMenu.items.map((item) => (
+                    <DropdownMenuItem
+                      key={item.value}
+                      onSelect={() => onTrailingSelect(item.value)}
+                    >
+                      {item.label ?? item.value}
+                    </DropdownMenuItem>
+                  ))}
+                </DropdownMenuContent>
+              </DropdownMenu>
+            ) : undefined
+          }
+          value={value}
+        />
+      );
+    }
+
+    case "selectField": {
+      const onChange = eventHandler(transport, node, "onChange");
+      const options = asOptions(props.options).map((o) => ({
+        label: o.label ?? o.value,
+        value: o.value,
+      }));
+      return (
+        <SelectInput
+          disabled={asBool(props.disabled)}
+          label={asString(props.placeholder) ?? "Select"}
+          mixed={asBool(props.mixed)}
+          onChange={onChange ? (next) => onChange(next) : () => {}}
+          options={options}
+          placeholder={asString(props.placeholder)}
+          value={asString(props.value) ?? ""}
+        />
+      );
+    }
+
+    case "toggleGroup": {
+      const onChange = eventHandler(transport, node, "onChange");
+      const options = asOptions(props.options);
+      const mixed = asBool(props.mixed);
+      return (
+        // The group sizes to its content (`w-fit`, the kit default) — the legacy
+        // sections NEVER set `w-full` on the group itself. A fillRule group sitting
+        // in a `justify-between` row must stay content-sized so the row's `−`
+        // button keeps its gap; block-level groups (stroke cap/join, text align)
+        // fill their container regardless. Items keep `flex-1` to divide the width
+        // evenly WHEN the group is stretched by its parent, byte-matching the old
+        // segmented-control markup.
+        <ToggleGroup
+          disabled={asBool(props.disabled)}
+          onValueChange={onChange ? (next) => next && onChange(next) : undefined}
+          size="sm"
+          type="single"
+          value={mixed ? "" : (asString(props.value) ?? "")}
+          variant="outline"
+        >
+          {/* Items stretch to equal width (`flex-1`), matching every designer
+              toggle group's segmented-control layout. */}
+          {options.map((option) => (
+            <ToggleGroupItem className="flex-1" key={option.value} size="sm" value={option.value}>
+              {option.icon ? renderPanelIcon(option.icon, "size-3.5") : (option.label ?? option.value)}
+            </ToggleGroupItem>
+          ))}
+        </ToggleGroup>
+      );
+    }
+
+    case "switchField": {
+      const onChange = eventHandler(transport, node, "onChange");
+      return (
+        <Switch
+          checked={asBool(props.checked) ?? false}
+          disabled={asBool(props.disabled)}
+          onCheckedChange={onChange ? (next) => onChange(next) : undefined}
+        />
+      );
+    }
+
+    case "button": {
+      const onClick = eventHandler(transport, node, "onClick");
+      return (
+        <Button
+          disabled={asBool(props.disabled)}
+          onClick={onClick ? () => onClick() : undefined}
+          size={(asString(props.size) as never) ?? "sm"}
+          variant={(asString(props.variant) as never) ?? "secondary"}
+        >
+          {props.icon ? renderPanelIcon(asIcon(props.icon)!, "size-3.5") : null}
+          {asString(props.label)}
+        </Button>
+      );
+    }
+
+    case "sliderField": {
+      const onChange = eventHandler(transport, node, "onChange");
+      const onCommit = eventHandler(transport, node, "onCommit");
+      const value = asNumber(props.value) ?? 0;
+      return (
+        <Slider
+          disabled={asBool(props.disabled)}
+          max={asNumber(props.max) ?? 100}
+          min={asNumber(props.min) ?? 0}
+          onValueChange={onChange ? ([next]) => next !== undefined && onChange(next) : undefined}
+          onValueCommit={onCommit ? ([next]) => next !== undefined && onCommit(next) : undefined}
+          step={asNumber(props.step) ?? 1}
+          value={[value]}
+        />
+      );
+    }
+
+    case "resetAffordance": {
+      const onReset = eventHandler(transport, node, "onReset");
+      return (
+        <OverrideResetAffordance
+          label={asString(props.label) ?? "value"}
+          onReset={onReset ? () => onReset() : () => {}}
+          show={asBool(props.show) ?? false}
+        >
+          {children}
+        </OverrideResetAffordance>
+      );
+    }
+
+    // ── Composites ───────────────────────────────────────────────────────────
+    case "colorField": {
+      const onChange = eventHandler(transport, node, "onChange");
+      const onDragStart = eventHandler(transport, node, "onDragStart");
+      const onCommit = eventHandler(transport, node, "onCommit");
+      const onDiscard = eventHandler(transport, node, "onDiscard");
+      const value = asString(props.value) ?? "";
+      return (
+        <ColorInput
+          mixed={asBool(props.mixed)}
+          mixedLabel={asString(props.mixedLabel)}
+          onChange={onChange ? (next) => onChange(next) : () => {}}
+          onCommit={onCommit ? () => onCommit(value) : undefined}
+          onDiscard={onDiscard ? () => onDiscard() : undefined}
+          onDragStart={onDragStart ? () => onDragStart() : undefined}
+          value={value}
+        />
+      );
+    }
+
+    case "colorPicker": {
+      const onColorChange = eventHandler(transport, node, "onColorChange");
+      const onOpacityChange = eventHandler(transport, node, "onOpacityChange");
+      const onDragStart = eventHandler(transport, node, "onDragStart");
+      const onDragEnd = eventHandler(transport, node, "onDragEnd");
+      const onDiscard = eventHandler(transport, node, "onDiscard");
+      return (
+        <ColorPickerContent
+          color={asString(props.color) ?? "000000"}
+          onColorChange={onColorChange ? (next) => onColorChange(next) : () => {}}
+          onDiscard={onDiscard ? () => onDiscard() : undefined}
+          onDragEnd={onDragEnd ? () => onDragEnd() : undefined}
+          onDragStart={onDragStart ? () => onDragStart() : undefined}
+          onOpacityChange={onOpacityChange ? (next) => onOpacityChange(next) : () => {}}
+          opacity={asNumber(props.opacity) ?? 100}
+        />
+      );
+    }
+
+    case "gradientStops": {
+      const onSelect = eventHandler(transport, node, "onSelect");
+      const onMoveStop = eventHandler(transport, node, "onMoveStop");
+      const onAddStop = eventHandler(transport, node, "onAddStop");
+      const onDragStart = eventHandler(transport, node, "onDragStart");
+      const onDragEnd = eventHandler(transport, node, "onDragEnd");
+      const onDiscard = eventHandler(transport, node, "onDiscard");
+      const wireStops = (props.stops as WireGradientStop[] | undefined) ?? [];
+      // Map id-keyed wire stops ↔ the component's index-based shape; translate
+      // index callbacks back to ids on dispatch.
+      const barStops = wireStops.map((stop) => ({ color: stop.color, position: stop.position }));
+      const selectedStopId = props.selectedStopId as number | null | undefined;
+      const selectedIndex =
+        selectedStopId == null
+          ? null
+          : (() => {
+              const idx = wireStops.findIndex((stop) => stop.id === selectedStopId);
+              return idx === -1 ? null : idx;
+            })();
+      const idAt = (index: number): number | undefined => wireStops[index]?.id;
+      return (
+        <GradientStopBar
+          onAddStop={onAddStop ? (position) => onAddStop(position) : () => {}}
+          onDiscard={onDiscard ? () => onDiscard() : undefined}
+          onDragEnd={onDragEnd ? () => onDragEnd() : undefined}
+          onDragStart={onDragStart ? () => onDragStart() : undefined}
+          onPositionChange={(index, position) => {
+            const id = idAt(index);
+            if (id !== undefined) onMoveStop?.(id, position);
+          }}
+          onSelect={(index) => {
+            const id = idAt(index);
+            if (id !== undefined) onSelect?.(id);
+          }}
+          selectedIndex={selectedIndex}
+          stops={barStops}
+        />
+      );
+    }
+
+    case "swatch": {
+      const imageUrl = safeImageUrl(asString(props.imageUrl) ?? undefined);
+      if (imageUrl) {
+        return (
+          <span className="relative block size-5 shrink-0 overflow-hidden rounded-[3px]">
+            <img
+              alt=""
+              className="absolute inset-0 size-full object-cover"
+              loading="lazy"
+              src={imageUrl}
+            />
+          </span>
+        );
+      }
+      const { hex, opacity } = rgbaToHexOpacity(asString(props.color) ?? "rgba(0,0,0,1)");
+      return <ColorSwatch color={hex} opacity={opacity} />;
+    }
+
+    case "imageField": {
+      const onPick = eventHandler(transport, node, "onPick");
+      const onResizeModeChange = eventHandler(transport, node, "onResizeModeChange");
+      const onClear = eventHandler(transport, node, "onClear");
+      return (
+        <ImageField
+          onClear={onClear ? () => onClear() : undefined}
+          onPick={onPick ? (url) => onPick(url) : undefined}
+          onResizeModeChange={
+            onResizeModeChange ? (mode) => onResizeModeChange(mode) : undefined
+          }
+          resizeMode={asString(props.resizeMode) as never}
+          url={safeImageUrl(asString(props.url) ?? undefined)}
+        />
+      );
+    }
+
+    case "alignmentGrid": {
+      const onChange = eventHandler(transport, node, "onChange");
+      // The host grid emits `{ alignItems, justifyContent }`; the definition
+      // writes both keys DIRECT (one undo). `mixed` is carried by the wire but the
+      // grid renders from the effective values (a mixed multi-selection still
+      // highlights the shared cell if any).
+      return (
+        <FlexAlignmentInput
+          alignItems={(asString(props.alignItems) as never) ?? "stretch"}
+          flexDirection={(asString(props.flexDirection) as never) ?? "row"}
+          justifyContent={(asString(props.justifyContent) as never) ?? "flex-start"}
+          onChange={
+            onChange ? (value) => onChange(value as unknown) : () => {}
+          }
+        />
+      );
+    }
+
+    case "dimensionField": {
+      const onChange = eventHandler(transport, node, "onChange");
+      const onCommit = eventHandler(transport, node, "onCommit");
+      const onModeChange = eventHandler(transport, node, "onModeChange");
+      const axis = (asString(props.axis) as DimensionAxis | undefined) ?? "width";
+      const mode = (asString(props.mode) as DimensionState | undefined) ?? "custom";
+      const value = asNumber(props.value) ?? 0;
+      const computed = asNumber(props.computed) ?? null;
+      return (
+        <DimensionFieldView
+          axis={axis}
+          computed={computed}
+          disabled={asBool(props.disabled)}
+          label={asString(props.label) ?? (axis === "width" ? "Width" : "Height")}
+          mixed={asBool(props.mixed)}
+          mode={mode}
+          onChange={onChange ? (next) => onChange(next) : () => {}}
+          onCommit={onCommit ? () => onCommit(value) : undefined}
+          onModeChange={onModeChange ? (next) => onModeChange(next) : () => {}}
+          value={value}
+        />
+      );
+    }
+
+    case "fillField":
+      // The composite is stateful (popover open + selected gradient stop) and its
+      // granular stop callbacks are consolidated into whole-gradient writes, so it
+      // renders through a dedicated host-local view rather than inline here. See
+      // {@link FillFieldNodeView} for the wire-event partition rationale.
+      return <FillFieldNodeView node={node} props={props} transport={transport} />;
+
+    case "variableField":
+      // The variable binding editor is an app-context composite (it reaches the
+      // shared VariableInput/VariableBindingField); its host-local view reduces
+      // the composite's single `onChange` into the wire node's `onBind`/`onUnbind`
+      // intents (a variable-reference binds, a literal unbinds).
+      return <VariableFieldNodeView node={node} props={props} transport={transport} />;
+
+    case "actionEditorField":
+      // The action editor needs the selection-scoped variable lists carried in the
+      // wire props (variables/productVariables/payloadFields); it renders through a
+      // host-local view over the shared ActionEditor.
+      return <ActionEditorFieldNodeView node={node} props={props} transport={transport} />;
+
+    case "productField":
+      // A literal product-value editor: the ProductInput combobox owns its own
+      // products react-query, so it renders through a host-local view that adapts
+      // the wire `productId`/`onChange(productId)` surface onto it.
+      return <ProductFieldNodeView node={node} props={props} transport={transport} />;
+
+    // ── Component-panel slot seams (Phase 3) ───────────────────────────────────
+    case "propField": {
+      const name = asString(props.name) ?? "";
+      if (ctx.expandPropField) return <>{ctx.expandPropField(name)}</>;
+      devWarn(`propField "${name}" rendered without an expandPropField seam`);
+      return null;
+    }
+
+    case "defaultProps": {
+      const exclude = Array.isArray(props.exclude) ? (props.exclude as string[]) : [];
+      if (ctx.expandDefaultProps) return <>{ctx.expandDefaultProps(exclude)}</>;
+      devWarn("defaultProps rendered without an expandDefaultProps seam");
+      return null;
+    }
+
+    default:
+      devWarn(`no renderer for node type "${node.type}"`);
+      return null;
+  }
+};
+
+// =============================================================================
+// fillField view
+// =============================================================================
+
+const rebuildStops = (stops: readonly { color: string; position: number }[]) =>
+  stops.map((stop) => ({ color: stop.color, position: stop.position }));
+
+/**
+ * Host-local view for a `fillField` node.
+ *
+ * The `fillField` composite exposes 15 event callbacks, but `PANEL_CAPS.
+ * eventsPerNode` is 8. Only the WRITE-bearing events cross the wire; the two
+ * pure-UI concerns — the editor popover's open state and the selected gradient
+ * stop — are held HOST-LOCAL here (a definition never persists them, so they
+ * never need to reach the store). The wire node therefore carries exactly these
+ * eight events:
+ *
+ *   onTypeChange, onColorChange, onGradientChange,
+ *   onImageUrlChange, onImageResizeModeChange,
+ *   onGestureStart, onCommit, onDiscard
+ *
+ * The composite's granular gradient-stop callbacks (`onStopColorChange`,
+ * `onStopPositionChange`, `onAddStop`, `onAddStopAt`, `onRemoveStop`) are
+ * CONSOLIDATED here: each rebuilds the entire stops array from the current
+ * gradient and dispatches ONE whole-gradient `onGradientChange` — the same
+ * whole-object write the legacy fill-section performed, just moved to the host
+ * boundary so the wire stays within the event cap. The `≤2` remove guard and the
+ * add-then-select selection update live here too, matching the old section.
+ */
+function FillFieldNodeView({
+  node,
+  props,
+  transport,
+}: {
+  node: PanelNode;
+  props: { readonly [key: string]: unknown };
+  transport: PanelTransport;
+}): ReactNode {
+  const onTypeChange = eventHandler(transport, node, "onTypeChange");
+  const onColorChange = eventHandler(transport, node, "onColorChange");
+  const onGradientChange = eventHandler(transport, node, "onGradientChange");
+  const onImageUrlChange = eventHandler(transport, node, "onImageUrlChange");
+  const onImageResizeModeChange = eventHandler(transport, node, "onImageResizeModeChange");
+  const onGestureStart = eventHandler(transport, node, "onGestureStart");
+  const onCommit = eventHandler(transport, node, "onCommit");
+  const onDiscard = eventHandler(transport, node, "onDiscard");
+
+  const gradient = (props.gradient as BackgroundGradient | null | undefined) ?? EMPTY_GRADIENT;
+  const image = (props.image as BackgroundImage | null | undefined) ?? EMPTY_IMAGE;
+  const backgroundType = (asString(props.backgroundType) as BackgroundType) ?? "solid";
+
+  const [open, setOpen] = useState(false);
+  const [selectedStopIndex, setSelectedStopIndex] = useState<number | null>(0);
+
+  const stopCount = gradient.stops.length;
+  // Keep the selected stop index within bounds as stops are added/removed —
+  // verbatim from the legacy fill-section's clamping effect.
+  useEffect(() => {
+    setSelectedStopIndex((prev) => {
+      if (stopCount === 0) return null;
+      if (prev === null) return 0;
+      return Math.min(prev, stopCount - 1);
+    });
+  }, [stopCount]);
+
+  const writeGradient = useCallback(
+    (next: BackgroundGradient) => {
+      onGradientChange?.(next);
+    },
+    [onGradientChange],
+  );
+
+  const handleStopColor = useCallback(
+    (index: number, color: string) => {
+      const stops = gradient.stops.map((stop, i) => (i === index ? { ...stop, color } : stop));
+      writeGradient({ ...gradient, stops: rebuildStops(stops) });
+    },
+    [gradient, writeGradient],
+  );
+
+  const handleStopPosition = useCallback(
+    (index: number, position: number) => {
+      const clamped = Math.min(1, Math.max(0, position));
+      const stops = gradient.stops.map((stop, i) =>
+        i === index ? { ...stop, position: clamped } : stop,
+      );
+      writeGradient({ ...gradient, stops: rebuildStops(stops) });
+    },
+    [gradient, writeGradient],
+  );
+
+  const handleAddStop = useCallback(() => {
+    const position = nextStopPosition(gradient.stops);
+    const lastColor = gradient.stops.at(-1)?.color ?? "rgba(255, 255, 255, 1)";
+    const stops = [...gradient.stops, { color: lastColor, position }].sort(
+      (a, b) => a.position - b.position,
+    );
+    writeGradient({ ...gradient, stops: rebuildStops(stops) });
+    setSelectedStopIndex(stops.findIndex((s) => s.position === position && s.color === lastColor));
+  }, [gradient, writeGradient]);
+
+  const handleAddStopAt = useCallback(
+    (position: number, color: string) => {
+      const clamped = Math.min(1, Math.max(0, position));
+      const stops = [...gradient.stops, { color, position: clamped }].sort(
+        (a, b) => a.position - b.position,
+      );
+      writeGradient({ ...gradient, stops: rebuildStops(stops) });
+      setSelectedStopIndex(stops.findIndex((s) => s.position === clamped && s.color === color));
+    },
+    [gradient, writeGradient],
+  );
+
+  const handleRemoveStop = useCallback(
+    (index: number) => {
+      if (gradient.stops.length <= 2) return;
+      const stops = gradient.stops.filter((_, i) => i !== index);
+      writeGradient({ ...gradient, stops: rebuildStops(stops) });
+    },
+    [gradient, writeGradient],
+  );
+
+  return (
+    <FillField
+      backgroundColor={asString(props.backgroundColor) ?? "rgba(0, 0, 0, 1)"}
+      backgroundType={backgroundType}
+      gradient={gradient}
+      image={image}
+      isTypeMixed={asBool(props.isTypeMixed) ?? false}
+      label={asString(props.label) ?? ""}
+      onAddStop={handleAddStop}
+      onAddStopAt={handleAddStopAt}
+      onColorChange={onColorChange ? (color) => onColorChange(color) : () => {}}
+      onCommit={onCommit ? () => onCommit() : () => {}}
+      onDiscard={onDiscard ? () => onDiscard() : () => {}}
+      onGestureStart={onGestureStart ? () => onGestureStart() : () => {}}
+      onGradientChange={writeGradient}
+      onImageResizeModeChange={
+        onImageResizeModeChange ? (mode) => onImageResizeModeChange(mode) : () => {}
+      }
+      onImageUrlChange={onImageUrlChange ? (url) => onImageUrlChange(url) : () => {}}
+      onOpenChange={setOpen}
+      onRemoveStop={handleRemoveStop}
+      onSelectStop={setSelectedStopIndex}
+      onStopColorChange={handleStopColor}
+      onStopPositionChange={handleStopPosition}
+      onTypeChange={onTypeChange ? (type) => onTypeChange(type) : () => {}}
+      open={open}
+      selectedStopIndex={selectedStopIndex}
+    />
+  );
+}
+
+// =============================================================================
+// variableField / actionEditorField / productField views
+// =============================================================================
+
+/** Coerces a wire prop into a `LabeledVariable[]` (already validated by the gate). */
+const asLabeledVariables = (value: unknown): LabeledVariable[] =>
+  Array.isArray(value) ? (value as LabeledVariable[]) : [];
+
+/**
+ * Host-local view for a `variableField` node.
+ *
+ * The wire node carries the currently-bound variable as flat props
+ * (`variableId`/`variableName`/`variableType`) plus `allowedKinds`, and the host
+ * composite {@link VariableBindingField} works over the shared VariableInput. The
+ * composite emits a single `onChange(VariableInputValue)`; this view REDUCES that
+ * to the wire node's addressable intents — a `variable-reference` result binds
+ * (`onBind` with the id), a `literal` result unbinds (`onUnbind`) — mirroring the
+ * wire contract's "host VariableInput collapses to one onChange" note. The
+ * available-variable list is not carried on this node (a single bound variable is
+ * reconstructed from the flat props), so the reference dropdown shows the bound
+ * variable only.
+ */
+function VariableFieldNodeView({
+  node,
+  props,
+  transport,
+}: {
+  node: PanelNode;
+  props: { readonly [key: string]: unknown };
+  transport: PanelTransport;
+}): ReactNode {
+  const onBind = eventHandler(transport, node, "onBind");
+  const onUnbind = eventHandler(transport, node, "onUnbind");
+
+  const variableId = asString(props.variableId);
+  const variableName = asString(props.variableName) ?? "";
+  const variableType = (asString(props.variableType) as VariableTypeKey | undefined) ?? "string";
+  const allowedKinds = Array.isArray(props.allowedKinds)
+    ? (props.allowedKinds as string[])
+    : [];
+  const expectedType = (allowedKinds[0] as VariableTypeKey | undefined) ?? undefined;
+
+  // Reconstruct the bound variable (if any) so the reference option renders with
+  // its name; the empty default literal seeds the literal editor otherwise.
+  const boundVariable: LabeledVariable | undefined = variableId
+    ? { id: variableId, name: variableName, value: { key: variableType, value: emptyLiteral(variableType).value } as VariableType }
+    : undefined;
+  const variables = boundVariable ? [boundVariable] : [];
+  const value: VariableInputValue = variableId
+    ? { type: "variable-reference", value: { id: variableId } }
+    : { type: "literal", value: emptyLiteral(variableType) };
+
+  return (
+    <VariableBindingField
+      expectedType={expectedType}
+      label={asString(props.label) ?? "Value"}
+      onChange={(next) => {
+        if (next.type === "variable-reference") {
+          onBind?.((next.value as { id: string }).id);
+        } else {
+          onUnbind?.();
+        }
+      }}
+      value={value}
+      variables={variables}
+    />
+  );
+}
+
+/** A zeroed literal for a variable type key (matches the type registry defaults). */
+function emptyLiteral(key: VariableTypeKey): VariableType {
+  switch (key) {
+    case "boolean":
+      return { key: "boolean", value: false };
+    case "number":
+      return { key: "number", value: 0 };
+    case "product":
+      return { key: "product", value: {} };
+    case "string":
+      return { key: "string", value: "" };
+  }
+}
+
+/**
+ * Host-local view for an `actionEditorField` node.
+ *
+ * The action editor is an app-context composite that requires the
+ * selection-scoped variable lists — carried on the wire node as serializable
+ * `variables` / `productVariables` and the optional `payloadFields`. This view
+ * feeds them (and the plain-JSON `value` action) to the shared
+ * {@link ActionEditorField}; `onChange` dispatches the whole edited action back.
+ */
+function ActionEditorFieldNodeView({
+  node,
+  props,
+  transport,
+}: {
+  node: PanelNode;
+  props: { readonly [key: string]: unknown };
+  transport: PanelTransport;
+}): ReactNode {
+  const onChange = eventHandler(transport, node, "onChange");
+  const value = (props.value ?? { type: "none" }) as ComponentBoundAction;
+  const variables = asLabeledVariables(props.variables);
+  const productVariables = asLabeledVariables(props.productVariables);
+  const payloadFields = Array.isArray(props.payloadFields)
+    ? (props.payloadFields as string[])
+    : undefined;
+  return (
+    <ActionEditorField
+      onChange={onChange ? (action) => onChange(action) : () => {}}
+      payloadFields={payloadFields}
+      productVariables={productVariables}
+      value={value}
+      variables={variables}
+    />
+  );
+}
+
+/**
+ * Host-local view for a `productField` node.
+ *
+ * The {@link ProductInput} combobox owns its own products react-query (resolving
+ * the org's products), so it can't be a pure wire prop mapping. This view adapts
+ * the wire `productId` / `onChange(productId)` surface onto it: a picked product
+ * dispatches its id (or `""` when cleared).
+ */
+function ProductFieldNodeView({
+  node,
+  props,
+  transport,
+}: {
+  node: PanelNode;
+  props: { readonly [key: string]: unknown };
+  transport: PanelTransport;
+}): ReactNode {
+  const onChange = eventHandler(transport, node, "onChange");
+  const productId = asString(props.productId) ?? null;
+  return (
+    <ProductInput
+      onChange={(next) => onChange?.(next.productId ?? "")}
+      value={{ productId }}
+    />
+  );
+}
+
+// =============================================================================
+// Node view
+// =============================================================================
+
+/**
+ * Renders one panel node. `key={node.id}` is set by the PARENT (in
+ * {@link renderChildren} / {@link PanelTreeView}), so identity is stable across
+ * re-emits. Props are routed through the gesture controller's echo filter (a
+ * no-op unless a gesture is active on this node).
+ */
+export function PanelNodeView({
+  node,
+  transport,
+  ctx,
+}: {
+  node: PanelNode;
+  transport: PanelTransport;
+  ctx: PanelRenderContext;
+}): ReactNode {
+  const props = ctx.gestures ? ctx.gestures.filterNodeProps(node) : node.props;
+  return <Fragment>{renderNode(node, props, transport, ctx)}</Fragment>;
+}
+
+// =============================================================================
+// Tree view
+// =============================================================================
+
+/** A neutral loading skeleton shown before the first tree emits. */
+function PanelSkeleton(): ReactNode {
+  return (
+    <div className="flex flex-col gap-2 px-4 py-3" aria-busy="true">
+      <div className="h-4 w-24 animate-pulse rounded bg-muted" />
+      <div className="h-7 w-full animate-pulse rounded bg-muted" />
+    </div>
+  );
+}
+
+/** The error chrome: a message and — when restartable — a Restart button. */
+function PanelErrorChrome({
+  message,
+  restartable,
+  onRestart,
+}: {
+  message: string;
+  restartable: boolean;
+  onRestart: () => void;
+}): ReactNode {
+  return (
+    <div className="flex flex-col gap-2 border-border border-b px-4 py-3">
+      <p className="text-destructive text-xs">{message}</p>
+      {restartable && (
+        <Button className="self-start" onClick={onRestart} size="sm" variant="secondary">
+          <RotateCwIcon className="size-3.5" />
+          Restart
+        </Button>
+      )}
+    </div>
+  );
+}
+
+/**
+ * Subscribes to a {@link PanelTransport} and renders its current snapshot. This
+ * is the single entry point the host mounts per panel session.
+ */
+export function PanelTreeView({
+  transport,
+  renderContext,
+}: {
+  transport: PanelTransport;
+  renderContext?: PanelRenderContext;
+}): ReactNode {
+  const subscribe = useCallback((cb: () => void) => transport.subscribe(cb), [transport]);
+  const getSnapshot = useCallback(() => transport.getSnapshot(), [transport]);
+  const snapshot = useSyncExternalStore(subscribe, getSnapshot, getSnapshot);
+  const ctx = useMemo<PanelRenderContext>(() => renderContext ?? {}, [renderContext]);
+
+  if (snapshot.status === "loading") {
+    return <PanelSkeleton />;
+  }
+  if (snapshot.status === "error") {
+    return (
+      <PanelErrorChrome
+        message={snapshot.message}
+        onRestart={() => transport.restart()}
+        restartable={snapshot.restartable}
+      />
+    );
+  }
+  return <PanelNodeView ctx={ctx} node={snapshot.tree.root} transport={transport} />;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/icon-registry.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/icon-registry.ts
new file mode 100644
index 000000000..f1dc0ff3d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/icon-registry.ts
@@ -0,0 +1,171 @@
+import type { IconName } from "@voidhash/paywalls/schema";
+import { cn } from "@voidhash/ui";
+import {
+  AlertTriangleIcon,
+  ArrowDownIcon,
+  ArrowRightIcon,
+  ArrowUpCircleIcon,
+  BetweenHorizontalStartIcon,
+  ChevronDownIcon,
+  ChevronRightIcon,
+  ChevronUpIcon,
+  CodeIcon,
+  ComponentIcon,
+  DiamondIcon,
+  ExternalLinkIcon,
+  EyeIcon,
+  FlipHorizontalIcon,
+  FullscreenIcon,
+  ImageIcon,
+  ImagePlusIcon,
+  InfoIcon,
+  MinusIcon,
+  MousePointerIcon,
+  PaintbrushIcon,
+  PanelBottomDashedIcon,
+  PanelLeftDashedIcon,
+  PanelLeftRightDashedIcon,
+  PanelRightDashedIcon,
+  PanelTopBottomDashedIcon,
+  PanelTopDashedIcon,
+  PencilIcon,
+  PercentIcon,
+  PipetteIcon,
+  PlusIcon,
+  Redo2Icon,
+  RotateCcwIcon,
+  RotateCwIcon,
+  SaveIcon,
+  ScanIcon,
+  SearchIcon,
+  SettingsIcon,
+  SquareDashedIcon,
+  SquareDashedTopSolidIcon,
+  SquareIcon,
+  SquareRoundCornerIcon,
+  TrashIcon,
+  TypeIcon,
+  Undo2Icon,
+  UserIcon,
+  UsersIcon,
+  VaultIcon,
+  XIcon,
+} from "lucide-react";
+import type { ComponentType, ReactNode } from "react";
+import { createElement } from "react";
+
+type LucideIcon = ComponentType<{ className?: string }>;
+
+/**
+ * The three panel letter glyphs (`w`, `h`, `a`) render as bold text spans, byte
+ * for byte matching how the width/height/typography inputs draw them today
+ * (`<div className="font-bold text-xs">W</div>`). The `className` from
+ * {@link renderPanelIcon} overrides the sizing so callers keep control of scale.
+ */
+function letterGlyph(letter: string): (className?: string) => ReactNode {
+  return (className) =>
+    createElement("div", { className: cn("font-bold text-xs", className) }, letter);
+}
+
+/**
+ * Registry of every {@link IconName} wire token → a renderer taking an optional
+ * `className`. Lucide tokens render their component; letter tokens (`w`/`h`/`a`)
+ * render the styled letter span; rotated/flipped variants apply the same
+ * transform classes the sections use (`SquareRoundCorner` corners,
+ * `SquareDashed` edges, `RotateCw`/`RotateCcw`/`FlipHorizontal`).
+ */
+export const PANEL_ICON_REGISTRY: Record<IconName, (className?: string) => ReactNode> = {
+  // Letter glyphs (width / height / typography letter icons).
+  w: letterGlyph("W"),
+  h: letterGlyph("H"),
+  a: letterGlyph("A"),
+
+  // Plain lucide tokens.
+  plus: (className) => createElement(PlusIcon as LucideIcon, { className }),
+  minus: (className) => createElement(MinusIcon as LucideIcon, { className }),
+  x: (className) => createElement(XIcon as LucideIcon, { className }),
+  trash: (className) => createElement(TrashIcon as LucideIcon, { className }),
+  pencil: (className) => createElement(PencilIcon as LucideIcon, { className }),
+  search: (className) => createElement(SearchIcon as LucideIcon, { className }),
+  settings: (className) => createElement(SettingsIcon as LucideIcon, { className }),
+  info: (className) => createElement(InfoIcon as LucideIcon, { className }),
+  alert: (className) => createElement(AlertTriangleIcon as LucideIcon, { className }),
+  image: (className) => createElement(ImageIcon as LucideIcon, { className }),
+  imagePlus: (className) => createElement(ImagePlusIcon as LucideIcon, { className }),
+  pipette: (className) => createElement(PipetteIcon as LucideIcon, { className }),
+  percent: (className) => createElement(PercentIcon as LucideIcon, { className }),
+  diamond: (className) => createElement(DiamondIcon as LucideIcon, { className }),
+  square: (className) => createElement(SquareIcon as LucideIcon, { className }),
+  squareDashed: (className) => createElement(SquareDashedIcon as LucideIcon, { className }),
+  squareRoundCorner: (className) =>
+    createElement(SquareRoundCornerIcon as LucideIcon, { className }),
+  // Rotated corner variants for the border-radius panel, byte-matching the
+  // transform classes the legacy section applied per corner (top-right is the
+  // plain `squareRoundCorner`).
+  squareRoundCornerTopLeft: (className) =>
+    createElement(SquareRoundCornerIcon as LucideIcon, { className: cn("-scale-x-100", className) }),
+  squareRoundCornerBottomLeft: (className) =>
+    createElement(SquareRoundCornerIcon as LucideIcon, { className: cn("rotate-180", className) }),
+  squareRoundCornerBottomRight: (className) =>
+    createElement(SquareRoundCornerIcon as LucideIcon, {
+      className: cn("rotate-180 -scale-x-100", className),
+    }),
+  // Per-side border-width variants for the border panel; the base token is the
+  // top edge (plain), the rest apply the section's per-side rotations.
+  squareDashedTopSolid: (className) =>
+    createElement(SquareDashedTopSolidIcon as LucideIcon, { className }),
+  squareDashedTopSolidLeft: (className) =>
+    createElement(SquareDashedTopSolidIcon as LucideIcon, { className: cn("-rotate-90", className) }),
+  squareDashedTopSolidRight: (className) =>
+    createElement(SquareDashedTopSolidIcon as LucideIcon, { className: cn("rotate-90", className) }),
+  squareDashedTopSolidBottom: (className) =>
+    createElement(SquareDashedTopSolidIcon as LucideIcon, { className: cn("rotate-180", className) }),
+  type: (className) => createElement(TypeIcon as LucideIcon, { className }),
+  component: (className) => createElement(ComponentIcon as LucideIcon, { className }),
+  code: (className) => createElement(CodeIcon as LucideIcon, { className }),
+  eye: (className) => createElement(EyeIcon as LucideIcon, { className }),
+  paintbrush: (className) => createElement(PaintbrushIcon as LucideIcon, { className }),
+  chevronDown: (className) => createElement(ChevronDownIcon as LucideIcon, { className }),
+  chevronRight: (className) => createElement(ChevronRightIcon as LucideIcon, { className }),
+  chevronUp: (className) => createElement(ChevronUpIcon as LucideIcon, { className }),
+  arrowDown: (className) => createElement(ArrowDownIcon as LucideIcon, { className }),
+  arrowRight: (className) => createElement(ArrowRightIcon as LucideIcon, { className }),
+  arrowUpCircle: (className) => createElement(ArrowUpCircleIcon as LucideIcon, { className }),
+  rotateCw: (className) => createElement(RotateCwIcon as LucideIcon, { className }),
+  rotateCcw: (className) => createElement(RotateCcwIcon as LucideIcon, { className }),
+  flipHorizontal: (className) => createElement(FlipHorizontalIcon as LucideIcon, { className }),
+  undo: (className) => createElement(Undo2Icon as LucideIcon, { className }),
+  redo: (className) => createElement(Redo2Icon as LucideIcon, { className }),
+  save: (className) => createElement(SaveIcon as LucideIcon, { className }),
+  fullscreen: (className) => createElement(FullscreenIcon as LucideIcon, { className }),
+  scan: (className) => createElement(ScanIcon as LucideIcon, { className }),
+  vault: (className) => createElement(VaultIcon as LucideIcon, { className }),
+  panelLeftDashed: (className) => createElement(PanelLeftDashedIcon as LucideIcon, { className }),
+  panelRightDashed: (className) =>
+    createElement(PanelRightDashedIcon as LucideIcon, { className }),
+  panelTopDashed: (className) => createElement(PanelTopDashedIcon as LucideIcon, { className }),
+  panelBottomDashed: (className) =>
+    createElement(PanelBottomDashedIcon as LucideIcon, { className }),
+  // Uniform-padding axis glyphs (horizontal / vertical) and the layout-gap icon,
+  // byte-matching the tokens the legacy flex-layout section drew for its
+  // padding-horizontal / padding-vertical / gap inputs.
+  panelLeftRightDashed: (className) =>
+    createElement(PanelLeftRightDashedIcon as LucideIcon, { className }),
+  panelTopBottomDashed: (className) =>
+    createElement(PanelTopBottomDashedIcon as LucideIcon, { className }),
+  betweenHorizontalStart: (className) =>
+    createElement(BetweenHorizontalStartIcon as LucideIcon, { className }),
+  user: (className) => createElement(UserIcon as LucideIcon, { className }),
+  users: (className) => createElement(UsersIcon as LucideIcon, { className }),
+  externalLink: (className) => createElement(ExternalLinkIcon as LucideIcon, { className }),
+  mousePointer: (className) => createElement(MousePointerIcon as LucideIcon, { className }),
+};
+
+/**
+ * Renders a wire {@link IconName} token to a host icon element with an optional
+ * `className`. Central icon seam for the panel-tree renderer: the wire carries
+ * only the token; the host owns the actual element.
+ */
+export function renderPanelIcon(name: IconName, className?: string): ReactNode {
+  return PANEL_ICON_REGISTRY[name](className);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.test.tsx b/apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.test.tsx
new file mode 100644
index 000000000..e52fc516e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.test.tsx
@@ -0,0 +1,129 @@
+// @vitest-environment jsdom
+
+import { Panel, type PanelContext, type PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import { useState } from "react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+import { PanelTreeView } from "./host-renderer";
+import { createInProcessTransport } from "./in-process-transport";
+
+afterEach(() => cleanup());
+
+const EMPTY_INPUTS: PanelSessionInputs = {
+  props: {},
+  selection: { count: 1 },
+  data: { products: [], variables: {} },
+};
+
+/** Walks a tree and returns the first `textField` node's `value` prop. */
+const findTextFieldValue = (node: {
+  type: string;
+  props: Record<string, unknown>;
+  children?: unknown[];
+}): unknown => {
+  if (node.type === "textField") return node.props.value;
+  for (const child of node.children ?? []) {
+    const found = findTextFieldValue(child as never);
+    if (found !== undefined) return found;
+  }
+  return undefined;
+};
+
+/**
+ * A tiny built-in definition: a local `useState` counter shown in a read-only
+ * textField, with a button that increments it. The click flows through the
+ * session's synchronous dispatch and re-renders the tree with the new count.
+ */
+function CounterDefinition(_ctx: PanelContext) {
+  const [count, setCount] = useState(0);
+  return (
+    <Panel>
+      <Panel.Field label="Count">
+        <Panel.TextField kind="number" value={count} placeholder="count" />
+      </Panel.Field>
+      <Panel.Button label="Increment" onClick={() => setCount((c) => c + 1)} />
+    </Panel>
+  );
+}
+
+describe("in-process transport — round trip", () => {
+  test("click → dispatch → a NEW tree renders synchronously", () => {
+    const transport = createInProcessTransport({
+      render: CounterDefinition,
+      initialInputs: EMPTY_INPUTS,
+    });
+
+    try {
+      // The first tree is emitted synchronously during construction.
+      const initial = transport.getSnapshot();
+      expect(initial.status).toBe("ready");
+
+      render(<PanelTreeView transport={transport} />);
+      // The count textField shows 0 initially.
+      expect((screen.getByLabelText("count") as HTMLInputElement).value).toBe("0");
+
+      // Click the button: the OSS session flushes setState + re-emits the tree
+      // synchronously before dispatchEvent returns, so the new value is present.
+      fireEvent.click(screen.getByText("Increment"));
+      expect((screen.getByLabelText("count") as HTMLInputElement).value).toBe("1");
+
+      fireEvent.click(screen.getByText("Increment"));
+      expect((screen.getByLabelText("count") as HTMLInputElement).value).toBe("2");
+
+      // The snapshot revision advanced (each dispatch emitted a new tree).
+      const after = transport.getSnapshot();
+      expect(after.status).toBe("ready");
+      if (after.status === "ready") {
+        expect(after.revision).toBeGreaterThan(0);
+      }
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("the dev-assert path accepts a valid built-in emission", () => {
+    // import.meta.env.DEV is true under the test runner, so this exercises the
+    // decodePanelTreeDev assertion on every emission — a valid definition passes.
+    const transport = createInProcessTransport({
+      render: CounterDefinition,
+      initialInputs: EMPTY_INPUTS,
+    });
+    try {
+      expect(transport.getSnapshot().status).toBe("ready");
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("restart tears down and remounts a fresh session with a reset tree", () => {
+    const transport = createInProcessTransport({
+      render: CounterDefinition,
+      initialInputs: EMPTY_INPUTS,
+    });
+    try {
+      render(<PanelTreeView transport={transport} />);
+      fireEvent.click(screen.getByText("Increment"));
+      fireEvent.click(screen.getByText("Increment"));
+
+      // The live tree carries the incremented count.
+      const before = transport.getSnapshot();
+      expect(before.status).toBe("ready");
+      const beforeValue =
+        before.status === "ready"
+          ? findTextFieldValue(before.tree.root as never)
+          : undefined;
+      expect(beforeValue).toBe(2);
+
+      // Restart mounts a fresh session: the emitted tree's count resets to 0.
+      transport.restart();
+      const after = transport.getSnapshot();
+      expect(after.status).toBe("ready");
+      const afterValue =
+        after.status === "ready" ? findTextFieldValue(after.tree.root as never) : undefined;
+      expect(afterValue).toBe(0);
+    } finally {
+      transport.dispose();
+    }
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.ts
new file mode 100644
index 000000000..801eec762
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/in-process-transport.ts
@@ -0,0 +1,175 @@
+/**
+ * The trusted, synchronous {@link PanelTransport} that backs built-in designer
+ * panels. It wraps the OSS {@link createPanelSession} directly: the reconciler
+ * runs IN THIS PROCESS, so a definition's event handlers call commander actions
+ * synchronously and the OSS session guarantees each `setState` is flushed and
+ * the resulting tree emitted BEFORE `dispatchEvent` returns — which is what
+ * makes 60fps in-process drags possible without a round-trip.
+ *
+ * On every emission (dev only, `import.meta.env.DEV`) the tree is re-asserted
+ * against the host schema gate ({@link decodePanelTreeDev}). A failed assert
+ * means a built-in definition drifted from the wire contract — the host logs
+ * loudly and surfaces a restartable error snapshot instead of rendering a shape
+ * the kit adapters don't expect. In production the emitted tree is trusted as-is
+ * (no per-frame decode cost).
+ */
+import {
+  createPanelSession,
+  type PanelSession,
+  type PanelSessionInputs,
+  type CreatePanelSessionOptions,
+} from "@voidhash/paywalls/panel";
+
+import { decodePanelTreeDev, type PanelTree } from "./schema";
+import type { PanelDispatchEvent, PanelSnapshot, PanelTransport } from "./transport";
+
+/** The panel definition function a built-in transport renders. */
+export type PanelRender = CreatePanelSessionOptions["render"];
+
+/** The provider-wrap seam a built-in host uses (store context + host services). */
+export type PanelWrap = CreatePanelSessionOptions["wrap"];
+
+/** The intent sink a built-in host reduces synchronously (unused for now). */
+export type PanelIntentSink = CreatePanelSessionOptions["intentSink"];
+
+/** Configuration for {@link createInProcessTransport}. */
+export interface InProcessTransportOptions {
+  /** The panel definition: `(ctx) => ReactNode`. */
+  readonly render: PanelRender;
+  /** The initial host input snapshot. */
+  readonly initialInputs: PanelSessionInputs;
+  /** Re-wraps providers inside the reconciler root (store context, host services). */
+  readonly wrap?: PanelWrap;
+  /** Where the definition's `ctx.props.*` writes go (built-ins reduce synchronously). */
+  readonly intentSink?: PanelIntentSink;
+  /** Reports a definition render/effect error to the host (before the error snapshot). */
+  readonly onError?: (error: unknown) => void;
+}
+
+const isDev = import.meta.env.DEV;
+
+const errorText = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+/**
+ * Creates an in-process transport for a built-in panel definition. Owns exactly
+ * one OSS session at a time; {@link PanelTransport.restart} tears the current
+ * session down and mounts a fresh one from the same options (definition + wrap +
+ * the LATEST inputs pushed via `update`).
+ */
+export const createInProcessTransport = (
+  options: InProcessTransportOptions,
+): PanelTransport => {
+  const listeners = new Set<() => void>();
+  let snapshot: PanelSnapshot = { status: "loading" };
+  let session: PanelSession | null = null;
+  let inputs: PanelSessionInputs = options.initialInputs;
+  let disposed = false;
+
+  const notify = (): void => {
+    for (const listener of listeners) listener();
+  };
+
+  const setSnapshot = (next: PanelSnapshot): void => {
+    snapshot = next;
+    notify();
+  };
+
+  /**
+   * Handles one emitted tree: in dev, assert it against the host gate and fail
+   * loudly on drift; otherwise publish it as the ready snapshot. Each accepted
+   * emission is a new object, so `useSyncExternalStore` re-renders exactly once.
+   */
+  const acceptTree = (tree: PanelTree, revision: number): void => {
+    if (disposed) return;
+    if (isDev) {
+      const decoded = decodePanelTreeDev(tree);
+      if (!decoded.ok) {
+        // A built-in definition drifted from the wire format. This is a
+        // developer error, not a runtime one — surface it loudly.
+        // eslint-disable-next-line no-console
+        console.error(
+          `[panel-runtime] built-in panel emitted an invalid tree (revision ${revision}): ${decoded.error}`,
+        );
+        setSnapshot({
+          status: "error",
+          message: `Panel definition drifted from the wire format: ${decoded.error}`,
+          restartable: true,
+        });
+        return;
+      }
+      setSnapshot({ status: "ready", tree: decoded.tree, revision });
+      return;
+    }
+    setSnapshot({ status: "ready", tree, revision });
+  };
+
+  const start = (): void => {
+    try {
+      session = createPanelSession({
+        render: options.render,
+        initialInputs: inputs,
+        intentSink: options.intentSink,
+        wrap: options.wrap,
+        callbacks: {
+          onTree: acceptTree,
+          onError: (error) => {
+            options.onError?.(error);
+          },
+        },
+      });
+    } catch (error) {
+      options.onError?.(error);
+      setSnapshot({
+        status: "error",
+        message: `Panel failed to start: ${errorText(error)}`,
+        restartable: true,
+      });
+      return;
+    }
+    // The session emits the first tree synchronously during construction, so
+    // `getTree()` is already valid; publish it (dev-asserted) as the ready snapshot.
+    acceptTree(session.getTree(), 0);
+  };
+
+  const stop = (): void => {
+    session?.dispose();
+    session = null;
+  };
+
+  start();
+
+  return {
+    kind: "in-process",
+    update(next: unknown) {
+      if (disposed || session === null) return;
+      inputs = next as PanelSessionInputs;
+      session.update(inputs);
+    },
+    dispatch(event: PanelDispatchEvent) {
+      if (disposed || session === null) return;
+      session.dispatchEvent(event.nodeId, event.name, event.args);
+    },
+    subscribe(cb) {
+      listeners.add(cb);
+      return () => {
+        listeners.delete(cb);
+      };
+    },
+    getSnapshot() {
+      return snapshot;
+    },
+    restart() {
+      if (disposed) return;
+      stop();
+      setSnapshot({ status: "loading" });
+      start();
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      stop();
+      listeners.clear();
+    },
+  };
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.test.ts
new file mode 100644
index 000000000..187a8aabd
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.test.ts
@@ -0,0 +1,383 @@
+import type {
+  ComponentManifest,
+  ComponentPropDefinition,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  removeComponentPropForNodes,
+  updateComponentPropBindingForNodes,
+} from "../state/actions/features/component-prop-actions";
+import { createPanelGestureController } from "./gesture-controller";
+import {
+  createIntentExecutor,
+  type CreateIntentExecutorOptions,
+  type ExecutorProduct,
+  type ExecutorTarget,
+} from "./intent-executor";
+
+/** A recorded dispatch call: which command + the params it was given. */
+interface DispatchCall {
+  command: unknown;
+  params: unknown;
+}
+
+/** A manifest carrying just the props needed for a test. */
+function manifest(props: Record<string, ComponentPropDefinition>): ComponentManifest {
+  return {
+    manifestVersion: 2,
+    id: "test",
+    props,
+  } as unknown as ComponentManifest;
+}
+
+interface HarnessOptions {
+  targets?: readonly ExecutorTarget[];
+  manifest?: ComponentManifest | undefined;
+  products?: readonly ExecutorProduct[];
+  isPropBound?: (name: string) => boolean;
+  inactivityMs?: number;
+}
+
+/** Builds an executor over recording dispatch + a manual frame + clock. */
+function makeHarness(opts: HarnessOptions = {}) {
+  const calls: DispatchCall[] = [];
+  const draftLog: string[] = [];
+  let pendingFrame: (() => void) | null = null;
+  let clock = 0;
+
+  const gestures = createPanelGestureController({
+    inactivityMs: opts.inactivityMs ?? 10_000,
+    setTimer: (fn, ms) => {
+      // Fake timer: store the callback + fire it when the test advances the clock.
+      const handle = { fn, at: clock + ms } as unknown as ReturnType<typeof setTimeout>;
+      fakeTimers.push(handle as unknown as FakeTimer);
+      return handle;
+    },
+    clearTimer: (handle) => {
+      const idx = fakeTimers.findIndex((t) => (t as unknown) === handle);
+      if (idx >= 0) fakeTimers.splice(idx, 1);
+    },
+  });
+  interface FakeTimer {
+    fn: () => void;
+    at: number;
+  }
+  const fakeTimers: FakeTimer[] = [];
+
+  gestures.attachDraftPairing({
+    begin: () => draftLog.push("begin"),
+    commit: () => draftLog.push("commit"),
+    discard: () => draftLog.push("discard"),
+  });
+
+  const dispatch = ((command: unknown) =>
+    (params: unknown) => {
+      calls.push({ command, params });
+      return undefined;
+    }) as unknown as CreateIntentExecutorOptions["dispatch"];
+
+  const executor = createIntentExecutor({
+    getTargets: () => opts.targets ?? [{ nodeId: "n1" }],
+    getManifest: () => ("manifest" in opts ? opts.manifest : manifest({})),
+    getProducts: () => opts.products ?? [],
+    gestures,
+    services: { toastError: () => undefined },
+    dispatch,
+    isPropBound: opts.isPropBound,
+    scheduleFrame: (fn) => {
+      pendingFrame = fn;
+    },
+    now: () => clock,
+  });
+
+  return {
+    executor,
+    calls,
+    draftLog,
+    gestures,
+    runFrame: () => {
+      const fn = pendingFrame;
+      pendingFrame = null;
+      fn?.();
+    },
+    hasPendingFrame: () => pendingFrame !== null,
+    advanceClock: (ms: number) => {
+      clock += ms;
+      for (const timer of [...fakeTimers]) {
+        if (timer.at <= clock) {
+          const idx = fakeTimers.indexOf(timer);
+          if (idx >= 0) fakeTimers.splice(idx, 1);
+          timer.fn();
+        }
+      }
+    },
+    setClock: (value: number) => {
+      clock = value;
+    },
+  };
+}
+
+const stringProp: ComponentPropDefinition = { kind: "string" };
+const numberProp: ComponentPropDefinition = { kind: "number" };
+const boolProp: ComponentPropDefinition = { kind: "boolean" };
+const selectProp: ComponentPropDefinition = { kind: "select", options: ["a", "b"] };
+const refProp: ComponentPropDefinition = { kind: "ref", refType: "product" };
+const componentProp: ComponentPropDefinition = { kind: "component" };
+const stringArrayProp: ComponentPropDefinition = { kind: "array", item: { kind: "string" } };
+
+describe("intent-executor — decode + validation rejections", () => {
+  test("rejects a malformed intent at decode", () => {
+    const h = makeHarness();
+    h.executor.handle({ type: "not-a-real-intent" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects set-prop for a prop not in the manifest", () => {
+    const h = makeHarness({ manifest: manifest({ title: stringProp }) });
+    h.executor.handle({ type: "set-prop", name: "missing", value: "x", gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects a kind mismatch (number for a string prop)", () => {
+    const h = makeHarness({ manifest: manifest({ title: stringProp }) });
+    h.executor.handle({ type: "set-prop", name: "title", value: 42, gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects a select value not in options", () => {
+    const h = makeHarness({ manifest: manifest({ variant: selectProp }) });
+    h.executor.handle({ type: "set-prop", name: "variant", value: "c", gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("accepts a select value in options", () => {
+    const h = makeHarness({ manifest: manifest({ variant: selectProp }) });
+    h.executor.handle({ type: "set-prop", name: "variant", value: "a", gesture: "commit" });
+    expect(h.calls).toHaveLength(1);
+    expect(h.calls[0]!.params).toEqual({
+      nodeIds: ["n1"],
+      propName: "variant",
+      binding: { type: "literal", value: { key: "string", value: "a" } },
+    });
+  });
+
+  test("rejects a non-finite number", () => {
+    const h = makeHarness({ manifest: manifest({ count: numberProp }) });
+    // NaN/Infinity cannot travel through JSON, so a large-but-finite check plus
+    // an explicit rejection of a string standing in for a number covers it.
+    h.executor.handle({ type: "set-prop", name: "count", value: "5", gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects an array that is too long", () => {
+    const h = makeHarness({ manifest: manifest({ tags: stringArrayProp }) });
+    const tooLong = Array.from({ length: 201 }, (_, i) => `t${i}`);
+    h.executor.handle({ type: "set-prop", name: "tags", value: tooLong, gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects a heterogeneous array", () => {
+    const h = makeHarness({ manifest: manifest({ tags: stringArrayProp }) });
+    h.executor.handle({
+      type: "set-prop",
+      name: "tags",
+      value: ["ok", 3],
+      gesture: "commit",
+    });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects a write to a component (code-configured, read-only) prop", () => {
+    const h = makeHarness({ manifest: manifest({ slot: componentProp }) });
+    h.executor.handle({ type: "set-prop", name: "slot", value: "x", gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects a write to a bound prop", () => {
+    const h = makeHarness({
+      manifest: manifest({ title: stringProp }),
+      isPropBound: (name) => name === "title",
+    });
+    h.executor.handle({ type: "set-prop", name: "title", value: "x", gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects a set-ref to an unknown product", () => {
+    const h = makeHarness({
+      manifest: manifest({ product: refProp }),
+      products: [{ id: "prod_1" }],
+    });
+    h.executor.handle({ type: "set-ref", name: "product", productId: "prod_missing" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+
+  test("rejects an oversized set-prop value at the decode cap", () => {
+    const h = makeHarness({ manifest: manifest({ title: stringProp }) });
+    const huge = "x".repeat(33 * 1024);
+    h.executor.handle({ type: "set-prop", name: "title", value: huge, gesture: "commit" });
+    expect(h.calls).toHaveLength(0);
+    expect(h.executor.rejectedCount()).toBe(1);
+  });
+});
+
+describe("intent-executor — apply paths with exact payloads", () => {
+  test("commit set-prop dispatches the batched action for all targets", () => {
+    const h = makeHarness({
+      manifest: manifest({ title: stringProp }),
+      targets: [{ nodeId: "a" }, { nodeId: "b" }, { nodeId: "c" }],
+    });
+    h.executor.handle({ type: "set-prop", name: "title", value: "Hi", gesture: "commit" });
+    expect(h.calls).toHaveLength(1);
+    expect(h.calls[0]!.command).toBe(updateComponentPropBindingForNodes);
+    expect(h.calls[0]!.params).toEqual({
+      nodeIds: ["a", "b", "c"],
+      propName: "title",
+      binding: { type: "literal", value: { key: "string", value: "Hi" } },
+    });
+  });
+
+  test("boolean + number commit produce the correct binding key", () => {
+    const h = makeHarness({ manifest: manifest({ on: boolProp, count: numberProp }) });
+    h.executor.handle({ type: "set-prop", name: "on", value: true, gesture: "commit" });
+    h.executor.handle({ type: "set-prop", name: "count", value: 7, gesture: "commit" });
+    expect(h.calls[0]!.params).toMatchObject({
+      binding: { type: "literal", value: { key: "boolean", value: true } },
+    });
+    expect(h.calls[1]!.params).toMatchObject({
+      binding: { type: "literal", value: { key: "number", value: 7 } },
+    });
+  });
+
+  test("string-array commit filters into a string-array binding", () => {
+    const h = makeHarness({ manifest: manifest({ tags: stringArrayProp }) });
+    h.executor.handle({
+      type: "set-prop",
+      name: "tags",
+      value: ["x", "y"],
+      gesture: "commit",
+    });
+    expect(h.calls[0]!.params).toMatchObject({
+      binding: { type: "literal", value: { key: "string-array", value: ["x", "y"] } },
+    });
+  });
+
+  test("set-ref dispatches a product literal binding for a known product", () => {
+    const h = makeHarness({
+      manifest: manifest({ product: refProp }),
+      products: [{ id: "prod_1" }],
+    });
+    h.executor.handle({ type: "set-ref", name: "product", productId: "prod_1" });
+    expect(h.calls).toHaveLength(1);
+    expect(h.calls[0]!.command).toBe(updateComponentPropBindingForNodes);
+    expect(h.calls[0]!.params).toEqual({
+      nodeIds: ["n1"],
+      propName: "product",
+      binding: { type: "literal", value: { key: "product", value: { productId: "prod_1" } } },
+    });
+  });
+
+  test("reset-prop dispatches the batched remove action", () => {
+    const h = makeHarness({
+      manifest: manifest({ title: stringProp }),
+      targets: [{ nodeId: "a" }, { nodeId: "b" }],
+    });
+    h.executor.handle({ type: "reset-prop", name: "title" });
+    expect(h.calls).toHaveLength(1);
+    expect(h.calls[0]!.command).toBe(removeComponentPropForNodes);
+    expect(h.calls[0]!.params).toEqual({ nodeIds: ["a", "b"], propName: "title" });
+  });
+});
+
+describe("intent-executor — live coalescing", () => {
+  test("multiple live set-props for one prop within a frame coalesce (latest wins)", () => {
+    const h = makeHarness({ manifest: manifest({ w: numberProp }) });
+    h.executor.handle({ type: "set-prop", name: "w", value: 1, gesture: "live" });
+    h.executor.handle({ type: "set-prop", name: "w", value: 2, gesture: "live" });
+    h.executor.handle({ type: "set-prop", name: "w", value: 3, gesture: "live" });
+    // Nothing dispatched until the frame runs.
+    expect(h.calls).toHaveLength(0);
+    h.runFrame();
+    // One dispatch carrying the LATEST value.
+    expect(h.calls).toHaveLength(1);
+    expect(h.calls[0]!.params).toMatchObject({
+      binding: { type: "literal", value: { key: "number", value: 3 } },
+    });
+  });
+
+  test("a rate flood is dropped past the cap and counted", () => {
+    const h = makeHarness({ manifest: manifest({ w: numberProp }) });
+    // 240 allowed per rolling second; feed 300 at the same clock tick.
+    for (let i = 0; i < 300; i++) {
+      h.executor.handle({ type: "set-prop", name: "w", value: i, gesture: "live" });
+    }
+    // 60 dropped by the rate cap.
+    expect(h.executor.rejectedCount()).toBe(60);
+    h.runFrame();
+    // The surviving coalesced write dispatches once (latest accepted value).
+    expect(h.calls).toHaveLength(1);
+  });
+});
+
+describe("intent-executor — gesture pairing lifecycle", () => {
+  test("live opens the draft exactly once; commit closes it with one commit", () => {
+    const h = makeHarness({ manifest: manifest({ w: numberProp }) });
+    h.executor.handle({ type: "set-prop", name: "w", value: 1, gesture: "live" });
+    h.runFrame();
+    h.executor.handle({ type: "set-prop", name: "w", value: 2, gesture: "live" });
+    h.runFrame();
+    // begin fired once across both live frames.
+    expect(h.draftLog).toEqual(["begin"]);
+    expect(h.gestures.isDraftOpen()).toBe(true);
+
+    h.executor.handle({ type: "gesture-commit", name: "w" });
+    expect(h.draftLog).toEqual(["begin", "commit"]);
+    expect(h.gestures.isDraftOpen()).toBe(false);
+  });
+
+  test("gesture-discard reverts the open draft", () => {
+    const h = makeHarness({ manifest: manifest({ w: numberProp }) });
+    h.executor.handle({ type: "set-prop", name: "w", value: 1, gesture: "live" });
+    h.runFrame();
+    expect(h.gestures.isDraftOpen()).toBe(true);
+
+    h.executor.handle({ type: "gesture-discard", name: "w" });
+    expect(h.draftLog).toEqual(["begin", "discard"]);
+    expect(h.gestures.isDraftOpen()).toBe(false);
+    expect(h.gestures.lastDiscardReason()).toBe("gesture-discard");
+  });
+
+  test("10s of inactivity auto-discards the open draft", () => {
+    const h = makeHarness({ manifest: manifest({ w: numberProp }), inactivityMs: 10_000 });
+    h.executor.handle({ type: "set-prop", name: "w", value: 1, gesture: "live" });
+    h.runFrame();
+    expect(h.gestures.isDraftOpen()).toBe(true);
+
+    h.advanceClock(10_000);
+    expect(h.draftLog).toEqual(["begin", "discard"]);
+    expect(h.gestures.isDraftOpen()).toBe(false);
+    expect(h.gestures.lastDiscardReason()).toBe("inactivity");
+  });
+
+  test("gesture-commit flushes a still-pending live write before committing", () => {
+    const h = makeHarness({ manifest: manifest({ w: numberProp }) });
+    h.executor.handle({ type: "set-prop", name: "w", value: 5, gesture: "live" });
+    // Commit BEFORE the frame ran — the pending live write must flush first.
+    h.executor.handle({ type: "gesture-commit", name: "w" });
+    expect(h.calls).toHaveLength(1);
+    expect(h.calls[0]!.params).toMatchObject({
+      binding: { type: "literal", value: { key: "number", value: 5 } },
+    });
+    expect(h.draftLog).toEqual(["begin", "commit"]);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.ts
new file mode 100644
index 000000000..b476ca795
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/intent-executor.ts
@@ -0,0 +1,389 @@
+/**
+ * The host-side reducer for the {@link PanelIntent} stream a component-panel
+ * session emits. It is the trust boundary between an untrusted sandbox panel and
+ * the designer document: EVERY intent is strictly decoded, validated against the
+ * component's manifest (a panel can only write props the manifest declares, with
+ * kind-compatible, capped values), rate-limited, and — for `live` drags —
+ * coalesced per prop per frame before it reaches a batched commander action.
+ *
+ * Writes always target ALL current write targets (the selected component nodes)
+ * through the batched {@link updateComponentPropBindingForNodes} /
+ * {@link removeComponentPropForNodes} actions, so a multi-selection edit is one
+ * undoable step. Drags are paired to a host draft via the
+ * {@link PanelGestureController}: the first `live` opens the draft (the slot wires
+ * `attachDraftPairing`), each `live` dispatches into it, and a `gesture-commit`
+ * commits the whole drag as one undo entry (`gesture-discard`, session death, a
+ * selection change, or 10s of inactivity discards it).
+ *
+ * Rejections are deliberately SILENT to the user (a dropped write is not a toast-
+ * worthy event — bind chrome, read-only props, and oversized values are the
+ * panel author's bug, surfaced with a dev-only console warning and counted for
+ * the caller). Only genuine host-service failures would toast.
+ */
+import type {
+  ComponentManifest,
+  ComponentPropDefinition,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+
+import type { CommandDispatch } from "@voidhash/mimic/zustand-commander";
+import type { PaywallDesignerDocument } from "@voidhash/mimic-schema";
+
+import {
+  removeComponentPropForNodes,
+  updateComponentPropBindingForNodes,
+} from "../state/actions/features/component-prop-actions";
+import type { DesignerStoreState } from "../state/designer-store-state";
+import type {
+  ComponentPropBindingPlain,
+  ComponentPropValuePlain,
+} from "../state/utils/component-prop-values";
+import type { PanelGestureController } from "./gesture-controller";
+import { decodePanelIntent, type PanelIntent, type PanelJsonValue } from "./schema";
+
+const isDev = import.meta.env.DEV;
+
+const devWarn = (message: string): void => {
+  if (isDev) {
+    // eslint-disable-next-line no-console
+    console.warn(`[intent-executor] ${message}`);
+  }
+};
+
+/** Max intents processed per rolling second before excess is dropped. */
+const RATE_LIMIT_PER_SECOND = 240;
+const RATE_WINDOW_MS = 1000;
+
+/** Finer per-kind value caps applied on top of the 32KB decode cap. */
+const STRING_VALUE_MAX = 4096;
+const ARRAY_ITEMS_MAX = 200;
+
+/** A minimal product view: only the id is needed to validate a `set-ref`. */
+export interface ExecutorProduct {
+  readonly id: string;
+}
+
+/** A single write target: the component node the executor writes props onto. */
+export interface ExecutorTarget {
+  readonly nodeId: string;
+}
+
+/**
+ * The store-scoped dispatch the executor uses — the designer store's commander
+ * dispatch (`dispatch(command)(params)`). Draft-awareness lives in the store
+ * (`_commander.activeDraft`), so a dispatch during an open draft stages into the
+ * draft automatically (no undo entry until commit).
+ */
+export type ExecutorDispatch = CommandDispatch<
+  DesignerStoreState,
+  typeof PaywallDesignerDocument
+>;
+
+/** Options for {@link createIntentExecutor}. */
+export interface CreateIntentExecutorOptions {
+  /** The current write targets (selected component node ids); read per intent. */
+  getTargets: () => readonly ExecutorTarget[];
+  /** The resolved manifest for the selected component (undefined while resolving). */
+  getManifest: () => ComponentManifest | undefined;
+  /** The products a `set-ref` may reference (read per intent). */
+  getProducts: () => readonly ExecutorProduct[];
+  /** The gesture controller pairing live drags to a host draft. */
+  gestures: PanelGestureController;
+  /** Host services (only `toastError` is used, for genuine failures). */
+  services: { toastError: (message: string) => void };
+  /** The designer store's commander dispatch. */
+  dispatch: ExecutorDispatch;
+  /**
+   * True when the named prop is variable-bound on ANY current target — the host
+   * owns bind/unbind chrome, so a guest `set-prop`/`set-ref`/`reset-prop` on a
+   * bound prop is dropped. Defaults to "never bound" when omitted.
+   */
+  isPropBound?: (propName: string) => boolean;
+  /**
+   * Frame scheduler for coalescing `live` set-props (defaults to
+   * `requestAnimationFrame`, falling back to a macrotask). Injectable for tests.
+   */
+  scheduleFrame?: (fn: () => void) => void;
+  /** Clock seam for the rate limiter (defaults to `Date.now`). Injectable for tests. */
+  now?: () => number;
+}
+
+/** The executor handle the host wires the transport's `onIntents` to. */
+export interface IntentExecutor {
+  /** Decodes + validates + applies one raw intent from the sandbox. */
+  handle(raw: unknown): void;
+  /** The count of intents rejected so far (decode, validation, rate cap). */
+  rejectedCount(): number;
+  /** Flushes any pending coalesced live write immediately (test seam). */
+  flush(): void;
+  /** Releases pending frames + timers. */
+  dispose(): void;
+}
+
+/** Wraps a plain scalar/array value into the plain binding literal for `set-prop`. */
+function literalBinding(value: ComponentPropValuePlain): ComponentPropBindingPlain {
+  return { type: "literal", value };
+}
+
+/**
+ * Validates a `set-prop` value against the manifest prop definition and returns
+ * the plain binding to write, or `undefined` (rejected — with a dev warning).
+ * Enforces the finer per-kind caps on top of the 32KB decode cap: strings
+ * ≤4096, arrays ≤200 homogeneous items, select ∈ options, numbers finite.
+ * Component and ref-array / code-configured kinds are read-only (rejected).
+ */
+function validateSetPropBinding(
+  def: ComponentPropDefinition,
+  value: PanelJsonValue,
+): ComponentPropBindingPlain | undefined {
+  switch (def.kind) {
+    case "string":
+    case "image": {
+      if (typeof value !== "string") return undefined;
+      if (value.length > STRING_VALUE_MAX) return undefined;
+      return literalBinding({ key: "string", value });
+    }
+    case "select": {
+      if (typeof value !== "string") return undefined;
+      if (value.length > STRING_VALUE_MAX) return undefined;
+      if (!def.options.includes(value)) return undefined;
+      return literalBinding({ key: "string", value });
+    }
+    case "number": {
+      if (typeof value !== "number" || !Number.isFinite(value)) return undefined;
+      return literalBinding({ key: "number", value });
+    }
+    case "boolean": {
+      if (typeof value !== "boolean") return undefined;
+      return literalBinding({ key: "boolean", value });
+    }
+    case "array": {
+      if (!Array.isArray(value)) return undefined;
+      if (value.length > ARRAY_ITEMS_MAX) return undefined;
+      switch (def.item.kind) {
+        case "string":
+        case "image": {
+          if (!value.every((item) => typeof item === "string")) return undefined;
+          if (!value.every((item) => (item as string).length <= STRING_VALUE_MAX)) return undefined;
+          return literalBinding({ key: "string-array", value: value as string[] });
+        }
+        case "select": {
+          const options = def.item.options;
+          if (!value.every((item) => typeof item === "string" && options.includes(item))) {
+            return undefined;
+          }
+          return literalBinding({ key: "string-array", value: value as string[] });
+        }
+        case "number": {
+          if (!value.every((item) => typeof item === "number" && Number.isFinite(item))) {
+            return undefined;
+          }
+          return literalBinding({ key: "number-array", value: value as number[] });
+        }
+        case "boolean": {
+          if (!value.every((item) => typeof item === "boolean")) return undefined;
+          return literalBinding({ key: "boolean-array", value: value as boolean[] });
+        }
+        // Arrays of component/ref are configured in code — read-only.
+        default:
+          return undefined;
+      }
+    }
+    // component + ref are handled elsewhere (ref via set-ref); component is
+    // read-only.
+    default:
+      return undefined;
+  }
+}
+
+/**
+ * Creates the host-side intent executor for a component-panel session. The
+ * transport's `onIntents(raw)` feeds each raw intent to {@link IntentExecutor.handle}.
+ */
+export const createIntentExecutor = (
+  options: CreateIntentExecutorOptions,
+): IntentExecutor => {
+  const scheduleFrame =
+    options.scheduleFrame ??
+    ((fn: () => void) => {
+      if (typeof requestAnimationFrame === "function") requestAnimationFrame(fn);
+      else setTimeout(fn, 16);
+    });
+  const now = options.now ?? (() => Date.now());
+
+  let rejected = 0;
+  let disposed = false;
+
+  // Rate limiter: a sliding window of processing timestamps.
+  const recentTimestamps: number[] = [];
+
+  // Live-set coalescing: at most one pending write per prop name per frame.
+  const pendingLive = new Map<string, ComponentPropBindingPlain>();
+  let frameScheduled = false;
+
+  /** True when any current target has the prop variable-bound (host owns bind chrome). */
+  const propIsBound = (propName: string): boolean =>
+    options.isPropBound?.(propName) ?? false;
+
+  const flushLive = (): void => {
+    frameScheduled = false;
+    if (disposed || pendingLive.size === 0) return;
+    const nodeIds = options.getTargets().map((t) => t.nodeId);
+    if (nodeIds.length === 0) {
+      pendingLive.clear();
+      return;
+    }
+    // Open the draft on the first applied live write of a gesture (idempotent).
+    options.gestures.onLiveIntent();
+    for (const [propName, binding] of pendingLive) {
+      options.dispatch(updateComponentPropBindingForNodes)({ nodeIds, propName, binding });
+    }
+    pendingLive.clear();
+  };
+
+  const scheduleFlush = (): void => {
+    if (frameScheduled || disposed) return;
+    frameScheduled = true;
+    scheduleFrame(flushLive);
+  };
+
+  /** Applies a committed set-prop write immediately (one undo entry when no draft). */
+  const applyCommitWrite = (propName: string, binding: ComponentPropBindingPlain): void => {
+    // If a live coalesced write for this prop is pending, the commit value
+    // supersedes it — drop the stale pending entry.
+    pendingLive.delete(propName);
+    const nodeIds = options.getTargets().map((t) => t.nodeId);
+    if (nodeIds.length === 0) return;
+    options.dispatch(updateComponentPropBindingForNodes)({ nodeIds, propName, binding });
+  };
+
+  const handleSetProp = (intent: Extract<PanelIntent, { type: "set-prop" }>): void => {
+    const manifest = options.getManifest();
+    const def = manifest?.props[intent.name];
+    if (def === undefined) {
+      rejected += 1;
+      devWarn(`set-prop for unknown prop "${intent.name}" dropped`);
+      return;
+    }
+    if (propIsBound(intent.name)) {
+      rejected += 1;
+      devWarn(`set-prop for bound prop "${intent.name}" dropped (host owns binding)`);
+      return;
+    }
+    const binding = validateSetPropBinding(def, intent.value);
+    if (binding === undefined) {
+      rejected += 1;
+      devWarn(`set-prop for "${intent.name}" rejected (kind/value incompatible)`);
+      return;
+    }
+    if (intent.gesture === "live") {
+      pendingLive.set(intent.name, binding);
+      scheduleFlush();
+      return;
+    }
+    applyCommitWrite(intent.name, binding);
+  };
+
+  const handleSetRef = (intent: Extract<PanelIntent, { type: "set-ref" }>): void => {
+    const manifest = options.getManifest();
+    const def = manifest?.props[intent.name];
+    if (def === undefined || def.kind !== "ref") {
+      rejected += 1;
+      devWarn(`set-ref for non-ref prop "${intent.name}" dropped`);
+      return;
+    }
+    if (propIsBound(intent.name)) {
+      rejected += 1;
+      devWarn(`set-ref for bound prop "${intent.name}" dropped (host owns binding)`);
+      return;
+    }
+    if (!options.getProducts().some((product) => product.id === intent.productId)) {
+      rejected += 1;
+      devWarn(`set-ref referenced unknown product "${intent.productId}" — dropped`);
+      return;
+    }
+    const nodeIds = options.getTargets().map((t) => t.nodeId);
+    if (nodeIds.length === 0) return;
+    const binding: ComponentPropBindingPlain = {
+      type: "literal",
+      value: { key: "product", value: { productId: intent.productId } },
+    };
+    options.dispatch(updateComponentPropBindingForNodes)({ nodeIds, propName: intent.name, binding });
+  };
+
+  const handleResetProp = (intent: Extract<PanelIntent, { type: "reset-prop" }>): void => {
+    if (propIsBound(intent.name)) {
+      rejected += 1;
+      devWarn(`reset-prop for bound prop "${intent.name}" dropped (host owns binding)`);
+      return;
+    }
+    pendingLive.delete(intent.name);
+    const nodeIds = options.getTargets().map((t) => t.nodeId);
+    if (nodeIds.length === 0) return;
+    options.dispatch(removeComponentPropForNodes)({ nodeIds, propName: intent.name });
+  };
+
+  const apply = (intent: PanelIntent): void => {
+    switch (intent.type) {
+      case "set-prop":
+        handleSetProp(intent);
+        return;
+      case "set-ref":
+        handleSetRef(intent);
+        return;
+      case "reset-prop":
+        handleResetProp(intent);
+        return;
+      case "gesture-commit":
+        // Flush any pending coalesced live write so the committed draft carries
+        // the final value, then commit the draft.
+        flushLive();
+        options.gestures.onGestureCommit();
+        return;
+      case "gesture-discard":
+        pendingLive.clear();
+        options.gestures.onGestureDiscard();
+        return;
+    }
+  };
+
+  /** Returns true when a fresh intent may be processed (drops beyond the cap). */
+  const withinRateLimit = (): boolean => {
+    const t = now();
+    const cutoff = t - RATE_WINDOW_MS;
+    while (recentTimestamps.length > 0 && recentTimestamps[0]! < cutoff) {
+      recentTimestamps.shift();
+    }
+    if (recentTimestamps.length >= RATE_LIMIT_PER_SECOND) return false;
+    recentTimestamps.push(t);
+    return true;
+  };
+
+  return {
+    handle(raw) {
+      if (disposed) return;
+      const decoded = decodePanelIntent(raw);
+      if (!decoded.ok) {
+        rejected += 1;
+        devWarn(`intent rejected at decode: ${decoded.error}`);
+        return;
+      }
+      if (!withinRateLimit()) {
+        rejected += 1;
+        devWarn("intent dropped (rate cap exceeded)");
+        return;
+      }
+      apply(decoded.intent);
+    },
+    rejectedCount() {
+      return rejected;
+    },
+    flush() {
+      flushLive();
+    },
+    dispose() {
+      disposed = true;
+      pendingLive.clear();
+      recentTimestamps.length = 0;
+    },
+  };
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-host-services.tsx b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-host-services.tsx
new file mode 100644
index 000000000..442e014cf
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-host-services.tsx
@@ -0,0 +1,69 @@
+"use client";
+
+/**
+ * Host services a built-in panel definition can reach from INSIDE the panel
+ * reconciler root — the imperative escape hatches the wire tree cannot carry
+ * (opening a modal sheet, awaiting a confirm dialog, toasting an error). The
+ * built-in host ({@link ../panels/right-panel/builtin-panel-host}) provides a
+ * concrete implementation via `wrap`, so a definition calls
+ * `usePanelHostServices()` and gets a live host-backed surface.
+ *
+ * These are deliberately NOT props on the wire nodes: they are host-owned side
+ * effects (portalled dialogs, sonner toasts) with no serializable form. A code-
+ * component panel (Phase 3) will reach an equivalent surface through host intents
+ * over the sandbox bridge, not through this context.
+ */
+import { createContext, useContext } from "react";
+
+/**
+ * A component-version update plan a definition asks the host to confirm before
+ * applying (mirrors the component section's update AlertDialog). Kept structural
+ * so the host can render a summary without importing section internals.
+ */
+export interface ComponentUpdatePlan {
+  /** Human-readable title (e.g. "Update Card to v3?"). */
+  readonly title: string;
+  /** Optional body lines describing the consequences (removed props, reset preview state). */
+  readonly details?: readonly string[];
+  /** The confirm button label (defaults to "Update"). */
+  readonly confirmLabel?: string;
+}
+
+/** The imperative host surface a built-in panel definition can call. */
+export interface PanelHostServices {
+  /** Opens the State Manager sheet for a node (the states section's Settings action). */
+  openStateManager(nodeId: string): void;
+  /** Awaits a host confirm dialog; resolves true if the user confirms. */
+  confirmComponentUpdate(plan: ComponentUpdatePlan): Promise<boolean>;
+  /** Surfaces a non-blocking error toast. */
+  toastError(message: string): void;
+}
+
+const PanelHostServicesContext = createContext<PanelHostServices | null>(null);
+
+/** Provides a {@link PanelHostServices} implementation to a subtree. */
+export const PanelHostServicesProvider = PanelHostServicesContext.Provider;
+
+/**
+ * Reads the host services inside a panel definition. Throws when no host
+ * provided them (a built-in definition must run under a host that installs the
+ * provider via `wrap`).
+ */
+export function usePanelHostServices(): PanelHostServices {
+  const services = useContext(PanelHostServicesContext);
+  if (!services) {
+    throw new Error(
+      "usePanelHostServices must be used inside a PanelHostServicesProvider (built-in panel host)",
+    );
+  }
+  return services;
+}
+
+/**
+ * A safe accessor that returns `null` instead of throwing when no host is
+ * present — for optional call sites (e.g. shared kit components that MAY run
+ * outside a panel host).
+ */
+export function useOptionalPanelHostServices(): PanelHostServices | null {
+  return useContext(PanelHostServicesContext);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.test.ts
new file mode 100644
index 000000000..1bf4ab2ee
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.test.ts
@@ -0,0 +1,54 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { PANEL_SANDBOX_DOCUMENT } from "./panel-sandbox-document";
+
+describe("panel-sandbox-document — CSP + isolation", () => {
+  test("declares the locked-down CSP (no network, opaque-origin friendly)", () => {
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("Content-Security-Policy");
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("default-src 'none'");
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("connect-src 'none'");
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("script-src 'unsafe-inline' 'unsafe-eval'");
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("style-src 'unsafe-inline'");
+  });
+
+  test("evaluates the OSS sandbox IIFE global via the guest bundle", () => {
+    // The bootstrap evals the injected bundle and reads the guest global that
+    // exposes describeComponent + createPanelSession + the require shim modules.
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("__VOIDHASH_PAYWALLS_SANDBOX__");
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("describeComponent");
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("createPanelSession");
+    expect(PANEL_SANDBOX_DOCUMENT).toContain("runtime.modules");
+  });
+
+  test("is a LIVE document — it never freezes time / rAF (unlike the preview)", () => {
+    // The preview document overrides Date.now / Math.random / requestAnimationFrame
+    // for deterministic caching. The panel document must NOT, so timers/effects run.
+    expect(PANEL_SANDBOX_DOCUMENT).not.toContain("Date.now = function");
+    expect(PANEL_SANDBOX_DOCUMENT).not.toContain("Math.random = function");
+    expect(PANEL_SANDBOX_DOCUMENT).not.toContain("window.requestAnimationFrame = function () { return");
+  });
+
+  test("speaks the panel protocol (init/update/event/ping/unmount, ready/tree/pong)", () => {
+    for (const type of [
+      "panel/init",
+      "panel/update",
+      "panel/event",
+      "panel/ping",
+      "panel/unmount",
+      "panel/ready",
+      "panel/tree",
+      "panel/pong",
+      "panel/intent",
+      "panel/error",
+    ]) {
+      expect(PANEL_SANDBOX_DOCUMENT).toContain(type);
+    }
+  });
+
+  test("contains no unescaped template-literal hazards", () => {
+    // The bootstrap must embed safely in a template literal (no backticks / ${).
+    const body = PANEL_SANDBOX_DOCUMENT;
+    expect(body.includes("`")).toBe(false);
+    expect(body.includes("${")).toBe(false);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.ts
new file mode 100644
index 000000000..f519f4e59
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-document.ts
@@ -0,0 +1,168 @@
+/**
+ * The LIVE panel sandbox iframe document. Unlike the preview sandbox (a one-shot,
+ * clock-frozen render/response — {@link ../code-mode/sandbox-document}), this
+ * document hosts a long-lived {@link createPanelSession}: React state, effects,
+ * timers, and `requestAnimationFrame` all run for real, because a panel is
+ * interactive. NOTHING here is frozen.
+ *
+ * Isolation is identical to the preview recipe: `<iframe sandbox="allow-scripts">`
+ * (no `allow-same-origin` → opaque origin, no cookies/storage/parent DOM) and a
+ * CSP with `default-src 'none'; connect-src 'none'` (no network). Untrusted
+ * author code runs via `new Function` (hence `'unsafe-eval'`), but the opaque
+ * origin + `connect-src 'none'` are the real boundary — it can only post data
+ * the host re-validates.
+ *
+ * The bootstrap mirrors {@link createPanelSandboxDriver} (verified separately as
+ * a module — jsdom can't run a srcdoc script). It cannot import that module (the
+ * iframe loads no ES modules), so the protocol logic is inlined: on `panel/init`
+ * it evals the OSS sandbox IIFE bundle, loads the compiled author module through
+ * the require shim, resolves the `panel` function, and mounts a session with
+ * rAF-coalesced tree emission; `panel/update`/`panel/event`/`panel/ping`/
+ * `panel/unmount` drive the live session. Wrong-`sessionId` messages are ignored.
+ *
+ * The bootstrap is authored without backticks or `${` so it embeds safely in
+ * this template literal.
+ */
+const BOOTSTRAP = `
+(function () {
+  var PROTOCOL = 1;
+  var sessionId = null;
+  var sandbox = null;
+  var session = null;
+  var pendingTree = null;
+  var rafHandle = null;
+
+  function ensureSandbox(code) {
+    if (!sandbox && code) {
+      (0, eval)(code);
+      sandbox = window.__VOIDHASH_PAYWALLS_SANDBOX__;
+    }
+    return sandbox;
+  }
+
+  function toMessage(err) { return err && err.message ? String(err.message) : String(err); }
+
+  function post(message) {
+    message.protocol = PROTOCOL;
+    message.sessionId = sessionId;
+    parent.postMessage(message, "*");
+  }
+
+  function postError(phase, message) {
+    post({ type: "panel/error", phase: phase, message: message });
+  }
+
+  function flushTree() {
+    rafHandle = null;
+    if (pendingTree === null) { return; }
+    var payload = pendingTree;
+    pendingTree = null;
+    post({ type: "panel/tree", revision: payload.revision, tree: payload.tree });
+  }
+
+  function scheduleTree(revision, tree) {
+    if (pendingTree === null || revision >= pendingTree.revision) {
+      pendingTree = { revision: revision, tree: tree };
+    }
+    if (rafHandle === null) {
+      rafHandle = window.requestAnimationFrame(flushTree);
+    }
+  }
+
+  function disposeSession() {
+    if (rafHandle !== null) { window.cancelAnimationFrame(rafHandle); rafHandle = null; }
+    pendingTree = null;
+    if (session) { try { session.dispose(); } catch (e) {} session = null; }
+  }
+
+  function loadDefinition(runtime, compiledCode) {
+    var requireShim = function (specifier) {
+      var mod = runtime.modules[specifier];
+      if (mod === undefined) { throw new Error("Cannot find module '" + specifier + "'"); }
+      return mod;
+    };
+    var moduleObj = { exports: {} };
+    var factory = new Function("require", "module", "exports", compiledCode);
+    factory(requireShim, moduleObj, moduleObj.exports);
+    var definition = moduleObj.exports && (moduleObj.exports.default || moduleObj.exports.definition);
+    if (!definition || typeof definition.render !== "function") {
+      throw new Error("Component must export a default defineComponent({ ... })");
+    }
+    return definition;
+  }
+
+  function onInit(msg) {
+    disposeSession();
+    var runtime;
+    try {
+      runtime = ensureSandbox(msg.sandboxCode);
+      if (!runtime) { throw new Error("panel sandbox runtime failed to load"); }
+      var definition = loadDefinition(runtime, msg.compiledCode);
+      var described = runtime.describeComponent(definition);
+      if (!described.hasPanel || typeof definition.panel !== "function") {
+        postError("init", "This component does not declare a custom panel.");
+        return;
+      }
+      session = runtime.createPanelSession({
+        render: definition.panel,
+        initialInputs: msg.inputs,
+        intentSink: function (intents) { post({ type: "panel/intent", intents: intents }); },
+        callbacks: {
+          onTree: function (tree, revision) { scheduleTree(revision, tree); },
+          onError: function (error) { postError("render", toMessage(error)); }
+        }
+      });
+    } catch (err) {
+      postError("init", toMessage(err));
+    }
+  }
+
+  function handle(msg) {
+    if (!msg || msg.protocol !== PROTOCOL) { return; }
+    if (msg.type === "panel/init") {
+      // The first init fixes the session id for the whole document lifetime.
+      sessionId = msg.sessionId;
+      // Announce liveness carrying the pinned session id (a bare ready before
+      // init would have no id and fail the host's strict envelope decode). This
+      // arrives well within the host's init timeout.
+      post({ type: "panel/ready" });
+      onInit(msg);
+      return;
+    }
+    // Every non-init message must match the established session id.
+    if (msg.sessionId !== sessionId) { return; }
+    if (msg.type === "panel/update") {
+      if (session) { try { session.update(msg.inputs); } catch (e) { postError("runtime", toMessage(e)); } }
+    } else if (msg.type === "panel/event") {
+      if (session) {
+        try { session.dispatchEvent(msg.nodeId, msg.name, msg.args); }
+        catch (e) { postError("runtime", toMessage(e)); }
+      }
+    } else if (msg.type === "panel/ping") {
+      post({ type: "panel/pong", seq: msg.seq });
+    } else if (msg.type === "panel/unmount") {
+      disposeSession();
+    }
+  }
+
+  window.addEventListener("message", function (event) {
+    try { handle(event.data); }
+    catch (err) { postError("runtime", toMessage(err)); }
+  });
+})();
+`;
+
+/**
+ * The srcdoc for the live panel sandbox iframe. Byte-for-byte the same CSP +
+ * sandbox recipe as the preview document, but with the LIVE bootstrap (no clock
+ * freeze). The host renders it via `<iframe sandbox="allow-scripts" srcdoc=…>`.
+ */
+export const PANEL_SANDBOX_DOCUMENT = `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; connect-src 'none';">
+<script>${BOOTSTRAP}</script>
+</head>
+<body></body>
+</html>`;
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.test.ts
new file mode 100644
index 000000000..e60a2f2fe
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.test.ts
@@ -0,0 +1,231 @@
+import type { PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createPanelSandboxDriver,
+  type PanelSandboxSession,
+  type PanelSandboxSessionFactory,
+  type PanelSandboxSessionFactoryOptions,
+  type RafScheduler,
+} from "./panel-sandbox-driver";
+import { PANEL_SANDBOX_PROTOCOL, type GuestMessage, type HostMessage } from "./sandbox-messages";
+
+const SID = "sess-1";
+const INPUTS: PanelSessionInputs = {
+  props: {},
+  selection: { count: 1 },
+  data: { products: [], variables: {} },
+};
+
+const initMsg = (compiledCode = "code", sessionId = SID): HostMessage => ({
+  protocol: PANEL_SANDBOX_PROTOCOL,
+  sessionId,
+  type: "panel/init",
+  compiledCode,
+  inputs: INPUTS,
+});
+
+/** A rAF that captures the callback so tests can flush frames deterministically. */
+const makeRaf = (): RafScheduler & { flush: () => void; pending: () => number } => {
+  const callbacks = new Map<number, () => void>();
+  let next = 1;
+  return {
+    request(cb) {
+      const id = next++;
+      callbacks.set(id, cb);
+      return id;
+    },
+    cancel(id) {
+      callbacks.delete(id);
+    },
+    flush() {
+      const snapshot = [...callbacks.values()];
+      callbacks.clear();
+      for (const cb of snapshot) cb();
+    },
+    pending() {
+      return callbacks.size;
+    },
+  };
+};
+
+interface FakeSession extends PanelSandboxSession {
+  updates: PanelSessionInputs[];
+  events: Array<{ nodeId: number; name: string; args: ReadonlyArray<unknown> }>;
+  disposed: boolean;
+  emitTree: (revision: number, tree: unknown) => void;
+  emitError: (message: string) => void;
+  emitIntents: (intents: ReadonlyArray<unknown>) => void;
+}
+
+/**
+ * Builds a driver with a fake session factory. `factory` decides what the mount
+ * returns (a fake session, null for "no panel", or throws). Returns the driver,
+ * the posted messages, the rAF, and a getter for the live fake session.
+ */
+const setup = (opts?: {
+  sessionId?: string;
+  factory?: PanelSandboxSessionFactory;
+}) => {
+  const posted: GuestMessage[] = [];
+  const raf = makeRaf();
+  let live: FakeSession | null = null;
+
+  const defaultFactory: PanelSandboxSessionFactory = (
+    o: PanelSandboxSessionFactoryOptions,
+  ) => {
+    const session: FakeSession = {
+      updates: [],
+      events: [],
+      disposed: false,
+      update(inputs) {
+        this.updates.push(inputs);
+      },
+      dispatchEvent(nodeId, name, args) {
+        this.events.push({ nodeId, name, args });
+        return true;
+      },
+      dispose() {
+        this.disposed = true;
+      },
+      emitTree: (revision, tree) => o.onTree(revision, tree),
+      emitError: (message) => o.onError(message),
+      emitIntents: (intents) => o.onIntents(intents),
+    };
+    live = session;
+    return session;
+  };
+
+  const driver = createPanelSandboxDriver({
+    sessionId: opts?.sessionId ?? SID,
+    post: (m) => posted.push(m),
+    createSession: opts?.factory ?? defaultFactory,
+    raf,
+  });
+
+  return { driver, posted, raf, session: () => live };
+};
+
+describe("panel-sandbox-driver", () => {
+  test("init mounts a session; update/event drive it", () => {
+    const { driver, session } = setup();
+    driver.handle(initMsg());
+    expect(session()).not.toBeNull();
+
+    driver.handle({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/update",
+      inputs: INPUTS,
+    });
+    expect(session()?.updates.length).toBe(1);
+
+    driver.handle({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/event",
+      nodeId: 4,
+      name: "onClick",
+      args: [1, 2],
+    });
+    expect(session()?.events).toEqual([{ nodeId: 4, name: "onClick", args: [1, 2] }]);
+  });
+
+  test("tree emissions are rAF-coalesced, latest-revision-wins", () => {
+    const { driver, posted, raf, session } = setup();
+    driver.handle(initMsg());
+
+    session()?.emitTree(1, { a: 1 });
+    session()?.emitTree(2, { a: 2 });
+    session()?.emitTree(3, { a: 3 });
+    // Nothing posted until the frame flushes.
+    expect(posted.filter((m) => m.type === "panel/tree")).toHaveLength(0);
+    expect(raf.pending()).toBe(1);
+
+    raf.flush();
+    const trees = posted.filter((m) => m.type === "panel/tree");
+    expect(trees).toHaveLength(1);
+    expect(trees[0]).toMatchObject({ revision: 3, tree: { a: 3 } });
+  });
+
+  test("ping is answered immediately with a matching pong (no rAF)", () => {
+    const { driver, posted } = setup();
+    driver.handle(initMsg());
+    driver.handle({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/ping",
+      seq: 99,
+    });
+    expect(posted.find((m) => m.type === "panel/pong")).toMatchObject({ seq: 99 });
+  });
+
+  test("intents are forwarded as a panel/intent message", () => {
+    const { driver, posted, session } = setup();
+    driver.handle(initMsg());
+    session()?.emitIntents([{ type: "reset-prop", name: "x" }]);
+    const intent = posted.find((m) => m.type === "panel/intent");
+    expect(intent).toMatchObject({ intents: [{ type: "reset-prop", name: "x" }] });
+  });
+
+  test("a render error is posted as panel/error{render}", () => {
+    const { driver, posted, session } = setup();
+    driver.handle(initMsg());
+    session()?.emitError("effect blew up");
+    expect(posted.find((m) => m.type === "panel/error")).toMatchObject({
+      phase: "render",
+      message: "effect blew up",
+    });
+  });
+
+  test("no panel → panel/error{init}", () => {
+    const { driver, posted } = setup({ factory: () => null });
+    driver.handle(initMsg());
+    expect(posted.find((m) => m.type === "panel/error")).toMatchObject({ phase: "init" });
+  });
+
+  test("a factory throw → panel/error{init}", () => {
+    const { driver, posted } = setup({
+      factory: () => {
+        throw new Error("load failed");
+      },
+    });
+    driver.handle(initMsg());
+    expect(posted.find((m) => m.type === "panel/error")).toMatchObject({
+      phase: "init",
+      message: "load failed",
+    });
+  });
+
+  test("messages with a mismatched sessionId are ignored", () => {
+    const { driver, session } = setup();
+    driver.handle(initMsg());
+    driver.handle({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: "other",
+      type: "panel/update",
+      inputs: INPUTS,
+    });
+    expect(session()?.updates.length).toBe(0);
+  });
+
+  test("unmount disposes the session", () => {
+    const { driver, session } = setup();
+    driver.handle(initMsg());
+    const s = session();
+    driver.handle({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId: SID, type: "panel/unmount" });
+    expect(s?.disposed).toBe(true);
+  });
+
+  test("dispose tears down the session and stops posting", () => {
+    const { driver, posted, session } = setup();
+    driver.handle(initMsg());
+    const s = session();
+    driver.dispose();
+    expect(s?.disposed).toBe(true);
+    const before = posted.length;
+    // Post-dispose messages are ignored.
+    driver.handle({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId: SID, type: "panel/ping", seq: 1 });
+    expect(posted.length).toBe(before);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.ts
new file mode 100644
index 000000000..99d7362d8
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-driver.ts
@@ -0,0 +1,308 @@
+/**
+ * The guest-side driver for a LIVE panel sandbox, extracted from the srcdoc as a
+ * testable module. jsdom cannot execute an iframe's `srcdoc` scripts, so the
+ * real isolation bootstrap ({@link ./panel-sandbox-document}) is a thin adapter:
+ * it installs the require shim + rAF plumbing, then delegates every host message
+ * to a {@link PanelSandboxDriver} built here. This module is verified directly
+ * (init/update/event/ping/unmount handling, rAF tree coalescing, error phases)
+ * with a fake session + fake `post`.
+ *
+ * The driver owns exactly one {@link PanelSession}. It never trusts the compiled
+ * author module: a load failure, a definition without a `panel` function, or a
+ * render/effect throw all become a `panel/error` posted back with the right
+ * `phase`. The host re-validates every emitted tree.
+ */
+import type { PanelSession, PanelSessionInputs } from "@voidhash/paywalls/panel";
+
+import { PANEL_SANDBOX_PROTOCOL, type GuestMessage, type HostMessage } from "./sandbox-messages";
+
+/**
+ * The minimal session surface the driver drives, structurally satisfied by the
+ * OSS {@link PanelSession}. Kept local so the driver tests can supply a fake
+ * without pulling the reconciler into jsdom.
+ */
+export interface PanelSandboxSession {
+  update(inputs: PanelSessionInputs): void;
+  dispatchEvent(nodeId: number, name: string, args: ReadonlyArray<unknown>): boolean;
+  dispose(): void;
+}
+
+/** How the driver mounts a session from a compiled module + initial inputs. */
+export interface PanelSandboxSessionFactoryOptions {
+  /** The compiled author module (CJS source string). */
+  readonly compiledCode: string;
+  /** The initial host input snapshot. */
+  readonly initialInputs: PanelSessionInputs;
+  /** rAF-coalesced tree emission: the driver forwards this to `panel/tree`. */
+  readonly onTree: (revision: number, tree: unknown) => void;
+  /** A render/effect error: the driver forwards this as `panel/error{render}`. */
+  readonly onError: (message: string) => void;
+  /** Author `ctx.props.*` writes: the driver forwards these as `panel/intent`. */
+  readonly onIntents: (intents: ReadonlyArray<unknown>) => void;
+}
+
+/**
+ * Loads the compiled module, resolves its panel function, and mounts a session.
+ * Returns `null` when the module has no `panel` (an author-error the driver
+ * turns into `panel/error{init}`). Throws on a module load / evaluation failure
+ * (also `panel/error{init}`). The real implementation lives in the srcdoc (it
+ * needs the guest global + require shim); tests supply a fake.
+ */
+export type PanelSandboxSessionFactory = (
+  options: PanelSandboxSessionFactoryOptions,
+) => PanelSandboxSession | null;
+
+/** Schedules a callback on the next animation frame; returns a cancel handle. */
+export interface RafScheduler {
+  request(callback: () => void): number;
+  cancel(handle: number): void;
+}
+
+/** Everything the driver needs from its host environment (injected for tests). */
+export interface PanelSandboxDriverDeps {
+  /** The active `sessionId` — the driver ignores messages that don't match. */
+  readonly sessionId: string;
+  /** Posts a guest→host message (real impl: `parent.postMessage(m, "*")`). */
+  readonly post: (message: GuestMessage) => void;
+  /** Mounts a session from a compiled module. */
+  readonly createSession: PanelSandboxSessionFactory;
+  /** rAF used to coalesce tree emissions (real rAF in the live document). */
+  readonly raf: RafScheduler;
+}
+
+/** The guest driver handle: feed it decoded host messages, dispose to tear down. */
+export interface PanelSandboxDriver {
+  /** Handles one already-decoded host message (wrong sessionId → ignored). */
+  handle(message: HostMessage): void;
+  /** Tears the session down and releases rAF; idempotent. */
+  dispose(): void;
+}
+
+/**
+ * Builds the guest driver. The driver posts a `panel/ready` only from the real
+ * bootstrap (after the global is installed); mounting happens on the first
+ * `panel/init`. All guest→host messages carry the driver's `sessionId`, so a
+ * host that regenerated the id (restart) drops everything from the old driver.
+ */
+export const createPanelSandboxDriver = (deps: PanelSandboxDriverDeps): PanelSandboxDriver => {
+  const { sessionId, post, createSession, raf } = deps;
+
+  let session: PanelSandboxSession | null = null;
+  let disposed = false;
+
+  // rAF tree coalescing: the OSS session already microtask-coalesces its
+  // emissions, but a burst of commits within one frame would still post one
+  // `panel/tree` each. We hold only the LATEST (revision, tree) and post once
+  // per frame — latest-revision-wins, so the host never renders a stale tree.
+  let pendingTree: { revision: number; tree: unknown } | null = null;
+  let rafHandle: number | null = null;
+
+  const emit = (message: GuestMessage): void => {
+    if (disposed) return;
+    post(message);
+  };
+
+  const flushTree = (): void => {
+    rafHandle = null;
+    if (disposed || pendingTree === null) return;
+    const { revision, tree } = pendingTree;
+    pendingTree = null;
+    emit({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId, type: "panel/tree", revision, tree });
+  };
+
+  const scheduleTree = (revision: number, tree: unknown): void => {
+    if (disposed) return;
+    // Latest wins: a newer revision replaces an unflushed older one.
+    if (pendingTree === null || revision >= pendingTree.revision) {
+      pendingTree = { revision, tree };
+    }
+    if (rafHandle === null) {
+      rafHandle = raf.request(flushTree);
+    }
+  };
+
+  const cancelTree = (): void => {
+    if (rafHandle !== null) {
+      raf.cancel(rafHandle);
+      rafHandle = null;
+    }
+    pendingTree = null;
+  };
+
+  const disposeSession = (): void => {
+    cancelTree();
+    if (session !== null) {
+      try {
+        session.dispose();
+      } catch {
+        // A dispose throw must not wedge the driver; the iframe is discarded.
+      }
+      session = null;
+    }
+  };
+
+  const postError = (phase: "init" | "render" | "runtime", message: string): void => {
+    emit({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId, type: "panel/error", phase, message });
+  };
+
+  const errorText = (error: unknown): string =>
+    error instanceof Error ? error.message : String(error);
+
+  const onInit = (compiledCode: string, inputs: unknown): void => {
+    // A second init on a live driver replaces the session (a host restart uses a
+    // fresh driver, but guard defensively so we never leak a session).
+    disposeSession();
+    let mounted: PanelSandboxSession | null;
+    try {
+      mounted = createSession({
+        compiledCode,
+        initialInputs: inputs as PanelSessionInputs,
+        onTree: scheduleTree,
+        onError: (message) => postError("render", message),
+        onIntents: (intents) =>
+          emit({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId, type: "panel/intent", intents }),
+      });
+    } catch (error) {
+      postError("init", errorText(error));
+      return;
+    }
+    if (mounted === null) {
+      postError("init", "This component does not declare a custom panel.");
+      return;
+    }
+    session = mounted;
+  };
+
+  const onUpdate = (inputs: unknown): void => {
+    if (session === null) return;
+    try {
+      session.update(inputs as PanelSessionInputs);
+    } catch (error) {
+      postError("runtime", errorText(error));
+    }
+  };
+
+  const onEvent = (nodeId: number, name: string, args: ReadonlyArray<unknown>): void => {
+    if (session === null) return;
+    try {
+      session.dispatchEvent(nodeId, name, args);
+    } catch (error) {
+      postError("runtime", errorText(error));
+    }
+  };
+
+  const onPing = (seq: number): void => {
+    // Answered immediately (no rAF) — a pong is the event-loop liveness probe;
+    // deferring it would defeat the host's heartbeat watchdog.
+    emit({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId, type: "panel/pong", seq });
+  };
+
+  return {
+    handle(message: HostMessage) {
+      if (disposed || message.sessionId !== sessionId) return;
+      switch (message.type) {
+        case "panel/init":
+          onInit(message.compiledCode, message.inputs);
+          return;
+        case "panel/update":
+          onUpdate(message.inputs);
+          return;
+        case "panel/event":
+          onEvent(message.nodeId, message.name, message.args);
+          return;
+        case "panel/ping":
+          onPing(message.seq);
+          return;
+        case "panel/unmount":
+          disposeSession();
+          return;
+      }
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      disposeSession();
+    },
+  };
+};
+
+/**
+ * The real session factory used by the srcdoc: evaluates the compiled module
+ * through the guest global's require shim, describes it, and (when it has a
+ * panel) mounts a {@link PanelSession} wired to the driver's callbacks. Exposed
+ * as a named factory so the bootstrap stays a thin adapter and the wiring is
+ * inspectable. Runs ONLY inside the sandbox (needs the guest global).
+ *
+ * `guest` is the OSS sandbox IIFE global (`window.__VOIDHASH_PAYWALLS_SANDBOX__`).
+ */
+export interface PanelSandboxGuestGlobal {
+  readonly modules: Readonly<Record<string, unknown>>;
+  describeComponent(definition: unknown): { readonly hasPanel: boolean };
+  createPanelSession(options: {
+    render: unknown;
+    initialInputs: PanelSessionInputs;
+    intentSink?: (intents: ReadonlyArray<unknown>) => void;
+    callbacks: {
+      onTree: (tree: unknown, revision: number) => void;
+      onError: (error: unknown) => void;
+    };
+  }): PanelSession;
+}
+
+/**
+ * Loads a compiled CJS module through the guest global's require shim and
+ * returns the exported component definition (default or named `definition`).
+ * Throws when the module has no valid definition.
+ */
+export const loadCompiledDefinition = (
+  guest: PanelSandboxGuestGlobal,
+  compiledCode: string,
+): { readonly panel?: unknown } => {
+  const requireShim = (specifier: string): unknown => {
+    const mod = guest.modules[specifier];
+    if (mod === undefined) {
+      throw new Error(`Cannot find module '${specifier}'`);
+    }
+    return mod;
+  };
+  const moduleObj: { exports: Record<string, unknown> } = { exports: {} };
+  // eslint-disable-next-line @typescript-eslint/no-implied-eval
+  const factory = new Function("require", "module", "exports", compiledCode) as (
+    require: (s: string) => unknown,
+    module: { exports: Record<string, unknown> },
+    exports: Record<string, unknown>,
+  ) => void;
+  factory(requireShim, moduleObj, moduleObj.exports);
+  const definition = (moduleObj.exports.default ?? moduleObj.exports.definition) as
+    | { readonly panel?: unknown }
+    | undefined;
+  if (!definition || typeof (definition as { render?: unknown }).render !== "function") {
+    throw new Error("Component must export a default defineComponent({ ... })");
+  }
+  return definition;
+};
+
+/**
+ * Builds the real {@link PanelSandboxSessionFactory} bound to a guest global.
+ * Used by the srcdoc bootstrap. Returns `null` when the loaded definition has no
+ * panel function (the driver turns that into `panel/error{init}`).
+ */
+export const makeGuestSessionFactory =
+  (guest: PanelSandboxGuestGlobal): PanelSandboxSessionFactory =>
+  (options) => {
+    const definition = loadCompiledDefinition(guest, options.compiledCode);
+    if (!guest.describeComponent(definition).hasPanel || typeof definition.panel !== "function") {
+      return null;
+    }
+    const session = guest.createPanelSession({
+      render: definition.panel,
+      initialInputs: options.initialInputs,
+      intentSink: options.onIntents,
+      callbacks: {
+        onTree: (tree, revision) => options.onTree(revision, tree),
+        onError: (error) =>
+          options.onError(error instanceof Error ? error.message : String(error)),
+      },
+    });
+    return session;
+  };
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.test.ts
new file mode 100644
index 000000000..0d1838e1b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.test.ts
@@ -0,0 +1,354 @@
+// @vitest-environment jsdom
+
+import type { PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { afterEach, describe, expect, test, vi } from "vite-plus/test";
+
+import {
+  createPanelSandboxTransport,
+  PANEL_SANDBOX_WATCHDOGS,
+} from "./panel-sandbox-host";
+import { PANEL_SANDBOX_PROTOCOL, type GuestMessage } from "./sandbox-messages";
+
+const INPUTS: PanelSessionInputs = {
+  props: {},
+  selection: { count: 1 },
+  data: { products: [], variables: {} },
+};
+
+const VALID_TREE = {
+  version: 1,
+  root: { type: "panel", id: 0, props: {}, events: [], children: [] },
+};
+
+/**
+ * Dispatches a `message` event on window carrying `data`. The host adds its
+ * listener on window, and its source check is stubbed true (see `makeTransport`),
+ * so this simulates a guest posting `data`.
+ */
+const emit = (data: unknown): void => {
+  window.dispatchEvent(new MessageEvent("message", { data }));
+};
+
+/** Reads the current sessionId off the last posted host message to the iframe. */
+const sessionIdFromPostedInit = (): string => {
+  const iframe = document.querySelector("iframe");
+  return (iframe as unknown as { __lastPost?: { sessionId?: string } })?.__lastPost?.sessionId ?? "";
+};
+
+/**
+ * Builds a transport with the source check stubbed to always-true and a stub
+ * `sandboxCode`. Captures the sessionId the host mints by intercepting the init
+ * postMessage to the iframe's contentWindow (patched to record posts).
+ */
+const makeTransport = (
+  onIntents: (raw: unknown) => void = () => {},
+  onFatal?: (message: string) => void,
+) => {
+  const posts: Array<{ sessionId?: string; type?: string; seq?: number }> = [];
+  // Patch iframe creation: intercept the contentWindow.postMessage so we can
+  // read the minted sessionId and the ping seqs the host sends.
+  const origAppend = document.body.appendChild.bind(document.body);
+  const appendSpy = vi
+    .spyOn(document.body, "appendChild")
+    .mockImplementation(<T extends Node>(node: T): T => {
+      const result = origAppend(node as never) as T;
+      const iframe = node as unknown as HTMLIFrameElement;
+      if (iframe.tagName === "IFRAME") {
+        const win = iframe.contentWindow as unknown as {
+          postMessage?: (m: unknown) => void;
+        } | null;
+        if (win) {
+          win.postMessage = (m: unknown) => {
+            posts.push(m as never);
+            (iframe as unknown as { __lastPost?: unknown }).__lastPost = m;
+          };
+        }
+      }
+      return result;
+    });
+
+  const transport = createPanelSandboxTransport({
+    compiledCode: "module.exports = { default: {} };",
+    initialInputs: INPUTS,
+    onIntents,
+    onFatal,
+    sandboxCode: "/* stub iife */",
+    isTrustedSource: () => true,
+  });
+
+  return { transport, posts, appendSpy };
+};
+
+/** Emits a `panel/ready` (no sessionId needed) then completes the handshake. */
+const completeHandshake = (sessionId: string): void => {
+  emit({ protocol: PANEL_SANDBOX_PROTOCOL, type: "panel/ready", sessionId });
+};
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  vi.useRealTimers();
+  document.querySelectorAll("iframe").forEach((f) => f.remove());
+});
+
+describe("panel-sandbox-host — handshake + snapshots", () => {
+  test("starts loading and mounts a hidden iframe", () => {
+    const { transport } = makeTransport();
+    try {
+      expect(transport.kind).toBe("sandbox");
+      expect(transport.getSnapshot().status).toBe("loading");
+      const iframe = document.querySelector("iframe");
+      expect(iframe).not.toBeNull();
+      expect(iframe?.getAttribute("sandbox")).toBe("allow-scripts");
+      expect(iframe?.style.display).toBe("none");
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("a valid panel/tree transitions to ready with the decoded tree", () => {
+    const { transport } = makeTransport();
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      emit({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/tree",
+        revision: 1,
+        tree: VALID_TREE,
+      });
+      const snap = transport.getSnapshot();
+      expect(snap.status).toBe("ready");
+      if (snap.status === "ready") {
+        expect(snap.revision).toBe(1);
+        expect(snap.tree.root.type).toBe("panel");
+      }
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("a stale (lower/equal) revision is dropped", () => {
+    const { transport } = makeTransport();
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      const tree = (revision: number): GuestMessage => ({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/tree",
+        revision,
+        tree: VALID_TREE,
+      });
+      emit(tree(3));
+      emit(tree(2)); // stale
+      const snap = transport.getSnapshot();
+      expect(snap.status === "ready" && snap.revision).toBe(3);
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("an invalid tree is a protocol violation, not a ready snapshot", () => {
+    const { transport } = makeTransport();
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      emit({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/tree",
+        revision: 1,
+        tree: { version: 1, root: { type: "not-a-real-node", id: 0, props: {}, events: [] } },
+      });
+      // Still loading (no valid tree accepted).
+      expect(transport.getSnapshot().status).toBe("loading");
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("intents are forwarded RAW to onIntents", () => {
+    const received: unknown[] = [];
+    const { transport } = makeTransport((raw) => received.push(raw));
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      const raw = [{ type: "set-prop", name: "label", value: "hi", gesture: "commit" }];
+      emit({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId, type: "panel/intent", intents: raw });
+      expect(received).toHaveLength(1);
+      expect(received[0]).toEqual(raw);
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("a guest panel/error surfaces a restartable error snapshot", () => {
+    const { transport } = makeTransport();
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      emit({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/error",
+        phase: "render",
+        message: "kaboom",
+      });
+      const snap = transport.getSnapshot();
+      expect(snap.status).toBe("error");
+      if (snap.status === "error") {
+        expect(snap.restartable).toBe(true);
+        expect(snap.message).toContain("kaboom");
+      }
+    } finally {
+      transport.dispose();
+    }
+  });
+});
+
+describe("panel-sandbox-host — watchdogs", () => {
+  test("init timeout with no panel/ready → error", () => {
+    vi.useFakeTimers();
+    const { transport } = makeTransport();
+    try {
+      expect(transport.getSnapshot().status).toBe("loading");
+      vi.advanceTimersByTime(PANEL_SANDBOX_WATCHDOGS.initTimeoutMs + 10);
+      // Auto-restart re-mounts (still loading) — but the FIRST attempt errored.
+      // After the budget is spent it stays in error; here it restarts to loading.
+      const snap = transport.getSnapshot();
+      expect(["loading", "error"]).toContain(snap.status);
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("missed pongs kill the guest with a restartable error", () => {
+    vi.useFakeTimers();
+    const { transport } = makeTransport();
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      // Never pong; advance past (maxMissedPongs + 1) ping intervals.
+      const intervals = PANEL_SANDBOX_WATCHDOGS.maxMissedPongs + 2;
+      vi.advanceTimersByTime(PANEL_SANDBOX_WATCHDOGS.pingIntervalMs * intervals + 10);
+      const snap = transport.getSnapshot();
+      // A kill either shows the error, or auto-restarted back to loading.
+      expect(["error", "loading"]).toContain(snap.status);
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("a tree flood kills the guest", () => {
+    const onFatal = vi.fn();
+    const { transport } = makeTransport(() => {}, onFatal);
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      // Emit far more than maxTreesPerSecond within the window.
+      const flood = PANEL_SANDBOX_WATCHDOGS.maxTreesPerSecond * 4;
+      let rev = 1;
+      let errored = false;
+      for (let i = 0; i < flood; i++) {
+        emit({
+          protocol: PANEL_SANDBOX_PROTOCOL,
+          sessionId,
+          type: "panel/tree",
+          revision: rev++,
+          tree: VALID_TREE,
+        });
+        if (transport.getSnapshot().status === "error") {
+          errored = true;
+          break;
+        }
+      }
+      expect(errored).toBe(true);
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("repeated protocol violations exhaust the budget → error", () => {
+    const { transport } = makeTransport();
+    try {
+      const sessionId = sessionIdFromPostedInit();
+      completeHandshake(sessionId);
+      // Send many malformed (wrong-schema) messages that pass the source check.
+      let errored = false;
+      for (let i = 0; i < PANEL_SANDBOX_WATCHDOGS.maxProtocolViolations + 5; i++) {
+        emit({ protocol: PANEL_SANDBOX_PROTOCOL, sessionId, type: "panel/garbage" });
+        if (transport.getSnapshot().status === "error") {
+          errored = true;
+          break;
+        }
+      }
+      expect(errored).toBe(true);
+    } finally {
+      transport.dispose();
+    }
+  });
+});
+
+describe("panel-sandbox-host — lifecycle", () => {
+  test("restart regenerates the sessionId; old-session messages are ignored", () => {
+    const { transport } = makeTransport();
+    try {
+      const first = sessionIdFromPostedInit();
+      completeHandshake(first);
+      emit({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId: first,
+        type: "panel/tree",
+        revision: 1,
+        tree: VALID_TREE,
+      });
+      expect(transport.getSnapshot().status).toBe("ready");
+
+      transport.restart();
+      const second = sessionIdFromPostedInit();
+      expect(second).not.toBe(first);
+      expect(transport.getSnapshot().status).toBe("loading");
+
+      // An old-session tree must NOT be accepted.
+      emit({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId: first,
+        type: "panel/tree",
+        revision: 9,
+        tree: VALID_TREE,
+      });
+      expect(transport.getSnapshot().status).toBe("loading");
+
+      // The new session works.
+      completeHandshake(second);
+      emit({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId: second,
+        type: "panel/tree",
+        revision: 1,
+        tree: VALID_TREE,
+      });
+      expect(transport.getSnapshot().status).toBe("ready");
+    } finally {
+      transport.dispose();
+    }
+  });
+
+  test("dispose removes the iframe and detaches the listener", () => {
+    const { transport } = makeTransport();
+    const sessionId = sessionIdFromPostedInit();
+    completeHandshake(sessionId);
+    transport.dispose();
+    expect(document.querySelector("iframe")).toBeNull();
+    // Post-dispose messages are inert (no throw, no snapshot change).
+    emit({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId,
+      type: "panel/tree",
+      revision: 1,
+      tree: VALID_TREE,
+    });
+    expect(transport.getSnapshot().status).not.toBe("ready");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.ts
new file mode 100644
index 000000000..ba24517ab
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/panel-sandbox-host.ts
@@ -0,0 +1,463 @@
+/**
+ * The host side of the LIVE panel sandbox transport. It owns a hidden iframe
+ * running the {@link ../code-mode/sandbox-document panel sandbox document},
+ * speaks the strict {@link ./sandbox-messages} protocol to it, and exposes the
+ * uniform {@link PanelTransport} the renderer + gesture controller drive — so
+ * neither branches on the engine (a built-in panel uses the in-process
+ * transport instead).
+ *
+ * The channel is a trust boundary. Every inbound message is envelope-decoded
+ * ({@link decodeGuestMessage}), source-checked against the owning iframe, and
+ * session-checked (a regenerated `sessionId` on every init/restart drops ghost
+ * messages from a torn-down iframe). Every `panel/tree` is value-validated with
+ * {@link decodePanelTree} (byte-capped, strict, latest-revision-wins).
+ * `panel/intent` payloads are forwarded RAW to `onIntents` after only envelope
+ * validation — value-level validation is the intent executor's job.
+ *
+ * Watchdogs bound every failure mode (see {@link PANEL_SANDBOX_WATCHDOGS}): an
+ * init timeout, a ping/pong heartbeat, a tree-rate kill switch, an intent-rate
+ * cap, and a protocol-violation budget. A tripped watchdog kills the iframe and
+ * surfaces a restartable error; after the auto-restart budget is exhausted the
+ * transport calls `onFatal` and the panel slot decides the fallback.
+ */
+import type { PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { sandboxRuntimeBundle } from "@voidhash/paywalls/sandbox-bundle";
+
+import { PANEL_SANDBOX_DOCUMENT } from "./panel-sandbox-document";
+import {
+  decodeGuestMessage,
+  encodeHostMessage,
+  PANEL_SANDBOX_PROTOCOL,
+  type GuestMessage,
+  type HostMessage,
+} from "./sandbox-messages";
+import { decodePanelTree } from "./schema";
+import type { PanelDispatchEvent, PanelSnapshot, PanelTransport } from "./transport";
+
+/**
+ * Watchdog parameters. Tuned so a healthy 60fps live panel never trips them,
+ * while a wedged / abusive guest is killed within a few seconds.
+ */
+export const PANEL_SANDBOX_WATCHDOGS = {
+  /** No `panel/ready` within this window after mount → error. */
+  initTimeoutMs: 6000,
+  /** Heartbeat `panel/ping` cadence. */
+  pingIntervalMs: 2500,
+  /** Consecutive missed pongs before the guest is declared dead. */
+  maxMissedPongs: 2,
+  /** Tree messages per second, sustained over the window, before a kill. */
+  maxTreesPerSecond: 120,
+  /** The sliding window (ms) the tree-rate kill switch samples over. */
+  treeRateWindowMs: 1000,
+  /** Intents per second forwarded to `onIntents` before excess is dropped. */
+  maxIntentsPerSecond: 240,
+  /** The sliding window (ms) the intent-rate cap samples over. */
+  intentRateWindowMs: 1000,
+  /** Protocol violations (malformed/oversized/wrong-schema) before a kill. */
+  maxProtocolViolations: 12,
+  /** Automatic restarts after a watchdog kill before `onFatal` fires. */
+  maxAutoRestarts: 2,
+  /**
+   * Backoff before an auto-restart re-mounts, so the error snapshot is
+   * observable (the slot can react) and a hot-looping failure cannot busy-spin.
+   */
+  restartBackoffMs: 400,
+} as const;
+
+/** Options for {@link createPanelSandboxTransport}. */
+export interface PanelSandboxTransportOptions {
+  /** The compiled author CJS module (the code-component definition module). */
+  readonly compiledCode: string;
+  /** The initial serializable host input snapshot. */
+  readonly initialInputs: PanelSessionInputs;
+  /**
+   * Raw `panel/intent` payload (the guest's `intents` array), forwarded after
+   * only envelope validation — the intent executor validates each intent's
+   * value/shape and applies its own size/rate policy.
+   */
+  readonly onIntents: (raw: unknown) => void;
+  /** Terminal failure after the auto-restart budget is exhausted. */
+  readonly onFatal?: (message: string) => void;
+  /**
+   * The OSS sandbox IIFE bundle (evaluated once inside the iframe to install the
+   * guest global + require shim). Defaults to `@voidhash/paywalls/sandbox-bundle`;
+   * injectable so tests can supply a stub without shipping the ~MB bundle.
+   */
+  readonly sandboxCode?: string;
+  /**
+   * The message-source check seam. Real hosts verify `event.source ===
+   * iframe.contentWindow`; tests inject an always-true check so a fake guest can
+   * simulate `message` events against the transport. Receives the raw event and
+   * the current iframe (or null before mount).
+   */
+  readonly isTrustedSource?: (
+    event: MessageEvent,
+    iframe: HTMLIFrameElement | null,
+  ) => boolean;
+}
+
+const errorText = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+/** Real source check: the message came from the iframe we own. */
+const defaultIsTrustedSource = (
+  event: MessageEvent,
+  iframe: HTMLIFrameElement | null,
+): boolean => iframe !== null && event.source === iframe.contentWindow;
+
+let sessionCounter = 0;
+/** A fresh session id per init/restart, so ghost messages never match. */
+const nextSessionId = (): string => {
+  sessionCounter += 1;
+  return `panel-${Date.now().toString(36)}-${sessionCounter.toString(36)}`;
+};
+
+/**
+ * Creates the sandbox-backed {@link PanelTransport}. The iframe is mounted lazily
+ * on construction (document.body-appended + hidden, mirroring the preview
+ * {@link ../code-mode/sandbox-host SandboxHost}); {@link PanelTransport.restart}
+ * tears it down and re-inits with a fresh `sessionId` (fresh author state);
+ * {@link PanelTransport.dispose} unmounts the session and removes the iframe.
+ */
+export const createPanelSandboxTransport = (
+  options: PanelSandboxTransportOptions,
+): PanelTransport => {
+  const isTrustedSource = options.isTrustedSource ?? defaultIsTrustedSource;
+  const sandboxCode = options.sandboxCode ?? sandboxRuntimeBundle;
+  const canMount = typeof document !== "undefined";
+
+  const listeners = new Set<() => void>();
+  let snapshot: PanelSnapshot = { status: "loading" };
+
+  let iframe: HTMLIFrameElement | null = null;
+  let sessionId = "";
+  let disposed = false;
+  let ready = false;
+  let latestInputs: PanelSessionInputs = options.initialInputs;
+  let lastAcceptedRevision = -1;
+  let autoRestarts = 0;
+
+  // Watchdog timers / counters (reset per (re)mount).
+  let initTimer: ReturnType<typeof setTimeout> | null = null;
+  let pingTimer: ReturnType<typeof setInterval> | null = null;
+  let restartTimer: ReturnType<typeof setTimeout> | null = null;
+  let pingSeq = 0;
+  let missedPongs = 0;
+  let protocolViolations = 0;
+  let treeTimes: number[] = [];
+  let intentTimes: number[] = [];
+
+  const now = (): number =>
+    typeof performance !== "undefined" ? performance.now() : Date.now();
+
+  const notify = (): void => {
+    for (const listener of listeners) listener();
+  };
+
+  const setSnapshot = (next: PanelSnapshot): void => {
+    snapshot = next;
+    notify();
+  };
+
+  const clearTimers = (): void => {
+    if (initTimer !== null) {
+      clearTimeout(initTimer);
+      initTimer = null;
+    }
+    if (pingTimer !== null) {
+      clearInterval(pingTimer);
+      pingTimer = null;
+    }
+    if (restartTimer !== null) {
+      clearTimeout(restartTimer);
+      restartTimer = null;
+    }
+  };
+
+  const teardownIframe = (): void => {
+    clearTimers();
+    if (typeof window !== "undefined") {
+      window.removeEventListener("message", handleMessage);
+    }
+    iframe?.remove();
+    iframe = null;
+    ready = false;
+  };
+
+  /** Posts a host→guest message (strict-encoded) to the current iframe. */
+  const postToGuest = (message: HostMessage): void => {
+    const target = iframe?.contentWindow;
+    if (!target) return;
+    target.postMessage(encodeHostMessage(message), "*");
+  };
+
+  /**
+   * Kills the current iframe and surfaces a restartable error snapshot. Within
+   * the auto-restart budget it schedules a backoff remount (so the error is
+   * observable and a hot-looping failure can't busy-spin); once the budget is
+   * exhausted it surfaces a non-restartable error and fires `onFatal` — the
+   * slot then decides the fallback rendering.
+   */
+  const fail = (message: string): void => {
+    if (disposed) return;
+    teardownIframe();
+    if (autoRestarts < PANEL_SANDBOX_WATCHDOGS.maxAutoRestarts) {
+      autoRestarts += 1;
+      setSnapshot({ status: "error", message, restartable: true });
+      restartTimer = setTimeout(() => {
+        restartTimer = null;
+        if (!disposed) mount();
+      }, PANEL_SANDBOX_WATCHDOGS.restartBackoffMs);
+      return;
+    }
+    setSnapshot({ status: "error", message, restartable: false });
+    options.onFatal?.(message);
+  };
+
+  /** One protocol violation; kill once the budget is spent. */
+  const countViolation = (reason: string): void => {
+    protocolViolations += 1;
+    if (protocolViolations > PANEL_SANDBOX_WATCHDOGS.maxProtocolViolations) {
+      fail(`Panel sandbox sent too many invalid messages (${reason}).`);
+    }
+  };
+
+  /** True when the sliding-window rate exceeds `max` per second. */
+  const overRate = (
+    times: number[],
+    windowMs: number,
+    maxPerSecond: number,
+  ): { over: boolean; kept: number[] } => {
+    const cutoff = now() - windowMs;
+    const kept = times.filter((t) => t >= cutoff);
+    const perSecond = (kept.length / windowMs) * 1000;
+    return { over: perSecond > maxPerSecond, kept };
+  };
+
+  const acceptTree = (message: Extract<GuestMessage, { type: "panel/tree" }>): void => {
+    // Tree-rate kill switch: a runaway emitter (an effect looping setState) is
+    // killed rather than melting the host thread with decode + render.
+    treeTimes.push(now());
+    const rate = overRate(
+      treeTimes,
+      PANEL_SANDBOX_WATCHDOGS.treeRateWindowMs,
+      PANEL_SANDBOX_WATCHDOGS.maxTreesPerSecond,
+    );
+    treeTimes = rate.kept;
+    if (rate.over) {
+      fail("Panel sandbox emitted trees too fast and was stopped.");
+      return;
+    }
+
+    // Latest-revision-wins: drop a stale emission (a late rAF from before an
+    // update superseded it).
+    if (message.revision <= lastAcceptedRevision) {
+      return;
+    }
+
+    const decoded = decodePanelTree(message.tree);
+    if (!decoded.ok) {
+      countViolation(`invalid tree: ${decoded.error}`);
+      return;
+    }
+    lastAcceptedRevision = message.revision;
+    setSnapshot({ status: "ready", tree: decoded.tree, revision: message.revision });
+  };
+
+  const acceptIntents = (message: Extract<GuestMessage, { type: "panel/intent" }>): void => {
+    // Intent-rate cap: forward up to the budget; drop + count violations beyond
+    // so a flood cannot drive the executor (or the CRDT) unbounded.
+    const rate = overRate(
+      intentTimes,
+      PANEL_SANDBOX_WATCHDOGS.intentRateWindowMs,
+      PANEL_SANDBOX_WATCHDOGS.maxIntentsPerSecond,
+    );
+    intentTimes = rate.kept;
+    if (rate.over) {
+      countViolation("intent flood");
+      return;
+    }
+    for (const _intent of message.intents) intentTimes.push(now());
+    // The executor validates each intent's value/shape — we forward RAW.
+    options.onIntents(message.intents);
+  };
+
+  const onGuestMessage = (message: GuestMessage): void => {
+    // A regenerated session id drops everything from a prior (torn-down) iframe.
+    // The guest pins its session id from `panel/init` and stamps every message
+    // (including `panel/ready`) with it, so this one check gates them all.
+    if (message.sessionId !== sessionId) {
+      return;
+    }
+    switch (message.type) {
+      case "panel/ready":
+        if (!ready) {
+          ready = true;
+          if (initTimer !== null) {
+            clearTimeout(initTimer);
+            initTimer = null;
+          }
+          startHeartbeat();
+        }
+        return;
+      case "panel/tree":
+        acceptTree(message);
+        return;
+      case "panel/intent":
+        acceptIntents(message);
+        return;
+      case "panel/pong":
+        missedPongs = 0;
+        return;
+      case "panel/error":
+        fail(guestErrorMessage(message.phase, message.message));
+        return;
+    }
+  };
+
+  function handleMessage(event: MessageEvent): void {
+    if (disposed || !isTrustedSource(event, iframe)) return;
+    const decoded = decodeGuestMessage(event.data);
+    if (!decoded.ok) {
+      countViolation(decoded.error);
+      return;
+    }
+    onGuestMessage(decoded.message);
+  }
+
+  const startHeartbeat = (): void => {
+    if (pingTimer !== null) return;
+    pingTimer = setInterval(() => {
+      if (disposed || !ready) return;
+      // Count a miss for the ping we're ABOUT to send whose pong hasn't arrived;
+      // a live guest resets `missedPongs` to 0 on every pong.
+      missedPongs += 1;
+      if (missedPongs > PANEL_SANDBOX_WATCHDOGS.maxMissedPongs) {
+        fail("Panel sandbox stopped responding.");
+        return;
+      }
+      pingSeq += 1;
+      postToGuest({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/ping",
+        seq: pingSeq,
+      });
+    }, PANEL_SANDBOX_WATCHDOGS.pingIntervalMs);
+  };
+
+  function mount(): void {
+    if (disposed || !canMount) {
+      if (!canMount) {
+        setSnapshot({
+          status: "error",
+          message: "Panel sandbox is unavailable in this environment.",
+          restartable: false,
+        });
+      }
+      return;
+    }
+    // Fresh identity + reset watchdog state for this attempt.
+    sessionId = nextSessionId();
+    ready = false;
+    lastAcceptedRevision = -1;
+    missedPongs = 0;
+    protocolViolations = 0;
+    pingSeq = 0;
+    treeTimes = [];
+    intentTimes = [];
+
+    const el = document.createElement("iframe");
+    el.setAttribute("sandbox", "allow-scripts");
+    el.setAttribute("aria-hidden", "true");
+    el.title = "Paywall panel sandbox";
+    el.style.display = "none";
+    el.srcdoc = PANEL_SANDBOX_DOCUMENT;
+    window.addEventListener("message", handleMessage);
+    document.body.appendChild(el);
+    iframe = el;
+    setSnapshot({ status: "loading" });
+
+    initTimer = setTimeout(() => {
+      if (!ready) fail("Panel sandbox failed to start.");
+    }, PANEL_SANDBOX_WATCHDOGS.initTimeoutMs);
+
+    // The guest evaluates the bundle on `panel/init`; post it immediately. The
+    // iframe queues messages until its inline bootstrap installs the listener.
+    postToGuest({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId,
+      type: "panel/init",
+      sandboxCode,
+      compiledCode: options.compiledCode,
+      inputs: latestInputs as unknown,
+    });
+  }
+
+  mount();
+
+  return {
+    kind: "sandbox",
+    update(next: unknown) {
+      if (disposed) return;
+      latestInputs = next as PanelSessionInputs;
+      postToGuest({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/update",
+        inputs: next,
+      });
+    },
+    dispatch(event: PanelDispatchEvent) {
+      if (disposed) return;
+      postToGuest({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/event",
+        nodeId: event.nodeId,
+        name: event.name,
+        args: event.args,
+      });
+    },
+    subscribe(cb) {
+      listeners.add(cb);
+      return () => {
+        listeners.delete(cb);
+      };
+    },
+    getSnapshot() {
+      return snapshot;
+    },
+    restart() {
+      if (disposed) return;
+      // A manual restart re-arms the auto-restart budget and mounts fresh state.
+      autoRestarts = 0;
+      teardownIframe();
+      setSnapshot({ status: "loading" });
+      mount();
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      // Best-effort unmount of the live session before discarding the iframe.
+      postToGuest({
+        protocol: PANEL_SANDBOX_PROTOCOL,
+        sessionId,
+        type: "panel/unmount",
+      });
+      teardownIframe();
+      listeners.clear();
+    },
+  };
+};
+
+const PHASE_LABEL: Record<"init" | "render" | "runtime", string> = {
+  init: "Panel failed to load",
+  render: "Panel failed to render",
+  runtime: "Panel hit a runtime error",
+};
+
+const guestErrorMessage = (
+  phase: "init" | "render" | "runtime",
+  message: string,
+): string => `${PHASE_LABEL[phase]}: ${message}`;
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.test.ts
new file mode 100644
index 000000000..b0b1f1ba9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.test.ts
@@ -0,0 +1,183 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  decodeGuestMessage,
+  decodeHostMessage,
+  encodeGuestMessage,
+  encodeHostMessage,
+  PANEL_MESSAGE_BYTE_CAPS,
+  PANEL_SANDBOX_PROTOCOL,
+  type GuestMessage,
+  type HostMessage,
+} from "./sandbox-messages";
+
+const SID = "panel-abc";
+
+const HOST_MESSAGES: HostMessage[] = [
+  {
+    protocol: PANEL_SANDBOX_PROTOCOL,
+    sessionId: SID,
+    type: "panel/init",
+    sandboxCode: "/* iife */",
+    compiledCode: "module.exports = {};",
+    inputs: { props: {}, selection: { count: 1 }, data: { products: [], variables: {} } },
+  },
+  {
+    protocol: PANEL_SANDBOX_PROTOCOL,
+    sessionId: SID,
+    type: "panel/update",
+    inputs: { props: { a: { kind: "string", value: "x" } } },
+  },
+  {
+    protocol: PANEL_SANDBOX_PROTOCOL,
+    sessionId: SID,
+    type: "panel/event",
+    nodeId: 3,
+    name: "onChange",
+    args: ["hello", 42, { nested: true }],
+  },
+  { protocol: PANEL_SANDBOX_PROTOCOL, sessionId: SID, type: "panel/ping", seq: 7 },
+  { protocol: PANEL_SANDBOX_PROTOCOL, sessionId: SID, type: "panel/unmount" },
+];
+
+const GUEST_MESSAGES: GuestMessage[] = [
+  { protocol: PANEL_SANDBOX_PROTOCOL, sessionId: SID, type: "panel/ready" },
+  {
+    protocol: PANEL_SANDBOX_PROTOCOL,
+    sessionId: SID,
+    type: "panel/tree",
+    revision: 5,
+    tree: { version: 1, root: { type: "panel", id: 0, props: {}, events: [], children: [] } },
+  },
+  {
+    protocol: PANEL_SANDBOX_PROTOCOL,
+    sessionId: SID,
+    type: "panel/intent",
+    intents: [{ type: "set-prop", name: "label", value: "hi", gesture: "commit" }],
+  },
+  { protocol: PANEL_SANDBOX_PROTOCOL, sessionId: SID, type: "panel/pong", seq: 7 },
+  {
+    protocol: PANEL_SANDBOX_PROTOCOL,
+    sessionId: SID,
+    type: "panel/error",
+    phase: "render",
+    message: "boom",
+  },
+];
+
+describe("sandbox-messages — round trip", () => {
+  test("every host→guest message round-trips through encode + decode", () => {
+    for (const message of HOST_MESSAGES) {
+      const wire = encodeHostMessage(message);
+      const decoded = decodeHostMessage(wire);
+      expect(decoded.ok).toBe(true);
+      if (decoded.ok) {
+        expect(decoded.message.type).toBe(message.type);
+        expect(decoded.message).toEqual(message);
+      }
+    }
+  });
+
+  test("every guest→host message round-trips through encode + decode", () => {
+    for (const message of GUEST_MESSAGES) {
+      const wire = encodeGuestMessage(message);
+      const decoded = decodeGuestMessage(wire);
+      expect(decoded.ok).toBe(true);
+      if (decoded.ok) {
+        expect(decoded.message.type).toBe(message.type);
+        expect(decoded.message).toEqual(message);
+      }
+    }
+  });
+});
+
+describe("sandbox-messages — rejection", () => {
+  test("a wrong protocol version is rejected", () => {
+    const result = decodeGuestMessage({ protocol: 2, sessionId: SID, type: "panel/ready" });
+    expect(result.ok).toBe(false);
+  });
+
+  test("a missing sessionId is rejected", () => {
+    const result = decodeHostMessage({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      type: "panel/ping",
+      seq: 1,
+    });
+    expect(result.ok).toBe(false);
+  });
+
+  test("an unknown message type is rejected", () => {
+    const result = decodeGuestMessage({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/whoops",
+    });
+    expect(result.ok).toBe(false);
+  });
+
+  test("excess properties are rejected (strict decode)", () => {
+    const result = decodeGuestMessage({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/pong",
+      seq: 1,
+      extra: "nope",
+    });
+    expect(result.ok).toBe(false);
+  });
+
+  test("a non-integer nodeId is rejected", () => {
+    const result = decodeHostMessage({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/event",
+      nodeId: 1.5,
+      name: "x",
+      args: [],
+    });
+    expect(result.ok).toBe(false);
+  });
+
+  test("an oversized tree message is rejected before decode", () => {
+    const huge = "a".repeat(PANEL_MESSAGE_BYTE_CAPS.tree + 1000);
+    const result = decodeGuestMessage({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/tree",
+      revision: 1,
+      tree: { blob: huge },
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toContain("exceeds");
+  });
+
+  test("an oversized intent message is rejected before decode", () => {
+    const huge = "b".repeat(PANEL_MESSAGE_BYTE_CAPS.intent + 1000);
+    const result = decodeGuestMessage({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/intent",
+      intents: [{ blob: huge }],
+    });
+    expect(result.ok).toBe(false);
+  });
+
+  test("tree carries raw unknown tree (no value-level tree validation here)", () => {
+    // The envelope decode passes even with a structurally-invalid tree — the
+    // host re-validates with decodePanelTree. This locks that separation.
+    const result = decodeGuestMessage({
+      protocol: PANEL_SANDBOX_PROTOCOL,
+      sessionId: SID,
+      type: "panel/tree",
+      revision: 1,
+      tree: { garbage: true },
+    });
+    expect(result.ok).toBe(true);
+  });
+
+  test("null / non-object input is rejected", () => {
+    expect(decodeGuestMessage(null).ok).toBe(false);
+    expect(decodeGuestMessage("hi").ok).toBe(false);
+    expect(decodeHostMessage(undefined).ok).toBe(false);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.ts
new file mode 100644
index 000000000..0e8dfb008
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/sandbox-messages.ts
@@ -0,0 +1,291 @@
+/**
+ * The strict postMessage protocol between the host and a LIVE panel sandbox
+ * iframe. Every message carries `protocol: 1` and a `sessionId`; the host
+ * regenerates the `sessionId` on every init/restart so ghost messages from a
+ * torn-down iframe are dropped by shape (a stale `sessionId` never matches).
+ *
+ * This module is the wire-format authority for BOTH directions. Unlike the
+ * preview sandbox (a one-shot request/response), the panel sandbox is a
+ * long-lived, high-frequency channel: React state, effects, and timers run
+ * inside the guest for the session's lifetime, and it streams full
+ * {@link PanelTree}s (rAF-coalesced guest-side) back on every commit.
+ *
+ * The host trusts NOTHING inbound. Guest→host messages are decoded here at the
+ * ENVELOPE level only — `panel/tree.tree` and `panel/intent.intents` stay
+ * `unknown`, because the tree is value-validated by {@link decodePanelTree} and
+ * the intents are value-validated by the intent executor (the panel-slot's
+ * concern). A malformed or oversized inbound message decodes to a violation
+ * result, which the host counts against its protocol-violation budget.
+ *
+ * Byte-size pre-check: inbound messages are size-capped BEFORE decode
+ * (`treeBytes + envelope slack` for `panel/tree`, `intentChannelBytes` for
+ * `panel/intent`, a small fixed cap for control messages), mirroring the
+ * cap discipline the preview sandbox host applies to returned trees.
+ */
+import { PANEL_CAPS } from "@voidhash/paywalls/schema";
+import { Schema } from "effect";
+
+import { strictParseOptions } from "./schema";
+
+/** The single protocol version this host speaks. Bumped on any wire change. */
+export const PANEL_SANDBOX_PROTOCOL = 1 as const;
+
+/**
+ * Serialized-message byte caps, enforced BEFORE decode on inbound messages.
+ *
+ * - `tree` allows the full {@link PANEL_CAPS.treeBytes} plus envelope slack (the
+ *   JSON wrapper: `protocol`, `sessionId`, `type`, `revision`, key overhead).
+ * - `intent` allows the whole intent channel budget (a batch of intents, each
+ *   capped value-side at {@link PANEL_CAPS.intentBytes} by the executor) plus
+ *   slack; sized generously so a legitimate coalesced batch is never clipped
+ *   by the transport before the executor can rate/size it.
+ * - `control` bounds `panel/event` (dispatch args) and every fixed-size control
+ *   message (`ready`, `pong`, `error`, `ping`).
+ */
+export const PANEL_MESSAGE_BYTE_CAPS = {
+  /** `panel/tree`: full tree budget + JSON envelope slack. */
+  tree: PANEL_CAPS.treeBytes + 8192,
+  /** `panel/intent`: a coalesced batch of intents + envelope slack. */
+  intent: PANEL_CAPS.intentBytes * 8 + 8192,
+  /** `panel/event` + all fixed control messages. */
+  control: PANEL_CAPS.intentBytes + 8192,
+} as const;
+
+// =============================================================================
+// Shared envelope fields
+// =============================================================================
+
+const ProtocolField = Schema.Literal(PANEL_SANDBOX_PROTOCOL);
+const SessionIdField = Schema.String;
+
+// =============================================================================
+// Host → guest messages
+// =============================================================================
+
+/**
+ * The serializable init payload the host hands the guest: the OSS sandbox IIFE
+ * bundle (evaluated once to install the guest global + require shim), the
+ * compiled author module (CJS), and the initial session inputs. `sandboxCode`
+ * is optional so a re-init on an already-warm guest can skip re-shipping the
+ * (large) bundle — the guest evaluates it only if the global is not yet set.
+ */
+const HostInitSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/init"),
+  sandboxCode: Schema.optional(Schema.String),
+  compiledCode: Schema.String,
+  inputs: Schema.Unknown,
+});
+
+const HostUpdateSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/update"),
+  inputs: Schema.Unknown,
+});
+
+const HostEventSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/event"),
+  nodeId: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),
+  name: Schema.String,
+  args: Schema.Array(Schema.Unknown),
+});
+
+const HostPingSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/ping"),
+  seq: Schema.Int,
+});
+
+const HostUnmountSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/unmount"),
+});
+
+/** The closed union of every host→guest message. */
+export const HostMessageSchema = Schema.Union([
+  HostInitSchema,
+  HostUpdateSchema,
+  HostEventSchema,
+  HostPingSchema,
+  HostUnmountSchema,
+]);
+
+/** A decoded host→guest message (what the guest driver receives). */
+export type HostMessage = typeof HostMessageSchema.Type;
+export type HostInitMessage = typeof HostInitSchema.Type;
+export type HostUpdateMessage = typeof HostUpdateSchema.Type;
+export type HostEventMessage = typeof HostEventSchema.Type;
+export type HostPingMessage = typeof HostPingSchema.Type;
+export type HostUnmountMessage = typeof HostUnmountSchema.Type;
+
+// =============================================================================
+// Guest → host messages
+// =============================================================================
+
+const GuestReadySchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/ready"),
+});
+
+/**
+ * A serialized tree emission. `tree` is left `Unknown` deliberately: the host
+ * re-validates it value-level with {@link decodePanelTree}. `revision` is the
+ * guest's monotonically-increasing commit counter; the host applies
+ * latest-revision-wins and drops stale emissions.
+ */
+const GuestTreeSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/tree"),
+  revision: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),
+  tree: Schema.Unknown,
+});
+
+/**
+ * A batch of intents. `intents` stays an array of `Unknown`: the host forwards
+ * the RAW payload to `onIntents`, and the intent executor (panel-slot side)
+ * performs value-level validation + size/rate limiting on each intent.
+ */
+const GuestIntentSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/intent"),
+  intents: Schema.Array(Schema.Unknown),
+});
+
+const GuestPongSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/pong"),
+  seq: Schema.Int,
+});
+
+const GuestErrorSchema = Schema.Struct({
+  protocol: ProtocolField,
+  sessionId: SessionIdField,
+  type: Schema.Literal("panel/error"),
+  phase: Schema.Literals(["init", "render", "runtime"]),
+  message: Schema.String,
+});
+
+/** The closed union of every guest→host message. */
+export const GuestMessageSchema = Schema.Union([
+  GuestReadySchema,
+  GuestTreeSchema,
+  GuestIntentSchema,
+  GuestPongSchema,
+  GuestErrorSchema,
+]);
+
+/** A decoded guest→host message (what the host receives). */
+export type GuestMessage = typeof GuestMessageSchema.Type;
+export type GuestReadyMessage = typeof GuestReadySchema.Type;
+export type GuestTreeMessage = typeof GuestTreeSchema.Type;
+export type GuestIntentMessage = typeof GuestIntentSchema.Type;
+export type GuestPongMessage = typeof GuestPongSchema.Type;
+export type GuestErrorMessage = typeof GuestErrorSchema.Type;
+
+// =============================================================================
+// Encode / decode
+// =============================================================================
+
+const encodeHost = Schema.encodeUnknownSync(HostMessageSchema, strictParseOptions);
+const decodeHost = Schema.decodeUnknownSync(HostMessageSchema, strictParseOptions);
+const encodeGuest = Schema.encodeUnknownSync(GuestMessageSchema, strictParseOptions);
+const decodeGuest = Schema.decodeUnknownSync(GuestMessageSchema, strictParseOptions);
+
+const errorMessage = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+const byteLength = (input: string): number => new TextEncoder().encode(input).length;
+
+/**
+ * The byte cap that applies to a message, keyed off its `type` before decode.
+ * Unknown / typeless shapes get the (largest) tree cap so a genuinely huge
+ * blob is still rejected while an about-to-be-rejected tiny malformed message
+ * is never clipped early.
+ */
+const inboundByteCap = (type: unknown): number => {
+  if (type === "panel/tree") return PANEL_MESSAGE_BYTE_CAPS.tree;
+  if (type === "panel/intent") return PANEL_MESSAGE_BYTE_CAPS.intent;
+  return PANEL_MESSAGE_BYTE_CAPS.control;
+};
+
+/** Discriminated decode result: a valid message, or a violation with a reason. */
+export type DecodeMessageResult<T> =
+  | { readonly ok: true; readonly message: T }
+  | { readonly ok: false; readonly error: string };
+
+/**
+ * Encodes a host→guest message to the strict wire shape. Throws (host bug) if
+ * the message is malformed — the host constructs these, so a failure is a
+ * programming error, not untrusted input.
+ */
+export const encodeHostMessage = (message: HostMessage): HostMessage =>
+  encodeHost(message) as HostMessage;
+
+/**
+ * Encodes a guest→host message. Used only by the guest driver (and its tests);
+ * the guest constructs these, so a failure is a driver bug.
+ */
+export const encodeGuestMessage = (message: GuestMessage): GuestMessage =>
+  encodeGuest(message) as GuestMessage;
+
+/**
+ * The GUEST's gate for an inbound host→guest message: a byte-size pre-check
+ * keyed off the raw `type`, then a strict envelope decode. Never throws —
+ * malformed/oversized input decodes to a violation the guest can ignore.
+ */
+export const decodeHostMessage = (input: unknown): DecodeMessageResult<HostMessage> => {
+  const capResult = checkInboundBytes(input);
+  if (capResult !== null) return { ok: false, error: capResult };
+  try {
+    return { ok: true, message: decodeHost(input) };
+  } catch (error) {
+    return { ok: false, error: `invalid host message: ${errorMessage(error)}` };
+  }
+};
+
+/**
+ * The HOST's gate for an inbound guest→host message: a byte-size pre-check
+ * keyed off the raw `type`, then a strict envelope decode. The `tree`/`intents`
+ * payloads stay `unknown` (value-validated downstream). Never throws — a
+ * violation is counted against the host's protocol-violation budget.
+ */
+export const decodeGuestMessage = (input: unknown): DecodeMessageResult<GuestMessage> => {
+  const capResult = checkInboundBytes(input);
+  if (capResult !== null) return { ok: false, error: capResult };
+  try {
+    return { ok: true, message: decodeGuest(input) };
+  } catch (error) {
+    return { ok: false, error: `invalid guest message: ${errorMessage(error)}` };
+  }
+};
+
+/**
+ * Byte-size pre-check shared by both inbound gates. Returns a violation reason
+ * string when the serialized message exceeds its per-type cap, or `null` when
+ * within budget. A message that cannot be serialized (cycles) is itself a
+ * violation.
+ */
+const checkInboundBytes = (input: unknown): string | null => {
+  const type = (input as { type?: unknown } | null)?.type;
+  const cap = inboundByteCap(type);
+  let size: number;
+  try {
+    size = byteLength(JSON.stringify(input));
+  } catch {
+    return "message is not serializable";
+  }
+  if (size > cap) {
+    return `message exceeds ${cap} bytes`;
+  }
+  return null;
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts
new file mode 100644
index 000000000..3c0f8c0d6
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts
@@ -0,0 +1,929 @@
+import {
+  PANEL_CAPS,
+  PANEL_NODE_SPECS,
+  PANEL_TREE_VERSION,
+  parsePanelTree,
+} from "@voidhash/paywalls/schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import { decodePanelIntent, decodePanelTree } from "./schema";
+
+/**
+ * A running id counter so every fixture node gets a unique id without hand-
+ * threading integers. Reset per {@link fullTree} call.
+ */
+let nextId = 0;
+const id = () => nextId++;
+
+/**
+ * A fully-populated valid panel tree containing EVERY node type in the v1
+ * vocabulary, with a realistic prop/event population per type. Adapted from the
+ * OSS `panel-tree.test.ts` host-contract fixture, so it stays exhaustive and
+ * both validators must accept it.
+ */
+const fullTree = () => {
+  nextId = 0;
+  return {
+    version: PANEL_TREE_VERSION,
+    root: {
+      type: "panel",
+      id: id(),
+      props: {},
+      events: [],
+      children: [
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Layout", collapsible: true, defaultCollapsed: false },
+          events: ["onToggle"],
+          children: [
+            {
+              type: "sectionActions",
+              id: id(),
+              props: {},
+              events: [],
+              children: [
+                {
+                  type: "button",
+                  id: id(),
+                  props: { icon: "plus", variant: "ghost", size: "icon-sm" },
+                  events: ["onClick"],
+                },
+              ],
+            },
+            {
+              type: "subsection",
+              id: id(),
+              props: { title: "Size" },
+              events: [],
+              children: [
+                {
+                  type: "row",
+                  id: id(),
+                  props: { gap: "sm", width: "full", align: "center", justify: "between" },
+                  events: [],
+                  children: [
+                    {
+                      type: "column",
+                      id: id(),
+                      props: { gap: "xs", width: "auto", align: "start" },
+                      events: [],
+                      children: [
+                        {
+                          type: "field",
+                          id: id(),
+                          props: { label: "Width", icon: "w" },
+                          events: [],
+                          children: [
+                            {
+                              type: "dimensionField",
+                              id: id(),
+                              props: {
+                                axis: "width",
+                                mode: "custom",
+                                value: 240,
+                                label: "Width",
+                                mixed: false,
+                                disabled: false,
+                                computed: 240,
+                              },
+                              events: ["onChange", "onCommit", "onModeChange"],
+                            },
+                          ],
+                        },
+                        {
+                          type: "field",
+                          id: id(),
+                          props: { label: "Align", icon: "a" },
+                          events: [],
+                          children: [
+                            {
+                              type: "alignmentGrid",
+                              id: id(),
+                              props: {
+                                flexDirection: "row",
+                                alignItems: "center",
+                                justifyContent: "space-between",
+                                mixed: false,
+                              },
+                              events: ["onChange"],
+                            },
+                          ],
+                        },
+                      ],
+                    },
+                  ],
+                },
+              ],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Content", collapsible: true },
+          events: ["onToggle"],
+          children: [
+            {
+              type: "text",
+              id: id(),
+              props: { content: "Edit the paywall.", variant: "muted", tone: "neutral" },
+              events: [],
+            },
+            {
+              type: "callout",
+              id: id(),
+              props: { message: "Product is unset.", tone: "warning" },
+              events: [],
+            },
+            {
+              type: "textField",
+              id: id(),
+              props: {
+                kind: "number",
+                value: 16,
+                mixed: false,
+                placeholder: "size",
+                min: 0,
+                max: 200,
+                step: 1,
+                icon: "type",
+                disabled: false,
+                trailingMenu: {
+                  items: [
+                    { value: "auto", label: "Auto" },
+                    { value: "fixed", label: "Fixed" },
+                  ],
+                  value: "auto",
+                },
+              },
+              events: ["onChange", "onCommit", "onTrailingSelect"],
+            },
+            {
+              type: "selectField",
+              id: id(),
+              props: {
+                value: "cover",
+                options: [
+                  { value: "cover", label: "Cover", icon: "image" },
+                  { value: "contain", label: "Contain", disabled: false },
+                ],
+                placeholder: "mode",
+                mixed: false,
+                disabled: false,
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "toggleGroup",
+              id: id(),
+              props: {
+                value: "left",
+                options: [
+                  { value: "left", icon: "arrowRight" },
+                  { value: "center", label: "Center" },
+                ],
+                mixed: false,
+                disabled: false,
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "switchField",
+              id: id(),
+              props: { checked: true, mixed: false, label: "Visible", disabled: false },
+              events: ["onChange"],
+            },
+            {
+              type: "sliderField",
+              id: id(),
+              props: { value: 50, min: 0, max: 100, step: 1, mixed: false, disabled: false },
+              events: ["onChange", "onCommit"],
+            },
+            {
+              type: "resetAffordance",
+              id: id(),
+              props: { show: true, label: "Reset" },
+              events: ["onReset"],
+              children: [
+                {
+                  type: "text",
+                  id: id(),
+                  props: { content: "overridden" },
+                  events: [],
+                },
+              ],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Fill" },
+          events: [],
+          children: [
+            {
+              type: "field",
+              id: id(),
+              props: { label: "Fill" },
+              events: [],
+              children: [
+                {
+                  type: "swatch",
+                  id: id(),
+                  props: { color: "rgba(0,0,0,1)", imageUrl: null },
+                  events: [],
+                },
+                {
+                  type: "fillField",
+                  id: id(),
+                  props: {
+                    label: "Fill",
+                    backgroundType: "gradient",
+                    isTypeMixed: false,
+                    backgroundColor: "rgba(0,0,0,1)",
+                    gradient: {
+                      kind: "linear",
+                      startX: 0,
+                      startY: 0,
+                      endX: 1,
+                      endY: 1,
+                      stops: [
+                        { color: "rgba(0,0,0,1)", position: 0 },
+                        { color: "rgba(255,255,255,1)", position: 1 },
+                      ],
+                    },
+                    selectedStopIndex: 0,
+                    image: { url: "", resizeMode: "cover" },
+                    open: false,
+                  },
+                  events: [
+                    "onTypeChange",
+                    "onColorChange",
+                    "onGradientChange",
+                    "onAddStopAt",
+                    "onSelectStop",
+                    "onCommit",
+                    "onDiscard",
+                    "onOpenChange",
+                  ],
+                },
+              ],
+            },
+            {
+              type: "popover",
+              id: id(),
+              props: { open: false },
+              events: ["onOpenChange"],
+              children: [
+                {
+                  type: "popoverTrigger",
+                  id: id(),
+                  props: {},
+                  events: [],
+                  children: [
+                    {
+                      type: "button",
+                      id: id(),
+                      props: { label: "Edit fill", icon: "paintbrush", variant: "secondary" },
+                      events: ["onClick"],
+                    },
+                  ],
+                },
+                {
+                  type: "popoverContent",
+                  id: id(),
+                  props: { align: "start", side: "bottom" },
+                  events: [],
+                  children: [
+                    {
+                      type: "colorField",
+                      id: id(),
+                      props: { value: "rgba(0,0,0,1)", mixed: false, disabled: false },
+                      events: ["onChange", "onDragStart", "onCommit", "onDiscard"],
+                    },
+                    {
+                      type: "colorPicker",
+                      id: id(),
+                      props: { color: "000000", opacity: 100 },
+                      events: [
+                        "onColorChange",
+                        "onOpacityChange",
+                        "onDragStart",
+                        "onDragEnd",
+                        "onDiscard",
+                      ],
+                    },
+                    {
+                      type: "gradientStops",
+                      id: id(),
+                      props: {
+                        stops: [
+                          { id: 0, position: 0, color: "rgba(0,0,0,1)" },
+                          { id: 1, position: 1, color: "rgba(255,255,255,1)" },
+                        ],
+                        selectedStopId: 0,
+                      },
+                      events: [
+                        "onSelect",
+                        "onAddStop",
+                        "onMoveStop",
+                        "onRemoveStop",
+                        "onDragStart",
+                        "onDragEnd",
+                      ],
+                    },
+                    {
+                      type: "imageField",
+                      id: id(),
+                      props: { url: "", resizeMode: "cover" },
+                      events: ["onPick", "onResizeModeChange", "onClear"],
+                    },
+                  ],
+                },
+              ],
+            },
+            {
+              type: "menu",
+              id: id(),
+              props: {
+                items: [
+                  { value: "solid", label: "Solid" },
+                  { value: "gradient", label: "Gradient", disabled: false },
+                ],
+                value: "solid",
+                align: "end",
+              },
+              events: ["onSelect"],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Binding" },
+          events: [],
+          children: [
+            {
+              type: "variableField",
+              id: id(),
+              props: {
+                variableId: "var_1",
+                variableName: "isPro",
+                variableType: "boolean",
+                allowedKinds: ["boolean"],
+                label: "Visible when",
+              },
+              events: ["onBind", "onUnbind", "onCreate"],
+            },
+            {
+              type: "actionEditorField",
+              id: id(),
+              props: {
+                value: {
+                  type: "set-variable",
+                  payload: {
+                    variableId: "var_1",
+                    newValue: { type: "literal", value: { key: "boolean", value: true } },
+                  },
+                },
+                variables: [
+                  { id: "var_1", name: "isPro", value: { key: "boolean", value: true } },
+                ],
+                productVariables: [
+                  {
+                    id: "var_2",
+                    name: "plan",
+                    ownerLabel: "Root",
+                    aliasId: "alias_2",
+                    value: { key: "product", value: { productId: "prod_1" } },
+                  },
+                ],
+                payloadFields: ["productId"],
+              },
+              events: ["onChange"],
+            },
+            {
+              type: "productField",
+              id: id(),
+              props: {
+                productId: "prod_1",
+                placeholder: "Select product…",
+                disabled: false,
+                label: "Product",
+              },
+              events: ["onChange"],
+            },
+          ],
+        },
+        {
+          type: "section",
+          id: id(),
+          props: { title: "Component" },
+          events: [],
+          children: [
+            {
+              type: "propField",
+              id: id(),
+              props: { name: "heading" },
+              events: [],
+            },
+            {
+              type: "defaultProps",
+              id: id(),
+              props: { exclude: ["heading", "product"] },
+              events: [],
+            },
+          ],
+        },
+      ],
+    },
+  };
+};
+
+/**
+ * Deep-clones a fixture so a mutating test can never leak into the shared
+ * builder output (the fixtures are plain JSON).
+ */
+const clone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;
+
+/** Both validators must AGREE on accept/reject for a structural fixture. */
+const expectAgree = (label: string, tree: unknown): void => {
+  const oss = parsePanelTree(tree);
+  const host = decodePanelTree(tree);
+  expect(host.ok, `${label}: host=${host.ok} oss=${oss.ok}`).toBe(oss.ok);
+};
+
+/**
+ * Host is a strict superset of OSS: OSS must reject, host must ALSO reject (a
+ * pure structural equality). Used for every structural violation both catch.
+ */
+const expectBothReject = (label: string, tree: unknown): void => {
+  expect(parsePanelTree(tree).ok, `${label}: OSS should reject`).toBe(false);
+  expect(decodePanelTree(tree).ok, `${label}: host should reject`).toBe(false);
+};
+
+/**
+ * The allowed asymmetry: OSS (structural) ACCEPTS a value-level violation the
+ * host (value-typed) rejects. Asserts the host is strictly stronger here.
+ */
+const expectHostStricter = (label: string, tree: unknown): void => {
+  expect(parsePanelTree(tree).ok, `${label}: OSS should accept (structural)`).toBe(true);
+  expect(decodePanelTree(tree).ok, `${label}: host should reject (value-level)`).toBe(false);
+};
+
+describe("panel schema contract — valid fixture", () => {
+  test("host accepts the fully-populated every-node-type fixture", () => {
+    expect(decodePanelTree(fullTree()).ok).toBe(true);
+  });
+
+  test("OSS and host agree the fixture is valid", () => {
+    expectAgree("full fixture", fullTree());
+  });
+
+  test("the fixture exercises every node type in the vocabulary", () => {
+    const seen = new Set<string>();
+    const walk = (node: { type: string; children?: unknown[] }) => {
+      seen.add(node.type);
+      for (const child of node.children ?? []) {
+        walk(child as { type: string; children?: unknown[] });
+      }
+    };
+    walk(fullTree().root);
+    for (const type of Object.keys(PANEL_NODE_SPECS)) {
+      expect(seen.has(type), `fixture is missing node type "${type}"`).toBe(true);
+    }
+  });
+
+  test("host accepts a serialized JSON string of the fixture", () => {
+    expect(decodePanelTree(JSON.stringify(fullTree())).ok).toBe(true);
+  });
+
+  test("the superset invariant holds: everything host accepts, OSS accepts", () => {
+    const host = decodePanelTree(fullTree());
+    const oss = parsePanelTree(fullTree());
+    expect(host.ok).toBe(true);
+    expect(oss.ok).toBe(true);
+  });
+});
+
+describe("panel schema contract — structural rejections (both agree)", () => {
+  test("unknown node type", () => {
+    const tree = clone(fullTree());
+    (tree.root.children[0] as { type: string }).type = "mysteryNode";
+    expectBothReject("unknown type", tree);
+  });
+
+  test("unknown prop key", () => {
+    const tree = clone(fullTree());
+    (tree.root.children[0] as { props: Record<string, unknown> }).props.bogus = 1;
+    expectBothReject("unknown prop key", tree);
+  });
+
+  test("event name outside the type's allowlist", () => {
+    const tree = clone(fullTree());
+    (tree.root.children[0] as { events: string[] }).events = ["onToggle", "onHack"];
+    expectBothReject("disallowed event", tree);
+  });
+
+  test("duplicate ids across the tree", () => {
+    const tree = clone(fullTree());
+    (tree.root.children[0] as { id: number }).id = tree.root.id;
+    expectBothReject("dup ids", tree);
+  });
+
+  test("negative id", () => {
+    const tree = clone(fullTree());
+    (tree.root.children[0] as { id: number }).id = -1;
+    expectBothReject("negative id", tree);
+  });
+
+  test("non-integer id", () => {
+    const tree = clone(fullTree());
+    (tree.root.children[0] as { id: number }).id = 1.5;
+    expectBothReject("non-integer id", tree);
+  });
+
+  test("children on a childless type", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [{ type: "text", id: 1, props: { content: "x" }, events: [], children: [] }],
+      },
+    };
+    expectBothReject("children on childless", tree);
+  });
+
+  test("root that is not a panel", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: { type: "section", id: 0, props: {}, events: [], children: [] },
+    };
+    expectBothReject("non-panel root", tree);
+  });
+
+  test("version mismatch", () => {
+    const tree = clone(fullTree());
+    (tree as { version: number }).version = 999;
+    expectBothReject("version mismatch", tree);
+  });
+
+  test("unknown icon token", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [{ type: "button", id: 1, props: { icon: "skull" }, events: ["onClick"] }],
+      },
+    };
+    expectBothReject("unknown icon", tree);
+  });
+
+  test("top-level envelope key other than version/root", () => {
+    const tree = { ...fullTree(), extra: 1 };
+    expectBothReject("extra envelope key", tree);
+  });
+
+  test("malformed JSON string", () => {
+    expect(parsePanelTree("{ not json").ok).toBe(false);
+    expect(decodePanelTree("{ not json").ok).toBe(false);
+  });
+
+  test("non-object tree", () => {
+    expectBothReject("non-object tree", 42);
+  });
+});
+
+describe("panel schema contract — caps (both agree)", () => {
+  test("node count cap", () => {
+    const children = Array.from({ length: PANEL_CAPS.nodes + 1 }, (_, i) => ({
+      type: "text",
+      id: i + 1,
+      props: {},
+      events: [],
+    }));
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: { type: "panel", id: 0, props: {}, events: [], children },
+    };
+    expectBothReject("node cap", tree);
+  });
+
+  test("depth cap", () => {
+    let nodeId = 0;
+    const buildNested = (remaining: number): Record<string, unknown> => ({
+      type: "column",
+      id: nodeId++,
+      props: {},
+      events: [],
+      children: remaining > 0 ? [buildNested(remaining - 1)] : [],
+    });
+    const root = {
+      type: "panel",
+      id: nodeId++,
+      props: {},
+      events: [],
+      children: [buildNested(PANEL_CAPS.depth + 2)],
+    };
+    expectBothReject("depth cap", { version: PANEL_TREE_VERSION, root });
+  });
+
+  test("string length cap", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: "text",
+            id: 1,
+            props: { content: "x".repeat(PANEL_CAPS.stringLength + 1) },
+            events: [],
+          },
+        ],
+      },
+    };
+    expectBothReject("string cap", tree);
+  });
+
+  test("options cap", () => {
+    const options = Array.from({ length: PANEL_CAPS.options + 1 }, (_, i) => ({
+      value: `o${i}`,
+      label: `Option ${i}`,
+    }));
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "selectField", id: 1, props: { value: "o0", options }, events: ["onChange"] },
+        ],
+      },
+    };
+    expectBothReject("options cap", tree);
+  });
+
+  test("gradient stops cap", () => {
+    const stops = Array.from({ length: PANEL_CAPS.gradientStops + 1 }, (_, i) => ({
+      id: i,
+      position: i / (PANEL_CAPS.gradientStops + 1),
+      color: "rgba(0,0,0,1)",
+    }));
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: "gradientStops",
+            id: 1,
+            props: { stops, selectedStopId: 0 },
+            events: ["onSelect"],
+          },
+        ],
+      },
+    };
+    expectBothReject("stops cap", tree);
+  });
+
+  test("events-per-node cap", () => {
+    // fillField has >8 allowed events, so a valid-name list can exceed the cap.
+    const events = [
+      "onTypeChange",
+      "onColorChange",
+      "onGradientChange",
+      "onStopColorChange",
+      "onStopPositionChange",
+      "onAddStop",
+      "onAddStopAt",
+      "onRemoveStop",
+      "onSelectStop",
+    ];
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [{ type: "fillField", id: 1, props: {}, events }],
+      },
+    };
+    expect(events.length).toBeGreaterThan(PANEL_CAPS.eventsPerNode);
+    expectBothReject("events cap", tree);
+  });
+
+  test("serialized string byte cap", () => {
+    const huge = `{"padding":"${"a".repeat(PANEL_CAPS.treeBytes + 10)}"}`;
+    expect(parsePanelTree(huge).ok).toBe(false);
+    expect(decodePanelTree(huge).ok).toBe(false);
+  });
+
+  test("duplicate event name within a node", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "button", id: 1, props: { label: "x" }, events: ["onClick", "onClick"] },
+        ],
+      },
+    };
+    expectBothReject("dup event name", tree);
+  });
+});
+
+describe("panel schema contract — host is a strict superset (value-level)", () => {
+  test("textField.kind outside text|number: OSS accepts, host rejects", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [{ type: "textField", id: 1, props: { kind: "color" }, events: [] }],
+      },
+    };
+    expectHostStricter("textField.kind", tree);
+  });
+
+  test("boolean prop given a string: OSS accepts, host rejects", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "switchField", id: 1, props: { checked: "yes" }, events: [] },
+        ],
+      },
+    };
+    expectHostStricter("switchField.checked type", tree);
+  });
+
+  test("section.collapsible given a number: OSS accepts, host rejects", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          { type: "section", id: 1, props: { collapsible: 1 }, events: [], children: [] },
+        ],
+      },
+    };
+    expectHostStricter("section.collapsible type", tree);
+  });
+
+  test("selectField.options entry missing value: OSS accepts, host rejects", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: "selectField",
+            id: 1,
+            props: { options: [{ label: "No value" }] },
+            events: [],
+          },
+        ],
+      },
+    };
+    expectHostStricter("selectField.options shape", tree);
+  });
+
+  test("gradientStops stop missing color: OSS accepts, host rejects", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [
+          {
+            type: "gradientStops",
+            id: 1,
+            props: { stops: [{ id: 0, position: 0 }] },
+            events: [],
+          },
+        ],
+      },
+    };
+    expectHostStricter("gradientStops.stops shape", tree);
+  });
+
+  test("menu.value given a boolean: OSS accepts, host rejects", () => {
+    const tree = {
+      version: PANEL_TREE_VERSION,
+      root: {
+        type: "panel",
+        id: 0,
+        props: {},
+        events: [],
+        children: [{ type: "menu", id: 1, props: { value: true }, events: [] }],
+      },
+    };
+    expectHostStricter("menu.value type", tree);
+  });
+});
+
+describe("panel intent channel", () => {
+  test("accepts a set-prop intent", () => {
+    const result = decodePanelIntent({
+      type: "set-prop",
+      name: "heading",
+      value: "Hello",
+      gesture: "commit",
+    });
+    expect(result.ok).toBe(true);
+  });
+
+  test("accepts a live set-prop gesture", () => {
+    expect(
+      decodePanelIntent({ type: "set-prop", name: "size", value: 16, gesture: "live" }).ok,
+    ).toBe(true);
+  });
+
+  test("accepts a set-ref intent (P0-B)", () => {
+    const result = decodePanelIntent({
+      type: "set-ref",
+      name: "product",
+      productId: "prod_123",
+    });
+    expect(result.ok).toBe(true);
+  });
+
+  test("accepts reset-prop / gesture-commit / gesture-discard", () => {
+    expect(decodePanelIntent({ type: "reset-prop", name: "heading" }).ok).toBe(true);
+    expect(decodePanelIntent({ type: "gesture-commit", name: "heading" }).ok).toBe(true);
+    expect(decodePanelIntent({ type: "gesture-discard", name: "heading" }).ok).toBe(true);
+  });
+
+  test("rejects an unknown intent type", () => {
+    expect(decodePanelIntent({ type: "explode", name: "x" }).ok).toBe(false);
+  });
+
+  test("rejects an unknown gesture", () => {
+    expect(
+      decodePanelIntent({ type: "set-prop", name: "x", value: 1, gesture: "hover" }).ok,
+    ).toBe(false);
+  });
+
+  test("rejects a set-prop with an excess key", () => {
+    expect(
+      decodePanelIntent({ type: "set-prop", name: "x", value: 1, gesture: "live", extra: 1 }).ok,
+    ).toBe(false);
+  });
+
+  test("rejects set-ref missing productId", () => {
+    expect(decodePanelIntent({ type: "set-ref", name: "product" }).ok).toBe(false);
+  });
+
+  test("enforces the intent value byte cap", () => {
+    const huge = "a".repeat(PANEL_CAPS.intentBytes + 10);
+    const result = decodePanelIntent({
+      type: "set-prop",
+      name: "x",
+      value: huge,
+      gesture: "commit",
+    });
+    expect(result.ok).toBe(false);
+    if (!result.ok) expect(result.error).toMatch(/bytes/);
+  });
+
+  test("allows a set-prop value just under the byte cap", () => {
+    const nearlyHuge = "a".repeat(PANEL_CAPS.intentBytes - 100);
+    expect(
+      decodePanelIntent({ type: "set-prop", name: "x", value: nearlyHuge, gesture: "commit" }).ok,
+    ).toBe(true);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.ts
new file mode 100644
index 000000000..2c4ffc138
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.ts
@@ -0,0 +1,677 @@
+/**
+ * Host-authoritative Effect Schema gate for the editor {@link PanelTree} wire
+ * format (`@voidhash/paywalls/schema`).
+ *
+ * A code-component panel runs its React reconciler inside a sandboxed iframe and
+ * posts a serialized {@link PanelTree} to the host, which renders it with real
+ * kit components. The panel channel is a trust boundary: NOTHING the sandbox
+ * emits is trusted. Every tree crossing into the host passes through
+ * {@link decodePanelTree} — a strict, value-level Effect Schema decode plus a
+ * byte-size pre-check and the traversal-enforced caps in `PANEL_CAPS`.
+ *
+ * The OSS `parsePanelTree` (which authors validate against) is the STRUCTURAL
+ * validator: it closes the per-type prop/event vocabulary and the resource caps
+ * but leaves prop VALUES loosely typed. This host gate is at least as strict —
+ * it additionally value-types every prop per the wire contract v1 — so anything
+ * the host accepts, the OSS validator also accepts (`schema.contract.test.ts`
+ * locks this superset relationship).
+ *
+ * Built-in panels run in-process (trusted), but a `dev`-mode decode
+ * ({@link decodePanelTreeDev}) asserts every built-in emission against this same
+ * gate so drift between an author's mental model and the host is caught early.
+ */
+import {
+  PANEL_CAPS,
+  PANEL_ICON_NAME_LIST,
+  PANEL_NODE_SPECS,
+  PANEL_TREE_VERSION,
+} from "@voidhash/paywalls/schema";
+import { Schema } from "effect";
+
+/**
+ * Strictest decode the host applies to sandbox-originated payloads: every issue
+ * is reported and any excess/unknown key is rejected. Mirrors
+ * `PaywallDeployManifest.strictParseOptions`; it is what makes the closed
+ * per-type prop vocabulary enforceable at the Schema layer.
+ */
+export const strictParseOptions = {
+  errors: "all",
+  onExcessProperty: "error",
+} as const;
+
+// =============================================================================
+// Primitive value schemas
+// =============================================================================
+
+/**
+ * A JSON-safe value permitted inside any panel node's `props`. Numbers are
+ * decoded as {@link Schema.Finite} (JSON cannot carry NaN/Infinity, so this
+ * rejects nothing the OSS validator accepts).
+ */
+export type PanelJsonValue =
+  | null
+  | boolean
+  | number
+  | string
+  | ReadonlyArray<PanelJsonValue>
+  | { readonly [key: string]: PanelJsonValue };
+
+const PanelJsonValueSchema: Schema.Codec<PanelJsonValue> = Schema.Union([
+  Schema.Null,
+  Schema.Boolean,
+  Schema.Finite,
+  Schema.String,
+  Schema.Array(Schema.suspend((): Schema.Codec<PanelJsonValue> => PanelJsonValueSchema)),
+  Schema.Record(
+    Schema.String,
+    Schema.suspend((): Schema.Codec<PanelJsonValue> => PanelJsonValueSchema),
+  ),
+]);
+
+/** A prop string value, capped at `PANEL_CAPS.stringLength`. */
+const CappedString = Schema.String.check(Schema.isMaxLength(PANEL_CAPS.stringLength));
+
+/** The closed set of icon tokens a panel may reference (wire contract §IconName). */
+const IconName = Schema.Literals(PANEL_ICON_NAME_LIST);
+
+/** A non-negative integer reconciler instance id. */
+const NodeId = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+
+// =============================================================================
+// Shared prop shapes
+// =============================================================================
+
+/** `selectField` / `toggleGroup` option: a value plus optional label/icon. */
+const OptionSchema = Schema.Struct({
+  value: CappedString,
+  label: Schema.optional(CappedString),
+  icon: Schema.optional(IconName),
+  disabled: Schema.optional(Schema.Boolean),
+});
+
+/** `menu` item — same serializable shape as {@link OptionSchema}. */
+const MenuItemSchema = OptionSchema;
+
+/** A `gradientStops` stop: `{ id, position, color }` (wire contract). */
+const GradientStopSchema = Schema.Struct({
+  id: Schema.Finite,
+  position: Schema.Finite,
+  color: CappedString,
+});
+
+/** A `fillField` gradient stop: `{ color, position }` (mirrors host fill props). */
+const FillGradientStopSchema = Schema.Struct({
+  color: CappedString,
+  position: Schema.Finite,
+});
+
+/** A `fillField` gradient value (mirrors `FillEditorPopoverContentProps.gradient`). */
+const FillGradientSchema = Schema.Struct({
+  kind: Schema.Literals(["linear", "radial"]),
+  startX: Schema.Finite,
+  startY: Schema.Finite,
+  endX: Schema.Finite,
+  endY: Schema.Finite,
+  stops: Schema.Array(FillGradientStopSchema).check(
+    Schema.isMaxLength(PANEL_CAPS.gradientStops),
+  ),
+});
+
+/** A `fillField` / `imageField` image value. */
+const ImageValueSchema = Schema.Struct({
+  url: CappedString,
+  resizeMode: Schema.optional(CappedString),
+});
+
+/** A `textField.trailingMenu` value (line-height Auto/Fixed etc.). */
+const TrailingMenuSchema = Schema.Struct({
+  items: Schema.Array(MenuItemSchema).check(Schema.isMaxLength(PANEL_CAPS.options)),
+  value: Schema.optional(CappedString),
+});
+
+/**
+ * A serializable `LabeledVariable` the `actionEditorField` carries in its
+ * `variables` / `productVariables` prop lists: the flat `{ id, name, value }`
+ * variable plus the optional picker annotations (`ownerLabel`, `aliasId`). The
+ * `value` is a variable-type envelope (`{ key, value }`), decoded as loose JSON
+ * so every variable-type shape (string/number/boolean/product) round-trips.
+ */
+const LabeledVariableSchema = Schema.Struct({
+  id: CappedString,
+  name: CappedString,
+  value: Schema.Struct({
+    key: CappedString,
+    value: PanelJsonValueSchema,
+  }),
+  ownerLabel: Schema.optional(CappedString),
+  aliasId: Schema.optional(CappedString),
+});
+
+// =============================================================================
+// Per-node-type node schemas
+// =============================================================================
+
+/**
+ * Builds one node schema for a type: a `type` literal, a non-negative-integer
+ * `id`, a closed `props` struct, an `events` array restricted to the type's
+ * allowlist (deduped + capped in {@link decodePanelTree}), and — for
+ * child-bearing types only — a `children` array of suspended nodes.
+ */
+const makeNode = <T extends keyof typeof PANEL_NODE_SPECS>(
+  type: T,
+  props: Schema.Struct.Fields,
+) => {
+  const spec = PANEL_NODE_SPECS[type];
+  // Zero-event types accept only `[]`; the OSS validator rejects any event name
+  // for a type with an empty allowlist, and an empty tuple mirrors that exactly.
+  const events =
+    spec.events.length === 0
+      ? Schema.Tuple([])
+      : Schema.Array(Schema.Literals(spec.events as unknown as ReadonlyArray<string>));
+  const base = {
+    type: Schema.Literal(type),
+    id: NodeId,
+    props: Schema.Struct(props),
+    events,
+  } as const;
+  if (spec.children) {
+    return Schema.Struct({
+      ...base,
+      children: Schema.Array(Schema.suspend((): Schema.Codec<PanelNode> => PanelNodeSchema)),
+    });
+  }
+  return Schema.Struct(base);
+};
+
+const OptionalString = Schema.optional(CappedString);
+const OptionalBoolean = Schema.optional(Schema.Boolean);
+const OptionalFinite = Schema.optional(Schema.Finite);
+const OptionalIcon = Schema.optional(IconName);
+const OptionalJson = Schema.optional(PanelJsonValueSchema);
+
+// ── Chrome / layout ──────────────────────────────────────────────────────────
+const PanelRootNodeSchema = makeNode("panel", {});
+const SectionNodeSchema = makeNode("section", {
+  title: OptionalString,
+  collapsible: OptionalBoolean,
+  defaultCollapsed: OptionalBoolean,
+});
+const SectionActionsNodeSchema = makeNode("sectionActions", {});
+const SubsectionNodeSchema = makeNode("subsection", { title: OptionalString });
+const RowNodeSchema = makeNode("row", {
+  gap: OptionalString,
+  width: OptionalString,
+  align: OptionalString,
+  justify: OptionalString,
+});
+const ColumnNodeSchema = makeNode("column", {
+  gap: OptionalString,
+  width: OptionalString,
+  align: OptionalString,
+});
+const FieldNodeSchema = makeNode("field", { label: OptionalString, icon: OptionalIcon });
+const TextNodeSchema = makeNode("text", {
+  content: OptionalString,
+  variant: OptionalString,
+  tone: OptionalString,
+});
+const CalloutNodeSchema = makeNode("callout", { message: OptionalString, tone: OptionalString });
+const PopoverNodeSchema = makeNode("popover", { open: OptionalBoolean });
+const PopoverTriggerNodeSchema = makeNode("popoverTrigger", {});
+const PopoverContentNodeSchema = makeNode("popoverContent", {
+  align: OptionalString,
+  side: OptionalString,
+});
+const MenuNodeSchema = makeNode("menu", {
+  items: Schema.optional(
+    Schema.Array(MenuItemSchema).check(Schema.isMaxLength(PANEL_CAPS.options)),
+  ),
+  value: OptionalString,
+  align: OptionalString,
+});
+
+// ── Controls ─────────────────────────────────────────────────────────────────
+const TextFieldNodeSchema = makeNode("textField", {
+  kind: Schema.optional(Schema.Literals(["text", "number"])),
+  value: Schema.optional(Schema.Union([CappedString, Schema.Finite, Schema.Null])),
+  mixed: OptionalBoolean,
+  placeholder: OptionalString,
+  min: OptionalFinite,
+  max: OptionalFinite,
+  step: OptionalFinite,
+  icon: OptionalIcon,
+  disabled: OptionalBoolean,
+  trailingMenu: Schema.optional(TrailingMenuSchema),
+});
+const SelectFieldNodeSchema = makeNode("selectField", {
+  value: Schema.optional(Schema.Union([CappedString, Schema.Null])),
+  options: Schema.optional(
+    Schema.Array(OptionSchema).check(Schema.isMaxLength(PANEL_CAPS.options)),
+  ),
+  placeholder: OptionalString,
+  mixed: OptionalBoolean,
+  disabled: OptionalBoolean,
+});
+const ToggleGroupNodeSchema = makeNode("toggleGroup", {
+  value: Schema.optional(Schema.Union([CappedString, Schema.Null])),
+  options: Schema.optional(
+    Schema.Array(OptionSchema).check(Schema.isMaxLength(PANEL_CAPS.options)),
+  ),
+  mixed: OptionalBoolean,
+  disabled: OptionalBoolean,
+});
+const SwitchFieldNodeSchema = makeNode("switchField", {
+  checked: OptionalBoolean,
+  mixed: OptionalBoolean,
+  label: OptionalString,
+  disabled: OptionalBoolean,
+});
+const ButtonNodeSchema = makeNode("button", {
+  label: OptionalString,
+  icon: OptionalIcon,
+  variant: OptionalString,
+  size: OptionalString,
+  disabled: OptionalBoolean,
+});
+const SliderFieldNodeSchema = makeNode("sliderField", {
+  value: OptionalFinite,
+  min: OptionalFinite,
+  max: OptionalFinite,
+  step: OptionalFinite,
+  mixed: OptionalBoolean,
+  disabled: OptionalBoolean,
+});
+const ResetAffordanceNodeSchema = makeNode("resetAffordance", {
+  show: OptionalBoolean,
+  label: OptionalString,
+});
+
+// ── Composites ───────────────────────────────────────────────────────────────
+const ColorFieldNodeSchema = makeNode("colorField", {
+  value: OptionalString,
+  mixed: OptionalBoolean,
+  mixedLabel: OptionalString,
+  disabled: OptionalBoolean,
+});
+const ColorPickerNodeSchema = makeNode("colorPicker", {
+  color: OptionalString,
+  opacity: OptionalFinite,
+});
+const GradientStopsNodeSchema = makeNode("gradientStops", {
+  stops: Schema.optional(
+    Schema.Array(GradientStopSchema).check(Schema.isMaxLength(PANEL_CAPS.gradientStops)),
+  ),
+  selectedStopId: Schema.optional(Schema.Union([Schema.Finite, Schema.Null])),
+});
+const SwatchNodeSchema = makeNode("swatch", {
+  color: OptionalString,
+  imageUrl: Schema.optional(Schema.Union([CappedString, Schema.Null])),
+});
+const ImageFieldNodeSchema = makeNode("imageField", {
+  url: OptionalString,
+  resizeMode: OptionalString,
+});
+const AlignmentGridNodeSchema = makeNode("alignmentGrid", {
+  flexDirection: OptionalString,
+  alignItems: OptionalString,
+  justifyContent: OptionalString,
+  mixed: OptionalBoolean,
+});
+const DimensionFieldNodeSchema = makeNode("dimensionField", {
+  axis: OptionalString,
+  mode: OptionalString,
+  value: Schema.optional(Schema.Union([CappedString, Schema.Finite, Schema.Null])),
+  label: OptionalString,
+  mixed: OptionalBoolean,
+  disabled: OptionalBoolean,
+  computed: Schema.optional(Schema.Union([CappedString, Schema.Finite, Schema.Null])),
+});
+const FillFieldNodeSchema = makeNode("fillField", {
+  label: OptionalString,
+  backgroundType: OptionalString,
+  isTypeMixed: OptionalBoolean,
+  backgroundColor: OptionalString,
+  gradient: Schema.optional(Schema.Union([FillGradientSchema, Schema.Null])),
+  selectedStopIndex: Schema.optional(Schema.Union([Schema.Finite, Schema.Null])),
+  image: Schema.optional(Schema.Union([ImageValueSchema, Schema.Null])),
+  open: OptionalBoolean,
+});
+const VariableFieldNodeSchema = makeNode("variableField", {
+  variableId: Schema.optional(Schema.Union([CappedString, Schema.Null])),
+  variableName: OptionalString,
+  variableType: OptionalString,
+  allowedKinds: Schema.optional(
+    Schema.Array(CappedString).check(Schema.isMaxLength(PANEL_CAPS.options)),
+  ),
+  label: OptionalString,
+});
+const ActionEditorFieldNodeSchema = makeNode("actionEditorField", {
+  value: OptionalJson,
+  variables: Schema.optional(Schema.Array(LabeledVariableSchema)),
+  productVariables: Schema.optional(Schema.Array(LabeledVariableSchema)),
+  payloadFields: Schema.optional(
+    Schema.Array(CappedString).check(Schema.isMaxLength(PANEL_CAPS.options)),
+  ),
+});
+const ProductFieldNodeSchema = makeNode("productField", {
+  productId: OptionalString,
+  placeholder: OptionalString,
+  disabled: OptionalBoolean,
+  label: OptionalString,
+});
+const PropFieldNodeSchema = makeNode("propField", { name: OptionalString });
+const DefaultPropsNodeSchema = makeNode("defaultProps", {
+  exclude: Schema.optional(
+    Schema.Array(CappedString).check(Schema.isMaxLength(PANEL_CAPS.options)),
+  ),
+});
+
+// =============================================================================
+// Node union + tree envelope
+// =============================================================================
+
+/**
+ * The decoded shape of one panel node. The per-type structs value-type props and
+ * close the vocabulary; at the union boundary the traversal only relies on the
+ * fields shared by every node, so this structural type is intentionally loose.
+ */
+export interface PanelNode {
+  readonly type: string;
+  readonly id: number;
+  readonly props: { readonly [key: string]: unknown };
+  readonly events: ReadonlyArray<string>;
+  readonly children?: ReadonlyArray<PanelNode>;
+}
+
+/**
+ * The closed discriminated union of every v1 panel node, keyed by `type`.
+ *
+ * The annotation is applied through a cast because the member structs are not
+ * type-uniform (each closes a different `props` shape, and childless types omit
+ * `children`), so their inferred union `.Type` does not structurally widen to
+ * the loose {@link PanelNode} the recursion seam and traversal use. The runtime
+ * decode is unaffected — the cast only relaxes the compile-time recursion type.
+ */
+export const PanelNodeSchema = Schema.Union([
+  PanelRootNodeSchema,
+  SectionNodeSchema,
+  SectionActionsNodeSchema,
+  SubsectionNodeSchema,
+  RowNodeSchema,
+  ColumnNodeSchema,
+  FieldNodeSchema,
+  TextNodeSchema,
+  CalloutNodeSchema,
+  PopoverNodeSchema,
+  PopoverTriggerNodeSchema,
+  PopoverContentNodeSchema,
+  MenuNodeSchema,
+  TextFieldNodeSchema,
+  SelectFieldNodeSchema,
+  ToggleGroupNodeSchema,
+  SwitchFieldNodeSchema,
+  ButtonNodeSchema,
+  SliderFieldNodeSchema,
+  ResetAffordanceNodeSchema,
+  ColorFieldNodeSchema,
+  ColorPickerNodeSchema,
+  GradientStopsNodeSchema,
+  SwatchNodeSchema,
+  ImageFieldNodeSchema,
+  AlignmentGridNodeSchema,
+  DimensionFieldNodeSchema,
+  FillFieldNodeSchema,
+  VariableFieldNodeSchema,
+  ActionEditorFieldNodeSchema,
+  ProductFieldNodeSchema,
+  PropFieldNodeSchema,
+  DefaultPropsNodeSchema,
+]) as unknown as Schema.Codec<PanelNode>;
+
+/**
+ * The full panel tree envelope: `{ version: 1, root: <panel node> }`. The root
+ * must be a `panel` node ({@link PanelRootNodeSchema}); the envelope rejects any
+ * key other than `version`/`root` under {@link strictParseOptions}.
+ */
+export const PanelTreeSchema = Schema.Struct({
+  version: Schema.Literal(PANEL_TREE_VERSION),
+  root: PanelRootNodeSchema,
+}) as unknown as Schema.Codec<PanelTree>;
+
+/** A decoded, host-trusted panel tree: the `panel` root plus the wire version. */
+export interface PanelTree {
+  readonly version: typeof PANEL_TREE_VERSION;
+  readonly root: PanelNode;
+}
+
+// =============================================================================
+// Cap traversal (caps awkward to express purely in the schema)
+// =============================================================================
+
+interface CapState {
+  count: number;
+  readonly ids: Set<number>;
+}
+
+/**
+ * After a successful strict decode, walks the tree once to enforce the caps and
+ * uniqueness rules the Schema layer cannot express structurally: total node
+ * count, nesting depth, unique ids, and the per-node event count/duplicate
+ * rules. Returns the first violation message, or `null`.
+ */
+const checkNodeCaps = (
+  node: PanelNode,
+  path: string,
+  depth: number,
+  state: CapState,
+): string | null => {
+  if (depth > PANEL_CAPS.depth) {
+    return `${path} exceeds max depth ${PANEL_CAPS.depth}`;
+  }
+  state.count += 1;
+  if (state.count > PANEL_CAPS.nodes) {
+    return `tree exceeds ${PANEL_CAPS.nodes} nodes`;
+  }
+  if (state.ids.has(node.id)) {
+    return `${path}.id ${node.id} is duplicated`;
+  }
+  state.ids.add(node.id);
+
+  if (node.events.length > PANEL_CAPS.eventsPerNode) {
+    return `${path}.events exceeds ${PANEL_CAPS.eventsPerNode} events`;
+  }
+  const seenEvents = new Set<string>();
+  for (const event of node.events) {
+    if (seenEvents.has(event)) {
+      return `${path}.events has duplicate event "${event}"`;
+    }
+    seenEvents.add(event);
+  }
+
+  const children = node.children;
+  if (children) {
+    for (let i = 0; i < children.length; i++) {
+      const error = checkNodeCaps(
+        children[i] as PanelNode,
+        `${path}.children[${i}]`,
+        depth + 1,
+        state,
+      );
+      if (error !== null) return error;
+    }
+  }
+  return null;
+};
+
+// =============================================================================
+// Public decode entry points
+// =============================================================================
+
+/** Discriminated result of {@link decodePanelTree}. */
+export type DecodePanelResult =
+  | { readonly ok: true; readonly tree: PanelTree }
+  | { readonly ok: false; readonly error: string };
+
+/** Options accepted by {@link decodePanelTree}. */
+export interface DecodePanelTreeOptions {
+  /**
+   * When `true`, the byte-size pre-check for a serialized-string input is
+   * skipped. Only for the in-process built-in transport, which decodes an
+   * already-in-memory object (never a string) and never crosses the sandbox
+   * boundary — a serialized string ALWAYS pays the byte cap.
+   */
+  readonly trusted?: boolean;
+}
+
+const decodePanelTreeStrict = Schema.decodeUnknownSync(PanelTreeSchema, strictParseOptions);
+
+const errorMessage = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+const byteLength = (input: string): number => new TextEncoder().encode(input).length;
+
+/**
+ * The host's authoritative gate for a sandbox-originated panel tree. Combines a
+ * byte-size pre-check (≤ `PANEL_CAPS.treeBytes` when given a serialized string,
+ * mirroring `SandboxHost.validateTree`), a strict value-level Schema decode
+ * (closed prop keys, typed values, allowlisted events, discriminated by
+ * `type`), and a single cap traversal (node count, depth, unique ids, per-node
+ * event count/dedup). Returns a discriminated {@link DecodePanelResult} — never
+ * throws.
+ *
+ * @param input - the raw tree object, or its serialized JSON string.
+ * @param opts - decode options (see {@link DecodePanelTreeOptions}).
+ */
+export const decodePanelTree = (
+  input: unknown,
+  opts: DecodePanelTreeOptions = {},
+): DecodePanelResult => {
+  let value: unknown = input;
+  if (typeof input === "string") {
+    if (!opts.trusted && byteLength(input) > PANEL_CAPS.treeBytes) {
+      return { ok: false, error: `tree exceeds ${PANEL_CAPS.treeBytes} bytes` };
+    }
+    try {
+      value = JSON.parse(input);
+    } catch {
+      return { ok: false, error: "tree is not valid JSON" };
+    }
+  }
+
+  let tree: PanelTree;
+  try {
+    tree = decodePanelTreeStrict(value);
+  } catch (error) {
+    return { ok: false, error: `invalid panel tree: ${errorMessage(error)}` };
+  }
+
+  const capError = checkNodeCaps(tree.root as PanelNode, "tree.root", 1, {
+    count: 0,
+    ids: new Set<number>(),
+  });
+  if (capError !== null) {
+    return { ok: false, error: capError };
+  }
+  return { ok: true, tree };
+};
+
+/**
+ * Dev-mode variant used by the in-process built-in panel transport: decodes on
+ * every built-in emission to catch drift, treating the input as trusted (no
+ * byte pre-check). Thin wrapper over {@link decodePanelTree} with
+ * `trusted: true`.
+ */
+export const decodePanelTreeDev = (input: unknown): DecodePanelResult =>
+  decodePanelTree(input, { trusted: true });
+
+// =============================================================================
+// Panel intent channel
+// =============================================================================
+
+/** The gesture phase of a `set-prop` write (mirrors OSS `PanelGesture`). */
+const PanelGestureSchema = Schema.Literals(["live", "commit"]);
+
+const SetPropIntentSchema = Schema.Struct({
+  type: Schema.Literal("set-prop"),
+  name: CappedString,
+  value: PanelJsonValueSchema,
+  gesture: PanelGestureSchema,
+});
+
+const SetRefIntentSchema = Schema.Struct({
+  type: Schema.Literal("set-ref"),
+  name: CappedString,
+  productId: CappedString,
+});
+
+const ResetPropIntentSchema = Schema.Struct({
+  type: Schema.Literal("reset-prop"),
+  name: CappedString,
+});
+
+const GestureCommitIntentSchema = Schema.Struct({
+  type: Schema.Literal("gesture-commit"),
+  name: CappedString,
+});
+
+const GestureDiscardIntentSchema = Schema.Struct({
+  type: Schema.Literal("gesture-discard"),
+  name: CappedString,
+});
+
+/**
+ * The closed union of every intent a panel emits, matching the OSS
+ * `PanelIntent` (`@voidhash/paywalls/panel`) exactly: `set-prop` (with a
+ * `gesture` of `live`/`commit`), `set-ref` (P0-B), `reset-prop`,
+ * `gesture-commit`, and `gesture-discard` — the last three carrying the target
+ * prop `name`.
+ */
+export const PanelIntentSchema = Schema.Union([
+  SetPropIntentSchema,
+  SetRefIntentSchema,
+  ResetPropIntentSchema,
+  GestureCommitIntentSchema,
+  GestureDiscardIntentSchema,
+]);
+
+/** A decoded, host-trusted panel intent. */
+export type PanelIntent = typeof PanelIntentSchema.Type;
+
+/** Discriminated result of {@link decodePanelIntent}. */
+export type DecodePanelIntentResult =
+  | { readonly ok: true; readonly intent: PanelIntent }
+  | { readonly ok: false; readonly error: string };
+
+const decodePanelIntentStrict = Schema.decodeUnknownSync(PanelIntentSchema, strictParseOptions);
+
+/**
+ * The host's authoritative gate for a sandbox-originated {@link PanelIntent}.
+ * Enforces the `PANEL_CAPS.intentBytes` (32 KB) cap on a `set-prop` intent's
+ * `value` before the strict decode — the intent channel is where that cap
+ * lives (the tree validator never sees intents). Returns a discriminated
+ * {@link DecodePanelIntentResult} — never throws.
+ */
+export const decodePanelIntent = (input: unknown): DecodePanelIntentResult => {
+  if (
+    typeof input === "object" &&
+    input !== null &&
+    (input as { type?: unknown }).type === "set-prop"
+  ) {
+    const value = (input as { value?: unknown }).value;
+    let size: number;
+    try {
+      size = byteLength(JSON.stringify(value ?? null));
+    } catch {
+      return { ok: false, error: "intent value is not serializable" };
+    }
+    if (size > PANEL_CAPS.intentBytes) {
+      return { ok: false, error: `intent value exceeds ${PANEL_CAPS.intentBytes} bytes` };
+    }
+  }
+
+  try {
+    return { ok: true, intent: decodePanelIntentStrict(input) };
+  } catch (error) {
+    return { ok: false, error: `invalid panel intent: ${errorMessage(error)}` };
+  }
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/transport.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/transport.ts
new file mode 100644
index 000000000..58d0f9a20
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/transport.ts
@@ -0,0 +1,69 @@
+/**
+ * The uniform transport contract the host uses to drive ONE panel session,
+ * whatever engine backs it. A built-in panel runs the OSS reconciler in-process
+ * (trusted, synchronous — {@link ./in-process-transport}); a code-component
+ * panel will run it inside a sandboxed iframe (Phase 3 — a typed seam only for
+ * now). Both expose exactly this surface, so the renderer
+ * ({@link ./host-renderer}) and the gesture controller
+ * ({@link ./gesture-controller}) never branch on the engine.
+ *
+ * The `subscribe`/`getSnapshot` pair is `useSyncExternalStore`-compatible: the
+ * snapshot's object identity changes only on a REAL change (a new tree, a status
+ * transition), so `PanelTreeView` re-renders precisely when the panel does.
+ */
+import type { PanelTree } from "./schema";
+
+/** A fired panel event, addressed to a live node's current handler. */
+export interface PanelDispatchEvent {
+  /** The reconciler instance id of the node whose handler fires. */
+  readonly nodeId: number;
+  /** The event name (must be in the node type's wire allowlist). */
+  readonly name: string;
+  /** Positional arguments forwarded to the handler. */
+  readonly args: ReadonlyArray<unknown>;
+}
+
+/**
+ * The renderer-facing view of a transport at a point in time. Object identity is
+ * stable between real changes so `useSyncExternalStore` never tears or loops.
+ *
+ * - `loading` — no tree has been emitted yet (initial mount, or a restart in
+ *   flight).
+ * - `ready` — a decoded, host-trusted {@link PanelTree} is available.
+ *   `revision` increments on every distinct emission (used for gesture-echo
+ *   bookkeeping and debugging).
+ * - `error` — the session failed. `restartable` gates whether the error chrome
+ *   offers a Restart button (an in-process built-in drift is restartable; a
+ *   dead sandbox may not be).
+ */
+export type PanelSnapshot =
+  | { readonly status: "loading" }
+  | { readonly status: "ready"; readonly tree: PanelTree; readonly revision: number }
+  | { readonly status: "error"; readonly message: string; readonly restartable: boolean };
+
+/** Which engine backs a transport (used only for diagnostics/typed seams). */
+export type PanelTransportKind = "in-process" | "sandbox";
+
+/**
+ * The one handle the host drives a panel session through. Implementations own a
+ * single session; call {@link dispose} to release it.
+ */
+export interface PanelTransport {
+  /** The engine backing this transport. */
+  readonly kind: PanelTransportKind;
+  /** Pushes a fresh host input snapshot; the session re-renders and re-emits. */
+  update(inputs: unknown): void;
+  /** Dispatches a fired event to the live node's handler. */
+  dispatch(event: PanelDispatchEvent): void;
+  /**
+   * Subscribes to snapshot changes. Returns an unsubscribe function.
+   * `useSyncExternalStore`-compatible: `cb` is called after every real change.
+   */
+  subscribe(cb: () => void): () => void;
+  /** The current snapshot (stable identity between real changes). */
+  getSnapshot(): PanelSnapshot;
+  /** Tears the session down and mounts a fresh one from the same source. */
+  restart(): void;
+  /** Unmounts the session and releases all resources. */
+  dispose(): void;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/use-panel-session.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/use-panel-session.ts
new file mode 100644
index 000000000..509a3d379
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/use-panel-session.ts
@@ -0,0 +1,138 @@
+"use client";
+
+/**
+ * Owns exactly one {@link PanelTransport} for a panel source, for the lifetime of
+ * the calling component. The transport is created once (per source identity) and
+ * fed fresh inputs via {@link PanelTransport.update} whenever `inputs` change;
+ * it is disposed on unmount or when the source identity changes.
+ *
+ * The source discriminant selects the engine: `builtin` runs the definition
+ * in-process ({@link createInProcessTransport}); `component-panel` is the typed
+ * seam for the Phase 3 sandbox transport (constructing one throws today).
+ */
+import type { PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { useEffect, useRef } from "react";
+
+import {
+  createInProcessTransport,
+  type PanelRender,
+  type PanelWrap,
+  type PanelIntentSink,
+} from "./in-process-transport";
+import type { PanelTransport } from "./transport";
+
+/** A built-in panel source: a trusted definition run in-process. */
+export interface BuiltinPanelSource {
+  readonly kind: "builtin";
+  /** The panel definition `(ctx) => ReactNode`. */
+  readonly render: PanelRender;
+  /** Re-wraps providers inside the reconciler root (store context, host services). */
+  readonly wrap?: PanelWrap;
+  /** Where the definition's writes go (built-ins reduce synchronously; optional). */
+  readonly intentSink?: PanelIntentSink;
+  /** Reports a definition render/effect error. */
+  readonly onError?: (error: unknown) => void;
+}
+
+/**
+ * A code-component panel source (Phase 3): a sandboxed iframe running the
+ * reconciler. Typed here so call sites compile against the final shape; building
+ * the transport throws until the sandbox engine lands.
+ */
+export interface ComponentPanelSource {
+  readonly kind: "component-panel";
+  /** The compiled component-panel bundle identity (sandbox entry). */
+  readonly bundleId: string;
+}
+
+/** Every panel source discriminant the host can drive. */
+export type PanelSource = BuiltinPanelSource | ComponentPanelSource;
+
+/**
+ * Creates the transport for a source. The `component-panel` engine is a typed
+ * seam — constructing one throws until Phase 3 provides the sandbox transport.
+ */
+const createTransportForSource = (
+  source: PanelSource,
+  initialInputs: PanelSessionInputs,
+): PanelTransport => {
+  if (source.kind === "builtin") {
+    return createInProcessTransport({
+      render: source.render,
+      initialInputs,
+      wrap: source.wrap,
+      intentSink: source.intentSink,
+      onError: source.onError,
+    });
+  }
+  // component-panel — Phase 3 sandbox transport.
+  throw new Error(
+    "component-panel transport is not implemented yet (Phase 3 sandbox engine)",
+  );
+};
+
+interface SessionCell {
+  readonly source: PanelSource;
+  readonly deps: ReadonlyArray<unknown>;
+  readonly transport: PanelTransport;
+}
+
+const depsEqual = (a: ReadonlyArray<unknown>, b: ReadonlyArray<unknown>): boolean =>
+  a.length === b.length && a.every((value, index) => value === b[index]);
+
+/**
+ * Owns a {@link PanelTransport} for `source`. The transport is (re)created when
+ * `source` identity or any `deps` entry changes, and pushed fresh `inputs` on
+ * every change; it is disposed on unmount.
+ *
+ * The transport is created SYNCHRONOUSLY during render (so the first paint has a
+ * live session, no flash of loading) and the same instance is adopted by the
+ * disposal effect — there is never a double-create.
+ *
+ * @param source - the panel source (see {@link PanelSource}); pass a STABLE
+ *   reference across renders — a new object each render remounts the session,
+ *   which the built-in host deliberately avoids by keying on sectionId.
+ * @param inputs - the current host input snapshot, pushed via `update()`.
+ * @param deps - extra identity keys that force a transport re-create.
+ */
+export function usePanelSession(
+  source: PanelSource,
+  inputs: PanelSessionInputs,
+  deps: ReadonlyArray<unknown> = [],
+): PanelTransport {
+  const cellRef = useRef<SessionCell | null>(null);
+
+  // Create-or-recreate synchronously in render when the identity changed.
+  const current = cellRef.current;
+  if (current === null || current.source !== source || !depsEqual(current.deps, deps)) {
+    current?.transport.dispose();
+    cellRef.current = {
+      source,
+      deps,
+      transport: createTransportForSource(source, inputs),
+    };
+  }
+  const transport = cellRef.current!.transport;
+
+  // Push fresh inputs whenever they change.
+  const initialInputsRef = useRef(inputs);
+  useEffect(() => {
+    // Skip the very first run for this transport instance: the transport was
+    // constructed with these exact inputs, so an immediate re-push is redundant.
+    if (initialInputsRef.current === inputs) {
+      initialInputsRef.current = null as unknown as PanelSessionInputs;
+      return;
+    }
+    transport.update(inputs);
+  }, [transport, inputs]);
+
+  // Dispose on unmount (the render path disposes on identity change).
+  useEffect(() => {
+    return () => {
+      cellRef.current?.transport.dispose();
+      cellRef.current = null;
+    };
+  }, []);
+
+  return transport;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
new file mode 100644
index 000000000..2ba9e28f1
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
@@ -0,0 +1,71 @@
+"use client";
+
+import { IconButtonTooltip, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import {
+  GalleryVerticalIcon,
+  type LucideIcon,
+  MousePointer2Icon,
+  SquareDashedIcon,
+  TypeIcon,
+} from "lucide-react";
+import { useStore } from "zustand";
+
+import { ZoomControls } from "../components/ui/zoom-controls";
+import { setActiveTool } from "../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import type { AvailableTool } from "../state/designer-store-state";
+import { AddComponentCommand } from "./add-component-dialog";
+import { LocaleSwitcher } from "./locale-switcher";
+
+/** Bottom-bar tool toggles, in order, with their tooltip labels. */
+const TOOL_ITEMS: { icon: LucideIcon; label: string; value: AvailableTool }[] = [
+  { icon: MousePointer2Icon, label: "Select", value: "cursor" },
+  { icon: TypeIcon, label: "Text", value: "text" },
+  { icon: SquareDashedIcon, label: "View", value: "columns" },
+  { icon: GalleryVerticalIcon, label: "ScrollView", value: "scroll-view" },
+];
+
+export function ActionPanel() {
+  const dispatch = usePaywallDesignerActions();
+  const store = usePaywallDesignerStore();
+  const activeTool = useStore(store, (state) => state.tools.activeTool);
+  const isPreviewMode = useStore(store, (state) => state.mode === "preview");
+
+  return (
+    <div className="fixed right-0 bottom-12 left-0 z-40 flex items-center justify-center pointer-events-none">
+      <div className="flex flex-row gap-2 rounded-2xl border border-border bg-card p-2 shadow-lg pointer-events-auto">
+        {isPreviewMode ? (
+          <>
+            <ZoomControls />
+            <LocaleSwitcher />
+          </>
+        ) : (
+          <>
+            <ToggleGroup
+              indicatorClassName="bg-primary duration-150"
+              onValueChange={(value) => dispatch(setActiveTool)({ tool: value as AvailableTool })}
+              size="sm"
+              type="single"
+              value={activeTool}
+              variant="outline"
+            >
+              {TOOL_ITEMS.map(({ icon: Icon, label, value }) => (
+                <IconButtonTooltip key={value} label={label}>
+                  <ToggleGroupItem
+                    className="min-w-7 px-2 text-muted-foreground hover:text-foreground data-[state=on]:text-primary-foreground data-[state=on]:hover:bg-transparent dark:data-[state=on]:hover:bg-transparent"
+                    size="sm"
+                    value={value}
+                  >
+                    <Icon />
+                  </ToggleGroupItem>
+                </IconButtonTooltip>
+              ))}
+            </ToggleGroup>
+            <AddComponentCommand />
+            <LocaleSwitcher />
+          </>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/add-component-dialog.tsx b/apps/www/src/features/studio/paywalls/designer/panels/add-component-dialog.tsx
new file mode 100644
index 000000000..8c4649958
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/add-component-dialog.tsx
@@ -0,0 +1,309 @@
+"use client";
+
+import {
+  Button,
+  CommandDialog,
+  CommandEmpty,
+  CommandGroup,
+  CommandInput,
+  CommandItem,
+  CommandList,
+  IconButtonTooltip,
+} from "@voidhash/ui";
+import { listBuiltinComponents } from "@voidhash/paywall-builtins";
+import { Code2Icon, ComponentIcon } from "lucide-react";
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import {
+  createScreenNode,
+  createScrollViewNode,
+  createTextNode,
+  createViewNode,
+  insertBuiltinComponentNode,
+  insertComponentNode,
+  insertLocalComponentNode,
+} from "../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import type { ComponentCatalogEntry } from "../state/designer-store-state";
+import {
+  type CodeComponentDefinition,
+  codeComponentDefinitions,
+  componentDisplayName,
+  componentFileName,
+  selectCodeComponentNodes,
+} from "../state/utils/code-components";
+import { findInsertionParent } from "../state/utils/component-children";
+import { selectDocumentRoot } from "../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../state/utils/presence";
+import { isEditableElement } from "../hooks/use-keyboard-shortcuts";
+import { isMacPlatform } from "../utils/platform";
+import { BUILTIN_COMPONENT_ICON, NODE_TYPE_ICONS } from "./node-type-icons";
+
+/** Platform-aware label for the add-component shortcut (⌘J on Mac, Ctrl+J elsewhere). */
+function addComponentShortcutLabel(): string {
+  return isMacPlatform() ? "⌘J" : "Ctrl+J";
+}
+
+/**
+ * Bottom action bar "add component" affordance: a button that opens a
+ * keyboard-driven command palette listing everything insertable — layout
+ * primitives (Text/View/Scroll View/Screen), first-party built-in components,
+ * deployed catalog components, and paywall-scoped code components. Selecting an
+ * entry inserts it into the nearest valid parent of the current selection
+ * (falling back to the first screen; Screen inserts under the document root)
+ * and closes the palette.
+ */
+export function AddComponentCommand() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const [open, setOpen] = useState(false);
+
+  // Cmd/Ctrl+J toggles the palette. This component only mounts in design mode
+  // (the action bar hides the add button in preview/code), so the shortcut is
+  // inherently inactive there. While closed it is suppressed when an editable
+  // element is focused so it never steals input from fields, contenteditable,
+  // or the Monaco editor; while open, focus sits in the palette's own search
+  // input, so the guard is skipped to let the shortcut close it again.
+  useEffect(() => {
+    const handleKeyDown = (e: KeyboardEvent) => {
+      const modKey = isMacPlatform() ? e.metaKey : e.ctrlKey;
+      if (!modKey || e.shiftKey || e.altKey || e.key.toLowerCase() !== "j") {
+        return;
+      }
+      if (!open && isEditableElement(e.target)) {
+        return;
+      }
+      e.preventDefault();
+      setOpen((prev) => !prev);
+    };
+    window.addEventListener("keydown", handleKeyDown);
+    return () => {
+      window.removeEventListener("keydown", handleKeyDown);
+    };
+  }, [open]);
+
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const components = useStore(store, (state) => state.componentCatalog.components);
+  const codeNodes = useStore(store, selectCodeComponentNodes);
+  const selectedNodeIds = useStore(
+    store,
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self)),
+  );
+
+  const catalogEntries = useMemo(
+    () =>
+      Object.values(components).sort((a, b) =>
+        (a.title ?? a.slug).localeCompare(b.title ?? b.slug),
+      ),
+    [components],
+  );
+  const codeDefinitions = useMemo(
+    () =>
+      [...codeComponentDefinitions(codeNodes)].sort((a, b) =>
+        componentDisplayName(a.path).localeCompare(componentDisplayName(b.path)),
+      ),
+    [codeNodes],
+  );
+  // Slot builtins are gated OFF for now: the edit canvas renders builtin
+  // instances as a preact island and slot children can't render inside the
+  // island yet, so only slotless builtins are offered for insertion.
+  const builtinDefinitions = useMemo(
+    () =>
+      listBuiltinComponents()
+        .filter((definition) => definition.manifest.slot !== true)
+        .sort((a, b) => a.name.localeCompare(b.name)),
+    [],
+  );
+
+  // Runs `insert` against the freshly resolved parent for a `childType`, then
+  // closes the palette. The parent is resolved on select (not on open) so a
+  // selection change made while the palette is open is honored.
+  const runInsert = useCallback(
+    (childType: string, insert: (parentId: string) => void) => {
+      const parentId = findInsertionParent(documentRoot, childType, selectedNodeIds, byContentHash);
+      if (parentId) {
+        insert(parentId);
+      }
+      setOpen(false);
+    },
+    [documentRoot, selectedNodeIds, byContentHash],
+  );
+
+  const insertText = useCallback(
+    () => runInsert("text", (parentId) => dispatch(createTextNode)({ parentId })),
+    [dispatch, runInsert],
+  );
+
+  const insertView = useCallback(
+    () =>
+      runInsert("view", (parentId) =>
+        dispatch(createViewNode)({ insertAffordance: true, parentId }),
+      ),
+    [dispatch, runInsert],
+  );
+
+  const insertScrollView = useCallback(
+    () =>
+      runInsert("scrollView", (parentId) =>
+        dispatch(createScrollViewNode)({ insertAffordance: true, parentId }),
+      ),
+    [dispatch, runInsert],
+  );
+
+  // Screens live directly under the document root, not under the current
+  // selection — createScreenNode inserts into whatever `parentId` it is given.
+  const insertScreen = useCallback(() => {
+    if (documentRoot) {
+      dispatch(createScreenNode)({ parentId: documentRoot.id });
+    }
+    setOpen(false);
+  }, [dispatch, documentRoot]);
+
+  const primitiveItems = useMemo(
+    () => [
+      { icon: NODE_TYPE_ICONS.text, key: "text", label: "Text", onSelect: insertText },
+      { icon: NODE_TYPE_ICONS.view, key: "view", label: "View", onSelect: insertView },
+      {
+        icon: NODE_TYPE_ICONS.scrollView,
+        key: "scrollView",
+        label: "Scroll View",
+        onSelect: insertScrollView,
+      },
+      { icon: NODE_TYPE_ICONS.screen, key: "screen", label: "Screen", onSelect: insertScreen },
+    ],
+    [insertText, insertView, insertScrollView, insertScreen],
+  );
+
+  const insertCatalog = useCallback(
+    (entry: ComponentCatalogEntry) =>
+      runInsert("component", (parentId) =>
+        dispatch(insertComponentNode)({ component: entry, parentId }),
+      ),
+    [dispatch, runInsert],
+  );
+
+  const insertBuiltin = useCallback(
+    (definition: (typeof builtinDefinitions)[number]) =>
+      runInsert("component", (parentId) =>
+        dispatch(insertBuiltinComponentNode)({
+          defaultProps: definition.defaultProps,
+          name: definition.name,
+          parentId,
+          slug: definition.slug,
+        }),
+      ),
+    [dispatch, runInsert],
+  );
+
+  const insertLocal = useCallback(
+    (definition: CodeComponentDefinition) =>
+      runInsert("component", (parentId) => {
+        const manifest = store.getState().codeComponents.compiled[definition.id]?.artifact?.manifest;
+        dispatch(insertLocalComponentNode)({
+          componentPath: definition.path,
+          manifest,
+          parentId,
+        });
+      }),
+    [dispatch, runInsert, store],
+  );
+
+  return (
+    <>
+      <IconButtonTooltip
+        label={
+          <span className="flex items-center gap-2">
+            Add component
+            <span className="text-muted-foreground">{addComponentShortcutLabel()}</span>
+          </span>
+        }
+      >
+        <Button
+          aria-label="Add component"
+          onClick={() => setOpen(true)}
+          size="icon-sm"
+          variant="outline"
+        >
+          <ComponentIcon />
+        </Button>
+      </IconButtonTooltip>
+      <CommandDialog
+        description="Search components to add to the canvas"
+        onOpenChange={setOpen}
+        open={open}
+        title="Add component"
+      >
+        <CommandInput placeholder="Add a component..." />
+        <CommandList>
+          <CommandEmpty>No matches found.</CommandEmpty>
+          <CommandGroup heading="Primitives">
+            {primitiveItems.map((item) => {
+              const Icon = item.icon;
+              return (
+                <CommandItem
+                  key={item.key}
+                  onSelect={item.onSelect}
+                  value={`primitive ${item.label} ${item.key}`}
+                >
+                  {Icon && <Icon />}
+                  <span className="flex-1 truncate">{item.label}</span>
+                </CommandItem>
+              );
+            })}
+          </CommandGroup>
+          {builtinDefinitions.length > 0 && (
+            <CommandGroup heading="Built-in Components">
+              {builtinDefinitions.map((definition) => (
+                <CommandItem
+                  key={definition.slug}
+                  onSelect={() => insertBuiltin(definition)}
+                  value={`builtin ${definition.name} ${definition.slug}`}
+                >
+                  <BUILTIN_COMPONENT_ICON />
+                  <span className="flex-1 truncate">{definition.name}</span>
+                </CommandItem>
+              ))}
+            </CommandGroup>
+          )}
+          {catalogEntries.length > 0 && (
+            <CommandGroup heading="Components">
+              {catalogEntries.map((entry) => (
+                <CommandItem
+                  key={entry.slug}
+                  onSelect={() => insertCatalog(entry)}
+                  value={`component ${entry.title ?? ""} ${entry.slug}`}
+                >
+                  <ComponentIcon />
+                  <span className="flex-1 truncate">{entry.title ?? entry.slug}</span>
+                  <span className="shrink-0 text-muted-foreground text-xs">
+                    v{entry.latestVersion}
+                  </span>
+                </CommandItem>
+              ))}
+            </CommandGroup>
+          )}
+          {codeDefinitions.length > 0 && (
+            <CommandGroup heading="Code Components">
+              {codeDefinitions.map((definition) => (
+                <CommandItem
+                  key={definition.id}
+                  onSelect={() => insertLocal(definition)}
+                  value={`code ${componentDisplayName(definition.path)} ${componentFileName(definition.path)}`}
+                >
+                  <Code2Icon />
+                  <span className="flex-1 truncate">{componentDisplayName(definition.path)}</span>
+                  <span className="shrink-0 text-muted-foreground text-xs">
+                    {componentFileName(definition.path)}
+                  </span>
+                </CommandItem>
+              ))}
+            </CommandGroup>
+          )}
+        </CommandList>
+      </CommandDialog>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/constants.ts b/apps/www/src/features/studio/paywalls/designer/panels/constants.ts
new file mode 100644
index 000000000..bfbfc5d0e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/constants.ts
@@ -0,0 +1,11 @@
+export const PANEL_DIMENSIONS = {
+  LEFT_WIDTH: 240,
+  RIGHT_WIDTH: 280,
+  TOP_HEIGHT: 54,
+  /** Default width of the Voidhash AI chat panel (user-resizable at runtime). */
+  AI_CHAT_WIDTH: 320,
+  /** Lower bound for the resizable AI chat panel width. */
+  AI_CHAT_MIN_WIDTH: 280,
+  /** Upper bound for the resizable AI chat panel width. */
+  AI_CHAT_MAX_WIDTH: 560,
+} as const;
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/index.ts b/apps/www/src/features/studio/paywalls/designer/panels/index.ts
new file mode 100644
index 000000000..817acd2ac
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/index.ts
@@ -0,0 +1,2 @@
+export { PANEL_DIMENSIONS } from "./constants";
+export { LeftPanel } from "./left-panel";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
new file mode 100644
index 000000000..0f8c40ff7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
@@ -0,0 +1,51 @@
+"use client";
+
+import { cn, ScrollArea } from "@voidhash/ui";
+import { useStore } from "zustand/react";
+
+import { Panel } from "@/features/studio/paywalls/designer/components/ui/panel";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { PANEL_DIMENSIONS } from "./constants";
+import { CodeFileTree } from "./left-panel/code-file-tree";
+import { LayersSection } from "./left-panel/layers-section";
+
+export function LeftPanel() {
+  const store = usePaywallDesignerStore();
+  const mode = useStore(store, (state) => state.mode);
+  const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
+  const aiWidth = useStore(store, (state) => state.ai.width);
+  const isPreviewMode = mode === "preview";
+  const isCodeMode = mode === "code";
+  const aiOffset = aiPanelOpen && !isPreviewMode ? aiWidth : 0;
+
+  return (
+    <div
+      className={cn(
+        "fixed bottom-0 z-40 flex flex-col border-border border-r bg-panel",
+        "transition-[transform,left] duration-300 ease-in-out",
+        isPreviewMode && "-translate-x-full",
+      )}
+      style={{
+        top: PANEL_DIMENSIONS.TOP_HEIGHT,
+        left: aiOffset,
+        width: PANEL_DIMENSIONS.LEFT_WIDTH,
+      }}
+    >
+      <Panel className="relative overflow-hidden">
+        <div className="absolute inset-0">
+          {/* Code mode swaps the layers/components panels for a virtual file tree. */}
+          {isCodeMode ? (
+            <CodeFileTree />
+          ) : (
+            <ScrollArea className="h-full">
+              <div className="p-2">
+                <LayersSection />
+              </div>
+            </ScrollArea>
+          )}
+        </div>
+      </Panel>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-components-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-components-section.tsx
new file mode 100644
index 000000000..4f1cb8a7d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-components-section.tsx
@@ -0,0 +1,280 @@
+"use client";
+
+import { cn, useConfirmDialog } from "@voidhash/ui";
+import { ChevronDown, ChevronRight, Code2, Plus, Trash2 } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import { PreviewTreeRenderer } from "../../components/component-preview/preview-tree-renderer";
+import {
+  createCodeComponent,
+  deleteCodeComponent,
+  insertLocalComponentNode,
+  openTab,
+  renameComponentFile,
+  setMode,
+} from "../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import type { LocalComponentArtifact } from "../../state/designer-store-state";
+import { findComponentInsertionParent } from "../../state/utils/component-children";
+import {
+  codeComponentDefinitions,
+  componentDisplayName,
+  componentFileName,
+  selectCodeComponentNodes,
+  type CodeComponentDefinition,
+} from "../../state/utils/code-components";
+import { selectDocumentRoot } from "../../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+import { workspacePathForDocRelative } from "@voidhash/paywall-workspace";
+
+import { SCAFFOLD_SOURCE } from "../../code-mode/scaffold";
+import { usePaywallCodeTarget } from "../../hooks/use-paywall-code-target";
+
+const THUMBNAIL_TREE_WIDTH = 360;
+const THUMBNAIL_SCALE = 0.16;
+
+function Thumbnail({ artifact }: { artifact: LocalComponentArtifact | undefined }) {
+  const tree = artifact
+    ? (artifact.previewTrees.default ?? Object.values(artifact.previewTrees)[0])
+    : undefined;
+  return (
+    <div className="h-12 w-14 shrink-0 overflow-hidden rounded-sm border border-border bg-muted/40">
+      {tree ? (
+        <div
+          className="origin-top-left"
+          style={{ transform: `scale(${THUMBNAIL_SCALE})`, width: THUMBNAIL_TREE_WIDTH }}
+        >
+          <PreviewTreeRenderer tree={tree} />
+        </div>
+      ) : null}
+    </div>
+  );
+}
+
+function CodeComponentRow({
+  definition,
+  onOpen,
+  onInsert,
+  onRename,
+  onDelete,
+}: {
+  definition: CodeComponentDefinition;
+  onOpen: (definition: CodeComponentDefinition) => void;
+  onInsert: (definition: CodeComponentDefinition) => void;
+  onRename: (id: string, name: string) => void;
+  onDelete: (definition: CodeComponentDefinition) => void;
+}) {
+  const store = usePaywallDesignerStore();
+  const artifact = useStore(store, (state) => state.codeComponents.compiled[definition.id]?.artifact);
+  const [editingName, setEditingName] = useState<string | null>(null);
+
+  return (
+    <div className="group flex w-full items-center gap-2 rounded-sm p-1 hover:bg-accent/50">
+      <button className="flex min-w-0 flex-1 items-center gap-2 text-left" onClick={() => onOpen(definition)} type="button">
+        <Thumbnail artifact={artifact} />
+        <div className="flex min-w-0 flex-1 flex-col">
+          {editingName === null ? (
+            <span
+              className="truncate font-medium text-xs"
+              onDoubleClick={(event) => {
+                event.stopPropagation();
+                setEditingName(componentFileName(definition.path));
+              }}
+            >
+              {componentDisplayName(definition.path)}
+            </span>
+          ) : (
+            <input
+              autoFocus
+              className="h-5 w-full rounded border border-primary bg-background px-1 text-xs outline-none"
+              onBlur={() => {
+                onRename(definition.id, editingName);
+                setEditingName(null);
+              }}
+              onChange={(event) => setEditingName(event.target.value)}
+              onClick={(event) => event.stopPropagation()}
+              onKeyDown={(event) => {
+                if (event.key === "Enter") {
+                  onRename(definition.id, editingName);
+                  setEditingName(null);
+                } else if (event.key === "Escape") {
+                  setEditingName(null);
+                }
+              }}
+              value={editingName}
+            />
+          )}
+          <span className="truncate text-[10px] text-muted-foreground">
+            {componentFileName(definition.path)}
+          </span>
+        </div>
+      </button>
+      <div className="flex shrink-0 items-center gap-0.5 opacity-0 group-hover:opacity-100">
+        <button
+          className="flex size-6 items-center justify-center rounded-sm hover:bg-accent [&_svg]:size-3.5"
+          onClick={() => onInsert(definition)}
+          title="Insert on canvas"
+          type="button"
+        >
+          <Plus className="text-muted-foreground" />
+        </button>
+        <button
+          className="flex size-6 items-center justify-center rounded-sm hover:bg-accent [&_svg]:size-3.5"
+          onClick={() => onDelete(definition)}
+          title="Delete"
+          type="button"
+        >
+          <Trash2 className="text-muted-foreground" />
+        </button>
+      </div>
+    </div>
+  );
+}
+
+/**
+ * Library of paywall-scoped code components (source in the mimic doc). Create
+ * scaffolds a definition and opens the editor; rows open the editor, insert an
+ * instance onto the canvas, rename inline, or delete (with confirmation).
+ */
+export function CodeComponentsSection() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const target = usePaywallCodeTarget();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+  const [isOpen, setIsOpen] = useState(true);
+  const [search, setSearch] = useState("");
+
+  const nodes = useStore(store, selectCodeComponentNodes);
+  const definitions = useMemo(() => codeComponentDefinitions(nodes), [nodes]);
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const selectedNodeIds = useStore(
+    store,
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self)),
+  );
+
+  const entries = useMemo(() => {
+    const list = [...definitions].sort((a, b) =>
+      componentDisplayName(a.path).localeCompare(componentDisplayName(b.path)),
+    );
+    const query = search.trim().toLowerCase();
+    if (!query) {
+      return list;
+    }
+    return list.filter(
+      (entry) =>
+        componentDisplayName(entry.path).toLowerCase().includes(query) ||
+        componentFileName(entry.path).toLowerCase().includes(query),
+    );
+  }, [definitions, search]);
+
+  const handleCreate = () => {
+    dispatch(createCodeComponent)({ source: SCAFFOLD_SOURCE });
+    dispatch(setMode)({ mode: "code" });
+  };
+
+  // Design-mode open switches to code mode and opens the component's tab by its
+  // workspace path (the editor seeds its buffer from the `codeComponent` node).
+  const handleOpen = (definition: CodeComponentDefinition) => {
+    if (target !== null) {
+      dispatch(openTab)({ path: workspacePathForDocRelative(target.paywallSlug, definition.path) });
+    }
+    dispatch(setMode)({ mode: "code" });
+  };
+
+  const handleInsert = (definition: CodeComponentDefinition) => {
+    const parentId = findComponentInsertionParent(documentRoot, selectedNodeIds, byContentHash);
+    if (!parentId) {
+      return;
+    }
+    const manifest = store.getState().codeComponents.compiled[definition.id]?.artifact?.manifest;
+    dispatch(insertLocalComponentNode)({
+      componentPath: definition.path,
+      manifest,
+      parentId,
+    });
+  };
+
+  const handleDelete = async (definition: CodeComponentDefinition) => {
+    const confirmed = await openDialog({
+      confirmText: "Delete",
+      description:
+        "Instances of this component on the canvas will show a missing-component placeholder. You can undo this.",
+      title: `Delete "${componentDisplayName(definition.path)}"?`,
+      variant: "destructive",
+    });
+    if (confirmed) {
+      dispatch(deleteCodeComponent)({ id: definition.id });
+    }
+  };
+
+  return (
+    <div className="mt-2 border-border border-t pt-2">
+      <div className="flex h-7 items-center gap-1">
+        <button
+          className="flex flex-1 items-center gap-1 rounded-sm px-1 hover:bg-accent/50"
+          onClick={() => setIsOpen((open) => !open)}
+          type="button"
+        >
+          <span className="flex size-3 items-center justify-center [&_svg]:size-3">
+            {isOpen ? (
+              <ChevronDown className="text-muted-foreground" />
+            ) : (
+              <ChevronRight className="text-muted-foreground" />
+            )}
+          </span>
+          <Code2 className="size-3 text-muted-foreground" />
+          <span className="font-medium text-xs">Code Components</span>
+        </button>
+        <button
+          className="flex size-6 items-center justify-center rounded-sm hover:bg-accent [&_svg]:size-3.5"
+          onClick={handleCreate}
+          title="New code component"
+          type="button"
+        >
+          <Plus className="text-muted-foreground" />
+        </button>
+      </div>
+      {isOpen && (
+        <div className="flex flex-col gap-1 pt-1">
+          <input
+            className={cn(
+              "h-7 w-full rounded-sm px-2 text-xs outline-none",
+              "bg-input/30 placeholder:text-muted-foreground dark:bg-input/60",
+            )}
+            onChange={(event) => setSearch(event.target.value)}
+            placeholder="Search code components..."
+            type="text"
+            value={search}
+          />
+          {entries.length > 0 ? (
+            entries.map((definition) => (
+              <CodeComponentRow
+                definition={definition}
+                key={definition.id}
+                onDelete={handleDelete}
+                onInsert={handleInsert}
+                onOpen={handleOpen}
+                onRename={(id, value) => {
+                  const trimmed = value.trim().replace(/\//g, "");
+                  if (!trimmed) {
+                    return;
+                  }
+                  const fileName = trimmed.endsWith(".tsx") ? trimmed : `${trimmed}.tsx`;
+                  dispatch(renameComponentFile)({ id, fileName });
+                }}
+              />
+            ))
+          ) : (
+            <div className="px-2 py-2 font-medium text-muted-foreground text-xs">
+              {search.trim() ? "No code components match" : "No code components yet"}
+            </div>
+          )}
+        </div>
+      )}
+      <ConfirmationDialog />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-file-tree.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-file-tree.tsx
new file mode 100644
index 000000000..71b5628a0
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/code-file-tree.tsx
@@ -0,0 +1,344 @@
+"use client";
+
+import {
+  hotkeysCoreFeature,
+  type ItemInstance,
+  renamingFeature,
+  selectionFeature,
+  syncDataLoaderFeature,
+} from "@headless-tree/core";
+import { useTree } from "@headless-tree/react";
+import {
+  cn,
+  ContextMenu,
+  ContextMenuContent,
+  ContextMenuItem,
+  ContextMenuSeparator,
+  ContextMenuTrigger,
+  ScrollArea,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { workspacePathForDocRelative } from "@voidhash/paywall-workspace";
+import {
+  ChevronDown,
+  ChevronRight,
+  FileCode,
+  Folder,
+  FolderOpen,
+  Pencil,
+  Plus,
+  Trash2,
+} from "lucide-react";
+import { useCallback, useEffect, useMemo, useRef } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import {
+  closeTab,
+  createCodeComponent,
+  deleteCodeComponent,
+  openTab,
+  renameComponentFile,
+} from "../../state/actions";
+import { useCodeEditor } from "../../code-mode/code-editor-context";
+import { SCAFFOLD_SOURCE } from "../../code-mode/scaffold";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import {
+  codeComponentDefinitions,
+  componentFileName,
+  selectCodeComponentNodes,
+  type CodeComponentDefinition,
+} from "../../state/utils/code-components";
+import { usePaywallCodeTarget } from "../../hooks/use-paywall-code-target";
+
+/** A single node in the virtual file tree (a folder or a file "row"). */
+interface FileNode {
+  name: string;
+  isFolder: boolean;
+  children: string[];
+}
+
+/** Synthetic ids for the virtual root + the `components` folder. */
+const ROOT_ID = "__root__";
+const COMPONENTS_FOLDER_ID = "__components__";
+const INDENT_PX = 12;
+
+/** Returned for ids headless-tree may transiently query during a rebuild. */
+const MISSING_NODE: FileNode = { children: [], isFolder: false, name: "" };
+
+/**
+ * Builds the virtual tree data from the document's code-component definitions: a
+ * `components` folder holding one file row per definition, keyed by its workspace
+ * PATH. Each row's display name is its `<basename>.tsx` file name.
+ */
+function buildFileMap(
+  definitions: readonly CodeComponentDefinition[],
+  paywallSlug: string | undefined,
+): { map: Record<string, FileNode>; pathById: Record<string, string> } {
+  const map: Record<string, FileNode> = {
+    [ROOT_ID]: { children: [COMPONENTS_FOLDER_ID], isFolder: true, name: "root" },
+    [COMPONENTS_FOLDER_ID]: { children: [], isFolder: true, name: "components" },
+  };
+  const pathById: Record<string, string> = {};
+  if (paywallSlug === undefined) {
+    return { map, pathById };
+  }
+  for (const definition of definitions) {
+    const path = workspacePathForDocRelative(paywallSlug, definition.path);
+    map[COMPONENTS_FOLDER_ID]?.children.push(path);
+    map[path] = { children: [], isFolder: false, name: componentFileName(definition.path) };
+    pathById[path] = definition.id;
+  }
+  return { map, pathById };
+}
+
+/**
+ * Code-mode left panel: a fully virtual file tree (headless-tree) listing the
+ * paywall's code-component definitions. Clicking a file opens it in the editor;
+ * the header `+` creates a new component; rename/delete run the document-native
+ * (undoable) code-component actions — there is no fork.
+ */
+export function CodeFileTree() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const target = usePaywallCodeTarget();
+  const { handle } = useCodeEditor();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  const nodes = useStore(store, selectCodeComponentNodes);
+  const activeTabPath = useStore(store, (state) => state.codeComponents.activeTabPath);
+  const dirty = useStore(store, useShallow((state) => state.codeComponents.dirty));
+
+  const definitions = useMemo(() => codeComponentDefinitions(nodes), [nodes]);
+  const paywallSlug = target?.paywallSlug;
+
+  const { map: fileMap, pathById } = useMemo(
+    () => buildFileMap(definitions, paywallSlug),
+    [definitions, paywallSlug],
+  );
+  const fileMapRef = useRef(fileMap);
+  fileMapRef.current = fileMap;
+  const pathByIdRef = useRef(pathById);
+  pathByIdRef.current = pathById;
+
+  const handleOpen = useCallback(
+    (path: string) => {
+      dispatch(openTab)({ path });
+    },
+    [dispatch],
+  );
+
+  const handleCreate = useCallback(() => {
+    const result = dispatch(createCodeComponent)({ source: SCAFFOLD_SOURCE });
+    if (result.nodeId === null || paywallSlug === undefined) {
+      return;
+    }
+    const definition = codeComponentDefinitions(selectCodeComponentNodes(store.getState())).find(
+      (candidate) => candidate.id === result.nodeId,
+    );
+    if (definition !== undefined) {
+      dispatch(openTab)({ path: workspacePathForDocRelative(paywallSlug, definition.path) });
+    }
+  }, [dispatch, paywallSlug, store]);
+
+  const handleRename = useCallback(
+    (path: string, value: string) => {
+      const id = pathByIdRef.current[path];
+      if (id === undefined || paywallSlug === undefined) {
+        return;
+      }
+      const trimmed = value.trim().replace(/\//g, "");
+      if (!trimmed) {
+        return;
+      }
+      const fileName = trimmed.endsWith(".tsx") ? trimmed : `${trimmed}.tsx`;
+      const result = dispatch(renameComponentFile)({ id, fileName });
+      if (result.nextPath === null) {
+        return;
+      }
+      // Follow the rename in the open-tab list — but re-KEY the Monaco model
+      // (preserving its text, view state, and undo history) rather than
+      // open/close, which disposes the old model and silently drops unsaved edits.
+      const to = workspacePathForDocRelative(paywallSlug, result.nextPath);
+      const wasOpen = store.getState().codeComponents.openTabs.includes(path);
+      if (wasOpen && to !== path) {
+        handle?.renameModel(path, to);
+        dispatch(openTab)({ path: to });
+        dispatch(closeTab)({ path });
+      }
+    },
+    [dispatch, handle, paywallSlug, store],
+  );
+
+  const handleDelete = useCallback(
+    async (path: string, name: string) => {
+      const id = pathByIdRef.current[path];
+      if (id === undefined) {
+        return;
+      }
+      const confirmed = await openDialog({
+        confirmText: "Delete",
+        description:
+          "Instances of this component on the canvas will show a missing-component placeholder. You can undo this.",
+        title: `Delete "${name}"?`,
+        variant: "destructive",
+      });
+      if (confirmed) {
+        dispatch(deleteCodeComponent)({ id });
+        dispatch(closeTab)({ path });
+      }
+    },
+    [dispatch, openDialog],
+  );
+
+  const tree = useTree<FileNode>({
+    canRename: (item) => !item.getItemData().isFolder,
+    dataLoader: {
+      getChildren: (id) => fileMapRef.current[id]?.children ?? [],
+      getItem: (id) => fileMapRef.current[id] ?? MISSING_NODE,
+    },
+    features: [syncDataLoaderFeature, selectionFeature, hotkeysCoreFeature, renamingFeature],
+    getItemName: (item) => item.getItemData().name,
+    indent: INDENT_PX,
+    initialState: { expandedItems: [COMPONENTS_FOLDER_ID] },
+    isItemFolder: (item) => item.getItemData().isFolder,
+    onPrimaryAction: (item) => {
+      if (!item.getItemData().isFolder) {
+        handleOpen(item.getId());
+      }
+    },
+    onRename: (item, value) => handleRename(item.getId(), value),
+    rootItemId: ROOT_ID,
+  });
+
+  // Rebuild the data loader whenever the component set changes.
+  const signature = useMemo(
+    () => Object.keys(pathById).sort().join("|"),
+    [pathById],
+  );
+  useEffect(() => {
+    tree.rebuildTree();
+  }, [signature, tree]);
+
+  return (
+    <div className="flex h-full flex-col">
+      <div className="flex h-8 shrink-0 items-center justify-between border-border border-b px-2">
+        <span className="font-medium text-muted-foreground text-xs">Files</span>
+        <button
+          className="flex size-6 items-center justify-center rounded-sm hover:bg-accent [&_svg]:size-3.5"
+          onClick={handleCreate}
+          title="New code component"
+          type="button"
+        >
+          <Plus className="text-muted-foreground" />
+        </button>
+      </div>
+      <ScrollArea className="min-h-0 flex-1">
+        <div className="p-1" {...tree.getContainerProps("Code components")}>
+          {tree.getItems().map((item) => renderTreeItem(item))}
+        </div>
+      </ScrollArea>
+      <ConfirmationDialog />
+    </div>
+  );
+
+  /**
+   * Renders one tree row. Component files are wrapped in a right-click context
+   * menu (Rename / Delete) and swap to an inline input while being renamed; the
+   * `components` folder is a plain row.
+   */
+  function renderTreeItem(item: ItemInstance<FileNode>) {
+    const id = item.getId();
+    const isFolder = item.isFolder();
+    const isExpanded = item.isExpanded();
+    const isActive = !isFolder && id === activeTabPath;
+    const isRenaming = !isFolder && item.isRenaming();
+    const isFile = !isFolder;
+    const isDirty = isFile && dirty[id] === true;
+    const level = item.getItemMeta().level;
+
+    const row = (
+      <div
+        {...item.getProps()}
+        className={cn(
+          "flex h-7 cursor-pointer items-center gap-1.5 rounded-sm pr-2 text-xs outline-none",
+          "hover:bg-accent/50 focus-visible:bg-accent/50",
+          isActive && "bg-accent text-accent-foreground hover:bg-accent",
+        )}
+        key={item.getKey()}
+        onDoubleClick={(event) => {
+          if (!isFolder) {
+            event.stopPropagation();
+            item.startRenaming();
+          }
+        }}
+        style={{ paddingLeft: level * INDENT_PX + 4 }}
+      >
+        <span className="flex size-3 shrink-0 items-center justify-center [&_svg]:size-3">
+          {isFolder &&
+            (isExpanded ? (
+              <ChevronDown className="text-muted-foreground" />
+            ) : (
+              <ChevronRight className="text-muted-foreground" />
+            ))}
+        </span>
+        <span className="flex size-3.5 shrink-0 items-center justify-center [&_svg]:size-3.5">
+          {isFolder ? (
+            isExpanded ? (
+              <FolderOpen className="text-muted-foreground" />
+            ) : (
+              <Folder className="text-muted-foreground" />
+            )
+          ) : (
+            <FileCode className="text-muted-foreground" />
+          )}
+        </span>
+        {isRenaming ? (
+          <input
+            {...item.getRenameInputProps()}
+            className="h-5 min-w-0 flex-1 rounded border border-primary bg-background px-1 font-medium text-xs outline-none"
+            onBlur={() => tree.completeRenaming()}
+            onClick={(event) => event.stopPropagation()}
+            onDoubleClick={(event) => event.stopPropagation()}
+          />
+        ) : (
+          <span className="min-w-0 flex-1 truncate font-medium">{item.getItemName()}</span>
+        )}
+        {isDirty && !isRenaming && (
+          <span className="flex size-3 shrink-0 items-center justify-center">
+            <span className="size-1.5 rounded-full bg-foreground" />
+          </span>
+        )}
+      </div>
+    );
+
+    // The `components` folder has no rename/delete context menu.
+    if (isFolder) {
+      return row;
+    }
+
+    return (
+      <ContextMenu key={item.getKey()}>
+        <ContextMenuTrigger asChild>{row}</ContextMenuTrigger>
+        <ContextMenuContent
+          className="w-40"
+          onCloseAutoFocus={(event) => event.preventDefault()}
+        >
+          <ContextMenuItem
+            onSelect={() => {
+              requestAnimationFrame(() => item.startRenaming());
+            }}
+          >
+            <Pencil className="text-muted-foreground" />
+            Rename
+          </ContextMenuItem>
+          <ContextMenuSeparator />
+          <ContextMenuItem onSelect={() => handleDelete(id, item.getItemName())} variant="destructive">
+            <Trash2 />
+            Delete
+          </ContextMenuItem>
+        </ContextMenuContent>
+      </ContextMenu>
+    );
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/components-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/components-section.tsx
new file mode 100644
index 000000000..07f31dd2d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/components-section.tsx
@@ -0,0 +1,156 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { ChevronDown, ChevronRight } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import { PreviewTreeRenderer } from "../../components/component-preview/preview-tree-renderer";
+import { useComponentPreviewTree } from "../../components/component-preview/use-preview-tree";
+import { insertComponentNode } from "../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import type {
+  ComponentCatalogEntry,
+  ComponentCatalogVersion,
+} from "../../state/designer-store-state";
+import { findComponentInsertionParent } from "../../state/utils/component-children";
+import { selectDocumentRoot } from "../../state/utils/document-root";
+import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+
+const THUMBNAIL_TREE_WIDTH = 360;
+const THUMBNAIL_SCALE = 0.16;
+
+function ComponentThumbnail({ version }: { version: ComponentCatalogVersion }) {
+  const { data: tree } = useComponentPreviewTree({
+    artifactBaseUrl: version.artifactBaseUrl,
+    contentHash: version.contentHash,
+    state: "default",
+  });
+
+  return (
+    <div className="h-12 w-14 shrink-0 overflow-hidden rounded-sm border border-border bg-muted/40">
+      {tree ? (
+        <div
+          className="origin-top-left"
+          style={{
+            transform: `scale(${THUMBNAIL_SCALE})`,
+            width: THUMBNAIL_TREE_WIDTH,
+          }}
+        >
+          <PreviewTreeRenderer tree={tree} />
+        </div>
+      ) : null}
+    </div>
+  );
+}
+
+function ComponentRow({
+  entry,
+  onInsert,
+}: {
+  entry: ComponentCatalogEntry;
+  onInsert: (entry: ComponentCatalogEntry) => void;
+}) {
+  return (
+    <button
+      className="flex w-full items-center gap-2 rounded-sm p-1 text-left hover:bg-accent/50"
+      onClick={() => onInsert(entry)}
+      type="button"
+    >
+      <ComponentThumbnail version={entry.latest} />
+      <div className="flex min-w-0 flex-1 flex-col">
+        <span className="truncate font-medium text-xs">{entry.title ?? entry.slug}</span>
+        <span className="truncate text-[10px] text-muted-foreground">{entry.slug}</span>
+      </div>
+      <span className="shrink-0 rounded-sm bg-muted px-1.5 py-0.5 font-medium text-[10px] text-muted-foreground">
+        v{entry.latestVersion}
+      </span>
+    </button>
+  );
+}
+
+/**
+ * Library of deployed code components for the current project. Click inserts
+ * an instance into the nearest valid parent of the current selection
+ * (catalog rules + manifest slot gate), falling back to the first screen.
+ */
+export function ComponentsSection() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const [isOpen, setIsOpen] = useState(true);
+  const [search, setSearch] = useState("");
+
+  const components = useStore(store, (state) => state.componentCatalog.components);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const selectedNodeIds = useStore(
+    store,
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self)),
+  );
+  const documentRoot = useStore(store, selectDocumentRoot);
+
+  const entries = useMemo(() => {
+    const list = Object.values(components).sort((a, b) =>
+      (a.title ?? a.slug).localeCompare(b.title ?? b.slug),
+    );
+    const query = search.trim().toLowerCase();
+    if (!query) {
+      return list;
+    }
+    return list.filter(
+      (entry) =>
+        entry.slug.toLowerCase().includes(query) ||
+        (entry.title ?? "").toLowerCase().includes(query),
+    );
+  }, [components, search]);
+
+  const handleInsert = (entry: ComponentCatalogEntry) => {
+    const parentId = findComponentInsertionParent(documentRoot, selectedNodeIds, byContentHash);
+    if (!parentId) {
+      return;
+    }
+    dispatch(insertComponentNode)({ component: entry, parentId });
+  };
+
+  return (
+    <div className="mt-2 border-border border-t pt-2">
+      <button
+        className="flex h-7 w-full items-center gap-1 rounded-sm px-1 hover:bg-accent/50"
+        onClick={() => setIsOpen((open) => !open)}
+        type="button"
+      >
+        <span className="flex size-3 items-center justify-center [&_svg]:size-3">
+          {isOpen ? (
+            <ChevronDown className="text-muted-foreground" />
+          ) : (
+            <ChevronRight className="text-muted-foreground" />
+          )}
+        </span>
+        <span className="font-medium text-xs">Components</span>
+      </button>
+      {isOpen && (
+        <div className="flex flex-col gap-1 pt-1">
+          <input
+            className={cn(
+              "h-7 w-full rounded-sm px-2 text-xs outline-none",
+              "bg-input/30 placeholder:text-muted-foreground dark:bg-input/60",
+            )}
+            onChange={(e) => setSearch(e.target.value)}
+            placeholder="Search components..."
+            type="text"
+            value={search}
+          />
+          {entries.length > 0 ? (
+            entries.map((entry) => (
+              <ComponentRow entry={entry} key={entry.slug} onInsert={handleInsert} />
+            ))
+          ) : (
+            <div className="px-2 py-2 font-medium text-muted-foreground text-xs">
+              {search.trim() ? "No components match" : "No components deployed"}
+            </div>
+          )}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx
new file mode 100644
index 000000000..b8df4346b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx
@@ -0,0 +1,1453 @@
+"use client";
+
+import {
+  closestCenter,
+  DndContext,
+  type DragEndEvent,
+  type DragMoveEvent,
+  type DragOverEvent,
+  type DragStartEvent,
+  MeasuringStrategy,
+  PointerSensor,
+  useSensor,
+  useSensors,
+} from "@dnd-kit/core";
+import { SortableContext, useSortable, verticalListSortingStrategy } from "@dnd-kit/sortable";
+import { canBeChildOf } from "@voidhash/mimic-schema";
+import { cn } from "@voidhash/ui";
+import { ChevronDown, ChevronRight, TriangleAlertIcon } from "lucide-react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { useStore } from "zustand/react";
+import { useShallow } from "zustand/react/shallow";
+
+import { DesignerContextMenu } from "../../components/designer-context-menu";
+import { useComponentNodeWarnings } from "../../hooks/use-component-node-warnings";
+import { BUILTIN_COMPONENT_ICON, type NodeIconKey, NODE_TYPE_ICONS } from "../node-type-icons";
+import {
+  moveNode,
+  selectNode,
+  setHighlightedNode,
+  unselectNode,
+  updateComponentNode,
+  updateViewNode,
+  updatePathNode,
+  updateScreenNode,
+  updateShapeNode,
+  updateTextNode,
+} from "../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import { nodePassesSlotGate } from "../../state/utils/component-children";
+import { selectDocumentRoot } from "../../state/utils/document-root";
+import { canHaveChildren as nodeCanHaveChildren } from "../../state/utils/node-type-helpers";
+import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+
+// ============================================================================
+// Types
+// ============================================================================
+
+/**
+ * Structural view of designer snapshot nodes carrying just the fields the
+ * layers tree reads. Snapshot nodes nest their payload under `data`; `style`
+ * stays untyped because each node type carries a different style struct.
+ */
+interface SnapshotNode {
+  id: string;
+  type: string;
+  // `path`/`source` (a `codeComponent`'s data) keep this from being a "weak
+  // type" so the whole `RootSnapshotNode` tree assigns here.
+  data?: {
+    name?: string;
+    style?: Record<string, unknown>;
+    path?: string;
+    source?: string;
+  };
+  children?: readonly SnapshotNode[];
+}
+
+interface FlattenedNode {
+  id: string;
+  node: SnapshotNode;
+  depth: number;
+  parentId: string | null;
+  index: number;
+  canHaveChildren: boolean;
+}
+
+interface Projection {
+  depth: number;
+  parentId: string | null;
+  overId: string;
+  isAbove: boolean;
+}
+
+// ============================================================================
+// Constants
+// ============================================================================
+
+const INDENTATION_WIDTH = 16;
+
+const measuring = {
+  droppable: {
+    strategy: MeasuringStrategy.Always,
+  },
+};
+
+// ============================================================================
+// Utility Functions
+// ============================================================================
+
+function flattenTree(
+  node: SnapshotNode,
+  expandedLayers: Set<string>,
+  canAcceptChildren: (node: SnapshotNode) => boolean,
+  depth = 0,
+  parentId: string | null = null,
+  result: FlattenedNode[] = [],
+): FlattenedNode[] {
+  // Non-visual nodes (the code-component library and its definitions) live in
+  // the tree but never appear in the layers panel.
+  if (node.type === "library" || node.type === "codeComponent") {
+    return result;
+  }
+
+  if (node.type === "root") {
+    for (const child of node.children ?? []) {
+      flattenTree(child, expandedLayers, canAcceptChildren, depth, node.id, result);
+    }
+    return result;
+  }
+
+  const canHaveChildren =
+    nodeCanHaveChildren(node) && node.type !== "root" && canAcceptChildren(node);
+
+  result.push({
+    canHaveChildren,
+    depth,
+    id: node.id,
+    index: result.length,
+    node,
+    parentId,
+  });
+
+  const isExpanded = expandedLayers.has(node.id);
+  if (isExpanded) {
+    for (const child of node.children ?? []) {
+      flattenTree(child, expandedLayers, canAcceptChildren, depth + 1, node.id, result);
+    }
+  }
+
+  return result;
+}
+
+function removeChildrenOf(items: FlattenedNode[], ids: string[]): FlattenedNode[] {
+  const excludeParentIds = new Set(ids);
+  const result: FlattenedNode[] = [];
+
+  for (const item of items) {
+    if (excludeParentIds.has(item.id)) {
+      result.push(item);
+      continue;
+    }
+
+    let isChildOfExcluded = false;
+    let currentParentId = item.parentId;
+
+    while (currentParentId) {
+      if (excludeParentIds.has(currentParentId)) {
+        isChildOfExcluded = true;
+        break;
+      }
+      const parent = items.find((i) => i.id === currentParentId);
+      currentParentId = parent?.parentId ?? null;
+    }
+
+    if (!isChildOfExcluded) {
+      result.push(item);
+    }
+  }
+
+  return result;
+}
+
+function getProjection(
+  items: FlattenedNode[],
+  activeId: string,
+  overId: string,
+  dragOffset: number,
+  indentationWidth: number,
+  cursorY: number,
+  overItemHeight: number,
+  canAcceptChildren: (node: SnapshotNode) => boolean,
+): Projection | null {
+  const overItemIndex = items.findIndex(({ id }) => id === overId);
+  const activeItemIndex = items.findIndex(({ id }) => id === activeId);
+  const activeItem = items[activeItemIndex];
+
+  if (!activeItem) {
+    return null;
+  }
+
+  // Determine if cursor is in top or bottom half
+  const isAbove = cursorY < overItemHeight / 2;
+
+  // Calculate target index based on above/below
+  const targetIndex = isAbove ? overItemIndex : overItemIndex + 1;
+
+  // Calculate depth from horizontal drag offset
+  const dragDepth = Math.round(dragOffset / indentationWidth);
+  const projectedDepth = activeItem.depth + dragDepth;
+
+  // Get items before and after target position
+  const previousItem = targetIndex > 0 ? items[targetIndex - 1] : undefined;
+  const nextItem = targetIndex < items.length ? items[targetIndex] : undefined;
+
+  const maxDepth = getMaxDepth(previousItem);
+  const minDepth = getMinDepth(nextItem);
+
+  let depth = projectedDepth;
+  if (projectedDepth >= maxDepth) {
+    depth = maxDepth;
+  } else if (projectedDepth < minDepth) {
+    depth = minDepth;
+  }
+
+  // Find valid parent that can accept the dragged node type
+  const activeNodeType = activeItem.node.type;
+  let parentId = getParentId(previousItem, depth, items);
+
+  // Prevent dropping a node inside itself
+  if (parentId === activeId) {
+    // Try to use the parent's parent instead
+    const parentItem = items.find((item) => item.id === parentId);
+    if (parentItem) {
+      ({ parentId } = parentItem);
+      ({ depth } = parentItem);
+    } else {
+      return null;
+    }
+  }
+
+  // Validate parent-child relationship
+  if (parentId === "root") {
+    // Root can only contain screens
+    if (!canBeChildOf(activeNodeType, "root")) {
+      return null;
+    }
+  } else {
+    // Find the parent node and validate
+    const parentItem = items.find((item) => item.id === parentId);
+    if (!parentItem) {
+      return null;
+    }
+    if (
+      !(canBeChildOf(activeNodeType, parentItem.node.type) && canAcceptChildren(parentItem.node))
+    ) {
+      // Try to find a valid ancestor
+      let currentParentId = parentItem.parentId;
+      while (currentParentId) {
+        if (currentParentId === "root") {
+          if (canBeChildOf(activeNodeType, "root")) {
+            parentId = "root";
+            depth = 0;
+            break;
+          }
+          return null;
+        }
+        const ancestorItem = items.find((item) => item.id === currentParentId);
+        if (!ancestorItem) {
+          return null;
+        }
+        if (
+          canBeChildOf(activeNodeType, ancestorItem.node.type) &&
+          canAcceptChildren(ancestorItem.node)
+        ) {
+          parentId = currentParentId;
+          depth = ancestorItem.depth + 1;
+          break;
+        }
+        currentParentId = ancestorItem.parentId;
+      }
+      if (!currentParentId && parentId !== "root") {
+        return null;
+      }
+    }
+  }
+
+  return { depth, isAbove, overId, parentId };
+}
+
+function getMaxDepth(previousItem: FlattenedNode | undefined): number {
+  if (!previousItem) {
+    return 0;
+  }
+
+  // If previous item can have children, max depth is previous depth + 1
+  if (previousItem.canHaveChildren) {
+    return previousItem.depth + 1;
+  }
+
+  // Otherwise, max depth is the same as previous item
+  return previousItem.depth;
+}
+
+function getMinDepth(nextItem: FlattenedNode | undefined): number {
+  if (!nextItem) {
+    return 0;
+  }
+  return nextItem.depth;
+}
+
+function getParentId(
+  previousItem: FlattenedNode | undefined,
+  depth: number,
+  items: FlattenedNode[],
+): string | null {
+  if (!previousItem) {
+    return "root";
+  }
+
+  if (depth === previousItem.depth + 1 && previousItem.canHaveChildren) {
+    return previousItem.id;
+  }
+
+  if (depth === previousItem.depth) {
+    return previousItem.parentId;
+  }
+
+  // Find ancestor at target depth
+  let current: FlattenedNode | undefined = previousItem;
+  while (current && current.depth > depth) {
+    current = items.find((item) => item.id === current?.parentId);
+  }
+
+  return current?.parentId ?? "root";
+}
+
+function getSiblingAfter(
+  items: FlattenedNode[],
+  overId: string,
+  targetParentId: string | null,
+): string | null {
+  const overIndex = items.findIndex((i) => i.id === overId);
+
+  for (let i = overIndex + 1; i < items.length; i++) {
+    const item = items.at(i);
+    if (!item) {
+      continue;
+    }
+    if (item.parentId === targetParentId) {
+      return item.id;
+    }
+    // If we've gone past the depth level, stop
+    const targetParent = items.find((x) => x.id === targetParentId);
+    if (item.depth <= (targetParent?.depth ?? -1)) {
+      break;
+    }
+  }
+
+  return null;
+}
+
+/**
+ * Calculate the target index for a node being moved to a parent.
+ * Uses the tree structure to find the correct position.
+ */
+function getTargetIndex(
+  tree: SnapshotNode,
+  beforeSiblingId: string | null,
+  targetParentId: string,
+): number {
+  // Find the parent node in the tree
+  function findNode(node: SnapshotNode, targetId: string): SnapshotNode | null {
+    if (node.id === targetId) {
+      return node;
+    }
+    for (const child of node.children ?? []) {
+      const found = findNode(child, targetId);
+      if (found) {
+        return found;
+      }
+    }
+    return null;
+  }
+
+  const parentNode = findNode(tree, targetParentId);
+  if (!parentNode) {
+    return 0;
+  }
+
+  const children = parentNode.children ?? [];
+
+  // If no sibling specified, insert at the end
+  if (beforeSiblingId === null) {
+    return children.length;
+  }
+
+  // Find the index of the sibling
+  const siblingIndex = children.findIndex((child) => child.id === beforeSiblingId);
+  return siblingIndex !== -1 ? siblingIndex : children.length;
+}
+
+function getHighlightedNodeIds(projectedParentId: string | null, tree: SnapshotNode): Set<string> {
+  const highlightedIds = new Set<string>();
+
+  if (projectedParentId === null) {
+    return highlightedIds;
+  }
+
+  // Find the parent node in the tree
+  function findNode(node: SnapshotNode, targetId: string): SnapshotNode | null {
+    if (node.id === targetId) {
+      return node;
+    }
+    for (const child of node.children ?? []) {
+      const found = findNode(child, targetId);
+      if (found) {
+        return found;
+      }
+    }
+    return null;
+  }
+
+  // If parentId is "root", highlight entire tree
+  if (projectedParentId === "root") {
+    function collectAllIds(node: SnapshotNode): void {
+      if (node.type !== "root") {
+        highlightedIds.add(node.id);
+      }
+      for (const child of node.children ?? []) {
+        collectAllIds(child);
+      }
+    }
+    collectAllIds(tree);
+    return highlightedIds;
+  }
+
+  // Find the parent node and collect its subtree
+  const parentNode = findNode(tree, projectedParentId);
+  if (parentNode) {
+    function collectSubtreeIds(node: SnapshotNode): void {
+      highlightedIds.add(node.id);
+      for (const child of node.children ?? []) {
+        collectSubtreeIds(child);
+      }
+    }
+    collectSubtreeIds(parentNode);
+  }
+
+  return highlightedIds;
+}
+
+function isDescendantOfSelected(
+  item: FlattenedNode,
+  flattenedItems: FlattenedNode[],
+  selectedNodeIds: string[],
+): boolean {
+  if (selectedNodeIds.length === 0) {
+    return false;
+  }
+
+  let currentParentId = item.parentId;
+  while (currentParentId) {
+    if (currentParentId === "root") {
+      break;
+    }
+    if (selectedNodeIds.includes(currentParentId)) {
+      return true;
+    }
+    const parent = flattenedItems.find((i) => i.id === currentParentId);
+    if (!parent) {
+      break;
+    }
+    currentParentId = parent.parentId;
+  }
+
+  return false;
+}
+
+// ============================================================================
+// Components
+// ============================================================================
+
+const END_DROP_ZONE_ID = "__end-drop-zone__";
+
+interface SortableTreeItemProps {
+  id: string;
+  node: SnapshotNode;
+  depth: number;
+  indentationWidth: number;
+  projected: Projection | null;
+  activeId: string | null;
+  isHighlighted: boolean;
+  isHovered: boolean;
+  onMouseEnter: (id: string) => void;
+  onMouseLeave: (id: string) => void;
+  isSelected: boolean;
+  onSelect: (id: string, many: boolean) => void;
+  onUnselect: (id: string) => void;
+  onToggle: (id: string) => void;
+  isExpanded: boolean;
+  hasChildren: boolean;
+  isFirst: boolean;
+  isLast: boolean;
+  isChildOfSelected: boolean;
+  isEditing: boolean;
+  editingName: string;
+  hasWarning: boolean;
+  onStartEdit: () => void;
+  onNameChange: (name: string) => void;
+  onFinishEdit: () => void;
+  onCancelEdit: () => void;
+}
+
+function SortableTreeItem({
+  id,
+  node,
+  depth,
+  indentationWidth,
+  projected,
+  activeId,
+  isSelected,
+  isHovered,
+  onSelect,
+  onUnselect,
+  onToggle,
+  isExpanded,
+  hasChildren,
+  isLast,
+  isFirst,
+  isHighlighted,
+  isChildOfSelected,
+  isEditing,
+  editingName,
+  hasWarning,
+  onStartEdit,
+  onMouseEnter,
+  onMouseLeave,
+  onNameChange,
+  onFinishEdit,
+  onCancelEdit,
+}: SortableTreeItemProps) {
+  const { attributes, listeners, setNodeRef, isDragging } = useSortable({ id });
+  const inputRef = useRef<HTMLInputElement>(null);
+
+  const iconType = (() => {
+    if (node.type === "view") {
+      if (!hasChildren) {
+        return "view";
+      }
+      return node.data?.style?.["flexDirection"] === "column" ? "column" : "row";
+    }
+    return node.type;
+  })();
+
+  // Builtin component instances get the distinct blocks glyph, matching the
+  // add-component browser; catalog/local components keep the generic component icon.
+  const isBuiltinComponent =
+    node.type === "component" &&
+    (node.data as { componentSource?: string } | undefined)?.componentSource === "builtin";
+  const Icon = isBuiltinComponent
+    ? BUILTIN_COMPONENT_ICON
+    : NODE_TYPE_ICONS[iconType as NodeIconKey];
+  const displayName = node.data?.name ?? "Unknown";
+
+  const isActiveItem = id === activeId;
+  const isDraggingSomething = activeId !== null;
+
+  // Show drop indicator if this is the target position
+  // We show indicators even when hovering over the dragged item itself
+  const showIndicatorAbove = projected && projected.overId === id && projected.isAbove;
+  const showIndicatorBelow = projected && projected.overId === id && !projected.isAbove;
+
+  // Show indicator below if this is the last item and drop is at the end
+  const showIndicatorAtEnd = isLast && projected && projected.overId === END_DROP_ZONE_ID;
+
+  const indentStyle: React.CSSProperties = {
+    paddingLeft: `${depth * indentationWidth}px`,
+  };
+
+  // Apply opacity dimming when dragging and not highlighted
+  const opacityClass = isDraggingSomething && !isActiveItem && !isHighlighted ? "opacity-40" : "";
+
+  // Auto-focus and select input when entering edit mode
+  useEffect(() => {
+    if (isEditing && inputRef.current) {
+      inputRef.current.focus();
+      inputRef.current.select();
+    }
+  }, [isEditing]);
+
+  const handleClick = (e: React.MouseEvent) => {
+    if (isEditing) {
+      return;
+    }
+    if (isSelected && e.shiftKey) {
+      onUnselect(id);
+    } else {
+      onSelect(id, e.shiftKey);
+    }
+  };
+
+  const handleMouseEnter = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    onMouseEnter(id);
+  };
+
+  const handleMouseLeave = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    onMouseLeave(id);
+  };
+
+  const handleDoubleClick = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    onStartEdit();
+  };
+
+  const handleToggleClick = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    onToggle(id);
+  };
+
+  const handleInputKeyDown = (e: React.KeyboardEvent<HTMLInputElement>) => {
+    if (e.key === "Enter") {
+      e.preventDefault();
+      onFinishEdit();
+    } else if (e.key === "Escape") {
+      e.preventDefault();
+      onCancelEdit();
+    }
+  };
+
+  const handleInputBlur = () => {
+    onFinishEdit();
+  };
+
+  const handleInputChange = (e: React.ChangeEvent<HTMLInputElement>) => {
+    onNameChange(e.target.value);
+  };
+
+  const handleInputClick = (e: React.MouseEvent) => {
+    e.stopPropagation();
+  };
+
+  const handleInputMouseDown = (e: React.MouseEvent) => {
+    e.stopPropagation();
+  };
+
+  const handleContextMenu = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    // Auto-select node if not already selected (standard UX pattern)
+    if (!isSelected) {
+      onSelect(id, false);
+    }
+  };
+
+  return (
+    <DesignerContextMenu nodeId={id} source="layers-panel">
+      <div
+        className={cn("relative", isDragging && "opacity-40", opacityClass)}
+        data-id={id}
+        onContextMenu={handleContextMenu}
+        ref={setNodeRef}
+      >
+        {/* Drop indicator line - above */}
+        {showIndicatorAbove && (
+          <div
+            className="pointer-events-none absolute right-0 left-0 z-10 h-0.5 bg-primary"
+            style={{
+              marginLeft: `${(projected?.depth ?? depth) * indentationWidth}px`,
+              top: -1,
+            }}
+          />
+        )}
+
+        {/* biome-ignore lint/a11y/noStaticElementInteractions: dnd-kit requires a div for drag handling */}
+        {/* biome-ignore lint/a11y/useKeyWithClickEvents: dnd-kit handles keyboard interactions via attributes */}
+        <div
+          className={cn(
+            "flex h-7 items-center gap-1 rounded-sm px-1",
+            isHovered && "bg-accent/50",
+            isSelected && "bg-accent text-accent-foreground hover:bg-accent",
+            isSelected && hasChildren && isExpanded && "rounded-b-none",
+            !isLast && "rounded-b-none",
+            isChildOfSelected && !isFirst && "rounded-t-none",
+            isChildOfSelected && !isSelected && "bg-accent/40 text-accent-foreground/80",
+          )}
+          onClick={handleClick}
+          onDoubleClick={handleDoubleClick}
+          onMouseEnter={handleMouseEnter}
+          onMouseLeave={handleMouseLeave}
+          style={indentStyle}
+          {...(isEditing ? {} : { ...attributes, ...listeners })}
+        >
+          {/* Expand/Collapse Toggle */}
+          <button
+            className="flex shrink-0 items-center rounded-sm p-0.5 hover:bg-accent"
+            onClick={handleToggleClick}
+            type="button"
+          >
+            {hasChildren ? (
+              isExpanded ? (
+                <span className="flex size-3 items-center justify-center [&_svg]:size-3">
+                  <ChevronDown className="text-muted-foreground" />
+                </span>
+              ) : (
+                <span className="flex size-3 items-center justify-center [&_svg]:size-3">
+                  <ChevronRight className="text-muted-foreground" />
+                </span>
+              )
+            ) : (
+              <span className="size-3" />
+            )}
+          </button>
+
+          {/* Node Content */}
+          <div className="flex flex-1 items-center gap-1.5 overflow-hidden">
+            {Icon && (
+              <span className="flex size-3.5 shrink-0 items-center justify-center [&_svg]:size-3.5">
+                <Icon className="text-muted-foreground" />
+              </span>
+            )}
+            {isEditing ? (
+              <input
+                className="h-5 w-full min-w-0 rounded border border-primary bg-background px-1 font-medium text-xs outline-none"
+                onBlur={handleInputBlur}
+                onChange={handleInputChange}
+                onClick={handleInputClick}
+                onKeyDown={handleInputKeyDown}
+                onMouseDown={handleInputMouseDown}
+                ref={inputRef}
+                type="text"
+                value={editingName}
+              />
+            ) : (
+              <span className="truncate font-medium text-xs select-none">{displayName}</span>
+            )}
+            {hasWarning && !isEditing && (
+              <span
+                className="ml-auto flex size-3.5 shrink-0 items-center justify-center [&_svg]:size-3"
+                title="This component has validation warnings"
+              >
+                <TriangleAlertIcon className="text-amber-500" />
+              </span>
+            )}
+          </div>
+        </div>
+
+        {/* Drop indicator line - below */}
+        {showIndicatorBelow && (
+          <div
+            className="pointer-events-none absolute right-0 left-0 z-10 h-0.5 bg-primary"
+            style={{
+              bottom: -1,
+              marginLeft: `${(projected?.depth ?? depth) * indentationWidth}px`,
+            }}
+          />
+        )}
+
+        {/* Drop indicator line - at end */}
+        {showIndicatorAtEnd && (
+          <div
+            className="pointer-events-none absolute right-0 left-0 z-10 h-0.5 bg-primary"
+            style={{
+              bottom: -1,
+              marginLeft: `${(projected?.depth ?? 0) * indentationWidth}px`,
+            }}
+          />
+        )}
+      </div>
+    </DesignerContextMenu>
+  );
+}
+
+// ============================================================================
+// Expanded Layers Logic
+// ============================================================================
+
+const getExpandedLayersBySelectedNodes = (
+  tree: SnapshotNode,
+  selectedNodeIds: string[],
+): Set<string> => {
+  const reduceExpandedNodeIdsToSet = (node: SnapshotNode, selectedIds: string[]): Set<string> => {
+    const children = node.children ?? [];
+    if (children.length === 0) {
+      if (selectedIds.includes(node.id)) {
+        return new Set([node.id]);
+      }
+      return new Set([]);
+    }
+
+    const childrenExpandedIds = children.flatMap((child) => [
+      ...reduceExpandedNodeIdsToSet(child, selectedIds),
+    ]);
+
+    return new Set([...childrenExpandedIds, ...(childrenExpandedIds.length > 0 ? [node.id] : [])]);
+  };
+
+  return tree ? reduceExpandedNodeIdsToSet(tree, selectedNodeIds) : new Set([]);
+};
+
+// ============================================================================
+// Main Component
+// ============================================================================
+
+export function LayersSection() {
+  const store = usePaywallDesignerStore();
+  const selectedNodeIds = useStore(
+    store,
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self)),
+  );
+  const highlightedNodeId = useStore(
+    store,
+    useShallow((state) => state.highlightedNodeId ?? null),
+  );
+  const previewSelectedNodeIds = useStore(
+    store,
+    useShallow((state) => state.dragSelect.previewSelectedNodeIds ?? []),
+  );
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const componentCatalogByHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const dispatch = usePaywallDesignerActions();
+
+  const canAcceptChildren = useCallback(
+    (node: SnapshotNode) => nodePassesSlotGate(node, componentCatalogByHash),
+    [componentCatalogByHash],
+  );
+
+  // Combine confirmed and preview selections for display
+  const allSelectedNodeIds = useMemo(
+    () => [...new Set([...selectedNodeIds, ...previewSelectedNodeIds])],
+    [selectedNodeIds, previewSelectedNodeIds],
+  );
+
+  const [activeId, setActiveId] = useState<string | null>(null);
+  const [overId, setOverId] = useState<string | null>(null);
+  const [offsetLeft, setOffsetLeft] = useState(0);
+  const [cursorY, setCursorY] = useState(0);
+  const [overItemHeight, setOverItemHeight] = useState(28); // Default height (h-7 = 28px)
+  const [hoverExpandTimer, setHoverExpandTimer] = useState<{
+    nodeId: string;
+    timeoutId: ReturnType<typeof setTimeout>;
+  } | null>(null);
+  const [expandedLayers, setExpandedLayers] = useState<Set<string>>(new Set([]));
+  const mouseYRef = useRef<number>(0);
+  const lastValidProjectionRef = useRef<Projection | null>(null);
+  const lastValidOverIdRef = useRef<string | null>(null);
+  const overIdRef = useRef<string | null>(null);
+  const cursorYRef = useRef<number>(0);
+  const overItemHeightRef = useRef<number>(28);
+  const lastIsAboveRef = useRef<boolean>(true);
+
+  // Editing state
+  const [editingNodeId, setEditingNodeId] = useState<string | null>(null);
+  const [editingName, setEditingName] = useState("");
+  const originalNameRef = useRef<string>("");
+
+  // Keep ref in sync with state
+  useEffect(() => {
+    overIdRef.current = overId;
+  }, [overId]);
+
+  // Track mouse position during drag
+  useEffect(() => {
+    if (!activeId) {
+      return;
+    }
+
+    const handleMouseMove = (e: MouseEvent) => {
+      mouseYRef.current = e.clientY;
+
+      // Update cursor Y relative to the hovered item
+      const currentOverId = overIdRef.current;
+      if (currentOverId && currentOverId !== END_DROP_ZONE_ID) {
+        const overElement = document.querySelector(`[data-id="${currentOverId}"]`) as HTMLElement;
+        if (overElement) {
+          const rect = overElement.getBoundingClientRect();
+          const relativeY = e.clientY - rect.top;
+          cursorYRef.current = relativeY;
+          overItemHeightRef.current = rect.height;
+
+          // Only update state if isAbove changed to minimize re-renders
+          const newIsAbove = relativeY < rect.height / 2;
+          if (newIsAbove !== lastIsAboveRef.current) {
+            lastIsAboveRef.current = newIsAbove;
+            setCursorY(relativeY);
+            setOverItemHeight(rect.height);
+          }
+        }
+      }
+    };
+
+    document.addEventListener("mousemove", handleMouseMove);
+    return () => document.removeEventListener("mousemove", handleMouseMove);
+  }, [activeId]);
+
+  // The document root is already a tree structure from mimic
+  const tree: SnapshotNode = documentRoot;
+
+  // Expanded layers by selected nodes (includes preview selections)
+  const expandedLayersBySelectedNodes = useMemo(
+    () => (tree ? getExpandedLayersBySelectedNodes(tree, allSelectedNodeIds) : new Set<string>([])),
+    [tree, allSelectedNodeIds],
+  );
+
+  // Sync expanded layers with selected nodes
+  useEffect(() => {
+    const newExpandedLayers = new Set<string>(expandedLayers);
+    let hasChanges = false;
+
+    for (const nodeId of expandedLayersBySelectedNodes) {
+      if (!newExpandedLayers.has(nodeId)) {
+        newExpandedLayers.add(nodeId);
+        hasChanges = true;
+      }
+    }
+
+    if (hasChanges) {
+      setExpandedLayers(newExpandedLayers);
+    }
+  }, [expandedLayersBySelectedNodes, expandedLayers]);
+
+  const allExpandedLayers = useMemo(
+    () => new Set([...expandedLayers, ...expandedLayersBySelectedNodes]),
+    [expandedLayers, expandedLayersBySelectedNodes],
+  );
+
+  // Flatten tree with expanded state
+  const flattenedItems = useMemo(() => {
+    if (!tree) {
+      return [];
+    }
+
+    const flattened = flattenTree(tree, allExpandedLayers, canAcceptChildren);
+
+    // When dragging, remove children of the dragged item from the list
+    if (activeId) {
+      return removeChildrenOf(flattened, [activeId]);
+    }
+
+    return flattened;
+  }, [tree, allExpandedLayers, activeId, canAcceptChildren]);
+
+  // Projection for indicator
+  const projectedRaw = useMemo(() => {
+    if (!activeId) {
+      lastValidProjectionRef.current = null;
+      return null;
+    }
+    if (!overId) {
+      // Return last valid projection to prevent flickering
+      return lastValidProjectionRef.current;
+    }
+    // Handle end drop zone - calculate depth based on last item and drag offset
+    if (overId === END_DROP_ZONE_ID) {
+      const activeItem = flattenedItems.find((item) => item.id === activeId);
+      if (!activeItem) {
+        return null;
+      }
+
+      // Get the last item to calculate depth
+      const lastItem = flattenedItems.at(-1);
+      const dragDepth = Math.round(offsetLeft / INDENTATION_WIDTH);
+      const projectedDepth = activeItem.depth + dragDepth;
+
+      // Calculate max depth based on last item
+      const maxDepth = lastItem
+        ? lastItem.canHaveChildren
+          ? lastItem.depth + 1
+          : lastItem.depth
+        : 0;
+      const minDepth = 0;
+
+      let depth = Math.max(minDepth, Math.min(maxDepth, projectedDepth));
+
+      // Find valid parent at this depth
+      let parentId: string | null = "root";
+      if (lastItem && depth > 0) {
+        // Walk up from last item to find parent at target depth
+        let current: FlattenedNode | undefined = lastItem;
+        while (current && current.depth >= depth) {
+          if (current.depth === depth - 1 && current.canHaveChildren) {
+            parentId = current.id;
+            break;
+          }
+          current = flattenedItems.find((item) => item.id === current?.parentId);
+        }
+        if (!current && depth > 0) {
+          parentId = lastItem.canHaveChildren ? lastItem.id : lastItem.parentId;
+          depth = lastItem.canHaveChildren ? lastItem.depth + 1 : lastItem.depth;
+        }
+      }
+
+      // Validate parent-child relationship (catalog rules + component slot gate)
+      const parentItem =
+        parentId === "root" ? null : flattenedItems.find((item) => item.id === parentId);
+      const parentType = parentId === "root" ? "root" : (parentItem?.node.type ?? "root");
+      if (!canBeChildOf(activeItem.node.type, parentType)) {
+        return null;
+      }
+      if (parentItem && !canAcceptChildren(parentItem.node)) {
+        return null;
+      }
+
+      return {
+        depth,
+        isAbove: false,
+        overId: END_DROP_ZONE_ID,
+        parentId,
+      };
+    }
+    return getProjection(
+      flattenedItems,
+      activeId,
+      overId,
+      offsetLeft,
+      INDENTATION_WIDTH,
+      cursorY,
+      overItemHeight,
+      canAcceptChildren,
+    );
+  }, [activeId, overId, offsetLeft, flattenedItems, cursorY, overItemHeight, canAcceptChildren]);
+
+  // Use raw projection or fall back to last valid to prevent flickering
+  const projected = useMemo(() => {
+    if (projectedRaw) {
+      lastValidProjectionRef.current = projectedRaw;
+      return projectedRaw;
+    }
+    // When no valid projection, use last valid one to prevent flickering
+    return activeId ? lastValidProjectionRef.current : null;
+  }, [projectedRaw, activeId]);
+
+  // Calculate highlighted node IDs
+  const highlightedIds = useMemo(() => {
+    // Always include the active item when dragging
+    const ids = new Set<string>();
+    if (activeId) {
+      ids.add(activeId);
+    }
+
+    if (!(projected && tree)) {
+      // When no valid projection, highlight everything to avoid full dimming
+      if (activeId && tree) {
+        return getHighlightedNodeIds("root", tree);
+      }
+      return ids;
+    }
+
+    // Add the projected parent's subtree
+    const subtreeIds = getHighlightedNodeIds(projected.parentId, tree);
+    for (const id of subtreeIds) {
+      ids.add(id);
+    }
+    return ids;
+  }, [projected, tree, activeId]);
+
+  const sortedIds = useMemo(
+    () => [...flattenedItems.map(({ id }) => id), END_DROP_ZONE_ID],
+    [flattenedItems],
+  );
+
+  const sensors = useSensors(
+    useSensor(PointerSensor, {
+      activationConstraint: { distance: 5 },
+    }),
+  );
+
+  // Handlers
+  const toggleLayer = useCallback((id: string) => {
+    setExpandedLayers((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) {
+        next.delete(id);
+      } else {
+        next.add(id);
+      }
+      return next;
+    });
+  }, []);
+
+  const handleSelect = useCallback(
+    (id: string, many: boolean) => {
+      dispatch(selectNode)({ id, many });
+    },
+    [dispatch],
+  );
+
+  const handleUnselect = useCallback(
+    (id: string) => {
+      dispatch(unselectNode)({ id });
+    },
+    [dispatch],
+  );
+
+  const handleStartEdit = useCallback((id: string, currentName: string) => {
+    setEditingNodeId(id);
+    setEditingName(currentName);
+    originalNameRef.current = currentName;
+  }, []);
+
+  const handleNameChange = useCallback((name: string) => {
+    setEditingName(name);
+  }, []);
+
+  const handleFinishEdit = useCallback(() => {
+    if (!editingNodeId) {
+      return;
+    }
+
+    const trimmedName = editingName.trim();
+    // Only update if name changed and is not empty
+    if (trimmedName && trimmedName !== originalNameRef.current) {
+      const editingNode = flattenedItems.find((item) => item.id === editingNodeId);
+      if (editingNode) {
+        const nodeType = editingNode.node.type;
+        if (nodeType === "view") {
+          dispatch(updateViewNode)({
+            id: editingNodeId,
+            updates: { name: trimmedName },
+          });
+        } else if (nodeType === "text") {
+          dispatch(updateTextNode)({
+            id: editingNodeId,
+            updates: { name: trimmedName },
+          });
+        } else if (nodeType === "screen") {
+          dispatch(updateScreenNode)({
+            id: editingNodeId,
+            updates: { name: trimmedName },
+          });
+        } else if (nodeType === "shape") {
+          dispatch(updateShapeNode)({
+            id: editingNodeId,
+            updates: { name: trimmedName },
+          });
+        } else if (nodeType === "path") {
+          dispatch(updatePathNode)({
+            id: editingNodeId,
+            updates: { name: trimmedName },
+          });
+        } else if (nodeType === "component") {
+          dispatch(updateComponentNode)({
+            id: editingNodeId,
+            updates: { name: trimmedName },
+          });
+        }
+      }
+    }
+
+    setEditingNodeId(null);
+    setEditingName("");
+    originalNameRef.current = "";
+  }, [editingNodeId, editingName, flattenedItems, dispatch]);
+
+  const handleCancelEdit = useCallback(() => {
+    setEditingNodeId(null);
+    setEditingName("");
+    originalNameRef.current = "";
+  }, []);
+
+  const handleDragStart = useCallback(({ active }: DragStartEvent) => {
+    setActiveId(active.id as string);
+    setOverId(active.id as string);
+    setCursorY(0);
+  }, []);
+
+  const handleDragMove = useCallback(({ delta }: DragMoveEvent) => {
+    setOffsetLeft(delta.x);
+  }, []);
+
+  const handleDragOver = useCallback(
+    ({ over }: DragOverEvent) => {
+      const rawOverId = over?.id as string | null;
+      // Use last valid overId if current is null to prevent flickering in gaps
+      const newOverId = rawOverId ?? lastValidOverIdRef.current;
+      if (rawOverId) {
+        lastValidOverIdRef.current = rawOverId;
+      }
+
+      // When over item changes, update cursor position immediately
+      if (newOverId && newOverId !== overIdRef.current && newOverId !== END_DROP_ZONE_ID) {
+        const overElement = document.querySelector(`[data-id="${newOverId}"]`) as HTMLElement;
+        if (overElement) {
+          const rect = overElement.getBoundingClientRect();
+          const relativeY = mouseYRef.current - rect.top;
+          cursorYRef.current = relativeY;
+          overItemHeightRef.current = rect.height;
+          lastIsAboveRef.current = relativeY < rect.height / 2;
+          setCursorY(relativeY);
+          setOverItemHeight(rect.height);
+        }
+      }
+
+      setOverId(newOverId);
+
+      // Handle auto-expand for collapsed items
+      if (newOverId && newOverId !== END_DROP_ZONE_ID && activeId) {
+        const overItem = flattenedItems.find((item) => item.id === newOverId);
+        if (
+          overItem?.canHaveChildren &&
+          (overItem.node.children?.length ?? 0) > 0 &&
+          !allExpandedLayers.has(newOverId)
+        ) {
+          // Check if we're already tracking this item
+          if (hoverExpandTimer?.nodeId !== newOverId) {
+            // Clear existing timer
+            if (hoverExpandTimer) {
+              clearTimeout(hoverExpandTimer.timeoutId);
+            }
+            // Start new timer
+            const timeoutId = setTimeout(() => {
+              toggleLayer(newOverId);
+              setHoverExpandTimer(null);
+            }, 3000);
+            setHoverExpandTimer({ nodeId: newOverId, timeoutId });
+          }
+        }
+        // Clear timer if not over a collapsed item
+        else if (hoverExpandTimer) {
+          clearTimeout(hoverExpandTimer.timeoutId);
+          setHoverExpandTimer(null);
+        }
+      }
+      // Clear timer if not over a valid item
+      else if (hoverExpandTimer) {
+        clearTimeout(hoverExpandTimer.timeoutId);
+        setHoverExpandTimer(null);
+      }
+    },
+    [activeId, flattenedItems, allExpandedLayers, hoverExpandTimer, toggleLayer],
+  );
+
+  const resetState = useCallback(() => {
+    setActiveId(null);
+    setOverId(null);
+    setOffsetLeft(0);
+    setCursorY(0);
+    setOverItemHeight(28);
+    lastValidOverIdRef.current = null;
+    lastValidProjectionRef.current = null;
+    overIdRef.current = null;
+    cursorYRef.current = 0;
+    overItemHeightRef.current = 28;
+    lastIsAboveRef.current = true;
+    if (hoverExpandTimer) {
+      clearTimeout(hoverExpandTimer.timeoutId);
+      setHoverExpandTimer(null);
+    }
+  }, [hoverExpandTimer]);
+
+  const handleDragEnd = useCallback(
+    ({ active, over }: DragEndEvent) => {
+      resetState();
+
+      if (!projected) {
+        return;
+      }
+      if (!over) {
+        return;
+      }
+      if (!tree) {
+        return;
+      }
+
+      const { parentId, isAbove } = projected;
+      const newParentId = parentId ?? "root";
+
+      // Handle end drop zone - place at end of parent
+      if (over.id === END_DROP_ZONE_ID) {
+        const toIndex = getTargetIndex(tree, null, newParentId);
+        dispatch(moveNode)({
+          newParentId,
+          nodeId: active.id as string,
+          toIndex,
+        });
+        return;
+      }
+
+      // Find the sibling to insert before based on isAbove
+      let beforeSiblingId: string | null = null;
+      if (isAbove) {
+        // Insert before the over item
+        const overItem = flattenedItems.find((item) => item.id === over.id);
+        if (overItem && overItem.parentId === newParentId) {
+          beforeSiblingId = overItem.id;
+        }
+      } else {
+        // Insert after the over item - find next sibling
+        beforeSiblingId = getSiblingAfter(flattenedItems, over.id as string, newParentId);
+      }
+
+      const toIndex = getTargetIndex(tree, beforeSiblingId, newParentId);
+      dispatch(moveNode)({
+        newParentId,
+        nodeId: active.id as string,
+        toIndex,
+      });
+    },
+    [dispatch, flattenedItems, projected, resetState, tree],
+  );
+
+  const handleDragCancel = useCallback(() => {
+    resetState();
+  }, [resetState]);
+
+  return (
+    <DndContext
+      collisionDetection={closestCenter}
+      measuring={measuring}
+      onDragCancel={handleDragCancel}
+      onDragEnd={handleDragEnd}
+      onDragMove={handleDragMove}
+      onDragOver={handleDragOver}
+      onDragStart={handleDragStart}
+      sensors={sensors}
+    >
+      <SortableContext items={sortedIds} strategy={verticalListSortingStrategy}>
+        <div>
+          {flattenedItems.length > 0 ? (
+            flattenedItems.map((item, index) => (
+              <SortableTreeItemWrapper
+                activeId={activeId}
+                allExpandedLayers={allExpandedLayers}
+                allSelectedNodeIds={allSelectedNodeIds}
+                editingName={editingName}
+                editingNodeId={editingNodeId}
+                flattenedItems={flattenedItems}
+                highlightedIds={highlightedIds}
+                indentationWidth={INDENTATION_WIDTH}
+                isFirst={index === 0}
+                isLast={index === flattenedItems.length - 1}
+                item={item}
+                key={item.id}
+                onCancelEdit={handleCancelEdit}
+                onFinishEdit={handleFinishEdit}
+                onNameChange={handleNameChange}
+                onSelect={handleSelect}
+                onStartEdit={handleStartEdit}
+                onToggle={toggleLayer}
+                onUnselect={handleUnselect}
+                projected={projected}
+              />
+            ))
+          ) : (
+            <div className="px-4 py-2 font-medium text-muted-foreground text-xs">No layers yet</div>
+          )}
+          {/* End drop zone indicator */}
+          {projected && projected.overId === END_DROP_ZONE_ID && flattenedItems.length > 0 && (
+            <div
+              className="pointer-events-none relative h-0.5 bg-primary"
+              style={{
+                marginLeft: `${projected.depth * INDENTATION_WIDTH}px`,
+              }}
+            />
+          )}
+        </div>
+      </SortableContext>
+    </DndContext>
+  );
+}
+
+// Wrapper to handle selection state subscription
+interface SortableTreeItemWrapperProps {
+  item: FlattenedNode;
+  indentationWidth: number;
+  projected: Projection | null;
+  activeId: string | null;
+  onSelect: (id: string, many: boolean) => void;
+  onUnselect: (id: string) => void;
+  onToggle: (id: string) => void;
+  allExpandedLayers: Set<string>;
+  isFirst: boolean;
+  isLast: boolean;
+  highlightedIds: Set<string>;
+  flattenedItems: FlattenedNode[];
+  allSelectedNodeIds: string[];
+  editingNodeId: string | null;
+  editingName: string;
+  onStartEdit: (id: string, currentName: string) => void;
+  onNameChange: (name: string) => void;
+  onFinishEdit: () => void;
+  onCancelEdit: () => void;
+}
+
+function SortableTreeItemWrapper({
+  item,
+  indentationWidth,
+  projected,
+  activeId,
+  onSelect,
+  onUnselect,
+  onToggle,
+  allExpandedLayers,
+  isFirst,
+  isLast,
+  highlightedIds,
+  flattenedItems,
+
+  allSelectedNodeIds,
+  editingNodeId,
+  editingName,
+  onStartEdit,
+  onNameChange,
+  onFinishEdit,
+  onCancelEdit,
+}: SortableTreeItemWrapperProps) {
+  // Check if selected (either confirmed or preview selection)
+  const isSelected = allSelectedNodeIds.includes(item.id);
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const hoveredNodeId = useStore(
+    store,
+    useShallow((state) => state.highlightedNodeId ?? null),
+  );
+  const warnings = useComponentNodeWarnings(item.id);
+  const hasWarning = warnings.some((warning) => warning.severity === "warning");
+
+  const isHighlighted = highlightedIds.has(item.id);
+  const isChildOfSelected = isDescendantOfSelected(item, flattenedItems, allSelectedNodeIds);
+  const isEditing = editingNodeId === item.id;
+
+  const handleStartEdit = useCallback(() => {
+    onStartEdit(item.id, item.node.data?.name ?? "");
+  }, [item.id, item.node.data?.name, onStartEdit]);
+
+  const handleMouseEnter = () => {
+    dispatch(setHighlightedNode)({ id: item.id });
+  };
+
+  const handleMouseLeave = () => {
+    dispatch(setHighlightedNode)({ id: null });
+  };
+
+  return (
+    <SortableTreeItem
+      activeId={activeId}
+      depth={item.depth}
+      editingName={editingName}
+      hasChildren={(item.node.children?.length ?? 0) > 0}
+      hasWarning={hasWarning}
+      id={item.id}
+      indentationWidth={indentationWidth}
+      onMouseEnter={handleMouseEnter}
+      onMouseLeave={handleMouseLeave}
+      isChildOfSelected={isChildOfSelected}
+      isEditing={isEditing}
+      isExpanded={allExpandedLayers.has(item.id)}
+      isFirst={isFirst}
+      isHovered={hoveredNodeId === item.id}
+      isHighlighted={isHighlighted}
+      isLast={isLast}
+      isSelected={isSelected}
+      node={item.node}
+      onCancelEdit={onCancelEdit}
+      onFinishEdit={onFinishEdit}
+      onNameChange={onNameChange}
+      onSelect={onSelect}
+      onStartEdit={handleStartEdit}
+      onToggle={onToggle}
+      onUnselect={onUnselect}
+      projected={projected}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/locale-switcher.tsx b/apps/www/src/features/studio/paywalls/designer/panels/locale-switcher.tsx
new file mode 100644
index 000000000..157a64a39
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/locale-switcher.tsx
@@ -0,0 +1,222 @@
+"use client";
+
+import { canonicalizeLocaleTag } from "@voidhash/mimic-schema";
+import {
+  Badge,
+  Button,
+  Input,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  Separator,
+} from "@voidhash/ui";
+import { CheckIcon, GlobeIcon, LanguagesIcon, PlusIcon, XIcon } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { useGetLocalizableProps } from "../hooks/use-localizable-props";
+import { addLocale, removeLocale, setActiveLocale, setMode } from "../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import { selectDocumentRoot } from "../state/utils/document-root";
+import {
+  computeLocaleCoverage,
+  type LocaleCoverage,
+  readLocalizationInfo,
+} from "../state/utils/localization";
+import { COMMON_LOCALES, localeLabel } from "../utils/locale-display";
+
+function coverageLabel(coverage: LocaleCoverage): string {
+  return `${coverage.translated}/${coverage.total}`;
+}
+
+/**
+ * Action-bar locale switcher (design + preview). Always visible for
+ * discoverability: it lists the default locale, every enabled locale with its
+ * text/image coverage, an "Add locale…" affordance and an entry into the
+ * full-screen Translation mode. Selecting a locale sets the browser-local
+ * `activeLocale` (null for the default) — a view-time override that changes
+ * what the canvas renders and where inline edits land.
+ */
+export function LocaleSwitcher() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const [open, setOpen] = useState(false);
+  const [draftTag, setDraftTag] = useState("");
+
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const getLocalizableProps = useGetLocalizableProps();
+
+  const info = useMemo(() => readLocalizationInfo(documentRoot), [documentRoot]);
+  const coverage = useMemo(() => {
+    const byLocale = new Map<string, LocaleCoverage>();
+    for (const tag of info.locales) {
+      byLocale.set(
+        tag,
+        computeLocaleCoverage(documentRoot, tag, info.defaultLocale, getLocalizableProps),
+      );
+    }
+    return byLocale;
+  }, [documentRoot, info, getLocalizableProps]);
+
+  const enabledSet = useMemo(
+    () => new Set([info.defaultLocale, ...info.locales]),
+    [info],
+  );
+  const suggestions = useMemo(
+    () => COMMON_LOCALES.filter((tag) => !enabledSet.has(tag)),
+    [enabledSet],
+  );
+
+  const canonicalDraft = draftTag.trim() === "" ? null : canonicalizeLocaleTag(draftTag.trim());
+  const draftIsAddable =
+    canonicalDraft !== null &&
+    canonicalDraft !== info.defaultLocale &&
+    !info.locales.includes(canonicalDraft);
+
+  const selectLocale = (locale: string | null) => {
+    dispatch(setActiveLocale)({ locale });
+    setOpen(false);
+  };
+
+  const handleAdd = (tag: string) => {
+    const canonical = canonicalizeLocaleTag(tag.trim());
+    if (canonical === null || canonical === info.defaultLocale || info.locales.includes(canonical)) {
+      return;
+    }
+    dispatch(addLocale)({ tag: canonical });
+    dispatch(setActiveLocale)({ locale: canonical });
+    setDraftTag("");
+    setOpen(false);
+  };
+
+  const handleRemove = (tag: string) => {
+    dispatch(removeLocale)({ tag });
+    if (activeLocale === tag) {
+      dispatch(setActiveLocale)({ locale: null });
+    }
+  };
+
+  const openTranslationMode = () => {
+    dispatch(setMode)({ mode: "translation" });
+    setOpen(false);
+  };
+
+  const currentTag = activeLocale ?? info.defaultLocale;
+
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <PopoverTrigger asChild>
+        <Button
+          aria-label="Switch locale"
+          className="gap-1.5 text-muted-foreground hover:text-foreground"
+          size="sm"
+          title="Switch locale"
+          variant="outline"
+        >
+          <GlobeIcon />
+          <span className="max-w-24 truncate">{localeLabel(currentTag)}</span>
+          {activeLocale === null && (
+            <Badge className="px-1 py-0 text-[10px]" variant="secondary">
+              Default
+            </Badge>
+          )}
+        </Button>
+      </PopoverTrigger>
+      <PopoverContent align="center" className="w-64 p-1" side="top">
+        <div className="flex flex-col">
+          <button
+            className="flex items-center gap-2 rounded-sm px-2 py-1.5 text-left text-sm hover:bg-accent"
+            onClick={() => selectLocale(null)}
+            type="button"
+          >
+            <span className="flex h-4 w-4 items-center justify-center">
+              {activeLocale === null && <CheckIcon className="size-3.5" />}
+            </span>
+            <span className="flex-1 truncate">{localeLabel(info.defaultLocale)}</span>
+            <Badge className="px-1 py-0 text-[10px]" variant="secondary">
+              Default
+            </Badge>
+          </button>
+          {info.locales.map((tag) => (
+            <div className="flex items-center" key={tag}>
+              <button
+                className="flex flex-1 items-center gap-2 rounded-sm px-2 py-1.5 text-left text-sm hover:bg-accent"
+                onClick={() => selectLocale(tag)}
+                type="button"
+              >
+                <span className="flex h-4 w-4 items-center justify-center">
+                  {activeLocale === tag && <CheckIcon className="size-3.5" />}
+                </span>
+                <span className="flex-1 truncate">{localeLabel(tag)}</span>
+                <span className="shrink-0 text-muted-foreground text-xs">
+                  {coverageLabel(coverage.get(tag) ?? { translated: 0, total: 0 })}
+                </span>
+              </button>
+              <Button
+                aria-label={`Remove ${localeLabel(tag)}`}
+                className="size-7 shrink-0 text-muted-foreground hover:text-foreground"
+                onClick={() => handleRemove(tag)}
+                size="icon-sm"
+                title="Remove locale"
+                variant="ghost"
+              >
+                <XIcon />
+              </Button>
+            </div>
+          ))}
+          <Separator className="my-1" />
+          <button
+            className="flex items-center gap-2 rounded-sm px-2 py-1.5 text-left text-sm hover:bg-accent"
+            onClick={openTranslationMode}
+            type="button"
+          >
+            <span className="flex h-4 w-4 items-center justify-center">
+              <LanguagesIcon className="size-3.5" />
+            </span>
+            <span className="flex-1 truncate">Open Translation mode</span>
+          </button>
+          <Separator className="my-1" />
+          <div className="flex items-center gap-1 px-1 py-1">
+            <Input
+              className="h-7 text-sm"
+              onChange={(event) => setDraftTag(event.target.value)}
+              onKeyDown={(event) => {
+                if (event.key === "Enter" && draftIsAddable) {
+                  event.preventDefault();
+                  handleAdd(draftTag);
+                }
+              }}
+              placeholder="Add locale… (e.g. de, pt-BR)"
+              value={draftTag}
+            />
+            <Button
+              aria-label="Add locale"
+              disabled={!draftIsAddable}
+              onClick={() => handleAdd(draftTag)}
+              size="icon-sm"
+              title="Add locale"
+              variant="outline"
+            >
+              <PlusIcon />
+            </Button>
+          </div>
+          {suggestions.length > 0 && (
+            <div className="flex flex-wrap gap-1 px-1 pt-1 pb-1">
+              {suggestions.slice(0, 8).map((tag) => (
+                <button
+                  className="rounded-full border border-border px-2 py-0.5 text-muted-foreground text-xs hover:bg-accent hover:text-foreground"
+                  key={tag}
+                  onClick={() => handleAdd(tag)}
+                  type="button"
+                >
+                  {localeLabel(tag)}
+                </button>
+              ))}
+            </div>
+          )}
+        </div>
+      </PopoverContent>
+    </Popover>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/node-type-icons.ts b/apps/www/src/features/studio/paywalls/designer/panels/node-type-icons.ts
new file mode 100644
index 000000000..2b1050fdc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/node-type-icons.ts
@@ -0,0 +1,55 @@
+import {
+  BlocksIcon,
+  Columns2Icon,
+  ComponentIcon,
+  GalleryVerticalIcon,
+  type LucideIcon,
+  PentagonIcon,
+  Rows2Icon,
+  Smartphone,
+  SplineIcon,
+  SquareDashedIcon,
+  TypeIcon,
+} from "lucide-react";
+
+/**
+ * Icon keys shared by the layers tree and the add-component browser. Most map
+ * 1:1 to a node type; `column`/`row` are the two visual variants the layers
+ * tree derives for a `view` from its flex direction.
+ */
+export type NodeIconKey =
+  | "column"
+  | "component"
+  | "path"
+  | "root"
+  | "row"
+  | "screen"
+  | "scrollView"
+  | "shape"
+  | "text"
+  | "view";
+
+/**
+ * Shared node-type → icon map: the single source for the layers tree glyphs
+ * and the Primitives group of the add-component browser. `root` carries no
+ * glyph.
+ */
+export const NODE_TYPE_ICONS: Record<NodeIconKey, LucideIcon | null> = {
+  column: Rows2Icon,
+  component: ComponentIcon,
+  path: SplineIcon,
+  root: null,
+  row: Columns2Icon,
+  screen: Smartphone,
+  scrollView: GalleryVerticalIcon,
+  shape: PentagonIcon,
+  text: TypeIcon,
+  view: SquareDashedIcon,
+};
+
+/**
+ * Icon for built-in component browser entries. Builtin definitions carry no
+ * icon field, so the browser uses one shared default that reads distinctly
+ * from the catalog/local component glyph.
+ */
+export const BUILTIN_COMPONENT_ICON: LucideIcon = BlocksIcon;
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx
new file mode 100644
index 000000000..8004f2d1b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx
@@ -0,0 +1,75 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { cn, ScrollArea } from "@voidhash/ui";
+import { useRef } from "react";
+import { useStore } from "zustand/react";
+
+import { Panel } from "@/features/studio/paywalls/designer/components/ui/panel";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+import { getNodeById } from "../state/utils/nodes";
+import { selectedNodeIdsFromPresence } from "../state/utils/presence";
+import { PANEL_DIMENSIONS } from "./constants";
+import { PanelStack } from "./right-panel/panel-stack";
+
+/**
+ * Shallow-compare two arrays by reference equality of elements.
+ */
+function shallowArrayEqual<T>(a: T[], b: T[]): boolean {
+  if (a.length !== b.length) return false;
+  for (let i = 0; i < a.length; i++) {
+    if (a[i] !== b[i]) return false;
+  }
+  return true;
+}
+
+function useSelectedNodes(): SnapshotNode[] {
+  const store = usePaywallDesignerStore();
+  const prevRef = useRef<SnapshotNode[]>([]);
+
+  return useStore(store, (state) => {
+    const ids = selectedNodeIdsFromPresence(state.mimic.presence?.self);
+    const result: SnapshotNode[] = [];
+    for (const id of ids) {
+      const node = getNodeById(state, id);
+      if (node) result.push(node);
+    }
+    if (shallowArrayEqual(prevRef.current, result)) {
+      return prevRef.current;
+    }
+    prevRef.current = result;
+    return result;
+  });
+}
+
+export function RightPanel() {
+  const store = usePaywallDesignerStore();
+  const isPreviewMode = useStore(store, (state) => state.mode === "preview");
+  const nodes = useSelectedNodes();
+
+  return (
+    <div
+      className={cn(
+        "fixed right-0 bottom-0 z-40 flex flex-col border-border border-l bg-panel",
+        "transition-transform duration-300 ease-in-out",
+        isPreviewMode && "translate-x-full",
+      )}
+      style={{
+        top: PANEL_DIMENSIONS.TOP_HEIGHT,
+        width: PANEL_DIMENSIONS.RIGHT_WIDTH,
+      }}
+    >
+      <Panel className="relative overflow-hidden">
+        <div className="absolute inset-0">
+          <ScrollArea className="h-full">
+            <div>
+              {nodes.length === 0 && <div />}
+              {nodes.length > 0 && <PanelStack nodes={nodes} />}
+            </div>
+          </ScrollArea>
+        </div>
+      </Panel>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.test.tsx
new file mode 100644
index 000000000..710562f72
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.test.tsx
@@ -0,0 +1,109 @@
+// @vitest-environment jsdom
+
+import { Panel, type PanelContext, type PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { act, cleanup, render, screen } from "@testing-library/react";
+import type { ReactNode } from "react";
+import { create } from "zustand";
+import { useStore } from "zustand/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+import { PanelTreeView } from "../../panel-runtime/host-renderer";
+import { createInProcessTransport } from "../../panel-runtime/in-process-transport";
+import {
+  PaywallStoreContext,
+  usePaywallDesignerStore,
+  type PaywallDesignerStoreType,
+} from "../../state/designer-store";
+
+afterEach(() => cleanup());
+
+const EMPTY_INPUTS: PanelSessionInputs = {
+  props: {},
+  selection: { count: 1 },
+  data: { products: [], variables: {} },
+};
+
+interface CounterState {
+  count: number;
+  increment: () => void;
+}
+
+/**
+ * A definition that reads the designer store via the SAME hook pattern sections
+ * use — `usePaywallDesignerStore()` for the instance, `useStore(store, selector)`
+ * for a slice — and renders the slice into a textField. Proves store hooks work
+ * inside the reconciler root when the store context is re-provided via `wrap`.
+ */
+function StoreReadingDefinition(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const count = useStore(store as never, (state: CounterState) => state.count);
+  return (
+    <Panel>
+      <Panel.Field label="Count">
+        <Panel.TextField kind="number" value={count} placeholder="store-count" />
+      </Panel.Field>
+    </Panel>
+  );
+}
+
+/** Walks a tree and returns the first `textField` node's `value` prop. */
+const findTextFieldValue = (node: {
+  type: string;
+  props: Record<string, unknown>;
+  children?: unknown[];
+}): unknown => {
+  if (node.type === "textField") return node.props.value;
+  for (const child of node.children ?? []) {
+    const found = findTextFieldValue(child as never);
+    if (found !== undefined) return found;
+  }
+  return undefined;
+};
+
+const flushMicrotasks = () => act(async () => {});
+
+describe("built-in host — store context through wrap", () => {
+  test("a definition reads a zustand store via wrap and re-emits on store change", async () => {
+    const store = create<CounterState>((set) => ({
+      count: 10,
+      increment: () => set((s) => ({ count: s.count + 1 })),
+    }));
+
+    const wrap = (children: ReactNode) => (
+      <PaywallStoreContext.Provider value={store as unknown as PaywallDesignerStoreType}>
+        {children}
+      </PaywallStoreContext.Provider>
+    );
+
+    const transport = createInProcessTransport({
+      render: StoreReadingDefinition,
+      initialInputs: EMPTY_INPUTS,
+      wrap,
+    });
+
+    try {
+      render(<PanelTreeView transport={transport} />);
+      // The initial store value flows through the store hook into the emitted
+      // tree AND into the rendered input — proving the store hooks resolve inside
+      // the reconciler root via the re-provided context.
+      const initial = transport.getSnapshot();
+      expect(initial.status === "ready" && findTextFieldValue(initial.tree.root as never)).toBe(
+        10,
+      );
+      expect((screen.getByLabelText("store-count") as HTMLInputElement).value).toBe("10");
+
+      // Mutating the store re-renders the definition inside the reconciler
+      // (useSyncExternalStore is renderer-agnostic) and re-emits the tree with the
+      // new value (emitted via the session's coalesced microtask).
+      act(() => {
+        store.getState().increment();
+      });
+      await flushMicrotasks();
+
+      const after = transport.getSnapshot();
+      expect(after.status === "ready" && findTextFieldValue(after.tree.root as never)).toBe(11);
+    } finally {
+      transport.dispose();
+    }
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx
new file mode 100644
index 000000000..09867fe57
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx
@@ -0,0 +1,146 @@
+"use client";
+
+/**
+ * Mounts ONE in-process built-in panel session for a section and renders its
+ * tree with the host kit. The session is keyed by `sectionId` ONLY (by the
+ * PanelStack's `key={section.id}`), so a selection change NEVER remounts it —
+ * the definition's `useState` survives across selections exactly like today's
+ * `key={section.id}` sections (inventory §A / anomaly 4). Selection and nodes
+ * flow into the definition as INPUTS via `transport.update`, not as a remount.
+ *
+ * `wrap` re-wraps providers INSIDE the reconciler root: the SAME designer zustand
+ * store (via {@link PaywallStoreContext}, so `useStore`-based section hooks work
+ * unchanged inside the reconciler) plus the {@link PanelHostServicesProvider}
+ * host-services surface. The portalled host chrome (State Manager sheet, confirm
+ * dialog) lives in the main tree inside {@link PanelHostServicesHost}.
+ */
+import type { PanelContext, PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { useEffect, useMemo, useRef } from "react";
+import type { ReactNode } from "react";
+
+import { PanelTreeView } from "../../panel-runtime/host-renderer";
+import type { PanelRender, PanelWrap } from "../../panel-runtime/in-process-transport";
+import {
+  PanelHostServicesProvider,
+  type PanelHostServices,
+} from "../../panel-runtime/panel-host-services";
+import { usePanelSession, type BuiltinPanelSource } from "../../panel-runtime/use-panel-session";
+import {
+  PaywallStoreContext,
+  usePaywallDesignerStore,
+  type PaywallDesignerStoreType,
+} from "../../state/designer-store";
+import {
+  createDefinitionSelectionStore,
+  DefinitionSelectionProvider,
+  type DefinitionSelectionStore,
+} from "./definitions/definition-selection";
+import { PanelHostServicesHost } from "./panel-host-services-host";
+
+/** The selection snapshot fed to a built-in definition as inputs. */
+export interface BuiltinPanelSelection {
+  /** The selected node ids the panel edits (the definition resolves data from the store). */
+  readonly nodeIds: readonly string[];
+}
+
+export interface BuiltinPanelHostProps {
+  /** The section this host renders (used only for diagnostics; identity is the mount key). */
+  readonly sectionId: string;
+  /** The built-in panel definition to run in-process. */
+  readonly definition: PanelRender;
+  /** The current selection (flows to the definition via `update`, never remounts). */
+  readonly selection: BuiltinPanelSelection;
+}
+
+/**
+ * Builds the {@link PanelSessionInputs} for a built-in definition. Built-in
+ * panels are trusted and read node data straight from the store (via `wrap`), so
+ * the wire inputs carry only the selection COUNT; the selected node IDS reach the
+ * definition over the non-serializable {@link DefinitionSelectionProvider} seam
+ * (they never cross the sandbox boundary). `props` and `data` are empty
+ * (definitions don't use the sandbox prop channel).
+ */
+const buildInputs = (selection: BuiltinPanelSelection): PanelSessionInputs => ({
+  props: {},
+  selection: { count: selection.nodeIds.length },
+  data: { products: [], variables: {} },
+});
+
+/**
+ * The inner session view — separated so it can consume the host services yielded
+ * by {@link PanelHostServicesHost} and call {@link usePanelSession} at the top
+ * level. Builds a `wrap` that re-provides the store + host services inside the
+ * reconciler root.
+ */
+function BuiltinPanelSessionView({
+  definition,
+  selection,
+  store,
+  services,
+}: {
+  definition: PanelRender;
+  selection: BuiltinPanelSelection;
+  store: PaywallDesignerStoreType;
+  services: PanelHostServices;
+}): ReactNode {
+  // The selection store is the reactive channel that carries the SELECTED NODE
+  // IDS to the definition (the wire inputs only carry `selection.count`). Created
+  // once (stable identity, so it never remounts the session) and updated on every
+  // selection change; the definition subscribes to it via `useDefinitionSelection`.
+  const selectionStoreRef = useRef<DefinitionSelectionStore | null>(null);
+  selectionStoreRef.current ??= createDefinitionSelectionStore(selection.nodeIds);
+  const selectionStore = selectionStoreRef.current;
+  useEffect(() => {
+    selectionStore.setNodeIds(selection.nodeIds);
+  }, [selectionStore, selection]);
+
+  // The wrap re-provides the store context (so `useStore(store, …)` hooks resolve
+  // inside the reconciler), the host services, and the selection store. Memoized
+  // on store+services+selectionStore — all stable across selection changes — so
+  // its identity never changes and a new `wrap` never remounts the session.
+  const wrap = useMemo<PanelWrap>(
+    () => (children: ReactNode) => (
+      <PaywallStoreContext.Provider value={store}>
+        <PanelHostServicesProvider value={services}>
+          <DefinitionSelectionProvider value={selectionStore}>
+            {children}
+          </DefinitionSelectionProvider>
+        </PanelHostServicesProvider>
+      </PaywallStoreContext.Provider>
+    ),
+    [store, services, selectionStore],
+  );
+
+  // The source identity is keyed on the definition + wrap only (NOT selection),
+  // so pushing a new selection updates inputs without recreating the transport.
+  const source = useMemo<BuiltinPanelSource>(
+    () => ({ kind: "builtin", render: definition, wrap }),
+    [definition, wrap],
+  );
+
+  const inputs = useMemo(() => buildInputs(selection), [selection]);
+  const transport = usePanelSession(source, inputs);
+
+  return <PanelTreeView transport={transport} />;
+}
+
+/**
+ * Mounts a built-in panel host for `sectionId`. Renders the portalled host
+ * chrome via {@link PanelHostServicesHost} and, inside it, the session view. The
+ * PanelStack keys this component by `sectionId` so it persists across selections.
+ */
+export function BuiltinPanelHost({ definition, selection }: BuiltinPanelHostProps): ReactNode {
+  const store = usePaywallDesignerStore();
+  return (
+    <PanelHostServicesHost>
+      {(services) => (
+        <BuiltinPanelSessionView
+          definition={definition}
+          selection={selection}
+          services={services}
+          store={store}
+        />
+      )}
+    </PanelHostServicesHost>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.test.ts
new file mode 100644
index 000000000..fd4fd3781
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.test.ts
@@ -0,0 +1,97 @@
+/**
+ * {@link fetchCatalogPanelCode}: URL construction (`<base>/panel.js`), per-hash
+ * cache + in-flight dedupe (two calls share ONE fetch), size-cap rejection (by
+ * declared length AND by read text), and soft-failure eviction (a rejected
+ * fetch does not poison the cache, so a later call retries).
+ */
+import { afterEach, describe, expect, test, vi } from "vite-plus/test";
+
+import {
+  __resetCatalogPanelCodeCache,
+  fetchCatalogPanelCode,
+  PANEL_CODE_SIZE_CAP,
+  type PanelCodeFetch,
+} from "./catalog-panel-code";
+
+afterEach(() => __resetCatalogPanelCodeCache());
+
+/** A fake `Response` with a body + optional content-length header. */
+function okResponse(body: string, contentLength?: number): Response {
+  return {
+    ok: true,
+    headers: {
+      get: (name: string) =>
+        name.toLowerCase() === "content-length" && contentLength !== undefined
+          ? String(contentLength)
+          : null,
+    },
+    text: () => Promise.resolve(body),
+  } as unknown as Response;
+}
+
+function notOkResponse(status: number): Response {
+  return {
+    ok: false,
+    status,
+    headers: { get: () => null },
+    text: () => Promise.resolve(""),
+  } as unknown as Response;
+}
+
+describe("fetchCatalogPanelCode", () => {
+  test("fetches <artifactBaseUrl>/panel.js and returns the code", async () => {
+    const fetchImpl = vi.fn<PanelCodeFetch>(() =>
+      Promise.resolve(okResponse("module.exports.default = 1;")),
+    );
+    const code = await fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl);
+    expect(code).toBe("module.exports.default = 1;");
+    expect(fetchImpl).toHaveBeenCalledWith("https://cdn/c/h1/panel.js");
+  });
+
+  test("dedupes concurrent calls for the same hash into ONE fetch", async () => {
+    const fetchImpl = vi.fn<PanelCodeFetch>(() => Promise.resolve(okResponse("code")));
+    const [a, b] = await Promise.all([
+      fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl),
+      fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl),
+    ]);
+    expect(a).toBe("code");
+    expect(b).toBe("code");
+    expect(fetchImpl).toHaveBeenCalledTimes(1);
+  });
+
+  test("caches a resolved bundle: a second call does not refetch", async () => {
+    const fetchImpl = vi.fn<PanelCodeFetch>(() => Promise.resolve(okResponse("code")));
+    await fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl);
+    await fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl);
+    expect(fetchImpl).toHaveBeenCalledTimes(1);
+  });
+
+  test("rejects an oversized body by declared content-length → null", async () => {
+    const fetchImpl = vi.fn<PanelCodeFetch>(() =>
+      Promise.resolve(okResponse("x", PANEL_CODE_SIZE_CAP + 1)),
+    );
+    expect(await fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl)).toBeNull();
+  });
+
+  test("rejects an oversized body by read text length → null", async () => {
+    const oversized = "a".repeat(PANEL_CODE_SIZE_CAP + 1);
+    const fetchImpl = vi.fn<PanelCodeFetch>(() => Promise.resolve(okResponse(oversized)));
+    expect(await fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl)).toBeNull();
+  });
+
+  test("a non-ok response → null", async () => {
+    const fetchImpl = vi.fn<PanelCodeFetch>(() => Promise.resolve(notOkResponse(404)));
+    expect(await fetchCatalogPanelCode("h1", "https://cdn/c/h1", fetchImpl)).toBeNull();
+  });
+
+  test("a rejected fetch → null AND is evicted so a later call retries", async () => {
+    const failing = vi.fn<PanelCodeFetch>(() => Promise.reject(new Error("network")));
+    expect(await fetchCatalogPanelCode("h1", "https://cdn/c/h1", failing)).toBeNull();
+
+    // A subsequent call is NOT served the cached failure — it refetches (and here
+    // succeeds), proving the soft failure did not poison the cache.
+    const ok = vi.fn<PanelCodeFetch>(() => Promise.resolve(okResponse("code")));
+    expect(await fetchCatalogPanelCode("h1", "https://cdn/c/h1", ok)).toBe("code");
+    expect(ok).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.ts
new file mode 100644
index 000000000..be98ee68e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/catalog-panel-code.ts
@@ -0,0 +1,101 @@
+"use client";
+
+/**
+ * Fetches a deployed catalog component's custom-panel bundle
+ * (`<artifactBaseUrl>/panel.js`) so the {@link ./component-panel-host slot} can
+ * mount a sandboxed session for a catalog component, mirroring the LOCAL path
+ * where the compiled code lives in the store.
+ *
+ * The bundle is content-addressed and immutable per `contentHash`, so a single
+ * module-scoped {@link Map} caches the in-flight (and resolved) fetch per hash:
+ * two mounts of the same catalog component share ONE network request, and a
+ * later mount reuses the resolved code with no refetch. A rejected fetch is
+ * evicted from the cache so a subsequent mount may retry (a soft-degrade to the
+ * default panel is not a permanent state).
+ *
+ * The URL is always `<artifactBaseUrl>/panel.js` where `artifactBaseUrl` is the
+ * server-handed `…/c/<contentHash>` base (§5.1 of the deploy contract): no new
+ * origin is introduced and the client never assembles the URL from the storage
+ * layout itself. The response is size-capped at {@link PANEL_CODE_SIZE_CAP}
+ * before it is read as text, so an oversized (or mislabeled) artifact degrades
+ * to the default panel instead of feeding an unbounded string to the sandbox.
+ */
+import { SIZE_CAPS } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+
+/**
+ * Largest panel bundle the host will load, matching the deploy contract's JS
+ * bundle cap (§1.1) — the same ceiling the CLI/server enforce on the uploaded
+ * `panel.js`, so a within-contract artifact always fits.
+ */
+export const PANEL_CODE_SIZE_CAP = SIZE_CAPS.jsBundle;
+
+/** The `fetch` seam — the real global by default; injectable for tests. */
+export type PanelCodeFetch = (url: string) => Promise<Response>;
+
+/**
+ * Resolved successfully with the panel code, or `null` on any soft failure
+ * (non-ok response, over the size cap, or a read/network error). A `null`
+ * outcome tells the caller to stay on the default panel WITHOUT surfacing an
+ * error banner — a missing/oversized catalog panel is a degrade, not a crash.
+ */
+type PanelCodeOutcome = string | null;
+
+/** In-flight + resolved fetches, keyed by immutable `contentHash`. */
+const cache = new Map<string, Promise<PanelCodeOutcome>>();
+
+/** Test-only reset so a fresh module cache can be asserted per case. */
+export function __resetCatalogPanelCodeCache(): void {
+  cache.clear();
+}
+
+async function loadPanelCode(
+  url: string,
+  fetchImpl: PanelCodeFetch,
+): Promise<PanelCodeOutcome> {
+  try {
+    const response = await fetchImpl(url);
+    if (!response.ok) {
+      return null;
+    }
+    // Prefer the declared length to reject an oversized body before reading it;
+    // fall back to capping the read text (a missing/lying header still can't
+    // exceed the cap because the text length is re-checked below).
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > PANEL_CODE_SIZE_CAP) {
+      return null;
+    }
+    const text = await response.text();
+    if (text.length > PANEL_CODE_SIZE_CAP) {
+      return null;
+    }
+    return text;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Returns the catalog component's panel code for `contentHash`, fetching it
+ * once and caching the result (and the in-flight promise) per hash. A rejected
+ * network read resolves to `null` and is evicted so a later mount may retry.
+ */
+export function fetchCatalogPanelCode(
+  contentHash: string,
+  artifactBaseUrl: string,
+  fetchImpl: PanelCodeFetch = (url) => fetch(url),
+): Promise<PanelCodeOutcome> {
+  const existing = cache.get(contentHash);
+  if (existing !== undefined) {
+    return existing;
+  }
+  const pending = loadPanelCode(`${artifactBaseUrl}/panel.js`, fetchImpl).then((outcome) => {
+    // Evict soft failures so a subsequent mount can retry; keep a successful
+    // (immutable) bundle cached forever.
+    if (outcome === null) {
+      cache.delete(contentHash);
+    }
+    return outcome;
+  });
+  cache.set(contentHash, pending);
+  return pending;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.test.tsx
new file mode 100644
index 000000000..d981675d2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.test.tsx
@@ -0,0 +1,713 @@
+// @vitest-environment jsdom
+
+/**
+ * The `componentProps` slot ({@link ComponentPanelHost}) end-to-end: the default
+ * host panel (single + multi select, mixed detection, write-to-all + one undo,
+ * reset, bound-prop row, different-key → nothing) AND a custom session driven by
+ * a FAKE {@link PanelTransport} (scripted snapshots): the custom tree renders
+ * through `PanelTreeView` with the `expandPropField` seam, intents flow
+ * executor → batched actions with N targets → ONE undo entry, and a transport
+ * error snapshot falls back to the default panel with a Retry.
+ */
+import type {
+  ComponentManifest,
+  ComponentPropDefinition,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { act, cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import type { ReactNode } from "react";
+import { afterEach, describe, expect, test, vi } from "vite-plus/test";
+
+vi.mock("@tanstack/react-router", () => ({
+  useParams: () => ({}),
+}));
+
+import { AuthProvider } from "@/features/studio/components/auth-context";
+
+import { PanelTreeView } from "../../panel-runtime/host-renderer";
+import type {
+  PanelDispatchEvent,
+  PanelSnapshot,
+  PanelTransport,
+} from "../../panel-runtime/transport";
+import type { PanelTree } from "../../panel-runtime/schema";
+import { readComponentPropEntries } from "../../state/utils/component-node-writes";
+import { insertCodeComponent } from "../../state/utils/code-component-writes";
+import { definitionForComponentPath } from "../../state/utils/code-components";
+import { createDesignerStore, PaywallStoreContext } from "../../state/designer-store";
+import type { PaywallDesignerStoreType } from "../../state/designer-store";
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../state/testing/offline-document";
+import { ComponentPanelHost, resolvePanelCode } from "./component-panel-host";
+
+// PanelTreeView + host-renderer types are imported so this file compiles against
+// the same renderer the slot mounts (and to exercise the seam directly below).
+void PanelTreeView;
+
+afterEach(() => cleanup());
+
+// =============================================================================
+// Fixtures
+// =============================================================================
+
+const manifest: ComponentManifest = {
+  manifestVersion: 2,
+  props: {
+    title: { kind: "string" },
+    count: { kind: "number" },
+  } as Record<string, ComponentPropDefinition>,
+} as unknown as ComponentManifest;
+
+/**
+ * The canonical document-relative path a local component identity string maps to.
+ * A local instance references its definition by this `componentPath`, and the
+ * matching `codeComponent` definition node stores the same `path`.
+ */
+function componentPathFor(localComponentId: string): string {
+  return `components/${localComponentId}.tsx`;
+}
+
+/**
+ * Seeds a code-component DEFINITION node for `localComponentId` (path
+ * `components/<localComponentId>.tsx`), returning its definition node id — the id
+ * the compiled-artifact store is keyed by. Idempotent per identity string.
+ */
+function seedDefinition(doc: OfflineDesignerDocument, localComponentId: string): string {
+  const path = componentPathFor(localComponentId);
+  const existing = definitionForComponentPath({ mimic: { snapshot: doc.getSnapshot() } } as never, path);
+  if (existing !== undefined) return existing.id;
+  let defId = "";
+  doc.transaction((root) => {
+    const node = insertCodeComponent(root as never, { path, source: "// seed" });
+    if (node === null) throw new Error("failed to insert code-component definition");
+    defId = node;
+  });
+  return defId;
+}
+
+/**
+ * Seeds a local component instance node (with an optional stored title binding)
+ * referencing the definition at `components/<localComponentId>.tsx`, inserting
+ * that definition first. Returns the instance node id.
+ */
+function seedNode(
+  doc: OfflineDesignerDocument,
+  localComponentId: string,
+  contentHash: string,
+  props: readonly { name: string; value: unknown }[] = [],
+): string {
+  void contentHash;
+  seedDefinition(doc, localComponentId);
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (v: unknown) => { id: string } }
+    ).insertLast({
+      type: "component",
+      componentSource: "local",
+      componentPath: componentPathFor(localComponentId),
+      componentSlug: "",
+      componentVersion: 0,
+      contentHash: "",
+      name: "card",
+      previewState: "default",
+    });
+    nodeId = node.id;
+    const proxy = node as unknown as { data: { props: { push: (v: unknown) => void } } };
+    for (const binding of props) proxy.data.props.push({ name: binding.name, value: binding.value });
+  });
+  return nodeId;
+}
+
+/** Resolves the definition node id the compiled store keys for a local identity. */
+function definitionIdFor(store: PaywallDesignerStoreType, localComponentId: string): string | undefined {
+  return definitionForComponentPath(store.getState(), componentPathFor(localComponentId))?.id;
+}
+
+/**
+ * Seeds the compiled artifact for a local component (manifest + optional panel
+ * code). The compiled store is keyed by the DEFINITION node id — resolved from
+ * the instance's `componentPath` when a definition was seeded (via
+ * {@link seedNode}), else the raw identity string (the direct `resolvePanelCode`
+ * tests that never seed a document node).
+ */
+function seedCompiled(
+  store: PaywallDesignerStoreType,
+  localComponentId: string,
+  options: { hasPanel?: boolean; code?: string } = {},
+): void {
+  const key = definitionIdFor(store, localComponentId) ?? localComponentId;
+  store.setState((state) => ({
+    ...state,
+    codeComponents: {
+      ...state.codeComponents,
+      compiled: {
+        ...state.codeComponents.compiled,
+        [key]: {
+          artifact: {
+            manifest,
+            previewTrees: {},
+            hasPanel: options.hasPanel ?? false,
+            code: options.code,
+          },
+          sourceHash: "seed",
+          status: "ready",
+        },
+      },
+    },
+  }));
+}
+
+/** Seeds a CATALOG component node pinned to `contentHash`. */
+function seedCatalogNode(doc: OfflineDesignerDocument, contentHash: string): string {
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (v: unknown) => { id: string } }
+    ).insertLast({
+      type: "component",
+      componentSource: "catalog",
+      componentPath: "",
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash,
+      name: "card",
+      previewState: "default",
+    });
+    nodeId = node.id;
+  });
+  return nodeId;
+}
+
+/**
+ * Seeds a BUILTIN component instance node resolved by `slug`. Builtins carry no
+ * catalog row and no pinned hash — their manifest resolves from the static
+ * `@voidhash/paywall-builtins` registry.
+ */
+function seedBuiltinNode(doc: OfflineDesignerDocument, slug: string): string {
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (v: unknown) => { id: string } }
+    ).insertLast({
+      type: "component",
+      componentSource: "builtin",
+      componentPath: "",
+      componentSlug: slug,
+      componentVersion: 0,
+      contentHash: "",
+      name: "badge",
+      previewState: "default",
+    });
+    nodeId = node.id;
+  });
+  return nodeId;
+}
+
+/** Seeds a pinned catalog version into `componentCatalog.byContentHash`. */
+function seedCatalog(
+  store: PaywallDesignerStoreType,
+  contentHash: string,
+  options: { hasPanel?: boolean; artifactBaseUrl?: string } = {},
+): void {
+  store.setState((state) => ({
+    ...state,
+    componentCatalog: {
+      ...state.componentCatalog,
+      byContentHash: {
+        ...state.componentCatalog.byContentHash,
+        [contentHash]: {
+          slug: "card",
+          version: 1,
+          contentHash,
+          manifest,
+          hasPanel: options.hasPanel ?? false,
+          previewStates: ["default"],
+          artifactBaseUrl: options.artifactBaseUrl ?? `https://cdn/c/${contentHash}`,
+          createdAt: new Date(),
+        },
+      },
+    },
+  }));
+}
+
+function makeStore(doc: OfflineDesignerDocument): PaywallDesignerStoreType {
+  return createDesignerStore(doc as unknown as Parameters<typeof createDesignerStore>[0]);
+}
+
+/** Reads the store snapshot's node for the slot (the SnapshotNode the slot edits). */
+function snapshotNode(store: PaywallDesignerStoreType, nodeId: string): unknown {
+  const snapshot = store.getState().mimic.snapshot;
+  const find = (node: unknown): unknown => {
+    const n = node as { id?: string; children?: unknown[] };
+    if (n.id === nodeId) return n;
+    for (const child of n.children ?? []) {
+      const found = find(child);
+      if (found) return found;
+    }
+    return undefined;
+  };
+  return find((snapshot as unknown[])[0]);
+}
+
+const renderSlot = (store: PaywallDesignerStoreType, ui: ReactNode) =>
+  render(
+    <QueryClientProvider client={new QueryClient()}>
+      <AuthProvider user={null as never}>
+        <PaywallStoreContext.Provider value={store}>{ui}</PaywallStoreContext.Provider>
+      </AuthProvider>
+    </QueryClientProvider>,
+  );
+
+function undoDepth(store: PaywallDesignerStoreType): number {
+  return (store.getState() as unknown as { _commander: { undoStack: unknown[] } })._commander
+    .undoStack.length;
+}
+
+function storedTitle(doc: OfflineDesignerDocument, nodeId: string): unknown {
+  return readComponentPropEntries(doc.root, nodeId).find((e) => e.name === "title")?.raw;
+}
+
+// =============================================================================
+// resolvePanelCode
+// =============================================================================
+
+describe("resolvePanelCode", () => {
+  test("returns code only for a ready local component with hasPanel + code", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    // No document definition seeded, so `seedCompiled` keys the compiled entry by
+    // the raw identity string — which is exactly the definition id passed below.
+    seedCompiled(store, "lc1", { hasPanel: true, code: "export default 1" });
+    expect(
+      resolvePanelCode(
+        { data: { componentSource: "local", componentPath: "components/lc1.tsx" } } as never,
+        store.getState().codeComponents.compiled,
+        "lc1",
+      ),
+    ).toBe("export default 1");
+  });
+
+  test("returns undefined without hasPanel, without code, or for catalog", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    seedCompiled(store, "lcNoPanel", { hasPanel: false, code: "x" });
+    seedCompiled(store, "lcNoCode", { hasPanel: true });
+    const compiled = store.getState().codeComponents.compiled;
+    expect(
+      resolvePanelCode(
+        { data: { componentSource: "local", componentPath: "components/lcNoPanel.tsx" } } as never,
+        compiled,
+        "lcNoPanel",
+      ),
+    ).toBeUndefined();
+    expect(
+      resolvePanelCode(
+        { data: { componentSource: "local", componentPath: "components/lcNoCode.tsx" } } as never,
+        compiled,
+        "lcNoCode",
+      ),
+    ).toBeUndefined();
+    expect(
+      resolvePanelCode(
+        { data: { componentSource: "catalog", contentHash: "h" } } as never,
+        compiled,
+        undefined,
+      ),
+    ).toBeUndefined();
+  });
+});
+
+// =============================================================================
+// Default panel
+// =============================================================================
+
+describe("ComponentPanelHost — default panel", () => {
+  test("renders one row per manifest prop for a single selection", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedNode(doc, "lc1", "h1");
+    seedCompiled(store, "lc1", { hasPanel: false });
+    const node = snapshotNode(store, nodeId) as never;
+
+    renderSlot(store, <ComponentPanelHost nodes={[node]} />);
+    expect(screen.getByText("Props")).toBeTruthy();
+    expect(screen.getByText("title")).toBeTruthy();
+    expect(screen.getByText("count")).toBeTruthy();
+  });
+
+  test("multi-select of the SAME key edits all nodes; write is one undo entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const a = seedNode(doc, "lc1", "h1");
+    const b = seedNode(doc, "lc1", "h1");
+    seedCompiled(store, "lc1", { hasPanel: false });
+    const nodes = [snapshotNode(store, a), snapshotNode(store, b)] as never[];
+
+    renderSlot(store, <ComponentPanelHost nodes={nodes} />);
+    // The title row's text input; type + blur commits.
+    const inputs = screen.getAllByRole("textbox");
+    const titleInput = inputs[0]!;
+    fireEvent.focus(titleInput);
+    fireEvent.change(titleInput, { target: { value: "Shared" } });
+    fireEvent.blur(titleInput);
+
+    expect(undoDepth(store)).toBe(1);
+    expect(storedTitle(doc, a)).toEqual({ type: "literal", value: { key: "string", value: "Shared" } });
+    expect(storedTitle(doc, b)).toEqual({ type: "literal", value: { key: "string", value: "Shared" } });
+  });
+
+  test("mixed values across a multi-select do NOT show either node's value", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const a = seedNode(doc, "lc1", "h1", [
+      { name: "title", value: { type: "literal", value: { key: "string", value: "AAA" } } },
+    ]);
+    const b = seedNode(doc, "lc1", "h1", [
+      { name: "title", value: { type: "literal", value: { key: "string", value: "BBB" } } },
+    ]);
+    seedCompiled(store, "lc1", { hasPanel: false });
+    const nodes = [snapshotNode(store, a), snapshotNode(store, b)] as never[];
+
+    renderSlot(store, <ComponentPanelHost nodes={nodes} />);
+    // PropFieldRow detects the non-uniform binding and collapses to the fallback
+    // default, so neither "AAA" nor "BBB" is shown (mixed is not either value).
+    const inputs = screen.getAllByRole("textbox") as HTMLInputElement[];
+    const titleInput = inputs[0]!;
+    expect(titleInput.value).not.toBe("AAA");
+    expect(titleInput.value).not.toBe("BBB");
+  });
+
+  test("reset removes the stored entry for all nodes in one undo entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const a = seedNode(doc, "lc1", "h1", [
+      { name: "title", value: { type: "literal", value: { key: "string", value: "A" } } },
+    ]);
+    const b = seedNode(doc, "lc1", "h1", [
+      { name: "title", value: { type: "literal", value: { key: "string", value: "A" } } },
+    ]);
+    seedCompiled(store, "lc1", { hasPanel: false });
+    const nodes = [snapshotNode(store, a), snapshotNode(store, b)] as never[];
+
+    renderSlot(store, <ComponentPanelHost nodes={nodes} />);
+    const resetButton = screen.getAllByTitle("Reset to default")[0]!;
+    fireEvent.click(resetButton);
+
+    expect(undoDepth(store)).toBe(1);
+    expect(storedTitle(doc, a)).toBeUndefined();
+    expect(storedTitle(doc, b)).toBeUndefined();
+  });
+
+  test("different-key multi-select renders nothing", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const a = seedNode(doc, "lc1", "h1");
+    const b = seedNode(doc, "lc2", "h2");
+    seedCompiled(store, "lc1", { hasPanel: false });
+    seedCompiled(store, "lc2", { hasPanel: false });
+    const nodes = [snapshotNode(store, a), snapshotNode(store, b)] as never[];
+
+    const { container } = renderSlot(store, <ComponentPanelHost nodes={nodes} />);
+    expect(container.textContent).toBe("");
+  });
+});
+
+// =============================================================================
+// Builtin instances (registry-resolved manifest)
+// =============================================================================
+
+describe("ComponentPanelHost — builtin instances", () => {
+  test("resolves the registry manifest so props are editable (not 'not in catalog')", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedBuiltinNode(doc, "sample-badge");
+    const node = snapshotNode(store, nodeId) as never;
+
+    renderSlot(store, <ComponentPanelHost nodes={[node]} />);
+    // The sample-badge manifest declares a `label` prop (label "Label"); its row
+    // renders, and the manifest-missing placeholder must NOT appear.
+    expect(screen.getByText("Props")).toBeTruthy();
+    expect(screen.getByText("Label")).toBeTruthy();
+    expect(
+      screen.queryByText(
+        "This version is not in the project catalog, so its props can't be edited.",
+      ),
+    ).toBeNull();
+  });
+
+  test("an unknown builtin slug degrades to the manifest-missing placeholder", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedBuiltinNode(doc, "does-not-exist");
+    const node = snapshotNode(store, nodeId) as never;
+
+    renderSlot(store, <ComponentPanelHost nodes={[node]} />);
+    expect(
+      screen.getByText(
+        "This version is not in the project catalog, so its props can't be edited.",
+      ),
+    ).toBeTruthy();
+  });
+});
+
+// =============================================================================
+// Custom session (FAKE transport)
+// =============================================================================
+
+/** A scripted fake transport that emits a fixed ready tree and records dispatches. */
+function fakeTransport(tree: PanelTree) {
+  let snapshot: PanelSnapshot = { status: "ready", tree, revision: 1 };
+  const listeners = new Set<() => void>();
+  const dispatched: PanelDispatchEvent[] = [];
+  let restarted = 0;
+  const transport: PanelTransport = {
+    kind: "sandbox",
+    update: () => {},
+    dispatch: (event) => dispatched.push(event),
+    subscribe: (cb) => {
+      listeners.add(cb);
+      return () => listeners.delete(cb);
+    },
+    getSnapshot: () => snapshot,
+    restart: () => {
+      restarted += 1;
+      const revision =
+        snapshot.status === "ready" ? snapshot.revision + 1 : 1;
+      snapshot = { status: "ready", tree, revision };
+      for (const cb of listeners) cb();
+    },
+    dispose: () => listeners.clear(),
+  };
+  const setSnapshot = (next: PanelSnapshot) => {
+    snapshot = next;
+    for (const cb of listeners) cb();
+  };
+  return { transport, dispatched, setSnapshot, restarted: () => restarted };
+}
+
+/** A minimal tree with a section + a propField(subtitle) so expandPropField fires. */
+function customTree(): PanelTree {
+  return {
+    version: 1,
+    root: {
+      type: "panel",
+      id: 0,
+      props: {},
+      events: [],
+      children: [
+        {
+          type: "section",
+          id: 1,
+          props: { title: "Content" },
+          events: [],
+          children: [{ type: "propField", id: 2, props: { name: "title" }, events: [] }],
+        },
+      ],
+    },
+  } as unknown as PanelTree;
+}
+
+describe("ComponentPanelHost — custom session (fake transport)", () => {
+  test("renders the custom tree and expands propField into a host row", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedNode(doc, "lc1", "h1");
+    seedCompiled(store, "lc1", { hasPanel: true, code: "export default 1" });
+    const node = snapshotNode(store, nodeId) as never;
+
+    const fake = fakeTransport(customTree());
+    renderSlot(
+      store,
+      <ComponentPanelHost createSandboxTransport={() => fake.transport} nodes={[node]} />,
+    );
+
+    // The section chrome renders, and the propField expanded into the host's
+    // "title" prop row (label rendered by PropFieldRow).
+    expect(screen.getByText("Content")).toBeTruthy();
+    expect(screen.getByText("title")).toBeTruthy();
+  });
+
+  test("intents flow through the executor to a batched write with N targets → one undo entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const a = seedNode(doc, "lc1", "h1");
+    const b = seedNode(doc, "lc1", "h1");
+    seedCompiled(store, "lc1", { hasPanel: true, code: "export default 1" });
+    const nodes = [snapshotNode(store, a), snapshotNode(store, b)] as never[];
+
+    let sink: ((raw: unknown) => void) | null = null;
+    const fake = fakeTransport(customTree());
+    renderSlot(
+      store,
+      <ComponentPanelHost
+        createSandboxTransport={(opts) => {
+          sink = opts.onIntents;
+          return fake.transport;
+        }}
+        nodes={nodes}
+      />,
+    );
+
+    // A committed set-prop reaches both selected nodes in one undo entry.
+    sink!({ type: "set-prop", name: "title", value: "FromPanel", gesture: "commit" });
+
+    expect(undoDepth(store)).toBe(1);
+    expect(storedTitle(doc, a)).toEqual({
+      type: "literal",
+      value: { key: "string", value: "FromPanel" },
+    });
+    expect(storedTitle(doc, b)).toEqual({
+      type: "literal",
+      value: { key: "string", value: "FromPanel" },
+    });
+  });
+
+  test("a fatal transport error falls back to the default panel with Retry", () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedNode(doc, "lc1", "h1");
+    seedCompiled(store, "lc1", { hasPanel: true, code: "export default 1" });
+    const node = snapshotNode(store, nodeId) as never;
+
+    let fatal: ((message: string) => void) | null = null;
+    const fake = fakeTransport(customTree());
+    renderSlot(
+      store,
+      <ComponentPanelHost
+        createSandboxTransport={(opts) => {
+          fatal = opts.onFatal ?? null;
+          return fake.transport;
+        }}
+        nodes={[node]}
+      />,
+    );
+
+    // Trigger the fatal path; the slot swaps to the default panel + Retry.
+    act(() => {
+      fatal!("boom");
+    });
+
+    // The default panel + retry banner appear.
+    expect(screen.getByText("Custom panel failed — showing default controls")).toBeTruthy();
+    const retry = screen.getByText("Retry");
+    fireEvent.click(retry);
+    expect(fake.restarted()).toBe(1);
+  });
+});
+
+// =============================================================================
+// Catalog custom panel (async panel.js fetch → slot upgrade)
+// =============================================================================
+
+describe("ComponentPanelHost — catalog custom panel (async fetch)", () => {
+  test("fetched panel code upgrades the default panel to a custom session", async () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedCatalogNode(doc, "cat1");
+    seedCatalog(store, "cat1", { hasPanel: true });
+    const node = snapshotNode(store, nodeId) as never;
+
+    const fake = fakeTransport(customTree());
+    // The fetch resolves on a later microtask, so the default panel renders first.
+    renderSlot(
+      store,
+      <ComponentPanelHost
+        createSandboxTransport={() => fake.transport}
+        fetchPanelCode={() => Promise.resolve("export default 1")}
+        nodes={[node]}
+      />,
+    );
+
+    // Default panel is up immediately (the fetch has not resolved yet).
+    expect(screen.getByText("Props")).toBeTruthy();
+
+    // Once panel.js resolves, the slot swaps to the custom session (the section
+    // chrome + expanded propField appear).
+    expect(await screen.findByText("Content")).toBeTruthy();
+    expect(screen.getByText("title")).toBeTruthy();
+  });
+
+  test("a soft fetch failure stays on the default panel (no error banner)", async () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedCatalogNode(doc, "cat1");
+    seedCatalog(store, "cat1", { hasPanel: true });
+    const node = snapshotNode(store, nodeId) as never;
+
+    renderSlot(
+      store,
+      <ComponentPanelHost fetchPanelCode={() => Promise.resolve(null)} nodes={[node]} />,
+    );
+
+    // The fetch resolves null; the slot remains the default panel and never shows
+    // the crashed-session banner.
+    await waitFor(() => expect(screen.getByText("Props")).toBeTruthy());
+    expect(screen.queryByText("Custom panel failed — showing default controls")).toBeNull();
+    expect(screen.getByText("title")).toBeTruthy();
+  });
+
+  test("no fetch is attempted when the catalog version has no panel", async () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const nodeId = seedCatalogNode(doc, "cat1");
+    seedCatalog(store, "cat1", { hasPanel: false });
+    const node = snapshotNode(store, nodeId) as never;
+
+    let calls = 0;
+    renderSlot(
+      store,
+      <ComponentPanelHost
+        fetchPanelCode={() => {
+          calls += 1;
+          return Promise.resolve("export default 1");
+        }}
+        nodes={[node]}
+      />,
+    );
+
+    await waitFor(() => expect(screen.getByText("Props")).toBeTruthy());
+    expect(calls).toBe(0);
+  });
+
+  test("a homogeneous multi-select drives ONE fetch for the shared session", async () => {
+    const doc = createOfflineDesignerDocument();
+    const store = makeStore(doc);
+    const a = seedCatalogNode(doc, "cat1");
+    const b = seedCatalogNode(doc, "cat1");
+    seedCatalog(store, "cat1", { hasPanel: true });
+    const nodes = [snapshotNode(store, a), snapshotNode(store, b)] as never[];
+
+    let calls = 0;
+    const fake = fakeTransport(customTree());
+    renderSlot(
+      store,
+      <ComponentPanelHost
+        createSandboxTransport={() => fake.transport}
+        fetchPanelCode={() => {
+          calls += 1;
+          return Promise.resolve("export default 1");
+        }}
+        nodes={nodes}
+      />,
+    );
+
+    // A batch of same-hash instances resolves to ONE identity → one fetch drives
+    // the single shared custom session. (Per-hash module-cache dedupe across
+    // separate mounts is covered by catalog-panel-code.test.ts.)
+    expect(await screen.findByText("Content")).toBeTruthy();
+    expect(calls).toBe(1);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx
new file mode 100644
index 000000000..e9c68a68a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx
@@ -0,0 +1,668 @@
+"use client";
+
+/**
+ * The `componentProps` slot of the v2 right-panel stack (Phase 3b). It edits the
+ * props of the selected component node(s) either through a HOST-rendered default
+ * panel (a {@link PropFieldRow} per manifest prop, wired to the batched
+ * multi-node prop actions) or, when the component declares a custom `panel`, a
+ * SANDBOXED session whose intent stream the {@link createIntentExecutor} reduces
+ * onto the same batched actions.
+ *
+ * Gating (see {@link ComponentPanelHost}): the slot activates only when EVERY
+ * selected node is a component node sharing the SAME identity key
+ * (`local:<id>` / `catalog:<hash>`), so a batch edit always targets homogeneous
+ * instances; mixed keys render nothing. The custom session mounts only when the
+ * component's compiled code is available AND declares a panel; otherwise (and on
+ * a custom-session error) the default panel renders.
+ */
+import type {
+  ComponentManifest,
+  ComponentPropDefinition,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { Button } from "@voidhash/ui";
+import type { ComponentSnapshotNode, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import type { PanelPropInput, PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import type { ReactNode } from "react";
+import { useStore } from "zustand/react";
+
+import { useComponentManifest } from "../../hooks/use-component-manifest";
+import { useDesignerDraft } from "../../hooks/use-designer-draft";
+import { fetchCatalogPanelCode } from "./catalog-panel-code";
+import { PropFieldRow, type PropTargetBinding } from "../../panel-kit/prop-field-row";
+import { createIntentExecutor } from "../../panel-runtime/intent-executor";
+import { createPanelGestureController } from "../../panel-runtime/gesture-controller";
+import { PanelTreeView, type PanelRenderContext } from "../../panel-runtime/host-renderer";
+import { createPanelSandboxTransport } from "../../panel-runtime/panel-sandbox-host";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+} from "../../panel-kit/panel-section";
+import type { PanelTransport } from "../../panel-runtime/transport";
+import {
+  removeComponentPropForNodes,
+  updateComponentPropBindingForNodes,
+} from "../../state/actions/features/component-prop-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../state/designer-store";
+import type { PaywallDesignerStoreType } from "../../state/designer-store";
+import type { CodeComponentsState } from "../../state/designer-store-state";
+import { definitionForComponentPath } from "../../state/utils/code-components";
+import {
+  collectAncestorVariables,
+  toLabeledVariables,
+} from "../../state/utils/ancestor-variables";
+import {
+  componentPropBindingFromRaw,
+  findComponentPropEntry,
+  manifestDefaultPropValue,
+  type ComponentPropBindingPlain,
+  type ComponentPropValuePlain,
+} from "../../state/utils/component-prop-values";
+import { selectDocumentRoot } from "../../state/utils/document-root";
+
+// =============================================================================
+// Identity key
+// =============================================================================
+
+/**
+ * The identity key of a component instance — `local:<componentPath>` for an
+ * in-document code component, `builtin:<componentSlug>` for a first-party
+ * builtin, `catalog:<contentHash>` for a pinned catalog component. Nodes with
+ * the same key share a manifest, so they can be edited as one batch; nodes with
+ * different keys cannot.
+ */
+function componentIdentityKey(node: ComponentSnapshotNode): string {
+  if (node.data.componentSource === "local") {
+    return `local:${node.data.componentPath}`;
+  }
+  if (node.data.componentSource === "builtin") {
+    return `builtin:${node.data.componentSlug}`;
+  }
+  return `catalog:${node.data.contentHash}`;
+}
+
+/** Narrows a snapshot node to a component node. */
+function isComponentNode(node: SnapshotNode): node is ComponentSnapshotNode {
+  return node.type === "component";
+}
+
+// =============================================================================
+// Panel-code accessor (sibling seam)
+// =============================================================================
+
+/**
+ * Reads the compiled panel code for a LOCAL component instance, or `undefined`
+ * when unavailable. The compiled code + `hasPanel` flag live on the ready
+ * artifact (`LocalComponentArtifact.hasPanel: boolean`, `.code?: string` —
+ * threaded by the sandbox-transport work, retained only when `hasPanel`). Read
+ * through a narrow structural view so a missing field degrades to "no custom
+ * session" instead of a crash. Catalog components carry no local code, so a
+ * custom session is local-only.
+ */
+export function resolvePanelCode(
+  node: ComponentSnapshotNode,
+  compiled: CodeComponentsState["compiled"],
+  definitionId: string | undefined,
+): string | undefined {
+  if (node.data.componentSource !== "local" || definitionId === undefined) return undefined;
+  const entry = compiled[definitionId] as
+    | {
+        readonly status?: string;
+        readonly artifact?: { readonly hasPanel?: unknown; readonly code?: unknown };
+      }
+    | undefined;
+  if (entry === undefined || entry.status !== "ready") return undefined;
+  if (entry.artifact?.hasPanel !== true) return undefined;
+  return typeof entry.artifact.code === "string" ? entry.artifact.code : undefined;
+}
+
+/**
+ * Asynchronously resolves the panel code for a CATALOG component instance. When
+ * the pinned catalog version declares `hasPanel`, its `panel.js` is fetched
+ * from the version's `artifactBaseUrl` (§5.1) — deduped + cached per immutable
+ * `contentHash` (see {@link ./catalog-panel-code}). Returns `undefined` while
+ * the fetch is pending, on any soft failure (missing/oversized artifact,
+ * network error), or when the node is local / has no catalog panel; a defined
+ * result upgrades the slot from the default panel to a custom session.
+ *
+ * A soft fetch failure intentionally leaves the slot on the default panel with
+ * NO error banner — that is a graceful degrade, distinct from a crashed custom
+ * session (which the {@link CustomComponentPanel} banner surfaces).
+ */
+function useCatalogPanelCode(
+  node: ComponentSnapshotNode | undefined,
+  fetchPanelCode: FetchCatalogPanelCode,
+): string | undefined {
+  const store = usePaywallDesignerStore();
+  const isCatalog = node !== undefined && node.data.componentSource !== "local";
+  const contentHash = isCatalog ? node.data.contentHash : undefined;
+  const version = useStore(store, (state) =>
+    contentHash === undefined ? undefined : state.componentCatalog.byContentHash[contentHash],
+  );
+  const hasPanel = version?.hasPanel === true;
+  const artifactBaseUrl = version?.artifactBaseUrl;
+
+  // Store the fetched code KEYED by its contentHash so switching to another
+  // catalog component never briefly returns a prior component's stale code —
+  // the code is only surfaced when its key matches the current contentHash.
+  const [resolved, setResolved] = useState<{ hash: string; code: string } | null>(null);
+
+  useEffect(() => {
+    if (!hasPanel || contentHash === undefined || artifactBaseUrl === undefined) {
+      return;
+    }
+    let active = true;
+    void fetchPanelCode(contentHash, artifactBaseUrl).then((code) => {
+      if (!active) return;
+      if (code === null) {
+        if (import.meta.env.DEV) {
+          console.warn(
+            `[catalog-panel] no custom panel loaded for ${contentHash} — using default controls`,
+          );
+        }
+        return;
+      }
+      setResolved({ hash: contentHash, code });
+    });
+    return () => {
+      active = false;
+    };
+  }, [fetchPanelCode, hasPanel, contentHash, artifactBaseUrl]);
+
+  if (!hasPanel || contentHash === undefined) return undefined;
+  return resolved?.hash === contentHash ? resolved.code : undefined;
+}
+
+// =============================================================================
+// Shared prop-row expansion (default panel + custom session `propField`)
+// =============================================================================
+
+/** One target's node id + its parsed stored binding for a prop. */
+function propTargets(
+  nodes: readonly ComponentSnapshotNode[],
+  propName: string,
+): readonly PropTargetBinding[] {
+  return nodes.map((node) => {
+    const storedEntry = findComponentPropEntry(node.data.props, propName);
+    return {
+      id: node.id,
+      storedBinding:
+        storedEntry === undefined ? undefined : componentPropBindingFromRaw(storedEntry.raw),
+    };
+  });
+}
+
+/**
+ * The single implementation both the default panel and a custom session's
+ * `propField`/`defaultProps` nodes expand through: one {@link PropFieldRow} per
+ * named prop, wired to the batched multi-node prop actions over ALL selected
+ * nodes. `variables` is the ancestor-variable intersection across targets.
+ */
+function usePropRowRenderer(
+  nodes: readonly ComponentSnapshotNode[],
+  store: PaywallDesignerStoreType,
+): (propName: string, def: ComponentPropDefinition) => ReactNode {
+  const dispatch = usePaywallDesignerActions();
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const nodeIds = useMemo(() => nodes.map((node) => node.id), [nodes]);
+
+  // Ancestor variables visible to EVERY target (intersection by id/aliasId). For
+  // a single selection this is exactly the node's own ancestor set.
+  const variables = useMemo(() => {
+    const perNode = nodes.map((node) =>
+      toLabeledVariables(collectAncestorVariables(documentRoot, node.id), node.id),
+    );
+    if (perNode.length === 0) return [];
+    const [first, ...rest] = perNode;
+    const keyOf = (v: { id: string; aliasId?: string }) => v.aliasId ?? v.id;
+    return first!.filter((candidate) =>
+      rest.every((list) => list.some((other) => keyOf(other) === keyOf(candidate))),
+    );
+  }, [nodes, documentRoot]);
+
+  return useMemo(
+    () =>
+      (propName, def) =>
+        (
+          <PropFieldRow
+            def={def}
+            onResetProp={(name) =>
+              dispatch(removeComponentPropForNodes)({ nodeIds, propName: name })
+            }
+            onSetProp={(name, binding) =>
+              dispatch(updateComponentPropBindingForNodes)({ binding, nodeIds, propName: name })
+            }
+            propName={propName}
+            targets={propTargets(nodes, propName)}
+            variables={variables}
+          />
+        ),
+    [dispatch, nodeIds, nodes, variables],
+  );
+}
+
+// =============================================================================
+// Default (host-rendered) panel
+// =============================================================================
+
+function DefaultComponentPanel({
+  nodes,
+  manifest,
+  store,
+  banner,
+}: {
+  nodes: readonly ComponentSnapshotNode[];
+  manifest: ComponentManifest | undefined;
+  store: PaywallDesignerStoreType;
+  /** Optional error banner shown above the rows (custom-session fallback). */
+  banner?: ReactNode;
+}) {
+  const renderRow = usePropRowRenderer(nodes, store);
+  const propEntries = useMemo(
+    () => (manifest === undefined ? [] : Object.entries(manifest.props)),
+    [manifest],
+  );
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Props</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        {banner}
+        {manifest === undefined ? (
+          <p className="text-muted-foreground text-xs">
+            This version is not in the project catalog, so its props can&apos;t be edited.
+          </p>
+        ) : propEntries.length === 0 ? (
+          <p className="text-muted-foreground text-xs">This component declares no props.</p>
+        ) : (
+          <div className="flex flex-col gap-2">
+            {propEntries.map(([propName, def]) => (
+              <div key={propName}>{renderRow(propName, def)}</div>
+            ))}
+          </div>
+        )}
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
+
+// =============================================================================
+// Inputs construction
+// =============================================================================
+
+/**
+ * Builds the {@link PanelSessionInputs} for a custom session from the store: one
+ * entry per manifest prop with its effective value, mixed/bound flags, and kind
+ * (refs carry the product id). `selection.count` is the target count.
+ *
+ * `data.products` is intentionally EMPTY: the host has no synchronous product
+ * source here (the product picker resolves products lazily via react-query in the
+ * default panel), and an empty list is defensible — `set-ref` intents from a
+ * custom panel are validated against `getProducts()` and dropped until a real
+ * source is wired, so nothing unsafe reaches the document. `data.variables` is
+ * likewise empty; a custom panel resolves bound values through the host, not the
+ * wire.
+ */
+function buildInputs(
+  nodes: readonly ComponentSnapshotNode[],
+  manifest: ComponentManifest | undefined,
+): PanelSessionInputs {
+  const props: Record<string, PanelPropInput> = {};
+
+  if (manifest !== undefined) {
+    for (const [propName, def] of Object.entries(manifest.props)) {
+      const targets = propTargets(nodes, propName);
+      const mixed = !bindingsUniform(targets);
+      const representative = targets[0]?.storedBinding;
+      const bound = targets.some((t) => t.storedBinding?.type === "variable-reference");
+
+      let value: PanelPropInput["value"];
+      let productId: string | undefined;
+      const effective =
+        !mixed && representative?.type === "literal"
+          ? representative.value
+          : manifestDefaultPropValue(def);
+      if (effective !== undefined) {
+        if (effective.key === "product") {
+          productId = effective.value.productId;
+          value = productId;
+        } else {
+          value = jsonForPropValue(effective);
+        }
+      }
+      props[propName] = { value, mixed, bound, kind: def.kind, productId };
+    }
+  }
+
+  return {
+    props,
+    selection: { count: nodes.length },
+    data: { products: [], variables: {} },
+  };
+}
+
+/** Extracts a JSON-friendly value from a plain prop value for the wire inputs. */
+function jsonForPropValue(value: ComponentPropValuePlain): PanelPropInput["value"] {
+  switch (value.key) {
+    case "string":
+    case "number":
+    case "boolean":
+      return value.value;
+    case "string-array":
+      return [...value.value];
+    case "number-array":
+      return [...value.value];
+    case "boolean-array":
+      return [...value.value];
+    case "product":
+      return value.value.productId;
+  }
+}
+
+/** Structural deep-equality for uniform-binding detection across targets. */
+function deepEqual(a: unknown, b: unknown): boolean {
+  if (a === b) return true;
+  if (a == null || b == null) return false;
+  if (typeof a !== typeof b) return false;
+  if (typeof a !== "object") return false;
+  if (Array.isArray(a)) {
+    if (!Array.isArray(b) || a.length !== b.length) return false;
+    return a.every((value, index) => deepEqual(value, b[index]));
+  }
+  const objectA = a as Record<string, unknown>;
+  const objectB = b as Record<string, unknown>;
+  const keysA = Object.keys(objectA);
+  const keysB = Object.keys(objectB);
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every((key) => deepEqual(objectA[key], objectB[key]));
+}
+
+function bindingsUniform(targets: readonly PropTargetBinding[]): boolean {
+  if (targets.length <= 1) return true;
+  const [first, ...rest] = targets;
+  return rest.every((target) => deepEqual(target.storedBinding, first?.storedBinding));
+}
+
+// =============================================================================
+// Custom (sandboxed) session
+// =============================================================================
+
+/** The sibling sandbox-transport factory, imported lazily/type-only until it lands. */
+type CreatePanelSandboxTransport = (opts: {
+  compiledCode: string;
+  initialInputs: PanelSessionInputs;
+  onIntents: (raw: unknown) => void;
+  onFatal?: (message: string) => void;
+}) => PanelTransport;
+
+/**
+ * The catalog panel-code fetcher seam (defaults to {@link fetchCatalogPanelCode}
+ * hitting `<artifactBaseUrl>/panel.js`); tests inject a fake that resolves a
+ * scripted code string without a network round-trip.
+ */
+type FetchCatalogPanelCode = (
+  contentHash: string,
+  artifactBaseUrl: string,
+) => Promise<string | null>;
+
+/**
+ * Mounts a sandboxed component-panel session: builds the transport (via the
+ * sibling factory), the gesture controller (paired to a host draft), and the
+ * intent executor, then renders the emitted tree through {@link PanelTreeView}
+ * with the shared prop-row expansion seam. On a fatal transport error it swaps
+ * to the default panel with a retry banner.
+ */
+function CustomComponentPanel({
+  nodes,
+  manifest,
+  store,
+  compiledCode,
+  createSandboxTransport,
+}: {
+  nodes: readonly ComponentSnapshotNode[];
+  manifest: ComponentManifest;
+  store: PaywallDesignerStoreType;
+  compiledCode: string;
+  createSandboxTransport: CreatePanelSandboxTransport;
+}) {
+  const dispatch = usePaywallDesignerActions();
+  const draft = useDesignerDraft(store);
+  const renderRow = usePropRowRenderer(nodes, store);
+
+  const nodeIds = useMemo(() => nodes.map((node) => node.id), [nodes]);
+  const identityKey = nodes[0] ? componentIdentityKey(nodes[0]) : "";
+
+  // Fatal-error state (transport death) → fall back to the default panel. It is
+  // state (not a ref) so the fallback renders reactively when the transport dies.
+  const [fatal, setFatal] = useState<string | null>(null);
+  const setFatalRef = useRef(setFatal);
+  setFatalRef.current = setFatal;
+
+  // The gesture controller + executor + transport are created once per identity
+  // (identityKey + compiledCode). A recompile or selection-key change tears them
+  // down and remounts (author state resets — documented).
+  const sessionRef = useRef<{
+    transport: PanelTransport;
+    gestures: ReturnType<typeof createPanelGestureController>;
+    executor: ReturnType<typeof createIntentExecutor>;
+    key: string;
+    code: string;
+  } | null>(null);
+
+  // The session identity is (component key + compiled code). A selection-key
+  // change or a recompile (a fresh code string) tears the session down and
+  // remounts — author state resets, documented. `compiledCode` is a store string
+  // whose reference changes on recompile, so it keys the session directly (no
+  // whole-string concat per render).
+  const sessionKey = identityKey;
+
+  // Latest getters so the executor always reads current targets/manifest.
+  const getters = useRef({ nodes, manifest });
+  getters.current = { nodes, manifest };
+
+  if (
+    sessionRef.current === null ||
+    sessionRef.current.key !== sessionKey ||
+    sessionRef.current.code !== compiledCode
+  ) {
+    sessionRef.current?.transport.dispose();
+    sessionRef.current?.gestures.dispose();
+    sessionRef.current?.executor.dispose();
+
+    const gestures = createPanelGestureController();
+    // Pair the sandbox gesture stream to a host draft (batches a drag into one
+    // undo entry). The pairing callbacks come from the SLOT's `useDesignerDraft`.
+    gestures.attachDraftPairing({
+      begin: () => draft.begin(),
+      commit: () => draft.commit(),
+      discard: () => draft.discard(),
+    });
+
+    const executor = createIntentExecutor({
+      getTargets: () => getters.current.nodes.map((node) => ({ nodeId: node.id })),
+      getManifest: () => getters.current.manifest,
+      getProducts: () => [],
+      gestures,
+      services: { toastError: () => undefined },
+      dispatch,
+      isPropBound: (propName) =>
+        propTargets(getters.current.nodes, propName).some(
+          (t) => t.storedBinding?.type === "variable-reference",
+        ),
+    });
+
+    const transport = createSandboxTransport({
+      compiledCode,
+      initialInputs: buildInputs(nodes, manifest),
+      onIntents: (raw) => executor.handle(raw),
+      onFatal: (message) => {
+        setFatalRef.current(message);
+        gestures.notifySessionDeath();
+      },
+    });
+
+    sessionRef.current = { transport, gestures, executor, key: sessionKey, code: compiledCode };
+  }
+
+  const session = sessionRef.current;
+
+  // Push fresh inputs whenever the store-derived inputs change. The transport is
+  // constructed with the first inputs, so the very first effect run is a no-op
+  // (skipped via a per-session latch) — only subsequent changes push an update.
+  const inputs = useMemo(() => buildInputs(nodes, manifest), [nodes, manifest]);
+  const initialInputsPushedRef = useRef<PanelTransport | null>(null);
+  useEffect(() => {
+    if (initialInputsPushedRef.current !== session.transport) {
+      initialInputsPushedRef.current = session.transport;
+      return;
+    }
+    session.transport.update(inputs);
+  }, [session, inputs]);
+
+  // A selection change discards any open gesture draft.
+  useEffect(() => {
+    session.gestures.notifySelectionChange();
+  }, [session, nodeIds]);
+
+  // Dispose on unmount / session-key change.
+  useEffect(
+    () => () => {
+      session.transport.dispose();
+      session.gestures.dispose();
+      session.executor.dispose();
+    },
+    [session],
+  );
+
+  const renderContext = useMemo<PanelRenderContext>(
+    () => ({
+      gestures: session.gestures,
+      expandPropField: (name) => {
+        const def = getters.current.manifest.props[name];
+        return def ? renderRow(name, def) : null;
+      },
+      expandDefaultProps: (exclude) => {
+        const excludeSet = new Set(exclude);
+        return (
+          <div className="flex flex-col gap-2">
+            {Object.entries(getters.current.manifest.props)
+              .filter(([propName]) => !excludeSet.has(propName))
+              .map(([propName, def]) => (
+                <div key={propName}>{renderRow(propName, def)}</div>
+              ))}
+          </div>
+        );
+      },
+    }),
+    [session, renderRow],
+  );
+
+  const handleRetry = useCallback(() => {
+    setFatal(null);
+    session.transport.restart();
+  }, [session]);
+
+  // Fatal transport error → default panel with a retry banner.
+  if (fatal !== null) {
+    return (
+      <DefaultComponentPanel
+        banner={
+          <div className="mb-2 flex flex-col gap-1 rounded-sm border border-destructive/40 bg-destructive/10 p-2">
+            <span className="text-destructive text-xs">
+              Custom panel failed — showing default controls
+            </span>
+            <Button className="self-start" onClick={handleRetry} size="sm" variant="outline">
+              Retry
+            </Button>
+          </div>
+        }
+        manifest={manifest}
+        nodes={nodes}
+        store={store}
+      />
+    );
+  }
+
+  return <PanelTreeView renderContext={renderContext} transport={session.transport} />;
+}
+
+// =============================================================================
+// Slot entry
+// =============================================================================
+
+/**
+ * The `componentProps` slot. Computes the shared identity key across the selected
+ * nodes; renders NOTHING when the selection is not a homogeneous set of component
+ * nodes (mixed keys or a non-component in the set — PanelStack applicability
+ * already excludes non-component selections, but same-type/different-key is
+ * handled here). Otherwise it edits all matching nodes as one batch: a custom
+ * session when the component's compiled code declares a panel, else the default
+ * host panel.
+ */
+export function ComponentPanelHost({
+  nodes,
+  createSandboxTransport = createPanelSandboxTransport,
+  fetchPanelCode = fetchCatalogPanelCode,
+}: {
+  nodes: readonly SnapshotNode[];
+  /**
+   * The sandbox-transport factory. Defaults to the real iframe transport
+   * ({@link createPanelSandboxTransport}); tests inject a fake that emits
+   * scripted snapshots without an iframe.
+   */
+  createSandboxTransport?: CreatePanelSandboxTransport;
+  /**
+   * The catalog panel-code fetcher. Defaults to {@link fetchCatalogPanelCode}
+   * (real `<artifactBaseUrl>/panel.js` fetch, deduped + size-capped); tests
+   * inject a fake that resolves scripted code without a network call.
+   */
+  fetchPanelCode?: FetchCatalogPanelCode;
+}): ReactNode {
+  const store = usePaywallDesignerStore();
+  const compiled = useStore(store, (state) => state.codeComponents.compiled);
+
+  const componentNodes = useMemo(() => nodes.filter(isComponentNode), [nodes]);
+  const homogeneous = useMemo(() => {
+    if (componentNodes.length === 0 || componentNodes.length !== nodes.length) return null;
+    const keys = new Set(componentNodes.map(componentIdentityKey));
+    return keys.size === 1 ? componentNodes : null;
+  }, [componentNodes, nodes]);
+
+  const firstNode = homogeneous?.[0];
+  const manifest = useComponentManifest(
+    (firstNode ?? nodes[0]) as ComponentSnapshotNode,
+  );
+
+  // Local code resolves synchronously from the store; catalog code is fetched
+  // async (default panel renders until it arrives, then the slot upgrades).
+  const localDefinitionId = useStore(store, (state) =>
+    firstNode !== undefined && firstNode.data.componentSource === "local"
+      ? definitionForComponentPath(state, firstNode.data.componentPath)?.id
+      : undefined,
+  );
+  const localCode = firstNode ? resolvePanelCode(firstNode, compiled, localDefinitionId) : undefined;
+  const catalogCode = useCatalogPanelCode(firstNode, fetchPanelCode);
+  const compiledCode = localCode ?? catalogCode;
+
+  if (homogeneous === null || firstNode === undefined) {
+    return null;
+  }
+
+  if (manifest !== undefined && compiledCode !== undefined) {
+    return (
+      <CustomComponentPanel
+        compiledCode={compiledCode}
+        createSandboxTransport={createSandboxTransport}
+        manifest={manifest}
+        nodes={homogeneous}
+        store={store}
+      />
+    );
+  }
+
+  return <DefaultComponentPanel manifest={manifest} nodes={homogeneous} store={store} />;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/components/override-reset-affordance.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/components/override-reset-affordance.tsx
new file mode 100644
index 000000000..48e558e05
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/components/override-reset-affordance.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/reset-affordance";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.test.tsx
new file mode 100644
index 000000000..c122c3983
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.test.tsx
@@ -0,0 +1,285 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { updateBorderStyle } from "../../../state/actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { BorderPanel } from "./border-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  seedStateOverride,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** All four side widths equal to `w`. */
+const uniformWidth = (w: number) => ({
+  borderTopWidth: w,
+  borderRightWidth: w,
+  borderBottomWidth: w,
+  borderLeftWidth: w,
+});
+
+function mount(seeds: Parameters<typeof seedNodes>[1]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  restoreWatch = watchAction(updateBorderStyle as never, calls as never);
+  harness = mountPanelDefinition(BorderPanel, doc, { nodeIds });
+  return { doc, harness, nodeIds, calls };
+}
+
+const textFields = (root: Parameters<typeof findNodesByType>[0]) =>
+  findNodesByType(root, "textField");
+const buttons = (root: Parameters<typeof findNodesByType>[0]) => findNodesByType(root, "button");
+
+describe("BorderPanel — snapshot structure", () => {
+  test("disabled border: header + enable button, no width content", () => {
+    const { harness } = mount([{ type: "view", style: { borderEnabled: false } }]);
+    const root = harness.tree().root;
+
+    expect(findNodeByType(root, "section")?.props.title).toBe("Border");
+    const actions = findNodeByType(root, "sectionActions")!;
+    expect(findNodeByType(actions, "button")?.props.icon).toBe("plus");
+    // No body: no width field, no color field.
+    expect(textFields(root)).toHaveLength(0);
+    expect(findNodeByType(root, "colorField")).toBeUndefined();
+  });
+
+  test("enabled + uniform: Width subsection (single field), expand+disable buttons, color", () => {
+    const { harness } = mount([
+      {
+        type: "view",
+        style: { borderEnabled: true, ...uniformWidth(2), borderColor: "rgba(9, 9, 9, 1)" },
+      },
+    ]);
+    const root = harness.tree().root;
+
+    expect(findNodeByType(root, "subsection")?.props.title).toBe("Width");
+    const width = textFields(root);
+    expect(width).toHaveLength(1);
+    expect(width[0]!.props.icon).toBe("square");
+    expect(width[0]!.props.value).toBe("2");
+    // Buttons in order: expand (fullscreen), disable (minus).
+    expect(buttons(root).map((b) => b.props.icon)).toEqual(["fullscreen", "minus"]);
+    expect(findNodeByType(root, "colorField")?.props.value).toBe("rgba(9, 9, 9, 1)");
+  });
+
+  test("enabled + non-uniform seeds the expanded view: 4 per-side width fields", () => {
+    const { harness } = mount([
+      {
+        type: "view",
+        style: {
+          borderEnabled: true,
+          borderTopWidth: 1,
+          borderRightWidth: 2,
+          borderBottomWidth: 3,
+          borderLeftWidth: 4,
+          borderColor: "rgba(0, 0, 0, 1)",
+        },
+      },
+    ]);
+    const root = harness.tree().root;
+    const fields = textFields(root);
+    expect(fields).toHaveLength(4);
+    // Document order: left, top, right, bottom (the 2×2 grid layout).
+    expect(fields.map((f) => f.props.icon)).toEqual([
+      "squareDashedTopSolidLeft",
+      "squareDashedTopSolid",
+      "squareDashedTopSolidRight",
+      "squareDashedTopSolidBottom",
+    ]);
+    expect(fields.map((f) => f.props.value)).toEqual(["4", "1", "2", "3"]);
+    // Collapse (vault) + disable (minus) buttons.
+    expect(buttons(root).map((b) => b.props.icon)).toEqual(["vault", "minus"]);
+  });
+});
+
+describe("BorderPanel — behavior", () => {
+  test("enable button writes borderEnabled:true; disable writes false", async () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: { borderEnabled: false } },
+    ]);
+    const enable = findNodeByType(harness.tree().root, "button")!;
+    expect(enable.props.icon).toBe("plus");
+    act(() => {
+      harness.dispatch(enable.id, "onClick");
+    });
+    await flush();
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { borderEnabled: true },
+    });
+    expect(harness.undoDepth()).toBe(1);
+
+    // The body now renders; the disable `−` button writes false.
+    const disable = buttons(harness.tree().root).find((b) => b.props.icon === "minus")!;
+    harness.dispatch(disable.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { borderEnabled: false },
+    });
+  });
+
+  test("uniform width typing is a draft writing all four sides", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: { borderEnabled: true, ...uniformWidth(1) } },
+    ]);
+    const width = textFields(harness.tree().root)[0]!;
+    harness.dispatch(width.id, "onChange", ["5"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: {
+        borderTopWidth: 5,
+        borderRightWidth: 5,
+        borderBottomWidth: 5,
+        borderLeftWidth: 5,
+      },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(width.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("expand then collapse-to-uniform is a direct write of all four sides", async () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: { borderEnabled: true, ...uniformWidth(3) } },
+    ]);
+    const expand = buttons(harness.tree().root).find((b) => b.props.icon === "fullscreen")!;
+    act(() => {
+      harness.dispatch(expand.id, "onClick");
+    });
+    await flush();
+    expect(textFields(harness.tree().root)).toHaveLength(4);
+    expect(calls).toHaveLength(0);
+
+    const collapse = buttons(harness.tree().root).find((b) => b.props.icon === "vault")!;
+    act(() => {
+      harness.dispatch(collapse.id, "onClick");
+    });
+    await flush();
+    expect(textFields(harness.tree().root)).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: {
+        borderLeftWidth: 3,
+        borderRightWidth: 3,
+        borderTopWidth: 3,
+        borderBottomWidth: 3,
+      },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("an individual side types via draft with a single-side payload", () => {
+    const { harness, nodeIds, calls } = mount([
+      {
+        type: "view",
+        style: {
+          borderEnabled: true,
+          borderTopWidth: 1,
+          borderRightWidth: 2,
+          borderBottomWidth: 3,
+          borderLeftWidth: 4,
+        },
+      },
+    ]);
+    // Left is the first field.
+    const left = textFields(harness.tree().root)[0]!;
+    harness.dispatch(left.id, "onChange", ["7"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { borderLeftWidth: 7 },
+    });
+    expect(harness.draftActive()).toBe(true);
+  });
+
+  test("color drag is a begin/commit draft gesture", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: { borderEnabled: true, borderColor: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const color = findNodeByType(harness.tree().root, "colorField")!;
+    harness.dispatch(color.id, "onDragStart");
+    expect(harness.draftActive()).toBe(true);
+    harness.dispatch(color.id, "onChange", ["rgba(1, 2, 3, 1)"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { borderColor: "rgba(1, 2, 3, 1)" },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(color.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("reset hierarchy: borderEnabled reset short-circuits width/color resets", async () => {
+    // Base disabled; the override RE-ENABLES the border AND changes its color. The
+    // body renders (effective borderEnabled === true) and both `borderEnabled` +
+    // `borderColor` are overridden, so the enabled reset must win and the color +
+    // width resets must be short-circuited.
+    const { doc, harness, nodeIds } = mount([
+      {
+        type: "view",
+        style: { borderEnabled: false, ...uniformWidth(2), borderColor: "rgba(0, 0, 0, 1)" },
+      },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { borderEnabled: true, borderColor: "rgba(5, 5, 5, 1)" },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    const resets = findNodesByType(harness.tree().root, "resetAffordance");
+    // Every SHOWN reset is a "border enabled" reset; the border color reset is
+    // present in the tree (body visible) but short-circuited to hidden.
+    const shown = resets.filter((r) => r.props.show === true);
+    expect(shown.length).toBeGreaterThan(0);
+    for (const r of shown) expect(r.props.label).toBe("border enabled");
+    const colorReset = resets.find((r) => r.props.label === "border color")!;
+    expect(colorReset.props.show).toBe(false);
+  });
+
+  test("border color override reset writes the base color back (no enabled override)", async () => {
+    const { doc, harness, nodeIds, calls } = mount([
+      { type: "view", style: { borderEnabled: true, borderColor: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { borderColor: "rgba(255, 0, 0, 1)" },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    const colorReset = findNodesByType(harness.tree().root, "resetAffordance").find(
+      (r) => r.props.label === "border color",
+    )!;
+    expect(colorReset.props.show).toBe(true);
+    harness.dispatch(colorReset.id, "onReset");
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { borderColor: "rgba(0, 0, 0, 1)" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx
new file mode 100644
index 000000000..f1ce51720
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx
@@ -0,0 +1,365 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Border` section — the wire-tree replica of
+ * {@link ../sections/border-section.BorderSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Border" → `Panel.Section title="Border"`.
+ * - When the border is disabled (and not mixed) the header hosts a `+` enable
+ *   `Button`, wrapped in the "border enabled" `OverrideResetAffordance` (all six
+ *   border keys) → `Panel.SectionActions` > `Panel.ResetAffordance` >
+ *   `Panel.Button icon="plus"` (hoisted into the header by the renderer).
+ * - When enabled (or mixed) the body renders a `Width` subsection wrapped in the
+ *   same "border enabled" reset affordance, containing: the width input(s), the
+ *   expand/collapse `Button`, and the `−` disable `Button` — then a `borderColor`
+ *   `ColorInput` in its own reset affordance.
+ * - Width is UNIFORM (one number field, `squareDashedTopSolid` icon) or EXPANDED
+ *   (four per-side fields with rotated `squareDashedTopSolid*` icons in a 2×2 grid).
+ *
+ * State + gesture discipline (identical to the old section):
+ * - `showIndividualBorder` is seeded ONLY from {@link shouldShowIndividualBorder}
+ *   — deliberately WITHOUT the mixed-key check (verbatim asymmetry vs the border-
+ *   radius panel; inventory anomaly 5). Seeded once per mount.
+ * - Width typing/scrub is a DRAFT gesture; collapse-to-uniform, enable/disable,
+ *   and expand/collapse are DIRECT writes. The color is a DRAFT gesture
+ *   (begin/commit/discard).
+ * - Reset hierarchy EXACTLY: `showBorderEnabledReset` (all six keys) SHORT-CIRCUITS
+ *   the finer resets — width-all > four individual widths > border-color are each
+ *   gated on `!showBorderEnabledReset`.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback, useState } from "react";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updateBorderStyle } from "../../../state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+interface BorderStyle {
+  borderTopWidth: number;
+  borderRightWidth: number;
+  borderBottomWidth: number;
+  borderLeftWidth: number;
+  borderColor: string;
+  borderStyle: string;
+  borderEnabled: boolean;
+}
+
+/**
+ * Whether the four side widths diverge — the seed for the expanded view.
+ * Replicated verbatim from the legacy section (kept private to preserve the
+ * flag-off byte-identity).
+ */
+function shouldShowIndividualBorder(node: BorderStyle): boolean {
+  return (
+    node.borderTopWidth !== node.borderBottomWidth ||
+    node.borderTopWidth !== node.borderLeftWidth ||
+    node.borderTopWidth !== node.borderRightWidth ||
+    node.borderBottomWidth !== node.borderLeftWidth ||
+    node.borderBottomWidth !== node.borderRightWidth ||
+    node.borderLeftWidth !== node.borderRightWidth
+  );
+}
+
+const ENABLED_KEYS = ["borderEnabled"] as const;
+const WIDTH_ALL_KEYS = [
+  "borderTopWidth",
+  "borderRightWidth",
+  "borderBottomWidth",
+  "borderLeftWidth",
+] as const;
+const LEFT_WIDTH_KEYS = ["borderLeftWidth"] as const;
+const TOP_WIDTH_KEYS = ["borderTopWidth"] as const;
+const RIGHT_WIDTH_KEYS = ["borderRightWidth"] as const;
+const BOTTOM_WIDTH_KEYS = ["borderBottomWidth"] as const;
+const COLOR_KEYS = ["borderColor"] as const;
+// The full set the "border enabled" reset restores (its onReset payload).
+const RELATED_KEYS = [
+  "borderEnabled",
+  "borderTopWidth",
+  "borderRightWidth",
+  "borderBottomWidth",
+  "borderLeftWidth",
+  "borderColor",
+] as const;
+
+/** The `Border` panel definition. */
+export function BorderPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes, style, targets, mixedKeys } = useDefinitionNodes();
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit, discard } = useDesignerDraft(store);
+
+  const node = style as BorderStyle | null;
+  const isBorderEnabledMixed = mixedKeys.has("borderEnabled");
+
+  // Seeded ONLY from the divergence helper — NO mixed-key seed (verbatim
+  // asymmetry vs the border-radius panel). Once per mount.
+  const [showIndividual, setShowIndividual] = useState<boolean>(() => {
+    if (!node) return false;
+    return shouldShowIndividualBorder(node);
+  });
+
+  const handleChange = useCallback(
+    (incoming: Partial<BorderStyle>) => {
+      dispatch(updateBorderStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<BorderStyle>) => {
+      if (!draft) begin();
+      dispatch(updateBorderStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  const collapse = useCallback(() => {
+    if (!node) return;
+    setShowIndividual(false);
+    const uniform = node.borderTopWidth;
+    handleChange({
+      borderLeftWidth: uniform,
+      borderRightWidth: uniform,
+      borderTopWidth: uniform,
+      borderBottomWidth: uniform,
+    });
+  }, [node, handleChange]);
+
+  if (!node) return null;
+
+  const active = overrideReset.isOverrideModeActive;
+  const showEnabledReset = active && overrideReset.hasOverride(ENABLED_KEYS);
+  const showWidthAllReset =
+    !showEnabledReset && active && overrideReset.hasOverride(WIDTH_ALL_KEYS);
+  const showWidthLeftReset =
+    !showEnabledReset && active && overrideReset.hasOverride(LEFT_WIDTH_KEYS);
+  const showWidthTopReset =
+    !showEnabledReset && active && overrideReset.hasOverride(TOP_WIDTH_KEYS);
+  const showWidthRightReset =
+    !showEnabledReset && active && overrideReset.hasOverride(RIGHT_WIDTH_KEYS);
+  const showWidthBottomReset =
+    !showEnabledReset && active && overrideReset.hasOverride(BOTTOM_WIDTH_KEYS);
+  const showColorReset =
+    !showEnabledReset && active && overrideReset.hasOverride(COLOR_KEYS);
+
+  const resetEnabled = () =>
+    handleChange(overrideReset.buildResetPatch(RELATED_KEYS) as Partial<BorderStyle>);
+
+  const anyWidthMixed =
+    mixedKeys.has("borderTopWidth") ||
+    mixedKeys.has("borderRightWidth") ||
+    mixedKeys.has("borderBottomWidth") ||
+    mixedKeys.has("borderLeftWidth");
+
+  return (
+    <Panel>
+      <Panel.Section title="Border">
+        {!node.borderEnabled && !isBorderEnabledMixed && (
+          <Panel.SectionActions>
+            <Panel.ResetAffordance
+              label="border enabled"
+              show={showEnabledReset}
+              onReset={resetEnabled}
+            >
+              <Panel.Button
+                icon="plus"
+                size="icon-sm"
+                onClick={() => handleChange({ borderEnabled: true })}
+              />
+            </Panel.ResetAffordance>
+          </Panel.SectionActions>
+        )}
+        {(node.borderEnabled || isBorderEnabledMixed) && (
+          <>
+            <Panel.Subsection title="Width">
+              <Panel.ResetAffordance
+                label="border enabled"
+                show={showEnabledReset}
+                onReset={resetEnabled}
+              >
+                <Panel.Row align="stretch">
+                  {!showIndividual && (
+                    <Panel.ResetAffordance
+                      label="border width"
+                      show={showWidthAllReset}
+                      onReset={() =>
+                        handleChange(
+                          overrideReset.buildResetPatch(WIDTH_ALL_KEYS) as Partial<BorderStyle>,
+                        )
+                      }
+                    >
+                      <Panel.TextField
+                        kind="number"
+                        icon="square"
+                        min={0}
+                        step={1}
+                        placeholder="Width"
+                        mixed={anyWidthMixed}
+                        value={node.borderTopWidth.toString()}
+                        onChange={(value) => {
+                          const numValue = Number(value);
+                          handleDraftChange({
+                            borderTopWidth: numValue,
+                            borderRightWidth: numValue,
+                            borderBottomWidth: numValue,
+                            borderLeftWidth: numValue,
+                          });
+                        }}
+                        onCommit={handleCommit}
+                      />
+                    </Panel.ResetAffordance>
+                  )}
+
+                  {showIndividual && (
+                    <Panel.Column>
+                      <Panel.Row align="stretch">
+                        <Panel.ResetAffordance
+                          label="border left width"
+                          show={showWidthLeftReset}
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(LEFT_WIDTH_KEYS) as Partial<BorderStyle>,
+                            )
+                          }
+                        >
+                          <Panel.TextField
+                            kind="number"
+                            icon="squareDashedTopSolidLeft"
+                            min={0}
+                            step={1}
+                            placeholder="Border Left"
+                            mixed={mixedKeys.has("borderLeftWidth")}
+                            value={node.borderLeftWidth.toString()}
+                            onChange={(value) =>
+                              handleDraftChange({ borderLeftWidth: Number(value) })
+                            }
+                            onCommit={handleCommit}
+                          />
+                        </Panel.ResetAffordance>
+                        <Panel.ResetAffordance
+                          label="border top width"
+                          show={showWidthTopReset}
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(TOP_WIDTH_KEYS) as Partial<BorderStyle>,
+                            )
+                          }
+                        >
+                          <Panel.TextField
+                            kind="number"
+                            icon="squareDashedTopSolid"
+                            min={0}
+                            step={1}
+                            placeholder="Border Top"
+                            mixed={mixedKeys.has("borderTopWidth")}
+                            value={node.borderTopWidth.toString()}
+                            onChange={(value) =>
+                              handleDraftChange({ borderTopWidth: Number(value) })
+                            }
+                            onCommit={handleCommit}
+                          />
+                        </Panel.ResetAffordance>
+                      </Panel.Row>
+                      <Panel.Row align="stretch">
+                        <Panel.ResetAffordance
+                          label="border right width"
+                          show={showWidthRightReset}
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(
+                                RIGHT_WIDTH_KEYS,
+                              ) as Partial<BorderStyle>,
+                            )
+                          }
+                        >
+                          <Panel.TextField
+                            kind="number"
+                            icon="squareDashedTopSolidRight"
+                            min={0}
+                            step={1}
+                            placeholder="Border Right"
+                            mixed={mixedKeys.has("borderRightWidth")}
+                            value={node.borderRightWidth.toString()}
+                            onChange={(value) =>
+                              handleDraftChange({ borderRightWidth: Number(value) })
+                            }
+                            onCommit={handleCommit}
+                          />
+                        </Panel.ResetAffordance>
+                        <Panel.ResetAffordance
+                          label="border bottom width"
+                          show={showWidthBottomReset}
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(
+                                BOTTOM_WIDTH_KEYS,
+                              ) as Partial<BorderStyle>,
+                            )
+                          }
+                        >
+                          <Panel.TextField
+                            kind="number"
+                            icon="squareDashedTopSolidBottom"
+                            min={0}
+                            step={1}
+                            placeholder="Border Bottom"
+                            mixed={mixedKeys.has("borderBottomWidth")}
+                            value={node.borderBottomWidth.toString()}
+                            onChange={(value) =>
+                              handleDraftChange({ borderBottomWidth: Number(value) })
+                            }
+                            onCommit={handleCommit}
+                          />
+                        </Panel.ResetAffordance>
+                      </Panel.Row>
+                    </Panel.Column>
+                  )}
+
+                  <Panel.Button
+                    icon={showIndividual ? "vault" : "fullscreen"}
+                    size="icon-sm"
+                    onClick={() => (showIndividual ? collapse() : setShowIndividual(true))}
+                  />
+                  <Panel.Button
+                    icon="minus"
+                    size="icon-sm"
+                    onClick={() => handleChange({ borderEnabled: false })}
+                  />
+                </Panel.Row>
+              </Panel.ResetAffordance>
+            </Panel.Subsection>
+            <Panel.ResetAffordance
+              label="border color"
+              show={showColorReset}
+              onReset={() =>
+                handleChange(overrideReset.buildResetPatch(COLOR_KEYS) as Partial<BorderStyle>)
+              }
+            >
+              <Panel.ColorField
+                value={node.borderColor}
+                mixed={mixedKeys.has("borderColor")}
+                onChange={(value) => handleChange({ borderColor: value })}
+                onCommit={commit}
+                onDiscard={discard}
+                onDragStart={begin}
+              />
+            </Panel.ResetAffordance>
+          </>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.test.tsx
new file mode 100644
index 000000000..681bc2654
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.test.tsx
@@ -0,0 +1,229 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { updateBorderRadiusStyle } from "../../../state/actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { BorderRadiusPanel } from "./border-radius-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  seedStateOverride,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** A view node with all four corners set uniformly to `r`. */
+const uniform = (r: number) => ({
+  borderTopLeftRadius: r,
+  borderTopRightRadius: r,
+  borderBottomRightRadius: r,
+  borderBottomLeftRadius: r,
+});
+
+function mount(seeds: Parameters<typeof seedNodes>[1]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  restoreWatch = watchAction(updateBorderRadiusStyle as never, calls as never);
+  harness = mountPanelDefinition(BorderRadiusPanel, doc, { nodeIds });
+  return { doc, harness, nodeIds, calls };
+}
+
+/** The number text fields in document order. */
+const textFields = (root: Parameters<typeof findNodesByType>[0]) =>
+  findNodesByType(root, "textField");
+/** The expand/collapse button (the only button in this panel). */
+const toggleButton = (root: Parameters<typeof findNodesByType>[0]) =>
+  findNodesByType(root, "button")[0]!;
+
+describe("BorderRadiusPanel — snapshot structure", () => {
+  test("uniform corners: single Radius field (scan icon) + expand button", () => {
+    const { harness } = mount([{ type: "view", style: uniform(8) }]);
+    const root = harness.tree().root;
+
+    expect(findNodeByType(root, "section")?.props.title).toBe("Border Radius");
+    const fields = textFields(root);
+    expect(fields).toHaveLength(1);
+    expect(fields[0]!.props.icon).toBe("scan");
+    expect(fields[0]!.props.value).toBe("8");
+    expect(toggleButton(root).props.icon).toBe("fullscreen");
+    // Uniform reset affordance is present but hidden (no override active).
+    expect(findNodeByType(root, "resetAffordance")?.props.show).toBe(false);
+  });
+
+  test("non-uniform corners seed the expanded view: 4 fields with corner icons", () => {
+    const { harness } = mount([
+      {
+        type: "view",
+        style: {
+          borderTopLeftRadius: 1,
+          borderTopRightRadius: 2,
+          borderBottomRightRadius: 3,
+          borderBottomLeftRadius: 4,
+        },
+      },
+    ]);
+    const root = harness.tree().root;
+    const fields = textFields(root);
+    expect(fields).toHaveLength(4);
+    expect(fields.map((f) => f.props.icon)).toEqual([
+      "squareRoundCornerTopLeft",
+      "squareRoundCorner",
+      "squareRoundCornerBottomLeft",
+      "squareRoundCornerBottomRight",
+    ]);
+    expect(fields.map((f) => f.props.value)).toEqual(["1", "2", "4", "3"]);
+    // Collapse button (vault icon) in the expanded view.
+    expect(toggleButton(root).props.icon).toBe("vault");
+  });
+
+  test("multi-select with a mixed corner seeds expanded + surfaces the mixed flag", () => {
+    const { harness } = mount([
+      { type: "view", style: uniform(4) },
+      { type: "view", style: uniform(10) },
+    ]);
+    const root = harness.tree().root;
+    // Any corner mixed → expanded seed; each field reflects its own mixed flag.
+    expect(textFields(root)).toHaveLength(4);
+    const topLeft = textFields(root)[0]!;
+    expect(topLeft.props.mixed).toBe(true);
+  });
+});
+
+describe("BorderRadiusPanel — behavior", () => {
+  test("uniform typing is a draft that writes all four corners; commit ends it", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "view", style: uniform(0) }]);
+    const field = textFields(harness.tree().root)[0]!;
+
+    expect(harness.draftActive()).toBe(false);
+    harness.dispatch(field.id, "onChange", ["12"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: {
+        borderTopLeftRadius: 12,
+        borderTopRightRadius: 12,
+        borderBottomRightRadius: 12,
+        borderBottomLeftRadius: 12,
+      },
+    });
+    expect(harness.undoDepth()).toBe(0);
+
+    harness.dispatch(field.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("expand then collapse-to-uniform is a direct write of all four corners", async () => {
+    const { harness, nodeIds, calls } = mount([{ type: "view", style: uniform(6) }]);
+    // Expand: local state flips to the 4-field grid (a re-emit, no action).
+    act(() => {
+      harness.dispatch(toggleButton(harness.tree().root).id, "onClick");
+    });
+    await flush();
+    expect(textFields(harness.tree().root)).toHaveLength(4);
+    expect(calls).toHaveLength(0);
+
+    // Collapse: a DIRECT write of all four corners from the top-left value.
+    act(() => {
+      harness.dispatch(toggleButton(harness.tree().root).id, "onClick");
+    });
+    await flush();
+    expect(textFields(harness.tree().root)).toHaveLength(1);
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: {
+        borderTopLeftRadius: 6,
+        borderTopRightRadius: 6,
+        borderBottomRightRadius: 6,
+        borderBottomLeftRadius: 6,
+      },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("an individual corner types via draft with a single-corner payload", async () => {
+    const { harness, nodeIds, calls } = mount([
+      {
+        type: "view",
+        style: {
+          borderTopLeftRadius: 1,
+          borderTopRightRadius: 2,
+          borderBottomRightRadius: 3,
+          borderBottomLeftRadius: 4,
+        },
+      },
+    ]);
+    const bottomRight = textFields(harness.tree().root)[3]!;
+    harness.dispatch(bottomRight.id, "onChange", ["9"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { borderBottomRightRadius: 9 },
+    });
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("override-active uniform reset writes the base value back", async () => {
+    const { doc, harness, nodeIds, calls } = mount([{ type: "view", style: uniform(8) }]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, { style: uniform(20) });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    const reset = findNodeByType(harness.tree().root, "resetAffordance")!;
+    expect(reset.props.label).toBe("border radius");
+    expect(reset.props.show).toBe(true);
+    // The uniform field now reflects the overridden value.
+    expect(textFields(harness.tree().root)[0]!.props.value).toBe("20");
+
+    harness.dispatch(reset.id, "onReset");
+    // Resets all four corners to the base value (buildResetPatch over ALL_KEYS).
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: uniform(8),
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("expanded view state persists across a store-driven re-emit", async () => {
+    const { harness, nodeIds } = mount([
+      {
+        type: "view",
+        style: {
+          borderTopLeftRadius: 1,
+          borderTopRightRadius: 2,
+          borderBottomRightRadius: 3,
+          borderBottomLeftRadius: 4,
+        },
+      },
+    ]);
+    // Seeded expanded (non-uniform). Drive an unrelated store change to force a
+    // re-emit; the local `showIndividual` state must survive.
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, null);
+    });
+    await flush();
+    expect(textFields(harness.tree().root)).toHaveLength(4);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx
new file mode 100644
index 000000000..621579c40
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx
@@ -0,0 +1,305 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Border Radius` section — the wire-tree
+ * replica of {@link ../sections/border-radius-section.BorderRadiusSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Border Radius" → `Panel.Section title="Border Radius"`.
+ * - A single `PanelSubSection` whose content is a `flex-row` of the radius
+ *   input(s) + the expand/collapse button → `Panel.Subsection` > `Panel.Row`.
+ * - UNIFORM mode: one number `TextInput` (`scan` icon), wrapped in an
+ *   `OverrideResetAffordance` over all four corner keys →
+ *   `Panel.ResetAffordance` > `Panel.TextField kind="number" icon="scan"`.
+ * - EXPANDED mode: a 2×2 grid of four number `TextInput`s with per-corner rotated
+ *   `squareRoundCorner` icons, each wrapped in its own corner reset affordance →
+ *   two `Panel.Row`s inside a `Panel.Column`.
+ * - The expand/collapse `Button` (`fullscreen` / `vault` icon) →
+ *   `Panel.Button icon="fullscreen"|"vault"` sitting as the row's last flex item.
+ *
+ * State + gesture discipline (identical to the old section):
+ * - `showIndividualBorderRadius` is a one-time-seeded local `useState`: `true`
+ *   when any of the four corner keys is mixed across a multi-selection OR the
+ *   node already has non-uniform corners ({@link shouldShowIndividualBorderRadius}).
+ *   Definitions mount keyed by `sectionId` (survive selection changes), so the
+ *   initializer runs once per mount — verbatim parity with `key={section.id}`.
+ * - Numeric typing/scrub is a DRAFT gesture (begin-on-first-change → live write →
+ *   `onCommit` → commit); collapse-to-uniform is a DIRECT write of all four
+ *   corners (one undo entry).
+ * - Five reset affordances: the uniform one (all four keys, uniform mode) plus one
+ *   per corner (expanded mode), each shown when the override reset context is
+ *   active and the key(s) are overridden, resetting via `buildResetPatch`.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback, useState } from "react";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updateBorderRadiusStyle } from "../../../state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+interface BorderRadiusStyle {
+  borderTopLeftRadius: number;
+  borderTopRightRadius: number;
+  borderBottomRightRadius: number;
+  borderBottomLeftRadius: number;
+}
+
+/**
+ * Whether the four corners diverge (any pair differs) — the seed for the
+ * expanded/individual view. Replicated verbatim from the legacy section (a
+ * module-local helper there, kept private to preserve the flag-off byte-identity).
+ */
+function shouldShowIndividualBorderRadius(node: BorderRadiusStyle): boolean {
+  return (
+    node.borderTopLeftRadius !== node.borderTopRightRadius ||
+    node.borderTopLeftRadius !== node.borderBottomRightRadius ||
+    node.borderTopLeftRadius !== node.borderBottomLeftRadius ||
+    node.borderTopRightRadius !== node.borderBottomRightRadius ||
+    node.borderTopRightRadius !== node.borderBottomLeftRadius ||
+    node.borderBottomRightRadius !== node.borderBottomLeftRadius
+  );
+}
+
+const ALL_KEYS = [
+  "borderTopLeftRadius",
+  "borderTopRightRadius",
+  "borderBottomRightRadius",
+  "borderBottomLeftRadius",
+] as const;
+const TOP_LEFT_KEYS = ["borderTopLeftRadius"] as const;
+const TOP_RIGHT_KEYS = ["borderTopRightRadius"] as const;
+const BOTTOM_LEFT_KEYS = ["borderBottomLeftRadius"] as const;
+const BOTTOM_RIGHT_KEYS = ["borderBottomRightRadius"] as const;
+
+/** The `Border Radius` panel definition. */
+export function BorderRadiusPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes, style, targets, mixedKeys } = useDefinitionNodes();
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const node = style as BorderRadiusStyle | null;
+
+  // One-time seed: expanded when any corner key is mixed across a multi-selection
+  // or the node already has non-uniform corners. Runs once per mount (definitions
+  // are keyed by sectionId and survive selection changes), matching the old
+  // `useState(initializer)` under `key={section.id}`.
+  const [showIndividual, setShowIndividual] = useState<boolean>(() => {
+    if (!node) return false;
+    if (
+      mixedKeys.has("borderTopLeftRadius") ||
+      mixedKeys.has("borderTopRightRadius") ||
+      mixedKeys.has("borderBottomRightRadius") ||
+      mixedKeys.has("borderBottomLeftRadius")
+    ) {
+      return true;
+    }
+    return shouldShowIndividualBorderRadius(node);
+  });
+
+  const handleChange = useCallback(
+    (incoming: Partial<BorderRadiusStyle>) => {
+      dispatch(updateBorderRadiusStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<BorderRadiusStyle>) => {
+      if (!draft) begin();
+      dispatch(updateBorderRadiusStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  const collapse = useCallback(() => {
+    if (!node) return;
+    setShowIndividual(false);
+    const uniform = node.borderTopLeftRadius;
+    // Collapse-to-uniform is a DIRECT write of all four corners (one undo entry).
+    handleChange({
+      borderTopLeftRadius: uniform,
+      borderTopRightRadius: uniform,
+      borderBottomRightRadius: uniform,
+      borderBottomLeftRadius: uniform,
+    });
+  }, [node, handleChange]);
+
+  if (!node) return null;
+
+  const active = overrideReset.isOverrideModeActive;
+  const anyCornerMixed =
+    mixedKeys.has("borderTopLeftRadius") ||
+    mixedKeys.has("borderTopRightRadius") ||
+    mixedKeys.has("borderBottomRightRadius") ||
+    mixedKeys.has("borderBottomLeftRadius");
+
+  return (
+    <Panel>
+      <Panel.Section title="Border Radius">
+        <Panel.Subsection>
+          <Panel.Row align="stretch">
+            {!showIndividual && (
+              <Panel.ResetAffordance
+                label="border radius"
+                show={active && overrideReset.hasOverride(ALL_KEYS)}
+                onReset={() =>
+                  handleChange(
+                    overrideReset.buildResetPatch(ALL_KEYS) as Partial<BorderRadiusStyle>,
+                  )
+                }
+              >
+                <Panel.TextField
+                  kind="number"
+                  icon="scan"
+                  min={0}
+                  max={100}
+                  step={1}
+                  placeholder="Radius"
+                  mixed={anyCornerMixed}
+                  value={node.borderTopLeftRadius.toString()}
+                  onChange={(value) => {
+                    const numValue = Number(value);
+                    handleDraftChange({
+                      borderTopLeftRadius: numValue,
+                      borderTopRightRadius: numValue,
+                      borderBottomRightRadius: numValue,
+                      borderBottomLeftRadius: numValue,
+                    });
+                  }}
+                  onCommit={handleCommit}
+                />
+              </Panel.ResetAffordance>
+            )}
+
+            {showIndividual && (
+              <Panel.Column>
+                <Panel.Row align="stretch">
+                  <Panel.ResetAffordance
+                    label="top left border radius"
+                    show={active && overrideReset.hasOverride(TOP_LEFT_KEYS)}
+                    onReset={() =>
+                      handleChange(
+                        overrideReset.buildResetPatch(TOP_LEFT_KEYS) as Partial<BorderRadiusStyle>,
+                      )
+                    }
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="squareRoundCornerTopLeft"
+                      min={0}
+                      max={100}
+                      step={1}
+                      placeholder="Top Left"
+                      mixed={mixedKeys.has("borderTopLeftRadius")}
+                      value={node.borderTopLeftRadius.toString()}
+                      onChange={(value) =>
+                        handleDraftChange({ borderTopLeftRadius: Number(value) })
+                      }
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                  <Panel.ResetAffordance
+                    label="top right border radius"
+                    show={active && overrideReset.hasOverride(TOP_RIGHT_KEYS)}
+                    onReset={() =>
+                      handleChange(
+                        overrideReset.buildResetPatch(TOP_RIGHT_KEYS) as Partial<BorderRadiusStyle>,
+                      )
+                    }
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="squareRoundCorner"
+                      min={0}
+                      max={100}
+                      step={1}
+                      placeholder="Top Right"
+                      mixed={mixedKeys.has("borderTopRightRadius")}
+                      value={node.borderTopRightRadius.toString()}
+                      onChange={(value) =>
+                        handleDraftChange({ borderTopRightRadius: Number(value) })
+                      }
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                </Panel.Row>
+                <Panel.Row align="stretch">
+                  <Panel.ResetAffordance
+                    label="bottom left border radius"
+                    show={active && overrideReset.hasOverride(BOTTOM_LEFT_KEYS)}
+                    onReset={() =>
+                      handleChange(
+                        overrideReset.buildResetPatch(
+                          BOTTOM_LEFT_KEYS,
+                        ) as Partial<BorderRadiusStyle>,
+                      )
+                    }
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="squareRoundCornerBottomLeft"
+                      min={0}
+                      max={100}
+                      step={1}
+                      placeholder="Bottom Left"
+                      mixed={mixedKeys.has("borderBottomLeftRadius")}
+                      value={node.borderBottomLeftRadius.toString()}
+                      onChange={(value) =>
+                        handleDraftChange({ borderBottomLeftRadius: Number(value) })
+                      }
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                  <Panel.ResetAffordance
+                    label="bottom right border radius"
+                    show={active && overrideReset.hasOverride(BOTTOM_RIGHT_KEYS)}
+                    onReset={() =>
+                      handleChange(
+                        overrideReset.buildResetPatch(
+                          BOTTOM_RIGHT_KEYS,
+                        ) as Partial<BorderRadiusStyle>,
+                      )
+                    }
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="squareRoundCornerBottomRight"
+                      min={0}
+                      max={100}
+                      step={1}
+                      placeholder="Bottom Right"
+                      mixed={mixedKeys.has("borderBottomRightRadius")}
+                      value={node.borderBottomRightRadius.toString()}
+                      onChange={(value) =>
+                        handleDraftChange({ borderBottomRightRadius: Number(value) })
+                      }
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                </Panel.Row>
+              </Panel.Column>
+            )}
+
+            <Panel.Button
+              icon={showIndividual ? "vault" : "fullscreen"}
+              size="icon-sm"
+              onClick={() => (showIndividual ? collapse() : setShowIndividual(true))}
+            />
+          </Panel.Row>
+        </Panel.Subsection>
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.test.tsx
new file mode 100644
index 000000000..bd3456266
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.test.tsx
@@ -0,0 +1,230 @@
+// @vitest-environment jsdom
+
+import type {
+  ComponentAction,
+  ComponentManifest,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { ComponentBoundAction } from "@voidhash/mimic-schema";
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test, vi } from "vite-plus/test";
+
+// The action editor's product payload editor reads router params; outside a
+// route `useParams({strict:false})` returns `{}`.
+vi.mock("@tanstack/react-router", () => ({ useParams: () => ({}) }));
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import {
+  removeComponentActionBinding,
+  setComponentActionBinding,
+} from "../../../state/actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { ComponentActionsPanel } from "./component-actions-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedCompiledComponent,
+  seedComponentCatalog,
+  seedComponentNode,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+const restore: (() => void)[] = [];
+afterEach(() => {
+  while (restore.length) restore.pop()!();
+  harness?.dispose();
+  harness = undefined;
+});
+
+const CONTENT_HASH = "hash-actions-v1";
+
+/** A manifest carrying the given named actions (each with the given payload fields). */
+function manifestWithActions(
+  actions: Record<string, readonly string[]>,
+): ComponentManifest {
+  const built: Record<string, ComponentAction> = {};
+  for (const [name, fields] of Object.entries(actions)) {
+    built[name] = {
+      payload: Object.fromEntries(fields.map((f) => [f, { kind: "string" } as const])),
+    };
+  }
+  return { manifestVersion: 2, props: {}, actions: built };
+}
+
+/** Mirrors a manifest into the catalog for a node pinned to CONTENT_HASH. */
+function seedCatalogManifest(store: PanelHarness["store"], manifest: ComponentManifest) {
+  seedComponentCatalog(store, {
+    latest: {
+      artifactBaseUrl: "https://example.test/card",
+      contentHash: CONTENT_HASH,
+      createdAt: new Date(0),
+      hasPanel: false,
+      manifest,
+      previewStates: ["default"],
+      slug: "card",
+      version: 1,
+    },
+    latestVersion: 1,
+    slug: "card",
+    title: "Card",
+  });
+}
+
+describe("ComponentActionsPanel — manifest resolution", () => {
+  test("not in catalog → the muted explainer renders (no rows)", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: CONTENT_HASH,
+    });
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    await flush();
+
+    const text = findNodeByType(harness.tree().root, "text")!;
+    expect(text.props.tone).toBe("muted");
+    expect(String(text.props.content)).toContain("not in the project catalog");
+    expect(findNodeByType(harness.tree().root, "actionEditorField")).toBeUndefined();
+  });
+
+  test("manifest present with ZERO actions → the panel renders nothing", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: CONTENT_HASH,
+    });
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    seedCatalogManifest(harness.store, manifestWithActions({}));
+    await flush();
+
+    expect(findNodeByType(harness.tree().root, "section")).toBeUndefined();
+    expect(findNodeByType(harness.tree().root, "text")).toBeUndefined();
+  });
+
+  test("local component resolves its manifest from the compiled artifact", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "local-card",
+      componentVersion: 0,
+      contentHash: "",
+      localComponentId: "local-1",
+    });
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    seedCompiledComponent(harness.store, "local-1", manifestWithActions({ onPress: [] }));
+    await flush();
+
+    // A row rendered (an action editor exists) → the local manifest resolved.
+    const button = findNodesByType(harness.tree().root, "button").find((b) =>
+      String(b.props.label).startsWith("onPress"),
+    );
+    expect(button).toBeDefined();
+    expect(findNodeByType(harness.tree().root, "actionEditorField")).toBeDefined();
+  });
+});
+
+describe("ComponentActionsPanel — rows + payloadFields", () => {
+  test("a row renders the stored bound action and its type label; unbound → None", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      actionBindings: [{ action: { type: "close-paywall" }, name: "onPress" }],
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: CONTENT_HASH,
+    });
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    seedCatalogManifest(harness.store, manifestWithActions({ onPress: [], onDismiss: [] }));
+    await flush();
+
+    const labels = findNodesByType(harness.tree().root, "button").map((b) => b.props.label);
+    // Stored close-paywall → its label; unbound onDismiss → None.
+    expect(labels).toContain("onPress  Close paywall");
+    expect(labels).toContain("onDismiss  None");
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    expect((editor.props.value as { type: string }).type).toBe("close-paywall");
+  });
+
+  test("payloadFields flow from the manifest action onto the wire node", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: CONTENT_HASH,
+    });
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    seedCatalogManifest(harness.store, manifestWithActions({ onPress: ["productId", "quantity"] }));
+    await flush();
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    expect(editor.props.payloadFields).toEqual(["productId", "quantity"]);
+  });
+});
+
+describe("ComponentActionsPanel — writes", () => {
+  test("a non-none action SETS the binding via setComponentActionBinding", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: CONTENT_HASH,
+    });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(setComponentActionBinding as never, calls as never));
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    seedCatalogManifest(harness.store, manifestWithActions({ onPress: [] }));
+    await flush();
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    const action: ComponentBoundAction = { type: "close-paywall" };
+    harness.dispatch(editor.id, "onChange", [action]);
+    expect(calls.at(-1)!.params).toEqual({ action, actionName: "onPress", nodeId });
+    // A direct undoable write adds exactly one undo entry.
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("a none action REMOVES the binding only when a stored entry exists", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      actionBindings: [{ action: { type: "close-paywall" }, name: "onPress" }],
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: CONTENT_HASH,
+    });
+    const removeCalls: ActionCall<Record<string, unknown>>[] = [];
+    const setCalls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(removeComponentActionBinding as never, removeCalls as never));
+    restore.push(watchAction(setComponentActionBinding as never, setCalls as never));
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    seedCatalogManifest(harness.store, manifestWithActions({ onPress: [] }));
+    await flush();
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    harness.dispatch(editor.id, "onChange", [{ type: "none" }]);
+    expect(removeCalls.at(-1)!.params).toEqual({ actionName: "onPress", nodeId });
+    expect(setCalls).toHaveLength(0);
+  });
+
+  test("a none action on an UNBOUND row removes nothing (no dispatch)", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: CONTENT_HASH,
+    });
+    const removeCalls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(removeComponentActionBinding as never, removeCalls as never));
+    harness = mountPanelDefinition(ComponentActionsPanel, doc, { nodeIds: [nodeId] });
+    seedCatalogManifest(harness.store, manifestWithActions({ onPress: [] }));
+    await flush();
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    harness.dispatch(editor.id, "onChange", [{ type: "none" }]);
+    expect(removeCalls).toHaveLength(0);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx
new file mode 100644
index 000000000..93dbe727e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx
@@ -0,0 +1,173 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Component actions` section — the wire-tree
+ * replica of {@link ../sections/component-actions-section.ComponentActionsSection}
+ * (+ its `ComponentActionRow`).
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Actions" → `Panel.Section title="Actions"`.
+ * - Manifest missing (not in the project catalog) → a `Panel.Text` explainer
+ *   exactly as the old section renders it. Manifest present with ZERO actions →
+ *   the whole panel renders nothing (an empty `<Panel/>`), matching the old
+ *   section's `return null`.
+ * - One `Panel.Row` per manifest action: a controlled `Panel.Popover` (open when
+ *   `openActionName === name`) over a trigger `Panel.Button` (the action name +
+ *   its current bound-action-type label) and a `Panel.ActionEditorField` in the
+ *   content.
+ *
+ * Manifest resolution is DUAL-SOURCE via {@link useComponentManifest} (local
+ * compiled artifact OR pinned catalog version), fixing the old section's
+ * catalog-only bug so local component instances resolve correctly.
+ *
+ * Behavior (identical to the old section):
+ * - Each row's stored entry is `findComponentActionEntry(node.data.actionBindings,
+ *   name)`, decoded via `componentBoundActionFromRaw`, defaulting to the
+ *   `UNBOUND_ACTION` (`{type:"none"}`).
+ * - The editor is passed `variables`/`productVariables` (product subset) AND
+ *   `payloadFields = Object.keys(manifestAction.payload)` — unlike interactions,
+ *   which never offer action-payload sources.
+ * - `onChange`: a `none` action REMOVES the binding (via
+ *   `removeComponentActionBinding`) but only when a stored entry exists; any other
+ *   action SETS it via `setComponentActionBinding` — exact old branching.
+ *
+ * PARITY COMPROMISES (wire limitations, not the section's intent):
+ * - The trigger `Panel.Button` label is a plain string `"<name>  <type>"` rather
+ *   than the old name + `ChevronRightIcon` + muted type spans — the wire button
+ *   carries one label, no inline glyph between two text runs.
+ * - The old popover's `PopoverHeader` (title + close button) is dropped: the wire
+ *   `popoverContent` has no header slot, and the editor is reachable directly.
+ */
+import type { ComponentAction } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { ComponentBoundAction } from "@voidhash/mimic-schema";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import type { PanelJsonValue } from "@voidhash/paywalls/schema";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { useComponentManifest } from "../../../hooks/use-component-manifest";
+import { ACTION_TYPE_LABELS } from "../../../panel-kit/action-editor";
+import {
+  removeComponentActionBinding,
+  setComponentActionBinding,
+} from "../../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../../state/designer-store";
+import {
+  collectAncestorVariables,
+  toLabeledVariables,
+} from "../../../state/utils/ancestor-variables";
+import {
+  componentBoundActionFromRaw,
+  findComponentActionEntry,
+} from "../../../state/utils/component-prop-values";
+import { selectDocumentRoot } from "../../../state/utils/document-root";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** The default action shown for a manifest action with no stored binding. */
+const UNBOUND_ACTION: ComponentBoundAction = { type: "none" };
+
+/** The `Component actions` panel definition. */
+export function ComponentActionsPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes } = useDefinitionNodes();
+  const documentRoot = useStore(store, selectDocumentRoot);
+
+  const node = nodes[0] as ComponentSnapshotNode | undefined;
+  const manifest = useComponentManifest(
+    (node ?? { data: {} }) as ComponentSnapshotNode,
+  );
+
+  const nodeId = node?.id ?? "";
+  const variables = useMemo(
+    () => toLabeledVariables(collectAncestorVariables(documentRoot, nodeId), nodeId),
+    [documentRoot, nodeId],
+  );
+  const productVariables = useMemo(
+    () => variables.filter((v) => v.value.key === "product"),
+    [variables],
+  );
+
+  const actionEntries = useMemo(
+    () => Object.entries(manifest?.actions ?? {}),
+    [manifest],
+  );
+
+  const [openActionName, setOpenActionName] = useState<string | null>(null);
+
+  if (!node) return <Panel />;
+
+  // Manifest present with zero actions → the whole section renders nothing
+  // (matching the old section's `return null`).
+  if (manifest !== undefined && actionEntries.length === 0) {
+    return <Panel />;
+  }
+
+  const handleChange = (actionName: string, action: ComponentBoundAction) => {
+    if (action.type === "none") {
+      const stored = findComponentActionEntry(node.data.actionBindings, actionName);
+      if (stored !== undefined) {
+        dispatch(removeComponentActionBinding)({ actionName, nodeId });
+      }
+      return;
+    }
+    dispatch(setComponentActionBinding)({ action, actionName, nodeId });
+  };
+
+  return (
+    <Panel>
+      <Panel.Section title="Actions">
+        {manifest === undefined ? (
+          <Panel.Text
+            tone="muted"
+            content="This version is not in the project catalog, so its actions can't be bound."
+          />
+        ) : (
+          <Panel.Column gap="sm">
+            {actionEntries.map(([actionName, manifestAction]) => {
+              const storedEntry = findComponentActionEntry(
+                node.data.actionBindings,
+                actionName,
+              );
+              const boundAction =
+                (storedEntry === undefined
+                  ? undefined
+                  : componentBoundActionFromRaw(storedEntry.raw)) ?? UNBOUND_ACTION;
+              const payloadFields = Object.keys(
+                (manifestAction as ComponentAction).payload,
+              );
+              return (
+                <Panel.Row key={actionName} align="center">
+                  <Panel.Popover
+                    open={openActionName === actionName}
+                    onOpenChange={(open) => setOpenActionName(open ? actionName : null)}
+                  >
+                    <Panel.PopoverTrigger>
+                      <Panel.Button
+                        label={`${actionName}  ${ACTION_TYPE_LABELS[boundAction.type]}`}
+                        size="sm"
+                      />
+                    </Panel.PopoverTrigger>
+                    <Panel.PopoverContent align="start" side="left">
+                      <Panel.ActionEditorField
+                        value={boundAction as unknown as PanelJsonValue}
+                        variables={variables as unknown as PanelJsonValue}
+                        productVariables={productVariables as unknown as PanelJsonValue}
+                        payloadFields={payloadFields}
+                        onChange={(action) =>
+                          handleChange(actionName, action as unknown as ComponentBoundAction)
+                        }
+                      />
+                    </Panel.PopoverContent>
+                  </Panel.Popover>
+                </Panel.Row>
+              );
+            })}
+          </Panel.Column>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.test.tsx
new file mode 100644
index 000000000..ca7068ceb
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.test.tsx
@@ -0,0 +1,329 @@
+// @vitest-environment jsdom
+
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import {
+  applyComponentVersionUpdate,
+  setComponentPreviewStateSelection,
+  updateComponentNode,
+} from "../../../state/actions";
+import type { ComponentCatalogVersion } from "../../../state/designer-store-state";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { ComponentSettingsPanel } from "./component-settings-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedComponentCatalog,
+  seedComponentNode,
+  selectComponentPreviewState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+const restore: (() => void)[] = [];
+afterEach(() => {
+  while (restore.length) restore.pop()!();
+  harness?.dispose();
+  harness = undefined;
+});
+
+const HASH_V1 = "hash-card-v1";
+const HASH_V2 = "hash-card-v2";
+
+const EMPTY_MANIFEST: ComponentManifest = { manifestVersion: 2, props: {} };
+
+/** A catalog version detail keyed by its contentHash + version + preview states. */
+function version(
+  contentHash: string,
+  v: number,
+  previewStates: readonly string[],
+  manifest: ComponentManifest = EMPTY_MANIFEST,
+): ComponentCatalogVersion {
+  return {
+    artifactBaseUrl: "https://example.test/card",
+    contentHash,
+    createdAt: new Date(0),
+    hasPanel: false,
+    manifest,
+    previewStates,
+    slug: "card",
+    version: v,
+  };
+}
+
+/**
+ * Seeds a single-version catalog (latest == v1, pinned at HASH_V1) with the given
+ * preview states, so a node pinned to HASH_V1 resolves its preview states.
+ */
+function seedSingleVersionCatalog(store: PanelHarness["store"], previewStates: readonly string[]) {
+  seedComponentCatalog(store, {
+    latest: version(HASH_V1, 1, previewStates),
+    latestVersion: 1,
+    slug: "card",
+    title: "Card",
+  });
+}
+
+describe("ComponentSettingsPanel — display + rename", () => {
+  test("renders the name field, component slug, and version label", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+      name: "Hero card",
+    });
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, { nodeIds: [nodeId] });
+    await flush();
+
+    expect(findNodeByType(harness.tree().root, "section")?.props.title).toBe("Component");
+    const nameField = findNodeByType(harness.tree().root, "textField")!;
+    expect(nameField.props.value).toBe("Hero card");
+    const texts = findNodesByType(harness.tree().root, "text").map((t) => t.props.content);
+    expect(texts).toContain("card");
+    expect(texts).toContain("v1");
+  });
+
+  test("editing the name writes updateComponentNode with the new name", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+      name: "Hero card",
+    });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(updateComponentNode as never, calls as never));
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, { nodeIds: [nodeId] });
+    await flush();
+
+    const nameField = findNodeByType(harness.tree().root, "textField")!;
+    harness.dispatch(nameField.id, "onChange", ["Renamed"]);
+    expect(calls.at(-1)!.params).toEqual({ id: nodeId, updates: { name: "Renamed" } });
+  });
+});
+
+describe("ComponentSettingsPanel — builtin instance", () => {
+  test("shows the registry display name and no catalog version/update affordance", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      builtin: true,
+      componentSlug: "sample-badge",
+      componentVersion: 0,
+      contentHash: "",
+      name: "Badge",
+    });
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, { nodeIds: [nodeId] });
+    await flush();
+
+    const texts = findNodesByType(harness.tree().root, "text").map((t) => t.props.content);
+    // The "Component" row shows the registry display name, not the raw slug.
+    expect(texts).toContain("Sample Badge");
+    expect(texts).not.toContain("sample-badge");
+    // Builtins are unpinned — no version row (no `v…` text) leaks through.
+    expect(texts.some((content) => /^v/.test(String(content)))).toBe(false);
+    // No catalog-only update affordance.
+    expect(
+      findNodesByType(harness.tree().root, "button").some((b) =>
+        String(b.props.label).startsWith("Update to"),
+      ),
+    ).toBe(false);
+  });
+});
+
+describe("ComponentSettingsPanel — preview state", () => {
+  test("no preview-state controls when the pinned version has ≤1 state", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+    });
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, { nodeIds: [nodeId] });
+    seedSingleVersionCatalog(harness.store, ["default"]);
+    await flush();
+
+    expect(findNodeByType(harness.tree().root, "subsection")).toBeUndefined();
+  });
+
+  test("selecting a state writes the EPHEMERAL selection (no persist)", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+    });
+    const selCalls: ActionCall<Record<string, unknown>>[] = [];
+    const updateCalls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(setComponentPreviewStateSelection as never, selCalls as never));
+    restore.push(watchAction(updateComponentNode as never, updateCalls as never));
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, { nodeIds: [nodeId] });
+    seedSingleVersionCatalog(harness.store, ["default", "loading"]);
+    await flush();
+
+    const loading = findNodesByType(harness.tree().root, "button").find(
+      (b) => b.props.label === "loading",
+    )!;
+    harness.dispatch(loading.id, "onClick");
+    expect(selCalls.at(-1)!.params).toEqual({ nodeId, previewState: "loading" });
+    // Selecting is ephemeral — no persist write.
+    expect(updateCalls).toHaveLength(0);
+  });
+
+  test("Set as default appears only when differing and PERSISTS then clears the selection", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+    });
+    const selCalls: ActionCall<Record<string, unknown>>[] = [];
+    const updateCalls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(setComponentPreviewStateSelection as never, selCalls as never));
+    restore.push(watchAction(updateComponentNode as never, updateCalls as never));
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, { nodeIds: [nodeId] });
+    seedSingleVersionCatalog(harness.store, ["default", "loading"]);
+    await flush();
+
+    // No ephemeral selection yet → the effective state equals the default → no button.
+    expect(
+      findNodesByType(harness.tree().root, "button").some((b) => b.props.label === "Set as default"),
+    ).toBe(false);
+
+    // An ephemeral selection differing from the default reveals the button.
+    act(() => selectComponentPreviewState(harness!.store, nodeId, "loading"));
+    await flush();
+    const setDefault = findNodesByType(harness.tree().root, "button").find(
+      (b) => b.props.label === "Set as default",
+    )!;
+    expect(setDefault).toBeDefined();
+
+    harness.dispatch(setDefault.id, "onClick");
+    expect(updateCalls.at(-1)!.params).toEqual({ id: nodeId, updates: { previewState: "loading" } });
+    // …then clears the ephemeral selection to null.
+    expect(selCalls.at(-1)!.params).toEqual({ nodeId, previewState: null });
+  });
+});
+
+describe("ComponentSettingsPanel — version update", () => {
+  /**
+   * Seeds a two-version catalog: node pinned at v1 (HASH_V1, prop "oldProp"),
+   * latest at v2 (HASH_V2) whose manifest DROPS "oldProp" and whose preview
+   * states drop the persisted "loading" → the plan carries removedPropNames +
+   * resetPreviewState.
+   */
+  function seedUpgradeableCatalog(store: PanelHarness["store"]) {
+    // Latest v2: no props declared, only "default" preview state.
+    seedComponentCatalog(
+      store,
+      {
+        latest: version(HASH_V2, 2, ["default"], EMPTY_MANIFEST),
+        latestVersion: 2,
+        slug: "card",
+        title: "Card",
+      },
+      // Pinned v1 (>1 preview state so the persisted "loading" is valid at v1).
+      [version(HASH_V1, 1, ["default", "loading"], EMPTY_MANIFEST)],
+    );
+  }
+
+  test("no newer version → no update affordance", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+    });
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, { nodeIds: [nodeId] });
+    seedSingleVersionCatalog(harness.store, ["default"]);
+    await flush();
+
+    expect(
+      findNodesByType(harness.tree().root, "button").some((b) =>
+        String(b.props.label).startsWith("Update to"),
+      ),
+    ).toBe(false);
+  });
+
+  test("newer version → the plan carries removedPropNames + resetPreviewState; confirm=true applies + clears selection", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+      previewState: "loading",
+      props: [{ name: "oldProp", value: { type: "literal", value: { key: "string", value: "x" } } }],
+    });
+    const applyCalls: ActionCall<Record<string, unknown>>[] = [];
+    const selCalls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(applyComponentVersionUpdate as never, applyCalls as never));
+    restore.push(watchAction(setComponentPreviewStateSelection as never, selCalls as never));
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, {
+      confirmResult: true,
+      nodeIds: [nodeId],
+    });
+    seedUpgradeableCatalog(harness.store);
+    await flush();
+
+    const updateButton = findNodesByType(harness.tree().root, "button").find((b) =>
+      String(b.props.label).startsWith("Update to"),
+    )!;
+    expect(updateButton.props.label).toBe("Update to v2");
+
+    harness.dispatch(updateButton.id, "onClick");
+    await flush();
+
+    // The host confirm plan carried the removed prop + reset-preview lines.
+    const plan = harness.hostLog.confirmComponentUpdate.at(-1)!;
+    expect(plan.title).toBe("Update Card to v2");
+    const details = plan.details ?? [];
+    expect(details.some((line) => line.includes("oldProp"))).toBe(true);
+    expect(details.some((line) => line.includes("loading") && line.includes("resets"))).toBe(true);
+
+    // Confirm=true → apply with exact params, THEN clear the ephemeral selection.
+    expect(applyCalls.at(-1)!.params).toEqual({
+      contentHash: HASH_V2,
+      dropPropNames: ["oldProp"],
+      nodeId,
+      resetPreviewState: true,
+      version: 2,
+    });
+    expect(selCalls.at(-1)!.params).toEqual({ nodeId, previewState: null });
+  });
+
+  test("confirm=false → nothing is dispatched", async () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, {
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: HASH_V1,
+      previewState: "loading",
+      props: [{ name: "oldProp", value: { type: "literal", value: { key: "string", value: "x" } } }],
+    });
+    const applyCalls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(applyComponentVersionUpdate as never, applyCalls as never));
+    harness = mountPanelDefinition(ComponentSettingsPanel, doc, {
+      confirmResult: false,
+      nodeIds: [nodeId],
+    });
+    seedUpgradeableCatalog(harness.store);
+    await flush();
+
+    const updateButton = findNodesByType(harness.tree().root, "button").find((b) =>
+      String(b.props.label).startsWith("Update to"),
+    )!;
+    harness.dispatch(updateButton.id, "onClick");
+    await flush();
+
+    expect(harness.hostLog.confirmComponentUpdate).toHaveLength(1);
+    expect(applyCalls).toHaveLength(0);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx
new file mode 100644
index 000000000..37eafbca3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx
@@ -0,0 +1,282 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Component settings` section — the wire-tree
+ * replica of {@link ../sections/component-section.ComponentSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Component" → `Panel.Section title="Component"`.
+ * - A Name rename `TextInput` → `Panel.Field label="Name"` > `Panel.TextField`
+ *   (writes on `onChange`, like the old section's `onChange={handleNameChange}`).
+ * - Read-only Component slug + Version rows → `Panel.Field` > `Panel.Text` rows;
+ *   when a newer catalog version exists the version row also shows a muted
+ *   "vN available" note.
+ * - An "Update to vN" `Panel.Button` (visible ONLY when `updatePlan` exists).
+ * - When the pinned version has >1 preview state, a `Panel.Subsection "Preview
+ *   state"` with a "Set as default" ghost button (visible only when the effective
+ *   selection differs from the persisted default) and a `Panel.Column` of
+ *   selectable `Panel.Button`s (accent `default` variant for the effective state,
+ *   `ghost` otherwise; the persisted default is labelled "· default").
+ *
+ * The version-update AlertDialog is NOT rendered inline: clicking "Update"
+ * awaits `usePanelHostServices().confirmComponentUpdate(plan)`; the HOST renders
+ * the confirm dialog ({@link ../panel-host-services-host.PanelHostServicesHost})
+ * from the plan's `title` + `details` lines — which carry the same content the
+ * old inline dialog rendered (intro, removed-props, reset-preview, warning
+ * messages, or the "All configured props and actions carry over." fallback).
+ *
+ * Behavior (identical to the old section):
+ * - `effectivePreviewState = componentPreviewStateSelection[node.id] ?? persisted`.
+ *   Selecting a state writes the EPHEMERAL `setComponentPreviewStateSelection`
+ *   (null when re-selecting the persisted default); "Set as default" PERSISTS via
+ *   `updateComponentNode({previewState})` then clears the ephemeral selection.
+ * - `updatePlan` (a `useMemo`) compares `catalogEntry.latest` vs
+ *   `node.data.componentVersion`; runs `validateComponentNode` against the latest
+ *   manifest to derive `removedPropNames` (unknown-prop warnings), remaining
+ *   `warningMessages`, and `resetPreviewState`.
+ * - Confirm=true → `applyComponentVersionUpdate({...})` THEN
+ *   `setComponentPreviewStateSelection(null)` (exact old ordering); confirm=false
+ *   → nothing dispatched.
+ */
+import { getBuiltinComponent } from "@voidhash/paywall-builtins";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import type { ComponentUpdatePlan } from "../../../panel-runtime/panel-host-services";
+import { usePanelHostServices } from "../../../panel-runtime/panel-host-services";
+import {
+  applyComponentVersionUpdate,
+  setComponentPreviewStateSelection,
+  updateComponentNode,
+} from "../../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../../state/designer-store";
+import type { ComponentCatalogVersion } from "../../../state/designer-store-state";
+import type { AncestorVariablesSnapshotNode } from "../../../state/utils/ancestor-variables";
+import { componentFileName } from "../../../state/utils/code-components";
+import {
+  collectAncestorVariableIds,
+  validateComponentNode,
+} from "../../../state/utils/component-validation";
+import { selectDocumentRoot } from "../../../state/utils/document-root";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** The derived plan for updating a component instance to the latest catalog version. */
+interface VersionUpdatePlan {
+  latest: ComponentCatalogVersion;
+  latestVersion: number;
+  /** Stored props the new manifest no longer declares — removed on confirm. */
+  removedPropNames: string[];
+  /** Remaining warning messages the update would introduce. */
+  warningMessages: string[];
+  resetPreviewState: boolean;
+}
+
+/** The `Component settings` panel definition. */
+export function ComponentSettingsPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const services = usePanelHostServices();
+  const { nodes } = useDefinitionNodes();
+
+  const node = nodes[0] as ComponentSnapshotNode | undefined;
+  const nodeId = node?.id ?? "";
+
+  const components = useStore(store, (state) => state.componentCatalog.components);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const previewStateSelection = useStore(
+    store,
+    (state) => state.componentPreviewStateSelection[nodeId],
+  );
+  const documentRoot: AncestorVariablesSnapshotNode = useStore(store, selectDocumentRoot);
+
+  const isLocal = node?.data.componentSource === "local";
+  const isBuiltin = node?.data.componentSource === "builtin";
+  // Builtins carry no catalog row and no pinned hash — they resolve from the
+  // static registry by slug; catalog affordances (version/update) never apply.
+  const builtin = isBuiltin && node ? getBuiltinComponent(node.data.componentSlug) : undefined;
+  const catalogEntry = node && !isBuiltin ? components[node.data.componentSlug] : undefined;
+  const pinnedVersion = node && !isBuiltin ? byContentHash[node.data.contentHash] : undefined;
+  const previewStates = isBuiltin
+    ? (builtin?.manifest.previewStates ?? [])
+    : (pinnedVersion?.previewStates ?? []);
+  const componentLabel =
+    node === undefined
+      ? ""
+      : isLocal
+        ? componentFileName(node.data.componentPath)
+        : isBuiltin
+          ? (builtin?.name ?? node.data.componentSlug)
+          : node.data.componentSlug;
+
+  const persistedPreviewState = node?.data.previewState ?? "default";
+  const effectivePreviewState = previewStateSelection ?? persistedPreviewState;
+
+  const updatePlan = useMemo((): VersionUpdatePlan | null => {
+    if (
+      !node ||
+      !catalogEntry ||
+      catalogEntry.latestVersion <= node.data.componentVersion
+    ) {
+      return null;
+    }
+    const latest = catalogEntry.latest;
+    const availableVariableIds = collectAncestorVariableIds(documentRoot, node.id);
+    const warnings = validateComponentNode(
+      {
+        actionBindings: node.data.actionBindings,
+        children: node.children,
+        contentHash: node.data.contentHash,
+        props: node.data.props,
+      },
+      latest.manifest,
+      availableVariableIds,
+    );
+    const removedPropNames = [
+      ...new Set(
+        warnings
+          .filter((warning) => warning.kind === "unknown-prop")
+          .map((warning) => warning.propName),
+      ),
+    ];
+    const warningMessages = warnings
+      .filter((warning) => warning.kind !== "unknown-prop" && warning.severity === "warning")
+      .map((warning) => warning.message);
+    return {
+      latest,
+      latestVersion: catalogEntry.latestVersion,
+      removedPropNames,
+      resetPreviewState: !latest.previewStates.includes(persistedPreviewState),
+      warningMessages,
+    };
+  }, [catalogEntry, node, documentRoot, persistedPreviewState]);
+
+  if (!node) return <Panel />;
+
+  const handleNameChange = (name: string) => {
+    dispatch(updateComponentNode)({ id: node.id, updates: { name } });
+  };
+
+  const handleSelectPreviewState = (state: string) => {
+    dispatch(setComponentPreviewStateSelection)({
+      nodeId,
+      previewState: state === persistedPreviewState ? null : state,
+    });
+  };
+
+  const handlePersistPreviewState = () => {
+    dispatch(updateComponentNode)({
+      id: node.id,
+      updates: { previewState: effectivePreviewState },
+    });
+    dispatch(setComponentPreviewStateSelection)({ nodeId, previewState: null });
+  };
+
+  /**
+   * Builds the host confirm-dialog plan carrying every line the old inline
+   * AlertDialog rendered (intro + removed-props + reset-preview + warnings, or
+   * the "all carry over" fallback), so the host dialog is content-identical.
+   */
+  const buildConfirmPlan = (plan: VersionUpdatePlan): ComponentUpdatePlan => {
+    const details: string[] = [
+      `This instance is pinned to v${node.data.componentVersion}. Updating re-renders it from the latest deployed version.`,
+    ];
+    if (plan.removedPropNames.length > 0) {
+      details.push(`Will be removed (no longer declared): ${plan.removedPropNames.join(", ")}`);
+    }
+    if (plan.resetPreviewState) {
+      details.push(
+        `The preview state "${persistedPreviewState}" no longer exists and resets to "default".`,
+      );
+    }
+    for (const message of plan.warningMessages) {
+      details.push(message);
+    }
+    if (
+      plan.removedPropNames.length === 0 &&
+      plan.warningMessages.length === 0 &&
+      !plan.resetPreviewState
+    ) {
+      details.push("All configured props and actions carry over.");
+    }
+    return {
+      confirmLabel: "Update",
+      details,
+      title: `Update ${catalogEntry?.title ?? node.data.componentSlug} to v${plan.latestVersion}`,
+    };
+  };
+
+  const handleUpdate = async () => {
+    if (!updatePlan) return;
+    const confirmed = await services.confirmComponentUpdate(buildConfirmPlan(updatePlan));
+    if (!confirmed) return;
+    dispatch(applyComponentVersionUpdate)({
+      contentHash: updatePlan.latest.contentHash,
+      dropPropNames: updatePlan.removedPropNames,
+      nodeId,
+      resetPreviewState: updatePlan.resetPreviewState,
+      version: updatePlan.latestVersion,
+    });
+    dispatch(setComponentPreviewStateSelection)({ nodeId, previewState: null });
+  };
+
+  return (
+    <Panel>
+      <Panel.Section title="Component">
+        <Panel.Column gap="sm">
+          <Panel.Field label="Name">
+            <Panel.TextField
+              kind="text"
+              value={node.data.name ?? ""}
+              onChange={handleNameChange}
+            />
+          </Panel.Field>
+          <Panel.Field label="Component">
+            <Panel.Text content={componentLabel} />
+          </Panel.Field>
+          {!isLocal && !isBuiltin && (
+            <Panel.Field label="Version">
+              <Panel.Row gap="sm" align="center">
+                <Panel.Text content={`v${node.data.componentVersion}`} />
+                {updatePlan && (
+                  <Panel.Text tone="muted" content={`v${updatePlan.latestVersion} available`} />
+                )}
+              </Panel.Row>
+            </Panel.Field>
+          )}
+        </Panel.Column>
+
+        {updatePlan && (
+          <Panel.Button
+            label={`Update to v${updatePlan.latestVersion}`}
+            icon="arrowUpCircle"
+            variant="outline"
+            size="default"
+            onClick={handleUpdate}
+          />
+        )}
+
+        {previewStates.length > 1 && (
+          <Panel.Subsection title="Preview state">
+            {effectivePreviewState !== persistedPreviewState && (
+              <Panel.Button label="Set as default" variant="ghost" size="sm" onClick={handlePersistPreviewState} />
+            )}
+            <Panel.Column gap="none">
+              {previewStates.map((state) => (
+                <Panel.Button
+                  key={state}
+                  label={state === persistedPreviewState ? `${state}  · default` : state}
+                  size="sm"
+                  variant={effectivePreviewState === state ? "default" : "ghost"}
+                  onClick={() => handleSelectPreviewState(state)}
+                />
+              ))}
+            </Panel.Column>
+          </Panel.Subsection>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx
new file mode 100644
index 000000000..62ef01113
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx
@@ -0,0 +1,96 @@
+"use client";
+
+/**
+ * The reactive selection channel a built-in panel definition reads to learn
+ * WHICH nodes it edits.
+ *
+ * The wire {@link PanelSessionInputs} only carry `selection.count` (the sandbox
+ * never sees host node ids), so a trusted built-in definition — which resolves
+ * node data straight from the store — needs the selected node ids over a
+ * separate host seam. This is that seam: a tiny subscribable holder the host
+ * ({@link ../builtin-panel-host.BuiltinPanelHost}) provides once per session via
+ * `wrap` (stable identity, so pushing a new selection NEVER remounts the
+ * session) and updates on every selection change. A definition subscribes with
+ * {@link useDefinitionSelection} via `useSyncExternalStore`, so a selection
+ * change re-renders the definition inside the reconciler exactly like a store
+ * change does — without a source-identity change.
+ *
+ * This carries no serializable form and never crosses the sandbox boundary; a
+ * code-component panel (Phase 3) learns its selection through the wire
+ * `selection` input, not this context.
+ */
+import { createContext, useContext, useSyncExternalStore } from "react";
+
+/** The current selection a definition edits: the selected node ids. */
+export interface DefinitionSelection {
+  /** The selected node ids, in selection order (empty when nothing is selected). */
+  readonly nodeIds: readonly string[];
+}
+
+/**
+ * A subscribable selection holder. Stable identity across the host session; its
+ * snapshot changes (new object) only when the selection actually changes, so
+ * `useSyncExternalStore` re-renders subscribers precisely once per real change.
+ */
+export interface DefinitionSelectionStore {
+  /** Reads the current selection snapshot (stable identity between changes). */
+  getSnapshot(): DefinitionSelection;
+  /** Subscribes to selection changes; returns an unsubscribe function. */
+  subscribe(listener: () => void): () => void;
+  /** Publishes a new selection (a no-op when the node ids are unchanged). */
+  setNodeIds(nodeIds: readonly string[]): void;
+}
+
+/**
+ * Creates a {@link DefinitionSelectionStore} seeded with `initialNodeIds`. The
+ * host owns one per panel session; the definition only reads it.
+ */
+export function createDefinitionSelectionStore(
+  initialNodeIds: readonly string[],
+): DefinitionSelectionStore {
+  let snapshot: DefinitionSelection = { nodeIds: initialNodeIds };
+  const listeners = new Set<() => void>();
+  return {
+    getSnapshot() {
+      return snapshot;
+    },
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    setNodeIds(nodeIds) {
+      const current = snapshot.nodeIds;
+      if (
+        current.length === nodeIds.length &&
+        current.every((id, index) => id === nodeIds[index])
+      ) {
+        return;
+      }
+      snapshot = { nodeIds };
+      for (const listener of listeners) listener();
+    },
+  };
+}
+
+const DefinitionSelectionContext = createContext<DefinitionSelectionStore | null>(null);
+
+/** Provides a {@link DefinitionSelectionStore} to a panel definition subtree. */
+export const DefinitionSelectionProvider = DefinitionSelectionContext.Provider;
+
+/**
+ * Reads the current selection inside a built-in panel definition, re-rendering
+ * on every selection change. Throws when no host provided the selection store
+ * (a built-in definition must run under a host that installs the provider via
+ * `wrap`).
+ */
+export function useDefinitionSelection(): DefinitionSelection {
+  const store = useContext(DefinitionSelectionContext);
+  if (!store) {
+    throw new Error(
+      "useDefinitionSelection must be used inside a DefinitionSelectionProvider (built-in panel host)",
+    );
+  }
+  return useSyncExternalStore(store.subscribe, store.getSnapshot, store.getSnapshot);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.test.tsx
new file mode 100644
index 000000000..41a9d8167
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.test.tsx
@@ -0,0 +1,479 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { performRedo, performUndo } from "@voidhash/mimic/zustand-commander";
+
+import { updateFillStyle } from "../../../state/actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { FillPanel } from "./fill-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  seedStateOverride,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+interface FillCall {
+  nodes: unknown;
+  style: Record<string, unknown>;
+}
+
+/** Mounts the fill panel over `seeds`, watching `updateFillStyle`. */
+function mount(seeds: Parameters<typeof seedNodes>[1]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<FillCall>[] = [];
+  restoreWatch = watchAction(updateFillStyle as never, calls as never);
+  harness = mountPanelDefinition(FillPanel, doc, { nodeIds });
+  return { doc, harness, nodeIds, calls };
+}
+
+/** A gradient with N evenly-spaced opaque grey stops. */
+const gradientWith = (n: number) => ({
+  kind: "linear" as const,
+  startX: 0.5,
+  startY: 0,
+  endX: 0.5,
+  endY: 1,
+  stops: Array.from({ length: n }, (_, i) => ({
+    color: `rgba(${i}, ${i}, ${i}, 1)`,
+    position: n === 1 ? 0 : i / (n - 1),
+  })),
+});
+
+/** The single `fillField` node in the tree. */
+const fillField = (harness: PanelHarness) => findNodeByType(harness.tree().root, "fillField")!;
+
+/** Unwraps a committed CRDT gradient's stops (`{ id, pos, value }` → `value`). */
+const committedStops = (
+  harness: PanelHarness,
+  nodeId: string,
+): { color: string; position: number }[] => {
+  const style = harness.nodeStyle(nodeId);
+  const gradient = style.backgroundGradient as { stops: { value: unknown }[] };
+  return gradient.stops.map((s) => s.value as { color: string; position: number });
+};
+
+describe("FillPanel — snapshot structure", () => {
+  test("disabled fill: header + enable button, no fill body", () => {
+    const { harness } = mount([{ type: "view", style: { backgroundEnabled: false } }]);
+    const root = harness.tree().root;
+
+    expect(findNodeByType(root, "section")?.props.title).toBe("Fill");
+    const actions = findNodeByType(root, "sectionActions")!;
+    expect(findNodeByType(actions, "button")?.props.icon).toBe("plus");
+    // No fill body while disabled.
+    expect(findNodeByType(root, "fillField")).toBeUndefined();
+  });
+
+  test("solid default: fillField (solid, hex label) + disable button", () => {
+    const { harness } = mount([
+      {
+        type: "view",
+        style: { backgroundEnabled: true, backgroundColor: "rgba(18, 52, 86, 1)" },
+      },
+    ]);
+    const root = harness.tree().root;
+    // No enable button while enabled.
+    expect(findNodeByType(root, "sectionActions")).toBeUndefined();
+
+    const ff = findNodeByType(root, "fillField")!;
+    expect(ff.props.backgroundType).toBe("solid");
+    expect(ff.props.backgroundColor).toBe("rgba(18, 52, 86, 1)");
+    // Solid label is the uppercase hex of the color.
+    expect(ff.props.label).toBe("#123456");
+    expect(ff.props.isTypeMixed).toBe(false);
+    // Exactly the eight write-bearing events cross the wire (open + selection are
+    // host-local; stop mutations consolidate into onGradientChange).
+    expect([...ff.events].sort()).toEqual(
+      [
+        "onColorChange",
+        "onCommit",
+        "onDiscard",
+        "onGestureStart",
+        "onGradientChange",
+        "onImageResizeModeChange",
+        "onImageUrlChange",
+        "onTypeChange",
+      ].sort(),
+    );
+    expect(ff.events.length).toBeLessThanOrEqual(8);
+
+    // The disable `−` button sits next to the field.
+    const buttons = findNodesByType(root, "button");
+    expect(buttons.map((b) => b.props.icon)).toEqual(["minus"]);
+  });
+
+  test("gradient with N stops flows through as a clean {color,position} array", () => {
+    const { harness } = mount([
+      {
+        type: "view",
+        style: { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: gradientWith(3) },
+      },
+    ]);
+    const ff = fillField(harness);
+    expect(ff.props.backgroundType).toBe("gradient");
+    // Linear label.
+    expect(ff.props.label).toBe("Linear");
+    const gradient = ff.props.gradient as { stops: { color: string; position: number }[] };
+    expect(gradient.stops).toHaveLength(3);
+    expect(gradient.stops.map((s) => s.position)).toEqual([0, 0.5, 1]);
+    // Stops are the unwrapped write shape (no CRDT `{ id, pos, value }` envelope).
+    for (const stop of gradient.stops) {
+      expect(Object.keys(stop).sort()).toEqual(["color", "position"]);
+    }
+  });
+
+  test("image fill: label 'Image' and the image value flows through", () => {
+    const { harness } = mount([
+      {
+        type: "view",
+        style: {
+          backgroundEnabled: true,
+          backgroundType: "image",
+          backgroundImage: { url: "https://cdn.test/a.png", resizeMode: "contain" },
+        },
+      },
+    ]);
+    const ff = fillField(harness);
+    expect(ff.props.backgroundType).toBe("image");
+    expect(ff.props.label).toBe("Image");
+    expect(ff.props.image).toEqual({ url: "https://cdn.test/a.png", resizeMode: "contain" });
+  });
+
+  test("multi-select with mixed type: isTypeMixed + 'Mixed' label", () => {
+    const { harness } = mount([
+      { type: "view", style: { backgroundEnabled: true, backgroundType: "solid" } },
+      { type: "view", style: { backgroundEnabled: true, backgroundType: "gradient" } },
+    ]);
+    const ff = fillField(harness);
+    expect(ff.props.isTypeMixed).toBe(true);
+    expect(ff.props.label).toBe("Mixed");
+  });
+});
+
+describe("FillPanel — type / enable / image direct writes", () => {
+  test("type change is a direct write (one undo)", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: { backgroundEnabled: true, backgroundType: "solid" } },
+    ]);
+    const ff = fillField(harness);
+    harness.dispatch(ff.id, "onTypeChange", ["gradient"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { backgroundType: "gradient" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("enable button writes backgroundEnabled:true; disable writes false", async () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: { backgroundEnabled: false } },
+    ]);
+    const enable = findNodeByType(harness.tree().root, "button")!;
+    expect(enable.props.icon).toBe("plus");
+    act(() => {
+      harness.dispatch(enable.id, "onClick");
+    });
+    await flush();
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { backgroundEnabled: true },
+    });
+    expect(harness.undoDepth()).toBe(1);
+
+    const disable = findNodesByType(harness.tree().root, "button").find(
+      (b) => b.props.icon === "minus",
+    )!;
+    harness.dispatch(disable.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { backgroundEnabled: false },
+    });
+  });
+
+  test("image url + resize mode write the whole image object (one undo each)", () => {
+    const { harness, nodeIds, calls } = mount([
+      {
+        type: "view",
+        style: {
+          backgroundEnabled: true,
+          backgroundType: "image",
+          backgroundImage: { url: "https://cdn.test/a.png", resizeMode: "cover" },
+        },
+      },
+    ]);
+    const ff = fillField(harness);
+    harness.dispatch(ff.id, "onImageUrlChange", ["https://cdn.test/b.png"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { backgroundImage: { url: "https://cdn.test/b.png", resizeMode: "cover" } },
+    });
+    expect(harness.undoDepth()).toBe(1);
+
+    harness.dispatch(fillField(harness).id, "onImageResizeModeChange", ["stretch"]);
+    expect(calls.at(-1)!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { backgroundImage: { url: "https://cdn.test/b.png", resizeMode: "stretch" } },
+    });
+    expect(harness.undoDepth()).toBe(2);
+  });
+});
+
+describe("FillPanel — gradient gesture loop", () => {
+  const NEXT_GRADIENT = {
+    kind: "linear" as const,
+    startX: 0,
+    startY: 0,
+    endX: 1,
+    endY: 1,
+    stops: [
+      { color: "rgba(1, 2, 3, 1)", position: 0 },
+      { color: "rgba(4, 5, 6, 1)", position: 0.5 },
+      { color: "rgba(7, 8, 9, 1)", position: 1 },
+    ],
+  };
+
+  test("begin → live gradient change → commit is 0 undo + 1 committed batch", async () => {
+    const { harness, nodeIds, calls } = mount([
+      {
+        type: "view",
+        style: { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: gradientWith(2) },
+      },
+    ]);
+    const ff = fillField(harness);
+
+    harness.dispatch(ff.id, "onGestureStart");
+    expect(harness.draftActive()).toBe(true);
+    const before = harness.submittedCount();
+
+    harness.dispatch(ff.id, "onGradientChange", [NEXT_GRADIENT]);
+    // The live write carries the WHOLE rebuilt gradient (clean {color,position}).
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { backgroundGradient: NEXT_GRADIENT },
+    });
+    // No undo entry while the draft is active.
+    expect(harness.undoDepth()).toBe(0);
+
+    harness.dispatch(ff.id, "onCommit");
+    await flush();
+    expect(harness.draftActive()).toBe(false);
+    // Exactly one committed batch for the whole gesture.
+    expect(harness.submittedCount()).toBe(before + 1);
+    // The commit persisted with all THREE stops intact — the CRDT unwrap/rewrap
+    // did NOT collapse the gradient back to defaults (THE regression this guards).
+    const stops = committedStops(harness, nodeIds[0]!);
+    expect(stops).toHaveLength(3);
+    expect(stops.map((s) => s.position)).toEqual([0, 0.5, 1]);
+    expect(stops.map((s) => s.color)).toEqual([
+      "rgba(1, 2, 3, 1)",
+      "rgba(4, 5, 6, 1)",
+      "rgba(7, 8, 9, 1)",
+    ]);
+    // The re-read fillField prop also reflects the three committed stops.
+    const reReadGradient = fillField(harness).props.gradient as {
+      stops: { position: number }[];
+    };
+    expect(reReadGradient.stops).toHaveLength(3);
+  });
+
+  test("discard reverts the in-flight gesture (committed style unchanged)", async () => {
+    const { harness, nodeIds } = mount([
+      {
+        type: "view",
+        style: { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: gradientWith(2) },
+      },
+    ]);
+    const ff = fillField(harness);
+    const beforeStops = committedStops(harness, nodeIds[0]!);
+    const before = harness.submittedCount();
+
+    harness.dispatch(ff.id, "onGestureStart");
+    harness.dispatch(ff.id, "onGradientChange", [NEXT_GRADIENT]);
+    expect(harness.draftActive()).toBe(true);
+
+    harness.dispatch(ff.id, "onDiscard");
+    await flush();
+    expect(harness.draftActive()).toBe(false);
+    // A discarded draft submits nothing and leaves nodeStyle unchanged.
+    expect(harness.submittedCount()).toBe(before);
+    expect(harness.undoDepth()).toBe(0);
+    expect(committedStops(harness, nodeIds[0]!)).toEqual(beforeStops);
+  });
+
+  test("solid color drag: begin → live color change → commit is one gesture", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: { backgroundEnabled: true, backgroundColor: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const ff = fillField(harness);
+    harness.dispatch(ff.id, "onGestureStart");
+    expect(harness.draftActive()).toBe(true);
+    harness.dispatch(ff.id, "onColorChange", ["rgba(9, 9, 9, 1)"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { backgroundColor: "rgba(9, 9, 9, 1)" },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(ff.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+  });
+});
+
+describe("FillPanel — no-op suppression", () => {
+  // The no-op guarantee is at the DOCUMENT layer: `applyStyleUpdate`'s per-key
+  // `styleValuesEqual` check drops keys equal to the effective value, so a write
+  // of an identical value submits NO transaction and leaves `nodeStyle`
+  // untouched. (The commander still records an undo entry per dispatch — it does
+  // not inspect the result — so the guarantee is measured via `submittedCount`
+  // and `nodeStyle`, not the undo depth.)
+  test("re-writing the identical background type submits no transaction", () => {
+    const { harness, nodeIds } = mount([
+      { type: "view", style: { backgroundEnabled: true, backgroundType: "gradient" } },
+    ]);
+    const ff = fillField(harness);
+    const before = harness.submittedCount();
+    const styleBefore = { ...harness.nodeStyle(nodeIds[0]!) };
+    harness.dispatch(ff.id, "onTypeChange", ["gradient"]);
+    expect(harness.submittedCount()).toBe(before);
+    expect(harness.nodeStyle(nodeIds[0]!)).toEqual(styleBefore);
+  });
+
+  test("re-writing the identical color submits no transaction; a real change does", () => {
+    const { harness, nodeIds } = mount([
+      { type: "view", style: { backgroundEnabled: true, backgroundColor: "rgba(5, 5, 5, 1)" } },
+    ]);
+    const ff = fillField(harness);
+    const before = harness.submittedCount();
+    harness.dispatch(ff.id, "onColorChange", ["rgba(5, 5, 5, 1)"]);
+    // The identical write is dropped — no new document transaction.
+    expect(harness.submittedCount()).toBe(before);
+    expect(harness.nodeStyle(nodeIds[0]!).backgroundColor).toBe("rgba(5, 5, 5, 1)");
+    // A genuinely different color DOES submit.
+    harness.dispatch(ff.id, "onColorChange", ["rgba(9, 9, 9, 1)"]);
+    expect(harness.submittedCount()).toBe(before + 1);
+    expect(harness.nodeStyle(nodeIds[0]!).backgroundColor).toBe("rgba(9, 9, 9, 1)");
+  });
+});
+
+describe("FillPanel — override reset", () => {
+  test("override-active shows the fill reset; onReset writes the base values back", async () => {
+    const { doc, harness, nodeIds, calls } = mount([
+      {
+        type: "view",
+        style: { backgroundEnabled: true, backgroundColor: "rgba(0, 0, 0, 1)" },
+      },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { backgroundColor: "rgba(255, 0, 0, 1)" },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    const reset = findNodesByType(harness.tree().root, "resetAffordance").find(
+      (r) => r.props.label === "fill",
+    )!;
+    expect(reset.props.show).toBe(true);
+    harness.dispatch(reset.id, "onReset");
+    // The reset writes the base fill values back (backgroundColor from base).
+    expect(calls[0]!.params.style).toMatchObject({ backgroundColor: "rgba(0, 0, 0, 1)" });
+  });
+
+  test("disabled + enabled override shows the enable-reset on the add button", async () => {
+    const { doc, harness, nodeIds } = mount([
+      { type: "view", style: { backgroundEnabled: false } },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { backgroundEnabled: true },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    // The effective backgroundEnabled is true (override), so the body renders and
+    // its "fill" reset shows.
+    const shown = findNodesByType(harness.tree().root, "resetAffordance").filter(
+      (r) => r.props.show === true,
+    );
+    expect(shown.length).toBeGreaterThan(0);
+    for (const r of shown) expect(r.props.label).toBe("fill");
+  });
+});
+
+describe("FillPanel — undo/redo round-trip", () => {
+  test("undo after a direct gradient write restores the prior stops exactly", async () => {
+    const { harness, nodeIds } = mount([
+      {
+        type: "view",
+        style: { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: gradientWith(2) },
+      },
+    ]);
+    const priorStops = committedStops(harness, nodeIds[0]!);
+    expect(priorStops).toHaveLength(2);
+
+    // A DIRECT gradient write (no gesture) records one commander undo entry — the
+    // gradient-shape write path that undo/redo must round-trip. (A gesture's draft
+    // commits through the mimic document's own undo, not the commander stack.)
+    const ff = fillField(harness);
+    harness.dispatch(ff.id, "onGradientChange", [
+      {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+        stops: [
+          { color: "rgba(11, 11, 11, 1)", position: 0 },
+          { color: "rgba(22, 22, 22, 1)", position: 0.3 },
+          { color: "rgba(33, 33, 33, 1)", position: 1 },
+        ],
+      },
+    ]);
+    await flush();
+    expect(committedStops(harness, nodeIds[0]!)).toHaveLength(3);
+    expect(harness.undoDepth()).toBe(1);
+
+    // Undo restores the PRIOR two stops EXACTLY (the unwrapEntriesDeep discipline —
+    // undo replays the decoded base snapshot through normalizeStyleForWrite so the
+    // stops don't collapse to gradient defaults).
+    act(() => {
+      performUndo(harness.store);
+    });
+    await flush();
+    const restored = committedStops(harness, nodeIds[0]!);
+    expect(restored).toEqual(priorStops);
+
+    // Redo re-applies the three-stop gradient with all stops intact.
+    act(() => {
+      performRedo(harness.store);
+    });
+    await flush();
+    const redone = committedStops(harness, nodeIds[0]!);
+    expect(redone).toHaveLength(3);
+    expect(redone.map((s) => s.position)).toEqual([0, 0.3, 1]);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx
new file mode 100644
index 000000000..525b89e80
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx
@@ -0,0 +1,253 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Fill` section — the wire-tree replica of
+ * {@link ../sections/fill-section.FillSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Fill" → `Panel.Section title="Fill"`.
+ * - When the fill is disabled (and not mixed) the header hosts a `+` enable
+ *   `Button`, wrapped in the "fill enabled" `OverrideResetAffordance` (the
+ *   `[backgroundEnabled, backgroundColor]` reset payload) → `Panel.SectionActions`
+ *   > `Panel.ResetAffordance` > `Panel.Button icon="plus"`.
+ * - When enabled (or mixed) the body renders the swatch+row wrapped in the SAME
+ *   "fill" reset affordance, containing the `Panel.FillField` composite and the
+ *   `−` disable `Button`.
+ *
+ * CRDT gradient envelope (verbatim from the old section):
+ * - `data.style.backgroundGradient` is read in its DECODED shape — its `stops`
+ *   are `{ value }`-wrapped by the mimic CRDT decoder. {@link toWriteGradient}
+ *   unwraps them into the logical `{ color, position }[]` write shape (falling
+ *   back to a deep-cloned {@link DEFAULT_GRADIENT} when absent), and EVERY
+ *   gradient mutation writes the WHOLE rebuilt gradient back through
+ *   `updateFillStyle` — never a partial stop patch — so the CRDT never sees an
+ *   in-place nested-struct mutation it can't introduce.
+ *
+ * Wire-event partition (the ONE deliberate divergence from the old section):
+ * - The `fillField` composite has 15 event callbacks but `PANEL_CAPS.
+ *   eventsPerNode` is 8, so the node carries only the WRITE-bearing events:
+ *   `onTypeChange`, `onColorChange`, `onGradientChange`, `onImageUrlChange`,
+ *   `onImageResizeModeChange`, `onGestureStart`, `onCommit`, `onDiscard`. The two
+ *   pure-UI concerns the old section held in local state — the editor popover's
+ *   `open` and the selected gradient stop `selectedStopIndex` (+ its clamping
+ *   effect) — plus the granular stop callbacks (`onStopColorChange`,
+ *   `onStopPositionChange`, `onAddStop`, `onAddStopAt`, `onRemoveStop`) are
+ *   handled HOST-LOCAL in the renderer's fillField view: each stop mutation
+ *   rebuilds the whole stops array and dispatches ONE `onGradientChange`. The
+ *   store-facing behavior (which whole gradients get written, and when) is
+ *   therefore identical; only the transport of pure-UI state differs.
+ *
+ * Gesture + write discipline (identical to the old section):
+ * - `onGestureStart` opens the draft (begin), live `onColorChange` /
+ *   `onGradientChange` dispatch `updateFillStyle` into it, `onCommit` commits it
+ *   (one undo entry per gesture), `onDiscard` discards it. Type changes, enable,
+ *   disable, and image url/resize are DIRECT writes (one undo each). No-op writes
+ *   are suppressed by `applyStyleUpdate`'s per-key `styleValuesEqual` guard.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import type { PanelJsonValue } from "@voidhash/paywalls/schema";
+import { useCallback } from "react";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { rgbaToHexOpacity } from "../../../panel-kit/color-picker/color-utils";
+import { updateFillStyle } from "../../../state/actions";
+import type {
+  BackgroundGradient,
+  BackgroundImage,
+  BackgroundType,
+  GradientStop,
+} from "../../../state/actions/features/fill-style-actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/**
+ * The decoded (read) shape of a gradient on `data.style`. Array elements are
+ * wrapped by the mimic CRDT decoder as `{ value }`; scalar fields are plain.
+ */
+interface DecodedGradient {
+  kind: "linear" | "radial";
+  startX: number;
+  startY: number;
+  endX: number;
+  endY: number;
+  stops: Array<{ value?: GradientStop }>;
+}
+
+/**
+ * The panel-facing view of a node's effective fill style. Structured fields are
+ * read in their decoded (CRDT-wrapped) form; the panel unwraps them before use.
+ */
+interface FillStyleRead {
+  backgroundColor: string;
+  backgroundEnabled: boolean;
+  backgroundType?: BackgroundType;
+  backgroundGradient?: DecodedGradient;
+  backgroundImage?: BackgroundImage;
+}
+
+interface FillStyleWrite {
+  backgroundColor: string;
+  backgroundEnabled: boolean;
+  backgroundType: BackgroundType;
+  backgroundGradient: BackgroundGradient;
+  backgroundImage: BackgroundImage;
+}
+
+const DEFAULT_GRADIENT: BackgroundGradient = {
+  kind: "linear",
+  startX: 0.5,
+  startY: 0,
+  endX: 0.5,
+  endY: 1,
+  stops: [
+    { color: "rgba(255, 255, 255, 1)", position: 0 },
+    { color: "rgba(255, 255, 255, 0)", position: 1 },
+  ],
+};
+
+/** Unwrap the CRDT-decoded gradient into the logical write shape. */
+function toWriteGradient(decoded: DecodedGradient | undefined): BackgroundGradient {
+  if (!decoded) {
+    return { ...DEFAULT_GRADIENT, stops: DEFAULT_GRADIENT.stops.map((s) => ({ ...s })) };
+  }
+  const stops = decoded.stops
+    .map((entry) => entry.value)
+    .filter((stop): stop is GradientStop => stop !== undefined)
+    .map((stop) => ({ color: stop.color, position: stop.position }));
+  return {
+    kind: decoded.kind,
+    startX: decoded.startX,
+    startY: decoded.startY,
+    endX: decoded.endX,
+    endY: decoded.endY,
+    stops,
+  };
+}
+
+const ENABLED_KEYS = ["backgroundEnabled"] as const;
+const COLOR_KEYS = ["backgroundColor"] as const;
+// The set the "fill" reset restores (its onReset payload), matching the old
+// section's `fillRelatedKeys`.
+const RELATED_KEYS = ["backgroundEnabled", "backgroundColor"] as const;
+
+/** The `Fill` panel definition. */
+export function FillPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes, style, targets, mixedKeys } = useDefinitionNodes();
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { begin, commit, discard } = useDesignerDraft(store);
+
+  const fill = style as unknown as FillStyleRead | null;
+
+  const isBackgroundEnabledMixed = mixedKeys.has("backgroundEnabled");
+  const isBackgroundTypeMixed = mixedKeys.has("backgroundType");
+
+  const handleChange = useCallback(
+    (incoming: Partial<FillStyleWrite>) => {
+      dispatch(updateFillStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleColorChange = useCallback(
+    (value: string) => {
+      dispatch(updateFillStyle)({ nodes: targets, style: { backgroundColor: value } });
+    },
+    [dispatch, targets],
+  );
+
+  const writeGradient = useCallback(
+    (next: BackgroundGradient) => {
+      handleChange({ backgroundGradient: next });
+    },
+    [handleChange],
+  );
+
+  if (!fill) return null;
+
+  const backgroundType: BackgroundType = fill.backgroundType ?? "solid";
+  const gradient = toWriteGradient(fill.backgroundGradient);
+  const image: BackgroundImage = fill.backgroundImage ?? { url: "", resizeMode: "cover" };
+
+  const handleImageUrl = (url: string) => {
+    handleChange({ backgroundImage: { ...image, url } });
+  };
+  const handleImageResizeMode = (resizeMode: BackgroundImage["resizeMode"]) => {
+    handleChange({ backgroundImage: { ...image, resizeMode } });
+  };
+
+  const active = overrideReset.isOverrideModeActive;
+  const showEnabledReset = active && overrideReset.hasOverride(ENABLED_KEYS);
+  const showColorReset =
+    !showEnabledReset && active && overrideReset.hasOverride(COLOR_KEYS);
+
+  const resetFill = () =>
+    handleChange(overrideReset.buildResetPatch(RELATED_KEYS) as Partial<FillStyleWrite>);
+
+  const rowLabel = isBackgroundTypeMixed
+    ? "Mixed"
+    : backgroundType === "solid"
+      ? `#${rgbaToHexOpacity(fill.backgroundColor).hex}`
+      : backgroundType === "gradient"
+        ? gradient.kind === "linear"
+          ? "Linear"
+          : "Radial"
+        : "Image";
+
+  return (
+    <Panel>
+      <Panel.Section title="Fill">
+        {!fill.backgroundEnabled && !isBackgroundEnabledMixed && (
+          <Panel.SectionActions>
+            <Panel.ResetAffordance label="fill enabled" show={showEnabledReset} onReset={resetFill}>
+              <Panel.Button
+                icon="plus"
+                size="icon-sm"
+                onClick={() => handleChange({ backgroundEnabled: true })}
+              />
+            </Panel.ResetAffordance>
+          </Panel.SectionActions>
+        )}
+        {(fill.backgroundEnabled || isBackgroundEnabledMixed) && (
+          <Panel.ResetAffordance
+            label="fill"
+            show={showEnabledReset || showColorReset}
+            onReset={resetFill}
+          >
+            <Panel.Row align="center">
+              <Panel.FillField
+                label={rowLabel}
+                backgroundType={backgroundType}
+                isTypeMixed={isBackgroundTypeMixed}
+                backgroundColor={fill.backgroundColor}
+                gradient={gradient as unknown as PanelJsonValue}
+                image={image as unknown as PanelJsonValue}
+                onTypeChange={(type) => handleChange({ backgroundType: type as BackgroundType })}
+                onColorChange={handleColorChange}
+                onGradientChange={(next) => writeGradient(next as unknown as BackgroundGradient)}
+                onImageUrlChange={handleImageUrl}
+                onImageResizeModeChange={(mode) =>
+                  handleImageResizeMode(mode as BackgroundImage["resizeMode"])
+                }
+                onGestureStart={begin}
+                onCommit={commit}
+                onDiscard={discard}
+              />
+              <Panel.Button
+                icon="minus"
+                size="icon-sm"
+                onClick={() => handleChange({ backgroundEnabled: false })}
+              />
+            </Panel.Row>
+          </Panel.ResetAffordance>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.test.tsx
new file mode 100644
index 000000000..681fe667b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.test.tsx
@@ -0,0 +1,415 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { updateLayoutStyle } from "../../../state/actions";
+import { seededIds } from "../../../state/testing/offline-document";
+import type { PanelNode } from "../../../panel-runtime/schema";
+import { FlexLayoutPanel } from "./flex-layout-panel";
+import {
+  createOfflineDesignerDocument,
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  seedStateOverride,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void)[] = [];
+afterEach(() => {
+  for (const restore of restoreWatch) restore();
+  restoreWatch = [];
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** A default flex style (all zeros / row) plus optional overrides. */
+const layout = (overrides: Record<string, unknown> = {}) => ({
+  flexDirection: "row",
+  gap: 0,
+  alignItems: "flex-start",
+  justifyContent: "flex-start",
+  paddingTop: 0,
+  paddingRight: 0,
+  paddingBottom: 0,
+  paddingLeft: 0,
+  width: "auto",
+  height: "auto",
+  ...overrides,
+});
+
+function mount(
+  seeds: Parameters<typeof seedNodes>[1],
+  select?: (ctx: { nodeIds: string[]; screenId: string; rootId: string }) => string[],
+) {
+  const doc = createOfflineDesignerDocument();
+  const { screenId, rootId } = seededIds(doc);
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  restoreWatch = [watchAction(updateLayoutStyle as never, calls as never)];
+  const selection = select ? select({ nodeIds, screenId, rootId }) : nodeIds;
+  harness = mountPanelDefinition(FlexLayoutPanel, doc, { nodeIds: selection });
+  return { doc, harness, nodeIds, calls, screenId, rootId };
+}
+
+/** All number/text fields (gap + padding + offsets) in document order. */
+const textFields = (root: PanelNode) => findNodesByType(root, "textField");
+const dimensionFields = (root: PanelNode) => findNodesByType(root, "dimensionField");
+
+/** The padding expand/collapse button (`fullscreen` when uniform, `vault` when expanded). */
+const paddingButton = (root: PanelNode) =>
+  findNodesByType(root, "button").find(
+    (b) => b.props.icon === "fullscreen" || b.props.icon === "vault",
+  );
+
+describe("FlexLayoutPanel — structure", () => {
+  test("a view under the screen renders the Layout section with all three subsections", () => {
+    const { harness } = mount([{ type: "view", style: layout() }]);
+    const root = harness.tree().root;
+    expect(findNodeByType(root, "section")?.props.title).toBe("Layout");
+    // Direction toggle + alignment grid + two dimension fields.
+    expect(findNodeByType(root, "toggleGroup")).toBeTruthy();
+    expect(findNodeByType(root, "alignmentGrid")).toBeTruthy();
+    expect(dimensionFields(root)).toHaveLength(2);
+    expect(dimensionFields(root).map((f) => f.props.axis)).toEqual(["width", "height"]);
+  });
+
+  test("a view (non-screen) has enabled dimension inputs", () => {
+    const { harness } = mount([{ type: "view", style: layout({ width: 120 }) }]);
+    const [w] = dimensionFields(harness.tree().root);
+    expect(w!.props.disabled).toBe(false);
+  });
+
+  test("a screen node disables the dimension inputs (editableDimensions=false)", () => {
+    // The screen is styleful and parented (under the doc root), so the section
+    // renders — but its dimension inputs are disabled, exactly like the old path.
+    const { harness } = mount([{ type: "view" }], ({ screenId }) => [screenId]);
+    const root = harness.tree().root;
+    expect(findNodeByType(root, "section")?.props.title).toBe("Layout");
+    for (const field of dimensionFields(root)) {
+      expect(field.props.disabled).toBe(true);
+    }
+  });
+
+  test("a parentless (root) selection renders an empty panel (no section)", () => {
+    const { harness } = mount([{ type: "view" }], ({ rootId }) => [rootId]);
+    const root = harness.tree().root;
+    expect(findNodeByType(root, "section")).toBeUndefined();
+  });
+
+  test("multi-select with a mixed flexDirection surfaces the mixed flag on the toggle", () => {
+    const { harness } = mount([
+      { type: "view", style: layout({ flexDirection: "row" }) },
+      { type: "view", style: layout({ flexDirection: "column" }) },
+    ]);
+    const toggle = findNodeByType(harness.tree().root, "toggleGroup")!;
+    expect(toggle.props.mixed).toBe(true);
+  });
+});
+
+describe("FlexLayoutPanel — flex behavior", () => {
+  test("changing direction is a DIRECT write (one undo)", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "view", style: layout() }]);
+    const toggle = findNodeByType(harness.tree().root, "toggleGroup")!;
+    harness.dispatch(toggle.id, "onChange", ["column"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { flexDirection: "column" },
+    });
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("alignment grid change writes {alignItems, justifyContent} DIRECT (one undo)", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "view", style: layout() }]);
+    const grid = findNodeByType(harness.tree().root, "alignmentGrid")!;
+    harness.dispatch(grid.id, "onChange", [
+      { alignItems: "center", justifyContent: "flex-end" },
+    ]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { alignItems: "center", justifyContent: "flex-end" },
+    });
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("gap typing is a DRAFT (no undo); commit ends it", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "view", style: layout() }]);
+    const gap = textFields(harness.tree().root)[0]!;
+    expect(harness.draftActive()).toBe(false);
+    harness.dispatch(gap.id, "onChange", ["8"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { gap: 8 },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(gap.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(0);
+  });
+});
+
+describe("FlexLayoutPanel — dimensions", () => {
+  test("width field: custom stored value flows to `value`; mode is custom", () => {
+    const { harness } = mount([{ type: "view", style: layout({ width: 150 }) }]);
+    const [w] = dimensionFields(harness.tree().root);
+    expect(w!.props.mode).toBe("custom");
+    expect(w!.props.value).toBe(150);
+  });
+
+  test("width fill in a row parent: onModeChange('custom') resets flex (main axis)", () => {
+    // A row parent (the screen defaults to column, so seed the parent view's
+    // direction) — here the seeded view sits under the screen (column), so WIDTH is
+    // the stretch axis (alignSelf). Assert the alignSelf reset for custom.
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ width: "auto", alignSelf: "stretch" }) },
+    ]);
+    const [w] = dimensionFields(harness.tree().root);
+    // Parent (screen) is column → width is the stretch axis → fill via alignSelf.
+    expect(w!.props.mode).toBe("fill");
+    harness.dispatch(w!.id, "onModeChange", ["custom"]);
+    // custom in the stretch-parent direction resets alignSelf to "auto".
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { width: 100, alignSelf: "auto" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("width hug in a stretch column parent opts out with alignSelf flex-start", () => {
+    // The parent screen stretches by default (alignItems "stretch"), so an
+    // "auto" cross size would keep filling. Hug writes alignSelf "flex-start" to
+    // opt out and actually hug.
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ width: 120 }) },
+    ]);
+    const [w] = dimensionFields(harness.tree().root);
+    harness.dispatch(w!.id, "onModeChange", ["hug"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { width: "auto", alignSelf: "flex-start" },
+    });
+  });
+
+  test("width fill in a column parent sets width auto + alignSelf stretch", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ width: 120 }) },
+    ]);
+    const [w] = dimensionFields(harness.tree().root);
+    harness.dispatch(w!.id, "onModeChange", ["fill"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { width: "auto", alignSelf: "stretch" },
+    });
+  });
+
+  test("height fill in a column parent sets flex:1 (main axis for height)", () => {
+    // Height is the MAIN axis under a column parent → fill via flex:1.
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ height: 80 }) },
+    ]);
+    const [, h] = dimensionFields(harness.tree().root);
+    harness.dispatch(h!.id, "onModeChange", ["fill"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { height: "auto", flex: 1 },
+    });
+  });
+
+  test("height custom in a column parent clears flex (main axis)", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ height: "auto", flex: 1 }) },
+    ]);
+    const [, h] = dimensionFields(harness.tree().root);
+    expect(h!.props.mode).toBe("fill");
+    harness.dispatch(h!.id, "onModeChange", ["custom"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { height: 100, flex: undefined },
+    });
+  });
+
+  test("typing a custom width is a DRAFT with a single width payload", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ width: 100 }) },
+    ]);
+    const [w] = dimensionFields(harness.tree().root);
+    harness.dispatch(w!.id, "onChange", ["175"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { width: 175 },
+    });
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("bounding box flows into the dimension field's computed prop", async () => {
+    const { harness, nodeIds } = mount([{ type: "view", style: layout({ width: 100 }) }]);
+    act(() => {
+      harness.store.setState((state) => ({
+        ...state,
+        canvas: {
+          ...state.canvas,
+          boundingBoxes: {
+            ...state.canvas.boundingBoxes,
+            [nodeIds[0]!]: { x: 0, y: 0, width: 222.4, height: 96.6 },
+          },
+        },
+      }));
+    });
+    await flush();
+    const [w, h] = dimensionFields(harness.tree().root);
+    // Rounded per the old DimensionsSubSection (Math.round).
+    expect(w!.props.computed).toBe(222);
+    expect(h!.props.computed).toBe(97);
+  });
+});
+
+describe("FlexLayoutPanel — padding", () => {
+  test("non-uniform padding seeds the expanded (4-field) view", () => {
+    const { harness } = mount([
+      { type: "view", style: layout({ paddingTop: 4, paddingBottom: 8 }) },
+    ]);
+    // Expanded → 4 padding fields (gap is a separate field, so 5 total).
+    expect(textFields(harness.tree().root)).toHaveLength(5);
+  });
+
+  test("uniform padding seeds the collapsed (2-field) view; expand adds fields", async () => {
+    const { harness } = mount([{ type: "view", style: layout() }]);
+    // gap + 2 uniform padding fields = 3.
+    expect(textFields(harness.tree().root)).toHaveLength(3);
+    const button = paddingButton(harness.tree().root)!;
+    expect(button.props.icon).toBe("fullscreen");
+    act(() => {
+      harness.dispatch(button.id, "onClick");
+    });
+    await flush();
+    // gap + 4 per-side padding fields = 5; button flips to the collapse (vault) icon.
+    expect(textFields(harness.tree().root)).toHaveLength(5);
+    expect(paddingButton(harness.tree().root)!.props.icon).toBe("vault");
+  });
+
+  test("expanded padding state persists across a store-driven re-emit", async () => {
+    const { harness, nodeIds } = mount([
+      { type: "view", style: layout({ paddingTop: 4, paddingBottom: 8 }) },
+    ]);
+    // Force a re-emit via an unrelated store change; the seeded expanded state
+    // (from non-uniform padding) must survive.
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, null);
+    });
+    await flush();
+    expect(textFields(harness.tree().root)).toHaveLength(5);
+  });
+
+  test("collapse-to-uniform is a DIRECT write of all four sides (one undo)", async () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ paddingLeft: 6, paddingRight: 6, paddingTop: 10, paddingBottom: 12 }) },
+    ]);
+    // Seeded expanded (top≠bottom). Collapse writes left→L/R and top→T/B.
+    const button = paddingButton(harness.tree().root)!;
+    act(() => {
+      harness.dispatch(button.id, "onClick");
+    });
+    await flush();
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { paddingLeft: 6, paddingRight: 6, paddingTop: 10, paddingBottom: 10 },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("individual padding typing is a DRAFT with a single-side payload", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ paddingTop: 4, paddingBottom: 8 }) },
+    ]);
+    // Expanded order: gap, paddingLeft, paddingTop, paddingRight, paddingBottom.
+    const fields = textFields(harness.tree().root);
+    const paddingRight = fields[3]!;
+    harness.dispatch(paddingRight.id, "onChange", ["9"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { paddingRight: 9 },
+    });
+  });
+});
+
+describe("FlexLayoutPanel — override resets", () => {
+  test("override-active gap reset writes the base value back (one undo)", async () => {
+    const { doc, harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ gap: 4 }) },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, { style: { gap: 20 } });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+    // Find the gap reset affordance (label "layout gap").
+    const gapReset = findNodesByType(harness.tree().root, "resetAffordance").find(
+      (r) => r.props.label === "layout gap",
+    )!;
+    expect(gapReset.props.show).toBe(true);
+    harness.dispatch(gapReset.id, "onReset");
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { gap: 4 },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("override-active alignment reset writes both base keys back", async () => {
+    const { doc, harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ alignItems: "center", justifyContent: "center" }) },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { alignItems: "flex-end", justifyContent: "flex-end" },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+    const alignReset = findNodesByType(harness.tree().root, "resetAffordance").find(
+      (r) => r.props.label === "layout alignment",
+    )!;
+    expect(alignReset.props.show).toBe(true);
+    harness.dispatch(alignReset.id, "onReset");
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { alignItems: "center", justifyContent: "center" },
+    });
+  });
+
+  test("override-active padding-horizontal reset writes both sides back (padding pair)", async () => {
+    const { doc, harness, nodeIds, calls } = mount([
+      { type: "view", style: layout({ paddingLeft: 6, paddingRight: 6 }) },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { paddingLeft: 30, paddingRight: 30 },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+    const hReset = findNodesByType(harness.tree().root, "resetAffordance").find(
+      (r) => r.props.label === "padding horizontal",
+    )!;
+    expect(hReset.props.show).toBe(true);
+    harness.dispatch(hReset.id, "onReset");
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { paddingLeft: 6, paddingRight: 6 },
+    });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx
new file mode 100644
index 000000000..b3644b461
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx
@@ -0,0 +1,444 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Layout` (flex) section — the wire-tree
+ * replica of {@link ../sections/flex-layout-section.FlexLayoutSection}
+ * (screen/view nodes, multi-selectable).
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` "Layout" → `Panel.Section title="Layout"`.
+ * - FLEX subsection: a direction `ToggleGroup` (column/row) + a gap `TextInput`
+ *   stacked in a narrow column, beside the `FlexAlignmentInput` →
+ *   `Panel.Subsection` > `Panel.Row` > (`Panel.Column` of a `Panel.ToggleGroup` +
+ *   `Panel.TextField`) + `Panel.AlignmentGrid`.
+ * - DIMENSIONS subsection: two width/height fields → `Panel.Subsection title=
+ *   "Dimensions"` > `Panel.Row` > two `Panel.DimensionField`s (axis width/height).
+ * - PADDING subsection: uniform (2 fields) OR expanded (4 per-side fields) + an
+ *   expand/collapse button → `Panel.Subsection title="Padding"` > `Panel.Row`.
+ *
+ * Applicability nuance (verbatim from the old `DynamicPanel`): the section renders
+ * ONLY when the first node has a truthy `parentId`; the definition returns an
+ * empty `<Panel/>` otherwise (renders nothing). Dimension inputs are disabled for
+ * a `screen` node (`editableDimensions = firstNode.type !== "screen"`).
+ *
+ * Behavior (identical to the old section):
+ * - direction + alignment are DIRECT writes (one undo); gap + padding + dimension
+ *   typing are DRAFT gestures (begin-on-first-change → live write → commit).
+ * - DIMENSION mode derivation stays HERE: `getDimensionState` computes fill/hug/
+ *   custom from the node's flex sizing + the PARENT's flex direction; the paired
+ *   `alignSelf`/`flex`/`width` resets each mode writes are replicated exactly and
+ *   go DIRECT via `updateLayoutStyle` (one undo). `computed` px comes from the
+ *   canvas bounding box, rounded, like the old `DimensionsSubSection`.
+ * - `showIndividualPadding` is a one-time-seeded local `useState` (non-uniform
+ *   padding OR any padding key mixed), matching the legacy `key={section.id}`
+ *   mount.
+ * - Every reset affordance the old section rendered is replicated: flexDirection;
+ *   gap; [alignItems, justifyContent]; [width, flex, alignSelf]; [height, flex,
+ *   alignSelf]; and the six padding combos.
+ *
+ * PARITY COMPROMISES (wire limitations, not the section's intent): none — the
+ * wire `alignmentGrid`/`dimensionField` composites carry the full host controls,
+ * and the padding/gap/direction icon tokens are the exact ones the section drew.
+ */
+import type { AlignItems, FlexDirection, JustifyContent } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback, useState } from "react";
+import { useStore } from "zustand";
+
+import {
+  dimensionModeWrite,
+  FALLBACK_FIXED_PX,
+  getDimensionState,
+  type DimensionAxis,
+  type DimensionState,
+} from "../../../panel-kit/dimension-field";
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updateLayoutStyle } from "../../../state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { getAlignItems, getFlexDirection } from "../../../state/utils/node-type-helpers";
+import { getNodeById } from "../../../state/utils/nodes";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** The flex-sizing style the layout panel reads and writes. */
+interface LayoutStyle {
+  gap: number;
+  justifyContent: string;
+  alignItems: string;
+  flexDirection: FlexDirection;
+  paddingTop: number;
+  paddingRight: number;
+  paddingBottom: number;
+  paddingLeft: number;
+  width: number | "auto";
+  height: number | "auto";
+  flex: number | undefined;
+  alignSelf: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline";
+}
+
+const DIRECTION_KEYS = ["flexDirection"] as const;
+const GAP_KEYS = ["gap"] as const;
+const ALIGNMENT_KEYS = ["alignItems", "justifyContent"] as const;
+const WIDTH_KEYS = ["width", "flex", "alignSelf"] as const;
+const HEIGHT_KEYS = ["height", "flex", "alignSelf"] as const;
+const PADDING_LEFT_KEYS = ["paddingLeft"] as const;
+const PADDING_TOP_KEYS = ["paddingTop"] as const;
+const PADDING_RIGHT_KEYS = ["paddingRight"] as const;
+const PADDING_BOTTOM_KEYS = ["paddingBottom"] as const;
+const PADDING_HORIZONTAL_KEYS = ["paddingLeft", "paddingRight"] as const;
+const PADDING_VERTICAL_KEYS = ["paddingTop", "paddingBottom"] as const;
+
+/** Whether padding diverges (top≠bottom or left≠right) — the expanded seed. */
+function shouldShowIndividualPadding(node: LayoutStyle): boolean {
+  return node.paddingTop !== node.paddingBottom || node.paddingLeft !== node.paddingRight;
+}
+
+/** The `Layout` (flex) panel definition. */
+export function FlexLayoutPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes, style, targets, mixedKeys } = useDefinitionNodes();
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const firstNode = nodes[0] as SnapshotNode | undefined;
+  const parentId = firstNode?.parentId ?? null;
+  const firstNodeId = firstNode?.id ?? null;
+  const editableDimensions = firstNode?.type !== "screen";
+
+  // The parent node (for the parent flex direction) + the first node's live
+  // bounding box (for the computed px labels), read draft-agnostic from the store
+  // exactly like the legacy `DimensionsSubSection`.
+  const parent = useStore(store, (state) => (parentId ? getNodeById(state, parentId) : null));
+  const boundingBox = useStore(store, (state) =>
+    firstNodeId ? state.canvas.boundingBoxes[firstNodeId] : null,
+  );
+
+  const node = style as LayoutStyle | null;
+
+  // One-time seed: expanded when padding is non-uniform or any padding key is
+  // mixed across a multi-selection (matches the old `useState(initializer)` under
+  // `key={section.id}`).
+  const [showIndividualPadding, setShowIndividualPadding] = useState<boolean>(() => {
+    if (!node) return false;
+    return (
+      shouldShowIndividualPadding(node) ||
+      mixedKeys.has("paddingLeft") ||
+      mixedKeys.has("paddingRight") ||
+      mixedKeys.has("paddingTop") ||
+      mixedKeys.has("paddingBottom")
+    );
+  });
+
+  const handleChange = useCallback(
+    (incoming: Partial<LayoutStyle>) => {
+      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<LayoutStyle>) => {
+      if (!draft) begin();
+      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  const collapsePadding = useCallback(() => {
+    if (!node) return;
+    setShowIndividualPadding(false);
+    handleChange({
+      paddingLeft: node.paddingLeft,
+      paddingRight: node.paddingLeft,
+      paddingTop: node.paddingTop,
+      paddingBottom: node.paddingTop,
+    });
+  }, [node, handleChange]);
+
+  // Renders NOTHING when the first node has no parent (the old DynamicPanel gated
+  // the whole section on `firstNode.parentId`), matching the flag-off path.
+  if (!node || !parentId) return <Panel />;
+
+  const parentDirection = getFlexDirection(parent, "row");
+  const parentAlignItems = getAlignItems(parent, "stretch");
+  const computedWidth = boundingBox ? Math.round(boundingBox.width) : null;
+  const computedHeight = boundingBox ? Math.round(boundingBox.height) : null;
+
+  const active = overrideReset.isOverrideModeActive;
+  const reset = (keys: readonly string[]) =>
+    handleChange(overrideReset.buildResetPatch(keys) as Partial<LayoutStyle>);
+
+  // ── Dimension wiring (mode + display value + paired-reset writes) ────────────
+  const dimension = (axis: DimensionAxis) => {
+    const mode = getDimensionState(axis, node as never, parentDirection, parentAlignItems);
+    const stored = node[axis];
+    const computed = axis === "width" ? computedWidth : computedHeight;
+    // Numeric value: the stored dimension in `custom`; the effective fallback
+    // (auto → FALLBACK_FIXED_PX) otherwise, so the `Fixed … (N px)` menu label
+    // matches the monolith even without a bounding box.
+    const value = stored === "auto" ? FALLBACK_FIXED_PX : stored;
+    const onModeChange = (next: DimensionState) => {
+      const effectivePx = computed ?? (stored === "auto" ? FALLBACK_FIXED_PX : stored);
+      handleChange(
+        dimensionModeWrite(axis, next, {
+          effectivePx,
+          parentDirection,
+          parentAlignItems,
+          currentAlignSelf: node.alignSelf,
+        }) as Partial<LayoutStyle>,
+      );
+    };
+    return { mode, value, computed, onModeChange };
+  };
+
+  const width = dimension("width");
+  const height = dimension("height");
+
+  return (
+    <Panel>
+      <Panel.Section title="Layout">
+        <Panel.Subsection>
+          <Panel.Row align="stretch">
+            <Panel.Column width="auto">
+              <Panel.ResetAffordance
+                label="layout direction"
+                show={active && overrideReset.hasOverride(DIRECTION_KEYS)}
+                onReset={() => reset(DIRECTION_KEYS)}
+              >
+                <Panel.ToggleGroup
+                  mixed={mixedKeys.has("flexDirection")}
+                  options={[
+                    { value: "column", icon: "arrowDown" },
+                    { value: "row", icon: "arrowRight" },
+                  ]}
+                  value={node.flexDirection}
+                  onChange={(value) => handleChange({ flexDirection: value as FlexDirection })}
+                />
+              </Panel.ResetAffordance>
+              <Panel.ResetAffordance
+                label="layout gap"
+                show={active && overrideReset.hasOverride(GAP_KEYS)}
+                onReset={() => reset(GAP_KEYS)}
+              >
+                <Panel.TextField
+                  kind="number"
+                  icon="betweenHorizontalStart"
+                  step={1}
+                  placeholder="Gap"
+                  mixed={mixedKeys.has("gap")}
+                  value={node.gap.toString()}
+                  onChange={(value) => handleDraftChange({ gap: Number(value) })}
+                  onCommit={handleCommit}
+                />
+              </Panel.ResetAffordance>
+            </Panel.Column>
+            <Panel.ResetAffordance
+              label="layout alignment"
+              show={active && overrideReset.hasOverride(ALIGNMENT_KEYS)}
+              onReset={() => reset(ALIGNMENT_KEYS)}
+            >
+              <Panel.AlignmentGrid
+                flexDirection={node.flexDirection}
+                alignItems={node.alignItems}
+                justifyContent={node.justifyContent}
+                mixed={mixedKeys.has("alignItems") || mixedKeys.has("justifyContent")}
+                onChange={(value) => {
+                  const changes = value as { alignItems: AlignItems; justifyContent: JustifyContent };
+                  handleChange({
+                    alignItems: changes.alignItems,
+                    justifyContent: changes.justifyContent,
+                  });
+                }}
+              />
+            </Panel.ResetAffordance>
+          </Panel.Row>
+        </Panel.Subsection>
+
+        <Panel.Subsection title="Dimensions">
+          <Panel.Row align="stretch">
+            <Panel.ResetAffordance
+              label="width"
+              show={active && overrideReset.hasOverride(WIDTH_KEYS)}
+              onReset={() => reset(WIDTH_KEYS)}
+            >
+              <Panel.DimensionField
+                axis="width"
+                mode={width.mode}
+                value={width.value}
+                computed={width.computed ?? undefined}
+                label="Width"
+                disabled={!editableDimensions}
+                mixed={mixedKeys.has("width")}
+                onChange={(value) => handleDraftChange({ width: Number(value) })}
+                onCommit={handleCommit}
+                onModeChange={(mode) => width.onModeChange(mode as DimensionState)}
+              />
+            </Panel.ResetAffordance>
+            <Panel.ResetAffordance
+              label="height"
+              show={active && overrideReset.hasOverride(HEIGHT_KEYS)}
+              onReset={() => reset(HEIGHT_KEYS)}
+            >
+              <Panel.DimensionField
+                axis="height"
+                mode={height.mode}
+                value={height.value}
+                computed={height.computed ?? undefined}
+                label="Height"
+                disabled={!editableDimensions}
+                mixed={mixedKeys.has("height")}
+                onChange={(value) => handleDraftChange({ height: Number(value) })}
+                onCommit={handleCommit}
+                onModeChange={(mode) => height.onModeChange(mode as DimensionState)}
+              />
+            </Panel.ResetAffordance>
+          </Panel.Row>
+        </Panel.Subsection>
+
+        <Panel.Subsection title="Padding">
+          <Panel.Row align="stretch">
+            {showIndividualPadding && (
+              <Panel.Column width="auto">
+                <Panel.Row align="stretch">
+                  <Panel.ResetAffordance
+                    label="padding left"
+                    show={active && overrideReset.hasOverride(PADDING_LEFT_KEYS)}
+                    onReset={() => reset(PADDING_LEFT_KEYS)}
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="panelLeftDashed"
+                      step={1}
+                      placeholder="Padding Left"
+                      mixed={mixedKeys.has("paddingLeft")}
+                      value={node.paddingLeft.toString()}
+                      onChange={(value) => handleDraftChange({ paddingLeft: Number(value) })}
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                  <Panel.ResetAffordance
+                    label="padding top"
+                    show={active && overrideReset.hasOverride(PADDING_TOP_KEYS)}
+                    onReset={() => reset(PADDING_TOP_KEYS)}
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="panelTopDashed"
+                      step={1}
+                      placeholder="Padding Top"
+                      mixed={mixedKeys.has("paddingTop")}
+                      value={node.paddingTop.toString()}
+                      onChange={(value) => handleDraftChange({ paddingTop: Number(value) })}
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                </Panel.Row>
+                <Panel.Row align="stretch">
+                  <Panel.ResetAffordance
+                    label="padding right"
+                    show={active && overrideReset.hasOverride(PADDING_RIGHT_KEYS)}
+                    onReset={() => reset(PADDING_RIGHT_KEYS)}
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="panelRightDashed"
+                      step={1}
+                      placeholder="Padding Right"
+                      mixed={mixedKeys.has("paddingRight")}
+                      value={node.paddingRight.toString()}
+                      onChange={(value) => handleDraftChange({ paddingRight: Number(value) })}
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                  <Panel.ResetAffordance
+                    label="padding bottom"
+                    show={active && overrideReset.hasOverride(PADDING_BOTTOM_KEYS)}
+                    onReset={() => reset(PADDING_BOTTOM_KEYS)}
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="panelBottomDashed"
+                      step={1}
+                      placeholder="Padding Bottom"
+                      mixed={mixedKeys.has("paddingBottom")}
+                      value={node.paddingBottom.toString()}
+                      onChange={(value) => handleDraftChange({ paddingBottom: Number(value) })}
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                </Panel.Row>
+              </Panel.Column>
+            )}
+
+            {!showIndividualPadding && (
+              <Panel.Column width="auto">
+                <Panel.Row align="stretch">
+                  <Panel.ResetAffordance
+                    label="padding horizontal"
+                    show={active && overrideReset.hasOverride(PADDING_HORIZONTAL_KEYS)}
+                    onReset={() => reset(PADDING_HORIZONTAL_KEYS)}
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="panelLeftRightDashed"
+                      step={1}
+                      placeholder="Padding Horizontal"
+                      mixed={mixedKeys.has("paddingLeft") || mixedKeys.has("paddingRight")}
+                      value={node.paddingLeft.toString()}
+                      onChange={(value) =>
+                        handleDraftChange({
+                          paddingLeft: Number(value),
+                          paddingRight: Number(value),
+                        })
+                      }
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                  <Panel.ResetAffordance
+                    label="padding vertical"
+                    show={active && overrideReset.hasOverride(PADDING_VERTICAL_KEYS)}
+                    onReset={() => reset(PADDING_VERTICAL_KEYS)}
+                  >
+                    <Panel.TextField
+                      kind="number"
+                      icon="panelTopBottomDashed"
+                      step={1}
+                      placeholder="Padding Top"
+                      mixed={mixedKeys.has("paddingTop") || mixedKeys.has("paddingBottom")}
+                      value={node.paddingTop.toString()}
+                      onChange={(value) =>
+                        handleDraftChange({
+                          paddingTop: Number(value),
+                          paddingBottom: Number(value),
+                        })
+                      }
+                      onCommit={handleCommit}
+                    />
+                  </Panel.ResetAffordance>
+                </Panel.Row>
+              </Panel.Column>
+            )}
+
+            <Panel.Button
+              icon={showIndividualPadding ? "vault" : "fullscreen"}
+              size="icon-sm"
+              onClick={() =>
+                showIndividualPadding ? collapsePadding() : setShowIndividualPadding(true)
+              }
+            />
+          </Panel.Row>
+        </Panel.Subsection>
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.test.tsx
new file mode 100644
index 000000000..3f0d79862
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.test.tsx
@@ -0,0 +1,263 @@
+// @vitest-environment jsdom
+
+import type { Action } from "@voidhash/mimic-schema";
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test, vi } from "vite-plus/test";
+
+// The action editor's product payload editor renders through app context that
+// reads router params; outside a route `useParams({strict:false})` returns `{}`.
+vi.mock("@tanstack/react-router", () => ({ useParams: () => ({}) }));
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import {
+  addInteraction,
+  removeInteraction,
+  updateInteraction,
+  updateInteractionActionOverride,
+} from "../../../state/actions";
+import {
+  createOfflineDesignerDocument,
+  type OfflineDesignerDocument,
+} from "../../../state/testing/offline-document";
+import { InteractionsPanel } from "./interactions-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+const restore: (() => void)[] = [];
+afterEach(() => {
+  while (restore.length) restore.pop()!();
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** Seeds a `click`-triggered interaction with `action` onto a view node. */
+function seedInteraction(doc: OfflineDesignerDocument, nodeId: string, action: Action): string {
+  let entryId = "";
+  doc.transaction((root) => {
+    const node = root.findByIdAcrossTree(nodeId);
+    const created = (
+      node as unknown as {
+        data: { interactions: { push: (v: unknown) => { id: string } } };
+      }
+    ).data.interactions.push({
+      action,
+      id: `interaction-seed-${Math.random().toString(36).slice(2, 8)}`,
+      trigger: { type: "click" },
+    });
+    entryId = created.id;
+  });
+  return entryId;
+}
+
+/**
+ * Seeds a state entry carrying an action override for `interactionId`. Returns
+ * the state array-entry id (the id used to select the state).
+ */
+function seedStateWithActionOverride(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  interactionId: string,
+  action: Action,
+): string {
+  let entryId = "";
+  doc.transaction((root) => {
+    const node = root.findByIdAcrossTree(nodeId);
+    const created = (
+      node as unknown as {
+        data: { states: { push: (v: unknown) => { id: string } } };
+      }
+    ).data.states.push({
+      id: `state-value-${Math.random().toString(36).slice(2, 8)}`,
+      condition: {
+        type: "or",
+        value: [
+          {
+            type: "and",
+            value: [
+              {
+                type: "equals",
+                value: {
+                  left: { type: "literal", value: { key: "boolean", value: true } },
+                  right: { type: "literal", value: { key: "boolean", value: true } },
+                },
+              },
+            ],
+          },
+        ],
+      },
+      name: "Hovered",
+      overrides: { actions: [{ interactionId, action }] },
+    });
+    entryId = created.id;
+  });
+  return entryId;
+}
+
+describe("InteractionsPanel — structure", () => {
+  test("renders a row per interaction with a trigger select + action editor", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedInteraction(doc, nodeIds[0]!, { type: "close-paywall" });
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const root = harness.tree().root;
+    expect(findNodeByType(root, "section")?.props.title).toBe("Interactions");
+    const trigger = findNodeByType(root, "selectField")!;
+    expect(trigger.props.options).toEqual([{ value: "click", label: "On click" }]);
+    expect(trigger.props.value).toBe("click");
+    const editor = findNodeByType(root, "actionEditorField")!;
+    expect((editor.props.value as { type: string }).type).toBe("close-paywall");
+    // The add + remove buttons are present.
+    const icons = findNodesByType(root, "button").map((b) => b.props.icon);
+    expect(icons).toContain("plus");
+    expect(icons).toContain("minus");
+  });
+
+  test("no rows when the node has no interactions", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+    expect(findNodeByType(harness.tree().root, "actionEditorField")).toBeUndefined();
+    // Only the header add button.
+    expect(findNodesByType(harness.tree().root, "button").map((b) => b.props.icon)).toEqual(["plus"]);
+  });
+});
+
+describe("InteractionsPanel — effective action under a selected state", () => {
+  test("the editor value is the state override, not the base action", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const interactionId = seedInteraction(doc, nodeIds[0]!, { type: "none" });
+    const stateId = seedStateWithActionOverride(doc, nodeIds[0]!, interactionId, {
+      type: "close-paywall",
+    });
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    // Base: no state selected → effective action is the base "none".
+    expect(
+      (findNodeByType(harness.tree().root, "actionEditorField")!.props.value as { type: string })
+        .type,
+    ).toBe("none");
+
+    // Select the state → effective action is the override "close-paywall".
+    act(() => selectState(harness!.store, nodeIds[0]!, stateId));
+    await flush();
+    expect(
+      (findNodeByType(harness.tree().root, "actionEditorField")!.props.value as { type: string })
+        .type,
+    ).toBe("close-paywall");
+  });
+});
+
+describe("InteractionsPanel — write branching", () => {
+  test("no state selected → onChange writes the base via updateInteraction", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const interactionId = seedInteraction(doc, nodeIds[0]!, { type: "none" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(updateInteraction as never, calls as never));
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    harness.dispatch(editor.id, "onChange", [{ type: "close-paywall" }]);
+    expect(calls.at(-1)!.params).toEqual({
+      interactionId,
+      newAction: { type: "close-paywall" },
+      nodeId: nodeIds[0],
+    });
+  });
+
+  test("state selected → onChange writes an override via updateInteractionActionOverride", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const interactionId = seedInteraction(doc, nodeIds[0]!, { type: "none" });
+    const stateId = seedStateWithActionOverride(doc, nodeIds[0]!, interactionId, { type: "none" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(updateInteractionActionOverride as never, calls as never));
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+    act(() => selectState(harness!.store, nodeIds[0]!, stateId));
+    await flush();
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    harness.dispatch(editor.id, "onChange", [{ type: "close-paywall" }]);
+    expect(calls.at(-1)!.params).toEqual({
+      interactionId,
+      newAction: { type: "close-paywall" },
+      nodeId: nodeIds[0],
+      stateId,
+    });
+  });
+
+  test("an action-payload-sourced action is dropped (no write)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedInteraction(doc, nodeIds[0]!, { type: "none" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(updateInteraction as never, calls as never));
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const editor = findNodeByType(harness.tree().root, "actionEditorField")!;
+    // purchase-product with an action-payload source → toVisualAction returns null.
+    harness.dispatch(editor.id, "onChange", [
+      { type: "purchase-product", payload: { type: "action-payload", field: "productId" } },
+    ]);
+    expect(calls).toHaveLength(0);
+  });
+});
+
+describe("InteractionsPanel — add / remove", () => {
+  test("the add button dispatches addInteraction for the node", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(addInteraction as never, calls as never));
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const add = findNodesByType(harness.tree().root, "button").find((b) => b.props.icon === "plus")!;
+    harness.dispatch(add.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({ nodeId: nodeIds[0] });
+  });
+
+  test("the remove button dispatches removeInteraction with the entry id", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const interactionId = seedInteraction(doc, nodeIds[0]!, { type: "none" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(removeInteraction as never, calls as never));
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const remove = findNodesByType(harness.tree().root, "button").find(
+      (b) => b.props.icon === "minus",
+    )!;
+    harness.dispatch(remove.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({ interactionId, nodeId: nodeIds[0] });
+  });
+
+  test("the trigger select writes the trigger via updateInteraction", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const interactionId = seedInteraction(doc, nodeIds[0]!, { type: "none" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(updateInteraction as never, calls as never));
+    harness = mountPanelDefinition(InteractionsPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const trigger = findNodeByType(harness.tree().root, "selectField")!;
+    harness.dispatch(trigger.id, "onChange", ["click"]);
+    expect(calls.at(-1)!.params).toEqual({
+      interactionId,
+      newTrigger: { type: "click" },
+      nodeId: nodeIds[0],
+    });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
new file mode 100644
index 000000000..0a613e680
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
@@ -0,0 +1,223 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Interactions` section — the wire-tree
+ * replica of {@link ../sections/interactions-section.InteractionsSection} (+ its
+ * `InteractionRow`).
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Interactions" → `Panel.Section title="Interactions"`,
+ *   with a `+` add `Panel.Button` in `Panel.SectionActions`.
+ * - Each interaction → a `Panel.Row` with a controlled `Panel.Popover` (open when
+ *   `openInteractionId === id`) over a trigger `Panel.SelectField` (the single
+ *   "On click" option) + a `Panel.ActionEditorField`, plus a `−` remove
+ *   `Panel.Button`.
+ *
+ * State-aware action resolution (identical to the old section):
+ * - The editor's `value` is the EFFECTIVE action:
+ *   `resolveEffectiveAction(node, selectedStateId, interaction.id, base)` — the
+ *   state override wins when a state is selected.
+ * - The editor's variable lists come from
+ *   `toLabeledVariables(collectAncestorVariables(root, nodeId))`; `productVariables`
+ *   is the `product`-typed subset. `payloadFields` is NOT passed (interactions
+ *   never offer action-payload sources).
+ * - `onChange` narrows the component-bound action back to the visual `Action`
+ *   vocabulary via {@link toVisualAction} (dropping action-payload sources); if a
+ *   state is selected it writes `updateInteractionActionOverride`, else
+ *   `updateInteraction` — exact old branching. Add/remove use the old payloads.
+ */
+import type {
+  Action,
+  ComponentBoundAction,
+  Trigger,
+  TriggerType,
+} from "@voidhash/mimic-schema";
+import type {
+  ScrollViewSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import type { PanelJsonValue } from "@voidhash/paywalls/schema";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import {
+  addInteraction,
+  removeInteraction,
+  updateInteraction,
+  updateInteractionActionOverride,
+} from "../../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../../state/designer-store";
+import {
+  collectAncestorVariables,
+  toLabeledVariables,
+} from "../../../state/utils/ancestor-variables";
+import { selectDocumentRoot } from "../../../state/utils/document-root";
+import {
+  getSelectedStateIdForNode,
+  resolveEffectiveAction,
+} from "../../../state/utils/state-overrides";
+import { ACTION_TYPE_LABELS } from "../../../panel-kit/action-editor";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** A decoded interaction: its array-entry id + `{ trigger, action }`. */
+interface Interaction {
+  readonly id: string;
+  readonly value: { readonly trigger: Trigger; readonly action: Action };
+}
+
+const TRIGGER_LABELS: Record<TriggerType, string> = { click: "On click" };
+
+/**
+ * Narrows a component-bound action back to the visual interaction `Action`
+ * vocabulary. Returns `null` for action-payload sources, which interactions
+ * cannot store (verbatim from the old `InteractionRow`).
+ */
+function toVisualAction(action: ComponentBoundAction): Action | null {
+  switch (action.type) {
+    case "none":
+      return { type: "none" };
+    case "close-paywall":
+      return { type: "close-paywall" };
+    case "set-variable": {
+      const source = action.payload.newValue;
+      if (source.type === "action-payload") return null;
+      return {
+        payload: { newValue: source, variableId: action.payload.variableId },
+        type: "set-variable",
+      };
+    }
+    case "purchase-product": {
+      if (action.payload.type === "action-payload") return null;
+      return { payload: action.payload, type: "purchase-product" };
+    }
+  }
+}
+
+/** Unwraps `node.data.interactions` (`{id,value}` envelope) into decoded interactions. */
+function readInteractions(node: unknown): Interaction[] {
+  const raw = (node as { data?: { interactions?: readonly unknown[] } }).data?.interactions;
+  if (!Array.isArray(raw)) return [];
+  return raw.flatMap((entry) => {
+    const e = entry as { id?: string; value?: { trigger: Trigger; action: Action } };
+    if (e.value === undefined || typeof e.id !== "string") return [];
+    return [{ id: e.id, value: { trigger: e.value.trigger, action: e.value.action } }];
+  });
+}
+
+/** The `Interactions` panel definition. */
+export function InteractionsPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes } = useDefinitionNodes();
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
+
+  const node = nodes[0] as ViewSnapshotNode | ScrollViewSnapshotNode | undefined;
+  const nodeId = node?.id ?? "";
+  const interactions = node ? readInteractions(node) : [];
+  const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, nodeId);
+
+  const allVariables = useMemo(
+    () => toLabeledVariables(collectAncestorVariables(documentRoot, nodeId), nodeId),
+    [documentRoot, nodeId],
+  );
+  const productVariables = useMemo(
+    () => allVariables.filter((v) => v.value.key === "product"),
+    [allVariables],
+  );
+
+  const [openInteractionId, setOpenInteractionId] = useState<string | null>(null);
+
+  const handleAction = (interactionId: string, action: ComponentBoundAction) => {
+    const visualAction = toVisualAction(action);
+    if (!visualAction) return;
+    if (selectedStateId) {
+      dispatch(updateInteractionActionOverride)({
+        interactionId,
+        newAction: visualAction,
+        nodeId,
+        stateId: selectedStateId,
+      });
+      return;
+    }
+    dispatch(updateInteraction)({ interactionId, newAction: visualAction, nodeId });
+  };
+
+  if (!node) return null;
+
+  return (
+    <Panel>
+      <Panel.Section title="Interactions">
+        <Panel.SectionActions>
+          <Panel.Button
+            icon="plus"
+            size="icon-sm"
+            onClick={() => dispatch(addInteraction)({ nodeId })}
+          />
+        </Panel.SectionActions>
+        {interactions.length > 0 && (
+          <Panel.Column gap="md">
+            {interactions.map((interaction) => {
+              const effectiveAction = resolveEffectiveAction(
+                node,
+                selectedStateId,
+                interaction.id,
+                interaction.value.action,
+              );
+              return (
+                <Panel.Row key={interaction.id} align="center">
+                  <Panel.Popover
+                    open={openInteractionId === interaction.id}
+                    onOpenChange={(open) =>
+                      setOpenInteractionId(open ? interaction.id : null)
+                    }
+                  >
+                    <Panel.PopoverTrigger>
+                      {/* No `variant` → the host defaults to the `secondary` trigger look. */}
+                      <Panel.Button
+                        label={`${TRIGGER_LABELS[interaction.value.trigger.type]}  ${ACTION_TYPE_LABELS[effectiveAction.type]}`}
+                        size="sm"
+                      />
+                    </Panel.PopoverTrigger>
+                    <Panel.PopoverContent align="start" side="left">
+                      <Panel.Field label="Trigger">
+                        <Panel.SelectField
+                          options={[{ value: "click", label: "On click" }]}
+                          value={interaction.value.trigger.type}
+                          onChange={(next) =>
+                            dispatch(updateInteraction)({
+                              interactionId: interaction.id,
+                              newTrigger: { type: next as TriggerType },
+                              nodeId,
+                            })
+                          }
+                        />
+                      </Panel.Field>
+                      <Panel.ActionEditorField
+                        value={effectiveAction as unknown as PanelJsonValue}
+                        variables={allVariables as unknown as PanelJsonValue}
+                        productVariables={productVariables as unknown as PanelJsonValue}
+                        onChange={(action) =>
+                          handleAction(interaction.id, action as unknown as ComponentBoundAction)
+                        }
+                      />
+                    </Panel.PopoverContent>
+                  </Panel.Popover>
+                  <Panel.Button
+                    icon="minus"
+                    size="icon-sm"
+                    onClick={() =>
+                      dispatch(removeInteraction)({ interactionId: interaction.id, nodeId })
+                    }
+                  />
+                </Panel.Row>
+              );
+            })}
+          </Panel.Column>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.test.tsx
new file mode 100644
index 000000000..60e4afb2a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.test.tsx
@@ -0,0 +1,206 @@
+// @vitest-environment jsdom
+
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+import { updatePathFillStyle } from "../../../state/actions/features/path-fill-style-actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { PathFillPanel } from "./path-fill-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** Mounts the path-fill panel over `seeds`, watching `updatePathFillStyle`. */
+function mount(seeds: Parameters<typeof seedNodes>[1]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  restoreWatch = watchAction(updatePathFillStyle as never, calls as never);
+  harness = mountPanelDefinition(PathFillPanel, doc, { nodeIds });
+  return { harness, nodeIds, calls };
+}
+
+describe("PathFillPanel — snapshot structure", () => {
+  test("disabled fill: header + enable button, no content controls", () => {
+    const { harness } = mount([{ type: "path" }]);
+    const root = harness.tree().root;
+
+    const section = findNodeByType(root, "section");
+    expect(section?.props.title).toBe("Fill");
+    // The `+` enable button lives in a sectionActions node.
+    const actions = findNodeByType(root, "sectionActions");
+    expect(actions).toBeDefined();
+    const enableButton = findNodeByType(actions!, "button");
+    expect(enableButton?.props.icon).toBe("plus");
+    // No fill controls while disabled.
+    expect(findNodeByType(root, "toggleGroup")).toBeUndefined();
+    expect(findNodeByType(root, "colorField")).toBeUndefined();
+  });
+
+  test("enabled fill: fillRule toggle, disable button, color field", () => {
+    const { harness } = mount([
+      { type: "path", style: { fillEnabled: true, fillColor: "rgba(10, 20, 30, 1)" } },
+    ]);
+    const root = harness.tree().root;
+
+    // No enable button in the header when already enabled.
+    expect(findNodeByType(root, "sectionActions")).toBeUndefined();
+
+    // The toggle + disable button share a stretch/space-between row (matching the
+    // legacy `flex flex-row justify-between gap-2` — no items-center).
+    const row = findNodeByType(root, "row")!;
+    expect(row.props.align).toBe("stretch");
+    expect(row.props.justify).toBe("between");
+
+    const toggle = findNodeByType(root, "toggleGroup");
+    expect((toggle?.props.options as { value: string; label?: string }[]).map((o) => o.value)).toEqual(
+      ["nonzero", "evenodd"],
+    );
+    expect(toggle?.props.value).toBe("nonzero");
+
+    // The disable `−` button sits in the content row (not the header).
+    const buttons = findNodesByType(root, "button");
+    expect(buttons.map((b) => b.props.icon)).toEqual(["minus"]);
+
+    const color = findNodeByType(root, "colorField");
+    expect(color?.props.value).toBe("rgba(10, 20, 30, 1)");
+    expect(color?.props.mixed).toBeUndefined();
+  });
+
+  test("multi-select shows the first node's fillRule (legacy section wires no mixed here)", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { fillEnabled: true, fillRule: "evenodd" } },
+      { type: "path", style: { fillEnabled: true, fillRule: "nonzero" } },
+    ]);
+    const root = harness.tree().root;
+    const toggle = findNodeByType(root, "toggleGroup")!;
+    // The legacy path-fill section passes `value={fill.fillRule}` with no `mixed`
+    // flag (it never reads `mixedKeys`), so the first node's value shows and no
+    // mixed indicator appears — replicated exactly.
+    expect(toggle.props.value).toBe("evenodd");
+    expect(toggle.props.mixed).toBeUndefined();
+
+    // A write targets ALL selected paths.
+    harness.dispatch(toggle.id, "onChange", ["nonzero"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [
+        { nodeId: nodeIds[0], nodeType: "path" },
+        { nodeId: nodeIds[1], nodeType: "path" },
+      ],
+      style: { fillRule: "nonzero" },
+    });
+  });
+});
+
+describe("PathFillPanel — behavior", () => {
+  test("color drag: begin → live change payload → commit is one gesture", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { fillEnabled: true, fillColor: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const color = findNodeByType(harness.tree().root, "colorField")!;
+
+    // onDragStart begins a draft.
+    harness.dispatch(color.id, "onDragStart");
+    expect(harness.draftActive()).toBe(true);
+    expect(harness.undoDepth()).toBe(0);
+
+    // onChange mid-gesture dispatches the action with the EXACT payload into the
+    // draft (no undo entry while the draft is active — the draft suppresses the
+    // per-frame commander push).
+    harness.dispatch(color.id, "onChange", ["rgba(9, 9, 9, 1)"]);
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { fillColor: "rgba(9, 9, 9, 1)" },
+    });
+    expect(harness.undoDepth()).toBe(0);
+
+    // onCommit clears the active draft and commits it as a SINGLE step (no
+    // per-frame undo entries). Path styles are non-state-capable, so the write
+    // is a document no-op — exactly as the legacy section behaves — but the
+    // gesture lifecycle still resolves: the draft is no longer active and the
+    // commander stack stays free of intermediate entries.
+    harness.dispatch(color.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("color drag discard clears the in-flight gesture", () => {
+    const { harness } = mount([
+      { type: "path", style: { fillEnabled: true, fillColor: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const color = findNodeByType(harness.tree().root, "colorField")!;
+
+    harness.dispatch(color.id, "onDragStart");
+    harness.dispatch(color.id, "onChange", ["rgba(5, 5, 5, 1)"]);
+    expect(harness.draftActive()).toBe(true);
+    const before = harness.submittedCount();
+    harness.dispatch(color.id, "onDiscard");
+    expect(harness.draftActive()).toBe(false);
+    // A discarded draft submits nothing.
+    expect(harness.submittedCount()).toBe(before);
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("fillRule toggle is a direct write with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { fillEnabled: true, fillRule: "nonzero" } },
+    ]);
+    const toggle = findNodeByType(harness.tree().root, "toggleGroup")!;
+
+    harness.dispatch(toggle.id, "onChange", ["evenodd"]);
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { fillRule: "evenodd" },
+    });
+    // Direct (non-draft) write records exactly one commander undo entry.
+    expect(harness.undoDepth()).toBe(1);
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("enable button writes fillEnabled:true with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "path" }]);
+    const enable = findNodeByType(harness.tree().root, "button")!;
+    expect(enable.props.icon).toBe("plus");
+
+    harness.dispatch(enable.id, "onClick");
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { fillEnabled: true },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("disable button writes fillEnabled:false with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { fillEnabled: true } },
+    ]);
+    // The only button while enabled is the `−` disable button.
+    const disable = findNodeByType(harness.tree().root, "button")!;
+    expect(disable.props.icon).toBe("minus");
+
+    harness.dispatch(disable.id, "onClick");
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { fillEnabled: false },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx
new file mode 100644
index 000000000..fe19b0576
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx
@@ -0,0 +1,115 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the path `Fill` section — the wire-tree
+ * replica of {@link ../sections/path-fill-section.PathFillSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Fill" → `Panel.Section title="Fill"`.
+ * - header `+` enable button (only when disabled) → `Panel.SectionActions` >
+ *   `Panel.Button icon="plus"` (hoisted into the header by the renderer).
+ * - fillRule `ToggleGroup` (Nonzero/Even-odd) + `−` disable button, in a
+ *   justify-between row → `Panel.Row justify="between"` > `Panel.ToggleGroup` +
+ *   `Panel.Button icon="minus"`.
+ * - fillColor `ColorInput` → `Panel.ColorField` with the same begin/commit/
+ *   discard draft gesture wiring.
+ *
+ * Gesture discipline (identical to the old section): the color is a DRAFT
+ * gesture — `onDragStart` begins a draft, `onChange` writes into it live via
+ * `updatePathFillStyle`, `onCommit` commits, `onDiscard` discards. The fillRule
+ * toggle and the enable/disable buttons are DIRECT writes (no draft, one undo
+ * entry each). Multi-select writes target all `targets`.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback } from "react";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updatePathFillStyle } from "../../../state/actions/features/path-fill-style-actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+interface PathFillStyle {
+  fillColor: string;
+  fillEnabled: boolean;
+  fillRule: "nonzero" | "evenodd";
+  fillOpacity: number;
+}
+
+/** The path `Fill` panel definition. */
+export function PathFillPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets } = useDefinitionNodes();
+  const { begin, commit, discard } = useDesignerDraft(store);
+
+  const fill = style as unknown as PathFillStyle | null;
+
+  const handleChange = useCallback(
+    (incoming: Partial<PathFillStyle>) => {
+      dispatch(updatePathFillStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleColorChange = useCallback(
+    (value: string) => {
+      dispatch(updatePathFillStyle)({
+        nodes: targets,
+        style: { fillColor: value },
+      });
+    },
+    [dispatch, targets],
+  );
+
+  if (!fill) return null;
+
+  return (
+    <Panel>
+      <Panel.Section title="Fill">
+        {!fill.fillEnabled && (
+          <Panel.SectionActions>
+            <Panel.Button
+              icon="plus"
+              size="icon-sm"
+              onClick={() => handleChange({ fillEnabled: true })}
+            />
+          </Panel.SectionActions>
+        )}
+        {fill.fillEnabled && (
+          <>
+            <Panel.Row align="stretch" justify="between">
+              <Panel.ToggleGroup
+                value={fill.fillRule}
+                options={[
+                  { value: "nonzero", label: "Nonzero" },
+                  { value: "evenodd", label: "Even-odd" },
+                ]}
+                onChange={(value) => {
+                  if (value === "nonzero" || value === "evenodd") {
+                    handleChange({ fillRule: value });
+                  }
+                }}
+              />
+              <Panel.Button
+                icon="minus"
+                size="icon-sm"
+                onClick={() => handleChange({ fillEnabled: false })}
+              />
+            </Panel.Row>
+            <Panel.ColorField
+              value={fill.fillColor}
+              onChange={handleColorChange}
+              onCommit={commit}
+              onDiscard={discard}
+              onDragStart={begin}
+            />
+          </>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.test.tsx
new file mode 100644
index 000000000..4c6aec7ee
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.test.tsx
@@ -0,0 +1,200 @@
+// @vitest-environment jsdom
+
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+import { updatePathStrokeStyle } from "../../../state/actions/features/path-stroke-style-actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { PathStrokePanel } from "./path-stroke-panel";
+import {
+  findNodeByLabel,
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  walkTree,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+function mount(seeds: Parameters<typeof seedNodes>[1]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  restoreWatch = watchAction(updatePathStrokeStyle as never, calls as never);
+  harness = mountPanelDefinition(PathStrokePanel, doc, { nodeIds });
+  return { harness, nodeIds, calls };
+}
+
+/** The two toggle groups in document order: [Line Cap, Line Join]. */
+const toggleGroups = (root: Parameters<typeof findNodesByType>[0]) =>
+  findNodesByType(root, "toggleGroup");
+
+describe("PathStrokePanel — snapshot structure", () => {
+  test("disabled stroke: header + enable button, no content", () => {
+    const { harness } = mount([{ type: "path" }]);
+    const root = harness.tree().root;
+
+    expect(findNodeByType(root, "section")?.props.title).toBe("Stroke");
+    const actions = findNodeByType(root, "sectionActions")!;
+    expect(findNodeByType(actions, "button")?.props.icon).toBe("plus");
+    expect(findNodeByType(root, "textField")).toBeUndefined();
+    expect(toggleGroups(root)).toHaveLength(0);
+  });
+
+  test("enabled stroke: width field, cap/join toggles, color field", () => {
+    const { harness } = mount([
+      {
+        type: "path",
+        style: {
+          strokeEnabled: true,
+          strokeWidth: 3,
+          strokeLinecap: "round",
+          strokeLinejoin: "bevel",
+          strokeColor: "rgba(1, 2, 3, 1)",
+        },
+      },
+    ]);
+    const root = harness.tree().root;
+
+    // Width subsection: a number textField (square icon) + a `−` disable button.
+    expect(findNodeByLabel(root, "Width")?.type).toBe("subsection");
+    const width = findNodeByType(root, "textField")!;
+    expect(width.props.kind).toBe("number");
+    expect(width.props.icon).toBe("square");
+    expect(width.props.value).toBe("3");
+    const buttons = findNodesByType(root, "button");
+    expect(buttons.map((b) => b.props.icon)).toEqual(["minus"]);
+
+    // Line Cap + Line Join toggles, in order.
+    const [cap, join] = toggleGroups(root);
+    expect((cap!.props.options as { value: string }[]).map((o) => o.value)).toEqual([
+      "butt",
+      "round",
+      "square",
+    ]);
+    expect(cap!.props.value).toBe("round");
+    expect((join!.props.options as { value: string }[]).map((o) => o.value)).toEqual([
+      "miter",
+      "round",
+      "bevel",
+    ]);
+    expect(join!.props.value).toBe("bevel");
+
+    expect(findNodeByType(root, "colorField")?.props.value).toBe("rgba(1, 2, 3, 1)");
+
+    // Cap/Join subsection titles present.
+    const titles = [...walkTree(root)]
+      .filter((n) => n.type === "subsection")
+      .map((n) => n.props.title);
+    expect(titles).toEqual(["Width", "Line Cap", "Line Join"]);
+  });
+});
+
+describe("PathStrokePanel — behavior", () => {
+  test("width field is a draft gesture: begin-on-first-change → commit", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { strokeEnabled: true, strokeWidth: 2 } },
+    ]);
+    const width = findNodeByType(harness.tree().root, "textField")!;
+
+    // Typing begins the draft on the first change and writes live into it.
+    expect(harness.draftActive()).toBe(false);
+    harness.dispatch(width.id, "onChange", ["5"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { strokeWidth: 5 },
+    });
+    expect(harness.undoDepth()).toBe(0);
+
+    // A second change stays in the same draft (no second draft, no undo entry).
+    harness.dispatch(width.id, "onChange", ["6"]);
+    expect(calls).toHaveLength(2);
+    expect(harness.undoDepth()).toBe(0);
+
+    // Commit ends the gesture as a single step.
+    harness.dispatch(width.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("line cap toggle is a direct write with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { strokeEnabled: true, strokeLinecap: "butt" } },
+    ]);
+    const [cap] = toggleGroups(harness.tree().root);
+
+    harness.dispatch(cap!.id, "onChange", ["round"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { strokeLinecap: "round" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("line join toggle is a direct write with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { strokeEnabled: true, strokeLinejoin: "miter" } },
+    ]);
+    const [, join] = toggleGroups(harness.tree().root);
+
+    harness.dispatch(join!.id, "onChange", ["bevel"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { strokeLinejoin: "bevel" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("color drag begins/commits a draft; enable/disable are direct writes", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "path", style: { strokeEnabled: true, strokeColor: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const color = findNodeByType(harness.tree().root, "colorField")!;
+
+    harness.dispatch(color.id, "onDragStart");
+    expect(harness.draftActive()).toBe(true);
+    harness.dispatch(color.id, "onChange", ["rgba(7, 7, 7, 1)"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { strokeColor: "rgba(7, 7, 7, 1)" },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(color.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+
+    // The disable `−` button is a direct write.
+    const disable = findNodeByType(harness.tree().root, "button")!;
+    expect(disable.props.icon).toBe("minus");
+    harness.dispatch(disable.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { strokeEnabled: false },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("enable button writes strokeEnabled:true with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "path" }]);
+    const enable = findNodeByType(harness.tree().root, "button")!;
+    expect(enable.props.icon).toBe("plus");
+    harness.dispatch(enable.id, "onClick");
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "path" }],
+      style: { strokeEnabled: true },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx
new file mode 100644
index 000000000..582df5461
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx
@@ -0,0 +1,154 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the path `Stroke` section — the wire-tree
+ * replica of {@link ../sections/path-stroke-section.PathStrokeSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Stroke" → `Panel.Section title="Stroke"`.
+ * - header `+` enable button (only when disabled) → `Panel.SectionActions` >
+ *   `Panel.Button icon="plus"`.
+ * - "Width" `PanelSubSection`: `TextInput` (SquareIcon, min 0, number) + `−`
+ *   disable button in a row → `Panel.Subsection title="Width"` > `Panel.Row` >
+ *   `Panel.TextField kind="number" icon="square"` + `Panel.Button icon="minus"`.
+ * - "Line Cap" `ToggleGroup` (Butt/Round/Square) → `Panel.Subsection` >
+ *   `Panel.ToggleGroup`.
+ * - "Line Join" `ToggleGroup` (Miter/Round/Bevel) → `Panel.Subsection` >
+ *   `Panel.ToggleGroup`.
+ * - strokeColor `ColorInput` → `Panel.ColorField`.
+ *
+ * Gesture discipline (identical to the old section): the Width text input is a
+ * DRAFT gesture (typing/scrub via `handleDraftChange` → begin-on-first-change +
+ * live write, `onCommit` → commit); the color is a DRAFT gesture
+ * (begin/commit/discard); the two line toggles and the enable/disable buttons
+ * are DIRECT writes.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback } from "react";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updatePathStrokeStyle } from "../../../state/actions/features/path-stroke-style-actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+interface PathStrokeStyle {
+  strokeColor: string;
+  strokeEnabled: boolean;
+  strokeWidth: number;
+  strokeLinecap: "butt" | "round" | "square";
+  strokeLinejoin: "miter" | "round" | "bevel";
+  strokeOpacity: number;
+}
+
+/** The path `Stroke` panel definition. */
+export function PathStrokePanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets } = useDefinitionNodes();
+  const { draft, begin, commit, discard } = useDesignerDraft(store);
+
+  const stroke = style as unknown as PathStrokeStyle | null;
+
+  const handleChange = useCallback(
+    (incoming: Partial<PathStrokeStyle>) => {
+      dispatch(updatePathStrokeStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<PathStrokeStyle>) => {
+      if (!draft) begin();
+      dispatch(updatePathStrokeStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  if (!stroke) return null;
+
+  return (
+    <Panel>
+      <Panel.Section title="Stroke">
+        {!stroke.strokeEnabled && (
+          <Panel.SectionActions>
+            <Panel.Button
+              icon="plus"
+              size="icon-sm"
+              onClick={() => handleChange({ strokeEnabled: true })}
+            />
+          </Panel.SectionActions>
+        )}
+        {stroke.strokeEnabled && (
+          <>
+            <Panel.Subsection title="Width">
+              <Panel.Row align="stretch">
+                <Panel.TextField
+                  kind="number"
+                  icon="square"
+                  min={0}
+                  step={1}
+                  placeholder="Stroke Width"
+                  value={stroke.strokeWidth.toString()}
+                  onChange={(value) => {
+                    handleDraftChange({ strokeWidth: Number(value) });
+                  }}
+                  onCommit={handleCommit}
+                />
+                <Panel.Button
+                  icon="minus"
+                  size="icon-sm"
+                  onClick={() => handleChange({ strokeEnabled: false })}
+                />
+              </Panel.Row>
+            </Panel.Subsection>
+            <Panel.Subsection title="Line Cap">
+              <Panel.ToggleGroup
+                value={stroke.strokeLinecap}
+                options={[
+                  { value: "butt", label: "Butt" },
+                  { value: "round", label: "Round" },
+                  { value: "square", label: "Square" },
+                ]}
+                onChange={(value) => {
+                  if (value === "butt" || value === "round" || value === "square") {
+                    handleChange({ strokeLinecap: value });
+                  }
+                }}
+              />
+            </Panel.Subsection>
+            <Panel.Subsection title="Line Join">
+              <Panel.ToggleGroup
+                value={stroke.strokeLinejoin}
+                options={[
+                  { value: "miter", label: "Miter" },
+                  { value: "round", label: "Round" },
+                  { value: "bevel", label: "Bevel" },
+                ]}
+                onChange={(value) => {
+                  if (value === "miter" || value === "round" || value === "bevel") {
+                    handleChange({ strokeLinejoin: value });
+                  }
+                }}
+              />
+            </Panel.Subsection>
+            <Panel.ColorField
+              value={stroke.strokeColor}
+              onChange={(value) => handleChange({ strokeColor: value })}
+              onCommit={commit}
+              onDiscard={discard}
+              onDragStart={begin}
+            />
+          </>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.test.tsx
new file mode 100644
index 000000000..0d9e040c0
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.test.tsx
@@ -0,0 +1,374 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { performUndo } from "@voidhash/mimic/zustand-commander";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { applyPerNodeLayoutStyle, updateLayoutStyle } from "../../../state/actions";
+import { seededIds } from "../../../state/testing/offline-document";
+import type { PanelNode } from "../../../panel-runtime/schema";
+import { PositionPanel } from "./position-panel";
+import {
+  createOfflineDesignerDocument,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void)[] = [];
+afterEach(() => {
+  for (const restore of restoreWatch) restore();
+  restoreWatch = [];
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** A minimal default position style (relative flow) plus optional overrides. */
+const position = (overrides: Record<string, unknown> = {}) => ({
+  position: "relative",
+  left: "auto",
+  top: "auto",
+  right: "auto",
+  bottom: "auto",
+  ...overrides,
+});
+
+/** One entry of the per-node absolute-position action's `nodes` payload. */
+type PerNodeSeed = { target: { nodeId: string; nodeType: string }; style: Record<string, unknown> };
+
+function mount(
+  seeds: Parameters<typeof seedNodes>[1],
+  select?: (ctx: { nodeIds: string[]; screenId: string; rootId: string }) => string[],
+) {
+  const doc = createOfflineDesignerDocument();
+  const { screenId, rootId } = seededIds(doc);
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  const perNodeCalls: ActionCall<{ nodes: PerNodeSeed[] }>[] = [];
+  restoreWatch = [
+    watchAction(updateLayoutStyle as never, calls as never),
+    watchAction(applyPerNodeLayoutStyle as never, perNodeCalls as never),
+  ];
+  const selection = select ? select({ nodeIds, screenId, rootId }) : nodeIds;
+  harness = mountPanelDefinition(PositionPanel, doc, { nodeIds: selection });
+  return { doc, harness, nodeIds, calls, perNodeCalls, screenId, rootId };
+}
+
+/** All X/Y offset fields in document order. */
+const textFields = (root: PanelNode) => findNodesByType(root, "textField");
+
+/** The `Position` section's toggle button (the `scan`-iconed one). */
+const positionToggle = (root: PanelNode) =>
+  findNodesByType(root, "button").find((b) => b.props.icon === "scan");
+
+/** The X (arrowRight) and Y (arrowDown) offset fields. */
+const xField = (root: PanelNode) => textFields(root).find((f) => f.props.icon === "arrowRight");
+const yField = (root: PanelNode) => textFields(root).find((f) => f.props.icon === "arrowDown");
+
+/** Seeds a node + parent (screen) bounding box so `getOffsetWithinParent` resolves. */
+function seedOffsetBoxes(
+  harness: PanelHarness,
+  nodeId: string,
+  screenId: string,
+  nodeBox: { x: number; y: number },
+  screenBox: { x: number; y: number },
+) {
+  act(() => {
+    harness.store.setState((state) => ({
+      ...state,
+      canvas: {
+        ...state.canvas,
+        boundingBoxes: {
+          ...state.canvas.boundingBoxes,
+          [nodeId]: { x: nodeBox.x, y: nodeBox.y, width: 10, height: 10 },
+          [screenId]: { x: screenBox.x, y: screenBox.y, width: 100, height: 100 },
+        },
+      },
+    }));
+  });
+}
+
+describe("PositionPanel — structure", () => {
+  test("the Position section renders for a view (toggle unpressed, X/Y always present)", () => {
+    const { harness } = mount([{ type: "view", style: position() }]);
+    const root = harness.tree().root;
+    expect(findNodesByType(root, "section").some((s) => s.props.title === "Position")).toBe(true);
+    // Unpressed → ghost variant. X/Y are always rendered (relative shows them disabled).
+    expect(positionToggle(root)!.props.variant).toBe("ghost");
+    expect(textFields(root)).toHaveLength(2);
+    expect(xField(root)).toBeTruthy();
+    expect(yField(root)).toBeTruthy();
+  });
+
+  test("the Position section renders for a text node", () => {
+    const { harness } = mount([{ type: "text", style: position() }]);
+    const root = harness.tree().root;
+    expect(findNodesByType(root, "section").some((s) => s.props.title === "Position")).toBe(true);
+    expect(textFields(root)).toHaveLength(2);
+  });
+
+  test("the Position section renders for a mixed view+text multi-selection", () => {
+    const { harness } = mount([
+      { type: "view", style: position() },
+      { type: "text", style: position() },
+    ]);
+    const root = harness.tree().root;
+    expect(findNodesByType(root, "section").some((s) => s.props.title === "Position")).toBe(true);
+    expect(textFields(root)).toHaveLength(2);
+  });
+});
+
+describe("PositionPanel — relative (disabled) offsets", () => {
+  test("relative flow disables X/Y and shows the measured parent offset", async () => {
+    const { harness, nodeIds, screenId } = mount([{ type: "view", style: position() }]);
+    // Node at (40,55), parent (screen) at (10,15) → measured offset (30,40).
+    seedOffsetBoxes(harness, nodeIds[0]!, screenId, { x: 40, y: 55 }, { x: 10, y: 15 });
+    await flush();
+    const root = harness.tree().root;
+    expect(xField(root)!.props.disabled).toBe(true);
+    expect(yField(root)!.props.disabled).toBe(true);
+    expect(xField(root)!.props.value).toBe("30");
+    expect(yField(root)!.props.value).toBe("40");
+  });
+
+  test("relative flow with missing boxes shows 0/0", () => {
+    const { harness } = mount([{ type: "view", style: position() }]);
+    const root = harness.tree().root;
+    expect(xField(root)!.props.value).toBe("0");
+    expect(yField(root)!.props.value).toBe("0");
+  });
+});
+
+describe("PositionPanel — absolute (enabled) offsets", () => {
+  test("when absolute the X/Y fields are enabled and the toggle is pressed (default variant)", () => {
+    const { harness } = mount([
+      { type: "view", style: position({ position: "absolute", left: 20, top: 30 }) },
+    ]);
+    const root = harness.tree().root;
+    expect(positionToggle(root)!.props.variant).toBe("default");
+    expect(xField(root)!.props.disabled).toBe(false);
+    expect(yField(root)!.props.disabled).toBe(false);
+    expect(xField(root)!.props.value).toBe("20");
+    expect(yField(root)!.props.value).toBe("30");
+  });
+
+  test("an 'auto' offset renders as 0 in the X field", () => {
+    const { harness } = mount([
+      { type: "view", style: position({ position: "absolute", left: "auto", top: 5 }) },
+    ]);
+    expect(xField(harness.tree().root)!.props.value).toBe("0");
+  });
+
+  test("typing X writes left as a DRAFT; typing Y writes top", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: position({ position: "absolute", left: 0, top: 0 }) },
+    ]);
+    const x = xField(harness.tree().root)!;
+    harness.dispatch(x.id, "onChange", ["48"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { left: 48 },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(x.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+
+    const y = yField(harness.tree().root)!;
+    harness.dispatch(y.id, "onChange", ["72"]);
+    expect(calls[1]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { top: 72 },
+    });
+  });
+});
+
+describe("PositionPanel — toggle", () => {
+  test("toggle ON is a per-node write seeding left/top from the parent offset (one undo)", async () => {
+    const { harness, nodeIds, perNodeCalls, screenId } = mount([{ type: "view", style: position() }]);
+    // Node at (40,55), parent (screen) at (10,15) → offset (30,40).
+    seedOffsetBoxes(harness, nodeIds[0]!, screenId, { x: 40, y: 55 }, { x: 10, y: 15 });
+    await flush();
+    const toggle = positionToggle(harness.tree().root)!;
+    harness.dispatch(toggle.id, "onClick");
+    expect(perNodeCalls[0]!.params).toEqual({
+      nodes: [
+        {
+          target: { nodeId: nodeIds[0], nodeType: "view" },
+          style: { position: "absolute", left: 30, top: 40 },
+        },
+      ],
+    });
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("toggle ON with missing boxes falls back to left:0 top:0", () => {
+    const { harness, nodeIds, perNodeCalls } = mount([{ type: "view", style: position() }]);
+    const toggle = positionToggle(harness.tree().root)!;
+    harness.dispatch(toggle.id, "onClick");
+    expect(perNodeCalls[0]!.params).toEqual({
+      nodes: [
+        {
+          target: { nodeId: nodeIds[0], nodeType: "view" },
+          style: { position: "absolute", left: 0, top: 0 },
+        },
+      ],
+    });
+  });
+
+  test("toggle ON keeps an already-set numeric left/top instead of re-seeding", async () => {
+    const { harness, nodeIds, perNodeCalls, screenId } = mount([
+      { type: "view", style: position({ left: 12, top: 34 }) },
+    ]);
+    seedOffsetBoxes(harness, nodeIds[0]!, screenId, { x: 99, y: 99 }, { x: 0, y: 0 });
+    await flush();
+    const toggle = positionToggle(harness.tree().root)!;
+    harness.dispatch(toggle.id, "onClick");
+    expect(perNodeCalls[0]!.params).toEqual({
+      nodes: [
+        {
+          target: { nodeId: nodeIds[0], nodeType: "view" },
+          style: { position: "absolute", left: 12, top: 34 },
+        },
+      ],
+    });
+  });
+
+  test("toggle ON works on a text node (seeds from its own parent offset)", async () => {
+    const { harness, nodeIds, perNodeCalls, screenId } = mount([{ type: "text", style: position() }]);
+    seedOffsetBoxes(harness, nodeIds[0]!, screenId, { x: 60, y: 70 }, { x: 10, y: 10 });
+    await flush();
+    const toggle = positionToggle(harness.tree().root)!;
+    harness.dispatch(toggle.id, "onClick");
+    expect(perNodeCalls[0]!.params).toEqual({
+      nodes: [
+        {
+          target: { nodeId: nodeIds[0], nodeType: "text" },
+          style: { position: "absolute", left: 50, top: 60 },
+        },
+      ],
+    });
+    expect(harness.undoDepth()).toBe(1);
+    // The document actually flips the text node to absolute at its own offset.
+    expect(harness.nodeStyle(nodeIds[0]!)).toMatchObject({
+      position: "absolute",
+      left: 50,
+      top: 60,
+    });
+  });
+
+  test("multi-select toggle ON seeds EACH node from its own offset (one undo)", async () => {
+    const { harness, nodeIds, perNodeCalls, screenId } = mount([
+      { type: "view", style: position() },
+      { type: "text", style: position() },
+    ]);
+    // Both nodes share the screen parent (at (10,15)) but sit at different spots
+    // — node0 at (40,55) → (30,40); node1 at (110,215) → (100,200).
+    act(() => {
+      harness.store.setState((state) => ({
+        ...state,
+        canvas: {
+          ...state.canvas,
+          boundingBoxes: {
+            ...state.canvas.boundingBoxes,
+            [screenId]: { x: 10, y: 15, width: 400, height: 400 },
+            [nodeIds[0]!]: { x: 40, y: 55, width: 10, height: 10 },
+            [nodeIds[1]!]: { x: 110, y: 215, width: 10, height: 10 },
+          },
+        },
+      }));
+    });
+    await flush();
+    const toggle = positionToggle(harness.tree().root)!;
+    harness.dispatch(toggle.id, "onClick");
+    // Each node gets its OWN offset — not both stacked on the first node's spot.
+    expect(perNodeCalls[0]!.params).toEqual({
+      nodes: [
+        {
+          target: { nodeId: nodeIds[0], nodeType: "view" },
+          style: { position: "absolute", left: 30, top: 40 },
+        },
+        {
+          target: { nodeId: nodeIds[1], nodeType: "text" },
+          style: { position: "absolute", left: 100, top: 200 },
+        },
+      ],
+    });
+    // A single undoable command → one undo entry for the whole multi-node toggle.
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("multi-select toggle ON lands each node at its own offset; undo restores all", async () => {
+    const { harness, nodeIds, screenId } = mount([
+      { type: "view", style: position() },
+      { type: "view", style: position() },
+    ]);
+    act(() => {
+      harness.store.setState((state) => ({
+        ...state,
+        canvas: {
+          ...state.canvas,
+          boundingBoxes: {
+            ...state.canvas.boundingBoxes,
+            [screenId]: { x: 0, y: 0, width: 400, height: 400 },
+            [nodeIds[0]!]: { x: 25, y: 35, width: 10, height: 10 },
+            [nodeIds[1]!]: { x: 70, y: 90, width: 10, height: 10 },
+          },
+        },
+      }));
+    });
+    await flush();
+    const toggle = positionToggle(harness.tree().root)!;
+    harness.dispatch(toggle.id, "onClick");
+
+    // Both nodes land absolute at their OWN offsets (not stacked).
+    expect(harness.nodeStyle(nodeIds[0]!)).toMatchObject({ position: "absolute", left: 25, top: 35 });
+    expect(harness.nodeStyle(nodeIds[1]!)).toMatchObject({ position: "absolute", left: 70, top: 90 });
+
+    // Undo restores BOTH nodes to the pre-toggle (relative) state in one step.
+    act(() => {
+      performUndo(harness.store);
+    });
+    await flush();
+    expect(harness.nodeStyle(nodeIds[0]!).position).not.toBe("absolute");
+    expect(harness.nodeStyle(nodeIds[1]!).position).not.toBe("absolute");
+  });
+
+  test("toggle OFF restores relative flow (all four insets back to auto)", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "view", style: position({ position: "absolute", left: 20, top: 30 }) },
+    ]);
+    const toggle = positionToggle(harness.tree().root)!;
+    harness.dispatch(toggle.id, "onClick");
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "view" }],
+      style: { position: "relative", left: "auto", top: "auto", right: "auto", bottom: "auto" },
+    });
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(1);
+  });
+});
+
+describe("PositionPanel — mixed", () => {
+  test("a mixed `position` across a multi-selection disables the X/Y fields", () => {
+    const { harness } = mount([
+      { type: "view", style: position({ position: "absolute", left: 1, top: 1 }) },
+      { type: "view", style: position() },
+    ]);
+    const root = harness.tree().root;
+    // Section present, but with a mixed `position` the offset fields are read-only.
+    expect(findNodesByType(root, "section").some((s) => s.props.title === "Position")).toBe(true);
+    expect(textFields(root)).toHaveLength(2);
+    expect(xField(root)!.props.disabled).toBe(true);
+    expect(yField(root)!.props.disabled).toBe(true);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx
new file mode 100644
index 000000000..7376cb601
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx
@@ -0,0 +1,172 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the dedicated `Position` section — the wire-tree
+ * replica of {@link ../sections/position-section.PositionSection} (view + text
+ * nodes, multi-selectable).
+ *
+ * Structure (JSX → wire nodes):
+ * - `PanelSection` "Position" → `Panel.Section title="Position"`.
+ * - The absolute-position toggle sits in the header, right-aligned →
+ *   `Panel.SectionActions` > `Panel.Button icon="scan"` (the host renderer hoists
+ *   a section's `sectionActions` into its header). Pressed (`variant="default"`) =
+ *   absolute, unpressed (`variant="ghost"`) = relative.
+ * - X and Y offset fields are ALWAYS present → two `Panel.TextField`s in a
+ *   `Panel.Row`.
+ *
+ * Behavior (identical to the legacy section):
+ * - `position === "absolute"` (and not mixed): fields ENABLED, editing `left`/
+ *   `top` (an `"auto"` value shows `0`) as a DRAFT gesture (begin-on-first-change
+ *   → live write → commit).
+ * - otherwise (relative, or a mixed `position` across the selection): fields
+ *   DISABLED, showing the FIRST node's measured offset within its parent (read
+ *   live from the canvas bounding boxes, rounded; `0` when boxes are missing) —
+ *   Figma-style read-only coordinates.
+ * - the toggle is a DIRECT write (one undo): ON seeds each node's `left`/`top`
+ *   from its OWN offset (current numeric value, else its own parent offset, else
+ *   `0`/`0`) via {@link buildAbsolutePositionSeeds} — a single undoable command so
+ *   a multi-selection stays visually in place; OFF writes `{position: "relative",
+ *   left/top/right/bottom: "auto"}`.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback } from "react";
+import { useStore } from "zustand";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { applyPerNodeLayoutStyle, updateLayoutStyle } from "../../../state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { buildAbsolutePositionSeeds } from "../utils/seed-absolute-position";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** The position style the panel reads and writes (always present on view + text nodes). */
+interface PositionStyle {
+  position: "relative" | "absolute";
+  left: number | "auto";
+  top: number | "auto";
+  right: number | "auto";
+  bottom: number | "auto";
+}
+
+/** The numeric value an offset input shows: the stored number, or `0` for `"auto"`. */
+function offsetValue(value: number | "auto"): number {
+  return typeof value === "number" ? value : 0;
+}
+
+/** The `Position` panel definition. */
+export function PositionPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes, style, targets, mixedKeys } = useDefinitionNodes();
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const node = style as PositionStyle | null;
+  const firstNodeId = nodes[0]?.id ?? null;
+  const firstParentId = nodes[0]?.parentId ?? null;
+
+  // The first node's + its parent's raw bounding boxes, read live from the
+  // canvas. Selected as STABLE references (never a freshly-built object) so the
+  // `useSyncExternalStore` snapshot stays cached — the offset is derived below.
+  const nodeBox = useStore(store, (state) =>
+    firstNodeId ? (state.canvas.boundingBoxes[firstNodeId] ?? null) : null,
+  );
+  const parentBox = useStore(store, (state) =>
+    firstParentId ? (state.canvas.boundingBoxes[firstParentId] ?? null) : null,
+  );
+  // The first node's measured offset within its parent — the value the disabled
+  // X/Y fields show in relative flow.
+  const measuredOffset =
+    nodeBox && parentBox ? { left: nodeBox.x - parentBox.x, top: nodeBox.y - parentBox.y } : null;
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<PositionStyle>) => {
+      if (!draft) begin();
+      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  const enableAbsolute = useCallback(() => {
+    // Seed each node from ITS OWN offset (current numeric left/top, else its own
+    // parent offset, else 0/0) so a multi-selection stays spread out rather than
+    // stacking on the first node's spot — applied as a single undoable command.
+    const seeds = buildAbsolutePositionSeeds(
+      nodes,
+      targets,
+      store.getState().canvas.boundingBoxes,
+    );
+    if (seeds.length === 0) return;
+    dispatch(applyPerNodeLayoutStyle)({ nodes: seeds });
+  }, [nodes, targets, store, dispatch]);
+
+  const disableAbsolute = useCallback(() => {
+    dispatch(updateLayoutStyle)({
+      nodes: targets,
+      style: {
+        position: "relative",
+        left: "auto",
+        top: "auto",
+        right: "auto",
+        bottom: "auto",
+      },
+    });
+  }, [dispatch, targets]);
+
+  if (!node) return <Panel />;
+
+  const isAbsolute = node.position === "absolute";
+  const mixedPosition = mixedKeys.has("position");
+  const inputsEnabled = isAbsolute && !mixedPosition;
+
+  // Absolute + uniform: the stored offsets (auto → 0). Otherwise (relative or
+  // mixed) the fields are read-only, showing the measured parent offset.
+  const xValue = inputsEnabled ? offsetValue(node.left) : Math.round(measuredOffset?.left ?? 0);
+  const yValue = inputsEnabled ? offsetValue(node.top) : Math.round(measuredOffset?.top ?? 0);
+
+  return (
+    <Panel>
+      <Panel.Section title="Position">
+        <Panel.SectionActions>
+          <Panel.Button
+            label="Absolute position"
+            icon="scan"
+            size="icon-sm"
+            variant={isAbsolute ? "default" : "ghost"}
+            onClick={isAbsolute ? disableAbsolute : enableAbsolute}
+          />
+        </Panel.SectionActions>
+        <Panel.Row align="stretch">
+          <Panel.TextField
+            kind="number"
+            icon="arrowRight"
+            step={1}
+            placeholder="X"
+            disabled={!inputsEnabled}
+            mixed={inputsEnabled && mixedKeys.has("left")}
+            value={xValue.toString()}
+            onChange={(value) => handleDraftChange({ left: Number(value) })}
+            onCommit={handleCommit}
+          />
+          <Panel.TextField
+            kind="number"
+            icon="arrowDown"
+            step={1}
+            placeholder="Y"
+            disabled={!inputsEnabled}
+            mixed={inputsEnabled && mixedKeys.has("top")}
+            value={yValue.toString()}
+            onChange={(value) => handleDraftChange({ top: Number(value) })}
+            onCommit={handleCommit}
+          />
+        </Panel.Row>
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx
new file mode 100644
index 000000000..32c451653
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx
@@ -0,0 +1,92 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the scrollView `Scroll` settings section — the
+ * wire-tree replica of {@link ../sections/scroll-view-settings-section.ScrollViewSettingsSection}.
+ * Exposes the two scrollView-only data flags as boolean switches:
+ * - `horizontal` — scroll axis (off = vertical).
+ * - `showsScrollIndicator` — whether the native scrollbar is shown.
+ *
+ * Every write goes through the node-level `updateScrollViewNode` action (a single
+ * undoable step), applied to EVERY selected scrollView so the section works in a
+ * homogeneous multi-selection. A value is `mixed` when the selected nodes
+ * disagree; the switch then reads unchecked until toggled.
+ */
+import type { ScrollViewSnapshotNode, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback } from "react";
+
+import { updateScrollViewNode } from "@/features/studio/paywalls/designer/state/actions";
+
+import { usePaywallDesignerActions } from "../../../state/designer-store";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** Narrows a definition's resolved nodes to the selected scrollView nodes. */
+function scrollViewNodes(nodes: SnapshotNode[]): ScrollViewSnapshotNode[] {
+  return nodes.filter((node): node is ScrollViewSnapshotNode => node.type === "scrollView");
+}
+
+/** Reads whether every node shares `value`, else `mixed`. */
+function collapseFlag(values: boolean[]): { checked: boolean; mixed: boolean } {
+  const first = values[0] ?? false;
+  const mixed = values.some((value) => value !== first);
+  return { checked: mixed ? false : first, mixed };
+}
+
+/** The scrollView `Scroll` settings panel definition. */
+export function ScrollViewSettingsPanel(_ctx: PanelContext) {
+  const dispatch = usePaywallDesignerActions();
+  const { nodes } = useDefinitionNodes();
+
+  const scrollViews = scrollViewNodes(nodes);
+
+  const setHorizontal = useCallback(
+    (checked: boolean) => {
+      for (const node of scrollViews) {
+        dispatch(updateScrollViewNode)({ id: node.id, updates: { horizontal: checked } });
+      }
+    },
+    [dispatch, scrollViews],
+  );
+
+  const setShowsScrollIndicator = useCallback(
+    (checked: boolean) => {
+      for (const node of scrollViews) {
+        dispatch(updateScrollViewNode)({
+          id: node.id,
+          updates: { showsScrollIndicator: checked },
+        });
+      }
+    },
+    [dispatch, scrollViews],
+  );
+
+  if (scrollViews.length === 0) return <Panel />;
+
+  const horizontal = collapseFlag(scrollViews.map((node) => node.data.horizontal));
+  const showsScrollIndicator = collapseFlag(
+    scrollViews.map((node) => node.data.showsScrollIndicator),
+  );
+
+  return (
+    <Panel>
+      <Panel.Section title="Scroll">
+        <Panel.Field label="Horizontal">
+          <Panel.SwitchField
+            checked={horizontal.checked}
+            mixed={horizontal.mixed}
+            onChange={setHorizontal}
+          />
+        </Panel.Field>
+        <Panel.Field label="Show scroll indicator">
+          <Panel.SwitchField
+            checked={showsScrollIndicator.checked}
+            mixed={showsScrollIndicator.mixed}
+            onChange={setShowsScrollIndicator}
+          />
+        </Panel.Field>
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.test.tsx
new file mode 100644
index 000000000..fe02fc7ac
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.test.tsx
@@ -0,0 +1,154 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { updateShapeNode } from "../../../state/actions";
+import type { PanelNode } from "../../../panel-runtime/schema";
+import { ShapeLayoutPanel } from "./shape-layout-panel";
+import {
+  createOfflineDesignerDocument,
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+function mount(style: Record<string, unknown>) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, [{ type: "shape", style }]);
+  const calls: ActionCall<{ id: string; updates: { style: Record<string, unknown> } }>[] = [];
+  restoreWatch = watchAction(updateShapeNode as never, calls as never);
+  harness = mountPanelDefinition(ShapeLayoutPanel, doc, { nodeIds });
+  return { doc, harness, nodeIds, calls };
+}
+
+const dimensionFields = (root: PanelNode) => findNodesByType(root, "dimensionField");
+
+describe("ShapeLayoutPanel — structure", () => {
+  test("a shape renders the Layout section with two dimension fields and NO resets", () => {
+    const { harness } = mount({ width: 100, height: 80 });
+    const root = harness.tree().root;
+    expect(findNodeByType(root, "section")?.props.title).toBe("Layout");
+    expect(dimensionFields(root)).toHaveLength(2);
+    expect(dimensionFields(root).map((f) => f.props.axis)).toEqual(["width", "height"]);
+    // Shapes have no state overrides → no reset affordances anywhere in the tree.
+    expect(findNodeByType(root, "resetAffordance")).toBeUndefined();
+  });
+
+  test("stored custom width flows to the field value; mode is custom", () => {
+    const { harness } = mount({ width: 140, height: 90 });
+    const [w] = dimensionFields(harness.tree().root);
+    expect(w!.props.mode).toBe("custom");
+    expect(w!.props.value).toBe(140);
+  });
+});
+
+describe("ShapeLayoutPanel — dimensions via updateShapeNode", () => {
+  test("typing a custom width is a DRAFT that calls updateShapeNode with the width", () => {
+    const { harness, nodeIds, calls } = mount({ width: 100, height: 80 });
+    const [w] = dimensionFields(harness.tree().root);
+    expect(harness.draftActive()).toBe(false);
+    harness.dispatch(w!.id, "onChange", ["175"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      id: nodeIds[0],
+      updates: { style: { width: 175 } },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(w!.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("a committed custom width persists on the shape node's style", async () => {
+    const { harness, nodeIds } = mount({ width: 100, height: 80 });
+    const [w] = dimensionFields(harness.tree().root);
+    harness.dispatch(w!.id, "onChange", ["210"]);
+    harness.dispatch(w!.id, "onCommit");
+    await flush();
+    // updateShapeNode writes to the document, so the committed style reflects it.
+    expect(harness.nodeStyle(nodeIds[0]!).width).toBe(210);
+  });
+
+  test("width hug (menu) is a DIRECT updateShapeNode write of width auto + alignSelf flex-start", async () => {
+    const { harness, nodeIds, calls } = mount({ width: 120, height: 80 });
+    const [w] = dimensionFields(harness.tree().root);
+    harness.dispatch(w!.id, "onModeChange", ["hug"]);
+    // Parent (screen) defaults to column and stretches its children → width is the
+    // stretch axis → Hug opts out with alignSelf "flex-start".
+    expect(calls[0]!.params).toEqual({
+      id: nodeIds[0],
+      updates: { style: { width: "auto", alignSelf: "flex-start" } },
+    });
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.undoDepth()).toBe(1);
+    await flush();
+    expect(harness.nodeStyle(nodeIds[0]!).width).toBe("auto");
+  });
+
+  test("width fill (menu) sets width auto + alignSelf stretch (stretch axis)", () => {
+    const { harness, nodeIds, calls } = mount({ width: 120, height: 80 });
+    const [w] = dimensionFields(harness.tree().root);
+    harness.dispatch(w!.id, "onModeChange", ["fill"]);
+    expect(calls[0]!.params).toEqual({
+      id: nodeIds[0],
+      updates: { style: { width: "auto", alignSelf: "stretch" } },
+    });
+  });
+
+  test("height fill (menu) sets flex:1 (main axis under a column parent)", () => {
+    const { harness, nodeIds, calls } = mount({ width: 120, height: 80 });
+    const [, h] = dimensionFields(harness.tree().root);
+    harness.dispatch(h!.id, "onModeChange", ["fill"]);
+    expect(calls[0]!.params).toEqual({
+      id: nodeIds[0],
+      updates: { style: { height: "auto", flex: 1 } },
+    });
+  });
+
+  test("height custom (menu) from fill clears flex (main axis)", () => {
+    const { harness, nodeIds, calls } = mount({ width: 120, height: "auto", flex: 1 });
+    const [, h] = dimensionFields(harness.tree().root);
+    expect(h!.props.mode).toBe("fill");
+    harness.dispatch(h!.id, "onModeChange", ["custom"]);
+    expect(calls[0]!.params).toEqual({
+      id: nodeIds[0],
+      updates: { style: { height: 100, flex: undefined } },
+    });
+  });
+
+  test("bounding box flows into the shape dimension field's computed prop", async () => {
+    const { harness, nodeIds } = mount({ width: 100, height: 80 });
+    act(() => {
+      harness.store.setState((state) => ({
+        ...state,
+        canvas: {
+          ...state.canvas,
+          boundingBoxes: {
+            ...state.canvas.boundingBoxes,
+            [nodeIds[0]!]: { x: 0, y: 0, width: 111.7, height: 55.2 },
+          },
+        },
+      }));
+    });
+    await flush();
+    const [w, h] = dimensionFields(harness.tree().root);
+    expect(w!.props.computed).toBe(112);
+    expect(h!.props.computed).toBe(55);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx
new file mode 100644
index 000000000..c7a0e4476
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx
@@ -0,0 +1,158 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the shape `Layout` section — the wire-tree
+ * replica of {@link ../sections/shape-layout-section.ShapeLayoutSection}
+ * (single `shape` node; NO override-reset affordances).
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` "Layout" → `Panel.Section title="Layout"`.
+ * - A single `Dimensions` subsection with the same width/height fields as the
+ *   flex-layout panel → `Panel.Subsection title="Dimensions"` > `Panel.Row` > two
+ *   `Panel.DimensionField`s.
+ *
+ * Behavior (identical to the old section): the width/height controls behave
+ * exactly like the flex panel's (mode derived HERE from the parent flex
+ * direction, computed px from the bounding box), but EVERY write goes through
+ * `updateShapeNode({ id, updates: { style } })` — the node-level shape action, NOT
+ * the generic `updateLayoutStyle`. Typing is a DRAFT gesture (`updateShapeNode`
+ * inside an active draft); a menu mode change is a DIRECT write. There are no
+ * reset affordances (shapes have no state overrides).
+ */
+import type { ShapeSnapshotNode, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback } from "react";
+import { useStore } from "zustand";
+
+import {
+  dimensionModeWrite,
+  FALLBACK_FIXED_PX,
+  getDimensionState,
+  type DimensionAxis,
+  type DimensionState,
+} from "../../../panel-kit/dimension-field";
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updateShapeNode } from "../../../state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { getAlignItems, getFlexDirection } from "../../../state/utils/node-type-helpers";
+import { getNodeById } from "../../../state/utils/nodes";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** The shape flex-sizing style the dimension fields read and write. */
+interface ShapeLayoutStyle {
+  width: number | "auto";
+  height: number | "auto";
+  flex: number | undefined;
+  alignSelf: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline";
+}
+
+/** The shape `Layout` panel definition. */
+export function ShapeLayoutPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes } = useDefinitionNodes();
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const firstNode = nodes[0] as SnapshotNode | undefined;
+  const shapeNode: ShapeSnapshotNode | undefined =
+    firstNode?.type === "shape" ? firstNode : undefined;
+  const parentId = shapeNode?.parentId ?? null;
+  const nodeId = shapeNode?.id ?? null;
+
+  const parent = useStore(store, (state) => (parentId ? getNodeById(state, parentId) : null));
+  const boundingBox = useStore(store, (state) =>
+    nodeId ? (state.canvas.boundingBoxes[nodeId] ?? null) : null,
+  );
+
+  const handleChange = useCallback(
+    (incoming: Partial<ShapeLayoutStyle>) => {
+      if (!nodeId) return;
+      dispatch(updateShapeNode)({ id: nodeId, updates: { style: incoming } });
+    },
+    [dispatch, nodeId],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<ShapeLayoutStyle>) => {
+      if (!nodeId) return;
+      if (!draft) begin();
+      dispatch(updateShapeNode)({ id: nodeId, updates: { style: incoming } });
+    },
+    [draft, begin, dispatch, nodeId],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  if (!shapeNode) return <Panel />;
+
+  const style = shapeNode.data.style;
+  const node: ShapeLayoutStyle = {
+    width: style.width,
+    height: style.height,
+    flex: style.flex,
+    alignSelf: style.alignSelf,
+  };
+  const parentDirection = parent ? getFlexDirection(parent, "row") : "row";
+  const parentAlignItems = getAlignItems(parent, "stretch");
+  const computedWidth = boundingBox ? Math.round(boundingBox.width) : null;
+  const computedHeight = boundingBox ? Math.round(boundingBox.height) : null;
+
+  const dimension = (axis: DimensionAxis) => {
+    const mode = getDimensionState(axis, node as never, parentDirection, parentAlignItems);
+    const stored = node[axis];
+    const computed = axis === "width" ? computedWidth : computedHeight;
+    const value = stored === "auto" ? FALLBACK_FIXED_PX : stored;
+    const onModeChange = (next: DimensionState) => {
+      const effectivePx = computed ?? (stored === "auto" ? FALLBACK_FIXED_PX : stored);
+      handleChange(
+        dimensionModeWrite(axis, next, {
+          effectivePx,
+          parentDirection,
+          parentAlignItems,
+          currentAlignSelf: node.alignSelf,
+        }) as Partial<ShapeLayoutStyle>,
+      );
+    };
+    return { mode, value, computed, onModeChange };
+  };
+
+  const width = dimension("width");
+  const height = dimension("height");
+
+  return (
+    <Panel>
+      <Panel.Section title="Layout">
+        <Panel.Subsection title="Dimensions">
+          <Panel.Row align="stretch">
+            <Panel.DimensionField
+              axis="width"
+              mode={width.mode}
+              value={width.value}
+              computed={width.computed ?? undefined}
+              label="Width"
+              onChange={(value) => handleDraftChange({ width: Number(value) })}
+              onCommit={handleCommit}
+              onModeChange={(mode) => width.onModeChange(mode as DimensionState)}
+            />
+            <Panel.DimensionField
+              axis="height"
+              mode={height.mode}
+              value={height.value}
+              computed={height.computed ?? undefined}
+              label="Height"
+              onChange={(value) => handleDraftChange({ height: Number(value) })}
+              onCommit={handleCommit}
+              onModeChange={(mode) => height.onModeChange(mode as DimensionState)}
+            />
+          </Panel.Row>
+        </Panel.Subsection>
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.test.tsx
new file mode 100644
index 000000000..228534542
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.test.tsx
@@ -0,0 +1,162 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { setStateOverrideSelection } from "../../../state/actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { StatesPanel } from "./states-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  seedStateOverride,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+interface SelectionCall {
+  nodeId: string;
+  stateId: string | null;
+}
+
+/** Mounts the states panel over `seeds`, watching `setStateOverrideSelection`. */
+function mount(seeds: Parameters<typeof seedNodes>[1], extraNodeIds?: string[]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<SelectionCall>[] = [];
+  restoreWatch = watchAction(setStateOverrideSelection as never, calls as never);
+  harness = mountPanelDefinition(StatesPanel, doc, {
+    nodeIds: extraNodeIds ? [nodeIds[0]!, ...extraNodeIds] : [nodeIds[0]!],
+  });
+  return { doc, harness, nodeIds, calls };
+}
+
+/** Removes a state entry directly on the doc (to exercise the stale-cleanup effect). */
+function removeState(doc: ReturnType<typeof createOfflineDesignerDocument>, nodeId: string, stateId: string) {
+  doc.transaction((root) => {
+    const node = root.findByIdAcrossTree(nodeId);
+    (node as unknown as { data: { states: { remove: (id: string) => void } } }).data.states.remove(
+      stateId,
+    );
+  });
+}
+
+describe("StatesPanel — structure", () => {
+  test("state buttons render Default + one per node state", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedStateOverride(doc, nodeIds[0]!, { name: "Hovered", style: {} });
+    seedStateOverride(doc, nodeIds[0]!, { name: "Pressed", style: {} });
+    harness = mountPanelDefinition(StatesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const buttons = findNodesByType(harness.tree().root, "button");
+    // Settings + Default + 2 state buttons.
+    const labels = buttons.map((b) => b.props.label).filter(Boolean);
+    expect(labels).toEqual(["Default", "Hovered", "Pressed"]);
+    const settings = buttons.find((b) => b.props.icon === "settings");
+    expect(settings).toBeDefined();
+  });
+
+  test("no state buttons (only Settings) when the node has no states", () => {
+    const { harness } = mount([{ type: "view" }]);
+    const buttons = findNodesByType(harness.tree().root, "button");
+    expect(buttons.map((b) => b.props.label).filter(Boolean)).toEqual([]);
+    expect(findNodeByType(harness.tree().root, "column")).toBeUndefined();
+  });
+});
+
+describe("StatesPanel — selection", () => {
+  test("selecting a state dispatches setStateOverrideSelection with the state id", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, { name: "Hovered", style: {} });
+    const calls: ActionCall<SelectionCall>[] = [];
+    restoreWatch = watchAction(setStateOverrideSelection as never, calls as never);
+    harness = mountPanelDefinition(StatesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const hovered = findNodesByType(harness.tree().root, "button").find(
+      (b) => b.props.label === "Hovered",
+    )!;
+    harness.dispatch(hovered.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({ nodeId: nodeIds[0], stateId });
+    // A plain (non-undoable) selection action does not touch the undo stack.
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("selecting Default dispatches stateId: null", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, { name: "Hovered", style: {} });
+    const calls: ActionCall<SelectionCall>[] = [];
+    restoreWatch = watchAction(setStateOverrideSelection as never, calls as never);
+    harness = mountPanelDefinition(StatesPanel, doc, { nodeIds: [nodeIds[0]!] });
+    act(() => selectState(harness!.store, nodeIds[0]!, stateId));
+
+    const def = findNodesByType(harness.tree().root, "button").find(
+      (b) => b.props.label === "Default",
+    )!;
+    harness.dispatch(def.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({ nodeId: nodeIds[0], stateId: null });
+  });
+
+  test("buttons are disabled on a multi-node selection", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }, { type: "view" }]);
+    seedStateOverride(doc, nodeIds[0]!, { name: "Hovered", style: {} });
+    harness = mountPanelDefinition(StatesPanel, doc, { nodeIds });
+
+    const stateButtons = findNodesByType(harness.tree().root, "button").filter((b) =>
+      ["Default", "Hovered"].includes(b.props.label as string),
+    );
+    expect(stateButtons.length).toBe(2);
+    for (const b of stateButtons) expect(b.props.disabled).toBe(true);
+  });
+});
+
+describe("StatesPanel — stale-selection cleanup", () => {
+  test("deleting the selected state clears the override selection", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, { name: "Hovered", style: {} });
+    const calls: ActionCall<SelectionCall>[] = [];
+    restoreWatch = watchAction(setStateOverrideSelection as never, calls as never);
+    harness = mountPanelDefinition(StatesPanel, doc, { nodeIds: [nodeIds[0]!] });
+    act(() => selectState(harness!.store, nodeIds[0]!, stateId));
+    await flush();
+
+    // Delete the selected state under the selection.
+    act(() => removeState(doc, nodeIds[0]!, stateId));
+    await flush();
+
+    // The definition's stale-cleanup effect fired setStateOverrideSelection(null).
+    expect(calls.at(-1)!.params).toEqual({ nodeId: nodeIds[0], stateId: null });
+    expect(harness.store.getState().stateOverrideSelection[nodeIds[0]!] ?? null).toBe(null);
+  });
+});
+
+describe("StatesPanel — host services", () => {
+  test("the Settings button opens the host State Manager for the node", () => {
+    const { harness, nodeIds } = mount([{ type: "view" }]);
+    const settings = findNodesByType(harness.tree().root, "button").find(
+      (b) => b.props.icon === "settings",
+    )!;
+    harness.dispatch(settings.id, "onClick");
+    expect(harness.hostLog.openStateManager).toEqual([nodeIds[0]]);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx
new file mode 100644
index 000000000..6cdac28ff
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx
@@ -0,0 +1,126 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `States` section — the wire-tree replica of
+ * {@link ../sections/states-section.StatesSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "States" → `Panel.Section title="States"`.
+ * - A header `Settings` button (old `PanelSectionHeaderActions` > `Button`) →
+ *   `Panel.SectionActions` > `Panel.Button icon="settings"`; its `onClick` opens
+ *   the host State Manager sheet via `usePanelHostServices().openStateManager`
+ *   (the sheet itself stays host-rendered in {@link ../panel-host-services-host}).
+ * - When the node has states, a vertical "Default" + one-per-state selector →
+ *   a `Panel.Column` of `Panel.Button`s. The selected entry renders `variant`
+ *   `default` (the old accent highlight), the rest `ghost`; every button is
+ *   `disabled` unless the selection is a single node (old
+ *   `disabled={!isSingleNodeSelection}`).
+ *
+ * Behavior (identical to the old section):
+ * - Selecting "Default" writes `setStateOverrideSelection({nodeId, stateId:null})`;
+ *   selecting a state writes `{nodeId, stateId}` — both no-ops unless single-node.
+ * - A stale-selection cleanup effect clears `stateOverrideSelection` when the
+ *   selected state id no longer exists on the node (same condition, same dispatch).
+ * - `setStateOverrideSelection` is a plain (non-undoable) commander action, so
+ *   selecting a state never touches the undo stack — matching the old section.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useEffect } from "react";
+import { useStore } from "zustand/react";
+
+import { setStateOverrideSelection } from "../../../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../../../state/designer-store";
+import { getSelectedStateIdForNode } from "../../../state/utils/state-overrides";
+import { usePanelHostServices } from "../../../panel-runtime/panel-host-services";
+import { useDefinitionNodes } from "./use-definition-nodes";
+import { useDefinitionSelection } from "./definition-selection";
+
+/** A node state's array-entry id + its decoded `{ name }` value. */
+interface NodeState {
+  readonly id: string;
+  readonly value: { readonly name: string };
+}
+
+/** Reads a stateful node's decoded state entries (unwrapping the `{id,value}` envelope). */
+function readStates(node: unknown): NodeState[] {
+  const states = (node as { data?: { states?: readonly unknown[] } }).data?.states;
+  if (!Array.isArray(states)) return [];
+  return states.flatMap((entry) => {
+    const e = entry as { id?: string; value?: { name?: string } };
+    if (e.value === undefined || typeof e.id !== "string") return [];
+    return [{ id: e.id, value: { name: e.value.name ?? "" } }];
+  });
+}
+
+/** The `States` panel definition. */
+export function StatesPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const services = usePanelHostServices();
+  const { nodes } = useDefinitionNodes();
+  const { nodeIds } = useDefinitionSelection();
+  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
+
+  const node = nodes[0];
+  const nodeId = node?.id ?? "";
+  const states = node ? readStates(node) : [];
+  const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, nodeId);
+  const isSingleNodeSelection = nodeIds.length === 1;
+
+  // Stale-selection cleanup: clear the override selection when the selected state
+  // id no longer exists on the node — verbatim from the old section's effect.
+  useEffect(() => {
+    if (!node || !selectedStateId) return;
+    const hasSelectedState = states.some((state) => state.id === selectedStateId);
+    if (!hasSelectedState) {
+      dispatch(setStateOverrideSelection)({ nodeId, stateId: null });
+    }
+  }, [dispatch, node, nodeId, selectedStateId, states]);
+
+  if (!node) return null;
+
+  const selectDefault = () => {
+    if (!isSingleNodeSelection) return;
+    dispatch(setStateOverrideSelection)({ nodeId, stateId: null });
+  };
+  const selectState = (stateId: string) => {
+    if (!isSingleNodeSelection) return;
+    dispatch(setStateOverrideSelection)({ nodeId, stateId });
+  };
+
+  return (
+    <Panel>
+      <Panel.Section title="States">
+        <Panel.SectionActions>
+          <Panel.Button
+            icon="settings"
+            size="icon-sm"
+            onClick={() => services.openStateManager(nodeId)}
+          />
+        </Panel.SectionActions>
+        {states.length > 0 && (
+          <Panel.Column gap="none">
+            <Panel.Button
+              label="Default"
+              size="sm"
+              variant={selectedStateId === null ? "default" : "ghost"}
+              disabled={!isSingleNodeSelection}
+              onClick={selectDefault}
+            />
+            {states.map((state) => (
+              <Panel.Button
+                key={state.id}
+                label={state.value.name}
+                size="sm"
+                variant={selectedStateId === state.id ? "default" : "ghost"}
+                disabled={!isSingleNodeSelection}
+                onClick={() => selectState(state.id)}
+              />
+            ))}
+          </Panel.Column>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.test.tsx
new file mode 100644
index 000000000..2c2ba4069
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.test.tsx
@@ -0,0 +1,93 @@
+// @vitest-environment jsdom
+
+import { Panel, type PanelContext } from "@voidhash/paywalls/panel";
+import { useStore } from "zustand/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+import { usePaywallDesignerStore } from "../../../../state/designer-store";
+import { createOfflineDesignerDocument } from "../../../../state/testing/offline-document";
+import { useDefinitionSelection } from "../definition-selection";
+import {
+  findNodeByLabel,
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  type PanelHarness,
+} from "./definition-harness";
+
+let harness: PanelHarness | undefined;
+afterEach(() => {
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** A trivial definition that renders the store `stateOverrideSelection` key count. */
+function StoreCountDefinition(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const selection = useStore(store, (s) => s.stateOverrideSelection);
+  return (
+    <Panel>
+      <Panel.Field label="Count">
+        <Panel.TextField kind="number" value={Object.keys(selection).length} placeholder="count" />
+      </Panel.Field>
+    </Panel>
+  );
+}
+
+/** A definition echoing the selection node-id count from the selection channel. */
+function SelectionCountDefinition(_ctx: PanelContext) {
+  const { nodeIds } = useDefinitionSelection();
+  return (
+    <Panel>
+      <Panel.Text content={`ids:${nodeIds.length}`} />
+    </Panel>
+  );
+}
+
+describe("definition-harness", () => {
+  test("mounts a definition over a real store and asserts a valid tree", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "path" }]);
+    harness = mountPanelDefinition(StoreCountDefinition, doc, { nodeIds });
+
+    const tree = harness.tree();
+    expect(tree.version).toBe(1);
+    expect(tree.root.type).toBe("panel");
+    // The store hook resolved inside the reconciler (no override selection yet).
+    const textField = findNodeByType(tree.root, "textField");
+    expect(textField?.props.value).toBe(0);
+    // Real store + commander slice are live.
+    expect(harness.undoDepth()).toBe(0);
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("the selection channel carries the seeded node ids to the definition", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "path" }, { type: "path" }]);
+    harness = mountPanelDefinition(SelectionCountDefinition, doc, { nodeIds });
+
+    const text = findNodeByType(harness.tree().root, "text");
+    expect(text?.props.content).toBe("ids:2");
+  });
+
+  test("seedNodes writes style overrides onto the created node", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [
+      { type: "path", style: { fillEnabled: true, fillColor: "rgba(1, 2, 3, 1)" } },
+    ]);
+    harness = mountPanelDefinition(StoreCountDefinition, doc, { nodeIds });
+    const style = harness.nodeStyle(nodeIds[0]!);
+    expect(style.fillEnabled).toBe(true);
+    expect(style.fillColor).toBe("rgba(1, 2, 3, 1)");
+  });
+
+  test("finders locate nodes by type and label", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "path" }]);
+    harness = mountPanelDefinition(StoreCountDefinition, doc, { nodeIds });
+    const root = harness.tree().root;
+    expect(findNodesByType(root, "field")).toHaveLength(1);
+    expect(findNodeByLabel(root, "Count")?.type).toBe("field");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx
new file mode 100644
index 000000000..4caf085c3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx
@@ -0,0 +1,656 @@
+// @vitest-environment jsdom
+
+/**
+ * The reusable headless harness EVERY built-in panel-definition test drives a
+ * definition through. It builds a REAL designer store (the same commander +
+ * mimic middleware as production, over an offline stub document), runs a
+ * definition through the same in-process transport + `wrap` the live
+ * {@link ../../builtin-panel-host.BuiltinPanelHost} uses (store context + stubbed
+ * host services + the selection channel), and exposes the emitted wire tree, an
+ * event dispatcher, node finders, and store/draft/undo/action inspection.
+ *
+ * Every emission is asserted valid: {@link mountPanelDefinition} decodes the
+ * current tree through the host gate ({@link decodePanelTree}, serialize →
+ * decode) on construction and after every {@link PanelHarness.dispatch}, so a
+ * definition that drifts from the wire contract fails the test automatically.
+ *
+ * Later section migrations reuse this verbatim — seed nodes/selection with
+ * {@link seedNodes}, mount the definition, then assert structure via the finders
+ * and behavior via `dispatch` + the store/draft/undo/action helpers.
+ */
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { ComponentBoundAction } from "@voidhash/mimic-schema";
+import type { PanelContext, PanelSessionInputs } from "@voidhash/paywalls/panel";
+import type { Command as CommandObject } from "@voidhash/mimic/zustand-commander";
+
+import { createInProcessTransport } from "../../../../panel-runtime/in-process-transport";
+import type { PanelRender, PanelWrap } from "../../../../panel-runtime/in-process-transport";
+import {
+  decodePanelTree,
+  type PanelNode,
+  type PanelTree,
+} from "../../../../panel-runtime/schema";
+import type { PanelTransport } from "../../../../panel-runtime/transport";
+import {
+  PanelHostServicesProvider,
+  type ComponentUpdatePlan,
+  type PanelHostServices,
+} from "../../../../panel-runtime/panel-host-services";
+import { createDesignerStore, PaywallStoreContext } from "../../../../state/designer-store";
+import type { PaywallDesignerStoreType } from "../../../../state/designer-store";
+import type {
+  ComponentCatalogEntry,
+  ComponentCatalogVersion,
+} from "../../../../state/designer-store-state";
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../../../state/testing/offline-document";
+import { insertCodeComponent } from "../../../../state/utils/code-component-writes";
+import { definitionForComponentPath } from "../../../../state/utils/code-components";
+import {
+  createDefinitionSelectionStore,
+  DefinitionSelectionProvider,
+} from "../definition-selection";
+
+// Re-exported so a definition test has a single import site for the whole
+// harness (document factory + seeding + mount + finders).
+export { createOfflineDesignerDocument, type OfflineDesignerDocument };
+
+// =============================================================================
+// Store seeding
+// =============================================================================
+
+/** One node to seed under the document's screen, plus optional style overrides. */
+export interface SeedNode {
+  /** The node type to insert under the screen (e.g. `"path"`, `"text"`, `"view"`). */
+  readonly type: "view" | "text" | "shape" | "path";
+  /** Style fields to write onto the node after insertion (merged into `data.style`). */
+  readonly style?: Record<string, unknown>;
+  /** An optional stable label a test can look the node up by later. */
+  readonly key?: string;
+}
+
+/** The result of seeding: the created node ids, keyed by insertion order and label. */
+export interface SeededNodes {
+  /** The created node ids in insertion order. */
+  readonly nodeIds: string[];
+  /** The created node ids keyed by their {@link SeedNode.key} (when provided). */
+  readonly byKey: Record<string, string>;
+}
+
+/**
+ * A seed for a live/committed style test: writes `style` directly onto the
+ * node's committed `data.style` so the node presents that style before the
+ * definition renders. The write mirrors what the schema stores (unwrapped
+ * scalar fields), so path/text default fields (fillEnabled, color, …) can be
+ * overridden per test.
+ */
+export function seedNodes(
+  doc: OfflineDesignerDocument,
+  seeds: readonly SeedNode[],
+): SeededNodes {
+  const { screenId } = seededIds(doc);
+  const nodeIds: string[] = [];
+  const byKey: Record<string, string> = {};
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    for (const seed of seeds) {
+      // A `path` is only valid inside a `shape` container (never directly under
+      // a screen), so a path seed inserts a wrapping shape first and nests the
+      // path in it — the returned id is always the seed node itself.
+      const node =
+        seed.type === "path"
+          ? screen.children.insertLast({ type: "shape" }).children.insertLast({ type: "path" })
+          : screen.children.insertLast({ type: seed.type });
+      nodeIds.push(node.id);
+      if (seed.key) byKey[seed.key] = node.id;
+      if (seed.style) {
+        // Merge onto the node's current style. The typed node proxy flattens its
+        // `data` fields, so `update({ style })` seeds only the provided style
+        // fields (leaving schema defaults for the rest) — mirroring how every
+        // style action writes (`proxy.update({ style })`).
+        (node as { update: (value: { style: Record<string, unknown> }) => void }).update({
+          style: seed.style,
+        });
+      }
+    }
+  });
+  return { nodeIds, byKey };
+}
+
+/** A minimal always-true DNF condition for a seeded state entry. */
+const ALWAYS_TRUE_CONDITION = {
+  type: "or",
+  value: [
+    {
+      type: "and",
+      value: [
+        {
+          type: "equals",
+          value: {
+            left: { type: "literal", value: { key: "boolean", value: true } },
+            right: { type: "literal", value: { key: "boolean", value: true } },
+          },
+        },
+      ],
+    },
+  ],
+} as const;
+
+/**
+ * Pushes one state entry (with the given `style` overrides) onto a stateful node
+ * and returns its ARRAY-ENTRY id — the id used to select the state (mirrors
+ * `addNodeState`, which returns `push(...).id`, the entry id, not the inner
+ * `value.id`). Used to exercise the override-reset affordance: seeding a `color`
+ * override then selecting the entry makes the reset context active.
+ */
+export function seedStateOverride(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  overrides: { name?: string; style: Record<string, unknown> },
+): string {
+  let entryId = "";
+  doc.transaction((root) => {
+    const node = root.findByIdAcrossTree(nodeId);
+    if (!node) throw new Error(`seedStateOverride: node ${nodeId} not found`);
+    const created = (
+      node as unknown as {
+        data: {
+          states: {
+            push: (value: unknown) => { id: string };
+          };
+        };
+      }
+    ).data.states.push({
+      // The schema requires an inner `id`; selection addresses the entry id.
+      id: `state-value-${Math.random().toString(36).slice(2, 8)}`,
+      condition: ALWAYS_TRUE_CONDITION,
+      name: overrides.name ?? "Hovered",
+      overrides: { style: overrides.style },
+    });
+    entryId = created.id;
+  });
+  return entryId;
+}
+
+/**
+ * Selects an override state for a node in the store, activating the override
+ * reset context for definitions that read it. Passing `null` clears it.
+ */
+export function selectState(
+  store: PaywallDesignerStoreType,
+  nodeId: string,
+  stateId: string | null,
+): void {
+  store.setState((state) => ({
+    ...state,
+    stateOverrideSelection: { ...state.stateOverrideSelection, [nodeId]: stateId },
+  }));
+}
+
+// =============================================================================
+// Component node + catalog seeding
+// =============================================================================
+
+/** A stored action binding to push onto a seeded component node. */
+export interface SeedActionBinding {
+  readonly name: string;
+  readonly action: ComponentBoundAction;
+}
+
+/** A stored prop binding to push onto a seeded component node (raw binding value). */
+export interface SeedPropBinding {
+  readonly name: string;
+  readonly value: unknown;
+}
+
+/** The identity + optional stored bindings of a seeded `component` node. */
+export interface SeedComponentNode {
+  readonly componentSlug: string;
+  readonly componentVersion: number;
+  readonly contentHash: string;
+  readonly name?: string;
+  readonly previewState?: string;
+  /**
+   * Local code-component instance: a `codeComponent` definition is inserted at
+   * `components/<localComponentId>.tsx` and the instance references it via
+   * `componentSource: "local"` + `componentPath` (catalog identity fields carry
+   * sentinels). The compiled artifact keys by the definition node id — seed it
+   * with {@link seedCompiledComponent} passing the same identity string.
+   */
+  readonly localComponentId?: string;
+  /**
+   * Builtin instance: `componentSource: "builtin"` resolved by `componentSlug`
+   * from the static `@voidhash/paywall-builtins` registry (no catalog row,
+   * no pinned hash — version/hash carry sentinels).
+   */
+  readonly builtin?: boolean;
+  readonly actionBindings?: readonly SeedActionBinding[];
+  readonly props?: readonly SeedPropBinding[];
+}
+
+/**
+ * The canonical document-relative path a local component identity string maps to.
+ * The instance's `componentPath` and its `codeComponent` definition node's `path`
+ * both use this value.
+ */
+function componentPathForIdentity(localComponentId: string): string {
+  return `components/${localComponentId}.tsx`;
+}
+
+/**
+ * Inserts a `codeComponent` definition node at `components/<localComponentId>.tsx`
+ * (idempotent per identity string), returning its definition node id — the key
+ * `codeComponents.compiled` is addressed by.
+ */
+function seedCodeComponentDefinition(
+  doc: OfflineDesignerDocument,
+  localComponentId: string,
+): string {
+  const path = componentPathForIdentity(localComponentId);
+  const existing = definitionForComponentPath(
+    { mimic: { snapshot: doc.getSnapshot() } } as never,
+    path,
+  );
+  if (existing !== undefined) return existing.id;
+  let defId = "";
+  doc.transaction((root) => {
+    const node = insertCodeComponent(root as never, { path, source: "// seed" });
+    if (node === null) throw new Error("failed to insert code-component definition");
+    defId = node;
+  });
+  return defId;
+}
+
+/**
+ * Inserts a `component` node under the seeded screen and pushes any stored
+ * action/prop bindings onto it (the `{name, action}` / `{name, value}` shapes the
+ * schema array proxy wraps into `{id, value}` entries — the same shape the prop
+ * actions write). Returns the created node id. A `localComponentId` seeds a LOCAL
+ * component instance (its manifest resolves from `codeComponents.compiled`).
+ */
+export function seedComponentNode(
+  doc: OfflineDesignerDocument,
+  seed: SeedComponentNode,
+): string {
+  // A local instance references a `codeComponent` definition by path; insert that
+  // definition first so the manifest resolves (path → definition → compiled).
+  if (seed.localComponentId !== undefined) {
+    seedCodeComponentDefinition(doc, seed.localComponentId);
+  }
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const local = seed.localComponentId !== undefined;
+    const builtin = seed.builtin === true;
+    const data: Record<string, unknown> = {
+      type: "component",
+      componentSource: local ? "local" : builtin ? "builtin" : "catalog",
+      componentPath: local ? componentPathForIdentity(seed.localComponentId!) : "",
+      // A builtin resolves by slug; a local instance's catalog identity fields
+      // carry sentinels; a catalog instance carries its pinned identity.
+      componentSlug: local ? "" : seed.componentSlug,
+      componentVersion: local || builtin ? 0 : seed.componentVersion,
+      contentHash: local || builtin ? "" : seed.contentHash,
+      name: seed.name ?? seed.componentSlug,
+      previewState: seed.previewState ?? "default",
+    };
+    // The component node data carries a fixed `type` discriminant; the insert
+    // input is otherwise structural, so a single cast at the seam suffices.
+    const node = (
+      screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+    ).insertLast(data);
+    nodeId = node.id;
+    const proxy = node as unknown as {
+      data: {
+        actionBindings: { push: (v: unknown) => void };
+        props: { push: (v: unknown) => void };
+      };
+    };
+    for (const binding of seed.actionBindings ?? []) {
+      proxy.data.actionBindings.push({ action: binding.action, name: binding.name });
+    }
+    for (const binding of seed.props ?? []) {
+      proxy.data.props.push({ name: binding.name, value: binding.value });
+    }
+  });
+  return nodeId;
+}
+
+/**
+ * Seeds a catalog entry (keyed by slug) and mirrors every listed version into
+ * `byContentHash` (so a node pinned to that contentHash resolves its manifest).
+ * The `latest` version is always mirrored; pass extra `pinnedVersions` for older
+ * pinned versions a node might reference.
+ */
+export function seedComponentCatalog(
+  store: PaywallDesignerStoreType,
+  entry: ComponentCatalogEntry,
+  pinnedVersions: readonly ComponentCatalogVersion[] = [],
+): void {
+  store.setState((state) => {
+    const byContentHash = { ...state.componentCatalog.byContentHash };
+    for (const version of [entry.latest, ...pinnedVersions]) {
+      byContentHash[version.contentHash] = version;
+    }
+    return {
+      ...state,
+      componentCatalog: {
+        byContentHash,
+        components: { ...state.componentCatalog.components, [entry.slug]: entry },
+      },
+    };
+  });
+}
+
+/**
+ * Seeds a compiled LOCAL component artifact so a local component instance
+ * resolves its manifest via `useComponentManifest`. The compiled store is keyed
+ * by the DEFINITION node id — resolved from the seeded definition at
+ * `components/<localComponentId>.tsx` (via {@link seedComponentNode}), falling
+ * back to the raw identity string when no definition was seeded.
+ */
+export function seedCompiledComponent(
+  store: PaywallDesignerStoreType,
+  localComponentId: string,
+  manifest: ComponentManifest,
+): void {
+  const key =
+    definitionForComponentPath(store.getState(), componentPathForIdentity(localComponentId))?.id ??
+    localComponentId;
+  store.setState((state) => ({
+    ...state,
+    codeComponents: {
+      ...state.codeComponents,
+      compiled: {
+        ...state.codeComponents.compiled,
+        [key]: {
+          artifact: { hasPanel: false, manifest, previewTrees: {} },
+          sourceHash: "seed",
+          status: "ready",
+        },
+      },
+    },
+  }));
+}
+
+/**
+ * Sets the ephemeral preview-state selection for a component node id (mirrors the
+ * `setComponentPreviewStateSelection` action's state write). Passing `null`
+ * clears it back to the persisted default.
+ */
+export function selectComponentPreviewState(
+  store: PaywallDesignerStoreType,
+  nodeId: string,
+  previewState: string | null,
+): void {
+  store.setState((state) => {
+    const next = { ...state.componentPreviewStateSelection };
+    if (previewState === null) {
+      delete next[nodeId];
+    } else {
+      next[nodeId] = previewState;
+    }
+    return { ...state, componentPreviewStateSelection: next };
+  });
+}
+
+// =============================================================================
+// Host services stub
+// =============================================================================
+
+/** Records every {@link PanelHostServices} call for assertion. */
+export interface HostServicesLog {
+  readonly openStateManager: string[];
+  readonly confirmComponentUpdate: ComponentUpdatePlan[];
+  readonly toastError: string[];
+}
+
+const createHostServicesStub = (
+  log: HostServicesLog,
+  confirmResult: boolean,
+): PanelHostServices => ({
+  openStateManager(nodeId) {
+    log.openStateManager.push(nodeId);
+  },
+  async confirmComponentUpdate(plan) {
+    log.confirmComponentUpdate.push(plan);
+    return confirmResult;
+  },
+  toastError(message) {
+    log.toastError.push(message);
+  },
+});
+
+// =============================================================================
+// Tree finders
+// =============================================================================
+
+/** Depth-first walk of a panel tree, yielding every node. */
+export function* walkTree(node: PanelNode): Generator<PanelNode> {
+  yield node;
+  for (const child of node.children ?? []) {
+    yield* walkTree(child);
+  }
+}
+
+/** Returns every node of `type` in the tree, in document order. */
+export function findNodesByType(root: PanelNode, type: string): PanelNode[] {
+  const out: PanelNode[] = [];
+  for (const node of walkTree(root)) {
+    if (node.type === type) out.push(node);
+  }
+  return out;
+}
+
+/** Returns the first node of `type`, or `undefined`. */
+export function findNodeByType(root: PanelNode, type: string): PanelNode | undefined {
+  for (const node of walkTree(root)) {
+    if (node.type === type) return node;
+  }
+  return undefined;
+}
+
+/**
+ * Returns the first node whose `props.label` (or `props.title`) equals `label`.
+ * Handy for `field`/`section` chrome lookups.
+ */
+export function findNodeByLabel(root: PanelNode, label: string): PanelNode | undefined {
+  for (const node of walkTree(root)) {
+    if (node.props.label === label || node.props.title === label) return node;
+  }
+  return undefined;
+}
+
+// =============================================================================
+// Harness
+// =============================================================================
+
+/** Options for {@link mountPanelDefinition}. */
+export interface MountOptions {
+  /** The node ids the definition edits (its selection). */
+  readonly nodeIds: readonly string[];
+  /** The result `confirmComponentUpdate` resolves to (defaults to `true`). */
+  readonly confirmResult?: boolean;
+}
+
+/** The live handle a definition test drives. */
+export interface PanelHarness {
+  /** The real designer store (commander + mimic middleware over the offline doc). */
+  readonly store: PaywallDesignerStoreType;
+  /** The offline document backing the store. */
+  readonly doc: OfflineDesignerDocument;
+  /** Recorded host-service calls. */
+  readonly hostLog: HostServicesLog;
+  /**
+   * The current emitted wire tree — decoded through the host gate every call, so
+   * reading it double-asserts validity. Throws if the transport is not `ready`
+   * or the tree is invalid.
+   */
+  tree(): PanelTree;
+  /** Fires an event `name` on node `nodeId` with `args`; re-asserts the new tree. */
+  dispatch(nodeId: number, name: string, args?: readonly unknown[]): void;
+  /** The number of commander undo entries currently on the stack. */
+  undoDepth(): number;
+  /** Whether a draft is currently active on the store (a gesture is in flight). */
+  draftActive(): boolean;
+  /** The number of transactions the offline transport has submitted (committed batches). */
+  submittedCount(): number;
+  /** Reads the effective committed `data.style` of a seeded node id. */
+  nodeStyle(nodeId: string): Record<string, unknown>;
+  /** Tears down the transport + restores any spied actions. */
+  dispose(): void;
+}
+
+/** A dispatched-command record: `{ command, params }` in dispatch order. */
+export interface ActionCall<TParams = unknown> {
+  readonly command: CommandObject<never, TParams, unknown, never>;
+  readonly params: TParams;
+}
+
+/**
+ * Wraps a commander action so every dispatch of it is recorded into `calls`
+ * (delegating to the original `fn`). Returns a `restore()` that reinstalls the
+ * original — call it on harness teardown. Test-scoped: mutates the action object
+ * in place, so a test that watches an action MUST dispose the harness.
+ */
+export function watchAction<TParams, TReturn>(
+  action: CommandObject<never, TParams, TReturn, never>,
+  calls: ActionCall<TParams>[],
+): () => void {
+  const target = action as unknown as {
+    fn: (ctx: unknown, params: TParams) => TReturn;
+  };
+  const original = target.fn;
+  target.fn = (ctx: unknown, params: TParams): TReturn => {
+    calls.push({ command: action as never, params });
+    return original(ctx, params);
+  };
+  return () => {
+    target.fn = original;
+  };
+}
+
+/**
+ * Builds and mounts a definition on a fresh seeded store. Returns the
+ * {@link PanelHarness}. The caller seeds nodes first (via {@link seedNodes}) and
+ * passes their ids as `nodeIds`.
+ *
+ * @param definition - the panel definition `(ctx) => ReactNode` under test.
+ * @param doc - the offline document (already seeded by the caller).
+ * @param options - the selection + host-service options.
+ */
+export function mountPanelDefinition(
+  definition: PanelRender,
+  doc: OfflineDesignerDocument,
+  options: MountOptions,
+): PanelHarness {
+  const store = createDesignerStore(
+    doc as unknown as Parameters<typeof createDesignerStore>[0],
+  );
+
+  const hostLog: HostServicesLog = {
+    openStateManager: [],
+    confirmComponentUpdate: [],
+    toastError: [],
+  };
+  const services = createHostServicesStub(hostLog, options.confirmResult ?? true);
+  const selectionStore = createDefinitionSelectionStore(options.nodeIds);
+
+  const wrap: PanelWrap = (children) => (
+    <PaywallStoreContext.Provider value={store}>
+      <PanelHostServicesProvider value={services}>
+        <DefinitionSelectionProvider value={selectionStore}>
+          {children}
+        </DefinitionSelectionProvider>
+      </PanelHostServicesProvider>
+    </PaywallStoreContext.Provider>
+  );
+
+  const inputs: PanelSessionInputs = {
+    props: {},
+    selection: { count: options.nodeIds.length },
+    data: { products: [], variables: {} },
+  };
+
+  const transport: PanelTransport = createInProcessTransport({
+    render: definition,
+    initialInputs: inputs,
+    wrap,
+  });
+
+  /** Reads + asserts the current tree through the host gate (serialize → decode). */
+  const readTree = (): PanelTree => {
+    const snapshot = transport.getSnapshot();
+    if (snapshot.status === "error") {
+      throw new Error(`panel session errored: ${snapshot.message}`);
+    }
+    if (snapshot.status !== "ready") {
+      throw new Error(`panel session not ready (status: ${snapshot.status})`);
+    }
+    // Serialize → decode so the assertion mirrors the real sandbox trust
+    // boundary (a string input pays the byte cap too).
+    const decoded = decodePanelTree(JSON.stringify(snapshot.tree));
+    if (!decoded.ok) {
+      throw new Error(`emitted panel tree is invalid: ${decoded.error}`);
+    }
+    return decoded.tree;
+  };
+
+  const nodeStyle = (nodeId: string): Record<string, unknown> => {
+    const snapshot = store.getState().mimic.snapshot;
+    if (!snapshot) throw new Error("document snapshot not ready");
+    const root = snapshot[0] as { children?: unknown } | undefined;
+    const find = (node: unknown): Record<string, unknown> | undefined => {
+      const n = node as {
+        id?: string;
+        data?: { style?: Record<string, unknown> };
+        children?: unknown[];
+      };
+      if (n.id === nodeId) return n.data?.style ?? {};
+      for (const child of n.children ?? []) {
+        const found = find(child);
+        if (found) return found;
+      }
+      return undefined;
+    };
+    const style = find(root);
+    if (!style) throw new Error(`node ${nodeId} not found in snapshot`);
+    return style;
+  };
+
+  // Assert the very first emission is valid.
+  readTree();
+
+  return {
+    store,
+    doc,
+    hostLog,
+    tree: readTree,
+    dispatch(nodeId, name, args = []) {
+      transport.dispatch({ nodeId, name, args });
+      readTree();
+    },
+    undoDepth() {
+      return store.getState()._commander.undoStack.length;
+    },
+    draftActive() {
+      return store.getState()._commander.activeDraft !== null;
+    },
+    submittedCount() {
+      // The offline stub transport never acks, so the document's pending queue
+      // equals the number of submitted transaction batches. A direct action is
+      // one batch; a whole draft commits as one batch too.
+      return doc.getPendingCount();
+    },
+    nodeStyle,
+    dispose() {
+      transport.dispose();
+    },
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.test.tsx
new file mode 100644
index 000000000..f7d0ced96
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.test.tsx
@@ -0,0 +1,94 @@
+// @vitest-environment jsdom
+
+/**
+ * Runs the demo {@link featureCardWithPanel} fixture's custom `panel` through the
+ * IN-PROCESS OSS session (no iframe — the sandbox transport is not exercised in
+ * jsdom) and asserts the emitted wire tree is valid and composes the host
+ * expansion nodes. This is the ground-truth that a custom panel authored with
+ * `Panel.*` primitives (including `PropField` / `DefaultProps`) serializes to a
+ * tree the host renderer can expand.
+ */
+import { createPanelSession, type PanelSessionInputs } from "@voidhash/paywalls/panel";
+import { extractComponentManifest } from "@voidhash/paywalls";
+import { definitionHasPanel } from "@voidhash/paywalls/sandbox";
+import { describe, expect, test } from "vite-plus/test";
+
+import { decodePanelTree, type PanelNode } from "../../../../../panel-runtime/schema";
+import { featureCardWithPanel } from "./panel-component-fixture";
+
+/** Depth-first walk yielding every node. */
+function* walk(node: PanelNode): Generator<PanelNode> {
+  yield node;
+  for (const child of node.children ?? []) yield* walk(child);
+}
+
+function findByType(root: PanelNode, type: string): PanelNode | undefined {
+  for (const node of walk(root)) if (node.type === type) return node;
+  return undefined;
+}
+
+const inputs: PanelSessionInputs = {
+  props: {
+    title: { kind: "string", value: "Hello" },
+    subtitle: { kind: "string", value: "World" },
+    highlighted: { kind: "boolean", value: false },
+    variant: { kind: "select", value: "solid" },
+  },
+  selection: { count: 1 },
+  data: { products: [], variables: {} },
+};
+
+describe("panel-component-fixture", () => {
+  test("the definition declares a panel and a §2 manifest", () => {
+    expect(definitionHasPanel(featureCardWithPanel)).toBe(true);
+    const manifest = extractComponentManifest(featureCardWithPanel);
+    expect(Object.keys(manifest.props).sort()).toEqual([
+      "highlighted",
+      "subtitle",
+      "title",
+      "variant",
+    ]);
+    expect(manifest.props.variant).toMatchObject({ kind: "select", options: ["solid", "outline"] });
+  });
+
+  test("its panel serializes to a valid tree with PropField + DefaultProps nodes", () => {
+    let latest: unknown;
+    const session = createPanelSession({
+      render: featureCardWithPanel.panel!,
+      initialInputs: inputs,
+      callbacks: {
+        onTree: (tree) => {
+          latest = tree;
+        },
+        onError: (error) => {
+          throw error;
+        },
+      },
+    });
+
+    try {
+      // Serialize → decode through the host gate, mirroring the sandbox boundary.
+      const decoded = decodePanelTree(JSON.stringify(latest));
+      expect(decoded.ok).toBe(true);
+      if (!decoded.ok) return;
+
+      const root = decoded.tree.root;
+      // Two sections: "Content" and "Style".
+      const sections = [...walk(root)].filter((n) => n.type === "section");
+      expect(sections.map((s) => s.props.title)).toEqual(["Content", "Style"]);
+
+      // The author-rendered TextField (title) + a PropField (subtitle) live under
+      // the first section; a DefaultProps lives under the second.
+      const propField = findByType(root, "propField");
+      expect(propField?.props.name).toBe("subtitle");
+
+      const defaultProps = findByType(root, "defaultProps");
+      expect(defaultProps?.props.exclude).toEqual(["title", "subtitle"]);
+
+      const textField = findByType(root, "textField");
+      expect(textField?.props.value).toBe("Hello");
+    } finally {
+      session.dispose();
+    }
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.tsx
new file mode 100644
index 000000000..5cece088c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/fixtures/panel-component-fixture.tsx
@@ -0,0 +1,81 @@
+/**
+ * A demo component definition WITH a custom editor `panel`, for Phase 3b/4 tests
+ * and docs. It exercises the component-panel authoring surface end-to-end: a
+ * `panel` fn built from `Panel.*` primitives that reads `ctx.props.*` and writes
+ * via `set`/`reset`, plus the two host-expansion nodes (`Panel.PropField`,
+ * `Panel.DefaultProps`) that the host renders as real prop-row editors.
+ *
+ * The source is ALSO exported as a string so a future authoring/round-trip test
+ * (Phase 4) can compile it; the object export is what an in-process
+ * {@link createPanelSession} runs directly (no iframe needed in jsdom).
+ */
+import { defineComponent, Text } from "@voidhash/paywalls";
+import { Panel } from "@voidhash/paywalls/panel";
+
+/**
+ * A "Feature Card" component: a title + subtitle string, a highlighted toggle,
+ * and a variant select. Its panel groups the title into a custom Section, then
+ * defers the rest to the host's default rows via `DefaultProps` (excluding the
+ * title it renders itself).
+ */
+export const featureCardWithPanel = defineComponent({
+  props: (p) => ({
+    title: p.string().default("Feature"),
+    subtitle: p.string().default("Describe it"),
+    highlighted: p.boolean().default(false),
+    variant: p.select(["solid", "outline"]).default("solid"),
+  }),
+  panel: (ctx) => (
+    <Panel>
+      <Panel.Section title="Content">
+        <Panel.Field label="Title">
+          <Panel.TextField
+            kind="text"
+            onCommit={(value: string) => ctx.props.title.set(value, { gesture: "commit" })}
+            value={ctx.props.title.value ?? ""}
+          />
+        </Panel.Field>
+        <Panel.PropField name="subtitle" />
+      </Panel.Section>
+      <Panel.Section title="Style">
+        <Panel.DefaultProps exclude={["title", "subtitle"]} />
+      </Panel.Section>
+    </Panel>
+  ),
+  render: (ctx) => <Text>{ctx.props.title}</Text>,
+});
+
+/**
+ * The same definition as an authorable source string (for the Phase 4 compile /
+ * round-trip path). Kept in sync with {@link featureCardWithPanel} by hand.
+ */
+export const FEATURE_CARD_SOURCE = `import { defineComponent, Text } from "@voidhash/paywalls";
+import { Panel } from "@voidhash/paywalls/panel";
+
+export default defineComponent({
+  props: (p) => ({
+    title: p.string().default("Feature"),
+    subtitle: p.string().default("Describe it"),
+    highlighted: p.boolean().default(false),
+    variant: p.select(["solid", "outline"]).default("solid"),
+  }),
+  panel: (ctx) => (
+    <Panel>
+      <Panel.Section title="Content">
+        <Panel.Field label="Title">
+          <Panel.TextField
+            kind="text"
+            value={ctx.props.title.value ?? ""}
+            onCommit={(value) => ctx.props.title.set(value, { gesture: "commit" })}
+          />
+        </Panel.Field>
+        <Panel.PropField name="subtitle" />
+      </Panel.Section>
+      <Panel.Section title="Style">
+        <Panel.DefaultProps exclude={["title", "subtitle"]} />
+      </Panel.Section>
+    </Panel>
+  ),
+  render: (ctx) => <Text>{ctx.props.title}</Text>,
+});
+`;
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.test.tsx
new file mode 100644
index 000000000..9b7516c1e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.test.tsx
@@ -0,0 +1,163 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { updateTextFillStyle } from "../../../state/actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { TextFillPanel } from "./text-fill-panel";
+import {
+  findNodeByType,
+  mountPanelDefinition,
+  seedNodes,
+  seedStateOverride,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+function mount(seeds: Parameters<typeof seedNodes>[1]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  restoreWatch = watchAction(updateTextFillStyle as never, calls as never);
+  harness = mountPanelDefinition(TextFillPanel, doc, { nodeIds });
+  return { doc, harness, nodeIds, calls };
+}
+
+describe("TextFillPanel — snapshot structure", () => {
+  test("single node: Fill section wrapping a color field in a reset affordance", () => {
+    const { harness } = mount([{ type: "text", style: { color: "rgba(4, 5, 6, 1)" } }]);
+    const root = harness.tree().root;
+
+    expect(findNodeByType(root, "section")?.props.title).toBe("Fill");
+    const reset = findNodeByType(root, "resetAffordance")!;
+    expect(reset.props.label).toBe("text color");
+    // No override selected → the reset affordance is hidden.
+    expect(reset.props.show).toBe(false);
+
+    const color = findNodeByType(root, "colorField")!;
+    expect(color.props.value).toBe("rgba(4, 5, 6, 1)");
+    // Single selection → not mixed (the section always passes the boolean).
+    expect(color.props.mixed).toBe(false);
+  });
+
+  test("multi-select with differing color surfaces the mixed flag", () => {
+    const { harness } = mount([
+      { type: "text", style: { color: "rgba(1, 1, 1, 1)" } },
+      { type: "text", style: { color: "rgba(2, 2, 2, 1)" } },
+    ]);
+    const color = findNodeByType(harness.tree().root, "colorField")!;
+    expect(color.props.mixed).toBe(true);
+  });
+
+  test("override-active state shows the reset affordance", async () => {
+    const { doc, harness, nodeIds } = mount([
+      { type: "text", style: { color: "rgba(0, 0, 0, 1)" } },
+    ]);
+    // Seed a state with a `color` override, then select it: the reset context
+    // becomes active and the affordance is shown.
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { color: "rgba(255, 0, 0, 1)" },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    const reset = findNodeByType(harness.tree().root, "resetAffordance")!;
+    expect(reset.props.show).toBe(true);
+    // The color field now reflects the effective (overridden) color.
+    expect(findNodeByType(harness.tree().root, "colorField")?.props.value).toBe(
+      "rgba(255, 0, 0, 1)",
+    );
+  });
+});
+
+describe("TextFillPanel — behavior", () => {
+  test("color drag: begin → live change payload → commit is one gesture", () => {
+    const { harness, nodeIds, calls } = mount([
+      { type: "text", style: { color: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const color = findNodeByType(harness.tree().root, "colorField")!;
+
+    harness.dispatch(color.id, "onDragStart");
+    expect(harness.draftActive()).toBe(true);
+    expect(harness.undoDepth()).toBe(0);
+
+    harness.dispatch(color.id, "onChange", ["rgba(9, 9, 9, 1)"]);
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { color: "rgba(9, 9, 9, 1)" },
+    });
+    // Draft suppresses per-frame undo entries.
+    expect(harness.undoDepth()).toBe(0);
+
+    // Commit ends the gesture. Text is state-capable, so the write persisted:
+    // the draft commits as ONE document batch.
+    const before = harness.submittedCount();
+    harness.dispatch(color.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+    expect(harness.submittedCount()).toBe(before + 1);
+    // The committed base color reflects the gesture's final value.
+    expect(harness.nodeStyle(nodeIds[0]!).color).toBe("rgba(9, 9, 9, 1)");
+    // The gesture recorded no intermediate commander entries.
+    expect(harness.undoDepth()).toBe(0);
+  });
+
+  test("color drag discard reverts the in-flight gesture", () => {
+    const { harness, nodeIds } = mount([
+      { type: "text", style: { color: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const color = findNodeByType(harness.tree().root, "colorField")!;
+
+    harness.dispatch(color.id, "onDragStart");
+    harness.dispatch(color.id, "onChange", ["rgba(5, 5, 5, 1)"]);
+    const before = harness.submittedCount();
+    harness.dispatch(color.id, "onDiscard");
+    expect(harness.draftActive()).toBe(false);
+    // A discarded draft submits nothing; the committed color is unchanged.
+    expect(harness.submittedCount()).toBe(before);
+    expect(harness.nodeStyle(nodeIds[0]!).color).toBe("rgba(0, 0, 0, 1)");
+  });
+
+  test("onReset writes the base color back via buildResetPatch", async () => {
+    const { doc, harness, nodeIds, calls } = mount([
+      { type: "text", style: { color: "rgba(0, 0, 0, 1)" } },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, {
+      style: { color: "rgba(255, 0, 0, 1)" },
+    });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    const reset = findNodeByType(harness.tree().root, "resetAffordance")!;
+    expect(reset.props.show).toBe(true);
+
+    harness.dispatch(reset.id, "onReset");
+    // onReset writes the BASE color (from buildResetPatch(["color"])) — a direct
+    // write of the base value, which clears the state override entry.
+    expect(calls).toHaveLength(1);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { color: "rgba(0, 0, 0, 1)" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx
new file mode 100644
index 000000000..2772e3b36
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx
@@ -0,0 +1,92 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the text `Fill` section — the wire-tree replica
+ * of {@link ../sections/text-fill-section.TextFillSection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Fill" → `Panel.Section title="Fill"`.
+ * - `OverrideResetAffordance` (label "text color", shown when the `color`
+ *   override is active) wrapping a `ColorInput` → `Panel.ResetAffordance` >
+ *   `Panel.ColorField`.
+ *
+ * Behavior (identical to the old section): the reset affordance `show` is
+ * `isOverrideModeActive && hasOverride(["color"])`, and `onReset` writes the
+ * base value back via `updateTextFillStyle` using `buildResetPatch(["color"])`.
+ * The color is a DRAFT gesture (begin/commit/discard); `mixed` reflects
+ * `mixedKeys.has("color")` across a multi-selection. Text nodes are
+ * state-capable, so `targets` carries them and writes persist.
+ */
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback } from "react";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updateTextFillStyle } from "../../../state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+const COLOR_KEYS = ["color"] as const;
+
+/** The text `Fill` panel definition. */
+export function TextFillPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes, style, targets, mixedKeys } = useDefinitionNodes();
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { begin, commit, discard } = useDesignerDraft(store);
+
+  const fill = style as { color: string } | null;
+  const showColorReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(COLOR_KEYS);
+
+  const handleColorChange = useCallback(
+    (value: string) => {
+      dispatch(updateTextFillStyle)({
+        nodes: targets,
+        style: { color: value },
+      });
+    },
+    [dispatch, targets],
+  );
+  const handleChange = useCallback(
+    (incoming: Partial<{ color: string }>) => {
+      dispatch(updateTextFillStyle)({
+        nodes: targets,
+        style: incoming,
+      });
+    },
+    [dispatch, targets],
+  );
+
+  if (!fill) return null;
+
+  return (
+    <Panel>
+      <Panel.Section title="Fill">
+        <Panel.ResetAffordance
+          label="text color"
+          show={showColorReset}
+          onReset={() =>
+            handleChange(
+              overrideReset.buildResetPatch(COLOR_KEYS) as Partial<{ color: string }>,
+            )
+          }
+        >
+          <Panel.ColorField
+            value={fill.color}
+            mixed={mixedKeys.has("color")}
+            onChange={handleColorChange}
+            onCommit={commit}
+            onDiscard={discard}
+            onDragStart={begin}
+          />
+        </Panel.ResetAffordance>
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.test.tsx
new file mode 100644
index 000000000..8d015f1c2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.test.tsx
@@ -0,0 +1,245 @@
+// @vitest-environment jsdom
+
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test } from "vite-plus/test";
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import { updateTypographyStyle } from "../../../state/actions";
+import { createOfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { TypographyPanel } from "./typography-panel";
+import {
+  findNodeByType,
+  findNodesByType,
+  mountPanelDefinition,
+  seedNodes,
+  seedStateOverride,
+  selectState,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+let restoreWatch: (() => void) | undefined;
+afterEach(() => {
+  restoreWatch?.();
+  restoreWatch = undefined;
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** A text node with the given typography fields (schema fills the rest). */
+const typo = (over: Record<string, unknown> = {}) => ({
+  fontSize: 16,
+  fontWeight: "400",
+  textAlign: "left",
+  lineHeight: 1.5,
+  letterSpacing: 0,
+  ...over,
+});
+
+function mount(seeds: Parameters<typeof seedNodes>[1]) {
+  const doc = createOfflineDesignerDocument();
+  const { nodeIds } = seedNodes(doc, seeds);
+  const calls: ActionCall<{ nodes: unknown; style: Record<string, unknown> }>[] = [];
+  restoreWatch = watchAction(updateTypographyStyle as never, calls as never);
+  harness = mountPanelDefinition(TypographyPanel, doc, { nodeIds });
+  return { doc, harness, nodeIds, calls };
+}
+
+/** The select fields in document order: [Font Family, Font Weight]. */
+const selects = (root: Parameters<typeof findNodesByType>[0]) =>
+  findNodesByType(root, "selectField");
+/** The text fields in document order: [Font Size, Line Height, Letter Spacing]. */
+const textFields = (root: Parameters<typeof findNodesByType>[0]) =>
+  findNodesByType(root, "textField");
+
+describe("TypographyPanel — snapshot structure", () => {
+  test("single node: family(disabled)/weight selects, size/lineHeight/letter fields, align toggle", () => {
+    const { harness } = mount([{ type: "text", style: typo() }]);
+    const root = harness.tree().root;
+
+    expect(findNodeByType(root, "section")?.props.title).toBe("Typography");
+
+    const [family, weight] = selects(root);
+    expect(family!.props.disabled).toBe(true);
+    expect((family!.props.options as { value: string }[])[0]!.value).toBe("geist-variable");
+    expect(weight!.props.value).toBe("400");
+    expect((weight!.props.options as { value: string }[]).map((o) => o.value)).toEqual([
+      "100",
+      "200",
+      "300",
+      "400",
+      "500",
+      "600",
+      "700",
+      "800",
+      "900",
+    ]);
+
+    const [size, lineHeight, letter] = textFields(root);
+    expect(size!.props.icon).toBe("type");
+    expect(size!.props.value).toBe("16");
+    expect(lineHeight!.props.icon).toBe("a");
+    // lineHeight 1.5 (not Auto) → the field is enabled, showing the number.
+    expect(lineHeight!.props.disabled).toBe(false);
+    expect(lineHeight!.props.value).toBe("1.5");
+    expect(letter!.props.value).toBe("0");
+
+    const align = findNodeByType(root, "toggleGroup")!;
+    expect(align.props.value).toBe("left");
+    expect((align.props.options as { value: string }[]).map((o) => o.value)).toEqual([
+      "left",
+      "center",
+      "right",
+    ]);
+  });
+
+  test("lineHeight 0 renders as Auto: disabled field, trailing menu present", () => {
+    const { harness } = mount([{ type: "text", style: typo({ lineHeight: 0 }) }]);
+    const root = harness.tree().root;
+    const lineHeight = textFields(root)[1]!;
+    expect(lineHeight.props.disabled).toBe(true);
+    expect(lineHeight.props.value).toBe("Auto");
+    // The trailing menu is the object { items } — Auto + a "Fixed (1.5)" default.
+    const trailing = lineHeight.props.trailingMenu as { items: { value: string; label: string }[] };
+    expect(trailing.items.map((i) => i.value)).toEqual(["auto", "fixed"]);
+    expect(trailing.items[1]!.label).toBe("Fixed (1.5)");
+  });
+
+  test("multi-select surfaces mixed flags; textAlign mixed clears the toggle value", () => {
+    const { harness } = mount([
+      { type: "text", style: typo({ fontSize: 12, textAlign: "left" }) },
+      { type: "text", style: typo({ fontSize: 20, textAlign: "right" }) },
+    ]);
+    const root = harness.tree().root;
+    expect(textFields(root)[0]!.props.mixed).toBe(true); // font size
+    const align = findNodeByType(root, "toggleGroup")!;
+    expect(align.props.mixed).toBe(true);
+    // The renderer maps `mixed` → empty value, so no segment is highlighted.
+  });
+});
+
+describe("TypographyPanel — behavior", () => {
+  test("font weight select is a direct write with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "text", style: typo({ fontWeight: "400" }) }]);
+    const weight = selects(harness.tree().root)[1]!;
+    harness.dispatch(weight.id, "onChange", ["700"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { fontWeight: "700" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("font size typing is a draft; commit ends the gesture", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "text", style: typo({ fontSize: 16 }) }]);
+    const size = textFields(harness.tree().root)[0]!;
+    harness.dispatch(size.id, "onChange", ["24"]);
+    expect(harness.draftActive()).toBe(true);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { fontSize: 24 },
+    });
+    expect(harness.undoDepth()).toBe(0);
+    harness.dispatch(size.id, "onCommit");
+    expect(harness.draftActive()).toBe(false);
+  });
+
+  test("letter spacing typing is a draft with a letterSpacing payload", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "text", style: typo({ letterSpacing: 0 }) }]);
+    const letter = textFields(harness.tree().root)[2]!;
+    harness.dispatch(letter.id, "onChange", ["0.5"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { letterSpacing: 0.5 },
+    });
+    expect(harness.draftActive()).toBe(true);
+  });
+
+  test("textAlign toggle is a direct write with one undo entry", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "text", style: typo({ textAlign: "left" }) }]);
+    const align = findNodeByType(harness.tree().root, "toggleGroup")!;
+    harness.dispatch(align.id, "onChange", ["center"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { textAlign: "center" },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("lineHeight Auto→Fixed via trailing menu writes 1.5 when currently Auto", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "text", style: typo({ lineHeight: 0 }) }]);
+    const lineHeight = textFields(harness.tree().root)[1]!;
+    harness.dispatch(lineHeight.id, "onTrailingSelect", ["fixed"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { lineHeight: 1.5 },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("lineHeight Fixed→Auto via trailing menu writes 0", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "text", style: typo({ lineHeight: 2 }) }]);
+    const lineHeight = textFields(harness.tree().root)[1]!;
+    harness.dispatch(lineHeight.id, "onTrailingSelect", ["auto"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { lineHeight: 0 },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("lineHeight Fixed→Fixed keeps the current value", () => {
+    const { harness, nodeIds, calls } = mount([{ type: "text", style: typo({ lineHeight: 2 }) }]);
+    const lineHeight = textFields(harness.tree().root)[1]!;
+    // Currently Fixed (2): selecting "fixed" keeps 2.
+    harness.dispatch(lineHeight.id, "onTrailingSelect", ["fixed"]);
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { lineHeight: 2 },
+    });
+  });
+
+  test("override-active lineHeight reset writes the base value back", async () => {
+    const { doc, harness, nodeIds, calls } = mount([
+      { type: "text", style: typo({ lineHeight: 1.5 }) },
+    ]);
+    const stateId = seedStateOverride(doc, nodeIds[0]!, { style: { lineHeight: 3 } });
+    act(() => {
+      selectState(harness.store, nodeIds[0]!, stateId);
+    });
+    await flush();
+
+    const reset = findNodesByType(harness.tree().root, "resetAffordance").find(
+      (r) => r.props.label === "line height",
+    )!;
+    expect(reset.props.show).toBe(true);
+    // The field reflects the overridden value.
+    expect(textFields(harness.tree().root)[1]!.props.value).toBe("3");
+
+    harness.dispatch(reset.id, "onReset");
+    expect(calls[0]!.params).toEqual({
+      nodes: [{ nodeId: nodeIds[0], nodeType: "text" }],
+      style: { lineHeight: 1.5 },
+    });
+    expect(harness.undoDepth()).toBe(1);
+  });
+
+  test("all five reset affordances exist with the expected labels", () => {
+    const { harness } = mount([{ type: "text", style: typo() }]);
+    const labels = findNodesByType(harness.tree().root, "resetAffordance").map(
+      (r) => r.props.label,
+    );
+    expect(labels).toEqual([
+      "font weight",
+      "font size",
+      "line height",
+      "letter spacing",
+      "text align",
+    ]);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx
new file mode 100644
index 000000000..1da6faddc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx
@@ -0,0 +1,237 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Typography` section — the wire-tree replica
+ * of {@link ../sections/typography-section.TypographySection}.
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Typography" → `Panel.Section title="Typography"`.
+ * - Font Family `SelectInput` (disabled, single "Default" option) →
+ *   `Panel.SelectField disabled` (a verbatim dead control).
+ * - A `flex-row` of Font Weight `SelectInput` + Font Size `TextInput` →
+ *   `Panel.Row` > two fields.
+ * - A `flex-row` of Line Height `TextInput` (with an Auto/Fixed trailing menu) +
+ *   Letter Spacing `TextInput` → `Panel.Row` > two fields.
+ * - An `Alignment` `PanelSubSection` with a text-align `ToggleGroup` →
+ *   `Panel.Subsection title="Alignment"` > `Panel.ToggleGroup`.
+ *
+ * Behavior (identical to the old section):
+ * - fontSize/lineHeight/letterSpacing are DRAFT gestures (begin-on-first-change →
+ *   live write → commit); fontWeight and textAlign are DIRECT writes.
+ * - `lineHeight === 0` means Auto: the field is disabled and shows "Auto"; the
+ *   trailing menu's "Auto" writes `lineHeight: 0`, "Fixed" writes `1.5` when
+ *   currently Auto else keeps the current value.
+ * - textAlign is `mixed` → the toggle shows no selection (renderer maps the wire
+ *   `mixed` flag to an empty value, like the old `value={mixed ? undefined : v}`).
+ * - Five single-key reset affordances: fontWeight, fontSize, lineHeight,
+ *   letterSpacing, textAlign.
+ *
+ * PARITY COMPROMISES (wire limitations, not the section's intent):
+ * - `selectField` carries no icon prop, so the Font Family / Font Weight select
+ *   glyphs the old section drew are dropped.
+ * - `toggleGroup` options render text labels here (Left/Center/Right) rather than
+ *   the old align icons — the wire IconName set has no text-align tokens.
+ */
+import type { FontWeight, TextAlign } from "@voidhash/mimic-schema";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback } from "react";
+
+import { useDesignerDraft } from "../../../hooks/use-designer-draft";
+import { updateTypographyStyle } from "../../../state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "../../../state/designer-store";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+interface TypographyStyle {
+  fontSize: number;
+  fontWeight: FontWeight;
+  textAlign: TextAlign;
+  lineHeight: number;
+  letterSpacing: number;
+  color: string;
+}
+
+const FONT_WEIGHT_OPTIONS: { value: FontWeight; label: string }[] = [
+  { label: "Thin", value: "100" },
+  { label: "Extra Light", value: "200" },
+  { label: "Light", value: "300" },
+  { label: "Regular", value: "400" },
+  { label: "Medium", value: "500" },
+  { label: "Semibold", value: "600" },
+  { label: "Bold", value: "700" },
+  { label: "Extra Bold", value: "800" },
+  { label: "Black", value: "900" },
+];
+
+const FONT_FAMILY_OPTIONS = [{ label: "Default", value: "geist-variable" }] as const;
+
+const TEXT_ALIGN_OPTIONS = [
+  { value: "left", label: "Left" },
+  { value: "center", label: "Center" },
+  { value: "right", label: "Right" },
+] as const;
+
+const FONT_WEIGHT_KEYS = ["fontWeight"] as const;
+const FONT_SIZE_KEYS = ["fontSize"] as const;
+const LINE_HEIGHT_KEYS = ["lineHeight"] as const;
+const LETTER_SPACING_KEYS = ["letterSpacing"] as const;
+const TEXT_ALIGN_KEYS = ["textAlign"] as const;
+
+/** The `Typography` panel definition. */
+export function TypographyPanel(_ctx: PanelContext) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { nodes, style, targets, mixedKeys } = useDefinitionNodes();
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const node = style as TypographyStyle | null;
+
+  const handleChange = useCallback(
+    (incoming: Partial<TypographyStyle>) => {
+      dispatch(updateTypographyStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<TypographyStyle>) => {
+      if (!draft) begin();
+      dispatch(updateTypographyStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  if (!node) return null;
+
+  const isLineHeightAuto = node.lineHeight === 0;
+  const active = overrideReset.isOverrideModeActive;
+  const reset = (keys: readonly string[]) =>
+    handleChange(overrideReset.buildResetPatch(keys) as Partial<TypographyStyle>);
+
+  return (
+    <Panel>
+      <Panel.Section title="Typography">
+        <Panel.Column>
+          <Panel.SelectField
+            disabled
+            placeholder="Default"
+            options={FONT_FAMILY_OPTIONS.map((o) => ({ value: o.value, label: o.label }))}
+            value={FONT_FAMILY_OPTIONS[0]?.value ?? ""}
+            onChange={() => {
+              // Dead control — the section renders it disabled.
+            }}
+          />
+
+          <Panel.Row align="stretch">
+            <Panel.ResetAffordance
+              label="font weight"
+              show={active && overrideReset.hasOverride(FONT_WEIGHT_KEYS)}
+              onReset={() => reset(FONT_WEIGHT_KEYS)}
+            >
+              <Panel.SelectField
+                placeholder="Font Weight"
+                mixed={mixedKeys.has("fontWeight")}
+                options={FONT_WEIGHT_OPTIONS}
+                value={node.fontWeight}
+                onChange={(value) => handleChange({ fontWeight: value as FontWeight })}
+              />
+            </Panel.ResetAffordance>
+            <Panel.ResetAffordance
+              label="font size"
+              show={active && overrideReset.hasOverride(FONT_SIZE_KEYS)}
+              onReset={() => reset(FONT_SIZE_KEYS)}
+            >
+              <Panel.TextField
+                kind="number"
+                icon="type"
+                min={1}
+                step={1}
+                placeholder="Font Size"
+                mixed={mixedKeys.has("fontSize")}
+                value={node.fontSize.toString()}
+                onChange={(value) => handleDraftChange({ fontSize: Number(value) })}
+                onCommit={handleCommit}
+              />
+            </Panel.ResetAffordance>
+          </Panel.Row>
+
+          <Panel.Row align="stretch">
+            <Panel.ResetAffordance
+              label="line height"
+              show={active && overrideReset.hasOverride(LINE_HEIGHT_KEYS)}
+              onReset={() => reset(LINE_HEIGHT_KEYS)}
+            >
+              <Panel.TextField
+                kind="number"
+                icon="a"
+                min={0.5}
+                step={0.1}
+                placeholder="Line Height"
+                disabled={isLineHeightAuto}
+                mixed={mixedKeys.has("lineHeight")}
+                value={isLineHeightAuto ? "Auto" : node.lineHeight.toString()}
+                trailingMenu={{
+                  items: [
+                    { value: "auto", label: "Auto" },
+                    {
+                      value: "fixed",
+                      label: `Fixed (${isLineHeightAuto ? "1.5" : node.lineHeight.toFixed(1)})`,
+                    },
+                  ],
+                }}
+                onChange={(value) => handleDraftChange({ lineHeight: Number(value) })}
+                onCommit={handleCommit}
+                onTrailingSelect={(value) => {
+                  if (value === "auto") {
+                    handleChange({ lineHeight: 0 });
+                  } else {
+                    handleChange({ lineHeight: isLineHeightAuto ? 1.5 : node.lineHeight });
+                  }
+                }}
+              />
+            </Panel.ResetAffordance>
+            <Panel.ResetAffordance
+              label="letter spacing"
+              show={active && overrideReset.hasOverride(LETTER_SPACING_KEYS)}
+              onReset={() => reset(LETTER_SPACING_KEYS)}
+            >
+              <Panel.TextField
+                kind="number"
+                step={0.1}
+                placeholder="Letter Spacing"
+                mixed={mixedKeys.has("letterSpacing")}
+                value={node.letterSpacing.toString()}
+                onChange={(value) => handleDraftChange({ letterSpacing: Number(value) })}
+                onCommit={handleCommit}
+              />
+            </Panel.ResetAffordance>
+          </Panel.Row>
+        </Panel.Column>
+
+        <Panel.Subsection title="Alignment">
+          <Panel.ResetAffordance
+            label="text align"
+            show={active && overrideReset.hasOverride(TEXT_ALIGN_KEYS)}
+            onReset={() => reset(TEXT_ALIGN_KEYS)}
+          >
+            <Panel.ToggleGroup
+              value={node.textAlign}
+              mixed={mixedKeys.has("textAlign")}
+              options={TEXT_ALIGN_OPTIONS.map((o) => ({ value: o.value, label: o.label }))}
+              onChange={(value) => handleChange({ textAlign: value as TextAlign })}
+            />
+          </Panel.ResetAffordance>
+        </Panel.Subsection>
+      </Panel.Section>
+    </Panel>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts
new file mode 100644
index 000000000..f2874c578
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts
@@ -0,0 +1,71 @@
+"use client";
+
+/**
+ * The one hook every built-in panel definition uses to resolve the nodes it
+ * edits from the store. It bridges the two host seams a definition reads —
+ * {@link useDefinitionSelection} (the reactive selected node ids) and
+ * {@link usePaywallDesignerStore} (the live document) — into a single
+ * `{ nodes, style, targets, mixedKeys }` result, so a definition never touches
+ * the render root, draft plumbing, or style-target resolution directly.
+ *
+ * It is the draft-aware analogue of the legacy sections' `useStyleTargets(nodes)`
+ * with the `nodes` argument replaced by the selection channel: nodes are
+ * resolved from `selectRenderRoot` (draft-staged snapshot preferred, so an
+ * in-progress panel drag renders live), then run through the SAME
+ * `getStyleTargetsForNodes` core the legacy sections use, keeping behavior
+ * byte-identical. Subscribing to `selectRenderRoot` also re-renders the panel on
+ * every draft edit; subscribing to the selection store re-renders it on every
+ * selection change.
+ */
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../../../state/designer-store";
+import { selectRenderRoot } from "../../../state/utils/document-root";
+import { findNodeById } from "../../../state/utils/tree";
+import { getStyleTargetsForNodes, type StyleTargetsResult } from "../utils/get-style-targets";
+import { useDefinitionSelection } from "./definition-selection";
+
+/**
+ * The resolved editing target for a definition: the selected snapshot nodes plus
+ * the style-target result (effective `style`, write `targets`, and `mixedKeys`
+ * across a multi-selection). `style` is `null` when the first node is styleless
+ * — a definition returns `null` in that case, exactly like the legacy sections.
+ */
+export interface DefinitionNodes extends StyleTargetsResult {
+  /** The selected snapshot nodes, resolved draft-aware from the render root. */
+  readonly nodes: SnapshotNode[];
+}
+
+/**
+ * Resolves the current definition's editing target from the store + selection.
+ * Reactive: re-renders on selection changes, document changes, and in-progress
+ * draft edits.
+ */
+export function useDefinitionNodes(): DefinitionNodes {
+  const store = usePaywallDesignerStore();
+  const { nodeIds } = useDefinitionSelection();
+  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
+
+  // Prefer the active draft's staged snapshot so an in-progress deferred edit
+  // (a style-panel drag runs inside a mimic draft) reflects live in the panel's
+  // own controls, matching the canvas; with no active draft this is the
+  // committed snapshot. Subscribing here also re-renders the panel per draft
+  // edit.
+  const renderRoot = useStore(store, selectRenderRoot);
+  // Resolve each selected id from the render root, DROPPING any that no longer
+  // resolve. The legacy `useStyleTargets(nodes)` fell back to the passed-in
+  // snapshot node (`findNodeById(...) ?? node`), but there the caller already
+  // held a resolved node object; here only the id crosses the selection seam.
+  // In the live flow the ids come straight from the current render nodes
+  // (`panel-stack` maps `nodes.map(n => n.id)`), so they always resolve and the
+  // two paths are identical — the drop only guards a transient stale id, where
+  // rendering nothing is safer than rendering stale style data.
+  const nodes = nodeIds.flatMap((id) => {
+    const node = findNodeById<SnapshotNode>(renderRoot, id);
+    return node ? [node] : [];
+  });
+
+  const result = getStyleTargetsForNodes(nodes, stateOverrideSelection);
+  return { nodes, ...result };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.test.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.test.tsx
new file mode 100644
index 000000000..fa32f145e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.test.tsx
@@ -0,0 +1,290 @@
+// @vitest-environment jsdom
+
+import type { VariableType } from "@voidhash/mimic-schema";
+import { act } from "@testing-library/react";
+import { afterEach, describe, expect, test, vi } from "vite-plus/test";
+
+// The product literal editor renders a ProductInput reading TanStack Router
+// params; outside a route `useParams({strict:false})` returns `{}`.
+vi.mock("@tanstack/react-router", () => ({ useParams: () => ({}) }));
+
+/** Flushes React's coalesced re-render/re-emit microtask. */
+const flush = () => act(async () => {});
+
+import type { PanelNode } from "../../../panel-runtime/schema";
+
+import { addVariable, removeVariable, updateVariable } from "../../../state/actions";
+import { createOfflineDesignerDocument, type OfflineDesignerDocument } from "../../../state/testing/offline-document";
+import { VariablesPanel } from "./variables-panel";
+import {
+  findNodeByLabel,
+  findNodesByType,
+  findNodeByType,
+  mountPanelDefinition,
+  seedNodes,
+  watchAction,
+  type ActionCall,
+  type PanelHarness,
+} from "./testing/definition-harness";
+
+let harness: PanelHarness | undefined;
+const restore: (() => void)[] = [];
+afterEach(() => {
+  while (restore.length) restore.pop()!();
+  harness?.dispose();
+  harness = undefined;
+});
+
+/** Seeds a local variable directly onto a node's `data.localVariables`. */
+function seedVariable(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  name: string,
+  value: VariableType,
+): string {
+  let entryId = "";
+  doc.transaction((root) => {
+    const node = root.findByIdAcrossTree(nodeId);
+    const created = (
+      node as unknown as {
+        data: { localVariables: { push: (v: unknown) => { id: string } } };
+      }
+    ).data.localVariables.push({ id: `internal-${name}`, name, value });
+    entryId = created.id;
+  });
+  return entryId;
+}
+
+/** All popover trigger buttons (the variable rows). */
+const rowButtons = (h: PanelHarness): PanelNode[] =>
+  findNodesByType(h.tree().root, "button").filter((b) => typeof b.props.label === "string" && b.props.label !== "");
+
+describe("VariablesPanel — rows", () => {
+  test("renders a row per variable, including product display", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedVariable(doc, nodeIds[0]!, "greeting", { key: "string", value: "hi" });
+    seedVariable(doc, nodeIds[0]!, "count", { key: "number", value: 3 });
+    seedVariable(doc, nodeIds[0]!, "isPro", { key: "boolean", value: true });
+    seedVariable(doc, nodeIds[0]!, "plan", { key: "product", value: { productId: "prod_1" } });
+    seedVariable(doc, nodeIds[0]!, "noPlan", { key: "product", value: {} });
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const labels = rowButtons(harness).map((b) => b.props.label as string);
+    expect(labels.some((l) => l.startsWith("greeting"))).toBe(true);
+    expect(labels.some((l) => l.startsWith("count") && l.endsWith("3"))).toBe(true);
+    expect(labels.some((l) => l.startsWith("isPro") && l.endsWith("True"))).toBe(true);
+    // Product with an id shows the "…" sentinel; empty product shows "None".
+    expect(labels.some((l) => l.startsWith("plan") && l.endsWith("…"))).toBe(true);
+    expect(labels.some((l) => l.startsWith("noPlan") && l.endsWith("None"))).toBe(true);
+  });
+
+  test("a boolean variable's value editor is a True/False toggle group", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedVariable(doc, nodeIds[0]!, "isPro", { key: "boolean", value: true });
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+    const toggle = findNodeByType(harness.tree().root, "toggleGroup");
+    expect(toggle?.props.options).toEqual([
+      { value: "true", label: "True" },
+      { value: "false", label: "False" },
+    ]);
+  });
+
+  test("a product variable's value editor is a productField", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedVariable(doc, nodeIds[0]!, "plan", { key: "product", value: { productId: "prod_1" } });
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+    const productField = findNodeByType(harness.tree().root, "productField");
+    expect(productField?.props.productId).toBe("prod_1");
+  });
+});
+
+describe("VariablesPanel — edit / commit-on-close", () => {
+  /** The single row popover for a one-variable panel. */
+  const popover = (h: PanelHarness) => findNodeByType(h.tree().root, "popover")!;
+
+  test("editing name + value and closing persists both (only-if-changed)", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const entryId = seedVariable(doc, nodeIds[0]!, "greeting", { key: "string", value: "hi" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(updateVariable as never, calls as never));
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    // Open the row.
+    harness.dispatch(popover(harness).id, "onOpenChange", [true]);
+    await flush();
+
+    const nameField = findNodeByLabel(harness.tree().root, "Name")!;
+    const nameInput = findNodeByType(nameField, "textField")!;
+    harness.dispatch(nameInput.id, "onChange", ["welcome"]);
+    const valueField = findNodeByLabel(harness.tree().root, "Value")!;
+    const valueInput = findNodeByType(valueField, "textField")!;
+    harness.dispatch(valueInput.id, "onChange", ["hello"]);
+    await flush();
+
+    // Close → persists name + value (two updateVariable dispatches).
+    harness.dispatch(popover(harness).id, "onOpenChange", [false]);
+    await flush();
+    expect(calls.map((c) => c.params)).toEqual([
+      { newName: "welcome", nodeId: nodeIds[0], nodeType: "view", variableId: entryId },
+      {
+        newValue: { key: "string", value: "hello" },
+        nodeId: nodeIds[0],
+        nodeType: "view",
+        variableId: entryId,
+      },
+    ]);
+  });
+
+  test("closing without changes is a no-op", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedVariable(doc, nodeIds[0]!, "greeting", { key: "string", value: "hi" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(updateVariable as never, calls as never));
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    harness.dispatch(popover(harness).id, "onOpenChange", [true]);
+    await flush();
+    harness.dispatch(popover(harness).id, "onOpenChange", [false]);
+    await flush();
+    expect(calls).toHaveLength(0);
+  });
+
+  test("removing a variable dispatches removeVariable with the entry id", () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const entryId = seedVariable(doc, nodeIds[0]!, "greeting", { key: "string", value: "hi" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(removeVariable as never, calls as never));
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    const minus = findNodesByType(harness.tree().root, "button").find((b) => b.props.icon === "minus")!;
+    harness.dispatch(minus.id, "onClick");
+    expect(calls.at(-1)!.params).toEqual({
+      nodeId: nodeIds[0],
+      nodeType: "view",
+      variableId: entryId,
+    });
+  });
+});
+
+describe("VariablesPanel — pending add flow", () => {
+  /** Starts a pending variable of `type` via the header menu. */
+  const startAdding = (h: PanelHarness, type: string) => {
+    const menu = findNodeByType(h.tree().root, "menu")!;
+    h.dispatch(menu.id, "onSelect", [type]);
+  };
+
+  test("selecting a type opens a pending row after the 200ms timer", async () => {
+    vi.useFakeTimers();
+    try {
+      const doc = createOfflineDesignerDocument();
+      const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+      harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+      act(() => startAdding(harness!, "string"));
+      // Row exists but its popover is not yet open.
+      let pop = findNodeByType(harness.tree().root, "popover")!;
+      expect(pop.props.open).toBe(false);
+
+      await act(async () => {
+        vi.advanceTimersByTime(200);
+      });
+      pop = findNodeByType(harness.tree().root, "popover")!;
+      expect(pop.props.open).toBe(true);
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  test("empty name is silently dropped on close (no addVariable)", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(addVariable as never, calls as never));
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    startAdding(harness, "string");
+    await new Promise((r) => setTimeout(r, 210));
+    await flush();
+    const pop = findNodeByType(harness.tree().root, "popover")!;
+    expect(pop.props.open).toBe(true);
+    harness.dispatch(pop.id, "onOpenChange", [false]);
+    await flush();
+    expect(calls).toHaveLength(0);
+  });
+
+  test("a too-long name toasts the exact error and adds nothing", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(addVariable as never, calls as never));
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    startAdding(harness, "string");
+    await new Promise((r) => setTimeout(r, 210));
+    await flush();
+    const nameInput = findNodeByType(findNodeByLabel(harness.tree().root, "Name")!, "textField")!;
+    harness.dispatch(nameInput.id, "onChange", ["x".repeat(33)]);
+    await flush();
+    harness.dispatch(findNodeByType(harness.tree().root, "popover")!.id, "onOpenChange", [false]);
+    await flush();
+    expect(harness.hostLog.toastError).toEqual([
+      "Variable name must be less than 32 characters",
+    ]);
+    expect(calls).toHaveLength(0);
+  });
+
+  test("a duplicate name toasts the exact error and adds nothing", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    seedVariable(doc, nodeIds[0]!, "greeting", { key: "string", value: "hi" });
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(addVariable as never, calls as never));
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    startAdding(harness, "string");
+    await new Promise((r) => setTimeout(r, 210));
+    await flush();
+    // The pending row is the LAST popover (appended after the seeded row); its
+    // Name field is likewise the last one.
+    const names = findNodesByType(harness.tree().root, "textField").filter(
+      (t) => t.props.placeholder === "Variable name",
+    );
+    harness.dispatch(names.at(-1)!.id, "onChange", ["greeting"]);
+    await flush();
+    const pendingPopover = findNodesByType(harness.tree().root, "popover").at(-1)!;
+    harness.dispatch(pendingPopover.id, "onOpenChange", [false]);
+    await flush();
+    expect(harness.hostLog.toastError).toEqual(["A variable with this name already exists"]);
+    expect(calls).toHaveLength(0);
+  });
+
+  test("a valid name adds the variable with the exact payload (trimmed)", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { nodeIds } = seedNodes(doc, [{ type: "view" }]);
+    const calls: ActionCall<Record<string, unknown>>[] = [];
+    restore.push(watchAction(addVariable as never, calls as never));
+    harness = mountPanelDefinition(VariablesPanel, doc, { nodeIds: [nodeIds[0]!] });
+
+    startAdding(harness, "number");
+    await new Promise((r) => setTimeout(r, 210));
+    await flush();
+    const nameInput = findNodeByType(findNodeByLabel(harness.tree().root, "Name")!, "textField")!;
+    harness.dispatch(nameInput.id, "onChange", ["  score  "]);
+    await flush();
+    harness.dispatch(findNodeByType(harness.tree().root, "popover")!.id, "onOpenChange", [false]);
+    await flush();
+    expect(calls.at(-1)!.params).toEqual({
+      name: "score",
+      nodeId: nodeIds[0],
+      nodeType: "view",
+      type: "number",
+    });
+    expect(harness.hostLog.toastError).toEqual([]);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
new file mode 100644
index 000000000..2731e71b5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
@@ -0,0 +1,325 @@
+"use client";
+
+/**
+ * Built-in panel DEFINITION for the `Variables` section — the wire-tree replica
+ * of {@link ../sections/variables-section.VariablesSection} (+ its `VariableRow`
+ * and `PendingVariableRow`).
+ *
+ * Structure (old JSX → wire nodes):
+ * - `PanelSection` + header "Variables" → `Panel.Section title="Variables"`.
+ * - The header type-picker (old `DropdownMenu` of Text/Number/Boolean/Product,
+ *   `+` trigger) → `Panel.SectionActions` > `Panel.Menu` (its `onSelect` starts a
+ *   pending variable). PARITY NOTE: the wire `menu` renders a chevron trigger, not
+ *   the old `+`.
+ * - Each existing variable → a `Panel.Row` with a controlled `Panel.Popover`
+ *   (open when `openVariableId === id`) over a name `Panel.TextField` + a
+ *   type-appropriate literal editor (string→text field, number→number field,
+ *   boolean→a True/False `Panel.ToggleGroup` matching the old `BooleanInput`,
+ *   product→the new `Panel.ProductField`), plus a `−` remove `Panel.Button`.
+ * - A pending variable renders the same row shape with `open` gated on the 200ms
+ *   timer, and NO remove-on-close (its close commits or drops).
+ *
+ * Buffering + commit discipline (identical to the old rows):
+ * - A VariableRow buffers `editName`/`editValue` locally, re-seeded when the row
+ *   opens (the old `useEffect` on `isOpen`/name/value); on close it persists ONLY
+ *   if changed — name via `!==`, value via `JSON.stringify` compare — through
+ *   `updateVariable` (one undo per changed field). Close-unchanged is a no-op.
+ * - The pending flow seeds from `VARIABLE_TYPE_REGISTRY[type].defaultValue`; a
+ *   200ms `setTimeout` (replicated here, cleaned up on unmount) opens the popover
+ *   (the old Radix focus-trap timing). On close: trim name; empty → silent drop;
+ *   `>32` chars → `toastError` (same message); duplicate → `toastError`; else
+ *   `addVariable({name, nodeId, nodeType, type})`.
+ *
+ * PARITY GAP: the pending row's 50ms name autofocus lived in the old row's popover
+ * ref; the wire `popoverContent` exposes no input ref/autofocus seam, so the
+ * autofocus is dropped (functional editing is unaffected).
+ */
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+import type { PanelContext } from "@voidhash/paywalls/panel";
+import { Panel } from "@voidhash/paywalls/panel";
+import { useCallback, useEffect, useState } from "react";
+
+import { VARIABLE_TYPE_REGISTRY } from "../../../constants";
+import { usePanelHostServices } from "../../../panel-runtime/panel-host-services";
+import { addVariable, removeVariable, updateVariable } from "../../../state/actions";
+import { usePaywallDesignerActions } from "../../../state/designer-store";
+import type { StatefulEditableNodeType } from "../../../state/actions/node-resolver";
+import { useDefinitionNodes } from "./use-definition-nodes";
+
+/** A decoded local variable: its array-entry id + the `{ name, value }` variable. */
+interface LocalVariable {
+  readonly id: string;
+  readonly value: { readonly name: string; readonly value: VariableType };
+}
+
+/** A pending (not-yet-added) variable being authored. */
+interface PendingVariable {
+  readonly type: VariableTypeKey;
+  readonly name: string;
+  readonly value: VariableType;
+}
+
+/** Unwraps `node.data.localVariables` (`{id,value}` envelope) into decoded variables. */
+function readLocalVariables(node: unknown): LocalVariable[] {
+  const raw = (node as { data?: { localVariables?: readonly unknown[] } }).data?.localVariables;
+  if (!Array.isArray(raw)) return [];
+  return raw.flatMap((entry) => {
+    const e = entry as { id?: string; value?: { name?: string; value?: VariableType } };
+    if (e.value === undefined || typeof e.id !== "string") return [];
+    return [
+      { id: e.id, value: { name: e.value.name ?? "", value: e.value.value as VariableType } },
+    ];
+  });
+}
+
+/** The value-display string shown on a row's trigger (mirrors the old rows). */
+function valueDisplay(value: VariableType): string {
+  switch (value.key) {
+    case "string":
+      return value.value || '""';
+    case "number":
+      return String(value.value);
+    case "boolean":
+      return value.value ? "True" : "False";
+    case "product":
+      return value.value.productId ? "…" : "None";
+  }
+}
+
+/** The `Variables` panel definition. */
+export function VariablesPanel(_ctx: PanelContext) {
+  const dispatch = usePaywallDesignerActions();
+  const services = usePanelHostServices();
+  const { nodes } = useDefinitionNodes();
+
+  const node = nodes[0];
+  const nodeId = node?.id ?? "";
+  const nodeType = (node?.type ?? "view") as StatefulEditableNodeType;
+  const variables = node ? readLocalVariables(node) : [];
+  const existingNames = new Set(variables.map((v) => v.value.name));
+
+  const [openVariableId, setOpenVariableId] = useState<string | null>(null);
+  // The open row's buffered edits (re-seeded on open); persisted only on close.
+  const [editName, setEditName] = useState("");
+  const [editValue, setEditValue] = useState<VariableType>({ key: "string", value: "" });
+
+  const [pendingVariable, setPendingVariable] = useState<PendingVariable | null>(null);
+  const [isPendingPopoverOpen, setIsPendingPopoverOpen] = useState(false);
+
+  // Open the pending popover after 200ms (the old Radix focus-trap timing);
+  // cleanup clears the timer on unmount / when the pending state resets.
+  useEffect(() => {
+    if (pendingVariable && !isPendingPopoverOpen) {
+      const timer = setTimeout(() => setIsPendingPopoverOpen(true), 200);
+      return () => clearTimeout(timer);
+    }
+    if (!pendingVariable) setIsPendingPopoverOpen(false);
+  }, [pendingVariable, isPendingPopoverOpen]);
+
+  const startAdding = useCallback((type: VariableTypeKey) => {
+    setPendingVariable({ type, name: "", value: VARIABLE_TYPE_REGISTRY[type].defaultValue });
+    setIsPendingPopoverOpen(false);
+    setOpenVariableId(null);
+  }, []);
+
+  const openRow = useCallback(
+    (variable: LocalVariable, open: boolean) => {
+      if (open) {
+        setPendingVariable(null);
+        setEditName(variable.value.name);
+        setEditValue(variable.value.value);
+        setOpenVariableId(variable.id);
+      } else {
+        // Persist buffered edits on close, only if changed (mirrors the old row).
+        if (editName !== variable.value.name) {
+          dispatch(updateVariable)({ newName: editName, nodeId, nodeType, variableId: variable.id });
+        }
+        if (JSON.stringify(editValue) !== JSON.stringify(variable.value.value)) {
+          dispatch(updateVariable)({
+            newValue: editValue,
+            nodeId,
+            nodeType,
+            variableId: variable.id,
+          });
+        }
+        setOpenVariableId(null);
+      }
+    },
+    [dispatch, editName, editValue, nodeId, nodeType],
+  );
+
+  const commitPending = useCallback(
+    (open: boolean) => {
+      if (open || !isPendingPopoverOpen || !pendingVariable) return;
+      const trimmedName = pendingVariable.name.trim();
+      setPendingVariable(null);
+      if (!trimmedName) return;
+      if (trimmedName.length > 32) {
+        services.toastError("Variable name must be less than 32 characters");
+        return;
+      }
+      if (existingNames.has(trimmedName)) {
+        services.toastError("A variable with this name already exists");
+        return;
+      }
+      dispatch(addVariable)({ name: trimmedName, nodeId, nodeType, type: pendingVariable.type });
+    },
+    [dispatch, existingNames, isPendingPopoverOpen, nodeId, nodeType, pendingVariable, services],
+  );
+
+  if (!node) return null;
+
+  const hasBody = variables.length > 0 || pendingVariable !== null;
+
+  return (
+    <Panel>
+      <Panel.Section title="Variables">
+        <Panel.SectionActions>
+          <Panel.Menu
+            items={[
+              { value: "string", label: "Text" },
+              { value: "number", label: "Number" },
+              { value: "boolean", label: "Boolean (True / False)" },
+              { value: "product", label: "Product" },
+            ]}
+            onSelect={(value) => startAdding(value as VariableTypeKey)}
+          />
+        </Panel.SectionActions>
+        {hasBody && (
+          <Panel.Column gap="sm">
+            {variables.map((variable) => (
+              <VariableRow
+                key={variable.id}
+                editName={openVariableId === variable.id ? editName : variable.value.name}
+                editValue={openVariableId === variable.id ? editValue : variable.value.value}
+                isOpen={openVariableId === variable.id}
+                name={variable.value.name}
+                onEditName={setEditName}
+                onEditValue={setEditValue}
+                onOpenChange={(open) => openRow(variable, open)}
+                onRemove={() =>
+                  dispatch(removeVariable)({ nodeId, nodeType, variableId: variable.id })
+                }
+                value={variable.value.value}
+              />
+            ))}
+            {pendingVariable && (
+              <VariableRow
+                editName={pendingVariable.name}
+                editValue={pendingVariable.value}
+                isOpen={isPendingPopoverOpen}
+                name={pendingVariable.name}
+                onEditName={(name) =>
+                  setPendingVariable((prev) => (prev ? { ...prev, name } : null))
+                }
+                onEditValue={(value) =>
+                  setPendingVariable((prev) => (prev ? { ...prev, value } : null))
+                }
+                onOpenChange={commitPending}
+                onRemove={() => setPendingVariable(null)}
+                value={pendingVariable.value}
+              />
+            )}
+          </Panel.Column>
+        )}
+      </Panel.Section>
+    </Panel>
+  );
+}
+
+/** One variable row: a controlled popover trigger + name/value editors + remove. */
+function VariableRow({
+  name,
+  value,
+  editName,
+  editValue,
+  isOpen,
+  onEditName,
+  onEditValue,
+  onOpenChange,
+  onRemove,
+}: {
+  name: string;
+  value: VariableType;
+  editName: string;
+  editValue: VariableType;
+  isOpen: boolean;
+  onEditName: (name: string) => void;
+  onEditValue: (value: VariableType) => void;
+  onOpenChange: (open: boolean) => void;
+  onRemove: () => void;
+}) {
+  return (
+    <Panel.Row align="center">
+      <Panel.Popover open={isOpen} onOpenChange={onOpenChange}>
+        <Panel.PopoverTrigger>
+          {/* No `variant` → the host defaults to the `secondary` trigger look. */}
+          <Panel.Button label={`${name || "Unnamed"}  ${valueDisplay(value)}`} size="sm" />
+        </Panel.PopoverTrigger>
+        <Panel.PopoverContent align="start" side="left">
+          <Panel.Field label="Name">
+            <Panel.TextField
+              kind="text"
+              placeholder="Variable name"
+              value={editName}
+              onChange={onEditName}
+            />
+          </Panel.Field>
+          <Panel.Field label="Value">
+            <VariableValueEditor value={editValue} onChange={onEditValue} />
+          </Panel.Field>
+        </Panel.PopoverContent>
+      </Panel.Popover>
+      <Panel.Button icon="minus" size="icon-sm" onClick={onRemove} />
+    </Panel.Row>
+  );
+}
+
+/** The type-appropriate literal editor for a variable's value. */
+function VariableValueEditor({
+  value,
+  onChange,
+}: {
+  value: VariableType;
+  onChange: (value: VariableType) => void;
+}) {
+  switch (value.key) {
+    case "string":
+      return (
+        <Panel.TextField
+          kind="text"
+          value={value.value}
+          onChange={(next) => onChange({ key: "string", value: next })}
+        />
+      );
+    case "number":
+      return (
+        <Panel.TextField
+          kind="number"
+          value={value.value}
+          onChange={(next) => onChange({ key: "number", value: Number(next) || 0 })}
+        />
+      );
+    case "boolean":
+      return (
+        <Panel.ToggleGroup
+          options={[
+            { value: "true", label: "True" },
+            { value: "false", label: "False" },
+          ]}
+          value={value.value ? "true" : "false"}
+          onChange={(next) => onChange({ key: "boolean", value: next === "true" })}
+        />
+      );
+    case "product":
+      return (
+        <Panel.ProductField
+          productId={value.value.productId ?? undefined}
+          placeholder="Select product…"
+          onChange={(productId) =>
+            onChange({ key: "product", value: productId ? { productId } : {} })
+          }
+        />
+      );
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx
new file mode 100644
index 000000000..954a773b2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx
@@ -0,0 +1,182 @@
+"use client";
+
+import type {
+  PathSnapshotNode,
+  ScreenSnapshotNode,
+  ScrollViewSnapshotNode,
+  ShapeSnapshotNode,
+  SnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+
+import { isEditableNodeType } from "../../state/actions";
+import type { EditableNodeType } from "../../state/actions";
+import type { SectionId } from "../types";
+import { getSharedSections } from "./section-registry";
+import { BorderRadiusSection } from "./sections/border-radius-section";
+import { BorderSection } from "./sections/border-section";
+import { ComponentActionsSection } from "./sections/component-actions-section";
+import { ComponentPropsSection } from "./sections/component-props-section";
+import { ComponentSection } from "./sections/component-section";
+import { ComponentWarningsBlock } from "./sections/component-warnings";
+import { ContentSection } from "./sections/content-section";
+import { FillSection } from "./sections/fill-section";
+import { FlexLayoutSection } from "./sections/flex-layout-section";
+import { InteractionsSection } from "./sections/interactions-section";
+import { PathFillSection } from "./sections/path-fill-section";
+import { PathStrokeSection } from "./sections/path-stroke-section";
+import { PositionSection } from "./sections/position-section";
+import { ScrollViewSettingsSection } from "./sections/scroll-view-settings-section";
+import { ShapeLayoutSection } from "./sections/shape-layout-section";
+import { StatesSection } from "./sections/states-section";
+import { TextFillSection } from "./sections/text-fill-section";
+import { TypographySection } from "./sections/typography-section";
+import { VariablesSection } from "./sections/variables-section";
+
+type StatefulSnapshotNode =
+  | ViewSnapshotNode
+  | ScrollViewSnapshotNode
+  | ScreenSnapshotNode
+  | TextSnapshotNode
+  | ShapeSnapshotNode
+  | PathSnapshotNode;
+
+function isStatefulSnapshotNode(node: SnapshotNode): node is StatefulSnapshotNode {
+  return (
+    node.type === "view" ||
+    node.type === "scrollView" ||
+    node.type === "screen" ||
+    node.type === "text" ||
+    node.type === "shape" ||
+    node.type === "path"
+  );
+}
+
+/**
+ * Renders one legacy section by id, narrowing the first node's type as the old
+ * per-section switch requires. Exported so the v2 {@link PanelStack} can reuse
+ * this EXACT rendering path for any section not yet migrated (the fallback must
+ * be byte-identical to the flag-off panel — do not fork this logic).
+ */
+export function Section({ sectionId, nodes }: { sectionId: SectionId; nodes: SnapshotNode[] }) {
+  const firstNode = nodes[0]!;
+  const statefulNodes = nodes.filter(isStatefulSnapshotNode);
+
+  switch (sectionId) {
+    case "variables":
+      if (
+        firstNode.type === "view" ||
+        firstNode.type === "scrollView" ||
+        firstNode.type === "text" ||
+        firstNode.type === "screen" ||
+        firstNode.type === "shape" ||
+        firstNode.type === "path"
+      ) {
+        return <VariablesSection nodes={statefulNodes} />;
+      }
+      return null;
+    case "states":
+      if (
+        firstNode.type === "view" ||
+        firstNode.type === "scrollView" ||
+        firstNode.type === "text" ||
+        firstNode.type === "screen" ||
+        firstNode.type === "shape" ||
+        firstNode.type === "path"
+      ) {
+        return <StatesSection nodes={statefulNodes} />;
+      }
+      return null;
+    case "scrollViewSettings":
+      return (
+        <ScrollViewSettingsSection
+          nodes={nodes.filter((node) => node.type === "scrollView")}
+        />
+      );
+    case "position": {
+      if (firstNode.type !== "view" && firstNode.type !== "scrollView" && firstNode.type !== "text")
+        return null;
+      return <PositionSection nodes={nodes} />;
+    }
+    case "flexLayout": {
+      // Use the node's actual parentId from the snapshot
+      if (!firstNode.parentId) return null;
+
+      return (
+        <FlexLayoutSection
+          editableDimensions={firstNode.type !== "screen"}
+          nodes={nodes}
+          parentId={firstNode.parentId}
+        />
+      );
+    }
+    case "shapeLayout":
+      return <ShapeLayoutSection nodes={nodes} />;
+    case "borderRadius":
+      return <BorderRadiusSection nodes={nodes} />;
+    case "fill":
+      return <FillSection nodes={nodes} />;
+    case "border":
+      return <BorderSection nodes={nodes} />;
+    case "interactions": {
+      if (firstNode.type !== "view" && firstNode.type !== "scrollView") return null;
+      return (
+        <InteractionsSection
+          nodes={nodes.filter((node) => node.type === "view" || node.type === "scrollView")}
+        />
+      );
+    }
+    case "content": {
+      if (firstNode.type !== "text") return null;
+      return <ContentSection node={firstNode} />;
+    }
+    case "typography":
+      return <TypographySection nodes={nodes} />;
+    case "textFill":
+      return <TextFillSection nodes={nodes} />;
+    case "pathFill":
+      return <PathFillSection nodes={nodes} />;
+    case "pathStroke":
+      return <PathStrokeSection nodes={nodes} />;
+    case "componentSettings": {
+      if (firstNode.type !== "component") return null;
+      return <ComponentSection node={firstNode} />;
+    }
+    case "componentProps": {
+      if (firstNode.type !== "component") return null;
+      return <ComponentPropsSection node={firstNode} />;
+    }
+    case "componentActions": {
+      if (firstNode.type !== "component") return null;
+      return <ComponentActionsSection node={firstNode} />;
+    }
+    default:
+      return null;
+  }
+}
+
+export function DynamicPanel({ nodes }: { nodes: SnapshotNode[] }) {
+  if (nodes.length === 0) return null;
+
+  const nodeTypes = [
+    ...new Set(
+      nodes.map((n) => n.type).filter((t): t is EditableNodeType => isEditableNodeType(t)),
+    ),
+  ];
+
+  if (nodeTypes.length === 0) return null;
+
+  const isMulti = nodes.length > 1;
+  const sections = getSharedSections(nodeTypes, isMulti);
+  const singleComponentNode = !isMulti && nodes[0]?.type === "component" ? nodes[0] : null;
+
+  return (
+    <>
+      {singleComponentNode && <ComponentWarningsBlock nodeId={singleComponentNode.id} />}
+      {sections.map((section) => (
+        <Section key={section.id} nodes={nodes} sectionId={section.id} />
+      ))}
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx
new file mode 100644
index 000000000..e053fe97d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/alignment-grid";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx
new file mode 100644
index 000000000..7f5ff56ba
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx
@@ -0,0 +1,50 @@
+import type { AlignItems, FlexDirection } from "@voidhash/mimic-schema";
+
+import { DimensionField } from "@/features/studio/paywalls/designer/panel-kit/dimension-field";
+
+import type { NodeEditorProps } from "../../types";
+
+type HeightInputProps = NodeEditorProps<
+  "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
+> & {
+  disabled?: boolean;
+  parentDirection: FlexDirection;
+  parentAlignItems?: AlignItems;
+  computedHeight?: number | null;
+  onDraftChange?: (
+    node: NodeEditorProps<
+      "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
+    >["node"],
+  ) => void;
+  onCommit?: () => void;
+};
+
+/**
+ * Height-axis specialization of {@link DimensionField}. Kept as a thin wrapper so
+ * the flex-layout and shape-layout sections keep their existing call sites
+ * (`computedHeight` prop name) while the shared logic lives in the kit.
+ */
+export function HeightInput({
+  node,
+  onNodeChange,
+  disabled = false,
+  parentDirection,
+  parentAlignItems,
+  computedHeight,
+  onDraftChange,
+  onCommit,
+}: HeightInputProps) {
+  return (
+    <DimensionField
+      axis="height"
+      computed={computedHeight}
+      disabled={disabled}
+      node={node}
+      onCommit={onCommit}
+      onDraftChange={onDraftChange}
+      onNodeChange={onNodeChange}
+      parentAlignItems={parentAlignItems}
+      parentDirection={parentDirection}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx
new file mode 100644
index 000000000..fac30b5fc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx
@@ -0,0 +1,84 @@
+"use client";
+
+import type { Schema } from "effect";
+import { Schema as S } from "effect";
+
+import {
+  TextInput as BaseTextInput,
+  type TextInputProps as BaseTextInputProps,
+} from "@/features/studio/paywalls/designer/panel-kit/text-input";
+
+/**
+ * Props for the node-aware TextInput wrapper.
+ * Extends the base TextInput props but makes value/onChange work with node properties.
+ */
+export interface NodeTextInputProps<T extends Record<string, unknown>> {
+  /** The node object containing the property to edit */
+  node: T;
+  /** Callback when the node should be updated */
+  onNodeChange: (node: T) => void;
+  /** The property key on the node to read/write */
+  property: keyof T;
+  /** Transform the node property value to a string for display */
+  valueToString?: (value: T[keyof T]) => string;
+  /** Transform the string input back to the node property type */
+  stringToValue?: (value: string) => T[keyof T];
+  /** Input type */
+  type?: "text" | "number";
+  /** Step increment for number type */
+  typeNumberStepIncrement?: number;
+  /** Icon to display */
+  icon?: React.ReactNode;
+  /** Accessible label */
+  label: string;
+  /** Validation schema */
+  validator?: Schema.Decoder<string>;
+  /** Additional class names */
+  className?: string;
+}
+
+/**
+ * Node-aware TextInput wrapper.
+ * Provides convenient props for working with node objects in the designer panels.
+ */
+export function NodeTextInput<T extends Record<string, unknown>>({
+  node,
+  onNodeChange,
+  property,
+  valueToString = (v) => String(v),
+  stringToValue = (v) => v as T[keyof T],
+  type = "text",
+  typeNumberStepIncrement = 1,
+  icon,
+  label,
+  validator = S.String,
+  className,
+}: NodeTextInputProps<T>) {
+  const value = valueToString(node[property]);
+
+  const handleChange = (newValue: string) => {
+    onNodeChange({
+      ...node,
+      [property]: stringToValue(newValue),
+    });
+  };
+
+  return (
+    <BaseTextInput
+      className={className}
+      icon={icon}
+      label={label}
+      onChange={handleChange}
+      type={type}
+      typeNumberStepIncrement={typeNumberStepIncrement}
+      validator={validator}
+      value={value}
+    />
+  );
+}
+
+/**
+ * Re-export the base TextInput for direct usage when node logic is not needed.
+ */
+export { BaseTextInput as TextInput };
+export type { BaseTextInputProps as TextInputProps };
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx
new file mode 100644
index 000000000..55635b2c1
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx
@@ -0,0 +1,50 @@
+import type { AlignItems, FlexDirection } from "@voidhash/mimic-schema";
+
+import { DimensionField } from "@/features/studio/paywalls/designer/panel-kit/dimension-field";
+
+import type { NodeEditorProps } from "../../types";
+
+type WidthInputProps = NodeEditorProps<
+  "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
+> & {
+  disabled?: boolean;
+  parentDirection: FlexDirection;
+  parentAlignItems?: AlignItems;
+  computedWidth?: number | null;
+  onDraftChange?: (
+    node: NodeEditorProps<
+      "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
+    >["node"],
+  ) => void;
+  onCommit?: () => void;
+};
+
+/**
+ * Width-axis specialization of {@link DimensionField}. Kept as a thin wrapper so
+ * the flex-layout and shape-layout sections keep their existing call sites
+ * (`computedWidth` prop name) while the shared logic lives in the kit.
+ */
+export function WidthInput({
+  node,
+  onNodeChange,
+  disabled = false,
+  parentDirection,
+  parentAlignItems,
+  computedWidth,
+  onDraftChange,
+  onCommit,
+}: WidthInputProps) {
+  return (
+    <DimensionField
+      axis="width"
+      computed={computedWidth}
+      disabled={disabled}
+      node={node}
+      onCommit={onCommit}
+      onDraftChange={onDraftChange}
+      onNodeChange={onNodeChange}
+      parentAlignItems={parentAlignItems}
+      parentDirection={parentDirection}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-host-services-host.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-host-services-host.tsx
new file mode 100644
index 000000000..3dd983bf7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-host-services-host.tsx
@@ -0,0 +1,220 @@
+"use client";
+
+/**
+ * The concrete {@link PanelHostServices} implementation the built-in panel host
+ * installs. It owns the portalled host chrome (the State Manager sheet, a confirm
+ * AlertDialog) in the MAIN React tree — not inside the panel reconciler — and
+ * hands a stable services object to the reconciler subtree via
+ * {@link PanelHostServicesProvider}, wired through the built-in host's `wrap`.
+ *
+ * Sheets/dialogs portal to `document.body`, so they render correctly even though
+ * the definitions that trigger them live in a separate reconciler root; only the
+ * imperative triggers (`openStateManager`, `confirmComponentUpdate`, `toastError`)
+ * cross the boundary — never React elements.
+ */
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+} from "@voidhash/ui";
+import { useCallback, useMemo, useRef, useState } from "react";
+import type { ReactNode } from "react";
+import { toast } from "sonner";
+import type {
+  PathSnapshotNode,
+  ScreenSnapshotNode,
+  ShapeSnapshotNode,
+  SnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand/react";
+
+import { StateManagerSheet } from "@/features/studio/paywalls/designer/components/state-manager";
+import type {
+  CRDTState,
+  CRDTVariable,
+} from "@/features/studio/paywalls/designer/components/state-manager/types";
+import {
+  addNodeState,
+  removeNodeState,
+  updateNodeState,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import { collectAncestorVariables } from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
+import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
+import { getNodeById } from "@/features/studio/paywalls/designer/state/utils/nodes";
+import type { DnfInput } from "@/features/studio/paywalls/designer/state/utils/replay";
+
+import type {
+  ComponentUpdatePlan,
+  PanelHostServices,
+} from "../../panel-runtime/panel-host-services";
+
+/** A node type that carries `states` (the state-override capable node types). */
+type NodeWithStates =
+  | ViewSnapshotNode
+  | ScreenSnapshotNode
+  | TextSnapshotNode
+  | ShapeSnapshotNode
+  | PathSnapshotNode;
+
+/** True when the node is one of the state-override capable node types. */
+function isNodeWithStates(node: SnapshotNode): node is NodeWithStates {
+  return (
+    node.type === "view" ||
+    node.type === "screen" ||
+    node.type === "text" ||
+    node.type === "shape" ||
+    node.type === "path"
+  );
+}
+
+/**
+ * Renders the host chrome and provides a stable {@link PanelHostServices} object
+ * to `children` (which the built-in host threads into the reconciler via its
+ * `wrap`). The State Manager sheet's data is derived from the store for whatever
+ * node id is currently open, mirroring the states section's own derivation.
+ */
+export function PanelHostServicesHost({
+  children,
+}: {
+  children: (services: PanelHostServices) => ReactNode;
+}) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const documentRoot = useStore(store, selectDocumentRoot);
+
+  // ── State Manager sheet ────────────────────────────────────────────────────
+  const [stateManagerNodeId, setStateManagerNodeId] = useState<string | null>(null);
+  const rawSheetNode = stateManagerNodeId
+    ? getNodeById(store.getState(), stateManagerNodeId)
+    : null;
+  const sheetNode = rawSheetNode && isNodeWithStates(rawSheetNode) ? rawSheetNode : null;
+
+  const sheetStates: readonly CRDTState[] = sheetNode
+    ? sheetNode.data.states.flatMap((entry) =>
+        entry.value === undefined ? [] : [{ id: entry.id, value: entry.value }],
+      )
+    : [];
+
+  const sheetVariables: readonly CRDTVariable[] = sheetNode
+    ? collectAncestorVariables(documentRoot, sheetNode.id).map((variable) => ({
+        id: variable.id,
+        ownerLabel: variable.ownerNodeId === sheetNode.id ? undefined : variable.ownerName,
+        value: { name: variable.name, value: variable.value },
+      }))
+    : [];
+
+  // ── Confirm dialog ──────────────────────────────────────────────────────────
+  const [confirmPlan, setConfirmPlan] = useState<ComponentUpdatePlan | null>(null);
+  const confirmResolveRef = useRef<((confirmed: boolean) => void) | null>(null);
+
+  const resolveConfirm = useCallback((confirmed: boolean) => {
+    confirmResolveRef.current?.(confirmed);
+    confirmResolveRef.current = null;
+    setConfirmPlan(null);
+  }, []);
+
+  // ── Services object (stable identity) ──────────────────────────────────────
+  const services = useMemo<PanelHostServices>(
+    () => ({
+      openStateManager(nodeId: string) {
+        setStateManagerNodeId(nodeId);
+      },
+      confirmComponentUpdate(plan: ComponentUpdatePlan) {
+        return new Promise<boolean>((resolve) => {
+          confirmResolveRef.current = resolve;
+          setConfirmPlan(plan);
+        });
+      },
+      toastError(message: string) {
+        toast.error(message);
+      },
+    }),
+    [],
+  );
+
+  return (
+    <>
+      {children(services)}
+
+      <StateManagerSheet
+        onAddState={(name: string, condition: DnfInput) => {
+          if (sheetNode) {
+            dispatch(addNodeState)({
+              condition,
+              name,
+              nodeId: sheetNode.id,
+              nodeType: sheetNode.type,
+            });
+          }
+        }}
+        onOpenChange={(open) => {
+          if (!open) setStateManagerNodeId(null);
+        }}
+        onRemoveState={(stateId: string) => {
+          if (sheetNode) {
+            dispatch(removeNodeState)({ nodeId: sheetNode.id, nodeType: sheetNode.type, stateId });
+          }
+        }}
+        onUpdateStateCondition={(stateId: string, newCondition: DnfInput) => {
+          if (sheetNode) {
+            dispatch(updateNodeState)({
+              newCondition,
+              nodeId: sheetNode.id,
+              nodeType: sheetNode.type,
+              stateId,
+            });
+          }
+        }}
+        onUpdateStateName={(stateId: string, newName: string) => {
+          if (sheetNode) {
+            dispatch(updateNodeState)({
+              newName,
+              nodeId: sheetNode.id,
+              nodeType: sheetNode.type,
+              stateId,
+            });
+          }
+        }}
+        open={stateManagerNodeId !== null}
+        states={sheetStates}
+        variables={sheetVariables}
+      />
+
+      <AlertDialog onOpenChange={(open) => !open && resolveConfirm(false)} open={confirmPlan !== null}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>{confirmPlan?.title ?? ""}</AlertDialogTitle>
+            {confirmPlan?.details && confirmPlan.details.length > 0 && (
+              <AlertDialogDescription asChild>
+                <div className="space-y-2">
+                  {confirmPlan.details.map((line) => (
+                    <p className="text-sm" key={line}>
+                      {line}
+                    </p>
+                  ))}
+                </div>
+              </AlertDialogDescription>
+            )}
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel onClick={() => resolveConfirm(false)}>Cancel</AlertDialogCancel>
+            <AlertDialogAction onClick={() => resolveConfirm(true)}>
+              {confirmPlan?.confirmLabel ?? "Update"}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts
new file mode 100644
index 000000000..7a2c8c81d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts
@@ -0,0 +1,41 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { MIGRATED, PANEL_REGISTRY } from "./panel-registry";
+
+/**
+ * Phase 2 completeness lock: every built-in section is migrated. After the final
+ * batch (componentSettings + componentActions), the ONLY non-`builtin` entry is
+ * `componentProps` (the Phase 3 component-panel slot); every other entry (all 14
+ * built-in sections) is a `builtin` with a filled `definition` AND is present in
+ * `MIGRATED`.
+ */
+describe("panel-registry — Phase 2 completeness", () => {
+  test("every entry except componentProps is a builtin with a definition and is MIGRATED", () => {
+    for (const entry of PANEL_REGISTRY) {
+      if (entry.id === "componentProps") continue;
+      expect(entry.source.kind).toBe("builtin");
+      // `definition` only exists on the builtin variant — narrow before reading.
+      expect(entry.source.kind === "builtin" && entry.source.definition !== undefined).toBe(true);
+      expect(MIGRATED.has(entry.id)).toBe(true);
+    }
+  });
+
+  test("componentProps is the component-panel slot (not migrated, multi-selectable)", () => {
+    const componentProps = PANEL_REGISTRY.find((entry) => entry.id === "componentProps");
+    expect(componentProps).toBeDefined();
+    expect(componentProps!.source.kind).toBe("component-panel");
+    expect(MIGRATED.has("componentProps")).toBe(false);
+    // Phase 3b: the slot batch-edits a homogeneous component multi-selection.
+    expect(componentProps!.multiSelectable).toBe(true);
+  });
+
+  test("MIGRATED contains exactly the built-in section ids (all but componentProps)", () => {
+    const builtinIds = PANEL_REGISTRY.filter((entry) => entry.id !== "componentProps").map(
+      (entry) => entry.id,
+    );
+    // Every built-in section is migrated, and MIGRATED holds nothing else.
+    expect(MIGRATED.size).toBe(builtinIds.length);
+    expect(builtinIds.every((id) => MIGRATED.has(id))).toBe(true);
+    expect([...MIGRATED].every((id) => builtinIds.includes(id))).toBe(true);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts
new file mode 100644
index 000000000..d2a66b24b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts
@@ -0,0 +1,223 @@
+import type { PanelRender, PanelWrap } from "../../panel-runtime/in-process-transport";
+import type { EditableNodeType, SectionId } from "../types";
+import { BorderPanel } from "./definitions/border-panel";
+import { BorderRadiusPanel } from "./definitions/border-radius-panel";
+import { ComponentActionsPanel } from "./definitions/component-actions-panel";
+import { ComponentSettingsPanel } from "./definitions/component-settings-panel";
+import { FillPanel } from "./definitions/fill-panel";
+import { FlexLayoutPanel } from "./definitions/flex-layout-panel";
+import { PathFillPanel } from "./definitions/path-fill-panel";
+import { PathStrokePanel } from "./definitions/path-stroke-panel";
+import { PositionPanel } from "./definitions/position-panel";
+import { InteractionsPanel } from "./definitions/interactions-panel";
+import { ScrollViewSettingsPanel } from "./definitions/scroll-view-settings-panel";
+import { ShapeLayoutPanel } from "./definitions/shape-layout-panel";
+import { StatesPanel } from "./definitions/states-panel";
+import { TextFillPanel } from "./definitions/text-fill-panel";
+import { TypographyPanel } from "./definitions/typography-panel";
+import { VariablesPanel } from "./definitions/variables-panel";
+
+/**
+ * The engine + payload that backs one registered panel. A `builtin` panel runs a
+ * trusted definition in-process; its `definition` is OPTIONAL now (Phase 2 fills
+ * one per migrated section — until then the entry falls back to the old section
+ * component). A `component-panel` panel is authored as a code component and runs
+ * in the Phase 3 sandbox.
+ */
+export type PanelSourceSpec =
+  | {
+      readonly kind: "builtin";
+      /** The panel definition `(ctx) => ReactNode` (filled per section in Phase 2). */
+      readonly definition?: PanelRender;
+      /** Optional provider re-wrap inside the reconciler root (rarely per-section). */
+      readonly wrap?: PanelWrap;
+    }
+  | { readonly kind: "component-panel" };
+
+/**
+ * A registered right-panel entry. Mirrors {@link SectionRegistryEntry} 1:1
+ * (id/supportedNodeTypes/order/multiSelectable — same applicability semantics)
+ * and adds the {@link PanelSourceSpec} that decides how the panel is rendered
+ * behind the v2 flag. When the flag is off, {@link ../dynamic-panel.DynamicPanel}
+ * renders the legacy section instead and this registry is unused.
+ */
+export interface PanelRegistryEntry {
+  readonly id: SectionId;
+  readonly supportedNodeTypes: EditableNodeType[];
+  readonly order: number;
+  readonly multiSelectable: boolean;
+  readonly source: PanelSourceSpec;
+}
+
+/**
+ * The right-panel registry. Entries are copied VERBATIM from
+ * `section-registry.ts` (ids/order/supportedNodeTypes/multiSelectable) so
+ * applicability is byte-identical; only the `source` field is new. Every entry
+ * is `builtin` (with an as-yet-empty `definition`) except `componentProps`,
+ * which is a `component-panel` (its editor is authored as a code component).
+ */
+export const PANEL_REGISTRY: PanelRegistryEntry[] = [
+  {
+    id: "variables",
+    supportedNodeTypes: ["screen", "view", "scrollView", "text", "shape", "path"],
+    order: 0,
+    multiSelectable: false,
+    source: { kind: "builtin", definition: VariablesPanel },
+  },
+  {
+    id: "states",
+    supportedNodeTypes: ["screen", "view", "scrollView", "text", "shape", "path"],
+    order: 1,
+    multiSelectable: false,
+    source: { kind: "builtin", definition: StatesPanel },
+  },
+  {
+    id: "scrollViewSettings",
+    supportedNodeTypes: ["scrollView"],
+    order: 2,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: ScrollViewSettingsPanel },
+  },
+  {
+    id: "position",
+    supportedNodeTypes: ["view", "scrollView", "text"],
+    order: 2,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: PositionPanel },
+  },
+  {
+    id: "flexLayout",
+    supportedNodeTypes: ["screen", "view", "scrollView"],
+    order: 3,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: FlexLayoutPanel },
+  },
+  {
+    id: "shapeLayout",
+    supportedNodeTypes: ["shape"],
+    order: 3,
+    multiSelectable: false,
+    source: { kind: "builtin", definition: ShapeLayoutPanel },
+  },
+  {
+    id: "borderRadius",
+    supportedNodeTypes: ["view", "scrollView"],
+    order: 4,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: BorderRadiusPanel },
+  },
+  {
+    id: "fill",
+    supportedNodeTypes: ["screen", "view", "scrollView"],
+    order: 5,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: FillPanel },
+  },
+  {
+    id: "border",
+    supportedNodeTypes: ["view", "scrollView"],
+    order: 6,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: BorderPanel },
+  },
+  {
+    id: "interactions",
+    supportedNodeTypes: ["view", "scrollView"],
+    order: 7,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: InteractionsPanel },
+  },
+  {
+    id: "typography",
+    supportedNodeTypes: ["text"],
+    order: 8,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: TypographyPanel },
+  },
+  {
+    id: "textFill",
+    supportedNodeTypes: ["text"],
+    order: 9,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: TextFillPanel },
+  },
+  {
+    id: "pathFill",
+    supportedNodeTypes: ["path"],
+    order: 10,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: PathFillPanel },
+  },
+  {
+    id: "pathStroke",
+    supportedNodeTypes: ["path"],
+    order: 11,
+    multiSelectable: true,
+    source: { kind: "builtin", definition: PathStrokePanel },
+  },
+  {
+    id: "componentSettings",
+    supportedNodeTypes: ["component"],
+    order: 12,
+    multiSelectable: false,
+    source: { kind: "builtin", definition: ComponentSettingsPanel },
+  },
+  {
+    id: "componentProps",
+    supportedNodeTypes: ["component"],
+    order: 13,
+    // Phase 3b: the component-panel slot batch-edits a homogeneous multi-selection
+    // of the same component (same identity key), so it participates in multi-select.
+    multiSelectable: true,
+    source: { kind: "component-panel" },
+  },
+  {
+    id: "componentActions",
+    supportedNodeTypes: ["component"],
+    order: 14,
+    multiSelectable: false,
+    source: { kind: "builtin", definition: ComponentActionsPanel },
+  },
+];
+
+/**
+ * The set of sections whose built-in `definition` is ready to render through the
+ * v2 host. Phase 2 is COMPLETE: this holds every built-in section (all but
+ * `componentProps`, the Phase 3 component-panel slot). When the flag is on, the
+ * stack renders each through {@link ../builtin-panel-host.BuiltinPanelHost}
+ * instead of the legacy section.
+ */
+export const MIGRATED: ReadonlySet<SectionId> = new Set<SectionId>([
+  "borderRadius",
+  "border",
+  "typography",
+  "pathFill",
+  "pathStroke",
+  "textFill",
+  "position",
+  "flexLayout",
+  "shapeLayout",
+  "fill",
+  "states",
+  "variables",
+  "interactions",
+  "scrollViewSettings",
+  "componentSettings",
+  "componentActions",
+]);
+
+/**
+ * Returns the registered panels applicable to the given node types, mirroring
+ * `getSharedSections` exactly: a panel is included only when ALL node types are
+ * in its `supportedNodeTypes` ("every", not "any"); when `isMulti`, panels with
+ * `multiSelectable: false` are excluded. Results are sorted by `order`.
+ */
+export function getSharedPanels(
+  nodeTypes: EditableNodeType[],
+  isMulti: boolean,
+): PanelRegistryEntry[] {
+  return PANEL_REGISTRY.filter((entry) => {
+    if (isMulti && !entry.multiSelectable) return false;
+    return nodeTypes.every((t) => entry.supportedNodeTypes.includes(t));
+  }).sort((a, b) => a.order - b.order);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx
new file mode 100644
index 000000000..3dd66e2d3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx
@@ -0,0 +1,116 @@
+"use client";
+
+/**
+ * The flag gate between the legacy right panel ({@link DynamicPanel}) and the v2
+ * host-rendered panel stack. The flag lives at
+ * `localStorage["voidhash.designer.panelsV2"]` (`off` | `on` | `both`), with a
+ * `?panelsV2=` URL query overriding it (read once per mount). DEFAULT is `off`,
+ * so production is byte-identical to before this phase.
+ *
+ * - `off`  → render {@link DynamicPanel} EXACTLY (the default path).
+ * - `on`   → the v2 stack: the component warnings block, then per applicable
+ *            panel, a {@link BuiltinPanelHost} when the panel is MIGRATED and has
+ *            a built-in `definition`, else the legacy {@link Section} (reused
+ *            verbatim so unmigrated sections render identically).
+ * - `both` → the legacy panel and the v2 stack, stacked, for visual diffing.
+ */
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { isEditableNodeType } from "../../state/actions";
+import type { EditableNodeType } from "../../state/actions";
+import { BuiltinPanelHost } from "./builtin-panel-host";
+import { ComponentPanelHost } from "./component-panel-host";
+import { DynamicPanel, Section } from "./dynamic-panel";
+import { getSharedPanels, MIGRATED } from "./panel-registry";
+import { ComponentWarningsBlock } from "./sections/component-warnings";
+
+type PanelsV2Flag = "off" | "on" | "both";
+
+/**
+ * Reads the v2 flag: the `?panelsV2=` URL query wins, else
+ * `localStorage["voidhash.designer.panelsV2"]`, else `off`. Read once per mount
+ * (a stale value until reload is fine — this is a developer flag).
+ */
+function readPanelsV2Flag(): PanelsV2Flag {
+  const normalize = (value: string | null | undefined): PanelsV2Flag | null =>
+    value === "on" || value === "off" || value === "both" ? value : null;
+  if (typeof window === "undefined") return "off";
+  try {
+    const fromUrl = normalize(new URLSearchParams(window.location.search).get("panelsV2"));
+    if (fromUrl) return fromUrl;
+    return normalize(window.localStorage.getItem("voidhash.designer.panelsV2")) ?? "off";
+  } catch {
+    return "off";
+  }
+}
+
+/**
+ * The v2 stack body: the component warnings block (same single-component rule as
+ * the legacy panel), then each applicable panel rendered through the v2 host when
+ * migrated, or the legacy section otherwise.
+ */
+function PanelStackV2({ nodes }: { nodes: SnapshotNode[] }) {
+  const nodeTypes = [
+    ...new Set(
+      nodes.map((n) => n.type).filter((t): t is EditableNodeType => isEditableNodeType(t)),
+    ),
+  ];
+  if (nodeTypes.length === 0) return null;
+
+  const isMulti = nodes.length > 1;
+  const panels = getSharedPanels(nodeTypes, isMulti);
+  const singleComponentNode = !isMulti && nodes[0]?.type === "component" ? nodes[0] : null;
+  const nodeIds = nodes.map((node) => node.id);
+
+  return (
+    <>
+      {singleComponentNode && <ComponentWarningsBlock nodeId={singleComponentNode.id} />}
+      {panels.map((panel) => {
+        if (
+          panel.source.kind === "builtin" &&
+          panel.source.definition &&
+          MIGRATED.has(panel.id)
+        ) {
+          return (
+            <BuiltinPanelHost
+              definition={panel.source.definition}
+              key={panel.id}
+              sectionId={panel.id}
+              selection={{ nodeIds }}
+            />
+          );
+        }
+        // The component-panel slot (Phase 3b): host-rendered default panel or a
+        // sandboxed custom session, batch-editing the selected component nodes.
+        if (panel.source.kind === "component-panel") {
+          return <ComponentPanelHost key={panel.id} nodes={nodes} />;
+        }
+        // Any remaining unmigrated section renders through the reused per-section
+        // switch so the fallback is byte-identical to the flag-off panel.
+        return <Section key={panel.id} nodes={nodes} sectionId={panel.id} />;
+      })}
+    </>
+  );
+}
+
+/**
+ * The right-panel content, gated by the v2 flag. With the flag off (default) it
+ * renders {@link DynamicPanel} exactly — zero behavior change in production.
+ */
+export function PanelStack({ nodes }: { nodes: SnapshotNode[] }) {
+  if (nodes.length === 0) return null;
+  const flag = readPanelsV2Flag();
+
+  if (flag === "off") {
+    return <DynamicPanel nodes={nodes} />;
+  }
+  if (flag === "both") {
+    return (
+      <>
+        <DynamicPanel nodes={nodes} />
+        <PanelStackV2 nodes={nodes} />
+      </>
+    );
+  }
+  return <PanelStackV2 nodes={nodes} />;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts
new file mode 100644
index 000000000..ff1739b40
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts
@@ -0,0 +1,127 @@
+import type { EditableNodeType, SectionRegistryEntry } from "../types";
+
+const SECTION_REGISTRY: SectionRegistryEntry[] = [
+  {
+    id: "variables",
+    supportedNodeTypes: ["screen", "view", "scrollView", "text", "shape", "path"],
+    order: 0,
+    multiSelectable: false,
+  },
+  {
+    id: "states",
+    supportedNodeTypes: ["screen", "view", "scrollView", "text", "shape", "path"],
+    order: 1,
+    multiSelectable: false,
+  },
+  {
+    id: "scrollViewSettings",
+    supportedNodeTypes: ["scrollView"],
+    order: 2,
+    multiSelectable: true,
+  },
+  {
+    id: "position",
+    supportedNodeTypes: ["view", "scrollView", "text"],
+    order: 2,
+    multiSelectable: true,
+  },
+  {
+    id: "flexLayout",
+    supportedNodeTypes: ["screen", "view", "scrollView"],
+    order: 3,
+    multiSelectable: true,
+  },
+  {
+    id: "shapeLayout",
+    supportedNodeTypes: ["shape"],
+    order: 3,
+    multiSelectable: false,
+  },
+  {
+    id: "borderRadius",
+    supportedNodeTypes: ["view", "scrollView"],
+    order: 4,
+    multiSelectable: true,
+  },
+  {
+    id: "fill",
+    supportedNodeTypes: ["screen", "view", "scrollView"],
+    order: 5,
+    multiSelectable: true,
+  },
+  {
+    id: "border",
+    supportedNodeTypes: ["view", "scrollView"],
+    order: 6,
+    multiSelectable: true,
+  },
+  {
+    id: "interactions",
+    supportedNodeTypes: ["view", "scrollView"],
+    order: 7,
+    multiSelectable: true,
+  },
+  {
+    id: "content",
+    supportedNodeTypes: ["text"],
+    order: 8,
+    multiSelectable: false,
+  },
+  {
+    id: "typography",
+    supportedNodeTypes: ["text"],
+    order: 8,
+    multiSelectable: true,
+  },
+  {
+    id: "textFill",
+    supportedNodeTypes: ["text"],
+    order: 9,
+    multiSelectable: true,
+  },
+  {
+    id: "pathFill",
+    supportedNodeTypes: ["path"],
+    order: 10,
+    multiSelectable: true,
+  },
+  {
+    id: "pathStroke",
+    supportedNodeTypes: ["path"],
+    order: 11,
+    multiSelectable: true,
+  },
+  {
+    id: "componentSettings",
+    supportedNodeTypes: ["component"],
+    order: 12,
+    multiSelectable: false,
+  },
+  {
+    id: "componentProps",
+    supportedNodeTypes: ["component"],
+    order: 13,
+    multiSelectable: false,
+  },
+  {
+    id: "componentActions",
+    supportedNodeTypes: ["component"],
+    order: 14,
+    multiSelectable: false,
+  },
+];
+
+/**
+ * Returns sections applicable to the given set of node types.
+ * A section is included only if ALL node types are in its supportedNodeTypes.
+ * When isMulti is true, sections with multiSelectable=false are excluded.
+ */
+export function getSharedSections(
+  nodeTypes: EditableNodeType[],
+  isMulti: boolean,
+): SectionRegistryEntry[] {
+  return SECTION_REGISTRY.filter((entry) => {
+    if (isMulti && !entry.multiSelectable) return false;
+    return nodeTypes.every((t) => entry.supportedNodeTypes.includes(t));
+  }).sort((a, b) => a.order - b.order);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx
new file mode 100644
index 000000000..564b1242f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx
@@ -0,0 +1 @@
+export * from "@/features/studio/paywalls/designer/panel-kit/action-editor";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx
new file mode 100644
index 000000000..8c461aecd
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx
@@ -0,0 +1,325 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { Schema } from "effect";
+import { FullscreenIcon, ScanIcon, SquareRoundCorner, VaultIcon } from "lucide-react";
+import { useCallback, useState } from "react";
+
+import { Button } from "@voidhash/ui";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { updateBorderRadiusStyle } from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { OverrideResetAffordance } from "../components/override-reset-affordance";
+import { TextInput } from "../inputs/text-input";
+import { useStyleTargets } from "../utils/get-style-targets";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+
+type BorderRadiusNode = {
+  borderTopLeftRadius: number;
+  borderTopRightRadius: number;
+  borderBottomRightRadius: number;
+  borderBottomLeftRadius: number;
+};
+
+function shouldShowIndividualBorderRadius(node: BorderRadiusNode) {
+  return (
+    node.borderTopLeftRadius !== node.borderTopRightRadius ||
+    node.borderTopLeftRadius !== node.borderBottomRightRadius ||
+    node.borderTopLeftRadius !== node.borderBottomLeftRadius ||
+    node.borderTopRightRadius !== node.borderBottomRightRadius ||
+    node.borderTopRightRadius !== node.borderBottomLeftRadius ||
+    node.borderBottomRightRadius !== node.borderBottomLeftRadius
+  );
+}
+
+export function BorderRadiusSection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets, mixedKeys } = useStyleTargets(nodes);
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit } = useDesignerDraft(store);
+  const borderRadiusAllKeys = [
+    "borderTopLeftRadius",
+    "borderTopRightRadius",
+    "borderBottomRightRadius",
+    "borderBottomLeftRadius",
+  ] as const;
+  const borderTopLeftRadiusKeys = ["borderTopLeftRadius"] as const;
+  const borderTopRightRadiusKeys = ["borderTopRightRadius"] as const;
+  const borderBottomLeftRadiusKeys = ["borderBottomLeftRadius"] as const;
+  const borderBottomRightRadiusKeys = ["borderBottomRightRadius"] as const;
+
+  const [showIndividualBorderRadius, setShowIndividualBorderRadius] = useState(() => {
+    if (!style) return false;
+    if (
+      mixedKeys.has("borderTopLeftRadius") ||
+      mixedKeys.has("borderTopRightRadius") ||
+      mixedKeys.has("borderBottomRightRadius") ||
+      mixedKeys.has("borderBottomLeftRadius")
+    ) {
+      return true;
+    }
+    return shouldShowIndividualBorderRadius(style as BorderRadiusNode);
+  });
+
+  const node = style as BorderRadiusNode | null;
+  const showBorderRadiusAllReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderRadiusAllKeys);
+  const showBorderRadiusTopLeftReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderTopLeftRadiusKeys);
+  const showBorderRadiusTopRightReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderTopRightRadiusKeys);
+  const showBorderRadiusBottomLeftReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderBottomLeftRadiusKeys);
+  const showBorderRadiusBottomRightReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderBottomRightRadiusKeys);
+
+  const handleChange = useCallback(
+    (incoming: Partial<BorderRadiusNode>) => {
+      dispatch(updateBorderRadiusStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<BorderRadiusNode>) => {
+      if (!draft) begin();
+      dispatch(updateBorderRadiusStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  const expandBorderRadius = () => {
+    setShowIndividualBorderRadius(true);
+  };
+
+  const collapseBorderRadius = () => {
+    if (!node) return;
+    setShowIndividualBorderRadius(false);
+    const allCornersValue = node.borderTopLeftRadius;
+    handleChange({
+      borderTopLeftRadius: allCornersValue,
+      borderTopRightRadius: allCornersValue,
+      borderBottomRightRadius: allCornersValue,
+      borderBottomLeftRadius: allCornersValue,
+    });
+  };
+
+  if (!node) return null;
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Border Radius</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <PanelSubSection>
+          <PanelSubSectionContent>
+            <div className="flex flex-row gap-2">
+              {!showIndividualBorderRadius && (
+                <OverrideResetAffordance
+                  className="flex-1"
+                  label="border radius"
+                  onReset={() =>
+                    handleChange(
+                      overrideReset.buildResetPatch(
+                        borderRadiusAllKeys,
+                      ) as Partial<BorderRadiusNode>,
+                    )
+                  }
+                  show={showBorderRadiusAllReset}
+                >
+                  <TextInput
+                    icon={<ScanIcon className="size-3.5" />}
+                    label="Radius"
+                    mixed={
+                      mixedKeys.has("borderTopLeftRadius") ||
+                      mixedKeys.has("borderTopRightRadius") ||
+                      mixedKeys.has("borderBottomRightRadius") ||
+                      mixedKeys.has("borderBottomLeftRadius")
+                    }
+                    minValue={0}
+                    maxValue={100}
+                    onChange={(value) => {
+                      const numValue = Number(value);
+                      handleDraftChange({
+                        borderTopLeftRadius: numValue,
+                        borderTopRightRadius: numValue,
+                        borderBottomRightRadius: numValue,
+                        borderBottomLeftRadius: numValue,
+                      });
+                    }}
+                    onCommit={handleCommit}
+                    type="number"
+                    typeNumberStepIncrement={1}
+                    validator={Schema.String}
+                    value={node.borderTopLeftRadius.toString()}
+                  />
+                </OverrideResetAffordance>
+              )}
+
+              {showIndividualBorderRadius && (
+                <div className="flex flex-col gap-2">
+                  <div className="flex flex-row gap-2">
+                    <OverrideResetAffordance
+                      className="flex-1"
+                      label="top left border radius"
+                      onReset={() =>
+                        handleChange(
+                          overrideReset.buildResetPatch(
+                            borderTopLeftRadiusKeys,
+                          ) as Partial<BorderRadiusNode>,
+                        )
+                      }
+                      show={showBorderRadiusTopLeftReset}
+                    >
+                      <TextInput
+                        icon={<SquareRoundCorner className="-scale-x-100 size-3.5" />}
+                        label="Top Left"
+                        mixed={mixedKeys.has("borderTopLeftRadius")}
+                        minValue={0}
+                        maxValue={100}
+                        onChange={(value) =>
+                          handleDraftChange({
+                            borderTopLeftRadius: Number(value),
+                          })
+                        }
+                        onCommit={handleCommit}
+                        type="number"
+                        typeNumberStepIncrement={1}
+                        validator={Schema.String}
+                        value={node.borderTopLeftRadius.toString()}
+                      />
+                    </OverrideResetAffordance>
+                    <OverrideResetAffordance
+                      className="flex-1"
+                      label="top right border radius"
+                      onReset={() =>
+                        handleChange(
+                          overrideReset.buildResetPatch(
+                            borderTopRightRadiusKeys,
+                          ) as Partial<BorderRadiusNode>,
+                        )
+                      }
+                      show={showBorderRadiusTopRightReset}
+                    >
+                      <TextInput
+                        icon={<SquareRoundCorner className="size-3.5" />}
+                        label="Top Right"
+                        mixed={mixedKeys.has("borderTopRightRadius")}
+                        minValue={0}
+                        maxValue={100}
+                        onChange={(value) =>
+                          handleDraftChange({
+                            borderTopRightRadius: Number(value),
+                          })
+                        }
+                        onCommit={handleCommit}
+                        type="number"
+                        typeNumberStepIncrement={1}
+                        validator={Schema.String}
+                        value={node.borderTopRightRadius.toString()}
+                      />
+                    </OverrideResetAffordance>
+                  </div>
+                  <div className="flex flex-row gap-2">
+                    <OverrideResetAffordance
+                      className="flex-1"
+                      label="bottom left border radius"
+                      onReset={() =>
+                        handleChange(
+                          overrideReset.buildResetPatch(
+                            borderBottomLeftRadiusKeys,
+                          ) as Partial<BorderRadiusNode>,
+                        )
+                      }
+                      show={showBorderRadiusBottomLeftReset}
+                    >
+                      <TextInput
+                        icon={<SquareRoundCorner className="rotate-180 size-3.5" />}
+                        label="Bottom Left"
+                        mixed={mixedKeys.has("borderBottomLeftRadius")}
+                        minValue={0}
+                        maxValue={100}
+                        onChange={(value) =>
+                          handleDraftChange({
+                            borderBottomLeftRadius: Number(value),
+                          })
+                        }
+                        onCommit={handleCommit}
+                        type="number"
+                        typeNumberStepIncrement={1}
+                        validator={Schema.String}
+                        value={node.borderBottomLeftRadius.toString()}
+                      />
+                    </OverrideResetAffordance>
+                    <OverrideResetAffordance
+                      className="flex-1"
+                      label="bottom right border radius"
+                      onReset={() =>
+                        handleChange(
+                          overrideReset.buildResetPatch(
+                            borderBottomRightRadiusKeys,
+                          ) as Partial<BorderRadiusNode>,
+                        )
+                      }
+                      show={showBorderRadiusBottomRightReset}
+                    >
+                      <TextInput
+                        icon={<SquareRoundCorner className="rotate-180 -scale-x-100  size-3.5" />}
+                        label="Bottom Right"
+                        mixed={mixedKeys.has("borderBottomRightRadius")}
+                        minValue={0}
+                        maxValue={100}
+                        onChange={(value) =>
+                          handleDraftChange({
+                            borderBottomRightRadius: Number(value),
+                          })
+                        }
+                        onCommit={handleCommit}
+                        type="number"
+                        typeNumberStepIncrement={1}
+                        validator={Schema.String}
+                        value={node.borderBottomRightRadius.toString()}
+                      />
+                    </OverrideResetAffordance>
+                  </div>
+                </div>
+              )}
+
+              <Button
+                size="icon-sm"
+                variant="secondary"
+                onClick={() =>
+                  showIndividualBorderRadius ? collapseBorderRadius() : expandBorderRadius()
+                }
+              >
+                {showIndividualBorderRadius ? (
+                  <VaultIcon className="size-3.5" />
+                ) : (
+                  <FullscreenIcon className="size-3.5" />
+                )}
+              </Button>
+            </div>
+          </PanelSubSectionContent>
+        </PanelSubSection>
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx
new file mode 100644
index 000000000..a560464c4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx
@@ -0,0 +1,406 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { Schema } from "effect";
+import {
+  FullscreenIcon,
+  MinusIcon,
+  PlusIcon,
+  SquareDashedTopSolidIcon,
+  SquareIcon,
+  VaultIcon,
+} from "lucide-react";
+import { useCallback, useState } from "react";
+
+import { Button } from "@voidhash/ui";
+import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+  PanelSubSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { updateBorderStyle } from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { OverrideResetAffordance } from "../components/override-reset-affordance";
+import { TextInput } from "../inputs/text-input";
+import { useStyleTargets } from "../utils/get-style-targets";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+
+type BorderNode = {
+  borderTopWidth: number;
+  borderRightWidth: number;
+  borderBottomWidth: number;
+  borderLeftWidth: number;
+  borderColor: string;
+  borderStyle: string;
+  borderEnabled: boolean;
+};
+
+function shouldShowIndividualBorder(node: BorderNode) {
+  return (
+    node.borderTopWidth !== node.borderBottomWidth ||
+    node.borderTopWidth !== node.borderLeftWidth ||
+    node.borderTopWidth !== node.borderRightWidth ||
+    node.borderBottomWidth !== node.borderLeftWidth ||
+    node.borderBottomWidth !== node.borderRightWidth ||
+    node.borderLeftWidth !== node.borderRightWidth
+  );
+}
+
+export function BorderSection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets, mixedKeys } = useStyleTargets(nodes);
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit, discard } = useDesignerDraft(store);
+  const isBorderEnabledMixed = mixedKeys.has("borderEnabled");
+  const borderEnabledKeys = ["borderEnabled"] as const;
+  const borderWidthAllKeys = [
+    "borderTopWidth",
+    "borderRightWidth",
+    "borderBottomWidth",
+    "borderLeftWidth",
+  ] as const;
+  const borderLeftWidthKeys = ["borderLeftWidth"] as const;
+  const borderTopWidthKeys = ["borderTopWidth"] as const;
+  const borderRightWidthKeys = ["borderRightWidth"] as const;
+  const borderBottomWidthKeys = ["borderBottomWidth"] as const;
+  const borderColorKeys = ["borderColor"] as const;
+  const borderRelatedKeys = [
+    "borderEnabled",
+    "borderTopWidth",
+    "borderRightWidth",
+    "borderBottomWidth",
+    "borderLeftWidth",
+    "borderColor",
+  ] as const;
+
+  const [showIndividualBorder, setShowIndividualBorder] = useState(() => {
+    if (!style) return false;
+    return shouldShowIndividualBorder(style as BorderNode);
+  });
+
+  const node = style as BorderNode | null;
+  const showBorderEnabledReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderEnabledKeys);
+  const showBorderWidthAllReset =
+    !showBorderEnabledReset &&
+    overrideReset.isOverrideModeActive &&
+    overrideReset.hasOverride(borderWidthAllKeys);
+  const showBorderWidthLeftReset =
+    !showBorderEnabledReset &&
+    overrideReset.isOverrideModeActive &&
+    overrideReset.hasOverride(borderLeftWidthKeys);
+  const showBorderWidthTopReset =
+    !showBorderEnabledReset &&
+    overrideReset.isOverrideModeActive &&
+    overrideReset.hasOverride(borderTopWidthKeys);
+  const showBorderWidthRightReset =
+    !showBorderEnabledReset &&
+    overrideReset.isOverrideModeActive &&
+    overrideReset.hasOverride(borderRightWidthKeys);
+  const showBorderWidthBottomReset =
+    !showBorderEnabledReset &&
+    overrideReset.isOverrideModeActive &&
+    overrideReset.hasOverride(borderBottomWidthKeys);
+  const showBorderColorReset =
+    !showBorderEnabledReset &&
+    overrideReset.isOverrideModeActive &&
+    overrideReset.hasOverride(borderColorKeys);
+
+  const handleChange = useCallback(
+    (incoming: Partial<BorderNode>) => {
+      dispatch(updateBorderStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<BorderNode>) => {
+      if (!draft) begin();
+      dispatch(updateBorderStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  const expandBorder = () => {
+    setShowIndividualBorder(true);
+  };
+
+  const collapseBorder = () => {
+    if (!node) return;
+    setShowIndividualBorder(false);
+    const allSidesValue = node.borderTopWidth;
+    handleChange({
+      borderLeftWidth: allSidesValue,
+      borderRightWidth: allSidesValue,
+      borderTopWidth: allSidesValue,
+      borderBottomWidth: allSidesValue,
+    });
+  };
+
+  if (!node) return null;
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Border</PanelSectionTitle>
+        <PanelSectionHeaderActions>
+          {!node.borderEnabled && !isBorderEnabledMixed && (
+            <OverrideResetAffordance
+              label="border enabled"
+              onReset={() =>
+                handleChange(
+                  overrideReset.buildResetPatch(borderRelatedKeys) as Partial<BorderNode>,
+                )
+              }
+              show={showBorderEnabledReset}
+            >
+              <Button
+                onClick={() => handleChange({ borderEnabled: true })}
+                size="icon-sm"
+                variant="secondary"
+              >
+                <PlusIcon />
+              </Button>
+            </OverrideResetAffordance>
+          )}
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      {(node.borderEnabled || isBorderEnabledMixed) && (
+        <PanelSectionContent>
+          <PanelSubSection>
+            <PanelSubSectionTitle>Width</PanelSubSectionTitle>
+            <PanelSubSectionContent>
+              <OverrideResetAffordance
+                label="border enabled"
+                onReset={() =>
+                  handleChange(
+                    overrideReset.buildResetPatch(borderRelatedKeys) as Partial<BorderNode>,
+                  )
+                }
+                show={showBorderEnabledReset}
+              >
+                <div className="flex flex-row gap-2">
+                  {!showIndividualBorder && (
+                    <OverrideResetAffordance
+                      className="flex-1"
+                      label="border width"
+                      onReset={() =>
+                        handleChange(
+                          overrideReset.buildResetPatch(borderWidthAllKeys) as Partial<BorderNode>,
+                        )
+                      }
+                      show={showBorderWidthAllReset}
+                    >
+                      <TextInput
+                        icon={<SquareIcon className="size-3.5" />}
+                        label="Width"
+                        mixed={
+                          mixedKeys.has("borderTopWidth") ||
+                          mixedKeys.has("borderRightWidth") ||
+                          mixedKeys.has("borderBottomWidth") ||
+                          mixedKeys.has("borderLeftWidth")
+                        }
+                        minValue={0}
+                        onChange={(value) => {
+                          const numValue = Number(value);
+                          handleDraftChange({
+                            borderTopWidth: numValue,
+                            borderRightWidth: numValue,
+                            borderBottomWidth: numValue,
+                            borderLeftWidth: numValue,
+                          });
+                        }}
+                        onCommit={handleCommit}
+                        type="number"
+                        typeNumberStepIncrement={1}
+                        validator={Schema.String}
+                        value={node.borderTopWidth.toString()}
+                      />
+                    </OverrideResetAffordance>
+                  )}
+
+                  {showIndividualBorder && (
+                    <div className="flex flex-col gap-2">
+                      <div className="flex flex-row gap-2">
+                        <OverrideResetAffordance
+                          className="flex-1"
+                          label="border left width"
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(
+                                borderLeftWidthKeys,
+                              ) as Partial<BorderNode>,
+                            )
+                          }
+                          show={showBorderWidthLeftReset}
+                        >
+                          <TextInput
+                            icon={<SquareDashedTopSolidIcon className="-rotate-90 size-3.5" />}
+                            label="Border Left"
+                            mixed={mixedKeys.has("borderLeftWidth")}
+                            minValue={0}
+                            onChange={(value) =>
+                              handleDraftChange({
+                                borderLeftWidth: Number(value),
+                              })
+                            }
+                            onCommit={handleCommit}
+                            type="number"
+                            typeNumberStepIncrement={1}
+                            validator={Schema.String}
+                            value={node.borderLeftWidth.toString()}
+                          />
+                        </OverrideResetAffordance>
+                        <OverrideResetAffordance
+                          className="flex-1"
+                          label="border top width"
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(
+                                borderTopWidthKeys,
+                              ) as Partial<BorderNode>,
+                            )
+                          }
+                          show={showBorderWidthTopReset}
+                        >
+                          <TextInput
+                            icon={<SquareDashedTopSolidIcon className="size-3.5" />}
+                            label="Border Top"
+                            mixed={mixedKeys.has("borderTopWidth")}
+                            minValue={0}
+                            onChange={(value) =>
+                              handleDraftChange({
+                                borderTopWidth: Number(value),
+                              })
+                            }
+                            onCommit={handleCommit}
+                            type="number"
+                            typeNumberStepIncrement={1}
+                            validator={Schema.String}
+                            value={node.borderTopWidth.toString()}
+                          />
+                        </OverrideResetAffordance>
+                      </div>
+                      <div className="flex flex-row gap-2">
+                        <OverrideResetAffordance
+                          className="flex-1"
+                          label="border right width"
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(
+                                borderRightWidthKeys,
+                              ) as Partial<BorderNode>,
+                            )
+                          }
+                          show={showBorderWidthRightReset}
+                        >
+                          <TextInput
+                            icon={<SquareDashedTopSolidIcon className="rotate-90 size-3.5" />}
+                            label="Border Right"
+                            mixed={mixedKeys.has("borderRightWidth")}
+                            minValue={0}
+                            onChange={(value) =>
+                              handleDraftChange({
+                                borderRightWidth: Number(value),
+                              })
+                            }
+                            onCommit={handleCommit}
+                            type="number"
+                            typeNumberStepIncrement={1}
+                            validator={Schema.String}
+                            value={node.borderRightWidth.toString()}
+                          />
+                        </OverrideResetAffordance>
+                        <OverrideResetAffordance
+                          className="flex-1"
+                          label="border bottom width"
+                          onReset={() =>
+                            handleChange(
+                              overrideReset.buildResetPatch(
+                                borderBottomWidthKeys,
+                              ) as Partial<BorderNode>,
+                            )
+                          }
+                          show={showBorderWidthBottomReset}
+                        >
+                          <TextInput
+                            icon={<SquareDashedTopSolidIcon className="rotate-180 size-3.5" />}
+                            label="Border Bottom"
+                            mixed={mixedKeys.has("borderBottomWidth")}
+                            minValue={0}
+                            onChange={(value) =>
+                              handleDraftChange({
+                                borderBottomWidth: Number(value),
+                              })
+                            }
+                            onCommit={handleCommit}
+                            type="number"
+                            typeNumberStepIncrement={1}
+                            validator={Schema.String}
+                            value={node.borderBottomWidth.toString()}
+                          />
+                        </OverrideResetAffordance>
+                      </div>
+                    </div>
+                  )}
+
+                  <Button
+                    size="icon-sm"
+                    variant="secondary"
+                    onClick={() => (showIndividualBorder ? collapseBorder() : expandBorder())}
+                  >
+                    {showIndividualBorder ? (
+                      <VaultIcon className="size-3.5" />
+                    ) : (
+                      <FullscreenIcon className="size-3.5" />
+                    )}
+                  </Button>
+
+                  <Button
+                    onClick={() => handleChange({ borderEnabled: false })}
+                    size="icon-sm"
+                    variant="secondary"
+                  >
+                    <MinusIcon />
+                  </Button>
+                </div>
+              </OverrideResetAffordance>
+            </PanelSubSectionContent>
+          </PanelSubSection>
+          <OverrideResetAffordance
+            label="border color"
+            onReset={() =>
+              handleChange(overrideReset.buildResetPatch(borderColorKeys) as Partial<BorderNode>)
+            }
+            show={showBorderColorReset}
+          >
+            <ColorInput
+              mixed={mixedKeys.has("borderColor")}
+              onChange={(value) => handleChange({ borderColor: value })}
+              onCommit={commit}
+              onDiscard={discard}
+              onDragStart={begin}
+              value={node.borderColor}
+            />
+          </OverrideResetAffordance>
+        </PanelSectionContent>
+      )}
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx
new file mode 100644
index 000000000..2b377ecdf
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx
@@ -0,0 +1,156 @@
+"use client";
+
+import type { ComponentAction } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { ComponentBoundAction } from "@voidhash/mimic-schema";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
+import { ChevronRightIcon } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
+import { useComponentManifest } from "@/features/studio/paywalls/designer/hooks/use-component-manifest";
+import type { LabeledVariable } from "@/features/studio/paywalls/designer/components/variables/types";
+import {
+  removeComponentActionBinding,
+  setComponentActionBinding,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import {
+  collectAncestorVariables,
+  toLabeledVariables,
+} from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
+import {
+  componentBoundActionFromRaw,
+  findComponentActionEntry,
+} from "@/features/studio/paywalls/designer/state/utils/component-prop-values";
+import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
+
+import { ActionEditor, ACTION_TYPE_LABELS } from "@/features/studio/paywalls/designer/panel-kit/action-editor";
+import { PopoverHeader } from "@/features/studio/paywalls/designer/panel-kit/popover-header";
+
+const UNBOUND_ACTION: ComponentBoundAction = { type: "none" };
+
+function ComponentActionRow({
+  node,
+  actionName,
+  manifestAction,
+  variables,
+  productVariables,
+}: {
+  node: ComponentSnapshotNode;
+  actionName: string;
+  manifestAction: ComponentAction;
+  variables: readonly LabeledVariable[];
+  productVariables: readonly LabeledVariable[];
+}) {
+  const dispatch = usePaywallDesignerActions();
+  const [isOpen, setIsOpen] = useState(false);
+
+  const storedEntry = findComponentActionEntry(node.data.actionBindings, actionName);
+  const boundAction =
+    (storedEntry === undefined ? undefined : componentBoundActionFromRaw(storedEntry.raw)) ??
+    UNBOUND_ACTION;
+
+  const payloadFields = useMemo(
+    () => Object.keys(manifestAction.payload),
+    [manifestAction.payload],
+  );
+
+  const handleChange = (action: ComponentBoundAction) => {
+    if (action.type === "none") {
+      if (storedEntry !== undefined) {
+        dispatch(removeComponentActionBinding)({ actionName, nodeId: node.id });
+      }
+      return;
+    }
+    dispatch(setComponentActionBinding)({ action, actionName, nodeId: node.id });
+  };
+
+  return (
+    <Popover onOpenChange={setIsOpen} open={isOpen}>
+      <PopoverTrigger asChild>
+        <Button className="w-full justify-start gap-1 px-2" size="sm" variant="secondary">
+          <span className="text-xs">{actionName}</span>
+          <ChevronRightIcon className="size-3 text-muted-foreground" />
+          <span className="text-muted-foreground text-xs">
+            {ACTION_TYPE_LABELS[boundAction.type]}
+          </span>
+        </Button>
+      </PopoverTrigger>
+      <PopoverContent align="start" className="w-72 p-3" side="left" sideOffset={4}>
+        <PopoverHeader onClose={() => setIsOpen(false)} title={actionName} />
+        <ActionEditor
+          action={boundAction}
+          onChange={handleChange}
+          payloadFields={payloadFields}
+          productVariables={productVariables}
+          variables={variables}
+        />
+      </PopoverContent>
+    </Popover>
+  );
+}
+
+export interface ComponentActionsSectionProps {
+  node: ComponentSnapshotNode;
+}
+
+export function ComponentActionsSection({ node }: ComponentActionsSectionProps) {
+  const store = usePaywallDesignerStore();
+  const documentRoot = useStore(store, selectDocumentRoot);
+
+  const manifest = useComponentManifest(node);
+
+  const variables = useMemo(
+    () => toLabeledVariables(collectAncestorVariables(documentRoot, node.id), node.id),
+    [documentRoot, node.id],
+  );
+
+  const productVariables = useMemo(
+    () => variables.filter((v) => v.value.key === "product"),
+    [variables],
+  );
+
+  const actionEntries = useMemo(() => Object.entries(manifest?.actions ?? {}), [manifest]);
+
+  if (manifest !== undefined && actionEntries.length === 0) {
+    return null;
+  }
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Actions</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        {manifest === undefined ? (
+          <p className="text-muted-foreground text-xs">
+            This version is not in the project catalog, so its actions can&apos;t be bound.
+          </p>
+        ) : (
+          <div className="flex flex-col gap-2">
+            {actionEntries.map(([actionName, manifestAction]) => (
+              <ComponentActionRow
+                actionName={actionName}
+                key={actionName}
+                manifestAction={manifestAction}
+                node={node}
+                productVariables={productVariables}
+                variables={variables}
+              />
+            ))}
+          </div>
+        )}
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx
new file mode 100644
index 000000000..a988f4a4c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx
@@ -0,0 +1,153 @@
+"use client";
+
+import { resolveComponentPropValue } from "@voidhash/mimic-schema";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
+import { PropFieldRow } from "@/features/studio/paywalls/designer/panel-kit/prop-field-row";
+import { useComponentManifest } from "@/features/studio/paywalls/designer/hooks/use-component-manifest";
+import {
+  removeComponentProp,
+  updateComponentPropBinding,
+  updateComponentPropLocalizedValue,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import {
+  collectAncestorVariables,
+  toLabeledVariables,
+} from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
+import {
+  componentPropBindingFromRaw,
+  findComponentPropEntry,
+} from "@/features/studio/paywalls/designer/state/utils/component-prop-values";
+import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
+import {
+  readLocalizableComponentProp,
+  selectDefaultLocale,
+} from "@/features/studio/paywalls/designer/state/utils/localization";
+
+const NO_VARIABLES = [] as const;
+
+export interface ComponentPropsSectionProps {
+  node: ComponentSnapshotNode;
+}
+
+export function ComponentPropsSection({ node }: ComponentPropsSectionProps) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const defaultLocale = useStore(store, selectDefaultLocale);
+
+  const manifest = useComponentManifest(node);
+
+  const variables = useMemo(
+    () => toLabeledVariables(collectAncestorVariables(documentRoot, node.id), node.id),
+    [documentRoot, node.id],
+  );
+
+  const propEntries = useMemo(
+    () => (manifest === undefined ? [] : Object.entries(manifest.props)),
+    [manifest],
+  );
+
+  const localeTag = activeLocale !== null && activeLocale !== defaultLocale ? activeLocale : null;
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Props</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        {manifest === undefined ? (
+          <p className="text-muted-foreground text-xs">
+            This version is not in the project catalog, so its props can&apos;t be edited.
+          </p>
+        ) : propEntries.length === 0 ? (
+          <p className="text-muted-foreground text-xs">This component declares no props.</p>
+        ) : (
+          <div className="flex flex-col gap-2">
+            {propEntries.map(([propName, def]) => {
+              const storedEntry = findComponentPropEntry(node.data.props, propName);
+              const storedBinding =
+                storedEntry === undefined
+                  ? undefined
+                  : componentPropBindingFromRaw(storedEntry.raw);
+
+              // A literal-bound string/image prop marked `.localizable()` edits
+              // the active locale's override instead of the base binding.
+              const isLocalizableKind =
+                (def.kind === "string" || def.kind === "image") && def.localizable === true;
+              const prop = isLocalizableKind
+                ? readLocalizableComponentProp(node, propName)
+                : undefined;
+              if (
+                localeTag !== null &&
+                isLocalizableKind &&
+                prop !== undefined &&
+                prop.value.type === "literal"
+              ) {
+                const resolved = resolveComponentPropValue(prop, localeTag, defaultLocale);
+                const hasOverride = resolved !== prop.value;
+                const resolvedPlain = componentPropBindingFromRaw(resolved);
+                return (
+                  <PropFieldRow
+                    def={def}
+                    key={propName}
+                    localeEditing={{ badge: localeTag, hasOverride }}
+                    onResetProp={(name) =>
+                      dispatch(updateComponentPropLocalizedValue)({
+                        locale: localeTag,
+                        nodeId: node.id,
+                        propName: name,
+                        value: null,
+                      })
+                    }
+                    onSetProp={(name, binding) => {
+                      if (binding.type !== "literal") {
+                        return;
+                      }
+                      dispatch(updateComponentPropLocalizedValue)({
+                        locale: localeTag,
+                        nodeId: node.id,
+                        propName: name,
+                        value: binding.value,
+                      });
+                    }}
+                    propName={propName}
+                    targets={[{ id: node.id, storedBinding: resolvedPlain }]}
+                    variables={NO_VARIABLES}
+                  />
+                );
+              }
+
+              return (
+                <PropFieldRow
+                  def={def}
+                  key={propName}
+                  onResetProp={(name) => dispatch(removeComponentProp)({ nodeId: node.id, propName: name })}
+                  onSetProp={(name, binding) =>
+                    dispatch(updateComponentPropBinding)({ binding, nodeId: node.id, propName: name })
+                  }
+                  propName={propName}
+                  targets={[{ id: node.id, storedBinding }]}
+                  variables={variables}
+                />
+              );
+            })}
+          </div>
+        )}
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx
new file mode 100644
index 000000000..5d08c5fd5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx
@@ -0,0 +1,293 @@
+"use client";
+
+import { getBuiltinComponent } from "@voidhash/paywall-builtins";
+import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  Button,
+  cn,
+} from "@voidhash/ui";
+import { ArrowUpCircleIcon } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+  PanelSubSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { TextInput } from "@/features/studio/paywalls/designer/components/ui/text-input";
+import {
+  applyComponentVersionUpdate,
+  setComponentPreviewStateSelection,
+  updateComponentNode,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import type { ComponentCatalogVersion } from "@/features/studio/paywalls/designer/state/designer-store-state";
+import type { AncestorVariablesSnapshotNode } from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
+import {
+  collectAncestorVariableIds,
+  validateComponentNode,
+} from "@/features/studio/paywalls/designer/state/utils/component-validation";
+import { componentFileName } from "@/features/studio/paywalls/designer/state/utils/code-components";
+import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
+
+interface VersionUpdatePlan {
+  latest: ComponentCatalogVersion;
+  latestVersion: number;
+  /** Stored props the new manifest no longer declares — removed on confirm. */
+  removedPropNames: string[];
+  /** Remaining warning messages the update would introduce. */
+  warningMessages: string[];
+  resetPreviewState: boolean;
+}
+
+export interface ComponentSectionProps {
+  node: ComponentSnapshotNode;
+}
+
+export function ComponentSection({ node }: ComponentSectionProps) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const [isUpdateDialogOpen, setIsUpdateDialogOpen] = useState(false);
+
+  const components = useStore(store, (state) => state.componentCatalog.components);
+  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
+  const previewStateSelection = useStore(
+    store,
+    (state) => state.componentPreviewStateSelection[node.id],
+  );
+  const documentRoot: AncestorVariablesSnapshotNode = useStore(store, selectDocumentRoot);
+
+  const isLocal = node.data.componentSource === "local";
+  const isBuiltin = node.data.componentSource === "builtin";
+  // Builtins carry no catalog row and no pinned hash — they resolve from the
+  // static registry by slug; catalog affordances (version/update) never apply.
+  const builtin = isBuiltin ? getBuiltinComponent(node.data.componentSlug) : undefined;
+  const catalogEntry = isBuiltin ? undefined : components[node.data.componentSlug];
+  const pinnedVersion = isBuiltin ? undefined : byContentHash[node.data.contentHash];
+  const previewStates = isBuiltin
+    ? (builtin?.manifest.previewStates ?? [])
+    : (pinnedVersion?.previewStates ?? []);
+  // The "Component" row shows the file basename for a local instance (its slug
+  // sentinel is empty), the registry display name for a builtin, or the catalog
+  // slug for a catalog instance.
+  const componentLabel = isLocal
+    ? componentFileName(node.data.componentPath)
+    : isBuiltin
+      ? (builtin?.name ?? node.data.componentSlug)
+      : node.data.componentSlug;
+
+  const persistedPreviewState = node.data.previewState ?? "default";
+  const effectivePreviewState = previewStateSelection ?? persistedPreviewState;
+
+  const updatePlan = useMemo((): VersionUpdatePlan | null => {
+    if (!catalogEntry || catalogEntry.latestVersion <= node.data.componentVersion) {
+      return null;
+    }
+    const latest = catalogEntry.latest;
+    const availableVariableIds = collectAncestorVariableIds(documentRoot, node.id);
+    const warnings = validateComponentNode(
+      {
+        actionBindings: node.data.actionBindings,
+        children: node.children,
+        contentHash: node.data.contentHash,
+        props: node.data.props,
+      },
+      latest.manifest,
+      availableVariableIds,
+    );
+    const removedPropNames = [
+      ...new Set(
+        warnings
+          .filter((warning) => warning.kind === "unknown-prop")
+          .map((warning) => warning.propName),
+      ),
+    ];
+    const warningMessages = warnings
+      .filter((warning) => warning.kind !== "unknown-prop" && warning.severity === "warning")
+      .map((warning) => warning.message);
+    return {
+      latest,
+      latestVersion: catalogEntry.latestVersion,
+      removedPropNames,
+      resetPreviewState: !latest.previewStates.includes(persistedPreviewState),
+      warningMessages,
+    };
+  }, [catalogEntry, node, documentRoot, persistedPreviewState]);
+
+  const handleNameChange = (name: string) => {
+    dispatch(updateComponentNode)({ id: node.id, updates: { name } });
+  };
+
+  const handleSelectPreviewState = (state: string) => {
+    dispatch(setComponentPreviewStateSelection)({
+      nodeId: node.id,
+      previewState: state === persistedPreviewState ? null : state,
+    });
+  };
+
+  const handlePersistPreviewState = () => {
+    dispatch(updateComponentNode)({
+      id: node.id,
+      updates: { previewState: effectivePreviewState },
+    });
+    dispatch(setComponentPreviewStateSelection)({ nodeId: node.id, previewState: null });
+  };
+
+  const handleConfirmUpdate = () => {
+    if (!updatePlan) {
+      return;
+    }
+    dispatch(applyComponentVersionUpdate)({
+      contentHash: updatePlan.latest.contentHash,
+      dropPropNames: updatePlan.removedPropNames,
+      nodeId: node.id,
+      resetPreviewState: updatePlan.resetPreviewState,
+      version: updatePlan.latestVersion,
+    });
+    dispatch(setComponentPreviewStateSelection)({ nodeId: node.id, previewState: null });
+    setIsUpdateDialogOpen(false);
+  };
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Component</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <div className="flex flex-col gap-2">
+          <div className="flex flex-row items-center gap-2">
+            <span className="min-w-16 text-muted-foreground text-xs">Name</span>
+            <TextInput
+              className="flex-1"
+              label="Name"
+              onChange={handleNameChange}
+              value={node.data.name ?? ""}
+            />
+          </div>
+          <div className="flex flex-row items-center gap-2">
+            <span className="min-w-16 text-muted-foreground text-xs">Component</span>
+            <span className="truncate text-xs">{componentLabel}</span>
+          </div>
+          {!isLocal && !isBuiltin && (
+            <div className="flex flex-row items-center gap-2">
+              <span className="min-w-16 text-muted-foreground text-xs">Version</span>
+              <span className="text-xs">v{node.data.componentVersion}</span>
+              {updatePlan && (
+                <span className="text-[10px] text-muted-foreground">
+                  v{updatePlan.latestVersion} available
+                </span>
+              )}
+            </div>
+          )}
+        </div>
+
+        {updatePlan && (
+          <Button
+            className="w-full"
+            onClick={() => setIsUpdateDialogOpen(true)}
+            size="sm"
+            variant="outline"
+          >
+            <ArrowUpCircleIcon />
+            Update to v{updatePlan.latestVersion}
+          </Button>
+        )}
+
+        {previewStates.length > 1 && (
+          <PanelSubSection>
+            <div className="flex h-7 flex-row items-center justify-between">
+              <PanelSubSectionTitle>Preview state</PanelSubSectionTitle>
+              {effectivePreviewState !== persistedPreviewState && (
+                <Button onClick={handlePersistPreviewState} size="sm" variant="ghost">
+                  Set as default
+                </Button>
+              )}
+            </div>
+            <PanelSubSectionContent>
+              <div className="flex flex-col">
+                {previewStates.map((state) => (
+                  <button
+                    className={cn(
+                      "flex h-7 w-full items-center rounded-sm px-2 text-left font-medium text-xs",
+                      effectivePreviewState === state
+                        ? "bg-accent text-accent-foreground"
+                        : "text-muted-foreground",
+                    )}
+                    key={state}
+                    onClick={() => handleSelectPreviewState(state)}
+                    type="button"
+                  >
+                    {state}
+                    {state === persistedPreviewState && (
+                      <span className="ml-auto text-[10px] text-muted-foreground">default</span>
+                    )}
+                  </button>
+                ))}
+              </div>
+            </PanelSubSectionContent>
+          </PanelSubSection>
+        )}
+      </PanelSectionContent>
+
+      <AlertDialog onOpenChange={setIsUpdateDialogOpen} open={isUpdateDialogOpen}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>
+              Update {catalogEntry?.title ?? node.data.componentSlug} to v{updatePlan?.latestVersion}
+            </AlertDialogTitle>
+            <AlertDialogDescription asChild>
+              <div className="space-y-2">
+                <p>
+                  This instance is pinned to v{node.data.componentVersion}. Updating re-renders it from
+                  the latest deployed version.
+                </p>
+                {updatePlan && updatePlan.removedPropNames.length > 0 && (
+                  <p className="text-amber-600 text-sm">
+                    Will be removed (no longer declared): {updatePlan.removedPropNames.join(", ")}
+                  </p>
+                )}
+                {updatePlan?.resetPreviewState && (
+                  <p className="text-sm">
+                    The preview state &quot;{persistedPreviewState}&quot; no longer exists and
+                    resets to &quot;default&quot;.
+                  </p>
+                )}
+                {updatePlan?.warningMessages.map((message) => (
+                  <p className="text-amber-600 text-sm" key={message}>
+                    {message}
+                  </p>
+                ))}
+                {updatePlan &&
+                  updatePlan.removedPropNames.length === 0 &&
+                  updatePlan.warningMessages.length === 0 &&
+                  !updatePlan.resetPreviewState && (
+                    <p className="text-sm">All configured props and actions carry over.</p>
+                  )}
+              </div>
+            </AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel>Cancel</AlertDialogCancel>
+            <AlertDialogAction onClick={handleConfirmUpdate}>Update</AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-warnings.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-warnings.tsx
new file mode 100644
index 000000000..f707e997c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-warnings.tsx
@@ -0,0 +1,159 @@
+"use client";
+
+import {
+  Button,
+  cn,
+  CommandDialog,
+  CommandEmpty,
+  CommandGroup,
+  CommandInput,
+  CommandItem,
+  CommandList,
+} from "@voidhash/ui";
+import { Code2Icon, InfoIcon, LinkIcon, TriangleAlertIcon } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { useComponentNodeWarnings } from "@/features/studio/paywalls/designer/hooks/use-component-node-warnings";
+import { repairLocalComponentReference } from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import {
+  codeComponentDefinitions,
+  componentDisplayName,
+  componentFileName,
+  selectCodeComponentNodes,
+} from "@/features/studio/paywalls/designer/state/utils/code-components";
+
+export interface ComponentWarningsBlockProps {
+  nodeId: string;
+}
+
+/**
+ * Validation summary for the selected component node, rendered above the
+ * right-panel sections (spec §7.4): amber rows for warnings, muted rows for
+ * info. When the instance references a component file that no longer exists
+ * (`component-unresolved`), a primary "Pair to a component file…" action opens a
+ * picker to re-point it at an existing file.
+ */
+export function ComponentWarningsBlock({ nodeId }: ComponentWarningsBlockProps) {
+  const warnings = useComponentNodeWarnings(nodeId);
+  const [pickerOpen, setPickerOpen] = useState(false);
+
+  const unresolved = warnings.find((warning) => warning.kind === "component-unresolved");
+
+  if (warnings.length === 0) {
+    return null;
+  }
+
+  return (
+    <div className="flex flex-col gap-1.5 border-border border-b px-4 py-3">
+      {warnings.map((warning) => (
+        <div
+          className={cn(
+            "flex flex-row items-start gap-1.5 text-xs",
+            warning.severity === "warning" ? "text-amber-500" : "text-muted-foreground",
+          )}
+          key={`${warning.kind}:${warning.message}`}
+        >
+          {warning.severity === "warning" ? (
+            <TriangleAlertIcon className="mt-0.5 size-3.5 shrink-0" />
+          ) : (
+            <InfoIcon className="mt-0.5 size-3.5 shrink-0" />
+          )}
+          <span>{warning.message}</span>
+        </div>
+      ))}
+      {unresolved !== undefined && (
+        <>
+          <Button
+            className="mt-1 self-start"
+            onClick={() => setPickerOpen(true)}
+            size="sm"
+            variant="outline"
+          >
+            <LinkIcon />
+            Pair to a component file…
+          </Button>
+          <PairComponentPicker
+            nodeId={nodeId}
+            onOpenChange={setPickerOpen}
+            open={pickerOpen}
+          />
+        </>
+      )}
+    </div>
+  );
+}
+
+/**
+ * A command-palette picker (mirroring the Add Component dialog pattern) listing
+ * the document's component files by basename. Picking one re-points the
+ * instance's `componentPath` via {@link repairLocalComponentReference}. Files
+ * whose definition has not compiled yet are still selectable, annotated with a
+ * "not compiled yet" note.
+ */
+function PairComponentPicker({
+  nodeId,
+  open,
+  onOpenChange,
+}: {
+  nodeId: string;
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+}) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const codeNodes = useStore(store, selectCodeComponentNodes);
+  const compiled = useStore(store, (state) => state.codeComponents.compiled);
+
+  const definitions = useMemo(
+    () =>
+      [...codeComponentDefinitions(codeNodes)].sort((a, b) =>
+        componentDisplayName(a.path).localeCompare(componentDisplayName(b.path)),
+      ),
+    [codeNodes],
+  );
+
+  return (
+    <CommandDialog
+      description="Pick a component file to pair this instance with"
+      onOpenChange={onOpenChange}
+      open={open}
+      title="Pair to a component file"
+    >
+      <CommandInput placeholder="Search component files..." />
+      <CommandList>
+        <CommandEmpty>No component files in this paywall.</CommandEmpty>
+        {definitions.length > 0 && (
+          <CommandGroup heading="Component files">
+            {definitions.map((definition) => {
+              const compiledArtifact = compiled[definition.id]?.artifact;
+              return (
+                <CommandItem
+                  key={definition.id}
+                  onSelect={() => {
+                    dispatch(repairLocalComponentReference)({
+                      nodeId,
+                      componentPath: definition.path,
+                    });
+                    onOpenChange(false);
+                  }}
+                  value={`${componentDisplayName(definition.path)} ${componentFileName(definition.path)}`}
+                >
+                  <Code2Icon />
+                  <span className="flex-1 truncate">{componentFileName(definition.path)}</span>
+                  {compiledArtifact === undefined && (
+                    <span className="shrink-0 text-muted-foreground text-xs">not compiled yet</span>
+                  )}
+                </CommandItem>
+              );
+            })}
+          </CommandGroup>
+        )}
+      </CommandList>
+    </CommandDialog>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx
new file mode 100644
index 000000000..9ba5780b8
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx
@@ -0,0 +1,132 @@
+"use client";
+
+import { entryValue } from "@voidhash/mimic-schema";
+import type { TextSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { Textarea } from "@voidhash/ui";
+import { useState } from "react";
+import { useStore } from "zustand/react";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
+import {
+  updateNodeTranslation,
+  updateTextNode,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import { selectDefaultLocale } from "@/features/studio/paywalls/designer/state/utils/localization";
+
+/**
+ * Reads the RAW stored override text for a locale (exact tag), or `""` when no
+ * override exists. Unlike `resolveText`, this never falls back to the base text
+ * — the translation editor shows the empty override as an empty field (with the
+ * base text as its placeholder) so an untranslated string is visibly editable.
+ */
+function readLocaleOverrideText(data: TextSnapshotNode["data"], locale: string): string {
+  for (const entry of data.localized ?? []) {
+    const value = entryValue(entry);
+    if (value?.locale === locale) {
+      return value.overrides?.text ?? "";
+    }
+  }
+  return "";
+}
+
+/**
+ * A commit-on-blur text field seeded from `value`. Local edits stay local until
+ * blur, which fires `onCommit` only when the value actually changed. Remount it
+ * (via a `key`) to re-seed when the edited target changes.
+ */
+function CommitTextarea({
+  value,
+  placeholder,
+  readOnly,
+  onCommit,
+}: {
+  value: string;
+  placeholder?: string;
+  readOnly?: boolean;
+  onCommit: (next: string) => void;
+}) {
+  const [draft, setDraft] = useState(value);
+  return (
+    <Textarea
+      className="min-h-16 text-xs"
+      onBlur={() => {
+        if (!readOnly && draft !== value) {
+          onCommit(draft);
+        }
+      }}
+      onChange={(event) => setDraft(event.target.value)}
+      placeholder={placeholder}
+      readOnly={readOnly}
+      value={draft}
+    />
+  );
+}
+
+export interface ContentSectionProps {
+  node: TextSnapshotNode;
+}
+
+/**
+ * Right-panel "Content" section for a text node. In the default locale the base
+ * string is editable (writes `updateTextNode`). In a non-default locale the base
+ * string is read-only and a second field edits that locale's translation
+ * (`updateNodeTranslation`; an empty value clears the override → falls back to
+ * base, matching the canvas).
+ */
+export function ContentSection({ node }: ContentSectionProps) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const defaultLocale = useStore(store, selectDefaultLocale);
+
+  const isBaseLocale = activeLocale === null || activeLocale === defaultLocale;
+  const baseText = node.data.text;
+  const translation = isBaseLocale ? "" : readLocaleOverrideText(node.data, activeLocale);
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Content</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <div className="flex flex-col gap-2">
+          <div className="flex flex-col gap-1">
+            <span className="text-muted-foreground text-xs">Base</span>
+            <CommitTextarea
+              key={`base:${node.id}`}
+              onCommit={(next) => dispatch(updateTextNode)({ id: node.id, updates: { text: next } })}
+              readOnly={!isBaseLocale}
+              value={baseText}
+            />
+          </div>
+          {!isBaseLocale && activeLocale !== null && (
+            <div className="flex flex-col gap-1">
+              <span className="text-muted-foreground text-xs">{activeLocale}</span>
+              <CommitTextarea
+                key={`locale:${node.id}:${activeLocale}`}
+                onCommit={(next) =>
+                  dispatch(updateNodeTranslation)({
+                    id: node.id,
+                    locale: activeLocale,
+                    text: next,
+                  })
+                }
+                placeholder={baseText}
+                value={translation}
+              />
+            </div>
+          )}
+        </div>
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx
new file mode 100644
index 000000000..0c12f54c7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx
@@ -0,0 +1,397 @@
+"use client";
+
+import { resolveBackgroundImage } from "@voidhash/mimic-schema";
+import type {
+  ScreenSnapshotNode,
+  ScrollViewSnapshotNode,
+  SnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { MinusIcon, PlusIcon } from "lucide-react";
+import { useCallback, useEffect, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { Badge, Button } from "@voidhash/ui";
+import { rgbaToHexOpacity } from "@/features/studio/paywalls/designer/panel-kit/color-picker/color-utils";
+import { FillField } from "@/features/studio/paywalls/designer/panel-kit/fill-field";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
+import { OverrideResetAffordance } from "@/features/studio/paywalls/designer/panel-kit/reset-affordance";
+import type {
+  BackgroundGradient,
+  BackgroundImage,
+  BackgroundType,
+  GradientStop,
+} from "@/features/studio/paywalls/designer/state/actions/features/fill-style-actions";
+import {
+  updateFillStyle,
+  updateNodeLocalizedImage,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import { selectDefaultLocale } from "@/features/studio/paywalls/designer/state/utils/localization";
+
+import { nextStopPosition } from "../utils/gradient-stops";
+import { useStyleTargets } from "../utils/get-style-targets";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+
+/**
+ * The decoded (read) shape of a gradient on `data.style`. Array elements are
+ * wrapped by the mimic CRDT decoder as `{ value }`; scalar fields are plain.
+ */
+interface DecodedGradient {
+  kind: "linear" | "radial";
+  startX: number;
+  startY: number;
+  endX: number;
+  endY: number;
+  stops: Array<{ value?: GradientStop }>;
+}
+
+/**
+ * The panel-facing view of a node's effective fill style. Structured fields are
+ * read in their decoded (CRDT-wrapped) form; the panel unwraps them before use.
+ */
+interface FillStyleRead {
+  backgroundColor: string;
+  backgroundEnabled: boolean;
+  backgroundType?: BackgroundType;
+  backgroundGradient?: DecodedGradient;
+  backgroundImage?: BackgroundImage;
+}
+
+interface FillStyleWrite {
+  backgroundColor: string;
+  backgroundEnabled: boolean;
+  backgroundType: BackgroundType;
+  backgroundGradient: BackgroundGradient;
+  backgroundImage: BackgroundImage;
+}
+
+const DEFAULT_GRADIENT: BackgroundGradient = {
+  kind: "linear",
+  startX: 0.5,
+  startY: 0,
+  endX: 0.5,
+  endY: 1,
+  stops: [
+    { color: "rgba(255, 255, 255, 1)", position: 0 },
+    { color: "rgba(255, 255, 255, 0)", position: 1 },
+  ],
+};
+
+/** Unwrap the CRDT-decoded gradient into the logical write shape. */
+function toWriteGradient(decoded: DecodedGradient | undefined): BackgroundGradient {
+  if (!decoded) {
+    return { ...DEFAULT_GRADIENT, stops: DEFAULT_GRADIENT.stops.map((s) => ({ ...s })) };
+  }
+  const stops = decoded.stops
+    .map((entry) => entry.value)
+    .filter((stop): stop is GradientStop => stop !== undefined)
+    .map((stop) => ({ color: stop.color, position: stop.position }));
+  return {
+    kind: decoded.kind,
+    startX: decoded.startX,
+    startY: decoded.startY,
+    endX: decoded.endX,
+    endY: decoded.endY,
+    stops,
+  };
+}
+
+export function FillSection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets, mixedKeys } = useStyleTargets(nodes);
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { begin, commit, discard } = useDesignerDraft(store);
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const defaultLocale = useStore(store, selectDefaultLocale);
+
+  const [isOpen, setIsOpen] = useState(false);
+  const [selectedStopIndex, setSelectedStopIndex] = useState<number | null>(0);
+
+  const fill = style as unknown as FillStyleRead | null;
+
+  const isBackgroundEnabledMixed = mixedKeys.has("backgroundEnabled");
+  const isBackgroundTypeMixed = mixedKeys.has("backgroundType");
+  const backgroundEnabledKeys = ["backgroundEnabled"] as const;
+  const backgroundColorKeys = ["backgroundColor"] as const;
+  const fillRelatedKeys = ["backgroundEnabled", "backgroundColor"] as const;
+
+  const showBackgroundEnabledReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(backgroundEnabledKeys);
+  const showBackgroundColorReset =
+    !showBackgroundEnabledReset &&
+    overrideReset.isOverrideModeActive &&
+    overrideReset.hasOverride(backgroundColorKeys);
+
+  const handleChange = useCallback(
+    (incoming: Partial<FillStyleWrite>) => {
+      dispatch(updateFillStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleColorChange = useCallback(
+    (value: string) => {
+      dispatch(updateFillStyle)({
+        nodes: targets,
+        style: { backgroundColor: value },
+      });
+    },
+    [dispatch, targets],
+  );
+
+  const backgroundType: BackgroundType = fill?.backgroundType ?? "solid";
+  const gradient = toWriteGradient(fill?.backgroundGradient);
+
+  // Keep the selected stop index within bounds as stops are added/removed.
+  useEffect(() => {
+    setSelectedStopIndex((prev) => {
+      if (gradient.stops.length === 0) return null;
+      if (prev === null) return 0;
+      return Math.min(prev, gradient.stops.length - 1);
+    });
+  }, [gradient.stops.length]);
+
+  const writeGradient = useCallback(
+    (next: BackgroundGradient) => {
+      handleChange({ backgroundGradient: next });
+    },
+    [handleChange],
+  );
+
+  const handleStopColor = useCallback(
+    (index: number, color: string) => {
+      const stops = gradient.stops.map((stop, i) => (i === index ? { ...stop, color } : stop));
+      writeGradient({ ...gradient, stops });
+    },
+    [gradient, writeGradient],
+  );
+
+  const handleStopPosition = useCallback(
+    (index: number, position: number) => {
+      const clamped = Math.min(1, Math.max(0, position));
+      const stops = gradient.stops.map((stop, i) =>
+        i === index ? { ...stop, position: clamped } : stop,
+      );
+      writeGradient({ ...gradient, stops });
+    },
+    [gradient, writeGradient],
+  );
+
+  const handleAddStop = useCallback(() => {
+    const position = nextStopPosition(gradient.stops);
+    const lastColor = gradient.stops.at(-1)?.color ?? "rgba(255, 255, 255, 1)";
+    const stops = [...gradient.stops, { color: lastColor, position }].sort(
+      (a, b) => a.position - b.position,
+    );
+    writeGradient({ ...gradient, stops });
+    setSelectedStopIndex(stops.findIndex((s) => s.position === position && s.color === lastColor));
+  }, [gradient, writeGradient]);
+
+  const handleAddStopAt = useCallback(
+    (position: number, color: string) => {
+      const clamped = Math.min(1, Math.max(0, position));
+      const stops = [...gradient.stops, { color, position: clamped }].sort(
+        (a, b) => a.position - b.position,
+      );
+      writeGradient({ ...gradient, stops });
+      setSelectedStopIndex(
+        stops.findIndex((s) => s.position === clamped && s.color === color),
+      );
+    },
+    [gradient, writeGradient],
+  );
+
+  const handleRemoveStop = useCallback(
+    (index: number) => {
+      if (gradient.stops.length <= 2) return;
+      const stops = gradient.stops.filter((_, i) => i !== index);
+      writeGradient({ ...gradient, stops });
+    },
+    [gradient, writeGradient],
+  );
+
+  const image: BackgroundImage = fill?.backgroundImage ?? { url: "", resizeMode: "cover" };
+
+  // Per-locale image editing: only for a single view/scrollView/screen node whose
+  // base fill is an image, in a non-default locale, and NOT while a state-override
+  // editing session is active — the state-override editing surface takes priority
+  // over the locale surface (keep precedence simple).
+  const singleNode = nodes.length === 1 ? nodes[0] : undefined;
+  const localeNode =
+    singleNode !== undefined &&
+    (singleNode.type === "view" ||
+      singleNode.type === "scrollView" ||
+      singleNode.type === "screen")
+      ? (singleNode as ViewSnapshotNode | ScrollViewSnapshotNode | ScreenSnapshotNode)
+      : undefined;
+  const isLocaleImageEditing =
+    !overrideReset.isOverrideModeActive &&
+    activeLocale !== null &&
+    activeLocale !== defaultLocale &&
+    backgroundType === "image" &&
+    localeNode !== undefined;
+  const resolvedLocaleImage =
+    isLocaleImageEditing && localeNode !== undefined && activeLocale !== null
+      ? resolveBackgroundImage(localeNode.data, activeLocale, defaultLocale)
+      : undefined;
+  const hasLocalizedImageOverride =
+    resolvedLocaleImage !== undefined &&
+    localeNode !== undefined &&
+    resolvedLocaleImage !== localeNode.data.style.backgroundImage;
+  const displayImage: BackgroundImage =
+    resolvedLocaleImage !== undefined
+      ? { url: resolvedLocaleImage.url, resizeMode: resolvedLocaleImage.resizeMode }
+      : image;
+
+  const handleImageUrl = useCallback(
+    (url: string) => {
+      if (isLocaleImageEditing && localeNode !== undefined && activeLocale !== null) {
+        dispatch(updateNodeLocalizedImage)({
+          id: localeNode.id,
+          locale: activeLocale,
+          backgroundImage: { ...displayImage, url },
+        });
+        return;
+      }
+      handleChange({ backgroundImage: { ...image, url } });
+    },
+    [isLocaleImageEditing, localeNode, activeLocale, displayImage, dispatch, handleChange, image],
+  );
+
+  const handleImageResizeMode = useCallback(
+    (resizeMode: BackgroundImage["resizeMode"]) => {
+      if (isLocaleImageEditing && localeNode !== undefined && activeLocale !== null) {
+        dispatch(updateNodeLocalizedImage)({
+          id: localeNode.id,
+          locale: activeLocale,
+          backgroundImage: { ...displayImage, resizeMode },
+        });
+        return;
+      }
+      handleChange({ backgroundImage: { ...image, resizeMode } });
+    },
+    [isLocaleImageEditing, localeNode, activeLocale, displayImage, dispatch, handleChange, image],
+  );
+
+  const handleResetLocalizedImage = useCallback(() => {
+    if (localeNode !== undefined && activeLocale !== null) {
+      dispatch(updateNodeLocalizedImage)({
+        id: localeNode.id,
+        locale: activeLocale,
+        backgroundImage: null,
+      });
+    }
+  }, [dispatch, localeNode, activeLocale]);
+
+  if (!fill) return null;
+
+  const rowLabel = isBackgroundTypeMixed
+    ? "Mixed"
+    : backgroundType === "solid"
+      ? `#${rgbaToHexOpacity(fill.backgroundColor).hex}`
+      : backgroundType === "gradient"
+        ? gradient.kind === "linear"
+          ? "Linear"
+          : "Radial"
+        : "Image";
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Fill</PanelSectionTitle>
+        {isLocaleImageEditing && activeLocale !== null && (
+          <Badge className="px-1 py-0 text-[10px]" variant="secondary">
+            {activeLocale}
+          </Badge>
+        )}
+        <PanelSectionHeaderActions>
+          {!fill.backgroundEnabled && !isBackgroundEnabledMixed && (
+            <OverrideResetAffordance
+              label="fill enabled"
+              onReset={() =>
+                handleChange(overrideReset.buildResetPatch(fillRelatedKeys) as Partial<FillStyleWrite>)
+              }
+              show={showBackgroundEnabledReset}
+            >
+              <Button
+                onClick={() => handleChange({ backgroundEnabled: true })}
+                size="icon-sm"
+                variant="secondary"
+              >
+                <PlusIcon />
+              </Button>
+            </OverrideResetAffordance>
+          )}
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      {(fill.backgroundEnabled || isBackgroundEnabledMixed) && (
+        <PanelSectionContent>
+          <OverrideResetAffordance
+            label={isLocaleImageEditing ? "localized fill" : "fill"}
+            onReset={
+              isLocaleImageEditing
+                ? handleResetLocalizedImage
+                : () =>
+                    handleChange(
+                      overrideReset.buildResetPatch(fillRelatedKeys) as Partial<FillStyleWrite>,
+                    )
+            }
+            show={
+              isLocaleImageEditing
+                ? hasLocalizedImageOverride
+                : showBackgroundEnabledReset || showBackgroundColorReset
+            }
+          >
+            <div className="flex flex-row items-center gap-2">
+              <FillField
+                backgroundColor={fill.backgroundColor}
+                backgroundType={backgroundType}
+                gradient={gradient}
+                image={displayImage}
+                isTypeMixed={isBackgroundTypeMixed}
+                label={rowLabel}
+                onAddStop={handleAddStop}
+                onAddStopAt={handleAddStopAt}
+                onColorChange={handleColorChange}
+                onCommit={commit}
+                onDiscard={discard}
+                onGestureStart={begin}
+                onGradientChange={writeGradient}
+                onImageResizeModeChange={handleImageResizeMode}
+                onImageUrlChange={handleImageUrl}
+                onOpenChange={setIsOpen}
+                onRemoveStop={handleRemoveStop}
+                onSelectStop={setSelectedStopIndex}
+                onStopColorChange={handleStopColor}
+                onStopPositionChange={handleStopPosition}
+                onTypeChange={(type) => handleChange({ backgroundType: type })}
+                open={isOpen}
+                selectedStopIndex={selectedStopIndex}
+              />
+              <Button
+                aria-label="Remove fill"
+                onClick={() => handleChange({ backgroundEnabled: false })}
+                size="icon-sm"
+                variant="secondary"
+              >
+                <MinusIcon />
+              </Button>
+            </div>
+          </OverrideResetAffordance>
+        </PanelSectionContent>
+      )}
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx
new file mode 100644
index 000000000..ab345ee10
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx
@@ -0,0 +1,581 @@
+"use client";
+
+import type { FlexDirection } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { Schema } from "effect";
+import {
+  ArrowDownIcon,
+  ArrowRightIcon,
+  BetweenHorizontalStartIcon,
+  FullscreenIcon,
+  PanelBottomDashedIcon,
+  PanelLeftDashedIcon,
+  PanelLeftRightDashedIcon,
+  PanelRightDashedIcon,
+  PanelTopBottomDashedIcon,
+  PanelTopDashedIcon,
+  VaultIcon,
+} from "lucide-react";
+import { useCallback, useState } from "react";
+import { useStore } from "zustand";
+
+import { Button, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+  PanelSubSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { updateLayoutStyle } from "@/features/studio/paywalls/designer/state/actions";
+import { usePaywallDesignerActions } from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { usePaywallDesignerStore } from "../../../state/designer-store";
+import { getAlignItems, getFlexDirection } from "../../../state/utils/node-type-helpers";
+import { getNodeById } from "../../../state/utils/nodes";
+import { OverrideResetAffordance } from "../components/override-reset-affordance";
+import { FlexAlignmentInput } from "../inputs/flex-alignment-input";
+import { HeightInput } from "../inputs/height-input";
+import { TextInput } from "../inputs/text-input";
+import { WidthInput } from "../inputs/width-input";
+import { useStyleTargets } from "../utils/get-style-targets";
+import { type StyleOverrideResetContext } from "../utils/style-override-reset";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+
+type LayoutNode = {
+  gap: number;
+  justifyContent: string;
+  alignItems: string;
+  flexDirection: FlexDirection;
+  paddingTop: number;
+  paddingRight: number;
+  paddingBottom: number;
+  paddingLeft: number;
+  width: unknown;
+  height: unknown;
+  flex: unknown;
+  flexGrow: unknown;
+  flexShrink: unknown;
+  flexBasis: unknown;
+  alignSelf: unknown;
+};
+
+export interface FlexLayoutSectionProps {
+  nodes: SnapshotNode[];
+  showDimensions?: boolean;
+  editableDimensions?: boolean;
+  parentId: string;
+}
+
+export function FlexLayoutSection({
+  nodes,
+  parentId,
+  showDimensions = true,
+  editableDimensions = true,
+}: FlexLayoutSectionProps) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets, mixedKeys } = useStyleTargets(nodes);
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const node = style as LayoutNode | null;
+  const firstNodeId = nodes[0]?.id ?? null;
+
+  const handleChange = useCallback(
+    (incoming: Partial<LayoutNode>) => {
+      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<LayoutNode>) => {
+      if (!draft) begin();
+      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  if (!node) return null;
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Layout</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <FlexSubsection
+          handleCommit={handleCommit}
+          handleDraftChange={handleDraftChange}
+          mixedKeys={mixedKeys}
+          node={node}
+          onNodeChange={handleChange}
+          overrideReset={overrideReset}
+        />
+        {showDimensions && (
+          <DimensionsSubSection
+            editable={editableDimensions}
+            handleCommit={handleCommit}
+            handleDraftChange={handleDraftChange}
+            node={node}
+            nodeId={firstNodeId}
+            onNodeChange={handleChange}
+            overrideReset={overrideReset}
+            parentId={parentId}
+          />
+        )}
+        <PaddingSubSection
+          handleCommit={handleCommit}
+          handleDraftChange={handleDraftChange}
+          mixedKeys={mixedKeys}
+          node={node}
+          onNodeChange={handleChange}
+          overrideReset={overrideReset}
+        />
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
+
+// ===============================
+// Dimensions
+// ===============================
+type DimensionsSubSectionProps = {
+  node: LayoutNode;
+  nodeId: string | null;
+  onNodeChange: (style: Partial<LayoutNode>) => void;
+  handleDraftChange: (style: Partial<LayoutNode>) => void;
+  handleCommit: () => void;
+  editable?: boolean;
+  parentId: string;
+  overrideReset: StyleOverrideResetContext;
+};
+
+function DimensionsSubSection({
+  node,
+  nodeId,
+  onNodeChange,
+  handleDraftChange,
+  handleCommit,
+  parentId,
+  editable = true,
+  overrideReset,
+}: DimensionsSubSectionProps) {
+  const store = usePaywallDesignerStore();
+  const parent = useStore(store, (state) => getNodeById(state, parentId));
+  const boundingBox = useStore(store, (state) =>
+    nodeId ? state.canvas.boundingBoxes[nodeId] : null,
+  );
+
+  if (!parent) {
+    return null;
+  }
+  const parentDirection = getFlexDirection(parent, "row");
+  const parentAlignItems = getAlignItems(parent, "stretch");
+
+  const computedWidth = boundingBox ? Math.round(boundingBox.width) : null;
+  const computedHeight = boundingBox ? Math.round(boundingBox.height) : null;
+  const widthKeys = ["width", "flex", "alignSelf"] as const;
+  const heightKeys = ["height", "flex", "alignSelf"] as const;
+  const showWidthReset = overrideReset.isOverrideModeActive && overrideReset.hasOverride(widthKeys);
+  const showHeightReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(heightKeys);
+
+  return (
+    <PanelSubSection>
+      <PanelSubSectionTitle>Dimensions</PanelSubSectionTitle>
+      <PanelSubSectionContent>
+        <div className="flex flex-row gap-2">
+          <OverrideResetAffordance
+            label="width"
+            onReset={() =>
+              onNodeChange(overrideReset.buildResetPatch(widthKeys) as Partial<LayoutNode>)
+            }
+            show={showWidthReset}
+          >
+            <WidthInput
+              computedWidth={computedWidth}
+              disabled={!editable}
+              node={node as never}
+              onCommit={handleCommit}
+              onDraftChange={handleDraftChange as never}
+              onNodeChange={onNodeChange as never}
+              parentAlignItems={parentAlignItems}
+              parentDirection={parentDirection}
+            />
+          </OverrideResetAffordance>
+          <OverrideResetAffordance
+            label="height"
+            onReset={() =>
+              onNodeChange(overrideReset.buildResetPatch(heightKeys) as Partial<LayoutNode>)
+            }
+            show={showHeightReset}
+          >
+            <HeightInput
+              computedHeight={computedHeight}
+              disabled={!editable}
+              node={node as never}
+              onCommit={handleCommit}
+              onDraftChange={handleDraftChange as never}
+              onNodeChange={onNodeChange as never}
+              parentAlignItems={parentAlignItems}
+              parentDirection={parentDirection}
+            />
+          </OverrideResetAffordance>
+        </div>
+      </PanelSubSectionContent>
+    </PanelSubSection>
+  );
+}
+
+// ===============================
+// Flex
+// ===============================
+type FlexSubsectionProps = {
+  node: LayoutNode;
+  mixedKeys: Set<string>;
+  onNodeChange: (style: Partial<LayoutNode>) => void;
+  handleDraftChange: (updates: Partial<LayoutNode>) => void;
+  handleCommit: () => void;
+  overrideReset: StyleOverrideResetContext;
+};
+
+function FlexSubsection({
+  node,
+  mixedKeys,
+  onNodeChange,
+  handleDraftChange,
+  handleCommit,
+  overrideReset,
+}: FlexSubsectionProps) {
+  const directionKeys = ["flexDirection"] as const;
+  const gapKeys = ["gap"] as const;
+  const alignmentKeys = ["alignItems", "justifyContent"] as const;
+  const showDirectionReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(directionKeys);
+  const showGapReset = overrideReset.isOverrideModeActive && overrideReset.hasOverride(gapKeys);
+  const showAlignmentReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(alignmentKeys);
+
+  return (
+    <PanelSubSection>
+      <PanelSubSectionContent>
+        <div className="flex flex-row gap-2">
+          <div className="flex w-21 flex-col gap-2">
+            <OverrideResetAffordance
+              label="layout direction"
+              onReset={() =>
+                onNodeChange(overrideReset.buildResetPatch(directionKeys) as Partial<LayoutNode>)
+              }
+              show={showDirectionReset}
+            >
+              <ToggleGroup
+                variant="outline"
+                size="sm"
+                className="w-full"
+                onValueChange={(value) => onNodeChange({ flexDirection: value as FlexDirection })}
+                type="single"
+                value={mixedKeys.has("flexDirection") ? undefined : node.flexDirection}
+              >
+                <ToggleGroupItem size="sm" className="flex-1 min-w-7 px-2" value="column">
+                  <ArrowDownIcon className="size-3.5" />
+                </ToggleGroupItem>
+                <ToggleGroupItem size="sm" className="flex-1 min-w-7 px-2" value="row">
+                  <ArrowRightIcon className="size-3.5" />
+                </ToggleGroupItem>
+              </ToggleGroup>
+            </OverrideResetAffordance>
+            <OverrideResetAffordance
+              label="layout gap"
+              onReset={() =>
+                onNodeChange(overrideReset.buildResetPatch(gapKeys) as Partial<LayoutNode>)
+              }
+              show={showGapReset}
+            >
+              <TextInput
+                icon={<BetweenHorizontalStartIcon className="size-3.5" />}
+                label="Gap"
+                mixed={mixedKeys.has("gap")}
+                onChange={(value) => handleDraftChange({ gap: Number(value) })}
+                onCommit={handleCommit}
+                type="number"
+                typeNumberStepIncrement={1}
+                validator={Schema.String}
+                value={node.gap.toString()}
+              />
+            </OverrideResetAffordance>
+          </div>
+          <OverrideResetAffordance
+            className="flex flex-1 min-w-0 items-stretch gap-2 self-stretch"
+            label="layout alignment"
+            onReset={() =>
+              onNodeChange(overrideReset.buildResetPatch(alignmentKeys) as Partial<LayoutNode>)
+            }
+            show={showAlignmentReset}
+          >
+            <FlexAlignmentInput
+              alignItems={node.alignItems as never}
+              flexDirection={node.flexDirection}
+              justifyContent={node.justifyContent as never}
+              onChange={(value) =>
+                onNodeChange({
+                  alignItems: value.alignItems,
+                  justifyContent: value.justifyContent,
+                })
+              }
+            />
+          </OverrideResetAffordance>
+        </div>
+      </PanelSubSectionContent>
+    </PanelSubSection>
+  );
+}
+
+// ===============================
+// Padding Sub Section
+// ===============================
+type PaddingSubSectionProps = {
+  node: LayoutNode;
+  mixedKeys: Set<string>;
+  onNodeChange: (style: Partial<LayoutNode>) => void;
+  handleDraftChange: (updates: Partial<LayoutNode>) => void;
+  handleCommit: () => void;
+  overrideReset: StyleOverrideResetContext;
+};
+
+function shouldShowIndividualPadding(node: LayoutNode) {
+  return node.paddingTop !== node.paddingBottom || node.paddingLeft !== node.paddingRight;
+}
+
+function PaddingSubSection({
+  node,
+  mixedKeys,
+  onNodeChange,
+  handleDraftChange,
+  handleCommit,
+  overrideReset,
+}: PaddingSubSectionProps) {
+  const [showIndividualPadding, setShowIndividualPadding] = useState(
+    shouldShowIndividualPadding(node) ||
+      mixedKeys.has("paddingLeft") ||
+      mixedKeys.has("paddingRight") ||
+      mixedKeys.has("paddingTop") ||
+      mixedKeys.has("paddingBottom"),
+  );
+
+  const expandPadding = () => {
+    setShowIndividualPadding(true);
+  };
+
+  const collapsePadding = () => {
+    setShowIndividualPadding(false);
+    onNodeChange({
+      paddingLeft: node.paddingLeft,
+      paddingRight: node.paddingLeft,
+      paddingTop: node.paddingTop,
+      paddingBottom: node.paddingTop,
+    });
+  };
+
+  const paddingLeftKeys = ["paddingLeft"] as const;
+  const paddingTopKeys = ["paddingTop"] as const;
+  const paddingRightKeys = ["paddingRight"] as const;
+  const paddingBottomKeys = ["paddingBottom"] as const;
+  const paddingHorizontalKeys = ["paddingLeft", "paddingRight"] as const;
+  const paddingVerticalKeys = ["paddingTop", "paddingBottom"] as const;
+
+  const showPaddingLeftReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingLeftKeys);
+  const showPaddingTopReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingTopKeys);
+  const showPaddingRightReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingRightKeys);
+  const showPaddingBottomReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingBottomKeys);
+  const showPaddingHorizontalReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingHorizontalKeys);
+  const showPaddingVerticalReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingVerticalKeys);
+
+  return (
+    <PanelSubSection>
+      <PanelSubSectionTitle>Padding</PanelSubSectionTitle>
+      <PanelSubSectionContent>
+        <div className="flex flex-row gap-2">
+          {showIndividualPadding && (
+            <div className="flex flex-col gap-2">
+              <div className="flex flex-row gap-2">
+                <OverrideResetAffordance
+                  label="padding left"
+                  onReset={() =>
+                    onNodeChange(
+                      overrideReset.buildResetPatch(paddingLeftKeys) as Partial<LayoutNode>,
+                    )
+                  }
+                  show={showPaddingLeftReset}
+                >
+                  <TextInput
+                    icon={<PanelLeftDashedIcon className="size-3.5" />}
+                    label="Padding Left"
+                    mixed={mixedKeys.has("paddingLeft")}
+                    onChange={(value) => handleDraftChange({ paddingLeft: Number(value) })}
+                    onCommit={handleCommit}
+                    type="number"
+                    typeNumberStepIncrement={1}
+                    validator={Schema.String}
+                    value={node.paddingLeft.toString()}
+                  />
+                </OverrideResetAffordance>
+                <OverrideResetAffordance
+                  label="padding top"
+                  onReset={() =>
+                    onNodeChange(
+                      overrideReset.buildResetPatch(paddingTopKeys) as Partial<LayoutNode>,
+                    )
+                  }
+                  show={showPaddingTopReset}
+                >
+                  <TextInput
+                    icon={<PanelTopDashedIcon className="size-3.5" />}
+                    label="Padding Top"
+                    mixed={mixedKeys.has("paddingTop")}
+                    onChange={(value) => handleDraftChange({ paddingTop: Number(value) })}
+                    onCommit={handleCommit}
+                    type="number"
+                    typeNumberStepIncrement={1}
+                    validator={Schema.String}
+                    value={node.paddingTop.toString()}
+                  />
+                </OverrideResetAffordance>
+              </div>
+              <div className="flex flex-row gap-2">
+                <OverrideResetAffordance
+                  label="padding right"
+                  onReset={() =>
+                    onNodeChange(
+                      overrideReset.buildResetPatch(paddingRightKeys) as Partial<LayoutNode>,
+                    )
+                  }
+                  show={showPaddingRightReset}
+                >
+                  <TextInput
+                    icon={<PanelRightDashedIcon className="size-3.5" />}
+                    label="Padding Right"
+                    mixed={mixedKeys.has("paddingRight")}
+                    onChange={(value) => handleDraftChange({ paddingRight: Number(value) })}
+                    onCommit={handleCommit}
+                    type="number"
+                    typeNumberStepIncrement={1}
+                    validator={Schema.String}
+                    value={node.paddingRight.toString()}
+                  />
+                </OverrideResetAffordance>
+
+                <OverrideResetAffordance
+                  label="padding bottom"
+                  onReset={() =>
+                    onNodeChange(
+                      overrideReset.buildResetPatch(paddingBottomKeys) as Partial<LayoutNode>,
+                    )
+                  }
+                  show={showPaddingBottomReset}
+                >
+                  <TextInput
+                    icon={<PanelBottomDashedIcon className="size-3.5" />}
+                    label="Padding Bottom"
+                    mixed={mixedKeys.has("paddingBottom")}
+                    onChange={(value) => handleDraftChange({ paddingBottom: Number(value) })}
+                    onCommit={handleCommit}
+                    type="number"
+                    typeNumberStepIncrement={1}
+                    validator={Schema.String}
+                    value={node.paddingBottom.toString()}
+                  />
+                </OverrideResetAffordance>
+              </div>
+            </div>
+          )}
+
+          {!showIndividualPadding && (
+            <div className="flex flex-col gap-2">
+              <div className="flex flex-row gap-2">
+                <OverrideResetAffordance
+                  label="padding horizontal"
+                  onReset={() =>
+                    onNodeChange(
+                      overrideReset.buildResetPatch(paddingHorizontalKeys) as Partial<LayoutNode>,
+                    )
+                  }
+                  show={showPaddingHorizontalReset}
+                >
+                  <TextInput
+                    icon={<PanelLeftRightDashedIcon className="size-3.5" />}
+                    label="Padding Horizontal"
+                    mixed={mixedKeys.has("paddingLeft") || mixedKeys.has("paddingRight")}
+                    onChange={(value) =>
+                      handleDraftChange({
+                        paddingLeft: Number(value),
+                        paddingRight: Number(value),
+                      })
+                    }
+                    onCommit={handleCommit}
+                    type="number"
+                    typeNumberStepIncrement={1}
+                    validator={Schema.String}
+                    value={node.paddingLeft.toString()}
+                  />
+                </OverrideResetAffordance>
+                <OverrideResetAffordance
+                  label="padding vertical"
+                  onReset={() =>
+                    onNodeChange(
+                      overrideReset.buildResetPatch(paddingVerticalKeys) as Partial<LayoutNode>,
+                    )
+                  }
+                  show={showPaddingVerticalReset}
+                >
+                  <TextInput
+                    icon={<PanelTopBottomDashedIcon className="size-3.5" />}
+                    label="Padding Top"
+                    mixed={mixedKeys.has("paddingTop") || mixedKeys.has("paddingBottom")}
+                    onChange={(value) =>
+                      handleDraftChange({
+                        paddingTop: Number(value),
+                        paddingBottom: Number(value),
+                      })
+                    }
+                    onCommit={handleCommit}
+                    type="number"
+                    typeNumberStepIncrement={1}
+                    validator={Schema.String}
+                    value={node.paddingTop.toString()}
+                  />
+                </OverrideResetAffordance>
+              </div>
+            </div>
+          )}
+
+          <Button
+            onClick={() => (showIndividualPadding ? collapsePadding() : expandPadding())}
+            size="icon-sm"
+            variant="secondary"
+          >
+            {showIndividualPadding ? (
+              <VaultIcon className="size-3.5" />
+            ) : (
+              <FullscreenIcon className="size-3.5" />
+            )}
+          </Button>
+        </div>
+      </PanelSubSectionContent>
+    </PanelSubSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx
new file mode 100644
index 000000000..7e57972c7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx
@@ -0,0 +1,129 @@
+"use client";
+
+import type {
+  Action,
+  ComponentBoundAction,
+  Interaction,
+  Trigger,
+  TriggerType,
+} from "@voidhash/mimic-schema";
+import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
+import { ChevronRightIcon, MinusIcon } from "lucide-react";
+import { useState } from "react";
+
+import { SelectInput } from "@/features/studio/paywalls/designer/components/ui/select-input";
+import type { LabeledVariable } from "@/features/studio/paywalls/designer/components/variables/types";
+
+import { ActionEditor, ACTION_TYPE_LABELS } from "./action-editor";
+import { PopoverHeader } from "../../../components/ui/popover-header";
+
+const TRIGGER_OPTIONS: { value: TriggerType; label: string }[] = [
+  { value: "click", label: "On click" },
+];
+
+const TRIGGER_LABELS: Record<TriggerType, string> = {
+  click: "On click",
+};
+
+/**
+ * Narrows a component-bound action back to the visual interaction `Action`
+ * vocabulary. Returns `null` for action-payload sources, which interactions
+ * cannot store (the editor never offers them without `payloadFields`).
+ */
+function toVisualAction(action: ComponentBoundAction): Action | null {
+  switch (action.type) {
+    case "none":
+      return { type: "none" };
+    case "close-paywall":
+      return { type: "close-paywall" };
+    case "set-variable": {
+      const source = action.payload.newValue;
+      if (source.type === "action-payload") {
+        return null;
+      }
+      return {
+        payload: { newValue: source, variableId: action.payload.variableId },
+        type: "set-variable",
+      };
+    }
+    case "purchase-product": {
+      if (action.payload.type === "action-payload") {
+        return null;
+      }
+      return { payload: action.payload, type: "purchase-product" };
+    }
+  }
+}
+
+export interface InteractionRowProps {
+  interaction: Interaction;
+  onUpdateTrigger: (trigger: Trigger) => void;
+  onUpdateAction: (action: Action) => void;
+  onRemove: () => void;
+  allVariables: readonly LabeledVariable[];
+  productVariables: readonly LabeledVariable[];
+}
+
+export function InteractionRow({
+  interaction,
+  onUpdateTrigger,
+  onUpdateAction,
+  onRemove,
+  allVariables,
+  productVariables,
+}: InteractionRowProps) {
+  const [isOpen, setIsOpen] = useState(false);
+
+  const handleTriggerChange = (triggerType: TriggerType) => {
+    onUpdateTrigger({ type: triggerType });
+  };
+
+  const handleActionChange = (action: ComponentBoundAction) => {
+    const visualAction = toVisualAction(action);
+    if (visualAction) {
+      onUpdateAction(visualAction);
+    }
+  };
+
+  const triggerLabel = TRIGGER_LABELS[interaction.trigger.type];
+  const actionLabel = ACTION_TYPE_LABELS[interaction.action.type];
+
+  return (
+    <div className="flex flex-row items-center gap-2">
+      <Popover onOpenChange={setIsOpen} open={isOpen}>
+        <PopoverTrigger asChild>
+          <Button className="flex-1 justify-start gap-1 px-2" size="sm" variant="secondary">
+            <span className="text-xs">{triggerLabel}</span>
+            <ChevronRightIcon className="size-3 text-muted-foreground" />
+            <span className="text-muted-foreground text-xs">{actionLabel}</span>
+          </Button>
+        </PopoverTrigger>
+        <PopoverContent align="start" className="w-72 p-3" side="left" sideOffset={4}>
+          <PopoverHeader title="Interaction" onClose={() => setIsOpen(false)} />
+          <div className="flex flex-col gap-3">
+            <div className="flex flex-col gap-2">
+              <span className="text-muted-foreground text-xs font-medium">Trigger</span>
+              <SelectInput
+                label="Trigger"
+                onChange={handleTriggerChange}
+                options={TRIGGER_OPTIONS}
+                value={interaction.trigger.type}
+              />
+            </div>
+
+            <ActionEditor
+              action={interaction.action}
+              onChange={handleActionChange}
+              productVariables={productVariables}
+              variables={allVariables}
+            />
+          </div>
+        </PopoverContent>
+      </Popover>
+
+      <Button onClick={onRemove} size="icon-sm" variant="secondary">
+        <MinusIcon />
+      </Button>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx
new file mode 100644
index 000000000..dc04e5ac7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx
@@ -0,0 +1,129 @@
+"use client";
+
+import type { Action, Trigger } from "@voidhash/mimic-schema";
+import type {
+  ScrollViewSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import { PlusIcon } from "lucide-react";
+import { useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import { Button } from "@voidhash/ui";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import {
+  addInteraction,
+  removeInteraction,
+  updateInteraction,
+  updateInteractionActionOverride,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import {
+  collectAncestorVariables,
+  toLabeledVariables,
+} from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
+import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
+import {
+  getSelectedStateIdForNode,
+  resolveEffectiveAction,
+} from "@/features/studio/paywalls/designer/state/utils/state-overrides";
+
+import { InteractionRow } from "./interaction-row";
+
+export interface InteractionsSectionProps {
+  nodes: (ViewSnapshotNode | ScrollViewSnapshotNode)[];
+}
+
+export function InteractionsSection({ nodes }: InteractionsSectionProps) {
+  const store = usePaywallDesignerStore();
+  const node = nodes[0]!;
+  const dispatch = usePaywallDesignerActions();
+  const interactions = node.data.interactions.flatMap((entry) =>
+    entry.value === undefined ? [] : [{ id: entry.id, value: entry.value }],
+  );
+  const documentRoot = useStore(store, selectDocumentRoot);
+  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
+  const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, node.id);
+
+  const allVariables = useMemo(
+    () => toLabeledVariables(collectAncestorVariables(documentRoot, node.id), node.id),
+    [documentRoot, node.id],
+  );
+
+  const productVariables = useMemo(
+    () => allVariables.filter((v) => v.value.key === "product"),
+    [allVariables],
+  );
+
+  const handleAddInteraction = () => {
+    dispatch(addInteraction)({ nodeId: node.id });
+  };
+
+  const handleRemoveInteraction = (interactionId: string) => {
+    dispatch(removeInteraction)({ interactionId, nodeId: node.id });
+  };
+
+  const handleUpdateTrigger = (interactionId: string, newTrigger: Trigger) => {
+    dispatch(updateInteraction)({ interactionId, newTrigger, nodeId: node.id });
+  };
+
+  const handleUpdateAction = (interactionId: string, newAction: Action) => {
+    if (selectedStateId) {
+      dispatch(updateInteractionActionOverride)({
+        interactionId,
+        newAction,
+        nodeId: node.id,
+        stateId: selectedStateId,
+      });
+      return;
+    }
+    dispatch(updateInteraction)({ interactionId, newAction, nodeId: node.id });
+  };
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Interactions</PanelSectionTitle>
+        <PanelSectionHeaderActions>
+          <Button onClick={handleAddInteraction} size="icon-sm" variant="secondary">
+            <PlusIcon />
+          </Button>
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      {interactions.length > 0 && (
+        <PanelSectionContent>
+          <div className="flex flex-col gap-3">
+            {interactions.map((interaction) => (
+              <InteractionRow
+                allVariables={allVariables}
+                interaction={{
+                  ...interaction.value,
+                  action: resolveEffectiveAction(
+                    node,
+                    selectedStateId,
+                    interaction.id,
+                    interaction.value.action,
+                  ),
+                }}
+                key={interaction.id}
+                onRemove={() => handleRemoveInteraction(interaction.id)}
+                onUpdateAction={(action) => handleUpdateAction(interaction.id, action)}
+                onUpdateTrigger={(trigger) => handleUpdateTrigger(interaction.id, trigger)}
+                productVariables={productVariables}
+              />
+            ))}
+          </div>
+        </PanelSectionContent>
+      )}
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx
new file mode 100644
index 000000000..0aaa33875
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx
@@ -0,0 +1,115 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { MinusIcon, PlusIcon } from "lucide-react";
+import { useCallback } from "react";
+
+import { Button, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { updatePathFillStyle } from "@/features/studio/paywalls/designer/state/actions/features/path-fill-style-actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { useStyleTargets } from "../utils/get-style-targets";
+
+interface PathFillStyle {
+  fillColor: string;
+  fillEnabled: boolean;
+  fillRule: "nonzero" | "evenodd";
+  fillOpacity: number;
+}
+
+export function PathFillSection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets } = useStyleTargets(nodes);
+  const { begin, commit, discard } = useDesignerDraft(store);
+
+  const fill = style as unknown as PathFillStyle | null;
+
+  const handleChange = useCallback(
+    (incoming: Partial<PathFillStyle>) => {
+      dispatch(updatePathFillStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleColorChange = useCallback(
+    (value: string) => {
+      dispatch(updatePathFillStyle)({
+        nodes: targets,
+        style: { fillColor: value },
+      });
+    },
+    [dispatch, targets],
+  );
+
+  if (!fill) return null;
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Fill</PanelSectionTitle>
+        <PanelSectionHeaderActions>
+          {!fill.fillEnabled && (
+            <Button
+              onClick={() => handleChange({ fillEnabled: true })}
+              size="icon-sm"
+              variant="secondary"
+            >
+              <PlusIcon />
+            </Button>
+          )}
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      {fill.fillEnabled && (
+        <PanelSectionContent>
+          <div className="flex flex-row justify-between gap-2">
+            <ToggleGroup
+              variant="outline"
+              size="sm"
+              onValueChange={(value) => {
+                if (value === "nonzero" || value === "evenodd") {
+                  handleChange({ fillRule: value });
+                }
+              }}
+              type="single"
+              value={fill.fillRule}
+            >
+              <ToggleGroupItem size="sm" className="flex-1" value="nonzero">
+                Nonzero
+              </ToggleGroupItem>
+              <ToggleGroupItem size="sm" className="flex-1" value="evenodd">
+                Even-odd
+              </ToggleGroupItem>
+            </ToggleGroup>
+            <Button
+              onClick={() => handleChange({ fillEnabled: false })}
+              size="icon-sm"
+              variant="secondary"
+            >
+              <MinusIcon />
+            </Button>
+          </div>
+          <ColorInput
+            onChange={handleColorChange}
+            onCommit={commit}
+            onDiscard={discard}
+            onDragStart={begin}
+            value={fill.fillColor}
+          />
+        </PanelSectionContent>
+      )}
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx
new file mode 100644
index 000000000..f932a6f8b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx
@@ -0,0 +1,176 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { Schema } from "effect";
+import { MinusIcon, PlusIcon, SquareIcon } from "lucide-react";
+import { useCallback } from "react";
+
+import { Button, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+  PanelSubSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { updatePathStrokeStyle } from "@/features/studio/paywalls/designer/state/actions/features/path-stroke-style-actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { TextInput } from "../inputs/text-input";
+import { useStyleTargets } from "../utils/get-style-targets";
+
+interface PathStrokeStyle {
+  strokeColor: string;
+  strokeEnabled: boolean;
+  strokeWidth: number;
+  strokeLinecap: "butt" | "round" | "square";
+  strokeLinejoin: "miter" | "round" | "bevel";
+  strokeOpacity: number;
+}
+
+export function PathStrokeSection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets } = useStyleTargets(nodes);
+  const { draft, begin, commit, discard } = useDesignerDraft(store);
+
+  const stroke = style as unknown as PathStrokeStyle | null;
+
+  const handleChange = useCallback(
+    (incoming: Partial<PathStrokeStyle>) => {
+      dispatch(updatePathStrokeStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<PathStrokeStyle>) => {
+      if (!draft) begin();
+      dispatch(updatePathStrokeStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  if (!stroke) return null;
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Stroke</PanelSectionTitle>
+        <PanelSectionHeaderActions>
+          {!stroke.strokeEnabled && (
+            <Button
+              onClick={() => handleChange({ strokeEnabled: true })}
+              size="icon-sm"
+              variant="secondary"
+            >
+              <PlusIcon />
+            </Button>
+          )}
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      {stroke.strokeEnabled && (
+        <PanelSectionContent>
+          <PanelSubSection>
+            <PanelSubSectionTitle>Width</PanelSubSectionTitle>
+            <PanelSubSectionContent>
+              <div className="flex flex-row gap-2">
+                <TextInput
+                  icon={<SquareIcon className="size-3.5" />}
+                  label="Stroke Width"
+                  minValue={0}
+                  onChange={(value) => {
+                    handleDraftChange({ strokeWidth: Number(value) });
+                  }}
+                  onCommit={handleCommit}
+                  type="number"
+                  typeNumberStepIncrement={1}
+                  validator={Schema.String}
+                  value={stroke.strokeWidth.toString()}
+                />
+                <Button
+                  onClick={() => handleChange({ strokeEnabled: false })}
+                  size="icon-sm"
+                  variant="secondary"
+                >
+                  <MinusIcon />
+                </Button>
+              </div>
+            </PanelSubSectionContent>
+          </PanelSubSection>
+          <PanelSubSection>
+            <PanelSubSectionTitle>Line Cap</PanelSubSectionTitle>
+            <PanelSubSectionContent>
+              <ToggleGroup
+                variant="outline"
+                size="sm"
+                onValueChange={(value) => {
+                  if (value === "butt" || value === "round" || value === "square") {
+                    handleChange({ strokeLinecap: value });
+                  }
+                }}
+                type="single"
+                value={stroke.strokeLinecap}
+              >
+                <ToggleGroupItem size="sm" className="flex-1" value="butt">
+                  Butt
+                </ToggleGroupItem>
+                <ToggleGroupItem size="sm" className="flex-1" value="round">
+                  Round
+                </ToggleGroupItem>
+                <ToggleGroupItem size="sm" className="flex-1" value="square">
+                  Square
+                </ToggleGroupItem>
+              </ToggleGroup>
+            </PanelSubSectionContent>
+          </PanelSubSection>
+          <PanelSubSection>
+            <PanelSubSectionTitle>Line Join</PanelSubSectionTitle>
+            <PanelSubSectionContent>
+              <ToggleGroup
+                variant="outline"
+                size="sm"
+                onValueChange={(value) => {
+                  if (value === "miter" || value === "round" || value === "bevel") {
+                    handleChange({ strokeLinejoin: value });
+                  }
+                }}
+                type="single"
+                value={stroke.strokeLinejoin}
+              >
+                <ToggleGroupItem size="sm" className="flex-1" value="miter">
+                  Miter
+                </ToggleGroupItem>
+                <ToggleGroupItem size="sm" className="flex-1" value="round">
+                  Round
+                </ToggleGroupItem>
+                <ToggleGroupItem size="sm" className="flex-1" value="bevel">
+                  Bevel
+                </ToggleGroupItem>
+              </ToggleGroup>
+            </PanelSubSectionContent>
+          </PanelSubSection>
+          <ColorInput
+            onChange={(value) => handleChange({ strokeColor: value })}
+            onCommit={commit}
+            onDiscard={discard}
+            onDragStart={begin}
+            value={stroke.strokeColor}
+          />
+        </PanelSectionContent>
+      )}
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx
new file mode 100644
index 000000000..800bafb2f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx
@@ -0,0 +1,106 @@
+"use client";
+
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
+import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
+import { MinusIcon } from "lucide-react";
+import { useEffect, useRef } from "react";
+
+import { LiteralInput } from "@/features/studio/paywalls/designer/components/variables/literal-input";
+
+interface PendingVariable {
+  type: VariableTypeKey;
+  name: string;
+  value: VariableType;
+}
+
+function getValueDisplayText(value: VariableType): string {
+  switch (value.key) {
+    case "string":
+      return value.value || '""';
+    case "number":
+      return String(value.value);
+    case "boolean":
+      return value.value ? "True" : "False";
+    case "product":
+      return value.value.productId ? "..." : "None";
+  }
+}
+
+export interface PendingVariableRowProps {
+  pendingVariable: PendingVariable;
+  onUpdateName: (newName: string) => void;
+  onUpdateValue: (newValue: VariableType) => void;
+  onRemove: () => void;
+  isOpen: boolean;
+  onOpenChange: (open: boolean) => void;
+}
+
+export function PendingVariableRow({
+  pendingVariable,
+  onUpdateName,
+  onUpdateValue,
+  onRemove,
+  isOpen,
+  onOpenChange,
+}: PendingVariableRowProps) {
+  const inputRef = useRef<HTMLInputElement>(null);
+  const valueDisplay = getValueDisplayText(pendingVariable.value);
+
+  // Auto-focus name input when popover opens
+  useEffect(() => {
+    if (isOpen) {
+      // Small delay to ensure popover is rendered
+      const timer = setTimeout(() => {
+        inputRef.current?.focus();
+      }, 50);
+      return () => clearTimeout(timer);
+    }
+  }, [isOpen]);
+
+  return (
+    <div className="flex flex-row items-center gap-2">
+      <Popover onOpenChange={onOpenChange} open={isOpen}>
+        <PopoverTrigger asChild>
+          <Button className="flex-1 justify-start gap-0 px-0" size="sm" variant="secondary">
+            <span className="flex-1 truncate border-r border-border px-2 text-left text-xs">
+              {pendingVariable.name || "Unnamed"}
+            </span>
+            <span className="flex-1 truncate px-2 text-left text-xs text-muted-foreground">
+              {valueDisplay}
+            </span>
+          </Button>
+        </PopoverTrigger>
+        <PopoverContent align="start" className="w-72 p-3" side="left" sideOffset={4}>
+          <div className="flex flex-col gap-3">
+            <div className="flex flex-col gap-2">
+              <span className="text-muted-foreground text-xs font-medium">Name</span>
+              <InputGroup className="h-7 rounded-sm border-none dark:bg-input/60">
+                <InputGroupInput
+                  aria-label="Variable name"
+                  className="h-7 px-1 py-0 pl-2 text-xs"
+                  onChange={(e) => onUpdateName(e.target.value)}
+                  ref={inputRef}
+                  value={pendingVariable.name}
+                />
+              </InputGroup>
+            </div>
+
+            <div className="flex flex-col gap-2">
+              <span className="text-muted-foreground text-xs font-medium">Value</span>
+              <LiteralInput
+                className="flex flex-row gap-1"
+                onChange={onUpdateValue}
+                value={pendingVariable.value}
+              />
+            </div>
+          </div>
+        </PopoverContent>
+      </Popover>
+
+      <Button onClick={onRemove} size="icon-sm" variant="secondary">
+        <MinusIcon />
+      </Button>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx
new file mode 100644
index 000000000..e055d5f12
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx
@@ -0,0 +1,183 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { Schema } from "effect";
+import { ArrowDownIcon, ArrowRightIcon, ScanIcon } from "lucide-react";
+import { useCallback } from "react";
+import { useStore } from "zustand";
+
+import { Button } from "@voidhash/ui";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import {
+  applyPerNodeLayoutStyle,
+  updateLayoutStyle,
+} from "@/features/studio/paywalls/designer/state/actions";
+import { usePaywallDesignerActions } from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { usePaywallDesignerStore } from "../../../state/designer-store";
+import { buildAbsolutePositionSeeds } from "../utils/seed-absolute-position";
+import { TextInput } from "../inputs/text-input";
+import { useStyleTargets } from "../utils/get-style-targets";
+
+/** The position style the section reads and writes (always present on view + text nodes). */
+type PositionNode = {
+  position: "relative" | "absolute";
+  left: number | "auto";
+  top: number | "auto";
+  right: number | "auto";
+  bottom: number | "auto";
+};
+
+/** The numeric value an offset input shows: the stored number, or `0` for `"auto"`. */
+function offsetValue(value: number | "auto"): number {
+  return typeof value === "number" ? value : 0;
+}
+
+export interface PositionSectionProps {
+  nodes: SnapshotNode[];
+}
+
+/**
+ * The dedicated `Position` section (view + text nodes, single or multi-select).
+ *
+ * The absolute-position toggle lives as an icon button on the RIGHT of the
+ * section header (pressed = absolute). X/Y offset inputs are ALWAYS visible:
+ * - absolute: enabled, editing `left`/`top` (an `"auto"` value shows `0`), a live
+ *   draft preview that commits on release, exactly like the old subsection.
+ * - relative: disabled, showing the first node's measured offset within its
+ *   parent (read live from the canvas bounding boxes, `0` when boxes are missing)
+ *   — Figma-style read-only coordinates.
+ *
+ * Toggling ON seeds each node's `left`/`top` from its OWN offset (via
+ * {@link buildAbsolutePositionSeeds}) so a multi-selection stays visually in
+ * place; toggling OFF clears all four inset fields back to `"auto"`. A mixed
+ * `position` across the selection disables the inputs and suppresses editing.
+ */
+export function PositionSection({ nodes }: PositionSectionProps) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets, mixedKeys } = useStyleTargets(nodes);
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const node = style as PositionNode | null;
+  const firstNode = nodes[0] as SnapshotNode | undefined;
+  const firstNodeId = firstNode?.id ?? null;
+  const firstParentId = firstNode?.parentId ?? null;
+
+  // The first node's + its parent's raw bounding boxes, read live from the
+  // canvas. Selected as STABLE references (never a freshly-built object) so the
+  // `useSyncExternalStore` snapshot stays cached — the offset is derived below.
+  const nodeBox = useStore(store, (state) =>
+    firstNodeId ? (state.canvas.boundingBoxes[firstNodeId] ?? null) : null,
+  );
+  const parentBox = useStore(store, (state) =>
+    firstParentId ? (state.canvas.boundingBoxes[firstParentId] ?? null) : null,
+  );
+  // The first node's measured offset within its parent — the value the disabled
+  // X/Y fields show in relative flow.
+  const measuredOffset =
+    nodeBox && parentBox ? { left: nodeBox.x - parentBox.x, top: nodeBox.y - parentBox.y } : null;
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<PositionNode>) => {
+      if (!draft) begin();
+      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  // Toggling absolute positioning ON seeds each node from ITS OWN offset (so a
+  // multi-selection stays spread out, not stacked on the first node's spot) in a
+  // single undoable command.
+  const enableAbsolute = useCallback(() => {
+    const seeds = buildAbsolutePositionSeeds(
+      nodes,
+      targets,
+      store.getState().canvas.boundingBoxes,
+    );
+    if (seeds.length === 0) return;
+    dispatch(applyPerNodeLayoutStyle)({ nodes: seeds });
+  }, [dispatch, nodes, targets, store]);
+
+  const disableAbsolute = useCallback(() => {
+    dispatch(updateLayoutStyle)({
+      nodes: targets,
+      style: {
+        position: "relative",
+        left: "auto",
+        top: "auto",
+        right: "auto",
+        bottom: "auto",
+      },
+    });
+  }, [dispatch, targets]);
+
+  if (!node) return null;
+
+  const isAbsolute = node.position === "absolute";
+  const mixedPosition = mixedKeys.has("position");
+  const inputsEnabled = isAbsolute && !mixedPosition;
+
+  // Absolute + uniform: the stored offsets (auto → 0). Otherwise (relative or
+  // mixed) the fields are read-only, showing the measured parent offset.
+  const xValue = inputsEnabled ? offsetValue(node.left) : Math.round(measuredOffset?.left ?? 0);
+  const yValue = inputsEnabled ? offsetValue(node.top) : Math.round(measuredOffset?.top ?? 0);
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Position</PanelSectionTitle>
+        <PanelSectionHeaderActions>
+          <Button
+            aria-label="Absolute position"
+            aria-pressed={isAbsolute}
+            onClick={() => (isAbsolute ? disableAbsolute() : enableAbsolute())}
+            size="icon-sm"
+            variant={isAbsolute ? "default" : "ghost"}
+          >
+            <ScanIcon className="size-3.5" />
+          </Button>
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <div className="flex flex-row gap-2">
+          <TextInput
+            disabled={!inputsEnabled}
+            icon={<ArrowRightIcon className="size-3.5" />}
+            label="X"
+            mixed={inputsEnabled && mixedKeys.has("left")}
+            onChange={(value) => handleDraftChange({ left: Number(value) })}
+            onCommit={handleCommit}
+            type="number"
+            typeNumberStepIncrement={1}
+            validator={Schema.String}
+            value={xValue.toString()}
+          />
+          <TextInput
+            disabled={!inputsEnabled}
+            icon={<ArrowDownIcon className="size-3.5" />}
+            label="Y"
+            mixed={inputsEnabled && mixedKeys.has("top")}
+            onChange={(value) => handleDraftChange({ top: Number(value) })}
+            onCommit={handleCommit}
+            type="number"
+            typeNumberStepIncrement={1}
+            validator={Schema.String}
+            value={yValue.toString()}
+          />
+        </div>
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx
new file mode 100644
index 000000000..a43be80df
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx
@@ -0,0 +1,50 @@
+"use client";
+
+import { Switch } from "@voidhash/ui";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+
+interface SafeAreaSectionProps {
+  safeArea: {
+    top: boolean;
+    bottom: boolean;
+  };
+  onSafeAreaChange: (value: { top: boolean; bottom: boolean }) => void;
+}
+
+export function SafeAreaSection({ safeArea, onSafeAreaChange }: SafeAreaSectionProps) {
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Safe Area</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <div className="flex flex-col gap-3">
+          <div className="flex items-center justify-between">
+            <span className="text-sm">Top</span>
+            <Switch
+              checked={safeArea.top}
+              onCheckedChange={(checked) => {
+                onSafeAreaChange({ ...safeArea, top: checked });
+              }}
+            />
+          </div>
+          <div className="flex items-center justify-between">
+            <span className="text-sm">Bottom</span>
+            <Switch
+              checked={safeArea.bottom}
+              onCheckedChange={(checked) => {
+                onSafeAreaChange({ ...safeArea, bottom: checked });
+              }}
+            />
+          </div>
+        </div>
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx
new file mode 100644
index 000000000..cf174d6d5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx
@@ -0,0 +1,72 @@
+"use client";
+
+/**
+ * Legacy `Scroll` settings section for scrollView nodes. Exposes the two
+ * scrollView-only data flags as switches: `horizontal` (scroll axis; off =
+ * vertical) and `showsScrollIndicator` (native scrollbar visibility). Every
+ * write goes through the node-level `updateScrollViewNode` action, applied to
+ * EVERY selected scrollView so it works in a homogeneous multi-selection. A flag
+ * whose selected nodes disagree renders unchecked until toggled.
+ */
+import type { ScrollViewSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { Switch } from "@voidhash/ui";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+
+import { updateScrollViewNode } from "@/features/studio/paywalls/designer/state/actions";
+
+import { usePaywallDesignerActions } from "../../../state/designer-store";
+
+/** Reads whether every node shares the same flag value (else "mixed"). */
+function collapseFlag(values: boolean[]): boolean {
+  const first = values[0] ?? false;
+  return values.some((value) => value !== first) ? false : first;
+}
+
+export function ScrollViewSettingsSection({ nodes }: { nodes: ScrollViewSnapshotNode[] }) {
+  const dispatch = usePaywallDesignerActions();
+
+  if (nodes.length === 0) {
+    return null;
+  }
+
+  const horizontal = collapseFlag(nodes.map((node) => node.data.horizontal));
+  const showsScrollIndicator = collapseFlag(nodes.map((node) => node.data.showsScrollIndicator));
+
+  const setHorizontal = (checked: boolean) => {
+    for (const node of nodes) {
+      dispatch(updateScrollViewNode)({ id: node.id, updates: { horizontal: checked } });
+    }
+  };
+
+  const setShowsScrollIndicator = (checked: boolean) => {
+    for (const node of nodes) {
+      dispatch(updateScrollViewNode)({ id: node.id, updates: { showsScrollIndicator: checked } });
+    }
+  };
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Scroll</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <div className="flex flex-col gap-3">
+          <div className="flex items-center justify-between">
+            <span className="text-sm">Horizontal</span>
+            <Switch checked={horizontal} onCheckedChange={setHorizontal} />
+          </div>
+          <div className="flex items-center justify-between">
+            <span className="text-sm">Show scroll indicator</span>
+            <Switch checked={showsScrollIndicator} onCheckedChange={setShowsScrollIndicator} />
+          </div>
+        </div>
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx
new file mode 100644
index 000000000..2e41b1ea2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx
@@ -0,0 +1,151 @@
+"use client";
+
+import type { ShapeSnapshotNode, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { useCallback } from "react";
+import { useStore } from "zustand";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+  PanelSubSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { updateShapeNode } from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { getAlignItems, getFlexDirection } from "../../../state/utils/node-type-helpers";
+import { getNodeById } from "../../../state/utils/nodes";
+import { HeightInput } from "../inputs/height-input";
+import { WidthInput } from "../inputs/width-input";
+
+type ShapeLayoutNode = {
+  width: number | "auto";
+  height: number | "auto";
+  flex: number | undefined;
+  flexGrow: number;
+  flexShrink: number;
+  flexBasis: number | "auto";
+  alignSelf: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline";
+};
+
+export function ShapeLayoutSection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const firstNode: ShapeSnapshotNode | undefined =
+    nodes[0]?.type === "shape" ? nodes[0] : undefined;
+  if (!firstNode) return null;
+
+  const style = firstNode.data.style;
+  const node: ShapeLayoutNode = { ...style, flex: style.flex };
+  const parentId = firstNode.parentId;
+
+  const handleChange = useCallback(
+    (incoming: Partial<ShapeLayoutNode>) => {
+      dispatch(updateShapeNode)({
+        id: firstNode.id,
+        updates: { style: incoming },
+      });
+    },
+    [dispatch, firstNode.id],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<ShapeLayoutNode>) => {
+      if (!draft) begin();
+      dispatch(updateShapeNode)({
+        id: firstNode.id,
+        updates: { style: incoming },
+      });
+    },
+    [draft, begin, dispatch, firstNode.id],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Layout</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <DimensionsSubSection
+          handleCommit={handleCommit}
+          handleDraftChange={handleDraftChange}
+          node={node}
+          nodeId={firstNode.id}
+          onNodeChange={handleChange}
+          parentId={parentId ?? ""}
+        />
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
+
+type DimensionsSubSectionProps = {
+  node: ShapeLayoutNode;
+  nodeId: string;
+  onNodeChange: (style: Partial<ShapeLayoutNode>) => void;
+  handleDraftChange: (style: Partial<ShapeLayoutNode>) => void;
+  handleCommit: () => void;
+  parentId: string;
+};
+
+function DimensionsSubSection({
+  node,
+  nodeId,
+  onNodeChange,
+  handleDraftChange,
+  handleCommit,
+  parentId,
+}: DimensionsSubSectionProps) {
+  const store = usePaywallDesignerStore();
+  const parent = useStore(store, (state) => getNodeById(state, parentId));
+  const boundingBox = useStore(store, (state) => state.canvas.boundingBoxes[nodeId] ?? null);
+
+  const parentDirection = parent ? getFlexDirection(parent, "row") : "row";
+  const parentAlignItems = getAlignItems(parent, "stretch");
+
+  const computedWidth = boundingBox ? Math.round(boundingBox.width) : null;
+  const computedHeight = boundingBox ? Math.round(boundingBox.height) : null;
+
+  return (
+    <PanelSubSection>
+      <PanelSubSectionTitle>Dimensions</PanelSubSectionTitle>
+      <PanelSubSectionContent>
+        <div className="flex flex-row gap-2">
+          <WidthInput
+            computedWidth={computedWidth}
+            disabled={false}
+            node={node}
+            onCommit={handleCommit}
+            onDraftChange={handleDraftChange}
+            onNodeChange={onNodeChange}
+            parentAlignItems={parentAlignItems}
+            parentDirection={parentDirection}
+          />
+          <HeightInput
+            computedHeight={computedHeight}
+            disabled={false}
+            node={node}
+            onCommit={handleCommit}
+            onDraftChange={handleDraftChange}
+            onNodeChange={onNodeChange}
+            parentAlignItems={parentAlignItems}
+            parentDirection={parentDirection}
+          />
+        </div>
+      </PanelSubSectionContent>
+    </PanelSubSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx
new file mode 100644
index 000000000..3dd3c667d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx
@@ -0,0 +1,187 @@
+"use client";
+
+import type {
+  PathSnapshotNode,
+  ScreenSnapshotNode,
+  ScrollViewSnapshotNode,
+  ShapeSnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import { Button, cn } from "@voidhash/ui";
+import { SettingsIcon } from "lucide-react";
+import { useEffect, useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { StateManagerSheet } from "@/features/studio/paywalls/designer/components/state-manager";
+import type {
+  CRDTState,
+  CRDTVariable,
+} from "@/features/studio/paywalls/designer/components/state-manager/types";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import {
+  addNodeState,
+  removeNodeState,
+  setStateOverrideSelection,
+  updateNodeState,
+} from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+import { collectAncestorVariables } from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
+import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
+import type { DnfInput } from "@/features/studio/paywalls/designer/state/utils/replay";
+import { getSelectedStateIdForNode } from "@/features/studio/paywalls/designer/state/utils/state-overrides";
+
+type NodeWithStates =
+  | ViewSnapshotNode
+  | ScrollViewSnapshotNode
+  | ScreenSnapshotNode
+  | TextSnapshotNode
+  | ShapeSnapshotNode
+  | PathSnapshotNode;
+
+export interface StatesSectionProps {
+  nodes: NodeWithStates[];
+}
+
+export const StatesSection = ({ nodes }: StatesSectionProps) => {
+  const store = usePaywallDesignerStore();
+  const node = nodes[0]!;
+  const dispatch = usePaywallDesignerActions();
+  const nodeType = node.type;
+  const states: readonly CRDTState[] = node.data.states.flatMap((entry) =>
+    entry.value === undefined ? [] : [{ id: entry.id, value: entry.value }],
+  );
+  const [isSheetOpen, setIsSheetOpen] = useState(false);
+  const isSingleNodeSelection = nodes.length === 1;
+  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
+  const documentRoot = useStore(store, selectDocumentRoot);
+
+  const variables = useMemo((): readonly CRDTVariable[] => {
+    return collectAncestorVariables(documentRoot, node.id).map((variable) => ({
+      id: variable.id,
+      ownerLabel: variable.ownerNodeId === node.id ? undefined : variable.ownerName,
+      value: { name: variable.name, value: variable.value },
+    }));
+  }, [documentRoot, node.id]);
+
+  const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, node.id);
+
+  useEffect(() => {
+    if (!selectedStateId) {
+      return;
+    }
+    const hasSelectedState = states.some((state) => state.id === selectedStateId);
+    if (!hasSelectedState) {
+      dispatch(setStateOverrideSelection)({
+        nodeId: node.id,
+        stateId: null,
+      });
+    }
+  }, [dispatch, node.id, selectedStateId, states]);
+
+  const handleAddState = (name: string, condition: DnfInput) => {
+    dispatch(addNodeState)({ condition, name, nodeId: node.id, nodeType });
+  };
+
+  const handleRemoveState = (stateId: string) => {
+    dispatch(removeNodeState)({ nodeId: node.id, nodeType, stateId });
+  };
+
+  const handleUpdateStateName = (stateId: string, newName: string) => {
+    dispatch(updateNodeState)({ newName, nodeId: node.id, nodeType, stateId });
+  };
+
+  const handleUpdateStateCondition = (stateId: string, newCondition: DnfInput) => {
+    dispatch(updateNodeState)({
+      newCondition,
+      nodeId: node.id,
+      nodeType,
+      stateId,
+    });
+  };
+
+  const handleSelectDefault = () => {
+    if (!isSingleNodeSelection) return;
+    dispatch(setStateOverrideSelection)({
+      nodeId: node.id,
+      stateId: null,
+    });
+  };
+
+  const handleSelectState = (stateId: string) => {
+    if (!isSingleNodeSelection) return;
+    dispatch(setStateOverrideSelection)({
+      nodeId: node.id,
+      stateId,
+    });
+  };
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>States</PanelSectionTitle>
+        <PanelSectionHeaderActions>
+          <Button onClick={() => setIsSheetOpen(true)} size="icon-sm" variant="secondary">
+            <SettingsIcon />
+          </Button>
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      {states.length > 0 && (
+        <PanelSectionContent>
+          <div className="flex flex-col">
+            <button
+              className={cn(
+                "flex h-7 w-full items-center rounded-sm px-2 text-left font-medium text-xs",
+                selectedStateId === null
+                  ? "bg-accent text-accent-foreground"
+                  : "text-muted-foreground",
+                states.length > 0 && "rounded-b-none",
+              )}
+              disabled={!isSingleNodeSelection}
+              onClick={handleSelectDefault}
+              type="button"
+            >
+              Default
+            </button>
+            {states.map((state, index) => (
+              <button
+                className={cn(
+                  "flex h-7 w-full items-center rounded-sm px-2 text-left font-medium text-xs",
+                  selectedStateId === state.id
+                    ? "bg-accent text-accent-foreground"
+                    : "text-muted-foreground",
+                  index === 0 && "rounded-t-none",
+                )}
+                disabled={!isSingleNodeSelection}
+                key={state.id}
+                onClick={() => handleSelectState(state.id)}
+                type="button"
+              >
+                {state.value.name}
+              </button>
+            ))}
+          </div>
+        </PanelSectionContent>
+      )}
+      <StateManagerSheet
+        onAddState={handleAddState}
+        onOpenChange={setIsSheetOpen}
+        onRemoveState={handleRemoveState}
+        onUpdateStateCondition={handleUpdateStateCondition}
+        onUpdateStateName={handleUpdateStateName}
+        open={isSheetOpen}
+        states={states}
+        variables={variables}
+      />
+    </PanelSection>
+  );
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx
new file mode 100644
index 000000000..420e412c5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx
@@ -0,0 +1,85 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import { useCallback } from "react";
+
+import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { updateTextFillStyle } from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { OverrideResetAffordance } from "../components/override-reset-affordance";
+import { useStyleTargets } from "../utils/get-style-targets";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+
+export function TextFillSection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets, mixedKeys } = useStyleTargets(nodes);
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { begin, commit, discard } = useDesignerDraft(store);
+  const colorKeys = ["color"] as const;
+
+  const fill = style as { color: string } | null;
+  const showColorReset = overrideReset.isOverrideModeActive && overrideReset.hasOverride(colorKeys);
+
+  const handleColorChange = useCallback(
+    (value: string) => {
+      dispatch(updateTextFillStyle)({
+        nodes: targets,
+        style: { color: value },
+      });
+    },
+    [dispatch, targets],
+  );
+  const handleChange = useCallback(
+    (incoming: Partial<{ color: string }>) => {
+      dispatch(updateTextFillStyle)({
+        nodes: targets,
+        style: incoming,
+      });
+    },
+    [dispatch, targets],
+  );
+
+  if (!fill) return null;
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Fill</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <OverrideResetAffordance
+          label="text color"
+          onReset={() =>
+            handleChange(
+              overrideReset.buildResetPatch(colorKeys) as Partial<{
+                color: string;
+              }>,
+            )
+          }
+          show={showColorReset}
+        >
+          <ColorInput
+            mixed={mixedKeys.has("color")}
+            onChange={handleColorChange}
+            onCommit={commit}
+            onDiscard={discard}
+            onDragStart={begin}
+            value={fill.color}
+          />
+        </OverrideResetAffordance>
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx
new file mode 100644
index 000000000..7e0013326
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx
@@ -0,0 +1,303 @@
+"use client";
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import type { FontWeight, TextAlign } from "@voidhash/mimic-schema";
+import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import { Schema } from "effect";
+import {
+  AlignCenter,
+  AlignLeft,
+  AlignRight,
+  BookTypeIcon,
+  ChevronDownIcon,
+  TypeIcon,
+} from "lucide-react";
+import { useCallback } from "react";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionTitle,
+  PanelSubSection,
+  PanelSubSectionContent,
+  PanelSubSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { SelectInput } from "@/features/studio/paywalls/designer/components/ui/select-input";
+import { updateTypographyStyle } from "@/features/studio/paywalls/designer/state/actions";
+import {
+  usePaywallDesignerActions,
+  usePaywallDesignerStore,
+} from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { OverrideResetAffordance } from "../components/override-reset-affordance";
+import { TextInput } from "../inputs/text-input";
+import { useStyleTargets } from "../utils/get-style-targets";
+import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
+
+type TypographyNode = {
+  fontSize: number;
+  fontWeight: FontWeight;
+  textAlign: TextAlign;
+  lineHeight: number;
+  letterSpacing: number;
+  color: string;
+};
+
+const FONT_WEIGHT_OPTIONS: { value: FontWeight; label: string }[] = [
+  { label: "Thin", value: "100" },
+  { label: "Extra Light", value: "200" },
+  { label: "Light", value: "300" },
+  { label: "Regular", value: "400" },
+  { label: "Medium", value: "500" },
+  { label: "Semibold", value: "600" },
+  { label: "Bold", value: "700" },
+  { label: "Extra Bold", value: "800" },
+  { label: "Black", value: "900" },
+];
+
+const FONT_FAMILY_OPTIONS: { value: string; label: string }[] = [
+  { label: "Default", value: "geist-variable" },
+];
+
+export function TypographySection({ nodes }: { nodes: SnapshotNode[] }) {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const { style, targets, mixedKeys } = useStyleTargets(nodes);
+  const overrideReset = useStyleOverrideResetContext(nodes);
+  const { draft, begin, commit } = useDesignerDraft(store);
+
+  const node = style as TypographyNode | null;
+  const fontWeightKeys = ["fontWeight"] as const;
+  const fontSizeKeys = ["fontSize"] as const;
+  const lineHeightKeys = ["lineHeight"] as const;
+  const letterSpacingKeys = ["letterSpacing"] as const;
+  const textAlignKeys = ["textAlign"] as const;
+
+  const handleChange = useCallback(
+    (incoming: Partial<TypographyNode>) => {
+      dispatch(updateTypographyStyle)({ nodes: targets, style: incoming });
+    },
+    [dispatch, targets],
+  );
+
+  const handleDraftChange = useCallback(
+    (incoming: Partial<TypographyNode>) => {
+      if (!draft) begin();
+      dispatch(updateTypographyStyle)({ nodes: targets, style: incoming });
+    },
+    [draft, begin, dispatch, targets],
+  );
+
+  const handleCommit = useCallback(() => {
+    commit();
+  }, [commit]);
+
+  if (!node) return null;
+
+  const isLineHeightAuto = node.lineHeight === 0;
+  const showFontWeightReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(fontWeightKeys);
+  const showFontSizeReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(fontSizeKeys);
+  const showLineHeightReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(lineHeightKeys);
+  const showLetterSpacingReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(letterSpacingKeys);
+  const showTextAlignReset =
+    overrideReset.isOverrideModeActive && overrideReset.hasOverride(textAlignKeys);
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Typography</PanelSectionTitle>
+      </PanelSectionHeader>
+      <PanelSectionContent>
+        <div className="flex flex-col gap-2">
+          <SelectInput
+            disabled={true}
+            icon={<BookTypeIcon className="size-3.5" />}
+            label="Font Family"
+            onChange={() => {
+              // Do nothing
+            }}
+            options={FONT_FAMILY_OPTIONS}
+            placeholder="Default"
+            value={FONT_FAMILY_OPTIONS[0]?.value ?? ""}
+          />
+
+          <div className="flex flex-row gap-2">
+            <OverrideResetAffordance
+              className="flex-1"
+              label="font weight"
+              onReset={() =>
+                handleChange(
+                  overrideReset.buildResetPatch(fontWeightKeys) as Partial<TypographyNode>,
+                )
+              }
+              show={showFontWeightReset}
+            >
+              <SelectInput
+                icon={<div className="font-bold text-xs">W</div>}
+                label="Font Weight"
+                mixed={mixedKeys.has("fontWeight")}
+                onChange={(value) => handleChange({ fontWeight: value as FontWeight })}
+                options={FONT_WEIGHT_OPTIONS}
+                value={node.fontWeight}
+              />
+            </OverrideResetAffordance>
+            <OverrideResetAffordance
+              className="flex-1"
+              label="font size"
+              onReset={() =>
+                handleChange(overrideReset.buildResetPatch(fontSizeKeys) as Partial<TypographyNode>)
+              }
+              show={showFontSizeReset}
+            >
+              <TextInput
+                icon={<TypeIcon className="size-3.5" />}
+                label="Font Size"
+                mixed={mixedKeys.has("fontSize")}
+                minValue={1}
+                onChange={(value) => handleDraftChange({ fontSize: Number(value) })}
+                onCommit={handleCommit}
+                type="number"
+                typeNumberStepIncrement={1}
+                validator={Schema.String}
+                value={node.fontSize.toString()}
+              />
+            </OverrideResetAffordance>
+          </div>
+
+          <div className="flex flex-row gap-2">
+            <OverrideResetAffordance
+              className="flex-1"
+              label="line height"
+              onReset={() =>
+                handleChange(
+                  overrideReset.buildResetPatch(lineHeightKeys) as Partial<TypographyNode>,
+                )
+              }
+              show={showLineHeightReset}
+            >
+              <TextInput
+                disabled={isLineHeightAuto}
+                icon={<div className="text-xs">A</div>}
+                label="Line Height"
+                mixed={mixedKeys.has("lineHeight")}
+                minValue={0.5}
+                onChange={(value) => handleDraftChange({ lineHeight: Number(value) })}
+                onCommit={handleCommit}
+                trailing={
+                  <DropdownMenu>
+                    <DropdownMenuTrigger asChild>
+                      <Button
+                        className="bg-transparent pr-3 dark:bg-transparent"
+                        size="sm"
+                        variant="secondary"
+                      >
+                        {isLineHeightAuto ? (
+                          <div className="font-bold text-xs">Auto</div>
+                        ) : (
+                          <ChevronDownIcon className="size-3.5" />
+                        )}
+                      </Button>
+                    </DropdownMenuTrigger>
+                    <DropdownMenuContent>
+                      <DropdownMenuItem onSelect={() => handleChange({ lineHeight: 0 })}>
+                        Auto
+                      </DropdownMenuItem>
+                      <DropdownMenuItem
+                        onSelect={() =>
+                          handleChange({
+                            lineHeight: isLineHeightAuto ? 1.5 : node.lineHeight,
+                          })
+                        }
+                      >
+                        Fixed ({isLineHeightAuto ? "1.5" : node.lineHeight.toFixed(1)})
+                      </DropdownMenuItem>
+                    </DropdownMenuContent>
+                  </DropdownMenu>
+                }
+                type="number"
+                typeNumberStepIncrement={0.1}
+                validator={Schema.String}
+                value={isLineHeightAuto ? "Auto" : node.lineHeight.toString()}
+              />
+            </OverrideResetAffordance>
+            <OverrideResetAffordance
+              className="flex-1"
+              label="letter spacing"
+              onReset={() =>
+                handleChange(
+                  overrideReset.buildResetPatch(letterSpacingKeys) as Partial<TypographyNode>,
+                )
+              }
+              show={showLetterSpacingReset}
+            >
+              <TextInput
+                icon={<div className="font-mono text-xs">|A|</div>}
+                label="Letter Spacing"
+                mixed={mixedKeys.has("letterSpacing")}
+                onChange={(value) => handleDraftChange({ letterSpacing: Number(value) })}
+                onCommit={handleCommit}
+                type="number"
+                typeNumberStepIncrement={0.1}
+                validator={Schema.String}
+                value={node.letterSpacing.toString()}
+              />
+            </OverrideResetAffordance>
+          </div>
+        </div>
+
+        <PanelSubSection>
+          <PanelSubSectionTitle>Alignment</PanelSubSectionTitle>
+          <PanelSubSectionContent>
+            <div className="flex flex-row items-center gap-2">
+              <OverrideResetAffordance
+                label="text align"
+                onReset={() =>
+                  handleChange(
+                    overrideReset.buildResetPatch(textAlignKeys) as Partial<TypographyNode>,
+                  )
+                }
+                show={showTextAlignReset}
+              >
+                <ToggleGroup
+                  variant="outline"
+                  size="sm"
+                  onValueChange={(value) => {
+                    if (value) {
+                      handleChange({ textAlign: value as TextAlign });
+                    }
+                  }}
+                  type="single"
+                  value={mixedKeys.has("textAlign") ? undefined : node.textAlign}
+                >
+                  <ToggleGroupItem size="sm" className="min-w-7 px-2" value="left">
+                    <AlignLeft className="size-3.5" />
+                  </ToggleGroupItem>
+                  <ToggleGroupItem size="sm" className="min-w-7 px-2" value="center">
+                    <AlignCenter className="size-3.5" />
+                  </ToggleGroupItem>
+                  <ToggleGroupItem size="sm" className="min-w-7 px-2" value="right">
+                    <AlignRight className="size-3.5" />
+                  </ToggleGroupItem>
+                </ToggleGroup>
+              </OverrideResetAffordance>
+            </div>
+          </PanelSubSectionContent>
+        </PanelSubSection>
+      </PanelSectionContent>
+    </PanelSection>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx
new file mode 100644
index 000000000..473712291
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx
@@ -0,0 +1,150 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
+import type { Variable, VariableType } from "@voidhash/mimic-schema";
+import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
+import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
+import { MinusIcon } from "lucide-react";
+import { useEffect, useMemo, useState } from "react";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { listProductsOptions } from "@/features/studio/lib/tanstack-query/products";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { LiteralInput } from "@/features/studio/paywalls/designer/components/variables/literal-input";
+import { PopoverHeader } from "../../../components/ui/popover-header";
+
+function useProductName(productId: string | null): string | null {
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
+  const { user } = useAuth();
+
+  const project = useMemo(() => {
+    if (!organizationSlug || !projectSlug) return null;
+    return CurrentUser.getProjectBySlugs(user, organizationSlug as string, projectSlug as string);
+  }, [user, organizationSlug, projectSlug]);
+
+  const { data: products } = useQuery({
+    ...listProductsOptions({ projectId: project?.id ?? "" }),
+    enabled: !!project?.id && !!productId,
+  });
+
+  return useMemo(() => {
+    if (!productId || !products) return null;
+    return products.find((p) => p.id === productId)?.name ?? null;
+  }, [productId, products]);
+}
+
+function getValueDisplayText(value: VariableType, productName: string | null): string {
+  switch (value.key) {
+    case "string":
+      return value.value || '""';
+    case "number":
+      return String(value.value);
+    case "boolean":
+      return value.value ? "True" : "False";
+    case "product":
+      if (!value.value.productId) return "None";
+      return productName ?? "...";
+  }
+}
+
+export interface VariableRowProps {
+  variable: Variable;
+  onUpdateName: (newName: string) => void;
+  onUpdateValue: (newValue: VariableType) => void;
+  onRemove: () => void;
+  isOpen: boolean;
+  onOpenChange: (open: boolean) => void;
+}
+
+export function VariableRow({
+  variable,
+  onUpdateName,
+  onUpdateValue,
+  onRemove,
+  isOpen,
+  onOpenChange,
+}: VariableRowProps) {
+  // Local editing state - only persisted when popover closes
+  const [editName, setEditName] = useState(variable.name);
+  const [editValue, setEditValue] = useState<VariableType>(variable.value);
+
+  // Reset local state when popover opens or variable changes from outside
+  useEffect(() => {
+    if (isOpen) {
+      setEditName(variable.name);
+      setEditValue(variable.value);
+    }
+  }, [isOpen, variable.name, variable.value]);
+
+  const displayProductId =
+    variable.value.key === "product" ? (variable.value.value.productId ?? null) : null;
+  const productName = useProductName(displayProductId);
+  const valueDisplay = getValueDisplayText(variable.value, productName);
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      // Persist changes when closing
+      if (editName !== variable.name) {
+        onUpdateName(editName);
+      }
+      if (JSON.stringify(editValue) !== JSON.stringify(variable.value)) {
+        onUpdateValue(editValue);
+      }
+    }
+    onOpenChange(open);
+  };
+
+  return (
+    <div className="flex flex-row items-center gap-2">
+      <Popover onOpenChange={handleOpenChange} open={isOpen}>
+        <PopoverTrigger asChild>
+          <Button className="flex-1 justify-start gap-0 px-0" size="sm" variant="secondary">
+            <span className="flex-1 truncate border-r border-border px-2 text-left text-xs">
+              {variable.name || "Unnamed"}
+            </span>
+            <span className="flex-1 truncate px-2 text-left text-xs text-muted-foreground">
+              {valueDisplay}
+            </span>
+          </Button>
+        </PopoverTrigger>
+        <PopoverContent
+          align="start"
+          className="w-72 p-3"
+          onOpenAutoFocus={(e) => e.preventDefault()}
+          side="left"
+          sideOffset={4}
+        >
+          <PopoverHeader title="Variable" onClose={() => handleOpenChange(false)} />
+          <div className="flex flex-col gap-3">
+            <div className="flex flex-col gap-2">
+              <span className="text-muted-foreground text-xs font-medium">Name</span>
+              <InputGroup className="h-7 rounded-sm border-none dark:bg-input/60">
+                <InputGroupInput
+                  aria-label="Variable name"
+                  className="h-7 px-1 py-0 pl-2 text-xs"
+                  onChange={(e) => setEditName(e.target.value)}
+                  value={editName}
+                />
+              </InputGroup>
+            </div>
+
+            <div className="flex flex-col gap-2">
+              <span className="text-muted-foreground text-xs font-medium">Value</span>
+              <LiteralInput
+                className="flex flex-row gap-1"
+                onChange={setEditValue}
+                value={editValue}
+              />
+            </div>
+          </div>
+        </PopoverContent>
+      </Popover>
+
+      <Button onClick={onRemove} size="icon-sm" variant="secondary">
+        <MinusIcon />
+      </Button>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx
new file mode 100644
index 000000000..b860260cc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx
@@ -0,0 +1,221 @@
+"use client";
+
+import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
+import type {
+  PathSnapshotNode,
+  ScreenSnapshotNode,
+  ScrollViewSnapshotNode,
+  ShapeSnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { PlusIcon } from "lucide-react";
+import { useCallback, useEffect, useState } from "react";
+import { toast } from "sonner";
+
+import {
+  PanelSection,
+  PanelSectionContent,
+  PanelSectionHeader,
+  PanelSectionHeaderActions,
+  PanelSectionTitle,
+} from "@/features/studio/paywalls/designer/components/ui/panel-section";
+import { VARIABLE_TYPE_REGISTRY } from "@/features/studio/paywalls/designer/constants";
+import {
+  addVariable,
+  removeVariable,
+  updateVariable,
+} from "@/features/studio/paywalls/designer/state/actions";
+import { usePaywallDesignerActions } from "@/features/studio/paywalls/designer/state/designer-store";
+
+import { PendingVariableRow } from "./pending-variable-row";
+import { VariableRow } from "./variable-row";
+
+type NodeWithVariables =
+  | ViewSnapshotNode
+  | ScrollViewSnapshotNode
+  | ScreenSnapshotNode
+  | TextSnapshotNode
+  | ShapeSnapshotNode
+  | PathSnapshotNode;
+
+interface PendingVariable {
+  type: VariableTypeKey;
+  name: string;
+  value: VariableType;
+}
+
+export interface VariablesSectionProps {
+  nodes: NodeWithVariables[];
+}
+
+export const VariablesSection = ({ nodes }: VariablesSectionProps) => {
+  const node = nodes[0]!;
+  const dispatch = usePaywallDesignerActions();
+  const nodeType = node.type;
+  const variables = node.data.localVariables.flatMap((entry) =>
+    entry.value === undefined ? [] : [{ id: entry.id, value: entry.value }],
+  );
+  const existingVariableNames = new Set(variables.map((v) => v.value.name));
+
+  const [openVariableId, setOpenVariableId] = useState<string | null>(null);
+  const [pendingVariable, setPendingVariable] = useState<PendingVariable | null>(null);
+  const [isPendingPopoverOpen, setIsPendingPopoverOpen] = useState(false);
+
+  useEffect(() => {
+    if (pendingVariable && !isPendingPopoverOpen) {
+      const timer = setTimeout(() => {
+        setIsPendingPopoverOpen(true);
+      }, 200);
+      return () => clearTimeout(timer);
+    }
+    if (!pendingVariable) {
+      setIsPendingPopoverOpen(false);
+    }
+  }, [pendingVariable, isPendingPopoverOpen]);
+
+  const handleStartAdding = useCallback((type: VariableTypeKey) => {
+    const defaultValue = VARIABLE_TYPE_REGISTRY[type].defaultValue;
+    setPendingVariable({ type, name: "", value: defaultValue });
+    setIsPendingPopoverOpen(false);
+    setOpenVariableId(null);
+  }, []);
+
+  const handlePendingNameChange = useCallback((name: string) => {
+    setPendingVariable((prev) => (prev ? { ...prev, name } : null));
+  }, []);
+
+  const handlePendingValueChange = useCallback((value: VariableType) => {
+    setPendingVariable((prev) => (prev ? { ...prev, value } : null));
+  }, []);
+
+  const handlePendingOpenChange = useCallback(
+    (open: boolean) => {
+      if (!open && isPendingPopoverOpen && pendingVariable) {
+        const trimmedName = pendingVariable.name.trim();
+
+        if (!trimmedName) {
+          setPendingVariable(null);
+          return;
+        }
+
+        if (trimmedName.length > 32) {
+          toast.error("Variable name must be less than 32 characters");
+          setPendingVariable(null);
+          return;
+        }
+
+        if (existingVariableNames.has(trimmedName)) {
+          toast.error("A variable with this name already exists");
+          setPendingVariable(null);
+          return;
+        }
+
+        dispatch(addVariable)({
+          name: trimmedName,
+          nodeId: node.id,
+          nodeType,
+          type: pendingVariable.type,
+        });
+        setPendingVariable(null);
+      }
+    },
+    [isPendingPopoverOpen, pendingVariable, existingVariableNames, node.id, nodeType, dispatch],
+  );
+
+  const handleVariableOpenChange = useCallback((variableId: string, open: boolean) => {
+    if (open) {
+      setPendingVariable(null);
+      setOpenVariableId(variableId);
+    } else {
+      setOpenVariableId(null);
+    }
+  }, []);
+
+  const handleRemoveVariable = (variableId: string) => {
+    dispatch(removeVariable)({ nodeId: node.id, nodeType, variableId });
+  };
+
+  const handleUpdateVariableName = (variableId: string, newName: string) => {
+    dispatch(updateVariable)({
+      newName,
+      nodeId: node.id,
+      nodeType,
+      variableId,
+    });
+  };
+
+  const handleUpdateVariableValue = (variableId: string, value: VariableType) => {
+    dispatch(updateVariable)({
+      newValue: value,
+      nodeId: node.id,
+      nodeType,
+      variableId,
+    });
+  };
+
+  return (
+    <PanelSection>
+      <PanelSectionHeader>
+        <PanelSectionTitle>Variables</PanelSectionTitle>
+        <PanelSectionHeaderActions>
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button size="icon-sm" variant="secondary">
+                <PlusIcon />
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="end">
+              <DropdownMenuItem onClick={() => handleStartAdding("string")}>Text</DropdownMenuItem>
+              <DropdownMenuItem onClick={() => handleStartAdding("number")}>
+                Number
+              </DropdownMenuItem>
+              <DropdownMenuItem onClick={() => handleStartAdding("boolean")}>
+                Boolean (True / False)
+              </DropdownMenuItem>
+              <DropdownMenuSeparator />
+              <DropdownMenuItem onClick={() => handleStartAdding("product")}>
+                Product
+              </DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+        </PanelSectionHeaderActions>
+      </PanelSectionHeader>
+      {(variables.length > 0 || pendingVariable) && (
+        <PanelSectionContent>
+          <div className="flex flex-col gap-2">
+            {variables.map((variable) => (
+              <VariableRow
+                isOpen={openVariableId === variable.id}
+                key={variable.id}
+                onOpenChange={(open) => handleVariableOpenChange(variable.id, open)}
+                onRemove={() => handleRemoveVariable(variable.id)}
+                onUpdateName={(newName) => handleUpdateVariableName(variable.id, newName)}
+                onUpdateValue={(newValue) => handleUpdateVariableValue(variable.id, newValue)}
+                variable={variable.value}
+              />
+            ))}
+            {pendingVariable && (
+              <PendingVariableRow
+                isOpen={isPendingPopoverOpen}
+                onOpenChange={handlePendingOpenChange}
+                onRemove={() => setPendingVariable(null)}
+                onUpdateName={handlePendingNameChange}
+                onUpdateValue={handlePendingValueChange}
+                pendingVariable={pendingVariable}
+              />
+            )}
+          </div>
+        </PanelSectionContent>
+      )}
+    </PanelSection>
+  );
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.test.ts
new file mode 100644
index 000000000..63bb80f6d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.test.ts
@@ -0,0 +1,47 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { hexColorToRgbaString, rgbaStringToHexColor } from "./component-color";
+
+describe("hexColorToRgbaString", () => {
+  test("converts 6-digit hex with and without leading #", () => {
+    expect(hexColorToRgbaString("#FF0000")).toBe("rgba(255, 0, 0, 1)");
+    expect(hexColorToRgbaString("00ff00")).toBe("rgba(0, 255, 0, 1)");
+  });
+
+  test("expands 3-digit shorthand", () => {
+    expect(hexColorToRgbaString("#0af")).toBe("rgba(0, 170, 255, 1)");
+  });
+
+  test("reads the alpha channel from 8-digit hex", () => {
+    expect(hexColorToRgbaString("#FF000080")).toBe("rgba(255, 0, 0, 0.5)");
+  });
+
+  test("falls back to opaque white for invalid input", () => {
+    expect(hexColorToRgbaString("not-a-color")).toBe("rgba(255, 255, 255, 1)");
+    expect(hexColorToRgbaString("")).toBe("rgba(255, 255, 255, 1)");
+  });
+});
+
+describe("rgbaStringToHexColor", () => {
+  test("converts opaque rgba to 6-digit hex", () => {
+    expect(rgbaStringToHexColor("rgba(255, 0, 0, 1)")).toBe("#FF0000");
+    expect(rgbaStringToHexColor("rgb(0, 170, 255)")).toBe("#00AAFF");
+  });
+
+  test("keeps the alpha channel as an 8-digit hex", () => {
+    expect(rgbaStringToHexColor("rgba(255, 0, 0, 0.5)")).toBe("#FF000080");
+  });
+
+  test("falls back to white for invalid input", () => {
+    expect(rgbaStringToHexColor("#FF0000")).toBe("#FFFFFF");
+    expect(rgbaStringToHexColor("")).toBe("#FFFFFF");
+  });
+});
+
+describe("round-trips", () => {
+  test("hex → rgba → hex is stable", () => {
+    for (const hex of ["#000000", "#FFFFFF", "#1A2B3C", "#FF000080"]) {
+      expect(rgbaStringToHexColor(hexColorToRgbaString(hex))).toBe(hex);
+    }
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.ts
new file mode 100644
index 000000000..1601017cf
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/component-color.ts
@@ -0,0 +1,53 @@
+import { parseRgba, rgbToHex, rgbaToString } from "../../../components/ui/color-picker/color-utils";
+
+const HEX_COLOR_REGEX = /^#?([0-9a-fA-F]{3}|[0-9a-fA-F]{4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;
+
+const FALLBACK_RGBA = "rgba(255, 255, 255, 1)";
+const FALLBACK_HEX = "#FFFFFF";
+
+function expandShortHex(hex: string): string {
+  return hex
+    .split("")
+    .map((char) => char + char)
+    .join("");
+}
+
+/**
+ * Converts a stored/manifest hex color (`#RGB`, `#RGBA`, `#RRGGBB` or
+ * `#RRGGBBAA`, leading `#` optional) into the `rgba()` string `ColorInput`
+ * edits. Unparseable input falls back to opaque white, matching the
+ * `ColorInput` parser's behavior.
+ */
+export function hexColorToRgbaString(hex: string): string {
+  const match = HEX_COLOR_REGEX.exec(hex.trim());
+  if (!match?.[1]) {
+    return FALLBACK_RGBA;
+  }
+  const digits = match[1].length <= 4 ? expandShortHex(match[1]) : match[1];
+  const r = Number.parseInt(digits.slice(0, 2), 16);
+  const g = Number.parseInt(digits.slice(2, 4), 16);
+  const b = Number.parseInt(digits.slice(4, 6), 16);
+  const a = digits.length === 8 ? Number.parseInt(digits.slice(6, 8), 16) / 255 : 1;
+  return rgbaToString(r, g, b, Math.round(a * 100) / 100);
+}
+
+/**
+ * Converts the `rgba()` string emitted by `ColorInput` back to the hex form
+ * component props store (`#RRGGBB`, or `#RRGGBBAA` when the alpha channel is
+ * below 1). Unparseable input falls back to opaque white.
+ */
+export function rgbaStringToHexColor(rgba: string): string {
+  if (!rgba.trim().startsWith("rgb")) {
+    return FALLBACK_HEX;
+  }
+  const { r, g, b, a } = parseRgba(rgba);
+  const hex = `#${rgbToHex(r, g, b)}`;
+  if (a >= 1) {
+    return hex;
+  }
+  const alpha = Math.round(a * 255)
+    .toString(16)
+    .padStart(2, "0")
+    .toUpperCase();
+  return `${hex}${alpha}`;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.test.ts
new file mode 100644
index 000000000..ebe3b68e5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.test.ts
@@ -0,0 +1,102 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import { getStyleTargetsForNodes } from "./style-targets-core";
+
+function createStatefulViewNode(params: {
+  id: string;
+  baseColor: string;
+  stateColor: string;
+  width: number;
+}): SnapshotNode {
+  return {
+    children: [],
+    data: {
+      interactions: [],
+      linkedVariables: [],
+      localVariables: [],
+      name: params.id,
+      states: [
+        {
+          id: "state-1",
+          pos: "a0",
+          value: {
+            condition: {
+              type: "or",
+              value: [],
+            },
+            id: `state-value-${params.id}`,
+            name: "Hovered",
+            overrides: {
+              actions: [],
+              style: {
+                backgroundColor: params.stateColor,
+              },
+            },
+          },
+        },
+      ],
+      style: {
+        backgroundColor: params.baseColor,
+        width: params.width,
+      },
+    },
+    id: params.id,
+    parentId: "root",
+    pos: "a0",
+    type: "view",
+  } as unknown as SnapshotNode;
+}
+
+describe("getStyleTargetsForNodes", () => {
+  test("uses each node's selected state for effective style and mixed keys", () => {
+    const nodeA = createStatefulViewNode({
+      baseColor: "rgba(255, 0, 0, 1)",
+      id: "node-a",
+      stateColor: "rgba(0, 255, 0, 1)",
+      width: 100,
+    });
+    const nodeB = createStatefulViewNode({
+      baseColor: "rgba(0, 0, 255, 1)",
+      id: "node-b",
+      stateColor: "rgba(255, 255, 0, 1)",
+      width: 100,
+    });
+
+    const result = getStyleTargetsForNodes([nodeA, nodeB], {
+      "node-a": "state-1",
+      "node-b": "state-1",
+    });
+
+    expect(result.style?.backgroundColor).toBe("rgba(0, 255, 0, 1)");
+    expect(result.mixedKeys.has("backgroundColor")).toBe(true);
+    expect(result.mixedKeys.has("width")).toBe(false);
+    expect(result.targets).toEqual([
+      { nodeId: "node-a", nodeType: "view" },
+      { nodeId: "node-b", nodeType: "view" },
+    ]);
+  });
+
+  test("returns non-mixed keys when effective styles match", () => {
+    const nodeA = createStatefulViewNode({
+      baseColor: "rgba(255, 0, 0, 1)",
+      id: "node-a",
+      stateColor: "rgba(0, 255, 0, 1)",
+      width: 100,
+    });
+    const nodeB = createStatefulViewNode({
+      baseColor: "rgba(0, 0, 255, 1)",
+      id: "node-b",
+      stateColor: "rgba(0, 255, 0, 1)",
+      width: 100,
+    });
+
+    const result = getStyleTargetsForNodes([nodeA, nodeB], {
+      "node-a": "state-1",
+      "node-b": "state-1",
+    });
+
+    expect(result.mixedKeys.has("backgroundColor")).toBe(false);
+    expect(result.mixedKeys.has("width")).toBe(false);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts
new file mode 100644
index 000000000..bcb0f2b0a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts
@@ -0,0 +1,27 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../../../state/designer-store";
+import { selectRenderRoot } from "../../../state/utils/document-root";
+import { findNodeById } from "../../../state/utils/tree";
+import { getStyleTargetsForNodes, type StyleTargetsResult } from "./style-targets-core";
+
+export { getStyleTargetsForNodes, type StyleTargetsResult };
+
+export function useStyleTargets(nodes: SnapshotNode[]): StyleTargetsResult {
+  const store = usePaywallDesignerStore();
+  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
+
+  // Re-resolve the selected nodes from the draft-aware render root so an
+  // in-progress deferred edit (a style-panel drag runs inside a mimic draft)
+  // reflects live in the panel's own controls — gradient stop bar, stop
+  // position inputs, swatches — matching the canvas. Subscribing to
+  // `selectRenderRoot` also re-renders the panel on each draft edit. With no
+  // active draft this is the committed snapshot and resolves the same nodes.
+  const renderRoot = useStore(store, selectRenderRoot);
+  const resolvedNodes = nodes.map(
+    (node) => findNodeById<SnapshotNode>(renderRoot, node.id) ?? node,
+  );
+
+  return getStyleTargetsForNodes(resolvedNodes, stateOverrideSelection);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.test.ts
new file mode 100644
index 000000000..d375b2e8b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.test.ts
@@ -0,0 +1,42 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import type { GradientStop } from "../../../state/actions/features/fill-style-actions";
+import { nextStopPosition } from "./gradient-stops";
+
+function stops(...positions: number[]): GradientStop[] {
+  return positions.map((position) => ({ color: "rgba(0, 0, 0, 1)", position }));
+}
+
+describe("nextStopPosition", () => {
+  test("returns 0.5 with no stops", () => {
+    expect(nextStopPosition([])).toBe(0.5);
+  });
+
+  test("splits the largest interior gap", () => {
+    expect(nextStopPosition(stops(0, 0.2, 1))).toBeCloseTo(0.6, 10);
+  });
+
+  test("uses the trailing edge span [last, 1] when it is largest", () => {
+    // Regression: interior-only scan inserted at 0.85 instead of the true
+    // largest span [0, 0.8], whose midpoint is 0.4.
+    expect(nextStopPosition(stops(0.8, 0.9))).toBeCloseTo(0.4, 10);
+  });
+
+  test("uses the leading edge span [0, first] when it is largest", () => {
+    expect(nextStopPosition(stops(0.7, 0.85, 1))).toBeCloseTo(0.35, 10);
+  });
+
+  test("degenerate all-equal positions resolve via an edge span", () => {
+    // Both at 0.5: largest span is the tie [0, 0.5] (first-wins), midpoint 0.25.
+    expect(nextStopPosition(stops(0.5, 0.5))).toBeCloseTo(0.25, 10);
+  });
+
+  test("always returns a finite position within [0, 1]", () => {
+    for (const s of [stops(0), stops(1), stops(0, 1), stops(0.3, 0.3, 0.3)]) {
+      const pos = nextStopPosition(s);
+      expect(Number.isFinite(pos)).toBe(true);
+      expect(pos).toBeGreaterThanOrEqual(0);
+      expect(pos).toBeLessThanOrEqual(1);
+    }
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.ts
new file mode 100644
index 000000000..0e0798e86
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/gradient-stops.ts
@@ -0,0 +1,27 @@
+import type { GradientStop } from "../../../state/actions/features/fill-style-actions";
+
+/**
+ * Chooses the position for a newly inserted gradient stop: the midpoint of the
+ * largest gap across the clamped `[0, 1]` domain, including the two edge spans
+ * `[0, firstStop]` and `[lastStop, 1]` so a stop can land past the outermost
+ * stops. Falls back to `0.5` when there are no stops. With all stops at the
+ * same position the largest span is always an edge span, so the result is a
+ * real midpoint that never duplicates an existing stop.
+ */
+export function nextStopPosition(stops: GradientStop[]): number {
+  if (stops.length === 0) return 0.5;
+  const sorted = [...stops].map((s) => s.position).sort((a, b) => a - b);
+  const bounds = [0, ...sorted, 1];
+  let bestGap = -1;
+  let bestPos = 0.5;
+  for (let i = 0; i < bounds.length - 1; i++) {
+    const a = bounds[i]!;
+    const b = bounds[i + 1]!;
+    const gap = b - a;
+    if (gap > bestGap) {
+      bestGap = gap;
+      bestPos = a + gap / 2;
+    }
+  }
+  return bestPos;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/seed-absolute-position.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/seed-absolute-position.ts
new file mode 100644
index 000000000..456391ec0
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/seed-absolute-position.ts
@@ -0,0 +1,75 @@
+import type {
+  ScrollViewSnapshotNode,
+  SnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+
+import type { PerNodeLayoutStyle } from "../../../state/actions";
+import type { StyleTarget } from "../../../state/actions/features/style-action-helpers";
+import { getOffsetWithinParent, type BoundingBox } from "../../../state/utils/bounding-box";
+
+/** A numeric style value, else `null` (e.g. `"auto"` or absent). */
+function numberOrNull(value: unknown): number | null {
+  return typeof value === "number" ? value : null;
+}
+
+/** The absolutely-positionable node types: all carry the same 5 inset fields. */
+type PositionableNode = ViewSnapshotNode | ScrollViewSnapshotNode | TextSnapshotNode;
+
+function isPositionableNode(node: SnapshotNode): node is PositionableNode {
+  return node.type === "view" || node.type === "scrollView" || node.type === "text";
+}
+
+/**
+ * Builds the per-node `{position: "absolute", left, top}` patches for toggling
+ * absolute positioning ON across a (possibly multi-node) view/scrollView/text
+ * selection.
+ *
+ * Each node is seeded from ITS OWN offset — its current numeric `left`/`top`
+ * when set, else its measured `getOffsetWithinParent` (using its OWN parent,
+ * which may differ per node), else `0`/`0`. Seeding per node keeps every node
+ * where it visually sits, rather than stacking a multi-selection onto the first
+ * node's offset. Non-positionable (non view/scrollView/text) or missing-target
+ * nodes are skipped.
+ *
+ * @param nodes - the selected snapshot nodes (position-order aligned with `targets`).
+ * @param targets - the style targets for those nodes (`nodeId` keyed).
+ * @param boundingBoxes - canvas bounding boxes for the offset fallback.
+ */
+export function buildAbsolutePositionSeeds(
+  nodes: readonly SnapshotNode[],
+  targets: readonly StyleTarget[],
+  boundingBoxes: Record<string, BoundingBox>,
+): PerNodeLayoutStyle[] {
+  const targetById = new Map(targets.map((target) => [target.nodeId, target]));
+  const seeds: PerNodeLayoutStyle[] = [];
+
+  for (const node of nodes) {
+    if (!isPositionableNode(node)) {
+      continue;
+    }
+    const target = targetById.get(node.id);
+    if (!target) {
+      continue;
+    }
+    const style = node.data.style;
+    const styleLeft = numberOrNull(style.left);
+    const styleTop = numberOrNull(style.top);
+    const fallback =
+      (styleLeft === null || styleTop === null) && node.parentId
+        ? getOffsetWithinParent(node.id, node.parentId, boundingBoxes)
+        : null;
+
+    seeds.push({
+      target,
+      style: {
+        position: "absolute",
+        left: styleLeft ?? fallback?.left ?? 0,
+        top: styleTop ?? fallback?.top ?? 0,
+      },
+    });
+  }
+
+  return seeds;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.test.ts
new file mode 100644
index 000000000..2338e2363
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.test.ts
@@ -0,0 +1,192 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import { createStyleOverrideResetContext } from "./style-override-reset";
+
+function createStatefulViewNode(params: {
+  id: string;
+  baseColor: string;
+  stateColor: string;
+  baseWidth: number;
+  stateId?: string;
+}): SnapshotNode {
+  const stateId = params.stateId ?? "state-1";
+  return {
+    children: [],
+    data: {
+      interactions: [],
+      linkedVariables: [],
+      localVariables: [],
+      name: params.id,
+      states: [
+        {
+          id: stateId,
+          pos: "a0",
+          value: {
+            condition: { type: "or", value: [] },
+            id: `state-value-${params.id}`,
+            name: "Hovered",
+            overrides: {
+              actions: [],
+              style: {
+                backgroundColor: params.stateColor,
+                width: params.baseWidth + 10,
+              },
+            },
+          },
+        },
+      ],
+      style: {
+        backgroundColor: params.baseColor,
+        width: params.baseWidth,
+        height: 40,
+      },
+    },
+    id: params.id,
+    parentId: "root",
+    pos: "a0",
+    type: "view",
+  } as unknown as SnapshotNode;
+}
+
+function createStatefulShapeNode(params: { id: string; stateId?: string }): SnapshotNode {
+  const stateId = params.stateId ?? "state-1";
+  return {
+    children: [],
+    data: {
+      linkedVariables: [],
+      localVariables: [],
+      name: params.id,
+      states: [
+        {
+          id: stateId,
+          pos: "a0",
+          value: {
+            condition: { type: "or", value: [] },
+            id: `state-value-${params.id}`,
+            name: "Hovered",
+            overrides: {
+              style: {
+                width: 250,
+              },
+            },
+          },
+        },
+      ],
+      style: {
+        width: 100,
+        height: 100,
+      },
+    },
+    id: params.id,
+    parentId: "root",
+    pos: "a0",
+    type: "shape",
+  } as unknown as SnapshotNode;
+}
+
+describe("createStyleOverrideResetContext", () => {
+  test("is active for single node with selected non-default state", () => {
+    const node = createStatefulViewNode({
+      id: "node-1",
+      baseColor: "rgba(255, 0, 0, 1)",
+      stateColor: "rgba(0, 255, 0, 1)",
+      baseWidth: 100,
+    });
+
+    const result = createStyleOverrideResetContext([node], {
+      "node-1": "state-1",
+    });
+
+    expect(result.isOverrideModeActive).toBe(true);
+    expect(result.hasOverride(["backgroundColor"])).toBe(true);
+    expect(result.hasOverride(["height"])).toBe(false);
+  });
+
+  test("is inactive for default state selection", () => {
+    const node = createStatefulViewNode({
+      id: "node-1",
+      baseColor: "rgba(255, 0, 0, 1)",
+      stateColor: "rgba(0, 255, 0, 1)",
+      baseWidth: 100,
+    });
+
+    const result = createStyleOverrideResetContext([node], {
+      "node-1": null,
+    });
+
+    expect(result.isOverrideModeActive).toBe(false);
+    expect(result.hasOverride(["backgroundColor"])).toBe(false);
+  });
+
+  test("is inactive for multi-node selection", () => {
+    const nodeA = createStatefulViewNode({
+      id: "node-a",
+      baseColor: "rgba(255, 0, 0, 1)",
+      stateColor: "rgba(0, 255, 0, 1)",
+      baseWidth: 100,
+    });
+    const nodeB = createStatefulViewNode({
+      id: "node-b",
+      baseColor: "rgba(255, 0, 0, 1)",
+      stateColor: "rgba(0, 255, 0, 1)",
+      baseWidth: 120,
+    });
+
+    const result = createStyleOverrideResetContext([nodeA, nodeB], {
+      "node-a": "state-1",
+      "node-b": "state-1",
+    });
+
+    expect(result.isOverrideModeActive).toBe(false);
+  });
+
+  test("is inactive for non-runtime state-capable nodes (shape/path)", () => {
+    const node = createStatefulShapeNode({ id: "shape-1" });
+    const result = createStyleOverrideResetContext([node], {
+      "shape-1": "state-1",
+    });
+
+    expect(result.isOverrideModeActive).toBe(false);
+    expect(result.hasOverride(["width"])).toBe(false);
+  });
+
+  test("builds reset patches from base style for single and compound keys", () => {
+    const node = createStatefulViewNode({
+      id: "node-1",
+      baseColor: "rgba(10, 10, 10, 1)",
+      stateColor: "rgba(0, 255, 0, 1)",
+      baseWidth: 320,
+    });
+
+    const result = createStyleOverrideResetContext([node], {
+      "node-1": "state-1",
+    });
+
+    expect(result.buildResetPatch(["backgroundColor"])).toEqual({
+      backgroundColor: "rgba(10, 10, 10, 1)",
+    });
+
+    expect(result.buildResetPatch(["backgroundColor", "width"])).toEqual({
+      backgroundColor: "rgba(10, 10, 10, 1)",
+      width: 320,
+    });
+  });
+
+  test("includes undefined base values in reset patches", () => {
+    const node = createStatefulViewNode({
+      id: "node-1",
+      baseColor: "rgba(10, 10, 10, 1)",
+      stateColor: "rgba(0, 255, 0, 1)",
+      baseWidth: 320,
+    });
+
+    const result = createStyleOverrideResetContext([node], {
+      "node-1": "state-1",
+    });
+
+    expect(result.buildResetPatch(["lineHeight"])).toEqual({
+      lineHeight: undefined,
+    });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.ts
new file mode 100644
index 000000000..45160c99a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-override-reset.ts
@@ -0,0 +1,76 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import type { StateOverrideSelection } from "../../../state/designer-store-state";
+import {
+  getSelectedStateIdForNode,
+  getStateById,
+  isStateCapableNode,
+  stateStyleOverridesToRecord,
+} from "../../../state/utils/state-overrides";
+
+const EMPTY_KEYS = new Set<string>();
+const EMPTY_STYLE: Readonly<Record<string, unknown>> = {};
+
+export interface StyleOverrideResetContext {
+  isOverrideModeActive: boolean;
+  overriddenKeys: Set<string>;
+  baseStyle: Readonly<Record<string, unknown>>;
+  hasOverride: (keys: readonly string[]) => boolean;
+  buildResetPatch: (keys: readonly string[]) => Record<string, unknown>;
+}
+
+function createInactiveContext(): StyleOverrideResetContext {
+  return {
+    isOverrideModeActive: false,
+    overriddenKeys: EMPTY_KEYS,
+    baseStyle: EMPTY_STYLE,
+    hasOverride: () => false,
+    buildResetPatch: () => ({}),
+  };
+}
+
+export function createStyleOverrideResetContext(
+  nodes: SnapshotNode[],
+  stateOverrideSelection: StateOverrideSelection,
+): StyleOverrideResetContext {
+  if (nodes.length !== 1) {
+    return createInactiveContext();
+  }
+
+  const node = nodes[0];
+  if (!(node && isStateCapableNode(node))) {
+    return createInactiveContext();
+  }
+
+  const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, node.id);
+  if (!selectedStateId) {
+    return createInactiveContext();
+  }
+
+  const selectedState = getStateById(node, selectedStateId);
+  if (!selectedState) {
+    return createInactiveContext();
+  }
+
+  const overriddenKeys = new Set<string>(Object.keys(stateStyleOverridesToRecord(selectedState)));
+
+  const baseStyle: Record<string, unknown> = { ...node.data.style };
+  const hasOverride = (keys: readonly string[]): boolean =>
+    keys.some((key) => overriddenKeys.has(key));
+
+  const buildResetPatch = (keys: readonly string[]): Record<string, unknown> => {
+    const patch: Record<string, unknown> = {};
+    for (const key of keys) {
+      patch[key] = baseStyle[key];
+    }
+    return patch;
+  };
+
+  return {
+    isOverrideModeActive: true,
+    overriddenKeys,
+    baseStyle,
+    hasOverride,
+    buildResetPatch,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-targets-core.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-targets-core.ts
new file mode 100644
index 000000000..ca42e6eef
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-targets-core.ts
@@ -0,0 +1,100 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { isStatefulNodeType } from "../../../state/actions";
+import type { StyleTarget } from "../../../state/actions/features/style-action-helpers";
+import type { StateOverrideSelection } from "../../../state/designer-store-state";
+import {
+  getSelectedStateIdForNode,
+  isStateCapableNode,
+  resolveEffectiveStyle,
+} from "../../../state/utils/state-overrides";
+
+function deepEqual(a: unknown, b: unknown): boolean {
+  if (a === b) return true;
+  if (a == null || b == null) return false;
+  if (typeof a !== typeof b) return false;
+  if (typeof a !== "object") return false;
+
+  if (Array.isArray(a)) {
+    if (!Array.isArray(b) || a.length !== b.length) return false;
+    return a.every((value, index) => deepEqual(value, b[index]));
+  }
+
+  const objectA = a as Record<string, unknown>;
+  const objectB = b as Record<string, unknown>;
+  const keysA = Object.keys(objectA);
+  const keysB = Object.keys(objectB);
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every((key) => deepEqual(objectA[key], objectB[key]));
+}
+
+function getEffectiveNodeStyle(
+  node: SnapshotNode,
+  selection: StateOverrideSelection,
+): Record<string, unknown> | null {
+  if (isStateCapableNode(node)) {
+    return resolveEffectiveStyle(node, getSelectedStateIdForNode(selection, node.id));
+  }
+  if (node.type === "shape" || node.type === "path") {
+    return { ...node.data.style };
+  }
+  return null;
+}
+
+function getMixedStyleKeys(styles: Array<Record<string, unknown>>): Set<string> {
+  if (styles.length <= 1) {
+    return new Set<string>();
+  }
+
+  const firstStyle = styles[0] ?? {};
+  const allKeys = new Set<string>(Object.keys(firstStyle));
+  for (let index = 1; index < styles.length; index++) {
+    const style = styles[index];
+    if (!style) {
+      continue;
+    }
+    for (const key of Object.keys(style)) {
+      allKeys.add(key);
+    }
+  }
+
+  const mixedKeys = new Set<string>();
+  for (const key of allKeys) {
+    const firstValue = firstStyle[key];
+    const hasDifference = styles.some((style) => !deepEqual(style[key], firstValue));
+    if (hasDifference) {
+      mixedKeys.add(key);
+    }
+  }
+  return mixedKeys;
+}
+
+export interface StyleTargetsResult {
+  style: Record<string, unknown> | null;
+  targets: StyleTarget[];
+  mixedKeys: Set<string>;
+}
+
+export function getStyleTargetsForNodes(
+  nodes: SnapshotNode[],
+  stateOverrideSelection: StateOverrideSelection,
+): StyleTargetsResult {
+  const firstNode = nodes[0];
+  if (!firstNode || getEffectiveNodeStyle(firstNode, stateOverrideSelection) === null) {
+    return { style: null, targets: [], mixedKeys: new Set() };
+  }
+
+  const targets: StyleTarget[] = nodes.flatMap((node) =>
+    isStatefulNodeType(node.type) ? [{ nodeId: node.id, nodeType: node.type }] : [],
+  );
+
+  const effectiveStyles = nodes
+    .map((node) => getEffectiveNodeStyle(node, stateOverrideSelection))
+    .filter((style): style is Record<string, unknown> => style !== null);
+
+  return {
+    style: effectiveStyles[0] ?? null,
+    targets,
+    mixedKeys: getMixedStyleKeys(effectiveStyles),
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/use-style-override-reset-context.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/use-style-override-reset-context.ts
new file mode 100644
index 000000000..03c32f019
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/use-style-override-reset-context.ts
@@ -0,0 +1,15 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useStore } from "zustand/react";
+
+import { usePaywallDesignerStore } from "../../../state/designer-store";
+import {
+  createStyleOverrideResetContext,
+  type StyleOverrideResetContext,
+} from "./style-override-reset";
+
+export function useStyleOverrideResetContext(nodes: SnapshotNode[]): StyleOverrideResetContext {
+  const store = usePaywallDesignerStore();
+  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
+
+  return createStyleOverrideResetContext(nodes, stateOverrideSelection);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
new file mode 100644
index 000000000..76c5ff27d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
@@ -0,0 +1,230 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { useNavigate, useParams } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Logo,
+} from "@voidhash/ui";
+import {
+  ChevronDownIcon,
+  CodeIcon,
+  Loader2Icon,
+  PanelLeftClose,
+  PanelLeftOpen,
+  SparklesIcon,
+} from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import { useStore } from "zustand/react";
+
+import { env } from "@/features/studio/lib/env";
+import {
+  createPaywallReleaseOptions,
+  publishPaywallReleaseOptions,
+} from "@/features/studio/lib/tanstack-query/paywalls";
+import { queryKeys } from "@/features/studio/lib/tanstack-query/query-keys";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+
+import { ModeToggle } from "../components/ui/mode-toggle";
+import { PublishConfirmationDialog } from "../components/publish-confirmation-dialog";
+import { toggleAiPanel } from "../state/actions/ai-panel-actions";
+import { toggleDevMode } from "../state/actions/dev-mode-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import { PANEL_DIMENSIONS } from "./constants";
+
+const isDevelopment = env.VITE_APP_ENV === "development";
+
+/**
+ * Subtle connection indicator shown while the transport is disconnected
+ * post-ready (reconnect loop running). Reflects unsaved local edits while
+ * offline via the document's pending-transaction count.
+ */
+function ConnectionStatusPill() {
+  const store = usePaywallDesignerStore();
+  const isConnected = useStore(store, (state) => state.mimic.isConnected);
+  const hasPendingChanges = useStore(store, (state) => state.mimic.pendingCount > 0);
+
+  if (isConnected) {
+    return null;
+  }
+  return (
+    <span className="rounded-full bg-muted px-2 py-0.5 text-xs text-muted-foreground">
+      {hasPendingChanges ? "Offline — changes pending" : "Reconnecting…"}
+    </span>
+  );
+}
+
+export function TopPanel() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const {
+    organizationSlug,
+    projectSlug,
+    id: paywallId,
+  } = useParams({
+    strict: false,
+  });
+
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+  const devModeEnabled = useStore(store, (state) => state.devMode.enabled);
+  const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
+  const aiEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAi.key);
+
+  const [showPublishDialog, setShowPublishDialog] = useState(false);
+  const [releaseInfo, setReleaseInfo] = useState<
+    | {
+        releaseId: string;
+        version: number;
+      }
+    | undefined
+  >();
+  const [publishedUrl, setPublishedUrl] = useState<string | undefined>();
+
+  const { mutate: createRelease, isPending: isCreatingRelease } = useMutation({
+    ...createPaywallReleaseOptions(),
+    onSuccess: (data) => {
+      setReleaseInfo({ releaseId: data.releaseId, version: data.version });
+      setShowPublishDialog(true);
+    },
+    onError: () => {
+      toast.error("Failed to create release");
+    },
+  });
+
+  const { mutate: publishRelease, isPending: isPublishing } = useMutation({
+    ...publishPaywallReleaseOptions(),
+    onSuccess: (data) => {
+      toast.success("Paywall published successfully");
+      setPublishedUrl(data.htmlUrl);
+      // Invalidate draft release query so UI reflects the published state
+      if (paywallId) {
+        queryClient.invalidateQueries({
+          queryKey: queryKeys.paywall.draft({ paywallId }),
+        });
+      }
+    },
+    onError: () => {
+      toast.error("Failed to publish paywall");
+      setShowPublishDialog(false);
+      setReleaseInfo(undefined);
+      setPublishedUrl(undefined);
+    },
+  });
+
+  const handleGoToDashboard = () => {
+    navigate({
+      params: {
+        organizationSlug: organizationSlug ?? "",
+        projectSlug: projectSlug ?? "",
+      },
+      to: "/studio/$organizationSlug/$projectSlug",
+    });
+  };
+
+  const handlePublishClick = () => {
+    if (!paywallId) return;
+    setPublishedUrl(undefined);
+    createRelease({ paywallId });
+  };
+
+  const handleDialogClose = (open: boolean) => {
+    setShowPublishDialog(open);
+    if (!open) {
+      setReleaseInfo(undefined);
+      setPublishedUrl(undefined);
+    }
+  };
+
+  const handleConfirmPublish = () => {
+    if (!releaseInfo) return;
+    publishRelease({ releaseId: releaseInfo.releaseId });
+  };
+
+  const handleDevModeToggle = () => {
+    dispatch(toggleDevMode)({});
+  };
+
+  const handleAiPanelToggle = () => {
+    dispatch(toggleAiPanel)({});
+  };
+
+  return (
+    <>
+      <div
+        className="fixed top-0 right-0 left-0 z-50 flex items-center justify-between border-border border-b bg-panel px-3"
+        style={{ height: PANEL_DIMENSIONS.TOP_HEIGHT }}
+      >
+        <div className="pointer-events-none absolute inset-0 flex items-center justify-center gap-2 text-sm">
+          <div className="pointer-events-auto">Test Paywall</div>
+          <ConnectionStatusPill />
+        </div>
+        <div className="flex items-center gap-2">
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <button
+                className="flex items-center rounded-lg px-2 py-3 hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50"
+                type="button"
+              >
+                <Logo variant="symbol" />
+                <ChevronDownIcon className="ml-2 size-4 text-muted-foreground" />
+              </button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="start" className="w-48">
+              <DropdownMenuItem onSelect={handleGoToDashboard}>Go to dashboard</DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+          {aiEnabled && (
+            <Button size="icon" variant="ghost" className="relative" onClick={handleAiPanelToggle}>
+              {aiPanelOpen ? (
+                <PanelLeftClose className=" size-4" />
+              ) : (
+                <PanelLeftOpen className=" size-4" />
+              )}
+            </Button>
+          )}
+          <ModeToggle />
+        </div>
+        <div className="flex items-center gap-2">
+          {isDevelopment && (
+            <Button
+              size="sm"
+              variant={devModeEnabled ? "default" : "ghost"}
+              onClick={handleDevModeToggle}
+            >
+              <CodeIcon className="mr-1 size-4" />
+              Dev
+            </Button>
+          )}
+          <Button size="sm" variant="secondary">
+            Share
+          </Button>
+          <Button size="sm" onClick={handlePublishClick} disabled={isCreatingRelease || !paywallId}>
+            {isCreatingRelease ? (
+              <>
+                <Loader2Icon className="mr-2 size-4 animate-spin" />
+                Creating release...
+              </>
+            ) : (
+              "Publish"
+            )}
+          </Button>
+        </div>
+      </div>
+      <PublishConfirmationDialog
+        open={showPublishDialog}
+        onOpenChange={handleDialogClose}
+        onConfirm={handleConfirmPublish}
+        isPublishing={isPublishing}
+        draftVersion={releaseInfo?.version}
+        publishedUrl={publishedUrl}
+      />
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/types.ts b/apps/www/src/features/studio/paywalls/designer/panels/types.ts
new file mode 100644
index 000000000..5a58b0cb2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/types.ts
@@ -0,0 +1,107 @@
+import type {
+  AvailableStyleProperties,
+  EditableNodeType,
+  StylePropertyTypes,
+} from "@voidhash/mimic-schema";
+
+export type { EditableNodeType };
+
+/**
+ * All style property names defined in @voidhash/mimic-schema/src/styles/properties.ts
+ * that are actually used in node types. This ensures type safety by using the actual
+ * property names from the source, filtered to only include properties that exist on nodes.
+ */
+export type StylePropertyName = Extract<AvailableStyleProperties, keyof StylePropertyTypes>;
+
+/**
+ * Pick specific style properties from StylePropertyTypes.
+ * Use property name literals for type-safe selection.
+ *
+ * @example
+ * ```ts
+ * // Using explicit property names
+ * type MyProps = NodeWithProperties<'gap' | 'paddingTop'>;
+ *
+ * // Combining multiple properties
+ * type LayoutProps = NodeWithProperties<'gap' | 'justifyContent' | 'alignItems' | 'flexDirection' | 'paddingTop' | 'paddingRight' | 'paddingBottom' | 'paddingLeft'>;
+ * ```
+ */
+export type NodeWithProperties<K extends StylePropertyName> = Pick<StylePropertyTypes, K>;
+
+/**
+ * Props for a node editor component that edits specific properties.
+ * Use property name literals to pick individual style properties.
+ *
+ * Common property combinations:
+ * - Layout: 'gap' | 'justifyContent' | 'alignItems' | 'flexDirection'
+ * - Padding: 'paddingTop' | 'paddingRight' | 'paddingBottom' | 'paddingLeft'
+ * - Margin: 'marginTop' | 'marginRight' | 'marginBottom' | 'marginLeft'
+ * - Dimensions: 'width' | 'height'
+ * - Flex Child: 'flex' | 'flexGrow' | 'flexShrink' | 'flexBasis' | 'alignSelf'
+ * - Background: 'backgroundColor' | 'backgroundEnabled'
+ * - Border: 'borderTopWidth' | 'borderRightWidth' | 'borderBottomWidth' | 'borderLeftWidth' | 'borderColor' | 'borderStyle' | 'borderEnabled'
+ * - Border Radius: 'borderTopLeftRadius' | 'borderTopRightRadius' | 'borderBottomRightRadius' | 'borderBottomLeftRadius'
+ *
+ * @example
+ * ```tsx
+ * // Pick individual properties
+ * type LayoutProperties = 'gap' | 'justifyContent' | 'alignItems' | 'flexDirection' | 'paddingTop' | 'paddingRight' | 'paddingBottom' | 'paddingLeft';
+ *
+ * export function LayoutSection({
+ *   node,
+ *   onNodeChange
+ * }: NodeEditorProps<LayoutProperties>) {
+ *   // node.gap, node.justifyContent, node.paddingTop, etc. are all typed correctly
+ *   return <div>...</div>;
+ * }
+ * ```
+ */
+export interface NodeEditorProps<K extends StylePropertyName> {
+  node: NodeWithProperties<K>;
+  onNodeChange: (node: NodeWithProperties<K>) => void;
+}
+
+/**
+ * Sentinel symbol indicating that selected nodes have different values for a property.
+ */
+export const MIXED: unique symbol = Symbol("MIXED");
+export type Mixed = typeof MIXED;
+
+/**
+ * A value that may be a concrete T or the MIXED sentinel (when multiple nodes disagree).
+ */
+export type MaybeMulti<T> = T | Mixed;
+
+/**
+ * Section IDs for the right panel registry.
+ */
+export type SectionId =
+  | "variables"
+  | "states"
+  | "position"
+  | "flexLayout"
+  | "shapeLayout"
+  | "borderRadius"
+  | "fill"
+  | "border"
+  | "interactions"
+  | "scrollViewSettings"
+  | "content"
+  | "typography"
+  | "textFill"
+  | "pathFill"
+  | "pathStroke"
+  | "componentSettings"
+  | "componentProps"
+  | "componentActions";
+
+/**
+ * A section registry entry describes a panel section, which node types it supports,
+ * and whether it can appear in multi-select mode.
+ */
+export interface SectionRegistryEntry {
+  id: SectionId;
+  supportedNodeTypes: EditableNodeType[];
+  order: number;
+  multiSelectable: boolean;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/paywall-designer.tsx b/apps/www/src/features/studio/paywalls/designer/paywall-designer.tsx
new file mode 100644
index 000000000..d4d6a7dca
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/paywall-designer.tsx
@@ -0,0 +1,145 @@
+"use client";
+
+import { Logo } from "@voidhash/ui";
+import { useEffect, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { AiPanel } from "../designer/ai-panel/ai-panel";
+import { Canvas } from "../designer/canvas/canvas";
+import { PreviewCanvas } from "../designer/canvas/preview-canvas";
+import { CodeEditorProvider } from "../designer/code-mode/code-editor-context";
+import { CodeModeWorkspace } from "../designer/code-mode/code-mode-workspace";
+import { DevModeView } from "../designer/dev-mode/dev-mode-view";
+import {
+  PaywallDesignerStoreProvider,
+  usePaywallDesignerStore,
+} from "../designer/state/designer-store";
+import { TranslationModeWorkspace } from "../designer/translation-mode/translation-mode-workspace";
+import { useCodeComponentCompilation } from "./hooks/use-code-component-compilation";
+import { useKeyboardShortcuts } from "./hooks/use-keyboard-shortcuts";
+import { usePaywallComponentCatalog } from "./hooks/use-paywall-component-catalog";
+import { LeftPanel } from "./panels";
+import { ActionPanel } from "./panels/action-panel";
+import { RightPanel } from "./panels/right-panel";
+import { TopPanel } from "./panels/top-panel";
+
+function DesignerContent() {
+  useKeyboardShortcuts();
+  usePaywallComponentCatalog();
+  useCodeComponentCompilation();
+  const store = usePaywallDesignerStore();
+  const mode = useStore(store, (state) => state.mode);
+  const devModeEnabled = useStore(store, (state) => state.devMode.enabled);
+
+  return (
+    <CodeEditorProvider>
+      <div className="relative h-screen w-screen overflow-hidden bg-background">
+        {/* Dev mode view - shown when enabled */}
+        {devModeEnabled && <DevModeView />}
+
+        {/* Canvas layer - hidden when dev mode is enabled */}
+        <div className={devModeEnabled ? "hidden" : undefined}>
+          {mode === "design" && <Canvas />}
+          {mode === "preview" && <PreviewCanvas />}
+          {mode === "code" && <CodeModeWorkspace />}
+          {mode === "translation" && <TranslationModeWorkspace />}
+        </div>
+
+        {/* Panel overlays - mounted once the document is ready, hidden in dev mode.
+            The properties inspector is not shown in code mode (the preview pane
+            takes the right side); the editor's tab bar carries its actions there.
+            Translation mode is a self-contained full-screen surface (its own
+            locale rail replaces the layer tree and floating action bar). */}
+        <TopPanel />
+        <div className={devModeEnabled ? "hidden" : undefined}>
+          <AiPanel />
+          {mode !== "translation" && <LeftPanel />}
+          {mode !== "code" && mode !== "translation" && <RightPanel />}
+          {mode !== "code" && mode !== "translation" && <ActionPanel />}
+        </div>
+      </div>
+    </CodeEditorProvider>
+  );
+}
+
+/**
+ * Store-free loading visual, shown both before the store exists (token mint
+ * in flight) and while the document snapshot has not arrived yet.
+ */
+function LoadingScreen() {
+  return (
+    <div className="flex h-screen flex-col gap-8 w-screen items-center fixed inset-0 z-1000 justify-center bg-background">
+      <Logo variant="symbol" color="mono" className="h-10 w-10" />
+      <div className="relative">
+        <div className="h-1 w-42 bg-secondary rounded-full" />
+        <div className="h-1 left-0 top-0 bg-foreground rounded-full absolute animate-[designer-loading_10s_ease-in-out] fill-mode-forwards" />
+      </div>
+    </div>
+  );
+}
+
+/** Store-free error screen for terminal transport/token failures. */
+function ErrorScreen({ retry }: { error: Error; retry: () => void }) {
+  return (
+    <div className="flex h-screen flex-col gap-6 w-screen items-center fixed inset-0 z-1000 justify-center bg-background">
+      <Logo variant="symbol" color="mono" className="h-10 w-10" />
+      <div className="flex flex-col items-center gap-2">
+        <p className="text-sm font-medium text-foreground">Could not connect to the editor</p>
+        <p className="text-sm text-muted-foreground">
+          The editing session could not be established.
+        </p>
+      </div>
+      <button
+        type="button"
+        onClick={retry}
+        className="rounded-md border border-border bg-secondary px-4 py-2 text-sm font-medium text-foreground hover:bg-secondary/80"
+      >
+        Retry
+      </button>
+    </div>
+  );
+}
+
+/**
+ * Gates the designer on document readiness: pre-ready, the document has no
+ * snapshot and writes throw, so nothing snapshot-consuming may mount. The
+ * loading overlay lingers briefly after readiness for a smooth reveal.
+ */
+function DesignerReadyGate({ children }: { children: React.ReactNode }) {
+  const store = usePaywallDesignerStore();
+  const isReady = useStore(store, (state) => state.mimic.isReady);
+  const [revealed, setRevealed] = useState(false);
+
+  useEffect(() => {
+    if (!isReady) {
+      return;
+    }
+    const timer = setTimeout(() => {
+      setRevealed(true);
+    }, 200);
+    return () => {
+      clearTimeout(timer);
+    };
+  }, [isReady]);
+
+  return (
+    <>
+      {!revealed && <LoadingScreen />}
+      {isReady && children}
+    </>
+  );
+}
+
+export function DesignerDetailPage({ paywallId }: { paywallId: string }) {
+  return (
+    <PaywallDesignerStoreProvider
+      paywallId={paywallId}
+      renderLoading={() => <LoadingScreen />}
+      renderError={(error, retry) => <ErrorScreen error={error} retry={retry} />}
+    >
+      <DesignerReadyGate>
+        <DesignerContent />
+      </DesignerReadyGate>
+    </PaywallDesignerStoreProvider>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/active-locale-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/active-locale-actions.ts
new file mode 100644
index 000000000..246ce983f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/active-locale-actions.ts
@@ -0,0 +1,25 @@
+/**
+ * Active-locale command using zustand-commander.
+ *
+ * The active locale is a browser-local view-time override (like
+ * `stateOverrideSelection`): it changes what the canvas renders and where
+ * inline edits land, without mutating the document. `null` means the
+ * document's default locale — today's behavior.
+ */
+
+import { commander } from "../designer-commander";
+
+/**
+ * Set the locale being edited/previewed. `null` selects the default locale.
+ *
+ * Plain (non-undoable): a view concern, not a document write. Switching locale
+ * also stops any in-flight inline text editing so a pending edit can't land in
+ * the wrong locale (the contentEditable's blur would otherwise dispatch against
+ * whichever locale is now active).
+ */
+export const setActiveLocale = commander.action<{ locale: string | null }>((ctx, params) => {
+  ctx.setState({
+    activeLocale: params.locale,
+    textEditingNodeId: null,
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
new file mode 100644
index 000000000..aade73362
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
@@ -0,0 +1,44 @@
+/**
+ * AI panel commands using zustand-commander.
+ *
+ * These commands manage the Voidhash AI chat panel (browser-only state).
+ */
+
+import { PANEL_DIMENSIONS } from "../../panels/constants";
+import { commander } from "../designer-commander";
+
+// =============================================================================
+// AI Panel Commands
+// =============================================================================
+
+/**
+ * Toggle the Voidhash AI chat panel open/closed.
+ */
+export const toggleAiPanel = commander.action((ctx) => {
+  const state = ctx.getState();
+  ctx.setState({
+    ai: {
+      ...state.ai,
+      panelOpen: !state.ai.panelOpen,
+    },
+  });
+});
+
+/**
+ * Set the AI chat panel width (px), clamped to the panel's min/max bounds.
+ * Browser-only local state — high-frequency writes during a drag are fine as
+ * they never touch the mimic document's undo history.
+ */
+export const setAiPanelWidth = commander.action<{ width: number }>((ctx, { width }) => {
+  const state = ctx.getState();
+  const clamped = Math.max(
+    PANEL_DIMENSIONS.AI_CHAT_MIN_WIDTH,
+    Math.min(PANEL_DIMENSIONS.AI_CHAT_MAX_WIDTH, width),
+  );
+  ctx.setState({
+    ai: {
+      ...state.ai,
+      width: clamped,
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/awareness-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/awareness-actions.ts
new file mode 100644
index 000000000..4e8c38a04
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/awareness-actions.ts
@@ -0,0 +1,49 @@
+/**
+ * Awareness commands using zustand-commander.
+ *
+ * These commands manage ephemeral state shared via the presence protocol.
+ * Cursor positions, user info, etc.
+ */
+
+import { commander } from "../designer-commander";
+import { presenceInputFromSnapshot } from "../utils/presence";
+
+// =============================================================================
+// Awareness Commands
+// =============================================================================
+
+/**
+ * Update the cursor position in presence. `null` clears the cursor (the
+ * schema encodes "no cursor" as field absence).
+ */
+export const updateCursor = commander.action<{ x: number; y: number } | null>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic } = state;
+
+  const currentPresence = mimic.document.presence?.self();
+  if (currentPresence) {
+    mimic.document.presence?.set({
+      ...presenceInputFromSnapshot(currentPresence),
+      cursor: params ?? undefined,
+    });
+  }
+});
+
+/**
+ * Update user information in presence.
+ */
+export const updateUser = commander.action<{ name?: string; color?: string }>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic } = state;
+
+  const currentPresence = mimic.document.presence?.self();
+  if (currentPresence) {
+    mimic.document.presence?.set({
+      ...presenceInputFromSnapshot(currentPresence),
+      user: {
+        ...currentPresence.user,
+        ...params,
+      },
+    });
+  }
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/canvas-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/canvas-actions.ts
new file mode 100644
index 000000000..996c6f4af
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/canvas-actions.ts
@@ -0,0 +1,402 @@
+/**
+ * Canvas commands using zustand-commander.
+ *
+ * These commands manage canvas interactions and UI state.
+ */
+
+import { canBeChildOf } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../designer-commander";
+import { selectDocumentRoot } from "../utils/document-root";
+import type { ComponentCatalogByContentHash, DesignerStoreState } from "../designer-store-state";
+import { nodePassesSlotGate } from "../utils/component-children";
+import { selectedNodeIdsFromPresence } from "../utils/presence";
+import { canHighlightNode, canSelectNode, getChildAtPosition, hasChildren } from "../utils/selection-level";
+import { buildNodeIndex } from "../utils/tree";
+import { createViewNode } from "./nodes/view-node-actions";
+import { createScrollViewNode } from "./nodes/scrollview-node-actions";
+import { createTextNode } from "./nodes/text-node-actions";
+import { selectNode, unselectNode } from "./selection-actions";
+
+/**
+ * Validates a tool insert target: the child type must be allowed under the
+ * clicked node (catalog rules) and component targets must pass the manifest
+ * slot gate.
+ */
+function canInsertToolChild(
+  parent: SnapshotNode,
+  childType: "text" | "view" | "scrollView",
+  byContentHash: ComponentCatalogByContentHash,
+): boolean {
+  return canBeChildOf(childType, parent.type) && nodePassesSlotGate(parent, byContentHash);
+}
+
+// =============================================================================
+// Canvas State Commands
+// =============================================================================
+
+/**
+ * Save the current canvas state (scale, position).
+ */
+export const saveCanvasState = commander.action<{
+  scale: number;
+  x: number;
+  y: number;
+}>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    canvas: { ...state.canvas, ...params },
+  });
+});
+
+/**
+ * Update a node's bounding box (used for rendering overlays).
+ */
+export const updateBoundingBox = commander.action<{
+  id: string;
+  boundingBox: {
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+  };
+}>((ctx, params) => {
+  const state = ctx.getState();
+  const boundingBoxes = { ...state.canvas.boundingBoxes };
+  boundingBoxes[params.id] = params.boundingBox;
+  ctx.setState({
+    canvas: { ...state.canvas, boundingBoxes },
+  });
+});
+
+/**
+ * Batch update multiple bounding boxes in a single store update.
+ * Used by the BoundingBoxManager for efficient RAF-based measurement.
+ */
+export const updateBoundingBoxes = commander.action<{
+  boxes: Array<{
+    id: string;
+    boundingBox: {
+      x: number;
+      y: number;
+      width: number;
+      height: number;
+    };
+  }>;
+}>((ctx, params) => {
+  const state = ctx.getState();
+  const boundingBoxes = { ...state.canvas.boundingBoxes };
+  for (const { id, boundingBox } of params.boxes) {
+    boundingBoxes[id] = boundingBox;
+  }
+  ctx.setState({
+    canvas: { ...state.canvas, boundingBoxes },
+  });
+});
+
+// =============================================================================
+// Node Hover Commands
+// =============================================================================
+
+/**
+ * Handle mouse entering a node.
+ * Uses level-based selection to determine if the node can be highlighted.
+ * During text editing mode, only text nodes can be highlighted.
+ */
+export const nodeMouseEnter = commander.action<{ id: string }>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic, resize } = state;
+  const root = selectDocumentRoot(state);
+
+  if (resize.isActive) {
+    return { shouldPropagate: true };
+  }
+
+  // During text editing mode, only highlight text nodes
+  if (state.textEditingNodeId) {
+    const hoveredNode = buildNodeIndex<SnapshotNode>(root).get(params.id);
+    if (hoveredNode?.type !== "text") {
+      return { shouldPropagate: true };
+    }
+    // Highlight this text node
+    ctx.setState({
+      highlightedNodeId: params.id,
+    });
+    return { shouldPropagate: true };
+  }
+
+  const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+
+  // Check if this node can be highlighted at the current selection level
+  if (!canHighlightNode(root, params.id, selectedNodeIds)) {
+    return { shouldPropagate: true };
+  }
+
+  ctx.setState({
+    highlightedNodeId: params.id,
+  });
+  return { shouldPropagate: true };
+});
+
+/**
+ * Handle mouse moving over a node.
+ * Uses level-based selection to determine if the node can be highlighted.
+ * During text editing mode, only text nodes can be highlighted.
+ */
+export const nodeMouseOver = commander.action<{ id: string }>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic, resize } = state;
+  const root = selectDocumentRoot(state);
+
+  if (resize.isActive) {
+    return { shouldPropagate: true };
+  }
+
+  // During text editing mode, only highlight text nodes
+  if (state.textEditingNodeId) {
+    const hoveredNode = buildNodeIndex<SnapshotNode>(root).get(params.id);
+    if (hoveredNode?.type !== "text") {
+      return { shouldPropagate: true };
+    }
+    // Always update highlight for text nodes (consistent with nodeMouseEnter)
+    ctx.setState({
+      highlightedNodeId: params.id,
+    });
+    return { shouldPropagate: true };
+  }
+
+  const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+
+  // Check if this node can be highlighted at the current selection level
+  if (!canHighlightNode(root, params.id, selectedNodeIds)) {
+    return { shouldPropagate: true };
+  }
+
+  if (!state.highlightedNodeId) {
+    ctx.setState({
+      highlightedNodeId: params.id,
+    });
+  }
+  return { shouldPropagate: true };
+});
+
+/**
+ * Handle mouse leaving a node.
+ * Clears the highlight if the node being left matches the highlighted node.
+ */
+export const nodeMouseLeave = commander.action<{ id: string }>((ctx, params) => {
+  const state = ctx.getState();
+  if (state.highlightedNodeId === params.id) {
+    ctx.setState({ highlightedNodeId: null });
+  }
+});
+
+/**
+ * Clear the highlight (used when mouse leaves canvas area).
+ */
+export const clearHighlight = commander.action((ctx) => {
+  ctx.setState({ highlightedNodeId: null });
+});
+
+/**
+ * Directly set the highlighted node ID without level-based selection checks.
+ * Used by the layers panel where all nodes should be highlightable.
+ */
+export const setHighlightedNode = commander.action<{ id: string | null }>((ctx, params) => {
+  const state = ctx.getState();
+  if (state.resize.isActive && params.id !== null) {
+    return;
+  }
+  ctx.setState({
+    highlightedNodeId: params.id,
+  });
+});
+
+// =============================================================================
+// Node Click Commands
+// =============================================================================
+
+/**
+ * Handle clicking on a node.
+ * Behavior depends on the current active tool.
+ * Uses level-based selection to validate click targets.
+ * During text editing mode, clicking on non-text nodes exits text editing.
+ */
+export const nodeClicked = commander.action<{ id: string; shiftKey: boolean }>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic } = state;
+  const tool = state.tools.activeTool;
+
+  const root = selectDocumentRoot(state);
+  const nodes = buildNodeIndex<SnapshotNode>(root);
+
+  const clickedNode = nodes.get(params.id);
+  if (!clickedNode) {
+    console.error(
+      `[nodeClicked] Node "${params.id}" not found in snapshot. This indicates a state synchronization issue.`,
+    );
+    return;
+  }
+
+  // During text editing mode
+  if (state.textEditingNodeId) {
+    // Text node clicks are handled by text-node-renderer
+    if (clickedNode.type === "text") {
+      return;
+    }
+    // Clicking on non-text node exits text editing mode
+    // but keeps the text node selected (don't select the clicked node)
+    ctx.setState({ textEditingNodeId: null });
+    return;
+  }
+
+  // Get current selection from presence
+  const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+
+  switch (tool) {
+    case "cursor": {
+      const isSelected = selectedNodeIds.includes(params.id);
+      if (isSelected) {
+        if (params.shiftKey) {
+          ctx.dispatch(unselectNode)({ id: params.id });
+          return;
+        }
+        // If the node is already selected, re-select. There may be multiple items selected.
+        ctx.dispatch(selectNode)({ id: params.id, many: params.shiftKey });
+        return;
+      }
+
+      // Check if this node can be selected at the current selection level
+      if (!canSelectNode(root, params.id, selectedNodeIds)) {
+        return;
+      }
+
+      // Select the node
+      ctx.dispatch(selectNode)({ id: params.id, many: params.shiftKey });
+      break;
+    }
+
+    case "text": {
+      if (!canInsertToolChild(clickedNode, "text", state.componentCatalog.byContentHash)) {
+        return;
+      }
+      ctx.dispatch(createTextNode)({ parentId: params.id });
+      break;
+    }
+
+    case "columns": {
+      if (!canInsertToolChild(clickedNode, "view", state.componentCatalog.byContentHash)) {
+        return;
+      }
+      ctx.dispatch(createViewNode)({
+        initialValues: {
+          name: "Column",
+          style: { flexDirection: "column" },
+        },
+        insertAffordance: true,
+        parentId: params.id,
+      });
+      break;
+    }
+
+    case "rows": {
+      if (!canInsertToolChild(clickedNode, "view", state.componentCatalog.byContentHash)) {
+        return;
+      }
+      ctx.dispatch(createViewNode)({
+        initialValues: { name: "Row", style: { flexDirection: "row" } },
+        insertAffordance: true,
+        parentId: params.id,
+      });
+      break;
+    }
+
+    case "scroll-view": {
+      if (!canInsertToolChild(clickedNode, "scrollView", state.componentCatalog.byContentHash)) {
+        return;
+      }
+      ctx.dispatch(createScrollViewNode)({
+        initialValues: {
+          // Vertical scroll => column main-axis flow for its children.
+          style: { flexDirection: "column" },
+        },
+        insertAffordance: true,
+        parentId: params.id,
+      });
+      break;
+    }
+  }
+});
+
+// =============================================================================
+// Text Editing Commands
+// =============================================================================
+
+/**
+ * Mark that text editing has started on a node.
+ */
+export const textEditingStarted = commander.action<{ id: string }>((ctx, params) => {
+  ctx.setState({
+    textEditingNodeId: params.id,
+  });
+});
+
+/**
+ * Mark that text editing has stopped.
+ */
+export const textEditingStopped = commander.action<{ id: string }>((ctx) => {
+  ctx.setState({ textEditingNodeId: null });
+});
+
+// =============================================================================
+// Double-Click Commands
+// =============================================================================
+
+/**
+ * Handle double-clicking on a node.
+ * For nodes with children: drill down to select the first child at the click position.
+ * For text nodes: handled by text-node-renderer (enters text editing mode).
+ */
+export const nodeDoubleClicked = commander.action<{
+  id: string;
+  canvasX: number;
+  canvasY: number;
+}>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic, canvas } = state;
+
+  // Don't drill down if in text editing mode
+  if (state.textEditingNodeId) {
+    return;
+  }
+
+  // Only drill down on cursor tool
+  if (state.tools.activeTool !== "cursor") {
+    return;
+  }
+
+  const root = selectDocumentRoot(state);
+  const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+
+  // Only drill down if the double-clicked node is selected
+  if (!selectedNodeIds.includes(params.id)) {
+    return;
+  }
+
+  // Check if the node has children
+  if (!hasChildren(root, params.id)) {
+    return;
+  }
+
+  // Find the child at the click position
+  const childId = getChildAtPosition(root, params.id, canvas.boundingBoxes, {
+    x: params.canvasX,
+    y: params.canvasY,
+  });
+
+  if (childId) {
+    // Select the child node (this will update the selection level)
+    ctx.dispatch(selectNode)({ id: childId, many: false });
+  }
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.test.ts
new file mode 100644
index 000000000..03406c2b3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.test.ts
@@ -0,0 +1,208 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../testing/offline-document";
+import {
+  codeComponentDefinitions,
+  componentDisplayName,
+  componentFileName,
+  selectCodeComponentNodes,
+} from "../utils/code-components";
+import { insertCodeComponent } from "../utils/code-component-writes";
+import { createCodeComponent, renameComponentFile } from "./code-component-actions";
+import { insertLocalComponentNode, repairLocalComponentReference } from "./nodes/component-node-actions";
+
+/**
+ * Minimal command context over an offline document: `getState` exposes the live
+ * mimic snapshot + a mutable `codeComponents` slice; `dispatch` re-enters a
+ * command's `fn`; `setState` shallow-merges. These design-mode document actions
+ * only need `compiled`/`dirty` stubbed. The `compiled` map is empty — these
+ * actions never read compiled artifacts (`insertLocalComponentNode` only prefills
+ * props when given a `manifest`, which these tests do not).
+ */
+function makeCtx(doc: OfflineDesignerDocument) {
+  let storeState: { codeComponents: Record<string, unknown> } = {
+    codeComponents: {
+      compiled: {},
+      openTabs: [] as string[],
+      activeTabPath: null,
+      dirty: {} as Record<string, boolean>,
+    },
+  };
+  const ctx = {
+    dispatch:
+      <TParams, TReturn>(command: { fn: (c: unknown, p: TParams) => TReturn }) =>
+      (params: TParams): TReturn =>
+        command.fn(ctx, params),
+    getState: () => ({
+      ...storeState,
+      mimic: { document: doc, snapshot: doc.getSnapshot() },
+    }),
+    setState: (partial: Record<string, unknown>) => {
+      storeState = { ...storeState, ...partial };
+    },
+  };
+  return ctx;
+}
+
+/** Reads the current code-component definitions from the live document. */
+function definitions(doc: OfflineDesignerDocument) {
+  return codeComponentDefinitions(selectCodeComponentNodes({ mimic: { snapshot: doc.getSnapshot() } } as never));
+}
+
+/** Reads a component instance node's `componentPath` from the live snapshot. */
+function instanceComponentPath(doc: OfflineDesignerDocument, nodeId: string): string | undefined {
+  const node = doc.root.findByIdAcrossTree(nodeId);
+  return node?.get()?.data?.componentPath as string | undefined;
+}
+
+describe("componentFileName / componentDisplayName", () => {
+  test("componentFileName returns the basename with extension", () => {
+    expect(componentFileName("components/pricing-option.tsx")).toBe("pricing-option.tsx");
+    expect(componentFileName("pricing-option.tsx")).toBe("pricing-option.tsx");
+  });
+
+  test("componentDisplayName title-cases the stem", () => {
+    expect(componentDisplayName("components/pricing-option.tsx")).toBe("Pricing Option");
+    expect(componentDisplayName("components/hero_banner.tsx")).toBe("Hero Banner");
+    expect(componentDisplayName("components/widget.tsx")).toBe("Widget");
+  });
+});
+
+describe("createCodeComponent", () => {
+  test("defaults to untitled.tsx and uniquifies case-insensitively", () => {
+    const doc = createOfflineDesignerDocument();
+    const ctx = makeCtx(doc);
+
+    createCodeComponent.fn(ctx as never, {});
+    createCodeComponent.fn(ctx as never, {});
+    // A case-variant collides case-insensitively → disambiguated, but the
+    // requested stem's own casing is preserved.
+    createCodeComponent.fn(ctx as never, { fileName: "UNTITLED.tsx" });
+
+    const paths = definitions(doc).map((definition) => definition.path);
+    expect(paths).toEqual([
+      "components/untitled.tsx",
+      "components/untitled-2.tsx",
+      "components/UNTITLED-3.tsx",
+    ]);
+  });
+
+  test("appends .tsx to a bare file name", () => {
+    const doc = createOfflineDesignerDocument();
+    const ctx = makeCtx(doc);
+
+    createCodeComponent.fn(ctx as never, { fileName: "hero" });
+    expect(definitions(doc)[0]?.path).toBe("components/hero.tsx");
+  });
+
+  test("undo removes the created definition", () => {
+    const doc = createOfflineDesignerDocument();
+    const ctx = makeCtx(doc);
+
+    const result = createCodeComponent.fn(ctx as never, { fileName: "hero.tsx" });
+    expect(definitions(doc)).toHaveLength(1);
+
+    createCodeComponent.revert(ctx as never, { fileName: "hero.tsx" }, result);
+    expect(definitions(doc)).toHaveLength(0);
+  });
+});
+
+describe("renameComponentFile", () => {
+  /** Seeds a definition + one local instance referencing it. Returns their ids. */
+  function seedDefinitionWithInstance(doc: OfflineDesignerDocument, path: string) {
+    let definitionId = "";
+    doc.transaction((root) => {
+      const id = insertCodeComponent(root, { path, source: "// src" });
+      if (id === null) throw new Error("failed to insert definition");
+      definitionId = id;
+    });
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+    const { nodeId } = insertLocalComponentNode.fn(ctx as never, {
+      parentId: screenId,
+      componentPath: path,
+    });
+    if (nodeId === null) throw new Error("failed to insert instance");
+    return { definitionId, instanceId: nodeId };
+  }
+
+  test("re-points every local instance and undo restores both", () => {
+    const doc = createOfflineDesignerDocument();
+    const { definitionId, instanceId } = seedDefinitionWithInstance(doc, "components/widget.tsx");
+    const ctx = makeCtx(doc);
+
+    const result = renameComponentFile.fn(ctx as never, {
+      id: definitionId,
+      fileName: "renamed.tsx",
+    });
+
+    expect(definitions(doc)[0]?.path).toBe("components/renamed.tsx");
+    expect(instanceComponentPath(doc, instanceId)).toBe("components/renamed.tsx");
+    expect(result.instanceIds).toContain(instanceId);
+
+    renameComponentFile.revert(ctx as never, { id: definitionId, fileName: "renamed.tsx" }, result);
+
+    expect(definitions(doc)[0]?.path).toBe("components/widget.tsx");
+    expect(instanceComponentPath(doc, instanceId)).toBe("components/widget.tsx");
+  });
+
+  test("rejects a case-insensitive collision with another file (no-op)", () => {
+    const doc = createOfflineDesignerDocument();
+    doc.transaction((root) => {
+      insertCodeComponent(root, { path: "components/a.tsx", source: "" });
+    });
+    const { definitionId } = seedDefinitionWithInstance(doc, "components/b.tsx");
+    const ctx = makeCtx(doc);
+
+    const result = renameComponentFile.fn(ctx as never, { id: definitionId, fileName: "A.tsx" });
+
+    expect(result.previousPath).toBeNull();
+    const paths = definitions(doc)
+      .map((definition) => definition.path)
+      .sort();
+    expect(paths).toEqual(["components/a.tsx", "components/b.tsx"]);
+  });
+
+  test("rejects an invalid file name (no extension, no-op)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { definitionId } = seedDefinitionWithInstance(doc, "components/widget.tsx");
+    const ctx = makeCtx(doc);
+
+    const result = renameComponentFile.fn(ctx as never, { id: definitionId, fileName: "widget" });
+    expect(result.previousPath).toBeNull();
+    expect(definitions(doc)[0]?.path).toBe("components/widget.tsx");
+  });
+});
+
+describe("repairLocalComponentReference", () => {
+  test("re-points an instance's componentPath and undo restores it", () => {
+    const doc = createOfflineDesignerDocument();
+    doc.transaction((root) => {
+      insertCodeComponent(root, { path: "components/target.tsx", source: "" });
+    });
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+    const { nodeId } = insertLocalComponentNode.fn(ctx as never, {
+      parentId: screenId,
+      componentPath: "components/missing.tsx",
+    });
+    if (nodeId === null) throw new Error("failed to insert instance");
+
+    const result = repairLocalComponentReference.fn(ctx as never, {
+      nodeId,
+      componentPath: "components/target.tsx",
+    });
+    expect(instanceComponentPath(doc, nodeId)).toBe("components/target.tsx");
+
+    repairLocalComponentReference.revert(
+      ctx as never,
+      { nodeId, componentPath: "components/target.tsx" },
+      result,
+    );
+    expect(instanceComponentPath(doc, nodeId)).toBe("components/missing.tsx");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.ts
new file mode 100644
index 000000000..b220f2983
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-actions.ts
@@ -0,0 +1,216 @@
+import type { CodeComponentNodeData } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import {
+  docRelativeFromFileName,
+  uniqueComponentFileName,
+  validateComponentFileName,
+} from "@voidhash/paywall-workspace";
+
+import { ComponentNode } from "@voidhash/mimic-schema";
+
+import { commander } from "../designer-commander";
+import { componentFileName } from "../utils/code-components";
+import { selectDocumentRoot } from "../utils/document-root";
+import type { DesignerDocumentRoot } from "../utils/node-proxies";
+import {
+  insertCodeComponent,
+  readCodeComponentPaths,
+  removeCodeComponent,
+  restoreCodeComponent,
+  writeCodeComponentPath,
+  writeCodeComponentSource,
+} from "../utils/code-component-writes";
+import { flattenTree } from "../utils/tree";
+
+const DEFAULT_COMPONENT_FILE_NAME = "untitled.tsx";
+
+/**
+ * Derives a document-unique component file name from a requested one (defaulting
+ * to `untitled.tsx`), disambiguating case-insensitively (`untitled.tsx` →
+ * `untitled-2.tsx`…). The base is validated/normalized by the workspace helpers.
+ */
+function uniqueFileName(root: DesignerDocumentRoot, requested: string | undefined): string {
+  const base = (requested?.trim() ?? "") || DEFAULT_COMPONENT_FILE_NAME;
+  const withExt = base.endsWith(".tsx") ? base : `${base}.tsx`;
+  const existingFileNames = readCodeComponentPaths(root).map(componentFileName);
+  return uniqueComponentFileName(withExt, existingFileNames);
+}
+
+/**
+ * Creates a code-component definition in the paywall's library (creating the
+ * library container on first use) and opens it in the editor. The `fileName`
+ * (default `untitled.tsx`, `.tsx` auto-appended) is uniquified
+ * case-insensitively; the definition's `path` is `components/<fileName>`.
+ * Undoable: removes the definition on undo.
+ */
+export const createCodeComponent = commander.undoableAction<
+  { fileName?: string; source?: string },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const nodeId = mimic.document.transaction((root) => {
+      const fileName = uniqueFileName(root, params.fileName);
+      return insertCodeComponent(root, {
+        path: docRelativeFromFileName(fileName),
+        source: params.source ?? "",
+      });
+    });
+
+    return { nodeId };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      removeCodeComponent(root, result.nodeId as string);
+    });
+  },
+);
+
+/**
+ * Saves a code-component definition's `source` (the code editor's manual save).
+ * One save is one undoable document transaction — undo restores the previous
+ * source. The compile pipeline watches the definition node, so a save
+ * automatically drives a recompile of the preview + a manifest upload. A no-op
+ * when the node is missing or the source is unchanged.
+ */
+export const saveCodeComponentSource = commander.undoableAction<
+  { nodeId: string; source: string },
+  { previousSource: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const previousSource = mimic.document.transaction((root) => {
+      const previous = writeCodeComponentSource(root, params.nodeId, params.source);
+      return previous === undefined || previous === params.source ? null : previous;
+    });
+
+    return { previousSource };
+  },
+  (ctx, params, result) => {
+    if (result.previousSource === null) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      writeCodeComponentSource(root, params.nodeId, result.previousSource as string);
+    });
+  },
+);
+
+/** Collects the ids of local component instances whose `componentPath === path`. */
+function localInstanceIdsForPath(root: SnapshotNode, path: string): string[] {
+  const ids: string[] = [];
+  for (const node of flattenTree<SnapshotNode>(root)) {
+    if (
+      node.type === "component" &&
+      node.data.componentSource === "local" &&
+      node.data.componentPath === path
+    ) {
+      ids.push(node.id);
+    }
+  }
+  return ids;
+}
+
+/**
+ * Renames a code-component definition's file (its `path`) and re-points every
+ * local instance that referenced the old path — an IDE-style cascade in ONE
+ * undoable transaction (undo restores both the definition path and every
+ * instance's `componentPath`). The `fileName` is validated (must end `.tsx`, no
+ * path separators) and rejected when it collides case-insensitively with another
+ * component file; a no-op or invalid rename returns without a change.
+ */
+export const renameComponentFile = commander.undoableAction<
+  { id: string; fileName: string },
+  { previousPath: string | null; nextPath: string | null; instanceIds: string[] }
+>(
+  (ctx, params) => {
+    const fileName = params.fileName.trim();
+    const validation = validateComponentFileName(fileName);
+    if (validation !== undefined) {
+      return { previousPath: null, nextPath: null, instanceIds: [] };
+    }
+    const nextPath = docRelativeFromFileName(fileName);
+
+    const state = ctx.getState();
+    const { mimic } = state;
+    const documentRoot = selectDocumentRoot(state);
+
+    let previousPath: string | null = null;
+    let instanceIds: string[] = [];
+
+    mimic.document.transaction((root) => {
+      const existingPaths = new Set(
+        readCodeComponentPaths(root).map((path) => componentFileName(path).toLowerCase()),
+      );
+      // Reject a collision with a DIFFERENT component file (allow renaming to the
+      // same name / case as itself, which is a no-op).
+      const current = root.findByIdAcrossTree(params.id);
+      const currentPath = current?.get()?.data?.path as string | undefined;
+      if (currentPath === undefined || currentPath === nextPath) {
+        return;
+      }
+      const currentFileName = componentFileName(currentPath).toLowerCase();
+      if (
+        fileName.toLowerCase() !== currentFileName &&
+        existingPaths.has(fileName.toLowerCase())
+      ) {
+        return;
+      }
+
+      instanceIds = localInstanceIdsForPath(documentRoot, currentPath);
+      previousPath = writeCodeComponentPath(root, params.id, nextPath) ?? null;
+      for (const instanceId of instanceIds) {
+        root.findByIdAcrossTree(instanceId)?.as(ComponentNode).update({ componentPath: nextPath });
+      }
+    });
+
+    return { previousPath, nextPath, instanceIds };
+  },
+  (ctx, params, result) => {
+    if (result.previousPath === null) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      writeCodeComponentPath(root, params.id, result.previousPath as string);
+      for (const instanceId of result.instanceIds) {
+        root
+          .findByIdAcrossTree(instanceId)
+          ?.as(ComponentNode)
+          .update({ componentPath: result.previousPath as string });
+      }
+    });
+  },
+);
+
+/**
+ * Deletes a code-component definition. Instances referencing it are left in
+ * place (they render a "missing component file" placeholder + warning). Undoable:
+ * re-inserts the definition with its original id so instance references stay
+ * valid.
+ */
+export const deleteCodeComponent = commander.undoableAction<
+  { id: string },
+  { snapshot: CodeComponentNodeData | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const snapshot = mimic.document.transaction((root) => removeCodeComponent(root, params.id));
+
+    return { snapshot: snapshot ?? null };
+  },
+  (ctx, _params, result) => {
+    if (result.snapshot === null) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreCodeComponent(root, result.snapshot as CodeComponentNodeData);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-editor-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-editor-actions.ts
new file mode 100644
index 000000000..c1b8e6e0d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/code-component-editor-actions.ts
@@ -0,0 +1,136 @@
+import { commander } from "../designer-commander";
+import type { CodeComponentCompiled } from "../designer-store-state";
+
+/** Drops compiled state for definitions no longer in the document (deleted). */
+export const pruneCodeComponentsCompiled = commander.action<{ keepIds: readonly string[] }>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const keep = new Set(params.keepIds);
+    const next: Record<string, CodeComponentCompiled> = {};
+    let changed = false;
+    for (const [id, compiled] of Object.entries(state.codeComponents.compiled)) {
+      if (keep.has(id)) {
+        next[id] = compiled;
+      } else {
+        changed = true;
+      }
+    }
+    if (!changed) {
+      return;
+    }
+    ctx.setState({ codeComponents: { ...state.codeComponents, compiled: next } });
+  },
+);
+
+/** Appends `path` to `openTabs` when absent, preserving order. */
+function appendTab(openTabs: readonly string[], path: string): string[] {
+  return openTabs.includes(path) ? [...openTabs] : [...openTabs, path];
+}
+
+/**
+ * Opens (activating) the editor tab for a workspace `path` — the composition
+ * (`paywall.tsx`) or a component file. Appends it to `openTabs` when not already
+ * open and resets the editor's preview-state selection so a newly opened
+ * component falls back to its own default state. Browser-only (not synced, not
+ * undoable).
+ */
+export const openTab = commander.action<{ path: string }>((ctx, params) => {
+  const state = ctx.getState();
+  const { codeComponents } = state;
+  ctx.setState({
+    codeComponents: {
+      ...codeComponents,
+      activeTabPath: params.path,
+      previewState: null,
+      openTabs: appendTab(codeComponents.openTabs, params.path),
+    },
+  });
+});
+
+/**
+ * Closes an open editor tab (by workspace path). Removes it from `openTabs` and
+ * drops its dirty flag. If it was the active tab, activates a neighbor from the
+ * resulting list: the item that now sits at the closed index, else the previous
+ * one; when no tabs remain, nothing is active. Browser-only (not synced, not
+ * undoable).
+ */
+export const closeTab = commander.action<{ path: string }>((ctx, params) => {
+  const state = ctx.getState();
+  const { codeComponents } = state;
+  const closedIndex = codeComponents.openTabs.indexOf(params.path);
+  if (closedIndex === -1) {
+    return;
+  }
+
+  const openTabs = codeComponents.openTabs.filter((path) => path !== params.path);
+  const dirty = { ...codeComponents.dirty };
+  delete dirty[params.path];
+
+  if (params.path !== codeComponents.activeTabPath) {
+    ctx.setState({ codeComponents: { ...codeComponents, openTabs, dirty } });
+    return;
+  }
+
+  // Prefer the tab now occupying the closed slot; otherwise the previous one.
+  const neighbor = openTabs[closedIndex] ?? openTabs[closedIndex - 1] ?? null;
+  ctx.setState({
+    codeComponents: {
+      ...codeComponents,
+      openTabs,
+      dirty,
+      previewState: null,
+      activeTabPath: neighbor,
+    },
+  });
+});
+
+export interface SetCodeComponentCompiledParams {
+  id: string;
+  compiled: CodeComponentCompiled;
+}
+
+/** Stores the in-browser compilation result for a code-component definition. */
+export const setCodeComponentCompiled = commander.action<SetCodeComponentCompiledParams>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    ctx.setState({
+      codeComponents: {
+        ...state.codeComponents,
+        compiled: { ...state.codeComponents.compiled, [params.id]: params.compiled },
+      },
+    });
+  },
+);
+
+/** Selects the preview state shown in the editor's live preview pane. */
+export const setCodeEditorPreviewState = commander.action<{ state: string | null }>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    ctx.setState({
+      codeComponents: { ...state.codeComponents, previewState: params.state },
+    });
+  },
+);
+
+/**
+ * Sets the unsaved-changes flag for one editor tab (a workspace path). The Monaco
+ * pane derives dirtiness from its buffer content vs the document `source` and
+ * mirrors it here so the tab bar + file tree can render the unsaved dot without
+ * reading Monaco. Browser-only (not synced, not undoable).
+ */
+export const setCodeComponentDirty = commander.action<{ path: string; dirty: boolean }>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const current = state.codeComponents.dirty[params.path] ?? false;
+    if (current === params.dirty) {
+      return;
+    }
+    const dirty = { ...state.codeComponents.dirty };
+    if (params.dirty) {
+      dirty[params.path] = true;
+    } else {
+      delete dirty[params.path];
+    }
+    ctx.setState({ codeComponents: { ...state.codeComponents, dirty } });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/component-catalog-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/component-catalog-actions.ts
new file mode 100644
index 000000000..24c99753c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/component-catalog-actions.ts
@@ -0,0 +1,56 @@
+import { commander } from "../designer-commander";
+import type {
+  ComponentCatalogEntry,
+  ComponentCatalogVersion,
+  DesignerStoreState,
+} from "../designer-store-state";
+
+export interface SetComponentCatalogComponentsParams {
+  components: ComponentCatalogEntry[];
+}
+
+/**
+ * Replaces the catalog component list (latest versions) and indexes their
+ * details into `byContentHash`. Pinned versions already mirrored for open
+ * documents are preserved.
+ */
+export const setComponentCatalogComponents =
+  commander.action<SetComponentCatalogComponentsParams>((ctx, params) => {
+    const state = ctx.getState();
+    const components: Record<string, ComponentCatalogEntry> = {};
+    const byContentHash = { ...state.componentCatalog.byContentHash };
+    for (const entry of params.components) {
+      components[entry.slug] = entry;
+      byContentHash[entry.latest.contentHash] = entry.latest;
+    }
+    ctx.setState({
+      componentCatalog: { byContentHash, components },
+    });
+  });
+
+export interface MergeComponentCatalogVersionsParams {
+  versions: ComponentCatalogVersion[];
+}
+
+/**
+ * Merges pinned version details (fetched for component nodes whose
+ * contentHash is missing from the mirror) into `byContentHash`. No-ops when
+ * every version is already mirrored so dependent selectors keep identity.
+ */
+export const mergeComponentCatalogVersions = commander.action<MergeComponentCatalogVersionsParams>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const existing = state.componentCatalog.byContentHash;
+    const missing = params.versions.filter((version) => !existing[version.contentHash]);
+    if (missing.length === 0) {
+      return;
+    }
+    const byContentHash = { ...existing };
+    for (const version of missing) {
+      byContentHash[version.contentHash] = version;
+    }
+    ctx.setState({
+      componentCatalog: { ...state.componentCatalog, byContentHash },
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/component-preview-state-selection-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/component-preview-state-selection-actions.ts
new file mode 100644
index 000000000..dc34289ff
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/component-preview-state-selection-actions.ts
@@ -0,0 +1,22 @@
+import { commander } from "../designer-commander";
+import type { DesignerStoreState } from "../designer-store-state";
+
+export interface SetComponentPreviewStateSelectionParams {
+  nodeId: string;
+  /** Preview state name to select locally; `null` clears back to the node's persisted `previewState`. */
+  previewState: string | null;
+}
+
+export const setComponentPreviewStateSelection =
+  commander.action<SetComponentPreviewStateSelectionParams>((ctx, params) => {
+    const state = ctx.getState();
+    const next = { ...state.componentPreviewStateSelection };
+    if (params.previewState === null) {
+      delete next[params.nodeId];
+    } else {
+      next[params.nodeId] = params.previewState;
+    }
+    ctx.setState({
+      componentPreviewStateSelection: next,
+    });
+  });
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/core/index.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/core/index.ts
new file mode 100644
index 000000000..68895fd17
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/core/index.ts
@@ -0,0 +1,19 @@
+/**
+ * Core utilities for node actions.
+ *
+ * This module exports shared schemas and types used by node actions.
+ */
+
+import { Schema } from "effect";
+
+/**
+ * Schema for variable type keys.
+ */
+export const variableTypeKeySchema = Schema.Union([
+  Schema.Literal("string"),
+  Schema.Literal("number"),
+  Schema.Literal("boolean"),
+  Schema.Literal("product"),
+]);
+
+export type VariableTypeKey = Schema.Schema.Type<typeof variableTypeKeySchema>;
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/debug-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/debug-actions.ts
new file mode 100644
index 000000000..335ff1a34
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/debug-actions.ts
@@ -0,0 +1,38 @@
+/**
+ * Debug commands using zustand-commander.
+ *
+ * These commands manage debug settings (browser-only state).
+ */
+
+import { commander } from "../designer-commander";
+import type { DesignerStoreState } from "../designer-store-state";
+
+// =============================================================================
+// Debug Commands
+// =============================================================================
+
+/**
+ * Set whether to show the grid overlay.
+ */
+export const setShowGrid = commander.action<{ showGrid: boolean }>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    debug: {
+      ...state.debug,
+      showGrid: params.showGrid,
+    },
+  });
+});
+
+/**
+ * Toggle the grid overlay visibility.
+ */
+export const toggleShowGrid = commander.action((ctx) => {
+  const state = ctx.getState();
+  ctx.setState({
+    debug: {
+      ...state.debug,
+      showGrid: !state.debug.showGrid,
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/dev-mode-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/dev-mode-actions.ts
new file mode 100644
index 000000000..1110b669d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/dev-mode-actions.ts
@@ -0,0 +1,51 @@
+/**
+ * Dev mode commands using zustand-commander.
+ *
+ * These commands manage dev mode settings (browser-only state).
+ */
+
+import { commander } from "../designer-commander";
+import type { DesignerStoreState, DevModeTab } from "../designer-store-state";
+
+// =============================================================================
+// Dev Mode Commands
+// =============================================================================
+
+/**
+ * Toggle dev mode on/off.
+ */
+export const toggleDevMode = commander.action((ctx) => {
+  const state = ctx.getState();
+  ctx.setState({
+    devMode: {
+      ...state.devMode,
+      enabled: !state.devMode.enabled,
+    },
+  });
+});
+
+/**
+ * Set dev mode enabled state.
+ */
+export const setDevModeEnabled = commander.action<{ enabled: boolean }>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    devMode: {
+      ...state.devMode,
+      enabled: params.enabled,
+    },
+  });
+});
+
+/**
+ * Set the active dev mode tab.
+ */
+export const setDevModeTab = commander.action<{ tab: DevModeTab }>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    devMode: {
+      ...state.devMode,
+      activeTab: params.tab,
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts
new file mode 100644
index 000000000..aa899a3d2
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts
@@ -0,0 +1,285 @@
+import type { DocumentEdit } from "@voidhash/ai-shared";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../testing/offline-document";
+import { selectDocumentRoot } from "../utils/document-root";
+import { unwrapEntriesDeep } from "../utils/replay";
+import { applyDocumentEdits } from "./document-edit-actions";
+
+/**
+ * A minimal command context over an offline document, faithful enough for
+ * `applyDocumentEdits`: `getState` exposes the live mimic snapshot (so
+ * `selectDocumentRoot` + the validator read the current tree), `transaction`
+ * runs against the document. Undo is exercised by calling `.revert` directly
+ * with the captured do-result (mirroring how the commander replays it).
+ */
+function makeCtx(doc: OfflineDesignerDocument) {
+  const ctx = {
+    dispatch:
+      <TParams, TReturn>(command: { fn: (c: unknown, p: TParams) => TReturn }) =>
+      (params: TParams): TReturn =>
+        command.fn(ctx, params),
+    getState: () => ({
+      mimic: {
+        document: doc,
+        snapshot: doc.getSnapshot(),
+      },
+    }),
+  };
+  return ctx;
+}
+
+/** Runs the do-fn and returns its `{ inverses, result }` payload. */
+function run(doc: OfflineDesignerDocument, edits: readonly DocumentEdit[]) {
+  const ctx = makeCtx(doc);
+  return applyDocumentEdits.fn(ctx as never, { edits });
+}
+
+/** Replays the undo (revert) for a previously run batch. */
+function undo(
+  doc: OfflineDesignerDocument,
+  edits: readonly DocumentEdit[],
+  result: ReturnType<typeof run>,
+) {
+  const ctx = makeCtx(doc);
+  applyDocumentEdits.revert(ctx as never, { edits }, result);
+}
+
+/** The current children ids of a node in the committed snapshot. */
+function childIds(doc: OfflineDesignerDocument, nodeId: string): string[] {
+  const find = (node: { id: string; children: readonly { id: string }[] }): {
+    id: string;
+    children: readonly { id: string }[];
+  } | null => {
+    if (node.id === nodeId) return node;
+    for (const child of node.children) {
+      const found = find(child as never);
+      if (found) return found;
+    }
+    return null;
+  };
+  const root = selectDocumentRoot({ mimic: { snapshot: doc.getSnapshot() } as never });
+  const node = find(root as never);
+  return node ? node.children.map((child) => child.id) : [];
+}
+
+/** The unwrapped `data` of a node in the committed snapshot. */
+function nodeData(doc: OfflineDesignerDocument, nodeId: string): Record<string, unknown> | null {
+  const proxy = doc.root.findByIdAcrossTree(nodeId);
+  return (proxy?.get()?.data as Record<string, unknown> | undefined) ?? null;
+}
+
+describe("applyDocumentEdits — validation", () => {
+  test("an invalid batch returns structured errors and opens no transaction", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const childrenBefore = childIds(doc, screenId);
+
+    const { inverses, result } = run(doc, [
+      { op: "insert", parentId: "does-not-exist", node: { type: "view" } },
+    ]);
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors[0]?.code).toBe("unknownParent");
+    }
+    // No inverse captured → no undo entry would be pushed; the document is untouched.
+    expect(inverses).toEqual([]);
+    expect(childIds(doc, screenId)).toEqual(childrenBefore);
+  });
+});
+
+describe("applyDocumentEdits — insert + undo", () => {
+  test("insert mints an id, returns it, and undo removes exactly the inserted subtree", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+
+    const edits: DocumentEdit[] = [
+      { op: "insert", parentId: screenId, node: { type: "view", children: [{ type: "text", text: "hi" }] } },
+    ];
+    const outcome = run(doc, edits);
+    expect(outcome.result.ok).toBe(true);
+    if (!outcome.result.ok) return;
+
+    const mintedForOp = outcome.result.mintedIds["0"];
+    // The whole subtree is minted, parent-first (view, then its text child).
+    expect(mintedForOp && mintedForOp.length).toBe(2);
+    const insertedId = mintedForOp![0]!;
+    expect(childIds(doc, screenId)).toContain(insertedId);
+
+    undo(doc, edits, outcome);
+    expect(childIds(doc, screenId)).not.toContain(insertedId);
+    expect(doc.root.findByIdAcrossTree(insertedId)).toBeUndefined();
+  });
+});
+
+describe("applyDocumentEdits — update merge + undo", () => {
+  test("style merge sets one field without wiping sibling fields, undo restores exactly", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+
+    // Seed a view with two style fields.
+    const seed = run(doc, [
+      {
+        op: "insert",
+        parentId: screenId,
+        node: { type: "view", style: { paddingTop: 10, paddingLeft: 4 } },
+      },
+    ]);
+    if (!seed.result.ok) throw new Error("seed failed");
+    const viewId = seed.result.mintedIds["0"]![0]!;
+
+    // Update ONLY paddingTop.
+    const edits: DocumentEdit[] = [{ op: "update", nodeId: viewId, set: { style: { paddingTop: 99 } } }];
+    const outcome = run(doc, edits);
+    expect(outcome.result.ok).toBe(true);
+
+    const style = nodeData(doc, viewId)?.style as Record<string, unknown>;
+    expect(style["paddingTop"]).toBe(99);
+    // Sibling field untouched by the per-key merge.
+    expect(style["paddingLeft"]).toBe(4);
+
+    // Undo restores the previous value exactly.
+    undo(doc, edits, outcome);
+    const restored = nodeData(doc, viewId)?.style as Record<string, unknown>;
+    expect(restored["paddingTop"]).toBe(10);
+    expect(restored["paddingLeft"]).toBe(4);
+  });
+
+  test("undo of an update that ADDED a field removes it again", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const seed = run(doc, [{ op: "insert", parentId: screenId, node: { type: "text", text: "hello" } }]);
+    if (!seed.result.ok) throw new Error("seed failed");
+    const textId = seed.result.mintedIds["0"]![0]!;
+    const before = nodeData(doc, textId)?.text;
+
+    const edits: DocumentEdit[] = [{ op: "update", nodeId: textId, set: { text: "changed" } }];
+    const outcome = run(doc, edits);
+    expect(nodeData(doc, textId)?.text).toBe("changed");
+
+    undo(doc, edits, outcome);
+    expect(nodeData(doc, textId)?.text).toBe(before);
+  });
+
+  test("undo of an update to a nested style sub-key restores the object EXACTLY", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const seed = run(doc, [
+      { op: "insert", parentId: screenId, node: { type: "view", style: { paddingTop: 10 } } },
+    ]);
+    if (!seed.result.ok) throw new Error("seed failed");
+    const viewId = seed.result.mintedIds["0"]![0]!;
+    // Snapshot the exact pre-edit style by LOGICAL value (CRDT array envelopes on
+    // e.g. gradient stops carry churny ids/pos — compare unwrapped).
+    const beforeStyle = unwrapEntriesDeep(nodeData(doc, viewId)?.style) as Record<string, unknown>;
+    expect(beforeStyle["shadowRadius"]).toBe(0);
+
+    const edits: DocumentEdit[] = [{ op: "update", nodeId: viewId, set: { style: { shadowRadius: 5 } } }];
+    const outcome = run(doc, edits);
+    const afterStyle = nodeData(doc, viewId)?.style as Record<string, unknown>;
+    expect(afterStyle["shadowRadius"]).toBe(5);
+    expect(afterStyle["paddingTop"]).toBe(10);
+
+    undo(doc, edits, outcome);
+    const restored = unwrapEntriesDeep(nodeData(doc, viewId)?.style) as Record<string, unknown>;
+    // The whole style returns to its prior LOGICAL value — shadowRadius back to
+    // its default, no leftover, every sibling untouched.
+    expect(restored).toEqual(beforeStyle);
+    expect(restored["shadowRadius"]).toBe(0);
+    expect(restored["paddingTop"]).toBe(10);
+  });
+});
+
+describe("applyDocumentEdits — overlapping batches are rejected (no transaction, no undo)", () => {
+  test("mutate-then-remove the SAME node is rejected before any write", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const seed = run(doc, [{ op: "insert", parentId: screenId, node: { type: "view" } }]);
+    if (!seed.result.ok) throw new Error("seed failed");
+    const viewId = seed.result.mintedIds["0"]![0]!;
+    const childrenBefore = childIds(doc, screenId);
+
+    const { inverses, result } = run(doc, [
+      { op: "update", nodeId: viewId, set: { name: "X" } },
+      { op: "remove", nodeId: viewId },
+    ]);
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.code === "overlappingEdits")).toBe(true);
+    }
+    // No inverse captured → no undo entry; the document is untouched.
+    expect(inverses).toEqual([]);
+    expect(childIds(doc, screenId)).toEqual(childrenBefore);
+  });
+
+  test("nested removes (child inside removed parent) are rejected before any write", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const seed = run(doc, [
+      { op: "insert", parentId: screenId, node: { type: "view", children: [{ type: "text", text: "hi" }] } },
+    ]);
+    if (!seed.result.ok) throw new Error("seed failed");
+    const viewId = seed.result.mintedIds["0"]![0]!;
+    const textId = seed.result.mintedIds["0"]![1]!;
+    const childrenBefore = childIds(doc, screenId);
+
+    const { inverses, result } = run(doc, [
+      { op: "remove", nodeId: viewId },
+      { op: "remove", nodeId: textId },
+    ]);
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.errors.some((e) => e.code === "overlappingEdits")).toBe(true);
+    }
+    expect(inverses).toEqual([]);
+    expect(childIds(doc, screenId)).toEqual(childrenBefore);
+  });
+});
+
+describe("applyDocumentEdits — batch atomicity + undo", () => {
+  test("a multi-op batch undoes to the exact prior tree in one revert", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const beforeChildren = childIds(doc, screenId);
+
+    const edits: DocumentEdit[] = [
+      { op: "insert", parentId: screenId, node: { type: "view" } },
+      { op: "insert", parentId: screenId, node: { type: "text", text: "a" } },
+    ];
+    const outcome = run(doc, edits);
+    expect(outcome.result.ok).toBe(true);
+    expect(childIds(doc, screenId).length).toBe(beforeChildren.length + 2);
+
+    undo(doc, edits, outcome);
+    expect(childIds(doc, screenId)).toEqual(beforeChildren);
+  });
+
+  test("remove captures the subtree and undo re-inserts it at its original index", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const seed = run(doc, [
+      { op: "insert", parentId: screenId, node: { type: "view" } },
+      { op: "insert", parentId: screenId, node: { type: "text", text: "keep" } },
+    ]);
+    if (!seed.result.ok) throw new Error("seed failed");
+    const viewId = seed.result.mintedIds["0"]![0]!;
+    const orderBefore = childIds(doc, screenId);
+
+    const edits: DocumentEdit[] = [{ op: "remove", nodeId: viewId }];
+    const outcome = run(doc, edits);
+    expect(childIds(doc, screenId)).not.toContain(viewId);
+
+    undo(doc, edits, outcome);
+    // The subtree is restored at the same index (re-minted id, same position).
+    const orderAfter = childIds(doc, screenId);
+    expect(orderAfter.length).toBe(orderBefore.length);
+    expect(orderAfter.indexOf(orderAfter[0]!)).toBe(0);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts
new file mode 100644
index 000000000..ef599b2ea
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts
@@ -0,0 +1,427 @@
+/**
+ * The document-JSON edit action behind the AI `edit_document` tool.
+ *
+ * A single generic undoable action that applies a validated batch of
+ * {@link DocumentEdit} ops (insert / update / move / remove / replaceChildren)
+ * to the open paywall through ONE mimic transaction, with ONE undo entry for the
+ * whole batch. The AI edit vocabulary and its schema-derived validator live in
+ * `@voidhash/ai-shared`; this action is the browser-side apply that runs the
+ * ops against the designer store's mimic document and captures a per-op inverse
+ * so the batch is atomically undoable.
+ */
+
+import {
+  validateDocumentEdits,
+  type DocumentEdit,
+  type DocumentEditErrorResult,
+  type EditableDocumentNode,
+  type MintedIds,
+  type NodeInput,
+} from "@voidhash/ai-shared";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../designer-commander";
+import { selectDocumentRoot } from "../utils/document-root";
+import type { DesignerDocumentRoot } from "../utils/node-proxies";
+import { unwrapEntriesDeep } from "../utils/replay";
+
+// =============================================================================
+// Public result
+// =============================================================================
+
+/**
+ * The outcome of an {@link applyDocumentEdits} dispatch, matching ai-shared's
+ * `EditDocumentResult`: on success the minted-id map (insert/replaceChildren op
+ * index → the ids the engine minted, root-first), on failure the collected
+ * per-edit validation errors (nothing was applied — no transaction opened, no
+ * undo entry pushed).
+ */
+export type ApplyDocumentEditsResult =
+  | { readonly ok: true; readonly mintedIds: MintedIds }
+  | { readonly ok: false; readonly errors: readonly DocumentEditErrorResult[] };
+
+// =============================================================================
+// Snapshot → EditableDocumentNode adapter
+// =============================================================================
+
+/**
+ * Adapts a decoded designer snapshot subtree to the validator's minimal
+ * {@link EditableDocumentNode} shape. `data` is passed through verbatim: the
+ * validator only reads the scalar/enum leaves it addresses (envelope unwrapping
+ * is not required — see the ai-shared validator docs).
+ */
+function toEditableNode(node: SnapshotNode): EditableDocumentNode {
+  return {
+    id: node.id,
+    type: node.type,
+    data: node.data as Record<string, unknown>,
+    children: node.children.map(toEditableNode),
+  };
+}
+
+// =============================================================================
+// Insert (NodeInput → minted ids)
+// =============================================================================
+
+/**
+ * Inserts a {@link NodeInput} subtree under `parentId` at `index`, recursing
+ * into children. Every node's id is engine-minted; the minted ids are collected
+ * pre-order (parent before children) into `minted`. Returns the root minted id
+ * (or `null` when the insert is rejected — e.g. an illegal parent/child combo the
+ * transaction throws on).
+ */
+function insertNodeInput(
+  root: DesignerDocumentRoot,
+  parentId: string,
+  node: NodeInput,
+  index: number | undefined,
+  minted: string[],
+): string | null {
+  const parent = root.findByIdAcrossTree(parentId);
+  if (parent === undefined) {
+    return null;
+  }
+  const input = nodeInputToData(node) as Parameters<typeof parent.children.insertLast>[0];
+  const inserted =
+    index === undefined
+      ? parent.children.insertLast(input)
+      : parent.children.insertAt(index, input);
+  minted.push(inserted.id);
+  for (const child of node.children ?? []) {
+    insertNodeInput(root, inserted.id, child, undefined, minted);
+  }
+  return inserted.id;
+}
+
+/**
+ * Flattens a {@link NodeInput} to the `{ type, name?, ...data }` write input the
+ * mimic `children.insert*` primitive accepts — `children` is stripped (inserted
+ * recursively) and every other field (style, text, component identity, …) is
+ * spread at the top level.
+ */
+function nodeInputToData(node: NodeInput): Record<string, unknown> {
+  const input: Record<string, unknown> = { type: node.type };
+  for (const [key, value] of Object.entries(node)) {
+    if (key === "type" || key === "children") continue;
+    input[key] = value;
+  }
+  return input;
+}
+
+// =============================================================================
+// Serialize (for remove / replaceChildren undo)
+// =============================================================================
+
+interface SerializedSubtree {
+  type: string;
+  data: Record<string, unknown>;
+  children: SerializedSubtree[];
+}
+
+/**
+ * Serializes a snapshot subtree into plain write-input shape (CRDT `{id,pos,value}`
+ * array envelopes unwrapped) so undo can replay it through the insert primitive.
+ * Node ids are intentionally dropped — the engine re-mints them on restore.
+ */
+function serializeSubtree(node: SnapshotNode): SerializedSubtree {
+  const data: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(node.data)) {
+    data[key] = unwrapEntriesDeep(value);
+  }
+  return {
+    type: node.type,
+    data,
+    children: node.children.map(serializeSubtree),
+  };
+}
+
+/** Re-inserts a serialized subtree under `parentId` at `index` (undo of remove). */
+function restoreSubtree(
+  root: DesignerDocumentRoot,
+  parentId: string,
+  subtree: SerializedSubtree,
+  index: number | undefined,
+): void {
+  const parent = root.findByIdAcrossTree(parentId);
+  if (parent === undefined) {
+    return;
+  }
+  try {
+    const input = { ...subtree.data, type: subtree.type } as Parameters<
+      typeof parent.children.insertLast
+    >[0];
+    const node =
+      index === undefined
+        ? parent.children.insertLast(input)
+        : parent.children.insertAt(index, input);
+    for (const child of subtree.children) {
+      restoreSubtree(root, node.id, child, undefined);
+    }
+  } catch {
+    // Illegal parent/child combination on restore — drop the subtree rather than
+    // throw out of the undo transaction.
+  }
+}
+
+// =============================================================================
+// Per-op inverse capture
+// =============================================================================
+
+/** The captured inverse of one applied op, replayed (in reverse) on undo. */
+type OpInverse =
+  | { kind: "remove-minted"; ids: string[] }
+  | { kind: "restore-data"; nodeId: string; previous: Record<string, unknown> }
+  | { kind: "move-back"; nodeId: string; parentId: string; index: number }
+  | { kind: "restore-subtree"; parentId: string; subtree: SerializedSubtree; index: number }
+  | {
+      kind: "restore-children";
+      nodeId: string;
+      previous: SerializedSubtree[];
+      mintedIds: string[];
+    };
+
+/**
+ * Captures the RESTORE PATCH that `node.update(...)` replays on undo to return
+ * every top-level `data` key an `update.set` touched to its exact prior value.
+ *
+ * `node.update` merges per-key (mimic `emitStructUpdate` never deletes a key the
+ * patch omits), so a naive "replay the previous object" leaves behind any sub-key
+ * the forward edit ADDED (e.g. `style.shadowRadius` on a style that lacked it).
+ * The patch therefore pairs the envelope-unwrapped previous value with explicit
+ * `undefined` markers for every key the incoming `set` value added but the
+ * previous value did not have — recursively for nested objects — so the merge
+ * DELETES the additions and the field ends up exactly as it was. A key absent
+ * from the current data maps to `undefined` (a whole-field delete).
+ */
+function capturePreviousData(
+  current: SnapshotNode | undefined,
+  set: Record<string, unknown>,
+): Record<string, unknown> {
+  const previous: Record<string, unknown> = {};
+  const data = (current?.data ?? {}) as Record<string, unknown>;
+  for (const [key, incoming] of Object.entries(set)) {
+    if (!(key in data)) {
+      // The field did not exist → undo deletes it wholesale.
+      previous[key] = undefined;
+      continue;
+    }
+    previous[key] = restorePatchFor(unwrapEntriesDeep(data[key]), incoming);
+  }
+  return previous;
+}
+
+/**
+ * The value `node.update` must merge to restore `prev` after a forward merge of
+ * `incoming` overwrote it. For two plain objects it returns `prev`'s keys PLUS an
+ * `undefined` for each key `incoming` introduced that `prev` lacked (recursing
+ * into shared object keys), so the merge deletes the additions. For every other
+ * shape (arrays, scalars, an object replacing a non-object) `prev` replaces
+ * wholesale, so it is returned verbatim.
+ */
+function restorePatchFor(prev: unknown, incoming: unknown): unknown {
+  if (!isPlainObject(prev) || !isPlainObject(incoming)) {
+    return prev;
+  }
+  const patch: Record<string, unknown> = {};
+  for (const [key, prevValue] of Object.entries(prev)) {
+    patch[key] = key in incoming ? restorePatchFor(prevValue, incoming[key]) : prevValue;
+  }
+  // Keys the forward edit ADDED (present in `incoming`, absent from `prev`) must
+  // be deleted on undo — merge an explicit `undefined`.
+  for (const key of Object.keys(incoming)) {
+    if (!(key in prev)) {
+      patch[key] = undefined;
+    }
+  }
+  return patch;
+}
+
+/** Whether a value is a plain (non-array, non-null) object. */
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+/** The current sibling index of `nodeId` under `parentNode`, or 0 when absent. */
+function indexInParent(parentNode: SnapshotNode | undefined, nodeId: string): number {
+  if (parentNode === undefined) return 0;
+  const idx = parentNode.children.findIndex((child) => child.id === nodeId);
+  return idx === -1 ? 0 : idx;
+}
+
+// =============================================================================
+// Action
+// =============================================================================
+
+/**
+ * Applies a validated batch of document edits to the open paywall in one
+ * transaction, capturing a per-op inverse for a single atomic undo entry.
+ *
+ * The batch is first re-validated against the committed tree via
+ * {@link validateDocumentEdits} (the same schema-derived validator the AI tool
+ * ran); on failure NO transaction opens and NO undo entry is pushed — the action
+ * returns the structured errors so the model can converge. On success every op is
+ * applied in order and its inverse recorded:
+ *
+ * - `insert` / `replaceChildren` — remove the minted root ids (restore the prior
+ *   children for `replaceChildren`).
+ * - `update` — a restore patch reconstructing each touched `set` key's prior
+ *   value (`undefined` = the field was absent → restored as a delete). Because
+ *   `node.update`'s merge never deletes an omitted key, the patch pairs the prior
+ *   value with explicit `undefined` markers for sub-keys the edit ADDED (e.g.
+ *   `style.shadowRadius` on a style that lacked it), so undo removes them and the
+ *   object returns EXACTLY to its prior shape. `set` itself is applied verbatim
+ *   through `node.update` (objects like `style` merge per field; arrays/scalars
+ *   replace wholesale — the tool's contract).
+ * - `move` — the previous parent + sibling index (moved back preserving the id).
+ * - `remove` — the serialized subtree + its position (re-inserted on undo).
+ *
+ * @returns `{ ok: true, mintedIds }` mapping each insert/replaceChildren op index
+ *   to its minted ids, or `{ ok: false, errors }` when the batch is invalid.
+ */
+export const applyDocumentEdits = commander.undoableAction<
+  { edits: readonly DocumentEdit[] },
+  { inverses: OpInverse[]; result: ApplyDocumentEditsResult }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    const validation = validateDocumentEdits(params.edits, toEditableNode(selectDocumentRoot(state)));
+    if (!validation.ok) {
+      // Bail before opening a transaction so no undo entry is recorded.
+      return { inverses: [], result: { ok: false, errors: validation.errors } };
+    }
+
+    const inverses: OpInverse[] = [];
+    const mintedIds: MintedIds = {};
+
+    mimic.document.transaction((root) => {
+      validation.edits.forEach((edit, editIndex) => {
+        switch (edit.op) {
+          case "insert": {
+            const minted: string[] = [];
+            insertNodeInput(root, edit.parentId, edit.node, edit.index, minted);
+            if (minted.length > 0) {
+              mintedIds[String(editIndex)] = minted;
+              inverses.push({ kind: "remove-minted", ids: [minted[0] as string] });
+            }
+            break;
+          }
+          case "update": {
+            const current = root.findByIdAcrossTree(edit.nodeId)?.get() as SnapshotNode | undefined;
+            const previous = capturePreviousData(current, edit.set);
+            const node = root.findByIdAcrossTree(edit.nodeId);
+            if (node !== undefined) {
+              node.update(edit.set);
+              inverses.push({ kind: "restore-data", nodeId: edit.nodeId, previous });
+            }
+            break;
+          }
+          case "move": {
+            const node = root.findByIdAcrossTree(edit.nodeId);
+            const parent = root.findByIdAcrossTree(edit.parentId);
+            if (node === undefined || parent === undefined) break;
+            const snapshot = node.get() as SnapshotNode | undefined;
+            const previousParentId = snapshot?.parentId;
+            if (typeof previousParentId === "string") {
+              const previousParent = root.findByIdAcrossTree(previousParentId)?.get() as
+                | SnapshotNode
+                | undefined;
+              inverses.push({
+                kind: "move-back",
+                nodeId: edit.nodeId,
+                parentId: previousParentId,
+                index: indexInParent(previousParent, edit.nodeId),
+              });
+            }
+            node.moveTo(parent.children, edit.index);
+            break;
+          }
+          case "remove": {
+            const node = root.findByIdAcrossTree(edit.nodeId);
+            const snapshot = node?.get() as SnapshotNode | undefined;
+            if (node === undefined || snapshot === undefined) break;
+            const parentId = snapshot.parentId;
+            if (typeof parentId === "string") {
+              const parent = root.findByIdAcrossTree(parentId)?.get() as SnapshotNode | undefined;
+              inverses.push({
+                kind: "restore-subtree",
+                parentId,
+                subtree: serializeSubtree(snapshot),
+                index: indexInParent(parent, edit.nodeId),
+              });
+            }
+            node.remove();
+            break;
+          }
+          case "replaceChildren": {
+            const node = root.findByIdAcrossTree(edit.nodeId);
+            const snapshot = node?.get() as SnapshotNode | undefined;
+            if (node === undefined || snapshot === undefined) break;
+            const previous = snapshot.children.map(serializeSubtree);
+            for (const child of [...snapshot.children]) {
+              root.findByIdAcrossTree(child.id)?.remove();
+            }
+            const minted: string[] = [];
+            for (const child of edit.children) {
+              insertNodeInput(root, edit.nodeId, child, undefined, minted);
+            }
+            mintedIds[String(editIndex)] = minted;
+            inverses.push({ kind: "restore-children", nodeId: edit.nodeId, previous, mintedIds: minted });
+            break;
+          }
+        }
+      });
+    });
+
+    return { inverses, result: { ok: true, mintedIds } };
+  },
+  (ctx, _params, result) => {
+    if (result.inverses.length === 0) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+
+    // Replay inverses in reverse application order so indices/positions line up.
+    mimic.document.transaction((root) => {
+      for (let i = result.inverses.length - 1; i >= 0; i--) {
+        const inverse = result.inverses[i];
+        if (inverse === undefined) continue;
+        switch (inverse.kind) {
+          case "remove-minted": {
+            for (const id of inverse.ids) {
+              root.findByIdAcrossTree(id)?.remove();
+            }
+            break;
+          }
+          case "restore-data": {
+            root.findByIdAcrossTree(inverse.nodeId)?.update(inverse.previous);
+            break;
+          }
+          case "move-back": {
+            const node = root.findByIdAcrossTree(inverse.nodeId);
+            const parent = root.findByIdAcrossTree(inverse.parentId);
+            if (node !== undefined && parent !== undefined) {
+              node.moveTo(parent.children, inverse.index);
+            }
+            break;
+          }
+          case "restore-subtree": {
+            restoreSubtree(root, inverse.parentId, inverse.subtree, inverse.index);
+            break;
+          }
+          case "restore-children": {
+            // Remove the replacement children, then restore the originals in order.
+            for (const id of inverse.mintedIds) {
+              root.findByIdAcrossTree(id)?.remove();
+            }
+            inverse.previous.forEach((subtree, index) => {
+              restoreSubtree(root, inverse.nodeId, subtree, index);
+            });
+            break;
+          }
+        }
+      }
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/drag-select-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/drag-select-actions.ts
new file mode 100644
index 000000000..118d267f8
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/drag-select-actions.ts
@@ -0,0 +1,316 @@
+/**
+ * Drag selection commands using zustand-commander.
+ *
+ * These commands manage the drag-to-select (marquee selection) feature.
+ */
+
+import { commander } from "../designer-commander";
+import { selectDocumentRoot } from "../utils/document-root";
+import type { DesignerStoreState } from "../designer-store-state";
+import { buildDepthMap } from "../utils/selection-level";
+import { clearSelection, selectNode } from "./selection-actions";
+
+// =============================================================================
+// Constants
+// =============================================================================
+
+// Node types that use intersection-based selection (any overlap selects)
+const INTERSECTION_SELECT_TYPES = new Set(["view", "scrollView", "text"]);
+// Node types that use containment-based selection (must be fully inside)
+const CONTAINMENT_SELECT_TYPES = new Set(["screen"]);
+// Node types that should never be selected via drag
+const NON_SELECTABLE_TYPES = new Set(["root"]);
+// Depth at which drag-select operates (direct children of screen)
+const DRAG_SELECT_DEPTH = 2;
+
+// =============================================================================
+// Types
+// =============================================================================
+
+interface Point {
+  x: number;
+  y: number;
+}
+
+interface BoundingBox {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+interface SnapshotNode {
+  id: string;
+  type: string;
+  children?: readonly SnapshotNode[];
+}
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Check if two rectangles intersect (any overlap).
+ */
+function rectanglesIntersect(rect1: BoundingBox, rect2: BoundingBox): boolean {
+  return !(
+    rect1.x + rect1.width < rect2.x ||
+    rect2.x + rect2.width < rect1.x ||
+    rect1.y + rect1.height < rect2.y ||
+    rect2.y + rect2.height < rect1.y
+  );
+}
+
+/**
+ * Check if container fully contains the other rectangle.
+ */
+function rectangleContains(container: BoundingBox, contained: BoundingBox): boolean {
+  return (
+    contained.x >= container.x &&
+    contained.y >= container.y &&
+    contained.x + contained.width <= container.x + container.width &&
+    contained.y + contained.height <= container.y + container.height
+  );
+}
+
+/**
+ * Normalize selection rectangle (handle negative dimensions from dragging in any direction).
+ */
+function normalizeRect(start: Point, end: Point): BoundingBox {
+  const x = Math.min(start.x, end.x);
+  const y = Math.min(start.y, end.y);
+  const width = Math.abs(end.x - start.x);
+  const height = Math.abs(end.y - start.y);
+  return { height, width, x, y };
+}
+
+/**
+ * Extract node types from snapshot tree.
+ */
+function getNodeTypesFromSnapshot(snapshot: SnapshotNode | null): Record<string, string> {
+  if (!snapshot) {
+    return {};
+  }
+
+  const types: Record<string, string> = {};
+
+  const traverse = (node: SnapshotNode) => {
+    types[node.id] = node.type;
+    if (node.children) {
+      for (const child of node.children) {
+        traverse(child);
+      }
+    }
+  };
+
+  traverse(snapshot);
+  return types;
+}
+
+/**
+ * Build parent map from snapshot tree (nodeId -> parentId).
+ */
+function buildParentMap(snapshot: SnapshotNode | null): Record<string, string> {
+  if (!snapshot) {
+    return {};
+  }
+
+  const parentMap: Record<string, string> = {};
+
+  const traverse = (node: SnapshotNode, parentId: string | null) => {
+    if (parentId) {
+      parentMap[node.id] = parentId;
+    }
+    if (node.children) {
+      for (const child of node.children) {
+        traverse(child, node.id);
+      }
+    }
+  };
+
+  traverse(snapshot, null);
+  return parentMap;
+}
+
+/**
+ * Filter to only top-level nodes (exclude nodes whose ancestors are also in the list).
+ * This ensures we don't select both a parent and its children.
+ */
+function filterToTopLevelNodes(nodeIds: string[], parentMap: Record<string, string>): string[] {
+  const nodeIdSet = new Set(nodeIds);
+  const result: string[] = [];
+
+  for (const nodeId of nodeIds) {
+    let isChildOfSelected = false;
+    let currentId = parentMap[nodeId];
+
+    // Walk up the tree to check if any ancestor is also selected
+    while (currentId) {
+      if (nodeIdSet.has(currentId)) {
+        isChildOfSelected = true;
+        break;
+      }
+      currentId = parentMap[currentId];
+    }
+
+    // Only include if no ancestor is in the selection
+    if (!isChildOfSelected) {
+      result.push(nodeId);
+    }
+  }
+
+  return result;
+}
+
+/**
+ * Calculate which nodes should be selected based on the selection rectangle.
+ * Returns only top-level nodes (filters out children of selected parents).
+ * Drag-select only operates at depth 2 (direct children of screen) for
+ * intersection-based selection (flex/text nodes).
+ */
+function calculateSelectedNodes(
+  selectionRect: BoundingBox,
+  boundingBoxes: Record<string, BoundingBox>,
+  snapshot: SnapshotNode | null,
+): string[] {
+  const nodeTypes = getNodeTypesFromSnapshot(snapshot);
+  const parentMap = buildParentMap(snapshot);
+  const depthMap = buildDepthMap(snapshot);
+
+  // Find all nodes that match selection criteria
+  const matchingNodes: string[] = [];
+
+  for (const [nodeId, boundingBox] of Object.entries(boundingBoxes)) {
+    const nodeType = nodeTypes[nodeId];
+    const nodeDepth = depthMap[nodeId];
+
+    // Skip non-selectable nodes
+    if (!nodeType || NON_SELECTABLE_TYPES.has(nodeType)) {
+      continue;
+    }
+
+    let shouldSelect = false;
+
+    if (INTERSECTION_SELECT_TYPES.has(nodeType)) {
+      // For flex/text nodes, only select at depth 2 (direct children of screen)
+      if (nodeDepth !== DRAG_SELECT_DEPTH) {
+        continue;
+      }
+      // Intersection mode: any overlap selects
+      shouldSelect = rectanglesIntersect(selectionRect, boundingBox);
+    } else if (CONTAINMENT_SELECT_TYPES.has(nodeType)) {
+      // Containment mode: must be fully contained (screens)
+      shouldSelect = rectangleContains(selectionRect, boundingBox);
+    }
+
+    if (shouldSelect) {
+      matchingNodes.push(nodeId);
+    }
+  }
+
+  // Filter to only top-level nodes
+  return filterToTopLevelNodes(matchingNodes, parentMap);
+}
+
+// =============================================================================
+// Drag Selection Commands
+// =============================================================================
+
+/**
+ * Start drag selection.
+ */
+export const startDragSelect = commander.action<{
+  point: Point;
+  shiftKey: boolean;
+}>((ctx, params) => {
+  // If shift is not held, clear the existing selection
+  if (!params.shiftKey) {
+    ctx.dispatch(clearSelection)({});
+  }
+
+  ctx.setState({
+    dragSelect: {
+      currentPoint: params.point,
+      isActive: true,
+      previewSelectedNodeIds: [],
+      startPoint: params.point,
+    },
+  });
+});
+
+/**
+ * Update drag selection during mouse move.
+ * Calculates preview of which nodes would be selected.
+ */
+export const updateDragSelect = commander.action<{ point: Point }>((ctx, params) => {
+  const state = ctx.getState();
+  const { canvas, dragSelect } = state;
+
+  if (!dragSelect.isActive || !dragSelect.startPoint) {
+    return;
+  }
+
+  // Calculate selection rectangle
+  const selectionRect = normalizeRect(dragSelect.startPoint, params.point);
+
+  // Calculate which nodes would be selected
+  const root: SnapshotNode = selectDocumentRoot(state);
+  const previewSelectedNodeIds = calculateSelectedNodes(selectionRect, canvas.boundingBoxes, root);
+
+  ctx.setState({
+    dragSelect: {
+      ...dragSelect,
+      currentPoint: params.point,
+      previewSelectedNodeIds,
+    },
+  });
+});
+
+/**
+ * End drag selection and apply the selection.
+ */
+export const endDragSelect = commander.action((ctx) => {
+  const state = ctx.getState();
+  const { dragSelect } = state;
+
+  if (!dragSelect.isActive) {
+    ctx.setState({
+      dragSelect: {
+        currentPoint: null,
+        isActive: false,
+        previewSelectedNodeIds: [],
+        startPoint: null,
+      },
+    });
+    return;
+  }
+
+  // Apply selection from preview
+  for (const nodeId of dragSelect.previewSelectedNodeIds) {
+    ctx.dispatch(selectNode)({ id: nodeId, many: true });
+  }
+
+  // Reset drag select state
+  ctx.setState({
+    dragSelect: {
+      currentPoint: null,
+      isActive: false,
+      previewSelectedNodeIds: [],
+      startPoint: null,
+    },
+  });
+});
+
+/**
+ * Cancel drag selection without applying.
+ */
+export const cancelDragSelect = commander.action((ctx) => {
+  ctx.setState({
+    dragSelect: {
+      currentPoint: null,
+      isActive: false,
+      previewSelectedNodeIds: [],
+      startPoint: null,
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/border-radius-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/border-radius-style-actions.ts
new file mode 100644
index 000000000..8b1768a25
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/border-radius-style-actions.ts
@@ -0,0 +1,32 @@
+import { commander } from "../../designer-commander";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+interface BorderRadiusStyle {
+  borderTopLeftRadius: number;
+  borderTopRightRadius: number;
+  borderBottomRightRadius: number;
+  borderBottomLeftRadius: number;
+}
+
+export const updateBorderRadiusStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<BorderRadiusStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => ({
+    previousStyles: applyStyleUpdate<BorderRadiusStyle>(
+      ctx.getState().mimic,
+      params.nodes,
+      params.style,
+      ctx.getState().stateOverrideSelection,
+      ctx.transaction,
+    ),
+  }),
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/border-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/border-style-actions.ts
new file mode 100644
index 000000000..14424bbea
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/border-style-actions.ts
@@ -0,0 +1,35 @@
+import { commander } from "../../designer-commander";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+interface BorderStyle {
+  borderTopWidth: number;
+  borderRightWidth: number;
+  borderBottomWidth: number;
+  borderLeftWidth: number;
+  borderColor: string;
+  borderStyle: string;
+  borderEnabled: boolean;
+}
+
+export const updateBorderStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<BorderStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => ({
+    previousStyles: applyStyleUpdate<BorderStyle>(
+      ctx.getState().mimic,
+      params.nodes,
+      params.style,
+      ctx.getState().stateOverrideSelection,
+      ctx.transaction,
+    ),
+  }),
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.test.ts
new file mode 100644
index 000000000..5c8e0d2e5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.test.ts
@@ -0,0 +1,215 @@
+import { describe, expect, test } from "vite-plus/test";
+import { performUndo } from "@voidhash/mimic/zustand-commander";
+
+import { createDesignerStore } from "../../designer-store";
+import type { PaywallDesignerStoreType } from "../../designer-store";
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { readComponentPropEntries } from "../../utils/component-node-writes";
+import type { ComponentPropBindingPlain } from "../../utils/component-prop-values";
+import {
+  removeComponentPropForNodes,
+  updateComponentPropBindingForNodes,
+} from "./component-prop-actions";
+
+/** Inserts N component nodes under the seeded screen, returning their ids. */
+function seedComponentNodes(
+  doc: OfflineDesignerDocument,
+  count: number,
+  seeds: readonly (readonly { name: string; value: unknown }[])[] = [],
+): string[] {
+  const { screenId } = seededIds(doc);
+  const ids: string[] = [];
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    for (let i = 0; i < count; i++) {
+      const node = (
+        screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+      ).insertLast({
+        type: "component",
+        componentSlug: "card",
+        componentVersion: 1,
+        contentHash: `hash-${i}`,
+        name: `card-${i}`,
+        previewState: "default",
+      });
+      ids.push(node.id);
+      const props = seeds[i] ?? [];
+      const proxy = node as unknown as {
+        data: { props: { push: (v: unknown) => void } };
+      };
+      for (const binding of props) {
+        proxy.data.props.push({ name: binding.name, value: binding.value });
+      }
+    }
+  });
+  return ids;
+}
+
+/** Reads the stored binding for a prop on a node, or `undefined` when absent. */
+function storedProp(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  propName: string,
+): unknown {
+  return readComponentPropEntries(doc.root, nodeId).find((entry) => entry.name === propName)?.raw;
+}
+
+/**
+ * A minimal commander command shape: an `fn` (forward) plus a `revert`. Both
+ * batched actions match this — the executor/host dispatch them the same way.
+ */
+interface TestCommand<P, R> {
+  fn: (ctx: unknown, params: P) => R;
+  revert: (ctx: unknown, params: P, result: R) => void;
+}
+
+/**
+ * Dispatches an undoable action on a real designer store the way production
+ * does (one dispatch → one undo entry, via the same `_commander.undoStack`
+ * shape {@link performUndo} reverts), then exposes the store so the test can
+ * assert `undoStack.length` and call {@link performUndo}. Reproduces the eight
+ * lines of `createDispatchFromApi` rather than depending on the internal hook.
+ */
+function makeStore(doc: OfflineDesignerDocument): {
+  store: PaywallDesignerStoreType;
+  dispatch: <P, R>(command: TestCommand<P, R>, params: P) => R;
+  undoDepth: () => number;
+} {
+  const store = createDesignerStore(doc as unknown as Parameters<typeof createDesignerStore>[0]);
+  const storeApi = store as unknown as {
+    getState: () => { _commander: { undoStack: unknown[] } };
+    setState: (updater: (state: unknown) => unknown) => void;
+  };
+  return {
+    store,
+    dispatch: (command, params) => {
+      const ctx = { getState: () => store.getState() };
+      const result = command.fn(ctx, params);
+      storeApi.setState((state) => {
+        const s = state as { _commander: { undoStack: unknown[]; redoStack: unknown[] } };
+        return {
+          ...s,
+          _commander: {
+            ...s._commander,
+            undoStack: [...s._commander.undoStack, { command, params, result, timestamp: 0 }],
+            redoStack: [],
+          },
+        };
+      });
+      return result;
+    },
+    undoDepth: () => storeApi.getState()._commander.undoStack.length,
+  };
+}
+
+const stringBinding = (value: string): ComponentPropBindingPlain => ({
+  type: "literal",
+  value: { key: "string", value },
+});
+
+/** The raw stored binding shape a string literal round-trips to. */
+const storedStringBinding = (value: string) => ({
+  type: "literal",
+  value: { key: "string", value },
+});
+
+describe("updateComponentPropBindingForNodes", () => {
+  test("writes the binding to every node in one transaction", () => {
+    const doc = createOfflineDesignerDocument();
+    const ids = seedComponentNodes(doc, 3);
+    const { dispatch } = makeStore(doc);
+
+    dispatch(updateComponentPropBindingForNodes, {
+      nodeIds: ids,
+      propName: "title",
+      binding: stringBinding("Hello"),
+    });
+
+    for (const id of ids) {
+      expect(storedProp(doc, id, "title")).toEqual(storedStringBinding("Hello"));
+    }
+  });
+
+  test("three nodes yield ONE undo entry; performUndo restores all prior bindings", () => {
+    const doc = createOfflineDesignerDocument();
+    // Node 0 starts with a stored title; nodes 1 and 2 have none.
+    const ids = seedComponentNodes(doc, 3, [
+      [{ name: "title", value: { type: "literal", value: { key: "string", value: "Original" } } }],
+      [],
+      [],
+    ]);
+    const { dispatch, undoDepth, store } = makeStore(doc);
+
+    dispatch(updateComponentPropBindingForNodes, {
+      nodeIds: ids,
+      propName: "title",
+      binding: stringBinding("Changed"),
+    });
+
+    // Exactly one undo entry for the whole batch.
+    expect(undoDepth()).toBe(1);
+    for (const id of ids) {
+      expect(storedProp(doc, id, "title")).toEqual(storedStringBinding("Changed"));
+    }
+
+    const undone = performUndo(store as never);
+    expect(undone).toBe(true);
+    expect(undoDepth()).toBe(0);
+
+    // Node 0 restored to its original binding; nodes with no prior binding have
+    // the entry removed entirely.
+    expect(storedProp(doc, ids[0]!, "title")).toEqual(storedStringBinding("Original"));
+    expect(storedProp(doc, ids[1]!, "title")).toBeUndefined();
+    expect(storedProp(doc, ids[2]!, "title")).toBeUndefined();
+  });
+
+  test("skips missing nodes without throwing and still records one entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const ids = seedComponentNodes(doc, 1);
+    const { dispatch, undoDepth, store } = makeStore(doc);
+
+    dispatch(updateComponentPropBindingForNodes, {
+      nodeIds: [...ids, "does-not-exist"],
+      propName: "title",
+      binding: stringBinding("Only real"),
+    });
+
+    expect(undoDepth()).toBe(1);
+    expect(storedProp(doc, ids[0]!, "title")).toEqual(storedStringBinding("Only real"));
+
+    performUndo(store as never);
+    expect(storedProp(doc, ids[0]!, "title")).toBeUndefined();
+  });
+});
+
+describe("removeComponentPropForNodes", () => {
+  test("removes the entry from every node and undo re-adds the removed ones", () => {
+    const doc = createOfflineDesignerDocument();
+    const ids = seedComponentNodes(doc, 3, [
+      [{ name: "title", value: { type: "literal", value: { key: "string", value: "A" } } }],
+      [{ name: "title", value: { type: "literal", value: { key: "string", value: "B" } } }],
+      // Node 2 has no stored title.
+      [],
+    ]);
+    const { dispatch, undoDepth, store } = makeStore(doc);
+
+    dispatch(removeComponentPropForNodes, { nodeIds: ids, propName: "title" });
+
+    expect(undoDepth()).toBe(1);
+    for (const id of ids) {
+      expect(storedProp(doc, id, "title")).toBeUndefined();
+    }
+
+    const undone = performUndo(store as never);
+    expect(undone).toBe(true);
+    expect(storedProp(doc, ids[0]!, "title")).toEqual(storedStringBinding("A"));
+    expect(storedProp(doc, ids[1]!, "title")).toEqual(storedStringBinding("B"));
+    // Node 2 had nothing removed, so undo re-adds nothing.
+    expect(storedProp(doc, ids[2]!, "title")).toBeUndefined();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.ts
new file mode 100644
index 000000000..c2b131c07
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/component-prop-actions.ts
@@ -0,0 +1,322 @@
+import type { ComponentBoundAction } from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import {
+  type ComponentScalarValues,
+  removeComponentActionEntry,
+  removeComponentPropEntries,
+  removeComponentPropEntry,
+  restoreComponentActionBindings,
+  restoreComponentNodeScalars,
+  restoreComponentPropBindings,
+  updateComponentNodeData,
+  writeComponentActionBinding,
+  writeComponentPropBinding,
+} from "../../utils/component-node-writes";
+import type { ComponentPropBindingPlain } from "../../utils/component-prop-values";
+
+/**
+ * Sets a component prop binding by prop name: updates the existing prop entry
+ * (located from raw node state — proxy array reads resolve empty below tree
+ * nodes) or adds a new `{name, value}` entry via a whole-array rebuild. Undo
+ * restores the previous raw stored value — even when it no longer parses — or
+ * removes the added entry.
+ */
+export const updateComponentPropBinding = commander.undoableAction<
+  {
+    nodeId: string;
+    propName: string;
+    binding: ComponentPropBindingPlain;
+  },
+  { previous: { existed: boolean; raw: unknown } | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const result = mimic.document.transaction((root) =>
+      writeComponentPropBinding(root, params.nodeId, params.propName, params.binding),
+    );
+    return {
+      previous:
+        result === undefined ? null : { existed: result.existed, raw: result.previousRaw },
+    };
+  },
+  (ctx, params, result) => {
+    const { previous } = result;
+    if (previous === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      if (!previous.existed) {
+        removeComponentPropEntry(root, params.nodeId, params.propName);
+        return;
+      }
+      restoreComponentPropBindings(root, params.nodeId, [
+        { name: params.propName, raw: previous.raw },
+      ]);
+    });
+  },
+);
+
+/** Per-node undo payload for a batched prop-binding write. */
+interface NodePropWriteUndo {
+  readonly nodeId: string;
+  /** `null` when the node was not a component node (nothing was written). */
+  readonly previous: { existed: boolean; raw: unknown } | null;
+}
+
+/**
+ * Sets the SAME component prop binding on many nodes in ONE undoable action:
+ * updates each node's existing prop entry or adds a new `{name, value}` entry,
+ * all inside a single document transaction. Undo restores every node's prior
+ * binding — removing the entry for nodes that had none before — so N nodes yield
+ * exactly ONE undo entry. Mirrors {@link updateComponentPropBinding} per node.
+ */
+export const updateComponentPropBindingForNodes = commander.undoableAction<
+  {
+    nodeIds: readonly string[];
+    propName: string;
+    binding: ComponentPropBindingPlain;
+  },
+  { undo: readonly NodePropWriteUndo[] }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const undo = mimic.document.transaction((root): NodePropWriteUndo[] =>
+      params.nodeIds.map((nodeId) => {
+        const result = writeComponentPropBinding(root, nodeId, params.propName, params.binding);
+        return {
+          nodeId,
+          previous:
+            result === undefined
+              ? null
+              : { existed: result.existed, raw: result.previousRaw },
+        };
+      }),
+    );
+    return { undo };
+  },
+  (ctx, params, result) => {
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      for (const entry of result.undo) {
+        if (entry.previous === null) continue;
+        if (!entry.previous.existed) {
+          removeComponentPropEntry(root, entry.nodeId, params.propName);
+          continue;
+        }
+        restoreComponentPropBindings(root, entry.nodeId, [
+          { name: params.propName, raw: entry.previous.raw },
+        ]);
+      }
+    });
+  },
+);
+
+/** Per-node undo payload for a batched prop-entry removal. */
+interface NodePropRemoveUndo {
+  readonly nodeId: string;
+  /** `false` when nothing was removed (node missing or had no entry). */
+  readonly removed: boolean;
+  readonly removedRaw: unknown;
+}
+
+/**
+ * Removes the SAME stored prop entry from many nodes in ONE undoable action —
+ * the batched revert-to-default affordance. Undo re-adds every entry that was
+ * actually removed, from its raw stored value, in a single transaction (N nodes
+ * → ONE undo entry). Mirrors {@link removeComponentProp} per node.
+ */
+export const removeComponentPropForNodes = commander.undoableAction<
+  {
+    nodeIds: readonly string[];
+    propName: string;
+  },
+  { undo: readonly NodePropRemoveUndo[] }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const undo = mimic.document.transaction((root): NodePropRemoveUndo[] =>
+      params.nodeIds.map((nodeId) => {
+        const result = removeComponentPropEntry(root, nodeId, params.propName);
+        return result === undefined
+          ? { nodeId, removed: false, removedRaw: undefined }
+          : { nodeId, removed: result.removed, removedRaw: result.previousRaw };
+      }),
+    );
+    return { undo };
+  },
+  (ctx, params, result) => {
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      for (const entry of result.undo) {
+        if (!entry.removed) continue;
+        restoreComponentPropBindings(root, entry.nodeId, [
+          { name: params.propName, raw: entry.removedRaw },
+        ]);
+      }
+    });
+  },
+);
+
+/**
+ * Removes a component node's stored prop entry by name (the revert-to-default
+ * affordance — the manifest default applies again once the entry is gone).
+ * Undo restores the removed entry from its raw stored value.
+ */
+export const removeComponentProp = commander.undoableAction<
+  {
+    nodeId: string;
+    propName: string;
+  },
+  { removed: boolean; removedRaw: unknown }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const result = mimic.document.transaction((root) =>
+      removeComponentPropEntry(root, params.nodeId, params.propName),
+    );
+    return result === undefined
+      ? { removed: false, removedRaw: undefined }
+      : { removed: result.removed, removedRaw: result.previousRaw };
+  },
+  (ctx, params, result) => {
+    if (!result.removed) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreComponentPropBindings(root, params.nodeId, [
+        { name: params.propName, raw: result.removedRaw },
+      ]);
+    });
+  },
+);
+
+/**
+ * Binds a named component action: updates the existing binding entry (located
+ * from raw node state) or adds a new `{name, action}` entry via a whole-array
+ * rebuild. Undo restores the previous raw stored value or removes the added
+ * entry.
+ */
+export const setComponentActionBinding = commander.undoableAction<
+  {
+    nodeId: string;
+    actionName: string;
+    action: ComponentBoundAction;
+  },
+  { previous: { existed: boolean; raw: unknown } | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const result = mimic.document.transaction((root) =>
+      writeComponentActionBinding(root, params.nodeId, params.actionName, params.action),
+    );
+    return {
+      previous:
+        result === undefined ? null : { existed: result.existed, raw: result.previousRaw },
+    };
+  },
+  (ctx, params, result) => {
+    const { previous } = result;
+    if (previous === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      if (!previous.existed) {
+        removeComponentActionEntry(root, params.nodeId, params.actionName);
+        return;
+      }
+      restoreComponentActionBindings(root, params.nodeId, [
+        { name: params.actionName, raw: previous.raw },
+      ]);
+    });
+  },
+);
+
+/**
+ * Removes a component node's stored action binding by name (the action falls
+ * back to "none"). Undo restores the removed entry from its raw stored value.
+ */
+export const removeComponentActionBinding = commander.undoableAction<
+  {
+    nodeId: string;
+    actionName: string;
+  },
+  { removed: boolean; removedRaw: unknown }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const result = mimic.document.transaction((root) =>
+      removeComponentActionEntry(root, params.nodeId, params.actionName),
+    );
+    return result === undefined
+      ? { removed: false, removedRaw: undefined }
+      : { removed: result.removed, removedRaw: result.previousRaw };
+  },
+  (ctx, params, result) => {
+    if (!result.removed) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreComponentActionBindings(root, params.nodeId, [
+        { name: params.actionName, raw: result.removedRaw },
+      ]);
+    });
+  },
+);
+
+/**
+ * Applies a component version update in one transaction: bumps the pinned
+ * version/contentHash, removes prop entries the new manifest no longer
+ * declares (located from raw node state), and resets `previewState` to
+ * "default" when the persisted state is absent from the new version. Undo
+ * restores the touched scalar fields and the dropped prop entries from their
+ * raw stored values — including values that no longer parse — (re-added
+ * entries are appended; entry order is not preserved).
+ */
+export const applyComponentVersionUpdate = commander.undoableAction<
+  {
+    nodeId: string;
+    version: number;
+    contentHash: string;
+    dropPropNames: string[];
+    resetPreviewState: boolean;
+  },
+  {
+    previous: {
+      scalars: ComponentScalarValues;
+      removedProps: { name: string; raw: unknown }[];
+    } | null;
+  }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    return mimic.document.transaction((root) => {
+      const scalars = updateComponentNodeData(
+        root,
+        params.nodeId,
+        params.resetPreviewState
+          ? {
+              componentVersion: params.version,
+              contentHash: params.contentHash,
+              previewState: "default",
+            }
+          : { componentVersion: params.version, contentHash: params.contentHash },
+      );
+      if (scalars === undefined) {
+        return { previous: null };
+      }
+      const removedProps = removeComponentPropEntries(root, params.nodeId, params.dropPropNames);
+      return { previous: { removedProps, scalars } };
+    });
+  },
+  (ctx, params, result) => {
+    const { previous } = result;
+    if (previous === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreComponentNodeScalars(root, params.nodeId, previous.scalars);
+      restoreComponentPropBindings(root, params.nodeId, previous.removedProps);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-gradient-writes.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-gradient-writes.test.ts
new file mode 100644
index 000000000..23b710020
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-gradient-writes.test.ts
@@ -0,0 +1,221 @@
+import { ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { findTypedNode } from "../../utils/node-proxies";
+import { addNodeState } from "./state-actions";
+import { applyStyleUpdate, type StyleTarget, undoStyleUpdate } from "./style-action-helpers";
+
+// End-to-end coverage of structured (gradient) style writes through the REAL
+// mimic CRDT document, exercising the decoded/logical shape boundary that the
+// mock in style-action-helpers.test.ts cannot reproduce.
+
+function makeDesignerDoc() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  let flexId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    flexId = screen.children.insertLast({ type: "view", name: "Card" }).id;
+  });
+  return { doc, flexId };
+}
+
+function rawStyle(doc: OfflineDesignerDocument, nodeId: string) {
+  const data = findTypedNode(doc.root, nodeId, ViewNode)?.get()?.data;
+  if (data === undefined) throw new Error("expected a view node");
+  return data.style;
+}
+
+function gradientStops(doc: OfflineDesignerDocument, nodeId: string) {
+  const gradient = rawStyle(doc, nodeId).backgroundGradient as unknown as
+    | { stops: ReadonlyArray<{ value?: { color: string; position: number } }> }
+    | undefined;
+  return (gradient?.stops ?? []).map((entry) => entry.value);
+}
+
+function mimicOf(doc: OfflineDesignerDocument) {
+  return { document: doc, snapshot: doc.getSnapshot() } as never;
+}
+
+const GRADIENT = {
+  kind: "linear" as const,
+  startX: 0,
+  startY: 0,
+  endX: 1,
+  endY: 1,
+  stops: [
+    { color: "rgba(255, 0, 0, 1)", position: 0 },
+    { color: "rgba(0, 255, 0, 1)", position: 0.5 },
+    { color: "rgba(0, 0, 255, 1)", position: 1 },
+  ],
+};
+
+describe("gradient style writes (real document)", () => {
+  test("writes a gradient to the base style with logical stops preserved", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const nodes: StyleTarget[] = [{ nodeId: flexId, nodeType: "view" }];
+
+    applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: GRADIENT },
+      {},
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+
+    expect(rawStyle(doc, flexId).backgroundType).toBe("gradient");
+    expect(gradientStops(doc, flexId)).toEqual(GRADIENT.stops);
+  });
+
+  test("editing another base field preserves a non-default gradient's stops", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const nodes: StyleTarget[] = [{ nodeId: flexId, nodeType: "view" }];
+
+    applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: GRADIENT },
+      {},
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+
+    // A base-style write touching only backgroundColor must not flatten the
+    // carried-along gradient (regression: decoded wrapped stops re-encoded to
+    // schema defaults).
+    applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundColor: "rgba(1, 2, 3, 1)" },
+      {},
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+
+    expect(gradientStops(doc, flexId)).toEqual(GRADIENT.stops);
+  });
+
+  test("undo of a base edit restores the node's gradient stops intact", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const nodes: StyleTarget[] = [{ nodeId: flexId, nodeType: "view" }];
+
+    applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: GRADIENT },
+      {},
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+
+    const previous = applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundColor: "rgba(9, 9, 9, 1)" },
+      {},
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+
+    undoStyleUpdate(mimicOf(doc), nodes, previous, ((fn: never) => doc.transaction(fn)) as never);
+
+    expect(gradientStops(doc, flexId)).toEqual(GRADIENT.stops);
+  });
+
+  test("writes a gradient into a selected state override with logical stops", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const nodes: StyleTarget[] = [{ nodeId: flexId, nodeType: "view" }];
+    const stateId = makeState(doc, flexId);
+
+    applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundEnabled: true, backgroundType: "gradient", backgroundGradient: GRADIENT },
+      { [flexId]: stateId },
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+
+    expect(overrideGradientStops(doc, flexId, stateId)).toEqual(GRADIENT.stops);
+  });
+
+  test("undo restores a previous gradient override intact", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const nodes: StyleTarget[] = [{ nodeId: flexId, nodeType: "view" }];
+    const stateId = makeState(doc, flexId);
+    const selection = { [flexId]: stateId };
+
+    applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundGradient: GRADIENT },
+      selection,
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+
+    const changed = {
+      ...GRADIENT,
+      stops: [
+        { color: "rgba(10, 20, 30, 1)", position: 0.25 },
+        { color: "rgba(40, 50, 60, 1)", position: 0.75 },
+      ],
+    };
+    const previous = applyStyleUpdate(
+      mimicOf(doc),
+      nodes,
+      { backgroundGradient: changed },
+      selection,
+      ((fn: never) => doc.transaction(fn)) as never,
+    );
+    expect(overrideGradientStops(doc, flexId, stateId)).toEqual(changed.stops);
+
+    undoStyleUpdate(mimicOf(doc), nodes, previous, ((fn: never) => doc.transaction(fn)) as never);
+    expect(overrideGradientStops(doc, flexId, stateId)).toEqual(GRADIENT.stops);
+  });
+});
+
+function makeState(doc: OfflineDesignerDocument, nodeId: string): string {
+  const ctx = {
+    dispatch: () => () => undefined,
+    getState: () => ({ mimic: { document: doc, snapshot: doc.getSnapshot() } }),
+    setState: () => undefined,
+    transaction: (fn: never) => doc.transaction(fn),
+  };
+  const { stateId } = addNodeState.fn(ctx as never, {
+    condition: {
+      type: "or",
+      value: [
+        {
+          type: "and",
+          value: [
+            {
+              type: "equals",
+              value: {
+                left: { type: "literal", value: { key: "boolean", value: true } },
+                right: { type: "literal", value: { key: "boolean", value: true } },
+              },
+            },
+          ],
+        },
+      ],
+    },
+    name: "Hovered",
+    nodeId,
+    nodeType: "view" as const,
+  });
+  if (stateId === null) throw new Error("expected a state id");
+  return stateId;
+}
+
+function overrideGradientStops(doc: OfflineDesignerDocument, nodeId: string, stateId: string) {
+  const state = findTypedNode(doc.root, nodeId, ViewNode)
+    ?.get()
+    ?.data.states.find((entry) => entry.id === stateId);
+  const gradient = (
+    state?.value?.overrides.style as
+      | { backgroundGradient?: { stops: ReadonlyArray<{ value?: unknown }> } }
+      | undefined
+  )?.backgroundGradient;
+  return gradient?.stops.map((s) => s.value);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-render.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-render.test.ts
new file mode 100644
index 000000000..90c1971c5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-render.test.ts
@@ -0,0 +1,143 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import {
+  buildScreenContainerStyles,
+  buildViewStyles,
+} from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { documentRootFromSnapshot } from "../../utils/document-root";
+import { resolveEffectiveStyle } from "../../utils/state-overrides";
+import { findNodeById } from "../../utils/tree";
+import { applyStyleUpdate, type StyleTarget } from "./style-action-helpers";
+
+// Path-faithful coverage of what the CANVAS actually paints. The existing
+// fill-gradient-writes suite proves writes persist the logical stop shape; this
+// suite drives the READ side the renderer uses — real CRDT document ->
+// snapshot -> resolveEffectiveStyle -> buildViewStyles/buildScreenContainerStyles
+// -> buildBackgroundStyles -> DOM `style` — asserting a non-solid fill paints a
+// real `backgroundImage` rather than silently collapsing to transparent.
+
+function makeDesignerDoc() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  let viewId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    viewId = screen.children.insertLast({ type: "view", name: "Card" }).id;
+  });
+  return { doc, viewId, screenId };
+}
+
+function mimicOf(doc: OfflineDesignerDocument) {
+  return { document: doc, snapshot: doc.getSnapshot() } as never;
+}
+
+const apply = (doc: OfflineDesignerDocument, target: StyleTarget, style: Record<string, unknown>) =>
+  applyStyleUpdate(mimicOf(doc), [target], style, {}, ((fn: never) => doc.transaction(fn)) as never);
+
+/** Reads a node's effective style exactly as the canvas node-renderers do. */
+function effectiveStyle(doc: OfflineDesignerDocument, nodeId: string): Record<string, unknown> {
+  const root = documentRootFromSnapshot(doc.getSnapshot());
+  const node = findNodeById<SnapshotNode>(root as never, nodeId);
+  if (!node) throw new Error("expected the node in the snapshot");
+  return resolveEffectiveStyle(node as never, null);
+}
+
+const GRADIENT_URL_PREFIX = 'url("data:image/svg+xml,';
+
+describe("fill render (path-faithful)", () => {
+  test("a gradient view paints an SVG data-URI backgroundImage", () => {
+    const { doc, viewId } = makeDesignerDoc();
+    const target: StyleTarget = { nodeId: viewId, nodeType: "view" };
+
+    apply(doc, target, {
+      backgroundEnabled: true,
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+        stops: [
+          { color: "rgba(255, 0, 0, 1)", position: 0 },
+          { color: "rgba(0, 0, 255, 1)", position: 1 },
+        ],
+      },
+    });
+
+    const rendered = buildViewStyles(effectiveStyle(doc, viewId) as never);
+    // Before the fix: the wrapped-stop read path was fine, but any shape drift
+    // (or reading `.value` on a logical stop) collapsed this to transparent.
+    expect(rendered.backgroundColor).toBeUndefined();
+    expect(String(rendered.backgroundImage)).toContain(GRADIENT_URL_PREFIX);
+    const svg = decodeURIComponent(
+      /^url\("data:image\/svg\+xml,(.*)"\)$/.exec(String(rendered.backgroundImage))![1]!,
+    );
+    expect(svg).toContain("stop-color='rgba(255, 0, 0, 1)'");
+    expect(svg).toContain("stop-color='rgba(0, 0, 255, 1)'");
+  });
+
+  test("switching a view to gradient with no explicit gradient paints the default gradient", () => {
+    const { doc, viewId } = makeDesignerDoc();
+    const target: StyleTarget = { nodeId: viewId, nodeType: "view" };
+
+    // The real panel flow: enable fill, then just switch the type — the
+    // gradient comes from the schema default (white -> transparent).
+    apply(doc, target, { backgroundEnabled: true });
+    apply(doc, target, { backgroundType: "gradient" });
+
+    const rendered = buildViewStyles(effectiveStyle(doc, viewId) as never);
+    expect(rendered.backgroundColor).toBeUndefined();
+    expect(String(rendered.backgroundImage)).toContain(GRADIENT_URL_PREFIX);
+  });
+
+  test("switching the screen to gradient paints an SVG data-URI backgroundImage", () => {
+    const { doc, screenId } = makeDesignerDoc();
+    const target: StyleTarget = { nodeId: screenId, nodeType: "screen" };
+
+    // The seeded screen is already backgroundEnabled with a solid white fill;
+    // the user just switches the type to gradient.
+    apply(doc, target, { backgroundType: "gradient" });
+
+    const rendered = buildScreenContainerStyles(effectiveStyle(doc, screenId) as never);
+    expect(rendered.backgroundColor).toBeUndefined();
+    expect(String(rendered.backgroundImage)).toContain(GRADIENT_URL_PREFIX);
+  });
+
+  test("an image view paints a url() backgroundImage with the mapped size", () => {
+    const { doc, viewId } = makeDesignerDoc();
+    const target: StyleTarget = { nodeId: viewId, nodeType: "view" };
+
+    apply(doc, target, { backgroundEnabled: true, backgroundType: "image" });
+    apply(doc, target, {
+      backgroundImage: { url: "https://example.com/bg.png", resizeMode: "contain" },
+    });
+
+    const rendered = buildViewStyles(effectiveStyle(doc, viewId) as never);
+    expect(rendered.backgroundColor).toBeUndefined();
+    expect(rendered.backgroundImage).toBe('url("https://example.com/bg.png")');
+    expect(rendered.backgroundSize).toBe("contain");
+  });
+
+  test("a solid view still paints backgroundColor", () => {
+    const { doc, viewId } = makeDesignerDoc();
+    const target: StyleTarget = { nodeId: viewId, nodeType: "view" };
+
+    apply(doc, target, {
+      backgroundEnabled: true,
+      backgroundType: "solid",
+      backgroundColor: "rgba(10, 20, 30, 1)",
+    });
+
+    const rendered = buildViewStyles(effectiveStyle(doc, viewId) as never);
+    expect(rendered.backgroundImage).toBeUndefined();
+    expect(rendered.backgroundColor).toBe("rgba(10, 20, 30, 1)");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-style-actions.ts
new file mode 100644
index 000000000..0cb582d93
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/fill-style-actions.ts
@@ -0,0 +1,55 @@
+import { commander } from "../../designer-commander";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+export type BackgroundType = "solid" | "gradient" | "image";
+
+/** Logical gradient-stop write shape (the CRDT wraps these on read). */
+export interface GradientStop {
+  color: string;
+  position: number;
+}
+
+export interface BackgroundGradient {
+  kind: "linear" | "radial";
+  startX: number;
+  startY: number;
+  endX: number;
+  endY: number;
+  stops: GradientStop[];
+}
+
+export interface BackgroundImage {
+  url: string;
+  resizeMode: "cover" | "contain" | "stretch" | "center";
+}
+
+interface FillStyle {
+  backgroundColor: string;
+  backgroundEnabled: boolean;
+  backgroundType: BackgroundType;
+  backgroundGradient: BackgroundGradient;
+  backgroundImage: BackgroundImage;
+}
+
+export const updateFillStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<FillStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => ({
+    previousStyles: applyStyleUpdate<FillStyle>(
+      ctx.getState().mimic,
+      params.nodes,
+      params.style,
+      ctx.getState().stateOverrideSelection,
+      ctx.transaction,
+    ),
+  }),
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.test.ts
new file mode 100644
index 000000000..5c420ffc0
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.test.ts
@@ -0,0 +1,307 @@
+import { ViewNode, type Action } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { findTypedNode } from "../../utils/node-proxies";
+import {
+  addInteraction,
+  removeInteraction,
+  updateInteraction,
+  updateInteractionActionOverride,
+} from "./interaction-actions";
+
+const sampleCondition = {
+  type: "or",
+  value: [
+    {
+      type: "and",
+      value: [
+        {
+          type: "equals",
+          value: {
+            left: { type: "literal", value: { key: "boolean", value: true } },
+            right: { type: "literal", value: { key: "boolean", value: true } },
+          },
+        },
+      ],
+    },
+  ],
+} as const;
+
+function makeDesignerDoc() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  let flexId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    flexId = screen.children.insertLast({ type: "view" }).id;
+  });
+  return { doc, flexId };
+}
+
+function makeCtx(doc: OfflineDesignerDocument) {
+  let storeState: Record<string, unknown> = {
+    mimic: { document: doc, snapshot: doc.getSnapshot() },
+    stateOverrideSelection: {},
+  };
+  return {
+    dispatch: () => () => undefined,
+    getState: () => storeState,
+    setState: (partial: Record<string, unknown>) => {
+      storeState = { ...storeState, ...partial };
+    },
+    transaction: (fn: never) => doc.transaction(fn),
+  };
+}
+
+function rawViewData(doc: OfflineDesignerDocument, nodeId: string) {
+  const data = findTypedNode(doc.root, nodeId, ViewNode)?.get()?.data;
+  if (data === undefined) {
+    throw new Error("expected a flex node");
+  }
+  return data;
+}
+
+function pushViewState(doc: OfflineDesignerDocument, nodeId: string, name: string): string {
+  let entryId = "";
+  doc.transaction((root) => {
+    const node = findTypedNode(root, nodeId, ViewNode);
+    if (!node) throw new Error("expected a flex node");
+    entryId = node.data.states.push({
+      condition: sampleCondition,
+      id: `state-el-${name}`,
+      name,
+    }).id;
+  });
+  return entryId;
+}
+
+function rawActionOverrides(doc: OfflineDesignerDocument, nodeId: string, stateEntryId: string) {
+  const stateEntry = rawViewData(doc, nodeId).states.find(
+    (candidate) => candidate.id === stateEntryId,
+  );
+  if (stateEntry?.value === undefined) {
+    throw new Error("expected the state entry");
+  }
+  return stateEntry.value.overrides.actions;
+}
+
+describe("addInteraction", () => {
+  test("creates one entry and undo removes it (entry-id addressed)", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const params = { nodeId: flexId };
+
+    const result = addInteraction.fn(ctx as never, params);
+
+    const entries = rawViewData(doc, flexId).interactions;
+    expect(entries).toHaveLength(1);
+    expect(result.interactionId).toBe(entries[0]?.id);
+    expect(entries[0]?.value?.trigger).toEqual({ type: "click" });
+    expect(entries[0]?.value?.action).toEqual({ type: "none" });
+
+    addInteraction.revert(ctx as never, params, result);
+    expect(rawViewData(doc, flexId).interactions).toHaveLength(0);
+  });
+});
+
+describe("updateInteraction", () => {
+  test("updates in place and undo restores the previous values", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addInteraction.fn(ctx as never, { nodeId: flexId });
+    const interactionId = added.interactionId;
+    if (interactionId === null) throw new Error("expected an interaction entry id");
+
+    const params = {
+      interactionId,
+      newAction: { type: "close-paywall" } as Action,
+      nodeId: flexId,
+    };
+    const result = updateInteraction.fn(ctx as never, params);
+
+    let entries = rawViewData(doc, flexId).interactions;
+    expect(entries).toHaveLength(1);
+    expect(entries[0]?.value?.action).toEqual({ type: "close-paywall" });
+    expect(result.previousAction).toEqual({ type: "none" });
+    expect(result.previousTrigger).toBe(null);
+
+    updateInteraction.revert(ctx as never, params, result);
+    entries = rawViewData(doc, flexId).interactions;
+    expect(entries).toHaveLength(1);
+    expect(entries[0]?.value?.action).toEqual({ type: "none" });
+  });
+
+  test("no-ops for unknown interaction ids", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const result = updateInteraction.fn(ctx as never, {
+      interactionId: "missing",
+      newAction: { type: "close-paywall" } as Action,
+      nodeId: flexId,
+    });
+    expect(result).toEqual({ previousAction: null, previousTrigger: null });
+  });
+});
+
+describe("updateInteractionActionOverride", () => {
+  test("find-or-update never duplicates entries and undo round trips", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addInteraction.fn(ctx as never, { nodeId: flexId });
+    const interactionId = added.interactionId;
+    if (interactionId === null) throw new Error("expected an interaction entry id");
+    const stateEntryId = pushViewState(doc, flexId, "Selected");
+
+    const firstParams = {
+      interactionId,
+      newAction: { type: "close-paywall" } as Action,
+      nodeId: flexId,
+      stateId: stateEntryId,
+    };
+    const firstResult = updateInteractionActionOverride.fn(ctx as never, firstParams);
+    expect(firstResult).toEqual({ hadOverride: false, previousOverrideRaw: undefined });
+
+    let overrides = rawActionOverrides(doc, flexId, stateEntryId);
+    expect(overrides).toHaveLength(1);
+    expect(overrides[0]?.value).toEqual({
+      action: { type: "close-paywall" },
+      interactionId,
+    });
+
+    const secondParams = {
+      interactionId,
+      newAction: {
+        payload: { productId: "product-1", type: "literal" },
+        type: "purchase-product",
+      } as Action,
+      nodeId: flexId,
+      stateId: stateEntryId,
+    };
+    const secondResult = updateInteractionActionOverride.fn(ctx as never, secondParams);
+    expect(secondResult.hadOverride).toBe(true);
+    expect(secondResult.previousOverrideRaw).toEqual({ type: "close-paywall" });
+
+    overrides = rawActionOverrides(doc, flexId, stateEntryId);
+    expect(overrides).toHaveLength(1);
+    expect(overrides[0]?.value?.action).toEqual({
+      payload: { productId: "product-1", type: "literal" },
+      type: "purchase-product",
+    });
+
+    updateInteractionActionOverride.revert(ctx as never, secondParams, secondResult);
+    overrides = rawActionOverrides(doc, flexId, stateEntryId);
+    expect(overrides).toHaveLength(1);
+    expect(overrides[0]?.value?.action).toEqual({ type: "close-paywall" });
+
+    updateInteractionActionOverride.revert(ctx as never, firstParams, firstResult);
+    expect(rawActionOverrides(doc, flexId, stateEntryId)).toHaveLength(0);
+  });
+
+  test("setting the base action removes the override", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addInteraction.fn(ctx as never, { nodeId: flexId });
+    const interactionId = added.interactionId;
+    if (interactionId === null) throw new Error("expected an interaction entry id");
+    const stateEntryId = pushViewState(doc, flexId, "Selected");
+
+    updateInteractionActionOverride.fn(ctx as never, {
+      interactionId,
+      newAction: { type: "close-paywall" } as Action,
+      nodeId: flexId,
+      stateId: stateEntryId,
+    });
+    expect(rawActionOverrides(doc, flexId, stateEntryId)).toHaveLength(1);
+
+    // the interaction's base action is { type: "none" }
+    const result = updateInteractionActionOverride.fn(ctx as never, {
+      interactionId,
+      newAction: { type: "none" } as Action,
+      nodeId: flexId,
+      stateId: stateEntryId,
+    });
+    expect(result.hadOverride).toBe(true);
+    expect(rawActionOverrides(doc, flexId, stateEntryId)).toHaveLength(0);
+  });
+
+  test("unknown previous override variants are dropped on undo without throwing", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addInteraction.fn(ctx as never, { nodeId: flexId });
+    const interactionId = added.interactionId;
+    if (interactionId === null) throw new Error("expected an interaction entry id");
+    const stateEntryId = pushViewState(doc, flexId, "Selected");
+
+    const params = {
+      interactionId,
+      newAction: { type: "close-paywall" } as Action,
+      nodeId: flexId,
+      stateId: stateEntryId,
+    };
+    updateInteractionActionOverride.fn(ctx as never, params);
+
+    // a forged undo payload carrying an unknown action variant is dropped
+    updateInteractionActionOverride.revert(ctx as never, params, {
+      hadOverride: true,
+      previousOverrideRaw: { payload: { weird: true }, type: "future-kind" },
+    });
+    const overrides = rawActionOverrides(doc, flexId, stateEntryId);
+    expect(overrides[0]?.value?.action).toEqual({ type: "close-paywall" });
+  });
+});
+
+describe("removeInteraction", () => {
+  test("removes the interaction with its overrides; undo restores and re-keys them", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addInteraction.fn(ctx as never, { nodeId: flexId });
+    const interactionId = added.interactionId;
+    if (interactionId === null) throw new Error("expected an interaction entry id");
+    const stateEntryId = pushViewState(doc, flexId, "Selected");
+    updateInteractionActionOverride.fn(ctx as never, {
+      interactionId,
+      newAction: { type: "close-paywall" } as Action,
+      nodeId: flexId,
+      stateId: stateEntryId,
+    });
+    const interactionValue = rawViewData(doc, flexId).interactions[0]?.value;
+
+    const params = { interactionId, nodeId: flexId };
+    const result = removeInteraction.fn(ctx as never, params);
+
+    expect(rawViewData(doc, flexId).interactions).toHaveLength(0);
+    expect(rawActionOverrides(doc, flexId, stateEntryId)).toHaveLength(0);
+    expect(result.removedInteraction).toEqual(interactionValue);
+    expect(result.removedActionOverrides).toEqual([
+      { raw: { type: "close-paywall" }, stateEntryId },
+    ]);
+
+    removeInteraction.revert(ctx as never, params, result);
+
+    const restored = rawViewData(doc, flexId).interactions;
+    expect(restored).toHaveLength(1);
+    expect(restored[0]?.value).toEqual(interactionValue);
+
+    const overrides = rawActionOverrides(doc, flexId, stateEntryId);
+    expect(overrides).toHaveLength(1);
+    // re-keyed to the restored interaction's fresh entry id
+    expect(overrides[0]?.value?.interactionId).toBe(restored[0]?.id);
+    expect(overrides[0]?.value?.action).toEqual({ type: "close-paywall" });
+  });
+
+  test("no-ops for unknown interaction ids", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const result = removeInteraction.fn(ctx as never, {
+      interactionId: "missing",
+      nodeId: flexId,
+    });
+    expect(result).toEqual({ removedActionOverrides: [], removedInteraction: null });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.ts
new file mode 100644
index 000000000..e9ff804f0
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/interaction-actions.ts
@@ -0,0 +1,307 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import type { Action, Interaction, Trigger } from "@voidhash/mimic-schema";
+import { ViewNode } from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import { findTypedNode, type DesignerDocumentRoot } from "../../utils/node-proxies";
+import { replayableAction } from "../../utils/replay";
+
+type ViewNodeProxy = Primitive.TypedNodeProxy<typeof ViewNode>;
+
+/**
+ * Interaction and state ids passed into these actions are array-ENTRY ids
+ * (the `{id, pos, value}` wrapper ids the snapshot exposes), not the
+ * elements' own `id` fields — the UI iterates entries, and entry handles are
+ * addressed via `findById(entryId)`.
+ */
+const viewNodeProxy = (root: DesignerDocumentRoot, nodeId: string): ViewNodeProxy | undefined =>
+  findTypedNode(root, nodeId, ViewNode);
+
+function isSameAction(left: Action, right: Action): boolean {
+  return JSON.stringify(left) === JSON.stringify(right);
+}
+
+/** A state's action override read from the overrides array. */
+interface ActionOverrideEntry {
+  /** Array-entry id, addressable via `findById`/`remove` on the overrides proxy. */
+  entryId: string;
+  /** Interaction array-entry id the override applies to. */
+  interactionId: string;
+  /** The stored action value. */
+  action: Action;
+}
+
+/** Reads a state entry's `overrides.actions` entries through its handle. */
+const readActionOverrideEntries = (
+  node: ViewNodeProxy,
+  stateEntryId: string,
+): ActionOverrideEntry[] => {
+  const stateEntry = node.data.states.findById(stateEntryId);
+  if (stateEntry === undefined) {
+    return [];
+  }
+  return (stateEntry.value.overrides.actions.get() ?? []).flatMap((entry) =>
+    entry.value === undefined
+      ? []
+      : [
+          {
+            action: entry.value.action,
+            entryId: entry.id,
+            interactionId: entry.value.interactionId,
+          },
+        ],
+  );
+};
+
+/**
+ * Sets a state's action override for an interaction: updates the existing
+ * entry in place through its handle, or appends a new one.
+ */
+const upsertActionOverride = (
+  node: ViewNodeProxy,
+  stateEntryId: string,
+  interactionId: string,
+  action: Action,
+): void => {
+  const stateEntry = node.data.states.findById(stateEntryId);
+  if (stateEntry === undefined) {
+    return;
+  }
+  const overridesProxy = stateEntry.value.overrides.actions;
+
+  const existing = overridesProxy.find((entry) => entry.get()?.interactionId === interactionId);
+  if (existing !== undefined) {
+    existing.value.action.set(action);
+    return;
+  }
+  overridesProxy.push({ action, interactionId });
+};
+
+const removeActionOverride = (
+  node: ViewNodeProxy,
+  stateEntryId: string,
+  interactionId: string,
+): void => {
+  const stateEntry = node.data.states.findById(stateEntryId);
+  if (stateEntry === undefined) {
+    return;
+  }
+  stateEntry.value.overrides.actions
+    .find((entry) => entry.get()?.interactionId === interactionId)
+    ?.remove();
+};
+
+/**
+ * Adds a click/none interaction to a view node. Returns the created
+ * array-entry id (reported by `push`); undo removes that entry.
+ */
+export const addInteraction = commander.undoableAction<
+  { nodeId: string },
+  { interactionId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const interactionId = mimic.document.transaction((root) => {
+      const node = viewNodeProxy(root, params.nodeId);
+      if (!node) return null;
+
+      const created = node.data.interactions.push({
+        action: { type: "none" },
+        id: `interaction-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+        trigger: { type: "click" },
+      });
+      return created.id;
+    });
+
+    return { interactionId };
+  },
+  (ctx, params, result) => {
+    const { interactionId } = result;
+    if (interactionId === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      viewNodeProxy(root, params.nodeId)?.data.interactions.remove(interactionId);
+    });
+  },
+);
+
+/**
+ * Removes an interaction (by array-entry id) together with every state's
+ * action override referencing it. Undo re-adds the interaction — under a
+ * fresh entry id — and re-keys the restored overrides to that new id.
+ */
+export const removeInteraction = commander.undoableAction<
+  {
+    nodeId: string;
+    interactionId: string;
+  },
+  {
+    removedInteraction: Interaction | null;
+    removedActionOverrides: Array<{ stateEntryId: string; raw: unknown }>;
+  }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    return mimic.document.transaction((root) => {
+      const node = viewNodeProxy(root, params.nodeId);
+      const entry = node?.data.interactions.findById(params.interactionId);
+      const interaction = entry?.get();
+      if (!node || entry === undefined || interaction === undefined) {
+        return { removedActionOverrides: [], removedInteraction: null };
+      }
+
+      const removedActionOverrides: Array<{ stateEntryId: string; raw: unknown }> = [];
+      for (const stateEntry of node.data.states.get() ?? []) {
+        const override = readActionOverrideEntries(node, stateEntry.id).find(
+          (candidate) => candidate.interactionId === params.interactionId,
+        );
+        if (override === undefined) continue;
+        removedActionOverrides.push({ raw: override.action, stateEntryId: stateEntry.id });
+        removeActionOverride(node, stateEntry.id, params.interactionId);
+      }
+
+      entry.remove();
+      return { removedActionOverrides, removedInteraction: interaction };
+    });
+  },
+  (ctx, params, result) => {
+    const { removedActionOverrides, removedInteraction } = result;
+    if (removedInteraction === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const node = viewNodeProxy(root, params.nodeId);
+      if (!node) return;
+
+      const restored = node.data.interactions.push(removedInteraction);
+
+      for (const removed of removedActionOverrides) {
+        const action = replayableAction(removed.raw);
+        if (action === undefined) continue;
+        upsertActionOverride(node, removed.stateEntryId, restored.id, action);
+      }
+    });
+  },
+);
+
+/**
+ * Updates an interaction's trigger and/or action (by array-entry id) through
+ * entry-addressed writes. Undo restores the previous values.
+ */
+export const updateInteraction = commander.undoableAction<
+  {
+    nodeId: string;
+    interactionId: string;
+    newTrigger?: Trigger;
+    newAction?: Action;
+  },
+  { previousTrigger: Trigger | null; previousAction: Action | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    return mimic.document.transaction((root) => {
+      const node = viewNodeProxy(root, params.nodeId);
+      const entry = node?.data.interactions.findById(params.interactionId);
+      const interaction = entry?.get();
+      if (!node || entry === undefined || interaction === undefined) {
+        return { previousAction: null, previousTrigger: null };
+      }
+
+      if (params.newTrigger) {
+        entry.value.trigger.set(params.newTrigger);
+      }
+      if (params.newAction) {
+        entry.value.action.set(params.newAction);
+      }
+
+      return {
+        previousAction: params.newAction ? interaction.action : null,
+        previousTrigger: params.newTrigger ? interaction.trigger : null,
+      };
+    });
+  },
+  (ctx, params, result) => {
+    const { previousAction, previousTrigger } = result;
+    if (previousAction === null && previousTrigger === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const node = viewNodeProxy(root, params.nodeId);
+      const entry = node?.data.interactions.findById(params.interactionId);
+      if (!node || entry === undefined) return;
+
+      if (previousTrigger !== null) {
+        entry.value.trigger.set(previousTrigger);
+      }
+      if (previousAction !== null) {
+        entry.value.action.set(previousAction);
+      }
+    });
+  },
+);
+
+/**
+ * Sets (or clears, when the new action equals the interaction's base action)
+ * a state's per-interaction action override. Ids are array-entry ids. Undo
+ * removes a freshly added override or restores the previous value.
+ */
+export const updateInteractionActionOverride = commander.undoableAction<
+  {
+    nodeId: string;
+    interactionId: string;
+    stateId: string;
+    newAction: Action;
+  },
+  { hadOverride: boolean; previousOverrideRaw: unknown }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    return mimic.document.transaction((root) => {
+      const node = viewNodeProxy(root, params.nodeId);
+      if (!node) {
+        return { hadOverride: false, previousOverrideRaw: undefined };
+      }
+      const interaction = node.data.interactions.findById(params.interactionId)?.get();
+      const stateEntry = node.data.states.findById(params.stateId);
+      if (interaction === undefined || stateEntry === undefined) {
+        return { hadOverride: false, previousOverrideRaw: undefined };
+      }
+
+      const existing = readActionOverrideEntries(node, params.stateId).find(
+        (candidate) => candidate.interactionId === params.interactionId,
+      );
+      const shouldRemoveOverride = isSameAction(params.newAction, interaction.action);
+
+      if (shouldRemoveOverride) {
+        removeActionOverride(node, params.stateId, params.interactionId);
+      } else {
+        upsertActionOverride(node, params.stateId, params.interactionId, params.newAction);
+      }
+
+      return { hadOverride: existing !== undefined, previousOverrideRaw: existing?.action };
+    });
+  },
+  (ctx, params, result) => {
+    const { hadOverride, previousOverrideRaw } = result;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const node = viewNodeProxy(root, params.nodeId);
+      if (!node) return;
+
+      if (!hadOverride) {
+        removeActionOverride(node, params.stateId, params.interactionId);
+        return;
+      }
+      const action = replayableAction(previousOverrideRaw);
+      if (action !== undefined) {
+        upsertActionOverride(node, params.stateId, params.interactionId, action);
+      }
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/layout-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/layout-style-actions.ts
new file mode 100644
index 000000000..9461f3e0d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/layout-style-actions.ts
@@ -0,0 +1,201 @@
+import type { FlexDirection } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../../designer-commander";
+import { selectDocumentRoot } from "../../utils/document-root";
+import { getFlexDirection, isFlexParent } from "../../utils/node-type-helpers";
+import { normalizeFlexSizing } from "../../utils/normalize-flex-sizing";
+import {
+  getSelectedStateIdForNode,
+  isStateCapableNode,
+  resolveEffectiveStyle,
+} from "../../utils/state-overrides";
+import { findNodeById, findParentNode } from "../../utils/tree";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+interface LayoutStyle {
+  gap: number;
+  justifyContent: string;
+  alignItems: string;
+  flexDirection: FlexDirection;
+  paddingTop: number;
+  paddingRight: number;
+  paddingBottom: number;
+  paddingLeft: number;
+  width: unknown;
+  height: unknown;
+  flex: unknown;
+  flexGrow: unknown;
+  flexShrink: unknown;
+  flexBasis: unknown;
+  alignSelf: unknown;
+  position: "relative" | "absolute";
+  left: number | "auto";
+  top: number | "auto";
+  right: number | "auto";
+  bottom: number | "auto";
+}
+
+/**
+ * Get parent flex direction for a node.
+ */
+function getParentFlexDirection(root: SnapshotNode, nodeId: string): FlexDirection | null {
+  const parent = findParentNode<SnapshotNode>(root, nodeId);
+  if (!parent) return null;
+
+  return isFlexParent(parent) ? getFlexDirection(parent) : null;
+}
+
+/**
+ * Check if style updates contain sizing-related properties that need normalization.
+ */
+function hasSizingUpdates(style: Partial<LayoutStyle>): boolean {
+  return (
+    style.width !== undefined ||
+    style.height !== undefined ||
+    style.flex !== undefined ||
+    style.alignSelf !== undefined
+  );
+}
+
+function sizeValue(value: unknown): number | "auto" | undefined {
+  return typeof value === "number" || value === "auto" ? value : undefined;
+}
+
+function numberValue(value: unknown): number | undefined {
+  return typeof value === "number" ? value : undefined;
+}
+
+function alignSelfValue(
+  value: unknown,
+): "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" | undefined {
+  switch (value) {
+    case "auto":
+    case "flex-start":
+    case "center":
+    case "flex-end":
+    case "stretch":
+    case "baseline":
+      return value;
+    default:
+      return undefined;
+  }
+}
+
+/** One node's distinct layout-style patch for {@link applyPerNodeLayoutStyle}. */
+export interface PerNodeLayoutStyle {
+  target: StyleTarget;
+  style: Partial<LayoutStyle>;
+}
+
+/**
+ * Applies a DISTINCT layout-style patch to each node in a SINGLE undoable
+ * command — the commander records exactly one undo entry per dispatch (when no
+ * draft is active), so a whole multi-node change (e.g. toggling absolute
+ * positioning on a multi-selection, where each node keeps its own `left`/`top`)
+ * undoes as one step. Each node's write is override-aware (routing to the
+ * selected state's overrides when one is active), and the returned undo map is
+ * the union of every node's captured previous target.
+ */
+export const applyPerNodeLayoutStyle = commander.undoableAction<
+  { nodes: PerNodeLayoutStyle[] },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const stateOverrideSelection = ctx.getState().stateOverrideSelection;
+    const previousStyles = new Map<string, StyleUpdateUndoTarget>();
+
+    for (const { target, style } of params.nodes) {
+      const nodeUndo = applyStyleUpdate<LayoutStyle>(
+        mimic,
+        [target],
+        style,
+        stateOverrideSelection,
+        ctx.transaction,
+      );
+      const prev = nodeUndo.get(target.nodeId);
+      if (prev) {
+        previousStyles.set(target.nodeId, prev);
+      }
+    }
+
+    return { previousStyles };
+  },
+  (ctx, params, result) => {
+    undoStyleUpdate(
+      ctx.getState().mimic,
+      params.nodes.map((entry) => entry.target),
+      result.previousStyles,
+      ctx.transaction,
+    );
+  },
+);
+
+export const updateLayoutStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<LayoutStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+    let styleToApply = params.style;
+
+    // Normalize sizing properties if needed
+    if (hasSizingUpdates(params.style) && params.nodes.length > 0) {
+      const root: SnapshotNode = selectDocumentRoot(state);
+
+      // Get the first node's current style and parent direction for normalization
+      const firstTarget = params.nodes[0];
+      if (firstTarget) {
+        const firstNode = findNodeById<SnapshotNode>(root, firstTarget.nodeId);
+        if (firstNode && isStateCapableNode(firstNode)) {
+          const selectedStateId = getSelectedStateIdForNode(
+            state.stateOverrideSelection,
+            firstTarget.nodeId,
+          );
+          const currentStyle = resolveEffectiveStyle(firstNode, selectedStateId);
+          const parentDirection = getParentFlexDirection(root, firstTarget.nodeId);
+
+          // `null` width/height/flex updates are legacy "clear" inputs from
+          // the panels; normalizeFlexSizing treats them as explicit values.
+          const normalizedUpdates = normalizeFlexSizing(
+            {
+              width: params.style.width === null ? null : sizeValue(params.style.width),
+              height: params.style.height === null ? null : sizeValue(params.style.height),
+              flex: params.style.flex === null ? null : numberValue(params.style.flex),
+              alignSelf: alignSelfValue(params.style.alignSelf),
+            },
+            {
+              width: sizeValue(currentStyle["width"]) ?? null,
+              height: sizeValue(currentStyle["height"]) ?? null,
+              flex: numberValue(currentStyle["flex"]) ?? null,
+              alignSelf: alignSelfValue(currentStyle["alignSelf"]),
+            },
+            parentDirection,
+          );
+
+          styleToApply = { ...params.style, ...normalizedUpdates };
+        }
+      }
+    }
+
+    return {
+      previousStyles: applyStyleUpdate<LayoutStyle>(
+        mimic,
+        params.nodes,
+        styleToApply,
+        state.stateOverrideSelection,
+        ctx.transaction,
+      ),
+    };
+  },
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.test.ts
new file mode 100644
index 000000000..a5137ffcd
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.test.ts
@@ -0,0 +1,770 @@
+import { performUndo } from "@voidhash/mimic/zustand-commander";
+import {
+  ComponentNode,
+  RootNode,
+  ScrollViewNode,
+  TextNode,
+  ViewNode,
+} from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import { createDesignerStore, type PaywallDesignerStoreType } from "../../designer-store";
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { findTypedNode } from "../../utils/node-proxies";
+import {
+  addLocale,
+  clearLocale,
+  copyLocaleFrom,
+  removeLocale,
+  setDefaultLocale,
+  updateComponentPropLocalizedValue,
+  updateNodeLocalizedImage,
+  updateNodeTranslation,
+} from "./locale-actions";
+
+// ---------------------------------------------------------------------------
+// Harness (mirrors component-prop-actions.test.ts: dispatch runs the command's
+// forward fn and records the undo entry the commander would push).
+// ---------------------------------------------------------------------------
+
+interface TestCommand<P, R> {
+  fn: (ctx: unknown, params: P) => R;
+  revert: (ctx: unknown, params: P, result: R) => void;
+}
+
+function makeStore(doc: OfflineDesignerDocument): {
+  store: PaywallDesignerStoreType;
+  dispatch: <P, R>(command: TestCommand<P, R>, params: P) => R;
+  undoDepth: () => number;
+} {
+  const store = createDesignerStore(doc as unknown as Parameters<typeof createDesignerStore>[0]);
+  const storeApi = store as unknown as {
+    getState: () => { _commander: { undoStack: unknown[] } };
+    setState: (updater: (state: unknown) => unknown) => void;
+  };
+  return {
+    store,
+    dispatch: (command, params) => {
+      const ctx = { getState: () => store.getState() };
+      const result = command.fn(ctx, params);
+      storeApi.setState((state) => {
+        const s = state as { _commander: { undoStack: unknown[]; redoStack: unknown[] } };
+        return {
+          ...s,
+          _commander: {
+            ...s._commander,
+            undoStack: [...s._commander.undoStack, { command, params, result, timestamp: 0 }],
+            redoStack: [],
+          },
+        };
+      });
+      return result;
+    },
+    undoDepth: () => storeApi.getState()._commander.undoStack.length,
+  };
+}
+
+function seedTextNode(doc: OfflineDesignerDocument, text: string): string {
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+    ).insertLast({ type: "text", text });
+    nodeId = node.id;
+  });
+  return nodeId;
+}
+
+function pushLocalized(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  locale: string,
+  value: string,
+): void {
+  doc.transaction((root) => {
+    const node = findTypedNode(root, nodeId, TextNode);
+    node?.data.localized.push({ locale, overrides: { text: value } });
+  });
+}
+
+function readLocalized(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+): { locale: string; text: string | undefined }[] {
+  const node = findTypedNode(doc.root, nodeId, TextNode);
+  const entries = node?.data.localized.get() ?? [];
+  return entries.flatMap((entry) =>
+    entry.value === undefined
+      ? []
+      : [{ locale: entry.value.locale, text: entry.value.overrides?.text }],
+  );
+}
+
+function readConfigLocales(doc: OfflineDesignerDocument): string[] {
+  const { rootId } = seededIds(doc);
+  const rootNode = findTypedNode(doc.root, rootId, RootNode);
+  const config = rootNode?.data.localization.get();
+  return (config?.locales ?? []).flatMap((entry) =>
+    entry.value?.tag ? [entry.value.tag] : [],
+  );
+}
+
+describe("addLocale", () => {
+  test("canonicalizes the tag before storing it", () => {
+    const doc = createOfflineDesignerDocument();
+    const { dispatch } = makeStore(doc);
+    const result = dispatch(addLocale, { tag: "pt-br" });
+    expect(result.entryId).not.toBeNull();
+    expect(readConfigLocales(doc)).toEqual(["pt-BR"]);
+  });
+
+  test("rejects the default locale and duplicates (no undo entry, no write)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { dispatch, undoDepth } = makeStore(doc);
+    // Default locale is "en".
+    expect(dispatch(addLocale, { tag: "en" }).entryId).toBeNull();
+    dispatch(addLocale, { tag: "de" });
+    expect(dispatch(addLocale, { tag: "DE" }).entryId).toBeNull();
+    expect(readConfigLocales(doc)).toEqual(["de"]);
+    // en(rejected) + de(added) + DE(rejected) → all three recorded, but only
+    // the middle one wrote. The rejected dispatches still record entries with a
+    // null result whose revert is a no-op.
+    expect(undoDepth()).toBe(3);
+  });
+
+  test("rejects a structurally invalid tag", () => {
+    const doc = createOfflineDesignerDocument();
+    const { dispatch } = makeStore(doc);
+    expect(dispatch(addLocale, { tag: "!!not-a-locale!!" }).entryId).toBeNull();
+    expect(readConfigLocales(doc)).toEqual([]);
+  });
+
+  test("undo removes the added locale entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const { dispatch, store } = makeStore(doc);
+    dispatch(addLocale, { tag: "fr" });
+    expect(readConfigLocales(doc)).toEqual(["fr"]);
+    expect(performUndo(store as never)).toBe(true);
+    expect(readConfigLocales(doc)).toEqual([]);
+  });
+});
+
+describe("updateNodeTranslation", () => {
+  test("inserts a new override entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedTextNode(doc, "Hello");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeTranslation, { id: nodeId, locale: "de", text: "Hallo" });
+    expect(readLocalized(doc, nodeId)).toEqual([{ locale: "de", text: "Hallo" }]);
+  });
+
+  test("updates the existing override entry in place", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedTextNode(doc, "Hello");
+    pushLocalized(doc, nodeId, "de", "Hallo");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeTranslation, { id: nodeId, locale: "de", text: "Servus" });
+    expect(readLocalized(doc, nodeId)).toEqual([{ locale: "de", text: "Servus" }]);
+  });
+
+  test("clearing to empty removes the whole entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedTextNode(doc, "Hello");
+    pushLocalized(doc, nodeId, "de", "Hallo");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeTranslation, { id: nodeId, locale: "de", text: "" });
+    expect(readLocalized(doc, nodeId)).toEqual([]);
+  });
+
+  test("compacts duplicate entries for the locale (first updated, rest removed)", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedTextNode(doc, "Hello");
+    pushLocalized(doc, nodeId, "de", "A");
+    pushLocalized(doc, nodeId, "de", "B");
+    pushLocalized(doc, nodeId, "fr", "Bonjour");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeTranslation, { id: nodeId, locale: "de", text: "C" });
+    expect(readLocalized(doc, nodeId)).toEqual([
+      { locale: "de", text: "C" },
+      { locale: "fr", text: "Bonjour" },
+    ]);
+  });
+
+  test("undo restores the previous entries exactly (including compacted duplicates)", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedTextNode(doc, "Hello");
+    pushLocalized(doc, nodeId, "de", "A");
+    pushLocalized(doc, nodeId, "de", "B");
+    const { dispatch, store } = makeStore(doc);
+    dispatch(updateNodeTranslation, { id: nodeId, locale: "de", text: "C" });
+    expect(readLocalized(doc, nodeId)).toEqual([{ locale: "de", text: "C" }]);
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalized(doc, nodeId)).toEqual([
+      { locale: "de", text: "A" },
+      { locale: "de", text: "B" },
+    ]);
+  });
+
+  test("undo of an insert removes the added entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedTextNode(doc, "Hello");
+    const { dispatch, store } = makeStore(doc);
+    dispatch(updateNodeTranslation, { id: nodeId, locale: "de", text: "Hallo" });
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalized(doc, nodeId)).toEqual([]);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// updateNodeLocalizedImage (view/scrollView/screen background image overrides)
+// ---------------------------------------------------------------------------
+
+const image = (url: string) => ({ url, resizeMode: "cover" as const });
+
+function seedViewNode(doc: OfflineDesignerDocument): string {
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+    ).insertLast({ type: "view" });
+    nodeId = node.id;
+  });
+  return nodeId;
+}
+
+function pushLocalizedImage(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  locale: string,
+  url: string,
+): void {
+  doc.transaction((root) => {
+    const node = findTypedNode(root, nodeId, ViewNode);
+    node?.data.localized.push({ locale, overrides: { backgroundImage: image(url) } });
+  });
+}
+
+function readLocalizedImages(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+): { locale: string; url: string | undefined }[] {
+  const node = findTypedNode(doc.root, nodeId, ViewNode);
+  const entries = node?.data.localized.get() ?? [];
+  return entries.flatMap((entry) =>
+    entry.value === undefined
+      ? []
+      : [{ locale: entry.value.locale, url: entry.value.overrides?.backgroundImage?.url }],
+  );
+}
+
+describe("updateNodeLocalizedImage", () => {
+  test("inserts a new override entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedViewNode(doc);
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeLocalizedImage, {
+      id: nodeId,
+      locale: "de",
+      backgroundImage: image("https://de"),
+    });
+    expect(readLocalizedImages(doc, nodeId)).toEqual([{ locale: "de", url: "https://de" }]);
+  });
+
+  test("updates the existing override entry in place", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedViewNode(doc);
+    pushLocalizedImage(doc, nodeId, "de", "https://de");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeLocalizedImage, {
+      id: nodeId,
+      locale: "de",
+      backgroundImage: image("https://de2"),
+    });
+    expect(readLocalizedImages(doc, nodeId)).toEqual([{ locale: "de", url: "https://de2" }]);
+  });
+
+  test("clearing to null removes the whole entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedViewNode(doc);
+    pushLocalizedImage(doc, nodeId, "de", "https://de");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeLocalizedImage, { id: nodeId, locale: "de", backgroundImage: null });
+    expect(readLocalizedImages(doc, nodeId)).toEqual([]);
+  });
+
+  test("compacts duplicate entries for the locale (first updated, rest removed)", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedViewNode(doc);
+    pushLocalizedImage(doc, nodeId, "de", "https://a");
+    pushLocalizedImage(doc, nodeId, "de", "https://b");
+    pushLocalizedImage(doc, nodeId, "fr", "https://fr");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeLocalizedImage, {
+      id: nodeId,
+      locale: "de",
+      backgroundImage: image("https://c"),
+    });
+    expect(readLocalizedImages(doc, nodeId)).toEqual([
+      { locale: "de", url: "https://c" },
+      { locale: "fr", url: "https://fr" },
+    ]);
+  });
+
+  test("undo restores the previous entries exactly (including compacted duplicates)", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedViewNode(doc);
+    pushLocalizedImage(doc, nodeId, "de", "https://a");
+    pushLocalizedImage(doc, nodeId, "de", "https://b");
+    const { dispatch, store } = makeStore(doc);
+    dispatch(updateNodeLocalizedImage, {
+      id: nodeId,
+      locale: "de",
+      backgroundImage: image("https://c"),
+    });
+    expect(readLocalizedImages(doc, nodeId)).toEqual([{ locale: "de", url: "https://c" }]);
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalizedImages(doc, nodeId)).toEqual([
+      { locale: "de", url: "https://a" },
+      { locale: "de", url: "https://b" },
+    ]);
+  });
+
+  test("undo of an insert removes the added entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedViewNode(doc);
+    const { dispatch, store } = makeStore(doc);
+    dispatch(updateNodeLocalizedImage, {
+      id: nodeId,
+      locale: "de",
+      backgroundImage: image("https://de"),
+    });
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalizedImages(doc, nodeId)).toEqual([]);
+  });
+
+  test("writes and reads a scrollView node's localized image, like a view", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    let nodeId = "";
+    doc.transaction((root) => {
+      const screen = root.findByIdAcrossTree(screenId);
+      if (!screen) throw new Error("expected the seeded screen node");
+      nodeId = (
+        screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+      ).insertLast({ type: "scrollView" }).id;
+    });
+    const { dispatch } = makeStore(doc);
+    dispatch(updateNodeLocalizedImage, {
+      id: nodeId,
+      locale: "de",
+      backgroundImage: image("https://de"),
+    });
+    const entries = findTypedNode(doc.root, nodeId, ScrollViewNode)?.data.localized.get() ?? [];
+    expect(
+      entries.flatMap((entry) =>
+        entry.value === undefined
+          ? []
+          : [{ locale: entry.value.locale, url: entry.value.overrides?.backgroundImage?.url }],
+      ),
+    ).toEqual([{ locale: "de", url: "https://de" }]);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// updateComponentPropLocalizedValue (component prop localizedValues overrides)
+// ---------------------------------------------------------------------------
+
+function seedComponentNode(doc: OfflineDesignerDocument, propName: string, base: string): string {
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+    ).insertLast({
+      type: "component",
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: "hash",
+      name: "card",
+      previewState: "default",
+    });
+    nodeId = node.id;
+    const proxy = node as unknown as { data: { props: { push: (value: unknown) => void } } };
+    proxy.data.props.push({
+      name: propName,
+      value: { type: "literal", value: { key: "string", value: base } },
+    });
+  });
+  return nodeId;
+}
+
+function pushLocalizedPropValue(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  propName: string,
+  locale: string,
+  value: string,
+): void {
+  doc.transaction((root) => {
+    const node = findTypedNode(root, nodeId, ComponentNode);
+    const prop = node?.data.props.find((entry) => entry.get()?.name === propName);
+    prop?.value.localizedValues.push({ locale, value: { key: "string", value } });
+  });
+}
+
+function readLocalizedPropValues(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  propName: string,
+): { locale: string; value: string | undefined }[] {
+  const node = findTypedNode(doc.root, nodeId, ComponentNode);
+  const props = node?.data.props.get() ?? [];
+  const prop = props.find((entry) => entry.value?.name === propName)?.value;
+  const localizedValues = prop?.localizedValues ?? [];
+  return localizedValues.flatMap((entry) => {
+    if (entry.value === undefined) {
+      return [];
+    }
+    const stored = entry.value.value;
+    return [{ locale: entry.value.locale, value: stored.key === "string" ? stored.value : undefined }];
+  });
+}
+
+describe("updateComponentPropLocalizedValue", () => {
+  test("inserts a new localized value", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, "title", "Hello");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateComponentPropLocalizedValue, {
+      nodeId,
+      propName: "title",
+      locale: "de",
+      value: { key: "string", value: "Hallo" },
+    });
+    expect(readLocalizedPropValues(doc, nodeId, "title")).toEqual([
+      { locale: "de", value: "Hallo" },
+    ]);
+  });
+
+  test("updates the existing localized value in place", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, "title", "Hello");
+    pushLocalizedPropValue(doc, nodeId, "title", "de", "Hallo");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateComponentPropLocalizedValue, {
+      nodeId,
+      propName: "title",
+      locale: "de",
+      value: { key: "string", value: "Servus" },
+    });
+    expect(readLocalizedPropValues(doc, nodeId, "title")).toEqual([
+      { locale: "de", value: "Servus" },
+    ]);
+  });
+
+  test("clearing to null removes the localized value", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, "title", "Hello");
+    pushLocalizedPropValue(doc, nodeId, "title", "de", "Hallo");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateComponentPropLocalizedValue, {
+      nodeId,
+      propName: "title",
+      locale: "de",
+      value: null,
+    });
+    expect(readLocalizedPropValues(doc, nodeId, "title")).toEqual([]);
+  });
+
+  test("compacts duplicate entries for the locale (first updated, rest removed)", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, "title", "Hello");
+    pushLocalizedPropValue(doc, nodeId, "title", "de", "A");
+    pushLocalizedPropValue(doc, nodeId, "title", "de", "B");
+    pushLocalizedPropValue(doc, nodeId, "title", "fr", "Bonjour");
+    const { dispatch } = makeStore(doc);
+    dispatch(updateComponentPropLocalizedValue, {
+      nodeId,
+      propName: "title",
+      locale: "de",
+      value: { key: "string", value: "C" },
+    });
+    expect(readLocalizedPropValues(doc, nodeId, "title")).toEqual([
+      { locale: "de", value: "C" },
+      { locale: "fr", value: "Bonjour" },
+    ]);
+  });
+
+  test("undo restores the previous entries exactly (including compacted duplicates)", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, "title", "Hello");
+    pushLocalizedPropValue(doc, nodeId, "title", "de", "A");
+    pushLocalizedPropValue(doc, nodeId, "title", "de", "B");
+    const { dispatch, store } = makeStore(doc);
+    dispatch(updateComponentPropLocalizedValue, {
+      nodeId,
+      propName: "title",
+      locale: "de",
+      value: { key: "string", value: "C" },
+    });
+    expect(readLocalizedPropValues(doc, nodeId, "title")).toEqual([{ locale: "de", value: "C" }]);
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalizedPropValues(doc, nodeId, "title")).toEqual([
+      { locale: "de", value: "A" },
+      { locale: "de", value: "B" },
+    ]);
+  });
+
+  test("undo of an insert removes the added entry", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedComponentNode(doc, "title", "Hello");
+    const { dispatch, store } = makeStore(doc);
+    dispatch(updateComponentPropLocalizedValue, {
+      nodeId,
+      propName: "title",
+      locale: "de",
+      value: { key: "string", value: "Hallo" },
+    });
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalizedPropValues(doc, nodeId, "title")).toEqual([]);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Cascade + config actions (removeLocale, setDefaultLocale, copyLocaleFrom,
+// clearLocale)
+// ---------------------------------------------------------------------------
+
+function pushConfigLocale(doc: OfflineDesignerDocument, tag: string): void {
+  const { rootId } = seededIds(doc);
+  doc.transaction((root) => {
+    const rootNode = findTypedNode(root, rootId, RootNode);
+    rootNode?.data.localization.locales.push({ tag });
+  });
+}
+
+function readDefaultLocale(doc: OfflineDesignerDocument): string | undefined {
+  const { rootId } = seededIds(doc);
+  const rootNode = findTypedNode(doc.root, rootId, RootNode);
+  return rootNode?.data.localization.get()?.defaultLocale;
+}
+
+/** Seeds a document with one text/view/component node all carrying `de` entries. */
+function seedGermanContent(doc: OfflineDesignerDocument): {
+  textId: string;
+  viewId: string;
+  componentId: string;
+} {
+  const textId = seedTextNode(doc, "Hello");
+  pushLocalized(doc, textId, "de", "Hallo");
+  pushLocalized(doc, textId, "fr", "Bonjour");
+  const viewId = seedViewNode(doc);
+  pushLocalizedImage(doc, viewId, "de", "https://de");
+  const componentId = seedComponentNode(doc, "title", "Hello");
+  pushLocalizedPropValue(doc, componentId, "title", "de", "Hallo");
+  return { componentId, textId, viewId };
+}
+
+describe("removeLocale (cascade)", () => {
+  test("removes the config entry AND every node-level entry for the locale", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    pushConfigLocale(doc, "fr");
+    const { textId, viewId, componentId } = seedGermanContent(doc);
+    const { dispatch, undoDepth } = makeStore(doc);
+
+    const result = dispatch(removeLocale, { tag: "de" });
+    expect(result.removed).toBe(true);
+    expect(readConfigLocales(doc)).toEqual(["fr"]);
+    expect(readLocalized(doc, textId)).toEqual([{ locale: "fr", text: "Bonjour" }]);
+    expect(readLocalizedImages(doc, viewId)).toEqual([]);
+    expect(readLocalizedPropValues(doc, componentId, "title")).toEqual([]);
+    expect(undoDepth()).toBe(1);
+  });
+
+  test("single undo restores the config entry and every removed entry exactly", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const { textId, viewId, componentId } = seedGermanContent(doc);
+    const { dispatch, store } = makeStore(doc);
+
+    dispatch(removeLocale, { tag: "de" });
+    expect(performUndo(store as never)).toBe(true);
+    expect(readConfigLocales(doc)).toEqual(["de"]);
+    expect(readLocalized(doc, textId)).toEqual([
+      { locale: "fr", text: "Bonjour" },
+      { locale: "de", text: "Hallo" },
+    ]);
+    expect(readLocalizedImages(doc, viewId)).toEqual([{ locale: "de", url: "https://de" }]);
+    expect(readLocalizedPropValues(doc, componentId, "title")).toEqual([
+      { locale: "de", value: "Hallo" },
+    ]);
+    expect(performUndo(store as never)).toBe(false);
+  });
+
+  test("no-ops for a locale that is not enabled (entries untouched)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { textId } = seedGermanContent(doc);
+    const { dispatch } = makeStore(doc);
+    const result = dispatch(removeLocale, { tag: "de" });
+    expect(result.removed).toBe(false);
+    expect(readLocalized(doc, textId)).toEqual([
+      { locale: "de", text: "Hallo" },
+      { locale: "fr", text: "Bonjour" },
+    ]);
+  });
+});
+
+describe("setDefaultLocale", () => {
+  test("swaps the default with the additional list entry (metadata only)", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const textId = seedTextNode(doc, "Hello");
+    pushLocalized(doc, textId, "de", "Hallo");
+    const { dispatch } = makeStore(doc);
+
+    const result = dispatch(setDefaultLocale, { tag: "de" });
+    expect(result.previousDefault).toBe("en");
+    expect(readDefaultLocale(doc)).toBe("de");
+    expect(readConfigLocales(doc)).toEqual(["en"]);
+    // Node content is untouched — the swap is config metadata only.
+    expect(readLocalized(doc, textId)).toEqual([{ locale: "de", text: "Hallo" }]);
+  });
+
+  test("rejects the current default and tags that are not enabled", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const { dispatch } = makeStore(doc);
+    expect(dispatch(setDefaultLocale, { tag: "en" }).previousDefault).toBeNull();
+    expect(dispatch(setDefaultLocale, { tag: "fr" }).previousDefault).toBeNull();
+    expect(readDefaultLocale(doc)).toBe("en");
+    expect(readConfigLocales(doc)).toEqual(["de"]);
+  });
+
+  test("undo swaps back", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const { dispatch, store } = makeStore(doc);
+    dispatch(setDefaultLocale, { tag: "de" });
+    expect(performUndo(store as never)).toBe(true);
+    expect(readDefaultLocale(doc)).toBe("en");
+    expect(readConfigLocales(doc)).toEqual(["de"]);
+  });
+});
+
+describe("copyLocaleFrom", () => {
+  test("copies text/image/prop overrides only where the target has none", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    pushConfigLocale(doc, "fr");
+    // Text A: de only → fr gets the copy. Text B: fr present → untouched.
+    const textA = seedTextNode(doc, "Hello");
+    pushLocalized(doc, textA, "de", "Hallo");
+    const textB = seedTextNode(doc, "World");
+    pushLocalized(doc, textB, "de", "Welt");
+    pushLocalized(doc, textB, "fr", "Monde");
+    const viewId = seedViewNode(doc);
+    pushLocalizedImage(doc, viewId, "de", "https://de");
+    const componentId = seedComponentNode(doc, "title", "Hello");
+    pushLocalizedPropValue(doc, componentId, "title", "de", "Hallo");
+    const { dispatch } = makeStore(doc);
+
+    dispatch(copyLocaleFrom, { source: "de", target: "fr" });
+    expect(readLocalized(doc, textA)).toEqual([
+      { locale: "de", text: "Hallo" },
+      { locale: "fr", text: "Hallo" },
+    ]);
+    expect(readLocalized(doc, textB)).toEqual([
+      { locale: "de", text: "Welt" },
+      { locale: "fr", text: "Monde" },
+    ]);
+    expect(readLocalizedImages(doc, viewId)).toEqual([
+      { locale: "de", url: "https://de" },
+      { locale: "fr", url: "https://de" },
+    ]);
+    expect(readLocalizedPropValues(doc, componentId, "title")).toEqual([
+      { locale: "de", value: "Hallo" },
+      { locale: "fr", value: "Hallo" },
+    ]);
+  });
+
+  test("undo removes exactly the copied entries", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    pushConfigLocale(doc, "fr");
+    const textA = seedTextNode(doc, "Hello");
+    pushLocalized(doc, textA, "de", "Hallo");
+    const textB = seedTextNode(doc, "World");
+    pushLocalized(doc, textB, "de", "Welt");
+    pushLocalized(doc, textB, "fr", "Monde");
+    const { dispatch, store } = makeStore(doc);
+
+    dispatch(copyLocaleFrom, { source: "de", target: "fr" });
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalized(doc, textA)).toEqual([{ locale: "de", text: "Hallo" }]);
+    expect(readLocalized(doc, textB)).toEqual([
+      { locale: "de", text: "Welt" },
+      { locale: "fr", text: "Monde" },
+    ]);
+  });
+
+  test("no-ops when the source has no overrides or source equals target", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const { dispatch } = makeStore(doc);
+    expect(dispatch(copyLocaleFrom, { source: "de", target: "fr" }).copied).toBeNull();
+    expect(dispatch(copyLocaleFrom, { source: "de", target: "de" }).copied).toBeNull();
+  });
+});
+
+describe("clearLocale", () => {
+  test("removes every node-level entry but KEEPS the config entry", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const { textId, viewId, componentId } = seedGermanContent(doc);
+    const { dispatch } = makeStore(doc);
+
+    dispatch(clearLocale, { tag: "de" });
+    expect(readConfigLocales(doc)).toEqual(["de"]);
+    expect(readLocalized(doc, textId)).toEqual([{ locale: "fr", text: "Bonjour" }]);
+    expect(readLocalizedImages(doc, viewId)).toEqual([]);
+    expect(readLocalizedPropValues(doc, componentId, "title")).toEqual([]);
+  });
+
+  test("undo restores every removed entry", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const { textId, viewId, componentId } = seedGermanContent(doc);
+    const { dispatch, store } = makeStore(doc);
+
+    dispatch(clearLocale, { tag: "de" });
+    expect(performUndo(store as never)).toBe(true);
+    expect(readLocalized(doc, textId)).toEqual([
+      { locale: "fr", text: "Bonjour" },
+      { locale: "de", text: "Hallo" },
+    ]);
+    expect(readLocalizedImages(doc, viewId)).toEqual([{ locale: "de", url: "https://de" }]);
+    expect(readLocalizedPropValues(doc, componentId, "title")).toEqual([
+      { locale: "de", value: "Hallo" },
+    ]);
+  });
+
+  test("no-ops when the locale has no entries anywhere", () => {
+    const doc = createOfflineDesignerDocument();
+    pushConfigLocale(doc, "de");
+    const { dispatch } = makeStore(doc);
+    expect(dispatch(clearLocale, { tag: "de" }).capture).toBeNull();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.ts
new file mode 100644
index 000000000..fced32491
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/locale-actions.ts
@@ -0,0 +1,805 @@
+import {
+  canonicalizeLocaleTag,
+  ComponentNode,
+  entryValue,
+  RootNode,
+  ScreenNode,
+  ScrollViewNode,
+  TextNode,
+  ViewNode,
+} from "@voidhash/mimic-schema";
+import type {
+  BackgroundImageSnapshot,
+  LocalizedImageOverride,
+  MaybeEntry,
+} from "@voidhash/mimic-schema";
+import type { Primitive } from "@voidhash/mimic-core";
+import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../../designer-commander";
+import {
+  componentPropValueFromRaw,
+  type ComponentPropValuePlain,
+} from "../../utils/component-prop-values";
+import { selectDocumentRoot } from "../../utils/document-root";
+import { readLocalizationInfo } from "../../utils/localization";
+import { findTypedNode, type DesignerDocumentRoot } from "../../utils/node-proxies";
+
+/** A captured `localized` entry value, replayed verbatim on undo. */
+interface CapturedLocalizedEntry {
+  readonly locale: string;
+  readonly overrides: { readonly text?: string };
+}
+
+/** A captured view/screen `localized` image entry value, replayed verbatim on undo. */
+interface CapturedLocalizedImageEntry {
+  readonly locale: string;
+  readonly backgroundImage: BackgroundImageSnapshot | undefined;
+}
+
+/** A captured component-prop `localizedValues` entry, replayed verbatim on undo. */
+interface CapturedLocalizedPropEntry {
+  readonly locale: string;
+  /** Raw stored value; re-narrowed through `componentPropValueFromRaw` on undo. */
+  readonly raw: unknown;
+}
+
+/**
+ * Bivariant structural view of a view/scrollView/screen node's `localized` array
+ * proxy. ViewNode, ScrollViewNode and ScreenNode declare identical `localized`
+ * schemas (whole-value `overrides.backgroundImage`); this shared shape lets one
+ * write path serve all three without narrowing to a concrete node primitive
+ * (mirrors the structural-proxy technique in `style-action-helpers`).
+ */
+interface LocalizedImageEntryProxy {
+  get(): LocalizedImageOverride | undefined;
+  remove(): void;
+  value: { overrides: { set(value: { backgroundImage: BackgroundImageSnapshot }): void } };
+}
+interface LocalizedImageArrayProxy {
+  filter(predicate: (entry: LocalizedImageEntryProxy) => boolean): LocalizedImageEntryProxy[];
+  push(input: { locale: string; overrides: { backgroundImage: BackgroundImageSnapshot } }): unknown;
+}
+
+/**
+ * Resolves the `localized` array proxy of a view, scrollView or screen node, or
+ * `undefined` when the id is missing or not a view/scrollView/screen node.
+ */
+function localizedImageArray(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+): LocalizedImageArrayProxy | undefined {
+  const found = root.findByIdAcrossTree(nodeId);
+  if (found === undefined) {
+    return undefined;
+  }
+  if (found.type === "view") {
+    return found.as(ViewNode).data.localized;
+  }
+  if (found.type === "scrollView") {
+    return found.as(ScrollViewNode).data.localized;
+  }
+  if (found.type === "screen") {
+    return found.as(ScreenNode).data.localized;
+  }
+  return undefined;
+}
+
+/** Snapshot-derived plan of every node that carries entries for one locale. */
+interface LocaleEntryPlan {
+  readonly textNodeIds: readonly string[];
+  readonly imageNodeIds: readonly string[];
+  readonly propSlots: readonly { nodeId: string; propName: string }[];
+}
+
+/**
+ * Everything one locale stored across the tree, captured before a cascade
+ * removal so undo can replay it verbatim (values only; array positions are not
+ * preserved, matching the mimic entry-restore discipline).
+ */
+interface LocaleEntriesCapture {
+  readonly texts: readonly { nodeId: string; text: string | undefined }[];
+  readonly images: readonly { nodeId: string; backgroundImage: BackgroundImageSnapshot | undefined }[];
+  readonly props: readonly { nodeId: string; propName: string; raw: unknown }[];
+}
+
+/** Structural view of a snapshot node for the locale-entry tree walk. */
+interface LocaleWalkNode {
+  readonly type: string;
+  readonly id: string;
+  readonly data: Record<string, unknown>;
+  readonly children: readonly LocaleWalkNode[];
+}
+
+type LocaleTaggedEntry = MaybeEntry<{ locale: string } | undefined>;
+
+function hasLocaleEntry(entries: unknown, locale: string): boolean {
+  return (
+    Array.isArray(entries) &&
+    entries.some((entry) => entryValue(entry as LocaleTaggedEntry)?.locale === locale)
+  );
+}
+
+/**
+ * Walks the committed snapshot and lists every node holding a `localized`
+ * (text/view/scrollView/screen) or component-prop `localizedValues` entry for `locale`.
+ * The plan only enumerates node ids/prop names; values are re-read through the
+ * live proxies inside the mutating transaction, so a concurrent edit between
+ * planning and writing cannot be captured stale, and a concurrently deleted
+ * node simply resolves to `undefined` and is skipped.
+ */
+function planLocaleEntries(root: RootSnapshotNode, locale: string): LocaleEntryPlan {
+  const textNodeIds: string[] = [];
+  const imageNodeIds: string[] = [];
+  const propSlots: { nodeId: string; propName: string }[] = [];
+  const visit = (node: LocaleWalkNode): void => {
+    if (
+      node.type === "text" ||
+      node.type === "view" ||
+      node.type === "scrollView" ||
+      node.type === "screen"
+    ) {
+      if (hasLocaleEntry(node.data["localized"], locale)) {
+        (node.type === "text" ? textNodeIds : imageNodeIds).push(node.id);
+      }
+    } else if (node.type === "component") {
+      const props = node.data["props"];
+      for (const propEntry of Array.isArray(props) ? props : []) {
+        const prop = entryValue(
+          propEntry as MaybeEntry<{ name: string; localizedValues?: unknown } | undefined>,
+        );
+        if (prop !== undefined && hasLocaleEntry(prop.localizedValues, locale)) {
+          propSlots.push({ nodeId: node.id, propName: prop.name });
+        }
+      }
+    }
+    for (const child of node.children) {
+      visit(child);
+    }
+  };
+  visit(root as unknown as LocaleWalkNode);
+  return { textNodeIds, imageNodeIds, propSlots };
+}
+
+function planIsEmpty(plan: LocaleEntryPlan): boolean {
+  return (
+    plan.textNodeIds.length === 0 && plan.imageNodeIds.length === 0 && plan.propSlots.length === 0
+  );
+}
+
+/**
+ * Removes every node-level entry for `locale` named by `plan`, capturing each
+ * removed value first. Must run inside the mutating transaction.
+ */
+function captureAndRemoveLocaleEntries(
+  docRoot: DesignerDocumentRoot,
+  locale: string,
+  plan: LocaleEntryPlan,
+): LocaleEntriesCapture {
+  const texts: { nodeId: string; text: string | undefined }[] = [];
+  for (const nodeId of plan.textNodeIds) {
+    const node = findTypedNode(docRoot, nodeId, TextNode);
+    if (node === undefined) {
+      continue;
+    }
+    for (const entry of node.data.localized.filter(
+      (candidate) => candidate.get()?.locale === locale,
+    )) {
+      const snapshot = entry.get();
+      if (snapshot !== undefined) {
+        texts.push({ nodeId, text: snapshot.overrides?.text });
+      }
+      entry.remove();
+    }
+  }
+
+  const images: { nodeId: string; backgroundImage: BackgroundImageSnapshot | undefined }[] = [];
+  for (const nodeId of plan.imageNodeIds) {
+    const localized = localizedImageArray(docRoot, nodeId);
+    if (localized === undefined) {
+      continue;
+    }
+    for (const entry of localized.filter((candidate) => candidate.get()?.locale === locale)) {
+      const snapshot = entry.get();
+      if (snapshot !== undefined) {
+        images.push({ nodeId, backgroundImage: snapshot.overrides?.backgroundImage });
+      }
+      entry.remove();
+    }
+  }
+
+  const props: { nodeId: string; propName: string; raw: unknown }[] = [];
+  for (const slot of plan.propSlots) {
+    const node = findTypedNode(docRoot, slot.nodeId, ComponentNode);
+    const prop = node?.data.props.find((entry) => entry.get()?.name === slot.propName);
+    if (prop === undefined) {
+      continue;
+    }
+    for (const entry of prop.value.localizedValues.filter(
+      (candidate) => candidate.get()?.locale === locale,
+    )) {
+      const snapshot = entry.get();
+      if (snapshot !== undefined) {
+        props.push({ nodeId: slot.nodeId, propName: slot.propName, raw: snapshot.value });
+      }
+      entry.remove();
+    }
+  }
+
+  return { texts, images, props };
+}
+
+/**
+ * Replays a {@link LocaleEntriesCapture} back onto the tree for `locale`.
+ * Nodes deleted since the capture are skipped.
+ */
+function restoreLocaleEntries(
+  docRoot: DesignerDocumentRoot,
+  locale: string,
+  capture: LocaleEntriesCapture,
+): void {
+  for (const item of capture.texts) {
+    findTypedNode(docRoot, item.nodeId, TextNode)?.data.localized.push({
+      locale,
+      overrides: { text: item.text },
+    });
+  }
+  for (const item of capture.images) {
+    if (item.backgroundImage === undefined) {
+      continue;
+    }
+    localizedImageArray(docRoot, item.nodeId)?.push({
+      locale,
+      overrides: { backgroundImage: item.backgroundImage },
+    });
+  }
+  for (const item of capture.props) {
+    const value = componentPropValueFromRaw(item.raw);
+    if (value === undefined) {
+      continue;
+    }
+    const node = findTypedNode(docRoot, item.nodeId, ComponentNode);
+    const prop = node?.data.props.find((entry) => entry.get()?.name === item.propName);
+    prop?.value.localizedValues.push({ locale, value });
+  }
+}
+
+/**
+ * Enables an additional locale on the document.
+ *
+ * Undoable. The tag is canonicalized via `Intl.getCanonicalLocales`; the write
+ * is rejected (no-op, `entryId: null`) when the tag is structurally invalid,
+ * already enabled, or equal to the default locale (whose content IS the base
+ * props — it is never listed). Undo removes the pushed config entry.
+ */
+export const addLocale = commander.undoableAction<{ tag: string }, { entryId: string | null }>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const root = selectDocumentRoot(state);
+    const info = readLocalizationInfo(root);
+    const canonical = canonicalizeLocaleTag(params.tag);
+    if (
+      canonical === null ||
+      canonical === info.defaultLocale ||
+      info.locales.includes(canonical)
+    ) {
+      return { entryId: null };
+    }
+    const rootId = root.id;
+    const { mimic } = state;
+    const entryId = mimic.document.transaction((docRoot) => {
+      const rootNode = findTypedNode(docRoot, rootId, RootNode);
+      if (rootNode === undefined) {
+        return null;
+      }
+      return rootNode.data.localization.locales.push({ tag: canonical }).id;
+    });
+    return { entryId };
+  },
+  (ctx, params, result) => {
+    if (result.entryId === null) {
+      return;
+    }
+    const state = ctx.getState();
+    const rootId = selectDocumentRoot(state).id;
+    state.mimic.document.transaction((docRoot) => {
+      const rootNode = findTypedNode(docRoot, rootId, RootNode);
+      rootNode?.data.localization.locales.remove(result.entryId as string);
+    });
+  },
+);
+
+/**
+ * Removes a locale from the document, CASCADE: one transaction removes the
+ * config entry AND every node-level entry for that locale — text/view/scrollView/screen
+ * `localized` entries and component-prop `localizedValues` entries — across the
+ * whole tree. No-op (`removed: false`) when the tag is not an enabled
+ * additional locale. Undo re-enables the locale and replays every removed
+ * entry exactly, as one undo step.
+ */
+export const removeLocale = commander.undoableAction<
+  { tag: string },
+  { removed: boolean; capture: LocaleEntriesCapture | null }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const root = selectDocumentRoot(state);
+    const rootId = root.id;
+    const plan = planLocaleEntries(root, params.tag);
+    const { mimic } = state;
+    return mimic.document.transaction((docRoot) => {
+      const rootNode = findTypedNode(docRoot, rootId, RootNode);
+      if (rootNode === undefined) {
+        return { removed: false, capture: null };
+      }
+      const entry = rootNode.data.localization.locales.find(
+        (candidate) => candidate.get()?.tag === params.tag,
+      );
+      if (entry === undefined) {
+        return { removed: false, capture: null };
+      }
+      entry.remove();
+      return { removed: true, capture: captureAndRemoveLocaleEntries(docRoot, params.tag, plan) };
+    });
+  },
+  (ctx, params, result) => {
+    if (!result.removed) {
+      return;
+    }
+    const state = ctx.getState();
+    const rootId = selectDocumentRoot(state).id;
+    state.mimic.document.transaction((docRoot) => {
+      const rootNode = findTypedNode(docRoot, rootId, RootNode);
+      rootNode?.data.localization.locales.push({ tag: params.tag });
+      if (result.capture !== null) {
+        restoreLocaleEntries(docRoot, params.tag, result.capture);
+      }
+    });
+  },
+);
+
+/**
+ * Makes an enabled additional locale the document's default. Metadata-only
+ * swap: sets `localization.defaultLocale`, removes the tag from the additional
+ * list and adds the previous default to it — NO node content moves, so all base
+ * props are simply relabeled as the new default's content and the former
+ * default keeps no overrides of its own. No-op (`previousDefault: null`) when
+ * the tag is already the default or not enabled. Undo swaps back.
+ */
+export const setDefaultLocale = commander.undoableAction<
+  { tag: string },
+  { previousDefault: string | null }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const root = selectDocumentRoot(state);
+    const info = readLocalizationInfo(root);
+    if (params.tag === info.defaultLocale || !info.locales.includes(params.tag)) {
+      return { previousDefault: null };
+    }
+    const rootId = root.id;
+    const previousDefault = state.mimic.document.transaction((docRoot) => {
+      const rootNode = findTypedNode(docRoot, rootId, RootNode);
+      if (rootNode === undefined) {
+        return null;
+      }
+      swapDefaultLocale(rootNode, info.defaultLocale, params.tag);
+      return info.defaultLocale;
+    });
+    return { previousDefault };
+  },
+  (ctx, params, result) => {
+    if (result.previousDefault === null) {
+      return;
+    }
+    const previousDefault = result.previousDefault;
+    const state = ctx.getState();
+    const rootId = selectDocumentRoot(state).id;
+    state.mimic.document.transaction((docRoot) => {
+      const rootNode = findTypedNode(docRoot, rootId, RootNode);
+      if (rootNode !== undefined) {
+        swapDefaultLocale(rootNode, params.tag, previousDefault);
+      }
+    });
+  },
+);
+
+/** Promotes `to` from the additional list to default, demoting `from` into the list. */
+function swapDefaultLocale(
+  rootNode: Primitive.TypedNodeProxy<typeof RootNode>,
+  from: string,
+  to: string,
+): void {
+  const localization = rootNode.data.localization;
+  for (const entry of localization.locales.filter((candidate) => candidate.get()?.tag === to)) {
+    entry.remove();
+  }
+  localization.defaultLocale.set(to);
+  localization.locales.push({ tag: from });
+}
+
+/** The slots `copyLocaleFrom` filled, so undo can remove exactly those target entries. */
+interface CopiedLocaleSlots {
+  readonly textNodeIds: readonly string[];
+  readonly imageNodeIds: readonly string[];
+  readonly propSlots: readonly { nodeId: string; propName: string }[];
+}
+
+/**
+ * Copies translations from `source` to `target`: for every slot where SOURCE
+ * has an override and TARGET does not, the source value is copied (text, image,
+ * component prop). Slots where the target already has an override are left
+ * untouched. One undo entry; undo removes exactly the copied target entries.
+ */
+export const copyLocaleFrom = commander.undoableAction<
+  { source: string; target: string },
+  { copied: CopiedLocaleSlots | null }
+>(
+  (ctx, params) => {
+    if (params.source === params.target) {
+      return { copied: null };
+    }
+    const state = ctx.getState();
+    const root = selectDocumentRoot(state);
+    const plan = planLocaleEntries(root, params.source);
+    if (planIsEmpty(plan)) {
+      return { copied: null };
+    }
+    const { mimic } = state;
+    const copied = mimic.document.transaction((docRoot) => {
+      const textNodeIds: string[] = [];
+      for (const nodeId of plan.textNodeIds) {
+        const node = findTypedNode(docRoot, nodeId, TextNode);
+        if (node === undefined || node.data.localized.filter(hasLocale(params.target)).length > 0) {
+          continue;
+        }
+        const text = node.data.localized
+          .filter(hasLocale(params.source))[0]
+          ?.get()?.overrides?.text;
+        if (text === undefined) {
+          continue;
+        }
+        node.data.localized.push({ locale: params.target, overrides: { text } });
+        textNodeIds.push(nodeId);
+      }
+
+      const imageNodeIds: string[] = [];
+      for (const nodeId of plan.imageNodeIds) {
+        const localized = localizedImageArray(docRoot, nodeId);
+        if (localized === undefined || localized.filter(hasLocale(params.target)).length > 0) {
+          continue;
+        }
+        const backgroundImage = localized.filter(hasLocale(params.source))[0]?.get()?.overrides
+          ?.backgroundImage;
+        if (backgroundImage === undefined) {
+          continue;
+        }
+        localized.push({ locale: params.target, overrides: { backgroundImage } });
+        imageNodeIds.push(nodeId);
+      }
+
+      const propSlots: { nodeId: string; propName: string }[] = [];
+      for (const slot of plan.propSlots) {
+        const node = findTypedNode(docRoot, slot.nodeId, ComponentNode);
+        const prop = node?.data.props.find((entry) => entry.get()?.name === slot.propName);
+        if (
+          prop === undefined ||
+          prop.value.localizedValues.filter(hasLocale(params.target)).length > 0
+        ) {
+          continue;
+        }
+        const raw = prop.value.localizedValues.filter(hasLocale(params.source))[0]?.get()?.value;
+        const value = componentPropValueFromRaw(raw);
+        if (value === undefined) {
+          continue;
+        }
+        prop.value.localizedValues.push({ locale: params.target, value });
+        propSlots.push(slot);
+      }
+
+      return { textNodeIds, imageNodeIds, propSlots };
+    });
+    return { copied };
+  },
+  (ctx, params, result) => {
+    if (result.copied === null) {
+      return;
+    }
+    const copied = result.copied;
+    const state = ctx.getState();
+    state.mimic.document.transaction((docRoot) => {
+      // The copied slots had NO target entry before the copy, so removing every
+      // target-locale entry at exactly those slots restores the prior state.
+      captureAndRemoveLocaleEntries(docRoot, params.target, copied);
+    });
+  },
+);
+
+/** Predicate over `localized`/`localizedValues` entry proxies matching one locale. */
+function hasLocale(locale: string) {
+  return (entry: { get(): { locale: string } | undefined }): boolean =>
+    entry.get()?.locale === locale;
+}
+
+/**
+ * Removes every node-level entry for a locale while KEEPING its config entry —
+ * the locale stays enabled, fully untranslated. No-op (`capture: null`) when
+ * the locale has no entries anywhere. One undo entry; undo replays every
+ * removed entry exactly.
+ */
+export const clearLocale = commander.undoableAction<
+  { tag: string },
+  { capture: LocaleEntriesCapture | null }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const root = selectDocumentRoot(state);
+    const plan = planLocaleEntries(root, params.tag);
+    if (planIsEmpty(plan)) {
+      return { capture: null };
+    }
+    const capture = state.mimic.document.transaction((docRoot) =>
+      captureAndRemoveLocaleEntries(docRoot, params.tag, plan),
+    );
+    return { capture };
+  },
+  (ctx, params, result) => {
+    if (result.capture === null) {
+      return;
+    }
+    const capture = result.capture;
+    const state = ctx.getState();
+    state.mimic.document.transaction((docRoot) => {
+      restoreLocaleEntries(docRoot, params.tag, capture);
+    });
+  },
+);
+
+/**
+ * Inserts, updates, or clears a text node's translation for a locale.
+ *
+ * Undoable, text nodes only. Insert-or-update semantics on the node's
+ * `localized` array: the FIRST entry matching `locale` is updated in place;
+ * absent it is appended; any duplicate entries for that locale are compacted
+ * away (removed). `text: ""` clears the override — since `text` is the only
+ * override field on text nodes, the whole entry is removed and the node falls
+ * back to its base text. Undo restores exactly the entries that existed for the
+ * locale before the write (their values; array position is not preserved,
+ * matching the mimic entry-restore discipline).
+ */
+export const updateNodeTranslation = commander.undoableAction<
+  { id: string; locale: string; text: string },
+  { previous: readonly CapturedLocalizedEntry[] | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    return mimic.document.transaction((docRoot) => {
+      const node = findTypedNode(docRoot, params.id, TextNode);
+      if (node === undefined) {
+        return { previous: null };
+      }
+      const matches = node.data.localized.filter(
+        (entry) => entry.get()?.locale === params.locale,
+      );
+      const previous: CapturedLocalizedEntry[] = matches.flatMap((entry) => {
+        const snapshot = entry.get();
+        return snapshot === undefined
+          ? []
+          : [{ locale: snapshot.locale, overrides: { text: snapshot.overrides?.text } }];
+      });
+
+      if (params.text === "") {
+        // Clearing removes the whole entry (text is the only override field).
+        for (const entry of matches) {
+          entry.remove();
+        }
+        return { previous };
+      }
+
+      const [first, ...rest] = matches;
+      if (first === undefined) {
+        node.data.localized.push({ locale: params.locale, overrides: { text: params.text } });
+      } else {
+        first.value.overrides.text.set(params.text);
+        for (const duplicate of rest) {
+          duplicate.remove();
+        }
+      }
+      return { previous };
+    });
+  },
+  (ctx, params, result) => {
+    if (result.previous === null) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((docRoot) => {
+      const node = findTypedNode(docRoot, params.id, TextNode);
+      if (node === undefined) {
+        return;
+      }
+      // Drop whatever this write left for the locale, then replay the captured
+      // entries verbatim — one uniform reversal for insert/update/clear/compact.
+      for (const entry of node.data.localized.filter(
+        (candidate) => candidate.get()?.locale === params.locale,
+      )) {
+        entry.remove();
+      }
+      for (const entry of result.previous ?? []) {
+        node.data.localized.push({
+          locale: entry.locale,
+          overrides: { text: entry.overrides.text },
+        });
+      }
+    });
+  },
+);
+
+/**
+ * Inserts, updates, or clears a view/scrollView/screen node's localized
+ * background image for a locale.
+ *
+ * Undoable, view/scrollView/screen nodes only. Same insert-or-update + duplicate-compaction
+ * discipline as {@link updateNodeTranslation}, on the node's `localized` array.
+ * `backgroundImage` (url + resizeMode) is a whole value: the entry's `overrides`
+ * container is set outright (structured overrides write the whole container).
+ * `backgroundImage: null` clears the override — since `backgroundImage` is the
+ * only override field on these nodes, the whole entry is removed and the node
+ * falls back to its base `style.backgroundImage`. Undo restores exactly the
+ * entries that existed for the locale before the write.
+ */
+export const updateNodeLocalizedImage = commander.undoableAction<
+  { id: string; locale: string; backgroundImage: BackgroundImageSnapshot | null },
+  { previous: readonly CapturedLocalizedImageEntry[] | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    return mimic.document.transaction((docRoot) => {
+      const localized = localizedImageArray(docRoot, params.id);
+      if (localized === undefined) {
+        return { previous: null };
+      }
+      const matches = localized.filter((entry) => entry.get()?.locale === params.locale);
+      const previous: CapturedLocalizedImageEntry[] = matches.flatMap((entry) => {
+        const snapshot = entry.get();
+        return snapshot === undefined
+          ? []
+          : [{ locale: snapshot.locale, backgroundImage: snapshot.overrides?.backgroundImage }];
+      });
+
+      if (params.backgroundImage === null) {
+        // Clearing removes the whole entry (backgroundImage is the only field).
+        for (const entry of matches) {
+          entry.remove();
+        }
+        return { previous };
+      }
+
+      const [first, ...rest] = matches;
+      if (first === undefined) {
+        localized.push({
+          locale: params.locale,
+          overrides: { backgroundImage: params.backgroundImage },
+        });
+      } else {
+        first.value.overrides.set({ backgroundImage: params.backgroundImage });
+        for (const duplicate of rest) {
+          duplicate.remove();
+        }
+      }
+      return { previous };
+    });
+  },
+  (ctx, params, result) => {
+    if (result.previous === null) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((docRoot) => {
+      const localized = localizedImageArray(docRoot, params.id);
+      if (localized === undefined) {
+        return;
+      }
+      // Drop whatever this write left for the locale, then replay the captured
+      // entries verbatim — one uniform reversal for insert/update/clear/compact.
+      for (const entry of localized.filter(
+        (candidate) => candidate.get()?.locale === params.locale,
+      )) {
+        entry.remove();
+      }
+      for (const entry of result.previous ?? []) {
+        if (entry.backgroundImage === undefined) {
+          continue;
+        }
+        localized.push({
+          locale: entry.locale,
+          overrides: { backgroundImage: entry.backgroundImage },
+        });
+      }
+    });
+  },
+);
+
+/**
+ * Inserts, updates, or clears a component prop's localized literal value for a
+ * locale.
+ *
+ * Undoable. Locates the prop by `name` on the component node's `props` array,
+ * then applies the same insert-or-update + duplicate-compaction discipline as
+ * {@link updateNodeTranslation} to that prop entry's `localizedValues`. `value`
+ * is a whole component-prop-value snapshot; `value: null` removes the locale's
+ * override (the prop falls back to its base literal). Undo restores exactly the
+ * `localizedValues` entries that existed for the locale before the write, re-
+ * narrowing each captured raw value through `componentPropValueFromRaw`.
+ */
+export const updateComponentPropLocalizedValue = commander.undoableAction<
+  { nodeId: string; propName: string; locale: string; value: ComponentPropValuePlain | null },
+  { previous: readonly CapturedLocalizedPropEntry[] | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    return mimic.document.transaction((docRoot) => {
+      const node = findTypedNode(docRoot, params.nodeId, ComponentNode);
+      if (node === undefined) {
+        return { previous: null };
+      }
+      const prop = node.data.props.find((entry) => entry.get()?.name === params.propName);
+      if (prop === undefined) {
+        return { previous: null };
+      }
+      const localizedValues = prop.value.localizedValues;
+      const matches = localizedValues.filter((entry) => entry.get()?.locale === params.locale);
+      const previous: CapturedLocalizedPropEntry[] = matches.flatMap((entry) => {
+        const snapshot = entry.get();
+        return snapshot === undefined ? [] : [{ locale: snapshot.locale, raw: snapshot.value }];
+      });
+
+      if (params.value === null) {
+        for (const entry of matches) {
+          entry.remove();
+        }
+        return { previous };
+      }
+
+      const [first, ...rest] = matches;
+      if (first === undefined) {
+        localizedValues.push({ locale: params.locale, value: params.value });
+      } else {
+        first.value.value.set(params.value);
+        for (const duplicate of rest) {
+          duplicate.remove();
+        }
+      }
+      return { previous };
+    });
+  },
+  (ctx, params, result) => {
+    if (result.previous === null) {
+      return;
+    }
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((docRoot) => {
+      const node = findTypedNode(docRoot, params.nodeId, ComponentNode);
+      if (node === undefined) {
+        return;
+      }
+      const prop = node.data.props.find((entry) => entry.get()?.name === params.propName);
+      if (prop === undefined) {
+        return;
+      }
+      const localizedValues = prop.value.localizedValues;
+      for (const entry of localizedValues.filter(
+        (candidate) => candidate.get()?.locale === params.locale,
+      )) {
+        entry.remove();
+      }
+      for (const entry of result.previous ?? []) {
+        const value = componentPropValueFromRaw(entry.raw);
+        if (value === undefined) {
+          continue;
+        }
+        localizedValues.push({ locale: entry.locale, value });
+      }
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/path-fill-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/path-fill-style-actions.ts
new file mode 100644
index 000000000..481e39e08
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/path-fill-style-actions.ts
@@ -0,0 +1,32 @@
+import { commander } from "../../designer-commander";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+interface PathFillStyle {
+  fillColor: string;
+  fillEnabled: boolean;
+  fillRule: "nonzero" | "evenodd";
+  fillOpacity: number;
+}
+
+export const updatePathFillStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<PathFillStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => ({
+    previousStyles: applyStyleUpdate<PathFillStyle>(
+      ctx.getState().mimic,
+      params.nodes,
+      params.style,
+      ctx.getState().stateOverrideSelection,
+      ctx.transaction,
+    ),
+  }),
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/path-stroke-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/path-stroke-style-actions.ts
new file mode 100644
index 000000000..419c116f6
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/path-stroke-style-actions.ts
@@ -0,0 +1,34 @@
+import { commander } from "../../designer-commander";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+interface PathStrokeStyle {
+  strokeColor: string;
+  strokeEnabled: boolean;
+  strokeWidth: number;
+  strokeLinecap: "butt" | "round" | "square";
+  strokeLinejoin: "miter" | "round" | "bevel";
+  strokeOpacity: number;
+}
+
+export const updatePathStrokeStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<PathStrokeStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => ({
+    previousStyles: applyStyleUpdate<PathStrokeStyle>(
+      ctx.getState().mimic,
+      params.nodes,
+      params.style,
+      ctx.getState().stateOverrideSelection,
+      ctx.transaction,
+    ),
+  }),
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.test.ts
new file mode 100644
index 000000000..c24fc7d90
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.test.ts
@@ -0,0 +1,261 @@
+import { TextNode, ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { findTypedNode } from "../../utils/node-proxies";
+import { unwrapEntriesDeep } from "../../utils/replay";
+import { addNodeState, removeNodeState, updateNodeState } from "./state-actions";
+
+const sampleCondition = {
+  type: "or",
+  value: [
+    {
+      type: "and",
+      value: [
+        {
+          type: "equals",
+          value: {
+            left: { type: "literal", value: { key: "boolean", value: true } },
+            right: { type: "literal", value: { key: "boolean", value: true } },
+          },
+        },
+      ],
+    },
+  ],
+} as const;
+
+function makeDesignerDoc() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  const ids = { flexId: "", textId: "" };
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const flex = screen.children.insertLast({ type: "view" });
+    ids.flexId = flex.id;
+    ids.textId = flex.children.insertLast({ type: "text" }).id;
+  });
+  return { doc, ids };
+}
+
+function makeCtx(doc: OfflineDesignerDocument, initialSelection: Record<string, string> = {}) {
+  let storeState: Record<string, unknown> = {
+    mimic: { document: doc, snapshot: doc.getSnapshot() },
+    stateOverrideSelection: initialSelection,
+  };
+  return {
+    ctx: {
+      dispatch: () => () => undefined,
+      getState: () => storeState,
+      setState: (partial: Record<string, unknown>) => {
+        storeState = { ...storeState, ...partial };
+      },
+      transaction: (fn: never) => doc.transaction(fn),
+    },
+    selection: () => storeState["stateOverrideSelection"] as Record<string, string>,
+  };
+}
+
+function rawViewStates(doc: OfflineDesignerDocument, nodeId: string) {
+  const data = findTypedNode(doc.root, nodeId, ViewNode)?.get()?.data;
+  if (data === undefined) {
+    throw new Error("expected a flex node");
+  }
+  return data.states;
+}
+
+function rawTextStates(doc: OfflineDesignerDocument, nodeId: string) {
+  const data = findTypedNode(doc.root, nodeId, TextNode)?.get()?.data;
+  if (data === undefined) {
+    throw new Error("expected a text node");
+  }
+  return data.states;
+}
+
+describe("addNodeState", () => {
+  test("adds one entry storing the condition verbatim and undo removes it", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const { ctx } = makeCtx(doc);
+    const params = {
+      condition: sampleCondition,
+      name: "Selected",
+      nodeId: ids.flexId,
+      nodeType: "view" as const,
+    };
+
+    const result = addNodeState.fn(ctx as never, params);
+
+    const entries = rawViewStates(doc, ids.flexId);
+    expect(entries).toHaveLength(1);
+    expect(result.stateId).toBe(entries[0]?.id);
+    expect(entries[0]?.value?.name).toBe("Selected");
+    // snapshot conditions are entry-wrapped; unwrap for input comparison
+    expect(unwrapEntriesDeep(entries[0]?.value?.condition)).toEqual(sampleCondition);
+
+    addNodeState.revert(ctx as never, params, result);
+    expect(rawViewStates(doc, ids.flexId)).toHaveLength(0);
+  });
+
+  test("works for non-flex stateful nodes", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const { ctx } = makeCtx(doc);
+
+    const result = addNodeState.fn(ctx as never, {
+      condition: sampleCondition,
+      name: "Highlighted",
+      nodeId: ids.textId,
+      nodeType: "text" as const,
+    });
+
+    const entries = rawTextStates(doc, ids.textId);
+    expect(entries).toHaveLength(1);
+    expect(result.stateId).toBe(entries[0]?.id);
+  });
+});
+
+describe("updateNodeState", () => {
+  test("rename undo round trip leaves the condition byte-identical", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const { ctx } = makeCtx(doc);
+    const added = addNodeState.fn(ctx as never, {
+      condition: sampleCondition,
+      name: "Selected",
+      nodeId: ids.flexId,
+      nodeType: "view" as const,
+    });
+    const stateId = added.stateId;
+    if (stateId === null) throw new Error("expected a state entry id");
+    const beforeCondition = JSON.stringify(rawViewStates(doc, ids.flexId)[0]?.value?.condition);
+
+    const params = { newName: "Active", nodeId: ids.flexId, nodeType: "view" as const, stateId };
+    const result = updateNodeState.fn(ctx as never, params);
+
+    expect(result).toEqual({ previousCondition: null, previousName: "Selected" });
+    expect(rawViewStates(doc, ids.flexId)[0]?.value?.name).toBe("Active");
+
+    updateNodeState.revert(ctx as never, params, result);
+    const entry = rawViewStates(doc, ids.flexId)[0];
+    expect(entry?.value?.name).toBe("Selected");
+    expect(JSON.stringify(entry?.value?.condition)).toBe(beforeCondition);
+  });
+
+  test("condition undo round trip restores the previous condition", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const { ctx } = makeCtx(doc);
+    const added = addNodeState.fn(ctx as never, {
+      condition: sampleCondition,
+      name: "Selected",
+      nodeId: ids.flexId,
+      nodeType: "view" as const,
+    });
+    const stateId = added.stateId;
+    if (stateId === null) throw new Error("expected a state entry id");
+
+    const newCondition = {
+      type: "or",
+      value: [
+        {
+          type: "and",
+          value: [
+            {
+              type: "equals",
+              value: {
+                left: { type: "literal", value: { key: "number", value: 1 } },
+                right: { type: "literal", value: { key: "number", value: 2 } },
+              },
+            },
+          ],
+        },
+      ],
+    } as const;
+    const params = { newCondition, nodeId: ids.flexId, nodeType: "view" as const, stateId };
+    const result = updateNodeState.fn(ctx as never, params);
+
+    expect(result.previousName).toBe(null);
+    expect(unwrapEntriesDeep(rawViewStates(doc, ids.flexId)[0]?.value?.condition)).toEqual(
+      newCondition,
+    );
+
+    updateNodeState.revert(ctx as never, params, result);
+    expect(unwrapEntriesDeep(rawViewStates(doc, ids.flexId)[0]?.value?.condition)).toEqual(
+      sampleCondition,
+    );
+  });
+
+  test("no-ops for unknown state ids", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const { ctx } = makeCtx(doc);
+    const result = updateNodeState.fn(ctx as never, {
+      newName: "Active",
+      nodeId: ids.flexId,
+      nodeType: "view" as const,
+      stateId: "missing",
+    });
+    expect(result).toEqual({ previousCondition: null, previousName: null });
+  });
+});
+
+describe("removeNodeState", () => {
+  test("removes the entry and undo restores its value and the selection", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const seedCtx = makeCtx(doc).ctx;
+    const added = addNodeState.fn(seedCtx as never, {
+      condition: sampleCondition,
+      name: "Selected",
+      nodeId: ids.flexId,
+      nodeType: "view" as const,
+    });
+    const stateId = added.stateId;
+    if (stateId === null) throw new Error("expected a state entry id");
+    const beforeValue = JSON.stringify(rawViewStates(doc, ids.flexId)[0]?.value);
+
+    const { ctx, selection } = makeCtx(doc, { [ids.flexId]: stateId });
+    const params = { nodeId: ids.flexId, nodeType: "view" as const, stateId };
+    const result = removeNodeState.fn(ctx as never, params);
+
+    expect(rawViewStates(doc, ids.flexId)).toHaveLength(0);
+    expect(result.previousSelectedStateId).toBe(stateId);
+    expect(JSON.stringify(result.removedState)).toBe(beforeValue);
+    expect(selection()[ids.flexId]).toBeUndefined();
+
+    removeNodeState.revert(ctx as never, params, result);
+
+    const restored = rawViewStates(doc, ids.flexId);
+    expect(restored).toHaveLength(1);
+    // the restored element matches the removed one verbatim, modulo the
+    // regenerated inner array-entry ids/positions
+    expect(unwrapEntriesDeep(restored[0]?.value)).toEqual(
+      unwrapEntriesDeep(JSON.parse(beforeValue)),
+    );
+    // selection re-points at the restored entry's fresh id
+    expect(selection()[ids.flexId]).toBe(restored[0]?.id);
+  });
+
+  test("unknown payloads forged into the undo stack are dropped without throwing", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const { ctx } = makeCtx(doc);
+    const params = { nodeId: ids.flexId, nodeType: "view" as const, stateId: "whatever" };
+
+    removeNodeState.revert(ctx as never, params, {
+      previousSelectedStateId: null,
+      removedState: { condition: { type: "unknown-kind" }, id: "x", name: "Broken" },
+    });
+
+    expect(rawViewStates(doc, ids.flexId)).toHaveLength(0);
+  });
+
+  test("returns null payloads for unknown state ids", () => {
+    const { doc, ids } = makeDesignerDoc();
+    const { ctx } = makeCtx(doc);
+    const result = removeNodeState.fn(ctx as never, {
+      nodeId: ids.flexId,
+      nodeType: "view" as const,
+      stateId: "missing",
+    });
+    expect(result).toEqual({ previousSelectedStateId: null, removedState: null });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.ts
new file mode 100644
index 000000000..df703d110
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/state-actions.ts
@@ -0,0 +1,255 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import {
+  PathNode,
+  ScreenNode,
+  ScrollViewNode,
+  ShapeNode,
+  TextNode,
+  ViewNode,
+} from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import {
+  findStatefulNode,
+  findTypedNode,
+  type DesignerDocumentRoot,
+} from "../../utils/node-proxies";
+import {
+  dnfInputFromSnapshot,
+  replayableElementInput,
+  unwrapEntriesDeep,
+  type DnfInput,
+} from "../../utils/replay";
+import { clearSelectedStateIfDeleted } from "../../utils/state-overrides";
+import type { StatefulEditableNodeType } from "../node-resolver";
+
+/**
+ * State ids passed into these actions are array-ENTRY ids (the
+ * `{id, pos, value}` wrapper ids the snapshot exposes), not the elements'
+ * own `id` fields — the UI iterates entries, and entry handles are addressed
+ * via `findById(entryId)`.
+ */
+
+/**
+ * Re-adds a removed state element from its captured snapshot (undo path):
+ * the snapshot is unwrapped to input shape and validated against the node
+ * type's state schema — payloads the schema rejects are dropped without
+ * throwing. Returns the fresh array-entry id, or `null`.
+ */
+function restoreStateEntry(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  nodeType: StatefulEditableNodeType,
+  raw: unknown,
+): string | null {
+  const plain = unwrapEntriesDeep(raw);
+  switch (nodeType) {
+    case "view": {
+      const node = findTypedNode(root, nodeId, ViewNode);
+      const element = ViewNode.data.fields.states.element;
+      if (!node || !replayableElementInput(element, plain)) return null;
+      return node.data.states.push(plain).id;
+    }
+    case "scrollView": {
+      const node = findTypedNode(root, nodeId, ScrollViewNode);
+      const element = ScrollViewNode.data.fields.states.element;
+      if (!node || !replayableElementInput(element, plain)) return null;
+      return node.data.states.push(plain).id;
+    }
+    case "screen": {
+      const node = findTypedNode(root, nodeId, ScreenNode);
+      const element = ScreenNode.data.fields.states.element;
+      if (!node || !replayableElementInput(element, plain)) return null;
+      return node.data.states.push(plain).id;
+    }
+    case "text": {
+      const node = findTypedNode(root, nodeId, TextNode);
+      const element = TextNode.data.fields.states.element;
+      if (!node || !replayableElementInput(element, plain)) return null;
+      return node.data.states.push(plain).id;
+    }
+    case "shape": {
+      const node = findTypedNode(root, nodeId, ShapeNode);
+      const element = ShapeNode.data.fields.states.element;
+      if (!node || !replayableElementInput(element, plain)) return null;
+      return node.data.states.push(plain).id;
+    }
+    case "path": {
+      const node = findTypedNode(root, nodeId, PathNode);
+      const element = PathNode.data.fields.states.element;
+      if (!node || !replayableElementInput(element, plain)) return null;
+      return node.data.states.push(plain).id;
+    }
+  }
+}
+
+/**
+ * Adds a state to a stateful node. Returns the created array-entry id
+ * (reported by `push`); undo removes that entry.
+ */
+export const addNodeState = commander.undoableAction<
+  {
+    nodeId: string;
+    nodeType: StatefulEditableNodeType;
+    name: string;
+    condition: DnfInput;
+  },
+  { stateId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const stateId = mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      if (!proxy) return null;
+
+      const created = proxy.data.states.push({
+        condition: params.condition,
+        id: `state-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+        name: params.name,
+      });
+      return created.id;
+    });
+
+    return { stateId };
+  },
+  (ctx, params, result) => {
+    const { stateId } = result;
+    if (stateId === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      if (!proxy) return;
+      proxy.data.states.remove(stateId);
+    });
+  },
+);
+
+/**
+ * Removes a state (by array-entry id), capturing its snapshot for undo.
+ * Undo re-adds the state — under a fresh entry id — and re-points a
+ * selection that targeted the removed entry at the restored one.
+ */
+export const removeNodeState = commander.undoableAction<
+  {
+    nodeId: string;
+    nodeType: StatefulEditableNodeType;
+    stateId: string;
+  },
+  { previousSelectedStateId: string | null; removedState: unknown }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+    const previousSelectedStateId = state.stateOverrideSelection[params.nodeId] ?? null;
+
+    const removedState = mimic.document.transaction((root): unknown => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      if (!proxy) return null;
+      const entry = proxy.data.states.findById(params.stateId);
+      const snapshot = entry?.get();
+      if (entry === undefined || snapshot === undefined) return null;
+      entry.remove();
+      return snapshot;
+    });
+
+    const nextSelection = clearSelectedStateIfDeleted(
+      state.stateOverrideSelection,
+      params.nodeId,
+      params.stateId,
+    );
+
+    if (nextSelection !== state.stateOverrideSelection) {
+      ctx.setState({
+        stateOverrideSelection: nextSelection,
+      });
+    }
+
+    return {
+      previousSelectedStateId,
+      removedState: removedState ?? null,
+    };
+  },
+  (ctx, params, result) => {
+    const { previousSelectedStateId, removedState } = result;
+    if (removedState === null) return;
+
+    const { mimic } = ctx.getState();
+
+    const restoredStateId = mimic.document.transaction((root) =>
+      restoreStateEntry(root, params.nodeId, params.nodeType, removedState),
+    );
+
+    if (previousSelectedStateId === params.stateId && restoredStateId !== null) {
+      ctx.setState({
+        stateOverrideSelection: {
+          ...ctx.getState().stateOverrideSelection,
+          [params.nodeId]: restoredStateId,
+        },
+      });
+    }
+  },
+);
+
+/**
+ * Updates a state's name and/or condition (by array-entry id) through
+ * entry-addressed writes. Undo restores the previous values captured from
+ * the entry's snapshot.
+ */
+export const updateNodeState = commander.undoableAction<
+  {
+    nodeId: string;
+    nodeType: StatefulEditableNodeType;
+    stateId: string;
+    newName?: string;
+    newCondition?: DnfInput;
+  },
+  { previousName: string | null; previousCondition: DnfInput | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    return mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      const entry = proxy?.data.states.findById(params.stateId);
+      const snapshot = entry?.get();
+      if (!proxy || entry === undefined || snapshot === undefined) {
+        return { previousCondition: null, previousName: null };
+      }
+
+      if (params.newName !== undefined) {
+        entry.value.name.set(params.newName);
+      }
+      if (params.newCondition !== undefined) {
+        entry.value.condition.set(params.newCondition);
+      }
+
+      return {
+        previousCondition:
+          params.newCondition !== undefined ? dnfInputFromSnapshot(snapshot.condition) : null,
+        previousName: params.newName !== undefined ? snapshot.name : null,
+      };
+    });
+  },
+  (ctx, params, result) => {
+    const { previousCondition, previousName } = result;
+    if (previousName === null && previousCondition === null) {
+      return;
+    }
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      const entry = proxy?.data.states.findById(params.stateId);
+      if (!proxy || entry === undefined) return;
+
+      if (previousName !== null) {
+        entry.value.name.set(previousName);
+      }
+      if (previousCondition !== null) {
+        entry.value.condition.set(previousCondition);
+      }
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.test.ts
new file mode 100644
index 000000000..e7f3e1f70
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.test.ts
@@ -0,0 +1,419 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { applyStyleUpdate, type StyleTarget, undoStyleUpdate } from "./style-action-helpers";
+
+type MockStateEntry = {
+  id: string;
+  pos: string;
+  value: {
+    id: string;
+    name: string;
+    condition: Record<string, unknown>;
+    overrides: {
+      style: Record<string, unknown>;
+      actions: Array<{
+        id: string;
+        pos: string;
+        value: { interactionId: string; action: { type: string } };
+      }>;
+    };
+  };
+};
+
+type MockNode = {
+  id: string;
+  type: "view";
+  data: {
+    style: Record<string, unknown>;
+    states: MockStateEntry[];
+  };
+  children: unknown[];
+};
+
+function createMockNode(id: string, baseColor: string, overrideColor: string): MockNode {
+  return {
+    id,
+    type: "view",
+    data: {
+      style: {
+        alignSelf: "auto",
+        backgroundColor: baseColor,
+        height: 100,
+        width: 100,
+      },
+      states: [
+        {
+          id: "state-1",
+          pos: "a0",
+          value: {
+            condition: {
+              type: "or",
+              value: [
+                {
+                  type: "and",
+                  value: [
+                    {
+                      type: "equals",
+                      value: {
+                        left: {
+                          type: "literal",
+                          value: { key: "boolean", value: true },
+                        },
+                        right: {
+                          type: "literal",
+                          value: { key: "boolean", value: true },
+                        },
+                      },
+                    },
+                  ],
+                },
+              ],
+            },
+            id: `state-value-${id}`,
+            name: "Hovered",
+            overrides: {
+              actions: [],
+              style: {
+                backgroundColor: overrideColor,
+              },
+            },
+          },
+        },
+      ],
+    },
+    children: [],
+  };
+}
+
+function createMockMimic(nodes: MockNode[]) {
+  const snapshot = [
+    {
+      children: nodes,
+      data: { name: "Root" },
+      id: "root",
+      type: "root",
+    },
+  ];
+
+  const makeStateProxy = (stateEntry: MockStateEntry) => ({
+    overrides: {
+      style: {
+        set: (value: Record<string, unknown>) => {
+          stateEntry.value.overrides.style = { ...value };
+        },
+        update: (value: Record<string, unknown>) => {
+          const next = { ...stateEntry.value.overrides.style };
+          for (const [key, item] of Object.entries(value)) {
+            if (item === undefined) {
+              delete next[key];
+              continue;
+            }
+            next[key] = item;
+          }
+          stateEntry.value.overrides.style = next;
+        },
+      },
+    },
+  });
+
+  const makeNodeProxy = (node: MockNode) => ({
+    data: {
+      states: {
+        findById: (stateId: string) => {
+          const state = node.data.states.find((entry) => entry.id === stateId);
+          if (!state) {
+            return undefined;
+          }
+          return { value: makeStateProxy(state) };
+        },
+      },
+    },
+    update: (value: { style?: Record<string, unknown> }) => {
+      if (value.style) {
+        const next = { ...node.data.style };
+        for (const [key, item] of Object.entries(value.style)) {
+          if (item === undefined) {
+            delete next[key];
+            continue;
+          }
+          next[key] = item;
+        }
+        node.data.style = next;
+      }
+    },
+  });
+
+  const transactionRoot = {
+    findByIdAcrossTree: (id: string) => {
+      const node = nodes.find((entry) => entry.id === id);
+      if (!node) {
+        return undefined;
+      }
+      const proxy = makeNodeProxy(node);
+      return {
+        as: () => proxy,
+        type: node.type,
+      };
+    },
+  };
+
+  const mimic = {
+    document: {
+      transaction: (fn: (root: typeof transactionRoot) => void) => {
+        fn(transactionRoot);
+      },
+    },
+    snapshot,
+  };
+
+  return {
+    mimic,
+    getNode: (id: string) => nodes.find((node) => node.id === id),
+    getStateOverrideValue: (nodeId: string, key: string) =>
+      nodes.find((node) => node.id === nodeId)?.data.states[0]?.value.overrides.style[key] ?? null,
+  };
+}
+
+describe("applyStyleUpdate", () => {
+  const targets: StyleTarget[] = [{ nodeId: "node-1", nodeType: "view" }];
+
+  test("writes style changes to selected state overrides", () => {
+    const { mimic, getNode, getStateOverrideValue } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+    ]);
+
+    const previous = applyStyleUpdate(
+      mimic as never,
+      targets,
+      { backgroundColor: "rgba(0, 255, 0, 1)" },
+      { "node-1": "state-1" },
+      mimic.document.transaction as never,
+    );
+
+    expect(getNode("node-1")?.data.style["backgroundColor"]).toBe("rgba(255, 0, 0, 1)");
+    expect(getStateOverrideValue("node-1", "backgroundColor")).toBe("rgba(0, 255, 0, 1)");
+
+    undoStyleUpdate(mimic as never, targets, previous, mimic.document.transaction as never);
+    expect(getStateOverrideValue("node-1", "backgroundColor")).toBe("rgba(0, 0, 255, 1)");
+  });
+
+  test("removes selected state override when value matches base style", () => {
+    const { mimic, getNode, getStateOverrideValue } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+    ]);
+
+    applyStyleUpdate(
+      mimic as never,
+      targets,
+      { backgroundColor: getNode("node-1")?.data.style["backgroundColor"] },
+      { "node-1": "state-1" },
+      mimic.document.transaction as never,
+    );
+
+    expect(getStateOverrideValue("node-1", "backgroundColor")).toBeNull();
+  });
+
+  test("removes selected state override when base value is undefined", () => {
+    const node = createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)");
+    node.data.states[0]!.value.overrides.style["lineHeight"] = 24;
+
+    const { mimic, getStateOverrideValue } = createMockMimic([node]);
+
+    applyStyleUpdate(
+      mimic as never,
+      targets,
+      { lineHeight: undefined },
+      { "node-1": "state-1" },
+      mimic.document.transaction as never,
+    );
+
+    expect(getStateOverrideValue("node-1", "lineHeight")).toBeNull();
+  });
+
+  test("writes style changes to base style when default is selected", () => {
+    const { mimic, getNode, getStateOverrideValue } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+    ]);
+
+    const previous = applyStyleUpdate(
+      mimic as never,
+      targets,
+      { backgroundColor: "rgba(0, 255, 0, 1)" },
+      {},
+      mimic.document.transaction as never,
+    );
+
+    expect(getNode("node-1")?.data.style["backgroundColor"]).toBe("rgba(0, 255, 0, 1)");
+    expect(getStateOverrideValue("node-1", "backgroundColor")).toBe("rgba(0, 0, 255, 1)");
+
+    undoStyleUpdate(mimic as never, targets, previous, mimic.document.transaction as never);
+    expect(getNode("node-1")?.data.style["backgroundColor"]).toBe("rgba(255, 0, 0, 1)");
+  });
+
+  test("writes multi-select updates to each node's selected state", () => {
+    const { mimic, getNode, getStateOverrideValue } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+      createMockNode("node-2", "rgba(255, 255, 0, 1)", "rgba(255, 0, 255, 1)"),
+    ]);
+    const multiTargets: StyleTarget[] = [
+      { nodeId: "node-1", nodeType: "view" },
+      { nodeId: "node-2", nodeType: "view" },
+    ];
+
+    applyStyleUpdate(
+      mimic as never,
+      multiTargets,
+      { backgroundColor: "rgba(0, 255, 0, 1)" },
+      { "node-1": "state-1", "node-2": "state-1" },
+      mimic.document.transaction as never,
+    );
+
+    expect(getNode("node-1")?.data.style["backgroundColor"]).toBe("rgba(255, 0, 0, 1)");
+    expect(getNode("node-2")?.data.style["backgroundColor"]).toBe("rgba(255, 255, 0, 1)");
+    expect(getStateOverrideValue("node-1", "backgroundColor")).toBe("rgba(0, 255, 0, 1)");
+    expect(getStateOverrideValue("node-2", "backgroundColor")).toBe("rgba(0, 255, 0, 1)");
+  });
+
+  test("maps a null width/height clear to the literal 'auto' (hug), not deletion", () => {
+    const { mimic, getNode } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+    ]);
+
+    const previous = applyStyleUpdate(
+      mimic as never,
+      targets,
+      { height: null, width: null },
+      {},
+      mimic.document.transaction as never,
+    );
+
+    expect(getNode("node-1")?.data.style["width"]).toBe("auto");
+    expect(getNode("node-1")?.data.style["height"]).toBe("auto");
+
+    undoStyleUpdate(mimic as never, targets, previous, mimic.document.transaction as never);
+    expect(getNode("node-1")?.data.style["width"]).toBe(100);
+    expect(getNode("node-1")?.data.style["height"]).toBe(100);
+  });
+
+  test("maps a null clear for other fields to field deletion", () => {
+    const node = createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)");
+    node.data.style["flex"] = 1;
+    const { mimic, getNode } = createMockMimic([node]);
+
+    applyStyleUpdate(
+      mimic as never,
+      targets,
+      { flex: null },
+      {},
+      mimic.document.transaction as never,
+    );
+
+    expect("flex" in (getNode("node-1")?.data.style ?? {})).toBe(false);
+  });
+
+  test("writes a null width clear into the selected state override as 'auto'", () => {
+    const { mimic, getNode, getStateOverrideValue } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+    ]);
+
+    applyStyleUpdate(
+      mimic as never,
+      targets,
+      { width: null },
+      { "node-1": "state-1" },
+      mimic.document.transaction as never,
+    );
+
+    expect(getNode("node-1")?.data.style["width"]).toBe(100);
+    expect(getStateOverrideValue("node-1", "width")).toBe("auto");
+  });
+
+  const gradient = {
+    kind: "linear" as const,
+    startX: 0,
+    startY: 0,
+    endX: 1,
+    endY: 1,
+    stops: [
+      { color: "rgba(255, 0, 0, 1)", position: 0 },
+      { color: "rgba(0, 0, 255, 1)", position: 1 },
+    ],
+  };
+
+  test("writes a structured gradient value to the base style", () => {
+    const { mimic, getNode } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+    ]);
+
+    applyStyleUpdate(
+      mimic as never,
+      targets,
+      { backgroundType: "gradient", backgroundGradient: gradient },
+      {},
+      mimic.document.transaction as never,
+    );
+
+    expect(getNode("node-1")?.data.style["backgroundType"]).toBe("gradient");
+    expect(getNode("node-1")?.data.style["backgroundGradient"]).toEqual(gradient);
+  });
+
+  test("writes a structured gradient value to the selected state override", () => {
+    const { mimic, getNode, getStateOverrideValue } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+    ]);
+
+    applyStyleUpdate(
+      mimic as never,
+      targets,
+      { backgroundGradient: gradient },
+      { "node-1": "state-1" },
+      mimic.document.transaction as never,
+    );
+
+    expect(getNode("node-1")?.data.style["backgroundGradient"]).toBeUndefined();
+    expect(getStateOverrideValue("node-1", "backgroundGradient")).toEqual(gradient);
+  });
+
+  test("skips a structured write when the value is deeply unchanged", () => {
+    const node = createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)");
+    node.data.style["backgroundGradient"] = structuredClone(gradient);
+    const { mimic } = createMockMimic([node]);
+
+    const previous = applyStyleUpdate(
+      mimic as never,
+      targets,
+      { backgroundGradient: structuredClone(gradient) },
+      {},
+      mimic.document.transaction as never,
+    );
+
+    expect(previous.has("node-1")).toBe(false);
+  });
+
+  test("writes multi-select updates using each node's effective style target", () => {
+    const { mimic, getNode, getStateOverrideValue } = createMockMimic([
+      createMockNode("node-1", "rgba(255, 0, 0, 1)", "rgba(0, 0, 255, 1)"),
+      createMockNode("node-2", "rgba(255, 255, 0, 1)", "rgba(255, 0, 255, 1)"),
+    ]);
+    const multiTargets: StyleTarget[] = [
+      { nodeId: "node-1", nodeType: "view" },
+      { nodeId: "node-2", nodeType: "view" },
+    ];
+
+    const previous = applyStyleUpdate(
+      mimic as never,
+      multiTargets,
+      { backgroundColor: "rgba(0, 0, 255, 1)" },
+      { "node-1": "state-1", "node-2": "state-1" },
+      mimic.document.transaction as never,
+    );
+
+    expect(previous.has("node-1")).toBe(false);
+    expect(previous.has("node-2")).toBe(true);
+
+    expect(getStateOverrideValue("node-1", "backgroundColor")).toBe("rgba(0, 0, 255, 1)");
+    expect(getStateOverrideValue("node-2", "backgroundColor")).toBe("rgba(0, 0, 255, 1)");
+    expect(getNode("node-1")?.data.style["backgroundColor"]).toBe("rgba(255, 0, 0, 1)");
+    expect(getNode("node-2")?.data.style["backgroundColor"]).toBe("rgba(255, 255, 0, 1)");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.ts
new file mode 100644
index 000000000..1baf5efe7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/style-action-helpers.ts
@@ -0,0 +1,355 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { documentRootFromSnapshot } from "../../utils/document-root";
+import type { DesignerStoreState, StateOverrideSelection } from "../../designer-store-state";
+import { findStatefulNode, type DesignerDocumentRoot } from "../../utils/node-proxies";
+import {
+  getSelectedStateIdForNode,
+  getStateById,
+  isStateCapableNode,
+  mapStyleOverridesForSnapshot,
+  resolveEffectiveStyle,
+  stateStyleOverridesToRecord,
+  type StyleOverrideRecord,
+} from "../../utils/state-overrides";
+import { unwrapEntriesDeep } from "../../utils/replay";
+import { findNodeById } from "../../utils/tree";
+import type { StatefulEditableNodeType } from "../node-resolver";
+
+export interface StyleTarget {
+  nodeId: string;
+  nodeType: StatefulEditableNodeType;
+}
+
+export type StyleUpdateUndoTarget =
+  | {
+      kind: "base";
+      style: Record<string, unknown>;
+    }
+  | {
+      kind: "state";
+      stateId: string;
+      styleOverrides: StyleOverrideRecord;
+    };
+
+/**
+ * Bivariant structural views of the schema-typed proxies, so the generic
+ * string-keyed style writes shared by every style panel typecheck against
+ * all five stateful node types at once.
+ */
+interface StateOverridesProxy {
+  overrides: {
+    style: {
+      set(value: StyleOverrideRecord): void;
+      update(value: Record<string, unknown>): void;
+    };
+  };
+}
+
+interface StyleWritableNodeProxy {
+  update(value: { style?: Record<string, unknown> }): void;
+  data: {
+    states: {
+      findById(id: string): { value: StateOverridesProxy } | undefined;
+    };
+  };
+}
+
+type TransactionFn = (fn: (root: DesignerDocumentRoot) => void) => void;
+
+/**
+ * Structural equality for style values. Primitives compare with `===`;
+ * structured values (`backgroundGradient` / `backgroundImage`) compare by
+ * content so an unchanged object never produces a spurious CRDT write. The
+ * decoded snapshot wraps array elements as `{ id, pos, value }`, so this
+ * unwraps a `value` field when present to compare against the logical
+ * `{ color, position }` write shape.
+ */
+function styleValuesEqual(a: unknown, b: unknown): boolean {
+  if (a === b) return true;
+  if (a === null || b === null || a === undefined || b === undefined) return false;
+  if (typeof a !== "object" || typeof b !== "object") return false;
+
+  if (Array.isArray(a) || Array.isArray(b)) {
+    if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length) return false;
+    return a.every((item, index) => styleValuesEqual(item, b[index]));
+  }
+
+  const objectA = a as Record<string, unknown>;
+  const objectB = b as Record<string, unknown>;
+  // Unwrap the decoded array-element wrapper so a stored `{ id, pos, value }`
+  // compares equal to a logical `{ color, position }` written value.
+  const unwrappedA = "value" in objectA && !("value" in objectB) ? objectA.value : objectA;
+  const unwrappedB = "value" in objectB && !("value" in objectA) ? objectB.value : objectB;
+  if (unwrappedA !== objectA || unwrappedB !== objectB) {
+    return styleValuesEqual(unwrappedA, unwrappedB);
+  }
+
+  const keysA = Object.keys(objectA);
+  const keysB = Object.keys(objectB);
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every((key) => styleValuesEqual(objectA[key], objectB[key]));
+}
+
+function styleWritableNode(
+  root: DesignerDocumentRoot,
+  target: StyleTarget,
+): StyleWritableNodeProxy | undefined {
+  return findStatefulNode(root, target.nodeId, target.nodeType);
+}
+
+/**
+ * A plain (JSON-shaped) object or array — used for structured style values like
+ * `backgroundGradient` / `backgroundImage`. Class instances and other exotic
+ * objects are rejected so only serializable style payloads reach the CRDT.
+ */
+function isPlainStructuredValue(value: unknown): boolean {
+  if (Array.isArray(value)) {
+    return true;
+  }
+  if (value === null || typeof value !== "object") {
+    return false;
+  }
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+
+function isWritableStyleOverrideValue(value: unknown): boolean {
+  return (
+    value === undefined ||
+    typeof value === "boolean" ||
+    typeof value === "number" ||
+    typeof value === "string" ||
+    isPlainStructuredValue(value)
+  );
+}
+
+/**
+ * Deep-clone a plain JSON value before writing it into the CRDT so the write
+ * never shares references with the store snapshot (which would let later
+ * mutations leak, and lets the schema materialize its own nested structs).
+ */
+function cloneStructuredValue<T>(value: T): T {
+  if (value === undefined || value === null || typeof value !== "object") {
+    return value;
+  }
+  return structuredClone(value);
+}
+
+function setStateStyleOverride(
+  stateProxy: StateOverridesProxy,
+  key: string,
+  value: unknown,
+): void {
+  stateProxy.overrides.style.update({
+    [key]: cloneStructuredValue(value),
+  });
+}
+
+/**
+ * Normalizes a DECODED style record for a whole-object proxy write
+ * (`.update({ style })` / `overrides.style.set`).
+ *
+ * Struct writes re-encode every field present, and they expect LOGICAL input.
+ * A decoded snapshot carries array elements (e.g. `backgroundGradient.stops`)
+ * in the CRDT entry wrapper (`{ id, pos, value: { color, position } }`);
+ * feeding that wrapper straight back re-encodes each entry as if it were a
+ * logical element, so its real fields read `undefined` and collapse to schema
+ * defaults (every stop becomes the default color at position 0). Every write
+ * and undo restore that replays a decoded snapshot must run through this.
+ */
+export function normalizeStyleForWrite(style: Record<string, unknown>): Record<string, unknown> {
+  return unwrapEntriesDeep(style) as Record<string, unknown>;
+}
+
+/**
+ * Saves each node's current style target (base style or state override), then applies style updates.
+ * Returns previous target values for undo.
+ */
+export function applyStyleUpdate<TStyle extends object>(
+  mimic: DesignerStoreState["mimic"],
+  nodes: StyleTarget[],
+  style: Partial<TStyle>,
+  stateOverrideSelection: StateOverrideSelection,
+  transaction: TransactionFn,
+): Map<string, StyleUpdateUndoTarget> {
+  const previousStyles = new Map<string, StyleUpdateUndoTarget>();
+  const incoming: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(style)) {
+    // The schema has no null values — a null incoming value is the legacy
+    // "clear this key" input. For width/height that meant hug contents, which
+    // the schema spells "auto"; deleting those fields instead would
+    // re-materialize their schema default (100). Every other field maps to
+    // field deletion (undefined).
+    if (value === null) {
+      incoming[key] = key === "width" || key === "height" ? "auto" : undefined;
+    } else {
+      incoming[key] = value;
+    }
+  }
+  if (Object.keys(incoming).length === 0) return previousStyles;
+  const root: SnapshotNode = documentRootFromSnapshot(mimic.snapshot);
+  const changedPropsByNode = new Map<string, Record<string, unknown>>();
+  const baseStyles = new Map<string, Record<string, unknown>>();
+
+  for (const target of nodes) {
+    const snapshotNode = findNodeById<SnapshotNode>(root, target.nodeId);
+    if (!snapshotNode || !isStateCapableNode(snapshotNode)) {
+      continue;
+    }
+
+    const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, target.nodeId);
+    const selectedState = getStateById(snapshotNode, selectedStateId);
+    const selectedStateOverrideKeys = selectedState
+      ? new Set<string>(Object.keys(stateStyleOverridesToRecord(selectedState)))
+      : new Set<string>();
+    const effectiveStyle = resolveEffectiveStyle(snapshotNode, selectedStateId);
+    const baseStyle: Record<string, unknown> = { ...snapshotNode.data.style };
+
+    const changedProps: Record<string, unknown> = {};
+    for (const key of Object.keys(incoming)) {
+      const incomingValue = incoming[key];
+      const shouldClearExistingOverride =
+        !!selectedStateId &&
+        !!selectedState &&
+        selectedStateOverrideKeys.has(key) &&
+        styleValuesEqual(incomingValue, baseStyle[key]);
+      if (!styleValuesEqual(incomingValue, effectiveStyle[key]) || shouldClearExistingOverride) {
+        changedProps[key] = incoming[key];
+      }
+    }
+
+    if (Object.keys(changedProps).length === 0) {
+      continue;
+    }
+
+    changedPropsByNode.set(target.nodeId, changedProps);
+
+    if (selectedState && selectedStateId) {
+      baseStyles.set(target.nodeId, baseStyle);
+      previousStyles.set(target.nodeId, {
+        kind: "state",
+        stateId: selectedStateId,
+        styleOverrides: mapStyleOverridesForSnapshot(stateStyleOverridesToRecord(selectedState)),
+      });
+      continue;
+    }
+
+    previousStyles.set(target.nodeId, {
+      kind: "base",
+      style: { ...snapshotNode.data.style },
+    });
+  }
+
+  if (changedPropsByNode.size === 0) return previousStyles;
+
+  transaction((transactionRoot) => {
+    for (const target of nodes) {
+      const changedProps = changedPropsByNode.get(target.nodeId);
+      if (!changedProps) continue;
+      const prev = previousStyles.get(target.nodeId);
+      if (!prev) continue;
+
+      const proxy = styleWritableNode(transactionRoot, target);
+      if (!proxy) continue;
+
+      if (prev.kind === "base") {
+        proxy.update({ style: { ...normalizeStyleForWrite(prev.style), ...changedProps } });
+        continue;
+      }
+
+      const stateProxy = proxy.data.states.findById(prev.stateId)?.value;
+      if (!stateProxy) continue;
+
+      const baseStyle = baseStyles.get(target.nodeId);
+      if (!baseStyle) continue;
+
+      // Struct `update` cannot introduce a nested-struct field on the partial
+      // override (it recurses into the absent field and dies on missing_field),
+      // so writes touching structured values go through a whole-record `set`
+      // built by merging the current overrides; scalar-only writes keep the
+      // narrower per-key `update` path.
+      const currentOverrides = normalizeStyleForWrite(prev.styleOverrides);
+      const writableProps = Object.entries(changedProps).filter(([, value]) =>
+        isWritableStyleOverrideValue(value),
+      );
+      const needsWholeRecordSet = writableProps.some(
+        ([key, value]) =>
+          isPlainStructuredValue(value) || isPlainStructuredValue(currentOverrides[key]),
+      );
+      const nextOverrides: StyleOverrideRecord = { ...currentOverrides };
+
+      for (const [key, value] of writableProps) {
+        const clearsOverride =
+          value === undefined
+            ? baseStyle[key] === undefined
+            : styleValuesEqual(value, baseStyle[key]);
+
+        if (clearsOverride) {
+          delete nextOverrides[key];
+          if (!needsWholeRecordSet) {
+            setStateStyleOverride(stateProxy, key, undefined);
+          }
+          continue;
+        }
+
+        // A deletion whose base value still exists leaves the override alone
+        // (matches the pre-structured behavior).
+        if (value === undefined) {
+          continue;
+        }
+
+        nextOverrides[key] = cloneStructuredValue(value);
+        if (!needsWholeRecordSet) {
+          setStateStyleOverride(stateProxy, key, value);
+        }
+      }
+
+      if (needsWholeRecordSet) {
+        stateProxy.overrides.style.set(nextOverrides);
+      }
+    }
+  });
+
+  return previousStyles;
+}
+
+/**
+ * Restores previous style targets in a transaction (undo).
+ */
+export function undoStyleUpdate(
+  _mimic: DesignerStoreState["mimic"],
+  nodes: StyleTarget[],
+  previousStyles: Map<string, StyleUpdateUndoTarget>,
+  transaction: TransactionFn,
+): void {
+  if (previousStyles.size === 0) return;
+  transaction((root) => {
+    for (const target of nodes) {
+      const prev = previousStyles.get(target.nodeId);
+      if (!prev) continue;
+      const proxy = styleWritableNode(root, target);
+      if (!proxy) continue;
+
+      if (prev.kind === "base") {
+        // Optional style fields snapshot as ABSENT when unset; delete them
+        // explicitly so values the undone action introduced do not survive.
+        proxy.update({
+          style: {
+            flex: undefined,
+            maxHeight: undefined,
+            maxWidth: undefined,
+            minHeight: undefined,
+            minWidth: undefined,
+            ...normalizeStyleForWrite(prev.style),
+          },
+        });
+        continue;
+      }
+
+      const stateProxy = proxy.data.states.findById(prev.stateId)?.value;
+      if (!stateProxy) continue;
+      stateProxy.overrides.style.set(normalizeStyleForWrite(prev.styleOverrides));
+    }
+  });
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/text-fill-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/text-fill-style-actions.ts
new file mode 100644
index 000000000..a0a18213d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/text-fill-style-actions.ts
@@ -0,0 +1,29 @@
+import { commander } from "../../designer-commander";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+interface TextFillStyle {
+  color: string;
+}
+
+export const updateTextFillStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<TextFillStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => ({
+    previousStyles: applyStyleUpdate<TextFillStyle>(
+      ctx.getState().mimic,
+      params.nodes,
+      params.style,
+      ctx.getState().stateOverrideSelection,
+      ctx.transaction,
+    ),
+  }),
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/typography-style-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/typography-style-actions.ts
new file mode 100644
index 000000000..9384663c9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/typography-style-actions.ts
@@ -0,0 +1,36 @@
+import type { FontWeight, TextAlign } from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import type { StyleTarget } from "./style-action-helpers";
+import {
+  applyStyleUpdate,
+  type StyleUpdateUndoTarget,
+  undoStyleUpdate,
+} from "./style-action-helpers";
+
+interface TypographyStyle {
+  fontSize: number;
+  fontWeight: FontWeight;
+  textAlign: TextAlign;
+  lineHeight: number;
+  letterSpacing: number;
+  color: string;
+}
+
+export const updateTypographyStyle = commander.undoableAction<
+  { nodes: StyleTarget[]; style: Partial<TypographyStyle> },
+  { previousStyles: Map<string, StyleUpdateUndoTarget> }
+>(
+  (ctx, params) => ({
+    previousStyles: applyStyleUpdate<TypographyStyle>(
+      ctx.getState().mimic,
+      params.nodes,
+      params.style,
+      ctx.getState().stateOverrideSelection,
+      ctx.transaction,
+    ),
+  }),
+  (ctx, params, result) => {
+    undoStyleUpdate(ctx.getState().mimic, params.nodes, result.previousStyles, ctx.transaction);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.test.ts
new file mode 100644
index 000000000..880feb32c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.test.ts
@@ -0,0 +1,178 @@
+import { ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { findTypedNode } from "../../utils/node-proxies";
+import { addVariable, removeVariable, updateVariable } from "./variable-actions";
+
+function makeDesignerDoc() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  let flexId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    flexId = screen.children.insertLast({ type: "view" }).id;
+  });
+  return { doc, flexId };
+}
+
+function makeCtx(doc: OfflineDesignerDocument) {
+  let storeState: Record<string, unknown> = {
+    mimic: { document: doc, snapshot: doc.getSnapshot() },
+    stateOverrideSelection: {},
+  };
+  return {
+    dispatch: () => () => undefined,
+    getState: () => storeState,
+    setState: (partial: Record<string, unknown>) => {
+      storeState = { ...storeState, ...partial };
+    },
+    transaction: (fn: never) => doc.transaction(fn),
+  };
+}
+
+function rawVariables(doc: OfflineDesignerDocument, nodeId: string) {
+  const data = findTypedNode(doc.root, nodeId, ViewNode)?.get()?.data;
+  if (data === undefined) {
+    throw new Error("expected a flex node");
+  }
+  return data.localVariables;
+}
+
+describe("addVariable", () => {
+  test("adds one entry and undo removes it (entry-id addressed)", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const params = {
+      name: "selected",
+      nodeId: flexId,
+      nodeType: "view" as const,
+      type: "boolean" as const,
+    };
+
+    const result = addVariable.fn(ctx as never, params);
+
+    const entries = rawVariables(doc, flexId);
+    expect(entries).toHaveLength(1);
+    expect(result.variableId).toBe(entries[0]?.id);
+    expect(entries[0]?.value?.name).toBe("selected");
+    expect(entries[0]?.value?.value).toEqual({ key: "boolean", value: false });
+
+    addVariable.revert(ctx as never, params, result);
+    expect(rawVariables(doc, flexId)).toHaveLength(0);
+  });
+});
+
+describe("updateVariable", () => {
+  test("rename and value undo round trips restore the previous values", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addVariable.fn(ctx as never, {
+      name: "selected",
+      nodeId: flexId,
+      nodeType: "view" as const,
+      type: "boolean" as const,
+    });
+    const variableId = added.variableId;
+    if (variableId === null) throw new Error("expected a variable entry id");
+
+    const params = {
+      newName: "isSelected",
+      newValue: { key: "boolean", value: true },
+      nodeId: flexId,
+      nodeType: "view" as const,
+      variableId,
+    };
+    const result = updateVariable.fn(ctx as never, params);
+
+    expect(result.previousName).toBe("selected");
+    expect(result.previousValue).toEqual({ key: "boolean", value: false });
+    let entry = rawVariables(doc, flexId)[0];
+    expect(entry?.value?.name).toBe("isSelected");
+    expect(entry?.value?.value).toEqual({ key: "boolean", value: true });
+
+    updateVariable.revert(ctx as never, params, result);
+    entry = rawVariables(doc, flexId)[0];
+    expect(entry?.value?.name).toBe("selected");
+    expect(entry?.value?.value).toEqual({ key: "boolean", value: false });
+  });
+
+  test("unknown value payloads are dropped without throwing", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addVariable.fn(ctx as never, {
+      name: "selected",
+      nodeId: flexId,
+      nodeType: "view" as const,
+      type: "boolean" as const,
+    });
+    const variableId = added.variableId;
+    if (variableId === null) throw new Error("expected a variable entry id");
+
+    const result = updateVariable.fn(ctx as never, {
+      newValue: { key: "future-kind", value: { weird: true } },
+      nodeId: flexId,
+      nodeType: "view" as const,
+      variableId,
+    });
+
+    // the unknown variant was dropped: no write happened, nothing captured
+    expect(result).toEqual({ previousName: null, previousValue: null });
+    expect(rawVariables(doc, flexId)[0]?.value?.value).toEqual({ key: "boolean", value: false });
+  });
+
+  test("no-ops for unknown variable ids", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const result = updateVariable.fn(ctx as never, {
+      newName: "isSelected",
+      nodeId: flexId,
+      nodeType: "view" as const,
+      variableId: "missing",
+    });
+    expect(result).toEqual({ previousName: null, previousValue: null });
+  });
+});
+
+describe("removeVariable", () => {
+  test("removes the entry and undo restores its value byte-identical", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const added = addVariable.fn(ctx as never, {
+      name: "selected",
+      nodeId: flexId,
+      nodeType: "view" as const,
+      type: "boolean" as const,
+    });
+    const variableId = added.variableId;
+    if (variableId === null) throw new Error("expected a variable entry id");
+    const beforeValue = JSON.stringify(rawVariables(doc, flexId)[0]?.value);
+
+    const params = { nodeId: flexId, nodeType: "view" as const, variableId };
+    const result = removeVariable.fn(ctx as never, params);
+
+    expect(rawVariables(doc, flexId)).toHaveLength(0);
+    expect(JSON.stringify(result.removedVariable)).toBe(beforeValue);
+
+    removeVariable.revert(ctx as never, params, result);
+    const restored = rawVariables(doc, flexId);
+    expect(restored).toHaveLength(1);
+    expect(JSON.stringify(restored[0]?.value)).toBe(beforeValue);
+  });
+
+  test("returns null for unknown variable ids", () => {
+    const { doc, flexId } = makeDesignerDoc();
+    const ctx = makeCtx(doc);
+    const result = removeVariable.fn(ctx as never, {
+      nodeId: flexId,
+      nodeType: "view" as const,
+      variableId: "missing",
+    });
+    expect(result).toEqual({ removedVariable: null });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.ts
new file mode 100644
index 000000000..e064889e4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/features/variable-actions.ts
@@ -0,0 +1,191 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import {
+  PathNode,
+  ScreenNode,
+  ShapeNode,
+  TextNode,
+  ViewNode,
+  type Variable,
+  type VariableType,
+  type variableTypeSchema,
+} from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import {
+  findStatefulNode,
+  findTypedNode,
+  type DesignerDocumentRoot,
+} from "../../utils/node-proxies";
+import { replayableVariableValue } from "../../utils/replay";
+import type { VariableTypeKey } from "../core";
+import type { StatefulEditableNodeType } from "../node-resolver";
+
+/**
+ * Variable ids passed into these actions are array-ENTRY ids (the
+ * `{id, pos, value}` wrapper ids the snapshot exposes), not the elements'
+ * own `id` fields — the UI iterates entries, and entry handles are addressed
+ * via `findById(entryId)`.
+ */
+
+type VariableValueInput = NonNullable<Primitive.InferInput<typeof variableTypeSchema>>;
+
+/** Fresh variable value for a type key (the schema fills in the default). */
+function initialVariableValue(type: VariableTypeKey): VariableValueInput {
+  switch (type) {
+    case "string":
+      return { key: "string" };
+    case "number":
+      return { key: "number" };
+    case "boolean":
+      return { key: "boolean" };
+    case "product":
+      return { key: "product" };
+  }
+}
+
+/**
+ * Adds a local variable to a stateful node. Returns the created array-entry
+ * id (reported by `push`); undo removes that entry.
+ */
+export const addVariable = commander.undoableAction<
+  {
+    nodeId: string;
+    nodeType: StatefulEditableNodeType;
+    type: VariableTypeKey;
+    name: string;
+  },
+  { variableId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const variableId = mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      if (!proxy) return null;
+
+      const created = proxy.data.localVariables.push({
+        id: `var-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+        name: params.name,
+        value: initialVariableValue(params.type),
+      });
+      return created.id;
+    });
+
+    return { variableId };
+  },
+  (ctx, params, result) => {
+    const { variableId } = result;
+    if (variableId === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      if (!proxy) return;
+      proxy.data.localVariables.remove(variableId);
+    });
+  },
+);
+
+/**
+ * Removes a local variable (by array-entry id), capturing its snapshot for
+ * undo. Undo re-adds the variable under a fresh entry id.
+ */
+export const removeVariable = commander.undoableAction<
+  {
+    nodeId: string;
+    nodeType: StatefulEditableNodeType;
+    variableId: string;
+  },
+  { removedVariable: Variable | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const removedVariable = mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      if (!proxy) return null;
+      const entry = proxy.data.localVariables.findById(params.variableId);
+      const snapshot = entry?.get();
+      if (entry === undefined || snapshot === undefined) return null;
+      entry.remove();
+      return snapshot;
+    });
+
+    return { removedVariable: removedVariable ?? null };
+  },
+  (ctx, params, result) => {
+    const { removedVariable } = result;
+    if (removedVariable === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      if (!proxy) return;
+      proxy.data.localVariables.push(removedVariable);
+    });
+  },
+);
+
+/**
+ * Updates a local variable's name and/or value (by array-entry id) through
+ * entry-addressed writes. Raw values the schema rejects are dropped without
+ * throwing. Undo restores the previous values captured from the entry's
+ * snapshot.
+ */
+export const updateVariable = commander.undoableAction<
+  {
+    nodeId: string;
+    nodeType: StatefulEditableNodeType;
+    variableId: string;
+    newName?: string;
+    newValue?: unknown;
+  },
+  { previousName: string | null; previousValue: VariableType | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    return mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      const entry = proxy?.data.localVariables.findById(params.variableId);
+      const snapshot = entry?.get();
+      if (!proxy || entry === undefined || snapshot === undefined) {
+        return { previousName: null, previousValue: null };
+      }
+
+      if (params.newName !== undefined) {
+        entry.value.name.set(params.newName);
+      }
+      const newValue =
+        params.newValue !== undefined ? replayableVariableValue(params.newValue) : undefined;
+      if (newValue !== undefined) {
+        entry.value.value.set(newValue);
+      }
+
+      return {
+        previousName: params.newName !== undefined ? snapshot.name : null,
+        previousValue: newValue !== undefined ? snapshot.value : null,
+      };
+    });
+  },
+  (ctx, params, result) => {
+    const { previousName, previousValue } = result;
+    if (previousName === null && previousValue === null) {
+      return;
+    }
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      const proxy = findStatefulNode(root, params.nodeId, params.nodeType);
+      const entry = proxy?.data.localVariables.findById(params.variableId);
+      if (!proxy || entry === undefined) return;
+
+      if (previousName !== null) {
+        entry.value.name.set(previousName);
+      }
+      if (previousValue !== null) {
+        entry.value.value.set(previousValue);
+      }
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
new file mode 100644
index 000000000..28b7057fa
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
@@ -0,0 +1,249 @@
+/**
+ * Designer store commands.
+ *
+ * This module re-exports all commands for the paywall designer.
+ * Commands are defined using the zustand-commander pattern.
+ */
+
+// =============================================================================
+// Selection Commands
+// =============================================================================
+
+export { selectNode, unselectNode, clearSelection } from "./selection-actions";
+
+// =============================================================================
+// Drag Select Commands
+// =============================================================================
+
+export {
+  startDragSelect,
+  updateDragSelect,
+  endDragSelect,
+  cancelDragSelect,
+} from "./drag-select-actions";
+
+// =============================================================================
+// Resize Commands
+// =============================================================================
+
+export { startResize, updateResize, endResize, cancelResize } from "./resize-actions";
+
+// =============================================================================
+// Move Commands (canvas drag-to-move for absolutely positioned view nodes)
+// =============================================================================
+
+export { startMove, updateMove, endMove, cancelMove } from "./move-actions";
+
+// =============================================================================
+// Canvas Commands
+// =============================================================================
+
+export {
+  saveCanvasState,
+  updateBoundingBox,
+  updateBoundingBoxes,
+  nodeMouseEnter,
+  nodeMouseOver,
+  nodeMouseLeave,
+  nodeClicked,
+  nodeDoubleClicked,
+  textEditingStarted,
+  textEditingStopped,
+  clearHighlight,
+  setHighlightedNode,
+} from "./canvas-actions";
+
+// =============================================================================
+// Tool Commands
+// =============================================================================
+
+export { setActiveTool } from "./tools-actions";
+
+// =============================================================================
+// Mode Commands
+// =============================================================================
+
+export { setMode, setPreviewScale } from "./mode-actions";
+
+// =============================================================================
+// Panel Commands
+// =============================================================================
+
+export {
+  setTopPanelHeight,
+  setBottomPanelHeight,
+  setLeftPanelWidth,
+  setRightPanelWidth,
+} from "./panel-actions";
+export { setStateOverrideSelection } from "./state-override-selection-actions";
+export { setActiveLocale } from "./active-locale-actions";
+export { setComponentPreviewStateSelection } from "./component-preview-state-selection-actions";
+export {
+  mergeComponentCatalogVersions,
+  setComponentCatalogComponents,
+} from "./component-catalog-actions";
+
+// =============================================================================
+// Debug Commands
+// =============================================================================
+
+export { setShowGrid, toggleShowGrid } from "./debug-actions";
+
+// =============================================================================
+// AI Panel Commands
+// =============================================================================
+
+export { setAiPanelWidth, toggleAiPanel } from "./ai-panel-actions";
+
+// =============================================================================
+// Awareness Commands
+// =============================================================================
+
+export { updateCursor, updateUser } from "./awareness-actions";
+
+// =============================================================================
+// Layer Commands
+// =============================================================================
+
+export { moveNode, moveNodeBefore, moveNodeAfter } from "./layer-actions";
+
+// =============================================================================
+// Node Commands (CRUD)
+// =============================================================================
+
+export { deleteNodes, copyNodes, cutNodes, pasteNodes } from "./node-actions";
+export { applyDocumentEdits, type ApplyDocumentEditsResult } from "./document-edit-actions";
+
+// =============================================================================
+// View Node Commands
+// =============================================================================
+
+export { createViewNode, updateViewNode } from "./nodes/view-node-actions";
+
+// =============================================================================
+// ScrollView Node Commands
+// =============================================================================
+
+export { createScrollViewNode, updateScrollViewNode } from "./nodes/scrollview-node-actions";
+
+// =============================================================================
+// Screen Node Commands
+// =============================================================================
+
+export { createScreenNode, updateScreenNode } from "./nodes/screen-node-actions";
+
+// =============================================================================
+// Text Node Commands
+// =============================================================================
+
+export { createTextNode, updateTextNode } from "./nodes/text-node-actions";
+
+// =============================================================================
+// Shape Node Commands
+// =============================================================================
+
+export { createShapeFromSvg, createShapeNode, updateShapeNode } from "./nodes/shape-node-actions";
+
+// =============================================================================
+// Path Node Commands
+// =============================================================================
+
+export { createPathNode, updatePathNode } from "./nodes/path-node-actions";
+
+// =============================================================================
+// Component Node Commands
+// =============================================================================
+
+export {
+  insertBuiltinComponentNode,
+  insertComponentNode,
+  insertLocalComponentNode,
+  repairLocalComponentReference,
+  updateComponentNode,
+} from "./nodes/component-node-actions";
+
+export {
+  applyComponentVersionUpdate,
+  removeComponentActionBinding,
+  removeComponentProp,
+  removeComponentPropForNodes,
+  setComponentActionBinding,
+  updateComponentPropBinding,
+  updateComponentPropBindingForNodes,
+} from "./features/component-prop-actions";
+
+// =============================================================================
+// Code Component Commands (paywall-scoped, source in the mimic doc)
+// =============================================================================
+
+export {
+  createCodeComponent,
+  deleteCodeComponent,
+  renameComponentFile,
+  saveCodeComponentSource,
+} from "./code-component-actions";
+
+export {
+  closeTab,
+  openTab,
+  pruneCodeComponentsCompiled,
+  setCodeComponentCompiled,
+  setCodeComponentDirty,
+  setCodeEditorPreviewState,
+} from "./code-component-editor-actions";
+
+// =============================================================================
+// Feature Actions (type-safe, node-type-agnostic)
+// =============================================================================
+
+export { addVariable, removeVariable, updateVariable } from "./features/variable-actions";
+
+export { addNodeState, removeNodeState, updateNodeState } from "./features/state-actions";
+
+export {
+  addLocale,
+  clearLocale,
+  copyLocaleFrom,
+  removeLocale,
+  setDefaultLocale,
+  updateComponentPropLocalizedValue,
+  updateNodeLocalizedImage,
+  updateNodeTranslation,
+} from "./features/locale-actions";
+
+export {
+  addInteraction,
+  removeInteraction,
+  updateInteraction,
+  updateInteractionActionOverride,
+} from "./features/interaction-actions";
+
+export { updateFillStyle } from "./features/fill-style-actions";
+export { updateTextFillStyle } from "./features/text-fill-style-actions";
+export { updateTypographyStyle } from "./features/typography-style-actions";
+export { updateBorderStyle } from "./features/border-style-actions";
+export { updateBorderRadiusStyle } from "./features/border-radius-style-actions";
+export { updateLayoutStyle, applyPerNodeLayoutStyle } from "./features/layout-style-actions";
+export type { PerNodeLayoutStyle } from "./features/layout-style-actions";
+export { updatePathFillStyle } from "./features/path-fill-style-actions";
+export { updatePathStrokeStyle } from "./features/path-stroke-style-actions";
+
+// =============================================================================
+// Node Resolver
+// =============================================================================
+
+export {
+  isEditableNodeType,
+  isStatefulNodeType,
+  getNodePrimitive,
+  getStatefulNodePrimitive,
+  NODE_PRIMITIVES,
+  type EditableNodeType,
+  type StatefulEditableNodeType,
+} from "./node-resolver";
+
+// =============================================================================
+// Core Utilities
+// =============================================================================
+
+export { variableTypeKeySchema, type VariableTypeKey } from "./core";
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/layer-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/layer-actions.ts
new file mode 100644
index 000000000..e7e05a629
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/layer-actions.ts
@@ -0,0 +1,234 @@
+/**
+ * Layer commands using zustand-commander.
+ *
+ * These commands manage node positioning in the layer tree.
+ * Uses undoable actions for undo/redo support.
+ */
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../designer-commander";
+import { selectDocumentRoot } from "../utils/document-root";
+import type { DesignerDocument } from "../designer-store-state";
+import { findNodeById, findParentNode } from "../utils/tree";
+
+// =============================================================================
+// Helper Types
+// =============================================================================
+
+interface NodeInfo {
+  id: string;
+  type: string;
+  parentId: string | null;
+  index: number;
+}
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Find a node in the snapshot tree and get its parent info.
+ */
+function findNodeInfo(root: SnapshotNode, nodeId: string): NodeInfo | null {
+  const node = findNodeById<SnapshotNode>(root, nodeId);
+  if (!node) {
+    return null;
+  }
+  const parent = findParentNode<SnapshotNode>(root, nodeId);
+  return {
+    id: nodeId,
+    index: parent ? parent.children.findIndex((child) => child.id === nodeId) : 0,
+    parentId: parent?.id ?? null,
+    type: node.type,
+  };
+}
+
+/**
+ * Moves a node under a new parent at the given sibling index through the
+ * tree proxy API.
+ */
+function moveNodeTo(
+  document: DesignerDocument,
+  nodeId: string,
+  newParentId: string,
+  toIndex: number,
+): void {
+  document.transaction((root) => {
+    const node = root.findByIdAcrossTree(nodeId);
+    const parent = root.findByIdAcrossTree(newParentId);
+    if (node === undefined || parent === undefined) {
+      return;
+    }
+    node.moveTo(parent.children, toIndex);
+  });
+}
+
+/**
+ * Computes the moveTo target (parent + index) for placing `nodeId` next to
+ * `siblingId`. Indexes are relative to the sibling list with the moving node
+ * excluded, matching `moveTo`'s insertion semantics.
+ */
+function siblingMoveTarget(
+  root: SnapshotNode,
+  nodeId: string,
+  siblingId: string,
+  placement: "before" | "after",
+): { parentId: string; index: number } | null {
+  const parent = findParentNode<SnapshotNode>(root, siblingId);
+  if (!parent) {
+    return null;
+  }
+  const siblings = parent.children.filter((child) => child.id !== nodeId);
+  const siblingIndex = siblings.findIndex((child) => child.id === siblingId);
+  if (siblingIndex === -1) {
+    return null;
+  }
+  return {
+    index: placement === "before" ? siblingIndex : siblingIndex + 1,
+    parentId: parent.id,
+  };
+}
+
+// =============================================================================
+// Layer Commands
+// =============================================================================
+
+/**
+ * Move a node to a new parent and/or position within siblings.
+ * Undoable: moves the node back to its original position on undo.
+ */
+export const moveNode = commander.undoableAction<
+  {
+    nodeId: string;
+    newParentId: string;
+    toIndex: number;
+  },
+  { originalParentId: string | null; originalIndex: number }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    const root = selectDocumentRoot(state);
+
+    // Find original position for undo
+    const originalInfo = findNodeInfo(root, params.nodeId);
+    if (!originalInfo) {
+      return { originalIndex: 0, originalParentId: null };
+    }
+
+    // Don't move root nodes
+    if (originalInfo.type === "root") {
+      return { originalIndex: 0, originalParentId: null };
+    }
+
+    moveNodeTo(mimic.document, params.nodeId, params.newParentId, params.toIndex);
+
+    return {
+      originalIndex: originalInfo.index,
+      originalParentId: originalInfo.parentId,
+    };
+  },
+  (ctx, params, result) => {
+    const { originalParentId } = result;
+    if (originalParentId === null) {
+      return;
+    }
+
+    const { mimic } = ctx.getState();
+    moveNodeTo(mimic.document, params.nodeId, originalParentId, result.originalIndex);
+  },
+);
+
+/**
+ * Move a node before a sibling.
+ * Undoable: moves the node back to its original position on undo.
+ */
+export const moveNodeBefore = commander.undoableAction<
+  {
+    nodeId: string;
+    siblingId: string;
+  },
+  { originalParentId: string | null; originalIndex: number }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    const root = selectDocumentRoot(state);
+
+    // Find original position for undo
+    const originalInfo = findNodeInfo(root, params.nodeId);
+    if (!originalInfo || originalInfo.type === "root") {
+      return { originalIndex: 0, originalParentId: null };
+    }
+
+    const target = siblingMoveTarget(root, params.nodeId, params.siblingId, "before");
+    if (!target) {
+      return { originalIndex: 0, originalParentId: null };
+    }
+
+    moveNodeTo(mimic.document, params.nodeId, target.parentId, target.index);
+
+    return {
+      originalIndex: originalInfo.index,
+      originalParentId: originalInfo.parentId,
+    };
+  },
+  (ctx, params, result) => {
+    const { originalParentId } = result;
+    if (originalParentId === null) {
+      return;
+    }
+
+    const { mimic } = ctx.getState();
+    moveNodeTo(mimic.document, params.nodeId, originalParentId, result.originalIndex);
+  },
+);
+
+/**
+ * Move a node after a sibling.
+ * Undoable: moves the node back to its original position on undo.
+ */
+export const moveNodeAfter = commander.undoableAction<
+  {
+    nodeId: string;
+    siblingId: string;
+  },
+  { originalParentId: string | null; originalIndex: number }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    const root = selectDocumentRoot(state);
+
+    // Find original position for undo
+    const originalInfo = findNodeInfo(root, params.nodeId);
+    if (!originalInfo || originalInfo.type === "root") {
+      return { originalIndex: 0, originalParentId: null };
+    }
+
+    const target = siblingMoveTarget(root, params.nodeId, params.siblingId, "after");
+    if (!target) {
+      return { originalIndex: 0, originalParentId: null };
+    }
+
+    moveNodeTo(mimic.document, params.nodeId, target.parentId, target.index);
+
+    return {
+      originalIndex: originalInfo.index,
+      originalParentId: originalInfo.parentId,
+    };
+  },
+  (ctx, params, result) => {
+    const { originalParentId } = result;
+    if (originalParentId === null) {
+      return;
+    }
+
+    const { mimic } = ctx.getState();
+    moveNodeTo(mimic.document, params.nodeId, originalParentId, result.originalIndex);
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/mode-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/mode-actions.ts
new file mode 100644
index 000000000..ae85131b3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/mode-actions.ts
@@ -0,0 +1,39 @@
+/**
+ * Mode commands using zustand-commander.
+ *
+ * These commands manage the designer mode (design vs preview).
+ */
+
+import { commander } from "../designer-commander";
+import type { DesignerMode } from "../designer-store-state";
+
+// =============================================================================
+// Mode Commands
+// =============================================================================
+
+/**
+ * Set the designer mode (design or preview).
+ *
+ * Switching to preview resets the preview zoom to 100%. The preview no longer
+ * captures a document snapshot here — `PreviewCanvas` derives its snapshot
+ * reactively from the live render root, so it always reflects the current
+ * document (see `preview-canvas.tsx`).
+ */
+export const setMode = commander.action<{ mode: DesignerMode }>((ctx, params) => {
+  ctx.setState({
+    mode: params.mode,
+    previewScale: 1,
+  });
+});
+
+/**
+ * Set the preview zoom scale.
+ * Clamped between 0.5 (50%) and 2.0 (200%).
+ */
+export const setPreviewScale = commander.action<{ scale: number }>((ctx, params) => {
+  // Clamp between 0.5 (50%) and 2.0 (200%)
+  const clampedScale = Math.min(2, Math.max(0.5, params.scale));
+  ctx.setState({
+    previewScale: clampedScale,
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.test.ts
new file mode 100644
index 000000000..7dd01e5a1
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.test.ts
@@ -0,0 +1,515 @@
+import { TextNode, ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../testing/offline-document";
+import { findTypedNode } from "../utils/node-proxies";
+import { endMove, startMove, updateMove } from "./move-actions";
+
+const INITIAL_MOVE_STATE = {
+  isActive: false,
+  nodes: {},
+  startScreenPoint: null,
+};
+
+interface MakeCtxOptions {
+  /** Canvas-space bounding boxes keyed by node id (for offset fallback). */
+  boundingBoxes?: Record<string, { x: number; y: number; width: number; height: number }>;
+  /** Zoom scale; a value >1 exercises screen→canvas delta division. */
+  scale?: number;
+  /** Node ids reported as selected in presence. */
+  selectedNodeIds?: string[];
+  /** Per-node selected state-override id (drives override-aware writes). */
+  stateOverrideSelection?: Record<string, string>;
+}
+
+/**
+ * Builds a minimal command context over an offline document, faithful enough
+ * for the move commands: `dispatch` re-enters the given command's `fn` with the
+ * same ctx (so `updateMove` drives the real `updateLayoutStyle`), `transaction`
+ * runs against the document, and `getState` exposes the live mimic snapshot.
+ */
+function makeCtx(doc: OfflineDesignerDocument, options: MakeCtxOptions) {
+  const selectedNodeIds = options.selectedNodeIds ?? [];
+  let storeState: Record<string, unknown> = {
+    canvas: {
+      boundingBoxes: options.boundingBoxes ?? {},
+      scale: options.scale ?? 1,
+      x: 0,
+      y: 0,
+    },
+    highlightedNodeId: null,
+    move: INITIAL_MOVE_STATE,
+    stateOverrideSelection: options.stateOverrideSelection ?? {},
+  };
+
+  const ctx = {
+    dispatch:
+      <TParams, TReturn>(command: { fn: (c: unknown, p: TParams) => TReturn }) =>
+      (params: TParams): TReturn =>
+        command.fn(ctx, params),
+    getState: () => ({
+      ...storeState,
+      mimic: {
+        document: doc,
+        presence: {
+          self: {
+            selectedNodeIds: selectedNodeIds.map((value, index) => ({
+              id: `entry-${index}`,
+              pos: `a${index}`,
+              value,
+            })),
+            user: { color: "#fff", name: "Tester" },
+          },
+        },
+        snapshot: doc.getSnapshot(),
+      },
+    }),
+    setState: (partial: Record<string, unknown>) => {
+      storeState = { ...storeState, ...partial };
+    },
+    transaction: (fn: never) => doc.transaction(fn),
+  };
+
+  return {
+    ctx,
+    getMoveState: () => storeState["move"] as typeof INITIAL_MOVE_STATE,
+  };
+}
+
+/** Inserts one absolutely positioned view child under the seeded screen. */
+function insertAbsoluteView(
+  doc: OfflineDesignerDocument,
+  style: Record<string, unknown> = {},
+): string {
+  const { screenId } = seededIds(doc);
+  let viewId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const view = screen.children.insertLast({ type: "view" });
+    viewId = view.id;
+    view.as(ViewNode).data.style.update({ position: "absolute", ...style });
+  });
+  return viewId;
+}
+
+function styleOf(doc: OfflineDesignerDocument, viewId: string) {
+  const data = findTypedNode(doc.root, viewId, ViewNode)?.get()?.data;
+  if (data === undefined) throw new Error("expected the view node");
+  return data.style;
+}
+
+/** Inserts one absolutely positioned text child under the seeded screen. */
+function insertAbsoluteText(
+  doc: OfflineDesignerDocument,
+  style: Record<string, unknown> = {},
+): string {
+  const { screenId } = seededIds(doc);
+  let textId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const text = screen.children.insertLast({ type: "text" });
+    textId = text.id;
+    text.as(TextNode).data.style.update({ position: "absolute", ...style });
+  });
+  return textId;
+}
+
+function textStyleOf(doc: OfflineDesignerDocument, textId: string) {
+  const data = findTypedNode(doc.root, textId, TextNode)?.get()?.data;
+  if (data === undefined) throw new Error("expected the text node");
+  return data.style;
+}
+
+/**
+ * Reads a text node's selected-state `overrides.style` record, or `{}` (mirrors
+ * `stateStyleOf` for view nodes; state entries are CRDT-wrapped).
+ */
+function textStateStyleOf(doc: OfflineDesignerDocument, textId: string, stateId: string) {
+  const states = findTypedNode(doc.root, textId, TextNode)?.get()?.data.states ?? [];
+  const entry = states.find((state) => state.id === stateId) as
+    | { value?: { overrides?: { style?: Record<string, unknown> } } }
+    | undefined;
+  return entry?.value?.overrides?.style ?? {};
+}
+
+/** A minimal always-true DNF condition for a seeded state entry. */
+const ALWAYS_TRUE_CONDITION = {
+  type: "or",
+  value: [
+    {
+      type: "and",
+      value: [
+        {
+          type: "equals",
+          value: {
+            left: { type: "literal", value: { key: "boolean", value: true } },
+            right: { type: "literal", value: { key: "boolean", value: true } },
+          },
+        },
+      ],
+    },
+  ],
+} as const;
+
+/**
+ * Pushes one state override (with `style` overrides) onto a stateful node
+ * (view or text); returns the entry id. Uses a structural cast so it drives
+ * either node type's `data.states`.
+ */
+function seedStateOverride(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  style: Record<string, unknown>,
+): string {
+  let entryId = "";
+  doc.transaction((root) => {
+    const node = root.findByIdAcrossTree(nodeId);
+    if (!node) throw new Error("expected the stateful node");
+    const created = (
+      node as unknown as {
+        data: { states: { push: (value: unknown) => { id: string } } };
+      }
+    ).data.states.push({
+      id: `state-value-${Math.random().toString(36).slice(2, 8)}`,
+      condition: ALWAYS_TRUE_CONDITION,
+      name: "Hovered",
+      overrides: { style },
+    });
+    entryId = created.id;
+  });
+  return entryId;
+}
+
+/**
+ * Reads a view's selected-state `overrides.style` record, or `{}`. Snapshot
+ * state entries are CRDT-wrapped as `{ id, pos, value }`, so the override style
+ * sits at `entry.value.overrides.style`.
+ */
+function stateStyleOf(doc: OfflineDesignerDocument, viewId: string, stateId: string) {
+  const states = findTypedNode(doc.root, viewId, ViewNode)?.get()?.data.states ?? [];
+  const entry = states.find((state) => state.id === stateId) as
+    | { value?: { overrides?: { style?: Record<string, unknown> } } }
+    | undefined;
+  return entry?.value?.overrides?.style ?? {};
+}
+
+describe("move-actions", () => {
+  test("startMove seeds base offsets from numeric style values", () => {
+    const doc = createOfflineDesignerDocument();
+    const viewId = insertAbsoluteView(doc, { left: 20, top: 30 });
+
+    const { ctx, getMoveState } = makeCtx(doc, { selectedNodeIds: [viewId] });
+
+    startMove.fn(ctx as never, { nodeIds: [viewId], screenPoint: { x: 100, y: 100 } });
+
+    const move = getMoveState();
+    expect(move.isActive).toBe(true);
+    expect(move.nodes[viewId]).toEqual({
+      baseLeft: 20,
+      baseTop: 30,
+      originalLeft: 20,
+      originalTop: 30,
+      stateId: null,
+      originalStateOverrideStyle: {},
+    });
+  });
+
+  test("startMove falls back to the parent bounding-box offset when left/top are auto", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    // Absolute view with no explicit left/top (both default to "auto").
+    const viewId = insertAbsoluteView(doc);
+
+    const { ctx, getMoveState } = makeCtx(doc, {
+      boundingBoxes: {
+        [screenId]: { x: 10, y: 10, width: 400, height: 400 },
+        [viewId]: { x: 55, y: 80, width: 100, height: 100 },
+      },
+      selectedNodeIds: [viewId],
+    });
+
+    startMove.fn(ctx as never, { nodeIds: [viewId], screenPoint: { x: 0, y: 0 } });
+
+    // Offset within parent: (55 - 10, 80 - 10) = (45, 70).
+    expect(getMoveState().nodes[viewId]).toEqual({
+      baseLeft: 45,
+      baseTop: 70,
+      originalLeft: "auto",
+      originalTop: "auto",
+      stateId: null,
+      originalStateOverrideStyle: {},
+    });
+  });
+
+  test("startMove ignores non-absolute view nodes", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    let viewId = "";
+    doc.transaction((root) => {
+      const screen = root.findByIdAcrossTree(screenId);
+      if (!screen) throw new Error("expected the seeded screen node");
+      // Relative (default) position — not draggable.
+      viewId = screen.children.insertLast({ type: "view" }).id;
+    });
+
+    const { ctx, getMoveState } = makeCtx(doc, { selectedNodeIds: [viewId] });
+
+    startMove.fn(ctx as never, { nodeIds: [viewId], screenPoint: { x: 0, y: 0 } });
+
+    expect(getMoveState().isActive).toBe(false);
+  });
+
+  test("updateMove applies the screen delta divided by scale as a live left/top write", () => {
+    const doc = createOfflineDesignerDocument();
+    const viewId = insertAbsoluteView(doc, { left: 0, top: 0 });
+
+    // scale 2 → a 100px screen delta is a 50 canvas-unit move.
+    const { ctx } = makeCtx(doc, { scale: 2, selectedNodeIds: [viewId] });
+
+    startMove.fn(ctx as never, { nodeIds: [viewId], screenPoint: { x: 0, y: 0 } });
+    updateMove.fn(ctx as never, { screenPoint: { x: 100, y: 60 } });
+
+    expect(styleOf(doc, viewId).left).toBe(50);
+    expect(styleOf(doc, viewId).top).toBe(30);
+  });
+
+  test("endMove commits final positions and revert restores the originals", () => {
+    const doc = createOfflineDesignerDocument();
+    const viewId = insertAbsoluteView(doc, { left: 10, top: 10 });
+
+    const { ctx, getMoveState } = makeCtx(doc, { selectedNodeIds: [viewId] });
+
+    startMove.fn(ctx as never, { nodeIds: [viewId], screenPoint: { x: 0, y: 0 } });
+    updateMove.fn(ctx as never, { screenPoint: { x: 40, y: 25 } });
+    expect(styleOf(doc, viewId).left).toBe(50);
+    expect(styleOf(doc, viewId).top).toBe(35);
+
+    const result = endMove.fn(ctx as never, { screenPoint: { x: 40, y: 25 } });
+    expect(getMoveState().isActive).toBe(false);
+    expect(result.finalOffsets[viewId]).toEqual({ left: 50, top: 35 });
+    expect(styleOf(doc, viewId).left).toBe(50);
+    expect(styleOf(doc, viewId).top).toBe(35);
+
+    endMove.revert(ctx as never, { screenPoint: { x: 40, y: 25 } }, result);
+    expect(styleOf(doc, viewId).left).toBe(10);
+    expect(styleOf(doc, viewId).top).toBe(10);
+  });
+
+  test("moves every selected absolute view node by the same delta", () => {
+    const doc = createOfflineDesignerDocument();
+    const first = insertAbsoluteView(doc, { left: 0, top: 0 });
+    const second = insertAbsoluteView(doc, { left: 100, top: 100 });
+
+    const { ctx } = makeCtx(doc, { selectedNodeIds: [first, second] });
+
+    startMove.fn(ctx as never, { nodeIds: [first, second], screenPoint: { x: 0, y: 0 } });
+    updateMove.fn(ctx as never, { screenPoint: { x: 15, y: 25 } });
+
+    expect(styleOf(doc, first).left).toBe(15);
+    expect(styleOf(doc, first).top).toBe(25);
+    expect(styleOf(doc, second).left).toBe(115);
+    expect(styleOf(doc, second).top).toBe(125);
+  });
+
+  test("dragging under a selected state override writes the override, not the base; undo restores the override", () => {
+    const doc = createOfflineDesignerDocument();
+    // Base has one left/top; the selected state override starts at a different one.
+    const viewId = insertAbsoluteView(doc, { left: 10, top: 10 });
+    const stateId = seedStateOverride(doc, viewId, { left: 40, top: 60 });
+
+    const { ctx } = makeCtx(doc, {
+      selectedNodeIds: [viewId],
+      stateOverrideSelection: { [viewId]: stateId },
+    });
+
+    startMove.fn(ctx as never, { nodeIds: [viewId], screenPoint: { x: 0, y: 0 } });
+    // Drag by (+5, +7): the override's effective base (40,60) shifts to (45,67).
+    updateMove.fn(ctx as never, { screenPoint: { x: 5, y: 7 } });
+
+    // The draft-time write lands in the override; base is untouched.
+    expect(stateStyleOf(doc, viewId, stateId)).toMatchObject({ left: 45, top: 67 });
+    expect(styleOf(doc, viewId).left).toBe(10);
+    expect(styleOf(doc, viewId).top).toBe(10);
+
+    const result = endMove.fn(ctx as never, { screenPoint: { x: 5, y: 7 } });
+    expect(result.finalOffsets[viewId]).toEqual({ left: 45, top: 67 });
+    expect(stateStyleOf(doc, viewId, stateId)).toMatchObject({ left: 45, top: 67 });
+    expect(styleOf(doc, viewId).left).toBe(10);
+    expect(styleOf(doc, viewId).top).toBe(10);
+
+    // Undo restores the override's original left/top and still leaves base alone.
+    endMove.revert(ctx as never, { screenPoint: { x: 5, y: 7 } }, result);
+    expect(stateStyleOf(doc, viewId, stateId)).toMatchObject({ left: 40, top: 60 });
+    expect(styleOf(doc, viewId).left).toBe(10);
+    expect(styleOf(doc, viewId).top).toBe(10);
+  });
+
+  test("undoing a drag under a state override preserves structured override values", () => {
+    const doc = createOfflineDesignerDocument();
+    const viewId = insertAbsoluteView(doc, { left: 10, top: 10 });
+    const stateId = seedStateOverride(doc, viewId, {
+      left: 40,
+      top: 60,
+      backgroundEnabled: true,
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+        stops: [
+          { color: "rgba(255, 0, 0, 1)", position: 0 },
+          { color: "rgba(0, 0, 255, 1)", position: 1 },
+        ],
+      },
+    });
+
+    const { ctx } = makeCtx(doc, {
+      selectedNodeIds: [viewId],
+      stateOverrideSelection: { [viewId]: stateId },
+    });
+
+    startMove.fn(ctx as never, { nodeIds: [viewId], screenPoint: { x: 0, y: 0 } });
+    updateMove.fn(ctx as never, { screenPoint: { x: 5, y: 7 } });
+    const result = endMove.fn(ctx as never, { screenPoint: { x: 5, y: 7 } });
+    endMove.revert(ctx as never, { screenPoint: { x: 5, y: 7 } }, result);
+
+    // The revert replays the captured decoded override record; without
+    // normalization the CRDT entry wrappers re-encode and every stop collapses
+    // to the schema default color at position 0.
+    const overrideStyle = stateStyleOf(doc, viewId, stateId);
+    expect(overrideStyle).toMatchObject({ left: 40, top: 60 });
+    const stops = (
+      overrideStyle["backgroundGradient"] as
+        | { stops: ReadonlyArray<{ value?: { color: string; position: number } }> }
+        | undefined
+    )?.stops.map((entry) => entry.value);
+    expect(stops).toEqual([
+      { color: "rgba(255, 0, 0, 1)", position: 0 },
+      { color: "rgba(0, 0, 255, 1)", position: 1 },
+    ]);
+  });
+
+  test("startMove seeds base offsets for an absolute text node from numeric style values", () => {
+    const doc = createOfflineDesignerDocument();
+    const textId = insertAbsoluteText(doc, { left: 20, top: 30 });
+
+    const { ctx, getMoveState } = makeCtx(doc, { selectedNodeIds: [textId] });
+
+    startMove.fn(ctx as never, { nodeIds: [textId], screenPoint: { x: 100, y: 100 } });
+
+    const move = getMoveState();
+    expect(move.isActive).toBe(true);
+    expect(move.nodes[textId]).toEqual({
+      baseLeft: 20,
+      baseTop: 30,
+      originalLeft: 20,
+      originalTop: 30,
+      stateId: null,
+      originalStateOverrideStyle: {},
+    });
+  });
+
+  test("startMove falls back to the parent bounding-box offset for an absolute text node with auto left/top", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const textId = insertAbsoluteText(doc);
+
+    const { ctx, getMoveState } = makeCtx(doc, {
+      boundingBoxes: {
+        [screenId]: { x: 10, y: 10, width: 400, height: 400 },
+        [textId]: { x: 55, y: 80, width: 100, height: 100 },
+      },
+      selectedNodeIds: [textId],
+    });
+
+    startMove.fn(ctx as never, { nodeIds: [textId], screenPoint: { x: 0, y: 0 } });
+
+    // Offset within parent: (55 - 10, 80 - 10) = (45, 70).
+    expect(getMoveState().nodes[textId]).toEqual({
+      baseLeft: 45,
+      baseTop: 70,
+      originalLeft: "auto",
+      originalTop: "auto",
+      stateId: null,
+      originalStateOverrideStyle: {},
+    });
+  });
+
+  test("dragging an absolute text node writes its left/top and reverts to the original", () => {
+    const doc = createOfflineDesignerDocument();
+    const textId = insertAbsoluteText(doc, { left: 10, top: 10 });
+
+    const { ctx, getMoveState } = makeCtx(doc, { selectedNodeIds: [textId] });
+
+    startMove.fn(ctx as never, { nodeIds: [textId], screenPoint: { x: 0, y: 0 } });
+    updateMove.fn(ctx as never, { screenPoint: { x: 40, y: 25 } });
+    expect(textStyleOf(doc, textId).left).toBe(50);
+    expect(textStyleOf(doc, textId).top).toBe(35);
+
+    const result = endMove.fn(ctx as never, { screenPoint: { x: 40, y: 25 } });
+    expect(getMoveState().isActive).toBe(false);
+    expect(result.finalOffsets[textId]).toEqual({ left: 50, top: 35 });
+    expect(textStyleOf(doc, textId).left).toBe(50);
+    expect(textStyleOf(doc, textId).top).toBe(35);
+
+    endMove.revert(ctx as never, { screenPoint: { x: 40, y: 25 } }, result);
+    expect(textStyleOf(doc, textId).left).toBe(10);
+    expect(textStyleOf(doc, textId).top).toBe(10);
+  });
+
+  test("moves a mixed selection of absolute view and text nodes by the same delta", () => {
+    const doc = createOfflineDesignerDocument();
+    const view = insertAbsoluteView(doc, { left: 0, top: 0 });
+    const text = insertAbsoluteText(doc, { left: 100, top: 100 });
+
+    const { ctx } = makeCtx(doc, { selectedNodeIds: [view, text] });
+
+    startMove.fn(ctx as never, { nodeIds: [view, text], screenPoint: { x: 0, y: 0 } });
+    updateMove.fn(ctx as never, { screenPoint: { x: 15, y: 25 } });
+
+    expect(styleOf(doc, view).left).toBe(15);
+    expect(styleOf(doc, view).top).toBe(25);
+    expect(textStyleOf(doc, text).left).toBe(115);
+    expect(textStyleOf(doc, text).top).toBe(125);
+  });
+
+  test("dragging a text node under a selected state override writes the override, not the base; undo restores the override", () => {
+    const doc = createOfflineDesignerDocument();
+    const textId = insertAbsoluteText(doc, { left: 10, top: 10 });
+    const stateId = seedStateOverride(doc, textId, { left: 40, top: 60 });
+
+    const { ctx } = makeCtx(doc, {
+      selectedNodeIds: [textId],
+      stateOverrideSelection: { [textId]: stateId },
+    });
+
+    startMove.fn(ctx as never, { nodeIds: [textId], screenPoint: { x: 0, y: 0 } });
+    // Drag by (+5, +7): the override's effective base (40,60) shifts to (45,67).
+    updateMove.fn(ctx as never, { screenPoint: { x: 5, y: 7 } });
+
+    // The draft-time write lands in the override; base is untouched.
+    expect(textStateStyleOf(doc, textId, stateId)).toMatchObject({ left: 45, top: 67 });
+    expect(textStyleOf(doc, textId).left).toBe(10);
+    expect(textStyleOf(doc, textId).top).toBe(10);
+
+    const result = endMove.fn(ctx as never, { screenPoint: { x: 5, y: 7 } });
+    expect(result.finalOffsets[textId]).toEqual({ left: 45, top: 67 });
+    expect(textStateStyleOf(doc, textId, stateId)).toMatchObject({ left: 45, top: 67 });
+    expect(textStyleOf(doc, textId).left).toBe(10);
+    expect(textStyleOf(doc, textId).top).toBe(10);
+
+    // Undo restores the override's original left/top and still leaves base alone.
+    endMove.revert(ctx as never, { screenPoint: { x: 5, y: 7 } }, result);
+    expect(textStateStyleOf(doc, textId, stateId)).toMatchObject({ left: 40, top: 60 });
+    expect(textStyleOf(doc, textId).left).toBe(10);
+    expect(textStyleOf(doc, textId).top).toBe(10);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.ts
new file mode 100644
index 000000000..ccd2a209b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/move-actions.ts
@@ -0,0 +1,384 @@
+/**
+ * Move (canvas drag-to-move) commands using zustand-commander.
+ *
+ * These manage dragging absolutely positioned view AND text nodes on the
+ * canvas, and mirror the resize command lifecycle:
+ *   - `startMove` captures the pressed nodes' base `left`/`top` (for delta
+ *     math) plus their original values (for undo).
+ *   - `updateMove` writes live `left`/`top` for every tracked node during the
+ *     drag. It runs while a mimic draft is active, so those writes stage in the
+ *     draft (live preview) and record no undo entries.
+ *   - `endMove` is undoable: the caller commits the draft FIRST (final
+ *     positions land in the committed document), then dispatches `endMove`,
+ *     which re-asserts the final positions draft-free so exactly one undo entry
+ *     — reverting to the captured originals — lands on the stack. This matches
+ *     `endResize`, which likewise commits then writes draft-free. The forward
+ *     write and the revert both target the layer captured at `startMove` (a
+ *     selected state's `overrides.style` when one is active, else the base
+ *     style), so a move under a state override never corrupts the base style.
+ *   - `cancelMove` resets transient state; the draft's `discard()` reverts the
+ *     staged writes.
+ */
+
+import type { StatefulEditableNodeType } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../designer-commander";
+import type { MoveState, Point } from "../designer-store-state";
+import type { StyleTarget } from "./features/style-action-helpers";
+import { normalizeStyleForWrite } from "./features/style-action-helpers";
+import { updateLayoutStyle } from "./features/layout-style-actions";
+import { selectDocumentRoot } from "../utils/document-root";
+import { getOffsetWithinParent } from "../utils/bounding-box";
+import { findStatefulNode, type DesignerDocumentRoot } from "../utils/node-proxies";
+import {
+  getSelectedStateIdForNode,
+  getStateById,
+  isStateCapableNode,
+  mapStyleOverridesForSnapshot,
+  resolveEffectiveStyle,
+  stateStyleOverridesToRecord,
+} from "../utils/state-overrides";
+import { findNodeById, findParentNode } from "../utils/tree";
+
+// =============================================================================
+// Helpers
+// =============================================================================
+
+/** A stored offset value: numeric, or `"auto"` when the field is unset. */
+type Offset = number | "auto";
+
+/** Reads a numeric style value, else `null` (e.g. `"auto"` or absent). */
+function numberOrNull(value: unknown): number | null {
+  return typeof value === "number" ? value : null;
+}
+
+/** Reads a style value as the stored offset shape (`"auto"` when not numeric). */
+function offsetFromStyleValue(value: unknown): Offset {
+  return typeof value === "number" ? value : "auto";
+}
+
+/**
+ * Bivariant structural view of a stateful node's per-state overrides proxy, so
+ * the generic string-keyed override writes typecheck against the schema-typed
+ * proxy (mirrors the equivalent seam in `resize-actions`).
+ */
+interface StateOverridesProxy {
+  overrides: {
+    style: {
+      set(value: Record<string, unknown>): void;
+      update(value: Record<string, unknown>): void;
+    };
+  };
+}
+
+/**
+ * The draggable node types (view + scrollView + text): all carry
+ * `position`/`left`/`top` and identical style/state data.
+ */
+type DraggableNodeType = Extract<StatefulEditableNodeType, "view" | "scrollView" | "text">;
+
+/**
+ * Bivariant structural view of a draggable node's `left`/`top` style proxy plus
+ * its per-state overrides accessor, so the generic offset writes typecheck
+ * against the view-, scrollView- and text-typed proxies at once.
+ */
+interface DraggableNodeProxy {
+  data: {
+    style: {
+      left: { get(): unknown; set(value: Offset): void };
+      top: { get(): unknown; set(value: Offset): void };
+    };
+    states: {
+      findById(id: string): { value: StateOverridesProxy } | undefined;
+    };
+  };
+}
+
+/** Whether a snapshot node is a draggable (view, scrollView or text) node. */
+function isDraggableNode(node: SnapshotNode | null | undefined): node is SnapshotNode & {
+  type: DraggableNodeType;
+} {
+  return node?.type === "view" || node?.type === "scrollView" || node?.type === "text";
+}
+
+/**
+ * Resolves a draggable node's typed proxy directly from a transaction root,
+ * inferring its type ("view" or "text") from the tree so callers inside a
+ * transaction need not carry it. Returns `undefined` for absent/non-draggable
+ * nodes. Generic over view + text via `findStatefulNode`.
+ */
+function resolveDraggableProxy(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+): DraggableNodeProxy | undefined {
+  const found = root.findByIdAcrossTree(nodeId);
+  if (
+    found === undefined ||
+    (found.type !== "view" && found.type !== "scrollView" && found.type !== "text")
+  ) {
+    return undefined;
+  }
+  return findStatefulNode(root, nodeId, found.type) as DraggableNodeProxy | undefined;
+}
+
+/**
+ * Seed the base `left`/`top` for a node about to be dragged: prefer the numeric
+ * style values; when either is `"auto"`/absent, fall back to the node's measured
+ * offset within its parent so the drag starts where the node sits on the canvas;
+ * otherwise `0`.
+ */
+function seedBaseOffset(
+  root: SnapshotNode,
+  nodeId: string,
+  effectiveStyle: Record<string, unknown>,
+  boundingBoxes: Record<string, { x: number; y: number; width: number; height: number }>,
+): { left: number; top: number } {
+  const styleLeft = numberOrNull(effectiveStyle["left"]);
+  const styleTop = numberOrNull(effectiveStyle["top"]);
+  if (styleLeft !== null && styleTop !== null) {
+    return { left: styleLeft, top: styleTop };
+  }
+
+  const parent = findParentNode<SnapshotNode>(root, nodeId);
+  const fallback = parent ? getOffsetWithinParent(nodeId, parent.id, boundingBoxes) : null;
+
+  return {
+    left: styleLeft ?? fallback?.left ?? 0,
+    top: styleTop ?? fallback?.top ?? 0,
+  };
+}
+
+/** Canvas delta of the pointer from the move's start, in canvas units. */
+function canvasDelta(
+  move: MoveState,
+  screenPoint: Point,
+  scale: number,
+): { x: number; y: number } {
+  if (!move.startScreenPoint) {
+    return { x: 0, y: 0 };
+  }
+  return {
+    x: (screenPoint.x - move.startScreenPoint.x) / scale,
+    y: (screenPoint.y - move.startScreenPoint.y) / scale,
+  };
+}
+
+// =============================================================================
+// Move Commands
+// =============================================================================
+
+/**
+ * Start a move operation for the given nodes.
+ * Only absolutely positioned view/text nodes are tracked; each records its base
+ * `left`/`top` (numeric style value, else the measured parent offset, else `0`)
+ * for delta math and its original style values for undo.
+ */
+export const startMove = commander.action<{
+  nodeIds: string[];
+  screenPoint: Point;
+}>((ctx, params) => {
+  const state = ctx.getState();
+  const { canvas } = state;
+  const root = selectDocumentRoot(state);
+
+  const nodes: MoveState["nodes"] = {};
+
+  for (const nodeId of params.nodeIds) {
+    const snapshotNode = findNodeById<SnapshotNode>(root, nodeId);
+    if (!isDraggableNode(snapshotNode)) {
+      continue;
+    }
+
+    const selectedStateId = getSelectedStateIdForNode(state.stateOverrideSelection, nodeId);
+    const effectiveStyle = resolveEffectiveStyle(snapshotNode, selectedStateId);
+    if (effectiveStyle["position"] !== "absolute") {
+      continue;
+    }
+
+    // Capture the drag's target layer: when a state override is selected, the
+    // drag writes into (and undo restores) that state's `overrides.style`;
+    // otherwise it writes the base style. Record the full override record so
+    // undo can restore the override layer faithfully.
+    const selectedState = isStateCapableNode(snapshotNode)
+      ? getStateById(snapshotNode, selectedStateId)
+      : null;
+    const usesStateLayer = !!(selectedStateId && selectedState);
+
+    const base = seedBaseOffset(root, nodeId, effectiveStyle, canvas.boundingBoxes);
+    nodes[nodeId] = {
+      baseLeft: base.left,
+      baseTop: base.top,
+      originalLeft: offsetFromStyleValue(effectiveStyle["left"]),
+      originalTop: offsetFromStyleValue(effectiveStyle["top"]),
+      stateId: usesStateLayer ? selectedStateId : null,
+      originalStateOverrideStyle: usesStateLayer
+        ? mapStyleOverridesForSnapshot(stateStyleOverridesToRecord(selectedState))
+        : {},
+    };
+  }
+
+  if (Object.keys(nodes).length === 0) {
+    return;
+  }
+
+  ctx.setState({
+    highlightedNodeId: null,
+    move: {
+      isActive: true,
+      startScreenPoint: params.screenPoint,
+      nodes,
+    },
+  });
+});
+
+/**
+ * Update a move during pointer drag.
+ * Converts the screen delta to a canvas delta (dividing by zoom scale) and
+ * writes each tracked node's rounded `left`/`top` via `updateLayoutStyle`. Runs
+ * while a draft is active, so writes stage in the draft (live preview, batched
+ * until commit, no undo entries).
+ */
+export const updateMove = commander.action<{ screenPoint: Point }>((ctx, params) => {
+  const state = ctx.getState();
+  const { canvas, move } = state;
+
+  if (!move.isActive || !move.startScreenPoint) {
+    return;
+  }
+
+  const root = selectDocumentRoot(state);
+  const delta = canvasDelta(move, params.screenPoint, canvas.scale);
+
+  for (const [nodeId, entry] of Object.entries(move.nodes)) {
+    // Re-resolve the node type each update so the layout write targets the
+    // correct schema layer ("view" vs "text"); a tracked node is always
+    // draggable (start-time gate), so a missing/relocated node is skipped.
+    const snapshotNode = findNodeById<SnapshotNode>(root, nodeId);
+    if (!isDraggableNode(snapshotNode)) {
+      continue;
+    }
+    const target: StyleTarget = { nodeId, nodeType: snapshotNode.type };
+    ctx.dispatch(updateLayoutStyle)({
+      nodes: [target],
+      style: {
+        left: Math.round(entry.baseLeft + delta.x),
+        top: Math.round(entry.baseTop + delta.y),
+      },
+    });
+  }
+});
+
+/** The per-node revert record `endMove` carries: the layer it wrote to. */
+type MoveUndoTarget =
+  | { kind: "base"; left: Offset; top: Offset }
+  | { kind: "state"; stateId: string; styleOverrides: Record<string, unknown> };
+
+/**
+ * End a move and commit exactly one undo entry.
+ *
+ * The caller commits the active draft BEFORE dispatching this, so the committed
+ * document already holds the dragged positions; this re-asserts the final
+ * `left`/`top` draft-free (mirroring how `endResize` re-writes its
+ * normalization) purely to record a single undoable step. Each node writes to
+ * the layer captured at `startMove` — a selected state's `overrides.style` when
+ * one is active, else the base style — so a move under a state override never
+ * corrupts the base style. The revert restores each node's captured original
+ * on that same layer (base `left`/`top`, or the whole override record).
+ */
+export const endMove = commander.undoableAction<
+  { screenPoint: Point },
+  {
+    finalOffsets: Record<string, { left: number; top: number }>;
+    originals: Record<string, MoveUndoTarget>;
+  }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { canvas, mimic, move } = state;
+
+    if (!move.isActive) {
+      ctx.setState({ move: { isActive: false, startScreenPoint: null, nodes: {} } });
+      return { finalOffsets: {}, originals: {} };
+    }
+
+    const delta = canvasDelta(move, params.screenPoint, canvas.scale);
+    const finalOffsets: Record<string, { left: number; top: number }> = {};
+    const originals: Record<string, MoveUndoTarget> = {};
+
+    for (const [nodeId, entry] of Object.entries(move.nodes)) {
+      finalOffsets[nodeId] = {
+        left: Math.round(entry.baseLeft + delta.x),
+        top: Math.round(entry.baseTop + delta.y),
+      };
+      originals[nodeId] =
+        entry.stateId !== null
+          ? { kind: "state", stateId: entry.stateId, styleOverrides: entry.originalStateOverrideStyle }
+          : { kind: "base", left: entry.originalLeft, top: entry.originalTop };
+    }
+
+    mimic.document.transaction((root) => {
+      for (const [nodeId, offset] of Object.entries(finalOffsets)) {
+        const original = originals[nodeId];
+        const proxy = resolveDraggableProxy(root, nodeId);
+        if (!proxy) {
+          continue;
+        }
+        if (original?.kind === "state") {
+          const stateProxy = proxy.data.states.findById(original.stateId)?.value;
+          if (!stateProxy) {
+            continue;
+          }
+          // Mirror the override layer's base-comparison (as `updateMove` /
+          // `endResize` do): a final offset equal to the base style clears the
+          // key rather than pinning a redundant override; otherwise upsert it.
+          const baseLeft = proxy.data.style.left.get();
+          const baseTop = proxy.data.style.top.get();
+          stateProxy.overrides.style.update({
+            left: offset.left === baseLeft ? undefined : offset.left,
+            top: offset.top === baseTop ? undefined : offset.top,
+          });
+          continue;
+        }
+        proxy.data.style.left.set(offset.left);
+        proxy.data.style.top.set(offset.top);
+      }
+    });
+
+    ctx.setState({ move: { isActive: false, startScreenPoint: null, nodes: {} } });
+
+    return { finalOffsets, originals };
+  },
+  (ctx, _params, result) => {
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      for (const [nodeId, original] of Object.entries(result.originals)) {
+        const proxy = resolveDraggableProxy(root, nodeId);
+        if (!proxy) {
+          continue;
+        }
+        if (original.kind === "state") {
+          const stateProxy = proxy.data.states.findById(original.stateId)?.value;
+          if (!stateProxy) {
+            continue;
+          }
+          stateProxy.overrides.style.set(normalizeStyleForWrite(original.styleOverrides));
+          continue;
+        }
+        proxy.data.style.left.set(original.left);
+        proxy.data.style.top.set(original.top);
+      }
+    });
+  },
+);
+
+/**
+ * Cancel a move without committing.
+ * Resets transient state; the draft's `discard()` reverts the staged writes.
+ */
+export const cancelMove = commander.action((ctx) => {
+  if (!ctx.getState().move.isActive) {
+    return;
+  }
+  ctx.setState({ move: { isActive: false, startScreenPoint: null, nodes: {} } });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/node-actions.ts
new file mode 100644
index 000000000..5b166e09d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/node-actions.ts
@@ -0,0 +1,498 @@
+/**
+ * Node commands using zustand-commander.
+ *
+ * These commands manage node deletion, copy, cut, and paste operations.
+ * Uses undoable actions for undo/redo support on delete operations.
+ */
+
+import type { Primitive } from "@voidhash/mimic-core";
+import { canBeChildOf, isSvgContent } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../designer-commander";
+import { selectDocumentRoot } from "../utils/document-root";
+import { nodePassesSlotGate } from "../utils/component-children";
+import type { DesignerDocumentRoot } from "../utils/node-proxies";
+import { canHaveChildrenType } from "../utils/node-type-helpers";
+import { selectedNodeIdsFromPresence } from "../utils/presence";
+import { unwrapEntriesDeep } from "../utils/replay";
+import { buildNodeIndex, findNodeById, findParentNode } from "../utils/tree";
+import { getNodePrimitive, isEditableNodeType, type EditableNodeType } from "./node-resolver";
+import { createShapeFromSvg } from "./nodes/shape-node-actions";
+import { clearSelection, selectNode } from "./selection-actions";
+
+// =============================================================================
+// Helper Types
+// =============================================================================
+
+interface SerializedNode {
+  id: string;
+  type: string;
+  data: Record<string, unknown>;
+  children: SerializedNode[];
+}
+
+interface ClipboardData {
+  __voidhash: true;
+  version: 2;
+  nodes: SerializedNode[];
+  originalParentId: string | null;
+}
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Checks if a node type is a container that can accept children.
+ */
+function isContainerType(nodeType: string): boolean {
+  return canHaveChildrenType(nodeType);
+}
+
+function snapshotDataToInput(data: SnapshotNode["data"]): Record<string, unknown> {
+  const result: Record<string, unknown> = {};
+  for (const [key, item] of Object.entries(data)) {
+    result[key] = unwrapEntriesDeep(item);
+  }
+  return result;
+}
+
+/**
+ * Validates clipboard/undo data against a node type's data schema so it can
+ * be passed to `insertLast`/`insertAt` as typed input. Returns false for
+ * payloads the schema rejects (including unknown union variants — forward
+ * compat lives at the schema-migration layer, not in the clipboard).
+ */
+function isValidNodeDataInput<TNode extends Primitive.AnyTreeNodePrimitive>(
+  node: TNode,
+  raw: Record<string, unknown>,
+): raw is Record<string, unknown> & NonNullable<Primitive.InferInput<TNode["data"]>> {
+  try {
+    node.data.encodeOptional(raw);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Serialize a node and its children for the clipboard / delete-undo payload.
+ * Data is stored in plain input shape so restores can replay it directly.
+ */
+function serializeNode(node: SnapshotNode): SerializedNode {
+  return {
+    children: node.children.map((child) => serializeNode(child)),
+    data: snapshotDataToInput(node.data),
+    id: node.id,
+    type: node.type,
+  };
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null;
+}
+
+function isSerializedNode(value: unknown): value is SerializedNode {
+  return (
+    isRecord(value) &&
+    typeof value["id"] === "string" &&
+    typeof value["type"] === "string" &&
+    isRecord(value["data"]) &&
+    Array.isArray(value["children"]) &&
+    value["children"].every((child) => isSerializedNode(child))
+  );
+}
+
+/**
+ * Parse clipboard data from text. Versionless (pre-v2) payloads carry the
+ * old flat node shape and are rejected.
+ */
+function parseClipboardData(text: string): ClipboardData | null {
+  try {
+    const parsed: unknown = JSON.parse(text);
+    if (
+      isRecord(parsed) &&
+      parsed["__voidhash"] === true &&
+      parsed["version"] === 2 &&
+      Array.isArray(parsed["nodes"]) &&
+      parsed["nodes"].every((node) => isSerializedNode(node))
+    ) {
+      const originalParentId = parsed["originalParentId"];
+      return {
+        __voidhash: true,
+        nodes: parsed["nodes"].filter((node) => isSerializedNode(node)),
+        originalParentId: typeof originalParentId === "string" ? originalParentId : null,
+        version: 2,
+      };
+    }
+  } catch {
+    // Not valid JSON
+  }
+  return null;
+}
+
+/**
+ * Recursively inserts a serialized subtree under a parent proxy. Nodes whose
+ * type is unknown or whose data the schema rejects are skipped (with their
+ * subtree). Returns the inserted top-level node id, if any.
+ */
+function insertSerializedSubtree(
+  root: DesignerDocumentRoot,
+  parentId: string,
+  serialized: SerializedNode,
+  index?: number,
+): string | null {
+  if (!isEditableNodeType(serialized.type)) {
+    return null;
+  }
+  const nodeType: EditableNodeType = serialized.type;
+  const primitive = getNodePrimitive(nodeType);
+  if (!isValidNodeDataInput(primitive, serialized.data)) {
+    return null;
+  }
+  const parent = root.findByIdAcrossTree(parentId);
+  if (parent === undefined) {
+    return null;
+  }
+
+  try {
+    const input = { ...serialized.data, type: nodeType };
+    const node =
+      index === undefined
+        ? parent.children.insertLast(input)
+        : parent.children.insertAt(index, input);
+    for (const child of serialized.children) {
+      insertSerializedSubtree(root, node.id, child);
+    }
+    return node.id;
+  } catch {
+    // Failed to insert node (disallowed parent/child combination)
+    return null;
+  }
+}
+
+// =============================================================================
+// Node Commands
+// =============================================================================
+
+/**
+ * Delete selected nodes and all their descendants.
+ * Undoable: restores the deleted subtrees at their original positions.
+ */
+export const deleteNodes = commander.undoableAction<
+  Record<string, never>,
+  {
+    deletedNodes: {
+      serialized: SerializedNode;
+      parentId: string | null;
+      index: number;
+    }[];
+  }
+>(
+  (ctx) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+    if (selectedNodeIds.length === 0) {
+      return { deletedNodes: [] };
+    }
+
+    const root = selectDocumentRoot(state);
+    const deletedNodes: {
+      serialized: SerializedNode;
+      parentId: string | null;
+      index: number;
+    }[] = [];
+
+    // Capture state before deletion
+    for (const selectedId of selectedNodeIds) {
+      const node = findNodeById<SnapshotNode>(root, selectedId);
+      if (!node) {
+        continue;
+      }
+
+      // Prevent deletion of root and screen nodes
+      if (node.type === "root" || node.type === "screen") {
+        continue;
+      }
+
+      const parent = findParentNode<SnapshotNode>(root, selectedId);
+      deletedNodes.push({
+        index: parent ? parent.children.findIndex((child) => child.id === selectedId) : 0,
+        parentId: parent?.id ?? null,
+        serialized: serializeNode(node),
+      });
+    }
+
+    // Perform deletion
+    mimic.document.transaction((transactionRoot) => {
+      for (const { serialized } of deletedNodes) {
+        try {
+          transactionRoot.findByIdAcrossTree(serialized.id)?.remove();
+        } catch {
+          // Failed to remove node
+        }
+      }
+    });
+
+    // Clear selection after deletion
+    ctx.dispatch(clearSelection)({});
+
+    return { deletedNodes };
+  },
+  (ctx, _params, result) => {
+    if (result.deletedNodes.length === 0) {
+      return;
+    }
+
+    const { mimic } = ctx.getState();
+
+    // Restore deleted subtrees in reverse order to maintain indices
+    mimic.document.transaction((root) => {
+      for (let i = result.deletedNodes.length - 1; i >= 0; i--) {
+        const deleted = result.deletedNodes[i];
+        if (deleted?.parentId != null) {
+          insertSerializedSubtree(root, deleted.parentId, deleted.serialized, deleted.index);
+        }
+      }
+    });
+  },
+);
+
+/**
+ * Copy selected nodes to clipboard.
+ * Non-undoable (read-only operation).
+ */
+export const copyNodes = commander.action(async (ctx) => {
+  const state = ctx.getState();
+  const { mimic } = state;
+
+  const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+  if (selectedNodeIds.length === 0) {
+    return;
+  }
+
+  const root = selectDocumentRoot(state);
+  const nodes = buildNodeIndex<SnapshotNode>(root);
+
+  // Filter out root and screen nodes
+  const nodeIdsToCopy = selectedNodeIds.filter((id) => {
+    const node = nodes.get(id);
+    return node && node.type !== "root" && node.type !== "screen";
+  });
+
+  if (nodeIdsToCopy.length === 0) {
+    return;
+  }
+
+  // Serialize nodes
+  const serializedNodes: SerializedNode[] = [];
+  let originalParentId: string | null = null;
+
+  for (const nodeId of nodeIdsToCopy) {
+    const node = nodes.get(nodeId);
+    if (node) {
+      serializedNodes.push(serializeNode(node));
+      // Use the first node's parent as the original parent
+      originalParentId ??= findParentNode<SnapshotNode>(root, nodeId)?.id ?? null;
+    }
+  }
+
+  if (serializedNodes.length === 0) {
+    return;
+  }
+
+  // Write to clipboard
+  const clipboardData: ClipboardData = {
+    __voidhash: true,
+    nodes: serializedNodes,
+    originalParentId,
+    version: 2,
+  };
+
+  try {
+    await navigator.clipboard.writeText(JSON.stringify(clipboardData));
+  } catch {
+    // Clipboard API might not be available
+  }
+});
+
+/**
+ * Cut selected nodes (copy then delete).
+ */
+export const cutNodes = commander.action(async (ctx) => {
+  // Copy first
+  await ctx.dispatch(copyNodes)({});
+
+  // Then delete
+  ctx.dispatch(deleteNodes)({});
+});
+
+/**
+ * Paste nodes from clipboard.
+ * Note: This is a regular action (not undoable) since it modifies async state.
+ * Use deleteNodes to undo a paste operation.
+ */
+export const pasteNodes = commander.action(async (ctx) => {
+  // Read from clipboard
+  let clipboardText: string;
+  try {
+    clipboardText = await navigator.clipboard.readText();
+  } catch {
+    return;
+  }
+
+  // Check if clipboard contains SVG content
+  if (isSvgContent(clipboardText)) {
+    const state = ctx.getState();
+    const { mimic } = state;
+    const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+    const root = selectDocumentRoot(state);
+    const nodes = buildNodeIndex<SnapshotNode>(root);
+
+    // Determine paste location for SVG
+    let targetParentId: string | null = null;
+
+    if (selectedNodeIds.length > 0) {
+      const firstSelectedId = selectedNodeIds[0];
+      if (firstSelectedId) {
+        const selectedNode = nodes.get(firstSelectedId);
+        if (
+          selectedNode &&
+          isContainerType(selectedNode.type) &&
+          selectedNode.type !== "root" &&
+          selectedNode.type !== "shape" // Can't paste SVG into a shape
+        ) {
+          targetParentId = firstSelectedId;
+        }
+      }
+    }
+
+    // If no valid target, find the first screen
+    if (targetParentId === null) {
+      const findFirstScreen = (node: SnapshotNode): string | null => {
+        if (node.type === "screen") return node.id;
+        for (const child of node.children) {
+          const found = findFirstScreen(child);
+          if (found) return found;
+        }
+        return null;
+      };
+      targetParentId = findFirstScreen(root);
+    }
+
+    if (targetParentId) {
+      ctx.dispatch(createShapeFromSvg)({
+        parentId: targetParentId,
+        svgSource: clipboardText,
+      });
+    }
+    return;
+  }
+
+  // Parse clipboard data
+  const clipboardData = parseClipboardData(clipboardText);
+  if (!clipboardData || clipboardData.nodes.length === 0) {
+    return;
+  }
+
+  const state = ctx.getState();
+  const { mimic } = state;
+  const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+  const root = selectDocumentRoot(state);
+  const nodes = buildNodeIndex<SnapshotNode>(root);
+
+  // Get the types of root-level nodes being pasted
+  const pastedRootTypes = clipboardData.nodes.map((node) => node.type);
+  const componentCatalogByHash = state.componentCatalog.byContentHash;
+
+  // Helper to check if all pasted nodes can be children of a parent node
+  // (catalog rules + the component manifest slot gate).
+  const canPasteInto = (parent: SnapshotNode): boolean => {
+    return (
+      pastedRootTypes.every((childType) => canBeChildOf(childType, parent.type)) &&
+      nodePassesSlotGate(parent, componentCatalogByHash)
+    );
+  };
+
+  // Determine paste location (smart paste)
+  let targetParentId: string | null = null;
+
+  if (selectedNodeIds.length > 0) {
+    const firstSelectedId = selectedNodeIds[0];
+    if (firstSelectedId) {
+      const selectedNode = nodes.get(firstSelectedId);
+
+      if (
+        selectedNode &&
+        isContainerType(selectedNode.type) &&
+        selectedNode.type !== "root" &&
+        canPasteInto(selectedNode)
+      ) {
+        // Paste as child of selected container (only if valid)
+        targetParentId = firstSelectedId;
+      } else if (clipboardData.originalParentId) {
+        // Paste at original parent
+        targetParentId = clipboardData.originalParentId;
+      } else if (selectedNode) {
+        // Paste as sibling of selected node
+        targetParentId = findParentNode<SnapshotNode>(root, firstSelectedId)?.id ?? null;
+      }
+    }
+  } else if (clipboardData.originalParentId) {
+    // No selection, paste at original parent
+    targetParentId = clipboardData.originalParentId;
+  }
+
+  // Verify target parent exists and can accept the pasted nodes
+  if (targetParentId === null || !nodes.has(targetParentId)) {
+    return;
+  }
+
+  const targetNode = nodes.get(targetParentId);
+  if (targetNode && !canPasteInto(targetNode)) {
+    // Target can't accept these node types, try to find original parent
+    if (clipboardData.originalParentId && nodes.has(clipboardData.originalParentId)) {
+      const origParent = nodes.get(clipboardData.originalParentId);
+      if (origParent && canPasteInto(origParent)) {
+        targetParentId = clipboardData.originalParentId;
+      } else {
+        return; // Can't find valid paste target
+      }
+    } else {
+      return; // Can't find valid paste target
+    }
+  }
+
+  const finalTargetParentId = targetParentId;
+  const pastedNodeIds: string[] = [];
+
+  // Insert whole subtrees in one transaction; fresh ids are generated by the
+  // engine on every insert.
+  mimic.document.transaction((transactionRoot) => {
+    for (const serialized of clipboardData.nodes) {
+      const insertedId = insertSerializedSubtree(transactionRoot, finalTargetParentId, serialized);
+      if (insertedId !== null) {
+        pastedNodeIds.push(insertedId);
+      }
+    }
+  });
+
+  // Select newly pasted nodes
+  if (pastedNodeIds.length > 0) {
+    ctx.dispatch(clearSelection)({});
+    const firstPastedId = pastedNodeIds[0];
+    if (firstPastedId) {
+      ctx.dispatch(selectNode)({ id: firstPastedId, many: false });
+    }
+
+    for (let i = 1; i < pastedNodeIds.length; i++) {
+      const pastedId = pastedNodeIds[i];
+      if (pastedId) {
+        ctx.dispatch(selectNode)({ id: pastedId, many: true });
+      }
+    }
+  }
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/node-resolver.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/node-resolver.ts
new file mode 100644
index 000000000..bfe1ceef9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/node-resolver.ts
@@ -0,0 +1,75 @@
+import {
+  ComponentNode,
+  type EditableNodeType,
+  PathNode,
+  ScreenNode,
+  ScrollViewNode,
+  ShapeNode,
+  type StatefulEditableNodeType,
+  TextNode,
+  ViewNode,
+  isEditableNodeType as isEditableNodeTypeFromCatalog,
+  isStatefulNodeType as isStatefulNodeTypeFromCatalog,
+} from "@voidhash/mimic-schema";
+
+import { findTypedNode, type DesignerDocumentRoot } from "../utils/node-proxies";
+
+export type { EditableNodeType, StatefulEditableNodeType };
+
+export const NODE_PRIMITIVES = {
+  component: ComponentNode,
+  path: PathNode,
+  screen: ScreenNode,
+  scrollView: ScrollViewNode,
+  shape: ShapeNode,
+  text: TextNode,
+  view: ViewNode,
+} as const satisfies Record<EditableNodeType, unknown>;
+
+/**
+ * Primitives for the editable node types carrying the generic stateful data
+ * fields (`style`, `states`, `localVariables`). Generic style/state/variable
+ * actions resolve through this map so their proxies expose those fields;
+ * component nodes are deliberately absent (props in, actions out).
+ */
+const STATEFUL_NODE_PRIMITIVES = {
+  path: PathNode,
+  screen: ScreenNode,
+  scrollView: ScrollViewNode,
+  shape: ShapeNode,
+  text: TextNode,
+  view: ViewNode,
+} as const satisfies Record<StatefulEditableNodeType, unknown>;
+
+export function isEditableNodeType(type: string): type is EditableNodeType {
+  return isEditableNodeTypeFromCatalog(type);
+}
+
+export function isStatefulNodeType(type: string): type is StatefulEditableNodeType {
+  return isStatefulNodeTypeFromCatalog(type);
+}
+
+export function getNodePrimitive<T extends EditableNodeType>(type: T) {
+  return NODE_PRIMITIVES[type];
+}
+
+/**
+ * Resolve the primitive for a stateful editable node type. Use this in
+ * generic actions touching `data.localVariables`/`data.states`/`style` so the
+ * resulting proxies are correctly typed.
+ */
+export function getStatefulNodePrimitive<T extends StatefulEditableNodeType>(type: T) {
+  return STATEFUL_NODE_PRIMITIVES[type];
+}
+
+/**
+ * Given a designer document root proxy, resolve a node by ID and type to its
+ * correctly-typed proxy (`null` when missing or differently typed).
+ */
+export function resolveNodeProxy<T extends EditableNodeType>(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  nodeType: T,
+) {
+  return findTypedNode(root, nodeId, NODE_PRIMITIVES[nodeType]) ?? null;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/component-node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/component-node-actions.ts
new file mode 100644
index 000000000..1579b3a07
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/component-node-actions.ts
@@ -0,0 +1,278 @@
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { BuiltinDefaultProp } from "@voidhash/paywall-builtins";
+
+import { commander } from "../../designer-commander";
+import { componentDisplayName } from "../../utils/code-components";
+import type { ComponentCatalogEntry } from "../../designer-store-state";
+import {
+  type ComponentNodeUpdates,
+  type ComponentScalarValues,
+  prefillBuiltinDefaultProps,
+  prefillComponentDefaultProps,
+  restoreComponentNodeScalars,
+  updateComponentNodeData,
+} from "../../utils/component-node-writes";
+import { selectNode } from "../selection-actions";
+
+/**
+ * Inserts a component node pinned to the catalog entry's latest version.
+ * Required identity fields go through insert data; manifest-default props
+ * are written in the same transaction. Undoable: removes the inserted node
+ * on undo.
+ */
+export const insertComponentNode = commander.undoableAction<
+  {
+    parentId: string;
+    component: ComponentCatalogEntry;
+    index?: number;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const { component } = params;
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+
+      const data = {
+        type: "component" as const,
+        componentSlug: component.slug,
+        componentVersion: component.latest.version,
+        contentHash: component.latest.contentHash,
+        name: component.title ?? component.slug,
+        previewState: "default",
+      };
+
+      try {
+        const node =
+          params.index === undefined
+            ? parent.children.insertLast(data)
+            : parent.children.insertAt(params.index, data);
+
+        prefillComponentDefaultProps(root, node.id, component.latest.manifest.props);
+        return node.id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    const { nodeId } = result;
+    if (nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Inserts a component node referencing a LOCAL code-component definition
+ * (`componentSource: "local"`, `componentPath` set to the definition's
+ * document-relative path). The catalog identity fields carry sentinels
+ * (`contentHash: ""`, `componentVersion: 0`, `componentSlug: ""`). The instance
+ * `name` defaults to the path's display name unless one is supplied.
+ * Manifest-default props are prefilled when a compiled local manifest is
+ * supplied. Undoable: removes the node on undo.
+ */
+export const insertLocalComponentNode = commander.undoableAction<
+  {
+    parentId: string;
+    componentPath: string;
+    name?: string;
+    manifest?: ComponentManifest;
+    index?: number;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+
+      const data = {
+        type: "component" as const,
+        componentSource: "local",
+        componentPath: params.componentPath,
+        componentSlug: "",
+        componentVersion: 0,
+        contentHash: "",
+        name: params.name ?? componentDisplayName(params.componentPath),
+        previewState: "default",
+      };
+
+      try {
+        const node =
+          params.index === undefined
+            ? parent.children.insertLast(data)
+            : parent.children.insertAt(params.index, data);
+
+        if (params.manifest) {
+          prefillComponentDefaultProps(root, node.id, params.manifest.props);
+        }
+        return node.id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    const { nodeId } = result;
+    if (nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Inserts a component node referencing a first-party BUILTIN component
+ * (`componentSource: "builtin"`, `componentSlug` = the builtin's stable slug).
+ * Builtin instances stay UNPINNED — `componentVersion`/`contentHash` keep their
+ * sentinels (`0`/`""`) — since the implementation ships with the renderer and
+ * evolves with releases. The instance `name` defaults to the builtin's display
+ * name, and its `defaultProps` (pre-built `{name, binding}` entries) seed the
+ * node's `props` in the same transaction. Undoable: removes the node on undo.
+ */
+export const insertBuiltinComponentNode = commander.undoableAction<
+  {
+    parentId: string;
+    slug: string;
+    name: string;
+    defaultProps: ReadonlyArray<BuiltinDefaultProp>;
+    index?: number;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+
+      const data = {
+        type: "component" as const,
+        componentSource: "builtin",
+        componentSlug: params.slug,
+        componentVersion: 0,
+        contentHash: "",
+        name: params.name,
+        previewState: "default",
+      };
+
+      try {
+        const node =
+          params.index === undefined
+            ? parent.children.insertLast(data)
+            : parent.children.insertAt(params.index, data);
+
+        prefillBuiltinDefaultProps(root, node.id, params.defaultProps);
+        return node.id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    const { nodeId } = result;
+    if (nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Re-points a local component instance to a different component file — the
+ * re-pair action surfaced by the "component unresolved" warning UI. Sets the
+ * node's `componentPath` (a scalar update captured for undo) so a broken
+ * reference (or a deliberate swap) resolves to an existing definition. Stale
+ * props/bindings degrade as usual through manifest-order filtering + validation.
+ * Undoable: restores the previous `componentPath`.
+ */
+export const repairLocalComponentReference = commander.undoableAction<
+  { nodeId: string; componentPath: string },
+  { previousValues: ComponentScalarValues | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const previousValues = mimic.document.transaction((root) =>
+      updateComponentNodeData(root, params.nodeId, { componentPath: params.componentPath }),
+    );
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreComponentNodeScalars(root, params.nodeId, previousValues);
+    });
+  },
+);
+
+/**
+ * Updates a component node's scalar fields (name, preview state, identity).
+ * Undo restores only the scalar fields the update touched; `props` and
+ * `actionBindings` must go through the component prop actions — snapshot
+ * entries are `{id, pos, value}`-wrapped and cannot replay through `update`.
+ */
+export const updateComponentNode = commander.undoableAction<
+  {
+    id: string;
+    updates: ComponentNodeUpdates;
+  },
+  { previousValues: ComponentScalarValues | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const previousValues = mimic.document.transaction((root) =>
+      updateComponentNodeData(root, params.id, params.updates),
+    );
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreComponentNodeScalars(root, params.id, previousValues);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/path-node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/path-node-actions.ts
new file mode 100644
index 000000000..6047bc1aa
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/path-node-actions.ts
@@ -0,0 +1,90 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import type { PathNode } from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import {
+  type PathNodePreviousValues,
+  restorePathNodeData,
+  updatePathNodeData,
+} from "../../utils/node-data-writes";
+import { selectNode } from "../selection-actions";
+import { setActiveTool } from "../tools-actions";
+
+type PathNodeDataPrimitive = Primitive.InferTreeNodeData<typeof PathNode>;
+
+type PathNodeInitialValues = NonNullable<Primitive.InferInput<PathNodeDataPrimitive>>;
+
+/**
+ * Create a path node as a child of a shape node.
+ */
+export const createPathNode = commander.undoableAction<
+  {
+    parentId: string;
+    beforeSiblingId?: string | null;
+    initialValues?: PathNodeInitialValues;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+      try {
+        return parent.children.insertLast({ ...(params.initialValues ?? {}), type: "path" }).id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+      ctx.dispatch(setActiveTool)({ tool: "cursor" });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    const { nodeId } = result;
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Updates a path node's restorable fields (name, style, d, transform). Undo
+ * restores only the fields the update touched; array fields (`states`,
+ * `localVariables`) must go through their dedicated actions — snapshot
+ * entries are `{id, pos, value}`-wrapped and cannot replay through `update`.
+ */
+export const updatePathNode = commander.undoableAction<
+  {
+    id: string;
+    updates: Primitive.InferUpdateInput<PathNodeDataPrimitive>;
+  },
+  { previousValues: PathNodePreviousValues | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const previousValues = mimic.document.transaction((root) =>
+      updatePathNodeData(root, params.id, params.updates),
+    );
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restorePathNodeData(root, params.id, previousValues);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/screen-node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/screen-node-actions.ts
new file mode 100644
index 000000000..5a64b082d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/screen-node-actions.ts
@@ -0,0 +1,87 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import type { ScreenNode } from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import {
+  type ScreenNodePreviousValues,
+  restoreScreenNodeData,
+  updateScreenNodeData,
+} from "../../utils/node-data-writes";
+import { selectNode } from "../selection-actions";
+import { setActiveTool } from "../tools-actions";
+
+type ScreenNodeDataPrimitive = Primitive.InferTreeNodeData<typeof ScreenNode>;
+
+type ScreenNodeInitialValues = NonNullable<Primitive.InferInput<ScreenNodeDataPrimitive>>;
+
+export const createScreenNode = commander.undoableAction<
+  {
+    parentId: string;
+    beforeSiblingId?: string | null;
+    initialValues?: ScreenNodeInitialValues;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+      try {
+        return parent.children.insertLast({ ...(params.initialValues ?? {}), type: "screen" }).id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+      ctx.dispatch(setActiveTool)({ tool: "cursor" });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    const { nodeId } = result;
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Updates a screen node's restorable fields (name, style). Undo restores only
+ * the fields the update touched; array fields (`states`, `localVariables`)
+ * must go through their dedicated actions — snapshot entries are
+ * `{id, pos, value}`-wrapped and cannot replay through `update`.
+ */
+export const updateScreenNode = commander.undoableAction<
+  {
+    id: string;
+    updates: Primitive.InferUpdateInput<ScreenNodeDataPrimitive>;
+  },
+  { previousValues: ScreenNodePreviousValues | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const previousValues = mimic.document.transaction((root) =>
+      updateScreenNodeData(root, params.id, params.updates),
+    );
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreScreenNodeData(root, params.id, previousValues);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.test.ts
new file mode 100644
index 000000000..9d5501abc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.test.ts
@@ -0,0 +1,125 @@
+import { ScrollViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { findTypedNode } from "../../utils/node-proxies";
+import { createScrollViewNode, updateScrollViewNode } from "./scrollview-node-actions";
+
+function makeCtx(doc: OfflineDesignerDocument) {
+  let storeState: Record<string, unknown> = {
+    mimic: { document: doc, snapshot: doc.getSnapshot() },
+    stateOverrideSelection: {},
+  };
+  return {
+    dispatch: () => () => undefined,
+    getState: () => ({
+      ...storeState,
+      mimic: { document: doc, snapshot: doc.getSnapshot() },
+    }),
+    setState: (partial: Record<string, unknown>) => {
+      storeState = { ...storeState, ...partial };
+    },
+    transaction: (fn: never) => doc.transaction(fn),
+  };
+}
+
+describe("createScrollViewNode", () => {
+  test("applies initialValues and undo/redo round-trips through fn/revert", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+    const params = {
+      initialValues: { name: "Feed", style: { flexDirection: "row" as const } },
+      parentId: screenId,
+    };
+
+    const result = createScrollViewNode.fn(ctx as never, params);
+    expect(result.nodeId).not.toBeNull();
+    const nodeId = result.nodeId ?? "";
+
+    const created = findTypedNode(doc.root, nodeId, ScrollViewNode)?.get();
+    expect(created?.data.name).toBe("Feed");
+    expect(created?.data.style.flexDirection).toBe("row");
+    // RN ScrollView defaults materialize on insert.
+    expect(created?.data.horizontal).toBe(false);
+    expect(created?.data.showsScrollIndicator).toBe(true);
+
+    createScrollViewNode.revert(ctx as never, params, result);
+    expect(findTypedNode(doc.root, nodeId, ScrollViewNode)).toBeUndefined();
+
+    // Redo re-runs fn; the forward run must succeed again on the same params.
+    const redone = createScrollViewNode.fn(ctx as never, params);
+    expect(redone.nodeId).not.toBeNull();
+    expect(findTypedNode(doc.root, redone.nodeId ?? "", ScrollViewNode)?.get()?.data.name).toBe(
+      "Feed",
+    );
+  });
+
+  test("insertAffordance seeds cross-axis stretch + main-axis min size (column parent)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+
+    // The screen defaults to a column layout → main axis is height.
+    const result = createScrollViewNode.fn(ctx as never, {
+      initialValues: { name: "Column", style: { flexDirection: "column" as const } },
+      insertAffordance: true,
+      parentId: screenId,
+    });
+
+    const style = findTypedNode(doc.root, result.nodeId ?? "", ScrollViewNode)?.get()?.data.style;
+    expect(style?.alignSelf).toBe("stretch");
+    expect(style?.minHeight).toBe(100);
+    expect(style?.width).toBe("auto");
+    expect(style?.height).toBe("auto");
+  });
+
+  test("without insertAffordance a scrollView hugs (no stretch / min size)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+
+    const result = createScrollViewNode.fn(ctx as never, {
+      initialValues: { name: "Plain", style: { flexDirection: "column" as const } },
+      parentId: screenId,
+    });
+
+    const style = findTypedNode(doc.root, result.nodeId ?? "", ScrollViewNode)?.get()?.data.style;
+    expect(style?.alignSelf).toBe("auto");
+    expect(style?.minHeight).toBeUndefined();
+    expect(style?.minWidth).toBeUndefined();
+  });
+});
+
+describe("updateScrollViewNode", () => {
+  test("toggles the horizontal/showsScrollIndicator flags and undo restores them", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+
+    const created = createScrollViewNode.fn(ctx as never, { parentId: screenId });
+    const nodeId = created.nodeId ?? "";
+    // RN ScrollView defaults.
+    expect(findTypedNode(doc.root, nodeId, ScrollViewNode)?.get()?.data.horizontal).toBe(false);
+    expect(findTypedNode(doc.root, nodeId, ScrollViewNode)?.get()?.data.showsScrollIndicator).toBe(
+      true,
+    );
+
+    const params = { id: nodeId, updates: { horizontal: true, showsScrollIndicator: false } };
+    const result = updateScrollViewNode.fn(ctx as never, params);
+    expect(findTypedNode(doc.root, nodeId, ScrollViewNode)?.get()?.data.horizontal).toBe(true);
+    expect(findTypedNode(doc.root, nodeId, ScrollViewNode)?.get()?.data.showsScrollIndicator).toBe(
+      false,
+    );
+
+    updateScrollViewNode.revert(ctx as never, params, result);
+    expect(findTypedNode(doc.root, nodeId, ScrollViewNode)?.get()?.data.horizontal).toBe(false);
+    expect(findTypedNode(doc.root, nodeId, ScrollViewNode)?.get()?.data.showsScrollIndicator).toBe(
+      true,
+    );
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.ts
new file mode 100644
index 000000000..0aa6c9c07
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/scrollview-node-actions.ts
@@ -0,0 +1,128 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import { ScrollViewNode } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../../designer-commander";
+import { selectDocumentRoot } from "../../utils/document-root";
+import {
+  type ScrollViewNodePreviousValues,
+  restoreScrollViewNodeData,
+  updateScrollViewNodeData,
+} from "../../utils/node-data-writes";
+import { designerInsertViewStyle, getFlexDirection } from "../../utils/node-type-helpers";
+import { findTypedNode } from "../../utils/node-proxies";
+import { buildNodeIndex } from "../../utils/tree";
+import { selectNode } from "../selection-actions";
+import { setActiveTool } from "../tools-actions";
+
+type ScrollViewNodeDataPrimitive = Primitive.InferTreeNodeData<typeof ScrollViewNode>;
+
+type ScrollViewNodeInitialValues = NonNullable<Primitive.InferInput<ScrollViewNodeDataPrimitive>>;
+
+type ScrollViewNodeUpdates = Primitive.InferUpdateInput<ScrollViewNodeDataPrimitive>;
+
+/**
+ * Creates a `scrollView` node under `parentId`. Mirrors {@link createViewNode}:
+ * an optional DESIGNER click-insert affordance seeds cross-axis stretch +
+ * main-axis min size (resolved from the parent's flex direction) so an empty
+ * scrollView stays visible under hug-by-default sizing.
+ */
+export const createScrollViewNode = commander.undoableAction<
+  {
+    parentId: string;
+    beforeSiblingId?: string | null;
+    initialValues?: ScrollViewNodeInitialValues;
+    /**
+     * Seed the DESIGNER click-insert affordance (cross-axis stretch + main-axis
+     * min size) so an empty scrollView stays visible under hug-by-default
+     * sizing. Resolved from the parent's flex direction. Off for programmatic
+     * inserts.
+     */
+    insertAffordance?: boolean;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    let initialValues = params.initialValues;
+    if (params.insertAffordance) {
+      const root = selectDocumentRoot(state);
+      const parentNode = buildNodeIndex<SnapshotNode>(root).get(params.parentId);
+      const parentDirection = getFlexDirection(parentNode, "column");
+      const affordance = designerInsertViewStyle(parentDirection);
+      initialValues = {
+        ...(initialValues ?? {}),
+        // Caller-supplied style (e.g. flexDirection) wins over the affordance base.
+        style: { ...affordance, ...(initialValues?.style ?? {}) },
+      };
+    }
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+      try {
+        return parent.children.insertLast({ ...(initialValues ?? {}), type: "scrollView" }).id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+      ctx.dispatch(setActiveTool)({ tool: "cursor" });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    const { nodeId } = result;
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Updates a scrollView node's restorable fields (`name`, `style`, and the
+ * scrollView-only `horizontal`/`showsScrollIndicator` data flags). Undo restores
+ * only the fields the update touched. Array fields (`states`, `interactions`,
+ * `localVariables`) must go through their dedicated actions — snapshot entries
+ * are `{id, pos, value}`-wrapped and cannot replay through `update`. Mirrors the
+ * view node update action; the settings panel writes the boolean flags through it.
+ */
+export const updateScrollViewNode = commander.undoableAction<
+  {
+    id: string;
+    updates: ScrollViewNodeUpdates;
+  },
+  { previousValues: ScrollViewNodePreviousValues | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const node = findTypedNode(mimic.document.root, params.id, ScrollViewNode);
+    if (!node) return { previousValues: null };
+
+    const previousValues = mimic.document.transaction((root) =>
+      updateScrollViewNodeData(root, params.id, params.updates),
+    );
+
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreScrollViewNodeData(root, params.id, previousValues);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/shape-node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/shape-node-actions.ts
new file mode 100644
index 000000000..3fe66c795
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/shape-node-actions.ts
@@ -0,0 +1,181 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import { parseSvg, type ShapeNode } from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import {
+  type ShapeNodePreviousValues,
+  restoreShapeNodeData,
+  updateShapeNodeData,
+} from "../../utils/node-data-writes";
+import { selectNode } from "../selection-actions";
+import { setActiveTool } from "../tools-actions";
+
+type ShapeNodeDataPrimitive = Primitive.InferTreeNodeData<typeof ShapeNode>;
+
+type ShapeNodeInitialValues = NonNullable<Primitive.InferInput<ShapeNodeDataPrimitive>>;
+
+/**
+ * Create a shape node from an SVG string.
+ * Parses the SVG and creates a ShapeNode with PathNode children. Parser
+ * `null` fields (transform, width/height) normalize to absence at the write
+ * boundary — the schema has no null values.
+ */
+export const createShapeFromSvg = commander.undoableAction<
+  {
+    parentId: string;
+    svgSource: string;
+    beforeSiblingId?: string | null;
+  },
+  { nodeId: string | null; pathIds: string[] }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const parsed = parseSvg(params.svgSource);
+    if (parsed.paths.length === 0) {
+      return { nodeId: null, pathIds: [] };
+    }
+
+    const pathIds: string[] = [];
+
+    const shapeNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+
+      try {
+        // Create the shape node
+        const shape = parent.children.insertLast({
+          type: "shape",
+          name: "Shape",
+          svgSource: params.svgSource,
+          viewBox: parsed.viewBox,
+          style: {
+            width: parsed.width ?? parsed.viewBox.width,
+            height: parsed.height ?? parsed.viewBox.height,
+          },
+        });
+
+        // Create path nodes as children
+        for (const path of parsed.paths) {
+          const pathNode = shape.children.insertLast({
+            type: "path",
+            name: path.name,
+            d: path.d,
+            transform: path.transform ?? undefined,
+            style: {
+              fillColor: path.fillColor,
+              fillEnabled: path.fillEnabled,
+              fillRule: path.fillRule,
+              fillOpacity: path.fillOpacity,
+              strokeColor: path.strokeColor,
+              strokeEnabled: path.strokeEnabled,
+              strokeWidth: path.strokeWidth,
+              strokeOpacity: path.strokeOpacity,
+              strokeLinecap: path.strokeLinecap,
+              strokeLinejoin: path.strokeLinejoin,
+            },
+          });
+          pathIds.push(pathNode.id);
+        }
+
+        return shape.id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (shapeNodeId) {
+      ctx.dispatch(selectNode)({ id: shapeNodeId, many: false });
+      ctx.dispatch(setActiveTool)({ tool: "cursor" });
+    }
+
+    return { nodeId: shapeNodeId, pathIds };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    const { nodeId } = result;
+    mimic.document.transaction((root) => {
+      // Removing the shape node will also remove all its children
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Create a shape node with initial values (for paste without SVG parsing).
+ */
+export const createShapeNode = commander.undoableAction<
+  {
+    parentId: string;
+    beforeSiblingId?: string | null;
+    initialValues?: ShapeNodeInitialValues;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+      try {
+        return parent.children.insertLast({ ...(params.initialValues ?? {}), type: "shape" }).id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+      ctx.dispatch(setActiveTool)({ tool: "cursor" });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    const { nodeId } = result;
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Updates a shape node's restorable fields (name, style, svgSource, viewBox).
+ * Undo restores only the fields the update touched; array fields (`states`,
+ * `localVariables`) must go through their dedicated actions — snapshot
+ * entries are `{id, pos, value}`-wrapped and cannot replay through `update`.
+ */
+export const updateShapeNode = commander.undoableAction<
+  {
+    id: string;
+    updates: Primitive.InferUpdateInput<ShapeNodeDataPrimitive>;
+  },
+  { previousValues: ShapeNodePreviousValues | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const previousValues = mimic.document.transaction((root) =>
+      updateShapeNodeData(root, params.id, params.updates),
+    );
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreShapeNodeData(root, params.id, previousValues);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/text-node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/text-node-actions.ts
new file mode 100644
index 000000000..a1e577abd
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/text-node-actions.ts
@@ -0,0 +1,87 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import type { TextNode } from "@voidhash/mimic-schema";
+
+import { commander } from "../../designer-commander";
+import {
+  type TextNodePreviousValues,
+  restoreTextNodeData,
+  updateTextNodeData,
+} from "../../utils/node-data-writes";
+import { selectNode } from "../selection-actions";
+import { setActiveTool } from "../tools-actions";
+
+type TextNodeDataPrimitive = Primitive.InferTreeNodeData<typeof TextNode>;
+
+type TextNodeInitialValues = NonNullable<Primitive.InferInput<TextNodeDataPrimitive>>;
+
+export const createTextNode = commander.undoableAction<
+  {
+    parentId: string;
+    beforeSiblingId?: string | null;
+    initialValues?: TextNodeInitialValues;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+      try {
+        return parent.children.insertLast({ ...(params.initialValues ?? {}), type: "text" }).id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+      ctx.dispatch(setActiveTool)({ tool: "cursor" });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    const { nodeId } = result;
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Updates a text node's restorable fields (name, style, text). Undo restores
+ * only the fields the update touched; array fields (`states`,
+ * `localVariables`) must go through their dedicated actions — snapshot
+ * entries are `{id, pos, value}`-wrapped and cannot replay through `update`.
+ */
+export const updateTextNode = commander.undoableAction<
+  {
+    id: string;
+    updates: Primitive.InferUpdateInput<TextNodeDataPrimitive>;
+  },
+  { previousValues: TextNodePreviousValues | null }
+>(
+  (ctx, params) => {
+    const { mimic } = ctx.getState();
+    const previousValues = mimic.document.transaction((root) =>
+      updateTextNodeData(root, params.id, params.updates),
+    );
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreTextNodeData(root, params.id, previousValues);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.test.ts
new file mode 100644
index 000000000..8f0215ce9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.test.ts
@@ -0,0 +1,115 @@
+import { ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../../testing/offline-document";
+import { findTypedNode } from "../../utils/node-proxies";
+import { createViewNode } from "./view-node-actions";
+
+function makeCtx(doc: OfflineDesignerDocument) {
+  let storeState: Record<string, unknown> = {
+    mimic: { document: doc, snapshot: doc.getSnapshot() },
+    stateOverrideSelection: {},
+  };
+  return {
+    dispatch: () => () => undefined,
+    getState: () => ({
+      ...storeState,
+      mimic: { document: doc, snapshot: doc.getSnapshot() },
+    }),
+    setState: (partial: Record<string, unknown>) => {
+      storeState = { ...storeState, ...partial };
+    },
+    transaction: (fn: never) => doc.transaction(fn),
+  };
+}
+
+describe("createViewNode", () => {
+  test("applies initialValues and undo/redo round-trips through fn/revert", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+    const params = {
+      initialValues: { name: "Row", style: { flexDirection: "row" as const } },
+      parentId: screenId,
+    };
+
+    const result = createViewNode.fn(ctx as never, params);
+    expect(result.nodeId).not.toBeNull();
+    const nodeId = result.nodeId ?? "";
+
+    const created = findTypedNode(doc.root, nodeId, ViewNode)?.get();
+    expect(created?.data.name).toBe("Row");
+    expect(created?.data.style.flexDirection).toBe("row");
+
+    createViewNode.revert(ctx as never, params, result);
+    expect(findTypedNode(doc.root, nodeId, ViewNode)).toBeUndefined();
+
+    // Redo re-runs fn; the forward run must succeed again on the same params.
+    const redone = createViewNode.fn(ctx as never, params);
+    expect(redone.nodeId).not.toBeNull();
+    expect(findTypedNode(doc.root, redone.nodeId ?? "", ViewNode)?.get()?.data.name).toBe("Row");
+  });
+
+  test("insertAffordance seeds cross-axis stretch + main-axis min size (column parent)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+
+    // The screen defaults to a column layout → main axis is height.
+    const result = createViewNode.fn(ctx as never, {
+      initialValues: { name: "Column", style: { flexDirection: "column" as const } },
+      insertAffordance: true,
+      parentId: screenId,
+    });
+
+    const style = findTypedNode(doc.root, result.nodeId ?? "", ViewNode)?.get()?.data.style;
+    expect(style?.alignSelf).toBe("stretch");
+    expect(style?.minHeight).toBe(100);
+    expect(style?.width).toBe("auto");
+    expect(style?.height).toBe("auto");
+  });
+
+  test("insertAffordance uses main-axis minWidth under a row parent", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+
+    // Seed a row-direction parent view, then insert into it.
+    let rowParentId = "";
+    doc.transaction((root) => {
+      const screen = root.findByIdAcrossTree(screenId);
+      if (!screen) throw new Error("expected the seeded screen node");
+      rowParentId = screen.children.insertLast({ type: "view", style: { flexDirection: "row" } }).id;
+    });
+
+    const result = createViewNode.fn(ctx as never, {
+      initialValues: { name: "Row", style: { flexDirection: "row" as const } },
+      insertAffordance: true,
+      parentId: rowParentId,
+    });
+
+    const style = findTypedNode(doc.root, result.nodeId ?? "", ViewNode)?.get()?.data.style;
+    expect(style?.alignSelf).toBe("stretch");
+    expect(style?.minWidth).toBe(100);
+  });
+
+  test("without insertAffordance a view hugs (no stretch / min size)", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const ctx = makeCtx(doc);
+
+    const result = createViewNode.fn(ctx as never, {
+      initialValues: { name: "Plain", style: { flexDirection: "column" as const } },
+      parentId: screenId,
+    });
+
+    const style = findTypedNode(doc.root, result.nodeId ?? "", ViewNode)?.get()?.data.style;
+    expect(style?.alignSelf).toBe("auto");
+    expect(style?.minHeight).toBeUndefined();
+    expect(style?.minWidth).toBeUndefined();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.ts
new file mode 100644
index 000000000..85aa7df4b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/nodes/view-node-actions.ts
@@ -0,0 +1,182 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import type { FlexDirection } from "@voidhash/mimic-schema";
+import { ViewNode } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../../designer-commander";
+import { selectDocumentRoot } from "../../utils/document-root";
+import { findTypedNode } from "../../utils/node-proxies";
+import {
+  type ViewNodePreviousValues,
+  restoreViewNodeData,
+  updateViewNodeData,
+} from "../../utils/node-data-writes";
+import {
+  designerInsertViewStyle,
+  getFlexDirection,
+  isFlexParent,
+} from "../../utils/node-type-helpers";
+import { normalizeFlexSizing } from "../../utils/normalize-flex-sizing";
+import { buildNodeIndex, findParentNode } from "../../utils/tree";
+import { selectNode } from "../selection-actions";
+import { setActiveTool } from "../tools-actions";
+
+type ViewNodeDataPrimitive = Primitive.InferTreeNodeData<typeof ViewNode>;
+
+type ViewNodeUpdates = Primitive.InferUpdateInput<ViewNodeDataPrimitive>;
+
+type ViewNodeInitialValues = NonNullable<Primitive.InferInput<ViewNodeDataPrimitive>>;
+
+/**
+ * Get parent flex direction for a node.
+ */
+function getParentFlexDirection(root: SnapshotNode, nodeId: string): FlexDirection | null {
+  const parent = findParentNode<SnapshotNode>(root, nodeId);
+  if (!parent) return null;
+
+  return isFlexParent(parent) ? getFlexDirection(parent) : null;
+}
+
+export const createViewNode = commander.undoableAction<
+  {
+    parentId: string;
+    beforeSiblingId?: string | null;
+    initialValues?: ViewNodeInitialValues;
+    /**
+     * Seed the DESIGNER click-insert affordance (cross-axis stretch + main-axis
+     * min size) so an empty view stays visible under hug-by-default sizing.
+     * Resolved from the parent's flex direction. Off for programmatic inserts.
+     */
+    insertAffordance?: boolean;
+  },
+  { nodeId: string | null }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    let initialValues = params.initialValues;
+    if (params.insertAffordance) {
+      const root = selectDocumentRoot(state);
+      const parentNode = buildNodeIndex<SnapshotNode>(root).get(params.parentId);
+      const parentDirection = getFlexDirection(parentNode, "column");
+      const affordance = designerInsertViewStyle(parentDirection);
+      initialValues = {
+        ...(initialValues ?? {}),
+        // Caller-supplied style (e.g. flexDirection) wins over the affordance base.
+        style: { ...affordance, ...(initialValues?.style ?? {}) },
+      };
+    }
+
+    const newNodeId = mimic.document.transaction((root) => {
+      const parent = root.findByIdAcrossTree(params.parentId);
+      if (parent === undefined) {
+        return null;
+      }
+      try {
+        return parent.children.insertLast({ ...(initialValues ?? {}), type: "view" }).id;
+      } catch {
+        return null;
+      }
+    });
+
+    if (newNodeId) {
+      ctx.dispatch(selectNode)({ id: newNodeId, many: false });
+      ctx.dispatch(setActiveTool)({ tool: "cursor" });
+    }
+
+    return { nodeId: newNodeId };
+  },
+  (ctx, _params, result) => {
+    if (result.nodeId === null) return;
+
+    const { mimic } = ctx.getState();
+    const { nodeId } = result;
+    mimic.document.transaction((root) => {
+      root.findByIdAcrossTree(nodeId)?.remove();
+    });
+  },
+);
+
+/**
+ * Updates a view node's restorable fields (name, style). Undo restores only
+ * the fields the update touched; array fields (`states`, `interactions`,
+ * `localVariables`) must go through their dedicated actions — snapshot
+ * entries are `{id, pos, value}`-wrapped and cannot replay through `update`.
+ */
+export const updateViewNode = commander.undoableAction<
+  {
+    id: string;
+    updates: ViewNodeUpdates;
+  },
+  { previousValues: ViewNodePreviousValues | null }
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { mimic } = state;
+
+    const node = findTypedNode(mimic.document.root, params.id, ViewNode);
+    if (!node) return { previousValues: null };
+
+    let updates = params.updates;
+
+    // Normalize sizing properties if style updates contain sizing-related properties
+    const styleUpdates = updates.style;
+    if (
+      styleUpdates &&
+      ("width" in styleUpdates ||
+        "height" in styleUpdates ||
+        "flex" in styleUpdates ||
+        "alignSelf" in styleUpdates)
+    ) {
+      const root = selectDocumentRoot(state);
+      const parentDirection = getParentFlexDirection(root, params.id);
+
+      const currentStyle = node.get()?.data.style;
+      const normalized = normalizeFlexSizing(
+        {
+          alignSelf: styleUpdates.alignSelf,
+          flex: styleUpdates.flex,
+          height: styleUpdates.height,
+          width: styleUpdates.width,
+        },
+        {
+          alignSelf: currentStyle?.alignSelf,
+          flex: currentStyle?.flex,
+          height: currentStyle?.height,
+          width: currentStyle?.width,
+        },
+        parentDirection,
+      );
+
+      // Normalization only touches flex/alignSelf; `flex: null` means "clear
+      // the field" and maps to an explicit-undefined update (field deletion).
+      let stylePatch = { ...styleUpdates };
+      if (normalized.alignSelf !== undefined) {
+        stylePatch = { ...stylePatch, alignSelf: normalized.alignSelf };
+      }
+      if (normalized.flex !== undefined) {
+        stylePatch = {
+          ...stylePatch,
+          flex: normalized.flex === null ? undefined : normalized.flex,
+        };
+      }
+      updates = { ...updates, style: stylePatch };
+    }
+
+    const previousValues = mimic.document.transaction((root) =>
+      updateViewNodeData(root, params.id, updates),
+    );
+
+    return { previousValues: previousValues ?? null };
+  },
+  (ctx, params, result) => {
+    const { previousValues } = result;
+    if (previousValues === null) return;
+
+    const { mimic } = ctx.getState();
+    mimic.document.transaction((root) => {
+      restoreViewNodeData(root, params.id, previousValues);
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts
new file mode 100644
index 000000000..944d4995e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts
@@ -0,0 +1,76 @@
+/**
+ * Panel commands using zustand-commander.
+ *
+ * These commands manage viewport panel dimensions (browser-only state).
+ */
+
+import { commander } from "../designer-commander";
+import type { DesignerStoreState } from "../designer-store-state";
+
+// =============================================================================
+// Panel Commands
+// =============================================================================
+
+/**
+ * Set the height of the top panel.
+ */
+export const setTopPanelHeight = commander.action<{ height: number }>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    viewport: {
+      ...state.viewport,
+      panels: {
+        ...state.viewport.panels,
+        top: { height: params.height },
+      },
+    },
+  });
+});
+
+/**
+ * Set the height of the bottom panel.
+ */
+export const setBottomPanelHeight = commander.action<{ height: number }>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    viewport: {
+      ...state.viewport,
+      panels: {
+        ...state.viewport.panels,
+        bottom: { height: params.height },
+      },
+    },
+  });
+});
+
+/**
+ * Set the width of the left panel.
+ */
+export const setLeftPanelWidth = commander.action<{ width: number }>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    viewport: {
+      ...state.viewport,
+      panels: {
+        ...state.viewport.panels,
+        left: { width: params.width },
+      },
+    },
+  });
+});
+
+/**
+ * Set the width of the right panel.
+ */
+export const setRightPanelWidth = commander.action<{ width: number }>((ctx, params) => {
+  const state = ctx.getState();
+  ctx.setState({
+    viewport: {
+      ...state.viewport,
+      panels: {
+        ...state.viewport.panels,
+        right: { width: params.width },
+      },
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.test.ts
new file mode 100644
index 000000000..c48c8992c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.test.ts
@@ -0,0 +1,107 @@
+import { ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../testing/offline-document";
+import { findTypedNode } from "../utils/node-proxies";
+import { endResize, startResize, updateResize } from "./resize-actions";
+
+const INITIAL_RESIZE_STATE = {
+  currentNodeDimensions: {},
+  handle: null,
+  initialCombinedBounds: null,
+  initialNodeDimensions: {},
+  isActive: false,
+  originalDocumentState: {},
+  originalStateOverrideStyles: {},
+  startScreenPoint: null,
+  stateOverrideTargets: {},
+};
+
+function makeResizeCtx(doc: OfflineDesignerDocument, selectedNodeId: string) {
+  let storeState: Record<string, unknown> = {
+    canvas: {
+      boundingBoxes: {
+        [selectedNodeId]: { height: 100, width: 100, x: 0, y: 0 },
+      },
+      scale: 1,
+      x: 0,
+      y: 0,
+    },
+    highlightedNodeId: null,
+    resize: INITIAL_RESIZE_STATE,
+    stateOverrideSelection: {},
+  };
+  return {
+    ctx: {
+      dispatch: () => () => undefined,
+      getState: () => ({
+        ...storeState,
+        mimic: {
+          document: doc,
+          presence: {
+            self: {
+              selectedNodeIds: [{ id: "entry-0", pos: "a0", value: selectedNodeId }],
+              user: { color: "#fff", name: "Tester" },
+            },
+          },
+          snapshot: doc.getSnapshot(),
+        },
+      }),
+      setState: (partial: Record<string, unknown>) => {
+        storeState = { ...storeState, ...partial };
+      },
+      transaction: (fn: never) => doc.transaction(fn),
+    },
+    getResizeState: () => storeState["resize"] as typeof INITIAL_RESIZE_STATE,
+  };
+}
+
+describe("endResize undo round trip", () => {
+  test("commits resized dimensions and revert restores the originals", () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    let flexId = "";
+    doc.transaction((root) => {
+      const screen = root.findByIdAcrossTree(screenId);
+      if (!screen) throw new Error("expected the seeded screen node");
+      flexId = screen.children.insertLast({ type: "view" }).id;
+    });
+
+    const { ctx, getResizeState } = makeResizeCtx(doc, flexId);
+    const styleOf = () => {
+      const data = findTypedNode(doc.root, flexId, ViewNode)?.get()?.data;
+      if (data === undefined) throw new Error("expected the flex node");
+      return data.style;
+    };
+
+    startResize.fn(ctx as never, { handle: "se", screenPoint: { x: 0, y: 0 } });
+    expect(getResizeState().isActive).toBe(true);
+
+    updateResize.fn(ctx as never, {
+      maintainAspectRatio: false,
+      screenPoint: { x: 50, y: 30 },
+    });
+    expect(styleOf().width).toBe(150);
+    expect(styleOf().height).toBe(130);
+
+    const result = endResize.fn(ctx as never, {});
+    expect(getResizeState().isActive).toBe(false);
+    expect(result.finalDimensions[flexId]).toEqual({ height: 130, type: "view", width: 150 });
+    expect(styleOf().width).toBe(150);
+    expect(styleOf().height).toBe(130);
+    // Resizing a container-stretched child (alignSelf "auto", filling the cross
+    // axis by default) writes a numeric size and leaves alignSelf untouched — a
+    // numeric size defeats stretch on its own.
+    expect(styleOf().alignSelf).toBe("auto");
+
+    // The pre-resize snapshot materializes the schema defaults ("auto" = hug),
+    // so the captured originals — and the undo restore — are those values.
+    endResize.revert(ctx as never, {}, result);
+    expect(styleOf().width).toBe("auto");
+    expect(styleOf().height).toBe("auto");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.ts
new file mode 100644
index 000000000..7e70b51dd
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/resize-actions.ts
@@ -0,0 +1,867 @@
+/**
+ * Resize (transform handles) commands using zustand-commander.
+ *
+ * These commands manage resizing nodes via corner/edge handles.
+ * Uses undoable actions for undo/redo support.
+ */
+
+import type { FlexDirection } from "@voidhash/mimic-schema";
+import { ScreenNode, ScrollViewNode, ShapeNode, ViewNode } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../designer-commander";
+import { selectDocumentRoot } from "../utils/document-root";
+import type { DesignerStoreState, ResizeHandle, ResizeState } from "../designer-store-state";
+import type { BoundingBox, Point } from "../utils/bounding-box";
+import { calculateCombinedBoundingBox } from "../utils/bounding-box";
+import { findTypedNode, type DesignerDocumentRoot } from "../utils/node-proxies";
+import { getFlexDirection, isFlexParent } from "../utils/node-type-helpers";
+import { normalizeFlexSizing } from "../utils/normalize-flex-sizing";
+import { selectedNodeIdsFromPresence } from "../utils/presence";
+import {
+  getSelectedStateIdForNode,
+  getStateById,
+  isStateCapableNode,
+  mapStyleOverridesForSnapshot,
+  resolveEffectiveStyle,
+  stateStyleOverridesToRecord,
+  type StyleOverrideRecord,
+} from "../utils/state-overrides";
+import { findNodeById, findParentNode, flattenTree } from "../utils/tree";
+
+// =============================================================================
+// Constants
+// =============================================================================
+
+const CORNER_HANDLES = new Set<ResizeHandle>(["nw", "ne", "sw", "se"]);
+const HORIZONTAL_EDGE_HANDLES = new Set<ResizeHandle>(["e", "w"]);
+const VERTICAL_EDGE_HANDLES = new Set<ResizeHandle>(["n", "s"]);
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Extract node types from the snapshot tree.
+ */
+function getNodeTypesFromSnapshot(root: SnapshotNode): Record<string, string> {
+  const types: Record<string, string> = {};
+  for (const node of flattenTree(root)) {
+    types[node.id] = node.type;
+  }
+  return types;
+}
+
+/**
+ * Calculate new bounds based on handle being dragged.
+ */
+function calculateNewBounds(
+  handle: ResizeHandle,
+  initialBounds: BoundingBox,
+  startPoint: Point,
+  currentPoint: Point,
+): BoundingBox {
+  const deltaX = currentPoint.x - startPoint.x;
+  const deltaY = currentPoint.y - startPoint.y;
+
+  let { x, y, width, height } = initialBounds;
+
+  switch (handle) {
+    case "nw":
+      x = initialBounds.x + deltaX;
+      y = initialBounds.y + deltaY;
+      width = initialBounds.width - deltaX;
+      height = initialBounds.height - deltaY;
+      break;
+    case "n":
+      y = initialBounds.y + deltaY;
+      height = initialBounds.height - deltaY;
+      break;
+    case "ne":
+      y = initialBounds.y + deltaY;
+      width = initialBounds.width + deltaX;
+      height = initialBounds.height - deltaY;
+      break;
+    case "e":
+      width = initialBounds.width + deltaX;
+      break;
+    case "se":
+      width = initialBounds.width + deltaX;
+      height = initialBounds.height + deltaY;
+      break;
+    case "s":
+      height = initialBounds.height + deltaY;
+      break;
+    case "sw":
+      x = initialBounds.x + deltaX;
+      width = initialBounds.width - deltaX;
+      height = initialBounds.height + deltaY;
+      break;
+    case "w":
+      x = initialBounds.x + deltaX;
+      width = initialBounds.width - deltaX;
+      break;
+  }
+
+  // Clamp to minimum size
+  width = Math.max(1, width);
+  height = Math.max(1, height);
+
+  return { height, width, x, y };
+}
+
+/** Reads a style value as the stored size shape (`"auto"` = hug contents). */
+function sizeFromStyleValue(value: unknown): number | "auto" {
+  return typeof value === "number" ? value : "auto";
+}
+
+function numberOrNull(value: unknown): number | null {
+  return typeof value === "number" ? value : null;
+}
+
+function flexFromStyleValue(value: unknown): number | undefined {
+  return typeof value === "number" ? value : undefined;
+}
+
+function alignSelfFromStyleValue(value: unknown): string {
+  return typeof value === "string" ? value : "auto";
+}
+
+type AlignSelfValue = "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline";
+
+function asAlignSelf(value: string | undefined): AlignSelfValue | undefined {
+  switch (value) {
+    case "auto":
+    case "flex-start":
+    case "center":
+    case "flex-end":
+    case "stretch":
+    case "baseline":
+      return value;
+    default:
+      return undefined;
+  }
+}
+
+/**
+ * Bivariant structural view of the per-state overrides proxy, so generic
+ * string-keyed override writes typecheck against the schema-typed proxies.
+ */
+interface StateOverridesProxy {
+  overrides: {
+    style: {
+      set(value: Record<string, unknown>): void;
+      update(value: Record<string, unknown>): void;
+    };
+  };
+}
+
+function resolveStateOverridesProxy(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  nodeType: "screen" | "view" | "scrollView" | "shape",
+  stateId: string,
+): StateOverridesProxy | undefined {
+  switch (nodeType) {
+    case "screen":
+      return findTypedNode(root, nodeId, ScreenNode)?.data.states.findById(stateId)?.value;
+    case "view":
+      return findTypedNode(root, nodeId, ViewNode)?.data.states.findById(stateId)?.value;
+    case "scrollView":
+      return findTypedNode(root, nodeId, ScrollViewNode)?.data.states.findById(stateId)?.value;
+    case "shape":
+      return findTypedNode(root, nodeId, ShapeNode)?.data.states.findById(stateId)?.value;
+  }
+}
+
+/**
+ * Bivariant structural view of the flex-sizing style proxy shared by `view` and
+ * `scrollView` nodes (identical style schemas). Lets the resize writes target
+ * either node type through one code path (mirrors the seam in `move-actions`).
+ */
+interface ViewLikeStyleProxy {
+  data: {
+    style: {
+      width: { get(): unknown; set(value: number | "auto"): void };
+      height: { get(): unknown; set(value: number | "auto"): void };
+      flex: { get(): unknown; set(value: number): void };
+      alignSelf: { get(): unknown; set(value: AlignSelfValue): void };
+      update(value: Record<string, unknown>): void;
+    };
+  };
+}
+
+/**
+ * Resolves a `view`/`scrollView` node to its flex-sizing style proxy. Both carry
+ * the identical style schema, so the resize path writes to either uniformly.
+ */
+function resolveViewLikeProxy(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  nodeType: "view" | "scrollView",
+): ViewLikeStyleProxy | undefined {
+  const proxy =
+    nodeType === "view"
+      ? findTypedNode(root, nodeId, ViewNode)
+      : findTypedNode(root, nodeId, ScrollViewNode);
+  return proxy as ViewLikeStyleProxy | undefined;
+}
+
+function upsertStateStyleOverride(
+  stateProxy: StateOverridesProxy,
+  key: string,
+  value: unknown,
+): void {
+  stateProxy.overrides.style.update({
+    [key]: value,
+  });
+}
+
+function removeStateStyleOverride(stateProxy: StateOverridesProxy, key: string): void {
+  stateProxy.overrides.style.update({
+    [key]: undefined,
+  });
+}
+
+/**
+ * Get parent flex direction for a node.
+ */
+function getParentFlexDirection(root: SnapshotNode, nodeId: string): FlexDirection | null {
+  const parent = findParentNode<SnapshotNode>(root, nodeId);
+  if (!parent) return null;
+
+  return isFlexParent(parent) ? getFlexDirection(parent) : null;
+}
+
+// =============================================================================
+// Resize Commands
+// =============================================================================
+
+/**
+ * Start resize operation.
+ * Captures initial state for all selected nodes.
+ * For nodes in hug/fill mode, uses computed dimensions from bounding boxes
+ * to automatically switch to fixed mode.
+ */
+export const startResize = commander.action<{
+  handle: ResizeHandle;
+  screenPoint: Point;
+}>((ctx, params) => {
+  const state = ctx.getState();
+  const { canvas, mimic } = state;
+  const selectedNodeIds = selectedNodeIdsFromPresence(mimic.presence?.self);
+
+  if (selectedNodeIds.length === 0) {
+    return;
+  }
+
+  // Calculate combined bounding box
+  const combinedBounds = calculateCombinedBoundingBox([...selectedNodeIds], canvas.boundingBoxes);
+  if (!combinedBounds) {
+    return;
+  }
+
+  const root = selectDocumentRoot(state);
+  const nodeTypes = getNodeTypesFromSnapshot(root);
+
+  // Capture initial dimensions for resize calculations
+  const initialNodeDimensions: ResizeState["initialNodeDimensions"] = {};
+  // Capture original document state for undo (includes flex/alignSelf)
+  const originalDocumentState: ResizeState["originalDocumentState"] = {};
+  const stateOverrideTargets: ResizeState["stateOverrideTargets"] = {};
+  const originalStateOverrideStyles: ResizeState["originalStateOverrideStyles"] = {};
+
+  for (const nodeId of selectedNodeIds) {
+    const nodeType = nodeTypes[nodeId];
+
+    if (!nodeType) {
+      continue;
+    }
+
+    // Skip text nodes (no explicit dimensions)
+    if (nodeType === "text") {
+      continue;
+    }
+
+    // Get computed dimensions from bounding box for nodes in hug/fill mode
+    const boundingBox = canvas.boundingBoxes[nodeId];
+    const computedWidth = boundingBox ? Math.round(boundingBox.width) : null;
+    const computedHeight = boundingBox ? Math.round(boundingBox.height) : null;
+    const snapshotNode = findNodeById<SnapshotNode>(root, nodeId);
+    const selectedStateId =
+      snapshotNode && isStateCapableNode(snapshotNode)
+        ? getSelectedStateIdForNode(state.stateOverrideSelection, nodeId)
+        : null;
+    const selectedState =
+      snapshotNode && isStateCapableNode(snapshotNode)
+        ? getStateById(snapshotNode, selectedStateId)
+        : null;
+    if (selectedState && selectedStateId) {
+      stateOverrideTargets[nodeId] = selectedStateId;
+      originalStateOverrideStyles[nodeId] = mapStyleOverridesForSnapshot(
+        stateStyleOverridesToRecord(selectedState),
+      );
+    }
+
+    // Get the effective style (selected state override applied) for the node
+    if (nodeType === "screen" && snapshotNode?.type === "screen") {
+      const style = resolveEffectiveStyle(snapshotNode, selectedStateId);
+      initialNodeDimensions[nodeId] = {
+        height: numberOrNull(style["height"]) ?? computedHeight,
+        type: "screen",
+        width: numberOrNull(style["width"]) ?? computedWidth,
+      };
+      originalDocumentState[nodeId] = {
+        width: sizeFromStyleValue(style["width"]),
+        height: sizeFromStyleValue(style["height"]),
+        flex: undefined,
+        alignSelf: "auto",
+        type: "screen",
+      };
+    } else if (
+      (nodeType === "view" || nodeType === "scrollView") &&
+      (snapshotNode?.type === "view" || snapshotNode?.type === "scrollView")
+    ) {
+      const style = resolveEffectiveStyle(snapshotNode, selectedStateId);
+      // Use stored dimensions if explicit, otherwise use computed dimensions.
+      // This enables resizing nodes in hug/fill mode by auto-switching to fixed.
+      const width = numberOrNull(style["width"]) ?? computedWidth;
+      const height = numberOrNull(style["height"]) ?? computedHeight;
+
+      // Include flex nodes if we have any dimension (explicit or computed)
+      if (width !== null || height !== null) {
+        initialNodeDimensions[nodeId] = {
+          height,
+          type: snapshotNode.type,
+          width,
+        };
+      }
+
+      // Always capture original document state for undo
+      originalDocumentState[nodeId] = {
+        width: sizeFromStyleValue(style["width"]),
+        height: sizeFromStyleValue(style["height"]),
+        flex: flexFromStyleValue(style["flex"]),
+        alignSelf: alignSelfFromStyleValue(style["alignSelf"]),
+        type: snapshotNode.type,
+      };
+    } else if (nodeType === "shape" && snapshotNode?.type === "shape") {
+      const style = snapshotNode.data.style;
+      const width = numberOrNull(style.width) ?? computedWidth;
+      const height = numberOrNull(style.height) ?? computedHeight;
+
+      if (width !== null || height !== null) {
+        initialNodeDimensions[nodeId] = {
+          height,
+          type: "shape",
+          width,
+        };
+      }
+
+      originalDocumentState[nodeId] = {
+        width: style.width,
+        height: style.height,
+        flex: style.flex,
+        alignSelf: style.alignSelf,
+        type: "shape",
+      };
+    }
+  }
+
+  ctx.setState({
+    highlightedNodeId: null,
+    resize: {
+      currentNodeDimensions: {},
+      handle: params.handle,
+      initialCombinedBounds: combinedBounds,
+      initialNodeDimensions,
+      originalStateOverrideStyles,
+      originalDocumentState,
+      stateOverrideTargets,
+      isActive: true,
+      startScreenPoint: params.screenPoint,
+    },
+  });
+});
+
+/**
+ * Update resize during mouse move.
+ * Calculates and applies new dimensions to all affected nodes.
+ * Uses ctx.transaction for draft-aware updates that don't sync to server during drag.
+ */
+export const updateResize = commander.undoableAction<
+  { screenPoint: Point; maintainAspectRatio: boolean },
+  Record<string, never>
+>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    const { canvas, resize } = state;
+
+    if (
+      !resize.isActive ||
+      !resize.handle ||
+      !resize.initialCombinedBounds ||
+      !resize.startScreenPoint
+    ) {
+      return {};
+    }
+
+    // Convert screen delta to canvas delta (account for zoom)
+    const deltaScreenX = params.screenPoint.x - resize.startScreenPoint.x;
+    const deltaScreenY = params.screenPoint.y - resize.startScreenPoint.y;
+    const deltaCanvasX = deltaScreenX / canvas.scale;
+    const deltaCanvasY = deltaScreenY / canvas.scale;
+
+    // Calculate new combined bounds in canvas coordinates
+    const initial = resize.initialCombinedBounds;
+    const newBounds = calculateNewBounds(
+      resize.handle,
+      initial,
+      { x: 0, y: 0 },
+      { x: deltaCanvasX, y: deltaCanvasY },
+    );
+
+    let scaleX = newBounds.width / initial.width;
+    let scaleY = newBounds.height / initial.height;
+
+    // Determine which dimensions to scale based on handle type
+    const isCornerHandle = CORNER_HANDLES.has(resize.handle);
+    const isHorizontalEdge = HORIZONTAL_EDGE_HANDLES.has(resize.handle);
+    const isVerticalEdge = VERTICAL_EDGE_HANDLES.has(resize.handle);
+
+    if (params.maintainAspectRatio) {
+      const hasValidInitialBounds =
+        initial.width > 0 &&
+        initial.height > 0 &&
+        Number.isFinite(initial.width) &&
+        Number.isFinite(initial.height);
+
+      if (hasValidInitialBounds) {
+        const normalizedDeltaX = Math.abs(deltaCanvasX / initial.width);
+        const normalizedDeltaY = Math.abs(deltaCanvasY / initial.height);
+        const widthScale = scaleX;
+        const heightScale = scaleY;
+
+        let uniformScale = widthScale;
+        if (isVerticalEdge) {
+          uniformScale = heightScale;
+        } else if (isCornerHandle) {
+          uniformScale = normalizedDeltaX >= normalizedDeltaY ? widthScale : heightScale;
+        }
+
+        if (Number.isFinite(uniformScale) && uniformScale > 0) {
+          scaleX = uniformScale;
+          scaleY = uniformScale;
+        }
+      }
+    }
+
+    const root = selectDocumentRoot(state);
+
+    // Compute new dimensions
+    const currentNodeDimensions: ResizeState["currentNodeDimensions"] = {};
+
+    for (const [nodeId, dims] of Object.entries(resize.initialNodeDimensions)) {
+      let newWidth = dims.width;
+      let newHeight = dims.height;
+
+      const shouldScaleWidth = params.maintainAspectRatio || isCornerHandle || isHorizontalEdge;
+      const shouldScaleHeight = params.maintainAspectRatio || isCornerHandle || isVerticalEdge;
+
+      if (dims.width !== null && shouldScaleWidth) {
+        newWidth = Math.max(1, Math.round(dims.width * scaleX));
+      }
+      if (dims.height !== null && shouldScaleHeight) {
+        newHeight = Math.max(1, Math.round(dims.height * scaleY));
+      }
+
+      currentNodeDimensions[nodeId] = {
+        height: newHeight,
+        type: dims.type,
+        width: newWidth,
+      };
+    }
+
+    // Apply changes using ctx.transaction for draft-aware updates
+    // This prevents syncing to server during drag (batched until commit)
+    ctx.transaction((transactionRoot) => {
+      for (const [nodeId, dims] of Object.entries(currentNodeDimensions)) {
+        const stateId = resize.stateOverrideTargets[nodeId];
+        if (dims.type === "screen") {
+          const proxy = findTypedNode(transactionRoot, nodeId, ScreenNode);
+          if (proxy) {
+            if (stateId) {
+              const stateProxy = resolveStateOverridesProxy(
+                transactionRoot,
+                nodeId,
+                "screen",
+                stateId,
+              );
+              if (!stateProxy) {
+                continue;
+              }
+              if (dims.width !== null) {
+                const baseWidth = proxy.data.style.width.get();
+                if (dims.width === baseWidth) {
+                  removeStateStyleOverride(stateProxy, "width");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "width", dims.width);
+                }
+              }
+              if (dims.height !== null) {
+                const baseHeight = proxy.data.style.height.get();
+                if (dims.height === baseHeight) {
+                  removeStateStyleOverride(stateProxy, "height");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "height", dims.height);
+                }
+              }
+              continue;
+            }
+            if (dims.width !== null) {
+              proxy.data.style.width.set(dims.width);
+            }
+            if (dims.height !== null) {
+              proxy.data.style.height.set(dims.height);
+            }
+          }
+        } else if (dims.type === "view" || dims.type === "scrollView") {
+          const proxy = resolveViewLikeProxy(transactionRoot, nodeId, dims.type);
+          if (proxy) {
+            const originalState = resize.originalDocumentState[nodeId];
+            const parentDirection = getParentFlexDirection(root, nodeId);
+
+            // Normalize sizing to clear fill indicators when setting explicit dimensions
+            // This ensures the preview shows correctly (fill indicators override explicit dimensions)
+            const normalized = normalizeFlexSizing(
+              {
+                width: dims.width,
+                height: dims.height,
+              },
+              {
+                width: originalState?.width ?? null,
+                height: originalState?.height ?? null,
+                flex: originalState?.flex ?? null,
+                alignSelf: asAlignSelf(originalState?.alignSelf),
+              },
+              parentDirection,
+            );
+
+            if (stateId) {
+              const stateProxy = resolveStateOverridesProxy(
+                transactionRoot,
+                nodeId,
+                dims.type,
+                stateId,
+              );
+              if (!stateProxy) {
+                continue;
+              }
+              if (dims.width !== null) {
+                const baseWidth = proxy.data.style.width.get();
+                if (dims.width === baseWidth) {
+                  removeStateStyleOverride(stateProxy, "width");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "width", dims.width);
+                }
+              }
+              if (dims.height !== null) {
+                const baseHeight = proxy.data.style.height.get();
+                if (dims.height === baseHeight) {
+                  removeStateStyleOverride(stateProxy, "height");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "height", dims.height);
+                }
+              }
+              if (normalized.flex !== undefined) {
+                const baseFlex = proxy.data.style.flex.get();
+                if (normalized.flex === null || normalized.flex === baseFlex) {
+                  // "Clear flex" overrides cannot be expressed — inherit the base.
+                  removeStateStyleOverride(stateProxy, "flex");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "flex", normalized.flex);
+                }
+              }
+              if (normalized.alignSelf !== undefined) {
+                const baseAlignSelf = proxy.data.style.alignSelf.get();
+                if (normalized.alignSelf === baseAlignSelf) {
+                  removeStateStyleOverride(stateProxy, "alignSelf");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "alignSelf", normalized.alignSelf);
+                }
+              }
+              continue;
+            }
+
+            if (dims.width !== null) {
+              proxy.data.style.width.set(dims.width);
+            }
+            if (dims.height !== null) {
+              proxy.data.style.height.set(dims.height);
+            }
+            // Apply normalization: clear fill indicators if needed
+            // This is critical for the preview to work correctly
+            if (normalized.flex !== undefined) {
+              if (normalized.flex === null) {
+                proxy.data.style.update({ flex: undefined });
+              } else {
+                proxy.data.style.flex.set(normalized.flex);
+              }
+            }
+            if (normalized.alignSelf !== undefined) {
+              proxy.data.style.alignSelf.set(normalized.alignSelf);
+            }
+          }
+        } else if (dims.type === "shape") {
+          const proxy = findTypedNode(transactionRoot, nodeId, ShapeNode);
+          if (proxy) {
+            if (dims.width !== null) {
+              proxy.data.style.width.set(dims.width);
+            }
+            if (dims.height !== null) {
+              proxy.data.style.height.set(dims.height);
+            }
+          }
+        }
+      }
+    });
+
+    ctx.setState({
+      resize: {
+        ...resize,
+        currentNodeDimensions,
+      },
+    });
+
+    return {};
+  },
+  // Undo is handled by endResize, not individual updateResize calls
+  () => {},
+);
+
+/**
+ * End resize and commit changes.
+ * This is undoable - stores previous dimensions for all affected nodes.
+ * Applies normalization to clear fill indicators when setting explicit dimensions.
+ */
+export const endResize = commander.undoableAction<
+  Record<string, never>,
+  {
+    previousState: ResizeState["originalDocumentState"];
+    previousStateOverrides: Record<string, StyleOverrideRecord>;
+    stateOverrideTargets: Record<string, string>;
+    finalDimensions: ResizeState["currentNodeDimensions"];
+  }
+>(
+  (ctx) => {
+    const state = ctx.getState();
+    const { mimic, resize } = state;
+
+    if (!resize.isActive) {
+      ctx.setState({
+        resize: {
+          currentNodeDimensions: {},
+          handle: null,
+          initialCombinedBounds: null,
+          initialNodeDimensions: {},
+          originalStateOverrideStyles: {},
+          originalDocumentState: {},
+          stateOverrideTargets: {},
+          isActive: false,
+          startScreenPoint: null,
+        },
+      });
+      return {
+        finalDimensions: {},
+        previousState: {},
+        previousStateOverrides: {},
+        stateOverrideTargets: {},
+      };
+    }
+
+    // Capture final dimensions from local state
+    const finalDimensions = { ...resize.currentNodeDimensions };
+
+    // Use original document state captured at startResize for undo
+    const previousState = { ...resize.originalDocumentState };
+    const previousStateOverrides = { ...resize.originalStateOverrideStyles };
+    const stateOverrideTargets = { ...resize.stateOverrideTargets };
+
+    const root = selectDocumentRoot(state);
+
+    // Apply normalization (clear fill indicators) - dimensions already applied in updateResize
+    mimic.document.transaction((transactionRoot) => {
+      for (const [nodeId, dims] of Object.entries(finalDimensions)) {
+        const stateId = stateOverrideTargets[nodeId];
+        if (dims.type === "view" || dims.type === "scrollView") {
+          const proxy = resolveViewLikeProxy(transactionRoot, nodeId, dims.type);
+          if (proxy) {
+            const prev = previousState[nodeId];
+            const parentDirection = getParentFlexDirection(root, nodeId);
+
+            // Normalize sizing to clear fill indicators when setting explicit dimensions
+            const normalized = normalizeFlexSizing(
+              {
+                width: dims.width,
+                height: dims.height,
+              },
+              {
+                width: prev?.width ?? null,
+                height: prev?.height ?? null,
+                flex: prev?.flex ?? null,
+                alignSelf: asAlignSelf(prev?.alignSelf),
+              },
+              parentDirection,
+            );
+
+            if (stateId) {
+              const stateProxy = resolveStateOverridesProxy(
+                transactionRoot,
+                nodeId,
+                dims.type,
+                stateId,
+              );
+              if (!stateProxy) {
+                continue;
+              }
+              if (normalized.flex !== undefined) {
+                const baseFlex = proxy.data.style.flex.get();
+                if (normalized.flex === null || normalized.flex === baseFlex) {
+                  removeStateStyleOverride(stateProxy, "flex");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "flex", normalized.flex);
+                }
+              }
+              if (normalized.alignSelf !== undefined) {
+                const baseAlignSelf = proxy.data.style.alignSelf.get();
+                if (normalized.alignSelf === baseAlignSelf) {
+                  removeStateStyleOverride(stateProxy, "alignSelf");
+                } else {
+                  upsertStateStyleOverride(stateProxy, "alignSelf", normalized.alignSelf);
+                }
+              }
+              continue;
+            }
+
+            if (normalized.flex !== undefined) {
+              if (normalized.flex === null) {
+                proxy.data.style.update({ flex: undefined });
+              } else {
+                proxy.data.style.flex.set(normalized.flex);
+              }
+            }
+            if (normalized.alignSelf !== undefined) {
+              proxy.data.style.alignSelf.set(normalized.alignSelf);
+            }
+          }
+        }
+      }
+    });
+
+    ctx.setState({
+      resize: {
+        currentNodeDimensions: {},
+        handle: null,
+        initialCombinedBounds: null,
+        initialNodeDimensions: {},
+        originalStateOverrideStyles: {},
+        originalDocumentState: {},
+        stateOverrideTargets: {},
+        isActive: false,
+        startScreenPoint: null,
+      },
+    });
+
+    return {
+      finalDimensions,
+      previousState,
+      previousStateOverrides,
+      stateOverrideTargets,
+    };
+  },
+  (ctx, _params, result) => {
+    // Undo: restore previous state including width, height, flex, alignSelf
+    const { mimic } = ctx.getState();
+
+    mimic.document.transaction((root) => {
+      for (const [nodeId, prev] of Object.entries(result.previousState)) {
+        const stateId = result.stateOverrideTargets[nodeId];
+        if (stateId) {
+          const stateProxy =
+            prev.type === "screen" ||
+            prev.type === "view" ||
+            prev.type === "scrollView" ||
+            prev.type === "shape"
+              ? resolveStateOverridesProxy(root, nodeId, prev.type, stateId)
+              : undefined;
+          if (!stateProxy) {
+            continue;
+          }
+          stateProxy.overrides.style.set(result.previousStateOverrides[nodeId] ?? {});
+          continue;
+        }
+
+        if (prev.type === "screen") {
+          const proxy = findTypedNode(root, nodeId, ScreenNode);
+          if (proxy) {
+            if (typeof prev.width === "number") {
+              proxy.data.style.width.set(prev.width);
+            }
+            if (typeof prev.height === "number") {
+              proxy.data.style.height.set(prev.height);
+            }
+          }
+        } else if (prev.type === "view" || prev.type === "scrollView") {
+          const proxy = resolveViewLikeProxy(root, nodeId, prev.type);
+          if (proxy) {
+            proxy.data.style.width.set(prev.width);
+            proxy.data.style.height.set(prev.height);
+            if (prev.flex === undefined) {
+              proxy.data.style.update({ flex: undefined });
+            } else {
+              proxy.data.style.flex.set(prev.flex);
+            }
+            const alignSelf = asAlignSelf(prev.alignSelf);
+            if (alignSelf !== undefined) {
+              proxy.data.style.alignSelf.set(alignSelf);
+            }
+          }
+        } else if (prev.type === "shape") {
+          const proxy = findTypedNode(root, nodeId, ShapeNode);
+          if (proxy) {
+            proxy.data.style.width.set(prev.width);
+            proxy.data.style.height.set(prev.height);
+          }
+        }
+      }
+    });
+  },
+);
+
+/**
+ * Cancel resize without committing changes.
+ * The draft system's discardDraft() handles reverting mimic changes.
+ */
+export const cancelResize = commander.action((ctx) => {
+  const state = ctx.getState();
+  const { resize } = state;
+
+  if (!resize.isActive) {
+    return;
+  }
+
+  // Reset resize state - mimic revert is handled by discardDraft() in the component
+  ctx.setState({
+    resize: {
+      currentNodeDimensions: {},
+      handle: null,
+      initialCombinedBounds: null,
+      initialNodeDimensions: {},
+      originalStateOverrideStyles: {},
+      originalDocumentState: {},
+      stateOverrideTargets: {},
+      isActive: false,
+      startScreenPoint: null,
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts
new file mode 100644
index 000000000..ecd650468
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts
@@ -0,0 +1,139 @@
+import { describe, expect, test, vi } from "vite-plus/test";
+
+import { clearSelection, selectNode, unselectNode } from "./selection-actions";
+
+interface PresenceSnapshotFixture {
+  cursor?: { x: number; y: number };
+  name?: string;
+  selectedNodeIds: { id: string; pos: string; value: string }[];
+  user: { color: string; name: string };
+}
+
+interface PresenceInputFixture {
+  cursor?: { x: number; y: number };
+  name?: string;
+  selectedNodeIds?: readonly string[];
+  user: { color: string; name: string };
+}
+
+type SelectionState = {
+  highlightedNodeId: string | null;
+  stateOverrideSelection: Record<string, string | null>;
+  mimic: {
+    snapshot: Array<{
+      id: string;
+      type: string;
+      children: Array<{ id: string; type: string; children: unknown[] }>;
+    }>;
+    document: {
+      presence: {
+        self: () => PresenceSnapshotFixture;
+        set: (value: PresenceInputFixture) => void;
+      };
+    };
+  };
+};
+
+function presenceSnapshot(selectedNodeIds: string[]): PresenceSnapshotFixture {
+  return {
+    selectedNodeIds: selectedNodeIds.map((value, index) => ({
+      id: `entry-${index}`,
+      pos: `a${index}`,
+      value,
+    })),
+    user: { color: "#fff", name: "Tester" },
+  };
+}
+
+function createSelectionCtx(initial: {
+  selectedNodeIds: string[];
+  stateOverrideSelection: Record<string, string | null>;
+}) {
+  let presence = presenceSnapshot(initial.selectedNodeIds);
+  let state: SelectionState = {
+    highlightedNodeId: null,
+    mimic: {
+      document: {
+        presence: {
+          self: () => presence,
+          set: (value) => {
+            presence = presenceSnapshot([...(value.selectedNodeIds ?? [])]);
+          },
+        },
+      },
+      snapshot: [
+        {
+          children: [
+            { children: [], id: "node-1", type: "view" },
+            { children: [], id: "node-2", type: "view" },
+          ],
+          id: "root",
+          type: "root",
+        },
+      ],
+    },
+    stateOverrideSelection: initial.stateOverrideSelection,
+  };
+
+  const ctx = {
+    dispatch: vi.fn(() => () => undefined),
+    getState: () => state,
+    setState: (partial: Partial<SelectionState>) => {
+      state = { ...state, ...partial };
+    },
+    transaction: vi.fn(),
+  };
+
+  return {
+    ctx,
+    getSelectedNodeIds: () => presence.selectedNodeIds.map((entry) => entry.value),
+    getState: () => state,
+  };
+}
+
+describe("selection actions", () => {
+  test("single select does not reset per-node state selections", () => {
+    const initialSelection = { "node-1": "state-1" };
+    const { ctx, getState, getSelectedNodeIds } = createSelectionCtx({
+      selectedNodeIds: ["node-1"],
+      stateOverrideSelection: initialSelection,
+    });
+
+    selectNode.fn(ctx as never, { id: "node-2", many: false });
+
+    expect(getSelectedNodeIds()).toEqual(["node-2"]);
+    expect(getState().stateOverrideSelection).toEqual(initialSelection);
+    expect(ctx.dispatch).not.toHaveBeenCalled();
+  });
+
+  test("multi-select does not reset per-node state selections", () => {
+    const initialSelection = { "node-1": "state-1", "node-2": "state-2" };
+    const { ctx, getState, getSelectedNodeIds } = createSelectionCtx({
+      selectedNodeIds: ["node-1"],
+      stateOverrideSelection: initialSelection,
+    });
+
+    selectNode.fn(ctx as never, { id: "node-2", many: true });
+
+    expect(getSelectedNodeIds()).toEqual(["node-1", "node-2"]);
+    expect(getState().stateOverrideSelection).toEqual(initialSelection);
+    expect(ctx.dispatch).not.toHaveBeenCalled();
+  });
+
+  test("unselect and clear keep remembered per-node state selections", () => {
+    const initialSelection = { "node-1": "state-1", "node-2": "state-2" };
+    const { ctx, getState, getSelectedNodeIds } = createSelectionCtx({
+      selectedNodeIds: ["node-1", "node-2"],
+      stateOverrideSelection: initialSelection,
+    });
+
+    unselectNode.fn(ctx as never, { id: "node-1" });
+    expect(getSelectedNodeIds()).toEqual(["node-2"]);
+    expect(getState().stateOverrideSelection).toEqual(initialSelection);
+
+    clearSelection.fn(ctx as never, undefined as never);
+    expect(getSelectedNodeIds()).toEqual([]);
+    expect(getState().stateOverrideSelection).toEqual(initialSelection);
+    expect(ctx.dispatch).not.toHaveBeenCalled();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.ts
new file mode 100644
index 000000000..3bf50bfe8
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.ts
@@ -0,0 +1,135 @@
+/**
+ * Selection commands using zustand-commander.
+ *
+ * These commands manage the currently selected nodes.
+ * Selection state is stored in presence for real-time collaboration.
+ */
+
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import { commander } from "../designer-commander";
+import type { DesignerStoreState } from "../designer-store-state";
+import { selectDocumentRoot } from "../utils/document-root";
+import { presenceInputFromSnapshot } from "../utils/presence";
+import { findNodeById, flattenTree } from "../utils/tree";
+
+// =============================================================================
+// Selection Commands
+// =============================================================================
+
+/**
+ * Select a node.
+ * If `many` is false, clears current selection and selects only this node.
+ * If `many` is true, adds to the current selection (multi-select mode).
+ */
+export const selectNode = commander.action<{ id: string; many: boolean }>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic } = state;
+
+  // Get current presence data
+  const currentPresence = mimic.document.presence?.self();
+  if (!currentPresence) {
+    return;
+  }
+
+  const presenceInput = presenceInputFromSnapshot(currentPresence);
+  const selectedNodeIds = presenceInput.selectedNodeIds;
+
+  // If not selecting multiple nodes, clear the selection and select the new node
+  if (!params.many) {
+    // Update presence for collaboration (set entire presence object)
+    mimic.document.presence?.set({
+      ...presenceInput,
+      selectedNodeIds: [params.id],
+    });
+    ctx.setState({
+      highlightedNodeId: params.id,
+    });
+    return;
+  }
+
+  // Multi-select mode: combine the new selection
+  const root = selectDocumentRoot(state);
+
+  const nodeSubtree = findNodeById<SnapshotNode>(root, params.id);
+  if (!nodeSubtree) {
+    return;
+  }
+
+  // Do not select if already selected as a child of another selected node
+  const allSelectedNodeIdsAndSubnodeIds = new Set(
+    selectedNodeIds.flatMap((id) =>
+      flattenTree(findNodeById<SnapshotNode>(root, id)).map((node) => node.id),
+    ),
+  );
+
+  if (allSelectedNodeIdsAndSubnodeIds.has(params.id)) {
+    return;
+  }
+
+  // Remove all children of the newly selected node
+  const nodeIdsToUnselect = new Set(
+    flattenTree(nodeSubtree)
+      .map((node) => node.id)
+      .filter((id) => id !== params.id),
+  );
+
+  const newSelectedNodeIds = [...selectedNodeIds, params.id].filter(
+    (id) => !nodeIdsToUnselect.has(id),
+  );
+
+  const uniqueSelectedNodeIds = [...new Set(newSelectedNodeIds)];
+
+  // Update presence for collaboration
+  mimic.document.presence?.set({
+    ...presenceInput,
+    selectedNodeIds: uniqueSelectedNodeIds,
+  });
+  ctx.setState({
+    highlightedNodeId: params.id,
+  });
+});
+
+/**
+ * Unselect a specific node.
+ */
+export const unselectNode = commander.action<{ id: string }>((ctx, params) => {
+  const state = ctx.getState();
+  const { mimic } = state;
+
+  const currentPresence = mimic.document.presence?.self();
+  if (!currentPresence) {
+    return;
+  }
+  const presenceInput = presenceInputFromSnapshot(currentPresence);
+  const newSelectedNodeIds = presenceInput.selectedNodeIds.filter((id) => id !== params.id);
+
+  // Update presence for collaboration
+  mimic.document.presence?.set({
+    ...presenceInput,
+    selectedNodeIds: newSelectedNodeIds,
+  });
+});
+
+/**
+ * Clear all selection.
+ */
+export const clearSelection = commander.action((ctx) => {
+  const state = ctx.getState();
+  const { mimic } = state;
+
+  const currentPresence = mimic.document.presence?.self();
+
+  // Update presence for collaboration
+  if (currentPresence) {
+    mimic.document.presence?.set({
+      ...presenceInputFromSnapshot(currentPresence),
+      selectedNodeIds: [],
+    });
+  }
+
+  // Reset highlight so deleted or previously selected nodes are fully deselected in UI.
+  ctx.setState({
+    highlightedNodeId: null,
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/state-override-selection-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/state-override-selection-actions.ts
new file mode 100644
index 000000000..2f7a81c05
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/state-override-selection-actions.ts
@@ -0,0 +1,21 @@
+import { commander } from "../designer-commander";
+import type { DesignerStoreState } from "../designer-store-state";
+import { setSelectedStateIdForNode } from "../utils/state-overrides";
+
+export interface SetStateOverrideSelectionParams {
+  nodeId: string;
+  stateId: string | null;
+}
+
+export const setStateOverrideSelection = commander.action<SetStateOverrideSelectionParams>(
+  (ctx, params) => {
+    const state = ctx.getState();
+    ctx.setState({
+      stateOverrideSelection: setSelectedStateIdForNode(
+        state.stateOverrideSelection,
+        params.nodeId,
+        params.stateId,
+      ),
+    });
+  },
+);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/tools-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/tools-actions.ts
new file mode 100644
index 000000000..a1ffdcc23
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/tools-actions.ts
@@ -0,0 +1,21 @@
+/**
+ * Tool commands using zustand-commander.
+ *
+ * These commands manage the currently active design tool.
+ */
+
+import { commander } from "../designer-commander";
+import type { AvailableTool, DesignerStoreState } from "../designer-store-state";
+
+// =============================================================================
+// Tool Commands
+// =============================================================================
+
+/**
+ * Set the currently active design tool.
+ */
+export const setActiveTool = commander.action<{ tool: AvailableTool }>((ctx, params) => {
+  ctx.setState({
+    tools: { activeTool: params.tool },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/action-registry.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/action-registry.ts
new file mode 100644
index 000000000..45f28c24e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/action-registry.ts
@@ -0,0 +1,186 @@
+/**
+ * Context menu action registry.
+ *
+ * A singleton registry that manages all context menu actions.
+ * Actions are registered once and can be queried for visibility/enablement
+ * based on the current context.
+ */
+
+import { isMacPlatform } from "../../utils/platform";
+import type {
+  ActionGroup,
+  ActionGroupMeta,
+  ContextMenuAction,
+  ContextMenuContext,
+  ResolvedAction,
+} from "./types";
+
+// =============================================================================
+// Group Configuration
+// =============================================================================
+
+/**
+ * Group metadata defining order and optional labels.
+ */
+const GROUP_META: ActionGroupMeta[] = [
+  { id: "clipboard", order: 1 },
+  { id: "create", order: 2 },
+  { id: "edit", order: 3 },
+  { id: "arrange", order: 4 },
+  { id: "selection", order: 5 },
+  { id: "delete", order: 6 },
+];
+
+// =============================================================================
+// Registry Class
+// =============================================================================
+
+class ActionRegistry {
+  private actions: Map<string, ContextMenuAction> = new Map();
+
+  /**
+   * Register an action with the registry.
+   * Throws if an action with the same ID already exists.
+   */
+  register(action: ContextMenuAction): void {
+    if (this.actions.has(action.id)) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn(`[ActionRegistry] Action "${action.id}" is already registered. Skipping.`);
+      }
+      return;
+    }
+    this.actions.set(action.id, action);
+  }
+
+  /**
+   * Register multiple actions at once.
+   */
+  registerAll(actions: ContextMenuAction[]): void {
+    for (const action of actions) {
+      this.register(action);
+    }
+  }
+
+  /**
+   * Get an action by ID.
+   */
+  get(id: string): ContextMenuAction | undefined {
+    return this.actions.get(id);
+  }
+
+  /**
+   * Get all registered actions.
+   */
+  getAll(): ContextMenuAction[] {
+    return Array.from(this.actions.values());
+  }
+
+  /**
+   * Get visible actions for the given context, resolved with enabled state.
+   */
+  getVisibleActions(ctx: ContextMenuContext): ResolvedAction[] {
+    const results: ResolvedAction[] = [];
+
+    for (const action of this.actions.values()) {
+      if (action.isVisible(ctx)) {
+        results.push({
+          action,
+          isEnabled: action.isEnabled(ctx),
+        });
+      }
+    }
+
+    return results;
+  }
+
+  /**
+   * Get visible actions grouped by their group, maintaining order.
+   * Returns an array of [group, actions] pairs in display order.
+   */
+  getGroupedActions(ctx: ContextMenuContext): Array<[ActionGroup, ResolvedAction[]]> {
+    const visibleActions = this.getVisibleActions(ctx);
+
+    // Group actions
+    const grouped = new Map<ActionGroup, ResolvedAction[]>();
+    for (const resolved of visibleActions) {
+      const { group } = resolved.action;
+      const groupActions = grouped.get(group);
+      if (groupActions) {
+        groupActions.push(resolved);
+      } else {
+        grouped.set(group, [resolved]);
+      }
+    }
+
+    // Sort by group order
+    const sortedGroups = GROUP_META.filter((meta) => grouped.has(meta.id)).sort(
+      (a, b) => a.order - b.order,
+    );
+
+    return sortedGroups.map((meta) => [meta.id, grouped.get(meta.id) ?? []]);
+  }
+
+  /**
+   * Find an action that matches the given keyboard event.
+   * Returns the action if found and visible/enabled, null otherwise.
+   */
+  findByShortcut(
+    ctx: ContextMenuContext,
+    event: {
+      key: string;
+      metaKey: boolean;
+      ctrlKey: boolean;
+      shiftKey: boolean;
+    },
+  ): ContextMenuAction | null {
+    const isMac = isMacPlatform();
+    const modKey = isMac ? event.metaKey : event.ctrlKey;
+
+    for (const action of this.actions.values()) {
+      if (!action.shortcut) {
+        continue;
+      }
+
+      const { key, modKey: needsMod = false, shiftKey: needsShift = false } = action.shortcut;
+
+      // Check key match (case-insensitive)
+      if (event.key.toLowerCase() !== key.toLowerCase()) {
+        continue;
+      }
+
+      // Check modifiers
+      if (needsMod !== modKey) {
+        continue;
+      }
+      if (needsShift !== event.shiftKey) {
+        continue;
+      }
+
+      // Check visibility and enabled state
+      if (!action.isVisible(ctx) || !action.isEnabled(ctx)) {
+        continue;
+      }
+
+      return action;
+    }
+
+    return null;
+  }
+
+  /**
+   * Clear all registered actions.
+   * Useful for testing or reinitialization.
+   */
+  clear(): void {
+    this.actions.clear();
+  }
+}
+
+// =============================================================================
+// Singleton Export
+// =============================================================================
+
+/**
+ * Global action registry instance.
+ */
+export const contextMenuRegistry = new ActionRegistry();
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/clipboard-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/clipboard-actions.ts
new file mode 100644
index 000000000..19d03024a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/clipboard-actions.ts
@@ -0,0 +1,87 @@
+/**
+ * Clipboard actions: Copy, Cut, Paste.
+ */
+
+import { copyNodes, cutNodes, pasteNodes } from "../../actions";
+import type { ContextMenuAction } from "../types";
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Check if there's a valid selection that can be copied/cut.
+ * Screen nodes cannot be copied/cut.
+ */
+function hasCopiableSelection(selectedNodeTypes: string[]): boolean {
+  if (selectedNodeTypes.length === 0) {
+    return false;
+  }
+  // Filter out screen nodes - they cannot be copied
+  return selectedNodeTypes.some((type) => type !== "screen");
+}
+
+// =============================================================================
+// Actions
+// =============================================================================
+
+export const copyAction: ContextMenuAction = {
+  id: "copy",
+  label: "Copy",
+  shortcut: { key: "c", modKey: true },
+  group: "clipboard",
+  isVisible: (ctx) => {
+    // Show when there's a selection (visible in context menu when nodes selected)
+    return ctx.selection.selectedNodeIds.length > 0;
+  },
+  isEnabled: (ctx) => {
+    // Enable when there's a copiable selection
+    return hasCopiableSelection(ctx.selection.selectedNodeTypes);
+  },
+  execute: (_ctx, dispatch) => {
+    dispatch(copyNodes)({});
+  },
+};
+
+export const cutAction: ContextMenuAction = {
+  id: "cut",
+  label: "Cut",
+  shortcut: { key: "x", modKey: true },
+  group: "clipboard",
+  isVisible: (ctx) => {
+    // Show when there's a selection
+    return ctx.selection.selectedNodeIds.length > 0;
+  },
+  isEnabled: (ctx) => {
+    // Enable when there's a copiable selection (same as copy)
+    return hasCopiableSelection(ctx.selection.selectedNodeTypes);
+  },
+  execute: (_ctx, dispatch) => {
+    dispatch(cutNodes)({});
+  },
+};
+
+export const pasteAction: ContextMenuAction = {
+  id: "paste",
+  label: "Paste",
+  shortcut: { key: "v", modKey: true },
+  group: "clipboard",
+  isVisible: () => {
+    // Always show paste - clipboard might have content
+    // We can't check clipboard synchronously, so always show
+    return true;
+  },
+  isEnabled: () => {
+    // Always enabled - the paste action itself handles finding a valid target
+    // (falls back to original parent or parent of selected node)
+    return true;
+  },
+  execute: (_ctx, dispatch) => {
+    dispatch(pasteNodes)({});
+  },
+};
+
+/**
+ * All clipboard actions for registration.
+ */
+export const clipboardActions: ContextMenuAction[] = [copyAction, cutAction, pasteAction];
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/create-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/create-actions.ts
new file mode 100644
index 000000000..11c92ec3f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/create-actions.ts
@@ -0,0 +1,218 @@
+/**
+ * Create actions: Add Row, Add Column, Add Text.
+ */
+
+import { canCreateLayoutChildren } from "@voidhash/mimic-schema";
+
+import { createScrollViewNode, createTextNode, createViewNode } from "../../actions";
+import { nodePassesSlotGate } from "../../utils/component-children";
+import type { SnapshotNode } from "../../utils/selection-level";
+import type { ContextMenuAction, ContextMenuContext } from "../types";
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+function findNodeById(node: SnapshotNode | null, nodeId: string): SnapshotNode | null {
+  if (!node) {
+    return null;
+  }
+  if (node.id === nodeId) {
+    return node;
+  }
+  for (const child of node.children ?? []) {
+    const found = findNodeById(child, nodeId);
+    if (found) {
+      return found;
+    }
+  }
+  return null;
+}
+
+/**
+ * Check if the current selection can accept children. Component targets
+ * additionally pass the manifest slot gate (slot-less components reject
+ * Add Row/Column/Text).
+ */
+function canAddChildren(ctx: ContextMenuContext): boolean {
+  const { selectedNodeIds, selectedNodeTypes } = ctx.selection;
+
+  // Need exactly one node selected
+  if (selectedNodeIds.length !== 1) {
+    return false;
+  }
+
+  // Must be a node type that can host layout primitives.
+  const type = selectedNodeTypes[0];
+  if (!canCreateLayoutChildren(type)) {
+    return false;
+  }
+
+  if (type === "component") {
+    const nodeId = selectedNodeIds[0];
+    const node = nodeId === undefined ? null : findNodeById(ctx.snapshot, nodeId);
+    return nodePassesSlotGate(node, ctx.componentCatalogByContentHash);
+  }
+
+  return true;
+}
+
+/**
+ * Get the parent ID for creating a new node.
+ */
+function getParentId(ctx: ContextMenuContext): string | null {
+  if (ctx.selection.selectedNodeIds.length !== 1) {
+    return null;
+  }
+  return ctx.selection.selectedNodeIds[0] ?? null;
+}
+
+// =============================================================================
+// Actions
+// =============================================================================
+
+export const addRowAction: ContextMenuAction = {
+  id: "add-row",
+  label: "Add Row",
+  group: "create",
+  isVisible: (ctx) => {
+    // Show when a container is selected
+    return canAddChildren(ctx);
+  },
+  isEnabled: () => {
+    // Always enabled when visible
+    return true;
+  },
+  execute: (ctx, dispatch) => {
+    const parentId = getParentId(ctx);
+    if (!parentId) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn(
+          `[ContextMenu] addRowAction: Unable to get parent ID. Selection: ${ctx.selection.selectedNodeIds.join(", ")}`,
+        );
+      }
+      return;
+    }
+
+    dispatch(createViewNode)({
+      initialValues: {
+        name: "Row",
+        style: { flexDirection: "row" },
+      },
+      insertAffordance: true,
+      parentId,
+    });
+  },
+};
+
+export const addColumnAction: ContextMenuAction = {
+  id: "add-column",
+  label: "Add Column",
+  group: "create",
+  isVisible: (ctx) => {
+    // Show when a container is selected
+    return canAddChildren(ctx);
+  },
+  isEnabled: () => {
+    // Always enabled when visible
+    return true;
+  },
+  execute: (ctx, dispatch) => {
+    const parentId = getParentId(ctx);
+    if (!parentId) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn(
+          `[ContextMenu] addColumnAction: Unable to get parent ID. Selection: ${ctx.selection.selectedNodeIds.join(", ")}`,
+        );
+      }
+      return;
+    }
+
+    dispatch(createViewNode)({
+      initialValues: {
+        name: "Column",
+        style: { flexDirection: "column" },
+      },
+      insertAffordance: true,
+      parentId,
+    });
+  },
+};
+
+export const addScrollViewAction: ContextMenuAction = {
+  id: "add-scroll-view",
+  label: "Add Scroll View",
+  group: "create",
+  isVisible: (ctx) => {
+    // Show when a container is selected
+    return canAddChildren(ctx);
+  },
+  isEnabled: () => {
+    // Always enabled when visible
+    return true;
+  },
+  execute: (ctx, dispatch) => {
+    const parentId = getParentId(ctx);
+    if (!parentId) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn(
+          `[ContextMenu] addScrollViewAction: Unable to get parent ID. Selection: ${ctx.selection.selectedNodeIds.join(", ")}`,
+        );
+      }
+      return;
+    }
+
+    dispatch(createScrollViewNode)({
+      initialValues: {
+        name: "ScrollView",
+        // Vertical scroll => column main-axis flow for its children.
+        style: { flexDirection: "column" },
+      },
+      insertAffordance: true,
+      parentId,
+    });
+  },
+};
+
+export const addTextAction: ContextMenuAction = {
+  id: "add-text",
+  label: "Add Text",
+  group: "create",
+  isVisible: (ctx) => {
+    // Show when a container is selected
+    return canAddChildren(ctx);
+  },
+  isEnabled: () => {
+    // Always enabled when visible
+    return true;
+  },
+  execute: (ctx, dispatch) => {
+    const parentId = getParentId(ctx);
+    if (!parentId) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn(
+          `[ContextMenu] addTextAction: Unable to get parent ID. Selection: ${ctx.selection.selectedNodeIds.join(", ")}`,
+        );
+      }
+      return;
+    }
+
+    dispatch(createTextNode)({
+      initialValues: {
+        name: "Text",
+        text: "New Text",
+      },
+      parentId,
+    });
+  },
+};
+
+/**
+ * All create actions for registration.
+ */
+export const createActions: ContextMenuAction[] = [
+  addRowAction,
+  addColumnAction,
+  addScrollViewAction,
+  addTextAction,
+];
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/delete-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/delete-actions.ts
new file mode 100644
index 000000000..822a5bbf3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/delete-actions.ts
@@ -0,0 +1,34 @@
+/**
+ * Delete actions.
+ */
+
+import { deleteNodes } from "../../actions";
+import type { ContextMenuAction } from "../types";
+
+// =============================================================================
+// Actions
+// =============================================================================
+
+export const deleteAction: ContextMenuAction = {
+  id: "delete",
+  label: "Delete",
+  shortcut: { key: "Backspace" },
+  group: "delete",
+  isVisible: (ctx) => {
+    // Show when there's a selection
+    return ctx.selection.selectedNodeIds.length > 0;
+  },
+  isEnabled: (ctx) => {
+    // Disable for screen nodes (and root, but that's never selectable)
+    // Enable if at least one selected node is not a screen
+    return ctx.selection.selectedNodeTypes.some((type) => type !== "screen");
+  },
+  execute: (_ctx, dispatch) => {
+    dispatch(deleteNodes)({});
+  },
+};
+
+/**
+ * All delete actions for registration.
+ */
+export const deleteActions: ContextMenuAction[] = [deleteAction];
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/index.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/index.ts
new file mode 100644
index 000000000..403cfa948
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/index.ts
@@ -0,0 +1,43 @@
+/**
+ * Context menu actions index.
+ *
+ * This module exports all actions and handles registration with the registry.
+ */
+
+import { contextMenuRegistry } from "../action-registry";
+
+import { clipboardActions } from "./clipboard-actions";
+import { createActions } from "./create-actions";
+import { deleteActions } from "./delete-actions";
+import { selectionActions } from "./selection-actions";
+
+// =============================================================================
+// Exports
+// =============================================================================
+
+export { clipboardActions } from "./clipboard-actions";
+export { createActions } from "./create-actions";
+export { deleteActions } from "./delete-actions";
+export { selectionActions } from "./selection-actions";
+
+// =============================================================================
+// Registration
+// =============================================================================
+
+/**
+ * All standard actions for the context menu system.
+ */
+export const allContextMenuActions = [
+  ...clipboardActions,
+  ...createActions,
+  ...selectionActions,
+  ...deleteActions,
+];
+
+/**
+ * Register all standard actions with the registry.
+ * Call this once during app initialization.
+ */
+export function registerContextMenuActions(): void {
+  contextMenuRegistry.registerAll(allContextMenuActions);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/selection-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/selection-actions.ts
new file mode 100644
index 000000000..580030f51
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/actions/selection-actions.ts
@@ -0,0 +1,94 @@
+/**
+ * Selection actions: Select Parent, Deselect All.
+ */
+
+import { clearSelection, selectNode } from "../../actions";
+import { buildParentMap } from "../../utils/selection-level";
+import type { ContextMenuAction, ContextMenuContext } from "../types";
+
+// =============================================================================
+// Helper Functions
+// =============================================================================
+
+/**
+ * Get the parent ID of the first selected node.
+ */
+function getSelectableParentId(ctx: ContextMenuContext): string | null {
+  const { selectedNodeIds } = ctx.selection;
+  if (selectedNodeIds.length === 0 || !ctx.snapshot) {
+    return null;
+  }
+
+  const parentMap = buildParentMap(ctx.snapshot);
+  const firstSelectedId = selectedNodeIds[0];
+  if (!firstSelectedId) {
+    return null;
+  }
+
+  const parentId = parentMap[firstSelectedId];
+  if (!parentId) {
+    return null;
+  }
+
+  // Don't allow selecting root
+  if (parentId === ctx.snapshot.id && ctx.snapshot.type === "root") {
+    return null;
+  }
+
+  return parentId;
+}
+
+// =============================================================================
+// Actions
+// =============================================================================
+
+export const selectParentAction: ContextMenuAction = {
+  id: "select-parent",
+  label: "Select Parent",
+  shortcut: { key: "Escape" },
+  group: "selection",
+  isVisible: (ctx) => {
+    // Show when there's a selection with a valid parent to select
+    return getSelectableParentId(ctx) !== null;
+  },
+  isEnabled: () => {
+    // Always enabled when visible
+    return true;
+  },
+  execute: (ctx, dispatch) => {
+    const parentId = getSelectableParentId(ctx);
+    if (!parentId) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn(
+          `[ContextMenu] selectParentAction: Unable to get parent ID. Selection: ${ctx.selection.selectedNodeIds.join(", ")}`,
+        );
+      }
+      return;
+    }
+
+    dispatch(clearSelection)({});
+    dispatch(selectNode)({ id: parentId, many: false });
+  },
+};
+
+export const deselectAllAction: ContextMenuAction = {
+  id: "deselect-all",
+  label: "Deselect All",
+  group: "selection",
+  isVisible: (ctx) => {
+    // Show when there's a selection
+    return ctx.selection.selectedNodeIds.length > 0;
+  },
+  isEnabled: () => {
+    // Always enabled when visible
+    return true;
+  },
+  execute: (_ctx, dispatch) => {
+    dispatch(clearSelection)({});
+  },
+};
+
+/**
+ * All selection actions for registration.
+ */
+export const selectionActions: ContextMenuAction[] = [selectParentAction, deselectAllAction];
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/index.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/index.ts
new file mode 100644
index 000000000..954039497
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/index.ts
@@ -0,0 +1,76 @@
+/**
+ * Context menu system public API.
+ *
+ * This module provides a unified context menu and keyboard shortcut system
+ * for the paywall designer. Actions are defined once and used by both
+ * context menus and keyboard shortcuts.
+ *
+ * @example
+ * ```tsx
+ * // Initialize actions (call once at app start)
+ * import { initializeContextMenuActions } from './state/context-menu';
+ * initializeContextMenuActions();
+ *
+ * // Use the registry
+ * import { contextMenuRegistry } from './state/context-menu';
+ * const actions = contextMenuRegistry.getGroupedActions(context);
+ * ```
+ */
+
+// =============================================================================
+// Type Exports
+// =============================================================================
+
+export type {
+  ActionGroup,
+  ActionShortcut,
+  ClickContext,
+  ContextMenuAction,
+  ContextMenuContext,
+  ContextSource,
+  DispatchFn,
+  NodeType,
+  ResolvedAction,
+  SelectionContext,
+} from "./types";
+
+// =============================================================================
+// Registry Export
+// =============================================================================
+
+export { contextMenuRegistry } from "./action-registry";
+
+// =============================================================================
+// Action Exports
+// =============================================================================
+
+import { registerContextMenuActions } from "./actions";
+
+export {
+  allContextMenuActions,
+  clipboardActions,
+  createActions,
+  deleteActions,
+  registerContextMenuActions,
+  selectionActions,
+} from "./actions";
+
+// =============================================================================
+// Initialization
+// =============================================================================
+
+let initialized = false;
+
+/**
+ * Initialize the context menu system.
+ * Registers all standard actions with the registry.
+ * Safe to call multiple times - will only initialize once.
+ */
+export function initializeContextMenuActions(): void {
+  if (initialized) {
+    return;
+  }
+
+  registerContextMenuActions();
+  initialized = true;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/context-menu/types.ts b/apps/www/src/features/studio/paywalls/designer/state/context-menu/types.ts
new file mode 100644
index 000000000..eda26493a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/context-menu/types.ts
@@ -0,0 +1,155 @@
+/**
+ * Context menu system type definitions.
+ *
+ * This module defines the core types for the unified context menu and
+ * keyboard shortcut system used in the paywall designer.
+ */
+
+import type { LucideIcon } from "lucide-react";
+import type { CommandDispatch, CommanderSlice } from "@voidhash/mimic/zustand-commander";
+import type { EditableNodeType, PaywallDesignerDocument } from "@voidhash/mimic-schema";
+
+import type { ComponentCatalogByContentHash, DesignerStoreState } from "../designer-store-state";
+import type { SnapshotNode } from "../utils/selection-level";
+
+// =============================================================================
+// Node & Source Types
+// =============================================================================
+
+/**
+ * Node types in the designer.
+ */
+export type NodeType = EditableNodeType;
+
+/**
+ * Where the context menu was triggered from.
+ */
+export type ContextSource = "canvas" | "layers-panel";
+
+// =============================================================================
+// Context Types
+// =============================================================================
+
+/**
+ * Selection state for context menu decisions.
+ */
+export interface SelectionContext {
+  /** IDs of currently selected nodes */
+  selectedNodeIds: string[];
+  /** Types of currently selected nodes */
+  selectedNodeTypes: NodeType[];
+  /** Whether all selected nodes are the same type */
+  isHomogeneousSelection: boolean;
+  /** Whether user is currently editing text content */
+  isTextEditing: boolean;
+}
+
+/**
+ * Click/trigger information for context menu.
+ */
+export interface ClickContext {
+  /** Where the context menu was triggered */
+  source: ContextSource;
+  /** ID of the node that was clicked (null for canvas background) */
+  clickedNodeId: string | null;
+  /** Type of the node that was clicked */
+  clickedNodeType: NodeType | null;
+  /** Whether the click was inside a currently selected node's bounds */
+  clickedInsideSelection: boolean;
+  /** Canvas coordinates of the click (null for layers panel) */
+  canvasPosition: { x: number; y: number } | null;
+}
+
+/**
+ * Full context for action visibility/enablement decisions.
+ */
+export interface ContextMenuContext {
+  /** Current selection state */
+  selection: SelectionContext;
+  /** Click/trigger details */
+  click: ClickContext;
+  /** Document snapshot for advanced queries */
+  snapshot: SnapshotNode | null;
+  /** Catalog mirror for component manifest slot gates. */
+  componentCatalogByContentHash: ComponentCatalogByContentHash;
+}
+
+// =============================================================================
+// Action Types
+// =============================================================================
+
+/**
+ * Keyboard shortcut definition.
+ */
+export interface ActionShortcut {
+  /** The key to press (e.g., "c", "v", "Backspace") */
+  key: string;
+  /** Whether Cmd/Ctrl modifier is required */
+  modKey?: boolean;
+  /** Whether Shift modifier is required */
+  shiftKey?: boolean;
+}
+
+/**
+ * Action group for organizing menu items.
+ */
+export type ActionGroup = "clipboard" | "create" | "edit" | "arrange" | "selection" | "delete";
+
+/**
+ * Dispatch function matching the designer commander's typed dispatch
+ * (`createCommander<DesignerStoreState, typeof PaywallDesignerDocument>`),
+ * so action payload shapes are checked at the context-menu boundary.
+ */
+export type DispatchFn = CommandDispatch<
+  DesignerStoreState & CommanderSlice,
+  typeof PaywallDesignerDocument
+>;
+
+/**
+ * Context menu action definition.
+ *
+ * Actions are defined once and used by both context menus and keyboard shortcuts.
+ * Each action specifies when it's visible, when it's enabled, and what it does.
+ */
+export interface ContextMenuAction {
+  /** Unique identifier for the action */
+  id: string;
+  /** Display label in the menu */
+  label: string;
+  /** Optional keyboard shortcut */
+  shortcut?: ActionShortcut;
+  /** Group for menu organization */
+  group: ActionGroup;
+  /**
+   * Determines if the action should be visible in the menu.
+   * Return false to hide the action entirely.
+   */
+  isVisible: (ctx: ContextMenuContext) => boolean;
+  /**
+   * Determines if the action should be enabled.
+   * Return false to show the action as disabled/grayed out.
+   */
+  isEnabled: (ctx: ContextMenuContext) => boolean;
+  /**
+   * Executes the action.
+   * The dispatch function is provided to dispatch commander actions.
+   */
+  execute: (ctx: ContextMenuContext, dispatch: DispatchFn) => void;
+}
+
+/**
+ * Group metadata for rendering separators and labels.
+ */
+export interface ActionGroupMeta {
+  id: ActionGroup;
+  label?: string;
+  order: number;
+}
+
+/**
+ * Action with computed visibility/enabled state for rendering.
+ */
+export interface ResolvedAction {
+  action: ContextMenuAction;
+  isEnabled: boolean;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-commander.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-commander.tsx
new file mode 100644
index 000000000..f8d6d3798
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-commander.tsx
@@ -0,0 +1,6 @@
+import { createCommander } from "@voidhash/mimic/zustand-commander";
+import type { PaywallDesignerDocument } from "@voidhash/mimic-schema";
+
+import type { DesignerStoreState } from "./designer-store-state";
+
+export const commander = createCommander<DesignerStoreState, typeof PaywallDesignerDocument>();
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
new file mode 100644
index 000000000..4b1d56a46
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
@@ -0,0 +1,299 @@
+import type { ClientDocument } from "@voidhash/mimic/client";
+import type { MimicObject } from "@voidhash/mimic/zustand";
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type {
+  PaywallDesignerDocument,
+  PresenceInput,
+  PresenceSnapshot,
+} from "@voidhash/mimic-schema";
+import type { PreviewTree } from "@voidhash/paywall-renderer-web-core";
+
+type StateStyleOverrideSnapshot = Record<string, unknown>;
+
+/**
+ * The designer's client document, carrying the full presence typing
+ * (decoded `PresenceSnapshot` reads, `PresenceInput` writes). The
+ * `| undefined` halves mirror the optional presence primitive exactly as
+ * `createClientDocument` infers it.
+ */
+export type DesignerDocument = ClientDocument<
+  typeof PaywallDesignerDocument,
+  PresenceSnapshot | undefined,
+  PresenceInput | undefined
+>;
+
+/** The store's `mimic` slice, matching the middleware's inferred typing. */
+export type DesignerMimicObject = MimicObject<
+  typeof PaywallDesignerDocument,
+  PresenceSnapshot | undefined,
+  PresenceInput | undefined
+>;
+
+export type AvailableTool = "cursor" | "text" | "rows" | "columns" | "scroll-view";
+
+export type DesignerMode = "design" | "preview" | "code" | "translation";
+
+export type DevModeTab = "snapshot" | "presence" | "actions";
+
+/**
+ * Remembers the currently selected override state per node.
+ * Missing entries imply "Default" (no selected state override).
+ */
+export type StateOverrideSelection = Record<string, string | null>;
+
+/**
+ * Remembers the locally selected preview state per component node id.
+ * Missing entries fall back to the node's persisted `previewState`.
+ */
+export type ComponentPreviewStateSelection = Record<string, string>;
+
+/**
+ * One catalog version detail with its §2 manifest already decoded.
+ * Mirrors `RpcPaywallComponentVersion` (the raw `manifest: unknown` replaced
+ * by the decoded `ComponentManifest`).
+ */
+export interface ComponentCatalogVersion {
+  slug: string;
+  version: number;
+  contentHash: string;
+  manifest: ComponentManifest;
+  hasPanel: boolean;
+  previewStates: readonly string[];
+  artifactBaseUrl: string;
+  createdAt: Date;
+}
+
+/** One component in the project catalog, keyed by slug. */
+export interface ComponentCatalogEntry {
+  slug: string;
+  title: string | null;
+  latestVersion: number;
+  latest: ComponentCatalogVersion;
+}
+
+export type ComponentCatalogByContentHash = Record<string, ComponentCatalogVersion>;
+
+/**
+ * The in-browser compilation output for a local code component: a manifest
+ * (derived from `defineComponent`) plus one preview tree per declared state.
+ * Same shape the deployed-catalog path resolves, so the trusted
+ * `PreviewTreeRenderer` consumes both identically.
+ */
+export interface LocalComponentArtifact {
+  manifest: ComponentManifest;
+  previewTrees: Record<string, PreviewTree>;
+  /** Whether the definition declared a custom editor panel (`defineComponent({ panel })`). */
+  hasPanel: boolean;
+  /**
+   * The compiled author CJS module, retained ONLY when `hasPanel` — the panel
+   * sandbox evaluates it to drive the live panel session. `undefined` for
+   * panel-less components (host-generated panel only). Never touches the canvas.
+   */
+  code?: string;
+}
+
+/** A compile/runtime diagnostic surfaced to the editor (Monaco markers + panel). */
+export interface CompileDiagnostic {
+  message: string;
+  line?: number;
+  column?: number;
+  phase: "compile" | "runtime";
+}
+
+/**
+ * Compilation state for one code-component definition, keyed by node id.
+ * `sourceHash` guards against showing artifacts stale relative to the current
+ * source. Ephemeral — derived from `source`, never stored in the document.
+ */
+export interface CodeComponentCompiled {
+  status: "idle" | "compiling" | "ready" | "error";
+  sourceHash: string;
+  artifact?: LocalComponentArtifact;
+  diagnostics?: CompileDiagnostic[];
+  error?: string;
+}
+
+/**
+ * Browser-only slice for the code-component editor: compiled artifacts keyed by
+ * definition id, which component the Monaco editor currently has open, the
+ * preview state selected in the editor's preview pane, and the open-tab / dirty
+ * bookkeeping. Component source lives directly on the `codeComponent` document
+ * nodes (there is no fork); a tab is dirty when its Monaco buffer differs from
+ * the saved node source.
+ */
+export interface CodeComponentsState {
+  compiled: Record<string, CodeComponentCompiled>;
+  previewState: string | null;
+  /**
+   * The workspace PATH of the active editor tab (a component file), or `null`
+   * when no tab is open. The preview panes resolve a component path to its
+   * definition id for the compiled-artifact lookup.
+   */
+  activeTabPath: string | null;
+  /** Ordered list of open editor tab keys. Each entry is a component workspace PATH. */
+  openTabs: string[];
+  /** Per tab key (workspace path); `true` = the Monaco buffer has unsaved changes. */
+  dirty: Record<string, boolean>;
+}
+
+/**
+ * Synchronous mirror of the tanstack-query component catalog so store/action
+ * code (slot gates, insertion, validation) can read manifests without async
+ * plumbing. `byContentHash` additionally holds pinned versions fetched for
+ * component nodes whose contentHash is not the latest. Missing entries mean
+ * "not (yet) in the catalog" — gates allow, validation reports.
+ */
+export interface ComponentCatalog {
+  components: Record<string, ComponentCatalogEntry>;
+  byContentHash: ComponentCatalogByContentHash;
+}
+
+export interface DragSelectState {
+  isActive: boolean;
+  startPoint: { x: number; y: number } | null;
+  currentPoint: { x: number; y: number } | null;
+  /** Node IDs that would be selected if drag ends now (preview) */
+  previewSelectedNodeIds: string[];
+}
+
+/** A point in screen or canvas coordinates (context-dependent). */
+export interface Point {
+  x: number;
+  y: number;
+}
+
+/**
+ * Transient state for a canvas drag-to-move of absolutely positioned view
+ * nodes. Populated by `startMove`, applied by `updateMove`/`endMove`, and reset
+ * by `endMove`/`cancelMove`.
+ */
+export interface MoveState {
+  isActive: boolean;
+  /** Pointer position in screen coordinates when the move started. */
+  startScreenPoint: Point | null;
+  /**
+   * Per dragged view node: `base*` are the node's `left`/`top` at drag start
+   * (delta is added to these), `original*` mirror the stored style values
+   * (`"auto"` = unset) captured for undo restore. `stateId` is the selected
+   * state override the drag writes into (present only while one is selected);
+   * `originalStateOverrideStyle` is that state's full `overrides.style` record
+   * at drag start, so undo restores the override layer faithfully.
+   */
+  nodes: Record<
+    string,
+    {
+      baseLeft: number;
+      baseTop: number;
+      originalLeft: number | "auto";
+      originalTop: number | "auto";
+      stateId: string | null;
+      originalStateOverrideStyle: Record<string, unknown>;
+    }
+  >;
+}
+
+// Corner handles (2D scaling) and edge handles (1D scaling)
+export type ResizeHandle = "nw" | "n" | "ne" | "e" | "se" | "s" | "sw" | "w";
+
+export interface ResizeState {
+  isActive: boolean;
+  handle: ResizeHandle | null;
+  /** Starting mouse position in screen coordinates */
+  startScreenPoint: { x: number; y: number } | null;
+  /** The combined bounding box of all selected nodes at resize start */
+  initialCombinedBounds: {
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+  } | null;
+  /** Original numeric dimensions for each selected node (nodeId -> dimensions) */
+  initialNodeDimensions: Record<
+    string,
+    {
+      width: number | null;
+      height: number | null;
+      type: "screen" | "view" | "scrollView" | "text" | "shape";
+    }
+  >;
+  /**
+   * Original document state for undo. `width`/`height` mirror the stored
+   * style values (`"auto"` = hug contents); an absent `flex` means the field
+   * is unset on the node.
+   */
+  originalDocumentState: Record<
+    string,
+    {
+      width: number | "auto";
+      height: number | "auto";
+      flex: number | undefined;
+      alignSelf: string;
+      type: "screen" | "view" | "scrollView" | "text" | "shape";
+    }
+  >;
+  /** Nodes that should write resize updates to selected state overrides */
+  stateOverrideTargets: Record<string, string>;
+  /** Original style overrides for nodes written in state override mode */
+  originalStateOverrideStyles: Record<string, StateStyleOverrideSnapshot>;
+  /** Current dimensions during active resize */
+  currentNodeDimensions: Record<
+    string,
+    {
+      width: number | null;
+      height: number | null;
+      type: "screen" | "view" | "scrollView" | "text" | "shape";
+    }
+  >;
+}
+
+export type DesignerStoreState = {
+  readonly mimic: DesignerMimicObject;
+} & {
+  mode: DesignerMode;
+  previewScale: number;
+  debug: {
+    showGrid: boolean;
+  };
+  highlightedNodeId: string | null;
+  textEditingNodeId: string | null;
+  tools: {
+    activeTool: string;
+  };
+  canvas: {
+    scale: number;
+    x: number;
+    y: number;
+    boundingBoxes: Record<string, { x: number; y: number; width: number; height: number }>;
+  };
+  viewport: {
+    panels: {
+      top: { height: number };
+      bottom: { height: number };
+      left: { width: number };
+      right: { width: number };
+    };
+  };
+  devMode: {
+    enabled: boolean;
+    activeTab: DevModeTab;
+  };
+  ai: {
+    panelOpen: boolean;
+    /** Current width of the AI chat panel in px (user-resizable). */
+    width: number;
+  };
+  stateOverrideSelection: StateOverrideSelection;
+  /**
+   * The locale currently being edited/previewed, or `null` for the document's
+   * default locale (today's behavior). A view-time override — like
+   * `stateOverrideSelection`, it changes what the canvas renders and where
+   * inline edits land, without touching the document until a write happens.
+   */
+  activeLocale: string | null;
+  componentPreviewStateSelection: ComponentPreviewStateSelection;
+  componentCatalog: ComponentCatalog;
+  codeComponents: CodeComponentsState;
+  dragSelect: DragSelectState;
+  resize: ResizeState;
+  move: MoveState;
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
new file mode 100644
index 000000000..dda24f7b3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
@@ -0,0 +1,359 @@
+"use client";
+
+import {
+  createClientDocument,
+  TransportError,
+  WebSocketTransport,
+} from "@voidhash/mimic/client";
+import { mimic } from "@voidhash/mimic/zustand";
+import { useCommander } from "@voidhash/mimic/zustand-commander";
+import {
+  PaywallDesignerDocument,
+  PresenceSchema,
+  type PresenceInput,
+} from "@voidhash/mimic-schema";
+import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { createContext, useCallback, useContext, useEffect, useRef, useState } from "react";
+import { create } from "zustand";
+
+import { managedRuntime, VoidhashRpc } from "@/features/studio/lib/effect-query";
+
+import { SHOW_GRID } from "../constants";
+import { PANEL_DIMENSIONS } from "../panels/constants";
+import { commander } from "./designer-commander";
+import type {
+  CodeComponentsState,
+  ComponentCatalog,
+  ComponentPreviewStateSelection,
+  DesignerMode,
+  DesignerStoreState,
+  DevModeTab,
+} from "./designer-store-state";
+
+const initialComponentCatalog: ComponentCatalog = {
+  byContentHash: {},
+  components: {},
+};
+
+const initialComponentPreviewStateSelection: ComponentPreviewStateSelection = {};
+
+const initialCodeComponents: CodeComponentsState = {
+  compiled: {},
+  previewState: null,
+  activeTabPath: null,
+  openTabs: [],
+  dirty: {},
+};
+
+// ============================================================================
+// Edit token + document
+// ============================================================================
+
+/**
+ * Mints a fresh single-use edit token for the paywall document. Called once
+ * on mount for the document `url` and again by the transport's token callback
+ * on every (re)connect — tokens are single-use, so they are never reused.
+ */
+function requestPaywallEditToken(paywallId: string) {
+  return managedRuntime.runPromise(
+    VoidhashRpc.use((rpc) => rpc.RequestPaywallEditToken({ paywallId })),
+  );
+}
+
+/**
+ * Creates the client document for a paywall, connecting to the mimic host at
+ * the given document URL. The transport re-mints a token per (re)connect.
+ * `onAuthFailure` fires on every in-band auth failure — initial connect AND
+ * reconnects — which terminally stops the transport's reconnect loop.
+ */
+export function createPaywallDesignerDocument(options: {
+  paywallId: string;
+  url: string;
+  initialPresence: PresenceInput;
+  onAuthFailure?: (error: Error) => void;
+}) {
+  return createClientDocument({
+    presence: {
+      initial: options.initialPresence,
+      primitive: PresenceSchema,
+    },
+    primitive: PaywallDesignerDocument,
+    transport: new WebSocketTransport({
+      onAuthFailure: options.onAuthFailure,
+      reconnectDelayMs: 5000,
+      token: async () => (await requestPaywallEditToken(options.paywallId)).token,
+      url: options.url,
+    }),
+  });
+}
+
+/** The designer's client document instance type. */
+export type PaywallDesignerDocumentInstance = ReturnType<typeof createPaywallDesignerDocument>;
+
+// ============================================================================
+// Store Factory
+// ============================================================================
+
+/**
+ * Builds the designer store's local (browser-only) state slice — everything the
+ * mimic/commander middleware does NOT own. Extracted so the live store factory
+ * and headless test harnesses build the exact same initial local state (the
+ * panel-definition test harness reuses it via {@link createDesignerStore}).
+ */
+function createDesignerLocalState() {
+  return {
+    // Local browser state
+    canvas: {
+      boundingBoxes: {},
+      scale: 1,
+      x: 0,
+      y: 0,
+    },
+    debug: {
+      showGrid: SHOW_GRID,
+    },
+    dragSelect: {
+      currentPoint: null,
+      isActive: false,
+      previewSelectedNodeIds: [],
+      startPoint: null,
+    },
+    resize: {
+      currentNodeDimensions: {},
+      handle: null,
+      initialCombinedBounds: null,
+      initialNodeDimensions: {},
+      originalStateOverrideStyles: {},
+      originalDocumentState: {},
+      stateOverrideTargets: {},
+      isActive: false,
+      startScreenPoint: null,
+    },
+    move: {
+      isActive: false,
+      startScreenPoint: null,
+      nodes: {},
+    },
+    componentCatalog: initialComponentCatalog,
+    componentPreviewStateSelection: initialComponentPreviewStateSelection,
+    codeComponents: initialCodeComponents,
+    highlightedNodeId: null,
+    mode: "design" as DesignerMode,
+    previewScale: 1,
+    stateOverrideSelection: {},
+    activeLocale: null,
+    textEditingNodeId: null,
+    tools: {
+      activeTool: "cursor",
+    },
+    viewport: {
+      panels: {
+        bottom: { height: 0 },
+        left: { width: 0 },
+        right: { width: 0 },
+        top: { height: 0 },
+      },
+    },
+    devMode: {
+      enabled: false,
+      activeTab: "snapshot" as DevModeTab,
+    },
+    ai: {
+      panelOpen: true,
+      width: PANEL_DIMENSIONS.AI_CHAT_WIDTH,
+    },
+  };
+}
+
+/**
+ * Creates the designer zustand store over a mimic client `document`, wiring the
+ * mimic + commander middleware and seeding the browser-only local state. The
+ * document may be the live WebSocket-backed instance (production) or an offline
+ * stub (tests) — construction is identical; only `autoConnect` is disabled so
+ * the caller owns connect().
+ */
+export function createDesignerStore(document: PaywallDesignerDocumentInstance) {
+  // The provider owns connect() so terminal auth failures surface as an
+  // error state — the middleware's autoConnect would swallow the rejection.
+  return create(
+    commander.middleware(
+      mimic(document, createDesignerLocalState, { autoConnect: false }),
+    ),
+  );
+}
+
+/** @deprecated Internal alias retained for the provider; use {@link createDesignerStore}. */
+const createPaywallDesignerStore = createDesignerStore;
+
+export type PaywallDesignerStoreType = ReturnType<typeof createPaywallDesignerStore>;
+
+/** The commander dispatch returned by {@link usePaywallDesignerActions}. */
+export type PaywallDesignerDispatch = ReturnType<typeof usePaywallDesignerActions>;
+
+// ============================================================================
+// Store boundary selectors
+// ============================================================================
+
+export { documentRootFromSnapshot, selectDocumentRoot, selectRenderRoot } from "./utils/document-root";
+
+// ============================================================================
+// React Context
+// ============================================================================
+
+/**
+ * The React context that carries the designer's zustand store instance. Exported
+ * so a separate React reconciler root (e.g. the panel-runtime reconciler that
+ * renders built-in panel definitions) can re-provide the SAME store instance
+ * around its subtree — `usePaywallDesignerStore()` reads from this context, so
+ * re-providing it makes every `useStore(store, …)`-based section hook work
+ * inside the reconciler root exactly as it does in the main tree.
+ */
+export const PaywallStoreContext = createContext<PaywallDesignerStoreType | null>(null);
+
+interface PaywallDesignerStoreProviderProps {
+  paywallId: string;
+  children: React.ReactNode;
+  /** Rendered while the edit token is being minted (no store exists yet). */
+  renderLoading: () => React.ReactNode;
+  /** Rendered on terminal transport/token failure, with a retry that re-creates the store. */
+  renderError: (error: Error, retry: () => void) => React.ReactNode;
+}
+
+type ProviderPhase =
+  | { status: "loading" }
+  | { status: "error"; error: Error }
+  | { status: "ready"; store: PaywallDesignerStoreType };
+
+/**
+ * Terminal transport failures permanently stop the reconnect loop — today
+ * that is exactly the in-band `auth_result` failure surfaced by the transport
+ * as a `TransportError` with this message prefix. Every other `connect()`
+ * rejection (host unreachable, token RPC failure) leaves the transport's
+ * reconnect loop running, so the provider stays in the loading phase.
+ */
+function isTerminalTransportError(error: unknown): boolean {
+  return (
+    error instanceof TransportError && error.message.startsWith("WebSocket authentication failed")
+  );
+}
+
+function toError(error: unknown): Error {
+  return error instanceof Error ? error : new Error(String(error));
+}
+
+function createInitialPresence(): PresenceInput {
+  return {
+    selectedNodeIds: [],
+    user: {
+      color: `#${Math.floor(Math.random() * 16_777_215)
+        .toString(16)
+        .padStart(6, "0")}`,
+      name: `User ${Math.floor(Math.random() * 1000)}`,
+    },
+  };
+}
+
+export function PaywallDesignerStoreProvider({
+  paywallId,
+  children,
+  renderLoading,
+  renderError,
+}: PaywallDesignerStoreProviderProps) {
+  const [phase, setPhase] = useState<ProviderPhase>({ status: "loading" });
+  const [attempt, setAttempt] = useState(0);
+  const initialPresenceRef = useRef<PresenceInput | null>(null);
+  initialPresenceRef.current ??= createInitialPresence();
+
+  const retry = useCallback(() => {
+    setPhase({ status: "loading" });
+    setAttempt((current) => current + 1);
+  }, []);
+
+  useEffect(() => {
+    let cancelled = false;
+    let document: PaywallDesignerDocumentInstance | null = null;
+
+    setPhase({ status: "loading" });
+
+    void (async () => {
+      try {
+        const { url } = await requestPaywallEditToken(paywallId);
+        if (cancelled) {
+          return;
+        }
+
+        document = createPaywallDesignerDocument({
+          initialPresence: initialPresenceRef.current ?? createInitialPresence(),
+          // Auth failures are terminal (the transport stops reconnecting)
+          // and can fire at ANY reconnect, long after connect() resolved —
+          // flip to the error phase whenever they happen so the editor never
+          // keeps queueing edits against a dead transport.
+          onAuthFailure: (error) => {
+            if (cancelled) {
+              return;
+            }
+            document?.disconnect();
+            setPhase({ status: "error", error });
+          },
+          paywallId,
+          url,
+        });
+        const store = createPaywallDesignerStore(document);
+        setPhase({ status: "ready", store });
+
+        document.connect().catch((error: unknown) => {
+          if (cancelled || !isTerminalTransportError(error)) {
+            return;
+          }
+          document?.disconnect();
+          setPhase({ status: "error", error: toError(error) });
+        });
+      } catch (error) {
+        if (!cancelled) {
+          setPhase({ status: "error", error: toError(error) });
+        }
+      }
+    })();
+
+    return () => {
+      cancelled = true;
+      document?.disconnect();
+    };
+  }, [paywallId, attempt]);
+
+  if (phase.status === "loading") {
+    return <>{renderLoading()}</>;
+  }
+  if (phase.status === "error") {
+    return <>{renderError(phase.error, retry)}</>;
+  }
+  return (
+    <PaywallStoreContext.Provider value={phase.store}>{children}</PaywallStoreContext.Provider>
+  );
+}
+
+// ============================================================================
+// Hooks
+// ============================================================================
+
+export function usePaywallDesignerStore() {
+  const store = useContext(PaywallStoreContext);
+  if (!store) {
+    throw new Error("Missing DesignerStoreProvider");
+  }
+  return store;
+}
+
+/**
+ * Get a dispatch function to call store commands.
+ * Returns a fully type-safe dispatch function using the Commander pattern.
+ *
+ * @example
+ * const dispatch = usePaywallDesignerActions();
+ * dispatch(setActiveTool)({ tool: 'cursor' });
+ * dispatch(updateScreenNode)({ id: '123', paddingTop: 10 });
+ */
+export function usePaywallDesignerActions() {
+  const store = usePaywallDesignerStore();
+  return useCommander(store);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/testing/offline-document.ts b/apps/www/src/features/studio/paywalls/designer/state/testing/offline-document.ts
new file mode 100644
index 000000000..8cf8eb274
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/testing/offline-document.ts
@@ -0,0 +1,66 @@
+import {
+  createClientDocument,
+  type DocumentTransport,
+  type ServerMessage,
+  type TransactionEnvelope,
+} from "@voidhash/mimic/client";
+import type { Value } from "@voidhash/mimic-core";
+import {
+  createInitialPaywallDocumentInput,
+  PaywallDesignerDocument,
+} from "@voidhash/mimic-schema";
+
+/**
+ * Offline transport stub for engine-backed state tests: transactions apply
+ * locally (optimistically) and are recorded, never acknowledged.
+ */
+export class StubTransport implements DocumentTransport {
+  readonly submitted: TransactionEnvelope[] = [];
+
+  async connect(): Promise<void> {}
+  disconnect(): void {}
+  subscribe(_handler: (message: ServerMessage) => void): () => void {
+    return () => {};
+  }
+  subscribeConnection(_handler: (connected: boolean) => void): () => void {
+    return () => {};
+  }
+  requestSnapshot(): void {}
+  submit(transaction: TransactionEnvelope): void {
+    this.submitted.push(transaction);
+  }
+  setPresence(_data: Value): void {}
+  clearPresence(): void {}
+  isConnected(): boolean {
+    return false;
+  }
+}
+
+/**
+ * Creates an offline designer client document seeded with the initial
+ * paywall content (one root containing one screen).
+ */
+export function createOfflineDesignerDocument() {
+  return createClientDocument({
+    initialValue: PaywallDesignerDocument.encode(createInitialPaywallDocumentInput()),
+    primitive: PaywallDesignerDocument,
+    transport: new StubTransport(),
+  });
+}
+
+export type OfflineDesignerDocument = ReturnType<typeof createOfflineDesignerDocument>;
+
+/**
+ * Reads the seeded root and screen node ids from an offline document.
+ */
+export function seededIds(doc: OfflineDesignerDocument): { rootId: string; screenId: string } {
+  const rootNode = doc.root.children.first();
+  if (!rootNode) {
+    throw new Error("expected the seeded root node");
+  }
+  const screen = rootNode.children.first();
+  if (!screen) {
+    throw new Error("expected the seeded screen node");
+  }
+  return { rootId: rootNode.id, screenId: screen.id };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.test.ts
new file mode 100644
index 000000000..c48e31daa
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.test.ts
@@ -0,0 +1,122 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  collectAncestorVariables,
+  toLabeledVariables,
+  type AncestorVariablesSnapshotNode,
+} from "./ancestor-variables";
+
+function variableEntry(entryId: string, name: string, internalId?: string) {
+  return {
+    id: entryId,
+    value: {
+      id: internalId ?? entryId,
+      name,
+      value: { key: "boolean", value: true },
+    },
+  };
+}
+
+function makeTree(): AncestorVariablesSnapshotNode {
+  return {
+    children: [
+      {
+        children: [
+          {
+            children: [],
+            data: {
+              localVariables: [variableEntry("v-flex", "flexVar")],
+              name: "Card",
+            },
+            id: "flex-1",
+            type: "view",
+          },
+          {
+            children: [],
+            data: {
+              localVariables: [variableEntry("v-sibling", "siblingVar")],
+              name: "Sibling",
+            },
+            id: "flex-2",
+            type: "view",
+          },
+        ],
+        data: {
+          localVariables: [variableEntry("v-screen", "screenVar", "var-internal-1")],
+          name: "Screen",
+        },
+        id: "screen-1",
+        type: "screen",
+      },
+    ],
+    id: "root",
+    type: "root",
+  };
+}
+
+describe("collectAncestorVariables", () => {
+  test("returns the lexical chain including self, own node first", () => {
+    const variables = collectAncestorVariables(makeTree(), "flex-1");
+    expect(variables.map((v) => v.id)).toEqual(["v-flex", "v-screen"]);
+    expect(variables.map((v) => v.ownerNodeId)).toEqual(["flex-1", "screen-1"]);
+    expect(variables.map((v) => v.ownerName)).toEqual(["Card", "Screen"]);
+  });
+
+  test("excludes sibling-owned variables", () => {
+    const variables = collectAncestorVariables(makeTree(), "flex-1");
+    expect(variables.some((v) => v.id === "v-sibling")).toBe(false);
+  });
+
+  test("carries the internal id as aliasId when it differs from the entry id", () => {
+    const variables = collectAncestorVariables(makeTree(), "screen-1");
+    expect(variables).toHaveLength(1);
+    expect(variables[0]).toMatchObject({ aliasId: "var-internal-1", id: "v-screen" });
+  });
+
+  test("omits aliasId when the internal id equals the entry id", () => {
+    const variables = collectAncestorVariables(makeTree(), "flex-1");
+    expect(variables[0]?.aliasId).toBeUndefined();
+  });
+
+  test("falls back to the node type when the owner has no name", () => {
+    const tree: AncestorVariablesSnapshotNode = {
+      children: [],
+      data: { localVariables: [variableEntry("v-1", "x")] },
+      id: "screen-1",
+      type: "screen",
+    };
+    const variables = collectAncestorVariables(tree, "screen-1");
+    expect(variables[0]?.ownerName).toBe("screen");
+  });
+
+  test("returns an empty list for unknown nodes and null snapshots", () => {
+    expect(collectAncestorVariables(makeTree(), "missing")).toEqual([]);
+    expect(collectAncestorVariables(null, "flex-1")).toEqual([]);
+  });
+
+  test("skips malformed variable entries", () => {
+    const tree: AncestorVariablesSnapshotNode = {
+      children: [],
+      data: {
+        localVariables: [
+          null,
+          { id: "v-bad" },
+          { id: "v-bad-2", value: { name: "x", value: { key: "weird", value: 1 } } },
+          variableEntry("v-good", "good"),
+        ],
+      },
+      id: "screen-1",
+      type: "screen",
+    };
+    const variables = collectAncestorVariables(tree, "screen-1");
+    expect(variables.map((v) => v.id)).toEqual(["v-good"]);
+  });
+});
+
+describe("toLabeledVariables", () => {
+  test("labels only variables owned by other nodes", () => {
+    const labeled = toLabeledVariables(collectAncestorVariables(makeTree(), "flex-1"), "flex-1");
+    expect(labeled.find((v) => v.id === "v-flex")?.ownerLabel).toBeUndefined();
+    expect(labeled.find((v) => v.id === "v-screen")?.ownerLabel).toBe("Screen");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.ts
new file mode 100644
index 000000000..b722d6b99
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/ancestor-variables.ts
@@ -0,0 +1,162 @@
+import type { Variable, VariableType } from "@voidhash/mimic-schema";
+
+/**
+ * A flat variable resolved through the lexical ancestor chain, annotated with
+ * the node that declares it. `id` is the array-entry id (the
+ * `toFlatVariables` convention); `aliasId` carries the variable struct's
+ * internal id when it differs — stored references may use either.
+ */
+export interface OwnedVariable extends Variable {
+  readonly ownerNodeId: string;
+  readonly ownerName: string;
+  readonly aliasId?: string;
+}
+
+/**
+ * Structural view of designer snapshot nodes carrying just the fields the
+ * ancestor-variable walk reads. Snapshot nodes nest their payload under
+ * `data`, so `name`/`localVariables` sit on `node.data`.
+ *
+ * The extra optional `path`/`source` keys keep this from being a "weak type":
+ * a `codeComponent`'s data is `{path, source}` (no `name`/`localVariables`), so
+ * without a shared property TS rejects the whole `RootSnapshotNode` here.
+ */
+export interface AncestorVariablesSnapshotNode {
+  id: string;
+  type: string;
+  data?: {
+    readonly name?: string;
+    readonly localVariables?: unknown;
+    readonly path?: string;
+    readonly source?: string;
+  };
+  children?: readonly AncestorVariablesSnapshotNode[];
+}
+
+function asVariableType(raw: unknown): VariableType | undefined {
+  if (!(raw && typeof raw === "object")) {
+    return undefined;
+  }
+  const key = (raw as { key?: unknown }).key;
+  const value = (raw as { value?: unknown }).value;
+  switch (key) {
+    case "string":
+      return typeof value === "string" ? { key, value } : undefined;
+    case "number":
+      return typeof value === "number" ? { key, value } : undefined;
+    case "boolean":
+      return typeof value === "boolean" ? { key, value } : undefined;
+    case "product": {
+      if (!(value && typeof value === "object")) {
+        return undefined;
+      }
+      const productId = (value as { productId?: unknown }).productId;
+      if (typeof productId === "string") {
+        return { key, value: { productId } };
+      }
+      // null (legacy stored shape) and absence both mean "no product selected".
+      if (productId === null || productId === undefined) {
+        return { key, value: {} };
+      }
+      return undefined;
+    }
+    default:
+      return undefined;
+  }
+}
+
+function collectNodeVariables(node: AncestorVariablesSnapshotNode, into: OwnedVariable[]): void {
+  const localVariables = node.data?.localVariables;
+  if (!Array.isArray(localVariables)) {
+    return;
+  }
+  const name = node.data?.name;
+  const ownerName = typeof name === "string" && name.length > 0 ? name : node.type;
+
+  for (const entry of localVariables) {
+    if (!(entry && typeof entry === "object")) {
+      continue;
+    }
+    const entryId = (entry as { id?: unknown }).id;
+    const value = (entry as { value?: unknown }).value;
+    if (typeof entryId !== "string" || !(value && typeof value === "object")) {
+      continue;
+    }
+    const name = (value as { name?: unknown }).name;
+    const variableValue = asVariableType((value as { value?: unknown }).value);
+    if (typeof name !== "string" || variableValue === undefined) {
+      continue;
+    }
+    const internalId = (value as { id?: unknown }).id;
+    const variable: OwnedVariable = {
+      id: entryId,
+      name,
+      ownerName,
+      ownerNodeId: node.id,
+      value: variableValue,
+    };
+    if (typeof internalId === "string" && internalId !== entryId) {
+      into.push({ ...variable, aliasId: internalId });
+    } else {
+      into.push(variable);
+    }
+  }
+}
+
+/**
+ * Collects the flat variables visible to `nodeId` under lexical (subtree)
+ * scoping: the node's own variables first, then each ancestor's up to the
+ * root (nearest first). Returns an empty list when the node is not in the
+ * snapshot.
+ */
+export function collectAncestorVariables(
+  snapshot: AncestorVariablesSnapshotNode | null,
+  nodeId: string,
+): readonly OwnedVariable[] {
+  if (!snapshot) {
+    return [];
+  }
+
+  const chain: AncestorVariablesSnapshotNode[] = [];
+  const walk = (node: AncestorVariablesSnapshotNode): boolean => {
+    chain.push(node);
+    if (node.id === nodeId) {
+      return true;
+    }
+    for (const child of node.children ?? []) {
+      if (walk(child)) {
+        return true;
+      }
+    }
+    chain.pop();
+    return false;
+  };
+
+  if (!walk(snapshot)) {
+    return [];
+  }
+
+  const result: OwnedVariable[] = [];
+  for (let i = chain.length - 1; i >= 0; i--) {
+    collectNodeVariables(chain[i]!, result);
+  }
+  return result;
+}
+
+/**
+ * Maps owned variables to the labeled shape variable pickers render: the
+ * owner label is attached only for variables owned by a node other than
+ * `selfNodeId`, so self-owned rendering stays unchanged.
+ */
+export function toLabeledVariables(
+  variables: readonly OwnedVariable[],
+  selfNodeId: string,
+): readonly (Variable & { ownerLabel?: string; aliasId?: string })[] {
+  return variables.map((variable) => ({
+    aliasId: variable.aliasId,
+    id: variable.id,
+    name: variable.name,
+    ownerLabel: variable.ownerNodeId === selfNodeId ? undefined : variable.ownerName,
+    value: variable.value,
+  }));
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/bounding-box.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/bounding-box.ts
new file mode 100644
index 000000000..fab0e5f23
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/bounding-box.ts
@@ -0,0 +1,69 @@
+export interface Point {
+  x: number;
+  y: number;
+}
+
+export interface BoundingBox {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+/**
+ * Calculate the combined bounding box of multiple nodes.
+ */
+export function calculateCombinedBoundingBox(
+  nodeIds: string[],
+  boundingBoxes: Record<string, BoundingBox>,
+): BoundingBox | null {
+  if (nodeIds.length === 0) {
+    return null;
+  }
+
+  let minX = Number.POSITIVE_INFINITY;
+  let minY = Number.POSITIVE_INFINITY;
+  let maxX = Number.NEGATIVE_INFINITY;
+  let maxY = Number.NEGATIVE_INFINITY;
+
+  for (const nodeId of nodeIds) {
+    const box = boundingBoxes[nodeId];
+    if (!box) {
+      continue;
+    }
+    minX = Math.min(minX, box.x);
+    minY = Math.min(minY, box.y);
+    maxX = Math.max(maxX, box.x + box.width);
+    maxY = Math.max(maxY, box.y + box.height);
+  }
+
+  if (!Number.isFinite(minX)) {
+    return null;
+  }
+
+  return {
+    height: maxY - minY,
+    width: maxX - minX,
+    x: minX,
+    y: minY,
+  };
+}
+
+/**
+ * Offset of a node's top-left corner relative to its parent's top-left corner,
+ * in canvas coordinates. Used to seed `left`/`top` when switching a view to
+ * absolute positioning so it stays visually in place. Measured from border-box
+ * rects, so parent border widths are not compensated for.
+ */
+export function getOffsetWithinParent(
+  nodeId: string,
+  parentId: string,
+  boundingBoxes: Record<string, BoundingBox>,
+): { left: number; top: number } | null {
+  const node = boundingBoxes[nodeId];
+  const parent = boundingBoxes[parentId];
+  if (!node || !parent) {
+    return null;
+  }
+  return { left: node.x - parent.x, top: node.y - parent.y };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/code-component-writes.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/code-component-writes.ts
new file mode 100644
index 000000000..3d5ead63f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/code-component-writes.ts
@@ -0,0 +1,129 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import { CodeComponentNode, LibraryNode, type CodeComponentNodeData } from "@voidhash/mimic-schema";
+
+import { findTypedNode, type DesignerDocumentRoot } from "./node-proxies";
+
+type CodeComponentNodeProxy = Primitive.TypedNodeProxy<typeof CodeComponentNode>;
+type LibraryNodeProxy = Primitive.TypedNodeProxy<typeof LibraryNode>;
+
+/** Fields stored on a code-component definition node. */
+export interface CodeComponentDefinitionInput {
+  /** Canonical document-relative path (`components/<basename>.tsx`) — the identity. */
+  path: string;
+  source: string;
+}
+
+const codeComponentProxy = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+): CodeComponentNodeProxy | undefined => findTypedNode(root, nodeId, CodeComponentNode);
+
+/**
+ * Finds the singleton `library` container under the document root, creating it
+ * on first use. Returns `undefined` only when the root node is missing (never
+ * happens behind the `mimic.isReady` gate).
+ */
+export function findOrCreateLibrary(root: DesignerDocumentRoot): LibraryNodeProxy | undefined {
+  const rootNode = root.children.first();
+  if (rootNode === undefined) {
+    return undefined;
+  }
+  const existing = rootNode.children.find((child) => child.type === "library");
+  if (existing !== undefined) {
+    return existing.as(LibraryNode);
+  }
+  return rootNode.children.insertLast({ type: "library" }).as(LibraryNode);
+}
+
+/** Reads the existing code-component paths (for uniqueness checks). */
+export function readCodeComponentPaths(root: DesignerDocumentRoot): string[] {
+  const library = root.children.first()?.children.find((child) => child.type === "library");
+  if (library === undefined) {
+    return [];
+  }
+  return library
+    .as(LibraryNode)
+    .children.map((child) => child.get()?.data.path)
+    .filter((path): path is string => path !== undefined);
+}
+
+/**
+ * Inserts a code-component definition into the library. Returns the new node
+ * id, or `null` when the insert is rejected (e.g. root missing).
+ */
+export function insertCodeComponent(
+  root: DesignerDocumentRoot,
+  data: CodeComponentDefinitionInput,
+): string | null {
+  const library = findOrCreateLibrary(root);
+  if (library === undefined) {
+    return null;
+  }
+  try {
+    const node = library.children.insertLast({ type: "codeComponent", ...data });
+    return node.id;
+  } catch {
+    return null;
+  }
+}
+
+/** Updates a definition's `source`, returning the previous value for undo. */
+export function writeCodeComponentSource(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  source: string,
+): string | undefined {
+  const node = codeComponentProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+  const previous = node.get()?.data.source;
+  node.update({ source });
+  return previous;
+}
+
+/** Updates a definition's `path`, returning the previous value for undo. */
+export function writeCodeComponentPath(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  path: string,
+): string | undefined {
+  const node = codeComponentProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+  const previous = node.get()?.data.path;
+  node.update({ path });
+  return previous;
+}
+
+/**
+ * Removes a definition, returning its full snapshot (id + data) so undo can
+ * re-insert it with the same id — keeping local instance references intact.
+ */
+export function removeCodeComponent(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+): CodeComponentNodeData | undefined {
+  const node = codeComponentProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+  const snapshot = node.get();
+  node.remove();
+  return snapshot;
+}
+
+/** Re-inserts a previously removed definition with its original id (undo). */
+export function restoreCodeComponent(
+  root: DesignerDocumentRoot,
+  snapshot: CodeComponentNodeData,
+): void {
+  const library = findOrCreateLibrary(root);
+  library?.children.insertLast({
+    type: "codeComponent",
+    id: snapshot.id,
+    path: snapshot.data.path,
+    source: snapshot.data.source,
+  });
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/code-components.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/code-components.ts
new file mode 100644
index 000000000..ddc166676
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/code-components.ts
@@ -0,0 +1,131 @@
+import type {
+  CodeComponentSnapshotNode,
+  ComponentSnapshotNode,
+  SnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+
+import type {
+  CodeComponentCompiled,
+  DesignerStoreState,
+  LocalComponentArtifact,
+} from "../designer-store-state";
+import { selectDocumentRoot } from "./document-root";
+
+/**
+ * A code-component definition as read from the mimic document library. Its
+ * IDENTITY is the canonical document-relative `path` (`components/<basename>.tsx`);
+ * `name`/`slug` are gone — display text is derived from the path.
+ */
+export interface CodeComponentDefinition {
+  /** The definition's mimic node id (the key `codeComponents.compiled` uses). */
+  id: string;
+  /** Canonical document-relative path — the component's identity. */
+  path: string;
+  source: string;
+}
+
+const EMPTY_NODES: readonly SnapshotNode[] = [];
+
+/**
+ * The file basename (`<basename>.tsx`) of a canonical document-relative
+ * component path (`components/<basename>.tsx`). Returns the input unchanged when
+ * it carries no `components/` prefix (defensive).
+ */
+export function componentFileName(path: string): string {
+  const slash = path.lastIndexOf("/");
+  return slash === -1 ? path : path.slice(slash + 1);
+}
+
+/**
+ * The human-readable display name for a component path: the title-cased file
+ * stem (dropping the `.tsx` extension), e.g. `pricing-option.tsx` →
+ * `Pricing Option`. Words split on `-`, `_`, and spaces.
+ */
+export function componentDisplayName(path: string): string {
+  const fileName = componentFileName(path);
+  const stem = fileName.endsWith(".tsx") ? fileName.slice(0, -".tsx".length) : fileName;
+  const words = stem
+    .split(/[-_\s]+/)
+    .filter((word) => word.length > 0)
+    .map((word) => word.charAt(0).toUpperCase() + word.slice(1));
+  return words.length > 0 ? words.join(" ") : stem;
+}
+
+/**
+ * Selects the raw `codeComponent` snapshot nodes (the library node's children,
+ * or a stable empty array). The returned reference is stable across unrelated
+ * store updates — critical, because deriving fresh objects in a `useStore`
+ * selector loops React (`useSyncExternalStore` requires a cached snapshot).
+ * Map to {@link CodeComponentDefinition}s with `useMemo` in the consumer.
+ */
+export function selectCodeComponentNodes(
+  state: Pick<DesignerStoreState, "mimic">,
+): readonly SnapshotNode[] {
+  const root = selectDocumentRoot(state);
+  const library = root.children.find((child) => child.type === "library");
+  return library ? library.children : EMPTY_NODES;
+}
+
+/** Maps a `codeComponent` snapshot node to a definition. */
+export function toCodeComponentDefinition(node: CodeComponentSnapshotNode): CodeComponentDefinition {
+  return { id: node.id, path: node.data.path, source: node.data.source };
+}
+
+/** Derives definitions from the (stable) library children. */
+export function codeComponentDefinitions(
+  nodes: readonly SnapshotNode[],
+): CodeComponentDefinition[] {
+  return nodes.flatMap((node) =>
+    node.type === "codeComponent" ? [toCodeComponentDefinition(node)] : [],
+  );
+}
+
+/** Whether a component snapshot node references a local definition. */
+export function isLocalComponentNode(node: ComponentSnapshotNode): boolean {
+  return node.data.componentSource === "local";
+}
+
+/**
+ * Resolves a local instance's `componentPath` to its code-component definition,
+ * or `undefined` when no definition file at that path exists (a broken
+ * reference). This is the bridge between an instance (which keys by path) and
+ * the compiled-artifact store (which keys by definition node id).
+ */
+export function definitionForComponentPath(
+  state: Pick<DesignerStoreState, "mimic">,
+  componentPath: string,
+): CodeComponentDefinition | undefined {
+  if (componentPath === "") {
+    return undefined;
+  }
+  return codeComponentDefinitions(selectCodeComponentNodes(state)).find(
+    (definition) => definition.path === componentPath,
+  );
+}
+
+/**
+ * Reads the compiled artifact for a local instance's `componentPath`, if the
+ * referenced definition exists and has compiled. Resolves the path → definition
+ * id → compiled entry in one step.
+ */
+export function localArtifactForComponentPath(
+  state: Pick<DesignerStoreState, "mimic" | "codeComponents">,
+  componentPath: string,
+): LocalComponentArtifact | undefined {
+  const definition = definitionForComponentPath(state, componentPath);
+  return definition ? state.codeComponents.compiled[definition.id]?.artifact : undefined;
+}
+
+/** Reads the compiled state for a definition id (undefined when never compiled). */
+export function selectCodeComponentCompiled(
+  id: string,
+): (state: Pick<DesignerStoreState, "codeComponents">) => CodeComponentCompiled | undefined {
+  return (state) => state.codeComponents.compiled[id];
+}
+
+/** Reads the compiled artifact for a definition id, if ready. */
+export function selectLocalComponentArtifact(
+  id: string,
+): (state: Pick<DesignerStoreState, "codeComponents">) => LocalComponentArtifact | undefined {
+  return (state) => state.codeComponents.compiled[id]?.artifact;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-children.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-children.test.ts
new file mode 100644
index 000000000..9bc30ed09
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-children.test.ts
@@ -0,0 +1,180 @@
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { describe, expect, test } from "vite-plus/test";
+
+import type {
+  ComponentCatalogByContentHash,
+  ComponentCatalogVersion,
+} from "../designer-store-state";
+import {
+  canComponentNodeAcceptChildren,
+  findComponentInsertionParent,
+  findInsertionParent,
+  nodePassesSlotGate,
+} from "./component-children";
+
+function makeVersion(manifest: Partial<ComponentManifest>): ComponentCatalogVersion {
+  return {
+    artifactBaseUrl: "https://assets.example/c/hash",
+    contentHash: "hash-1",
+    createdAt: new Date(0),
+    hasPanel: false,
+    manifest: {
+      manifestVersion: 2,
+      props: {},
+      ...manifest,
+    },
+    previewStates: ["default"],
+    slug: "card",
+    version: 1,
+  };
+}
+
+const slotlessCatalog: ComponentCatalogByContentHash = {
+  "hash-1": makeVersion({ slot: false }),
+};
+
+describe("canComponentNodeAcceptChildren", () => {
+  test("allows when the hash is unknown or missing (best effort)", () => {
+    expect(canComponentNodeAcceptChildren(undefined, slotlessCatalog)).toBe(true);
+    expect(canComponentNodeAcceptChildren("unknown-hash", slotlessCatalog)).toBe(true);
+  });
+
+  test("rejects when the manifest declares slot: false", () => {
+    expect(canComponentNodeAcceptChildren("hash-1", slotlessCatalog)).toBe(false);
+  });
+
+  test("allows when slot is true or undeclared", () => {
+    expect(
+      canComponentNodeAcceptChildren("hash-1", { "hash-1": makeVersion({ slot: true }) }),
+    ).toBe(true);
+    expect(canComponentNodeAcceptChildren("hash-1", { "hash-1": makeVersion({}) })).toBe(true);
+  });
+});
+
+describe("nodePassesSlotGate", () => {
+  test("non-component nodes always pass", () => {
+    expect(nodePassesSlotGate({ type: "view" }, slotlessCatalog)).toBe(true);
+    expect(nodePassesSlotGate(null, slotlessCatalog)).toBe(true);
+  });
+
+  test("component nodes defer to the manifest gate", () => {
+    expect(
+      nodePassesSlotGate({ data: { contentHash: "hash-1" }, type: "component" }, slotlessCatalog),
+    ).toBe(false);
+    expect(
+      nodePassesSlotGate({ data: { contentHash: "other" }, type: "component" }, slotlessCatalog),
+    ).toBe(true);
+  });
+});
+
+describe("findComponentInsertionParent", () => {
+  const snapshot = {
+    children: [
+      {
+        children: [
+          {
+            children: [
+              {
+                children: [],
+                data: { contentHash: "hash-1" },
+                id: "component-1",
+                type: "component",
+              },
+              { children: [], id: "text-1", type: "text" },
+            ],
+            id: "flex-1",
+            type: "view",
+          },
+        ],
+        id: "screen-1",
+        type: "screen",
+      },
+      { children: [], id: "screen-2", type: "screen" },
+    ],
+    id: "root",
+    type: "root",
+  };
+
+  test("returns the selected node when it can host components", () => {
+    expect(findComponentInsertionParent(snapshot, ["flex-1"], {})).toBe("flex-1");
+  });
+
+  test("walks up from non-container selections", () => {
+    expect(findComponentInsertionParent(snapshot, ["text-1"], {})).toBe("flex-1");
+  });
+
+  test("skips slot-less component selections and uses their parent", () => {
+    expect(findComponentInsertionParent(snapshot, ["component-1"], slotlessCatalog)).toBe(
+      "flex-1",
+    );
+  });
+
+  test("falls back to the first screen without a selection", () => {
+    expect(findComponentInsertionParent(snapshot, [], {})).toBe("screen-1");
+  });
+
+  test("returns null for an empty snapshot", () => {
+    expect(findComponentInsertionParent(null, [], {})).toBeNull();
+  });
+});
+
+describe("findInsertionParent", () => {
+  const snapshot = {
+    children: [
+      {
+        children: [
+          {
+            children: [
+              {
+                children: [],
+                data: { contentHash: "hash-1" },
+                id: "component-1",
+                type: "component",
+              },
+              { children: [], id: "text-1", type: "text" },
+            ],
+            id: "flex-1",
+            type: "view",
+          },
+        ],
+        id: "screen-1",
+        type: "screen",
+      },
+      { children: [], id: "screen-2", type: "screen" },
+    ],
+    id: "root",
+    type: "root",
+  };
+
+  test("walks up to the nearest parent that accepts the child type", () => {
+    expect(findInsertionParent(snapshot, "text", ["text-1"], {})).toBe("flex-1");
+    expect(findInsertionParent(snapshot, "view", ["text-1"], {})).toBe("flex-1");
+    expect(findInsertionParent(snapshot, "scrollView", ["text-1"], {})).toBe("flex-1");
+  });
+
+  test("returns the selected node when it can host the child type", () => {
+    expect(findInsertionParent(snapshot, "scrollView", ["screen-1"], {})).toBe("screen-1");
+    expect(findInsertionParent(snapshot, "component", ["flex-1"], {})).toBe("flex-1");
+  });
+
+  test("preserves the component slot gate for non-component children too", () => {
+    // component-1 is slot-less: a view child can't nest inside it, so
+    // resolution walks up to its parent.
+    expect(findInsertionParent(snapshot, "view", ["component-1"], slotlessCatalog)).toBe("flex-1");
+  });
+
+  test("falls back to the first screen when the child can be a screen child", () => {
+    expect(findInsertionParent(snapshot, "component", [], {})).toBe("screen-1");
+    expect(findInsertionParent(snapshot, "view", [], {})).toBe("screen-1");
+  });
+
+  test("returns null when no chain qualifies and a screen cannot host the child", () => {
+    // `path` may only nest under `shape`; screens cannot host it, so the
+    // screen fallback is skipped.
+    expect(findInsertionParent(snapshot, "path", [], {})).toBeNull();
+  });
+
+  test("returns null for an empty snapshot", () => {
+    expect(findInsertionParent(null, "text", [], {})).toBeNull();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-children.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-children.ts
new file mode 100644
index 000000000..5ad4056b7
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-children.ts
@@ -0,0 +1,140 @@
+import { canBeChildOf } from "@voidhash/mimic-schema";
+import { getBuiltinComponent } from "@voidhash/paywall-builtins";
+
+import type { ComponentCatalogByContentHash } from "../designer-store-state";
+
+/**
+ * Minimal snapshot-node shape the slot gate needs. Snapshot nodes nest their
+ * payload under `data`, so component nodes carry `data.contentHash`.
+ */
+export interface SlotGateNode {
+  type: string;
+  data?: Record<string, unknown>;
+  children?: unknown;
+}
+
+/**
+ * Manifest slot gate for a component node identified by its pinned
+ * contentHash: children are allowed unless the mirrored manifest declares
+ * `slot: false`. A missing manifest (hash not in the catalog mirror, or no
+ * hash at all) allows children — the flag is a best-effort heuristic and must
+ * never block on missing data.
+ */
+export function canComponentNodeAcceptChildren(
+  nodeContentHash: string | undefined,
+  byContentHash: ComponentCatalogByContentHash,
+): boolean {
+  if (nodeContentHash === undefined) {
+    return true;
+  }
+  const entry = byContentHash[nodeContentHash];
+  if (!entry) {
+    return true;
+  }
+  return entry.manifest.slot !== false;
+}
+
+/**
+ * Combined per-node slot gate: non-component nodes always pass; builtin
+ * component nodes resolve their manifest by slug from the builtin registry;
+ * other component nodes pass {@link canComponentNodeAcceptChildren} for their
+ * pinned hash.
+ */
+export function nodePassesSlotGate(
+  node: SlotGateNode | null | undefined,
+  byContentHash: ComponentCatalogByContentHash,
+): boolean {
+  if (!node || node.type !== "component") {
+    return true;
+  }
+  if (node.data?.["componentSource"] === "builtin") {
+    const slug = typeof node.data["componentSlug"] === "string" ? node.data["componentSlug"] : "";
+    const definition = getBuiltinComponent(slug);
+    return definition === undefined || definition.manifest.slot !== false;
+  }
+  const contentHash =
+    typeof node.data?.["contentHash"] === "string" ? node.data["contentHash"] : undefined;
+  return canComponentNodeAcceptChildren(contentHash, byContentHash);
+}
+
+interface InsertionSnapshotNode extends SlotGateNode {
+  id: string;
+  children?: readonly InsertionSnapshotNode[];
+}
+
+/**
+ * Finds the nearest valid parent for inserting a node of `childType`: starts
+ * at the first selected node and walks up until a node both accepts
+ * `childType` children (schema containment rules via {@link canBeChildOf})
+ * and passes the component manifest slot gate (which only affects `component`
+ * ancestors — every other node type passes unconditionally). Falls back to
+ * the first screen when no selection chain qualifies and a screen is a valid
+ * parent for `childType`.
+ *
+ * Generalizes the original component-only resolver: a `text`, `view`,
+ * `scrollView`, or `component` insertion each resolves against its own
+ * containment rules while the `component` slot gating is preserved exactly.
+ */
+export function findInsertionParent(
+  snapshot: InsertionSnapshotNode | null,
+  childType: string,
+  selectedNodeIds: readonly string[],
+  byContentHash: ComponentCatalogByContentHash,
+): string | null {
+  if (!snapshot) {
+    return null;
+  }
+
+  const parentById = new Map<string, InsertionSnapshotNode | null>();
+  const nodeById = new Map<string, InsertionSnapshotNode>();
+  const collect = (node: InsertionSnapshotNode, parent: InsertionSnapshotNode | null): void => {
+    nodeById.set(node.id, node);
+    parentById.set(node.id, parent);
+    for (const child of node.children ?? []) {
+      collect(child, node);
+    }
+  };
+  collect(snapshot, null);
+
+  const firstSelectedId = selectedNodeIds[0];
+  if (firstSelectedId !== undefined) {
+    let current = nodeById.get(firstSelectedId) ?? null;
+    while (current) {
+      if (canBeChildOf(childType, current.type) && nodePassesSlotGate(current, byContentHash)) {
+        return current.id;
+      }
+      current = parentById.get(current.id) ?? null;
+    }
+  }
+
+  if (!canBeChildOf(childType, "screen")) {
+    return null;
+  }
+
+  const findFirstScreen = (node: InsertionSnapshotNode): string | null => {
+    if (node.type === "screen") {
+      return node.id;
+    }
+    for (const child of node.children ?? []) {
+      const found = findFirstScreen(child);
+      if (found) {
+        return found;
+      }
+    }
+    return null;
+  };
+  return findFirstScreen(snapshot);
+}
+
+/**
+ * Component-specialized {@link findInsertionParent} — preserves the original
+ * signature/behavior for the `component` insertion path (catalog, local, and
+ * builtin instances all insert as `component` nodes).
+ */
+export function findComponentInsertionParent(
+  snapshot: InsertionSnapshotNode | null,
+  selectedNodeIds: readonly string[],
+  byContentHash: ComponentCatalogByContentHash,
+): string | null {
+  return findInsertionParent(snapshot, "component", selectedNodeIds, byContentHash);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.test.ts
new file mode 100644
index 000000000..3df7ea321
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.test.ts
@@ -0,0 +1,372 @@
+import type { ComponentPropDefinition } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { ComponentNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../testing/offline-document";
+import {
+  prefillBuiltinDefaultProps,
+  prefillComponentDefaultProps,
+  readComponentPropEntries,
+  removeComponentActionEntry,
+  removeComponentPropEntries,
+  removeComponentPropEntry,
+  restoreComponentActionBindings,
+  restoreComponentNodeScalars,
+  restoreComponentPropBindings,
+  updateComponentNodeData,
+  writeComponentActionBinding,
+  writeComponentPropBinding,
+} from "./component-node-writes";
+import { findTypedNode } from "./node-proxies";
+
+function makeDocumentWithComponent() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  let componentId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    componentId = screen.children.insertLast({
+      type: "component",
+      componentSlug: "product-option",
+      componentVersion: 2,
+      contentHash: "ab93f1",
+    }).id;
+  });
+  return { componentId, doc };
+}
+
+function rawComponentData(doc: OfflineDesignerDocument, nodeId: string) {
+  const data = findTypedNode(doc.root, nodeId, ComponentNode)?.get()?.data;
+  if (data === undefined) {
+    throw new Error("expected a component node");
+  }
+  return data;
+}
+
+function rawPropEntries(doc: OfflineDesignerDocument, nodeId: string) {
+  return rawComponentData(doc, nodeId).props;
+}
+
+function rawActionEntries(doc: OfflineDesignerDocument, nodeId: string) {
+  return rawComponentData(doc, nodeId).actionBindings;
+}
+
+const literalString = (value: string) =>
+  ({ type: "literal", value: { key: "string", value } }) as const;
+
+describe("prefillComponentDefaultProps", () => {
+  test("writes storable manifest defaults with unique ids and positions", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    const manifestProps: Record<string, ComponentPropDefinition> = {
+      accentColor: { default: "#16a34a", kind: "string" },
+      count: { default: 3, kind: "number" },
+      enabled: { kind: "boolean" },
+      tags: { default: ["a", "b"], item: { kind: "string" }, kind: "array" },
+    };
+
+    doc.transaction((root) => {
+      prefillComponentDefaultProps(root, componentId, manifestProps);
+    });
+
+    const entries = rawPropEntries(doc, componentId);
+    expect(entries.map((entry) => entry.value?.name).sort()).toEqual([
+      "accentColor",
+      "count",
+      "tags",
+    ]);
+    expect(new Set(entries.map((entry) => entry.id)).size).toBe(3);
+    expect(new Set(entries.map((entry) => entry.pos)).size).toBe(3);
+
+    const accent = entries.find((entry) => entry.value?.name === "accentColor");
+    expect(accent?.value?.value).toEqual(literalString("#16a34a"));
+    const tags = entries.find((entry) => entry.value?.name === "tags");
+    // inner scalar arrays snapshot as {id, pos, value} entries
+    expect(tags?.value?.value.type).toBe("literal");
+    const tagsValue = tags?.value?.value;
+    if (tagsValue?.type !== "literal" || tagsValue.value.key !== "string-array") {
+      throw new Error("expected a string-array literal");
+    }
+    expect(tagsValue.value.value.map((entry) => entry.value)).toEqual(["a", "b"]);
+  });
+});
+
+describe("prefillBuiltinDefaultProps", () => {
+  test("drops the definition's pre-built bindings straight into props", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+
+    doc.transaction((root) => {
+      prefillBuiltinDefaultProps(root, componentId, [
+        { name: "label", value: literalString("New") },
+        { name: "tone", value: literalString("accent") },
+      ]);
+    });
+
+    const entries = rawPropEntries(doc, componentId);
+    expect(entries.map((entry) => entry.value?.name).sort()).toEqual(["label", "tone"]);
+    expect(new Set(entries.map((entry) => entry.id)).size).toBe(2);
+    expect(new Set(entries.map((entry) => entry.pos)).size).toBe(2);
+    const label = entries.find((entry) => entry.value?.name === "label");
+    expect(label?.value?.value).toEqual(literalString("New"));
+  });
+});
+
+describe("writeComponentPropBinding", () => {
+  test("adds a new entry, then updates it in place without duplicating", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+
+    const added = doc.transaction((root) =>
+      writeComponentPropBinding(root, componentId, "accentColor", literalString("#111111")),
+    );
+    expect(added).toEqual({ existed: false, previousRaw: undefined });
+    expect(rawPropEntries(doc, componentId)).toHaveLength(1);
+    const entryId = rawPropEntries(doc, componentId)[0]?.id;
+
+    const updated = doc.transaction((root) =>
+      writeComponentPropBinding(root, componentId, "accentColor", literalString("#222222")),
+    );
+    expect(updated?.existed).toBe(true);
+    expect(updated?.previousRaw).toEqual(literalString("#111111"));
+
+    const entries = rawPropEntries(doc, componentId);
+    expect(entries).toHaveLength(1);
+    expect(entries[0]?.id).toBe(entryId);
+    expect(entries[0]?.value?.value).toEqual(literalString("#222222"));
+  });
+
+  test("assigns unique positions when adding multiple entries", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "first", literalString("1"));
+    });
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "second", literalString("2"));
+      writeComponentPropBinding(root, componentId, "third", literalString("3"));
+    });
+
+    const entries = rawPropEntries(doc, componentId);
+    expect(entries.map((entry) => entry.value?.name)).toEqual(["first", "second", "third"]);
+    expect(new Set(entries.map((entry) => entry.pos)).size).toBe(3);
+  });
+
+  test("returns undefined for missing nodes and writes nothing", () => {
+    const { doc } = makeDocumentWithComponent();
+    const result = doc.transaction((root) =>
+      writeComponentPropBinding(root, "missing", "accentColor", literalString("#111111")),
+    );
+    expect(result).toBeUndefined();
+  });
+});
+
+describe("removeComponentPropEntry", () => {
+  test("removes the named entry and restore re-adds the previous value", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "keep", literalString("k"));
+      writeComponentPropBinding(root, componentId, "drop", literalString("d"));
+    });
+
+    const removed = doc.transaction((root) => removeComponentPropEntry(root, componentId, "drop"));
+    expect(removed?.removed).toBe(true);
+    expect(removed?.previousRaw).toEqual(literalString("d"));
+    expect(rawPropEntries(doc, componentId).map((entry) => entry.value?.name)).toEqual(["keep"]);
+
+    doc.transaction((root) => {
+      restoreComponentPropBindings(root, componentId, [
+        { name: "drop", raw: removed?.previousRaw },
+      ]);
+    });
+    const entries = rawPropEntries(doc, componentId);
+    expect(entries.map((entry) => entry.value?.name)).toEqual(["keep", "drop"]);
+    expect(entries[1]?.value?.value).toEqual(literalString("d"));
+  });
+
+  test("reports removed: false when no entry stores the name", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    const removed = doc.transaction((root) =>
+      removeComponentPropEntry(root, componentId, "absent"),
+    );
+    expect(removed).toEqual({ previousRaw: undefined, removed: false });
+  });
+});
+
+describe("removeComponentPropEntries", () => {
+  test("drops version-update props and restore replays captured values", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "kept", literalString("k"));
+      writeComponentPropBinding(root, componentId, "droppedA", literalString("a"));
+      writeComponentPropBinding(root, componentId, "droppedB", literalString("b"));
+    });
+
+    const removed = doc.transaction((root) =>
+      removeComponentPropEntries(root, componentId, ["droppedA", "droppedB"]),
+    );
+    expect(removed).toEqual([
+      { name: "droppedA", raw: literalString("a") },
+      { name: "droppedB", raw: literalString("b") },
+    ]);
+    expect(rawPropEntries(doc, componentId).map((entry) => entry.value?.name)).toEqual(["kept"]);
+
+    doc.transaction((root) => {
+      restoreComponentPropBindings(root, componentId, removed);
+    });
+    const entries = rawPropEntries(doc, componentId);
+    expect(entries.map((entry) => entry.value?.name).sort()).toEqual([
+      "droppedA",
+      "droppedB",
+      "kept",
+    ]);
+    expect(
+      entries.find((entry) => entry.value?.name === "droppedA")?.value?.value,
+    ).toEqual(literalString("a"));
+  });
+});
+
+describe("forward-compat drop semantics", () => {
+  test("restores with unknown union variants are dropped without throwing", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    const exoticRaw = { payload: { weird: true }, type: "future-kind" };
+
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "known", literalString("k"));
+      restoreComponentPropBindings(root, componentId, [{ name: "exotic", raw: exoticRaw }]);
+      restoreComponentActionBindings(root, componentId, [{ name: "onExotic", raw: exoticRaw }]);
+    });
+
+    expect(rawPropEntries(doc, componentId).map((entry) => entry.value?.name)).toEqual(["known"]);
+    expect(rawActionEntries(doc, componentId)).toHaveLength(0);
+  });
+
+  test("malformed raw payloads are dropped without throwing", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+
+    doc.transaction((root) => {
+      restoreComponentPropBindings(root, componentId, [
+        { name: "broken", raw: { type: "literal", value: { key: "number", value: "NaN" } } },
+        { name: "null", raw: null },
+      ]);
+    });
+
+    expect(rawPropEntries(doc, componentId)).toHaveLength(0);
+  });
+});
+
+describe("readComponentPropEntries", () => {
+  test("reads entries in position order with entry ids", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "a", literalString("1"));
+      writeComponentPropBinding(root, componentId, "b", literalString("2"));
+    });
+
+    const entries = doc.transaction((root) => readComponentPropEntries(root, componentId));
+    expect(entries.map((entry) => entry.name)).toEqual(["a", "b"]);
+    expect(entries[0]?.entryId).toBe(rawPropEntries(doc, componentId)[0]?.id);
+    expect(entries[0]?.raw).toEqual(literalString("1"));
+  });
+});
+
+describe("writeComponentActionBinding", () => {
+  test("adds, updates in place, removes, and restores action bindings", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+
+    const added = doc.transaction((root) =>
+      writeComponentActionBinding(root, componentId, "onSelect", { type: "close-paywall" }),
+    );
+    expect(added).toEqual({ existed: false, previousRaw: undefined });
+
+    const updated = doc.transaction((root) =>
+      writeComponentActionBinding(root, componentId, "onSelect", { type: "none" }),
+    );
+    expect(updated?.existed).toBe(true);
+    expect(updated?.previousRaw).toEqual({ type: "close-paywall" });
+
+    let entries = rawActionEntries(doc, componentId);
+    expect(entries).toHaveLength(1);
+    expect(entries[0]?.value?.action).toEqual({ type: "none" });
+
+    const removed = doc.transaction((root) =>
+      removeComponentActionEntry(root, componentId, "onSelect"),
+    );
+    expect(removed?.removed).toBe(true);
+    expect(rawActionEntries(doc, componentId)).toHaveLength(0);
+
+    doc.transaction((root) => {
+      restoreComponentActionBindings(root, componentId, [
+        { name: "onSelect", raw: removed?.previousRaw },
+      ]);
+    });
+    entries = rawActionEntries(doc, componentId);
+    expect(entries).toHaveLength(1);
+    expect(entries[0]?.value?.action).toEqual({ type: "none" });
+  });
+});
+
+describe("updateComponentNodeData", () => {
+  test("captures only the scalars the update touches and never the arrays", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "accentColor", literalString("#111111"));
+    });
+
+    const previous = doc.transaction((root) =>
+      updateComponentNodeData(root, componentId, { name: "Renamed" }),
+    );
+    expect(previous).toEqual({ name: "Component" });
+    expect(rawComponentData(doc, componentId).name).toBe("Renamed");
+  });
+
+  test("scalar restore round trip leaves prop entries unwrapped", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+    doc.transaction((root) => {
+      writeComponentPropBinding(root, componentId, "accentColor", literalString("#111111"));
+    });
+    const entriesBefore = rawPropEntries(doc, componentId);
+
+    const previous = doc.transaction((root) =>
+      updateComponentNodeData(root, componentId, { name: "Renamed" }),
+    );
+    doc.transaction((root) => {
+      restoreComponentNodeScalars(root, componentId, previous ?? {});
+    });
+
+    expect(rawComponentData(doc, componentId).name).toBe("Component");
+    const entriesAfter = rawPropEntries(doc, componentId);
+    expect(entriesAfter).toEqual(entriesBefore);
+    expect(entriesAfter[0]?.value?.value).toEqual(literalString("#111111"));
+  });
+
+  test("captures version-update scalars including previewState resets", () => {
+    const { componentId, doc } = makeDocumentWithComponent();
+
+    const previous = doc.transaction((root) =>
+      updateComponentNodeData(root, componentId, {
+        componentVersion: 3,
+        contentHash: "deadbeef",
+        previewState: "default",
+      }),
+    );
+    expect(previous).toEqual({
+      componentVersion: 2,
+      contentHash: "ab93f1",
+      previewState: "default",
+    });
+
+    const data = rawComponentData(doc, componentId);
+    expect(data.componentVersion).toBe(3);
+    expect(data.contentHash).toBe("deadbeef");
+
+    doc.transaction((root) => {
+      restoreComponentNodeScalars(root, componentId, previous ?? {});
+    });
+    const restored = rawComponentData(doc, componentId);
+    expect(restored.componentVersion).toBe(2);
+    expect(restored.contentHash).toBe("ab93f1");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.ts
new file mode 100644
index 000000000..7c7070b47
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-node-writes.ts
@@ -0,0 +1,424 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import type { ComponentPropDefinition } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import {
+  ComponentNode,
+  type componentBoundActionSchema,
+  type componentPropBindingSchema,
+} from "@voidhash/mimic-schema";
+
+import {
+  componentBoundActionFromRaw,
+  componentPropBindingFromRaw,
+  manifestDefaultPropValue,
+} from "./component-prop-values";
+import { findTypedNode, type DesignerDocumentRoot } from "./node-proxies";
+
+export type { DesignerDocumentRoot } from "./node-proxies";
+
+/** Set input accepted by component prop binding writes. */
+export type ComponentPropBindingSetInput = NonNullable<
+  Primitive.InferInput<typeof componentPropBindingSchema>
+>;
+
+/** Set input accepted by component action binding writes. */
+export type ComponentBoundActionSetInput = NonNullable<
+  Primitive.InferInput<typeof componentBoundActionSchema>
+>;
+
+type ComponentNodeDataPrimitive = Primitive.InferTreeNodeData<typeof ComponentNode>;
+
+/** Partial component-node `update` input (scalar and array fields). */
+export type ComponentNodeUpdates = Primitive.InferUpdateInput<ComponentNodeDataPrimitive>;
+
+type ComponentNodeProxy = Primitive.TypedNodeProxy<typeof ComponentNode>;
+
+type ComponentNodeDataSnapshot = NonNullable<Primitive.InferSnapshot<ComponentNodeDataPrimitive>>;
+
+const COMPONENT_SCALAR_KEYS = [
+  "componentSource",
+  "componentPath",
+  "componentSlug",
+  "componentVersion",
+  "contentHash",
+  "name",
+  "previewState",
+] as const;
+
+type ComponentScalarKey = (typeof COMPONENT_SCALAR_KEYS)[number];
+
+/** Previous values of the scalar component-node fields an update touched. */
+export type ComponentScalarValues = Partial<Pick<ComponentNodeDataSnapshot, ComponentScalarKey>>;
+
+/** A named entry read from a component node's `props`/`actionBindings`. */
+export interface RawNamedEntry {
+  /** Array-entry id, addressable via `findById`/`remove` on the array proxy. */
+  entryId: string;
+  /** The element's `name` field. */
+  name: string;
+  /**
+   * The stored binding value (`value`/`action` field) as a decoded snapshot.
+   * Typed `unknown` because it travels through undo payloads; replay it via
+   * the `componentPropBindingFromRaw`/`componentBoundActionFromRaw` guards.
+   */
+  raw: unknown;
+}
+
+interface RawNamedElementInput {
+  name: string;
+  raw: unknown;
+}
+
+const componentNodeProxy = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+): ComponentNodeProxy | undefined => findTypedNode(root, nodeId, ComponentNode);
+
+/**
+ * Reads a component node's stored prop entries in position order. Returns an
+ * empty list when the node does not exist or is not a component node.
+ */
+export const readComponentPropEntries = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+): RawNamedEntry[] => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return [];
+  }
+  return (node.data.props.get() ?? []).flatMap((entry) =>
+    entry.value === undefined
+      ? []
+      : [{ entryId: entry.id, name: entry.value.name, raw: entry.value.value }],
+  );
+};
+
+/**
+ * Reads a component node's stored action binding entries in position order.
+ */
+export const readComponentActionEntries = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+): RawNamedEntry[] => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return [];
+  }
+  return (node.data.actionBindings.get() ?? []).flatMap((entry) =>
+    entry.value === undefined
+      ? []
+      : [{ entryId: entry.id, name: entry.value.name, raw: entry.value.action }],
+  );
+};
+
+/**
+ * Narrows a raw stored prop binding value to the union set input,
+ * normalizing entry-wrapped inner arrays to the plain input shape. Payloads
+ * the schema does not recognize (unknown union variants, malformed shapes)
+ * yield `undefined` and are dropped from writes/restores without throwing.
+ */
+export function replayablePropBinding(raw: unknown): ComponentPropBindingSetInput | undefined {
+  return componentPropBindingFromRaw(raw);
+}
+
+/**
+ * Narrows a raw stored bound action value to the union set input. Same drop
+ * semantics as {@link replayablePropBinding}.
+ */
+export function replayableBoundAction(raw: unknown): ComponentBoundActionSetInput | undefined {
+  return componentBoundActionFromRaw(raw);
+}
+
+/** Result of a find-or-create binding write, carrying the undo payload. */
+export interface ComponentEntryWriteResult {
+  /** Whether an entry with the name already existed (updated in place). */
+  existed: boolean;
+  /** The previous stored value (undefined for fresh entries). */
+  previousRaw: unknown;
+}
+
+/**
+ * Sets a component prop binding by name: updates the existing entry in place
+ * through its entry handle, or appends a new `{name, value}` entry. Returns
+ * the previous stored value for undo, or `undefined` when the node does not
+ * exist or is not a component node.
+ */
+export const writeComponentPropBinding = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  propName: string,
+  binding: ComponentPropBindingSetInput,
+): ComponentEntryWriteResult | undefined => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+
+  const existing = node.data.props.find((entry) => entry.get()?.name === propName);
+  if (existing !== undefined) {
+    const previousRaw = existing.get()?.value;
+    existing.value.value.set(binding);
+    return { existed: true, previousRaw };
+  }
+
+  node.data.props.push({ name: propName, value: binding });
+  return { existed: false, previousRaw: undefined };
+};
+
+/**
+ * Sets a component action binding by name. Same write discipline as
+ * {@link writeComponentPropBinding}, against `actionBindings`.
+ */
+export const writeComponentActionBinding = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  actionName: string,
+  action: ComponentBoundActionSetInput,
+): ComponentEntryWriteResult | undefined => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+
+  const existing = node.data.actionBindings.find((entry) => entry.get()?.name === actionName);
+  if (existing !== undefined) {
+    const previousRaw = existing.get()?.action;
+    existing.value.action.set(action);
+    return { existed: true, previousRaw };
+  }
+
+  node.data.actionBindings.push({ action, name: actionName });
+  return { existed: false, previousRaw: undefined };
+};
+
+/** Result of an entry removal, carrying the undo payload. */
+export interface ComponentEntryRemoveResult {
+  /** Whether an entry with the name was found and removed. */
+  removed: boolean;
+  /** The removed stored value (undefined when nothing was removed). */
+  previousRaw: unknown;
+}
+
+/**
+ * Removes a component node's stored prop entry by name. Returns the removed
+ * value for undo, or `undefined` when the node does not exist.
+ */
+export const removeComponentPropEntry = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  propName: string,
+): ComponentEntryRemoveResult | undefined => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+  const existing = node.data.props.find((entry) => entry.get()?.name === propName);
+  if (existing === undefined) {
+    return { previousRaw: undefined, removed: false };
+  }
+  const previousRaw = existing.get()?.value;
+  existing.remove();
+  return { previousRaw, removed: true };
+};
+
+/**
+ * Removes a component node's stored action binding entry by name. Same
+ * mechanics as {@link removeComponentPropEntry}, against `actionBindings`.
+ */
+export const removeComponentActionEntry = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  actionName: string,
+): ComponentEntryRemoveResult | undefined => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+  const existing = node.data.actionBindings.find((entry) => entry.get()?.name === actionName);
+  if (existing === undefined) {
+    return { previousRaw: undefined, removed: false };
+  }
+  const previousRaw = existing.get()?.action;
+  existing.remove();
+  return { previousRaw, removed: true };
+};
+
+/**
+ * Removes all stored prop entries matching the given names. Returns the
+ * removed entries' names and stored values so undo can restore them.
+ */
+export const removeComponentPropEntries = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  propNames: readonly string[],
+): RawNamedElementInput[] => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return [];
+  }
+  const removed: RawNamedElementInput[] = [];
+  for (const entry of node.data.props.filter((candidate) => {
+    const name = candidate.get()?.name;
+    return name !== undefined && propNames.includes(name);
+  })) {
+    const snapshot = entry.get();
+    if (snapshot === undefined) {
+      continue;
+    }
+    entry.remove();
+    removed.push({ name: snapshot.name, raw: snapshot.value });
+  }
+  return removed;
+};
+
+/**
+ * Restores prop bindings from stored values (undo paths). Entries still
+ * present are updated in place; missing ones are re-appended (entry order is
+ * not preserved). Values the schema does not recognize are dropped without
+ * throwing — every reader already treats them as absent.
+ */
+export const restoreComponentPropBindings = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  restores: readonly RawNamedElementInput[],
+): void => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return;
+  }
+
+  for (const restore of restores) {
+    const binding = replayablePropBinding(restore.raw);
+    if (binding === undefined) {
+      continue;
+    }
+    const existing = node.data.props.find((entry) => entry.get()?.name === restore.name);
+    if (existing !== undefined) {
+      existing.value.value.set(binding);
+    } else {
+      node.data.props.push({ name: restore.name, value: binding });
+    }
+  }
+};
+
+/**
+ * Restores action bindings from stored values (undo paths). Same mechanics
+ * as {@link restoreComponentPropBindings}, against `actionBindings`.
+ */
+export const restoreComponentActionBindings = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  restores: readonly RawNamedElementInput[],
+): void => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return;
+  }
+
+  for (const restore of restores) {
+    const action = replayableBoundAction(restore.raw);
+    if (action === undefined) {
+      continue;
+    }
+    const existing = node.data.actionBindings.find((entry) => entry.get()?.name === restore.name);
+    if (existing !== undefined) {
+      existing.value.action.set(action);
+    } else {
+      node.data.actionBindings.push({ action, name: restore.name });
+    }
+  }
+};
+
+/**
+ * Prefills a freshly inserted component node's props with the manifest
+ * defaults the editor can store.
+ */
+export const prefillComponentDefaultProps = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  manifestProps: Readonly<Record<string, ComponentPropDefinition>>,
+): void => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return;
+  }
+
+  for (const [propName, def] of Object.entries(manifestProps)) {
+    const value = manifestDefaultPropValue(def);
+    if (value === undefined) {
+      continue;
+    }
+    node.data.props.push({ name: propName, value: { type: "literal", value } });
+  }
+};
+
+/**
+ * Prefills a freshly inserted BUILTIN component node's props from a
+ * definition's `defaultProps` — pre-built `{name, binding}` entries that drop
+ * straight into `props`. Unlike {@link prefillComponentDefaultProps} (which
+ * derives literal values from a manifest's prop definitions), the bindings are
+ * supplied ready-made by the builtin definition. Each binding is normalized
+ * through {@link replayablePropBinding} (snapshot → set-input shape); any that
+ * the schema does not recognize are dropped without throwing.
+ */
+export const prefillBuiltinDefaultProps = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  defaultProps: ReadonlyArray<{ readonly name: string; readonly value: unknown }>,
+): void => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return;
+  }
+  for (const prop of defaultProps) {
+    const binding = replayablePropBinding(prop.value);
+    if (binding === undefined) {
+      continue;
+    }
+    node.data.props.push({ name: prop.name, value: binding });
+  }
+};
+
+/**
+ * Applies a component-node `update` and captures the previous values of the
+ * scalar fields it touches, for undo restore via
+ * {@link restoreComponentNodeScalars}. Array fields (`props` and
+ * `actionBindings`) are deliberately never captured: snapshot array entries
+ * are `{id, pos, value}`-wrapped and must be restored through the dedicated
+ * entry-addressed helpers instead of `update`. Returns `undefined` when the
+ * node does not exist.
+ */
+export const updateComponentNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  updates: ComponentNodeUpdates,
+): ComponentScalarValues | undefined => {
+  const node = componentNodeProxy(root, nodeId);
+  if (node === undefined) {
+    return undefined;
+  }
+  const data = node.get()?.data;
+  if (data === undefined) {
+    return undefined;
+  }
+
+  const previousValues: ComponentScalarValues = {};
+  const capture = <K extends ComponentScalarKey>(key: K): void => {
+    if (Object.prototype.hasOwnProperty.call(updates, key)) {
+      previousValues[key] = data[key];
+    }
+  };
+  for (const key of COMPONENT_SCALAR_KEYS) {
+    capture(key);
+  }
+  node.update(updates);
+  return previousValues;
+};
+
+/** Restores the scalar fields captured by {@link updateComponentNodeData}. */
+export const restoreComponentNodeScalars = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  previousValues: ComponentScalarValues,
+): void => {
+  componentNodeProxy(root, nodeId)?.update(previousValues);
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.test.ts
new file mode 100644
index 000000000..c1c9a67b4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.test.ts
@@ -0,0 +1,245 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  componentBoundActionFromRaw,
+  componentPropBindingFromRaw,
+  componentPropValueFromRaw,
+  findComponentActionEntry,
+  findComponentPropEntry,
+  manifestDefaultPropValue,
+  readBooleanArray,
+  readNumberArray,
+  readStringArray,
+  scalarVariableTypeKeyForProp,
+  unwrapScalarArray,
+} from "./component-prop-values";
+
+describe("unwrapScalarArray", () => {
+  test("passes plain scalar arrays through", () => {
+    expect(unwrapScalarArray(["a", "b"])).toEqual(["a", "b"]);
+  });
+
+  test("unwraps {id, pos, value} entry-wrapped arrays", () => {
+    expect(
+      unwrapScalarArray([
+        { id: "e1", pos: "a1", value: "a" },
+        { id: "e2", pos: "a2", value: "b" },
+      ]),
+    ).toEqual(["a", "b"]);
+  });
+
+  test("returns an empty array for non-arrays", () => {
+    expect(unwrapScalarArray(undefined)).toEqual([]);
+    expect(unwrapScalarArray({ value: "x" })).toEqual([]);
+  });
+});
+
+describe("typed array readers", () => {
+  test("filter out mismatched item types", () => {
+    expect(readStringArray(["a", 1, true, "b"])).toEqual(["a", "b"]);
+    expect(readNumberArray([{ id: "e", pos: "a", value: 2 }, "x", 3])).toEqual([2, 3]);
+    expect(readBooleanArray([true, "true", false])).toEqual([true, false]);
+  });
+});
+
+describe("componentPropValueFromRaw", () => {
+  test("reads scalar values", () => {
+    expect(componentPropValueFromRaw({ key: "string", value: "hi" })).toEqual({
+      key: "string",
+      value: "hi",
+    });
+    expect(componentPropValueFromRaw({ key: "number", value: 4 })).toEqual({
+      key: "number",
+      value: 4,
+    });
+    expect(componentPropValueFromRaw({ key: "boolean", value: false })).toEqual({
+      key: "boolean",
+      value: false,
+    });
+    expect(componentPropValueFromRaw({ key: "product", value: { productId: "p-1" } })).toEqual({
+      key: "product",
+      value: { productId: "p-1" },
+    });
+    // null (legacy stored shape) and absence both normalize to "no product"
+    expect(componentPropValueFromRaw({ key: "product", value: { productId: null } })).toEqual({
+      key: "product",
+      value: {},
+    });
+    expect(componentPropValueFromRaw({ key: "product", value: {} })).toEqual({
+      key: "product",
+      value: {},
+    });
+  });
+
+  test("rejects mismatched scalar payloads", () => {
+    expect(componentPropValueFromRaw({ key: "string", value: 4 })).toBeUndefined();
+    expect(componentPropValueFromRaw({ key: "product", value: { productId: 4 } })).toBeUndefined();
+    expect(componentPropValueFromRaw({ key: "unknown", value: "x" })).toBeUndefined();
+  });
+
+  test("normalizes wrapped inner arrays to plain arrays", () => {
+    expect(
+      componentPropValueFromRaw({
+        key: "string-array",
+        value: [{ id: "e1", pos: "a1", value: "a" }],
+      }),
+    ).toEqual({ key: "string-array", value: ["a"] });
+    expect(componentPropValueFromRaw({ key: "number-array", value: [1, 2] })).toEqual({
+      key: "number-array",
+      value: [1, 2],
+    });
+  });
+});
+
+describe("componentPropBindingFromRaw", () => {
+  test("reads literal and variable-reference bindings", () => {
+    expect(
+      componentPropBindingFromRaw({
+        type: "literal",
+        value: { key: "boolean", value: true },
+      }),
+    ).toEqual({ type: "literal", value: { key: "boolean", value: true } });
+    expect(
+      componentPropBindingFromRaw({ type: "variable-reference", value: { id: "v-1" } }),
+    ).toEqual({ type: "variable-reference", value: { id: "v-1" } });
+  });
+
+  test("rejects unknown shapes", () => {
+    expect(componentPropBindingFromRaw(null)).toBeUndefined();
+    expect(
+      componentPropBindingFromRaw({ type: "literal", value: { key: "nope" } }),
+    ).toBeUndefined();
+    expect(componentPropBindingFromRaw({ type: "variable-reference", value: {} })).toBeUndefined();
+  });
+});
+
+describe("componentBoundActionFromRaw", () => {
+  test("reads every action variant", () => {
+    expect(componentBoundActionFromRaw({ type: "none" })).toEqual({ type: "none" });
+    expect(componentBoundActionFromRaw({ type: "close-paywall" })).toEqual({
+      type: "close-paywall",
+    });
+    expect(
+      componentBoundActionFromRaw({
+        payload: {
+          newValue: { type: "literal", value: { key: "string", value: "x" } },
+          variableId: "v-1",
+        },
+        type: "set-variable",
+      }),
+    ).toEqual({
+      payload: {
+        newValue: { type: "literal", value: { key: "string", value: "x" } },
+        variableId: "v-1",
+      },
+      type: "set-variable",
+    });
+    expect(
+      componentBoundActionFromRaw({
+        payload: { field: "productId", type: "action-payload" },
+        type: "purchase-product",
+      }),
+    ).toEqual({
+      payload: { field: "productId", type: "action-payload" },
+      type: "purchase-product",
+    });
+  });
+
+  test("reads action-payload value sources on set-variable", () => {
+    expect(
+      componentBoundActionFromRaw({
+        payload: {
+          newValue: { type: "action-payload", value: { field: "amount" } },
+          variableId: "v-1",
+        },
+        type: "set-variable",
+      }),
+    ).toEqual({
+      payload: {
+        newValue: { type: "action-payload", value: { field: "amount" } },
+        variableId: "v-1",
+      },
+      type: "set-variable",
+    });
+  });
+
+  test("rejects malformed actions", () => {
+    expect(componentBoundActionFromRaw(undefined)).toBeUndefined();
+    expect(componentBoundActionFromRaw({ type: "set-variable", payload: {} })).toBeUndefined();
+    expect(
+      componentBoundActionFromRaw({
+        payload: {
+          newValue: { type: "literal", value: { key: "string-array", value: [] } },
+          variableId: "v-1",
+        },
+        type: "set-variable",
+      }),
+    ).toBeUndefined();
+  });
+});
+
+describe("entry finders", () => {
+  const props = [
+    {
+      id: "p-1",
+      pos: "a1",
+      value: { name: "title", value: { type: "literal", value: { key: "string", value: "x" } } },
+    },
+  ];
+  const actionBindings = [
+    {
+      id: "ab-1",
+      pos: "a1",
+      value: { action: { type: "close-paywall" }, name: "onSelect" },
+    },
+  ];
+
+  test("find entries by name and expose the entry id", () => {
+    expect(findComponentPropEntry(props, "title")).toMatchObject({ entryId: "p-1" });
+    expect(findComponentPropEntry(props, "missing")).toBeUndefined();
+    expect(findComponentActionEntry(actionBindings, "onSelect")).toMatchObject({
+      entryId: "ab-1",
+      raw: { type: "close-paywall" },
+    });
+    expect(findComponentActionEntry(actionBindings, "other")).toBeUndefined();
+  });
+});
+
+describe("manifestDefaultPropValue", () => {
+  test("maps storable defaults per kind", () => {
+    expect(manifestDefaultPropValue({ default: "x", kind: "string" })).toEqual({
+      key: "string",
+      value: "x",
+    });
+    expect(
+      manifestDefaultPropValue({ default: "dark", kind: "select", options: ["light", "dark"] }),
+    ).toEqual({ key: "string", value: "dark" });
+    expect(
+      manifestDefaultPropValue({ default: ["a", 1], item: { kind: "string" }, kind: "array" }),
+    ).toEqual({ key: "string-array", value: ["a"] });
+  });
+
+  test("returns undefined for kinds without storable defaults", () => {
+    expect(manifestDefaultPropValue({ kind: "string" })).toBeUndefined();
+    expect(manifestDefaultPropValue({ kind: "ref", refType: "product" })).toBeUndefined();
+    expect(manifestDefaultPropValue({ kind: "component" })).toBeUndefined();
+    expect(
+      manifestDefaultPropValue({ default: [], item: { kind: "component" }, kind: "array" }),
+    ).toBeUndefined();
+  });
+});
+
+describe("scalarVariableTypeKeyForProp", () => {
+  test("maps scalar kinds to variable type keys", () => {
+    expect(scalarVariableTypeKeyForProp({ kind: "string" })).toBe("string");
+    expect(scalarVariableTypeKeyForProp({ kind: "select", options: ["a"] })).toBe("string");
+    expect(scalarVariableTypeKeyForProp({ kind: "image" })).toBe("string");
+    expect(scalarVariableTypeKeyForProp({ kind: "number" })).toBe("number");
+    expect(scalarVariableTypeKeyForProp({ kind: "boolean" })).toBe("boolean");
+    expect(scalarVariableTypeKeyForProp({ kind: "ref", refType: "product" })).toBe("product");
+    expect(scalarVariableTypeKeyForProp({ kind: "component" })).toBeUndefined();
+    expect(
+      scalarVariableTypeKeyForProp({ item: { kind: "string" }, kind: "array" }),
+    ).toBeUndefined();
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.ts
new file mode 100644
index 000000000..88ba5c5cb
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-prop-values.ts
@@ -0,0 +1,343 @@
+import type { ComponentPropDefinition } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { ComponentBoundAction, VariableTypeKey } from "@voidhash/mimic-schema";
+
+/**
+ * Fully-populated component prop value in the plain INPUT shape (inner
+ * arrays plain, not `{id, pos, value}`-wrapped). Assignable to
+ * `componentPropValueSchema`'s set input. An absent `productId` means "no
+ * product selected" (the former `null` — the schema has no null values).
+ */
+export type ComponentPropValuePlain =
+  | { key: "string"; value: string }
+  | { key: "number"; value: number }
+  | { key: "boolean"; value: boolean }
+  | { key: "product"; value: { productId?: string } }
+  | { key: "string-array"; value: readonly string[] }
+  | { key: "number-array"; value: readonly number[] }
+  | { key: "boolean-array"; value: readonly boolean[] };
+
+/**
+ * Fully-populated component prop binding. Assignable to
+ * `componentPropBindingSchema`'s set input.
+ */
+export type ComponentPropBindingPlain =
+  | { type: "literal"; value: ComponentPropValuePlain }
+  | { type: "variable-reference"; value: { id: string } };
+
+function asRecord(raw: unknown): Record<string, unknown> | undefined {
+  return raw && typeof raw === "object" ? (raw as Record<string, unknown>) : undefined;
+}
+
+/**
+ * Unwraps a scalar array stored inside a component prop binding literal.
+ * Bindings written through the union `set` passthrough store inner arrays
+ * PLAIN, while schema-typed snapshots wrap entries as `{id, pos?, value}` —
+ * both shapes must be readable (spec §3.1).
+ */
+export function unwrapScalarArray(raw: unknown): readonly unknown[] {
+  if (!Array.isArray(raw)) {
+    return [];
+  }
+  return raw.map((item) => {
+    const record = asRecord(item);
+    if (record && typeof record.id === "string" && "value" in record) {
+      return record.value;
+    }
+    return item;
+  });
+}
+
+/** Reads a stored scalar array as strings, dropping entries of other types. */
+export function readStringArray(raw: unknown): string[] {
+  return unwrapScalarArray(raw).filter((item): item is string => typeof item === "string");
+}
+
+/** Reads a stored scalar array as numbers, dropping entries of other types. */
+export function readNumberArray(raw: unknown): number[] {
+  return unwrapScalarArray(raw).filter((item): item is number => typeof item === "number");
+}
+
+/** Reads a stored scalar array as booleans, dropping entries of other types. */
+export function readBooleanArray(raw: unknown): boolean[] {
+  return unwrapScalarArray(raw).filter((item): item is boolean => typeof item === "boolean");
+}
+
+/**
+ * Defensively converts a raw stored component prop value (state or snapshot,
+ * with plain or entry-wrapped inner arrays) into the schema set input.
+ * Returns `undefined` for unrecognized shapes.
+ */
+export function componentPropValueFromRaw(raw: unknown): ComponentPropValuePlain | undefined {
+  const record = asRecord(raw);
+  if (!record) {
+    return undefined;
+  }
+  switch (record.key) {
+    case "string":
+      return typeof record.value === "string" ? { key: "string", value: record.value } : undefined;
+    case "number":
+      return typeof record.value === "number" ? { key: "number", value: record.value } : undefined;
+    case "boolean":
+      return typeof record.value === "boolean"
+        ? { key: "boolean", value: record.value }
+        : undefined;
+    case "product": {
+      const value = asRecord(record.value);
+      if (!value) {
+        return undefined;
+      }
+      const productId = value.productId;
+      if (typeof productId === "string") {
+        return { key: "product", value: { productId } };
+      }
+      // null (legacy stored shape) and absence both mean "no product selected".
+      if (productId === null || productId === undefined) {
+        return { key: "product", value: {} };
+      }
+      return undefined;
+    }
+    case "string-array":
+      return { key: "string-array", value: readStringArray(record.value) };
+    case "number-array":
+      return { key: "number-array", value: readNumberArray(record.value) };
+    case "boolean-array":
+      return { key: "boolean-array", value: readBooleanArray(record.value) };
+    default:
+      return undefined;
+  }
+}
+
+/**
+ * Defensively converts a raw stored component prop binding into the schema
+ * set input, normalizing inner arrays to the plain shape.
+ */
+export function componentPropBindingFromRaw(raw: unknown): ComponentPropBindingPlain | undefined {
+  const record = asRecord(raw);
+  if (!record) {
+    return undefined;
+  }
+  if (record.type === "literal") {
+    const value = componentPropValueFromRaw(record.value);
+    return value === undefined ? undefined : { type: "literal", value };
+  }
+  if (record.type === "variable-reference") {
+    const value = asRecord(record.value);
+    if (value && typeof value.id === "string") {
+      return { type: "variable-reference", value: { id: value.id } };
+    }
+    return undefined;
+  }
+  return undefined;
+}
+
+/**
+ * Defensively reads a raw stored component bound action into the flat state
+ * shape (also valid as set input — bound actions contain no array
+ * primitives). Returns `undefined` for unrecognized shapes.
+ */
+export function componentBoundActionFromRaw(raw: unknown): ComponentBoundAction | undefined {
+  const record = asRecord(raw);
+  if (!record) {
+    return undefined;
+  }
+  switch (record.type) {
+    case "none":
+      return { type: "none" };
+    case "close-paywall":
+      return { type: "close-paywall" };
+    case "set-variable": {
+      const payload = asRecord(record.payload);
+      if (!payload || typeof payload.variableId !== "string") {
+        return undefined;
+      }
+      const newValue = componentActionValueSourceFromRaw(payload.newValue);
+      if (newValue === undefined) {
+        return undefined;
+      }
+      return { payload: { newValue, variableId: payload.variableId }, type: "set-variable" };
+    }
+    case "purchase-product": {
+      const payload = asRecord(record.payload);
+      if (!payload) {
+        return undefined;
+      }
+      if (payload.type === "literal" && typeof payload.productId === "string") {
+        return {
+          payload: { productId: payload.productId, type: "literal" },
+          type: "purchase-product",
+        };
+      }
+      if (payload.type === "variable-reference" && typeof payload.variableId === "string") {
+        return {
+          payload: { type: "variable-reference", variableId: payload.variableId },
+          type: "purchase-product",
+        };
+      }
+      if (payload.type === "action-payload" && typeof payload.field === "string") {
+        return {
+          payload: { field: payload.field, type: "action-payload" },
+          type: "purchase-product",
+        };
+      }
+      return undefined;
+    }
+    default:
+      return undefined;
+  }
+}
+
+type ComponentActionValueSourceState = Extract<
+  ComponentBoundAction,
+  { type: "set-variable" }
+>["payload"]["newValue"];
+
+function componentActionValueSourceFromRaw(
+  raw: unknown,
+): ComponentActionValueSourceState | undefined {
+  const record = asRecord(raw);
+  if (!record) {
+    return undefined;
+  }
+  if (record.type === "literal") {
+    const value = componentPropValueFromRaw(record.value);
+    if (
+      value === undefined ||
+      value.key === "string-array" ||
+      value.key === "number-array" ||
+      value.key === "boolean-array"
+    ) {
+      return undefined;
+    }
+    return { type: "literal", value };
+  }
+  if (record.type === "variable-reference") {
+    const value = asRecord(record.value);
+    if (value && typeof value.id === "string") {
+      return { type: "variable-reference", value: { id: value.id } };
+    }
+    return undefined;
+  }
+  if (record.type === "action-payload") {
+    const value = asRecord(record.value);
+    if (value && typeof value.field === "string") {
+      return { type: "action-payload", value: { field: value.field } };
+    }
+    return undefined;
+  }
+  return undefined;
+}
+
+/** A named entry located in a component node's `props`/`actionBindings`. */
+export interface NamedEntry {
+  /** Array-entry id, usable with `at`/`remove` on the array proxy. */
+  entryId: string;
+  /** The raw stored value (`value`/`action` field), unvalidated. */
+  raw: unknown;
+}
+
+function findNamedEntry(
+  entries: unknown,
+  name: string,
+  valueField: "value" | "action",
+): NamedEntry | undefined {
+  if (!Array.isArray(entries)) {
+    return undefined;
+  }
+  for (const entry of entries) {
+    const record = asRecord(entry);
+    if (!record || typeof record.id !== "string") {
+      continue;
+    }
+    const value = asRecord(record.value);
+    if (value && value.name === name) {
+      return { entryId: record.id, raw: value[valueField] };
+    }
+  }
+  return undefined;
+}
+
+/** Finds a component node's stored prop entry by prop name. */
+export function findComponentPropEntry(props: unknown, propName: string): NamedEntry | undefined {
+  return findNamedEntry(props, propName, "value");
+}
+
+/** Finds a component node's stored action binding entry by action name. */
+export function findComponentActionEntry(
+  actionBindings: unknown,
+  actionName: string,
+): NamedEntry | undefined {
+  return findNamedEntry(actionBindings, actionName, "action");
+}
+
+/**
+ * Literal prop value carried by a manifest prop definition's default, when
+ * the definition has a default the editor can store. Mirrors the insertion
+ * prefill mapping in `component-node-actions.ts`.
+ */
+export function manifestDefaultPropValue(
+  def: ComponentPropDefinition,
+): ComponentPropValuePlain | undefined {
+  switch (def.kind) {
+    case "string":
+    case "select":
+    case "image":
+      return def.default === undefined ? undefined : { key: "string", value: def.default };
+    case "number":
+      return def.default === undefined ? undefined : { key: "number", value: def.default };
+    case "boolean":
+      return def.default === undefined ? undefined : { key: "boolean", value: def.default };
+    case "ref":
+    case "component":
+      return undefined;
+    case "array": {
+      if (def.default === undefined) {
+        return undefined;
+      }
+      switch (def.item.kind) {
+        case "string":
+        case "select":
+        case "image":
+          return {
+            key: "string-array",
+            value: def.default.filter((item): item is string => typeof item === "string"),
+          };
+        case "number":
+          return {
+            key: "number-array",
+            value: def.default.filter((item): item is number => typeof item === "number"),
+          };
+        case "boolean":
+          return {
+            key: "boolean-array",
+            value: def.default.filter((item): item is boolean => typeof item === "boolean"),
+          };
+        default:
+          return undefined;
+      }
+    }
+  }
+}
+
+/**
+ * The variable type key a scalar manifest prop kind binds to, or `undefined`
+ * for kinds the scalar `VariableInput` row cannot edit (arrays, component
+ * kinds).
+ */
+export function scalarVariableTypeKeyForProp(
+  def: ComponentPropDefinition,
+): VariableTypeKey | undefined {
+  switch (def.kind) {
+    case "string":
+    case "select":
+    case "image":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "ref":
+      return "product";
+    default:
+      return undefined;
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.test.ts
new file mode 100644
index 000000000..e8d3686db
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.test.ts
@@ -0,0 +1,383 @@
+import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  collectAncestorVariableIds,
+  validateComponentNode,
+  type ComponentNodeValidationInput,
+} from "./component-validation";
+
+function makeManifest(overrides: Partial<ComponentManifest> = {}): ComponentManifest {
+  return {
+    actions: {},
+    manifestVersion: 2,
+    props: {},
+    ...overrides,
+  };
+}
+
+function makeNode(overrides: Partial<ComponentNodeValidationInput> = {}): ComponentNodeValidationInput {
+  return {
+    actionBindings: [],
+    contentHash: "a".repeat(64),
+    props: [],
+    ...overrides,
+  };
+}
+
+const NO_VARIABLES: ReadonlySet<string> = new Set();
+
+describe("validateComponentNode", () => {
+  test("reports manifest-missing when the pinned hash is absent from the catalog", () => {
+    const warnings = validateComponentNode(makeNode(), undefined, NO_VARIABLES);
+    expect(warnings).toHaveLength(1);
+    expect(warnings[0]).toMatchObject({ kind: "manifest-missing", severity: "warning" });
+  });
+
+  test("returns no warnings for a node matching its manifest", () => {
+    const manifest = makeManifest({
+      actions: { onSelect: { payload: { productId: { kind: "string" } } } },
+      props: {
+        title: { default: "Hello", kind: "string" },
+      },
+    });
+    const node = makeNode({
+      actionBindings: [
+        {
+          id: "ab-1",
+          pos: "a1",
+          value: { action: { type: "close-paywall" }, name: "onSelect" },
+        },
+      ],
+      props: [
+        {
+          id: "p-1",
+          pos: "a1",
+          value: {
+            name: "title",
+            localizedValues: [],
+            value: { type: "literal", value: { key: "string", value: "Hi" } },
+          },
+        },
+      ],
+    });
+    expect(validateComponentNode(node, manifest, NO_VARIABLES)).toEqual([]);
+  });
+
+  test("reports unknown prop names", () => {
+    const node = makeNode({
+      props: [
+        {
+          id: "p-1",
+          pos: "a1",
+          value: {
+            name: "ghost",
+            localizedValues: [],
+            value: { type: "literal", value: { key: "string", value: "x" } },
+          },
+        },
+      ],
+    });
+    const warnings = validateComponentNode(node, makeManifest(), NO_VARIABLES);
+    expect(warnings).toHaveLength(1);
+    expect(warnings[0]).toMatchObject({ kind: "unknown-prop", propName: "ghost" });
+  });
+
+  test("reports prop kind mismatches with the expected stored key", () => {
+    const manifest = makeManifest({
+      props: {
+        count: { kind: "number" },
+        tags: { item: { kind: "string" }, kind: "array" },
+        theme: { kind: "select", options: ["light", "dark"] },
+      },
+    });
+    const node = makeNode({
+      props: [
+        {
+          id: "p-1",
+          pos: "a1",
+          value: {
+            name: "count",
+            localizedValues: [],
+            value: { type: "literal", value: { key: "string", value: "5" } },
+          },
+        },
+        {
+          id: "p-2",
+          pos: "a2",
+          value: {
+            name: "theme",
+            localizedValues: [],
+            value: { type: "literal", value: { key: "string", value: "light" } },
+          },
+        },
+        {
+          id: "p-3",
+          pos: "a3",
+          value: {
+            name: "tags",
+            localizedValues: [],
+            value: { type: "literal", value: { key: "number-array", value: [] } },
+          },
+        },
+      ],
+    });
+    const warnings = validateComponentNode(node, manifest, NO_VARIABLES);
+    expect(warnings).toHaveLength(2);
+    expect(warnings).toContainEqual(
+      expect.objectContaining({
+        expectedKey: "number",
+        kind: "prop-kind-mismatch",
+        propName: "count",
+        storedKey: "string",
+      }),
+    );
+    expect(warnings).toContainEqual(
+      expect.objectContaining({
+        expectedKey: "string-array",
+        kind: "prop-kind-mismatch",
+        propName: "tags",
+        storedKey: "number-array",
+      }),
+    );
+  });
+
+  test("does not kind-check variable-reference bindings", () => {
+    const manifest = makeManifest({ props: { count: { kind: "number" } } });
+    const node = makeNode({
+      props: [
+        {
+          id: "p-1",
+          pos: "a1",
+          value: {
+            name: "count",
+            localizedValues: [],
+            value: { type: "variable-reference", value: { id: "var-1" } },
+          },
+        },
+      ],
+    });
+    expect(validateComponentNode(node, manifest, new Set(["var-1"]))).toEqual([]);
+  });
+
+  test("flags missing required props without defaults, info-level for uneditable kinds", () => {
+    const manifest = makeManifest({
+      props: {
+        items: { item: { kind: "component" }, kind: "array" },
+        slotComponent: { kind: "component" },
+        subtitle: { kind: "string", optional: true },
+        title: { kind: "string" },
+        titled: { default: "x", kind: "string" },
+      },
+    });
+    const warnings = validateComponentNode(makeNode(), manifest, NO_VARIABLES);
+    expect(warnings).toHaveLength(3);
+    expect(warnings).toContainEqual(
+      expect.objectContaining({
+        kind: "missing-required-prop",
+        propName: "title",
+        severity: "warning",
+      }),
+    );
+    expect(warnings).toContainEqual(
+      expect.objectContaining({
+        kind: "missing-required-prop",
+        propName: "slotComponent",
+        severity: "info",
+      }),
+    );
+    expect(warnings).toContainEqual(
+      expect.objectContaining({
+        kind: "missing-required-prop",
+        propName: "items",
+        severity: "info",
+      }),
+    );
+  });
+
+  test("reports dangling variable references on prop bindings even without a manifest", () => {
+    const node = makeNode({
+      props: [
+        {
+          id: "p-1",
+          pos: "a1",
+          value: {
+            name: "title",
+            localizedValues: [],
+            value: { type: "variable-reference", value: { id: "var-gone" } },
+          },
+        },
+      ],
+    });
+    const warnings = validateComponentNode(node, undefined, new Set(["var-other"]));
+    expect(warnings).toContainEqual(
+      expect.objectContaining({
+        kind: "dangling-variable-reference",
+        source: "title",
+        variableId: "var-gone",
+      }),
+    );
+  });
+
+  test("reports bindings to undeclared actions", () => {
+    const node = makeNode({
+      actionBindings: [
+        {
+          id: "ab-1",
+          pos: "a1",
+          value: { action: { type: "none" }, name: "onGhost" },
+        },
+      ],
+    });
+    const warnings = validateComponentNode(node, makeManifest(), NO_VARIABLES);
+    expect(warnings).toHaveLength(1);
+    expect(warnings[0]).toMatchObject({ actionName: "onGhost", kind: "unknown-action" });
+  });
+
+  test("reports unknown payload fields for action-payload sources", () => {
+    const manifest = makeManifest({
+      actions: { onSelect: { payload: { productId: { kind: "string" } } } },
+    });
+    const node = makeNode({
+      actionBindings: [
+        {
+          id: "ab-1",
+          pos: "a1",
+          value: {
+            action: {
+              payload: { field: "ghostField", type: "action-payload" },
+              type: "purchase-product",
+            },
+            name: "onSelect",
+          },
+        },
+        {
+          id: "ab-2",
+          pos: "a2",
+          value: {
+            action: {
+              payload: {
+                newValue: {
+                  type: "action-payload",
+                  value: { field: "productId" },
+                },
+                variableId: "var-1",
+              },
+              type: "set-variable",
+            },
+            name: "onSelect",
+          },
+        },
+      ],
+    });
+    const warnings = validateComponentNode(node, manifest, new Set(["var-1"]));
+    expect(warnings).toHaveLength(1);
+    expect(warnings[0]).toMatchObject({
+      actionName: "onSelect",
+      field: "ghostField",
+      kind: "unknown-action-payload-field",
+    });
+  });
+
+  test("reports dangling variable references inside action bindings", () => {
+    const manifest = makeManifest({
+      actions: { onSelect: { payload: {} } },
+    });
+    const node = makeNode({
+      actionBindings: [
+        {
+          id: "ab-1",
+          pos: "a1",
+          value: {
+            action: {
+              payload: {
+                newValue: { type: "variable-reference", value: { id: "var-b" } },
+                variableId: "var-a",
+              },
+              type: "set-variable",
+            },
+            name: "onSelect",
+          },
+        },
+        {
+          id: "ab-2",
+          pos: "a2",
+          value: {
+            action: {
+              payload: { type: "variable-reference", variableId: "var-c" },
+              type: "purchase-product",
+            },
+            name: "onSelect",
+          },
+        },
+      ],
+    });
+    const warnings = validateComponentNode(node, manifest, new Set(["var-a"]));
+    expect(warnings).toHaveLength(2);
+    expect(warnings).toContainEqual(
+      expect.objectContaining({ kind: "dangling-variable-reference", variableId: "var-b" }),
+    );
+    expect(warnings).toContainEqual(
+      expect.objectContaining({ kind: "dangling-variable-reference", variableId: "var-c" }),
+    );
+  });
+
+  test("warns when children exist but the manifest declares slot: false", () => {
+    const manifest = makeManifest({ slot: false });
+    const node = makeNode({ children: [{ id: "child-1" }] });
+    const warnings = validateComponentNode(node, manifest, NO_VARIABLES);
+    expect(warnings).toHaveLength(1);
+    expect(warnings[0]).toMatchObject({ kind: "children-without-slot", severity: "warning" });
+  });
+
+  test("allows children when slot is true or undeclared", () => {
+    const node = makeNode({ children: [{ id: "child-1" }] });
+    expect(validateComponentNode(node, makeManifest({ slot: true }), NO_VARIABLES)).toEqual([]);
+    expect(validateComponentNode(node, makeManifest(), NO_VARIABLES)).toEqual([]);
+  });
+});
+
+describe("collectAncestorVariableIds", () => {
+  const snapshot = {
+    children: [
+      {
+        children: [
+          {
+            children: [],
+            data: { localVariables: [] },
+            id: "component-1",
+            type: "component",
+          },
+          {
+            children: [],
+            data: { localVariables: [{ id: "entry-sibling", value: { id: "var-sibling" } }] },
+            id: "flex-sibling",
+            type: "view",
+          },
+        ],
+        data: { localVariables: [{ id: "entry-screen", value: { id: "var-screen" } }] },
+        id: "screen-1",
+        type: "screen",
+      },
+    ],
+    data: { localVariables: [] },
+    id: "root",
+    type: "root",
+  };
+
+  test("collects entry and internal ids from the ancestor chain only", () => {
+    const ids = collectAncestorVariableIds(snapshot, "component-1");
+    expect(ids.has("var-screen")).toBe(true);
+    expect(ids.has("entry-screen")).toBe(true);
+    expect(ids.has("var-sibling")).toBe(false);
+    expect(ids.has("entry-sibling")).toBe(false);
+  });
+
+  test("returns an empty set for unknown nodes", () => {
+    expect(collectAncestorVariableIds(snapshot, "missing").size).toBe(0);
+  });
+
+  test("returns an empty set for a null snapshot", () => {
+    expect(collectAncestorVariableIds(null, "component-1").size).toBe(0);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.ts
new file mode 100644
index 000000000..2d518a79a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/component-validation.ts
@@ -0,0 +1,361 @@
+import type {
+  ComponentManifest,
+  ComponentPropDefinition,
+} from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
+import type { ComponentNodeData } from "@voidhash/mimic-schema";
+
+export type ComponentNodeWarningSeverity = "warning" | "info";
+
+export type ComponentNodeWarning =
+  | {
+      kind: "manifest-missing";
+      severity: "warning";
+      message: string;
+    }
+  | {
+      kind: "unknown-prop";
+      severity: "warning";
+      message: string;
+      propName: string;
+    }
+  | {
+      kind: "prop-kind-mismatch";
+      severity: "warning";
+      message: string;
+      propName: string;
+      expectedKey: string;
+      storedKey: string;
+    }
+  | {
+      kind: "missing-required-prop";
+      severity: ComponentNodeWarningSeverity;
+      message: string;
+      propName: string;
+    }
+  | {
+      kind: "dangling-variable-reference";
+      severity: "warning";
+      message: string;
+      variableId: string;
+      /** Prop or action name the reference lives on. */
+      source: string;
+    }
+  | {
+      kind: "unknown-action";
+      severity: "warning";
+      message: string;
+      actionName: string;
+    }
+  | {
+      kind: "unknown-action-payload-field";
+      severity: "warning";
+      message: string;
+      actionName: string;
+      field: string;
+    }
+  | {
+      kind: "children-without-slot";
+      severity: "warning";
+      message: string;
+    }
+  | {
+      kind: "component-unresolved";
+      severity: "warning";
+      message: string;
+      /** The document-relative component path that resolved to no definition file. */
+      componentPath: string;
+    };
+
+/**
+ * The component snapshot-node fields validation reads (taken from
+ * `node.data`, plus the node's `children`). `children` stays `unknown`
+ * because the recursion-breaking annotation widens the component node's
+ * child types — only presence matters here.
+ */
+export interface ComponentNodeValidationInput {
+  readonly contentHash: string;
+  readonly props: ComponentNodeData["data"]["props"];
+  readonly actionBindings: ComponentNodeData["data"]["actionBindings"];
+  readonly children?: unknown;
+}
+
+/**
+ * Manifest prop kinds the editor cannot author values for in this slice —
+ * missing-required warnings for these downgrade to info ("configured in
+ * code").
+ */
+function isUneditableKind(def: ComponentPropDefinition): boolean {
+  if (def.kind === "component") {
+    return true;
+  }
+  return def.kind === "array" && (def.item.kind === "component" || def.item.kind === "ref");
+}
+
+/** Stored literal value key expected for a manifest prop kind, if any. */
+function expectedValueKey(def: ComponentPropDefinition): string | undefined {
+  switch (def.kind) {
+    case "string":
+    case "select":
+    case "image":
+      return "string";
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "ref":
+      return "product";
+    case "component":
+      return undefined;
+    case "array":
+      switch (def.item.kind) {
+        case "string":
+        case "select":
+        case "image":
+          return "string-array";
+        case "number":
+          return "number-array";
+        case "boolean":
+          return "boolean-array";
+        default:
+          return undefined;
+      }
+  }
+}
+
+function hasDefault(def: ComponentPropDefinition): boolean {
+  return "default" in def && def.default !== undefined;
+}
+
+/**
+ * Pure per-node component validation (spec §7.4). `manifest` is the catalog
+ * entry for the node's pinned contentHash (`undefined` when absent — reported
+ * as manifest-missing); `availableVariableIds` is the lexical ancestor-chain
+ * variable id set (entry ids and internal ids).
+ */
+export function validateComponentNode(
+  node: ComponentNodeValidationInput,
+  manifest: ComponentManifest | undefined,
+  availableVariableIds: ReadonlySet<string>,
+): ComponentNodeWarning[] {
+  const warnings: ComponentNodeWarning[] = [];
+
+  const checkVariableReference = (variableId: string, source: string): void => {
+    if (!availableVariableIds.has(variableId)) {
+      warnings.push({
+        kind: "dangling-variable-reference",
+        message: `"${source}" references variable "${variableId}", which is not declared on this node's ancestor chain.`,
+        severity: "warning",
+        source,
+        variableId,
+      });
+    }
+  };
+
+  if (manifest === undefined) {
+    warnings.push({
+      kind: "manifest-missing",
+      message: `Pinned component version (${node.contentHash.slice(0, 12)}…) is not in the project catalog. It may have been removed or not deployed to this environment.`,
+      severity: "warning",
+    });
+  }
+
+  for (const entry of node.props) {
+    if (entry.value === undefined) {
+      continue;
+    }
+    const propName = entry.value.name;
+    const binding = entry.value.value;
+
+    if (binding.type === "variable-reference") {
+      checkVariableReference(binding.value.id, propName);
+    }
+
+    if (manifest === undefined) {
+      continue;
+    }
+
+    const def = manifest.props[propName];
+    if (def === undefined) {
+      warnings.push({
+        kind: "unknown-prop",
+        message: `Prop "${propName}" is not declared by the component manifest.`,
+        propName,
+        severity: "warning",
+      });
+      continue;
+    }
+
+    if (binding.type === "literal") {
+      const expected = expectedValueKey(def);
+      if (expected !== undefined && binding.value.key !== expected) {
+        warnings.push({
+          expectedKey: expected,
+          kind: "prop-kind-mismatch",
+          message: `Prop "${propName}" stores a "${binding.value.key}" value but the manifest declares kind "${def.kind}" (expects "${expected}").`,
+          propName,
+          severity: "warning",
+          storedKey: binding.value.key,
+        });
+      }
+    }
+  }
+
+  if (manifest !== undefined) {
+    const storedPropNames = new Set(
+      node.props.flatMap((entry) => (entry.value === undefined ? [] : [entry.value.name])),
+    );
+    for (const [propName, def] of Object.entries(manifest.props)) {
+      if (def.optional === true || hasDefault(def) || storedPropNames.has(propName)) {
+        continue;
+      }
+      const uneditable = isUneditableKind(def);
+      warnings.push({
+        kind: "missing-required-prop",
+        message: uneditable
+          ? `Required prop "${propName}" is configured in code and cannot be set in the editor.`
+          : `Required prop "${propName}" has no value.`,
+        propName,
+        severity: uneditable ? "info" : "warning",
+      });
+    }
+  }
+
+  const manifestActions = manifest?.actions ?? {};
+  for (const entry of node.actionBindings) {
+    if (entry.value === undefined) {
+      continue;
+    }
+    const actionName = entry.value.name;
+    const declared = manifest === undefined ? undefined : manifestActions[actionName];
+
+    if (manifest !== undefined && declared === undefined) {
+      warnings.push({
+        actionName,
+        kind: "unknown-action",
+        message: `Action "${actionName}" is not declared by the component manifest.`,
+        severity: "warning",
+      });
+    }
+
+    const checkPayloadField = (field: string): void => {
+      if (declared === undefined) {
+        return;
+      }
+      if (!(field in declared.payload)) {
+        warnings.push({
+          actionName,
+          field,
+          kind: "unknown-action-payload-field",
+          message: `Action "${actionName}" has no payload field "${field}".`,
+          severity: "warning",
+        });
+      }
+    };
+
+    const bound = entry.value.action;
+    if (bound.type === "set-variable") {
+      checkVariableReference(bound.payload.variableId, actionName);
+      const source = bound.payload.newValue;
+      if (source.type === "variable-reference") {
+        checkVariableReference(source.value.id, actionName);
+      } else if (source.type === "action-payload") {
+        checkPayloadField(source.value.field);
+      }
+    } else if (bound.type === "purchase-product") {
+      const source = bound.payload;
+      if (source.type === "variable-reference") {
+        checkVariableReference(source.variableId, actionName);
+      } else if (source.type === "action-payload") {
+        checkPayloadField(source.field);
+      }
+    }
+  }
+
+  if (
+    manifest !== undefined &&
+    manifest.slot === false &&
+    Array.isArray(node.children) &&
+    node.children.length > 0
+  ) {
+    warnings.push({
+      kind: "children-without-slot",
+      message:
+        "This component declares no slot — its child layers will not be rendered inside it.",
+      severity: "warning",
+    });
+  }
+
+  return warnings;
+}
+
+interface VariableScopeSnapshotNode {
+  id: string;
+  type: string;
+  // The extra optional keys keep `data` from being a "weak type": a
+  // `codeComponent`'s data is `{path, source}` with no `localVariables`, so a
+  // shared property is needed for `RootSnapshotNode` to assign here.
+  data?: { localVariables?: unknown; path?: string; source?: string };
+  children?: readonly VariableScopeSnapshotNode[];
+}
+
+function collectNodeVariableIds(node: VariableScopeSnapshotNode, into: Set<string>): void {
+  const localVariables = node.data?.localVariables;
+  if (!Array.isArray(localVariables)) {
+    return;
+  }
+  for (const entry of localVariables) {
+    if (!(entry && typeof entry === "object")) {
+      continue;
+    }
+    const entryId = (entry as { id?: unknown }).id;
+    if (typeof entryId === "string") {
+      into.add(entryId);
+    }
+    const value = (entry as { value?: unknown }).value;
+    if (value && typeof value === "object") {
+      const internalId = (value as { id?: unknown }).id;
+      if (typeof internalId === "string") {
+        into.add(internalId);
+      }
+    }
+  }
+}
+
+/**
+ * Collects all variable ids (array-entry ids and internal ids — references
+ * may use either) visible to `nodeId` under lexical scoping: the node itself
+ * plus every ancestor up to the root.
+ */
+export function collectAncestorVariableIds(
+  snapshot: VariableScopeSnapshotNode | null,
+  nodeId: string,
+): ReadonlySet<string> {
+  const ids = new Set<string>();
+  if (!snapshot) {
+    return ids;
+  }
+
+  const chain: VariableScopeSnapshotNode[] = [];
+  const walk = (node: VariableScopeSnapshotNode): boolean => {
+    chain.push(node);
+    if (node.id === nodeId) {
+      return true;
+    }
+    for (const child of node.children ?? []) {
+      if (walk(child)) {
+        return true;
+      }
+    }
+    chain.pop();
+    return false;
+  };
+
+  if (!walk(snapshot)) {
+    return ids;
+  }
+
+  for (const node of chain) {
+    collectNodeVariableIds(node, ids);
+  }
+  return ids;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/computed-dimensions.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/computed-dimensions.ts
new file mode 100644
index 000000000..6d17db26e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/computed-dimensions.ts
@@ -0,0 +1,23 @@
+import type { BoundingBox } from "./bounding-box";
+
+export interface ComputedDimensions {
+  width: number;
+  height: number;
+}
+
+/**
+ * Get the computed dimensions for a node from its bounding box.
+ * Returns null if the bounding box doesn't exist.
+ */
+export function getComputedDimensions(
+  nodeId: string,
+  boundingBoxes: Record<string, BoundingBox>,
+): ComputedDimensions | null {
+  const boundingBox = boundingBoxes[nodeId];
+  if (!boundingBox) return null;
+
+  return {
+    width: Math.round(boundingBox.width),
+    height: Math.round(boundingBox.height),
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/document-root.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/document-root.ts
new file mode 100644
index 000000000..b8217241d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/document-root.ts
@@ -0,0 +1,71 @@
+import type { CommanderSlice } from "@voidhash/mimic/zustand-commander";
+import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import type { DesignerStoreState } from "../designer-store-state";
+
+type DocumentRoots = DesignerStoreState["mimic"]["snapshot"];
+
+/**
+ * Runtime-validated narrowing of an engine root snapshot to web-core's
+ * discriminated `RootSnapshotNode`. The shapes are identical at runtime —
+ * the engine types its child arrays as one union-typed node while web-core
+ * distributes the union per variant — so checking the root discriminator is
+ * the whole conversion.
+ */
+function isRootSnapshotNode(value: unknown): value is RootSnapshotNode {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    "type" in value &&
+    value.type === "root" &&
+    "children" in value
+  );
+}
+
+/**
+ * Unwraps the engine's roots-array snapshot to the designer's single document
+ * root. Throws when the document is not ready or malformed — call sites must
+ * sit behind the `mimic.isReady` gate, which discharges both conditions.
+ */
+export function documentRootFromSnapshot(snapshot: DocumentRoots): RootSnapshotNode {
+  if (snapshot === undefined) {
+    throw new Error("Designer document snapshot is not ready");
+  }
+  const root: unknown = snapshot[0];
+  if (root === undefined || snapshot.length !== 1) {
+    throw new Error(`Designer document must have exactly one root, got ${snapshot.length}`);
+  }
+  if (!isRootSnapshotNode(root)) {
+    throw new Error("Designer document root is not a root node");
+  }
+  return root;
+}
+
+/**
+ * Typed single-root selector over the store state. The returned node is the
+ * `root` document node in the nested `{id, type, parentId, pos, data,
+ * children}` snapshot shape.
+ */
+export function selectDocumentRoot(state: Pick<DesignerStoreState, "mimic">): RootSnapshotNode {
+  return documentRootFromSnapshot(state.mimic.snapshot);
+}
+
+/**
+ * Render-time root selector that prefers the active draft's staged snapshot.
+ *
+ * A deferred style edit (e.g. dragging a colour in a panel) runs inside a
+ * mimic draft: its writes land in the draft and never touch the committed
+ * document, so `mimic.snapshot` — and therefore `selectDocumentRoot` — stays
+ * on the pre-edit value until commit. The canvas selects through this instead
+ * so those in-progress edits render live (optimistically); when the draft
+ * commits or discards it clears and this falls back to the committed snapshot.
+ *
+ * Action logic keeps reading `selectDocumentRoot` (the committed base) so undo
+ * capture and change detection stay anchored to the real document state.
+ */
+export function selectRenderRoot(
+  state: Pick<DesignerStoreState, "mimic"> & Partial<CommanderSlice>,
+): RootSnapshotNode {
+  const draftSnapshot = state._commander?.activeDraft?.getSnapshot();
+  return documentRootFromSnapshot(draftSnapshot ?? state.mimic.snapshot);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/id.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/id.ts
new file mode 100644
index 000000000..ff1b4b9d9
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/id.ts
@@ -0,0 +1,8 @@
+import { createId } from "@paralleldrive/cuid2";
+
+/**
+ * Creates an opaque identifier for local paywall designer nodes.
+ */
+export function createNodeId() {
+  return createId();
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/localization.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/localization.test.ts
new file mode 100644
index 000000000..bf1f29217
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/localization.test.ts
@@ -0,0 +1,184 @@
+import { resolveText, RootNode, TextNode } from "@voidhash/mimic-schema";
+import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import type { DesignerStoreState } from "../designer-store-state";
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../testing/offline-document";
+import {
+  computeLocaleCoverage,
+  type GetLocalizableProps,
+  readLocalizationInfo,
+  selectDefaultLocale,
+  selectLocalizationInfo,
+} from "./localization";
+import { findTypedNode } from "./node-proxies";
+
+/** Inserts a component node under the seeded screen with literal string props. */
+function seedComponentWithProps(
+  doc: OfflineDesignerDocument,
+  specs: readonly {
+    name: string;
+    base: string;
+    overrides?: readonly { locale: string; value: string }[];
+  }[],
+): string {
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+    ).insertLast({
+      type: "component",
+      componentSlug: "card",
+      componentVersion: 1,
+      contentHash: "hash",
+      name: "card",
+      previewState: "default",
+    });
+    nodeId = node.id;
+    const proxy = node as unknown as { data: { props: { push: (value: unknown) => void } } };
+    for (const spec of specs) {
+      proxy.data.props.push({
+        name: spec.name,
+        value: { type: "literal", value: { key: "string", value: spec.base } },
+        localizedValues: (spec.overrides ?? []).map((override) => ({
+          locale: override.locale,
+          value: { key: "string", value: override.value },
+        })),
+      });
+    }
+  });
+  return nodeId;
+}
+
+function rootSnapshot(doc: OfflineDesignerDocument): RootSnapshotNode {
+  const node = doc.root.children.first();
+  if (!node) throw new Error("expected the seeded root node");
+  return node.get() as unknown as RootSnapshotNode;
+}
+
+function stateFor(doc: OfflineDesignerDocument): Pick<DesignerStoreState, "mimic"> {
+  return { mimic: { snapshot: [rootSnapshot(doc)] } } as unknown as Pick<
+    DesignerStoreState,
+    "mimic"
+  >;
+}
+
+function addConfigLocale(doc: OfflineDesignerDocument, tag: string): void {
+  const { rootId } = seededIds(doc);
+  doc.transaction((root) => {
+    const rootNode = findTypedNode(root, rootId, RootNode);
+    rootNode?.data.localization.locales.push({ tag });
+  });
+}
+
+function seedTextNode(doc: OfflineDesignerDocument, text: string): string {
+  const { screenId } = seededIds(doc);
+  let nodeId = "";
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const node = (
+      screen.children as unknown as { insertLast: (value: unknown) => { id: string } }
+    ).insertLast({ type: "text", text });
+    nodeId = node.id;
+  });
+  return nodeId;
+}
+
+function setTranslation(
+  doc: OfflineDesignerDocument,
+  nodeId: string,
+  locale: string,
+  value: string,
+): void {
+  doc.transaction((root) => {
+    const node = findTypedNode(root, nodeId, TextNode);
+    node?.data.localized.push({ locale, overrides: { text: value } });
+  });
+}
+
+describe("localization selectors", () => {
+  test("a document without extra locales reports only the default", () => {
+    const doc = createOfflineDesignerDocument();
+    const info = readLocalizationInfo(rootSnapshot(doc));
+    expect(info).toEqual({ defaultLocale: "en", locales: [] });
+    expect(selectDefaultLocale(stateFor(doc))).toBe("en");
+    expect(selectLocalizationInfo(stateFor(doc))).toEqual({ defaultLocale: "en", locales: [] });
+  });
+
+  test("enabled locales are unwrapped from the CRDT config entries", () => {
+    const doc = createOfflineDesignerDocument();
+    addConfigLocale(doc, "de");
+    addConfigLocale(doc, "pt-BR");
+    expect(selectLocalizationInfo(stateFor(doc))).toEqual({
+      defaultLocale: "en",
+      locales: ["de", "pt-BR"],
+    });
+  });
+});
+
+describe("resolveText over the document snapshot", () => {
+  test("renders base for the default locale and the override for a translated locale", () => {
+    const doc = createOfflineDesignerDocument();
+    const nodeId = seedTextNode(doc, "Hello");
+    setTranslation(doc, nodeId, "de", "Hallo");
+    const data = findTypedNode(doc.root, nodeId, TextNode)?.get()?.data;
+    if (!data) throw new Error("expected text node data");
+
+    expect(resolveText(data, null, "en")).toBe("Hello");
+    expect(resolveText(data, "en", "en")).toBe("Hello");
+    expect(resolveText(data, "de", "en")).toBe("Hallo");
+    // Unknown locale with no override falls back to base.
+    expect(resolveText(data, "fr", "en")).toBe("Hello");
+  });
+});
+
+describe("computeLocaleCoverage", () => {
+  test("counts translated text slots against the total", () => {
+    const doc = createOfflineDesignerDocument();
+    const a = seedTextNode(doc, "One");
+    seedTextNode(doc, "Two");
+    setTranslation(doc, a, "de", "Eins");
+
+    expect(computeLocaleCoverage(rootSnapshot(doc), "de", "en")).toEqual({
+      translated: 1,
+      total: 2,
+    });
+    // Nothing to translate in the default locale.
+    expect(computeLocaleCoverage(rootSnapshot(doc), "en", "en")).toEqual({
+      translated: 0,
+      total: 0,
+    });
+  });
+
+  test("includes localizable component-prop slots only when a resolver is supplied", () => {
+    const doc = createOfflineDesignerDocument();
+    seedComponentWithProps(doc, [
+      { name: "title", base: "Hello", overrides: [{ locale: "de", value: "Hallo" }] },
+      { name: "subtitle", base: "World" },
+    ]);
+    const getLocalizableProps: GetLocalizableProps = () => [
+      { propName: "title", label: "Title" },
+      { propName: "subtitle", label: "Subtitle" },
+    ];
+
+    // Both props count toward the total; only the one with a `de` override counts
+    // as translated.
+    expect(computeLocaleCoverage(rootSnapshot(doc), "de", "en", getLocalizableProps)).toEqual({
+      translated: 1,
+      total: 2,
+    });
+    // Without a resolver, component-prop slots are excluded entirely.
+    expect(computeLocaleCoverage(rootSnapshot(doc), "de", "en")).toEqual({
+      translated: 0,
+      total: 0,
+    });
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/localization.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/localization.ts
new file mode 100644
index 000000000..1f8b9aee8
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/localization.ts
@@ -0,0 +1,173 @@
+import {
+  entryValue,
+  resolveBackgroundImage,
+  resolveComponentPropValue,
+  resolveText,
+} from "@voidhash/mimic-schema";
+import type {
+  BackgroundImageSnapshot,
+  LocalizableComponentProp,
+  LocalizableImageData,
+  LocalizablePropDescriptor,
+  MaybeEntry,
+} from "@voidhash/mimic-schema";
+import type {
+  ComponentSnapshotNode,
+  RootSnapshotNode,
+  SnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+
+import type { DesignerStoreState } from "../designer-store-state";
+import { selectDocumentRoot } from "./document-root";
+
+/**
+ * Maps a component instance node to the subset of its props that can carry
+ * localized overrides (literal-bound string/image props marked `.localizable()`
+ * in the manifest). The designer supplies this from its synchronous, store-backed
+ * component-manifest lookup; mimic-schema itself is manifest-agnostic.
+ */
+export type GetLocalizableProps = (
+  node: ComponentSnapshotNode,
+) => readonly LocalizablePropDescriptor[];
+
+/**
+ * The document's localization config, flattened from the CRDT-entry-wrapped
+ * snapshot. `defaultLocale` is the implicit base locale; `locales` is the
+ * ADDITIONAL enabled locales (the default is never listed).
+ */
+export interface LocalizationInfo {
+  readonly defaultLocale: string;
+  /** Additional enabled locale tags, in document order (default excluded). */
+  readonly locales: readonly string[];
+}
+
+/** Per-locale translation coverage over the document's localizable slots. */
+export interface LocaleCoverage {
+  readonly translated: number;
+  readonly total: number;
+}
+
+/**
+ * Reads the localization config off a document root snapshot, unwrapping the
+ * `locales` entries and dropping empty/blank tags.
+ */
+export function readLocalizationInfo(root: RootSnapshotNode): LocalizationInfo {
+  const config = root.data.localization;
+  const locales: string[] = [];
+  for (const entry of config.locales) {
+    const value = entryValue<{ tag: string } | undefined>(entry);
+    if (value !== undefined && value.tag.length > 0) {
+      locales.push(value.tag);
+    }
+  }
+  return { defaultLocale: config.defaultLocale, locales };
+}
+
+/** Store selector: the document's localization config. */
+export function selectLocalizationInfo(state: Pick<DesignerStoreState, "mimic">): LocalizationInfo {
+  return readLocalizationInfo(selectDocumentRoot(state));
+}
+
+/** Store selector: the document's default locale tag. */
+export function selectDefaultLocale(state: Pick<DesignerStoreState, "mimic">): string {
+  return selectDocumentRoot(state).data.localization.defaultLocale;
+}
+
+/**
+ * The effective background image to render for a view/screen node in a locale,
+ * or `null` when the node's base image should be used unchanged. Returns `null`
+ * for the default (nullish) locale and whenever no localized override actually
+ * applies — so the caller substitutes the value ONLY when a real per-locale
+ * override exists, leaving state-override-resolved styles untouched otherwise.
+ */
+export function localizedBackgroundImage(
+  data: LocalizableImageData,
+  activeLocale: string | null,
+  defaultLocale: string,
+): BackgroundImageSnapshot | null {
+  if (activeLocale === null || activeLocale === defaultLocale) {
+    return null;
+  }
+  const resolved = resolveBackgroundImage(data, activeLocale, defaultLocale);
+  return resolved === data.style.backgroundImage ? null : resolved;
+}
+
+/**
+ * Reads a component snapshot node's prop entry by name (unwrapping the CRDT
+ * envelope) as a {@link LocalizableComponentProp} — its base binding plus any
+ * `localizedValues` — ready to feed `resolveComponentPropValue`. Returns
+ * `undefined` when the node has no prop with that name.
+ */
+export function readLocalizableComponentProp(
+  node: ComponentSnapshotNode,
+  propName: string,
+): LocalizableComponentProp | undefined {
+  const props = node.data.props as readonly unknown[];
+  for (const entry of props) {
+    const value = entryValue(
+      entry as MaybeEntry<(LocalizableComponentProp & { name: string }) | undefined>,
+    );
+    if (value !== undefined && value.name === propName) {
+      return value;
+    }
+  }
+  return undefined;
+}
+
+/**
+ * Computes per-locale coverage over the document's localizable slots for a
+ * target locale. Text and view/scrollView/screen background-image slots are always counted;
+ * component-prop slots are included only when `getLocalizableProps` is supplied
+ * (it enumerates a component node's literal-bound localizable string/image props
+ * from the resolved manifest — mimic-schema itself is manifest-agnostic).
+ * `translated` counts slots whose resolved value for `locale` differs from the
+ * base value. Returns `{ translated: 0, total: 0 }` for the default locale.
+ */
+export function computeLocaleCoverage(
+  root: RootSnapshotNode,
+  locale: string,
+  defaultLocale: string,
+  getLocalizableProps?: GetLocalizableProps,
+): LocaleCoverage {
+  if (locale === defaultLocale) {
+    return { translated: 0, total: 0 };
+  }
+  let translated = 0;
+  let total = 0;
+  const visit = (node: SnapshotNode): void => {
+    if (node.type === "text") {
+      total += 1;
+      const data = (node as TextSnapshotNode).data;
+      if (resolveText(data, locale, defaultLocale) !== data.text) {
+        translated += 1;
+      }
+    } else if (node.type === "view" || node.type === "scrollView" || node.type === "screen") {
+      const data = (node as ViewSnapshotNode).data;
+      if (data.style.backgroundImage.url.length > 0) {
+        total += 1;
+        if (resolveBackgroundImage(data, locale, defaultLocale) !== data.style.backgroundImage) {
+          translated += 1;
+        }
+      }
+    } else if (node.type === "component" && getLocalizableProps !== undefined) {
+      const componentNode = node as ComponentSnapshotNode;
+      for (const descriptor of getLocalizableProps(componentNode)) {
+        const prop = readLocalizableComponentProp(componentNode, descriptor.propName);
+        if (prop === undefined || prop.value.type !== "literal") {
+          continue;
+        }
+        total += 1;
+        if (resolveComponentPropValue(prop, locale, defaultLocale) !== prop.value) {
+          translated += 1;
+        }
+      }
+    }
+    for (const child of node.children) {
+      visit(child);
+    }
+  };
+  visit(root);
+  return { translated, total };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.test.ts
new file mode 100644
index 000000000..61be94d8e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.test.ts
@@ -0,0 +1,289 @@
+import { PathNode, ScreenNode, ShapeNode, TextNode, ViewNode } from "@voidhash/mimic-schema";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  createOfflineDesignerDocument,
+  seededIds,
+  type OfflineDesignerDocument,
+} from "../testing/offline-document";
+import { findTypedNode } from "./node-proxies";
+import {
+  restorePathNodeData,
+  restoreScreenNodeData,
+  restoreShapeNodeData,
+  restoreTextNodeData,
+  restoreViewNodeData,
+  updatePathNodeData,
+  updateScreenNodeData,
+  updateShapeNodeData,
+  updateTextNodeData,
+  updateViewNodeData,
+} from "./node-data-writes";
+
+const sampleCondition = {
+  type: "or",
+  value: [
+    {
+      type: "and",
+      value: [
+        {
+          type: "equals",
+          value: {
+            left: { type: "literal", value: { key: "boolean", value: true } },
+            right: { type: "literal", value: { key: "boolean", value: true } },
+          },
+        },
+      ],
+    },
+  ],
+} as const;
+
+function makeDocument() {
+  const doc = createOfflineDesignerDocument();
+  const { screenId } = seededIds(doc);
+  const ids = { flexId: "", pathId: "", screenId, shapeId: "", textId: "" };
+  doc.transaction((root) => {
+    const screen = root.findByIdAcrossTree(screenId);
+    if (!screen) throw new Error("expected the seeded screen node");
+    const flex = screen.children.insertLast({ type: "view", name: "Card" });
+    ids.flexId = flex.id;
+    ids.textId = flex.children.insertLast({ type: "text", text: "Buy now" }).id;
+    const shape = screen.children.insertLast({ type: "shape" });
+    ids.shapeId = shape.id;
+    ids.pathId = shape.children.insertLast({ type: "path", d: "M0 0h24v24H0z" }).id;
+  });
+  return { doc, ids };
+}
+
+function rawViewData(doc: OfflineDesignerDocument, nodeId: string) {
+  const data = findTypedNode(doc.root, nodeId, ViewNode)?.get()?.data;
+  if (data === undefined) {
+    throw new Error("expected a flex node");
+  }
+  return data;
+}
+
+/**
+ * Populates the flex node's array fields the way the editor does, so undo
+ * round trips can prove the entries survive untouched.
+ */
+function populateFlexArrays(doc: OfflineDesignerDocument, flexId: string) {
+  doc.transaction((root) => {
+    const proxy = findTypedNode(root, flexId, ViewNode);
+    if (!proxy) throw new Error("expected a flex node");
+    proxy.data.interactions.push({
+      action: { type: "close-paywall" },
+      id: "interaction-1",
+      trigger: { type: "click" },
+    });
+    proxy.data.states.push({
+      condition: sampleCondition,
+      id: "state-1",
+      name: "Selected",
+    });
+    proxy.data.localVariables.push({
+      id: "var-1",
+      name: "selected",
+      value: { key: "boolean", value: false },
+    });
+  });
+}
+
+describe("updateViewNodeData", () => {
+  test("captures only the touched restorable fields and never the arrays", () => {
+    const { doc, ids } = makeDocument();
+    populateFlexArrays(doc, ids.flexId);
+
+    const previous = doc.transaction((root) =>
+      updateViewNodeData(root, ids.flexId, { name: "Renamed" }),
+    );
+
+    expect(previous).toEqual({ name: "Card" });
+    expect(rawViewData(doc, ids.flexId).name).toBe("Renamed");
+  });
+
+  test("rename undo round trip leaves states/interactions/localVariables byte-identical", () => {
+    const { doc, ids } = makeDocument();
+    populateFlexArrays(doc, ids.flexId);
+
+    const before = rawViewData(doc, ids.flexId);
+    const beforeJson = {
+      interactions: JSON.stringify(before.interactions),
+      localVariables: JSON.stringify(before.localVariables),
+      states: JSON.stringify(before.states),
+    };
+
+    const previous = doc.transaction((root) =>
+      updateViewNodeData(root, ids.flexId, { name: "Renamed" }),
+    );
+    doc.transaction((root) => {
+      restoreViewNodeData(root, ids.flexId, previous ?? {});
+    });
+
+    const after = rawViewData(doc, ids.flexId);
+    expect(after.name).toBe("Card");
+    expect(JSON.stringify(after.interactions)).toBe(beforeJson.interactions);
+    expect(JSON.stringify(after.localVariables)).toBe(beforeJson.localVariables);
+    expect(JSON.stringify(after.states)).toBe(beforeJson.states);
+    // the historical corruption shape: entries re-wrapped as {id, pos, value: {id, pos, value}}
+    const entryValue = after.interactions[0]?.value;
+    expect(entryValue).toEqual({
+      action: { type: "close-paywall" },
+      id: "interaction-1",
+      trigger: { type: "click" },
+    });
+  });
+
+  test("style undo round trip restores the touched style and keeps arrays intact", () => {
+    const { doc, ids } = makeDocument();
+    populateFlexArrays(doc, ids.flexId);
+
+    const beforeStyle = JSON.stringify(rawViewData(doc, ids.flexId).style);
+    const beforeStates = JSON.stringify(rawViewData(doc, ids.flexId).states);
+
+    const previous = doc.transaction((root) =>
+      updateViewNodeData(root, ids.flexId, { style: { width: 240 } }),
+    );
+    expect(previous && Object.keys(previous)).toEqual(["style"]);
+    expect(rawViewData(doc, ids.flexId).style.width).toBe(240);
+
+    doc.transaction((root) => {
+      restoreViewNodeData(root, ids.flexId, previous ?? {});
+    });
+
+    expect(JSON.stringify(rawViewData(doc, ids.flexId).style)).toBe(beforeStyle);
+    expect(JSON.stringify(rawViewData(doc, ids.flexId).states)).toBe(beforeStates);
+  });
+
+  test("undo of a flex-introducing update deletes the field again", () => {
+    const { doc, ids } = makeDocument();
+
+    expect(rawViewData(doc, ids.flexId).style.flex).toBeUndefined();
+
+    const previous = doc.transaction((root) =>
+      updateViewNodeData(root, ids.flexId, { style: { flex: 1 } }),
+    );
+    expect(rawViewData(doc, ids.flexId).style.flex).toBe(1);
+
+    doc.transaction((root) => {
+      restoreViewNodeData(root, ids.flexId, previous ?? {});
+    });
+    expect(rawViewData(doc, ids.flexId).style.flex).toBeUndefined();
+  });
+
+  test("returns undefined for missing or differently-typed nodes", () => {
+    const { doc, ids } = makeDocument();
+    const missing = doc.transaction((root) => updateViewNodeData(root, "missing", {}));
+    expect(missing).toBeUndefined();
+    const wrongType = doc.transaction((root) => updateViewNodeData(root, ids.textId, {}));
+    expect(wrongType).toBeUndefined();
+  });
+});
+
+describe("updateScreenNodeData", () => {
+  test("rename undo round trip leaves states/localVariables byte-identical", () => {
+    const { doc, ids } = makeDocument();
+    doc.transaction((root) => {
+      const proxy = findTypedNode(root, ids.screenId, ScreenNode);
+      if (!proxy) throw new Error("expected a screen node");
+      proxy.data.states.push({ condition: sampleCondition, id: "state-1", name: "Selected" });
+      proxy.data.localVariables.push({
+        id: "var-1",
+        name: "count",
+        value: { key: "number", value: 3 },
+      });
+    });
+    const screenNode = () => {
+      const data = findTypedNode(doc.root, ids.screenId, ScreenNode)?.get()?.data;
+      if (data === undefined) throw new Error("expected a screen node");
+      return data;
+    };
+    const beforeStates = JSON.stringify(screenNode().states);
+    const beforeVariables = JSON.stringify(screenNode().localVariables);
+
+    const previous = doc.transaction((root) =>
+      updateScreenNodeData(root, ids.screenId, { name: "Onboarding" }),
+    );
+    doc.transaction((root) => {
+      restoreScreenNodeData(root, ids.screenId, previous ?? {});
+    });
+
+    expect(screenNode().name).toBe("Screen");
+    expect(JSON.stringify(screenNode().states)).toBe(beforeStates);
+    expect(JSON.stringify(screenNode().localVariables)).toBe(beforeVariables);
+  });
+});
+
+describe("updateTextNodeData", () => {
+  test("text and name undo round trip restores both fields", () => {
+    const { doc, ids } = makeDocument();
+    const textNode = () => {
+      const data = findTypedNode(doc.root, ids.textId, TextNode)?.get()?.data;
+      if (data === undefined) throw new Error("expected a text node");
+      return data;
+    };
+
+    const previous = doc.transaction((root) =>
+      updateTextNodeData(root, ids.textId, { name: "CTA", text: "Subscribe" }),
+    );
+    expect(previous).toEqual({ name: "Text", text: "Buy now" });
+    expect(textNode().text).toBe("Subscribe");
+
+    doc.transaction((root) => {
+      restoreTextNodeData(root, ids.textId, previous ?? {});
+    });
+    expect(textNode().name).toBe("Text");
+    expect(textNode().text).toBe("Buy now");
+  });
+});
+
+describe("updatePathNodeData", () => {
+  test("d and transform undo round trip restores both fields", () => {
+    const { doc, ids } = makeDocument();
+    const pathNode = () => {
+      const data = findTypedNode(doc.root, ids.pathId, PathNode)?.get()?.data;
+      if (data === undefined) throw new Error("expected a path node");
+      return data;
+    };
+
+    const previous = doc.transaction((root) =>
+      updatePathNodeData(root, ids.pathId, { d: "M1 1h2v2H1z", transform: "scale(2)" }),
+    );
+    // an absent transform snapshots as undefined and restores as a deletion
+    expect(previous).toEqual({ d: "M0 0h24v24H0z", transform: undefined });
+    expect(previous && Object.keys(previous).sort()).toEqual(["d", "transform"]);
+
+    doc.transaction((root) => {
+      restorePathNodeData(root, ids.pathId, previous ?? {});
+    });
+    expect(pathNode().d).toBe("M0 0h24v24H0z");
+    expect(pathNode().transform).toBeUndefined();
+  });
+});
+
+describe("updateShapeNodeData", () => {
+  test("svgSource and viewBox undo round trip restores both fields", () => {
+    const { doc, ids } = makeDocument();
+    const shapeNode = () => {
+      const data = findTypedNode(doc.root, ids.shapeId, ShapeNode)?.get()?.data;
+      if (data === undefined) throw new Error("expected a shape node");
+      return data;
+    };
+    const beforeViewBox = JSON.stringify(shapeNode().viewBox);
+
+    const previous = doc.transaction((root) =>
+      updateShapeNodeData(root, ids.shapeId, {
+        svgSource: "<svg/>",
+        viewBox: { height: 48, minX: 0, minY: 0, width: 48 },
+      }),
+    );
+    expect(previous && Object.keys(previous).sort()).toEqual(["svgSource", "viewBox"]);
+    expect(shapeNode().viewBox.width).toBe(48);
+
+    doc.transaction((root) => {
+      restoreShapeNodeData(root, ids.shapeId, previous ?? {});
+    });
+    expect(shapeNode().svgSource).toBeUndefined();
+    expect(JSON.stringify(shapeNode().viewBox)).toBe(beforeViewBox);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.ts
new file mode 100644
index 000000000..e179a4fda
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/node-data-writes.ts
@@ -0,0 +1,349 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import {
+  PathNode,
+  ScreenNode,
+  ScrollViewNode,
+  ShapeNode,
+  TextNode,
+  ViewNode,
+} from "@voidhash/mimic-schema";
+
+import { findTypedNode, type DesignerDocumentRoot } from "./node-proxies";
+import { unwrapEntriesDeep } from "./replay";
+
+type NodeDataSnapshot<TNode extends Primitive.AnyTreeNodePrimitive> = NonNullable<
+  Primitive.InferSnapshot<Primitive.InferTreeNodeData<TNode>>
+>;
+
+type NodeDataUpdates<TNode extends Primitive.AnyTreeNodePrimitive> = Primitive.InferUpdateInput<
+  Primitive.InferTreeNodeData<TNode>
+>;
+
+/**
+ * Applies a node `update` and captures the previous values of the restorable
+ * (non-array) fields it touches, for undo restore. Array fields (`states`,
+ * `interactions`, `localVariables`, `linkedVariables`) are deliberately never
+ * captured: snapshot entries are `{id, pos, value}`-wrapped and must be
+ * restored through their dedicated entry-addressed actions instead of
+ * `update`. Returns `undefined` when the node does not exist or has another
+ * type.
+ */
+const captureAndUpdateNodeData = <
+  TNode extends Primitive.AnyTreeNodePrimitive,
+  K extends keyof NodeDataSnapshot<TNode> & string,
+>(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  nodeType: TNode,
+  restorableKeys: readonly K[],
+  updates: NodeDataUpdates<TNode>,
+): Partial<Pick<NodeDataSnapshot<TNode>, K>> | undefined => {
+  const node = findTypedNode(root, nodeId, nodeType);
+  if (node === undefined) {
+    return undefined;
+  }
+  const snapshot = node.get();
+  if (snapshot === undefined) {
+    return undefined;
+  }
+
+  const data: NodeDataSnapshot<TNode> | undefined = snapshot.data;
+  if (data === undefined) {
+    return undefined;
+  }
+  const previousValues: Partial<Pick<NodeDataSnapshot<TNode>, K>> = {};
+  for (const key of restorableKeys) {
+    if (Object.prototype.hasOwnProperty.call(updates, key)) {
+      previousValues[key] = data[key];
+    }
+  }
+  node.update(updates);
+  return previousValues;
+};
+
+const VIEW_RESTORABLE_KEYS = ["name", "style"] as const;
+const SCROLLVIEW_RESTORABLE_KEYS = [
+  "name",
+  "style",
+  "horizontal",
+  "showsScrollIndicator",
+] as const;
+const SCREEN_RESTORABLE_KEYS = ["name", "style"] as const;
+const TEXT_RESTORABLE_KEYS = ["name", "style", "text"] as const;
+const PATH_RESTORABLE_KEYS = ["d", "name", "style", "transform"] as const;
+const SHAPE_RESTORABLE_KEYS = ["name", "style", "svgSource", "viewBox"] as const;
+
+/** Bivariant structural view of a style struct proxy for generic restores. */
+interface StyleWriteProxy {
+  update(value: Record<string, unknown>): void;
+}
+
+/**
+ * Restores a captured style snapshot. Optional style fields (`flex` and the
+ * min/max constraints) snapshot as ABSENT when unset, so they are explicitly
+ * deleted first — a plain partial update would leave values the undone
+ * action introduced. Keys unknown to a node type's style schema are ignored
+ * by the struct update.
+ *
+ * Structured fields need care the plain spread cannot give: the captured
+ * snapshot carries nested array elements (e.g. `backgroundGradient.stops`) in
+ * the CRDT `{id, pos, value}` entry wrapper while `update` expects logical
+ * input — replaying the wrapper would collapse every element to its schema
+ * defaults. So values are unwrapped, and keys whose unwrapped value matches
+ * the current style are skipped entirely, which also preserves the entry
+ * identity (ids/positions) of untouched nested arrays.
+ */
+const restoreStyle = (
+  styleProxy: StyleWriteProxy,
+  previousStyle: Record<string, unknown>,
+  currentStyle: Record<string, unknown>,
+): void => {
+  const restored = unwrapEntriesDeep(previousStyle) as Record<string, unknown>;
+  const current = unwrapEntriesDeep(currentStyle) as Record<string, unknown>;
+  const payload: Record<string, unknown> = {
+    flex: undefined,
+    maxHeight: undefined,
+    maxWidth: undefined,
+    minHeight: undefined,
+    minWidth: undefined,
+  };
+  for (const [key, value] of Object.entries(restored)) {
+    if (JSON.stringify(value) === JSON.stringify(current[key])) {
+      // Unchanged — do not rewrite it, and do not let the optional-field
+      // deletion markers above delete a value the restore should keep.
+      delete payload[key];
+      continue;
+    }
+    payload[key] = value;
+  }
+  styleProxy.update(payload);
+};
+
+/** Previous values of the restorable view-node fields an update touched. */
+export type ViewNodePreviousValues = Partial<
+  Pick<NodeDataSnapshot<typeof ViewNode>, (typeof VIEW_RESTORABLE_KEYS)[number]>
+>;
+
+/** Previous values of the restorable scrollView-node fields an update touched. */
+export type ScrollViewNodePreviousValues = Partial<
+  Pick<NodeDataSnapshot<typeof ScrollViewNode>, (typeof SCROLLVIEW_RESTORABLE_KEYS)[number]>
+>;
+
+/** Previous values of the restorable screen-node fields an update touched. */
+export type ScreenNodePreviousValues = Partial<
+  Pick<NodeDataSnapshot<typeof ScreenNode>, (typeof SCREEN_RESTORABLE_KEYS)[number]>
+>;
+
+/** Previous values of the restorable text-node fields an update touched. */
+export type TextNodePreviousValues = Partial<
+  Pick<NodeDataSnapshot<typeof TextNode>, (typeof TEXT_RESTORABLE_KEYS)[number]>
+>;
+
+/** Previous values of the restorable path-node fields an update touched. */
+export type PathNodePreviousValues = Partial<
+  Pick<NodeDataSnapshot<typeof PathNode>, (typeof PATH_RESTORABLE_KEYS)[number]>
+>;
+
+/** Previous values of the restorable shape-node fields an update touched. */
+export type ShapeNodePreviousValues = Partial<
+  Pick<NodeDataSnapshot<typeof ShapeNode>, (typeof SHAPE_RESTORABLE_KEYS)[number]>
+>;
+
+/**
+ * Applies a view-node `update`, capturing touched restorable fields for undo.
+ * See {@link captureAndUpdateNodeData} for why array fields are excluded.
+ */
+export const updateViewNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  updates: NodeDataUpdates<typeof ViewNode>,
+): ViewNodePreviousValues | undefined =>
+  captureAndUpdateNodeData(root, nodeId, ViewNode, VIEW_RESTORABLE_KEYS, updates);
+
+/** Restores the fields captured by {@link updateViewNodeData}. */
+export const restoreViewNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  previousValues: ViewNodePreviousValues,
+): void => {
+  const node = findTypedNode(root, nodeId, ViewNode);
+  if (node === undefined) {
+    return;
+  }
+  const { style, ...rest } = previousValues;
+  node.update(rest);
+  if (style !== undefined) {
+    restoreStyle(
+      node.data.style,
+      style,
+      (node.get()?.data.style ?? {}) as Record<string, unknown>,
+    );
+  }
+};
+
+/**
+ * Applies a scrollView-node `update`, capturing touched restorable fields for
+ * undo. Covers the view-identical `name`/`style` plus the scrollView-only
+ * `horizontal`/`showsScrollIndicator` data flags. See
+ * {@link captureAndUpdateNodeData} for why array fields are excluded.
+ */
+export const updateScrollViewNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  updates: NodeDataUpdates<typeof ScrollViewNode>,
+): ScrollViewNodePreviousValues | undefined =>
+  captureAndUpdateNodeData(root, nodeId, ScrollViewNode, SCROLLVIEW_RESTORABLE_KEYS, updates);
+
+/** Restores the fields captured by {@link updateScrollViewNodeData}. */
+export const restoreScrollViewNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  previousValues: ScrollViewNodePreviousValues,
+): void => {
+  const node = findTypedNode(root, nodeId, ScrollViewNode);
+  if (node === undefined) {
+    return;
+  }
+  const { style, ...rest } = previousValues;
+  node.update(rest);
+  if (style !== undefined) {
+    restoreStyle(
+      node.data.style,
+      style,
+      (node.get()?.data.style ?? {}) as Record<string, unknown>,
+    );
+  }
+};
+
+/**
+ * Applies a screen-node `update`, capturing touched restorable fields for
+ * undo. See {@link captureAndUpdateNodeData} for why array fields are
+ * excluded.
+ */
+export const updateScreenNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  updates: NodeDataUpdates<typeof ScreenNode>,
+): ScreenNodePreviousValues | undefined =>
+  captureAndUpdateNodeData(root, nodeId, ScreenNode, SCREEN_RESTORABLE_KEYS, updates);
+
+/** Restores the fields captured by {@link updateScreenNodeData}. */
+export const restoreScreenNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  previousValues: ScreenNodePreviousValues,
+): void => {
+  const node = findTypedNode(root, nodeId, ScreenNode);
+  if (node === undefined) {
+    return;
+  }
+  const { style, ...rest } = previousValues;
+  node.update(rest);
+  if (style !== undefined) {
+    restoreStyle(
+      node.data.style,
+      style,
+      (node.get()?.data.style ?? {}) as Record<string, unknown>,
+    );
+  }
+};
+
+/**
+ * Applies a text-node `update`, capturing touched restorable fields for undo.
+ * See {@link captureAndUpdateNodeData} for why array fields are excluded.
+ */
+export const updateTextNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  updates: NodeDataUpdates<typeof TextNode>,
+): TextNodePreviousValues | undefined =>
+  captureAndUpdateNodeData(root, nodeId, TextNode, TEXT_RESTORABLE_KEYS, updates);
+
+/** Restores the fields captured by {@link updateTextNodeData}. */
+export const restoreTextNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  previousValues: TextNodePreviousValues,
+): void => {
+  const node = findTypedNode(root, nodeId, TextNode);
+  if (node === undefined) {
+    return;
+  }
+  const { style, ...rest } = previousValues;
+  node.update(rest);
+  if (style !== undefined) {
+    restoreStyle(
+      node.data.style,
+      style,
+      (node.get()?.data.style ?? {}) as Record<string, unknown>,
+    );
+  }
+};
+
+/**
+ * Applies a path-node `update`, capturing touched restorable fields for undo.
+ * See {@link captureAndUpdateNodeData} for why array fields are excluded.
+ * An absent `transform` snapshots as `undefined` and restores as a field
+ * deletion.
+ */
+export const updatePathNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  updates: NodeDataUpdates<typeof PathNode>,
+): PathNodePreviousValues | undefined =>
+  captureAndUpdateNodeData(root, nodeId, PathNode, PATH_RESTORABLE_KEYS, updates);
+
+/** Restores the fields captured by {@link updatePathNodeData}. */
+export const restorePathNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  previousValues: PathNodePreviousValues,
+): void => {
+  const node = findTypedNode(root, nodeId, PathNode);
+  if (node === undefined) {
+    return;
+  }
+  const { style, ...rest } = previousValues;
+  node.update(rest);
+  if (style !== undefined) {
+    restoreStyle(
+      node.data.style,
+      style,
+      (node.get()?.data.style ?? {}) as Record<string, unknown>,
+    );
+  }
+};
+
+/**
+ * Applies a shape-node `update`, capturing touched restorable fields for
+ * undo. See {@link captureAndUpdateNodeData} for why array fields are
+ * excluded. An absent `svgSource` snapshots as `undefined` and restores as a
+ * field deletion.
+ */
+export const updateShapeNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  updates: NodeDataUpdates<typeof ShapeNode>,
+): ShapeNodePreviousValues | undefined =>
+  captureAndUpdateNodeData(root, nodeId, ShapeNode, SHAPE_RESTORABLE_KEYS, updates);
+
+/** Restores the fields captured by {@link updateShapeNodeData}. */
+export const restoreShapeNodeData = (
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  previousValues: ShapeNodePreviousValues,
+): void => {
+  const node = findTypedNode(root, nodeId, ShapeNode);
+  if (node === undefined) {
+    return;
+  }
+  const { style, ...rest } = previousValues;
+  node.update(rest);
+  if (style !== undefined) {
+    restoreStyle(
+      node.data.style,
+      style,
+      (node.get()?.data.style ?? {}) as Record<string, unknown>,
+    );
+  }
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/node-proxies.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/node-proxies.ts
new file mode 100644
index 000000000..6ebb03c6d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/node-proxies.ts
@@ -0,0 +1,68 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import {
+  PathNode,
+  ScreenNode,
+  ScrollViewNode,
+  ShapeNode,
+  TextNode,
+  ViewNode,
+  type PaywallDesignerDocument,
+  type StatefulEditableNodeType,
+} from "@voidhash/mimic-schema";
+
+/**
+ * Designer document tree proxy, as passed to `document.transaction`
+ * callbacks (and exposed as `document.root`).
+ */
+export type DesignerDocumentRoot = Primitive.InferProxy<typeof PaywallDesignerDocument>;
+
+/**
+ * Resolves a node anywhere in the tree to its typed proxy, or `undefined`
+ * when the node does not exist or has a different type (`as` would throw on
+ * a type mismatch; this is the non-throwing variant every action uses).
+ */
+export function findTypedNode<TNode extends Primitive.AnyTreeNodePrimitive>(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  node: TNode,
+): Primitive.TypedNodeProxy<TNode> | undefined {
+  const found = root.findByIdAcrossTree(nodeId);
+  if (found === undefined || found.type !== node.type) {
+    return undefined;
+  }
+  return found.as(node);
+}
+
+/** Typed proxy union for the node types carrying the generic stateful data. */
+export type StatefulNodeProxy =
+  | Primitive.TypedNodeProxy<typeof ViewNode>
+  | Primitive.TypedNodeProxy<typeof ScrollViewNode>
+  | Primitive.TypedNodeProxy<typeof ScreenNode>
+  | Primitive.TypedNodeProxy<typeof TextNode>
+  | Primitive.TypedNodeProxy<typeof ShapeNode>
+  | Primitive.TypedNodeProxy<typeof PathNode>;
+
+/**
+ * Resolves a stateful node (style/states/localVariables data) to its typed
+ * proxy by its declared node type, or `undefined` when missing/mismatched.
+ */
+export function findStatefulNode(
+  root: DesignerDocumentRoot,
+  nodeId: string,
+  nodeType: StatefulEditableNodeType,
+): StatefulNodeProxy | undefined {
+  switch (nodeType) {
+    case "view":
+      return findTypedNode(root, nodeId, ViewNode);
+    case "scrollView":
+      return findTypedNode(root, nodeId, ScrollViewNode);
+    case "screen":
+      return findTypedNode(root, nodeId, ScreenNode);
+    case "text":
+      return findTypedNode(root, nodeId, TextNode);
+    case "shape":
+      return findTypedNode(root, nodeId, ShapeNode);
+    case "path":
+      return findTypedNode(root, nodeId, PathNode);
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/node-type-helpers.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/node-type-helpers.ts
new file mode 100644
index 000000000..80269a940
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/node-type-helpers.ts
@@ -0,0 +1,117 @@
+import { canHaveChildren as canHaveChildrenFromCatalog } from "@voidhash/mimic-schema";
+import type { AlignItems } from "@voidhash/mimic-schema";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+/**
+ * Node types that can act as flex parents (have flexDirection, can contain flex children).
+ * Add new container types here when they're introduced.
+ */
+const FLEX_PARENT_TYPES = new Set(["view", "scrollView", "screen"]);
+
+/**
+ * Node types that can act as flex children (can have flex, alignSelf properties).
+ * Includes shape since shapes can be flex children.
+ */
+const FLEX_CHILD_TYPES = new Set(["view", "scrollView", "screen", "shape"]);
+
+/**
+ * Check if a node can act as a flex parent (has flexDirection, alignItems, justifyContent).
+ * Use this when you need to get parent's flex direction or check if a node can have flex children.
+ */
+export function isFlexParent(node: { type: string } | null | undefined): boolean {
+  return node != null && FLEX_PARENT_TYPES.has(node.type);
+}
+
+/**
+ * Check if a node can act as a flex child (can have flex, alignSelf properties).
+ * Use this when determining if sizing modes (hug/fill/custom) apply.
+ */
+export function isFlexChild(node: { type: string } | null | undefined): boolean {
+  return node != null && FLEX_CHILD_TYPES.has(node.type);
+}
+
+/**
+ * Check if a node can contain children.
+ * Use this for drag-drop, tree building, etc.
+ */
+export function canHaveChildren(node: { type: string } | null | undefined): boolean {
+  return node != null && canHaveChildrenFromCatalog(node.type);
+}
+
+/**
+ * Check if a node type string represents a flex parent.
+ */
+export function isFlexParentType(type: string | null | undefined): boolean {
+  return type != null && FLEX_PARENT_TYPES.has(type);
+}
+
+/**
+ * Check if a node type string represents a flex child.
+ */
+export function isFlexChildType(type: string | null | undefined): boolean {
+  return type != null && FLEX_CHILD_TYPES.has(type);
+}
+
+/**
+ * Check if a node type string can have children.
+ */
+export function canHaveChildrenType(type: string | null | undefined): boolean {
+  return canHaveChildrenFromCatalog(type);
+}
+
+/**
+ * Get flex direction from a node if it's a flex parent, otherwise return default.
+ */
+export function getFlexDirection(
+  node: SnapshotNode | null | undefined,
+  defaultDirection: "row" | "column" = "column",
+): "row" | "column" {
+  if (!node || !isFlexParent(node)) {
+    return defaultDirection;
+  }
+  if (node.type === "view" || node.type === "scrollView" || node.type === "screen") {
+    return node.data.style.flexDirection;
+  }
+  return defaultDirection;
+}
+
+/**
+ * Get the resolved `alignItems` of a flex parent, else the fallback. Used to
+ * decide whether a child stretches on the cross axis by default (an
+ * `alignSelf: "auto"` child fills the cross axis only when its parent's
+ * `alignItems` is `"stretch"` — the schema default).
+ */
+export function getAlignItems(
+  node: SnapshotNode | null | undefined,
+  fallback: AlignItems = "stretch",
+): AlignItems {
+  if (!node || !isFlexParent(node)) {
+    return fallback;
+  }
+  if (node.type === "view" || node.type === "scrollView" || node.type === "screen") {
+    return node.data.style.alignItems;
+  }
+  return fallback;
+}
+
+/**
+ * Minimum size (px) seeded on a designer click-inserted view along its parent's
+ * MAIN axis so the empty view stays visible under hug-by-default sizing (an
+ * empty hugging view would otherwise collapse to zero on that axis).
+ */
+export const DESIGNER_INSERT_MIN_SIZE = 100;
+
+/**
+ * The initial style a DESIGNER click-inserted view gets so it stays visible:
+ * it stretches on the parent's cross axis (`alignSelf: "stretch"`) and takes a
+ * minimum size on the parent's main axis (which would otherwise hug to zero).
+ * Direction-aware by the PARENT's `flexDirection`. AI-created views deliberately
+ * skip this — they hug like real CSS.
+ */
+export function designerInsertViewStyle(
+  parentDirection: "row" | "column",
+): { alignSelf: "stretch"; minHeight: number } | { alignSelf: "stretch"; minWidth: number } {
+  return parentDirection === "column"
+    ? { alignSelf: "stretch", minHeight: DESIGNER_INSERT_MIN_SIZE }
+    : { alignSelf: "stretch", minWidth: DESIGNER_INSERT_MIN_SIZE };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/nodes.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/nodes.ts
new file mode 100644
index 000000000..880bf47d8
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/nodes.ts
@@ -0,0 +1,18 @@
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+
+import type { PaywallDesignerStoreType } from "../designer-store";
+import { documentRootFromSnapshot } from "./document-root";
+import { findNodeById } from "./tree";
+
+type StoreData = PaywallDesignerStoreType;
+
+/**
+ * Finds a node by id in the store's document snapshot. Must be called behind
+ * the `mimic.isReady` gate (the snapshot selector throws pre-ready).
+ */
+export const getNodeById = (
+  state: ReturnType<StoreData["getState"]>,
+  id: string,
+): SnapshotNode | null => {
+  return findNodeById<SnapshotNode>(documentRootFromSnapshot(state.mimic.snapshot), id);
+};
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/normalize-flex-sizing.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/normalize-flex-sizing.ts
new file mode 100644
index 000000000..baa3b194e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/normalize-flex-sizing.ts
@@ -0,0 +1,72 @@
+import type { FlexDirection } from "@voidhash/mimic-schema";
+
+interface FlexSizingProps {
+  /** `"auto"` = hug contents (the stored style shape). */
+  width?: number | "auto" | null;
+  height?: number | "auto" | null;
+  /**
+   * `null` is the in-band "clear" sentinel: write sites translate it to a
+   * field deletion (`update({flex: undefined})`); `undefined` means "no
+   * change". The stored field itself is `number` or absent.
+   */
+  flex?: number | null;
+  alignSelf?: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline";
+}
+
+/**
+ * Normalizes flex sizing properties to prevent conflicts.
+ * Call this when updating width, height, flex, or alignSelf.
+ *
+ * Rules:
+ * - Numeric width + column parent -> clear alignSelf: "stretch" to "auto"
+ * - Numeric width + row parent -> clear flex (delete the field)
+ * - Numeric height + row parent -> clear alignSelf: "stretch" to "auto"
+ * - Numeric height + column parent -> clear flex (delete the field)
+ *
+ * Under stretch-by-default (`alignItems: "stretch"` is the schema default), an
+ * `alignSelf: "auto"` child with an auto cross size ALSO fills its cross axis —
+ * container-driven stretch. This normalizer only touches the EXPLICIT
+ * `alignSelf: "stretch"` marker, which is intentional: giving a numeric cross
+ * size defeats stretch regardless of container alignment, so clearing an
+ * explicit "stretch" to "auto" (and leaving container-driven "auto" alone) keeps
+ * the stored style honest without fighting the CSS-correct default.
+ */
+export function normalizeFlexSizing(
+  updates: FlexSizingProps,
+  current: FlexSizingProps,
+  parentDirection: FlexDirection | null,
+): FlexSizingProps {
+  const result = { ...updates };
+
+  // If setting numeric width, clear fill indicators
+  if (updates.width !== undefined && typeof updates.width === "number") {
+    if (parentDirection === "column") {
+      // In column, alignSelf: stretch = fill width
+      if ((updates.alignSelf ?? current.alignSelf) === "stretch") {
+        result.alignSelf = "auto";
+      }
+    } else if (parentDirection === "row") {
+      // In row, flex = fill width
+      if ((updates.flex ?? current.flex) != null) {
+        result.flex = null;
+      }
+    }
+  }
+
+  // If setting numeric height, clear fill indicators
+  if (updates.height !== undefined && typeof updates.height === "number") {
+    if (parentDirection === "row") {
+      // In row, alignSelf: stretch = fill height
+      if ((updates.alignSelf ?? current.alignSelf) === "stretch") {
+        result.alignSelf = "auto";
+      }
+    } else if (parentDirection === "column") {
+      // In column, flex = fill height
+      if ((updates.flex ?? current.flex) != null) {
+        result.flex = null;
+      }
+    }
+  }
+
+  return result;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts
new file mode 100644
index 000000000..9fa38cb9f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts
@@ -0,0 +1,32 @@
+import type { PresenceInput, PresenceSnapshot } from "@voidhash/mimic-schema";
+
+/** Presence write input with a guaranteed plain selected-node-id list. */
+export type DesignerPresenceInput = Omit<PresenceInput, "selectedNodeIds"> & {
+  selectedNodeIds: readonly string[];
+};
+
+/** Reads the plain selected-node-id list from a presence snapshot. */
+export function selectedNodeIdsFromPresence(
+  presence: PresenceSnapshot | undefined,
+): readonly string[] {
+  if (!presence) {
+    return [];
+  }
+  return presence.selectedNodeIds.flatMap((entry) =>
+    entry.value === undefined ? [] : [entry.value],
+  );
+}
+
+/**
+ * Converts a decoded presence snapshot back into write input: snapshot
+ * arrays are `{id, pos, value}` entry-wrapped while inputs carry plain
+ * elements. Use this for read-modify-write presence updates.
+ */
+export function presenceInputFromSnapshot(snapshot: PresenceSnapshot): DesignerPresenceInput {
+  return {
+    cursor: snapshot.cursor,
+    name: snapshot.name,
+    selectedNodeIds: selectedNodeIdsFromPresence(snapshot),
+    user: snapshot.user,
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/replay.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/replay.ts
new file mode 100644
index 000000000..5231c8830
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/replay.ts
@@ -0,0 +1,131 @@
+import type { Primitive } from "@voidhash/mimic-core";
+import {
+  actionSchema,
+  dnfSchema,
+  variableTypeSchema,
+  type Action,
+  type DNF,
+  type VariableType,
+} from "@voidhash/mimic-schema";
+
+/** Write input for a state condition (plain arrays, unlike the snapshot). */
+export type DnfInput = NonNullable<Primitive.InferInput<typeof dnfSchema>>;
+
+function isEntryWrapped(value: unknown): value is { id: string; pos: string; value: unknown } {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    "id" in value &&
+    typeof value.id === "string" &&
+    "pos" in value &&
+    typeof value.pos === "string" &&
+    "value" in value
+  );
+}
+
+/**
+ * Recursively converts decoded snapshot values into write-input shape:
+ * snapshot arrays are `{id, pos, value}` entry-wrapped while inputs carry
+ * plain elements. Plain values pass through untouched.
+ */
+export function unwrapEntriesDeep(value: unknown): unknown {
+  if (Array.isArray(value)) {
+    return value.map((item) =>
+      isEntryWrapped(item) ? unwrapEntriesDeep(item.value) : unwrapEntriesDeep(item),
+    );
+  }
+  if (typeof value === "object" && value !== null) {
+    const result: Record<string, unknown> = {};
+    for (const [key, item] of Object.entries(value)) {
+      result[key] = unwrapEntriesDeep(item);
+    }
+    return result;
+  }
+  return value;
+}
+
+/**
+ * Replayability guard for raw payloads replayed through a primitive's write
+ * input: validates the value against the primitive's schema (a runtime
+ * encode round trip) and narrows it to the typed input. Unknown union
+ * variants and malformed shapes return false — callers drop the payload
+ * without throwing.
+ */
+export function replayableElementInput<TElement extends Primitive.AnyPrimitive>(
+  element: TElement,
+  raw: unknown,
+): raw is NonNullable<Primitive.InferInput<TElement>> {
+  try {
+    return element.encodeOptional(raw) !== undefined;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Replayability guard for raw interaction/override action payloads flowing
+ * through undo results: round-trips the value through the action schema and
+ * returns the typed action, or `undefined` for payloads the schema rejects
+ * (unknown union variants are dropped, never replayed — the engine rejects
+ * them at set and validate).
+ */
+export function replayableAction(raw: unknown): Action | undefined {
+  try {
+    const encoded = actionSchema.encodeOptional(raw);
+    return encoded === undefined ? undefined : actionSchema.decode(encoded);
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * Replayability guard for raw variable values (`{key, value}`): returns the
+ * typed value or `undefined` for payloads the schema rejects.
+ */
+export function replayableVariableValue(raw: unknown): VariableType | undefined {
+  try {
+    const encoded = variableTypeSchema.encodeOptional(raw);
+    return encoded === undefined ? undefined : variableTypeSchema.decode(encoded);
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * Converts a decoded condition snapshot back into write input by unwrapping
+ * the `{id, pos, value}` array entries of its conjunction/predicate levels.
+ */
+export function dnfInputFromSnapshot(condition: DNF): DnfInput {
+  return {
+    type: "or",
+    value: condition.value.flatMap((conjunctionEntry) =>
+      conjunctionEntry.value === undefined
+        ? []
+        : [
+            {
+              type: "and" as const,
+              value: conjunctionEntry.value.value.flatMap((predicateEntry) =>
+                predicateEntry.value === undefined ? [] : [predicateEntry.value],
+              ),
+            },
+          ],
+    ),
+  };
+}
+
+/**
+ * Replayability guard for raw condition payloads in the PLAIN input shape
+ * (UI-built conditions, undo payloads produced by {@link dnfInputFromSnapshot}).
+ */
+export function replayableDnfInput(raw: unknown): DnfInput | undefined {
+  try {
+    const encoded = dnfSchema.encodeOptional(raw);
+    if (encoded === undefined) {
+      return undefined;
+    }
+    const snapshot = dnfSchema.decode(encoded);
+    return snapshot === undefined ? undefined : dnfInputFromSnapshot(snapshot);
+  } catch {
+    return undefined;
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/selection-level.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/selection-level.ts
new file mode 100644
index 000000000..c929a7293
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/selection-level.ts
@@ -0,0 +1,250 @@
+/**
+ * Selection level utilities for level-based selection.
+ *
+ * The selection level is derived from selected nodes (not stored in state).
+ * - No selection → level = 1 (screen level)
+ * - Node(s) selected → level = depth of first selected node
+ *
+ * Node hierarchy:
+ * - Root (depth 0) - never selectable
+ * - Screen (depth 1)
+ * - Flex (depth 2+)
+ * - Text (leaf) or Flex (recursive)
+ */
+
+// =============================================================================
+// Types (exported for use in other files)
+// =============================================================================
+
+export interface SnapshotNode {
+  id: string;
+  type: string;
+  children?: readonly SnapshotNode[];
+}
+
+interface BoundingBox {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+interface Point {
+  x: number;
+  y: number;
+}
+
+// =============================================================================
+// Tree Traversal Helpers
+// =============================================================================
+
+/**
+ * Find a node by ID in the snapshot tree.
+ */
+function findNodeById(snapshot: SnapshotNode | null, nodeId: string): SnapshotNode | null {
+  if (!snapshot) {
+    return null;
+  }
+
+  const traverse = (node: SnapshotNode): SnapshotNode | null => {
+    if (node.id === nodeId) {
+      return node;
+    }
+    if (node.children) {
+      for (const child of node.children) {
+        const found = traverse(child);
+        if (found) {
+          return found;
+        }
+      }
+    }
+    return null;
+  };
+
+  return traverse(snapshot);
+}
+
+/**
+ * Build a depth map from the snapshot tree (nodeId -> depth).
+ * Root is depth 0, screens are depth 1, etc.
+ */
+export function buildDepthMap(snapshot: SnapshotNode | null): Record<string, number> {
+  if (!snapshot) {
+    return {};
+  }
+
+  const depthMap: Record<string, number> = {};
+
+  const traverse = (node: SnapshotNode, depth: number) => {
+    depthMap[node.id] = depth;
+    if (node.children) {
+      for (const child of node.children) {
+        traverse(child, depth + 1);
+      }
+    }
+  };
+
+  traverse(snapshot, 0);
+  return depthMap;
+}
+
+/**
+ * Build a parent map from the snapshot tree (nodeId -> parentId).
+ */
+export function buildParentMap(snapshot: SnapshotNode | null): Record<string, string> {
+  if (!snapshot) {
+    return {};
+  }
+
+  const parentMap: Record<string, string> = {};
+
+  const traverse = (node: SnapshotNode, parentId: string | null) => {
+    if (parentId) {
+      parentMap[node.id] = parentId;
+    }
+    if (node.children) {
+      for (const child of node.children) {
+        traverse(child, node.id);
+      }
+    }
+  };
+
+  traverse(snapshot, null);
+  return parentMap;
+}
+
+// =============================================================================
+// Selection Level Utilities
+// =============================================================================
+
+/**
+ * Check if a node can be interacted with (highlighted or selected) at the current level.
+ * This is the core logic shared by canHighlightNode and canSelectNode.
+ *
+ * Rules:
+ * - Root nodes (depth 0) cannot be interacted with
+ * - Nodes at depth > selection level cannot be interacted with
+ */
+function canInteractWithNode(
+  depthMap: Record<string, number>,
+  nodeId: string,
+  selectedNodeIds: readonly string[],
+): boolean {
+  const nodeDepth = depthMap[nodeId];
+
+  // Cannot interact with root or invalid nodes
+  if (nodeDepth === undefined || nodeDepth === 0) {
+    return false;
+  }
+
+  // Compute selection level inline to avoid rebuilding depth map
+  let selectionLevel = 1;
+  const firstSelectedNodeId = selectedNodeIds[0];
+  if (firstSelectedNodeId !== undefined) {
+    selectionLevel = depthMap[firstSelectedNodeId] ?? 1;
+  }
+
+  // Node must be at depth ≤ selection level
+  return nodeDepth <= selectionLevel;
+}
+
+/**
+ * Check if node can be highlighted at current level.
+ */
+export function canHighlightNode(
+  snapshot: SnapshotNode | null,
+  nodeId: string,
+  selectedNodeIds: readonly string[],
+): boolean {
+  const depthMap = buildDepthMap(snapshot);
+  return canInteractWithNode(depthMap, nodeId, selectedNodeIds);
+}
+
+/**
+ * Check if node can be selected at current level.
+ */
+export function canSelectNode(
+  snapshot: SnapshotNode | null,
+  nodeId: string,
+  selectedNodeIds: readonly string[],
+): boolean {
+  const depthMap = buildDepthMap(snapshot);
+  return canInteractWithNode(depthMap, nodeId, selectedNodeIds);
+}
+
+// =============================================================================
+// Node Query Utilities
+// =============================================================================
+
+/**
+ * Find child at click position for drill-down navigation.
+ * Returns the ID of the deepest child at the click position, or null if none found.
+ */
+export function getChildAtPosition(
+  snapshot: SnapshotNode | null,
+  parentId: string,
+  boundingBoxes: Record<string, BoundingBox>,
+  clickPoint: Point,
+): string | null {
+  const parentNode = findNodeById(snapshot, parentId);
+  if (!parentNode?.children || parentNode.children.length === 0) {
+    return null;
+  }
+
+  // Find the first child whose bounding box contains the click point
+  // Iterate in reverse order to get the topmost (last rendered) child first
+  for (let i = parentNode.children.length - 1; i >= 0; i--) {
+    const child = parentNode.children[i];
+    if (!child) {
+      continue;
+    }
+    const boundingBox = boundingBoxes[child.id];
+
+    if (boundingBox && isPointInBoundingBox(clickPoint, boundingBox)) {
+      return child.id;
+    }
+  }
+
+  // If no child contains the point, return the first child as fallback
+  const firstChild = parentNode.children[0];
+  return firstChild?.id ?? null;
+}
+
+/**
+ * Check if a point is inside a bounding box.
+ */
+function isPointInBoundingBox(point: Point, box: BoundingBox): boolean {
+  return (
+    point.x >= box.x &&
+    point.x <= box.x + box.width &&
+    point.y >= box.y &&
+    point.y <= box.y + box.height
+  );
+}
+
+/**
+ * Get node type from snapshot.
+ */
+export function getNodeType(snapshot: SnapshotNode | null, nodeId: string): string | null {
+  const node = findNodeById(snapshot, nodeId);
+  return node?.type ?? null;
+}
+
+/**
+ * Check if a node has children.
+ */
+export function hasChildren(snapshot: SnapshotNode | null, nodeId: string): boolean {
+  const node = findNodeById(snapshot, nodeId);
+  return (node?.children?.length ?? 0) > 0;
+}
+
+/**
+ * Get direct children IDs of a node.
+ */
+export function getChildrenIds(snapshot: SnapshotNode | null, nodeId: string): string[] {
+  const node = findNodeById(snapshot, nodeId);
+  if (!node?.children) {
+    return [];
+  }
+  return node.children.map((child) => child.id);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.test.ts
new file mode 100644
index 000000000..a27143ecc
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.test.ts
@@ -0,0 +1,177 @@
+import type { Action, DNF } from "@voidhash/mimic-schema";
+import type { ViewSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import {
+  clearSelectedStateIfDeleted,
+  getSelectedStateIdForNode,
+  mapStyleOverridesForSnapshot,
+  resolveEffectiveAction,
+  resolveEffectiveStyle,
+  setSelectedStateIdForNode,
+  stateStyleOverridesToRecord,
+} from "./state-overrides";
+
+function createCondition(): DNF {
+  return {
+    type: "or",
+    value: [
+      {
+        type: "and",
+        value: [
+          {
+            type: "equals",
+            value: {
+              left: { type: "literal", value: { key: "boolean", value: true } },
+              right: {
+                type: "literal",
+                value: { key: "boolean", value: true },
+              },
+            },
+          },
+        ],
+      },
+    ],
+  } as unknown as DNF;
+}
+
+function createNode(): ViewSnapshotNode {
+  return {
+    id: "node-1",
+    parentId: "root",
+    pos: "a0",
+    type: "view",
+    children: [],
+    data: {
+    interactions: [
+      {
+        id: "interaction-entry-1",
+        value: {
+          id: "interaction-value-1",
+          trigger: { type: "click" },
+          action: { type: "none" },
+        },
+      },
+    ],
+    linkedVariables: [],
+    localVariables: [],
+    name: "Node",
+    style: {
+      alignItems: "flex-start",
+      alignSelf: "auto",
+      backgroundColor: "rgba(255, 0, 0, 1)",
+      backgroundEnabled: true,
+      borderColor: "rgba(0, 0, 0, 1)",
+      borderEnabled: false,
+      borderBottomLeftRadius: 0,
+      borderBottomRightRadius: 0,
+      borderTopLeftRadius: 0,
+      borderTopRightRadius: 0,
+      borderStyle: "solid",
+      borderBottomWidth: 0,
+      borderLeftWidth: 0,
+      borderRightWidth: 0,
+      borderTopWidth: 0,
+      display: "flex",
+      flexBasis: "auto",
+      flexDirection: "column",
+      flexGrow: 0,
+      flexShrink: 1,
+      gap: 0,
+      height: 100,
+      justifyContent: "flex-start",
+      marginBottom: 0,
+      marginLeft: 0,
+      marginRight: 0,
+      marginTop: 0,
+      opacity: 1,
+      overflow: "visible",
+      paddingBottom: 0,
+      paddingLeft: 0,
+      paddingRight: 0,
+      paddingTop: 0,
+      safeAreaBottom: false,
+      safeAreaTop: false,
+      shadowRadius: 0,
+      shadowColor: "rgba(0, 0, 0, 1)",
+      shadowEnabled: false,
+      shadowOffsetX: 0,
+      shadowOffsetY: 0,
+      shadowOpacity: 1,
+      width: 100,
+      zIndex: 0,
+    },
+    states: [
+      {
+        id: "state-1",
+        value: {
+          id: "state-value-1",
+          name: "Hovered",
+          condition: createCondition(),
+          overrides: {
+            style: {
+              backgroundColor: "rgba(0, 255, 0, 1)",
+            },
+            actions: [
+              {
+                id: "action-override-entry-1",
+                value: {
+                  interactionId: "interaction-entry-1",
+                  action: { type: "close-paywall" },
+                },
+              },
+            ],
+          },
+        },
+      },
+    ],
+    },
+  } as unknown as ViewSnapshotNode;
+}
+
+describe("state override utilities", () => {
+  test("resolves selected state id only for the matching node", () => {
+    expect(getSelectedStateIdForNode({ "node-1": "state-1" }, "node-1")).toBe("state-1");
+    expect(getSelectedStateIdForNode({ "node-2": "state-1" }, "node-1")).toBeNull();
+  });
+
+  test("sets and clears selected state ids per node", () => {
+    const selection = setSelectedStateIdForNode({}, "node-1", "state-1");
+    expect(selection["node-1"]).toBe("state-1");
+    const clearedSelection = setSelectedStateIdForNode(selection, "node-1", null);
+    expect(clearedSelection["node-1"]).toBeUndefined();
+  });
+
+  test("clears node selection when selected state gets deleted", () => {
+    const selection = { "node-1": "state-1", "node-2": "state-2" };
+    const nextSelection = clearSelectedStateIfDeleted(selection, "node-1", "state-1");
+    expect(nextSelection["node-1"]).toBeUndefined();
+    expect(nextSelection["node-2"]).toBe("state-2");
+  });
+
+  test("resolves effective style by merging state overrides over base style", () => {
+    const node = createNode();
+    const style = resolveEffectiveStyle(node, "state-1");
+    expect(style.backgroundColor).toBe("rgba(0, 255, 0, 1)");
+    expect(style.width).toBe(100);
+  });
+
+  test("resolves effective action from state override", () => {
+    const node = createNode();
+    const defaultAction: Action = { type: "none" };
+
+    const action = resolveEffectiveAction(node, "state-1", "interaction-entry-1", defaultAction);
+
+    expect(action.type).toBe("close-paywall");
+  });
+
+  test("maps style override snapshots to mutable records", () => {
+    const node = createNode();
+    const state = node.data.states[0] ?? null;
+    const stateRecord = stateStyleOverridesToRecord(state);
+    const mappedRecord = mapStyleOverridesForSnapshot(state?.value?.overrides.style);
+
+    expect(stateRecord.backgroundColor).toBe("rgba(0, 255, 0, 1)");
+    expect(mappedRecord.backgroundColor).toBe("rgba(0, 255, 0, 1)");
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.ts
new file mode 100644
index 000000000..0d9673423
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/state-overrides.ts
@@ -0,0 +1,232 @@
+import type { Action } from "@voidhash/mimic-schema";
+import type {
+  ScreenSnapshotNode,
+  ScrollViewSnapshotNode,
+  SnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+
+import type { StateOverrideSelection } from "../designer-store-state";
+
+export type StateCapableNode =
+  | ScreenSnapshotNode
+  | ScrollViewSnapshotNode
+  | TextSnapshotNode
+  | ViewSnapshotNode;
+export type StyleOverrideRecord = Record<string, unknown>;
+
+type StateSnapshot = StateCapableNode["data"]["states"][number];
+type ActionOverrideEntry = { interactionId: string; action: Action };
+
+function readStyleOverridesFromUnknown(value: unknown): StyleOverrideRecord {
+  if (!(value && typeof value === "object")) {
+    return {};
+  }
+
+  const valueRecord = value as {
+    overrides?: { style?: unknown };
+    styleOverrides?: unknown;
+  };
+
+  const newShapeStyle = valueRecord.overrides?.style;
+  if (newShapeStyle && typeof newShapeStyle === "object") {
+    return { ...(newShapeStyle as Record<string, unknown>) };
+  }
+
+  // Legacy PoC fallback: [{ value: { key, value } }, ...]
+  const legacy = valueRecord.styleOverrides;
+  if (!Array.isArray(legacy)) {
+    return {};
+  }
+
+  const result: StyleOverrideRecord = {};
+  for (const entry of legacy) {
+    if (!(entry && typeof entry === "object")) {
+      continue;
+    }
+    const rawValue = (entry as { value?: unknown }).value;
+    if (!(rawValue && typeof rawValue === "object")) {
+      continue;
+    }
+    const key = (rawValue as { key?: unknown }).key;
+    if (typeof key !== "string") {
+      continue;
+    }
+    result[key] = (rawValue as { value?: unknown }).value;
+  }
+  return result;
+}
+
+function readActionOverridesFromUnknown(value: unknown): ActionOverrideEntry[] {
+  if (!(value && typeof value === "object")) {
+    return [];
+  }
+
+  const valueRecord = value as {
+    overrides?: { actions?: unknown };
+    actionOverrides?: unknown;
+  };
+
+  const newShapeActions = valueRecord.overrides?.actions;
+  if (Array.isArray(newShapeActions)) {
+    const result: ActionOverrideEntry[] = [];
+    for (const entry of newShapeActions) {
+      if (!(entry && typeof entry === "object")) {
+        continue;
+      }
+      const payload = (entry as { value?: unknown }).value;
+      if (!(payload && typeof payload === "object")) {
+        continue;
+      }
+      const interactionId = (payload as { interactionId?: unknown }).interactionId;
+      const action = (payload as { action?: unknown }).action;
+      if (!(typeof interactionId === "string" && action)) {
+        continue;
+      }
+      result.push({
+        interactionId,
+        action: action as Action,
+      });
+    }
+    return result;
+  }
+
+  // Legacy PoC fallback: actionOverrides array
+  const legacyActions = valueRecord.actionOverrides;
+  if (!Array.isArray(legacyActions)) {
+    return [];
+  }
+
+  const result: ActionOverrideEntry[] = [];
+  for (const entry of legacyActions) {
+    if (!(entry && typeof entry === "object")) {
+      continue;
+    }
+    const payload = (entry as { value?: unknown }).value;
+    if (!(payload && typeof payload === "object")) {
+      continue;
+    }
+    const interactionId = (payload as { interactionId?: unknown }).interactionId;
+    const action = (payload as { action?: unknown }).action;
+    if (!(typeof interactionId === "string" && action)) {
+      continue;
+    }
+    result.push({
+      interactionId,
+      action: action as Action,
+    });
+  }
+  return result;
+}
+
+export function isStateCapableNode(node: SnapshotNode): node is StateCapableNode {
+  return (
+    node.type === "view" ||
+    node.type === "scrollView" ||
+    node.type === "screen" ||
+    node.type === "text"
+  );
+}
+
+export function getSelectedStateIdForNode(
+  selection: StateOverrideSelection,
+  nodeId: string,
+): string | null {
+  return selection[nodeId] ?? null;
+}
+
+export function setSelectedStateIdForNode(
+  selection: StateOverrideSelection,
+  nodeId: string,
+  stateId: string | null,
+): StateOverrideSelection {
+  const nextSelection = { ...selection };
+  if (stateId === null) {
+    delete nextSelection[nodeId];
+    return nextSelection;
+  }
+  nextSelection[nodeId] = stateId;
+  return nextSelection;
+}
+
+export function clearSelectedStateIfDeleted(
+  selection: StateOverrideSelection,
+  nodeId: string,
+  deletedStateId: string,
+): StateOverrideSelection {
+  const selectedStateId = getSelectedStateIdForNode(selection, nodeId);
+  if (selectedStateId !== deletedStateId) {
+    return selection;
+  }
+  return setSelectedStateIdForNode(selection, nodeId, null);
+}
+
+export function getStateById(node: StateCapableNode, stateId: string | null): StateSnapshot | null {
+  if (!stateId) {
+    return null;
+  }
+  return node.data.states.find((state) => state.id === stateId) ?? null;
+}
+
+export function stateStyleOverridesToRecord(state: StateSnapshot | null): StyleOverrideRecord {
+  if (!state) {
+    return {};
+  }
+  return readStyleOverridesFromUnknown(state.value);
+}
+
+export function resolveEffectiveStyle(
+  node: StateCapableNode,
+  stateId: string | null,
+): Record<string, unknown> {
+  const baseStyle: Record<string, unknown> = { ...node.data.style };
+  const state = getStateById(node, stateId);
+  if (!state) {
+    return baseStyle;
+  }
+
+  const overrides = stateStyleOverridesToRecord(state);
+  return {
+    ...baseStyle,
+    ...overrides,
+  };
+}
+
+export function getStateActionOverride(
+  node: ViewSnapshotNode | ScrollViewSnapshotNode,
+  stateId: string | null,
+  interactionId: string,
+): Action | null {
+  if (!stateId) {
+    return null;
+  }
+
+  const state = node.data.states.find((entry) => entry.id === stateId) ?? null;
+  if (!state) {
+    return null;
+  }
+
+  const override = readActionOverridesFromUnknown(state.value).find(
+    (entry) => entry.interactionId === interactionId,
+  );
+  return override?.action ?? null;
+}
+
+export function resolveEffectiveAction(
+  node: ViewSnapshotNode | ScrollViewSnapshotNode,
+  stateId: string | null,
+  interactionId: string,
+  defaultAction: Action,
+): Action {
+  const override = getStateActionOverride(node, stateId, interactionId);
+  return override ?? defaultAction;
+}
+
+export function mapStyleOverridesForSnapshot(styleOverrides: unknown): StyleOverrideRecord {
+  return readStyleOverridesFromUnknown({
+    overrides: {
+      style: styleOverrides,
+    },
+  });
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/tree.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/tree.test.ts
new file mode 100644
index 000000000..27d29aa4f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/tree.test.ts
@@ -0,0 +1,54 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { excludeNestedNodes } from "./tree";
+
+interface Node {
+  readonly id: string;
+  readonly children?: readonly Node[];
+}
+
+/**
+ * root
+ * ├─ a
+ * │  └─ a1
+ * │     └─ a1a
+ * └─ b
+ *    └─ b1
+ */
+const tree: Node = {
+  id: "root",
+  children: [
+    { id: "a", children: [{ id: "a1", children: [{ id: "a1a" }] }] },
+    { id: "b", children: [{ id: "b1" }] },
+  ],
+};
+
+describe("excludeNestedNodes", () => {
+  test("drops a selected node whose selected ancestor is also present", () => {
+    // `a` and its descendant `a1` are both selected → keep only `a`.
+    expect(excludeNestedNodes(tree, ["a", "a1"])).toEqual(["a"]);
+  });
+
+  test("keeps siblings and unrelated branches", () => {
+    // `a` and `b` are unrelated; neither is an ancestor of the other.
+    expect(excludeNestedNodes(tree, ["a", "b"])).toEqual(["a", "b"]);
+  });
+
+  test("drops a deep descendant when any ancestor in the set is selected", () => {
+    // `a` (selected) is an ancestor of the deep `a1a` → `a1a` is dropped.
+    expect(excludeNestedNodes(tree, ["a", "a1a"])).toEqual(["a"]);
+  });
+
+  test("keeps a descendant when its ancestor is NOT selected", () => {
+    // `a1a` selected without `a`/`a1` → nothing removes it.
+    expect(excludeNestedNodes(tree, ["a1a", "b1"])).toEqual(["a1a", "b1"]);
+  });
+
+  test("preserves input order", () => {
+    expect(excludeNestedNodes(tree, ["b", "a"])).toEqual(["b", "a"]);
+  });
+
+  test("keeps ids not found in the tree", () => {
+    expect(excludeNestedNodes(tree, ["ghost", "a"])).toEqual(["ghost", "a"]);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/tree.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/tree.ts
new file mode 100644
index 000000000..0fb797e7c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/tree.ts
@@ -0,0 +1,139 @@
+/**
+ * Snapshot-tree walk helpers for the nested `{id, type, parentId, pos, data,
+ * children}` node shape. Generic over any structurally compatible node so the
+ * same helpers serve web-core `SnapshotNode` trees, store snapshots, and test
+ * fixtures.
+ *
+ * The generic signatures are typing seams over a structural implementation:
+ * pass the tree's NODE UNION as the type argument (e.g.
+ * `findNodeById<SnapshotNode>(root, id)`) when the argument has been
+ * control-flow narrowed to a single variant, so results type as the union.
+ */
+
+interface TreeWalkNode {
+  readonly id: string;
+  readonly children?: readonly TreeWalkNode[] | undefined;
+}
+
+/** Finds a node by id anywhere in the subtree rooted at `root`. */
+export function findNodeById<T extends TreeWalkNode>(
+  root: T | null | undefined,
+  nodeId: string,
+): T | null;
+export function findNodeById(
+  root: TreeWalkNode | null | undefined,
+  nodeId: string,
+): TreeWalkNode | null {
+  if (!root) {
+    return null;
+  }
+  if (root.id === nodeId) {
+    return root;
+  }
+  for (const child of root.children ?? []) {
+    const found = findNodeById(child, nodeId);
+    if (found) {
+      return found;
+    }
+  }
+  return null;
+}
+
+/** Flattens the subtree rooted at `root` in depth-first order. */
+export function flattenTree<T extends TreeWalkNode>(root: T | null | undefined): T[];
+export function flattenTree(root: TreeWalkNode | null | undefined): TreeWalkNode[] {
+  if (!root) {
+    return [];
+  }
+  const result: TreeWalkNode[] = [root];
+  for (const child of root.children ?? []) {
+    result.push(...flattenTree(child));
+  }
+  return result;
+}
+
+/** Builds an id-keyed index of every node in the subtree rooted at `root`. */
+export function buildNodeIndex<T extends TreeWalkNode>(
+  root: T | null | undefined,
+): Map<string, T>;
+export function buildNodeIndex(root: TreeWalkNode | null | undefined): Map<string, TreeWalkNode> {
+  const index = new Map<string, TreeWalkNode>();
+  for (const node of flattenTree(root)) {
+    index.set(node.id, node);
+  }
+  return index;
+}
+
+/** Finds the parent of `nodeId` in the subtree rooted at `root`. */
+export function findParentNode<T extends TreeWalkNode>(
+  root: T | null | undefined,
+  nodeId: string,
+): T | null;
+export function findParentNode(
+  root: TreeWalkNode | null | undefined,
+  nodeId: string,
+): TreeWalkNode | null {
+  if (!root) {
+    return null;
+  }
+  for (const child of root.children ?? []) {
+    if (child.id === nodeId) {
+      return root;
+    }
+    const found = findParentNode(child, nodeId);
+    if (found) {
+      return found;
+    }
+  }
+  return null;
+}
+
+/**
+ * Filters `nodeIds` to the topmost members: drops any id that has an ancestor
+ * (proper — the node itself is excluded) also present in `nodeIds`. Used to
+ * avoid double-transforming a nested selection (e.g. moving a selected absolute
+ * child inside a selected absolute parent would shift it twice). Ids not found
+ * in the tree are kept. Preserves the input order.
+ */
+export function excludeNestedNodes<T extends TreeWalkNode>(
+  root: T | null | undefined,
+  nodeIds: readonly string[],
+): string[] {
+  const selected = new Set(nodeIds);
+  return nodeIds.filter((nodeId) => {
+    const path = findNodePath(root, nodeId);
+    if (!path) {
+      return true;
+    }
+    // `path` is [root, …ancestors, node]; drop the node itself, then keep this
+    // id only when none of its ancestors are selected.
+    return !path.slice(0, -1).some((ancestor) => selected.has(ancestor.id));
+  });
+}
+
+/**
+ * Collects the node chain from `root` down to `nodeId` (inclusive), or `null`
+ * when the node is not in the tree. The last element is the node itself.
+ */
+export function findNodePath<T extends TreeWalkNode>(
+  root: T | null | undefined,
+  nodeId: string,
+): T[] | null;
+export function findNodePath(
+  root: TreeWalkNode | null | undefined,
+  nodeId: string,
+): TreeWalkNode[] | null {
+  if (!root) {
+    return null;
+  }
+  if (root.id === nodeId) {
+    return [root];
+  }
+  for (const child of root.children ?? []) {
+    const path = findNodePath(child, nodeId);
+    if (path) {
+      return [root, ...path];
+    }
+  }
+  return null;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.test.ts b/apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.test.ts
new file mode 100644
index 000000000..4fea6d338
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.test.ts
@@ -0,0 +1,208 @@
+import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { describe, expect, test } from "vite-plus/test";
+
+import type { GetLocalizablePropInfos } from "../hooks/use-localizable-props";
+import { buildTranslationRows, filterTranslationGroups } from "./build-translation-rows";
+
+// ---------------------------------------------------------------------------
+// Hand-built plain snapshot fixtures (entryValue tolerates unwrapped entries).
+// ---------------------------------------------------------------------------
+
+const noImage = { resizeMode: "cover", url: "" };
+const image = (url: string) => ({ resizeMode: "cover" as const, url });
+
+function textNode(
+  id: string,
+  name: string,
+  text: string,
+  localized: { locale: string; overrides: { text?: string } }[] = [],
+) {
+  return { children: [], data: { localized, name, text }, id, type: "text" };
+}
+
+function viewNode(
+  id: string,
+  name: string,
+  backgroundUrl: string,
+  localized: { locale: string; overrides: { backgroundImage?: { url: string; resizeMode: string } } }[] = [],
+) {
+  return {
+    children: [],
+    data: { localized, name, style: { backgroundImage: backgroundUrl === "" ? noImage : image(backgroundUrl) } },
+    id,
+    type: "view",
+  };
+}
+
+function componentNode(
+  id: string,
+  props: {
+    name: string;
+    value: unknown;
+    localizedValues?: { locale: string; value: unknown }[];
+  }[],
+) {
+  return {
+    children: [],
+    data: { componentSource: "catalog", contentHash: "hash", name: id, props },
+    id,
+    type: "component",
+  };
+}
+
+function screenNode(id: string, name: string, children: unknown[]) {
+  return {
+    children,
+    data: { localized: [], name, style: { backgroundImage: noImage } },
+    id,
+    type: "screen",
+  };
+}
+
+function rootNode(children: unknown[]): RootSnapshotNode {
+  return {
+    children,
+    data: { localization: { defaultLocale: "en", locales: [{ tag: "de" }] }, name: "Doc" },
+    id: "root",
+    type: "root",
+  } as unknown as RootSnapshotNode;
+}
+
+const getLocalizableProps: GetLocalizablePropInfos = () => [
+  { kind: "string", label: "Title", propName: "title" },
+  { kind: "image", label: "Artwork", propName: "art" },
+];
+
+function fixtureRoot(): RootSnapshotNode {
+  return rootNode([
+    screenNode("s1", "Intro", [
+      textNode("t1", "Headline", "Hello", [{ locale: "de", overrides: { text: "Hallo" } }]),
+      textNode("t2", "Subtitle", "World"),
+      viewNode("v1", "Hero", "https://base", [
+        { locale: "de", overrides: { backgroundImage: image("https://de") } },
+      ]),
+      viewNode("v2", "Plain", ""),
+    ]),
+    screenNode("s2", "Checkout", [
+      componentNode("c1", [
+        {
+          localizedValues: [{ locale: "de", value: { key: "string", value: "Kaufen" } }],
+          name: "title",
+          value: { type: "literal", value: { key: "string", value: "Buy" } },
+        },
+        {
+          name: "art",
+          value: { type: "literal", value: { key: "string", value: "https://art-base" } },
+        },
+      ]),
+    ]),
+  ]);
+}
+
+describe("buildTranslationRows", () => {
+  test("groups slots by screen in tree order with screen names", () => {
+    const groups = buildTranslationRows(fixtureRoot(), {
+      defaultLocale: "en",
+      getLocalizableProps,
+      locale: "de",
+    });
+    expect(groups.map((group) => [group.screenId, group.screenName])).toEqual([
+      ["s1", "Intro"],
+      ["s2", "Checkout"],
+    ]);
+    expect(groups[0]?.rows.map((row) => row.key)).toEqual(["t1", "t2", "v1"]);
+    expect(groups[1]?.rows.map((row) => row.key)).toEqual(["c1/title", "c1/art"]);
+  });
+
+  test("resolves text overrides for the target locale (missing → null)", () => {
+    const groups = buildTranslationRows(fixtureRoot(), {
+      defaultLocale: "en",
+      getLocalizableProps,
+      locale: "de",
+    });
+    const [translated, untranslated] = groups[0]?.rows ?? [];
+    expect(translated).toMatchObject({ base: "Hello", kind: "text", override: "Hallo" });
+    expect(untranslated).toMatchObject({ base: "World", kind: "text", override: null });
+  });
+
+  test("emits image rows only for non-empty base urls and resolves overrides", () => {
+    const groups = buildTranslationRows(fixtureRoot(), {
+      defaultLocale: "en",
+      getLocalizableProps,
+      locale: "de",
+    });
+    const imageRows = groups.flatMap((group) => group.rows).filter((row) => row.kind === "image");
+    expect(imageRows).toHaveLength(1);
+    expect(imageRows[0]).toMatchObject({
+      base: { url: "https://base" },
+      nodeId: "v1",
+      override: { url: "https://de" },
+    });
+  });
+
+  test("carries the manifest prop kind and resolves localizedValues", () => {
+    const groups = buildTranslationRows(fixtureRoot(), {
+      defaultLocale: "en",
+      getLocalizableProps,
+      locale: "de",
+    });
+    const propRows = groups.flatMap((group) => group.rows);
+    expect(propRows.find((row) => row.key === "c1/title")).toMatchObject({
+      base: "Buy",
+      kind: "componentProp",
+      override: "Kaufen",
+      propKind: "string",
+    });
+    expect(propRows.find((row) => row.key === "c1/art")).toMatchObject({
+      base: "https://art-base",
+      override: null,
+      propKind: "image",
+    });
+  });
+
+  test("skips component props without a manifest lookup", () => {
+    const groups = buildTranslationRows(fixtureRoot(), { defaultLocale: "en", locale: "de" });
+    expect(groups.flatMap((group) => group.rows).some((row) => row.kind === "componentProp")).toBe(
+      false,
+    );
+  });
+});
+
+describe("filterTranslationGroups", () => {
+  const groups = buildTranslationRows(fixtureRoot(), {
+    defaultLocale: "en",
+    getLocalizableProps,
+    locale: "de",
+  });
+
+  test("untranslatedOnly keeps rows without an override", () => {
+    const filtered = filterTranslationGroups(groups, { untranslatedOnly: true });
+    expect(filtered.flatMap((group) => group.rows).map((row) => row.key)).toEqual([
+      "t2",
+      "c1/art",
+    ]);
+  });
+
+  test("filters by kind and by screen", () => {
+    expect(
+      filterTranslationGroups(groups, { kind: "image" }).flatMap((group) => group.rows),
+    ).toHaveLength(1);
+    const byScreen = filterTranslationGroups(groups, { screenId: "s2" });
+    expect(byScreen.map((group) => group.screenId)).toEqual(["s2"]);
+  });
+
+  test("searches label, base and override values case-insensitively", () => {
+    expect(
+      filterTranslationGroups(groups, { search: "kaufen" }).flatMap((group) => group.rows),
+    ).toHaveLength(1);
+    expect(
+      filterTranslationGroups(groups, { search: "HEADLINE" }).flatMap((group) => group.rows),
+    ).toHaveLength(1);
+    expect(filterTranslationGroups(groups, { search: "no-match-xyz" })).toEqual([]);
+  });
+
+  test("drops groups that end up empty", () => {
+    const filtered = filterTranslationGroups(groups, { kind: "componentProp" });
+    expect(filtered.map((group) => group.screenId)).toEqual(["s2"]);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.ts b/apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.ts
new file mode 100644
index 000000000..0ceb4c525
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/build-translation-rows.ts
@@ -0,0 +1,275 @@
+import {
+  collectLocalizableSlots,
+  resolveBackgroundImage,
+  resolveComponentPropValue,
+  resolveText,
+} from "@voidhash/mimic-schema";
+import type {
+  BackgroundImageSnapshot,
+  ComponentPropValueSnapshot,
+  RootNodeData,
+} from "@voidhash/mimic-schema";
+import type {
+  ComponentSnapshotNode,
+  RootSnapshotNode,
+  SnapshotNode,
+  TextSnapshotNode,
+  ViewSnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+
+import type { GetLocalizablePropInfos } from "../hooks/use-localizable-props";
+import { readLocalizableComponentProp } from "../state/utils/localization";
+
+/**
+ * One translation-table row: a localizable slot resolved against the target
+ * locale. `override` is `null` when the slot has no effective override and
+ * falls back to `base`. Component-prop rows carry display strings for both
+ * columns (string props hold their text, image props their url) plus the
+ * manifest `propKind` deciding whether the cell edits as text or as an image.
+ */
+export type TranslationRow =
+  | {
+      readonly kind: "text";
+      readonly key: string;
+      readonly nodeId: string;
+      readonly screenId: string;
+      readonly label: string;
+      readonly base: string;
+      readonly override: string | null;
+    }
+  | {
+      readonly kind: "image";
+      readonly key: string;
+      readonly nodeId: string;
+      readonly screenId: string;
+      readonly label: string;
+      readonly base: BackgroundImageSnapshot;
+      readonly override: BackgroundImageSnapshot | null;
+    }
+  | {
+      readonly kind: "componentProp";
+      readonly key: string;
+      readonly nodeId: string;
+      readonly propName: string;
+      readonly screenId: string;
+      readonly label: string;
+      readonly propKind: "string" | "image";
+      readonly base: string;
+      readonly override: string | null;
+    };
+
+/** Rows of one screen, in tree order, headed by the screen's display name. */
+export interface TranslationScreenGroup {
+  readonly screenId: string;
+  readonly screenName: string;
+  readonly rows: readonly TranslationRow[];
+}
+
+export interface BuildTranslationRowsOptions {
+  /** The target locale the override column resolves against. */
+  readonly locale: string;
+  readonly defaultLocale: string;
+  readonly getLocalizableProps?: GetLocalizablePropInfos;
+}
+
+/** Whether a row carries an override for the target locale. */
+export function rowIsTranslated(row: TranslationRow): boolean {
+  return row.override !== null;
+}
+
+/** Display text of a literal component-prop value (localizable props are strings). */
+function propValueText(value: ComponentPropValueSnapshot): string {
+  switch (value.key) {
+    case "string":
+      return value.value;
+    case "number":
+      return String(value.value);
+    case "boolean":
+      return value.value ? "true" : "false";
+    default:
+      return "";
+  }
+}
+
+interface NodeIndex {
+  readonly nodeById: ReadonlyMap<string, SnapshotNode>;
+  readonly screenNameById: ReadonlyMap<string, string>;
+  readonly propKindByKey: ReadonlyMap<string, "string" | "image">;
+}
+
+function indexNodes(
+  root: RootSnapshotNode,
+  getLocalizableProps: GetLocalizablePropInfos | undefined,
+): NodeIndex {
+  const nodeById = new Map<string, SnapshotNode>();
+  const screenNameById = new Map<string, string>();
+  const propKindByKey = new Map<string, "string" | "image">();
+  const visit = (node: SnapshotNode): void => {
+    nodeById.set(node.id, node);
+    if (node.type === "screen") {
+      screenNameById.set(node.id, node.data.name);
+    } else if (node.type === "component" && getLocalizableProps !== undefined) {
+      for (const info of getLocalizableProps(node as ComponentSnapshotNode)) {
+        propKindByKey.set(`${node.id}/${info.propName}`, info.kind);
+      }
+    }
+    for (const child of node.children) {
+      visit(child);
+    }
+  };
+  visit(root);
+  return { nodeById, propKindByKey, screenNameById };
+}
+
+/**
+ * Builds the Translation-mode row model: every localizable slot of the
+ * document (via `collectLocalizableSlots`, tree order) resolved against the
+ * target locale and grouped by containing screen. Pure — takes the live root
+ * snapshot, so rows follow the document; a slot whose node vanished simply
+ * stops appearing.
+ */
+export function buildTranslationRows(
+  root: RootSnapshotNode,
+  options: BuildTranslationRowsOptions,
+): TranslationScreenGroup[] {
+  const { locale, defaultLocale, getLocalizableProps } = options;
+  const index = indexNodes(root, getLocalizableProps);
+
+  // The store snapshot IS the decoded document root `collectLocalizableSlots`
+  // expects — the engine and web-core type the identical runtime shape
+  // differently (one union-typed node vs a distributed union), hence the casts.
+  const slots = collectLocalizableSlots(root as unknown as RootNodeData, {
+    getLocalizableProps:
+      getLocalizableProps === undefined
+        ? undefined
+        : (node) => getLocalizableProps(node as unknown as ComponentSnapshotNode),
+  });
+
+  const groups: TranslationScreenGroup[] = [];
+  let current: { screenId: string; screenName: string; rows: TranslationRow[] } | null = null;
+
+  for (const slot of slots) {
+    const node = index.nodeById.get(slot.nodeId);
+    if (node === undefined) {
+      continue;
+    }
+    let row: TranslationRow;
+    if (slot.kind === "text") {
+      const data = (node as TextSnapshotNode).data;
+      const resolved = resolveText(data, locale, defaultLocale);
+      row = {
+        base: slot.baseValue,
+        key: slot.nodeId,
+        kind: "text",
+        label: slot.label,
+        nodeId: slot.nodeId,
+        override: resolved === data.text ? null : resolved,
+        screenId: slot.screenId,
+      };
+    } else if (slot.kind === "image") {
+      const data = (node as ViewSnapshotNode).data;
+      const resolved = resolveBackgroundImage(data, locale, defaultLocale);
+      row = {
+        base: slot.baseValue,
+        key: slot.nodeId,
+        kind: "image",
+        label: slot.label,
+        nodeId: slot.nodeId,
+        override: resolved === data.style.backgroundImage ? null : resolved,
+        screenId: slot.screenId,
+      };
+    } else {
+      const prop = readLocalizableComponentProp(node as ComponentSnapshotNode, slot.propName);
+      if (prop === undefined || prop.value.type !== "literal") {
+        continue;
+      }
+      const resolved = resolveComponentPropValue(prop, locale, defaultLocale);
+      const key = `${slot.nodeId}/${slot.propName}`;
+      row = {
+        base: propValueText(slot.baseValue),
+        key,
+        kind: "componentProp",
+        label: slot.label,
+        nodeId: slot.nodeId,
+        override:
+          resolved === prop.value || resolved.type !== "literal"
+            ? null
+            : propValueText(resolved.value),
+        propKind: index.propKindByKey.get(key) ?? "string",
+        propName: slot.propName,
+        screenId: slot.screenId,
+      };
+    }
+    if (current === null || current.screenId !== slot.screenId) {
+      current = {
+        rows: [],
+        screenId: slot.screenId,
+        screenName: index.screenNameById.get(slot.screenId) ?? "Document",
+      };
+      groups.push(current);
+    }
+    current.rows.push(row);
+  }
+
+  return groups;
+}
+
+export type TranslationKindFilter = "all" | "text" | "image" | "componentProp";
+
+export interface TranslationRowFilter {
+  readonly untranslatedOnly?: boolean;
+  readonly kind?: TranslationKindFilter;
+  /** `"all"` (or omitted) keeps every screen group. */
+  readonly screenId?: string;
+  /** Case-insensitive free text matched over label, base and override values. */
+  readonly search?: string;
+}
+
+function rowSearchText(row: TranslationRow): string {
+  const parts: string[] = [row.label];
+  if (row.kind === "image") {
+    parts.push(row.base.url);
+    if (row.override !== null) {
+      parts.push(row.override.url);
+    }
+  } else {
+    parts.push(row.base);
+    if (row.override !== null) {
+      parts.push(row.override);
+    }
+  }
+  return parts.join("\n").toLowerCase();
+}
+
+/**
+ * Applies the Translation-mode filters to a built row model, dropping groups
+ * that end up empty. Pure companion of {@link buildTranslationRows}.
+ */
+export function filterTranslationGroups(
+  groups: readonly TranslationScreenGroup[],
+  filter: TranslationRowFilter,
+): TranslationScreenGroup[] {
+  const search = filter.search?.trim().toLowerCase() ?? "";
+  const result: TranslationScreenGroup[] = [];
+  for (const group of groups) {
+    if (filter.screenId !== undefined && filter.screenId !== "all" && group.screenId !== filter.screenId) {
+      continue;
+    }
+    const rows = group.rows.filter((row) => {
+      if (filter.untranslatedOnly === true && rowIsTranslated(row)) {
+        return false;
+      }
+      if (filter.kind !== undefined && filter.kind !== "all" && row.kind !== filter.kind) {
+        return false;
+      }
+      if (search !== "" && !rowSearchText(row).includes(search)) {
+        return false;
+      }
+      return true;
+    });
+    if (rows.length > 0) {
+      result.push({ ...group, rows });
+    }
+  }
+  return result;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx b/apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx
new file mode 100644
index 000000000..2b632ed17
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx
@@ -0,0 +1,106 @@
+"use client";
+
+import { renderPaywallToHtml } from "@voidhash/paywall-renderer-preact";
+import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { useMemo } from "react";
+
+import { localeLabel } from "../utils/locale-display";
+
+interface ContextPreviewProps {
+  root: RootSnapshotNode;
+  /** The screen to render, or null when nothing is selectable. */
+  screenId: string | null;
+  /** The selected row's node, outlined and scrolled into view. */
+  highlightNodeId: string | null;
+  locale: string | null;
+}
+
+const FRAME_WIDTH = 264;
+const DESIGN_WIDTH = 375;
+const DESIGN_HEIGHT = 812;
+
+/** Restricts a node id to characters safe inside the injected selector/script. */
+function safeNodeId(id: string): string {
+  return id.replace(/[^A-Za-z0-9_:.-]/g, "");
+}
+
+/**
+ * Appends a highlight style + scroll-into-view script for the selected node.
+ * With `hydrate: false` this is the document's only script; the iframe stays
+ * sandboxed (`allow-scripts`, opaque origin, no parent access needed).
+ */
+function withHighlight(html: string, nodeId: string | null): string {
+  if (nodeId === null) {
+    return html;
+  }
+  const id = safeNodeId(nodeId);
+  if (id === "") {
+    return html;
+  }
+  const selector = `[data-node-id="${id}"]`;
+  const injection =
+    `<style>${selector}{outline:2px solid #3b82f6;outline-offset:2px;border-radius:2px;}</style>` +
+    `<script>document.querySelector('${selector}')` +
+    `?.scrollIntoView({block:"center",inline:"center"});</script>`;
+  return html.includes("</body>") ? html.replace("</body>", `${injection}</body>`) : html + injection;
+}
+
+/**
+ * Translation mode's right rail: a read-only render of the selected row's
+ * screen in the target locale, via `renderPaywallToHtml` (`hydrate: false`)
+ * into a sandboxed iframe. The snapshot is reduced to the containing screen;
+ * text resolves per locale in v1 (images/props follow in a later renderer
+ * phase). Component artifacts are not threaded here — component nodes render
+ * the renderer's labeled placeholder.
+ */
+export function ContextPreview({ root, screenId, highlightNodeId, locale }: ContextPreviewProps) {
+  const html = useMemo(() => {
+    if (screenId === null || locale === null) {
+      return null;
+    }
+    const screen = root.children.find((child) => child.id === screenId);
+    if (screen === undefined) {
+      return null;
+    }
+    const reduced = { ...root, children: [screen] };
+    const rendered = renderPaywallToHtml(reduced, { hydrate: false, locale });
+    return withHighlight(rendered.html, highlightNodeId);
+  }, [root, screenId, highlightNodeId, locale]);
+
+  const scale = FRAME_WIDTH / DESIGN_WIDTH;
+
+  return (
+    <div className="flex w-80 shrink-0 flex-col">
+      <div className="flex items-center justify-between px-3 py-2">
+        <span className="font-medium text-muted-foreground text-xs">Preview</span>
+        {locale !== null && (
+          <span className="text-muted-foreground text-xs">{localeLabel(locale)}</span>
+        )}
+      </div>
+      <div className="flex min-h-0 flex-1 items-start justify-center overflow-hidden p-4 pt-2">
+        {html === null ? (
+          <div className="flex h-full items-center justify-center text-center text-muted-foreground text-sm">
+            Select a row to preview its screen.
+          </div>
+        ) : (
+          <div
+            className="relative shrink-0 overflow-hidden rounded-[24px] border-4 border-zinc-800 bg-zinc-800 shadow-lg"
+            style={{ height: DESIGN_HEIGHT * scale + 8, width: FRAME_WIDTH + 8 }}
+          >
+            <iframe
+              className="origin-top-left bg-white"
+              sandbox="allow-scripts"
+              srcDoc={html}
+              style={{
+                height: DESIGN_HEIGHT,
+                transform: `scale(${scale})`,
+                width: DESIGN_WIDTH,
+              }}
+              title="Translation preview"
+            />
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/locale-rail.tsx b/apps/www/src/features/studio/paywalls/designer/translation-mode/locale-rail.tsx
new file mode 100644
index 000000000..ce1a39cac
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/locale-rail.tsx
@@ -0,0 +1,288 @@
+"use client";
+
+import { canonicalizeLocaleTag } from "@voidhash/mimic-schema";
+import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import {
+  Badge,
+  Button,
+  cn,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuSub,
+  DropdownMenuSubContent,
+  DropdownMenuSubTrigger,
+  DropdownMenuTrigger,
+  Input,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  ScrollArea,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { MoreHorizontalIcon, PlusIcon } from "lucide-react";
+import { useMemo, useState } from "react";
+
+import type { GetLocalizablePropInfos } from "../hooks/use-localizable-props";
+import {
+  addLocale,
+  clearLocale,
+  copyLocaleFrom,
+  removeLocale,
+  setActiveLocale,
+  setDefaultLocale,
+} from "../state/actions";
+import { usePaywallDesignerActions } from "../state/designer-store";
+import {
+  computeLocaleCoverage,
+  type LocaleCoverage,
+  type LocalizationInfo,
+} from "../state/utils/localization";
+import { COMMON_LOCALES, localeLabel } from "../utils/locale-display";
+
+interface LocaleRailProps {
+  documentRoot: RootSnapshotNode;
+  info: LocalizationInfo;
+  targetLocale: string | null;
+  onSelectTarget: (tag: string) => void;
+  getLocalizableProps: GetLocalizablePropInfos;
+}
+
+function CoverageBar({ coverage }: { coverage: LocaleCoverage }) {
+  const percent = coverage.total === 0 ? 0 : (coverage.translated / coverage.total) * 100;
+  return (
+    <div className="flex items-center gap-2">
+      <div className="h-1 flex-1 overflow-hidden rounded-full bg-secondary">
+        <div className="h-full rounded-full bg-primary" style={{ width: `${percent}%` }} />
+      </div>
+      <span className="shrink-0 text-[10px] text-muted-foreground tabular-nums">
+        {coverage.translated}/{coverage.total}
+      </span>
+    </div>
+  );
+}
+
+/**
+ * Translation mode's left rail: the default locale, every enabled locale with
+ * its coverage bar, target-locale selection and the locale lifecycle actions —
+ * add (canonicalized free input + curated suggestions), remove (confirmed;
+ * CASCADE-deletes the locale's translations), set default (confirmed;
+ * metadata-only relabel), copy-from and clear.
+ */
+export function LocaleRail({
+  documentRoot,
+  info,
+  targetLocale,
+  onSelectTarget,
+  getLocalizableProps,
+}: LocaleRailProps) {
+  const dispatch = usePaywallDesignerActions();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+  const [addOpen, setAddOpen] = useState(false);
+  const [draftTag, setDraftTag] = useState("");
+
+  const coverage = useMemo(() => {
+    const byLocale = new Map<string, LocaleCoverage>();
+    for (const tag of info.locales) {
+      byLocale.set(
+        tag,
+        computeLocaleCoverage(documentRoot, tag, info.defaultLocale, getLocalizableProps),
+      );
+    }
+    return byLocale;
+  }, [documentRoot, info, getLocalizableProps]);
+
+  const enabledSet = useMemo(() => new Set([info.defaultLocale, ...info.locales]), [info]);
+  const suggestions = useMemo(
+    () => COMMON_LOCALES.filter((tag) => !enabledSet.has(tag)),
+    [enabledSet],
+  );
+
+  const canonicalDraft = draftTag.trim() === "" ? null : canonicalizeLocaleTag(draftTag.trim());
+  const draftIsAddable =
+    canonicalDraft !== null &&
+    canonicalDraft !== info.defaultLocale &&
+    !info.locales.includes(canonicalDraft);
+
+  const handleAdd = (tag: string) => {
+    const canonical = canonicalizeLocaleTag(tag.trim());
+    if (canonical === null || canonical === info.defaultLocale || info.locales.includes(canonical)) {
+      return;
+    }
+    dispatch(addLocale)({ tag: canonical });
+    dispatch(setActiveLocale)({ locale: canonical });
+    setDraftTag("");
+    setAddOpen(false);
+  };
+
+  const handleRemove = async (tag: string) => {
+    const confirmed = await openDialog({
+      confirmText: "Remove locale",
+      description: `This disables ${localeLabel(tag)} and deletes every ${localeLabel(tag)} translation on this paywall — texts, images and component props. You can undo this.`,
+      title: `Remove ${localeLabel(tag)}?`,
+      variant: "destructive",
+    });
+    if (!confirmed) {
+      return;
+    }
+    dispatch(removeLocale)({ tag });
+    if (targetLocale === tag) {
+      dispatch(setActiveLocale)({ locale: null });
+    }
+  };
+
+  const handleSetDefault = async (tag: string) => {
+    const confirmed = await openDialog({
+      confirmText: "Set as default",
+      description: `All base content is relabeled as ${localeLabel(tag)} — no text or images change. ${localeLabel(info.defaultLocale)} becomes an additional locale with no translations of its own.`,
+      title: `Make ${localeLabel(tag)} the default?`,
+    });
+    if (!confirmed) {
+      return;
+    }
+    dispatch(setDefaultLocale)({ tag });
+    if (targetLocale === tag) {
+      dispatch(setActiveLocale)({ locale: null });
+    }
+  };
+
+  const handleClear = async (tag: string) => {
+    const confirmed = await openDialog({
+      confirmText: "Clear translations",
+      description: `This deletes every ${localeLabel(tag)} translation but keeps the locale enabled. You can undo this.`,
+      title: `Clear ${localeLabel(tag)} translations?`,
+      variant: "destructive",
+    });
+    if (confirmed) {
+      dispatch(clearLocale)({ tag });
+    }
+  };
+
+  return (
+    <div className="flex w-60 shrink-0 flex-col">
+      <div className="flex items-center justify-between px-3 py-2">
+        <span className="font-medium text-muted-foreground text-xs">Locales</span>
+        <Popover onOpenChange={setAddOpen} open={addOpen}>
+          <PopoverTrigger asChild>
+            <Button aria-label="Add locale" size="icon-sm" title="Add locale" variant="ghost">
+              <PlusIcon />
+            </Button>
+          </PopoverTrigger>
+          <PopoverContent align="start" className="w-64 p-2" side="right">
+            <div className="flex flex-col gap-2">
+              <div className="flex items-center gap-1">
+                <Input
+                  className="h-7 text-sm"
+                  onChange={(event) => setDraftTag(event.target.value)}
+                  onKeyDown={(event) => {
+                    if (event.key === "Enter" && draftIsAddable) {
+                      event.preventDefault();
+                      handleAdd(draftTag);
+                    }
+                  }}
+                  placeholder="Add locale… (e.g. de, pt-BR)"
+                  value={draftTag}
+                />
+                <Button
+                  aria-label="Add locale"
+                  disabled={!draftIsAddable}
+                  onClick={() => handleAdd(draftTag)}
+                  size="icon-sm"
+                  title="Add locale"
+                  variant="outline"
+                >
+                  <PlusIcon />
+                </Button>
+              </div>
+              {suggestions.length > 0 && (
+                <div className="flex flex-wrap gap-1">
+                  {suggestions.slice(0, 10).map((tag) => (
+                    <button
+                      className="rounded-full border border-border px-2 py-0.5 text-muted-foreground text-xs hover:bg-accent hover:text-foreground"
+                      key={tag}
+                      onClick={() => handleAdd(tag)}
+                      type="button"
+                    >
+                      {localeLabel(tag)}
+                    </button>
+                  ))}
+                </div>
+              )}
+            </div>
+          </PopoverContent>
+        </Popover>
+      </div>
+      <ScrollArea className="min-h-0 flex-1">
+        <div className="flex flex-col gap-0.5 px-2 pb-2">
+          <div className="flex items-center gap-2 rounded-sm px-2 py-1.5">
+            <span className="flex-1 truncate text-sm">{localeLabel(info.defaultLocale)}</span>
+            <Badge className="px-1 py-0 text-[10px]" variant="secondary">
+              Default
+            </Badge>
+          </div>
+          {info.locales.map((tag) => (
+            <div
+              className={cn(
+                "group flex items-center gap-1 rounded-sm",
+                targetLocale === tag ? "bg-accent" : "hover:bg-accent/50",
+              )}
+              key={tag}
+            >
+              <button
+                className="flex min-w-0 flex-1 flex-col gap-1 px-2 py-1.5 text-left"
+                onClick={() => onSelectTarget(tag)}
+                type="button"
+              >
+                <span className="truncate text-sm">{localeLabel(tag)}</span>
+                <CoverageBar coverage={coverage.get(tag) ?? { translated: 0, total: 0 }} />
+              </button>
+              <DropdownMenu>
+                <DropdownMenuTrigger asChild>
+                  <Button
+                    aria-label={`${localeLabel(tag)} actions`}
+                    className="mr-1 size-6 shrink-0 text-muted-foreground opacity-0 hover:text-foreground focus-visible:opacity-100 group-hover:opacity-100 data-[state=open]:opacity-100"
+                    size="icon-sm"
+                    variant="ghost"
+                  >
+                    <MoreHorizontalIcon />
+                  </Button>
+                </DropdownMenuTrigger>
+                <DropdownMenuContent align="start" side="right">
+                  <DropdownMenuItem onClick={() => void handleSetDefault(tag)}>
+                    Set as default…
+                  </DropdownMenuItem>
+                  {info.locales.length > 1 && (
+                    <DropdownMenuSub>
+                      <DropdownMenuSubTrigger>Copy translations from</DropdownMenuSubTrigger>
+                      <DropdownMenuSubContent>
+                        {info.locales
+                          .filter((source) => source !== tag)
+                          .map((source) => (
+                            <DropdownMenuItem
+                              key={source}
+                              onClick={() => dispatch(copyLocaleFrom)({ source, target: tag })}
+                            >
+                              {localeLabel(source)}
+                            </DropdownMenuItem>
+                          ))}
+                      </DropdownMenuSubContent>
+                    </DropdownMenuSub>
+                  )}
+                  <DropdownMenuSeparator />
+                  <DropdownMenuItem onClick={() => void handleClear(tag)}>
+                    Clear translations…
+                  </DropdownMenuItem>
+                  <DropdownMenuItem onClick={() => void handleRemove(tag)} variant="destructive">
+                    Remove locale…
+                  </DropdownMenuItem>
+                </DropdownMenuContent>
+              </DropdownMenu>
+            </div>
+          ))}
+        </div>
+      </ScrollArea>
+      <ConfirmationDialog />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
new file mode 100644
index 000000000..ad2cc285e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
@@ -0,0 +1,139 @@
+"use client";
+
+import { useMemo, useState } from "react";
+import { useStore } from "zustand/react";
+
+import { useGetLocalizableProps } from "../hooks/use-localizable-props";
+import { PANEL_DIMENSIONS } from "../panels/constants";
+import { setActiveLocale } from "../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import { selectRenderRoot } from "../state/utils/document-root";
+import { readLocalizationInfo } from "../state/utils/localization";
+import {
+  buildTranslationRows,
+  filterTranslationGroups,
+  type TranslationKindFilter,
+  type TranslationRow,
+} from "./build-translation-rows";
+import { ContextPreview } from "./context-preview";
+import { LocaleRail } from "./locale-rail";
+import { TranslationTable } from "./translation-table";
+
+/** Translation-mode-local view state (filters + search); selection lives beside it. */
+export interface TranslationFilterState {
+  untranslatedOnly: boolean;
+  kind: TranslationKindFilter;
+  screenId: string;
+  search: string;
+}
+
+const INITIAL_FILTER: TranslationFilterState = {
+  kind: "all",
+  screenId: "all",
+  search: "",
+  untranslatedOnly: false,
+};
+
+/**
+ * The full-screen Translation mode surface: a locale rail (enable/select
+ * locales), the translation table (every localizable slot against the target
+ * locale) and a read-only context preview of the selected row's screen.
+ *
+ * The TARGET locale reuses the store's `activeLocale` so the canvas and
+ * Translation mode stay in sync; a `null`/stale value falls back to the first
+ * additional locale without writing to the store. Filters, search and row
+ * selection are component state — browser-local view concerns of this surface.
+ */
+export function TranslationModeWorkspace() {
+  const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
+
+  const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
+  const aiWidth = useStore(store, (state) => state.ai.width);
+  const aiOffset = aiPanelOpen ? aiWidth : 0;
+
+  // Draft-aware live snapshot: rows and the preview follow the document as
+  // collaborators edit; a node deleted mid-edit simply drops its row.
+  const documentRoot = useStore(store, selectRenderRoot);
+  const activeLocale = useStore(store, (state) => state.activeLocale);
+  const getLocalizableProps = useGetLocalizableProps();
+
+  const info = useMemo(() => readLocalizationInfo(documentRoot), [documentRoot]);
+  const targetLocale =
+    activeLocale !== null && info.locales.includes(activeLocale)
+      ? activeLocale
+      : (info.locales[0] ?? null);
+
+  const [filter, setFilter] = useState<TranslationFilterState>(INITIAL_FILTER);
+  const [selectedKey, setSelectedKey] = useState<string | null>(null);
+
+  const groups = useMemo(
+    () =>
+      targetLocale === null
+        ? []
+        : buildTranslationRows(documentRoot, {
+            defaultLocale: info.defaultLocale,
+            getLocalizableProps,
+            locale: targetLocale,
+          }),
+    [documentRoot, targetLocale, info.defaultLocale, getLocalizableProps],
+  );
+  const filteredGroups = useMemo(() => filterTranslationGroups(groups, filter), [groups, filter]);
+
+  const screens = useMemo(
+    () => groups.map((group) => ({ id: group.screenId, name: group.screenName })),
+    [groups],
+  );
+
+  const selectedRow = useMemo<TranslationRow | null>(() => {
+    for (const group of groups) {
+      for (const row of group.rows) {
+        if (row.key === selectedKey) {
+          return row;
+        }
+      }
+    }
+    return null;
+  }, [groups, selectedKey]);
+
+  const previewScreenId = selectedRow?.screenId ?? filteredGroups[0]?.screenId ?? null;
+
+  return (
+    <div
+      className="absolute inset-0 flex bg-background transition-[left] duration-300 ease-in-out"
+      style={{ left: aiOffset, top: PANEL_DIMENSIONS.TOP_HEIGHT }}
+    >
+      <LocaleRail
+        documentRoot={documentRoot}
+        getLocalizableProps={getLocalizableProps}
+        info={info}
+        onSelectTarget={(tag) => dispatch(setActiveLocale)({ locale: tag })}
+        targetLocale={targetLocale}
+      />
+      <div className="flex min-w-0 flex-1 flex-col border-border border-x">
+        {targetLocale === null ? (
+          <div className="flex h-full items-center justify-center p-8 text-center text-muted-foreground text-sm">
+            Add a locale in the left rail to start translating.
+          </div>
+        ) : (
+          <TranslationTable
+            defaultLocale={info.defaultLocale}
+            filter={filter}
+            groups={filteredGroups}
+            onFilterChange={setFilter}
+            onSelectRow={setSelectedKey}
+            screens={screens}
+            selectedKey={selectedKey}
+            targetLocale={targetLocale}
+          />
+        )}
+      </div>
+      <ContextPreview
+        highlightNodeId={selectedRow?.nodeId ?? null}
+        locale={targetLocale}
+        root={documentRoot}
+        screenId={previewScreenId}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-table.tsx b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-table.tsx
new file mode 100644
index 000000000..963e29c92
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-table.tsx
@@ -0,0 +1,404 @@
+"use client";
+
+import { useParams } from "@tanstack/react-router";
+import {
+  Badge,
+  cn,
+  Input,
+  ScrollArea,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Switch,
+  Textarea,
+} from "@voidhash/ui";
+import { ImageIcon, SearchIcon, XIcon } from "lucide-react";
+import { useEffect, useMemo, useRef, useState } from "react";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { AssetPickerDialog } from "@/features/studio/paywall-assets/asset-picker-dialog";
+
+import {
+  updateComponentPropLocalizedValue,
+  updateNodeLocalizedImage,
+  updateNodeTranslation,
+} from "../state/actions";
+import { usePaywallDesignerActions } from "../state/designer-store";
+import { localeLabel } from "../utils/locale-display";
+import type {
+  TranslationKindFilter,
+  TranslationRow,
+  TranslationScreenGroup,
+} from "./build-translation-rows";
+import type { TranslationFilterState } from "./translation-mode-workspace";
+
+interface TranslationTableProps {
+  groups: readonly TranslationScreenGroup[];
+  screens: readonly { id: string; name: string }[];
+  targetLocale: string;
+  defaultLocale: string;
+  filter: TranslationFilterState;
+  onFilterChange: (filter: TranslationFilterState) => void;
+  selectedKey: string | null;
+  onSelectRow: (key: string) => void;
+}
+
+const KIND_OPTIONS: readonly { value: TranslationKindFilter; label: string }[] = [
+  { label: "All kinds", value: "all" },
+  { label: "Texts", value: "text" },
+  { label: "Images", value: "image" },
+  { label: "Component props", value: "componentProp" },
+];
+
+const KIND_BADGE: Record<TranslationRow["kind"], string> = {
+  componentProp: "Prop",
+  image: "Image",
+  text: "Text",
+};
+
+/** Resolves the current organization id from the route + session (asset picker scope). */
+function useOrganizationId(): string | null {
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
+  const { user } = useAuth();
+  return useMemo(() => {
+    if (!organizationSlug || !projectSlug) return null;
+    return (
+      CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug)?.organizationId ?? null
+    );
+  }, [user, organizationSlug, projectSlug]);
+}
+
+/**
+ * Inline translation text cell: drafts locally, commits on blur or Enter
+ * (Shift+Enter inserts a newline), Escape reverts. An empty commit clears the
+ * override — the cell then shows the base value dimmed via the placeholder.
+ * External override changes resync the draft unless the cell is focused.
+ */
+function TranslationTextCell({
+  base,
+  override,
+  onCommit,
+}: {
+  base: string;
+  override: string | null;
+  onCommit: (value: string) => void;
+}) {
+  const [draft, setDraft] = useState(override ?? "");
+  const focusedRef = useRef(false);
+
+  useEffect(() => {
+    if (!focusedRef.current) {
+      setDraft(override ?? "");
+    }
+  }, [override]);
+
+  const commit = () => {
+    if (draft !== (override ?? "")) {
+      onCommit(draft);
+    }
+  };
+
+  return (
+    <Textarea
+      className="min-h-8 resize-none border-transparent bg-transparent px-2 py-1.5 text-sm shadow-none hover:border-input focus-visible:border-input dark:bg-transparent"
+      onBlur={() => {
+        focusedRef.current = false;
+        commit();
+      }}
+      onChange={(event) => setDraft(event.target.value)}
+      onFocus={() => {
+        focusedRef.current = true;
+      }}
+      onKeyDown={(event) => {
+        if (event.key === "Enter" && !event.shiftKey) {
+          event.preventDefault();
+          event.currentTarget.blur();
+        } else if (event.key === "Escape") {
+          setDraft(override ?? "");
+        }
+      }}
+      placeholder={base}
+      rows={1}
+      value={draft}
+    />
+  );
+}
+
+/**
+ * Image override cell: a thumbnail of the effective URL (dimmed while falling
+ * back to base) that opens the organization asset picker; picking an asset
+ * writes the localized image, the X affordance clears the override.
+ */
+function TranslationImageCell({
+  baseUrl,
+  overrideUrl,
+  onPick,
+  onClear,
+}: {
+  baseUrl: string;
+  overrideUrl: string | null;
+  onPick: (url: string) => void;
+  onClear: () => void;
+}) {
+  const organizationId = useOrganizationId();
+  const [pickerOpen, setPickerOpen] = useState(false);
+  const effectiveUrl = overrideUrl ?? baseUrl;
+
+  return (
+    <div className="flex items-center gap-2 px-2 py-1">
+      <button
+        aria-label={overrideUrl === null ? "Add localized image" : "Change localized image"}
+        className={cn(
+          "relative flex h-9 w-14 shrink-0 items-center justify-center overflow-hidden rounded-sm border border-border/60 bg-muted",
+          overrideUrl === null && "opacity-50",
+        )}
+        onClick={() => setPickerOpen(true)}
+        type="button"
+      >
+        {effectiveUrl !== "" ? (
+          <img
+            alt=""
+            className="absolute inset-0 size-full object-cover"
+            loading="lazy"
+            src={effectiveUrl}
+          />
+        ) : (
+          <ImageIcon className="size-3.5 text-muted-foreground" />
+        )}
+      </button>
+      <span
+        className={cn(
+          "min-w-0 flex-1 truncate text-xs",
+          overrideUrl === null ? "text-muted-foreground" : "text-foreground",
+        )}
+      >
+        {overrideUrl ?? (baseUrl === "" ? "No image" : baseUrl)}
+      </span>
+      {overrideUrl !== null && (
+        <button
+          aria-label="Clear localized image"
+          className="flex size-5 shrink-0 items-center justify-center rounded-sm text-muted-foreground hover:bg-accent hover:text-foreground"
+          onClick={onClear}
+          type="button"
+        >
+          <XIcon className="size-3.5" />
+        </button>
+      )}
+      <AssetPickerDialog
+        onOpenChange={setPickerOpen}
+        onSelect={(asset) => onPick(asset.url)}
+        open={pickerOpen}
+        organizationId={organizationId}
+      />
+    </div>
+  );
+}
+
+function BaseValueCell({ row }: { row: TranslationRow }) {
+  if (row.kind === "image" || (row.kind === "componentProp" && row.propKind === "image")) {
+    const url = row.kind === "image" ? row.base.url : row.base;
+    return (
+      <div className="flex items-center gap-2 px-2 py-1">
+        <div className="relative flex h-9 w-14 shrink-0 items-center justify-center overflow-hidden rounded-sm border border-border/60 bg-muted">
+          {url !== "" ? (
+            <img alt="" className="absolute inset-0 size-full object-cover" loading="lazy" src={url} />
+          ) : (
+            <ImageIcon className="size-3.5 text-muted-foreground" />
+          )}
+        </div>
+        <span className="min-w-0 flex-1 truncate text-muted-foreground text-xs">{url}</span>
+      </div>
+    );
+  }
+  return (
+    <div className="whitespace-pre-wrap px-2 py-1.5 text-muted-foreground text-sm">{row.base}</div>
+  );
+}
+
+/**
+ * The Translation-mode center pane: a filter toolbar (untranslated-only,
+ * screen, kind, free-text search) over the slot rows grouped by screen. Cells
+ * write through the existing undoable locale actions, which no-op safely when
+ * a collaborator deleted the node mid-edit.
+ */
+export function TranslationTable({
+  groups,
+  screens,
+  targetLocale,
+  defaultLocale,
+  filter,
+  onFilterChange,
+  selectedKey,
+  onSelectRow,
+}: TranslationTableProps) {
+  const dispatch = usePaywallDesignerActions();
+
+  const commitText = (row: TranslationRow, value: string) => {
+    if (row.kind === "text") {
+      dispatch(updateNodeTranslation)({ id: row.nodeId, locale: targetLocale, text: value });
+    } else if (row.kind === "componentProp") {
+      dispatch(updateComponentPropLocalizedValue)({
+        locale: targetLocale,
+        nodeId: row.nodeId,
+        propName: row.propName,
+        value: value === "" ? null : { key: "string", value },
+      });
+    }
+  };
+
+  const pickImage = (row: TranslationRow, url: string) => {
+    if (row.kind === "image") {
+      dispatch(updateNodeLocalizedImage)({
+        backgroundImage: { resizeMode: row.base.resizeMode, url },
+        id: row.nodeId,
+        locale: targetLocale,
+      });
+    } else if (row.kind === "componentProp") {
+      dispatch(updateComponentPropLocalizedValue)({
+        locale: targetLocale,
+        nodeId: row.nodeId,
+        propName: row.propName,
+        value: { key: "string", value: url },
+      });
+    }
+  };
+
+  const clearImage = (row: TranslationRow) => {
+    if (row.kind === "image") {
+      dispatch(updateNodeLocalizedImage)({
+        backgroundImage: null,
+        id: row.nodeId,
+        locale: targetLocale,
+      });
+    } else if (row.kind === "componentProp") {
+      dispatch(updateComponentPropLocalizedValue)({
+        locale: targetLocale,
+        nodeId: row.nodeId,
+        propName: row.propName,
+        value: null,
+      });
+    }
+  };
+
+  return (
+    <div className="flex min-h-0 flex-1 flex-col">
+      <div className="flex shrink-0 items-center gap-2 border-border border-b px-3 py-2">
+        <div className="relative min-w-0 flex-1">
+          <SearchIcon className="-translate-y-1/2 absolute top-1/2 left-2 size-3.5 text-muted-foreground" />
+          <Input
+            className="h-7 pl-7 text-sm"
+            onChange={(event) => onFilterChange({ ...filter, search: event.target.value })}
+            placeholder="Search translations…"
+            value={filter.search}
+          />
+        </div>
+        <Select
+          onValueChange={(value) => onFilterChange({ ...filter, screenId: value })}
+          value={filter.screenId}
+        >
+          <SelectTrigger className="h-7 w-36 text-xs" size="sm">
+            <SelectValue />
+          </SelectTrigger>
+          <SelectContent>
+            <SelectItem value="all">All screens</SelectItem>
+            {screens.map((screen) => (
+              <SelectItem key={screen.id} value={screen.id}>
+                {screen.name}
+              </SelectItem>
+            ))}
+          </SelectContent>
+        </Select>
+        <Select
+          onValueChange={(value) =>
+            onFilterChange({ ...filter, kind: value as TranslationKindFilter })
+          }
+          value={filter.kind}
+        >
+          <SelectTrigger className="h-7 w-36 text-xs" size="sm">
+            <SelectValue />
+          </SelectTrigger>
+          <SelectContent>
+            {KIND_OPTIONS.map((option) => (
+              <SelectItem key={option.value} value={option.value}>
+                {option.label}
+              </SelectItem>
+            ))}
+          </SelectContent>
+        </Select>
+        <label className="flex shrink-0 cursor-pointer items-center gap-1.5 text-muted-foreground text-xs">
+          <Switch
+            checked={filter.untranslatedOnly}
+            onCheckedChange={(checked) =>
+              onFilterChange({ ...filter, untranslatedOnly: checked === true })
+            }
+          />
+          Untranslated
+        </label>
+      </div>
+      <div className="grid shrink-0 grid-cols-[minmax(0,1fr)_minmax(0,1.5fr)_minmax(0,1.5fr)] border-border border-b px-3 py-1.5 text-muted-foreground text-xs">
+        <span className="px-2">Element</span>
+        <span className="px-2">{localeLabel(defaultLocale)} (default)</span>
+        <span className="px-2">{localeLabel(targetLocale)}</span>
+      </div>
+      <ScrollArea className="min-h-0 flex-1">
+        <div className="flex flex-col px-3 pb-8">
+          {groups.length === 0 && (
+            <div className="p-8 text-center text-muted-foreground text-sm">
+              No translatable content matches the current filters.
+            </div>
+          )}
+          {groups.map((group) => (
+            <div className="flex flex-col" key={group.screenId}>
+              <div className="px-2 pt-4 pb-1 font-medium text-muted-foreground text-xs">
+                {group.screenName}
+              </div>
+              {group.rows.map((row) => (
+                <div
+                  className={cn(
+                    "grid grid-cols-[minmax(0,1fr)_minmax(0,1.5fr)_minmax(0,1.5fr)] items-start rounded-md border border-transparent",
+                    selectedKey === row.key ? "border-border bg-accent/50" : "hover:bg-accent/30",
+                  )}
+                  key={row.key}
+                  onClick={() => onSelectRow(row.key)}
+                  onFocusCapture={() => onSelectRow(row.key)}
+                >
+                  <div className="flex min-w-0 items-center gap-1.5 px-2 py-1.5">
+                    <span className="min-w-0 truncate text-sm">{row.label}</span>
+                    <Badge className="shrink-0 px-1 py-0 text-[10px]" variant="secondary">
+                      {KIND_BADGE[row.kind]}
+                    </Badge>
+                  </div>
+                  <BaseValueCell row={row} />
+                  {row.kind === "image" ? (
+                    <TranslationImageCell
+                      baseUrl={row.base.url}
+                      onClear={() => clearImage(row)}
+                      onPick={(url) => pickImage(row, url)}
+                      overrideUrl={row.override?.url ?? null}
+                    />
+                  ) : row.kind === "componentProp" && row.propKind === "image" ? (
+                    <TranslationImageCell
+                      baseUrl={row.base}
+                      onClear={() => clearImage(row)}
+                      onPick={(url) => pickImage(row, url)}
+                      overrideUrl={row.override}
+                    />
+                  ) : (
+                    <TranslationTextCell
+                      base={row.base}
+                      onCommit={(value) => commitText(row, value)}
+                      override={row.override}
+                    />
+                  )}
+                </div>
+              ))}
+            </div>
+          ))}
+        </div>
+      </ScrollArea>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/types.ts b/apps/www/src/features/studio/paywalls/designer/types.ts
new file mode 100644
index 000000000..a0c81e6e1
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/types.ts
@@ -0,0 +1,68 @@
+import type { Viewport } from "pixi-viewport";
+
+export interface ViewportState {
+  zoom: number;
+  x: number;
+  y: number;
+}
+
+export interface ViewportControls {
+  zoomIn: () => void;
+  zoomOut: () => void;
+  resetView: () => void;
+  zoomToFit: (bounds: { x: number; y: number; width: number; height: number }) => void;
+  setZoom: (zoom: number) => void;
+  panTo: (x: number, y: number) => void;
+}
+
+export interface CanvasViewportContext {
+  viewport: Viewport | null;
+  state: ViewportState;
+  controls: ViewportControls;
+}
+
+export interface DesignerCanvasProps {
+  children?: React.ReactNode;
+}
+
+// ================================
+// Nodes
+// ================================
+abstract class BaseNode {
+  private _id: string;
+  constructor(id: string) {
+    this._id = id;
+  }
+  get id() {
+    return this._id;
+  }
+}
+
+abstract class CanvasNode extends BaseNode {
+  protected width: number;
+  protected height: number;
+  protected x: number;
+  protected y: number;
+
+  constructor(id: string, width: number, height: number, x: number, y: number) {
+    super(id);
+    this.width = width;
+    this.height = height;
+    this.x = x;
+    this.y = y;
+  }
+}
+
+export class ScreenNode extends CanvasNode {
+  protected width: number;
+  protected height: number;
+
+  constructor(id: string, width: number, height: number, x: number, y: number) {
+    super(id, width, height, x, y);
+    this.width = width;
+    this.height = height;
+  }
+}
+
+export type AnyNode = ScreenNode;
+export type AnyRenderableNodes = ScreenNode;
diff --git a/apps/www/src/features/studio/paywalls/designer/utils/locale-display.ts b/apps/www/src/features/studio/paywalls/designer/utils/locale-display.ts
new file mode 100644
index 000000000..9a7afcec3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/utils/locale-display.ts
@@ -0,0 +1,34 @@
+/**
+ * A small curated set of common BCP 47 language tags offered as one-click adds
+ * (the action-bar switcher and Translation mode's locale rail share it); typing
+ * an arbitrary tag is always available via the input.
+ */
+export const COMMON_LOCALES: readonly string[] = [
+  "en",
+  "es",
+  "de",
+  "fr",
+  "pt",
+  "pt-BR",
+  "it",
+  "nl",
+  "ja",
+  "ko",
+  "zh",
+  "zh-Hans",
+  "ru",
+  "ar",
+  "hi",
+  "tr",
+  "pl",
+  "sv",
+];
+
+/** Human-readable label for a locale tag, falling back to the raw tag. */
+export function localeLabel(tag: string): string {
+  try {
+    return new Intl.DisplayNames([tag], { type: "language" }).of(tag) ?? tag;
+  } catch {
+    return tag;
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/utils/platform.ts b/apps/www/src/features/studio/paywalls/designer/utils/platform.ts
new file mode 100644
index 000000000..fe2f88d01
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/utils/platform.ts
@@ -0,0 +1,34 @@
+/**
+ * Platform detection utilities.
+ */
+
+// Extend Navigator to include userAgentData (not yet in all TypeScript lib versions)
+interface NavigatorWithUserAgentData extends Navigator {
+  userAgentData?: {
+    platform: string;
+  };
+}
+
+let cachedIsMac: boolean | undefined;
+
+/**
+ * Detect if the current platform is macOS.
+ * Uses the modern `navigator.userAgentData` API with fallback to `navigator.platform`.
+ * Result is cached for performance.
+ */
+export function isMacPlatform(): boolean {
+  if (cachedIsMac !== undefined) {
+    return cachedIsMac;
+  }
+
+  if (typeof navigator === "undefined") {
+    cachedIsMac = false;
+    return false;
+  }
+
+  // Modern approach with fallback to deprecated navigator.platform
+  const nav = navigator as NavigatorWithUserAgentData;
+  const platform = nav.userAgentData?.platform ?? navigator.platform;
+  cachedIsMac = platform.toUpperCase().includes("MAC");
+  return cachedIsMac;
+}
diff --git a/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx b/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
new file mode 100644
index 000000000..b21df3e90
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
@@ -0,0 +1,13 @@
+import { Skeleton } from "@voidhash/ui";
+
+export function PaywallCardSkeleton() {
+  return (
+    <div className="flex flex-col overflow-hidden rounded-xl border bg-card">
+      <Skeleton className="aspect-3/4 w-full rounded-none" />
+      <div className="border-t p-4">
+        <Skeleton className="h-5 w-3/4" />
+        <Skeleton className="mt-2 h-4 w-1/2" />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/paywall-card.tsx b/apps/www/src/features/studio/paywalls/paywall-card.tsx
new file mode 100644
index 000000000..76bb50bfe
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywall-card.tsx
@@ -0,0 +1,203 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { Link } from "@tanstack/react-router";
+import type { Paywall } from "@voidhash/rpc";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  Badge,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import {
+  ArchiveIcon,
+  ArchiveRestoreIcon,
+  MoreHorizontalIcon,
+  PencilIcon,
+  Smartphone,
+  Trash2Icon,
+} from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import {
+  archivePaywallOptions,
+  deletePaywallOptions,
+  queryKeys,
+  restorePaywallOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { RenamePaywallDialog } from "./rename-paywall-dialog";
+
+interface PaywallCardProps {
+  paywall: typeof Paywall.Type;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+/**
+ * A single paywall tile in the dashboard grid: a link into the designer plus a
+ * kebab menu with Rename / Archive (or Restore) / Delete. Archived paywalls are
+ * dimmed and badged, and expose Restore in place of Archive.
+ */
+export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallCardProps) {
+  const queryClient = useQueryClient();
+  const [renameOpen, setRenameOpen] = useState(false);
+  const [deleteOpen, setDeleteOpen] = useState(false);
+  const isArchived = paywall.archivedAt != null;
+
+  const invalidate = () =>
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.paywall.list({ projectId: paywall.projectId }),
+    });
+
+  const { mutate: archive, status: archiveStatus } = useMutation({
+    ...archivePaywallOptions(),
+    onError: () => toast.error("Failed to archive paywall"),
+    onSuccess: async () => {
+      toast.success("Paywall archived");
+      await invalidate();
+    },
+  });
+
+  const { mutate: restore, status: restoreStatus } = useMutation({
+    ...restorePaywallOptions(),
+    onError: () => toast.error("Failed to restore paywall"),
+    onSuccess: async () => {
+      toast.success("Paywall restored");
+      await invalidate();
+    },
+  });
+
+  const { mutate: remove, status: deleteStatus } = useMutation({
+    ...deletePaywallOptions(),
+    onError: () => toast.error("Failed to delete paywall"),
+    onSuccess: async () => {
+      toast.success("Paywall deleted");
+      await invalidate();
+      setDeleteOpen(false);
+    },
+  });
+
+  const isDeleting = deleteStatus === "pending";
+  const isMutating = archiveStatus === "pending" || restoreStatus === "pending";
+
+  return (
+    <div className="group relative">
+      <Link
+        className={`flex flex-col overflow-hidden rounded-xl border bg-card transition-all hover:border-foreground/20 hover:shadow-lg ${
+          isArchived ? "opacity-60" : ""
+        }`}
+        params={{ id: paywall.id, organizationSlug, projectSlug }}
+        to="/studio/$organizationSlug/$projectSlug/design/$id"
+      >
+        {/* Preview Area */}
+        <div className="relative flex aspect-3/4 items-center justify-center bg-muted/50">
+          {paywall.thumbnailUrl ? (
+            <img
+              alt={paywall.name}
+              className="absolute inset-0 size-full object-cover"
+              loading="lazy"
+              src={paywall.thumbnailUrl}
+            />
+          ) : (
+            <div className="flex flex-col items-center gap-2 text-muted-foreground">
+              <Smartphone className="h-12 w-12 opacity-30" />
+            </div>
+          )}
+        </div>
+
+        {/* Info Area */}
+        <div className="border-t p-4">
+          <h3 className="truncate font-medium">{paywall.name}</h3>
+          <p className="mt-0.5 truncate text-muted-foreground text-sm">{paywall.slug}</p>
+        </div>
+      </Link>
+
+      {isArchived && (
+        <Badge className="absolute top-2 left-2" variant="secondary">
+          Archived
+        </Badge>
+      )}
+
+      <div className="absolute top-2 right-2 opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100">
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button
+              aria-label="Paywall actions"
+              className="size-7 bg-background/80 backdrop-blur-sm"
+              disabled={isMutating}
+              size="icon-sm"
+              variant="secondary"
+            >
+              <MoreHorizontalIcon />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end">
+            <DropdownMenuItem onSelect={() => setRenameOpen(true)}>
+              <PencilIcon />
+              Rename
+            </DropdownMenuItem>
+            {isArchived ? (
+              <DropdownMenuItem onSelect={() => restore({ paywallId: paywall.id })}>
+                <ArchiveRestoreIcon />
+                Restore
+              </DropdownMenuItem>
+            ) : (
+              <DropdownMenuItem onSelect={() => archive({ paywallId: paywall.id })}>
+                <ArchiveIcon />
+                Archive
+              </DropdownMenuItem>
+            )}
+            <DropdownMenuSeparator />
+            <DropdownMenuItem onSelect={() => setDeleteOpen(true)} variant="destructive">
+              <Trash2Icon />
+              Delete
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      </div>
+
+      <RenamePaywallDialog
+        onOpenChange={setRenameOpen}
+        open={renameOpen}
+        paywall={paywall}
+        projectId={paywall.projectId}
+      />
+
+      <AlertDialog onOpenChange={setDeleteOpen} open={deleteOpen}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>Delete paywall</AlertDialogTitle>
+            <AlertDialogDescription>
+              Permanently delete <span className="font-medium">{paywall.name}</span>? This cannot be
+              undone. If this paywall might still be shown to users, archive it instead.
+            </AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel disabled={isDeleting}>Cancel</AlertDialogCancel>
+            <AlertDialogAction
+              disabled={isDeleting}
+              onClick={(event) => {
+                event.preventDefault();
+                remove({ paywallId: paywall.id });
+              }}
+            >
+              {isDeleting ? "Deleting..." : "Delete"}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/paywall-record-skeleton.tsx b/apps/www/src/features/studio/paywalls/paywall-record-skeleton.tsx
new file mode 100644
index 000000000..6e6d7e01b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywall-record-skeleton.tsx
@@ -0,0 +1,17 @@
+"use client";
+
+import { Skeleton } from "@voidhash/ui";
+
+export function PaywallRecordSkeleton() {
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="w-42">
+            <Skeleton className="h-4 w-24" />
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/paywall-record.tsx b/apps/www/src/features/studio/paywalls/paywall-record.tsx
new file mode 100644
index 000000000..a1dfdd874
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywall-record.tsx
@@ -0,0 +1,31 @@
+"use client";
+import { Link } from "@tanstack/react-router";
+import type { Paywall } from "@voidhash/rpc";
+
+export function PaywallRecord({
+  paywall,
+  organizationSlug,
+  projectSlug,
+}: {
+  paywall: typeof Paywall.Type;
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      <Link
+        className="absolute inset-0 h-full w-full"
+        params={{ id: paywall.id, organizationSlug, projectSlug }}
+        to="/studio/$organizationSlug/$projectSlug/design/$id"
+      />
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-center gap-4">
+          <div className="flex items-baseline gap-4">
+            <div>{paywall.name}</div>
+            <code className="text-muted-foreground text-sm">{paywall.slug}</code>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/rename-paywall-dialog.tsx b/apps/www/src/features/studio/paywalls/rename-paywall-dialog.tsx
new file mode 100644
index 000000000..bfc3bf5f4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/rename-paywall-dialog.tsx
@@ -0,0 +1,109 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  Input,
+  Label,
+} from "@voidhash/ui";
+import { useEffect, useState } from "react";
+import { toast } from "sonner";
+import { queryKeys, renamePaywallOptions } from "@/features/studio/lib/tanstack-query";
+
+export interface RenamePaywallDialogProps {
+  projectId: string;
+  paywall: { id: string; name: string; slug: string };
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+}
+
+/**
+ * Controlled dialog that renames a paywall via `RenamePaywall`. Only the
+ * display name is editable — the slug is the paywall's stable identifier and is
+ * intentionally immutable, so it is shown read-only for reference.
+ */
+export function RenamePaywallDialog({
+  projectId,
+  paywall,
+  open,
+  onOpenChange,
+}: RenamePaywallDialogProps) {
+  const queryClient = useQueryClient();
+  const [name, setName] = useState(paywall.name);
+
+  useEffect(() => {
+    if (open) {
+      setName(paywall.name);
+    }
+  }, [open, paywall.name]);
+
+  const { mutate: rename, status } = useMutation({
+    ...renamePaywallOptions(),
+    onError: () => toast.error("Failed to rename paywall"),
+    onSuccess: async () => {
+      toast.success("Paywall renamed");
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywall.list({ projectId }),
+      });
+      onOpenChange(false);
+    },
+  });
+
+  const isPending = status === "pending";
+  const trimmed = name.trim();
+  const canSubmit = trimmed.length > 0 && trimmed !== paywall.name && !isPending;
+
+  return (
+    <Dialog onOpenChange={onOpenChange} open={open}>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>Rename paywall</DialogTitle>
+        </DialogHeader>
+        <form
+          className="flex flex-col gap-4"
+          onSubmit={(event) => {
+            event.preventDefault();
+            if (canSubmit) {
+              rename({ name: trimmed, paywallId: paywall.id });
+            }
+          }}
+        >
+          <div className="flex flex-col gap-2">
+            <Label htmlFor="rename-paywall-name">Name</Label>
+            <Input
+              autoFocus
+              id="rename-paywall-name"
+              onChange={(event) => setName(event.target.value)}
+              value={name}
+            />
+          </div>
+          <div className="flex flex-col gap-2">
+            <Label htmlFor="rename-paywall-slug">Slug</Label>
+            <Input disabled id="rename-paywall-slug" readOnly value={paywall.slug} />
+            <p className="text-muted-foreground text-xs">
+              The slug is fixed and never changes when you rename a paywall.
+            </p>
+          </div>
+          <DialogFooter>
+            <Button
+              disabled={isPending}
+              onClick={() => onOpenChange(false)}
+              type="button"
+              variant="ghost"
+            >
+              Cancel
+            </Button>
+            <Button disabled={!canSubmit} type="submit">
+              {isPending ? "Saving..." : "Save"}
+            </Button>
+          </DialogFooter>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/perks/create-perk-modal-button.tsx b/apps/www/src/features/studio/perks/create-perk-modal-button.tsx
new file mode 100644
index 000000000..c116a3358
--- /dev/null
+++ b/apps/www/src/features/studio/perks/create-perk-modal-button.tsx
@@ -0,0 +1,19 @@
+"use client";
+import { Button } from "@voidhash/ui/button";
+import { useState } from "react";
+
+import { CreatePerkModal } from "./create-perk-modal";
+
+export function CreatePerkModalButton({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <CreatePerkModal
+      onClose={() => setOpen(false)}
+      onSuccess={() => setOpen(false)}
+      open={open}
+      projectId={projectId}
+      trigger={<Button onClick={() => setOpen(true)}>Add Perk</Button>}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/perks/create-perk-modal.tsx b/apps/www/src/features/studio/perks/create-perk-modal.tsx
new file mode 100644
index 000000000..1c435630c
--- /dev/null
+++ b/apps/www/src/features/studio/perks/create-perk-modal.tsx
@@ -0,0 +1,153 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { InfoTooltip } from "@voidhash/ui";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { createPerkOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+const createPerkSchema = z.object({
+  name: z
+    .string()
+    .min(3, "Name must be at least 3 characters long")
+    .max(32, "Name must be less than 32 characters"),
+  slug: z
+    .string()
+    .min(3, "Slug must be at least 3 characters long")
+    .max(32, "Slug must be less than 32 characters")
+    .regex(
+      /^[a-z0-9_-]+$/,
+      "Slug must contain only lowercase letters, numbers, underscores, and hyphens",
+    ),
+});
+
+type CreatePerkForm = z.infer<typeof createPerkSchema>;
+
+interface CreatePerkModalProps {
+  open: boolean;
+  onClose: () => void;
+  trigger: React.ReactNode;
+  projectId: string;
+  onSuccess?: (perk: { id: string }) => void;
+}
+
+export function CreatePerkModal({
+  open,
+  onClose,
+  trigger,
+  projectId,
+  onSuccess,
+}: CreatePerkModalProps) {
+  const form = useForm<CreatePerkForm>({
+    defaultValues: {
+      name: "",
+      slug: "",
+    },
+    resolver: zodResolver(createPerkSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: createPerk, status: createPerkStatus } = useMutation({
+    ...createPerkOptions(),
+    onSuccess: (data) => {
+      onSuccess?.(data);
+      toast.success("Perk created successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.perk.list({ projectId }),
+      });
+      handleOpenChange(false);
+    },
+    onError: () => {
+      toast.error("Failed to create perk");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreatePerkForm) => {
+    createPerk({ ...data, projectId });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create Perk</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="All-Access, AI-features, etc." {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="slug"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>
+                    <span>Slug (ID)</span>
+                    <InfoTooltip info="Slugs are unique identifiers used to reference the perk in code." />
+                  </FormLabel>
+                  <FormControl>
+                    <Input placeholder="all-access, ai-features, etc." {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={createPerkStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createPerkStatus === "pending"} type="submit">
+                {createPerkStatus === "pending" ? "Creating Perk..." : "Create Perk"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/perks/perk-record-skeleton.tsx b/apps/www/src/features/studio/perks/perk-record-skeleton.tsx
new file mode 100644
index 000000000..7ca2336a4
--- /dev/null
+++ b/apps/www/src/features/studio/perks/perk-record-skeleton.tsx
@@ -0,0 +1,20 @@
+"use client";
+
+import { Skeleton } from "@voidhash/ui";
+
+export function PerkRecordSkeleton() {
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="w-42">
+            <Skeleton className="h-4 w-24" />
+          </div>
+        </div>
+        <div className="flex items-center gap-2">
+          <Skeleton className="h-8 w-8" />
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/perks/perk-record.tsx b/apps/www/src/features/studio/perks/perk-record.tsx
new file mode 100644
index 000000000..1c48adb35
--- /dev/null
+++ b/apps/www/src/features/studio/perks/perk-record.tsx
@@ -0,0 +1,124 @@
+"use client";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { Perk } from "@voidhash/rpc";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Tooltip,
+  TooltipContent,
+  TooltipProvider,
+  TooltipTrigger,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { CopyIcon, EllipsisVerticalIcon } from "lucide-react";
+import { toast } from "sonner";
+import { deletePerkOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+// import { EditProductModal } from "./edit-product-modal";
+
+export function PerkRecord({ perk }: { perk: typeof Perk.Type }) {
+  // const [setOpenEditModal] = useState(false);
+
+  const queryClient = useQueryClient();
+  const { mutate: deletePerk, status: deletePerkStatus } = useMutation({
+    ...deletePerkOptions(),
+    onSuccess: () => {
+      toast.success("Perk successfully deleted");
+      queryClient.invalidateQueries({ queryKey: queryKeys.perk.all });
+    },
+    onError: () => {
+      toast.error("Failed to delete perk");
+    },
+  });
+
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  const handleDeletePerk = async () => {
+    const res = await openDialog({
+      description: "Are you sure you want to delete this perk?",
+      title: "Delete perk",
+    });
+
+    if (!res) {
+      return;
+    }
+
+    deletePerk({
+      perkId: perk.id,
+    });
+  };
+
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      {/* <Link
+				className="inset-0 absolute w-full h-full pointer-events-"
+				href={`/${organizationSlug}/${projectSlug}/monetization/perks/${perk.id}`}
+			></Link> */}
+      <div className="z-10 flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-center gap-4">
+          <div className="flex items-baseline gap-4">
+            <div>{perk.name}</div>
+            <code className="text-muted-foreground text-sm">{perk.slug}</code>
+          </div>
+        </div>
+        <div className="flex items-center gap-2">
+          <TooltipProvider>
+            <Tooltip>
+              <TooltipTrigger asChild>
+                <Button
+                  className="z-20"
+                  onClick={(e) => {
+                    e.preventDefault();
+                    navigator.clipboard.writeText(perk.slug);
+                    toast.success("Slug (ID) copied to clipboard");
+                  }}
+                  size="icon"
+                  variant="outline"
+                >
+                  <CopyIcon className="h-4 w-4" />
+                </Button>
+              </TooltipTrigger>
+              <TooltipContent>
+                <p>Click to copy Slug (ID)</p>
+              </TooltipContent>
+            </Tooltip>
+          </TooltipProvider>
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button className="z-20" size="icon" variant="outline">
+                <EllipsisVerticalIcon className="h-4 w-4" />
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="end" className="w-48">
+              {/* <DropdownMenuItem
+								className="cursor-pointer"
+								onSelect={(e) => {
+									e.preventDefault();
+									setOpenEditModal(true);
+								}}
+							>
+								Edit perk
+							</DropdownMenuItem> */}
+
+              <DropdownMenuItem
+                className="cursor-pointer"
+                disabled={deletePerkStatus === "pending"}
+                onClick={handleDeletePerk}
+              >
+                {deletePerkStatus === "pending" ? "Deleting..." : "Delete perk"}
+              </DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+        </div>
+      </div>
+      <ConfirmationDialog />
+      {/* <EditProductModal
+				open={openEditModal}
+				onClose={() => setOpenEditModal(false)}
+				product={product}
+			/> */}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/perks/perks-page-empty-state.tsx b/apps/www/src/features/studio/perks/perks-page-empty-state.tsx
new file mode 100644
index 000000000..63f987d3e
--- /dev/null
+++ b/apps/www/src/features/studio/perks/perks-page-empty-state.tsx
@@ -0,0 +1,39 @@
+"use client";
+
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { useState } from "react";
+
+import { CreatePerkModal } from "./create-perk-modal";
+
+export function PerksPageEmptyState({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <Card className="mx-auto w-full max-w-5xl text-center">
+      <CardHeader>
+        <CardTitle>No perks yet</CardTitle>
+        <CardDescription className="mx-auto max-w-md text-balance">
+          Each product may unlock one or more perks for the person, which your app uses to grant
+          access to various features. Examples of perks include &quot;Full-Access&quot;,
+          &quot;AI-features&quot;, and &quot;Premium-recipes&quot;.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <CreatePerkModal
+          onClose={() => setOpen(false)}
+          onSuccess={() => setOpen(false)}
+          open={open}
+          projectId={projectId}
+          trigger={<Button onClick={() => setOpen(true)}>Create perk</Button>}
+        />
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/perks/perks-page-skeleton.tsx b/apps/www/src/features/studio/perks/perks-page-skeleton.tsx
new file mode 100644
index 000000000..66637e7d8
--- /dev/null
+++ b/apps/www/src/features/studio/perks/perks-page-skeleton.tsx
@@ -0,0 +1,25 @@
+import { Card } from "@voidhash/ui";
+
+import { PerkRecordSkeleton } from "./perk-record-skeleton";
+
+export function PerksPageSkeleton() {
+  return (
+    <div>
+      <div className="flex flex-row items-center justify-between pt-6">
+        <div>
+          <h2 className="font-normal text-xl tracking-right">Perks</h2>
+          <p className="mt-1 text-muted-foreground">List of unlockable features / perks.</p>
+        </div>
+      </div>
+
+      <div className="mt-8">
+        <Card className="grid gap-0 divide-y p-0">
+          {Array.from({ length: 3 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <PerkRecordSkeleton key={index} />
+          ))}
+        </Card>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/perks/perks-page.tsx b/apps/www/src/features/studio/perks/perks-page.tsx
new file mode 100644
index 000000000..fcc57620d
--- /dev/null
+++ b/apps/www/src/features/studio/perks/perks-page.tsx
@@ -0,0 +1,67 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { Card } from "@voidhash/ui";
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listPerksOptions } from "@/features/studio/lib/tanstack-query/perks";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { CreatePerkModalButton } from "./create-perk-modal-button";
+import { PerkRecord } from "./perk-record";
+import { PerksPageEmptyState } from "./perks-page-empty-state";
+import { PerksPageSkeleton } from "./perks-page-skeleton";
+
+export const PerksPage = () => {
+  const { organizationSlug, projectSlug } = useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+  const { data: perks, status: perksStatus } = useQuery({
+    ...listPerksOptions({ projectId: project?.id ?? "" }),
+    enabled: !!project?.id,
+  });
+
+  if (perksStatus === "pending") {
+    return <PerksPageSkeleton />;
+  }
+
+  if (perksStatus === "error" || !project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occured loading the perks",
+        }}
+      />
+    );
+  }
+
+  return (
+    <div>
+      <div className="flex flex-row items-center justify-between pt-6">
+        <div>
+          <h2 className="font-normal text-xl tracking-right">Perks</h2>
+          <p className="mt-1 text-muted-foreground">List of unlockable features / perks.</p>
+        </div>
+        {perks.length > 0 && <CreatePerkModalButton projectId={project.id} />}
+      </div>
+
+      <div className="mt-8">
+        {perks.length === 0 ? (
+          <PerksPageEmptyState projectId={project.id} />
+        ) : (
+          <Card className="grid gap-0 divide-y p-0">
+            {perks.map((perk) => (
+              <PerkRecord key={perk.id} perk={perk} />
+            ))}
+          </Card>
+        )}
+      </div>
+    </div>
+  );
+};
diff --git a/apps/www/src/features/studio/persons/create-person-button.tsx b/apps/www/src/features/studio/persons/create-person-button.tsx
new file mode 100644
index 000000000..abd9d701b
--- /dev/null
+++ b/apps/www/src/features/studio/persons/create-person-button.tsx
@@ -0,0 +1,18 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import { useState } from "react";
+
+import { CreatePersonModal } from "./create-person-modal";
+
+export function CreatePersonButton({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+  return (
+    <CreatePersonModal
+      onClose={() => setOpen(false)}
+      open={open}
+      projectId={projectId}
+      trigger={<Button onClick={() => setOpen(true)}>Create Person</Button>}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/persons/create-person-modal.tsx b/apps/www/src/features/studio/persons/create-person-modal.tsx
new file mode 100644
index 000000000..cbbcbb9e3
--- /dev/null
+++ b/apps/www/src/features/studio/persons/create-person-modal.tsx
@@ -0,0 +1,148 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { InfoTooltip } from "@voidhash/ui";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { createPersonOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+// Extract the relevant parts from the person creation input schema for the form
+const createPersonFormSchema = z.object({
+  distinctId: z.string().min(1),
+  email: z.string().email().optional(),
+  name: z.string().optional(),
+});
+
+type CreatePersonForm = z.infer<typeof createPersonFormSchema>;
+
+interface CreatePersonModalProps {
+  trigger: React.ReactNode;
+  projectId: string;
+  open: boolean;
+  onClose: () => void;
+}
+
+export function CreatePersonModal({ open, onClose, trigger, projectId }: CreatePersonModalProps) {
+  const form = useForm<CreatePersonForm>({
+    defaultValues: {
+      distinctId: "",
+      email: "",
+      name: "",
+    },
+    resolver: zodResolver(createPersonFormSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: createPerson, status: createPersonStatus } = useMutation({
+    ...createPersonOptions(),
+    onSuccess: () => {
+      toast.success("Person created successfully");
+      queryClient.invalidateQueries({ queryKey: queryKeys.person.all });
+    },
+    onError: () => {
+      toast.error("Failed to create person");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreatePersonForm) => {
+    createPerson({ ...data, projectId });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create Person</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-6 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="distinctId"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>
+                    Distinct ID{" "}
+                    <InfoTooltip info="Distinct ID links your application's person identity with its corresponding Voidhash person profile." />
+                  </FormLabel>
+                  <FormControl>
+                    <Input placeholder="#######" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="John Doe" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="email"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Email</FormLabel>
+                  <FormControl>
+                    <Input placeholder="john.doe@example.com" type="email" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={createPersonStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createPersonStatus === "pending"} type="submit">
+                {createPersonStatus === "pending" ? "Creating Person..." : "Create Person"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/persons/persons-detail-page.tsx b/apps/www/src/features/studio/persons/persons-detail-page.tsx
new file mode 100644
index 000000000..db22fbdf9
--- /dev/null
+++ b/apps/www/src/features/studio/persons/persons-detail-page.tsx
@@ -0,0 +1,126 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { Card, CardContent, CardHeader, CardTitle } from "@voidhash/ui";
+import { format } from "date-fns";
+import { Clock4Icon } from "lucide-react";
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { getPersonByDistinctIdOptions } from "@/features/studio/lib/tanstack-query/persons";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { Page } from "../shell";
+import { VoidhashErrorCard } from "../shell/components/voidhash-error-card";
+
+export const PersonDetailPage = () => {
+  const { id: distinctId, organizationSlug, projectSlug } = useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const {
+    data: person,
+    status,
+    // error
+  } = useQuery(
+    getPersonByDistinctIdOptions({
+      distinctId: distinctId as string,
+      projectId: project.id,
+    }),
+  );
+
+  if (status === "pending") {
+    return <Page className="p-0 py-8 pt-3">Loading person...</Page>;
+  }
+
+  if (status === "error") {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+        }}
+      />
+    );
+  }
+
+  const title = person.name ?? person.email ?? person.distinctId ?? person.personId;
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "People",
+          url: `/${organizationSlug}/${projectSlug}/persons`,
+        },
+        {
+          title,
+          url: `/${organizationSlug}/${projectSlug}/persons/${distinctId}`,
+        },
+      ]}
+      className="p-0 py-8 pt-3"
+    >
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-6xl pb-10">
+          <div className="flex flex-row items-center justify-between">
+            <h1 className="font-normal text-3xl tracking-right">{title}</h1>
+          </div>
+          {person.email && <p className="mt-3 text-muted-foreground">{person.email}</p>}
+        </div>
+      </div>
+      <div className="mx-auto mt-3 max-w-6xl ">
+        <div className="grid grid-cols-12 gap-8">
+          <div className="col-span-9">
+            <div className="mt-8">
+              <Card className="mt-8 gap-0 overflow-hidden pb-0">
+                <CardHeader className="pb-4">
+                  <CardTitle className="flex items-center gap-4">Purchases</CardTitle>
+                </CardHeader>
+                <CardContent className="divide-y divide-border border-border border-t px-0">
+                  <div className="flex h-full flex-col items-center justify-center py-6">
+                    <div className="text-muted-foreground">Person has not made any purchases.</div>
+                  </div>
+                </CardContent>
+              </Card>
+
+              <div className="mt-8">
+                <Card className="mt-8 gap-0 overflow-hidden pb-0">
+                  <CardHeader className="pb-4">
+                    <CardTitle className="flex items-center gap-4">Unlocked Perks</CardTitle>
+                  </CardHeader>
+                  <CardContent className="divide-y divide-border border-border border-t px-0">
+                    <div className="flex h-full flex-col items-center justify-center py-6">
+                      <div className="text-muted-foreground">Person has no unlocked perks.</div>
+                    </div>
+                  </CardContent>
+                </Card>
+              </div>
+            </div>
+          </div>
+          <div className="col-span-3 mt-8">
+            <h2 className=" font-semibold text-xl tracking-normal tracking-right">Details</h2>
+            <div className="mt-4">
+              {person.createdAt && (
+                <div>
+                  <p className="font-semibold">Created at</p>
+                  <div className="mt-1 flex flex-row items-center gap-2">
+                    <Clock4Icon className="h-4 w-4 text-muted-foreground" />
+                    <p className="text-muted-foreground">
+                      {format(person.createdAt, "MMM d, yyyy")}
+                    </p>
+                  </div>
+                </div>
+              )}
+            </div>
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/persons/persons-page.tsx b/apps/www/src/features/studio/persons/persons-page.tsx
new file mode 100644
index 000000000..b7c9c6dec
--- /dev/null
+++ b/apps/www/src/features/studio/persons/persons-page.tsx
@@ -0,0 +1,50 @@
+"use client";
+
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { Page } from "../shell";
+import { CreatePersonButton } from "./create-person-button";
+import { PersonsTable } from "./persons-table";
+
+export const PersonsPage = () => {
+  const { organizationSlug, projectSlug } = useParams();
+  const { user } = useAuth();
+
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "The project you are looking for does not exist.",
+          title: "Project not found",
+        }}
+      />
+    );
+  }
+
+  return (
+    <Page className="p-0 py-8">
+      <div className="mx-auto flex max-w-4xl flex-row items-center justify-between">
+        <h1 className="font-normal text-3xl tracking-right">People</h1>
+        <CreatePersonButton projectId={project.id} />
+      </div>
+
+      <div className="mx-auto mt-8 max-w-4xl">
+        <PersonsTable
+          organizationSlug={organizationSlug as string}
+          projectId={project.id}
+          projectSlug={projectSlug as string}
+        />
+      </div>
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/persons/persons-table/columns.tsx b/apps/www/src/features/studio/persons/persons-table/columns.tsx
new file mode 100644
index 000000000..555418f3b
--- /dev/null
+++ b/apps/www/src/features/studio/persons/persons-table/columns.tsx
@@ -0,0 +1,25 @@
+"use client";
+import type { ColumnDef } from "@tanstack/react-table";
+import type { Person } from "@voidhash/rpc";
+import { format } from "date-fns";
+
+export const columns: ColumnDef<typeof Person.Type>[] = [
+  {
+    accessorKey: "name",
+    header: "Name",
+  },
+  {
+    accessorKey: "email",
+    cell: ({ row }) => <span className="text-muted-foreground">{row.original.email}</span>,
+    header: "Email",
+  },
+  {
+    accessorKey: "createdAt",
+    cell: ({ row }) => (
+      <span className="text-muted-foreground">
+        {row.original.createdAt ? format(row.original.createdAt, "MMM d, yyyy") : "N/A"}
+      </span>
+    ),
+    header: "Created",
+  },
+];
diff --git a/apps/www/src/features/studio/persons/persons-table/data-table.tsx b/apps/www/src/features/studio/persons/persons-table/data-table.tsx
new file mode 100644
index 000000000..615ed0e7d
--- /dev/null
+++ b/apps/www/src/features/studio/persons/persons-table/data-table.tsx
@@ -0,0 +1,87 @@
+"use client";
+
+import { useNavigate } from "@tanstack/react-router";
+import { type ColumnDef, flexRender, getCoreRowModel, useReactTable } from "@tanstack/react-table";
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@voidhash/ui";
+
+interface DataTableProps<TData extends { distinctId: string }, TValue> {
+  columns: ColumnDef<TData, TValue>[];
+  data: TData[];
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+export function DataTable<TData, TValue>({
+  columns,
+  data,
+  organizationSlug,
+  projectSlug,
+}: DataTableProps<TData & { distinctId: string }, TValue>) {
+  const table = useReactTable({
+    columns,
+    data,
+    getCoreRowModel: getCoreRowModel(),
+  });
+
+  const navigate = useNavigate();
+
+  return (
+    <div className="rounded-md border">
+      <Table>
+        <TableHeader>
+          {table.getHeaderGroups().map((headerGroup) => (
+            <TableRow key={headerGroup.id}>
+              {headerGroup.headers.map((header) => (
+                <TableHead key={header.id}>
+                  {header.isPlaceholder
+                    ? null
+                    : flexRender(header.column.columnDef.header, header.getContext())}
+                </TableHead>
+              ))}
+            </TableRow>
+          ))}
+        </TableHeader>
+        <TableBody>
+          {table.getRowModel().rows?.length ? (
+            table.getRowModel().rows.map((row) => (
+              <TableRow
+                className="cursor-pointer"
+                data-state={row.getIsSelected() && "selected"}
+                key={row.id}
+                onClick={() => {
+                  navigate({
+                    params: {
+                      id: row.original.distinctId,
+                      organizationSlug,
+                      projectSlug,
+                    },
+                    to: "/studio/$organizationSlug/$projectSlug/persons/$id",
+                  });
+                }}
+              >
+                {row.getVisibleCells().map((cell) => (
+                  <TableCell key={cell.id}>
+                    {flexRender(cell.column.columnDef.cell, cell.getContext())}
+                  </TableCell>
+                ))}
+              </TableRow>
+            ))
+          ) : (
+            <TableRow>
+              <TableCell className="h-24 text-center" colSpan={columns.length}>
+                No people in your project yet.
+              </TableCell>
+            </TableRow>
+          )}
+        </TableBody>
+      </Table>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/persons/persons-table/index.tsx b/apps/www/src/features/studio/persons/persons-table/index.tsx
new file mode 100644
index 000000000..eca670f93
--- /dev/null
+++ b/apps/www/src/features/studio/persons/persons-table/index.tsx
@@ -0,0 +1,60 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { useMemo } from "react";
+import type { Person } from "@voidhash/rpc";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listPersonsOptions } from "@/features/studio/lib/tanstack-query/persons";
+
+import { columns } from "./columns";
+import { DataTable } from "./data-table";
+import { PersonsTableSkeleton } from "./skeleton";
+
+export const PersonsTable = ({
+  projectId,
+  organizationSlug,
+  projectSlug,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  projectId: string;
+}) => {
+  const { data, status } = useQuery(listPersonsOptions({ projectId }));
+  const persons = useMemo(() => normalizePersons(data ?? []), [data]);
+
+  if (status === "pending") {
+    return <PersonsTableSkeleton />;
+  }
+
+  if (status === "error") {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occured loading people",
+        }}
+      />
+    );
+  }
+
+  return (
+    <DataTable
+      columns={columns}
+      data={persons}
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+    />
+  );
+};
+
+const normalizePersons = (persons: ReadonlyArray<typeof Person.Type>) =>
+  Array.from(
+    persons
+      .reduce((deduped, person) => {
+        deduped.set(person.personId, person);
+        return deduped;
+      }, new Map<string, typeof Person.Type>())
+      .values(),
+  ).sort((left, right) => getCreatedAtTime(right) - getCreatedAtTime(left));
+
+const getCreatedAtTime = (person: typeof Person.Type) => person.createdAt?.getTime() ?? 0;
diff --git a/apps/www/src/features/studio/persons/persons-table/skeleton.tsx b/apps/www/src/features/studio/persons/persons-table/skeleton.tsx
new file mode 100644
index 000000000..dcc3e8de6
--- /dev/null
+++ b/apps/www/src/features/studio/persons/persons-table/skeleton.tsx
@@ -0,0 +1,41 @@
+import {
+  Skeleton,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@voidhash/ui";
+
+export function PersonsTableSkeleton() {
+  return (
+    <div className="rounded-md border">
+      <Table>
+        <TableHeader>
+          <TableRow>
+            <TableHead>Name</TableHead>
+            <TableHead>Email</TableHead>
+            <TableHead>Created</TableHead>
+          </TableRow>
+        </TableHeader>
+        <TableBody>
+          {Array.from({ length: 8 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <TableRow key={`persons-skeleton-${index}`}>
+              <TableCell>
+                <Skeleton className="h-4 w-40" />
+              </TableCell>
+              <TableCell>
+                <Skeleton className="h-4 w-56" />
+              </TableCell>
+              <TableCell>
+                <Skeleton className="h-4 w-24" />
+              </TableCell>
+            </TableRow>
+          ))}
+        </TableBody>
+      </Table>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/products/create-product-modal-button.tsx b/apps/www/src/features/studio/products/create-product-modal-button.tsx
new file mode 100644
index 000000000..2d73fe401
--- /dev/null
+++ b/apps/www/src/features/studio/products/create-product-modal-button.tsx
@@ -0,0 +1,52 @@
+"use client";
+import { Button } from "@voidhash/ui/button";
+import { IconButtonTooltip } from "@voidhash/ui/tooltip";
+import { PlusIcon } from "lucide-react";
+import { useState } from "react";
+
+import { CreateProductModal } from "./create-product-modal";
+
+interface CreateProductModalButtonProps {
+  projectId: string;
+  iconOnly?: boolean;
+}
+
+export function CreateProductModalButton({
+  projectId,
+  iconOnly = false,
+}: CreateProductModalButtonProps) {
+  const [open, setOpen] = useState(false);
+
+  if (iconOnly) {
+    return (
+      <>
+        <IconButtonTooltip label="Add product">
+          <Button
+            aria-label="Add product"
+            onClick={() => setOpen(true)}
+            size="icon-sm"
+            variant="ghost"
+          >
+            <PlusIcon className="size-4" />
+          </Button>
+        </IconButtonTooltip>
+        <CreateProductModal
+          onClose={() => setOpen(false)}
+          onSuccess={() => setOpen(false)}
+          open={open}
+          projectId={projectId}
+        />
+      </>
+    );
+  }
+
+  return (
+    <CreateProductModal
+      onClose={() => setOpen(false)}
+      onSuccess={() => setOpen(false)}
+      open={open}
+      projectId={projectId}
+      trigger={<Button onClick={() => setOpen(true)}>Add Product</Button>}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/products/create-product-modal.tsx b/apps/www/src/features/studio/products/create-product-modal.tsx
new file mode 100644
index 000000000..9b074cdd1
--- /dev/null
+++ b/apps/www/src/features/studio/products/create-product-modal.tsx
@@ -0,0 +1,228 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { ProductType, ProductTypeLabels } from "@voidhash/lib";
+import { createSlug } from "@voidhash/core/utils";
+import { Badge, InfoTooltip, RadioGroup, RadioGroupItem } from "@voidhash/ui";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useEffect } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { createProductOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+const createProductSchema = z.object({
+  name: z
+    .string()
+    .min(3, "Name must be at least 3 characters long")
+    .max(32, "Name must be less than 32 characters"),
+
+  slug: z
+    .string()
+    .min(3, "Slug must be at least 3 characters long")
+    .max(32, "Slug must be less than 32 characters")
+    .regex(/^[a-z0-9_-]+$/, "Slug must contain only lowercase letters, numbers and hyphens"),
+
+  type: z.nativeEnum(ProductType),
+});
+
+type CreateProductForm = z.infer<typeof createProductSchema>;
+
+// Define a Product type matching the DB schema
+export interface Product {
+  id: string;
+  name: string;
+  projectId: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+interface CreateProductModalProps {
+  open: boolean;
+  onClose: () => void;
+  trigger?: React.ReactNode;
+  projectId: string;
+  onSuccess?: (product: { id: string }) => void;
+}
+
+export function CreateProductModal({
+  open,
+  onClose,
+  trigger,
+  projectId,
+  onSuccess,
+}: CreateProductModalProps) {
+  const form = useForm<CreateProductForm>({
+    defaultValues: {
+      name: "",
+      slug: "",
+      type: ProductType.Subscription,
+    },
+    resolver: zodResolver(createProductSchema),
+  });
+
+  const name = form.watch("name");
+
+  // Automatically generate slug if name is changed and slug is not touched
+  useEffect(() => {
+    if (name && !form.formState.touchedFields.slug) {
+      form.setValue("slug", createSlug(name), { shouldValidate: false });
+    }
+  }, [name, form]);
+
+  const queryClient = useQueryClient();
+  const { mutate: createProduct, status: createProductStatus } = useMutation({
+    ...createProductOptions(),
+    onSuccess: (data) => {
+      onSuccess?.(data);
+      toast.success("Product created successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.product.list({ projectId }),
+      });
+      handleOpenChange(false);
+    },
+    onError: () => {
+      toast.error("Failed to create product");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreateProductForm) => {
+    createProduct({ name: data.name, slug: data.slug, projectId });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      {trigger ? <DialogTrigger asChild>{trigger}</DialogTrigger> : null}
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create New Product</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-6 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Product Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Product Name" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <FormField
+              control={form.control}
+              name="slug"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Slug</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Product Name" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <FormField
+              control={form.control}
+              name="type"
+              render={({ field }) => (
+                <FormItem className="space-y-3">
+                  <FormLabel>Product type</FormLabel>
+                  <FormControl>
+                    <RadioGroup
+                      className="flex flex-col space-y-1"
+                      defaultValue={field.value?.toString()}
+                      onValueChange={field.onChange}
+                    >
+                      <FormItem className="flex items-center space-x-3 space-y-0">
+                        <FormControl>
+                          <RadioGroupItem value={ProductType.Subscription.toString()} />
+                        </FormControl>
+                        <FormLabel className="font-normal">
+                          <span>{ProductTypeLabels[ProductType.Subscription]}</span>
+                        </FormLabel>
+                      </FormItem>
+                      <FormItem className="flex items-center space-x-3 space-y-0 opacity-50">
+                        <FormControl>
+                          <RadioGroupItem disabled={true} value={ProductType.OneTime.toString()} />
+                        </FormControl>
+                        <FormLabel className="font-normal">
+                          <span className="flex items-center gap-2">
+                            <span>{ProductTypeLabels[ProductType.OneTime]}</span>
+                            <Badge variant="outline">Coming Soon</Badge>
+                          </span>
+                          <InfoTooltip info="One-time products can only be purchased once per person. For example: Lifetime access to a course." />
+                        </FormLabel>
+                      </FormItem>
+                      <FormItem className="flex items-center space-x-3 space-y-0 opacity-50">
+                        <FormControl>
+                          <RadioGroupItem
+                            disabled={true}
+                            value={ProductType.OneTimeConsumable.toString()}
+                          />
+                        </FormControl>
+                        <FormLabel className="font-normal">
+                          <span className="flex items-center gap-2">
+                            <span>{ProductTypeLabels[ProductType.OneTimeConsumable]}</span>
+                            <Badge variant="outline">Coming Soon</Badge>
+                          </span>
+                          <InfoTooltip info="One-time consumable products can be purchased multiple times. For example: Battle passes, in-game currency, etc." />
+                        </FormLabel>
+                      </FormItem>
+                    </RadioGroup>
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={createProductStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createProductStatus === "pending"} type="submit">
+                {createProductStatus === "pending" ? "Creating Product..." : "Create Product"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/products/edit-product-modal.tsx b/apps/www/src/features/studio/products/edit-product-modal.tsx
new file mode 100644
index 000000000..5ed6a212f
--- /dev/null
+++ b/apps/www/src/features/studio/products/edit-product-modal.tsx
@@ -0,0 +1,125 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { Product } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useEffect } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { queryKeys, updateProductOptions } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+const updateProductSchema = z.object({
+  name: z.string().min(1),
+});
+type UpdateProductForm = z.infer<typeof updateProductSchema>;
+
+// Define a Product type matching the DB schema
+
+interface EditProductModalProps {
+  open: boolean;
+  onClose: () => void;
+  product: typeof Product.Type;
+}
+
+export function EditProductModal({ open, onClose, product }: EditProductModalProps) {
+  const form = useForm<UpdateProductForm>({
+    defaultValues: {
+      name: "",
+    },
+    resolver: zodResolver(updateProductSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: updateProduct, status: updateProductStatus } = useMutation({
+    ...updateProductOptions(),
+    onSuccess: () => {
+      toast.success("Product updated successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.product.list({ projectId: product.projectId }),
+      });
+      onClose?.();
+      handleOpenChange(false);
+    },
+    onError: () => {
+      toast.error("Failed to update the product");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: UpdateProductForm) => {
+    updateProduct({ ...data, id: product.id });
+  };
+
+  useEffect(() => {
+    if (!open) {
+      form.reset({
+        name: product.name,
+      });
+    }
+  }, [open, form, product.name]);
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Edit Product</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Product Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Product Name" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={updateProductStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={updateProductStatus === "pending"} type="submit">
+                {updateProductStatus === "pending" ? "Saving..." : "Save Changes"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-add-perk-button.tsx b/apps/www/src/features/studio/products/product-detail-add-perk-button.tsx
new file mode 100644
index 000000000..c5d83132f
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-add-perk-button.tsx
@@ -0,0 +1,94 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { Perk } from "@voidhash/rpc";
+import {
+  Button,
+  Command,
+  CommandEmpty,
+  CommandGroup,
+  CommandInput,
+  CommandItem,
+  CommandList,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  cn,
+} from "@voidhash/ui";
+import { Check } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import { createProductPerkOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+
+export function ProductDetailAddPerkButton({
+  productId,
+  perks,
+  variant = "default",
+}: {
+  productId: string;
+  perks: (typeof Perk.Type)[];
+  variant?: "default" | "secondary";
+}) {
+  const [open, setOpen] = useState(false);
+  const [value, setValue] = useState("");
+
+  const queryClient = useQueryClient();
+  const { mutate: createProductPerk } = useMutation({
+    ...createProductPerkOptions(),
+    onSuccess: () => {
+      toast.success("Perk added");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.productPerk.listByProduct({ productId }),
+      });
+    },
+    onError: () => {
+      toast.error("Failed to add perk");
+    },
+  });
+
+  const handleSelect = (perkId: string) => {
+    createProductPerk({
+      perkId,
+      productId,
+    });
+    setValue(perkId);
+    setOpen(false);
+  };
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <PopoverTrigger asChild>
+        {/** biome-ignore lint/a11y/useSemanticElements: custom component */}
+        <Button aria-expanded={open} role="combobox" variant={variant}>
+          Add perk
+        </Button>
+      </PopoverTrigger>
+      <PopoverContent className="w-[200px] p-0">
+        <Command>
+          <CommandInput placeholder="Search perks..." />
+          <CommandList>
+            <CommandEmpty>No perks found.</CommandEmpty>
+            <CommandGroup>
+              {perks.map((perk) => (
+                <CommandItem
+                  className="cursor-pointer"
+                  key={perk.id}
+                  onSelect={() => {
+                    handleSelect(perk.id);
+                    setValue("");
+                    setOpen(false);
+                  }}
+                  value={perk.id}
+                >
+                  <Check
+                    className={cn("mr-2 h-4 w-4", value === perk.id ? "opacity-100" : "opacity-0")}
+                  />
+                  {perk.name}
+                </CommandItem>
+              ))}
+            </CommandGroup>
+          </CommandList>
+        </Command>
+      </PopoverContent>
+    </Popover>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-add-product-button.tsx b/apps/www/src/features/studio/products/product-detail-add-product-button.tsx
new file mode 100644
index 000000000..5e4678aba
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-add-product-button.tsx
@@ -0,0 +1,37 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import { useState } from "react";
+
+import { ProviderProductSheet } from "./provider-product-sheet";
+
+export function ProductDetailAddProductButton({
+  productId,
+  providerId,
+  paymentProviderConfigurationId,
+  title,
+  variant = "default",
+}: {
+  productId: string;
+  paymentProviderConfigurationId: string;
+  providerId: string;
+  title: string;
+  variant?: "default" | "secondary";
+}) {
+  const [open, setOpen] = useState(false);
+  return (
+    <>
+      <Button onClick={() => setOpen(true)} type="submit" variant={variant}>
+        Add {title} product
+      </Button>
+      <ProviderProductSheet
+        mode="add"
+        onClose={() => setOpen(false)}
+        open={open}
+        paymentProviderConfigurationId={paymentProviderConfigurationId}
+        productId={productId}
+        providerId={providerId}
+      />
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-body.tsx b/apps/www/src/features/studio/products/product-detail-body.tsx
new file mode 100644
index 000000000..218a414b9
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-body.tsx
@@ -0,0 +1,194 @@
+"use client";
+
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { Card, CardContent, CardFooter, CardHeader, CardTitle } from "@voidhash/ui";
+
+import { ProductDetailAddPerkButton } from "./product-detail-add-perk-button";
+import { ProductDetailAddProductButton } from "./product-detail-add-product-button";
+import { ProductDetailPaymentProvidersEmptyState } from "./product-detail-payment-providers-empty-state";
+import { ProductDetailPerksEmptyState } from "./product-detail-perks-empty-state";
+import { ProductDetailPerkRecord } from "./product-detail-product-perk-record";
+import { ProductDetailProviderProductRecord } from "./product-detail-provider-product-record";
+import { PaymentProviderLogo } from "@/features/studio/projects/settings/payment-providers/payment-provider-logo";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import {
+  listPaymentProviderConfigurationsOptions,
+  listPerksOptions,
+  listProductPerksByProductIdOptions,
+  listProviderProductsByProductIdOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+interface ProductDetailBodyProps {
+  productId: string;
+  projectId: string;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+/**
+ * Renders the perks + payment provider sections for a product. Used both by the
+ * standalone `/products/$id` route and inline inside the products master/detail
+ * pane. Triggers Suspense via `useSuspenseQuery`; wrap in a boundary.
+ */
+export function ProductDetailBody({
+  productId,
+  projectId,
+  organizationSlug,
+  projectSlug,
+}: ProductDetailBodyProps) {
+  const { data: providerProducts } = useSuspenseQuery(
+    listProviderProductsByProductIdOptions({ productId }),
+  );
+
+  const { data: paymentProviderConfigurations } = useSuspenseQuery(
+    listPaymentProviderConfigurationsOptions({ projectId }),
+  );
+
+  const { data: perks } = useSuspenseQuery(listPerksOptions({ projectId }));
+
+  const { data: productPerks } = useSuspenseQuery(
+    listProductPerksByProductIdOptions({ productId }),
+  );
+
+  const enabledPaymentProviderConfigurations = (paymentProviderConfigurations ?? [])
+    .map((paymentProviderConfiguration) => {
+      const paymentProvider = paymentProviders.find(
+        (paymentProvider) => paymentProvider.id === paymentProviderConfiguration.providerId,
+      );
+
+      if (!paymentProvider) {
+        return null;
+      }
+
+      return {
+        configuration: paymentProviderConfiguration,
+        enabled: !!paymentProviderConfiguration && paymentProviderConfiguration.enabled,
+        id: paymentProviderConfiguration.id,
+        name: paymentProviderConfiguration.name,
+        paymentProvider,
+      };
+    })
+    .filter((paymentProviderConfiguration) => paymentProviderConfiguration !== null)
+    .filter((paymentProviderConfiguration) => paymentProviderConfiguration.enabled);
+
+  const perksWithoutProductPerks = (perks ?? []).filter(
+    (perk) => !(productPerks ?? []).some((productPerk) => productPerk.perkId === perk.id),
+  );
+
+  return (
+    <div className="space-y-16">
+      <section>
+        <h2 className="font-normal text-2xl tracking-right">Perks</h2>
+        <p className="mt-2 text-muted-foreground">Configure what perks this product unlocks.</p>
+
+        <div className="mt-8">
+          {(productPerks ?? []).length === 0 && (
+            <ProductDetailPerksEmptyState
+              perks={perksWithoutProductPerks}
+              productId={productId}
+            />
+          )}
+          {(productPerks ?? []).length > 0 && (
+            <Card className="gap-0 overflow-hidden pt-0 pb-0">
+              <CardContent className="divide-y divide-border px-0">
+                {productPerks?.map((productPerk) => (
+                  <ProductDetailPerkRecord
+                    key={productPerk.perkId}
+                    perks={perks ?? []}
+                    productPerk={productPerk}
+                  />
+                ))}
+              </CardContent>
+
+              <CardFooter className="flex items-baseline justify-between border-border border-t bg-background py-3 [.border-t]:pt-3">
+                <ProductDetailAddPerkButton
+                  perks={perksWithoutProductPerks}
+                  productId={productId}
+                  variant="secondary"
+                />
+              </CardFooter>
+            </Card>
+          )}
+        </div>
+      </section>
+
+      <section>
+        <h2 className="font-normal text-2xl tracking-right">Payment Providers</h2>
+        <p className="mt-2 text-muted-foreground">
+          Sets up a relationship between this voidhash product and payment providers products.
+        </p>
+
+        <div className="mt-8 space-y-8">
+          {enabledPaymentProviderConfigurations.length === 0 && (
+            <ProductDetailPaymentProvidersEmptyState
+              organizationSlug={organizationSlug}
+              projectSlug={projectSlug}
+            />
+          )}
+          {enabledPaymentProviderConfigurations.map((paymentProviderWithConfiguration) => {
+            const matchingProviderProducts = (providerProducts ?? []).filter(
+              (providerProduct) =>
+                providerProduct.paymentProviderConfigurationId ===
+                paymentProviderWithConfiguration.id,
+            );
+
+            return (
+              <Card
+                className="gap-0 overflow-hidden pb-0"
+                key={paymentProviderWithConfiguration.paymentProvider.id}
+              >
+                <CardHeader className="pb-4">
+                  <CardTitle className="flex items-center gap-4">
+                    <PaymentProviderLogo
+                      className="h-5 w-5"
+                      providerId={paymentProviderWithConfiguration.paymentProvider.id}
+                    />
+                    <span>{paymentProviderWithConfiguration.paymentProvider.title}</span>
+                  </CardTitle>
+                </CardHeader>
+                <CardContent className="divide-y divide-border border-border border-t px-0">
+                  {matchingProviderProducts.length === 0 && (
+                    <div className="flex h-full flex-col items-center justify-center py-6">
+                      <div className="text-muted-foreground">
+                        You haven&apos;t added any{" "}
+                        {paymentProviderWithConfiguration.paymentProvider.title} product yet.
+                      </div>
+                      <div className="mt-4">
+                        <ProductDetailAddProductButton
+                          paymentProviderConfigurationId={paymentProviderWithConfiguration.id}
+                          productId={productId}
+                          providerId={paymentProviderWithConfiguration.paymentProvider.id}
+                          title={paymentProviderWithConfiguration.paymentProvider.title}
+                        />
+                      </div>
+                    </div>
+                  )}
+
+                  {matchingProviderProducts.map((providerProduct) => (
+                    <ProductDetailProviderProductRecord
+                      key={providerProduct.providerProductKey}
+                      paymentProviderConfigurationId={paymentProviderWithConfiguration.id}
+                      paymentProviderId={paymentProviderWithConfiguration.paymentProvider.id}
+                      providerProduct={providerProduct}
+                    />
+                  ))}
+                </CardContent>
+                {matchingProviderProducts.length > 0 && (
+                  <CardFooter className="flex items-baseline justify-between border-border border-t bg-background py-3 [.border-t]:pt-3">
+                    <ProductDetailAddProductButton
+                      paymentProviderConfigurationId={paymentProviderWithConfiguration.id}
+                      productId={productId}
+                      providerId={paymentProviderWithConfiguration.paymentProvider.id}
+                      title={paymentProviderWithConfiguration.paymentProvider.title}
+                      variant="secondary"
+                    />
+                  </CardFooter>
+                )}
+              </Card>
+            );
+          })}
+        </div>
+      </section>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-page-skeleton.tsx b/apps/www/src/features/studio/products/product-detail-page-skeleton.tsx
new file mode 100644
index 000000000..615ca8ae8
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-page-skeleton.tsx
@@ -0,0 +1,31 @@
+import { SettingsCardSkeleton, Skeleton } from "@voidhash/ui";
+import { Page } from "@/features/studio/shell";
+
+export function ProductsDetailPageSkeleton() {
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "Products",
+        },
+        {
+          isLoading: true,
+          title: "Product",
+        },
+      ]}
+    >
+      {/* Key is used to reload the default form data when the organization slug changes */}
+      <div className="mx-auto max-w-4xl">
+        <div className="flex flex-row items-center justify-between">
+          <Skeleton className="h-8 w-40" />
+        </div>
+        <div className="mt-8">
+          {Array.from({ length: 2 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <SettingsCardSkeleton key={index} />
+          ))}
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-page.tsx b/apps/www/src/features/studio/products/product-detail-page.tsx
new file mode 100644
index 000000000..2b53831fa
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-page.tsx
@@ -0,0 +1,268 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { Card, CardContent, CardFooter, CardHeader, CardTitle } from "@voidhash/ui";
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import {
+  getProductOptions,
+  listPaymentProviderConfigurationsOptions,
+  listPerksOptions,
+  listProductPerksByProductIdOptions,
+  listProviderProductsByProductIdOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { PaymentProviderLogo } from "../projects/settings/payment-providers/payment-provider-logo";
+import { ProductDetailAddPerkButton } from "./product-detail-add-perk-button";
+import { ProductDetailAddProductButton } from "./product-detail-add-product-button";
+import { ProductDetailPaymentProvidersEmptyState } from "./product-detail-payment-providers-empty-state";
+import { ProductDetailPerksEmptyState } from "./product-detail-perks-empty-state";
+import { ProductDetailPerkRecord } from "./product-detail-product-perk-record";
+import { ProductDetailProviderProductRecord } from "./product-detail-provider-product-record";
+
+export const ProductDetailPage = () => {
+  const params = useParams();
+  const organizationSlug = params.organizationSlug as string;
+  const projectSlug = params.projectSlug as string;
+  const id = params.id as string;
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  const { data: product, status: productStatus } = useQuery({
+    ...getProductOptions({ productId: id }),
+    enabled: !!id,
+  });
+
+  const { data: providerProducts, status: providerProductsStatus } = useQuery({
+    ...listProviderProductsByProductIdOptions({ productId: id }),
+    enabled: !!id,
+  });
+
+  const { data: paymentProviderConfigurations, status: paymentProviderConfigurationsStatus } =
+    useQuery({
+      ...listPaymentProviderConfigurationsOptions({
+        projectId: project?.id ?? "",
+      }),
+      enabled: !!project?.id,
+    });
+
+  const { data: perks, status: perksStatus } = useQuery({
+    ...listPerksOptions({ projectId: project?.id ?? "" }),
+    enabled: !!project?.id,
+  });
+
+  const { data: productPerks, status: productPerksStatus } = useQuery({
+    ...listProductPerksByProductIdOptions({ productId: id }),
+    enabled: !!id,
+  });
+
+  if (
+    productStatus === "pending" ||
+    providerProductsStatus === "pending" ||
+    paymentProviderConfigurationsStatus === "pending" ||
+    perksStatus === "pending" ||
+    productPerksStatus === "pending"
+  ) {
+    return <div>Loading...</div>;
+  }
+
+  if (
+    productStatus === "error" ||
+    providerProductsStatus === "error" ||
+    paymentProviderConfigurationsStatus === "error" ||
+    perksStatus === "error" ||
+    productPerksStatus === "error" ||
+    !product ||
+    !project
+  ) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occured loading the product",
+        }}
+      />
+    );
+  }
+
+  const enabledPaymentProviderConfigurations = (paymentProviderConfigurations ?? [])
+    .map((paymentProviderConfiguration) => {
+      const paymentProvider = paymentProviders.find(
+        (paymentProvider) => paymentProvider.id === paymentProviderConfiguration.providerId,
+      );
+
+      if (!paymentProvider) {
+        return null;
+      }
+
+      return {
+        configuration: paymentProviderConfiguration,
+        enabled: !!paymentProviderConfiguration && paymentProviderConfiguration.enabled,
+        id: paymentProviderConfiguration.id,
+        name: paymentProviderConfiguration.name,
+        paymentProvider,
+      };
+    })
+    .filter((paymentProviderConfiguration) => paymentProviderConfiguration !== null)
+    .filter((paymentProviderConfiguration) => paymentProviderConfiguration.enabled);
+
+  const perksWithoutProductPerks = (perks ?? []).filter(
+    (perk) => !(productPerks ?? []).some((productPerk) => productPerk.perkId === perk.id),
+  );
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "Products",
+          url: `/${organizationSlug}/${projectSlug}/products`,
+        },
+        {
+          title: product.name,
+          url: `/${organizationSlug}/${projectSlug}/products/${id}`,
+        },
+      ]}
+      className="p-0 py-8"
+    >
+      {/* Key is used to reload the default form data when the organization slug changes */}
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-4xl pb-10 pt-4">
+          <div className="flex flex-row items-center justify-between">
+            <h1 className="font-normal text-3xl tracking-right">{product.name}</h1>
+            {/* <CreateProductModalButton projectId={project.id} /> */}
+          </div>
+        </div>
+      </div>
+      <div className="mx-auto max-w-4xl">
+        <div className="mt-8">
+          <h2 className="font-normal text-2xl tracking-right">Perks</h2>
+          <p className="mt-2 text-muted-foreground">Configure what perks this product unlocks.</p>
+
+          <div className="mt-8">
+            {(productPerks ?? []).length === 0 && (
+              <ProductDetailPerksEmptyState
+                perks={perksWithoutProductPerks}
+                productId={product.id}
+              />
+            )}
+            {(productPerks ?? []).length > 0 && (
+              <Card className="mt-8 gap-0 overflow-hidden pt-0 pb-0">
+                <CardContent className="divide-y divide-border px-0">
+                  {productPerks?.map((productPerk) => (
+                    <ProductDetailPerkRecord
+                      key={productPerk.perkId}
+                      perks={perks ?? []}
+                      productPerk={productPerk}
+                    />
+                  ))}
+                </CardContent>
+
+                <CardFooter className="flex items-baseline justify-between border-border border-t bg-background py-3 [.border-t]:pt-3">
+                  <ProductDetailAddPerkButton
+                    perks={perksWithoutProductPerks}
+                    productId={product.id}
+                    variant="secondary"
+                  />
+                </CardFooter>
+              </Card>
+            )}
+          </div>
+        </div>
+        {/* TODO: Add environment check back - environment !== EnvironmentEnum.Testing */}
+        <div className="mt-16">
+          <h2 className="font-normal text-2xl tracking-right">Payment Providers</h2>
+          <p className="mt-2 text-muted-foreground">
+            Sets up a relationship between this voidhash product and payment providers products.
+          </p>
+
+          <div className="mt-8">
+            {enabledPaymentProviderConfigurations.length === 0 && (
+              <ProductDetailPaymentProvidersEmptyState
+                organizationSlug={organizationSlug}
+                projectSlug={projectSlug}
+              />
+            )}
+            {enabledPaymentProviderConfigurations.map((paymentProviderWithConfiguration) => (
+              <Card
+                className="mt-8 gap-0 overflow-hidden pb-0"
+                key={paymentProviderWithConfiguration.paymentProvider.id}
+              >
+                <CardHeader className="pb-4">
+                  <CardTitle className="flex items-center gap-4">
+                    <PaymentProviderLogo
+                      className="h-5 w-5"
+                      providerId={paymentProviderWithConfiguration.paymentProvider.id}
+                    />
+                    <span>{paymentProviderWithConfiguration.paymentProvider.title}</span>
+                  </CardTitle>
+                </CardHeader>
+                <CardContent className="divide-y divide-border border-border border-t px-0">
+                  {/* Emtpy State */}
+                  {(providerProducts ?? []).filter(
+                    (providerProduct) =>
+                      providerProduct.paymentProviderConfigurationId ===
+                      paymentProviderWithConfiguration.id,
+                  ).length === 0 && (
+                    <div className="flex h-full flex-col items-center justify-center py-6">
+                      <div className="text-muted-foreground">
+                        You haven&apos;t added any{" "}
+                        {paymentProviderWithConfiguration.paymentProvider.title} product yet.
+                      </div>
+                      <div className="mt-4">
+                        <ProductDetailAddProductButton
+                          paymentProviderConfigurationId={paymentProviderWithConfiguration.id}
+                          productId={product.id}
+                          providerId={paymentProviderWithConfiguration.paymentProvider.id}
+                          title={paymentProviderWithConfiguration.paymentProvider.title}
+                        />
+                      </div>
+                    </div>
+                  )}
+
+                  {(providerProducts ?? [])
+                    .filter(
+                      (providerProduct) =>
+                        providerProduct.paymentProviderConfigurationId ===
+                        paymentProviderWithConfiguration.id,
+                    )
+                    .map((providerProduct) => (
+                      <ProductDetailProviderProductRecord
+                        key={providerProduct.providerProductKey}
+                        paymentProviderConfigurationId={paymentProviderWithConfiguration.id}
+                        paymentProviderId={paymentProviderWithConfiguration.paymentProvider.id}
+                        providerProduct={providerProduct}
+                      />
+                    ))}
+                </CardContent>
+                {(providerProducts ?? []).some(
+                  (providerProduct) =>
+                    providerProduct.paymentProviderConfigurationId ===
+                    paymentProviderWithConfiguration.id,
+                ) && (
+                  <CardFooter className="flex items-baseline justify-between border-border border-t bg-background py-3 [.border-t]:pt-3">
+                    <ProductDetailAddProductButton
+                      paymentProviderConfigurationId={paymentProviderWithConfiguration.id}
+                      productId={product.id}
+                      providerId={paymentProviderWithConfiguration.paymentProvider.id}
+                      title={paymentProviderWithConfiguration.paymentProvider.title}
+                      variant="secondary"
+                    />
+                  </CardFooter>
+                )}
+              </Card>
+            ))}
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/products/product-detail-pane.tsx b/apps/www/src/features/studio/products/product-detail-pane.tsx
new file mode 100644
index 000000000..eec3e27da
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-pane.tsx
@@ -0,0 +1,154 @@
+"use client";
+
+import { useMutation, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  PageHeader,
+  PageHeaderTitle,
+  ScrollArea,
+  Skeleton,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { Suspense, useState } from "react";
+import { toast } from "sonner";
+import {
+  deleteProductOptions,
+  getProductOptions,
+  queryKeys,
+} from "@/features/studio/lib/tanstack-query";
+
+import { EditProductModal } from "./edit-product-modal";
+import { ProductDetailBody } from "./product-detail-body";
+
+interface ProductDetailPaneProps {
+  productId: string;
+  projectId: string;
+  organizationSlug: string;
+  projectSlug: string;
+  onDeleted: () => void;
+}
+
+export function ProductDetailPane(props: ProductDetailPaneProps) {
+  return (
+    <Suspense fallback={<ProductDetailPaneSkeleton />}>
+      <ProductDetailPaneContent key={props.productId} {...props} />
+    </Suspense>
+  );
+}
+
+function ProductDetailPaneContent({
+  productId,
+  projectId,
+  organizationSlug,
+  projectSlug,
+  onDeleted,
+}: ProductDetailPaneProps) {
+  const queryClient = useQueryClient();
+  const [openEditModal, setOpenEditModal] = useState(false);
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  const { data: product } = useSuspenseQuery(getProductOptions({ productId }));
+
+  const { mutate: deleteProduct, status: deleteProductStatus } = useMutation({
+    ...deleteProductOptions(),
+    onSuccess: () => {
+      toast.success("Product successfully deleted");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.product.list({ projectId }),
+      });
+      onDeleted();
+    },
+    onError: () => {
+      toast.error("Failed to delete product");
+    },
+  });
+
+  const handleDeleteProduct = async () => {
+    const res = await openDialog({
+      description:
+        "Are you sure you want to delete this product? This may break access for people who have already purchased this.",
+      title: "Delete product",
+    });
+
+    if (!res) {
+      return;
+    }
+
+    deleteProduct({ id: product.id });
+  };
+
+  return (
+    <>
+      <PageHeader
+        rightActions={
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button aria-label="Product actions" size="icon-sm" variant="ghost">
+                <EllipsisVerticalIcon className="size-4" />
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="end" className="w-48">
+              <DropdownMenuItem
+                className="cursor-pointer"
+                onSelect={(e) => {
+                  e.preventDefault();
+                  setOpenEditModal(true);
+                }}
+              >
+                Edit product
+              </DropdownMenuItem>
+              <DropdownMenuItem
+                className="cursor-pointer"
+                disabled={deleteProductStatus === "pending"}
+                onClick={handleDeleteProduct}
+              >
+                {deleteProductStatus === "pending" ? "Deleting..." : "Delete product"}
+              </DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+        }
+      >
+        <PageHeaderTitle>{product.name}</PageHeaderTitle>
+      </PageHeader>
+
+      <ScrollArea className="min-h-0 flex-1">
+        <div className="mx-auto max-w-4xl px-6 py-8">
+          <ProductDetailBody
+            organizationSlug={organizationSlug}
+            productId={product.id}
+            projectId={projectId}
+            projectSlug={projectSlug}
+          />
+        </div>
+      </ScrollArea>
+
+      <ConfirmationDialog />
+      <EditProductModal
+        onClose={() => setOpenEditModal(false)}
+        open={openEditModal}
+        product={product}
+      />
+    </>
+  );
+}
+
+function ProductDetailPaneSkeleton() {
+  return (
+    <>
+      <PageHeader>
+        <Skeleton className="h-4 w-40" />
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl space-y-8 px-6 py-8">
+        <Skeleton className="h-8 w-32" />
+        <Skeleton className="h-40 w-full" />
+        <Skeleton className="h-8 w-48" />
+        <Skeleton className="h-40 w-full" />
+      </div>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-payment-providers-empty-state.tsx b/apps/www/src/features/studio/products/product-detail-payment-providers-empty-state.tsx
new file mode 100644
index 000000000..687869885
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-payment-providers-empty-state.tsx
@@ -0,0 +1,36 @@
+import { Link } from "@tanstack/react-router";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+
+export function ProductDetailPaymentProvidersEmptyState({
+  projectSlug,
+  organizationSlug,
+}: {
+  projectSlug: string;
+  organizationSlug: string;
+}) {
+  return (
+    <Card className="mx-auto w-full max-w-5xl text-center">
+      <CardHeader>
+        <CardTitle>No payment providers enabled</CardTitle>
+        <CardDescription>
+          Setup and enable at least one payment provider before proceeding.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <Link
+          params={{ organizationSlug, projectSlug }}
+          to="/studio/$organizationSlug/$projectSlug/settings/payment-providers"
+        >
+          <Button>Setup payment providers</Button>
+        </Link>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-perks-empty-state.tsx b/apps/www/src/features/studio/products/product-detail-perks-empty-state.tsx
new file mode 100644
index 000000000..11fb4cff5
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-perks-empty-state.tsx
@@ -0,0 +1,28 @@
+"use client";
+
+import type { Perk } from "@voidhash/rpc";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
+
+import { ProductDetailAddPerkButton } from "./product-detail-add-perk-button";
+
+export function ProductDetailPerksEmptyState({
+  productId,
+  perks,
+}: {
+  productId: string;
+  perks: (typeof Perk.Type)[];
+}) {
+  return (
+    <Card className="mx-auto w-full max-w-5xl text-center">
+      <CardHeader>
+        <CardTitle>No perks configured</CardTitle>
+        <CardDescription>
+          Add perks that will be unlocked when this product is purchased.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <ProductDetailAddPerkButton perks={perks} productId={productId} />
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-product-perk-record.tsx b/apps/www/src/features/studio/products/product-detail-product-perk-record.tsx
new file mode 100644
index 000000000..7783c849f
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-product-perk-record.tsx
@@ -0,0 +1,97 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { Perk, ProductPerk } from "@voidhash/rpc";
+import {
+  Badge,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  cn,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { toast } from "sonner";
+import { deleteProductPerkOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+
+export function ProductDetailPerkRecord({
+  productPerk,
+  perks,
+}: {
+  productPerk: typeof ProductPerk.Type;
+  // biome-ignore lint/style/useConsistentArrayType: We need to use ReadonlyArray to avoid mutation
+  perks: readonly (typeof Perk.Type)[];
+}) {
+  const perk = perks.find((p) => p.id === productPerk.perkId);
+
+  const queryClient = useQueryClient();
+  const { mutate: deleteProductPerk, status: deleteProductPerkStatus } = useMutation({
+    ...deleteProductPerkOptions(),
+    onSuccess: () => {
+      toast.success(`${perk?.name} perk successfully deleted`);
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.productPerk.listByProduct({
+          productId: productPerk.productId,
+        }),
+      });
+    },
+    onError: () => {
+      toast.error(`Failed to delete ${perk?.name} perk`);
+    },
+  });
+
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  const handleDeleteProductPerk = async () => {
+    const res = await openDialog({
+      description:
+        "Are you sure you want to remove this perk from this product? This may break access for people who have already purchased this.",
+      title: "Delete product perk",
+    });
+
+    if (!res) {
+      return;
+    }
+
+    deleteProductPerk({
+      id: productPerk.id,
+    });
+  };
+
+  if (!perk) {
+    return null;
+  }
+
+  return (
+    <div
+      className="flex items-center justify-between px-6 py-4 hover:bg-accent/30"
+      key={productPerk.perkId}
+    >
+      <div className={cn("flex flex-row gap-2")}>
+        <Badge key={perk.id} variant="outline">
+          {perk.name}
+        </Badge>
+      </div>
+      <div className="flex flex-row gap-2">
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button className="z-20" size="icon" variant="outline">
+              <EllipsisVerticalIcon className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-48">
+            <DropdownMenuItem
+              disabled={deleteProductPerkStatus === "pending"}
+              onSelect={handleDeleteProductPerk}
+            >
+              {deleteProductPerkStatus === "pending" ? "Deleting..." : "Delete"}
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      </div>
+      <ConfirmationDialog />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-detail-provider-product-record.tsx b/apps/www/src/features/studio/products/product-detail-provider-product-record.tsx
new file mode 100644
index 000000000..7d6d1c9e4
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-detail-provider-product-record.tsx
@@ -0,0 +1,168 @@
+"use client";
+
+import { useMutation } from "@tanstack/react-query";
+import type { PaymentProviderProduct } from "@voidhash/rpc";
+import {
+  Badge,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  cn,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { format } from "date-fns";
+import { Clock4Icon, EllipsisVerticalIcon } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import {
+  deletePaymentProviderProductOptions,
+  setActivePaymentProviderProductOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { ProviderProductSheet } from "./provider-product-sheet";
+
+export function ProductDetailProviderProductRecord({
+  paymentProviderId,
+  paymentProviderConfigurationId,
+  providerProduct,
+}: {
+  paymentProviderId: string;
+  paymentProviderConfigurationId: string;
+  providerProduct: typeof PaymentProviderProduct.Type;
+}) {
+  const paymentProvider = paymentProviders.find((p) => p.id === paymentProviderId);
+
+  const [openEditSheet, setOpenEditSheet] = useState(false);
+
+  const { mutate: deleteProviderProduct, status: deleteProviderProductStatus } = useMutation({
+    ...deletePaymentProviderProductOptions(),
+    onSuccess: () => {
+      toast.success(`${paymentProvider?.title} product successfully deleted`);
+    },
+    onError: () => {
+      toast.error(`Failed to delete ${paymentProvider?.title} product`);
+    },
+  });
+
+  const { mutate: setActiveProviderProduct, status: setActiveProviderProductStatus } = useMutation({
+    ...setActivePaymentProviderProductOptions(),
+    onSuccess: () => {
+      toast.success(`${paymentProvider?.title} product successfully activated`);
+    },
+    onError: () => {
+      toast.error(`Failed to activate ${paymentProvider?.title} product`);
+    },
+  });
+
+  const handleSetActiveProviderProduct = () => {
+    setActiveProviderProduct({
+      paymentProviderConfigurationId,
+      productId: providerProduct.productId,
+      providerProductKey: providerProduct.providerProductKey,
+    });
+  };
+
+  const isPending = deleteProviderProductStatus === "pending";
+  const isSettingActiveProviderProduct = setActiveProviderProductStatus === "pending";
+
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  const handleDeleteProviderProduct = async () => {
+    if (!paymentProvider) {
+      return;
+    }
+
+    const res = await openDialog({
+      description: `Are you sure you want to delete this ${paymentProvider.title} product? This may break access for people who have already purchased this.`,
+      title: "Delete product",
+    });
+
+    if (!res) {
+      return;
+    }
+
+    deleteProviderProduct({
+      id: providerProduct.id,
+    });
+  };
+
+  if (!paymentProvider) {
+    return null;
+  }
+
+  return (
+    <div
+      className="flex items-center justify-between px-6 py-4 hover:bg-accent/30"
+      key={providerProduct.providerProductKey}
+    >
+      <div className={cn("flex flex-row gap-2", !providerProduct.isActive && "opacity-50")}>
+        {paymentProvider.productConfigurationKeyProperties.map((key) => {
+          const value = providerProduct.configuration?.[key];
+          if (value === undefined || value === null || value === "") {
+            return null;
+          }
+
+          return (
+            <Badge key={key} variant="outline">
+              {String(value)}
+            </Badge>
+          );
+        })}
+      </div>
+      <div className="flex flex-row gap-2">
+        <div className="flex flex-row items-center gap-4 text-muted-foreground">
+          {providerProduct.isActive && (
+            <div>
+              <Badge variant="outline">Active</Badge>
+            </div>
+          )}
+          <div
+            className={cn(
+              "flex flex-row items-center gap-1",
+              !providerProduct.isActive && "opacity-50",
+            )}
+          >
+            <Clock4Icon className="h-4 w-4" />
+            <span className="text-muted-foreground text-sm">
+              {format(providerProduct.createdAt ?? new Date(), "MMM d, yyyy")}
+            </span>
+          </div>
+          <div />
+        </div>
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button className="z-20" size="icon" variant="outline">
+              <EllipsisVerticalIcon className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-48">
+            <DropdownMenuItem onSelect={() => setOpenEditSheet(true)}>Edit</DropdownMenuItem>
+            <DropdownMenuItem
+              disabled={isSettingActiveProviderProduct}
+              onSelect={handleSetActiveProviderProduct}
+            >
+              {isSettingActiveProviderProduct ? "Activating..." : "Activate"}
+            </DropdownMenuItem>
+            <DropdownMenuItem disabled={isPending} onSelect={handleDeleteProviderProduct}>
+              {isPending ? "Deleting..." : "Delete"}
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      </div>
+      <ConfirmationDialog />
+      <ProviderProductSheet
+        configuration={providerProduct.configuration}
+        mode="edit"
+        onClose={() => setOpenEditSheet(false)}
+        open={openEditSheet}
+        paymentProviderConfigurationId={paymentProviderConfigurationId}
+        paymentProviderConfigurationProductId={providerProduct.id}
+        productId={providerProduct.productId}
+        providerId={paymentProviderId}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-record-configuration-state-indicator.tsx b/apps/www/src/features/studio/products/product-record-configuration-state-indicator.tsx
new file mode 100644
index 000000000..edcddc5f7
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-record-configuration-state-indicator.tsx
@@ -0,0 +1,67 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { Badge } from "@voidhash/ui";
+import {
+  listPaymentProviderConfigurationsOptions,
+  listProviderProductsByProductIdOptions,
+} from "@/features/studio/lib/tanstack-query";
+import type { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+
+import { PaymentProviderLogo } from "../projects/settings/payment-providers/payment-provider-logo";
+
+export function ProductRecordConfigurationStateIndicator({
+  productId,
+  projectId,
+}: {
+  productId: string;
+  projectId: string;
+}) {
+  const { data: providerProducts, status: providerProductsStatus } = useQuery({
+    ...listProviderProductsByProductIdOptions({ productId }),
+    enabled: !!productId,
+  });
+
+  const { data: paymentProviderConfigurations, status: paymentProviderConfigurationsStatus } =
+    useQuery({
+      ...listPaymentProviderConfigurationsOptions({ projectId }),
+      enabled: !!projectId,
+    });
+
+  if (providerProductsStatus === "error" || paymentProviderConfigurationsStatus === "error") {
+    return <Badge>Loading error</Badge>;
+  }
+
+  if (providerProductsStatus === "pending" || paymentProviderConfigurationsStatus === "pending") {
+    return <Badge>Loading...</Badge>;
+  }
+
+  if (!providerProducts || providerProducts.length === 0) {
+    return <Badge>Configuration required</Badge>;
+  }
+
+  if (!paymentProviderConfigurations || paymentProviderConfigurations.length === 0) {
+    return <Badge>Configuration required</Badge>;
+  }
+
+  return (
+    <div className="flex flex-row items-center gap-3">
+      {paymentProviderConfigurations
+        .filter((f) => !!f.enabled)
+        .map((paymentProviderConfiguration) =>
+          providerProducts.some(
+            (providerProduct) =>
+              providerProduct.paymentProviderConfigurationId === paymentProviderConfiguration.id,
+          ) ? (
+            <PaymentProviderLogo
+              className="h-4 w-4"
+              key={paymentProviderConfiguration.providerId}
+              providerId={
+                paymentProviderConfiguration.providerId as (typeof paymentProviders)[number]["id"]
+              }
+            />
+          ) : null,
+        )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-record-skeleton.tsx b/apps/www/src/features/studio/products/product-record-skeleton.tsx
new file mode 100644
index 000000000..8103767a4
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-record-skeleton.tsx
@@ -0,0 +1,12 @@
+"use client";
+
+import { Skeleton } from "@voidhash/ui";
+
+export function ProductRecordSkeleton() {
+  return (
+    <div className="flex items-center justify-between gap-4 px-4 py-3">
+      <Skeleton className="h-4 w-32" />
+      <Skeleton className="size-2 rounded-full" />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/products/product-record.tsx b/apps/www/src/features/studio/products/product-record.tsx
new file mode 100644
index 000000000..7a8b1ac99
--- /dev/null
+++ b/apps/www/src/features/studio/products/product-record.tsx
@@ -0,0 +1,35 @@
+"use client";
+import type { Product } from "@voidhash/rpc";
+import { cn } from "@voidhash/ui";
+
+export function ProductRecord({
+  product,
+  configurationStateIndicator,
+  isSelected,
+  onSelect,
+}: {
+  product: typeof Product.Type;
+  configurationStateIndicator: React.ReactNode;
+  isSelected: boolean;
+  onSelect: (productId: string) => void;
+}) {
+  return (
+    <button
+      aria-selected={isSelected}
+      className={cn(
+        "group relative isolate flex w-full items-center justify-between gap-4 px-4 py-3 text-left transition-colors hover:bg-accent/30",
+        // Inset box-shadow mimics the accent indicator used by the
+        // events-activity panel.
+        isSelected && "bg-accent/30 shadow-[inset_2px_0_0_0_var(--primary)]",
+      )}
+      data-state={isSelected ? "selected" : undefined}
+      onClick={() => onSelect(product.id)}
+      type="button"
+    >
+      <div className="flex min-w-0 flex-1 items-center gap-3">
+        <span className="truncate font-medium text-sm">{product.name}</span>
+      </div>
+      <div className="shrink-0">{configurationStateIndicator}</div>
+    </button>
+  );
+}
diff --git a/apps/www/src/features/studio/products/products-page-empty-state.tsx b/apps/www/src/features/studio/products/products-page-empty-state.tsx
new file mode 100644
index 000000000..0b378778c
--- /dev/null
+++ b/apps/www/src/features/studio/products/products-page-empty-state.tsx
@@ -0,0 +1,38 @@
+"use client";
+
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { useState } from "react";
+
+import { CreateProductModal } from "./create-product-modal";
+
+export function ProductsPageEmptyState({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <Card className="mx-auto w-full max-w-5xl text-center">
+      <CardHeader>
+        <CardTitle>No products yet</CardTitle>
+        <CardDescription className="mx-auto max-w-md text-balance">
+          Products are items people can purchase (e.g. Gold Monthly, Gold Yearly, All-Access Pass
+          etc.). Get started by creating a product.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <CreateProductModal
+          onClose={() => setOpen(false)}
+          onSuccess={() => setOpen(false)}
+          open={open}
+          projectId={projectId}
+          trigger={<Button onClick={() => setOpen(true)}>Create product</Button>}
+        />
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/products/products-page-skeleton.tsx b/apps/www/src/features/studio/products/products-page-skeleton.tsx
new file mode 100644
index 000000000..43afdee86
--- /dev/null
+++ b/apps/www/src/features/studio/products/products-page-skeleton.tsx
@@ -0,0 +1,32 @@
+import { Page, PageHeader, PageHeaderTitle, Skeleton } from "@voidhash/ui";
+
+import { ProductRecordSkeleton } from "./product-record-skeleton";
+
+export function ProductsPageSkeleton() {
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-row overflow-hidden">
+      <div className="flex w-[22rem] shrink-0 flex-col border-border/60 border-r">
+        <PageHeader>
+          <PageHeaderTitle>Products</PageHeaderTitle>
+        </PageHeader>
+        <div className="min-h-0 flex-1 divide-y divide-border/60 overflow-y-auto">
+          {Array.from({ length: 3 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <ProductRecordSkeleton key={index} />
+          ))}
+        </div>
+      </div>
+      <div className="flex min-w-0 flex-1 flex-col">
+        <PageHeader>
+          <Skeleton className="h-4 w-40" />
+        </PageHeader>
+        <div className="mx-auto w-full max-w-4xl space-y-8 px-6 py-8">
+          <Skeleton className="h-8 w-32" />
+          <Skeleton className="h-40 w-full" />
+          <Skeleton className="h-8 w-48" />
+          <Skeleton className="h-40 w-full" />
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/products/products-page.tsx b/apps/www/src/features/studio/products/products-page.tsx
new file mode 100644
index 000000000..b622a9be0
--- /dev/null
+++ b/apps/www/src/features/studio/products/products-page.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { Card } from "@voidhash/ui";
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listProductsOptions } from "@/features/studio/lib/tanstack-query/products";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { CreateProductModalButton } from "./create-product-modal-button";
+import { ProductRecord } from "./product-record";
+import { ProductRecordConfigurationStateIndicator } from "./product-record-configuration-state-indicator";
+import { ProductsPageEmptyState } from "./products-page-empty-state";
+import { ProductsPageSkeleton } from "./products-page-skeleton";
+
+export const ProductsPage = () => {
+  const { organizationSlug, projectSlug } = useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+  const { data: products, status: productsStatus } = useQuery({
+    ...listProductsOptions({ projectId: project?.id ?? "" }),
+    enabled: !!project?.id,
+  });
+
+  if (productsStatus === "pending") {
+    return <ProductsPageSkeleton />;
+  }
+
+  if (productsStatus === "error" || !project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occured loading the products",
+        }}
+      />
+    );
+  }
+
+  return (
+    <Page>
+      {/* Key is used to reload the default form data when the organization slug changes */}
+      <div className="mx-auto max-w-4xl">
+        <div className="flex flex-row items-center justify-between">
+          <h1 className="font-normal text-3xl tracking-right">Products</h1>
+          {products.length > 0 && <CreateProductModalButton projectId={project.id} />}
+        </div>
+        <p className="mt-3 text-muted-foreground">List of products available to purchase.</p>
+
+        <div className="mt-8">
+          {products.length === 0 ? (
+            <ProductsPageEmptyState projectId={project.id} />
+          ) : (
+            <Card className="grid gap-0 divide-y p-0">
+              {products.map((product) => (
+                <ProductRecord
+                  configurationStateIndicator={
+                    <ProductRecordConfigurationStateIndicator
+                      productId={product.id}
+                      projectId={project.id}
+                    />
+                  }
+                  isSelected={false}
+                  key={product.id}
+                  onSelect={() => {}}
+                  product={product}
+                />
+              ))}
+            </Card>
+          )}
+        </div>
+      </div>
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/products/provider-product-sheet.tsx b/apps/www/src/features/studio/products/provider-product-sheet.tsx
new file mode 100644
index 000000000..ec152e68a
--- /dev/null
+++ b/apps/www/src/features/studio/products/provider-product-sheet.tsx
@@ -0,0 +1,198 @@
+/** biome-ignore-all lint/suspicious/noExplicitAny: any */
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation } from "@tanstack/react-query";
+import {
+  Button,
+  CopyText,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+  Input,
+  Label,
+  Sheet,
+  SheetContent,
+  SheetFooter,
+  SheetHeader,
+  SheetTitle,
+} from "@voidhash/ui";
+import { Fragment, useEffect } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import {
+  createPaymentProviderProductOptions,
+  updatePaymentProviderProductOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+export function ProviderProductSheet({
+  open,
+  onClose,
+  paymentProviderConfigurationProductId,
+  productId,
+  paymentProviderConfigurationId,
+  providerId,
+  configuration,
+  mode,
+}: {
+  open: boolean;
+  onClose: () => void;
+  productId: string;
+  paymentProviderConfigurationId: string;
+  paymentProviderConfigurationProductId?: string;
+  providerId: string;
+  mode: "add" | "edit";
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  configuration?: any;
+}) {
+  const paymentProvider = paymentProviders.find((pp) => pp.id === providerId);
+
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const form = useForm<any>({
+    defaultValues: paymentProvider?.defaultProductConfiguration,
+    resolver: zodResolver(paymentProvider?.productConfigurationSchema ?? z.object({})),
+  });
+
+  const { mutate: create, status: createStatus } = useMutation({
+    ...createPaymentProviderProductOptions(),
+    onSuccess: () => {
+      toast.success(`${paymentProvider?.title} configuration saved successfully`);
+      onClose();
+    },
+    onError: () => {
+      toast.error(`Failed to save ${paymentProvider?.title} configuration`);
+    },
+  });
+
+  const { mutate: update, status: updateStatus } = useMutation({
+    ...updatePaymentProviderProductOptions(),
+    onSuccess: () => {
+      toast.success(`${paymentProvider?.title} configuration saved successfully`);
+      onClose();
+    },
+    onError: () => {
+      toast.error(`Failed to save ${paymentProvider?.title} configuration`);
+    },
+  });
+
+  const isPending = createStatus === "pending" || updateStatus === "pending";
+
+  const onSubmit = (data: any) => {
+    if (mode === "add") {
+      create({
+        configuration: data,
+        paymentProviderConfigurationId,
+        productId,
+      });
+    } else {
+      if (!paymentProviderConfigurationProductId) {
+        toast.error("An error occurred while saving the configuration");
+        return;
+      }
+      update({
+        configuration: data,
+        id: paymentProviderConfigurationProductId,
+      });
+    }
+  };
+
+  useEffect(() => {
+    if (!open) {
+      form.reset(configuration ?? paymentProvider?.defaultProductConfiguration ?? {});
+    }
+  }, [open, configuration, form, paymentProvider]);
+
+  if (!paymentProvider) {
+    return null;
+  }
+
+  const configurationSheet = paymentProvider.getProductConfigurationSheet({
+    productId,
+  });
+
+  return (
+    <Sheet
+      onOpenChange={(open) => {
+        if (!open) {
+          onClose();
+        }
+      }}
+      open={open}
+    >
+      <SheetContent className="sm:max-w-2xl">
+        <SheetHeader>
+          <SheetTitle>
+            {mode === "add"
+              ? `Add ${paymentProvider.title} Product`
+              : `Edit ${paymentProvider.title} Product`}
+          </SheetTitle>
+        </SheetHeader>
+
+        <Form {...form}>
+          <form className="flex flex-1 flex-col" onSubmit={form.handleSubmit(onSubmit)}>
+            <div>
+              {form.formState.errors.root && (
+                <div className="text-destructive">{form.formState.errors.root.message}</div>
+              )}
+            </div>
+
+            <div className="flex-1 space-y-6 px-4 ">
+              {configurationSheet.sections.map((section) => (
+                <Fragment key={section.key}>
+                  {section.type === "text-input" && (
+                    <FormField
+                      control={form.control}
+                      name={section.name}
+                      render={({ field }) => (
+                        <FormItem>
+                          <FormLabel>{section.label}</FormLabel>
+                          <FormControl>
+                            <Input
+                              placeholder={section.input.placeholder}
+                              type={section.input.type}
+                              {...field}
+                            />
+                          </FormControl>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  )}
+                  {section.type === "copy-text" && (
+                    <div className="mt-4">
+                      <Label>{section.label}</Label>
+                      <div className="mt-2 rounded-md bg-muted p-3">
+                        <CopyText text={section.text} />
+                      </div>
+                    </div>
+                  )}
+                </Fragment>
+              ))}
+            </div>
+            <SheetFooter className="flex flex-row justify-end gap-2 border-border border-t">
+              <div className="flex flex-row justify-end gap-2">
+                <Button
+                  onClick={(e) => {
+                    e.preventDefault();
+                    onClose();
+                  }}
+                  variant="outline"
+                >
+                  Cancel
+                </Button>
+                <Button disabled={isPending} type="submit">
+                  {isPending ? "Saving..." : mode === "add" ? "Add" : "Save"}
+                </Button>
+              </div>
+            </SheetFooter>
+          </form>
+        </Form>
+      </SheetContent>
+    </Sheet>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/create-project-modal.tsx b/apps/www/src/features/studio/projects/create-project-modal.tsx
new file mode 100644
index 000000000..8f26ce847
--- /dev/null
+++ b/apps/www/src/features/studio/projects/create-project-modal.tsx
@@ -0,0 +1,144 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import { Input } from "@voidhash/ui";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import {
+  addCreatedProjectToCurrentUserCache,
+  createProjectOptions,
+} from "@/features/studio/lib/tanstack-query/projects";
+import { z } from "zod/v3";
+
+const createProjectSchema = z.object({
+  name: z
+    .string()
+    .min(1, "Project name is required")
+    .max(32, "Project name must be less than 32 characters"),
+});
+
+type CreateProjectForm = z.infer<typeof createProjectSchema>;
+
+interface CreateProjectModalProps {
+  open: boolean;
+  onClose: () => void;
+  trigger: React.ReactNode;
+  organizationId: string;
+  organizationSlug: string;
+}
+
+export function CreateProjectModal({
+  open,
+  onClose,
+  trigger,
+  organizationId,
+  organizationSlug,
+}: CreateProjectModalProps) {
+  const navigate = useNavigate();
+
+  const form = useForm<CreateProjectForm>({
+    defaultValues: {
+      name: "",
+    },
+    resolver: zodResolver(createProjectSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: createProject, status: createProjectStatus } = useMutation({
+    ...createProjectOptions(),
+    onSuccess: (data, variables) => {
+      toast.success("Project created successfully");
+      addCreatedProjectToCurrentUserCache(queryClient, {
+        ...data,
+        organizationId: variables.organizationId,
+      });
+      queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+      navigate({
+        params: {
+          organizationSlug,
+          projectSlug: data.slug,
+        },
+        to: "/studio/$organizationSlug/$projectSlug",
+      });
+    },
+    onError: () => {
+      toast.error("Failed to create project");
+    },
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreateProjectForm) => {
+    createProject({
+      name: data.name,
+      organizationId,
+    });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create New Project</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="My Awesome App" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex sm:justify-between gap-2">
+              <Button
+                className="hidden md:block"
+                disabled={createProjectStatus === "pending"}
+                type="button"
+                variant="outline"
+                onClick={() => onClose?.()}
+              >
+                Cancel
+              </Button>
+              <Button disabled={createProjectStatus === "pending"} type="submit">
+                {createProjectStatus === "pending" ? "Creating Project..." : "Create Project"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/delete-project-modal.tsx b/apps/www/src/features/studio/projects/delete-project-modal.tsx
new file mode 100644
index 000000000..3d669ec1b
--- /dev/null
+++ b/apps/www/src/features/studio/projects/delete-project-modal.tsx
@@ -0,0 +1,115 @@
+import { zodResolver } from "@hookform/resolvers/zod";
+import { Button } from "@voidhash/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@voidhash/ui/dialog";
+import {
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
+import { useForm } from "react-hook-form";
+import { z } from "zod/v3";
+
+interface DeleteProjectModalProps {
+  open: boolean;
+  onClose: () => void;
+  onDelete: () => void;
+  trigger: React.ReactNode;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+interface DeleteProjectForm {
+  confirmation: string;
+}
+
+export function DeleteProjectModal({
+  open,
+  onClose,
+  onDelete,
+  trigger,
+  organizationSlug,
+  projectSlug,
+}: DeleteProjectModalProps) {
+  const deleteProjectSchema = z.object({
+    confirmation: z.string().refine((value) => value === `${organizationSlug}/${projectSlug}`, {
+      message: "Please enter the text exactly as it is shown to confirm deletion",
+    }),
+  });
+
+  const form = useForm<DeleteProjectForm>({
+    defaultValues: {
+      confirmation: "",
+    },
+    resolver: zodResolver(deleteProjectSchema),
+  });
+
+  const handleOpenChange = (open: boolean) => {
+    if (!open) {
+      onClose?.();
+    }
+  };
+
+  const onSubmit = () => {
+    onClose();
+    onDelete();
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm">
+        <DialogHeader>
+          <DialogTitle>Delete Project</DialogTitle>
+          <DialogDescription>
+            This action cannot be undone. This will permanently delete the project and all
+            associated data.
+          </DialogDescription>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="mt-2 space-y-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="confirmation"
+              render={({ field }) => (
+                <FormItem>
+                  <FormLabel className="inline select-text text-muted-foreground leading-relaxed">
+                    Please type{" "}
+                    <span className="font-mono text-foreground">
+                      {organizationSlug}/{projectSlug}
+                    </span>{" "}
+                    to confirm.
+                  </FormLabel>
+                  <FormControl>
+                    <Input placeholder={`${organizationSlug}/${projectSlug}`} {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <DialogFooter className="justify-between">
+              <Button className="mt-3" onClick={onClose} variant="outline">
+                Cancel
+              </Button>
+              <Button className="mt-3" type="submit" variant="destructive">
+                Delete Project
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/overview/project-overview.tsx b/apps/www/src/features/studio/projects/overview/project-overview.tsx
new file mode 100644
index 000000000..548c4e84e
--- /dev/null
+++ b/apps/www/src/features/studio/projects/overview/project-overview.tsx
@@ -0,0 +1,96 @@
+import { useQuery } from "@tanstack/react-query";
+import { useState } from "react";
+import type { QueryAnalyticsInsightsResponseType } from "@voidhash/rpc";
+
+import {
+  buildOverviewMetricCards,
+  buildTodayChartData,
+  mapAnalyticsResultsByKey,
+} from "@/features/studio/analytics/overview/result-mappers";
+import { buildOverviewAnalyticsRequest } from "@/features/studio/analytics/overview/query-builders";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { queryAnalyticsInsightsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import {
+  OverviewSection,
+  type OverviewMetricCardData,
+} from "@/features/studio/organizations/overview/overview-section";
+import { TodayChart } from "@/features/studio/organizations/overview/today-chart";
+import {
+  type DateRange,
+  type Granularity,
+} from "@/features/studio/organizations/overview/date-range-filter";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { Card, CardContent, CardHeader, CardTitle } from "@voidhash/ui";
+
+interface ProjectOverviewProps {
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+export const ProjectOverview = ({ organizationSlug, projectSlug }: ProjectOverviewProps) => {
+  const { user } = useAuth();
+  const [dateRange, setDateRange] = useState<DateRange>("last_7d");
+  const [granularity, setGranularity] = useState<Granularity>("daily");
+  const activeOrganization = user.organizations.find((org) => org.slug === organizationSlug);
+  const project = CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug);
+
+  if (!activeOrganization || !project) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Project not found" }} />;
+  }
+
+  const analyticsQuery = useQuery(
+    queryAnalyticsInsightsOptions(
+      buildOverviewAnalyticsRequest({
+        dateRange,
+        granularity,
+        organizationId: activeOrganization.id,
+        projectId: project.id,
+      }),
+    ),
+  );
+
+  if (analyticsQuery.error) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "ANALYTICS_ERROR",
+          message: analyticsQuery.error.message,
+        }}
+      />
+    );
+  }
+
+  const analyticsData = analyticsQuery.data as QueryAnalyticsInsightsResponseType | undefined;
+  const resultsByKey = mapAnalyticsResultsByKey(analyticsData?.results ?? []);
+  const todayChart = buildTodayChartData(resultsByKey);
+  const metrics: OverviewMetricCardData[] = buildOverviewMetricCards(resultsByKey);
+
+  return (
+    <div className="mx-auto max-w-7xl px-4">
+      <div className="w-full">
+        <Card>
+          <CardHeader>
+            <CardTitle>Today</CardTitle>
+          </CardHeader>
+          <CardContent className="px-0 py-0">
+            <TodayChart
+              grossRevenue={todayChart.grossRevenue}
+              timeSeries={todayChart.timeSeries}
+              yesterdayRevenue={todayChart.yesterdayRevenue}
+            />
+          </CardContent>
+        </Card>
+      </div>
+      <div className="mt-4">
+        <OverviewSection
+          dateRange={dateRange}
+          granularity={granularity}
+          metrics={metrics}
+          onDateRangeChange={setDateRange}
+          onGranularityChange={setGranularity}
+        />
+      </div>
+    </div>
+  );
+};
diff --git a/apps/www/src/features/studio/projects/settings/general/project-avatar.tsx b/apps/www/src/features/studio/projects/settings/general/project-avatar.tsx
new file mode 100644
index 000000000..3cf401a3f
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/general/project-avatar.tsx
@@ -0,0 +1,74 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { toast } from "sonner";
+import { AvatarUploader } from "@/features/studio/components/avatar-uploader";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import {
+  removeProjectAvatarOptions,
+  setProjectAvatarOptions,
+} from "@/features/studio/lib/tanstack-query/projects";
+import { SettingsCard, SettingsRow, SettingsSection } from "@/features/studio/settings";
+
+const errorMessage = (error: unknown, fallback: string): string =>
+  error && typeof error === "object" && "message" in error && typeof error.message === "string"
+    ? error.message
+    : fallback;
+
+export function ProjectAvatarForm({
+  project,
+}: {
+  project: { id: string; name: string; logo: string | null };
+}) {
+  const queryClient = useQueryClient();
+  const invalidate = () => queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+
+  const setAvatar = useMutation({
+    ...setProjectAvatarOptions(),
+    onSuccess: () => {
+      toast.success("Project avatar updated");
+      invalidate();
+    },
+    onError: (error) => toast.error(errorMessage(error, "Failed to update project avatar")),
+  });
+
+  const removeAvatar = useMutation({
+    ...removeProjectAvatarOptions(),
+    onSuccess: () => {
+      toast.success("Project avatar removed");
+      invalidate();
+    },
+    onError: () => toast.error("Failed to remove project avatar"),
+  });
+
+  const isPending = setAvatar.status === "pending" || removeAvatar.status === "pending";
+
+  return (
+    <SettingsSection title="Project Avatar">
+      <SettingsCard
+        footer={
+          <span className="text-[12px] text-muted-foreground">
+            An avatar is optional but strongly recommended.
+          </span>
+        }
+      >
+        <SettingsRow
+          control={
+            <AvatarUploader
+              fallback={project.id}
+              isPending={isPending}
+              name={project.name}
+              onRemove={() => removeAvatar.mutate({ id: project.id })}
+              onUpload={({ imageBase64, contentType }) =>
+                setAvatar.mutate({ id: project.id, imageBase64, contentType })
+              }
+              src={project.logo}
+            />
+          }
+          description="Click on the avatar to upload a custom one from your files."
+          title="This is your project's avatar."
+        />
+      </SettingsCard>
+    </SettingsSection>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/general/project-delete.tsx b/apps/www/src/features/studio/projects/settings/general/project-delete.tsx
new file mode 100644
index 000000000..247fbb255
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/general/project-delete.tsx
@@ -0,0 +1,78 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { useNavigate, useParams } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui";
+import { useState } from "react";
+import { toast } from "sonner";
+import { DeleteProjectModal } from "@/features/studio/projects/delete-project-modal";
+import { SettingsCard, SettingsRow, SettingsSection } from "@/features/studio/settings";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import { deleteProjectOptions } from "@/features/studio/lib/tanstack-query/projects";
+
+export function ProjectDelete({ projectId }: { projectId: string }) {
+  const navigate = useNavigate();
+  const { organizationSlug, projectSlug } = useParams({
+    strict: false,
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: deleteProject, status: deleteProjectStatus } = useMutation({
+    ...deleteProjectOptions(),
+    onSuccess: () => {
+      toast.success("Project deleted successfully");
+      queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+      navigate({
+        to: "/studio",
+      });
+    },
+    onError: () => {
+      toast.error("Failed to delete project");
+    },
+  });
+
+  const handleDelete = () => {
+    deleteProject({
+      id: projectId,
+    });
+  };
+
+  const [deleteModalOpen, setDeleteModalOpen] = useState(false);
+  const isPending = deleteProjectStatus === "pending";
+
+  if (typeof organizationSlug !== "string" || typeof projectSlug !== "string") {
+    return null;
+  }
+
+  return (
+    <SettingsSection title="Danger zone">
+      <SettingsCard variant="destructive">
+        <SettingsRow
+          control={
+            <DeleteProjectModal
+              key={deleteModalOpen ? "open" : "closed"}
+              onClose={() => setDeleteModalOpen(false)}
+              onDelete={handleDelete}
+              open={deleteModalOpen}
+              organizationSlug={organizationSlug}
+              projectSlug={projectSlug}
+              trigger={
+                <Button
+                  disabled={isPending}
+                  onClick={() => setDeleteModalOpen(true)}
+                  size="sm"
+                  variant="destructive"
+                >
+                  {isPending ? "Deleting..." : "Delete project"}
+                </Button>
+              }
+            />
+          }
+          description="Permanently delete this project and all associated data. This action cannot be undone."
+          destructive={true}
+          title="Delete project"
+        />
+      </SettingsCard>
+    </SettingsSection>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/general/project-name.tsx b/apps/www/src/features/studio/projects/settings/general/project-name.tsx
new file mode 100644
index 000000000..161a02043
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/general/project-name.tsx
@@ -0,0 +1,103 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormMessage,
+  Input,
+} from "@voidhash/ui";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { SettingsCard, SettingsRow, SettingsSection } from "@/features/studio/settings";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import { updateProjectOptions } from "@/features/studio/lib/tanstack-query/projects";
+import { z } from "zod/v3";
+
+const updateProjectNameSchema = z.object({
+  name: z
+    .string()
+    .min(1, "Project name is required")
+    .max(32, "Project name must be less than 32 characters"),
+});
+
+type UpdateProjectNameForm = z.infer<typeof updateProjectNameSchema>;
+
+export function ProjectNameForm({
+  projectId,
+  projectName,
+}: {
+  projectId: string;
+  projectName: string;
+}) {
+  const form = useForm<UpdateProjectNameForm>({
+    defaultValues: {
+      name: projectName,
+    },
+    resolver: zodResolver(updateProjectNameSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: updateProjectName, status: updateProjectNameStatus } = useMutation({
+    ...updateProjectOptions(),
+    onSuccess: () => {
+      toast.success("Project name updated successfully");
+      queryClient.invalidateQueries({ queryKey: queryKeys.invalidateAll() });
+    },
+    onError: () => {
+      toast.error("Failed to update project name");
+    },
+  });
+
+  const onSubmit = (data: UpdateProjectNameForm) => {
+    updateProjectName({
+      id: projectId,
+      name: data.name,
+    });
+  };
+
+  const isPending = updateProjectNameStatus === "pending";
+
+  return (
+    <SettingsSection title="Project">
+      <Form {...form}>
+        <form onSubmit={form.handleSubmit(onSubmit)}>
+          <SettingsCard
+            footer={
+              <>
+                <span className="text-[12px] text-muted-foreground">
+                  Use up to 32 characters.
+                </span>
+                <Button disabled={isPending} size="sm" type="submit">
+                  {isPending ? "Saving..." : "Save"}
+                </Button>
+              </>
+            }
+          >
+            <SettingsRow
+              control={
+                <FormField
+                  control={form.control}
+                  name="name"
+                  render={({ field }) => (
+                    <FormItem className="w-full sm:w-64">
+                      <FormControl>
+                        <Input placeholder="Enter project name" {...field} />
+                      </FormControl>
+                      <FormMessage />
+                    </FormItem>
+                  )}
+                />
+              }
+              title="Project name"
+            />
+          </SettingsCard>
+        </form>
+      </Form>
+    </SettingsSection>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/general/project-settings-general-layout.tsx b/apps/www/src/features/studio/projects/settings/general/project-settings-general-layout.tsx
new file mode 100644
index 000000000..b556dc1b8
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/general/project-settings-general-layout.tsx
@@ -0,0 +1,7 @@
+import type { ReactNode } from "react";
+
+import { SettingsPage } from "@/features/studio/settings";
+
+export function ProjectSettingsGeneralLayout({ children }: { children: ReactNode }) {
+  return <SettingsPage title="Project Settings">{children}</SettingsPage>;
+}
diff --git a/apps/www/src/features/studio/projects/settings/general/project-settings-general-page-skeleton.tsx b/apps/www/src/features/studio/projects/settings/general/project-settings-general-page-skeleton.tsx
new file mode 100644
index 000000000..d5484fc03
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/general/project-settings-general-page-skeleton.tsx
@@ -0,0 +1,31 @@
+import { Skeleton } from "@voidhash/ui";
+import { SettingsCard, SettingsSection } from "@/features/studio/settings";
+
+import { ProjectSettingsGeneralLayout } from "./project-settings-general-layout";
+
+export function ProjectSettingsGeneralPageSkeleton() {
+  return (
+    <ProjectSettingsGeneralLayout>
+      <SettingsSection title="Project">
+        <SettingsCard>
+          <div className="space-y-3 px-5 py-4">
+            <Skeleton className="h-5 w-32" />
+            <Skeleton className="h-4 w-64" />
+            <Skeleton className="h-8 w-72" />
+          </div>
+        </SettingsCard>
+      </SettingsSection>
+      <SettingsSection title="Danger zone">
+        <SettingsCard variant="destructive">
+          <div className="flex items-center justify-between px-5 py-4">
+            <div className="space-y-2">
+              <Skeleton className="h-5 w-32" />
+              <Skeleton className="h-4 w-72" />
+            </div>
+            <Skeleton className="h-8 w-28" />
+          </div>
+        </SettingsCard>
+      </SettingsSection>
+    </ProjectSettingsGeneralLayout>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx b/apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx
new file mode 100644
index 000000000..daae62295
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx
@@ -0,0 +1,29 @@
+"use client";
+
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+import { ProjectDelete } from "./project-delete";
+import { ProjectNameForm } from "./project-name";
+import { ProjectSettingsGeneralLayout } from "./project-settings-general-layout";
+
+export function ProjectSettingsGeneralPage() {
+  const { projectSlug } = useParams();
+  const { user } = useAuth();
+
+  const project = user.projects.find((p) => p.slug === projectSlug);
+  if (!project) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Project not found" }} />;
+  }
+  return (
+    <ProjectSettingsGeneralLayout>
+      <ProjectNameForm
+        key={projectSlug as string}
+        projectId={project.id}
+        projectName={project.name}
+      />
+      <ProjectDelete projectId={project.id} />
+    </ProjectSettingsGeneralLayout>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/notifications/components/notification-provider-detail-page-chrome.tsx b/apps/www/src/features/studio/projects/settings/notifications/components/notification-provider-detail-page-chrome.tsx
new file mode 100644
index 000000000..951d3fc22
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/notifications/components/notification-provider-detail-page-chrome.tsx
@@ -0,0 +1,60 @@
+"use client";
+
+import { Link } from "@tanstack/react-router";
+import {
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  Page,
+  PageHeader,
+} from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+/**
+ * Page chrome for a notification-provider detail screen: a header with a
+ * breadcrumb back to the Notifications list plus the active provider name, and
+ * an optional right-aligned action slot (e.g. the Delete menu).
+ */
+export function NotificationProviderDetailPageChrome({
+  actions,
+  children,
+  organizationSlug,
+  projectSlug,
+  providerName,
+}: {
+  actions?: ReactNode;
+  children: ReactNode;
+  organizationSlug: string;
+  projectSlug: string;
+  providerName: string;
+}) {
+  return (
+    <Page className="flex min-h-[calc(100svh-var(--header-height))] flex-col">
+      <PageHeader className="px-2" rightActions={actions}>
+        <Breadcrumb>
+          <BreadcrumbList>
+            <BreadcrumbItem>
+              <BreadcrumbLink asChild>
+                <Link
+                  params={{ organizationSlug, projectSlug }}
+                  to="/studio/$organizationSlug/$projectSlug/settings/notifications"
+                >
+                  Notifications
+                </Link>
+              </BreadcrumbLink>
+            </BreadcrumbItem>
+            <BreadcrumbSeparator />
+            <BreadcrumbItem>
+              <BreadcrumbPage className="gap-1.5">{providerName}</BreadcrumbPage>
+            </BreadcrumbItem>
+          </BreadcrumbList>
+        </Breadcrumb>
+      </PageHeader>
+
+      {children}
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/notifications/notification-provider-detail-router.tsx b/apps/www/src/features/studio/projects/settings/notifications/notification-provider-detail-router.tsx
new file mode 100644
index 000000000..d893bc823
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/notifications/notification-provider-detail-router.tsx
@@ -0,0 +1,47 @@
+import type { PushNotificationConfiguration } from "@voidhash/rpc";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+import { ApnsNotificationProviderDetailPage } from "./providers/apns-notification-provider-detail-page";
+import { FcmNotificationProviderDetailPage } from "./providers/fcm-notification-provider-detail-page";
+
+export function NotificationProviderDetailRouter({
+  organizationSlug,
+  projectSlug,
+  project,
+  pushNotificationConfiguration,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  project: { id: string };
+  pushNotificationConfiguration: typeof PushNotificationConfiguration.Type;
+}) {
+  switch (pushNotificationConfiguration.providerId) {
+    case "fcm":
+      return (
+        <FcmNotificationProviderDetailPage
+          organizationSlug={organizationSlug}
+          project={project}
+          projectSlug={projectSlug}
+          pushNotificationConfiguration={pushNotificationConfiguration}
+        />
+      );
+    case "apns":
+      return (
+        <ApnsNotificationProviderDetailPage
+          organizationSlug={organizationSlug}
+          project={project}
+          projectSlug={projectSlug}
+          pushNotificationConfiguration={pushNotificationConfiguration}
+        />
+      );
+    default:
+      return (
+        <VoidhashErrorCard
+          error={{
+            code: "UNSUPPORTED_NOTIFICATION_PROVIDER",
+            message: "Unsupported notification provider",
+          }}
+        />
+      );
+  }
+}
diff --git a/apps/www/src/features/studio/projects/settings/notifications/notification-providers.ts b/apps/www/src/features/studio/projects/settings/notifications/notification-providers.ts
new file mode 100644
index 000000000..9c9a9406f
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/notifications/notification-providers.ts
@@ -0,0 +1,27 @@
+/**
+ * Static metadata for the push-notification providers a project can configure.
+ * There are only two — Google's FCM and Apple's APNs — and unlike the payment
+ * providers there is no dynamic catalog, so this small in-code list is enough to
+ * drive the list page, the setup buttons, and the detail-page chrome.
+ */
+export interface NotificationProvider {
+  /** Wire id sent to the backend (`providerId`). */
+  readonly id: "fcm" | "apns";
+  /** Human-readable name shown in the UI. */
+  readonly title: string;
+  /** Short one-line description shown on the list page. */
+  readonly description: string;
+}
+
+export const notificationProviders: readonly NotificationProvider[] = [
+  {
+    id: "fcm",
+    title: "Firebase Cloud Messaging",
+    description: "Deliver push notifications to Android devices via Google FCM.",
+  },
+  {
+    id: "apns",
+    title: "Apple Push Notification service",
+    description: "Deliver push notifications to iOS devices via Apple APNs.",
+  },
+];
diff --git a/apps/www/src/features/studio/projects/settings/notifications/providers/apns-notification-provider-detail-page.tsx b/apps/www/src/features/studio/projects/settings/notifications/providers/apns-notification-provider-detail-page.tsx
new file mode 100644
index 000000000..427b4ca41
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/notifications/providers/apns-notification-provider-detail-page.tsx
@@ -0,0 +1,348 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import type { PushNotificationConfiguration } from "@voidhash/rpc";
+import {
+  Badge,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Form,
+  FormControl,
+  FormDescription,
+  FormField,
+  FormItem,
+  FormMessage,
+  Input,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Switch,
+  Textarea,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { useForm } from "react-hook-form";
+import { z } from "zod/v3";
+import { SettingsCard, SettingsPage, SettingsRow, SettingsSection } from "@/features/studio/settings";
+
+import { NotificationProviderDetailPageChrome } from "../components/notification-provider-detail-page-chrome";
+import { notificationProviders } from "../notification-providers";
+import { useNotificationConfigurationMutations } from "../use-notification-configuration-mutations";
+
+/** Non-secret read shape of an APNs configuration as returned by the backend. */
+interface ApnsReadConfiguration {
+  teamId?: string;
+  keyId?: string;
+  bundleId?: string;
+  environment?: "sandbox" | "production";
+  hasPrivateKey?: boolean;
+}
+
+const apnsFormSchema = z.object({
+  teamId: z.string().length(10, "Team ID must be 10 characters"),
+  keyId: z.string().min(1, "Key ID is required"),
+  bundleId: z.string().min(1, "Bundle ID is required"),
+  environment: z.enum(["sandbox", "production"]),
+  privateKeyContent: z.string(),
+});
+
+type ApnsForm = z.infer<typeof apnsFormSchema>;
+
+const apnsProvider = notificationProviders.find((p) => p.id === "apns");
+
+export function ApnsNotificationProviderDetailPage({
+  organizationSlug,
+  projectSlug,
+  pushNotificationConfiguration,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  project: { id: string };
+  pushNotificationConfiguration: typeof PushNotificationConfiguration.Type;
+}) {
+  const configuration = pushNotificationConfiguration.configuration as ApnsReadConfiguration;
+  const hasPrivateKey = Boolean(configuration.hasPrivateKey);
+
+  const form = useForm<ApnsForm>({
+    defaultValues: {
+      teamId: configuration.teamId ?? "",
+      keyId: configuration.keyId ?? "",
+      bundleId: configuration.bundleId ?? "",
+      environment: configuration.environment ?? "production",
+      // Secrets are never returned by the read DTO — leave blank so we only send
+      // a new key when the user actually types one.
+      privateKeyContent: "",
+    },
+    resolver: zodResolver(apnsFormSchema),
+  });
+
+  const {
+    ConfirmationDialog,
+    deleteConfiguration,
+    isDeleting,
+    isSaving,
+    openDialog,
+    updateConfiguration,
+  } = useNotificationConfigurationMutations({
+    organizationSlug,
+    projectSlug,
+    providerTitle: apnsProvider?.title ?? "Apple Push Notification service",
+  });
+
+  /**
+   * Build the write `configuration` payload, only including the secret when the
+   * user provided a non-empty value so that leaving it blank never blanks the
+   * stored `.p8` private key.
+   */
+  const buildConfiguration = (values: ApnsForm): Record<string, unknown> => {
+    const next: Record<string, unknown> = {
+      teamId: values.teamId,
+      keyId: values.keyId,
+      bundleId: values.bundleId,
+      environment: values.environment,
+    };
+    if (values.privateKeyContent.trim().length > 0) {
+      next.privateKeyContent = values.privateKeyContent;
+    }
+    return next;
+  };
+
+  const save = (values: ApnsForm, enabled: boolean) => {
+    updateConfiguration({
+      configuration: buildConfiguration(values),
+      enabled,
+      id: pushNotificationConfiguration.id,
+      name: pushNotificationConfiguration.name,
+    });
+  };
+
+  const onSubmit = form.handleSubmit((values) => {
+    save(values, pushNotificationConfiguration.enabled);
+  });
+
+  const toggleEnabled = async (nextEnabled: boolean) => {
+    const isValid = await form.trigger();
+    if (!isValid) {
+      return;
+    }
+
+    const values = form.getValues();
+    // Enabling for the first time requires the private key to be present —
+    // either already stored or freshly entered.
+    if (nextEnabled && !hasPrivateKey && values.privateKeyContent.trim().length === 0) {
+      const shouldContinue = await openDialog({
+        description:
+          "A private key (.p8) is required before this provider can be enabled. Add it and save first.",
+        title: "Private key required",
+      });
+      if (shouldContinue) {
+        form.setFocus("privateKeyContent");
+      }
+      return;
+    }
+
+    save(values, nextEnabled);
+  };
+
+  return (
+    <NotificationProviderDetailPageChrome
+      actions={
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button size="icon-sm" variant="outline">
+              <EllipsisVerticalIcon className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-48">
+            <DropdownMenuItem
+              className="cursor-pointer"
+              disabled={isDeleting}
+              onClick={(dropdownEvent) => {
+                dropdownEvent.preventDefault();
+                void deleteConfiguration(pushNotificationConfiguration.id);
+              }}
+              variant="destructive"
+            >
+              Delete
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      }
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      providerName="Apple Push Notification service"
+    >
+      <Form {...form}>
+        <form onSubmit={onSubmit}>
+          <SettingsPage
+            description="Deliver push notifications to iOS devices via Apple APNs."
+            title="Apple Push Notification service"
+          >
+            <SettingsSection title="Status">
+              <SettingsCard>
+                <SettingsRow
+                  control={
+                    <Switch
+                      checked={pushNotificationConfiguration.enabled}
+                      disabled={isSaving}
+                      onCheckedChange={(checked) => void toggleEnabled(checked)}
+                    />
+                  }
+                  description="Enable delivery through this provider. A private key is required."
+                  status={
+                    pushNotificationConfiguration.enabled ? (
+                      <Badge className="text-[11px]">Enabled</Badge>
+                    ) : (
+                      <Badge className="text-[11px]" variant="outline">
+                        Disabled
+                      </Badge>
+                    )
+                  }
+                  title="Enabled"
+                />
+              </SettingsCard>
+            </SettingsSection>
+
+            <SettingsSection title="Credentials">
+              <SettingsCard
+                footer={
+                  <>
+                    <span className="text-[12px] text-muted-foreground">
+                      {hasPrivateKey
+                        ? "A private key is configured. Leave the field blank to keep it."
+                        : "Add your .p8 private key to enable delivery."}
+                    </span>
+                    <Button disabled={isSaving} size="sm" type="submit">
+                      {isSaving ? "Saving..." : "Save"}
+                    </Button>
+                  </>
+                }
+              >
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="teamId"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-64">
+                          <FormControl>
+                            <Input placeholder="ABCDE12345" {...field} />
+                          </FormControl>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="Your 10-character Apple Developer Team ID."
+                  title="Team ID"
+                />
+
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="keyId"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-64">
+                          <FormControl>
+                            <Input placeholder="ABC123DEFG" {...field} />
+                          </FormControl>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="The Key ID of the APNs auth key."
+                  title="Key ID"
+                />
+
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="bundleId"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-64">
+                          <FormControl>
+                            <Input placeholder="com.example.app" {...field} />
+                          </FormControl>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="The app's bundle identifier."
+                  title="Bundle ID"
+                />
+
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="environment"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-40">
+                          <Select onValueChange={field.onChange} value={field.value}>
+                            <FormControl>
+                              <SelectTrigger>
+                                <SelectValue />
+                              </SelectTrigger>
+                            </FormControl>
+                            <SelectContent>
+                              <SelectItem value="production">Production</SelectItem>
+                              <SelectItem value="sandbox">Sandbox</SelectItem>
+                            </SelectContent>
+                          </Select>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="Which APNs environment to deliver to."
+                  title="Environment"
+                />
+
+                <SettingsRow title="Private key (.p8)">
+                  <FormField
+                    control={form.control}
+                    name="privateKeyContent"
+                    render={({ field }) => (
+                      <FormItem>
+                        {hasPrivateKey ? (
+                          <Badge className="text-[11px]" variant="outline">
+                            Configured ✓
+                          </Badge>
+                        ) : null}
+                        <FormControl>
+                          <Textarea
+                            className="min-h-32 font-mono text-xs"
+                            placeholder={
+                              hasPrivateKey
+                                ? "Leave blank to keep the existing private key"
+                                : "-----BEGIN PRIVATE KEY-----"
+                            }
+                            {...field}
+                          />
+                        </FormControl>
+                        <FormDescription>
+                          The APNs auth key PEM (.p8). It is never displayed after saving.
+                        </FormDescription>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+                </SettingsRow>
+              </SettingsCard>
+            </SettingsSection>
+          </SettingsPage>
+
+          <ConfirmationDialog />
+        </form>
+      </Form>
+    </NotificationProviderDetailPageChrome>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/notifications/providers/fcm-notification-provider-detail-page.tsx b/apps/www/src/features/studio/projects/settings/notifications/providers/fcm-notification-provider-detail-page.tsx
new file mode 100644
index 000000000..89280ec13
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/notifications/providers/fcm-notification-provider-detail-page.tsx
@@ -0,0 +1,365 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import type { PushNotificationConfiguration } from "@voidhash/rpc";
+import {
+  Badge,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Form,
+  FormControl,
+  FormDescription,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+  Input,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Switch,
+  Textarea,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { z } from "zod/v3";
+import { SettingsCard, SettingsPage, SettingsRow, SettingsSection } from "@/features/studio/settings";
+
+import { NotificationProviderDetailPageChrome } from "../components/notification-provider-detail-page-chrome";
+import { notificationProviders } from "../notification-providers";
+import { useNotificationConfigurationMutations } from "../use-notification-configuration-mutations";
+
+/** Non-secret read shape of an FCM configuration as returned by the backend. */
+interface FcmReadConfiguration {
+  projectId?: string;
+  androidPriority?: "high" | "normal";
+  androidTtl?: string;
+  apnsPriority?: "5" | "10";
+  hasServiceAccountJson?: boolean;
+}
+
+const fcmFormSchema = z.object({
+  projectId: z.string().min(1, "Firebase project ID is required"),
+  serviceAccountJson: z.string(),
+  androidPriority: z.enum(["high", "normal"]),
+  androidTtl: z.string(),
+  apnsPriority: z.enum(["5", "10"]),
+});
+
+type FcmForm = z.infer<typeof fcmFormSchema>;
+
+const fcmProvider = notificationProviders.find((p) => p.id === "fcm");
+
+export function FcmNotificationProviderDetailPage({
+  organizationSlug,
+  projectSlug,
+  pushNotificationConfiguration,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  project: { id: string };
+  pushNotificationConfiguration: typeof PushNotificationConfiguration.Type;
+}) {
+  const configuration = pushNotificationConfiguration.configuration as FcmReadConfiguration;
+  const hasServiceAccountJson = Boolean(configuration.hasServiceAccountJson);
+
+  const form = useForm<FcmForm>({
+    defaultValues: {
+      projectId: configuration.projectId ?? "",
+      // Secrets are never returned by the read DTO — leave the field blank so we
+      // only send a new secret when the user actually types one.
+      serviceAccountJson: "",
+      androidPriority: configuration.androidPriority ?? "high",
+      androidTtl: configuration.androidTtl ?? "",
+      apnsPriority: configuration.apnsPriority ?? "10",
+    },
+    resolver: zodResolver(fcmFormSchema),
+  });
+
+  const {
+    ConfirmationDialog,
+    deleteConfiguration,
+    isDeleting,
+    isSaving,
+    openDialog,
+    updateConfiguration,
+  } = useNotificationConfigurationMutations({
+    organizationSlug,
+    projectSlug,
+    providerTitle: fcmProvider?.title ?? "Firebase Cloud Messaging",
+  });
+
+  /**
+   * Build the write `configuration` payload, only including the secret when the
+   * user provided a non-empty value so that leaving it blank never blanks the
+   * stored service-account JSON.
+   */
+  const buildConfiguration = (values: FcmForm): Record<string, unknown> => {
+    const next: Record<string, unknown> = {
+      projectId: values.projectId,
+      androidPriority: values.androidPriority,
+      apnsPriority: values.apnsPriority,
+    };
+    if (values.androidTtl.trim().length > 0) {
+      next.androidTtl = values.androidTtl.trim();
+    }
+    if (values.serviceAccountJson.trim().length > 0) {
+      next.serviceAccountJson = values.serviceAccountJson;
+    }
+    return next;
+  };
+
+  const save = (values: FcmForm, enabled: boolean) => {
+    updateConfiguration({
+      configuration: buildConfiguration(values),
+      enabled,
+      id: pushNotificationConfiguration.id,
+      name: pushNotificationConfiguration.name,
+    });
+  };
+
+  const onSubmit = form.handleSubmit((values) => {
+    save(values, pushNotificationConfiguration.enabled);
+  });
+
+  const toggleEnabled = async (nextEnabled: boolean) => {
+    const isValid = await form.trigger();
+    if (!isValid) {
+      return;
+    }
+
+    const values = form.getValues();
+    // Enabling for the first time requires the service-account JSON to be
+    // present — either already stored or freshly entered.
+    if (nextEnabled && !hasServiceAccountJson && values.serviceAccountJson.trim().length === 0) {
+      const shouldContinue = await openDialog({
+        description:
+          "A service account JSON is required before this provider can be enabled. Add it and save first.",
+        title: "Service account required",
+      });
+      if (shouldContinue) {
+        form.setFocus("serviceAccountJson");
+      }
+      return;
+    }
+
+    save(values, nextEnabled);
+  };
+
+  return (
+    <NotificationProviderDetailPageChrome
+      actions={
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button size="icon-sm" variant="outline">
+              <EllipsisVerticalIcon className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-48">
+            <DropdownMenuItem
+              className="cursor-pointer"
+              disabled={isDeleting}
+              onClick={(dropdownEvent) => {
+                dropdownEvent.preventDefault();
+                void deleteConfiguration(pushNotificationConfiguration.id);
+              }}
+              variant="destructive"
+            >
+              Delete
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      }
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      providerName="Firebase Cloud Messaging"
+    >
+      <Form {...form}>
+        <form onSubmit={onSubmit}>
+          <SettingsPage
+            description="Deliver push notifications to Android devices via Google FCM."
+            title="Firebase Cloud Messaging"
+          >
+            <SettingsSection title="Status">
+              <SettingsCard>
+                <SettingsRow
+                  control={
+                    <Switch
+                      checked={pushNotificationConfiguration.enabled}
+                      disabled={isSaving}
+                      onCheckedChange={(checked) => void toggleEnabled(checked)}
+                    />
+                  }
+                  description="Enable delivery through this provider. A service account is required."
+                  status={
+                    pushNotificationConfiguration.enabled ? (
+                      <Badge className="text-[11px]">Enabled</Badge>
+                    ) : (
+                      <Badge className="text-[11px]" variant="outline">
+                        Disabled
+                      </Badge>
+                    )
+                  }
+                  title="Enabled"
+                />
+              </SettingsCard>
+            </SettingsSection>
+
+            <SettingsSection title="Credentials">
+              <SettingsCard
+                footer={
+                  <>
+                    <span className="text-[12px] text-muted-foreground">
+                      {hasServiceAccountJson
+                        ? "A service account is configured. Leave the field blank to keep it."
+                        : "Add your service account JSON to enable delivery."}
+                    </span>
+                    <Button disabled={isSaving} size="sm" type="submit">
+                      {isSaving ? "Saving..." : "Save"}
+                    </Button>
+                  </>
+                }
+              >
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="projectId"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-64">
+                          <FormControl>
+                            <Input placeholder="my-firebase-project" {...field} />
+                          </FormControl>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="The Firebase project ID that owns the app."
+                  title="Firebase project ID"
+                />
+
+                <SettingsRow title="Service account JSON">
+                  <FormField
+                    control={form.control}
+                    name="serviceAccountJson"
+                    render={({ field }) => (
+                      <FormItem>
+                        {hasServiceAccountJson ? (
+                          <Badge className="text-[11px]" variant="outline">
+                            Configured ✓
+                          </Badge>
+                        ) : null}
+                        <FormControl>
+                          <Textarea
+                            className="min-h-32 font-mono text-xs"
+                            placeholder={
+                              hasServiceAccountJson
+                                ? "Leave blank to keep the existing service account"
+                                : "Paste the service account JSON"
+                            }
+                            {...field}
+                          />
+                        </FormControl>
+                        <FormDescription>
+                          The Firebase service account JSON used to authenticate with FCM. It is
+                          never displayed after saving.
+                        </FormDescription>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+                </SettingsRow>
+              </SettingsCard>
+            </SettingsSection>
+
+            <SettingsSection title="Delivery options">
+              <SettingsCard>
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="androidPriority"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-40">
+                          <Select onValueChange={field.onChange} value={field.value}>
+                            <FormControl>
+                              <SelectTrigger>
+                                <SelectValue />
+                              </SelectTrigger>
+                            </FormControl>
+                            <SelectContent>
+                              <SelectItem value="high">High</SelectItem>
+                              <SelectItem value="normal">Normal</SelectItem>
+                            </SelectContent>
+                          </Select>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="Android delivery priority."
+                  title="Android priority"
+                />
+
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="androidTtl"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-40">
+                          <FormControl>
+                            <Input placeholder="3600s" {...field} />
+                          </FormControl>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="Optional time-to-live (e.g. 3600s)."
+                  title="Android TTL"
+                />
+
+                <SettingsRow
+                  control={
+                    <FormField
+                      control={form.control}
+                      name="apnsPriority"
+                      render={({ field }) => (
+                        <FormItem className="w-full sm:w-40">
+                          <Select onValueChange={field.onChange} value={field.value}>
+                            <FormControl>
+                              <SelectTrigger>
+                                <SelectValue />
+                              </SelectTrigger>
+                            </FormControl>
+                            <SelectContent>
+                              <SelectItem value="10">10</SelectItem>
+                              <SelectItem value="5">5</SelectItem>
+                            </SelectContent>
+                          </Select>
+                          <FormMessage />
+                        </FormItem>
+                      )}
+                    />
+                  }
+                  description="APNs priority used for FCM-relayed iOS delivery."
+                  title="APNs priority"
+                />
+              </SettingsCard>
+            </SettingsSection>
+          </SettingsPage>
+
+          <ConfirmationDialog />
+        </form>
+      </Form>
+    </NotificationProviderDetailPageChrome>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/notifications/setup-notification-provider-button.tsx b/apps/www/src/features/studio/projects/settings/notifications/setup-notification-provider-button.tsx
new file mode 100644
index 000000000..517e12e9a
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/notifications/setup-notification-provider-button.tsx
@@ -0,0 +1,63 @@
+"use client";
+import { useMutation } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui";
+import { toast } from "sonner";
+import { createPushNotificationConfigurationOptions } from "@/features/studio/lib/tanstack-query";
+
+import { notificationProviders } from "./notification-providers";
+
+export function SetupNotificationProviderButton({
+  projectId,
+  providerId,
+  organizationSlug,
+  projectSlug,
+}: {
+  projectId: string;
+  providerId: string;
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  const navigate = useNavigate();
+  const notificationProvider = notificationProviders.find((p) => p.id === providerId);
+
+  const { mutate: createPushNotificationConfiguration, status } = useMutation({
+    ...createPushNotificationConfigurationOptions(),
+    onSuccess: (data) => {
+      toast.success(`${notificationProvider?.title} configuration saved successfully`);
+      if (data.id) {
+        navigate({
+          params: {
+            organizationSlug,
+            providerConfigurationId: data.id,
+            projectSlug,
+          },
+          to: "/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId",
+        });
+      }
+    },
+    onError: () => {
+      toast.error(`Failed to save ${notificationProvider?.title} configuration`);
+    },
+  });
+
+  if (!notificationProvider) {
+    return null;
+  }
+
+  return (
+    <Button
+      disabled={status === "pending"}
+      onClick={() =>
+        createPushNotificationConfiguration({
+          projectId,
+          providerId,
+        })
+      }
+      size="sm"
+      variant="outline"
+    >
+      Set up
+    </Button>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/notifications/use-notification-configuration-mutations.ts b/apps/www/src/features/studio/projects/settings/notifications/use-notification-configuration-mutations.ts
new file mode 100644
index 000000000..7fe3e5847
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/notifications/use-notification-configuration-mutations.ts
@@ -0,0 +1,84 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import { useConfirmDialog } from "@voidhash/ui";
+import { toast } from "sonner";
+import {
+  deletePushNotificationConfigurationOptions,
+  queryKeys,
+  updatePushNotificationConfigurationOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+export function useNotificationConfigurationMutations({
+  organizationSlug,
+  projectSlug,
+  providerTitle,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  providerTitle: string;
+}) {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  // Invalidate every cached push-config query (list + detail) so the enable/disable
+  // Switch, the Enabled/Disabled badge, and the "Configured" presence indicators —
+  // all read from the server row, not local form state — reflect the save at once.
+  const invalidateConfigurations = () =>
+    queryClient.invalidateQueries({ queryKey: queryKeys.pushNotificationConfiguration.all });
+
+  const { mutate: updateConfiguration, status: updateStatus } = useMutation({
+    ...updatePushNotificationConfigurationOptions(),
+    onSuccess: () => {
+      void invalidateConfigurations();
+      toast.success(`${providerTitle} configuration saved successfully`);
+    },
+    onError: () => {
+      toast.error(`Failed to save ${providerTitle} configuration`);
+    },
+  });
+
+  const { mutateAsync: deletePushNotificationConfiguration, status: deleteStatus } = useMutation({
+    ...deletePushNotificationConfigurationOptions(),
+    onSuccess: () => {
+      void invalidateConfigurations();
+      toast.success(`${providerTitle} configuration deleted successfully`);
+      navigate({
+        params: {
+          organizationSlug,
+          projectSlug,
+        },
+        to: "/studio/$organizationSlug/$projectSlug/settings/notifications",
+      });
+    },
+    onError: () => {
+      toast.error(`Failed to delete ${providerTitle} configuration`);
+    },
+  });
+
+  const deleteConfiguration = async (id: string) => {
+    const confirmed = await openDialog({
+      description: "Are you sure you want to delete this notification provider?",
+      title: "Delete notification provider",
+    });
+
+    if (!confirmed) {
+      return;
+    }
+
+    await deletePushNotificationConfiguration({
+      pushNotificationConfigurationId: id,
+    });
+  };
+
+  return {
+    ConfirmationDialog,
+    deleteConfiguration,
+    isDeleting: deleteStatus === "pending",
+    isSaving: updateStatus === "pending",
+    openDialog,
+    updateConfiguration,
+  };
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/p8-private-key-field.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/p8-private-key-field.tsx
new file mode 100644
index 000000000..aa9fe6642
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/p8-private-key-field.tsx
@@ -0,0 +1,30 @@
+import type { ReactNode } from "react";
+import type { Control, FieldPath, FieldValues } from "react-hook-form";
+
+import { PaymentProviderTextFileField } from "./payment-provider-text-file-field";
+
+export function P8PrivateKeyField<TFieldValues extends FieldValues>({
+  control,
+  label,
+  name,
+  successMessage = "Private key was successfully attached",
+  validationIndicator,
+}: {
+  control: Control<TFieldValues>;
+  label?: string;
+  name: FieldPath<TFieldValues>;
+  successMessage?: string;
+  validationIndicator?: ReactNode;
+}) {
+  return (
+    <PaymentProviderTextFileField
+      accept=".p8"
+      control={control}
+      label={label}
+      maxSize={1024 * 1024}
+      name={name}
+      successMessage={successMessage}
+      validationIndicator={validationIndicator}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-copyable-value.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-copyable-value.tsx
new file mode 100644
index 000000000..0bf8e95c7
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-copyable-value.tsx
@@ -0,0 +1,35 @@
+"use client";
+
+import { Button, Input } from "@voidhash/ui";
+import { CopyIcon } from "lucide-react";
+import { toast } from "sonner";
+
+export function PaymentProviderCopyableValue({
+  copyLabel = "Copy value",
+  copySuccessMessage,
+  value,
+}: {
+  copyLabel?: string;
+  copySuccessMessage: string;
+  value: string;
+}) {
+  const copyToClipboard = async () => {
+    await navigator.clipboard.writeText(value);
+    toast.success(copySuccessMessage);
+  };
+
+  return (
+    <div className="flex w-full min-w-0 items-center gap-2 sm:w-96">
+      <Input readOnly value={value} />
+      <Button
+        aria-label={copyLabel}
+        onClick={copyToClipboard}
+        size="icon"
+        type="button"
+        variant="outline"
+      >
+        <CopyIcon className="h-4 w-4" />
+      </Button>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-action-bar.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-action-bar.tsx
new file mode 100644
index 000000000..6ceacdc05
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-action-bar.tsx
@@ -0,0 +1,28 @@
+import { cn } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+/**
+ * Floating, sticky action bar pinned to the bottom of the payment provider
+ * detail page. Holds page-level actions such as "Save Changes". The gradient
+ * wrapper masks page content scrolling underneath the bar.
+ */
+export function PaymentProviderDetailActionBar({
+  children,
+  className,
+}: {
+  children: ReactNode;
+  className?: string;
+}) {
+  return (
+    <div className="sticky bottom-0 z-10 bg-background px-6 pt-6 pb-6 flex items-center justify-center">
+      <div
+        className={cn(
+          "mx-auto flex items-center justify-between gap-2 rounded-2xl border border-border/60 bg-card px-2 py-2 shadow-lg",
+          className,
+        )}
+      >
+        {children}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-form-layout.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-form-layout.tsx
new file mode 100644
index 000000000..561a061c7
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-form-layout.tsx
@@ -0,0 +1,36 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+import {
+  type PaymentProviderDetailTab,
+  PaymentProviderDetailTabNav,
+} from "./payment-provider-detail-tab-nav";
+
+export function PaymentProviderDetailFormLayout({
+  activeTabId,
+  children,
+  className,
+  onTabChange,
+  tabs,
+}: {
+  activeTabId: string;
+  children: ReactNode;
+  className?: string;
+  onTabChange: (tabId: string) => void;
+  tabs: PaymentProviderDetailTab[];
+}) {
+  return (
+    <div className={cn("mx-auto flex w-full max-w-5xl flex-1 gap-20 px-6 py-8 pt-20", className)}>
+      <PaymentProviderDetailTabNav
+        activeTabId={activeTabId}
+        className="w-56 shrink-0"
+        onTabChange={onTabChange}
+        tabs={tabs}
+      />
+
+      <div className="min-w-0 flex-1">{children}</div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-header.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-header.tsx
new file mode 100644
index 000000000..4ebde3ee0
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-header.tsx
@@ -0,0 +1,33 @@
+import { Badge } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+import { PaymentProviderLogo } from "../payment-provider-logo";
+
+export function PaymentProviderDetailHeader({
+  providerId,
+  title,
+  enabled,
+  actions,
+}: {
+  providerId: string;
+  title: string;
+  enabled: boolean;
+  actions?: ReactNode;
+}) {
+  return (
+    <span className="flex min-w-0 flex-1 items-center justify-between gap-4">
+      <span className="flex min-w-0 items-center gap-3">
+        <PaymentProviderLogo className="h-7 w-7 shrink-0" providerId={providerId} />
+        <span className="truncate">{title}</span>
+        {enabled ? (
+          <Badge className="shrink-0 text-[11px]">Enabled</Badge>
+        ) : (
+          <Badge className="shrink-0 text-[11px]" variant="outline">
+            Disabled
+          </Badge>
+        )}
+      </span>
+      {actions ? <span className="flex shrink-0 items-center gap-2">{actions}</span> : null}
+    </span>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-page-chrome.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-page-chrome.tsx
new file mode 100644
index 000000000..4e7ad0d64
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-page-chrome.tsx
@@ -0,0 +1,60 @@
+"use client";
+
+import { Link } from "@tanstack/react-router";
+import {
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  Page,
+  PageHeader,
+} from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+export function PaymentProviderDetailPageChrome({
+  actions,
+  children,
+  organizationSlug,
+  projectSlug,
+  providerIcon,
+  providerName,
+}: {
+  actions?: ReactNode;
+  children: ReactNode;
+  organizationSlug: string;
+  projectSlug: string;
+  providerIcon: ReactNode;
+  providerName: string;
+}) {
+  return (
+    <Page className="flex min-h-[calc(100svh-var(--header-height))] flex-col">
+      <PageHeader className="px-2" rightActions={actions}>
+        <Breadcrumb>
+          <BreadcrumbList>
+            <BreadcrumbItem>
+              <BreadcrumbLink asChild>
+                <Link
+                  params={{ organizationSlug, projectSlug }}
+                  to="/studio/$organizationSlug/$projectSlug/settings/payment-providers"
+                >
+                  Payment Providers
+                </Link>
+              </BreadcrumbLink>
+            </BreadcrumbItem>
+            <BreadcrumbSeparator />
+            <BreadcrumbItem>
+              <BreadcrumbPage className="gap-1.5">
+                {providerIcon}
+                {providerName}
+              </BreadcrumbPage>
+            </BreadcrumbItem>
+          </BreadcrumbList>
+        </Breadcrumb>
+      </PageHeader>
+
+      {children}
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-section.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-section.tsx
new file mode 100644
index 000000000..ad60fe99e
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-section.tsx
@@ -0,0 +1,21 @@
+import type { ReactNode } from "react";
+
+export function PaymentProviderDetailSection({
+  children,
+  description,
+  title,
+}: {
+  children: ReactNode;
+  description: string;
+  title: string;
+}) {
+  return (
+    <div className="space-y-6">
+      <div className="space-y-1">
+        <h2 className="font-medium text-sm">{title}</h2>
+        <p className="max-w-2xl text-muted-foreground text-sm leading-relaxed">{description}</p>
+      </div>
+      {children}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-tab-nav.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-tab-nav.tsx
new file mode 100644
index 000000000..37a7587ce
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-detail-tab-nav.tsx
@@ -0,0 +1,121 @@
+"use client";
+
+import { cn, Tooltip, TooltipContent, TooltipTrigger } from "@voidhash/ui";
+import { CheckIcon, CircleDashedIcon, CircleDotDashedIcon, TriangleAlertIcon } from "lucide-react";
+
+export type PaymentProviderDetailTabStatus = "valid" | "invalid" | "untouched" | "optional";
+
+export interface PaymentProviderDetailTab {
+  id: string;
+  label: string;
+  status: PaymentProviderDetailTabStatus;
+  message?: string;
+}
+
+/**
+ * Vertical tab navigation for the payment provider detail page. Styled to match
+ * the app sidebar menu, with a per-tab validation indicator and dotted
+ * connectors linking the status icons into a checklist-style rail.
+ */
+export function PaymentProviderDetailTabNav({
+  tabs,
+  activeTabId,
+  onTabChange,
+  className,
+}: {
+  tabs: PaymentProviderDetailTab[];
+  activeTabId: string;
+  onTabChange: (tabId: string) => void;
+  className?: string;
+}) {
+  return (
+    <nav className={cn("flex flex-col gap-1.5", className)}>
+      {tabs.map((tab, index) => {
+        const isActive = tab.id === activeTabId;
+        const isLast = index === tabs.length - 1;
+
+        return (
+          <div className="relative" key={tab.id}>
+            <button
+              className={cn(
+                "flex h-9 w-full cursor-pointer items-center gap-3 rounded-md px-2 text-left text-muted-foreground text-sm hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-sidebar-ring",
+                isActive && "bg-sidebar-accent text-sidebar-accent-foreground",
+              )}
+              onClick={() => onTabChange(tab.id)}
+              type="button"
+            >
+              <TabStatus status={tab.status} message={tab.message} />
+              <span className="truncate">{tab.label}</span>
+            </button>
+            {/*
+              Dotted connector linking this tab's status icon to the next one.
+              Offsets are derived from the fixed row metrics: px-2 (8px) + half
+              the size-5 icon (10px) = 18px horizontal center; the icon bottom
+              sits 28px (top-7) from the row top and the next icon top is 22px
+              below that (8px to row end + 6px gap + 8px into the next row).
+            */}
+            {isLast ? null : (
+              <span
+                aria-hidden
+                className="-translate-x-1/2 pointer-events-none absolute top-7 left-[18px] h-[22px] border-border border-l border-dashed"
+              />
+            )}
+          </div>
+        );
+      })}
+    </nav>
+  );
+}
+
+function TabStatus({
+  message,
+  status,
+}: {
+  message?: string;
+  status: PaymentProviderDetailTabStatus;
+}) {
+  const icon = <TabStatusIcon status={status} />;
+
+  if (!message) {
+    return icon;
+  }
+
+  return (
+    <Tooltip>
+      <TooltipTrigger asChild>
+        <span aria-label={message} className="inline-flex">
+          {icon}
+        </span>
+      </TooltipTrigger>
+      <TooltipContent className="max-w-xs">{message}</TooltipContent>
+    </Tooltip>
+  );
+}
+
+function TabStatusIcon({ status }: { status: PaymentProviderDetailTabStatus }) {
+  if (status === "valid") {
+    return (
+      <span className="flex size-5 shrink-0 items-center justify-center rounded-full bg-primary">
+        <CheckIcon className="size-3 text-primary-foreground" strokeWidth={3} />
+      </span>
+    );
+  }
+
+  if (status === "invalid") {
+    return (
+      <span className="flex size-5 shrink-0 items-center justify-center rounded-full bg-blaze-orange-500">
+        <TriangleAlertIcon className="size-3 text-black" />
+      </span>
+    );
+  }
+
+  if (status === "optional") {
+    return (
+      <span className="flex size-5 shrink-0 items-center justify-center rounded-full bg-muted text-muted-foreground">
+        <CircleDotDashedIcon className="size-3.5" />
+      </span>
+    );
+  }
+
+  return <CircleDashedIcon className="size-5 shrink-0 text-muted-foreground/40" />;
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-form-fields.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-form-fields.tsx
new file mode 100644
index 000000000..82c36326d
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-form-fields.tsx
@@ -0,0 +1,313 @@
+"use client";
+
+import {
+  Button,
+  Calendar,
+  cn,
+  FormControl,
+  FormField,
+  FormItem,
+  FormMessage,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  Switch,
+} from "@voidhash/ui";
+import { InputGroup, InputGroupAddon, InputGroupInput } from "@voidhash/ui/input-group";
+import { format } from "date-fns";
+import { CalendarIcon, XIcon } from "lucide-react";
+import { type ReactNode, useState } from "react";
+import type {
+  Control,
+  ControllerRenderProps,
+  FieldErrors,
+  FieldPath,
+  FieldValues,
+} from "react-hook-form";
+import { WhereToFindGuide } from "@/features/docs/components/where-to-find-guide";
+import { SettingsRow } from "@/features/studio/settings";
+
+import {
+  getPaymentProviderFieldValidationStatus,
+  PaymentProviderFieldValidationIndicator,
+  PaymentProviderValidationStatusIndicator,
+} from "./payment-provider-validation";
+
+export function PaymentProviderTextFieldRow<TFieldValues extends FieldValues>({
+  control,
+  description,
+  disabled = false,
+  errors,
+  fieldLabels,
+  guide,
+  name,
+  optional = false,
+  placeholder,
+  prefix,
+  showOptionalIndicator = false,
+  showValidationIndicator = true,
+  title,
+  type = "text",
+}: {
+  control: Control<TFieldValues>;
+  description?: ReactNode;
+  disabled?: boolean;
+  errors: FieldErrors<TFieldValues>;
+  fieldLabels: Partial<Record<string, string>>;
+  guide?: string;
+  name: FieldPath<TFieldValues>;
+  optional?: boolean;
+  placeholder?: string;
+  prefix?: ReactNode;
+  showOptionalIndicator?: boolean;
+  showValidationIndicator?: boolean;
+  title: ReactNode;
+  type?: "password" | "text" | "url";
+}) {
+  return (
+    <SettingsRow
+      control={
+        <div className="flex w-full items-center gap-4 sm:w-auto">
+          {prefix}
+          <FormField
+            control={control}
+            name={name}
+            render={({ field }) => {
+              const { value, ...fieldProps } = field;
+              const status = getPaymentProviderFieldValidationStatus({
+                disabled,
+                errors,
+                fieldLabels,
+                name,
+                optional,
+                value,
+              });
+              const shouldRenderIndicator =
+                showValidationIndicator &&
+                (showOptionalIndicator || status.state !== "optional");
+
+              return (
+                <FormItem className="w-full sm:w-96">
+                  <FormControl>
+                    <InputGroup>
+                      <InputGroupInput
+                        disabled={disabled}
+                        placeholder={placeholder}
+                        type={type}
+                        value={String(value ?? "")}
+                        {...fieldProps}
+                      />
+                      {shouldRenderIndicator ? (
+                        <InputGroupAddon align="inline-end">
+                          {showOptionalIndicator ? (
+                            <PaymentProviderValidationStatusIndicator status={status} />
+                          ) : (
+                            <PaymentProviderFieldValidationIndicator status={status} />
+                          )}
+                        </InputGroupAddon>
+                      ) : null}
+                    </InputGroup>
+                  </FormControl>
+                  <FormMessage className="sr-only" />
+                </FormItem>
+              );
+            }}
+          />
+        </div>
+      }
+      description={description}
+      status={guide ? <WhereToFindGuide fieldLabel={title} guide={guide} /> : undefined}
+      title={title}
+    />
+  );
+}
+
+export function PaymentProviderDateFieldRow<TFieldValues extends FieldValues>({
+  control,
+  description,
+  disabled = false,
+  errors,
+  fieldLabels,
+  fromYear = 2008,
+  guide,
+  name,
+  optional = false,
+  prefix,
+  showOptionalIndicator = false,
+  showValidationIndicator = true,
+  title,
+  toYear = new Date().getFullYear() + 20,
+}: {
+  control: Control<TFieldValues>;
+  description?: ReactNode;
+  disabled?: boolean;
+  errors: FieldErrors<TFieldValues>;
+  fieldLabels: Partial<Record<string, string>>;
+  fromYear?: number;
+  guide?: string;
+  name: FieldPath<TFieldValues>;
+  optional?: boolean;
+  prefix?: ReactNode;
+  showOptionalIndicator?: boolean;
+  showValidationIndicator?: boolean;
+  title: ReactNode;
+  toYear?: number;
+}) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <SettingsRow
+      control={
+        <div className="flex w-full items-center gap-4 sm:w-auto">
+          {prefix}
+          <FormField
+            control={control}
+            name={name}
+            render={({ field }) => {
+              const selectedDate =
+                typeof field.value === "string" ? parseIsoDate(field.value) : undefined;
+              const status = getPaymentProviderFieldValidationStatus({
+                disabled,
+                errors,
+                fieldLabels,
+                name,
+                optional,
+                value: field.value,
+              });
+
+              return (
+                <FormItem className="w-full sm:w-96">
+                  <div className="flex w-full items-center gap-2">
+                    <Popover onOpenChange={setOpen} open={open}>
+                      <PopoverTrigger asChild>
+                        <FormControl>
+                          <Button
+                            className={cn(
+                              "min-w-0 flex-1 justify-start text-left font-normal",
+                              !selectedDate && "text-muted-foreground",
+                            )}
+                            disabled={disabled}
+                            type="button"
+                            variant="outline"
+                          >
+                            <CalendarIcon className="h-4 w-4" />
+                            {selectedDate ? format(selectedDate, "PPP") : <span>Select date</span>}
+                          </Button>
+                        </FormControl>
+                      </PopoverTrigger>
+                      <PopoverContent align="start" className="w-auto p-0">
+                        <Calendar
+                          captionLayout="dropdown"
+                          fromYear={fromYear}
+                          mode="single"
+                          onSelect={(date) => {
+                            field.onChange(date ? toIsoDate(date) : "");
+                            setOpen(false);
+                          }}
+                          selected={selectedDate}
+                          toYear={toYear}
+                        />
+                      </PopoverContent>
+                    </Popover>
+                    {selectedDate ? (
+                      <Button
+                        aria-label="Clear date"
+                        disabled={disabled}
+                        onClick={() => field.onChange("")}
+                        size="icon"
+                        type="button"
+                        variant="outline"
+                      >
+                        <XIcon className="h-4 w-4" />
+                      </Button>
+                    ) : null}
+                    {showValidationIndicator ? (
+                      showOptionalIndicator ? (
+                        <PaymentProviderValidationStatusIndicator status={status} />
+                      ) : (
+                        <PaymentProviderFieldValidationIndicator status={status} />
+                      )
+                    ) : null}
+                  </div>
+                  <FormMessage className="sr-only" />
+                </FormItem>
+              );
+            }}
+          />
+        </div>
+      }
+      description={description}
+      status={guide ? <WhereToFindGuide fieldLabel={title} guide={guide} /> : undefined}
+      title={title}
+    />
+  );
+}
+
+export function PaymentProviderSwitchRow<TFieldValues extends FieldValues>({
+  control,
+  description,
+  disabled = false,
+  name,
+  onCheckedChange,
+  title,
+}: {
+  control: Control<TFieldValues>;
+  description?: ReactNode;
+  disabled?: boolean;
+  name: FieldPath<TFieldValues>;
+  onCheckedChange?: (
+    checked: boolean,
+    field: ControllerRenderProps<TFieldValues, FieldPath<TFieldValues>>,
+  ) => void;
+  title: ReactNode;
+}) {
+  return (
+    <SettingsRow
+      control={
+        <FormField
+          control={control}
+          name={name}
+          render={({ field }) => (
+            <FormItem>
+              <FormControl>
+                <Switch
+                  checked={Boolean(field.value)}
+                  disabled={disabled}
+                  onCheckedChange={(checked) => {
+                    if (onCheckedChange) {
+                      onCheckedChange(checked, field);
+                      return;
+                    }
+
+                    field.onChange(checked);
+                  }}
+                />
+              </FormControl>
+              <FormMessage className="sr-only" />
+            </FormItem>
+          )}
+        />
+      }
+      description={description}
+      title={title}
+    />
+  );
+}
+
+function parseIsoDate(value: string): Date | undefined {
+  const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(value);
+  if (!match) {
+    return undefined;
+  }
+
+  const [, year, month, day] = match;
+  return new Date(Number(year), Number(month) - 1, Number(day));
+}
+
+function toIsoDate(date: Date): string {
+  const year = date.getFullYear();
+  const month = String(date.getMonth() + 1).padStart(2, "0");
+  const day = String(date.getDate()).padStart(2, "0");
+
+  return `${year}-${month}-${day}`;
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-text-file-field.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-text-file-field.tsx
new file mode 100644
index 000000000..0de4f6e94
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-text-file-field.tsx
@@ -0,0 +1,84 @@
+import {
+  Button,
+  Dropzone,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+} from "@voidhash/ui";
+import { CheckCircleIcon, XIcon } from "lucide-react";
+import type { ReactNode } from "react";
+import type { Control, FieldPath, FieldValues } from "react-hook-form";
+
+export function PaymentProviderTextFileField<TFieldValues extends FieldValues>({
+  accept,
+  control,
+  label,
+  maxSize,
+  name,
+  successMessage,
+  validationIndicator,
+}: {
+  accept: string;
+  control: Control<TFieldValues>;
+  label?: string;
+  maxSize: number;
+  name: FieldPath<TFieldValues>;
+  successMessage: string;
+  validationIndicator?: ReactNode;
+}) {
+  return (
+    <FormField
+      control={control}
+      name={name}
+      render={({ field }) => {
+        const handleFileChange = (file: File) => {
+          const reader = new FileReader();
+          reader.onload = (event) => {
+            field.onChange(event.target?.result ?? "");
+          };
+          reader.readAsText(file);
+        };
+
+        return (
+          <FormItem className="flex flex-col gap-2">
+            {label ? <FormLabel>{label}</FormLabel> : null}
+            <FormControl>
+              {field.value ? (
+                <div className="flex flex-row items-center justify-between gap-2 rounded-md bg-muted/50 px-3 py-2 ring-1 ring-border/60">
+                  <div className="flex min-w-0 items-center gap-2">
+                    <CheckCircleIcon className="h-4 w-4 shrink-0 text-green-500" />
+                    <p className="truncate text-[13px] text-muted-foreground">{successMessage}</p>
+                  </div>
+                  <div className="flex shrink-0 items-center gap-2">
+                    {validationIndicator}
+                    <Button
+                      onClick={(event) => {
+                        event.preventDefault();
+                        field.onChange("");
+                      }}
+                      size="sm"
+                      variant="outline"
+                    >
+                      <XIcon className="h-4 w-4" />
+                      <span>Remove</span>
+                    </Button>
+                  </div>
+                </div>
+              ) : (
+                <div className="relative">
+                  <Dropzone accept={accept} maxSize={maxSize} onFileChange={handleFileChange} />
+                  {validationIndicator ? (
+                    <div className="absolute top-2 right-2">{validationIndicator}</div>
+                  ) : null}
+                </div>
+              )}
+            </FormControl>
+            <FormMessage className="sr-only" />
+          </FormItem>
+        );
+      }}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-validation.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-validation.tsx
new file mode 100644
index 000000000..e52a148d2
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/components/payment-provider-validation.tsx
@@ -0,0 +1,161 @@
+"use client";
+
+import { cn, Tooltip, TooltipContent, TooltipTrigger } from "@voidhash/ui";
+import { CheckIcon, CircleDotDashedIcon, TriangleAlertIcon } from "lucide-react";
+import { get, type FieldErrors, type FieldPath, type FieldValues } from "react-hook-form";
+
+import type { PaymentProviderDetailTab } from "./payment-provider-detail-tab-nav";
+
+export type PaymentProviderFieldValidationStatus =
+  | { state: "valid"; message: string }
+  | { state: "invalid"; message: string }
+  | { state: "optional"; message: string };
+
+export function PaymentProviderFieldValidationIndicator({
+  status,
+}: {
+  status: PaymentProviderFieldValidationStatus;
+}) {
+  if (status.state === "optional") {
+    return null;
+  }
+
+  return <PaymentProviderValidationStatusIndicator status={status} />;
+}
+
+export function PaymentProviderValidationStatusIndicator({
+  status,
+}: {
+  status: PaymentProviderFieldValidationStatus;
+}) {
+  const className = cn(
+    "flex size-5 shrink-0 items-center justify-center rounded-full border transition-colors",
+    status.state === "valid" && "border-primary bg-primary text-primary-foreground",
+    status.state === "invalid" && "border-blaze-orange-500 bg-blaze-orange-500 text-black",
+    status.state === "optional" && "border-border bg-muted text-muted-foreground",
+  );
+
+  return (
+    <Tooltip>
+      <TooltipTrigger asChild>
+        <button
+          aria-label={status.message}
+          className={className}
+          onClick={(event) => event.preventDefault()}
+          type="button"
+        >
+          {status.state === "valid" ? <CheckIcon className="size-3" strokeWidth={3} /> : null}
+          {status.state === "invalid" ? <TriangleAlertIcon className="size-3" /> : null}
+          {status.state === "optional" ? <CircleDotDashedIcon className="size-3.5" /> : null}
+        </button>
+      </TooltipTrigger>
+      <TooltipContent className="max-w-xs">{status.message}</TooltipContent>
+    </Tooltip>
+  );
+}
+
+export function getPaymentProviderFieldValidationStatus<TFieldValues extends FieldValues>({
+  disabled,
+  errors,
+  fieldLabels,
+  name,
+  optional = false,
+  value,
+}: {
+  disabled?: boolean;
+  errors: FieldErrors<TFieldValues>;
+  fieldLabels: Partial<Record<string, string>>;
+  name: FieldPath<TFieldValues>;
+  optional?: boolean;
+  value: unknown;
+}): PaymentProviderFieldValidationStatus {
+  if (disabled) {
+    return { message: "Not required", state: "optional" };
+  }
+
+  const errorMessage = getPaymentProviderFieldErrorMessage(errors, name);
+  if (errorMessage) {
+    return { message: errorMessage, state: "invalid" };
+  }
+
+  if (optional && isEmptyPaymentProviderFieldValue(value)) {
+    return { message: "Optional", state: "optional" };
+  }
+
+  if (!optional && isEmptyPaymentProviderFieldValue(value)) {
+    const fieldLabel = fieldLabels[name] ?? "This field";
+
+    return {
+      message: `${fieldLabel} is required`,
+      state: "invalid",
+    };
+  }
+
+  return { message: "Valid", state: "valid" };
+}
+
+export function getPaymentProviderTabValidationSummary<TFieldValues extends FieldValues>({
+  errors,
+  fieldLabels,
+  fields,
+  isOptionalField,
+  values,
+}: {
+  errors: FieldErrors<TFieldValues>;
+  fieldLabels: Partial<Record<string, string>>;
+  fields: readonly FieldPath<TFieldValues>[];
+  isOptionalField: (field: FieldPath<TFieldValues>, values: TFieldValues) => boolean;
+  values: TFieldValues;
+}): Pick<PaymentProviderDetailTab, "message" | "status"> {
+  if (fields.length === 0) {
+    return { message: "Optional section", status: "optional" };
+  }
+
+  const fieldStatuses = fields.map((field) => ({
+    field,
+    status: getPaymentProviderFieldValidationStatus({
+      errors,
+      fieldLabels,
+      name: field,
+      optional: isOptionalField(field, values),
+      value: get(values, field),
+    }),
+  }));
+  const requiredFields = fields.filter((field) => !isOptionalField(field, values));
+
+  if (
+    requiredFields.length > 0 &&
+    requiredFields.every((field) => isEmptyPaymentProviderFieldValue(get(values, field)))
+  ) {
+    return { message: "Section not started", status: "untouched" };
+  }
+
+  const invalidField = fieldStatuses.find(({ status }) => status.state === "invalid");
+
+  if (invalidField) {
+    return {
+      message: `${fieldLabels[invalidField.field] ?? "Field"}: ${invalidField.status.message}`,
+      status: "invalid",
+    };
+  }
+
+  if (fieldStatuses.every(({ status }) => status.state === "optional")) {
+    return { message: "Optional section", status: "optional" };
+  }
+
+  return { message: "Section complete", status: "valid" };
+}
+
+export function isEmptyPaymentProviderFieldValue(value: unknown): boolean {
+  return value === undefined || value === null || value === "";
+}
+
+function getPaymentProviderFieldErrorMessage<TFieldValues extends FieldValues>(
+  errors: FieldErrors<TFieldValues>,
+  name: FieldPath<TFieldValues>,
+): string | undefined {
+  const error = get(errors, name);
+  const message = error?.message;
+
+  return typeof message === "string" ? message : undefined;
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/logos/apple-logo.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/logos/apple-logo.tsx
new file mode 100644
index 000000000..61bedf329
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/logos/apple-logo.tsx
@@ -0,0 +1,20 @@
+import { cn } from "@voidhash/ui";
+
+export function AppleLogo({ className }: { className?: string }) {
+  return (
+    <svg
+      className={cn(className, "w-4 text-black dark:text-white")}
+      height="1000"
+      viewBox="0 0 814 1000"
+      width="814"
+      xmlns="http://www.w3.org/2000/svg"
+      xmlSpace="preserve"
+    >
+      <title>Apple Logo</title>
+      <path
+        d="M788.1 340.9c-5.8 4.5-108.2 62.2-108.2 190.5 0 148.4 130.3 200.9 134.2 202.2-.6 3.2-20.7 71.9-68.7 141.9-42.8 61.6-87.5 123.1-155.5 123.1s-85.5-39.5-164-39.5c-76.5 0-103.7 40.8-165.9 40.8s-105.6-57-155.5-127C46.7 790.7 0 663 0 541.8c0-194.4 126.4-297.5 250.8-297.5 66.1 0 121.2 43.4 162.7 43.4 39.5 0 101.1-46 176.3-46 28.5 0 130.9 2.6 198.3 99.2zm-234-181.5c31.1-36.9 53.1-88.1 53.1-139.3 0-7.1-.6-14.3-1.9-20.1-50.6 1.9-110.8 33.7-147.1 75.8-28.5 32.4-55.1 83.6-55.1 135.5 0 7.8 1.3 15.6 1.9 18.1 3.2.6 8.4 1.3 13.6 1.3 45.4 0 102.5-30.4 135.5-71.3z"
+        fill="currentColor"
+      />
+    </svg>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/logos/google-play-logo.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/logos/google-play-logo.tsx
new file mode 100644
index 000000000..0f7f6f591
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/logos/google-play-logo.tsx
@@ -0,0 +1,18 @@
+import { cn } from "@voidhash/ui";
+
+export function GooglePlayLogo({ className }: { className?: string }) {
+  return (
+    <svg
+      aria-hidden="true"
+      className={cn("h-5 w-5", className)}
+      fill="none"
+      viewBox="0 0 24 24"
+      xmlns="http://www.w3.org/2000/svg"
+    >
+      <path d="M3.6 2.7 14.3 12 3.6 21.3a2 2 0 0 1-.6-1.4V4.1c0-.6.2-1 .6-1.4Z" fill="#34A853" />
+      <path d="M14.3 12 17.5 9.2l3.3 1.9c.9.5.9 1.8 0 2.3l-3.3 1.9L14.3 12Z" fill="#FBBC04" />
+      <path d="m3.6 2.7 13.9 6.5L14.3 12 3.6 2.7Z" fill="#4285F4" />
+      <path d="M3.6 21.3 14.3 12l3.2 3.3-13.9 6Z" fill="#EA4335" />
+    </svg>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/logos/stripe-logo.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/logos/stripe-logo.tsx
new file mode 100644
index 000000000..3b7cee0b0
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/logos/stripe-logo.tsx
@@ -0,0 +1,21 @@
+export function StripeLogo({ className }: { className?: string }) {
+  return (
+    <svg className={className} fill="none" viewBox="0 0 526 526" xmlns="http://www.w3.org/2000/svg">
+      <title>Stripe Logo</title>
+      <g clipPath="url(#clip0_687_14)">
+        <rect fill="#635BFF" height="526" rx="110" width="526" />
+        <path
+          clipRule="evenodd"
+          d="M243.294 206.565C243.294 194.65 253.071 190.068 269.263 190.068C292.482 190.068 321.811 197.094 345.03 209.62V137.825C319.672 127.743 294.62 123.772 269.263 123.772C207.244 123.772 166 156.156 166 210.232C166 294.553 282.094 281.11 282.094 317.466C282.094 331.52 269.874 336.102 252.765 336.102C227.408 336.102 195.024 325.715 169.361 311.661V384.373C197.773 396.594 226.491 401.787 252.765 401.787C316.312 401.787 360 370.32 360 315.633C359.694 224.591 243.294 240.783 243.294 206.565Z"
+          fill="white"
+          fillRule="evenodd"
+        />
+      </g>
+      <defs>
+        <clipPath id="clip0_687_14">
+          <rect fill="white" height="526" width="526" />
+        </clipPath>
+      </defs>
+    </svg>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx
new file mode 100644
index 000000000..3264dab2d
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx
@@ -0,0 +1,71 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { getPaymentProviderConfigurationOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { PaymentProviderDetailRouter } from "./payment-provider-detail-router";
+
+export const PaymentProviderDetailPage = () => {
+  const params = useParams();
+  const organizationSlug = params.organizationSlug as string;
+  const projectSlug = params.projectSlug as string;
+  const paymentProviderConfigurationId = params.paymentProviderConfigurationId as string;
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  const { data: paymentProviderConfiguration, status: paymentProviderConfigurationStatus } =
+    useQuery({
+      ...getPaymentProviderConfigurationOptions({
+        id: paymentProviderConfigurationId,
+      }),
+      enabled: !!paymentProviderConfigurationId,
+    });
+
+  if (paymentProviderConfigurationStatus === "pending") {
+    return <div>Loading...</div>;
+  }
+
+  if (paymentProviderConfigurationStatus === "error" || !project || !paymentProviderConfiguration) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occured loading the payment provider configuration",
+        }}
+      />
+    );
+  }
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "Payment Providers",
+          url: `/${organizationSlug}/${projectSlug}/settings/payment-providers`,
+        },
+        {
+          title: paymentProviderConfiguration.name,
+          url: `/${organizationSlug}/${projectSlug}/settings/payment-providers/${paymentProviderConfiguration.id}`,
+        },
+      ]}
+      className="flex flex-1 flex-col p-0 pt-3 pb-0"
+    >
+      <PaymentProviderDetailRouter
+        organizationSlug={organizationSlug}
+        paymentProviderConfiguration={paymentProviderConfiguration}
+        project={project}
+        projectSlug={projectSlug}
+      />
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-router.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-router.tsx
new file mode 100644
index 000000000..3608991c3
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-router.tsx
@@ -0,0 +1,57 @@
+import type { PaymentProviderConfiguration } from "@voidhash/rpc";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+import { AppleAppStorePaymentProviderDetailPage } from "./providers/apple-app-store-payment-provider-detail-page";
+import { GooglePlayPaymentProviderDetailPage } from "./providers/google-play-payment-provider-detail-page";
+import { StripePaymentProviderDetailPage } from "./providers/stripe-payment-provider-detail-page";
+
+export function PaymentProviderDetailRouter({
+  organizationSlug,
+  projectSlug,
+  project,
+  paymentProviderConfiguration,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  project: { id: string };
+  paymentProviderConfiguration: typeof PaymentProviderConfiguration.Type;
+}) {
+  switch (paymentProviderConfiguration.providerId) {
+    case "apple-app-store":
+      return (
+        <AppleAppStorePaymentProviderDetailPage
+          organizationSlug={organizationSlug}
+          paymentProviderConfiguration={paymentProviderConfiguration}
+          project={project}
+          projectSlug={projectSlug}
+        />
+      );
+    case "google-play":
+      return (
+        <GooglePlayPaymentProviderDetailPage
+          organizationSlug={organizationSlug}
+          paymentProviderConfiguration={paymentProviderConfiguration}
+          project={project}
+          projectSlug={projectSlug}
+        />
+      );
+    case "stripe":
+      return (
+        <StripePaymentProviderDetailPage
+          organizationSlug={organizationSlug}
+          paymentProviderConfiguration={paymentProviderConfiguration}
+          project={project}
+          projectSlug={projectSlug}
+        />
+      );
+    default:
+      return (
+        <VoidhashErrorCard
+          error={{
+            code: "UNSUPPORTED_PAYMENT_PROVIDER",
+            message: "Unsupported payment provider",
+          }}
+        />
+      );
+  }
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-logo.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-logo.tsx
new file mode 100644
index 000000000..00f59d0de
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-logo.tsx
@@ -0,0 +1,27 @@
+import type { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+
+import { AppleLogo } from "./logos/apple-logo";
+import { GooglePlayLogo } from "./logos/google-play-logo";
+import { StripeLogo } from "./logos/stripe-logo";
+
+export function PaymentProviderLogo({
+  providerId,
+  className,
+}: {
+  providerId: (typeof paymentProviders)[number]["id"];
+  className?: string;
+}) {
+  if (providerId === "apple-app-store") {
+    return <AppleLogo className={className} />;
+  }
+
+  if (providerId === "stripe") {
+    return <StripeLogo className={className} />;
+  }
+
+  if (providerId === "google-play") {
+    return <GooglePlayLogo className={className} />;
+  }
+
+  return null;
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-new-store-dropdown.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-new-store-dropdown.tsx
new file mode 100644
index 000000000..f8790df28
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-new-store-dropdown.tsx
@@ -0,0 +1,90 @@
+"use client";
+import { useMutation } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { PlusIcon } from "lucide-react";
+import { toast } from "sonner";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import { createPaymentProviderConfigurationOptions } from "@/features/studio/lib/tanstack-query";
+
+export function PaymentProvidersNewStoreDropdown({
+  configuredProviderIds = [],
+  project,
+  organizationSlug,
+  projectSlug,
+}: {
+  configuredProviderIds?: readonly string[];
+  project: { id: string };
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  const navigate = useNavigate();
+  const configuredProviderIdSet = new Set(configuredProviderIds);
+
+  const { mutate: createPaymentProviderConfiguration, status } = useMutation({
+    ...createPaymentProviderConfigurationOptions(),
+    onSuccess: (data) => {
+      toast.success("Payment provider configuration created successfully");
+      navigate({
+        params: {
+          organizationSlug,
+          paymentProviderConfigurationId: data.id,
+          projectSlug,
+        },
+        to: "/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId",
+      });
+    },
+    onError: () => {
+      toast.error("Failed to create payment provider configuration");
+    },
+  });
+
+  const handleCreatePaymentProviderConfiguration = (providerId: string) => {
+    createPaymentProviderConfiguration({
+      projectId: project.id,
+      providerId,
+    });
+  };
+
+  return (
+    <DropdownMenu>
+      <DropdownMenuTrigger asChild>
+        <Button size="sm">
+          <PlusIcon className="h-4 w-4" />
+          Add store
+        </Button>
+      </DropdownMenuTrigger>
+      <DropdownMenuContent align="end" className="w-48">
+        {paymentProviders
+          .filter((p) => p.type === "native")
+          .map((p) => {
+            const isConfigured = configuredProviderIdSet.has(p.id);
+
+            return (
+              <DropdownMenuItem
+                className="cursor-pointer"
+                disabled={status === "pending" || isConfigured}
+                key={p.id}
+                onClick={() => {
+                  if (!isConfigured) {
+                    handleCreatePaymentProviderConfiguration(p.id);
+                  }
+                }}
+              >
+                {p.title}
+                {isConfigured ? (
+                  <span className="ml-auto text-muted-foreground text-xs">Added</span>
+                ) : null}
+              </DropdownMenuItem>
+            );
+          })}
+      </DropdownMenuContent>
+    </DropdownMenu>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page-skeleton.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page-skeleton.tsx
new file mode 100644
index 000000000..a9b920725
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page-skeleton.tsx
@@ -0,0 +1,23 @@
+import { Skeleton } from "@voidhash/ui";
+import { SettingsCard, SettingsPage, SettingsSection } from "@/features/studio/settings";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+
+export function PaymentProvidersPageSkeleton() {
+  return (
+    <SettingsPage title="Payment Providers">
+      <SettingsSection title="Stores">
+        <SettingsCard>
+          {paymentProviders.slice(0, 2).map((paymentProvider) => (
+            <div
+              className="flex items-center gap-3 border-border/60 border-t px-5 py-3.5 first:border-t-0"
+              key={paymentProvider.id}
+            >
+              <Skeleton className="h-8 w-8 rounded-md" />
+              <Skeleton className="h-4 w-48" />
+            </div>
+          ))}
+        </SettingsCard>
+      </SettingsSection>
+    </SettingsPage>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx
new file mode 100644
index 000000000..6e9a6c0cd
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx
@@ -0,0 +1,232 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import { Link } from "@tanstack/react-router";
+import { Badge, Card, CardHeader, CardTitle, cn } from "@voidhash/ui";
+import { ChevronRightIcon } from "lucide-react";
+import { useParams } from "next/navigation";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import { listPaymentProviderConfigurationsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+import { PaymentProviderLogo } from "./payment-provider-logo";
+import { PaymentProvidersNewStoreDropdown } from "./payment-providers-new-store-dropdown";
+import { SetupPaymentProviderButton } from "./setup-payment-provider-button";
+
+export const PaymentProvidersPage = () => {
+  const params = useParams();
+  const organizationSlug = params.organizationSlug as string;
+  const projectSlug = params.projectSlug as string;
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  const { data: paymentProviderConfigurations, status: paymentProviderConfigurationsStatus } =
+    useQuery({
+      ...listPaymentProviderConfigurationsOptions({
+        projectId: project?.id ?? "",
+      }),
+      enabled: !!project?.id,
+    });
+
+  if (paymentProviderConfigurationsStatus === "pending") {
+    return <div>Loading...</div>;
+  }
+
+  if (paymentProviderConfigurationsStatus === "error" || !project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occured loading the payment providers",
+        }}
+      />
+    );
+  }
+
+  const applicationsWithConfiguration = (paymentProviderConfigurations ?? [])
+    .map((p) => {
+      const paymentProvider = paymentProviders.find((pp) => pp.id === p.providerId);
+      if (!paymentProvider || paymentProvider.type !== "native") {
+        return null;
+      }
+      return {
+        ...p,
+        provider: paymentProvider,
+      };
+    })
+    .filter(Boolean);
+  const configuredStoreProviderIds = applicationsWithConfiguration.flatMap((configuration) =>
+    configuration ? [configuration.provider.id] : [],
+  );
+
+  const paymentProvidersWithConfigurations = paymentProviders
+    .filter((p) => p.type === "web-checkout")
+    .map((paymentProvider) => {
+      const paymentProvidersConfiguration = paymentProviderConfigurations?.find(
+        (p) => p.providerId === paymentProvider.id,
+      );
+      return {
+        ...paymentProvidersConfiguration,
+        provider: paymentProvider,
+      };
+    });
+
+  return (
+    <Page>
+      {/* Key is used to reload the default form data when the organization slug changes */}
+      <div className="mx-auto max-w-4xl">
+        <h1 className="font-normal text-3xl tracking-right">Payment Providers</h1>
+        <p className="mt-3 text-muted-foreground">Configure your payment providers.</p>
+
+        <div className="mt-8">
+          <Card className={cn("grid gap-0 divide-y p-0")}>
+            <CardHeader
+              className={cn(
+                "gap-0 pr-3",
+                applicationsWithConfiguration.length > 0 ? "py-3" : "py-6",
+              )}
+            >
+              <div className="flex items-center justify-between">
+                <CardTitle>Stores</CardTitle>
+                {applicationsWithConfiguration.length > 0 && (
+                  <PaymentProvidersNewStoreDropdown
+                    configuredProviderIds={configuredStoreProviderIds}
+                    organizationSlug={organizationSlug}
+                    project={project}
+                    projectSlug={projectSlug}
+                  />
+                )}
+              </div>
+            </CardHeader>
+            {applicationsWithConfiguration.length === 0 && (
+              <div className="flex h-full flex-col items-center justify-center py-6">
+                <div className="text-muted-foreground">
+                  You haven&apos;t configured any stores for this project.
+                </div>
+                <div className="mt-4">
+                  <PaymentProvidersNewStoreDropdown
+                    configuredProviderIds={configuredStoreProviderIds}
+                    organizationSlug={organizationSlug}
+                    project={project}
+                    projectSlug={projectSlug}
+                  />
+                </div>
+              </div>
+            )}
+
+            {applicationsWithConfiguration?.map((paymentProviderConfiguration) =>
+              paymentProviderConfiguration?.provider ? (
+                <div
+                  className="group relative isolate px-6 py-4 hover:bg-accent/30"
+                  key={paymentProviderConfiguration.id}
+                >
+                  <Link
+                    className="absolute inset-0 h-full w-full"
+                    params={{
+                      organizationSlug,
+                      paymentProviderConfigurationId: paymentProviderConfiguration.id,
+                      projectSlug,
+                    }}
+                    to="/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId"
+                  />
+
+                  <div className="flex flex-row items-center justify-between">
+                    <div className="flex flex-1 items-center gap-4">
+                      <div className="flex h-8 w-8 items-center justify-center">
+                        <PaymentProviderLogo
+                          className="h-full w-full"
+                          providerId={paymentProviderConfiguration.provider.id}
+                        />
+                      </div>
+                      <div className="flex flex-col">
+                        <p>{paymentProviderConfiguration.name}</p>
+                      </div>
+                    </div>
+                    <div className="flex items-center gap-2">
+                      {paymentProviderConfiguration.enabled && <Badge>Enabled</Badge>}
+                      <ChevronRightIcon className="h-4 w-4 text-muted-foreground" />
+                    </div>
+                  </div>
+                </div>
+              ) : null,
+            )}
+          </Card>
+        </div>
+
+        <div className="mt-8">
+          <Card className={cn("grid gap-0 divide-y p-0")}>
+            <CardHeader className="gap-0 py-6 pr-3">
+              <div className="flex items-center justify-between">
+                <CardTitle>Payment providers</CardTitle>
+              </div>
+            </CardHeader>
+            {paymentProvidersWithConfigurations?.map((paymentProviderConfiguration) => (
+              <div
+                className="group relative isolate px-6 py-4 hover:bg-accent/30"
+                key={paymentProviderConfiguration.id ?? paymentProviderConfiguration.provider.id}
+              >
+                {paymentProviderConfiguration.id && (
+                  <Link
+                    className="absolute inset-0 h-full w-full"
+                    params={{
+                      organizationSlug,
+                      paymentProviderConfigurationId: paymentProviderConfiguration.id,
+                      projectSlug,
+                    }}
+                    to="/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId"
+                  />
+                )}
+
+                <div className="flex flex-row items-center justify-between">
+                  <div className="flex flex-1 items-center gap-4">
+                    <div className="flex h-8 w-8 items-center justify-center">
+                      <PaymentProviderLogo
+                        className="h-full w-full"
+                        providerId={paymentProviderConfiguration.provider.id}
+                      />
+                    </div>
+                    <div className="flex flex-col">
+                      <p>{paymentProviderConfiguration.provider.title}</p>
+                    </div>
+                  </div>
+
+                  {/* If configuration exists, show the enabled/disabled badge and the chevron right */}
+                  {paymentProviderConfiguration.id && (
+                    <div className="flex items-center gap-2">
+                      {paymentProviderConfiguration.enabled ? (
+                        <Badge>Enabled</Badge>
+                      ) : (
+                        <Badge variant="outline">Disabled</Badge>
+                      )}
+                      <ChevronRightIcon className="h-4 w-4 text-muted-foreground" />
+                    </div>
+                  )}
+
+                  {/* If configuration does not exist, show the add button */}
+                  {!paymentProviderConfiguration.id && (
+                    <div className="flex items-center gap-2">
+                      <SetupPaymentProviderButton
+                        organizationSlug={organizationSlug}
+                        projectId={project.id}
+                        projectSlug={projectSlug}
+                        providerId={paymentProviderConfiguration.provider.id}
+                      />
+                    </div>
+                  )}
+                </div>
+              </div>
+            ))}
+          </Card>
+        </div>
+      </div>
+    </Page>
+  );
+};
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-config.ts b/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-config.ts
new file mode 100644
index 000000000..dd8eecb6a
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-config.ts
@@ -0,0 +1,185 @@
+import {
+  appleAppStore,
+  type AppleAppStoreGlobalConfiguration,
+} from "@/features/studio/lib/payment-providers/app-store";
+
+export type AppStoreTabId =
+  | "app-details"
+  | "in-app-purchase-key"
+  | "app-store-connect-api"
+  | "apple-server-notification"
+  | "apple-small-business-program"
+  | "development"
+  | "voidhash";
+
+export interface AppleAppStorePaymentProviderDetailTab {
+  fields: (keyof AppleAppStoreGlobalConfiguration)[];
+  id: AppStoreTabId;
+  label: string;
+}
+
+type AppleAppStoreStoredConfiguration = Partial<
+  AppleAppStoreGlobalConfiguration & {
+    issuerId: string;
+    keyId: string;
+    privateKey: string;
+  }
+>;
+
+export const APPLE_APP_STORE_TABS: AppleAppStorePaymentProviderDetailTab[] = [
+  {
+    fields: ["bundleId", "appAppleId"],
+    id: "app-details",
+    label: "App Details",
+  },
+  {
+    fields: ["inAppPurchaseKeyIssuerId", "inAppPurchaseKeyId", "inAppPurchasePrivateKey"],
+    id: "in-app-purchase-key",
+    label: "In-app purchase key",
+  },
+  {
+    fields: [
+      "appStoreConnectApiIssuerId",
+      "appStoreConnectApiKeyId",
+      "appStoreConnectApiVendorNumber",
+    ],
+    id: "app-store-connect-api",
+    label: "App Store Connect API",
+  },
+  {
+    fields: ["appleServerNotificationForwardingUrl"],
+    id: "apple-server-notification",
+    label: "Apple Server notification",
+  },
+  {
+    fields: ["appleSmallBusinessProgramStartDate"],
+    id: "apple-small-business-program",
+    label: "Apple Small Business Program",
+  },
+  {
+    fields: ["storeKitSubscriptionOfferKey", "storeKitTestingFrameworkCertificate"],
+    id: "development",
+    label: "Development",
+  },
+  {
+    fields: [],
+    id: "voidhash",
+    label: "Configuration",
+  },
+];
+
+export const APPLE_APP_STORE_FIELD_LABELS: Record<keyof AppleAppStoreGlobalConfiguration, string> =
+  {
+    appAppleId: "App Apple ID",
+    appStoreConnectApiIssuerId: "Issuer ID",
+    appStoreConnectApiKeyId: "Key ID",
+    appStoreConnectApiVendorNumber: "Vendor Number",
+    appleServerNotificationForwardingUrl: "Apple Server Notification Forwarding URL",
+    appleSmallBusinessProgramEndDate: "End date",
+    appleSmallBusinessProgramHasEndDate: "End date enabled",
+    appleSmallBusinessProgramStartDate: "Start date",
+    bundleId: "App Bundle ID",
+    inAppPurchaseKeyId: "Key ID",
+    inAppPurchaseKeyIssuerId: "Issuer ID",
+    inAppPurchasePrivateKey: "P8 key file",
+    storeKitSubscriptionOfferKey: "StoreKit Subscription Offer key",
+    storeKitTestingFrameworkCertificate: "StoreKit testing framework",
+    trackNewPurchasesFromAppleServerNotifications:
+      "Track purchases from Apple Server Notifications",
+  };
+
+const APPLE_APP_STORE_GUIDE_BASE = "guides/payment-providers/apple-app-store";
+
+/**
+ * Maps Apple App Store configuration fields to the documentation guide slug
+ * shown by the "Where to find?" sheet. Fields without a guide are omitted.
+ * Slugs match the public docs path at `/docs/<slug>`.
+ */
+export const APPLE_APP_STORE_FIELD_GUIDES: Partial<
+  Record<keyof AppleAppStoreGlobalConfiguration, string>
+> = {
+  appAppleId: `${APPLE_APP_STORE_GUIDE_BASE}/app-apple-id`,
+  appStoreConnectApiIssuerId: `${APPLE_APP_STORE_GUIDE_BASE}/app-store-connect-api`,
+  appStoreConnectApiKeyId: `${APPLE_APP_STORE_GUIDE_BASE}/app-store-connect-api`,
+  appStoreConnectApiVendorNumber: `${APPLE_APP_STORE_GUIDE_BASE}/app-store-connect-api`,
+  appleServerNotificationForwardingUrl: `${APPLE_APP_STORE_GUIDE_BASE}/apple-server-notifications`,
+  appleSmallBusinessProgramEndDate: `${APPLE_APP_STORE_GUIDE_BASE}/apple-small-business-program`,
+  appleSmallBusinessProgramStartDate: `${APPLE_APP_STORE_GUIDE_BASE}/apple-small-business-program`,
+  bundleId: `${APPLE_APP_STORE_GUIDE_BASE}/bundle-id`,
+  inAppPurchaseKeyId: `${APPLE_APP_STORE_GUIDE_BASE}/in-app-purchase-key`,
+  inAppPurchaseKeyIssuerId: `${APPLE_APP_STORE_GUIDE_BASE}/in-app-purchase-key`,
+  inAppPurchasePrivateKey: `${APPLE_APP_STORE_GUIDE_BASE}/in-app-purchase-key`,
+  storeKitSubscriptionOfferKey: `${APPLE_APP_STORE_GUIDE_BASE}/storekit-subscription-offer-key`,
+  storeKitTestingFrameworkCertificate: `${APPLE_APP_STORE_GUIDE_BASE}/storekit-testing-certificate`,
+};
+
+/**
+ * Builds the Apple App Store Server Notifications endpoint URL from an API origin or `/api` base.
+ */
+export function getAppleServerToServerNotificationUrl({
+  apiUrl,
+  paymentProviderConfigurationId,
+}: {
+  apiUrl: string;
+  paymentProviderConfigurationId: string;
+}): string {
+  const normalizedApiUrl = apiUrl.replace(/\/+$/, "");
+  const normalizedApiBaseUrl = normalizedApiUrl.endsWith("/api")
+    ? normalizedApiUrl
+    : `${normalizedApiUrl}/api`;
+  return `${normalizedApiBaseUrl}/v1/webhook-endpoints/apple-server-to-server/${paymentProviderConfigurationId}`;
+}
+
+const OPTIONAL_FIELDS = new Set<keyof AppleAppStoreGlobalConfiguration>([
+  "appleServerNotificationForwardingUrl",
+  "appleSmallBusinessProgramStartDate",
+  "appleSmallBusinessProgramHasEndDate",
+  "appleSmallBusinessProgramEndDate",
+  "storeKitSubscriptionOfferKey",
+  "storeKitTestingFrameworkCertificate",
+  "trackNewPurchasesFromAppleServerNotifications",
+]);
+
+export function isAppleAppStoreOptionalField(
+  field: keyof AppleAppStoreGlobalConfiguration,
+  _values?: AppleAppStoreGlobalConfiguration,
+): boolean {
+  return OPTIONAL_FIELDS.has(field);
+}
+
+export function getAppleAppStoreInitialConfiguration(
+  configuration: AppleAppStoreStoredConfiguration | null | undefined,
+): AppleAppStoreGlobalConfiguration {
+  const storedConfiguration = configuration ?? {};
+
+  return {
+    ...appleAppStore.defaultGlobalConfiguration,
+    ...getLegacyConfigurationValues(storedConfiguration),
+    ...getSmallBusinessProgramConfigurationValues(storedConfiguration),
+    ...storedConfiguration,
+  };
+}
+
+function getLegacyConfigurationValues(
+  configuration: AppleAppStoreStoredConfiguration,
+): Partial<AppleAppStoreGlobalConfiguration> {
+  return {
+    appStoreConnectApiIssuerId: configuration.issuerId,
+    appStoreConnectApiKeyId: configuration.keyId,
+    inAppPurchaseKeyIssuerId: configuration.issuerId,
+    inAppPurchaseKeyId: configuration.keyId,
+    inAppPurchasePrivateKey: configuration.privateKey,
+  };
+}
+
+function getSmallBusinessProgramConfigurationValues(
+  configuration: Partial<AppleAppStoreGlobalConfiguration>,
+): Partial<AppleAppStoreGlobalConfiguration> {
+  if (typeof configuration.appleSmallBusinessProgramHasEndDate === "boolean") {
+    return {};
+  }
+
+  return {
+    appleSmallBusinessProgramHasEndDate: Boolean(configuration.appleSmallBusinessProgramEndDate),
+  };
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-page.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-page.tsx
new file mode 100644
index 000000000..2b5774438
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-page.tsx
@@ -0,0 +1,215 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import type { PaymentProviderConfiguration } from "@voidhash/rpc";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Form,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { type BaseSyntheticEvent, useEffect, useState } from "react";
+import { useForm } from "react-hook-form";
+import {
+  appleAppStore,
+  type AppleAppStoreGlobalConfiguration,
+  appleAppStoreGlobalConfigurationSchema,
+} from "@/features/studio/lib/payment-providers/app-store";
+import { env } from "@/lib/env";
+
+import { PaymentProviderDetailActionBar } from "../components/payment-provider-detail-action-bar";
+import { PaymentProviderDetailFormLayout } from "../components/payment-provider-detail-form-layout";
+import { PaymentProviderDetailPageChrome } from "../components/payment-provider-detail-page-chrome";
+import type { PaymentProviderDetailTab } from "../components/payment-provider-detail-tab-nav";
+import { getPaymentProviderTabValidationSummary } from "../components/payment-provider-validation";
+import { AppleLogo } from "../logos/apple-logo";
+import { usePaymentProviderConfigurationMutations } from "../use-payment-provider-configuration-mutations";
+import {
+  type AppStoreTabId,
+  APPLE_APP_STORE_FIELD_LABELS,
+  APPLE_APP_STORE_TABS,
+  getAppleServerToServerNotificationUrl,
+  getAppleAppStoreInitialConfiguration,
+  isAppleAppStoreOptionalField,
+} from "./apple-app-store-payment-provider-detail-config";
+import { AppleAppStorePaymentProviderTabContent } from "./apple-app-store-payment-provider-detail-sections";
+
+export function AppleAppStorePaymentProviderDetailPage({
+  organizationSlug,
+  projectSlug,
+  paymentProviderConfiguration,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  project: { id: string };
+  paymentProviderConfiguration: typeof PaymentProviderConfiguration.Type;
+}) {
+  const [name, setName] = useState(paymentProviderConfiguration.name);
+  const [activeTab, setActiveTab] = useState<AppStoreTabId>("app-details");
+  const configuration = paymentProviderConfiguration.configuration as
+    | Partial<AppleAppStoreGlobalConfiguration>
+    | null;
+  const appleServerToServerNotificationUrl = getAppleServerToServerNotificationUrl({
+    apiUrl: env.VITE_APP_API_URL,
+    paymentProviderConfigurationId: paymentProviderConfiguration.id,
+  });
+
+  const form = useForm<AppleAppStoreGlobalConfiguration>({
+    defaultValues: getAppleAppStoreInitialConfiguration(configuration),
+    mode: "onChange",
+    reValidateMode: "onChange",
+    resolver: zodResolver(appleAppStoreGlobalConfigurationSchema),
+  });
+
+  useEffect(() => {
+    void form.trigger();
+  }, [form.trigger]);
+
+  const {
+    ConfirmationDialog,
+    deleteConfiguration,
+    isDeleting,
+    isSaving,
+    openDialog,
+    updateConfiguration,
+  } = usePaymentProviderConfigurationMutations({
+    organizationSlug,
+    projectSlug,
+    providerTitle: appleAppStore.title,
+  });
+
+  const saveConfiguration = (configuration: AppleAppStoreGlobalConfiguration, enabled: boolean) => {
+    updateConfiguration({
+      configuration,
+      enabled,
+      id: paymentProviderConfiguration.id,
+      name,
+    });
+  };
+
+  const handleSubmit = async (event?: BaseSyntheticEvent) => {
+    event?.preventDefault();
+
+    const isValid = await form.trigger();
+    const isCurrentlyEnabled = paymentProviderConfiguration.enabled;
+
+    if (!isValid && isCurrentlyEnabled) {
+      const shouldContinue = await openDialog({
+        description:
+          "The current configuration is invalid. If you continue, the payment provider will be disabled. Do you want to proceed?",
+        title: "Invalid Configuration",
+      });
+
+      if (!shouldContinue) {
+        return;
+      }
+
+      saveConfiguration(form.getValues(), false);
+      return;
+    }
+
+    if (!isValid) {
+      return;
+    }
+
+    if (!isCurrentlyEnabled) {
+      const shouldEnable = await openDialog({
+        description: "Would you like to enable this payment provider?",
+        title: "Enable Payment Provider",
+      });
+
+      saveConfiguration(form.getValues(), Boolean(shouldEnable));
+      return;
+    }
+
+    saveConfiguration(form.getValues(), true);
+  };
+
+  const values = form.watch();
+  const hasSmallBusinessProgramEndDate = form.watch("appleSmallBusinessProgramHasEndDate");
+  const { dirtyFields, errors } = form.formState;
+
+  const tabs: PaymentProviderDetailTab[] = APPLE_APP_STORE_TABS.map((tab) => ({
+    id: tab.id,
+    label: tab.label,
+    ...getPaymentProviderTabValidationSummary<AppleAppStoreGlobalConfiguration>({
+      errors,
+      fieldLabels: APPLE_APP_STORE_FIELD_LABELS,
+      fields: tab.fields,
+      isOptionalField: isAppleAppStoreOptionalField,
+      values,
+    }),
+  }));
+
+  // `name` lives in local state rather than the form, so it is counted separately.
+  const unsavedChangesCount =
+    Object.keys(dirtyFields).length + (name === paymentProviderConfiguration.name ? 0 : 1);
+
+  return (
+    <PaymentProviderDetailPageChrome
+      actions={
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button size="icon-sm" variant="outline">
+              <EllipsisVerticalIcon className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-48">
+            <DropdownMenuItem
+              className="cursor-pointer"
+              disabled={isDeleting}
+              onClick={(dropdownEvent) => {
+                dropdownEvent.preventDefault();
+                void deleteConfiguration(paymentProviderConfiguration.id);
+              }}
+              variant="destructive"
+            >
+              Delete
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      }
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      providerIcon={<AppleLogo className="size-3.5" />}
+      providerName="App Store"
+    >
+      <Form {...form}>
+        <form className="flex flex-1 flex-col" onSubmit={handleSubmit}>
+          <PaymentProviderDetailFormLayout
+            activeTabId={activeTab}
+            onTabChange={(tabId) => setActiveTab(tabId as AppStoreTabId)}
+            tabs={tabs}
+          >
+            <AppleAppStorePaymentProviderTabContent
+              activeTab={activeTab}
+              appleServerToServerNotificationUrl={appleServerToServerNotificationUrl}
+              errors={errors}
+              form={form}
+              hasSmallBusinessProgramEndDate={hasSmallBusinessProgramEndDate}
+              name={name}
+              onNameChange={setName}
+              values={values}
+            />
+          </PaymentProviderDetailFormLayout>
+
+          <PaymentProviderDetailActionBar className="pl-4">
+            <p className="min-w-[14rem] text-muted-foreground text-sm">
+              {unsavedChangesCount === 0
+                ? "No unsaved changes"
+                : `${unsavedChangesCount} unsaved change${unsavedChangesCount === 1 ? "" : "s"}`}
+            </p>
+            <Button disabled={isSaving || unsavedChangesCount === 0} size="lg" type="submit">
+              {isSaving ? "Saving..." : "Save Changes"}
+            </Button>
+          </PaymentProviderDetailActionBar>
+
+          <ConfirmationDialog />
+        </form>
+      </Form>
+    </PaymentProviderDetailPageChrome>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-sections.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-sections.tsx
new file mode 100644
index 000000000..801c5156d
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/apple-app-store-payment-provider-detail-sections.tsx
@@ -0,0 +1,425 @@
+"use client";
+
+import { FormControl, FormField, FormItem, Input, Switch } from "@voidhash/ui";
+import type { ReactNode } from "react";
+import type { FieldErrors, FieldPath, UseFormReturn } from "react-hook-form";
+import { WhereToFindGuide } from "@/features/docs/components/where-to-find-guide";
+import type { AppleAppStoreGlobalConfiguration } from "@/features/studio/lib/payment-providers/app-store";
+import { SettingsCard, SettingsRow } from "@/features/studio/settings";
+
+import { PaymentProviderCopyableValue } from "../components/payment-provider-copyable-value";
+import { PaymentProviderDetailSection } from "../components/payment-provider-detail-section";
+import {
+  PaymentProviderDateFieldRow,
+  PaymentProviderSwitchRow,
+  PaymentProviderTextFieldRow,
+} from "../components/payment-provider-form-fields";
+import { PaymentProviderTextFileField } from "../components/payment-provider-text-file-field";
+import {
+  getPaymentProviderFieldValidationStatus,
+  PaymentProviderFieldValidationIndicator,
+} from "../components/payment-provider-validation";
+import { P8PrivateKeyField } from "../components/p8-private-key-field";
+import {
+  type AppStoreTabId,
+  APPLE_APP_STORE_FIELD_GUIDES,
+  APPLE_APP_STORE_FIELD_LABELS,
+} from "./apple-app-store-payment-provider-detail-config";
+
+export function AppleAppStorePaymentProviderTabContent({
+  activeTab,
+  appleServerToServerNotificationUrl,
+  errors,
+  form,
+  hasSmallBusinessProgramEndDate,
+  name,
+  onNameChange,
+  values,
+}: {
+  activeTab: AppStoreTabId;
+  appleServerToServerNotificationUrl: string;
+  errors: FieldErrors<AppleAppStoreGlobalConfiguration>;
+  form: UseFormReturn<AppleAppStoreGlobalConfiguration>;
+  hasSmallBusinessProgramEndDate: boolean;
+  name: string;
+  onNameChange: (name: string) => void;
+  values: AppleAppStoreGlobalConfiguration;
+}) {
+  return (
+    <>
+      {activeTab === "app-details" ? (
+        <PaymentProviderDetailSection
+          description="Connect this provider to the app record in App Store Connect."
+          title="App details"
+        >
+          <SettingsCard>
+            <SettingsRow
+              control={
+                <Input
+                  className="w-full sm:w-96"
+                  onChange={(inputEvent) => onNameChange(inputEvent.target.value)}
+                  placeholder="Provider name"
+                  value={name}
+                />
+              }
+              title="Name"
+            />
+            <AppleTextFieldRow
+              control={form.control}
+              description="This should match the identifier configured in your Xcode project."
+              errors={errors}
+              name="bundleId"
+              placeholder="com.example.app"
+              title="App Bundle ID"
+            />
+            <AppleTextFieldRow
+              control={form.control}
+              description="The numeric Apple app identifier from App Store Connect."
+              errors={errors}
+              name="appAppleId"
+              placeholder="1234567890"
+              title="App Apple ID"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "in-app-purchase-key" ? (
+        <PaymentProviderDetailSection
+          description="Required for StoreKit 2 transaction ingestion and accurate country-specific pricing."
+          title="In-app purchase key configuration"
+        >
+          <SettingsCard>
+            <AppleTextFieldRow
+              control={form.control}
+              errors={errors}
+              name="inAppPurchaseKeyIssuerId"
+              placeholder="00000000-0000-0000-0000-000000000000"
+              title="Issuer ID"
+            />
+            <AppleTextFieldRow
+              control={form.control}
+              errors={errors}
+              name="inAppPurchaseKeyId"
+              placeholder="XXXXXXXXXX"
+              title="Key ID"
+            />
+            <SettingsRow
+              description="Upload the .p8 private key from App Store Connect that belongs to the key above."
+              status={
+                APPLE_APP_STORE_FIELD_GUIDES.inAppPurchasePrivateKey ? (
+                  <WhereToFindGuide
+                    fieldLabel="P8 key file"
+                    guide={APPLE_APP_STORE_FIELD_GUIDES.inAppPurchasePrivateKey}
+                  />
+                ) : undefined
+              }
+              title="P8 key file"
+            >
+              <P8PrivateKeyField
+                control={form.control}
+                name="inAppPurchasePrivateKey"
+                validationIndicator={getAppleFieldValidationIndicator({
+                  errors,
+                  name: "inAppPurchasePrivateKey",
+                  value: values.inAppPurchasePrivateKey,
+                })}
+              />
+            </SettingsRow>
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "app-store-connect-api" ? (
+        <PaymentProviderDetailSection
+          description="Add an App Store Connect API key so Voidhash can import products and keep product metadata in sync."
+          title="App Store Connect API"
+        >
+          <SettingsCard>
+            <AppleTextFieldRow
+              control={form.control}
+              errors={errors}
+              name="appStoreConnectApiIssuerId"
+              placeholder="00000000-0000-0000-0000-000000000000"
+              title="Issuer ID"
+            />
+            <AppleTextFieldRow
+              control={form.control}
+              errors={errors}
+              name="appStoreConnectApiKeyId"
+              placeholder="XXXXXXXXXX"
+              title="Key ID"
+            />
+            <AppleTextFieldRow
+              control={form.control}
+              description="Find this on the Payments and Financial Reports page in App Store Connect."
+              errors={errors}
+              name="appStoreConnectApiVendorNumber"
+              placeholder="12345678"
+              title="Vendor Number"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "apple-server-notification" ? (
+        <PaymentProviderDetailSection
+          description="Send Apple server notifications to Voidhash to process renewals, cancellations, refunds, and other subscription changes."
+          title="Apple Server Notifications"
+        >
+          <SettingsCard>
+            <SettingsRow
+              control={
+                <PaymentProviderCopyableValue
+                  copyLabel="Copy Apple Server Notification URL"
+                  copySuccessMessage="Apple Server Notification URL copied"
+                  value={appleServerToServerNotificationUrl}
+                />
+              }
+              title="Apple Server Notification URL"
+            />
+            <AppleTextFieldRow
+              control={form.control}
+              description="Optional. Voidhash can forward received Apple notification payloads to your backend."
+              errors={errors}
+              name="appleServerNotificationForwardingUrl"
+              optional
+              placeholder="https://example.com/apple-server-notifications"
+              title="Apple Server Notification Forwarding URL"
+              type="url"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "apple-small-business-program" ? (
+        <PaymentProviderDetailSection
+          description="Use these dates to apply the Apple Small Business Program commission rate."
+          title="Apple Small Business Program"
+        >
+          <SettingsCard>
+            <AppleDateFieldRow
+              control={form.control}
+              errors={errors}
+              name="appleSmallBusinessProgramStartDate"
+              optional
+              showValidationIndicator={false}
+              title="Start date"
+            />
+            <AppleDateFieldRow
+              control={form.control}
+              description="Enable this if the reduced commission rate has ended or is scheduled to end."
+              disabled={!hasSmallBusinessProgramEndDate}
+              errors={errors}
+              name="appleSmallBusinessProgramEndDate"
+              optional={!hasSmallBusinessProgramEndDate}
+              prefix={
+                <FormField
+                  control={form.control}
+                  name="appleSmallBusinessProgramHasEndDate"
+                  render={({ field }) => (
+                    <FormItem>
+                      <FormControl>
+                        <Switch
+                          checked={field.value}
+                          onCheckedChange={(checked) => {
+                            field.onChange(checked);
+                            if (!checked) {
+                              form.setValue("appleSmallBusinessProgramEndDate", "", {
+                                shouldDirty: true,
+                                shouldValidate: true,
+                              });
+                            }
+                          }}
+                        />
+                      </FormControl>
+                    </FormItem>
+                  )}
+                />
+              }
+              showValidationIndicator={false}
+              title="End date"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "development" ? (
+        <PaymentProviderDetailSection
+          description="Optional StoreKit assets for local Xcode testing and CI purchase flows."
+          title="Development"
+        >
+          <SettingsCard>
+            <SettingsRow
+              description="Use the subscription offer signing key exported from Xcode when testing offers with a StoreKit configuration file."
+              status={
+                APPLE_APP_STORE_FIELD_GUIDES.storeKitSubscriptionOfferKey ? (
+                  <WhereToFindGuide
+                    fieldLabel="StoreKit Subscription Offer key"
+                    guide={APPLE_APP_STORE_FIELD_GUIDES.storeKitSubscriptionOfferKey}
+                  />
+                ) : undefined
+              }
+              title="StoreKit Subscription Offer key"
+            >
+              <P8PrivateKeyField
+                control={form.control}
+                name="storeKitSubscriptionOfferKey"
+                successMessage="StoreKit subscription offer key was successfully attached"
+                validationIndicator={getAppleFieldValidationIndicator({
+                  errors,
+                  name: "storeKitSubscriptionOfferKey",
+                  optional: true,
+                  value: values.storeKitSubscriptionOfferKey,
+                })}
+              />
+            </SettingsRow>
+            <SettingsRow
+              description="Upload the public certificate used by StoreKit tests in Xcode."
+              status={
+                APPLE_APP_STORE_FIELD_GUIDES.storeKitTestingFrameworkCertificate ? (
+                  <WhereToFindGuide
+                    fieldLabel="StoreKit testing framework"
+                    guide={APPLE_APP_STORE_FIELD_GUIDES.storeKitTestingFrameworkCertificate}
+                  />
+                ) : undefined
+              }
+              title="StoreKit testing framework"
+            >
+              <PaymentProviderTextFileField
+                accept=".cer"
+                control={form.control}
+                maxSize={1024 * 1024}
+                name="storeKitTestingFrameworkCertificate"
+                successMessage="StoreKit testing certificate was successfully attached"
+                validationIndicator={getAppleFieldValidationIndicator({
+                  errors,
+                  name: "storeKitTestingFrameworkCertificate",
+                  optional: true,
+                  value: values.storeKitTestingFrameworkCertificate,
+                })}
+              />
+            </SettingsRow>
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "voidhash" ? (
+        <PaymentProviderDetailSection
+          description="Choose which Apple purchases Voidhash should create from server notifications."
+          title="Purchase tracking"
+        >
+          <SettingsCard>
+            <PaymentProviderSwitchRow
+              control={form.control}
+              description="This only takes effect after Apple Server Notifications are configured in App Store Connect."
+              name="trackNewPurchasesFromAppleServerNotifications"
+              title="Track purchases from Apple Server Notifications"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+    </>
+  );
+}
+
+function AppleTextFieldRow({
+  control,
+  description,
+  disabled,
+  errors,
+  name,
+  optional,
+  placeholder,
+  title,
+  type,
+}: {
+  control: UseFormReturn<AppleAppStoreGlobalConfiguration>["control"];
+  description?: ReactNode;
+  disabled?: boolean;
+  errors: FieldErrors<AppleAppStoreGlobalConfiguration>;
+  name: FieldPath<AppleAppStoreGlobalConfiguration>;
+  optional?: boolean;
+  placeholder?: string;
+  title: ReactNode;
+  type?: "text" | "url";
+}) {
+  return (
+    <PaymentProviderTextFieldRow
+      control={control}
+      description={description}
+      disabled={disabled}
+      errors={errors}
+      fieldLabels={APPLE_APP_STORE_FIELD_LABELS}
+      guide={APPLE_APP_STORE_FIELD_GUIDES[name]}
+      name={name}
+      optional={optional}
+      placeholder={placeholder}
+      title={title}
+      type={type}
+    />
+  );
+}
+
+function AppleDateFieldRow({
+  control,
+  description,
+  disabled,
+  errors,
+  name,
+  optional,
+  prefix,
+  showValidationIndicator,
+  title,
+}: {
+  control: UseFormReturn<AppleAppStoreGlobalConfiguration>["control"];
+  description?: ReactNode;
+  disabled?: boolean;
+  errors: FieldErrors<AppleAppStoreGlobalConfiguration>;
+  name: FieldPath<AppleAppStoreGlobalConfiguration>;
+  optional?: boolean;
+  prefix?: ReactNode;
+  showValidationIndicator?: boolean;
+  title: ReactNode;
+}) {
+  return (
+    <PaymentProviderDateFieldRow
+      control={control}
+      description={description}
+      disabled={disabled}
+      errors={errors}
+      fieldLabels={APPLE_APP_STORE_FIELD_LABELS}
+      guide={APPLE_APP_STORE_FIELD_GUIDES[name]}
+      name={name}
+      optional={optional}
+      prefix={prefix}
+      showValidationIndicator={showValidationIndicator}
+      title={title}
+    />
+  );
+}
+
+function getAppleFieldValidationIndicator({
+  disabled,
+  errors,
+  name,
+  optional = false,
+  value,
+}: {
+  disabled?: boolean;
+  errors: FieldErrors<AppleAppStoreGlobalConfiguration>;
+  name: FieldPath<AppleAppStoreGlobalConfiguration>;
+  optional?: boolean;
+  value: unknown;
+}) {
+  const status = getPaymentProviderFieldValidationStatus({
+    disabled,
+    errors,
+    fieldLabels: APPLE_APP_STORE_FIELD_LABELS,
+    name,
+    optional,
+    value,
+  });
+
+  return <PaymentProviderFieldValidationIndicator status={status} />;
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-config.ts b/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-config.ts
new file mode 100644
index 000000000..af19988e7
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-config.ts
@@ -0,0 +1,66 @@
+import {
+  googlePlay,
+  type GooglePlayGlobalConfiguration,
+} from "@/features/studio/lib/payment-providers/google-play";
+
+export type GooglePlayTabId =
+  | "app-details"
+  | "service-account"
+  | "real-time-developer-notifications";
+
+export interface GooglePlayPaymentProviderDetailTab {
+  fields: (keyof GooglePlayGlobalConfiguration)[];
+  id: GooglePlayTabId;
+  label: string;
+}
+
+type GooglePlayStoredConfiguration = Partial<GooglePlayGlobalConfiguration>;
+
+export const GOOGLE_PLAY_TABS: GooglePlayPaymentProviderDetailTab[] = [
+  {
+    fields: ["packageName"],
+    id: "app-details",
+    label: "App Details",
+  },
+  {
+    fields: ["serviceAccountKey"],
+    id: "service-account",
+    label: "Service account",
+  },
+  {
+    fields: [
+      "googleRealTimeDeveloperNotificationTopicName",
+      "googleRealTimeDeveloperNotificationForwardingUrl",
+    ],
+    id: "real-time-developer-notifications",
+    label: "Google developer notifications",
+  },
+];
+
+export const GOOGLE_PLAY_FIELD_LABELS: Record<keyof GooglePlayGlobalConfiguration, string> = {
+  googleRealTimeDeveloperNotificationForwardingUrl: "Raw Google events forwarding URL",
+  googleRealTimeDeveloperNotificationTopicName: "Google Play RTDN topic name",
+  packageName: "Google Play package name",
+  serviceAccountKey: "Service account key file",
+};
+
+const OPTIONAL_FIELDS = new Set<keyof GooglePlayGlobalConfiguration>([
+  "googleRealTimeDeveloperNotificationForwardingUrl",
+  "googleRealTimeDeveloperNotificationTopicName",
+]);
+
+export function isGooglePlayOptionalField(
+  field: keyof GooglePlayGlobalConfiguration,
+  _values?: GooglePlayGlobalConfiguration,
+): boolean {
+  return OPTIONAL_FIELDS.has(field);
+}
+
+export function getGooglePlayInitialConfiguration(
+  configuration: GooglePlayStoredConfiguration | null | undefined,
+): GooglePlayGlobalConfiguration {
+  return {
+    ...googlePlay.defaultGlobalConfiguration,
+    ...(configuration ?? {}),
+  };
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-page.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-page.tsx
new file mode 100644
index 000000000..4a42202d0
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-page.tsx
@@ -0,0 +1,205 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import type { PaymentProviderConfiguration } from "@voidhash/rpc";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Form,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { type BaseSyntheticEvent, useEffect, useState } from "react";
+import { useForm } from "react-hook-form";
+import {
+  googlePlay,
+  type GooglePlayGlobalConfiguration,
+  googlePlayGlobalConfigurationSchema,
+} from "@/features/studio/lib/payment-providers/google-play";
+
+import { PaymentProviderDetailActionBar } from "../components/payment-provider-detail-action-bar";
+import { PaymentProviderDetailFormLayout } from "../components/payment-provider-detail-form-layout";
+import { PaymentProviderDetailPageChrome } from "../components/payment-provider-detail-page-chrome";
+import type { PaymentProviderDetailTab } from "../components/payment-provider-detail-tab-nav";
+import { getPaymentProviderTabValidationSummary } from "../components/payment-provider-validation";
+import { GooglePlayLogo } from "../logos/google-play-logo";
+import { usePaymentProviderConfigurationMutations } from "../use-payment-provider-configuration-mutations";
+import {
+  getGooglePlayInitialConfiguration,
+  GOOGLE_PLAY_FIELD_LABELS,
+  GOOGLE_PLAY_TABS,
+  type GooglePlayTabId,
+  isGooglePlayOptionalField,
+} from "./google-play-payment-provider-detail-config";
+import { GooglePlayPaymentProviderTabContent } from "./google-play-payment-provider-detail-sections";
+
+export function GooglePlayPaymentProviderDetailPage({
+  organizationSlug,
+  paymentProviderConfiguration,
+  projectSlug,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  project: { id: string };
+  paymentProviderConfiguration: typeof PaymentProviderConfiguration.Type;
+}) {
+  const [name, setName] = useState(paymentProviderConfiguration.name);
+  const [activeTab, setActiveTab] = useState<GooglePlayTabId>("app-details");
+  const configuration = paymentProviderConfiguration.configuration as
+    | Partial<GooglePlayGlobalConfiguration>
+    | null;
+
+  const form = useForm<GooglePlayGlobalConfiguration>({
+    defaultValues: getGooglePlayInitialConfiguration(configuration),
+    mode: "onChange",
+    reValidateMode: "onChange",
+    resolver: zodResolver(googlePlayGlobalConfigurationSchema),
+  });
+
+  useEffect(() => {
+    void form.trigger();
+  }, [form.trigger]);
+
+  const {
+    ConfirmationDialog,
+    deleteConfiguration,
+    isDeleting,
+    isSaving,
+    openDialog,
+    updateConfiguration,
+  } = usePaymentProviderConfigurationMutations({
+    organizationSlug,
+    projectSlug,
+    providerTitle: googlePlay.title,
+  });
+
+  const saveConfiguration = (configuration: GooglePlayGlobalConfiguration, enabled: boolean) => {
+    updateConfiguration({
+      configuration,
+      enabled,
+      id: paymentProviderConfiguration.id,
+      name,
+    });
+  };
+
+  const handleSubmit = async (event?: BaseSyntheticEvent) => {
+    event?.preventDefault();
+
+    const isValid = await form.trigger();
+    const isCurrentlyEnabled = paymentProviderConfiguration.enabled;
+
+    if (!isValid && isCurrentlyEnabled) {
+      const shouldContinue = await openDialog({
+        description:
+          "The current configuration is invalid. If you continue, the payment provider will be disabled. Do you want to proceed?",
+        title: "Invalid Configuration",
+      });
+
+      if (!shouldContinue) {
+        return;
+      }
+
+      saveConfiguration(form.getValues(), false);
+      return;
+    }
+
+    if (!isValid) {
+      return;
+    }
+
+    if (!isCurrentlyEnabled) {
+      const shouldEnable = await openDialog({
+        description: "Would you like to enable this payment provider?",
+        title: "Enable Payment Provider",
+      });
+
+      saveConfiguration(form.getValues(), Boolean(shouldEnable));
+      return;
+    }
+
+    saveConfiguration(form.getValues(), true);
+  };
+
+  const values = form.watch();
+  const { dirtyFields, errors } = form.formState;
+
+  const tabs: PaymentProviderDetailTab[] = GOOGLE_PLAY_TABS.map((tab) => ({
+    id: tab.id,
+    label: tab.label,
+    ...getPaymentProviderTabValidationSummary<GooglePlayGlobalConfiguration>({
+      errors,
+      fieldLabels: GOOGLE_PLAY_FIELD_LABELS,
+      fields: tab.fields,
+      isOptionalField: isGooglePlayOptionalField,
+      values,
+    }),
+  }));
+
+  const unsavedChangesCount =
+    Object.keys(dirtyFields).length + (name === paymentProviderConfiguration.name ? 0 : 1);
+
+  return (
+    <PaymentProviderDetailPageChrome
+      actions={
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button size="icon-sm" variant="outline">
+              <EllipsisVerticalIcon className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-48">
+            <DropdownMenuItem
+              className="cursor-pointer"
+              disabled={isDeleting}
+              onClick={(dropdownEvent) => {
+                dropdownEvent.preventDefault();
+                void deleteConfiguration(paymentProviderConfiguration.id);
+              }}
+              variant="destructive"
+            >
+              Delete
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      }
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      providerIcon={<GooglePlayLogo className="size-3.5" />}
+      providerName="Google Play"
+    >
+      <Form {...form}>
+        <form className="flex flex-1 flex-col" onSubmit={handleSubmit}>
+          <PaymentProviderDetailFormLayout
+            activeTabId={activeTab}
+            onTabChange={(tabId) => setActiveTab(tabId as GooglePlayTabId)}
+            tabs={tabs}
+          >
+            <GooglePlayPaymentProviderTabContent
+              activeTab={activeTab}
+              errors={errors}
+              form={form}
+              name={name}
+              onNameChange={setName}
+              values={values}
+            />
+          </PaymentProviderDetailFormLayout>
+
+          <PaymentProviderDetailActionBar className="pl-4">
+            <p className="min-w-[14rem] text-muted-foreground text-sm">
+              {unsavedChangesCount === 0
+                ? "No unsaved changes"
+                : `${unsavedChangesCount} unsaved change${unsavedChangesCount === 1 ? "" : "s"}`}
+            </p>
+            <Button disabled={isSaving || unsavedChangesCount === 0} size="lg" type="submit">
+              {isSaving ? "Saving..." : "Save Changes"}
+            </Button>
+          </PaymentProviderDetailActionBar>
+
+          <ConfirmationDialog />
+        </form>
+      </Form>
+    </PaymentProviderDetailPageChrome>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-sections.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-sections.tsx
new file mode 100644
index 000000000..4b93656fd
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/google-play-payment-provider-detail-sections.tsx
@@ -0,0 +1,186 @@
+"use client";
+
+import { Input } from "@voidhash/ui";
+import type { ReactNode } from "react";
+import type { FieldErrors, FieldPath, UseFormReturn } from "react-hook-form";
+import type { GooglePlayGlobalConfiguration } from "@/features/studio/lib/payment-providers/google-play";
+import { SettingsCard, SettingsRow } from "@/features/studio/settings";
+
+import { PaymentProviderDetailSection } from "../components/payment-provider-detail-section";
+import { PaymentProviderTextFieldRow } from "../components/payment-provider-form-fields";
+import { PaymentProviderTextFileField } from "../components/payment-provider-text-file-field";
+import {
+  getPaymentProviderFieldValidationStatus,
+  PaymentProviderFieldValidationIndicator,
+} from "../components/payment-provider-validation";
+import {
+  GOOGLE_PLAY_FIELD_LABELS,
+  type GooglePlayTabId,
+} from "./google-play-payment-provider-detail-config";
+
+export function GooglePlayPaymentProviderTabContent({
+  activeTab,
+  errors,
+  form,
+  name,
+  onNameChange,
+  values,
+}: {
+  activeTab: GooglePlayTabId;
+  errors: FieldErrors<GooglePlayGlobalConfiguration>;
+  form: UseFormReturn<GooglePlayGlobalConfiguration>;
+  name: string;
+  onNameChange: (name: string) => void;
+  values: GooglePlayGlobalConfiguration;
+}) {
+  return (
+    <>
+      {activeTab === "app-details" ? (
+        <PaymentProviderDetailSection
+          description="Connect this provider to the Android app record in Google Play Console."
+          title="App details"
+        >
+          <SettingsCard>
+            <SettingsRow
+              control={
+                <Input
+                  className="w-full sm:w-96"
+                  onChange={(inputEvent) => onNameChange(inputEvent.target.value)}
+                  placeholder="Provider name"
+                  value={name}
+                />
+              }
+              title="Name"
+            />
+            <GooglePlayTextFieldRow
+              control={form.control}
+              description="This is the Android application ID from your app's Gradle configuration."
+              errors={errors}
+              name="packageName"
+              placeholder="com.example.app"
+              title="Google Play package name"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "service-account" ? (
+        <PaymentProviderDetailSection
+          description="Upload the JSON key for a Google Cloud service account with access to the Android Publisher API."
+          title="Service account credentials"
+        >
+          <SettingsCard>
+            <SettingsRow
+              description="Used by Voidhash to validate Google Play purchases server-side."
+              title="Service account key file"
+            >
+              <PaymentProviderTextFileField
+                accept=".json,application/json"
+                control={form.control}
+                maxSize={1024 * 1024}
+                name="serviceAccountKey"
+                successMessage="Service account key file was successfully attached"
+                validationIndicator={getGooglePlayFieldValidationIndicator({
+                  errors,
+                  name: "serviceAccountKey",
+                  value: values.serviceAccountKey,
+                })}
+              />
+            </SettingsRow>
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "real-time-developer-notifications" ? (
+        <PaymentProviderDetailSection
+          description="Forward raw Google Play real-time developer notifications to your backend when you need your own event copy."
+          title="Google developer notifications"
+        >
+          <SettingsCard>
+            <GooglePlayTextFieldRow
+              control={form.control}
+              description="Optional. Use this Pub/Sub topic name in Google Play Console when you manage RTDN delivery outside Voidhash."
+              errors={errors}
+              name="googleRealTimeDeveloperNotificationTopicName"
+              optional
+              placeholder="projects/example-project/topics/google-play-rtdn"
+              title="Google Play RTDN topic name"
+            />
+            <GooglePlayTextFieldRow
+              control={form.control}
+              description="Optional. Voidhash can forward received raw Google Play notification payloads to your backend."
+              errors={errors}
+              name="googleRealTimeDeveloperNotificationForwardingUrl"
+              optional
+              placeholder="https://example.com/google-raw-events"
+              title="Raw Google events forwarding URL"
+              type="url"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+    </>
+  );
+}
+
+function GooglePlayTextFieldRow({
+  control,
+  description,
+  disabled,
+  errors,
+  name,
+  optional,
+  placeholder,
+  title,
+  type,
+}: {
+  control: UseFormReturn<GooglePlayGlobalConfiguration>["control"];
+  description?: ReactNode;
+  disabled?: boolean;
+  errors: FieldErrors<GooglePlayGlobalConfiguration>;
+  name: FieldPath<GooglePlayGlobalConfiguration>;
+  optional?: boolean;
+  placeholder?: string;
+  title: ReactNode;
+  type?: "text" | "url";
+}) {
+  return (
+    <PaymentProviderTextFieldRow
+      control={control}
+      description={description}
+      disabled={disabled}
+      errors={errors}
+      fieldLabels={GOOGLE_PLAY_FIELD_LABELS}
+      name={name}
+      optional={optional}
+      placeholder={placeholder}
+      title={title}
+      type={type}
+    />
+  );
+}
+
+function getGooglePlayFieldValidationIndicator({
+  disabled,
+  errors,
+  name,
+  optional = false,
+  value,
+}: {
+  disabled?: boolean;
+  errors: FieldErrors<GooglePlayGlobalConfiguration>;
+  name: FieldPath<GooglePlayGlobalConfiguration>;
+  optional?: boolean;
+  value: unknown;
+}) {
+  const status = getPaymentProviderFieldValidationStatus({
+    disabled,
+    errors,
+    fieldLabels: GOOGLE_PLAY_FIELD_LABELS,
+    name,
+    optional,
+    value,
+  });
+
+  return <PaymentProviderFieldValidationIndicator status={status} />;
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-config.ts b/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-config.ts
new file mode 100644
index 000000000..826b991b8
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-config.ts
@@ -0,0 +1,89 @@
+import {
+  stripe,
+  type StripeGlobalConfiguration,
+} from "@/features/studio/lib/payment-providers/stripe";
+import type { FieldPath } from "react-hook-form";
+
+export type StripeTabId = "account" | "live-credentials" | "test-credentials";
+
+export interface StripePaymentProviderDetailTab {
+  fields: FieldPath<StripeGlobalConfiguration>[];
+  id: StripeTabId;
+  label: string;
+}
+
+type StripeStoredConfiguration = Partial<StripeGlobalConfiguration>;
+
+export const STRIPE_TABS: StripePaymentProviderDetailTab[] = [
+  {
+    fields: ["accountId"],
+    id: "account",
+    label: "Account",
+  },
+  {
+    fields: ["live.secretKey", "live.webhookSecret"],
+    id: "live-credentials",
+    label: "Live credentials",
+  },
+  {
+    fields: ["test.secretKey", "test.webhookSecret"],
+    id: "test-credentials",
+    label: "Test credentials",
+  },
+];
+
+export const STRIPE_FIELD_LABELS: Partial<
+  Record<FieldPath<StripeGlobalConfiguration>, string>
+> = {
+  accountId: "Stripe account ID",
+  "live.secretKey": "Live API key",
+  "live.webhookSecret": "Live webhook signing secret",
+  "test.secretKey": "Test API key",
+  "test.webhookSecret": "Test webhook signing secret",
+};
+
+/**
+ * Builds the Stripe webhook endpoint URL from an API origin or `/api` base.
+ * Stripe configures one webhook endpoint per mode (live/test), both pointing at this URL.
+ */
+export function getStripeWebhookEndpointUrl({
+  apiUrl,
+  paymentProviderConfigurationId,
+}: {
+  apiUrl: string;
+  paymentProviderConfigurationId: string;
+}): string {
+  const normalizedApiUrl = apiUrl.replace(/\/+$/, "");
+  const normalizedApiBaseUrl = normalizedApiUrl.endsWith("/api")
+    ? normalizedApiUrl
+    : `${normalizedApiUrl}/api`;
+  return `${normalizedApiBaseUrl}/v1/webhook-endpoints/stripe/${paymentProviderConfigurationId}`;
+}
+
+const OPTIONAL_FIELDS = new Set<FieldPath<StripeGlobalConfiguration>>();
+
+export function isStripeOptionalField(
+  field: FieldPath<StripeGlobalConfiguration>,
+  _values?: StripeGlobalConfiguration,
+): boolean {
+  return OPTIONAL_FIELDS.has(field);
+}
+
+export function getStripeInitialConfiguration(
+  configuration: StripeStoredConfiguration | null | undefined,
+): StripeGlobalConfiguration {
+  const defaults = stripe.defaultGlobalConfiguration;
+
+  return {
+    ...defaults,
+    ...(configuration ?? {}),
+    live: {
+      ...defaults.live,
+      ...(configuration?.live ?? {}),
+    },
+    test: {
+      ...defaults.test,
+      ...(configuration?.test ?? {}),
+    },
+  };
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-page.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-page.tsx
new file mode 100644
index 000000000..f7e092305
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-page.tsx
@@ -0,0 +1,218 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import type { PaymentProviderConfiguration } from "@voidhash/rpc";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Form,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon } from "lucide-react";
+import { type BaseSyntheticEvent, useEffect, useState } from "react";
+import { useForm } from "react-hook-form";
+import {
+  stripe,
+  type StripeGlobalConfiguration,
+  stripeGlobalConfigurationSchema,
+} from "@/features/studio/lib/payment-providers/stripe";
+import { env } from "@/lib/env";
+
+import { PaymentProviderDetailActionBar } from "../components/payment-provider-detail-action-bar";
+import { PaymentProviderDetailFormLayout } from "../components/payment-provider-detail-form-layout";
+import { PaymentProviderDetailPageChrome } from "../components/payment-provider-detail-page-chrome";
+import type { PaymentProviderDetailTab } from "../components/payment-provider-detail-tab-nav";
+import { getPaymentProviderTabValidationSummary } from "../components/payment-provider-validation";
+import { StripeLogo } from "../logos/stripe-logo";
+import { usePaymentProviderConfigurationMutations } from "../use-payment-provider-configuration-mutations";
+import {
+  getStripeInitialConfiguration,
+  getStripeWebhookEndpointUrl,
+  isStripeOptionalField,
+  STRIPE_FIELD_LABELS,
+  STRIPE_TABS,
+  type StripeTabId,
+} from "./stripe-payment-provider-detail-config";
+import { StripePaymentProviderTabContent } from "./stripe-payment-provider-detail-sections";
+
+export function StripePaymentProviderDetailPage({
+  organizationSlug,
+  paymentProviderConfiguration,
+  projectSlug,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  project: { id: string };
+  paymentProviderConfiguration: typeof PaymentProviderConfiguration.Type;
+}) {
+  const [name, setName] = useState(paymentProviderConfiguration.name);
+  const [activeTab, setActiveTab] = useState<StripeTabId>("account");
+  const configuration =
+    paymentProviderConfiguration.configuration as Partial<StripeGlobalConfiguration> | null;
+  const webhookEndpointUrl = getStripeWebhookEndpointUrl({
+    apiUrl: env.VITE_APP_API_URL,
+    paymentProviderConfigurationId: paymentProviderConfiguration.id,
+  });
+
+  const form = useForm<StripeGlobalConfiguration>({
+    defaultValues: getStripeInitialConfiguration(configuration),
+    mode: "onChange",
+    reValidateMode: "onChange",
+    resolver: zodResolver(stripeGlobalConfigurationSchema),
+  });
+
+  useEffect(() => {
+    void form.trigger();
+  }, [form.trigger]);
+
+  const {
+    ConfirmationDialog,
+    deleteConfiguration,
+    isDeleting,
+    isSaving,
+    openDialog,
+    updateConfiguration,
+  } = usePaymentProviderConfigurationMutations({
+    organizationSlug,
+    projectSlug,
+    providerTitle: stripe.title,
+  });
+
+  const saveConfiguration = (
+    configuration: StripeGlobalConfiguration,
+    enabled: boolean,
+  ) => {
+    updateConfiguration({
+      configuration,
+      enabled,
+      id: paymentProviderConfiguration.id,
+      name,
+    });
+  };
+
+  const handleSubmit = async (event?: BaseSyntheticEvent) => {
+    event?.preventDefault();
+
+    const isValid = await form.trigger();
+    const isCurrentlyEnabled = paymentProviderConfiguration.enabled;
+
+    if (!isValid && isCurrentlyEnabled) {
+      const shouldContinue = await openDialog({
+        description:
+          "The current configuration is invalid. If you continue, the payment provider will be disabled. Do you want to proceed?",
+        title: "Invalid Configuration",
+      });
+
+      if (!shouldContinue) {
+        return;
+      }
+
+      saveConfiguration(form.getValues(), false);
+      return;
+    }
+
+    if (!isValid) {
+      return;
+    }
+
+    if (!isCurrentlyEnabled) {
+      const shouldEnable = await openDialog({
+        description: "Would you like to enable this payment provider?",
+        title: "Enable Payment Provider",
+      });
+
+      saveConfiguration(form.getValues(), Boolean(shouldEnable));
+      return;
+    }
+
+    saveConfiguration(form.getValues(), true);
+  };
+
+  const values = form.watch();
+  const { dirtyFields, errors } = form.formState;
+
+  const tabs: PaymentProviderDetailTab[] = STRIPE_TABS.map((tab) => ({
+    id: tab.id,
+    label: tab.label,
+    ...getPaymentProviderTabValidationSummary<StripeGlobalConfiguration>({
+      errors,
+      fieldLabels: STRIPE_FIELD_LABELS,
+      fields: tab.fields,
+      isOptionalField: isStripeOptionalField,
+      values,
+    }),
+  }));
+
+  const unsavedChangesCount =
+    Object.keys(dirtyFields).length +
+    (name === paymentProviderConfiguration.name ? 0 : 1);
+
+  return (
+    <PaymentProviderDetailPageChrome
+      actions={
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button size="icon-sm" variant="outline">
+              <EllipsisVerticalIcon className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" className="w-48">
+            <DropdownMenuItem
+              className="cursor-pointer"
+              disabled={isDeleting}
+              onClick={(dropdownEvent) => {
+                dropdownEvent.preventDefault();
+                void deleteConfiguration(paymentProviderConfiguration.id);
+              }}
+              variant="destructive"
+            >
+              Delete
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      }
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      providerIcon={<StripeLogo className="size-3.5" />}
+      providerName="Stripe"
+    >
+      <Form {...form}>
+        <form className="flex flex-1 flex-col" onSubmit={handleSubmit}>
+          <PaymentProviderDetailFormLayout
+            activeTabId={activeTab}
+            onTabChange={(tabId) => setActiveTab(tabId as StripeTabId)}
+            tabs={tabs}
+          >
+            <StripePaymentProviderTabContent
+              activeTab={activeTab}
+              errors={errors}
+              form={form}
+              name={name}
+              onNameChange={setName}
+              webhookEndpointUrl={webhookEndpointUrl}
+            />
+          </PaymentProviderDetailFormLayout>
+
+          <PaymentProviderDetailActionBar className="pl-4">
+            <p className="min-w-[14rem] text-muted-foreground text-sm">
+              {unsavedChangesCount === 0
+                ? "No unsaved changes"
+                : `${unsavedChangesCount} unsaved change${unsavedChangesCount === 1 ? "" : "s"}`}
+            </p>
+            <Button
+              disabled={isSaving || unsavedChangesCount === 0}
+              size="lg"
+              type="submit"
+            >
+              {isSaving ? "Saving..." : "Save Changes"}
+            </Button>
+          </PaymentProviderDetailActionBar>
+
+          <ConfirmationDialog />
+        </form>
+      </Form>
+    </PaymentProviderDetailPageChrome>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-sections.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-sections.tsx
new file mode 100644
index 000000000..01b202be1
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/providers/stripe-payment-provider-detail-sections.tsx
@@ -0,0 +1,181 @@
+"use client";
+
+import { Input } from "@voidhash/ui";
+import type { ReactNode } from "react";
+import type { FieldErrors, FieldPath, UseFormReturn } from "react-hook-form";
+import type { StripeGlobalConfiguration } from "@/features/studio/lib/payment-providers/stripe";
+import { SettingsCard, SettingsRow } from "@/features/studio/settings";
+
+import { PaymentProviderCopyableValue } from "../components/payment-provider-copyable-value";
+import { PaymentProviderDetailSection } from "../components/payment-provider-detail-section";
+import { PaymentProviderTextFieldRow } from "../components/payment-provider-form-fields";
+import {
+  STRIPE_FIELD_LABELS,
+  type StripeTabId,
+} from "./stripe-payment-provider-detail-config";
+
+export function StripePaymentProviderTabContent({
+  activeTab,
+  errors,
+  form,
+  name,
+  onNameChange,
+  webhookEndpointUrl,
+}: {
+  activeTab: StripeTabId;
+  errors: FieldErrors<StripeGlobalConfiguration>;
+  form: UseFormReturn<StripeGlobalConfiguration>;
+  name: string;
+  onNameChange: (name: string) => void;
+  webhookEndpointUrl: string;
+}) {
+  return (
+    <>
+      {activeTab === "account" ? (
+        <PaymentProviderDetailSection
+          description="Connect this provider to the Stripe account whose revenue data should be consolidated."
+          title="Account"
+        >
+          <SettingsCard>
+            <SettingsRow
+              control={
+                <Input
+                  className="w-full sm:w-96"
+                  onChange={(inputEvent) =>
+                    onNameChange(inputEvent.target.value)
+                  }
+                  placeholder="Provider name"
+                  value={name}
+                />
+              }
+              title="Name"
+            />
+            <StripeTextFieldRow
+              control={form.control}
+              description="The account identifier from your Stripe Dashboard."
+              errors={errors}
+              name="accountId"
+              placeholder="acct_123456789"
+              title="Stripe account ID"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "live-credentials" ? (
+        <PaymentProviderDetailSection
+          description="Use live-mode Stripe credentials for production revenue events."
+          title="Live credentials"
+        >
+          <SettingsCard>
+            <StripeTextFieldRow
+              control={form.control}
+              description="Use a live restricted key when possible. The value is encrypted before it is stored."
+              errors={errors}
+              name="live.secretKey"
+              placeholder="rk_live_..."
+              title="Live API key"
+              type="password"
+            />
+            <StripeTextFieldRow
+              control={form.control}
+              description="The signing secret for the live-mode Stripe webhook endpoint."
+              errors={errors}
+              name="live.webhookSecret"
+              placeholder="whsec_..."
+              title="Live webhook signing secret"
+              type="password"
+            />
+            <SettingsRow
+              control={
+                <PaymentProviderCopyableValue
+                  copyLabel="Copy Stripe webhook endpoint URL"
+                  copySuccessMessage="Stripe webhook endpoint URL copied"
+                  value={webhookEndpointUrl}
+                />
+              }
+              description="Add this URL as a webhook endpoint in your live-mode Stripe Dashboard, then paste the resulting signing secret above."
+              title="Webhook endpoint URL"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+
+      {activeTab === "test-credentials" ? (
+        <PaymentProviderDetailSection
+          description="Use test-mode Stripe credentials for sandbox revenue events."
+          title="Test credentials"
+        >
+          <SettingsCard>
+            <StripeTextFieldRow
+              control={form.control}
+              description="Use a test restricted key when possible. The value is encrypted before it is stored."
+              errors={errors}
+              name="test.secretKey"
+              placeholder="rk_test_..."
+              title="Test API key"
+              type="password"
+            />
+            <StripeTextFieldRow
+              control={form.control}
+              description="The signing secret for the test-mode Stripe webhook endpoint."
+              errors={errors}
+              name="test.webhookSecret"
+              placeholder="whsec_..."
+              title="Test webhook signing secret"
+              type="password"
+            />
+            <SettingsRow
+              control={
+                <PaymentProviderCopyableValue
+                  copyLabel="Copy Stripe webhook endpoint URL"
+                  copySuccessMessage="Stripe webhook endpoint URL copied"
+                  value={webhookEndpointUrl}
+                />
+              }
+              description="Add this URL as a webhook endpoint in your test-mode Stripe Dashboard, then paste the resulting signing secret above."
+              title="Webhook endpoint URL"
+            />
+          </SettingsCard>
+        </PaymentProviderDetailSection>
+      ) : null}
+    </>
+  );
+}
+
+function StripeTextFieldRow({
+  control,
+  description,
+  disabled,
+  errors,
+  name,
+  optional,
+  placeholder,
+  title,
+  type,
+}: {
+  control: UseFormReturn<StripeGlobalConfiguration>["control"];
+  description?: ReactNode;
+  disabled?: boolean;
+  errors: FieldErrors<StripeGlobalConfiguration>;
+  name: FieldPath<StripeGlobalConfiguration>;
+  optional?: boolean;
+  placeholder?: string;
+  title: ReactNode;
+  type?: "password" | "text" | "url";
+}) {
+  return (
+    <PaymentProviderTextFieldRow
+      control={control}
+      description={description}
+      disabled={disabled}
+      errors={errors}
+      fieldLabels={STRIPE_FIELD_LABELS}
+      name={name}
+      optional={optional}
+      placeholder={placeholder}
+      title={title}
+      type={type}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/setup-payment-provider-button.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/setup-payment-provider-button.tsx
new file mode 100644
index 000000000..e742bb1c3
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/setup-payment-provider-button.tsx
@@ -0,0 +1,62 @@
+"use client";
+import { useMutation } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui";
+import { toast } from "sonner";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import { createPaymentProviderConfigurationOptions } from "@/features/studio/lib/tanstack-query";
+
+export function SetupPaymentProviderButton({
+  projectId,
+  providerId,
+  organizationSlug,
+  projectSlug,
+}: {
+  projectId: string;
+  providerId: string;
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  const navigate = useNavigate();
+  const paymentProvider = paymentProviders.find((p) => p.id === providerId);
+
+  const { mutate: createPaymentProviderConfiguration, status } = useMutation({
+    ...createPaymentProviderConfigurationOptions(),
+    onSuccess: (data) => {
+      toast.success(`${paymentProvider?.title} configuration saved successfully`);
+      if (data.id) {
+        navigate({
+          params: {
+            organizationSlug,
+            paymentProviderConfigurationId: data.id,
+            projectSlug,
+          },
+          to: "/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId",
+        });
+      }
+    },
+    onError: () => {
+      toast.error(`Failed to save ${paymentProvider?.title} configuration`);
+    },
+  });
+
+  if (!paymentProvider) {
+    return null;
+  }
+
+  return (
+    <Button
+      disabled={status === "pending"}
+      onClick={() =>
+        createPaymentProviderConfiguration({
+          projectId,
+          providerId,
+        })
+      }
+      size="sm"
+      variant="outline"
+    >
+      Set up
+    </Button>
+  );
+}
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/use-payment-provider-configuration-mutations.ts b/apps/www/src/features/studio/projects/settings/payment-providers/use-payment-provider-configuration-mutations.ts
new file mode 100644
index 000000000..0329e6263
--- /dev/null
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/use-payment-provider-configuration-mutations.ts
@@ -0,0 +1,74 @@
+"use client";
+
+import { useMutation } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import { useConfirmDialog } from "@voidhash/ui";
+import { toast } from "sonner";
+import {
+  deletePaymentProviderConfigurationOptions,
+  updatePaymentProviderConfigurationOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+export function usePaymentProviderConfigurationMutations({
+  organizationSlug,
+  projectSlug,
+  providerTitle,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+  providerTitle: string;
+}) {
+  const navigate = useNavigate();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+
+  const { mutate: updateConfiguration, status: updateStatus } = useMutation({
+    ...updatePaymentProviderConfigurationOptions(),
+    onSuccess: () => {
+      toast.success(`${providerTitle} configuration saved successfully`);
+    },
+    onError: () => {
+      toast.error(`Failed to save ${providerTitle} configuration`);
+    },
+  });
+
+  const { mutateAsync: deletePaymentProviderConfiguration, status: deleteStatus } = useMutation({
+    ...deletePaymentProviderConfigurationOptions(),
+    onSuccess: () => {
+      toast.success(`${providerTitle} configuration deleted successfully`);
+      navigate({
+        params: {
+          organizationSlug,
+          projectSlug,
+        },
+        to: "/studio/$organizationSlug/$projectSlug/settings/payment-providers",
+      });
+    },
+    onError: () => {
+      toast.error(`Failed to delete ${providerTitle} configuration`);
+    },
+  });
+
+  const deleteConfiguration = async (id: string) => {
+    const confirmed = await openDialog({
+      description: "Are you sure you want to delete this payment provider?",
+      title: "Delete payment provider",
+    });
+
+    if (!confirmed) {
+      return;
+    }
+
+    await deletePaymentProviderConfiguration({
+      paymentProviderConfigurationId: id,
+    });
+  };
+
+  return {
+    ConfirmationDialog,
+    deleteConfiguration,
+    isDeleting: deleteStatus === "pending",
+    isSaving: updateStatus === "pending",
+    openDialog,
+    updateConfiguration,
+  };
+}
diff --git a/apps/www/src/features/studio/settings/index.ts b/apps/www/src/features/studio/settings/index.ts
new file mode 100644
index 000000000..26c1da598
--- /dev/null
+++ b/apps/www/src/features/studio/settings/index.ts
@@ -0,0 +1 @@
+export * from "./settings-layout";
diff --git a/apps/www/src/features/studio/settings/settings-layout.tsx b/apps/www/src/features/studio/settings/settings-layout.tsx
new file mode 100644
index 000000000..fc9cc036b
--- /dev/null
+++ b/apps/www/src/features/studio/settings/settings-layout.tsx
@@ -0,0 +1,174 @@
+"use client";
+
+import { Card, CardContent, CardFooter, cn } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+/**
+ * Scroll container and header chrome for a settings screen. Renders a large
+ * page title plus optional description and right-aligned actions, then
+ * vertically stacks the section children with consistent gaps.
+ */
+export function SettingsPage({
+  title,
+  description,
+  actions,
+  children,
+}: {
+  title: ReactNode;
+  description?: ReactNode;
+  actions?: ReactNode;
+  children: ReactNode;
+}) {
+  return (
+    <div className="mx-auto flex w-full max-w-3xl flex-col gap-10 px-6 pt-10 pb-16 sm:px-8">
+      <header className="flex flex-col gap-3 border-border/60 border-b pb-6 sm:flex-row sm:items-start sm:justify-between">
+        <div className="flex min-w-0 flex-1 flex-col gap-1.5">
+          <h1 className="flex min-w-0 items-center font-semibold text-2xl text-foreground tracking-tight">
+            {title}
+          </h1>
+          {description ? (
+            <p className="text-[13px] text-muted-foreground leading-relaxed">{description}</p>
+          ) : null}
+        </div>
+        {actions ? <div className="flex shrink-0 items-center gap-2">{actions}</div> : null}
+      </header>
+      {children}
+    </div>
+  );
+}
+
+/**
+ * A visually grouped block of related settings. Renders a section heading
+ * with optional description and right-aligned header action above the
+ * children. Children are typically a {@link SettingsCard} or raw
+ * {@link SettingsRow}s.
+ */
+export function SettingsSection({
+  title,
+  description,
+  headerAction,
+  children,
+  className,
+}: {
+  title?: string;
+  description?: string;
+  headerAction?: ReactNode;
+  children: ReactNode;
+  className?: string;
+}) {
+  return (
+    <section className={cn("flex flex-col gap-4", className)}>
+      {title || description || headerAction ? (
+        <div className="flex flex-col gap-2 sm:flex-row sm:items-start sm:justify-between">
+          <div className="flex min-w-0 flex-1 flex-col gap-1">
+            {title ? (
+              <h2 className="font-semibold text-base text-foreground tracking-tight">{title}</h2>
+            ) : null}
+            {description ? (
+              <p className="text-[13px] text-muted-foreground/90 leading-relaxed">{description}</p>
+            ) : null}
+          </div>
+          {headerAction ? (
+            <div className="flex shrink-0 items-center gap-2">{headerAction}</div>
+          ) : null}
+        </div>
+      ) : null}
+      <div className="flex flex-col gap-3">{children}</div>
+    </section>
+  );
+}
+
+/**
+ * Card surface for settings content. Built on top of the shared {@link Card}
+ * primitive so that backgrounds, rings, and the destructive variant stay in
+ * sync with the rest of the app.
+ *
+ * Pass `footer` to render an action bar (e.g. a Save button) inside a
+ * {@link CardFooter}. When provided, children are wrapped in a
+ * {@link CardContent}; otherwise children render directly inside the
+ * {@link Card} so multi-row lists sit on the standard muted surface.
+ */
+export function SettingsCard({
+  children,
+  footer,
+  className,
+  variant = "default",
+}: {
+  children: ReactNode;
+  footer?: ReactNode;
+  className?: string;
+  variant?: "default" | "destructive";
+}) {
+  if (footer) {
+    return (
+      <Card className={className} variant={variant}>
+        <CardContent className="p-0">{children}</CardContent>
+        <CardFooter className="flex items-center justify-between gap-3 px-4 py-2.5 sm:px-5">
+          {footer}
+        </CardFooter>
+      </Card>
+    );
+  }
+  return (
+    <Card className={cn("p-0", className)} variant={variant}>
+      {children}
+    </Card>
+  );
+}
+
+/**
+ * A single row inside a {@link SettingsCard}. Lays out a title + description
+ * block on the left and an optional control on the right, switching to a
+ * stacked layout on small screens. Rows are separated by a hairline divider,
+ * with the first row having no top border.
+ */
+export function SettingsRow({
+  title,
+  description,
+  status,
+  control,
+  children,
+  className,
+  destructive = false,
+}: {
+  title?: ReactNode;
+  description?: ReactNode;
+  status?: ReactNode;
+  control?: ReactNode;
+  children?: ReactNode;
+  className?: string;
+  destructive?: boolean;
+}) {
+  return (
+    <div className={cn("border-border/60 border-t px-4 py-4 first:border-t-0 sm:px-5", className)}>
+      <div className="flex flex-col gap-3 sm:flex-row sm:items-start sm:justify-between">
+        {title || description ? (
+          <div className="min-w-0 flex-1 space-y-1 pt-1">
+            {title ? (
+              <h3
+                className={cn(
+                  "font-medium text-sm leading-snug",
+                  destructive ? "text-destructive" : "text-foreground",
+                )}
+              >
+                {title}
+              </h3>
+            ) : null}
+            {description ? (
+              <p className="text-[13px] text-muted-foreground leading-relaxed">{description}</p>
+            ) : null}
+            {status ? (
+              <div className="pt-0.5 text-[11px] text-muted-foreground/80">{status}</div>
+            ) : null}
+          </div>
+        ) : null}
+        {control ? (
+          <div className="flex w-full shrink-0 items-center gap-2 sm:w-auto sm:justify-end">
+            {control}
+          </div>
+        ) : null}
+      </div>
+      {children ? <div className="mt-4">{children}</div> : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/dashboard-sidebar/dashboard-sidebar-provider.tsx b/apps/www/src/features/studio/shell/components/dashboard-sidebar/dashboard-sidebar-provider.tsx
new file mode 100644
index 000000000..4bd4e6ef8
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/dashboard-sidebar/dashboard-sidebar-provider.tsx
@@ -0,0 +1,11 @@
+// import { SidebarProvider } from "@voidhash/ui";
+
+// export async function DashboardSidebarProvider({
+// 	children,
+// }: { children: React.ReactNode }) {
+// 	return (
+// 		<SidebarProvider defaultOpen={!isSettingsRoute} className="flex flex-col">
+// 			{children}
+// 		</SidebarProvider>
+// 	);
+// }
diff --git a/apps/www/src/features/studio/shell/components/dashboard-sidebar/index.ts b/apps/www/src/features/studio/shell/components/dashboard-sidebar/index.ts
new file mode 100644
index 000000000..1e263cf41
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/dashboard-sidebar/index.ts
@@ -0,0 +1 @@
+// export * from './dashboard-sidebar-provider';
diff --git a/apps/www/src/features/studio/shell/components/environment-filter-notification.tsx b/apps/www/src/features/studio/shell/components/environment-filter-notification.tsx
new file mode 100644
index 000000000..f2f58f270
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/environment-filter-notification.tsx
@@ -0,0 +1,22 @@
+import { cn } from "@voidhash/ui";
+
+export const EnvironmentFilterNotification = ({
+  message = "You are using test data.",
+  className,
+  type,
+}: {
+  message: string;
+  className?: string;
+  type: "testing" | "shared";
+}) => (
+  <div
+    className={cn(
+      "border- border p-4",
+      type === "shared" && "border-l-2 border-l-orange-600 bg-card text-card-foreground ",
+      type === "testing" && "border-l-2 border-l-primary bg-card text-card-foreground",
+      className,
+    )}
+  >
+    <div className="mt-1 text-sm">{message}</div>
+  </div>
+);
diff --git a/apps/www/src/features/studio/shell/components/index.ts b/apps/www/src/features/studio/shell/components/index.ts
new file mode 100644
index 000000000..c20731beb
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/index.ts
@@ -0,0 +1,2 @@
+// export * from './dashboard-sidebar';
+export * from "./nav-bar";
diff --git a/apps/www/src/features/studio/shell/components/nav-bar/index.ts b/apps/www/src/features/studio/shell/components/nav-bar/index.ts
new file mode 100644
index 000000000..c688ec077
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/nav-bar/index.ts
@@ -0,0 +1,7 @@
+export * from "./nav-bar";
+export * from "./nav-bar-logo";
+export * from "./nav-user/nav-user";
+export * from "./organization-project-switcher";
+export * from "./organization-project-switcher";
+export * from "../sidebar/organization-switcher";
+export * from "./project-switcher";
diff --git a/apps/www/src/features/studio/shell/components/nav-bar/nav-bar-logo.tsx b/apps/www/src/features/studio/shell/components/nav-bar/nav-bar-logo.tsx
new file mode 100644
index 000000000..8e6917995
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/nav-bar/nav-bar-logo.tsx
@@ -0,0 +1,33 @@
+import { Link } from "@tanstack/react-router";
+import { Logo } from "@voidhash/ui";
+
+export function NavBarLogo({
+  organizationSlug,
+  projectSlug,
+}: {
+  organizationSlug: string | null;
+  projectSlug: string | null;
+}) {
+  const homeLink = (() => {
+    if (organizationSlug && !projectSlug) {
+      return {
+        href: `/studio/${organizationSlug}`,
+      } as const;
+    }
+    if (organizationSlug && projectSlug) {
+      return {
+        href: `/studio/${organizationSlug}/${projectSlug}`,
+      } as const;
+    }
+    return {
+      href: "/studio",
+    } as const;
+  })();
+
+  return (
+    // biome-ignore lint/suspicious/noExplicitAny: Any link
+    <Link to={homeLink?.href as any}>
+      <Logo className="ml-2 h-4" color="mono" variant="symbol" />
+    </Link>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/nav-bar/nav-bar.tsx b/apps/www/src/features/studio/shell/components/nav-bar/nav-bar.tsx
new file mode 100644
index 000000000..863d6279b
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/nav-bar/nav-bar.tsx
@@ -0,0 +1,30 @@
+import { FeedbackButton } from "@/features/studio/feedback/feedback-button";
+
+import { NavUser } from "./nav-user/nav-user";
+import { ProjectSwitcher } from "./project-switcher";
+export function NavBar({
+  organizationSlug,
+  projectSlug,
+}: {
+  organizationSlug: string | null;
+  projectSlug: string | null;
+}) {
+  return (
+    <div className="fixed z-50 flex h-[var(--header-height)] w-[calc(100vw-var(--sidebar-width))] left-[var(--sidebar-width)] flex-col justify-between bg-sidebar transition-all duration-75">
+      <div className="flex items-center justify-between pr-4 h-full">
+        <div className="flex items-center gap-7">
+          {/* <NavBarLogo organizationSlug={organizationSlug} projectSlug={projectSlug} /> */}
+          {/* <SidebarTrigger className="px-4" /> */}
+
+          {/* <OrganizationSwitcher organizationSlug={organizationSlug} /> */}
+          <ProjectSwitcher organizationSlug={organizationSlug} projectSlug={projectSlug} />
+        </div>
+
+        <div className="flex items-center justify-center gap-4">
+          <FeedbackButton />
+          <NavUser />
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user-dropdown.tsx b/apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user-dropdown.tsx
new file mode 100644
index 000000000..23bf880fb
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user-dropdown.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Avatar,
+  AvatarFallback,
+  DropdownMenuContent,
+  DropdownMenuGroup,
+  DropdownMenuItem,
+  DropdownMenuLabel,
+  DropdownMenuSeparator,
+  GradientAvatar,
+  ThemeToggle,
+} from "@voidhash/ui";
+import type { User } from "@voidhash/rpc";
+import { BadgeCheck, LogOut, Settings, Settings2 } from "lucide-react";
+import { useTheme } from "next-themes";
+
+import { redirectToSignOut } from "@/features/auth/lib/workos";
+
+export function NavUserDropdown({
+  user,
+  onAccountClick,
+}: {
+  user: typeof User.Type;
+  onAccountClick: () => void;
+}) {
+  const { setTheme, theme } = useTheme();
+
+  const handleSignOut = () => {
+    redirectToSignOut("/auth/login");
+  };
+
+  return (
+    <DropdownMenuContent
+      align="end"
+      className="w-[--radix-dropdown-menu-trigger-width] min-w-56 rounded-lg"
+      side="bottom"
+      sideOffset={4}
+    >
+      <DropdownMenuLabel className="p-0 font-normal">
+        <div className="flex items-center gap-2 px-1 py-1.5 text-left text-sm">
+          <Avatar className="h-8 w-8 rounded-full">
+            <GradientAvatar
+              alt={user.name}
+              className="h-8 w-8"
+              fallback={user.id}
+              src={user.image ?? undefined}
+            />
+            <AvatarFallback className="rounded-full">CN</AvatarFallback>
+          </Avatar>
+          <div className="grid flex-1 text-left text-sm leading-tight">
+            <span className="truncate font-semibold">{user.name}</span>
+            <span className="truncate text-muted-foreground text-xs">{user.email}</span>
+          </div>
+        </div>
+      </DropdownMenuLabel>
+
+      <DropdownMenuSeparator />
+      <div className="flex w-full items-center justify-between gap-2 p-2">
+        <span className="text-muted-foreground text-sm ">Theme</span>
+        <div>
+          <ThemeToggle setTheme={setTheme} theme={theme ?? "system"} />
+        </div>
+      </div>
+      <DropdownMenuSeparator />
+      <DropdownMenuItem onSelect={onAccountClick}>
+        <Settings />
+        Settings
+      </DropdownMenuItem>
+      <DropdownMenuSeparator />
+      <DropdownMenuItem asChild>
+        <button className="w-full" onClick={handleSignOut} type="button">
+          <LogOut />
+          Log out
+        </button>
+      </DropdownMenuItem>
+    </DropdownMenuContent>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user.tsx b/apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user.tsx
new file mode 100644
index 000000000..4777fc2b1
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/nav-bar/nav-user/nav-user.tsx
@@ -0,0 +1,35 @@
+"use client";
+
+import { DropdownMenu, DropdownMenuTrigger, GradientAvatar } from "@voidhash/ui";
+import { useState } from "react";
+import { UserSettingsModal } from "@/features/studio/account/user-settings-modal";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { NavUserDropdown } from "./nav-user-dropdown";
+
+export function NavUser() {
+  const { user } = useAuth();
+  const [settingsOpen, setSettingsOpen] = useState(false);
+
+  return (
+    <>
+      <DropdownMenu>
+        <DropdownMenuTrigger asChild>
+          <button
+            className="cursor-pointer data-[state=open]:bg-sidebar-accent data-[state=open]:text-sidebar-accent-foreground"
+            type="button"
+          >
+            <GradientAvatar
+              alt={user.name}
+              className="h-6 w-6 rounded-lg"
+              fallback={user.id}
+              src={user.image ?? undefined}
+            />
+          </button>
+        </DropdownMenuTrigger>
+        <NavUserDropdown onAccountClick={() => setSettingsOpen(true)} user={user} />
+      </DropdownMenu>
+      <UserSettingsModal onOpenChange={setSettingsOpen} open={settingsOpen} />
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/nav-bar/organization-project-switcher.tsx b/apps/www/src/features/studio/shell/components/nav-bar/organization-project-switcher.tsx
new file mode 100644
index 000000000..d16f96a3c
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/nav-bar/organization-project-switcher.tsx
@@ -0,0 +1,228 @@
+"use client";
+import { Link } from "@tanstack/react-router";
+import type { User } from "@voidhash/api-contracts";
+import {
+  Button,
+  GradientAvatar,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  cn,
+} from "@voidhash/ui";
+import { Check, ChevronsUpDown, Plus } from "lucide-react";
+import * as React from "react";
+
+import { CreateOrganizationModal } from "../../../organizations/create-organization-modal";
+import { CreateProjectModal } from "../../../projects/create-project-modal";
+
+type UserType = typeof User.Type;
+
+function SwitcherPopoverTrigger() {
+  return (
+    <PopoverTrigger asChild>
+      <Button
+        className="px-1 focus-visible:ring-0 data-[state=open]:bg-sidebar-accent data-[state=open]:text-sidebar-accent-foreground   cursor-pointer"
+        size="icon"
+        variant="ghost"
+      >
+        <ChevronsUpDown />
+      </Button>
+    </PopoverTrigger>
+  );
+}
+
+function OrganizationProjectSwitcherProjects({
+  organizationId,
+  organizationSlug,
+  activeProjectId,
+  projects,
+  onProjectClick,
+}: {
+  organizationId: string;
+  organizationSlug: string;
+  activeProjectId?: string;
+  projects: UserType["projects"];
+  onProjectClick?: () => void;
+}) {
+  // Create project modal
+  const [createProjectModalOpen, setCreateProjectModalOpen] = React.useState(false);
+
+  return (
+    <div className="w-56 bg-accent/30">
+      <div className="px-2 py-1.5 text-muted-foreground text-xs">Projects</div>
+      {(projects ?? []).map((project) => (
+        <Link
+          className="flex w-full items-center gap-2 p-2 text-foreground text-sm hover:bg-accent hover:text-accent-foreground"
+          key={project.id}
+          onClick={onProjectClick}
+          params={{ organizationSlug, projectSlug: project.slug }}
+          to="/studio/$organizationSlug/$projectSlug"
+        >
+          <GradientAvatar
+            alt={project.name}
+            className="h-6 w-6 rounded-lg text-xs"
+            fallback={project.id}
+            src={project.logo ?? undefined}
+          />
+          {project.name}
+          {project.id === activeProjectId && <Check className="ml-auto h-4 w-4" />}
+        </Link>
+      ))}
+      <div className="h-px bg-border" />
+      <CreateProjectModal
+        onClose={() => setCreateProjectModalOpen(false)}
+        open={createProjectModalOpen}
+        organizationId={organizationId}
+        organizationSlug={organizationSlug}
+        trigger={
+          <button
+            className="flex w-full cursor-pointer items-center gap-2 p-2 hover:bg-accent hover:text-accent-foreground"
+            onClick={() => setCreateProjectModalOpen(true)}
+            type="button"
+          >
+            <div className="flex size-6 items-center justify-center rounded-md border bg-background">
+              <Plus className="size-4 text-muted-foreground" />
+            </div>
+            <div className="text-sm">Add project</div>
+          </button>
+        }
+      />
+    </div>
+  );
+}
+
+export function OrganizationProjectSwitcher({
+  user,
+  activeProject,
+  activeOrganization,
+}: {
+  user: {
+    projects: UserType["projects"];
+    organizations: UserType["organizations"];
+  };
+  activeProject: UserType["projects"][number] | null;
+  activeOrganization: UserType["organizations"][number];
+}) {
+  const [open, setOpen] = React.useState(false);
+  const me = user;
+
+  const organizations = me?.organizations ?? [];
+
+  // Highlight organization
+  const [highlightedOrganizationIndex, setHighlightedOrganizationIndex] = React.useState<
+    number | null
+  >(null);
+  const highlightedOrganization =
+    highlightedOrganizationIndex !== null ? organizations[highlightedOrganizationIndex] : null;
+
+  const [createOrganizationModalOpen, setCreateOrganizationModalOpen] = React.useState(false);
+
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <SwitcherPopoverTrigger />
+      <PopoverContent
+        align="end"
+        className="w-[--radix-popover-trigger-width] min-w-56 rounded-lg p-0"
+        side="bottom"
+        sideOffset={4}
+      >
+        {activeOrganization && (
+          // biome-ignore lint/a11y/noStaticElementInteractions: visual effect
+          // biome-ignore lint/nursery/noNoninteractiveElementInteractions: visual effect
+          <div
+            className="flex flex-row divide-x divide-border"
+            onMouseLeave={() => setHighlightedOrganizationIndex(null)}
+          >
+            <div className="w-64">
+              <div className="px-2 py-1.5 text-muted-foreground text-xs">Teams</div>
+              {organizations.map((organization, index) => (
+                <Link
+                  className={cn(
+                    "flex w-full items-center gap-2 p-2 text-foreground text-sm hover:bg-accent/50 hover:text-accent-foreground",
+                    organization.slug ===
+                      (highlightedOrganization?.slug ?? activeOrganization?.slug) && "bg-accent/50",
+                  )}
+                  key={organization.name}
+                  onClick={() => setOpen(false)}
+                  onMouseEnter={() => setHighlightedOrganizationIndex(index)}
+                  params={{ organizationSlug: organization.slug }}
+                  to="/studio/$organizationSlug"
+                >
+                  <GradientAvatar
+                    alt={organization.name}
+                    className="h-6 w-6 rounded-lg text-xs"
+                    fallback={organization.id}
+                    src={organization.logo ?? undefined}
+                  />
+                  {organization.name}
+                  {organization.slug === activeOrganization.slug && (
+                    <Check className="ml-auto h-4 w-4" />
+                  )}
+                </Link>
+              ))}
+              <div className="h-px bg-border" />
+              <CreateOrganizationModal
+                onClose={() => setCreateOrganizationModalOpen(false)}
+                open={createOrganizationModalOpen}
+                trigger={
+                  <button
+                    className="flex w-full cursor-pointer items-center gap-2 p-2 hover:bg-accent/50 hover:text-accent-foreground"
+                    onClick={() => setCreateOrganizationModalOpen(true)}
+                    type="button"
+                  >
+                    <div className="flex size-6 items-center justify-center rounded-md border bg-background">
+                      <Plus className="size-4 text-muted-foreground" />
+                    </div>
+                    <div className=" text-sm">Add team</div>
+                  </button>
+                }
+              />
+            </div>
+            <OrganizationProjectSwitcherProjects
+              activeProjectId={activeProject?.id}
+              onProjectClick={() => setOpen(false)}
+              organizationId={highlightedOrganization?.id ?? activeOrganization.id}
+              organizationSlug={highlightedOrganization?.slug ?? activeOrganization.slug}
+              projects={user.projects.filter(
+                (p) => p.organizationId === (highlightedOrganization?.id ?? activeOrganization.id),
+              )}
+            />
+          </div>
+        )}
+      </PopoverContent>
+    </Popover>
+  );
+}
+
+export function ProjectsPicker({
+  user,
+  activeProject,
+  activeOrganization,
+}: {
+  user: { projects: UserType["projects"] };
+  activeProject: UserType["projects"][number] | null;
+  activeOrganization: UserType["organizations"][number];
+}) {
+  const [open, setOpen] = React.useState(false);
+  const projects = user.projects.filter((p) => p.organizationId === activeOrganization.id);
+
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <SwitcherPopoverTrigger />
+      <PopoverContent
+        align="end"
+        className="w-[--radix-popover-trigger-width] min-w-56 rounded-lg p-0"
+        side="bottom"
+        sideOffset={4}
+      >
+        <OrganizationProjectSwitcherProjects
+          activeProjectId={activeProject?.id}
+          onProjectClick={() => setOpen(false)}
+          organizationId={activeOrganization.id}
+          organizationSlug={activeOrganization.slug}
+          projects={projects}
+        />
+      </PopoverContent>
+    </Popover>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/nav-bar/project-switcher.tsx b/apps/www/src/features/studio/shell/components/nav-bar/project-switcher.tsx
new file mode 100644
index 000000000..8cb5965ee
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/nav-bar/project-switcher.tsx
@@ -0,0 +1,83 @@
+"use client";
+
+import { Link, useMatches } from "@tanstack/react-router";
+import type { User } from "@voidhash/api-contracts";
+import { Button, GradientAvatar } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { ProjectsPicker } from "./organization-project-switcher";
+
+const ProjectTitle = ({ project }: { project: (typeof User.Type)["projects"][number] }) => (
+  <div className="flex items-center gap-2">
+    <GradientAvatar
+      alt={project.name}
+      className="h-6 w-6 rounded-lg text-xs"
+      fallback={project.id}
+      src={project.logo ?? undefined}
+    />
+
+    <span className="truncate text-foreground- text-sm">{project.name}</span>
+  </div>
+);
+
+const useAllProjectsPickerEnabled = () =>
+  useMatches({
+    select: (matches) => matches.some((m) => m.staticData.allProjectsPicker),
+  });
+
+export const ProjectSwitcher = ({
+  organizationSlug,
+  projectSlug,
+}: {
+  organizationSlug: string | null;
+  projectSlug: string | null;
+}) => {
+  const { user } = useAuth();
+  const allProjectsPickerEnabled = useAllProjectsPickerEnabled();
+
+  const activeProject = user.projects.find((p) => p.slug === projectSlug);
+  const activeOrganization = user.organizations.find((o) => o.slug === organizationSlug);
+  if (!activeOrganization) {
+    return null;
+  }
+
+  const picker = (
+    <ProjectsPicker
+      activeOrganization={activeOrganization}
+      activeProject={activeProject ?? null}
+      user={user}
+    />
+  );
+
+  if (activeProject) {
+    return (
+      <div className="flex items-center">
+        <Button variant="ghost" asChild className="pl-1 rounded-l-2xl">
+          <Link
+            params={{
+              organizationSlug: activeOrganization.slug,
+              projectSlug: activeProject.slug,
+            }}
+            to="/studio/$organizationSlug/$projectSlug"
+          >
+            <ProjectTitle project={activeProject} />
+          </Link>
+        </Button>
+        {picker}
+      </div>
+    );
+  }
+
+  if (allProjectsPickerEnabled) {
+    return (
+      <div className="flex items-center">
+        <div className="flex items-center gap-2 pl-3 pr-2 h-9">
+          <span className="truncate text-muted-foreground text-sm">All Projects</span>
+        </div>
+        {picker}
+      </div>
+    );
+  }
+
+  return null;
+};
diff --git a/apps/www/src/features/studio/shell/components/sidebar/organization-settings-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/organization-settings-sidebar.tsx
new file mode 100644
index 000000000..77f443d9d
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/sidebar/organization-settings-sidebar.tsx
@@ -0,0 +1,106 @@
+// "use client";
+
+// import type * as React from "react";
+
+// import { Link, useLocation, useParams } from "@tanstack/react-router";
+// import {
+//   GradientAvatar,
+//   Sidebar,
+//   SidebarContent,
+//   SidebarGroup,
+//   SidebarGroupLabel,
+//   SidebarHeader,
+//   SidebarMenu,
+//   SidebarMenuButton,
+//   SidebarMenuItem,
+// } from "@voidhash/ui";
+// import { useAuth } from "@/features/studio/components/auth-context";
+
+// import { NavMain } from "./nav-main";
+
+// const SidebarProjects = ({ organizationSlug }: { organizationSlug: string }) => {
+//   const { user } = useAuth();
+
+//   const organization = user.organizations.find((o) => o.slug === organizationSlug);
+//   const projects = organization
+//     ? user.projects.filter((p) => p.organizationId === organization.id)
+//     : [];
+
+//   return (
+//     <SidebarMenu>
+//       {projects.map((project) => (
+//         <SidebarMenuItem key={project.id}>
+//           <SidebarMenuButton asChild isActive={false} tooltip={null}>
+//             <Link
+//               params={{ organizationSlug, projectSlug: project.slug }}
+//               to="/studio/$organizationSlug/$projectSlug/settings/general"
+//             >
+//               <div className="flex items-center gap-2">
+//                 <GradientAvatar
+//                   alt={project.name}
+//                   className="h-6 w-6 rounded-lg text-xs"
+//                   fallback={project.id}
+//                   src={undefined}
+//                 />
+//                 <span className="truncate text-foreground- text-sm">{project.name}</span>
+//               </div>
+//             </Link>
+//           </SidebarMenuButton>
+//         </SidebarMenuItem>
+//       ))}
+//     </SidebarMenu>
+//   );
+// };
+
+// export function OrganizationSettingsSidebar({ ...props }: React.ComponentProps<typeof Sidebar>) {
+//   const pathname = useLocation({
+//     select: (location) => location.pathname,
+//   });
+//   const { organizationSlug } = useParams({
+//     strict: false,
+//   });
+
+//   const data = {
+//     navMain: [
+//       {
+//         items: [
+//           {
+//             isActive: () => pathname.startsWith(`/studio/${organizationSlug}/~/settings/general`),
+//             title: "General",
+//             url: `/studio/${organizationSlug}/~/settings/general`,
+//           },
+//           {
+//             isActive: () => pathname.startsWith(`/studio/${organizationSlug}/~/settings/billing`),
+//             title: "Billing",
+//             url: `/studio/${organizationSlug}/~/settings/billing`,
+//           },
+//         ],
+//         title: "Team",
+//       },
+//     ],
+//   };
+
+//   return (
+//     <Sidebar
+//       className="!top-[var(--header-height)] !h-[calc(100svh-var(--header-height))] sticky flex border-r transition-all duration-75"
+//       collapsible="none"
+//       variant="inset"
+//       {...props}
+//     >
+//       <SidebarHeader className="gap-3.5 border-b p-4">
+//         <div className="flex w-full items-center justify-between">
+//           <div className="font-medium text-base text-foreground">Team Settings</div>
+//         </div>
+//       </SidebarHeader>
+//       <SidebarContent>
+//         <NavMain groups={data.navMain} link={Link} tooltips="disabled" />
+//         <SidebarGroup>
+//           <SidebarGroupLabel>Projects</SidebarGroupLabel>
+//           <SidebarProjects
+//             organizationSlug={typeof organizationSlug === "string" ? organizationSlug : ""}
+//           />
+//         </SidebarGroup>
+//       </SidebarContent>
+//     </Sidebar>
+//   );
+// }
diff --git a/apps/www/src/features/studio/shell/components/sidebar/organization-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/organization-sidebar.tsx
new file mode 100644
index 000000000..ddb947a93
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/sidebar/organization-sidebar.tsx
@@ -0,0 +1,143 @@
+"use client";
+
+import type * as React from "react";
+
+import { Link as TanstackLink, useLocation } from "@tanstack/react-router";
+import {
+  Button,
+  GradientAvatar,
+  Sidebar,
+  SidebarGroup,
+  SidebarMenuButton,
+  SidebarMenuItem,
+} from "@voidhash/ui";
+import { Grid2X2, Plus, Settings } from "lucide-react";
+import { useState } from "react";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { useRuntimeCapabilities } from "@/features/studio/enterprise/runtime-capabilities";
+import { CreateProjectModal } from "@/features/studio/projects/create-project-modal";
+
+import { SidebarShell } from "./sidebar-shell";
+
+export function OrganizationSidebar({
+  organizationSlug,
+  collapsible = "icon",
+  ...props
+}: React.ComponentProps<typeof Sidebar> & {
+  organizationSlug: string;
+}) {
+  const pathname = useLocation({
+    select: (location) => location.pathname,
+  });
+  const { user } = useAuth();
+  const { data: capabilities } = useRuntimeCapabilities();
+  const [createOpen, setCreateOpen] = useState(false);
+
+  const activeOrganization = user.organizations.find(
+    (organization) => organization.slug === organizationSlug,
+  );
+  const projects = activeOrganization
+    ? user.projects.filter((project) => project.organizationId === activeOrganization.id)
+    : [];
+
+  const data = {
+    navMain: [
+      {
+        items: [
+          {
+            icon: Grid2X2,
+            isActive: () => pathname === `/studio/${organizationSlug}`,
+            title: "Overview",
+            url: `/studio/${organizationSlug}`,
+          },
+          {
+            icon: Settings,
+            isActive: () => pathname.startsWith(`/studio/${organizationSlug}/~/settings`),
+            title: "Settings",
+            url: `/studio/${organizationSlug}/~/settings`,
+            items: [
+              {
+                isActive: () => pathname === `/studio/${organizationSlug}/~/settings`,
+                title: "General",
+                url: `/studio/${organizationSlug}/~/settings`,
+              },
+              ...(capabilities?.enterprise.billing
+                ? [{
+                    isActive: () =>
+                      pathname.startsWith(`/studio/${organizationSlug}/~/settings/billing`),
+                    title: "Billing",
+                    url: `/studio/${organizationSlug}/~/settings/billing`,
+                  }]
+                : []),
+            ],
+          },
+        ],
+      },
+    ],
+  };
+
+  return (
+    <SidebarShell
+      className="transition-all duration-75"
+      collapsible={collapsible}
+      organizationSlug={organizationSlug}
+      groups={data.navMain}
+      {...props}
+    >
+      {activeOrganization && (
+        <SidebarGroup className="px-0 border-t border-border/60 mt-4">
+          <div className="mb-1 pl-2 flex items-center justify-between group-data-[collapsible=icon]:hidden">
+            <span className="font-medium text-[10px] text-sidebar-foreground/60 uppercase tracking-wider">
+              Projects
+            </span>
+            <CreateProjectModal
+              onClose={() => setCreateOpen(false)}
+              open={createOpen}
+              organizationId={activeOrganization.id}
+              organizationSlug={organizationSlug}
+              trigger={
+                <Button
+                  aria-label="New project"
+                  onClick={() => setCreateOpen(true)}
+                  size="icon-sm"
+                  variant="ghost"
+                >
+                  <Plus className="size-3.5" />
+                </Button>
+              }
+            />
+          </div>
+
+          {projects.length === 0 ? (
+            <SidebarMenuItem>
+              <div className="py-1.5 text-sidebar-foreground/60 text-xs">No projects yet.</div>
+            </SidebarMenuItem>
+          ) : (
+            projects.map((project) => (
+              <SidebarMenuItem key={project.id}>
+                <SidebarMenuButton
+                  asChild
+                  isActive={pathname.startsWith(`/studio/${organizationSlug}/${project.slug}`)}
+                  tooltip={project.name}
+                >
+                  <TanstackLink
+                    params={{ organizationSlug, projectSlug: project.slug }}
+                    to="/studio/$organizationSlug/$projectSlug"
+                  >
+                    <GradientAvatar
+                      alt={project.name}
+                      className="size-5 shrink-0 rounded text-[10px]"
+                      fallback={project.id}
+                      src={project.logo ?? undefined}
+                    />
+                    <span className="truncate">{project.name}</span>
+                  </TanstackLink>
+                </SidebarMenuButton>
+              </SidebarMenuItem>
+            ))
+          )}
+        </SidebarGroup>
+      )}
+    </SidebarShell>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/sidebar/organization-switcher.tsx b/apps/www/src/features/studio/shell/components/sidebar/organization-switcher.tsx
new file mode 100644
index 000000000..ac71b06ed
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/sidebar/organization-switcher.tsx
@@ -0,0 +1,39 @@
+"use client";
+
+import { Link } from "@tanstack/react-router";
+import { GradientAvatar } from "@voidhash/ui/gradient-avatar";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { OrganizationProjectSwitcher } from "../nav-bar/organization-project-switcher";
+import { Button } from "@voidhash/ui";
+
+export function OrganizationSwitcher({ organizationSlug }: { organizationSlug: string | null }) {
+  const { user } = useAuth();
+
+  const activeOrganization = user.organizations.find((o) => o.slug === organizationSlug);
+  if (!activeOrganization) {
+    return null;
+  }
+  return (
+    <div className="flex items-center justify-between w-full">
+      <Button variant="ghost" asChild className="flex-1 justify-start pl-1 rounded-l-2xl">
+        <Link params={{ organizationSlug: organizationSlug ?? "" }} to="/studio/$organizationSlug">
+          <div className="flex items-center gap-2">
+            <GradientAvatar
+              alt={activeOrganization.name}
+              className="h-6 w-6 rounded-lg text-xs"
+              fallback={activeOrganization.id}
+              src={activeOrganization.logo ?? undefined}
+            />
+            <span className="truncate text-foreground- text-sm">{activeOrganization.name}</span>
+          </div>
+        </Link>
+      </Button>
+      <OrganizationProjectSwitcher
+        activeOrganization={activeOrganization}
+        activeProject={null}
+        user={user}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/sidebar/project-settings-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/project-settings-sidebar.tsx
new file mode 100644
index 000000000..3502028c9
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/sidebar/project-settings-sidebar.tsx
@@ -0,0 +1,112 @@
+// "use client";
+// import type * as React from "react";
+
+// import { Link, useLocation } from "@tanstack/react-router";
+// import type { User } from "@voidhash/api-contracts";
+// import {
+//   GradientAvatar,
+//   Sidebar,
+//   SidebarContent,
+//   SidebarHeader,
+//   Skeleton,
+// } from "@voidhash/ui";
+// import { ChevronLeft } from "lucide-react";
+// import { useAuth } from "@/features/studio/components/auth-context";
+
+// import { NavMain } from "./nav-main";
+
+// type Organization = (typeof User.Type)["organizations"][number];
+
+// const ActiveOrganization = ({ activeOrganization }: { activeOrganization: Organization }) => (
+//   <div className="group flex items-center gap-2">
+//     <ChevronLeft className="-ml-1 absolute size-4 opacity-0 transition-opacity group-hover:opacity-100" />
+//     <GradientAvatar
+//       alt={activeOrganization.name}
+//       className="h-4 w-4 scale-100 rounded-lg text-xs transition-all group-hover:scale-0 group-hover:opacity-0"
+//       fallback={activeOrganization.id}
+//       src={undefined}
+//     />
+
+//     <span className="truncate text-foreground- text-sm">{activeOrganization.name}</span>
+//   </div>
+// );
+
+// const ActiveOrganizationSkeleton = () => (
+//   <>
+//     <Skeleton className="h-4 w-4 rounded-lg" />
+//     <Skeleton className="h-4 w-24 rounded-lg" />
+//   </>
+// );
+
+// export function ProjectSettingsSidebar({
+//   organizationSlug,
+//   projectSlug,
+//   ...props
+// }: React.ComponentProps<typeof Sidebar> & {
+//   organizationSlug: string;
+//   projectSlug: string;
+// }) {
+//   const pathname = useLocation({
+//     select: (location) => location.pathname,
+//   });
+//   const { user } = useAuth();
+
+//   const data = {
+//     navMain: [
+//       {
+//         items: [
+//           {
+//             isActive: () =>
+//               pathname.startsWith(`/studio/${organizationSlug}/${projectSlug}/settings/general`),
+//             title: "General",
+//             url: `/studio/${organizationSlug}/${projectSlug}/settings/general`,
+//           },
+//           {
+//             isActive: () =>
+//               pathname.startsWith(
+//                 `/studio/${organizationSlug}/${projectSlug}/settings/payment-providers`,
+//               ),
+//             title: "Payment Providers",
+//             url: `/studio/${organizationSlug}/${projectSlug}/settings/payment-providers`,
+//           },
+//         ],
+//         title: "Project",
+//       },
+//     ],
+//   };
+
+//   return (
+//     <Sidebar
+//       className="!top-[var(--header-height)] !h-[calc(100svh-var(--header-height))] sticky flex border-r transition-all duration-75"
+//       collapsible="none"
+//       variant="inset"
+//       {...props}
+//     >
+//       <SidebarHeader className="gap-3.5 border-b p-4">
+//         <div className="flex w-full flex-col items-start justify-start">
+//           <Link
+//             className="flex items-center gap-2 text-muted-foreground hover:text-foreground"
+//             params={{ organizationSlug }}
+//             to="/studio/$organizationSlug/~/settings/general"
+//           >
+//             {user.organizations.find((o) => o.slug === organizationSlug) &&
+//               (() => {
+//                 const activeOrganization = user.organizations.find(
+//                   (o) => o.slug === organizationSlug,
+//                 );
+//                 if (!activeOrganization) {
+//                   return <ActiveOrganizationSkeleton />;
+//                 }
+//                 return <ActiveOrganization activeOrganization={activeOrganization} />;
+//               })()}
+//           </Link>
+
+//           <div className="mt-2 w-full font-medium text-base text-foreground">Project Settings</div>
+//         </div>
+//       </SidebarHeader>
+//       <SidebarContent>
+//         <NavMain groups={data.navMain} link={Link} tooltips="disabled" />
+//       </SidebarContent>
+//     </Sidebar>
+//   );
+// }
diff --git a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
new file mode 100644
index 000000000..de97295b7
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
@@ -0,0 +1,362 @@
+"use client";
+
+import { useLocation } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Sidebar } from "@voidhash/ui";
+import {
+  ChartNoAxesColumnIncreasing,
+  FlaskConical,
+  GaugeIcon,
+  Gift,
+  ImagesIcon,
+  Logs,
+  MapPin,
+  Package2,
+  Rocket,
+  Settings,
+  Smartphone,
+  ToggleLeft,
+  Users,
+} from "lucide-react";
+import * as React from "react";
+
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+
+import { SidebarShell } from "./sidebar-shell";
+
+export function ProjectSidebar({
+  collapsible = "icon",
+  organizationSlug,
+  projectSlug,
+  ...props
+}: React.ComponentProps<typeof Sidebar> & {
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  const pathname = useLocation({
+    select: (location) => location.pathname,
+  });
+  // The VoidQL Query page is gated behind an internal feature flag (unreleased).
+  const queryEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidqlQuery.key);
+  const notificationsEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.notifications.key);
+
+  const experimentationEnabled = useInternalFeatureFlag(
+    INTERNAL_FEATURE_FLAGS.experimentation.key,
+  );
+
+  const data = {
+    navMain: [
+      {
+        items: [
+          {
+            icon: GaugeIcon,
+            isActive: () =>
+              pathname ===
+              `/studio/${organizationSlug}/${projectSlug}/overview`,
+            title: "Overview",
+            url: `/studio/${organizationSlug}/${projectSlug}/overview`,
+          },
+          {
+            icon: ChartNoAxesColumnIncreasing,
+            isActive: () =>
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/analytics`,
+              ),
+            title: "Analytics",
+            url: `/studio/${organizationSlug}/${projectSlug}/analytics/revenue`,
+            items: [
+              {
+                isActive: () =>
+                  `/studio/${organizationSlug}/${projectSlug}/analytics/revenue` ===
+                  pathname,
+                title: "Revenue",
+                url: `/studio/${organizationSlug}/${projectSlug}/analytics/revenue`,
+              },
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/analytics/subscribers`,
+                  ),
+                title: "Subscribers",
+                url: `/studio/${organizationSlug}/${projectSlug}/analytics/subscribers`,
+              },
+
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/analytics/trials`,
+                  ),
+                title: "Trials",
+                url: `/studio/${organizationSlug}/${projectSlug}/analytics/trials`,
+              },
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/analytics/churn`,
+                  ),
+                title: "Churn",
+                url: `/studio/${organizationSlug}/${projectSlug}/analytics/churn`,
+              },
+              ...(queryEnabled
+                ? [
+                    {
+                      isActive: () =>
+                        pathname.startsWith(
+                          `/studio/${organizationSlug}/${projectSlug}/analytics/query`,
+                        ),
+                      title: "Query",
+                      url: `/studio/${organizationSlug}/${projectSlug}/analytics/query`,
+                    },
+                  ]
+                : []),
+            ],
+          },
+          {
+            title: "People",
+            url: `/studio/${organizationSlug}/${projectSlug}/persons`,
+            icon: Users,
+            isActive: () =>
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/persons`,
+              ),
+          },
+          {
+            title: "Products",
+            url: `/studio/${organizationSlug}/${projectSlug}/products`,
+            icon: Package2,
+            isActive: () =>
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/products`,
+              ) ||
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/settings/perks`,
+              ),
+            items: [
+              {
+                icon: Package2,
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/products`,
+                  ),
+                title: "Products",
+                url: `/studio/${organizationSlug}/${projectSlug}/products`,
+              },
+              {
+                icon: Gift,
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/settings/perks`,
+                  ),
+                title: "Perks",
+                url: `/studio/${organizationSlug}/${projectSlug}/settings/perks`,
+              },
+            ],
+          },
+          {
+            icon: Smartphone,
+            isActive: () =>
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/paywalls`,
+              ) ||
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/settings/paywall-locations`,
+              ) ||
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/assets`,
+              ) ||
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/deploys`,
+              ),
+            title: "Paywalls",
+            url: `/studio/${organizationSlug}/${projectSlug}/paywalls`,
+            items: [
+              {
+                icon: Smartphone,
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/paywalls`,
+                  ),
+                title: "Paywalls",
+                url: `/studio/${organizationSlug}/${projectSlug}/paywalls`,
+              },
+              {
+                icon: ImagesIcon,
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/assets`,
+                  ),
+                title: "Assets",
+                url: `/studio/${organizationSlug}/${projectSlug}/assets`,
+              },
+              {
+                icon: MapPin,
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/settings/paywall-locations`,
+                  ),
+                title: "Paywall Locations",
+                url: `/studio/${organizationSlug}/${projectSlug}/settings/paywall-locations`,
+              },
+              {
+                icon: Rocket,
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/deploys`,
+                  ),
+                title: "Deploys",
+                url: `/studio/${organizationSlug}/${projectSlug}/deploys`,
+              },
+            ],
+          },
+          // The Experimentation suite (Feature Flags + A/B Tests) is gated behind
+          // the `experimentation` internal feature flag so it can be rolled out
+          // to a subset of testers from overwatch before a public launch.
+          ...(experimentationEnabled
+            ? [
+                {
+                  icon: FlaskConical,
+                  isActive: () =>
+                    pathname.startsWith(
+                      `/studio/${organizationSlug}/${projectSlug}/flags`,
+                    ) ||
+                    pathname.startsWith(
+                      `/studio/${organizationSlug}/${projectSlug}/experiments`,
+                    ),
+                  title: "Experimentation",
+                  url: `/studio/${organizationSlug}/${projectSlug}/flags`,
+                  items: [
+                    {
+                      icon: ToggleLeft,
+                      isActive: () =>
+                        pathname.startsWith(
+                          `/studio/${organizationSlug}/${projectSlug}/flags`,
+                        ),
+                      title: "Feature Flags",
+                      url: `/studio/${organizationSlug}/${projectSlug}/flags`,
+                    },
+                    {
+                      icon: FlaskConical,
+                      isActive: () =>
+                        pathname.startsWith(
+                          `/studio/${organizationSlug}/${projectSlug}/experiments`,
+                        ),
+                      title: "A/B Tests",
+                      url: `/studio/${organizationSlug}/${projectSlug}/experiments`,
+                    },
+                  ],
+                },
+              ]
+            : []),
+          {
+            icon: Logs,
+            isActive: () =>
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/activity`,
+              ),
+            title: "Activity",
+            url: `/studio/${organizationSlug}/${projectSlug}/activity/events`,
+            items: [
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/activity/events`,
+                  ),
+                title: "Analytics events",
+                url: `/studio/${organizationSlug}/${projectSlug}/activity/events`,
+              },
+              ...(notificationsEnabled
+                ? [
+                    {
+                      isActive: () =>
+                        pathname.startsWith(
+                          `/studio/${organizationSlug}/${projectSlug}/activity/sent-notifications`,
+                        ),
+                      title: "Sent notifications",
+                      url: `/studio/${organizationSlug}/${projectSlug}/activity/sent-notifications`,
+                    },
+                  ]
+                : []),
+            ],
+          },
+          {
+            icon: Settings,
+            isActive: () =>
+              pathname.startsWith(
+                `/studio/${organizationSlug}/${projectSlug}/settings`,
+              ),
+            title: "Settings",
+            url: `/studio/${organizationSlug}/${projectSlug}/settings`,
+            items: [
+              {
+                isActive: () =>
+                  pathname ===
+                  `/studio/${organizationSlug}/${projectSlug}/settings`,
+                title: "General",
+                url: `/studio/${organizationSlug}/${projectSlug}/settings`,
+              },
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/settings/api-keys`,
+                  ),
+                title: "API Keys",
+                url: `/studio/${organizationSlug}/${projectSlug}/settings/api-keys`,
+              },
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/settings/webhooks`,
+                  ),
+                title: "Webhooks",
+                url: `/studio/${organizationSlug}/${projectSlug}/settings/webhooks`,
+              },
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/settings/payment-providers`,
+                  ),
+                title: "Payment Providers",
+                url: `/studio/${organizationSlug}/${projectSlug}/settings/payment-providers`,
+              },
+              ...(notificationsEnabled
+                ? [
+                    {
+                      isActive: () =>
+                        pathname.startsWith(
+                          `/studio/${organizationSlug}/${projectSlug}/settings/notifications`,
+                        ),
+                      title: "Notifications",
+                      url: `/studio/${organizationSlug}/${projectSlug}/settings/notifications`,
+                    },
+                  ]
+                : []),
+            ],
+          },
+        ],
+      },
+    ],
+  };
+
+  return (
+    <SidebarShell
+      className="transition-all duration-75"
+      collapsible={collapsible}
+      organizationSlug={organizationSlug}
+      groups={data.navMain}
+      {...props}
+    />
+    // <Sidebar
+    //   className="h-full border-r transition-all duration-75"
+    //   collapsible={collapsible}
+    //   variant="inset"
+    //   {...props}
+    // >
+    //   <SidebarContent>
+    //     <div className="h-[var(--header-height)]">
+    //       <OrganizationSwitcher organizationSlug={organizationSlug} />
+    //     </div>
+    //     <NavMain defaultOpenNested={true} groups={data.navMain} link={Link} />
+    //   </SidebarContent>
+    // </Sidebar>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/sidebar/sidebar-shell.tsx b/apps/www/src/features/studio/shell/components/sidebar/sidebar-shell.tsx
new file mode 100644
index 000000000..b8e8db29a
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/sidebar/sidebar-shell.tsx
@@ -0,0 +1,156 @@
+import { Link as TanstackLink } from "@tanstack/react-router";
+import {
+  Sidebar,
+  SidebarContent,
+  SidebarGroup,
+  SidebarGroupLabel,
+  SidebarMenu,
+  SidebarMenuAction,
+  SidebarMenuButton,
+  SidebarMenuItem,
+} from "@voidhash/ui";
+import { ChevronLeft, ChevronRight, type LucideIcon } from "lucide-react";
+import { useEffect, useState } from "react";
+import { OrganizationSwitcher } from "./organization-switcher";
+
+export function SidebarShell({
+  groups,
+  organizationSlug,
+  children,
+  tooltips = "enabled",
+  ...props
+}: {
+  organizationSlug: string;
+  groups: {
+    title?: string;
+    items: {
+      title: string;
+      url: string;
+      icon?: LucideIcon;
+      isActive?: () => boolean;
+      items?: {
+        title: string;
+        url: string;
+        icon?: LucideIcon;
+        isActive?: () => boolean;
+      }[];
+    }[];
+  }[];
+  children?: React.ReactNode;
+  tooltips?: "enabled" | "disabled";
+} & React.ComponentProps<typeof Sidebar>) {
+  const activeParent = groups
+    .flatMap((group) => group.items)
+    .find((item) => item.isActive?.() && item.items?.length);
+
+  const [submenuOpen, setSubmenuOpen] = useState(!!activeParent);
+
+  useEffect(() => {
+    if (activeParent) {
+      setSubmenuOpen(true);
+    }
+  }, [activeParent?.title]);
+
+  const showSubmenu = submenuOpen && !!activeParent;
+
+  return (
+    <>
+      <Sidebar
+        className="h-screen transition-all duration-75"
+        collapsible={"none"}
+        variant="inset"
+        {...props}
+      >
+        <SidebarContent className="gap-0">
+          <div className="h-(--header-height)  px-1 py-2 w-full">
+            <OrganizationSwitcher organizationSlug={organizationSlug} />
+          </div>
+
+          {groups.map((group, index) => (
+            <SidebarGroup
+              key={group.title ?? `sidebar-group-${index}`}
+              className={index === 0 ? "pt-0" : undefined}
+            >
+              {group.title && <SidebarGroupLabel>{group.title}</SidebarGroupLabel>}
+              {/* Main Menu */}
+              <div className="relative">
+                <SidebarMenu
+                  className={`transition-all duration-150 ${showSubmenu ? "opacity-0 pointer-events-none -translate-x-3" : "opacity-100 translate-x-0"}`}
+                >
+                  {group.items.map((item) => (
+                    <SidebarMenuItem key={item.title}>
+                      <SidebarMenuButton
+                        asChild
+                        isActive={
+                          (!item.items?.length || item.items.length === 0) && item.isActive?.()
+                        }
+                        tooltip={tooltips === "enabled" ? item.title : null}
+                      >
+                        <TanstackLink
+                          onClick={() => {
+                            if (item.items?.length) {
+                              setSubmenuOpen(true);
+                            }
+                          }}
+                          // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+                          params={{ ...(item as any).params } as any}
+                          // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+                          to={item.url as any}
+                        >
+                          {item.icon && <item.icon />}
+                          <span>{item.title}</span>
+                        </TanstackLink>
+                      </SidebarMenuButton>
+                      {item.items?.length && (
+                        <SidebarMenuAction onClick={() => setSubmenuOpen(true)}>
+                          <ChevronRight />
+                          <span className="sr-only">Toggle</span>
+                        </SidebarMenuAction>
+                      )}
+                    </SidebarMenuItem>
+                  ))}
+                  {children}
+                </SidebarMenu>
+
+                {/* Sub Menu */}
+                <SidebarMenu
+                  className={`absolute inset-0 transition-all duration-150 ${showSubmenu ? "opacity-100 translate-x-0" : "opacity-0 pointer-events-none translate-x-10"}`}
+                >
+                  {activeParent && (
+                    <>
+                      <SidebarMenuItem>
+                        <SidebarMenuButton
+                          onClick={() => setSubmenuOpen(false)}
+                          tooltip={tooltips === "enabled" ? "Back" : null}
+                          className="cursor-pointer relative"
+                        >
+                          <ChevronLeft />
+                          <span className="text-center absolute left-[50%] transform -translate-x-[50%]">
+                            {activeParent.title}
+                          </span>
+                        </SidebarMenuButton>
+                      </SidebarMenuItem>
+                      {activeParent.items?.map((subItem) => (
+                        <SidebarMenuItem key={subItem.title}>
+                          <SidebarMenuButton asChild isActive={subItem.isActive?.()}>
+                            <TanstackLink
+                              // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+                              to={subItem.url as any}
+                            >
+                              {subItem.icon && <subItem.icon />}
+                              <span>{subItem.title}</span>
+                            </TanstackLink>
+                          </SidebarMenuButton>
+                        </SidebarMenuItem>
+                      ))}
+                    </>
+                  )}
+                </SidebarMenu>
+              </div>
+            </SidebarGroup>
+          ))}
+        </SidebarContent>
+      </Sidebar>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/skeleton/dashboard-shell-skeleton.tsx b/apps/www/src/features/studio/shell/components/skeleton/dashboard-shell-skeleton.tsx
new file mode 100644
index 000000000..aacdcacc2
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/skeleton/dashboard-shell-skeleton.tsx
@@ -0,0 +1,45 @@
+import { useLocation } from "@tanstack/react-router";
+import { Spinner } from "@voidhash/ui";
+
+import { OrganizationLayoutSkeleton } from "./organization-layout-skeleton";
+import { ProjectLayoutSkeleton } from "./project-layout-skeleton";
+
+const STUDIO_RESERVED_SEGMENTS = new Set(["create-organization", "_designer"]);
+const STUDIO_PATH = /^\/studio\/([^/]+)(?:\/([^/]+))?(?:\/.*)?$/;
+
+export function DashboardShellSkeleton() {
+  const pathname = useLocation({ select: (location) => location.pathname });
+  const match = pathname.match(STUDIO_PATH);
+
+  if (!match) {
+    return <CenteredSpinner />;
+  }
+
+  const organizationSlug = match[1];
+  const projectSlug = match[2];
+
+  if (STUDIO_RESERVED_SEGMENTS.has(organizationSlug)) {
+    return <CenteredSpinner />;
+  }
+
+  // `~` denotes an org-scoped sub-route (e.g. /studio/<org>/~/settings),
+  // not a project slug — render the organization layout.
+  if (projectSlug && projectSlug !== "~") {
+    return (
+      <ProjectLayoutSkeleton
+        organizationSlug={organizationSlug}
+        projectSlug={projectSlug}
+      />
+    );
+  }
+
+  return <OrganizationLayoutSkeleton organizationSlug={organizationSlug} />;
+}
+
+function CenteredSpinner() {
+  return (
+    <div className="flex h-screen w-screen items-center justify-center">
+      <Spinner />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/skeleton/index.ts b/apps/www/src/features/studio/shell/components/skeleton/index.ts
new file mode 100644
index 000000000..8f3df4f9d
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/skeleton/index.ts
@@ -0,0 +1,3 @@
+export { DashboardShellSkeleton } from "./dashboard-shell-skeleton";
+export { OrganizationLayoutSkeleton } from "./organization-layout-skeleton";
+export { ProjectLayoutSkeleton } from "./project-layout-skeleton";
diff --git a/apps/www/src/features/studio/shell/components/skeleton/organization-layout-skeleton.tsx b/apps/www/src/features/studio/shell/components/skeleton/organization-layout-skeleton.tsx
new file mode 100644
index 000000000..9fe8fefe6
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/skeleton/organization-layout-skeleton.tsx
@@ -0,0 +1,112 @@
+import { Link as TanstackLink, useLocation } from "@tanstack/react-router";
+import {
+  Sidebar,
+  SidebarContent,
+  SidebarGroup,
+  SidebarInset,
+  SidebarMenu,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarProvider,
+  Skeleton,
+} from "@voidhash/ui";
+import { ChevronsUpDown, Grid2X2, Settings } from "lucide-react";
+
+export function OrganizationLayoutSkeleton({ organizationSlug }: { organizationSlug: string }) {
+  const pathname = useLocation({ select: (location) => location.pathname });
+
+  const overviewActive = pathname === `/studio/${organizationSlug}`;
+  const settingsActive = pathname.startsWith(`/studio/${organizationSlug}/~/settings`);
+
+  return (
+    <div className="flex flex-col [--header-height:calc(theme(spacing.12))]">
+      <SidebarProvider className="flex flex-col">
+        <NavBarSkeleton />
+        <div className="flex flex-1 pt-[var(--header-height)] min-h-0">
+          <Sidebar
+            className="transition-all duration-75"
+            collapsible="icon"
+            variant="inset"
+          >
+            <SidebarContent className="gap-0">
+              <div className="h-(--header-height) px-1 py-2 w-full">
+                <SwitcherSkeleton />
+              </div>
+
+              <SidebarGroup className="pt-0">
+                <SidebarMenu>
+                  <SidebarMenuItem>
+                    <SidebarMenuButton asChild isActive={overviewActive} tooltip="Overview">
+                      <TanstackLink params={{ organizationSlug }} to="/studio/$organizationSlug">
+                        <Grid2X2 />
+                        <span>Overview</span>
+                      </TanstackLink>
+                    </SidebarMenuButton>
+                  </SidebarMenuItem>
+                  <SidebarMenuItem>
+                    <SidebarMenuButton asChild isActive={settingsActive} tooltip="Settings">
+                      <TanstackLink
+                        params={{ organizationSlug }}
+                        to="/studio/$organizationSlug/~/settings"
+                      >
+                        <Settings />
+                        <span>Settings</span>
+                      </TanstackLink>
+                    </SidebarMenuButton>
+                  </SidebarMenuItem>
+                </SidebarMenu>
+              </SidebarGroup>
+
+              <SidebarGroup className="px-2 border-t border-border/60 mt-4">
+                <div className="mb-1 pl-2 flex items-center justify-between">
+                  <span className="font-medium text-[10px] text-sidebar-foreground/60 uppercase tracking-wider">
+                    Projects
+                  </span>
+                  <Skeleton className="size-7 rounded-md" />
+                </div>
+                {Array.from({ length: 4 }).map((_, index) => (
+                  // biome-ignore lint/suspicious/noArrayIndexKey: skeleton row
+                  <SidebarMenuItem key={index}>
+                    <div className="flex h-9 w-full items-center gap-3 rounded-md p-2">
+                      <Skeleton className="size-5 shrink-0 rounded" />
+                      <Skeleton className="h-3.5 flex-1 max-w-32" />
+                    </div>
+                  </SidebarMenuItem>
+                ))}
+              </SidebarGroup>
+            </SidebarContent>
+          </Sidebar>
+
+          <SidebarInset className="transition-all duration-75 mt-0!" />
+        </div>
+      </SidebarProvider>
+    </div>
+  );
+}
+
+function NavBarSkeleton() {
+  return (
+    <div className="fixed z-50 flex h-[var(--header-height)] w-[calc(100vw-var(--sidebar-width))] left-[var(--sidebar-width)] flex-col justify-between bg-sidebar transition-all duration-75">
+      <div className="flex items-center justify-between pr-4 h-full">
+        <div className="flex items-center gap-7" />
+        <div className="flex items-center justify-center gap-6">
+          <Skeleton className="size-6 rounded-lg" />
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function SwitcherSkeleton() {
+  return (
+    <div className="flex items-center justify-between w-full">
+      <div className="flex items-center gap-2 flex-1 h-9 pl-1 pr-2 rounded-l-2xl">
+        <Skeleton className="size-6 rounded-lg shrink-0" />
+        <Skeleton className="h-3.5 flex-1 max-w-32" />
+      </div>
+      <div className="flex items-center justify-center size-9 px-1">
+        <ChevronsUpDown className="size-4 text-sidebar-foreground/40" />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx b/apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx
new file mode 100644
index 000000000..d1730ff15
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx
@@ -0,0 +1,343 @@
+import { Link as TanstackLink, useLocation } from "@tanstack/react-router";
+import {
+  Sidebar,
+  SidebarContent,
+  SidebarGroup,
+  SidebarInset,
+  SidebarMenu,
+  SidebarMenuAction,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarProvider,
+  Skeleton,
+} from "@voidhash/ui";
+import {
+  ChartNoAxesColumnIncreasing,
+  ChevronLeft,
+  ChevronRight,
+  ChevronsUpDown,
+  GaugeIcon,
+  Gift,
+  Logs,
+  type LucideIcon,
+  MapPin,
+  Package2,
+  Rocket,
+  Settings,
+  Smartphone,
+  Users,
+} from "lucide-react";
+import { useEffect, useState } from "react";
+
+type MenuItem = {
+  title: string;
+  url: string;
+  icon?: LucideIcon;
+  isActive: () => boolean;
+  items?: SubMenuItem[];
+};
+
+type SubMenuItem = {
+  title: string;
+  url: string;
+  icon?: LucideIcon;
+  isActive: () => boolean;
+};
+
+export function ProjectLayoutSkeleton({
+  organizationSlug,
+  projectSlug,
+}: {
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  const pathname = useLocation({ select: (location) => location.pathname });
+  const base = `/studio/${organizationSlug}/${projectSlug}`;
+
+  const items: MenuItem[] = [
+    {
+      icon: GaugeIcon,
+      isActive: () => pathname === `${base}/overview`,
+      title: "Overview",
+      url: `${base}/overview`,
+    },
+    {
+      icon: ChartNoAxesColumnIncreasing,
+      isActive: () => pathname.startsWith(`${base}/analytics`),
+      title: "Analytics",
+      url: `${base}/analytics/revenue`,
+      items: [
+        {
+          isActive: () => pathname === `${base}/analytics/revenue`,
+          title: "Revenue",
+          url: `${base}/analytics/revenue`,
+        },
+        {
+          isActive: () => pathname.startsWith(`${base}/analytics/subscribers`),
+          title: "Subscribers",
+          url: `${base}/analytics/subscribers`,
+        },
+        {
+          isActive: () => pathname.startsWith(`${base}/analytics/trials`),
+          title: "Trials",
+          url: `${base}/analytics/trials`,
+        },
+        {
+          isActive: () => pathname.startsWith(`${base}/analytics/churn`),
+          title: "Churn",
+          url: `${base}/analytics/churn`,
+        },
+      ],
+    },
+    {
+      icon: Users,
+      isActive: () => pathname.startsWith(`${base}/persons`),
+      title: "People",
+      url: `${base}/persons`,
+    },
+    {
+      icon: Package2,
+      isActive: () =>
+        pathname.startsWith(`${base}/products`) ||
+        pathname.startsWith(`${base}/settings/perks`),
+      title: "Products",
+      url: `${base}/products`,
+      items: [
+        {
+          icon: Package2,
+          isActive: () => pathname.startsWith(`${base}/products`),
+          title: "Products",
+          url: `${base}/products`,
+        },
+        {
+          icon: Gift,
+          isActive: () => pathname.startsWith(`${base}/settings/perks`),
+          title: "Perks",
+          url: `${base}/settings/perks`,
+        },
+      ],
+    },
+    {
+      icon: Smartphone,
+      isActive: () =>
+        pathname.startsWith(`${base}/paywalls`) ||
+        pathname.startsWith(`${base}/settings/paywall-locations`) ||
+        pathname.startsWith(`${base}/deploys`),
+      title: "Paywalls",
+      url: `${base}/paywalls`,
+      items: [
+        {
+          icon: Smartphone,
+          isActive: () => pathname.startsWith(`${base}/paywalls`),
+          title: "Paywalls",
+          url: `${base}/paywalls`,
+        },
+        {
+          icon: MapPin,
+          isActive: () =>
+            pathname.startsWith(`${base}/settings/paywall-locations`),
+          title: "Paywall Locations",
+          url: `${base}/settings/paywall-locations`,
+        },
+        {
+          icon: Rocket,
+          isActive: () => pathname.startsWith(`${base}/deploys`),
+          title: "Deploys",
+          url: `${base}/deploys`,
+        },
+      ],
+    },
+    {
+      icon: Logs,
+      isActive: () => pathname.startsWith(`${base}/activity`),
+      title: "Activity",
+      url: `${base}/activity/events`,
+      items: [
+        {
+          isActive: () => pathname.startsWith(`${base}/activity/events`),
+          title: "Analytics events",
+          url: `${base}/activity/events`,
+        },
+      ],
+    },
+    {
+      icon: Settings,
+      isActive: () => pathname.startsWith(`${base}/settings`),
+      title: "Settings",
+      url: `${base}/settings`,
+      items: [
+        {
+          isActive: () => pathname === `${base}/settings`,
+          title: "General",
+          url: `${base}/settings`,
+        },
+        {
+          isActive: () => pathname.startsWith(`${base}/settings/api-keys`),
+          title: "API Keys",
+          url: `${base}/settings/api-keys`,
+        },
+        {
+          isActive: () => pathname.startsWith(`${base}/settings/webhooks`),
+          title: "Webhooks",
+          url: `${base}/settings/webhooks`,
+        },
+        {
+          isActive: () =>
+            pathname.startsWith(`${base}/settings/payment-providers`),
+          title: "Payment Providers",
+          url: `${base}/settings/payment-providers`,
+        },
+      ],
+    },
+  ];
+
+  const activeParent = items.find(
+    (item) => item.isActive() && item.items?.length,
+  );
+  const [submenuOpen, setSubmenuOpen] = useState(!!activeParent);
+
+  useEffect(() => {
+    if (activeParent) {
+      setSubmenuOpen(true);
+    }
+  }, [activeParent]);
+
+  const showSubmenu = submenuOpen && !!activeParent;
+
+  return (
+    <div className="flex flex-col [--header-height:calc(theme(spacing.12))]">
+      <SidebarProvider className="flex flex-col">
+        <NavBarSkeleton />
+        <div className="flex flex-1 pt-[var(--header-height)] min-h-0">
+          <Sidebar
+            className="transition-all duration-75"
+            collapsible="icon"
+            variant="inset"
+          >
+            <SidebarContent className="gap-0">
+              <div className="h-(--header-height) px-1 py-2 w-full">
+                <SwitcherSkeleton />
+              </div>
+
+              <SidebarGroup className="pt-0">
+                <div className="relative">
+                  <SidebarMenu
+                    className={`transition-all duration-150 ${showSubmenu ? "opacity-0 pointer-events-none -translate-x-3" : "opacity-100 translate-x-0"}`}
+                  >
+                    {items.map((item) => (
+                      <SidebarMenuItem key={item.title}>
+                        <SidebarMenuButton
+                          asChild
+                          isActive={
+                            (!item.items?.length || item.items.length === 0) &&
+                            item.isActive()
+                          }
+                          tooltip={item.title}
+                        >
+                          <TanstackLink
+                            onClick={() => {
+                              if (item.items?.length) {
+                                setSubmenuOpen(true);
+                              }
+                            }}
+                            // biome-ignore lint/suspicious/noExplicitAny: mirrors SidebarShell typing
+                            to={item.url as any}
+                          >
+                            {item.icon && <item.icon />}
+                            <span>{item.title}</span>
+                          </TanstackLink>
+                        </SidebarMenuButton>
+                        {item.items?.length && (
+                          <SidebarMenuAction
+                            onClick={() => setSubmenuOpen(true)}
+                          >
+                            <ChevronRight />
+                            <span className="sr-only">Toggle</span>
+                          </SidebarMenuAction>
+                        )}
+                      </SidebarMenuItem>
+                    ))}
+                  </SidebarMenu>
+
+                  <SidebarMenu
+                    className={`absolute inset-0 transition-all duration-150 ${showSubmenu ? "opacity-100 translate-x-0" : "opacity-0 pointer-events-none translate-x-10"}`}
+                  >
+                    {activeParent && (
+                      <>
+                        <SidebarMenuItem>
+                          <SidebarMenuButton
+                            className="cursor-pointer relative"
+                            onClick={() => setSubmenuOpen(false)}
+                            tooltip="Back"
+                          >
+                            <ChevronLeft />
+                            <span className="text-center absolute left-[50%] transform -translate-x-[50%]">
+                              {activeParent.title}
+                            </span>
+                          </SidebarMenuButton>
+                        </SidebarMenuItem>
+                        {activeParent.items?.map((subItem) => (
+                          <SidebarMenuItem key={subItem.title}>
+                            <SidebarMenuButton
+                              asChild
+                              isActive={subItem.isActive()}
+                            >
+                              <TanstackLink
+                                // biome-ignore lint/suspicious/noExplicitAny: mirrors SidebarShell typing
+                                to={subItem.url as any}
+                              >
+                                {subItem.icon && <subItem.icon />}
+                                <span>{subItem.title}</span>
+                              </TanstackLink>
+                            </SidebarMenuButton>
+                          </SidebarMenuItem>
+                        ))}
+                      </>
+                    )}
+                  </SidebarMenu>
+                </div>
+              </SidebarGroup>
+            </SidebarContent>
+          </Sidebar>
+
+          <SidebarInset className="transition-all duration-75 mt-0!" />
+        </div>
+      </SidebarProvider>
+    </div>
+  );
+}
+
+function NavBarSkeleton() {
+  return (
+    <div className="fixed z-50 flex h-[var(--header-height)] w-[calc(100vw-var(--sidebar-width))] left-[var(--sidebar-width)] flex-col justify-between bg-sidebar transition-all duration-75">
+      <div className="flex items-center justify-between pr-4 h-full">
+        <div className="flex items-center">
+          <div className="flex items-center gap-2 h-9 pl-1 pr-2 rounded-l-2xl">
+            <Skeleton className="size-6 rounded-lg shrink-0" />
+            <Skeleton className="h-3.5 w-24" />
+          </div>
+          <div className="flex items-center justify-center size-9 px-1">
+            <ChevronsUpDown className="size-4 text-sidebar-foreground/40" />
+          </div>
+        </div>
+        <div className="flex items-center justify-center gap-6">
+          <Skeleton className="size-6 rounded-lg" />
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function SwitcherSkeleton() {
+  return (
+    <div className="flex items-center justify-between w-full">
+      <div className="flex items-center gap-2 flex-1 h-9 pl-1 pr-2 rounded-l-2xl">
+        <Skeleton className="size-6 rounded-lg shrink-0" />
+        <Skeleton className="h-3.5 flex-1 max-w-32" />
+      </div>
+      <div className="flex items-center justify-center size-9 px-1">
+        <ChevronsUpDown className="size-4 text-sidebar-foreground/40" />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/shell/components/voidhash-error-card.tsx b/apps/www/src/features/studio/shell/components/voidhash-error-card.tsx
new file mode 100644
index 000000000..f4521d5d7
--- /dev/null
+++ b/apps/www/src/features/studio/shell/components/voidhash-error-card.tsx
@@ -0,0 +1,21 @@
+"use client";
+
+// import type { AnyVoidhashError } from '@voidhash/lib/constants';
+import { ErrorCard } from "@voidhash/ui";
+
+export function VoidhashErrorCard({
+  error,
+}: {
+  error: { code: string; title?: string; message?: string };
+}) {
+  return (
+    <ErrorCard
+      className="h-screen"
+      description={error.message ?? "Please try again later."}
+      onRetry={() => {
+        window.location.reload();
+      }}
+      title={error.title ?? "Something went wrong"}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/shell/index.ts b/apps/www/src/features/studio/shell/index.ts
new file mode 100644
index 000000000..09ccfe374
--- /dev/null
+++ b/apps/www/src/features/studio/shell/index.ts
@@ -0,0 +1,2 @@
+export * from "./components";
+export * from "./page";
diff --git a/apps/www/src/features/studio/shell/page.tsx b/apps/www/src/features/studio/shell/page.tsx
new file mode 100644
index 000000000..2b02254ef
--- /dev/null
+++ b/apps/www/src/features/studio/shell/page.tsx
@@ -0,0 +1,67 @@
+import { Link } from "@tanstack/react-router";
+import {
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  Separator,
+  Skeleton,
+  cn,
+} from "@voidhash/ui";
+import { Fragment } from "react";
+
+export function Page({
+  children,
+  breadcrumbs,
+  className,
+}: React.ComponentProps<"div"> & {
+  breadcrumbs?: {
+    title: string;
+    url?: string;
+    isLoading?: boolean;
+  }[];
+}) {
+  return (
+    <>
+      {breadcrumbs && breadcrumbs.length > 0 && (
+        <header className="flex h-16 shrink-0 items-center gap-2">
+          <div className="flex items-center gap-2 px-4">
+            <Separator className="mr-2 h-4" orientation="vertical" />
+            <Breadcrumb>
+              <BreadcrumbList>
+                {breadcrumbs?.map((breadcrumb, index) => (
+                  <Fragment key={breadcrumb.url ?? breadcrumb.title}>
+                    {index < breadcrumbs.length - 1 && (
+                      <BreadcrumbItem className="hidden md:block">
+                        <BreadcrumbLink asChild>
+                          <Link to={breadcrumb.url}>{breadcrumb.title}</Link>
+                        </BreadcrumbLink>
+                      </BreadcrumbItem>
+                    )}
+                    {index === breadcrumbs.length - 1 && (
+                      <BreadcrumbItem>
+                        <BreadcrumbPage>
+                          {breadcrumb.isLoading ? (
+                            <Skeleton className="h-4 w-20" />
+                          ) : (
+                            breadcrumb.title
+                          )}
+                        </BreadcrumbPage>
+                      </BreadcrumbItem>
+                    )}
+                    {index !== breadcrumbs.length - 1 && (
+                      <BreadcrumbSeparator className="hidden md:block" />
+                    )}
+                  </Fragment>
+                ))}
+              </BreadcrumbList>
+            </Breadcrumb>
+          </div>
+        </header>
+      )}
+      <div className={cn("p-4", className)}>{children}</div>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/styles/globals.css b/apps/www/src/features/studio/styles/globals.css
new file mode 100644
index 000000000..1f64ef057
--- /dev/null
+++ b/apps/www/src/features/studio/styles/globals.css
@@ -0,0 +1,222 @@
+/** biome-ignore-all lint/nursery/noUnknownAtRule: tailwind */
+@import "tailwindcss";
+
+@import "tw-animate-css";
+@import "@voidhash/ui/styles/brand-theme.css";
+
+@source "../../../../packages/ui";
+@source "../../../../packages/features";
+
+@custom-variant dark (&:is(.dark *));
+
+::selection {
+  background: #0673ff80;
+  color: #fff;
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+  body {
+    @apply bg-background text-foreground;
+  }
+}
+/*
+:root {
+	--background: oklch(0.99 0 0);
+	--foreground: oklch(0.2 0 0);
+	--card: oklch(0.99 0 0);
+	--card-foreground: oklch(0.2 0 0);
+	--popover: oklch(0.99 0 0);
+	--popover-foreground: oklch(0.44 0 0);
+	--primary: oklch(0.83 0.13 160.91);
+	--primary-foreground: oklch(0.26 0.01 166.46);
+	--secondary: oklch(0.99 0 0);
+	--secondary-foreground: oklch(0.2 0 0);
+	--muted: oklch(0.95 0 0);
+	--muted-foreground: oklch(0.24 0 0);
+	--accent: oklch(0.95 0 0);
+	--accent-foreground: oklch(0.24 0 0);
+	--destructive: oklch(0.55 0.19 32.73);
+	--destructive-foreground: oklch(0.99 0.0 17.21);
+	--border: oklch(0.9 0 0);
+	--input: oklch(0.97 0 0);
+	--ring: oklch(0.83 0.13 160.91);
+	--chart-1: oklch(0.83 0.13 160.91);
+	--chart-2: oklch(0.62 0.19 259.81);
+	--chart-3: oklch(0.61 0.22 292.72);
+	--chart-4: oklch(0.77 0.16 70.08);
+	--chart-5: oklch(0.7 0.15 162.48);
+	--sidebar: oklch(0.99 0 0);
+	--sidebar-foreground: oklch(0.55 0 0);
+	--sidebar-primary: oklch(0.83 0.13 160.91);
+	--sidebar-primary-foreground: oklch(0.26 0.01 166.46);
+	--sidebar-accent: oklch(0.95 0 0);
+	--sidebar-accent-foreground: oklch(0.24 0 0);
+	--sidebar-border: oklch(0.9 0 0);
+	--sidebar-ring: oklch(0.83 0.13 160.91);
+	--font-sans: Geist, sans-serif;
+	--font-serif: Geist, sans-serif;
+	--font-mono: Geist Mono, monospace;
+	--radius: 0.5rem;
+	--shadow-2xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-sm: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-md: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 2px 4px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-lg: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 4px 6px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 8px 10px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-2xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.43);
+	--tracking-normal: 0.025em;
+}
+
+.dark {
+	--background: oklch(0.18 0 0);
+	--foreground: oklch(0.93 0.01 255.51);
+	--card: oklch(0.2 0 0);
+	--card-foreground: oklch(0.93 0.01 255.51);
+	--popover: oklch(0.26 0 0);
+	--popover-foreground: oklch(0.73 0 0);
+	--primary: oklch(0.55 0.25 261.78);
+	--primary-foreground: oklch(1.0 0 0);
+	--secondary: oklch(0.26 0 0);
+	--secondary-foreground: oklch(0.99 0 0);
+	--muted: oklch(0.24 0 0);
+	--muted-foreground: oklch(0.71 0 0);
+	--accent: oklch(0.31 0 0);
+	--accent-foreground: oklch(0.99 0 0);
+	--destructive: oklch(0.31 0.09 29.79);
+	--destructive-foreground: oklch(0.94 0.0 34.31);
+	--border: oklch(0.28 0 0);
+	--input: oklch(0.26 0 0);
+	--ring: oklch(0.58 0.21 257.16);
+	--chart-1: oklch(0.58 0.21 257.16);
+	--chart-2: oklch(0.87 0.15 194.78);
+	--chart-3: oklch(0.9 0.15 96.47);
+	--chart-4: oklch(0.72 0.17 353.44);
+	--chart-5: oklch(0.83 0.11 74.12);
+	--sidebar: oklch(0.18 0 0);
+	--sidebar-foreground: oklch(0.63 0 0);
+	--sidebar-primary: oklch(0.44 0.1 156.76);
+	--sidebar-primary-foreground: oklch(0.92 0.01 167.16);
+	--sidebar-accent: oklch(0.31 0 0);
+	--sidebar-accent-foreground: oklch(0.99 0 0);
+	--sidebar-border: oklch(0.28 0 0);
+	--sidebar-ring: oklch(0.8 0.18 151.71);
+	--font-sans: Geist, sans-serif;
+	--font-serif: Geist, sans-serif;
+	--font-mono: Geist Mono, monospace;
+	--radius: 0.5rem;
+	--shadow-2xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-xs: 0px 1px 3px 0px hsl(0 0% 0% / 0.09);
+	--shadow-sm: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 1px 2px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-md: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 2px 4px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-lg: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 4px 6px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.17), 0px 8px 10px -1px
+		hsl(0 0% 0% / 0.17);
+	--shadow-2xl: 0px 1px 3px 0px hsl(0 0% 0% / 0.43);
+}
+
+@theme inline {
+	--color-background: var(--background);
+	--color-foreground: var(--foreground);
+	--color-card: var(--card);
+	--color-card-foreground: var(--card-foreground);
+	--color-popover: var(--popover);
+	--color-popover-foreground: var(--popover-foreground);
+	--color-primary: var(--primary);
+	--color-primary-foreground: var(--primary-foreground);
+	--color-secondary: var(--secondary);
+	--color-secondary-foreground: var(--secondary-foreground);
+	--color-muted: var(--muted);
+	--color-muted-foreground: var(--muted-foreground);
+	--color-accent: var(--accent);
+	--color-accent-foreground: var(--accent-foreground);
+	--color-destructive: var(--destructive);
+	--color-destructive-foreground: var(--destructive-foreground);
+	--color-border: var(--border);
+	--color-input: var(--input);
+	--color-ring: var(--ring);
+	--color-chart-1: var(--chart-1);
+	--color-chart-2: var(--chart-2);
+	--color-chart-3: var(--chart-3);
+	--color-chart-4: var(--chart-4);
+	--color-chart-5: var(--chart-5);
+	--color-sidebar: var(--sidebar);
+	--color-sidebar-foreground: var(--sidebar-foreground);
+	--color-sidebar-primary: var(--sidebar-primary);
+	--color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+	--color-sidebar-accent: var(--sidebar-accent);
+	--color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+	--color-sidebar-border: var(--sidebar-border);
+	--color-sidebar-ring: var(--sidebar-ring);
+
+	--font-sans: var(--font-sans);
+	--font-mono: var(--font-mono);
+	--font-serif: var(--font-serif);
+
+	--radius-sm: calc(var(--radius) - 4px);
+	--radius-md: calc(var(--radius) - 2px);
+	--radius-lg: var(--radius);
+	--radius-xl: calc(var(--radius) + 4px);
+
+	--shadow-2xs: var(--shadow-2xs);
+	--shadow-xs: var(--shadow-xs);
+	--shadow-sm: var(--shadow-sm);
+	--shadow: var(--shadow);
+	--shadow-md: var(--shadow-md);
+	--shadow-lg: var(--shadow-lg);
+	--shadow-xl: var(--shadow-xl);
+	--shadow-2xl: var(--shadow-2xl);
+
+	--tracking-tighter: calc(var(--tracking-normal) - 0.05em);
+	--tracking-tight: calc(var(--tracking-normal) - 0.025em);
+	--tracking-normal: var(--tracking-normal);
+	--tracking-wide: calc(var(--tracking-normal) + 0.025em);
+	--tracking-wider: calc(var(--tracking-normal) + 0.05em);
+	--tracking-widest: calc(var(--tracking-normal) + 0.1em);
+	--animate-accordion-down: accordion-down 0.2s ease-out;
+	--animate-accordion-up: accordion-up 0.2s ease-out;
+
+	@keyframes accordion-down {
+		from {
+			height: 0;
+		}
+		to {
+			height: var(--radix-accordion-content-height);
+		}
+	}
+
+	@keyframes accordion-up {
+		from {
+			height: var(--radix-accordion-content-height);
+		}
+		to {
+			height: 0;
+		}
+	}
+} */
+
+/* @layer base {
+	* {
+		@apply border-border outline-ring/50;
+	}
+	body {
+		@apply bg-background text-foreground;
+	}
+}
+
+body {
+	letter-spacing: var(--tracking-normal);
+} */
diff --git a/apps/www/src/features/studio/webhooks/create-webhook-modal-button.tsx b/apps/www/src/features/studio/webhooks/create-webhook-modal-button.tsx
new file mode 100644
index 000000000..20c83d0d7
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/create-webhook-modal-button.tsx
@@ -0,0 +1,44 @@
+"use client";
+
+import type { WebhookEndpoint } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui";
+import { PlusIcon } from "lucide-react";
+import { useState } from "react";
+
+import { CreateWebhookModal } from "./create-webhook-modal";
+import { WebhookSecretRevealModal } from "./webhook-secret-reveal-modal";
+
+interface CreateWebhookModalButtonProps {
+  projectId: string;
+}
+
+export function CreateWebhookModalButton({ projectId }: CreateWebhookModalButtonProps) {
+  const [isOpen, setIsOpen] = useState(false);
+  const [createdWebhook, setCreatedWebhook] = useState<typeof WebhookEndpoint.Type | null>(null);
+
+  const handleSuccess = (webhook: typeof WebhookEndpoint.Type) => {
+    setCreatedWebhook(webhook);
+  };
+
+  return (
+    <>
+      <CreateWebhookModal
+        onClose={() => setIsOpen(false)}
+        onSuccess={handleSuccess}
+        open={isOpen}
+        projectId={projectId}
+        trigger={
+          <Button onClick={() => setIsOpen(true)}>
+            <PlusIcon className="mr-2 h-4 w-4" />
+            Create Webhook
+          </Button>
+        }
+      />
+      <WebhookSecretRevealModal
+        onClose={() => setCreatedWebhook(null)}
+        open={!!createdWebhook}
+        secret={createdWebhook?.secret ?? null}
+      />
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/create-webhook-modal.tsx b/apps/www/src/features/studio/webhooks/create-webhook-modal.tsx
new file mode 100644
index 000000000..8d2928aab
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/create-webhook-modal.tsx
@@ -0,0 +1,195 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { WebhookEndpoint } from "@voidhash/rpc";
+import {
+  Button,
+  Checkbox,
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+  Input,
+  Textarea,
+} from "@voidhash/ui";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { createWebhookEndpointOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+import { WEBHOOK_EVENT_OPTIONS } from "./webhook-event-types";
+
+const createWebhookSchema = z.object({
+  description: z.string().optional(),
+  events: z.array(z.string()).min(1, "Select at least one event"),
+  name: z.string().min(1, "Name is required").max(100, "Name is too long"),
+  url: z.string().url("Must be a valid URL"),
+});
+
+type CreateWebhookForm = z.infer<typeof createWebhookSchema>;
+
+interface CreateWebhookModalProps {
+  open: boolean;
+  onClose: () => void;
+  trigger: React.ReactNode;
+  projectId: string;
+  onSuccess?: (webhook: typeof WebhookEndpoint.Type) => void;
+}
+
+export function CreateWebhookModal({
+  open,
+  onClose,
+  trigger,
+  projectId,
+  onSuccess,
+}: CreateWebhookModalProps) {
+  const form = useForm<CreateWebhookForm>({
+    defaultValues: {
+      description: "",
+      events: [],
+      name: "",
+      url: "",
+    },
+    resolver: zodResolver(createWebhookSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: createWebhook, status: createWebhookStatus } = useMutation({
+    ...createWebhookEndpointOptions(),
+    onError: () => {
+      toast.error("Failed to create webhook");
+    },
+    onSuccess: (data) => {
+      onSuccess?.(data);
+      toast.success("Webhook created successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.list({ projectId }),
+      });
+      handleOpenChange(false);
+    },
+  });
+
+  const handleOpenChange = (isOpen: boolean) => {
+    if (!isOpen) {
+      onClose?.();
+      form.reset();
+    }
+  };
+
+  const onSubmit = (data: CreateWebhookForm) => {
+    createWebhook({ ...data, projectId });
+  };
+
+  return (
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-md" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Create Webhook</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="My webhook" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="url"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>URL</FormLabel>
+                  <FormControl>
+                    <Input placeholder="https://example.com/webhook" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="events"
+              render={() => (
+                <FormItem className="space-y-2">
+                  <FormLabel>Events</FormLabel>
+                  <div className="grid grid-cols-1 gap-2">
+                    {WEBHOOK_EVENT_OPTIONS.map((event) => (
+                      <FormField
+                        control={form.control}
+                        key={event.value}
+                        name="events"
+                        render={({ field }) => (
+                          <FormItem className="flex items-center space-x-2 space-y-0">
+                            <FormControl>
+                              <Checkbox
+                                checked={field.value?.includes(event.value)}
+                                onCheckedChange={(checked) => {
+                                  if (checked) {
+                                    field.onChange([...field.value, event.value]);
+                                  } else {
+                                    field.onChange(field.value?.filter((v) => v !== event.value));
+                                  }
+                                }}
+                              />
+                            </FormControl>
+                            <FormLabel className="font-normal text-sm">{event.label}</FormLabel>
+                          </FormItem>
+                        )}
+                      />
+                    ))}
+                  </div>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="description"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Description (optional)</FormLabel>
+                  <FormControl>
+                    <Textarea placeholder="Add a description..." {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex gap-2 sm:justify-between">
+              <Button
+                className="hidden md:block"
+                disabled={createWebhookStatus === "pending"}
+                onClick={() => handleOpenChange(false)}
+                type="button"
+                variant="outline"
+              >
+                Cancel
+              </Button>
+              <Button disabled={createWebhookStatus === "pending"} type="submit">
+                {createWebhookStatus === "pending" ? "Creating..." : "Create Webhook"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/edit-webhook-modal.tsx b/apps/www/src/features/studio/webhooks/edit-webhook-modal.tsx
new file mode 100644
index 000000000..5398fb6ab
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/edit-webhook-modal.tsx
@@ -0,0 +1,220 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { WebhookEndpoint } from "@voidhash/rpc";
+import {
+  Button,
+  Checkbox,
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+  Input,
+  Switch,
+  Textarea,
+} from "@voidhash/ui";
+import { useEffect } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { queryKeys, updateWebhookEndpointOptions } from "@/features/studio/lib/tanstack-query";
+import { z } from "zod/v3";
+
+import { WEBHOOK_EVENT_OPTIONS } from "./webhook-event-types";
+
+const editWebhookSchema = z.object({
+  description: z.string().nullable().optional(),
+  enabled: z.boolean(),
+  events: z.array(z.string()).min(1, "Select at least one event"),
+  name: z.string().min(1, "Name is required").max(100, "Name is too long"),
+  url: z.string().url("Must be a valid URL"),
+});
+
+type EditWebhookForm = z.infer<typeof editWebhookSchema>;
+
+interface EditWebhookModalProps {
+  open: boolean;
+  onClose: () => void;
+  webhook: typeof WebhookEndpoint.Type;
+  projectId: string;
+}
+
+export function EditWebhookModal({ open, onClose, webhook, projectId }: EditWebhookModalProps) {
+  const form = useForm<EditWebhookForm>({
+    defaultValues: {
+      description: webhook.description ?? "",
+      enabled: webhook.status === "active",
+      events: [...webhook.events],
+      name: webhook.name,
+      url: webhook.url,
+    },
+    resolver: zodResolver(editWebhookSchema),
+  });
+
+  useEffect(() => {
+    if (open) {
+      form.reset({
+        description: webhook.description ?? "",
+        enabled: webhook.status === "active",
+        events: [...webhook.events],
+        name: webhook.name,
+        url: webhook.url,
+      });
+    }
+  }, [open, webhook, form]);
+
+  const queryClient = useQueryClient();
+  const { mutate: updateWebhook, status: updateWebhookStatus } = useMutation({
+    ...updateWebhookEndpointOptions(),
+    onError: () => {
+      toast.error("Failed to update webhook");
+    },
+    onSuccess: () => {
+      toast.success("Webhook updated successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.list({ projectId }),
+      });
+      onClose();
+    },
+  });
+
+  const onSubmit = (data: EditWebhookForm) => {
+    updateWebhook({
+      description: data.description,
+      endpointId: webhook.id,
+      events: data.events,
+      name: data.name,
+      status: data.enabled ? "active" : "disabled",
+      url: data.url,
+    });
+  };
+
+  return (
+    <Dialog onOpenChange={(isOpen) => !isOpen && onClose()} open={open}>
+      <DialogContent className="max-w-md" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Edit Webhook</DialogTitle>
+        </DialogHeader>
+        <Form {...form}>
+          <form className="space-y-4 pt-4" onSubmit={form.handleSubmit(onSubmit)}>
+            <FormField
+              control={form.control}
+              name="enabled"
+              render={({ field }) => (
+                <FormItem className="flex items-center justify-between rounded-lg border p-3">
+                  <div className="space-y-0.5">
+                    <FormLabel>Enabled</FormLabel>
+                    <p className="text-muted-foreground text-sm">Receive webhook notifications</p>
+                  </div>
+                  <FormControl>
+                    <Switch checked={field.value} onCheckedChange={field.onChange} />
+                  </FormControl>
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="My webhook" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="url"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>URL</FormLabel>
+                  <FormControl>
+                    <Input placeholder="https://example.com/webhook" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="events"
+              render={() => (
+                <FormItem className="space-y-2">
+                  <FormLabel>Events</FormLabel>
+                  <div className="grid grid-cols-1 gap-2">
+                    {WEBHOOK_EVENT_OPTIONS.map((event) => (
+                      <FormField
+                        control={form.control}
+                        key={event.value}
+                        name="events"
+                        render={({ field }) => (
+                          <FormItem className="flex items-center space-x-2 space-y-0">
+                            <FormControl>
+                              <Checkbox
+                                checked={field.value?.includes(event.value)}
+                                onCheckedChange={(checked) => {
+                                  if (checked) {
+                                    field.onChange([...field.value, event.value]);
+                                  } else {
+                                    field.onChange(field.value?.filter((v) => v !== event.value));
+                                  }
+                                }}
+                              />
+                            </FormControl>
+                            <FormLabel className="font-normal text-sm">{event.label}</FormLabel>
+                          </FormItem>
+                        )}
+                      />
+                    ))}
+                  </div>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <FormField
+              control={form.control}
+              name="description"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Description (optional)</FormLabel>
+                  <FormControl>
+                    <Textarea
+                      placeholder="Add a description..."
+                      {...field}
+                      value={field.value ?? ""}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+            <DialogFooter className="flex gap-2 sm:justify-between">
+              <Button
+                className="hidden md:block"
+                disabled={updateWebhookStatus === "pending"}
+                onClick={onClose}
+                type="button"
+                variant="outline"
+              >
+                Cancel
+              </Button>
+              <Button disabled={updateWebhookStatus === "pending"} type="submit">
+                {updateWebhookStatus === "pending" ? "Saving..." : "Save Changes"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-delivery-attempt-timeline.tsx b/apps/www/src/features/studio/webhooks/webhook-delivery-attempt-timeline.tsx
new file mode 100644
index 000000000..eeb1873c1
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-delivery-attempt-timeline.tsx
@@ -0,0 +1,99 @@
+"use client";
+
+import type { WebhookDeliveryAttempt } from "@voidhash/rpc";
+import {
+  Badge,
+  cn,
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger,
+} from "@voidhash/ui";
+import { format } from "date-fns";
+import { ChevronDownIcon } from "lucide-react";
+
+interface WebhookDeliveryAttemptTimelineProps {
+  attempts: (typeof WebhookDeliveryAttempt.Type)[];
+}
+
+export function WebhookDeliveryAttemptTimeline({ attempts }: WebhookDeliveryAttemptTimelineProps) {
+  // Sort by attempt number descending (most recent first)
+  const sortedAttempts = [...attempts].sort((a, b) => b.attemptNumber - a.attemptNumber);
+
+  if (sortedAttempts.length === 0) {
+    return (
+      <div className="flex h-full flex-col items-center justify-center py-6">
+        <div className="text-muted-foreground">No delivery attempts yet.</div>
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-0">
+      {sortedAttempts.map((attempt, index) => (
+        <Collapsible key={attempt.id}>
+          <div className="relative pl-6">
+            {/* Timeline connector */}
+            {index < sortedAttempts.length - 1 && (
+              <div className="absolute top-6 bottom-0 left-[7px] w-px bg-border" />
+            )}
+
+            {/* Status indicator dot */}
+            <div
+              className={cn(
+                "absolute left-0 top-1.5 h-4 w-4 rounded-full border-2 bg-background",
+                attempt.succeeded ? "border-green-500" : "border-destructive",
+              )}
+            />
+
+            {/* Attempt content */}
+            <CollapsibleTrigger className="flex w-full items-center justify-between py-3 text-left hover:bg-accent/30 -ml-6 pl-6 pr-4 rounded-md">
+              <div>
+                <div className="flex items-center gap-2">
+                  <p className="font-medium">Attempt #{attempt.attemptNumber}</p>
+                  {attempt.succeeded ? (
+                    <Badge variant="default">Success</Badge>
+                  ) : (
+                    <Badge variant="destructive">Failed</Badge>
+                  )}
+                </div>
+                <p className="mt-1 text-muted-foreground text-sm">
+                  {attempt.createdAt
+                    ? format(attempt.createdAt, "MMM d, yyyy HH:mm:ss")
+                    : "Unknown time"}
+                  {attempt.durationMs && ` - ${attempt.durationMs}ms`}
+                </p>
+              </div>
+              <ChevronDownIcon className="h-4 w-4 text-muted-foreground transition-transform duration-200 [[data-state=open]_&]:rotate-180" />
+            </CollapsibleTrigger>
+
+            <CollapsibleContent className="mt-2 mb-4 ml-0 rounded-md bg-muted p-3 text-sm">
+              {attempt.statusCode && (
+                <p>
+                  <strong>Status Code:</strong> {attempt.statusCode}
+                </p>
+              )}
+              {attempt.errorMessage && (
+                <p className="mt-1">
+                  <strong>Error:</strong> {attempt.errorMessage}
+                </p>
+              )}
+              {attempt.responseBody && (
+                <div className="mt-2">
+                  <p>
+                    <strong>Response:</strong>
+                  </p>
+                  <pre className="mt-1 overflow-auto whitespace-pre-wrap text-xs">
+                    {attempt.responseBody}
+                  </pre>
+                </div>
+              )}
+              {!attempt.statusCode && !attempt.errorMessage && !attempt.responseBody && (
+                <p className="text-muted-foreground">No additional details available.</p>
+              )}
+            </CollapsibleContent>
+          </div>
+        </Collapsible>
+      ))}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-delivery-record-skeleton.tsx b/apps/www/src/features/studio/webhooks/webhook-delivery-record-skeleton.tsx
new file mode 100644
index 000000000..52fc50d21
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-delivery-record-skeleton.tsx
@@ -0,0 +1,21 @@
+import { Skeleton } from "@voidhash/ui";
+
+export function WebhookDeliveryRecordSkeleton() {
+  return (
+    <div className="px-6 py-4">
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="space-y-2">
+            <Skeleton className="h-5 w-36" />
+            <Skeleton className="h-4 w-24" />
+          </div>
+        </div>
+        <div className="flex items-center gap-3">
+          <Skeleton className="h-4 w-20" />
+          <Skeleton className="h-6 w-20 rounded-full" />
+          <Skeleton className="h-4 w-4" />
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-delivery-record.tsx b/apps/www/src/features/studio/webhooks/webhook-delivery-record.tsx
new file mode 100644
index 000000000..c574076c2
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-delivery-record.tsx
@@ -0,0 +1,58 @@
+"use client";
+
+import type { WebhookDelivery } from "@voidhash/rpc";
+import { Link } from "@tanstack/react-router";
+import { formatDistanceToNow } from "date-fns";
+import { ChevronRightIcon } from "lucide-react";
+
+import { getEventLabel } from "./webhook-event-types";
+import { WebhookStatusBadge } from "./webhook-status-badge";
+
+interface WebhookDeliveryRecordProps {
+  delivery: typeof WebhookDelivery.Type;
+  endpointId: string;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+export function WebhookDeliveryRecord({
+  delivery,
+  endpointId,
+  organizationSlug,
+  projectSlug,
+}: WebhookDeliveryRecordProps) {
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      <Link
+        className="absolute inset-0 h-full w-full"
+        params={{
+          deliveryId: delivery.id,
+          endpointId,
+          organizationSlug,
+          projectSlug,
+        }}
+        to="/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId"
+      />
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="min-w-0 flex-1">
+            <p className="font-medium">{getEventLabel(delivery.eventType)}</p>
+            <p className="mt-1 text-muted-foreground text-sm">
+              {formatDistanceToNow(delivery.eventOccurredAt, {
+                addSuffix: true,
+              })}
+            </p>
+          </div>
+        </div>
+        <div className="flex items-center gap-3">
+          <span className="text-muted-foreground text-sm">
+            {delivery.attemptCount} attempt
+            {delivery.attemptCount !== 1 ? "s" : ""}
+          </span>
+          <WebhookStatusBadge status={delivery.status} />
+          <ChevronRightIcon className="h-4 w-4 text-muted-foreground" />
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-delivery-sidebar.tsx b/apps/www/src/features/studio/webhooks/webhook-delivery-sidebar.tsx
new file mode 100644
index 000000000..e6160e322
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-delivery-sidebar.tsx
@@ -0,0 +1,77 @@
+"use client";
+
+import type { WebhookDeliveryWithAttempts } from "@voidhash/rpc";
+import { format } from "date-fns";
+import { CalendarIcon, Clock4Icon, HashIcon, RefreshCwIcon } from "lucide-react";
+
+interface WebhookDeliverySidebarProps {
+  delivery: typeof WebhookDeliveryWithAttempts.Type;
+}
+
+export function WebhookDeliverySidebar({ delivery }: WebhookDeliverySidebarProps) {
+  return (
+    <div className="space-y-6">
+      <div>
+        <h2 className="font-semibold text-xl">Details</h2>
+        <div className="mt-4 space-y-4">
+          <div>
+            <p className="font-semibold text-sm">Attempts</p>
+            <div className="mt-1 flex items-center gap-2">
+              <HashIcon className="h-4 w-4 text-muted-foreground" />
+              <p className="text-muted-foreground text-sm">
+                {delivery.attemptCount} attempt
+                {delivery.attemptCount !== 1 ? "s" : ""}
+              </p>
+            </div>
+          </div>
+
+          {delivery.nextAttemptAt && (
+            <div>
+              <p className="font-semibold text-sm">Next Retry</p>
+              <div className="mt-1 flex items-center gap-2">
+                <RefreshCwIcon className="h-4 w-4 text-muted-foreground" />
+                <p className="text-muted-foreground text-sm">
+                  {format(delivery.nextAttemptAt, "MMM d, yyyy HH:mm")}
+                </p>
+              </div>
+            </div>
+          )}
+
+          <div>
+            <p className="font-semibold text-sm">Event Occurred</p>
+            <div className="mt-1 flex items-center gap-2">
+              <CalendarIcon className="h-4 w-4 text-muted-foreground" />
+              <p className="text-muted-foreground text-sm">
+                {format(delivery.eventOccurredAt, "MMM d, yyyy HH:mm:ss")}
+              </p>
+            </div>
+          </div>
+
+          {delivery.completedAt && (
+            <div>
+              <p className="font-semibold text-sm">Completed</p>
+              <div className="mt-1 flex items-center gap-2">
+                <Clock4Icon className="h-4 w-4 text-muted-foreground" />
+                <p className="text-muted-foreground text-sm">
+                  {format(delivery.completedAt, "MMM d, yyyy HH:mm:ss")}
+                </p>
+              </div>
+            </div>
+          )}
+
+          {delivery.createdAt && (
+            <div>
+              <p className="font-semibold text-sm">Created</p>
+              <div className="mt-1 flex items-center gap-2">
+                <Clock4Icon className="h-4 w-4 text-muted-foreground" />
+                <p className="text-muted-foreground text-sm">
+                  {format(delivery.createdAt, "MMM d, yyyy HH:mm:ss")}
+                </p>
+              </div>
+            </div>
+          )}
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-endpoint-actions-dropdown.tsx b/apps/www/src/features/studio/webhooks/webhook-endpoint-actions-dropdown.tsx
new file mode 100644
index 000000000..8a7d95324
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-endpoint-actions-dropdown.tsx
@@ -0,0 +1,179 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { WebhookEndpoint } from "@voidhash/rpc";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import { EllipsisVerticalIcon, PencilIcon, RefreshCwIcon, SendIcon, TrashIcon } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import {
+  deleteWebhookEndpointOptions,
+  queryKeys,
+  rotateWebhookSecretOptions,
+  testWebhookEndpointOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { EditWebhookModal } from "./edit-webhook-modal";
+import { WebhookSecretRevealModal } from "./webhook-secret-reveal-modal";
+
+interface WebhookEndpointActionsDropdownProps {
+  webhook: typeof WebhookEndpoint.Type;
+  projectId: string;
+  onDeleted?: () => void;
+}
+
+export function WebhookEndpointActionsDropdown({
+  webhook,
+  projectId,
+  onDeleted,
+}: WebhookEndpointActionsDropdownProps) {
+  const queryClient = useQueryClient();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+  const [isEditOpen, setIsEditOpen] = useState(false);
+  const [revealSecret, setRevealSecret] = useState<string | null>(null);
+
+  // Delete webhook
+  const { mutate: deleteWebhook, status: deleteWebhookStatus } = useMutation({
+    ...deleteWebhookEndpointOptions(),
+    onError: () => {
+      toast.error("Failed to delete webhook");
+    },
+    onSuccess: () => {
+      toast.success("Webhook deleted successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.list({ projectId }),
+      });
+      onDeleted?.();
+    },
+  });
+
+  const handleDelete = async () => {
+    const res = await openDialog({
+      confirmText: "Delete",
+      description: "Are you sure you want to delete this webhook? This action cannot be undone.",
+      title: "Delete webhook",
+    });
+    if (res) {
+      deleteWebhook({ endpointId: webhook.id });
+    }
+  };
+
+  // Rotate secret
+  const { mutate: rotateSecret, status: rotateSecretStatus } = useMutation({
+    ...rotateWebhookSecretOptions(),
+    onError: () => {
+      toast.error("Failed to rotate secret");
+    },
+    onSuccess: (data) => {
+      toast.success("Secret rotated successfully");
+      setRevealSecret(data.secret);
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.list({ projectId }),
+      });
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.getEndpoint(webhook.id),
+      });
+    },
+  });
+
+  const handleRotateSecret = async () => {
+    const res = await openDialog({
+      confirmText: "Rotate",
+      description:
+        "Are you sure you want to rotate this webhook's secret? The old secret will stop working immediately.",
+      title: "Rotate secret",
+    });
+    if (res) {
+      rotateSecret({ endpointId: webhook.id });
+    }
+  };
+
+  // Test webhook
+  const { mutate: testWebhook, status: testWebhookStatus } = useMutation({
+    ...testWebhookEndpointOptions(),
+    onError: () => {
+      toast.error("Failed to send test webhook");
+    },
+    onSuccess: () => {
+      toast.success("Test webhook sent");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.deliveries({
+          projectId,
+          endpointId: webhook.id,
+        }),
+      });
+    },
+  });
+
+  const handleTest = () => {
+    testWebhook({ endpointId: webhook.id });
+  };
+
+  const isLoading =
+    deleteWebhookStatus === "pending" ||
+    rotateSecretStatus === "pending" ||
+    testWebhookStatus === "pending";
+
+  return (
+    <>
+      <DropdownMenu>
+        <DropdownMenuTrigger asChild>
+          <Button className="z-20" disabled={isLoading} size="icon" variant="outline">
+            <EllipsisVerticalIcon className="h-4 w-4" />
+          </Button>
+        </DropdownMenuTrigger>
+        <DropdownMenuContent align="end" className="w-48">
+          <DropdownMenuItem className="cursor-pointer" onClick={() => setIsEditOpen(true)}>
+            <PencilIcon className="mr-2 h-4 w-4" />
+            Edit
+          </DropdownMenuItem>
+          <DropdownMenuItem
+            className="cursor-pointer"
+            disabled={testWebhookStatus === "pending"}
+            onClick={handleTest}
+          >
+            <SendIcon className="mr-2 h-4 w-4" />
+            Send Test
+          </DropdownMenuItem>
+          <DropdownMenuItem
+            className="cursor-pointer"
+            disabled={rotateSecretStatus === "pending"}
+            onClick={handleRotateSecret}
+          >
+            <RefreshCwIcon className="mr-2 h-4 w-4" />
+            Rotate Secret
+          </DropdownMenuItem>
+          <DropdownMenuSeparator />
+          <DropdownMenuItem
+            className="cursor-pointer text-destructive focus:text-destructive"
+            disabled={deleteWebhookStatus === "pending"}
+            onClick={handleDelete}
+          >
+            <TrashIcon className="mr-2 h-4 w-4" />
+            Delete
+          </DropdownMenuItem>
+        </DropdownMenuContent>
+      </DropdownMenu>
+      <ConfirmationDialog />
+      <EditWebhookModal
+        onClose={() => setIsEditOpen(false)}
+        open={isEditOpen}
+        projectId={projectId}
+        webhook={webhook}
+      />
+      <WebhookSecretRevealModal
+        onClose={() => setRevealSecret(null)}
+        open={!!revealSecret}
+        secret={revealSecret}
+      />
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-endpoint-detail-sidebar.tsx b/apps/www/src/features/studio/webhooks/webhook-endpoint-detail-sidebar.tsx
new file mode 100644
index 000000000..c22a87ec6
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-endpoint-detail-sidebar.tsx
@@ -0,0 +1,104 @@
+"use client";
+
+import type { WebhookEndpoint } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui";
+import { format } from "date-fns";
+import { Clock4Icon, CopyIcon, LinkIcon, ZapIcon } from "lucide-react";
+import { toast } from "sonner";
+
+import { getEventLabel } from "./webhook-event-types";
+
+interface WebhookEndpointDetailSidebarProps {
+  endpoint: typeof WebhookEndpoint.Type;
+}
+
+export function WebhookEndpointDetailSidebar({ endpoint }: WebhookEndpointDetailSidebarProps) {
+  const copyToClipboard = (text: string, label: string) => {
+    navigator.clipboard.writeText(text);
+    toast.success(`${label} copied to clipboard`);
+  };
+
+  return (
+    <div className="space-y-6">
+      <div>
+        <h2 className="font-semibold text-xl">Details</h2>
+        <div className="mt-4 space-y-4">
+          <div>
+            <p className="font-semibold text-sm">URL</p>
+            <div className="mt-1 flex items-center gap-2">
+              <LinkIcon className="h-4 w-4 shrink-0 text-muted-foreground" />
+              <p className="truncate text-muted-foreground text-sm">{endpoint.url}</p>
+              <Button
+                className="shrink-0"
+                onClick={() => copyToClipboard(endpoint.url, "URL")}
+                size="icon"
+                variant="ghost"
+              >
+                <CopyIcon className="h-3 w-3" />
+              </Button>
+            </div>
+          </div>
+
+          <div>
+            <p className="font-semibold text-sm">Events</p>
+            <div className="mt-1 flex items-start gap-2">
+              <ZapIcon className="mt-0.5 h-4 w-4 shrink-0 text-muted-foreground" />
+              <div className="text-muted-foreground text-sm">
+                {endpoint.events.map((event) => (
+                  <p key={event}>{getEventLabel(event)}</p>
+                ))}
+              </div>
+            </div>
+          </div>
+
+          {endpoint.consecutiveFailures > 0 && (
+            <div>
+              <p className="font-semibold text-sm">Consecutive Failures</p>
+              <p className="mt-1 text-destructive text-sm">{endpoint.consecutiveFailures}</p>
+            </div>
+          )}
+
+          {endpoint.lastSuccessAt && (
+            <div>
+              <p className="font-semibold text-sm">Last Success</p>
+              <div className="mt-1 flex items-center gap-2">
+                <Clock4Icon className="h-4 w-4 text-muted-foreground" />
+                <p className="text-muted-foreground text-sm">
+                  {format(endpoint.lastSuccessAt, "MMM d, yyyy HH:mm")}
+                </p>
+              </div>
+            </div>
+          )}
+
+          {endpoint.createdAt && (
+            <div>
+              <p className="font-semibold text-sm">Created</p>
+              <div className="mt-1 flex items-center gap-2">
+                <Clock4Icon className="h-4 w-4 text-muted-foreground" />
+                <p className="text-muted-foreground text-sm">
+                  {format(endpoint.createdAt, "MMM d, yyyy")}
+                </p>
+              </div>
+            </div>
+          )}
+        </div>
+      </div>
+
+      <div>
+        <h2 className="font-semibold text-xl">Secret</h2>
+        <div className="mt-2 flex items-center gap-2">
+          <code className="flex-1 truncate rounded bg-muted px-2 py-1 text-sm">
+            {endpoint.secret.slice(0, 20)}...
+          </code>
+          <Button
+            onClick={() => copyToClipboard(endpoint.secret, "Secret")}
+            size="icon"
+            variant="ghost"
+          >
+            <CopyIcon className="h-4 w-4" />
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-endpoint-record-skeleton.tsx b/apps/www/src/features/studio/webhooks/webhook-endpoint-record-skeleton.tsx
new file mode 100644
index 000000000..8ebbba49e
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-endpoint-record-skeleton.tsx
@@ -0,0 +1,20 @@
+import { Skeleton } from "@voidhash/ui";
+
+export function WebhookEndpointRecordSkeleton() {
+  return (
+    <div className="px-6 py-4">
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="space-y-2">
+            <Skeleton className="h-5 w-32" />
+            <Skeleton className="h-4 w-48" />
+          </div>
+        </div>
+        <div className="flex items-center gap-2">
+          <Skeleton className="h-6 w-16 rounded-full" />
+          <Skeleton className="h-9 w-9" />
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-endpoint-record.tsx b/apps/www/src/features/studio/webhooks/webhook-endpoint-record.tsx
new file mode 100644
index 000000000..e190274c5
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-endpoint-record.tsx
@@ -0,0 +1,255 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { Link } from "@tanstack/react-router";
+import type { WebhookEndpoint } from "@voidhash/rpc";
+import {
+  Badge,
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+  Tooltip,
+  TooltipContent,
+  TooltipProvider,
+  TooltipTrigger,
+  useConfirmDialog,
+} from "@voidhash/ui";
+import {
+  ChevronRightIcon,
+  CopyIcon,
+  EllipsisVerticalIcon,
+  PencilIcon,
+  RefreshCwIcon,
+  SendIcon,
+  TrashIcon,
+} from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import {
+  deleteWebhookEndpointOptions,
+  queryKeys,
+  rotateWebhookSecretOptions,
+  testWebhookEndpointOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { EditWebhookModal } from "./edit-webhook-modal";
+import { WebhookSecretRevealModal } from "./webhook-secret-reveal-modal";
+
+interface WebhookEndpointRecordProps {
+  webhook: typeof WebhookEndpoint.Type;
+  projectId: string;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+export function WebhookEndpointRecord({
+  webhook,
+  projectId,
+  organizationSlug,
+  projectSlug,
+}: WebhookEndpointRecordProps) {
+  const queryClient = useQueryClient();
+  const { ConfirmationDialog, openDialog } = useConfirmDialog();
+  const [isEditOpen, setIsEditOpen] = useState(false);
+  const [revealSecret, setRevealSecret] = useState<string | null>(null);
+
+  const copyToClipboard = (text: string, label: string) => {
+    navigator.clipboard.writeText(text);
+    toast.success(`${label} copied to clipboard`);
+  };
+
+  // Delete webhook
+  const { mutate: deleteWebhook, status: deleteWebhookStatus } = useMutation({
+    ...deleteWebhookEndpointOptions(),
+    onError: () => {
+      toast.error("Failed to delete webhook");
+    },
+    onSuccess: () => {
+      toast.success("Webhook deleted successfully");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.list({ projectId }),
+      });
+    },
+  });
+
+  const handleDelete = async () => {
+    const res = await openDialog({
+      confirmText: "Delete",
+      description: "Are you sure you want to delete this webhook? This action cannot be undone.",
+      title: "Delete webhook",
+    });
+    if (res) {
+      deleteWebhook({ endpointId: webhook.id });
+    }
+  };
+
+  // Rotate secret
+  const { mutate: rotateSecret, status: rotateSecretStatus } = useMutation({
+    ...rotateWebhookSecretOptions(),
+    onError: () => {
+      toast.error("Failed to rotate secret");
+    },
+    onSuccess: (data) => {
+      toast.success("Secret rotated successfully");
+      setRevealSecret(data.secret);
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.list({ projectId }),
+      });
+    },
+  });
+
+  const handleRotateSecret = async () => {
+    const res = await openDialog({
+      confirmText: "Rotate",
+      description:
+        "Are you sure you want to rotate this webhook's secret? The old secret will stop working immediately.",
+      title: "Rotate secret",
+    });
+    if (res) {
+      rotateSecret({ endpointId: webhook.id });
+    }
+  };
+
+  // Test webhook
+  const { mutate: testWebhook, status: testWebhookStatus } = useMutation({
+    ...testWebhookEndpointOptions(),
+    onError: () => {
+      toast.error("Failed to send test webhook");
+    },
+    onSuccess: () => {
+      toast.success("Test webhook sent");
+    },
+  });
+
+  const handleTest = () => {
+    testWebhook({ endpointId: webhook.id });
+  };
+
+  const statusBadge = {
+    active: <Badge variant="default">Active</Badge>,
+    disabled: <Badge variant="secondary">Disabled</Badge>,
+    failed: <Badge variant="destructive">Failed</Badge>,
+  };
+
+  const isLoading =
+    deleteWebhookStatus === "pending" ||
+    rotateSecretStatus === "pending" ||
+    testWebhookStatus === "pending";
+
+  return (
+    <div className="group relative isolate px-6 py-4 hover:bg-accent/30">
+      <Link
+        className="absolute inset-0 z-10"
+        params={{
+          endpointId: webhook.id,
+          organizationSlug,
+          projectSlug,
+        }}
+        to="/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId"
+      />
+      <div className="flex flex-row items-center justify-between">
+        <div className="flex flex-1 items-start gap-4">
+          <div className="min-w-0 flex-1">
+            <div className="flex items-center gap-2">
+              <p className="font-medium">{webhook.name}</p>
+              {statusBadge[webhook.status]}
+            </div>
+            <TooltipProvider>
+              <Tooltip>
+                <TooltipTrigger asChild>
+                  <button
+                    className="relative z-20 mt-1 max-w-xs cursor-pointer truncate text-left text-muted-foreground text-sm"
+                    onClick={() => copyToClipboard(webhook.url, "URL")}
+                    type="button"
+                  >
+                    {webhook.url}
+                  </button>
+                </TooltipTrigger>
+                <TooltipContent>
+                  <p>Click to copy URL</p>
+                </TooltipContent>
+              </Tooltip>
+            </TooltipProvider>
+            <p className="mt-1 text-muted-foreground text-xs">
+              {webhook.events.length} event
+              {webhook.events.length !== 1 ? "s" : ""} subscribed
+            </p>
+          </div>
+        </div>
+        <div className="flex items-center gap-2">
+          <ChevronRightIcon className="h-4 w-4 text-muted-foreground" />
+          <TooltipProvider>
+            <Tooltip>
+              <TooltipTrigger asChild>
+                <Button
+                  disabled={isLoading}
+                  onClick={() => copyToClipboard(webhook.secret, "Secret")}
+                  size="icon"
+                  variant="ghost"
+                >
+                  <CopyIcon className="h-4 w-4" />
+                </Button>
+              </TooltipTrigger>
+              <TooltipContent>
+                <p>Copy secret</p>
+              </TooltipContent>
+            </Tooltip>
+          </TooltipProvider>
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button className="z-20" disabled={isLoading} size="icon" variant="outline">
+                <EllipsisVerticalIcon className="h-4 w-4" />
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="end" className="w-48">
+              <DropdownMenuItem className="cursor-pointer" onClick={() => setIsEditOpen(true)}>
+                <PencilIcon className="mr-2 h-4 w-4" />
+                Edit
+              </DropdownMenuItem>
+              <DropdownMenuItem
+                className="cursor-pointer"
+                disabled={testWebhookStatus === "pending"}
+                onClick={handleTest}
+              >
+                <SendIcon className="mr-2 h-4 w-4" />
+                Send Test
+              </DropdownMenuItem>
+              <DropdownMenuItem
+                className="cursor-pointer"
+                disabled={rotateSecretStatus === "pending"}
+                onClick={handleRotateSecret}
+              >
+                <RefreshCwIcon className="mr-2 h-4 w-4" />
+                Rotate Secret
+              </DropdownMenuItem>
+              <DropdownMenuSeparator />
+              <DropdownMenuItem
+                className="cursor-pointer text-destructive focus:text-destructive"
+                disabled={deleteWebhookStatus === "pending"}
+                onClick={handleDelete}
+              >
+                <TrashIcon className="mr-2 h-4 w-4" />
+                Delete
+              </DropdownMenuItem>
+            </DropdownMenuContent>
+          </DropdownMenu>
+        </div>
+      </div>
+      <ConfirmationDialog />
+      <EditWebhookModal
+        onClose={() => setIsEditOpen(false)}
+        open={isEditOpen}
+        projectId={projectId}
+        webhook={webhook}
+      />
+      <WebhookSecretRevealModal
+        onClose={() => setRevealSecret(null)}
+        open={!!revealSecret}
+        secret={revealSecret}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-event-types.ts b/apps/www/src/features/studio/webhooks/webhook-event-types.ts
new file mode 100644
index 000000000..2c04bb8fa
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-event-types.ts
@@ -0,0 +1,18 @@
+export const WEBHOOK_EVENT_OPTIONS = [
+  { label: "Person Created", value: "person.created" },
+  { label: "Person Updated", value: "person.updated" },
+  { label: "Person Deleted", value: "person.deleted" },
+  { label: "Subscription Created", value: "subscription.created" },
+  { label: "Subscription Renewed", value: "subscription.renewed" },
+  { label: "Subscription Cancelled", value: "subscription.cancelled" },
+  { label: "Subscription Expired", value: "subscription.expired" },
+  { label: "Purchase Completed", value: "purchase.completed" },
+  { label: "Purchase Refunded", value: "purchase.refunded" },
+] as const;
+
+export type WebhookEventValue = (typeof WEBHOOK_EVENT_OPTIONS)[number]["value"];
+
+export const getEventLabel = (value: string): string => {
+  const option = WEBHOOK_EVENT_OPTIONS.find((opt) => opt.value === value);
+  return option?.label ?? value;
+};
diff --git a/apps/www/src/features/studio/webhooks/webhook-payload-viewer.tsx b/apps/www/src/features/studio/webhooks/webhook-payload-viewer.tsx
new file mode 100644
index 000000000..e8ede769f
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-payload-viewer.tsx
@@ -0,0 +1,30 @@
+"use client";
+
+import { Button, cn } from "@voidhash/ui";
+import { CopyIcon } from "lucide-react";
+import { toast } from "sonner";
+
+interface WebhookPayloadViewerProps {
+  payload: unknown;
+  className?: string;
+}
+
+export function WebhookPayloadViewer({ payload, className }: WebhookPayloadViewerProps) {
+  const formattedJson = JSON.stringify(payload, null, 2);
+
+  const copyPayload = () => {
+    navigator.clipboard.writeText(formattedJson);
+    toast.success("Payload copied to clipboard");
+  };
+
+  return (
+    <div className={cn("relative", className)}>
+      <Button className="absolute top-2 right-2" onClick={copyPayload} size="icon" variant="ghost">
+        <CopyIcon className="h-4 w-4" />
+      </Button>
+      <pre className="overflow-auto rounded-md bg-muted p-4 text-sm">
+        <code>{formattedJson}</code>
+      </pre>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-secret-reveal-modal.tsx b/apps/www/src/features/studio/webhooks/webhook-secret-reveal-modal.tsx
new file mode 100644
index 000000000..fb5c6040d
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-secret-reveal-modal.tsx
@@ -0,0 +1,52 @@
+"use client";
+
+import {
+  Button,
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  Input,
+} from "@voidhash/ui";
+import { CopyIcon } from "lucide-react";
+import { toast } from "sonner";
+
+interface WebhookSecretRevealModalProps {
+  open: boolean;
+  onClose: () => void;
+  secret: string | null;
+}
+
+export function WebhookSecretRevealModal({ open, onClose, secret }: WebhookSecretRevealModalProps) {
+  const copyToClipboard = () => {
+    if (secret) {
+      navigator.clipboard.writeText(secret);
+      toast.success("Secret copied to clipboard");
+    }
+  };
+
+  return (
+    <Dialog onOpenChange={(isOpen) => !isOpen && onClose()} open={open}>
+      <DialogContent className="max-w-md" hideCloseButton>
+        <DialogHeader>
+          <DialogTitle>Webhook Secret</DialogTitle>
+        </DialogHeader>
+        <div className="space-y-4 py-4">
+          <p className="text-muted-foreground text-sm">
+            Copy this secret and store it securely. You will need it to verify webhook signatures.
+          </p>
+          <div className="flex gap-2">
+            <Input className="font-mono text-sm" readOnly value={secret ?? ""} />
+            <Button onClick={copyToClipboard} size="icon" variant="outline">
+              <CopyIcon className="h-4 w-4" />
+            </Button>
+          </div>
+        </div>
+        <DialogFooter>
+          <Button onClick={onClose}>Done</Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhook-status-badge.tsx b/apps/www/src/features/studio/webhooks/webhook-status-badge.tsx
new file mode 100644
index 000000000..d1d2fea17
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhook-status-badge.tsx
@@ -0,0 +1,31 @@
+import { Badge } from "@voidhash/ui";
+
+type EndpointStatus = "active" | "disabled" | "failed";
+type DeliveryStatus = "pending" | "in_progress" | "succeeded" | "failed" | "exhausted";
+
+interface WebhookStatusBadgeProps {
+  status: EndpointStatus | DeliveryStatus;
+  className?: string;
+}
+
+const statusConfig: Record<
+  EndpointStatus | DeliveryStatus,
+  { label: string; variant: "default" | "secondary" | "destructive" }
+> = {
+  active: { label: "Active", variant: "default" },
+  disabled: { label: "Disabled", variant: "secondary" },
+  failed: { label: "Failed", variant: "destructive" },
+  pending: { label: "Pending", variant: "secondary" },
+  in_progress: { label: "In Progress", variant: "default" },
+  succeeded: { label: "Succeeded", variant: "default" },
+  exhausted: { label: "Exhausted", variant: "destructive" },
+};
+
+export function WebhookStatusBadge({ status, className }: WebhookStatusBadgeProps) {
+  const config = statusConfig[status];
+  return (
+    <Badge className={className} variant={config.variant}>
+      {config.label}
+    </Badge>
+  );
+}
diff --git a/apps/www/src/features/studio/webhooks/webhooks-page-empty-state.tsx b/apps/www/src/features/studio/webhooks/webhooks-page-empty-state.tsx
new file mode 100644
index 000000000..2c173b340
--- /dev/null
+++ b/apps/www/src/features/studio/webhooks/webhooks-page-empty-state.tsx
@@ -0,0 +1,27 @@
+"use client";
+
+import { Card } from "@voidhash/ui";
+import { WebhookIcon } from "lucide-react";
+
+import { CreateWebhookModalButton } from "./create-webhook-modal-button";
+
+interface WebhooksPageEmptyStateProps {
+  projectId: string;
+}
+
+export function WebhooksPageEmptyState({ projectId }: WebhooksPageEmptyStateProps) {
+  return (
+    <Card className="flex flex-col items-center justify-center p-12 text-center">
+      <div className="flex h-12 w-12 items-center justify-center rounded-full bg-muted">
+        <WebhookIcon className="h-6 w-6 text-muted-foreground" />
+      </div>
+      <h3 className="mt-4 font-medium text-lg">No webhooks configured</h3>
+      <p className="mt-2 max-w-sm text-muted-foreground text-sm">
+        Webhooks allow you to receive real-time notifications when events occur in your project.
+      </p>
+      <div className="mt-6">
+        <CreateWebhookModalButton projectId={projectId} />
+      </div>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/www/button.tsx b/apps/www/src/features/www/button.tsx
new file mode 100644
index 000000000..e1b228b1f
--- /dev/null
+++ b/apps/www/src/features/www/button.tsx
@@ -0,0 +1,59 @@
+import type * as React from "react";
+
+import { Slot } from "@radix-ui/react-slot";
+import { type VariantProps, cva } from "class-variance-authority";
+
+import { cn } from "@/lib/utils";
+
+const buttonVariants = cva(
+  "inline-flex shrink-0 cursor-pointer items-center justify-center gap-2 whitespace-nowrap rounded-md font-medium text-sm outline-none transition-all focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+  {
+    defaultVariants: {
+      size: "default",
+      variant: "default",
+    },
+    variants: {
+      size: {
+        default: "h-9 px-4 py-2 has-[>svg]:px-3",
+        icon: "size-9",
+        lg: "h-10 rounded-md px-6 has-[>svg]:px-4",
+        sm: "h-8 gap-1.5 rounded-md px-3 has-[>svg]:px-2.5",
+      },
+      variant: {
+        default: "bg-primary text-primary-foreground shadow-xs hover:bg-primary/90",
+        destructive:
+          "bg-destructive text-white shadow-xs hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:bg-destructive/60 dark:focus-visible:ring-destructive/40",
+        ghost: "hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
+        link: "text-primary underline-offset-4 hover:underline",
+        outline:
+          "border bg-card shadow-xs hover:bg-accent hover:text-accent-foreground dark:border-border dark:bg-input/30 dark:hover:bg-input/80",
+        secondary: "bg-secondary text-secondary-foreground shadow-xs hover:bg-secondary/80",
+        success:
+          "bg-success text-success-foreground shadow-xs hover:bg-success/90 focus-visible:ring-success/20 dark:focus-visible:ring-success/40 ",
+      },
+    },
+  },
+);
+
+function Button({
+  className,
+  variant,
+  size,
+  asChild = false,
+  ...props
+}: React.ComponentProps<"button"> &
+  VariantProps<typeof buttonVariants> & {
+    asChild?: boolean;
+  }) {
+  const Comp = asChild ? Slot : "button";
+
+  return (
+    <Comp
+      className={cn(buttonVariants({ className, size, variant }))}
+      data-slot="button"
+      {...props}
+    />
+  );
+}
+
+export { Button, buttonVariants };
diff --git a/apps/www/src/features/www/hero/footer.tsx b/apps/www/src/features/www/hero/footer.tsx
new file mode 100644
index 000000000..1d3a34d57
--- /dev/null
+++ b/apps/www/src/features/www/hero/footer.tsx
@@ -0,0 +1,61 @@
+import { Logo } from "../logo";
+
+export function Footer() {
+  return (
+    <footer className="flex w-full max-w-7xl flex-col md:mx-auto">
+      <div className="w-full">
+        <div className="flex w-full justify-between px-4 py-12">
+          <p className="text-center text-muted-foreground text-sm">
+            &copy; {new Date().getFullYear()} Voidhash s.r.o. All rights reserved.
+          </p>
+          <div className="flex gap-9 ">
+            <a
+              className="text-muted-foreground hover:text-foreground"
+              href="https://x.com/voidhashcom"
+              rel="noopener noreferrer"
+              target="_blank"
+            >
+              <svg
+                className="h-6"
+                fill="none"
+                viewBox="0 0 1200 1227"
+                xmlns="http://www.w3.org/2000/svg"
+              >
+                <title>X.com (Twitter) Logo</title>
+                <path
+                  d="M714.163 519.284 1160.89 0h-105.86L667.137 450.887 357.328 0H0l468.492 681.821L0 1226.37h105.866l409.625-476.152 327.181 476.152H1200L714.137 519.284h.026ZM569.165 687.828l-47.468-67.894-377.686-540.24h162.604l304.797 435.991 47.468 67.894 396.2 566.721H892.476L569.165 687.854v-.026Z"
+                  fill="currentColor"
+                />
+              </svg>
+            </a>
+            <a
+              className="text-muted-foreground hover:text-foreground"
+              href="https://github.com/voidhashcom/voidhash"
+              rel="noopener noreferrer"
+              target="_blank"
+            >
+              <svg
+                className="h-6"
+                fill="none"
+                viewBox="0 0 1024 1024"
+                xmlns="http://www.w3.org/2000/svg"
+              >
+                <title>GitHub Logo</title>
+                <path
+                  clipRule="evenodd"
+                  d="M8 0C3.58 0 0 3.58 0 8C0 11.54 2.29 14.53 5.47 15.59C5.87 15.66 6.02 15.42 6.02 15.21C6.02 15.02 6.01 14.39 6.01 13.72C4 14.09 3.48 13.23 3.32 12.78C3.23 12.55 2.84 11.84 2.5 11.65C2.22 11.5 1.82 11.13 2.49 11.12C3.12 11.11 3.57 11.7 3.72 11.94C4.44 13.15 5.59 12.81 6.05 12.6C6.12 12.08 6.33 11.73 6.56 11.53C4.78 11.33 2.92 10.64 2.92 7.58C2.92 6.71 3.23 5.99 3.74 5.43C3.66 5.23 3.38 4.41 3.82 3.31C3.82 3.31 4.49 3.1 6.02 4.13C6.66 3.95 7.34 3.86 8.02 3.86C8.7 3.86 9.38 3.95 10.02 4.13C11.55 3.09 12.22 3.31 12.22 3.31C12.66 4.41 12.38 5.23 12.3 5.43C12.81 5.99 13.12 6.7 13.12 7.58C13.12 10.65 11.25 11.33 9.47 11.53C9.76 11.78 10.01 12.26 10.01 13.01C10.01 14.08 10 14.94 10 15.21C10 15.42 10.15 15.67 10.55 15.59C13.71 14.53 16 11.53 16 8C16 3.58 12.42 0 8 0Z"
+                  fill="currentColor"
+                  fillRule="evenodd"
+                  transform="scale(64)"
+                />
+              </svg>
+            </a>
+          </div>
+        </div>
+        <div className="pb-12">
+          <Logo className="h-auto w-full text-muted dark:text-muted" />
+        </div>
+      </div>
+    </footer>
+  );
+}
diff --git a/apps/www/src/features/www/hero/hero.tsx b/apps/www/src/features/www/hero/hero.tsx
new file mode 100644
index 000000000..a26b6fc25
--- /dev/null
+++ b/apps/www/src/features/www/hero/hero.tsx
@@ -0,0 +1,72 @@
+"use client";
+// import { ChevronRight } from 'lucide-react';
+
+import { VoidhashGradientBackground } from "@/components/voidhash-gradient-background";
+
+import { Button } from "../button";
+// import { Button } from '../button';
+import { SectionContainer } from "../section/section-container";
+
+export function Hero() {
+  return (
+    <SectionContainer className="w-full">
+      <section className="relative isolate flex min-h-[760px] flex-col items-center overflow-hidden pt-26 sm:min-h-[780px] lg:min-h-[820px]">
+        <div className="absolute inset-x-0 bottom-0 z-0 h-[430px] sm:h-[470px] lg:h-[520px]">
+          <VoidhashGradientBackground
+            controlsQueryParam="heroControls"
+            controlsStorageKey="voidhash:hero-three-controls"
+            controlsTitle="Hero FX"
+            settingsStorageKey="voidhash:hero-three-settings"
+          />
+        </div>
+
+        <div className="relative z-10 flex flex-col items-center justify-center">
+          <div className="rounded-full border border-border bg-card px-4 py-1 font-semibold text-muted-foreground text-sm">
+            Closed Alpha Preview - Now Available
+          </div>
+          <h1 className="mt-6 max-w-xl text-balance text-center font-semibold text-5xl leading-tight tracking-tight">
+            Add in-app purchases to React Native in seconds.
+          </h1>
+          <p className="mt-4 max-w-2xl text-balance text-center text-muted-foreground">
+            Voidhash is an open-source subscription management platform for React Native that allows
+            you to integrate Google Play and App Store purchases with single command.
+          </p>
+          <div className="mt-10 flex w-full items-center justify-center gap-4">
+            <form
+              action="https://formspree.io/f/mpwjvpve"
+              aria-label="Join waitlist"
+              className="flex w-full max-w-md flex-col items-center gap-2 rounded-xl border bg-card p-1 sm:flex-row"
+              method="POST"
+            >
+              <label className="sr-only" htmlFor="waitlist-email">
+                Email address
+              </label>
+              <input
+                aria-label="Email address"
+                autoComplete="email"
+                className="flex-1 rounded-md bg-background px-4 py-2 text-base text-foreground placeholder:text-muted-foreground focus:border-primary focus:outline-none"
+                id="waitlist-email"
+                name="email"
+                placeholder="Enter your email"
+                required
+                type="email"
+              />
+
+              <Button className="w-full sm:w-auto" type="submit">
+                Join Waitlist
+              </Button>
+            </form>
+            {/* <Button>
+              <span>Get Started</span>
+              <ChevronRight className="size-4 opacity-50" />
+            </Button>
+            <Button variant="ghost">
+              <span>Documentation</span>
+              <ChevronRight className="size-4 opacity-50" />
+            </Button> */}
+          </div>
+        </div>
+      </section>
+    </SectionContainer>
+  );
+}
diff --git a/apps/www/src/features/www/logo.tsx b/apps/www/src/features/www/logo.tsx
new file mode 100644
index 000000000..385c804d2
--- /dev/null
+++ b/apps/www/src/features/www/logo.tsx
@@ -0,0 +1,92 @@
+import type { SVGProps } from "react";
+
+import { cn } from "@/lib/utils";
+
+export const Logo = ({
+  className,
+  variant = "default",
+  color = "mono",
+}: SVGProps<SVGSVGElement> & {
+  variant?: "default" | "short" | "symbol";
+  color?: "dual-tone" | "mono";
+}) => {
+  const symbolColor = color === "dual-tone" ? "#005EFF" : "currentColor";
+  if (variant === "short") {
+    return (
+      <svg
+        className={cn("h-4 text-black dark:text-white", className)}
+        fill="none"
+        viewBox="0 0 321 108"
+        xmlns="http://www.w3.org/2000/svg"
+      >
+        <title>Voidhash</title>
+        <path
+          d="M12.419 22.23L30.689 73.473L48.785 22.23H58.877L36.518 84H24.773L2.414 22.23H12.419ZM79.7183 85.044C75.3103 85.044 71.4533 84.058 68.1473 82.086C64.8413 80.114 62.2603 77.33 60.4043 73.734C58.6063 70.08 57.7073 65.817 57.7073 60.945C57.7073 56.073 58.6063 51.839 60.4043 48.243C62.2603 44.589 64.8413 41.776 68.1473 39.804C71.4533 37.832 75.3103 36.846 79.7183 36.846C84.0683 36.846 87.8963 37.832 91.2023 39.804C94.5083 41.776 97.0603 44.589 98.8583 48.243C100.714 51.839 101.642 56.073 101.642 60.945C101.642 65.817 100.714 70.08 98.8583 73.734C97.0603 77.33 94.5083 80.114 91.2023 82.086C87.8963 84.058 84.0683 85.044 79.7183 85.044ZM79.7183 77.04C83.6043 77.04 86.6203 75.619 88.7663 72.777C90.9703 69.935 92.0723 65.991 92.0723 60.945C92.0723 55.899 90.9703 51.955 88.7663 49.113C86.6203 46.271 83.6043 44.85 79.7183 44.85C75.8323 44.85 72.7873 46.271 70.5833 49.113C68.3793 51.897 67.2773 55.841 67.2773 60.945C67.2773 66.049 68.3793 70.022 70.5833 72.864C72.7873 75.648 75.8323 77.04 79.7183 77.04ZM117.058 37.89V84H107.836V37.89H117.058ZM117.319 22.317V31.104H107.662V22.317H117.319ZM158.286 22.23H167.508V84H158.895L158.634 77.388C157.3 79.766 155.357 81.651 152.805 83.043C150.253 84.377 147.411 85.044 144.279 85.044C140.335 85.044 136.884 84.058 133.926 82.086C130.968 80.114 128.706 77.33 127.14 73.734C125.574 70.08 124.791 65.817 124.791 60.945C124.791 56.073 125.574 51.839 127.14 48.243C128.706 44.589 130.968 41.776 133.926 39.804C136.884 37.832 140.335 36.846 144.279 36.846C147.295 36.846 150.05 37.484 152.544 38.76C155.038 40.036 156.952 41.805 158.286 44.067V22.23ZM157.416 69.471C158.46 67.035 158.982 64.193 158.982 60.945C158.982 57.639 158.46 54.739 157.416 52.245C156.43 49.751 155.009 47.837 153.153 46.503C151.297 45.169 149.122 44.502 146.628 44.502C142.858 44.502 139.871 46.01 137.667 49.026C135.463 51.984 134.361 55.957 134.361 60.945C134.361 65.875 135.463 69.819 137.667 72.777C139.929 75.677 142.916 77.127 146.628 77.127C149.122 77.127 151.297 76.46 153.153 75.126C155.009 73.792 156.43 71.907 157.416 69.471Z"
+          fill="currentColor"
+        />
+        <path
+          d="M316.143 23.5C318.549 23.5 320.5 25.4508 320.5 27.8571V49.6429C320.5 52.0492 318.549 54 316.143 54H290V80.1429C290 82.5492 288.049 84.5 285.643 84.5H263.857C261.451 84.5 259.5 82.5492 259.5 80.1429V54L290 23.5H316.143Z"
+          fill={symbolColor}
+        />
+        <path
+          d="M229 84.5L259.5 54V27.8571C259.5 25.4508 257.549 23.5 255.143 23.5H233.357C230.951 23.5 229 25.4508 229 27.8571V54H202.857C200.451 54 198.5 55.9508 198.5 58.3571V80.1429C198.5 82.5492 200.451 84.5 202.857 84.5H229Z"
+          fill={symbolColor}
+        />
+      </svg>
+    );
+  }
+
+  if (variant === "symbol") {
+    return (
+      <svg
+        className={cn("h-4 text-black dark:text-white", className)}
+        fill="none"
+        viewBox="0 0 112 56"
+        xmlns="http://www.w3.org/2000/svg"
+      >
+        <title>Voidhash</title>
+        <path
+          d="M112 4C112 1.79086 110.209 0 108 0H84V28H108C110.209 28 112 26.2091 112 24V4Z"
+          fill={symbolColor}
+        />
+        <path
+          d="M84 28H56V52C56 54.2091 57.7909 56 60 56H80C82.2091 56 84 54.2091 84 52V28Z"
+          fill={symbolColor}
+        />
+        <path d="M84 0L56 28H84V0Z" fill={symbolColor} />
+        <path
+          d="M0 52C0 54.2091 1.79086 56 4 56H28V28H4C1.79086 28 0 29.7909 0 32V52Z"
+          fill={symbolColor}
+        />
+        <path
+          d="M28 28H56V4C56 1.79086 54.2091 0 52 0H32C29.7909 0 28 1.79086 28 4V28Z"
+          fill={symbolColor}
+        />
+        <path d="M28 56L56 28H28V56Z" fill={symbolColor} />
+      </svg>
+    );
+  }
+
+  return (
+    <svg
+      className={cn("h-6 text-black dark:text-white", className)}
+      fill="none"
+      viewBox="0 0 505 108"
+      xmlns="http://www.w3.org/2000/svg"
+    >
+      <title>Voidhash</title>
+      <path
+        d="M11.919 22.23L30.189 73.473L48.285 22.23H58.377L36.018 84H24.273L1.914 22.23H11.919ZM79.2183 85.044C74.8103 85.044 70.9533 84.058 67.6473 82.086C64.3413 80.114 61.7603 77.33 59.9043 73.734C58.1063 70.08 57.2073 65.817 57.2073 60.945C57.2073 56.073 58.1063 51.839 59.9043 48.243C61.7603 44.589 64.3413 41.776 67.6473 39.804C70.9533 37.832 74.8103 36.846 79.2183 36.846C83.5683 36.846 87.3963 37.832 90.7023 39.804C94.0083 41.776 96.5603 44.589 98.3583 48.243C100.214 51.839 101.142 56.073 101.142 60.945C101.142 65.817 100.214 70.08 98.3583 73.734C96.5603 77.33 94.0083 80.114 90.7023 82.086C87.3963 84.058 83.5683 85.044 79.2183 85.044ZM79.2183 77.04C83.1043 77.04 86.1203 75.619 88.2663 72.777C90.4703 69.935 91.5723 65.991 91.5723 60.945C91.5723 55.899 90.4703 51.955 88.2663 49.113C86.1203 46.271 83.1043 44.85 79.2183 44.85C75.3323 44.85 72.2873 46.271 70.0833 49.113C67.8793 51.897 66.7773 55.841 66.7773 60.945C66.7773 66.049 67.8793 70.022 70.0833 72.864C72.2873 75.648 75.3323 77.04 79.2183 77.04ZM116.558 37.89V84H107.336V37.89H116.558ZM116.819 22.317V31.104H107.162V22.317H116.819ZM157.786 22.23H167.008V84H158.395L158.134 77.388C156.8 79.766 154.857 81.651 152.305 83.043C149.753 84.377 146.911 85.044 143.779 85.044C139.835 85.044 136.384 84.058 133.426 82.086C130.468 80.114 128.206 77.33 126.64 73.734C125.074 70.08 124.291 65.817 124.291 60.945C124.291 56.073 125.074 51.839 126.64 48.243C128.206 44.589 130.468 41.776 133.426 39.804C136.384 37.832 139.835 36.846 143.779 36.846C146.795 36.846 149.55 37.484 152.044 38.76C154.538 40.036 156.452 41.805 157.786 44.067V22.23ZM156.916 69.471C157.96 67.035 158.482 64.193 158.482 60.945C158.482 57.639 157.96 54.739 156.916 52.245C155.93 49.751 154.509 47.837 152.653 46.503C150.797 45.169 148.622 44.502 146.128 44.502C142.358 44.502 139.371 46.01 137.167 49.026C134.963 51.984 133.861 55.957 133.861 60.945C133.861 65.875 134.963 69.819 137.167 72.777C139.429 75.677 142.416 77.127 146.128 77.127C148.622 77.127 150.797 76.46 152.653 75.126C154.509 73.792 155.93 71.907 156.916 69.471ZM184.15 22.23V48.243L182.845 47.808C183.715 44.038 185.484 41.283 188.152 39.543C190.82 37.745 194.01 36.846 197.722 36.846C202.478 36.846 206.248 38.441 209.032 41.631C211.874 44.763 213.295 48.997 213.295 54.333V84H204.073V57.639C204.073 53.405 203.348 50.244 201.898 48.156C200.448 46.068 198.186 45.024 195.112 45.024C191.748 45.024 189.08 46.126 187.108 48.33C185.136 50.476 184.15 53.579 184.15 57.639V84H174.928V22.23H184.15ZM220.871 51.723C221.799 47.083 223.974 43.458 227.396 40.848C230.876 38.18 235.284 36.846 240.62 36.846C246.884 36.846 251.669 38.528 254.975 41.892C258.339 45.256 260.021 50.099 260.021 56.421V73.56C260.021 74.72 260.253 75.561 260.717 76.083C261.239 76.547 261.964 76.779 262.892 76.779H264.719V84H261.848L260.804 84.087C258.31 84.029 256.193 83.507 254.453 82.521C252.713 81.477 251.756 79.592 251.582 76.866C250.422 79.244 248.566 81.216 246.014 82.782C243.462 84.29 240.359 85.044 236.705 85.044C231.949 85.044 227.976 83.855 224.786 81.477C221.654 79.099 220.088 75.909 220.088 71.907C220.088 68.949 220.784 66.571 222.176 64.773C223.568 62.975 225.482 61.583 227.918 60.597C230.354 59.611 233.573 58.741 237.575 57.987L250.799 55.377C250.741 51.665 249.871 48.91 248.189 47.112C246.507 45.256 243.984 44.328 240.62 44.328C237.952 44.328 235.748 45.024 234.008 46.416C232.268 47.75 231.079 49.722 230.441 52.332L220.871 51.723ZM229.658 71.733C229.658 73.531 230.412 75.01 231.92 76.17C233.486 77.33 235.748 77.91 238.706 77.91C241.026 77.852 243.114 77.272 244.97 76.17C246.826 75.068 248.276 73.415 249.32 71.211C250.422 68.949 250.973 66.223 250.973 63.033V62.424L241.142 64.164C240.678 64.222 240.214 64.309 239.75 64.425C237.372 64.831 235.516 65.266 234.182 65.73C232.848 66.136 231.746 66.832 230.876 67.818C230.064 68.746 229.658 70.051 229.658 71.733ZM297.609 52.419C297.145 50.041 295.927 48.127 293.955 46.677C291.983 45.227 289.75 44.502 287.256 44.502C284.82 44.502 282.79 45.111 281.166 46.329C279.542 47.489 278.73 49.055 278.73 51.027C278.788 52.883 279.745 54.333 281.601 55.377C283.515 56.363 285.98 57.175 288.996 57.813C293.172 58.567 296.594 59.495 299.262 60.597C301.93 61.641 304.018 63.091 305.526 64.947C307.034 66.745 307.788 69.094 307.788 71.994C307.788 74.836 306.918 77.243 305.178 79.215C303.496 81.187 301.205 82.666 298.305 83.652C295.463 84.58 292.331 85.044 288.909 85.044C285.023 85.044 281.543 84.406 278.469 83.13C275.395 81.854 272.93 80.056 271.074 77.736C269.276 75.358 268.261 72.603 268.029 69.471L277.512 68.862C277.86 70.602 278.498 72.11 279.426 73.386C280.412 74.662 281.688 75.648 283.254 76.344C284.878 77.04 286.734 77.388 288.822 77.388C291.316 77.388 293.491 76.924 295.347 75.996C297.261 75.01 298.218 73.531 298.218 71.559C298.218 70.225 297.812 69.152 297 68.34C296.188 67.528 295.173 66.919 293.955 66.513C292.795 66.107 291.229 65.701 289.257 65.295C288.677 65.121 288.039 64.976 287.343 64.86C283.399 63.99 280.18 63.091 277.686 62.163C275.192 61.177 273.133 59.814 271.509 58.074C269.943 56.334 269.16 54.072 269.16 51.288C269.16 48.33 269.914 45.778 271.422 43.632C272.988 41.428 275.163 39.746 277.947 38.586C280.789 37.426 284.124 36.846 287.952 36.846C292.998 36.846 297.261 38.209 300.741 40.935C304.221 43.661 306.338 47.315 307.092 51.897L297.609 52.419ZM323.217 22.23V48.243L321.912 47.808C322.782 44.038 324.551 41.283 327.219 39.543C329.887 37.745 333.077 36.846 336.789 36.846C341.545 36.846 345.315 38.441 348.099 41.631C350.941 44.763 352.362 48.997 352.362 54.333V84H343.14V57.639C343.14 53.405 342.415 50.244 340.965 48.156C339.515 46.068 337.253 45.024 334.179 45.024C330.815 45.024 328.147 46.126 326.175 48.33C324.203 50.476 323.217 53.579 323.217 57.639V84H313.995V22.23H323.217Z"
+        fill="currentColor"
+      />
+      <path
+        d="M500.643 23.5C503.049 23.5 505 25.4508 505 27.8571V49.6429C505 52.0492 503.049 54 500.643 54H474.5V80.1429C474.5 82.5492 472.549 84.5 470.143 84.5H448.357C445.951 84.5 444 82.5492 444 80.1429V54L474.5 23.5H500.643Z"
+        fill={symbolColor}
+      />
+      <path
+        d="M413.5 84.5L444 54V27.8571C444 25.4508 442.049 23.5 439.643 23.5H417.857C415.451 23.5 413.5 25.4508 413.5 27.8571V54H387.357C384.951 54 383 55.9508 383 58.3571V80.1429C383 82.5492 384.951 84.5 387.357 84.5H413.5Z"
+        fill={symbolColor}
+      />
+    </svg>
+  );
+};
diff --git a/apps/www/src/features/www/navbar/navigation.tsx b/apps/www/src/features/www/navbar/navigation.tsx
new file mode 100644
index 000000000..113c91a51
--- /dev/null
+++ b/apps/www/src/features/www/navbar/navigation.tsx
@@ -0,0 +1,49 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+import { cn } from "@/lib/utils";
+
+// import { Button } from '../button';
+import { Logo } from "../logo";
+
+export function Navigation() {
+  const [isScrolled, setIsScrolled] = useState(false);
+
+  useEffect(() => {
+    const handleScroll = () => {
+      setIsScrolled(window.scrollY > 10);
+    };
+
+    window.addEventListener("scroll", handleScroll);
+    return () => window.removeEventListener("scroll", handleScroll);
+  }, []);
+
+  return (
+    <div>
+      <nav
+        className={cn(
+          "fixed top-0 right-0 left-0 z-50 flex h-16 w-full items-center justify-start bg-background backdrop-blur-sm",
+          isScrolled && "border-border border-b",
+        )}
+      >
+        <div className="mx-auto flex w-full max-w-7xl items-center px-4 py-4">
+          <a href="https://voidhash.com">
+            <Logo className="h-6" />
+          </a>
+          <div className="flex-1" />
+          {/* <div className="flex items-center gap-2">
+            <Button size="sm" variant="outline">
+              Sign in
+            </Button>
+            <Button size="sm">
+              <span>Get Started</span>
+              <ChevronRight className="size-4 opacity-50" />
+            </Button>
+          </div> */}
+        </div>
+      </nav>
+      <div className="h-16" />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/refraction-stripes.tsx b/apps/www/src/features/www/refraction-stripes.tsx
new file mode 100644
index 000000000..9f9bbed7f
--- /dev/null
+++ b/apps/www/src/features/www/refraction-stripes.tsx
@@ -0,0 +1,38 @@
+"use client";
+
+import { useRef } from "react";
+
+import { useContainerDimensions } from "@/hooks/use-container-dimensions";
+
+const IDEAL_STRIPE_WIDTH = 40;
+
+function Stripe({ width, x }: { width: number; x: number }) {
+  return (
+    <div
+      className="absolute top-0 left-0 h-full w-full border-background/50 border-r bg-gradient-to-r from-background/0 to-background/30"
+      style={{
+        left: x,
+        width: width - 1,
+      }}
+    />
+  );
+}
+export function RefractionStripes() {
+  const containerRef = useRef<HTMLDivElement>(null);
+  const { width: containerWidth } = useContainerDimensions(containerRef);
+  const stripeCount = Math.floor(containerWidth / IDEAL_STRIPE_WIDTH);
+  const stripeWidth = containerWidth / Math.max(1, stripeCount);
+
+  return (
+    <div className="absolute z-20 h-full w-full" ref={containerRef}>
+      {Array.from({ length: stripeCount }).map((_, index) => (
+        <Stripe
+          // biome-ignore lint/suspicious/noArrayIndexKey: it is ok
+          key={index}
+          width={stripeWidth}
+          x={index * stripeWidth}
+        />
+      ))}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/section/section-container.tsx b/apps/www/src/features/www/section/section-container.tsx
new file mode 100644
index 000000000..e85a8a198
--- /dev/null
+++ b/apps/www/src/features/www/section/section-container.tsx
@@ -0,0 +1,15 @@
+import { cn } from "@/lib/utils";
+
+export function SectionContainer({
+  children,
+  className,
+}: {
+  children: React.ReactNode;
+  className?: string;
+}) {
+  return (
+    <div className={cn("mx-auto max-w-7xl px-4", className)}>
+      <div className="w-full border border-border/60">{children}</div>
+    </div>
+  );
+}
diff --git a/apps/www/src/hooks/use-container-dimensions.tsx b/apps/www/src/hooks/use-container-dimensions.tsx
new file mode 100644
index 000000000..cad8a805f
--- /dev/null
+++ b/apps/www/src/hooks/use-container-dimensions.tsx
@@ -0,0 +1,30 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+export const useContainerDimensions = (myRef: React.RefObject<HTMLElement | null>) => {
+  const [dimensions, setDimensions] = useState({ height: 0, width: 0 });
+
+  useEffect(() => {
+    const getDimensions = () => ({
+      height: myRef.current?.offsetHeight ?? 0,
+      width: myRef.current?.offsetWidth ?? 0,
+    });
+
+    const handleResize = () => {
+      setDimensions(getDimensions());
+    };
+
+    if (myRef.current) {
+      setDimensions(getDimensions());
+    }
+
+    window.addEventListener("resize", handleResize);
+
+    return () => {
+      window.removeEventListener("resize", handleResize);
+    };
+  }, [myRef]);
+
+  return dimensions;
+};
diff --git a/apps/www/src/lib/create-vite-source.ts b/apps/www/src/lib/create-vite-source.ts
new file mode 100644
index 000000000..263ccd62f
--- /dev/null
+++ b/apps/www/src/lib/create-vite-source.ts
@@ -0,0 +1,95 @@
+import type { MetaData, PageData, Source } from "fumadocs-core/source";
+
+interface DocEntry<Data extends PageData> {
+  readonly base: string;
+  (): Promise<
+    Record<string, unknown> & {
+      readonly default: unknown;
+      readonly extractedReferences?: unknown;
+      readonly lastModified?: Date;
+      readonly _markdown?: string;
+      readonly structuredData?: unknown;
+      readonly toc?: unknown;
+      readonly frontmatter: Data;
+    }
+  >;
+}
+
+interface MetaEntry<Data extends MetaData> {
+  readonly base: string;
+  (): Promise<Data>;
+}
+
+type DocMap<Data extends PageData> = Record<string, DocEntry<Data>>;
+type MetaMap<Data extends MetaData> = Record<string, MetaEntry<Data>>;
+
+const fullPath = (base: string, file: string): string =>
+  `${base.replace(/\/$/, "")}/${file.replace(/^\.\//, "")}`;
+
+/**
+ * Builds a Fumadocs loader source from generated Vite doc and meta maps.
+ */
+export const createViteSource = async <
+  DocOut extends PageData,
+  MetaOut extends MetaData,
+>(
+  doc: DocMap<DocOut>,
+  meta: MetaMap<MetaOut>,
+): Promise<
+  Source<{
+    pageData: DocOut;
+    metaData: MetaOut;
+  }>
+> => {
+  const pageFiles = Object.entries(doc).map(async ([file, content]) => {
+    const entry = await content();
+    const path = fullPath(content.base, file);
+
+    return {
+      absolutePath: path,
+      data: {
+        body: entry.default,
+        extractedReferences: entry.extractedReferences,
+        getText: async () => {
+          if (typeof entry._markdown !== "string") {
+            throw new Error("Processed Markdown is not available for this page");
+          }
+
+          return entry._markdown;
+        },
+        info: {
+          fullPath: path,
+          path: file,
+        },
+        lastModified: entry.lastModified,
+        structuredData: entry.structuredData,
+        toc: entry.toc,
+        _exports: entry,
+        ...entry.frontmatter,
+      } as DocOut,
+      path: file,
+      type: "page" as const,
+    };
+  });
+
+  const metaFiles = Object.entries(meta).map(async ([file, content]) => {
+    const path = fullPath(content.base, file);
+
+    return {
+      absolutePath: path,
+      data: {
+        info: {
+          fullPath: path,
+          path: file,
+        },
+        ...(await content()),
+      },
+      path: file,
+      type: "meta" as const,
+    };
+  });
+
+  return {
+    files: await Promise.all([...pageFiles, ...metaFiles]),
+  };
+};
diff --git a/apps/www/src/lib/effect-query.ts b/apps/www/src/lib/effect-query.ts
new file mode 100644
index 000000000..587cc9e9c
--- /dev/null
+++ b/apps/www/src/lib/effect-query.ts
@@ -0,0 +1,162 @@
+import { QueryClient } from "@tanstack/react-query";
+import { createIsomorphicFn } from "@tanstack/react-start";
+import { getRequestHeaders } from "@tanstack/react-start/server";
+import { Data, Effect, Layer, ManagedRuntime, Context } from "effect";
+import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
+import { RpcClient, RpcClientError, RpcSerialization } from "effect/unstable/rpc";
+import { createEffectQueryFromManagedRuntime } from "effect-query";
+import { RpcGroups } from "@voidhash/rpc";
+
+import { env } from "./env";
+
+const StudioRpcGroups = RpcGroups;
+
+class RpcQueryError extends Data.TaggedError("RpcQueryError")<{
+  readonly cause?: unknown;
+  readonly message: string;
+}> {}
+
+type TaggedError = {
+  readonly _tag: string;
+};
+
+const isTaggedError = (cause: unknown): cause is TaggedError =>
+  typeof cause === "object" &&
+  cause !== null &&
+  "_tag" in cause &&
+  typeof Reflect.get(cause, "_tag") === "string";
+
+const getServerCookieHeader = createIsomorphicFn()
+  .server(() => getRequestHeaders().get("cookie") ?? undefined)
+  .client(() => undefined);
+
+type AccessTokenProvider = () => Promise<string | undefined>;
+
+let browserAccessTokenProvider: AccessTokenProvider | undefined;
+
+export const setBrowserAccessTokenProvider = (provider: AccessTokenProvider | undefined) => {
+  browserAccessTokenProvider = provider;
+};
+
+const getClientAccessToken = async (): Promise<string | undefined> => {
+  if (import.meta.env.SSR) {
+    return undefined;
+  }
+
+  try {
+    return (await browserAccessTokenProvider?.()) ?? undefined;
+  } catch {
+    return undefined;
+  }
+};
+
+const RequestInitLayer = Layer.succeed(
+  FetchHttpClient.RequestInit,
+  FetchHttpClient.RequestInit.of({
+    credentials: "include" as const,
+  }),
+);
+
+/**
+ * Each outbound RPC call gets a fresh `x-request-id` correlation id; the backend
+ * stamps it as `voidhash.request.id` and echoes it back, so a user action can be
+ * quoted in a bug report and found in Axiom.
+ *
+ * We deliberately do NOT send a W3C `traceparent` (nor client RPC span context —
+ * see `disableTracing` on the client below): the browser runs Effect's no-op
+ * tracer and exports no spans, so propagating trace context would only parent the
+ * backend's real, exported spans to a client span that never arrives — surfacing
+ * as a "(missing)" parent in Axiom and splitting one request across two traces.
+ * The backend's `http.server` span is the trace root; `x-request-id` is the
+ * cross-process correlation id. (Re-introduce propagation only once the browser
+ * actually exports its spans.)
+ */
+const withAuthCookie = <E, R>(client: HttpClient.HttpClient.With<E, R>) =>
+  HttpClient.mapRequestEffect(client, (request) =>
+    Effect.promise(async () => {
+      const [cookie, accessToken] = await Promise.all([
+        getServerCookieHeader(),
+        getClientAccessToken(),
+      ]);
+
+      let authenticatedRequest = HttpClientRequest.setHeader(
+        request,
+        "x-request-id",
+        `req_${crypto.randomUUID()}`,
+      );
+
+      if (cookie) {
+        authenticatedRequest = HttpClientRequest.setHeader(
+          authenticatedRequest,
+          "Cookie",
+          cookie,
+        );
+      }
+
+      if (accessToken) {
+        authenticatedRequest = HttpClientRequest.setHeader(
+          authenticatedRequest,
+          "Authorization",
+          `Bearer ${accessToken}`,
+        );
+      }
+
+      return authenticatedRequest;
+    }),
+  );
+
+const getRuntimeApiBaseURL = (): string => env.VITE_APP_API_URL.replace(/\/+$/, "");
+
+export const RpcProtocolLive = RpcClient.layerProtocolHttp({
+  url: `${getRuntimeApiBaseURL()}/rpc`,
+  transformClient: withAuthCookie,
+}).pipe(
+  Layer.provide([
+    FetchHttpClient.layer.pipe(Layer.provide(RequestInitLayer)),
+    RpcSerialization.layerNdjson,
+  ]),
+);
+
+type VoidhashRpcClient = RpcClient.FromGroup<typeof StudioRpcGroups, RpcClientError.RpcClientError>;
+
+export class VoidhashRpc extends Context.Service<VoidhashRpc, VoidhashRpcClient>()(
+  "voidhash/VoidhashRpc",
+  {
+    // `disableTracing` stops the client from minting a per-call RPC span and
+    // propagating its id in the request envelope. The browser's no-op tracer
+    // never exports those spans, so without this the backend's `RpcServer.<tag>`
+    // span parents to a client span that never arrives ("(missing)" parent) and
+    // lands in the client's trace id instead of nesting under `http.server`.
+    // Disabling it lets `RpcServer` fall back to the ambient `http.server` parent.
+    make: RpcClient.make(StudioRpcGroups, {
+      disableTracing: true,
+    }) as Effect.Effect<VoidhashRpcClient>,
+  },
+) {
+  static request<XA, XR>(
+    f: (rpc: VoidhashRpcClient) => Effect.Effect<XA, unknown, XR>,
+  ): Effect.Effect<XA, TaggedError | RpcQueryError, XR | VoidhashRpc> {
+    return super.use(f).pipe(
+      Effect.mapError((cause) =>
+        isTaggedError(cause)
+          ? cause
+          : new RpcQueryError({
+              cause,
+              message: "RPC request failed",
+            }),
+      ),
+    );
+  }
+}
+
+export const LiveLayer = Layer.effect(VoidhashRpc)(VoidhashRpc.make).pipe(
+  Layer.provideMerge(RpcProtocolLive),
+);
+
+export const queryClient = new QueryClient();
+export const managedRuntime = ManagedRuntime.make(LiveLayer);
+export const eq = createEffectQueryFromManagedRuntime(managedRuntime);
+
+export type EffectQueryType = ReturnType<
+  typeof createEffectQueryFromManagedRuntime<typeof LiveLayer>
+>;
diff --git a/apps/www/src/lib/env.ts b/apps/www/src/lib/env.ts
new file mode 100644
index 000000000..8d6285487
--- /dev/null
+++ b/apps/www/src/lib/env.ts
@@ -0,0 +1,21 @@
+import { createEnv } from "@t3-oss/env-core";
+import { z } from "zod";
+
+export const env = createEnv({
+  client: {
+    VITE_APP_API_URL: z.string(),
+    VITE_APP_ENV: z.enum(["development", "preview", "production"]).optional(),
+  },
+  clientPrefix: "VITE_",
+  runtimeEnv: {
+    ...process.env,
+    ...import.meta.env,
+  },
+  server: {
+    EMAIL_FROM: z.string().default("Voidhash <noreply@voidhash.com>"),
+    RESEND_API_KEY: z.string().optional(),
+  },
+  shared: {
+    NODE_ENV: z.enum(["development", "production", "test"]).default("development"),
+  },
+});
diff --git a/apps/www/src/lib/origin.ts b/apps/www/src/lib/origin.ts
new file mode 100644
index 000000000..c4ff94143
--- /dev/null
+++ b/apps/www/src/lib/origin.ts
@@ -0,0 +1,22 @@
+const devFallbackOrigin = "http://localhost:3000";
+
+/**
+ * Returns the origin serving the current app instance.
+ */
+export const getAppOrigin = (request?: Request): string => {
+  if (typeof window !== "undefined") {
+    return window.location.origin;
+  }
+
+  if (request) {
+    return new URL(request.url).origin;
+  }
+
+  return devFallbackOrigin;
+};
+
+/**
+ * Builds an absolute app URL from the current browser origin or a server request.
+ */
+export const getAppUrl = (pathname: string, request?: Request): string =>
+  new URL(pathname, getAppOrigin(request)).toString();
diff --git a/apps/www/src/lib/paths.ts b/apps/www/src/lib/paths.ts
new file mode 100644
index 000000000..3c60b1f91
--- /dev/null
+++ b/apps/www/src/lib/paths.ts
@@ -0,0 +1,4 @@
+export const AUTH_PATH = "/auth";
+export const DOCS_PATH = "/docs";
+export const DESIGN_PATH = "/design";
+export const STUDIO_PATH = "/studio";
diff --git a/apps/www/src/lib/utils.ts b/apps/www/src/lib/utils.ts
new file mode 100644
index 000000000..365058ceb
--- /dev/null
+++ b/apps/www/src/lib/utils.ts
@@ -0,0 +1,6 @@
+import { type ClassValue, clsx } from "clsx";
+import { twMerge } from "tailwind-merge";
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs));
+}
diff --git a/apps/www/src/routeTree.gen.ts b/apps/www/src/routeTree.gen.ts
new file mode 100644
index 000000000..eebdb2669
--- /dev/null
+++ b/apps/www/src/routeTree.gen.ts
@@ -0,0 +1,1757 @@
+/* eslint-disable */
+
+// @ts-nocheck
+
+// noinspection JSUnusedGlobalSymbols
+
+// This file was automatically generated by TanStack Router.
+// You should NOT make any changes in this file as it will be overwritten.
+// Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.
+
+import { Route as rootRouteImport } from './routes/__root'
+import { Route as StudioRouteRouteImport } from './routes/studio/route'
+import { Route as DocsRouteRouteImport } from './routes/docs/route'
+import { Route as DesignRouteRouteImport } from './routes/design/route'
+import { Route as AuthRouteRouteImport } from './routes/auth/route'
+import { Route as MarketingRouteRouteImport } from './routes/_marketing/route'
+import { Route as DocsIndexRouteImport } from './routes/docs/index'
+import { Route as DesignIndexRouteImport } from './routes/design/index'
+import { Route as AuthIndexRouteImport } from './routes/auth/index'
+import { Route as MarketingIndexRouteImport } from './routes/_marketing/index'
+import { Route as DocsSplatRouteImport } from './routes/docs/$'
+import { Route as DesignSplatRouteImport } from './routes/design/$'
+import { Route as AuthVerifyEmailRouteImport } from './routes/auth/verify-email'
+import { Route as AuthSignUpRouteImport } from './routes/auth/sign-up'
+import { Route as AuthResetPasswordRouteImport } from './routes/auth/reset-password'
+import { Route as AuthLogoutRouteImport } from './routes/auth/logout'
+import { Route as AuthLoginRouteImport } from './routes/auth/login'
+import { Route as AuthForgotPasswordRouteImport } from './routes/auth/forgot-password'
+import { Route as StudioAuthenticatedRouteRouteImport } from './routes/studio/_authenticated/route'
+import { Route as StudioAuthenticatedIndexRouteImport } from './routes/studio/_authenticated/index'
+import { Route as AuthDevicesIndexRouteImport } from './routes/auth/devices/index'
+import { Route as DocsApiSearchRouteImport } from './routes/docs/api/search'
+import { Route as DesignApiSearchRouteImport } from './routes/design/api/search'
+import { Route as ApiAuthCallbackRouteImport } from './routes/api/auth/callback'
+import { Route as StudioAuthenticatedDashboardRouteRouteImport } from './routes/studio/_authenticated/_dashboard/route'
+import { Route as StudioAuthenticatedCreateOrganizationIndexRouteImport } from './routes/studio/_authenticated/create-organization/index'
+import { Route as ApiAuthPasswordSignUpRouteImport } from './routes/api/auth/password/sign-up'
+import { Route as ApiAuthPasswordSignInRouteImport } from './routes/api/auth/password/sign-in'
+import { Route as ApiAuthPasswordResetPasswordRouteImport } from './routes/api/auth/password/reset-password'
+import { Route as ApiAuthPasswordForgotPasswordRouteImport } from './routes/api/auth/password/forgot-password'
+import { Route as ApiAuthOauthCallbackRouteImport } from './routes/api/auth/oauth/callback'
+import { Route as ApiAuthOauthProviderRouteImport } from './routes/api/auth/oauth/$provider'
+import { Route as ApiAuthEmailVerifyRouteImport } from './routes/api/auth/email/verify'
+import { Route as ApiAuthEmailResendRouteImport } from './routes/api/auth/email/resend'
+import { Route as StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteImport } from './routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/route'
+import { Route as StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/route'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/index'
+import { Route as StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRouteImport } from './routes/studio/_authenticated/_designer/$organizationSlug.$projectSlug.design.$id'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index'
+import { Route as StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.trials'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.revenue'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.churn'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.sent-notifications'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.events'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.$paymentProviderConfigurationId'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.$providerConfigurationId'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.$deliveryId'
+
+const StudioRouteRoute = StudioRouteRouteImport.update({
+  id: '/studio',
+  path: '/studio',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const DocsRouteRoute = DocsRouteRouteImport.update({
+  id: '/docs',
+  path: '/docs',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const DesignRouteRoute = DesignRouteRouteImport.update({
+  id: '/design',
+  path: '/design',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const AuthRouteRoute = AuthRouteRouteImport.update({
+  id: '/auth',
+  path: '/auth',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const MarketingRouteRoute = MarketingRouteRouteImport.update({
+  id: '/_marketing',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const DocsIndexRoute = DocsIndexRouteImport.update({
+  id: '/',
+  path: '/',
+  getParentRoute: () => DocsRouteRoute,
+} as any)
+const DesignIndexRoute = DesignIndexRouteImport.update({
+  id: '/',
+  path: '/',
+  getParentRoute: () => DesignRouteRoute,
+} as any)
+const AuthIndexRoute = AuthIndexRouteImport.update({
+  id: '/',
+  path: '/',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const MarketingIndexRoute = MarketingIndexRouteImport.update({
+  id: '/',
+  path: '/',
+  getParentRoute: () => MarketingRouteRoute,
+} as any)
+const DocsSplatRoute = DocsSplatRouteImport.update({
+  id: '/$',
+  path: '/$',
+  getParentRoute: () => DocsRouteRoute,
+} as any)
+const DesignSplatRoute = DesignSplatRouteImport.update({
+  id: '/$',
+  path: '/$',
+  getParentRoute: () => DesignRouteRoute,
+} as any)
+const AuthVerifyEmailRoute = AuthVerifyEmailRouteImport.update({
+  id: '/verify-email',
+  path: '/verify-email',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const AuthSignUpRoute = AuthSignUpRouteImport.update({
+  id: '/sign-up',
+  path: '/sign-up',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const AuthResetPasswordRoute = AuthResetPasswordRouteImport.update({
+  id: '/reset-password',
+  path: '/reset-password',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const AuthLogoutRoute = AuthLogoutRouteImport.update({
+  id: '/logout',
+  path: '/logout',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const AuthLoginRoute = AuthLoginRouteImport.update({
+  id: '/login',
+  path: '/login',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const AuthForgotPasswordRoute = AuthForgotPasswordRouteImport.update({
+  id: '/forgot-password',
+  path: '/forgot-password',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const StudioAuthenticatedRouteRoute =
+  StudioAuthenticatedRouteRouteImport.update({
+    id: '/_authenticated',
+    getParentRoute: () => StudioRouteRoute,
+  } as any)
+const StudioAuthenticatedIndexRoute =
+  StudioAuthenticatedIndexRouteImport.update({
+    id: '/',
+    path: '/',
+    getParentRoute: () => StudioAuthenticatedRouteRoute,
+  } as any)
+const AuthDevicesIndexRoute = AuthDevicesIndexRouteImport.update({
+  id: '/devices/',
+  path: '/devices/',
+  getParentRoute: () => AuthRouteRoute,
+} as any)
+const DocsApiSearchRoute = DocsApiSearchRouteImport.update({
+  id: '/api/search',
+  path: '/api/search',
+  getParentRoute: () => DocsRouteRoute,
+} as any)
+const DesignApiSearchRoute = DesignApiSearchRouteImport.update({
+  id: '/api/search',
+  path: '/api/search',
+  getParentRoute: () => DesignRouteRoute,
+} as any)
+const ApiAuthCallbackRoute = ApiAuthCallbackRouteImport.update({
+  id: '/api/auth/callback',
+  path: '/api/auth/callback',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const StudioAuthenticatedDashboardRouteRoute =
+  StudioAuthenticatedDashboardRouteRouteImport.update({
+    id: '/_dashboard',
+    getParentRoute: () => StudioAuthenticatedRouteRoute,
+  } as any)
+const StudioAuthenticatedCreateOrganizationIndexRoute =
+  StudioAuthenticatedCreateOrganizationIndexRouteImport.update({
+    id: '/create-organization/',
+    path: '/create-organization/',
+    getParentRoute: () => StudioAuthenticatedRouteRoute,
+  } as any)
+const ApiAuthPasswordSignUpRoute = ApiAuthPasswordSignUpRouteImport.update({
+  id: '/api/auth/password/sign-up',
+  path: '/api/auth/password/sign-up',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiAuthPasswordSignInRoute = ApiAuthPasswordSignInRouteImport.update({
+  id: '/api/auth/password/sign-in',
+  path: '/api/auth/password/sign-in',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiAuthPasswordResetPasswordRoute =
+  ApiAuthPasswordResetPasswordRouteImport.update({
+    id: '/api/auth/password/reset-password',
+    path: '/api/auth/password/reset-password',
+    getParentRoute: () => rootRouteImport,
+  } as any)
+const ApiAuthPasswordForgotPasswordRoute =
+  ApiAuthPasswordForgotPasswordRouteImport.update({
+    id: '/api/auth/password/forgot-password',
+    path: '/api/auth/password/forgot-password',
+    getParentRoute: () => rootRouteImport,
+  } as any)
+const ApiAuthOauthCallbackRoute = ApiAuthOauthCallbackRouteImport.update({
+  id: '/api/auth/oauth/callback',
+  path: '/api/auth/oauth/callback',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiAuthOauthProviderRoute = ApiAuthOauthProviderRouteImport.update({
+  id: '/api/auth/oauth/$provider',
+  path: '/api/auth/oauth/$provider',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiAuthEmailVerifyRoute = ApiAuthEmailVerifyRouteImport.update({
+  id: '/api/auth/email/verify',
+  path: '/api/auth/email/verify',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiAuthEmailResendRoute = ApiAuthEmailResendRouteImport.update({
+  id: '/api/auth/email/resend',
+  path: '/api/auth/email/resend',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute =
+  StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteImport.update(
+    {
+      id: '/_organization/$organizationSlug',
+      path: '/$organizationSlug',
+      getParentRoute: () => StudioAuthenticatedDashboardRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute =
+  StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRouteImport.update(
+    {
+      id: '/',
+      path: '/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteImport.update(
+    {
+      id: '/_project/$organizationSlug/$projectSlug',
+      path: '/$organizationSlug/$projectSlug',
+      getParentRoute: () => StudioAuthenticatedDashboardRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRouteImport.update(
+    {
+      id: '/',
+      path: '/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute =
+  StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRouteImport.update(
+    {
+      id: '/_designer/$organizationSlug/$projectSlug/design/$id',
+      path: '/$organizationSlug/$projectSlug/design/$id',
+      getParentRoute: () => StudioAuthenticatedRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRouteImport.update(
+    {
+      id: '/overview',
+      path: '/overview',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRouteImport.update(
+    {
+      id: '/deploys',
+      path: '/deploys',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRouteImport.update(
+    {
+      id: '/settings/',
+      path: '/settings/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRouteImport.update(
+    {
+      id: '/products/',
+      path: '/products/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRouteImport.update(
+    {
+      id: '/persons/',
+      path: '/persons/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRouteImport.update(
+    {
+      id: '/paywalls/',
+      path: '/paywalls/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRouteImport.update(
+    {
+      id: '/flags/',
+      path: '/flags/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRouteImport.update(
+    {
+      id: '/experiments/',
+      path: '/experiments/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRouteImport.update(
+    {
+      id: '/assets/',
+      path: '/assets/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute =
+  StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRouteImport.update(
+    {
+      id: '/~/settings/',
+      path: '/~/settings/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRouteImport.update(
+    {
+      id: '/settings/perks',
+      path: '/settings/perks',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRouteImport.update(
+    {
+      id: '/settings/paywall-locations',
+      path: '/settings/paywall-locations',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRouteImport.update(
+    {
+      id: '/settings/api-keys',
+      path: '/settings/api-keys',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRouteImport.update(
+    {
+      id: '/products/$id',
+      path: '/products/$id',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRouteImport.update(
+    {
+      id: '/persons/$id',
+      path: '/persons/$id',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRouteImport.update(
+    {
+      id: '/flags/$id',
+      path: '/flags/$id',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRouteImport.update(
+    {
+      id: '/experiments/$id',
+      path: '/experiments/$id',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRouteImport.update(
+    {
+      id: '/analytics/trials',
+      path: '/analytics/trials',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRouteImport.update(
+    {
+      id: '/analytics/subscribers',
+      path: '/analytics/subscribers',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRouteImport.update(
+    {
+      id: '/analytics/revenue',
+      path: '/analytics/revenue',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRouteImport.update(
+    {
+      id: '/analytics/query',
+      path: '/analytics/query',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRouteImport.update(
+    {
+      id: '/analytics/churn',
+      path: '/analytics/churn',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRouteImport.update(
+    {
+      id: '/activity/sent-notifications',
+      path: '/activity/sent-notifications',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRouteImport.update(
+    {
+      id: '/activity/events',
+      path: '/activity/events',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRouteImport.update(
+    {
+      id: '/settings/webhooks/',
+      path: '/settings/webhooks/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRouteImport.update(
+    {
+      id: '/settings/payment-providers/',
+      path: '/settings/payment-providers/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRouteImport.update(
+    {
+      id: '/settings/notifications/',
+      path: '/settings/notifications/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRouteImport.update(
+    {
+      id: '/settings/payment-providers/$paymentProviderConfigurationId',
+      path: '/settings/payment-providers/$paymentProviderConfigurationId',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRouteImport.update(
+    {
+      id: '/settings/notifications/$providerConfigurationId',
+      path: '/settings/notifications/$providerConfigurationId',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRouteImport.update(
+    {
+      id: '/settings/webhooks/$endpointId/',
+      path: '/settings/webhooks/$endpointId/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRouteImport.update(
+    {
+      id: '/settings/webhooks/$endpointId/$deliveryId',
+      path: '/settings/webhooks/$endpointId/$deliveryId',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+
+export interface FileRoutesByFullPath {
+  '/': typeof MarketingIndexRoute
+  '/auth': typeof AuthRouteRouteWithChildren
+  '/design': typeof DesignRouteRouteWithChildren
+  '/docs': typeof DocsRouteRouteWithChildren
+  '/studio': typeof StudioRouteRouteWithChildren
+  '/auth/forgot-password': typeof AuthForgotPasswordRoute
+  '/auth/login': typeof AuthLoginRoute
+  '/auth/logout': typeof AuthLogoutRoute
+  '/auth/reset-password': typeof AuthResetPasswordRoute
+  '/auth/sign-up': typeof AuthSignUpRoute
+  '/auth/verify-email': typeof AuthVerifyEmailRoute
+  '/design/$': typeof DesignSplatRoute
+  '/docs/$': typeof DocsSplatRoute
+  '/auth/': typeof AuthIndexRoute
+  '/design/': typeof DesignIndexRoute
+  '/docs/': typeof DocsIndexRoute
+  '/api/auth/callback': typeof ApiAuthCallbackRoute
+  '/design/api/search': typeof DesignApiSearchRoute
+  '/docs/api/search': typeof DocsApiSearchRoute
+  '/auth/devices/': typeof AuthDevicesIndexRoute
+  '/studio/': typeof StudioAuthenticatedIndexRoute
+  '/api/auth/email/resend': typeof ApiAuthEmailResendRoute
+  '/api/auth/email/verify': typeof ApiAuthEmailVerifyRoute
+  '/api/auth/oauth/$provider': typeof ApiAuthOauthProviderRoute
+  '/api/auth/oauth/callback': typeof ApiAuthOauthCallbackRoute
+  '/api/auth/password/forgot-password': typeof ApiAuthPasswordForgotPasswordRoute
+  '/api/auth/password/reset-password': typeof ApiAuthPasswordResetPasswordRoute
+  '/api/auth/password/sign-in': typeof ApiAuthPasswordSignInRoute
+  '/api/auth/password/sign-up': typeof ApiAuthPasswordSignUpRoute
+  '/studio/create-organization/': typeof StudioAuthenticatedCreateOrganizationIndexRoute
+  '/studio/$organizationSlug': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChildren
+  '/studio/$organizationSlug/$projectSlug': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteWithChildren
+  '/studio/$organizationSlug/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute
+  '/studio/$organizationSlug/$projectSlug/deploys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
+  '/studio/$organizationSlug/$projectSlug/overview': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
+  '/studio/$organizationSlug/$projectSlug/design/$id': typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
+  '/studio/$organizationSlug/$projectSlug/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
+  '/studio/$organizationSlug/$projectSlug/activity/events': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
+  '/studio/$organizationSlug/$projectSlug/activity/sent-notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/churn': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/query': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/revenue': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
+  '/studio/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  '/studio/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
+  '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
+  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
+  '/studio/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
+  '/studio/$organizationSlug/~/settings/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/assets/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/experiments/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/flags/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/paywalls/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/persons/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/products/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/notifications/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/payment-providers/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/webhooks/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
+}
+export interface FileRoutesByTo {
+  '/studio': typeof StudioAuthenticatedIndexRoute
+  '/auth/forgot-password': typeof AuthForgotPasswordRoute
+  '/auth/login': typeof AuthLoginRoute
+  '/auth/logout': typeof AuthLogoutRoute
+  '/auth/reset-password': typeof AuthResetPasswordRoute
+  '/auth/sign-up': typeof AuthSignUpRoute
+  '/auth/verify-email': typeof AuthVerifyEmailRoute
+  '/design/$': typeof DesignSplatRoute
+  '/docs/$': typeof DocsSplatRoute
+  '/': typeof MarketingIndexRoute
+  '/auth': typeof AuthIndexRoute
+  '/design': typeof DesignIndexRoute
+  '/docs': typeof DocsIndexRoute
+  '/api/auth/callback': typeof ApiAuthCallbackRoute
+  '/design/api/search': typeof DesignApiSearchRoute
+  '/docs/api/search': typeof DocsApiSearchRoute
+  '/auth/devices': typeof AuthDevicesIndexRoute
+  '/api/auth/email/resend': typeof ApiAuthEmailResendRoute
+  '/api/auth/email/verify': typeof ApiAuthEmailVerifyRoute
+  '/api/auth/oauth/$provider': typeof ApiAuthOauthProviderRoute
+  '/api/auth/oauth/callback': typeof ApiAuthOauthCallbackRoute
+  '/api/auth/password/forgot-password': typeof ApiAuthPasswordForgotPasswordRoute
+  '/api/auth/password/reset-password': typeof ApiAuthPasswordResetPasswordRoute
+  '/api/auth/password/sign-in': typeof ApiAuthPasswordSignInRoute
+  '/api/auth/password/sign-up': typeof ApiAuthPasswordSignUpRoute
+  '/studio/create-organization': typeof StudioAuthenticatedCreateOrganizationIndexRoute
+  '/studio/$organizationSlug': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute
+  '/studio/$organizationSlug/$projectSlug/deploys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
+  '/studio/$organizationSlug/$projectSlug/overview': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
+  '/studio/$organizationSlug/$projectSlug/design/$id': typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
+  '/studio/$organizationSlug/$projectSlug': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
+  '/studio/$organizationSlug/$projectSlug/activity/events': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
+  '/studio/$organizationSlug/$projectSlug/activity/sent-notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/churn': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/query': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/revenue': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
+  '/studio/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  '/studio/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
+  '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
+  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
+  '/studio/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
+  '/studio/$organizationSlug/~/settings': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/assets': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/experiments': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/flags': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/paywalls': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/persons': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/products': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/payment-providers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/webhooks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
+}
+export interface FileRoutesById {
+  __root__: typeof rootRouteImport
+  '/_marketing': typeof MarketingRouteRouteWithChildren
+  '/auth': typeof AuthRouteRouteWithChildren
+  '/design': typeof DesignRouteRouteWithChildren
+  '/docs': typeof DocsRouteRouteWithChildren
+  '/studio': typeof StudioRouteRouteWithChildren
+  '/studio/_authenticated': typeof StudioAuthenticatedRouteRouteWithChildren
+  '/auth/forgot-password': typeof AuthForgotPasswordRoute
+  '/auth/login': typeof AuthLoginRoute
+  '/auth/logout': typeof AuthLogoutRoute
+  '/auth/reset-password': typeof AuthResetPasswordRoute
+  '/auth/sign-up': typeof AuthSignUpRoute
+  '/auth/verify-email': typeof AuthVerifyEmailRoute
+  '/design/$': typeof DesignSplatRoute
+  '/docs/$': typeof DocsSplatRoute
+  '/_marketing/': typeof MarketingIndexRoute
+  '/auth/': typeof AuthIndexRoute
+  '/design/': typeof DesignIndexRoute
+  '/docs/': typeof DocsIndexRoute
+  '/studio/_authenticated/_dashboard': typeof StudioAuthenticatedDashboardRouteRouteWithChildren
+  '/api/auth/callback': typeof ApiAuthCallbackRoute
+  '/design/api/search': typeof DesignApiSearchRoute
+  '/docs/api/search': typeof DocsApiSearchRoute
+  '/auth/devices/': typeof AuthDevicesIndexRoute
+  '/studio/_authenticated/': typeof StudioAuthenticatedIndexRoute
+  '/api/auth/email/resend': typeof ApiAuthEmailResendRoute
+  '/api/auth/email/verify': typeof ApiAuthEmailVerifyRoute
+  '/api/auth/oauth/$provider': typeof ApiAuthOauthProviderRoute
+  '/api/auth/oauth/callback': typeof ApiAuthOauthCallbackRoute
+  '/api/auth/password/forgot-password': typeof ApiAuthPasswordForgotPasswordRoute
+  '/api/auth/password/reset-password': typeof ApiAuthPasswordResetPasswordRoute
+  '/api/auth/password/sign-in': typeof ApiAuthPasswordSignInRoute
+  '/api/auth/password/sign-up': typeof ApiAuthPasswordSignUpRoute
+  '/studio/_authenticated/create-organization/': typeof StudioAuthenticatedCreateOrganizationIndexRoute
+  '/studio/_authenticated/_dashboard/_organization/$organizationSlug': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChildren
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteWithChildren
+  '/studio/_authenticated/_dashboard/_organization/$organizationSlug/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
+  '/studio/_authenticated/_designer/$organizationSlug/$projectSlug/design/$id': typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/events': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/sent-notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/query': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/revenue': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
+  '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
+}
+export interface FileRouteTypes {
+  fileRoutesByFullPath: FileRoutesByFullPath
+  fullPaths:
+    | '/'
+    | '/auth'
+    | '/design'
+    | '/docs'
+    | '/studio'
+    | '/auth/forgot-password'
+    | '/auth/login'
+    | '/auth/logout'
+    | '/auth/reset-password'
+    | '/auth/sign-up'
+    | '/auth/verify-email'
+    | '/design/$'
+    | '/docs/$'
+    | '/auth/'
+    | '/design/'
+    | '/docs/'
+    | '/api/auth/callback'
+    | '/design/api/search'
+    | '/docs/api/search'
+    | '/auth/devices/'
+    | '/studio/'
+    | '/api/auth/email/resend'
+    | '/api/auth/email/verify'
+    | '/api/auth/oauth/$provider'
+    | '/api/auth/oauth/callback'
+    | '/api/auth/password/forgot-password'
+    | '/api/auth/password/reset-password'
+    | '/api/auth/password/sign-in'
+    | '/api/auth/password/sign-up'
+    | '/studio/create-organization/'
+    | '/studio/$organizationSlug'
+    | '/studio/$organizationSlug/$projectSlug'
+    | '/studio/$organizationSlug/'
+    | '/studio/$organizationSlug/$projectSlug/deploys'
+    | '/studio/$organizationSlug/$projectSlug/overview'
+    | '/studio/$organizationSlug/$projectSlug/design/$id'
+    | '/studio/$organizationSlug/$projectSlug/'
+    | '/studio/$organizationSlug/$projectSlug/activity/events'
+    | '/studio/$organizationSlug/$projectSlug/activity/sent-notifications'
+    | '/studio/$organizationSlug/$projectSlug/analytics/churn'
+    | '/studio/$organizationSlug/$projectSlug/analytics/query'
+    | '/studio/$organizationSlug/$projectSlug/analytics/revenue'
+    | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
+    | '/studio/$organizationSlug/$projectSlug/analytics/trials'
+    | '/studio/$organizationSlug/$projectSlug/experiments/$id'
+    | '/studio/$organizationSlug/$projectSlug/flags/$id'
+    | '/studio/$organizationSlug/$projectSlug/persons/$id'
+    | '/studio/$organizationSlug/$projectSlug/products/$id'
+    | '/studio/$organizationSlug/$projectSlug/settings/api-keys'
+    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
+    | '/studio/$organizationSlug/$projectSlug/settings/perks'
+    | '/studio/$organizationSlug/~/settings/'
+    | '/studio/$organizationSlug/$projectSlug/assets/'
+    | '/studio/$organizationSlug/$projectSlug/experiments/'
+    | '/studio/$organizationSlug/$projectSlug/flags/'
+    | '/studio/$organizationSlug/$projectSlug/paywalls/'
+    | '/studio/$organizationSlug/$projectSlug/persons/'
+    | '/studio/$organizationSlug/$projectSlug/products/'
+    | '/studio/$organizationSlug/$projectSlug/settings/'
+    | '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
+    | '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+    | '/studio/$organizationSlug/$projectSlug/settings/notifications/'
+    | '/studio/$organizationSlug/$projectSlug/settings/payment-providers/'
+    | '/studio/$organizationSlug/$projectSlug/settings/webhooks/'
+    | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
+    | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/'
+  fileRoutesByTo: FileRoutesByTo
+  to:
+    | '/studio'
+    | '/auth/forgot-password'
+    | '/auth/login'
+    | '/auth/logout'
+    | '/auth/reset-password'
+    | '/auth/sign-up'
+    | '/auth/verify-email'
+    | '/design/$'
+    | '/docs/$'
+    | '/'
+    | '/auth'
+    | '/design'
+    | '/docs'
+    | '/api/auth/callback'
+    | '/design/api/search'
+    | '/docs/api/search'
+    | '/auth/devices'
+    | '/api/auth/email/resend'
+    | '/api/auth/email/verify'
+    | '/api/auth/oauth/$provider'
+    | '/api/auth/oauth/callback'
+    | '/api/auth/password/forgot-password'
+    | '/api/auth/password/reset-password'
+    | '/api/auth/password/sign-in'
+    | '/api/auth/password/sign-up'
+    | '/studio/create-organization'
+    | '/studio/$organizationSlug'
+    | '/studio/$organizationSlug/$projectSlug/deploys'
+    | '/studio/$organizationSlug/$projectSlug/overview'
+    | '/studio/$organizationSlug/$projectSlug/design/$id'
+    | '/studio/$organizationSlug/$projectSlug'
+    | '/studio/$organizationSlug/$projectSlug/activity/events'
+    | '/studio/$organizationSlug/$projectSlug/activity/sent-notifications'
+    | '/studio/$organizationSlug/$projectSlug/analytics/churn'
+    | '/studio/$organizationSlug/$projectSlug/analytics/query'
+    | '/studio/$organizationSlug/$projectSlug/analytics/revenue'
+    | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
+    | '/studio/$organizationSlug/$projectSlug/analytics/trials'
+    | '/studio/$organizationSlug/$projectSlug/experiments/$id'
+    | '/studio/$organizationSlug/$projectSlug/flags/$id'
+    | '/studio/$organizationSlug/$projectSlug/persons/$id'
+    | '/studio/$organizationSlug/$projectSlug/products/$id'
+    | '/studio/$organizationSlug/$projectSlug/settings/api-keys'
+    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
+    | '/studio/$organizationSlug/$projectSlug/settings/perks'
+    | '/studio/$organizationSlug/~/settings'
+    | '/studio/$organizationSlug/$projectSlug/assets'
+    | '/studio/$organizationSlug/$projectSlug/experiments'
+    | '/studio/$organizationSlug/$projectSlug/flags'
+    | '/studio/$organizationSlug/$projectSlug/paywalls'
+    | '/studio/$organizationSlug/$projectSlug/persons'
+    | '/studio/$organizationSlug/$projectSlug/products'
+    | '/studio/$organizationSlug/$projectSlug/settings'
+    | '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
+    | '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+    | '/studio/$organizationSlug/$projectSlug/settings/notifications'
+    | '/studio/$organizationSlug/$projectSlug/settings/payment-providers'
+    | '/studio/$organizationSlug/$projectSlug/settings/webhooks'
+    | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
+    | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId'
+  id:
+    | '__root__'
+    | '/_marketing'
+    | '/auth'
+    | '/design'
+    | '/docs'
+    | '/studio'
+    | '/studio/_authenticated'
+    | '/auth/forgot-password'
+    | '/auth/login'
+    | '/auth/logout'
+    | '/auth/reset-password'
+    | '/auth/sign-up'
+    | '/auth/verify-email'
+    | '/design/$'
+    | '/docs/$'
+    | '/_marketing/'
+    | '/auth/'
+    | '/design/'
+    | '/docs/'
+    | '/studio/_authenticated/_dashboard'
+    | '/api/auth/callback'
+    | '/design/api/search'
+    | '/docs/api/search'
+    | '/auth/devices/'
+    | '/studio/_authenticated/'
+    | '/api/auth/email/resend'
+    | '/api/auth/email/verify'
+    | '/api/auth/oauth/$provider'
+    | '/api/auth/oauth/callback'
+    | '/api/auth/password/forgot-password'
+    | '/api/auth/password/reset-password'
+    | '/api/auth/password/sign-in'
+    | '/api/auth/password/sign-up'
+    | '/studio/_authenticated/create-organization/'
+    | '/studio/_authenticated/_dashboard/_organization/$organizationSlug'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug'
+    | '/studio/_authenticated/_dashboard/_organization/$organizationSlug/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview'
+    | '/studio/_authenticated/_designer/$organizationSlug/$projectSlug/design/$id'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/events'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/sent-notifications'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/query'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/revenue'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks'
+    | '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/'
+  fileRoutesById: FileRoutesById
+}
+export interface RootRouteChildren {
+  MarketingRouteRoute: typeof MarketingRouteRouteWithChildren
+  AuthRouteRoute: typeof AuthRouteRouteWithChildren
+  DesignRouteRoute: typeof DesignRouteRouteWithChildren
+  DocsRouteRoute: typeof DocsRouteRouteWithChildren
+  StudioRouteRoute: typeof StudioRouteRouteWithChildren
+  ApiAuthCallbackRoute: typeof ApiAuthCallbackRoute
+  ApiAuthEmailResendRoute: typeof ApiAuthEmailResendRoute
+  ApiAuthEmailVerifyRoute: typeof ApiAuthEmailVerifyRoute
+  ApiAuthOauthProviderRoute: typeof ApiAuthOauthProviderRoute
+  ApiAuthOauthCallbackRoute: typeof ApiAuthOauthCallbackRoute
+  ApiAuthPasswordForgotPasswordRoute: typeof ApiAuthPasswordForgotPasswordRoute
+  ApiAuthPasswordResetPasswordRoute: typeof ApiAuthPasswordResetPasswordRoute
+  ApiAuthPasswordSignInRoute: typeof ApiAuthPasswordSignInRoute
+  ApiAuthPasswordSignUpRoute: typeof ApiAuthPasswordSignUpRoute
+}
+
+declare module '@tanstack/react-router' {
+  interface FileRoutesByPath {
+    '/studio': {
+      id: '/studio'
+      path: '/studio'
+      fullPath: '/studio'
+      preLoaderRoute: typeof StudioRouteRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/docs': {
+      id: '/docs'
+      path: '/docs'
+      fullPath: '/docs'
+      preLoaderRoute: typeof DocsRouteRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/design': {
+      id: '/design'
+      path: '/design'
+      fullPath: '/design'
+      preLoaderRoute: typeof DesignRouteRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/auth': {
+      id: '/auth'
+      path: '/auth'
+      fullPath: '/auth'
+      preLoaderRoute: typeof AuthRouteRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/_marketing': {
+      id: '/_marketing'
+      path: ''
+      fullPath: '/'
+      preLoaderRoute: typeof MarketingRouteRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/docs/': {
+      id: '/docs/'
+      path: '/'
+      fullPath: '/docs/'
+      preLoaderRoute: typeof DocsIndexRouteImport
+      parentRoute: typeof DocsRouteRoute
+    }
+    '/design/': {
+      id: '/design/'
+      path: '/'
+      fullPath: '/design/'
+      preLoaderRoute: typeof DesignIndexRouteImport
+      parentRoute: typeof DesignRouteRoute
+    }
+    '/auth/': {
+      id: '/auth/'
+      path: '/'
+      fullPath: '/auth/'
+      preLoaderRoute: typeof AuthIndexRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/_marketing/': {
+      id: '/_marketing/'
+      path: '/'
+      fullPath: '/'
+      preLoaderRoute: typeof MarketingIndexRouteImport
+      parentRoute: typeof MarketingRouteRoute
+    }
+    '/docs/$': {
+      id: '/docs/$'
+      path: '/$'
+      fullPath: '/docs/$'
+      preLoaderRoute: typeof DocsSplatRouteImport
+      parentRoute: typeof DocsRouteRoute
+    }
+    '/design/$': {
+      id: '/design/$'
+      path: '/$'
+      fullPath: '/design/$'
+      preLoaderRoute: typeof DesignSplatRouteImport
+      parentRoute: typeof DesignRouteRoute
+    }
+    '/auth/verify-email': {
+      id: '/auth/verify-email'
+      path: '/verify-email'
+      fullPath: '/auth/verify-email'
+      preLoaderRoute: typeof AuthVerifyEmailRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/auth/sign-up': {
+      id: '/auth/sign-up'
+      path: '/sign-up'
+      fullPath: '/auth/sign-up'
+      preLoaderRoute: typeof AuthSignUpRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/auth/reset-password': {
+      id: '/auth/reset-password'
+      path: '/reset-password'
+      fullPath: '/auth/reset-password'
+      preLoaderRoute: typeof AuthResetPasswordRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/auth/logout': {
+      id: '/auth/logout'
+      path: '/logout'
+      fullPath: '/auth/logout'
+      preLoaderRoute: typeof AuthLogoutRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/auth/login': {
+      id: '/auth/login'
+      path: '/login'
+      fullPath: '/auth/login'
+      preLoaderRoute: typeof AuthLoginRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/auth/forgot-password': {
+      id: '/auth/forgot-password'
+      path: '/forgot-password'
+      fullPath: '/auth/forgot-password'
+      preLoaderRoute: typeof AuthForgotPasswordRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/studio/_authenticated': {
+      id: '/studio/_authenticated'
+      path: ''
+      fullPath: '/studio'
+      preLoaderRoute: typeof StudioAuthenticatedRouteRouteImport
+      parentRoute: typeof StudioRouteRoute
+    }
+    '/studio/_authenticated/': {
+      id: '/studio/_authenticated/'
+      path: '/'
+      fullPath: '/studio/'
+      preLoaderRoute: typeof StudioAuthenticatedIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedRouteRoute
+    }
+    '/auth/devices/': {
+      id: '/auth/devices/'
+      path: '/devices'
+      fullPath: '/auth/devices/'
+      preLoaderRoute: typeof AuthDevicesIndexRouteImport
+      parentRoute: typeof AuthRouteRoute
+    }
+    '/docs/api/search': {
+      id: '/docs/api/search'
+      path: '/api/search'
+      fullPath: '/docs/api/search'
+      preLoaderRoute: typeof DocsApiSearchRouteImport
+      parentRoute: typeof DocsRouteRoute
+    }
+    '/design/api/search': {
+      id: '/design/api/search'
+      path: '/api/search'
+      fullPath: '/design/api/search'
+      preLoaderRoute: typeof DesignApiSearchRouteImport
+      parentRoute: typeof DesignRouteRoute
+    }
+    '/api/auth/callback': {
+      id: '/api/auth/callback'
+      path: '/api/auth/callback'
+      fullPath: '/api/auth/callback'
+      preLoaderRoute: typeof ApiAuthCallbackRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/studio/_authenticated/_dashboard': {
+      id: '/studio/_authenticated/_dashboard'
+      path: ''
+      fullPath: '/studio'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardRouteRouteImport
+      parentRoute: typeof StudioAuthenticatedRouteRoute
+    }
+    '/studio/_authenticated/create-organization/': {
+      id: '/studio/_authenticated/create-organization/'
+      path: '/create-organization'
+      fullPath: '/studio/create-organization/'
+      preLoaderRoute: typeof StudioAuthenticatedCreateOrganizationIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedRouteRoute
+    }
+    '/api/auth/password/sign-up': {
+      id: '/api/auth/password/sign-up'
+      path: '/api/auth/password/sign-up'
+      fullPath: '/api/auth/password/sign-up'
+      preLoaderRoute: typeof ApiAuthPasswordSignUpRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/password/sign-in': {
+      id: '/api/auth/password/sign-in'
+      path: '/api/auth/password/sign-in'
+      fullPath: '/api/auth/password/sign-in'
+      preLoaderRoute: typeof ApiAuthPasswordSignInRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/password/reset-password': {
+      id: '/api/auth/password/reset-password'
+      path: '/api/auth/password/reset-password'
+      fullPath: '/api/auth/password/reset-password'
+      preLoaderRoute: typeof ApiAuthPasswordResetPasswordRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/password/forgot-password': {
+      id: '/api/auth/password/forgot-password'
+      path: '/api/auth/password/forgot-password'
+      fullPath: '/api/auth/password/forgot-password'
+      preLoaderRoute: typeof ApiAuthPasswordForgotPasswordRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/oauth/callback': {
+      id: '/api/auth/oauth/callback'
+      path: '/api/auth/oauth/callback'
+      fullPath: '/api/auth/oauth/callback'
+      preLoaderRoute: typeof ApiAuthOauthCallbackRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/oauth/$provider': {
+      id: '/api/auth/oauth/$provider'
+      path: '/api/auth/oauth/$provider'
+      fullPath: '/api/auth/oauth/$provider'
+      preLoaderRoute: typeof ApiAuthOauthProviderRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/email/verify': {
+      id: '/api/auth/email/verify'
+      path: '/api/auth/email/verify'
+      fullPath: '/api/auth/email/verify'
+      preLoaderRoute: typeof ApiAuthEmailVerifyRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/email/resend': {
+      id: '/api/auth/email/resend'
+      path: '/api/auth/email/resend'
+      fullPath: '/api/auth/email/resend'
+      preLoaderRoute: typeof ApiAuthEmailResendRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/studio/_authenticated/_dashboard/_organization/$organizationSlug': {
+      id: '/studio/_authenticated/_dashboard/_organization/$organizationSlug'
+      path: '/$organizationSlug'
+      fullPath: '/studio/$organizationSlug'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_organization/$organizationSlug/': {
+      id: '/studio/_authenticated/_dashboard/_organization/$organizationSlug/'
+      path: '/'
+      fullPath: '/studio/$organizationSlug/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug'
+      path: '/$organizationSlug/$projectSlug'
+      fullPath: '/studio/$organizationSlug/$projectSlug'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/'
+      path: '/'
+      fullPath: '/studio/$organizationSlug/$projectSlug/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_designer/$organizationSlug/$projectSlug/design/$id': {
+      id: '/studio/_authenticated/_designer/$organizationSlug/$projectSlug/design/$id'
+      path: '/$organizationSlug/$projectSlug/design/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/design/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRouteImport
+      parentRoute: typeof StudioAuthenticatedRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview'
+      path: '/overview'
+      fullPath: '/studio/$organizationSlug/$projectSlug/overview'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys'
+      path: '/deploys'
+      fullPath: '/studio/$organizationSlug/$projectSlug/deploys'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/'
+      path: '/settings'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/'
+      path: '/products'
+      fullPath: '/studio/$organizationSlug/$projectSlug/products/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/'
+      path: '/persons'
+      fullPath: '/studio/$organizationSlug/$projectSlug/persons/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/'
+      path: '/paywalls'
+      fullPath: '/studio/$organizationSlug/$projectSlug/paywalls/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/'
+      path: '/flags'
+      fullPath: '/studio/$organizationSlug/$projectSlug/flags/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/'
+      path: '/experiments'
+      fullPath: '/studio/$organizationSlug/$projectSlug/experiments/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/'
+      path: '/assets'
+      fullPath: '/studio/$organizationSlug/$projectSlug/assets/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/': {
+      id: '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/'
+      path: '/~/settings'
+      fullPath: '/studio/$organizationSlug/~/settings/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks'
+      path: '/settings/perks'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/perks'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
+      path: '/settings/paywall-locations'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
+      path: '/settings/api-keys'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/api-keys'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id'
+      path: '/products/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/products/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id'
+      path: '/persons/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/persons/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id'
+      path: '/flags/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/flags/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id'
+      path: '/experiments/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/experiments/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials'
+      path: '/analytics/trials'
+      fullPath: '/studio/$organizationSlug/$projectSlug/analytics/trials'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers'
+      path: '/analytics/subscribers'
+      fullPath: '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/revenue': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/revenue'
+      path: '/analytics/revenue'
+      fullPath: '/studio/$organizationSlug/$projectSlug/analytics/revenue'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/query': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/query'
+      path: '/analytics/query'
+      fullPath: '/studio/$organizationSlug/$projectSlug/analytics/query'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn'
+      path: '/analytics/churn'
+      fullPath: '/studio/$organizationSlug/$projectSlug/analytics/churn'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/sent-notifications': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/sent-notifications'
+      path: '/activity/sent-notifications'
+      fullPath: '/studio/$organizationSlug/$projectSlug/activity/sent-notifications'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/events': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/events'
+      path: '/activity/events'
+      fullPath: '/studio/$organizationSlug/$projectSlug/activity/events'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/'
+      path: '/settings/webhooks'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/webhooks/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/'
+      path: '/settings/payment-providers'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/payment-providers/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/'
+      path: '/settings/notifications'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/notifications/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+      path: '/settings/payment-providers/$paymentProviderConfigurationId'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
+      path: '/settings/notifications/$providerConfigurationId'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/'
+      path: '/settings/webhooks/$endpointId'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
+      path: '/settings/webhooks/$endpointId/$deliveryId'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+  }
+}
+
+interface MarketingRouteRouteChildren {
+  MarketingIndexRoute: typeof MarketingIndexRoute
+}
+
+const MarketingRouteRouteChildren: MarketingRouteRouteChildren = {
+  MarketingIndexRoute: MarketingIndexRoute,
+}
+
+const MarketingRouteRouteWithChildren = MarketingRouteRoute._addFileChildren(
+  MarketingRouteRouteChildren,
+)
+
+interface AuthRouteRouteChildren {
+  AuthForgotPasswordRoute: typeof AuthForgotPasswordRoute
+  AuthLoginRoute: typeof AuthLoginRoute
+  AuthLogoutRoute: typeof AuthLogoutRoute
+  AuthResetPasswordRoute: typeof AuthResetPasswordRoute
+  AuthSignUpRoute: typeof AuthSignUpRoute
+  AuthVerifyEmailRoute: typeof AuthVerifyEmailRoute
+  AuthIndexRoute: typeof AuthIndexRoute
+  AuthDevicesIndexRoute: typeof AuthDevicesIndexRoute
+}
+
+const AuthRouteRouteChildren: AuthRouteRouteChildren = {
+  AuthForgotPasswordRoute: AuthForgotPasswordRoute,
+  AuthLoginRoute: AuthLoginRoute,
+  AuthLogoutRoute: AuthLogoutRoute,
+  AuthResetPasswordRoute: AuthResetPasswordRoute,
+  AuthSignUpRoute: AuthSignUpRoute,
+  AuthVerifyEmailRoute: AuthVerifyEmailRoute,
+  AuthIndexRoute: AuthIndexRoute,
+  AuthDevicesIndexRoute: AuthDevicesIndexRoute,
+}
+
+const AuthRouteRouteWithChildren = AuthRouteRoute._addFileChildren(
+  AuthRouteRouteChildren,
+)
+
+interface DesignRouteRouteChildren {
+  DesignSplatRoute: typeof DesignSplatRoute
+  DesignIndexRoute: typeof DesignIndexRoute
+  DesignApiSearchRoute: typeof DesignApiSearchRoute
+}
+
+const DesignRouteRouteChildren: DesignRouteRouteChildren = {
+  DesignSplatRoute: DesignSplatRoute,
+  DesignIndexRoute: DesignIndexRoute,
+  DesignApiSearchRoute: DesignApiSearchRoute,
+}
+
+const DesignRouteRouteWithChildren = DesignRouteRoute._addFileChildren(
+  DesignRouteRouteChildren,
+)
+
+interface DocsRouteRouteChildren {
+  DocsSplatRoute: typeof DocsSplatRoute
+  DocsIndexRoute: typeof DocsIndexRoute
+  DocsApiSearchRoute: typeof DocsApiSearchRoute
+}
+
+const DocsRouteRouteChildren: DocsRouteRouteChildren = {
+  DocsSplatRoute: DocsSplatRoute,
+  DocsIndexRoute: DocsIndexRoute,
+  DocsApiSearchRoute: DocsApiSearchRoute,
+}
+
+const DocsRouteRouteWithChildren = DocsRouteRoute._addFileChildren(
+  DocsRouteRouteChildren,
+)
+
+interface StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteChildren {
+  StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute
+  StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
+}
+
+const StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteChildren: StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteChildren =
+  {
+    StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute:
+      StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute,
+    StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute:
+      StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute,
+  }
+
+const StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChildren =
+  StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute._addFileChildren(
+    StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteChildren,
+  )
+
+interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteChildren {
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
+}
+
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteChildren: StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteChildren =
+  {
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute,
+  }
+
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteWithChildren =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute._addFileChildren(
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteChildren,
+  )
+
+interface StudioAuthenticatedDashboardRouteRouteChildren {
+  StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute: typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChildren
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteWithChildren
+}
+
+const StudioAuthenticatedDashboardRouteRouteChildren: StudioAuthenticatedDashboardRouteRouteChildren =
+  {
+    StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRoute:
+      StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChildren,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteWithChildren,
+  }
+
+const StudioAuthenticatedDashboardRouteRouteWithChildren =
+  StudioAuthenticatedDashboardRouteRoute._addFileChildren(
+    StudioAuthenticatedDashboardRouteRouteChildren,
+  )
+
+interface StudioAuthenticatedRouteRouteChildren {
+  StudioAuthenticatedDashboardRouteRoute: typeof StudioAuthenticatedDashboardRouteRouteWithChildren
+  StudioAuthenticatedIndexRoute: typeof StudioAuthenticatedIndexRoute
+  StudioAuthenticatedCreateOrganizationIndexRoute: typeof StudioAuthenticatedCreateOrganizationIndexRoute
+  StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute: typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
+}
+
+const StudioAuthenticatedRouteRouteChildren: StudioAuthenticatedRouteRouteChildren =
+  {
+    StudioAuthenticatedDashboardRouteRoute:
+      StudioAuthenticatedDashboardRouteRouteWithChildren,
+    StudioAuthenticatedIndexRoute: StudioAuthenticatedIndexRoute,
+    StudioAuthenticatedCreateOrganizationIndexRoute:
+      StudioAuthenticatedCreateOrganizationIndexRoute,
+    StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute:
+      StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute,
+  }
+
+const StudioAuthenticatedRouteRouteWithChildren =
+  StudioAuthenticatedRouteRoute._addFileChildren(
+    StudioAuthenticatedRouteRouteChildren,
+  )
+
+interface StudioRouteRouteChildren {
+  StudioAuthenticatedRouteRoute: typeof StudioAuthenticatedRouteRouteWithChildren
+}
+
+const StudioRouteRouteChildren: StudioRouteRouteChildren = {
+  StudioAuthenticatedRouteRoute: StudioAuthenticatedRouteRouteWithChildren,
+}
+
+const StudioRouteRouteWithChildren = StudioRouteRoute._addFileChildren(
+  StudioRouteRouteChildren,
+)
+
+const rootRouteChildren: RootRouteChildren = {
+  MarketingRouteRoute: MarketingRouteRouteWithChildren,
+  AuthRouteRoute: AuthRouteRouteWithChildren,
+  DesignRouteRoute: DesignRouteRouteWithChildren,
+  DocsRouteRoute: DocsRouteRouteWithChildren,
+  StudioRouteRoute: StudioRouteRouteWithChildren,
+  ApiAuthCallbackRoute: ApiAuthCallbackRoute,
+  ApiAuthEmailResendRoute: ApiAuthEmailResendRoute,
+  ApiAuthEmailVerifyRoute: ApiAuthEmailVerifyRoute,
+  ApiAuthOauthProviderRoute: ApiAuthOauthProviderRoute,
+  ApiAuthOauthCallbackRoute: ApiAuthOauthCallbackRoute,
+  ApiAuthPasswordForgotPasswordRoute: ApiAuthPasswordForgotPasswordRoute,
+  ApiAuthPasswordResetPasswordRoute: ApiAuthPasswordResetPasswordRoute,
+  ApiAuthPasswordSignInRoute: ApiAuthPasswordSignInRoute,
+  ApiAuthPasswordSignUpRoute: ApiAuthPasswordSignUpRoute,
+}
+export const routeTree = rootRouteImport
+  ._addFileChildren(rootRouteChildren)
+  ._addFileTypes<FileRouteTypes>()
+
+import type { getRouter } from './router.tsx'
+import type { startInstance } from './start.ts'
+declare module '@tanstack/react-start' {
+  interface Register {
+    ssr: true
+    router: Awaited<ReturnType<typeof getRouter>>
+    config: Awaited<ReturnType<typeof startInstance.getOptions>>
+  }
+}
diff --git a/apps/www/src/router.tsx b/apps/www/src/router.tsx
new file mode 100644
index 000000000..653dda0fc
--- /dev/null
+++ b/apps/www/src/router.tsx
@@ -0,0 +1,35 @@
+import { createRouter } from "@tanstack/react-router";
+import { setupRouterSsrQueryIntegration } from "@tanstack/react-router-ssr-query";
+
+import { DefaultCatchBoundary } from "@/components/default-catch-boundary";
+import { NotFound } from "@/components/not-found";
+import { queryClient } from "@/lib/effect-query";
+
+import { routeTree } from "./routeTree.gen";
+
+export function getRouter() {
+  const router = createRouter({
+    context: { queryClient },
+    defaultErrorComponent: DefaultCatchBoundary,
+    defaultNotFoundComponent: () => <NotFound />,
+    defaultPreload: "intent",
+    routeTree,
+    scrollRestoration: true,
+  });
+
+  setupRouterSsrQueryIntegration({
+    queryClient,
+    router,
+  });
+
+  return router;
+}
+
+declare module "@tanstack/react-router" {
+  interface Register {
+    router: ReturnType<typeof getRouter>;
+  }
+  interface StaticDataRouteOption {
+    allProjectsPicker?: boolean;
+  }
+}
diff --git a/apps/www/src/routes/__root.tsx b/apps/www/src/routes/__root.tsx
new file mode 100644
index 000000000..58cd11a2d
--- /dev/null
+++ b/apps/www/src/routes/__root.tsx
@@ -0,0 +1,93 @@
+/** biome-ignore-all lint/style/noHeadElement: Head element is required for TanStack Router */
+import type { QueryClient } from "@tanstack/react-query";
+import { HeadContent, Outlet, Scripts, createRootRouteWithContext } from "@tanstack/react-router";
+import {
+  AuthKitProvider,
+  useAccessToken,
+} from "@workos/authkit-tanstack-react-start/client";
+import { ThemeProviderTanstack, Toaster } from "@voidhash/ui";
+import { useEffect } from "react";
+
+import { setBrowserAccessTokenProvider } from "@/lib/effect-query";
+import appCss from "@/styles/globals.css?url";
+
+export const Route = createRootRouteWithContext<{
+  queryClient: QueryClient;
+}>()({
+  component: RootComponent,
+  head: () => ({
+    links: [
+      {
+        href: appCss,
+        rel: "stylesheet",
+      },
+      {
+        href: "/favicon.ico",
+        rel: "icon",
+        type: "image/x-icon",
+      },
+      {
+        href: "/apple-icon.png",
+        rel: "apple-touch-icon",
+      },
+    ],
+    meta: [
+      { charSet: "utf8" },
+      {
+        content: "width=device-width, initial-scale=1",
+        name: "viewport",
+      },
+      { title: "Voidhash" },
+      {
+        content:
+          "Voidhash is an open-source subscription management platform simplifying integrations, analytics, and revenue growth for apps and digital products.",
+        name: "description",
+      },
+    ],
+  }),
+});
+
+function RootComponent() {
+  return (
+    <html lang="en" suppressHydrationWarning>
+      <head>
+        <HeadContent />
+      </head>
+      <body className="text-pretty antialiased bg-sidebar">
+        <AuthKitProvider>
+          <ThemeProviderTanstack
+            attribute="class"
+            defaultTheme="dark"
+            disableTransitionOnChange
+            // enableSystem
+            suppressHydrationWarning
+          >
+            <WorkOsAccessTokenBridge />
+            <Outlet />
+            <Toaster />
+          </ThemeProviderTanstack>
+        </AuthKitProvider>
+        <Scripts />
+      </body>
+    </html>
+  );
+}
+
+function WorkOsAccessTokenBridge() {
+  const { getAccessToken } = useAccessToken();
+
+  if (!import.meta.env.SSR) {
+    setBrowserAccessTokenProvider(async () => (await getAccessToken()) ?? undefined);
+  }
+
+  useEffect(
+    () => () => {
+      if (!import.meta.env.SSR) {
+        setBrowserAccessTokenProvider(undefined);
+      }
+    },
+    [],
+  );
+
+  return null;
+}
diff --git a/apps/www/src/routes/_marketing/index.tsx b/apps/www/src/routes/_marketing/index.tsx
new file mode 100644
index 000000000..87300f236
--- /dev/null
+++ b/apps/www/src/routes/_marketing/index.tsx
@@ -0,0 +1,27 @@
+import { createFileRoute, redirect } from "@tanstack/react-router";
+import { getAuth } from "@workos/authkit-tanstack-react-start";
+
+import { Footer } from "@/features/www/hero/footer";
+import { Hero } from "@/features/www/hero/hero";
+import { STUDIO_PATH } from "@/lib/paths";
+
+export const Route = createFileRoute("/_marketing/")({
+  component: MarketingHome,
+  loader: async () => {
+    const auth = await getAuth();
+    if (auth.user) {
+      throw redirect({ to: STUDIO_PATH });
+    }
+  },
+});
+
+function MarketingHome() {
+  return (
+    <>
+      <main className="flex w-full max-w-7xl flex-col md:mx-auto">
+        <Hero />
+      </main>
+      <Footer />
+    </>
+  );
+}
diff --git a/apps/www/src/routes/_marketing/route.tsx b/apps/www/src/routes/_marketing/route.tsx
new file mode 100644
index 000000000..7f5b9ad1d
--- /dev/null
+++ b/apps/www/src/routes/_marketing/route.tsx
@@ -0,0 +1,16 @@
+import { Outlet, createFileRoute } from "@tanstack/react-router";
+
+import { Navigation } from "@/features/www/navbar/navigation";
+
+export const Route = createFileRoute("/_marketing")({
+  component: MarketingLayout,
+});
+
+function MarketingLayout() {
+  return (
+    <div className="min-w-screen md:min-h-screen">
+      <Navigation />
+      <Outlet />
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/api/auth/callback.tsx b/apps/www/src/routes/api/auth/callback.tsx
new file mode 100644
index 000000000..5d655ec31
--- /dev/null
+++ b/apps/www/src/routes/api/auth/callback.tsx
@@ -0,0 +1,10 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { handleCallbackRoute } from "@workos/authkit-tanstack-react-start";
+
+export const Route = createFileRoute("/api/auth/callback")({
+  server: {
+    handlers: {
+      GET: handleCallbackRoute(),
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/email/resend.tsx b/apps/www/src/routes/api/auth/email/resend.tsx
new file mode 100644
index 000000000..bc61a39e6
--- /dev/null
+++ b/apps/www/src/routes/api/auth/email/resend.tsx
@@ -0,0 +1,47 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  authErrorResponse,
+  createWorkosClient,
+  findUserIdByEmail,
+  getJsonBody,
+  jsonResponse,
+} from "@/features/auth/lib/workos-user-management.server";
+
+type ResendVerificationBody = {
+  email?: string;
+  userId?: string;
+};
+
+export const Route = createFileRoute("/api/auth/email/resend")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const body = await getJsonBody<ResendVerificationBody>(request);
+        const email = typeof body.email === "string" ? body.email.trim().toLowerCase() : "";
+        const providedUserId = typeof body.userId === "string" ? body.userId.trim() : "";
+
+        try {
+          const workos = createWorkosClient();
+          const userId = providedUserId || (await findUserIdByEmail(workos, email));
+          if (!userId) {
+            return authErrorResponse("We could not find an account for that email.");
+          }
+
+          await workos.userManagement.sendVerificationEmail({ userId });
+          return jsonResponse({ ok: true });
+        } catch (error) {
+          const status =
+            typeof error === "object" && error !== null && "status" in error
+              ? (error as { status?: unknown }).status
+              : undefined;
+          if (status === 429) {
+            return authErrorResponse("Please wait a moment before requesting another code.", 429);
+          }
+          console.error("[auth] WorkOS resend verification email failed", error);
+          return authErrorResponse("We could not send a new code. Please try again.");
+        }
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/email/verify.tsx b/apps/www/src/routes/api/auth/email/verify.tsx
new file mode 100644
index 000000000..4419d15ed
--- /dev/null
+++ b/apps/www/src/routes/api/auth/email/verify.tsx
@@ -0,0 +1,94 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  authenticateWithOrganizationSelectionChallenge,
+  authErrorResponse,
+  createWorkosClient,
+  findUserIdByEmail,
+  getJsonBody,
+  getSafeReturnPathname,
+  getWorkosAuthConfig,
+  jsonResponse,
+  responseWithSession,
+} from "@/features/auth/lib/workos-user-management.server";
+
+type VerifyEmailBody = {
+  code: string;
+  email?: string;
+  pendingAuthenticationToken?: string;
+  returnPathname?: string;
+};
+
+export const Route = createFileRoute("/api/auth/email/verify")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const body = await getJsonBody<VerifyEmailBody>(request);
+        const code = typeof body.code === "string" ? body.code.trim() : "";
+        const email = typeof body.email === "string" ? body.email.trim().toLowerCase() : "";
+        const pendingAuthenticationToken =
+          typeof body.pendingAuthenticationToken === "string"
+            ? body.pendingAuthenticationToken
+            : "";
+        const returnPathname = getSafeReturnPathname(request, body.returnPathname, "/studio");
+
+        if (!code) {
+          return authErrorResponse("Enter the verification code from your email.");
+        }
+
+        try {
+          const { clientId, cookiePassword } = getWorkosAuthConfig();
+          const workos = createWorkosClient();
+
+          // Preferred path: the pending authentication token from the failed
+          // sign-in/sign-up lets us verify the code AND seal a session in one
+          // call, so the user lands logged in.
+          if (pendingAuthenticationToken) {
+            try {
+              const authResponse = await workos.userManagement.authenticateWithEmailVerification({
+                clientId,
+                code,
+                pendingAuthenticationToken,
+                session: {
+                  cookiePassword,
+                  sealSession: true,
+                },
+              });
+
+              return responseWithSession(authResponse, { redirectTo: returnPathname });
+            } catch (authError) {
+              const organizationSelectionAuthResponse =
+                await authenticateWithOrganizationSelectionChallenge(workos, authError, {
+                  clientId,
+                  cookiePassword,
+                });
+
+              if (organizationSelectionAuthResponse) {
+                return responseWithSession(organizationSelectionAuthResponse, {
+                  redirectTo: returnPathname,
+                });
+              }
+
+              throw authError;
+            }
+          }
+
+          // Fallback (no pending token — e.g. the verify page was reopened cold):
+          // verify the email by user id, then send the user to sign in.
+          const userId = await findUserIdByEmail(workos, email);
+          if (!userId) {
+            return authErrorResponse("We could not find an account for that email.");
+          }
+
+          await workos.userManagement.verifyEmail({ code, userId });
+          return jsonResponse({ verified: true });
+        } catch (error) {
+          console.error("[auth] WorkOS email verification failed", error);
+          return authErrorResponse(
+            "That code is invalid or has expired. Request a new code or sign in again.",
+          );
+        }
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/oauth/$provider.tsx b/apps/www/src/routes/api/auth/oauth/$provider.tsx
new file mode 100644
index 000000000..31f26d92e
--- /dev/null
+++ b/apps/www/src/routes/api/auth/oauth/$provider.tsx
@@ -0,0 +1,48 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  createWorkosClient,
+  getProviderForSlug,
+  getSafeReturnPathnameFromRequest,
+  getWorkosAuthConfig,
+  jsonResponse,
+} from "@/features/auth/lib/workos-user-management.server";
+
+const oauthStateCookieName = "vh-oauth-state";
+
+export const Route = createFileRoute("/api/auth/oauth/$provider")({
+  server: {
+    handlers: {
+      GET: async ({ params, request }) => {
+        const provider = getProviderForSlug(params.provider);
+
+        if (!provider) {
+          return jsonResponse({ error: "Unsupported OAuth provider." }, { status: 404 });
+        }
+
+        const url = new URL(request.url);
+        const state = crypto.randomUUID();
+        const returnPathname = getSafeReturnPathnameFromRequest(request, "/studio");
+        const { clientId } = getWorkosAuthConfig();
+        const workos = createWorkosClient();
+        const location = workos.userManagement.getAuthorizationUrl({
+          clientId,
+          provider,
+          redirectUri: `${url.origin}/api/auth/oauth/callback`,
+          state,
+        });
+
+        const cookieValue = encodeURIComponent(JSON.stringify({ returnPathname, state }));
+        const secure = url.protocol === "https:" ? "; Secure" : "";
+
+        return new Response(null, {
+          headers: {
+            Location: location,
+            "Set-Cookie": `${oauthStateCookieName}=${cookieValue}; Path=/; HttpOnly; SameSite=Lax; Max-Age=600${secure}`,
+          },
+          status: 307,
+        });
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/oauth/callback.tsx b/apps/www/src/routes/api/auth/oauth/callback.tsx
new file mode 100644
index 000000000..aab28adaf
--- /dev/null
+++ b/apps/www/src/routes/api/auth/oauth/callback.tsx
@@ -0,0 +1,117 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  authenticateWithOrganizationSelectionChallenge,
+  createWorkosClient,
+  getWorkosAuthConfig,
+  redirectWithSession,
+} from "@/features/auth/lib/workos-user-management.server";
+
+const oauthStateCookieName = "vh-oauth-state";
+
+const getCookieValue = (request: Request, name: string) => {
+  const cookie = request.headers.get("cookie");
+  if (!cookie) {
+    return undefined;
+  }
+
+  return cookie
+    .split(";")
+    .map((part) => part.trim())
+    .find((part) => part.startsWith(`${name}=`))
+    ?.slice(name.length + 1);
+};
+
+const getStoredOAuthState = (request: Request) => {
+  const value = getCookieValue(request, oauthStateCookieName);
+  if (!value) {
+    return undefined;
+  }
+
+  try {
+    return JSON.parse(decodeURIComponent(value)) as {
+      returnPathname?: string;
+      state?: string;
+    };
+  } catch {
+    return undefined;
+  }
+};
+
+const redirectToLogin = (request: Request) => {
+  const secure = new URL(request.url).protocol === "https:" ? "; Secure" : "";
+  return new Response(null, {
+    headers: {
+      Location: "/auth/login?error=oauth_failed",
+      "Set-Cookie": `${oauthStateCookieName}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0${secure}`,
+    },
+    status: 303,
+  });
+};
+
+export const Route = createFileRoute("/api/auth/oauth/callback")({
+  server: {
+    handlers: {
+      GET: async ({ request }) => {
+        const url = new URL(request.url);
+        const code = url.searchParams.get("code");
+        const state = url.searchParams.get("state");
+        const storedState = getStoredOAuthState(request);
+        const returnPathname = storedState?.returnPathname ?? "/studio";
+
+        if (!(code && state && storedState?.state === state)) {
+          return redirectToLogin(request);
+        }
+
+        try {
+          const { clientId, cookiePassword } = getWorkosAuthConfig();
+          const workos = createWorkosClient();
+          const authResponse = await workos.userManagement.authenticateWithCode({
+            clientId,
+            code,
+            session: {
+              cookiePassword,
+              sealSession: true,
+            },
+          });
+
+          const response = await redirectWithSession(authResponse, returnPathname);
+          const secure = url.protocol === "https:" ? "; Secure" : "";
+          response.headers.append(
+            "Set-Cookie",
+            `${oauthStateCookieName}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0${secure}`,
+          );
+          return response;
+        } catch (error) {
+          try {
+            const { clientId, cookiePassword } = getWorkosAuthConfig();
+            const workos = createWorkosClient();
+            const authResponse = await authenticateWithOrganizationSelectionChallenge(
+              workos,
+              error,
+              {
+                clientId,
+                cookiePassword,
+              },
+            );
+
+            if (authResponse) {
+              const response = await redirectWithSession(authResponse, returnPathname);
+              const secure = url.protocol === "https:" ? "; Secure" : "";
+              response.headers.append(
+                "Set-Cookie",
+                `${oauthStateCookieName}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0${secure}`,
+              );
+              return response;
+            }
+          } catch (selectionError) {
+            console.error("[auth] WorkOS OAuth organization selection failed", selectionError);
+          }
+
+          console.error("[auth] WorkOS OAuth callback failed", error);
+          return redirectToLogin(request);
+        }
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/password/forgot-password.tsx b/apps/www/src/routes/api/auth/password/forgot-password.tsx
new file mode 100644
index 000000000..139f7ccde
--- /dev/null
+++ b/apps/www/src/routes/api/auth/password/forgot-password.tsx
@@ -0,0 +1,39 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  authErrorResponse,
+  createWorkosClient,
+  getJsonBody,
+  jsonResponse,
+} from "@/features/auth/lib/workos-user-management.server";
+
+type ForgotPasswordBody = {
+  email: string;
+};
+
+export const Route = createFileRoute("/api/auth/password/forgot-password")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const body = await getJsonBody<ForgotPasswordBody>(request);
+        const email = typeof body.email === "string" ? body.email.trim().toLowerCase() : "";
+
+        if (!email) {
+          return authErrorResponse("Enter your email address.");
+        }
+
+        try {
+          const workos = createWorkosClient();
+          await workos.userManagement.createPasswordReset({ email });
+        } catch (error) {
+          console.error("[auth] WorkOS password reset creation failed", error);
+        }
+
+        return jsonResponse({
+          ok: true,
+          message: "If an account exists for that email, a reset link will be sent.",
+        });
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/password/reset-password.tsx b/apps/www/src/routes/api/auth/password/reset-password.tsx
new file mode 100644
index 000000000..305a24d4d
--- /dev/null
+++ b/apps/www/src/routes/api/auth/password/reset-password.tsx
@@ -0,0 +1,42 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  authErrorResponse,
+  createWorkosClient,
+  getJsonBody,
+  jsonResponse,
+} from "@/features/auth/lib/workos-user-management.server";
+
+type ResetPasswordBody = {
+  password: string;
+  token: string;
+};
+
+export const Route = createFileRoute("/api/auth/password/reset-password")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const body = await getJsonBody<ResetPasswordBody>(request);
+        const token = typeof body.token === "string" ? body.token.trim() : "";
+        const password = typeof body.password === "string" ? body.password : "";
+
+        if (!(token && password)) {
+          return authErrorResponse("Enter a new password from a valid reset link.");
+        }
+
+        try {
+          const workos = createWorkosClient();
+          await workos.userManagement.resetPassword({
+            newPassword: password,
+            token,
+          });
+
+          return jsonResponse({ redirectTo: "/auth/login?reset=success" });
+        } catch (error) {
+          console.error("[auth] WorkOS password reset failed", error);
+          return authErrorResponse("That reset link is invalid or expired.", 400);
+        }
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/password/sign-in.tsx b/apps/www/src/routes/api/auth/password/sign-in.tsx
new file mode 100644
index 000000000..8826f06b4
--- /dev/null
+++ b/apps/www/src/routes/api/auth/password/sign-in.tsx
@@ -0,0 +1,87 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  authenticateWithOrganizationSelectionChallenge,
+  authErrorResponse,
+  createWorkosClient,
+  getEmailVerificationChallenge,
+  getJsonBody,
+  getSafeReturnPathname,
+  getWorkosAuthConfig,
+  jsonResponse,
+  responseWithSession,
+} from "@/features/auth/lib/workos-user-management.server";
+
+type SignInBody = {
+  email: string;
+  password: string;
+  returnPathname?: string;
+};
+
+export const Route = createFileRoute("/api/auth/password/sign-in")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const body = await getJsonBody<SignInBody>(request);
+        const email = typeof body.email === "string" ? body.email.trim().toLowerCase() : "";
+        const password = typeof body.password === "string" ? body.password : "";
+        const returnPathname = getSafeReturnPathname(request, body.returnPathname, "/studio");
+
+        if (!(email && password)) {
+          return authErrorResponse("Enter your email and password.");
+        }
+
+        try {
+          const { clientId, cookiePassword } = getWorkosAuthConfig();
+          const workos = createWorkosClient();
+          const authResponse = await workos.userManagement.authenticateWithPassword({
+            clientId,
+            email,
+            password,
+            session: {
+              cookiePassword,
+              sealSession: true,
+            },
+          });
+
+          return responseWithSession(authResponse, { redirectTo: returnPathname });
+        } catch (error) {
+          // An unverified account can't sign in yet. WorkOS sends a fresh 6-digit
+          // code on this attempt, so we hand the challenge back and let the
+          // verify-email page take over (this also handles users who closed the
+          // page mid sign-up and simply log in again).
+          const challenge = getEmailVerificationChallenge(error);
+          if (challenge) {
+            return jsonResponse({
+              email: challenge.email ?? email,
+              emailVerificationRequired: true,
+              pendingAuthenticationToken: challenge.pendingAuthenticationToken,
+              userId: challenge.userId,
+            });
+          }
+
+          const authResponse = await (async () => {
+            try {
+              const { clientId, cookiePassword } = getWorkosAuthConfig();
+              const workos = createWorkosClient();
+              return await authenticateWithOrganizationSelectionChallenge(workos, error, {
+                clientId,
+                cookiePassword,
+              });
+            } catch (selectionError) {
+              console.error("[auth] WorkOS password organization selection failed", selectionError);
+              return null;
+            }
+          })();
+
+          if (authResponse) {
+            return responseWithSession(authResponse, { redirectTo: returnPathname });
+          }
+
+          console.error("[auth] WorkOS password sign-in failed", error);
+          return authErrorResponse("We could not sign you in with those credentials.", 401);
+        }
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/api/auth/password/sign-up.tsx b/apps/www/src/routes/api/auth/password/sign-up.tsx
new file mode 100644
index 000000000..a5ce6368a
--- /dev/null
+++ b/apps/www/src/routes/api/auth/password/sign-up.tsx
@@ -0,0 +1,99 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import {
+  authenticateWithOrganizationSelectionChallenge,
+  authErrorResponse,
+  createWorkosClient,
+  getEmailVerificationChallenge,
+  getJsonBody,
+  getSafeReturnPathname,
+  getWorkosAuthConfig,
+  jsonResponse,
+  responseWithSession,
+} from "@/features/auth/lib/workos-user-management.server";
+
+type SignUpBody = {
+  email: string;
+  firstName?: string;
+  lastName?: string;
+  password: string;
+  returnPathname?: string;
+};
+
+export const Route = createFileRoute("/api/auth/password/sign-up")({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const body = await getJsonBody<SignUpBody>(request);
+        const email = typeof body.email === "string" ? body.email.trim().toLowerCase() : "";
+        const password = typeof body.password === "string" ? body.password : "";
+        const firstName = typeof body.firstName === "string" ? body.firstName.trim() : "";
+        const lastName = typeof body.lastName === "string" ? body.lastName.trim() : "";
+        const returnPathname = getSafeReturnPathname(request, body.returnPathname, "/studio");
+
+        if (!(email && password)) {
+          return authErrorResponse("Enter your email and password.");
+        }
+
+        try {
+          const { clientId, cookiePassword } = getWorkosAuthConfig();
+          const workos = createWorkosClient();
+
+          await workos.userManagement.createUser({
+            email,
+            firstName: firstName || undefined,
+            lastName: lastName || undefined,
+            password,
+          });
+
+          // The account now exists. Try to start a session immediately; if the
+          // WorkOS environment requires email verification, this step throws and
+          // we surface a "verify your email" state instead of a generic failure.
+          try {
+            const authResponse = await workos.userManagement.authenticateWithPassword({
+              clientId,
+              email,
+              password,
+              session: {
+                cookiePassword,
+                sealSession: true,
+              },
+            });
+
+            return responseWithSession(authResponse, { redirectTo: returnPathname });
+          } catch (authError) {
+            const challenge = getEmailVerificationChallenge(authError);
+            if (challenge) {
+              // Account created and WorkOS sent a 6-digit verification code. We
+              // hand the pending token + user id to the client so the
+              // verify-email page can complete verification and start a session.
+              return jsonResponse({
+                email: challenge.email ?? email,
+                emailVerificationRequired: true,
+                pendingAuthenticationToken: challenge.pendingAuthenticationToken,
+                userId: challenge.userId,
+              });
+            }
+
+            const organizationSelectionAuthResponse =
+              await authenticateWithOrganizationSelectionChallenge(workos, authError, {
+                clientId,
+                cookiePassword,
+              });
+
+            if (organizationSelectionAuthResponse) {
+              return responseWithSession(organizationSelectionAuthResponse, {
+                redirectTo: returnPathname,
+              });
+            }
+
+            throw authError;
+          }
+        } catch (error) {
+          console.error("[auth] WorkOS password sign-up failed", error);
+          return authErrorResponse("We could not create an account with those details.");
+        }
+      },
+    },
+  },
+});
diff --git a/apps/www/src/routes/auth/devices/index.tsx b/apps/www/src/routes/auth/devices/index.tsx
new file mode 100644
index 000000000..f9c75f258
--- /dev/null
+++ b/apps/www/src/routes/auth/devices/index.tsx
@@ -0,0 +1,213 @@
+// Inspired by https://github.com/unkeyed/examples/blob/main/unkey-cli/web/app/auth/devices/page.tsx
+
+import { useMutation } from "@tanstack/react-query";
+import { createFileRoute, Link, redirect } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
+import { getAuth } from "@workos/authkit-tanstack-react-start";
+import { Button } from "@voidhash/ui";
+import { Loader2 } from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import { z } from "zod";
+
+import { AuthHeader, AuthLayout } from "@/features/auth/components/auth-layout";
+import { createUserApiKeyOptions } from "@/features/auth/lib/tanstack-query";
+import {
+  DEVICE_CODE_EXPIRY_MS,
+  isDeviceCodeExpired,
+  isValidLocalRedirect,
+} from "@/features/auth/lib/validation";
+
+const devicesSearchSchema = z.object({
+  code: z.string().optional(),
+  expires: z.string().optional(),
+  redirect: z.string().optional(),
+});
+
+export const Route = createFileRoute("/auth/devices/")({
+  component: AuthDevicesPage,
+  loader: async ({ location }) => {
+    const auth = await getAuth();
+    if (!auth.user) {
+      const params = new URLSearchParams(location.searchStr);
+      const nextUrl = `/auth/devices?${params.toString()}`;
+      throw redirect({ search: { next: nextUrl }, to: "/auth/login" });
+    }
+  },
+  validateSearch: zodValidator(devicesSearchSchema),
+});
+
+function CodeCharacter({ char }: { char: string }) {
+  return <div className="rounded-lg bg-accent p-2 font-mono text-xl lg:p-2 lg:text-xl">{char}</div>;
+}
+
+function Cancelled() {
+  return (
+    <AuthLayout>
+      <AuthHeader description="You can return to your CLI." title="Login cancelled" />
+    </AuthLayout>
+  );
+}
+
+function Success() {
+  return (
+    <AuthLayout>
+      <AuthHeader description="You can return to your CLI." title="Login successful!" />
+    </AuthLayout>
+  );
+}
+
+function ErrorCard({
+  title = "An error occurred",
+  description = "Please try again. If the problem persists, please contact us at support@voidhash.com.",
+}: {
+  title?: string;
+  description?: string;
+}) {
+  return (
+    <AuthLayout>
+      <AuthHeader description={description} title={title} />
+      <div className="mt-10">
+        <Button asChild className="w-full cursor-pointer" size="lg" variant="outline">
+          <Link to="/auth/login">Return to login</Link>
+        </Button>
+      </div>
+    </AuthLayout>
+  );
+}
+
+function ExpiredCard() {
+  return (
+    <AuthLayout>
+      <AuthHeader
+        description="This authorization request has expired. Please return to your CLI and try again."
+        title="Code expired"
+      />
+      <p className="mt-6 text-muted-foreground text-xs">
+        Device codes expire after {Math.floor(DEVICE_CODE_EXPIRY_MS / 60_000)} minutes for security.
+      </p>
+    </AuthLayout>
+  );
+}
+
+function AuthDevicesPage() {
+  const [isLoading, setIsLoading] = useState(false);
+  const [cancelled, setCancelled] = useState(false);
+  const [success, setSuccess] = useState(false);
+
+  const { mutateAsync: createUserApiKey } = useMutation({
+    ...createUserApiKeyOptions(),
+  });
+
+  const searchParams = Route.useSearch();
+
+  const { code, redirect: redirectUrl, expires } = searchParams;
+
+  if (!(code && redirectUrl)) {
+    return (
+      <ErrorCard
+        description="The authorization request is missing required parameters. Please return to your CLI and try again."
+        title="Invalid request"
+      />
+    );
+  }
+
+  if (!isValidLocalRedirect(redirectUrl)) {
+    return (
+      <ErrorCard
+        description="The redirect URL must be a localhost address. This is required for security."
+        title="Invalid redirect"
+      />
+    );
+  }
+
+  if (isDeviceCodeExpired(expires)) {
+    return <ExpiredCard />;
+  }
+
+  const confirm = async () => {
+    setIsLoading(true);
+    try {
+      const { rawKey } = await createUserApiKey({ name: "CLI", prefix: "vh_cli_" });
+
+      const url = new URL(redirectUrl);
+      url.searchParams.append("code", code);
+      url.searchParams.append("key", rawKey);
+      await fetch(url.toString());
+      setIsLoading(false);
+      setSuccess(true);
+    } catch (error) {
+      console.error("[devices] failed to issue CLI key", error);
+      toast.error("Error creating Voidhash API key.");
+      setIsLoading(false);
+    }
+  };
+
+  const cancel = async () => {
+    try {
+      setIsLoading(true);
+      const url = new URL(redirectUrl);
+      url.searchParams.append("cancelled", "true");
+      await fetch(url.toString());
+      setIsLoading(false);
+      setCancelled(true);
+    } catch {
+      setIsLoading(false);
+      toast.error("Error cancelling login. Is your local CLI running?");
+    }
+  };
+
+  if (cancelled) {
+    return <Cancelled />;
+  }
+
+  if (success) {
+    return <Success />;
+  }
+
+  return (
+    <AuthLayout>
+      <AuthHeader
+        description="Please confirm this is the code shown in your terminal."
+        title="Device confirmation"
+      />
+      <div className="mt-10 flex flex-col gap-6">
+        <div className="flex flex-row items-center justify-center">
+          <div className="grid auto-cols-auto grid-flow-col gap-1 leading-none lg:gap-3">
+            {[...code].map((char, i) => (
+              <CodeCharacter
+                char={char}
+                key={`${char}-${
+                  // biome-ignore lint/suspicious/noArrayIndexKey: OK in this case
+                  i
+                }`}
+              />
+            ))}
+          </div>
+        </div>
+        <div className="flex flex-col gap-2">
+          <Button
+            className="w-full cursor-pointer"
+            disabled={isLoading}
+            onClick={confirm}
+            size="lg"
+            type="submit"
+          >
+            {isLoading && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+            {isLoading ? "Processing..." : "Confirm code"}
+          </Button>
+          <Button
+            className="w-full cursor-pointer"
+            disabled={isLoading}
+            onClick={cancel}
+            size="lg"
+            type="button"
+            variant="outline"
+          >
+            Cancel
+          </Button>
+        </div>
+      </div>
+    </AuthLayout>
+  );
+}
diff --git a/apps/www/src/routes/auth/forgot-password.tsx b/apps/www/src/routes/auth/forgot-password.tsx
new file mode 100644
index 000000000..0a4a7974c
--- /dev/null
+++ b/apps/www/src/routes/auth/forgot-password.tsx
@@ -0,0 +1,147 @@
+import { Link, createFileRoute } from "@tanstack/react-router";
+import { useMutation } from "@tanstack/react-query";
+import { zodValidator } from "@tanstack/zod-adapter";
+import {
+  Alert,
+  AlertDescription,
+  AlertTitle,
+  Button,
+  Input,
+  Label,
+} from "@voidhash/ui";
+import { ArrowLeft, Loader2, Mail } from "lucide-react";
+import { type FormEvent, useState } from "react";
+import { z } from "zod";
+
+import { AuthHeader, AuthLayout } from "@/features/auth/components/auth-layout";
+import { requestPasswordReset } from "@/features/auth/lib/auth-api";
+
+const forgotPasswordSearchSchema = z.object({
+  next: z.string().optional(),
+});
+
+export const Route = createFileRoute("/auth/forgot-password")({
+  component: ForgotPasswordPage,
+  validateSearch: zodValidator(forgotPasswordSearchSchema),
+});
+
+function ForgotPasswordPage() {
+  const searchParams = Route.useSearch();
+  const [email, setEmail] = useState("");
+  const [error, setError] = useState<string>();
+  const [emailSent, setEmailSent] = useState(false);
+  const forgotPasswordMutation = useMutation({
+    mutationFn: requestPasswordReset,
+    onError: (error) => {
+      setError(error.message);
+    },
+    onMutate: () => {
+      setError(undefined);
+    },
+    onSuccess: () => {
+      setEmailSent(true);
+    },
+  });
+
+  const handleSubmit = async (event: FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
+    forgotPasswordMutation.mutate({ email });
+  };
+
+  if (emailSent) {
+    return (
+      <AuthLayout>
+        <AuthHeader
+          description={
+            <>
+              We&apos;ve sent a password reset link to{" "}
+              <span className="font-medium text-foreground">{email}</span>
+            </>
+          }
+          title="Check your email"
+        />
+        <div className="mt-10 flex flex-col gap-6">
+          <Alert>
+            <Mail className="h-4 w-4" />
+            <AlertTitle>Didn&apos;t receive the email?</AlertTitle>
+            <AlertDescription>
+              Check your spam folder or{" "}
+              <button
+                className="underline underline-offset-4"
+                onClick={() => {
+                  setEmailSent(false);
+                  setEmail("");
+                }}
+                type="button"
+              >
+                try another email address
+              </button>
+            </AlertDescription>
+          </Alert>
+        </div>
+        <div className="mt-8 text-center text-sm">
+          <Link
+            className="inline-flex items-center gap-2 text-muted-foreground text-sm hover:text-foreground"
+            search={{ next: searchParams.next }}
+            to="/auth/login"
+          >
+            <ArrowLeft className="h-4 w-4" />
+            Back to login
+          </Link>
+        </div>
+      </AuthLayout>
+    );
+  }
+
+  return (
+    <AuthLayout>
+      <AuthHeader
+        description="Enter the email address you used to create the account and we'll email you instructions to reset your password."
+        title="Forgot password?"
+      />
+      <form className="mt-10 flex flex-col gap-6" onSubmit={handleSubmit}>
+        {error && (
+          <Alert variant="destructive">
+            <AlertTitle>Reset failed</AlertTitle>
+            <AlertDescription>{error}</AlertDescription>
+          </Alert>
+        )}
+
+        <div className="grid gap-6">
+          <div className="grid gap-2">
+            <Label htmlFor="email">Email</Label>
+            <Input
+              autoComplete="email"
+              id="email"
+              onChange={(event) => setEmail(event.target.value)}
+              placeholder="name@example.com"
+              required
+              size="lg"
+              type="email"
+              value={email}
+            />
+          </div>
+          <Button
+            className="w-full cursor-pointer"
+            disabled={forgotPasswordMutation.isPending}
+            size="lg"
+            type="submit"
+          >
+            {forgotPasswordMutation.isPending && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+            {forgotPasswordMutation.isPending ? "Sending..." : "Send reset link"}
+          </Button>
+        </div>
+      </form>
+      <div className="mt-8 text-center text-sm">
+        <Link
+          className="inline-flex items-center gap-2 text-muted-foreground text-sm hover:text-foreground"
+          search={{ next: searchParams.next }}
+          to="/auth/login"
+        >
+          <ArrowLeft className="h-4 w-4" />
+          Back to login
+        </Link>
+      </div>
+    </AuthLayout>
+  );
+}
diff --git a/apps/www/src/routes/auth/index.tsx b/apps/www/src/routes/auth/index.tsx
new file mode 100644
index 000000000..9a0b3760c
--- /dev/null
+++ b/apps/www/src/routes/auth/index.tsx
@@ -0,0 +1,51 @@
+import { Link, createFileRoute, redirect } from "@tanstack/react-router";
+import { getAuth } from "@workos/authkit-tanstack-react-start";
+import { Button } from "@voidhash/ui";
+import { LogOut } from "lucide-react";
+
+import { AuthHeader, AuthLayout } from "@/features/auth/components/auth-layout";
+import { authMiddleware } from "@/features/auth/middleware/auth";
+import { redirectToSignOut } from "@/features/auth/lib/workos";
+
+export const Route = createFileRoute("/auth/")({
+  component: HomePage,
+  loader: async () => {
+    const auth = await getAuth();
+    if (!auth.user) {
+      throw redirect({ to: "/auth/login" });
+    }
+    return auth;
+  },
+  server: {
+    middleware: [authMiddleware],
+  },
+});
+
+function HomePage() {
+  const { user } = Route.useLoaderData();
+
+  const name = [user.firstName, user.lastName].filter(Boolean).join(" ") || user.email;
+
+  return (
+    <AuthLayout>
+      <AuthHeader description={user.email} title={`Welcome, ${name}`} />
+      <div className="mt-10 flex flex-col gap-6">
+        <p className="text-muted-foreground text-sm">You are signed in to Voidhash.</p>
+        <div className="flex flex-col gap-2">
+          <Button asChild className="w-full cursor-pointer" size="lg" variant="outline">
+            <Link to="/">Go to homepage</Link>
+          </Button>
+          <Button
+            className="w-full cursor-pointer"
+            onClick={() => redirectToSignOut("/auth/login")}
+            size="lg"
+            variant="destructive"
+          >
+            <LogOut className="mr-2 h-4 w-4" />
+            Sign out
+          </Button>
+        </div>
+      </div>
+    </AuthLayout>
+  );
+}
diff --git a/apps/www/src/routes/auth/login.tsx b/apps/www/src/routes/auth/login.tsx
new file mode 100644
index 000000000..04468ddbe
--- /dev/null
+++ b/apps/www/src/routes/auth/login.tsx
@@ -0,0 +1,233 @@
+import { Link, createFileRoute, useNavigate } from "@tanstack/react-router";
+import { useMutation } from "@tanstack/react-query";
+import { zodValidator } from "@tanstack/zod-adapter";
+import { Alert, AlertDescription, AlertTitle, Button, Input, Label, Logo } from "@voidhash/ui";
+import { AlertCircle, CheckCircle, Loader2 } from "lucide-react";
+import { type FormEvent, useState } from "react";
+import { z } from "zod";
+
+import { VoidhashGradientBackground } from "@/components/voidhash-gradient-background";
+import { signInWithPassword } from "@/features/auth/lib/auth-api";
+import { saveEmailVerificationState } from "@/features/auth/lib/email-verification-storage";
+
+const loginSearchSchema = z.object({
+  email: z.string().default(""),
+  error: z.string().optional(),
+  next: z.string().optional(),
+  reset: z.string().optional(),
+  signup: z.boolean().default(false),
+});
+
+const loginGradientSettings = {
+  topEnabled: false,
+  effectHeight: 70,
+} as const;
+
+export const Route = createFileRoute("/auth/login")({
+  component: LoginPage,
+  validateSearch: zodValidator(loginSearchSchema),
+});
+
+function LoginPage() {
+  const searchParams = Route.useSearch();
+  const navigate = useNavigate();
+  const [error, setError] = useState<string>();
+  const signInMutation = useMutation({
+    mutationFn: signInWithPassword,
+    onError: (error) => {
+      setError(error.message);
+    },
+    onMutate: () => {
+      setError(undefined);
+    },
+    onSuccess: (payload, variables) => {
+      if (payload.emailVerificationRequired) {
+        // The account exists but isn't verified yet. WorkOS just sent a fresh
+        // code; hand off to the verify-email page to complete sign-in.
+        const email = payload.email ?? variables.email;
+        saveEmailVerificationState({
+          email,
+          next: searchParams.next,
+          pendingAuthenticationToken: payload.pendingAuthenticationToken,
+          userId: payload.userId,
+        });
+        navigate({ search: { email, next: searchParams.next }, to: "/auth/verify-email" });
+        return;
+      }
+      window.location.href = payload.redirectTo ?? "/studio";
+    },
+  });
+
+  const handleSubmit = async (event: FormEvent<HTMLFormElement>) => {
+    event.preventDefault();
+
+    const formData = new FormData(event.currentTarget);
+    signInMutation.mutate({
+      email: String(formData.get("email") ?? ""),
+      password: String(formData.get("password") ?? ""),
+      returnPathname: searchParams.next,
+    });
+  };
+
+  const oauthUrl = () => {
+    const params = new URLSearchParams({ returnPathname: searchParams.next ?? "/studio" });
+    return `/api/auth/oauth/github?${params.toString()}`;
+  };
+
+  return (
+    <div className="relative grid min-h-svh overflow-hidden bg-background lg:grid-cols-12">
+      <VoidhashGradientBackground
+        className="absolute inset-0"
+        controlsQueryParam="loginGradientControls"
+        controlsStorageKey="voidhash:login-gradient-controls"
+        controlsTitle="Login FX"
+        settings={loginGradientSettings}
+        settingsStorageKey="voidhash:login-gradient-settings"
+      />
+      <div className="relative z-10 col-span-6 flex flex-col gap-4 bg-background/95 p-6 backdrop-blur-xl md:p-10 lg:border-r lg:border-border/50">
+        <div className="flex justify-center gap-2 md:justify-start">
+          <Link className="flex gap-2 font-medium" to="/">
+            <Logo />
+          </Link>
+        </div>
+        <div className="flex flex-1 items-center justify-center">
+          <div className="w-full max-w-sm">
+            <div className="flex flex-col items-start gap-2 text-left">
+              <h1 className=" text-3xl">Welcome back!</h1>
+            </div>
+            <form className="flex flex-col gap-6 mt-10" onSubmit={handleSubmit}>
+              {(error || searchParams.error === "oauth_failed") && (
+                <div className="mb-6">
+                  <Alert variant="destructive">
+                    <AlertCircle className="h-4 w-4" />
+                    <AlertTitle>Sign-in failed</AlertTitle>
+                    <AlertDescription>
+                      {error ?? "We could not complete the OAuth sign-in."}
+                    </AlertDescription>
+                  </Alert>
+                </div>
+              )}
+
+              {searchParams.error === "insufficient_permissions" && (
+                <div className="mb-6">
+                  <Alert variant="destructive">
+                    <AlertCircle className="h-4 w-4" />
+                    <AlertTitle>Access Denied</AlertTitle>
+                    <AlertDescription>
+                      You don&apos;t have permission to access the requested page.
+                    </AlertDescription>
+                  </Alert>
+                </div>
+              )}
+              {searchParams.signup && (
+                <div className="mb-6">
+                  <Alert>
+                    <CheckCircle className="h-4 w-4" />
+                    <AlertTitle>Your account was successfully created</AlertTitle>
+                    <AlertDescription>You can now login to your account</AlertDescription>
+                  </Alert>
+                </div>
+              )}
+
+              {searchParams.reset === "success" && (
+                <div className="mb-6">
+                  <Alert>
+                    <CheckCircle className="h-4 w-4" />
+                    <AlertTitle>Password updated</AlertTitle>
+                    <AlertDescription>Sign in with your new password.</AlertDescription>
+                  </Alert>
+                </div>
+              )}
+
+              <div className="grid gap-6">
+                <div className="grid gap-2">
+                  <Label htmlFor="email">Email</Label>
+                  <Input
+                    autoComplete="email"
+                    defaultValue={searchParams.email}
+                    id="email"
+                    name="email"
+                    placeholder="name@example.com"
+                    required
+                    size={"lg"}
+                    type="email"
+                  />
+                </div>
+                <div className="grid gap-2">
+                  <div className="flex items-center justify-between">
+                    <Label htmlFor="password">Password</Label>
+                  </div>
+                  <Input
+                    autoComplete="current-password"
+                    id="password"
+                    name="password"
+                    required
+                    size={"lg"}
+                    type="password"
+                  />
+                </div>
+                <Button
+                  className="w-full cursor-pointer"
+                  disabled={signInMutation.isPending}
+                  type="submit"
+                  size={"lg"}
+                >
+                  {signInMutation.isPending && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+                  Continue
+                </Button>
+                <div className="relative text-center text-sm after:absolute after:inset-0 after:top-1/2 after:z-0 after:flex after:items-center after:border-accent after:border-t">
+                  <span className="relative z-10 bg-background px-2 text-muted-foreground">OR</span>
+                </div>
+                <div className="flex flex-col gap-4">
+                  <Button
+                    asChild
+                    className="w-full cursor-pointer"
+                    disabled={signInMutation.isPending}
+                    size={"lg"}
+                    type="button"
+                    variant="outline"
+                  >
+                    <a href={oauthUrl()}>
+                      <svg
+                        aria-label="Github"
+                        viewBox="0 0 24 24"
+                        xmlns="http://www.w3.org/2000/svg"
+                      >
+                        <title>Github Icon</title>
+                        <path
+                          d="M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12"
+                          fill="currentColor"
+                        />
+                      </svg>
+                      Continue with Github
+                    </a>
+                  </Button>
+                </div>
+              </div>
+            </form>
+
+            <div className="text-center text-sm mt-8">
+              New to Voidhash?{" "}
+              <Link
+                className="text-muted-foreground text-sm hover:text-foreground underline underline-offset-4"
+                search={{ next: searchParams.next }}
+                to="/auth/sign-up"
+              >
+                Sign up
+              </Link>
+            </div>
+
+            <div className="text-center mt-6">
+              <Link
+                className="text-muted-foreground text-sm hover:text-foreground underline  underline-offset-4"
+                to="/auth/forgot-password"
+              >
+                Forgot your password?
+              </Link>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/auth/logout.tsx b/apps/www/src/routes/auth/logout.tsx
new file mode 100644
index 000000000..2827e4a89
--- /dev/null
+++ b/apps/www/src/routes/auth/logout.tsx
@@ -0,0 +1,26 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { signOut } from "@workos/authkit-tanstack-react-start";
+import { Spinner } from "@voidhash/ui";
+
+import { toSafeReturnPathname } from "@/features/auth/lib/validation";
+
+export const Route = createFileRoute("/auth/logout")({
+  component: LogoutPage,
+  loader: async ({ location }) => {
+    const returnTo = toSafeReturnPathname(
+      new URLSearchParams(location.searchStr).get("returnTo"),
+    ) ?? "/";
+
+    await signOut({
+      data: { returnTo },
+    });
+  },
+});
+
+function LogoutPage() {
+  return (
+    <div className="flex min-h-svh items-center justify-center bg-background">
+      <Spinner />
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/auth/reset-password.tsx b/apps/www/src/routes/auth/reset-password.tsx
new file mode 100644
index 000000000..83e3620d1
--- /dev/null
+++ b/apps/www/src/routes/auth/reset-password.tsx
@@ -0,0 +1,191 @@
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation } from "@tanstack/react-query";
+import { Link, createFileRoute } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
+import {
+  Alert,
+  AlertDescription,
+  Button,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+  Input,
+} from "@voidhash/ui";
+import { AlertCircle, Loader2 } from "lucide-react";
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { z } from "zod";
+
+import { AuthHeader, AuthLayout } from "@/features/auth/components/auth-layout";
+import { resetPassword } from "@/features/auth/lib/auth-api";
+
+const resetPasswordSearchSchema = z.object({
+  next: z.string().optional(),
+  token: z.string().optional(),
+});
+
+export const Route = createFileRoute("/auth/reset-password")({
+  component: ResetPasswordPage,
+  validateSearch: zodValidator(resetPasswordSearchSchema),
+});
+
+const resetPasswordSchema = z
+  .object({
+    confirmPassword: z.string(),
+    password: z
+      .string()
+      .min(8, "Password must be at least 8 characters")
+      .regex(
+        /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/,
+        "Password must contain at least one uppercase letter, one lowercase letter, and one number",
+      ),
+  })
+  .refine((data) => data.password === data.confirmPassword, {
+    message: "Passwords do not match",
+    path: ["confirmPassword"],
+  });
+
+type ResetPasswordForm = z.infer<typeof resetPasswordSchema>;
+
+function ResetPasswordPage() {
+  const searchParams = Route.useSearch();
+  const [success, setSuccess] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const form = useForm<ResetPasswordForm>({
+    defaultValues: {
+      confirmPassword: "",
+      password: "",
+    },
+    resolver: zodResolver(resetPasswordSchema),
+  });
+
+  const { token } = searchParams;
+
+  const resetPasswordMutation = useMutation({
+    mutationFn: resetPassword,
+    onError: (error) => {
+      if (error.message.includes("expired")) {
+        setError("This password reset link has expired. Please request a new one.");
+      } else {
+        setError(error.message);
+      }
+    },
+    onMutate: () => {
+      setError(null);
+    },
+    onSuccess: () => {
+      setSuccess(true);
+    },
+  });
+
+  const onSubmit = (data: ResetPasswordForm) => {
+    if (!token) {
+      setError("Invalid or missing reset token");
+      return;
+    }
+
+    resetPasswordMutation.mutate({
+      password: data.password,
+      token,
+    });
+  };
+
+  if (!token) {
+    return (
+      <AuthLayout>
+        <AuthHeader
+          description="This password reset link is invalid or has expired. Please request a new password reset."
+          title="Invalid link"
+        />
+        <div className="mt-10">
+          <Button asChild className="w-full cursor-pointer" size="lg" variant="outline">
+            <Link search={{ next: searchParams.next }} to="/auth/forgot-password">
+              Request new reset link
+            </Link>
+          </Button>
+        </div>
+      </AuthLayout>
+    );
+  }
+
+  if (success) {
+    return (
+      <AuthLayout>
+        <AuthHeader
+          description="Your password has been reset successfully. You can now sign in with your new password."
+          title="Password reset!"
+        />
+        <div className="mt-10">
+          <Button asChild className="w-full cursor-pointer" size="lg">
+            <Link search={{ next: searchParams.next }} to="/auth/login">
+              Continue to login
+            </Link>
+          </Button>
+        </div>
+      </AuthLayout>
+    );
+  }
+
+  return (
+    <AuthLayout>
+      <AuthHeader
+        description="Enter your new password below. Make sure it's at least 8 characters and includes uppercase, lowercase, and a number."
+        title="Reset your password"
+      />
+      <Form {...form}>
+        <form className="mt-10 flex flex-col gap-6" onSubmit={form.handleSubmit(onSubmit)}>
+          {error && (
+            <Alert variant="destructive">
+              <AlertCircle className="h-4 w-4" />
+              <AlertDescription>{error}</AlertDescription>
+            </Alert>
+          )}
+
+          <div className="grid gap-6">
+            <FormField
+              control={form.control}
+              name="password"
+              render={({ field }) => (
+                <FormItem className="grid gap-2">
+                  <FormLabel>New password</FormLabel>
+                  <FormControl>
+                    <Input autoComplete="new-password" size="lg" type="password" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <FormField
+              control={form.control}
+              name="confirmPassword"
+              render={({ field }) => (
+                <FormItem className="grid gap-2">
+                  <FormLabel>Confirm new password</FormLabel>
+                  <FormControl>
+                    <Input autoComplete="new-password" size="lg" type="password" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <Button
+              className="w-full cursor-pointer"
+              disabled={resetPasswordMutation.isPending}
+              size="lg"
+              type="submit"
+            >
+              {resetPasswordMutation.isPending && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+              {resetPasswordMutation.isPending ? "Resetting..." : "Reset password"}
+            </Button>
+          </div>
+        </form>
+      </Form>
+    </AuthLayout>
+  );
+}
diff --git a/apps/www/src/routes/auth/route.tsx b/apps/www/src/routes/auth/route.tsx
new file mode 100644
index 000000000..5be63a46f
--- /dev/null
+++ b/apps/www/src/routes/auth/route.tsx
@@ -0,0 +1,27 @@
+import { Outlet, createFileRoute } from "@tanstack/react-router";
+
+import { AUTH_PATH } from "@/lib/paths";
+
+export const Route = createFileRoute("/auth")({
+  component: Outlet,
+  head: () => ({
+    links: [
+      {
+        href: `${AUTH_PATH}/favicon.ico`,
+        rel: "icon",
+        type: "image/x-icon",
+      },
+      {
+        href: `${AUTH_PATH}/apple-icon.png`,
+        rel: "apple-touch-icon",
+      },
+    ],
+    meta: [
+      { title: "Voidhash Auth" },
+      {
+        content: "Authentication and account management for Voidhash.",
+        name: "description",
+      },
+    ],
+  }),
+});
diff --git a/apps/www/src/routes/auth/sign-up.tsx b/apps/www/src/routes/auth/sign-up.tsx
new file mode 100644
index 000000000..86a091922
--- /dev/null
+++ b/apps/www/src/routes/auth/sign-up.tsx
@@ -0,0 +1,258 @@
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation } from "@tanstack/react-query";
+import { Link, createFileRoute, useNavigate } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
+import {
+  Alert,
+  AlertDescription,
+  AlertTitle,
+  Button,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+  Input,
+  Logo,
+} from "@voidhash/ui";
+import { AlertCircle, Loader2 } from "lucide-react";
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { z } from "zod/v3";
+
+import { VoidhashGradientBackground } from "@/components/voidhash-gradient-background";
+import { signUpWithPassword } from "@/features/auth/lib/auth-api";
+import { saveEmailVerificationState } from "@/features/auth/lib/email-verification-storage";
+import { provisionCurrentUser } from "@/features/auth/lib/provision-user";
+
+const signUpSearchSchema = z.object({
+  email: z.string().optional(),
+  next: z.string().optional(),
+});
+
+const signUpGradientSettings = {
+  topEnabled: false,
+  effectHeight: 70,
+} as const;
+
+export const Route = createFileRoute("/auth/sign-up")({
+  component: SignUpPage,
+  validateSearch: zodValidator(signUpSearchSchema),
+});
+
+const signUpSchema = z.object({
+  email: z.string().email("Please enter a valid email address"),
+  name: z.string().min(2, "Name must be at least 2 characters"),
+  password: z
+    .string()
+    .min(8, "Password must be at least 8 characters")
+    .regex(
+      /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)/,
+      "Password must contain at least one uppercase letter, one lowercase letter, and one number",
+    ),
+});
+
+type SignUpForm = z.infer<typeof signUpSchema>;
+
+const splitName = (name: string) => {
+  const [firstName = "", ...lastNameParts] = name.trim().split(/\s+/);
+
+  return {
+    firstName,
+    lastName: lastNameParts.join(" "),
+  };
+};
+
+function SignUpPage() {
+  const [error, setError] = useState<string>();
+  const searchParams = Route.useSearch();
+  const navigate = useNavigate();
+
+  const form = useForm<SignUpForm>({
+    defaultValues: {
+      email: searchParams.email ?? "",
+      name: "",
+      password: "",
+    },
+    resolver: zodResolver(signUpSchema),
+  });
+
+  const signUpMutation = useMutation({
+    mutationFn: signUpWithPassword,
+    onError: (error) => {
+      setError(error.message);
+    },
+    onMutate: () => {
+      setError(undefined);
+    },
+    onSuccess: async (payload, variables) => {
+      if (payload.emailVerificationRequired) {
+        const email = payload.email ?? variables.email;
+        saveEmailVerificationState({
+          email,
+          next: searchParams.next,
+          pendingAuthenticationToken: payload.pendingAuthenticationToken,
+          userId: payload.userId,
+        });
+        navigate({ search: { email, next: searchParams.next }, to: "/auth/verify-email" });
+        return;
+      }
+      // Eagerly create the local user record in the backend before landing on
+      // the dashboard, so its first load is a plain read rather than a
+      // write-on-read.
+      await provisionCurrentUser();
+      window.location.href = payload.redirectTo ?? "/studio";
+    },
+  });
+
+  const onSubmit = (data: SignUpForm) => {
+    const { firstName, lastName } = splitName(data.name);
+
+    signUpMutation.mutate({
+      email: data.email,
+      firstName,
+      lastName,
+      password: data.password,
+      returnPathname: searchParams.next,
+    });
+  };
+
+  const oauthUrl = () => {
+    const params = new URLSearchParams({ returnPathname: searchParams.next ?? "/studio" });
+    return `/api/auth/oauth/github?${params.toString()}`;
+  };
+
+  const isSubmitting = signUpMutation.isPending || signUpMutation.isSuccess;
+
+  return (
+    <div className="relative grid min-h-svh overflow-hidden bg-background lg:grid-cols-12">
+      <VoidhashGradientBackground
+        className="absolute inset-0"
+        controlsQueryParam="signUpGradientControls"
+        controlsStorageKey="voidhash:sign-up-gradient-controls"
+        controlsTitle="Sign Up FX"
+        settings={signUpGradientSettings}
+        settingsStorageKey="voidhash:sign-up-gradient-settings"
+      />
+      <div className="relative z-10 col-span-6 flex flex-col gap-4 bg-background/95 p-6 backdrop-blur-xl  md:p-10 lg:border-r lg:border-border/50">
+        <div className="flex justify-center gap-2 md:justify-start">
+          <Link className="flex gap-2 font-medium" to="/">
+            <Logo />
+          </Link>
+        </div>
+        <div className="flex flex-1 items-center justify-center">
+          <div className="w-full max-w-sm">
+            <div className="flex flex-col items-start gap-2 text-left">
+              <h1 className=" text-3xl">Create your account</h1>
+            </div>
+            <Form {...form}>
+              <form className="flex flex-col gap-6 mt-10" onSubmit={form.handleSubmit(onSubmit)}>
+                {error && (
+                  <div className="mb-6">
+                    <Alert variant="destructive">
+                      <AlertCircle className="h-4 w-4" />
+                      <AlertTitle>Sign-up failed</AlertTitle>
+                      <AlertDescription>{error}</AlertDescription>
+                    </Alert>
+                  </div>
+                )}
+
+                <div className="grid gap-6">
+                  <FormField
+                    control={form.control}
+                    name="name"
+                    render={({ field }) => (
+                      <FormItem className="grid gap-2">
+                        <FormLabel>Name</FormLabel>
+                        <FormControl>
+                          <Input placeholder="John Doe" size="lg" {...field} />
+                        </FormControl>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+                  <FormField
+                    control={form.control}
+                    name="email"
+                    render={({ field }) => (
+                      <FormItem className="grid gap-2">
+                        <FormLabel>Email</FormLabel>
+                        <FormControl>
+                          <Input placeholder="name@example.com" size="lg" type="email" {...field} />
+                        </FormControl>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+                  <FormField
+                    control={form.control}
+                    name="password"
+                    render={({ field }) => (
+                      <FormItem className="grid gap-2">
+                        <FormLabel>Password</FormLabel>
+                        <FormControl>
+                          <Input size="lg" type="password" {...field} />
+                        </FormControl>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+                  <Button
+                    className="w-full cursor-pointer"
+                    disabled={isSubmitting}
+                    size="lg"
+                    type="submit"
+                  >
+                    {isSubmitting && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+                    Continue
+                  </Button>
+                  <div className="relative text-center text-sm after:absolute after:inset-0 after:top-1/2 after:z-0 after:flex after:items-center after:border-accent after:border-t">
+                    <span className="relative z-10 bg-background px-2 text-muted-foreground">
+                      OR
+                    </span>
+                  </div>
+                  <div className="flex flex-col gap-4">
+                    <Button
+                      asChild
+                      className="w-full cursor-pointer"
+                      disabled={signUpMutation.isPending}
+                      size="lg"
+                      type="button"
+                      variant="outline"
+                    >
+                      <a href={oauthUrl()}>
+                        <svg
+                          aria-label="Github"
+                          viewBox="0 0 24 24"
+                          xmlns="http://www.w3.org/2000/svg"
+                        >
+                          <title>Github Icon</title>
+                          <path
+                            d="M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12"
+                            fill="currentColor"
+                          />
+                        </svg>
+                        Continue with Github
+                      </a>
+                    </Button>
+                  </div>
+                </div>
+              </form>
+            </Form>
+            <div className="text-center text-sm mt-8">
+              Already have an account?{" "}
+              <Link
+                className="text-muted-foreground text-sm hover:text-foreground underline underline-offset-4"
+                search={{ next: searchParams.next }}
+                to="/auth/login"
+              >
+                Sign in
+              </Link>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/auth/verify-email.tsx b/apps/www/src/routes/auth/verify-email.tsx
new file mode 100644
index 000000000..98b01ce25
--- /dev/null
+++ b/apps/www/src/routes/auth/verify-email.tsx
@@ -0,0 +1,226 @@
+import { useMutation } from "@tanstack/react-query";
+import { Link, createFileRoute, useNavigate } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
+import {
+  Alert,
+  AlertDescription,
+  AlertTitle,
+  Button,
+  InputOTP,
+  InputOTPGroup,
+  InputOTPSlot,
+} from "@voidhash/ui";
+import { AlertCircle, Loader2, MailCheck } from "lucide-react";
+import { useEffect, useMemo, useState } from "react";
+import { z } from "zod";
+
+import { AuthHeader, AuthLayout } from "@/features/auth/components/auth-layout";
+import { resendVerificationCode, verifyEmailCode } from "@/features/auth/lib/auth-api";
+import {
+  clearEmailVerificationState,
+  loadEmailVerificationState,
+} from "@/features/auth/lib/email-verification-storage";
+import { provisionCurrentUser } from "@/features/auth/lib/provision-user";
+
+const verifyEmailSearchSchema = z.object({
+  email: z.string().optional(),
+  next: z.string().optional(),
+});
+
+export const Route = createFileRoute("/auth/verify-email")({
+  component: VerifyEmailPage,
+  validateSearch: zodValidator(verifyEmailSearchSchema),
+});
+
+const CODE_LENGTH = 6;
+const RESEND_COOLDOWN_SECONDS = 30;
+const OTP_SLOTS = Array.from({ length: CODE_LENGTH }, (_, index) => index);
+
+function VerifyEmailPage() {
+  const searchParams = Route.useSearch();
+  const navigate = useNavigate();
+
+  // The pending token + user id are written to sessionStorage by the sign-up /
+  // sign-in flow. They survive a refresh but are intentionally lost when the tab
+  // closes — at which point the user signs in again to restart with a fresh code.
+  const stored = useMemo(() => loadEmailVerificationState(), []);
+  const email = stored?.email ?? searchParams.email ?? "";
+  const next = stored?.next ?? searchParams.next;
+  const pendingAuthenticationToken = stored?.pendingAuthenticationToken;
+  const userId = stored?.userId;
+
+  const [code, setCode] = useState("");
+  const [error, setError] = useState<string>();
+  const [info, setInfo] = useState<string>();
+  const [cooldown, setCooldown] = useState(0);
+
+  useEffect(() => {
+    if (cooldown <= 0) {
+      return;
+    }
+    const timer = window.setTimeout(() => setCooldown((value) => value - 1), 1000);
+    return () => window.clearTimeout(timer);
+  }, [cooldown]);
+
+  const verifyMutation = useMutation({
+    mutationFn: verifyEmailCode,
+    onError: (mutationError) => {
+      setError(mutationError.message);
+      setCode("");
+    },
+    onMutate: () => {
+      setError(undefined);
+      setInfo(undefined);
+    },
+    onSuccess: async (payload) => {
+      clearEmailVerificationState();
+      if (payload.redirectTo) {
+        // Verified with a session — eagerly create the local user record in the
+        // backend before landing in the app, so the first dashboard load is a
+        // plain read rather than a write-on-read.
+        await provisionCurrentUser();
+        window.location.href = payload.redirectTo;
+        return;
+      }
+      // Verified without a session (no pending token) — send them to sign in.
+      navigate({ search: { email, next }, to: "/auth/login" });
+    },
+  });
+
+  const resendMutation = useMutation({
+    mutationFn: resendVerificationCode,
+    onError: (mutationError) => {
+      setError(mutationError.message);
+    },
+    onMutate: () => {
+      setError(undefined);
+      setInfo(undefined);
+    },
+    onSuccess: () => {
+      setInfo(`We sent a new code to ${email || "your email"}.`);
+      setCooldown(RESEND_COOLDOWN_SECONDS);
+    },
+  });
+
+  const submitCode = (value: string) => {
+    if (value.length !== CODE_LENGTH || verifyMutation.isPending) {
+      return;
+    }
+    verifyMutation.mutate({
+      code: value,
+      email,
+      pendingAuthenticationToken,
+      returnPathname: next,
+    });
+  };
+
+  // Without an email or a pending token there is nothing to verify against
+  // (e.g. the page was opened directly). Point the user back to sign in.
+  const hasContext = Boolean(email || pendingAuthenticationToken);
+
+  if (!hasContext) {
+    return (
+      <AuthLayout>
+        <AuthHeader
+          description="Sign in with your email and password and we'll send you a fresh verification code."
+          title="Verify your email"
+        />
+        <div className="mt-10">
+          <Button asChild className="w-full cursor-pointer" size="lg">
+            <Link search={{ next }} to="/auth/login">
+              Go to sign in
+            </Link>
+          </Button>
+        </div>
+      </AuthLayout>
+    );
+  }
+
+  return (
+    <AuthLayout>
+      <AuthHeader
+        description={
+          <>
+            Enter the 6-digit code we sent to{" "}
+            <span className="font-medium text-foreground">{email || "your email"}</span>.
+          </>
+        }
+        title="Check your email"
+      />
+      <div className="mt-10 flex flex-col gap-6">
+        {error && (
+          <Alert variant="destructive">
+            <AlertCircle className="h-4 w-4" />
+            <AlertTitle>Verification failed</AlertTitle>
+            <AlertDescription>{error}</AlertDescription>
+          </Alert>
+        )}
+        {info && (
+          <Alert>
+            <MailCheck className="h-4 w-4" />
+            <AlertDescription>{info}</AlertDescription>
+          </Alert>
+        )}
+
+        <form
+          className="flex flex-col gap-6"
+          onSubmit={(event) => {
+            event.preventDefault();
+            submitCode(code);
+          }}
+        >
+          <InputOTP
+            autoFocus
+            disabled={verifyMutation.isPending}
+            maxLength={CODE_LENGTH}
+            onChange={setCode}
+            onComplete={submitCode}
+            value={code}
+          >
+            <InputOTPGroup>
+              {OTP_SLOTS.map((slot) => (
+                <InputOTPSlot index={slot} key={slot} />
+              ))}
+            </InputOTPGroup>
+          </InputOTP>
+
+          <Button
+            className="w-full cursor-pointer"
+            disabled={
+              verifyMutation.isPending ||
+              verifyMutation.isSuccess ||
+              code.length !== CODE_LENGTH
+            }
+            size="lg"
+            type="submit"
+          >
+            {verifyMutation.isPending && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+            {verifyMutation.isPending ? "Verifying..." : "Verify email"}
+          </Button>
+        </form>
+
+        <div className="text-muted-foreground text-sm">
+          Didn&apos;t get a code?{" "}
+          <button
+            className="text-foreground underline underline-offset-4 disabled:cursor-not-allowed disabled:opacity-60"
+            disabled={resendMutation.isPending || cooldown > 0}
+            onClick={() => resendMutation.mutate({ email, userId })}
+            type="button"
+          >
+            {cooldown > 0 ? `Resend in ${cooldown}s` : "Resend code"}
+          </button>
+        </div>
+      </div>
+
+      <div className="mt-8 text-center text-sm">
+        <Link
+          className="text-muted-foreground text-sm hover:text-foreground underline underline-offset-4"
+          search={{ next }}
+          to="/auth/login"
+        >
+          Back to sign in
+        </Link>
+      </div>
+    </AuthLayout>
+  );
+}
diff --git a/apps/www/src/routes/design/$.tsx b/apps/www/src/routes/design/$.tsx
new file mode 100644
index 000000000..f247d1eaf
--- /dev/null
+++ b/apps/www/src/routes/design/$.tsx
@@ -0,0 +1,175 @@
+import { createServerFn } from "@tanstack/react-start";
+import { createFileRoute, notFound, redirect } from "@tanstack/react-router";
+import { docs } from "@generated/design";
+import { createClientLoader } from "fumadocs-mdx/runtime/vite";
+import type { PageTree } from "fumadocs-core/server";
+import {
+  Accordion as DocsAccordion,
+  Accordions as DocsAccordions,
+} from "fumadocs-ui/components/accordion";
+import { Callout } from "fumadocs-ui/components/callout";
+import {
+  File as DocsFile,
+  Files as DocsFiles,
+  Folder as DocsFolder,
+} from "fumadocs-ui/components/files";
+import { Step, Steps } from "fumadocs-ui/components/steps";
+import { Tab as DocsTab, Tabs as DocsTabs } from "fumadocs-ui/components/tabs";
+import { TypeTable } from "fumadocs-ui/components/type-table";
+import defaultMdxComponents from "fumadocs-ui/mdx";
+import { type ComponentProps, Suspense, useMemo } from "react";
+
+import { Preview } from "@/features/design/components/docs/preview";
+import * as Registry from "@/features/design/components/docs/component-registry";
+import { DocsLayout } from "@/features/design/components/layout/docs";
+import {
+  DocsBody,
+  DocsDescription,
+  DocsPage,
+  DocsTitle,
+} from "@/features/design/components/layout/page";
+import { getSource } from "@/features/design/lib/source";
+
+interface RedirectPayload {
+  redirectTo: string;
+}
+
+interface PagePayload {
+  description: string | undefined;
+  pageTree: {};
+  path: string;
+  title: string;
+}
+
+type ServerPayload = PagePayload | RedirectPayload;
+
+export const Route = createFileRoute("/design/$")({
+  component: Page,
+  loader: async ({ params }) => {
+    const slugs = params._splat?.split("/").filter(Boolean) ?? [];
+    if (slugs.length === 0) {
+      throw notFound();
+    }
+
+    const result = (await serverLoader({ data: slugs })) as ServerPayload;
+    if ("redirectTo" in result) {
+      throw redirect({
+        params: {
+          _splat: result.redirectTo,
+        },
+        to: "/design/$",
+      });
+    }
+
+    return result;
+  },
+  notFoundComponent: () => <div>Page not found</div>,
+});
+
+const serverLoader = createServerFn({ method: "GET" })
+  .inputValidator((slugs: string[]) => slugs)
+  .handler(async ({ data: slugs }) => {
+    const source = await getSource();
+    const page = source.getPage(slugs);
+    if (!page) {
+      const fallbackPage = source
+        .getPages()
+        .find(
+          (candidate) =>
+            candidate.slugs.length > slugs.length &&
+            slugs.every((slug, index) => candidate.slugs[index] === slug),
+        );
+
+      if (fallbackPage) {
+        return {
+          redirectTo: fallbackPage.slugs.join("/"),
+        };
+      }
+
+      throw notFound();
+    }
+
+    return {
+      description: page.data.description,
+      pageTree: source.getPageTree() as {},
+      path: page.path,
+      title: page.data.title,
+    };
+  });
+
+const clientLoader = createClientLoader(docs.doc, {
+  component({ default: MDX, frontmatter }) {
+    return (
+      <DocsPage>
+        <DocsTitle>{frontmatter.title}</DocsTitle>
+        <DocsDescription>{frontmatter.description}</DocsDescription>
+        <DocsBody>
+          <MDX
+            components={{
+              ...defaultMdxComponents,
+              ...Registry,
+              Preview,
+              Step,
+              Steps,
+              DocsFile,
+              DocsFolder,
+              DocsFiles,
+              DocsTab,
+              DocsTabs,
+              TypeTable,
+              DocsAccordion,
+              DocsAccordions,
+              a: DocsMdxLink,
+              Callout: ({
+                children,
+                type,
+                ...props
+              }: {
+                children: React.ReactNode;
+                type?: "info" | "warn" | "error" | "success" | "warning";
+                [key: string]: unknown;
+              }) => (
+                <Callout type={type} {...props}>
+                  {children}
+                </Callout>
+              ),
+              iframe: (props) => <iframe {...props} className="h-[500px] w-full" />,
+            }}
+          />
+        </DocsBody>
+      </DocsPage>
+    );
+  },
+  id: "design",
+});
+
+function PageContent({ path }: { path: string }) {
+  const Content = useMemo(() => clientLoader.getComponent(path), [path]);
+  return <Content />;
+}
+
+function Page() {
+  const data = Route.useLoaderData() as PagePayload;
+
+  return (
+    <DocsLayout tree={data.pageTree as PageTree.Root}>
+      <Suspense>
+        <PageContent path={data.path} />
+      </Suspense>
+    </DocsLayout>
+  );
+}
+
+function DocsMdxLink(props: ComponentProps<"a">) {
+  const href = props.href;
+  if (!href) {
+    return <a {...props} />;
+  }
+
+  const normalizedHref =
+    href.startsWith("/") && !href.startsWith("/design") && !href.startsWith("//")
+      ? `/design${href}`
+      : href;
+
+  return <a {...props} href={normalizedHref} />;
+}
diff --git a/apps/www/src/routes/design/api/search.ts b/apps/www/src/routes/design/api/search.ts
new file mode 100644
index 000000000..083c95ecd
--- /dev/null
+++ b/apps/www/src/routes/design/api/search.ts
@@ -0,0 +1,19 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { createFromSource } from "fumadocs-core/search/server";
+
+import { getSource } from "@/features/design/lib/source";
+
+let searchApiPromise: Promise<ReturnType<typeof createFromSource>> | undefined;
+
+const getSearchApi = (): Promise<ReturnType<typeof createFromSource>> => {
+  searchApiPromise ??= getSource().then(createFromSource);
+  return searchApiPromise;
+};
+
+export const Route = createFileRoute("/design/api/search")({
+  server: {
+    handlers: {
+      GET: async ({ request }) => (await getSearchApi()).GET(request),
+    },
+  },
+});
diff --git a/apps/www/src/routes/design/index.tsx b/apps/www/src/routes/design/index.tsx
new file mode 100644
index 000000000..ceeccfe87
--- /dev/null
+++ b/apps/www/src/routes/design/index.tsx
@@ -0,0 +1,13 @@
+import { createFileRoute, redirect } from "@tanstack/react-router";
+
+export const Route = createFileRoute("/design/")({
+  beforeLoad: () => {
+    throw redirect({
+      params: {
+        _splat: "introduction",
+      },
+      to: "/design/$",
+    });
+  },
+  component: () => null,
+});
diff --git a/apps/www/src/routes/design/route.tsx b/apps/www/src/routes/design/route.tsx
new file mode 100644
index 000000000..30f075a7b
--- /dev/null
+++ b/apps/www/src/routes/design/route.tsx
@@ -0,0 +1,42 @@
+import { Outlet, createFileRoute } from "@tanstack/react-router";
+import { RootProvider } from "fumadocs-ui/provider/tanstack";
+
+import { DESIGN_PATH } from "@/lib/paths";
+
+export const Route = createFileRoute("/design")({
+  component: DesignLayout,
+  head: () => ({
+    links: [
+      {
+        href: `${DESIGN_PATH}/favicon.ico`,
+        rel: "icon",
+        type: "image/x-icon",
+      },
+      {
+        href: `${DESIGN_PATH}/apple-icon.png`,
+        rel: "apple-touch-icon",
+      },
+    ],
+    meta: [
+      { title: "Voidhash Design System" },
+      {
+        content: "Design system documentation for Voidhash UI components.",
+        name: "description",
+      },
+    ],
+  }),
+});
+
+function DesignLayout() {
+  return (
+    <RootProvider
+      search={{
+        options: {
+          api: `${DESIGN_PATH}/api/search`,
+        },
+      }}
+    >
+      <Outlet />
+    </RootProvider>
+  );
+}
diff --git a/apps/www/src/routes/docs/$.tsx b/apps/www/src/routes/docs/$.tsx
new file mode 100644
index 000000000..ecd8ff6c3
--- /dev/null
+++ b/apps/www/src/routes/docs/$.tsx
@@ -0,0 +1,130 @@
+import { createServerFn } from "@tanstack/react-start";
+import { createFileRoute, notFound, redirect } from "@tanstack/react-router";
+import { docs } from "@generated/docs";
+import { createClientLoader } from "fumadocs-mdx/runtime/vite";
+import type { PageTree } from "fumadocs-core/server";
+import { Suspense, useMemo } from "react";
+
+import { DocsLayout } from "@/features/docs/components/layout/docs";
+import {
+  DocsBody,
+  DocsDescription,
+  DocsPage,
+  DocsTitle,
+} from "@/features/docs/components/layout/page";
+import { docsMdxComponents } from "@/features/docs/lib/mdx-components";
+import { getSource } from "@/features/docs/lib/source";
+
+interface RedirectPayload {
+  redirectTo: string;
+}
+
+interface PagePayload {
+  description: string | undefined;
+  pageTree: {};
+  path: string;
+  title: string;
+}
+
+type ServerPayload = PagePayload | RedirectPayload;
+
+export const Route = createFileRoute("/docs/$")({
+  component: Page,
+  head: ({ loaderData }) => {
+    // TanStack can't infer the sibling loader's return type while typing `head`,
+    // so it widens loaderData to `undefined`; narrow it back to the page payload.
+    const data = loaderData as unknown as PagePayload | undefined;
+    if (!data || !("title" in data)) {
+      return {};
+    }
+
+    return {
+      meta: [
+        { title: `${data.title} — Voidhash Docs` },
+        ...(data.description ? [{ content: data.description, name: "description" }] : []),
+      ],
+    };
+  },
+  loader: async ({ params }) => {
+    const slugs = params._splat?.split("/").filter(Boolean) ?? [];
+    if (slugs.length === 0) {
+      throw notFound();
+    }
+
+    const result = (await serverLoader({ data: slugs })) as ServerPayload;
+    if ("redirectTo" in result) {
+      throw redirect({
+        params: {
+          _splat: result.redirectTo,
+        },
+        to: "/docs/$",
+      });
+    }
+
+    return result;
+  },
+  notFoundComponent: () => <div>Page not found</div>,
+});
+
+const serverLoader = createServerFn({ method: "GET" })
+  .inputValidator((slugs: string[]) => slugs)
+  .handler(async ({ data: slugs }) => {
+    const source = await getSource();
+    const page = source.getPage(slugs);
+    if (!page) {
+      const fallbackPage = source
+        .getPages()
+        .find(
+          (candidate) =>
+            candidate.slugs.length > slugs.length &&
+            slugs.every((slug, index) => candidate.slugs[index] === slug),
+        );
+
+      if (fallbackPage) {
+        return {
+          redirectTo: fallbackPage.slugs.join("/"),
+        };
+      }
+
+      throw notFound();
+    }
+
+    return {
+      description: page.data.description,
+      pageTree: source.getPageTree() as {},
+      path: page.path,
+      title: page.data.title,
+    };
+  });
+
+const clientLoader = createClientLoader(docs.doc, {
+  component({ default: MDX, frontmatter, toc }) {
+    return (
+      <DocsPage toc={toc}>
+        <DocsTitle>{frontmatter.title}</DocsTitle>
+        <DocsDescription>{frontmatter.description}</DocsDescription>
+        <DocsBody>
+          <MDX components={docsMdxComponents} />
+        </DocsBody>
+      </DocsPage>
+    );
+  },
+  id: "docs",
+});
+
+function PageContent({ path }: { path: string }) {
+  const Content = useMemo(() => clientLoader.getComponent(path), [path]);
+  return <Content />;
+}
+
+function Page() {
+  const data = Route.useLoaderData() as PagePayload;
+
+  return (
+    <DocsLayout tree={data.pageTree as PageTree.Root}>
+      <Suspense>
+        <PageContent path={data.path} />
+      </Suspense>
+    </DocsLayout>
+  );
+}
diff --git a/apps/www/src/routes/docs/api/search.ts b/apps/www/src/routes/docs/api/search.ts
new file mode 100644
index 000000000..08c8ee211
--- /dev/null
+++ b/apps/www/src/routes/docs/api/search.ts
@@ -0,0 +1,19 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { createFromSource } from "fumadocs-core/search/server";
+
+import { getSource } from "@/features/docs/lib/source";
+
+let searchApiPromise: Promise<ReturnType<typeof createFromSource>> | undefined;
+
+const getSearchApi = (): Promise<ReturnType<typeof createFromSource>> => {
+  searchApiPromise ??= getSource().then(createFromSource);
+  return searchApiPromise;
+};
+
+export const Route = createFileRoute("/docs/api/search")({
+  server: {
+    handlers: {
+      GET: async ({ request }) => (await getSearchApi()).GET(request),
+    },
+  },
+});
diff --git a/apps/www/src/routes/docs/index.tsx b/apps/www/src/routes/docs/index.tsx
new file mode 100644
index 000000000..720263718
--- /dev/null
+++ b/apps/www/src/routes/docs/index.tsx
@@ -0,0 +1,13 @@
+import { createFileRoute, redirect } from "@tanstack/react-router";
+
+export const Route = createFileRoute("/docs/")({
+  beforeLoad: () => {
+    throw redirect({
+      params: {
+        _splat: "introduction",
+      },
+      to: "/docs/$",
+    });
+  },
+  component: () => null,
+});
diff --git a/apps/www/src/routes/docs/route.tsx b/apps/www/src/routes/docs/route.tsx
new file mode 100644
index 000000000..04d593869
--- /dev/null
+++ b/apps/www/src/routes/docs/route.tsx
@@ -0,0 +1,42 @@
+import { Outlet, createFileRoute } from "@tanstack/react-router";
+import { RootProvider } from "fumadocs-ui/provider/tanstack";
+
+import { DOCS_PATH } from "@/lib/paths";
+
+export const Route = createFileRoute("/docs")({
+  component: DocsLayout,
+  head: () => ({
+    links: [
+      {
+        href: `${DOCS_PATH}/favicon.ico`,
+        rel: "icon",
+        type: "image/x-icon",
+      },
+      {
+        href: `${DOCS_PATH}/apple-icon.png`,
+        rel: "apple-touch-icon",
+      },
+    ],
+    meta: [
+      { title: "Voidhash Docs" },
+      {
+        content: "Documentation for the Voidhash platform.",
+        name: "description",
+      },
+    ],
+  }),
+});
+
+function DocsLayout() {
+  return (
+    <RootProvider
+      search={{
+        options: {
+          api: `${DOCS_PATH}/api/search`,
+        },
+      }}
+    >
+      <Outlet />
+    </RootProvider>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/index.tsx
new file mode 100644
index 000000000..c05d30a36
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/index.tsx
@@ -0,0 +1,15 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { OrganizationOverview } from "@/features/studio/organizations/overview/organization-overview";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_organization/$organizationSlug/",
+)({
+  staticData: { allProjectsPicker: true },
+  component: RouteComponent,
+});
+
+function RouteComponent() {
+  const { organizationSlug } = Route.useParams();
+  return <OrganizationOverview organizationSlug={organizationSlug as string} />;
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/route.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/route.tsx
new file mode 100644
index 000000000..c6c1f12e1
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/route.tsx
@@ -0,0 +1,58 @@
+import { Outlet, createFileRoute, useLocation } from "@tanstack/react-router";
+import { SidebarInset, useSidebar } from "@voidhash/ui";
+import { useEffect } from "react";
+
+import { NavBar } from "@/features/studio/shell";
+import { OrganizationSidebar } from "@/features/studio/shell/components/sidebar/organization-sidebar";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_organization/$organizationSlug",
+)({
+  component: OrganizationLayout,
+});
+
+function LayoutSidebar({
+  organizationSidebar,
+  organizationSettingsSidebar,
+}: {
+  organizationSidebar: React.ReactNode;
+  organizationSettingsSidebar: React.ReactNode;
+}) {
+  const pathname = useLocation({
+    select: (location) => location.pathname,
+  });
+  const isSettingsRoute = pathname.includes("/settings");
+
+  const { setOpen } = useSidebar();
+  useEffect(() => {
+    if (isSettingsRoute) {
+      setOpen(false);
+    } else if (!isSettingsRoute) {
+      setOpen(true);
+    }
+  }, [isSettingsRoute, setOpen]);
+
+  return (
+    <div className="flex flex-row">
+      {organizationSidebar}
+      {isSettingsRoute && organizationSettingsSidebar}
+    </div>
+  );
+}
+
+function OrganizationLayout() {
+  const { organizationSlug } = Route.useParams();
+
+  return (
+    <>
+      <NavBar organizationSlug={organizationSlug} projectSlug={null} />
+      <div className="flex flex-1 pt-[var(--header-height)] min-h-0">
+        <OrganizationSidebar organizationSlug={organizationSlug} />
+
+        <SidebarInset className="transition-all duration-75 mt-0!">
+          <Outlet />
+        </SidebarInset>
+      </div>
+    </>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings.index.tsx
new file mode 100644
index 000000000..915494ff6
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings.index.tsx
@@ -0,0 +1,40 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { SettingsGeneralLayout } from "@/features/studio/organizations/settings/general/settings-general-layout";
+import { TeamAvatarForm } from "@/features/studio/organizations/settings/general/team-avatar";
+import { TeamDelete } from "@/features/studio/organizations/settings/general/team-delete";
+import { TeamNameForm } from "@/features/studio/organizations/settings/general/team-name";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/",
+)({
+  component: SettingsGeneralPage,
+});
+
+function SettingsGeneralPage() {
+  const { organizationSlug } = Route.useParams();
+  const { user } = useAuth();
+
+  const activeOrganization = user.organizations.find(
+    (organization) => organization.slug === organizationSlug,
+  );
+  if (!activeOrganization) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "NOT_FOUND",
+          message: "Organization not found",
+        }}
+      />
+    );
+  }
+  return (
+    <SettingsGeneralLayout>
+      <TeamAvatarForm key={organizationSlug as string} organization={activeOrganization} />
+      <TeamNameForm key={`${organizationSlug}-name`} organization={activeOrganization} />
+      <TeamDelete organizationId={activeOrganization.id} />
+    </SettingsGeneralLayout>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.events.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.events.tsx
new file mode 100644
index 000000000..24edd5798
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.events.tsx
@@ -0,0 +1,489 @@
+import { useQuery } from "@tanstack/react-query";
+import { createFileRoute, Link } from "@tanstack/react-router";
+import {
+  Button,
+  cn,
+  Page,
+  PageHeader,
+  PageHeaderTitle,
+  ScrollArea,
+  Skeleton,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@voidhash/ui";
+import { format } from "date-fns";
+import { ChevronRightIcon, XIcon } from "lucide-react";
+import { useState } from "react";
+import type { RecentAnalyticsEventType } from "@voidhash/rpc";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { RelativeTime } from "@/features/studio/components/relative-time";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listRecentAnalyticsEventsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+const EVENTS_PAGE_SIZE = 100;
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/events",
+)({
+  component: EventsPage,
+});
+
+function EventsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const [visibleCount, setVisibleCount] = useState(EVENTS_PAGE_SIZE);
+  const [selectedEventId, setSelectedEventId] = useState<string | null>(null);
+
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "The project you are looking for does not exist.",
+          title: "Project not found",
+        }}
+      />
+    );
+  }
+
+  const recentEventsQuery = useQuery(
+    listRecentAnalyticsEventsOptions({
+      limit: visibleCount,
+      projectId: project.id,
+    }),
+  );
+
+  if (recentEventsQuery.status === "pending") {
+    return <EventsPageSkeleton />;
+  }
+
+  if (recentEventsQuery.status === "error") {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occurred loading recent analytics events.",
+        }}
+      />
+    );
+  }
+
+  const { events, hasMore } = recentEventsQuery.data;
+  const selectedEvent =
+    selectedEventId === null
+      ? null
+      : (events.find((event) => event.eventId === selectedEventId) ?? null);
+
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-row overflow-hidden">
+      <div className="flex min-w-0 flex-1 flex-col overflow-y-auto">
+        <EventsHeader />
+
+        <div className="min-w-0 flex-1 px-4 pt-4">
+          <Table>
+            <TableHeader>
+              <TableRow>
+                <TableHead>Event name</TableHead>
+                <TableHead>Event ID</TableHead>
+                <TableHead>Person</TableHead>
+                <TableHead className="text-right">Received</TableHead>
+              </TableRow>
+            </TableHeader>
+            <TableBody>
+              {events.length > 0 ? (
+                events.map((event) => (
+                  <EventRow
+                    event={event}
+                    isSelected={event.eventId === selectedEventId}
+                    key={event.eventId}
+                    onSelect={setSelectedEventId}
+                    organizationSlug={organizationSlug as string}
+                    projectSlug={projectSlug as string}
+                  />
+                ))
+              ) : (
+                <TableRow>
+                  <TableCell className="h-24 text-center" colSpan={4}>
+                    No analytics events have been received yet.
+                  </TableCell>
+                </TableRow>
+              )}
+            </TableBody>
+          </Table>
+          {hasMore ? (
+            <div className="mt-3">
+              <Button
+                className="w-full"
+                disabled={recentEventsQuery.isFetching}
+                onClick={() => {
+                  setVisibleCount((count) => count + EVENTS_PAGE_SIZE);
+                }}
+                variant="outline"
+              >
+                {recentEventsQuery.isFetching ? "Loading..." : "Show more"}
+              </Button>
+            </div>
+          ) : null}
+        </div>
+      </div>
+
+      {selectedEvent ? (
+        <EventDetailsPanel
+          event={selectedEvent}
+          onClose={() => setSelectedEventId(null)}
+          organizationSlug={organizationSlug as string}
+          projectSlug={projectSlug as string}
+        />
+      ) : null}
+    </Page>
+  );
+}
+
+function EventsHeader() {
+  return (
+    <PageHeader>
+      <PageHeaderTitle>Analytics events</PageHeaderTitle>
+    </PageHeader>
+  );
+}
+
+interface EventRowProps {
+  event: RecentAnalyticsEventType;
+  isSelected: boolean;
+  onSelect: (eventId: string) => void;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+function EventRow({ event, isSelected, onSelect, organizationSlug, projectSlug }: EventRowProps) {
+  return (
+    <TableRow
+      aria-selected={isSelected}
+      className={cn(
+        "cursor-pointer",
+        // Inset box-shadow mimics the lensflare LogRow's `border-l-2` accent
+        // indicator. We use box-shadow instead of border-left because
+        // `<tr>` borders are unreliable under `border-collapse: collapse`.
+        isSelected && "shadow-[inset_2px_0_0_0_var(--primary)]",
+      )}
+      data-state={isSelected ? "selected" : undefined}
+      onClick={() => onSelect(event.eventId)}
+    >
+      <TableCell className="font-medium text-sm">{event.eventName}</TableCell>
+      <TableCell className="font-mono text-muted-foreground text-xs">{event.eventId}</TableCell>
+      <TableCell>{renderPersonCell(event, organizationSlug, projectSlug)}</TableCell>
+      <TableCell className="text-right">
+        <RelativeTime value={event.receivedAt} />
+      </TableCell>
+    </TableRow>
+  );
+}
+
+interface EventDetailsPanelProps {
+  event: RecentAnalyticsEventType;
+  onClose: () => void;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+function EventDetailsPanel({
+  event,
+  onClose,
+  organizationSlug,
+  projectSlug,
+}: EventDetailsPanelProps) {
+  const personLabel =
+    event.personName ??
+    event.personEmail ??
+    event.personDistinctId ??
+    event.personId ??
+    "Unknown person";
+
+  return (
+    <aside className="flex h-full w-[420px] shrink-0 flex-col border-l border-border/60 bg-background">
+      <PageHeader
+        className="pr-2"
+        rightActions={
+          <Button
+            aria-label="Close event details"
+            onClick={onClose}
+            size="icon-sm"
+            variant="ghost"
+          >
+            <XIcon className="size-3.5" />
+          </Button>
+        }
+      >
+        <PageHeaderTitle>{event.eventName}</PageHeaderTitle>
+      </PageHeader>
+
+      <ScrollArea className="min-h-0 flex-1">
+        <Section title="Event">
+          <dl className="divide-y divide-border/60">
+            <DetailField label="Event name" value={event.eventName} />
+            <DetailField label="Event ID" mono value={event.eventId} />
+            <DetailField label="Capture ID" mono value={event.captureId} />
+            <DetailField label="Request ID" mono value={event.requestId} />
+            <DetailField label="Received at" mono value={formatDateTime(event.receivedAt)} />
+            <DetailField label="Processed at" mono value={formatDateTime(event.processedAt)} />
+            <DetailField
+              label="Person"
+              value={
+                event.personDistinctId ? (
+                  <Link
+                    className="text-foreground underline decoration-dotted underline-offset-4 transition-colors hover:text-foreground/80"
+                    onClick={(clickEvent) => clickEvent.stopPropagation()}
+                    params={{
+                      id: event.personDistinctId,
+                      organizationSlug,
+                      projectSlug,
+                    }}
+                    to="/studio/$organizationSlug/$projectSlug/persons/$id"
+                  >
+                    {personLabel}
+                  </Link>
+                ) : (
+                  <span className="text-muted-foreground">{personLabel}</span>
+                )
+              }
+            />
+            <DetailField label="Person name" value={event.personName ?? <NullValue />} />
+            <DetailField label="Person email" value={event.personEmail ?? <NullValue />} />
+            <DetailField label="Distinct ID" mono value={event.personDistinctId ?? <NullValue />} />
+            <DetailField label="Person ID" mono value={event.personId ?? <NullValue />} />
+            <DetailField
+              label="Previous distinct ID"
+              mono
+              value={event.previousDistinctId ?? <NullValue />}
+            />
+            <DetailField label="Identity mode" mono value={event.identityMode} />
+          </dl>
+        </Section>
+
+        <Section title="Properties">
+          <PropertyTree data={event.properties} />
+        </Section>
+
+        <Section title="Context">
+          <PropertyTree data={event.context} />
+        </Section>
+      </ScrollArea>
+    </aside>
+  );
+}
+
+interface DetailFieldProps {
+  label: string;
+  value: React.ReactNode;
+  mono?: boolean;
+}
+
+function DetailField({ label, value, mono = false }: DetailFieldProps) {
+  return (
+    <div className="px-4 py-3">
+      <dt className="text-[11px] text-muted-foreground/70 uppercase tracking-wide">{label}</dt>
+      <dd className={cn("mt-1 break-all text-foreground text-sm", mono && "font-mono text-xs")}>
+        {value}
+      </dd>
+    </div>
+  );
+}
+
+function NullValue() {
+  return <span className="text-muted-foreground/50">—</span>;
+}
+
+function formatDateTime(date: Date) {
+  return format(date, "yyyy-MM-dd HH:mm:ss.SSS");
+}
+
+function Section({
+  title,
+  defaultExpanded = true,
+  children,
+}: {
+  title: string;
+  defaultExpanded?: boolean;
+  children: React.ReactNode;
+}) {
+  const [isExpanded, setIsExpanded] = useState(defaultExpanded);
+  return (
+    <div className="border-border/60 border-b last:border-b-0">
+      <button
+        className="flex w-full items-center gap-1.5 px-4 py-2 text-[11px] text-muted-foreground/70 uppercase tracking-wide transition-colors hover:text-foreground"
+        onClick={() => setIsExpanded((v) => !v)}
+        type="button"
+      >
+        <ChevronRightIcon
+          className={cn("size-3 transition-transform", isExpanded && "rotate-90")}
+        />
+        <span>{title}</span>
+      </button>
+      {isExpanded ? <div className="pb-2">{children}</div> : null}
+    </div>
+  );
+}
+
+function PropertyTree({ data }: { data: Record<string, unknown> }) {
+  const entries = Object.entries(data);
+  if (entries.length === 0) {
+    return <div className="px-4 py-2 text-muted-foreground/70 text-xs">No data</div>;
+  }
+  return (
+    <div className="px-3 font-mono text-[11px]">
+      {entries.map(([key, value]) => (
+        <PropertyRow key={key} name={key} value={value} />
+      ))}
+    </div>
+  );
+}
+
+function PropertyRow({ name, value }: { name: string; value: unknown }) {
+  const [isExpanded, setIsExpanded] = useState(false);
+  const isObject = typeof value === "object" && value !== null && !Array.isArray(value);
+  const isArray = Array.isArray(value);
+  const canExpand = isObject || isArray;
+
+  return (
+    <div>
+      <div
+        className={cn(
+          "flex items-start gap-1 py-0.5",
+          canExpand && "-mx-1 cursor-pointer rounded-sm px-1 hover:bg-accent/30",
+        )}
+        onClick={canExpand ? () => setIsExpanded((v) => !v) : undefined}
+      >
+        {canExpand ? (
+          <ChevronRightIcon
+            className={cn(
+              "mt-[3px] size-3 shrink-0 text-muted-foreground transition-transform",
+              isExpanded && "rotate-90",
+            )}
+          />
+        ) : (
+          <span className="mt-[3px] size-3 shrink-0" />
+        )}
+        <span className="shrink-0 text-foreground/70">{name}</span>
+        <span className="text-muted-foreground">:</span>
+        <span className="min-w-0 flex-1 break-all text-foreground">{formatValue(value)}</span>
+      </div>
+      {canExpand && isExpanded ? (
+        <div className="ml-3 border-border/60 border-l pl-2">
+          {isArray
+            ? (value as unknown[]).map((entry, index) => (
+                // biome-ignore lint/suspicious/noArrayIndexKey: arrays are static per render
+                <PropertyRow key={index} name={String(index)} value={entry} />
+              ))
+            : Object.entries(value as Record<string, unknown>).map(([k, v]) => (
+                <PropertyRow key={k} name={k} value={v} />
+              ))}
+        </div>
+      ) : null}
+    </div>
+  );
+}
+
+function formatValue(value: unknown): React.ReactNode {
+  if (value === undefined) return <NullValue />;
+  if (value === null) return <span className="text-muted-foreground/60">null</span>;
+  if (Array.isArray(value)) {
+    return <span className="text-muted-foreground/60">Array({value.length})</span>;
+  }
+  if (typeof value === "object") {
+    return (
+      <span className="text-muted-foreground/60">
+        Object({Object.keys(value as object).length})
+      </span>
+    );
+  }
+  if (typeof value === "boolean") return <span>{String(value)}</span>;
+  return <span>{String(value)}</span>;
+}
+
+function renderPersonCell(
+  event: {
+    personDistinctId: string | null;
+    personEmail: string | null;
+    personId: string | null;
+    personName: string | null;
+  },
+  organizationSlug: string,
+  projectSlug: string,
+) {
+  const label =
+    event.personName ??
+    event.personEmail ??
+    event.personDistinctId ??
+    event.personId ??
+    "Unknown person";
+
+  if (!event.personDistinctId) {
+    return <span className="text-muted-foreground text-sm">{label}</span>;
+  }
+
+  return (
+    <Link
+      className="text-foreground text-sm underline decoration-dotted underline-offset-4 transition-colors hover:text-foreground/80"
+      onClick={(clickEvent) => clickEvent.stopPropagation()}
+      params={{
+        id: event.personDistinctId,
+        organizationSlug,
+        projectSlug,
+      }}
+      to="/studio/$organizationSlug/$projectSlug/persons/$id"
+    >
+      {label}
+    </Link>
+  );
+}
+
+function EventsPageSkeleton() {
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-row overflow-hidden">
+      <div className="flex min-w-0 flex-1 flex-col overflow-y-auto">
+        <EventsHeader />
+        <div className="min-w-0 flex-1 px-4 pt-4">
+          <Table>
+            <TableHeader>
+              <TableRow>
+                <TableHead>Event name</TableHead>
+                <TableHead>Event ID</TableHead>
+                <TableHead>Person</TableHead>
+                <TableHead className="text-right">Received</TableHead>
+              </TableRow>
+            </TableHeader>
+            <TableBody>
+              {Array.from({ length: 8 }).map((_, index) => (
+                <TableRow key={`events-skeleton-${index}`}>
+                  <TableCell>
+                    <Skeleton className="h-4 w-40" />
+                  </TableCell>
+                  <TableCell className="font-mono text-xs">
+                    <Skeleton className="h-4 w-56" />
+                  </TableCell>
+                  <TableCell>
+                    <Skeleton className="h-4 w-32" />
+                  </TableCell>
+                  <TableCell className="text-right">
+                    <Skeleton className="ml-auto h-4 w-20" />
+                  </TableCell>
+                </TableRow>
+              ))}
+            </TableBody>
+          </Table>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.sent-notifications.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.sent-notifications.tsx
new file mode 100644
index 000000000..3a2445ac2
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.sent-notifications.tsx
@@ -0,0 +1,490 @@
+import { useQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import type { PushNotificationSendType } from "@voidhash/rpc";
+import {
+  Badge,
+  Button,
+  cn,
+  Page,
+  PageHeader,
+  PageHeaderTitle,
+  ScrollArea,
+  Skeleton,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@voidhash/ui";
+import { format } from "date-fns";
+import { XIcon } from "lucide-react";
+import { useState } from "react";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { RelativeTime } from "@/features/studio/components/relative-time";
+import {
+  getPushNotificationSendDeliveriesOptions,
+  listPushNotificationSendsOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+const SENDS_PAGE_SIZE = 100;
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/sent-notifications",
+)({
+  component: SentNotificationsPage,
+});
+
+function SentNotificationsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  // Gated behind an internal feature flag (unreleased) — also hides direct URL access.
+  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.notifications.key);
+  const { user } = useAuth();
+
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!enabled) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "NOT_FOUND",
+          message: "This page is not available.",
+          title: "Page not found",
+        }}
+      />
+    );
+  }
+
+  if (!project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "The project you are looking for does not exist.",
+          title: "Project not found",
+        }}
+      />
+    );
+  }
+
+  return <SentNotificationsContent projectId={project.id} />;
+}
+
+// Split from the flag/project gate above so the data hooks live in a component
+// that only mounts once both checks pass. This keeps the hook order stable even
+// if the `notifications` flag flips (or the CurrentUser query refetches) while
+// the route stays mounted — otherwise the extra `useQuery` would change the hook
+// count between renders and crash the page (Rules of Hooks).
+function SentNotificationsContent({ projectId }: { projectId: string }) {
+  const [visibleCount, setVisibleCount] = useState(SENDS_PAGE_SIZE);
+  const [selectedSendId, setSelectedSendId] = useState<string | null>(null);
+
+  const sendsQuery = useQuery(
+    listPushNotificationSendsOptions({
+      limit: visibleCount,
+      projectId,
+    }),
+  );
+
+  if (sendsQuery.status === "pending") {
+    return <SentNotificationsPageSkeleton />;
+  }
+
+  if (sendsQuery.status === "error") {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "An error occurred loading sent notifications.",
+        }}
+      />
+    );
+  }
+
+  const { hasMore, sends } = sendsQuery.data;
+  const selectedSend =
+    selectedSendId === null
+      ? null
+      : (sends.find((send) => send.id === selectedSendId) ?? null);
+
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-row overflow-hidden">
+      <div className="flex min-w-0 flex-1 flex-col overflow-y-auto">
+        <SentNotificationsHeader />
+
+        <div className="min-w-0 flex-1 px-4 pt-4">
+          <Table>
+            <TableHeader>
+              <TableRow>
+                <TableHead>Status</TableHead>
+                <TableHead>Send ID</TableHead>
+                <TableHead className="text-right">Delivered</TableHead>
+                <TableHead className="text-right">Failed</TableHead>
+                <TableHead className="text-right">Devices</TableHead>
+                <TableHead className="text-right">Sent</TableHead>
+              </TableRow>
+            </TableHeader>
+            <TableBody>
+              {sends.length > 0 ? (
+                sends.map((send) => (
+                  <SendRow
+                    isSelected={send.id === selectedSendId}
+                    key={send.id}
+                    onSelect={setSelectedSendId}
+                    send={send}
+                  />
+                ))
+              ) : (
+                <TableRow>
+                  <TableCell className="h-24 text-center" colSpan={6}>
+                    No notifications have been sent yet.
+                  </TableCell>
+                </TableRow>
+              )}
+            </TableBody>
+          </Table>
+          {hasMore ? (
+            <div className="mt-3">
+              <Button
+                className="w-full"
+                disabled={sendsQuery.isFetching}
+                onClick={() => {
+                  setVisibleCount((count) => count + SENDS_PAGE_SIZE);
+                }}
+                variant="outline"
+              >
+                {sendsQuery.isFetching ? "Loading..." : "Show more"}
+              </Button>
+            </div>
+          ) : null}
+        </div>
+      </div>
+
+      {selectedSend ? (
+        <SendDetailsPanel
+          onClose={() => setSelectedSendId(null)}
+          projectId={projectId}
+          send={selectedSend}
+        />
+      ) : null}
+    </Page>
+  );
+}
+
+function SentNotificationsHeader() {
+  return (
+    <PageHeader>
+      <PageHeaderTitle>Sent notifications</PageHeaderTitle>
+    </PageHeader>
+  );
+}
+
+interface SendRowProps {
+  send: PushNotificationSendType;
+  isSelected: boolean;
+  onSelect: (sendId: string) => void;
+}
+
+function SendRow({ send, isSelected, onSelect }: SendRowProps) {
+  return (
+    <TableRow
+      aria-selected={isSelected}
+      className={cn(
+        "cursor-pointer",
+        isSelected && "shadow-[inset_2px_0_0_0_var(--primary)]",
+      )}
+      data-state={isSelected ? "selected" : undefined}
+      onClick={() => onSelect(send.id)}
+    >
+      <TableCell>
+        <SendStatusBadge status={send.status} />
+      </TableCell>
+      <TableCell className="font-mono text-muted-foreground text-xs">{send.id}</TableCell>
+      <TableCell className="text-right text-sm">{send.succeededCount}</TableCell>
+      <TableCell
+        className={cn(
+          "text-right text-sm",
+          send.failedCount > 0 && "text-destructive",
+        )}
+      >
+        {send.failedCount}
+      </TableCell>
+      <TableCell className="text-right text-muted-foreground text-sm">{send.deviceCount}</TableCell>
+      <TableCell className="text-right">
+        <RelativeTime value={send.createdAt} />
+      </TableCell>
+    </TableRow>
+  );
+}
+
+interface SendDetailsPanelProps {
+  send: PushNotificationSendType;
+  projectId: string;
+  onClose: () => void;
+}
+
+function SendDetailsPanel({ send, projectId, onClose }: SendDetailsPanelProps) {
+  return (
+    <aside className="flex h-full w-[420px] shrink-0 flex-col border-l border-border/60 bg-background">
+      <PageHeader
+        className="pr-2"
+        rightActions={
+          <Button
+            aria-label="Close send details"
+            onClick={onClose}
+            size="icon-sm"
+            variant="ghost"
+          >
+            <XIcon className="size-3.5" />
+          </Button>
+        }
+      >
+        <PageHeaderTitle>Notification send</PageHeaderTitle>
+      </PageHeader>
+
+      <ScrollArea className="min-h-0 flex-1">
+        <Section title="Send">
+          <dl className="divide-y divide-border/60">
+            <DetailField label="Send ID" mono value={send.id} />
+            <DetailField label="Status" value={<SendStatusBadge status={send.status} />} />
+            <DetailField label="Devices targeted" mono value={String(send.deviceCount)} />
+            <DetailField label="Delivered" mono value={String(send.succeededCount)} />
+            <DetailField label="Failed" mono value={String(send.failedCount)} />
+            <DetailField label="Skipped" mono value={String(send.skippedCount)} />
+            <DetailField
+              label="Requested persons"
+              mono
+              value={String(send.requestedPersonCount)}
+            />
+            <DetailField
+              label="Requested distinct IDs"
+              mono
+              value={String(send.requestedDistinctIdCount)}
+            />
+            <DetailField
+              label="Unresolved distinct IDs"
+              value={
+                send.unresolvedDistinctIds.length > 0 ? (
+                  <span className="font-mono text-xs">
+                    {send.unresolvedDistinctIds.join(", ")}
+                  </span>
+                ) : (
+                  <NullValue />
+                )
+              }
+            />
+            <DetailField
+              label="Idempotency key"
+              mono
+              value={send.idempotencyKey ?? <NullValue />}
+            />
+            <DetailField label="Created at" mono value={formatDateTime(send.createdAt)} />
+            <DetailField
+              label="Completed at"
+              mono
+              value={send.completedAt ? formatDateTime(send.completedAt) : <NullValue />}
+            />
+          </dl>
+        </Section>
+
+        <Section title="Message">
+          {send.messagePurged ? (
+            <div className="px-4 py-2 text-muted-foreground/70 text-xs">
+              The message payload has been purged.
+            </div>
+          ) : (
+            <pre className="overflow-x-auto px-4 py-2 font-mono text-[11px] text-foreground">
+              {JSON.stringify(send.message, null, 2)}
+            </pre>
+          )}
+        </Section>
+
+        <Section title="Deliveries">
+          <DeliveriesTable projectId={projectId} sendId={send.id} />
+        </Section>
+      </ScrollArea>
+    </aside>
+  );
+}
+
+function DeliveriesTable({ projectId, sendId }: { projectId: string; sendId: string }) {
+  const query = useQuery(getPushNotificationSendDeliveriesOptions({ projectId, sendId }));
+
+  if (query.status === "pending") {
+    return (
+      <div className="space-y-2 px-4 py-2">
+        {Array.from({ length: 3 }).map((_, index) => (
+          <Skeleton className="h-4 w-full" key={`delivery-skeleton-${index}`} />
+        ))}
+      </div>
+    );
+  }
+
+  if (query.status === "error") {
+    return (
+      <div className="px-4 py-2 text-destructive text-xs">Failed to load deliveries.</div>
+    );
+  }
+
+  const { deliveries } = query.data;
+  if (deliveries.length === 0) {
+    return <div className="px-4 py-2 text-muted-foreground/70 text-xs">No deliveries.</div>;
+  }
+
+  return (
+    <div className="px-1">
+      {deliveries.map((delivery) => (
+        <div className="border-border/60 border-b px-3 py-2 last:border-b-0" key={delivery.id}>
+          <div className="flex items-center justify-between gap-2">
+            <span className="font-mono text-[11px] text-muted-foreground uppercase">
+              {delivery.provider}
+            </span>
+            <DeliveryStatusBadge status={delivery.status} />
+          </div>
+          <div className="mt-1 text-[11px] text-muted-foreground">
+            Attempt {delivery.attemptCount}/{delivery.maxAttempts}
+            {delivery.providerMessageId ? (
+              <span className="ml-2 font-mono">{delivery.providerMessageId}</span>
+            ) : null}
+          </div>
+          {delivery.lastError ? (
+            <div className="mt-1 break-all text-[11px] text-destructive">{delivery.lastError}</div>
+          ) : null}
+        </div>
+      ))}
+    </div>
+  );
+}
+
+/** Badge variant for a send-level status label from the RPC. */
+function SendStatusBadge({ status }: { status: string }) {
+  const variant =
+    status === "succeeded"
+      ? "default"
+      : status === "failed" || status === "partial_failed"
+        ? "destructive"
+        : status === "no_recipients"
+          ? "outline"
+          : "secondary";
+  return <Badge variant={variant}>{humanizeStatus(status)}</Badge>;
+}
+
+/** Badge variant for a per-device delivery status label from the RPC. */
+function DeliveryStatusBadge({ status }: { status: string }) {
+  const variant =
+    status === "succeeded"
+      ? "default"
+      : status === "failed" || status === "exhausted"
+        ? "destructive"
+        : "secondary";
+  return <Badge variant={variant}>{humanizeStatus(status)}</Badge>;
+}
+
+function humanizeStatus(status: string): string {
+  return status.replace(/_/g, " ");
+}
+
+interface DetailFieldProps {
+  label: string;
+  value: React.ReactNode;
+  mono?: boolean;
+}
+
+function DetailField({ label, value, mono = false }: DetailFieldProps) {
+  return (
+    <div className="px-4 py-3">
+      <dt className="text-[11px] text-muted-foreground/70 uppercase tracking-wide">{label}</dt>
+      <dd className={cn("mt-1 break-all text-foreground text-sm", mono && "font-mono text-xs")}>
+        {value}
+      </dd>
+    </div>
+  );
+}
+
+function NullValue() {
+  return <span className="text-muted-foreground/50">—</span>;
+}
+
+function formatDateTime(date: Date) {
+  return format(date, "yyyy-MM-dd HH:mm:ss.SSS");
+}
+
+function Section({
+  title,
+  defaultExpanded = true,
+  children,
+}: {
+  title: string;
+  defaultExpanded?: boolean;
+  children: React.ReactNode;
+}) {
+  const [isExpanded, setIsExpanded] = useState(defaultExpanded);
+  return (
+    <div className="border-border/60 border-b last:border-b-0">
+      <button
+        className="flex w-full items-center gap-1.5 px-4 py-2 text-[11px] text-muted-foreground/70 uppercase tracking-wide transition-colors hover:text-foreground"
+        onClick={() => setIsExpanded((v) => !v)}
+        type="button"
+      >
+        <span>{title}</span>
+      </button>
+      {isExpanded ? <div className="pb-2">{children}</div> : null}
+    </div>
+  );
+}
+
+function SentNotificationsPageSkeleton() {
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-row overflow-hidden">
+      <div className="flex min-w-0 flex-1 flex-col overflow-y-auto">
+        <SentNotificationsHeader />
+        <div className="min-w-0 flex-1 px-4 pt-4">
+          <Table>
+            <TableHeader>
+              <TableRow>
+                <TableHead>Status</TableHead>
+                <TableHead>Send ID</TableHead>
+                <TableHead className="text-right">Delivered</TableHead>
+                <TableHead className="text-right">Failed</TableHead>
+                <TableHead className="text-right">Devices</TableHead>
+                <TableHead className="text-right">Sent</TableHead>
+              </TableRow>
+            </TableHeader>
+            <TableBody>
+              {Array.from({ length: 8 }).map((_, index) => (
+                <TableRow key={`sent-notifications-skeleton-${index}`}>
+                  <TableCell>
+                    <Skeleton className="h-5 w-20" />
+                  </TableCell>
+                  <TableCell className="font-mono text-xs">
+                    <Skeleton className="h-4 w-48" />
+                  </TableCell>
+                  <TableCell className="text-right">
+                    <Skeleton className="ml-auto h-4 w-8" />
+                  </TableCell>
+                  <TableCell className="text-right">
+                    <Skeleton className="ml-auto h-4 w-8" />
+                  </TableCell>
+                  <TableCell className="text-right">
+                    <Skeleton className="ml-auto h-4 w-8" />
+                  </TableCell>
+                  <TableCell className="text-right">
+                    <Skeleton className="ml-auto h-4 w-20" />
+                  </TableCell>
+                </TableRow>
+              ))}
+            </TableBody>
+          </Table>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.churn.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.churn.tsx
new file mode 100644
index 000000000..9fc7e9f32
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.churn.tsx
@@ -0,0 +1,24 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { CHURN_ANALYTICS_INSIGHTS } from "@/features/studio/analytics/overview/query-builders";
+import { ProjectAnalyticsPage } from "@/features/studio/analytics/project-analytics-page";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn",
+)({
+  component: ChurnAnalyticsPage,
+});
+
+function ChurnAnalyticsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+
+  return (
+    <ProjectAnalyticsPage
+      columns={2}
+      metrics={CHURN_ANALYTICS_INSIGHTS}
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      title="Churn"
+    />
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx
new file mode 100644
index 000000000..8feaba84a
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx
@@ -0,0 +1,176 @@
+import { useMutation } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import {
+  Button,
+  Page,
+  PageHeader,
+  PageHeaderTitle,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+  Textarea,
+} from "@voidhash/ui";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { useState } from "react";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { runVoidQlQueryOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/query",
+)({
+  component: QueryPage,
+});
+
+const EXAMPLE_QUERY =
+  "SELECT event_name, count() AS n\nFROM events\nGROUP BY event_name\nORDER BY n DESC\nLIMIT 100";
+
+/** Render an arbitrary VoidQL result cell value as display text. */
+function formatCell(value: unknown): string {
+  if (value === null || value === undefined) return "";
+  if (typeof value === "object") return JSON.stringify(value);
+  return String(value);
+}
+
+/** Best-effort extraction of a human-readable message from a typed RPC error. */
+function errorMessage(error: unknown): { message: string; hint?: string } {
+  if (typeof error === "object" && error !== null) {
+    const message = Reflect.get(error, "message");
+    const hint = Reflect.get(error, "hint");
+    return {
+      message: typeof message === "string" ? message : "The query could not be executed.",
+      hint: typeof hint === "string" && hint.length > 0 ? hint : undefined,
+    };
+  }
+  return { message: "The query could not be executed." };
+}
+
+function QueryPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  // Gated behind an internal feature flag (unreleased) — also hides direct URL access.
+  const queryEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidqlQuery.key);
+  const [text, setText] = useState(EXAMPLE_QUERY);
+
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  const runQuery = useMutation(runVoidQlQueryOptions());
+
+  if (!queryEnabled) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "NOT_FOUND",
+          message: "This page is not available.",
+          title: "Page not found",
+        }}
+      />
+    );
+  }
+
+  if (!project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "The project you are looking for does not exist.",
+          title: "Project not found",
+        }}
+      />
+    );
+  }
+
+  const onRun = () => {
+    const trimmed = text.trim();
+    if (trimmed.length === 0) return;
+    runQuery.mutate({ organizationId: project.organizationId, text: trimmed });
+  };
+
+  const result = runQuery.data;
+  const error = runQuery.isError ? errorMessage(runQuery.error) : null;
+
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-col overflow-hidden">
+      <PageHeader>
+        <PageHeaderTitle>Query</PageHeaderTitle>
+      </PageHeader>
+
+      <div className="flex min-h-0 flex-1 flex-col gap-4 overflow-y-auto px-4 pt-4 pb-8">
+        <div className="flex flex-col gap-2">
+          <Textarea
+            aria-label="VoidQL query"
+            className="min-h-32 font-mono text-sm"
+            onChange={(event) => setText(event.target.value)}
+            placeholder="SELECT event_name, count() AS n FROM events GROUP BY event_name"
+            spellCheck={false}
+            value={text}
+          />
+          <div className="flex items-center gap-3">
+            <Button disabled={runQuery.isPending || text.trim().length === 0} onClick={onRun}>
+              {runQuery.isPending ? "Running…" : "Run"}
+            </Button>
+            {result ? (
+              <span className="text-muted-foreground text-sm">
+                {result.rows.length} row{result.rows.length === 1 ? "" : "s"}
+              </span>
+            ) : null}
+          </div>
+        </div>
+
+        {error ? (
+          <div className="rounded-md border border-destructive/40 bg-destructive/5 px-3 py-2 text-destructive text-sm">
+            <p className="font-medium">{error.message}</p>
+            {error.hint ? <p className="mt-1 text-destructive/80">{error.hint}</p> : null}
+          </div>
+        ) : null}
+
+        {result ? (
+          <div className="min-w-0 overflow-x-auto rounded-md border">
+            <Table>
+              <TableHeader>
+                <TableRow>
+                  {result.columns.map((column) => (
+                    <TableHead key={column.name}>{column.name}</TableHead>
+                  ))}
+                </TableRow>
+              </TableHeader>
+              <TableBody>
+                {result.rows.length > 0 ? (
+                  result.rows.map((row, rowIndex) => (
+                    // Result rows have no stable id; index is acceptable for a read-only view.
+                    <TableRow key={rowIndex}>
+                      {result.columns.map((column) => (
+                        <TableCell className="font-mono text-xs" key={column.name}>
+                          {formatCell(row[column.name])}
+                        </TableCell>
+                      ))}
+                    </TableRow>
+                  ))
+                ) : (
+                  <TableRow>
+                    <TableCell
+                      className="h-24 text-center"
+                      colSpan={Math.max(result.columns.length, 1)}
+                    >
+                      The query returned no rows.
+                    </TableCell>
+                  </TableRow>
+                )}
+              </TableBody>
+            </Table>
+          </div>
+        ) : null}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.revenue.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.revenue.tsx
new file mode 100644
index 000000000..023da1b8b
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.revenue.tsx
@@ -0,0 +1,24 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { REVENUE_ANALYTICS_INSIGHTS } from "@/features/studio/analytics/overview/query-builders";
+import { ProjectAnalyticsPage } from "@/features/studio/analytics/project-analytics-page";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/revenue",
+)({
+  component: RevenueAnalyticsPage,
+});
+
+function RevenueAnalyticsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+
+  return (
+    <ProjectAnalyticsPage
+      columns={2}
+      metrics={REVENUE_ANALYTICS_INSIGHTS}
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      title="Revenue"
+    />
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers.tsx
new file mode 100644
index 000000000..8532ab18d
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers.tsx
@@ -0,0 +1,24 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { SUBSCRIBER_ANALYTICS_INSIGHTS } from "@/features/studio/analytics/overview/query-builders";
+import { ProjectAnalyticsPage } from "@/features/studio/analytics/project-analytics-page";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers",
+)({
+  component: SubscribersAnalyticsPage,
+});
+
+function SubscribersAnalyticsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+
+  return (
+    <ProjectAnalyticsPage
+      columns={3}
+      metrics={SUBSCRIBER_ANALYTICS_INSIGHTS}
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      title="Subscribers"
+    />
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.trials.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.trials.tsx
new file mode 100644
index 000000000..03855ac81
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.trials.tsx
@@ -0,0 +1,24 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { TRIAL_ANALYTICS_INSIGHTS } from "@/features/studio/analytics/overview/query-builders";
+import { ProjectAnalyticsPage } from "@/features/studio/analytics/project-analytics-page";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials",
+)({
+  component: TrialsAnalyticsPage,
+});
+
+function TrialsAnalyticsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+
+  return (
+    <ProjectAnalyticsPage
+      columns={2}
+      metrics={TRIAL_ANALYTICS_INSIGHTS}
+      organizationSlug={organizationSlug}
+      projectSlug={projectSlug}
+      title="Trials"
+    />
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx
new file mode 100644
index 000000000..2c81ee5e9
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx
@@ -0,0 +1,55 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { AssetLibrary } from "@/features/studio/paywall-assets/asset-library";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/",
+)({
+  component: AssetsIndexPage,
+  errorComponent: AssetsIndexPageError,
+});
+
+function AssetsIndexPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading assets",
+      }}
+    />
+  );
+}
+
+/**
+ * Organization-scoped image asset library, rendered full-page. Assets live at
+ * the organization level but are surfaced under the project's Paywalls group,
+ * since they are consumed as paywall backgrounds; the org id is resolved from
+ * the current project.
+ */
+function AssetsIndexPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Assets</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-6xl px-4 pt-4">
+        <AssetLibrary organizationId={project.organizationId} />
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx
new file mode 100644
index 000000000..a1de5b096
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx
@@ -0,0 +1,86 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { listPaywallDeploysOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { PaywallDeployRecord } from "@/features/studio/paywall-deploys/paywall-deploy-record";
+import { SettingsCard } from "@/features/studio/settings";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys",
+)({
+  component: ProjectDeploysPage,
+  errorComponent: ProjectDeploysPageError,
+  pendingComponent: ProjectDeploysPageSkeleton,
+});
+
+function ProjectDeploysPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading deploys",
+      }}
+    />
+  );
+}
+
+function ProjectDeploysPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Deploys</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        <SettingsCard>
+          <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
+            Loading deploys...
+          </div>
+        </SettingsCard>
+      </div>
+    </Page>
+  );
+}
+
+function ProjectDeploysPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: deploys } = useSuspenseQuery(listPaywallDeploysOptions({ projectId: project.id }));
+
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Deploys</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4 pb-16">
+        {deploys.length === 0 ? (
+          <SettingsCard>
+            <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
+              No code deploys yet. Run <span className="font-mono">voidhash deploy</span> from your
+              project to push paywalls built in code.
+            </div>
+          </SettingsCard>
+        ) : (
+          <SettingsCard className="grid gap-0 divide-y">
+            {deploys.map((deploy) => (
+              <PaywallDeployRecord deploy={deploy} key={deploy.id} projectId={project.id} />
+            ))}
+          </SettingsCard>
+        )}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
new file mode 100644
index 000000000..b008ff0d1
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
@@ -0,0 +1,193 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  Tabs,
+  TabsContent,
+  TabsList,
+  TabsTrigger,
+} from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { EnterpriseAuditLogSlot } from "@/features/studio/enterprise/enterprise-audit-log-slot";
+import { ExperimentLifecycleControls } from "@/features/studio/experiments/experiment-lifecycle-controls";
+import { ExperimentSettingsForm } from "@/features/studio/experiments/experiment-settings-form";
+import { ExperimentSetupPanel } from "@/features/studio/experiments/experiment-setup-panel";
+import { EXPERIMENT_STATUS } from "@/features/studio/experiments/experiment-status";
+import { ExperimentStatusBadge } from "@/features/studio/experiments/experiment-status-badge";
+import { ExperimentTreatmentsPanel } from "@/features/studio/experiments/experiment-treatments-panel";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { getExperimentOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id",
+)({
+  component: ExperimentDetailRoute,
+  errorComponent: ExperimentDetailPageError,
+});
+
+/**
+ * Gate the experiment detail page behind the `experimentation` internal feature
+ * flag, matching the A/B Tests list route.
+ */
+function ExperimentDetailRoute() {
+  const experimentationEnabled = useInternalFeatureFlag(
+    INTERNAL_FEATURE_FLAGS.experimentation.key,
+  );
+
+  if (!experimentationEnabled) {
+    return (
+      <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "This page is not available." }} />
+    );
+  }
+
+  return <ExperimentDetailPage />;
+}
+
+function ExperimentDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the experiment",
+      }}
+    />
+  );
+}
+
+function ExperimentDetailPage() {
+  const { id, organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: experiment } = useSuspenseQuery(getExperimentOptions({ id: id as string }));
+
+  const isRunning = experiment.status === EXPERIMENT_STATUS.running;
+  const isConcluded = experiment.status === EXPERIMENT_STATUS.concluded;
+  // Variants and weights are frozen while the experiment is actively assigning
+  // (running) or already concluded.
+  const setupLocked = isRunning || isConcluded;
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "A/B Tests",
+          url: `/${organizationSlug}/${projectSlug}/experiments`,
+        },
+        {
+          title: experiment.name,
+          url: `/${organizationSlug}/${projectSlug}/experiments/${id}`,
+        },
+      ]}
+      className="p-0 py-8"
+    >
+      <div className="mx-auto max-w-5xl">
+        <div className="flex items-center justify-between">
+          <div>
+            <h1 className="font-normal text-3xl tracking-right">{experiment.name}</h1>
+            <div className="mt-1 flex items-center gap-2">
+              <span className="font-mono text-muted-foreground text-sm">{experiment.key}</span>
+              <ExperimentStatusBadge status={experiment.status} />
+            </div>
+          </div>
+          <ExperimentLifecycleControls
+            archivedAt={experiment.archivedAt}
+            experimentId={experiment.id}
+            status={experiment.status}
+            variants={experiment.variants}
+          />
+        </div>
+
+        <div className="mt-8 grid grid-cols-12 gap-6">
+          <div className="col-span-9 space-y-6">
+            <Tabs defaultValue="setup">
+              <TabsList>
+                <TabsTrigger value="setup">Setup</TabsTrigger>
+                <TabsTrigger value="treatments">Treatments</TabsTrigger>
+                <TabsTrigger value="settings">Settings</TabsTrigger>
+              </TabsList>
+
+              <TabsContent value="setup">
+                <ExperimentSetupPanel
+                  experimentId={experiment.id}
+                  readOnly={setupLocked}
+                  variants={[...experiment.variants]}
+                />
+              </TabsContent>
+
+              <TabsContent value="treatments">
+                <ExperimentTreatmentsPanel
+                  experimentId={experiment.id}
+                  projectId={project.id}
+                  readOnly={isConcluded}
+                  treatments={experiment.treatments}
+                  variants={experiment.variants}
+                />
+              </TabsContent>
+
+              <TabsContent value="settings">
+                <ExperimentSettingsForm experiment={experiment} readOnly={isConcluded} />
+              </TabsContent>
+            </Tabs>
+          </div>
+          <div className="col-span-3 space-y-6">
+            <Card>
+              <CardHeader>
+                <CardTitle className="text-sm">Details</CardTitle>
+              </CardHeader>
+              <CardContent className="space-y-4 text-sm">
+                <div>
+                  <p className="text-muted-foreground">Primary metric</p>
+                  <p className="font-mono text-xs">{experiment.primaryMetricEventName}</p>
+                </div>
+                <div>
+                  <p className="text-muted-foreground">Version</p>
+                  <p>{experiment.version}</p>
+                </div>
+                {experiment.startedAt && (
+                  <div>
+                    <p className="text-muted-foreground">Started</p>
+                    <p>{new Date(experiment.startedAt).toLocaleDateString()}</p>
+                  </div>
+                )}
+                {experiment.endedAt && (
+                  <div>
+                    <p className="text-muted-foreground">Ended</p>
+                    <p>{new Date(experiment.endedAt).toLocaleDateString()}</p>
+                  </div>
+                )}
+                {experiment.createdAt && (
+                  <div>
+                    <p className="text-muted-foreground">Created</p>
+                    <p>{new Date(experiment.createdAt).toLocaleDateString()}</p>
+                  </div>
+                )}
+              </CardContent>
+            </Card>
+            <EnterpriseAuditLogSlot
+              entityId={experiment.id}
+              entityType="experiment"
+              projectId={project.id}
+            />
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
new file mode 100644
index 000000000..e0d24e7fd
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
@@ -0,0 +1,95 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { CreateExperimentModal } from "@/features/studio/experiments/create-experiment-modal";
+import { ExperimentRecord } from "@/features/studio/experiments/experiment-record";
+import { ExperimentsPageEmptyState } from "@/features/studio/experiments/experiments-page-empty-state";
+import { ExperimentsPageSkeleton } from "@/features/studio/experiments/experiments-page-skeleton";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { listExperimentsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/",
+)({
+  component: ExperimentsIndexRoute,
+  errorComponent: ExperimentsIndexPageError,
+  pendingComponent: ExperimentsPageSkeleton,
+});
+
+function ExperimentsIndexPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading A/B Tests",
+      }}
+    />
+  );
+}
+
+/**
+ * Gate the A/B Tests surface behind the `experimentation` internal feature flag,
+ * matching the Feature Flags routes in the same suite.
+ */
+function ExperimentsIndexRoute() {
+  const experimentationEnabled = useInternalFeatureFlag(
+    INTERNAL_FEATURE_FLAGS.experimentation.key,
+  );
+
+  if (!experimentationEnabled) {
+    return (
+      <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "This page is not available." }} />
+    );
+  }
+
+  return <ExperimentsIndexPage />;
+}
+
+function ExperimentsIndexPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: experiments } = useSuspenseQuery(listExperimentsOptions({ projectId: project.id }));
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={
+          experiments.length > 0 ? <CreateExperimentModal projectId={project.id} /> : null
+        }
+      >
+        <PageHeaderTitle>A/B Tests</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        {experiments.length === 0 ? (
+          <ExperimentsPageEmptyState projectId={project.id} />
+        ) : (
+          <Card className="grid gap-0 divide-y p-0">
+            {experiments.map((experiment) => (
+              <ExperimentRecord
+                experiment={experiment}
+                key={experiment.id}
+                organizationSlug={organizationSlug as string}
+                projectSlug={projectSlug as string}
+              />
+            ))}
+          </Card>
+        )}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx
new file mode 100644
index 000000000..64b9dc4c7
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx
@@ -0,0 +1,306 @@
+import { useMutation, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import {
+  Accordion,
+  AccordionContent,
+  AccordionItem,
+  AccordionTrigger,
+  Alert,
+  AlertDescription,
+  Badge,
+  Button,
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  Tabs,
+  TabsContent,
+  TabsList,
+  TabsTrigger,
+} from "@voidhash/ui";
+import { Info } from "lucide-react";
+import { useState } from "react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { EnterpriseAuditLogSlot } from "@/features/studio/enterprise/enterprise-audit-log-slot";
+import { FlagGeneralForm } from "@/features/studio/feature-flags/flag-general-form";
+import { FlagOverridesPanel } from "@/features/studio/feature-flags/flag-overrides-panel";
+import { FlagTargetingPanel } from "@/features/studio/feature-flags/flag-targeting-panel";
+import { type FlagType, deriveFlagType } from "@/features/studio/feature-flags/flag-type";
+import { FlagTypeBadge } from "@/features/studio/feature-flags/flag-type-badge";
+import { FlagVariantsPanel } from "@/features/studio/feature-flags/flag-variants-panel";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import {
+  archiveFeatureFlagOptions,
+  getFeatureFlagOptions,
+  queryKeys,
+  restoreFeatureFlagOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id",
+)({
+  component: FlagDetailRoute,
+  errorComponent: FlagDetailPageError,
+});
+
+/**
+ * Gate the feature-flag detail page behind the `experimentation` internal
+ * feature flag, matching the flags list route.
+ */
+function FlagDetailRoute() {
+  const experimentationEnabled = useInternalFeatureFlag(
+    INTERNAL_FEATURE_FLAGS.experimentation.key,
+  );
+
+  if (!experimentationEnabled) {
+    return (
+      <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "This page is not available." }} />
+    );
+  }
+
+  return <FlagDetailPage />;
+}
+
+function FlagDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the feature flag",
+      }}
+    />
+  );
+}
+
+function FlagDetailPage() {
+  const { id, organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+  const queryClient = useQueryClient();
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: flag } = useSuspenseQuery(getFeatureFlagOptions({ id: id as string }));
+
+  const derivedType = deriveFlagType(flag.variants ?? []);
+  const [flagType, setFlagType] = useState<FlagType>(derivedType);
+
+  const hasTargets = (flag.targets ?? []).length > 0;
+  const hasOverrides = (flag.overrides ?? []).length > 0;
+
+  const archiveFlag = useMutation({
+    ...archiveFeatureFlagOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.getFlag(flag.id),
+      });
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.all,
+      });
+    },
+  });
+
+  const restoreFlag = useMutation({
+    ...restoreFeatureFlagOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.getFlag(flag.id),
+      });
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.all,
+      });
+    },
+  });
+
+  const defaultAccordionValues = [
+    ...(hasTargets ? ["targeting"] : []),
+    ...(hasOverrides ? ["overrides"] : []),
+  ];
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "Feature Flags",
+          url: `/${organizationSlug}/${projectSlug}/flags`,
+        },
+        {
+          title: flag.name,
+          url: `/${organizationSlug}/${projectSlug}/flags/${id}`,
+        },
+      ]}
+      className="p-0 py-8"
+    >
+      <div className="mx-auto max-w-5xl">
+        <div className="flex items-center justify-between">
+          <div>
+            <h1 className="font-normal text-3xl tracking-right">{flag.name}</h1>
+            <div className="mt-1 flex items-center gap-2">
+              <span className="font-mono text-muted-foreground text-sm">{flag.key}</span>
+              <FlagTypeBadge flagType={flagType} />
+            </div>
+          </div>
+          {!flag.internal && (
+            <div className="flex gap-2">
+              {flag.archivedAt ? (
+                <Button
+                  disabled={restoreFlag.isPending}
+                  onClick={() => restoreFlag.mutate({ id: flag.id })}
+                  variant="outline"
+                >
+                  {restoreFlag.isPending ? "Restoring..." : "Restore"}
+                </Button>
+              ) : (
+                <Button
+                  disabled={archiveFlag.isPending}
+                  onClick={() => archiveFlag.mutate({ id: flag.id })}
+                  variant="destructive"
+                >
+                  {archiveFlag.isPending ? "Archiving..." : "Archive"}
+                </Button>
+              )}
+            </div>
+          )}
+        </div>
+
+        {flag.internal && (
+          <Alert className="mt-4">
+            <Info className="h-4 w-4" />
+            <AlertDescription>
+              This flag is managed internally and cannot be edited directly.
+            </AlertDescription>
+          </Alert>
+        )}
+
+        <div className="mt-8 grid grid-cols-12 gap-6">
+          <div className="col-span-9 space-y-6">
+            <Tabs onValueChange={(value) => setFlagType(value as FlagType)} value={flagType}>
+              <TabsList>
+                <TabsTrigger value="boolean">Boolean</TabsTrigger>
+                <TabsTrigger value="multivariant">Multi-variant</TabsTrigger>
+                <TabsTrigger value="json">JSON</TabsTrigger>
+              </TabsList>
+
+              <TabsContent value="boolean">
+                <div className="space-y-6">
+                  <FlagGeneralForm flag={flag} flagType="boolean" readOnly={flag.internal} />
+                </div>
+              </TabsContent>
+
+              <TabsContent value="multivariant">
+                <div className="space-y-6">
+                  <FlagGeneralForm flag={flag} flagType="multivariant" readOnly={flag.internal} />
+                  <FlagVariantsPanel
+                    featureFlagId={flag.id}
+                    flagType="multivariant"
+                    readOnly={flag.internal}
+                    variants={[...(flag.variants ?? [])]}
+                  />
+                </div>
+              </TabsContent>
+
+              <TabsContent value="json">
+                <div className="space-y-6">
+                  <FlagGeneralForm flag={flag} flagType="json" readOnly={flag.internal} />
+                  <FlagVariantsPanel
+                    featureFlagId={flag.id}
+                    flagType="json"
+                    readOnly={flag.internal}
+                    variants={[...(flag.variants ?? [])]}
+                  />
+                </div>
+              </TabsContent>
+            </Tabs>
+
+            <Card>
+              <Accordion defaultValue={defaultAccordionValues} type="multiple">
+                <AccordionItem className="border-b-0" value="targeting">
+                  <CardHeader className="py-0">
+                    <AccordionTrigger className="py-4">
+                      <div className="flex items-center gap-2">
+                        Targeting
+                        {hasTargets && (
+                          <Badge variant="secondary">{(flag.targets ?? []).length}</Badge>
+                        )}
+                      </div>
+                    </AccordionTrigger>
+                  </CardHeader>
+                  <AccordionContent className="px-0">
+                    <CardContent>
+                      <FlagTargetingPanel
+                        featureFlagId={flag.id}
+                        targets={[...(flag.targets ?? [])]}
+                      />
+                    </CardContent>
+                  </AccordionContent>
+                </AccordionItem>
+
+                <AccordionItem className="border-b-0" value="overrides">
+                  <CardHeader className="py-0">
+                    <AccordionTrigger className="py-4">
+                      <div className="flex items-center gap-2">
+                        Overrides
+                        {hasOverrides && (
+                          <Badge variant="secondary">{(flag.overrides ?? []).length}</Badge>
+                        )}
+                      </div>
+                    </AccordionTrigger>
+                  </CardHeader>
+                  <AccordionContent className="px-0">
+                    <CardContent>
+                      <FlagOverridesPanel
+                        featureFlagId={flag.id}
+                        overrides={[...(flag.overrides ?? [])]}
+                      />
+                    </CardContent>
+                  </AccordionContent>
+                </AccordionItem>
+              </Accordion>
+            </Card>
+          </div>
+          <div className="col-span-3 space-y-6">
+            <Card>
+              <CardHeader>
+                <CardTitle className="text-sm">Details</CardTitle>
+              </CardHeader>
+              <CardContent className="space-y-4 text-sm">
+                <div>
+                  <p className="text-muted-foreground">Version</p>
+                  <p>{flag.version}</p>
+                </div>
+                {flag.createdAt && (
+                  <div>
+                    <p className="text-muted-foreground">Created</p>
+                    <p>{new Date(flag.createdAt).toLocaleDateString()}</p>
+                  </div>
+                )}
+                {flag.updatedAt && (
+                  <div>
+                    <p className="text-muted-foreground">Updated</p>
+                    <p>{new Date(flag.updatedAt).toLocaleDateString()}</p>
+                  </div>
+                )}
+              </CardContent>
+            </Card>
+            <EnterpriseAuditLogSlot
+              entityId={flag.id}
+              entityType="feature_flag"
+              projectId={project.id}
+            />
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx
new file mode 100644
index 000000000..9329f51fe
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx
@@ -0,0 +1,94 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { CreateFlagModal } from "@/features/studio/feature-flags/create-flag-modal";
+import { FlagRecord } from "@/features/studio/feature-flags/flag-record";
+import { FlagsPageEmptyState } from "@/features/studio/feature-flags/flags-page-empty-state";
+import { FlagsPageSkeleton } from "@/features/studio/feature-flags/flags-page-skeleton";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { listFeatureFlagsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/",
+)({
+  component: FlagsIndexRoute,
+  errorComponent: FlagsIndexPageError,
+  pendingComponent: FlagsPageSkeleton,
+});
+
+/**
+ * Gate the Feature Flags product behind the `experimentation` internal feature
+ * flag so the page cannot be reached by direct URL for orgs that are not yet in
+ * the tester rollout.
+ */
+function FlagsIndexRoute() {
+  const experimentationEnabled = useInternalFeatureFlag(
+    INTERNAL_FEATURE_FLAGS.experimentation.key,
+  );
+
+  if (!experimentationEnabled) {
+    return (
+      <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "This page is not available." }} />
+    );
+  }
+
+  return <FlagsIndexPage />;
+}
+
+function FlagsIndexPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading feature flags",
+      }}
+    />
+  );
+}
+
+function FlagsIndexPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: flags } = useSuspenseQuery(listFeatureFlagsOptions({ projectId: project.id }));
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={flags.length > 0 ? <CreateFlagModal projectId={project.id} /> : null}
+      >
+        <PageHeaderTitle>Feature Flags</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        {flags.length === 0 ? (
+          <FlagsPageEmptyState projectId={project.id} />
+        ) : (
+          <Card className="grid gap-0 divide-y p-0">
+            {flags.map((flag) => (
+              <FlagRecord
+                flag={flag}
+                key={flag.id}
+                organizationSlug={organizationSlug as string}
+                projectSlug={projectSlug as string}
+              />
+            ))}
+          </Card>
+        )}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/index.tsx
new file mode 100644
index 000000000..57048b24c
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/index.tsx
@@ -0,0 +1,15 @@
+import { createFileRoute, redirect } from "@tanstack/react-router";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/",
+)({
+  beforeLoad: ({ params }) => {
+    throw redirect({
+      params: {
+        organizationSlug: params.organizationSlug,
+        projectSlug: params.projectSlug,
+      },
+      to: "/studio/$organizationSlug/$projectSlug/overview",
+    });
+  },
+});
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview.tsx
new file mode 100644
index 000000000..01dc6d7af
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview.tsx
@@ -0,0 +1,20 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { ProjectOverview } from "@/features/studio/projects/overview/project-overview";
+import { Page } from "@/features/studio/shell";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview",
+)({
+  component: RouteComponent,
+});
+
+function RouteComponent() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+
+  return (
+    <Page className="px-0 pt-4">
+      <ProjectOverview organizationSlug={organizationSlug} projectSlug={projectSlug} />
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
new file mode 100644
index 000000000..1c9a74162
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -0,0 +1,117 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Button, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { ArchiveIcon } from "lucide-react";
+import { useState } from "react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { CreatePaywallButton } from "@/features/studio/paywalls/create-paywall-button";
+import { PaywallCard } from "@/features/studio/paywalls/paywall-card";
+import { PaywallCardSkeleton } from "@/features/studio/paywalls/paywall-card-skeleton";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/",
+)({
+  component: PaywallsPage,
+  errorComponent: PaywallsPageError,
+  pendingComponent: PaywallsPageSkeleton,
+});
+
+function PaywallsPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the paywalls",
+      }}
+    />
+  );
+}
+
+function PaywallsPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Paywalls</PageHeaderTitle>
+      </PageHeader>
+      <div className="grid w-full grid-cols-2 gap-6 px-4 pt-4 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
+        {Array.from({ length: 5 }).map((_, index) => (
+          // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+          <PaywallCardSkeleton key={index} />
+        ))}
+      </div>
+    </Page>
+  );
+}
+
+function PaywallsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const [showArchived, setShowArchived] = useState(false);
+
+  // Fetch archived paywalls alongside active ones so toggling visibility is a
+  // client-side filter — no refetch (and no skeleton flash) when flipping it.
+  const { data: allPaywalls } = useSuspenseQuery(
+    listPaywallsOptions({ includeArchived: true, projectId: project.id }),
+  );
+
+  const archivedCount = allPaywalls.filter((paywall) => paywall.archivedAt != null).length;
+  const paywalls = showArchived
+    ? allPaywalls
+    : allPaywalls.filter((paywall) => paywall.archivedAt == null);
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={
+          <div className="flex items-center gap-2">
+            {archivedCount > 0 && (
+              <Button
+                onClick={() => setShowArchived((value) => !value)}
+                size="sm"
+                variant="ghost"
+              >
+                <ArchiveIcon />
+                {showArchived ? "Hide archived" : `Show archived (${archivedCount})`}
+              </Button>
+            )}
+            <CreatePaywallButton projectId={project.id} />
+          </div>
+        }
+      >
+        <PageHeaderTitle>Paywalls</PageHeaderTitle>
+      </PageHeader>
+      <div className="w-full px-4 pt-4">
+        {paywalls.length === 0 ? (
+          <div className="py-20 text-center text-muted-foreground text-sm">
+            No paywalls yet. Create one to get started.
+          </div>
+        ) : (
+          <div className="grid grid-cols-2 gap-6 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
+            {paywalls.map((paywall) => (
+              <PaywallCard
+                key={paywall.id}
+                organizationSlug={organizationSlug as string}
+                paywall={paywall}
+                projectSlug={projectSlug as string}
+              />
+            ))}
+          </div>
+        )}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx
new file mode 100644
index 000000000..2b1e334b9
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx
@@ -0,0 +1,130 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Card, CardContent, CardHeader, CardTitle } from "@voidhash/ui";
+import { format } from "date-fns";
+import { Clock4Icon } from "lucide-react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { PersonFlagOverridesPanel } from "@/features/studio/feature-flags/person-flag-overrides-panel";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { getPersonByDistinctIdOptions } from "@/features/studio/lib/tanstack-query/persons";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id",
+)({
+  component: PersonDetailPage,
+  errorComponent: PersonDetailPageError,
+  pendingComponent: PersonDetailPageSkeleton,
+});
+
+function PersonDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the person",
+      }}
+    />
+  );
+}
+
+function PersonDetailPageSkeleton() {
+  return <Page className="p-0 py-8 pt-3">Loading person...</Page>;
+}
+
+function PersonDetailPage() {
+  const { id: distinctId, organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: person } = useSuspenseQuery(
+    getPersonByDistinctIdOptions({
+      distinctId: distinctId as string,
+      projectId: project.id,
+    }),
+  );
+
+  const title = person.name ?? person.email ?? person.distinctId ?? person.personId;
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "People",
+          url: `/${organizationSlug}/${projectSlug}/persons`,
+        },
+        {
+          title,
+          url: `/${organizationSlug}/${projectSlug}/persons/${distinctId}`,
+        },
+      ]}
+      className="p-0 py-8 pt-3"
+    >
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-6xl pb-10 pt-4">
+          <div className="flex flex-row items-center justify-between">
+            <h1 className="font-normal text-3xl tracking-right">{title}</h1>
+          </div>
+          {person.email && <p className="mt-3 text-muted-foreground">{person.email}</p>}
+        </div>
+      </div>
+      <div className="mx-auto mt-3 max-w-6xl ">
+        <div className="grid grid-cols-12 gap-8">
+          <div className="col-span-9">
+            <div className="mt-8 space-y-8">
+              <Card className="gap-0 overflow-hidden pb-0">
+                <CardHeader className="pb-4">
+                  <CardTitle className="flex items-center gap-4">Purchases</CardTitle>
+                </CardHeader>
+                <CardContent className="divide-y divide-border border-border border-t px-0">
+                  <div className="flex h-full flex-col items-center justify-center py-6">
+                    <div className="text-muted-foreground">Person has not made any purchases.</div>
+                  </div>
+                </CardContent>
+              </Card>
+
+              <Card className="gap-0 overflow-hidden pb-0">
+                <CardHeader className="pb-4">
+                  <CardTitle className="flex items-center gap-4">Unlocked Perks</CardTitle>
+                </CardHeader>
+                <CardContent className="divide-y divide-border border-border border-t px-0">
+                  <div className="flex h-full flex-col items-center justify-center py-6">
+                    <div className="text-muted-foreground">Person has no unlocked perks.</div>
+                  </div>
+                </CardContent>
+              </Card>
+
+              <PersonFlagOverridesPanel personId={person.personId} projectId={project.id} />
+            </div>
+          </div>
+          <div className="col-span-3 mt-8">
+            <h2 className=" font-semibold text-xl tracking-normal tracking-right">Details</h2>
+            <div className="mt-4">
+              {person.createdAt && (
+                <div>
+                  <p className="font-semibold">Created at</p>
+                  <div className="mt-1 flex flex-row items-center gap-2">
+                    <Clock4Icon className="h-4 w-4 text-muted-foreground" />
+                    <p className="text-muted-foreground">
+                      {format(person.createdAt, "MMM d, yyyy")}
+                    </p>
+                  </div>
+                </div>
+              )}
+            </div>
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.index.tsx
new file mode 100644
index 000000000..f42035bfa
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.index.tsx
@@ -0,0 +1,52 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { CreatePersonButton } from "@/features/studio/persons/create-person-button";
+import { PersonsTable } from "@/features/studio/persons/persons-table";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/",
+)({
+  component: PersonsIndexPage,
+});
+
+function PersonsIndexPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    return (
+      <VoidhashErrorCard
+        error={{
+          code: "INTERNAL_SERVER_ERROR",
+          message: "The project you are looking for does not exist.",
+          title: "Project not found",
+        }}
+      />
+    );
+  }
+
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-col overflow-hidden">
+      <PageHeader rightActions={<CreatePersonButton projectId={project.id} />}>
+        <PageHeaderTitle>People</PageHeaderTitle>
+      </PageHeader>
+      <div className="min-w-0 flex-1 overflow-y-auto px-4 pt-4">
+        <PersonsTable
+          organizationSlug={organizationSlug as string}
+          projectId={project.id}
+          projectSlug={projectSlug as string}
+        />
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id.tsx
new file mode 100644
index 000000000..f94301ae9
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id.tsx
@@ -0,0 +1,82 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { ProductDetailBody } from "@/features/studio/products/product-detail-body";
+import { ProductsDetailPageSkeleton } from "@/features/studio/products/product-detail-page-skeleton";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { getProductOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id",
+)({
+  component: ProductDetailPage,
+  errorComponent: ProductDetailPageError,
+  pendingComponent: ProductDetailPageSkeleton,
+});
+
+function ProductDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the product",
+      }}
+    />
+  );
+}
+
+function ProductDetailPageSkeleton() {
+  return <ProductsDetailPageSkeleton />;
+}
+
+function ProductDetailPage() {
+  const { id, organizationSlug, projectSlug } = Route.useParams();
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: product } = useSuspenseQuery(getProductOptions({ productId: id as string }));
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "Products",
+          url: `/${organizationSlug}/${projectSlug}/products`,
+        },
+        {
+          title: product.name,
+          url: `/${organizationSlug}/${projectSlug}/products/${id}`,
+        },
+      ]}
+      className="p-0 py-8"
+    >
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-4xl pb-10 pt-4">
+          <div className="flex flex-row items-center justify-between">
+            <h1 className="font-normal text-3xl tracking-right">{product.name}</h1>
+          </div>
+        </div>
+      </div>
+      <div className="mx-auto mt-8 max-w-4xl">
+        <ProductDetailBody
+          organizationSlug={organizationSlug as string}
+          productId={product.id}
+          projectId={project.id}
+          projectSlug={projectSlug as string}
+        />
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.index.tsx
new file mode 100644
index 000000000..a34923f4a
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.index.tsx
@@ -0,0 +1,130 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { PackageIcon } from "lucide-react";
+import { useEffect, useState } from "react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { CreateProductModalButton } from "@/features/studio/products/create-product-modal-button";
+import { ProductDetailPane } from "@/features/studio/products/product-detail-pane";
+import { ProductRecord } from "@/features/studio/products/product-record";
+import { ProductRecordConfigurationStateIndicator } from "@/features/studio/products/product-record-configuration-state-indicator";
+import { ProductsPageEmptyState } from "@/features/studio/products/products-page-empty-state";
+import { ProductsPageSkeleton } from "@/features/studio/products/products-page-skeleton";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listProductsOptions } from "@/features/studio/lib/tanstack-query/products";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/",
+)({
+  component: ProductsIndexPage,
+  errorComponent: ProductsIndexPageError,
+  pendingComponent: ProductsIndexPageSkeleton,
+});
+
+function ProductsIndexPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the products",
+      }}
+    />
+  );
+}
+
+function ProductsIndexPageSkeleton() {
+  return <ProductsPageSkeleton />;
+}
+
+function ProductsIndexPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: products } = useSuspenseQuery(listProductsOptions({ projectId: project.id }));
+
+  const [selectedProductId, setSelectedProductId] = useState<string | null>(null);
+
+  useEffect(() => {
+    // Clear the selection if the active product is removed (e.g. deleted via
+    // the right-pane actions), so the empty state takes over.
+    if (selectedProductId === null) {
+      return;
+    }
+    if (!products.some((product) => product.id === selectedProductId)) {
+      setSelectedProductId(null);
+    }
+  }, [products, selectedProductId]);
+
+  if (products.length === 0) {
+    return (
+      <Page>
+        <PageHeader>
+          <PageHeaderTitle>Products</PageHeaderTitle>
+        </PageHeader>
+        <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+          <ProductsPageEmptyState projectId={project.id} />
+        </div>
+      </Page>
+    );
+  }
+
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-row overflow-hidden">
+      <div className="flex w-[22rem] shrink-0 flex-col border-border/60 border-r">
+        <PageHeader rightActions={<CreateProductModalButton iconOnly projectId={project.id} />}>
+          <PageHeaderTitle>Products</PageHeaderTitle>
+        </PageHeader>
+        <div className="min-h-0 flex-1 divide-y divide-border/60 overflow-y-auto">
+          {products.map((product) => (
+            <ProductRecord
+              configurationStateIndicator={
+                <ProductRecordConfigurationStateIndicator
+                  productId={product.id}
+                  projectId={project.id}
+                />
+              }
+              isSelected={product.id === selectedProductId}
+              key={product.id}
+              onSelect={setSelectedProductId}
+              product={product}
+            />
+          ))}
+        </div>
+      </div>
+
+      <div className="flex min-w-0 flex-1 flex-col">
+        {selectedProductId ? (
+          <ProductDetailPane
+            onDeleted={() => setSelectedProductId(null)}
+            organizationSlug={organizationSlug as string}
+            productId={selectedProductId}
+            projectId={project.id}
+            projectSlug={projectSlug as string}
+          />
+        ) : (
+          <ProductDetailEmptyState />
+        )}
+      </div>
+    </Page>
+  );
+}
+
+function ProductDetailEmptyState() {
+  return (
+    <div className="flex flex-1 flex-col items-center justify-center px-6 text-center">
+      <PackageIcon aria-hidden className="size-10 text-muted-foreground/50" strokeWidth={1.25} />
+      <p className="mt-4 text-muted-foreground text-sm">Select a product to view its details</p>
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/route.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/route.tsx
new file mode 100644
index 000000000..e17f01703
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/route.tsx
@@ -0,0 +1,58 @@
+import { Outlet, createFileRoute, useLocation } from "@tanstack/react-router";
+import { SidebarInset, useSidebar } from "@voidhash/ui";
+import { useEffect } from "react";
+
+import { NavBar } from "@/features/studio/shell";
+import { ProjectSidebar } from "@/features/studio/shell/components/sidebar/project-sidebar";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug",
+)({
+  component: ProjectLayout,
+});
+
+function LayoutSidebar({
+  projectSidebar,
+  projectSettingsSidebar,
+}: {
+  projectSidebar: React.ReactNode;
+  projectSettingsSidebar: React.ReactNode;
+}) {
+  const pathname = useLocation({
+    select: (location) => location.pathname,
+  });
+  const isSettingsRoute = pathname.includes("/settings");
+
+  const { setOpen } = useSidebar();
+  useEffect(() => {
+    if (isSettingsRoute) {
+      setOpen(false);
+    } else if (!isSettingsRoute) {
+      setOpen(true);
+    }
+  }, [isSettingsRoute, setOpen]);
+
+  return (
+    <div className="flex flex-row">
+      {projectSidebar}
+      {isSettingsRoute && projectSettingsSidebar}
+    </div>
+  );
+}
+
+function ProjectLayout() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+
+  return (
+    <>
+      <NavBar organizationSlug={organizationSlug} projectSlug={projectSlug} />
+      <div className="flex flex-1 pt-[var(--header-height)] min-h-0">
+        <ProjectSidebar organizationSlug={organizationSlug} projectSlug={projectSlug} />
+
+        <SidebarInset className="transition-all duration-75 mt-0!">
+          <Outlet />
+        </SidebarInset>
+      </div>
+    </>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys.tsx
new file mode 100644
index 000000000..ebd99d8c0
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys.tsx
@@ -0,0 +1,73 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { ApiKeyRecord } from "@/features/studio/api-keys/api-key-record";
+import { ApiKeyRecordSkeleton } from "@/features/studio/api-keys/api-key-record-skeleton";
+import { CreateSecretKeyModalButton } from "@/features/studio/api-keys/create-secret-key-modal-button";
+import { SettingsCard, SettingsPage } from "@/features/studio/settings";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listApiKeysOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys",
+)({
+  component: ProjectApiKeysPage,
+  errorComponent: ProjectApiKeysPageError,
+  pendingComponent: ProjectApiKeysPageSkeleton,
+});
+
+function ProjectApiKeysPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occured loading the api keys",
+      }}
+    />
+  );
+}
+
+function ProjectApiKeysPageSkeleton() {
+  return (
+    <SettingsPage description="Manage your API keys." title="API Keys">
+      <SettingsCard className="grid gap-0 divide-y">
+        {Array.from({ length: 3 }).map((_, index) => (
+          // biome-ignore lint/suspicious/noArrayIndexKey: just a skeleton
+          <ApiKeyRecordSkeleton key={index} />
+        ))}
+      </SettingsCard>
+    </SettingsPage>
+  );
+}
+
+function ProjectApiKeysPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: apiKeys } = useSuspenseQuery(listApiKeysOptions({ projectId: project.id }));
+
+  return (
+    <SettingsPage
+      actions={<CreateSecretKeyModalButton projectId={project.id} />}
+      description="Manage your API keys."
+      title="API Keys"
+    >
+      <SettingsCard className="grid gap-0 divide-y">
+        {apiKeys.map((apiKey) => (
+          <ApiKeyRecord apiKey={apiKey} key={apiKey.id} />
+        ))}
+      </SettingsCard>
+    </SettingsPage>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/index.tsx
new file mode 100644
index 000000000..915f3ec25
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/index.tsx
@@ -0,0 +1,49 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { ProjectAvatarForm } from "@/features/studio/projects/settings/general/project-avatar";
+import { ProjectDelete } from "@/features/studio/projects/settings/general/project-delete";
+import { ProjectNameForm } from "@/features/studio/projects/settings/general/project-name";
+import { ProjectSettingsGeneralLayout } from "@/features/studio/projects/settings/general/project-settings-general-layout";
+import { ProjectSettingsGeneralPageSkeleton } from "@/features/studio/projects/settings/general/project-settings-general-page-skeleton";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/",
+)({
+  component: ProjectSettingsGeneralPage,
+  errorComponent: ProjectSettingsGeneralPageError,
+  pendingComponent: ProjectSettingsGeneralPageSkeleton,
+});
+
+function ProjectSettingsGeneralPageError() {
+  return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Project not found" }} />;
+}
+
+function ProjectSettingsGeneralPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  return (
+    <ProjectSettingsGeneralLayout>
+      <ProjectAvatarForm key={`${projectSlug}-avatar`} project={project} />
+      <ProjectNameForm
+        key={projectSlug as string}
+        projectId={project.id}
+        projectName={project.name}
+      />
+      <ProjectDelete projectId={project.id} />
+    </ProjectSettingsGeneralLayout>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.$providerConfigurationId.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.$providerConfigurationId.tsx
new file mode 100644
index 000000000..e6e563e2f
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.$providerConfigurationId.tsx
@@ -0,0 +1,85 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Card, Page, PageHeader, Skeleton } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { NotificationProviderDetailRouter } from "@/features/studio/projects/settings/notifications/notification-provider-detail-router";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { getPushNotificationConfigurationOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId",
+)({
+  component: NotificationProviderDetailPage,
+  errorComponent: NotificationProviderDetailPageError,
+  pendingComponent: NotificationProviderDetailPageSkeleton,
+});
+
+function NotificationProviderDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the notification provider configuration",
+      }}
+    />
+  );
+}
+
+function NotificationProviderDetailPageSkeleton() {
+  return (
+    <Page className="flex min-h-[calc(100svh-var(--header-height))] flex-col">
+      <PageHeader>
+        <Skeleton className="h-4 w-48" />
+      </PageHeader>
+      <div className="mx-auto flex w-full max-w-5xl flex-1 gap-8 px-6 py-8">
+        <Card className="min-w-0 flex-1 self-start p-6">
+          <div className="flex flex-col gap-6">
+            <Skeleton className="h-4 w-24" />
+            <Skeleton className="h-9 w-full" />
+            <Skeleton className="h-4 w-24" />
+            <Skeleton className="h-9 w-full" />
+          </div>
+        </Card>
+      </div>
+    </Page>
+  );
+}
+
+function NotificationProviderDetailPage() {
+  const { organizationSlug, projectSlug, providerConfigurationId } = Route.useParams();
+  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.notifications.key);
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!enabled) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Not found" }} />;
+  }
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: pushNotificationConfiguration } = useSuspenseQuery(
+    getPushNotificationConfigurationOptions({
+      id: providerConfigurationId as string,
+    }),
+  );
+
+  return (
+    <NotificationProviderDetailRouter
+      organizationSlug={organizationSlug}
+      project={project}
+      projectSlug={projectSlug}
+      pushNotificationConfiguration={pushNotificationConfiguration}
+    />
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.index.tsx
new file mode 100644
index 000000000..15cb6a66b
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.index.tsx
@@ -0,0 +1,152 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { Link, createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Badge, Skeleton } from "@voidhash/ui";
+import { ChevronRightIcon } from "lucide-react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { notificationProviders } from "@/features/studio/projects/settings/notifications/notification-providers";
+import { SetupNotificationProviderButton } from "@/features/studio/projects/settings/notifications/setup-notification-provider-button";
+import { SettingsCard, SettingsPage, SettingsSection } from "@/features/studio/settings";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { listPushNotificationConfigurationsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/",
+)({
+  component: NotificationsIndexPage,
+  errorComponent: NotificationsIndexPageError,
+  pendingComponent: NotificationsIndexPageSkeleton,
+});
+
+function NotificationsIndexPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the notification providers",
+      }}
+    />
+  );
+}
+
+function NotificationsIndexPageSkeleton() {
+  return (
+    <SettingsPage title="Notifications">
+      <SettingsSection title="Providers">
+        <SettingsCard>
+          {notificationProviders.map((notificationProvider) => (
+            <div
+              className="flex items-center gap-3 border-border/60 border-t px-5 py-3.5 first:border-t-0"
+              key={notificationProvider.id}
+            >
+              <Skeleton className="h-8 w-8 rounded-md" />
+              <Skeleton className="h-4 w-48" />
+            </div>
+          ))}
+        </SettingsCard>
+      </SettingsSection>
+    </SettingsPage>
+  );
+}
+
+function NotificationsIndexPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.notifications.key);
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!enabled) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Not found" }} />;
+  }
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: pushNotificationConfigurations } = useSuspenseQuery(
+    listPushNotificationConfigurationsOptions({
+      projectId: project.id,
+    }),
+  );
+
+  const providersWithConfigurations = notificationProviders.map((notificationProvider) => {
+    const pushNotificationConfiguration = pushNotificationConfigurations?.find(
+      (p) => p.providerId === notificationProvider.id,
+    );
+    return {
+      ...pushNotificationConfiguration,
+      provider: notificationProvider,
+    };
+  });
+
+  return (
+    <SettingsPage
+      description="Configure push-notification delivery providers."
+      title="Notifications"
+    >
+      <SettingsSection title="Providers">
+        <SettingsCard>
+          {providersWithConfigurations.map((pushNotificationConfiguration) => (
+            <div
+              className="group relative isolate border-border/60 border-t px-5 py-3.5 transition-colors first:border-t-0 hover:bg-muted/40"
+              key={pushNotificationConfiguration.id ?? pushNotificationConfiguration.provider.id}
+            >
+              {pushNotificationConfiguration.id ? (
+                <Link
+                  className="absolute inset-0 h-full w-full"
+                  params={{
+                    organizationSlug,
+                    providerConfigurationId: pushNotificationConfiguration.id,
+                    projectSlug,
+                  }}
+                  to="/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId"
+                />
+              ) : null}
+
+              <div className="flex items-center justify-between gap-3">
+                <div className="flex min-w-0 flex-1 flex-col gap-0.5">
+                  <p className="truncate font-medium text-foreground text-sm">
+                    {pushNotificationConfiguration.provider.title}
+                  </p>
+                  <p className="truncate text-[13px] text-muted-foreground">
+                    {pushNotificationConfiguration.provider.description}
+                  </p>
+                </div>
+
+                {pushNotificationConfiguration.id ? (
+                  <div className="flex shrink-0 items-center gap-2">
+                    {pushNotificationConfiguration.enabled ? (
+                      <Badge className="text-[11px]">Enabled</Badge>
+                    ) : (
+                      <Badge className="text-[11px]" variant="outline">
+                        Disabled
+                      </Badge>
+                    )}
+                    <ChevronRightIcon className="h-4 w-4 text-muted-foreground" />
+                  </div>
+                ) : (
+                  <div className="relative z-10 flex shrink-0 items-center gap-2">
+                    <SetupNotificationProviderButton
+                      organizationSlug={organizationSlug}
+                      projectId={project.id}
+                      projectSlug={projectSlug}
+                      providerId={pushNotificationConfiguration.provider.id}
+                    />
+                  </div>
+                )}
+              </div>
+            </div>
+          ))}
+        </SettingsCard>
+      </SettingsSection>
+    </SettingsPage>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.$paymentProviderConfigurationId.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.$paymentProviderConfigurationId.tsx
new file mode 100644
index 000000000..bd81829c6
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.$paymentProviderConfigurationId.tsx
@@ -0,0 +1,83 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Card, Page, PageHeader, Skeleton } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { PaymentProviderDetailRouter } from "@/features/studio/projects/settings/payment-providers/payment-provider-detail-router";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { getPaymentProviderConfigurationOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId",
+)({
+  component: PaymentProviderDetailPage,
+  errorComponent: PaymentProviderDetailPageError,
+  pendingComponent: PaymentProviderDetailPageSkeleton,
+});
+
+function PaymentProviderDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the payment provider configuration",
+      }}
+    />
+  );
+}
+
+function PaymentProviderDetailPageSkeleton() {
+  return (
+    <Page className="flex min-h-[calc(100svh-var(--header-height))] flex-col">
+      <PageHeader>
+        <Skeleton className="h-4 w-48" />
+      </PageHeader>
+      <div className="mx-auto flex w-full max-w-5xl flex-1 gap-8 px-6 py-8">
+        <div className="flex w-56 shrink-0 flex-col gap-1.5">
+          {Array.from({ length: 4 }).map((_, index) => (
+            <Skeleton className="h-9 w-full" key={`payment-provider-tab-skeleton-${index}`} />
+          ))}
+        </div>
+        <Card className="min-w-0 flex-1 self-start p-6">
+          <div className="flex flex-col gap-6">
+            <Skeleton className="h-4 w-24" />
+            <Skeleton className="h-9 w-full" />
+            <Skeleton className="h-4 w-24" />
+            <Skeleton className="h-9 w-full" />
+          </div>
+        </Card>
+      </div>
+    </Page>
+  );
+}
+
+function PaymentProviderDetailPage() {
+  const { organizationSlug, projectSlug, paymentProviderConfigurationId } = Route.useParams();
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: paymentProviderConfiguration } = useSuspenseQuery(
+    getPaymentProviderConfigurationOptions({
+      id: paymentProviderConfigurationId as string,
+    }),
+  );
+
+  return (
+    <PaymentProviderDetailRouter
+      organizationSlug={organizationSlug}
+      paymentProviderConfiguration={paymentProviderConfiguration}
+      project={project}
+      projectSlug={projectSlug}
+    />
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.index.tsx
new file mode 100644
index 000000000..acf5feada
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.index.tsx
@@ -0,0 +1,204 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { Link, createFileRoute } from "@tanstack/react-router";
+import { Badge } from "@voidhash/ui";
+import { ChevronRightIcon } from "lucide-react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { PaymentProviderLogo } from "@/features/studio/projects/settings/payment-providers/payment-provider-logo";
+import { PaymentProvidersPageSkeleton } from "@/features/studio/projects/settings/payment-providers/payment-providers-page-skeleton";
+import { SetupPaymentProviderButton } from "@/features/studio/projects/settings/payment-providers/setup-payment-provider-button";
+import { SettingsCard, SettingsPage, SettingsSection } from "@/features/studio/settings";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { paymentProviders } from "@/features/studio/lib/payment-providers/payment-providers";
+import { listPaymentProviderConfigurationsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/",
+)({
+  component: PaymentProvidersIndexPage,
+  errorComponent: PaymentProvidersIndexPageError,
+  pendingComponent: PaymentProvidersIndexPageSkeleton,
+});
+
+function PaymentProvidersIndexPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the payment providers",
+      }}
+    />
+  );
+}
+
+function PaymentProvidersIndexPageSkeleton() {
+  return <PaymentProvidersPageSkeleton />;
+}
+
+function PaymentProvidersIndexPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: paymentProviderConfigurations } = useSuspenseQuery(
+    listPaymentProviderConfigurationsOptions({
+      projectId: project.id,
+    }),
+  );
+
+  const storeProvidersWithConfigurations = paymentProviders
+    .filter((p) => p.type === "native")
+    .map((paymentProvider) => {
+      const paymentProvidersConfiguration = paymentProviderConfigurations?.find(
+        (p) => p.providerId === paymentProvider.id,
+      );
+      return {
+        ...paymentProvidersConfiguration,
+        provider: paymentProvider,
+      };
+    });
+
+  const paymentProvidersWithConfigurations = paymentProviders
+    .filter((p) => p.type === "web-checkout")
+    .map((paymentProvider) => {
+      const paymentProvidersConfiguration = paymentProviderConfigurations?.find(
+        (p) => p.providerId === paymentProvider.id,
+      );
+      return {
+        ...paymentProvidersConfiguration,
+        provider: paymentProvider,
+      };
+    });
+
+  return (
+    <SettingsPage title="Payment Providers">
+      <SettingsSection title="Stores">
+        <SettingsCard>
+          {storeProvidersWithConfigurations?.map((paymentProviderConfiguration) => (
+            <div
+              className="group relative isolate border-border/60 border-t px-5 py-3.5 transition-colors first:border-t-0 hover:bg-muted/40"
+              key={paymentProviderConfiguration.id ?? paymentProviderConfiguration.provider.id}
+            >
+              {paymentProviderConfiguration.id ? (
+                <Link
+                  className="absolute inset-0 h-full w-full"
+                  params={{
+                    organizationSlug,
+                    paymentProviderConfigurationId: paymentProviderConfiguration.id,
+                    projectSlug,
+                  }}
+                  to="/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId"
+                />
+              ) : null}
+
+              <div className="flex items-center justify-between gap-3">
+                <div className="flex min-w-0 flex-1 items-center gap-3">
+                  <div className="flex h-8 w-8 shrink-0 items-center justify-center rounded-md bg-muted/60 ring-1 ring-border/60">
+                    <PaymentProviderLogo
+                      className="h-5 w-5"
+                      providerId={paymentProviderConfiguration.provider.id}
+                    />
+                  </div>
+                  <p className="truncate font-medium text-foreground text-sm">
+                    {paymentProviderConfiguration.provider.title}
+                  </p>
+                </div>
+
+                {paymentProviderConfiguration.id ? (
+                  <div className="flex shrink-0 items-center gap-2">
+                    {paymentProviderConfiguration.enabled ? (
+                      <Badge className="text-[11px]">Enabled</Badge>
+                    ) : (
+                      <Badge className="text-[11px]" variant="outline">
+                        Disabled
+                      </Badge>
+                    )}
+                    <ChevronRightIcon className="h-4 w-4 text-muted-foreground" />
+                  </div>
+                ) : (
+                  <div className="relative z-10 flex shrink-0 items-center gap-2">
+                    <SetupPaymentProviderButton
+                      organizationSlug={organizationSlug}
+                      projectId={project.id}
+                      projectSlug={projectSlug}
+                      providerId={paymentProviderConfiguration.provider.id}
+                    />
+                  </div>
+                )}
+              </div>
+            </div>
+          ))}
+        </SettingsCard>
+      </SettingsSection>
+
+      <SettingsSection title="Payment providers">
+        <SettingsCard>
+          {paymentProvidersWithConfigurations?.map((paymentProviderConfiguration) => (
+            <div
+              className="group relative isolate border-border/60 border-t px-5 py-3.5 transition-colors first:border-t-0 hover:bg-muted/40"
+              key={paymentProviderConfiguration.id ?? paymentProviderConfiguration.provider.id}
+            >
+              {paymentProviderConfiguration.id ? (
+                <Link
+                  className="absolute inset-0 h-full w-full"
+                  params={{
+                    organizationSlug,
+                    paymentProviderConfigurationId: paymentProviderConfiguration.id,
+                    projectSlug,
+                  }}
+                  to="/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId"
+                />
+              ) : null}
+
+              <div className="flex items-center justify-between gap-3">
+                <div className="flex min-w-0 flex-1 items-center gap-3">
+                  <div className="flex h-8 w-8 shrink-0 items-center justify-center rounded-md bg-muted/60 ring-1 ring-border/60">
+                    <PaymentProviderLogo
+                      className="h-5 w-5"
+                      providerId={paymentProviderConfiguration.provider.id}
+                    />
+                  </div>
+                  <p className="truncate font-medium text-foreground text-sm">
+                    {paymentProviderConfiguration.provider.title}
+                  </p>
+                </div>
+
+                {paymentProviderConfiguration.id ? (
+                  <div className="flex shrink-0 items-center gap-2">
+                    {paymentProviderConfiguration.enabled ? (
+                      <Badge className="text-[11px]">Enabled</Badge>
+                    ) : (
+                      <Badge className="text-[11px]" variant="outline">
+                        Disabled
+                      </Badge>
+                    )}
+                    <ChevronRightIcon className="h-4 w-4 text-muted-foreground" />
+                  </div>
+                ) : (
+                  <div className="relative z-10 flex shrink-0 items-center gap-2">
+                    <SetupPaymentProviderButton
+                      organizationSlug={organizationSlug}
+                      projectId={project.id}
+                      projectSlug={projectSlug}
+                      providerId={paymentProviderConfiguration.provider.id}
+                    />
+                  </div>
+                )}
+              </div>
+            </div>
+          ))}
+        </SettingsCard>
+      </SettingsSection>
+    </SettingsPage>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
new file mode 100644
index 000000000..d748c43dd
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
@@ -0,0 +1,96 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { CreatePaywallLocationModalButton } from "@/features/studio/paywall-locations/create-paywall-location-modal-button";
+import { PaywallLocationRow } from "@/features/studio/paywall-locations/paywall-location-row";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import {
+  listPaywallLocationsOptions,
+  listPaywallsOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations",
+)({
+  component: ProjectPaywallLocationsPage,
+  errorComponent: ProjectPaywallLocationsPageError,
+  pendingComponent: ProjectPaywallLocationsPageSkeleton,
+});
+
+function ProjectPaywallLocationsPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading paywall locations",
+      }}
+    />
+  );
+}
+
+function ProjectPaywallLocationsPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Paywall Locations</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        <Card className="p-0">
+          <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
+            Loading locations...
+          </div>
+        </Card>
+      </div>
+    </Page>
+  );
+}
+
+function ProjectPaywallLocationsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: locations } = useSuspenseQuery(
+    listPaywallLocationsOptions({ projectId: project.id }),
+  );
+  const { data: paywalls } = useSuspenseQuery(listPaywallsOptions({ projectId: project.id }));
+
+  return (
+    <Page>
+      <PageHeader rightActions={<CreatePaywallLocationModalButton projectId={project.id} />}>
+        <PageHeaderTitle>Paywall Locations</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        {locations.length === 0 ? (
+          <Card className="p-0">
+            <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
+              No paywall locations yet. Create one to start assigning paywalls.
+            </div>
+          </Card>
+        ) : (
+          <Card className="grid gap-0 divide-y p-0">
+            {locations.map((location) => (
+              <PaywallLocationRow
+                key={location.id}
+                location={location}
+                paywalls={paywalls}
+                projectId={project.id}
+              />
+            ))}
+          </Card>
+        )}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks.tsx
new file mode 100644
index 000000000..e7431a427
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks.tsx
@@ -0,0 +1,86 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { CreatePerkModalButton } from "@/features/studio/perks/create-perk-modal-button";
+import { PerkRecord } from "@/features/studio/perks/perk-record";
+import { PerkRecordSkeleton } from "@/features/studio/perks/perk-record-skeleton";
+import { PerksPageEmptyState } from "@/features/studio/perks/perks-page-empty-state";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listPerksOptions } from "@/features/studio/lib/tanstack-query/perks";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks",
+)({
+  component: PerksPage,
+  errorComponent: PerksPageError,
+  pendingComponent: PerksPageSkeleton,
+});
+
+function PerksPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the perks",
+      }}
+    />
+  );
+}
+
+function PerksPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Perks</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        <Card className="grid gap-0 divide-y p-0">
+          {Array.from({ length: 3 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: just a skeleton
+            <PerkRecordSkeleton key={index} />
+          ))}
+        </Card>
+      </div>
+    </Page>
+  );
+}
+
+function PerksPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: perks } = useSuspenseQuery(listPerksOptions({ projectId: project.id }));
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={perks.length > 0 ? <CreatePerkModalButton projectId={project.id} /> : null}
+      >
+        <PageHeaderTitle>Perks</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
+        {perks.length === 0 ? (
+          <PerksPageEmptyState projectId={project.id} />
+        ) : (
+          <Card className="grid gap-0 divide-y p-0">
+            {perks.map((perk) => (
+              <PerkRecord key={perk.id} perk={perk} />
+            ))}
+          </Card>
+        )}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.$deliveryId.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.$deliveryId.tsx
new file mode 100644
index 000000000..442c09451
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.$deliveryId.tsx
@@ -0,0 +1,189 @@
+import { useMutation, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { Button, Card, CardContent, CardHeader, CardTitle, Skeleton } from "@voidhash/ui";
+import { RefreshCwIcon } from "lucide-react";
+import { toast } from "sonner";
+
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { WebhookDeliveryAttemptTimeline } from "@/features/studio/webhooks/webhook-delivery-attempt-timeline";
+import { WebhookDeliverySidebar } from "@/features/studio/webhooks/webhook-delivery-sidebar";
+import { getEventLabel } from "@/features/studio/webhooks/webhook-event-types";
+import { WebhookPayloadViewer } from "@/features/studio/webhooks/webhook-payload-viewer";
+import { WebhookStatusBadge } from "@/features/studio/webhooks/webhook-status-badge";
+import {
+  getWebhookDeliveryOptions,
+  getWebhookEndpointOptions,
+  queryKeys,
+  retryWebhookDeliveryOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId",
+)({
+  component: WebhookDeliveryDetailPage,
+  errorComponent: WebhookDeliveryDetailPageError,
+  pendingComponent: WebhookDeliveryDetailPageSkeleton,
+});
+
+function WebhookDeliveryDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the delivery",
+      }}
+    />
+  );
+}
+
+function WebhookDeliveryDetailPageSkeleton() {
+  return (
+    <Page className="p-0 py-8 pt-3">
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-6xl pb-10 pt-4">
+          <div className="flex flex-row items-center justify-between">
+            <div className="flex items-center gap-3">
+              <Skeleton className="h-9 w-48" />
+              <Skeleton className="h-6 w-20 rounded-full" />
+            </div>
+            <Skeleton className="h-9 w-24" />
+          </div>
+          <Skeleton className="mt-3 h-5 w-48" />
+        </div>
+      </div>
+      <div className="mx-auto mt-3 max-w-6xl">
+        <div className="grid grid-cols-12 gap-8">
+          <div className="col-span-9 space-y-8">
+            <Card className="mt-8">
+              <CardHeader>
+                <Skeleton className="h-6 w-24" />
+              </CardHeader>
+              <CardContent>
+                <Skeleton className="h-48 w-full" />
+              </CardContent>
+            </Card>
+            <Card>
+              <CardHeader>
+                <Skeleton className="h-6 w-40" />
+              </CardHeader>
+              <CardContent>
+                <div className="space-y-4">
+                  {Array.from({ length: 3 }).map((_, i) => (
+                    // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+                    <Skeleton key={i} className="h-16 w-full" />
+                  ))}
+                </div>
+              </CardContent>
+            </Card>
+          </div>
+          <div className="col-span-3 mt-8">
+            <Skeleton className="h-6 w-20" />
+            <div className="mt-4 space-y-4">
+              <Skeleton className="h-12 w-full" />
+              <Skeleton className="h-12 w-full" />
+              <Skeleton className="h-12 w-full" />
+            </div>
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
+
+function WebhookDeliveryDetailPage() {
+  const { deliveryId, endpointId, organizationSlug, projectSlug } = Route.useParams();
+  const queryClient = useQueryClient();
+
+  const { data: delivery } = useSuspenseQuery(getWebhookDeliveryOptions({ deliveryId }));
+
+  const { data: endpoint } = useSuspenseQuery(getWebhookEndpointOptions({ endpointId }));
+
+  const { mutate: retryDelivery, status: retryStatus } = useMutation({
+    ...retryWebhookDeliveryOptions(),
+    onError: () => {
+      toast.error("Failed to retry delivery");
+    },
+    onSuccess: () => {
+      toast.success("Delivery queued for retry");
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.getDelivery(deliveryId),
+      });
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.webhook.deliveries({
+          projectId: endpoint.projectId,
+          endpointId,
+        }),
+      });
+    },
+  });
+
+  const canRetry = delivery.status === "failed" || delivery.status === "exhausted";
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "Webhooks",
+          url: `/${organizationSlug}/${projectSlug}/settings/webhooks`,
+        },
+        {
+          title: endpoint.name,
+          url: `/${organizationSlug}/${projectSlug}/settings/webhooks/${endpointId}`,
+        },
+        {
+          title: getEventLabel(delivery.eventType),
+          url: `/${organizationSlug}/${projectSlug}/settings/webhooks/${endpointId}/${deliveryId}`,
+        },
+      ]}
+      className="p-0 py-8 pt-3"
+    >
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-6xl pb-10 pt-4">
+          <div className="flex flex-row items-center justify-between">
+            <div className="flex items-center gap-3">
+              <h1 className="font-normal text-3xl">{getEventLabel(delivery.eventType)}</h1>
+              <WebhookStatusBadge status={delivery.status} />
+            </div>
+            {canRetry && (
+              <Button
+                disabled={retryStatus === "pending"}
+                onClick={() => retryDelivery({ deliveryId })}
+              >
+                <RefreshCwIcon className="mr-2 h-4 w-4" />
+                {retryStatus === "pending" ? "Retrying..." : "Retry"}
+              </Button>
+            )}
+          </div>
+          <p className="mt-3 text-muted-foreground">Delivered to {endpoint.name}</p>
+        </div>
+      </div>
+      <div className="mx-auto mt-3 max-w-6xl">
+        <div className="grid grid-cols-12 gap-8">
+          <div className="col-span-9 space-y-8">
+            <Card className="mt-8">
+              <CardHeader>
+                <CardTitle>Payload</CardTitle>
+              </CardHeader>
+              <CardContent>
+                <WebhookPayloadViewer payload={delivery.payload} />
+              </CardContent>
+            </Card>
+
+            <Card>
+              <CardHeader>
+                <CardTitle>Delivery Attempts</CardTitle>
+              </CardHeader>
+              <CardContent>
+                <WebhookDeliveryAttemptTimeline attempts={[...delivery.attempts]} />
+              </CardContent>
+            </Card>
+          </div>
+          <div className="col-span-3 mt-8">
+            <WebhookDeliverySidebar delivery={delivery} />
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.index.tsx
new file mode 100644
index 000000000..6b01ca784
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.index.tsx
@@ -0,0 +1,174 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute, useNavigate } from "@tanstack/react-router";
+import { Card, CardContent, CardHeader, CardTitle, Skeleton } from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { WebhookDeliveryRecord } from "@/features/studio/webhooks/webhook-delivery-record";
+import { WebhookDeliveryRecordSkeleton } from "@/features/studio/webhooks/webhook-delivery-record-skeleton";
+import { WebhookEndpointActionsDropdown } from "@/features/studio/webhooks/webhook-endpoint-actions-dropdown";
+import { WebhookEndpointDetailSidebar } from "@/features/studio/webhooks/webhook-endpoint-detail-sidebar";
+import { WebhookStatusBadge } from "@/features/studio/webhooks/webhook-status-badge";
+import {
+  getWebhookEndpointOptions,
+  listWebhookDeliveriesOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/",
+)({
+  component: WebhookEndpointDetailPage,
+  errorComponent: WebhookEndpointDetailPageError,
+  pendingComponent: WebhookEndpointDetailPageSkeleton,
+});
+
+function WebhookEndpointDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the webhook",
+      }}
+    />
+  );
+}
+
+function WebhookEndpointDetailPageSkeleton() {
+  return (
+    <Page className="p-0 py-8 pt-3">
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-6xl pb-10 pt-4">
+          <div className="flex flex-row items-center justify-between">
+            <div className="flex items-center gap-3">
+              <Skeleton className="h-9 w-48" />
+              <Skeleton className="h-6 w-16 rounded-full" />
+            </div>
+            <Skeleton className="h-9 w-9" />
+          </div>
+          <Skeleton className="mt-3 h-5 w-64" />
+        </div>
+      </div>
+      <div className="mx-auto mt-3 max-w-6xl">
+        <div className="grid grid-cols-12 gap-8">
+          <div className="col-span-9">
+            <Card className="mt-8 gap-0 overflow-hidden pb-0">
+              <CardHeader className="pb-4">
+                <Skeleton className="h-6 w-40" />
+              </CardHeader>
+              <CardContent className="divide-y divide-border border-border border-t px-0">
+                {Array.from({ length: 3 }).map((_, i) => (
+                  // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+                  <WebhookDeliveryRecordSkeleton key={i} />
+                ))}
+              </CardContent>
+            </Card>
+          </div>
+          <div className="col-span-3 mt-8">
+            <Skeleton className="h-6 w-20" />
+            <div className="mt-4 space-y-4">
+              <Skeleton className="h-16 w-full" />
+              <Skeleton className="h-24 w-full" />
+              <Skeleton className="h-12 w-full" />
+            </div>
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
+
+function WebhookEndpointDetailPage() {
+  const { endpointId, organizationSlug, projectSlug } = Route.useParams();
+  const navigate = useNavigate();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: endpoint } = useSuspenseQuery(getWebhookEndpointOptions({ endpointId }));
+
+  const { data: deliveries } = useSuspenseQuery(
+    listWebhookDeliveriesOptions({ projectId: project.id, endpointId }),
+  );
+
+  const handleDeleted = () => {
+    navigate({
+      params: { organizationSlug, projectSlug },
+      to: "/studio/$organizationSlug/$projectSlug/settings/webhooks",
+    });
+  };
+
+  return (
+    <Page
+      breadcrumbs={[
+        {
+          title: "Webhooks",
+          url: `/${organizationSlug}/${projectSlug}/settings/webhooks`,
+        },
+        {
+          title: endpoint.name,
+          url: `/${organizationSlug}/${projectSlug}/settings/webhooks/${endpointId}`,
+        },
+      ]}
+      className="p-0 py-8 pt-3"
+    >
+      <div className="border-border border-b">
+        <div className="mx-auto max-w-6xl pb-10 pt-4">
+          <div className="flex flex-row items-center justify-between">
+            <div className="flex items-center gap-3">
+              <h1 className="font-normal text-3xl">{endpoint.name}</h1>
+              <WebhookStatusBadge status={endpoint.status} />
+            </div>
+            <WebhookEndpointActionsDropdown
+              onDeleted={handleDeleted}
+              projectId={project.id}
+              webhook={endpoint}
+            />
+          </div>
+          <p className="mt-3 text-muted-foreground">{endpoint.url}</p>
+        </div>
+      </div>
+      <div className="mx-auto mt-3 max-w-6xl">
+        <div className="grid grid-cols-12 gap-8">
+          <div className="col-span-9">
+            <Card className="mt-8 gap-0 overflow-hidden pb-0">
+              <CardHeader className="pb-4">
+                <CardTitle className="flex items-center gap-4">Recent Deliveries</CardTitle>
+              </CardHeader>
+              <CardContent className="divide-y divide-border border-border border-t px-0">
+                {deliveries.length === 0 ? (
+                  <div className="flex h-full flex-col items-center justify-center py-6">
+                    <div className="text-muted-foreground">
+                      No deliveries yet. Send a test webhook to see delivery history.
+                    </div>
+                  </div>
+                ) : (
+                  deliveries.map((delivery) => (
+                    <WebhookDeliveryRecord
+                      delivery={delivery}
+                      endpointId={endpointId}
+                      key={delivery.id}
+                      organizationSlug={organizationSlug as string}
+                      projectSlug={projectSlug as string}
+                    />
+                  ))
+                )}
+              </CardContent>
+            </Card>
+          </div>
+          <div className="col-span-3 mt-8">
+            <WebhookEndpointDetailSidebar endpoint={endpoint} />
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.index.tsx
new file mode 100644
index 000000000..3ad9fed1a
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.index.tsx
@@ -0,0 +1,86 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { SettingsCard, SettingsPage } from "@/features/studio/settings";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { CreateWebhookModalButton } from "@/features/studio/webhooks/create-webhook-modal-button";
+import { WebhookEndpointRecord } from "@/features/studio/webhooks/webhook-endpoint-record";
+import { WebhookEndpointRecordSkeleton } from "@/features/studio/webhooks/webhook-endpoint-record-skeleton";
+import { WebhooksPageEmptyState } from "@/features/studio/webhooks/webhooks-page-empty-state";
+import { listWebhookEndpointsOptions } from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/",
+)({
+  component: ProjectWebhooksPage,
+  errorComponent: ProjectWebhooksPageError,
+  pendingComponent: ProjectWebhooksPageSkeleton,
+});
+
+function ProjectWebhooksPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the webhooks",
+      }}
+    />
+  );
+}
+
+function ProjectWebhooksPageSkeleton() {
+  return (
+    <SettingsPage description="Manage your webhook endpoints." title="Webhooks">
+      <SettingsCard className="grid gap-0 divide-y">
+        {Array.from({ length: 3 }).map((_, index) => (
+          // biome-ignore lint/suspicious/noArrayIndexKey: just a skeleton
+          <WebhookEndpointRecordSkeleton key={index} />
+        ))}
+      </SettingsCard>
+    </SettingsPage>
+  );
+}
+
+function ProjectWebhooksPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: webhooks } = useSuspenseQuery(
+    listWebhookEndpointsOptions({ projectId: project.id }),
+  );
+
+  return (
+    <SettingsPage
+      actions={<CreateWebhookModalButton projectId={project.id} />}
+      description="Manage your webhook endpoints."
+      title="Webhooks"
+    >
+      {webhooks.length === 0 ? (
+        <WebhooksPageEmptyState projectId={project.id} />
+      ) : (
+        <SettingsCard className="grid gap-0 divide-y">
+          {webhooks.map((webhook) => (
+            <WebhookEndpointRecord
+              key={webhook.id}
+              organizationSlug={organizationSlug}
+              projectId={project.id}
+              projectSlug={projectSlug}
+              webhook={webhook}
+            />
+          ))}
+        </SettingsCard>
+      )}
+    </SettingsPage>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/route.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/route.tsx
new file mode 100644
index 000000000..14949eaa7
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/route.tsx
@@ -0,0 +1,45 @@
+import { createFileRoute, Outlet } from "@tanstack/react-router";
+import { Logo, SidebarProvider, useIsMobile } from "@voidhash/ui";
+
+import { redirectToSignOut } from "@/features/auth/lib/workos";
+
+export const Route = createFileRoute("/studio/_authenticated/_dashboard")({
+  component: RouteComponent,
+});
+
+function RouteComponent() {
+  const isMobile = useIsMobile();
+
+  const signOut = () => {
+    redirectToSignOut("/");
+  };
+
+  return (
+    <div className="flex flex-col [--header-height:calc(theme(spacing.12))] has-[div#nav-enviromental-bar]:[--header-height:calc(theme(spacing.24))]">
+      <SidebarProvider className="flex flex-col">
+        <Outlet />
+        {isMobile && (
+          <div className="fixed inset-0 right-0 bottom-0 left-0 z-50 flex flex-col items-center justify-center bg-background px-6">
+            <Logo className="w-22" />
+            <div className="mt-3 text-balance text-center font-semibold text-xl">
+              Voidhash is currently not available on mobile,
+            </div>
+            <div className="mt-3 text-balance text-center text-muted-foreground text-sm">
+              Please use a desktop browser to access Voidhash. We are working hard to bring you the
+              best experience on mobile.
+            </div>
+            <div className="mt-6 text-center text-muted-foreground text-sm">
+              <button
+                className="cursor-pointer text-foreground underline underline-offset-4"
+                onClick={signOut}
+                type="button"
+              >
+                Logout
+              </button>
+            </div>
+          </div>
+        )}
+      </SidebarProvider>
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_designer/$organizationSlug.$projectSlug.design.$id.tsx b/apps/www/src/routes/studio/_authenticated/_designer/$organizationSlug.$projectSlug.design.$id.tsx
new file mode 100644
index 000000000..a997adb65
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_designer/$organizationSlug.$projectSlug.design.$id.tsx
@@ -0,0 +1,38 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { lazy, Suspense, type ComponentType } from "react";
+import { Spinner } from "@voidhash/ui";
+
+const DesignerDetailPage = import.meta.env.SSR
+  ? null
+  : lazy(() =>
+      import("@/features/studio/paywalls/designer/paywall-designer").then((module) => ({
+        default: module.DesignerDetailPage,
+      })),
+    );
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_designer/$organizationSlug/$projectSlug/design/$id",
+)({
+  component: DesignerDetailPageComponent,
+});
+
+function DesignerDetailPageComponent() {
+  const { id: paywallId } = Route.useParams();
+  const Page = DesignerDetailPage as ComponentType<{ paywallId: string }> | null;
+
+  if (!Page) {
+    return null;
+  }
+
+  return (
+    <Suspense
+      fallback={
+        <div className="flex h-screen w-screen items-center justify-center">
+          <Spinner />
+        </div>
+      }
+    >
+      <Page paywallId={paywallId} />
+    </Suspense>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/create-organization/index.tsx b/apps/www/src/routes/studio/_authenticated/create-organization/index.tsx
new file mode 100644
index 000000000..1fda2f4ee
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/create-organization/index.tsx
@@ -0,0 +1,145 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { Link, createFileRoute, useNavigate } from "@tanstack/react-router";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+  Form,
+  FormControl,
+  FormField,
+  FormItem,
+  FormLabel,
+  FormMessage,
+  Input,
+  Logo,
+} from "@voidhash/ui";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { z } from "zod/v3";
+
+import { redirectToSignOut } from "@/features/auth/lib/workos";
+import {
+  addCreatedOrganizationToCurrentUserCache,
+  createOrganizationOptions,
+} from "@/features/studio/lib/tanstack-query/organizations";
+
+export const Route = createFileRoute("/studio/_authenticated/create-organization/")({
+  component: CreateOrganizationPage,
+});
+
+const createOrganizationFormSchema = z.object({
+  name: z
+    .string()
+    .min(3, "Organization name must be at least 3 characters")
+    .max(32, "Organization name must be less than 32 characters"),
+});
+
+type CreateOrganizationForm = z.infer<typeof createOrganizationFormSchema>;
+
+function CreateOrganizationPage() {
+  const navigate = useNavigate();
+  const form = useForm<CreateOrganizationForm>({
+    defaultValues: {
+      name: "",
+    },
+    resolver: zodResolver(createOrganizationFormSchema),
+  });
+
+  const queryClient = useQueryClient();
+  const { mutate: createOrganization, status: createOrganizationStatus } = useMutation({
+    ...createOrganizationOptions(),
+    onSuccess: (data) => {
+      toast.success("Organization created successfully");
+      addCreatedOrganizationToCurrentUserCache(queryClient, data);
+      navigate({
+        params: {
+          organizationSlug: data.slug,
+        },
+        to: "/studio/$organizationSlug",
+      });
+    },
+    onError: () => {
+      toast.error("Failed to create organization");
+    },
+  });
+
+  const onSubmit = (data: CreateOrganizationForm) => {
+    createOrganization({ name: data.name });
+  };
+
+  const signOut = () => {
+    redirectToSignOut("/");
+  };
+
+  return (
+    <div className="flex min-h-svh w-full items-center justify-center p-6 md:p-10">
+      <div className="w-full max-w-sm">
+        <div className="flex flex-col gap-6">
+          <div className="flex justify-center">
+            <Link to="/">
+              <Logo />
+            </Link>
+          </div>
+          <Card className="mt-4 text-center rounded-2xl">
+            <CardContent>
+              <div className="text-center pb-6 pt-4">
+                <h1 className="text-2xl font-medium tracking-tight">Welcome to Voidhash</h1>
+                <p className="mt-2 text-muted-foreground">
+                  Let's start by creating your organization.
+                </p>
+              </div>
+              <Form {...form}>
+                <form className="space-y-6" onSubmit={form.handleSubmit(onSubmit)}>
+                  <FormField
+                    control={form.control}
+                    name="name"
+                    render={({ field }) => (
+                      <FormItem>
+                        <FormLabel>Organization Name</FormLabel>
+                        <FormControl>
+                          <Input placeholder="Acme Inc." {...field} />
+                        </FormControl>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+                  <Button
+                    className="w-full"
+                    disabled={createOrganizationStatus === "pending"}
+                    type="submit"
+                  >
+                    {createOrganizationStatus === "pending"
+                      ? "Creating Organization..."
+                      : "Create Organization"}
+                  </Button>
+                </form>
+              </Form>
+              <div className="mt-6 text-muted-foreground text-sm">
+                <p>
+                  Already have an organization? Ask your organization administrator to invite you
+                  using your email address.
+                </p>
+              </div>
+            </CardContent>
+          </Card>
+          <div className="text-center text-muted-foreground text-sm">
+            Signed in to a wrong account?{" "}
+            <button
+              className="cursor-pointer text-foreground underline underline-offset-4"
+              onClick={signOut}
+              type="button"
+            >
+              Logout
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/index.tsx b/apps/www/src/routes/studio/_authenticated/index.tsx
new file mode 100644
index 000000000..6789360aa
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/index.tsx
@@ -0,0 +1,38 @@
+import { createFileRoute } from "@tanstack/react-router";
+import { Spinner } from "@voidhash/ui";
+import { useEffect } from "react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+export const Route = createFileRoute("/studio/_authenticated/")({
+  ssr: false,
+  component: RouteComponent,
+});
+
+function RouteComponent() {
+  const { user } = useAuth();
+  const navigate = Route.useNavigate();
+
+  useEffect(() => {
+    const organizationToGoTo = user.organizations[0];
+
+    if (!organizationToGoTo) {
+      void navigate({
+        replace: true,
+        to: "/studio/create-organization",
+      });
+      return;
+    }
+
+    void navigate({
+      params: { organizationSlug: organizationToGoTo.slug },
+      replace: true,
+      to: "/studio/$organizationSlug",
+    });
+  }, [navigate, user]);
+
+  return (
+    <div className="flex h-screen w-screen items-center justify-center">
+      <Spinner />
+    </div>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/route.tsx b/apps/www/src/routes/studio/_authenticated/route.tsx
new file mode 100644
index 000000000..fc3e5825d
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/route.tsx
@@ -0,0 +1,164 @@
+import { useQuery } from "@tanstack/react-query";
+import type { ErrorComponentProps } from "@tanstack/react-router";
+import { createFileRoute, Outlet, redirect } from "@tanstack/react-router";
+import { getAuth } from "@workos/authkit-tanstack-react-start";
+import type { User as WorkosUser } from "@workos-inc/node";
+import type { User as RpcUser } from "@voidhash/rpc";
+import { Spinner } from "@voidhash/ui";
+import { AuthProvider } from "@/features/studio/components/auth-context";
+import { DefaultCatchBoundary } from "@/features/studio/components/default-cache-boundary";
+import { DashboardShellSkeleton } from "@/features/studio/shell/components/skeleton";
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import { getCurrentUser } from "@/features/studio/lib/tanstack-query/users";
+
+type AuthenticationError = {
+  _tag?: string;
+  cause?: unknown;
+  failure?: {
+    cause?: unknown;
+    message?: string;
+    _tag?: string;
+  };
+  message?: string;
+};
+
+const isAuthenticationError = (error: unknown): error is AuthenticationError => {
+  if (!error || typeof error !== "object") {
+    return false;
+  }
+
+  const authError = error as AuthenticationError;
+  return (
+    authError._tag === "Rpc/AuthenticationError" ||
+    authError.failure?._tag === "Rpc/AuthenticationError"
+  );
+};
+
+const getErrorMessage = (error: AuthenticationError) =>
+  error.failure?.message ?? error.message ?? "";
+
+const getErrorCause = (error: AuthenticationError) =>
+  String(error.failure?.cause ?? error.cause ?? "");
+
+const isDatabaseAuthenticationError = (error: unknown): error is AuthenticationError => {
+  if (!isAuthenticationError(error)) {
+    return false;
+  }
+
+  const message = getErrorMessage(error);
+  const cause = getErrorCause(error);
+  return (
+    message.includes("database error") ||
+    cause.includes("DatabaseError") ||
+    cause.includes("Failed to execute transaction")
+  );
+};
+
+const toDate = (value: unknown) => {
+  if (value instanceof Date) {
+    return value;
+  }
+
+  if (typeof value === "string" || typeof value === "number") {
+    const date = new Date(value);
+    if (!Number.isNaN(date.getTime())) {
+      return date;
+    }
+  }
+
+  return new Date();
+};
+
+const getWorkosUserName = (user: WorkosUser) => {
+  const name = [user.firstName, user.lastName].filter(Boolean).join(" ").trim();
+  return name.length > 0 ? name : user.email;
+};
+
+const getWorkosFallbackUser = (user: WorkosUser) =>
+  ({
+    createdAt: toDate(user.createdAt),
+    email: user.email,
+    emailVerified: user.emailVerified,
+    id: user.externalId ?? user.id,
+    image: user.profilePictureUrl ?? null,
+    name: getWorkosUserName(user),
+    organizations: [],
+    projects: [],
+    role: null,
+    updatedAt: toDate(user.updatedAt),
+  }) satisfies typeof RpcUser.Type;
+
+export const Route = createFileRoute("/studio/_authenticated")({
+  ssr: false,
+  loader: async ({ context, location }) => {
+    const auth = await getAuth();
+
+    const redirectToLogin = (): never => {
+      const nextPath = `${location.pathname}${location.searchStr}${location.hash}`;
+      const searchParams = new URLSearchParams({ next: nextPath });
+      throw redirect({ href: `/auth/login?${searchParams.toString()}` });
+    };
+
+    const authenticatedWorkosUser = auth.user ?? redirectToLogin();
+
+    try {
+      // Read through the query cache so an optimistic write (e.g. right after
+      // creating an organization) is honored without a network round-trip, and
+      // so intra-app navigations within `staleTime` don't re-block on a
+      // CurrentUser fetch + full-screen skeleton. `getCurrentUser` stays the
+      // fetcher, so the error shapes handled below are unchanged.
+      const user = await context.queryClient.ensureQueryData({
+        queryFn: () => getCurrentUser(),
+        queryKey: queryKeys.user.getUser(),
+        staleTime: 30_000,
+      });
+      return user;
+    } catch (error) {
+      if (isDatabaseAuthenticationError(error)) {
+        const user = getWorkosFallbackUser(authenticatedWorkosUser);
+        context.queryClient.setQueryData(queryKeys.user.getUser(), user);
+        return user;
+      }
+
+      if (isAuthenticationError(error)) {
+        redirectToLogin();
+      }
+      throw error;
+    }
+  },
+  component: RouteComponent,
+  errorComponent: AuthErrorComponent,
+  pendingComponent: DashboardShellSkeleton,
+  pendingMs: 0,
+});
+
+function RouteComponent() {
+  const data = Route.useLoaderData();
+  const userQuery = useQuery({
+    initialData: data,
+    queryFn: () => getCurrentUser(),
+    queryKey: queryKeys.user.getUser(),
+    staleTime: 30_000,
+  });
+
+  return (
+    <AuthProvider user={userQuery.data}>
+      <Outlet />
+    </AuthProvider>
+  );
+}
+
+function AuthErrorComponent(props: ErrorComponentProps) {
+  // Check if this is an auth error - show loading state while redirecting
+  const isAuthError = isAuthenticationError(props.error);
+
+  if (isAuthError) {
+    return (
+      <div className="flex h-screen w-screen items-center justify-center">
+        <Spinner />
+      </div>
+    );
+  }
+
+  return <DefaultCatchBoundary {...props} />;
+}
diff --git a/apps/www/src/routes/studio/route.tsx b/apps/www/src/routes/studio/route.tsx
new file mode 100644
index 000000000..28e2540ae
--- /dev/null
+++ b/apps/www/src/routes/studio/route.tsx
@@ -0,0 +1,27 @@
+import { Outlet, createFileRoute } from "@tanstack/react-router";
+
+import { STUDIO_PATH } from "@/lib/paths";
+
+export const Route = createFileRoute("/studio")({
+  component: Outlet,
+  head: () => ({
+    links: [
+      {
+        href: `${STUDIO_PATH}/favicon.ico`,
+        rel: "icon",
+        type: "image/x-icon",
+      },
+      {
+        href: `${STUDIO_PATH}/apple-icon.png`,
+        rel: "apple-touch-icon",
+      },
+    ],
+    meta: [
+      { title: "Voidhash Studio" },
+      {
+        content: "Voidhash Studio for managing projects, paywalls, and products.",
+        name: "description",
+      },
+    ],
+  }),
+});
diff --git a/apps/www/src/start.ts b/apps/www/src/start.ts
new file mode 100644
index 000000000..3118b0d2f
--- /dev/null
+++ b/apps/www/src/start.ts
@@ -0,0 +1,10 @@
+import { createCsrfMiddleware, createStart } from "@tanstack/react-start";
+import { authkitMiddleware } from "@workos/authkit-tanstack-react-start";
+
+const csrfMiddleware = createCsrfMiddleware({
+  filter: (ctx) => ctx.handlerType === "serverFn",
+});
+
+export const startInstance = createStart(() => ({
+  requestMiddleware: [csrfMiddleware, authkitMiddleware()],
+}));
diff --git a/apps/www/src/styles/globals.css b/apps/www/src/styles/globals.css
new file mode 100644
index 000000000..205211d5f
--- /dev/null
+++ b/apps/www/src/styles/globals.css
@@ -0,0 +1,36 @@
+/** biome-ignore-all lint/nursery/noUnknownAtRule: tailwind */
+@import "@fontsource-variable/geist";
+@import "@fontsource-variable/geist-mono";
+@import "tailwindcss";
+@import "tw-animate-css";
+@import "fumadocs-ui/css/shadcn.css";
+@import "fumadocs-ui/css/preset.css";
+@import "@voidhash/ui/styles/brand-theme.css";
+
+@source "../../../../packages/ui";
+@source "../../../../packages/features";
+@source "../../src";
+@source "../../../overwatch/src";
+
+@custom-variant dark (&:is(.dark *));
+
+::selection {
+  background: #0673ff;
+  color: #fff;
+}
+
+:root,
+.dark {
+  --stripe-width: 30px;
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+  }
+
+  body {
+    @apply bg-background text-foreground;
+    font-family: "Geist Variable", sans-serif;
+  }
+}
diff --git a/apps/www/src/test-setup.ts b/apps/www/src/test-setup.ts
new file mode 100644
index 000000000..68173f718
--- /dev/null
+++ b/apps/www/src/test-setup.ts
@@ -0,0 +1,18 @@
+/**
+ * Test-only environment shim. Component tests that render real designer UI pull
+ * in the app's typed env module (`src/lib/env.ts`), which validates
+ * `VITE_APP_API_URL` at import. The test runner doesn't load `.env`, so seed a
+ * harmless value here BEFORE any app module imports it (setupFiles run first).
+ */
+process.env.VITE_APP_API_URL ??= "http://localhost:8787";
+
+// jsdom lacks ResizeObserver, which some Radix primitives (Slider, etc.) touch
+// on mount. A no-op stub is enough for render/interaction tests.
+if (typeof globalThis.ResizeObserver === "undefined") {
+  class ResizeObserverStub {
+    observe(): void {}
+    unobserve(): void {}
+    disconnect(): void {}
+  }
+  globalThis.ResizeObserver = ResizeObserverStub as unknown as typeof ResizeObserver;
+}
diff --git a/apps/www/src/vite-env.d.ts b/apps/www/src/vite-env.d.ts
new file mode 100644
index 000000000..dc509cff0
--- /dev/null
+++ b/apps/www/src/vite-env.d.ts
@@ -0,0 +1,6 @@
+/// <reference types="vite-plus/client" />
+
+declare module "*.css?url" {
+  const url: string;
+  export default url;
+}
diff --git a/apps/www/sst-env.d.ts b/apps/www/sst-env.d.ts
new file mode 100644
index 000000000..64441936d
--- /dev/null
+++ b/apps/www/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst"
+export {}
\ No newline at end of file
diff --git a/apps/www/tsconfig.json b/apps/www/tsconfig.json
new file mode 100644
index 000000000..19e07ac5d
--- /dev/null
+++ b/apps/www/tsconfig.json
@@ -0,0 +1,32 @@
+{
+  "compilerOptions": {
+    "target": "ES2017",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": false,
+    "strictNullChecks": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "allowImportingTsExtensions": true,
+    "rewriteRelativeImportExtensions": true,
+    "isolatedModules": true,
+    "jsx": "react-jsx",
+    "incremental": true,
+    "types": ["vite/client"],
+    "paths": {
+      "@/*": ["./src/*"],
+      "@generated/design": ["./design.generated.ts"],
+      "@generated/docs": ["./docs.generated.ts"]
+    }
+  },
+  "include": ["src/**/*.ts", "src/**/*.tsx", "src/**/*.d.ts"],
+  "exclude": [
+    "node_modules",
+    "src/features/studio/.cache/**",
+    "src/features/studio/.turbo/**"
+  ]
+}
diff --git a/apps/www/vite.config.ts b/apps/www/vite.config.ts
new file mode 100644
index 000000000..577c3f5b7
--- /dev/null
+++ b/apps/www/vite.config.ts
@@ -0,0 +1,144 @@
+import tailwindcss from "@tailwindcss/vite";
+import { tanstackStart } from "@tanstack/react-start/plugin/vite";
+import viteReact from "@vitejs/plugin-react";
+import { paywallRuntimeBundlePlugin } from "@voidhash/paywall-renderer-preact/vite-plugin";
+import mdx from "fumadocs-mdx/vite";
+import { defineConfig, type PluginOption } from "vite";
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+
+import * as designSourceConfig from "./src/features/design/source.config.ts";
+import * as docsSourceConfig from "./src/features/docs/source.config.ts";
+
+const devPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : 3000;
+const devHost = process.env.HOST ?? true;
+const appSrcPath = fileURLToPath(new URL("./src", import.meta.url));
+const tslibPath = createRequire(import.meta.url).resolve("tslib/tslib.es6.mjs");
+// The self-host image uses an isolated runtime tree, so its SSR output cannot
+// rely on transitive packages being hoisted beside the application.
+const bundleServerDependencies = process.env.VOIDHASH_SELFHOST_BUNDLE === "true";
+
+const localDevOrigins = [
+  `http://localhost:${devPort}`,
+  `https://localhost:${devPort}`,
+  `http://127.0.0.1:${devPort}`,
+  `https://127.0.0.1:${devPort}`,
+];
+
+function corsMiddleware() {
+  return {
+    name: "cors-middleware",
+    configureServer(server: {
+      middlewares: {
+        use: (fn: (req: unknown, res: unknown, next: () => void) => void) => void;
+      };
+    }) {
+      server.middlewares.use((req, res, next) => {
+        const request = req as {
+          headers: { origin?: string };
+          method?: string;
+        };
+        const response = res as {
+          end: () => void;
+          setHeader: (name: string, value: string) => void;
+          statusCode: number;
+        };
+        const origin = request.headers.origin;
+
+        if (origin && localDevOrigins.includes(origin)) {
+          response.setHeader("Access-Control-Allow-Origin", origin);
+          response.setHeader("Access-Control-Allow-Credentials", "true");
+          response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
+          response.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+
+          if (request.method === "OPTIONS") {
+            response.statusCode = 204;
+            response.end();
+            return;
+          }
+        }
+
+        next();
+      });
+    },
+  };
+}
+
+function scopedMdxPlugin(plugin: PluginOption, scopeFragment: string) {
+  const vitePlugin = plugin as {
+    transform?: (this: unknown, code: string, id: string) => unknown;
+  };
+
+  if (!vitePlugin.transform) {
+    return plugin;
+  }
+
+  return {
+    ...vitePlugin,
+    async transform(this: unknown, code: string, id: string) {
+      const [file] = id.split("?");
+      if (!file.includes(scopeFragment)) {
+        return null;
+      }
+
+      return vitePlugin.transform?.call(this, code, id);
+    },
+  };
+}
+
+export default defineConfig(() => ({
+  build: {
+    minify: "esbuild",
+  },
+  test: {
+    setupFiles: ["./src/test-setup.ts"],
+  },
+  plugins: [
+    scopedMdxPlugin(
+      mdx(docsSourceConfig, {
+        configPath: "src/features/docs/source.config.ts",
+        generateIndexFile: {
+          out: "docs.generated.ts",
+        },
+      }),
+      "/src/features/docs/content/docs/",
+    ),
+    scopedMdxPlugin(
+      mdx(designSourceConfig, {
+        configPath: "src/features/design/source.config.ts",
+        generateIndexFile: {
+          out: "design.generated.ts",
+        },
+      }),
+      "/src/features/design/content/docs/",
+    ),
+    corsMiddleware(),
+    paywallRuntimeBundlePlugin(),
+    tailwindcss(),
+    tanstackStart({
+      srcDirectory: "src",
+      prerender: {
+        enabled: false,
+      },
+    }),
+    viteReact(),
+  ],
+  resolve: {
+    alias: {
+      "@": appSrcPath,
+      "@generated/design": fileURLToPath(new URL("./design.generated.ts", import.meta.url)),
+      "@generated/docs": fileURLToPath(new URL("./docs.generated.ts", import.meta.url)),
+      tslib: tslibPath,
+    },
+    tsconfigPaths: true,
+  },
+  server: {
+    cors: {
+      credentials: true,
+      origin: true,
+    },
+    host: devHost,
+    port: devPort,
+  },
+  ssr: bundleServerDependencies ? { noExternal: true } : undefined,
+}));
diff --git a/docs/specs/paywall-deploy-contract.md b/docs/specs/paywall-deploy-contract.md
index daba11df7..d4b15166c 100644
--- a/docs/specs/paywall-deploy-contract.md
+++ b/docs/specs/paywall-deploy-contract.md
@@ -1,8 +1,8 @@
 # Paywall Deploy Contract (Phase 1)
 
 **Status:** Implementation contract for PRD "Paywall Code Components" Phase 1.
-**Implementors:** `voidhash` OSS repo (SDK `@voidhash/paywalls`, `voidhash-cli`, studio, `@voidhash/react-native`) and `voidhash-mono` (backend, www).
-**Rule:** this file is the wire-format source of truth. Both repos validate against schemas that mirror this document exactly. Breaking changes bump `schemaVersion`.
+**Implementors:** `voidhash` (SDK `@voidhash/paywalls`, `voidhash-cli`, studio, `@voidhash/react-native`, backend, and www).
+**Rule:** this file is the wire-format source of truth. Every implementation validates against schemas that mirror this document exactly. Breaking changes bump `schemaVersion`.
 
 ---
 
@@ -190,7 +190,7 @@ Node shapes: `view|pressable|scroll` have `style` + `children[]`; `text` has `st
 
 Keys limited to the RN-compatible vocabulary: flexbox (`flex`, `flexDirection`, `alignItems`, `alignSelf`, `justifyContent`, `flexWrap`, `gap`, `rowGap`, `columnGap`, `flexGrow`, `flexShrink`, `flexBasis`), box (`width`, `height`, `minWidth`, `minHeight`, `maxWidth`, `maxHeight`, `padding[Top|Bottom|Left|Right|Horizontal|Vertical]`, `margin[…same…]`, `aspectRatio`), border (`borderWidth`, `borderColor`, `borderRadius` + per-corner variants, `borderStyle`), visual (`backgroundColor`, `opacity`, `overflow`), position (`position`, `top`, `right`, `bottom`, `left`, `zIndex`), text-only (`color`, `fontSize`, `fontWeight`, `fontStyle`, `lineHeight`, `letterSpacing`, `textAlign`, `textTransform`, `textDecorationLine`, `fontFamily`). Values: numbers, strings (colors, `"50%"`); no arbitrary CSS.
 
-## 4. Deploy HTTP API (voidhash-mono backend)
+## 4. Deploy HTTP API (`voidhash` backend)
 
 Base: the existing v1 API host. All three endpoints are part of the authenticated studio/CLI surface: header `x-api-key` accepting the same credentials as `/api/v1/auth/session` (CLI user key from device login, or a `vh_sk_` secret key). The authenticated session must include a project whose `slug == manifest.project` within an organization whose `slug == manifest.team`; otherwise `403`.
 
diff --git a/drizzle.config.ts b/drizzle.config.ts
index c69e42d10..ed0036ccd 100644
--- a/drizzle.config.ts
+++ b/drizzle.config.ts
@@ -1,20 +1,8 @@
-/** biome-ignore-all lint/style/noNonNullAssertion: ok in this config file */
-/** biome-ignore-all lint/complexity/useLiteralKeys: it is ok */
 import { defineConfig } from "drizzle-kit";
+
 export default defineConfig({
-  dbCredentials:
-    process.env["NODE_ENV"] === "production"
-      ? {
-          url: `mysql://${process.env["DATABASE_USERNAME"]}:${process.env["DATABASE_PASSWORD"]}@${process.env["DATABASE_HOST"]}/${process.env["DATABASE_NAME"]}?ssl={"rejectUnauthorized":true}`,
-        }
-      : {
-          database: process.env["DATABASE_NAME"]!,
-          host: process.env["DATABASE_HOST"]!,
-          password: process.env["DATABASE_PASSWORD"]!,
-          user: process.env["DATABASE_USERNAME"]!,
-        },
-  dialect: "mysql",
-  out: "./packages/db/src/migrations",
+  dialect: "postgresql",
+  out: "./packages/db/src/alchemy-migrations",
   schema: "./packages/db/src/schema.ts",
-  tablesFilter: ["!cluster_*"],
+  tablesFilter: ["!cluster_*", "!mimic_*", "!effect_sql_migrations"],
 });
diff --git a/examples/mimic-example/src/routeTree.gen.ts b/examples/mimic-example/src/routeTree.gen.ts
index 5ddf9cada..59499d9fb 100644
--- a/examples/mimic-example/src/routeTree.gen.ts
+++ b/examples/mimic-example/src/routeTree.gen.ts
@@ -8,70 +8,70 @@
 // You should NOT make any changes in this file as it will be overwritten.
 // Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.
 
-import { Route as rootRouteImport } from "./routes/__root";
-import { Route as AboutRouteImport } from "./routes/about";
-import { Route as IndexRouteImport } from "./routes/index";
+import { Route as rootRouteImport } from './routes/__root'
+import { Route as AboutRouteImport } from './routes/about'
+import { Route as IndexRouteImport } from './routes/index'
 
 const AboutRoute = AboutRouteImport.update({
-  id: "/about",
-  path: "/about",
+  id: '/about',
+  path: '/about',
   getParentRoute: () => rootRouteImport,
-} as any);
+} as any)
 const IndexRoute = IndexRouteImport.update({
-  id: "/",
-  path: "/",
+  id: '/',
+  path: '/',
   getParentRoute: () => rootRouteImport,
-} as any);
+} as any)
 
 export interface FileRoutesByFullPath {
-  "/": typeof IndexRoute;
-  "/about": typeof AboutRoute;
+  '/': typeof IndexRoute
+  '/about': typeof AboutRoute
 }
 export interface FileRoutesByTo {
-  "/": typeof IndexRoute;
-  "/about": typeof AboutRoute;
+  '/': typeof IndexRoute
+  '/about': typeof AboutRoute
 }
 export interface FileRoutesById {
-  __root__: typeof rootRouteImport;
-  "/": typeof IndexRoute;
-  "/about": typeof AboutRoute;
+  __root__: typeof rootRouteImport
+  '/': typeof IndexRoute
+  '/about': typeof AboutRoute
 }
 export interface FileRouteTypes {
-  fileRoutesByFullPath: FileRoutesByFullPath;
-  fullPaths: "/" | "/about";
-  fileRoutesByTo: FileRoutesByTo;
-  to: "/" | "/about";
-  id: "__root__" | "/" | "/about";
-  fileRoutesById: FileRoutesById;
+  fileRoutesByFullPath: FileRoutesByFullPath
+  fullPaths: '/' | '/about'
+  fileRoutesByTo: FileRoutesByTo
+  to: '/' | '/about'
+  id: '__root__' | '/' | '/about'
+  fileRoutesById: FileRoutesById
 }
 export interface RootRouteChildren {
-  IndexRoute: typeof IndexRoute;
-  AboutRoute: typeof AboutRoute;
+  IndexRoute: typeof IndexRoute
+  AboutRoute: typeof AboutRoute
 }
 
-declare module "@tanstack/react-router" {
+declare module '@tanstack/react-router' {
   interface FileRoutesByPath {
-    "/about": {
-      id: "/about";
-      path: "/about";
-      fullPath: "/about";
-      preLoaderRoute: typeof AboutRouteImport;
-      parentRoute: typeof rootRouteImport;
-    };
-    "/": {
-      id: "/";
-      path: "/";
-      fullPath: "/";
-      preLoaderRoute: typeof IndexRouteImport;
-      parentRoute: typeof rootRouteImport;
-    };
+    '/about': {
+      id: '/about'
+      path: '/about'
+      fullPath: '/about'
+      preLoaderRoute: typeof AboutRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/': {
+      id: '/'
+      path: '/'
+      fullPath: '/'
+      preLoaderRoute: typeof IndexRouteImport
+      parentRoute: typeof rootRouteImport
+    }
   }
 }
 
 const rootRouteChildren: RootRouteChildren = {
   IndexRoute: IndexRoute,
   AboutRoute: AboutRoute,
-};
+}
 export const routeTree = rootRouteImport
   ._addFileChildren(rootRouteChildren)
-  ._addFileTypes<FileRouteTypes>();
+  ._addFileTypes<FileRouteTypes>()
diff --git a/libraries/node/package.json b/libraries/node/package.json
index d211e2ff7..b468fc9cd 100644
--- a/libraries/node/package.json
+++ b/libraries/node/package.json
@@ -65,7 +65,6 @@
     "@voidhash/generated-clients": "workspace:*"
   },
   "devDependencies": {
-    "@effect/platform": "catalog:",
     "@voidhash/tsconfig": "workspace:*",
     "effect": "catalog:",
     "tsup": "^8.5.1",
@@ -75,7 +74,6 @@
     "vitest": "^3.2.7"
   },
   "peerDependencies": {
-    "@effect/platform": "catalog:",
     "effect": "catalog:"
   }
 }
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index d48b364de..5a4084730 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -59,14 +59,14 @@
   },
   "scripts": {
     "postinstall": "tsc || exit 0;",
-    "typecheck": "tsgo --noEmit",
+    "typecheck": "tsgo --noEmit -p tsconfig.test.json",
     "build": "expo-module build",
     "test": "vitest --config vitest.unit.mts run",
     "clean": "rm -rf android/build node_modules/**/android/build lib",
     "lint": "biome check .",
     "lint-ci": "biome check .",
     "format": "biome format . --write",
-    "typescript": "tsc",
+    "typescript": "tsc -p tsconfig.test.json --noEmit",
     "specs": "pnpm run typescript && nitro-codegen --logLevel=\"debug\""
   },
   "dependencies": {
@@ -89,7 +89,7 @@
     "typescript": "5.9.3",
     "ultracite": "5.0.39",
     "vite-tsconfig-paths": "catalog:",
-    "vitest": "^4.1.6"
+    "vitest": "catalog:"
   },
   "peerDependencies": {
     "@react-native-async-storage/async-storage": "^1.24.0 || ^2.0.0",
diff --git a/libraries/react-native/tsconfig.json b/libraries/react-native/tsconfig.json
index 22dfd0821..ffc39a807 100644
--- a/libraries/react-native/tsconfig.json
+++ b/libraries/react-native/tsconfig.json
@@ -1,8 +1,9 @@
 {
   "extends": "expo-module-scripts/tsconfig.base",
   "compilerOptions": {
-    "outDir": "./build"
+    "outDir": "./build",
+    "rootDir": "./src"
   },
-  "include": ["./src", "./tests", "./vitest.setup.ts", "./vitest.unit.mts"],
+  "include": ["./src"],
   "exclude": ["**/__tests__/*", "**/__rsc_tests__/*", "**/node_modules/**"]
 }
diff --git a/libraries/react-native/tsconfig.test.json b/libraries/react-native/tsconfig.test.json
new file mode 100644
index 000000000..9037886b2
--- /dev/null
+++ b/libraries/react-native/tsconfig.test.json
@@ -0,0 +1,8 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": true,
+    "rootDir": ".."
+  },
+  "include": ["./src", "./tests", "./vitest.setup.ts", "./vitest.unit.mts"]
+}
diff --git a/libraries/web/package.json b/libraries/web/package.json
index eb2e9bc47..0c05842b5 100644
--- a/libraries/web/package.json
+++ b/libraries/web/package.json
@@ -69,6 +69,7 @@
     "@types/react": "catalog:",
     "@types/react-dom": "catalog:",
     "@voidhash/tsconfig": "workspace:*",
+    "effect": "catalog:",
     "jsdom": "^20.0.3",
     "react": "catalog:",
     "react-dom": "catalog:",
@@ -79,7 +80,6 @@
     "vitest": "^3.2.7"
   },
   "peerDependencies": {
-    "@effect/platform": "catalog:",
     "effect": "catalog:",
     "react": "*"
   },
diff --git a/package.json b/package.json
index a87556e04..472ff6264 100644
--- a/package.json
+++ b/package.json
@@ -2,13 +2,14 @@
   "name": "@voidhash/root",
   "version": "0.0.1-alpha.1",
   "private": true,
-  "license": "MIT",
+  "license": "SEE LICENSE IN LICENSE.md",
   "workspaces": {
     "packages": [
       "packages/*",
       "apps/*",
       "libraries/*",
-      "examples/*"
+      "examples/*",
+      "selfhost/*"
     ],
     "catalogs": {
       "react18": {
@@ -44,80 +45,38 @@
     "openapi:generate": "node ./scripts/generate-openapi-clients.mjs",
     "openapi:generate:dev": "pnpm openapi:generate -- localhost:8787",
     "openapi:generate:prod": "pnpm openapi:generate -- api.voidhash.com",
+    "db:generate": "node ./scripts/db-generate.mjs",
+    "db:migrate": "node ./scripts/db-migrate-local.mjs",
+    "selfhost:smoke": "tsx selfhost/smoke.mts",
+    "selfhost:release-smoke": "tsx selfhost/release-smoke.mts",
     "test": "turbo test",
     "typecheck": "turbo typecheck",
     "lines-of-code": "npx cloc . --exclude-dir=.next,node_modules,.vercel,.turbo,.git,meta,.github,.expo,build,.expo-shared,nitrogen --vcs git --not-match-f=pnpm-lock.yaml,meta.json --exclude-ext=yaml,md"
   },
   "dependencies": {
     "@effect/language-service": "catalog:",
-    "@types/node": "^24.10.4",
+    "@types/node": "^24.0.12",
     "@typescript/native-preview": "7.0.0-dev.20260210.1",
     "bumpp": "^10.3.2",
     "cross-env": "^7.0.3",
-    "drizzle-kit": "^0.31.8",
+    "drizzle-kit": "1.0.0-rc.3",
     "simple-git-hooks": "^2.13.1",
     "taze": "^0.18.0",
     "tinyglobby": "^0.2.15",
-    "turbo": "^2.9.14",
-    "typescript": "5.6.3"
+    "turbo": "^2.9.16",
+    "typescript": "catalog:"
   },
   "devDependencies": {
     "@biomejs/biome": "2.3.11",
     "@typescript/native-preview": "7.0.0-dev.20260302.1",
     "dotenv-cli": "^8.0.0",
+    "tslib": "2.8.1",
+    "tsx": "^4.19.3",
     "ultracite": "5.0.39"
   },
   "resolutions": {
     "react": "19.1.0",
     "react-dom": "19.1.0"
   },
-  "packageManager": "pnpm@10.19.0",
-  "pnpm": {
-    "overrides": {
-      "@babel/plugin-transform-modules-systemjs@<=7.29.3": "7.29.4",
-      "@babel/core@<=7.29.0": "7.29.6",
-      "@esbuild-kit/core-utils>esbuild": "0.25.0",
-      "@expo/metro-config>postcss": "8.5.10",
-      "@isaacs/brace-expansion@<=5.0.0": "5.0.1",
-      "@tanstack/react-start@>=1.0.0 <1.167.30": "1.167.30",
-      "@tootallnate/once@<2.0.1": "2.0.1",
-      "@xmldom/xmldom@<0.8.13": "0.8.13",
-      "ajv@>=7.0.0-alpha.0 <8.18.0": "8.18.0",
-      "brace-expansion@<1.1.13": "1.1.13",
-      "brace-expansion@>=2.0.0 <2.0.3": "2.0.3",
-      "defu@<=6.1.4": "6.1.7",
-      "drizzle-orm@<0.45.2": "0.45.2",
-      "effect": "4.0.0-beta.84",
-      "fast-uri@<=3.1.1": "3.1.3",
-      "fdir>picomatch": "4.0.4",
-      "flatted@<=3.4.1": "3.4.2",
-      "form-data@>=4.0.0 <4.0.6": "4.0.6",
-      "h3-v2": "npm:h3@2.0.1-rc.18",
-      "js-yaml@<3.15.0": "3.15.0",
-      "js-yaml@>=4.0.0 <=4.1.1": "4.2.0",
-      "kysely": "0.28.17",
-      "lodash@>=4.0.0 <=4.17.23": "4.18.0",
-      "minimatch@<3.1.4": "3.1.4",
-      "minimatch@>=9.0.0 <9.0.7": "9.0.7",
-      "minimatch@>=10.0.0 <10.2.3": "10.2.3",
-      "next@>=16.0.0-beta.0 <16.2.6": "16.2.6",
-      "node-forge@<1.4.0": "1.4.0",
-      "picomatch@<2.3.2": "2.3.2",
-      "picomatch@>=3.0.0 <3.0.2": "3.0.2",
-      "picomatch@>=4.0.0 <4.0.4": "4.0.4",
-      "postcss@<8.5.10": "8.5.10",
-      "rollup@>=4 <4.59.0": "4.59.0",
-      "shell-quote@>=1.1.0 <=1.8.3": "1.10.0",
-      "tar@>=7 <7.5.11": "7.5.19",
-      "undici@>=6 <6.27.0": "6.27.0",
-      "vite@>=7 <=7.3.4": "7.3.5",
-      "vite>esbuild": "0.28.1",
-      "vitest@>=3 <3.2.6": "3.2.7",
-      "ws@>=6 <6.2.4": "6.2.4",
-      "ws@>=7 <7.5.11": "7.5.11",
-      "ws@>=8 <8.21.0": "8.21.0",
-      "xcode>uuid": "11.1.1",
-      "yaml@>=2.0.0 <2.8.3": "2.8.3"
-    }
-  }
+  "packageManager": "pnpm@11.1.3"
 }
diff --git a/packages/clickhouse-db/LICENSE.md b/packages/clickhouse-db/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/clickhouse-db/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/clickhouse-db/package.json b/packages/clickhouse-db/package.json
new file mode 100644
index 000000000..d00676b7d
--- /dev/null
+++ b/packages/clickhouse-db/package.json
@@ -0,0 +1,30 @@
+{
+  "name": "@voidhash/clickhouse-db",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "main": "./index.ts",
+  "exports": {
+    ".": "./src/index.ts",
+    "./clickhouse-client-web": "./src/clickhouse-client-web/index.ts",
+    "./analytics/schema": "./src/analytics/schema.ts",
+    "./analytics/migration": "./src/analytics/migration.ts",
+    "./analytics/resolved-events-sql": "./src/analytics/resolved-events-sql.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit"
+  },
+  "dependencies": {
+    "@clickhouse/client-web": "^1.12.0",
+    "@effect/platform-bun": "catalog:"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "effect": "catalog:"
+  }
+}
diff --git a/packages/clickhouse-db/src/analytics/migration.ts b/packages/clickhouse-db/src/analytics/migration.ts
new file mode 100644
index 000000000..dff183c5b
--- /dev/null
+++ b/packages/clickhouse-db/src/analytics/migration.ts
@@ -0,0 +1,32 @@
+import type { MigrationSet } from "../live.ts";
+
+import migration0001 from "../migrations/0001_create_analytics_events.ts";
+import migration0002 from "../migrations/0002_create_analytics_identity_v2.ts";
+import migration0003 from "../migrations/0003_create_analytics_identity_pending_overrides_v2.ts";
+import migration0004 from "../migrations/0004_person_identity_cutover.ts";
+import migration0005 from "../migrations/0005_align_analytics_identity_tables.ts";
+import migration0006 from "../migrations/0006_repair_pending_overrides_person_id.ts";
+import migration0007 from "../migrations/0007_add_organization_id_to_identity_tables.ts";
+import migration0008 from "../migrations/0008_repair_identity_organization_id.ts";
+
+export const analyticsEventsMigrations: MigrationSet = {
+  migrations: [
+    [1, "0001_create_analytics_events", migration0001],
+    [2, "0002_create_analytics_identity_v2", migration0002],
+    [3, "0003_create_analytics_identity_pending_overrides_v2", migration0003],
+    [4, "0004_person_identity_cutover", migration0004],
+    [5, "0005_align_analytics_identity_tables", migration0005],
+    [6, "0006_repair_pending_overrides_person_id", migration0006],
+    [7, "0007_add_organization_id_to_identity_tables", migration0007],
+    [8, "0008_repair_identity_organization_id", migration0008],
+  ],
+  tableName: "analytics_migrations",
+};
+
+export const analyticsEventsMigrationRef = {
+  name: "analyticsEvents",
+  tableName: analyticsEventsMigrations.tableName,
+  version: analyticsEventsMigrations.migrations.reduce((max, [id]) => Math.max(max, id), -1),
+} as const;
+
+export type MigrationSetRef = typeof analyticsEventsMigrationRef;
diff --git a/packages/clickhouse-db/src/analytics/resolved-events-sql.test.ts b/packages/clickhouse-db/src/analytics/resolved-events-sql.test.ts
new file mode 100644
index 000000000..5f0ee9231
--- /dev/null
+++ b/packages/clickhouse-db/src/analytics/resolved-events-sql.test.ts
@@ -0,0 +1,54 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { buildResolvedEventsSql } from "./resolved-events-sql.ts";
+
+describe("buildResolvedEventsSql", () => {
+  it("falls back to raw event columns when there is no pending override", () => {
+    const sql = buildResolvedEventsSql();
+
+    expect(sql.effectivePersonIdExpression).toBe(
+      "coalesce(pending_overrides.person_id, events.person_id)",
+    );
+    expect(sql.effectiveDistinctIdExpression).toBe(
+      "coalesce(pending_overrides.target_distinct_id, events.distinct_id)",
+    );
+    expect(sql.fromClause).toContain("FROM events_v2 AS events");
+  });
+
+  it("prefers pending override person ids for unsquashed events", () => {
+    const sql = buildResolvedEventsSql({
+      eventsAlias: "raw_events",
+      overridesAlias: "overrides",
+    });
+
+    expect(sql.effectivePersonIdExpression).toBe(
+      "coalesce(overrides.person_id, raw_events.person_id)",
+    );
+    expect(sql.leftJoinClause).toContain(
+      "AND overrides.source_distinct_id = raw_events.distinct_id",
+    );
+  });
+
+  it("exposes a canonical distinct id without rewriting the raw event id", () => {
+    const sql = buildResolvedEventsSql();
+
+    expect(sql.effectiveDistinctIdExpression).toBe(
+      "coalesce(pending_overrides.target_distinct_id, events.distinct_id)",
+    );
+    expect(sql.leftJoinClause).toContain("target_distinct_id");
+  });
+
+  it("resolves only the latest version per raw distinct id", () => {
+    const sql = buildResolvedEventsSql();
+
+    expect(sql.leftJoinClause).toContain("LIMIT 1 BY project_id, source_distinct_id");
+    expect(sql.leftJoinClause).toContain("version DESC");
+    expect(sql.leftJoinClause).toContain("changed_at DESC");
+  });
+
+  it("excludes latest tombstones from query-time resolution", () => {
+    const sql = buildResolvedEventsSql();
+
+    expect(sql.leftJoinClause).toContain("WHERE is_deleted = 0");
+  });
+});
diff --git a/packages/clickhouse-db/src/analytics/resolved-events-sql.ts b/packages/clickhouse-db/src/analytics/resolved-events-sql.ts
new file mode 100644
index 000000000..5cc2e1dda
--- /dev/null
+++ b/packages/clickhouse-db/src/analytics/resolved-events-sql.ts
@@ -0,0 +1,61 @@
+import {
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+} from "./schema.ts";
+
+export interface ResolvedEventsSqlParts {
+  readonly effectivePersonIdExpression: string;
+  readonly effectiveDistinctIdExpression: string;
+  readonly fromClause: string;
+  readonly leftJoinClause: string;
+}
+
+export interface BuildResolvedEventsSqlOptions {
+  readonly eventsAlias?: string;
+  readonly overridesAlias?: string;
+}
+
+const buildLatestPendingOverridesSubquery = (overridesAlias: string) =>
+  `
+(
+	SELECT
+		project_id,
+		source_distinct_id,
+		target_distinct_id,
+		person_id
+	FROM (
+		SELECT
+			project_id,
+			source_distinct_id,
+			target_distinct_id,
+			person_id,
+			is_deleted,
+			version,
+			changed_at
+		FROM ${CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE}
+		WHERE version > 0
+		ORDER BY
+			project_id ASC,
+			source_distinct_id ASC,
+			version DESC,
+			changed_at DESC
+		LIMIT 1 BY project_id, source_distinct_id
+	)
+	WHERE is_deleted = 0
+) AS ${overridesAlias}`.trim();
+
+export const buildResolvedEventsSql = (
+  options: BuildResolvedEventsSqlOptions = {},
+): ResolvedEventsSqlParts => {
+  const eventsAlias = options.eventsAlias ?? "events";
+  const overridesAlias = options.overridesAlias ?? "pending_overrides";
+
+  return {
+    effectivePersonIdExpression: `coalesce(${overridesAlias}.person_id, ${eventsAlias}.person_id)`,
+    effectiveDistinctIdExpression: `coalesce(${overridesAlias}.target_distinct_id, ${eventsAlias}.distinct_id)`,
+    fromClause: `FROM ${CLICKHOUSE_EVENTS_TABLE} AS ${eventsAlias}`,
+    leftJoinClause: `LEFT JOIN ${buildLatestPendingOverridesSubquery(overridesAlias)}
+ON ${overridesAlias}.project_id = ${eventsAlias}.project_id
+AND ${overridesAlias}.source_distinct_id = ${eventsAlias}.distinct_id`,
+  };
+};
diff --git a/packages/clickhouse-db/src/analytics/schema.ts b/packages/clickhouse-db/src/analytics/schema.ts
new file mode 100644
index 000000000..84078cfa7
--- /dev/null
+++ b/packages/clickhouse-db/src/analytics/schema.ts
@@ -0,0 +1,10 @@
+// ClickHouse analytics tables. Names are unqualified — the runtime client
+// connects with a per-stage database (provisioned by `Clickhouse.Database`)
+// as its default, so unqualified table references resolve into the correct
+// per-stage database without hardcoding the database name here.
+export const CLICKHOUSE_EVENTS_TABLE = "events_v2" as const;
+export const CLICKHOUSE_PERSONS_TABLE = "persons_v1" as const;
+export const CLICKHOUSE_PERSON_IDENTITY_TABLE = "person_identity_v1" as const;
+export const CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE = "person_identity_overrides_v1" as const;
+export const CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE =
+  "person_identity_pending_overrides_v2" as const;
diff --git a/packages/clickhouse-db/src/clickhouse-client-web/ClickhouseWebClient.ts b/packages/clickhouse-db/src/clickhouse-client-web/ClickhouseWebClient.ts
new file mode 100644
index 000000000..11f0283cb
--- /dev/null
+++ b/packages/clickhouse-db/src/clickhouse-client-web/ClickhouseWebClient.ts
@@ -0,0 +1,848 @@
+/**
+ * ClickHouse client implementation for Effect SQL, backed by
+ * `@clickhouse/client-web`.
+ *
+ * This module mirrors `@effect/sql-clickhouse`'s `ClickhouseClient` surface
+ * while avoiding Node-only APIs so it can run in Cloudflare Workers.
+ */
+import * as Clickhouse from "@clickhouse/client-web";
+import * as Config from "effect/Config";
+import * as Context from "effect/Context";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Fiber from "effect/Fiber";
+import { dual } from "effect/Function";
+import * as Layer from "effect/Layer";
+import type * as Scope from "effect/Scope";
+import * as Stream from "effect/Stream";
+import * as Reactivity from "effect/unstable/reactivity/Reactivity";
+import * as Client from "effect/unstable/sql/SqlClient";
+import type { Connection } from "effect/unstable/sql/SqlConnection";
+import {
+  AuthenticationError,
+  AuthorizationError,
+  ConnectionError,
+  SqlError,
+  SqlSyntaxError,
+  StatementTimeoutError,
+  UnknownError,
+} from "effect/unstable/sql/SqlError";
+import * as Statement from "effect/unstable/sql/Statement";
+
+const ATTR_DB_SYSTEM_NAME = "db.system.name";
+const ATTR_DB_NAMESPACE = "db.namespace";
+
+const clickhouseCodeFromCause = (cause: unknown): number | undefined => {
+  if (typeof cause !== "object" || cause === null || !("code" in cause)) {
+    return undefined;
+  }
+  const code = cause.code;
+  if (typeof code === "number") {
+    return code;
+  }
+  if (typeof code === "string") {
+    const parsed = Number(code);
+    return Number.isNaN(parsed) ? undefined : parsed;
+  }
+  return undefined;
+};
+
+const clickhouseSyntaxErrorCodes = new Set([36, 60, 62, 242]);
+
+const messageFromCause = (cause: unknown): string | undefined => {
+  if (typeof cause === "string") {
+    const trimmed = cause.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+  }
+  if (typeof cause === "object" && cause !== null && "message" in cause) {
+    const message = cause.message;
+    if (typeof message === "string") {
+      const trimmed = message.trim();
+      return trimmed.length > 0 ? trimmed : undefined;
+    }
+  }
+  return undefined;
+};
+
+const withCauseMessage = (message: string, cause: unknown): string => {
+  const causeMessage = messageFromCause(cause);
+  return causeMessage && causeMessage !== message ? `${message}: ${causeMessage}` : message;
+};
+
+const classifyError = (
+  cause: unknown,
+  message: string,
+  operation: string,
+  fallback: "connection" | "unknown" = "unknown",
+) => {
+  const props = { cause, message: withCauseMessage(message, cause), operation };
+  const code = clickhouseCodeFromCause(cause);
+  if (code !== undefined) {
+    if (code === 516) {
+      return new AuthenticationError(props);
+    }
+    if (code === 497) {
+      return new AuthorizationError(props);
+    }
+    if (clickhouseSyntaxErrorCodes.has(code)) {
+      return new SqlSyntaxError(props);
+    }
+    if (code === 159 || code === 469) {
+      return new StatementTimeoutError(props);
+    }
+  }
+  return fallback === "connection" ? new ConnectionError(props) : new UnknownError(props);
+};
+
+const makeQueryId = () =>
+  globalThis.crypto?.randomUUID?.() ??
+  `clickhouse-web-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+
+/**
+ * Build the per-request HTTP headers that carry a ClickHouse quota key. ClickHouse
+ * reads the quota bucket from the `X-ClickHouse-Quota` header, so a `KEYED BY
+ * client_key` quota only isolates principals when this is set per request;
+ * `undefined` (the default) sends no override and falls back to the empty key.
+ */
+const quotaHeaders = (quotaKey: string | undefined): Record<string, string> | undefined =>
+  quotaKey ? { "X-ClickHouse-Quota": quotaKey } : undefined;
+
+type WebInsertValues<T> =
+  | ReadonlyArray<T>
+  | Clickhouse.InputJSON<T>
+  | Clickhouse.InputJSONObjectEachRow<T>;
+
+/**
+ * Unique runtime identifier used to tag `ClickhouseWebClient` values.
+ */
+export const TypeId: TypeId = "~@voidhash/clickhouse-db/ClickhouseWebClient";
+
+/**
+ * Type-level literal for the `ClickhouseWebClient` runtime identifier.
+ */
+export type TypeId = "~@voidhash/clickhouse-db/ClickhouseWebClient";
+
+/**
+ * ClickHouse-specific `SqlClient` extension backed by `@clickhouse/client-web`.
+ */
+export interface ClickhouseWebClient extends Client.SqlClient {
+  readonly [TypeId]: TypeId;
+  readonly config: ClickhouseWebClientConfig;
+  readonly param: (dataType: string, value: unknown) => Statement.Fragment;
+  readonly asCommand: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+  readonly insertQuery: <T = unknown>(options: {
+    readonly table: string;
+    readonly values: WebInsertValues<T>;
+    readonly format?: Clickhouse.DataFormat;
+  }) => Effect.Effect<Clickhouse.InsertResult, SqlError>;
+  readonly withQueryId: {
+    (queryId: string): <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+    <A, E, R>(effect: Effect.Effect<A, E, R>, queryId: string): Effect.Effect<A, E, R>;
+  };
+  /**
+   * Tag the wrapped statements with a ClickHouse quota key (sent as the
+   * `X-ClickHouse-Quota` header). A `KEYED BY client_key` quota only isolates
+   * principals when each request carries a stable per-principal key.
+   */
+  readonly withQuotaKey: {
+    (quotaKey: string): <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+    <A, E, R>(effect: Effect.Effect<A, E, R>, quotaKey: string): Effect.Effect<A, E, R>;
+  };
+  readonly withClickhouseSettings: {
+    (
+      settings: NonNullable<Clickhouse.BaseQueryParams["clickhouse_settings"]>,
+    ): <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+    <A, E, R>(
+      effect: Effect.Effect<A, E, R>,
+      settings: NonNullable<Clickhouse.BaseQueryParams["clickhouse_settings"]>,
+    ): Effect.Effect<A, E, R>;
+  };
+}
+
+/**
+ * Context service tag for accessing the active `ClickhouseWebClient`.
+ */
+export const ClickhouseWebClient = Context.Service<ClickhouseWebClient>(
+  "@voidhash/clickhouse-db/ClickhouseWebClient",
+);
+
+/**
+ * Configuration for creating a web ClickHouse client.
+ */
+export interface ClickhouseWebClientConfig extends Clickhouse.ClickHouseClientConfigOptions {
+  readonly spanAttributes?: Record<string, unknown> | undefined;
+  readonly transformResultNames?: ((str: string) => string) | undefined;
+  readonly transformQueryNames?: ((str: string) => string) | undefined;
+}
+
+/**
+ * Creates a scoped `ClickhouseWebClient` and verifies connectivity.
+ */
+export const make = (
+  options: ClickhouseWebClientConfig,
+): Effect.Effect<ClickhouseWebClient, SqlError, Scope.Scope | Reactivity.Reactivity> =>
+  Effect.gen(function* () {
+    const compiler = makeCompiler(options.transformQueryNames);
+    const transformRows = options.transformResultNames
+      ? Statement.defaultTransforms(options.transformResultNames).array
+      : undefined;
+
+    const client = Clickhouse.createClient(options);
+
+    yield* Effect.acquireRelease(
+      Effect.tryPromise({
+        try: async () => {
+          const result = await client.ping();
+          if (!result.success) {
+            throw result.error;
+          }
+        },
+        catch: (cause) =>
+          new SqlError({
+            reason: classifyError(
+              cause,
+              "ClickhouseWebClient: Failed to connect",
+              "connect",
+              "connection",
+            ),
+          }),
+      }),
+      () => Effect.promise(() => client.close()),
+    ).pipe(
+      Effect.timeoutOrElse({
+        duration: Duration.seconds(5),
+        orElse: () =>
+          Effect.fail(
+            new SqlError({
+              reason: new ConnectionError({
+                message: "ClickhouseWebClient: Connection timeout",
+                cause: new Error("connection timeout"),
+                operation: "connect",
+              }),
+            }),
+          ),
+      }),
+    );
+
+    class ConnectionImpl implements Connection {
+      private conn: Clickhouse.ClickHouseClient;
+
+      constructor(conn: Clickhouse.ClickHouseClient) {
+        this.conn = conn;
+      }
+
+      private runRaw(
+        sql: string,
+        params: ReadonlyArray<unknown>,
+        format: Clickhouse.DataFormat = "JSON",
+      ) {
+        const paramsObj: Record<string, unknown> = {};
+        for (let i = 0; i < params.length; i++) {
+          paramsObj[`p${i + 1}`] = params[i];
+        }
+        return Effect.withFiber<
+          Clickhouse.ResultSet<Clickhouse.DataFormat> | Clickhouse.CommandResult,
+          SqlError
+        >((fiber) => {
+          const method = fiber.getRef(ClientMethod);
+          return Effect.callback<
+            Clickhouse.ResultSet<Clickhouse.DataFormat> | Clickhouse.CommandResult,
+            SqlError
+          >((resume) => {
+            const queryId = fiber.getRef(QueryId) ?? makeQueryId();
+            const settings = fiber.getRef(ClickhouseSettings);
+            const controller = new AbortController();
+            if (method === "command") {
+              this.conn
+                .command({
+                  query: sql,
+                  query_params: paramsObj,
+                  abort_signal: controller.signal,
+                  query_id: queryId,
+                  clickhouse_settings: settings,
+                  http_headers: quotaHeaders(fiber.getRef(QuotaKey)),
+                })
+                .then(
+                  (result) => resume(Effect.succeed(result)),
+                  (cause) =>
+                    resume(
+                      Effect.fail(
+                        new SqlError({
+                          reason: classifyError(cause, "Failed to execute statement", "execute"),
+                        }),
+                      ),
+                    ),
+                );
+            } else {
+              this.conn
+                .query({
+                  query: sql,
+                  query_params: paramsObj,
+                  abort_signal: controller.signal,
+                  query_id: queryId,
+                  clickhouse_settings: settings,
+                  http_headers: quotaHeaders(fiber.getRef(QuotaKey)),
+                  format,
+                })
+                .then(
+                  (result) => resume(Effect.succeed(result)),
+                  (cause) =>
+                    resume(
+                      Effect.fail(
+                        new SqlError({
+                          reason: classifyError(cause, "Failed to execute statement", "execute"),
+                        }),
+                      ),
+                    ),
+                );
+            }
+            return Effect.suspend(() => {
+              controller.abort();
+              return Effect.promise(() =>
+                this.conn.command({ query: `KILL QUERY WHERE query_id = '${queryId}'` }),
+              );
+            });
+          });
+        });
+      }
+
+      private run(sql: string, params: ReadonlyArray<unknown>, format?: Clickhouse.DataFormat) {
+        return this.runRaw(sql, params, format).pipe(
+          Effect.flatMap((result) => {
+            if ("json" in result) {
+              return Effect.promise(() =>
+                result.json().then(
+                  (result) => ("data" in result ? result.data : result) as ReadonlyArray<any>,
+                  () => [],
+                ),
+              );
+            }
+            return Effect.succeed([]);
+          }),
+        );
+      }
+
+      execute(
+        sql: string,
+        params: ReadonlyArray<unknown>,
+        transformRows: (<A extends object>(row: ReadonlyArray<A>) => ReadonlyArray<A>) | undefined,
+      ) {
+        return transformRows
+          ? Effect.map(this.run(sql, params), transformRows)
+          : this.run(sql, params);
+      }
+
+      executeRaw(sql: string, params: ReadonlyArray<unknown>) {
+        return this.runRaw(sql, params);
+      }
+
+      executeValues(sql: string, params: ReadonlyArray<unknown>) {
+        return this.run(sql, params, "JSONCompact");
+      }
+
+      executeUnprepared(sql: string, params: ReadonlyArray<unknown>, transformRows?: any) {
+        return this.execute(sql, params, transformRows);
+      }
+
+      executeStream(
+        sql: string,
+        params: ReadonlyArray<unknown>,
+        transformRows: (<A extends object>(row: ReadonlyArray<A>) => ReadonlyArray<A>) | undefined,
+      ) {
+        return this.runRaw(sql, params, "JSONEachRow").pipe(
+          Effect.map((result) => {
+            if (!("stream" in result)) {
+              return Stream.empty;
+            }
+            return Stream.fromAsyncIterable(
+              result.stream() as AsyncIterable<ReadonlyArray<Clickhouse.Row<any, "JSONEachRow">>>,
+              (cause) =>
+                new SqlError({
+                  reason: classifyError(cause, "Failed to execute stream", "stream"),
+                }),
+            );
+          }),
+          Stream.unwrap,
+          Stream.mapEffect((rows) =>
+            Effect.try({
+              try: () => {
+                const parsed = rows.map((row) => row.json());
+                return transformRows ? transformRows(parsed) : parsed;
+              },
+              catch: (cause) =>
+                new SqlError({
+                  reason: classifyError(cause, "Failed to parse row", "parseRow"),
+                }),
+            }),
+          ),
+          Stream.flattenIterable,
+        );
+      }
+    }
+
+    const connection = new ConnectionImpl(client);
+
+    return Object.assign(
+      yield* Client.make({
+        acquirer: Effect.succeed(connection),
+        compiler,
+        spanAttributes: [
+          ...(options.spanAttributes ? Object.entries(options.spanAttributes) : []),
+          [ATTR_DB_SYSTEM_NAME, "clickhouse"],
+          [ATTR_DB_NAMESPACE, options.database ?? "default"],
+        ],
+        beginTransaction: "BEGIN TRANSACTION",
+        transformRows,
+      }),
+      {
+        [TypeId]: TypeId as TypeId,
+        config: options,
+        param(dataType: string, value: unknown) {
+          return Statement.fragment([clickhouseParam(dataType, value)]);
+        },
+        asCommand<A, E, R>(effect: Effect.Effect<A, E, R>) {
+          return Effect.provideService(effect, ClientMethod, "command");
+        },
+        insertQuery<T = unknown>(options: {
+          readonly table: string;
+          readonly values: WebInsertValues<T>;
+          readonly format?: Clickhouse.DataFormat;
+        }) {
+          return Effect.callback<Clickhouse.InsertResult, SqlError>((resume) => {
+            const fiber = Fiber.getCurrent()!;
+            const queryId = fiber.getRef(QueryId) ?? makeQueryId();
+            const settings = fiber.getRef(ClickhouseSettings);
+            const controller = new AbortController();
+            client
+              .insert({
+                format: "JSONEachRow",
+                ...options,
+                abort_signal: controller.signal,
+                query_id: queryId,
+                clickhouse_settings: settings,
+              })
+              .then(
+                (result) => resume(Effect.succeed(result)),
+                (cause) =>
+                  resume(
+                    Effect.fail(
+                      new SqlError({
+                        reason: classifyError(cause, "Failed to insert data", "insert"),
+                      }),
+                    ),
+                  ),
+              );
+            return Effect.suspend(() => {
+              controller.abort();
+              return Effect.promise(() =>
+                client.command({ query: `KILL QUERY WHERE query_id = '${queryId}'` }),
+              );
+            });
+          });
+        },
+        withQueryId: dual(2, <A, E, R>(effect: Effect.Effect<A, E, R>, queryId: string) =>
+          Effect.provideService(effect, QueryId, queryId),
+        ),
+        withQuotaKey: dual(2, <A, E, R>(effect: Effect.Effect<A, E, R>, quotaKey: string) =>
+          Effect.provideService(effect, QuotaKey, quotaKey),
+        ),
+        withClickhouseSettings: dual(
+          2,
+          <A, E, R>(
+            effect: Effect.Effect<A, E, R>,
+            settings: NonNullable<Clickhouse.BaseQueryParams["clickhouse_settings"]>,
+          ) => Effect.provideService(effect, ClickhouseSettings, settings),
+        ),
+      },
+    );
+  });
+
+/**
+ * Like {@link make}, but builds the underlying `@clickhouse/client-web` client
+ * lazily on first statement and performs NO connectivity check (`ping`).
+ *
+ * This makes a `ClickhouseWebClient` value safe to materialize eagerly even
+ * when the connection vars are not yet available — e.g. during Alchemy's plan
+ * phase, where a Worker's `env` bindings are still empty. `createClient` is
+ * cheap and connectionless, so deferring both it and the `getConfig` read to
+ * the first query means no network call happens until runtime. Because nothing
+ * is eagerly acquired it needs no `Scope` (only `Reactivity`); the web client is
+ * HTTP/stateless and requires no explicit close.
+ *
+ * `getConfig` is a thunk so the connection vars can be read from the Worker
+ * environment at first use rather than at construction time. It is invoked at
+ * most once (memoised), and its result is also exposed via the returned
+ * client's `config` getter.
+ */
+export const makeUnchecked = (
+  getConfig: () => ClickhouseWebClientConfig,
+): Effect.Effect<ClickhouseWebClient, never, Reactivity.Reactivity> =>
+  Effect.gen(function* () {
+    let resolvedConfig: ClickhouseWebClientConfig | undefined;
+    const configOnce = () => (resolvedConfig ??= getConfig());
+    let clientRef: Clickhouse.ClickHouseClient | undefined;
+    const clientOnce = () => (clientRef ??= Clickhouse.createClient(configOnce()));
+
+    const compiler = makeCompiler();
+
+    class ConnectionImpl implements Connection {
+      private runRaw(
+        sql: string,
+        params: ReadonlyArray<unknown>,
+        format: Clickhouse.DataFormat = "JSON",
+      ) {
+        const paramsObj: Record<string, unknown> = {};
+        for (let i = 0; i < params.length; i++) {
+          paramsObj[`p${i + 1}`] = params[i];
+        }
+        return Effect.withFiber<
+          Clickhouse.ResultSet<Clickhouse.DataFormat> | Clickhouse.CommandResult,
+          SqlError
+        >((fiber) => {
+          const method = fiber.getRef(ClientMethod);
+          return Effect.callback<
+            Clickhouse.ResultSet<Clickhouse.DataFormat> | Clickhouse.CommandResult,
+            SqlError
+          >((resume) => {
+            const conn = clientOnce();
+            const queryId = fiber.getRef(QueryId) ?? makeQueryId();
+            const settings = fiber.getRef(ClickhouseSettings);
+            const controller = new AbortController();
+            if (method === "command") {
+              conn
+                .command({
+                  query: sql,
+                  query_params: paramsObj,
+                  abort_signal: controller.signal,
+                  query_id: queryId,
+                  clickhouse_settings: settings,
+                  http_headers: quotaHeaders(fiber.getRef(QuotaKey)),
+                })
+                .then(
+                  (result) => resume(Effect.succeed(result)),
+                  (cause) =>
+                    resume(
+                      Effect.fail(
+                        new SqlError({
+                          reason: classifyError(cause, "Failed to execute statement", "execute"),
+                        }),
+                      ),
+                    ),
+                );
+            } else {
+              conn
+                .query({
+                  query: sql,
+                  query_params: paramsObj,
+                  abort_signal: controller.signal,
+                  query_id: queryId,
+                  clickhouse_settings: settings,
+                  http_headers: quotaHeaders(fiber.getRef(QuotaKey)),
+                  format,
+                })
+                .then(
+                  (result) => resume(Effect.succeed(result)),
+                  (cause) =>
+                    resume(
+                      Effect.fail(
+                        new SqlError({
+                          reason: classifyError(cause, "Failed to execute statement", "execute"),
+                        }),
+                      ),
+                    ),
+                );
+            }
+            return Effect.suspend(() => {
+              controller.abort();
+              return Effect.promise(() =>
+                clientOnce().command({ query: `KILL QUERY WHERE query_id = '${queryId}'` }),
+              );
+            });
+          });
+        });
+      }
+
+      private run(sql: string, params: ReadonlyArray<unknown>, format?: Clickhouse.DataFormat) {
+        return this.runRaw(sql, params, format).pipe(
+          Effect.flatMap((result) => {
+            if ("json" in result) {
+              return Effect.promise(() =>
+                result.json().then(
+                  (result) => ("data" in result ? result.data : result) as ReadonlyArray<any>,
+                  () => [],
+                ),
+              );
+            }
+            return Effect.succeed([]);
+          }),
+        );
+      }
+
+      execute(
+        sql: string,
+        params: ReadonlyArray<unknown>,
+        transformRows: (<A extends object>(row: ReadonlyArray<A>) => ReadonlyArray<A>) | undefined,
+      ) {
+        return transformRows
+          ? Effect.map(this.run(sql, params), transformRows)
+          : this.run(sql, params);
+      }
+
+      executeRaw(sql: string, params: ReadonlyArray<unknown>) {
+        return this.runRaw(sql, params);
+      }
+
+      executeValues(sql: string, params: ReadonlyArray<unknown>) {
+        return this.run(sql, params, "JSONCompact");
+      }
+
+      executeUnprepared(sql: string, params: ReadonlyArray<unknown>, transformRows?: any) {
+        return this.execute(sql, params, transformRows);
+      }
+
+      executeStream(
+        sql: string,
+        params: ReadonlyArray<unknown>,
+        transformRows: (<A extends object>(row: ReadonlyArray<A>) => ReadonlyArray<A>) | undefined,
+      ) {
+        return this.runRaw(sql, params, "JSONEachRow").pipe(
+          Effect.map((result) => {
+            if (!("stream" in result)) {
+              return Stream.empty;
+            }
+            return Stream.fromAsyncIterable(
+              result.stream() as AsyncIterable<ReadonlyArray<Clickhouse.Row<any, "JSONEachRow">>>,
+              (cause) =>
+                new SqlError({
+                  reason: classifyError(cause, "Failed to execute stream", "stream"),
+                }),
+            );
+          }),
+          Stream.unwrap,
+          Stream.mapEffect((rows) =>
+            Effect.try({
+              try: () => {
+                const parsed = rows.map((row) => row.json());
+                return transformRows ? transformRows(parsed) : parsed;
+              },
+              catch: (cause) =>
+                new SqlError({
+                  reason: classifyError(cause, "Failed to parse row", "parseRow"),
+                }),
+            }),
+          ),
+          Stream.flattenIterable,
+        );
+      }
+    }
+
+    const connection = new ConnectionImpl();
+
+    const client = Object.assign(
+      yield* Client.make({
+        acquirer: Effect.succeed(connection),
+        compiler,
+        spanAttributes: [
+          [ATTR_DB_SYSTEM_NAME, "clickhouse"],
+          [ATTR_DB_NAMESPACE, "default"],
+        ],
+        beginTransaction: "BEGIN TRANSACTION",
+      }),
+      {
+        [TypeId]: TypeId as TypeId,
+        param(dataType: string, value: unknown) {
+          return Statement.fragment([clickhouseParam(dataType, value)]);
+        },
+        asCommand<A, E, R>(effect: Effect.Effect<A, E, R>) {
+          return Effect.provideService(effect, ClientMethod, "command");
+        },
+        insertQuery<T = unknown>(options: {
+          readonly table: string;
+          readonly values: WebInsertValues<T>;
+          readonly format?: Clickhouse.DataFormat;
+        }) {
+          return Effect.callback<Clickhouse.InsertResult, SqlError>((resume) => {
+            const fiber = Fiber.getCurrent()!;
+            const conn = clientOnce();
+            const queryId = fiber.getRef(QueryId) ?? makeQueryId();
+            const settings = fiber.getRef(ClickhouseSettings);
+            const controller = new AbortController();
+            conn
+              .insert({
+                format: "JSONEachRow",
+                ...options,
+                abort_signal: controller.signal,
+                query_id: queryId,
+                clickhouse_settings: settings,
+              })
+              .then(
+                (result) => resume(Effect.succeed(result)),
+                (cause) =>
+                  resume(
+                    Effect.fail(
+                      new SqlError({
+                        reason: classifyError(cause, "Failed to insert data", "insert"),
+                      }),
+                    ),
+                  ),
+              );
+            return Effect.suspend(() => {
+              controller.abort();
+              return Effect.promise(() =>
+                clientOnce().command({ query: `KILL QUERY WHERE query_id = '${queryId}'` }),
+              );
+            });
+          });
+        },
+        withQueryId: dual(2, <A, E, R>(effect: Effect.Effect<A, E, R>, queryId: string) =>
+          Effect.provideService(effect, QueryId, queryId),
+        ),
+        withQuotaKey: dual(2, <A, E, R>(effect: Effect.Effect<A, E, R>, quotaKey: string) =>
+          Effect.provideService(effect, QuotaKey, quotaKey),
+        ),
+        withClickhouseSettings: dual(
+          2,
+          <A, E, R>(
+            effect: Effect.Effect<A, E, R>,
+            settings: NonNullable<Clickhouse.BaseQueryParams["clickhouse_settings"]>,
+          ) => Effect.provideService(effect, ClickhouseSettings, settings),
+        ),
+      },
+    );
+
+    // `config` is exposed lazily so reading it never forces the `getConfig`
+    // thunk (and thus the Worker env read) before the first real use.
+    Object.defineProperty(client, "config", { get: configOnce, enumerable: true });
+
+    return client as ClickhouseWebClient;
+  });
+
+/**
+ * Fiber reference read by the low-level ClickHouse connection to choose query
+ * or command execution for statements; defaults to `query`.
+ */
+export const ClientMethod = Context.Reference<"query" | "command" | "insert">(
+  "@voidhash/clickhouse-db/ClickhouseWebClient/ClientMethod",
+  {
+    defaultValue: () => "query",
+  },
+);
+
+/**
+ * Fiber reference for the ClickHouse `query_id` applied to queries and inserts.
+ */
+export const QueryId = Context.Reference<string | undefined>(
+  "@voidhash/clickhouse-db/ClickhouseWebClient/QueryId",
+  { defaultValue: () => undefined },
+);
+
+/**
+ * Fiber reference for the ClickHouse quota key (`X-ClickHouse-Quota` header)
+ * applied to queries, commands, and inserts. Defaults to `undefined` (no header,
+ * empty-key bucket) so existing callers are unaffected.
+ */
+export const QuotaKey = Context.Reference<string | undefined>(
+  "@voidhash/clickhouse-db/ClickhouseWebClient/QuotaKey",
+  { defaultValue: () => undefined },
+);
+
+/**
+ * Fiber reference containing ClickHouse settings to attach to queries,
+ * commands, and inserts.
+ */
+export const ClickhouseSettings: Context.Reference<
+  NonNullable<Clickhouse.BaseQueryParams["clickhouse_settings"]>
+> = Context.Reference("@voidhash/clickhouse-db/ClickhouseWebClient/ClickhouseSettings", {
+  defaultValue: () => ({}),
+});
+
+/**
+ * Provides both `ClickhouseWebClient` and generic `SqlClient` services from a
+ * `Config`-backed ClickHouse client configuration.
+ */
+export const layerConfig: (
+  config: Config.Wrap<ClickhouseWebClientConfig>,
+) => Layer.Layer<ClickhouseWebClient | Client.SqlClient, Config.ConfigError | SqlError> = (
+  config: Config.Wrap<ClickhouseWebClientConfig>,
+): Layer.Layer<ClickhouseWebClient | Client.SqlClient, Config.ConfigError | SqlError> =>
+  Layer.effectContext(
+    Config.unwrap(config).pipe(
+      Effect.flatMap(make),
+      Effect.map((client) =>
+        Context.make(ClickhouseWebClient, client).pipe(Context.add(Client.SqlClient, client)),
+      ),
+    ),
+  ).pipe(Layer.provide(Reactivity.layer));
+
+/**
+ * Provides both `ClickhouseWebClient` and generic `SqlClient` services from a
+ * ClickHouse client configuration.
+ */
+export const layer = (
+  config: ClickhouseWebClientConfig,
+): Layer.Layer<ClickhouseWebClient | Client.SqlClient, Config.ConfigError | SqlError> =>
+  Layer.effectContext(
+    Effect.map(make(config), (client) =>
+      Context.make(ClickhouseWebClient, client).pipe(Context.add(Client.SqlClient, client)),
+    ),
+  ).pipe(Layer.provide(Reactivity.layer));
+
+const typeFromUnknown = (value: unknown): string => {
+  if (Statement.isFragment(value)) {
+    return typeFromUnknown(value.segments[0]);
+  } else if (isClickhouseParam(value)) {
+    return value.paramA;
+  } else if (Array.isArray(value)) {
+    return `Array(${typeFromUnknown(value[0])})`;
+  }
+  switch (typeof value) {
+    case "number":
+      return "Decimal";
+    case "bigint":
+      return "Int64";
+    case "boolean":
+      return "Bool";
+    case "object":
+      if (value instanceof Date) {
+        return "DateTime()";
+      }
+      return "String";
+    default:
+      return "String";
+  }
+};
+
+/**
+ * Creates the SQL statement compiler for ClickHouse.
+ */
+export const makeCompiler = (transform?: (_: string) => string) =>
+  Statement.makeCompiler<ClickhouseCustom>({
+    dialect: "sqlite",
+    placeholder(i, u) {
+      return `{p${i}: ${typeFromUnknown(u)}}`;
+    },
+    onIdentifier: transform
+      ? function (value, withoutTransform) {
+          return withoutTransform ? escape(value) : escape(transform(value));
+        }
+      : escape,
+    onRecordUpdate() {
+      return ["", []];
+    },
+    onCustom(type, placeholder) {
+      return [placeholder(type), [type.paramB]];
+    },
+  });
+
+const escape = Statement.defaultEscape('"');
+
+/**
+ * Custom SQL fragment type used for ClickHouse typed parameters created by
+ * `ClickhouseWebClient.param`.
+ */
+export type ClickhouseCustom = ClickhouseParam;
+
+interface ClickhouseParam extends Statement.Custom<"ClickhouseParam", string, unknown> {}
+
+const clickhouseParam = Statement.custom<ClickhouseParam>("ClickhouseParam");
+const isClickhouseParam = Statement.isCustom<ClickhouseParam>("ClickhouseParam");
diff --git a/packages/clickhouse-db/src/clickhouse-client-web/index.ts b/packages/clickhouse-db/src/clickhouse-client-web/index.ts
new file mode 100644
index 000000000..d84f2f70e
--- /dev/null
+++ b/packages/clickhouse-db/src/clickhouse-client-web/index.ts
@@ -0,0 +1,4 @@
+/**
+ * Worker-safe ClickHouse client for Effect SQL.
+ */
+export * as ClickhouseWebClient from "./ClickhouseWebClient.ts";
diff --git a/packages/clickhouse-db/src/index.ts b/packages/clickhouse-db/src/index.ts
new file mode 100644
index 000000000..835f87086
--- /dev/null
+++ b/packages/clickhouse-db/src/index.ts
@@ -0,0 +1,2 @@
+export * from "./live.ts";
+export { ClickhouseWebClient } from "./clickhouse-client-web/index.ts";
diff --git a/packages/clickhouse-db/src/live.ts b/packages/clickhouse-db/src/live.ts
new file mode 100644
index 000000000..d8f7bde38
--- /dev/null
+++ b/packages/clickhouse-db/src/live.ts
@@ -0,0 +1,82 @@
+import { Effect, Layer } from "effect";
+import { SqlClient, type SqlError } from "effect/unstable/sql";
+
+import { ClickhouseWebClient } from "./clickhouse-client-web/index.ts";
+
+export type ClickhouseDbConfig = {
+  readonly database?: string;
+  readonly url: string;
+  readonly username?: string;
+  readonly password?: string;
+};
+
+export type Migration = readonly [
+  id: number,
+  name: string,
+  effect: Effect.Effect<
+    void,
+    SqlError.SqlError,
+    SqlClient.SqlClient | ClickhouseWebClient.ClickhouseWebClient
+  >,
+];
+
+export type MigrationSet = {
+  readonly tableName: string;
+  readonly migrations: ReadonlyArray<Migration>;
+};
+
+const runMigrationSet = (migrationSet: MigrationSet) =>
+  Layer.effectDiscard(
+    Effect.gen(function* () {
+      const sql = yield* SqlClient.SqlClient;
+      const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+
+      yield* ch.asCommand(sql`
+        CREATE TABLE IF NOT EXISTS ${sql(migrationSet.tableName)}
+        (
+          migration_id Int32,
+          created_at DateTime DEFAULT now(),
+          name String
+        )
+        ENGINE = MergeTree
+        ORDER BY migration_id
+      `);
+
+      const applied = yield* sql`
+        SELECT migration_id FROM ${sql(migrationSet.tableName)} ORDER BY migration_id DESC LIMIT 1
+      `.withoutTransform;
+      const latestId =
+        applied.length > 0 ? (applied[0] as { migration_id: number }).migration_id : -1;
+
+      for (const [id, name, migration] of migrationSet.migrations) {
+        if (id <= latestId) continue;
+        yield* migration;
+        yield* ch.asCommand(sql`
+          INSERT INTO ${sql(migrationSet.tableName)} (migration_id, name)
+          VALUES (${id}, ${name})
+        `);
+      }
+    }),
+  );
+
+/** Builds a scoped ClickHouse client and applies the requested migration sets. */
+export const ClickhouseDbLive = (
+  { database, url, username, password }: ClickhouseDbConfig,
+  migrationSets: ReadonlyArray<MigrationSet> = [],
+) => {
+  const clientLayer = ClickhouseWebClient.layer({
+    database,
+    password,
+    url,
+    username,
+  });
+
+  if (migrationSets.length === 0) {
+    return clientLayer;
+  }
+
+  const migrationLayers = migrationSets.map(runMigrationSet);
+  const allMigrations = migrationLayers.reduce((acc, layer) => acc.pipe(Layer.merge(layer)));
+
+  return allMigrations.pipe(Layer.provideMerge(clientLayer));
+};
diff --git a/packages/clickhouse-db/src/migrations/0001_create_analytics_events.ts b/packages/clickhouse-db/src/migrations/0001_create_analytics_events.ts
new file mode 100644
index 000000000..47ce6356d
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0001_create_analytics_events.ts
@@ -0,0 +1,37 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import { CLICKHOUSE_EVENTS_TABLE } from "../analytics/schema.ts";
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+export default Effect.gen(function* () {
+  const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+  const sql = yield* SqlClient.SqlClient;
+
+  yield* ch.asCommand(sql`
+    CREATE TABLE IF NOT EXISTS ${sql(CLICKHOUSE_EVENTS_TABLE)}
+    (
+      event_id          String,
+      event_name        String,
+
+      event_ts          DateTime64(3),
+      ingestion_ts      DateTime64(3),
+
+      organization_id   String,
+      project_id        String,
+
+      distinct_id       String,
+      session_id        Nullable(String),
+
+      source            LowCardinality(String),
+
+      properties        Map(String, String),
+      context           Map(String, String),
+
+      schema_version    UInt8
+    )
+    ENGINE = MergeTree
+    PARTITION BY toYYYYMM(event_ts)
+    ORDER BY (organization_id, project_id, event_name, event_ts, event_id)
+  `);
+});
diff --git a/packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.test.ts b/packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.test.ts
new file mode 100644
index 000000000..b51083bd1
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.test.ts
@@ -0,0 +1,114 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { migration0002Statements } from "./0002_create_analytics_identity_v2.ts";
+
+describe("migration0002Statements", () => {
+  it("rebuilds processed-event ingestion objects before recreating the materialized view", () => {
+    const dropViewIndex = migration0002Statements.indexOf(
+      "DROP TABLE IF EXISTS event_processed_v2_mv",
+    );
+    const dropKafkaIndex = migration0002Statements.indexOf(
+      "DROP TABLE IF EXISTS event_processed_v2_kafka",
+    );
+    const dropEventsIndex = migration0002Statements.indexOf("DROP TABLE IF EXISTS events_v2");
+    const createEventsIndex = migration0002Statements.findIndex((statement) =>
+      statement.includes("CREATE TABLE events_v2"),
+    );
+    const createKafkaIndex = migration0002Statements.findIndex((statement) =>
+      statement.includes("CREATE TABLE IF NOT EXISTS event_processed_v2_kafka"),
+    );
+    const createViewIndex = migration0002Statements.findIndex((statement) =>
+      statement.includes("CREATE MATERIALIZED VIEW IF NOT EXISTS event_processed_v2_mv"),
+    );
+
+    expect(dropViewIndex).toBeGreaterThanOrEqual(0);
+    expect(dropKafkaIndex).toBe(dropViewIndex + 1);
+    expect(dropEventsIndex).toBe(dropKafkaIndex + 1);
+    expect(createEventsIndex).toBe(dropEventsIndex + 1);
+    expect(createKafkaIndex).toBeGreaterThan(createEventsIndex);
+    expect(createViewIndex).toBeGreaterThan(createKafkaIndex);
+  });
+
+  it("defines events_v2 with the processed-event columns expected by the materialized view", () => {
+    const createEventsTable = migration0002Statements.find((statement) =>
+      statement.includes("CREATE TABLE events_v2"),
+    );
+
+    expect(createEventsTable).toBeDefined();
+    expect(createEventsTable).toContain("event_id String");
+    expect(createEventsTable).toContain("capture_id String");
+    expect(createEventsTable).toContain("event_name String");
+    expect(createEventsTable).toContain("event_ts DateTime64(3)");
+    expect(createEventsTable).toContain("processed_ts DateTime64(3)");
+    expect(createEventsTable).toContain("organization_id String");
+    expect(createEventsTable).toContain("project_id String");
+    expect(createEventsTable).toContain("distinct_id String");
+    expect(createEventsTable).toContain("previous_distinct_id Nullable(String)");
+    expect(createEventsTable).toContain("person_id Nullable(String)");
+    expect(createEventsTable).toContain("identity_mode LowCardinality(String)");
+    expect(createEventsTable).toContain("event_properties String");
+    expect(createEventsTable).toContain("context String");
+    expect(createEventsTable).toContain("route_lane LowCardinality(String)");
+    expect(createEventsTable).toContain("skip_enrichment UInt8");
+    expect(createEventsTable).toContain("source_offset String");
+    expect(createEventsTable).toContain("source_partition Int32");
+    expect(createEventsTable).toContain("source_topic String");
+    expect(createEventsTable).toContain("token String");
+    expect(createEventsTable).toContain("request_path LowCardinality(String)");
+    expect(createEventsTable).toContain("request_id String");
+    expect(createEventsTable).toContain("schema_version UInt8");
+  });
+
+  it("keeps the materialized view aliases aligned with the rebuilt events_v2 schema", () => {
+    const createMaterializedView = migration0002Statements.find((statement) =>
+      statement.includes("CREATE MATERIALIZED VIEW IF NOT EXISTS event_processed_v2_mv"),
+    );
+
+    expect(createMaterializedView).toBeDefined();
+    expect(createMaterializedView).toContain(
+      "JSONExtractString(raw, 'processedEventId') AS event_id",
+    );
+    expect(createMaterializedView).toContain("JSONExtractString(raw, 'captureId') AS capture_id");
+    expect(createMaterializedView).toContain("JSONExtractString(raw, 'event') AS event_name");
+    expect(createMaterializedView).toContain(
+      "parseDateTime64BestEffort(JSONExtractString(raw, 'processedAt'), 3) AS processed_ts",
+    );
+    expect(createMaterializedView).toContain(
+      "nullIf(JSONExtractString(raw, 'previousDistinctId'), '') AS previous_distinct_id",
+    );
+    expect(createMaterializedView).toContain(
+      "nullIf(JSONExtractString(raw, 'identity', 'personId'), '') AS person_id",
+    );
+    expect(createMaterializedView).toContain(
+      "JSONExtractString(raw, 'identity', 'mode') AS identity_mode",
+    );
+    expect(createMaterializedView).toContain(
+      "JSONExtractRaw(raw, 'properties') AS event_properties",
+    );
+    expect(createMaterializedView).toContain(
+      "JSONExtractString(raw, 'routing', 'lane') AS route_lane",
+    );
+    expect(createMaterializedView).toContain(
+      "toUInt8(JSONExtractBool(raw, 'routing', 'skipEnrichment')) AS skip_enrichment",
+    );
+    expect(createMaterializedView).toContain(
+      "JSONExtractString(raw, 'routing', 'sourceOffset') AS source_offset",
+    );
+    expect(createMaterializedView).toContain(
+      "toInt32(JSONExtractInt(raw, 'routing', 'sourcePartition')) AS source_partition",
+    );
+    expect(createMaterializedView).toContain(
+      "JSONExtractString(raw, 'routing', 'sourceTopic') AS source_topic",
+    );
+    expect(createMaterializedView).toContain("JSONExtractString(raw, 'token') AS token");
+    expect(createMaterializedView).toContain(
+      "JSONExtractString(raw, 'request', 'path') AS request_path",
+    );
+    expect(createMaterializedView).toContain(
+      "JSONExtractString(raw, 'request', 'requestId') AS request_id",
+    );
+    expect(createMaterializedView).toContain(
+      "toUInt8(JSONExtractInt(raw, 'schemaVersion')) AS schema_version",
+    );
+  });
+});
diff --git a/packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.ts b/packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.ts
new file mode 100644
index 000000000..cd2d1f45c
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0002_create_analytics_identity_v2.ts
@@ -0,0 +1,199 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import {
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+} from "../analytics/schema.ts";
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+const KAFKA_BROKER_LIST = "redpanda:9092";
+
+export const migration0002Statements = [
+  `DROP TABLE IF EXISTS event_processed_v2_mv`,
+  `DROP TABLE IF EXISTS event_processed_v2_kafka`,
+  `DROP TABLE IF EXISTS ${CLICKHOUSE_EVENTS_TABLE}`,
+  `CREATE TABLE ${CLICKHOUSE_EVENTS_TABLE}
+	(
+		event_id String,
+		capture_id String,
+		event_name String,
+		event_ts DateTime64(3),
+		processed_ts DateTime64(3),
+		organization_id String,
+		project_id String,
+		distinct_id String,
+		previous_distinct_id Nullable(String),
+		person_id Nullable(String),
+		identity_mode LowCardinality(String),
+		event_properties String,
+		context String,
+		route_lane LowCardinality(String),
+		skip_enrichment UInt8,
+		source_offset String,
+		source_partition Int32,
+		source_topic String,
+		token String,
+		request_path LowCardinality(String),
+		request_id String,
+		schema_version UInt8
+	)
+	ENGINE = MergeTree
+	PARTITION BY toYYYYMM(event_ts)
+	ORDER BY (project_id, distinct_id, event_ts, event_id)`,
+  `CREATE TABLE IF NOT EXISTS ${CLICKHOUSE_PERSONS_TABLE}
+	(
+		person_id String,
+		project_id String,
+		primary_distinct_id Nullable(String),
+		email Nullable(String),
+		name Nullable(String),
+		traits String,
+		is_archived UInt8,
+		merged_into_person_id Nullable(String),
+		version UInt64,
+		changed_at DateTime64(3)
+	)
+	ENGINE = ReplacingMergeTree(version)
+	PARTITION BY toYYYYMM(changed_at)
+	ORDER BY (project_id, person_id)`,
+  `CREATE TABLE IF NOT EXISTS ${CLICKHOUSE_PERSON_IDENTITY_TABLE}
+	(
+		project_id String,
+		distinct_id String,
+		previous_distinct_id Nullable(String),
+		person_id String,
+		is_deleted UInt8,
+		version UInt64,
+		changed_at DateTime64(3)
+	)
+	ENGINE = ReplacingMergeTree(version)
+	PARTITION BY toYYYYMM(changed_at)
+	ORDER BY (project_id, distinct_id)`,
+  `CREATE TABLE IF NOT EXISTS ${CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE}
+	(
+		project_id String,
+		distinct_id String,
+		previous_distinct_id Nullable(String),
+		person_id String,
+		is_deleted UInt8,
+		version UInt64,
+		changed_at DateTime64(3)
+	)
+	ENGINE = ReplacingMergeTree(version)
+	PARTITION BY toYYYYMM(changed_at)
+	ORDER BY (project_id, distinct_id)`,
+  `CREATE TABLE IF NOT EXISTS event_processed_v2_kafka
+	(
+		raw String
+	)
+	ENGINE = Kafka
+	SETTINGS
+		kafka_broker_list = '${KAFKA_BROKER_LIST}',
+		kafka_topic_list = 'event.processed.v2',
+		kafka_group_name = 'clickhouse-event-processed-v2',
+		kafka_format = 'JSONAsString',
+		kafka_num_consumers = 1`,
+  `CREATE MATERIALIZED VIEW IF NOT EXISTS event_processed_v2_mv
+	TO ${CLICKHOUSE_EVENTS_TABLE}
+	AS
+	SELECT
+		JSONExtractString(raw, 'processedEventId') AS event_id,
+		JSONExtractString(raw, 'captureId') AS capture_id,
+		JSONExtractString(raw, 'event') AS event_name,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'eventTimestamp'), 3) AS event_ts,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'processedAt'), 3) AS processed_ts,
+		JSONExtractString(raw, 'organizationId') AS organization_id,
+		JSONExtractString(raw, 'projectId') AS project_id,
+		JSONExtractString(raw, 'identity', 'distinctId') AS distinct_id,
+		nullIf(JSONExtractString(raw, 'previousDistinctId'), '') AS previous_distinct_id,
+		nullIf(JSONExtractString(raw, 'identity', 'personId'), '') AS person_id,
+		JSONExtractString(raw, 'identity', 'mode') AS identity_mode,
+		JSONExtractRaw(raw, 'properties') AS event_properties,
+		JSONExtractRaw(raw, 'context') AS context,
+		JSONExtractString(raw, 'routing', 'lane') AS route_lane,
+		toUInt8(JSONExtractBool(raw, 'routing', 'skipEnrichment')) AS skip_enrichment,
+		JSONExtractString(raw, 'routing', 'sourceOffset') AS source_offset,
+		toInt32(JSONExtractInt(raw, 'routing', 'sourcePartition')) AS source_partition,
+		JSONExtractString(raw, 'routing', 'sourceTopic') AS source_topic,
+		JSONExtractString(raw, 'token') AS token,
+		JSONExtractString(raw, 'request', 'path') AS request_path,
+		JSONExtractString(raw, 'request', 'requestId') AS request_id,
+		toUInt8(JSONExtractInt(raw, 'schemaVersion')) AS schema_version
+	FROM event_processed_v2_kafka`,
+  `CREATE TABLE IF NOT EXISTS event_person_v1_kafka
+	(
+		raw String
+	)
+	ENGINE = Kafka
+	SETTINGS
+		kafka_broker_list = '${KAFKA_BROKER_LIST}',
+		kafka_topic_list = 'event.person.v1',
+		kafka_group_name = 'clickhouse-event-person-v1',
+		kafka_format = 'JSONAsString',
+		kafka_num_consumers = 1`,
+  `CREATE MATERIALIZED VIEW IF NOT EXISTS event_person_v1_mv
+	TO ${CLICKHOUSE_PERSONS_TABLE}
+	AS
+	SELECT
+		JSONExtractString(raw, 'personId') AS person_id,
+		JSONExtractString(raw, 'projectId') AS project_id,
+		nullIf(JSONExtractString(raw, 'primaryDistinctId'), '') AS primary_distinct_id,
+		nullIf(JSONExtractString(raw, 'email'), '') AS email,
+		nullIf(JSONExtractString(raw, 'name'), '') AS name,
+		JSONExtractRaw(raw, 'traits') AS traits,
+		toUInt8(JSONExtractBool(raw, 'isArchived')) AS is_archived,
+		nullIf(JSONExtractString(raw, 'mergedIntoPersonId'), '') AS merged_into_person_id,
+		toUInt64(JSONExtractInt(raw, 'version')) AS version,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'changedAt'), 3) AS changed_at
+	FROM event_person_v1_kafka`,
+  `CREATE TABLE IF NOT EXISTS event_person_identity_v1_kafka
+	(
+		raw String
+	)
+	ENGINE = Kafka
+	SETTINGS
+		kafka_broker_list = '${KAFKA_BROKER_LIST}',
+		kafka_topic_list = 'event.person-distinct-id.v1',
+		kafka_group_name = 'clickhouse-event-person-identity-v1',
+		kafka_format = 'JSONAsString',
+		kafka_num_consumers = 1`,
+  `CREATE MATERIALIZED VIEW IF NOT EXISTS event_person_identity_v1_mv
+	TO ${CLICKHOUSE_PERSON_IDENTITY_TABLE}
+	AS
+	SELECT
+		JSONExtractString(raw, 'projectId') AS project_id,
+		JSONExtractString(raw, 'distinctId') AS distinct_id,
+		nullIf(JSONExtractString(raw, 'previousDistinctId'), '') AS previous_distinct_id,
+		JSONExtractString(raw, 'personId') AS person_id,
+		toUInt8(JSONExtractBool(raw, 'isDeleted')) AS is_deleted,
+		toUInt64(JSONExtractInt(raw, 'version')) AS version,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'changedAt'), 3) AS changed_at
+	FROM event_person_identity_v1_kafka`,
+  `CREATE MATERIALIZED VIEW IF NOT EXISTS event_person_identity_overrides_v1_mv
+	TO ${CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE}
+	AS
+	SELECT
+		JSONExtractString(raw, 'projectId') AS project_id,
+		JSONExtractString(raw, 'distinctId') AS distinct_id,
+		nullIf(JSONExtractString(raw, 'previousDistinctId'), '') AS previous_distinct_id,
+		JSONExtractString(raw, 'personId') AS person_id,
+		toUInt8(JSONExtractBool(raw, 'isDeleted')) AS is_deleted,
+		toUInt64(JSONExtractInt(raw, 'version')) AS version,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'changedAt'), 3) AS changed_at
+	FROM event_person_identity_v1_kafka
+	WHERE
+		toUInt64(JSONExtractInt(raw, 'version')) > 0
+		AND nullIf(JSONExtractString(raw, 'previousDistinctId'), '') IS NOT NULL`,
+] as const;
+
+export default Effect.gen(function* () {
+  const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+  const sql = yield* SqlClient.SqlClient;
+
+  for (const statement of migration0002Statements) {
+    yield* ch.asCommand(sql`${sql.literal(statement)}`);
+  }
+});
diff --git a/packages/clickhouse-db/src/migrations/0003_create_analytics_identity_pending_overrides_v2.ts b/packages/clickhouse-db/src/migrations/0003_create_analytics_identity_pending_overrides_v2.ts
new file mode 100644
index 000000000..d9d64e182
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0003_create_analytics_identity_pending_overrides_v2.ts
@@ -0,0 +1,134 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import {
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+} from "../analytics/schema.ts";
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+const KAFKA_BROKER_LIST = "redpanda:9092";
+
+const statements = [
+  `CREATE TABLE IF NOT EXISTS ${CLICKHOUSE_PERSON_IDENTITY_TABLE}
+	(
+		project_id String,
+		distinct_id String,
+		previous_distinct_id Nullable(String),
+		person_id String,
+		is_deleted UInt8,
+		version UInt64,
+		changed_at DateTime64(3)
+	)
+	ENGINE = ReplacingMergeTree(version)
+	PARTITION BY toYYYYMM(changed_at)
+	ORDER BY (project_id, distinct_id)`,
+  `CREATE TABLE IF NOT EXISTS ${CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE}
+	(
+		project_id String,
+		distinct_id String,
+		previous_distinct_id Nullable(String),
+		person_id String,
+		is_deleted UInt8,
+		version UInt64,
+		changed_at DateTime64(3)
+	)
+	ENGINE = ReplacingMergeTree(version)
+	PARTITION BY toYYYYMM(changed_at)
+	ORDER BY (project_id, distinct_id)`,
+  `CREATE TABLE IF NOT EXISTS event_person_identity_v1_kafka
+	(
+		raw String
+	)
+	ENGINE = Kafka
+	SETTINGS
+		kafka_broker_list = '${KAFKA_BROKER_LIST}',
+		kafka_topic_list = 'event.person-distinct-id.v1',
+		kafka_group_name = 'clickhouse-event-person-identity-v1',
+		kafka_format = 'JSONAsString',
+		kafka_num_consumers = 1`,
+  `CREATE MATERIALIZED VIEW IF NOT EXISTS event_person_identity_v1_mv
+	TO ${CLICKHOUSE_PERSON_IDENTITY_TABLE}
+	AS
+	SELECT
+		JSONExtractString(raw, 'projectId') AS project_id,
+		JSONExtractString(raw, 'distinctId') AS distinct_id,
+		nullIf(JSONExtractString(raw, 'previousDistinctId'), '') AS previous_distinct_id,
+		JSONExtractString(raw, 'personId') AS person_id,
+		toUInt8(JSONExtractBool(raw, 'isDeleted')) AS is_deleted,
+		toUInt64(JSONExtractInt(raw, 'version')) AS version,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'changedAt'), 3) AS changed_at
+	FROM event_person_identity_v1_kafka`,
+  `CREATE MATERIALIZED VIEW IF NOT EXISTS event_person_identity_overrides_v1_mv
+	TO ${CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE}
+	AS
+	SELECT
+		JSONExtractString(raw, 'projectId') AS project_id,
+		JSONExtractString(raw, 'distinctId') AS distinct_id,
+		nullIf(JSONExtractString(raw, 'previousDistinctId'), '') AS previous_distinct_id,
+		JSONExtractString(raw, 'personId') AS person_id,
+		toUInt8(JSONExtractBool(raw, 'isDeleted')) AS is_deleted,
+		toUInt64(JSONExtractInt(raw, 'version')) AS version,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'changedAt'), 3) AS changed_at
+	FROM event_person_identity_v1_kafka
+	WHERE
+		toUInt64(JSONExtractInt(raw, 'version')) > 0
+		AND nullIf(JSONExtractString(raw, 'previousDistinctId'), '') IS NOT NULL`,
+  `CREATE TABLE IF NOT EXISTS ${CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE}
+	(
+		project_id String,
+		source_distinct_id String,
+		target_distinct_id String,
+		person_id String,
+		is_deleted UInt8,
+		version UInt64,
+		changed_at DateTime64(3)
+	)
+	ENGINE = ReplacingMergeTree(version)
+	PARTITION BY toYYYYMM(changed_at)
+	ORDER BY (project_id, source_distinct_id)`,
+  `CREATE MATERIALIZED VIEW IF NOT EXISTS event_person_identity_pending_overrides_v2_mv
+	TO ${CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE}
+	AS
+	SELECT
+		JSONExtractString(raw, 'projectId') AS project_id,
+		JSONExtractString(raw, 'previousDistinctId') AS source_distinct_id,
+		JSONExtractString(raw, 'distinctId') AS target_distinct_id,
+		JSONExtractString(raw, 'personId') AS person_id,
+		toUInt8(JSONExtractBool(raw, 'isDeleted')) AS is_deleted,
+		toUInt64(JSONExtractInt(raw, 'version')) AS version,
+		parseDateTime64BestEffort(JSONExtractString(raw, 'changedAt'), 3) AS changed_at
+	FROM event_person_identity_v1_kafka
+	WHERE
+		toUInt64(JSONExtractInt(raw, 'version')) > 0
+		AND nullIf(JSONExtractString(raw, 'previousDistinctId'), '') IS NOT NULL`,
+  `INSERT INTO ${CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE}
+	(
+		project_id,
+		source_distinct_id,
+		target_distinct_id,
+		person_id,
+		is_deleted,
+		version,
+		changed_at
+	)
+	SELECT
+		project_id,
+		previous_distinct_id AS source_distinct_id,
+		distinct_id AS target_distinct_id,
+		person_id,
+		is_deleted,
+		version,
+		changed_at
+	FROM ${CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE}`,
+] as const;
+
+export default Effect.gen(function* () {
+  const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+  const sql = yield* SqlClient.SqlClient;
+
+  for (const statement of statements) {
+    yield* ch.asCommand(sql`${sql.literal(statement)}`);
+  }
+});
diff --git a/packages/clickhouse-db/src/migrations/0004_person_identity_cutover.ts b/packages/clickhouse-db/src/migrations/0004_person_identity_cutover.ts
new file mode 100644
index 000000000..a31c562a3
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0004_person_identity_cutover.ts
@@ -0,0 +1,15 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+const statements = [] as const;
+
+export default Effect.gen(function* () {
+  const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+  const sql = yield* SqlClient.SqlClient;
+
+  for (const statement of statements) {
+    yield* ch.asCommand(sql`${sql.literal(statement)}`);
+  }
+});
diff --git a/packages/clickhouse-db/src/migrations/0005_align_analytics_identity_tables.ts b/packages/clickhouse-db/src/migrations/0005_align_analytics_identity_tables.ts
new file mode 100644
index 000000000..68db20dab
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0005_align_analytics_identity_tables.ts
@@ -0,0 +1,103 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import {
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+} from "../analytics/schema.ts";
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+interface DescribeColumnRow {
+  name: string;
+}
+
+const getColumnNames = (table: string) =>
+  Effect.gen(function* getColumnNamesEffect() {
+    const sql = yield* SqlClient.SqlClient;
+    const rows = yield* sql<DescribeColumnRow>`
+      DESCRIBE TABLE ${sql.literal(table)}
+    `;
+
+    return new Set(rows.map((row) => row.name));
+  });
+
+const execute = (statement: string) =>
+  Effect.gen(function* executeEffect() {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const sql = yield* SqlClient.SqlClient;
+    yield* ch.asCommand(sql`${sql.literal(statement)}`);
+  });
+
+const addColumnFromLegacy = ({
+  columns,
+  fallbackType,
+  legacyExpression,
+  name,
+  table,
+}: {
+  columns: ReadonlySet<string>;
+  fallbackType: string;
+  legacyExpression?: string;
+  name: string;
+  table: string;
+}) => {
+  if (columns.has(name)) {
+    return Effect.void;
+  }
+
+  const expression = legacyExpression ? ` DEFAULT ${legacyExpression}` : "";
+  return execute(
+    `ALTER TABLE ${table} ADD COLUMN IF NOT EXISTS ${name} ${fallbackType}${expression}`,
+  );
+};
+
+export default Effect.gen(function* alignAnalyticsIdentityTables() {
+  const eventColumns = yield* getColumnNames(CLICKHOUSE_EVENTS_TABLE);
+  if (!eventColumns.has("previous_distinct_id")) {
+    yield* execute(
+      `ALTER TABLE ${CLICKHOUSE_EVENTS_TABLE} ADD COLUMN IF NOT EXISTS previous_distinct_id Nullable(String) AFTER distinct_id`,
+    );
+  }
+
+  const personColumns = yield* getColumnNames(CLICKHOUSE_PERSONS_TABLE);
+  yield* addColumnFromLegacy({
+    columns: personColumns,
+    fallbackType: "String",
+    legacyExpression: personColumns.has("customer_id") ? "customer_id" : undefined,
+    name: "person_id",
+    table: CLICKHOUSE_PERSONS_TABLE,
+  });
+  yield* addColumnFromLegacy({
+    columns: personColumns,
+    fallbackType: "Nullable(String)",
+    legacyExpression: personColumns.has("app_user_id") ? "nullIf(app_user_id, '')" : undefined,
+    name: "primary_distinct_id",
+    table: CLICKHOUSE_PERSONS_TABLE,
+  });
+  yield* addColumnFromLegacy({
+    columns: personColumns,
+    fallbackType: "String",
+    legacyExpression: personColumns.has("properties") ? "properties" : undefined,
+    name: "traits",
+    table: CLICKHOUSE_PERSONS_TABLE,
+  });
+  yield* addColumnFromLegacy({
+    columns: personColumns,
+    fallbackType: "Nullable(String)",
+    legacyExpression: personColumns.has("parent_customer_id") ? "parent_customer_id" : undefined,
+    name: "merged_into_person_id",
+    table: CLICKHOUSE_PERSONS_TABLE,
+  });
+
+  const pendingOverrideColumns = yield* getColumnNames(
+    CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  );
+  yield* addColumnFromLegacy({
+    columns: pendingOverrideColumns,
+    fallbackType: "String",
+    legacyExpression: pendingOverrideColumns.has("customer_id") ? "customer_id" : undefined,
+    name: "person_id",
+    table: CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  });
+});
diff --git a/packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.test.ts b/packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.test.ts
new file mode 100644
index 000000000..7e0dec427
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { analyticsEventsMigrations } from "../analytics/migration.ts";
+import { buildAddPendingOverridePersonIdStatement } from "./0006_repair_pending_overrides_person_id.ts";
+
+describe("migration0006", () => {
+  it("adds a person_id compatibility column from legacy customer_id", () => {
+    expect(buildAddPendingOverridePersonIdStatement("person_identity_pending_overrides_v2")).toBe(
+      "ALTER TABLE person_identity_pending_overrides_v2 ADD COLUMN IF NOT EXISTS person_id String DEFAULT customer_id AFTER customer_id",
+    );
+  });
+
+  it("is registered after the earlier alignment migration", () => {
+    expect(analyticsEventsMigrations.migrations.map(([id, name]) => [id, name])).toContainEqual([
+      6,
+      "0006_repair_pending_overrides_person_id",
+    ]);
+  });
+});
diff --git a/packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.ts b/packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.ts
new file mode 100644
index 000000000..5e7a3b958
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0006_repair_pending_overrides_person_id.ts
@@ -0,0 +1,41 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import { CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE } from "../analytics/schema.ts";
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+interface DescribeColumnRow {
+  name: string;
+}
+
+export const buildAddPendingOverridePersonIdStatement = (table: string): string =>
+  `ALTER TABLE ${table} ADD COLUMN IF NOT EXISTS person_id String DEFAULT customer_id AFTER customer_id`;
+
+const getColumnNames = (table: string) =>
+  Effect.gen(function* getColumnNamesEffect() {
+    const sql = yield* SqlClient.SqlClient;
+    const rows = yield* sql<DescribeColumnRow>`
+      DESCRIBE TABLE ${sql.literal(table)}
+    `;
+
+    return new Set(rows.map((row) => row.name));
+  });
+
+const execute = (statement: string) =>
+  Effect.gen(function* executeEffect() {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const sql = yield* SqlClient.SqlClient;
+    yield* ch.asCommand(sql`${sql.literal(statement)}`);
+  });
+
+export default Effect.gen(function* repairPendingOverridesPersonId() {
+  const columns = yield* getColumnNames(CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE);
+
+  if (columns.has("person_id") || !columns.has("customer_id")) {
+    return;
+  }
+
+  yield* execute(
+    buildAddPendingOverridePersonIdStatement(CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE),
+  );
+});
diff --git a/packages/clickhouse-db/src/migrations/0007_add_organization_id_to_identity_tables.ts b/packages/clickhouse-db/src/migrations/0007_add_organization_id_to_identity_tables.ts
new file mode 100644
index 000000000..3a4a3b7db
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0007_add_organization_id_to_identity_tables.ts
@@ -0,0 +1,85 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import {
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+} from "../analytics/schema.ts";
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+/**
+ * Person/identity tables that are keyed by `project_id` and gain an
+ * `organization_id` so the readonly analytics user's per-tenant row policies
+ * can isolate them (events_v2 already carries `organization_id`).
+ */
+const IDENTITY_TABLES = [
+  CLICKHOUSE_PERSONS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+] as const;
+
+/** Transient `project_id -> organization_id` lookup used only during backfill. */
+const ORG_BACKFILL_JOIN = "person_org_backfill_join_0007" as const;
+
+const execute = (statement: string) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const sql = yield* SqlClient.SqlClient;
+    yield* ch.asCommand(sql`${sql.literal(statement)}`);
+  });
+
+/**
+ * Adds `organization_id` to the four person/identity tables and backfills it
+ * from the authoritative `project_id -> organization_id` mapping carried by
+ * `events_v2`. New rows are stamped by the writer (it resolves the org from
+ * MySQL); this migration covers rows that predate the writer change.
+ *
+ * Idempotent: the `WHERE organization_id = ''` guard means a re-run after a
+ * crash only touches still-unset rows, and the `ADD COLUMN IF NOT EXISTS` /
+ * `DROP TABLE IF EXISTS` statements converge. Mutations run with
+ * `mutations_sync = 1` so the migration waits for each rewrite to finish.
+ *
+ * Known limitation: a project with person/identity rows but zero `events_v2`
+ * rows has no entry in the join and keeps `organization_id = ''` (invisible to
+ * the readonly user) until a new event for it lands.
+ */
+export default Effect.gen(function* () {
+  for (const table of IDENTITY_TABLES) {
+    yield* execute(
+      `ALTER TABLE ${table} ADD COLUMN IF NOT EXISTS organization_id String DEFAULT '' AFTER project_id`,
+    );
+  }
+
+  yield* execute(`DROP TABLE IF EXISTS ${ORG_BACKFILL_JOIN}`);
+  yield* execute(
+    `CREATE TABLE ${ORG_BACKFILL_JOIN}
+       (project_id String, organization_id String)
+       ENGINE = Join(ANY, LEFT, project_id)`,
+  );
+  yield* execute(
+    `INSERT INTO ${ORG_BACKFILL_JOIN}
+       SELECT project_id, any(source_organization_id) AS organization_id
+       FROM (
+         SELECT project_id, organization_id AS source_organization_id
+         FROM ${CLICKHOUSE_EVENTS_TABLE}
+         WHERE organization_id != ''
+       )
+       GROUP BY project_id`,
+  );
+
+  for (const table of IDENTITY_TABLES) {
+    yield* execute(
+      `ALTER TABLE ${table}
+         UPDATE organization_id = joinGet('${ORG_BACKFILL_JOIN}', 'organization_id', project_id)
+         WHERE organization_id = ''
+           AND joinGet('${ORG_BACKFILL_JOIN}', 'organization_id', project_id) != ''
+         SETTINGS mutations_sync = 1`,
+    );
+  }
+
+  yield* execute(`DROP TABLE IF EXISTS ${ORG_BACKFILL_JOIN}`);
+});
diff --git a/packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.test.ts b/packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.test.ts
new file mode 100644
index 000000000..34481da76
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.test.ts
@@ -0,0 +1,39 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { analyticsEventsMigrations } from "../analytics/migration.ts";
+import {
+  buildAddOrganizationIdStatement,
+  buildBackfillOrganizationIdStatement,
+  buildCreateOrgBackfillJoinStatement,
+  buildPopulateOrgBackfillJoinStatement,
+} from "./0008_repair_identity_organization_id.ts";
+
+describe("migration0008", () => {
+  it("adds the organization_id compatibility column", () => {
+    expect(buildAddOrganizationIdStatement("person_identity_pending_overrides_v2")).toBe(
+      "ALTER TABLE person_identity_pending_overrides_v2 ADD COLUMN IF NOT EXISTS organization_id String DEFAULT '' AFTER project_id",
+    );
+  });
+
+  it("builds the transient backfill join", () => {
+    expect(buildCreateOrgBackfillJoinStatement("person_org_backfill_join_0008")).toContain(
+      "ENGINE = Join(ANY, LEFT, project_id)",
+    );
+    expect(buildPopulateOrgBackfillJoinStatement("person_org_backfill_join_0008")).toContain(
+      "FROM events_v2",
+    );
+    expect(
+      buildBackfillOrganizationIdStatement(
+        "person_identity_pending_overrides_v2",
+        "person_org_backfill_join_0008",
+      ),
+    ).toContain("SETTINGS mutations_sync = 1");
+  });
+
+  it("is registered after the original organization-id migration", () => {
+    expect(analyticsEventsMigrations.migrations.map(([id, name]) => [id, name])).toContainEqual([
+      8,
+      "0008_repair_identity_organization_id",
+    ]);
+  });
+});
diff --git a/packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.ts b/packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.ts
new file mode 100644
index 000000000..d84b5a9d8
--- /dev/null
+++ b/packages/clickhouse-db/src/migrations/0008_repair_identity_organization_id.ts
@@ -0,0 +1,72 @@
+import { Effect } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import {
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+} from "../analytics/schema.ts";
+import { ClickhouseWebClient } from "../clickhouse-client-web/index.ts";
+
+const IDENTITY_TABLES = [
+  CLICKHOUSE_PERSONS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+] as const;
+
+const ORG_BACKFILL_JOIN = "person_org_backfill_join_0008" as const;
+
+/** Build the idempotent `organization_id` column repair for an identity table. */
+export const buildAddOrganizationIdStatement = (table: string): string =>
+  `ALTER TABLE ${table} ADD COLUMN IF NOT EXISTS organization_id String DEFAULT '' AFTER project_id`;
+
+/** Build the transient project-to-organization join table used by the backfill. */
+export const buildCreateOrgBackfillJoinStatement = (joinTable: string): string =>
+  `CREATE TABLE ${joinTable}
+       (project_id String, organization_id String)
+       ENGINE = Join(ANY, LEFT, project_id)`;
+
+/** Build the statement that loads the transient organization lookup from events. */
+export const buildPopulateOrgBackfillJoinStatement = (joinTable: string): string =>
+  `INSERT INTO ${joinTable}
+       SELECT project_id, any(source_organization_id) AS organization_id
+       FROM (
+         SELECT project_id, organization_id AS source_organization_id
+         FROM ${CLICKHOUSE_EVENTS_TABLE}
+         WHERE organization_id != ''
+       )
+       GROUP BY project_id`;
+
+/** Build the mutation that fills missing organization ids for one identity table. */
+export const buildBackfillOrganizationIdStatement = (table: string, joinTable: string): string =>
+  `ALTER TABLE ${table}
+         UPDATE organization_id = joinGet('${joinTable}', 'organization_id', project_id)
+         WHERE organization_id = ''
+           AND joinGet('${joinTable}', 'organization_id', project_id) != ''
+         SETTINGS mutations_sync = 1`;
+
+const execute = (statement: string) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const sql = yield* SqlClient.SqlClient;
+    yield* ch.asCommand(sql`${sql.literal(statement)}`);
+  });
+
+export default Effect.gen(function* repairIdentityOrganizationId() {
+  for (const table of IDENTITY_TABLES) {
+    yield* execute(buildAddOrganizationIdStatement(table));
+  }
+
+  yield* execute(`DROP TABLE IF EXISTS ${ORG_BACKFILL_JOIN}`);
+  yield* execute(buildCreateOrgBackfillJoinStatement(ORG_BACKFILL_JOIN));
+  yield* execute(buildPopulateOrgBackfillJoinStatement(ORG_BACKFILL_JOIN));
+
+  for (const table of IDENTITY_TABLES) {
+    yield* execute(buildBackfillOrganizationIdStatement(table, ORG_BACKFILL_JOIN));
+  }
+
+  yield* execute(`DROP TABLE IF EXISTS ${ORG_BACKFILL_JOIN}`);
+});
diff --git a/packages/clickhouse-db/sst-env.d.ts b/packages/clickhouse-db/sst-env.d.ts
new file mode 100644
index 000000000..661beaa1f
--- /dev/null
+++ b/packages/clickhouse-db/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../../sst-env.d.ts" />
+
+import "sst";
+export {};
diff --git a/packages/clickhouse-db/tsconfig.json b/packages/clickhouse-db/tsconfig.json
new file mode 100644
index 000000000..c530b0614
--- /dev/null
+++ b/packages/clickhouse-db/tsconfig.json
@@ -0,0 +1,5 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/core/LICENSE.md b/packages/core/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/core/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/core/design.generated.ts b/packages/core/design.generated.ts
new file mode 100644
index 000000000..dd5615d46
--- /dev/null
+++ b/packages/core/design.generated.ts
@@ -0,0 +1,29 @@
+/// <reference types="vite/client" />
+import { fromConfig } from "fumadocs-mdx/runtime/vite";
+import type * as Config from "./src/features/design/source.config";
+
+export const create = fromConfig<typeof Config>();
+
+export const docs = {
+  doc: create.doc(
+    "docs",
+    "./src/features/design/content/docs",
+    import.meta.glob(["./**/*.{mdx,md}"], {
+      base: "./src/features/design/content/docs",
+      query: {
+        collection: "docs",
+      },
+    }),
+  ),
+  meta: create.meta(
+    "docs",
+    "./src/features/design/content/docs",
+    import.meta.glob(["./**/*.{json,yaml}"], {
+      import: "default",
+      base: "./src/features/design/content/docs",
+      query: {
+        collection: "docs",
+      },
+    }),
+  ),
+};
diff --git a/packages/core/docs.generated.ts b/packages/core/docs.generated.ts
new file mode 100644
index 000000000..efe85dbc8
--- /dev/null
+++ b/packages/core/docs.generated.ts
@@ -0,0 +1,29 @@
+/// <reference types="vite/client" />
+import { fromConfig } from "fumadocs-mdx/runtime/vite";
+import type * as Config from "./src/features/docs/source.config";
+
+export const create = fromConfig<typeof Config>();
+
+export const docs = {
+  doc: create.doc(
+    "docs",
+    "./src/features/docs/content/docs",
+    import.meta.glob(["./**/*.{mdx,md}"], {
+      base: "./src/features/docs/content/docs",
+      query: {
+        collection: "docs",
+      },
+    }),
+  ),
+  meta: create.meta(
+    "docs",
+    "./src/features/docs/content/docs",
+    import.meta.glob(["./**/*.{json,yaml}"], {
+      import: "default",
+      base: "./src/features/docs/content/docs",
+      query: {
+        collection: "docs",
+      },
+    }),
+  ),
+};
diff --git a/packages/core/package.json b/packages/core/package.json
new file mode 100644
index 000000000..8cc9217bb
--- /dev/null
+++ b/packages/core/package.json
@@ -0,0 +1,174 @@
+{
+  "name": "@voidhash/core",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "main": "./index.ts",
+  "exports": {
+    "./domain/auth/Auth": "./src/domain/auth/Auth.ts",
+    "./domain/auth/LocalUserSession": "./src/domain/auth/LocalUserSession.ts",
+    "./domain/user/User": "./src/domain/user/User.ts",
+    "./domain/shared/Money": "./src/domain/shared/Money.ts",
+    "./domain/apiKey/ApiKey": "./src/domain/apiKey/ApiKey.ts",
+    "./domain/featureFlag/FeatureFlag": "./src/domain/featureFlag/FeatureFlag.ts",
+    "./domain/fxRate/FxRate": "./src/domain/fxRate/FxRate.ts",
+    "./domain/internalAnalytics/InternalAnalyticsEvents": "./src/domain/internalAnalytics/InternalAnalyticsEvents.ts",
+    "./domain/organization/Organization": "./src/domain/organization/Organization.ts",
+    "./domain/paymentProvider/PaymentProviderConfiguration": "./src/domain/paymentProvider/PaymentProviderConfiguration.ts",
+    "./domain/paymentProvider/PaymentProviderProduct": "./src/domain/paymentProvider/PaymentProviderProduct.ts",
+    "./domain/paymentProvider/SubscriptionTransfer": "./src/domain/paymentProvider/SubscriptionTransfer.ts",
+    "./domain/paywall/Paywall": "./src/domain/paywall/Paywall.ts",
+    "./domain/paywallLocation/PaywallLocation": "./src/domain/paywallLocation/PaywallLocation.ts",
+    "./domain/perk/Perk": "./src/domain/perk/Perk.ts",
+    "./domain/person/Person": "./src/domain/person/Person.ts",
+    "./domain/product/Product": "./src/domain/product/Product.ts",
+    "./domain/project/Project": "./src/domain/project/Project.ts",
+    "./domain/purchaseProcessing/PurchaseProcessing": "./src/domain/purchaseProcessing/PurchaseProcessing.ts",
+    "./domain/schema/Schema": "./src/domain/schema/Schema.ts",
+    "./domain/sdkPerson/SdkPerson": "./src/domain/sdkPerson/SdkPerson.ts",
+    "./domain/webhook/Webhook": "./src/domain/webhook/Webhook.ts",
+    "./utils": "./src/utils/index.ts",
+    "./utils/crypto/PaymentConfigSecretCrypto": "./src/utils/crypto/PaymentConfigSecretCrypto.ts",
+    "./utils/crypto/SecretBox": "./src/utils/crypto/SecretBox.ts",
+    "./utils/crypto/account-token": "./src/utils/crypto/account-token.ts",
+    "./utils/generate-id": "./src/utils/generate-id.ts",
+    "./services/personIdentity/IdentityMutationService": "./src/services/personIdentity/IdentityMutationService.ts",
+    "./services/paymentProviders/appStore/payment-provider": "./src/services/paymentProviders/appStore/payment-provider.ts",
+    "./services/paymentProviders/appStore/payment-provider-service-queries": "./src/services/paymentProviders/appStore/payment-provider-service-queries.ts",
+    "./services/paymentProviders/appStore/app-store-reconciliation-service": "./src/services/paymentProviders/appStore/app-store-reconciliation-service.ts",
+    "./services/paymentProviders/appStore/app-store-webhook-handler-service": "./src/services/paymentProviders/appStore/app-store-webhook-handler-service.ts",
+    "./services/paymentProviders/googlePlay/payment-provider": "./src/services/paymentProviders/googlePlay/payment-provider.ts",
+    "./services/paymentProviders/googlePlay/payment-provider-service-queries": "./src/services/paymentProviders/googlePlay/payment-provider-service-queries.ts",
+    "./services/paymentProviders/googlePlay/webhook-handler-service": "./src/services/paymentProviders/googlePlay/webhook-handler-service.ts",
+    "./services/paymentProviders/googlePlay/sdk-context": "./src/services/paymentProviders/googlePlay/sdk-context.ts",
+    "./domain/analytics/Analytics": "./src/domain/analytics/Analytics.ts",
+    "./domain/analyticsIngest/AnalyticsIngest": "./src/domain/analyticsIngest/AnalyticsIngest.ts",
+    "./services": "./src/services/index.ts",
+    "./services/analytics/AnalyticsService": "./src/services/analytics/AnalyticsService.ts",
+    "./services/analyticsIngest/AnalyticsDispatchService": "./src/services/analyticsIngest/AnalyticsDispatchService.ts",
+    "./services/analyticsIngest/AnalyticsIngestDlqService": "./src/services/analyticsIngest/AnalyticsIngestDlqService.ts",
+    "./services/analyticsIngest/AnalyticsJanitorService": "./src/services/analyticsIngest/AnalyticsJanitorService.ts",
+    "./services/analyticsIngest/AnalyticsWriterService": "./src/services/analyticsIngest/AnalyticsWriterService.ts",
+    "./services/analyticsIngest/CaptureIngress": "./src/services/analyticsIngest/CaptureIngress.ts",
+    "./services/analyticsIngest/DlqProducer": "./src/services/analyticsIngest/DlqProducer.ts",
+    "./services/analyticsIngest/EventCaptureService": "./src/services/analyticsIngest/EventCaptureService.ts",
+    "./services/analyticsIngest/EventProcessorService": "./src/services/analyticsIngest/EventProcessorService.ts",
+    "./services/analyticsIngest/PolicyCounterStore": "./src/services/analyticsIngest/PolicyCounterStore.ts",
+    "./services/analyticsIngest/ProcessorOutputs": "./src/services/analyticsIngest/ProcessorOutputs.ts",
+    "./services/apiKeys/ApiKeyService": "./src/services/apiKeys/ApiKeyService.ts",
+    "./services/auditLog/AuditLogPort": "./src/services/auditLog/AuditLogPort.ts",
+    "./services/auth/AuthTokenVerifier": "./src/services/auth/AuthTokenVerifier.ts",
+    "./services/auth/LocalUserSessionService": "./src/services/auth/LocalUserSessionService.ts",
+    "./services/auth/WorkosLocalSyncService": "./src/services/auth/WorkosLocalSyncService.ts",
+    "./services/auth/Workos": "./src/services/auth/Workos.ts",
+    "./services/featureFlags/FeatureFlagService": "./src/services/featureFlags/FeatureFlagService.ts",
+    "./services/fxRates/FxRateService": "./src/services/fxRates/FxRateService.ts",
+    "./services/paywalls/MimicHost": "./src/services/paywalls/MimicHost.ts",
+    "./services/paywalls/PaywallService": "./src/services/paywalls/PaywallService.ts",
+    "./services/paywallWorkspace/ComponentCompiler": "./src/services/paywallWorkspace/ComponentCompiler.ts",
+    "./services/paywallWorkspace/ComponentManifestCacheService": "./src/services/paywallWorkspace/ComponentManifestCacheService.ts",
+    "./services/paywallWorkspace/PaywallWorkspaceService": "./src/services/paywallWorkspace/PaywallWorkspaceService.ts",
+    "./services/paywallThumbnails/HtmlScreenshot": "./src/services/paywallThumbnails/HtmlScreenshot.ts",
+    "./services/paywallThumbnails/PaywallThumbnailService": "./src/services/paywallThumbnails/PaywallThumbnailService.ts",
+    "./services/paywallThumbnails/SnapshotImageRenderer": "./src/services/paywallThumbnails/SnapshotImageRenderer.ts",
+    "./services/paymentProviders/AppStorePaymentProviderService": "./src/services/paymentProviders/AppStorePaymentProviderService.ts",
+    "./services/paymentProviders/GooglePlayPaymentProviderService": "./src/services/paymentProviders/GooglePlayPaymentProviderService.ts",
+    "./services/paymentProviders/StripePaymentProviderService": "./src/services/paymentProviders/StripePaymentProviderService.ts",
+    "./services/paymentProviders/StripeReplayParkedNotificationsWorkflow": "./src/services/paymentProviders/StripeReplayParkedNotificationsWorkflow.ts",
+    "./services/paymentProviders/stripe/payment-provider": "./src/services/paymentProviders/stripe/payment-provider.ts",
+    "./services/paymentProviders/stripe/payment-provider-service": "./src/services/paymentProviders/stripe/payment-provider-service.ts",
+    "./services/paymentProviders/stripe/payment-provider-service-queries": "./src/services/paymentProviders/stripe/payment-provider-service-queries.ts",
+    "./services/paymentProviders/stripe/stripe-webhook-handler-service": "./src/services/paymentProviders/stripe/stripe-webhook-handler-service.ts",
+    "./services/paymentProviders/PaymentProvider": "./src/services/paymentProviders/PaymentProvider.ts",
+    "./services/paymentProviders/PaymentProviderConfigurationService": "./src/services/paymentProviders/PaymentProviderConfigurationService.ts",
+    "./services/paymentProviders/PaymentProviderProductService": "./src/services/paymentProviders/PaymentProviderProductService.ts",
+    "./services/paymentProviders/events": "./src/services/paymentProviders/events.ts",
+    "./services/paywallDeploys/PaywallArtifactStore": "./src/services/paywallDeploys/PaywallArtifactStore.ts",
+    "./services/paywallDeploys/PaywallDeployManifest": "./src/services/paywallDeploys/PaywallDeployManifest.ts",
+    "./services/paywallDeploys/PaywallDeployService": "./src/services/paywallDeploys/PaywallDeployService.ts",
+    "./services/paywallLocations/PaywallLocationService": "./src/services/paywallLocations/PaywallLocationService.ts",
+    "./services/paywallReleases/PaywallReleaseService": "./src/services/paywallReleases/PaywallReleaseService.ts",
+    "./services/paywallReleases/SnapshotHtmlRenderer": "./src/services/paywallReleases/SnapshotHtmlRenderer.ts",
+    "./services/paywallLocations/events": "./src/services/paywallLocations/events.ts",
+    "./services/perks/PerkService": "./src/services/perks/PerkService.ts",
+    "./services/perks/events": "./src/services/perks/events.ts",
+    "./services/perkGrants/PerkGrantService": "./src/services/perkGrants/PerkGrantService.ts",
+    "./services/personIdentity/PersonIdentityService": "./src/services/personIdentity/PersonIdentityService.ts",
+    "./services/personIdentity/IdentityProjectionPublisher": "./src/services/personIdentity/IdentityProjectionPublisher.ts",
+    "./services/personIdentity/IdentityProjectionRebuildService": "./src/services/personIdentity/IdentityProjectionRebuildService.ts",
+    "./services/persons/PersonService": "./src/services/persons/PersonService.ts",
+    "./services/productPerks/ProductPerkService": "./src/services/productPerks/ProductPerkService.ts",
+    "./services/productPerks/events": "./src/services/productPerks/events.ts",
+    "./services/products/ProductService": "./src/services/products/ProductService.ts",
+    "./services/products/events": "./src/services/products/events.ts",
+    "./services/projects/ProjectService": "./src/services/projects/ProjectService.ts",
+    "./services/purchaseProcessing/PurchaseProcessingService": "./src/services/purchaseProcessing/PurchaseProcessingService.ts",
+    "./services/purchaseProcessing/PurchaseLedgerWorkerService": "./src/services/purchaseProcessing/PurchaseLedgerWorkerService.ts",
+    "./services/purchases/PurchaseService": "./src/services/purchases/PurchaseService.ts",
+    "./services/schema/SchemaService": "./src/services/schema/SchemaService.ts",
+    "./services/schema/SchemaInvalidator": "./src/services/schema/SchemaInvalidator.ts",
+    "./services/organizations/OrganizationService": "./src/services/organizations/OrganizationService.ts",
+    "./services/organizations/OrganizationBillingPort": "./src/services/organizations/OrganizationBillingPort.ts",
+    "./services/organizations/OrganizationMembershipSyncPort": "./src/services/organizations/OrganizationMembershipSyncPort.ts",
+    "./services/organizations/OrganizationMembershipWebhookPort": "./src/services/organizations/OrganizationMembershipWebhookPort.ts",
+    "./services/organizations/WorkosOrgPort": "./src/services/organizations/WorkosOrgPort.ts",
+    "./services/sdk/SdkService": "./src/services/sdk/SdkService.ts",
+    "./services/storage/PublicFileStore": "./src/services/storage/PublicFileStore.ts",
+    "./eventBus/CoreEventBus": "./src/eventBus/CoreEventBus.ts",
+    "./services/paywallLocations/PaywallAssetConfig": "./src/services/paywallLocations/PaywallAssetConfig.ts",
+    "./services/infrastructure/Clickhouse": "./src/services/infrastructure/Clickhouse.ts",
+    "./services/infrastructure/QueueProducer": "./src/services/infrastructure/QueueProducer.ts",
+    "./services/notifications/PushDeliveryDispatch": "./src/services/notifications/PushDeliveryDispatch.ts",
+    "./services/notifications/PushDeliveryService": "./src/services/notifications/PushDeliveryService.ts",
+    "./services/notifications/NotificationSendingService": "./src/services/notifications/NotificationSendingService.ts",
+    "./services/notifications/push-delivery-provider": "./src/services/notifications/push-delivery-provider.ts",
+    "./domain/notifications/PushDeliveryQueueMessage": "./src/domain/notifications/PushDeliveryQueueMessage.ts",
+    "./services/users/UserService": "./src/services/users/UserService.ts",
+    "./services/webhookManager/WebhookManagerService": "./src/services/webhookManager/WebhookManagerService.ts",
+    "./services/webhookManager/event-types": "./src/services/webhookManager/event-types.ts",
+    "./services/webhookDispatch/WebhookDispatchService": "./src/services/webhookDispatch/WebhookDispatchService.ts",
+    "./services/webhookDispatch/WebhookDeliveryWorkflow": "./src/services/webhookDispatch/WebhookDeliveryWorkflow.ts",
+    "./services/webhookDispatch/WebhookDeliveryService": "./src/services/webhookDispatch/WebhookDeliveryService.ts",
+    "./services/personIdentity/IdentifyDistinctIdCompletionWorkflow": "./src/services/personIdentity/IdentifyDistinctIdCompletionWorkflow.ts",
+    "./services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow": "./src/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow.ts",
+    "./services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow": "./src/services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow.ts",
+    "./services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow": "./src/services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow.ts",
+    "./services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow": "./src/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vp test run -c vitest.unit.mts",
+    "test:watch": "vp test -c vitest.unit.mts"
+  },
+  "dependencies": {
+    "@distilled.cloud/stripe": "0.24.9",
+    "@effect/sql-clickhouse": "catalog:",
+    "@paralleldrive/cuid2": "^2.2.2",
+    "@voidhash/api-contracts": "workspace:*",
+    "@voidhash/app-store-server-sdk": "workspace:*",
+    "@voidhash/clickhouse-db": "workspace:*",
+    "@voidhash/db": "workspace:*",
+    "@voidhash/google-play-server-sdk": "workspace:*",
+    "@voidhash/lib": "workspace:*",
+    "@voidhash/paywall-build": "workspace:*",
+    "@voidhash/paywall-workspace": "workspace:*",
+    "@voidhash/platform": "workspace:*",
+    "@voidhash/rpc": "workspace:*",
+    "@workos-inc/node": "9.2.0",
+    "nanoid": "^5.1.5",
+    "uncrypto": "^0.1.3"
+  },
+  "devDependencies": {
+    "@effect/vitest": "catalog:",
+    "@voidhash/paywalls": "workspace:*",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:",
+    "vitest": "catalog:"
+  },
+  "peerDependencies": {
+    "effect": "catalog:"
+  }
+}
diff --git a/packages/core/src/domain/analytics/Analytics.ts b/packages/core/src/domain/analytics/Analytics.ts
new file mode 100644
index 000000000..d3a13e603
--- /dev/null
+++ b/packages/core/src/domain/analytics/Analytics.ts
@@ -0,0 +1,736 @@
+/**
+ * Analytics domain — typed errors that signal an analytics-specific invariant
+ * violation (invalid time range, unknown insight, unsupported filter/breakdown)
+ * and the shared insight registry / filter compiler types that the analytics
+ * service composes against.
+ *
+ * The catch-all `AnalyticsServiceError` lives with the service.
+ */
+import { Effect, Schema } from "effect";
+
+/** Time range parameters were rejected during normalisation. */
+export class InvalidTimeRangeError extends Schema.TaggedErrorClass<InvalidTimeRangeError>(
+  "InvalidTimeRangeError",
+)("InvalidTimeRangeError", { message: Schema.String }) {}
+
+/** Caller asked for a metric the service doesn't recognise. */
+export class InvalidMetricError extends Schema.TaggedErrorClass<InvalidMetricError>(
+  "InvalidMetricError",
+)("InvalidMetricError", { message: Schema.String, metric: Schema.String }) {}
+
+/** Generic invalid analytics query — composition rules violated. */
+export class InvalidAnalyticsQueryError extends Schema.TaggedErrorClass<InvalidAnalyticsQueryError>(
+  "InvalidAnalyticsQueryError",
+)("InvalidAnalyticsQueryError", { message: Schema.String }) {}
+
+/** Caller asked for an insight id that's not in the registry. */
+export class UnknownInsightError extends Schema.TaggedErrorClass<UnknownInsightError>(
+  "UnknownInsightError",
+)("UnknownInsightError", { insightId: Schema.String, message: Schema.String }) {}
+
+/** Caller filtered on a field the insight doesn't support. */
+export class UnsupportedAnalyticsFilterError extends Schema.TaggedErrorClass<UnsupportedAnalyticsFilterError>(
+  "UnsupportedAnalyticsFilterError",
+)("UnsupportedAnalyticsFilterError", { field: Schema.String, message: Schema.String }) {}
+
+/** Caller broke down by a field the insight doesn't support. */
+export class UnsupportedAnalyticsBreakdownError extends Schema.TaggedErrorClass<UnsupportedAnalyticsBreakdownError>(
+  "UnsupportedAnalyticsBreakdownError",
+)("UnsupportedAnalyticsBreakdownError", { field: Schema.String, message: Schema.String }) {}
+
+// =============================================================================
+// Built-in insight registry
+// =============================================================================
+
+export type TimeGranularity = "hour" | "day" | "week" | "month" | "quarter" | "year";
+
+export interface AnalyticsDataPoint {
+  timestamp: Date;
+  value: number;
+}
+
+export interface TimeRangeParams {
+  endDate: Date;
+  granularity: TimeGranularity;
+  startDate: Date;
+}
+
+export interface CompiledAnalyticsFilter {
+  productIds?: string[];
+  projectIds: string[];
+  providerEnvironments?: number[];
+  subscriptionStatuses?: number[];
+}
+
+export type BuiltInInsightId =
+  | "builtin/revenue"
+  | "builtin/mrr"
+  | "builtin/arr"
+  | "builtin/mrr_growth_rate"
+  | "builtin/churn_rate"
+  | "builtin/churned_revenue"
+  | "builtin/person_count"
+  | "builtin/new_persons"
+  | "builtin/retention"
+  | "builtin/arpu"
+  | "builtin/arppu"
+  | "builtin/active_subscriptions"
+  | "builtin/active_trials"
+  | "builtin/active_subscribers_growth"
+  | "builtin/new_subscriptions"
+  | "builtin/churned_subscriptions"
+  | "builtin/subscriber_lifetime_value"
+  | "builtin/trials"
+  | "builtin/trial_conversions"
+  | "builtin/trial_conversion_rate";
+
+export type AnalyticsTimeRange =
+  | { preset: "today" | "last_7d" | "last_30d" | "last_90d" | "last_365d" | "mtd" | "qtd" | "ytd" }
+  | { end: Date; preset: "custom"; start: Date };
+
+type PrimitiveFilterValue = string | number | boolean | null;
+type FilterValue = PrimitiveFilterValue | ReadonlyArray<PrimitiveFilterValue>;
+
+export type AnalyticsFilter =
+  | {
+      field: string;
+      op: "eq" | "neq" | "in" | "not_in" | "gt" | "gte" | "lt" | "lte" | "contains" | "exists";
+      type: "predicate";
+      value?: FilterValue;
+    }
+  | {
+      filters: ReadonlyArray<AnalyticsFilter>;
+      type: "and" | "or";
+    }
+  | {
+      filter: AnalyticsFilter;
+      type: "not";
+    };
+
+export interface AnalyticsInsightQuery {
+  breakdowns?: ReadonlyArray<{ field: string; limit?: number; order?: "asc" | "desc" }>;
+  filter?: AnalyticsFilter;
+  granularity?: TimeGranularity;
+  insightId: BuiltInInsightId;
+  key: string;
+  limit?: number;
+  timeRange: AnalyticsTimeRange;
+}
+
+export interface AnalyticsInsightSummary {
+  currency?: string;
+  value: number;
+}
+
+export interface AnalyticsMetricResult {
+  kind: "metric";
+  sparkline: AnalyticsDataPoint[];
+  summary: AnalyticsInsightSummary;
+}
+
+export interface AnalyticsBreakdownResult {
+  kind: "breakdown";
+  rows: Array<{ key: string; label: string; value: number }>;
+  summary?: AnalyticsInsightSummary;
+}
+
+export interface AnalyticsTimeseriesResult {
+  kind: "timeseries";
+  series: AnalyticsDataPoint[];
+  summary: AnalyticsInsightSummary;
+}
+
+export type AnalyticsInsightResult =
+  | AnalyticsMetricResult
+  | AnalyticsTimeseriesResult
+  | AnalyticsBreakdownResult;
+
+export interface InsightDefinition {
+  defaultGranularity: TimeGranularity;
+  id: BuiltInInsightId;
+  resultKind: "metric";
+  supportedBreakdownFields: readonly string[];
+  supportedFilterFields: readonly string[];
+  supportedGranularities: readonly TimeGranularity[];
+}
+
+const DEFAULT_FILTER_FIELDS = ["project.id"] as const;
+const REVENUE_FILTER_FIELDS = [
+  "project.id",
+  "product.id",
+  "provider.environment",
+  "subscription.status",
+] as const;
+
+const ALL_GRANULARITIES: ReadonlyArray<TimeGranularity> = [
+  "hour",
+  "day",
+  "week",
+  "month",
+  "quarter",
+  "year",
+];
+
+const NON_HOURLY_GRANULARITIES: ReadonlyArray<TimeGranularity> = [
+  "day",
+  "week",
+  "month",
+  "quarter",
+  "year",
+];
+
+export const BUILT_IN_INSIGHTS = [
+  {
+    defaultGranularity: "day",
+    id: "builtin/revenue",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: ALL_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/mrr",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/arr",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/mrr_growth_rate",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/churn_rate",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/churned_revenue",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/person_count",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: DEFAULT_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/new_persons",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: DEFAULT_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/retention",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/arpu",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/arppu",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/active_subscriptions",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/active_trials",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/active_subscribers_growth",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/new_subscriptions",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/churned_subscriptions",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/trials",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/subscriber_lifetime_value",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/trial_conversions",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+  {
+    defaultGranularity: "day",
+    id: "builtin/trial_conversion_rate",
+    resultKind: "metric",
+    supportedBreakdownFields: [],
+    supportedFilterFields: REVENUE_FILTER_FIELDS,
+    supportedGranularities: NON_HOURLY_GRANULARITIES,
+  },
+] satisfies InsightDefinition[];
+
+// =============================================================================
+// Field registry — supported / reserved analytics filter fields.
+// =============================================================================
+
+export const SUPPORTED_REVENUE_FILTER_FIELDS = [
+  "project.id",
+  "product.id",
+  "provider.environment",
+  "subscription.status",
+] as const;
+
+export type SupportedRevenueFilterField = (typeof SUPPORTED_REVENUE_FILTER_FIELDS)[number];
+
+export const RESERVED_ANALYTICS_FIELD_PREFIXES = [
+  "event.",
+  "person.properties.",
+  "event.properties.",
+  "context.",
+] as const;
+
+export const isSupportedRevenueFilterField = (
+  field: string,
+): field is SupportedRevenueFilterField =>
+  (SUPPORTED_REVENUE_FILTER_FIELDS as readonly string[]).includes(field);
+
+export const isReservedAnalyticsField = (field: string): boolean =>
+  RESERVED_ANALYTICS_FIELD_PREFIXES.some((prefix) => field.startsWith(prefix));
+
+// =============================================================================
+// Insight classification sets (CURRENCY / RATE) and aggregation helpers.
+// =============================================================================
+
+export const CURRENCY_INSIGHTS = new Set<BuiltInInsightId>([
+  "builtin/revenue",
+  "builtin/mrr",
+  "builtin/arr",
+  "builtin/churned_revenue",
+  "builtin/arpu",
+  "builtin/arppu",
+  "builtin/subscriber_lifetime_value",
+]);
+
+export const RATE_INSIGHTS = new Set<BuiltInInsightId>([
+  "builtin/churn_rate",
+  "builtin/mrr_growth_rate",
+  "builtin/active_subscribers_growth",
+  "builtin/retention",
+  "builtin/trial_conversion_rate",
+]);
+
+export const sumDataPoints = (dataPoints: ReadonlyArray<AnalyticsDataPoint>): number =>
+  dataPoints.reduce((sum, dataPoint) => sum + dataPoint.value, 0);
+
+export const avgDataPoints = (dataPoints: ReadonlyArray<AnalyticsDataPoint>): number =>
+  dataPoints.length === 0 ? 0 : sumDataPoints(dataPoints) / dataPoints.length;
+
+// =============================================================================
+// Insight registry lookup + breakdown guard
+// =============================================================================
+
+const INSIGHT_REGISTRY = new Map(BUILT_IN_INSIGHTS.map((insight) => [insight.id, insight]));
+
+export const getBuiltInInsight = (
+  insightId: string,
+): Effect.Effect<InsightDefinition, UnknownInsightError> => {
+  const insight = INSIGHT_REGISTRY.get(insightId as BuiltInInsightId);
+  return insight
+    ? Effect.succeed(insight)
+    : Effect.fail(
+        new UnknownInsightError({ insightId, message: `Unknown analytics insight ${insightId}` }),
+      );
+};
+
+export const ensureNoBreakdowns = (
+  breakdowns: AnalyticsInsightQuery["breakdowns"] | undefined,
+): Effect.Effect<void, UnsupportedAnalyticsBreakdownError> =>
+  !breakdowns || breakdowns.length === 0
+    ? Effect.void
+    : Effect.fail(
+        new UnsupportedAnalyticsBreakdownError({
+          field: breakdowns[0]?.field ?? "unknown",
+          message: "Breakdowns are not supported in this PoC",
+        }),
+      );
+
+// =============================================================================
+// Time-range resolution
+// =============================================================================
+
+/**
+ * Truncate sub-second precision. ClickHouse's `DateTime` column rejects
+ * fractional-second timestamps when bound as query parameters, and analytics
+ * buckets never care about sub-seconds, so we floor at the resolver boundary.
+ */
+const truncateToSecond = (date: Date): Date => new Date(Math.floor(date.getTime() / 1000) * 1000);
+
+export const resolveTimeRange = (
+  timeRange: AnalyticsTimeRange,
+): Effect.Effect<{ end: Date; start: Date }, InvalidTimeRangeError> =>
+  Effect.gen(function* () {
+    const now = truncateToSecond(new Date());
+
+    switch (timeRange.preset) {
+      case "today":
+        return { end: now, start: new Date(now.getFullYear(), now.getMonth(), now.getDate()) };
+      case "last_7d":
+        return { end: now, start: new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000) };
+      case "last_30d":
+        return { end: now, start: new Date(now.getTime() - 30 * 24 * 60 * 60 * 1000) };
+      case "last_90d":
+        return { end: now, start: new Date(now.getTime() - 90 * 24 * 60 * 60 * 1000) };
+      case "last_365d":
+        return { end: now, start: new Date(now.getTime() - 365 * 24 * 60 * 60 * 1000) };
+      case "mtd":
+        return { end: now, start: new Date(now.getFullYear(), now.getMonth(), 1) };
+      case "qtd": {
+        const quarter = Math.floor(now.getMonth() / 3);
+        return { end: now, start: new Date(now.getFullYear(), quarter * 3, 1) };
+      }
+      case "ytd":
+        return { end: now, start: new Date(now.getFullYear(), 0, 1) };
+      case "custom": {
+        if (timeRange.start > timeRange.end) {
+          return yield* Effect.fail(
+            new InvalidTimeRangeError({ message: "start must be before end" }),
+          );
+        }
+        return { end: truncateToSecond(timeRange.end), start: truncateToSecond(timeRange.start) };
+      }
+    }
+  });
+
+// =============================================================================
+// Filter compiler — AnalyticsFilter AST → CompiledAnalyticsFilter constraints
+// =============================================================================
+
+interface CompileAnalyticsFilterOptions {
+  availableProjectIds: string[];
+  filter?: AnalyticsFilter;
+  supportedFields: readonly string[];
+}
+
+interface PartialConstraints {
+  productIds?: string[];
+  projectIds?: string[];
+  providerEnvironments?: number[];
+  subscriptionStatuses?: number[];
+}
+
+const ensureSupportedField = (
+  field: string,
+  supportedFields: readonly string[],
+): Effect.Effect<void, UnsupportedAnalyticsFilterError> => {
+  if (!isSupportedRevenueFilterField(field)) {
+    return Effect.fail(
+      new UnsupportedAnalyticsFilterError({
+        field,
+        message: isReservedAnalyticsField(field)
+          ? `Field ${field} is reserved for a future analytics domain`
+          : `Field ${field} is not supported`,
+      }),
+    );
+  }
+  if (!supportedFields.includes(field)) {
+    return Effect.fail(
+      new UnsupportedAnalyticsFilterError({
+        field,
+        message: `Field ${field} is not supported for this insight`,
+      }),
+    );
+  }
+  return Effect.void;
+};
+
+const toArray = (value: FilterValue | undefined): PrimitiveFilterValue[] => {
+  if (value === undefined) return [];
+  if (Array.isArray(value)) return [...value] as PrimitiveFilterValue[];
+  return [value as PrimitiveFilterValue];
+};
+
+const toStringArray = (
+  field: SupportedRevenueFilterField,
+  value: FilterValue | undefined,
+): Effect.Effect<string[], InvalidAnalyticsQueryError> => {
+  const values = toArray(value);
+  if (values.some((item) => typeof item !== "string")) {
+    return Effect.fail(
+      new InvalidAnalyticsQueryError({ message: `Filter ${field} expects string values` }),
+    );
+  }
+  return Effect.succeed(values as string[]);
+};
+
+const toNumberArray = (
+  field: SupportedRevenueFilterField,
+  value: FilterValue | undefined,
+): Effect.Effect<number[], InvalidAnalyticsQueryError> => {
+  const values = toArray(value);
+  if (values.some((item) => typeof item !== "number")) {
+    return Effect.fail(
+      new InvalidAnalyticsQueryError({ message: `Filter ${field} expects numeric values` }),
+    );
+  }
+  return Effect.succeed(values as number[]);
+};
+
+const intersect = <T>(left: T[] | undefined, right: T[] | undefined): T[] | undefined => {
+  if (!left) return right;
+  if (!right) return left;
+  return left.filter((item) => right.includes(item));
+};
+
+const union = <T>(left: T[] | undefined, right: T[] | undefined): T[] | undefined => {
+  if (!left) return right;
+  if (!right) return left;
+  return [...new Set([...left, ...right])];
+};
+
+const mergeAndConstraints = (
+  left: PartialConstraints,
+  right: PartialConstraints,
+): PartialConstraints => ({
+  productIds: intersect(left.productIds, right.productIds),
+  projectIds: intersect(left.projectIds, right.projectIds),
+  providerEnvironments: intersect(left.providerEnvironments, right.providerEnvironments),
+  subscriptionStatuses: intersect(left.subscriptionStatuses, right.subscriptionStatuses),
+});
+
+const mergeOrConstraints = (
+  left: PartialConstraints,
+  right: PartialConstraints,
+): Effect.Effect<PartialConstraints, UnsupportedAnalyticsFilterError> => {
+  const mixedFields =
+    [left.projectIds, left.productIds, left.providerEnvironments, left.subscriptionStatuses].filter(
+      Boolean,
+    ).length > 1 ||
+    [
+      right.projectIds,
+      right.productIds,
+      right.providerEnvironments,
+      right.subscriptionStatuses,
+    ].filter(Boolean).length > 1;
+
+  if (mixedFields) {
+    return Effect.fail(
+      new UnsupportedAnalyticsFilterError({
+        field: "or",
+        message: "OR filters are only supported for a single field in this PoC",
+      }),
+    );
+  }
+
+  return Effect.succeed({
+    productIds: union(left.productIds, right.productIds),
+    projectIds: union(left.projectIds, right.projectIds),
+    providerEnvironments: union(left.providerEnvironments, right.providerEnvironments),
+    subscriptionStatuses: union(left.subscriptionStatuses, right.subscriptionStatuses),
+  });
+};
+
+const compilePredicate = ({
+  availableProjectIds,
+  filter,
+}: {
+  availableProjectIds: string[];
+  filter: Extract<AnalyticsFilter, { type: "predicate" }>;
+}): Effect.Effect<
+  PartialConstraints,
+  InvalidAnalyticsQueryError | UnsupportedAnalyticsFilterError
+> =>
+  Effect.gen(function* () {
+    const { field, op, value } = filter;
+
+    switch (field) {
+      case "project.id": {
+        if (op === "eq" || op === "in") {
+          const ids = yield* toStringArray(field, value);
+          return { projectIds: availableProjectIds.filter((id) => ids.includes(id)) };
+        }
+        if (op === "neq" || op === "not_in") {
+          const ids = yield* toStringArray(field, value);
+          return { projectIds: availableProjectIds.filter((id) => !ids.includes(id)) };
+        }
+        break;
+      }
+      case "product.id": {
+        if (op === "eq" || op === "in") {
+          return { productIds: yield* toStringArray(field, value) };
+        }
+        break;
+      }
+      case "provider.environment": {
+        if (op === "eq" || op === "in") {
+          return { providerEnvironments: yield* toNumberArray(field, value) };
+        }
+        break;
+      }
+      case "subscription.status": {
+        if (op === "eq" || op === "in") {
+          return { subscriptionStatuses: yield* toNumberArray(field, value) };
+        }
+        break;
+      }
+    }
+
+    return yield* Effect.fail(
+      new UnsupportedAnalyticsFilterError({
+        field,
+        message: `Operator ${op} is not supported for ${field} in this PoC`,
+      }),
+    );
+  });
+
+const compileNode = ({
+  availableProjectIds,
+  filter,
+  supportedFields,
+}: CompileAnalyticsFilterOptions & { filter: AnalyticsFilter }): Effect.Effect<
+  PartialConstraints,
+  InvalidAnalyticsQueryError | UnsupportedAnalyticsFilterError
+> =>
+  Effect.gen(function* () {
+    switch (filter.type) {
+      case "predicate": {
+        yield* ensureSupportedField(filter.field, supportedFields);
+        return yield* compilePredicate({ availableProjectIds, filter });
+      }
+      case "and": {
+        let current: PartialConstraints = {};
+        for (const child of filter.filters) {
+          current = mergeAndConstraints(
+            current,
+            yield* compileNode({ availableProjectIds, filter: child, supportedFields }),
+          );
+        }
+        return current;
+      }
+      case "or": {
+        let current: PartialConstraints = {};
+        for (const child of filter.filters) {
+          current = yield* mergeOrConstraints(
+            current,
+            yield* compileNode({ availableProjectIds, filter: child, supportedFields }),
+          );
+        }
+        return current;
+      }
+      case "not": {
+        if (filter.filter.type !== "predicate" || filter.filter.field !== "project.id") {
+          return yield* Effect.fail(
+            new UnsupportedAnalyticsFilterError({
+              field: "not",
+              message: "NOT filters are only supported for project.id in this PoC",
+            }),
+          );
+        }
+        return yield* compilePredicate({
+          availableProjectIds,
+          filter: {
+            ...filter.filter,
+            op:
+              filter.filter.op === "eq"
+                ? "neq"
+                : filter.filter.op === "in"
+                  ? "not_in"
+                  : filter.filter.op,
+          },
+        });
+      }
+    }
+  });
+
+export const compileAnalyticsFilter = ({
+  availableProjectIds,
+  filter,
+  supportedFields,
+}: CompileAnalyticsFilterOptions): Effect.Effect<
+  CompiledAnalyticsFilter,
+  InvalidAnalyticsQueryError | UnsupportedAnalyticsFilterError
+> =>
+  Effect.gen(function* () {
+    const compiled = filter
+      ? yield* compileNode({ availableProjectIds, filter, supportedFields })
+      : {};
+
+    return {
+      productIds: compiled.productIds,
+      projectIds: compiled.projectIds ?? availableProjectIds,
+      providerEnvironments: compiled.providerEnvironments,
+      subscriptionStatuses: compiled.subscriptionStatuses,
+    };
+  });
diff --git a/packages/core/src/domain/analyticsIngest/AnalyticsIngest.ts b/packages/core/src/domain/analyticsIngest/AnalyticsIngest.ts
new file mode 100644
index 000000000..7836da823
--- /dev/null
+++ b/packages/core/src/domain/analyticsIngest/AnalyticsIngest.ts
@@ -0,0 +1,763 @@
+/**
+ * Analytics-ingest domain. Consolidates the wire-stable event schemas the
+ * capture/processor/writer/janitor pipeline exchanges, plus the pure helpers
+ * (envelope builders, DLQ builders, person-trait parsers, validation rules)
+ * that the services rely on.
+ *
+ * Wire-stable schemas (consumers across processes must keep these stable):
+ * - {@link CapturedEventV1} — capture → processor envelope.
+ * - {@link ProcessedEventV2} — processor → writer (analytics events).
+ * - {@link ProcessorPersonEventV1} — processor → writer (person snapshot).
+ * - {@link ProcessorPersonIdentityEventV1} — processor → writer (identity map).
+ * - {@link AnalyticsWriterMessage} — the writer's tagged input union.
+ * - {@link EventProcessorDlqV1} — processor → DLQ.
+ */
+import { Schema } from "effect";
+import {
+  sourceTopicForInternalAnalyticsEvent,
+  type InternalAnalyticsEvent,
+} from "../internalAnalytics/InternalAnalyticsEvents.ts";
+
+// =============================================================================
+// Captured event (capture → processor)
+// =============================================================================
+
+export type RouteClass = "main" | "dlq" | "overflow" | "historical" | "custom";
+
+export const CapturedEventRequest = Schema.Struct({
+  path: Schema.optional(Schema.String),
+  requestId: Schema.String,
+  userAgent: Schema.optional(Schema.String),
+  clientIp: Schema.optional(Schema.String),
+  isInternal: Schema.optional(Schema.Boolean),
+});
+export type CapturedEventRequest = typeof CapturedEventRequest.Type;
+
+export const CapturedEventRouting = Schema.Struct({
+  routeClass: Schema.Literals(["main", "dlq", "overflow", "historical", "custom"]),
+  targetTopic: Schema.String,
+  isHistorical: Schema.Boolean,
+  skipEnrichment: Schema.Boolean,
+});
+export type CapturedEventRouting = typeof CapturedEventRouting.Type;
+
+type EventPropertiesFieldPrimitive = string | number | boolean | null;
+type EventPropertiesField =
+  | EventPropertiesFieldPrimitive
+  | ReadonlyArray<EventPropertiesField>
+  | { readonly [key: string]: EventPropertiesField };
+
+const EventPropertiesFieldSchema: Schema.Codec<EventPropertiesField> = Schema.Union([
+  Schema.String,
+  Schema.Finite,
+  Schema.Boolean,
+  Schema.Null,
+  Schema.Array(
+    Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesFieldSchema),
+  ),
+  Schema.Record(
+    Schema.String,
+    Schema.suspend((): Schema.Codec<EventPropertiesField> => EventPropertiesFieldSchema),
+  ),
+]);
+const EventPropertiesSchema = Schema.Record(Schema.String, EventPropertiesFieldSchema);
+
+type EventContextFieldPrimitive = string | number | boolean | null;
+type EventContextField =
+  | EventContextFieldPrimitive
+  | ReadonlyArray<EventContextField>
+  | { readonly [key: string]: EventContextField };
+
+const EventContextFieldSchema: Schema.Codec<EventContextField> = Schema.Union([
+  Schema.String,
+  Schema.Finite,
+  Schema.Boolean,
+  Schema.Null,
+  Schema.Array(Schema.suspend((): Schema.Codec<EventContextField> => EventContextFieldSchema)),
+  Schema.Record(
+    Schema.String,
+    Schema.suspend((): Schema.Codec<EventContextField> => EventContextFieldSchema),
+  ),
+]);
+const EventContextSchema = Schema.Record(Schema.String, EventContextFieldSchema);
+
+/**
+ * The identity the capture layer asserts for an event, as a tagged claim the
+ * processor honours:
+ *  - `Anonymous` — SDK pre-identify; the processor resolves / creates identity.
+ *  - `Stitch`    — SDK `$identify`; the processor stitches `previousDistinctId`.
+ *  - `Resolved`  — a server-trusted caller (revenue) already knows the person;
+ *                  the processor passes the `(distinctId, personId)` through and
+ *                  writes NO `persons_v1` / `person_identity_v1` rows.
+ *
+ * Optional on {@link CapturedEventV1} so in-flight messages (and the SDK path,
+ * until it stamps a claim) still decode; the processor only special-cases
+ * `Resolved`, and only when the event is server-trusted.
+ */
+export const CapturedIdentityClaim = Schema.Union([
+  Schema.Struct({ _tag: Schema.Literal("Anonymous"), distinctId: Schema.String }),
+  Schema.Struct({
+    _tag: Schema.Literal("Stitch"),
+    distinctId: Schema.String,
+    previousDistinctId: Schema.String,
+  }),
+  Schema.Struct({
+    _tag: Schema.Literal("Resolved"),
+    distinctId: Schema.String,
+    personId: Schema.String,
+  }),
+]);
+export type CapturedIdentityClaim = typeof CapturedIdentityClaim.Type;
+
+/**
+ * Origin / trust of a captured event. The ingest queue is internal-only and
+ * this marker is stamped SERVER-SIDE at the dispatch boundary (never threaded
+ * from request input): `untrusted-sdk` for the public capture path,
+ * `trusted-revenue` for server-emitted revenue events.
+ */
+export const TrustClass = Schema.Literals(["untrusted-sdk", "trusted-revenue", "trusted-internal"]);
+export type TrustClass = typeof TrustClass.Type;
+
+export const CapturedEventV1 = Schema.Struct({
+  schemaVersion: Schema.Literal(1),
+  captureId: Schema.String,
+  clientEventId: Schema.optional(Schema.String),
+  sessionId: Schema.optional(Schema.String),
+  token: Schema.String,
+  organizationId: Schema.String,
+  projectId: Schema.String,
+  event: Schema.String,
+  distinctId: Schema.String,
+  eventTimestamp: Schema.String,
+  receivedAt: Schema.String,
+  sentAt: Schema.optional(Schema.String),
+  properties: EventPropertiesSchema,
+  context: EventContextSchema,
+  rawPayload: Schema.Record(Schema.String, Schema.Unknown),
+  request: CapturedEventRequest,
+  routing: CapturedEventRouting,
+  identityClaim: Schema.optional(CapturedIdentityClaim),
+  trustClass: Schema.optional(TrustClass),
+});
+export type CapturedEventV1Type = typeof CapturedEventV1.Type;
+
+// =============================================================================
+// Processed event (processor → writer)
+// =============================================================================
+
+export const ProcessorLane = Schema.Literals(["historical", "main", "overflow"]);
+export type ProcessorLane = typeof ProcessorLane.Type;
+
+/**
+ * Wire schema for one analytics-ingest queue message: an accepted capture
+ * envelope plus the supported lane it routes to. Unsupported routes never reach
+ * the queue (the producer records them in the ingest DLQ), so `lane` is a
+ * {@link ProcessorLane}.
+ */
+export const AnalyticsIngestQueueMessage = Schema.Struct({
+  envelope: CapturedEventV1,
+  lane: ProcessorLane,
+});
+export type AnalyticsIngestQueueMessageType = typeof AnalyticsIngestQueueMessage.Type;
+
+export const ProcessedEventIdentity = Schema.Struct({
+  personId: Schema.optional(Schema.String),
+  distinctId: Schema.String,
+  mode: Schema.Literals(["full", "personless"]),
+});
+export type ProcessedEventIdentity = typeof ProcessedEventIdentity.Type;
+
+export const ProcessedEventRouting = Schema.Struct({
+  lane: ProcessorLane,
+  skipEnrichment: Schema.Boolean,
+  sourceOffset: Schema.String,
+  sourcePartition: Schema.Number,
+  sourceTopic: Schema.String,
+});
+export type ProcessedEventRouting = typeof ProcessedEventRouting.Type;
+
+export const ProcessedEventV2 = Schema.Struct({
+  captureId: Schema.String,
+  context: Schema.Record(Schema.String, Schema.Unknown),
+  distinctId: Schema.String,
+  event: Schema.String,
+  eventTimestamp: Schema.String,
+  groups: Schema.Array(Schema.Never),
+  identity: ProcessedEventIdentity,
+  organizationId: Schema.String,
+  processedAt: Schema.String,
+  processedEventId: Schema.String,
+  projectId: Schema.String,
+  properties: Schema.Record(Schema.String, Schema.Unknown),
+  request: CapturedEventRequest,
+  routing: ProcessedEventRouting,
+  schemaVersion: Schema.Literal(2),
+  sessionId: Schema.optional(Schema.String),
+  token: Schema.String,
+});
+export type ProcessedEventV2Type = typeof ProcessedEventV2.Type;
+
+// =============================================================================
+// Processor outputs (person snapshot / identity event)
+// =============================================================================
+
+export const ProcessorPersonEventV1 = Schema.Struct({
+  changedAt: Schema.String,
+  personId: Schema.String,
+  email: Schema.optional(Schema.String),
+  isArchived: Schema.Boolean,
+  mergedIntoPersonId: Schema.optional(Schema.String),
+  name: Schema.optional(Schema.String),
+  primaryDistinctId: Schema.optional(Schema.String),
+  projectId: Schema.String,
+  schemaVersion: Schema.Literal(1),
+  traits: Schema.Record(Schema.String, Schema.Unknown),
+  version: Schema.Number,
+});
+export type ProcessorPersonEventV1Type = typeof ProcessorPersonEventV1.Type;
+
+export const ProcessorPersonIdentityEventV1 = Schema.Struct({
+  changedAt: Schema.String,
+  personId: Schema.String,
+  distinctId: Schema.String,
+  isDeleted: Schema.Boolean,
+  previousDistinctId: Schema.optional(Schema.String),
+  projectId: Schema.String,
+  schemaVersion: Schema.Literal(1),
+  version: Schema.Number,
+});
+export type ProcessorPersonIdentityEventV1Type = typeof ProcessorPersonIdentityEventV1.Type;
+
+// =============================================================================
+// Capture route + project policy
+// =============================================================================
+
+export interface CaptureProjectPolicy {
+  readonly customTopic?: string;
+  readonly eventsPerDay?: number;
+  readonly forceRoute?: RouteClass;
+  readonly ingestEnabled: boolean;
+  readonly projectId: string;
+  readonly requestsPerMinute?: number;
+  readonly skipEnrichment: boolean;
+}
+
+export interface RouteDecision {
+  readonly isHistorical: boolean;
+  readonly routeClass: RouteClass;
+  readonly skipEnrichment: boolean;
+  readonly targetTopic: string;
+}
+
+export const defaultCaptureProjectPolicy = (projectId: string): CaptureProjectPolicy => ({
+  ingestEnabled: true,
+  projectId,
+  skipEnrichment: false,
+});
+
+// =============================================================================
+// Transport record + DLQ event
+// =============================================================================
+
+export interface CapturedTransportRecord {
+  readonly capturedEvent: CapturedEventV1Type;
+  readonly headers: Readonly<Record<string, string>>;
+  readonly lane: ProcessorLane;
+  readonly rawKey?: string;
+  readonly rawValue: string;
+  readonly sourceOffset: string;
+  readonly sourcePartition: number;
+  readonly sourceTopic: string;
+}
+
+export interface EventProcessorDlqV1 {
+  readonly captureId?: string;
+  readonly distinctId?: string;
+  readonly failedAt: string;
+  readonly failureClass:
+    | "captured_event_invalid"
+    | "policy_rejected"
+    | "project_not_found"
+    | "reserved_event_name"
+    | "schema_rejected"
+    | "transport_invalid"
+    | "unsupported_lane";
+  readonly failureId: string;
+  readonly failureMessage: string;
+  readonly headers: Record<string, string>;
+  readonly lane: ProcessorLane | "unknown";
+  readonly projectId?: string;
+  readonly rawKey?: string;
+  readonly rawValue?: string;
+  readonly schemaVersion: 1;
+  readonly sourceOffset: string;
+  readonly sourcePartition: number;
+  readonly sourceTopic: string;
+  readonly token?: string;
+}
+
+export const buildDlqEvent = ({
+  captureId,
+  distinctId,
+  failureClass,
+  failureMessage,
+  headers,
+  lane,
+  projectId,
+  rawKey,
+  rawValue,
+  sourceOffset,
+  sourcePartition,
+  sourceTopic,
+  token,
+}: Omit<EventProcessorDlqV1, "failedAt" | "failureId" | "schemaVersion">): EventProcessorDlqV1 => ({
+  ...(captureId ? { captureId } : {}),
+  ...(distinctId ? { distinctId } : {}),
+  failedAt: new Date().toISOString(),
+  failureClass,
+  failureId: crypto.randomUUID(),
+  failureMessage,
+  headers,
+  lane,
+  ...(projectId ? { projectId } : {}),
+  ...(rawKey ? { rawKey } : {}),
+  ...(rawValue ? { rawValue } : {}),
+  schemaVersion: 1,
+  sourceOffset,
+  sourcePartition,
+  sourceTopic,
+  ...(token ? { token } : {}),
+});
+
+// =============================================================================
+// Person-trait helpers (pure)
+// =============================================================================
+
+export interface PersonTraits {
+  readonly setOnce: Record<string, unknown>;
+  readonly set: Record<string, unknown>;
+}
+
+const isPlainRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null && !Array.isArray(value);
+
+export const parsePersonTraits = (
+  properties: Record<string, unknown>,
+):
+  | { readonly ok: true; readonly value: PersonTraits }
+  | { readonly ok: false; readonly message: string } => {
+  const rawSet = properties.$set;
+  if (typeof rawSet !== "undefined" && !isPlainRecord(rawSet)) {
+    return { message: "$set must be an object", ok: false };
+  }
+
+  const rawSetOnce = properties.$set_once;
+  if (typeof rawSetOnce !== "undefined" && !isPlainRecord(rawSetOnce)) {
+    return { message: "$set_once must be an object", ok: false };
+  }
+
+  return {
+    ok: true,
+    value: {
+      set: rawSet ?? {},
+      setOnce: rawSetOnce ?? {},
+    },
+  };
+};
+
+export const extractInnerProperties = (
+  wrappedProperties: Record<string, unknown>,
+): Record<string, unknown> => {
+  const inner = wrappedProperties.properties;
+  if (typeof inner === "object" && inner !== null && !Array.isArray(inner)) {
+    return inner as Record<string, unknown>;
+  }
+  return wrappedProperties;
+};
+
+// =============================================================================
+// Processor project policy + validation rules
+// =============================================================================
+
+export interface ProcessorProjectPolicy {
+  readonly processorAllowHistorical: boolean;
+  readonly processorAllowOverflow: boolean;
+  readonly processorEnabled: boolean;
+  readonly processorHistoricalMinAgeHours: number;
+  readonly processorPersonProcessingEnabled: boolean;
+  readonly processorSchemaMode: string;
+}
+
+export interface ResolvedProcessorProject {
+  readonly organizationId: string;
+  readonly policy: ProcessorProjectPolicy;
+  readonly projectId: string;
+}
+
+export interface ProcessingEvent {
+  readonly capturedEvent: CapturedEventV1Type;
+  readonly headers: Readonly<Record<string, string>>;
+  readonly identityKey: string;
+  readonly lane: ProcessorLane;
+  readonly projectPolicy: ProcessorProjectPolicy;
+  readonly rawKey?: string;
+  readonly rawValue: string;
+  readonly sourceOffset: string;
+  readonly sourcePartition: number;
+  readonly sourceTopic: string;
+}
+
+export const ANONYMOUS_DISTINCT_ID_PREFIX = "vh:anon:";
+
+export const validateBuiltInProcessorRules = ({
+  capturedEvent,
+  historicalMinAgeHours,
+  lane,
+  now,
+  sourceTopic,
+}: {
+  readonly capturedEvent: CapturedEventV1Type;
+  readonly historicalMinAgeHours: number;
+  readonly lane: ProcessorLane;
+  readonly now: Date;
+  readonly sourceTopic: string;
+}): string | undefined => {
+  if (capturedEvent.routing.targetTopic !== sourceTopic) {
+    return "captured event routing target does not match source topic";
+  }
+
+  if (lane === "historical") {
+    if (!capturedEvent.routing.isHistorical) {
+      return "historical topic requires isHistorical=true";
+    }
+    const eventAgeMs = now.getTime() - new Date(capturedEvent.eventTimestamp).getTime();
+    const minimumAgeMs = historicalMinAgeHours * 60 * 60 * 1000;
+    if (eventAgeMs < minimumAgeMs) {
+      return "historical event is newer than the configured minimum age";
+    }
+  } else if (capturedEvent.routing.isHistorical) {
+    return "non-historical lane received a historical captured event";
+  }
+
+  const innerProperties = extractInnerProperties(capturedEvent.properties);
+
+  const traitsResult = parsePersonTraits(innerProperties);
+  if (!traitsResult.ok) return traitsResult.message;
+
+  const rawProcessPersonProfile = capturedEvent.properties.$process_person_profile;
+  if (
+    typeof rawProcessPersonProfile !== "undefined" &&
+    typeof rawProcessPersonProfile !== "boolean"
+  ) {
+    return "$process_person_profile must be a boolean";
+  }
+
+  if (capturedEvent.event === "$identify") {
+    const rawPreviousDistinctId = innerProperties.$previous_distinct_id;
+    if (typeof rawPreviousDistinctId !== "string" || rawPreviousDistinctId.length === 0) {
+      return "$identify requires properties.$previous_distinct_id";
+    }
+    if (capturedEvent.distinctId.startsWith(ANONYMOUS_DISTINCT_ID_PREFIX)) {
+      return "$identify target distinct id cannot use the anonymous prefix";
+    }
+  }
+
+  return undefined;
+};
+
+// =============================================================================
+// Analytics writer message + row builders
+// =============================================================================
+
+export const AnalyticsWriterMessage = Schema.Union([
+  Schema.Struct({
+    kind: Schema.Literal("processed"),
+    messageId: Schema.String,
+    value: ProcessedEventV2,
+  }),
+  Schema.Struct({
+    kind: Schema.Literal("person"),
+    messageId: Schema.String,
+    value: ProcessorPersonEventV1,
+  }),
+  Schema.Struct({
+    kind: Schema.Literal("person-distinct-id"),
+    messageId: Schema.String,
+    value: ProcessorPersonIdentityEventV1,
+  }),
+]);
+
+/**
+ * Maps a server-trusted {@link InternalAnalyticsEvent} into a
+ * {@link CapturedEventV1} for the SHARED ingest queue — the revenue transport's
+ * entry into the same pipeline the SDK uses.
+ *
+ * - The deterministic `event.eventId` becomes `clientEventId`, so it flows
+ *   through `buildProcessedEvent` (`clientEventId ?? captureId`) to
+ *   `events_v2.event_id` unchanged — the dedup key.
+ * - A `Resolved` identity claim + the trusted source topic tell the processor
+ *   to pass `(distinctId, personId)` through and emit NO person/identity rows
+ *   (exactly today's revenue behaviour).
+ * - `skipEnrichment` is set so the processor never runs person enrichment.
+ * - `properties` is JSON round-tripped so Date values (e.g. `transferredAt`)
+ *   become ISO strings — the wire `properties` schema permits only JSON
+ *   primitives, and the result matches the stored `JSON.stringify(properties)`.
+ */
+export const makeCapturedEventFromInternalAnalyticsEvent = (
+  event: InternalAnalyticsEvent,
+): CapturedEventV1Type => {
+  const captureId = `internal_${event.eventId}`;
+  const targetTopic = sourceTopicForInternalAnalyticsEvent(event);
+  const properties = JSON.parse(JSON.stringify(event.properties)) as Record<
+    string,
+    EventPropertiesField
+  >;
+  const context = JSON.parse(JSON.stringify(event.context ?? {})) as Record<
+    string,
+    EventContextField
+  >;
+  // Revenue always knows the person (`Resolved`); experiment exposure may fire
+  // for an anonymous viewer (`personId` null → `Anonymous`, resolved on read).
+  const identityClaim: CapturedIdentityClaim = event.personId
+    ? { _tag: "Resolved", distinctId: event.distinctId, personId: event.personId }
+    : { _tag: "Anonymous", distinctId: event.distinctId };
+  const trustClass: TrustClass =
+    event.eventName === "$experiment.exposed" ? "trusted-internal" : "trusted-revenue";
+  return {
+    schemaVersion: 1,
+    captureId,
+    clientEventId: event.eventId,
+    token: event.token,
+    organizationId: event.organizationId,
+    projectId: event.projectId,
+    event: event.eventName,
+    distinctId: event.distinctId,
+    eventTimestamp: event.occurredAt.toISOString(),
+    receivedAt: new Date().toISOString(),
+    properties,
+    context,
+    rawPayload: {},
+    request: {
+      path: "/internal/analytics",
+      requestId: captureId,
+    },
+    routing: {
+      routeClass: "main",
+      targetTopic,
+      isHistorical: false,
+      skipEnrichment: true,
+    },
+    identityClaim,
+    trustClass,
+  };
+};
+
+export type AnalyticsWriterMessageType = typeof AnalyticsWriterMessage.Type;
+
+export interface AnalyticsWriterPlan {
+  readonly personIdentityOverrideRows: ReadonlyArray<Record<string, unknown>>;
+  readonly personIdentityPendingOverrideRows: ReadonlyArray<Record<string, unknown>>;
+  readonly personIdentityRows: ReadonlyArray<Record<string, unknown>>;
+  readonly personRows: ReadonlyArray<Record<string, unknown>>;
+  readonly processedEventRows: ReadonlyArray<Record<string, unknown>>;
+}
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === "object" && value !== null && !Array.isArray(value);
+
+const toNullableString = (value: string | undefined): string | null =>
+  typeof value === "string" && value.trim().length > 0 ? value : null;
+
+export const toFlag = (value: boolean): 0 | 1 => (value ? 1 : 0);
+
+export const toClickhouseTimestamp = (value: string): string => {
+  const date = new Date(value);
+  if (Number.isNaN(date.getTime())) {
+    throw new Error(`Invalid timestamp: ${value}`);
+  }
+  const pad = (part: number, length = 2) => String(part).padStart(length, "0");
+  return [
+    `${date.getUTCFullYear()}-${pad(date.getUTCMonth() + 1)}-${pad(date.getUTCDate())}`,
+    `${pad(date.getUTCHours())}:${pad(date.getUTCMinutes())}:${pad(date.getUTCSeconds())}.${pad(
+      date.getUTCMilliseconds(),
+      3,
+    )}`,
+  ].join(" ");
+};
+
+export const extractPreviousDistinctId = (event: ProcessedEventV2Type): string | null => {
+  const wrappedProperties = isRecord(event.properties) ? event.properties : {};
+  const innerProperties = isRecord(wrappedProperties.properties)
+    ? wrappedProperties.properties
+    : wrappedProperties;
+  const previousDistinctId =
+    typeof innerProperties.$previous_distinct_id === "string"
+      ? innerProperties.$previous_distinct_id
+      : undefined;
+  return toNullableString(previousDistinctId);
+};
+
+export const toProcessedEventRow = (event: ProcessedEventV2Type): Record<string, unknown> => ({
+  capture_id: event.captureId,
+  context: JSON.stringify(event.context),
+  person_id: toNullableString(event.identity.personId),
+  distinct_id: event.identity.distinctId,
+  event_id: event.processedEventId,
+  event_name: event.event,
+  event_properties: JSON.stringify(event.properties),
+  event_ts: toClickhouseTimestamp(event.eventTimestamp),
+  identity_mode: event.identity.mode,
+  organization_id: event.organizationId,
+  previous_distinct_id: extractPreviousDistinctId(event),
+  processed_ts: toClickhouseTimestamp(event.processedAt),
+  project_id: event.projectId,
+  request_id: event.request.requestId,
+  request_path: event.request.path ?? "",
+  route_lane: event.routing.lane,
+  schema_version: event.schemaVersion,
+  skip_enrichment: toFlag(event.routing.skipEnrichment),
+  source_offset: event.routing.sourceOffset,
+  source_partition: event.routing.sourcePartition,
+  source_topic: event.routing.sourceTopic,
+  token: event.token,
+});
+
+export const toPersonRow = (
+  event: ProcessorPersonEventV1Type,
+  organizationId: string,
+): Record<string, unknown> => ({
+  changed_at: toClickhouseTimestamp(event.changedAt),
+  organization_id: organizationId,
+  person_id: event.personId,
+  email: toNullableString(event.email),
+  is_archived: toFlag(event.isArchived),
+  merged_into_person_id: toNullableString(event.mergedIntoPersonId),
+  name: toNullableString(event.name),
+  primary_distinct_id: toNullableString(event.primaryDistinctId),
+  project_id: event.projectId,
+  traits: JSON.stringify(event.traits),
+  version: event.version,
+});
+
+export const toPersonIdentityRow = (
+  event: ProcessorPersonIdentityEventV1Type,
+  organizationId: string,
+): Record<string, unknown> => ({
+  changed_at: toClickhouseTimestamp(event.changedAt),
+  organization_id: organizationId,
+  person_id: event.personId,
+  distinct_id: event.distinctId,
+  is_deleted: toFlag(event.isDeleted),
+  previous_distinct_id: toNullableString(event.previousDistinctId),
+  project_id: event.projectId,
+  version: event.version,
+});
+
+export const toPendingOverrideRow = (
+  event: ProcessorPersonIdentityEventV1Type,
+  organizationId: string,
+): Record<string, unknown> => ({
+  changed_at: toClickhouseTimestamp(event.changedAt),
+  organization_id: organizationId,
+  person_id: event.personId,
+  is_deleted: toFlag(event.isDeleted),
+  project_id: event.projectId,
+  source_distinct_id: event.previousDistinctId ?? "",
+  target_distinct_id: event.distinctId,
+  version: event.version,
+});
+
+/**
+ * Builds the per-table ClickHouse row plan. Person/identity rows carry an
+ * `organization_id` resolved from their `project_id` via `organizationIdForProject`
+ * (the writer looks this up in MySQL); processed-event rows already carry the
+ * organization id from the upstream {@link ProcessedEventV2}. An unknown project
+ * resolves to `""`, which the readonly RLS user's row policy treats as not
+ * matching any tenant (fail-closed).
+ */
+export const buildAnalyticsWriterPlan = (
+  messages: ReadonlyArray<AnalyticsWriterMessageType>,
+  organizationIdForProject: (projectId: string) => string,
+): AnalyticsWriterPlan => {
+  const processedEventRows: Array<Record<string, unknown>> = [];
+  const personRows: Array<Record<string, unknown>> = [];
+  const personIdentityRows: Array<Record<string, unknown>> = [];
+  const personIdentityOverrideRows: Array<Record<string, unknown>> = [];
+  const personIdentityPendingOverrideRows: Array<Record<string, unknown>> = [];
+
+  for (const message of messages) {
+    switch (message.kind) {
+      case "processed":
+        processedEventRows.push(toProcessedEventRow(message.value));
+        break;
+      case "person":
+        personRows.push(
+          toPersonRow(message.value, organizationIdForProject(message.value.projectId)),
+        );
+        break;
+      case "person-distinct-id": {
+        const organizationId = organizationIdForProject(message.value.projectId);
+        personIdentityRows.push(toPersonIdentityRow(message.value, organizationId));
+        if (
+          typeof message.value.previousDistinctId === "string" &&
+          message.value.previousDistinctId.length > 0 &&
+          message.value.version > 0
+        ) {
+          personIdentityOverrideRows.push(toPersonIdentityRow(message.value, organizationId));
+          personIdentityPendingOverrideRows.push(
+            toPendingOverrideRow(message.value, organizationId),
+          );
+        }
+        break;
+      }
+    }
+  }
+
+  return {
+    personIdentityOverrideRows,
+    personIdentityPendingOverrideRows,
+    personIdentityRows,
+    personRows,
+    processedEventRows,
+  };
+};
+
+// =============================================================================
+// Janitor snapshot resources
+// =============================================================================
+
+export interface BacklogRow {
+  readonly changed_at: string;
+  readonly person_id: string;
+  readonly project_id: string;
+  readonly source_distinct_id: string;
+  readonly target_distinct_id: string;
+  readonly version: number;
+}
+
+export interface SnapshotResources {
+  readonly pendingOverrideDictionaryName: string;
+  readonly pendingOverrideSnapshotName: string;
+}
+
+export const sanitizeIdentifier = (value: string): string =>
+  value.replaceAll(/[^a-zA-Z0-9_]/g, "_");
+
+// Names are unqualified — the runtime Clickhouse client connects with the
+// per-stage database (provisioned by `Clickhouse.Database`) as its default, so
+// the staging table created mid-squash lives in the right database.
+export const makeSnapshotResources = (runId: string = crypto.randomUUID()): SnapshotResources => {
+  const suffix = sanitizeIdentifier(runId.replaceAll("-", ""));
+  return {
+    pendingOverrideDictionaryName: `person_identity_pending_override_dict_${suffix}`,
+    pendingOverrideSnapshotName: `person_identity_pending_override_snapshot_${suffix}`,
+  };
+};
+
+export const computeCutoffIso = ({
+  now,
+  safetyWindowSeconds,
+}: {
+  readonly now: Date;
+  readonly safetyWindowSeconds: number;
+}): string => new Date(now.getTime() - safetyWindowSeconds * 1000).toISOString();
diff --git a/packages/core/src/domain/apiKey/ApiKey.ts b/packages/core/src/domain/apiKey/ApiKey.ts
new file mode 100644
index 000000000..42ac1d9ad
--- /dev/null
+++ b/packages/core/src/domain/apiKey/ApiKey.ts
@@ -0,0 +1,22 @@
+/**
+ * API key domain — currently just the typed errors that signal an api-key
+ * invariant violation. Row data lives in the `apiKeys` Drizzle table; an
+ * `ApiKey` aggregate can be added here later when the entity gains behaviour
+ * beyond CRUD.
+ */
+import { Schema } from "effect";
+
+/**
+ * API key row not found in the database.
+ *
+ * `apiKeyId` is optional because the auth-establishing validate paths
+ * (`validateUserApiKey` / `validateSecretKey` / `validatePublishableKey`) look
+ * up records by a raw, secret-equivalent key and have no row id to report on the
+ * not-found path. Those callers MUST omit it rather than echo the raw key, which
+ * is secret material that could leak into logs/spans (see
+ * docs/attribute-registry.md §5). Id-carrying callers (lookup/rotate/delete/
+ * revoke by id) still populate it with the real row id.
+ */
+export class ApiKeyNotFoundError extends Schema.TaggedErrorClass<ApiKeyNotFoundError>(
+  "ApiKeyNotFoundError",
+)("ApiKeyNotFoundError", { apiKeyId: Schema.optional(Schema.String) }) {}
diff --git a/packages/core/src/domain/auth/Auth.ts b/packages/core/src/domain/auth/Auth.ts
new file mode 100644
index 000000000..9e999b758
--- /dev/null
+++ b/packages/core/src/domain/auth/Auth.ts
@@ -0,0 +1,101 @@
+import { Schema } from "effect";
+// Single canonical AuthSession service tag — the rpc package owns the
+// definition and middleware that provides it; re-exporting here keeps domain
+// callers using the same class instance, so per-request middleware provisions
+// satisfy every consumer (including ones that imported AuthSession from this
+// domain module before the migration).
+export { AuthSession } from "@voidhash/rpc";
+
+/** Action is forbidden due to insufficient permissions */
+export class ActionForbiddenError extends Schema.TaggedErrorClass<ActionForbiddenError>(
+  "ActionForbiddenError",
+)("ActionForbiddenError", { message: Schema.String }) {}
+
+/** Authentication failed */
+export class AuthenticationError extends Schema.TaggedErrorClass<AuthenticationError>(
+  "AuthenticationError",
+)("AuthenticationError", { cause: Schema.String, message: Schema.String }) {}
+
+/** User is not authenticated */
+export class NotAuthenticatedError extends Schema.TaggedErrorClass<NotAuthenticatedError>(
+  "NotAuthenticatedError",
+)("NotAuthenticatedError", { message: Schema.String }) {}
+
+export const SessionOrganizationSchema = Schema.Struct({
+  id: Schema.String,
+  logo: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  permissions: Schema.Array(Schema.String),
+  slug: Schema.String,
+  workosOrganizationId: Schema.NullOr(Schema.String),
+});
+
+export const SessionProjectSchema = Schema.Struct({
+  id: Schema.String,
+  logo: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  organizationId: Schema.String,
+  permissions: Schema.Array(Schema.String),
+  slug: Schema.String,
+});
+
+const SessionOrganizationsSchema = Schema.Array(SessionOrganizationSchema);
+const SessionProjectsSchema = Schema.Array(SessionProjectSchema);
+
+export const SessionPersonSchema = Schema.Struct({
+  distinctId: Schema.String,
+});
+
+export const SessionUserSchema = Schema.Struct({
+  createdAt: Schema.Date,
+  email: Schema.String,
+  emailVerified: Schema.Boolean,
+  id: Schema.String,
+  image: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  role: Schema.NullOr(Schema.String),
+  updatedAt: Schema.Date,
+  workosUserId: Schema.NullOr(Schema.String),
+});
+
+export const UserSessionSchema = Schema.Struct({
+  cookie: Schema.NullOr(Schema.String),
+  person: Schema.Null,
+  method: Schema.Literal("user"),
+  name: Schema.String,
+  organizations: SessionOrganizationsSchema,
+  projects: SessionProjectsSchema,
+  user: SessionUserSchema,
+});
+
+export const SecretKeySessionSchema = Schema.Struct({
+  cookie: Schema.Null,
+  person: Schema.Null,
+  method: Schema.Literal("secret-key"),
+  name: Schema.String,
+  organizations: SessionOrganizationsSchema,
+  projects: SessionProjectsSchema,
+  user: Schema.Null,
+});
+
+export const PublishableKeySessionSchema = Schema.Struct({
+  cookie: Schema.Null,
+  person: SessionPersonSchema,
+  method: Schema.Literal("publishable-key"),
+  name: Schema.String,
+  organizations: SessionOrganizationsSchema,
+  projects: SessionProjectsSchema,
+  user: Schema.Null,
+});
+
+export const AuthSessionSchema = Schema.Union([
+  UserSessionSchema,
+  SecretKeySessionSchema,
+  PublishableKeySessionSchema,
+]);
+
+export type UserSession = typeof UserSessionSchema.Type;
+export type SecretKeySession = typeof SecretKeySessionSchema.Type;
+export type PublishableKeySession = typeof PublishableKeySessionSchema.Type;
+
+export type AnyAuthSession = UserSession | SecretKeySession | PublishableKeySession;
diff --git a/packages/core/src/domain/auth/LocalUserSession.ts b/packages/core/src/domain/auth/LocalUserSession.ts
new file mode 100644
index 000000000..e3f613a36
--- /dev/null
+++ b/packages/core/src/domain/auth/LocalUserSession.ts
@@ -0,0 +1,25 @@
+import type { User as WorkOSUser } from "@workos-inc/node";
+
+export type LocalUserIdentity = Pick<
+  WorkOSUser,
+  "email" | "emailVerified" | "externalId" | "firstName" | "id" | "lastName" | "profilePictureUrl"
+>;
+
+export interface LocalUserAccess {
+  readonly organizations: ReadonlyArray<{
+    readonly id: string;
+    readonly logo: string | null;
+    readonly name: string;
+    readonly permissions: ReadonlyArray<string>;
+    readonly slug: string;
+    readonly workosOrganizationId: string;
+  }>;
+  readonly projects: ReadonlyArray<{
+    readonly id: string;
+    readonly logo: string | null;
+    readonly name: string;
+    readonly organizationId: string;
+    readonly permissions: ReadonlyArray<string>;
+    readonly slug: string;
+  }>;
+}
diff --git a/packages/core/src/domain/avatar.ts b/packages/core/src/domain/avatar.ts
new file mode 100644
index 000000000..981276361
--- /dev/null
+++ b/packages/core/src/domain/avatar.ts
@@ -0,0 +1,144 @@
+import { Effect, Schema } from "effect";
+
+/**
+ * Raised when an uploaded avatar fails validation (unsupported type, too large,
+ * malformed base64, or bytes that do not match the declared image type).
+ * Surfaced to the RPC layer as a typed error so the studio can show an
+ * actionable message instead of a generic failure.
+ */
+export class AvatarValidationError extends Schema.TaggedErrorClass<AvatarValidationError>(
+  "AvatarValidationError",
+)("AvatarValidationError", { message: Schema.String }) {}
+
+/** Entities that can carry an avatar; used as the first key segment. */
+export type AvatarEntity = "organization" | "project" | "user";
+
+/** Allowed avatar content types mapped to their stored file extension. */
+const CONTENT_TYPE_EXTENSIONS: Record<string, string> = {
+  "image/jpeg": "jpg",
+  "image/png": "png",
+  "image/webp": "webp",
+};
+
+/**
+ * Hard upper bound on a decoded avatar (2 MiB). The studio crops/resizes to a
+ * small square before upload, so this only guards against abuse.
+ */
+export const MAX_AVATAR_BYTES = 2 * 1024 * 1024;
+
+const startsWith = (bytes: Uint8Array, signature: readonly number[], offset = 0): boolean =>
+  signature.every((b, i) => bytes[offset + i] === b);
+
+/** Magic-byte sniff: confirm the decoded bytes actually match the claimed type. */
+const matchesContentType = (bytes: Uint8Array, contentType: string): boolean => {
+  switch (contentType) {
+    case "image/png":
+      return startsWith(bytes, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+    case "image/jpeg":
+      return startsWith(bytes, [0xff, 0xd8, 0xff]);
+    case "image/webp":
+      // "RIFF" <4-byte length> "WEBP"
+      return (
+        startsWith(bytes, [0x52, 0x49, 0x46, 0x46]) &&
+        startsWith(bytes, [0x57, 0x45, 0x42, 0x50], 8)
+      );
+    default:
+      return false;
+  }
+};
+
+const decodeBase64 = (base64: string): Uint8Array => {
+  // Tolerate a `data:<type>;base64,` prefix even though the studio sends raw base64.
+  const comma = base64.indexOf(",");
+  const payload = base64.startsWith("data:") && comma !== -1 ? base64.slice(comma + 1) : base64;
+  const binary = atob(payload);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+};
+
+/**
+ * Validates the claimed content type, decodes the base64 payload, and confirms
+ * the bytes are a recognised image within the size cap. Returns the decoded
+ * bytes and the file extension to use for the stored object key.
+ */
+export const validateAndDecodeAvatar = (input: {
+  readonly imageBase64: string;
+  readonly contentType: string;
+}): Effect.Effect<{ readonly bytes: Uint8Array; readonly ext: string }, AvatarValidationError> =>
+  Effect.gen(function* () {
+    const ext = CONTENT_TYPE_EXTENSIONS[input.contentType];
+    if (!ext) {
+      return yield* Effect.fail(
+        new AvatarValidationError({
+          message: `Unsupported image type "${input.contentType}". Use PNG, JPEG, or WebP.`,
+        }),
+      );
+    }
+
+    // Reject obviously-oversized payloads from the base64 length BEFORE
+    // allocating the decoded buffer (every 4 base64 chars decode to 3 bytes).
+    if (Math.floor((input.imageBase64.length * 3) / 4) > MAX_AVATAR_BYTES + 64) {
+      return yield* Effect.fail(
+        new AvatarValidationError({
+          message: `Image is too large (max ${Math.round(MAX_AVATAR_BYTES / 1024 / 1024)}MB).`,
+        }),
+      );
+    }
+
+    const bytes = yield* Effect.try({
+      try: () => decodeBase64(input.imageBase64),
+      catch: () => new AvatarValidationError({ message: "Image data is not valid base64." }),
+    });
+
+    if (bytes.length === 0) {
+      return yield* Effect.fail(new AvatarValidationError({ message: "Image is empty." }));
+    }
+    if (bytes.length > MAX_AVATAR_BYTES) {
+      return yield* Effect.fail(
+        new AvatarValidationError({
+          message: `Image is too large (max ${Math.round(MAX_AVATAR_BYTES / 1024 / 1024)}MB).`,
+        }),
+      );
+    }
+    if (!matchesContentType(bytes, input.contentType)) {
+      return yield* Effect.fail(
+        new AvatarValidationError({ message: "Image data does not match its declared type." }),
+      );
+    }
+
+    return { bytes, ext };
+  });
+
+/** SHA-256 hex digest of the avatar bytes (WebCrypto; available in workerd). */
+export const avatarSha256Hex = (bytes: Uint8Array): Effect.Effect<string> =>
+  Effect.promise(async () => {
+    const digest = await crypto.subtle.digest("SHA-256", bytes as unknown as ArrayBuffer);
+    return Array.from(new Uint8Array(digest))
+      .map((b) => b.toString(16).padStart(2, "0"))
+      .join("");
+  });
+
+/** Content-addressed object key: `avatars/<entity>/<id>/<sha256>.<ext>`. */
+export const deriveAvatarKey = (
+  entity: AvatarEntity,
+  id: string,
+  sha256Hex: string,
+  ext: string,
+): string => `avatars/${entity}/${id}/${sha256Hex}.${ext}`;
+
+/**
+ * Whether a stored `logo` value points at an object in our own public file
+ * store (so it is safe to delete on replace/remove). Guards against deleting
+ * historical/external URLs (e.g. a WorkOS-provided logo).
+ */
+export const isOwnedAvatarUrl = (logo: string | null, publicBaseUrl: string): boolean =>
+  logo !== null && logo.startsWith(`${publicBaseUrl}/files/`);
+
+/** Extracts the object key from one of our public file URLs, or `null`. */
+export const avatarKeyFromUrl = (logo: string, publicBaseUrl: string): string | null => {
+  const prefix = `${publicBaseUrl}/files/`;
+  return logo.startsWith(prefix) ? logo.slice(prefix.length) : null;
+};
diff --git a/packages/core/src/domain/experiment/Experiment.ts b/packages/core/src/domain/experiment/Experiment.ts
new file mode 100644
index 000000000..7b3dd96a6
--- /dev/null
+++ b/packages/core/src/domain/experiment/Experiment.ts
@@ -0,0 +1,37 @@
+/**
+ * Experiment (A/B testing) domain — typed errors that signal an invariant
+ * violation on an experiment, variant, or treatment. Row data lives in the
+ * `experiments` / `experiment_variant` / `experiment_treatment` Drizzle tables.
+ * An experiment compiles down to a backing customer feature flag (the runtime
+ * assignment artifact); see `ExperimentService`.
+ */
+import { Schema } from "effect";
+
+/** Experiment row not found. */
+export class ExperimentNotFoundError extends Schema.TaggedErrorClass<ExperimentNotFoundError>(
+  "ExperimentNotFoundError",
+)("ExperimentNotFoundError", { experimentId: Schema.String }) {}
+
+/** Experiment key uniqueness invariant violated within a project. */
+export class ExperimentKeyAlreadyExistsError extends Schema.TaggedErrorClass<ExperimentKeyAlreadyExistsError>(
+  "ExperimentKeyAlreadyExistsError",
+)("ExperimentKeyAlreadyExistsError", { key: Schema.String }) {}
+
+/** Experiment variant row not found. */
+export class ExperimentVariantNotFoundError extends Schema.TaggedErrorClass<ExperimentVariantNotFoundError>(
+  "ExperimentVariantNotFoundError",
+)("ExperimentVariantNotFoundError", { variantId: Schema.String }) {}
+
+/** Experiment treatment row not found. */
+export class ExperimentTreatmentNotFoundError extends Schema.TaggedErrorClass<ExperimentTreatmentNotFoundError>(
+  "ExperimentTreatmentNotFoundError",
+)("ExperimentTreatmentNotFoundError", { treatmentId: Schema.String }) {}
+
+/**
+ * A domain invariant was violated — bad variant weights, editing a locked
+ * running experiment, a target-location conflict with another experiment, an
+ * unknown treatment type, etc. Carries a human-readable message.
+ */
+export class ExperimentValidationError extends Schema.TaggedErrorClass<ExperimentValidationError>(
+  "ExperimentValidationError",
+)("ExperimentValidationError", { message: Schema.String }) {}
diff --git a/packages/core/src/domain/featureFlag/FeatureFlag.ts b/packages/core/src/domain/featureFlag/FeatureFlag.ts
new file mode 100644
index 000000000..2a1813520
--- /dev/null
+++ b/packages/core/src/domain/featureFlag/FeatureFlag.ts
@@ -0,0 +1,26 @@
+/**
+ * Feature-flag domain — typed errors that signal an invariant violation on a
+ * feature flag, override, or target row. Row data lives in the `featureFlags`
+ * Drizzle table.
+ */
+import { Schema } from "effect";
+
+/** Feature-flag row not found. */
+export class FeatureFlagNotFoundError extends Schema.TaggedErrorClass<FeatureFlagNotFoundError>(
+  "FeatureFlagNotFoundError",
+)("FeatureFlagNotFoundError", { featureFlagId: Schema.String }) {}
+
+/** Feature-flag key uniqueness invariant violated within a project. */
+export class FeatureFlagKeyAlreadyExistsError extends Schema.TaggedErrorClass<FeatureFlagKeyAlreadyExistsError>(
+  "FeatureFlagKeyAlreadyExistsError",
+)("FeatureFlagKeyAlreadyExistsError", { key: Schema.String }) {}
+
+/** Feature-flag override row not found. */
+export class FeatureFlagOverrideNotFoundError extends Schema.TaggedErrorClass<FeatureFlagOverrideNotFoundError>(
+  "FeatureFlagOverrideNotFoundError",
+)("FeatureFlagOverrideNotFoundError", { overrideId: Schema.String }) {}
+
+/** Feature-flag target row not found. */
+export class FeatureFlagTargetNotFoundError extends Schema.TaggedErrorClass<FeatureFlagTargetNotFoundError>(
+  "FeatureFlagTargetNotFoundError",
+)("FeatureFlagTargetNotFoundError", { targetId: Schema.String }) {}
diff --git a/packages/core/src/domain/fxRate/FxRate.ts b/packages/core/src/domain/fxRate/FxRate.ts
new file mode 100644
index 000000000..13b707dcc
--- /dev/null
+++ b/packages/core/src/domain/fxRate/FxRate.ts
@@ -0,0 +1,28 @@
+/**
+ * Fx-rate domain — the single-rate DTO returned by `FxRateService.getUsdRate`,
+ * plus the precision constants that pin how rates are stored in MySQL.
+ *
+ * `usd_rate` is an `INT` column holding `rate × 1_000_000`, so an exchange
+ * rate of `1.234567` is stored as `1234567`. Every read and write uses
+ * {@link FX_RATE_PRECISION} as the conversion factor; never round-trip a
+ * floating-point quote through the DB without it.
+ */
+
+/** USD identity rate: `1.0 × FX_RATE_PRECISION`. */
+export const USD_IDENTITY_RATE = 1_000_000;
+
+/** Stored precision multiplier for FX rates (`rate × 1_000_000`). */
+export const FX_RATE_PRECISION = 1_000_000;
+
+/**
+ * Single `(currency, asOfDate)` rate. `rate` is the integer stored in the
+ * `fx_rate.usd_rate` column (i.e. `floor(currency → USD × FX_RATE_PRECISION)`).
+ * `asOfDate` is normalized to midnight UTC so the unique `(currency,
+ * as_of_date)` index hits regardless of intraday call time.
+ */
+export interface FxRateLookup {
+  readonly currency: string;
+  readonly rate: number;
+  readonly asOfDate: Date;
+  readonly source: string;
+}
diff --git a/packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts b/packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts
new file mode 100644
index 000000000..9139450c0
--- /dev/null
+++ b/packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts
@@ -0,0 +1,530 @@
+/**
+ * Server-trusted analytics events emitted by internal services into the
+ * analytics pipeline. The schema is a discriminated union of strict per-event
+ * variants, discriminated on the wire-stable `eventName` literal. The same
+ * `eventName` is what downstream consumers (analytics-writer ClickHouse insert)
+ * see, so the literal serves as both the tagged-union discriminator and the
+ * wire identifier.
+ *
+ * Adding a new event:
+ *   1. Define a `Schema.Struct` for the variant with a unique `eventName`
+ *      literal and a strictly-typed `properties` struct.
+ *   2. Add it to `InternalAnalyticsEventSchema`'s union.
+ *   3. Map it to a `routing.sourceTopic` in the api-app's analytics-bridge
+ *      producer (currently only revenue events exist; all share
+ *      `REVENUE_TRUSTED_SOURCE_TOPIC`).
+ *
+ * The trust constants (`RESERVED_REVENUE_EVENT_NAMES`,
+ * `REVENUE_TRUSTED_SOURCE_TOPIC`) live here so the analytics-ingest services
+ * (event-capture, event-processor) can import them without depending on
+ * purchase-processing.
+ */
+import { Schema } from "effect";
+
+import { SubscriptionTransferModeSchema } from "../paymentProvider/SubscriptionTransfer.ts";
+
+export const RevenueAnalyticsEventNameSchema = Schema.Literals([
+  "$purchase.completed",
+  "$purchase.refunded",
+  "$purchase.revoked",
+  "$purchase.transferred_out",
+  "$purchase.transferred_in",
+  "$subscription.created",
+  "$subscription.renewed",
+  "$subscription.canceled",
+  "$subscription.expired",
+  "$subscription.active",
+  "$subscription.refund_reversed",
+  "$subscription.billing_retry",
+  "$subscription.extended",
+  "$subscription.product_changed",
+  "$subscription.offer_redeemed",
+  "$subscription.price_increase_pending",
+  "$subscription.auto_renew_resumed",
+  "$subscription.transferred_out",
+  "$subscription.transferred_in",
+]);
+
+export type RevenueAnalyticsEventName = typeof RevenueAnalyticsEventNameSchema.Type;
+
+/**
+ * Server-emitted analytics event names are prefixed with `$` (mirroring the
+ * PostHog convention for auto-captured / reserved system events) so they can
+ * never collide with the customer's own event names sent via the SDK.
+ */
+export const RESERVED_REVENUE_EVENT_NAMES: ReadonlySet<RevenueAnalyticsEventName> =
+  new Set<RevenueAnalyticsEventName>([
+    "$purchase.completed",
+    "$purchase.refunded",
+    "$purchase.revoked",
+    "$purchase.transferred_out",
+    "$purchase.transferred_in",
+    "$subscription.created",
+    "$subscription.renewed",
+    "$subscription.canceled",
+    "$subscription.expired",
+    "$subscription.active",
+    "$subscription.refund_reversed",
+    "$subscription.billing_retry",
+    "$subscription.extended",
+    "$subscription.product_changed",
+    "$subscription.offer_redeemed",
+    "$subscription.price_increase_pending",
+    "$subscription.auto_renew_resumed",
+    "$subscription.transferred_out",
+    "$subscription.transferred_in",
+  ]);
+
+export const isReservedRevenueEventName = (name: string): name is RevenueAnalyticsEventName =>
+  RESERVED_REVENUE_EVENT_NAMES.has(name as RevenueAnalyticsEventName);
+
+/**
+ * Event names exempt from the per-event capture quota regardless of trust
+ * class. Starts EMPTY: today no SDK event bypasses quota, so capture behaviour
+ * is unchanged. Server-trusted revenue is exempt by construction (it never
+ * enters the capture path — reserved names are rejected there), so it needs no
+ * entry here; this set is the seam for allow-listing specific SDK event names
+ * later without touching the capture orchestration.
+ */
+export const TRUST_BYPASS_QUOTA: ReadonlySet<string> = new Set<string>();
+
+/**
+ * Quota policy as a per-event-class predicate: whether an event should bypass
+ * the per-event capture quota. `trusted-revenue` is always exempt (the
+ * predicate is total even though revenue never reaches capture today), and
+ * specific SDK event names can be allow-listed via {@link TRUST_BYPASS_QUOTA}.
+ *
+ * `trustClass` is typed as a plain string to avoid a circular import with the
+ * analytics-ingest domain (which already imports from here).
+ */
+export const shouldBypassQuota = (input: {
+  readonly trustClass?: string;
+  readonly eventName: string;
+}): boolean => input.trustClass === "trusted-revenue" || TRUST_BYPASS_QUOTA.has(input.eventName);
+
+/**
+ * The `routing.sourceTopic` value stamped onto every server-emitted revenue
+ * event. The processor's trust check uses this to distinguish trusted revenue
+ * events from any reserved-named event that somehow reached the capture
+ * pipeline.
+ */
+export const REVENUE_TRUSTED_SOURCE_TOPIC = "revenue.trusted.v1" as const;
+
+/**
+ * The `routing.sourceTopic` stamped onto server-emitted experiment-exposure
+ * events. A dedicated NON-revenue trusted topic so exposure never rides the
+ * revenue trust checks / MRR math (which key on `REVENUE_TRUSTED_SOURCE_TOPIC`
+ * and the reserved revenue event-name set — `$experiment.exposed` is in
+ * neither).
+ */
+export const EXPERIMENT_TRUSTED_SOURCE_TOPIC = "experiment.trusted.v1" as const;
+
+const baseEventFields = {
+  context: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+  distinctId: Schema.String,
+  eventId: Schema.String,
+  occurredAt: Schema.Date,
+  organizationId: Schema.String,
+  personId: Schema.String,
+  projectId: Schema.String,
+  token: Schema.String,
+  transactionId: Schema.NullOr(Schema.String),
+};
+
+const revenuePropertiesBase = {
+  paymentProviderConfigurationId: Schema.String,
+  paymentProviderConfigurationProductId: Schema.String,
+  providerEnvironment: Schema.Number,
+  providerEventType: Schema.String,
+  providerId: Schema.String,
+  providerSubscriptionId: Schema.NullOr(Schema.String),
+  providerTransactionId: Schema.NullOr(Schema.String),
+  providerWebhookNotificationId: Schema.NullOr(Schema.String),
+  source: Schema.String,
+};
+
+/**
+ * Money-bearing properties shared by every revenue event variant. All amounts
+ * are SIGNED deltas in the unified reporting currency (USD) minor units, so
+ * `SUM(grossAmountUsd)` over `$purchase.*` / `$subscription.*` events equals
+ * revenue without per-event-type branching downstream:
+ *   + on `$purchase.completed`, `$subscription.created`,
+ *     `$subscription.renewed`, `$subscription.refund_reversed`
+ *   − on `$purchase.refunded`, `$purchase.revoked`, and on
+ *     `$subscription.canceled` rows that came from a family-revoke (negative
+ *     delta on the gross to undo the prior entitlement).
+ *
+ * Original-currency amounts and the storefront ride along for analytics
+ * breakdowns. `currency` is the ISO 4217 code of the original transaction.
+ * `amount` / `amountUsd` are kept for downstream readers that haven't
+ * migrated to the breakdown columns yet; they mirror `grossAmount` /
+ * `grossAmountUsd` and will be removed once those readers are cut over.
+ */
+const moneyPropertiesFields = {
+  amount: Schema.optional(Schema.NullOr(Schema.Number)),
+  amountUsd: Schema.optional(Schema.NullOr(Schema.Number)),
+  currency: Schema.optional(Schema.String),
+  storefront: Schema.optional(Schema.NullOr(Schema.String)),
+  grossAmount: Schema.optional(Schema.NullOr(Schema.Number)),
+  storeCommissionAmount: Schema.optional(Schema.NullOr(Schema.Number)),
+  taxAmount: Schema.optional(Schema.NullOr(Schema.Number)),
+  proceedsAmount: Schema.optional(Schema.NullOr(Schema.Number)),
+  proceedsAfterTaxAmount: Schema.optional(Schema.NullOr(Schema.Number)),
+  grossAmountUsd: Schema.optional(Schema.NullOr(Schema.Number)),
+  storeCommissionAmountUsd: Schema.optional(Schema.NullOr(Schema.Number)),
+  taxAmountUsd: Schema.optional(Schema.NullOr(Schema.Number)),
+  proceedsAmountUsd: Schema.optional(Schema.NullOr(Schema.Number)),
+  proceedsAfterTaxAmountUsd: Schema.optional(Schema.NullOr(Schema.Number)),
+  exchangeRate: Schema.optional(Schema.NullOr(Schema.Number)),
+};
+
+export const RevenuePurchaseCompletedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$purchase.completed"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+    isTrial: Schema.optional(Schema.Boolean),
+    purchaseType: Schema.optional(Schema.Literals(["one-time", "consumable"])),
+  }),
+});
+
+export type RevenuePurchaseCompleted = typeof RevenuePurchaseCompletedSchema.Type;
+
+/**
+ * Refunds carry the same money breakdown as the originating purchase, but
+ * with each amount negated. Summing `grossAmountUsd` across `$purchase.*`
+ * events therefore yields net revenue without per-event-type branching.
+ */
+export const RevenuePurchaseRefundedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$purchase.refunded"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+    refundReason: Schema.NullOr(Schema.String),
+  }),
+});
+
+export type RevenuePurchaseRefunded = typeof RevenuePurchaseRefundedSchema.Type;
+
+/**
+ * Non-subscription entitlement revocations carry the same money breakdown as
+ * the originating purchase, but with each amount negated. Unlike a refund,
+ * this represents access loss rather than money returned to the purchaser.
+ */
+export const RevenuePurchaseRevokedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$purchase.revoked"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+    revocationReason: Schema.NullOr(Schema.String),
+  }),
+});
+
+export type RevenuePurchaseRevoked = typeof RevenuePurchaseRevokedSchema.Type;
+
+export const RevenueSubscriptionCreatedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.created"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+    isTrial: Schema.Boolean,
+  }),
+});
+
+export type RevenueSubscriptionCreated = typeof RevenueSubscriptionCreatedSchema.Type;
+
+export const RevenueSubscriptionRenewedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.renewed"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+    isTrial: Schema.Boolean,
+  }),
+});
+
+export type RevenueSubscriptionRenewed = typeof RevenueSubscriptionRenewedSchema.Type;
+
+/**
+ * `$subscription.canceled` covers both user-initiated cancellations and
+ * provider revocations. User cancels never carry money — Apple keeps the
+ * customer entitled until the period ends and we ride the existing
+ * `$purchase.completed` revenue through. Family-share revocations DO carry
+ * a signed-negative gross delta (no commission / tax, since family-shared
+ * transactions don't earn revenue) so the gross-entitlement sum reflects
+ * the loss of the granted entitlement.
+ */
+export const RevenueSubscriptionCanceledSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.canceled"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+    cancelAtPeriodEnd: Schema.optional(Schema.Boolean),
+    cancellationReason: Schema.optional(Schema.NullOr(Schema.String)),
+    revocationReason: Schema.optional(Schema.NullOr(Schema.String)),
+  }),
+});
+
+export type RevenueSubscriptionCanceled = typeof RevenueSubscriptionCanceledSchema.Type;
+
+export const RevenueSubscriptionExpiredSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.expired"),
+  properties: Schema.Struct({ ...revenuePropertiesBase }),
+});
+
+export type RevenueSubscriptionExpired = typeof RevenueSubscriptionExpiredSchema.Type;
+
+export const RevenueSubscriptionActiveSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.active"),
+  properties: Schema.Struct({ ...revenuePropertiesBase }),
+});
+
+export type RevenueSubscriptionActive = typeof RevenueSubscriptionActiveSchema.Type;
+
+/**
+ * Emitted when the provider reverses a prior refund (Apple's `REFUND_REVERSED`
+ * notification). The reversed transaction's entitlement is re-granted in the
+ * operational projection; this event signals the same to analytics by
+ * emitting the original purchase's money breakdown with the positive sign
+ * (mirror of the negative emission from `$purchase.refunded`).
+ */
+export const RevenueSubscriptionRefundReversedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.refund_reversed"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+  }),
+});
+
+export type RevenueSubscriptionRefundReversed = typeof RevenueSubscriptionRefundReversedSchema.Type;
+
+/** `DID_FAIL_TO_RENEW` — subscription entered the billing-retry loop. */
+export const RevenueSubscriptionBillingRetrySchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.billing_retry"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    gracePeriodExpiresAt: Schema.NullOr(Schema.Date),
+  }),
+});
+
+export type RevenueSubscriptionBillingRetry = typeof RevenueSubscriptionBillingRetrySchema.Type;
+
+/** `RENEWAL_EXTENDED` / `RENEWAL_EXTENSION` — service-issued period extension. */
+export const RevenueSubscriptionExtendedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.extended"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    extendedTo: Schema.Date,
+  }),
+});
+
+export type RevenueSubscriptionExtended = typeof RevenueSubscriptionExtendedSchema.Type;
+
+/**
+ * `DID_CHANGE_RENEWAL_PREF` — customer selected a different product for the
+ * next renewal. Apple's semantics: takes effect at next billing cycle, NOT
+ * immediately. The current subscription stays on the existing product mapping.
+ */
+export const RevenueSubscriptionProductChangedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.product_changed"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    newProviderProductKey: Schema.String,
+  }),
+});
+
+export type RevenueSubscriptionProductChanged = typeof RevenueSubscriptionProductChangedSchema.Type;
+
+/** `OFFER_REDEEMED` — promotional / introductory / win-back offer applied. */
+export const RevenueSubscriptionOfferRedeemedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.offer_redeemed"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    offerId: Schema.NullOr(Schema.String),
+  }),
+});
+
+export type RevenueSubscriptionOfferRedeemed = typeof RevenueSubscriptionOfferRedeemedSchema.Type;
+
+/** `PRICE_INCREASE` — Apple has scheduled a price change for the next renewal. */
+export const RevenueSubscriptionPriceIncreasePendingSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.price_increase_pending"),
+  properties: Schema.Struct({
+    ...revenuePropertiesBase,
+    ...moneyPropertiesFields,
+    effectiveAt: Schema.NullOr(Schema.Date),
+  }),
+});
+
+export type RevenueSubscriptionPriceIncreasePending =
+  typeof RevenueSubscriptionPriceIncreasePendingSchema.Type;
+
+/** `DID_CHANGE_RENEWAL_STATUS=AUTO_RENEW_ENABLED` — customer un-canceled. */
+export const RevenueSubscriptionAutoRenewResumedSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.auto_renew_resumed"),
+  properties: Schema.Struct({ ...revenuePropertiesBase }),
+});
+
+export type RevenueSubscriptionAutoRenewResumed =
+  typeof RevenueSubscriptionAutoRenewResumedSchema.Type;
+
+/**
+ * Shared `properties` for the four cross-owner transfer events. The same
+ * `properties` payload is emitted on both halves of a transfer pair
+ * (`transferred_out` on the source person, `transferred_in` on the target) so
+ * a downstream consumer can correlate the two; what differs is the per-event
+ * identity (`distinctId` / `personId` from {@link baseEventFields}).
+ *
+ * `subscriptionId` / `storeSubscriptionId` are populated on the
+ * `$subscription.*` variants; `purchaseId` / `providerKey` on the
+ * `$purchase.*` variants.
+ */
+const transferPropertiesBase = {
+  paymentProviderConfigurationId: Schema.String,
+  paymentProviderConfigurationProductId: Schema.String,
+  providerId: Schema.String,
+  providerEnvironment: Schema.Number,
+  source: Schema.String,
+  providerEventType: Schema.String,
+  subscriptionId: Schema.optional(Schema.String),
+  purchaseId: Schema.optional(Schema.String),
+  storeSubscriptionId: Schema.optional(Schema.NullOr(Schema.String)),
+  providerKey: Schema.optional(Schema.NullOr(Schema.String)),
+  fromDistinctId: Schema.String,
+  fromPersonId: Schema.String,
+  toDistinctId: Schema.String,
+  toPersonId: Schema.String,
+  transferMode: SubscriptionTransferModeSchema,
+  transferReason: Schema.String,
+  transferredAt: Schema.Date,
+};
+
+/**
+ * Emitted on the SOURCE person when a subscription's ownership is transferred
+ * away — e.g. a different identified user restored it on a shared device.
+ */
+export const RevenueSubscriptionTransferredOutSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.transferred_out"),
+  properties: Schema.Struct({ ...transferPropertiesBase }),
+});
+
+export type RevenueSubscriptionTransferredOut = typeof RevenueSubscriptionTransferredOutSchema.Type;
+
+/** Emitted on the TARGET person — the mirror of `$subscription.transferred_out`. */
+export const RevenueSubscriptionTransferredInSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$subscription.transferred_in"),
+  properties: Schema.Struct({ ...transferPropertiesBase }),
+});
+
+export type RevenueSubscriptionTransferredIn = typeof RevenueSubscriptionTransferredInSchema.Type;
+
+/** `$subscription.transferred_out` analogue for non-consumable one-time purchases. */
+export const RevenuePurchaseTransferredOutSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$purchase.transferred_out"),
+  properties: Schema.Struct({ ...transferPropertiesBase }),
+});
+
+export type RevenuePurchaseTransferredOut = typeof RevenuePurchaseTransferredOutSchema.Type;
+
+/** Emitted on the TARGET person — the mirror of `$purchase.transferred_out`. */
+export const RevenuePurchaseTransferredInSchema = Schema.Struct({
+  ...baseEventFields,
+  eventName: Schema.Literal("$purchase.transferred_in"),
+  properties: Schema.Struct({ ...transferPropertiesBase }),
+});
+
+export type RevenuePurchaseTransferredIn = typeof RevenuePurchaseTransferredInSchema.Type;
+
+/**
+ * Experiment exposure — emitted server-side when a subject is assigned a
+ * variant of a running experiment at serve time. `personId` is nullable because
+ * paywalls are frequently shown to anonymous (pre-identify) users; the pipeline
+ * keys the event by `distinctId` and stitches identity on read. Distinct base
+ * fields from the revenue events (no `transactionId`, optional `personId`).
+ */
+export const ExperimentExposedSchema = Schema.Struct({
+  context: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+  distinctId: Schema.String,
+  eventId: Schema.String,
+  eventName: Schema.Literal("$experiment.exposed"),
+  occurredAt: Schema.Date,
+  organizationId: Schema.String,
+  personId: Schema.NullOr(Schema.String),
+  projectId: Schema.String,
+  properties: Schema.Struct({
+    experimentKey: Schema.String,
+    variantKey: Schema.String,
+  }),
+  token: Schema.String,
+});
+
+export type ExperimentExposed = typeof ExperimentExposedSchema.Type;
+
+export const InternalAnalyticsEventSchema = Schema.Union([
+  ExperimentExposedSchema,
+  RevenuePurchaseCompletedSchema,
+  RevenuePurchaseRefundedSchema,
+  RevenuePurchaseRevokedSchema,
+  RevenueSubscriptionCreatedSchema,
+  RevenueSubscriptionRenewedSchema,
+  RevenueSubscriptionCanceledSchema,
+  RevenueSubscriptionExpiredSchema,
+  RevenueSubscriptionActiveSchema,
+  RevenueSubscriptionRefundReversedSchema,
+  RevenueSubscriptionBillingRetrySchema,
+  RevenueSubscriptionExtendedSchema,
+  RevenueSubscriptionProductChangedSchema,
+  RevenueSubscriptionOfferRedeemedSchema,
+  RevenueSubscriptionPriceIncreasePendingSchema,
+  RevenueSubscriptionAutoRenewResumedSchema,
+  RevenueSubscriptionTransferredOutSchema,
+  RevenueSubscriptionTransferredInSchema,
+  RevenuePurchaseTransferredOutSchema,
+  RevenuePurchaseTransferredInSchema,
+]);
+
+export type InternalAnalyticsEvent = typeof InternalAnalyticsEventSchema.Type;
+
+export const sourceTopicForInternalAnalyticsEvent = (event: InternalAnalyticsEvent): string => {
+  switch (event.eventName) {
+    case "$experiment.exposed":
+      return EXPERIMENT_TRUSTED_SOURCE_TOPIC;
+    case "$purchase.completed":
+    case "$purchase.refunded":
+    case "$purchase.revoked":
+    case "$purchase.transferred_out":
+    case "$purchase.transferred_in":
+    case "$subscription.created":
+    case "$subscription.renewed":
+    case "$subscription.canceled":
+    case "$subscription.expired":
+    case "$subscription.active":
+    case "$subscription.refund_reversed":
+    case "$subscription.billing_retry":
+    case "$subscription.extended":
+    case "$subscription.product_changed":
+    case "$subscription.offer_redeemed":
+    case "$subscription.price_increase_pending":
+    case "$subscription.auto_renew_resumed":
+    case "$subscription.transferred_out":
+    case "$subscription.transferred_in":
+      return REVENUE_TRUSTED_SOURCE_TOPIC;
+  }
+};
diff --git a/packages/core/src/domain/notifications/PushDeliveryQueueMessage.ts b/packages/core/src/domain/notifications/PushDeliveryQueueMessage.ts
new file mode 100644
index 000000000..da050afac
--- /dev/null
+++ b/packages/core/src/domain/notifications/PushDeliveryQueueMessage.ts
@@ -0,0 +1,21 @@
+import { Schema } from "effect";
+
+/**
+ * The wire message published to `PushDeliveryQueue` — ONE per
+ * `(send, device)` delivery row. Deliberately thin: it carries only the delivery
+ * id (plus `projectId`/`provider` for span annotation and tenant sanity), and the
+ * consumer re-reads the authoritative `push_notification_delivery` row before
+ * doing anything. That keeps the queue a transient pointer, never the system of
+ * record — the atomic `Pending|Failed -> InProgress` CAS on the DB row is the
+ * idempotency guard against redelivery, independent of queue at-least-once.
+ *
+ * Mirrors `AnalyticsIngestQueueMessage` (a plain `Schema.Struct`).
+ */
+export const PushDeliveryQueueMessage = Schema.Struct({
+  pushNotificationDeliveryId: Schema.String,
+  pushNotificationSendId: Schema.String,
+  projectId: Schema.String,
+  provider: Schema.String,
+});
+
+export type PushDeliveryQueueMessageType = typeof PushDeliveryQueueMessage.Type;
diff --git a/packages/core/src/domain/notifications/PushDeviceToken.ts b/packages/core/src/domain/notifications/PushDeviceToken.ts
new file mode 100644
index 000000000..32177799f
--- /dev/null
+++ b/packages/core/src/domain/notifications/PushDeviceToken.ts
@@ -0,0 +1,35 @@
+import { Schema } from "effect";
+
+/**
+ * Token + message domain types/errors for the push spine. The token-service and
+ * person-link-service catch-all errors live in their respective service files
+ * (matching the payment/person convention); this module owns the cross-cutting
+ * device/message domain errors referenced by the SDK route handlers and the
+ * `NotificationTokenService` shape.
+ */
+
+/**
+ * Raised by `resolveForDelivery` and by ownership-asserting `refresh` /
+ * `unregister`. The SDK route maps it to a UNIFORM 404 for both "no such token"
+ * AND "not your token", so there is no existence oracle.
+ */
+export class PushDeviceTokenNotFoundError extends Schema.TaggedErrorClass<PushDeviceTokenNotFoundError>(
+  "PushDeviceTokenNotFoundError",
+)("PushDeviceTokenNotFoundError", { message: Schema.String }) {}
+
+/**
+ * A registration payload was malformed (e.g. `provider='apns'` without a
+ * `bundleId`/`environment`, or an empty `platformToken`).
+ */
+export class InvalidPushMessageError extends Schema.TaggedErrorClass<InvalidPushMessageError>(
+  "InvalidPushMessageError",
+)("InvalidPushMessageError", { message: Schema.String }) {}
+
+/**
+ * Internal-only: the caller is not the device's active owner. NEVER surfaced
+ * distinctly — the route collapses it into {@link PushDeviceTokenNotFoundError}
+ * to preserve the no-oracle guarantee.
+ */
+export class DeviceOwnershipError extends Schema.TaggedErrorClass<DeviceOwnershipError>(
+  "DeviceOwnershipError",
+)("DeviceOwnershipError", { message: Schema.String }) {}
diff --git a/packages/core/src/domain/notifications/PushNotificationConfiguration.ts b/packages/core/src/domain/notifications/PushNotificationConfiguration.ts
new file mode 100644
index 000000000..bb9fe8a07
--- /dev/null
+++ b/packages/core/src/domain/notifications/PushNotificationConfiguration.ts
@@ -0,0 +1,35 @@
+import { Schema } from "effect";
+
+/**
+ * Domain errors for the push-notification configuration aggregate. Mirrors the
+ * payment-provider configuration error family but lives in the `push_`
+ * namespace to avoid colliding with the entrenched payment-provider webhook
+ * domain. The catch-all `NotificationsConfigurationServiceError` is defined in
+ * the service file (as with `PaymentProviderConfigurationServiceError`).
+ */
+
+/** A config lookup (`getById` / `update`) hit a missing or soft-deleted row. */
+export class NotificationConfigNotFoundError extends Schema.TaggedErrorClass<NotificationConfigNotFoundError>(
+  "NotificationConfigNotFoundError",
+)("NotificationConfigNotFoundError", { message: Schema.String }) {}
+
+/**
+ * `validateGlobalConfiguration` failed to decode the provider config schema (or
+ * a config-time dry-run rejected it) while enabling a config.
+ */
+export class NotificationConfigValidationError extends Schema.TaggedErrorClass<NotificationConfigValidationError>(
+  "NotificationConfigValidationError",
+)("NotificationConfigValidationError", { cause: Schema.String }) {}
+
+/** The derived `pushProviderKey` collides with another active row in the project. */
+export class NotificationConfigKeyUnavailableError extends Schema.TaggedErrorClass<NotificationConfigKeyUnavailableError>(
+  "NotificationConfigKeyUnavailableError",
+)("NotificationConfigKeyUnavailableError", { message: Schema.String }) {}
+
+/**
+ * A `send()` was attempted but no enabled `push_notification_config` exists for
+ * the project — fails the whole send up-front (distinct from per-device failure).
+ */
+export class NotificationConfigNotEnabledError extends Schema.TaggedErrorClass<NotificationConfigNotEnabledError>(
+  "NotificationConfigNotEnabledError",
+)("NotificationConfigNotEnabledError", { message: Schema.String }) {}
diff --git a/packages/core/src/domain/organization/Organization.ts b/packages/core/src/domain/organization/Organization.ts
new file mode 100644
index 000000000..980da3cee
--- /dev/null
+++ b/packages/core/src/domain/organization/Organization.ts
@@ -0,0 +1,10 @@
+/**
+ * Organization domain — typed error that signals an organization invariant
+ * violation. Row data lives in the `organization` Drizzle table.
+ */
+import { Schema } from "effect";
+
+/** Organization row not found in the database. */
+export class OrganizationNotFoundError extends Schema.TaggedErrorClass<OrganizationNotFoundError>(
+  "OrganizationNotFoundError",
+)("OrganizationNotFoundError", { organizationId: Schema.String }) {}
diff --git a/packages/core/src/domain/paymentProvider/PaymentProviderConfiguration.ts b/packages/core/src/domain/paymentProvider/PaymentProviderConfiguration.ts
new file mode 100644
index 000000000..20523ae4f
--- /dev/null
+++ b/packages/core/src/domain/paymentProvider/PaymentProviderConfiguration.ts
@@ -0,0 +1,34 @@
+/**
+ * Payment-provider-configuration domain — typed errors that signal an
+ * invariant violation. Row data lives in the `paymentProviderConfigurations`
+ * Drizzle table.
+ */
+import { Schema } from "effect";
+
+/**
+ * Provider catalog. Kept here (rather than with the DB schema) because it's
+ * a closed enum at the domain level — every code path that branches on
+ * provider lists exactly these three.
+ */
+export const PaymentProviderId = Schema.Literals(["apple-app-store", "google-play", "stripe"]);
+export type PaymentProviderId = typeof PaymentProviderId.Type;
+
+/** Configuration row not found. */
+export class PaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<PaymentProviderConfigurationNotFoundError>(
+  "PaymentProviderConfigurationNotFoundError",
+)("PaymentProviderConfigurationNotFoundError", { message: Schema.String }) {}
+
+/** Configuration validation failed (parsing, schema). */
+export class PaymentProviderConfigurationValidationError extends Schema.TaggedErrorClass<PaymentProviderConfigurationValidationError>(
+  "PaymentProviderConfigurationValidationError",
+)("PaymentProviderConfigurationValidationError", { cause: Schema.String }) {}
+
+/** Configuration key collides with an existing live row. */
+export class PaymentProviderConfigurationKeyUnavailableError extends Schema.TaggedErrorClass<PaymentProviderConfigurationKeyUnavailableError>(
+  "PaymentProviderConfigurationKeyUnavailableError",
+)("PaymentProviderConfigurationKeyUnavailableError", { message: Schema.String }) {}
+
+/** A project already has a live configuration for the requested provider. */
+export class PaymentProviderAlreadyExistsError extends Schema.TaggedErrorClass<PaymentProviderAlreadyExistsError>(
+  "PaymentProviderAlreadyExistsError",
+)("PaymentProviderAlreadyExistsError", { message: Schema.String }) {}
diff --git a/packages/core/src/domain/paymentProvider/PaymentProviderProduct.ts b/packages/core/src/domain/paymentProvider/PaymentProviderProduct.ts
new file mode 100644
index 000000000..25f478071
--- /dev/null
+++ b/packages/core/src/domain/paymentProvider/PaymentProviderProduct.ts
@@ -0,0 +1,17 @@
+/**
+ * Payment-provider-product domain — typed errors that signal an invariant
+ * violation on the join row between a `PaymentProviderConfiguration` and a
+ * `Product`. Row data lives in the `paymentProviderConfigurationProducts`
+ * Drizzle table.
+ */
+import { Schema } from "effect";
+
+/** Provider-product row not found. */
+export class PaymentProviderProductNotFoundError extends Schema.TaggedErrorClass<PaymentProviderProductNotFoundError>(
+  "PaymentProviderProductNotFoundError",
+)("PaymentProviderProductNotFoundError", { message: Schema.String }) {}
+
+/** Validation failure on the provider-specific configuration blob. */
+export class PaymentProviderProductValidationError extends Schema.TaggedErrorClass<PaymentProviderProductValidationError>(
+  "PaymentProviderProductValidationError",
+)("PaymentProviderProductValidationError", { message: Schema.String }) {}
diff --git a/packages/core/src/domain/paymentProvider/SubscriptionTransfer.ts b/packages/core/src/domain/paymentProvider/SubscriptionTransfer.ts
new file mode 100644
index 000000000..d5ec79c83
--- /dev/null
+++ b/packages/core/src/domain/paymentProvider/SubscriptionTransfer.ts
@@ -0,0 +1,36 @@
+import { Schema } from "effect";
+
+/**
+ * Transfer-mode policy for cross-owner entitlement transfers.
+ *
+ * When an App Store transaction is restored under a different identified
+ * person than the one currently bound to its `originalTransactionId`, this
+ * mode — stored per payment-provider configuration inside the configuration
+ * JSON blob — decides what happens to the existing subscription /
+ * non-consumable purchase:
+ *
+ * - `transfer_to_new_owner` — move ownership to the restoring person and
+ *   revoke the previous owner's entitlement. The default and recommended
+ *   mode.
+ * - `keep_with_previous_owner` — leave ownership untouched; the restoring
+ *   person gets no entitlement.
+ * - `transfer_if_no_active_on_target` — transfer only when the restoring
+ *   person has no active entitlement of their own, avoiding duplicates.
+ *
+ * Defined as string literals (not numeric) because the value is persisted
+ * inside a human-edited JSON config blob, where readability matters.
+ */
+export const SubscriptionTransferModeSchema = Schema.Literals([
+  "transfer_to_new_owner",
+  "keep_with_previous_owner",
+  "transfer_if_no_active_on_target",
+]);
+
+export type SubscriptionTransferMode = typeof SubscriptionTransferModeSchema.Type;
+
+/**
+ * Effective mode applied when a payment-provider configuration predates the
+ * optional `subscriptionTransferMode` field (every configuration row created
+ * before this feature shipped omits it).
+ */
+export const DEFAULT_SUBSCRIPTION_TRANSFER_MODE: SubscriptionTransferMode = "transfer_to_new_owner";
diff --git a/packages/core/src/domain/paywall/Paywall.ts b/packages/core/src/domain/paywall/Paywall.ts
new file mode 100644
index 000000000..ceb3c9193
--- /dev/null
+++ b/packages/core/src/domain/paywall/Paywall.ts
@@ -0,0 +1,18 @@
+/**
+ * Paywall domain — typed errors that signal a paywall invariant violation.
+ * Row data lives in the `paywalls` Drizzle table.
+ *
+ * Note: paywall-location, paywall-release, and paywall-publish errors live
+ * with their respective services (`paywall-locations/`, `paywall-publishing/`).
+ */
+import { Schema } from "effect";
+
+/** Paywall row not found in the database. */
+export class PaywallNotFoundError extends Schema.TaggedErrorClass<PaywallNotFoundError>(
+  "PaywallNotFoundError",
+)("PaywallNotFoundError", { message: Schema.String }) {}
+
+/** Paywall slug uniqueness invariant violated within a project. */
+export class PaywallSlugAlreadyExistsError extends Schema.TaggedErrorClass<PaywallSlugAlreadyExistsError>(
+  "PaywallSlugAlreadyExistsError",
+)("PaywallSlugAlreadyExistsError", { slug: Schema.String }) {}
diff --git a/packages/core/src/domain/paywallAssetImage.test.ts b/packages/core/src/domain/paywallAssetImage.test.ts
new file mode 100644
index 000000000..2f2d82b6b
--- /dev/null
+++ b/packages/core/src/domain/paywallAssetImage.test.ts
@@ -0,0 +1,148 @@
+import { Effect, Result } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  MAX_PAYWALL_ASSET_BYTES,
+  PaywallAssetValidationError,
+  derivePaywallAssetKey,
+  isOwnedPaywallAssetUrl,
+  paywallAssetKeyFromUrl,
+  paywallAssetSha256Hex,
+  validateAndDecodePaywallAsset,
+} from "./paywallAssetImage.ts";
+
+const toBase64 = (bytes: readonly number[]): string => {
+  let binary = "";
+  for (const b of bytes) {
+    binary += String.fromCharCode(b);
+  }
+  return btoa(binary);
+};
+
+const PNG_MAGIC = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
+const JPEG_MAGIC = [0xff, 0xd8, 0xff, 0x00];
+const GIF_MAGIC = [0x47, 0x49, 0x46, 0x38, 0x39, 0x61, 0x00];
+
+const runExit = <A, E>(effect: Effect.Effect<A, E>) => Effect.runSync(Effect.result(effect));
+
+describe("validateAndDecodePaywallAsset", () => {
+  it("accepts a well-formed PNG and returns bytes + ext", () => {
+    const result = runExit(
+      validateAndDecodePaywallAsset({
+        imageBase64: toBase64(PNG_MAGIC),
+        contentType: "image/png",
+      }),
+    );
+    expect(Result.isSuccess(result)).toBe(true);
+    if (Result.isSuccess(result)) {
+      expect(result.success.ext).toBe("png");
+      expect(result.success.bytes.length).toBe(PNG_MAGIC.length);
+    }
+  });
+
+  it("accepts a PNG sent as a `data:` URL (the AI-chat composer's readAsDataURL path)", () => {
+    // The chat composer sends the full `data:image/png;base64,...` URL (prefix
+    // kept), so the decoder must strip the prefix before `atob`. Feeding the
+    // prefix straight into `atob` misaligns the decode and the magic-byte sniff
+    // then fails with "Image data does not match its declared type".
+    const dataUrl = `data:image/png;base64,${toBase64(PNG_MAGIC)}`;
+    const result = runExit(
+      validateAndDecodePaywallAsset({ imageBase64: dataUrl, contentType: "image/png" }),
+    );
+    expect(Result.isSuccess(result)).toBe(true);
+    if (Result.isSuccess(result)) {
+      expect(result.success.ext).toBe("png");
+      expect(result.success.bytes.length).toBe(PNG_MAGIC.length);
+    }
+  });
+
+  it("accepts GIF (extended allowlist)", () => {
+    const result = runExit(
+      validateAndDecodePaywallAsset({
+        imageBase64: toBase64(GIF_MAGIC),
+        contentType: "image/gif",
+      }),
+    );
+    expect(Result.isSuccess(result)).toBe(true);
+    if (Result.isSuccess(result)) {
+      expect(result.success.ext).toBe("gif");
+    }
+  });
+
+  it("rejects an unsupported content type", () => {
+    const result = runExit(
+      validateAndDecodePaywallAsset({ imageBase64: toBase64(PNG_MAGIC), contentType: "image/svg+xml" }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+    if (Result.isFailure(result)) {
+      expect(result.failure).toBeInstanceOf(PaywallAssetValidationError);
+    }
+  });
+
+  it("rejects bytes that do not match the declared type", () => {
+    const result = runExit(
+      validateAndDecodePaywallAsset({ imageBase64: toBase64(JPEG_MAGIC), contentType: "image/png" }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects an oversized payload from the base64 length pre-check", () => {
+    // Build a base64 string whose decoded length exceeds the cap without
+    // allocating the decoded buffer (the pre-check trips first).
+    const oversizedBase64 = "A".repeat(Math.ceil(((MAX_PAYWALL_ASSET_BYTES + 1024) * 4) / 3));
+    const result = runExit(
+      validateAndDecodePaywallAsset({ imageBase64: oversizedBase64, contentType: "image/png" }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+    if (Result.isFailure(result)) {
+      expect(result.failure.message).toContain("too large");
+    }
+  });
+
+  it("rejects an empty image", () => {
+    const result = runExit(
+      validateAndDecodePaywallAsset({ imageBase64: "", contentType: "image/png" }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+  });
+});
+
+describe("derivePaywallAssetKey", () => {
+  it("is content-addressed and org-scoped", () => {
+    expect(derivePaywallAssetKey("org_1", "deadbeef", "png")).toBe(
+      "paywall-assets/org_1/deadbeef.png",
+    );
+  });
+});
+
+describe("paywallAssetSha256Hex", () => {
+  it("is deterministic for identical bytes (dedup foundation)", async () => {
+    const a = await Effect.runPromise(paywallAssetSha256Hex(new Uint8Array(PNG_MAGIC)));
+    const b = await Effect.runPromise(paywallAssetSha256Hex(new Uint8Array(PNG_MAGIC)));
+    expect(a).toBe(b);
+    expect(a).toMatch(/^[0-9a-f]{64}$/);
+  });
+});
+
+describe("ownership guards", () => {
+  const base = "https://files.example.com";
+
+  it("only owns URLs under our store scoped to the org", () => {
+    const owned = `${base}/files/paywall-assets/org_1/abc.png`;
+    expect(isOwnedPaywallAssetUrl(owned, "org_1", base)).toBe(true);
+    // Another org's object is not owned by org_1.
+    expect(isOwnedPaywallAssetUrl(`${base}/files/paywall-assets/org_2/abc.png`, "org_1", base)).toBe(
+      false,
+    );
+    // External URL is never owned.
+    expect(isOwnedPaywallAssetUrl("https://cdn.other.com/x.png", "org_1", base)).toBe(false);
+    expect(isOwnedPaywallAssetUrl(null, "org_1", base)).toBe(false);
+  });
+
+  it("extracts the key only for own, org-scoped URLs", () => {
+    const owned = `${base}/files/paywall-assets/org_1/abc.png`;
+    expect(paywallAssetKeyFromUrl(owned, "org_1", base)).toBe("paywall-assets/org_1/abc.png");
+    expect(paywallAssetKeyFromUrl(owned, "org_2", base)).toBe(null);
+    expect(paywallAssetKeyFromUrl("https://cdn.other.com/x.png", "org_1", base)).toBe(null);
+  });
+});
diff --git a/packages/core/src/domain/paywallAssetImage.ts b/packages/core/src/domain/paywallAssetImage.ts
new file mode 100644
index 000000000..0f9234e53
--- /dev/null
+++ b/packages/core/src/domain/paywallAssetImage.ts
@@ -0,0 +1,172 @@
+import { Effect, Schema } from "effect";
+
+/**
+ * Raised when an uploaded paywall asset image fails validation (unsupported
+ * type, too large, malformed base64, or bytes that do not match the declared
+ * image type). Surfaced to the RPC layer as a typed error so the studio can
+ * show an actionable message instead of a generic failure.
+ */
+export class PaywallAssetValidationError extends Schema.TaggedErrorClass<PaywallAssetValidationError>(
+  "PaywallAssetValidationError",
+)("PaywallAssetValidationError", { message: Schema.String }) {}
+
+/**
+ * Allowed paywall-asset content types mapped to their stored file extension.
+ * GIF is included (in addition to the avatar allowlist) because animated
+ * backgrounds are a legitimate paywall use case; its magic bytes are sniffed
+ * below like every other type.
+ */
+const CONTENT_TYPE_EXTENSIONS: Record<string, string> = {
+  "image/jpeg": "jpg",
+  "image/png": "png",
+  "image/webp": "webp",
+  "image/gif": "gif",
+};
+
+/**
+ * Hard upper bound on a decoded paywall asset (8 MiB). Backgrounds can be
+ * full-bleed high-resolution images, so this cap is larger than the avatar
+ * cap while still guarding against abuse.
+ */
+export const MAX_PAYWALL_ASSET_BYTES = 8 * 1024 * 1024;
+
+const startsWith = (bytes: Uint8Array, signature: readonly number[], offset = 0): boolean =>
+  signature.every((b, i) => bytes[offset + i] === b);
+
+/** Magic-byte sniff: confirm the decoded bytes actually match the claimed type. */
+const matchesContentType = (bytes: Uint8Array, contentType: string): boolean => {
+  switch (contentType) {
+    case "image/png":
+      return startsWith(bytes, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+    case "image/jpeg":
+      return startsWith(bytes, [0xff, 0xd8, 0xff]);
+    case "image/webp":
+      // "RIFF" <4-byte length> "WEBP"
+      return (
+        startsWith(bytes, [0x52, 0x49, 0x46, 0x46]) &&
+        startsWith(bytes, [0x57, 0x45, 0x42, 0x50], 8)
+      );
+    case "image/gif":
+      // "GIF87a" or "GIF89a"
+      return (
+        startsWith(bytes, [0x47, 0x49, 0x46, 0x38, 0x37, 0x61]) ||
+        startsWith(bytes, [0x47, 0x49, 0x46, 0x38, 0x39, 0x61])
+      );
+    default:
+      return false;
+  }
+};
+
+const decodeBase64 = (base64: string): Uint8Array => {
+  // Tolerate a `data:<type>;base64,` prefix even though the studio sends raw base64.
+  const comma = base64.indexOf(",");
+  const payload = base64.startsWith("data:") && comma !== -1 ? base64.slice(comma + 1) : base64;
+  const binary = atob(payload);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+};
+
+const MAX_MB = Math.round(MAX_PAYWALL_ASSET_BYTES / 1024 / 1024);
+
+/**
+ * Validates the claimed content type, decodes the base64 payload, and confirms
+ * the bytes are a recognised image within the size cap. Returns the decoded
+ * bytes and the file extension to use for the stored object key.
+ */
+export const validateAndDecodePaywallAsset = (input: {
+  readonly imageBase64: string;
+  readonly contentType: string;
+}): Effect.Effect<
+  { readonly bytes: Uint8Array; readonly ext: string },
+  PaywallAssetValidationError
+> =>
+  Effect.gen(function* () {
+    const ext = CONTENT_TYPE_EXTENSIONS[input.contentType];
+    if (!ext) {
+      return yield* Effect.fail(
+        new PaywallAssetValidationError({
+          message: `Unsupported image type "${input.contentType}". Use PNG, JPEG, WebP, or GIF.`,
+        }),
+      );
+    }
+
+    // Reject obviously-oversized payloads from the base64 length BEFORE
+    // allocating the decoded buffer (every 4 base64 chars decode to 3 bytes).
+    if (Math.floor((input.imageBase64.length * 3) / 4) > MAX_PAYWALL_ASSET_BYTES + 64) {
+      return yield* Effect.fail(
+        new PaywallAssetValidationError({ message: `Image is too large (max ${MAX_MB}MB).` }),
+      );
+    }
+
+    const bytes = yield* Effect.try({
+      try: () => decodeBase64(input.imageBase64),
+      catch: () => new PaywallAssetValidationError({ message: "Image data is not valid base64." }),
+    });
+
+    if (bytes.length === 0) {
+      return yield* Effect.fail(new PaywallAssetValidationError({ message: "Image is empty." }));
+    }
+    if (bytes.length > MAX_PAYWALL_ASSET_BYTES) {
+      return yield* Effect.fail(
+        new PaywallAssetValidationError({ message: `Image is too large (max ${MAX_MB}MB).` }),
+      );
+    }
+    if (!matchesContentType(bytes, input.contentType)) {
+      return yield* Effect.fail(
+        new PaywallAssetValidationError({
+          message: "Image data does not match its declared type.",
+        }),
+      );
+    }
+
+    return { bytes, ext };
+  });
+
+/** SHA-256 hex digest of the asset bytes (WebCrypto; available in workerd). */
+export const paywallAssetSha256Hex = (bytes: Uint8Array): Effect.Effect<string> =>
+  Effect.promise(async () => {
+    const digest = await crypto.subtle.digest("SHA-256", bytes as unknown as ArrayBuffer);
+    return Array.from(new Uint8Array(digest))
+      .map((b) => b.toString(16).padStart(2, "0"))
+      .join("");
+  });
+
+/** Content-addressed object key: `paywall-assets/<organizationId>/<sha256>.<ext>`. */
+export const derivePaywallAssetKey = (
+  organizationId: string,
+  sha256Hex: string,
+  ext: string,
+): string => `paywall-assets/${organizationId}/${sha256Hex}.${ext}`;
+
+/**
+ * Whether a stored asset URL points at an object owned by the given
+ * organization in our own public file store (so it is safe to delete). Guards
+ * both against deleting external URLs and against deleting another org's object.
+ */
+export const isOwnedPaywallAssetUrl = (
+  url: string | null,
+  organizationId: string,
+  publicBaseUrl: string,
+): boolean =>
+  url !== null && url.startsWith(`${publicBaseUrl}/files/paywall-assets/${organizationId}/`);
+
+/**
+ * Extracts the object key from one of our public paywall-asset URLs when it is
+ * owned by `organizationId`, or `null`. The org-prefix check keeps deletion
+ * scoped to the caller's own objects.
+ */
+export const paywallAssetKeyFromUrl = (
+  url: string,
+  organizationId: string,
+  publicBaseUrl: string,
+): string | null => {
+  const prefix = `${publicBaseUrl}/files/`;
+  if (!url.startsWith(prefix)) {
+    return null;
+  }
+  const key = url.slice(prefix.length);
+  return key.startsWith(`paywall-assets/${organizationId}/`) ? key : null;
+};
diff --git a/packages/core/src/domain/paywallLocation/PaywallLocation.ts b/packages/core/src/domain/paywallLocation/PaywallLocation.ts
new file mode 100644
index 000000000..2ada7f930
--- /dev/null
+++ b/packages/core/src/domain/paywallLocation/PaywallLocation.ts
@@ -0,0 +1,21 @@
+/**
+ * Paywall-location domain — typed errors that signal an invariant violation
+ * on a paywall location or its active showing. Row data lives in the
+ * `paywallLocations` Drizzle table.
+ */
+import { Schema } from "effect";
+
+/** Location row not found in the database. */
+export class PaywallLocationNotFoundError extends Schema.TaggedErrorClass<PaywallLocationNotFoundError>(
+  "PaywallLocationNotFoundError",
+)("PaywallLocationNotFoundError", { message: Schema.String }) {}
+
+/** Slug uniqueness invariant violated within a project. */
+export class PaywallLocationSlugAlreadyExistsError extends Schema.TaggedErrorClass<PaywallLocationSlugAlreadyExistsError>(
+  "PaywallLocationSlugAlreadyExistsError",
+)("PaywallLocationSlugAlreadyExistsError", { slug: Schema.String }) {}
+
+/** Showing-assignment input failed validation (missing paywall, archived location, …). */
+export class PaywallLocationShowingValidationError extends Schema.TaggedErrorClass<PaywallLocationShowingValidationError>(
+  "PaywallLocationShowingValidationError",
+)("PaywallLocationShowingValidationError", { message: Schema.String }) {}
diff --git a/packages/core/src/domain/paywallThumbnail.test.ts b/packages/core/src/domain/paywallThumbnail.test.ts
new file mode 100644
index 000000000..4ec63e1dc
--- /dev/null
+++ b/packages/core/src/domain/paywallThumbnail.test.ts
@@ -0,0 +1,59 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  derivePaywallThumbnailKey,
+  isOwnedPaywallThumbnailUrl,
+  paywallThumbnailKeyFromUrl,
+} from "./paywallThumbnail.ts";
+
+describe("derivePaywallThumbnailKey", () => {
+  it("is project- and paywall-scoped and seq-addressed", () => {
+    expect(derivePaywallThumbnailKey("proj_1", "pw_1", 7)).toBe(
+      "paywall-thumbnails/proj_1/pw_1/7.png",
+    );
+  });
+});
+
+describe("thumbnail ownership guards", () => {
+  const base = "https://files.example.com";
+
+  it("only owns URLs under our store scoped to the project + paywall", () => {
+    const owned = `${base}/files/paywall-thumbnails/proj_1/pw_1/3.png`;
+    expect(isOwnedPaywallThumbnailUrl(owned, "proj_1", "pw_1", base)).toBe(true);
+    // Another paywall's object is not owned by pw_1.
+    expect(
+      isOwnedPaywallThumbnailUrl(
+        `${base}/files/paywall-thumbnails/proj_1/pw_2/3.png`,
+        "proj_1",
+        "pw_1",
+        base,
+      ),
+    ).toBe(false);
+    // Another project's object is not owned.
+    expect(
+      isOwnedPaywallThumbnailUrl(
+        `${base}/files/paywall-thumbnails/proj_2/pw_1/3.png`,
+        "proj_1",
+        "pw_1",
+        base,
+      ),
+    ).toBe(false);
+    // External URL is never owned.
+    expect(isOwnedPaywallThumbnailUrl("https://cdn.other.com/x.png", "proj_1", "pw_1", base)).toBe(
+      false,
+    );
+    expect(isOwnedPaywallThumbnailUrl(null, "proj_1", "pw_1", base)).toBe(false);
+  });
+
+  it("extracts the key only for own, project+paywall-scoped URLs", () => {
+    const owned = `${base}/files/paywall-thumbnails/proj_1/pw_1/3.png`;
+    expect(paywallThumbnailKeyFromUrl(owned, "proj_1", "pw_1", base)).toBe(
+      "paywall-thumbnails/proj_1/pw_1/3.png",
+    );
+    expect(paywallThumbnailKeyFromUrl(owned, "proj_1", "pw_2", base)).toBe(null);
+    expect(paywallThumbnailKeyFromUrl(owned, "proj_2", "pw_1", base)).toBe(null);
+    expect(paywallThumbnailKeyFromUrl("https://cdn.other.com/x.png", "proj_1", "pw_1", base)).toBe(
+      null,
+    );
+  });
+});
diff --git a/packages/core/src/domain/paywallThumbnail.ts b/packages/core/src/domain/paywallThumbnail.ts
new file mode 100644
index 000000000..c0e61941f
--- /dev/null
+++ b/packages/core/src/domain/paywallThumbnail.ts
@@ -0,0 +1,53 @@
+/**
+ * Public URL + object-key helpers for paywall thumbnails, mirroring the
+ * ownership guards in {@link file://./paywallAssetImage.ts}. Thumbnails live in
+ * the same public file store as paywall assets, under a distinct
+ * `paywall-thumbnails/<projectId>/<paywallId>/<seq>.png` layout, and are served
+ * at `${publicBaseUrl}/files/<key>` like every other public object.
+ */
+
+/**
+ * Content-addressed-by-seq object key for one rendered thumbnail:
+ * `paywall-thumbnails/<projectId>/<paywallId>/<seq>.png`. The `seq` in the key
+ * makes each render immutable, so a newer render never overwrites an older
+ * object in place — the previous object is deleted best-effort after the row
+ * flips to the new URL.
+ */
+export const derivePaywallThumbnailKey = (
+  projectId: string,
+  paywallId: string,
+  seq: number,
+): string => `paywall-thumbnails/${projectId}/${paywallId}/${seq}.png`;
+
+/**
+ * Whether a stored thumbnail URL points at an object owned by the given
+ * paywall in our own public file store (so it is safe to delete). Guards both
+ * against deleting external URLs and against deleting another paywall's object.
+ */
+export const isOwnedPaywallThumbnailUrl = (
+  url: string | null,
+  projectId: string,
+  paywallId: string,
+  publicBaseUrl: string,
+): boolean =>
+  url !== null &&
+  url.startsWith(`${publicBaseUrl}/files/paywall-thumbnails/${projectId}/${paywallId}/`);
+
+/**
+ * Extracts the object key from one of our public paywall-thumbnail URLs when it
+ * is owned by `paywallId` in `projectId`, or `null`. The prefix check keeps
+ * deletion scoped to this paywall's own thumbnails.
+ */
+export const paywallThumbnailKeyFromUrl = (
+  url: string,
+  projectId: string,
+  paywallId: string,
+  publicBaseUrl: string,
+): string | null => {
+  const prefix = `${publicBaseUrl}/files/`;
+  if (!url.startsWith(prefix)) {
+    return null;
+  }
+  const key = url.slice(prefix.length);
+  return key.startsWith(`paywall-thumbnails/${projectId}/${paywallId}/`) ? key : null;
+};
diff --git a/packages/core/src/domain/perk/Perk.ts b/packages/core/src/domain/perk/Perk.ts
new file mode 100644
index 000000000..afa59845f
--- /dev/null
+++ b/packages/core/src/domain/perk/Perk.ts
@@ -0,0 +1,15 @@
+/**
+ * Perk domain — typed errors that signal a perk invariant violation. Row
+ * data lives in the `perks` Drizzle table.
+ */
+import { Schema } from "effect";
+
+/** Perk row not found in the database. */
+export class PerkNotFoundError extends Schema.TaggedErrorClass<PerkNotFoundError>(
+  "PerkNotFoundError",
+)("PerkNotFoundError", { message: Schema.String }) {}
+
+/** Perk slug uniqueness invariant violated within a project. */
+export class PerkSlugAlreadyExistsError extends Schema.TaggedErrorClass<PerkSlugAlreadyExistsError>(
+  "PerkSlugAlreadyExistsError",
+)("PerkSlugAlreadyExistsError", { slug: Schema.String }) {}
diff --git a/packages/core/src/domain/person/IdentityGraph.ts b/packages/core/src/domain/person/IdentityGraph.ts
new file mode 100644
index 000000000..19cee5313
--- /dev/null
+++ b/packages/core/src/domain/person/IdentityGraph.ts
@@ -0,0 +1,591 @@
+/**
+ * Order-agnostic identity resolution — the pure core of the event-sourced
+ * ("Option B") identity model described in
+ * `docs/order-agnostic-analytics-events.md`.
+ *
+ * The whole point of this module: every value it computes is a function of the
+ * *set* of identity inputs, never of the order they are folded in. Each fold is
+ * commutative, associative and idempotent (a join-semilattice / state-based
+ * CRDT), so a retried, duplicated, or late-arriving event always re-folds to
+ * the identical state. The DB-facing projection service applies the result of
+ * {@link project} to Postgres; this file holds zero IO so the invariants can be
+ * proven exhaustively in unit tests.
+ *
+ * Two independent pieces compose into {@link project}:
+ *
+ * 1. {@link resolveIdentities} — a deterministic union-find over distinct ids.
+ *    An `$identify` event is an unordered "these two are the same person" edge.
+ *    The canonical member of each connected component is the one with the
+ *    smallest `(firstSeenTs, distinctId)`. Because `min` is order-independent,
+ *    so is the canonical — this is what makes `identify(a→b)` then
+ *    `identify(b→c)` converge to the same person regardless of arrival order.
+ *
+ * 2. {@link foldTraits} — a per-key last-write-wins register fold keyed by
+ *    `(eventTs, eventId)`. `$set` keeps the newest value for a key, `$set_once`
+ *    keeps the earliest, and `$set` always outranks `$set_once` for the same
+ *    key. No key's resolved value depends on processing order.
+ */
+
+/** A distinct id observed at a given event time (epoch milliseconds). */
+export interface IdentityObservation {
+  readonly distinctId: string;
+  /** Event timestamp — intrinsic to the event, NOT the processing time. */
+  readonly eventTs: number;
+}
+
+/**
+ * An assertion that two distinct ids name the same person — the order-agnostic
+ * reading of an `$identify`. The pair is unordered: `(a, b)` and `(b, a)` carry
+ * identical meaning.
+ */
+export interface IdentityAssertion {
+  readonly distinctIdA: string;
+  readonly distinctIdB: string;
+  readonly eventTs: number;
+}
+
+/** Result of {@link resolveIdentities}. */
+export interface IdentityResolution {
+  /** Every distinct id mapped to the canonical distinct id of its component. */
+  readonly canonicalOf: ReadonlyMap<string, string>;
+  /** Canonical distinct id mapped to its sorted component members. */
+  readonly membersOf: ReadonlyMap<string, ReadonlyArray<string>>;
+  /** Per distinct id, the earliest event timestamp it was seen at. */
+  readonly firstSeenTs: ReadonlyMap<string, number>;
+}
+
+/** Lexicographic, locale-independent string order for deterministic results. */
+const compareString = (left: string, right: string): number =>
+  left < right ? -1 : left > right ? 1 : 0;
+
+/**
+ * Computes connected components of distinct ids under the assertion graph and
+ * picks each component's canonical member deterministically.
+ *
+ * Canonical selection rule: the member with the smallest
+ * `(firstSeenTs, distinctId)`. `firstSeenTs` is the minimum event timestamp
+ * across every observation/assertion that references the id, computed in a
+ * first pass so the union-by-key tie-break is fixed before any union runs.
+ * With fixed keys, the root of any component is always its global minimum under
+ * that key, and `min` is commutative/associative/idempotent — therefore the
+ * whole resolution is independent of input order.
+ */
+export const resolveIdentities = ({
+  observations,
+  assertions,
+}: {
+  readonly observations?: Iterable<IdentityObservation>;
+  readonly assertions?: Iterable<IdentityAssertion>;
+}): IdentityResolution => {
+  const firstSeen = new Map<string, number>();
+  const see = (distinctId: string, eventTs: number): void => {
+    const current = firstSeen.get(distinctId);
+    if (current === undefined || eventTs < current) {
+      firstSeen.set(distinctId, eventTs);
+    }
+  };
+
+  const edges: Array<readonly [string, string]> = [];
+  for (const observation of observations ?? []) {
+    see(observation.distinctId, observation.eventTs);
+  }
+  for (const assertion of assertions ?? []) {
+    see(assertion.distinctIdA, assertion.eventTs);
+    see(assertion.distinctIdB, assertion.eventTs);
+    if (assertion.distinctIdA !== assertion.distinctIdB) {
+      edges.push([assertion.distinctIdA, assertion.distinctIdB]);
+    }
+  }
+
+  // Union-find. Every key's sort order is fully known before unioning, so the
+  // root that survives each union is always the component minimum.
+  const parent = new Map<string, string>();
+  for (const distinctId of firstSeen.keys()) {
+    parent.set(distinctId, distinctId);
+  }
+
+  const findRoot = (start: string): string => {
+    let root = start;
+    let next = parent.get(root);
+    while (next !== undefined && next !== root) {
+      root = next;
+      next = parent.get(root);
+    }
+    // Path compression keeps repeated lookups near-constant.
+    let cursor = start;
+    while (cursor !== root) {
+      const parentOfCursor = parent.get(cursor) ?? root;
+      parent.set(cursor, root);
+      cursor = parentOfCursor;
+    }
+    return root;
+  };
+
+  const compareKey = (left: string, right: string): number => {
+    const leftTs = firstSeen.get(left) ?? 0;
+    const rightTs = firstSeen.get(right) ?? 0;
+    if (leftTs !== rightTs) {
+      return leftTs - rightTs;
+    }
+    return compareString(left, right);
+  };
+
+  for (const [a, b] of edges) {
+    const rootA = findRoot(a);
+    const rootB = findRoot(b);
+    if (rootA === rootB) {
+      continue;
+    }
+    // Smaller key becomes the parent → the surviving root is the component min.
+    if (compareKey(rootA, rootB) <= 0) {
+      parent.set(rootB, rootA);
+    } else {
+      parent.set(rootA, rootB);
+    }
+  }
+
+  const canonicalOf = new Map<string, string>();
+  const members = new Map<string, Array<string>>();
+  for (const distinctId of firstSeen.keys()) {
+    const root = findRoot(distinctId);
+    canonicalOf.set(distinctId, root);
+    const list = members.get(root);
+    if (list) {
+      list.push(distinctId);
+    } else {
+      members.set(root, [distinctId]);
+    }
+  }
+
+  const membersOf = new Map<string, ReadonlyArray<string>>();
+  for (const [root, list] of members) {
+    membersOf.set(root, [...list].sort(compareString));
+  }
+
+  return { canonicalOf, firstSeenTs: firstSeen, membersOf };
+};
+
+/** The birth coordinates of a person, used to pick a merge survivor. */
+export interface PersonSeniority {
+  readonly id: string;
+  readonly firstSeenAt?: Date | null;
+  readonly createdAt?: Date | null;
+}
+
+/**
+ * Deterministic, order-agnostic survivor selection for a person merge: the
+ * **older** person wins, measured by earliest first-seen time (falling back to
+ * created-at, then epoch), with the lexicographically smaller `id` as the final
+ * tie-break. Returns a negative number when `left` should survive, positive when
+ * `right` should, `0` only for the same id.
+ *
+ * Because the result is a pure function of the persons' birth times — not the
+ * order their events were processed — choosing the survivor this way makes a
+ * merge commutative: `identify(a→b)` then `identify(b→c)` converge to the same
+ * surviving person regardless of arrival order. `firstSeenAt` is preferred over
+ * `createdAt` because {@link materializeTraitState}'s caller lowers it toward the
+ * component's true minimum event time as more events arrive, so the winner
+ * stabilizes on the genuinely-oldest identity.
+ */
+export const comparePersonForMerge = (left: PersonSeniority, right: PersonSeniority): number => {
+  const leftTs = (left.firstSeenAt ?? left.createdAt)?.getTime() ?? 0;
+  const rightTs = (right.firstSeenAt ?? right.createdAt)?.getTime() ?? 0;
+  if (leftTs !== rightTs) {
+    return leftTs - rightTs;
+  }
+  return left.id < right.id ? -1 : left.id > right.id ? 1 : 0;
+};
+
+/** One `(distinctId → person)` row, used to rebuild the projection from the log. */
+export interface DistinctIdMapping {
+  readonly distinctId: string;
+  readonly person: PersonSeniority;
+}
+
+/** The recomputed projection produced by {@link planProjectionRebuild}. */
+export interface RebuildPlan {
+  /** Every distinct id mapped to the canonical person id it should resolve to. */
+  readonly canonicalPersonOf: ReadonlyMap<string, string>;
+  /** Each non-canonical person id mapped to the person it should merge into. */
+  readonly mergedInto: ReadonlyMap<string, string>;
+}
+
+/**
+ * Recomputes the `(distinctId → person)` / `mergedIntoPersonId` projection purely
+ * from the *set* of identity assertions plus the current distinct-id→person
+ * mappings — the disaster-recovery / rule-change rebuild for the event-sourced
+ * model.
+ *
+ * Assertions define connected components ({@link resolveIdentities}); within each
+ * component the canonical person is the oldest ({@link comparePersonForMerge}),
+ * every distinct id resolves to it, and every other person in the component is
+ * marked merged into it. Because both the component partition and the canonical
+ * selection are pure functions of the inputs, the plan is independent of the
+ * order assertions or mappings are supplied — re-running it converges.
+ */
+export const planProjectionRebuild = (input: {
+  readonly assertions?: Iterable<IdentityAssertion>;
+  readonly mappings: Iterable<DistinctIdMapping>;
+}): RebuildPlan => {
+  const personByDistinct = new Map<string, PersonSeniority>();
+  const observations: Array<IdentityObservation> = [];
+  for (const mapping of input.mappings) {
+    personByDistinct.set(mapping.distinctId, mapping.person);
+    observations.push({
+      distinctId: mapping.distinctId,
+      eventTs: mapping.person.firstSeenAt?.getTime() ?? mapping.person.createdAt?.getTime() ?? 0,
+    });
+  }
+
+  const resolution = resolveIdentities({ assertions: input.assertions, observations });
+
+  const canonicalPersonOf = new Map<string, string>();
+  const mergedInto = new Map<string, string>();
+
+  for (const members of resolution.membersOf.values()) {
+    const personsInComponent = new Map<string, PersonSeniority>();
+    for (const distinctId of members) {
+      const person = personByDistinct.get(distinctId);
+      if (person) {
+        personsInComponent.set(person.id, person);
+      }
+    }
+    let canonical: PersonSeniority | undefined;
+    for (const person of personsInComponent.values()) {
+      if (!canonical || comparePersonForMerge(person, canonical) < 0) {
+        canonical = person;
+      }
+    }
+    if (!canonical) {
+      continue;
+    }
+    for (const distinctId of members) {
+      if (personByDistinct.has(distinctId)) {
+        canonicalPersonOf.set(distinctId, canonical.id);
+      }
+    }
+    for (const person of personsInComponent.values()) {
+      if (person.id !== canonical.id) {
+        mergedInto.set(person.id, canonical.id);
+      }
+    }
+  }
+
+  return { canonicalPersonOf, mergedInto };
+};
+
+/** A single `$set` / `$set_once` write carrying its event coordinates. */
+export interface TraitWrite {
+  readonly eventTs: number;
+  /** Stable, content-derived event id — the deterministic same-`eventTs` tie-break. */
+  readonly eventId: string;
+  readonly set?: Readonly<Record<string, unknown>>;
+  readonly setOnce?: Readonly<Record<string, unknown>>;
+}
+
+interface LwwCell {
+  readonly ts: number;
+  readonly id: string;
+  readonly value: unknown;
+}
+
+/** True when `(aTs, aId)` is strictly later than `(bTs, bId)`. */
+const isLater = (aTs: number, aId: string, bTs: number, bId: string): boolean =>
+  aTs > bTs || (aTs === bTs && aId > bId);
+
+/**
+ * Per-key last-write-wins fold for person traits, independent of fold order.
+ *
+ * - `$set` keys resolve to the value from the write with the greatest
+ *   `(eventTs, eventId)` — newest wins.
+ * - `$set_once` keys resolve to the value from the write with the smallest
+ *   `(eventTs, eventId)` — earliest wins.
+ * - A key touched by any `$set` always takes the `$set` value over any
+ *   `$set_once` value, mirroring PostHog semantics while staying commutative.
+ */
+export const foldTraits = (writes: Iterable<TraitWrite>): Record<string, unknown> => {
+  const bestSet = new Map<string, LwwCell>();
+  const bestSetOnce = new Map<string, LwwCell>();
+
+  for (const write of writes) {
+    if (write.set) {
+      for (const [key, value] of Object.entries(write.set)) {
+        const current = bestSet.get(key);
+        if (!current || isLater(write.eventTs, write.eventId, current.ts, current.id)) {
+          bestSet.set(key, { id: write.eventId, ts: write.eventTs, value });
+        }
+      }
+    }
+    if (write.setOnce) {
+      for (const [key, value] of Object.entries(write.setOnce)) {
+        const current = bestSetOnce.get(key);
+        if (!current || isLater(current.ts, current.id, write.eventTs, write.eventId)) {
+          bestSetOnce.set(key, { id: write.eventId, ts: write.eventTs, value });
+        }
+      }
+    }
+  }
+
+  const resolved: Record<string, unknown> = {};
+  for (const [key, cell] of bestSetOnce) {
+    resolved[key] = cell.value;
+  }
+  for (const [key, cell] of bestSet) {
+    resolved[key] = cell.value;
+  }
+  return resolved;
+};
+
+/** Per-trait LWW bookkeeping cell — structurally `PersonTraitMeta` in the DB. */
+export interface TraitMetaCell {
+  readonly ts: number;
+  readonly id: string;
+  readonly mode: "set" | "setOnce";
+}
+
+/** Per-trait LWW metadata map — structurally `PersonTraitsMeta` in the DB. */
+export type TraitsMeta = Record<string, TraitMetaCell>;
+
+/** A person's resolved traits plus the LWW metadata needed to fold more writes. */
+export interface TraitFoldState {
+  readonly traits: Record<string, unknown>;
+  readonly meta: TraitsMeta;
+}
+
+/**
+ * Incrementally folds one trait write into existing `(traits, meta)` state with
+ * the same per-key rules as {@link foldTraits}. Applying writes one at a time in
+ * any order — exactly what the streaming projection does — converges to the same
+ * result as folding the whole set at once, so the persisted person row never
+ * depends on processing order. Returns fresh objects; inputs are not mutated.
+ */
+export const applyTraitWrite = (state: TraitFoldState, write: TraitWrite): TraitFoldState => {
+  const traits = { ...state.traits };
+  const meta: TraitsMeta = { ...state.meta };
+
+  if (write.setOnce) {
+    for (const [key, value] of Object.entries(write.setOnce)) {
+      const cell = meta[key];
+      // `$set_once` loses to any existing `$set`; among `$set_once` writes the
+      // earliest wins.
+      const wins =
+        !cell ||
+        (cell.mode === "setOnce" && isLater(cell.ts, cell.id, write.eventTs, write.eventId));
+      if (wins) {
+        traits[key] = value;
+        meta[key] = { id: write.eventId, mode: "setOnce", ts: write.eventTs };
+      }
+    }
+  }
+
+  if (write.set) {
+    for (const [key, value] of Object.entries(write.set)) {
+      const cell = meta[key];
+      // `$set` always outranks `$set_once`; among `$set` writes the newest wins.
+      const wins =
+        !cell || cell.mode === "setOnce" || isLater(write.eventTs, write.eventId, cell.ts, cell.id);
+      if (wins) {
+        traits[key] = value;
+        meta[key] = { id: write.eventId, mode: "set", ts: write.eventTs };
+      }
+    }
+  }
+
+  return { meta, traits };
+};
+
+/**
+ * Lifts a stored `(traits, meta)` pair into a {@link TraitFoldState},
+ * synthesizing a floor meta cell for any legacy trait key that predates
+ * per-trait metadata. The floor (`ts: 0`, `mode: "set"`) preserves the value
+ * through {@link combineTraitStates} yet loses to any real write.
+ */
+export const materializeTraitState = (
+  traits: Readonly<Record<string, unknown>> | null | undefined,
+  meta: Readonly<TraitsMeta> | null | undefined,
+): TraitFoldState => {
+  const nextTraits: Record<string, unknown> = { ...(traits ?? {}) };
+  const nextMeta: TraitsMeta = { ...(meta ?? {}) };
+  for (const key of Object.keys(nextTraits)) {
+    if (!nextMeta[key]) {
+      nextMeta[key] = { id: "", mode: "set", ts: 0 };
+    }
+  }
+  return { meta: nextMeta, traits: nextTraits };
+};
+
+/** True when trait cell `a` outranks `b` for the same key under LWW rules. */
+const traitCellWins = (a: TraitMetaCell, b: TraitMetaCell): boolean => {
+  if (a.mode !== b.mode) {
+    return a.mode === "set"; // $set always beats $set_once
+  }
+  if (a.mode === "set") {
+    return isLater(a.ts, a.id, b.ts, b.id); // newest $set wins
+  }
+  return isLater(b.ts, b.id, a.ts, a.id); // earliest $set_once wins
+};
+
+/**
+ * Per-key LWW merge of two persons' trait states — used when two persons merge.
+ * Each key's winner is chosen by the same rules as {@link foldTraits}, so the
+ * merged result is commutative: `combineTraitStates(a, b)` deep-equals
+ * `combineTraitStates(b, a)`. Pass states through {@link materializeTraitState}
+ * first so legacy keys without metadata are not dropped.
+ */
+export const combineTraitStates = (left: TraitFoldState, right: TraitFoldState): TraitFoldState => {
+  const meta: TraitsMeta = {};
+  const traits: Record<string, unknown> = {};
+  const keys = new Set<string>([...Object.keys(left.meta), ...Object.keys(right.meta)]);
+  for (const key of keys) {
+    const leftCell = left.meta[key];
+    const rightCell = right.meta[key];
+    if (leftCell && rightCell) {
+      const leftWins = traitCellWins(leftCell, rightCell);
+      meta[key] = leftWins ? leftCell : rightCell;
+      traits[key] = leftWins ? left.traits[key] : right.traits[key];
+    } else if (leftCell) {
+      meta[key] = leftCell;
+      traits[key] = left.traits[key];
+    } else if (rightCell) {
+      meta[key] = rightCell;
+      traits[key] = right.traits[key];
+    }
+  }
+  return { meta, traits };
+};
+
+/**
+ * One ingested event's contribution to identity state. A plain capture is an
+ * observation; an `$identify` additionally carries `previousDistinctId` (the
+ * stitch edge). Trait/email/name fields are optional per-event writes.
+ */
+export interface IdentityEventInput {
+  readonly distinctId: string;
+  readonly eventTs: number;
+  /** Stable, content-derived event id — the deterministic same-`eventTs` tie-break. */
+  readonly eventId: string;
+  /** Present on `$identify`: the previous distinct id being stitched in. */
+  readonly previousDistinctId?: string;
+  readonly set?: Readonly<Record<string, unknown>>;
+  readonly setOnce?: Readonly<Record<string, unknown>>;
+  readonly email?: string;
+  readonly name?: string;
+}
+
+/** The fully-resolved view of a single person (one canonical component). */
+export interface ResolvedPerson {
+  readonly canonicalDistinctId: string;
+  readonly distinctIds: ReadonlyArray<string>;
+  readonly firstSeenTs: number;
+  readonly lastSeenTs: number;
+  readonly traits: Record<string, unknown>;
+  readonly email?: string;
+  readonly name?: string;
+}
+
+/** Result of {@link project}. */
+export interface IdentityProjection {
+  /** Every distinct id mapped to its canonical (person-key) distinct id. */
+  readonly canonicalOf: ReadonlyMap<string, string>;
+  /** Canonical distinct id mapped to the resolved person. */
+  readonly persons: ReadonlyMap<string, ResolvedPerson>;
+}
+
+/**
+ * Folds a whole set of events into the canonical identity projection: connected
+ * components, their canonical person, and each person's order-agnostic profile
+ * (traits via {@link foldTraits}, `firstSeen`/`lastSeen` via min/max,
+ * `email`/`name` via newest-wins LWW).
+ *
+ * `project(events)` depends only on the *set* `events`: any permutation,
+ * duplication, or re-batching yields a deep-equal result. This is the contract
+ * the invariant test-suite enforces and the property the projection service
+ * relies on to drop the legacy per-identity serialization.
+ */
+export const project = (events: Iterable<IdentityEventInput>): IdentityProjection => {
+  const eventList = [...events];
+
+  const observations: Array<IdentityObservation> = [];
+  const assertions: Array<IdentityAssertion> = [];
+  for (const event of eventList) {
+    observations.push({ distinctId: event.distinctId, eventTs: event.eventTs });
+    if (event.previousDistinctId !== undefined) {
+      observations.push({ distinctId: event.previousDistinctId, eventTs: event.eventTs });
+      if (event.previousDistinctId !== event.distinctId) {
+        assertions.push({
+          distinctIdA: event.previousDistinctId,
+          distinctIdB: event.distinctId,
+          eventTs: event.eventTs,
+        });
+      }
+    }
+  }
+
+  const resolution = resolveIdentities({ assertions, observations });
+
+  const writesByCanonical = new Map<string, Array<TraitWrite>>();
+  const firstSeenByCanonical = new Map<string, number>();
+  const lastSeenByCanonical = new Map<string, number>();
+  const bestEmail = new Map<string, LwwCell>();
+  const bestName = new Map<string, LwwCell>();
+
+  const canonicalFor = (distinctId: string): string =>
+    resolution.canonicalOf.get(distinctId) ?? distinctId;
+
+  for (const event of eventList) {
+    const canonical = canonicalFor(event.distinctId);
+
+    const writes = writesByCanonical.get(canonical);
+    const write: TraitWrite = {
+      eventId: event.eventId,
+      eventTs: event.eventTs,
+      set: event.set,
+      setOnce: event.setOnce,
+    };
+    if (writes) {
+      writes.push(write);
+    } else {
+      writesByCanonical.set(canonical, [write]);
+    }
+
+    const currentFirst = firstSeenByCanonical.get(canonical);
+    if (currentFirst === undefined || event.eventTs < currentFirst) {
+      firstSeenByCanonical.set(canonical, event.eventTs);
+    }
+    const currentLast = lastSeenByCanonical.get(canonical);
+    if (currentLast === undefined || event.eventTs > currentLast) {
+      lastSeenByCanonical.set(canonical, event.eventTs);
+    }
+
+    if (event.email !== undefined) {
+      const current = bestEmail.get(canonical);
+      if (!current || isLater(event.eventTs, event.eventId, current.ts, current.id)) {
+        bestEmail.set(canonical, { id: event.eventId, ts: event.eventTs, value: event.email });
+      }
+    }
+    if (event.name !== undefined) {
+      const current = bestName.get(canonical);
+      if (!current || isLater(event.eventTs, event.eventId, current.ts, current.id)) {
+        bestName.set(canonical, { id: event.eventId, ts: event.eventTs, value: event.name });
+      }
+    }
+  }
+
+  const persons = new Map<string, ResolvedPerson>();
+  for (const [canonical, distinctIds] of resolution.membersOf) {
+    const emailCell = bestEmail.get(canonical);
+    const nameCell = bestName.get(canonical);
+    persons.set(canonical, {
+      canonicalDistinctId: canonical,
+      distinctIds,
+      firstSeenTs:
+        firstSeenByCanonical.get(canonical) ?? resolution.firstSeenTs.get(canonical) ?? 0,
+      lastSeenTs: lastSeenByCanonical.get(canonical) ?? resolution.firstSeenTs.get(canonical) ?? 0,
+      traits: foldTraits(writesByCanonical.get(canonical) ?? []),
+      ...(emailCell ? { email: emailCell.value as string } : {}),
+      ...(nameCell ? { name: nameCell.value as string } : {}),
+    });
+  }
+
+  return { canonicalOf: resolution.canonicalOf, persons };
+};
diff --git a/packages/core/src/domain/person/Person.ts b/packages/core/src/domain/person/Person.ts
new file mode 100644
index 000000000..39483dc0f
--- /dev/null
+++ b/packages/core/src/domain/person/Person.ts
@@ -0,0 +1,250 @@
+import { Schema } from "effect";
+
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+
+/**
+ * Identity kind ordering — `Identified` outranks `Anonymous` when picking a
+ * person's primary identity. Numeric values mirror the `person_identity.kind`
+ * column so the comparator's `right.kind - left.kind` arithmetic stays valid.
+ */
+export const PersonIdentityKind = {
+  Anonymous: 1,
+  Identified: 2,
+} as const;
+
+export type PersonIdentityKindValue = (typeof PersonIdentityKind)[keyof typeof PersonIdentityKind];
+
+export const PersonIdentityKindSchema = Schema.Literals([
+  PersonIdentityKind.Anonymous,
+  PersonIdentityKind.Identified,
+]);
+
+/**
+ * Identity of a person — one of the `(distinctId, kind)` pairs that point at
+ * a person. A person can have many identities (anonymous and identified)
+ * over their lifetime; the highest-`kind`, most-recently-updated one is the
+ * "primary" identity used to render the public {@link PersonProfile}.
+ */
+export class PersonIdentity extends Schema.TaggedClass<PersonIdentity>()("PersonIdentity", {
+  id: Schema.String,
+  distinctId: Schema.String,
+  personId: Schema.String,
+  projectId: Schema.String,
+  kind: PersonIdentityKindSchema,
+  version: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),
+  createdAt: Schema.NullOr(Schema.Date),
+  updatedAt: Schema.NullOr(Schema.Date),
+}) {
+  /**
+   * Comparator used to pick the primary identity for a {@link Person}.
+   * Ordering: higher kind first, then newer `updatedAt`, then newer
+   * `createdAt`, with a lexicographic `distinctId` tie-breaker so the result
+   * is deterministic.
+   */
+  static compareForPrimary(left: PersonIdentity, right: PersonIdentity): number {
+    if (left.kind !== right.kind) {
+      return right.kind - left.kind;
+    }
+
+    const leftUpdatedAt = left.updatedAt?.getTime() ?? 0;
+    const rightUpdatedAt = right.updatedAt?.getTime() ?? 0;
+    if (leftUpdatedAt !== rightUpdatedAt) {
+      return rightUpdatedAt - leftUpdatedAt;
+    }
+
+    const leftCreatedAt = left.createdAt?.getTime() ?? 0;
+    const rightCreatedAt = right.createdAt?.getTime() ?? 0;
+    if (leftCreatedAt !== rightCreatedAt) {
+      return rightCreatedAt - leftCreatedAt;
+    }
+
+    return left.distinctId.localeCompare(right.distinctId);
+  }
+}
+
+/**
+ * Public-facing snapshot of a person and their primary identity. This is the
+ * shape returned by `PersonService` — anything outside the `core` package
+ * should consume this rather than the raw {@link Person} aggregate.
+ */
+export class PersonProfile extends Schema.TaggedClass<PersonProfile>()("PersonProfile", {
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  personId: Schema.String,
+  distinctId: Schema.String,
+  email: Schema.NullOr(Schema.String),
+  kind: PersonIdentityKindSchema,
+  mergedIntoPersonId: Schema.NullOr(Schema.String),
+  name: Schema.NullOr(Schema.String),
+  projectId: Schema.String,
+}) {}
+
+/**
+ * Person aggregate — wraps the person fields plus its associated identities
+ * so that domain logic (`primaryIdentity`, `toProfile`, `isArchived`,
+ * `isMerged`) can reason about a person without reaching back into the
+ * database. DB-row mapping lives in the `persons` service.
+ */
+export class Person extends Schema.TaggedClass<Person>()("Person", {
+  id: Schema.String,
+  projectId: Schema.String,
+  email: Schema.NullOr(Schema.String),
+  name: Schema.NullOr(Schema.String),
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  mergedIntoPersonId: Schema.NullOr(Schema.String),
+  identities: Schema.Array(PersonIdentity),
+}) {
+  isArchived(): boolean {
+    return this.archivedAt !== null;
+  }
+
+  isMerged(): boolean {
+    return this.mergedIntoPersonId !== null;
+  }
+
+  /**
+   * Picks the primary identity using {@link PersonIdentity.compareForPrimary}.
+   * Returns `undefined` if the person has no identities yet.
+   */
+  primaryIdentity(): PersonIdentity | undefined {
+    if (this.identities.length === 0) {
+      return undefined;
+    }
+    return [...this.identities].sort(PersonIdentity.compareForPrimary)[0];
+  }
+
+  /**
+   * Projects the person + primary identity into the public
+   * {@link PersonProfile} shape. Returns `undefined` when the person has no
+   * identities (which means there is no `distinctId` we can surface to the
+   * caller).
+   */
+  toProfile(): PersonProfile | undefined {
+    const primary = this.primaryIdentity();
+    if (!primary) {
+      return undefined;
+    }
+    return new PersonProfile({
+      archivedAt: this.archivedAt,
+      createdAt: this.createdAt,
+      personId: this.id,
+      distinctId: primary.distinctId,
+      email: this.email,
+      kind: primary.kind,
+      mergedIntoPersonId: this.mergedIntoPersonId,
+      name: this.name,
+      projectId: this.projectId,
+    });
+  }
+}
+
+/** Person not found in the database. */
+export class PersonNotFoundError extends Schema.TaggedErrorClass<PersonNotFoundError>(
+  "PersonNotFoundError",
+)("PersonNotFoundError", { id: Schema.String }) {}
+
+/** Anonymous ID is invalid (e.g., missing the `vh:anon:` prefix). */
+export class PersonInvalidAnonymousIdError extends Schema.TaggedErrorClass<PersonInvalidAnonymousIdError>(
+  "PersonInvalidAnonymousIdError",
+)("PersonInvalidAnonymousIdError", { id: Schema.String }) {}
+
+/**
+ * Versioned snapshot of a person, emitted to the analytics projection whenever
+ * the person's profile or merge state changes. Schema-versioned so downstream
+ * consumers can evolve independently; `version` is monotonic per person.
+ */
+export interface PersonSnapshotEventV1 {
+  readonly changedAt: string;
+  readonly personId: string;
+  readonly email?: string;
+  readonly isArchived: boolean;
+  readonly mergedIntoPersonId?: string;
+  readonly name?: string;
+  readonly primaryDistinctId?: string;
+  readonly projectId: string;
+  readonly schemaVersion: 1;
+  readonly traits: Record<string, unknown>;
+  readonly version: number;
+}
+
+/**
+ * Versioned `(distinctId → person)` mapping change, emitted to the analytics
+ * projection whenever an identity is created or repointed.
+ */
+export interface PersonIdentityEventV1 {
+  readonly changedAt: string;
+  readonly personId: string;
+  readonly distinctId: string;
+  /**
+   * When set, this mapping is an identity *override*: events carrying
+   * `previousDistinctId` should be re-attributed to `personId`. Set explicitly
+   * by the synchronous merge so the override direction does not depend on which
+   * side of an identify survives (the older person wins, which may be either the
+   * source or the target).
+   */
+  readonly previousDistinctId?: string;
+  readonly isDeleted: boolean;
+  readonly kind: PersonIdentityKindValue;
+  readonly projectId: string;
+  readonly schemaVersion: 1;
+  readonly version: number;
+}
+
+/**
+ * A distinct id is "anonymous" when it carries the reserved
+ * {@link ANONYMOUS_USER_ID_PREFIX} — the SDK stamps this on pre-identify,
+ * device-scoped ids. Identified ids (emails, user ids) never use it.
+ */
+export const isAnonymousDistinctId = (distinctId: string): boolean =>
+  distinctId.startsWith(ANONYMOUS_USER_ID_PREFIX);
+
+/**
+ * Merges trait maps with PostHog-style semantics: `setOnce` only fills keys that
+ * are absent, then `set` overrides unconditionally. Returns a fresh object so
+ * the input `current` map is never mutated.
+ */
+export const mergeTraits = ({
+  current,
+  setAttributes,
+  setOnceAttributes,
+}: {
+  readonly current: Record<string, unknown>;
+  readonly setAttributes: Record<string, unknown>;
+  readonly setOnceAttributes: Record<string, unknown>;
+}): Record<string, unknown> => {
+  const next = { ...current };
+
+  for (const [key, value] of Object.entries(setOnceAttributes)) {
+    if (typeof next[key] === "undefined") {
+      next[key] = value;
+    }
+  }
+
+  for (const [key, value] of Object.entries(setAttributes)) {
+    next[key] = value;
+  }
+
+  return next;
+};
+
+/**
+ * Computes the next `person_identity.version` for a mapping upsert. When the
+ * source contributed no historical events the existing version is preserved
+ * (default `0`); otherwise the version advances to at least `1` so the change
+ * is observable downstream.
+ */
+export const nextMappingVersion = ({
+  existingVersion,
+  hadHistoricalEvents,
+}: {
+  readonly existingVersion?: number;
+  readonly hadHistoricalEvents: boolean;
+}): number => {
+  if (!hadHistoricalEvents) {
+    return existingVersion ?? 0;
+  }
+
+  const currentVersion = existingVersion ?? 0;
+  return currentVersion > 0 ? currentVersion : 1;
+};
diff --git a/packages/core/src/domain/product/Product.ts b/packages/core/src/domain/product/Product.ts
new file mode 100644
index 000000000..f343c8ce2
--- /dev/null
+++ b/packages/core/src/domain/product/Product.ts
@@ -0,0 +1,16 @@
+/**
+ * Product domain — typed errors that signal a product invariant violation.
+ * Row data lives in the `products` Drizzle table; the `ProductType` enum
+ * lives with the schema in `@voidhash/db/schema`.
+ */
+import { Schema } from "effect";
+
+/** Product row not found in the database. */
+export class ProductNotFoundError extends Schema.TaggedErrorClass<ProductNotFoundError>(
+  "ProductNotFoundError",
+)("ProductNotFoundError", { message: Schema.String }) {}
+
+/** Product slug uniqueness invariant violated within a project. */
+export class ProductSlugAlreadyExistsError extends Schema.TaggedErrorClass<ProductSlugAlreadyExistsError>(
+  "ProductSlugAlreadyExistsError",
+)("ProductSlugAlreadyExistsError", { slug: Schema.String }) {}
diff --git a/packages/core/src/domain/project/Project.ts b/packages/core/src/domain/project/Project.ts
new file mode 100644
index 000000000..8575f055b
--- /dev/null
+++ b/packages/core/src/domain/project/Project.ts
@@ -0,0 +1,10 @@
+/**
+ * Project domain — typed errors that signal a project invariant violation.
+ * Row data lives in the `projects` Drizzle table.
+ */
+import { Schema } from "effect";
+
+/** Project row not found in the database. */
+export class ProjectNotFoundError extends Schema.TaggedErrorClass<ProjectNotFoundError>(
+  "ProjectNotFoundError",
+)("ProjectNotFoundError", { projectId: Schema.String }) {}
diff --git a/packages/core/src/domain/purchaseProcessing/PurchaseProcessing.ts b/packages/core/src/domain/purchaseProcessing/PurchaseProcessing.ts
new file mode 100644
index 000000000..7363708dd
--- /dev/null
+++ b/packages/core/src/domain/purchaseProcessing/PurchaseProcessing.ts
@@ -0,0 +1,84 @@
+import { Option, Schema } from "effect";
+
+import { CurrencyCode, ExchangeRate, MinorAmount } from "../shared/Money.ts";
+
+/**
+ * Source of a purchase event. `sdk` and `webhook` are normal in-band sources;
+ * `reconciliation` is the App Store / Google Play replay path that re-ingests
+ * historical notifications.
+ */
+export const PurchaseEventSource = Schema.Literals(["sdk", "webhook", "reconciliation"]);
+export type PurchaseEventSource = typeof PurchaseEventSource.Type;
+
+/**
+ * Same five amounts as {@link PurchaseProcessingMoney} converted to the
+ * unified reporting currency (USD).
+ *
+ * `exchangeRate` is the rate from the original currency to USD encoded as
+ * `rate * 1_000_000` so the integer-only `transaction.exchange_rate` column
+ * keeps six decimal places of precision.
+ *
+ * Absent (`usd: Option.none()` on the parent) when no FX rate was available
+ * for the transaction's currency on the transaction date.
+ */
+export class PurchaseProcessingMoneyUsd extends Schema.Class<PurchaseProcessingMoneyUsd>(
+  "PurchaseProcessingMoneyUsd",
+)({
+  grossAmount: MinorAmount,
+  storeCommissionAmount: MinorAmount,
+  taxAmount: MinorAmount,
+  proceedsAmount: MinorAmount,
+  proceedsAfterTaxAmount: MinorAmount,
+  exchangeRate: ExchangeRate,
+}) {}
+
+/**
+ * Normalized money for a purchase event. Carries gross, store commission,
+ * tax, and the two derived proceeds amounts in the original transaction
+ * currency, plus the same five amounts converted to USD when an FX rate is
+ * available.
+ *
+ * All amounts are non-negative minor units — the analytics mapper applies
+ * the sign convention (refunds emit negative deltas) just before writing the
+ * event envelope.
+ */
+export class PurchaseProcessingMoney extends Schema.Class<PurchaseProcessingMoney>(
+  "PurchaseProcessingMoney",
+)({
+  currency: CurrencyCode,
+  /** Apple-style ISO 3166 alpha-3 storefront country (e.g., `"USA"`, `"DEU"`). */
+  storefront: Schema.Option(Schema.String),
+  grossAmount: MinorAmount,
+  storeCommissionAmount: MinorAmount,
+  taxAmount: MinorAmount,
+  proceedsAmount: MinorAmount,
+  proceedsAfterTaxAmount: MinorAmount,
+  usd: Schema.Option(PurchaseProcessingMoneyUsd),
+}) {
+  hasUsd(): boolean {
+    return Option.isSome(this.usd);
+  }
+}
+
+/**
+ * Result returned by every `PurchaseProcessingService.*` method.
+ *
+ * `idempotent` reflects operational-row reuse — i.e. the transaction or
+ * subscription row already existed when the action arrived (renewal arrived
+ * before the initial-buy notification, retry after a transient analytics
+ * failure, etc.). It does NOT reflect inbound-event dedup; that gate lives
+ * upstream in the payment-provider service and short-circuits before this
+ * service runs.
+ */
+export class PurchaseProcessingResult extends Schema.TaggedClass<PurchaseProcessingResult>()(
+  "PurchaseProcessingResult",
+  {
+    personId: Schema.String,
+    purchaseId: Schema.Option(Schema.String),
+    subscriptionId: Schema.Option(Schema.String),
+    transactionId: Schema.Option(Schema.String),
+    changedGrantIds: Schema.Array(Schema.String),
+    analyticsEventIds: Schema.Array(Schema.String),
+    idempotent: Schema.Boolean,
+  },
+) {}
diff --git a/packages/core/src/domain/schema/Schema.ts b/packages/core/src/domain/schema/Schema.ts
new file mode 100644
index 000000000..a71500e61
--- /dev/null
+++ b/packages/core/src/domain/schema/Schema.ts
@@ -0,0 +1,65 @@
+/**
+ * Schema domain — the public DTO `SchemaService` returns from
+ * `getProjectSchema` / `getProjectSchemaForSdk`, plus the provider literal it
+ * surfaces in `enabledProviders` / `products[].providers`.
+ *
+ * The byte-level layout is part of the contract the CLI (`apps/cli`) and SDK
+ * runtime consume — don't reorder fields without making the matching change
+ * in `apps/cli/src/utils/schema/version.ts`, since the CLI's
+ * `voidhash types check` compares the two hashes byte-for-byte.
+ */
+import { Schema } from "effect";
+
+/**
+ * Provider IDs the CLI / SDK currently understand. Other DB providers (today:
+ * `"stripe"`) are filtered out at the projection boundary so the version hash
+ * stays stable across CLI and server.
+ */
+export const SchemaProviderId = Schema.Literals(["appleAppStore", "googlePlay"]);
+export type SchemaProviderId = typeof SchemaProviderId.Type;
+
+export class SchemaPerk extends Schema.Class<SchemaPerk>("SchemaPerk")({
+  slug: Schema.String,
+  name: Schema.String,
+}) {}
+
+export class SchemaLocation extends Schema.Class<SchemaLocation>("SchemaLocation")({
+  slug: Schema.String,
+  name: Schema.String,
+  description: Schema.NullOr(Schema.String),
+}) {}
+
+export class SchemaProductProvider extends Schema.Class<SchemaProductProvider>(
+  "SchemaProductProvider",
+)({
+  providerId: SchemaProviderId,
+  configuration: Schema.Record(Schema.String, Schema.Unknown),
+}) {}
+
+export class SchemaProduct extends Schema.Class<SchemaProduct>("SchemaProduct")({
+  slug: Schema.String,
+  name: Schema.String,
+  /** Today always `"subscription"` — schema only surfaces subscription products. */
+  type: Schema.Literal("subscription"),
+  /** Perk slugs, ascending. */
+  perks: Schema.Array(Schema.String),
+  /** Per-provider mappings, sorted by `providerId`. */
+  providers: Schema.Array(SchemaProductProvider),
+}) {}
+
+/**
+ * Public-facing schema DTO returned by `SchemaService.getProjectSchema` and
+ * `SchemaService.getProjectSchemaForSdk`. Mirrors the CLI's `NormalizedSchema`
+ * shape so the version hash stays consistent across both sides.
+ *
+ * `enabledProviders` is a derived view of the same provider rows present in
+ * `products[].providers` — it's intentionally NOT part of the hash, since
+ * including it would diverge from the CLI's `NormalizedSchema`-based hash.
+ */
+export class ProjectSchema extends Schema.Class<ProjectSchema>("ProjectSchema")({
+  enabledProviders: Schema.Array(SchemaProviderId),
+  locations: Schema.Array(SchemaLocation),
+  perks: Schema.Array(SchemaPerk),
+  products: Schema.Array(SchemaProduct),
+  version: Schema.String,
+}) {}
diff --git a/packages/core/src/domain/sdkPerson/SdkPerson.ts b/packages/core/src/domain/sdkPerson/SdkPerson.ts
new file mode 100644
index 000000000..5757f36b2
--- /dev/null
+++ b/packages/core/src/domain/sdkPerson/SdkPerson.ts
@@ -0,0 +1,172 @@
+/**
+ * Public DTOs returned by `SdkService`. The SDK snapshot is the top-level
+ * shape every shipping client SDK install consumes — it stitches together the
+ * authenticated person's profile, current entitlements, subscription and
+ * purchase history, plus a "scope" descriptor that tells clients whether two
+ * persons are temporarily merged during an in-flight identify migration.
+ *
+ * Pattern mirrors `domain/person/Person.ts`'s `PersonProfile`: pure
+ * `Schema.TaggedClass`es, no `Effect`, no DB knowledge. Construction belongs
+ * in `services/sdk/internal/snapshot-builder.ts`.
+ */
+import { Schema } from "effect";
+
+// =============================================================================
+// Status enums (Schema.Literal so they participate in the TaggedClass schema)
+// =============================================================================
+
+export const SdkPersonSnapshotMode = Schema.Literals(["persisted", "temporary_pending_transfer"]);
+export type SdkPersonSnapshotMode = typeof SdkPersonSnapshotMode.Type;
+
+export const SdkSubscriptionHistoryStatus = Schema.Literals([
+  "active",
+  "canceled",
+  "expired",
+  "trialing",
+  "past_due",
+]);
+export type SdkSubscriptionHistoryStatus = typeof SdkSubscriptionHistoryStatus.Type;
+
+export const SdkSubscriptionCurrentStatus = Schema.Literals([
+  "none",
+  "active",
+  "canceled",
+  "past_due",
+  "trialing",
+]);
+export type SdkSubscriptionCurrentStatus = typeof SdkSubscriptionCurrentStatus.Type;
+
+export const SdkPersonSnapshotGrantStatus = Schema.Literals(["active", "expired"]);
+export type SdkPersonSnapshotGrantStatus = typeof SdkPersonSnapshotGrantStatus.Type;
+
+export const SdkPersonSnapshotGrantSource = Schema.Literals(["subscription", "purchase", "manual"]);
+export type SdkPersonSnapshotGrantSource = typeof SdkPersonSnapshotGrantSource.Type;
+
+export const SdkPersonSnapshotPurchaseType = Schema.Literals(["one_time", "subscription"]);
+export type SdkPersonSnapshotPurchaseType = typeof SdkPersonSnapshotPurchaseType.Type;
+
+// =============================================================================
+// Nested DTOs
+// =============================================================================
+
+export class SdkPersonSnapshotGrant extends Schema.TaggedClass<SdkPersonSnapshotGrant>()(
+  "SdkPersonSnapshotGrant",
+  {
+    perkId: Schema.String,
+    status: SdkPersonSnapshotGrantStatus,
+    source: SdkPersonSnapshotGrantSource,
+    sourceId: Schema.NullOr(Schema.String),
+    sourcePersonId: Schema.String,
+    expiresAt: Schema.NullOr(Schema.Date),
+  },
+) {}
+
+export class SdkPersonSnapshotSubscriptionHistory extends Schema.TaggedClass<SdkPersonSnapshotSubscriptionHistory>()(
+  "SdkPersonSnapshotSubscriptionHistory",
+  {
+    subscriptionId: Schema.String,
+    productId: Schema.NullOr(Schema.String),
+    status: SdkSubscriptionHistoryStatus,
+    startsAt: Schema.Date,
+    expiresAt: Schema.NullOr(Schema.Date),
+    canceledAt: Schema.NullOr(Schema.Date),
+    isTrial: Schema.Boolean,
+    sourcePersonId: Schema.String,
+  },
+) {}
+
+export class SdkPersonSnapshotCurrentSubscription extends Schema.TaggedClass<SdkPersonSnapshotCurrentSubscription>()(
+  "SdkPersonSnapshotCurrentSubscription",
+  {
+    status: SdkSubscriptionCurrentStatus,
+    expiresAt: Schema.NullOr(Schema.Date),
+    productId: Schema.NullOr(Schema.String),
+    subscriptionId: Schema.NullOr(Schema.String),
+  },
+) {}
+
+export class SdkPersonSnapshotPurchaseHistory extends Schema.TaggedClass<SdkPersonSnapshotPurchaseHistory>()(
+  "SdkPersonSnapshotPurchaseHistory",
+  {
+    purchaseId: Schema.String,
+    productId: Schema.NullOr(Schema.String),
+    type: SdkPersonSnapshotPurchaseType,
+    providerKey: Schema.String,
+    createdAt: Schema.Date,
+    sourcePersonId: Schema.String,
+  },
+) {}
+
+export class SdkPersonSnapshotEntitlements extends Schema.TaggedClass<SdkPersonSnapshotEntitlements>()(
+  "SdkPersonSnapshotEntitlements",
+  {
+    grants: Schema.Array(SdkPersonSnapshotGrant),
+  },
+) {}
+
+export class SdkPersonSnapshotSubscriptions extends Schema.TaggedClass<SdkPersonSnapshotSubscriptions>()(
+  "SdkPersonSnapshotSubscriptions",
+  {
+    current: Schema.NullOr(SdkPersonSnapshotCurrentSubscription),
+    history: Schema.Array(SdkPersonSnapshotSubscriptionHistory),
+  },
+) {}
+
+export class SdkPersonSnapshotPurchases extends Schema.TaggedClass<SdkPersonSnapshotPurchases>()(
+  "SdkPersonSnapshotPurchases",
+  {
+    history: Schema.Array(SdkPersonSnapshotPurchaseHistory),
+  },
+) {}
+
+export class SdkPersonSnapshotContext extends Schema.TaggedClass<SdkPersonSnapshotContext>()(
+  "SdkPersonSnapshotContext",
+  {
+    mode: SdkPersonSnapshotMode,
+    migrationJobId: Schema.NullOr(Schema.String),
+    includedPersonIds: Schema.Array(Schema.String),
+  },
+) {}
+
+// =============================================================================
+// Top-level DTO
+// =============================================================================
+
+/**
+ * Public-facing snapshot of an SDK-authenticated person. Returned by
+ * `SdkService.getPerson`, `SdkService.identifyPerson`, and embedded in
+ * `SyncPersonAttributesResult` from `SdkService.syncPersonAttributes`.
+ */
+export class SdkPersonSnapshot extends Schema.TaggedClass<SdkPersonSnapshot>()(
+  "SdkPersonSnapshot",
+  {
+    personId: Schema.String,
+    distinctId: Schema.String,
+    email: Schema.NullOr(Schema.String),
+    name: Schema.NullOr(Schema.String),
+    entitlements: SdkPersonSnapshotEntitlements,
+    subscriptions: SdkPersonSnapshotSubscriptions,
+    purchases: SdkPersonSnapshotPurchases,
+    snapshotContext: SdkPersonSnapshotContext,
+  },
+) {}
+
+// =============================================================================
+// Domain errors — colocated with the entity. The `SdkServiceError` catch-all
+// lives with the service in `services/sdk/`.
+// =============================================================================
+
+/** SDK person not found. */
+export class SdkPersonNotFoundError extends Schema.TaggedErrorClass<SdkPersonNotFoundError>(
+  "SdkPersonNotFoundError",
+)("SdkPersonNotFoundError", { message: Schema.String }) {}
+
+/** SDK person already identified. */
+export class SdkPersonAlreadyIdentifiedError extends Schema.TaggedErrorClass<SdkPersonAlreadyIdentifiedError>(
+  "SdkPersonAlreadyIdentifiedError",
+)("SdkPersonAlreadyIdentifiedError", { distinctId: Schema.String }) {}
+
+/** SDK validation error. */
+export class SdkValidationError extends Schema.TaggedErrorClass<SdkValidationError>(
+  "SdkValidationError",
+)("SdkValidationError", { message: Schema.String }) {}
diff --git a/packages/core/src/domain/shared/Money.ts b/packages/core/src/domain/shared/Money.ts
new file mode 100644
index 000000000..d6f532a60
--- /dev/null
+++ b/packages/core/src/domain/shared/Money.ts
@@ -0,0 +1,36 @@
+import { Schema } from "effect";
+
+/**
+ * ISO 4217 alphabetic currency code (e.g., `"USD"`, `"EUR"`). Stored upper-case
+ * because that is the canonical wire form used by every payment provider we
+ * integrate with; we do not currently support ISO 4217 numeric codes.
+ */
+export const CurrencyCode = Schema.String.check(Schema.isPattern(/^[A-Z]{3}$/)).pipe(
+  Schema.brand("CurrencyCode"),
+);
+
+export type CurrencyCode = typeof CurrencyCode.Type;
+
+/**
+ * Non-negative integer amount denominated in the currency's smallest unit
+ * (cents for USD, yen for JPY, etc.). All money fields in the domain layer
+ * use minor units to avoid floating-point rounding; sign conventions (e.g.,
+ * refunds emitting negative deltas) are applied at the analytics-mapper
+ * boundary, not at construction time.
+ */
+export const MinorAmount = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)).pipe(
+  Schema.brand("MinorAmount"),
+);
+
+export type MinorAmount = typeof MinorAmount.Type;
+
+/**
+ * `rate * 1_000_000` — six decimal places of precision encoded as a positive
+ * integer. Matches the `transaction.exchange_rate` column convention so an
+ * exchange rate of `1.234567` is stored as `1234567`.
+ */
+export const ExchangeRate = Schema.Int.check(Schema.isGreaterThan(0)).pipe(
+  Schema.brand("ExchangeRate"),
+);
+
+export type ExchangeRate = typeof ExchangeRate.Type;
diff --git a/packages/core/src/domain/user/User.ts b/packages/core/src/domain/user/User.ts
new file mode 100644
index 000000000..831d74c88
--- /dev/null
+++ b/packages/core/src/domain/user/User.ts
@@ -0,0 +1,32 @@
+import { Schema } from "effect";
+
+export class User extends Schema.Class<User>("User")({
+  createdAt: Schema.Date,
+  email: Schema.String,
+  emailVerified: Schema.Boolean,
+  id: Schema.String,
+  image: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  role: Schema.NullOr(Schema.String),
+  organizations: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      logo: Schema.NullOr(Schema.String),
+      name: Schema.String,
+      slug: Schema.String,
+      workosOrganizationId: Schema.NullOr(Schema.String),
+      /** Enabled internal feature flag keys for this org (see UserRpcsDef). */
+      internalFeatureFlags: Schema.Array(Schema.String),
+    }),
+  ),
+  projects: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      logo: Schema.NullOr(Schema.String),
+      name: Schema.String,
+      organizationId: Schema.String,
+      slug: Schema.String,
+    }),
+  ),
+  updatedAt: Schema.Date,
+}) {}
diff --git a/packages/core/src/domain/webhook/Webhook.ts b/packages/core/src/domain/webhook/Webhook.ts
new file mode 100644
index 000000000..3a2210c5e
--- /dev/null
+++ b/packages/core/src/domain/webhook/Webhook.ts
@@ -0,0 +1,21 @@
+/**
+ * Webhook domain — typed errors that signal an invariant violation on a
+ * webhook endpoint or delivery row. Row data and the `WebhookEndpointStatus`
+ * enum live with the schema in `@voidhash/db/schema`.
+ */
+import { Schema } from "effect";
+
+/** Webhook endpoint row not found. */
+export class WebhookEndpointNotFoundError extends Schema.TaggedErrorClass<WebhookEndpointNotFoundError>(
+  "WebhookEndpointNotFoundError",
+)("WebhookEndpointNotFoundError", { endpointId: Schema.String }) {}
+
+/** Webhook delivery row not found. */
+export class WebhookDeliveryNotFoundError extends Schema.TaggedErrorClass<WebhookDeliveryNotFoundError>(
+  "WebhookDeliveryNotFoundError",
+)("WebhookDeliveryNotFoundError", { deliveryId: Schema.String }) {}
+
+/** Webhook input failed validation (URL shape, header limits, etc.). */
+export class WebhookValidationError extends Schema.TaggedErrorClass<WebhookValidationError>(
+  "WebhookValidationError",
+)("WebhookValidationError", { message: Schema.String }) {}
diff --git a/packages/core/src/services/aiChat/AiChatService.test.ts b/packages/core/src/services/aiChat/AiChatService.test.ts
new file mode 100644
index 000000000..97b2cf5d1
--- /dev/null
+++ b/packages/core/src/services/aiChat/AiChatService.test.ts
@@ -0,0 +1,320 @@
+import { Db } from "@voidhash/db";
+import { Effect, Exit, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import { AuthSession, type AnyAuthSession } from "../../domain/auth/Auth.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+import { isSessionOrganizationMember, isSessionProjectMember } from "../../utils/permissions.ts";
+import { AiChatService } from "./AiChatService.ts";
+
+const makeSession = (
+  orgIds: readonly string[],
+  projects: ReadonlyArray<{ id: string; organizationId: string }> = [],
+): AnyAuthSession => ({
+  cookie: null,
+  method: "secret-key",
+  name: "ci-key",
+  organizations: orgIds.map((id) => ({
+    id,
+    logo: null,
+    name: id,
+    permissions: ["project:all"],
+    slug: id,
+    workosOrganizationId: null,
+  })),
+  projects: projects.map((project) => ({
+    id: project.id,
+    logo: null,
+    name: project.id,
+    organizationId: project.organizationId,
+    permissions: ["project:all"],
+    slug: project.id,
+  })),
+  person: null,
+  user: null,
+});
+
+describe("isSessionOrganizationMember", () => {
+  it("is true when the org is present in the session", () => {
+    expect(isSessionOrganizationMember(makeSession(["org_1", "org_2"]), "org_2")).toBe(true);
+  });
+
+  it("is false when the org is absent (cross-org access denied)", () => {
+    expect(isSessionOrganizationMember(makeSession(["org_1"]), "org_2")).toBe(false);
+  });
+});
+
+describe("isSessionProjectMember", () => {
+  it("is true when the project belongs to the caller under the claimed org", () => {
+    const session = makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]);
+    expect(isSessionProjectMember(session, "proj_1", "org_1")).toBe(true);
+  });
+
+  it("is false when the project exists but under a different org (anti-spoof)", () => {
+    const session = makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]);
+    expect(isSessionProjectMember(session, "proj_1", "org_2")).toBe(false);
+  });
+
+  it("is false when the project is not in the session", () => {
+    const session = makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]);
+    expect(isSessionProjectMember(session, "proj_2", "org_1")).toBe(false);
+  });
+});
+
+// ── AI checkpoint capture + last-turn revert lookup ───────────────────────────
+
+interface ChatRow {
+  id: string;
+  organizationId: string;
+  projectId: string;
+}
+interface CheckpointRow {
+  chatId: string;
+  turnId: string;
+  paywallId: string;
+  tree: unknown;
+  createdAt: number;
+}
+
+/**
+ * A tiny in-memory `Db` fake covering just the calls the checkpoint methods make:
+ * - `insert(checkpoint).values(...).onConflictDoNothing(...)` — first-write-wins
+ *   per (chatId, turnId, paywallId), mirroring the real unique index;
+ * - the chat-row `findRow` select (for the project-membership check);
+ * - the checkpoint `select().from().where().orderBy().limit(1)` (newest turn) and
+ *   the follow-up select of that turn's pre-images.
+ *
+ * The fake keys tables by a marker set on the drizzle table object; the service
+ * passes the real table objects, so we distinguish them by a stable property.
+ */
+const makeCheckpointDb = (chats: ChatRow[]) => {
+  const checkpoints: CheckpointRow[] = [];
+  let clock = 0;
+
+  // `onConflictDoNothing()` performs the first-write-wins insert and returns a
+  // builder whose `.returning(...)` resolves to the inserted row on a real insert
+  // and an EMPTY array on the conflict no-op — mirroring drizzle, and the signal
+  // `captureCheckpointReporting` reads for `captured`. Awaiting the builder
+  // directly (no `.returning()`) is also supported for the void `captureCheckpoint`.
+  const insert = () => ({
+    values: (value: CheckpointRow & { id: string; createdAt?: number }) => ({
+      onConflictDoNothing: () => {
+        const run = () => {
+          const exists = checkpoints.some(
+            (row) =>
+              row.chatId === value.chatId &&
+              row.turnId === value.turnId &&
+              row.paywallId === value.paywallId,
+          );
+          if (!exists) {
+            checkpoints.push({ ...value, createdAt: (clock += 1) });
+          }
+          return exists ? [] : [{ id: value.id }];
+        };
+        const effect = Effect.sync(run);
+        return Object.assign(effect, {
+          returning: (_projection?: unknown) => Effect.sync(run),
+        });
+      },
+    }),
+  });
+
+  // Both `findRow` (chat) and the checkpoint reads go through `select`. The chat
+  // read passes no projection (`select()`), the checkpoint reads pass one — we
+  // branch on that. A `where` that is then `.orderBy().limit()` is the newest-turn
+  // query; a `where` awaited directly is the turn's pre-images; a `where().limit()`
+  // is `findRow`. The `where(...)` result is therefore both an Effect (awaited
+  // directly for the pre-images) and a builder (for the chained terminals).
+  const newestTurnId = () =>
+    checkpoints.length > 0
+      ? [...checkpoints].sort((a, b) => b.createdAt - a.createdAt)[0]!.turnId
+      : undefined;
+
+  const db = {
+    insert,
+    select: (projection?: unknown) => {
+      const isCheckpoint = projection !== undefined;
+      return {
+        from: () => ({
+          where: (..._args: unknown[]) => {
+            const preImages = checkpoints
+              .filter((row) => row.turnId === newestTurnId())
+              .map((row) => ({ paywallId: row.paywallId, tree: row.tree }));
+            const base = {
+              orderBy: () => ({
+                limit: (_n: number) =>
+                  Effect.sync(() => {
+                    const turnId = newestTurnId();
+                    return turnId !== undefined ? [{ turnId }] : [];
+                  }),
+              }),
+              limit: (_n: number) => Effect.sync(() => (chats.length > 0 ? [chats[0]] : [])),
+            };
+            return isCheckpoint
+              ? Object.assign(
+                  Effect.sync(() => preImages),
+                  base,
+                )
+              : base;
+          },
+        }),
+      };
+    },
+    __checkpoints: checkpoints,
+  };
+
+  return { layer: Layer.succeed(Db, db as never), checkpoints };
+};
+
+const checkpointLayers = (chats: ChatRow[], session: AnyAuthSession) => {
+  const { layer: dbLayer, checkpoints } = makeCheckpointDb(chats);
+  const layer = AiChatService.layer.pipe(
+    Layer.provide(dbLayer),
+    Layer.provide(Layer.succeed(PublicFileStore, {} as never)),
+    Layer.provideMerge(Layer.succeed(AuthSession, session as never)),
+  );
+  return { layer, checkpoints };
+};
+
+describe("AiChatService checkpoints", () => {
+  it("captureCheckpoint records a pre-image once per (chat, turn, document)", async () => {
+    const { layer, checkpoints } = checkpointLayers([], makeSession(["org_1"]));
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const svc = yield* AiChatService;
+        yield* svc.captureCheckpoint({
+          chatId: "c1",
+          turnId: "t1",
+          paywallId: "pw_1",
+          tree: { a: 1 },
+        });
+        // Same (chat, turn, doc) again → first-write-wins, ignored.
+        yield* svc.captureCheckpoint({
+          chatId: "c1",
+          turnId: "t1",
+          paywallId: "pw_1",
+          tree: { a: 2 },
+        });
+        // Different doc in the same turn → new row.
+        yield* svc.captureCheckpoint({
+          chatId: "c1",
+          turnId: "t1",
+          paywallId: "pw_2",
+          tree: { b: 1 },
+        });
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    expect(checkpoints.map((r) => `${r.turnId}:${r.paywallId}`)).toEqual(["t1:pw_1", "t1:pw_2"]);
+    // The preserved pre-image is the FIRST one (tree { a: 1 }).
+    expect(checkpoints.find((r) => r.paywallId === "pw_1")?.tree).toEqual({ a: 1 });
+  });
+
+  it("captureCheckpointReporting reports captured true then false (first-write-wins)", async () => {
+    const { layer, checkpoints } = checkpointLayers([], makeSession(["org_1"]));
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const svc = yield* AiChatService;
+        // First capture for the turn takes the checkpoint.
+        const first = yield* svc.captureCheckpointReporting({
+          chatId: "c1",
+          turnId: "t1",
+          paywallId: "pw_1",
+          tree: { a: 1 },
+        });
+        // Re-capturing the same (chat, turn, doc) is a no-op — captured: false,
+        // and the original pre-image is preserved.
+        const second = yield* svc.captureCheckpointReporting({
+          chatId: "c1",
+          turnId: "t1",
+          paywallId: "pw_1",
+          tree: { a: 2 },
+        });
+        return { first, second };
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.first.captured).toBe(true);
+      expect(exit.value.second.captured).toBe(false);
+    }
+    // Only one row, holding the original pre-image.
+    expect(checkpoints).toHaveLength(1);
+    expect(checkpoints[0]!.tree).toEqual({ a: 1 });
+  });
+
+  it("getLastTurnCheckpoints returns the newest turn's pre-images (project membership required)", async () => {
+    const { layer } = checkpointLayers(
+      [{ id: "c1", organizationId: "org_1", projectId: "proj_1" }],
+      makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]),
+    );
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const svc = yield* AiChatService;
+        yield* svc.captureCheckpoint({
+          chatId: "c1",
+          turnId: "t1",
+          paywallId: "pw_1",
+          tree: { v: 1 },
+        });
+        yield* svc.captureCheckpoint({
+          chatId: "c1",
+          turnId: "t2",
+          paywallId: "pw_1",
+          tree: { v: 2 },
+        });
+        return yield* svc.getLastTurnCheckpoints({ chatId: "c1" });
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      // Only the LAST turn (t2) is returned.
+      expect(exit.value).toEqual([{ paywallId: "pw_1", tree: { v: 2 } }]);
+    }
+  });
+
+  it("getLastTurnCheckpoints forbids a non-member of the chat's org", async () => {
+    const { layer } = checkpointLayers(
+      [{ id: "c1", organizationId: "org_other", projectId: "proj_other" }],
+      makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]),
+    );
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const svc = yield* AiChatService;
+        return yield* svc.getLastTurnCheckpoints({ chatId: "c1" });
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(exit.cause.toString()).toContain("AiChatForbiddenError");
+    }
+  });
+
+  it("getLastTurnCheckpoints forbids an org member outside the chat's project (no revert)", async () => {
+    // The caller belongs to the chat's ORG but not its PROJECT. Reverting mutates
+    // that project's paywalls, so project membership — not just org membership —
+    // must gate the lookup, else a cross-project org member could revert paywalls.
+    const { layer, checkpoints } = checkpointLayers(
+      [{ id: "c1", organizationId: "org_1", projectId: "proj_1" }],
+      makeSession(["org_1"], [{ id: "proj_2", organizationId: "org_1" }]),
+    );
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const svc = yield* AiChatService;
+        yield* svc.captureCheckpoint({
+          chatId: "c1",
+          turnId: "t1",
+          paywallId: "pw_1",
+          tree: { v: 1 },
+        });
+        return yield* svc.getLastTurnCheckpoints({ chatId: "c1" });
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(exit.cause.toString()).toContain("AiChatForbiddenError");
+    }
+    // The forbidden lookup returned no pre-images, so no document is reverted.
+    expect(checkpoints.length).toBe(1);
+  });
+});
diff --git a/packages/core/src/services/aiChat/AiChatService.ts b/packages/core/src/services/aiChat/AiChatService.ts
new file mode 100644
index 000000000..6b9d6b255
--- /dev/null
+++ b/packages/core/src/services/aiChat/AiChatService.ts
@@ -0,0 +1,479 @@
+import { and, desc, Db, eq, voidhashAiChat, voidhashAiCheckpoint } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  PaywallAssetValidationError,
+  validateAndDecodePaywallAsset,
+} from "../../domain/paywallAssetImage.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { isSessionOrganizationMember, isSessionProjectMember } from "../../utils/permissions.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+
+/** Catch-all error raised by {@link AiChatService} public methods. */
+export class AiChatServiceError extends Schema.TaggedErrorClass<AiChatServiceError>(
+  "AiChatServiceError",
+)("AiChatServiceError", { message: Schema.String }) {}
+
+/** Raised when the caller is not a member of the target chat's organization/project. */
+export class AiChatForbiddenError extends Schema.TaggedErrorClass<AiChatForbiddenError>(
+  "AiChatForbiddenError",
+)("AiChatForbiddenError", { message: Schema.String }) {}
+
+/** Raised when the referenced chat row does not exist. */
+export class AiChatNotFoundError extends Schema.TaggedErrorClass<AiChatNotFoundError>(
+  "AiChatNotFoundError",
+)("AiChatNotFoundError", { chatId: Schema.String }) {}
+
+/** Raised when an uploaded chat attachment fails image validation. */
+export class AiChatAttachmentValidationError extends Schema.TaggedErrorClass<AiChatAttachmentValidationError>(
+  "AiChatAttachmentValidationError",
+)("AiChatAttachmentValidationError", { message: Schema.String }) {}
+
+/** Studio surface a chat belongs to. Kept as a plain string at the DB boundary. */
+export type AiChatType = "persistent" | "single_use";
+
+/** Metadata for one chat as returned by {@link AiChatServiceShape.list} (no messages). */
+export interface AiChatSummary {
+  readonly id: string;
+  readonly title: string;
+  readonly chatType: string;
+  readonly createdAt: Date;
+  readonly updatedAt: Date;
+}
+
+/** One full chat row (including its serialized messages) as returned by `get`. */
+export interface AiChatRow extends AiChatSummary {
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly surface: string;
+  readonly paywallId: string | null;
+  /** JSON-encoded AI SDK `UIMessage[]`. */
+  readonly messages: string;
+}
+
+/** One stored chat attachment as returned by {@link AiChatServiceShape.uploadAttachment}. */
+export interface AiChatAttachment {
+  readonly url: string;
+  readonly name: string;
+  readonly contentType: string;
+  readonly sizeBytes: number;
+}
+
+export interface AiChatSaveInput {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly surface: string;
+  readonly chatType: AiChatType;
+  readonly paywallId?: string | null;
+  readonly title: string;
+  /** JSON-encoded AI SDK `UIMessage[]`. */
+  readonly messages: string;
+}
+
+export interface AiChatListInput {
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly surface: string;
+  /** When set, limits the list to persistent chats scoped to this paywall. */
+  readonly paywallId?: string | null;
+}
+
+export interface AiChatAttachmentUploadInput {
+  readonly chatId: string;
+  readonly organizationId: string;
+  readonly name: string;
+  readonly contentType: string;
+  readonly dataBase64: string;
+}
+
+/** A captured per-turn checkpoint pre-image: which document + its pre-write tree. */
+export interface AiCheckpointPreImage {
+  readonly paywallId: string;
+  /** The document's pre-write RAW encoded tree (mimic `TreeValue`). */
+  readonly tree: unknown;
+}
+
+/** Public {@link AiChatService} surface. */
+export interface AiChatServiceShape {
+  /** Upsert a chat by its (client-minted) id — inserts on first save, replaces messages/title after. */
+  readonly save: (
+    input: AiChatSaveInput,
+  ) => Effect.Effect<AiChatSummary, AiChatServiceError | AiChatForbiddenError>;
+  /** List a paywall/surface's **persistent** chats (metadata only), newest first. */
+  readonly list: (
+    input: AiChatListInput,
+  ) => Effect.Effect<ReadonlyArray<AiChatSummary>, AiChatServiceError | AiChatForbiddenError>;
+  /** Load one full chat (with messages), or fail not-found. */
+  readonly get: (input: {
+    readonly chatId: string;
+  }) => Effect.Effect<AiChatRow, AiChatServiceError | AiChatForbiddenError | AiChatNotFoundError>;
+  /** Delete one chat. */
+  readonly delete: (input: {
+    readonly chatId: string;
+  }) => Effect.Effect<void, AiChatServiceError | AiChatForbiddenError | AiChatNotFoundError>;
+  /** Upload an image attachment to R2 under this chat and return its public URL. */
+  readonly uploadAttachment: (
+    input: AiChatAttachmentUploadInput,
+  ) => Effect.Effect<
+    AiChatAttachment,
+    AiChatServiceError | AiChatForbiddenError | AiChatAttachmentValidationError
+  >;
+  /**
+   * Record a document's pre-turn image for one (chat, turn) — the tree as it was
+   * BEFORE the turn's first write, captured when that first write is ACCEPTED
+   * (never on a rejected-only or no-op turn). First-write-wins per (chatId,
+   * turnId, paywallId): only the first accepted write to a document in a turn
+   * captures; later accepted writes to the same document are idempotent no-ops.
+   * Server-authoritative: no membership check (the caller is the trusted AI turn
+   * loop; the chat row it scopes was already project-authorized).
+   */
+  readonly captureCheckpoint: (input: {
+    readonly chatId: string;
+    readonly turnId: string;
+    readonly paywallId: string;
+    readonly tree: unknown;
+  }) => Effect.Effect<void, AiChatServiceError>;
+  /**
+   * Like {@link captureCheckpoint}, but reports whether this call actually took
+   * the checkpoint (`captured: true`) or a checkpoint already existed for the
+   * `(chatId, turnId, paywallId)` triple (`captured: false`, a first-write-wins
+   * no-op). Backs the client-driven `CaptureAiCheckpoint` RPC in the
+   * document-first authoring model, where the browser captures the pre-turn image
+   * BEFORE the first mutating tool call of a turn and wants to know if it was the
+   * one that took it (so retries/reconnects are cheap, idempotent no-ops).
+   * Server-authoritative: same trust model as {@link captureCheckpoint}.
+   */
+  readonly captureCheckpointReporting: (input: {
+    readonly chatId: string;
+    readonly turnId: string;
+    readonly paywallId: string;
+    readonly tree: unknown;
+  }) => Effect.Effect<{ readonly captured: boolean }, AiChatServiceError>;
+  /**
+   * Load the pre-images of a chat's MOST RECENT turn (the turn of its newest
+   * checkpoint row), or an empty list when the chat has no checkpoints. Requires
+   * org membership on the owning chat (revert is a user-facing action).
+   */
+  readonly getLastTurnCheckpoints: (input: {
+    readonly chatId: string;
+  }) => Effect.Effect<
+    ReadonlyArray<AiCheckpointPreImage>,
+    AiChatServiceError | AiChatForbiddenError | AiChatNotFoundError
+  >;
+}
+
+/**
+ * `AiChatService` persists Voidhash AI chats and their image attachments. The
+ * chat id is minted client-side so an attachment can be stored under the chat
+ * before its first turn is saved; `save` therefore upserts by id.
+ *
+ * Authorization mirrors {@link PaywallAssetService}: a plain membership check on
+ * the authenticated {@link AuthSession}. Reads/deletes require org membership;
+ * writes additionally require the caller to have access to the target project
+ * under that org (anti-spoof, never trusting the project from the body alone).
+ * `Db` and `PublicFileStore` are provided by the application root.
+ */
+export class AiChatService extends Context.Service<AiChatService>()("AiChatService", {
+  make: Effect.gen(function* () {
+    const db = yield* Db;
+    const publicFileStore = yield* PublicFileStore;
+
+    const assertOrgMember = (organizationId: string) =>
+      Effect.gen(function* () {
+        const session = yield* AuthSession;
+        if (!isSessionOrganizationMember(session, organizationId)) {
+          return yield* Effect.fail(
+            new AiChatForbiddenError({
+              message: `Not a member of organization ${organizationId}.`,
+            }),
+          );
+        }
+      });
+
+    const assertProjectMember = (projectId: string, organizationId: string) =>
+      Effect.gen(function* () {
+        const session = yield* AuthSession;
+        if (!isSessionProjectMember(session, projectId, organizationId)) {
+          return yield* Effect.fail(
+            new AiChatForbiddenError({
+              message: `No access to project ${projectId}.`,
+            }),
+          );
+        }
+      });
+
+    const currentUserId = Effect.gen(function* () {
+      const session = yield* AuthSession;
+      return session.user?.id ?? null;
+    });
+
+    const rowToSummary = (row: typeof voidhashAiChat.$inferSelect): AiChatSummary => ({
+      id: row.id,
+      title: row.title,
+      chatType: row.chatType,
+      createdAt: row.createdAt,
+      updatedAt: row.updatedAt,
+    });
+
+    const rowToChat = (row: typeof voidhashAiChat.$inferSelect): AiChatRow => ({
+      ...rowToSummary(row),
+      organizationId: row.organizationId,
+      projectId: row.projectId,
+      surface: row.surface,
+      paywallId: row.paywallId,
+      messages: row.messages,
+    });
+
+    /** Load a row by id or fail not-found. */
+    const findRow = (chatId: string) =>
+      Effect.gen(function* () {
+        const rows = yield* db
+          .select()
+          .from(voidhashAiChat)
+          .where(eq(voidhashAiChat.id, chatId))
+          .limit(1);
+        const row = rows[0];
+        if (!row) {
+          return yield* Effect.fail(new AiChatNotFoundError({ chatId }));
+        }
+        return row;
+      });
+
+    const save = Effect.fn("saveAiChat")(
+      function* (input: AiChatSaveInput) {
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+        yield* assertProjectMember(input.projectId, input.organizationId);
+        const userId = yield* currentUserId;
+
+        const title = input.title.slice(0, 255);
+        const now = new Date();
+        const inserted = yield* db
+          .insert(voidhashAiChat)
+          .values({
+            id: input.id,
+            organizationId: input.organizationId,
+            projectId: input.projectId,
+            surface: input.surface,
+            chatType: input.chatType,
+            paywallId: input.paywallId ?? null,
+            userId,
+            title,
+            messages: input.messages,
+          })
+          .onConflictDoUpdate({
+            target: voidhashAiChat.id,
+            // Only mutable fields — never reassign org/project/owner on replace.
+            set: { title, messages: input.messages, updatedAt: now },
+          })
+          .returning();
+
+        return rowToSummary(inserted[0]!);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const list = Effect.fn("listAiChats")(
+      function* (input: AiChatListInput) {
+        yield* assertProjectMember(input.projectId, input.organizationId);
+        const scope = [
+          eq(voidhashAiChat.projectId, input.projectId),
+          eq(voidhashAiChat.surface, input.surface),
+          eq(voidhashAiChat.chatType, "persistent"),
+          input.paywallId ? eq(voidhashAiChat.paywallId, input.paywallId) : undefined,
+        ];
+        const rows = yield* db
+          .select()
+          .from(voidhashAiChat)
+          .where(and(...scope))
+          .orderBy(desc(voidhashAiChat.updatedAt), desc(voidhashAiChat.id));
+        return rows.map(rowToSummary);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const get = Effect.fn("getAiChat")(
+      function* (input: { readonly chatId: string }) {
+        const row = yield* findRow(input.chatId);
+        yield* assertOrgMember(row.organizationId);
+        return rowToChat(row);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const remove = Effect.fn("deleteAiChat")(
+      function* (input: { readonly chatId: string }) {
+        const row = yield* findRow(input.chatId);
+        yield* assertOrgMember(row.organizationId);
+        yield* db.delete(voidhashAiChat).where(eq(voidhashAiChat.id, input.chatId));
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const uploadAttachment = Effect.fn("uploadAiChatAttachment")(
+      function* (input: AiChatAttachmentUploadInput) {
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+        yield* assertOrgMember(input.organizationId);
+
+        const { bytes, ext } = yield* validateAndDecodePaywallAsset({
+          imageBase64: input.dataBase64,
+          contentType: input.contentType,
+        });
+
+        // Chat attachments live under a dedicated prefix, separate from the org
+        // asset library: ai-chats/<chatId>/attachments/<attachmentId>.<ext>.
+        const attachmentId = generateId("aiChatAttachment");
+        const key = `ai-chats/${input.chatId}/attachments/${attachmentId}.${ext}`;
+        yield* publicFileStore.putObject({ key, body: bytes, contentType: input.contentType });
+
+        return {
+          url: publicFileStore.publicUrl(key),
+          name: input.name.slice(0, 255),
+          contentType: input.contentType,
+          sizeBytes: bytes.length,
+        };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            PublicFileStoreError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: error.cause })),
+            PaywallAssetValidationError: (error: PaywallAssetValidationError) =>
+              Effect.fail(new AiChatAttachmentValidationError({ message: error.message })),
+          }),
+        ),
+    );
+
+    const captureCheckpointReporting = Effect.fn("captureAiCheckpoint")(
+      function* (input: {
+        readonly chatId: string;
+        readonly turnId: string;
+        readonly paywallId: string;
+        readonly tree: unknown;
+      }) {
+        // First-write-wins per (chat, turn, document): only the FIRST accepted
+        // write to a document in a turn captures the pre-turn image. A later write
+        // to the same document in the same turn is a no-op insert (nothing set on
+        // conflict), preserving the pre-turn baseline. `.returning()` yields the
+        // inserted row on a real insert and an EMPTY array on the conflict no-op,
+        // so `inserted.length > 0` is exactly "this call took the checkpoint".
+        const inserted = yield* db
+          .insert(voidhashAiCheckpoint)
+          .values({
+            id: generateId("aiCheckpoint"),
+            chatId: input.chatId,
+            turnId: input.turnId,
+            paywallId: input.paywallId,
+            tree: input.tree,
+          })
+          .onConflictDoNothing({
+            target: [
+              voidhashAiCheckpoint.chatId,
+              voidhashAiCheckpoint.turnId,
+              voidhashAiCheckpoint.paywallId,
+            ],
+          })
+          .returning({ id: voidhashAiCheckpoint.id });
+        return { captured: inserted.length > 0 };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
+          }),
+        ),
+    );
+
+    /** Void-returning capture for callers that don't need the taken/no-op signal. */
+    const captureCheckpoint = (input: {
+      readonly chatId: string;
+      readonly turnId: string;
+      readonly paywallId: string;
+      readonly tree: unknown;
+    }) => captureCheckpointReporting(input).pipe(Effect.asVoid);
+
+    const getLastTurnCheckpoints = Effect.fn("getLastTurnAiCheckpoints")(
+      function* (input: { readonly chatId: string }) {
+        const chat = yield* findRow(input.chatId);
+        // Reverting mutates this chat's project-scoped paywall documents, so
+        // require project membership (not just org membership) — an org member
+        // outside the chat's project must not be able to revert its paywalls.
+        yield* assertProjectMember(chat.projectId, chat.organizationId);
+
+        // The chat's newest checkpoint identifies the last turn; return all of
+        // that turn's pre-images (one per touched document).
+        const newest = yield* db
+          .select({ turnId: voidhashAiCheckpoint.turnId })
+          .from(voidhashAiCheckpoint)
+          .where(eq(voidhashAiCheckpoint.chatId, input.chatId))
+          .orderBy(desc(voidhashAiCheckpoint.createdAt), desc(voidhashAiCheckpoint.id))
+          .limit(1);
+        const turnId = newest[0]?.turnId;
+        if (turnId === undefined) {
+          return [];
+        }
+        const rows = yield* db
+          .select({
+            paywallId: voidhashAiCheckpoint.paywallId,
+            tree: voidhashAiCheckpoint.tree,
+          })
+          .from(voidhashAiCheckpoint)
+          .where(
+            and(
+              eq(voidhashAiCheckpoint.chatId, input.chatId),
+              eq(voidhashAiCheckpoint.turnId, turnId),
+            ),
+          );
+        return rows.map(
+          (row): AiCheckpointPreImage => ({ paywallId: row.paywallId, tree: row.tree }),
+        );
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      save,
+      list,
+      get,
+      delete: remove,
+      uploadAttachment,
+      captureCheckpoint,
+      captureCheckpointReporting,
+      getLastTurnCheckpoints,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(AiChatService)(AiChatService.make);
+}
diff --git a/packages/core/src/services/analytics/AnalyticsService.ts b/packages/core/src/services/analytics/AnalyticsService.ts
new file mode 100644
index 000000000..816163e6b
--- /dev/null
+++ b/packages/core/src/services/analytics/AnalyticsService.ts
@@ -0,0 +1,443 @@
+/**
+ * `AnalyticsService` orchestrates the read-side analytics surface: the
+ * recent-events feed (`listRecentEvents`) and the multi-insight composition
+ * (`queryAnalyticsInsights`). Project lookups use `Db` inline; time-series and
+ * event reads use {@link ClickhouseWebClient}. The filter compiler, time-range
+ * resolver, and insight registry live in the analytics domain; the ClickHouse
+ * query accessor and metric-derivation resolver live alongside this file. A
+ * runtime without a ClickHouse service keeps authorization and Postgres scope
+ * checks but returns empty analytics results.
+ */
+import { Context, Effect, Layer, Option, Schema } from "effect";
+
+import {
+  type AnalyticsDataPoint,
+  type AnalyticsFilter,
+  type AnalyticsInsightQuery,
+  type AnalyticsInsightResult,
+  type AnalyticsTimeRange,
+  type BuiltInInsightId,
+  CURRENCY_INSIGHTS,
+  type CompiledAnalyticsFilter,
+  InvalidAnalyticsQueryError,
+  RATE_INSIGHTS,
+  type TimeGranularity,
+  avgDataPoints,
+  compileAnalyticsFilter,
+  ensureNoBreakdowns,
+  getBuiltInInsight,
+  resolveTimeRange,
+  sumDataPoints,
+} from "../../domain/analytics/Analytics.ts";
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { Db } from "@voidhash/db";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { checkOrganizationPermission, checkProjectPermission } from "../../utils/permissions.ts";
+import { RESERVED_REVENUE_EVENT_NAMES } from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import {
+  CLICKHOUSE_EVENTS_FULL_TABLE,
+  CLICKHOUSE_PERSONS_FULL_TABLE,
+  analyticsAccessor,
+  getExperimentResults as getExperimentResultsQuery,
+} from "./clickhouse-accessor.ts";
+import { buildSeriesResolver } from "./series-resolver.ts";
+
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 500;
+
+/**
+ * Catch-all service error. Wraps `SqlError`, `DbError`, and other
+ * infrastructural failures at the public-method boundary.
+ */
+export class AnalyticsServiceError extends Schema.TaggedErrorClass<AnalyticsServiceError>(
+  "AnalyticsServiceError",
+)("AnalyticsServiceError", { cause: Schema.String, message: Schema.String }) {}
+
+export interface QueryAnalyticsInsightsInput {
+  queries: ReadonlyArray<{
+    breakdowns?: AnalyticsInsightQuery["breakdowns"];
+    context: { organizationId: string };
+    filter?: AnalyticsFilter;
+    granularity?: TimeGranularity;
+    insightId: BuiltInInsightId;
+    key: string;
+    limit?: number;
+    timeRange: AnalyticsTimeRange;
+  }>;
+}
+
+interface RecentAnalyticsEventRow {
+  capture_id: string;
+  context: string;
+  event_id: string;
+  event_name: string;
+  event_properties: string;
+  identity_mode: string;
+  person_distinct_id: string | null;
+  person_email: string | null;
+  person_id: string | null;
+  person_name: string | null;
+  previous_distinct_id: string | null;
+  processed_at: string | Date;
+  received_at: string | Date;
+  request_id: string;
+}
+
+const parseDate = (value: string | Date): Date => {
+  if (value instanceof Date) return value;
+  const trimmed = value.trim();
+  const normalized = trimmed.includes("T") ? trimmed : trimmed.replace(" ", "T");
+  const withZone = /(?:Z|[+-]\d{2}:\d{2})$/.test(normalized) ? normalized : `${normalized}Z`;
+  return new Date(withZone);
+};
+
+const parseJsonRecord = (value: string): Record<string, unknown> => {
+  if (!value || value.trim().length === 0) return {};
+  try {
+    const parsed: unknown = JSON.parse(value);
+    return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed)
+      ? (parsed as Record<string, unknown>)
+      : {};
+  } catch {
+    return {};
+  }
+};
+
+export class AnalyticsService extends Context.Service<AnalyticsService>()("AnalyticsService", {
+  make: Effect.gen(function* () {
+    const ch = Option.getOrUndefined(
+      yield* Effect.serviceOption(ClickhouseWebClient.ClickhouseWebClient),
+    );
+    const db = yield* Db;
+
+    const listRecentEvents = Effect.fn("analytics.listRecentEvents")(
+      function* (input: { readonly limit?: number; readonly projectId: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access analytics events for project ${input.projectId}`,
+        );
+
+        if (ch === undefined) {
+          return { events: [], hasMore: false };
+        }
+
+        const limit = Math.min(Math.max(input.limit ?? DEFAULT_LIMIT, 1), MAX_LIMIT);
+        yield* Effect.annotateCurrentSpan("voidhash.analytics.limit", limit);
+
+        // The readonly ClickHouse user's row policies are keyed on
+        // `SQL_organization_id`, so resolve the project's org and pass it on
+        // every query (events_v2 + the persons_v1 join are both policy-scoped).
+        const project = yield* db.query.projects.findFirst({
+          columns: { organizationId: true },
+          where: { id: input.projectId },
+        });
+        const organizationId = project?.organizationId ?? "";
+        if (organizationId)
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+
+        // Structural interpolations (table names) are injected with `ch.literal`
+        // (raw SQL); scalar parameters use `ch.param` with their exact ClickHouse
+        // type so the readonly user's row policies / parser behave as before.
+        const rows = yield* ch.withClickhouseSettings(
+          ch<RecentAnalyticsEventRow>`
+            SELECT
+              events.event_id AS event_id,
+              events.event_name AS event_name,
+              events.capture_id AS capture_id,
+              events.distinct_id AS person_distinct_id,
+              events.previous_distinct_id AS previous_distinct_id,
+              events.person_id AS person_id,
+              events.identity_mode AS identity_mode,
+              events.request_id AS request_id,
+              events.event_ts AS received_at,
+              events.processed_ts AS processed_at,
+              events.event_properties AS event_properties,
+              events.context AS context,
+              persons.name AS person_name,
+              persons.email AS person_email
+            FROM ${ch.literal(CLICKHOUSE_EVENTS_FULL_TABLE)} AS events
+            LEFT JOIN (
+              SELECT
+                analytics_persons.person_id AS person_id,
+                argMax(analytics_persons.email, analytics_persons.version) AS email,
+                argMax(analytics_persons.name, analytics_persons.version) AS name
+              FROM ${ch.literal(CLICKHOUSE_PERSONS_FULL_TABLE)} AS analytics_persons
+              WHERE analytics_persons.project_id = ${ch.param("String", input.projectId)}
+                AND analytics_persons.is_archived = 0
+              GROUP BY analytics_persons.person_id
+            ) AS persons ON events.person_id = persons.person_id
+            WHERE events.project_id = ${ch.param("String", input.projectId)}
+            ORDER BY events.event_ts DESC, events.event_id DESC
+            LIMIT ${ch.param("UInt32", limit + 1)}
+          `,
+          { SQL_organization_id: organizationId },
+        );
+
+        yield* Effect.annotateCurrentSpan("voidhash.analytics.has_more", rows.length > limit);
+
+        return {
+          events: rows.slice(0, limit).map((row) => ({
+            captureId: row.capture_id,
+            context: parseJsonRecord(row.context),
+            eventId: row.event_id,
+            eventName: row.event_name,
+            identityMode: row.identity_mode,
+            personDistinctId: row.person_distinct_id,
+            personEmail: row.person_email,
+            personId: row.person_id,
+            personName: row.person_name,
+            previousDistinctId: row.previous_distinct_id,
+            processedAt: parseDate(row.processed_at),
+            properties: parseJsonRecord(row.event_properties),
+            receivedAt: parseDate(row.received_at),
+            requestId: row.request_id,
+          })),
+          hasMore: rows.length > limit,
+        };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            SqlError: (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: error.message,
+                  message: "Failed to list recent analytics events",
+                }),
+              ),
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to list recent analytics events",
+                }),
+              ),
+          }),
+        ),
+    );
+
+    const queryAnalyticsInsights = Effect.fn("queryAnalyticsInsights")(
+      function* (input: QueryAnalyticsInsightsInput) {
+        const session = yield* AuthSession;
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        yield* Effect.annotateCurrentSpan("voidhash.analytics.query_count", input.queries.length);
+        const { getSeries } = buildSeriesResolver(analyticsAccessor);
+
+        const results: ReadonlyArray<{
+          insightId: BuiltInInsightId;
+          key: string;
+          resolvedTimeRange: { start: Date; end: Date };
+          result: AnalyticsInsightResult;
+        }>[number][] = [];
+
+        for (const query of input.queries) {
+          if (query.context.organizationId)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              query.context.organizationId,
+            );
+          yield* Effect.annotateCurrentSpan("voidhash.analytics.insight_id", query.insightId);
+          yield* Effect.annotateCurrentSpan("voidhash.analytics.insight_key", query.key);
+
+          yield* checkOrganizationPermission(
+            query.context.organizationId,
+            "organization:all",
+            `User ${session?.user?.id} is not authorized to access analytics for organization ${query.context.organizationId}`,
+          );
+
+          const insight = yield* getBuiltInInsight(query.insightId);
+          yield* ensureNoBreakdowns(query.breakdowns);
+
+          const resolvedTimeRange = yield* resolveTimeRange(query.timeRange);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.analytics.time_range.start",
+            resolvedTimeRange.start.toISOString(),
+          );
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.analytics.time_range.end",
+            resolvedTimeRange.end.toISOString(),
+          );
+          const projectRows = yield* db.query.projects.findMany({
+            where: { organizationId: query.context.organizationId },
+          });
+          const availableProjectIds = projectRows.map((project) => project.id);
+          const compiledFilter: CompiledAnalyticsFilter = yield* compileAnalyticsFilter({
+            availableProjectIds,
+            filter: query.filter,
+            supportedFields: insight.supportedFilterFields,
+          });
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.analytics.project_ids.count",
+            compiledFilter.projectIds.length,
+          );
+          const granularity = query.granularity ?? insight.defaultGranularity;
+          yield* Effect.annotateCurrentSpan("voidhash.analytics.granularity", granularity);
+
+          if (!insight.supportedGranularities.includes(granularity)) {
+            yield* Effect.fail(
+              new InvalidAnalyticsQueryError({
+                message: `Granularity ${granularity} is not supported for ${query.insightId}`,
+              }),
+            );
+          }
+
+          const series: AnalyticsDataPoint[] =
+            compiledFilter.projectIds.length && ch !== undefined
+              ? yield* getSeries(
+                  query.insightId,
+                  compiledFilter,
+                  granularity,
+                  resolvedTimeRange,
+                  query.context.organizationId,
+                ).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch))
+              : [];
+
+          const summaryValue = RATE_INSIGHTS.has(query.insightId)
+            ? avgDataPoints(series)
+            : sumDataPoints(series);
+
+          const result: AnalyticsInsightResult = {
+            kind: "metric",
+            sparkline: series,
+            summary: {
+              currency: CURRENCY_INSIGHTS.has(query.insightId) ? "USD" : undefined,
+              value: summaryValue,
+            },
+          };
+
+          results.push({
+            insightId: query.insightId,
+            key: query.key,
+            resolvedTimeRange,
+            result,
+          });
+        }
+
+        return { results };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to query analytics insights",
+                }),
+              ),
+            SqlError: (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: error.message,
+                  message: "Failed to query analytics insights",
+                }),
+              ),
+          }),
+        ),
+    );
+
+    /**
+     * Raw per-variant results for an experiment: exposures, conversions (primary
+     * metric fired after first exposure), conversion rate, and post-exposure
+     * revenue. Delegates the ClickHouse funnel to the accessor
+     * ({@link getExperimentResultsQuery}); resolves the experiment's project +
+     * organization (for the row policy) and its metric names here. Reads
+     * server-emitted `$experiment.exposed` events — returns zeroed variants until
+     * exposure emission is live.
+     */
+    const getExperimentResults = Effect.fn("analytics.getExperimentResults")(
+      function* (input: { readonly experimentId: string; readonly days?: number }) {
+        const experiment = yield* db.query.experiments.findFirst({
+          where: { id: input.experimentId },
+        });
+        if (!experiment) {
+          return yield* Effect.fail(
+            new AnalyticsServiceError({
+              cause: input.experimentId,
+              message: "Experiment not found",
+            }),
+          );
+        }
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to read experiment results for ${input.experimentId}`,
+        );
+        const project = yield* db.query.projects.findFirst({
+          where: { id: experiment.projectId },
+        });
+        if (!project) {
+          return yield* Effect.fail(
+            new AnalyticsServiceError({
+              cause: experiment.projectId,
+              message: "Project not found",
+            }),
+          );
+        }
+        if (ch === undefined) {
+          return { variants: [] };
+        }
+        const now = new Date();
+        const startDate =
+          experiment.startedAt ??
+          new Date(now.getTime() - (input.days ?? 90) * 24 * 60 * 60 * 1000);
+        const endDate = experiment.endedAt ?? now;
+
+        const rows = yield* getExperimentResultsQuery({
+          organizationId: project.organizationId,
+          projectId: experiment.projectId,
+          experimentKey: experiment.key,
+          primaryMetricEventNames: [experiment.primaryMetricEventName],
+          revenueEventNames: [...RESERVED_REVENUE_EVENT_NAMES],
+          startDate,
+          endDate,
+        }).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch));
+
+        return {
+          variants: rows.map((r) => {
+            const exposures = Number(r.exposures);
+            const conversions = Number(r.conversions);
+            return {
+              variantKey: r.variant,
+              exposures,
+              conversions,
+              conversionRate: exposures > 0 ? conversions / exposures : 0,
+              revenueUsd: Number(r.revenue_cents) / 100,
+            };
+          }),
+        };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to query experiment results",
+                }),
+              ),
+            SqlError: (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: error.message,
+                  message: "Failed to query experiment results",
+                }),
+              ),
+          }),
+        ),
+    );
+
+    return { getExperimentResults, listRecentEvents, queryAnalyticsInsights } as const;
+  }),
+}) {
+  static layer: Layer.Layer<AnalyticsService, never, Db> = Layer.effect(
+    AnalyticsService,
+  )(AnalyticsService.make);
+}
diff --git a/packages/core/src/services/analytics/clickhouse-accessor.ts b/packages/core/src/services/analytics/clickhouse-accessor.ts
new file mode 100644
index 000000000..1492960d0
--- /dev/null
+++ b/packages/core/src/services/analytics/clickhouse-accessor.ts
@@ -0,0 +1,607 @@
+/**
+ * ClickHouse data-access layer for the analytics service: the 12 metric query
+ * helpers consumed by `series-resolver`, exposed as {@link analyticsAccessor}.
+ * Each returns `ReadonlyArray<AnalyticsDataPoint>` with the period column
+ * normalised to `Date`.
+ */
+import { Effect } from "effect";
+
+import type {
+  AnalyticsDataPoint,
+  CompiledAnalyticsFilter,
+  TimeGranularity,
+  TimeRangeParams,
+} from "../../domain/analytics/Analytics.ts";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import type { SqlError } from "effect/unstable/sql/SqlError";
+
+// Unqualified table names — the runtime Clickhouse client connects with the
+// per-stage database (provisioned by `Clickhouse.Database`) as its default,
+// so these resolve correctly without a hardcoded database prefix.
+const CLICKHOUSE_EVENTS_FULL_TABLE = "events_v2" as const;
+const CLICKHOUSE_PERSONS_FULL_TABLE = "persons_v1" as const;
+const CLICKHOUSE_PENDING_OVERRIDES_FULL_TABLE = "person_identity_pending_overrides_v2" as const;
+
+const EVENT_ALIAS = "events";
+const OVERRIDES_ALIAS = "pending_overrides";
+const EVENT_TS = `${EVENT_ALIAS}.event_ts`;
+const EVENT_PROPERTIES = `${EVENT_ALIAS}.event_properties`;
+
+// The pending-overrides columns are non-nullable `String` and ClickHouse runs
+// with `join_use_nulls = 0`, so an unmatched LEFT JOIN row yields '' (empty
+// string), not NULL. A plain `coalesce(overrides.col, events.col)` would stop at
+// that '' and collapse every unmatched person into one empty-string key, so each
+// override column is `nullIf(col, '')`'d first — turning the no-match '' back
+// into NULL — before coalescing to the event's own id.
+const effectivePersonIdExpression = `coalesce(nullIf(${OVERRIDES_ALIAS}.person_id, ''), ${EVENT_ALIAS}.person_id)`;
+const effectiveDistinctIdExpression = `coalesce(nullIf(${OVERRIDES_ALIAS}.target_distinct_id, ''), ${EVENT_ALIAS}.distinct_id)`;
+
+const PENDING_OVERRIDES_SUBQUERY = `
+(
+  SELECT
+    project_id,
+    source_distinct_id,
+    target_distinct_id,
+    person_id
+  FROM (
+    SELECT
+      project_id,
+      source_distinct_id,
+      target_distinct_id,
+      person_id,
+      is_deleted,
+      version,
+      changed_at
+    FROM ${CLICKHOUSE_PENDING_OVERRIDES_FULL_TABLE}
+    WHERE version > 0
+    ORDER BY
+      project_id ASC,
+      source_distinct_id ASC,
+      version DESC,
+      changed_at DESC
+    LIMIT 1 BY project_id, source_distinct_id
+  )
+  WHERE is_deleted = 0
+) AS ${OVERRIDES_ALIAS}`;
+
+// Columns the deduped `events` subquery (see `resolvedEventsFrom`) projects for
+// the outer query, the pending-overrides JOIN, and the metric expressions.
+// `processed_ts` is the latest-wins ORDER BY key — read off the base scan inside
+// the subquery, so it does not need to be projected here.
+const RESOLVED_EVENTS_COLUMNS = [
+  "event_id",
+  "event_name",
+  "event_ts",
+  "project_id",
+  "distinct_id",
+  "person_id",
+  "event_properties",
+].join(", ");
+
+const RESOLVED_EVENTS_JOIN = `LEFT JOIN ${PENDING_OVERRIDES_SUBQUERY}
+ON ${OVERRIDES_ALIAS}.project_id = ${EVENT_ALIAS}.project_id
+AND ${OVERRIDES_ALIAS}.source_distinct_id = ${EVENT_ALIAS}.distinct_id`;
+
+const getDateTruncExpression = (column: string, granularity: TimeGranularity): string => {
+  switch (granularity) {
+    case "hour":
+      return `toStartOfHour(${column})`;
+    case "day":
+      return `toDate(${column})`;
+    case "week":
+      return `toStartOfWeek(${column}, 1)`;
+    case "month":
+      return `toStartOfMonth(${column})`;
+    case "quarter":
+      return `toStartOfQuarter(${column})`;
+    case "year":
+      return `toStartOfYear(${column})`;
+  }
+};
+
+interface AnalyticsRow {
+  period: string | Date;
+  total: string | number | null;
+}
+
+const parsePeriod = (value: unknown): Date | null => {
+  if (value instanceof Date) {
+    return Number.isNaN(value.getTime()) ? null : value;
+  }
+  if (typeof value === "string") {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) return null;
+    const normalized = trimmed.includes("T") ? trimmed : trimmed.replace(" ", "T");
+    const withZone = /(?:Z|[+-]\d{2}:\d{2})$/.test(normalized) ? normalized : `${normalized}Z`;
+    const parsed = new Date(withZone);
+    return Number.isNaN(parsed.getTime()) ? null : parsed;
+  }
+  return null;
+};
+
+const parseRowsToDataPoints = (rows: ReadonlyArray<AnalyticsRow>): AnalyticsDataPoint[] =>
+  rows.flatMap((row) => {
+    const timestamp = parsePeriod(row.period);
+    if (!timestamp) return [];
+    const value = Number(row.total ?? 0);
+    return [{ timestamp, value: Number.isFinite(value) ? value : 0 }];
+  });
+
+const jsonString = (...keys: readonly string[]): string =>
+  `coalesce(${keys
+    .map((key) => `nullIf(JSONExtractString(${EVENT_PROPERTIES}, '${key}'), '')`)
+    .join(", ")}, '')`;
+
+const jsonNumber = (...keys: readonly string[]): string =>
+  `coalesce(${keys
+    .map((key) => `nullIf(JSONExtractFloat(${EVENT_PROPERTIES}, '${key}'), 0)`)
+    .join(", ")}, 0)`;
+
+const jsonBool = (...keys: readonly string[]): string =>
+  `greatest(${keys.map((key) => `JSONExtractBool(${EVENT_PROPERTIES}, '${key}')`).join(", ")})`;
+
+// USD-only. A row with no FX rate at write time has `amount_usd` NULL; we must
+// NOT fall back to the raw original-currency `amount` (e.g. summing £10 as $10),
+// so an FX-less row contributes 0 to USD revenue — a bounded under-count rather
+// than a silent wrong-currency miscount. Carry-forward FX at write time
+// (`FxRateService.getUsdRate`) keeps almost every new row valued, so the
+// under-count is negligible.
+const amountCentsExpression = jsonNumber("amount_usd", "amountUsd");
+const productIdExpression = jsonString("product_id", "productId", "product.id");
+const providerEnvironmentExpression = jsonNumber("provider_environment", "providerEnvironment");
+const subscriptionStatusExpression = jsonNumber("subscription_status", "subscriptionStatus");
+const subscriptionIdExpression = `coalesce(
+  nullIf(JSONExtractString(${EVENT_PROPERTIES}, 'subscription_id'), ''),
+  nullIf(JSONExtractString(${EVENT_PROPERTIES}, 'subscriptionId'), ''),
+  nullIf(JSONExtractString(${EVENT_PROPERTIES}, 'provider_subscription_id'), ''),
+  nullIf(JSONExtractString(${EVENT_PROPERTIES}, 'providerSubscriptionId'), ''),
+  nullIf(JSONExtractString(${EVENT_PROPERTIES}, 'store_subscription_id'), ''),
+  nullIf(JSONExtractString(${EVENT_PROPERTIES}, 'storeSubscriptionId'), ''),
+  ${EVENT_ALIAS}.event_id
+)`;
+
+/**
+ * ClickHouse's `DateTime` named parameter expects `YYYY-MM-DD HH:MM:SS`. The
+ * Web client serialises a JS `Date` as ISO with milliseconds otherwise, which
+ * the binding parser rejects.
+ */
+const toClickhouseDateTime = (date: Date): string =>
+  date
+    .toISOString()
+    .replace("T", " ")
+    .replace(/\.\d+Z$/, "");
+
+/**
+ * Build the optional event-property filter clause as a composed SQL fragment.
+ * Each active filter contributes an `AND <expr> IN <typed array param>` term
+ * (the expression is raw SQL, the values bound as a typed ClickHouse array
+ * parameter); inactive filters contribute nothing. Returns an empty fragment
+ * when no filters apply, so it can be interpolated unconditionally into the
+ * surrounding query.
+ */
+const buildEventFilters = (
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  filters: CompiledAnalyticsFilter,
+) => {
+  const terms = [
+    { values: filters.productIds, expression: productIdExpression, kind: "String" as const },
+    {
+      values: filters.providerEnvironments,
+      expression: providerEnvironmentExpression,
+      kind: "Float64" as const,
+    },
+    {
+      values: filters.subscriptionStatuses,
+      expression: subscriptionStatusExpression,
+      kind: "Float64" as const,
+    },
+  ];
+  return terms.reduce(
+    (acc, term) =>
+      term.values && term.values.length > 0
+        ? ch`${acc}
+        AND ${ch.literal(term.expression)} IN ${ch.param(`Array(${term.kind})`, term.values)}`
+        : acc,
+    ch``,
+  );
+};
+
+/**
+ * `FROM (<latest-wins events>) AS events` — collapses the raw `events_v2`
+ * MergeTree (which can hold more than one row for a single `event_id` after a
+ * retry, replay, or concurrent flush) down to the newest row per `event_id`,
+ * ordered by `processed_ts` (the ingestion timestamp). Defense-in-depth so the
+ * money sums never double-count a redelivered event; count/`countDistinct`
+ * metrics benefit too.
+ *
+ * The caller's partition-pruning predicate (`project_id` / `event_ts` range /
+ * `event_name`) is pushed INTO the inner scan via `innerWhere` so `LIMIT 1 BY`
+ * only walks the matching partitions, not the whole table. The RLS
+ * `SQL_organization_id` setting is a whole-statement ClickHouse setting, so it
+ * still filters every `events_v2` access here — the subquery does not bypass the
+ * row policy. Inside the subquery the columns are unqualified (no `events.`
+ * alias yet); the outer query then references them through the `events` alias.
+ */
+const resolvedEventsFrom = (
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  innerWhere: ReturnType<typeof buildEventFilters>,
+) =>
+  ch`FROM (
+          SELECT ${ch.literal(RESOLVED_EVENTS_COLUMNS)}
+          FROM ${ch.literal(CLICKHOUSE_EVENTS_FULL_TABLE)}
+          WHERE ${innerWhere}
+          ORDER BY processed_ts DESC
+          LIMIT 1 BY event_id
+        ) AS ${ch.literal(EVENT_ALIAS)}`;
+
+const moneyPoints = (points: ReadonlyArray<AnalyticsDataPoint>): AnalyticsDataPoint[] =>
+  points.map((point) => ({ ...point, value: point.value / 100 }));
+
+interface EventMetricInput {
+  readonly aggregateExpression: string;
+  readonly eventNames: readonly string[];
+  readonly extraWhere?: string;
+  readonly filters: CompiledAnalyticsFilter;
+  readonly organizationId: string;
+  readonly params: TimeRangeParams;
+}
+
+/**
+ * Per-query setting the readonly ClickHouse user's row policies read. Passing
+ * it scopes every analytics read to the caller's tenant; omitting it would
+ * match no rows (fail-closed).
+ */
+const tenantSettings = (organizationId: string): Record<string, string> => ({
+  SQL_organization_id: organizationId,
+});
+
+const eventMetric = (input: EventMetricInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const period = getDateTruncExpression(EVENT_TS, input.params.granularity);
+    const eventFilters = buildEventFilters(ch, input.filters);
+    // The project/time/event-name predicate is the partition-pruning filter, so
+    // it lives inside the dedup subquery (before `LIMIT 1 BY`). The optional
+    // event-property filters (`eventFilters`) and `extraWhere` stay in the outer
+    // WHERE: they read `event_properties`, and applying them to the already-
+    // deduped row is correct (a true duplicate carries identical properties) and
+    // cheaper than running JSONExtract on the pre-dedup rows.
+    const dedupedEvents = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          AND event_ts >= ${ch.param("DateTime", toClickhouseDateTime(input.params.startDate))}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          AND event_name IN ${ch.param("Array(String)", input.eventNames)}`,
+    );
+
+    const rows = yield* ch.withClickhouseSettings(
+      ch<AnalyticsRow>`
+        SELECT
+          ${ch.literal(period)} AS period,
+          ${ch.literal(input.aggregateExpression)} AS total
+        ${dedupedEvents}
+        ${ch.literal(RESOLVED_EVENTS_JOIN)}
+        WHERE 1 = 1
+          ${eventFilters}
+          ${ch.literal(input.extraWhere ?? "")}
+        GROUP BY period
+        ORDER BY period ASC
+      `,
+      tenantSettings(input.organizationId),
+    );
+
+    return parseRowsToDataPoints(rows);
+  });
+
+export interface AnalyticsQueryInput {
+  filters: CompiledAnalyticsFilter;
+  organizationId: string;
+  params: TimeRangeParams;
+}
+
+export interface AnalyticsDataAccessor {
+  getRevenue: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getMRR: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getChurnedRevenue: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getActiveSubscriptions: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getActiveTrials: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getNewSubscriptions: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getChurnedSubscriptions: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getTrials: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getTrialConversions: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getPersonCount: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getNewPersons: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+  getPayingPersonCount: (
+    input: AnalyticsQueryInput,
+  ) => Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient>;
+}
+
+const getRevenue = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: `coalesce(sum(${amountCentsExpression}), 0)`,
+    eventNames: ["$purchase.completed", "$subscription.created", "$subscription.renewed"],
+  }).pipe(Effect.map(moneyPoints));
+
+const getMRR = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: `coalesce(sum(${amountCentsExpression}), 0)`,
+    eventNames: ["$subscription.created", "$subscription.renewed"],
+    extraWhere: `AND ${jsonBool("is_trial", "isTrial")} = 0`,
+  }).pipe(Effect.map(moneyPoints));
+
+const getChurnedRevenue = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: `coalesce(sum(${amountCentsExpression}), 0)`,
+    eventNames: ["$subscription.canceled", "$subscription.expired"],
+  }).pipe(Effect.map(moneyPoints));
+
+const getActiveSubscriptions = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: `countDistinct(${subscriptionIdExpression})`,
+    eventNames: ["$subscription.created", "$subscription.renewed", "$subscription.active"],
+    extraWhere: `AND ${jsonBool("is_trial", "isTrial")} = 0`,
+  });
+
+const getActiveTrials = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: `countDistinct(${subscriptionIdExpression})`,
+    eventNames: ["$subscription.created", "$subscription.renewed", "$subscription.active"],
+    extraWhere: `AND ${jsonBool("is_trial", "isTrial")} = 1`,
+  });
+
+const getNewSubscriptions = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: "count()",
+    eventNames: ["$subscription.created"],
+    extraWhere: `AND ${jsonBool("is_trial", "isTrial")} = 0`,
+  });
+
+const getChurnedSubscriptions = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: "count()",
+    eventNames: ["$subscription.canceled", "$subscription.expired"],
+  });
+
+const getTrials = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: "count()",
+    eventNames: ["$subscription.created"],
+    extraWhere: `AND ${jsonBool("is_trial", "isTrial")} = 1`,
+  });
+
+const getTrialConversions = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: `countDistinct(${subscriptionIdExpression})`,
+    eventNames: ["$subscription.created", "$subscription.renewed", "$subscription.active"],
+    extraWhere: `AND ${jsonBool("converted_from_trial", "convertedFromTrial")} = 1`,
+  });
+
+const getPersonCount = ({ params, filters, organizationId }: AnalyticsQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const period = getDateTruncExpression("first_seen", params.granularity);
+    const effectivePersonKey = `coalesce(${effectivePersonIdExpression}, ${effectiveDistinctIdExpression})`;
+
+    const rows = yield* ch.withClickhouseSettings(
+      ch<AnalyticsRow>`
+        SELECT
+          ${ch.literal(period)} AS period,
+          count() AS total
+        FROM (
+          SELECT
+            ${ch.literal(effectivePersonKey)} AS person_key,
+            min(${ch.literal(EVENT_TS)}) AS first_seen
+          ${resolvedEventsFrom(
+            ch,
+            ch`project_id IN ${ch.param("Array(String)", filters.projectIds)}
+            AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(params.endDate))}`,
+          )}
+          ${ch.literal(RESOLVED_EVENTS_JOIN)}
+          GROUP BY person_key
+        )
+        GROUP BY period
+        ORDER BY period ASC
+      `,
+      tenantSettings(organizationId),
+    );
+
+    return parseRowsToDataPoints(rows);
+  });
+
+const getNewPersons = ({ params, filters, organizationId }: AnalyticsQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const period = getDateTruncExpression("first_seen", params.granularity);
+    const effectivePersonKey = `coalesce(${effectivePersonIdExpression}, ${effectiveDistinctIdExpression})`;
+
+    const rows = yield* ch.withClickhouseSettings(
+      ch<AnalyticsRow>`
+        SELECT
+          ${ch.literal(period)} AS period,
+          count() AS total
+        FROM (
+          SELECT
+            ${ch.literal(effectivePersonKey)} AS person_key,
+            min(${ch.literal(EVENT_TS)}) AS first_seen
+          ${resolvedEventsFrom(
+            ch,
+            ch`project_id IN ${ch.param("Array(String)", filters.projectIds)}
+            AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(params.endDate))}`,
+          )}
+          ${ch.literal(RESOLVED_EVENTS_JOIN)}
+          GROUP BY person_key
+        )
+        WHERE first_seen >= ${ch.param("DateTime", toClickhouseDateTime(params.startDate))}
+          AND first_seen <= ${ch.param("DateTime", toClickhouseDateTime(params.endDate))}
+        GROUP BY period
+        ORDER BY period ASC
+      `,
+      tenantSettings(organizationId),
+    );
+
+    return parseRowsToDataPoints(rows);
+  });
+
+const getPayingPersonCount = (input: AnalyticsQueryInput) =>
+  eventMetric({
+    ...input,
+    aggregateExpression: `countDistinct(${effectivePersonIdExpression})`,
+    eventNames: ["$purchase.completed", "$subscription.created", "$subscription.renewed"],
+    extraWhere: `AND ${amountCentsExpression} > 0`,
+  });
+
+export interface ExperimentVariantResultRow {
+  readonly variant: string;
+  readonly exposures: number | string;
+  readonly conversions: number | string;
+  readonly revenue_cents: number | string;
+}
+
+/**
+ * Per-variant experiment funnel: distinct exposed persons, distinct persons who
+ * fired a primary-metric event AFTER their first exposure, and post-exposure
+ * revenue (USD minor units). Exposures→conversions join on the identity-stitched
+ * person key (`coalesce(effectivePersonId, effectiveDistinctId)`) so an
+ * anonymous→identified user isn't undercounted, and events are deduped by
+ * `event_id` (latest-wins). Org-scoped by the readonly row policy. NOT a
+ * `BUILT_IN_INSIGHT` (those forbid the per-variant breakdown).
+ *
+ * Reads `$experiment.exposed` events (emitted server-side); returns no rows
+ * until exposure emission is producing events. NEEDS live-ClickHouse
+ * verification (value-level correctness cannot be checked by typecheck).
+ */
+export const getExperimentResults = (input: {
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly experimentKey: string;
+  readonly primaryMetricEventNames: readonly string[];
+  readonly revenueEventNames: readonly string[];
+  readonly startDate: Date;
+  readonly endDate: Date;
+}) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const personKey = `coalesce(${effectivePersonIdExpression}, ${effectiveDistinctIdExpression})`;
+    const variantExpr = `JSONExtractString(${EVENT_PROPERTIES}, 'variantKey')`;
+    const startTs = toClickhouseDateTime(input.startDate);
+    const endTs = toClickhouseDateTime(input.endDate);
+    const conversionEventNames = [
+      ...new Set([...input.primaryMetricEventNames, ...input.revenueEventNames]),
+    ];
+
+    const exposuresFrom = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", [input.projectId])}
+          AND event_ts >= ${ch.param("DateTime", startTs)}
+          AND event_ts <= ${ch.param("DateTime", endTs)}
+          AND event_name = ${ch.param("String", "$experiment.exposed")}
+          AND JSONExtractString(event_properties, 'experimentKey') = ${ch.param("String", input.experimentKey)}`,
+    );
+    const conversionsFrom = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", [input.projectId])}
+          AND event_ts >= ${ch.param("DateTime", startTs)}
+          AND event_ts <= ${ch.param("DateTime", endTs)}
+          AND event_name IN ${ch.param("Array(String)", conversionEventNames)}`,
+    );
+
+    return yield* ch.withClickhouseSettings(
+      ch<ExperimentVariantResultRow>`
+        WITH
+          exposures AS (
+            SELECT
+              ${ch.literal(personKey)} AS person_key,
+              argMin(${ch.literal(variantExpr)}, ${ch.literal(EVENT_TS)}) AS variant,
+              min(${ch.literal(EVENT_TS)}) AS first_ts
+            ${exposuresFrom}
+            ${ch.literal(RESOLVED_EVENTS_JOIN)}
+            GROUP BY person_key
+          ),
+          conversions AS (
+            SELECT
+              ${ch.literal(personKey)} AS person_key,
+              ${ch.literal(`${EVENT_ALIAS}.event_name`)} AS conv_event_name,
+              ${ch.literal(EVENT_TS)} AS conv_ts,
+              ${ch.literal(amountCentsExpression)} AS amount_cents
+            ${conversionsFrom}
+            ${ch.literal(RESOLVED_EVENTS_JOIN)}
+          )
+        SELECT
+          exposures.variant AS variant,
+          countDistinct(exposures.person_key) AS exposures,
+          countDistinctIf(
+            conversions.person_key,
+            conversions.conv_ts >= exposures.first_ts
+              AND conversions.conv_event_name IN ${ch.param("Array(String)", [...input.primaryMetricEventNames])}
+          ) AS conversions,
+          coalesce(sumIf(
+            conversions.amount_cents,
+            conversions.conv_ts >= exposures.first_ts
+              AND conversions.conv_event_name IN ${ch.param("Array(String)", [...input.revenueEventNames])}
+          ), 0) AS revenue_cents
+        FROM exposures
+        LEFT JOIN conversions ON conversions.person_key = exposures.person_key
+        GROUP BY variant
+        ORDER BY variant ASC
+      `,
+      tenantSettings(input.organizationId),
+    );
+  });
+
+export const analyticsAccessor: AnalyticsDataAccessor = {
+  getActiveSubscriptions,
+  getActiveTrials,
+  getChurnedRevenue,
+  getChurnedSubscriptions,
+  getMRR,
+  getNewPersons,
+  getNewSubscriptions,
+  getPayingPersonCount,
+  getPersonCount,
+  getRevenue,
+  getTrialConversions,
+  getTrials,
+};
+
+export {
+  CLICKHOUSE_EVENTS_FULL_TABLE,
+  CLICKHOUSE_PERSONS_FULL_TABLE,
+  CLICKHOUSE_PENDING_OVERRIDES_FULL_TABLE,
+  // Reused verbatim by the VoidQL `events`/`revenue` logical-view lowering so the
+  // dedup + identity-resolution machinery is single-sourced (docs/analytics-access-layer.html §9).
+  RESOLVED_EVENTS_JOIN,
+  effectivePersonIdExpression,
+  effectiveDistinctIdExpression,
+  toClickhouseDateTime,
+};
diff --git a/packages/core/src/services/analytics/series-resolver.ts b/packages/core/src/services/analytics/series-resolver.ts
new file mode 100644
index 000000000..8bbb81e5e
--- /dev/null
+++ b/packages/core/src/services/analytics/series-resolver.ts
@@ -0,0 +1,262 @@
+/**
+ * Pure series-resolution logic for the analytics insights operation. Splits
+ * the recursive metric-derivation graph (e.g. ARR = MRR x 12, churn-rate =
+ * churned / active+churned) out of the orchestration layer so the service
+ * file stays focused on permission checks and `catchTags`.
+ *
+ * `buildSeriesResolver` returns a closure with a per-call cache so derived
+ * metrics that share inputs (ARPU + ARPPU both use Revenue) don't re-issue
+ * the underlying ClickHouse query. Every metric is scoped to `organizationId`,
+ * which is passed through to the readonly ClickHouse user's tenant row
+ * policies and keyed into the cache.
+ */
+import { Effect } from "effect";
+
+import type {
+  AnalyticsDataPoint,
+  BuiltInInsightId,
+  CompiledAnalyticsFilter,
+  TimeGranularity,
+  TimeRangeParams,
+} from "../../domain/analytics/Analytics.ts";
+import type { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import type { SqlError } from "effect/unstable/sql/SqlError";
+import type { AnalyticsDataAccessor } from "./clickhouse-accessor.ts";
+
+const calculateRate = (numerator: number, denominator: number): number =>
+  denominator > 0 ? (numerator / denominator) * 100 : 0;
+
+const calculateGrowthRate = (current: number, previous: number): number => {
+  if (previous === 0) return current > 0 ? 100 : 0;
+  return ((current - previous) / previous) * 100;
+};
+
+const executePrimitiveMetric = ({
+  accessor,
+  compiledFilter,
+  insightId,
+  organizationId,
+  params,
+}: {
+  accessor: AnalyticsDataAccessor;
+  compiledFilter: CompiledAnalyticsFilter;
+  insightId: BuiltInInsightId;
+  organizationId: string;
+  params: TimeRangeParams;
+}): Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient> => {
+  const input = { filters: compiledFilter, organizationId, params };
+  switch (insightId) {
+    case "builtin/revenue":
+      return accessor.getRevenue(input);
+    case "builtin/mrr":
+      return accessor.getMRR(input);
+    case "builtin/churned_revenue":
+      return accessor.getChurnedRevenue(input);
+    case "builtin/active_subscriptions":
+      return accessor.getActiveSubscriptions(input);
+    case "builtin/active_trials":
+      return accessor.getActiveTrials(input);
+    case "builtin/new_subscriptions":
+      return accessor.getNewSubscriptions(input);
+    case "builtin/churned_subscriptions":
+      return accessor.getChurnedSubscriptions(input);
+    case "builtin/trials":
+      return accessor.getTrials(input);
+    case "builtin/trial_conversions":
+      return accessor.getTrialConversions(input);
+    case "builtin/person_count":
+      return accessor.getPersonCount(input);
+    case "builtin/new_persons":
+      return accessor.getNewPersons(input);
+    default:
+      return Effect.die(new Error(`Unexpected primitive insight ${insightId}`));
+  }
+};
+
+export const buildSeriesResolver = (accessor: AnalyticsDataAccessor) => {
+  const cache = new Map<string, AnalyticsDataPoint[]>();
+
+  const getSeries = (
+    insightId: BuiltInInsightId,
+    compiledFilter: CompiledAnalyticsFilter,
+    granularity: TimeGranularity,
+    timeRange: { end: Date; start: Date },
+    organizationId: string,
+  ): Effect.Effect<AnalyticsDataPoint[], SqlError, ClickhouseWebClient.ClickhouseWebClient> =>
+    Effect.gen(function* () {
+      const cacheKey = JSON.stringify({
+        compiledFilter,
+        granularity,
+        insightId,
+        organizationId,
+        timeRange,
+      });
+      const cached = cache.get(cacheKey);
+      if (cached) return cached;
+
+      const params: TimeRangeParams = {
+        endDate: timeRange.end,
+        granularity,
+        startDate: timeRange.start,
+      };
+
+      const series = yield* Effect.gen(function* () {
+        switch (insightId) {
+          case "builtin/arr": {
+            const mrr = yield* getSeries(
+              "builtin/mrr",
+              compiledFilter,
+              granularity,
+              timeRange,
+              organizationId,
+            );
+            return mrr.map((point) => ({ ...point, value: point.value * 12 }));
+          }
+          case "builtin/mrr_growth_rate": {
+            const mrr = yield* getSeries(
+              "builtin/mrr",
+              compiledFilter,
+              granularity,
+              timeRange,
+              organizationId,
+            );
+            return mrr.map((point, index) => ({
+              timestamp: point.timestamp,
+              value: calculateGrowthRate(point.value, mrr[index - 1]?.value ?? 0),
+            }));
+          }
+          case "builtin/churn_rate": {
+            const [churned, active] = yield* Effect.all([
+              getSeries(
+                "builtin/churned_subscriptions",
+                compiledFilter,
+                granularity,
+                timeRange,
+                organizationId,
+              ),
+              getSeries(
+                "builtin/active_subscriptions",
+                compiledFilter,
+                granularity,
+                timeRange,
+                organizationId,
+              ),
+            ]);
+            return churned.map((point, index) => ({
+              timestamp: point.timestamp,
+              value: calculateRate(point.value, (active[index]?.value ?? 0) + point.value),
+            }));
+          }
+          case "builtin/retention": {
+            const [active, churned] = yield* Effect.all([
+              getSeries(
+                "builtin/active_subscriptions",
+                compiledFilter,
+                granularity,
+                timeRange,
+                organizationId,
+              ),
+              getSeries(
+                "builtin/churned_subscriptions",
+                compiledFilter,
+                granularity,
+                timeRange,
+                organizationId,
+              ),
+            ]);
+            return active.map((point, index) => ({
+              timestamp: point.timestamp,
+              value: calculateRate(point.value, point.value + (churned[index]?.value ?? 0)),
+            }));
+          }
+          case "builtin/arpu": {
+            const [revenue, persons] = yield* Effect.all([
+              getSeries("builtin/revenue", compiledFilter, granularity, timeRange, organizationId),
+              getSeries(
+                "builtin/person_count",
+                compiledFilter,
+                granularity,
+                timeRange,
+                organizationId,
+              ),
+            ]);
+            return revenue.map((point, index) => ({
+              timestamp: point.timestamp,
+              value: persons[index]?.value ? point.value / persons[index].value : 0,
+            }));
+          }
+          case "builtin/arppu": {
+            const [revenue, payingPersons] = yield* Effect.all([
+              getSeries("builtin/revenue", compiledFilter, granularity, timeRange, organizationId),
+              accessor.getPayingPersonCount({ filters: compiledFilter, organizationId, params }),
+            ]);
+            return revenue.map((point, index) => ({
+              timestamp: point.timestamp,
+              value: payingPersons[index]?.value ? point.value / payingPersons[index].value : 0,
+            }));
+          }
+          case "builtin/active_subscribers_growth": {
+            const activeSubscriptions = yield* getSeries(
+              "builtin/active_subscriptions",
+              compiledFilter,
+              granularity,
+              timeRange,
+              organizationId,
+            );
+            return activeSubscriptions.map((point, index) => ({
+              timestamp: point.timestamp,
+              value: calculateGrowthRate(point.value, activeSubscriptions[index - 1]?.value ?? 0),
+            }));
+          }
+          case "builtin/subscriber_lifetime_value": {
+            const [arpu, churnRate] = yield* Effect.all([
+              getSeries("builtin/arpu", compiledFilter, granularity, timeRange, organizationId),
+              getSeries(
+                "builtin/churn_rate",
+                compiledFilter,
+                granularity,
+                timeRange,
+                organizationId,
+              ),
+            ]);
+            return arpu.map((point, index) => {
+              const churnPercentage = churnRate[index]?.value ?? 0;
+              return {
+                timestamp: point.timestamp,
+                value: churnPercentage > 0 ? point.value / (churnPercentage / 100) : 0,
+              };
+            });
+          }
+          case "builtin/trial_conversion_rate": {
+            const [trials, conversions] = yield* Effect.all([
+              getSeries("builtin/trials", compiledFilter, granularity, timeRange, organizationId),
+              getSeries(
+                "builtin/trial_conversions",
+                compiledFilter,
+                granularity,
+                timeRange,
+                organizationId,
+              ),
+            ]);
+            return trials.map((point, index) => ({
+              timestamp: point.timestamp,
+              value: calculateRate(conversions[index]?.value ?? 0, point.value),
+            }));
+          }
+          default:
+            return yield* executePrimitiveMetric({
+              accessor,
+              compiledFilter,
+              insightId,
+              organizationId,
+              params,
+            });
+        }
+      });
+
+      cache.set(cacheKey, series);
+      return series;
+    });
+
+  return { getSeries };
+};
diff --git a/packages/core/src/services/analyticsIngest/AnalyticsDispatchService.ts b/packages/core/src/services/analyticsIngest/AnalyticsDispatchService.ts
new file mode 100644
index 000000000..2733a3b27
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/AnalyticsDispatchService.ts
@@ -0,0 +1,103 @@
+/**
+ * `AnalyticsDispatchService` is the single seam both transports use to enqueue
+ * onto the shared analytics-ingest queue — a thin layer over the one
+ * {@link CaptureIngress} producer.
+ *
+ *  - `dispatchCaptured` — the SDK path. Stamps each accepted envelope with an
+ *    `Anonymous` / `Stitch` identity claim + `trustClass: "untrusted-sdk"`.
+ *  - `dispatchTrusted` — the server-trusted revenue path. Maps each
+ *    {@link InternalAnalyticsEvent} into a {@link CapturedEventV1} carrying a
+ *    `Resolved` claim + `trustClass: "trusted-revenue"` + the trusted topic.
+ *
+ * Tests / non-worker hosts get {@link AnalyticsDispatchService.noop}.
+ */
+import { Context, Effect, Layer } from "effect";
+import type { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+import {
+  type CapturedEventV1Type,
+  type CapturedIdentityClaim,
+  extractInnerProperties,
+  makeCapturedEventFromInternalAnalyticsEvent,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+import type { InternalAnalyticsEvent } from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import {
+  CaptureIngress,
+  type CaptureIngressError,
+  type PublishableCaptureEvent,
+} from "./CaptureIngress.ts";
+
+export interface AnalyticsDispatchServiceShape {
+  // `PlatformRuntime` marks the underlying queue send as runtime-only. `Db`
+  // (the ingest-DLQ write) is captured at the `CaptureIngress` layer's build,
+  // not per call, so it is not a method requirement — see `CaptureIngress`.
+  readonly dispatchCaptured: (
+    events: ReadonlyArray<PublishableCaptureEvent>,
+  ) => Effect.Effect<void, CaptureIngressError, PlatformRuntime>;
+  readonly dispatchTrusted: (
+    events: ReadonlyArray<InternalAnalyticsEvent>,
+  ) => Effect.Effect<void, CaptureIngressError, PlatformRuntime>;
+}
+
+/**
+ * Stamps the SDK identity claim + trust class onto an accepted capture
+ * envelope. `$identify` events with a `$previous_distinct_id` become a
+ * `Stitch`; everything else is `Anonymous`. Server-side stamping keeps the
+ * trust marker out of request-controlled input.
+ */
+export const stampSdkIdentityClaim = (envelope: CapturedEventV1Type): CapturedEventV1Type => {
+  const inner = extractInnerProperties(envelope.properties);
+  const previousDistinctId =
+    typeof inner.$previous_distinct_id === "string" && inner.$previous_distinct_id.length > 0
+      ? inner.$previous_distinct_id
+      : undefined;
+  const identityClaim: CapturedIdentityClaim =
+    envelope.event === "$identify" && previousDistinctId !== undefined
+      ? { _tag: "Stitch", distinctId: envelope.distinctId, previousDistinctId }
+      : { _tag: "Anonymous", distinctId: envelope.distinctId };
+  return { ...envelope, identityClaim, trustClass: "untrusted-sdk" };
+};
+
+export class AnalyticsDispatchService extends Context.Service<
+  AnalyticsDispatchService,
+  AnalyticsDispatchServiceShape
+>()("@voidhash/core/AnalyticsDispatchService", {
+  make: Effect.gen(function* () {
+    const ingress = yield* CaptureIngress;
+
+    const dispatchCaptured = (events: ReadonlyArray<PublishableCaptureEvent>) =>
+      events.length === 0
+        ? Effect.void
+        : ingress.enqueueBatch(
+            events.map((event) => ({
+              envelope: stampSdkIdentityClaim(event.envelope),
+              routeClass: event.routeClass,
+            })),
+          );
+
+    const dispatchTrusted = (events: ReadonlyArray<InternalAnalyticsEvent>) =>
+      events.length === 0
+        ? Effect.void
+        : ingress.enqueueBatch(
+            events.map((event) => ({
+              envelope: makeCapturedEventFromInternalAnalyticsEvent(event),
+              // Revenue is server-trusted and always lands on the main lane; the
+              // route never depends on quota (revenue never enters capture).
+              routeClass: "main" as const,
+            })),
+          );
+
+    return { dispatchCaptured, dispatchTrusted } satisfies AnalyticsDispatchServiceShape;
+  }),
+}) {
+  static readonly layer = Layer.effect(AnalyticsDispatchService)(AnalyticsDispatchService.make);
+
+  /** No-op dispatch for tests and non-worker hosts (mirrors {@link CaptureIngress.noop}). */
+  static readonly noop: Layer.Layer<AnalyticsDispatchService> = Layer.succeed(
+    AnalyticsDispatchService,
+    {
+      dispatchCaptured: () => Effect.void,
+      dispatchTrusted: () => Effect.void,
+    },
+  );
+}
diff --git a/packages/core/src/services/analyticsIngest/AnalyticsIngestDlqService.ts b/packages/core/src/services/analyticsIngest/AnalyticsIngestDlqService.ts
new file mode 100644
index 000000000..4ba2f10e7
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/AnalyticsIngestDlqService.ts
@@ -0,0 +1,148 @@
+import {
+  analyticsIngestDlq,
+  AnalyticsIngestDlqReplayStatus,
+  Db,
+  desc,
+  eq,
+  sql,
+} from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import type { RouteClass } from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { CaptureIngress } from "./CaptureIngress.ts";
+
+export class AnalyticsIngestDlqServiceError extends Schema.TaggedErrorClass<AnalyticsIngestDlqServiceError>(
+  "AnalyticsIngestDlqServiceError",
+)("AnalyticsIngestDlqServiceError", { cause: Schema.String }) {}
+
+export interface AnalyticsIngestDlqRecordFailureInput {
+  readonly attemptCount: number;
+  readonly captureId?: string;
+  readonly distinctId?: string;
+  readonly failureClass: string;
+  readonly failureMessage: string;
+  readonly payloadJson: unknown;
+  readonly projectId: string;
+  readonly routeClass: RouteClass;
+  readonly sourceSequence: number;
+  readonly sourceShard: string;
+}
+
+export interface AnalyticsIngestDlqListInput {
+  readonly failureClass?: string;
+  readonly limit?: number;
+  readonly projectId?: string;
+}
+
+export class AnalyticsIngestDlqService extends Context.Service<AnalyticsIngestDlqService>()(
+  "AnalyticsIngestDlqService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const recordFailure = Effect.fn("analyticsIngestDlq.recordFailure")(function* (
+        input: AnalyticsIngestDlqRecordFailureInput,
+      ) {
+        const id = generateId("analyticsIngestDlq");
+        yield* Effect.annotateCurrentSpan("voidhash.dlq.id", id);
+        yield* Effect.annotateCurrentSpan("voidhash.dlq.failure_class", input.failureClass);
+        yield* Effect.annotateCurrentSpan("voidhash.capture.route_class", input.routeClass);
+        if (input.projectId)
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        if (input.captureId)
+          yield* Effect.annotateCurrentSpan("voidhash.capture.id", input.captureId);
+        if (input.distinctId)
+          yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+        yield* db
+          .insert(analyticsIngestDlq)
+          .values({
+            attemptCount: input.attemptCount,
+            captureId: input.captureId,
+            distinctId: input.distinctId,
+            failureClass: input.failureClass,
+            failureMessage: input.failureMessage,
+            id,
+            payloadJson: input.payloadJson,
+            projectId: input.projectId,
+            routeClass: input.routeClass,
+            sourceSequence: input.sourceSequence,
+            sourceShard: input.sourceShard,
+          })
+          .onConflictDoUpdate({
+            target: analyticsIngestDlq.captureId,
+            set: {
+              attemptCount: input.attemptCount,
+              failureClass: input.failureClass,
+              failureMessage: input.failureMessage,
+              payloadJson: input.payloadJson,
+              replayStatus: AnalyticsIngestDlqReplayStatus.Pending,
+              updatedAt: sql`CURRENT_TIMESTAMP`,
+            },
+          });
+        return id;
+      });
+
+      const listFailures = Effect.fn("analyticsIngestDlq.listFailures")(function* (
+        input: AnalyticsIngestDlqListInput = {},
+      ) {
+        const limit = Math.max(1, Math.min(input.limit ?? 100, 500));
+        if (input.projectId)
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        if (input.failureClass)
+          yield* Effect.annotateCurrentSpan("voidhash.dlq.failure_class", input.failureClass);
+        return yield* db
+          .select()
+          .from(analyticsIngestDlq)
+          .where(
+            input.projectId && input.failureClass
+              ? sql`${analyticsIngestDlq.projectId} = ${input.projectId} AND ${analyticsIngestDlq.failureClass} = ${input.failureClass}`
+              : input.projectId
+                ? eq(analyticsIngestDlq.projectId, input.projectId)
+                : input.failureClass
+                  ? eq(analyticsIngestDlq.failureClass, input.failureClass)
+                  : undefined,
+          )
+          .orderBy(desc(analyticsIngestDlq.createdAt))
+          .limit(limit);
+      });
+
+      const markReplayed = Effect.fn("analyticsIngestDlq.markReplayed")(function* (id: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.dlq.id", id);
+        yield* db
+          .update(analyticsIngestDlq)
+          .set({
+            replayedAt: sql`CURRENT_TIMESTAMP`,
+            replayStatus: AnalyticsIngestDlqReplayStatus.Requeued,
+          })
+          .where(eq(analyticsIngestDlq.id, id));
+      });
+
+      const requeueFailure = Effect.fn("analyticsIngestDlq.requeueFailure")(function* (id: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.dlq.id", id);
+        const ingress = yield* CaptureIngress;
+        const row = yield* db.query.analyticsIngestDlq.findFirst({
+          where: { id },
+        });
+        if (!row) {
+          return yield* Effect.fail(
+            new AnalyticsIngestDlqServiceError({ cause: `DLQ row ${id} not found` }),
+          );
+        }
+        if (row.projectId) yield* Effect.annotateCurrentSpan("voidhash.project.id", row.projectId);
+        if (row.routeClass)
+          yield* Effect.annotateCurrentSpan("voidhash.capture.route_class", row.routeClass);
+        yield* ingress.enqueueBatch([
+          {
+            envelope: row.payloadJson as never,
+            routeClass: row.routeClass as RouteClass,
+          },
+        ]);
+        yield* markReplayed(id);
+      });
+
+      return { listFailures, markReplayed, recordFailure, requeueFailure } as const;
+    }),
+  },
+) {
+  static readonly layer = Layer.effect(AnalyticsIngestDlqService)(AnalyticsIngestDlqService.make);
+}
diff --git a/packages/core/src/services/analyticsIngest/AnalyticsJanitorService.ts b/packages/core/src/services/analyticsIngest/AnalyticsJanitorService.ts
new file mode 100644
index 000000000..6b6a2f398
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/AnalyticsJanitorService.ts
@@ -0,0 +1,382 @@
+/**
+ * `AnalyticsJanitorService` reconciles pending identity merges in ClickHouse.
+ * One operation: `squash` selects a backlog of pending overrides older than the
+ * safety window, materialises a per-run shared staging table + a Dictionary over
+ * it, bulk `ALTER TABLE UPDATE`s the events table to assign the merged person
+ * ids, deletes the squashed backlog rows, then drops the staging resources.
+ *
+ * Transitive convergence: this squash takes the LATEST override version per
+ * `(project_id, source_distinct_id)` and applies it directly — no person-merge
+ * chain-following. That is correct because the identity merge keeps overrides
+ * canonical: when a person becomes non-canonical (an older person joins its
+ * component), the merge repoints that person's ENTIRE distinct-id cluster onto
+ * the new survivor (`PersonIdentityService.identifyDistinctId` →
+ * `IdentityMutationService.listMappedDistinctIds`), so the newest override for
+ * every distinct id already names the current canonical person. A transitive
+ * chain A→B→C therefore collapses in a single pass.
+ *
+ * ClickHouse Cloud constraint (why a staging MergeTree + Dictionary): on Cloud
+ * (`SharedMergeTree`) an `ALTER TABLE … UPDATE/DELETE` mutation runs
+ * ASYNCHRONOUSLY on other replicas, which cannot see session/node-local
+ * `ENGINE = Memory` / `ENGINE = Join` tables. So the per-run snapshot is a
+ * regular `MergeTree` (transparently `SharedMergeTree`, visible cluster-wide),
+ * and the per-row person-id lookup uses a `Dictionary` + `dictGet` rather than a
+ * node-local Join + `joinGet`. `dictGet` is non-deterministic, so the UPDATE
+ * needs `allow_nondeterministic_mutations`, passed as a session
+ * `clickhouse_setting` (Cloud ignores it in a SQL `SETTINGS` clause).
+ */
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  type BacklogRow,
+  computeCutoffIso,
+  makeSnapshotResources,
+  type SnapshotResources,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+
+// Unqualified table names — the runtime Clickhouse client connects with the
+// per-stage database (provisioned by `Clickhouse.Database`) as its default.
+const CLICKHOUSE_EVENTS_FULL_TABLE = "events_v2" as const;
+const CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_FULL_TABLE =
+  "person_identity_pending_overrides_v2" as const;
+
+export class AnalyticsJanitorServiceError extends Schema.TaggedErrorClass<AnalyticsJanitorServiceError>(
+  "AnalyticsJanitorServiceError",
+)("AnalyticsJanitorServiceError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface SquashInput {
+  readonly batchSize: number;
+  readonly safetyWindowSeconds: number;
+}
+
+export interface SquashResult {
+  readonly backlogRowsProcessed: number;
+  readonly cutoffIso: string;
+  readonly durationMs: number;
+}
+
+export class AnalyticsJanitorService extends Context.Service<AnalyticsJanitorService>()(
+  "AnalyticsJanitorService",
+  {
+    make: Effect.gen(function* () {
+      const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+
+      const selectBacklog = ({
+        batchSize,
+        cutoffIso,
+      }: {
+        readonly batchSize: number;
+        readonly cutoffIso: string;
+      }) =>
+        ch<BacklogRow>`SELECT
+             project_id,
+             source_distinct_id,
+             target_distinct_id,
+             person_id,
+             version,
+             changed_at
+           FROM (
+             SELECT
+               project_id,
+               source_distinct_id,
+               target_distinct_id,
+               person_id,
+               is_deleted,
+               version,
+               changed_at
+             FROM ${ch.literal(CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_FULL_TABLE)}
+             WHERE version > 0
+             ORDER BY
+               project_id ASC,
+               source_distinct_id ASC,
+               version DESC,
+               changed_at DESC
+             LIMIT 1 BY project_id, source_distinct_id
+           )
+           WHERE
+             is_deleted = 0
+             AND changed_at < parseDateTime64BestEffort(${ch.param("String", cutoffIso)})
+           ORDER BY changed_at ASC, project_id ASC, source_distinct_id ASC
+           LIMIT ${ch.param("UInt32", Math.max(0, Math.floor(batchSize)))}`;
+
+      // Qualifies the per-run Dictionary (so an async mutation on another replica
+      // resolves it unambiguously) and points its `CLICKHOUSE` source at the
+      // staging table. The client's default is the per-stage analytics database.
+      const currentDatabaseName = ch<{ readonly db: string }>`SELECT currentDatabase() AS db`.pipe(
+        Effect.map((rows) => rows[0]?.db ?? ""),
+      );
+
+      // Per-run staging table — a regular `MergeTree` (transparently
+      // `SharedMergeTree` on Cloud) so it is visible cluster-wide to the async
+      // mutations below, unlike a node-local `ENGINE = Memory` table.
+      const createPendingOverrideSnapshot = (resources: SnapshotResources) =>
+        ch.asCommand(ch`CREATE TABLE IF NOT EXISTS ${ch.literal(resources.pendingOverrideSnapshotName)}
+          (
+            project_id String,
+            source_distinct_id String,
+            target_distinct_id String,
+            person_id String,
+            version UInt64,
+            changed_at DateTime64(3)
+          )
+          ENGINE = MergeTree
+          ORDER BY (project_id, source_distinct_id)`);
+
+      const insertPendingOverrideSnapshotRows = ({
+        resources,
+        rows,
+      }: {
+        readonly resources: SnapshotResources;
+        readonly rows: ReadonlyArray<BacklogRow>;
+      }) =>
+        rows.length === 0
+          ? Effect.void
+          : ch
+              .insertQuery({
+                table: resources.pendingOverrideSnapshotName,
+                values: rows,
+              })
+              .pipe(Effect.asVoid);
+
+      // Escape a value for a single-quoted ClickHouse SQL string literal — the
+      // dictionary-source credentials live inside the `SOURCE(...)` clause and
+      // cannot be bound as query parameters.
+      const escapeChStringLiteral = (value: string): string =>
+        value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
+
+      // Per-run Dictionary over the staging table, keyed by
+      // (project_id, source_distinct_id) → (person_id, version) — the ONLY per-run
+      // object the mutations reference, since a Dictionary is cluster-wide and
+      // resolves under an async mutation on any replica. Its `SOURCE` connects
+      // back as the bound (non-`default`) user, required to authenticate the
+      // `CLICKHOUSE` source on Cloud. `version` is carried so the backlog delete
+      // can scope by it.
+      const createPendingOverrideDictionary = ({
+        databaseName,
+        resources,
+      }: {
+        readonly databaseName: string;
+        readonly resources: SnapshotResources;
+      }) => {
+        const dictionaryName = `${databaseName}.${resources.pendingOverrideDictionaryName}`;
+        const keyColumns = [
+          { name: "project_id", type: "String" },
+          { name: "source_distinct_id", type: "String" },
+        ];
+        const attributeColumns = [
+          { name: "person_id", type: "String" },
+          { name: "version", type: "UInt64" },
+        ];
+        const columns = [...keyColumns, ...attributeColumns]
+          .map((column) => `${column.name} ${column.type}`)
+          .join(", ");
+        const primaryKey = keyColumns.map((column) => column.name).join(", ");
+        const cfg = ch.config;
+        return ch.asCommand(
+          ch`${ch.literal(`CREATE DICTIONARY IF NOT EXISTS ${dictionaryName} (${columns})
+          PRIMARY KEY ${primaryKey}
+          SOURCE(CLICKHOUSE(
+            USER '${escapeChStringLiteral(cfg.username ?? "")}'
+            PASSWORD '${escapeChStringLiteral(cfg.password ?? "")}'
+            DB '${escapeChStringLiteral(databaseName)}'
+            TABLE '${escapeChStringLiteral(resources.pendingOverrideSnapshotName)}'
+          ))
+          LAYOUT(COMPLEX_KEY_HASHED())
+          LIFETIME(MIN 0 MAX 0)`)}`,
+        );
+      };
+
+      // Passed as session `clickhouse_settings`, not a SQL `SETTINGS` clause:
+      // `dictGet`/`dictHas` are non-deterministic (so the mutation needs
+      // `allow_nondeterministic_mutations`), and Cloud only honours it there.
+      const mutationSettings = {
+        mutations_sync: "1",
+        allow_nondeterministic_mutations: 1,
+      } as const;
+
+      // Resolve merged person ids purely through the Dictionary (`dictHas` gates
+      // rows, `dictGet` supplies the id) so the async mutation never depends on
+      // resolving the per-run staging table on its replica.
+      const updatePersonIdsFromSnapshot = ({
+        databaseName,
+        resources,
+      }: {
+        readonly databaseName: string;
+        readonly resources: SnapshotResources;
+      }) => {
+        const dictionary = `${databaseName}.${resources.pendingOverrideDictionaryName}`;
+        const lookup = `dictGet('${dictionary}', 'person_id', (project_id, distinct_id))`;
+        return ch.asCommand(
+          ch.withClickhouseSettings(
+            ch`${ch.literal(`ALTER TABLE ${CLICKHOUSE_EVENTS_FULL_TABLE}
+          UPDATE person_id = ${lookup}
+          WHERE dictHas('${dictionary}', (project_id, distinct_id))
+          AND (
+            person_id IS NULL
+            OR person_id != ${lookup}
+          )`)}`,
+            mutationSettings,
+          ),
+        );
+      };
+
+      // Delete every pending-override version at-or-below the squashed version
+      // (the Dictionary's `version` attribute) for each key it covers.
+      const deleteSquashedBacklog = ({
+        databaseName,
+        resources,
+      }: {
+        readonly databaseName: string;
+        readonly resources: SnapshotResources;
+      }) => {
+        const dictionary = `${databaseName}.${resources.pendingOverrideDictionaryName}`;
+        return ch.asCommand(
+          ch.withClickhouseSettings(
+            ch`${ch.literal(`ALTER TABLE ${CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_FULL_TABLE}
+          DELETE WHERE dictHas('${dictionary}', (project_id, source_distinct_id))
+            AND version <= dictGetUInt64('${dictionary}', 'version', (project_id, source_distinct_id))`)}`,
+            mutationSettings,
+          ),
+        );
+      };
+
+      const cleanupSnapshotResources = ({
+        databaseName,
+        resources,
+      }: {
+        readonly databaseName: string;
+        readonly resources: SnapshotResources;
+      }) =>
+        Effect.gen(function* () {
+          yield* ch
+            .asCommand(
+              ch`DROP DICTIONARY IF EXISTS ${ch.literal(`${databaseName}.${resources.pendingOverrideDictionaryName}`)}`,
+            )
+            .pipe(
+              Effect.catchCause((cause) =>
+                Effect.logError("failed to drop pending override dictionary", {
+                  cause,
+                  dictionary: resources.pendingOverrideDictionaryName,
+                }),
+              ),
+            );
+          yield* ch
+            .asCommand(
+              ch`DROP TABLE IF EXISTS ${ch.literal(resources.pendingOverrideSnapshotName)}`,
+            )
+            .pipe(
+              Effect.catchCause((cause) =>
+                Effect.logError("failed to drop pending override snapshot", {
+                  cause,
+                  table: resources.pendingOverrideSnapshotName,
+                }),
+              ),
+            );
+        });
+
+      const squash = Effect.fn("squash")(
+        function* (input: SquashInput) {
+          const startedAt = Date.now();
+          const cutoffIso = computeCutoffIso({
+            now: new Date(),
+            safetyWindowSeconds: input.safetyWindowSeconds,
+          });
+
+          yield* Effect.annotateCurrentSpan("voidhash.janitor.batch_size", input.batchSize);
+          yield* Effect.annotateCurrentSpan("voidhash.janitor.cutoff_iso", cutoffIso);
+
+          const backlogRows = yield* selectBacklog({
+            batchSize: input.batchSize,
+            cutoffIso,
+          }).pipe(Effect.withSpan("analytics-janitor.select-backlog"));
+
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.janitor.backlog_rows_processed",
+            backlogRows.length,
+          );
+
+          if (backlogRows.length === 0) {
+            yield* Effect.logInfo("analytics janitor found no eligible backlog rows", {
+              batchSize: input.batchSize,
+              cutoffIso,
+              durationMs: Date.now() - startedAt,
+            });
+            return {
+              backlogRowsProcessed: 0,
+              cutoffIso,
+              durationMs: Date.now() - startedAt,
+            } satisfies SquashResult;
+          }
+
+          const databaseName = yield* currentDatabaseName;
+          const snapshotResources = makeSnapshotResources();
+
+          yield* Effect.logInfo("analytics janitor selected backlog rows", {
+            count: backlogRows.length,
+            pendingOverrideDictionary: snapshotResources.pendingOverrideDictionaryName,
+            pendingOverrideSnapshot: snapshotResources.pendingOverrideSnapshotName,
+            cutoffIso,
+          });
+
+          yield* Effect.gen(function* () {
+            yield* createPendingOverrideSnapshot(snapshotResources).pipe(
+              Effect.withSpan("analytics-janitor.create-pending-override-snapshot"),
+            );
+            yield* insertPendingOverrideSnapshotRows({
+              resources: snapshotResources,
+              rows: backlogRows,
+            }).pipe(Effect.withSpan("analytics-janitor.insert-pending-override-snapshot-rows"));
+            yield* createPendingOverrideDictionary({
+              databaseName,
+              resources: snapshotResources,
+            }).pipe(Effect.withSpan("analytics-janitor.create-pending-override-dictionary"));
+            yield* updatePersonIdsFromSnapshot({
+              databaseName,
+              resources: snapshotResources,
+            }).pipe(Effect.withSpan("analytics-janitor.update-person-ids"));
+            yield* deleteSquashedBacklog({
+              databaseName,
+              resources: snapshotResources,
+            }).pipe(Effect.withSpan("analytics-janitor.delete-backlog"));
+          }).pipe(
+            Effect.ensuring(
+              cleanupSnapshotResources({ databaseName, resources: snapshotResources }),
+            ),
+          );
+
+          const durationMs = Date.now() - startedAt;
+          yield* Effect.logInfo("analytics janitor completed squash run", {
+            count: backlogRows.length,
+            durationMs,
+          });
+
+          return {
+            backlogRowsProcessed: backlogRows.length,
+            cutoffIso,
+            durationMs,
+          } satisfies SquashResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsJanitorServiceError({
+                    cause: error.message,
+                    message: "analytics janitor squash failed",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      return { squash } as const;
+    }),
+  },
+) {
+  static readonly layer = Layer.effect(AnalyticsJanitorService)(AnalyticsJanitorService.make);
+}
diff --git a/packages/core/src/services/analyticsIngest/AnalyticsWriterService.ts b/packages/core/src/services/analyticsIngest/AnalyticsWriterService.ts
new file mode 100644
index 000000000..84219e1d9
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/AnalyticsWriterService.ts
@@ -0,0 +1,279 @@
+/**
+ * `AnalyticsWriterService` consumes the three downstream wire events the
+ * processor emits and fans them out into five ClickHouse tables in parallel:
+ * `events_v2` (processed events), `persons_v1` (person profiles),
+ * `person_identity_v1` (identity mappings), `person_identity_overrides_v1`
+ * (override snapshots), and `person_identity_pending_overrides_v2` (merge queue).
+ *
+ * It yields {@link ClickhouseWebClient} directly (the Workers-safe driver) and
+ * uses Postgres only to resolve organization ids for person/identity rows. A
+ * runtime without ClickHouse acknowledges messages with zero inserted rows.
+ */
+import { Db } from "@voidhash/db";
+import { Context, Effect, Layer, Option, Schema } from "effect";
+
+import {
+  type AnalyticsWriterMessageType,
+  buildAnalyticsWriterPlan,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+import {
+  isReservedRevenueEventName,
+  REVENUE_TRUSTED_SOURCE_TOPIC,
+} from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+
+// Unqualified table names — the runtime Clickhouse client connects with the
+// per-stage database (provisioned by `Clickhouse.Database`) as its default,
+// so these resolve correctly without a hardcoded database prefix.
+const CLICKHOUSE_EVENTS_FULL_TABLE = "events_v2" as const;
+const CLICKHOUSE_PERSONS_FULL_TABLE = "persons_v1" as const;
+const CLICKHOUSE_PERSON_IDENTITY_FULL_TABLE = "person_identity_v1" as const;
+const CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_FULL_TABLE = "person_identity_overrides_v1" as const;
+const CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_FULL_TABLE =
+  "person_identity_pending_overrides_v2" as const;
+
+export class AnalyticsWriterServiceError extends Schema.TaggedErrorClass<AnalyticsWriterServiceError>(
+  "AnalyticsWriterServiceError",
+)("AnalyticsWriterServiceError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface WriteAnalyticsResult {
+  readonly insertedRowCount: number;
+  readonly messageCount: number;
+}
+
+interface FetchExistingEventKeyRow {
+  project_id: string;
+  event_id: string;
+}
+
+// Event dedup is scoped PER PROJECT and UNBOUNDED IN TIME: event_id derives from
+// a stable id (the SDK client uuid, or the deterministic revenue id), so two
+// tenants could send the same string. Keying on (project_id, event_id) stops one
+// tenant's id from masking another's; length-prefixing the server-issued
+// project_id keeps the key injective even if an event_id contains a separator.
+// This is the SOLE dedup authority — `fetchExistingEventKeys` checks the whole
+// batch against ClickHouse with no time bound, so a re-dispatched revenue event
+// collapses no matter how late it arrives.
+const eventDedupKey = (projectId: string, eventId: string): string =>
+  `${projectId.length}:${projectId}${eventId}`;
+
+/** True for a trusted-revenue processed-event row (carries a deterministic `event_id`). */
+export const isRevenueAnalyticsWriterRow = (row: Readonly<Record<string, unknown>>): boolean =>
+  row.source_topic === REVENUE_TRUSTED_SOURCE_TOPIC &&
+  typeof row.event_name === "string" &&
+  isReservedRevenueEventName(row.event_name);
+
+interface RevenueBatchDedupeResult {
+  readonly rows: ReadonlyArray<Record<string, unknown>>;
+  readonly skippedCount: number;
+}
+
+/**
+ * Collapse trusted-revenue rows that appear twice in the SAME write batch (first
+ * seen wins, keyed on the deterministic `event_id`). Cross-batch and
+ * already-stored duplicates are caught by the unbounded `fetchExistingEventKeys`
+ * check; non-revenue rows pass through untouched.
+ */
+export const dedupeRevenueRowsWithinBatch = (
+  rows: ReadonlyArray<Record<string, unknown>>,
+): RevenueBatchDedupeResult => {
+  const seen = new Set<string>();
+  const deduped: Array<Record<string, unknown>> = [];
+  let skippedCount = 0;
+
+  for (const row of rows) {
+    const eventId = typeof row.event_id === "string" ? row.event_id : undefined;
+    if (!isRevenueAnalyticsWriterRow(row) || eventId === undefined) {
+      deduped.push(row);
+      continue;
+    }
+    if (seen.has(eventId)) {
+      skippedCount++;
+      continue;
+    }
+    seen.add(eventId);
+    deduped.push(row);
+  }
+
+  return { rows: skippedCount === 0 ? rows : deduped, skippedCount };
+};
+
+export class AnalyticsWriterService extends Context.Service<AnalyticsWriterService>()(
+  "AnalyticsWriterService",
+  {
+    make: Effect.gen(function* () {
+      const ch = Option.getOrUndefined(
+        yield* Effect.serviceOption(ClickhouseWebClient.ClickhouseWebClient),
+      );
+      const db = yield* Db;
+
+      // ClickHouse Cloud prefers large, infrequent inserts; the ingest consumer
+      // already folds a whole queue delivery into one `writeMessages` call, and
+      // `async_insert` lets the server coalesce parts server-side — the defence
+      // against the "too many parts" failure mode of small frequent inserts.
+      // `wait_for_async_insert: 1` keeps the write durable and backpressured:
+      // the insert resolves only once the server buffer has been flushed.
+      const insertRows = (table: string, rows: ReadonlyArray<Record<string, unknown>>) =>
+        rows.length === 0 || ch === undefined
+          ? Effect.void
+          : ch
+              .withClickhouseSettings(ch.insertQuery({ table, values: rows }), {
+                async_insert: 1,
+                wait_for_async_insert: 1,
+              })
+              .pipe(Effect.asVoid);
+
+      const fetchExistingEventKeys = (
+        projectIds: ReadonlyArray<string>,
+        ids: ReadonlyArray<string>,
+      ) => {
+        if (ids.length === 0 || ch === undefined) return Effect.succeed(new Set<string>());
+        return ch<FetchExistingEventKeyRow>`SELECT project_id, event_id FROM ${ch.literal(CLICKHOUSE_EVENTS_FULL_TABLE)}
+             WHERE project_id IN ${ch.param("Array(String)", projectIds)}
+               AND event_id IN ${ch.param("Array(String)", ids)}`.pipe(
+          Effect.map(
+            (rows) => new Set(rows.map((row) => eventDedupKey(row.project_id, row.event_id))),
+          ),
+        );
+      };
+
+      const writeMessages = Effect.fn("writeMessages")(
+        function* (messages: ReadonlyArray<AnalyticsWriterMessageType>) {
+          yield* Effect.annotateCurrentSpan("voidhash.writer.message_count", messages.length);
+          if (ch === undefined) {
+            return { insertedRowCount: 0, messageCount: messages.length };
+          }
+          let dedupSkippedTotal = 0;
+
+          // Person / identity messages carry only `project_id`; resolve each to its
+          // `organization_id` (one MySQL lookup per batch over the distinct projects)
+          // so the written rows match the readonly user's tenant row policies.
+          // Processed events already carry their organization id.
+          const organizationProjectIds = [
+            ...new Set(
+              messages
+                .filter((m) => m.kind === "person" || m.kind === "person-distinct-id")
+                .map((m) => m.value.projectId),
+            ),
+          ];
+          let organizationByProject = new Map<string, string>();
+          if (organizationProjectIds.length > 0) {
+            const organizationRows = yield* db.query.projects.findMany({
+              columns: { id: true, organizationId: true },
+              where: { id: { in: organizationProjectIds } },
+            });
+            organizationByProject = new Map(
+              organizationRows.map((row) => [row.id, row.organizationId]),
+            );
+          }
+          const plan = buildAnalyticsWriterPlan(
+            messages,
+            (projectId) => organizationByProject.get(projectId) ?? "",
+          );
+          const batchDedupe = dedupeRevenueRowsWithinBatch(plan.processedEventRows);
+          let processedEventRows = batchDedupe.rows;
+
+          const eventIds = [...new Set(processedEventRows.map((row) => String(row.event_id)))];
+          const eventProjectIds = [
+            ...new Set(processedEventRows.map((row) => String(row.project_id))),
+          ];
+          const existingEventKeys = yield* fetchExistingEventKeys(eventProjectIds, eventIds);
+          if (existingEventKeys.size > 0) {
+            const beforeCount = processedEventRows.length;
+            processedEventRows = processedEventRows.filter(
+              (row) =>
+                !existingEventKeys.has(eventDedupKey(String(row.project_id), String(row.event_id))),
+            );
+            dedupSkippedTotal += beforeCount - processedEventRows.length;
+            yield* Effect.logInfo("skipped duplicate analytics events", {
+              eventDedupReason: "clickhouse_existing",
+              eventDedupSkippedCount: beforeCount - processedEventRows.length,
+              eventIdsInBatch: eventIds.length,
+            });
+          }
+
+          if (batchDedupe.skippedCount > 0) {
+            dedupSkippedTotal += batchDedupe.skippedCount;
+            yield* Effect.logInfo("skipped duplicate revenue analytics events", {
+              revenueDedupReason: "incoming_batch",
+              revenueDedupSkippedCount: batchDedupe.skippedCount,
+            });
+          }
+
+          yield* Effect.all(
+            [
+              insertRows(CLICKHOUSE_EVENTS_FULL_TABLE, processedEventRows),
+              insertRows(CLICKHOUSE_PERSONS_FULL_TABLE, plan.personRows),
+              insertRows(CLICKHOUSE_PERSON_IDENTITY_FULL_TABLE, plan.personIdentityRows),
+              insertRows(
+                CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_FULL_TABLE,
+                plan.personIdentityOverrideRows,
+              ),
+              insertRows(
+                CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_FULL_TABLE,
+                plan.personIdentityPendingOverrideRows,
+              ),
+            ],
+            { concurrency: "unbounded" },
+          );
+
+          const insertedRowCount =
+            processedEventRows.length +
+            plan.personRows.length +
+            plan.personIdentityRows.length +
+            plan.personIdentityOverrideRows.length +
+            plan.personIdentityPendingOverrideRows.length;
+
+          yield* Effect.annotateCurrentSpan("voidhash.writer.inserted_row_count", insertedRowCount);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.writer.dedup_skipped_count",
+            dedupSkippedTotal,
+          );
+
+          return {
+            insertedRowCount,
+            messageCount: messages.length,
+          } satisfies WriteAnalyticsResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsWriterServiceError({
+                    cause: error.message,
+                    message: "failed to insert analytics messages",
+                  }),
+                ),
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsWriterServiceError({
+                    cause: String(error.cause ?? error.message),
+                    message: "failed to resolve organization ids for analytics messages",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      return { writeMessages } as const;
+    }),
+  },
+) {
+  static readonly layer: Layer.Layer<AnalyticsWriterService, never, Db> = Layer.effect(
+    AnalyticsWriterService,
+  )(AnalyticsWriterService.make);
+
+  /** Builds the writer with an explicit read-write client instead of ambient analytics access. */
+  static readonly layerWithClickhouse = (
+    client: ClickhouseWebClient.ClickhouseWebClient,
+  ): Layer.Layer<AnalyticsWriterService, never, Db> =>
+    Layer.effect(AnalyticsWriterService)(
+      AnalyticsWriterService.make.pipe(
+        Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, client),
+      ),
+    );
+}
diff --git a/packages/core/src/services/analyticsIngest/CaptureIngress.ts b/packages/core/src/services/analyticsIngest/CaptureIngress.ts
new file mode 100644
index 000000000..2e439f010
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/CaptureIngress.ts
@@ -0,0 +1,43 @@
+import { Context, Effect, Layer, Schema } from "effect";
+import type { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+import type {
+  CapturedEventV1Type,
+  RouteClass,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+
+export class CaptureIngressError extends Schema.TaggedErrorClass<CaptureIngressError>(
+  "CaptureIngressError",
+)("CaptureIngressError", {
+  cause: Schema.optional(Schema.String),
+  message: Schema.String,
+}) {}
+
+export interface CaptureIngressShape {
+  readonly enqueueBatch: (
+    events: ReadonlyArray<PublishableCaptureEvent>,
+    // `PlatformRuntime` marks the queue send as runtime-only. The ingest-DLQ
+    // write needs `Db`, but the live
+    // adapter captures it at the layer's build (it closes over the `Db`-in-make
+    // `AnalyticsIngestDlqService`), so it is no longer a per-call requirement.
+  ) => Effect.Effect<void, CaptureIngressError, PlatformRuntime>;
+}
+
+/** Accepted capture event plus the route selected by capture policy. */
+export interface PublishableCaptureEvent {
+  readonly envelope: CapturedEventV1Type;
+  readonly routeClass: RouteClass;
+}
+
+/**
+ * Abstract ingress for accepted capture events. The queue-backed live adapter is
+ * wired at the application root, so `packages/core` carries no infrastructure
+ * dependency.
+ */
+export class CaptureIngress extends Context.Service<CaptureIngress, CaptureIngressShape>()(
+  "@voidhash/core/CaptureIngress",
+) {
+  static readonly noop: Layer.Layer<CaptureIngress> = Layer.succeed(CaptureIngress, {
+    enqueueBatch: () => Effect.void,
+  });
+}
diff --git a/packages/core/src/services/analyticsIngest/DlqProducer.ts b/packages/core/src/services/analyticsIngest/DlqProducer.ts
new file mode 100644
index 000000000..29d23a395
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/DlqProducer.ts
@@ -0,0 +1,86 @@
+import type { Db } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import type {
+  EventProcessorDlqV1,
+  RouteClass,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+import { AnalyticsIngestDlqService } from "./AnalyticsIngestDlqService.ts";
+
+export class DlqProducerError extends Schema.TaggedErrorClass<DlqProducerError>("DlqProducerError")(
+  "DlqProducerError",
+  {
+    message: Schema.String,
+    cause: Schema.optional(Schema.String),
+  },
+) {}
+
+export interface DlqProducerShape {
+  readonly publishBatch: (
+    events: ReadonlyArray<EventProcessorDlqV1>,
+  ) => Effect.Effect<void, DlqProducerError, Db>;
+}
+
+export class DlqProducer extends Context.Service<DlqProducer, DlqProducerShape>()(
+  "@voidhash/core/DlqProducer",
+) {
+  static readonly dbLive = Layer.effect(
+    DlqProducer,
+    Effect.gen(function* () {
+      const dlq = yield* AnalyticsIngestDlqService;
+
+      const toRouteClass = (lane: EventProcessorDlqV1["lane"]): RouteClass =>
+        lane === "overflow" || lane === "historical" ? lane : "main";
+
+      const sourceSequence = (event: EventProcessorDlqV1): number => {
+        const suffix = event.sourceOffset.split(":").at(-1);
+        const parsed = suffix ? Number.parseInt(suffix, 10) : Number.NaN;
+        return Number.isFinite(parsed) ? parsed : 0;
+      };
+
+      const payloadJson = (event: EventProcessorDlqV1): unknown => {
+        if (!event.rawValue) return event;
+        try {
+          return JSON.parse(event.rawValue) as unknown;
+        } catch {
+          return event;
+        }
+      };
+
+      return {
+        publishBatch: (events) =>
+          Effect.forEach(
+            events,
+            (event) =>
+              dlq
+                .recordFailure({
+                  attemptCount: 0,
+                  captureId: event.captureId,
+                  distinctId: event.distinctId,
+                  failureClass: event.failureClass,
+                  failureMessage: event.failureMessage,
+                  payloadJson: payloadJson(event),
+                  projectId: event.projectId ?? "unknown",
+                  routeClass: toRouteClass(event.lane),
+                  sourceSequence: sourceSequence(event),
+                  sourceShard: event.sourceTopic,
+                })
+                .pipe(
+                  Effect.mapError(
+                    (error) =>
+                      new DlqProducerError({
+                        cause: String(error.cause),
+                        message: "failed to record analytics ingest DLQ row",
+                      }),
+                  ),
+                ),
+            { discard: true },
+          ),
+      } satisfies DlqProducerShape;
+    }),
+  );
+
+  static readonly noop: Layer.Layer<DlqProducer> = Layer.succeed(DlqProducer, {
+    publishBatch: () => Effect.void,
+  });
+}
diff --git a/packages/core/src/services/analyticsIngest/EventCaptureService.ts b/packages/core/src/services/analyticsIngest/EventCaptureService.ts
new file mode 100644
index 000000000..c17f69850
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/EventCaptureService.ts
@@ -0,0 +1,462 @@
+/**
+ * `EventCaptureService` orchestrates the capture pipeline: validate the inbound
+ * token, resolve the project + policy, enforce the request rate limit, then for
+ * each event enforce the per-event quota, pick a destination route, build the
+ * wire-stable {@link CapturedEventV1} envelope, and hand accepted envelopes to
+ * {@link CaptureIngress}.
+ *
+ * `CaptureRateLimitedError` / `CaptureUnauthorizedError` are part of the public
+ * HTTP contract and pass through as typed errors; every other infrastructural
+ * failure is wrapped as {@link EventCaptureServiceError} at the method boundary.
+ */
+import {
+  CaptureRateLimitedError,
+  CaptureUnauthorizedError,
+  type CaptureEvent,
+} from "@voidhash/api-contracts/event-capture";
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  type CaptureProjectPolicy,
+  type CapturedEventV1Type,
+  defaultCaptureProjectPolicy,
+  type RouteClass,
+  type RouteDecision,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+import { and, apiKeys, captureProjectPolicies, Db, eq, projects } from "@voidhash/db";
+import {
+  isReservedRevenueEventName,
+  shouldBypassQuota,
+} from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import { CaptureIngress } from "./CaptureIngress.ts";
+import { PolicyCounterStore } from "./PolicyCounterStore.ts";
+
+export class EventCaptureServiceError extends Schema.TaggedErrorClass<EventCaptureServiceError>(
+  "EventCaptureServiceError",
+)("EventCaptureServiceError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface CaptureRequest {
+  readonly request: {
+    readonly path?: string;
+    readonly token: string;
+    readonly sentAt: Date;
+    readonly receivedAt: Date;
+    readonly clientIp?: string;
+    readonly requestId: string;
+    readonly headers: Readonly<Record<string, string | undefined>>;
+  };
+  readonly events: ReadonlyArray<typeof CaptureEvent.Type>;
+}
+
+export interface CaptureResult {
+  readonly accepted: number;
+  readonly rejected: number;
+}
+
+interface ResolvedCaptureProject {
+  readonly organizationId: string;
+  readonly policy: CaptureProjectPolicy;
+  readonly projectId: string;
+}
+
+const parseForceRoute = (value: string | null | undefined): RouteClass | undefined => {
+  if (
+    value === "custom" ||
+    value === "dlq" ||
+    value === "historical" ||
+    value === "main" ||
+    value === "overflow"
+  ) {
+    return value;
+  }
+  return undefined;
+};
+
+/** Stable per-lane topic strings carried in the envelope's `routing.targetTopic`. */
+export const CAPTURE_TOPIC_MAIN = "capture.main.v1" as const;
+export const CAPTURE_TOPIC_OVERFLOW = "capture.overflow.v1" as const;
+export const CAPTURE_TOPIC_HISTORICAL = "capture.historical.v1" as const;
+export const CAPTURE_TOPIC_DLQ = "capture.dlq.v1" as const;
+
+const TOKEN_FORMAT = /^vh_pk_\w+$/;
+
+/** Validate and normalise (trim) an inbound publishable capture token. */
+export const validateCaptureToken = (
+  token: string,
+): Effect.Effect<string, CaptureUnauthorizedError> => {
+  const normalized = token.trim();
+  if (!normalized) {
+    return Effect.fail(
+      new CaptureUnauthorizedError({ code: "unauthorized", error: "missing token" }),
+    );
+  }
+  if (!TOKEN_FORMAT.test(normalized)) {
+    return Effect.fail(
+      new CaptureUnauthorizedError({ code: "unauthorized", error: "invalid token format" }),
+    );
+  }
+  return Effect.succeed(normalized);
+};
+
+/** The last 4 chars of a token, used for redacted logging. */
+export const tokenSuffix = (token: string): string => token.slice(-4);
+
+/** Resolve the canonical event timestamp in priority order. */
+export const resolveEventTimestamp = ({
+  receivedAt,
+  sentAt,
+  timestamp,
+}: {
+  readonly sentAt?: Date;
+  readonly receivedAt: Date;
+  readonly timestamp?: Date;
+}): Date => timestamp ?? sentAt ?? receivedAt;
+
+/** Pick the destination lane/topic for an accepted event from policy + quota state. */
+export const selectRoute = ({
+  overQuota,
+  policy,
+}: {
+  readonly overQuota: boolean;
+  readonly policy: CaptureProjectPolicy;
+}): Effect.Effect<RouteDecision, CaptureRateLimitedError> =>
+  Effect.gen(function* () {
+    const routeClass = policy.forceRoute ?? (overQuota ? "overflow" : "main");
+
+    switch (routeClass) {
+      case "main":
+        return {
+          isHistorical: false,
+          routeClass,
+          skipEnrichment: policy.skipEnrichment,
+          targetTopic: CAPTURE_TOPIC_MAIN,
+        };
+      case "dlq":
+        return {
+          isHistorical: false,
+          routeClass,
+          skipEnrichment: policy.skipEnrichment,
+          targetTopic: CAPTURE_TOPIC_DLQ,
+        };
+      case "overflow":
+        return {
+          isHistorical: false,
+          routeClass,
+          skipEnrichment: policy.skipEnrichment,
+          targetTopic: CAPTURE_TOPIC_OVERFLOW,
+        };
+      case "historical":
+        return {
+          isHistorical: true,
+          routeClass,
+          skipEnrichment: policy.skipEnrichment,
+          targetTopic: CAPTURE_TOPIC_HISTORICAL,
+        };
+      case "custom":
+        // Custom topics aren't wired in the Cloudflare-native infra; reject so the
+        // caller doesn't silently drop events on the floor.
+        return yield* Effect.fail(
+          new CaptureRateLimitedError({
+            code: "rate_limited",
+            error: "custom routes are not supported in this deployment",
+          }),
+        );
+    }
+  });
+
+/** Build the wire-stable {@link CapturedEventV1} envelope for an accepted event. */
+export const makeEnvelope = ({
+  event,
+  organizationId,
+  projectId,
+  receivedAt,
+  request,
+  route,
+  sentAt,
+  token,
+}: {
+  readonly event: typeof CaptureEvent.Type;
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly receivedAt: Date;
+  readonly request: {
+    readonly clientIp?: string;
+    readonly headers: Readonly<Record<string, string | undefined>>;
+    readonly path?: string;
+    readonly requestId: string;
+  };
+  readonly route: RouteDecision;
+  readonly sentAt: Date;
+  readonly token: string;
+}): CapturedEventV1Type => {
+  const timestamp = resolveEventTimestamp({ sentAt, receivedAt, timestamp: event.timestamp });
+  // An explicit attribute-set (`$set`/`$set_once` via the SDK's
+  // `setPersonAttributes`) is itself a reason to have a person, so the SDK
+  // stamps `$process_person_profile: true` even for anonymous distinct ids.
+  // Honor that client-supplied boolean when present; otherwise fall back to the
+  // default (only identified ids get a person profile).
+  const clientProcessPersonProfile = event.properties.$process_person_profile;
+  const properties = {
+    distinctId: event.distinct_id,
+    properties: event.properties,
+    $process_person_profile:
+      typeof clientProcessPersonProfile === "boolean"
+        ? clientProcessPersonProfile
+        : !event.distinct_id.startsWith(ANONYMOUS_USER_ID_PREFIX),
+  };
+  const canonicalProperties =
+    typeof request.clientIp === "string" ? { ...properties, $ip: request.clientIp } : properties;
+
+  return {
+    schemaVersion: 1,
+    captureId: crypto.randomUUID(),
+    ...(event.uuid ? { clientEventId: event.uuid } : {}),
+    ...(event.session_id ? { sessionId: event.session_id } : {}),
+    context: event.context,
+    distinctId: event.distinct_id,
+    event: event.event,
+    eventTimestamp: timestamp.toISOString(),
+    organizationId,
+    projectId,
+    properties: canonicalProperties,
+    rawPayload: {
+      context: event.context,
+      distinct_id: event.distinct_id,
+      event: event.event,
+      properties,
+      ...(event.session_id ? { session_id: event.session_id } : {}),
+      ...(sentAt ? { sent_at: sentAt } : {}),
+      ...(event.timestamp ? { timestamp: event.timestamp } : {}),
+      ...(event.uuid ? { uuid: event.uuid } : {}),
+    },
+    receivedAt: receivedAt.toISOString(),
+    request: {
+      requestId: request.requestId,
+      ...(request.path ? { path: request.path } : {}),
+      ...(request.headers["user-agent"] ? { userAgent: request.headers["user-agent"] } : {}),
+      ...(request.clientIp ? { clientIp: request.clientIp } : {}),
+    },
+    routing: route,
+    token,
+    sentAt: sentAt.toISOString(),
+  };
+};
+
+export class EventCaptureService extends Context.Service<EventCaptureService>()(
+  "EventCaptureService",
+  {
+    make: Effect.gen(function* () {
+      const policyCounterStore = yield* PolicyCounterStore;
+      const ingress = yield* CaptureIngress;
+      const db = yield* Db;
+
+      const captureEvents = Effect.fn("captureEvents")(
+        function* (input: CaptureRequest) {
+          const token = yield* validateCaptureToken(input.request.token);
+
+          // Resolve the project + policy from the publishable token: look up the
+          // public api key (joined to its project), then load the project's
+          // capture policy (falling back to defaults), or fail unauthorized.
+          const [apiKeyRecord] = yield* db
+            .select({
+              organizationId: projects.organizationId,
+              projectId: apiKeys.projectId,
+            })
+            .from(apiKeys)
+            .innerJoin(projects, eq(projects.id, apiKeys.projectId))
+            .where(and(eq(apiKeys.isPublic, true), eq(apiKeys.key, token)))
+            .limit(1);
+
+          const result = !apiKeyRecord
+            ? null
+            : yield* Effect.gen(function* () {
+                const [policyRecord] = yield* db
+                  .select()
+                  .from(captureProjectPolicies)
+                  .where(eq(captureProjectPolicies.projectId, apiKeyRecord.projectId))
+                  .limit(1);
+
+                const policy: CaptureProjectPolicy = policyRecord
+                  ? {
+                      customTopic: policyRecord.customTopic ?? undefined,
+                      eventsPerDay: policyRecord.eventsPerDay ?? undefined,
+                      forceRoute: parseForceRoute(policyRecord.forceRoute),
+                      ingestEnabled: policyRecord.ingestEnabled,
+                      projectId: policyRecord.projectId,
+                      requestsPerMinute: policyRecord.requestsPerMinute ?? undefined,
+                      skipEnrichment: policyRecord.skipEnrichment,
+                    }
+                  : defaultCaptureProjectPolicy(apiKeyRecord.projectId);
+
+                return {
+                  organizationId: apiKeyRecord.organizationId,
+                  policy,
+                  projectId: apiKeyRecord.projectId,
+                } satisfies ResolvedCaptureProject;
+              });
+
+          if (!result) {
+            return yield* Effect.fail(
+              new CaptureUnauthorizedError({ code: "unauthorized", error: "invalid token" }),
+            );
+          }
+
+          const project = result;
+
+          yield* Effect.annotateCurrentSpan("voidhash.request.id", input.request.requestId);
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.suffix", tokenSuffix(token));
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", project.projectId);
+          if (project.organizationId)
+            yield* Effect.annotateCurrentSpan("voidhash.organization.id", project.organizationId);
+
+          if (!project.policy.ingestEnabled) {
+            return yield* Effect.fail(
+              new CaptureRateLimitedError({
+                code: "rate_limited",
+                error: "capture is disabled for this project",
+              }),
+            );
+          }
+
+          const requestLimit = yield* policyCounterStore.checkRequestLimit({
+            now: input.request.receivedAt,
+            projectId: project.projectId,
+            requestsPerMinute: project.policy.requestsPerMinute,
+          });
+          if (!requestLimit.allowed) {
+            return yield* Effect.fail(
+              new CaptureRateLimitedError({
+                code: "rate_limited",
+                error: "request rate limit exceeded",
+                ...(typeof requestLimit.retryAfterMs === "number"
+                  ? { retry_after_ms: requestLimit.retryAfterMs }
+                  : {}),
+              }),
+            );
+          }
+
+          const publishableEvents: Array<{
+            envelope: ReturnType<typeof makeEnvelope>;
+            routeClass: RouteClass;
+          }> = [];
+          let accepted = 0;
+          let rejected = 0;
+
+          for (const event of input.events) {
+            if (isReservedRevenueEventName(event.event)) {
+              rejected += 1;
+              yield* Effect.logWarning(
+                "rejected reserved revenue event from publishable-key capture",
+                {
+                  eventName: event.event,
+                  projectId: project.projectId,
+                  tokenSuffix: tokenSuffix(token),
+                },
+              );
+              continue;
+            }
+
+            const outcome = yield* Effect.result(
+              Effect.gen(function* () {
+                // The seam to exempt specific event classes from quota. When
+                // bypassed, the counter is never read and the route is never
+                // forced to overflow; SDK events consume quota by default.
+                const bypassQuota = shouldBypassQuota({
+                  eventName: event.event,
+                  trustClass: "untrusted-sdk",
+                });
+                const withinQuota =
+                  bypassQuota ||
+                  (yield* policyCounterStore
+                    .checkEventQuota({
+                      now: input.request.receivedAt,
+                      projectId: project.projectId,
+                      quota: project.policy.eventsPerDay,
+                    })
+                    .pipe(Effect.withSpan("policy.apply")));
+
+                const route = yield* selectRoute({
+                  overQuota: !withinQuota,
+                  policy: project.policy,
+                });
+
+                const envelope = makeEnvelope({
+                  event,
+                  organizationId: project.organizationId,
+                  projectId: project.projectId,
+                  receivedAt: input.request.receivedAt,
+                  request: input.request,
+                  route,
+                  sentAt: input.request.sentAt,
+                  token,
+                });
+
+                return { envelope, routeClass: route.routeClass };
+              }),
+            );
+
+            if (outcome._tag === "Failure") {
+              rejected += 1;
+              continue;
+            }
+
+            publishableEvents.push(outcome.success);
+            accepted += 1;
+          }
+
+          yield* ingress.enqueueBatch(publishableEvents);
+          yield* Effect.annotateCurrentSpan("voidhash.capture.accepted_count", accepted);
+          yield* Effect.annotateCurrentSpan("voidhash.capture.rejected_count", rejected);
+          yield* Effect.logInfo("capture request processed", {
+            accepted,
+            projectId: project.projectId,
+            rejected,
+            requestId: input.request.requestId,
+            tokenSuffix: tokenSuffix(token),
+          });
+
+          return { accepted, rejected } satisfies CaptureResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.withSpan("event-capture.captureEvents"),
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new EventCaptureServiceError({
+                    cause: String(error.cause),
+                    message: "capture project lookup failed",
+                  }),
+                ),
+              PolicyStoreError: (error) =>
+                Effect.fail(
+                  new EventCaptureServiceError({
+                    cause: String(error.cause ?? error.message),
+                    message: error.message,
+                  }),
+                ),
+              CaptureIngressError: (error) =>
+                Effect.fail(
+                  new EventCaptureServiceError({
+                    cause: String(error.cause ?? error.message),
+                    message: error.message,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      return { captureEvents } as const;
+    }),
+  },
+) {
+  static readonly layer: Layer.Layer<
+    EventCaptureService,
+    never,
+    Db | PolicyCounterStore | CaptureIngress
+  > = Layer.effect(EventCaptureService)(EventCaptureService.make);
+}
diff --git a/packages/core/src/services/analyticsIngest/EventProcessorService.ts b/packages/core/src/services/analyticsIngest/EventProcessorService.ts
new file mode 100644
index 000000000..c2619252c
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/EventProcessorService.ts
@@ -0,0 +1,600 @@
+/**
+ * `EventProcessorService` turns one captured record into the downstream wire
+ * events the writer consumes: resolve the project + processor policy (DLQ on
+ * failure), validate policy/lane preconditions via {@link attachProjectPolicy}
+ * (DLQ on rejection), resolve identity through {@link PersonIdentityService},
+ * build the wire-stable {@link ProcessedEventV2}, and return the three output
+ * streams.
+ *
+ * Records for the same `(token, distinctId)` are safe to process in any order:
+ * identity resolution is order-agnostic (oldest-wins union-find + per-trait LWW)
+ * and serialized at the row level by the identity transaction's `FOR UPDATE`
+ * locks — no application-level scheduler needed.
+ */
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import { and, apiKeys, captureProjectPolicies, Db, eq, projects } from "@voidhash/db";
+
+import {
+  buildDlqEvent,
+  type CapturedEventV1Type,
+  type CapturedTransportRecord,
+  type EventProcessorDlqV1,
+  extractInnerProperties,
+  parsePersonTraits,
+  type ProcessedEventIdentity,
+  type ProcessedEventV2Type,
+  type ProcessingEvent,
+  type ProcessorLane,
+  type ProcessorPersonEventV1Type,
+  type ProcessorPersonIdentityEventV1Type,
+  type ProcessorProjectPolicy,
+  type ResolvedProcessorProject,
+  validateBuiltInProcessorRules,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+import {
+  isReservedRevenueEventName,
+  REVENUE_TRUSTED_SOURCE_TOPIC,
+} from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import {
+  PersonIdentityService,
+  type PersonIdentityEventV1,
+  type PersonIdentityResult,
+  type PersonSnapshotEventV1,
+  type ResolvedAnalyticsIdentity,
+} from "../personIdentity/PersonIdentityService.ts";
+import { DlqProducer } from "./DlqProducer.ts";
+import type { ProcessorOutputs } from "./ProcessorOutputs.ts";
+
+export class EventProcessorServiceError extends Schema.TaggedErrorClass<EventProcessorServiceError>(
+  "EventProcessorServiceError",
+)("EventProcessorServiceError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+const DEFAULT_PROCESSOR_POLICY: ProcessorProjectPolicy = {
+  processorAllowHistorical: true,
+  processorAllowOverflow: true,
+  processorEnabled: true,
+  processorHistoricalMinAgeHours: 48,
+  processorPersonProcessingEnabled: true,
+  processorSchemaMode: "reject",
+};
+
+const buildProcessedEventIdentity = (
+  identity: ResolvedAnalyticsIdentity,
+): ProcessedEventIdentity => ({
+  ...(identity.personId ? { personId: identity.personId } : {}),
+  distinctId: identity.distinctId,
+  mode: identity.mode,
+});
+
+/** Builds the wire-stable {@link ProcessedEventV2} the writer consumes. */
+export const buildProcessedEvent = ({
+  capturedEvent,
+  identity,
+  lane,
+  sourceOffset,
+  sourcePartition,
+  sourceTopic,
+}: {
+  readonly capturedEvent: CapturedEventV1Type;
+  readonly identity: ResolvedAnalyticsIdentity;
+  readonly lane: ProcessorLane;
+  readonly sourceOffset: string;
+  readonly sourcePartition: number;
+  readonly sourceTopic: string;
+}): ProcessedEventV2Type => ({
+  captureId: capturedEvent.captureId,
+  context: capturedEvent.context,
+  distinctId: capturedEvent.distinctId,
+  event: capturedEvent.event,
+  eventTimestamp: capturedEvent.eventTimestamp,
+  groups: [],
+  identity: buildProcessedEventIdentity(identity),
+  organizationId: capturedEvent.organizationId,
+  processedAt: new Date().toISOString(),
+  // The ClickHouse dedup key prefers the SDK's stable client uuid (reused across
+  // retries / offline redelivery) over the fresh per-request captureId, so an
+  // SDK-level resend collapses on read; falls back to captureId for non-SDK callers.
+  processedEventId: capturedEvent.clientEventId ?? capturedEvent.captureId,
+  projectId: capturedEvent.projectId,
+  properties: capturedEvent.properties,
+  request: capturedEvent.request,
+  routing: {
+    lane,
+    skipEnrichment: capturedEvent.routing.skipEnrichment,
+    sourceOffset,
+    sourcePartition,
+    sourceTopic,
+  },
+  schemaVersion: 2,
+  ...(capturedEvent.sessionId ? { sessionId: capturedEvent.sessionId } : {}),
+  token: capturedEvent.token,
+});
+
+/**
+ * Validate policy + lane preconditions for a captured record and, on success,
+ * promote it to a {@link ProcessingEvent}; on rejection return the pre-built
+ * {@link EventProcessorDlqV1} for the caller to publish.
+ */
+export const attachProjectPolicy = ({
+  now,
+  record,
+  resolvedProject,
+}: {
+  readonly now: Date;
+  readonly record: CapturedTransportRecord;
+  readonly resolvedProject: ResolvedProcessorProject;
+}):
+  | { readonly ok: true; readonly value: ProcessingEvent }
+  | { readonly ok: false; readonly value: EventProcessorDlqV1 } => {
+  const reject = (
+    failureClass: EventProcessorDlqV1["failureClass"],
+    failureMessage: string,
+  ): { readonly ok: false; readonly value: EventProcessorDlqV1 } => ({
+    ok: false,
+    value: buildDlqEvent({
+      captureId: record.capturedEvent.captureId,
+      distinctId: record.capturedEvent.distinctId,
+      failureClass,
+      failureMessage,
+      headers: record.headers,
+      lane: record.lane,
+      projectId: record.capturedEvent.projectId,
+      rawKey: record.rawKey,
+      rawValue: record.rawValue,
+      sourceOffset: record.sourceOffset,
+      sourcePartition: record.sourcePartition,
+      sourceTopic: record.sourceTopic,
+      token: record.capturedEvent.token,
+    }),
+  });
+
+  if (resolvedProject.projectId !== record.capturedEvent.projectId) {
+    return reject("project_not_found", "captured event project id does not match resolved token");
+  }
+  if (!resolvedProject.policy.processorEnabled) {
+    return reject("policy_rejected", "processor is disabled for the project");
+  }
+  if (record.lane === "overflow" && !resolvedProject.policy.processorAllowOverflow) {
+    return reject("policy_rejected", "overflow lane is disabled for the project");
+  }
+  if (record.lane === "historical" && !resolvedProject.policy.processorAllowHistorical) {
+    return reject("policy_rejected", "historical lane is disabled for the project");
+  }
+
+  const validationError = validateBuiltInProcessorRules({
+    capturedEvent: record.capturedEvent,
+    historicalMinAgeHours: resolvedProject.policy.processorHistoricalMinAgeHours,
+    lane: record.lane,
+    now,
+    sourceTopic: record.sourceTopic,
+  });
+  if (validationError) return reject("schema_rejected", validationError);
+
+  return {
+    ok: true,
+    value: {
+      capturedEvent: record.capturedEvent,
+      headers: record.headers,
+      identityKey: `${record.capturedEvent.token}:${record.capturedEvent.distinctId}`,
+      lane: record.lane,
+      projectPolicy: resolvedProject.policy,
+      rawKey: record.rawKey,
+      rawValue: record.rawValue,
+      sourceOffset: record.sourceOffset,
+      sourcePartition: record.sourcePartition,
+      sourceTopic: record.sourceTopic,
+    },
+  };
+};
+
+const parseProcessPersonProfile = (properties: Record<string, unknown>): boolean | undefined => {
+  const rawValue = properties.$process_person_profile;
+  if (typeof rawValue === "undefined") return undefined;
+  if (typeof rawValue !== "boolean") {
+    throw new Error("$process_person_profile must be a boolean");
+  }
+  return rawValue;
+};
+
+const parseIdentifySourceDistinctId = (properties: Record<string, unknown>): string => {
+  const rawValue = properties.$previous_distinct_id;
+  if (typeof rawValue !== "string" || rawValue.length === 0) {
+    throw new Error("$identify requires properties.$previous_distinct_id");
+  }
+  return rawValue;
+};
+
+/**
+ * Computes the {@link PersonIdentityService} call (identify vs resolve) for a
+ * processing event, extracting person traits and the stable identity `eventId`
+ * (the SDK client uuid, falling back to captureId) used for assertion dedup.
+ */
+export const buildPersonIdentityCall = (
+  processingEvent: ProcessingEvent,
+):
+  | {
+      readonly kind: "identify";
+      readonly input: {
+        readonly distinctId: string;
+        readonly email?: string;
+        readonly eventId: string;
+        readonly eventTimestamp: Date;
+        readonly name?: string;
+        readonly previousDistinctId: string;
+        readonly projectId: string;
+        readonly setAttributes: Record<string, unknown>;
+        readonly setOnceAttributes: Record<string, unknown>;
+      };
+    }
+  | {
+      readonly kind: "resolve";
+      readonly input: {
+        readonly distinctId: string;
+        readonly email?: string;
+        readonly eventId: string;
+        readonly eventTimestamp: Date;
+        readonly name?: string;
+        readonly projectId: string;
+        readonly setAttributes: Record<string, unknown>;
+        readonly setOnceAttributes: Record<string, unknown>;
+        readonly shouldCreatePerson: boolean;
+      };
+    } => {
+  const { capturedEvent } = processingEvent;
+  const innerProperties = extractInnerProperties(capturedEvent.properties);
+  const traits = parsePersonTraits(innerProperties);
+  if (!traits.ok) throw new Error(traits.message);
+
+  const name =
+    typeof traits.value.set.name === "string"
+      ? traits.value.set.name
+      : typeof traits.value.setOnce.name === "string"
+        ? traits.value.setOnce.name
+        : undefined;
+  const email =
+    typeof traits.value.set.email === "string"
+      ? traits.value.set.email
+      : typeof traits.value.setOnce.email === "string"
+        ? traits.value.setOnce.email
+        : undefined;
+  const setAttributes = Object.fromEntries(
+    Object.entries(traits.value.set).filter(([key]) => key !== "email" && key !== "name"),
+  );
+  const setOnceAttributes = Object.fromEntries(
+    Object.entries(traits.value.setOnce).filter(([key]) => key !== "email" && key !== "name"),
+  );
+
+  const eventId = capturedEvent.clientEventId ?? capturedEvent.captureId;
+
+  if (capturedEvent.event === "$identify") {
+    return {
+      kind: "identify",
+      input: {
+        distinctId: capturedEvent.distinctId,
+        email,
+        eventId,
+        eventTimestamp: new Date(capturedEvent.eventTimestamp),
+        name,
+        previousDistinctId: parseIdentifySourceDistinctId(innerProperties),
+        projectId: capturedEvent.projectId,
+        setAttributes,
+        setOnceAttributes,
+      },
+    };
+  }
+
+  const shouldCreatePerson =
+    parseProcessPersonProfile(capturedEvent.properties) ??
+    !capturedEvent.distinctId.startsWith(ANONYMOUS_USER_ID_PREFIX);
+
+  const enrichmentDisabled =
+    capturedEvent.routing.skipEnrichment ||
+    !processingEvent.projectPolicy.processorPersonProcessingEnabled;
+
+  return {
+    kind: "resolve",
+    input: {
+      distinctId: capturedEvent.distinctId,
+      email,
+      eventId,
+      eventTimestamp: new Date(capturedEvent.eventTimestamp),
+      name,
+      projectId: capturedEvent.projectId,
+      setAttributes: enrichmentDisabled ? {} : setAttributes,
+      setOnceAttributes: enrichmentDisabled ? {} : setOnceAttributes,
+      shouldCreatePerson,
+    },
+  };
+};
+
+export const toProcessorPersonEvent = (
+  event: PersonSnapshotEventV1,
+): ProcessorPersonEventV1Type => ({
+  changedAt: event.changedAt,
+  personId: event.personId,
+  ...(event.email ? { email: event.email } : {}),
+  isArchived: event.isArchived,
+  ...(event.mergedIntoPersonId ? { mergedIntoPersonId: event.mergedIntoPersonId } : {}),
+  ...(event.name ? { name: event.name } : {}),
+  ...(event.primaryDistinctId ? { primaryDistinctId: event.primaryDistinctId } : {}),
+  projectId: event.projectId,
+  schemaVersion: event.schemaVersion,
+  traits: event.traits,
+  version: event.version,
+});
+
+const toProcessorPersonIdentityEvent = ({
+  identityDistinctId,
+  mappingEvent,
+}: {
+  readonly identityDistinctId: string;
+  readonly mappingEvent: PersonIdentityEventV1;
+}): ProcessorPersonIdentityEventV1Type => {
+  // Prefer the explicit override direction from the synchronous merge; fall back
+  // to inferring it from the identify target for legacy mapping events.
+  const previousDistinctId =
+    mappingEvent.previousDistinctId ??
+    (mappingEvent.distinctId === identityDistinctId ? undefined : mappingEvent.distinctId);
+  return {
+    changedAt: mappingEvent.changedAt,
+    personId: mappingEvent.personId,
+    distinctId: previousDistinctId ? identityDistinctId : mappingEvent.distinctId,
+    isDeleted: mappingEvent.isDeleted,
+    ...(previousDistinctId ? { previousDistinctId } : {}),
+    projectId: mappingEvent.projectId,
+    schemaVersion: mappingEvent.schemaVersion,
+    version: mappingEvent.version,
+  };
+};
+
+export const toProcessorPersonIdentityEvents = (
+  identityResult: Pick<PersonIdentityResult, "identity" | "mappingEvents">,
+): ReadonlyArray<ProcessorPersonIdentityEventV1Type> =>
+  identityResult.mappingEvents.map((mappingEvent) =>
+    toProcessorPersonIdentityEvent({
+      identityDistinctId: identityResult.identity.distinctId,
+      mappingEvent,
+    }),
+  );
+
+export class EventProcessorService extends Context.Service<EventProcessorService>()(
+  "EventProcessorService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const dlqProducer = yield* DlqProducer;
+      const personIdentityService = yield* PersonIdentityService;
+
+      const emptyOutputs = (): ProcessorOutputs => ({
+        personEvents: [],
+        personIdentityEvents: [],
+        processedEvents: [],
+      });
+
+      const processRecordToOutputs = Effect.fn("processRecordToOutputs")(
+        function* (transportRecord: CapturedTransportRecord) {
+          const now = new Date();
+
+          const capturedEvent = transportRecord.capturedEvent;
+          if (capturedEvent.captureId)
+            yield* Effect.annotateCurrentSpan("voidhash.capture.id", capturedEvent.captureId);
+          if (capturedEvent.projectId)
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", capturedEvent.projectId);
+          if (capturedEvent.distinctId)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              capturedEvent.distinctId,
+            );
+          if (capturedEvent.event)
+            yield* Effect.annotateCurrentSpan("voidhash.event.name", capturedEvent.event);
+          if (capturedEvent.sessionId)
+            yield* Effect.annotateCurrentSpan("voidhash.session.id", capturedEvent.sessionId);
+          yield* Effect.annotateCurrentSpan("voidhash.processor.lane", transportRecord.lane);
+
+          // Trusted revenue is server-stamped, so resolve it by `projectId`
+          // directly — its token may be synthetic (no `api_key` row). SDK events
+          // MUST resolve through the `api_key` join (token-spoofing protection).
+          const isTrustedRevenue =
+            capturedEvent.identityClaim?._tag === "Resolved" &&
+            capturedEvent.routing.targetTopic === REVENUE_TRUSTED_SOURCE_TOPIC;
+
+          const resolved = yield* Effect.result(
+            Effect.gen(function* () {
+              const [projectRecord] = isTrustedRevenue
+                ? yield* db
+                    .select({
+                      organizationId: projects.organizationId,
+                      projectId: projects.id,
+                    })
+                    .from(projects)
+                    .where(eq(projects.id, capturedEvent.projectId))
+                    .limit(1)
+                : yield* db
+                    .select({
+                      organizationId: projects.organizationId,
+                      projectId: apiKeys.projectId,
+                    })
+                    .from(apiKeys)
+                    .innerJoin(projects, eq(projects.id, apiKeys.projectId))
+                    .where(and(eq(apiKeys.isPublic, true), eq(apiKeys.key, capturedEvent.token)))
+                    .limit(1);
+
+              if (!projectRecord) return null;
+
+              const [policyRecord] = yield* db
+                .select()
+                .from(captureProjectPolicies)
+                .where(eq(captureProjectPolicies.projectId, projectRecord.projectId))
+                .limit(1);
+
+              return {
+                organizationId: projectRecord.organizationId,
+                policy: policyRecord
+                  ? {
+                      processorAllowHistorical: policyRecord.processorAllowHistorical,
+                      processorAllowOverflow: policyRecord.processorAllowOverflow,
+                      processorEnabled: policyRecord.processorEnabled,
+                      processorHistoricalMinAgeHours: policyRecord.processorHistoricalMinAgeHours,
+                      processorPersonProcessingEnabled:
+                        policyRecord.processorPersonProcessingEnabled,
+                      processorSchemaMode: policyRecord.processorSchemaMode,
+                    }
+                  : DEFAULT_PROCESSOR_POLICY,
+                projectId: projectRecord.projectId,
+              };
+            }),
+          );
+
+          if (resolved._tag === "Failure" || resolved.success === null) {
+            yield* dlqProducer.publishBatch([
+              buildDlqEvent({
+                captureId: transportRecord.capturedEvent.captureId,
+                distinctId: transportRecord.capturedEvent.distinctId,
+                failureClass: "project_not_found",
+                failureMessage: "failed to resolve processor project policy",
+                headers: transportRecord.headers,
+                lane: transportRecord.lane,
+                projectId: transportRecord.capturedEvent.projectId,
+                rawValue: transportRecord.rawValue,
+                sourceOffset: transportRecord.sourceOffset,
+                sourcePartition: transportRecord.sourcePartition,
+                sourceTopic: transportRecord.sourceTopic,
+                token: transportRecord.capturedEvent.token,
+              }),
+            ]);
+            return emptyOutputs();
+          }
+
+          if (resolved.success.organizationId)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              resolved.success.organizationId,
+            );
+
+          const attached = attachProjectPolicy({
+            now,
+            record: transportRecord,
+            resolvedProject: resolved.success,
+          });
+          if (!attached.ok) {
+            yield* dlqProducer.publishBatch([attached.value]);
+            return emptyOutputs();
+          }
+
+          if (
+            isReservedRevenueEventName(attached.value.capturedEvent.event) &&
+            attached.value.sourceTopic !== REVENUE_TRUSTED_SOURCE_TOPIC
+          ) {
+            yield* dlqProducer.publishBatch([
+              buildDlqEvent({
+                captureId: attached.value.capturedEvent.captureId,
+                distinctId: attached.value.capturedEvent.distinctId,
+                failureClass: "reserved_event_name",
+                failureMessage: `reserved revenue event '${attached.value.capturedEvent.event}' from untrusted source topic '${attached.value.sourceTopic}'`,
+                headers: attached.value.headers,
+                lane: attached.value.lane,
+                projectId: attached.value.capturedEvent.projectId,
+                rawKey: attached.value.rawKey,
+                rawValue: attached.value.rawValue,
+                sourceOffset: attached.value.sourceOffset,
+                sourcePartition: attached.value.sourcePartition,
+                sourceTopic: attached.value.sourceTopic,
+                token: attached.value.capturedEvent.token,
+              }),
+            ]);
+            return emptyOutputs();
+          }
+
+          // Honour a pre-resolved identity claim on trusted revenue: skip
+          // identity resolution and emit NO person/identity rows. Gated on the
+          // trusted source topic so a forged claim on an untrusted event falls
+          // through to normal resolution (defence-in-depth).
+          const identityClaim = attached.value.capturedEvent.identityClaim;
+          if (
+            identityClaim?._tag === "Resolved" &&
+            attached.value.sourceTopic === REVENUE_TRUSTED_SOURCE_TOPIC
+          ) {
+            const processedEvent = buildProcessedEvent({
+              capturedEvent: attached.value.capturedEvent,
+              identity: {
+                distinctId: identityClaim.distinctId,
+                mode: "full",
+                personId: identityClaim.personId,
+              },
+              lane: attached.value.lane,
+              sourceOffset: attached.value.sourceOffset,
+              sourcePartition: attached.value.sourcePartition,
+              sourceTopic: attached.value.sourceTopic,
+            });
+            return {
+              personEvents: [],
+              personIdentityEvents: [],
+              processedEvents: [processedEvent],
+            } satisfies ProcessorOutputs;
+          }
+
+          const call = buildPersonIdentityCall(attached.value);
+          const identityResult = yield* call.kind === "identify"
+            ? personIdentityService.identifyDistinctId(call.input)
+            : personIdentityService.resolveDistinctId(call.input);
+
+          if (identityResult.identity.personId)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.id",
+              identityResult.identity.personId,
+            );
+
+          const processedEvent = buildProcessedEvent({
+            capturedEvent: attached.value.capturedEvent,
+            identity: identityResult.identity,
+            lane: attached.value.lane,
+            sourceOffset: attached.value.sourceOffset,
+            sourcePartition: attached.value.sourcePartition,
+            sourceTopic: attached.value.sourceTopic,
+          });
+          const personEvents = identityResult.personEvents.map(toProcessorPersonEvent);
+          const personIdentityEvents = toProcessorPersonIdentityEvents(identityResult);
+
+          return {
+            personIdentityEvents,
+            personEvents,
+            processedEvents: [processedEvent],
+          } satisfies ProcessorOutputs;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.withSpan("event-processor.processRecordToOutputs"),
+            Effect.catchTags({
+              DlqProducerError: (error) =>
+                Effect.fail(
+                  new EventProcessorServiceError({
+                    cause: String(error.cause ?? error.message),
+                    message: error.message,
+                  }),
+                ),
+              PersonServiceError: (error) =>
+                Effect.fail(
+                  new EventProcessorServiceError({
+                    cause: String(error.cause),
+                    message: "identity resolution failed",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      return { processRecordToOutputs } as const;
+    }),
+  },
+) {
+  static readonly layer: Layer.Layer<
+    EventProcessorService,
+    never,
+    Db | DlqProducer | PersonIdentityService
+  > = Layer.effect(EventProcessorService)(EventProcessorService.make);
+}
diff --git a/packages/core/src/services/analyticsIngest/PolicyCounterStore.ts b/packages/core/src/services/analyticsIngest/PolicyCounterStore.ts
new file mode 100644
index 000000000..bb36643b8
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/PolicyCounterStore.ts
@@ -0,0 +1,53 @@
+/**
+ * Abstract port for the capture policy counters (requests/minute, events/day).
+ *
+ * The application root picks the implementation: a KV-backed live adapter
+ * (best-effort `get`+`put`, eventually consistent) or {@link PolicyCounterStore.noop}
+ * (always-allow). Projects that need strict limits should use the noop layer
+ * plus an upstream Cloudflare WAF rule. The concrete KV adapter lives at the
+ * app root so `packages/core` carries no infrastructure dependency.
+ *
+ * `PlatformRuntime` preserves the guarantee that runtime-backed counter
+ * implementations only run inside a configured runtime, without coupling this
+ * port to a provider implementation.
+ */
+import { Context, Effect, Layer, Schema } from "effect";
+import type { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+export class PolicyStoreError extends Schema.TaggedErrorClass<PolicyStoreError>("PolicyStoreError")(
+  "PolicyStoreError",
+  {
+    message: Schema.String,
+    cause: Schema.optional(Schema.String),
+  },
+) {}
+
+export interface RequestLimitCheck {
+  readonly allowed: boolean;
+  readonly retryAfterMs?: number;
+}
+
+export interface PolicyCounterStoreShape {
+  readonly checkRequestLimit: (input: {
+    readonly now: Date;
+    readonly projectId: string;
+    readonly requestsPerMinute: number | undefined;
+  }) => Effect.Effect<RequestLimitCheck, PolicyStoreError, PlatformRuntime>;
+
+  readonly checkEventQuota: (input: {
+    readonly now: Date;
+    readonly projectId: string;
+    readonly quota: number | undefined;
+  }) => Effect.Effect<boolean, PolicyStoreError, PlatformRuntime>;
+}
+
+export class PolicyCounterStore extends Context.Service<
+  PolicyCounterStore,
+  PolicyCounterStoreShape
+>()("@voidhash/core/PolicyCounterStore") {
+  /** Always-allow store — for tests, or apps that defer rate limiting to a WAF. */
+  static readonly noop: Layer.Layer<PolicyCounterStore> = Layer.succeed(PolicyCounterStore, {
+    checkRequestLimit: () => Effect.succeed({ allowed: true }),
+    checkEventQuota: () => Effect.succeed(true),
+  });
+}
diff --git a/packages/core/src/services/analyticsIngest/ProcessorOutputs.ts b/packages/core/src/services/analyticsIngest/ProcessorOutputs.ts
new file mode 100644
index 000000000..174af581b
--- /dev/null
+++ b/packages/core/src/services/analyticsIngest/ProcessorOutputs.ts
@@ -0,0 +1,12 @@
+import type {
+  ProcessedEventV2Type,
+  ProcessorPersonEventV1Type,
+  ProcessorPersonIdentityEventV1Type,
+} from "../../domain/analyticsIngest/AnalyticsIngest.ts";
+
+/** Analytics processor outputs collected by a durable ingest flush workflow. */
+export interface ProcessorOutputs {
+  readonly processedEvents: ReadonlyArray<ProcessedEventV2Type>;
+  readonly personEvents: ReadonlyArray<ProcessorPersonEventV1Type>;
+  readonly personIdentityEvents: ReadonlyArray<ProcessorPersonIdentityEventV1Type>;
+}
diff --git a/packages/core/src/services/apiKeys/ApiKeyService.ts b/packages/core/src/services/apiKeys/ApiKeyService.ts
new file mode 100644
index 000000000..b8946f997
--- /dev/null
+++ b/packages/core/src/services/apiKeys/ApiKeyService.ts
@@ -0,0 +1,506 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { ApiKeyNotFoundError } from "../../domain/apiKey/ApiKey.ts";
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  type ApiKey as DbApiKey,
+  type Apikey as DbUserApiKey,
+  type Project as DbProject,
+  type User as DbUser,
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  apiKeys,
+  apikey,
+  eq,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import {
+  createSecretKey as generateSecretKeyFn,
+  createUserApiKey as generateUserApiKeyFn,
+  hashKey,
+} from "./api-keys.ts";
+
+export type ApiKeyWithProject = DbApiKey & { readonly project: DbProject };
+export type UserApiKeyWithUser = DbUserApiKey & { readonly user: DbUser };
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error tag.
+ */
+export class ApiKeyServiceError extends Schema.TaggedErrorClass<ApiKeyServiceError>(
+  "ApiKeyServiceError",
+)("ApiKeyServiceError", { cause: Schema.String }) {}
+
+const isExpired = (expiresAt: Date | null | undefined): boolean =>
+  expiresAt !== null && expiresAt !== undefined && expiresAt.getTime() <= Date.now();
+
+/**
+ * `ApiKeyService` is the single entry point for the three kinds of api keys:
+ *
+ * - **Secret keys** — project-scoped, hashed in storage, used by server-side
+ *   integrations.
+ * - **Publishable keys** — project-scoped, plain-text, embedded in clients.
+ * - **User api keys** — user-scoped, hashed in storage. CLI device-auth flow
+ *   is the first consumer.
+ *
+ * Mutating methods require `AuthSession` and emit audit-log entries. The
+ * `validate*` methods are auth-establishing — they run in request middleware
+ * before any session exists, so they don't depend on `AuthSession` and never
+ * emit audit logs.
+ *
+ * `AuditLogPort`, `AuthSession`, and `Db` are provided by the application
+ * root.
+ */
+export class ApiKeyService extends Context.Service<ApiKeyService>()("ApiKeyService", {
+  make: Effect.gen(function* () {
+    const auditLog = yield* AuditLogPort;
+    const db = yield* Db;
+
+    const getApiKeys = Effect.fn("getApiKeys")(
+      function* (projectId: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        yield* checkProjectPermission(
+          projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access api keys for project ${projectId}`,
+        );
+        return yield* db.query.apiKeys.findMany({
+          orderBy: { isPublic: "desc", createdAt: "asc" },
+          where: { projectId },
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    const getApiKeyById = Effect.fn("getApiKeyById")(
+      function* (id: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", id);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        const apiKey = yield* db.query.apiKeys.findFirst({ where: { id } });
+        if (!apiKey) {
+          return yield* Effect.fail(new ApiKeyNotFoundError({ apiKeyId: id }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", apiKey.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.is_public", apiKey.isPublic);
+        if (apiKey.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", apiKey.prefix);
+        if (apiKey.end) yield* Effect.annotateCurrentSpan("voidhash.api_key.end", apiKey.end);
+        yield* checkProjectPermission(
+          apiKey.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access api key ${id} for project ${apiKey.projectId}`,
+        );
+        return apiKey;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    const createSecretKey = Effect.fn("createSecretKey")(
+      function* (input: { readonly projectId: string; readonly name: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to create secret keys for project ${input.projectId}`,
+        );
+
+        const { rawKey, ...secretKey } = yield* generateSecretKeyFn();
+        const apiKeyId = generateId("apiSecretKey");
+        yield* db.insert(apiKeys).values({
+          id: apiKeyId,
+          projectId: input.projectId,
+          name: input.name,
+          ...secretKey,
+        });
+
+        const apiKey = yield* db.query.apiKeys.findFirst({ where: { id: apiKeyId } });
+        if (!apiKey) {
+          return yield* Effect.fail(
+            new ApiKeyServiceError({ cause: "API key not found after creation." }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", apiKey.id);
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.is_public", apiKey.isPublic);
+        if (apiKey.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", apiKey.prefix);
+        if (apiKey.end) yield* Effect.annotateCurrentSpan("voidhash.api_key.end", apiKey.end);
+
+        yield* auditLog
+          .append({
+            projectId: input.projectId,
+            entityType: AuditLogEntityType.ApiKey,
+            entityId: apiKeyId,
+            action: AuditLogAction.Created,
+            changes: { name: input.name },
+          })
+          .pipe(Effect.ignore);
+
+        return { ...apiKey, rawKey };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    const rotateSecretKey = Effect.fn("rotateSecretKey")(
+      function* (input: { readonly secretKeyId: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", input.secretKeyId);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        const existingKey = yield* db.query.apiKeys.findFirst({
+          where: { id: input.secretKeyId },
+        });
+        if (!existingKey) {
+          return yield* Effect.fail(new ApiKeyNotFoundError({ apiKeyId: input.secretKeyId }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", existingKey.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.is_public", existingKey.isPublic);
+        if (existingKey.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", existingKey.prefix);
+        if (existingKey.end)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.end", existingKey.end);
+        yield* checkProjectPermission(
+          existingKey.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to rotate secret key ${input.secretKeyId} for project ${existingKey.projectId}`,
+        );
+
+        const { rawKey, ...newKey } = yield* generateSecretKeyFn();
+        const now = new Date();
+        yield* db
+          .update(apiKeys)
+          .set({ ...newKey, updatedAt: now, createdAt: now })
+          .where(eq(apiKeys.id, input.secretKeyId));
+
+        yield* auditLog
+          .append({
+            projectId: existingKey.projectId,
+            entityType: AuditLogEntityType.ApiKey,
+            entityId: input.secretKeyId,
+            action: AuditLogAction.Updated,
+          })
+          .pipe(Effect.ignore);
+
+        return { ...existingKey, ...newKey, rawKey };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    const deleteSecretKey = Effect.fn("deleteSecretKey")(
+      function* (input: { readonly secretKeyId: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", input.secretKeyId);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        const existingKey = yield* db.query.apiKeys.findFirst({
+          where: { id: input.secretKeyId },
+        });
+        if (!existingKey) {
+          return yield* Effect.fail(new ApiKeyNotFoundError({ apiKeyId: input.secretKeyId }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", existingKey.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.is_public", existingKey.isPublic);
+        if (existingKey.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", existingKey.prefix);
+        if (existingKey.end)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.end", existingKey.end);
+        yield* checkProjectPermission(
+          existingKey.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to delete secret key ${input.secretKeyId} for project ${existingKey.projectId}`,
+        );
+
+        yield* db.delete(apiKeys).where(eq(apiKeys.id, input.secretKeyId));
+
+        yield* auditLog
+          .append({
+            projectId: existingKey.projectId,
+            entityType: AuditLogEntityType.ApiKey,
+            entityId: input.secretKeyId,
+            action: AuditLogAction.Deleted,
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    /**
+     * Mints a user-scoped api key for the authenticated user. The caller
+     * supplies a display `name` and the `prefix` that namespaces the key by
+     * intended use (e.g. `vh_cli_` for keys minted by the CLI device-auth
+     * flow). Returns the raw key once — the database stores only its
+     * SHA-256 hash.
+     */
+    const createUserApiKey = Effect.fn("createUserApiKey")(
+      function* (input: { readonly name: string; readonly prefix: string }) {
+        const session = yield* AuthSession;
+        if (!session?.user?.id) {
+          return yield* Effect.fail(
+            new ApiKeyServiceError({ cause: "User api key creation requires a user session." }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (input.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", input.prefix);
+
+        const { rawKey, ...userApiKey } = yield* generateUserApiKeyFn(input.prefix);
+        const apiKeyId = crypto.randomUUID();
+        const now = new Date();
+        yield* db.insert(apikey).values({
+          createdAt: now,
+          end: userApiKey.end,
+          id: apiKeyId,
+          key: userApiKey.key,
+          name: input.name,
+          prefix: userApiKey.prefix,
+          updatedAt: now,
+          userId: session.user.id,
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", apiKeyId);
+        if (userApiKey.end)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.end", userApiKey.end);
+
+        return {
+          createdAt: now,
+          end: userApiKey.end,
+          id: apiKeyId,
+          name: input.name,
+          prefix: userApiKey.prefix,
+          rawKey,
+        };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    /** Lists user-scoped api keys for the authenticated user. */
+    const listUserApiKeys = Effect.fn("listUserApiKeys")(
+      function* () {
+        const session = yield* AuthSession;
+        if (!session?.user?.id) {
+          return yield* Effect.fail(
+            new ApiKeyServiceError({ cause: "Listing user api keys requires a user session." }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        return yield* db.query.apikey.findMany({
+          orderBy: { createdAt: "asc" },
+          where: { userId: session.user.id },
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    /** Revokes a user-scoped api key owned by the authenticated user. */
+    const revokeUserApiKey = Effect.fn("revokeUserApiKey")(
+      function* (input: { readonly userApiKeyId: string }) {
+        const session = yield* AuthSession;
+        if (!session?.user?.id) {
+          return yield* Effect.fail(
+            new ApiKeyServiceError({ cause: "Revoking user api keys requires a user session." }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", input.userApiKeyId);
+
+        const existing = yield* db.query.apikey.findFirst({
+          where: { id: input.userApiKeyId },
+        });
+        if (!existing || existing.userId !== session.user.id) {
+          return yield* Effect.fail(new ApiKeyNotFoundError({ apiKeyId: input.userApiKeyId }));
+        }
+
+        yield* db.delete(apikey).where(eq(apikey.id, input.userApiKeyId));
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    /**
+     * Validates a user-scoped api key by raw value. Hashes the key, looks it
+     * up, and rejects disabled or expired records. No auth session required —
+     * this is used by request middleware to establish identity.
+     */
+    const validateUserApiKey = Effect.fn("validateUserApiKey")(
+      function* (rawKey: string) {
+        const hashed = yield* hashKey(rawKey);
+        const record = (yield* db.query.apikey.findFirst({
+          where: { key: hashed },
+          with: { user: true },
+        })) as UserApiKeyWithUser | undefined;
+
+        if (!record?.user || record.enabled === false || isExpired(record.expiresAt)) {
+          // Never echo the raw (secret-equivalent) key — omit the id entirely.
+          return yield* Effect.fail(new ApiKeyNotFoundError({}));
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", record.id);
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", record.userId);
+        if (record.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", record.prefix);
+        if (record.end) yield* Effect.annotateCurrentSpan("voidhash.api_key.end", record.end);
+
+        return record;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    /**
+     * Validates a project-scoped secret key by raw value. Hashes it and looks
+     * it up where `isPublic = false`. No auth session required.
+     */
+    const validateSecretKey = Effect.fn("validateSecretKey")(
+      function* (rawKey: string) {
+        const hashed = yield* hashKey(rawKey);
+        const record = (yield* db.query.apiKeys.findFirst({
+          where: { key: hashed, isPublic: false },
+          with: { project: true },
+        })) as ApiKeyWithProject | undefined;
+
+        if (!record) {
+          // Never echo the raw (secret-equivalent) key — omit the id entirely.
+          return yield* Effect.fail(new ApiKeyNotFoundError({}));
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", record.id);
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.is_public", record.isPublic);
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", record.projectId);
+        if (record.project?.organizationId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.id",
+            record.project.organizationId,
+          );
+        if (record.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", record.prefix);
+        if (record.end) yield* Effect.annotateCurrentSpan("voidhash.api_key.end", record.end);
+
+        return record;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    /**
+     * Validates a project-scoped publishable key by raw value. Publishable
+     * keys are not hashed — they are embedded in client SDKs — so this is a
+     * direct lookup where `isPublic = true`.
+     */
+    const validatePublishableKey = Effect.fn("validatePublishableKey")(
+      function* (rawKey: string) {
+        const record = (yield* db.query.apiKeys.findFirst({
+          where: { key: rawKey, isPublic: true },
+          with: { project: true },
+        })) as ApiKeyWithProject | undefined;
+
+        if (!record) {
+          // Never echo the raw (secret-equivalent) key — omit the id entirely.
+          return yield* Effect.fail(new ApiKeyNotFoundError({}));
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", record.id);
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.is_public", record.isPublic);
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", record.projectId);
+        if (record.project?.organizationId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.id",
+            record.project.organizationId,
+          );
+        if (record.prefix)
+          yield* Effect.annotateCurrentSpan("voidhash.api_key.prefix", record.prefix);
+        if (record.end) yield* Effect.annotateCurrentSpan("voidhash.api_key.end", record.end);
+
+        return record;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (e) =>
+              Effect.fail(new ApiKeyServiceError({ cause: String(e.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      createSecretKey,
+      createUserApiKey,
+      deleteSecretKey,
+      getApiKeyById,
+      getApiKeys,
+      listUserApiKeys,
+      revokeUserApiKey,
+      rotateSecretKey,
+      validatePublishableKey,
+      validateSecretKey,
+      validateUserApiKey,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(ApiKeyService)(ApiKeyService.make);
+}
diff --git a/packages/core/src/services/apiKeys/api-keys.ts b/packages/core/src/services/apiKeys/api-keys.ts
new file mode 100644
index 000000000..327c0d06a
--- /dev/null
+++ b/packages/core/src/services/apiKeys/api-keys.ts
@@ -0,0 +1,103 @@
+import { Effect } from "effect";
+
+import { base64Url, createHash, type SHAFamily, type TypedArray } from "./create-hash.ts";
+
+export interface SecretKey {
+  id: string;
+  key: string;
+  isPublic: false;
+  end: string;
+  prefix: string;
+}
+
+export interface PublishableKey {
+  id: string;
+  key: string;
+  isPublic: true;
+  end: string;
+  prefix: string;
+}
+
+export const PRODUCTION_SECRET_KEY_PREFIX = "vh_sk_";
+export const PRODUCTION_PUBLISHABLE_KEY_PREFIX = "vh_pk_";
+export const KEY_END_LENGTH = 4;
+
+const createHashEf = (algorithm: SHAFamily) =>
+  Effect.succeed({
+    digest: (input: string | ArrayBuffer | TypedArray) =>
+      Effect.promise(() => createHash(algorithm).digest(input)),
+  });
+
+const keyGenerator = (options: { length: number; prefix: string | undefined }) =>
+  Effect.sync(() => {
+    const characters = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+    let apiKey = `${options.prefix || ""}`;
+    for (const _ of Array.from({ length: options.length })) {
+      apiKey += characters[Math.floor(Math.random() * characters.length)];
+    }
+    return apiKey;
+  });
+
+export const hashKey = (key: string) =>
+  createHashEf("SHA-256").pipe(
+    Effect.flatMap((hashingFn) => hashingFn.digest(key)),
+    Effect.map((hash) => base64Url.encode(hash, { padding: false })),
+  );
+
+export const generateSecretKey = () =>
+  keyGenerator({
+    length: 32,
+    prefix: PRODUCTION_SECRET_KEY_PREFIX,
+  });
+
+export const generatePublishableKey = () =>
+  keyGenerator({
+    length: 32,
+    prefix: PRODUCTION_PUBLISHABLE_KEY_PREFIX,
+  });
+
+export const createPublishableKey = () =>
+  generatePublishableKey().pipe(
+    Effect.map((key) => ({
+      end: key.slice(-KEY_END_LENGTH),
+      isPublic: true as const,
+      key,
+      prefix: PRODUCTION_PUBLISHABLE_KEY_PREFIX,
+      rawKey: key,
+    })),
+  );
+
+export const createSecretKey = () =>
+  Effect.gen(function* () {
+    const key = yield* generateSecretKey();
+    const hashed = yield* hashKey(key);
+    const end = key.slice(key.length - KEY_END_LENGTH);
+
+    return {
+      end,
+      isPublic: false as const,
+      key: hashed,
+      prefix: PRODUCTION_SECRET_KEY_PREFIX,
+      rawKey: key,
+    };
+  });
+
+export const generateUserApiKey = (prefix: string) =>
+  keyGenerator({
+    length: 32,
+    prefix,
+  });
+
+export const createUserApiKey = (prefix: string) =>
+  Effect.gen(function* () {
+    const key = yield* generateUserApiKey(prefix);
+    const hashed = yield* hashKey(key);
+    const end = key.slice(key.length - KEY_END_LENGTH);
+
+    return {
+      end,
+      key: hashed,
+      prefix,
+      rawKey: key,
+    };
+  });
diff --git a/packages/core/src/services/apiKeys/create-hash.ts b/packages/core/src/services/apiKeys/create-hash.ts
new file mode 100644
index 000000000..27e487fdb
--- /dev/null
+++ b/packages/core/src/services/apiKeys/create-hash.ts
@@ -0,0 +1,146 @@
+import { subtle } from "uncrypto";
+
+export type TypedArray =
+  | Uint8Array
+  | Int8Array
+  | Uint16Array
+  | Int16Array
+  | Uint32Array
+  | Int32Array
+  | Float32Array
+  | Float64Array
+  | BigInt64Array
+  | BigUint64Array;
+
+export type SHAFamily = "SHA-1" | "SHA-256" | "SHA-384" | "SHA-512";
+export type EncodingFormat = "hex" | "base64" | "base64url" | "base64urlnopad" | "none";
+
+const getAlphabet = (urlSafe: boolean): string =>
+  urlSafe
+    ? "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"
+    : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+
+const base64Encode = (data: Uint8Array, alphabet: string, padding: boolean): string => {
+  let result = "";
+  let buffer = 0;
+  let shift = 0;
+
+  for (const byte of data) {
+    buffer = (buffer << 8) | byte;
+    shift += 8;
+    while (shift >= 6) {
+      shift -= 6;
+      result += alphabet[(buffer >> shift) & 0x3f];
+    }
+  }
+
+  if (shift > 0) {
+    result += alphabet[(buffer << (6 - shift)) & 0x3f];
+  }
+
+  if (padding) {
+    const padCount = (4 - (result.length % 4)) % 4;
+    result += "=".repeat(padCount);
+  }
+
+  return result;
+};
+
+const base64Decode = (data: string, alphabet: string): Uint8Array => {
+  const decodeMap = new Map<string, number>();
+  for (let i = 0; i < alphabet.length; i++) {
+    decodeMap.set(alphabet[i]!, i);
+  }
+  const result: number[] = [];
+  let buffer = 0;
+  let bitsCollected = 0;
+
+  for (const char of data) {
+    if (char === "=") {
+      break;
+    }
+    const value = decodeMap.get(char);
+    if (value === undefined) {
+      throw new Error(`Invalid Base64 character: ${char}`);
+    }
+    buffer = (buffer << 6) | value;
+    bitsCollected += 6;
+
+    if (bitsCollected >= 8) {
+      bitsCollected -= 8;
+      result.push((buffer >> bitsCollected) & 0xff);
+    }
+  }
+
+  return Uint8Array.from(result);
+};
+
+const toUint8Array = (data: ArrayBuffer | TypedArray): Uint8Array => {
+  if (data instanceof ArrayBuffer) {
+    return new Uint8Array(data);
+  }
+  if (data instanceof BigInt64Array || data instanceof BigUint64Array) {
+    return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+  }
+  return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+};
+
+const base64 = {
+  decode(data: string | ArrayBuffer | TypedArray) {
+    if (typeof data !== "string") {
+      data = new TextDecoder().decode(toUint8Array(data));
+    }
+    const urlSafe = data.includes("-") || data.includes("_");
+    const alphabet = getAlphabet(urlSafe);
+    return base64Decode(data, alphabet);
+  },
+  encode(data: ArrayBuffer | TypedArray | string, options: { padding?: boolean } = {}) {
+    const alphabet = getAlphabet(false);
+    const buffer = typeof data === "string" ? new TextEncoder().encode(data) : toUint8Array(data);
+    return base64Encode(buffer, alphabet, options.padding ?? true);
+  },
+};
+
+export const base64Url = {
+  decode(data: string) {
+    const urlSafe = data.includes("-") || data.includes("_");
+    const alphabet = getAlphabet(urlSafe);
+    return base64Decode(data, alphabet);
+  },
+  encode(data: ArrayBuffer | TypedArray | string, options: { padding?: boolean } = {}) {
+    const alphabet = getAlphabet(true);
+    const buffer = typeof data === "string" ? new TextEncoder().encode(data) : toUint8Array(data);
+    return base64Encode(buffer, alphabet, options.padding ?? true);
+  },
+};
+
+export const createHash = <Encoding extends EncodingFormat = "none">(
+  algorithm: SHAFamily,
+  encoding?: Encoding,
+) => ({
+  digest: async (
+    input: string | ArrayBuffer | TypedArray,
+  ): Promise<Encoding extends "none" ? ArrayBuffer : string> => {
+    const encoder = new TextEncoder();
+    const encoded = typeof input === "string" ? encoder.encode(input) : toUint8Array(input);
+    const data = new Uint8Array(encoded);
+    const hashBuffer = await subtle.digest(algorithm, data);
+
+    if (encoding === "hex") {
+      const hashArray = [...new Uint8Array(hashBuffer)];
+      const hashHex = hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+      return hashHex as Encoding extends "none" ? ArrayBuffer : string;
+    }
+
+    if (encoding === "base64" || encoding === "base64url" || encoding === "base64urlnopad") {
+      if (encoding.includes("url")) {
+        return base64Url.encode(hashBuffer, {
+          padding: encoding !== "base64urlnopad",
+        }) as Encoding extends "none" ? ArrayBuffer : string;
+      }
+      const hashBase64 = base64.encode(hashBuffer);
+      return hashBase64 as Encoding extends "none" ? ArrayBuffer : string;
+    }
+    return hashBuffer as Encoding extends "none" ? ArrayBuffer : string;
+  },
+});
diff --git a/packages/core/src/services/apiKeys/index.ts b/packages/core/src/services/apiKeys/index.ts
new file mode 100644
index 000000000..d449bc438
--- /dev/null
+++ b/packages/core/src/services/apiKeys/index.ts
@@ -0,0 +1 @@
+export * from "./ApiKeyService.ts";
diff --git a/packages/core/src/services/auditLog/AuditLogPort.test.ts b/packages/core/src/services/auditLog/AuditLogPort.test.ts
new file mode 100644
index 000000000..574b088c4
--- /dev/null
+++ b/packages/core/src/services/auditLog/AuditLogPort.test.ts
@@ -0,0 +1,21 @@
+import { AuditLogAction, AuditLogEntityType } from "@voidhash/db";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { AuditLogPort } from "./AuditLogPort.ts";
+
+describe("AuditLogPort", () => {
+  it("provides a no-op community extension", async () => {
+    const program = Effect.gen(function* () {
+      const auditLog = yield* AuditLogPort;
+      yield* auditLog.append({
+        action: AuditLogAction.Created,
+        entityId: "project_1",
+        entityType: AuditLogEntityType.Project,
+        projectId: "project_1",
+      });
+    }).pipe(Effect.provide(AuditLogPort.noop));
+
+    await expect(Effect.runPromise(program)).resolves.toBeUndefined();
+  });
+});
diff --git a/packages/core/src/services/auditLog/AuditLogPort.ts b/packages/core/src/services/auditLog/AuditLogPort.ts
new file mode 100644
index 000000000..1d6caef03
--- /dev/null
+++ b/packages/core/src/services/auditLog/AuditLogPort.ts
@@ -0,0 +1,37 @@
+import {
+  type AuditLogActionValue,
+  type AuditLogActorTypeValue,
+  type AuditLogEntityTypeValue,
+} from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+export interface AuditLogAppendInput {
+  readonly projectId: string;
+  readonly entityType: AuditLogEntityTypeValue;
+  readonly entityId: string;
+  readonly parentEntityId?: string;
+  readonly action: AuditLogActionValue;
+  readonly actorType?: AuditLogActorTypeValue;
+  readonly changes?: unknown;
+  readonly metadata?: Record<string, unknown>;
+}
+
+/** Stable error exposed by the optional audit extension to core mutations. */
+export class AuditLogPortError extends Schema.TaggedErrorClass<AuditLogPortError>(
+  "AuditLogPortError",
+)("AuditLogPortError", { cause: Schema.String }) {}
+
+export interface AuditLogPortShape {
+  /** Records an immutable audit event when the deployment enables auditing. */
+  readonly append: (input: AuditLogAppendInput) => Effect.Effect<void, AuditLogPortError>;
+}
+
+/** Optional extension point used by core mutations to emit audit events. */
+export class AuditLogPort extends Context.Service<AuditLogPort, AuditLogPortShape>()(
+  "@voidhash/core/AuditLogPort",
+) {
+  /** Community layer for deployments without the enterprise audit extension. */
+  static readonly noop: Layer.Layer<AuditLogPort> = Layer.succeed(AuditLogPort, {
+    append: () => Effect.void,
+  });
+}
diff --git a/packages/core/src/services/auditLog/index.ts b/packages/core/src/services/auditLog/index.ts
new file mode 100644
index 000000000..32c5a6aa7
--- /dev/null
+++ b/packages/core/src/services/auditLog/index.ts
@@ -0,0 +1 @@
+export * from "./AuditLogPort.ts";
diff --git a/packages/core/src/services/auth/AuthTokenVerifier.ts b/packages/core/src/services/auth/AuthTokenVerifier.ts
new file mode 100644
index 000000000..920601a49
--- /dev/null
+++ b/packages/core/src/services/auth/AuthTokenVerifier.ts
@@ -0,0 +1,65 @@
+import { Context, Data, Effect, Schema } from "effect";
+
+/** Stable failure raised when an authentication token cannot be parsed or verified. */
+export class JwtAuthError extends Data.TaggedError("JwtAuthError")<{
+  readonly cause?: unknown;
+  /**
+   * Enumerable rendering of `cause` for transports that serialize errors via
+   * `Object.keys`.
+   */
+  readonly detail?: string;
+  readonly message: string;
+}> {}
+
+/** Claims required from a verified WorkOS identity token. */
+export const JwtAuthPayloadSchema = Schema.Struct({
+  sub: Schema.String,
+  email: Schema.String,
+  name: Schema.optional(Schema.String),
+  image: Schema.optional(Schema.String),
+});
+
+/** Claims decoded from a verified WorkOS identity token. */
+export type JwtAuthPayload = typeof JwtAuthPayloadSchema.Type;
+
+/** Provider-qualified result returned by {@link AuthTokenVerifier}. */
+export const ValidatedJwtSchema = Schema.Struct({
+  payload: JwtAuthPayloadSchema,
+  provider: Schema.Literal("workos"),
+});
+
+/** Verified token plus the identity provider that issued it. */
+export type ValidatedJwt = typeof ValidatedJwtSchema.Type;
+
+/** Provider-neutral capability required by backend session resolution. */
+export interface AuthTokenVerifierShape {
+  readonly validateToken: (
+    token: string,
+  ) => Effect.Effect<ValidatedJwt, JwtAuthError>;
+}
+
+/**
+ * Verifies identity tokens without exposing the runtime used to cache keys or
+ * execute validation.
+ */
+export class AuthTokenVerifier extends Context.Service<
+  AuthTokenVerifier,
+  AuthTokenVerifierShape
+>()("@voidhash/core/AuthTokenVerifier") {}
+
+/** Extracts the raw token from a `Bearer <token>` Authorization header. */
+export const extractBearerToken = (
+  authorizationHeader: string | undefined,
+): Effect.Effect<string, JwtAuthError> => {
+  const token = authorizationHeader?.startsWith("Bearer ")
+    ? authorizationHeader.slice("Bearer ".length).trim()
+    : "";
+
+  return token.length > 0
+    ? Effect.succeed(token)
+    : Effect.fail(
+        new JwtAuthError({
+          message: "Expected an Authorization header of the form 'Bearer <token>'",
+        }),
+      );
+};
diff --git a/packages/core/src/services/auth/LocalUserSessionService.ts b/packages/core/src/services/auth/LocalUserSessionService.ts
new file mode 100644
index 000000000..fd5e0a1f1
--- /dev/null
+++ b/packages/core/src/services/auth/LocalUserSessionService.ts
@@ -0,0 +1,230 @@
+import { Context, Effect, Layer } from "effect";
+
+import {
+  Db,
+  type DbError,
+  eq,
+  inArray,
+  member,
+  organization,
+  projects,
+  user,
+  type User as DbUser,
+} from "@voidhash/db";
+
+import type { LocalUserAccess, LocalUserIdentity } from "../../domain/auth/LocalUserSession.ts";
+import { generateId } from "../../utils/generate-id.ts";
+
+const toLocalUserName = (identity: LocalUserIdentity): string => {
+  const name = [identity.firstName, identity.lastName].filter(Boolean).join(" ").trim();
+  return name.length > 0 ? name : identity.email;
+};
+
+export class LocalUserSessionService extends Context.Service<LocalUserSessionService>()(
+  "core/LocalUserSessionService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+
+      /**
+       * Resolves a WorkOS identity to the local user row, creating or updating
+       * it when needed. The WorkOS user id (`identity.id`) is matched against
+       * our own `workos_user_id` column — never treated as a local primary key.
+       * Email is the fallback match for rows whose `workos_user_id` has not been
+       * backfilled yet (e.g. created before the column existed), and the column
+       * is backfilled whenever such a row is matched.
+       */
+      const resolveLocalUser = (identity: LocalUserIdentity): Effect.Effect<DbUser, DbError, Db> =>
+        Effect.gen(function* () {
+          const matchedByWorkosId = yield* db.query.user.findFirst({
+            where: { workosUserId: identity.id },
+          });
+
+          const matchedUser =
+            matchedByWorkosId ??
+            (yield* db.query.user.findFirst({
+              where: { email: identity.email },
+            }));
+
+          const nextName = toLocalUserName(identity);
+          const nextImage = identity.profilePictureUrl ?? null;
+
+          if (matchedUser) {
+            const needsUpdate =
+              matchedUser.email !== identity.email ||
+              matchedUser.emailVerified !== identity.emailVerified ||
+              matchedUser.image !== nextImage ||
+              matchedUser.name !== nextName ||
+              matchedUser.workosUserId !== identity.id;
+
+            if (needsUpdate) {
+              yield* db
+                .update(user)
+                .set({
+                  email: identity.email,
+                  emailVerified: identity.emailVerified,
+                  image: nextImage,
+                  name: nextName,
+                  workosUserId: identity.id,
+                })
+                .where(eq(user.id, matchedUser.id));
+
+              return {
+                ...matchedUser,
+                email: identity.email,
+                emailVerified: identity.emailVerified,
+                image: nextImage,
+                name: nextName,
+                workosUserId: identity.id,
+              } satisfies DbUser;
+            }
+
+            return matchedUser;
+          }
+
+          const createdUser: DbUser = {
+            banned: false,
+            banExpires: null,
+            banReason: null,
+            createdAt: new Date(),
+            customImageUrl: null,
+            email: identity.email,
+            emailVerified: identity.emailVerified,
+            id: generateId("user"),
+            image: nextImage,
+            name: nextName,
+            role: null,
+            updatedAt: new Date(),
+            workosUserId: identity.id,
+          };
+
+          // A brand-new user can be resolved by several authenticated paths at
+          // once right after sign-up — the dashboard's first load, the WorkOS
+          // `user.created` webhook, and the eager post-sign-up provisioning —
+          // and they all miss the lookups above and race to INSERT the same
+          // (unique) email + `workos_user_id`. Upsert so the losing inserts
+          // become no-ops instead of failing with a duplicate-key
+          // `DatabaseError` (which surfaced as "Failed to authenticate due to a
+          // database error"), then read back the row that actually persisted:
+          // each racer generates its own local `id`, so the winning `id` may
+          // not be the one we just built.
+          yield* db
+            .insert(user)
+            .values(createdUser)
+            // The INSERT can collide on EITHER the unique email OR the unique
+            // workos_user_id. Postgres ON CONFLICT targets a single
+            // constraint, so DO NOTHING (no target) absorbs any unique
+            // violation as a no-op; the row that actually persisted is read
+            // back below.
+            .onConflictDoNothing();
+
+          // Read back by EITHER unique key: the prior MySQL upsert healed
+          // `email` to `identity.email` on any duplicate, but DO NOTHING leaves
+          // the surviving row untouched, so a collision resolved on
+          // `workos_user_id` (rather than `email`) is only found via that key.
+          const persistedUser = yield* db.query.user.findFirst({
+            where: {
+              OR: [{ email: identity.email }, { workosUserId: identity.id }],
+            },
+          });
+
+          return persistedUser ?? createdUser;
+        });
+
+      /** Loads the organizations and projects available to a local user. */
+      const loadUserAccess = (userId: string): Effect.Effect<LocalUserAccess, DbError, Db> =>
+        Effect.gen(function* () {
+          const memberships = yield* db
+            .select({
+              organizationId: organization.id,
+              organizationLogo: organization.logo,
+              organizationName: organization.name,
+              organizationSlug: organization.slug,
+              workosOrganizationId: organization.workosOrganizationId,
+            })
+            .from(member)
+            .innerJoin(organization, eq(member.organizationId, organization.id))
+            .where(eq(member.userId, userId));
+
+          const organizationIds = memberships.map((membership) => membership.organizationId);
+          const accessibleProjects =
+            organizationIds.length === 0
+              ? []
+              : yield* db
+                  .select({
+                    id: projects.id,
+                    logo: projects.logo,
+                    name: projects.name,
+                    organizationId: projects.organizationId,
+                    slug: projects.slug,
+                  })
+                  .from(projects)
+                  .where(inArray(projects.organizationId, organizationIds));
+
+          return {
+            organizations: memberships.map((membership) => ({
+              id: membership.organizationId,
+              logo: membership.organizationLogo ?? null,
+              name: membership.organizationName,
+              permissions: ["organization:all"],
+              slug: membership.organizationSlug ?? membership.organizationId,
+              workosOrganizationId: membership.workosOrganizationId,
+            })),
+            projects: accessibleProjects.map((project) => ({
+              id: project.id,
+              logo: project.logo ?? null,
+              name: project.name,
+              organizationId: project.organizationId,
+              permissions: ["project:all"],
+              slug: project.slug,
+            })),
+          };
+        });
+
+      /** Converts a local user row and loaded access into an RPC-compatible user session. */
+      const toUserSession = (
+        dbUser: DbUser,
+        access: LocalUserAccess,
+        cookie: string | null,
+        workosUserId: string | null,
+      ) => ({
+        cookie,
+        method: "user" as const,
+        name: `${dbUser.name} <${dbUser.email}>`,
+        organizations: access.organizations,
+        person: null,
+        projects: access.projects,
+        user: {
+          createdAt: dbUser.createdAt,
+          email: dbUser.email,
+          emailVerified: dbUser.emailVerified,
+          id: dbUser.id,
+          // A user-uploaded avatar (never touched by the WorkOS sync) overrides
+          // the WorkOS profile picture mirrored into `image`.
+          image: dbUser.customImageUrl ?? dbUser.image ?? null,
+          name: dbUser.name,
+          role: dbUser.role ?? null,
+          updatedAt: dbUser.updatedAt,
+          workosUserId,
+        },
+      });
+
+      /** Fetches a local user by id. */
+      const getLocalUser = (userId: string): Effect.Effect<DbUser | undefined, DbError, Db> =>
+        Effect.gen(function* () {
+          return yield* db.query.user.findFirst({
+            where: { id: userId },
+          });
+        });
+
+      return {
+        getLocalUser,
+        loadUserAccess,
+        resolveLocalUser,
+        toUserSession,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(LocalUserSessionService)(LocalUserSessionService.make);
+}
diff --git a/packages/core/src/services/auth/Workos.ts b/packages/core/src/services/auth/Workos.ts
new file mode 100644
index 000000000..de2fc9d68
--- /dev/null
+++ b/packages/core/src/services/auth/Workos.ts
@@ -0,0 +1,369 @@
+import {
+  type Event as WorkosEvent,
+  type Organization as WorkosOrganization,
+  type OrganizationMembership as WorkosOrganizationMembership,
+  WorkOS,
+  type User as WorkOSUser,
+} from "@workos-inc/node";
+import { Context, Data, Effect, Layer } from "effect";
+
+export interface WorkosConfig {
+  readonly apiKey: Effect.Effect<string>;
+  readonly clientId: Effect.Effect<string>;
+  readonly cookieName: Effect.Effect<string>;
+  readonly cookiePassword: Effect.Effect<string>;
+  readonly webhookSecret: Effect.Effect<string>;
+}
+
+export class WorkosAuthError extends Data.TaggedError("WorkosAuthError")<{
+  readonly cause?: unknown;
+  readonly message: string;
+}> {}
+
+type AuthenticatedSession = {
+  readonly accessToken: string;
+  readonly organizationId?: string;
+  readonly permissions?: string[];
+  readonly role?: string;
+  readonly roles?: string[];
+  readonly sessionId: string;
+  readonly user: WorkOSUser;
+};
+
+/**
+ * Format a WorkOS SDK rejection into a single human-readable string. The SDK
+ * throws `WorkOSResponseError`-shaped objects whose useful fields live under
+ * `rawData` (`message`, `code`, `errors`) and on `status` — without this
+ * normalization the `Error.message` we surface is empty and the cause is just
+ * `[object Object]`.
+ */
+const describeWorkosError = (cause: unknown): string => {
+  if (cause instanceof Error && cause.message) {
+    return cause.message;
+  }
+  const data = cause as {
+    readonly status?: number;
+    readonly rawData?: {
+      readonly message?: string;
+      readonly code?: string;
+      readonly errors?: unknown;
+    };
+    readonly message?: string;
+  } | null;
+  if (data) {
+    const parts: string[] = [];
+    if (data.status) parts.push(`HTTP ${data.status}`);
+    if (data.rawData?.code) parts.push(data.rawData.code);
+    if (data.rawData?.message) parts.push(data.rawData.message);
+    else if (data.message) parts.push(data.message);
+    if (data.rawData?.errors) parts.push(JSON.stringify(data.rawData.errors));
+    if (parts.length > 0) return parts.join(" — ");
+  }
+  try {
+    return JSON.stringify(cause);
+  } catch {
+    return String(cause);
+  }
+};
+
+const getCookieValue = (cookieHeader: string | null | undefined, cookieName: string) => {
+  if (!cookieHeader) {
+    return undefined;
+  }
+
+  for (const segment of cookieHeader.split(";")) {
+    const trimmed = segment.trim();
+    if (!trimmed.startsWith(`${cookieName}=`)) {
+      continue;
+    }
+
+    return decodeURIComponent(trimmed.slice(cookieName.length + 1));
+  }
+
+  return undefined;
+};
+
+const makeWorkos = (config: WorkosConfig) =>
+  Effect.gen(function* () {
+    const apiKey = (yield* config.apiKey).trim();
+    const clientId = (yield* config.clientId).trim();
+    const cookiePassword = (yield* config.cookiePassword).trim();
+    const webhookSecret = (yield* config.webhookSecret).trim();
+    const cookieName = (yield* config.cookieName).trim();
+
+    const workos = new WorkOS(apiKey, { clientId });
+    const jwksUrl = workos.userManagement.getJwksUrl(clientId);
+
+    const authenticateSessionCookie = (headers: Headers) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: "Failed to authenticate WorkOS session cookie",
+          }),
+        try: async (): Promise<AuthenticatedSession | null> => {
+          const sessionData = getCookieValue(headers.get("cookie"), cookieName);
+          if (!sessionData) {
+            return null;
+          }
+
+          const session = workos.userManagement.loadSealedSession({
+            cookiePassword,
+            sessionData,
+          });
+
+          const authResponse = await session.authenticate();
+          if (!authResponse.authenticated) {
+            return null;
+          }
+
+          return {
+            accessToken: authResponse.accessToken,
+            organizationId: authResponse.organizationId,
+            permissions: authResponse.permissions,
+            role: authResponse.role,
+            roles: authResponse.roles,
+            sessionId: authResponse.sessionId,
+            user: authResponse.user,
+          };
+        },
+      });
+
+    const getUser = (userId: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to fetch WorkOS user ${userId}`,
+          }),
+        try: () => workos.userManagement.getUser(userId),
+      });
+
+    const setUserExternalId = (workosUserId: string, externalId: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to set WorkOS external id for user ${workosUserId}`,
+          }),
+        try: () =>
+          workos.userManagement.updateUser({
+            externalId,
+            userId: workosUserId,
+          }),
+      });
+
+    const createOrganization = (input: { readonly name: string; readonly externalId: string }) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to create WorkOS organization for external id ${input.externalId}: ${describeWorkosError(cause)}`,
+          }),
+        try: (): Promise<WorkosOrganization> =>
+          workos.organizations.createOrganization({
+            externalId: input.externalId,
+            name: input.name,
+          }),
+      });
+
+    const updateOrganization = (input: {
+      readonly workosOrganizationId: string;
+      readonly name?: string;
+    }) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to update WorkOS organization ${input.workosOrganizationId}: ${describeWorkosError(cause)}`,
+          }),
+        try: (): Promise<WorkosOrganization> =>
+          workos.organizations.updateOrganization({
+            name: input.name,
+            organization: input.workosOrganizationId,
+          }),
+      });
+
+    const deleteOrganization = (workosOrganizationId: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to delete WorkOS organization ${workosOrganizationId}: ${describeWorkosError(cause)}`,
+          }),
+        try: (): Promise<void> => workos.organizations.deleteOrganization(workosOrganizationId),
+      });
+
+    /**
+     * Look up a WorkOS organization by the `external_id` we set on creation
+     * (= local UUID). Returns `null` when WorkOS reports a 404 so callers can
+     * treat absence as a normal control-flow case.
+     */
+    const getOrganizationByExternalId = (externalId: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to get WorkOS organization by external id ${externalId}`,
+          }),
+        try: (): Promise<WorkosOrganization> =>
+          workos.organizations.getOrganizationByExternalId(externalId),
+      }).pipe(
+        Effect.catch((error) => {
+          // The SDK throws `NotFoundException` (status 404) when no org has
+          // the given external id; treat that as a normal "absent" result.
+          // Other transports surface the same condition as a generic error
+          // with `rawData.code === "entity_not_found"`.
+          const cause = error.cause as {
+            name?: string;
+            status?: number;
+            rawData?: { code?: string };
+          } | null;
+          const isNotFound =
+            cause?.name === "NotFoundException" ||
+            cause?.status === 404 ||
+            cause?.rawData?.code === "entity_not_found";
+          if (isNotFound) {
+            return Effect.succeed(null as WorkosOrganization | null);
+          }
+          return Effect.fail(error);
+        }),
+      );
+
+    /** Fetch a WorkOS organization by WorkOS id. */
+    const getOrganization = (workosOrganizationId: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to get WorkOS organization ${workosOrganizationId}: ${describeWorkosError(cause)}`,
+          }),
+        try: (): Promise<WorkosOrganization> =>
+          workos.organizations.getOrganization(workosOrganizationId),
+      });
+
+    const createOrganizationMembership = (input: {
+      readonly workosOrganizationId: string;
+      readonly workosUserId: string;
+      readonly roleSlug?: string;
+    }) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to create WorkOS membership for user ${input.workosUserId} in org ${input.workosOrganizationId}: ${describeWorkosError(cause)}`,
+          }),
+        try: (): Promise<WorkosOrganizationMembership> =>
+          workos.userManagement.createOrganizationMembership({
+            organizationId: input.workosOrganizationId,
+            roleSlug: input.roleSlug,
+            userId: input.workosUserId,
+          }),
+      });
+
+    const updateOrganizationMembership = (
+      workosMembershipId: string,
+      input: { readonly roleSlug: string },
+    ) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to update WorkOS membership ${workosMembershipId}: ${describeWorkosError(cause)}`,
+          }),
+        try: (): Promise<WorkosOrganizationMembership> =>
+          workos.userManagement.updateOrganizationMembership(workosMembershipId, {
+            roleSlug: input.roleSlug,
+          }),
+      });
+
+    const deleteOrganizationMembership = (workosMembershipId: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to delete WorkOS membership ${workosMembershipId}: ${describeWorkosError(cause)}`,
+          }),
+        try: (): Promise<void> =>
+          workos.userManagement.deleteOrganizationMembership(workosMembershipId),
+      });
+
+    /** List active organization memberships for a WorkOS user. */
+    const listOrganizationMembershipsForUser = (workosUserId: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to list WorkOS memberships for user ${workosUserId}: ${describeWorkosError(cause)}`,
+          }),
+        try: async (): Promise<ReadonlyArray<WorkosOrganizationMembership>> => {
+          const result = await workos.userManagement.listOrganizationMemberships({
+            userId: workosUserId,
+          });
+          return result.autoPagination();
+        },
+      });
+
+    /** First WorkOS user whose email matches, or `null` if none. */
+    const findUserByEmail = (email: string) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: `Failed to look up WorkOS user by email ${email}: ${describeWorkosError(cause)}`,
+          }),
+        try: async (): Promise<WorkOSUser | null> => {
+          const result = await workos.userManagement.listUsers({ email });
+          return result.data[0] ?? null;
+        },
+      });
+
+    /**
+     * Verify a webhook signature and parse the event. Throws via WorkosAuthError
+     * on bad signatures, expired timestamps, or malformed payloads.
+     */
+    const verifyWebhook = (input: { readonly rawBody: string; readonly signatureHeader: string }) =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new WorkosAuthError({
+            cause,
+            message: "Failed to verify WorkOS webhook signature",
+          }),
+        try: (): Promise<WorkosEvent> => {
+          const payload = JSON.parse(input.rawBody) as Record<string, unknown>;
+          return workos.webhooks.constructEvent({
+            payload,
+            secret: webhookSecret,
+            sigHeader: input.signatureHeader,
+          });
+        },
+      });
+
+    return {
+      authenticateSessionCookie,
+      clientId,
+      cookieName,
+      createOrganization,
+      createOrganizationMembership,
+      deleteOrganization,
+      deleteOrganizationMembership,
+      findUserByEmail,
+      getJwksUrl: () => jwksUrl,
+      getOrganization,
+      getOrganizationByExternalId,
+      getUser,
+      listOrganizationMembershipsForUser,
+      setUserExternalId,
+      updateOrganization,
+      updateOrganizationMembership,
+      verifyWebhook,
+    };
+  });
+
+type WorkosService = Effect.Success<ReturnType<typeof makeWorkos>>;
+
+export class Workos extends Context.Service<Workos, WorkosService>()("core/Workos") {
+  /** Create a WorkOS service layer from already-bound runtime configuration. */
+  static layer = (config: WorkosConfig): Layer.Layer<Workos> =>
+    Layer.effect(Workos)(makeWorkos(config));
+}
diff --git a/packages/core/src/services/auth/WorkosLocalSyncService.test.ts b/packages/core/src/services/auth/WorkosLocalSyncService.test.ts
new file mode 100644
index 000000000..01e8eadaa
--- /dev/null
+++ b/packages/core/src/services/auth/WorkosLocalSyncService.test.ts
@@ -0,0 +1,160 @@
+import { Db, type User } from "@voidhash/db";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import type { LocalUserIdentity } from "../../domain/auth/LocalUserSession.ts";
+import {
+  OrganizationMembershipSyncPort,
+  OrganizationMembershipSyncPortError,
+} from "../organizations/OrganizationMembershipSyncPort.ts";
+import { LocalUserSessionService } from "./LocalUserSessionService.ts";
+import { Workos } from "./Workos.ts";
+import {
+  WorkosLocalSyncService,
+  WorkosLocalSyncServiceError,
+} from "./WorkosLocalSyncService.ts";
+
+const identity = (externalId: string | null = "local_user_1"): LocalUserIdentity => ({
+  email: "alice@example.com",
+  emailVerified: true,
+  externalId,
+  firstName: "Alice",
+  id: "workos_user_1",
+  lastName: "Example",
+  profilePictureUrl: null,
+});
+
+const localUser: User = {
+  banExpires: null,
+  banReason: null,
+  banned: false,
+  createdAt: new Date("2026-01-01T00:00:00.000Z"),
+  customImageUrl: null,
+  email: "alice@example.com",
+  emailVerified: true,
+  id: "local_user_1",
+  image: null,
+  name: "Alice Example",
+  role: null,
+  updatedAt: new Date("2026-01-01T00:00:00.000Z"),
+  workosUserId: "workos_user_1",
+};
+
+const makeTestLayer = (options: {
+  readonly membershipFailure?: boolean;
+  readonly setExternalIdFailure?: boolean;
+} = {}) => {
+  const membershipCalls: Array<{ localUserId: string; workosUserId: string }> = [];
+  const externalIdCalls: Array<{ externalId: string; workosUserId: string }> = [];
+
+  const Dependencies = Layer.mergeAll(
+    Layer.succeed(Db, {} as never),
+    Layer.succeed(
+      LocalUserSessionService,
+      {
+        resolveLocalUser: () => Effect.succeed(localUser),
+      } as never,
+    ),
+    Layer.succeed(
+      OrganizationMembershipSyncPort,
+      OrganizationMembershipSyncPort.of({
+        syncMemberships: (input) => {
+          membershipCalls.push(input);
+          return options.membershipFailure
+            ? Effect.fail(
+                new OrganizationMembershipSyncPortError({ cause: "membership sync failed" }),
+              )
+            : Effect.succeed({
+                syncedMembershipIds: ["member_1"],
+                syncedOrganizationIds: ["org_1"],
+              });
+        },
+      }),
+    ),
+    Layer.succeed(
+      Workos,
+      {
+        setUserExternalId: (workosUserId: string, externalId: string) => {
+          externalIdCalls.push({ externalId, workosUserId });
+          return options.setExternalIdFailure
+            ? Effect.fail({ _tag: "WorkosError" } as never)
+            : Effect.void;
+        },
+      } as never,
+    ),
+  );
+
+  return {
+    externalIdCalls,
+    layer: Layer.mergeAll(
+      Dependencies,
+      WorkosLocalSyncService.layer.pipe(Layer.provide(Dependencies)),
+    ),
+    membershipCalls,
+  };
+};
+
+describe("WorkosLocalSyncService", () => {
+  it("resolves the local user and delegates optional membership synchronization", async () => {
+    const testLayer = makeTestLayer();
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const sync = yield* WorkosLocalSyncService;
+        return yield* sync.syncAuthenticatedUser(identity());
+      }).pipe(Effect.provide(testLayer.layer)),
+    );
+
+    expect(result).toEqual({
+      localUser,
+      syncedMembershipIds: ["member_1"],
+      syncedOrganizationIds: ["org_1"],
+    });
+    expect(testLayer.membershipCalls).toEqual([
+      { localUserId: "local_user_1", workosUserId: "workos_user_1" },
+    ]);
+    expect(testLayer.externalIdCalls).toEqual([]);
+  });
+
+  it("best-effort backfills a missing WorkOS external id", async () => {
+    const testLayer = makeTestLayer();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const sync = yield* WorkosLocalSyncService;
+        yield* sync.syncAuthenticatedUser(identity(null));
+      }).pipe(Effect.provide(testLayer.layer)),
+    );
+
+    expect(testLayer.externalIdCalls).toEqual([
+      { externalId: "local_user_1", workosUserId: "workos_user_1" },
+    ]);
+  });
+
+  it("continues when the best-effort external-id backfill fails", async () => {
+    const testLayer = makeTestLayer({ setExternalIdFailure: true });
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const sync = yield* WorkosLocalSyncService;
+        return yield* sync.syncAuthenticatedUser(identity(null));
+      }).pipe(Effect.provide(testLayer.layer)),
+    );
+
+    expect(result.localUser.id).toBe("local_user_1");
+    expect(testLayer.membershipCalls).toHaveLength(1);
+  });
+
+  it("maps membership extension failures to the authentication-facing error", async () => {
+    const testLayer = makeTestLayer({ membershipFailure: true });
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const sync = yield* WorkosLocalSyncService;
+        return yield* Effect.result(sync.syncAuthenticatedUser(identity()));
+      }).pipe(Effect.provide(testLayer.layer)),
+    );
+
+    expect(result._tag).toBe("Failure");
+    if (result._tag === "Failure") {
+      expect(result.failure).toBeInstanceOf(WorkosLocalSyncServiceError);
+      expect(result.failure.cause).toBe("membership sync failed");
+    }
+  });
+});
diff --git a/packages/core/src/services/auth/WorkosLocalSyncService.ts b/packages/core/src/services/auth/WorkosLocalSyncService.ts
new file mode 100644
index 000000000..28b3aabb7
--- /dev/null
+++ b/packages/core/src/services/auth/WorkosLocalSyncService.ts
@@ -0,0 +1,77 @@
+import { Db, type User as DbUser } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import type { LocalUserIdentity } from "../../domain/auth/LocalUserSession.ts";
+import { OrganizationMembershipSyncPort } from "../organizations/OrganizationMembershipSyncPort.ts";
+import { LocalUserSessionService } from "./LocalUserSessionService.ts";
+import { Workos } from "./Workos.ts";
+
+/** Stable authentication-facing error for local WorkOS synchronization failures. */
+export class WorkosLocalSyncServiceError extends Schema.TaggedErrorClass<WorkosLocalSyncServiceError>(
+  "WorkosLocalSyncServiceError",
+)("WorkosLocalSyncServiceError", { cause: Schema.String }) {}
+
+export interface WorkosLocalSyncResult {
+  readonly localUser: DbUser;
+  readonly syncedMembershipIds: ReadonlyArray<string>;
+  readonly syncedOrganizationIds: ReadonlyArray<string>;
+}
+
+export interface WorkosLocalSyncServiceShape {
+  readonly syncAuthenticatedUser: (
+    identity: LocalUserIdentity,
+  ) => Effect.Effect<WorkosLocalSyncResult, WorkosLocalSyncServiceError, Db>;
+}
+
+/**
+ * Mirrors an authenticated WorkOS identity into the local user table, then
+ * delegates optional multi-user organization synchronization through
+ * {@link OrganizationMembershipSyncPort}.
+ */
+export class WorkosLocalSyncService extends Context.Service<
+  WorkosLocalSyncService,
+  WorkosLocalSyncServiceShape
+>()("WorkosLocalSyncService", {
+  make: Effect.gen(function* () {
+    const localUserSessions = yield* LocalUserSessionService;
+    const membershipSync = yield* OrganizationMembershipSyncPort;
+    const workos = yield* Workos;
+
+    const syncAuthenticatedUser = Effect.fn("WorkosLocalSyncService.syncAuthenticatedUser")(
+      function* (identity: LocalUserIdentity) {
+        if (identity.id) yield* Effect.annotateCurrentSpan("voidhash.user.workos_id", identity.id);
+
+        const localUser = yield* localUserSessions.resolveLocalUser(identity);
+        if (localUser.id) yield* Effect.annotateCurrentSpan("voidhash.user.id", localUser.id);
+
+        yield* !identity.externalId
+          ? workos
+              .setUserExternalId(identity.id, localUser.id)
+              .pipe(Effect.catch(() => Effect.void))
+          : Effect.void;
+
+        const synced = yield* membershipSync.syncMemberships({
+          localUserId: localUser.id,
+          workosUserId: identity.id,
+        });
+
+        return { localUser, ...synced } satisfies WorkosLocalSyncResult;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new WorkosLocalSyncServiceError({ cause: String(error.cause ?? error.message) }),
+              ),
+            OrganizationMembershipSyncPortError: (error) =>
+              Effect.fail(new WorkosLocalSyncServiceError({ cause: error.cause })),
+          }),
+        ),
+    );
+
+    return { syncAuthenticatedUser } as const;
+  }),
+}) {
+  static layer = Layer.effect(WorkosLocalSyncService)(WorkosLocalSyncService.make);
+}
diff --git a/packages/core/src/services/experiments/ExperimentService.ts b/packages/core/src/services/experiments/ExperimentService.ts
new file mode 100644
index 000000000..ce208bb9e
--- /dev/null
+++ b/packages/core/src/services/experiments/ExperimentService.ts
@@ -0,0 +1,1016 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  type InsertExperiment,
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  ExperimentStatus,
+  and,
+  eq,
+  experimentTreatments,
+  experimentVariants,
+  experiments,
+  isNull,
+  paywallLocationShowings,
+  PaywallLocationShowingType,
+} from "@voidhash/db";
+import {
+  type PaywallLocationTreatmentConfig,
+  type TreatmentType,
+  compileVariantPayload,
+  decodeTreatmentConfig,
+  isTreatmentType,
+} from "@voidhash/rpc";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  ExperimentKeyAlreadyExistsError,
+  ExperimentNotFoundError,
+  ExperimentTreatmentNotFoundError,
+  ExperimentValidationError,
+  ExperimentVariantNotFoundError,
+} from "../../domain/experiment/Experiment.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import {
+  EXPERIMENT_FLAG_OWNER_TYPE,
+  FeatureFlagService,
+} from "../featureFlags/FeatureFlagService.ts";
+
+/**
+ * Catch-all experiment service error. Wraps `DbError`/`SqlError`, backing-flag
+ * failures, and other infrastructural faults at the public-method boundary so
+ * callers see one stable error tag.
+ */
+export class ExperimentServiceError extends Schema.TaggedErrorClass<ExperimentServiceError>(
+  "ExperimentServiceError",
+)("ExperimentServiceError", { cause: Schema.String }) {}
+
+/** A variant as supplied to `replaceVariants` (the arms + their weights). */
+interface VariantInput {
+  readonly key: string;
+  readonly name: string;
+  readonly isControl: boolean;
+  readonly weightBps: number;
+}
+
+const paywallLocationConfig = (config: unknown): PaywallLocationTreatmentConfig =>
+  config as PaywallLocationTreatmentConfig;
+
+/**
+ * `ExperimentService` is the authoring + analysis + lifecycle entry point for
+ * the experiment aggregate. An experiment owns exactly one internal
+ * (`ownerType='experiment'`) feature flag which is the runtime assignment
+ * artifact: variants + weights are synced into `feature_flag_variant` rows and
+ * each variant's treatments are compiled into that row's `payload`, so the hot
+ * serve path reads only the flag. Lifecycle (`start`/`pause`/`conclude`) flips
+ * the flag's `enabled`/`rolloutBps` and wires the paywall-location showings.
+ *
+ * `Db`, `AuthSession`, `AuditLogPort`, and `FeatureFlagService` are provided
+ * by the application root. It deliberately does NOT depend on
+ * `PaywallLocationService` (which depends on it, at serve time) — lifecycle
+ * writes showing rows directly to avoid a service cycle.
+ */
+export class ExperimentService extends Context.Service<ExperimentService>()("ExperimentService", {
+  make: Effect.gen(function* () {
+    const auditLog = yield* AuditLogPort;
+    const db = yield* Db;
+    const featureFlagService = yield* FeatureFlagService;
+
+    /** Fold any infra/backing-flag error into the stable service error. */
+    const toServiceError = (error: { readonly cause?: unknown; readonly message?: unknown }) =>
+      Effect.fail(
+        new ExperimentServiceError({ cause: String(error.cause ?? error.message ?? error) }),
+      );
+
+    /**
+     * Compile the experiment's variants + treatments into the backing flag's
+     * variant rows: weights carry through and each variant's treatments compile
+     * into its runtime `payload` (the per-location map). Reuses
+     * `FeatureFlagService.updateFlagVariants` (transactional delete + reinsert,
+     * enforces sum===10000 and unique keys). Self-contained error-wise: only
+     * `EffectDrizzleQueryError` (from its own read) escapes untranslated.
+     */
+    const syncVariantsToFlag = (experimentId: string) =>
+      Effect.gen(function* () {
+        const experiment = yield* db.query.experiments.findFirst({
+          where: { id: experimentId },
+          with: {
+            variants: { where: { archivedAt: { isNull: true } } },
+            treatments: { where: { archivedAt: { isNull: true } } },
+          },
+        });
+        if (!experiment) {
+          return yield* Effect.fail(
+            new ExperimentServiceError({
+              cause: `Experiment ${experimentId} not found during sync`,
+            }),
+          );
+        }
+        const treatmentsByVariant = new Map<
+          string,
+          Array<{ treatmentType: string; config: unknown }>
+        >();
+        for (const t of experiment.treatments) {
+          const arr = treatmentsByVariant.get(t.variantId) ?? [];
+          arr.push({ treatmentType: t.treatmentType, config: t.config });
+          treatmentsByVariant.set(t.variantId, arr);
+        }
+        const variants = experiment.variants.map((v) => ({
+          key: v.key,
+          name: v.name,
+          weightBps: v.weightBps,
+          payload: compileVariantPayload(treatmentsByVariant.get(v.id) ?? []),
+        }));
+        yield* featureFlagService
+          .updateFlagVariants({ featureFlagId: experiment.featureFlagId, variants })
+          .pipe(
+            Effect.catchTags({
+              ActionForbiddenError: toServiceError,
+              AuditLogPortError: toServiceError,
+              FeatureFlagNotFoundError: toServiceError,
+              FeatureFlagServiceError: toServiceError,
+            }),
+          );
+      });
+
+    /** Load an experiment (no relations) or fail with not-found. */
+    const loadExperiment = (id: string) =>
+      Effect.gen(function* () {
+        const experiment = yield* db.query.experiments.findFirst({ where: { id } });
+        if (!experiment) {
+          return yield* Effect.fail(new ExperimentNotFoundError({ experimentId: id }));
+        }
+        return experiment;
+      });
+
+    /** Load an experiment with variants + treatments + backing flag. */
+    const loadExperimentWithRelations = (id: string) =>
+      Effect.gen(function* () {
+        const experiment = yield* db.query.experiments.findFirst({
+          where: { id },
+          with: {
+            variants: { where: { archivedAt: { isNull: true } } },
+            treatments: { where: { archivedAt: { isNull: true } } },
+            featureFlag: true,
+          },
+        });
+        if (!experiment) {
+          return yield* Effect.fail(new ExperimentNotFoundError({ experimentId: id }));
+        }
+        return experiment;
+      });
+
+    /** Distinct paywall-location ids targeted by any of the experiment's treatments. */
+    const targetLocationIds = (
+      treatments: ReadonlyArray<{ treatmentType: string; config: unknown }>,
+    ): string[] => {
+      const ids = new Set<string>();
+      for (const t of treatments) {
+        if (t.treatmentType === "paywall_location") {
+          ids.add(paywallLocationConfig(t.config).paywallLocationId);
+        }
+      }
+      return [...ids];
+    };
+
+    const createExperiment = Effect.fn("createExperiment")(
+      function* (input: {
+        readonly projectId: string;
+        readonly key: string;
+        readonly name: string;
+        readonly description?: string;
+        readonly hypothesis?: string;
+        readonly primaryMetricEventName: string;
+        readonly secondaryMetricEventNames?: ReadonlyArray<string>;
+      }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.experiment.key", input.key);
+
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to create experiments for project ${input.projectId}`,
+        );
+
+        const existing = yield* db.query.experiments.findFirst({
+          where: { key: input.key, projectId: input.projectId, archivedAt: { isNull: true } },
+        });
+        if (existing) {
+          return yield* Effect.fail(new ExperimentKeyAlreadyExistsError({ key: input.key }));
+        }
+
+        const experimentId = generateId("experiment");
+        yield* Effect.annotateCurrentSpan("voidhash.experiment.id", experimentId);
+
+        // The backing flag key is namespaced by the (globally unique) experiment
+        // id so it can never collide with a customer flag key in the project.
+        const { id: featureFlagId } = yield* featureFlagService
+          .createInternalFlag({
+            projectId: input.projectId,
+            key: `__exp_${experimentId}`,
+            name: `Experiment: ${input.name}`,
+            ownerType: EXPERIMENT_FLAG_OWNER_TYPE,
+            ownerId: experimentId,
+          })
+          .pipe(Effect.catchTags({ FeatureFlagServiceError: toServiceError }));
+
+        const newExperiment: InsertExperiment = {
+          id: experimentId,
+          projectId: input.projectId,
+          featureFlagId,
+          key: input.key,
+          name: input.name,
+          description: input.description ?? null,
+          hypothesis: input.hypothesis ?? null,
+          status: ExperimentStatus.draft,
+          primaryMetricEventName: input.primaryMetricEventName,
+          secondaryMetricEventNames: input.secondaryMetricEventNames
+            ? [...input.secondaryMetricEventNames]
+            : null,
+          createdByUserId: session?.user?.id ?? null,
+          updatedByUserId: session?.user?.id ?? null,
+          version: 1,
+        };
+
+        yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            yield* tx.insert(experiments).values(newExperiment);
+            // Seed a control + treatment arm at an even 50/50 split.
+            yield* tx.insert(experimentVariants).values([
+              {
+                id: generateId("experimentVariant"),
+                experimentId,
+                key: "control",
+                name: "Control",
+                isControl: true,
+                weightBps: 5000,
+              },
+              {
+                id: generateId("experimentVariant"),
+                experimentId,
+                key: "treatment",
+                name: "Treatment",
+                isControl: false,
+                weightBps: 5000,
+              },
+            ]);
+          }),
+        );
+
+        yield* syncVariantsToFlag(experimentId);
+
+        yield* auditLog
+          .append({
+            projectId: input.projectId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: experimentId,
+            action: AuditLogAction.Created,
+            changes: { snapshot: newExperiment },
+          })
+          .pipe(Effect.ignore);
+
+        yield* Effect.log(`Created experiment ${experimentId} for project ${input.projectId}`);
+        return { id: experimentId };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: toServiceError,
+            SqlError: toServiceError,
+          }),
+        ),
+    );
+
+    const getExperiment = Effect.fn("getExperiment")(
+      function* (input: { readonly id: string }) {
+        const experiment = yield* loadExperimentWithRelations(input.id);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to read experiment ${input.id}`,
+        );
+        return experiment;
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    const listExperiments = Effect.fn("listExperiments")(
+      function* (input: { readonly projectId: string; readonly includeArchived?: boolean }) {
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `Not authorized to list experiments for project ${input.projectId}`,
+        );
+        const rows = yield* db.query.experiments.findMany({
+          where: {
+            projectId: input.projectId,
+            ...(input.includeArchived ? {} : { archivedAt: { isNull: true } }),
+          },
+          with: { variants: { where: { archivedAt: { isNull: true } } } },
+        });
+        return rows.map((r) => {
+          const { variants, ...rest } = r;
+          return { ...rest, variantCount: variants.length };
+        });
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    const updateExperiment = Effect.fn("updateExperiment")(
+      function* (input: {
+        readonly id: string;
+        readonly name?: string;
+        readonly description?: string | null;
+        readonly hypothesis?: string | null;
+        readonly primaryMetricEventName?: string;
+        readonly secondaryMetricEventNames?: ReadonlyArray<string> | null;
+      }) {
+        const session = yield* AuthSession;
+        const experiment = yield* loadExperiment(input.id);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to update experiment ${input.id}`,
+        );
+
+        // Metric definition is locked once the experiment leaves draft so the
+        // analysis denominator can't shift mid-flight.
+        const changingMetrics =
+          input.primaryMetricEventName !== undefined ||
+          input.secondaryMetricEventNames !== undefined;
+        if (changingMetrics && experiment.status !== ExperimentStatus.draft) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: "Metric definition can only be changed while the experiment is a draft",
+            }),
+          );
+        }
+
+        const updates: Record<string, unknown> = { updatedByUserId: session?.user?.id ?? null };
+        if (input.name !== undefined) updates.name = input.name;
+        if (input.description !== undefined) updates.description = input.description;
+        if (input.hypothesis !== undefined) updates.hypothesis = input.hypothesis;
+        if (input.primaryMetricEventName !== undefined)
+          updates.primaryMetricEventName = input.primaryMetricEventName;
+        if (input.secondaryMetricEventNames !== undefined)
+          updates.secondaryMetricEventNames = input.secondaryMetricEventNames
+            ? [...input.secondaryMetricEventNames]
+            : null;
+
+        yield* db.update(experiments).set(updates).where(eq(experiments.id, input.id));
+
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: input.id,
+            action: AuditLogAction.Updated,
+            changes: { before: experiment, after: input },
+          })
+          .pipe(Effect.ignore);
+
+        return yield* loadExperimentWithRelations(input.id);
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    const replaceVariants = Effect.fn("replaceVariants")(
+      function* (input: {
+        readonly experimentId: string;
+        readonly variants: ReadonlyArray<VariantInput>;
+      }) {
+        const experiment = yield* loadExperiment(input.experimentId);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to edit experiment ${input.experimentId}`,
+        );
+        if (experiment.status === ExperimentStatus.running) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: "Variants and weights are locked while an experiment is running",
+            }),
+          );
+        }
+
+        const controls = input.variants.filter((v) => v.isControl);
+        if (controls.length !== 1) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({ message: "Exactly one variant must be the control" }),
+          );
+        }
+        const totalWeight = input.variants.reduce((sum, v) => sum + v.weightBps, 0);
+        if (totalWeight !== 10000) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: `Variant weights must sum to 10000, got ${totalWeight}`,
+            }),
+          );
+        }
+        const keys = new Set<string>();
+        for (const v of input.variants) {
+          if (keys.has(v.key)) {
+            return yield* Effect.fail(
+              new ExperimentValidationError({ message: `Duplicate variant key '${v.key}'` }),
+            );
+          }
+          keys.add(v.key);
+        }
+
+        // Upsert by key so surviving variants keep their id (and their
+        // treatments' variantId FK stays valid); removed variants drop their
+        // treatments too.
+        yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            const existing = yield* tx.query.experimentVariants.findMany({
+              where: { experimentId: input.experimentId, archivedAt: { isNull: true } },
+            });
+            const byKey = new Map(existing.map((v) => [v.key, v]));
+            const inputKeys = new Set(input.variants.map((v) => v.key));
+
+            for (const ex of existing) {
+              if (!inputKeys.has(ex.key)) {
+                yield* tx
+                  .delete(experimentTreatments)
+                  .where(eq(experimentTreatments.variantId, ex.id));
+                yield* tx.delete(experimentVariants).where(eq(experimentVariants.id, ex.id));
+              }
+            }
+            for (const v of input.variants) {
+              const ex = byKey.get(v.key);
+              if (ex) {
+                yield* tx
+                  .update(experimentVariants)
+                  .set({ name: v.name, isControl: v.isControl, weightBps: v.weightBps })
+                  .where(eq(experimentVariants.id, ex.id));
+              } else {
+                yield* tx.insert(experimentVariants).values({
+                  id: generateId("experimentVariant"),
+                  experimentId: input.experimentId,
+                  key: v.key,
+                  name: v.name,
+                  isControl: v.isControl,
+                  weightBps: v.weightBps,
+                });
+              }
+            }
+          }),
+        );
+
+        yield* syncVariantsToFlag(input.experimentId);
+
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.ExperimentVariant,
+            entityId: input.experimentId,
+            parentEntityId: input.experimentId,
+            action: AuditLogAction.Updated,
+            changes: { snapshot: { variants: input.variants } },
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: toServiceError,
+            SqlError: toServiceError,
+          }),
+        ),
+    );
+
+    const upsertTreatment = Effect.fn("upsertTreatment")(
+      function* (input: {
+        readonly experimentId: string;
+        readonly variantId: string;
+        readonly treatmentType: string;
+        readonly config: unknown;
+      }) {
+        const experiment = yield* loadExperiment(input.experimentId);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to edit experiment ${input.experimentId}`,
+        );
+        if (experiment.status === ExperimentStatus.running) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: "Treatments are locked while an experiment is running",
+            }),
+          );
+        }
+        if (!isTreatmentType(input.treatmentType)) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: `Unknown treatment type '${input.treatmentType}'`,
+            }),
+          );
+        }
+        const variant = yield* db.query.experimentVariants.findFirst({
+          where: { id: input.variantId, experimentId: input.experimentId },
+        });
+        if (!variant) {
+          return yield* Effect.fail(
+            new ExperimentVariantNotFoundError({ variantId: input.variantId }),
+          );
+        }
+
+        const treatmentType: TreatmentType = input.treatmentType;
+        const decoded = yield* decodeTreatmentConfig(treatmentType, input.config).pipe(
+          Effect.mapError(
+            (e) => new ExperimentValidationError({ message: `Invalid treatment config: ${e}` }),
+          ),
+        );
+
+        // One treatment of each (variant, type, target) — for paywall_location
+        // the target is the location. Enforced here since the target lives in
+        // the jsonb config.
+        const targetKey =
+          treatmentType === "paywall_location"
+            ? paywallLocationConfig(decoded).paywallLocationId
+            : null;
+
+        const existingTreatments = yield* db.query.experimentTreatments.findMany({
+          where: {
+            experimentId: input.experimentId,
+            variantId: input.variantId,
+            treatmentType,
+            archivedAt: { isNull: true },
+          },
+        });
+        const match = existingTreatments.find(
+          (t) =>
+            targetKey === null || paywallLocationConfig(t.config).paywallLocationId === targetKey,
+        );
+
+        let treatmentId: string;
+        if (match) {
+          treatmentId = match.id;
+          yield* db
+            .update(experimentTreatments)
+            .set({ config: decoded })
+            .where(eq(experimentTreatments.id, match.id));
+        } else {
+          treatmentId = generateId("experimentTreatment");
+          yield* db.insert(experimentTreatments).values({
+            id: treatmentId,
+            experimentId: input.experimentId,
+            variantId: input.variantId,
+            treatmentType,
+            config: decoded,
+          });
+        }
+
+        yield* syncVariantsToFlag(input.experimentId);
+
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.ExperimentTreatment,
+            entityId: treatmentId,
+            parentEntityId: input.experimentId,
+            action: AuditLogAction.Updated,
+            changes: { snapshot: { treatmentType, config: decoded } },
+          })
+          .pipe(Effect.ignore);
+
+        return { id: treatmentId };
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    const removeTreatment = Effect.fn("removeTreatment")(
+      function* (input: { readonly id: string }) {
+        const treatment = yield* db.query.experimentTreatments.findFirst({
+          where: { id: input.id },
+        });
+        if (!treatment) {
+          return yield* Effect.fail(
+            new ExperimentTreatmentNotFoundError({ treatmentId: input.id }),
+          );
+        }
+        const experiment = yield* loadExperiment(treatment.experimentId);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to edit experiment ${treatment.experimentId}`,
+        );
+        if (experiment.status === ExperimentStatus.running) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: "Treatments are locked while an experiment is running",
+            }),
+          );
+        }
+
+        yield* db.delete(experimentTreatments).where(eq(experimentTreatments.id, input.id));
+        yield* syncVariantsToFlag(treatment.experimentId);
+
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.ExperimentTreatment,
+            entityId: input.id,
+            parentEntityId: treatment.experimentId,
+            action: AuditLogAction.Archived,
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    const startExperiment = Effect.fn("startExperiment")(
+      function* (input: { readonly id: string }) {
+        const session = yield* AuthSession;
+        const experiment = yield* loadExperimentWithRelations(input.id);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to start experiment ${input.id}`,
+        );
+        if (experiment.status === ExperimentStatus.concluded) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: "A concluded experiment cannot be restarted",
+            }),
+          );
+        }
+
+        const locationIds = targetLocationIds(experiment.treatments);
+
+        // Mutual exclusion: refuse to start if any target location is already
+        // running a DIFFERENT experiment. A plain paywall_release showing is
+        // clobbered (this is the "launch experiment here" action).
+        for (const locationId of locationIds) {
+          const active = yield* db.query.paywallLocationShowings.findFirst({
+            where: { paywallLocationId: locationId, endedAt: { isNull: true } },
+          });
+          if (
+            active &&
+            active.type === PaywallLocationShowingType.featureFlag &&
+            active.featureFlagId
+          ) {
+            const otherFlag = yield* db.query.featureFlags.findFirst({
+              where: { id: active.featureFlagId },
+            });
+            if (otherFlag?.ownerId && otherFlag.ownerId !== experiment.id) {
+              return yield* Effect.fail(
+                new ExperimentValidationError({
+                  message: `Paywall location ${locationId} is already running another experiment`,
+                }),
+              );
+            }
+          }
+        }
+
+        yield* featureFlagService
+          .setInternalFlagState({
+            featureFlagId: experiment.featureFlagId,
+            enabled: true,
+            rolloutBps: 10000,
+          })
+          .pipe(
+            Effect.catchTags({
+              FeatureFlagNotFoundError: toServiceError,
+              FeatureFlagServiceError: toServiceError,
+            }),
+          );
+
+        const now = new Date();
+        yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            for (const locationId of locationIds) {
+              yield* tx
+                .update(paywallLocationShowings)
+                .set({ endedAt: now })
+                .where(
+                  and(
+                    eq(paywallLocationShowings.paywallLocationId, locationId),
+                    isNull(paywallLocationShowings.endedAt),
+                  ),
+                );
+              yield* tx.insert(paywallLocationShowings).values({
+                id: generateId("paywallLocationShowing"),
+                projectId: experiment.projectId,
+                paywallLocationId: locationId,
+                type: PaywallLocationShowingType.featureFlag,
+                paywallId: null,
+                paywallReleaseId: null,
+                featureFlagId: experiment.featureFlagId,
+                startedAt: now,
+                createdByUserId: session?.user?.id ?? null,
+              });
+            }
+            yield* tx
+              .update(experiments)
+              .set({ status: ExperimentStatus.running, startedAt: now })
+              .where(eq(experiments.id, input.id));
+          }),
+        );
+
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: input.id,
+            action: AuditLogAction.Updated,
+            changes: { status: "running", locationIds },
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: toServiceError,
+            SqlError: toServiceError,
+          }),
+        ),
+    );
+
+    const pauseExperiment = Effect.fn("pauseExperiment")(
+      function* (input: { readonly id: string }) {
+        const experiment = yield* loadExperiment(input.id);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to pause experiment ${input.id}`,
+        );
+        if (experiment.status !== ExperimentStatus.running) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({ message: "Only a running experiment can be paused" }),
+          );
+        }
+        // Freeze assignment: everyone falls back to control at serve time.
+        yield* featureFlagService
+          .setInternalFlagState({ featureFlagId: experiment.featureFlagId, enabled: false })
+          .pipe(
+            Effect.catchTags({
+              FeatureFlagNotFoundError: toServiceError,
+              FeatureFlagServiceError: toServiceError,
+            }),
+          );
+        yield* db
+          .update(experiments)
+          .set({ status: ExperimentStatus.paused })
+          .where(eq(experiments.id, input.id));
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: input.id,
+            action: AuditLogAction.Updated,
+            changes: { status: "paused" },
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    const concludeExperiment = Effect.fn("concludeExperiment")(
+      function* (input: { readonly id: string; readonly winningVariantId?: string }) {
+        const experiment = yield* loadExperimentWithRelations(input.id);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to conclude experiment ${input.id}`,
+        );
+
+        const control = experiment.variants.find((v) => v.isControl);
+        const winnerId = input.winningVariantId ?? control?.id;
+        const winner = experiment.variants.find((v) => v.id === winnerId);
+        if (input.winningVariantId && !winner) {
+          return yield* Effect.fail(
+            new ExperimentVariantNotFoundError({ variantId: input.winningVariantId }),
+          );
+        }
+
+        // Promote the winner (falling back to control) at each target location:
+        // replace the experiment's featureFlag showing with a normal
+        // paywall_release showing so no location is ever left dangling.
+        const locationIds = targetLocationIds(experiment.treatments);
+        const releaseForLocation = (locationId: string) => {
+          const pick = (variantId: string | undefined) =>
+            experiment.treatments.find(
+              (t) =>
+                t.variantId === variantId &&
+                t.treatmentType === "paywall_location" &&
+                paywallLocationConfig(t.config).paywallLocationId === locationId,
+            );
+          const chosen = pick(winner?.id) ?? pick(control?.id);
+          return chosen ? paywallLocationConfig(chosen.config) : null;
+        };
+
+        // Stop assignment first.
+        yield* featureFlagService
+          .setInternalFlagState({ featureFlagId: experiment.featureFlagId, enabled: false })
+          .pipe(
+            Effect.catchTags({
+              FeatureFlagNotFoundError: toServiceError,
+              FeatureFlagServiceError: toServiceError,
+            }),
+          );
+
+        const now = new Date();
+        yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            for (const locationId of locationIds) {
+              yield* tx
+                .update(paywallLocationShowings)
+                .set({ endedAt: now })
+                .where(
+                  and(
+                    eq(paywallLocationShowings.paywallLocationId, locationId),
+                    isNull(paywallLocationShowings.endedAt),
+                  ),
+                );
+              const release = releaseForLocation(locationId);
+              if (release) {
+                yield* tx.insert(paywallLocationShowings).values({
+                  id: generateId("paywallLocationShowing"),
+                  projectId: experiment.projectId,
+                  paywallLocationId: locationId,
+                  type: PaywallLocationShowingType.paywallRelease,
+                  paywallId: release.paywallId,
+                  paywallReleaseId: release.paywallReleaseId,
+                  featureFlagId: null,
+                  startedAt: now,
+                });
+              }
+            }
+            yield* tx
+              .update(experiments)
+              .set({
+                status: ExperimentStatus.concluded,
+                endedAt: now,
+                winningVariantId: winnerId ?? null,
+              })
+              .where(eq(experiments.id, input.id));
+          }),
+        );
+
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: input.id,
+            action: AuditLogAction.Completed,
+            changes: { status: "concluded", winningVariantId: winnerId },
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: toServiceError,
+            SqlError: toServiceError,
+          }),
+        ),
+    );
+
+    const archiveExperiment = Effect.fn("archiveExperiment")(
+      function* (input: { readonly id: string }) {
+        const experiment = yield* loadExperiment(input.id);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to archive experiment ${input.id}`,
+        );
+        // Disable the backing flag so nothing keeps assigning after archive.
+        yield* featureFlagService
+          .setInternalFlagState({ featureFlagId: experiment.featureFlagId, enabled: false })
+          .pipe(
+            Effect.catchTags({
+              FeatureFlagNotFoundError: toServiceError,
+              FeatureFlagServiceError: toServiceError,
+            }),
+          );
+        yield* db
+          .update(experiments)
+          .set({ archivedAt: new Date() })
+          .where(eq(experiments.id, input.id));
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: input.id,
+            action: AuditLogAction.Archived,
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    const restoreExperiment = Effect.fn("restoreExperiment")(
+      function* (input: { readonly id: string }) {
+        const experiment = yield* loadExperiment(input.id);
+        yield* checkProjectPermission(
+          experiment.projectId,
+          "project:all",
+          `Not authorized to restore experiment ${input.id}`,
+        );
+        yield* db.update(experiments).set({ archivedAt: null }).where(eq(experiments.id, input.id));
+        yield* auditLog
+          .append({
+            projectId: experiment.projectId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: input.id,
+            action: AuditLogAction.Restored,
+          })
+          .pipe(Effect.ignore);
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    /**
+     * Shared assignment primitive — the reuse core every surface calls. Resolves
+     * the experiment (by id, key, OR backing-flag id) and evaluates it for the
+     * subject via the existing feature-flag engine (deterministic bucketing).
+     * Returns the assigned variant + its compiled runtime payload, PLUS the
+     * control variant's key/payload so a surface can fall back to control when a
+     * subject isn't enrolled (flag disabled / paused) — the paywall serve path
+     * uses this so a location backed by an experiment is never dark.
+     *
+     * Surface-agnostic: it returns compiled payloads (never touches flag or
+     * paywall concepts in its signature) and does NOT emit exposure or require
+     * `RuntimeContext` — the caller (which has org/token/runtime) emits. No
+     * permission check: called from the SDK serve path (publishable-key session).
+     */
+    const assignVariant = Effect.fn("assignVariant")(
+      function* (input: {
+        readonly projectId: string;
+        readonly experimentId?: string;
+        readonly experimentKey?: string;
+        readonly featureFlagId?: string;
+        readonly personId?: string;
+        readonly distinctId?: string;
+      }) {
+        const experiment = yield* db.query.experiments.findFirst({
+          where: {
+            projectId: input.projectId,
+            archivedAt: { isNull: true },
+            ...(input.experimentId ? { id: input.experimentId } : {}),
+            ...(input.experimentKey ? { key: input.experimentKey } : {}),
+            ...(input.featureFlagId ? { featureFlagId: input.featureFlagId } : {}),
+          },
+          with: {
+            featureFlag: true,
+            variants: { where: { archivedAt: { isNull: true } } },
+            treatments: { where: { archivedAt: { isNull: true } } },
+          },
+        });
+        if (!experiment || !experiment.featureFlag) return null;
+
+        const control = experiment.variants.find((v) => v.isControl);
+        const controlPayload = control
+          ? compileVariantPayload(
+              experiment.treatments
+                .filter((t) => t.variantId === control.id)
+                .map((t) => ({ treatmentType: t.treatmentType, config: t.config })),
+            )
+          : null;
+
+        const results = yield* featureFlagService
+          .evaluateFlagsBatch({
+            projectId: input.projectId,
+            keys: [experiment.featureFlag.key],
+            personId: input.personId,
+            distinctId: input.distinctId,
+          })
+          .pipe(Effect.catchTags({ FeatureFlagServiceError: toServiceError }));
+        const result = results[0];
+        return {
+          experimentId: experiment.id,
+          experimentKey: experiment.key,
+          assigned: result?.enabled ?? false,
+          variantKey: result?.variantKey ?? null,
+          payload: result?.payload ?? null,
+          controlVariantKey: control?.key ?? null,
+          controlPayload,
+        };
+      },
+      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
+    );
+
+    return {
+      archiveExperiment,
+      assignVariant,
+      concludeExperiment,
+      createExperiment,
+      getExperiment,
+      listExperiments,
+      pauseExperiment,
+      removeTreatment,
+      replaceVariants,
+      restoreExperiment,
+      startExperiment,
+      updateExperiment,
+      upsertTreatment,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(ExperimentService)(ExperimentService.make);
+}
diff --git a/packages/core/src/services/featureFlags/FeatureFlagService.ts b/packages/core/src/services/featureFlags/FeatureFlagService.ts
new file mode 100644
index 000000000..05a9dace4
--- /dev/null
+++ b/packages/core/src/services/featureFlags/FeatureFlagService.ts
@@ -0,0 +1,1416 @@
+import { createId } from "@paralleldrive/cuid2";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  FeatureFlagKeyAlreadyExistsError,
+  FeatureFlagNotFoundError,
+  FeatureFlagOverrideNotFoundError,
+  FeatureFlagTargetNotFoundError,
+} from "../../domain/featureFlag/FeatureFlag.ts";
+import {
+  type InsertFeatureFlag,
+  type InsertFeatureFlagOverride,
+  type InsertFeatureFlagTarget,
+  type InsertFeatureFlagVariant,
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  FeatureFlagIdentityType,
+  FeatureFlagTargetListType,
+  and,
+  eq,
+  featureFlagOverrides,
+  featureFlagTargets,
+  featureFlagVariants,
+  featureFlags,
+  isNull,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  sql,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+
+/**
+ * Catch-all service error. Wraps `DbError` (and `SqlError` from transactions)
+ * and other infrastructural failures at the public-method boundary so callers
+ * see one stable error tag.
+ */
+export class FeatureFlagServiceError extends Schema.TaggedErrorClass<FeatureFlagServiceError>(
+  "FeatureFlagServiceError",
+)("FeatureFlagServiceError", { cause: Schema.String }) {}
+
+interface EvaluationResult {
+  readonly enabled: boolean;
+  readonly flagId: string;
+  readonly key: string;
+  readonly payload: unknown | null;
+  readonly reason: string;
+  readonly variantKey: string | null;
+}
+
+/**
+ * `owner_type` stamped on the internal feature flag that backs an experiment.
+ * `setInternalFlagState` refuses to touch any flag that is not both `internal`
+ * and owned by this type, so the internal-edit guard can never be bypassed for
+ * a customer flag. Shared with `ExperimentService`, which sets it on creation.
+ */
+export const EXPERIMENT_FLAG_OWNER_TYPE = "experiment";
+
+/**
+ * Stable bucket assignment in `[0, 10000)` derived from a hash of the input —
+ * used to pick a rollout slot and a variant slot deterministically per
+ * subject. SHA-256 keeps the bucketing stable across processes and Cloudflare
+ * isolates without needing a seeded RNG.
+ */
+const hashToBucket = async (input: string): Promise<number> => {
+  const encoder = new TextEncoder();
+  const data = encoder.encode(input);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", data);
+  const hashArray = new Uint8Array(hashBuffer);
+  const value =
+    (hashArray[0]! << 24) | (hashArray[1]! << 16) | (hashArray[2]! << 8) | hashArray[3]!;
+  return (value >>> 0) % 10000;
+};
+
+const groupByToMap = <T, K>(items: readonly T[], key: (item: T) => K): Map<K, T[]> => {
+  const map = new Map<K, T[]>();
+  for (const item of items) {
+    const k = key(item);
+    const arr = map.get(k);
+    if (arr) {
+      arr.push(item);
+    } else {
+      map.set(k, [item]);
+    }
+  }
+  return map;
+};
+
+/**
+ * `FeatureFlagService` is the orchestration entry point for the feature-flag
+ * aggregate. Surface: list/get/create/update/archive/restore on flags,
+ * upsert/archive on targets and overrides, variant replacement, override
+ * lookup by flag or by person, and batched evaluation.
+ *
+ * `AuditLogPort`, `AuthSession`, and `Db` are provided by the application
+ * root.
+ */
+export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
+  "FeatureFlagService",
+  {
+    make: Effect.gen(function* () {
+      const auditLog = yield* AuditLogPort;
+      const db = yield* Db;
+
+      const createFlag = Effect.fn("createFlag")(
+        function* (input: {
+          readonly projectId: string;
+          readonly key: string;
+          readonly name: string;
+          readonly description?: string;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", input.key);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to create feature flags for project ${input.projectId}`,
+          );
+
+          const flagId = generateId("featureFlag");
+          const salt = createId();
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", flagId);
+
+          const newFlag: InsertFeatureFlag = {
+            id: flagId,
+            projectId: input.projectId,
+            key: input.key,
+            name: input.name,
+            description: input.description ?? null,
+            enabled: false,
+            rolloutBps: 0,
+            salt,
+            createdByUserId: session?.user?.id ?? null,
+            updatedByUserId: session?.user?.id ?? null,
+            version: 1,
+          };
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const existing = yield* tx.query.featureFlags.findFirst({
+                where: {
+                  key: input.key,
+                  projectId: input.projectId,
+                  archivedAt: { isNull: true },
+                },
+              });
+              if (existing) {
+                return yield* Effect.fail(new FeatureFlagKeyAlreadyExistsError({ key: input.key }));
+              }
+              yield* tx.insert(featureFlags).values(newFlag);
+            }),
+          );
+
+          yield* auditLog.append({
+            projectId: input.projectId,
+            entityType: AuditLogEntityType.FeatureFlag,
+            entityId: flagId,
+            action: AuditLogAction.Created,
+            changes: { snapshot: newFlag },
+          });
+
+          yield* Effect.log(`Created feature flag ${flagId} for project ${input.projectId}`);
+          return { id: flagId };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * Create an internal, owner-scoped feature flag — the backing flag for an
+       * experiment. Unlike {@link createFlag} it stamps `internal=true` +
+       * `ownerType`/`ownerId` and defaults `rolloutBps` to full (assignment is
+       * gated by `enabled`, which the owner flips on start). It is server-only:
+       * the caller (`ExperimentService`) performs the project permission check.
+       */
+      const createInternalFlag = Effect.fn("createInternalFlag")(
+        function* (input: {
+          readonly projectId: string;
+          readonly key: string;
+          readonly name: string;
+          readonly ownerType: string;
+          readonly ownerId: string;
+          readonly description?: string;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", input.key);
+
+          const flagId = generateId("featureFlag");
+          const salt = createId();
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", flagId);
+
+          const newFlag: InsertFeatureFlag = {
+            id: flagId,
+            projectId: input.projectId,
+            key: input.key,
+            name: input.name,
+            description: input.description ?? null,
+            enabled: false,
+            rolloutBps: 10000,
+            salt,
+            internal: true,
+            ownerType: input.ownerType,
+            ownerId: input.ownerId,
+            createdByUserId: session?.user?.id ?? null,
+            updatedByUserId: session?.user?.id ?? null,
+            version: 1,
+          };
+
+          yield* db.insert(featureFlags).values(newFlag);
+
+          yield* Effect.log(
+            `Created internal feature flag ${flagId} owned by ${input.ownerType}:${input.ownerId}`,
+          );
+          return { id: flagId };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * Flip `enabled`/`rolloutBps` on an experiment-owned internal flag,
+       * bypassing the {@link updateFlag} internal-edit guard. Asserts the flag
+       * is both `internal` and owned by {@link EXPERIMENT_FLAG_OWNER_TYPE} so it
+       * can never mutate a customer flag. Called by `ExperimentService` on
+       * start/pause.
+       */
+      const setInternalFlagState = Effect.fn("setInternalFlagState")(
+        function* (input: {
+          readonly featureFlagId: string;
+          readonly enabled?: boolean;
+          readonly rolloutBps?: number;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.featureFlagId);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.featureFlagId },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(
+              new FeatureFlagNotFoundError({ featureFlagId: input.featureFlagId }),
+            );
+          }
+          if (!existingFlag.internal || existingFlag.ownerType !== EXPERIMENT_FLAG_OWNER_TYPE) {
+            return yield* Effect.fail(
+              new FeatureFlagServiceError({
+                cause: `Feature flag ${input.featureFlagId} is not an experiment-owned internal flag`,
+              }),
+            );
+          }
+
+          const updates: Record<string, unknown> = {
+            version: sql`${featureFlags.version} + 1`,
+          };
+          if (input.enabled !== undefined) updates.enabled = input.enabled;
+          if (input.rolloutBps !== undefined) updates.rolloutBps = input.rolloutBps;
+
+          yield* db
+            .update(featureFlags)
+            .set(updates)
+            .where(eq(featureFlags.id, input.featureFlagId));
+
+          yield* Effect.log(`Set internal flag state for ${input.featureFlagId}`);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const updateFlag = Effect.fn("updateFlag")(
+        function* (input: {
+          readonly id: string;
+          readonly name?: string;
+          readonly description?: string | null;
+          readonly enabled?: boolean;
+          readonly rolloutBps?: number;
+          readonly key?: string;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.id);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.id },
+            with: {
+              targets: { where: { archivedAt: { isNull: true } } },
+              overrides: { where: { archivedAt: { isNull: true } } },
+              variants: { where: { archivedAt: { isNull: true } } },
+            },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(new FeatureFlagNotFoundError({ featureFlagId: input.id }));
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          if (existingFlag.internal) {
+            return yield* Effect.fail(
+              new FeatureFlagServiceError({
+                cause: `Feature flag ${input.id} is managed internally and cannot be edited directly`,
+              }),
+            );
+          }
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to update feature flag ${input.id}`,
+          );
+
+          const updates: Record<string, unknown> = {
+            updatedByUserId: session?.user?.id ?? null,
+            version: sql`${featureFlags.version} + 1`,
+          };
+          if (input.name !== undefined) updates.name = input.name;
+          if (input.description !== undefined) updates.description = input.description;
+          if (input.enabled !== undefined) updates.enabled = input.enabled;
+          if (input.rolloutBps !== undefined) updates.rolloutBps = input.rolloutBps;
+          if (input.key !== undefined) updates.key = input.key;
+
+          if (input.key && input.key !== existingFlag.key) {
+            const keyChange = input.key;
+            yield* db.transaction((tx) =>
+              Effect.gen(function* () {
+                const conflicting = yield* tx.query.featureFlags.findFirst({
+                  where: {
+                    key: keyChange,
+                    projectId: existingFlag.projectId,
+                    archivedAt: { isNull: true },
+                  },
+                });
+                if (conflicting && conflicting.id !== input.id) {
+                  return yield* Effect.fail(
+                    new FeatureFlagKeyAlreadyExistsError({ key: keyChange }),
+                  );
+                }
+                yield* tx.update(featureFlags).set(updates).where(eq(featureFlags.id, input.id));
+              }),
+            );
+          } else {
+            yield* db.update(featureFlags).set(updates).where(eq(featureFlags.id, input.id));
+          }
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlag,
+            entityId: input.id,
+            action: AuditLogAction.Updated,
+            changes: { before: existingFlag, after: input },
+          });
+
+          const updated = yield* db.query.featureFlags.findFirst({
+            where: { id: input.id },
+            with: {
+              targets: { where: { archivedAt: { isNull: true } } },
+              overrides: { where: { archivedAt: { isNull: true } } },
+              variants: { where: { archivedAt: { isNull: true } } },
+            },
+          });
+          yield* Effect.log(`Updated feature flag ${input.id}`);
+          return updated!;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const archiveFlag = Effect.fn("archiveFlag")(
+        function* (input: { readonly id: string }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.id);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.id },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(new FeatureFlagNotFoundError({ featureFlagId: input.id }));
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          if (existingFlag.internal) {
+            return yield* Effect.fail(
+              new FeatureFlagServiceError({
+                cause: `Feature flag ${input.id} is managed internally and cannot be archived directly`,
+              }),
+            );
+          }
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to archive feature flag ${input.id}`,
+          );
+
+          yield* db
+            .update(featureFlags)
+            .set({ archivedAt: new Date() })
+            .where(eq(featureFlags.id, input.id));
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlag,
+            entityId: input.id,
+            action: AuditLogAction.Archived,
+          });
+
+          yield* Effect.log(`Archived feature flag ${input.id}`);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const restoreFlag = Effect.fn("restoreFlag")(
+        function* (input: { readonly id: string }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.id);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.id },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(new FeatureFlagNotFoundError({ featureFlagId: input.id }));
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to restore feature flag ${input.id}`,
+          );
+
+          yield* db
+            .update(featureFlags)
+            .set({ archivedAt: null })
+            .where(eq(featureFlags.id, input.id));
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlag,
+            entityId: input.id,
+            action: AuditLogAction.Restored,
+          });
+
+          yield* Effect.log(`Restored feature flag ${input.id}`);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const getFlagById = Effect.fn("getFlagById")(
+        function* (input: { readonly id: string }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.id);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const flag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.id },
+            with: {
+              targets: { where: { archivedAt: { isNull: true } } },
+              overrides: { where: { archivedAt: { isNull: true } } },
+              variants: { where: { archivedAt: { isNull: true } } },
+            },
+          });
+          if (!flag) {
+            return yield* Effect.fail(new FeatureFlagNotFoundError({ featureFlagId: input.id }));
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", flag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", flag.key);
+
+          yield* checkProjectPermission(
+            flag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to view feature flag ${input.id}`,
+          );
+
+          return flag;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const listFlags = Effect.fn("listFlags")(
+        function* (input: { readonly projectId: string; readonly includeArchived?: boolean }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to list feature flags for project ${input.projectId}`,
+          );
+
+          const includeArchived = input.includeArchived ?? false;
+          const results = yield* db.query.featureFlags.findMany({
+            where: {
+              projectId: input.projectId,
+              ...(includeArchived ? {} : { archivedAt: { isNull: true } }),
+            },
+            with: {
+              variants: {
+                columns: { id: true },
+                where: { archivedAt: { isNull: true } },
+              },
+            },
+          });
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.count", results.length);
+
+          return results.map((flag) => ({
+            ...flag,
+            variantCount: flag.variants.length,
+            variants: undefined,
+          }));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const updateFlagVariants = Effect.fn("updateFlagVariants")(
+        function* (input: {
+          readonly featureFlagId: string;
+          readonly variants: ReadonlyArray<{
+            readonly key: string;
+            readonly name: string;
+            readonly weightBps: number;
+            readonly payload?: unknown;
+          }>;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.featureFlagId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.featureFlagId },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(
+              new FeatureFlagNotFoundError({ featureFlagId: input.featureFlagId }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to update variants for feature flag ${input.featureFlagId}`,
+          );
+
+          if (input.variants.length > 0) {
+            const totalWeight = input.variants.reduce((sum, v) => sum + v.weightBps, 0);
+            if (totalWeight !== 10000) {
+              return yield* Effect.fail(
+                new FeatureFlagServiceError({
+                  cause: `Variant weights must sum to 10000, got ${totalWeight}`,
+                }),
+              );
+            }
+          }
+
+          const seen = new Set<string>();
+          for (const variant of input.variants) {
+            if (seen.has(variant.key)) {
+              return yield* Effect.fail(
+                new FeatureFlagServiceError({
+                  cause: `Duplicate variant key '${variant.key}' for flag ${input.featureFlagId}`,
+                }),
+              );
+            }
+            seen.add(variant.key);
+          }
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .delete(featureFlagVariants)
+                .where(eq(featureFlagVariants.featureFlagId, input.featureFlagId));
+
+              for (const variant of input.variants) {
+                const record: InsertFeatureFlagVariant = {
+                  id: generateId("featureFlagVariant"),
+                  featureFlagId: input.featureFlagId,
+                  key: variant.key,
+                  name: variant.name,
+                  weightBps: variant.weightBps,
+                  payload: variant.payload ?? null,
+                };
+                yield* tx.insert(featureFlagVariants).values(record);
+              }
+            }),
+          );
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlagVariant,
+            entityId: input.featureFlagId,
+            parentEntityId: input.featureFlagId,
+            action: AuditLogAction.Updated,
+            changes: { snapshot: { variants: input.variants } },
+          });
+
+          yield* Effect.log(
+            `Updated ${input.variants.length} variants for feature flag ${input.featureFlagId}`,
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const upsertTarget = Effect.fn("upsertTarget")(
+        function* (input: {
+          readonly featureFlagId: string;
+          readonly listType: number;
+          readonly identityType: number;
+          readonly identityValue: string;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.featureFlagId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.feature_flag.identity_type",
+            input.identityType,
+          );
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.featureFlagId },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(
+              new FeatureFlagNotFoundError({ featureFlagId: input.featureFlagId }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to add targets for feature flag ${input.featureFlagId}`,
+          );
+
+          const existing = yield* db.query.featureFlagTargets.findFirst({
+            where: {
+              featureFlagId: input.featureFlagId,
+              listType: input.listType,
+              identityType: input.identityType,
+              identityValue: input.identityValue,
+              archivedAt: { isNull: true },
+            },
+          });
+
+          let targetId: string;
+          if (existing) {
+            targetId = existing.id;
+          } else {
+            targetId = generateId("featureFlagTarget");
+            const record: InsertFeatureFlagTarget = {
+              id: targetId,
+              featureFlagId: input.featureFlagId,
+              listType: input.listType,
+              identityType: input.identityType,
+              identityValue: input.identityValue,
+            };
+            yield* db.insert(featureFlagTargets).values(record);
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.target.id", targetId);
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlagTarget,
+            entityId: targetId,
+            parentEntityId: input.featureFlagId,
+            action: AuditLogAction.TargetAdded,
+          });
+
+          yield* Effect.log(`Upserted target ${targetId} for feature flag ${input.featureFlagId}`);
+          return { id: targetId };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const archiveTarget = Effect.fn("archiveTarget")(
+        function* (input: { readonly id: string }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.target.id", input.id);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingTarget = yield* db.query.featureFlagTargets.findFirst({
+            where: { id: input.id },
+          });
+          if (!existingTarget) {
+            return yield* Effect.fail(new FeatureFlagTargetNotFoundError({ targetId: input.id }));
+          }
+
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.feature_flag.id",
+            existingTarget.featureFlagId,
+          );
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: existingTarget.featureFlagId },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(new FeatureFlagTargetNotFoundError({ targetId: input.id }));
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to remove targets for feature flag ${existingTarget.featureFlagId}`,
+          );
+
+          yield* db
+            .update(featureFlagTargets)
+            .set({ archivedAt: new Date() })
+            .where(eq(featureFlagTargets.id, input.id));
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlagTarget,
+            entityId: input.id,
+            parentEntityId: existingTarget.featureFlagId,
+            action: AuditLogAction.TargetRemoved,
+          });
+
+          yield* Effect.log(
+            `Archived target ${input.id} for feature flag ${existingTarget.featureFlagId}`,
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const upsertOverride = Effect.fn("upsertOverride")(
+        function* (input: {
+          readonly featureFlagId: string;
+          readonly identityType: number;
+          readonly identityValue: string;
+          readonly forcedEnabled?: boolean | null;
+          readonly forcedVariantKey?: string | null;
+          readonly note?: string;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.featureFlagId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.feature_flag.identity_type",
+            input.identityType,
+          );
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.featureFlagId },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(
+              new FeatureFlagNotFoundError({ featureFlagId: input.featureFlagId }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to set overrides for feature flag ${input.featureFlagId}`,
+          );
+
+          const existing = yield* db.query.featureFlagOverrides.findFirst({
+            where: {
+              featureFlagId: input.featureFlagId,
+              identityType: input.identityType,
+              identityValue: input.identityValue,
+              archivedAt: { isNull: true },
+            },
+          });
+
+          let overrideId: string;
+          if (existing) {
+            overrideId = existing.id;
+            yield* db
+              .update(featureFlagOverrides)
+              .set({
+                forcedEnabled: input.forcedEnabled,
+                forcedVariantKey: input.forcedVariantKey,
+                note: input.note,
+                updatedByUserId: session?.user?.id ?? null,
+              })
+              .where(eq(featureFlagOverrides.id, existing.id));
+          } else {
+            overrideId = generateId("featureFlagOverride");
+            const record: InsertFeatureFlagOverride = {
+              id: overrideId,
+              featureFlagId: input.featureFlagId,
+              identityType: input.identityType,
+              identityValue: input.identityValue,
+              forcedEnabled: input.forcedEnabled ?? null,
+              forcedVariantKey: input.forcedVariantKey ?? null,
+              note: input.note ?? null,
+              createdByUserId: session?.user?.id ?? null,
+              updatedByUserId: session?.user?.id ?? null,
+            };
+            yield* db.insert(featureFlagOverrides).values(record);
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.override.id", overrideId);
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlagOverride,
+            entityId: overrideId,
+            parentEntityId: input.featureFlagId,
+            action: AuditLogAction.OverrideSet,
+          });
+
+          yield* Effect.log(
+            `Upserted override ${overrideId} for feature flag ${input.featureFlagId}`,
+          );
+          return { id: overrideId };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const archiveOverride = Effect.fn("archiveOverride")(
+        function* (input: { readonly id: string }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.override.id", input.id);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingOverride = yield* db.query.featureFlagOverrides.findFirst({
+            where: { id: input.id },
+          });
+          if (!existingOverride) {
+            return yield* Effect.fail(
+              new FeatureFlagOverrideNotFoundError({ overrideId: input.id }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.feature_flag.id",
+            existingOverride.featureFlagId,
+          );
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: existingOverride.featureFlagId },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(
+              new FeatureFlagOverrideNotFoundError({ overrideId: input.id }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to remove overrides for feature flag ${existingOverride.featureFlagId}`,
+          );
+
+          yield* db
+            .update(featureFlagOverrides)
+            .set({ archivedAt: new Date() })
+            .where(eq(featureFlagOverrides.id, input.id));
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlagOverride,
+            entityId: input.id,
+            parentEntityId: existingOverride.featureFlagId,
+            action: AuditLogAction.OverrideRemoved,
+          });
+
+          yield* Effect.log(
+            `Archived override ${input.id} for feature flag ${existingOverride.featureFlagId}`,
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const listOverridesByFlag = Effect.fn("listOverridesByFlag")(
+        function* (input: { readonly featureFlagId: string }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.featureFlagId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const flag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.featureFlagId },
+          });
+          if (!flag) {
+            return yield* Effect.fail(
+              new FeatureFlagNotFoundError({ featureFlagId: input.featureFlagId }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", flag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", flag.key);
+
+          yield* checkProjectPermission(
+            flag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to list overrides for feature flag ${input.featureFlagId}`,
+          );
+
+          return yield* db.query.featureFlagOverrides.findMany({
+            where: {
+              featureFlagId: input.featureFlagId,
+              archivedAt: { isNull: true },
+            },
+          });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const listOverridesByPerson = Effect.fn("listOverridesByPerson")(
+        function* (input: {
+          readonly projectId: string;
+          readonly identityType: number;
+          readonly identityValue: string;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.feature_flag.identity_type",
+            input.identityType,
+          );
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to list overrides for project ${input.projectId}`,
+          );
+
+          const results = yield* db
+            .select()
+            .from(featureFlagOverrides)
+            .innerJoin(featureFlags, eq(featureFlagOverrides.featureFlagId, featureFlags.id))
+            .where(
+              and(
+                eq(featureFlags.projectId, input.projectId),
+                eq(featureFlagOverrides.identityType, input.identityType),
+                eq(featureFlagOverrides.identityValue, input.identityValue),
+                isNull(featureFlagOverrides.archivedAt),
+                isNull(featureFlags.archivedAt),
+              ),
+            );
+          return results.map((row) => row.feature_flag_override);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const evaluateFlagsBatch = Effect.fn("evaluateFlagsBatch")(
+        function* (input: {
+          readonly projectId: string;
+          readonly keys?: ReadonlyArray<string>;
+          readonly personId?: string;
+          readonly distinctId?: string;
+          readonly email?: string;
+          readonly externalIds?: ReadonlyArray<string>;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          if (input.keys)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.feature_flag.requested_key_count",
+              input.keys.length,
+            );
+          if (input.personId)
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", input.personId);
+          if (input.distinctId)
+            yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+
+          const flags = yield* db.query.featureFlags.findMany({
+            where: {
+              projectId: input.projectId,
+              archivedAt: { isNull: true },
+              ...(input.keys && input.keys.length > 0 ? { key: { in: [...input.keys] } } : {}),
+            },
+          });
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.count", flags.length);
+
+          if (flags.length === 0) {
+            return [] as EvaluationResult[];
+          }
+
+          const flagIds = flags.map((f) => f.id);
+
+          const [allTargets, allOverrides, allVariants] = yield* Effect.all([
+            db.query.featureFlagTargets.findMany({
+              where: {
+                featureFlagId: { in: flagIds },
+                archivedAt: { isNull: true },
+              },
+            }),
+            db.query.featureFlagOverrides.findMany({
+              where: {
+                featureFlagId: { in: flagIds },
+                archivedAt: { isNull: true },
+              },
+            }),
+            db.query.featureFlagVariants.findMany({
+              where: {
+                featureFlagId: { in: flagIds },
+                archivedAt: { isNull: true },
+              },
+            }),
+          ]);
+
+          const personContext = input.personId
+            ? yield* Effect.gen(function* () {
+                const [person, distinctIdentities, externalIdentifiers] = yield* Effect.all([
+                  db.query.persons.findFirst({
+                    where: {
+                      id: input.personId!,
+                      projectId: input.projectId,
+                    },
+                  }),
+                  db.query.personIdentities.findMany({
+                    where: {
+                      personId: input.personId!,
+                      projectId: input.projectId,
+                    },
+                  }),
+                  db.query.personExternalIdentifiers.findMany({
+                    where: {
+                      personId: input.personId!,
+                      projectId: input.projectId,
+                    },
+                  }),
+                ]);
+
+                return {
+                  distinctIds: distinctIdentities.map((identity) => identity.distinctId),
+                  email: person?.email ?? undefined,
+                  externalIds: externalIdentifiers.map((identifier) => identifier.identifier),
+                };
+              })
+            : undefined;
+
+          const targetsByFlag = groupByToMap(allTargets, (t) => t.featureFlagId);
+          const overridesByFlag = groupByToMap(allOverrides, (o) => o.featureFlagId);
+          const variantsByFlag = groupByToMap(allVariants, (v) => v.featureFlagId);
+
+          const results = yield* Effect.all(
+            flags.map((flag) =>
+              Effect.catch(
+                Effect.gen(function* () {
+                  const targets = targetsByFlag.get(flag.id) ?? [];
+                  const overrides = overridesByFlag.get(flag.id) ?? [];
+                  const variants = variantsByFlag.get(flag.id) ?? [];
+
+                  if (!flag.enabled) {
+                    return {
+                      enabled: false,
+                      flagId: flag.id,
+                      key: flag.key,
+                      payload: null,
+                      reason: "disabled",
+                      variantKey: null,
+                    } satisfies EvaluationResult;
+                  }
+
+                  const subjectIdentities: Array<{ type: number; value: string }> = [];
+                  const seen = new Set<string>();
+                  const pushIdentity = (type: number, value: string | undefined) => {
+                    if (!value) return;
+                    const key = `${type}:${value}`;
+                    if (seen.has(key)) return;
+                    seen.add(key);
+                    subjectIdentities.push({ type, value });
+                  };
+
+                  pushIdentity(FeatureFlagIdentityType.PersonId, input.personId);
+                  pushIdentity(FeatureFlagIdentityType.DistinctId, input.distinctId);
+                  for (const distinctId of personContext?.distinctIds ?? []) {
+                    pushIdentity(FeatureFlagIdentityType.DistinctId, distinctId);
+                  }
+                  pushIdentity(FeatureFlagIdentityType.Email, input.email ?? personContext?.email);
+                  for (const externalId of input.externalIds ?? []) {
+                    pushIdentity(FeatureFlagIdentityType.ExternalId, externalId);
+                  }
+                  for (const externalId of personContext?.externalIds ?? []) {
+                    pushIdentity(FeatureFlagIdentityType.ExternalId, externalId);
+                  }
+
+                  const override = subjectIdentities
+                    .map((identity) =>
+                      overrides.find(
+                        (o) =>
+                          o.identityType === identity.type && o.identityValue === identity.value,
+                      ),
+                    )
+                    .find((o) => typeof o !== "undefined");
+
+                  if (override) {
+                    if (override.forcedEnabled === false) {
+                      return {
+                        enabled: false,
+                        flagId: flag.id,
+                        key: flag.key,
+                        payload: null,
+                        reason: "override",
+                        variantKey: null,
+                      } satisfies EvaluationResult;
+                    }
+                    // A forced variant pins the subject to a specific arm
+                    // (QA/tester), bypassing variant bucketing. Checked before
+                    // `forcedEnabled === true` so an explicit arm wins over a
+                    // plain force-on. Payload is that variant's payload.
+                    if (override.forcedVariantKey) {
+                      const forcedVariant = variants.find(
+                        (v) => v.key === override.forcedVariantKey,
+                      );
+                      return {
+                        enabled: true,
+                        flagId: flag.id,
+                        key: flag.key,
+                        payload: forcedVariant?.payload ?? null,
+                        reason: "override",
+                        variantKey: override.forcedVariantKey,
+                      } satisfies EvaluationResult;
+                    }
+                    if (override.forcedEnabled === true) {
+                      return {
+                        enabled: true,
+                        flagId: flag.id,
+                        key: flag.key,
+                        payload: null,
+                        reason: "override",
+                        variantKey: null,
+                      } satisfies EvaluationResult;
+                    }
+                  }
+
+                  const matchesTarget = (target: (typeof targets)[number]) =>
+                    subjectIdentities.some(
+                      (id) => target.identityType === id.type && target.identityValue === id.value,
+                    );
+
+                  const denyTargets = targets.filter(
+                    (t) => t.listType === FeatureFlagTargetListType.Deny,
+                  );
+                  if (denyTargets.some(matchesTarget)) {
+                    return {
+                      enabled: false,
+                      flagId: flag.id,
+                      key: flag.key,
+                      payload: null,
+                      reason: "denied",
+                      variantKey: null,
+                    } satisfies EvaluationResult;
+                  }
+
+                  const allowTargets = targets.filter(
+                    (t) => t.listType === FeatureFlagTargetListType.Allow,
+                  );
+                  if (allowTargets.length > 0 && !allowTargets.some(matchesTarget)) {
+                    return {
+                      enabled: false,
+                      flagId: flag.id,
+                      key: flag.key,
+                      payload: null,
+                      reason: "not-allowed",
+                      variantKey: null,
+                    } satisfies EvaluationResult;
+                  }
+
+                  const subjectKey = input.personId ?? input.distinctId;
+                  if (!subjectKey) {
+                    return {
+                      enabled: false,
+                      flagId: flag.id,
+                      key: flag.key,
+                      payload: null,
+                      reason: "no-identity",
+                      variantKey: null,
+                    } satisfies EvaluationResult;
+                  }
+
+                  const rolloutBucket = yield* Effect.promise(() =>
+                    hashToBucket(`${flag.salt}:rollout:${subjectKey}`),
+                  );
+
+                  if (rolloutBucket >= flag.rolloutBps) {
+                    return {
+                      enabled: false,
+                      flagId: flag.id,
+                      key: flag.key,
+                      payload: null,
+                      reason: "rollout",
+                      variantKey: null,
+                    } satisfies EvaluationResult;
+                  }
+
+                  // Sort by `key` (not `id`): variant rows are deleted and
+                  // reinserted on every sync (fresh ids), so ordering by id
+                  // would shift cumulative-weight boundaries and reassign
+                  // already-bucketed subjects. Keys are stable across syncs.
+                  const activeVariants = variants
+                    .filter((variant) => variant.weightBps > 0)
+                    .sort((a, b) => a.key.localeCompare(b.key));
+
+                  if (activeVariants.length > 0) {
+                    const variantBucket = yield* Effect.promise(() =>
+                      hashToBucket(`${flag.salt}:variant:${subjectKey}`),
+                    );
+
+                    let cumulative = 0;
+                    for (const variant of activeVariants) {
+                      cumulative += variant.weightBps;
+                      if (variantBucket < cumulative) {
+                        return {
+                          enabled: true,
+                          flagId: flag.id,
+                          key: flag.key,
+                          payload: variant.payload ?? null,
+                          reason: "rollout",
+                          variantKey: variant.key,
+                        } satisfies EvaluationResult;
+                      }
+                    }
+                  }
+
+                  return {
+                    enabled: true,
+                    flagId: flag.id,
+                    key: flag.key,
+                    payload: null,
+                    reason: "rollout",
+                    variantKey: null,
+                  } satisfies EvaluationResult;
+                }),
+                () =>
+                  Effect.succeed({
+                    enabled: false,
+                    flagId: flag.id,
+                    key: flag.key,
+                    payload: null,
+                    reason: "error",
+                    variantKey: null,
+                  } satisfies EvaluationResult),
+              ),
+            ),
+          );
+
+          return results;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return {
+        archiveFlag,
+        archiveOverride,
+        archiveTarget,
+        createFlag,
+        createInternalFlag,
+        evaluateFlagsBatch,
+        getFlagById,
+        listFlags,
+        listOverridesByFlag,
+        listOverridesByPerson,
+        restoreFlag,
+        setInternalFlagState,
+        updateFlag,
+        updateFlagVariants,
+        upsertOverride,
+        upsertTarget,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(FeatureFlagService)(FeatureFlagService.make);
+}
diff --git a/packages/core/src/services/featureFlags/index.ts b/packages/core/src/services/featureFlags/index.ts
new file mode 100644
index 000000000..6cc81b358
--- /dev/null
+++ b/packages/core/src/services/featureFlags/index.ts
@@ -0,0 +1 @@
+export * from "./FeatureFlagService.ts";
diff --git a/packages/core/src/services/feedback/FeedbackService.ts b/packages/core/src/services/feedback/FeedbackService.ts
new file mode 100644
index 000000000..cb8930c83
--- /dev/null
+++ b/packages/core/src/services/feedback/FeedbackService.ts
@@ -0,0 +1,179 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { Db, voidhashFeedback } from "@voidhash/db";
+import {
+  FeedbackSentimentLabels,
+  type FeedbackSentimentValue,
+  FeedbackStatus,
+  FeedbackTopicLabels,
+  type FeedbackTopicValue,
+} from "@voidhash/lib";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { type SlackConfig, SlackClientTag, slackClientLayer } from "../slack/slack-client.ts";
+
+/** Tagged error raised by {@link FeedbackService} public methods. */
+export class FeedbackServiceError extends Schema.TaggedErrorClass<FeedbackServiceError>(
+  "FeedbackServiceError",
+)("FeedbackServiceError", { message: Schema.String }) {}
+
+/** Everything the submit endpoint accepts; identity is taken from the session. */
+export interface FeedbackSubmitInput {
+  readonly topic: string;
+  readonly sentiment: number | null;
+  readonly message: string;
+  readonly organizationId: string | null;
+  readonly projectId: string | null;
+  readonly pathname: string | null;
+  readonly userAgent: string | null;
+}
+
+/** Public {@link FeedbackService} surface. */
+export interface FeedbackServiceShape {
+  /**
+   * Persists one feedback item and relays it to Slack (best-effort). The
+   * submitter identity and the org/project display fields are resolved from the
+   * authenticated {@link AuthSession} — never trusted from the client — so a
+   * caller cannot spoof who sent the feedback or attach an org they are not a
+   * member of. Requires a `user` session; api-key sessions are rejected.
+   */
+  readonly submit: (
+    input: FeedbackSubmitInput,
+  ) => Effect.Effect<{ readonly id: string }, FeedbackServiceError, AuthSession>;
+}
+
+/** Service tag — the layer is built by {@link FeedbackServiceLive}. */
+export class FeedbackService extends Context.Service<FeedbackService, FeedbackServiceShape>()(
+  "FeedbackService",
+) {}
+
+/**
+ * Builds the Slack Block Kit payload for one feedback item. Exported for unit
+ * testing; the context block only includes the org/project/page/sentiment lines
+ * that are actually present.
+ */
+export const buildSlackMessage = (params: {
+  readonly topicLabel: string;
+  readonly sentimentLabel: string | null;
+  readonly message: string;
+  readonly userName: string;
+  readonly userEmail: string;
+  readonly organizationName: string | null;
+  readonly projectName: string | null;
+  readonly pathname: string | null;
+}) => {
+  const contextLines = [
+    `*From:* ${params.userName} (${params.userEmail})`,
+    params.organizationName ? `*Organization:* ${params.organizationName}` : null,
+    params.projectName ? `*Project:* ${params.projectName}` : null,
+    params.pathname ? `*Page:* \`${params.pathname}\`` : null,
+    params.sentimentLabel ? `*Sentiment:* ${params.sentimentLabel}` : null,
+  ]
+    .filter((line): line is string => line !== null)
+    .join("\n");
+
+  const blocks = [
+    {
+      type: "header",
+      text: { type: "plain_text", text: `New feedback · ${params.topicLabel}`, emoji: true },
+    },
+    { type: "section", text: { type: "mrkdwn", text: params.message } },
+    { type: "context", elements: [{ type: "mrkdwn", text: contextLines }] },
+  ];
+
+  const text = `New feedback (${params.topicLabel}) from ${params.userEmail}: ${params.message}`;
+  return { blocks, text };
+};
+
+const make = Effect.gen(function* () {
+  const db = yield* Db;
+  const slack = yield* SlackClientTag;
+
+  const submit: FeedbackServiceShape["submit"] = (input) =>
+    Effect.gen(function* () {
+      const session = yield* AuthSession;
+      if (session.method !== "user") {
+        return yield* Effect.fail(
+          new FeedbackServiceError({
+            message: "Feedback can only be submitted from an authenticated user session.",
+          }),
+        );
+      }
+      const user = session.user;
+      yield* Effect.annotateCurrentSpan("voidhash.user.id", user.id);
+
+      const organization = input.organizationId
+        ? (session.organizations.find((o) => o.id === input.organizationId) ?? null)
+        : null;
+      const project = input.projectId
+        ? (session.projects.find((p) => p.id === input.projectId) ?? null)
+        : null;
+
+      const id = generateId("voidhashFeedback");
+      yield* db.insert(voidhashFeedback).values({
+        id,
+        // Truncate to the column limit — the topic is a free string on the wire.
+        topic: input.topic.slice(0, 32),
+        sentiment: input.sentiment,
+        message: input.message,
+        status: FeedbackStatus.New,
+        userId: user.id,
+        userEmail: user.email,
+        userName: user.name,
+        organizationId: organization?.id ?? null,
+        organizationSlug: organization?.slug ?? null,
+        organizationName: organization?.name ?? null,
+        projectId: project?.id ?? null,
+        projectSlug: project?.slug ?? null,
+        projectName: project?.name ?? null,
+        // Truncate free-form client fields to their column limits so an
+        // unusually long value can never fail the insert (and lose the feedback).
+        pathname: input.pathname ? input.pathname.slice(0, 1024) : null,
+        userAgent: input.userAgent ? input.userAgent.slice(0, 512) : null,
+      });
+
+      const topicLabel = FeedbackTopicLabels[input.topic as FeedbackTopicValue] ?? input.topic;
+      const sentimentLabel =
+        input.sentiment != null
+          ? (FeedbackSentimentLabels[input.sentiment as FeedbackSentimentValue] ?? null)
+          : null;
+      const { blocks, text } = buildSlackMessage({
+        topicLabel,
+        sentimentLabel,
+        message: input.message,
+        userName: user.name,
+        userEmail: user.email,
+        organizationName: organization?.name ?? null,
+        projectName: project?.name ?? null,
+        pathname: input.pathname,
+      });
+
+      // Best-effort relay: a Slack outage must never fail the user's submission,
+      // which is already durably persisted above.
+      yield* slack.postMessage({ blocks, text }).pipe(
+        Effect.catchTags({
+          SlackClientError: (error) =>
+            Effect.logWarning(`Feedback Slack relay failed: ${error.message}`),
+        }),
+      );
+
+      return { id };
+    }).pipe(
+      Effect.catchTags({
+        EffectDrizzleQueryError: (error) =>
+          Effect.fail(new FeedbackServiceError({ message: String(error.cause) })),
+      }),
+    );
+
+  return { submit } satisfies FeedbackServiceShape;
+});
+
+/**
+ * Live {@link FeedbackService} layer. Wires its own {@link SlackClientTag} from
+ * the provided {@link SlackConfig}; `Db` is
+ * supplied by the surrounding domain-services graph. When Slack is unconfigured
+ * the relay silently no-ops, so feedback is still stored.
+ */
+export const FeedbackServiceLive = (config: SlackConfig): Layer.Layer<FeedbackService, never, Db> =>
+  Layer.effect(FeedbackService)(make).pipe(Layer.provide(slackClientLayer(config)));
diff --git a/packages/core/src/services/fxRates/FxRateService.ts b/packages/core/src/services/fxRates/FxRateService.ts
new file mode 100644
index 000000000..d3f4f24e4
--- /dev/null
+++ b/packages/core/src/services/fxRates/FxRateService.ts
@@ -0,0 +1,350 @@
+/**
+ * Foreign-exchange rate lookup. Owns the daily `(currency, USD)` cache used
+ * by purchase-processing to populate `transaction.*_amount_usd` columns and
+ * the USD payload on `PurchaseProcessingMoney`.
+ *
+ * Read path — two tiers, and it never contacts the upstream provider:
+ *   1. process-local {@link Cache} keyed by `(currency, asOfUtcDay)`, 1h TTL
+ *   2. durable cache in the `fx_rate` MySQL table
+ *
+ * A durable-cache miss for the exact `(currency, day)` falls back to the most
+ * recent earlier rate within {@link FX_RATE_CARRY_FORWARD_MAX_AGE_DAYS} days
+ * (carry-forward, so a purchase processed before the daily sync still gets a USD
+ * mirror); only when nothing is in range does the lookup return `Option.none()`.
+ * It never contacts the upstream provider on the read path either way — the
+ * provider (ExchangeRate-API) bills every request against a small monthly quota,
+ * so a read-path fetch would let a single unknown currency drain it. The
+ * in-memory cache memoizes the resolved value (carried rate or negative) too, so
+ * a given `(currency, day)` triggers at most one DB resolution per TTL window —
+ * the exact-day lookup, plus a single carry-forward scan when that day misses.
+ *
+ * The durable cache is filled by exactly two write paths, each of which
+ * calls the upstream `/latest/USD` endpoint once — a single request returns
+ * rates for every supported currency:
+ *   - {@link refreshLatest} — the daily refresh, dispatched by the
+ *     `FxRateSyncWorkflow` on a `0 5 * * *` cron from `BackendService`.
+ *   - {@link ensureSeeded} — a one-shot seed for an empty `fx_rate` table.
+ */
+import { Cache, Context, Duration, Effect, Layer, Option, Schema } from "effect";
+
+import { type FxRateLookup, USD_IDENTITY_RATE } from "../../domain/fxRate/FxRate.ts";
+import { Db, type DbError, fxRates } from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { createExchangeRateApiFxRateFetcher } from "./exchange-rate-api-fetcher.ts";
+
+/** Default in-memory cache TTL — matches the daily granularity of the data. */
+const DEFAULT_CACHE_TTL = Duration.hours(1);
+
+/** Default maximum number of `(currency, day)` keys to keep cached in memory. */
+const DEFAULT_CACHE_CAPACITY = 1024;
+
+/** Concurrency for the durable-cache fan-out on bulk persists. */
+const DEFAULT_PERSIST_CONCURRENCY = 8;
+
+/** Milliseconds in a day, for carry-forward staleness math. */
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+
+/**
+ * Carry-forward window for {@link FxRateService.getUsdRate}: when no rate exists
+ * for the exact `(currency, day)`, reuse the most recent earlier rate within
+ * this many days. FX drifts slowly, so a few days' staleness is well within
+ * rounding for revenue reporting; bounding it stops a delisted currency from
+ * carrying a stale rate indefinitely. This is what keeps a purchase processed
+ * before the daily `0 5 * * *` sync (or on a provider holiday) from losing its
+ * USD mirror.
+ */
+const FX_RATE_CARRY_FORWARD_MAX_AGE_DAYS = 7;
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` and upstream provider
+ * failures at the public-method boundary so callers see one stable error tag.
+ */
+export class FxRateServiceError extends Schema.TaggedErrorClass<FxRateServiceError>(
+  "FxRateServiceError",
+)("FxRateServiceError", { cause: Schema.String }) {}
+
+/**
+ * Pluggable upstream fetcher contract. The bulk endpoint returns one rate per
+ * currency the provider supports — the service persists all of them on every
+ * refresh so a single API call warms the cache for every supported currency.
+ */
+export interface FxRateFetcher {
+  readonly fetchLatestUsdRates: () => Effect.Effect<
+    ReadonlyArray<FxRateLookup>,
+    FxRateServiceError
+  >;
+}
+
+/**
+ * Service tag for the upstream fetcher. The live layer (built from
+ * {@link FxRateConfig}) wires in {@link createExchangeRateApiFxRateFetcher};
+ * tests provide their own via {@link FxRateService.layerWithFetcher}.
+ */
+export class FxRateFetcherTag extends Context.Service<FxRateFetcherTag, FxRateFetcher>()(
+  "core/FxRateFetcher",
+) {}
+
+/**
+ * Runtime configuration for the live ExchangeRate-API fetcher. Fields are
+ * Effect-of-string so the resolver (Alchemy variables / secrets / Config) is
+ * decoupled from the service constructor — matches the `WorkosConfig` pattern.
+ */
+export interface FxRateConfig {
+  readonly apiKey: Effect.Effect<string>;
+  readonly baseUrl?: Effect.Effect<string>;
+}
+
+const buildCacheKey = (currency: string, asOfDate: Date): string =>
+  `${currency}:${asOfDate.getTime()}`;
+
+const parseCacheKey = (key: string): { readonly currency: string; readonly asOfDate: Date } => {
+  const separatorIndex = key.indexOf(":");
+  return {
+    asOfDate: new Date(Number(key.slice(separatorIndex + 1))),
+    currency: key.slice(0, separatorIndex),
+  };
+};
+
+/** Truncates a `Date` to midnight UTC, matching the `(currency, as_of_date)` unique index. */
+const toUtcDay = (d: Date): Date =>
+  new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate()));
+
+/** Formats a `Date` as a low-cardinality `YYYY-MM-DD` UTC day label for span attributes. */
+const toUtcDayString = (d: Date): string => toUtcDay(d).toISOString().slice(0, 10);
+
+const make = Effect.gen(function* () {
+  const fetcher = yield* FxRateFetcherTag;
+  const db = yield* Db;
+  // Captured once for the process-local cache lookup below: `Cache.make` builds
+  // its lookup at construction time, so the lookup effect cannot itself require
+  // `Db`. FX reads never run inside a transaction, so binding the ambient `Db`
+  // here (rather than per-call) is safe.
+  const cacheDb = db;
+
+  /**
+   * In-memory cache lookup function: reads the durable DB cache only, never
+   * the upstream provider (see the module header for why). An exact-day miss
+   * carries forward the most recent earlier rate within
+   * {@link FX_RATE_CARRY_FORWARD_MAX_AGE_DAYS} days; only a true gap returns
+   * `Option.none()`, which the {@link Cache} memoizes for the TTL so an unknown
+   * currency doesn't repeatedly hit the DB either.
+   */
+  const loadRate = Effect.fn("FxRateService.loadRate")(function* (input: {
+    readonly currency: string;
+    readonly asOfDate: Date;
+  }) {
+    yield* Effect.annotateCurrentSpan("voidhash.fx.currency", input.currency);
+    yield* Effect.annotateCurrentSpan("voidhash.fx.as_of_day", toUtcDayString(input.asOfDate));
+    const cached = yield* db.query.fxRates.findFirst({
+      where: { currency: input.currency, asOfDate: { eq: input.asOfDate } },
+    });
+    if (cached) {
+      yield* Effect.annotateCurrentSpan("voidhash.fx.cache_outcome", "hit");
+      yield* Effect.annotateCurrentSpan("voidhash.fx.rate", cached.usdRate);
+      yield* Effect.annotateCurrentSpan("voidhash.fx.source", cached.source);
+      return Option.some<FxRateLookup>({
+        asOfDate: cached.asOfDate,
+        currency: input.currency,
+        rate: cached.usdRate,
+        source: cached.source,
+      });
+    }
+    // Carry-forward: no rate for this exact day (purchase processed before the
+    // daily sync, weekend, or a provider gap). Reuse the most recent earlier
+    // rate within the bounded staleness window instead of dropping the USD
+    // mirror — a missing mirror would under-count USD revenue downstream. Still
+    // returns `none` (no fetch) when nothing is in range, preserving the
+    // quota-safe read-path contract.
+    const carryForwardCutoff = new Date(
+      input.asOfDate.getTime() - FX_RATE_CARRY_FORWARD_MAX_AGE_DAYS * MS_PER_DAY,
+    );
+    const carried = yield* db.query.fxRates.findFirst({
+      orderBy: { asOfDate: "desc" },
+      where: {
+        currency: input.currency,
+        asOfDate: { lte: input.asOfDate, gte: carryForwardCutoff },
+      },
+    });
+    if (!carried) {
+      yield* Effect.annotateCurrentSpan("voidhash.fx.cache_outcome", "miss");
+      return Option.none<FxRateLookup>();
+    }
+    // Mark the source so a carried rate is distinguishable downstream, and
+    // record how stale it is for observability.
+    const carriedSource = `${carried.source}:carry_forward`;
+    yield* Effect.annotateCurrentSpan("voidhash.fx.cache_outcome", "carry_forward");
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.fx.carry_forward_days",
+      Math.round((input.asOfDate.getTime() - carried.asOfDate.getTime()) / MS_PER_DAY),
+    );
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.fx.rate_as_of_day",
+      toUtcDayString(carried.asOfDate),
+    );
+    yield* Effect.annotateCurrentSpan("voidhash.fx.rate", carried.usdRate);
+    yield* Effect.annotateCurrentSpan("voidhash.fx.source", carriedSource);
+    return Option.some<FxRateLookup>({
+      asOfDate: carried.asOfDate,
+      currency: input.currency,
+      rate: carried.usdRate,
+      source: carriedSource,
+    });
+  });
+
+  /**
+   * Hot-path cache: process-local {@link Cache} → durable DB cache via
+   * {@link loadRate}. Holds `Option<FxRateLookup>` so unknown-currency
+   * negatives are memoized for the TTL alongside the hits.
+   */
+  const cache = yield* Cache.make<string, Option.Option<FxRateLookup>, DbError>({
+    capacity: DEFAULT_CACHE_CAPACITY,
+    lookup: (key) => Effect.provideService(loadRate(parseCacheKey(key)), Db, cacheDb),
+    timeToLive: DEFAULT_CACHE_TTL,
+  });
+
+  const persistBulk = Effect.fn("FxRateService.persistBulk")(function* (
+    rates: ReadonlyArray<FxRateLookup>,
+  ) {
+    yield* Effect.annotateCurrentSpan("voidhash.fx.rate_count", rates.length);
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.fx.persist_concurrency",
+      DEFAULT_PERSIST_CONCURRENCY,
+    );
+    const fetchedAt = new Date();
+    yield* Effect.forEach(
+      rates,
+      (entry) =>
+        // Insert a fetched rate, treating a UNIQUE-key collision on
+        // `(currency, as_of_date)` as success — a concurrent caller already
+        // populated the row.
+        Effect.gen(function* () {
+          yield* db
+            .insert(fxRates)
+            .values({
+              asOfDate: entry.asOfDate,
+              currency: entry.currency,
+              fetchedAt,
+              id: generateId("fxRate"),
+              source: entry.source,
+              usdRate: entry.rate,
+            })
+            // No-op insert lets the INSERT short-circuit on a race instead of
+            // raising Postgres's unique_violation — DO NOTHING keeps the surviving row.
+            .onConflictDoNothing({ target: [fxRates.currency, fxRates.asOfDate] });
+        }),
+      { concurrency: DEFAULT_PERSIST_CONCURRENCY, discard: true },
+    );
+  });
+
+  /**
+   * Returns `currency → USD` for the given date, served from the in-memory
+   * cache backed by the durable DB cache. USD short-circuits to the identity
+   * rate without touching the cache. An exact-day miss carries forward the most
+   * recent earlier rate within {@link FX_RATE_CARRY_FORWARD_MAX_AGE_DAYS} days;
+   * `Option.none()` is returned (not an error, and without any upstream fetch)
+   * only when the durable cache has no rate for the currency within that window.
+   */
+  const getUsdRate = Effect.fn("FxRateService.getUsdRate")(function* (input: {
+    readonly currency: string;
+    readonly asOf: Date;
+  }) {
+    const currency = input.currency.toUpperCase();
+    const asOfDate = toUtcDay(input.asOf);
+    yield* Effect.annotateCurrentSpan("voidhash.fx.currency", currency);
+    yield* Effect.annotateCurrentSpan("voidhash.fx.as_of_day", toUtcDayString(asOfDate));
+    if (currency === "USD") {
+      yield* Effect.annotateCurrentSpan("voidhash.fx.cache_outcome", "identity");
+      yield* Effect.annotateCurrentSpan("voidhash.fx.rate", USD_IDENTITY_RATE);
+      yield* Effect.annotateCurrentSpan("voidhash.fx.source", "identity");
+      return Option.some<FxRateLookup>({
+        asOfDate,
+        currency: "USD",
+        rate: USD_IDENTITY_RATE,
+        source: "identity",
+      });
+    }
+    const result = yield* Cache.get(cache, buildCacheKey(currency, asOfDate));
+    if (Option.isSome(result)) {
+      yield* Effect.annotateCurrentSpan("voidhash.fx.rate", result.value.rate);
+      yield* Effect.annotateCurrentSpan("voidhash.fx.source", result.value.source);
+    }
+    return result;
+  });
+
+  /**
+   * Pulls the full set of supported rates from the upstream provider in a
+   * single request, persists them to the durable cache, and warms the
+   * in-memory cache. One of only two paths that spend the upstream request
+   * quota — the other is {@link ensureSeeded}. Dispatched by the daily
+   * `FxRateSyncWorkflow`; also safe to call ad-hoc (e.g. an admin endpoint).
+   * Returns the number of rates persisted so callers can log progress.
+   */
+  const refreshLatest = Effect.fn("FxRateService.refreshLatest")(function* () {
+    const rates = yield* fetcher.fetchLatestUsdRates();
+    yield* Effect.annotateCurrentSpan("voidhash.fx.rate_count", rates.length);
+    yield* persistBulk(rates);
+    yield* Effect.forEach(
+      rates,
+      (entry) =>
+        Cache.set(cache, buildCacheKey(entry.currency, entry.asOfDate), Option.some(entry)),
+      { discard: true },
+    );
+    return rates.length;
+  });
+
+  /**
+   * Seeds the durable cache from the upstream provider when — and only when
+   * — the `fx_rate` table is empty. Returns the number of rates seeded, or
+   * `0` when the cache was already populated.
+   */
+  const ensureSeeded = Effect.fn("FxRateService.ensureSeeded")(function* () {
+    const existingRow = yield* db.query.fxRates.findFirst();
+    const alreadyPopulated = existingRow !== undefined;
+    if (alreadyPopulated) {
+      yield* Effect.annotateCurrentSpan("voidhash.fx.seed_skipped", true);
+      yield* Effect.logDebug("FxRate durable cache already populated — skipping seed");
+      return 0;
+    }
+    yield* Effect.annotateCurrentSpan("voidhash.fx.seed_skipped", false);
+    yield* Effect.logInfo("FxRate durable cache is empty — seeding from the upstream provider");
+    const seededCount = yield* refreshLatest();
+    yield* Effect.annotateCurrentSpan("voidhash.fx.rate_count", seededCount);
+    yield* Effect.logInfo(`FxRate seed persisted ${seededCount} rate(s)`);
+    return seededCount;
+  });
+
+  return { ensureSeeded, getUsdRate, refreshLatest } as const;
+});
+
+const liveFetcherLayer = (config: FxRateConfig): Layer.Layer<FxRateFetcherTag> =>
+  Layer.effect(FxRateFetcherTag)(
+    Effect.gen(function* () {
+      const apiKey = yield* config.apiKey;
+      const baseUrl = config.baseUrl ? yield* config.baseUrl : undefined;
+      return createExchangeRateApiFxRateFetcher({ apiKey, baseUrl });
+    }),
+  );
+
+export class FxRateService extends Context.Service<FxRateService>()("core/FxRateService", {
+  make,
+}) {
+  /**
+   * Live layer. Wires the ExchangeRate-API fetcher from the provided
+   * {@link FxRateConfig}. The daily refresh is dispatched by
+   * `FxRateSyncWorkflow` on the `0 5 * * *` cron registered in
+   * `apps/backend/src/Service.ts`.
+   */
+  static readonly layer = (config: FxRateConfig): Layer.Layer<FxRateService, never, Db> =>
+    Layer.effect(FxRateService)(FxRateService.make).pipe(Layer.provide(liveFetcherLayer(config)));
+
+  /**
+   * Test-friendly layer that accepts an explicit fetcher and bypasses the
+   * upstream HTTP call.
+   */
+  static readonly layerWithFetcher = (
+    fetcher: FxRateFetcher,
+  ): Layer.Layer<FxRateService, never, Db> =>
+    Layer.effect(FxRateService)(FxRateService.make).pipe(
+      Layer.provide(Layer.succeed(FxRateFetcherTag, fetcher)),
+    );
+}
diff --git a/packages/core/src/services/fxRates/exchange-rate-api-fetcher.ts b/packages/core/src/services/fxRates/exchange-rate-api-fetcher.ts
new file mode 100644
index 000000000..121aa6846
--- /dev/null
+++ b/packages/core/src/services/fxRates/exchange-rate-api-fetcher.ts
@@ -0,0 +1,116 @@
+import { Effect } from "effect";
+
+import { FX_RATE_PRECISION, type FxRateLookup } from "../../domain/fxRate/FxRate.ts";
+import { FxRateServiceError, type FxRateFetcher } from "./FxRateService.ts";
+
+const DEFAULT_EXCHANGE_RATE_API_BASE_URL = "https://v6.exchangerate-api.com/v6";
+
+interface ExchangeRateApiLatestSuccessResponse {
+  readonly result: "success";
+  readonly time_last_update_unix: number;
+  readonly base_code: string;
+  readonly conversion_rates: Record<string, number>;
+}
+
+interface ExchangeRateApiErrorResponse {
+  readonly result: "error";
+  // The provider uses kebab-case `error-type` in JSON; both forms are tolerated
+  // here so the parser is robust against future naming changes.
+  readonly "error-type"?: string;
+  readonly error_type?: string;
+}
+
+type ExchangeRateApiLatestResponse =
+  | ExchangeRateApiLatestSuccessResponse
+  | ExchangeRateApiErrorResponse;
+
+const trimTrailingSlash = (value: string) => value.replace(/\/+$/u, "");
+
+/** Truncates a `Date` to midnight UTC, matching the `(currency, as_of_date)` unique index. */
+const toUtcDay = (d: Date): Date =>
+  new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate()));
+
+const buildLatestUrl = (options: { readonly baseUrl: string; readonly apiKey: string }): string =>
+  `${trimTrailingSlash(options.baseUrl)}/${encodeURIComponent(options.apiKey)}/latest/USD`;
+
+const getErrorType = (payload: ExchangeRateApiErrorResponse): string | undefined =>
+  payload["error-type"] ?? payload.error_type;
+
+/**
+ * Inverts `USD → X` quotes to `X → USD` rates expressed in
+ * `FX_RATE_PRECISION` units. Zero / non-finite quotes are skipped so a bad
+ * upstream entry doesn't poison the cache with `Infinity`.
+ */
+const invertRatesToUsdBase = (
+  conversionRates: Readonly<Record<string, number>>,
+  asOfDate: Date,
+  sourceLabel: string,
+): ReadonlyArray<FxRateLookup> => {
+  const out: FxRateLookup[] = [];
+  for (const [currency, usdToCurrencyRate] of Object.entries(conversionRates)) {
+    if (
+      typeof usdToCurrencyRate !== "number" ||
+      !Number.isFinite(usdToCurrencyRate) ||
+      usdToCurrencyRate <= 0
+    ) {
+      continue;
+    }
+    const currencyToUsd = currency.toUpperCase() === "USD" ? 1 : 1 / usdToCurrencyRate;
+    out.push({
+      asOfDate,
+      currency: currency.toUpperCase(),
+      rate: Math.round(currencyToUsd * FX_RATE_PRECISION),
+      source: sourceLabel,
+    });
+  }
+  return out;
+};
+
+/**
+ * Builds an {@link FxRateFetcher} backed by the ExchangeRate-API standard
+ * `/latest/USD` endpoint. Uses the runtime's built-in `fetch` so the fetcher
+ * runs natively on Cloudflare Workers without an Effect `HttpClient`
+ * dependency.
+ *
+ * See https://www.exchangerate-api.com/docs/standard-requests for the request
+ * / response format.
+ */
+export const createExchangeRateApiFxRateFetcher = (config: {
+  readonly apiKey: string;
+  readonly baseUrl?: string;
+}): FxRateFetcher => {
+  const baseUrl = trimTrailingSlash(config.baseUrl ?? DEFAULT_EXCHANGE_RATE_API_BASE_URL);
+  const url = buildLatestUrl({ apiKey: config.apiKey, baseUrl });
+
+  return {
+    fetchLatestUsdRates: () =>
+      Effect.tryPromise({
+        catch: (cause) =>
+          new FxRateServiceError({
+            cause: `ExchangeRate API fetch failed: ${cause instanceof Error ? cause.message : String(cause)}`,
+          }),
+        try: async (): Promise<ExchangeRateApiLatestResponse> => {
+          const response = await fetch(url, { headers: { Accept: "application/json" } });
+          if (!response.ok) {
+            throw new Error(`ExchangeRate API returned ${response.status}`);
+          }
+          return (await response.json()) as ExchangeRateApiLatestResponse;
+        },
+      }).pipe(
+        Effect.flatMap((payload) => {
+          if (payload.result !== "success") {
+            return Effect.fail(
+              new FxRateServiceError({
+                cause: `ExchangeRate API error: ${getErrorType(payload) ?? "unknown"}`,
+              }),
+            );
+          }
+          const asOfDate = toUtcDay(new Date(payload.time_last_update_unix * 1000));
+          const sourceLabel = `exchange-rate-api:latest:${payload.time_last_update_unix}`;
+          return Effect.succeed(
+            invertRatesToUsdBase(payload.conversion_rates, asOfDate, sourceLabel),
+          );
+        }),
+      ),
+  };
+};
diff --git a/packages/core/src/services/fxRates/index.ts b/packages/core/src/services/fxRates/index.ts
new file mode 100644
index 000000000..5e4d94371
--- /dev/null
+++ b/packages/core/src/services/fxRates/index.ts
@@ -0,0 +1,2 @@
+export * from "./FxRateService.ts";
+export { createExchangeRateApiFxRateFetcher } from "./exchange-rate-api-fetcher.ts";
diff --git a/packages/core/src/services/index.ts b/packages/core/src/services/index.ts
new file mode 100644
index 000000000..5a3dd0ab8
--- /dev/null
+++ b/packages/core/src/services/index.ts
@@ -0,0 +1,131 @@
+export * from "./analytics/AnalyticsService.ts";
+export * from "./voidql/VoidQlService.ts";
+export * from "./analyticsIngest/AnalyticsDispatchService.ts";
+export * from "./analyticsIngest/AnalyticsIngestDlqService.ts";
+export * from "./analyticsIngest/AnalyticsJanitorService.ts";
+export * from "./analyticsIngest/AnalyticsWriterService.ts";
+export * from "./analyticsIngest/CaptureIngress.ts";
+export * from "./analyticsIngest/DlqProducer.ts";
+export * from "./analyticsIngest/EventCaptureService.ts";
+export * from "./analyticsIngest/EventProcessorService.ts";
+export * from "./analyticsIngest/PolicyCounterStore.ts";
+export * from "./analyticsIngest/ProcessorOutputs.ts";
+export * from "./apiKeys/ApiKeyService.ts";
+export * from "./auditLog/AuditLogPort.ts";
+export * from "./auth/AuthTokenVerifier.ts";
+export * from "./auth/LocalUserSessionService.ts";
+export * from "./auth/WorkosLocalSyncService.ts";
+export * from "./auth/Workos.ts";
+export * from "./experiments/ExperimentService.ts";
+export * from "./featureFlags/FeatureFlagService.ts";
+export * from "./feedback/FeedbackService.ts";
+export * from "./fxRates/FxRateService.ts";
+export * from "./slack/slack-client.ts";
+export * from "./internalFeatureFlags/InternalFeatureFlagService.ts";
+export * from "./organizations/OrganizationService.ts";
+export * from "./organizations/OrganizationBillingPort.ts";
+export * from "./organizations/OrganizationMembershipSyncPort.ts";
+export * from "./organizations/OrganizationMembershipWebhookPort.ts";
+export * from "./organizations/WorkosOrgPort.ts";
+export * from "./paymentProviders/AppStorePaymentProviderService.ts";
+export * from "./paymentProviders/appStore/payment-provider-service.ts";
+export * from "./paymentProviders/appStore/app-store-reconciliation-service.ts";
+export * from "./paymentProviders/appStore/app-store-webhook-handler-service.ts";
+export * from "./paymentProviders/appStore/payment-provider-service-queries.ts";
+export * from "./paymentProviders/GooglePlayPaymentProviderService.ts";
+export * from "./paymentProviders/googlePlay/payment-provider-service.ts";
+export * from "./paymentProviders/googlePlay/webhook-handler-service.ts";
+export * from "./paymentProviders/googlePlay/payment-provider-service-queries.ts";
+export { GooglePlayServerApi } from "./paymentProviders/googlePlay/sdk-context.ts";
+export {
+  type AppStoreConfigProvider,
+  type AppStoreGlobalConfiguration,
+  type AppStoreProductConfiguration,
+  AppStorePaymentProviderConfigLive,
+  makeAppStoreConfigProvider,
+} from "./paymentProviders/appStore/config-provider.ts";
+export {
+  type GooglePlayConfigProvider,
+  type GooglePlayGlobalConfiguration,
+  type GooglePlayProductConfiguration,
+  GooglePlayPaymentProviderConfigLive,
+  makeGooglePlayConfigProvider,
+} from "./paymentProviders/googlePlay/config-provider.ts";
+export {
+  type StripeConfigProvider,
+  type StripeGlobalConfiguration,
+  type StripeProductConfiguration,
+  StripePaymentProviderConfigLive,
+  makeStripeConfigProvider,
+} from "./paymentProviders/stripe/config-provider.ts";
+// The App Store record engine shares the bare name `AppStorePaymentProvider`
+// with the config-adapter tag in `PaymentProvider.ts`; alias it so both are
+// importable. It is always *consumed* (provided to the handler / reconciliation
+// / Live service), never exposed alongside the config-adapter.
+export { AppStorePaymentProvider as AppStorePaymentProviderEngine } from "./paymentProviders/appStore/payment-provider.ts";
+// The Google Play record engine shares the bare name `GooglePlayPaymentProvider`
+// with the config-adapter tag in `PaymentProvider.ts`; alias it so both are
+// importable (same pattern as the App Store engine).
+export { GooglePlayPaymentProvider as GooglePlayPaymentProviderEngine } from "./paymentProviders/googlePlay/payment-provider.ts";
+// Stripe record engine, webhook handler, public service, queries, errors, and
+// the replay workflow port (the config-write slice is exported above). The
+// engine shares the bare name `StripePaymentProvider` with the config-adapter
+// tag in `PaymentProvider.ts`, so alias it as `StripePaymentProviderEngine`.
+export * from "./paymentProviders/StripePaymentProviderService.ts";
+export * from "./paymentProviders/StripeReplayParkedNotificationsWorkflow.ts";
+export * from "./paymentProviders/stripe/payment-provider-service.ts";
+export * from "./paymentProviders/stripe/stripe-webhook-handler-service.ts";
+export * from "./paymentProviders/stripe/payment-provider-service-queries.ts";
+export * from "./paymentProviders/stripe/errors.ts";
+export { StripePaymentProvider as StripePaymentProviderEngine } from "./paymentProviders/stripe/payment-provider.ts";
+export * from "./paymentProviders/PaymentProvider.ts";
+export { PaymentProviderConfigurationValidationError } from "../domain/paymentProvider/PaymentProviderConfiguration.ts";
+export { PaymentProviderProductValidationError } from "../domain/paymentProvider/PaymentProviderProduct.ts";
+export * from "./aiChat/AiChatService.ts";
+export * from "./paymentProviders/PaymentProviderConfigurationService.ts";
+export * from "./paymentProviders/PaymentProviderProductService.ts";
+export * from "./paywallAssets/PaywallAssetService.ts";
+export * from "./paywallDeploys/PaywallArtifactStore.ts";
+export * from "./paywallDeploys/PaywallDeployManifest.ts";
+export * from "./paywallDeploys/PaywallDeployService.ts";
+export * from "./paywallLocations/PaywallLocationService.ts";
+export * from "./paywallReleases/PaywallReleaseService.ts";
+export * from "./paywallReleases/SnapshotHtmlRenderer.ts";
+export * from "./paywallThumbnails/HtmlScreenshot.ts";
+export * from "./paywallThumbnails/PaywallThumbnailService.ts";
+export * from "./paywallThumbnails/SnapshotImageRenderer.ts";
+export * from "./paywalls/MimicHost.ts";
+export * from "./paywalls/PaywallService.ts";
+export * from "./paywallWorkspace/ComponentCompiler.ts";
+export * from "./paywallWorkspace/ComponentManifestCacheService.ts";
+export * from "./paywallWorkspace/PaywallWorkspaceService.ts";
+export * from "./perkGrants/PerkGrantService.ts";
+export * from "./perks/PerkService.ts";
+export * from "./personIdentity/IdentityMutationService.ts";
+export * from "./personIdentity/IdentityProjectionPublisher.ts";
+export * from "./personIdentity/IdentityProjectionRebuildService.ts";
+export * from "./personIdentity/PersonIdentityService.ts";
+export * from "./persons/PersonService.ts";
+export * from "./productPerks/ProductPerkService.ts";
+export * from "./products/ProductService.ts";
+export * from "./projects/ProjectService.ts";
+export * from "./purchaseProcessing/PurchaseLedgerWorkerService.ts";
+export * from "./purchaseProcessing/PurchaseProcessingService.ts";
+export * from "./purchases/PurchaseService.ts";
+export * from "./schema/SchemaCacheInvalidationService.ts";
+export * from "./schema/SchemaService.ts";
+export * from "./sdk/SdkService.ts";
+export * from "./storage/PublicFileStore.ts";
+export * from "./users/UserService.ts";
+export * from "./webhookDispatch/WebhookDispatchService.ts";
+export * from "./webhookManager/WebhookManagerService.ts";
+export * from "./notifications/push-delivery-provider.ts";
+export * from "./notifications/FirebaseCloudMessagingService.ts";
+export * from "./notifications/ApplePushNotificationService.ts";
+export * from "./notifications/NotificationsConfigurationService.ts";
+export * from "./notifications/PushNotificationSendService.ts";
+export * from "./notifications/PersonNotificationTokenService.ts";
+export * from "./notifications/NotificationTokenService.ts";
+export * from "./notifications/PushDeliveryDispatch.ts";
+export * from "./notifications/NotificationSendingService.ts";
+export * from "./notifications/PushDeliveryService.ts";
diff --git a/packages/core/src/services/infrastructure/QueueProducer.ts b/packages/core/src/services/infrastructure/QueueProducer.ts
new file mode 100644
index 000000000..01ea82c24
--- /dev/null
+++ b/packages/core/src/services/infrastructure/QueueProducer.ts
@@ -0,0 +1,8 @@
+/**
+ * Compatibility export for the provider-neutral queue contract now owned by
+ * `@voidhash/platform`.
+ */
+export {
+  QueueProducerError,
+  type QueueProducer,
+} from "@voidhash/platform/Queue";
diff --git a/packages/core/src/services/internalFeatureFlags/InternalFeatureFlagService.ts b/packages/core/src/services/internalFeatureFlags/InternalFeatureFlagService.ts
new file mode 100644
index 000000000..1438c16ef
--- /dev/null
+++ b/packages/core/src/services/internalFeatureFlags/InternalFeatureFlagService.ts
@@ -0,0 +1,224 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { Db, and, eq, inArray, internalFeatureFlagOverrides } from "@voidhash/db";
+import {
+  INTERNAL_FEATURE_FLAG_LIST,
+  isInternalFeatureFlagKey,
+  type InternalFeatureFlagKey,
+} from "@voidhash/rpc";
+
+import { generateId } from "../../utils/generate-id.ts";
+
+/** Tagged error raised by {@link InternalFeatureFlagService} public methods. */
+export class InternalFeatureFlagServiceError extends Schema.TaggedErrorClass<InternalFeatureFlagServiceError>(
+  "InternalFeatureFlagServiceError",
+)("InternalFeatureFlagServiceError", { message: Schema.String }) {}
+
+/** One internal feature flag resolved for an organization. */
+export interface ResolvedInternalFeatureFlag {
+  readonly key: string;
+  readonly name: string;
+  readonly description: string;
+  readonly defaultEnabled: boolean;
+  /** The explicit per-org override, or `null` when falling back to the default. */
+  readonly override: boolean | null;
+  /** The effective on/off state: `override ?? defaultEnabled`. */
+  readonly enabled: boolean;
+}
+
+/**
+ * Resolve the effective state for every registry flag given an org's override
+ * map, returning only the enabled flag keys. Stale override rows whose key is
+ * no longer in the registry are ignored.
+ */
+export const enabledKeysFromOverrides = (overrides: ReadonlyMap<string, boolean>): string[] =>
+  INTERNAL_FEATURE_FLAG_LIST.filter((flag) => overrides.get(flag.key) ?? flag.defaultEnabled).map(
+    (flag) => flag.key,
+  );
+
+/**
+ * Resolve the full catalog (every registry flag) against an org's override map,
+ * exposing the code default, the explicit override (or `null`), and the
+ * effective `enabled` state. Stale override keys not in the registry are
+ * ignored.
+ */
+export const resolveInternalFeatureFlagList = (
+  overrides: ReadonlyMap<string, boolean>,
+): ResolvedInternalFeatureFlag[] =>
+  INTERNAL_FEATURE_FLAG_LIST.map((flag) => {
+    const override = overrides.has(flag.key) ? (overrides.get(flag.key) as boolean) : null;
+    return {
+      key: flag.key,
+      name: flag.name,
+      description: flag.description,
+      defaultEnabled: flag.defaultEnabled,
+      override,
+      enabled: override ?? flag.defaultEnabled,
+    };
+  });
+
+/**
+ * `InternalFeatureFlagService` resolves and mutates our OWN (voidhash-internal)
+ * feature flags per organization. The available flags and their code defaults
+ * come from `INTERNAL_FEATURE_FLAGS` (`@voidhash/rpc`); this service layers
+ * per-org overrides stored in `internal_feature_flag_override` on top, applying
+ * the rule `enabled = override ?? defaultEnabled`.
+ *
+ * `Db` is provided by the application root. There is no `AuthSession`
+ * dependency — callers (the admin RPC group, the CurrentUser bootstrap, server
+ * gating) are responsible for authorization.
+ *
+ * ⚠️ Distinct from `FeatureFlagService`, which powers the customer-facing
+ * feature-flag product.
+ */
+export class InternalFeatureFlagService extends Context.Service<InternalFeatureFlagService>()(
+  "InternalFeatureFlagService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+
+      /** Load an organization's overrides as a `flagKey -> enabled` map. */
+      const loadOverrideMap = (organizationId: string) =>
+        Effect.gen(function* () {
+          const rows = yield* db
+            .select({
+              flagKey: internalFeatureFlagOverrides.flagKey,
+              enabled: internalFeatureFlagOverrides.enabled,
+            })
+            .from(internalFeatureFlagOverrides)
+            .where(eq(internalFeatureFlagOverrides.organizationId, organizationId));
+          return new Map(rows.map((row) => [row.flagKey, row.enabled]));
+        });
+
+      const resolveEnabledForOrganization = Effect.fn("resolveEnabledForOrganization")(
+        function* (organizationId: string) {
+          const overrides = yield* loadOverrideMap(organizationId);
+          return enabledKeysFromOverrides(overrides);
+        },
+        (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: mapDbError })),
+      );
+
+      const resolveEnabledForOrganizations = Effect.fn("resolveEnabledForOrganizations")(
+        function* (organizationIds: readonly string[]) {
+          const result: Record<string, string[]> = {};
+          if (organizationIds.length === 0) {
+            return result;
+          }
+
+          const rows = yield* db
+            .select({
+              organizationId: internalFeatureFlagOverrides.organizationId,
+              flagKey: internalFeatureFlagOverrides.flagKey,
+              enabled: internalFeatureFlagOverrides.enabled,
+            })
+            .from(internalFeatureFlagOverrides)
+            .where(inArray(internalFeatureFlagOverrides.organizationId, [...organizationIds]));
+
+          const byOrg = new Map<string, Map<string, boolean>>();
+          for (const row of rows) {
+            const map = byOrg.get(row.organizationId) ?? new Map<string, boolean>();
+            map.set(row.flagKey, row.enabled);
+            byOrg.set(row.organizationId, map);
+          }
+
+          for (const organizationId of organizationIds) {
+            result[organizationId] = enabledKeysFromOverrides(
+              byOrg.get(organizationId) ?? new Map(),
+            );
+          }
+          return result;
+        },
+        (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: mapDbError })),
+      );
+
+      const isEnabled = Effect.fn("isEnabled")(
+        function* (organizationId: string, key: InternalFeatureFlagKey) {
+          const definition = INTERNAL_FEATURE_FLAG_LIST.find((flag) => flag.key === key);
+          if (!definition) {
+            return false;
+          }
+          const row = yield* db
+            .select({ enabled: internalFeatureFlagOverrides.enabled })
+            .from(internalFeatureFlagOverrides)
+            .where(
+              and(
+                eq(internalFeatureFlagOverrides.organizationId, organizationId),
+                eq(internalFeatureFlagOverrides.flagKey, key),
+              ),
+            )
+            .limit(1);
+          return row[0]?.enabled ?? definition.defaultEnabled;
+        },
+        (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: mapDbError })),
+      );
+
+      const listForOrganization = Effect.fn("listForOrganization")(
+        function* (organizationId: string) {
+          const overrides = yield* loadOverrideMap(organizationId);
+          return resolveInternalFeatureFlagList(overrides);
+        },
+        (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: mapDbError })),
+      );
+
+      const setOverride = Effect.fn("setOverride")(
+        function* (organizationId: string, key: string, enabled: boolean) {
+          if (!isInternalFeatureFlagKey(key)) {
+            return yield* Effect.fail(
+              new InternalFeatureFlagServiceError({
+                message: `Unknown internal feature flag: ${key}`,
+              }),
+            );
+          }
+          yield* db
+            .insert(internalFeatureFlagOverrides)
+            .values({
+              id: generateId("internalFeatureFlagOverride"),
+              organizationId,
+              flagKey: key,
+              enabled,
+            })
+            .onConflictDoUpdate({
+              target: [
+                internalFeatureFlagOverrides.organizationId,
+                internalFeatureFlagOverrides.flagKey,
+              ],
+              set: { enabled, updatedAt: new Date() },
+            });
+        },
+        (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: mapDbError })),
+      );
+
+      const clearOverride = Effect.fn("clearOverride")(
+        function* (organizationId: string, key: string) {
+          yield* db
+            .delete(internalFeatureFlagOverrides)
+            .where(
+              and(
+                eq(internalFeatureFlagOverrides.organizationId, organizationId),
+                eq(internalFeatureFlagOverrides.flagKey, key),
+              ),
+            );
+        },
+        (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: mapDbError })),
+      );
+
+      return {
+        resolveEnabledForOrganization,
+        resolveEnabledForOrganizations,
+        isEnabled,
+        listForOrganization,
+        setOverride,
+        clearOverride,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(InternalFeatureFlagService)(InternalFeatureFlagService.make);
+}
+
+/** Map a drizzle query error to the service's tagged error. */
+function mapDbError(error: {
+  readonly cause: unknown;
+}): Effect.Effect<never, InternalFeatureFlagServiceError> {
+  return Effect.fail(new InternalFeatureFlagServiceError({ message: String(error.cause) }));
+}
diff --git a/packages/core/src/services/notifications/ApplePushNotificationService.ts b/packages/core/src/services/notifications/ApplePushNotificationService.ts
new file mode 100644
index 000000000..c8db4284a
--- /dev/null
+++ b/packages/core/src/services/notifications/ApplePushNotificationService.ts
@@ -0,0 +1,308 @@
+/**
+ * Apple Push Notification service adapter — the `provider='apns'` delivery edge.
+ * Config validation is fully built and NOT gated (APNs configs always save and
+ * enable). The `deliver` engine — ES256 provider-auth JWT (cached per isolate) →
+ * HTTP/2 `POST /3/device/{token}` → normalized classification — is fully built
+ * too, but is held behind a **runtime `deliveryEnabled` gate**: sending to APNs
+ * requires HTTP/2 + ALPN from a Worker, which can only be confirmed on a deployed
+ * preview/prod smoke test (local `workerd` fails ALPN). While the gate is closed
+ * (`APNS_DELIVERY_ENABLED` unset) `deliver` fails with the routable
+ * `PushNotImplementedError` (recorded Failed/skipped, never silently dropped).
+ * Flipping the env promotes it.
+ *
+ * `deliver` NEVER DEFECTS — the stored configuration is decrypted internally and
+ * every failure (decrypt, JWT sign, network) is mapped onto the normalized
+ * {@link PushDeliveryError} channel.
+ */
+import { Effect, Layer, Schema } from "effect";
+
+import { NotificationConfigValidationError } from "../../domain/notifications/PushNotificationConfiguration.ts";
+import { PaymentConfigSecretCrypto } from "../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { signJwtEs256 } from "../../utils/crypto/jwt-sign.ts";
+import { isEncrypted } from "../../utils/crypto/SecretBox.ts";
+import {
+  ApplePushNotificationService,
+  PushBadTokenError,
+  PushInvalidCredentialsError,
+  PushNotImplementedError,
+  PushPayloadTooLargeError,
+  PushRateExceededError,
+  PushTransientError,
+  PushUnregisteredError,
+  type DeviceToken,
+  type PushDeliveryError,
+  type PushDeliveryProviderShape,
+  type PushDeliverySuccess,
+  type PushMessage,
+} from "./push-delivery-provider.ts";
+
+const APNS_TEAM_ID_PATTERN = /^[A-Z0-9]{10}$/;
+const APNS_SEND_TIMEOUT_MS = 15_000;
+/** APNs provider tokens are valid for up to 1h; refresh well inside that window. */
+const APNS_TOKEN_TTL_SECONDS = 50 * 60;
+
+/** The persisted APNs configuration shape (inside `push_notification_config.configuration`). */
+export const apnsConfigurationSchema = Schema.Struct({
+  /** Apple Team ID -> JWT `iss` claim. */
+  teamId: Schema.String.check(Schema.isPattern(APNS_TEAM_ID_PATTERN)),
+  /** Auth Key ID -> JWT `kid` header. */
+  keyId: Schema.String.check(Schema.isMinLength(1)),
+  /** PEM `.p8` ES256 signing key. SECRET — encrypted on write, omitted on read. */
+  privateKeyContent: Schema.String.check(Schema.isMinLength(1)),
+  /** `apns-topic` + token validation + `pushProviderKey`. */
+  bundleId: Schema.String.check(Schema.isMinLength(1)),
+  /** Selects the endpoint host. */
+  environment: Schema.Literals(["sandbox", "production"]),
+});
+
+export type ApnsConfiguration = typeof apnsConfigurationSchema.Type;
+
+const APNS_DEFAULT_CONFIGURATION = {
+  teamId: "",
+  keyId: "",
+  privateKeyContent: "",
+  bundleId: "",
+  environment: "production",
+} as const satisfies Record<string, unknown>;
+
+const readString = (configuration: Record<string, unknown>, key: string): string => {
+  const value = configuration[key];
+  return typeof value === "string" ? value : "";
+};
+
+/**
+ * Build the APNs JSON payload — pure, unit-testable. Data fields are merged at
+ * the top level alongside `aps` (APNs custom keys convention).
+ */
+export const buildApnsPayload = (message: PushMessage): Record<string, unknown> => {
+  const aps: Record<string, unknown> = {
+    alert: { title: message.title, body: message.body },
+  };
+  if (message.sound) {
+    aps.sound = message.sound;
+  }
+  if (message.badge !== undefined) {
+    aps.badge = message.badge;
+  }
+  return { aps, ...(message.data ?? {}) };
+};
+
+/**
+ * Classify an APNs response onto the normalized error vocabulary — pure. APNs
+ * returns the failure `reason` in the JSON body; 410 (Unregistered) additionally
+ * carries a `timestamp` used by the freshness gate upstream.
+ */
+export const classifyApnsResult = (
+  statusCode: number,
+  bodyText: string,
+  apnsId?: string,
+): Effect.Effect<PushDeliverySuccess, PushDeliveryError> => {
+  if (statusCode >= 200 && statusCode < 300) {
+    return Effect.succeed({ statusCode, providerMessageId: apnsId });
+  }
+
+  let reason = "";
+  try {
+    const parsed = JSON.parse(bodyText) as { reason?: unknown };
+    reason = typeof parsed.reason === "string" ? parsed.reason : "";
+  } catch {
+    reason = "";
+  }
+
+  switch (reason) {
+    case "Unregistered":
+      return Effect.fail(new PushUnregisteredError({ statusCode }));
+    case "BadDeviceToken":
+    case "DeviceTokenNotForTopic":
+      return Effect.fail(new PushBadTokenError({ statusCode }));
+    case "PayloadTooLarge":
+      return Effect.fail(new PushPayloadTooLargeError({ statusCode }));
+    case "TooManyRequests":
+      return Effect.fail(new PushRateExceededError({ statusCode }));
+    case "ExpiredProviderToken":
+    case "InvalidProviderToken":
+    case "MissingProviderToken":
+      return Effect.fail(new PushInvalidCredentialsError({ statusCode }));
+    default:
+      break;
+  }
+  if (statusCode === 410) {
+    return Effect.fail(new PushUnregisteredError({ statusCode }));
+  }
+  if (statusCode === 403) {
+    return Effect.fail(new PushInvalidCredentialsError({ statusCode }));
+  }
+  if (statusCode === 413) {
+    return Effect.fail(new PushPayloadTooLargeError({ statusCode }));
+  }
+  if (statusCode === 429) {
+    return Effect.fail(new PushRateExceededError({ statusCode }));
+  }
+  if (statusCode >= 500) {
+    return Effect.fail(new PushTransientError({ statusCode }));
+  }
+  return Effect.fail(new PushBadTokenError({ statusCode }));
+};
+
+interface CachedProviderToken {
+  readonly token: string;
+  readonly issuedAtEpochMs: number;
+}
+
+/**
+ * Builds the erased {@link PushDeliveryProviderShape} for APNs, closing over the
+ * shared secret crypto seam, a per-isolate provider-token cache, and the
+ * runtime delivery gate. When `deliveryEnabled` is false, `deliver` short-circuits
+ * to the `NotImplemented` sentinel — the real HTTP/2 path stays dormant until a
+ * deployed smoke test verifies ALPN from a Worker.
+ */
+export const makeApplePushNotificationProvider = (
+  secretCrypto: typeof PaymentConfigSecretCrypto.Service,
+  deliveryEnabled: boolean,
+): PushDeliveryProviderShape<"apns"> => {
+  // Provider-auth token cache keyed by `${teamId}:${keyId}` (a single Apple
+  // token authenticates ALL topics for that key). A shared cross-isolate cache
+  // is a Phase-3 concern; per-isolate is sufficient here.
+  const tokenCache = new Map<string, CachedProviderToken>();
+
+  const getProviderToken = (
+    teamId: string,
+    keyId: string,
+    privateKeyPem: string,
+  ): Effect.Effect<string, PushDeliveryError> => {
+    const cacheKey = `${teamId}:${keyId}`;
+    const cached = tokenCache.get(cacheKey);
+    if (cached && Date.now() - cached.issuedAtEpochMs < APNS_TOKEN_TTL_SECONDS * 1000) {
+      return Effect.succeed(cached.token);
+    }
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    return signJwtEs256(keyId, { iss: teamId, iat: nowSeconds }, privateKeyPem).pipe(
+      Effect.map((token) => {
+        tokenCache.set(cacheKey, { token, issuedAtEpochMs: Date.now() });
+        return token;
+      }),
+      Effect.mapError(() => new PushInvalidCredentialsError({})),
+    );
+  };
+
+  const deliver = (
+    configuration: Record<string, unknown>,
+    token: DeviceToken,
+    message: PushMessage,
+  ): Effect.Effect<PushDeliverySuccess, PushDeliveryError> => {
+    if (!deliveryEnabled) {
+      // Gate closed: fail with the routable `PushNotImplementedError` so the
+      // delivery row records Failed (not Succeeded) rather than being dropped.
+      return Effect.fail(new PushNotImplementedError({}));
+    }
+    return Effect.gen(function* () {
+      const teamId = readString(configuration, "teamId");
+      const keyId = readString(configuration, "keyId");
+      const bundleId = token.bundleId ?? readString(configuration, "bundleId");
+      const environment =
+        token.environment ?? (readString(configuration, "environment") || "production");
+      const privateKeyPem = yield* secretCrypto
+        .decrypt(readString(configuration, "privateKeyContent"))
+        .pipe(Effect.mapError(() => new PushInvalidCredentialsError({})));
+
+      const providerToken = yield* getProviderToken(teamId, keyId, privateKeyPem);
+      const host = environment === "sandbox" ? "api.sandbox.push.apple.com" : "api.push.apple.com";
+      const apnsHeaders: Record<string, string> = {
+        authorization: `bearer ${providerToken}`,
+        "apns-topic": bundleId,
+        "apns-push-type": "alert",
+        "apns-priority": message.priority === "high" ? "10" : "5",
+      };
+      if (message.collapseId) {
+        apnsHeaders["apns-collapse-id"] = message.collapseId;
+      }
+      if (message.ttl !== undefined) {
+        apnsHeaders["apns-expiration"] = String(Math.floor(Date.now() / 1000) + message.ttl);
+      }
+
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), APNS_SEND_TIMEOUT_MS);
+      // `tryPromise` maps a network error / abort timeout to a retryable typed
+      // error; the raw response is classified below (outside the promise) so the
+      // classifier's own error channel composes cleanly.
+      const raw = yield* Effect.tryPromise({
+        try: async () => {
+          try {
+            const response = await fetch(`https://${host}/3/device/${token.platformToken}`, {
+              method: "POST",
+              headers: apnsHeaders,
+              body: JSON.stringify(buildApnsPayload(message)),
+              signal: controller.signal,
+            });
+            const bodyText = await response.text().catch(() => "");
+            return {
+              status: response.status,
+              bodyText,
+              apnsId: response.headers.get("apns-id") ?? undefined,
+            };
+          } finally {
+            clearTimeout(timeout);
+          }
+        },
+        catch: () => new PushTransientError({}),
+      });
+      return yield* classifyApnsResult(raw.status, raw.bodyText, raw.apnsId);
+    });
+  };
+
+  return {
+    id: "apns",
+    title: "Apple Push Notification service",
+    defaultGlobalConfiguration: () => Effect.succeed({ ...APNS_DEFAULT_CONFIGURATION }),
+    validateGlobalConfiguration: (configuration) =>
+      Schema.decodeUnknownEffect(apnsConfigurationSchema)(configuration).pipe(
+        Effect.mapError((error) => new NotificationConfigValidationError({ cause: error.message })),
+        Effect.flatMap((parsed) =>
+          // Encrypt the .p8 private key before persist (idempotent). A
+          // `SecretKeyError` is a deploy misconfiguration — fail as a defect.
+          secretCrypto.encrypt(parsed.privateKeyContent).pipe(
+            Effect.map((privateKeyContent) => ({
+              parsedConfiguration: { ...parsed, privateKeyContent },
+              pushProviderKey: parsed.bundleId,
+            })),
+            Effect.orDie,
+          ),
+        ),
+      ),
+    toReadDto: (configuration) => ({
+      teamId: readString(configuration, "teamId"),
+      keyId: readString(configuration, "keyId"),
+      bundleId: readString(configuration, "bundleId"),
+      environment: configuration.environment ?? "production",
+      hasPrivateKey: readString(configuration, "privateKeyContent").length > 0,
+    }),
+    hasPlaintextSecret: (configuration) => {
+      const secret = readString(configuration, "privateKeyContent");
+      return secret.length > 0 && !isEncrypted(secret);
+    },
+    deliver,
+  };
+};
+
+/**
+ * The Live layer (requires {@link PaymentConfigSecretCrypto}). `deliveryEnabled`
+ * is resolved at layer build from the injected effect (the app root reads
+ * `APNS_DELIVERY_ENABLED`); default OFF keeps the HTTP/2 gate closed.
+ */
+export const makeApplePushNotificationServiceConfigLive = (config: {
+  readonly deliveryEnabled: Effect.Effect<boolean>;
+}): Layer.Layer<ApplePushNotificationService, never, PaymentConfigSecretCrypto> =>
+  Layer.effect(ApplePushNotificationService)(
+    Effect.gen(function* () {
+      const secretCrypto = yield* PaymentConfigSecretCrypto;
+      const deliveryEnabled = yield* config.deliveryEnabled;
+      return makeApplePushNotificationProvider(secretCrypto, deliveryEnabled);
+    }),
+  );
+
+/** Back-compat Live layer with the delivery gate CLOSED (config-write only). */
+export const ApplePushNotificationServiceConfigLive: Layer.Layer<
+  ApplePushNotificationService,
+  never,
+  PaymentConfigSecretCrypto
+> = makeApplePushNotificationServiceConfigLive({ deliveryEnabled: Effect.succeed(false) });
diff --git a/packages/core/src/services/notifications/FirebaseCloudMessagingService.ts b/packages/core/src/services/notifications/FirebaseCloudMessagingService.ts
new file mode 100644
index 000000000..79f55c805
--- /dev/null
+++ b/packages/core/src/services/notifications/FirebaseCloudMessagingService.ts
@@ -0,0 +1,466 @@
+/**
+ * Firebase Cloud Messaging adapter — the `provider='fcm'` delivery edge and the
+ * primary push transport. Ships the full config-write slice
+ * (`defaultGlobalConfiguration`, `validateGlobalConfiguration` with
+ * **encrypt-on-write** of the service-account JSON, secret-omitting `toReadDto`,
+ * and the fail-closed `hasPlaintextSecret` gate helper) AND the live `deliver`
+ * engine: RS256 service-account JWT → OAuth2 access token (cached per isolate) →
+ * `POST /v1/projects/{id}/messages:send`, with the response classified onto the
+ * normalized {@link PushDeliveryError} tagged-error channel.
+ *
+ * FCM addresses devices by FCM registration token ONLY (Android, and iOS that
+ * integrates the Firebase iOS SDK, via the `apns` override). It cannot address a
+ * raw APNs hex token — those route through {@link ApplePushNotificationService}.
+ *
+ * `deliver` NEVER defects: the stored configuration is handed in verbatim (secret
+ * still encrypted) and decrypted internally, so every failure — decrypt, JWT
+ * sign, OAuth, network — is mapped onto the normalized {@link PushDeliveryError}
+ * channel rather than thrown.
+ */
+import { Effect, Layer, Schema } from "effect";
+
+import { NotificationConfigValidationError } from "../../domain/notifications/PushNotificationConfiguration.ts";
+import { PaymentConfigSecretCrypto } from "../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { signJwtRs256 } from "../../utils/crypto/jwt-sign.ts";
+import { isEncrypted } from "../../utils/crypto/SecretBox.ts";
+import {
+  FirebaseCloudMessagingService,
+  PushBadTokenError,
+  PushInvalidCredentialsError,
+  PushPayloadTooLargeError,
+  PushRateExceededError,
+  PushTransientError,
+  PushUnregisteredError,
+  type DeviceToken,
+  type PushDeliveryError,
+  type PushDeliveryProviderShape,
+  type PushDeliverySuccess,
+  type PushMessage,
+} from "./push-delivery-provider.ts";
+
+/** The persisted FCM configuration shape (inside `push_notification_config.configuration`). */
+export const fcmConfigurationSchema = Schema.Struct({
+  /** FCM project id — the `{project_id}` path segment; becomes `pushProviderKey`. */
+  projectId: Schema.String.check(Schema.isMinLength(1)),
+  /**
+   * The service-account JSON (`client_email` + `private_key` + `token_uri` +
+   * `project_id`) serialized as a string. SECRET — encrypted on write, omitted
+   * on read. MUST be a dedicated minimal-scope account (FCM API only).
+   */
+  serviceAccountJson: Schema.String.check(Schema.isMinLength(1)),
+  androidPriority: Schema.optional(Schema.Literals(["high", "normal"])),
+  androidTtl: Schema.optional(Schema.String),
+  apnsPriority: Schema.optional(Schema.Literals(["5", "10"])),
+});
+
+export type FcmConfiguration = typeof fcmConfigurationSchema.Type;
+
+const FCM_DEFAULT_CONFIGURATION = {
+  projectId: "",
+  serviceAccountJson: "",
+  androidPriority: "normal",
+  androidTtl: "2419200s", // 28d, the FCM max
+  apnsPriority: "10",
+} as const satisfies Record<string, unknown>;
+
+const FCM_OAUTH_SCOPE = "https://www.googleapis.com/auth/firebase.messaging";
+const FCM_DEFAULT_TOKEN_URI = "https://oauth2.googleapis.com/token";
+const FCM_SEND_TIMEOUT_MS = 15_000;
+/** Refresh a cached OAuth token this many seconds before its stated expiry. */
+const FCM_TOKEN_REFRESH_SKEW_SECONDS = 60;
+
+const readString = (configuration: Record<string, unknown>, key: string): string => {
+  const value = configuration[key];
+  return typeof value === "string" ? value : "";
+};
+
+/** Parsed service-account credentials extracted from the config secret JSON. */
+interface ServiceAccount {
+  readonly clientEmail: string;
+  readonly privateKey: string;
+  readonly tokenUri: string;
+}
+
+const parseServiceAccount = (json: string): ServiceAccount => {
+  const parsed = JSON.parse(json) as {
+    client_email?: unknown;
+    private_key?: unknown;
+    token_uri?: unknown;
+  };
+  const clientEmail = typeof parsed.client_email === "string" ? parsed.client_email : "";
+  const privateKey = typeof parsed.private_key === "string" ? parsed.private_key : "";
+  if (clientEmail.length === 0 || privateKey.length === 0) {
+    throw new Error("service-account JSON missing client_email or private_key");
+  }
+  return {
+    clientEmail,
+    privateKey,
+    tokenUri: typeof parsed.token_uri === "string" ? parsed.token_uri : FCM_DEFAULT_TOKEN_URI,
+  };
+};
+
+/**
+ * FCM v1 message body builder — pure, so it is unit-testable in isolation. Maps
+ * the unified {@link PushMessage} to the platform-specific overrides FCM expects:
+ * `data` values are coerced to strings (FCM rejects non-string data), and both
+ * the `android` and `apns` blocks carry the priority/ttl/collapse hints.
+ */
+export const buildFcmMessage = (
+  fcmToken: string,
+  message: PushMessage,
+  options: { readonly androidTtl?: string; readonly apnsPriority?: string },
+): Record<string, unknown> => {
+  const data =
+    message.data === undefined
+      ? undefined
+      : Object.fromEntries(
+          Object.entries(message.data).map(([key, value]) => [
+            key,
+            typeof value === "string" ? value : JSON.stringify(value),
+          ]),
+        );
+
+  const android: Record<string, unknown> = {
+    priority: message.priority === "high" ? "HIGH" : "NORMAL",
+  };
+  if (options.androidTtl) {
+    android.ttl = options.androidTtl;
+  }
+  if (message.collapseId) {
+    android.collapse_key = message.collapseId;
+  }
+  if (message.channelId || message.sound) {
+    android.notification = {
+      ...(message.channelId ? { channel_id: message.channelId } : {}),
+      ...(message.sound ? { sound: message.sound } : {}),
+    };
+  }
+
+  const apnsHeaders: Record<string, string> = {
+    "apns-priority": options.apnsPriority ?? "10",
+  };
+  if (message.collapseId) {
+    apnsHeaders["apns-collapse-id"] = message.collapseId;
+  }
+  const aps: Record<string, unknown> = {
+    alert: { title: message.title, body: message.body },
+  };
+  if (message.sound) {
+    aps.sound = message.sound;
+  }
+  if (message.badge !== undefined) {
+    aps.badge = message.badge;
+  }
+
+  return {
+    message: {
+      token: fcmToken,
+      notification: { title: message.title, body: message.body },
+      ...(data ? { data } : {}),
+      android,
+      apns: { headers: apnsHeaders, payload: { aps } },
+    },
+  };
+};
+
+/**
+ * Classify an FCM `messages:send` HTTP response onto the normalized error
+ * vocabulary — pure so the (terminal vs retryable) decision is directly tested.
+ * FCM v1 carries the canonical error in `error.details[].errorCode`, falling back
+ * to `error.status`. Misclassification is unforgiving (see the enum docs), so the
+ * mapping is explicit and conservative: unknown 4xx is terminal `BadToken`,
+ * unknown 5xx is retryable `Transient`.
+ */
+export const classifyFcmResult = (
+  statusCode: number,
+  bodyText: string,
+  retryAfterSeconds?: number,
+): Effect.Effect<PushDeliverySuccess, PushDeliveryError> => {
+  if (statusCode >= 200 && statusCode < 300) {
+    let providerMessageId: string | undefined;
+    try {
+      const parsed = JSON.parse(bodyText) as { name?: unknown };
+      providerMessageId = typeof parsed.name === "string" ? parsed.name : undefined;
+    } catch {
+      providerMessageId = undefined;
+    }
+    return Effect.succeed({ statusCode, providerMessageId });
+  }
+
+  let errorCode = "";
+  try {
+    const parsed = JSON.parse(bodyText) as {
+      error?: { status?: unknown; details?: ReadonlyArray<{ errorCode?: unknown }> };
+    };
+    const detailCode = parsed.error?.details?.find(
+      (detail) => typeof detail?.errorCode === "string",
+    )?.errorCode;
+    errorCode =
+      (typeof detailCode === "string" ? detailCode : undefined) ??
+      (typeof parsed.error?.status === "string" ? parsed.error.status : "") ??
+      "";
+  } catch {
+    errorCode = "";
+  }
+
+  switch (errorCode) {
+    case "UNREGISTERED":
+      return Effect.fail(new PushUnregisteredError({ statusCode }));
+    case "INVALID_ARGUMENT":
+    case "SENDER_ID_MISMATCH":
+      return Effect.fail(new PushBadTokenError({ statusCode }));
+    case "QUOTA_EXCEEDED":
+      return Effect.fail(new PushRateExceededError({ statusCode, retryAfterSeconds }));
+    case "THIRD_PARTY_AUTH_ERROR":
+      return Effect.fail(new PushInvalidCredentialsError({ statusCode }));
+    case "UNAVAILABLE":
+    case "INTERNAL":
+      return Effect.fail(new PushTransientError({ statusCode, retryAfterSeconds }));
+    default:
+      break;
+  }
+  if (statusCode === 401 || statusCode === 403) {
+    return Effect.fail(new PushInvalidCredentialsError({ statusCode }));
+  }
+  if (statusCode === 404) {
+    return Effect.fail(new PushUnregisteredError({ statusCode }));
+  }
+  if (statusCode === 400) {
+    return Effect.fail(new PushBadTokenError({ statusCode }));
+  }
+  if (statusCode === 413) {
+    return Effect.fail(new PushPayloadTooLargeError({ statusCode }));
+  }
+  if (statusCode === 429) {
+    return Effect.fail(new PushRateExceededError({ statusCode, retryAfterSeconds }));
+  }
+  if (statusCode >= 500) {
+    return Effect.fail(new PushTransientError({ statusCode, retryAfterSeconds }));
+  }
+  return Effect.fail(new PushBadTokenError({ statusCode }));
+};
+
+const parseRetryAfterSeconds = (headerValue: string | null): number | undefined => {
+  if (!headerValue) {
+    return undefined;
+  }
+  const asSeconds = Number(headerValue);
+  return Number.isFinite(asSeconds) && asSeconds >= 0 ? asSeconds : undefined;
+};
+
+interface CachedAccessToken {
+  readonly token: string;
+  readonly expiresAtEpochMs: number;
+}
+
+/**
+ * Builds the erased {@link PushDeliveryProviderShape} for FCM, closing over the
+ * shared secret crypto seam and a per-isolate OAuth token cache. Returning the
+ * erased shape (rather than the typed `PushDeliveryProvider`) keeps it directly
+ * assignable to the {@link FirebaseCloudMessagingService} tag.
+ */
+export const makeFirebaseCloudMessagingProvider = (
+  secretCrypto: typeof PaymentConfigSecretCrypto.Service,
+): PushDeliveryProviderShape<"fcm"> => {
+  // Per-isolate OAuth access-token cache keyed by service-account email. Bounded
+  // by the (tiny) number of distinct FCM configs an isolate serves; a shared
+  // KV/DO cache is a Phase-3 concern. Concurrent refreshes are harmless (last
+  // write wins), so no lock is taken.
+  const tokenCache = new Map<string, CachedAccessToken>();
+
+  const fetchAccessToken = (account: ServiceAccount): Effect.Effect<string, PushDeliveryError> =>
+    Effect.gen(function* () {
+      const nowSeconds = Math.floor(Date.now() / 1000);
+      const jwt = yield* signJwtRs256(
+        {
+          iss: account.clientEmail,
+          scope: FCM_OAUTH_SCOPE,
+          aud: account.tokenUri,
+          iat: nowSeconds,
+          exp: nowSeconds + 3600,
+        },
+        account.privateKey,
+      ).pipe(Effect.mapError(() => new PushInvalidCredentialsError({})));
+
+      const response = yield* Effect.tryPromise({
+        try: () =>
+          fetch(account.tokenUri, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+              grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+              assertion: jwt,
+            }).toString(),
+          }),
+        catch: () => new PushTransientError({}),
+      });
+      const bodyText = yield* Effect.promise(() => response.text().catch(() => ""));
+      if (!response.ok) {
+        // 4xx from the token endpoint means the credentials are bad (terminal
+        // config); 5xx is a transient Google outage.
+        return yield* Effect.fail(
+          response.status >= 500
+            ? new PushTransientError({ statusCode: response.status })
+            : new PushInvalidCredentialsError({ statusCode: response.status }),
+        );
+      }
+      // Guard the parse: a non-JSON token response must NOT throw a defect (the
+      // consumer recovers typed errors from `deliver`, never defects).
+      const parsed = yield* Effect.try({
+        try: () => JSON.parse(bodyText) as { access_token?: unknown; expires_in?: unknown },
+        catch: () => new PushInvalidCredentialsError({}),
+      });
+      const accessToken = typeof parsed.access_token === "string" ? parsed.access_token : "";
+      if (accessToken.length === 0) {
+        return yield* Effect.fail(new PushInvalidCredentialsError({}));
+      }
+      const expiresIn = typeof parsed.expires_in === "number" ? parsed.expires_in : 3600;
+      tokenCache.set(account.clientEmail, {
+        token: accessToken,
+        expiresAtEpochMs: Date.now() + expiresIn * 1000,
+      });
+      return accessToken;
+    });
+
+  const getAccessToken = (
+    account: ServiceAccount,
+    forceRefresh: boolean,
+  ): Effect.Effect<string, PushDeliveryError> => {
+    if (!forceRefresh) {
+      const cached = tokenCache.get(account.clientEmail);
+      if (cached && cached.expiresAtEpochMs - FCM_TOKEN_REFRESH_SKEW_SECONDS * 1000 > Date.now()) {
+        return Effect.succeed(cached.token);
+      }
+    } else {
+      tokenCache.delete(account.clientEmail);
+    }
+    return fetchAccessToken(account);
+  };
+
+  const sendOnce = (
+    projectId: string,
+    accessToken: string,
+    body: Record<string, unknown>,
+  ): Effect.Effect<
+    { readonly status: number; readonly bodyText: string; readonly retryAfter?: number },
+    PushDeliveryError
+  > =>
+    Effect.gen(function* () {
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), FCM_SEND_TIMEOUT_MS);
+      // `tryPromise` (not `promise`): a network error or the AbortController
+      // timeout rejects — map it to a RETRYABLE typed error, never a defect that
+      // escapes the `deliver` error channel.
+      return yield* Effect.tryPromise({
+        try: async () => {
+          try {
+            const response = await fetch(
+              `https://fcm.googleapis.com/v1/projects/${projectId}/messages:send`,
+              {
+                method: "POST",
+                headers: {
+                  Authorization: `Bearer ${accessToken}`,
+                  "Content-Type": "application/json",
+                },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+              },
+            );
+            const bodyText = await response.text().catch(() => "");
+            return {
+              status: response.status,
+              bodyText,
+              retryAfter: parseRetryAfterSeconds(response.headers.get("Retry-After")),
+            };
+          } finally {
+            clearTimeout(timeout);
+          }
+        },
+        catch: () => new PushTransientError({}),
+      });
+    });
+
+  const deliver = (
+    configuration: Record<string, unknown>,
+    token: DeviceToken,
+    message: PushMessage,
+  ): Effect.Effect<PushDeliverySuccess, PushDeliveryError> =>
+    Effect.gen(function* () {
+      const projectId = readString(configuration, "projectId");
+      const secretJson = yield* secretCrypto
+        .decrypt(readString(configuration, "serviceAccountJson"))
+        .pipe(Effect.mapError(() => new PushInvalidCredentialsError({})));
+      const account = yield* Effect.try({
+        try: () => parseServiceAccount(secretJson),
+        catch: () => new PushInvalidCredentialsError({}),
+      });
+
+      const body = buildFcmMessage(token.platformToken, message, {
+        androidTtl: readString(configuration, "androidTtl") || undefined,
+        apnsPriority: readString(configuration, "apnsPriority") || undefined,
+      });
+
+      let accessToken = yield* getAccessToken(account, false);
+      let response = yield* sendOnce(projectId, accessToken, body);
+      // FCM 401 = the OAuth token expired mid-flight; refresh once WITHOUT
+      // consuming a delivery attempt, then re-send.
+      if (response.status === 401) {
+        accessToken = yield* getAccessToken(account, true);
+        response = yield* sendOnce(projectId, accessToken, body);
+      }
+      // Every internal failure above already fails with a normalized
+      // `PushDeliveryError`, so no defect-catching wrapper is needed — the error
+      // channel IS the classification.
+      return yield* classifyFcmResult(response.status, response.bodyText, response.retryAfter);
+    });
+
+  return {
+    id: "fcm",
+    title: "Firebase Cloud Messaging",
+    defaultGlobalConfiguration: () => Effect.succeed({ ...FCM_DEFAULT_CONFIGURATION }),
+    validateGlobalConfiguration: (configuration) =>
+      Schema.decodeUnknownEffect(fcmConfigurationSchema)(configuration).pipe(
+        Effect.mapError((error) => new NotificationConfigValidationError({ cause: error.message })),
+        Effect.flatMap((parsed) =>
+          // Encrypt the service-account JSON before persist (idempotent — an
+          // already-encrypted value passes through). A `SecretKeyError` here is a
+          // deploy misconfiguration, not a validation error — fail as a defect.
+          secretCrypto.encrypt(parsed.serviceAccountJson).pipe(
+            Effect.map((serviceAccountJson) => ({
+              parsedConfiguration: { ...parsed, serviceAccountJson },
+              pushProviderKey: parsed.projectId,
+            })),
+            Effect.orDie,
+          ),
+        ),
+      ),
+    toReadDto: (configuration) => ({
+      projectId: readString(configuration, "projectId"),
+      androidPriority: configuration.androidPriority ?? "normal",
+      androidTtl: configuration.androidTtl ?? "2419200s",
+      apnsPriority: configuration.apnsPriority ?? "10",
+      hasServiceAccountJson: readString(configuration, "serviceAccountJson").length > 0,
+    }),
+    hasPlaintextSecret: (configuration) => {
+      const secret = readString(configuration, "serviceAccountJson");
+      return secret.length > 0 && !isEncrypted(secret);
+    },
+    deliver,
+  };
+};
+
+/**
+ * The Live layer (requires {@link PaymentConfigSecretCrypto}). The app root
+ * supplies crypto keyed by `ENCRYPTION_KEY`, exactly like
+ * `AppStorePaymentProviderConfigLive`.
+ */
+export const FirebaseCloudMessagingServiceConfigLive: Layer.Layer<
+  FirebaseCloudMessagingService,
+  never,
+  PaymentConfigSecretCrypto
+> = Layer.effect(FirebaseCloudMessagingService)(
+  Effect.gen(function* () {
+    const secretCrypto = yield* PaymentConfigSecretCrypto;
+    return makeFirebaseCloudMessagingProvider(secretCrypto);
+  }),
+);
diff --git a/packages/core/src/services/notifications/NotificationSendingService.ts b/packages/core/src/services/notifications/NotificationSendingService.ts
new file mode 100644
index 000000000..f9fa3af6a
--- /dev/null
+++ b/packages/core/src/services/notifications/NotificationSendingService.ts
@@ -0,0 +1,274 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { NotificationConfigNotEnabledError } from "../../domain/notifications/PushNotificationConfiguration.ts";
+import {
+  Db,
+  PushNotificationSendStatus,
+  PushNotificationDeliveryStatus,
+  pushNotificationConfigs,
+  pushNotificationDeliveries,
+  pushNotificationSends,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { PersonIdentityService } from "../personIdentity/PersonIdentityService.ts";
+import { PersonNotificationTokenService } from "./PersonNotificationTokenService.ts";
+import { PushDeliveryDispatch } from "./PushDeliveryDispatch.ts";
+import type { PushMessage } from "./push-delivery-provider.ts";
+
+/** Catch-all send-service error. Wraps infra + downstream failures at the boundary. */
+export class NotificationSendingServiceError extends Schema.TaggedErrorClass<NotificationSendingServiceError>(
+  "NotificationSendingServiceError",
+)("NotificationSendingServiceError", { cause: Schema.String }) {}
+
+export interface SendNotificationInput {
+  readonly projectId: string;
+  readonly message: PushMessage;
+  /** Canonical person ids to target directly (server-trusted). */
+  readonly personIds?: ReadonlyArray<string>;
+  /** Distinct ids resolved to canonical persons; unmapped ones are recorded, never fail the send. */
+  readonly distinctIds?: ReadonlyArray<string>;
+  /** Optional caller key collapsing retries into a single send (per project). */
+  readonly idempotencyKey?: string;
+}
+
+export interface SendNotificationResult {
+  readonly pushNotificationSendId: string;
+  readonly deviceCount: number;
+  readonly status: number;
+  readonly unresolvedDistinctIds: ReadonlyArray<string>;
+}
+
+/**
+ * The synchronous half of a push send — the analog of `WebhookDispatchService`.
+ * Resolves the audience (canonical persons + their active devices), writes the
+ * durable trail (one `push_notification_send` parent + one
+ * `push_notification_delivery` per device), and hands the delivery ids to the
+ * {@link PushDeliveryDispatch} queue. It NEVER performs a network send itself:
+ * the request returns once the rows are committed and enqueued; the async
+ * `PushDeliveryService` (per queue message) does the actual FCM/APNs call.
+ *
+ * Invariants folded in:
+ *  - up-front `NotificationConfigNotEnabledError` if the project has no enabled
+ *    provider (a send targeting nobody's provider is a config error, not a
+ *    per-device failure);
+ *  - targeting a distinct id with no person mapping is recorded in
+ *    `unresolvedDistinctIds`, never fatal;
+ *  - `idempotencyKey` short-circuits a duplicate send to the existing row;
+ *  - devices whose provider has no enabled config are counted as `skipped`
+ *    (no delivery row, no queue message).
+ */
+export class NotificationSendingService extends Context.Service<NotificationSendingService>()(
+  "NotificationSendingService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const personIdentity = yield* PersonIdentityService;
+      const links = yield* PersonNotificationTokenService;
+      const dispatch = yield* PushDeliveryDispatch;
+
+      const send = Effect.fn("sendPushNotification")(
+        function* (input: SendNotificationInput) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+
+          // 1. Idempotency short-circuit (only when a key is supplied).
+          if (input.idempotencyKey) {
+            const existing = yield* db.query.pushNotificationSends.findFirst({
+              where: { projectId: input.projectId, idempotencyKey: input.idempotencyKey },
+            });
+            if (existing) {
+              yield* Effect.annotateCurrentSpan("voidhash.push.idempotent_replay", true);
+              return {
+                pushNotificationSendId: existing.id,
+                deviceCount: existing.deviceCount,
+                status: existing.status,
+                unresolvedDistinctIds: existing.unresolvedDistinctIds,
+              } satisfies SendNotificationResult;
+            }
+          }
+
+          // 2. Fail the whole send up-front if no provider is enabled.
+          const configs = yield* db.query.pushNotificationConfigs.findMany({
+            where: { projectId: input.projectId, enabled: true, deletedAt: { isNull: true } },
+          });
+          const enabledProviders = new Set(configs.map((config) => config.providerId));
+          if (enabledProviders.size === 0) {
+            return yield* Effect.fail(
+              new NotificationConfigNotEnabledError({
+                message: "no enabled push notification configuration for this project",
+              }),
+            );
+          }
+
+          // 3. Resolve distinct ids to canonical persons (never creating one).
+          const distinctIds = input.distinctIds ?? [];
+          const resolvedPersonIds: Array<string> = [];
+          const unresolvedDistinctIds: Array<string> = [];
+          for (const distinctId of distinctIds) {
+            const resolution = yield* personIdentity.resolveDistinctId({
+              projectId: input.projectId,
+              distinctId,
+              shouldCreatePerson: false,
+              eventTimestamp: new Date(),
+              setAttributes: {},
+              setOnceAttributes: {},
+            });
+            if (resolution.identity.personId) {
+              resolvedPersonIds.push(resolution.identity.personId);
+            } else {
+              unresolvedDistinctIds.push(distinctId);
+            }
+          }
+          const canonicalPersonIds = [
+            ...new Set([...(input.personIds ?? []), ...resolvedPersonIds]),
+          ];
+
+          // 4. Load their active devices; keep only those routed to an enabled
+          //    provider, and dedupe by device id. The loader dedupes by
+          //    (personId, platformToken), so a device that a merge collision left
+          //    linked to BOTH a survivor and a loser person surfaces twice — that
+          //    would both double-deliver AND violate the (send, device) unique
+          //    index. Collapse to one delivery per physical device (first wins).
+          const devices = yield* links.getActiveTokensForPersonIds(
+            input.projectId,
+            canonicalPersonIds,
+          );
+          const enabledDevices = devices.filter((device) => enabledProviders.has(device.provider));
+          const seenDeviceIds = new Set<string>();
+          const deliverable = enabledDevices.filter((device) => {
+            if (seenDeviceIds.has(device.pushDeviceTokenId)) {
+              return false;
+            }
+            seenDeviceIds.add(device.pushDeviceTokenId);
+            return true;
+          });
+          const skippedCount = devices.length - deliverable.length;
+          const deliveries = deliverable.map((device) => ({
+            deliveryId: generateId("pushNotificationDelivery"),
+            device,
+          }));
+
+          // 5. Persist the parent + per-device rows atomically.
+          const sendId = generateId("pushNotificationSend");
+          yield* Effect.annotateCurrentSpan("voidhash.push.send_id", sendId);
+          yield* Effect.annotateCurrentSpan("voidhash.push.device_count", deliverable.length);
+          const status =
+            deliverable.length === 0
+              ? PushNotificationSendStatus.NoRecipients
+              : PushNotificationSendStatus.Pending;
+
+          // Persist the trail; on a unique-violation from a CONCURRENT send with
+          // the same idempotency key (the pre-check above races the insert), fall
+          // back to the winner's row as an idempotent replay instead of surfacing
+          // a 500. A re-read that finds no such row means the failure was genuine,
+          // so re-raise it.
+          const idempotentReplay: SendNotificationResult | null = yield* db
+            .transaction((tx) =>
+              Effect.gen(function* () {
+                yield* tx.insert(pushNotificationSends).values({
+                  id: sendId,
+                  projectId: input.projectId,
+                  idempotencyKey: input.idempotencyKey ?? null,
+                  message: input.message as unknown as Record<string, unknown>,
+                  requestedPersonIds: [...(input.personIds ?? [])],
+                  requestedDistinctIds: [...distinctIds],
+                  unresolvedDistinctIds,
+                  status,
+                  deviceCount: deliverable.length,
+                  succeededCount: 0,
+                  failedCount: 0,
+                  skippedCount,
+                  ...(deliverable.length === 0 ? { completedAt: new Date() } : {}),
+                });
+                for (const delivery of deliveries) {
+                  yield* tx.insert(pushNotificationDeliveries).values({
+                    id: delivery.deliveryId,
+                    pushNotificationSendId: sendId,
+                    projectId: input.projectId,
+                    personId: delivery.device.personId,
+                    pushDeviceTokenId: delivery.device.pushDeviceTokenId,
+                    provider: delivery.device.provider,
+                    status: PushNotificationDeliveryStatus.Pending,
+                    attemptCount: 0,
+                    maxAttempts: 5,
+                  });
+                }
+              }),
+            )
+            .pipe(
+              Effect.as<SendNotificationResult | null>(null),
+              Effect.catch((error) =>
+                input.idempotencyKey === undefined
+                  ? Effect.fail(error)
+                  : db.query.pushNotificationSends
+                      .findFirst({
+                        where: {
+                          projectId: input.projectId,
+                          idempotencyKey: input.idempotencyKey,
+                        },
+                      })
+                      .pipe(
+                        Effect.flatMap((existing) =>
+                          existing
+                            ? Effect.succeed<SendNotificationResult | null>({
+                                pushNotificationSendId: existing.id,
+                                deviceCount: existing.deviceCount,
+                                status: existing.status,
+                                unresolvedDistinctIds: existing.unresolvedDistinctIds,
+                              })
+                            : Effect.fail(error),
+                        ),
+                      ),
+              ),
+            );
+          if (idempotentReplay) {
+            yield* Effect.annotateCurrentSpan("voidhash.push.idempotent_replay", true);
+            return idempotentReplay;
+          }
+
+          // 6. Enqueue (outside the DB transaction). A dispatch failure surfaces
+          //    to the caller — the rows exist and a retry/backfill could re-enqueue.
+          if (deliveries.length > 0) {
+            yield* dispatch
+              .dispatch(
+                deliveries.map((delivery) => ({
+                  pushNotificationDeliveryId: delivery.deliveryId,
+                  pushNotificationSendId: sendId,
+                  projectId: input.projectId,
+                  provider: delivery.device.provider,
+                })),
+              )
+              .pipe(
+                Effect.mapError(
+                  (error) => new NotificationSendingServiceError({ cause: error.cause }),
+                ),
+              );
+          }
+
+          return {
+            pushNotificationSendId: sendId,
+            deviceCount: deliverable.length,
+            status,
+            unresolvedDistinctIds,
+          } satisfies SendNotificationResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new NotificationSendingServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new NotificationSendingServiceError({ cause: String(error.cause) })),
+              PersonServiceError: (error) =>
+                Effect.fail(new NotificationSendingServiceError({ cause: String(error.cause) })),
+              PersonNotificationTokenServiceError: (error) =>
+                Effect.fail(new NotificationSendingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return { send } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(NotificationSendingService)(NotificationSendingService.make);
+}
diff --git a/packages/core/src/services/notifications/NotificationTokenService.ts b/packages/core/src/services/notifications/NotificationTokenService.ts
new file mode 100644
index 000000000..5bec8c68d
--- /dev/null
+++ b/packages/core/src/services/notifications/NotificationTokenService.ts
@@ -0,0 +1,476 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  InvalidPushMessageError,
+  PushDeviceTokenNotFoundError,
+} from "../../domain/notifications/PushDeviceToken.ts";
+import {
+  and,
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  eq,
+  isNull,
+  pushDeviceTokens,
+  pushPersonDeviceTokens,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { PersonNotificationTokenService } from "./PersonNotificationTokenService.ts";
+import type {
+  DevicePlatform,
+  PushDeliveryProviderKind,
+  PushEnvironment,
+} from "./push-delivery-provider.ts";
+
+/** Catch-all service error. Wraps `EffectDrizzleQueryError` at the boundary. */
+export class NotificationTokenServiceError extends Schema.TaggedErrorClass<NotificationTokenServiceError>(
+  "NotificationTokenServiceError",
+)("NotificationTokenServiceError", { cause: Schema.String }) {}
+
+/**
+ * The UUID seam: the ONLY component that mints, stores, and dereferences
+ * platform credentials. Above this boundary the system speaks only the
+ * `push_tok_` UUID plus a `(platform, provider)` discriminator — the analog of
+ * how core never touches raw payment creds behind the `PaymentProvider` tags,
+ * and of Expo's `ExpoPushToken`. Owns minting, the two-way exchange, and
+ * freshness-gated invalidation; `PersonNotificationTokenService` owns the link
+ * queries and the merge re-point.
+ */
+export class NotificationTokenService extends Context.Service<NotificationTokenService>()(
+  "NotificationTokenService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const links = yield* PersonNotificationTokenService;
+      const auditLog = yield* AuditLogPort;
+
+      /**
+       * Exchange a platform credential for OUR `push_tok_` UUID. Idempotent on
+       * the dedup key (incl. coalesced environment): REVIVES
+       * `invalidatedAt`/`deletedAt` on conflict and returns the EXISTING UUID,
+       * and TRANSFERS ownership (soft-deletes any active link to a different
+       * person) — last-registration-wins.
+       */
+      const register = Effect.fn("registerPushDevice")(
+        function* (input: {
+          readonly projectId: string;
+          readonly platform: DevicePlatform;
+          readonly provider: PushDeliveryProviderKind;
+          readonly platformToken: string;
+          readonly bundleId?: string;
+          readonly environment?: PushEnvironment;
+          readonly callerPersonId: string;
+          readonly previousPushDeviceTokenId?: string;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.push.provider", input.provider);
+          yield* Effect.annotateCurrentSpan("voidhash.push.platform", input.platform);
+
+          if (input.platformToken.length === 0) {
+            return yield* Effect.fail(
+              new InvalidPushMessageError({ message: "platformToken must not be empty" }),
+            );
+          }
+          if (input.provider === "apns" && (!input.bundleId || !input.environment)) {
+            return yield* Effect.fail(
+              new InvalidPushMessageError({
+                message: "apns registration requires bundleId and environment",
+              }),
+            );
+          }
+
+          const environment = input.environment ?? null;
+          const bundleId = input.bundleId ?? null;
+
+          const pushDeviceTokenId = yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              // Match the dedup key (projectId, provider, platformToken,
+              // coalesce(environment,'')). environment is null (fcm) or a value
+              // (apns), never '', so an exact match mirrors the unique index.
+              const existing = yield* tx.query.pushDeviceTokens.findFirst({
+                where: {
+                  projectId: input.projectId,
+                  provider: input.provider,
+                  platformToken: input.platformToken,
+                  ...(environment === null ? { environment: { isNull: true } } : { environment }),
+                },
+              });
+
+              let deviceId: string;
+              if (existing) {
+                deviceId = existing.id;
+                yield* tx
+                  .update(pushDeviceTokens)
+                  .set({
+                    platform: input.platform,
+                    bundleId,
+                    invalidatedAt: null,
+                    invalidationReason: null,
+                    deletedAt: null,
+                    updatedAt: new Date(),
+                  })
+                  .where(eq(pushDeviceTokens.id, existing.id));
+              } else {
+                deviceId = generateId("pushDeviceToken");
+                yield* tx.insert(pushDeviceTokens).values({
+                  id: deviceId,
+                  projectId: input.projectId,
+                  platform: input.platform,
+                  provider: input.provider,
+                  platformToken: input.platformToken,
+                  bundleId,
+                  environment,
+                });
+              }
+
+              // Link the caller, then transfer ownership away from any prior
+              // person (last-registration-wins) to prevent cross-user leak.
+              yield* links.link(tx, {
+                projectId: input.projectId,
+                personId: input.callerPersonId,
+                pushDeviceTokenId: deviceId,
+              });
+              yield* links.unlinkOtherOwners(tx, {
+                projectId: input.projectId,
+                pushDeviceTokenId: deviceId,
+                keepPersonId: input.callerPersonId,
+              });
+
+              // Optional eager orphan reap of a stale UUID from a prior install.
+              if (input.previousPushDeviceTokenId && input.previousPushDeviceTokenId !== deviceId) {
+                yield* tx
+                  .update(pushDeviceTokens)
+                  .set({
+                    invalidatedAt: new Date(),
+                    invalidationReason: "orphan-reaped",
+                    deletedAt: new Date(),
+                    updatedAt: new Date(),
+                  })
+                  .where(
+                    and(
+                      eq(pushDeviceTokens.id, input.previousPushDeviceTokenId),
+                      eq(pushDeviceTokens.projectId, input.projectId),
+                    ),
+                  );
+                yield* links.unlink(tx, {
+                  projectId: input.projectId,
+                  personId: input.callerPersonId,
+                  pushDeviceTokenId: input.previousPushDeviceTokenId,
+                });
+              }
+
+              return deviceId;
+            }),
+          );
+
+          yield* Effect.annotateCurrentSpan("voidhash.push.device_token_id", pushDeviceTokenId);
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.PushDeviceToken,
+              entityId: pushDeviceTokenId,
+              action: AuditLogAction.Created,
+              changes: { provider: input.provider, platform: input.platform },
+            })
+            .pipe(Effect.ignore);
+          return { pushDeviceTokenId };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /** Same-install rotation under the SAME UUID; asserts ownership else NotFound. */
+      const refresh = Effect.fn("refreshPushDevice")(
+        function* (input: {
+          readonly projectId: string;
+          readonly callerPersonId: string;
+          readonly pushDeviceTokenId: string;
+          readonly newPlatformToken: string;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.push.device_token_id",
+            input.pushDeviceTokenId,
+          );
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ownership = yield* links.findActiveLink(tx, {
+                projectId: input.projectId,
+                personId: input.callerPersonId,
+                pushDeviceTokenId: input.pushDeviceTokenId,
+              });
+              if (!ownership) {
+                // Uniform NotFound: no existence oracle (not-found OR not-owned).
+                return yield* Effect.fail(
+                  new PushDeviceTokenNotFoundError({ message: "device token not found" }),
+                );
+              }
+              yield* tx
+                .update(pushDeviceTokens)
+                .set({ platformToken: input.newPlatformToken, updatedAt: new Date() })
+                .where(
+                  and(
+                    eq(pushDeviceTokens.id, input.pushDeviceTokenId),
+                    eq(pushDeviceTokens.projectId, input.projectId),
+                  ),
+                );
+            }),
+          );
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.PushDeviceToken,
+              entityId: input.pushDeviceTokenId,
+              action: AuditLogAction.Updated,
+            })
+            .pipe(Effect.ignore);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /** Soft-delete the caller's link (and the device if no other owners remain). */
+      const unregister = Effect.fn("unregisterPushDevice")(
+        function* (input: {
+          readonly projectId: string;
+          readonly callerPersonId: string;
+          readonly pushDeviceTokenId: string;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.push.device_token_id",
+            input.pushDeviceTokenId,
+          );
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ownership = yield* links.findActiveLink(tx, {
+                projectId: input.projectId,
+                personId: input.callerPersonId,
+                pushDeviceTokenId: input.pushDeviceTokenId,
+              });
+              if (!ownership) {
+                return yield* Effect.fail(
+                  new PushDeviceTokenNotFoundError({ message: "device token not found" }),
+                );
+              }
+              yield* links.unlink(tx, {
+                projectId: input.projectId,
+                personId: input.callerPersonId,
+                pushDeviceTokenId: input.pushDeviceTokenId,
+              });
+              const remaining = yield* links.countActiveOwners(tx, {
+                projectId: input.projectId,
+                pushDeviceTokenId: input.pushDeviceTokenId,
+              });
+              if (remaining === 0) {
+                yield* tx
+                  .update(pushDeviceTokens)
+                  .set({ deletedAt: new Date(), updatedAt: new Date() })
+                  .where(
+                    and(
+                      eq(pushDeviceTokens.id, input.pushDeviceTokenId),
+                      eq(pushDeviceTokens.projectId, input.projectId),
+                    ),
+                  );
+              }
+            }),
+          );
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.PushDeviceToken,
+              entityId: input.pushDeviceTokenId,
+              action: AuditLogAction.Deleted,
+            })
+            .pipe(Effect.ignore);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * The REVERSE exchange: UUID -> platform creds, at the last moment before
+       * `adapter.deliver`. Filters on BOTH projectId AND id so a forged UUID can
+       * never dereference another tenant's token.
+       */
+      const resolveForDelivery = Effect.fn("resolveForDelivery")(
+        function* (input: { readonly projectId: string; readonly pushDeviceTokenId: string }) {
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const device = yield* tx.query.pushDeviceTokens.findFirst({
+                where: {
+                  id: input.pushDeviceTokenId,
+                  projectId: input.projectId,
+                  deletedAt: { isNull: true },
+                  invalidatedAt: { isNull: true },
+                },
+              });
+              if (!device) {
+                return yield* Effect.fail(
+                  new PushDeviceTokenNotFoundError({ message: "device token not found" }),
+                );
+              }
+              return {
+                platform: device.platform as DevicePlatform,
+                provider: device.provider as PushDeliveryProviderKind,
+                platformToken: device.platformToken,
+                bundleId: device.bundleId ?? undefined,
+                environment: (device.environment ?? undefined) as PushEnvironment | undefined,
+              };
+            }),
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * FRESHNESS-GATED invalidate on terminal token feedback. SKIPS if the
+       * device was re-registered after the receipt (`device.updatedAt >
+       * observedAt`) so a stale 410/UNREGISTERED can never kill a live device.
+       */
+      const invalidate = Effect.fn("invalidatePushDevice")(
+        function* (input: {
+          readonly projectId: string;
+          readonly pushDeviceTokenId: string;
+          readonly reason: string;
+          readonly observedAt: Date;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.push.device_token_id",
+            input.pushDeviceTokenId,
+          );
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const device = yield* tx.query.pushDeviceTokens.findFirst({
+                where: { id: input.pushDeviceTokenId, projectId: input.projectId },
+              });
+              if (!device) {
+                return;
+              }
+              const updatedAt = device.updatedAt ?? device.createdAt ?? new Date(0);
+              if (updatedAt.getTime() > input.observedAt.getTime()) {
+                // Re-registered after this attempt -> it is a live device; skip.
+                yield* Effect.annotateCurrentSpan("voidhash.push.invalidate_skipped", true);
+                return;
+              }
+              yield* tx
+                .update(pushDeviceTokens)
+                .set({ invalidatedAt: new Date(), invalidationReason: input.reason })
+                .where(
+                  and(
+                    eq(pushDeviceTokens.id, input.pushDeviceTokenId),
+                    eq(pushDeviceTokens.projectId, input.projectId),
+                  ),
+                );
+            }),
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /** GDPR hard-cleanup hook — wired into person-deletion COMPLETION (Phase 3). */
+      const invalidateAllForPerson = Effect.fn("invalidateAllForPerson")(
+        function* (input: { readonly projectId: string; readonly personId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.person.id", input.personId);
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const personLinks = yield* tx.query.pushPersonDeviceTokens.findMany({
+                where: { projectId: input.projectId, personId: input.personId },
+              });
+              for (const personLink of personLinks) {
+                yield* tx
+                  .update(pushDeviceTokens)
+                  .set({
+                    invalidatedAt: new Date(),
+                    invalidationReason: "person-deleted",
+                    deletedAt: new Date(),
+                    updatedAt: new Date(),
+                  })
+                  .where(
+                    and(
+                      eq(pushDeviceTokens.id, personLink.pushDeviceTokenId),
+                      eq(pushDeviceTokens.projectId, input.projectId),
+                    ),
+                  );
+              }
+              yield* tx
+                .update(pushPersonDeviceTokens)
+                .set({ deletedAt: new Date(), updatedAt: new Date() })
+                .where(
+                  and(
+                    eq(pushPersonDeviceTokens.projectId, input.projectId),
+                    eq(pushPersonDeviceTokens.personId, input.personId),
+                    isNull(pushPersonDeviceTokens.deletedAt),
+                  ),
+                );
+            }),
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new NotificationTokenServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return {
+        invalidate,
+        invalidateAllForPerson,
+        refresh,
+        register,
+        resolveForDelivery,
+        unregister,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(NotificationTokenService)(NotificationTokenService.make);
+}
diff --git a/packages/core/src/services/notifications/NotificationsConfigurationService.ts b/packages/core/src/services/notifications/NotificationsConfigurationService.ts
new file mode 100644
index 000000000..5dfd8b743
--- /dev/null
+++ b/packages/core/src/services/notifications/NotificationsConfigurationService.ts
@@ -0,0 +1,432 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  NotificationConfigKeyUnavailableError,
+  NotificationConfigNotFoundError,
+} from "../../domain/notifications/PushNotificationConfiguration.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  eq,
+  pushNotificationConfigs,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { SchemaCacheInvalidationService } from "../schema/SchemaCacheInvalidationService.ts";
+import {
+  ApplePushNotificationService,
+  FirebaseCloudMessagingService,
+  type AnyPushDeliveryProviderShape,
+  type PushDeliveryProviderKind,
+} from "./push-delivery-provider.ts";
+
+/**
+ * Catch-all service error. Wraps `EffectDrizzleQueryError` and other
+ * infrastructural failures at the public-method boundary, AND the fail-closed
+ * encryption-gate refusal (DEVIATION 2).
+ */
+export class NotificationsConfigurationServiceError extends Schema.TaggedErrorClass<NotificationsConfigurationServiceError>(
+  "NotificationsConfigurationServiceError",
+)("NotificationsConfigurationServiceError", { cause: Schema.String }) {}
+
+const isPushProviderKind = (value: string): value is PushDeliveryProviderKind =>
+  value === "fcm" || value === "apns";
+
+/**
+ * Dashboard CRUD for per-(project, provider) push credentials — a near-verbatim
+ * structural clone of `PaymentProviderConfigurationService` (same
+ * one-active-config-per-(project, provider) invariant, validate-on-enable flow,
+ * soft delete, audit-log + schema-cache-bust on every write). Two deliberate
+ * deviations, both about secret exposure:
+ *
+ *  - DEVIATION 1: the read DTO OMITS secret fields (write-only secrets); the
+ *    provider's `toReadDto` returns only non-secret metadata + `has*` presence
+ *    flags. Secrets are never round-tripped to the browser.
+ *  - DEVIATION 2: a fail-closed encryption gate. In production
+ *    (`requireEncryption`), enabling a config whose secret is still plaintext
+ *    after the encrypt pass (i.e. `ENCRYPTION_KEY` unset, crypto no-op) is
+ *    REFUSED — a prose-only go-live gate is unenforceable.
+ */
+const make = (config: { readonly requireEncryption: Effect.Effect<boolean> }) =>
+  Effect.gen(function* () {
+    const requireEncryption = yield* config.requireEncryption;
+    const db = yield* Db;
+    const auditLog = yield* AuditLogPort;
+    const schemaCache = yield* SchemaCacheInvalidationService;
+    const fcm = yield* FirebaseCloudMessagingService;
+    const apns = yield* ApplePushNotificationService;
+
+    const providers: Record<PushDeliveryProviderKind, AnyPushDeliveryProviderShape> = {
+      fcm,
+      apns,
+    };
+
+    const findProvider = (
+      providerId: string,
+    ): Effect.Effect<AnyPushDeliveryProviderShape, NotificationConfigNotFoundError> =>
+      isPushProviderKind(providerId)
+        ? Effect.succeed(providers[providerId])
+        : Effect.fail(
+            new NotificationConfigNotFoundError({ message: `Unknown push provider ${providerId}` }),
+          );
+
+    /** Secret-OMITTING read DTO (DEVIATION 1). */
+    const toReadDto = (row: typeof pushNotificationConfigs.$inferSelect) => {
+      const provider = isPushProviderKind(row.providerId) ? providers[row.providerId] : undefined;
+      return {
+        id: row.id,
+        projectId: row.projectId,
+        providerId: row.providerId,
+        enabled: row.enabled,
+        name: row.name,
+        pushProviderKey: row.pushProviderKey,
+        activeProviderId: row.activeProviderId,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+        deletedAt: row.deletedAt,
+        configuration: provider ? provider.toReadDto(row.configuration) : {},
+      };
+    };
+
+    const getPushNotificationConfigurations = Effect.fn("getPushNotificationConfigurations")(
+      function* (projectId: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        yield* checkProjectPermission(
+          projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access push notification configurations for project ${projectId}`,
+        );
+        const rows = yield* db.query.pushNotificationConfigs.findMany({
+          where: { projectId, deletedAt: { isNull: true } },
+        });
+        return rows.map(toReadDto);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new NotificationsConfigurationServiceError({ cause: String(error.cause) }),
+              ),
+          }),
+        ),
+    );
+
+    const getPushNotificationConfigurationById = Effect.fn("getPushNotificationConfigurationById")(
+      function* (id: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.push.configuration_id", id);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        const row = yield* db.query.pushNotificationConfigs.findFirst({ where: { id } });
+        if (!row) {
+          return yield* Effect.fail(
+            new NotificationConfigNotFoundError({
+              message: "Push notification configuration not found",
+            }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", row.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.push.provider_id", row.providerId);
+        yield* checkProjectPermission(
+          row.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access push notification configuration ${id}`,
+        );
+        return toReadDto(row);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new NotificationsConfigurationServiceError({ cause: String(error.cause) }),
+              ),
+          }),
+        ),
+    );
+
+    const createPushNotificationConfiguration = Effect.fn("createPushNotificationConfiguration")(
+      function* (input: { readonly projectId: string; readonly providerId: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.push.provider_id", input.providerId);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to create push notification configurations for project ${input.projectId}`,
+        );
+
+        const provider = yield* findProvider(input.providerId);
+
+        const existing = yield* db.query.pushNotificationConfigs.findFirst({
+          where: {
+            projectId: input.projectId,
+            providerId: input.providerId,
+            deletedAt: { isNull: true },
+          },
+        });
+        if (existing) {
+          return yield* Effect.fail(
+            new NotificationConfigKeyUnavailableError({
+              message: `Provider ${input.providerId} can only have one configuration`,
+            }),
+          );
+        }
+
+        const id = generateId("pushNotificationConfig");
+        yield* Effect.annotateCurrentSpan("voidhash.push.configuration_id", id);
+        const defaultConfiguration = yield* provider.defaultGlobalConfiguration();
+        yield* db.insert(pushNotificationConfigs).values({
+          id,
+          projectId: input.projectId,
+          providerId: input.providerId,
+          pushProviderKey: "empty",
+          enabled: false,
+          name: provider.title,
+          configuration: defaultConfiguration,
+        });
+
+        yield* auditLog
+          .append({
+            projectId: input.projectId,
+            entityType: AuditLogEntityType.PushNotificationConfiguration,
+            entityId: id,
+            action: AuditLogAction.Created,
+            changes: { snapshot: { providerId: input.providerId } },
+          })
+          .pipe(Effect.ignore);
+        yield* schemaCache.invalidate(input.projectId);
+        return { id };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new NotificationsConfigurationServiceError({ cause: String(error.cause) }),
+              ),
+          }),
+        ),
+    );
+
+    const updatePushNotificationConfiguration = Effect.fn("updatePushNotificationConfiguration")(
+      function* (input: {
+        readonly id: string;
+        readonly enabled: boolean;
+        readonly name?: string;
+        readonly configuration: Record<string, unknown>;
+      }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.push.configuration_id", input.id);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+
+        const existing = yield* db.query.pushNotificationConfigs.findFirst({
+          where: { id: input.id },
+        });
+        if (!existing) {
+          return yield* Effect.fail(
+            new NotificationConfigNotFoundError({
+              message: "Push notification configuration not found",
+            }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", existing.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.push.provider_id", existing.providerId);
+        yield* checkProjectPermission(
+          existing.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to update push notification configuration ${input.id}`,
+        );
+
+        // Secrets are OMITTED from the read DTO (DEVIATION 1), so the dashboard
+        // cannot round-trip them: a partial update that leaves a secret field
+        // blank must PRESERVE the stored (encrypted) value, not blank it. Merge
+        // the incoming configuration over the stored one — a freshly provided
+        // secret still overrides; an omitted one falls back to the persisted
+        // value (which `validateGlobalConfiguration` accepts, as encrypt is
+        // idempotent on already-`v1.aesgcm:`-prefixed secrets). Without this,
+        // enabling an already-configured provider fails schema validation.
+        const mergedConfiguration = { ...existing.configuration, ...input.configuration };
+
+        // enabled=false drafts persist without validation (incomplete configs save).
+        if (!input.enabled) {
+          yield* db
+            .update(pushNotificationConfigs)
+            .set({
+              configuration: mergedConfiguration,
+              enabled: false,
+              ...(input.name !== undefined ? { name: input.name } : {}),
+              updatedAt: new Date(),
+            })
+            .where(eq(pushNotificationConfigs.id, input.id));
+
+          yield* auditLog
+            .append({
+              projectId: existing.projectId,
+              entityType: AuditLogEntityType.PushNotificationConfiguration,
+              entityId: input.id,
+              action: AuditLogAction.Updated,
+              changes: { enabled: false },
+            })
+            .pipe(Effect.ignore);
+          yield* schemaCache.invalidate(existing.projectId);
+          return { id: input.id };
+        }
+
+        const provider = yield* findProvider(existing.providerId);
+        // validateGlobalConfiguration decodes the schema and encrypts secrets
+        // (idempotent). On enable only.
+        const validation = yield* provider.validateGlobalConfiguration(mergedConfiguration);
+
+        // DEVIATION 2: fail-closed. In production we refuse to enable a config
+        // whose secret is still plaintext after the encrypt pass (no key set).
+        if (requireEncryption && provider.hasPlaintextSecret(validation.parsedConfiguration)) {
+          return yield* Effect.fail(
+            new NotificationsConfigurationServiceError({
+              cause: "refusing to persist a push secret while ENCRYPTION_KEY is unset",
+            }),
+          );
+        }
+
+        // Collision check among ACTIVE rows only (soft-deleted have null activeProviderId).
+        const conflicting = yield* db.query.pushNotificationConfigs.findFirst({
+          where: {
+            projectId: existing.projectId,
+            providerId: existing.providerId,
+            pushProviderKey: validation.pushProviderKey,
+            id: { ne: input.id },
+            deletedAt: { isNull: true },
+          },
+        });
+        if (conflicting) {
+          return yield* Effect.fail(
+            new NotificationConfigKeyUnavailableError({
+              message: "A push provider with a similar configuration already exists.",
+            }),
+          );
+        }
+
+        yield* db
+          .update(pushNotificationConfigs)
+          .set({
+            configuration: validation.parsedConfiguration,
+            enabled: input.enabled,
+            ...(input.name !== undefined ? { name: input.name } : {}),
+            pushProviderKey: validation.pushProviderKey,
+            updatedAt: new Date(),
+          })
+          .where(eq(pushNotificationConfigs.id, input.id));
+
+        yield* auditLog
+          .append({
+            projectId: existing.projectId,
+            entityType: AuditLogEntityType.PushNotificationConfiguration,
+            entityId: input.id,
+            action: AuditLogAction.Updated,
+            changes: { enabled: input.enabled },
+          })
+          .pipe(Effect.ignore);
+        yield* schemaCache.invalidate(existing.projectId);
+        return { id: input.id };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new NotificationsConfigurationServiceError({ cause: String(error.cause) }),
+              ),
+          }),
+        ),
+    );
+
+    const deletePushNotificationConfiguration = Effect.fn("deletePushNotificationConfiguration")(
+      function* (input: { readonly pushNotificationConfigurationId: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.push.configuration_id",
+          input.pushNotificationConfigurationId,
+        );
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        const existing = yield* db.query.pushNotificationConfigs.findFirst({
+          where: { id: input.pushNotificationConfigurationId },
+        });
+        if (!existing) {
+          return yield* Effect.fail(
+            new NotificationConfigNotFoundError({
+              message: `Push notification configuration ${input.pushNotificationConfigurationId} not found`,
+            }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", existing.projectId);
+        yield* checkProjectPermission(
+          existing.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to delete push notification configuration ${input.pushNotificationConfigurationId}`,
+        );
+
+        yield* db
+          .update(pushNotificationConfigs)
+          .set({ deletedAt: new Date(), updatedAt: new Date() })
+          .where(eq(pushNotificationConfigs.id, input.pushNotificationConfigurationId));
+
+        yield* auditLog
+          .append({
+            projectId: existing.projectId,
+            entityType: AuditLogEntityType.PushNotificationConfiguration,
+            entityId: input.pushNotificationConfigurationId,
+            action: AuditLogAction.Deleted,
+          })
+          .pipe(Effect.ignore);
+        yield* schemaCache.invalidate(existing.projectId);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(
+                new NotificationsConfigurationServiceError({ cause: String(error.cause) }),
+              ),
+          }),
+        ),
+    );
+
+    return {
+      createPushNotificationConfiguration,
+      deletePushNotificationConfiguration,
+      getPushNotificationConfigurationById,
+      getPushNotificationConfigurations,
+      updatePushNotificationConfiguration,
+    } as const;
+  });
+
+/**
+ * `AuditLogPort`, `AuthSession`, `Db`, `SchemaCacheInvalidationService`, and
+ * the two delivery-provider tags are provided by the application root.
+ */
+export class NotificationsConfigurationService extends Context.Service<NotificationsConfigurationService>()(
+  "NotificationsConfigurationService",
+  // Default: encryption gate OFF (local/dev). The app root overrides this with
+  // `NotificationsConfigurationService.layer({ requireEncryption })` reading
+  // `PUSH_REQUIRE_ENCRYPTION` so prod fails closed.
+  { make: make({ requireEncryption: Effect.succeed(false) }) },
+) {
+  static layer = (config: { readonly requireEncryption: Effect.Effect<boolean> }) =>
+    Layer.effect(NotificationsConfigurationService)(make(config));
+}
diff --git a/packages/core/src/services/notifications/PersonNotificationTokenService.ts b/packages/core/src/services/notifications/PersonNotificationTokenService.ts
new file mode 100644
index 000000000..c73020bb8
--- /dev/null
+++ b/packages/core/src/services/notifications/PersonNotificationTokenService.ts
@@ -0,0 +1,263 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  and,
+  Db,
+  type DbTransaction,
+  eq,
+  inArray,
+  isNull,
+  ne,
+  pushPersonDeviceTokens,
+  sql,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+
+/** Catch-all service error. Wraps `EffectDrizzleQueryError` at the boundary. */
+export class PersonNotificationTokenServiceError extends Schema.TaggedErrorClass<PersonNotificationTokenServiceError>(
+  "PersonNotificationTokenServiceError",
+)("PersonNotificationTokenServiceError", { cause: Schema.String }) {}
+
+/** A send-time device resolved through the person→device link table. */
+export interface ActivePushDevice {
+  readonly personId: string;
+  readonly pushDeviceTokenId: string;
+  readonly platform: string;
+  readonly provider: string;
+  readonly platformToken: string;
+  readonly bundleId: string | null;
+  readonly environment: string | null;
+}
+
+/**
+ * Answers "which devices belong to a person right now?" — owns the
+ * person⟷device link queries, the revoke path, and the merge re-point hook. It
+ * does NOT mint UUIDs or resolve distinctIds; `NotificationTokenService.register`
+ * is the single writer of link creation/transfer. The tx-scoped mutation
+ * helpers take a `DbTransaction` so they commit/roll back with the caller's
+ * transaction (matching the `IdentityMutationService` convention); the
+ * send-time loader uses the captured request-scoped `db`.
+ */
+export class PersonNotificationTokenService extends Context.Service<PersonNotificationTokenService>()(
+  "PersonNotificationTokenService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+
+      /** Idempotent on `(personId, pushDeviceTokenId)`; REVIVES a soft-deleted link. */
+      const link = (
+        tx: DbTransaction,
+        input: {
+          readonly projectId: string;
+          readonly personId: string;
+          readonly pushDeviceTokenId: string;
+        },
+      ) =>
+        Effect.gen(function* () {
+          const existing = yield* tx.query.pushPersonDeviceTokens.findFirst({
+            where: { personId: input.personId, pushDeviceTokenId: input.pushDeviceTokenId },
+          });
+          if (existing) {
+            yield* tx
+              .update(pushPersonDeviceTokens)
+              .set({ deletedAt: null, updatedAt: new Date() })
+              .where(eq(pushPersonDeviceTokens.id, existing.id));
+            return;
+          }
+          yield* tx.insert(pushPersonDeviceTokens).values({
+            id: generateId("personPushDeviceToken"),
+            projectId: input.projectId,
+            personId: input.personId,
+            pushDeviceTokenId: input.pushDeviceTokenId,
+          });
+        });
+
+      /** Soft-delete the caller's link (unregister / opt-out). */
+      const unlink = (
+        tx: DbTransaction,
+        input: {
+          readonly projectId: string;
+          readonly personId: string;
+          readonly pushDeviceTokenId: string;
+        },
+      ) =>
+        tx
+          .update(pushPersonDeviceTokens)
+          .set({ deletedAt: new Date(), updatedAt: new Date() })
+          .where(
+            and(
+              eq(pushPersonDeviceTokens.projectId, input.projectId),
+              eq(pushPersonDeviceTokens.personId, input.personId),
+              eq(pushPersonDeviceTokens.pushDeviceTokenId, input.pushDeviceTokenId),
+            ),
+          );
+
+      /**
+       * Ownership TRANSFER (last-registration-wins): soft-delete every ACTIVE
+       * link to this device that belongs to a DIFFERENT person, preventing
+       * cross-user notification leak.
+       */
+      const unlinkOtherOwners = (
+        tx: DbTransaction,
+        input: {
+          readonly projectId: string;
+          readonly pushDeviceTokenId: string;
+          readonly keepPersonId: string;
+        },
+      ) =>
+        tx
+          .update(pushPersonDeviceTokens)
+          .set({ deletedAt: new Date(), updatedAt: new Date() })
+          .where(
+            and(
+              eq(pushPersonDeviceTokens.projectId, input.projectId),
+              eq(pushPersonDeviceTokens.pushDeviceTokenId, input.pushDeviceTokenId),
+              ne(pushPersonDeviceTokens.personId, input.keepPersonId),
+              isNull(pushPersonDeviceTokens.deletedAt),
+            ),
+          );
+
+      /** Active-link lookup for ownership assertion (refresh / unregister). */
+      const findActiveLink = (
+        tx: DbTransaction,
+        input: {
+          readonly projectId: string;
+          readonly personId: string;
+          readonly pushDeviceTokenId: string;
+        },
+      ) =>
+        tx.query.pushPersonDeviceTokens.findFirst({
+          where: {
+            projectId: input.projectId,
+            personId: input.personId,
+            pushDeviceTokenId: input.pushDeviceTokenId,
+            deletedAt: { isNull: true },
+          },
+        });
+
+      /** Count ACTIVE owners of a device (unregister decides device soft-delete). */
+      const countActiveOwners = (
+        tx: DbTransaction,
+        input: { readonly projectId: string; readonly pushDeviceTokenId: string },
+      ) =>
+        tx.query.pushPersonDeviceTokens
+          .findMany({
+            where: {
+              projectId: input.projectId,
+              pushDeviceTokenId: input.pushDeviceTokenId,
+              deletedAt: { isNull: true },
+            },
+          })
+          .pipe(Effect.map((rows) => rows.length));
+
+      /**
+       * Send-time loader. Expands each canonical id to its merged-loser set
+       * (belt), joins active links × devices, drops invalidated devices, and
+       * dedupes by `(personId, platformToken)` (suspenders) so a person's
+       * multiple devices — and any briefly-live pre/post-reinstall UUID pair —
+       * never double-deliver.
+       */
+      const getActiveTokensForPersonIds = Effect.fn("getActiveTokensForPersonIds")(
+        function* (projectId: string, canonicalPersonIds: ReadonlyArray<string>) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.push.canonical_person_count",
+            canonicalPersonIds.length,
+          );
+          if (canonicalPersonIds.length === 0) {
+            return [] as ReadonlyArray<ActivePushDevice>;
+          }
+
+          // Belt: every loser whose merge chain lands on a requested canonical id.
+          const loserRows = yield* db.query.persons.findMany({
+            where: { projectId, mergedIntoPersonId: { in: [...canonicalPersonIds] } },
+          });
+          const personIds = [
+            ...new Set([...canonicalPersonIds, ...loserRows.map((person) => person.id)]),
+          ];
+
+          const rows = yield* db.query.pushPersonDeviceTokens.findMany({
+            where: { projectId, personId: { in: personIds }, deletedAt: { isNull: true } },
+            with: { deviceToken: true },
+          });
+
+          // Suspenders: drop invalidated devices, dedupe by (personId, platformToken).
+          const deduped = new Map<string, ActivePushDevice>();
+          for (const row of rows) {
+            const device = row.deviceToken;
+            if (!device || device.deletedAt || device.invalidatedAt) {
+              continue;
+            }
+            deduped.set(`${row.personId}:${device.platformToken}`, {
+              personId: row.personId,
+              pushDeviceTokenId: device.id,
+              platform: device.platform,
+              provider: device.provider,
+              platformToken: device.platformToken,
+              bundleId: device.bundleId,
+              environment: device.environment,
+            });
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.push.device_count", deduped.size);
+          return [...deduped.values()] as ReadonlyArray<ActivePushDevice>;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new PersonNotificationTokenServiceError({ cause: String(error.cause) }),
+                ),
+            }),
+          ),
+      );
+
+      /**
+       * The merge hook. Re-points `push_person_device_token.personId` to the
+       * survivor — runs INSIDE the caller's merge / projection-rebuild
+       * transaction, exactly like `personIdentities.personId` is re-pointed.
+       * The send-time loader ALSO expands the loser set (belt-and-suspenders).
+       */
+      const repointLinksToSurvivor = (
+        tx: DbTransaction,
+        input: {
+          readonly projectId: string;
+          readonly loserPersonIds: ReadonlyArray<string>;
+          readonly survivorPersonId: string;
+        },
+      ) =>
+        Effect.gen(function* () {
+          if (input.loserPersonIds.length === 0) {
+            return;
+          }
+          // NOT EXISTS skips devices the survivor already owns: the
+          // (person_id, push_device_token_id) unique index is global (ignores
+          // deleted_at), so a bare re-point would raise a unique violation. A
+          // skipped colliding loser link stays reachable via the send-time
+          // merged-loser expansion (belt-and-suspenders).
+          yield* tx
+            .update(pushPersonDeviceTokens)
+            .set({ personId: input.survivorPersonId, updatedAt: new Date() })
+            .where(
+              and(
+                eq(pushPersonDeviceTokens.projectId, input.projectId),
+                inArray(pushPersonDeviceTokens.personId, [...input.loserPersonIds]),
+                sql`not exists (select 1 from push_person_device_token s where s.person_id = ${input.survivorPersonId} and s.push_device_token_id = push_person_device_token.push_device_token_id)`,
+              ),
+            );
+        });
+
+      return {
+        countActiveOwners,
+        findActiveLink,
+        getActiveTokensForPersonIds,
+        link,
+        repointLinksToSurvivor,
+        unlink,
+        unlinkOtherOwners,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PersonNotificationTokenService)(PersonNotificationTokenService.make);
+}
diff --git a/packages/core/src/services/notifications/PushDeliveryDispatch.ts b/packages/core/src/services/notifications/PushDeliveryDispatch.ts
new file mode 100644
index 000000000..b62bf9b2c
--- /dev/null
+++ b/packages/core/src/services/notifications/PushDeliveryDispatch.ts
@@ -0,0 +1,49 @@
+import { Context, Effect, Layer, Schema } from "effect";
+import type { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+/**
+ * Catch-all dispatch error. Wraps the underlying queue `send`/encode failure at
+ * the publish boundary so the send path sees one stable tag. The concrete
+ * queue-backed adapter lives at the application root; core only references this.
+ */
+export class PushDeliveryDispatchError extends Schema.TaggedErrorClass<PushDeliveryDispatchError>(
+  "PushDeliveryDispatchError",
+)("PushDeliveryDispatchError", {
+  cause: Schema.String,
+}) {}
+
+/** One unit of work handed to the queue — a single `(send, device)` delivery row. */
+export interface PushDeliveryDispatchItem {
+  readonly pushNotificationDeliveryId: string;
+  readonly pushNotificationSendId: string;
+  readonly projectId: string;
+  readonly provider: string;
+}
+
+export interface PushDeliveryDispatchShape {
+  /**
+   * Enqueue the given per-device deliveries for async processing.
+   * `PlatformRuntime` marks the underlying queue send as runtime-only, exactly
+   * like {@link import("../analyticsIngest/CaptureIngress").CaptureIngress}.
+   */
+  readonly dispatch: (
+    items: ReadonlyArray<PushDeliveryDispatchItem>,
+  ) => Effect.Effect<void, PushDeliveryDispatchError, PlatformRuntime>;
+}
+
+/**
+ * Abstract dispatcher for per-device push deliveries. The queue-backed live
+ * adapter is wired at the application root (over `PushDeliveryQueue`), so
+ * `packages/core` carries no Cloudflare dependency. `NotificationSendingService`
+ * depends only on this port. In dev — where the Alchemy sidecar has no queue
+ * binding — the {@link PushDeliveryDispatch.noop} layer is used (rows are created
+ * but never delivered), mirroring `CaptureIngress.noop`.
+ */
+export class PushDeliveryDispatch extends Context.Service<
+  PushDeliveryDispatch,
+  PushDeliveryDispatchShape
+>()("@voidhash/core/PushDeliveryDispatch") {
+  static readonly noop: Layer.Layer<PushDeliveryDispatch> = Layer.succeed(PushDeliveryDispatch, {
+    dispatch: () => Effect.void,
+  });
+}
diff --git a/packages/core/src/services/notifications/PushDeliveryService.ts b/packages/core/src/services/notifications/PushDeliveryService.ts
new file mode 100644
index 000000000..c363ffda4
--- /dev/null
+++ b/packages/core/src/services/notifications/PushDeliveryService.ts
@@ -0,0 +1,466 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  and,
+  Db,
+  eq,
+  inArray,
+  isNull,
+  PushNotificationDeliveryStatus,
+  PushNotificationSendStatus,
+  pushNotificationConfigs,
+  pushNotificationDeliveries,
+  pushNotificationDeliveryAttempts,
+  pushNotificationSends,
+  sql,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { NotificationTokenService } from "./NotificationTokenService.ts";
+import {
+  ApplePushNotificationService,
+  FirebaseCloudMessagingService,
+  type AnyPushDeliveryProviderShape,
+  type DeviceToken,
+  type PushDeliveryError,
+  type PushDeliverySuccess,
+  type PushMessage,
+} from "./push-delivery-provider.ts";
+
+/** Catch-all delivery-engine error (infra). Retryable provider errors use the sibling below. */
+export class PushDeliveryServiceError extends Schema.TaggedErrorClass<PushDeliveryServiceError>(
+  "PushDeliveryServiceError",
+)("PushDeliveryServiceError", { cause: Schema.String }) {}
+
+/**
+ * Signals the QUEUE to retry this message: a retryable provider outcome
+ * (`Transient`/`RateExceeded`) that has NOT yet exhausted the delivery's attempt
+ * budget. The consumer lets this bubble so Cloudflare redelivers per `maxRetries`.
+ * `delaySeconds` is the schedule-derived hint recorded on the row for observability.
+ */
+export class PushDeliveryRetryableError extends Schema.TaggedErrorClass<PushDeliveryRetryableError>(
+  "PushDeliveryRetryableError",
+)("PushDeliveryRetryableError", { message: Schema.String, delaySeconds: Schema.Number }) {}
+
+/** Push retry backoff, seconds: 10s, 30s, 5min, 30min, 2hr (the doc's schedule). */
+const RETRY_SCHEDULE_SECONDS = [10, 30, 5 * 60, 30 * 60, 2 * 60 * 60] as const;
+
+/**
+ * Next retry delay for a delivery on its `attemptCount`-th attempt. An explicit
+ * provider `Retry-After` overrides the schedule; otherwise the (1-indexed)
+ * attempt selects a step, clamped to the last. Pure + deterministic so the
+ * classification is directly unit-tested (queue-native retry means this value is
+ * observability metadata on the row, not a live scheduler).
+ */
+export const nextPushDeliveryDelaySeconds = (
+  attemptCount: number,
+  retryAfterSeconds?: number,
+): number => {
+  if (retryAfterSeconds !== undefined && retryAfterSeconds >= 0) {
+    return retryAfterSeconds;
+  }
+  const index = Math.min(Math.max(attemptCount - 1, 0), RETRY_SCHEDULE_SECONDS.length - 1);
+  return RETRY_SCHEDULE_SECONDS[index] as number;
+};
+
+/**
+ * The delivery engine — the body the `PushDeliveryConsumer` runs per queue
+ * message, and the async half of a push send (mirrors `WebhookDeliveryService`,
+ * but queue-driven not workflow-driven). Owns the atomic claim/CAS, the
+ * provider call, the append-only attempt log, the status transition + normalized
+ * classification, the freshness-gated device invalidation, and the race-free
+ * parent roll-up. The claim/CAS (`Pending|Failed & completed_at IS NULL ->
+ * InProgress`) is the idempotency guard: terminal rows carry a `completedAt`, so
+ * an at-least-once queue redelivery of a finished delivery is a no-op.
+ */
+export class PushDeliveryService extends Context.Service<PushDeliveryService>()(
+  "PushDeliveryService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const notificationTokens = yield* NotificationTokenService;
+      const fcm = yield* FirebaseCloudMessagingService;
+      const apns = yield* ApplePushNotificationService;
+
+      const recordAttempt = (input: {
+        readonly deliveryId: string;
+        readonly attemptNumber: number;
+        readonly succeeded: boolean;
+        readonly statusCode: number | null;
+        readonly providerErrorCode: string | null;
+        readonly durationMs: number | null;
+        readonly errorMessage: string | null;
+      }) =>
+        db.insert(pushNotificationDeliveryAttempts).values({
+          id: generateId("pushNotificationDeliveryAttempt"),
+          pushNotificationDeliveryId: input.deliveryId,
+          attemptNumber: input.attemptNumber,
+          statusCode: input.statusCode,
+          providerErrorCode: input.providerErrorCode?.slice(0, 100) ?? null,
+          responseBody: null,
+          errorMessage: input.errorMessage?.slice(0, 500) ?? null,
+          durationMs: input.durationMs,
+          succeeded: input.succeeded,
+        });
+
+      /** Terminal transition (Succeeded/Failed/Exhausted): stamps `completedAt`. */
+      const finalizeDelivery = (input: {
+        readonly deliveryId: string;
+        readonly status: number;
+        readonly providerMessageId?: string;
+        readonly lastError?: string;
+      }) =>
+        db
+          .update(pushNotificationDeliveries)
+          .set({
+            status: input.status,
+            completedAt: new Date(),
+            nextAttemptAt: null,
+            ...(input.providerMessageId ? { providerMessageId: input.providerMessageId } : {}),
+            ...(input.lastError ? { lastError: input.lastError.slice(0, 500) } : {}),
+          })
+          .where(eq(pushNotificationDeliveries.id, input.deliveryId));
+
+      /** Non-terminal retry transition: status Failed, `completedAt` stays null (re-claimable). */
+      const scheduleRetry = (input: {
+        readonly deliveryId: string;
+        readonly delaySeconds: number;
+        readonly lastError: string;
+      }) =>
+        db
+          .update(pushNotificationDeliveries)
+          .set({
+            status: PushNotificationDeliveryStatus.Failed,
+            nextAttemptAt: new Date(Date.now() + input.delaySeconds * 1000),
+            lastError: input.lastError.slice(0, 500),
+          })
+          .where(eq(pushNotificationDeliveries.id, input.deliveryId));
+
+      /**
+       * Race-free parent roll-up: recompute the aggregate from the child rows.
+       * A delivery is "settled" when Succeeded/Exhausted, or Failed WITH a
+       * `completedAt` (terminal-device Failed); a Failed row awaiting retry is
+       * still in flight.
+       */
+      const rollupParentSend = (sendId: string) =>
+        Effect.gen(function* () {
+          const rows = yield* db.query.pushNotificationDeliveries.findMany({
+            where: { pushNotificationSendId: sendId },
+          });
+          const total = rows.length;
+          let succeeded = 0;
+          let settledFailed = 0;
+          let inFlight = 0;
+          for (const row of rows) {
+            if (row.status === PushNotificationDeliveryStatus.Succeeded) {
+              succeeded += 1;
+            } else if (
+              row.status === PushNotificationDeliveryStatus.Exhausted ||
+              (row.status === PushNotificationDeliveryStatus.Failed && row.completedAt !== null)
+            ) {
+              settledFailed += 1;
+            } else {
+              inFlight += 1;
+            }
+          }
+          const status =
+            total === 0
+              ? PushNotificationSendStatus.NoRecipients
+              : inFlight > 0
+                ? PushNotificationSendStatus.InProgress
+                : succeeded === total
+                  ? PushNotificationSendStatus.Succeeded
+                  : succeeded === 0
+                    ? PushNotificationSendStatus.Failed
+                    : PushNotificationSendStatus.PartialFailed;
+          yield* db
+            .update(pushNotificationSends)
+            .set({
+              status,
+              succeededCount: succeeded,
+              failedCount: settledFailed,
+              ...(inFlight === 0 ? { completedAt: new Date() } : {}),
+            })
+            .where(eq(pushNotificationSends.id, sendId));
+        });
+
+      const processDelivery = Effect.fn("processPushDelivery")(
+        function* (deliveryId: string) {
+          yield* Effect.annotateCurrentSpan("voidhash.push.delivery_id", deliveryId);
+          // The attempt clock for the freshness gate: any re-registration AFTER
+          // this instant means the device is live and a terminal 404/410 must not
+          // kill it.
+          const observedAt = new Date();
+
+          // Atomic claim/CAS. `completed_at IS NULL` keeps terminal rows (which
+          // carry a completedAt) un-reclaimable while still allowing a retryable
+          // Failed row to be picked up by the redelivered message.
+          const claimed = yield* db
+            .update(pushNotificationDeliveries)
+            .set({
+              status: PushNotificationDeliveryStatus.InProgress,
+              attemptCount: sql`${pushNotificationDeliveries.attemptCount} + 1`,
+            })
+            .where(
+              and(
+                eq(pushNotificationDeliveries.id, deliveryId),
+                inArray(pushNotificationDeliveries.status, [
+                  PushNotificationDeliveryStatus.Pending,
+                  PushNotificationDeliveryStatus.Failed,
+                ]),
+                isNull(pushNotificationDeliveries.completedAt),
+              ),
+            )
+            .returning();
+          const row = claimed[0];
+          if (!row) {
+            // Lost the CAS. The row is either terminal (a genuine idempotent
+            // no-op) or still `InProgress` from an earlier claim — which, if that
+            // worker CRASHED between claim and finalize, would otherwise strand
+            // the delivery (and pin the parent send) at InProgress forever, since
+            // the CAS never re-claims InProgress. Distinguish the two: ack the
+            // terminal case; FAIL the InProgress case so the queue redelivers,
+            // and a truly-crashed claim eventually dead-letters to `markExhausted`
+            // (a healthy in-flight claim finalizes first, so the retry then acks).
+            const current = yield* db.query.pushNotificationDeliveries.findFirst({
+              where: { id: deliveryId },
+            });
+            if (
+              !current ||
+              current.completedAt !== null ||
+              current.status === PushNotificationDeliveryStatus.Succeeded ||
+              current.status === PushNotificationDeliveryStatus.Exhausted
+            ) {
+              yield* Effect.annotateCurrentSpan("voidhash.push.claim_skipped", true);
+              return;
+            }
+            yield* Effect.annotateCurrentSpan("voidhash.push.claim_in_progress_retry", true);
+            return yield* Effect.fail(
+              new PushDeliveryServiceError({
+                cause: `delivery ${deliveryId} is InProgress (unfinished prior claim); retrying`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", row.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.push.provider", row.provider);
+          const attemptNumber = row.attemptCount;
+
+          const settleTerminal = (input: {
+            readonly providerErrorCode: string;
+            readonly errorMessage: string;
+            readonly status: number;
+          }) =>
+            Effect.gen(function* () {
+              yield* recordAttempt({
+                deliveryId,
+                attemptNumber,
+                succeeded: false,
+                statusCode: null,
+                providerErrorCode: input.providerErrorCode,
+                durationMs: null,
+                errorMessage: input.errorMessage,
+              });
+              yield* finalizeDelivery({
+                deliveryId,
+                status: input.status,
+                lastError: input.errorMessage,
+              });
+              yield* rollupParentSend(row.pushNotificationSendId);
+            });
+
+          // Dereference the device (tenant-isolated on projectId AND id). A
+          // missing/invalidated device is terminal: nothing to deliver to.
+          const device = yield* notificationTokens
+            .resolveForDelivery({
+              projectId: row.projectId,
+              pushDeviceTokenId: row.pushDeviceTokenId,
+            })
+            .pipe(Effect.catchTag("PushDeviceTokenNotFoundError", () => Effect.succeed(null)));
+          if (!device) {
+            yield* settleTerminal({
+              providerErrorCode: "DeviceNotFound",
+              errorMessage: "device token not found or invalidated",
+              status: PushNotificationDeliveryStatus.Exhausted,
+            });
+            return;
+          }
+
+          // Load the enabled provider config (may have been disabled mid-flight).
+          const config = yield* db.query.pushNotificationConfigs.findFirst({
+            where: {
+              projectId: row.projectId,
+              providerId: row.provider,
+              enabled: true,
+              deletedAt: { isNull: true },
+            },
+          });
+          if (!config) {
+            yield* settleTerminal({
+              providerErrorCode: "NoEnabledConfig",
+              errorMessage: "no enabled configuration for provider",
+              status: PushNotificationDeliveryStatus.Exhausted,
+            });
+            return;
+          }
+
+          // Load the send message (PII) from the parent.
+          const parent = yield* db.query.pushNotificationSends.findFirst({
+            where: { id: row.pushNotificationSendId },
+          });
+          const message = (parent?.message ?? { title: "", body: "" }) as unknown as PushMessage;
+
+          const provider: AnyPushDeliveryProviderShape = row.provider === "apns" ? apns : fcm;
+          const deviceToken: DeviceToken = {
+            platform: device.platform,
+            platformToken: device.platformToken,
+            bundleId: device.bundleId,
+            environment: device.environment,
+          };
+
+          const start = Date.now();
+          // `Effect.result` lifts the provider's success/failure into a value so
+          // the attempt row is recorded uniformly before branching. The failure
+          // is a normalized `PushDeliveryError` — matched on `_tag` with
+          // compile-time exhaustiveness, never a defect.
+          const outcome = yield* Effect.result(
+            provider.deliver(config.configuration, deviceToken, message),
+          );
+          const durationMs = Date.now() - start;
+
+          if (outcome._tag === "Success") {
+            const success: PushDeliverySuccess = outcome.success;
+            yield* recordAttempt({
+              deliveryId,
+              attemptNumber,
+              succeeded: true,
+              statusCode: success.statusCode,
+              providerErrorCode: null,
+              durationMs,
+              errorMessage: null,
+            });
+            yield* finalizeDelivery({
+              deliveryId,
+              status: PushNotificationDeliveryStatus.Succeeded,
+              providerMessageId: success.providerMessageId,
+            });
+            yield* rollupParentSend(row.pushNotificationSendId);
+            return;
+          }
+
+          const error: PushDeliveryError = outcome.failure;
+          yield* recordAttempt({
+            deliveryId,
+            attemptNumber,
+            succeeded: false,
+            statusCode: error.statusCode ?? null,
+            providerErrorCode: error._tag,
+            durationMs,
+            errorMessage: error._tag,
+          });
+
+          switch (error._tag) {
+            case "PushUnregisteredError":
+            case "PushBadTokenError": {
+              // Terminal-device: Failed + completedAt, then freshness-gated
+              // invalidate so a stale 404/410 can't kill a re-registered device.
+              yield* finalizeDelivery({
+                deliveryId,
+                status: PushNotificationDeliveryStatus.Failed,
+                lastError: error._tag,
+              });
+              yield* notificationTokens.invalidate({
+                projectId: row.projectId,
+                pushDeviceTokenId: row.pushDeviceTokenId,
+                reason: error._tag,
+                observedAt,
+              });
+              yield* rollupParentSend(row.pushNotificationSendId);
+              return;
+            }
+            case "PushPayloadTooLargeError": {
+              yield* finalizeDelivery({
+                deliveryId,
+                status: PushNotificationDeliveryStatus.Exhausted,
+                lastError: "payload too large",
+              });
+              yield* rollupParentSend(row.pushNotificationSendId);
+              return;
+            }
+            case "PushInvalidCredentialsError":
+            case "PushNotImplementedError": {
+              // Terminal-config / unroutable: Failed, never device-deleted.
+              yield* finalizeDelivery({
+                deliveryId,
+                status: PushNotificationDeliveryStatus.Failed,
+                lastError: error._tag,
+              });
+              yield* rollupParentSend(row.pushNotificationSendId);
+              return;
+            }
+            case "PushRateExceededError":
+            case "PushTransientError": {
+              // Retryable: exhaust or schedule + fail-to-retry.
+              if (attemptNumber >= row.maxAttempts) {
+                yield* finalizeDelivery({
+                  deliveryId,
+                  status: PushNotificationDeliveryStatus.Exhausted,
+                  lastError: `retryable error exhausted: ${error._tag}`,
+                });
+                yield* rollupParentSend(row.pushNotificationSendId);
+                return;
+              }
+              const delaySeconds = nextPushDeliveryDelaySeconds(
+                attemptNumber,
+                error.retryAfterSeconds,
+              );
+              yield* scheduleRetry({ deliveryId, delaySeconds, lastError: error._tag });
+              yield* rollupParentSend(row.pushNotificationSendId);
+              return yield* Effect.fail(
+                new PushDeliveryRetryableError({ message: error._tag, delaySeconds }),
+              );
+            }
+          }
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PushDeliveryServiceError({ cause: String(error.cause) })),
+              NotificationTokenServiceError: (error) =>
+                Effect.fail(new PushDeliveryServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * DLQ backstop: mark a delivery Exhausted after the queue drained its
+       * retries. Idempotent — only settles a still-open row.
+       */
+      const markExhausted = (deliveryId: string) =>
+        Effect.gen(function* () {
+          const rows = yield* db
+            .update(pushNotificationDeliveries)
+            .set({ status: PushNotificationDeliveryStatus.Exhausted, completedAt: new Date() })
+            .where(
+              and(
+                eq(pushNotificationDeliveries.id, deliveryId),
+                isNull(pushNotificationDeliveries.completedAt),
+              ),
+            )
+            .returning({ sendId: pushNotificationDeliveries.pushNotificationSendId });
+          const sendId = rows[0]?.sendId;
+          if (sendId) {
+            yield* rollupParentSend(sendId);
+          }
+        }).pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PushDeliveryServiceError({ cause: String(error.cause) })),
+          }),
+        );
+
+      return { processDelivery, markExhausted } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PushDeliveryService)(PushDeliveryService.make);
+}
diff --git a/packages/core/src/services/notifications/PushNotificationSendService.ts b/packages/core/src/services/notifications/PushNotificationSendService.ts
new file mode 100644
index 000000000..c76462bdb
--- /dev/null
+++ b/packages/core/src/services/notifications/PushNotificationSendService.ts
@@ -0,0 +1,177 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { Db, PushNotificationDeliveryStatus, PushNotificationSendStatus } from "@voidhash/db";
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 500;
+
+/**
+ * Catch-all service error for the read-only send-history surface. Wraps
+ * `EffectDrizzleQueryError` and other infrastructural failures at the
+ * public-method boundary.
+ */
+export class PushNotificationSendServiceError extends Schema.TaggedErrorClass<PushNotificationSendServiceError>(
+  "PushNotificationSendServiceError",
+)("PushNotificationSendServiceError", { cause: Schema.String }) {}
+
+/** Raised when a send id does not resolve to a row owned by the project. */
+export class PushNotificationSendNotFoundError extends Schema.TaggedErrorClass<PushNotificationSendNotFoundError>(
+  "PushNotificationSendNotFoundError",
+)("PushNotificationSendNotFoundError", { message: Schema.String }) {}
+
+/**
+ * Maps the numeric `push_notification_send.status` column to a stable
+ * snake_case label so the wire contract never leaks the enum encoding.
+ */
+const SEND_STATUS_LABELS: Record<number, string> = {
+  [PushNotificationSendStatus.Pending]: "pending",
+  [PushNotificationSendStatus.InProgress]: "in_progress",
+  [PushNotificationSendStatus.Succeeded]: "succeeded",
+  [PushNotificationSendStatus.PartialFailed]: "partial_failed",
+  [PushNotificationSendStatus.Failed]: "failed",
+  [PushNotificationSendStatus.NoRecipients]: "no_recipients",
+};
+const sendStatusLabel = (status: number): string => SEND_STATUS_LABELS[status] ?? "unknown";
+
+/** Maps the numeric `push_notification_delivery.status` column to a label. */
+const DELIVERY_STATUS_LABELS: Record<number, string> = {
+  [PushNotificationDeliveryStatus.Pending]: "pending",
+  [PushNotificationDeliveryStatus.InProgress]: "in_progress",
+  [PushNotificationDeliveryStatus.Succeeded]: "succeeded",
+  [PushNotificationDeliveryStatus.Failed]: "failed",
+  [PushNotificationDeliveryStatus.Exhausted]: "exhausted",
+};
+const deliveryStatusLabel = (status: number): string => DELIVERY_STATUS_LABELS[status] ?? "unknown";
+
+/**
+ * Read-only access to push-notification send history — the data behind the
+ * studio "sent notifications" activity page. Every method is scoped to a
+ * project via {@link checkProjectPermission} (`project:all`), mirroring the
+ * analytics events-activity read path. Writes live in the delivery pipeline;
+ * this service never mutates.
+ */
+export class PushNotificationSendService extends Context.Service<PushNotificationSendService>()(
+  "PushNotificationSendService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+
+      const listSends = Effect.fn("notifications.listSends")(
+        function* (input: { readonly limit?: number; readonly projectId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access notification sends for project ${input.projectId}`,
+          );
+
+          const limit = Math.min(Math.max(input.limit ?? DEFAULT_LIMIT, 1), MAX_LIMIT);
+          yield* Effect.annotateCurrentSpan("voidhash.notifications.limit", limit);
+
+          // Fetch `limit + 1` to compute `hasMore` without a second count query.
+          const rows = yield* db.query.pushNotificationSends.findMany({
+            where: { projectId: input.projectId },
+            orderBy: { createdAt: "desc" },
+            limit: limit + 1,
+          });
+
+          const hasMore = rows.length > limit;
+          yield* Effect.annotateCurrentSpan("voidhash.notifications.has_more", hasMore);
+
+          return {
+            hasMore,
+            sends: rows.slice(0, limit).map((row) => ({
+              completedAt: row.completedAt,
+              createdAt: row.createdAt,
+              deviceCount: row.deviceCount,
+              failedCount: row.failedCount,
+              id: row.id,
+              idempotencyKey: row.idempotencyKey,
+              message: row.messagePurgedAt === null ? row.message : {},
+              messagePurged: row.messagePurgedAt !== null,
+              requestedDistinctIdCount: row.requestedDistinctIds.length,
+              requestedPersonCount: row.requestedPersonIds.length,
+              skippedCount: row.skippedCount,
+              status: sendStatusLabel(row.status),
+              succeededCount: row.succeededCount,
+              unresolvedDistinctIds: row.unresolvedDistinctIds,
+            })),
+          };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PushNotificationSendServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const getSendDeliveries = Effect.fn("notifications.getSendDeliveries")(
+        function* (input: { readonly projectId: string; readonly sendId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access notification sends for project ${input.projectId}`,
+          );
+
+          // Confirm the parent send exists AND belongs to this project before
+          // returning any delivery rows — this both yields a clean 404 for a
+          // bogus id and prevents cross-project delivery leakage.
+          const send = yield* db.query.pushNotificationSends.findFirst({
+            columns: { id: true },
+            where: { id: input.sendId, projectId: input.projectId },
+          });
+          if (!send) {
+            return yield* Effect.fail(
+              new PushNotificationSendNotFoundError({
+                message: `Notification send ${input.sendId} was not found in project ${input.projectId}`,
+              }),
+            );
+          }
+
+          const rows = yield* db.query.pushNotificationDeliveries.findMany({
+            where: { pushNotificationSendId: input.sendId, projectId: input.projectId },
+            orderBy: { createdAt: "asc" },
+          });
+
+          return {
+            deliveries: rows.map((row) => ({
+              attemptCount: row.attemptCount,
+              completedAt: row.completedAt,
+              createdAt: row.createdAt,
+              id: row.id,
+              lastError: row.lastError,
+              maxAttempts: row.maxAttempts,
+              nextAttemptAt: row.nextAttemptAt,
+              personId: row.personId,
+              provider: row.provider,
+              providerMessageId: row.providerMessageId,
+              status: deliveryStatusLabel(row.status),
+            })),
+          };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PushNotificationSendServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return { getSendDeliveries, listSends } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PushNotificationSendService)(PushNotificationSendService.make);
+}
diff --git a/packages/core/src/services/notifications/push-delivery-provider.ts b/packages/core/src/services/notifications/push-delivery-provider.ts
new file mode 100644
index 000000000..a100bf123
--- /dev/null
+++ b/packages/core/src/services/notifications/push-delivery-provider.ts
@@ -0,0 +1,199 @@
+import { Context, Schema, type Effect } from "effect";
+
+import type { NotificationConfigValidationError } from "../../domain/notifications/PushNotificationConfiguration.ts";
+
+/**
+ * The delivery-provider seam — a near-verbatim structural mirror of
+ * `payment-provider-adapter.ts` / `PaymentProvider.ts`. As there, we expose a
+ * type-ERASED {@link PushDeliveryProviderShape} (consumed by
+ * `NotificationsConfigurationService` for `defaultGlobalConfiguration` /
+ * `validateGlobalConfiguration` / `pushProviderKey` derivation) and a TYPED
+ * {@link PushDeliveryProvider} for compile-time config safety inside each
+ * adapter. There is deliberately NO "product" tier — push config is
+ * project-level only.
+ */
+export type PushDeliveryProviderKind = "fcm" | "apns";
+
+/** Coarse device discriminator above the adapter boundary. */
+export type DevicePlatform = "ios" | "android";
+
+/** APNs environment, part of the dedup key (coalesced to `''` for FCM). */
+export type PushEnvironment = "sandbox" | "production";
+
+/** The dereferenced device a UUID resolves to immediately before `deliver`. */
+export interface DeviceToken {
+  readonly platform: DevicePlatform;
+  readonly platformToken: string; // FCM registration token / raw APNs hex
+  readonly bundleId?: string; // required for apns
+  readonly environment?: PushEnvironment; // apns only
+}
+
+/** Expo-shaped unified message; `collapseId` -> apns-collapse-id, `ttl` -> apns-expiration. */
+export interface PushMessage {
+  readonly title: string;
+  readonly body: string;
+  readonly data?: Record<string, unknown>;
+  readonly sound?: string;
+  readonly badge?: number;
+  readonly priority?: "default" | "high";
+  readonly ttl?: number;
+  readonly channelId?: string; // android
+  readonly collapseId?: string;
+}
+
+/** The ticket `deliver` yields on the success channel — the provider accepted the message. */
+export interface PushDeliverySuccess {
+  readonly statusCode: number;
+  readonly providerMessageId?: string; // FCM message name / APNs apns-id
+}
+
+/**
+ * The normalized delivery-failure vocabulary, modeled as TAGGED ERRORS on the
+ * `deliver` error channel (not a `succeeded` boolean + optional fields). Each is
+ * exactly one handling class — `PushDeliveryService` matches on `_tag` with
+ * compile-time exhaustiveness, never on provider-specific codes. Misclassifying
+ * is unforgiving: terminal-as-retryable burns quota on dead tokens;
+ * transient-as-terminal silently deletes live devices.
+ *
+ * Handling classes:
+ *  - terminal-device ({@link PushUnregisteredError}, {@link PushBadTokenError}) —
+ *    freshness-gated device invalidate, NEVER retry.
+ *  - terminal-payload ({@link PushPayloadTooLargeError}) — Exhausted (413 is authoritative).
+ *  - terminal-config ({@link PushInvalidCredentialsError}) — surfaced on config, device NOT deleted.
+ *  - unroutable ({@link PushNotImplementedError}) — Failed, never dropped (APNs gate closed).
+ *  - retryable ({@link PushRateExceededError}, {@link PushTransientError}) — queue retry,
+ *    honoring an explicit `retryAfterSeconds` over the backoff schedule.
+ */
+export class PushUnregisteredError extends Schema.TaggedErrorClass<PushUnregisteredError>(
+  "PushUnregisteredError",
+)("PushUnregisteredError", { statusCode: Schema.optional(Schema.Number) }) {}
+
+export class PushBadTokenError extends Schema.TaggedErrorClass<PushBadTokenError>(
+  "PushBadTokenError",
+)("PushBadTokenError", { statusCode: Schema.optional(Schema.Number) }) {}
+
+export class PushPayloadTooLargeError extends Schema.TaggedErrorClass<PushPayloadTooLargeError>(
+  "PushPayloadTooLargeError",
+)("PushPayloadTooLargeError", { statusCode: Schema.optional(Schema.Number) }) {}
+
+export class PushInvalidCredentialsError extends Schema.TaggedErrorClass<PushInvalidCredentialsError>(
+  "PushInvalidCredentialsError",
+)("PushInvalidCredentialsError", { statusCode: Schema.optional(Schema.Number) }) {}
+
+export class PushNotImplementedError extends Schema.TaggedErrorClass<PushNotImplementedError>(
+  "PushNotImplementedError",
+)("PushNotImplementedError", { statusCode: Schema.optional(Schema.Number) }) {}
+
+export class PushRateExceededError extends Schema.TaggedErrorClass<PushRateExceededError>(
+  "PushRateExceededError",
+)("PushRateExceededError", {
+  statusCode: Schema.optional(Schema.Number),
+  retryAfterSeconds: Schema.optional(Schema.Number),
+}) {}
+
+export class PushTransientError extends Schema.TaggedErrorClass<PushTransientError>(
+  "PushTransientError",
+)("PushTransientError", {
+  statusCode: Schema.optional(Schema.Number),
+  retryAfterSeconds: Schema.optional(Schema.Number),
+}) {}
+
+/** The full `deliver` failure channel. */
+export type PushDeliveryError =
+  | PushUnregisteredError
+  | PushBadTokenError
+  | PushPayloadTooLargeError
+  | PushInvalidCredentialsError
+  | PushNotImplementedError
+  | PushRateExceededError
+  | PushTransientError;
+
+/** Erased shape — config is `Record<string, unknown>` at the boundary. */
+export interface PushDeliveryProviderShape<TKind extends PushDeliveryProviderKind> {
+  readonly id: TKind;
+  readonly title: string;
+  readonly defaultGlobalConfiguration: () => Effect.Effect<Record<string, unknown>>;
+  readonly validateGlobalConfiguration: (
+    configuration: Record<string, unknown>,
+  ) => Effect.Effect<
+    { readonly parsedConfiguration: Record<string, unknown>; readonly pushProviderKey: string },
+    NotificationConfigValidationError
+  >;
+  /**
+   * The secret-omitting dashboard read DTO: the non-secret subset of the
+   * config plus `has*` presence flags. Secrets are write-only and NEVER
+   * round-tripped to the browser.
+   */
+  readonly toReadDto: (configuration: Record<string, unknown>) => Record<string, unknown>;
+  /**
+   * Fail-closed gate helper: returns `true` if any declared secret field is
+   * non-empty AND still plaintext (not `v1.aesgcm:`-prefixed) after the encrypt
+   * pass — i.e. the encryption key is unset. The config service refuses to
+   * enable such a config in production (`PUSH_REQUIRE_ENCRYPTION`).
+   */
+  readonly hasPlaintextSecret: (configuration: Record<string, unknown>) => boolean;
+  /**
+   * The send-engine method — resolves a UUID-dereferenced device + message to a
+   * ticket ({@link PushDeliverySuccess}) or fails with a normalized
+   * {@link PushDeliveryError}. Receives the STORED configuration (secret still
+   * encrypted) and decrypts its own secret internally, so the caller never needs
+   * to know which field is secret per provider. NEVER DEFECTS — every internal
+   * failure (decrypt/JWT/OAuth/network) is mapped onto the error channel, so the
+   * consumer classifies on `_tag` alone. APNs fails `PushNotImplementedError`
+   * while the HTTP/2-from-Workers gate is closed.
+   */
+  readonly deliver: (
+    configuration: Record<string, unknown>,
+    token: DeviceToken,
+    message: PushMessage,
+  ) => Effect.Effect<PushDeliverySuccess, PushDeliveryError>;
+}
+
+export type AnyPushDeliveryProviderShape =
+  | PushDeliveryProviderShape<"fcm">
+  | PushDeliveryProviderShape<"apns">;
+
+/**
+ * Generic, strongly-typed adapter contract. Each adapter engine sees its
+ * concrete decrypted-config shape (FCM service-account JSON vs APNs
+ * `{teamId, keyId, privateKeyContent, bundleId, environment}`) while the public
+ * tag stays erased. The typed counterpart to {@link PushDeliveryProviderShape}.
+ */
+export interface PushDeliveryProvider<
+  TKind extends PushDeliveryProviderKind,
+  TConfig extends object,
+> {
+  readonly id: TKind;
+  readonly title: string;
+  readonly defaultGlobalConfiguration: () => Effect.Effect<TConfig>;
+  readonly validateGlobalConfiguration: (
+    configuration: Record<string, unknown>,
+  ) => Effect.Effect<
+    { readonly parsedConfiguration: TConfig; readonly pushProviderKey: string },
+    NotificationConfigValidationError
+  >;
+  readonly toReadDto: (configuration: Record<string, unknown>) => Record<string, unknown>;
+  readonly hasPlaintextSecret: (configuration: Record<string, unknown>) => boolean;
+  readonly deliver: (
+    configuration: Record<string, unknown>,
+    token: DeviceToken,
+    message: PushMessage,
+  ) => Effect.Effect<PushDeliverySuccess, PushDeliveryError>;
+}
+
+/**
+ * The two delivery-provider tags. The `deliver` method lives on these SAME tags
+ * that also carry config validation — there is no separate "delivery service"
+ * indirection. Supplied with their adapter + crypto Layers at app root, exactly
+ * like the existing `PaymentProvider` tags. These two class names retain
+ * "Notification" by product-owner decision.
+ */
+export class FirebaseCloudMessagingService extends Context.Service<
+  FirebaseCloudMessagingService,
+  PushDeliveryProviderShape<"fcm">
+>()("FirebaseCloudMessagingService") {}
+
+export class ApplePushNotificationService extends Context.Service<
+  ApplePushNotificationService,
+  PushDeliveryProviderShape<"apns">
+>()("ApplePushNotificationService") {}
diff --git a/packages/core/src/services/organizations/OrganizationBillingPort.ts b/packages/core/src/services/organizations/OrganizationBillingPort.ts
new file mode 100644
index 000000000..1c05d5d44
--- /dev/null
+++ b/packages/core/src/services/organizations/OrganizationBillingPort.ts
@@ -0,0 +1,31 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+/** Stable error exposed by organization billing extensions to the core organization service. */
+export class OrganizationBillingPortError extends Schema.TaggedErrorClass<OrganizationBillingPortError>(
+  "OrganizationBillingPortError",
+)("OrganizationBillingPortError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface OrganizationBillingPortShape {
+  /** Provisions the optional billing extension for a newly created organization. */
+  readonly initializeOrganizationBilling: (input: {
+    readonly organizationId: string;
+    readonly email?: string;
+  }) => Effect.Effect<void, OrganizationBillingPortError>;
+}
+
+/** Optional extension point invoked after core creates an organization. */
+export class OrganizationBillingPort extends Context.Service<
+  OrganizationBillingPort,
+  OrganizationBillingPortShape
+>()("@voidhash/core/OrganizationBillingPort") {
+  /** Community layer for deployments without platform billing. */
+  static readonly noop: Layer.Layer<OrganizationBillingPort> = Layer.succeed(
+    OrganizationBillingPort,
+    {
+      initializeOrganizationBilling: () => Effect.void,
+    },
+  );
+}
diff --git a/packages/core/src/services/organizations/OrganizationMembershipSyncPort.ts b/packages/core/src/services/organizations/OrganizationMembershipSyncPort.ts
new file mode 100644
index 000000000..9089ef0d1
--- /dev/null
+++ b/packages/core/src/services/organizations/OrganizationMembershipSyncPort.ts
@@ -0,0 +1,37 @@
+import { Db } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+/** Stable failure boundary for an organization-membership synchronization extension. */
+export class OrganizationMembershipSyncPortError extends Schema.TaggedErrorClass<OrganizationMembershipSyncPortError>(
+  "OrganizationMembershipSyncPortError",
+)("OrganizationMembershipSyncPortError", { cause: Schema.String }) {}
+
+export interface OrganizationMembershipSyncResult {
+  readonly syncedMembershipIds: ReadonlyArray<string>;
+  readonly syncedOrganizationIds: ReadonlyArray<string>;
+}
+
+export interface OrganizationMembershipSyncPortShape {
+  readonly syncMemberships: (input: {
+    readonly localUserId: string;
+    readonly workosUserId: string;
+  }) => Effect.Effect<OrganizationMembershipSyncResult, OrganizationMembershipSyncPortError, Db>;
+}
+
+/**
+ * Extension point for mirroring external multi-user organization membership.
+ * Community composition uses {@link noop}; Enterprise composition installs its
+ * WorkOS-backed implementation.
+ */
+export class OrganizationMembershipSyncPort extends Context.Service<
+  OrganizationMembershipSyncPort,
+  OrganizationMembershipSyncPortShape
+>()("core/OrganizationMembershipSyncPort") {
+  static readonly noop = Layer.succeed(
+    OrganizationMembershipSyncPort,
+    OrganizationMembershipSyncPort.of({
+      syncMemberships: () =>
+        Effect.succeed({ syncedMembershipIds: [], syncedOrganizationIds: [] }),
+    }),
+  );
+}
diff --git a/packages/core/src/services/organizations/OrganizationMembershipWebhookPort.ts b/packages/core/src/services/organizations/OrganizationMembershipWebhookPort.ts
new file mode 100644
index 000000000..bc7eac8b9
--- /dev/null
+++ b/packages/core/src/services/organizations/OrganizationMembershipWebhookPort.ts
@@ -0,0 +1,40 @@
+import { Db } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+/** Stable failure boundary for an organization-membership webhook extension. */
+export class OrganizationMembershipWebhookPortError extends Schema.TaggedErrorClass<OrganizationMembershipWebhookPortError>(
+  "OrganizationMembershipWebhookPortError",
+)("OrganizationMembershipWebhookPortError", { cause: Schema.String }) {}
+
+export type OrganizationMembershipWebhookEvent =
+  | {
+      readonly _tag: "Upsert";
+      readonly membership: {
+        readonly externalId: string;
+        readonly externalOrganizationId: string;
+        readonly externalUserId: string;
+        readonly role: string;
+      };
+    }
+  | {
+      readonly _tag: "Delete";
+      readonly externalMembershipId: string;
+    };
+
+export interface OrganizationMembershipWebhookPortShape {
+  readonly processEvent: (
+    event: OrganizationMembershipWebhookEvent,
+  ) => Effect.Effect<void, OrganizationMembershipWebhookPortError, Db>;
+}
+
+/** Optional extension point for projecting external multi-user membership webhooks. */
+export class OrganizationMembershipWebhookPort extends Context.Service<
+  OrganizationMembershipWebhookPort,
+  OrganizationMembershipWebhookPortShape
+>()("core/OrganizationMembershipWebhookPort") {
+  /** Community layer that acknowledges membership events without projecting them. */
+  static readonly noop: Layer.Layer<OrganizationMembershipWebhookPort> = Layer.succeed(
+    OrganizationMembershipWebhookPort,
+    OrganizationMembershipWebhookPort.of({ processEvent: () => Effect.void }),
+  );
+}
diff --git a/packages/core/src/services/organizations/OrganizationService.ts b/packages/core/src/services/organizations/OrganizationService.ts
new file mode 100644
index 000000000..d5a31c4de
--- /dev/null
+++ b/packages/core/src/services/organizations/OrganizationService.ts
@@ -0,0 +1,520 @@
+import { SLUG_BLACKLIST } from "@voidhash/lib";
+import { Cause, Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  avatarKeyFromUrl,
+  avatarSha256Hex,
+  deriveAvatarKey,
+  isOwnedAvatarUrl,
+  validateAndDecodeAvatar,
+} from "../../domain/avatar.ts";
+import { OrganizationNotFoundError } from "../../domain/organization/Organization.ts";
+import { Db, eq, member, organization } from "@voidhash/db";
+import { createShortId } from "../../utils/create-short-id.ts";
+import { createSlug } from "../../utils/create-slug.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkOrganizationPermission } from "../../utils/permissions.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+import { OrganizationBillingPort } from "./OrganizationBillingPort.ts";
+import { WorkosOrgPort } from "./WorkosOrgPort.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError`, `WorkosOrgPortError`, and
+ * other infrastructural failures at the public-method boundary so callers
+ * see one stable error tag.
+ */
+export class OrganizationServiceError extends Schema.TaggedErrorClass<OrganizationServiceError>(
+  "OrganizationServiceError",
+)("OrganizationServiceError", { cause: Schema.String }) {}
+
+/**
+ * `OrganizationService` orchestrates the organization aggregate. WorkOS is
+ * the source of truth: every create / update / delete write goes to WorkOS
+ * first and is mirrored to the local DB only on success.
+ * Webhooks reconcile any drift.
+ *
+ * Multi-tenant analytics isolation no longer needs any per-org ClickHouse
+ * provisioning: a single shared readonly user enforces isolation via row
+ * policies keyed on the per-query `SQL_organization_id` setting, so adding a
+ * tenant is zero ClickHouse DDL.
+ *
+ * `Db`, `WorkosOrgPort`, `OrganizationBillingPort`, and `AuthSession` are
+ * provided by the application root. Community deployments use the no-op
+ * billing port; cloud and Enterprise deployments provide their billing
+ * extension without coupling this service to its implementation.
+ */
+export class OrganizationService extends Context.Service<OrganizationService>()(
+  "OrganizationService",
+  {
+    make: Effect.gen(function* () {
+      const workosOrgPort = yield* WorkosOrgPort;
+      const organizationBilling = yield* OrganizationBillingPort;
+      const publicFileStore = yield* PublicFileStore;
+      const db = yield* Db;
+
+      /**
+       * Stamps the acting identity (§2b) onto the current span. Guards every
+       * nullable field so key sessions never emit `"null"` attributes. Ids /
+       * pseudonymous distinct ids only — never the email/name (§5).
+       */
+      const annotateActor = (session: typeof AuthSession.Service) =>
+        Effect.gen(function* () {
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.user?.workosUserId) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.workos_id", session.user.workosUserId);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+        });
+
+      const checkSlugAvailable = (slug: string) =>
+        Effect.gen(function* () {
+          const existing = yield* db.query.organization.findFirst({ where: { slug } });
+          return existing === undefined;
+        });
+
+      const resolveWorkosUserIdForSession = (sessionUser: {
+        readonly email: string;
+        readonly workosUserId: string | null;
+      }) =>
+        Effect.gen(function* () {
+          if (sessionUser.workosUserId) {
+            return sessionUser.workosUserId;
+          }
+
+          const workosUser = yield* workosOrgPort.findUserByEmail(sessionUser.email);
+          if (workosUser) {
+            return workosUser.id;
+          }
+
+          return yield* Effect.fail(
+            new OrganizationServiceError({
+              cause:
+                "Cannot create an organization without an authenticated WorkOS user (api-key sessions cannot create orgs).",
+            }),
+          );
+        });
+
+      const getOrganizationById = Effect.fn("getOrganizationById")(
+        function* (id: string) {
+          const session = yield* AuthSession;
+          yield* annotateActor(session);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", id);
+          const org = yield* db.query.organization.findFirst({ where: { id } });
+          if (!org) {
+            return yield* Effect.fail(new OrganizationNotFoundError({ organizationId: id }));
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.organization.slug", org.slug);
+          if (org.workosOrganizationId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.workos_id",
+              org.workosOrganizationId,
+            );
+          }
+          yield* checkOrganizationPermission(
+            id,
+            "organization:all",
+            `User ${session?.user?.id} is not authorized to access organization ${id}`,
+          );
+          return org;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const getOrganizationBySlug = Effect.fn("getOrganizationBySlug")(
+        function* (slug: string) {
+          const session = yield* AuthSession;
+          yield* annotateActor(session);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.slug", slug);
+          const org = yield* db.query.organization.findFirst({ where: { slug } });
+          if (!org) {
+            return yield* Effect.fail(new OrganizationNotFoundError({ organizationId: slug }));
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", org.id);
+          if (org.workosOrganizationId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.workos_id",
+              org.workosOrganizationId,
+            );
+          }
+          yield* checkOrganizationPermission(
+            org.id,
+            "organization:all",
+            `User ${session?.user?.id} is not authorized to access organization ${org.id}`,
+          );
+          return org;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const createOrganization = Effect.fn("createOrganization")(
+        function* (input: { readonly name: string }) {
+          const session = yield* AuthSession;
+          yield* annotateActor(session);
+          const sessionUser = session.user;
+
+          if (!sessionUser) {
+            return yield* Effect.fail(
+              new OrganizationServiceError({
+                cause:
+                  "An authenticated user session is required to create an organization (api-key sessions cannot create orgs).",
+              }),
+            );
+          }
+          const workosUserId = yield* resolveWorkosUserIdForSession(sessionUser);
+
+          const baseSlug = createSlug(input.name);
+          let slug = SLUG_BLACKLIST.includes(baseSlug)
+            ? `${baseSlug}-${createShortId()}`
+            : baseSlug;
+          while (!(yield* checkSlugAvailable(slug))) {
+            slug = `${baseSlug}-${createShortId()}`;
+          }
+
+          const orgId = generateId("organization");
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", orgId);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.slug", slug);
+
+          // WorkOS create first. If this fails, no local state is created.
+          const workosOrg = yield* workosOrgPort
+            .createOrganization({ externalId: orgId, name: input.name })
+            .pipe(
+              Effect.tapError((error) =>
+                Effect.log(
+                  `WorkOS createOrganization failed for ${orgId} (${input.name}): ${error.message}`,
+                ),
+              ),
+            );
+
+          yield* Effect.log(`Created WorkOS org ${workosOrg.id} for ${orgId} (${input.name})`);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.workos_id", workosOrg.id);
+
+          const workosMembership = yield* workosOrgPort
+            .createMembership({
+              roleSlug: "admin",
+              workosOrganizationId: workosOrg.id,
+              workosUserId,
+            })
+            .pipe(
+              Effect.tapError((error) =>
+                Effect.log(
+                  `WorkOS createMembership failed for user ${workosUserId} in org ${workosOrg.id}: ${error.message}`,
+                ),
+              ),
+              Effect.tapError(() =>
+                workosOrgPort
+                  .deleteOrganization(workosOrg.id)
+                  .pipe(
+                    Effect.catch((rollbackError) =>
+                      Effect.logWarning(
+                        `Failed to roll back WorkOS org ${workosOrg.id} after membership-create failure: ${rollbackError.message}`,
+                      ),
+                    ),
+                  ),
+              ),
+            );
+
+          const now = new Date();
+          const ownerMembershipId = generateId("member");
+          yield* Effect.annotateCurrentSpan("voidhash.member.id", ownerMembershipId);
+          yield* Effect.annotateCurrentSpan("voidhash.member.workos_id", workosMembership.id);
+          yield* Effect.annotateCurrentSpan("voidhash.member.role", "owner");
+
+          // Local mirror in a single transaction. On failure, compensate by
+          // tearing down the WorkOS org so we don't leave an orphan.
+          yield* db
+            .transaction((tx) =>
+              Effect.gen(function* () {
+                yield* tx.insert(organization).values({
+                  createdAt: now,
+                  id: orgId,
+                  logo: null,
+                  metadata: null,
+                  name: input.name,
+                  slug,
+                  workosOrganizationId: workosOrg.id,
+                });
+                yield* tx.insert(member).values({
+                  createdAt: now,
+                  id: ownerMembershipId,
+                  organizationId: orgId,
+                  role: "owner",
+                  userId: sessionUser.id,
+                  workosMembershipId: workosMembership.id,
+                });
+              }),
+            )
+            .pipe(
+              Effect.tapError(() =>
+                workosOrgPort
+                  .deleteOrganization(workosOrg.id)
+                  .pipe(
+                    Effect.catch((rollbackError) =>
+                      Effect.logWarning(
+                        `Failed to roll back WorkOS org ${workosOrg.id} after local DB write failure: ${rollbackError.message}`,
+                      ),
+                    ),
+                  ),
+              ),
+            );
+
+          // Provision billing — non-fatal: log and continue if it fails.
+          yield* organizationBilling
+            .initializeOrganizationBilling({
+              email: sessionUser.email,
+              organizationId: orgId,
+            })
+            .pipe(
+              Effect.catch((error) =>
+                Effect.logWarning(`Failed to initialize billing for org ${orgId}: ${error}`),
+              ),
+            );
+
+          return { id: orgId, name: input.name, slug };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+              WorkosOrgPortError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: error.message })),
+            }),
+          ),
+      );
+
+      const updateOrganization = Effect.fn("updateOrganization")(
+        function* (input: { readonly organizationId: string; readonly name: string }) {
+          const session = yield* AuthSession;
+          yield* annotateActor(session);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          const org = yield* db.query.organization.findFirst({
+            where: { id: input.organizationId },
+          });
+          if (!org) {
+            return yield* Effect.fail(
+              new OrganizationNotFoundError({ organizationId: input.organizationId }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.organization.slug", org.slug);
+          if (org.workosOrganizationId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.workos_id",
+              org.workosOrganizationId,
+            );
+          }
+
+          yield* checkOrganizationPermission(
+            input.organizationId,
+            "organization:all",
+            `User ${session?.user?.id} is not authorized to update organization ${input.organizationId}`,
+          );
+
+          // WorkOS is the source of truth; mirror the rename there first.
+          yield* workosOrgPort.updateOrganization({
+            name: input.name,
+            workosOrganizationId: org.workosOrganizationId,
+          });
+
+          yield* db
+            .update(organization)
+            .set({ name: input.name })
+            .where(eq(organization.id, input.organizationId));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+              WorkosOrgPortError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: error.message })),
+            }),
+          ),
+      );
+
+      const setAvatar = Effect.fn("setOrganizationAvatar")(
+        function* (input: {
+          readonly organizationId: string;
+          readonly imageBase64: string;
+          readonly contentType: string;
+        }) {
+          const session = yield* AuthSession;
+          yield* annotateActor(session);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          const org = yield* db.query.organization.findFirst({
+            where: { id: input.organizationId },
+          });
+          if (!org) {
+            return yield* Effect.fail(
+              new OrganizationNotFoundError({ organizationId: input.organizationId }),
+            );
+          }
+          yield* checkOrganizationPermission(
+            input.organizationId,
+            "organization:all",
+            `User ${session?.user?.id} is not authorized to update organization ${input.organizationId}`,
+          );
+
+          const { bytes, ext } = yield* validateAndDecodeAvatar(input);
+          const sha256 = yield* avatarSha256Hex(bytes);
+          const key = deriveAvatarKey("organization", input.organizationId, sha256, ext);
+
+          yield* publicFileStore.putObject({ key, body: bytes, contentType: input.contentType });
+          const logoUrl = publicFileStore.publicUrl(key);
+
+          yield* db
+            .update(organization)
+            .set({ logo: logoUrl })
+            .where(eq(organization.id, input.organizationId));
+
+          // Best-effort cleanup of the superseded object (only our own keys).
+          if (org.logo !== null && isOwnedAvatarUrl(org.logo, publicFileStore.publicBaseUrl)) {
+            const oldKey = avatarKeyFromUrl(org.logo, publicFileStore.publicBaseUrl);
+            if (oldKey !== null && oldKey !== key) {
+              yield* publicFileStore
+                .deleteObject(oldKey)
+                .pipe(
+                  Effect.catchCause((cause) =>
+                    Effect.logWarning(
+                      `Failed to delete superseded avatar object ${oldKey}: ${Cause.pretty(cause)}`,
+                    ),
+                  ),
+                );
+            }
+          }
+
+          return { logoUrl };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+              PublicFileStoreError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: error.cause })),
+            }),
+          ),
+      );
+
+      const removeAvatar = Effect.fn("removeOrganizationAvatar")(
+        function* (input: { readonly organizationId: string }) {
+          const session = yield* AuthSession;
+          yield* annotateActor(session);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          const org = yield* db.query.organization.findFirst({
+            where: { id: input.organizationId },
+          });
+          if (!org) {
+            return yield* Effect.fail(
+              new OrganizationNotFoundError({ organizationId: input.organizationId }),
+            );
+          }
+          yield* checkOrganizationPermission(
+            input.organizationId,
+            "organization:all",
+            `User ${session?.user?.id} is not authorized to update organization ${input.organizationId}`,
+          );
+
+          yield* db
+            .update(organization)
+            .set({ logo: null })
+            .where(eq(organization.id, input.organizationId));
+
+          if (org.logo !== null && isOwnedAvatarUrl(org.logo, publicFileStore.publicBaseUrl)) {
+            const oldKey = avatarKeyFromUrl(org.logo, publicFileStore.publicBaseUrl);
+            if (oldKey !== null) {
+              yield* publicFileStore
+                .deleteObject(oldKey)
+                .pipe(
+                  Effect.catchCause((cause) =>
+                    Effect.logWarning(
+                      `Failed to delete superseded avatar object ${oldKey}: ${Cause.pretty(cause)}`,
+                    ),
+                  ),
+                );
+            }
+          }
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const deleteOrganization = Effect.fn("deleteOrganization")(
+        function* (input: { readonly organizationId: string }) {
+          const session = yield* AuthSession;
+          yield* annotateActor(session);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          yield* checkOrganizationPermission(
+            input.organizationId,
+            "organization:all",
+            `User ${session?.user?.id} is not authorized to delete organization ${input.organizationId}`,
+          );
+
+          const org = yield* db.query.organization.findFirst({
+            where: { id: input.organizationId },
+          });
+
+          if (org) {
+            if (org.workosOrganizationId) {
+              yield* Effect.annotateCurrentSpan(
+                "voidhash.organization.workos_id",
+                org.workosOrganizationId,
+              );
+            }
+            yield* workosOrgPort.deleteOrganization(org.workosOrganizationId);
+          }
+
+          yield* db.delete(organization).where(eq(organization.id, input.organizationId));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: String(error.cause) })),
+              WorkosOrgPortError: (error) =>
+                Effect.fail(new OrganizationServiceError({ cause: error.message })),
+            }),
+          ),
+      );
+
+      return {
+        createOrganization,
+        deleteOrganization,
+        getOrganizationById,
+        getOrganizationBySlug,
+        removeAvatar,
+        setAvatar,
+        updateOrganization,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(OrganizationService)(OrganizationService.make);
+}
diff --git a/packages/core/src/services/organizations/WorkosOrgPort.ts b/packages/core/src/services/organizations/WorkosOrgPort.ts
new file mode 100644
index 000000000..1fa5c9004
--- /dev/null
+++ b/packages/core/src/services/organizations/WorkosOrgPort.ts
@@ -0,0 +1,96 @@
+import { Context, type Effect, Schema } from "effect";
+
+/**
+ * Catch-all error for {@link WorkosOrgPort} operations. Adapters wrap any
+ * `@workos-inc/node` failure into this single tag so the
+ * {@link OrganizationService} catch boundary stays small.
+ */
+export class WorkosOrgPortError extends Schema.TaggedErrorClass<WorkosOrgPortError>(
+  "WorkosOrgPortError",
+)("WorkosOrgPortError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface WorkosPortOrganization {
+  readonly id: string;
+  readonly name: string;
+  readonly externalId: string | null;
+}
+
+export interface WorkosPortMembership {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly userId: string;
+  readonly role: string | null;
+}
+
+export interface WorkosPortUser {
+  readonly id: string;
+  readonly email: string;
+  readonly emailVerified: boolean;
+  readonly externalId: string | null;
+  readonly firstName: string | null;
+  readonly lastName: string | null;
+  readonly profilePictureUrl: string | null;
+}
+
+export interface WorkosOrgPortShape {
+  readonly createOrganization: (input: {
+    readonly name: string;
+    readonly externalId: string;
+  }) => Effect.Effect<WorkosPortOrganization, WorkosOrgPortError>;
+
+  readonly updateOrganization: (input: {
+    readonly workosOrganizationId: string;
+    readonly name?: string;
+  }) => Effect.Effect<WorkosPortOrganization, WorkosOrgPortError>;
+
+  readonly deleteOrganization: (
+    workosOrganizationId: string,
+  ) => Effect.Effect<void, WorkosOrgPortError>;
+
+  readonly getOrganizationByExternalId: (
+    externalId: string,
+  ) => Effect.Effect<WorkosPortOrganization | null, WorkosOrgPortError>;
+
+  /** Fetches a WorkOS organization by its WorkOS id. */
+  readonly getOrganization: (
+    workosOrganizationId: string,
+  ) => Effect.Effect<WorkosPortOrganization, WorkosOrgPortError>;
+
+  readonly createMembership: (input: {
+    readonly workosOrganizationId: string;
+    readonly workosUserId: string;
+    readonly roleSlug?: string;
+  }) => Effect.Effect<WorkosPortMembership, WorkosOrgPortError>;
+
+  /** Lists active WorkOS organization memberships for a WorkOS user. */
+  readonly listMembershipsForUser: (
+    workosUserId: string,
+  ) => Effect.Effect<ReadonlyArray<WorkosPortMembership>, WorkosOrgPortError>;
+
+  readonly updateMembershipRole: (
+    workosMembershipId: string,
+    input: { readonly roleSlug: string },
+  ) => Effect.Effect<WorkosPortMembership, WorkosOrgPortError>;
+
+  readonly deleteMembership: (
+    workosMembershipId: string,
+  ) => Effect.Effect<void, WorkosOrgPortError>;
+
+  readonly findUserByEmail: (
+    email: string,
+  ) => Effect.Effect<WorkosPortUser | null, WorkosOrgPortError>;
+}
+
+/**
+ * Provider-agnostic port for the subset of WorkOS operations
+ * the organization lifecycle, identity sync, and membership services need.
+ * The full live adapter (against `@workos-inc/node`) is wired by the
+ * application root, keeping business logic provider-neutral and trivially
+ * fakeable in tests.
+ */
+export class WorkosOrgPort extends Context.Service<WorkosOrgPort, WorkosOrgPortShape>()(
+  "WorkosOrgPort",
+) {}
diff --git a/packages/core/src/services/organizations/index.ts b/packages/core/src/services/organizations/index.ts
new file mode 100644
index 000000000..12a57caad
--- /dev/null
+++ b/packages/core/src/services/organizations/index.ts
@@ -0,0 +1,2 @@
+export * from "./OrganizationService.ts";
+export * from "./WorkosOrgPort.ts";
diff --git a/packages/core/src/services/paymentProviders/AppStorePaymentProviderService.ts b/packages/core/src/services/paymentProviders/AppStorePaymentProviderService.ts
new file mode 100644
index 000000000..db46b742c
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/AppStorePaymentProviderService.ts
@@ -0,0 +1,83 @@
+import { Context, type Effect, Schema } from "effect";
+
+/**
+ * Catch-all service error. Wraps unexpected failures from
+ * `AppStorePaymentProviderService` at the public-method boundary so callers
+ * see one stable error tag.
+ */
+export class AppStorePaymentProviderServiceError extends Schema.TaggedErrorClass<AppStorePaymentProviderServiceError>(
+  "AppStorePaymentProviderServiceError",
+)("AppStorePaymentProviderServiceError", { cause: Schema.String }) {}
+
+/**
+ * Result of an SDK-confirmed transaction. The new package only needs
+ * `personId` (`SdkService.submitPurchaseTransaction` re-fetches the snapshot
+ * after processing); richer downstream consumers continue to use the
+ * `internal/` service directly.
+ */
+export interface AppStoreSdkTransactionResult {
+  readonly personId: string;
+}
+
+/**
+ * Result returned to the webhook ingress. `accepted` reflects whether we
+ * verified Apple's signature and parsed the payload (i.e. whether Apple should
+ * stop retrying); `handled` reflects whether we actually mutated purchase
+ * state beyond acknowledging receipt. The `notificationType` / `subtype` /
+ * `notificationUUID` fields are unwrapped from the decoded payload when
+ * available (they may be absent if the payload is malformed).
+ */
+export interface AppStoreAcceptServerNotificationResult {
+  readonly accepted: true;
+  readonly handled: boolean;
+  readonly notificationType: string | undefined;
+  readonly notificationUUID: string | undefined;
+  readonly subtype: string | undefined;
+}
+
+export interface AppStorePaymentProviderServiceShape {
+  readonly processSdkTransaction: (input: {
+    readonly bundleId: string;
+    readonly distinctId: string;
+    /**
+     * The project the SDK call is scoped to. Resolved by the caller
+     * (`SdkService`) from the validated, project-elevated `AuthSession` and
+     * passed in explicitly so this method carries no `AuthSession` requirement
+     * (keeping its `R` channel `never`).
+     */
+    readonly projectId: string;
+    readonly receivedAt: Date;
+    readonly transactionId: string;
+  }) => Effect.Effect<AppStoreSdkTransactionResult, AppStorePaymentProviderServiceError, never>;
+  /**
+   * Webhook entry point — verifies Apple's signature, decodes the signed
+   * transaction, and dispatches the notification to the matching `record*`
+   * method on the underlying provider. Routes call this from the Apple
+   * server-to-server endpoint.
+   */
+  readonly acceptServerNotification: (input: {
+    readonly paymentProviderConfigurationId: string;
+    readonly receivedAt: Date;
+    readonly signedPayload: string;
+    /** Set when re-driving a parked/failed notification through the handler. */
+    readonly isReplay?: boolean;
+  }) => Effect.Effect<
+    AppStoreAcceptServerNotificationResult,
+    AppStorePaymentProviderServiceError,
+    never
+  >;
+}
+
+/**
+ * Stub service tag for the App Store payment-provider boundary.
+ *
+ * The full implementation still lives in
+ * `internal/packages/core/src/services/payment-providers/` because it depends
+ * on the App Store reconcile / replay workflows and the App Store REST
+ * client — both "difficult" migration pieces. The application root provides
+ * a `Layer.effect` adapter that delegates to the `internal/` implementation.
+ */
+export class AppStorePaymentProviderService extends Context.Service<
+  AppStorePaymentProviderService,
+  AppStorePaymentProviderServiceShape
+>()("AppStorePaymentProviderService") {}
diff --git a/packages/core/src/services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow.ts b/packages/core/src/services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow.ts
new file mode 100644
index 000000000..81c9190d4
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow.ts
@@ -0,0 +1,32 @@
+import { Context, type Effect } from "effect";
+
+import type { ReconciliationReason } from "./appStore/app-store-reconciliation-service.ts";
+
+/**
+ * Identifies the App Store `originalTransactionId` series to reconcile against
+ * Apple's authoritative transaction history + subscription statuses, and why.
+ */
+export interface AppStoreReconcileOriginalTransactionInput {
+  readonly paymentProviderConfigurationId: string;
+  readonly originalTransactionId: string;
+  /** ISO-8601 timestamp of when reconciliation was triggered. */
+  readonly triggeredAt: string;
+  readonly reason: ReconciliationReason;
+}
+
+/**
+ * Abstract workflow for the lazy first-seen Apple-history backfill. `dispatch`
+ * fires from `processSdkTransaction` the first time a tenant (with the
+ * `enableFirstSeenReconciliation` flag on) records a purchase for an
+ * `originalTransactionId` we have never seen — it imports any history Apple
+ * holds that arrived before the SDK boundary (RevenueCat-migrated subscribers,
+ * offline-then-reopen, dropped EXPIRED/REFUND). The concrete adapter (a
+ * Cloudflare Workflow) is wired at the application root, keeping the
+ * infrastructure dependency out of `packages/core`.
+ */
+export class AppStoreReconcileOriginalTransactionWorkflow extends Context.Service<
+  AppStoreReconcileOriginalTransactionWorkflow,
+  {
+    readonly dispatch: (input: AppStoreReconcileOriginalTransactionInput) => Effect.Effect<void>;
+  }
+>()("AppStoreReconcileOriginalTransactionWorkflow") {}
diff --git a/packages/core/src/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow.ts b/packages/core/src/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow.ts
new file mode 100644
index 000000000..fc60e3bf0
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow.ts
@@ -0,0 +1,22 @@
+import { Context, type Effect } from "effect";
+
+/** Identifies the new product mapping whose parked App Store notifications to replay. */
+export interface AppStoreReplayParkedNotificationsInput {
+  readonly paymentProviderConfigurationId: string;
+  readonly paymentProviderProductId: string;
+  readonly providerProductKey: string;
+}
+
+/**
+ * Abstract workflow for replaying parked App Store notifications. `dispatch`
+ * runs fire-and-forget when a new `(configuration, providerProduct)` mapping
+ * appears; the concrete adapter (a Cloudflare Workflow) is wired at the
+ * application root, keeping the infrastructure dependency out of
+ * `packages/core`.
+ */
+export class AppStoreReplayParkedNotificationsWorkflow extends Context.Service<
+  AppStoreReplayParkedNotificationsWorkflow,
+  {
+    readonly dispatch: (input: AppStoreReplayParkedNotificationsInput) => Effect.Effect<void>;
+  }
+>()("AppStoreReplayParkedNotificationsWorkflow") {}
diff --git a/packages/core/src/services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow.ts b/packages/core/src/services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow.ts
new file mode 100644
index 000000000..13c5c56c3
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow.ts
@@ -0,0 +1,25 @@
+import { Context, type Effect } from "effect";
+
+/**
+ * Identifies the `originalTransactionId` series whose notifications, parked
+ * pending SDK confirmation, should now be replayed.
+ */
+export interface AppStoreReplayParkedSdkNotificationsInput {
+  readonly paymentProviderConfigurationId: string;
+  readonly originalTransactionId: string;
+}
+
+/**
+ * Abstract workflow for replaying App Store notifications parked under the
+ * per-tenant `trackNewPurchasesFromAppleServerNotifications = false` mode
+ * (lifecycle webhooks held back until the SDK confirms the series). `dispatch`
+ * runs after `processSdkTransaction` records a purchase; the concrete adapter
+ * (a Cloudflare Workflow) is wired at the application root, keeping the
+ * infrastructure dependency out of `packages/core`.
+ */
+export class AppStoreReplayParkedSdkNotificationsWorkflow extends Context.Service<
+  AppStoreReplayParkedSdkNotificationsWorkflow,
+  {
+    readonly dispatch: (input: AppStoreReplayParkedSdkNotificationsInput) => Effect.Effect<void>;
+  }
+>()("AppStoreReplayParkedSdkNotificationsWorkflow") {}
diff --git a/packages/core/src/services/paymentProviders/GooglePlayPaymentProviderService.ts b/packages/core/src/services/paymentProviders/GooglePlayPaymentProviderService.ts
new file mode 100644
index 000000000..fe410c14d
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/GooglePlayPaymentProviderService.ts
@@ -0,0 +1,75 @@
+import { Context, type Effect } from "effect";
+
+import { GooglePlayPaymentProviderServiceError } from "./googlePlay/errors.ts";
+
+/**
+ * Re-exported so routes and `SdkService` can import the single canonical error
+ * class from the boundary (avoiding the App Store's dual-class trap).
+ */
+export { GooglePlayPaymentProviderServiceError };
+
+/**
+ * Result of an SDK-confirmed Google Play purchase. Only `personId` is needed —
+ * `SdkService.submitPurchaseTransaction` re-fetches the snapshot after
+ * processing.
+ */
+export interface GooglePlaySdkTransactionResult {
+  readonly personId: string;
+}
+
+/**
+ * Result returned to the RTDN webhook ingress. `accepted` reflects whether we
+ * decoded the Pub/Sub envelope (i.e. whether Pub/Sub should stop retrying);
+ * `handled` reflects whether we mutated purchase state beyond acknowledging
+ * receipt.
+ */
+export interface GooglePlayAcceptRtdnNotificationResult {
+  readonly accepted: true;
+  readonly handled: boolean;
+  readonly notificationType: string | undefined;
+  readonly notificationUUID: string | undefined;
+  readonly subtype: string | undefined;
+}
+
+export interface GooglePlayPaymentProviderServiceShape {
+  /**
+   * SDK entry point — the client submitted a freshly-purchased `purchaseToken`.
+   * Fetches authoritative state from the Play Developer API and records the
+   * purchase. `projectId` is passed explicitly (resolved by `SdkService` from
+   * the project-elevated `AuthSession`) so this method's `R` channel is `never`.
+   */
+  readonly processSdkTransaction: (input: {
+    readonly packageName: string;
+    /** The Google Play product id resolved from the SDK product slug. */
+    readonly productId: string;
+    readonly purchaseToken: string;
+    readonly distinctId: string;
+    readonly projectId: string;
+    readonly receivedAt: Date;
+  }) => Effect.Effect<GooglePlaySdkTransactionResult, GooglePlayPaymentProviderServiceError, never>;
+  /**
+   * Webhook entry point — decodes a Google Pub/Sub RTDN push envelope,
+   * re-fetches authoritative purchase state, and dispatches to the matching
+   * `record*` method. Called from the Google Play RTDN endpoint.
+   */
+  readonly acceptRtdnNotification: (input: {
+    readonly paymentProviderConfigurationId: string;
+    readonly receivedAt: Date;
+    /** The raw Pub/Sub push body (`{ message: { data: base64, ... } }`). */
+    readonly pubsubBody: unknown;
+  }) => Effect.Effect<
+    GooglePlayAcceptRtdnNotificationResult,
+    GooglePlayPaymentProviderServiceError,
+    never
+  >;
+}
+
+/**
+ * Public service tag for the Google Play payment-provider boundary. The live
+ * implementation is {@link GooglePlayPaymentProviderServiceLive} in
+ * `googlePlay/payment-provider-service.ts`; the application root provides it.
+ */
+export class GooglePlayPaymentProviderService extends Context.Service<
+  GooglePlayPaymentProviderService,
+  GooglePlayPaymentProviderServiceShape
+>()("GooglePlayPaymentProviderService") {}
diff --git a/packages/core/src/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow.ts b/packages/core/src/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow.ts
new file mode 100644
index 000000000..39c1c183c
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow.ts
@@ -0,0 +1,22 @@
+import { Context, type Effect } from "effect";
+
+/** Identifies the new product mapping whose parked Google Play notifications to replay. */
+export interface GooglePlayReplayParkedNotificationsInput {
+  readonly paymentProviderConfigurationId: string;
+  readonly paymentProviderProductId: string;
+  readonly providerProductKey: string;
+}
+
+/**
+ * Abstract workflow for replaying parked Google Play notifications. `dispatch`
+ * runs fire-and-forget when a new `(configuration, providerProduct)` mapping
+ * appears; the concrete adapter (a Cloudflare Workflow) is wired at the
+ * application root, keeping the infrastructure dependency out of
+ * `packages/core`.
+ */
+export class GooglePlayReplayParkedNotificationsWorkflow extends Context.Service<
+  GooglePlayReplayParkedNotificationsWorkflow,
+  {
+    readonly dispatch: (input: GooglePlayReplayParkedNotificationsInput) => Effect.Effect<void>;
+  }
+>()("GooglePlayReplayParkedNotificationsWorkflow") {}
diff --git a/packages/core/src/services/paymentProviders/PaymentProvider.ts b/packages/core/src/services/paymentProviders/PaymentProvider.ts
new file mode 100644
index 000000000..b7402c57b
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/PaymentProvider.ts
@@ -0,0 +1,60 @@
+import { Context, type Effect } from "effect";
+
+import type { PaymentProviderConfigurationValidationError } from "../../domain/paymentProvider/PaymentProviderConfiguration.ts";
+import type { PaymentProviderProductValidationError } from "../../domain/paymentProvider/PaymentProviderProduct.ts";
+
+export type PaymentProviderKind = "stripe" | "apple-app-store" | "google-play";
+
+/**
+ * Shape of the low-level provider adapter consumed by
+ * `PaymentProviderConfigurationService` and `PaymentProviderProductService`.
+ * Each provider implements validation, key derivation, and the default
+ * configuration blobs for its own configuration / product types.
+ *
+ * Provider implementations live beside this contract under `stripe/`,
+ * `appStore/`, and `googlePlay/`. The application composition provides their
+ * configuration adapters under these tags.
+ */
+export interface PaymentProviderShape<TKind extends PaymentProviderKind> {
+  readonly id: TKind;
+  readonly title: string;
+  readonly type: "native" | "web-checkout";
+  readonly defaultGlobalConfiguration: () => Effect.Effect<Record<string, unknown>>;
+  readonly defaultProductConfiguration: () => Effect.Effect<Record<string, unknown>>;
+  readonly createGlobalKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly createProductKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly validateGlobalConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: Record<string, unknown>;
+      readonly paymentProviderKey: string;
+    },
+    PaymentProviderConfigurationValidationError
+  >;
+  readonly validateProductConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: Record<string, unknown>;
+      readonly productKey: string;
+    },
+    PaymentProviderProductValidationError
+  >;
+}
+
+export class StripePaymentProvider extends Context.Service<
+  StripePaymentProvider,
+  PaymentProviderShape<"stripe">
+>()("StripePaymentProvider") {}
+
+export class AppStorePaymentProvider extends Context.Service<
+  AppStorePaymentProvider,
+  PaymentProviderShape<"apple-app-store">
+>()("AppStorePaymentProvider") {}
+
+export class GooglePlayPaymentProvider extends Context.Service<
+  GooglePlayPaymentProvider,
+  PaymentProviderShape<"google-play">
+>()("GooglePlayPaymentProvider") {}
+
+export type AnyPaymentProviderShape =
+  | PaymentProviderShape<"stripe">
+  | PaymentProviderShape<"apple-app-store">
+  | PaymentProviderShape<"google-play">;
diff --git a/packages/core/src/services/paymentProviders/PaymentProviderConfigurationService.ts b/packages/core/src/services/paymentProviders/PaymentProviderConfigurationService.ts
new file mode 100644
index 000000000..1ed126c1d
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/PaymentProviderConfigurationService.ts
@@ -0,0 +1,401 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  PaymentProviderAlreadyExistsError,
+  PaymentProviderConfigurationKeyUnavailableError,
+  PaymentProviderConfigurationNotFoundError,
+  PaymentProviderConfigurationValidationError,
+} from "../../domain/paymentProvider/PaymentProviderConfiguration.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  eq,
+  paymentProviderConfigurations,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { SchemaCacheInvalidationService } from "../schema/SchemaCacheInvalidationService.ts";
+import {
+  AppStorePaymentProvider,
+  type AnyPaymentProviderShape,
+  GooglePlayPaymentProvider,
+  StripePaymentProvider,
+} from "./PaymentProvider.ts";
+
+/**
+ * Catch-all service error. Wraps `DbError` and other infrastructural
+ * failures at the public-method boundary.
+ */
+export class PaymentProviderConfigurationServiceError extends Schema.TaggedErrorClass<PaymentProviderConfigurationServiceError>(
+  "PaymentProviderConfigurationServiceError",
+)("PaymentProviderConfigurationServiceError", { cause: Schema.String }) {}
+
+/**
+ * `PaymentProviderConfigurationService` orchestrates the
+ * payment-provider-configuration aggregate (one configuration per
+ * `(project, provider)` pair).
+ *
+ * `AuditLogPort`, `AuthSession`, `Db`, `SchemaCacheInvalidationService`,
+ * and the three `PaymentProvider` adapter stubs are provided by the
+ * application root.
+ */
+export class PaymentProviderConfigurationService extends Context.Service<PaymentProviderConfigurationService>()(
+  "PaymentProviderConfigurationService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const auditLog = yield* AuditLogPort;
+      const schemaCache = yield* SchemaCacheInvalidationService;
+      const stripePaymentProvider = yield* StripePaymentProvider;
+      const appStorePaymentProvider = yield* AppStorePaymentProvider;
+      const googlePlayPaymentProvider = yield* GooglePlayPaymentProvider;
+
+      const paymentProviders: ReadonlyArray<AnyPaymentProviderShape> = [
+        stripePaymentProvider,
+        appStorePaymentProvider,
+        googlePlayPaymentProvider,
+      ];
+
+      const findProvider = (
+        providerId: string,
+      ): Effect.Effect<AnyPaymentProviderShape, PaymentProviderConfigurationValidationError> => {
+        const provider = paymentProviders.find((candidate) => candidate.id === providerId);
+        return provider
+          ? Effect.succeed(provider)
+          : Effect.fail(
+              new PaymentProviderConfigurationValidationError({
+                cause: `Provider ${providerId} not found`,
+              }),
+            );
+      };
+
+      const getPaymentProviderConfigurations = Effect.fn("getPaymentProviderConfigurations")(
+        function* (projectId: string) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          yield* checkProjectPermission(
+            projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access payment provider configurations for project ${projectId}`,
+          );
+          return yield* db.query.paymentProviderConfigurations.findMany({
+            where: {
+              projectId,
+              deletedAt: { isNull: true },
+            },
+          });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new PaymentProviderConfigurationServiceError({ cause: String(error.cause) }),
+                ),
+            }),
+          ),
+      );
+
+      const getPaymentProviderConfigurationById = Effect.fn("getPaymentProviderConfigurationById")(
+        function* (id: string) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.configuration_id", id);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          const configuration = yield* db.query.paymentProviderConfigurations.findFirst({
+            where: { id },
+          });
+          if (!configuration) {
+            return yield* Effect.fail(
+              new PaymentProviderConfigurationNotFoundError({
+                message: "Payment provider configuration not found",
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", configuration.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.id",
+            configuration.providerId,
+          );
+          yield* checkProjectPermission(
+            configuration.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access payment provider configuration ${id} for project ${configuration.projectId}`,
+          );
+          return configuration;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new PaymentProviderConfigurationServiceError({ cause: String(error.cause) }),
+                ),
+            }),
+          ),
+      );
+
+      const createPaymentProviderConfiguration = Effect.fn("createPaymentProviderConfiguration")(
+        function* (input: { readonly projectId: string; readonly providerId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", input.providerId);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to create payment provider configurations for project ${input.projectId}`,
+          );
+
+          const provider = yield* findProvider(input.providerId);
+
+          const existing = yield* db.query.paymentProviderConfigurations.findFirst({
+            where: {
+              projectId: input.projectId,
+              providerId: input.providerId,
+              deletedAt: { isNull: true },
+            },
+          });
+          if (existing) {
+            return yield* Effect.fail(
+              new PaymentProviderAlreadyExistsError({
+                message: `Provider ${input.providerId} can only have one configuration`,
+              }),
+            );
+          }
+
+          const id = generateId("paymentProviderConfiguration");
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.configuration_id", id);
+          const defaultGlobalConfiguration = yield* provider.defaultGlobalConfiguration();
+          yield* db.insert(paymentProviderConfigurations).values({
+            configuration: defaultGlobalConfiguration,
+            enabled: false,
+            id,
+            name: provider.title,
+            paymentProviderKey: "empty",
+            projectId: input.projectId,
+            providerId: input.providerId,
+          });
+
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.PaymentProviderConfiguration,
+              entityId: id,
+              action: AuditLogAction.Created,
+              changes: { snapshot: { providerId: input.providerId } },
+            })
+            .pipe(Effect.ignore);
+
+          yield* Effect.log(
+            `Created payment provider configuration ${id} for project ${input.projectId}`,
+          );
+          yield* schemaCache.invalidate(input.projectId);
+          return { id };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new PaymentProviderConfigurationServiceError({ cause: String(error.cause) }),
+                ),
+            }),
+          ),
+      );
+
+      const updatePaymentProviderConfiguration = Effect.fn("updatePaymentProviderConfiguration")(
+        function* (input: {
+          readonly id: string;
+          readonly enabled: boolean;
+          readonly name?: string;
+          readonly configuration: Record<string, unknown>;
+        }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.configuration_id", input.id);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+
+          const existing = yield* db.query.paymentProviderConfigurations.findFirst({
+            where: { id: input.id },
+          });
+          if (!existing) {
+            return yield* Effect.fail(
+              new PaymentProviderConfigurationNotFoundError({
+                message: "Payment provider configuration not found",
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existing.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", existing.providerId);
+          yield* checkProjectPermission(
+            existing.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to update payment provider configuration ${input.id}`,
+          );
+
+          if (!input.enabled) {
+            yield* db
+              .update(paymentProviderConfigurations)
+              .set({
+                configuration: input.configuration,
+                enabled: false,
+                ...(input.name !== undefined ? { name: input.name } : {}),
+                updatedAt: new Date(),
+              })
+              .where(eq(paymentProviderConfigurations.id, input.id));
+
+            yield* auditLog
+              .append({
+                projectId: existing.projectId,
+                entityType: AuditLogEntityType.PaymentProviderConfiguration,
+                entityId: input.id,
+                action: AuditLogAction.Updated,
+                changes: { enabled: false },
+              })
+              .pipe(Effect.ignore);
+            yield* Effect.log(
+              `Updated payment provider configuration ${input.id}; not validated because the provider is disabled.`,
+            );
+            yield* schemaCache.invalidate(existing.projectId);
+            return { id: input.id };
+          }
+
+          const provider = yield* findProvider(existing.providerId);
+          const validation = yield* provider.validateGlobalConfiguration(input.configuration);
+
+          const conflicting = yield* db.query.paymentProviderConfigurations.findFirst({
+            where: {
+              projectId: existing.projectId,
+              providerId: existing.providerId,
+              paymentProviderKey: validation.paymentProviderKey,
+              id: { ne: input.id },
+              deletedAt: { isNull: true },
+            },
+          });
+          if (conflicting) {
+            return yield* Effect.fail(
+              new PaymentProviderConfigurationKeyUnavailableError({
+                message: "Payment provider with similar configuration already exists.",
+              }),
+            );
+          }
+
+          yield* db
+            .update(paymentProviderConfigurations)
+            .set({
+              configuration: validation.parsedConfiguration,
+              enabled: input.enabled,
+              ...(input.name !== undefined ? { name: input.name } : {}),
+              paymentProviderKey: validation.paymentProviderKey,
+              updatedAt: new Date(),
+            })
+            .where(eq(paymentProviderConfigurations.id, input.id));
+
+          yield* auditLog
+            .append({
+              projectId: existing.projectId,
+              entityType: AuditLogEntityType.PaymentProviderConfiguration,
+              entityId: input.id,
+              action: AuditLogAction.Updated,
+              changes: { enabled: input.enabled },
+            })
+            .pipe(Effect.ignore);
+          yield* Effect.log(
+            `Updated payment provider configuration ${input.id}; validated and enabled.`,
+          );
+          yield* schemaCache.invalidate(existing.projectId);
+          return { id: input.id };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new PaymentProviderConfigurationServiceError({ cause: String(error.cause) }),
+                ),
+            }),
+          ),
+      );
+
+      const deletePaymentProviderConfiguration = Effect.fn("deletePaymentProviderConfiguration")(
+        function* (input: { readonly paymentProviderConfigurationId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          const existing = yield* db.query.paymentProviderConfigurations.findFirst({
+            where: { id: input.paymentProviderConfigurationId },
+          });
+          if (!existing) {
+            return yield* Effect.fail(
+              new PaymentProviderConfigurationNotFoundError({
+                message: `Payment provider configuration with id ${input.paymentProviderConfigurationId} not found`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existing.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", existing.providerId);
+          yield* checkProjectPermission(
+            existing.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to delete payment provider configuration ${input.paymentProviderConfigurationId}`,
+          );
+
+          yield* db
+            .update(paymentProviderConfigurations)
+            .set({ deletedAt: new Date(), updatedAt: new Date() })
+            .where(eq(paymentProviderConfigurations.id, input.paymentProviderConfigurationId));
+
+          yield* auditLog
+            .append({
+              projectId: existing.projectId,
+              entityType: AuditLogEntityType.PaymentProviderConfiguration,
+              entityId: input.paymentProviderConfigurationId,
+              action: AuditLogAction.Deleted,
+            })
+            .pipe(Effect.ignore);
+          yield* Effect.log(
+            `Deleted payment provider configuration ${input.paymentProviderConfigurationId}`,
+          );
+          yield* schemaCache.invalidate(existing.projectId);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new PaymentProviderConfigurationServiceError({ cause: String(error.cause) }),
+                ),
+            }),
+          ),
+      );
+
+      return {
+        createPaymentProviderConfiguration,
+        deletePaymentProviderConfiguration,
+        getPaymentProviderConfigurationById,
+        getPaymentProviderConfigurations,
+        updatePaymentProviderConfiguration,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaymentProviderConfigurationService)(
+    PaymentProviderConfigurationService.make,
+  );
+}
diff --git a/packages/core/src/services/paymentProviders/PaymentProviderProductService.ts b/packages/core/src/services/paymentProviders/PaymentProviderProductService.ts
new file mode 100644
index 000000000..155bf1f51
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/PaymentProviderProductService.ts
@@ -0,0 +1,753 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  PaymentProviderProductNotFoundError,
+  PaymentProviderProductValidationError,
+} from "../../domain/paymentProvider/PaymentProviderProduct.ts";
+import { AppStoreReplayParkedNotificationsWorkflow } from "./AppStoreReplayParkedNotificationsWorkflow.ts";
+import { GooglePlayReplayParkedNotificationsWorkflow } from "./GooglePlayReplayParkedNotificationsWorkflow.ts";
+import { StripeReplayParkedNotificationsWorkflow } from "./StripeReplayParkedNotificationsWorkflow.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  type Product as DbProduct,
+  type PaymentProviderConfigurationProduct as DbPaymentProviderConfigurationProduct,
+  and,
+  asc,
+  eq,
+  not,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  products,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { SchemaCacheInvalidationService } from "../schema/SchemaCacheInvalidationService.ts";
+import {
+  AppStorePaymentProvider,
+  type AnyPaymentProviderShape,
+  GooglePlayPaymentProvider,
+  StripePaymentProvider,
+} from "./PaymentProvider.ts";
+
+/**
+ * Catch-all service error. Wraps `DbError` and other infrastructural
+ * failures at the public-method boundary.
+ */
+export class PaymentProviderProductServiceError extends Schema.TaggedErrorClass<PaymentProviderProductServiceError>(
+  "PaymentProviderProductServiceError",
+)("PaymentProviderProductServiceError", { cause: Schema.String }) {}
+
+type DbProviderProductWithProduct = DbPaymentProviderConfigurationProduct & {
+  readonly product: DbProduct;
+};
+
+/**
+ * `PaymentProviderProductService` orchestrates the per-product, per-provider
+ * mapping rows that link catalog products to provider-specific product keys.
+ *
+ * `AuditLogPort`, `AuthSession`, `Db`, `SchemaCacheInvalidationService`,
+ * the three `PaymentProvider` adapter stubs, and the
+ * `AppStoreReplayParkedNotificationsWorkflow` /
+ * `GooglePlayReplayParkedNotificationsWorkflow` /
+ * `StripeReplayParkedNotificationsWorkflow` bindings are provided by the
+ * application root.
+ */
+export class PaymentProviderProductService extends Context.Service<PaymentProviderProductService>()(
+  "PaymentProviderProductService",
+  {
+    make: Effect.gen(function* () {
+      const auditLog = yield* AuditLogPort;
+      const schemaCache = yield* SchemaCacheInvalidationService;
+      const stripePaymentProvider = yield* StripePaymentProvider;
+      const appStorePaymentProvider = yield* AppStorePaymentProvider;
+      const googlePlayPaymentProvider = yield* GooglePlayPaymentProvider;
+      const db = yield* Db;
+
+      const paymentProviders: ReadonlyArray<AnyPaymentProviderShape> = [
+        stripePaymentProvider,
+        appStorePaymentProvider,
+        googlePlayPaymentProvider,
+      ];
+
+      const findProvider = (
+        providerId: string,
+      ): Effect.Effect<AnyPaymentProviderShape, PaymentProviderProductValidationError> => {
+        const provider = paymentProviders.find((candidate) => candidate.id === providerId);
+        return provider
+          ? Effect.succeed(provider)
+          : Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Payment provider ${providerId} not found`,
+              }),
+            );
+      };
+
+      /**
+       * Background-schedules the App Store parked-notification replay
+       * workflow when a new `(configurationId, providerProductKey)` mapping
+       * exists. Fire-and-forget — the workflow body itself is a stub until
+       * the App Store payment-provider migration lands.
+       */
+      const scheduleAppStoreParkedReplayIfApplicable = (input: {
+        readonly providerId: string;
+        readonly paymentProviderConfigurationId: string;
+        readonly paymentProviderProductId: string;
+        readonly providerProductKey: string;
+      }) => {
+        if (input.providerId !== "apple-app-store") {
+          return Effect.void;
+        }
+        return AppStoreReplayParkedNotificationsWorkflow.pipe(
+          Effect.flatMap((appStoreReplayParkedNotifications) =>
+            appStoreReplayParkedNotifications.dispatch({
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              paymentProviderProductId: input.paymentProviderProductId,
+              providerProductKey: input.providerProductKey,
+            }),
+          ),
+          Effect.catchCause((cause) =>
+            Effect.logWarning("Failed to schedule App Store parked notification replay", {
+              cause,
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              paymentProviderProductId: input.paymentProviderProductId,
+              providerProductKey: input.providerProductKey,
+            }),
+          ),
+          Effect.asVoid,
+        );
+      };
+
+      /**
+       * Background-schedules the Google Play parked-notification replay
+       * workflow when a new `(configurationId, providerProductKey)` mapping
+       * exists. Fire-and-forget — the Google analogue of
+       * {@link scheduleAppStoreParkedReplayIfApplicable}, gated on the
+       * `google-play` provider.
+       */
+      const scheduleGooglePlayParkedReplayIfApplicable = (input: {
+        readonly providerId: string;
+        readonly paymentProviderConfigurationId: string;
+        readonly paymentProviderProductId: string;
+        readonly providerProductKey: string;
+      }) => {
+        if (input.providerId !== "google-play") {
+          return Effect.void;
+        }
+        return GooglePlayReplayParkedNotificationsWorkflow.pipe(
+          Effect.flatMap((googlePlayReplayParkedNotifications) =>
+            googlePlayReplayParkedNotifications.dispatch({
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              paymentProviderProductId: input.paymentProviderProductId,
+              providerProductKey: input.providerProductKey,
+            }),
+          ),
+          Effect.catchCause((cause) =>
+            Effect.logWarning("Failed to schedule Google Play parked notification replay", {
+              cause,
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              paymentProviderProductId: input.paymentProviderProductId,
+              providerProductKey: input.providerProductKey,
+            }),
+          ),
+          Effect.asVoid,
+        );
+      };
+
+      /**
+       * Background-schedules the Stripe parked-event replay workflow when a new
+       * `(configurationId, providerProductKey)` mapping exists, so events that
+       * arrived before the product was mapped get reprocessed. Fire-and-forget.
+       */
+      const scheduleStripeParkedReplayIfApplicable = (input: {
+        readonly providerId: string;
+        readonly paymentProviderConfigurationId: string;
+        readonly paymentProviderProductId: string;
+        readonly providerProductKey: string;
+      }) => {
+        if (input.providerId !== "stripe") {
+          return Effect.void;
+        }
+        return StripeReplayParkedNotificationsWorkflow.pipe(
+          Effect.flatMap((stripeReplayParkedNotifications) =>
+            stripeReplayParkedNotifications.dispatch({
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              paymentProviderProductId: input.paymentProviderProductId,
+              providerProductKey: input.providerProductKey,
+            }),
+          ),
+          Effect.catchCause((cause) =>
+            Effect.logWarning("Failed to schedule Stripe parked notification replay", {
+              cause,
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              paymentProviderProductId: input.paymentProviderProductId,
+              providerProductKey: input.providerProductKey,
+            }),
+          ),
+          Effect.asVoid,
+        );
+      };
+
+      const getProviderProductsByProjectId = Effect.fn("getProviderProductsByProjectId")(
+        function* (projectId: string) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          yield* checkProjectPermission(
+            projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access provider products for project ${projectId}`,
+          );
+          const rows = yield* db
+            .select()
+            .from(paymentProviderConfigurationProducts)
+            .innerJoin(products, eq(paymentProviderConfigurationProducts.productId, products.id))
+            .innerJoin(
+              paymentProviderConfigurations,
+              eq(
+                paymentProviderConfigurationProducts.paymentProviderConfigurationId,
+                paymentProviderConfigurations.id,
+              ),
+            )
+            .where(eq(products.projectId, projectId))
+            .orderBy(asc(paymentProviderConfigurationProducts.createdAt));
+          return rows.map((row) => ({
+            configuration: row.payment_provider_configuration_product.configuration,
+            id: row.payment_provider_configuration_product.id,
+            paymentProviderConfigurationId:
+              row.payment_provider_configuration_product.paymentProviderConfigurationId,
+            productId: row.payment_provider_configuration_product.productId,
+            providerId: row.payment_provider_configuration.providerId,
+          }));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const getProviderProductsByProductId = Effect.fn("getProviderProductsByProductId")(
+        function* (productId: string) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", productId);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          const product = yield* db.query.products.findFirst({ where: { id: productId } });
+          if (!product) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({ message: "Product not found" }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+          yield* checkProjectPermission(
+            product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access provider products for product ${productId}`,
+          );
+          return yield* db.query.paymentProviderConfigurationProducts.findMany({
+            orderBy: { createdAt: "asc" },
+            where: { productId },
+          });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const getProviderProductById = Effect.fn("getProviderProductById")(
+        function* (id: string) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.product_id", id);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          const providerProduct = yield* db.query.paymentProviderConfigurationProducts.findFirst({
+            where: { id },
+          });
+          if (!providerProduct) {
+            return yield* Effect.fail(
+              new PaymentProviderProductNotFoundError({
+                message: "Provider product not found",
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", providerProduct.productId);
+          const product = yield* db.query.products.findFirst({
+            where: { id: providerProduct.productId },
+          });
+          if (!product) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Product ${providerProduct.productId} not found`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+          yield* checkProjectPermission(
+            product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access provider product for project ${product.projectId}`,
+          );
+          return providerProduct;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const createPaymentProviderProduct = Effect.fn("createPaymentProviderProduct")(
+        function* (input: {
+          readonly productId: string;
+          readonly paymentProviderConfigurationId: string;
+          readonly configuration: Record<string, unknown>;
+        }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", input.productId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          const [product, providerConfiguration] = yield* Effect.all(
+            [
+              db.query.products.findFirst({ where: { id: input.productId } }),
+              db.query.paymentProviderConfigurations.findFirst({
+                where: { id: input.paymentProviderConfigurationId },
+              }),
+            ],
+            { concurrency: "unbounded" },
+          );
+
+          if (!product) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Product ${input.productId} not found`,
+              }),
+            );
+          }
+          if (!providerConfiguration) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Payment provider configuration ${input.paymentProviderConfigurationId} not found`,
+              }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.id",
+            providerConfiguration.providerId,
+          );
+
+          yield* checkProjectPermission(
+            product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to create payment provider products for project ${product.projectId}`,
+          );
+          yield* checkProjectPermission(
+            providerConfiguration.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access payment provider configuration for project ${providerConfiguration.projectId}`,
+          );
+
+          const provider = yield* findProvider(providerConfiguration.providerId);
+          const validation = yield* provider.validateProductConfiguration(input.configuration);
+
+          const id = generateId("paymentProviderProduct");
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.product_id", id);
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(paymentProviderConfigurationProducts)
+                .set({ isActive: false })
+                .where(
+                  and(
+                    eq(paymentProviderConfigurationProducts.productId, product.id),
+                    eq(
+                      paymentProviderConfigurationProducts.paymentProviderConfigurationId,
+                      input.paymentProviderConfigurationId,
+                    ),
+                  ),
+                );
+              yield* tx.insert(paymentProviderConfigurationProducts).values({
+                configuration: validation.parsedConfiguration,
+                id,
+                isActive: true,
+                paymentProviderConfigurationId: providerConfiguration.id,
+                productId: product.id,
+                providerProductKey: validation.productKey,
+              });
+            }),
+          );
+
+          yield* auditLog
+            .append({
+              projectId: product.projectId,
+              entityType: AuditLogEntityType.PaymentProviderProduct,
+              entityId: id,
+              parentEntityId: input.productId,
+              action: AuditLogAction.Created,
+            })
+            .pipe(Effect.ignore);
+
+          yield* Effect.log(`Created payment provider product ${id} for product ${product.id}`);
+          yield* schemaCache.invalidate(product.projectId);
+
+          yield* scheduleAppStoreParkedReplayIfApplicable({
+            paymentProviderConfigurationId: providerConfiguration.id,
+            paymentProviderProductId: id,
+            providerId: providerConfiguration.providerId,
+            providerProductKey: validation.productKey,
+          });
+          yield* scheduleGooglePlayParkedReplayIfApplicable({
+            paymentProviderConfigurationId: providerConfiguration.id,
+            paymentProviderProductId: id,
+            providerId: providerConfiguration.providerId,
+            providerProductKey: validation.productKey,
+          });
+          yield* scheduleStripeParkedReplayIfApplicable({
+            paymentProviderConfigurationId: providerConfiguration.id,
+            paymentProviderProductId: id,
+            providerId: providerConfiguration.providerId,
+            providerProductKey: validation.productKey,
+          });
+
+          return { id };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const setActivePaymentProviderProduct = Effect.fn("setActivePaymentProviderProduct")(
+        function* (input: {
+          readonly productId: string;
+          readonly providerProductKey: string;
+          readonly paymentProviderConfigurationId: string;
+        }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", input.productId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.provider_product_key",
+            input.providerProductKey,
+          );
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+
+          const [product, providerConfiguration] = yield* Effect.all([
+            db.query.products.findFirst({ where: { id: input.productId } }),
+            db.query.paymentProviderConfigurations.findFirst({
+              where: { id: input.paymentProviderConfigurationId },
+            }),
+          ]);
+
+          if (!product) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Product ${input.productId} not found`,
+              }),
+            );
+          }
+          if (!providerConfiguration) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Payment provider configuration ${input.paymentProviderConfigurationId} not found`,
+              }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.id",
+            providerConfiguration.providerId,
+          );
+
+          yield* checkProjectPermission(
+            product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to update payment provider products for project ${product.projectId}`,
+          );
+          yield* checkProjectPermission(
+            providerConfiguration.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access payment provider configuration for project ${providerConfiguration.projectId}`,
+          );
+
+          yield* findProvider(providerConfiguration.providerId);
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(paymentProviderConfigurationProducts)
+                .set({ isActive: false })
+                .where(
+                  and(
+                    eq(paymentProviderConfigurationProducts.productId, input.productId),
+                    eq(
+                      paymentProviderConfigurationProducts.paymentProviderConfigurationId,
+                      input.paymentProviderConfigurationId,
+                    ),
+                    not(
+                      eq(
+                        paymentProviderConfigurationProducts.providerProductKey,
+                        input.providerProductKey,
+                      ),
+                    ),
+                  ),
+                );
+              yield* tx
+                .update(paymentProviderConfigurationProducts)
+                .set({ isActive: true })
+                .where(
+                  and(
+                    eq(paymentProviderConfigurationProducts.productId, input.productId),
+                    eq(
+                      paymentProviderConfigurationProducts.paymentProviderConfigurationId,
+                      input.paymentProviderConfigurationId,
+                    ),
+                    eq(
+                      paymentProviderConfigurationProducts.providerProductKey,
+                      input.providerProductKey,
+                    ),
+                  ),
+                );
+            }),
+          );
+
+          yield* auditLog
+            .append({
+              projectId: product.projectId,
+              entityType: AuditLogEntityType.PaymentProviderProduct,
+              entityId: input.productId,
+              action: AuditLogAction.Updated,
+              changes: { providerProductKey: input.providerProductKey },
+            })
+            .pipe(Effect.ignore);
+
+          yield* schemaCache.invalidate(product.projectId);
+
+          yield* scheduleAppStoreParkedReplayIfApplicable({
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            paymentProviderProductId: input.productId,
+            providerId: providerConfiguration.providerId,
+            providerProductKey: input.providerProductKey,
+          });
+          yield* scheduleGooglePlayParkedReplayIfApplicable({
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            paymentProviderProductId: input.productId,
+            providerId: providerConfiguration.providerId,
+            providerProductKey: input.providerProductKey,
+          });
+          yield* scheduleStripeParkedReplayIfApplicable({
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            paymentProviderProductId: input.productId,
+            providerId: providerConfiguration.providerId,
+            providerProductKey: input.providerProductKey,
+          });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const updatePaymentProviderProduct = Effect.fn("updatePaymentProviderProduct")(
+        function* (input: {
+          readonly id: string;
+          readonly configuration: Record<string, unknown>;
+        }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.product_id", input.id);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          const providerProduct = yield* db.query.paymentProviderConfigurationProducts.findFirst({
+            where: { id: input.id },
+          });
+          if (!providerProduct) {
+            return yield* Effect.fail(
+              new PaymentProviderProductNotFoundError({
+                message: "Provider product not found",
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", providerProduct.productId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            providerProduct.paymentProviderConfigurationId,
+          );
+
+          const [product, providerConfiguration] = yield* Effect.all([
+            db.query.products.findFirst({ where: { id: providerProduct.productId } }),
+            db.query.paymentProviderConfigurations.findFirst({
+              where: { id: providerProduct.paymentProviderConfigurationId },
+            }),
+          ]);
+          if (!product) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Product ${providerProduct.productId} not found`,
+              }),
+            );
+          }
+          if (!providerConfiguration) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Payment provider configuration ${providerProduct.paymentProviderConfigurationId} not found`,
+              }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.id",
+            providerConfiguration.providerId,
+          );
+
+          yield* checkProjectPermission(
+            product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to update payment provider products for project ${product.projectId}`,
+          );
+
+          const provider = yield* findProvider(providerConfiguration.providerId);
+          const validation = yield* provider.validateProductConfiguration(input.configuration);
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(paymentProviderConfigurationProducts)
+                .set({
+                  configuration: validation.parsedConfiguration,
+                  providerProductKey: validation.productKey,
+                })
+                .where(eq(paymentProviderConfigurationProducts.id, providerProduct.id));
+            }),
+          );
+
+          yield* auditLog
+            .append({
+              projectId: product.projectId,
+              entityType: AuditLogEntityType.PaymentProviderProduct,
+              entityId: providerProduct.id,
+              parentEntityId: providerProduct.productId,
+              action: AuditLogAction.Updated,
+            })
+            .pipe(Effect.ignore);
+
+          yield* schemaCache.invalidate(product.projectId);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const deletePaymentProviderProduct = Effect.fn("deletePaymentProviderProduct")(
+        function* (input: { readonly id: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.product_id", input.id);
+          if (session?.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          const providerProduct = (yield* db.query.paymentProviderConfigurationProducts.findFirst({
+            where: { id: input.id },
+            with: { product: true },
+          })) as DbProviderProductWithProduct | undefined;
+          if (!providerProduct) {
+            return yield* Effect.fail(
+              new PaymentProviderProductValidationError({
+                message: `Payment provider product ${input.id} not found`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", providerProduct.productId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.project.id",
+            providerProduct.product.projectId,
+          );
+          yield* checkProjectPermission(
+            providerProduct.product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to delete payment provider products for project ${providerProduct.product.projectId}`,
+          );
+
+          yield* db
+            .delete(paymentProviderConfigurationProducts)
+            .where(eq(paymentProviderConfigurationProducts.id, input.id));
+
+          yield* auditLog
+            .append({
+              projectId: providerProduct.product.projectId,
+              entityType: AuditLogEntityType.PaymentProviderProduct,
+              entityId: input.id,
+              parentEntityId: providerProduct.productId,
+              action: AuditLogAction.Deleted,
+            })
+            .pipe(Effect.ignore);
+
+          yield* schemaCache.invalidate(providerProduct.product.projectId);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaymentProviderProductServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return {
+        createPaymentProviderProduct,
+        deletePaymentProviderProduct,
+        getProviderProductById,
+        getProviderProductsByProductId,
+        getProviderProductsByProjectId,
+        setActivePaymentProviderProduct,
+        updatePaymentProviderProduct,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaymentProviderProductService)(PaymentProviderProductService.make);
+}
diff --git a/packages/core/src/services/paymentProviders/StripePaymentProviderService.ts b/packages/core/src/services/paymentProviders/StripePaymentProviderService.ts
new file mode 100644
index 000000000..96a0e9548
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/StripePaymentProviderService.ts
@@ -0,0 +1,41 @@
+import { Context, type Effect } from "effect";
+
+import type { StripePaymentProviderServiceError } from "./stripe/errors.ts";
+
+/**
+ * Result returned to the Stripe webhook ingress. `accepted` reflects whether we
+ * verified the `Stripe-Signature` HMAC and parsed the event (i.e. whether
+ * Stripe should stop retrying); `handled` reflects whether we mutated purchase
+ * state beyond acknowledging receipt.
+ */
+export interface StripeAcceptWebhookEventResult {
+  readonly accepted: true;
+  readonly handled: boolean;
+  readonly eventId: string;
+  readonly eventType: string;
+}
+
+export interface StripePaymentProviderServiceShape {
+  /**
+   * Webhook entry point — verifies the Stripe signature against the per-tenant
+   * signing secret, decodes the event, and dispatches it to the matching
+   * `record*` method on the underlying engine. The Stripe webhook route calls
+   * this with the raw request body + `Stripe-Signature` header.
+   */
+  readonly acceptWebhookEvent: (input: {
+    readonly paymentProviderConfigurationId: string;
+    readonly rawBody: string;
+    readonly signatureHeader: string;
+    readonly receivedAt: Date;
+  }) => Effect.Effect<StripeAcceptWebhookEventResult, StripePaymentProviderServiceError, never>;
+}
+
+/**
+ * Stub service tag for the Stripe payment-provider boundary. The application
+ * root provides a `Layer.effect` adapter (`StripePaymentProviderServiceLive`)
+ * that delegates to the {@link StripeWebhookHandlerService}.
+ */
+export class StripePaymentProviderService extends Context.Service<
+  StripePaymentProviderService,
+  StripePaymentProviderServiceShape
+>()("StripePaymentProviderService") {}
diff --git a/packages/core/src/services/paymentProviders/StripeReplayParkedNotificationsWorkflow.ts b/packages/core/src/services/paymentProviders/StripeReplayParkedNotificationsWorkflow.ts
new file mode 100644
index 000000000..918f34998
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/StripeReplayParkedNotificationsWorkflow.ts
@@ -0,0 +1,22 @@
+import { Context, type Effect } from "effect";
+
+/** Identifies the new product mapping whose parked Stripe events to replay. */
+export interface StripeReplayParkedNotificationsInput {
+  readonly paymentProviderConfigurationId: string;
+  readonly paymentProviderProductId: string;
+  readonly providerProductKey: string;
+}
+
+/**
+ * Abstract workflow for replaying parked Stripe webhook events. `dispatch` runs
+ * fire-and-forget when a new `(configuration, providerProduct)` mapping appears;
+ * the concrete adapter (a Cloudflare Workflow) is wired at the application root,
+ * keeping the infrastructure dependency out of `packages/core`. Mirrors
+ * {@link AppStoreReplayParkedNotificationsWorkflow}.
+ */
+export class StripeReplayParkedNotificationsWorkflow extends Context.Service<
+  StripeReplayParkedNotificationsWorkflow,
+  {
+    readonly dispatch: (input: StripeReplayParkedNotificationsInput) => Effect.Effect<void>;
+  }
+>()("StripeReplayParkedNotificationsWorkflow") {}
diff --git a/packages/core/src/services/paymentProviders/appStore/app-store-reconciliation-service.ts b/packages/core/src/services/paymentProviders/appStore/app-store-reconciliation-service.ts
new file mode 100644
index 000000000..d26dfddcf
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/app-store-reconciliation-service.ts
@@ -0,0 +1,442 @@
+/**
+ * `AppStoreReconciliationService` walks Apple's authoritative transaction
+ * history + subscription status for a given `originalTransactionId` and
+ * replays each event through the existing `record*` methods on
+ * `AppStorePaymentProvider`. Two callers:
+ *
+ *  1. **Lazy backfill** — fired from {@link AppStorePaymentProviderService.processSdkTransaction}
+ *     on first-seen `originalTransactionId`. Imports the customer's prior
+ *     history without waiting for a webhook to arrive (covers RevenueCat
+ *     migration and offline-then-reopen scenarios).
+ *
+ *  2. **Admin RPC repair** — manually triggered when ops needs to recover
+ *     a user whose state drifted (rare, but the path needs to exist).
+ *
+ * Idempotency: every replayed event flows through the same per-event
+ * idempotency key as the live webhook would produce
+ * (see {@link getAppStorePurchaseProcessingIdempotencyKey}), so a
+ * reconciliation collides with any live event already processed via the
+ * UNIQUE on `purchase_ledger.idempotency_key`. The watermark guard on
+ * `subscription.last_event_occurred_at` ensures a reconciliation that
+ * arrives after a fresher live event doesn't regress the projection.
+ *
+ * All `record*` calls pass `source: "reconciliation"` so ops can tell
+ * reconciliation-driven rows from webhook-driven rows in
+ * `payment_provider_notification_processed` and `purchase_ledger.source`.
+ */
+import {
+  type GetTransactionHistoryVersion,
+  type JWSRenewalInfoDecodedPayload,
+  Order,
+  ProductType,
+  Status,
+  TransactionReason,
+} from "@voidhash/app-store-server-sdk";
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type Project as DbProject,
+  ProviderEnvironment,
+  type ProviderEnvironmentValue,
+} from "@voidhash/db";
+import { Effect, Layer, Option, Schema, Context } from "effect";
+
+import { AppStorePaymentProviderServiceError } from "./errors.ts";
+import { classifyAppStoreRevocation } from "./helpers.ts";
+import { AppStorePaymentProvider } from "./payment-provider.ts";
+import { AppStorePaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+
+/**
+ * Why we reconciled. Drives logging/telemetry; logic doesn't branch on it.
+ */
+export type ReconciliationReason = "first_seen" | "admin_repair" | "install_backfill";
+
+export interface ReconciliationReport {
+  readonly transactionsProcessed: number;
+  readonly statusesProcessed: number;
+  readonly eventsApplied: number;
+  readonly eventsSkippedIdempotent: number;
+  readonly eventsFailed: number;
+}
+
+export interface ReconcileOriginalTransactionInput {
+  readonly paymentProviderConfigurationId: string;
+  readonly originalTransactionId: string;
+  readonly triggeredAt: Date;
+  readonly reason: ReconciliationReason;
+}
+
+export class AppStoreReconciliationServiceError extends Schema.TaggedErrorClass<AppStoreReconciliationServiceError>(
+  "AppStoreReconciliationServiceError",
+)("AppStoreReconciliationServiceError", { cause: Schema.String }) {}
+
+export class AppStoreReconciliationConfigurationNotFoundError extends Schema.TaggedErrorClass<AppStoreReconciliationConfigurationNotFoundError>(
+  "AppStoreReconciliationConfigurationNotFoundError",
+)("AppStoreReconciliationConfigurationNotFoundError", {
+  paymentProviderConfigurationId: Schema.String,
+}) {}
+
+const make = Effect.gen(function* () {
+  const queries = yield* AppStorePaymentProviderServiceQueries;
+  const appStorePaymentProvider = yield* AppStorePaymentProvider;
+
+  /**
+   * Routes a decoded historical transaction to the matching record method.
+   * Mirrors the webhook handler's dispatch decisions; lives here separately
+   * so reconciliation doesn't depend on the webhook handler's HTTP-shaped
+   * `acceptServerNotification` API.
+   */
+  const _replayHistoricalTransaction = Effect.fn("_replayHistoricalTransaction")(function* (input: {
+    readonly configuration: DbPaymentProviderConfiguration;
+    readonly project: DbProject;
+    readonly providerEnvironment: ProviderEnvironmentValue;
+    readonly receivedAt: Date;
+    readonly decodedTransaction: Parameters<
+      typeof appStorePaymentProvider.recordPurchase
+    >[0]["decodedTransaction"];
+  }) {
+    const recordInput = {
+      configuration: input.configuration,
+      decodedRenewalInfo: Option.none<JWSRenewalInfoDecodedPayload>(),
+      decodedTransaction: input.decodedTransaction,
+      notificationUUID: undefined,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      receivedAt: input.receivedAt,
+      source: "reconciliation" as const,
+      subtype: undefined,
+    };
+    const revocationDate = Option.getOrUndefined(input.decodedTransaction.revocationDate);
+    if (revocationDate !== undefined) {
+      /**
+       * Apple uses `revocationDate` for both refunds and Family Sharing
+       * revokes. They have opposite revenue semantics, so we discriminate
+       * via `revocationType` (with an `inAppOwnershipType` fallback for
+       * pre-`revocationType` history) before dispatching.
+       */
+      const kind = classifyAppStoreRevocation(input.decodedTransaction);
+      if (kind === "family_revoke") {
+        return yield* appStorePaymentProvider.recordEntitlementRevoked(recordInput);
+      }
+      return yield* appStorePaymentProvider.recordRefund(recordInput);
+    }
+    if (Option.getOrUndefined(input.decodedTransaction.type) === ProductType.AUTO_RENEWABLE) {
+      const reason = Option.getOrUndefined(input.decodedTransaction.transactionReason);
+      if (reason === TransactionReason.RENEWAL) {
+        return yield* appStorePaymentProvider.recordSubscriptionRenewed(recordInput);
+      }
+      return yield* appStorePaymentProvider.recordPurchase(recordInput);
+    }
+    return yield* appStorePaymentProvider.recordPurchase(recordInput);
+  });
+
+  /**
+   * Routes a subscription `lastTransactions` status snapshot to the matching
+   * record method. The decoded transaction has been verified+decoded by the
+   * caller; the `status` integer drives the dispatch.
+   */
+  const _replayStatusSnapshot = Effect.fn("_replayStatusSnapshot")(function* (input: {
+    readonly configuration: DbPaymentProviderConfiguration;
+    readonly project: DbProject;
+    readonly providerEnvironment: ProviderEnvironmentValue;
+    readonly receivedAt: Date;
+    readonly status: number;
+    readonly decodedTransaction: Parameters<
+      typeof appStorePaymentProvider.recordPurchase
+    >[0]["decodedTransaction"];
+    readonly decodedRenewalInfo: Option.Option<JWSRenewalInfoDecodedPayload>;
+  }) {
+    const recordInput = {
+      configuration: input.configuration,
+      decodedRenewalInfo: input.decodedRenewalInfo,
+      decodedTransaction: input.decodedTransaction,
+      notificationUUID: undefined,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      receivedAt: input.receivedAt,
+      source: "reconciliation" as const,
+      subtype: undefined,
+    };
+    if (input.status === Status.EXPIRED) {
+      return yield* appStorePaymentProvider.recordSubscriptionExpired(recordInput);
+    }
+    if (input.status === Status.REVOKED) {
+      return yield* appStorePaymentProvider.recordEntitlementRevoked(recordInput);
+    }
+    if (input.status === Status.BILLING_RETRY || input.status === Status.BILLING_GRACE_PERIOD) {
+      return yield* appStorePaymentProvider.recordBillingRetry(recordInput);
+    }
+    // Status === ACTIVE: the transaction history walk has already captured
+    // every renewal, so nothing to add at the status layer. Auto-renew-off
+    // would be a cancel, but the decoded transaction alone doesn't expose
+    // that — it lives on the renewal info (which would need a separate
+    // `decodeSignedRenewalInfo` call). Out of scope for the on-demand
+    // reconciliation path; the live webhook covers it.
+    return undefined;
+  });
+
+  /**
+   * Reconciles a single `originalTransactionId` by walking the full transaction
+   * history (ascending, including revoked) and the current subscription
+   * status snapshot, replaying each through the existing `record*` methods.
+   * Idempotent against any live events already processed for the same logical
+   * transactions.
+   */
+  const reconcileOriginalTransaction = Effect.fn("reconcileOriginalTransaction")(function* (
+    input: ReconcileOriginalTransactionInput,
+  ) {
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.transaction.original_id",
+      input.originalTransactionId,
+    );
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.payment_provider.configuration_id",
+      input.paymentProviderConfigurationId,
+    );
+    yield* Effect.annotateCurrentSpan({
+      "app_store.reconciliation_reason": input.reason,
+    });
+    const configuration = yield* queries.findPaymentProviderConfigurationById(
+      input.paymentProviderConfigurationId,
+    );
+    if (!configuration) {
+      return yield* new AppStoreReconciliationConfigurationNotFoundError({
+        paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+      });
+    }
+    const project = yield* queries.findProjectById(configuration.projectId);
+    if (!project) {
+      return yield* new AppStorePaymentProviderServiceError({
+        cause: `Project ${configuration.projectId} not found for configuration ${configuration.id}`,
+      });
+    }
+    yield* Effect.annotateCurrentSpan("voidhash.project.id", project.id);
+    yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", configuration.providerId);
+    const sdkContext =
+      yield* appStorePaymentProvider.buildSdkContextFromConfiguration(configuration);
+
+    yield* Effect.logInfo("App Store reconciliation: starting", {
+      originalTransactionId: input.originalTransactionId,
+      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+      reason: input.reason,
+    });
+
+    const report = {
+      eventsApplied: 0,
+      eventsFailed: 0,
+      eventsSkippedIdempotent: 0,
+      statusesProcessed: 0,
+      transactionsProcessed: 0,
+    };
+
+    /**
+     * Paginate through the full transaction history. Apple's
+     * `hasMore=true` continues the walk via `revision`; we follow the chain
+     * until the server signals end-of-stream. ASCENDING + `revoked: true`
+     * means we see every transaction in original chronological order
+     * (including refunded / revoked ones) — that's what reconciliation needs
+     * to converge on the same state the live event stream would have built.
+     */
+    let revision = Option.none<string>();
+    let hasMore = true;
+    let resolvedEnvironment: ProviderEnvironmentValue = ProviderEnvironment.Production;
+
+    while (hasMore) {
+      const { environment, historyResponse } =
+        yield* sdkContext.getTransactionHistoryWithEnvironmentFallback(
+          input.originalTransactionId,
+          revision,
+          {
+            endDate: Option.none(),
+            inAppOwnershipType: Option.none(),
+            productIds: Option.none(),
+            productTypes: Option.none(),
+            revoked: Option.some(true),
+            sort: Option.some(Order.ASCENDING),
+            startDate: Option.none(),
+            subscriptionGroupIdentifiers: Option.none(),
+          },
+          Option.none<
+            (typeof GetTransactionHistoryVersion)[keyof typeof GetTransactionHistoryVersion]
+          >(),
+        );
+      resolvedEnvironment =
+        environment === "Sandbox" ? ProviderEnvironment.Sandbox : ProviderEnvironment.Production;
+
+      const signedTransactions = Option.getOrElse(
+        historyResponse.signedTransactions,
+        () => [] as ReadonlyArray<string>,
+      );
+      for (const signed of signedTransactions) {
+        const decoded = yield* sdkContext
+          .decodeSignedTransaction(signed, environment)
+          .pipe(Effect.option);
+        if (Option.isNone(decoded)) {
+          report.eventsFailed++;
+          continue;
+        }
+        const outcome = yield* _replayHistoricalTransaction({
+          configuration,
+          decodedTransaction: decoded.value,
+          project,
+          providerEnvironment: resolvedEnvironment,
+          receivedAt: input.triggeredAt,
+        }).pipe(
+          Effect.match({
+            onFailure: (error) => ({
+              ok: false as const,
+              error: String(error),
+            }),
+            onSuccess: (result) => ({
+              idempotent: result.idempotent,
+              ok: true as const,
+            }),
+          }),
+        );
+        report.transactionsProcessed++;
+        if (outcome.ok) {
+          if (outcome.idempotent) {
+            report.eventsSkippedIdempotent++;
+          } else {
+            report.eventsApplied++;
+          }
+        } else {
+          report.eventsFailed++;
+          yield* Effect.logWarning("App Store reconciliation: history transaction replay failed", {
+            error: outcome.error,
+            originalTransactionId: input.originalTransactionId,
+          });
+        }
+      }
+      hasMore = Option.getOrElse(historyResponse.hasMore, () => false);
+      revision = historyResponse.revision;
+    }
+
+    /**
+     * Subscription status snapshot — the authoritative source for the
+     * current `Status` (ACTIVE / EXPIRED / BILLING_RETRY / GRACE / REVOKED)
+     * and for AUTO_RENEW state. The transaction history walk above doesn't
+     * surface these (status is a separate Apple resource).
+     */
+    const { environment: statusEnvironment, statusResponse } =
+      yield* sdkContext.getAllSubscriptionStatusesWithEnvironmentFallback(
+        input.originalTransactionId,
+        Option.none<Status[]>(),
+      );
+    const statusProviderEnvironment =
+      statusEnvironment === "Sandbox"
+        ? ProviderEnvironment.Sandbox
+        : ProviderEnvironment.Production;
+
+    const subscriptionGroups = Option.getOrElse(statusResponse.data, () => []);
+    for (const group of subscriptionGroups) {
+      const lastTransactions = Option.getOrElse(group.lastTransactions, () => []);
+      for (const item of lastTransactions) {
+        if (Option.isNone(item.status)) continue;
+        const status = item.status.value;
+        if (Option.isNone(item.signedTransactionInfo)) continue;
+        const signedTransactionInfo = item.signedTransactionInfo.value;
+        const decoded = yield* sdkContext
+          .decodeSignedTransaction(signedTransactionInfo, statusEnvironment)
+          .pipe(Effect.option);
+        if (Option.isNone(decoded)) {
+          report.eventsFailed++;
+          continue;
+        }
+        /**
+         * Best-effort decode of the per-status `signedRenewalInfo` so the
+         * reconciliation path can populate grace-period / price-increase
+         * fields that live only on renewal info. A failed decode is logged
+         * and replaced with `Option.none()` so the snapshot replay still
+         * progresses.
+         */
+        const decodedRenewalInfo = Option.isSome(item.signedRenewalInfo)
+          ? yield* sdkContext
+              .decodeSignedRenewalInfo(item.signedRenewalInfo.value, statusEnvironment)
+              .pipe(
+                Effect.map(Option.some),
+                Effect.catch((error: unknown) =>
+                  Effect.logWarning(
+                    "App Store reconciliation: failed to decode signedRenewalInfo",
+                    {
+                      cause: error,
+                      originalTransactionId: input.originalTransactionId,
+                    },
+                  ).pipe(Effect.as(Option.none<JWSRenewalInfoDecodedPayload>())),
+                ),
+              )
+          : Option.none<JWSRenewalInfoDecodedPayload>();
+        const outcome = yield* _replayStatusSnapshot({
+          configuration,
+          decodedRenewalInfo,
+          decodedTransaction: decoded.value,
+          project,
+          providerEnvironment: statusProviderEnvironment,
+          receivedAt: input.triggeredAt,
+          status,
+        }).pipe(
+          Effect.match({
+            onFailure: (error) => ({
+              ok: false as const,
+              error: String(error),
+            }),
+            onSuccess: (result) => {
+              // ACTIVE status is a no-op (the history walk covers renewals)
+              // — _replayStatusSnapshot returns undefined for it, which we
+              // count as already-up-to-date for telemetry purposes.
+              const resultObj = result as { idempotent?: boolean } | null | undefined;
+              const idempotent = resultObj?.idempotent ?? true;
+              return { idempotent, ok: true as const };
+            },
+          }),
+        );
+        report.statusesProcessed++;
+        if (outcome.ok) {
+          if (outcome.idempotent) {
+            report.eventsSkippedIdempotent++;
+          } else {
+            report.eventsApplied++;
+          }
+        } else {
+          report.eventsFailed++;
+          yield* Effect.logWarning("App Store reconciliation: status snapshot replay failed", {
+            error: outcome.error,
+            originalTransactionId: input.originalTransactionId,
+          });
+        }
+      }
+      /**
+       * `AutoRenewStatus` is decoded above when `signedRenewalInfo` is
+       * present (Option.some(...) in `decodedRenewalInfo`). Mapping it
+       * onto cancel / resume mutations would require new record paths in
+       * `_replayStatusSnapshot`; the live `DID_CHANGE_RENEWAL_STATUS`
+       * webhook still covers it today.
+       */
+    }
+
+    yield* Effect.logInfo("App Store reconciliation: complete", {
+      ...report,
+      originalTransactionId: input.originalTransactionId,
+      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+    });
+
+    const finalReport: ReconciliationReport = report;
+    yield* Effect.annotateCurrentSpan({
+      "app_store.applied_count": finalReport.eventsApplied,
+      "app_store.failed_count": finalReport.eventsFailed,
+    });
+    return finalReport;
+  });
+
+  return {
+    reconcileOriginalTransaction,
+  } as const;
+});
+
+export class AppStoreReconciliationService extends Context.Service<AppStoreReconciliationService>()(
+  "core/AppStoreReconciliationService",
+  { make },
+) {
+  static readonly layer = Layer.effect(AppStoreReconciliationService)(
+    AppStoreReconciliationService.make,
+  ).pipe(Layer.provideMerge(AppStorePaymentProviderServiceQueries.layer));
+}
diff --git a/packages/core/src/services/paymentProviders/appStore/app-store-webhook-handler-service.ts b/packages/core/src/services/paymentProviders/appStore/app-store-webhook-handler-service.ts
new file mode 100644
index 000000000..3a7aa573a
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/app-store-webhook-handler-service.ts
@@ -0,0 +1,867 @@
+import {
+  Environment,
+  type JWSRenewalInfoDecodedPayload,
+  NotificationTypeV2,
+} from "@voidhash/app-store-server-sdk";
+import { generateId } from "../../../utils/index.ts";
+import { ProviderEnvironment } from "@voidhash/db";
+import { Effect, Layer, Match, Option, Predicate, Schema, Context } from "effect";
+
+import {
+  AppStorePaymentProviderConfigurationNotFoundError,
+  AppStorePaymentProviderProductNotMappedError,
+  AppStorePaymentProviderProjectNotFoundError,
+  AppStorePaymentProviderServiceError,
+} from "./errors.ts";
+import { AppStorePaymentProvider, globalConfigurationSchema } from "./payment-provider.ts";
+import { AppStorePaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+
+const truncateResultNote = (note: string): string => note.slice(0, 500);
+
+const optionSpanAttribute = <A>(
+  value: Option.Option<A>,
+  map: (value: A) => unknown = (some) => some,
+): unknown | undefined => (Option.isSome(value) ? map(value.value) : undefined);
+
+const hasErrorTag = <TTag extends string>(
+  error: unknown,
+  tag: TTag,
+): error is { readonly _tag: TTag } =>
+  typeof error === "object" &&
+  error !== null &&
+  "_tag" in error &&
+  (error as { readonly _tag?: unknown })._tag === tag;
+
+const verificationStatus = (error: unknown): string =>
+  typeof error === "object" && error !== null && "status" in error
+    ? String((error as { readonly status: unknown }).status)
+    : "unknown";
+
+/** Tags `handled` collapses into a terminal record-failure ledger row. */
+const TERMINAL_RECORD_FAILURE_TAGS = new Set<string>([
+  "AppStorePaymentProviderTransactionMissingPersonIdentifierError",
+  "AppStorePurchaseProcessingIdempotencyKeyDerivationError",
+  "InvalidISO4217CurrencyCodeError",
+]);
+
+const isTerminalRecordFailure = (error: unknown): boolean =>
+  Predicate.hasProperty(error, "_tag") &&
+  typeof error._tag === "string" &&
+  TERMINAL_RECORD_FAILURE_TAGS.has(error._tag);
+
+/**
+ * Builds the terminal-failure ledger note for the record errors `handled`
+ * collapses. Reads tag-specific fields defensively (the catch narrows by
+ * predicate only, so the concrete field set isn't statically known) so no cast
+ * is needed.
+ */
+const describeRecordFailure = (error: unknown): string => {
+  const tag = Predicate.hasProperty(error, "_tag") ? error._tag : undefined;
+  if (tag === "AppStorePaymentProviderTransactionMissingPersonIdentifierError") {
+    const transactionId = Predicate.hasProperty(error, "providerTransactionId")
+      ? String(error.providerTransactionId)
+      : "unknown";
+    return `missing person identifier for App Store transaction ${transactionId}`;
+  }
+  if (tag === "AppStorePurchaseProcessingIdempotencyKeyDerivationError") {
+    const eventType = Predicate.hasProperty(error, "eventType")
+      ? String(error.eventType)
+      : "unknown";
+    const missingField = Predicate.hasProperty(error, "missingField")
+      ? String(error.missingField)
+      : "unknown";
+    const transaction =
+      Predicate.hasProperty(error, "providerTransactionId") && error.providerTransactionId
+        ? ` (transaction ${String(error.providerTransactionId)})`
+        : "";
+    return `idempotency key derivation failed for ${eventType}: missing ${missingField}${transaction}`;
+  }
+  return `invalid ISO 4217 currency code: ${String(error)}`;
+};
+
+/**
+ * Result returned to the webhook ingress. `accepted` reflects whether we
+ * verified Apple's signature and parsed the payload (i.e. whether Apple should
+ * stop retrying); `handled` reflects whether we actually mutated purchase
+ * state beyond acknowledging receipt.
+ */
+type AcceptServerNotificationResult = {
+  readonly accepted: true;
+  readonly handled: boolean;
+  readonly notificationType: string | undefined;
+  readonly notificationUUID: string | undefined;
+  readonly subtype: string | undefined;
+};
+
+export class AppStoreWebhookHandlerService extends Context.Service<AppStoreWebhookHandlerService>()(
+  "AppStoreWebhookHandlerService",
+  {
+    make: Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const appStorePaymentProvider = yield* AppStorePaymentProvider;
+
+      /**
+       * Entry point invoked by the webhook HTTP route. Verifies Apple's
+       * signature, decodes the signed transaction once, and dispatches the
+       * notification to the matching `record*` method on
+       * `AppStorePaymentProvider`. Branches without a downstream
+       * purchase-processing equivalent ack-without-handling so Apple stops
+       * retrying.
+       */
+      const acceptServerNotification = Effect.fn("acceptServerNotification")(
+        function* (input: {
+          readonly paymentProviderConfigurationId: string;
+          readonly signedPayload: string;
+          readonly receivedAt: Date;
+          /**
+           * Set to `true` by the SDK-confirmation replay activity so the outer
+           * "park until SDK confirms" gate is bypassed. Live (un-parked)
+           * deliveries leave it unset; the gate only ever runs on first
+           * arrival. Without this flag, replayed payloads could be re-parked
+           * if the gate's `hasAnyAppStoreRecordForOriginalTransactionId`
+           * lookup hadn't seen the SDK write yet (replication / read-after-
+           * write race), creating a self-perpetuating park loop.
+           */
+          readonly isReplay?: boolean;
+        }) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          const configuration = yield* queries.findPaymentProviderConfigurationById(
+            input.paymentProviderConfigurationId,
+          );
+          if (!configuration) {
+            return yield* new AppStorePaymentProviderConfigurationNotFoundError({
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            });
+          }
+
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.id",
+            configuration.providerId,
+          );
+          const project = yield* queries.findProjectById(configuration.projectId);
+          if (!project) {
+            return yield* new AppStorePaymentProviderProjectNotFoundError({
+              projectId: configuration.projectId,
+            });
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", project.id);
+
+          const sdkContext =
+            yield* appStorePaymentProvider.buildSdkContextFromConfiguration(configuration);
+
+          /**
+           * Decode the configuration once at the entry point so the per-tenant
+           * `trackNewPurchasesFromAppleServerNotifications` flag is available
+           * for the SUBSCRIBED / ONE_TIME_CHARGE gating below.
+           */
+          const parsedGlobalConfiguration = yield* Schema.decodeUnknownEffect(
+            globalConfigurationSchema,
+          )(configuration.configuration);
+
+          const notificationDecodeResult = yield* sdkContext
+            .decodeNotification(input.signedPayload)
+            .pipe(
+              Effect.match({
+                onFailure: (error) => ({ error, ok: false as const }),
+                onSuccess: (value) => ({ ok: true as const, value }),
+              }),
+            );
+
+          if (!notificationDecodeResult.ok) {
+            const error = notificationDecodeResult.error;
+            if (hasErrorTag(error, "VerificationError")) {
+              yield* Effect.logWarning(
+                "App Store notification rejected as terminal verification failure",
+                {
+                  paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                  status: verificationStatus(error),
+                },
+              );
+              return {
+                accepted: true,
+                handled: false,
+                notificationType: undefined,
+                notificationUUID: undefined,
+                subtype: undefined,
+              };
+            }
+            return yield* Effect.fail(error);
+          }
+
+          const notification = notificationDecodeResult.value;
+
+          const notificationType = Option.getOrUndefined(notification.notificationType);
+          const subtype = Option.getOrUndefined(notification.subtype);
+          const notificationUUID = Option.getOrUndefined(notification.notificationUUID);
+          if (notificationType) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.payment_provider.event_type",
+              notificationType,
+            );
+          }
+          if (notificationUUID) {
+            yield* Effect.annotateCurrentSpan("voidhash.webhook.id", notificationUUID);
+          }
+
+          const ack = (handled: boolean): AcceptServerNotificationResult => ({
+            accepted: true,
+            handled,
+            notificationType,
+            notificationUUID,
+            subtype,
+          });
+
+          let terminalLedgerResult: "failed" | undefined;
+          let terminalLedgerResultNote: string | null = null;
+
+          const markTerminalRecordFailure = (reason: string) =>
+            Effect.gen(function* () {
+              terminalLedgerResult = "failed";
+              terminalLedgerResultNote = truncateResultNote(reason);
+              yield* Effect.annotateCurrentSpan({
+                "app_store.webhook_result": "failed",
+              });
+              yield* Effect.logWarning("App Store notification record failed permanently", {
+                notificationType,
+                notificationUUID,
+                paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                resultNote: terminalLedgerResultNote,
+                subtype,
+              });
+              return ack(false);
+            });
+
+          const writeTerminalFailure = (reason: string) =>
+            Effect.gen(function* () {
+              const resultNote = truncateResultNote(reason);
+              yield* Effect.annotateCurrentSpan({
+                "app_store.webhook_result": "failed",
+              });
+              yield* Effect.logWarning("App Store notification failed permanently", {
+                notificationType,
+                notificationUUID,
+                paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                resultNote,
+                subtype,
+              });
+              if (notificationUUID && notificationType) {
+                yield* queries.insertNotificationProcessedIfAbsent({
+                  id: generateId("paymentProviderNotification"),
+                  notificationSubtype: subtype ?? null,
+                  notificationType,
+                  notificationUuid: notificationUUID,
+                  parkedRawPayload: null,
+                  parkedUntilProviderProductKey: null,
+                  paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                  providerId: "apple-app-store",
+                  result: "failed",
+                  resultNote,
+                  source: "webhook",
+                });
+              }
+            });
+
+          if (!notificationType) {
+            return ack(false);
+          }
+
+          const notificationData = Option.getOrUndefined(notification.data);
+          const signedTransactionInfo = notificationData
+            ? Option.getOrUndefined(notificationData.signedTransactionInfo)
+            : undefined;
+
+          /**
+           * Notification kinds that carry purchase state require a signed
+           * transaction; only test pings legitimately arrive without one.
+           */
+          if (!signedTransactionInfo) {
+            if (notificationType === NotificationTypeV2.TEST) {
+              yield* Effect.annotateCurrentSpan({
+                "app_store.webhook_result": "test_without_transaction",
+              });
+              return ack(true);
+            }
+            yield* writeTerminalFailure("signedTransactionInfo missing from non-TEST notification");
+            return ack(false);
+          }
+
+          const notificationEnvironment = notificationData
+            ? Option.getOrUndefined(notificationData.environment)
+            : undefined;
+          const transactionEnvironment =
+            notificationEnvironment === Environment.SANDBOX
+              ? Environment.SANDBOX
+              : Environment.PRODUCTION;
+          const providerEnvironment =
+            transactionEnvironment === Environment.SANDBOX
+              ? ProviderEnvironment.Sandbox
+              : ProviderEnvironment.Production;
+
+          const decodedTransactionResult = yield* sdkContext
+            .decodeSignedTransaction(signedTransactionInfo, transactionEnvironment)
+            .pipe(
+              Effect.match({
+                onFailure: (error) => ({ error, ok: false as const }),
+                onSuccess: (value) => ({ ok: true as const, value }),
+              }),
+            );
+
+          if (!decodedTransactionResult.ok) {
+            const error = decodedTransactionResult.error;
+            if (hasErrorTag(error, "VerificationError")) {
+              yield* writeTerminalFailure(
+                `signedTransactionInfo verification failed (${verificationStatus(error)})`,
+              );
+              return ack(false);
+            }
+            return yield* Effect.fail(error);
+          }
+
+          const decodedTransaction = decodedTransactionResult.value;
+          const originalTransactionIdAttr = optionSpanAttribute(
+            decodedTransaction.originalTransactionId,
+          );
+          if (originalTransactionIdAttr !== undefined) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.transaction.original_id",
+              originalTransactionIdAttr,
+            );
+          }
+          const providerProductKeyAttr = optionSpanAttribute(decodedTransaction.productId);
+          if (providerProductKeyAttr !== undefined) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.payment_provider.provider_product_key",
+              providerProductKeyAttr,
+            );
+          }
+          const transactionIdAttr = optionSpanAttribute(decodedTransaction.transactionId);
+          if (transactionIdAttr !== undefined) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.transaction.provider_transaction_id",
+              transactionIdAttr,
+            );
+          }
+
+          /**
+           * `signedRenewalInfo` is optional and only present on auto-renewable
+           * subscription notifications. Decode best-effort — if verification
+           * fails we log and continue without it rather than dropping the
+           * whole notification, since renewal info is supplementary to the
+           * authoritative `signedTransactionInfo` decoded above.
+           */
+          const signedRenewalInfo = notificationData
+            ? Option.getOrUndefined(notificationData.signedRenewalInfo)
+            : undefined;
+          const decodedRenewalInfo = signedRenewalInfo
+            ? yield* sdkContext
+                .decodeSignedRenewalInfo(signedRenewalInfo, transactionEnvironment)
+                .pipe(
+                  Effect.map(Option.some),
+                  Effect.catch((error: unknown) =>
+                    Effect.logWarning("Failed to decode App Store signedRenewalInfo", {
+                      cause: error,
+                      notificationType,
+                      notificationUUID,
+                    }).pipe(Effect.as(Option.none<JWSRenewalInfoDecodedPayload>())),
+                  ),
+                )
+            : Option.none<JWSRenewalInfoDecodedPayload>();
+
+          /**
+           * Per-tenant deferred-replay gate.
+           *
+           * When `trackNewPurchasesFromAppleServerNotifications` is `false`,
+           * webhooks must not create purchases on their own — the tenant
+           * tracks only the SDK-confirmed subset. To avoid losing notifications
+           * that race ahead of the SDK call, we park them keyed on
+           * `originalTransactionId` and replay them in arrival order once
+           * `processSdkTransaction` succeeds for the series (see
+           * `AppStoreReplayParkedSdkNotificationsWorkflow`).
+           *
+           * Applies to ALL notification kinds (initial purchase + lifecycle):
+           * a `DID_RENEW` or `EXPIRED` that arrives before SDK confirmation
+           * has no `subscription` row to update, so deferring it is the only
+           * way to keep state consistent.
+           *
+           * Skipped when `isReplay` is set — the replay activity calls us
+           * back with the stored payload, and re-parking it would loop.
+           */
+          const deferReplay =
+            !parsedGlobalConfiguration.trackNewPurchasesFromAppleServerNotifications;
+          const originalTransactionId = Option.getOrUndefined(
+            decodedTransaction.originalTransactionId,
+          );
+          if (!input.isReplay && deferReplay && originalTransactionId && notificationUUID) {
+            const sdkConfirmed = yield* queries.hasAnyAppStoreRecordForOriginalTransactionId({
+              originalTransactionId,
+            });
+            if (!sdkConfirmed) {
+              yield* Effect.annotateCurrentSpan({
+                "app_store.webhook_result": "parked_pending_sdk_confirmation",
+              });
+              yield* Effect.logInfo("App Store notification parked: SDK confirmation pending", {
+                notificationType,
+                notificationUUID,
+                originalTransactionId,
+                paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              });
+              yield* queries.insertNotificationProcessedIfAbsent({
+                id: generateId("paymentProviderNotification"),
+                notificationSubtype: subtype ?? null,
+                notificationType,
+                notificationUuid: notificationUUID,
+                parkedRawPayload: input.signedPayload,
+                parkedUntilOriginalTransactionId: originalTransactionId,
+                parkedUntilProviderProductKey: null,
+                paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                providerId: "apple-app-store",
+                result: "parked_pending_sdk_confirmation",
+                resultNote: null,
+                source: "webhook",
+              });
+              return ack(true);
+            }
+          }
+
+          const recordInput = {
+            configuration,
+            decodedRenewalInfo,
+            decodedTransaction,
+            notificationUUID,
+            project,
+            providerEnvironment,
+            receivedAt: input.receivedAt,
+            source: "webhook" as const,
+            subtype,
+          };
+
+          /**
+           * Wraps a record-method call to (a) coerce the success into
+           * `ack(true)` and (b) intercept `AppStorePaymentProviderProductNotMappedError`
+           * — when the customer hasn't mapped this product yet, we park the
+           * raw signed payload in the notification ledger so the
+           * replay-on-product-creation task can re-process it later, then ack
+           * so Apple stops retrying. Closes over `notificationType`,
+           * `notificationUUID`, `subtype`, and `input.signedPayload` from the
+           * enclosing scope. Generic in the record method's success/error/
+           * requirements so it works with every `record*` shape uniformly.
+           */
+          const handled = <A, E, R>(
+            recordEffect: Effect.Effect<A, E | AppStorePaymentProviderProductNotMappedError, R>,
+          ) =>
+            recordEffect.pipe(
+              Effect.as(ack(true)),
+              // `handled` is generic over the record method's error channel `E`,
+              // so `catchTag`/`catchTags` can't prove these tags are members of
+              // it (and would need an `any` widening that poisons every caller's
+              // inferred `R` to `unknown`). Narrow with tag guards instead — same
+              // runtime behaviour, precise types.
+              Effect.catchIf(
+                (error): error is AppStorePaymentProviderProductNotMappedError =>
+                  Predicate.hasProperty(error, "_tag") &&
+                  error._tag === "AppStorePaymentProviderProductNotMappedError",
+                (error) =>
+                  Effect.gen(function* () {
+                    yield* Effect.annotateCurrentSpan(
+                      "voidhash.payment_provider.provider_product_key",
+                      error.providerProductKey,
+                    );
+                    yield* Effect.annotateCurrentSpan({
+                      "app_store.webhook_result": "parked_pending_product_mapping",
+                    });
+                    yield* Effect.logInfo("App Store notification parked: product not yet mapped", {
+                      notificationType,
+                      notificationUUID,
+                      paymentProviderConfigurationId: error.paymentProviderConfigurationId,
+                      providerProductKey: error.providerProductKey,
+                    });
+                    if (notificationUUID) {
+                      yield* queries.insertNotificationProcessedIfAbsent({
+                        id: generateId("paymentProviderNotification"),
+                        notificationSubtype: subtype ?? null,
+                        notificationType,
+                        notificationUuid: notificationUUID,
+                        parkedRawPayload: input.signedPayload,
+                        parkedUntilProviderProductKey: error.providerProductKey,
+                        paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                        providerId: "apple-app-store",
+                        result: "parked_pending_product_mapping",
+                        resultNote: `product key ${error.providerProductKey} not mapped at notification time`,
+                        source: "webhook",
+                      });
+                    }
+                    return ack(true);
+                  }),
+              ),
+              Effect.catchIf(isTerminalRecordFailure, (error) =>
+                markTerminalRecordFailure(describeRecordFailure(error)),
+              ),
+            );
+
+          /**
+           * The per-tenant kill switch for new-purchase webhooks now lives in
+           * the outer `deferReplay` gate above — when it parks, control never
+           * reaches this match. Lifecycle events (renew, expire, refund,
+           * etc.) follow the same gate: they too are parked until the SDK
+           * confirms the series.
+           */
+          const matchResult = (yield* Match.value(notificationType).pipe(
+            /**
+             * New subscription (subtypes `INITIAL_BUY`, `RESUBSCRIBE`) or a
+             * one-time charge / non-renewing purchase.
+             */
+            Match.when(NotificationTypeV2.SUBSCRIBED, () =>
+              handled(appStorePaymentProvider.recordPurchase(recordInput)),
+            ),
+            Match.when(NotificationTypeV2.ONE_TIME_CHARGE, () =>
+              handled(appStorePaymentProvider.recordPurchase(recordInput)),
+            ),
+
+            /** Auto-renewable subscription renewed (incl. `BILLING_RECOVERY`). */
+            Match.when(NotificationTypeV2.DID_RENEW, () =>
+              handled(appStorePaymentProvider.recordSubscriptionRenewed(recordInput)),
+            ),
+
+            /** Subscription expired or grace period elapsed without recovery. */
+            Match.when(NotificationTypeV2.EXPIRED, () =>
+              handled(appStorePaymentProvider.recordSubscriptionExpired(recordInput)),
+            ),
+            Match.when(NotificationTypeV2.GRACE_PERIOD_EXPIRED, () =>
+              handled(appStorePaymentProvider.recordSubscriptionExpired(recordInput)),
+            ),
+
+            /**
+             * User toggled auto-renew. AUTO_RENEW_DISABLED → cancel-at-period-end;
+             * AUTO_RENEW_ENABLED → resume (clear cancel flags + re-sync perks).
+             */
+            Match.when(NotificationTypeV2.DID_CHANGE_RENEWAL_STATUS, () => {
+              if (subtype === "AUTO_RENEW_DISABLED") {
+                return handled(
+                  appStorePaymentProvider.recordSubscriptionCanceled({
+                    ...recordInput,
+                    cancelAtPeriodEnd: true,
+                  }),
+                );
+              }
+              if (subtype === "AUTO_RENEW_ENABLED") {
+                return handled(appStorePaymentProvider.recordAutoRenewResumed(recordInput));
+              }
+              return Effect.succeed(ack(false));
+            }),
+
+            /** Apple refunded a transaction. */
+            Match.when(NotificationTypeV2.REFUND, () =>
+              handled(appStorePaymentProvider.recordRefund(recordInput)),
+            ),
+
+            /** Family Sharing entitlement revoked. */
+            Match.when(NotificationTypeV2.REVOKE, () =>
+              handled(appStorePaymentProvider.recordEntitlementRevoked(recordInput)),
+            ),
+
+            /** Apple reversed a prior refund — re-grant the entitlement. */
+            Match.when(NotificationTypeV2.REFUND_REVERSED, () =>
+              handled(appStorePaymentProvider.recordRefundReversed(recordInput)),
+            ),
+
+            /** Subscription entered the billing-retry loop. */
+            Match.when(NotificationTypeV2.DID_FAIL_TO_RENEW, () =>
+              handled(appStorePaymentProvider.recordBillingRetry(recordInput)),
+            ),
+
+            /** Service-issued period extension. */
+            Match.when(NotificationTypeV2.RENEWAL_EXTENDED, () =>
+              handled(appStorePaymentProvider.recordSubscriptionExtended(recordInput)),
+            ),
+            Match.when(NotificationTypeV2.RENEWAL_EXTENSION, () =>
+              handled(appStorePaymentProvider.recordSubscriptionExtended(recordInput)),
+            ),
+
+            /** Customer changed the product for the next billing cycle. */
+            Match.when(NotificationTypeV2.DID_CHANGE_RENEWAL_PREF, () =>
+              handled(appStorePaymentProvider.recordRenewalPreferenceChange(recordInput)),
+            ),
+
+            /** Promotional / introductory / win-back offer redeemed. */
+            Match.when(NotificationTypeV2.OFFER_REDEEMED, () =>
+              handled(appStorePaymentProvider.recordOfferRedeemed(recordInput)),
+            ),
+
+            /** Apple has scheduled a price change for the next renewal. */
+            Match.when(NotificationTypeV2.PRICE_INCREASE, () =>
+              handled(appStorePaymentProvider.recordPriceIncrease(recordInput)),
+            ),
+
+            /**
+             * Informational notifications — ingested into the per-notification
+             * ledger (written below the match) for audit, but no purchase
+             * state changes. `CONSUMPTION_REQUEST` requires a write-back call
+             * (`sendConsumptionInformation`) which is out of scope for this
+             * phase; `EXTERNAL_PURCHASE_TOKEN` requires token-reporting which
+             * is also out of scope.
+             */
+            /**
+             * Informational notifications collapsed into one branch. They
+             * carry no purchase state — the per-notification ledger row
+             * (written below the match) is the durable record. Note: Apple
+             * does not currently emit a `METADATA_UPDATE` notification, but
+             * if added in the future it can land here without changes.
+             */
+            Match.whenOr(
+              NotificationTypeV2.REFUND_DECLINED,
+              NotificationTypeV2.RESCIND_CONSENT,
+              NotificationTypeV2.CONSUMPTION_REQUEST,
+              NotificationTypeV2.EXTERNAL_PURCHASE_TOKEN,
+              () => handled(appStorePaymentProvider.recordInformationalNotification(recordInput)),
+            ),
+
+            /** Test ping triggered via `requestTestNotification`. */
+            Match.when(NotificationTypeV2.TEST, () => Effect.succeed(ack(true))),
+
+            /** Any other notification type still gets a notification-ledger row but is ignored. */
+            Match.orElse(() => Effect.succeed(ack(false))),
+          )) as AcceptServerNotificationResult;
+
+          /**
+           * Wire-level dedup ledger: one row per Apple notificationUUID,
+           * regardless of whether we routed it to a record method or just
+           * ack-without-handling. Lets ops answer "did we receive this
+           * notification?" independently of the per-event idempotency gate
+           * on `purchase_ledger`. UNIQUE on (configurationId, notificationUUID)
+           * makes a duplicate webhook delivery a no-op insert — and is also
+           * what makes the parked-row write above survive: this second insert
+           * collides on the UNIQUE and leaves the parked row's `result`
+           * untouched.
+           */
+          if (notificationUUID) {
+            yield* queries.insertNotificationProcessedIfAbsent({
+              id: generateId("paymentProviderNotification"),
+              notificationSubtype: subtype ?? null,
+              notificationType,
+              notificationUuid: notificationUUID,
+              parkedRawPayload: null,
+              parkedUntilProviderProductKey: null,
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+              providerId: "apple-app-store",
+              result: terminalLedgerResult ?? (matchResult.handled ? "applied" : "ignored"),
+              resultNote: terminalLedgerResultNote,
+              source: "webhook",
+            });
+          }
+
+          yield* Effect.annotateCurrentSpan({
+            "app_store.webhook_result":
+              terminalLedgerResult ?? (matchResult.handled ? "applied" : "ignored"),
+          });
+          return matchResult;
+        },
+        (effect) =>
+          effect.pipe(
+            /**
+             * Product-not-mapped is caught inside the match block above and
+             * permanent payload/mapping failures are converted to failed
+             * notification ledger rows, so neither reaches this outer pipe.
+             */
+            Effect.catchIf(Schema.isSchemaError, (error) =>
+              Effect.fail(new AppStorePaymentProviderServiceError({ cause: String(error) })),
+            ),
+            // `InvalidISO4217CurrencyCodeError` and `VerificationError` are
+            // already collapsed upstream (in the match block / `handled` and the
+            // `Schema.isSchemaError` catch above), so they never reach this outer
+            // pipe — TS confirms they're absent from the error union here.
+            Effect.catchTags({
+              CertificateError: (error) =>
+                Effect.fail(new AppStorePaymentProviderServiceError({ cause: error.message })),
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AppStorePaymentProviderServiceError({ cause: String(error.cause) }),
+                ),
+              PersonServiceError: (error) =>
+                Effect.fail(new AppStorePaymentProviderServiceError({ cause: error.cause })),
+              PurchaseProcessingServiceError: (error) =>
+                Effect.fail(new AppStorePaymentProviderServiceError({ cause: error.cause })),
+            }),
+          ),
+      );
+
+      /**
+       * Replays all parked notifications for a `(configurationId,
+       * providerProductKey)` mapping. Called after a new
+       * `payment_provider_configuration_product` row is created — any
+       * notifications that arrived before the mapping existed get re-processed
+       * with the now-available mapping.
+       *
+       * Each parked row's `signedPayload` is run through
+       * `acceptServerNotification` (so the full webhook flow applies: decode,
+       * verify, dispatch to the right `record*` method). The per-event
+       * idempotency gate on `purchase_ledger` makes the replay safe against
+       * any live event for the same logical transaction that already arrived.
+       * After replay, the parked row is marked `"applied"` (or `"failed"` if
+       * processing surfaced an error) and its parked-state columns cleared.
+       *
+       * Returns counts so the caller can log a summary.
+       */
+      const replayParkedNotificationsForProductMapping = Effect.fn(
+        "replayParkedNotificationsForProductMapping",
+      )(function* (input: {
+        readonly paymentProviderConfigurationId: string;
+        readonly providerProductKey: string;
+      }) {
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.configuration_id",
+          input.paymentProviderConfigurationId,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.provider_product_key",
+          input.providerProductKey,
+        );
+        const parked = yield* queries.findParkedNotifications({
+          paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+          providerProductKey: input.providerProductKey,
+        });
+        let appliedCount = 0;
+        let failedCount = 0;
+        for (const row of parked) {
+          const rawPayload = row.parkedRawPayload;
+          if (typeof rawPayload !== "string") {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: "parked_raw_payload missing or not a string",
+            });
+            failedCount++;
+            continue;
+          }
+          const replayed = yield* acceptServerNotification({
+            isReplay: true,
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            receivedAt: new Date(),
+            signedPayload: rawPayload,
+          }).pipe(
+            Effect.match({
+              onFailure: (error) => ({ ok: false as const, error: String(error) }),
+              onSuccess: () => ({ ok: true as const }),
+            }),
+          );
+          if (replayed.ok) {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "applied",
+              resultNote: null,
+            });
+            appliedCount++;
+          } else {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: replayed.error.slice(0, 500),
+            });
+            failedCount++;
+          }
+        }
+        yield* Effect.annotateCurrentSpan({
+          "app_store.failed_count": failedCount,
+          "app_store.total_count": parked.length,
+        });
+        return { appliedCount, failedCount, totalParked: parked.length };
+      });
+
+      /**
+       * Replays all notifications parked waiting for the SDK to confirm a
+       * given `originalTransactionId`. Triggered by
+       * `AppStoreReplayParkedSdkNotificationsWorkflow` from
+       * `processSdkTransaction` after a successful `recordPurchase`.
+       *
+       * Walks parked rows in `processedAt ASC` order to reproduce wire
+       * arrival order — out-of-order safety is also guaranteed by the
+       * watermark guards on `subscription.last_event_occurred_at` and
+       * `transaction.last_event_occurred_at`, but reproducing wire order
+       * keeps the analytics/event stream faithful to what Apple actually
+       * delivered. Each row is re-dispatched through `acceptServerNotification`
+       * with `isReplay: true` so the SDK-confirmation gate above is bypassed.
+       * Per-event idempotency on `purchase_ledger.idempotency_key` makes the
+       * replay safe against any live event for the same logical transaction
+       * that already arrived (e.g. the SDK call itself).
+       */
+      const replayParkedNotificationsForSdkConfirmation = Effect.fn(
+        "replayParkedNotificationsForSdkConfirmation",
+      )(function* (input: {
+        readonly paymentProviderConfigurationId: string;
+        readonly originalTransactionId: string;
+      }) {
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.transaction.original_id",
+          input.originalTransactionId,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.configuration_id",
+          input.paymentProviderConfigurationId,
+        );
+        const parked = yield* queries.findParkedNotificationsByOriginalTransactionId({
+          originalTransactionId: input.originalTransactionId,
+          paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+        });
+        let appliedCount = 0;
+        let failedCount = 0;
+        for (const row of parked) {
+          const rawPayload = row.parkedRawPayload;
+          if (typeof rawPayload !== "string") {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: "parked_raw_payload missing or not a string",
+            });
+            failedCount++;
+            continue;
+          }
+          const replayed = yield* acceptServerNotification({
+            isReplay: true,
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            receivedAt: new Date(),
+            signedPayload: rawPayload,
+          }).pipe(
+            Effect.match({
+              onFailure: (error) => ({ ok: false as const, error: String(error) }),
+              onSuccess: () => ({ ok: true as const }),
+            }),
+          );
+          if (replayed.ok) {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "applied",
+              resultNote: null,
+            });
+            appliedCount++;
+          } else {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: replayed.error.slice(0, 500),
+            });
+            failedCount++;
+          }
+        }
+        yield* Effect.annotateCurrentSpan({
+          "app_store.failed_count": failedCount,
+          "app_store.total_count": parked.length,
+        });
+        return { appliedCount, failedCount, totalParked: parked.length };
+      });
+
+      return {
+        acceptServerNotification,
+        replayParkedNotificationsForProductMapping,
+        replayParkedNotificationsForSdkConfirmation,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(AppStoreWebhookHandlerService)(
+    AppStoreWebhookHandlerService.make,
+  ).pipe(Layer.provideMerge(AppStorePaymentProvider.layer));
+}
+
+export type { AcceptServerNotificationResult };
diff --git a/packages/core/src/services/paymentProviders/appStore/config-provider.test.ts b/packages/core/src/services/paymentProviders/appStore/config-provider.test.ts
new file mode 100644
index 000000000..9ff5e521f
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/config-provider.test.ts
@@ -0,0 +1,116 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { isEncrypted } from "../../../utils/crypto/SecretBox.ts";
+import { makeAppStoreConfigProvider } from "./config-provider.ts";
+
+const bytesToBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i] as number);
+  return btoa(binary);
+};
+const newKeyB64 = () => bytesToBase64(crypto.getRandomValues(new Uint8Array(32)));
+
+const SECRET = "-----BEGIN PRIVATE KEY-----\nMIGT...secret...==\n-----END PRIVATE KEY-----";
+
+/** A configuration that passes `globalConfigurationSchema`. */
+const validGlobalConfig = (overrides: Record<string, unknown> = {}) => ({
+  appAppleId: "123456789",
+  bundleId: "com.example.app",
+  inAppPurchaseKeyIssuerId: "issuer-id",
+  inAppPurchaseKeyId: "key-id",
+  inAppPurchasePrivateKey: SECRET,
+  appStoreConnectApiIssuerId: "asc-issuer",
+  appStoreConnectApiKeyId: "asc-key",
+  appStoreConnectApiVendorNumber: "vendor-1",
+  appleServerNotificationForwardingUrl: "",
+  appleSmallBusinessProgramHasEndDate: false,
+  trackNewPurchasesFromAppleServerNotifications: true,
+  ...overrides,
+});
+
+const run = <A, E>(
+  keyB64: string,
+  body: (provider: ReturnType<typeof makeAppStoreConfigProvider>) => Effect.Effect<A, E>,
+): Promise<A> =>
+  Effect.gen(function* () {
+    const secretCrypto = yield* PaymentConfigSecretCrypto;
+    return yield* body(makeAppStoreConfigProvider(secretCrypto));
+  }).pipe(
+    Effect.provide(PaymentConfigSecretCrypto.layer({ key: Effect.succeed(keyB64) })),
+    Effect.runPromise,
+  );
+
+describe("AppStore config-provider", () => {
+  it("validateGlobalConfiguration encrypts the Apple private key on write", async () => {
+    const result = await run(newKeyB64(), (p) =>
+      p.validateGlobalConfiguration(validGlobalConfig()),
+    );
+    expect(result.paymentProviderKey).toBe("com.example.app");
+    expect(isEncrypted(result.parsedConfiguration.inAppPurchasePrivateKey)).toBe(true);
+    expect(result.parsedConfiguration.inAppPurchasePrivateKey).not.toContain("PRIVATE KEY");
+  });
+
+  it("stores the key as plaintext when no encryption key is configured", async () => {
+    const result = await run("", (p) => p.validateGlobalConfiguration(validGlobalConfig()));
+    expect(result.parsedConfiguration.inAppPurchasePrivateKey).toBe(SECRET);
+    expect(isEncrypted(result.parsedConfiguration.inAppPurchasePrivateKey)).toBe(false);
+  });
+
+  it("encrypt-on-write is idempotent for an already-encrypted key", async () => {
+    const key = newKeyB64();
+    const once = await run(key, (p) => p.validateGlobalConfiguration(validGlobalConfig()));
+    const twice = await run(key, (p) =>
+      p.validateGlobalConfiguration(
+        validGlobalConfig({
+          inAppPurchasePrivateKey: once.parsedConfiguration.inAppPurchasePrivateKey,
+        }),
+      ),
+    );
+    expect(twice.parsedConfiguration.inAppPurchasePrivateKey).toBe(
+      once.parsedConfiguration.inAppPurchasePrivateKey,
+    );
+  });
+
+  it("fails with a configuration validation error on an invalid global config", async () => {
+    const error = await run("", (p) =>
+      Effect.flip(p.validateGlobalConfiguration({ bundleId: "" })),
+    );
+    expect(error._tag).toBe("PaymentProviderConfigurationValidationError");
+  });
+
+  it("validateProductConfiguration derives the product key", async () => {
+    const result = await run("", (p) =>
+      p.validateProductConfiguration({ productId: "premium.monthly" }),
+    );
+    expect(result.productKey).toBe("premium.monthly");
+    expect(result.parsedConfiguration.productId).toBe("premium.monthly");
+  });
+
+  it("fails with a product validation error on an invalid product config", async () => {
+    const error = await run("", (p) =>
+      Effect.flip(p.validateProductConfiguration({ productId: 42 })),
+    );
+    expect(error._tag).toBe("PaymentProviderProductValidationError");
+  });
+
+  it("defaultGlobalConfiguration returns an empty, schema-shaped blob", async () => {
+    const config = await run("", (p) => p.defaultGlobalConfiguration());
+    expect(config.bundleId).toBe("");
+    expect(config.inAppPurchasePrivateKey).toBe("");
+    expect(config.trackNewPurchasesFromAppleServerNotifications).toBe(true);
+  });
+
+  it("accepts and round-trips the optional enableFirstSeenReconciliation flag", async () => {
+    const result = await run(newKeyB64(), (p) =>
+      p.validateGlobalConfiguration(validGlobalConfig({ enableFirstSeenReconciliation: true })),
+    );
+    expect(result.parsedConfiguration.enableFirstSeenReconciliation).toBe(true);
+  });
+
+  it("treats a configuration without enableFirstSeenReconciliation as valid (absent ⇒ off)", async () => {
+    const result = await run("", (p) => p.validateGlobalConfiguration(validGlobalConfig()));
+    expect(result.parsedConfiguration.enableFirstSeenReconciliation).toBeUndefined();
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/appStore/config-provider.ts b/packages/core/src/services/paymentProviders/appStore/config-provider.ts
new file mode 100644
index 000000000..bc6bda36d
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/config-provider.ts
@@ -0,0 +1,187 @@
+/**
+ * App Store config-write adapter — the slice of the provider that the admin
+ * configuration / product flow needs (`PaymentProviderConfigurationService`,
+ * `PaymentProviderProductService`): the canonical configuration schema, key
+ * derivation, default configuration blobs, and **encrypt-on-write** of the
+ * secret Apple PKCS8 in-app-purchase key.
+ *
+ * Deliberately separate from the full record engine (`./payment-provider.ts`):
+ * validating and persisting a configuration only needs the schema and
+ * {@link PaymentConfigSecretCrypto}, NOT the App Store REST SDK, FX rates, or
+ * the purchase-processing graph the record path pulls in. Registering this as
+ * the public `AppStorePaymentProvider` tag keeps the admin config-write request
+ * graph minimal (one extra dependency), while the record engine re-uses these
+ * same methods — so there is a single source of truth for what a valid stored
+ * configuration looks like and where the secret key is encrypted.
+ *
+ * This module owns the configuration schema (`globalConfigurationSchema` /
+ * `productConfigurationSchema`); the engine imports them from here. Keeping the
+ * dependency one-directional (engine → config-provider) avoids an import cycle.
+ */
+import { Effect, Layer, Schema } from "effect";
+
+import { PaymentProviderConfigurationValidationError } from "../../../domain/paymentProvider/PaymentProviderConfiguration.ts";
+import { PaymentProviderProductValidationError } from "../../../domain/paymentProvider/PaymentProviderProduct.ts";
+import { SubscriptionTransferModeSchema } from "../../../domain/paymentProvider/SubscriptionTransfer.ts";
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { AppStorePaymentProvider } from "../PaymentProvider.ts";
+
+const APP_APPLE_ID_PATTERN = /^[1-9]\d{0,14}$/;
+
+export const globalConfigurationSchema = Schema.Struct({
+  appAppleId: Schema.String.check(Schema.isPattern(APP_APPLE_ID_PATTERN)),
+  bundleId: Schema.String.check(Schema.isMinLength(1)),
+  inAppPurchaseKeyIssuerId: Schema.String.check(Schema.isMinLength(1)),
+  inAppPurchaseKeyId: Schema.String.check(Schema.isMinLength(1)),
+  inAppPurchasePrivateKey: Schema.String.check(Schema.isMinLength(1)),
+  appStoreConnectApiIssuerId: Schema.String.check(Schema.isMinLength(1)),
+  appStoreConnectApiKeyId: Schema.String.check(Schema.isMinLength(1)),
+  appStoreConnectApiVendorNumber: Schema.String.check(Schema.isMinLength(1)),
+  appleServerNotificationForwardingUrl: Schema.String,
+  appleSmallBusinessProgramStartDate: Schema.optional(Schema.String),
+  appleSmallBusinessProgramHasEndDate: Schema.Boolean,
+  appleSmallBusinessProgramEndDate: Schema.optional(Schema.String),
+  storeKitSubscriptionOfferKey: Schema.optional(Schema.String),
+  storeKitTestingFrameworkCertificate: Schema.optional(Schema.String),
+  trackNewPurchasesFromAppleServerNotifications: Schema.Boolean,
+  /**
+   * Policy applied when an App Store transaction is restored under a
+   * different identified person than the one currently bound to its
+   * `originalTransactionId`. Optional — configurations created before this
+   * feature shipped omit it and fall back to
+   * {@link DEFAULT_SUBSCRIPTION_TRANSFER_MODE}.
+   */
+  subscriptionTransferMode: Schema.optional(SubscriptionTransferModeSchema),
+  /**
+   * Opt-in: dispatch the lazy first-seen Apple-history backfill
+   * (`AppStoreReconcileOriginalTransactionWorkflow`) the first time the SDK
+   * boundary records a purchase for an `originalTransactionId` we have never
+   * seen. Off by default (optional, absent ⇒ disabled) because each run has
+   * real Apple-REST cost; enable per-tenant for migrated/RevenueCat catalogs
+   * that need history Apple holds from before the SDK boundary.
+   */
+  enableFirstSeenReconciliation: Schema.optional(Schema.Boolean),
+});
+
+export const productConfigurationSchema = Schema.Struct({
+  productId: Schema.String,
+});
+
+export type AppStoreGlobalConfiguration = Schema.Schema.Type<typeof globalConfigurationSchema>;
+export type AppStoreProductConfiguration = Schema.Schema.Type<typeof productConfigurationSchema>;
+
+/**
+ * Config-write surface of the App Store provider. Structurally a typed
+ * superset of the public `PaymentProviderShape<"apple-app-store">` (the
+ * `validate*` results expose the concrete configuration types so the record
+ * engine can re-use them without re-parsing), and assignable to it for
+ * registration under the public tag.
+ */
+export interface AppStoreConfigProvider {
+  readonly id: "apple-app-store";
+  readonly title: string;
+  readonly type: "native";
+  readonly defaultGlobalConfiguration: () => Effect.Effect<AppStoreGlobalConfiguration>;
+  readonly defaultProductConfiguration: () => Effect.Effect<AppStoreProductConfiguration>;
+  readonly createGlobalKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly createProductKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly validateGlobalConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: AppStoreGlobalConfiguration;
+      readonly paymentProviderKey: string;
+    },
+    PaymentProviderConfigurationValidationError
+  >;
+  readonly validateProductConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: AppStoreProductConfiguration;
+      readonly productKey: string;
+    },
+    PaymentProviderProductValidationError
+  >;
+}
+
+/**
+ * Build the App Store config-write provider over a resolved
+ * {@link PaymentConfigSecretCrypto}. Pure with respect to the Effect context —
+ * the only capability it closes over is `secretCrypto.encrypt`.
+ */
+export const makeAppStoreConfigProvider = (
+  secretCrypto: typeof PaymentConfigSecretCrypto.Service,
+): AppStoreConfigProvider => ({
+  id: "apple-app-store",
+  title: "App Store",
+  type: "native",
+  defaultGlobalConfiguration: () =>
+    Effect.succeed({
+      appAppleId: "",
+      bundleId: "",
+      inAppPurchaseKeyIssuerId: "",
+      inAppPurchaseKeyId: "",
+      inAppPurchasePrivateKey: "",
+      appStoreConnectApiIssuerId: "",
+      appStoreConnectApiKeyId: "",
+      appStoreConnectApiVendorNumber: "",
+      appleServerNotificationForwardingUrl: "",
+      appleSmallBusinessProgramStartDate: "",
+      appleSmallBusinessProgramHasEndDate: false,
+      appleSmallBusinessProgramEndDate: "",
+      storeKitSubscriptionOfferKey: "",
+      storeKitTestingFrameworkCertificate: "",
+      trackNewPurchasesFromAppleServerNotifications: true,
+    }),
+  defaultProductConfiguration: () =>
+    Effect.succeed({
+      productId: "",
+    }),
+  createGlobalKey: (configuration) =>
+    Effect.succeed(`${(configuration as { bundleId?: unknown }).bundleId ?? ""}`),
+  createProductKey: (configuration) =>
+    Effect.succeed(`${(configuration as { productId?: unknown }).productId ?? ""}`),
+  validateGlobalConfiguration: (configuration) =>
+    Schema.decodeUnknownEffect(globalConfigurationSchema)(configuration).pipe(
+      Effect.mapError(
+        (error) => new PaymentProviderConfigurationValidationError({ cause: error.message }),
+      ),
+      Effect.flatMap((parsedConfiguration) =>
+        // Encrypt the Apple PKCS8 key before it is persisted (idempotent — a
+        // re-validated, already-encrypted value passes through unchanged). A
+        // `SecretKeyError` here means the configured encryption key is broken
+        // at runtime, not that the operator's configuration is invalid — fail
+        // as a defect (500) rather than mislabel it a validation error.
+        secretCrypto.encrypt(parsedConfiguration.inAppPurchasePrivateKey).pipe(
+          Effect.map((inAppPurchasePrivateKey) => ({
+            parsedConfiguration: { ...parsedConfiguration, inAppPurchasePrivateKey },
+            paymentProviderKey: `${parsedConfiguration.bundleId}`,
+          })),
+          Effect.orDie,
+        ),
+      ),
+    ),
+  validateProductConfiguration: (configuration) =>
+    Schema.decodeUnknownEffect(productConfigurationSchema)(configuration).pipe(
+      Effect.mapError(
+        (error) => new PaymentProviderProductValidationError({ message: error.message }),
+      ),
+      Effect.map((parsedConfiguration) => ({
+        parsedConfiguration,
+        productKey: `${parsedConfiguration.productId}`,
+      })),
+    ),
+});
+
+/**
+ * Live layer registering the config-write provider under the public
+ * `AppStorePaymentProvider` tag. Requires only {@link PaymentConfigSecretCrypto};
+ * the application root provides that (keyed from `ENCRYPTION_KEY`).
+ */
+export const AppStorePaymentProviderConfigLive: Layer.Layer<
+  AppStorePaymentProvider,
+  never,
+  PaymentConfigSecretCrypto
+> = Layer.effect(AppStorePaymentProvider)(
+  Effect.gen(function* () {
+    const secretCrypto = yield* PaymentConfigSecretCrypto;
+    return makeAppStoreConfigProvider(secretCrypto);
+  }),
+);
diff --git a/packages/core/src/services/paymentProviders/appStore/constants.ts b/packages/core/src/services/paymentProviders/appStore/constants.ts
new file mode 100644
index 000000000..4aeeef806
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/constants.ts
@@ -0,0 +1,88 @@
+/**
+ * Apple root CA certificates used to anchor the JWS signature chain on App
+ * Store payloads. Stored as base64-encoded DER (multi-line). For consumers
+ * that expect PEM strings (e.g. `@voidhash/app-store-server-sdk`'s
+ * `SignedDataVerifier`), use {@link APPLE_ROOT_CERTIFICATES_PEM}.
+ */
+export const APPLE_ROOT_CERTIFICATE =
+  `MIIEuzCCA6OgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQGEwJVUzET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`.trim();
+
+export const APPLE_ROOT_CA_G2 = `MIIFkjCCA3qgAwIBAgIIAeDltYNno+AwDQYJKoZIhvcNAQEMBQAwZzEbMBkGA1UE
+AwwSQXBwbGUgUm9vdCBDQSAtIEcyMSYwJAYDVQQLDB1BcHBsZSBDZXJ0aWZpY2F0
+aW9uIEF1dGhvcml0eTETMBEGA1UECgwKQXBwbGUgSW5jLjELMAkGA1UEBhMCVVMw
+HhcNMTQwNDMwMTgxMDA5WhcNMzkwNDMwMTgxMDA5WjBnMRswGQYDVQQDDBJBcHBs
+ZSBSb290IENBIC0gRzIxJjAkBgNVBAsMHUFwcGxlIENlcnRpZmljYXRpb24gQXV0
+aG9yaXR5MRMwEQYDVQQKDApBcHBsZSBJbmMuMQswCQYDVQQGEwJVUzCCAiIwDQYJ
+KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgREkhI2imKScUcx+xuM23+TfvgHN6s
+XuI2pyT5f1BrTM65MFQn5bPW7SXmMLYFN14UIhHF6Kob0vuy0gmVOKTvKkmMXT5x
+ZgM4+xb1hYjkWpIMBDLyyED7Ul+f9sDx47pFoFDVEovy3d6RhiPw9bZyLgHaC/Yu
+OQhfGaFjQQscp5TBhsRTL3b2CtcM0YM/GlMZ81fVJ3/8E7j4ko380yhDPLVoACVd
+J2LT3VXdRCCQgzWTxb+4Gftr49wIQuavbfqeQMpOhYV4SbHXw8EwOTKrfl+q04tv
+ny0aIWhwZ7Oj8ZhBbZF8+NfbqOdfIRqMM78xdLe40fTgIvS/cjTf94FNcX1RoeKz
+8NMoFnNvzcytN31O661A4T+B/fc9Cj6i8b0xlilZ3MIZgIxbdMYs0xBTJh0UT8TU
+gWY8h2czJxQI6bR3hDRSj4n4aJgXv8O7qhOTH11UL6jHfPsNFL4VPSQ08prcdUFm
+IrQB1guvkJ4M6mL4m1k8COKWNORj3rw31OsMiANDC1CvoDTdUE0V+1ok2Az6DGOe
+HwOx4e7hqkP0ZmUoNwIx7wHHHtHMn23KVDpA287PT0aLSmWaasZobNfMmRtHsHLD
+d4/E92GcdB/O/WuhwpyUgquUoue9G7q5cDmVF8Up8zlYNPXEpMZ7YLlmQ1A/bmH8
+DvmGqmAMQ0uVAgMBAAGjQjBAMB0GA1UdDgQWBBTEmRNsGAPCe8CjoA1/coB6HHcm
+jTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQwF
+AAOCAgEAUabz4vS4PZO/Lc4Pu1vhVRROTtHlznldgX/+tvCHM/jvlOV+3Gp5pxy+
+8JS3ptEwnMgNCnWefZKVfhidfsJxaXwU6s+DDuQUQp50DhDNqxq6EWGBeNjxtUVA
+eKuowM77fWM3aPbn+6/Gw0vsHzYmE1SGlHKy6gLti23kDKaQwFd1z4xCfVzmMX3z
+ybKSaUYOiPjjLUKyOKimGY3xn83uamW8GrAlvacp/fQ+onVJv57byfenHmOZ4VxG
+/5IFjPoeIPmGlFYl5bRXOJ3riGQUIUkhOb9iZqmxospvPyFgxYnURTbImHy99v6Z
+SYA7LNKmp4gDBDEZt7Y6YUX6yfIjyGNzv1aJMbDZfGKnexWoiIqrOEDCzBL/FePw
+N983csvMmOa/orz6JopxVtfnJBtIRD6e/J/JzBrsQzwBvDR4yGn1xuZW7AYJNpDr
+FEobXsmII9oDMJELuDY++ee1KG++P+w8j2Ud5cAeh6Squpj9kuNsJnfdBrRkBof0
+Tta6SqoWqPQFZ2aWuuJVecMsXUmPgEkrihLHdoBR37q9ZV0+N0djMenl9MU/S60E
+inpxLK8JQzcPqOMyT/RFtm2XNuyE9QoB6he7hY1Ck3DDUOUUi78/w0EP3SIEIwiK
+um1xRKtzCTrJ+VKACd+66eYWyi4uTLLT3OUEVLLUNIAytbwPF+E=`.trim();
+
+export const APPLE_ROOT_CA_G3 = `MIICQzCCAcmgAwIBAgIILcX8iNLFS5UwCgYIKoZIzj0EAwMwZzEbMBkGA1UEAwwS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`.trim();
+
+const toPem = (base64Der: string): string =>
+  `-----BEGIN CERTIFICATE-----\n${base64Der}\n-----END CERTIFICATE-----`;
+
+/** Apple root CAs in PEM format. */
+export const APPLE_ROOT_CERTIFICATES_PEM: ReadonlyArray<string> = [
+  toPem(APPLE_ROOT_CERTIFICATE),
+  toPem(APPLE_ROOT_CA_G2),
+  toPem(APPLE_ROOT_CA_G3),
+];
diff --git a/packages/core/src/services/paymentProviders/appStore/errors.ts b/packages/core/src/services/paymentProviders/appStore/errors.ts
new file mode 100644
index 000000000..736d96784
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/errors.ts
@@ -0,0 +1,77 @@
+import { Schema } from "effect";
+
+/**
+ * Catch-all service error for unexpected/infrastructural failures. Business
+ * logic failures raised by App Store services should use one of the dedicated
+ * errors below instead.
+ */
+export class AppStorePaymentProviderServiceError extends Schema.TaggedErrorClass<AppStorePaymentProviderServiceError>(
+  "AppStorePaymentProviderServiceError",
+)("AppStorePaymentProviderServiceError", { cause: Schema.String }) {}
+
+/**
+ * The project's App Store payment provider configuration is missing or
+ * disabled for the given bundle id.
+ */
+export class AppStorePaymentProviderNotEnabledForFollowingBundleIdError extends Schema.TaggedErrorClass<AppStorePaymentProviderNotEnabledForFollowingBundleIdError>(
+  "AppStorePaymentProviderNotEnabledForFollowingBundleIdError",
+)("AppStorePaymentProviderNotEnabledForFollowingBundleIdError", { bundleId: Schema.String }) {}
+
+export class AppStorePaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<AppStorePaymentProviderConfigurationNotFoundError>(
+  "AppStorePaymentProviderConfigurationNotFoundError",
+)("AppStorePaymentProviderConfigurationNotFoundError", {
+  paymentProviderConfigurationId: Schema.String,
+}) {}
+
+export class AppStorePaymentProviderProjectNotFoundError extends Schema.TaggedErrorClass<AppStorePaymentProviderProjectNotFoundError>(
+  "AppStorePaymentProviderProjectNotFoundError",
+)("AppStorePaymentProviderProjectNotFoundError", { projectId: Schema.String }) {}
+
+export class AppStorePaymentProviderProductNotMappedError extends Schema.TaggedErrorClass<AppStorePaymentProviderProductNotMappedError>(
+  "AppStorePaymentProviderProductNotMappedError",
+)("AppStorePaymentProviderProductNotMappedError", {
+  paymentProviderConfigurationId: Schema.String,
+  providerProductKey: Schema.String,
+}) {}
+
+/**
+ * @deprecated Apple-valid transactions with missing provider fields are now
+ * accepted and ignored when they cannot be mapped into Voidhash purchase state.
+ */
+export class AppStorePaymentProviderTransactionMissingRequiredFieldError extends Schema.TaggedErrorClass<AppStorePaymentProviderTransactionMissingRequiredFieldError>(
+  "AppStorePaymentProviderTransactionMissingRequiredFieldError",
+)("AppStorePaymentProviderTransactionMissingRequiredFieldError", { field: Schema.String }) {}
+
+export class AppStorePaymentProviderTransactionMissingPersonIdentifierError extends Schema.TaggedErrorClass<AppStorePaymentProviderTransactionMissingPersonIdentifierError>(
+  "AppStorePaymentProviderTransactionMissingPersonIdentifierError",
+)("AppStorePaymentProviderTransactionMissingPersonIdentifierError", {
+  providerTransactionId: Schema.String,
+}) {}
+
+export class AppStorePaymentProviderSdkTransactionMissingDistinctIdError extends Schema.TaggedErrorClass<AppStorePaymentProviderSdkTransactionMissingDistinctIdError>(
+  "AppStorePaymentProviderSdkTransactionMissingDistinctIdError",
+)("AppStorePaymentProviderSdkTransactionMissingDistinctIdError", {
+  providerTransactionId: Schema.String,
+}) {}
+
+export class AppStorePaymentProviderNotificationMissingSignedTransactionInfoError extends Schema.TaggedErrorClass<AppStorePaymentProviderNotificationMissingSignedTransactionInfoError>(
+  "AppStorePaymentProviderNotificationMissingSignedTransactionInfoError",
+)("AppStorePaymentProviderNotificationMissingSignedTransactionInfoError", {
+  paymentProviderConfigurationId: Schema.String,
+}) {}
+
+/**
+ * Raised when the per-event idempotency key cannot be derived from the
+ * decoded transaction (the JWS lacks the anchor date or anchor id required
+ * for the given event type). Always indicates an upstream bug: malformed
+ * JWS, a notification→eventType mapping that doesn't match Apple's payload
+ * for that event, or Apple changed their schema. No silent fallback — the
+ * webhook handler propagates this so the request fails loudly.
+ */
+export class AppStorePurchaseProcessingIdempotencyKeyDerivationError extends Schema.TaggedErrorClass<AppStorePurchaseProcessingIdempotencyKeyDerivationError>(
+  "AppStorePurchaseProcessingIdempotencyKeyDerivationError",
+)("AppStorePurchaseProcessingIdempotencyKeyDerivationError", {
+  eventType: Schema.String,
+  missingField: Schema.String,
+  providerTransactionId: Schema.optional(Schema.String),
+}) {}
diff --git a/packages/core/src/services/paymentProviders/appStore/helpers.test.ts b/packages/core/src/services/paymentProviders/appStore/helpers.test.ts
new file mode 100644
index 000000000..f03d11821
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/helpers.test.ts
@@ -0,0 +1,581 @@
+import {
+  InAppOwnershipType,
+  type JWSRenewalInfoDecodedPayload,
+  type JWSTransactionDecodedPayload,
+  RevocationType,
+} from "@voidhash/app-store-server-sdk";
+import { Effect, Option } from "effect";
+
+import { describe, expect, it } from "../../../testing/effect-vitest.ts";
+import { AppStorePurchaseProcessingIdempotencyKeyDerivationError } from "./errors.ts";
+import {
+  classifyAppStoreRevocation,
+  getAppStorePersonIdentifier,
+  getAppStorePurchaseProcessingIdempotencyKey,
+  getAppStoreProviderSubscriptionId,
+  getAppStoreProviderTransactionId,
+} from "./helpers.ts";
+
+/**
+ * Builds a minimal `JWSTransactionDecodedPayload` shape for unit tests. Every
+ * field is an `Option`, so unspecified ones default to `Option.none()`.
+ */
+const decoded = (
+  overrides: Partial<JWSTransactionDecodedPayload> = {},
+): JWSTransactionDecodedPayload =>
+  ({
+    advancedCommerceInfo: Option.none(),
+    appAccountToken: Option.none(),
+    appTransactionId: Option.none(),
+    billingPlanType: Option.none(),
+    bundleId: Option.none(),
+    commitmentInfo: Option.none(),
+    currency: Option.none(),
+    environment: Option.none(),
+    expiresDate: Option.none(),
+    inAppOwnershipType: Option.none(),
+    isUpgraded: Option.none(),
+    offerDiscountType: Option.none(),
+    offerIdentifier: Option.none(),
+    offerPeriod: Option.none(),
+    offerType: Option.none(),
+    originalPurchaseDate: Option.none(),
+    originalTransactionId: Option.none(),
+    price: Option.none(),
+    productId: Option.none(),
+    purchaseDate: Option.none(),
+    quantity: Option.none(),
+    revocationDate: Option.none(),
+    revocationPercentage: Option.none(),
+    revocationReason: Option.none(),
+    revocationType: Option.none(),
+    signedDate: Option.none(),
+    storefront: Option.none(),
+    storefrontId: Option.none(),
+    subscriptionGroupIdentifier: Option.none(),
+    transactionId: Option.none(),
+    transactionReason: Option.none(),
+    type: Option.none(),
+    webOrderLineItemId: Option.none(),
+    ...overrides,
+  }) satisfies JWSTransactionDecodedPayload;
+
+const renewalInfo = (
+  overrides: Partial<JWSRenewalInfoDecodedPayload> = {},
+): JWSRenewalInfoDecodedPayload =>
+  ({
+    advancedCommerceInfo: Option.none(),
+    appAccountToken: Option.none(),
+    appTransactionId: Option.none(),
+    autoRenewProductId: Option.none(),
+    autoRenewStatus: Option.none(),
+    commitmentInfo: Option.none(),
+    currency: Option.none(),
+    eligibleWinBackOfferIds: Option.none(),
+    environment: Option.none(),
+    expirationIntent: Option.none(),
+    gracePeriodExpiresDate: Option.none(),
+    isInBillingRetryPeriod: Option.none(),
+    offerDiscountType: Option.none(),
+    offerIdentifier: Option.none(),
+    offerPeriod: Option.none(),
+    offerType: Option.none(),
+    originalTransactionId: Option.none(),
+    priceIncreaseStatus: Option.none(),
+    productId: Option.none(),
+    recentSubscriptionStartDate: Option.none(),
+    renewalBillingPlanType: Option.none(),
+    renewalDate: Option.none(),
+    renewalPrice: Option.none(),
+    signedDate: Option.none(),
+    ...overrides,
+  }) satisfies JWSRenewalInfoDecodedPayload;
+
+describe("getAppStoreProviderTransactionId", () => {
+  it("prefers the decoded JWS transactionId", () => {
+    const result = getAppStoreProviderTransactionId({
+      decodedTransaction: decoded({ transactionId: Option.some("tx_decoded") }),
+      sdkTransactionId: "tx_sdk",
+    });
+    expect(result).toEqual(Option.some("tx_decoded"));
+  });
+
+  it("falls back to the SDK-observed transactionId when the JWS has none", () => {
+    const result = getAppStoreProviderTransactionId({
+      decodedTransaction: decoded(),
+      sdkTransactionId: "tx_sdk",
+    });
+    expect(result).toEqual(Option.some("tx_sdk"));
+  });
+
+  it("returns Option.none when neither id is available", () => {
+    const result = getAppStoreProviderTransactionId({ decodedTransaction: decoded() });
+    expect(result).toEqual(Option.none());
+  });
+});
+
+describe("getAppStoreProviderSubscriptionId", () => {
+  it("returns the decoded originalTransactionId when present", () => {
+    expect(
+      getAppStoreProviderSubscriptionId(
+        decoded({ originalTransactionId: Option.some("original_tx") }),
+      ),
+    ).toEqual(Option.some("original_tx"));
+  });
+
+  it("returns Option.none when originalTransactionId is absent", () => {
+    expect(getAppStoreProviderSubscriptionId(decoded())).toEqual(Option.none());
+  });
+});
+
+describe("getAppStorePurchaseProcessingIdempotencyKey", () => {
+  const PURCHASE_DATE = 1_705_320_000_000; // 2024-01-15T12:00:00Z
+  const EXPIRES_DATE = 1_707_998_400_000; // 2024-02-15T12:00:00Z
+  const REVOCATION_DATE = 1_708_516_800_000; // 2024-02-21T12:00:00Z
+  const RENEWAL_DATE = 1_710_590_400_000; // 2024-03-15T12:00:00Z
+
+  it.effect("derives a purchase key from transactionId + purchaseDate", () =>
+    Effect.gen(function* () {
+      const key = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          purchaseDate: Option.some(PURCHASE_DATE),
+          transactionId: Option.some("tx_decoded"),
+        }),
+        eventType: "purchase",
+      });
+      expect(key).toBe(`apple:tx_decoded:purchase:${PURCHASE_DATE}`);
+    }),
+  );
+
+  it.effect("is stable across sources for the same logical purchase", () =>
+    Effect.gen(function* () {
+      const fromWebhook = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          purchaseDate: Option.some(PURCHASE_DATE),
+          signedDate: Option.some(PURCHASE_DATE + 10),
+          transactionId: Option.some("tx_shared"),
+        }),
+        eventType: "purchase",
+      });
+      const fromSdk = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          purchaseDate: Option.some(PURCHASE_DATE),
+          signedDate: Option.some(PURCHASE_DATE + 7_200_000),
+          transactionId: Option.some("tx_shared"),
+        }),
+        eventType: "purchase",
+      });
+      expect(fromWebhook).toBe(fromSdk);
+    }),
+  );
+
+  it.effect("falls back to sdkTransactionId when decoded transactionId is absent", () =>
+    Effect.gen(function* () {
+      const key = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({ purchaseDate: Option.some(PURCHASE_DATE) }),
+        eventType: "purchase",
+        sdkTransactionId: "tx_sdk",
+      });
+      expect(key).toBe(`apple:tx_sdk:purchase:${PURCHASE_DATE}`);
+    }),
+  );
+
+  it.effect("derives a renewal key separately from a purchase against the same id", () =>
+    Effect.gen(function* () {
+      const purchaseKey = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          purchaseDate: Option.some(PURCHASE_DATE),
+          transactionId: Option.some("tx_same"),
+        }),
+        eventType: "purchase",
+      });
+      const renewalKey = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          purchaseDate: Option.some(PURCHASE_DATE),
+          transactionId: Option.some("tx_same"),
+        }),
+        eventType: "renewal",
+      });
+      expect(purchaseKey).not.toBe(renewalKey);
+    }),
+  );
+
+  it.effect("derives an expired key from originalTransactionId + expiresDate", () =>
+    Effect.gen(function* () {
+      const key = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          expiresDate: Option.some(EXPIRES_DATE),
+          originalTransactionId: Option.some("original_tx"),
+        }),
+        eventType: "expired",
+      });
+      expect(key).toBe(`apple:original_tx:expired:${EXPIRES_DATE}`);
+    }),
+  );
+
+  it.effect("derives distinct cancel keys per period for the same subscription series", () =>
+    Effect.gen(function* () {
+      const firstPeriod = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          expiresDate: Option.some(EXPIRES_DATE),
+          originalTransactionId: Option.some("original_tx"),
+        }),
+        eventType: "canceled",
+      });
+      const secondPeriod = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          expiresDate: Option.some(EXPIRES_DATE + 30 * 24 * 3_600_000),
+          originalTransactionId: Option.some("original_tx"),
+        }),
+        eventType: "canceled",
+      });
+      expect(firstPeriod).not.toBe(secondPeriod);
+    }),
+  );
+
+  it.effect("derives a full-refund key with the default revocationPercentage suffix", () =>
+    Effect.gen(function* () {
+      const key = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          revocationDate: Option.some(REVOCATION_DATE),
+          transactionId: Option.some("tx_full_refund"),
+        }),
+        eventType: "refund",
+      });
+      expect(key).toBe(`apple:tx_full_refund:refund:${REVOCATION_DATE}:100000`);
+    }),
+  );
+
+  it.effect("derives distinct keys for partial refunds at the same revocationDate", () =>
+    Effect.gen(function* () {
+      const firstPartial = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          revocationDate: Option.some(REVOCATION_DATE),
+          revocationPercentage: Option.some(25_000),
+          transactionId: Option.some("tx_partial"),
+        }),
+        eventType: "refund",
+      });
+      const secondPartial = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          revocationDate: Option.some(REVOCATION_DATE),
+          revocationPercentage: Option.some(50_000),
+          transactionId: Option.some("tx_partial"),
+        }),
+        eventType: "refund",
+      });
+      expect(firstPartial).not.toBe(secondPartial);
+    }),
+  );
+
+  it.effect("returns identical keys for two deliveries of the same partial refund", () =>
+    Effect.gen(function* () {
+      const first = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          revocationDate: Option.some(REVOCATION_DATE),
+          revocationPercentage: Option.some(33_000),
+          transactionId: Option.some("tx_dup"),
+        }),
+        eventType: "refund",
+      });
+      const second = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          revocationDate: Option.some(REVOCATION_DATE),
+          revocationPercentage: Option.some(33_000),
+          transactionId: Option.some("tx_dup"),
+        }),
+        eventType: "refund",
+      });
+      expect(first).toBe(second);
+    }),
+  );
+
+  it.effect("derives a refund-reversal key from stable transaction anchors", () =>
+    Effect.gen(function* () {
+      const fromWebhook = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          purchaseDate: Option.some(PURCHASE_DATE),
+          signedDate: Option.some(PURCHASE_DATE + 1_000),
+          transactionId: Option.some("tx_refund_reversed"),
+        }),
+        eventType: "refund_reversed",
+      });
+      const fromReconciliation = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          purchaseDate: Option.some(PURCHASE_DATE),
+          signedDate: Option.some(PURCHASE_DATE + 86_400_000),
+          transactionId: Option.some("tx_refund_reversed"),
+        }),
+        eventType: "refund_reversed",
+      });
+      expect(fromWebhook).toBe(fromReconciliation);
+      expect(fromWebhook).toBe(`apple:tx_refund_reversed:refund_reversed:${PURCHASE_DATE}`);
+    }),
+  );
+
+  it.effect("derives renewal preference keys from renewalDate and target product", () =>
+    Effect.gen(function* () {
+      const key = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedRenewalInfo: Option.some(
+          renewalInfo({
+            autoRenewProductId: Option.some("product_next"),
+            renewalDate: Option.some(RENEWAL_DATE),
+          }),
+        ),
+        decodedTransaction: decoded({
+          originalTransactionId: Option.some("original_tx"),
+          productId: Option.some("product_current"),
+          signedDate: Option.some(PURCHASE_DATE + 1_000),
+        }),
+        eventType: "renewal_pref_change",
+      });
+      expect(key).toBe(`apple:original_tx:renewal_pref_change:${RENEWAL_DATE}:product_next`);
+    }),
+  );
+
+  it.effect("keeps offer redeemed keys stable across Apple re-signs", () =>
+    Effect.gen(function* () {
+      const first = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          offerIdentifier: Option.some("offer_spring"),
+          purchaseDate: Option.some(PURCHASE_DATE),
+          signedDate: Option.some(PURCHASE_DATE + 1_000),
+          transactionId: Option.some("tx_offer"),
+        }),
+        eventType: "offer_redeemed",
+      });
+      const second = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          offerIdentifier: Option.some("offer_spring"),
+          purchaseDate: Option.some(PURCHASE_DATE),
+          signedDate: Option.some(PURCHASE_DATE + 86_400_000),
+          transactionId: Option.some("tx_offer"),
+        }),
+        eventType: "offer_redeemed",
+      });
+      expect(first).toBe(second);
+      expect(first).toBe(`apple:tx_offer:offer_redeemed:${PURCHASE_DATE}:offer_spring`);
+    }),
+  );
+
+  it.effect("derives price increase keys from renewal info when present", () =>
+    Effect.gen(function* () {
+      const key = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedRenewalInfo: Option.some(
+          renewalInfo({
+            currency: Option.some("USD"),
+            renewalDate: Option.some(RENEWAL_DATE),
+            renewalPrice: Option.some(12_990),
+          }),
+        ),
+        decodedTransaction: decoded({
+          expiresDate: Option.some(EXPIRES_DATE),
+          originalTransactionId: Option.some("original_tx"),
+          price: Option.some(9_990),
+          signedDate: Option.some(PURCHASE_DATE + 1_000),
+        }),
+        eventType: "price_increase",
+      });
+      expect(key).toBe(`apple:original_tx:price_increase:${RENEWAL_DATE}:12990:USD`);
+    }),
+  );
+
+  it.effect("falls back to transaction price data when renewal price is absent", () =>
+    Effect.gen(function* () {
+      const key = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedRenewalInfo: Option.some(
+          renewalInfo({
+            renewalDate: Option.some(RENEWAL_DATE),
+          }),
+        ),
+        decodedTransaction: decoded({
+          currency: Option.some("EUR"),
+          expiresDate: Option.some(EXPIRES_DATE),
+          originalTransactionId: Option.some("original_tx"),
+          price: Option.some(9_990),
+        }),
+        eventType: "price_increase",
+      });
+      expect(key).toBe(`apple:original_tx:price_increase:${RENEWAL_DATE}:9990:EUR`);
+    }),
+  );
+
+  it.effect("keeps auto-renew resume keys stable across Apple re-signs", () =>
+    Effect.gen(function* () {
+      const first = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          expiresDate: Option.some(EXPIRES_DATE),
+          originalTransactionId: Option.some("original_tx"),
+          signedDate: Option.some(PURCHASE_DATE + 1_000),
+        }),
+        eventType: "auto_renew_resumed",
+      });
+      const second = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          expiresDate: Option.some(EXPIRES_DATE),
+          originalTransactionId: Option.some("original_tx"),
+          signedDate: Option.some(PURCHASE_DATE + 86_400_000),
+        }),
+        eventType: "auto_renew_resumed",
+      });
+      expect(first).toBe(second);
+      expect(first).toBe(`apple:original_tx:auto_renew_resumed:${EXPIRES_DATE}`);
+    }),
+  );
+
+  it.effect("derives a revoke key distinct from a refund key with the same anchors", () =>
+    Effect.gen(function* () {
+      const refundKey = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          revocationDate: Option.some(REVOCATION_DATE),
+          transactionId: Option.some("tx_shared"),
+        }),
+        eventType: "refund",
+      });
+      const revokeKey = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: decoded({
+          revocationDate: Option.some(REVOCATION_DATE),
+          transactionId: Option.some("tx_shared"),
+        }),
+        eventType: "revoke",
+      });
+      expect(refundKey).not.toBe(revokeKey);
+    }),
+  );
+
+  it.effect("fails when transactionId is missing for a purchase event", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(
+        getAppStorePurchaseProcessingIdempotencyKey({
+          decodedTransaction: decoded({ purchaseDate: Option.some(PURCHASE_DATE) }),
+          eventType: "purchase",
+        }),
+      );
+      expect(error).toBeInstanceOf(AppStorePurchaseProcessingIdempotencyKeyDerivationError);
+      expect(error.missingField).toBe("transactionId");
+      expect(error.eventType).toBe("purchase");
+    }),
+  );
+
+  it.effect("fails when purchaseDate is missing for a purchase event", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(
+        getAppStorePurchaseProcessingIdempotencyKey({
+          decodedTransaction: decoded({ transactionId: Option.some("tx_no_date") }),
+          eventType: "purchase",
+        }),
+      );
+      expect(error).toBeInstanceOf(AppStorePurchaseProcessingIdempotencyKeyDerivationError);
+      expect(error.missingField).toBe("purchaseDate");
+      expect(error.providerTransactionId).toBe("tx_no_date");
+    }),
+  );
+
+  it.effect("fails when originalTransactionId is missing for an expired event", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(
+        getAppStorePurchaseProcessingIdempotencyKey({
+          decodedTransaction: decoded({ expiresDate: Option.some(EXPIRES_DATE) }),
+          eventType: "expired",
+        }),
+      );
+      expect(error.missingField).toBe("originalTransactionId");
+    }),
+  );
+
+  it.effect("fails when revocationDate is missing for a refund event", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(
+        getAppStorePurchaseProcessingIdempotencyKey({
+          decodedTransaction: decoded({ transactionId: Option.some("tx_no_revocation") }),
+          eventType: "refund",
+        }),
+      );
+      expect(error.missingField).toBe("revocationDate");
+    }),
+  );
+});
+
+describe("classifyAppStoreRevocation", () => {
+  it("classifies a FAMILY_REVOKE-tagged transaction as family_revoke", () => {
+    expect(
+      classifyAppStoreRevocation(
+        decoded({
+          inAppOwnershipType: Option.some(InAppOwnershipType.PURCHASED),
+          revocationType: Option.some(RevocationType.FAMILY_REVOKE),
+        }),
+      ),
+    ).toBe("family_revoke");
+  });
+
+  it("classifies a REFUND_FULL-tagged transaction as refund", () => {
+    expect(
+      classifyAppStoreRevocation(
+        decoded({ revocationType: Option.some(RevocationType.REFUND_FULL) }),
+      ),
+    ).toBe("refund");
+  });
+
+  it("classifies a REFUND_PRORATED-tagged transaction as refund", () => {
+    expect(
+      classifyAppStoreRevocation(
+        decoded({ revocationType: Option.some(RevocationType.REFUND_PRORATED) }),
+      ),
+    ).toBe("refund");
+  });
+
+  it("falls back to FAMILY_SHARED ownership when revocationType is absent", () => {
+    expect(
+      classifyAppStoreRevocation(
+        decoded({ inAppOwnershipType: Option.some(InAppOwnershipType.FAMILY_SHARED) }),
+      ),
+    ).toBe("family_revoke");
+  });
+
+  it("falls back to PURCHASED ownership as refund when revocationType is absent", () => {
+    expect(
+      classifyAppStoreRevocation(
+        decoded({ inAppOwnershipType: Option.some(InAppOwnershipType.PURCHASED) }),
+      ),
+    ).toBe("refund");
+  });
+
+  it("defaults to refund when both revocationType and inAppOwnershipType are absent", () => {
+    expect(classifyAppStoreRevocation(decoded())).toBe("refund");
+  });
+});
+
+describe("getAppStorePersonIdentifier", () => {
+  it("prefers appAccountToken when present", () => {
+    expect(
+      getAppStorePersonIdentifier(
+        decoded({
+          appAccountToken: Option.some("token_uuid"),
+          originalTransactionId: Option.some("original_tx"),
+          transactionId: Option.some("tx_decoded"),
+        }),
+      ),
+    ).toEqual(Option.some("token_uuid"));
+  });
+
+  it("falls back to originalTransactionId for parallel migrations", () => {
+    expect(
+      getAppStorePersonIdentifier(
+        decoded({
+          originalTransactionId: Option.some("original_tx"),
+          transactionId: Option.some("tx_decoded"),
+        }),
+      ),
+    ).toEqual(Option.some("original_tx"));
+  });
+
+  it("falls back to transactionId when nothing else is available", () => {
+    expect(
+      getAppStorePersonIdentifier(decoded({ transactionId: Option.some("tx_decoded") })),
+    ).toEqual(Option.some("tx_decoded"));
+  });
+
+  it("returns Option.none for a degenerate payload with no identifiers", () => {
+    expect(getAppStorePersonIdentifier(decoded())).toEqual(Option.none());
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/appStore/helpers.ts b/packages/core/src/services/paymentProviders/appStore/helpers.ts
new file mode 100644
index 000000000..cfe9fc08f
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/helpers.ts
@@ -0,0 +1,340 @@
+/**
+ * Pure data-shape helpers used by App Store payment-provider services. None of these
+ * touch the database or the Apple SDK directly — they operate on already-
+ * fetched rows and decoded transactions. Tests live alongside this file as
+ * `helpers.test.ts` and run without a runtime.
+ */
+
+import {
+  InAppOwnershipType,
+  type JWSRenewalInfoDecodedPayload,
+  type JWSTransactionDecodedPayload,
+  RevocationType,
+} from "@voidhash/app-store-server-sdk";
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type ProviderEnvironmentValue,
+  ProviderEnvironment,
+} from "@voidhash/db";
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import { parseISO4217CurrencyCode } from "@voidhash/lib/constants";
+import { Effect, Option } from "effect";
+
+import { PurchaseProcessingResult } from "../../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import {
+  AppStorePaymentProviderNotEnabledForFollowingBundleIdError,
+  AppStorePurchaseProcessingIdempotencyKeyDerivationError,
+} from "./errors.ts";
+
+/**
+ * Picks the (single) enabled App Store payment provider configuration for the
+ * given bundle id from a project's configurations. Fails with
+ * `AppStorePaymentProviderNotEnabledForFollowingBundleIdError` when no enabled configuration
+ * matches — that's not a database error, the rows simply don't grant access
+ * to this bundle.
+ */
+export const getActiveAppStorePaymentProviderConfiguration = (
+  configurations: ReadonlyArray<DbPaymentProviderConfiguration>,
+  bundleId: string,
+  paymentProviderKey: string,
+) =>
+  Effect.gen(function* () {
+    const configuration = configurations.find(
+      (paymentProviderConfiguration) =>
+        paymentProviderConfiguration.paymentProviderKey === paymentProviderKey &&
+        paymentProviderConfiguration.enabled,
+    );
+
+    if (!configuration) {
+      return yield* Effect.fail(
+        new AppStorePaymentProviderNotEnabledForFollowingBundleIdError({
+          bundleId,
+        }),
+      );
+    }
+
+    return configuration;
+  });
+
+/** Parses an optional App Store currency code without requiring it to exist. */
+export const parseAppStoreCurrency = (currency: Option.Option<string>) =>
+  Option.match(currency, {
+    onNone: () => Effect.succeedNone,
+    onSome: (value) => parseISO4217CurrencyCode(value).pipe(Effect.map(Option.some)),
+  });
+
+/**
+ * Apple's per-charge `transactionId` (paymentId) — stable across sources for a
+ * single payment, renewal, or refund event. Falls back to the StoreKit-observed
+ * id only when the decoded JWS lacks one (defensive — Apple always sets
+ * `transactionId` on a valid signed transaction).
+ */
+export const getAppStoreProviderTransactionId = (input: {
+  readonly decodedTransaction: JWSTransactionDecodedPayload;
+  readonly sdkTransactionId?: string;
+}): Option.Option<string> =>
+  Option.firstSomeOf([
+    input.decodedTransaction.transactionId,
+    Option.fromNullishOr(input.sdkTransactionId),
+  ]);
+
+/**
+ * Apple's `originalTransactionId` (subscriptionId) — stable across every
+ * renewal and refund within a subscription series. Absent for non-subscription
+ * charges.
+ */
+export const getAppStoreProviderSubscriptionId = (
+  decodedTransaction: JWSTransactionDecodedPayload,
+): Option.Option<string> => decodedTransaction.originalTransactionId;
+
+/**
+ * Picks the provider identifier used to resolve or create App Store people.
+ * Falls through `appAccountToken → originalTransactionId → transactionId`. The
+ * `originalTransactionId` / `transactionId` branches exist for the parallel-
+ * RevenueCat migration story (those purchases lack our SDK-set
+ * `appAccountToken`). Returns `None` when none are present — caller decides
+ * how to surface the degenerate case.
+ */
+export const getAppStorePersonIdentifier = (
+  decodedTransaction: JWSTransactionDecodedPayload,
+): Option.Option<string> =>
+  decodedTransaction.appAccountToken.pipe(
+    Option.orElse(() => decodedTransaction.originalTransactionId),
+    Option.orElse(() => decodedTransaction.transactionId),
+  );
+
+/**
+ * Builds the deterministic distinctId for the synthetic anonymous "stand-in"
+ * person an App Store webhook creates when a notification arrives before the
+ * SDK has confirmed the transaction. Keyed by `(environment, personIdentifier)`
+ * so each transaction series gets exactly one stand-in.
+ *
+ * The stand-in is additionally marked with `PersonOrigin.AppStoreWebhook` on
+ * its person row — that origin, not this distinctId, is the signal the SDK
+ * identity-rebind path uses to decide merge-vs-transfer.
+ */
+export const buildAppStoreWebhookAnonymousDistinctId = (input: {
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  readonly personIdentifier: string;
+}): string => {
+  const environmentLabel =
+    input.providerEnvironment === ProviderEnvironment.Sandbox ? "sandbox" : "production";
+  return `${ANONYMOUS_USER_ID_PREFIX}provider:apple-app-store:${environmentLabel}:${input.personIdentifier}`;
+};
+
+/** Whether a `revocationDate`-bearing transaction is a refund or a Family Sharing revoke. */
+export type AppStoreRevocationKind = "refund" | "family_revoke";
+
+/**
+ * Classifies a revoked App Store transaction as a refund vs. a Family Sharing
+ * revoke. The two look identical on the surface (`revocationDate` is set on
+ * both), but they have opposite revenue semantics: refunds reduce revenue,
+ * Family Sharing revokes don't move money.
+ *
+ * `revocationType` is Apple's authoritative signal. When it's absent (older
+ * history pre-dating the field), fall back to `inAppOwnershipType`: refunds
+ * are issued against the purchaser's `PURCHASED` transaction, never against
+ * the `FAMILY_SHARED` mirror.
+ *
+ * Callers must have already checked that `revocationDate` is present.
+ */
+export const classifyAppStoreRevocation = (
+  decoded: JWSTransactionDecodedPayload,
+): AppStoreRevocationKind => {
+  const revocationType = Option.getOrUndefined(decoded.revocationType);
+  if (revocationType === RevocationType.FAMILY_REVOKE) return "family_revoke";
+  if (
+    revocationType === RevocationType.REFUND_FULL ||
+    revocationType === RevocationType.REFUND_PRORATED
+  ) {
+    return "refund";
+  }
+  if (Option.getOrUndefined(decoded.inAppOwnershipType) === InAppOwnershipType.FAMILY_SHARED) {
+    return "family_revoke";
+  }
+  return "refund";
+};
+
+/** Creates an idempotent no-op result for Apple-valid payloads we cannot map. */
+export const makeIgnoredPurchaseProcessingResult = () =>
+  new PurchaseProcessingResult({
+    analyticsEventIds: [],
+    changedGrantIds: [],
+    idempotent: true,
+    personId: "",
+    purchaseId: Option.none(),
+    subscriptionId: Option.none(),
+    transactionId: Option.none(),
+  });
+
+/**
+ * Per-event idempotency-key event-types. Mirrors the `providerEventType`
+ * strings the App Store `record*` methods pass into PurchaseProcessingService.
+ */
+export type AppStorePurchaseProcessingEventType =
+  | "purchase"
+  | "renewal"
+  | "expired"
+  | "canceled"
+  | "refund"
+  | "refund_reversed"
+  | "revoke"
+  | "billing_retry"
+  | "extended"
+  | "renewal_pref_change"
+  | "offer_redeemed"
+  | "price_increase"
+  | "auto_renew_resumed";
+
+const REFUND_FULL_PERCENTAGE_MILLIUNITS = 100_000;
+
+/**
+ * Derives the per-event idempotency key used by PurchaseProcessingService to
+ * dedupe duplicate inbound deliveries of the same logical Apple event
+ * (webhook + SDK + reconciliation). Fails hard when the JWS lacks the inputs
+ * we'd need for a stable key — this is always an upstream bug, never a normal
+ * runtime state, so we propagate it instead of silently degrading.
+ *
+ * Key shape: `apple:${anchorId}:${eventType}:${anchorDateMs}[:${extra}]`
+ *
+ * Per-event anchor (id + date), chosen to be:
+ * - stable across `webhook | sdk | reconciliation` (rules out `signedDate`
+ *   which Apple re-stamps per re-fetch, and `notificationUUID` which only
+ *   exists on the webhook path),
+ * - unique per logical event (refunds add `revocationPercentage` so two
+ *   partial refunds against the same `transactionId` stay distinct).
+ *
+ * | eventType        | anchor id              | anchor date         | extra                  |
+ * | ---------------- | ---------------------- | ------------------- | ---------------------- |
+ * | purchase         | transactionId          | purchaseDate        | —                      |
+ * | renewal          | transactionId          | purchaseDate        | —                      |
+ * | expired          | originalTransactionId  | expiresDate         | —                      |
+ * | canceled         | originalTransactionId  | expiresDate         | —                      |
+ * | refund           | transactionId          | revocationDate      | revocationPercentage   |
+ * | revoke           | transactionId          | revocationDate      | —                      |
+ * | refund_reversed  | transactionId          | purchaseDate        | —                      |
+ * | billing_retry    | originalTransactionId  | expiresDate         | —                      |
+ * | extended         | originalTransactionId  | expiresDate         | —                      |
+ * | renewal_pref_change | originalTransactionId | renewalDate/expiresDate | productId          |
+ * | offer_redeemed   | transactionId          | purchaseDate        | offerIdentifier        |
+ * | price_increase   | originalTransactionId  | renewalDate/expiresDate | price + currency    |
+ * | auto_renew_resumed | originalTransactionId | renewalDate/expiresDate | —                  |
+ */
+export const getAppStorePurchaseProcessingIdempotencyKey = (input: {
+  readonly decodedTransaction: JWSTransactionDecodedPayload;
+  readonly decodedRenewalInfo?: Option.Option<JWSRenewalInfoDecodedPayload>;
+  readonly eventType: AppStorePurchaseProcessingEventType;
+  readonly sdkTransactionId?: string;
+}): Effect.Effect<string, AppStorePurchaseProcessingIdempotencyKeyDerivationError> =>
+  Effect.gen(function* () {
+    const transaction = input.decodedTransaction;
+    const renewalInfo = input.decodedRenewalInfo
+      ? Option.getOrUndefined(input.decodedRenewalInfo)
+      : undefined;
+    const transactionIdOp = getAppStoreProviderTransactionId({
+      decodedTransaction: transaction,
+      sdkTransactionId: input.sdkTransactionId,
+    });
+    const originalTransactionIdOp = getAppStoreProviderSubscriptionId(transaction);
+    const renewalOrExpiryDate = Option.firstSomeOf([
+      renewalInfo?.renewalDate ?? Option.none<number>(),
+      transaction.expiresDate,
+    ]);
+
+    const fail = (missingField: string) =>
+      new AppStorePurchaseProcessingIdempotencyKeyDerivationError({
+        eventType: input.eventType,
+        missingField,
+        providerTransactionId: Option.getOrUndefined(transactionIdOp),
+      });
+
+    switch (input.eventType) {
+      case "purchase":
+      case "renewal": {
+        if (Option.isNone(transactionIdOp)) return yield* fail("transactionId");
+        if (Option.isNone(transaction.purchaseDate)) return yield* fail("purchaseDate");
+        return `apple:${transactionIdOp.value}:${input.eventType}:${transaction.purchaseDate.value}`;
+      }
+      case "expired":
+      case "canceled": {
+        if (Option.isNone(originalTransactionIdOp)) return yield* fail("originalTransactionId");
+        if (Option.isNone(transaction.expiresDate)) return yield* fail("expiresDate");
+        return `apple:${originalTransactionIdOp.value}:${input.eventType}:${transaction.expiresDate.value}`;
+      }
+      case "refund": {
+        if (Option.isNone(transactionIdOp)) return yield* fail("transactionId");
+        if (Option.isNone(transaction.revocationDate)) return yield* fail("revocationDate");
+        const percentage = Option.getOrElse(
+          transaction.revocationPercentage,
+          () => REFUND_FULL_PERCENTAGE_MILLIUNITS,
+        );
+        return `apple:${transactionIdOp.value}:refund:${transaction.revocationDate.value}:${percentage}`;
+      }
+      case "revoke": {
+        if (Option.isNone(transactionIdOp)) return yield* fail("transactionId");
+        if (Option.isNone(transaction.revocationDate)) return yield* fail("revocationDate");
+        return `apple:${transactionIdOp.value}:revoke:${transaction.revocationDate.value}`;
+      }
+      case "refund_reversed": {
+        if (Option.isNone(transactionIdOp)) return yield* fail("transactionId");
+        if (Option.isNone(transaction.purchaseDate)) return yield* fail("purchaseDate");
+        return `apple:${transactionIdOp.value}:refund_reversed:${transaction.purchaseDate.value}`;
+      }
+      case "billing_retry": {
+        if (Option.isNone(originalTransactionIdOp)) return yield* fail("originalTransactionId");
+        if (Option.isNone(transaction.expiresDate)) return yield* fail("expiresDate");
+        return `apple:${originalTransactionIdOp.value}:billing_retry:${transaction.expiresDate.value}`;
+      }
+      case "extended": {
+        if (Option.isNone(originalTransactionIdOp)) return yield* fail("originalTransactionId");
+        if (Option.isNone(transaction.expiresDate)) return yield* fail("expiresDate");
+        return `apple:${originalTransactionIdOp.value}:extended:${transaction.expiresDate.value}`;
+      }
+      case "renewal_pref_change": {
+        if (Option.isNone(originalTransactionIdOp)) return yield* fail("originalTransactionId");
+        if (Option.isNone(renewalOrExpiryDate)) return yield* fail("renewalDate");
+        const productId = Option.firstSomeOf([
+          renewalInfo?.autoRenewProductId ?? Option.none<string>(),
+          transaction.productId,
+        ]);
+        if (Option.isNone(productId)) return yield* fail("productId");
+        return `apple:${originalTransactionIdOp.value}:renewal_pref_change:${renewalOrExpiryDate.value}:${productId.value}`;
+      }
+      case "offer_redeemed": {
+        if (Option.isNone(transactionIdOp)) return yield* fail("transactionId");
+        if (Option.isNone(transaction.purchaseDate)) return yield* fail("purchaseDate");
+        const offer = Option.getOrElse(
+          Option.firstSomeOf([
+            transaction.offerIdentifier,
+            renewalInfo?.offerIdentifier ?? Option.none<string>(),
+          ]),
+          () => "",
+        );
+        return `apple:${transactionIdOp.value}:offer_redeemed:${transaction.purchaseDate.value}:${offer}`;
+      }
+      case "price_increase": {
+        if (Option.isNone(originalTransactionIdOp)) return yield* fail("originalTransactionId");
+        if (Option.isNone(renewalOrExpiryDate)) return yield* fail("renewalDate");
+        const price = Option.getOrElse(
+          Option.firstSomeOf([
+            renewalInfo?.renewalPrice ?? Option.none<number>(),
+            transaction.price,
+          ]),
+          () => 0,
+        );
+        const currency = Option.getOrElse(
+          Option.firstSomeOf([
+            renewalInfo?.currency ?? Option.none<string>(),
+            transaction.currency,
+          ]),
+          () => "",
+        );
+        return `apple:${originalTransactionIdOp.value}:price_increase:${renewalOrExpiryDate.value}:${price}:${currency}`;
+      }
+      case "auto_renew_resumed": {
+        if (Option.isNone(originalTransactionIdOp)) return yield* fail("originalTransactionId");
+        if (Option.isNone(renewalOrExpiryDate)) return yield* fail("renewalDate");
+        return `apple:${originalTransactionIdOp.value}:auto_renew_resumed:${renewalOrExpiryDate.value}`;
+      }
+    }
+  });
diff --git a/packages/core/src/services/paymentProviders/appStore/money.test.ts b/packages/core/src/services/paymentProviders/appStore/money.test.ts
new file mode 100644
index 000000000..db6a7d603
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/money.test.ts
@@ -0,0 +1,324 @@
+import {
+  InAppOwnershipType,
+  type JWSTransactionDecodedPayload,
+  Type as AppleTransactionType,
+} from "@voidhash/app-store-server-sdk";
+import { Effect, Option } from "effect";
+
+import { describe, expect, it } from "../../../testing/effect-vitest.ts";
+import {
+  type FxRateLookupShape,
+  buildAppStoreMoney,
+  estimateAppleTaxAmount,
+  resolveAppleCommissionRateBps,
+} from "./money.ts";
+
+const decoded = (
+  overrides: Partial<JWSTransactionDecodedPayload> = {},
+): JWSTransactionDecodedPayload =>
+  ({
+    advancedCommerceInfo: Option.none(),
+    appAccountToken: Option.none(),
+    appTransactionId: Option.none(),
+    billingPlanType: Option.none(),
+    bundleId: Option.none(),
+    commitmentInfo: Option.none(),
+    currency: Option.none(),
+    environment: Option.none(),
+    expiresDate: Option.none(),
+    inAppOwnershipType: Option.none(),
+    isUpgraded: Option.none(),
+    offerDiscountType: Option.none(),
+    offerIdentifier: Option.none(),
+    offerPeriod: Option.none(),
+    offerType: Option.none(),
+    originalPurchaseDate: Option.none(),
+    originalTransactionId: Option.none(),
+    price: Option.none(),
+    productId: Option.none(),
+    purchaseDate: Option.none(),
+    quantity: Option.none(),
+    revocationDate: Option.none(),
+    revocationPercentage: Option.none(),
+    revocationReason: Option.none(),
+    revocationType: Option.none(),
+    signedDate: Option.none(),
+    storefront: Option.none(),
+    storefrontId: Option.none(),
+    subscriptionGroupIdentifier: Option.none(),
+    transactionId: Option.none(),
+    transactionReason: Option.none(),
+    type: Option.none(),
+    webOrderLineItemId: Option.none(),
+    ...overrides,
+  }) satisfies JWSTransactionDecodedPayload;
+
+const sbpEnabled = {
+  appleSmallBusinessProgramEndDate: undefined,
+  appleSmallBusinessProgramHasEndDate: false,
+  appleSmallBusinessProgramStartDate: "2025-01-01",
+};
+
+const sbpDisabled = {
+  appleSmallBusinessProgramEndDate: undefined,
+  appleSmallBusinessProgramHasEndDate: false,
+  appleSmallBusinessProgramStartDate: undefined,
+};
+
+const stubFxAt = (rate: number): FxRateLookupShape => ({
+  getUsdRate: (input) =>
+    Effect.succeed(
+      Option.some({
+        asOfDate: input.asOf,
+        currency: input.currency,
+        rate,
+        source: "test",
+      }),
+    ),
+});
+
+const fxNone: FxRateLookupShape = {
+  getUsdRate: () => Effect.succeed(Option.none()),
+};
+
+describe("resolveAppleCommissionRateBps", () => {
+  it("returns 30% standard when neither SBP nor year-2 rule applies", () => {
+    const rate = resolveAppleCommissionRateBps({
+      decoded: decoded({
+        originalPurchaseDate: Option.some(Date.UTC(2025, 11, 1)),
+        purchaseDate: Option.some(Date.UTC(2026, 0, 1)),
+        type: Option.some(AppleTransactionType.AUTO_RENEWABLE_SUBSCRIPTION),
+      }),
+      globalConfiguration: sbpDisabled,
+      occurredAt: new Date("2026-01-01"),
+    });
+    expect(rate).toBe(3_000);
+  });
+
+  it("returns 15% when SBP is active at the transaction date", () => {
+    const rate = resolveAppleCommissionRateBps({
+      decoded: decoded({
+        type: Option.some(AppleTransactionType.NON_CONSUMABLE),
+      }),
+      globalConfiguration: sbpEnabled,
+      occurredAt: new Date("2026-01-01"),
+    });
+    expect(rate).toBe(1_500);
+  });
+
+  it("returns 15% for an auto-renewable subscription past its first year", () => {
+    const rate = resolveAppleCommissionRateBps({
+      decoded: decoded({
+        originalPurchaseDate: Option.some(Date.UTC(2024, 5, 1)),
+        purchaseDate: Option.some(Date.UTC(2026, 0, 1)),
+        type: Option.some(AppleTransactionType.AUTO_RENEWABLE_SUBSCRIPTION),
+      }),
+      globalConfiguration: sbpDisabled,
+      occurredAt: new Date("2026-01-01"),
+    });
+    expect(rate).toBe(1_500);
+  });
+
+  it("ignores the year-2 rule for non-subscription product types", () => {
+    const rate = resolveAppleCommissionRateBps({
+      decoded: decoded({
+        originalPurchaseDate: Option.some(Date.UTC(2024, 5, 1)),
+        purchaseDate: Option.some(Date.UTC(2026, 0, 1)),
+        type: Option.some(AppleTransactionType.CONSUMABLE),
+      }),
+      globalConfiguration: sbpDisabled,
+      occurredAt: new Date("2026-01-01"),
+    });
+    expect(rate).toBe(3_000);
+  });
+
+  it("returns 30% when the transaction date precedes the SBP start date", () => {
+    const rate = resolveAppleCommissionRateBps({
+      decoded: decoded({}),
+      globalConfiguration: sbpEnabled,
+      occurredAt: new Date("2024-01-01"),
+    });
+    expect(rate).toBe(3_000);
+  });
+});
+
+describe("estimateAppleTaxAmount", () => {
+  it("returns 0 for US storefront (no VAT in JWS price)", () => {
+    expect(
+      estimateAppleTaxAmount({
+        grossAmount: 9_99,
+        storefront: Option.some("USA"),
+      }),
+    ).toBe(0);
+  });
+
+  it("returns 0 when the storefront is unknown", () => {
+    expect(
+      estimateAppleTaxAmount({
+        grossAmount: 9_99,
+        storefront: Option.some("ZZZ"),
+      }),
+    ).toBe(0);
+  });
+
+  it("returns 0 when the storefront is omitted", () => {
+    expect(
+      estimateAppleTaxAmount({
+        grossAmount: 9_99,
+        storefront: Option.none(),
+      }),
+    ).toBe(0);
+  });
+
+  it("backs out 19% VAT from a German storefront gross", () => {
+    // gross of 1190 minor units with 19% VAT → tax = 1190 × 0.19 / 1.19 = 190.
+    expect(
+      estimateAppleTaxAmount({
+        grossAmount: 1_190,
+        storefront: Option.some("DEU"),
+      }),
+    ).toBe(190);
+  });
+
+  it("backs out 20% VAT from a UK storefront gross", () => {
+    // gross of 1200 with 20% VAT → tax = 200.
+    expect(
+      estimateAppleTaxAmount({
+        grossAmount: 1_200,
+        storefront: Option.some("GBR"),
+      }),
+    ).toBe(200);
+  });
+});
+
+describe("buildAppStoreMoney", () => {
+  it("returns Option.none() when price is missing", async () => {
+    const result = await Effect.runPromise(
+      buildAppStoreMoney({
+        decoded: decoded({ currency: Option.some("USD") }),
+        fxRateService: stubFxAt(1_000_000),
+        globalConfiguration: sbpDisabled,
+        occurredAt: new Date("2026-01-01"),
+      }),
+    );
+    expect(Option.isNone(result)).toBe(true);
+  });
+
+  it("returns Option.none() when currency is missing", async () => {
+    const result = await Effect.runPromise(
+      buildAppStoreMoney({
+        decoded: decoded({ price: Option.some(9_990) }),
+        fxRateService: stubFxAt(1_000_000),
+        globalConfiguration: sbpDisabled,
+        occurredAt: new Date("2026-01-01"),
+      }),
+    );
+    expect(Option.isNone(result)).toBe(true);
+  });
+
+  it("returns Option.none() when the currency is not a valid ISO 4217 code", async () => {
+    const result = await Effect.runPromise(
+      buildAppStoreMoney({
+        decoded: decoded({
+          currency: Option.some("ZZ"),
+          price: Option.some(9_990),
+        }),
+        fxRateService: stubFxAt(1_000_000),
+        globalConfiguration: sbpDisabled,
+        occurredAt: new Date("2026-01-01"),
+      }),
+    );
+    expect(Option.isNone(result)).toBe(true);
+  });
+
+  it("computes gross/commission/proceeds and a USD mirror for a standard USD purchase", async () => {
+    const result = await Effect.runPromise(
+      buildAppStoreMoney({
+        decoded: decoded({
+          currency: Option.some("USD"),
+          originalPurchaseDate: Option.some(Date.UTC(2025, 11, 1)),
+          price: Option.some(9_990), // 999 cents in milliunits
+          purchaseDate: Option.some(Date.UTC(2026, 0, 1)),
+          storefront: Option.some("USA"),
+          type: Option.some(AppleTransactionType.AUTO_RENEWABLE_SUBSCRIPTION),
+        }),
+        fxRateService: stubFxAt(1_000_000),
+        globalConfiguration: sbpDisabled,
+        occurredAt: new Date("2026-01-01"),
+      }),
+    );
+    expect(Option.isSome(result)).toBe(true);
+    const money = Option.getOrThrow(result);
+    expect(money.currency).toBe("USD");
+    expect(money.grossAmount).toBe(999);
+    // 30% commission → 300
+    expect(money.storeCommissionAmount).toBe(300);
+    expect(money.taxAmount).toBe(0);
+    expect(money.proceedsAmount).toBe(699);
+    expect(money.proceedsAfterTaxAmount).toBe(699);
+    const usd = Option.getOrThrow(money.usd);
+    expect(usd.grossAmount).toBe(999);
+    expect(usd.proceedsAmount).toBe(699);
+  });
+
+  it("scales every amount proportionally for a partial refund", async () => {
+    const result = await Effect.runPromise(
+      buildAppStoreMoney({
+        decoded: decoded({
+          currency: Option.some("USD"),
+          price: Option.some(10_000), // 1000 cents in milliunits
+          revocationPercentage: Option.some(50_000), // 50%
+          storefront: Option.some("USA"),
+        }),
+        fxRateService: stubFxAt(1_000_000),
+        globalConfiguration: sbpDisabled,
+        occurredAt: new Date("2026-01-01"),
+      }),
+    );
+    const money = Option.getOrThrow(result);
+    expect(money.grossAmount).toBe(500);
+    expect(money.storeCommissionAmount).toBe(150);
+    expect(money.proceedsAmount).toBe(350);
+  });
+
+  it("zeroes commission for family-shared transactions but keeps gross", async () => {
+    const result = await Effect.runPromise(
+      buildAppStoreMoney({
+        decoded: decoded({
+          currency: Option.some("USD"),
+          inAppOwnershipType: Option.some(InAppOwnershipType.FAMILY_SHARED),
+          price: Option.some(9_990),
+          storefront: Option.some("USA"),
+          type: Option.some(AppleTransactionType.AUTO_RENEWABLE_SUBSCRIPTION),
+        }),
+        fxRateService: stubFxAt(1_000_000),
+        globalConfiguration: sbpDisabled,
+        occurredAt: new Date("2026-01-01"),
+      }),
+    );
+    const money = Option.getOrThrow(result);
+    expect(money.grossAmount).toBe(999);
+    expect(money.storeCommissionAmount).toBe(0);
+    expect(money.proceedsAmount).toBe(999);
+  });
+
+  it("leaves the USD mirror absent when the FX service has no rate", async () => {
+    const result = await Effect.runPromise(
+      buildAppStoreMoney({
+        decoded: decoded({
+          currency: Option.some("EUR"),
+          price: Option.some(9_990),
+          storefront: Option.some("DEU"),
+        }),
+        fxRateService: fxNone,
+        globalConfiguration: sbpDisabled,
+        occurredAt: new Date("2026-01-01"),
+      }),
+    );
+    const money = Option.getOrThrow(result);
+    expect(money.currency).toBe("EUR");
+    expect(Option.isNone(money.usd)).toBe(true);
+    // gross 999, German VAT 19%: 999 × 1900 / 11900 = 159.504 → 160 (rounded)
+    expect(money.taxAmount).toBe(160);
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/appStore/money.ts b/packages/core/src/services/paymentProviders/appStore/money.ts
new file mode 100644
index 000000000..7b31938fa
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/money.ts
@@ -0,0 +1,265 @@
+/**
+ * Provider-specific money normalization for Apple App Store transactions.
+ *
+ * Translates the single `price` field on a decoded JWS into the five-amount
+ * breakdown the platform-neutral purchase-processing layer expects:
+ *
+ *   gross  = price                                  (what the customer paid)
+ *   tax    = back-computed from storefront VAT      (Apple does not break out)
+ *   comm.  = gross × commissionRate                 (15% SBP / year-2+, else 30%)
+ *   proc.  = gross - comm.
+ *   procT. = gross - comm. - tax
+ *
+ * The same module owns the FX conversion to USD via {@link FxRateService}.
+ * Inputs that are missing on the JWS (no price, no currency) yield
+ * `Option.none()` so downstream layers can leave money fields blank rather
+ * than emit zeros.
+ */
+import {
+  InAppOwnershipType,
+  type JWSTransactionDecodedPayload,
+  Type as AppleTransactionType,
+} from "@voidhash/app-store-server-sdk";
+import { getStorefrontVatRateBps, parseISO4217CurrencyCode } from "@voidhash/lib/constants";
+import { Effect, Option } from "effect";
+
+import {
+  PurchaseProcessingMoney,
+  PurchaseProcessingMoneyUsd,
+} from "../../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import { CurrencyCode, ExchangeRate, MinorAmount } from "../../../domain/shared/Money.ts";
+import type { DbError } from "@voidhash/db";
+
+import { FX_RATE_PRECISION, type FxRateLookup } from "../../../domain/fxRate/FxRate.ts";
+import type { FxRateServiceError } from "../../fxRates/FxRateService.ts";
+
+/** Apple's `price` field on a decoded JWS is in milliunits (10× minor units). */
+const APPLE_PRICE_DENOMINATOR = 10;
+
+/** Apple's `revocationPercentage` is in milliunits (100% = 100_000). */
+const APPLE_REVOCATION_FULL = 100_000;
+
+/** Commission rates in basis points. */
+const APPLE_COMMISSION_STANDARD_BPS = 3_000; // 30.00%
+const APPLE_COMMISSION_REDUCED_BPS = 1_500; // 15.00%
+
+/** One Gregorian year in milliseconds (365.25 days). Used for the year-2+ rule. */
+const ONE_YEAR_MS = Math.round(365.25 * 24 * 60 * 60 * 1_000);
+
+/**
+ * Subset of the App Store global configuration needed to compute the
+ * commission rate. Defined structurally so this module doesn't pull in the
+ * full payment-provider configuration shape (the broader type lives in
+ * `payment-provider.ts` and is internal there).
+ */
+export interface AppleCommissionConfiguration {
+  readonly appleSmallBusinessProgramStartDate?: string;
+  readonly appleSmallBusinessProgramHasEndDate: boolean;
+  readonly appleSmallBusinessProgramEndDate?: string;
+}
+
+const isSmallBusinessProgramActiveAt = (
+  config: AppleCommissionConfiguration,
+  at: Date,
+): boolean => {
+  const startStr = config.appleSmallBusinessProgramStartDate;
+  if (!startStr) return false;
+  const start = new Date(startStr);
+  if (Number.isNaN(start.getTime())) return false;
+  if (at < start) return false;
+  if (!config.appleSmallBusinessProgramHasEndDate) return true;
+  const endStr = config.appleSmallBusinessProgramEndDate;
+  if (!endStr) return true;
+  const end = new Date(endStr);
+  if (Number.isNaN(end.getTime())) return true;
+  return at <= end;
+};
+
+const isYearTwoOrLaterAutoRenewable = (decoded: JWSTransactionDecodedPayload): boolean => {
+  const type = Option.getOrUndefined(decoded.type);
+  if (type !== AppleTransactionType.AUTO_RENEWABLE_SUBSCRIPTION) return false;
+  const original = Option.getOrUndefined(decoded.originalPurchaseDate);
+  const current = Option.getOrUndefined(decoded.purchaseDate);
+  if (original === undefined || current === undefined) return false;
+  return current - original > ONE_YEAR_MS;
+};
+
+/**
+ * Returns Apple's commission rate in basis points for a transaction. 15% when
+ * either (a) the bundle was enrolled in the Small Business Program at the
+ * transaction date, or (b) the transaction is an auto-renewable subscription
+ * whose `originalPurchaseDate` was more than a year before `purchaseDate`
+ * (Apple's automatic reduction after year 1). Else 30%.
+ */
+export const resolveAppleCommissionRateBps = (input: {
+  readonly decoded: JWSTransactionDecodedPayload;
+  readonly globalConfiguration: AppleCommissionConfiguration;
+  readonly occurredAt: Date;
+}): number => {
+  if (isSmallBusinessProgramActiveAt(input.globalConfiguration, input.occurredAt)) {
+    return APPLE_COMMISSION_REDUCED_BPS;
+  }
+  if (isYearTwoOrLaterAutoRenewable(input.decoded)) {
+    return APPLE_COMMISSION_REDUCED_BPS;
+  }
+  return APPLE_COMMISSION_STANDARD_BPS;
+};
+
+/**
+ * Estimates the VAT / sales tax baked into `grossAmount` using the storefront
+ * country's published rate. Apple does not include a tax breakdown in the JWS
+ * — where Apple is merchant of record the price the customer paid already
+ * has tax included, so we back out:
+ *
+ *   gross = taxedBase × (1 + rate)
+ *   tax   = gross × rate / (1 + rate)
+ *
+ * Returns 0 for unknown storefronts (most US sales tax falls here; Apple
+ * handles US sales tax outside the JWS).
+ */
+export const estimateAppleTaxAmount = (input: {
+  readonly grossAmount: number;
+  readonly storefront: Option.Option<string>;
+}): number => {
+  const rateBps = getStorefrontVatRateBps(Option.getOrUndefined(input.storefront));
+  if (rateBps <= 0) return 0;
+  // tax = gross × rate / (1 + rate); rate is `rateBps / 10_000` so
+  // tax = gross × rateBps / (10_000 + rateBps).
+  const numerator = input.grossAmount * rateBps;
+  const denominator = 10_000 + rateBps;
+  return Math.round(numerator / denominator);
+};
+
+const scaleAmountByRefundPercentage = (
+  amount: number,
+  refundPercentageMilliunits: number,
+): number => {
+  if (refundPercentageMilliunits >= APPLE_REVOCATION_FULL) return amount;
+  if (refundPercentageMilliunits <= 0) return 0;
+  return Math.round((amount * refundPercentageMilliunits) / APPLE_REVOCATION_FULL);
+};
+
+const convertToUsd = (amount: number, rate: number): number =>
+  Math.round((amount * rate) / FX_RATE_PRECISION);
+
+const buildUsdBreakdown = (
+  amounts: {
+    readonly grossAmount: number;
+    readonly storeCommissionAmount: number;
+    readonly taxAmount: number;
+    readonly proceedsAmount: number;
+    readonly proceedsAfterTaxAmount: number;
+  },
+  exchangeRate: number,
+): PurchaseProcessingMoneyUsd =>
+  new PurchaseProcessingMoneyUsd({
+    exchangeRate: ExchangeRate.make(exchangeRate),
+    grossAmount: MinorAmount.make(convertToUsd(amounts.grossAmount, exchangeRate)),
+    proceedsAfterTaxAmount: MinorAmount.make(
+      convertToUsd(amounts.proceedsAfterTaxAmount, exchangeRate),
+    ),
+    proceedsAmount: MinorAmount.make(convertToUsd(amounts.proceedsAmount, exchangeRate)),
+    storeCommissionAmount: MinorAmount.make(
+      convertToUsd(amounts.storeCommissionAmount, exchangeRate),
+    ),
+    taxAmount: MinorAmount.make(convertToUsd(amounts.taxAmount, exchangeRate)),
+  });
+
+/**
+ * Subset of `FxRateService` that {@link buildAppStoreMoney} needs. Defined
+ * structurally so callers can pass the already-resolved instance — avoids
+ * leaking the `FxRateService` requirement into every method that calls this
+ * helper.
+ */
+export interface FxRateLookupShape {
+  readonly getUsdRate: (input: {
+    readonly currency: string;
+    readonly asOf: Date;
+  }) => Effect.Effect<Option.Option<FxRateLookup>, FxRateServiceError | DbError>;
+}
+
+/**
+ * Builds the full money record for an App Store JWS transaction.
+ *
+ * Returns `Option.none()` when the JWS omits either `price` or `currency` —
+ * downstream layers leave the money fields blank in that case rather than
+ * write zeros. Returns the populated record with `usd: Option.none()` when
+ * the FX service has no rate for the currency on the transaction date; the
+ * caller still gets gross/commission/tax/proceeds in the original currency.
+ *
+ * Partial refunds (`revocationPercentage < 100_000`) scale all five amounts
+ * proportionally so the analytics event carries the actual delta rather than
+ * the full-purchase amounts.
+ */
+export const buildAppStoreMoney = (input: {
+  readonly decoded: JWSTransactionDecodedPayload;
+  readonly globalConfiguration: AppleCommissionConfiguration;
+  readonly occurredAt: Date;
+  readonly fxRateService: FxRateLookupShape;
+}) =>
+  Effect.gen(function* () {
+    const fxRateService = input.fxRateService;
+
+    const priceOp = input.decoded.price;
+    const currencyRawOp = input.decoded.currency;
+    if (Option.isNone(priceOp) || Option.isNone(currencyRawOp)) {
+      return Option.none<PurchaseProcessingMoney>();
+    }
+    const currencyOp = yield* parseISO4217CurrencyCode(currencyRawOp.value).pipe(
+      Effect.map(Option.some),
+      Effect.catchTag("InvalidISO4217CurrencyCodeError", () =>
+        Effect.succeed(Option.none<string>()),
+      ),
+    );
+    if (Option.isNone(currencyOp)) {
+      return Option.none<PurchaseProcessingMoney>();
+    }
+    const currency = currencyOp.value;
+    const storefront = input.decoded.storefront;
+
+    const fullGross = Math.round(priceOp.value / APPLE_PRICE_DENOMINATOR);
+    const refundPercentage = Option.getOrElse(
+      input.decoded.revocationPercentage,
+      () => APPLE_REVOCATION_FULL,
+    );
+    const grossAmount = scaleAmountByRefundPercentage(fullGross, refundPercentage);
+    const commissionBps = resolveAppleCommissionRateBps({
+      decoded: input.decoded,
+      globalConfiguration: input.globalConfiguration,
+      occurredAt: input.occurredAt,
+    });
+    // Family-shared transactions never generate revenue for us — Apple does
+    // not credit the developer for the family member's grant. We still record
+    // the gross so analytics can see the entitlement, but commission and
+    // proceeds are zero. The `family_revoke` analytics path is the only
+    // negative delta we ever emit for this kind of transaction.
+    const isFamilyShared =
+      Option.getOrUndefined(input.decoded.inAppOwnershipType) === InAppOwnershipType.FAMILY_SHARED;
+    const storeCommissionAmount = isFamilyShared
+      ? 0
+      : Math.round((grossAmount * commissionBps) / 10_000);
+    const taxAmount = estimateAppleTaxAmount({ grossAmount, storefront });
+    const proceedsAmount = grossAmount - storeCommissionAmount;
+    const proceedsAfterTaxAmount = proceedsAmount - taxAmount;
+
+    const fxLookup = yield* fxRateService.getUsdRate({ asOf: input.occurredAt, currency });
+    const usd = Option.map(fxLookup, (lookup) =>
+      buildUsdBreakdown(
+        { grossAmount, proceedsAfterTaxAmount, proceedsAmount, storeCommissionAmount, taxAmount },
+        lookup.rate,
+      ),
+    );
+
+    return Option.some(
+      new PurchaseProcessingMoney({
+        currency: CurrencyCode.make(currency),
+        grossAmount: MinorAmount.make(grossAmount),
+        proceedsAfterTaxAmount: MinorAmount.make(proceedsAfterTaxAmount),
+        proceedsAmount: MinorAmount.make(proceedsAmount),
+        storeCommissionAmount: MinorAmount.make(storeCommissionAmount),
+        storefront,
+        taxAmount: MinorAmount.make(taxAmount),
+        usd,
+      }),
+    );
+  });
diff --git a/packages/core/src/services/paymentProviders/appStore/payment-provider-service-queries.ts b/packages/core/src/services/paymentProviders/appStore/payment-provider-service-queries.ts
new file mode 100644
index 000000000..827ed9e7c
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/payment-provider-service-queries.ts
@@ -0,0 +1,554 @@
+/**
+ * DB-bound primitives for {@link AppStorePaymentProviderService}. App Store
+ * owns provider/source-specific purchase identity resolution, so this module
+ * contains both App Store configuration reads and App Store identity lookups.
+ *
+ * Per the queries-don't-cross-services rule, these lookups do not reach into
+ * other services' query modules. `Db` is yielded fresh inside each method so
+ * that queries route to the active transaction when one is in scope.
+ */
+import {
+  type InsertPaymentProviderNotificationProcessed,
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type PaymentProviderConfigurationProduct as DbPaymentProviderConfigurationProduct,
+  type PaymentProviderNotificationProcessed as DbPaymentProviderNotificationProcessed,
+  and,
+  eq,
+  lt,
+  PersonOrigin,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  paymentProviderNotificationProcessed,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  projects,
+  purchases,
+  sql,
+  subscriptions,
+  transactions,
+  type Project as DbProject,
+  type DbError,
+  Db,
+} from "@voidhash/db";
+import { Effect, Layer, Option, Context } from "effect";
+
+/** Bound on `mergedIntoPersonId` chain-following — cycle/runaway backstop. */
+const MAX_MERGE_CHAIN_HOPS = 10;
+
+const make = Effect.gen(function* () {
+  const db = yield* Db;
+
+  const findPaymentProviderConfigurationsByProjectId = Effect.fn(
+    "findPaymentProviderConfigurationsByProjectId",
+  )(
+    (
+      projectId: string,
+    ): Effect.Effect<ReadonlyArray<DbPaymentProviderConfiguration>, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderConfigurations.findMany({
+          where: {
+            projectId,
+            deletedAt: { isNull: true },
+          },
+        });
+      }),
+  );
+
+  const findPaymentProviderConfigurationProductByPrimaryKey = Effect.fn(
+    "findPaymentProviderConfigurationProductByPrimaryKey",
+  )(
+    (input: {
+      readonly paymentProviderConfigurationId: string;
+      readonly providerProductKey: string;
+    }): Effect.Effect<DbPaymentProviderConfigurationProduct | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderConfigurationProducts.findFirst({
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            providerProductKey: input.providerProductKey,
+            isActive: true,
+          },
+        });
+      }),
+  );
+
+  const findPaymentProviderConfigurationById = Effect.fn("findPaymentProviderConfigurationById")(
+    (id: string): Effect.Effect<DbPaymentProviderConfiguration | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderConfigurations.findFirst({
+          where: {
+            id,
+            deletedAt: { isNull: true },
+          },
+        });
+      }),
+  );
+
+  const findProjectById = Effect.fn("findProjectById")(
+    (id: string): Effect.Effect<DbProject | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.projects.findFirst({
+          where: { id },
+        });
+      }),
+  );
+
+  const findPersonIdentityByDistinctId = Effect.fn("findPersonIdentityByDistinctId")(
+    (input: {
+      readonly projectId: string;
+      readonly distinctId: string;
+    }): Effect.Effect<Option.Option<{ readonly personId: string }>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personIdentities.findFirst({
+          columns: { personId: true },
+          where: {
+            projectId: input.projectId,
+            distinctId: input.distinctId,
+          },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  const findExternalIdentifier = Effect.fn("findExternalIdentifier")(
+    (input: {
+      readonly projectId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+    }): Effect.Effect<
+      Option.Option<{ readonly id: string; readonly personId: string }>,
+      DbError,
+      Db
+    > =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personExternalIdentifiers.findFirst({
+          columns: { id: true, personId: true },
+          where: {
+            projectId: input.projectId,
+            serviceId: input.serviceId,
+            identifier: input.identifier,
+          },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  const createExternalIdentifier = Effect.fn("createExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly projectId: string;
+      readonly personId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+      readonly isDefault: boolean;
+    }): Effect.Effect<{ readonly id: string }, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db.insert(personExternalIdentifiers).values(input);
+        return { id: input.id };
+      }),
+  );
+
+  /**
+   * Insert-or-repoint of a `person_external_identifier` row, keyed by the
+   * UNIQUE `(projectId, serviceId, identifier)` index. Used by the SDK path to
+   * lazily bind a derived account token to the SDK-authenticated person; the
+   * `ON CONFLICT ... DO UPDATE person_id` repoints an existing binding rather
+   * than failing on the constraint.
+   */
+  const upsertExternalIdentifier = Effect.fn("upsertExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly projectId: string;
+      readonly personId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+      readonly isDefault: boolean;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .insert(personExternalIdentifiers)
+          .values(input)
+          .onConflictDoUpdate({
+            target: [
+              personExternalIdentifiers.projectId,
+              personExternalIdentifiers.serviceId,
+              personExternalIdentifiers.identifier,
+            ],
+            set: { personId: input.personId },
+          });
+      }),
+  );
+
+  /**
+   * Follows `persons.mergedIntoPersonId` to the surviving canonical person,
+   * bounded to {@link MAX_MERGE_CHAIN_HOPS} so a (theoretical) cycle can't
+   * spin. External-identifier rows are NOT repointed when their person is
+   * merged away (the identify-completion workflow only touches
+   * `person_identity`), so a webhook resolving an `apple-app-store` /
+   * account-token binding must canonicalize the result before returning it,
+   * else post-merge renewals would attribute to an archived person.
+   */
+  const resolveCanonicalPersonId = Effect.fn("resolveCanonicalPersonId")(
+    (input: { readonly personId: string }): Effect.Effect<string, DbError, Db> =>
+      Effect.gen(function* () {
+        let currentId = input.personId;
+        for (let hop = 0; hop < MAX_MERGE_CHAIN_HOPS; hop++) {
+          const row = yield* db.query.persons.findFirst({
+            columns: { mergedIntoPersonId: true },
+            where: { id: currentId },
+          });
+          const mergedInto = row?.mergedIntoPersonId;
+          if (!mergedInto || mergedInto === currentId) {
+            return currentId;
+          }
+          currentId = mergedInto;
+        }
+        return currentId;
+      }),
+  );
+
+  /**
+   * Rebinds an existing `person_external_identifier` row to a new `personId`.
+   * Used by the SDK identity-rebind path when a later SDK confirmation reveals
+   * that an `originalTransactionId` previously bound to an anonymous provider
+   * person actually belongs to the SDK-authenticated person. The merge of the
+   * anonymous person record itself is handled separately via
+   * `PersonIdentityService.identifyDistinctId`.
+   */
+  const rebindExternalIdentifier = Effect.fn("rebindExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly newPersonId: string;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .update(personExternalIdentifiers)
+          .set({ personId: input.newPersonId })
+          .where(eq(personExternalIdentifiers.id, input.id));
+      }),
+  );
+
+  /**
+   * Looks up the default (or first) distinctId bound to a person — used when
+   * we need a `previousDistinctId` to merge an anonymous provider person into
+   * the SDK-authenticated person via `identifyDistinctId`. Returns the
+   * distinctId only; callers don't need the row metadata.
+   */
+  const findDistinctIdForPerson = Effect.fn("findDistinctIdForPerson")(
+    (input: {
+      readonly projectId: string;
+      readonly personId: string;
+    }): Effect.Effect<Option.Option<string>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personIdentities.findFirst({
+          columns: { distinctId: true },
+          where: {
+            projectId: input.projectId,
+            personId: input.personId,
+          },
+        });
+        return Option.fromNullishOr(row?.distinctId);
+      }),
+  );
+
+  /**
+   * Inserts a row into `payment_provider_notification_processed`. Treats a
+   * UNIQUE collision on `(configurationId, notificationUUID)` as success — the
+   * second copy of the same notification has been processed already, so the
+   * caller treats it as a duplicate delivery. Returns `{ inserted }` so the
+   * webhook handler can distinguish first-arrival from duplicate at the wire
+   * layer (above the per-event idempotency gate in `purchase_ledger`).
+   *
+   * `inserted` is decided by reading the surviving row back and comparing its
+   * id to the one we tried to insert, which is driver-agnostic and race-safe.
+   * The UNIQUE constraint serializes concurrent writers, so the row keeps the
+   * *first* writer's id: a match means we won the insert; a mismatch means
+   * another delivery got there first (a duplicate).
+   */
+  const insertNotificationProcessedIfAbsent = Effect.fn("insertNotificationProcessedIfAbsent")(
+    (
+      input: InsertPaymentProviderNotificationProcessed,
+    ): Effect.Effect<{ readonly inserted: boolean }, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .insert(paymentProviderNotificationProcessed)
+          .values(input)
+          .onConflictDoNothing({
+            target: [
+              paymentProviderNotificationProcessed.paymentProviderConfigurationId,
+              paymentProviderNotificationProcessed.notificationUuid,
+            ],
+          });
+        const surviving = yield* db.query.paymentProviderNotificationProcessed.findFirst({
+          columns: { id: true },
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            notificationUuid: input.notificationUuid,
+          },
+        });
+        return { inserted: surviving?.id === input.id };
+      }),
+  );
+
+  /**
+   * Lists parked notifications waiting for a `(configurationId, providerProductKey)`
+   * mapping to appear. Used by the replay-on-product-creation flow.
+   */
+  const findParkedNotifications = Effect.fn("findParkedNotifications")(
+    (input: {
+      readonly paymentProviderConfigurationId: string;
+      readonly providerProductKey: string;
+    }): Effect.Effect<ReadonlyArray<DbPaymentProviderNotificationProcessed>, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderNotificationProcessed.findMany({
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            result: "parked_pending_product_mapping",
+            parkedUntilProviderProductKey: input.providerProductKey,
+          },
+        });
+      }),
+  );
+
+  /**
+   * Lists notifications parked waiting for the SDK to confirm a given
+   * `originalTransactionId`. Ordered by `processedAt ASC` so wire-arrival
+   * order is reproduced when the replay activity re-dispatches each row.
+   */
+  const findParkedNotificationsByOriginalTransactionId = Effect.fn(
+    "findParkedNotificationsByOriginalTransactionId",
+  )(
+    (input: {
+      readonly paymentProviderConfigurationId: string;
+      readonly originalTransactionId: string;
+    }): Effect.Effect<ReadonlyArray<DbPaymentProviderNotificationProcessed>, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderNotificationProcessed.findMany({
+          orderBy: { processedAt: "asc" },
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            result: "parked_pending_sdk_confirmation",
+            parkedUntilOriginalTransactionId: input.originalTransactionId,
+          },
+        });
+      }),
+  );
+
+  /**
+   * Lightweight first-seen guard for App Store reconciliation. Returns
+   * `true` when a `subscription` row already exists for the given
+   * `originalTransactionId` (stored as `subscription.storeSubscriptionId`),
+   * which is sufficient evidence that we've already processed this
+   * transaction at least once and don't need to walk Apple's full history.
+   * Reconciliation itself is idempotent, so a missed-guard false negative is
+   * only a wasted backfill — not a correctness issue.
+   */
+  const hasAnySubscriptionForStoreSubscriptionId = Effect.fn(
+    "hasAnySubscriptionForStoreSubscriptionId",
+  )(
+    (input: { readonly storeSubscriptionId: string }): Effect.Effect<boolean, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.subscriptions.findFirst({
+          columns: { id: true },
+          where: { storeSubscriptionId: input.storeSubscriptionId },
+        });
+        return row !== undefined && row !== null;
+      }),
+  );
+
+  /**
+   * Returns `true` when any `subscription` or `transaction` row exists whose
+   * Apple-side identifier matches `originalTransactionId`. Used as the
+   * "SDK-confirmed" signal for the per-tenant
+   * `trackNewPurchasesFromAppleServerNotifications = false` mode: under that
+   * mode, webhooks never create purchases on their own, so the existence of
+   * a `subscription` or `transaction` row for the series is equivalent to
+   * "the SDK boundary has at least once recorded a purchase here". Covers
+   * both subscriptions (matched via `subscription.storeSubscriptionId`) and
+   * one-time / consumable charges (matched via `transaction.storeTransactionId`
+   * — which equals `originalTransactionId` for the initial purchase of any
+   * series).
+   */
+  const hasAnyAppStoreRecordForOriginalTransactionId = Effect.fn(
+    "hasAnyAppStoreRecordForOriginalTransactionId",
+  )(
+    (input: { readonly originalTransactionId: string }): Effect.Effect<boolean, DbError, Db> =>
+      Effect.gen(function* () {
+        const subscription = yield* db.query.subscriptions.findFirst({
+          columns: { id: true },
+          where: { storeSubscriptionId: input.originalTransactionId },
+        });
+        if (subscription !== undefined && subscription !== null) {
+          return true;
+        }
+        const transaction = yield* db.query.transactions.findFirst({
+          columns: { id: true },
+          where: { storeTransactionId: input.originalTransactionId },
+        });
+        return transaction !== undefined && transaction !== null;
+      }),
+  );
+
+  /**
+   * Marks a previously-parked notification row with a fresh outcome (e.g.
+   * `"applied"` or `"failed"`) after the replay attempt resolves, clearing
+   * the parked-state columns. Used by both park flavors
+   * (`parked_pending_product_mapping` and `parked_pending_sdk_confirmation`).
+   */
+  const markParkedNotificationResolved = Effect.fn("markParkedNotificationResolved")(
+    (input: {
+      readonly id: string;
+      readonly result: string;
+      readonly resultNote: string | null;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .update(paymentProviderNotificationProcessed)
+          .set({
+            parkedRawPayload: null,
+            parkedUntilOriginalTransactionId: null,
+            parkedUntilProviderProductKey: null,
+            processedAt: sql`NOW()`,
+            result: input.result,
+            resultNote: input.resultNote,
+          })
+          .where(eq(paymentProviderNotificationProcessed.id, input.id));
+      }),
+  );
+
+  /**
+   * Bulk-expires SDK-confirmation parked rows whose `processedAt` is older
+   * than the configured TTL. Drains stale park rows for tenants whose SDK
+   * never confirms a series (RevenueCat-only users, uninstalled apps), so the
+   * table doesn't grow unbounded. Idempotent — re-running over already-
+   * expired rows is a no-op.
+   *
+   * Returns `{ expired }` so the scheduled workflow can log a summary.
+   */
+  const expireStaleParkedSdkConfirmationRows = Effect.fn("expireStaleParkedSdkConfirmationRows")(
+    (input: {
+      readonly olderThan: Date;
+    }): Effect.Effect<{ readonly expired: number }, DbError, Db> =>
+      Effect.gen(function* () {
+        const result = yield* db
+          .update(paymentProviderNotificationProcessed)
+          .set({
+            parkedRawPayload: null,
+            parkedUntilOriginalTransactionId: null,
+            processedAt: sql`NOW()`,
+            result: "expired",
+            resultNote: "auto-expired pending SDK confirmation",
+          })
+          .where(
+            and(
+              eq(paymentProviderNotificationProcessed.result, "parked_pending_sdk_confirmation"),
+              lt(paymentProviderNotificationProcessed.processedAt, input.olderThan),
+            ),
+          )
+          .returning({ id: paymentProviderNotificationProcessed.id });
+        return { expired: result.length };
+      }),
+  );
+
+  /**
+   * Reports whether `personId` is a webhook-created App Store stand-in — the
+   * synthetic anonymous person the webhook (or reconciliation) parks a
+   * transaction on before SDK confirmation, marked at creation with
+   * `PersonOrigin.AppStoreWebhook`.
+   *
+   * The SDK identity-rebind path merges only these stand-ins — they exist
+   * solely to hold the transaction until the real user confirms. A genuine
+   * person — an anonymous SDK user or an identified user — that owns the
+   * transaction is left intact; its subscription is transferred instead of
+   * its whole identity merged away. A missing person resolves to `false` (the
+   * non-destructive transfer path).
+   */
+  const isAppStoreWebhookStandInPerson = Effect.fn("isAppStoreWebhookStandInPerson")(
+    (input: {
+      readonly projectId: string;
+      readonly personId: string;
+    }): Effect.Effect<boolean, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.persons.findFirst({
+          columns: { origin: true },
+          where: {
+            id: input.personId,
+            projectId: input.projectId,
+          },
+        });
+        return row?.origin === PersonOrigin.AppStoreWebhook;
+      }),
+  );
+
+  /**
+   * Finds the subscription tied to an App Store `originalTransactionId`
+   * (stored as `subscription.storeSubscriptionId`). Apple guarantees
+   * `originalTransactionId` is globally unique, so the unscoped lookup is
+   * safe — same pattern as {@link hasAnySubscriptionForStoreSubscriptionId}.
+   */
+  const findSubscriptionByStoreSubscriptionId = Effect.fn("findSubscriptionByStoreSubscriptionId")(
+    (input: {
+      readonly storeSubscriptionId: string;
+    }): Effect.Effect<Option.Option<{ readonly id: string }>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.subscriptions.findFirst({
+          columns: { id: true },
+          where: { storeSubscriptionId: input.storeSubscriptionId },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  /**
+   * Finds the one-time purchase keyed by `purchase.providerKey` (the App Store
+   * `transactionId` for one-time charges). `provider_key` carries a global
+   * UNIQUE index. Returns `type` so the caller can skip consumables.
+   */
+  const findPurchaseByProviderKey = Effect.fn("findPurchaseByProviderKey")(
+    (input: {
+      readonly providerKey: string;
+    }): Effect.Effect<Option.Option<{ readonly id: string; readonly type: number }>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.purchases.findFirst({
+          columns: { id: true, type: true },
+          where: { providerKey: input.providerKey },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  return {
+    createExternalIdentifier,
+    expireStaleParkedSdkConfirmationRows,
+    findDistinctIdForPerson,
+    findExternalIdentifier,
+    findParkedNotifications,
+    findParkedNotificationsByOriginalTransactionId,
+    findPaymentProviderConfigurationById,
+    findPaymentProviderConfigurationsByProjectId,
+    findPaymentProviderConfigurationProductByPrimaryKey,
+    findPersonIdentityByDistinctId,
+    findProjectById,
+    findPurchaseByProviderKey,
+    findSubscriptionByStoreSubscriptionId,
+    hasAnyAppStoreRecordForOriginalTransactionId,
+    hasAnySubscriptionForStoreSubscriptionId,
+    insertNotificationProcessedIfAbsent,
+    isAppStoreWebhookStandInPerson,
+    resolveCanonicalPersonId,
+    upsertExternalIdentifier,
+    markParkedNotificationResolved,
+    rebindExternalIdentifier,
+  } as const;
+});
+
+export type AppStorePaymentProviderServiceQueriesShape = Effect.Success<typeof make>;
+
+export class AppStorePaymentProviderServiceQueries extends Context.Service<AppStorePaymentProviderServiceQueries>()(
+  "core/AppStorePaymentProviderServiceQueries",
+  { make },
+) {
+  static readonly layer: Layer.Layer<AppStorePaymentProviderServiceQueries, never, Db> =
+    Layer.effect(AppStorePaymentProviderServiceQueries)(AppStorePaymentProviderServiceQueries.make);
+}
diff --git a/packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts b/packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts
new file mode 100644
index 000000000..2bb3618f2
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts
@@ -0,0 +1,257 @@
+/**
+ * Live implementation of the public {@link AppStorePaymentProviderService}
+ * boundary for the Cloudflare backend.
+ *
+ * Owns the SDK-path orchestration (project → configuration → Apple REST fetch →
+ * decode → forward to {@link AppStorePaymentProvider.recordPurchase}) and
+ * delegates webhook ingress to {@link AppStoreWebhookHandlerService}.
+ *
+ * Ported from `internal/packages/core/.../app-store-payment-provider-service.ts`
+ * with two backend-specific changes:
+ *   1. The SDK path resolves the project from an explicit `projectId` input
+ *      instead of yielding `AuthSession` from context — this keeps the method's
+ *      `R` channel `never` as the service shape requires. `SdkService` passes
+ *      the project-elevated id.
+ *   2. The deferred-replay and lazy first-seen reconciliation workflow triggers
+ *      ARE fired here, through abstract ports
+ *      ({@link AppStoreReplayParkedSdkNotificationsWorkflow},
+ *      {@link AppStoreReconcileOriginalTransactionWorkflow}) that the
+ *      application root wires to concrete Cloudflare Workflows. Both are
+ *      fire-and-forget (awaited `create` + log-on-failure, never `forkDetach`),
+ *      and the synchronous record path does not depend on their completion.
+ */
+import { Environment } from "@voidhash/app-store-server-sdk";
+import { ProviderEnvironment } from "@voidhash/db";
+import { Effect, Layer, Option, Schema } from "effect";
+
+import {
+  AppStorePaymentProviderService,
+  AppStorePaymentProviderServiceError,
+  type AppStorePaymentProviderServiceShape,
+} from "../AppStorePaymentProviderService.ts";
+import { AppStoreReconcileOriginalTransactionWorkflow } from "../AppStoreReconcileOriginalTransactionWorkflow.ts";
+import { AppStoreReplayParkedSdkNotificationsWorkflow } from "../AppStoreReplayParkedSdkNotificationsWorkflow.ts";
+import { AppStoreWebhookHandlerService } from "./app-store-webhook-handler-service.ts";
+import { getActiveAppStorePaymentProviderConfiguration } from "./helpers.ts";
+import { AppStorePaymentProvider, globalConfigurationSchema } from "./payment-provider.ts";
+import { AppStorePaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+
+/**
+ * Best-effort extraction of a human-readable cause from any upstream failure
+ * (SDK errors carry `errorMessage: Option<string>`, infra errors carry
+ * `message`/`cause`). Used to collapse the rich error union the SDK path can
+ * produce into the single {@link AppStorePaymentProviderServiceError} the
+ * public boundary exposes.
+ */
+const extractCause = (error: unknown): string => {
+  if (error instanceof AppStorePaymentProviderServiceError) return error.cause;
+  if (typeof error === "object" && error !== null) {
+    const candidate = error as {
+      errorMessage?: unknown;
+      message?: unknown;
+      cause?: unknown;
+      status?: unknown;
+    };
+    if (Option.isOption(candidate.errorMessage) && Option.isSome(candidate.errorMessage)) {
+      return String(candidate.errorMessage.value);
+    }
+    if (typeof candidate.message === "string") return candidate.message;
+    if (typeof candidate.cause === "string") return candidate.cause;
+    if (typeof candidate.status === "string") return String(candidate.status);
+  }
+  return String(error);
+};
+
+const toServiceError = (error: unknown): AppStorePaymentProviderServiceError =>
+  error instanceof AppStorePaymentProviderServiceError
+    ? error
+    : new AppStorePaymentProviderServiceError({ cause: extractCause(error) });
+
+/**
+ * Live layer for {@link AppStorePaymentProviderService}. Composes the ported
+ * provider engine, webhook handler, and queries; its residual requirements
+ * (`Db`, `FxRateService`, `PersonIdentityService`, `PurchaseProcessingService`,
+ * `AppStoreServerSdk`, `HttpClient`) are satisfied by the backend root.
+ */
+export const AppStorePaymentProviderServiceLive = Layer.effect(AppStorePaymentProviderService)(
+  Effect.gen(function* () {
+    const appStorePaymentProvider = yield* AppStorePaymentProvider;
+    const appStoreWebhookHandlerService = yield* AppStoreWebhookHandlerService;
+    const queries = yield* AppStorePaymentProviderServiceQueries;
+
+    const processSdkTransaction = Effect.fn("processSdkTransaction")(
+      function* (input: {
+        readonly bundleId: string;
+        readonly distinctId: string;
+        readonly projectId: string;
+        readonly receivedAt: Date;
+        readonly transactionId: string;
+      }) {
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.payment_provider.bundle_id", input.bundleId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+        yield* Effect.annotateCurrentSpan("voidhash.transaction.id", input.transactionId);
+        const configurations = yield* queries.findPaymentProviderConfigurationsByProjectId(
+          input.projectId,
+        );
+        const paymentProviderKey = yield* appStorePaymentProvider.createGlobalKey(input);
+        const configuration = yield* getActiveAppStorePaymentProviderConfiguration(
+          configurations,
+          input.bundleId,
+          paymentProviderKey,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.configuration_id",
+          configuration.id,
+        );
+
+        const fullProject = yield* queries.findProjectById(input.projectId);
+        if (!fullProject) {
+          return yield* Effect.die(`Project ${input.projectId} not found`);
+        }
+
+        const sdkContext =
+          yield* appStorePaymentProvider.buildSdkContextFromConfiguration(configuration);
+        const transactionInfoResult = yield* sdkContext.getTransactionInfo(input.transactionId);
+        const signedTransactionInfo = Option.getOrUndefined(
+          transactionInfoResult.transactionInfo.signedTransactionInfo,
+        );
+        if (!signedTransactionInfo) {
+          return yield* new AppStorePaymentProviderServiceError({
+            cause: "Signed transaction info is not found",
+          });
+        }
+
+        const decodedTransaction = yield* sdkContext.decodeSignedTransaction(
+          signedTransactionInfo,
+          transactionInfoResult.environment,
+        );
+        const providerEnvironment =
+          transactionInfoResult.environment === Environment.SANDBOX
+            ? ProviderEnvironment.Sandbox
+            : ProviderEnvironment.Production;
+
+        // Decide first-seen reconciliation BEFORE `recordPurchase` writes the
+        // subscription/transaction row — afterwards the existence check below is
+        // always true. Gated per-tenant (`enableFirstSeenReconciliation`, off by
+        // default) and only when this `originalTransactionId` series is genuinely
+        // unseen, so the cost-bearing Apple-history backfill fires at most once
+        // per series. A bad config blob decodes to `none` (treated as disabled);
+        // reconciliation is idempotent, so a missed guard is only a wasted run.
+        const originalTransactionId = Option.getOrUndefined(
+          decodedTransaction.originalTransactionId,
+        );
+        const shouldReconcileFirstSeen = originalTransactionId
+          ? yield* Effect.gen(function* () {
+              const parsedGlobalConfiguration = yield* Schema.decodeUnknownEffect(
+                globalConfigurationSchema,
+              )(configuration.configuration).pipe(Effect.option);
+              const enabled = Option.match(parsedGlobalConfiguration, {
+                onNone: () => false,
+                onSome: (parsed) => parsed.enableFirstSeenReconciliation === true,
+              });
+              if (!enabled) {
+                return false;
+              }
+              const alreadyRecorded = yield* queries.hasAnyAppStoreRecordForOriginalTransactionId({
+                originalTransactionId,
+              });
+              return !alreadyRecorded;
+            })
+          : false;
+
+        const result = yield* appStorePaymentProvider.recordPurchase({
+          configuration,
+          decodedRenewalInfo: Option.none(),
+          decodedTransaction,
+          distinctId: input.distinctId,
+          project: fullProject,
+          providerEnvironment,
+          receivedAt: input.receivedAt,
+          sdkTransactionId: input.transactionId,
+          source: "sdk",
+        });
+
+        // Deferred-replay trigger: under the per-tenant
+        // `trackNewPurchasesFromAppleServerNotifications = false` mode,
+        // lifecycle webhooks for this series were parked pending this SDK
+        // confirmation. Now that the purchase is recorded, dispatch the replay
+        // workflow to drain them — but only if any are actually parked, so the
+        // common (flag-on) path costs nothing. The record above is
+        // authoritative on its own; this only re-applies held-back events.
+        if (originalTransactionId) {
+          const parked = yield* queries.findParkedNotificationsByOriginalTransactionId({
+            originalTransactionId,
+            paymentProviderConfigurationId: configuration.id,
+          });
+          if (parked.length > 0) {
+            yield* AppStoreReplayParkedSdkNotificationsWorkflow.pipe(
+              Effect.flatMap((workflow) =>
+                workflow.dispatch({
+                  originalTransactionId,
+                  paymentProviderConfigurationId: configuration.id,
+                }),
+              ),
+              Effect.catchCause((cause) =>
+                Effect.logWarning("Failed to schedule App Store parked SDK-notification replay", {
+                  cause,
+                  originalTransactionId,
+                }),
+              ),
+            );
+          }
+        }
+
+        // Lazy first-seen reconciliation. Decided pre-`recordPurchase` above, so
+        // it fires at most once per `originalTransactionId` per flag-on tenant;
+        // Cloudflare handles Apple 429 backoff at the workflow level, and each
+        // replayed event is idempotent. Admin-repair / install-backfill remain
+        // separate manual triggers. Awaited `create` + log-on-failure (mirrors
+        // the parked-replay dispatch above); never `forkDetach`.
+        if (shouldReconcileFirstSeen && originalTransactionId) {
+          yield* AppStoreReconcileOriginalTransactionWorkflow.pipe(
+            Effect.flatMap((workflow) =>
+              workflow.dispatch({
+                originalTransactionId,
+                paymentProviderConfigurationId: configuration.id,
+                reason: "first_seen",
+                triggeredAt: input.receivedAt.toISOString(),
+              }),
+            ),
+            Effect.catchCause((cause) =>
+              Effect.logWarning("Failed to schedule App Store first-seen reconciliation", {
+                cause,
+                originalTransactionId,
+              }),
+            ),
+          );
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", result.personId);
+        return { personId: result.personId };
+      },
+      (effect) => effect.pipe(Effect.catch((error) => Effect.fail(toServiceError(error)))),
+    );
+
+    // Boundary cast: the underlying purchase/identity engine reaches Cloudflare
+    // bindings through the deployed-worker resource handle, so the `record*`
+    // path carries a residual `Cloudflare.Worker` requirement in its `R`
+    // channel (the only residual once the provider/handler/queries are
+    // provided). That resource is ambient whenever this service runs — it
+    // executes inside the deployed Worker — so the requirement is always
+    // satisfied at call time, and the public shape models it as `never`. We
+    // assert that here rather than thread the alchemy IaC resource type through
+    // the core service contract.
+    // TODO(app-store): replace this cast by providing the worker-resource layer
+    // to AppStorePaymentProviderServiceLive at the backend root once the
+    // request-graph wiring for `Cloudflare.Worker` is finalized.
+    return {
+      acceptServerNotification: appStoreWebhookHandlerService.acceptServerNotification,
+      processSdkTransaction,
+    } as unknown as AppStorePaymentProviderServiceShape;
+  }),
+  // `Layer.provide` (not `provideMerge`): the webhook handler / provider engine /
+  // queries are implementation details consumed here, not part of this service's
+  // public output. Exposing only `AppStorePaymentProviderService` also keeps the
+  // layer's inferred type nameable from the application root.
+).pipe(Layer.provide(AppStoreWebhookHandlerService.layer));
diff --git a/packages/core/src/services/paymentProviders/appStore/payment-provider.ts b/packages/core/src/services/paymentProviders/appStore/payment-provider.ts
new file mode 100644
index 000000000..ce76ddbdc
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/payment-provider.ts
@@ -0,0 +1,1254 @@
+import {
+  AppStoreServerSdk,
+  type JWSRenewalInfoDecodedPayload,
+  type JWSTransactionDecodedPayload,
+} from "@voidhash/app-store-server-sdk";
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type PersonOriginValue,
+  type Project as DbProject,
+  type ProviderEnvironmentValue,
+  PersonOrigin,
+} from "@voidhash/db";
+import { generateId } from "../../../utils/index.ts";
+import { PurchaseType } from "@voidhash/lib/constants";
+import { Effect, Layer, Option, Schema, Context } from "effect";
+
+import { FxRateService } from "../../fxRates/FxRateService.ts";
+import { PersonIdentityService } from "../../personIdentity/PersonIdentityService.ts";
+import type { PurchaseProcessingResult } from "../../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import {
+  DEFAULT_SUBSCRIPTION_TRANSFER_MODE,
+  type SubscriptionTransferMode,
+} from "../../../domain/paymentProvider/SubscriptionTransfer.ts";
+import {
+  type PurchaseActionContext,
+  PurchaseProcessingService,
+} from "../../purchaseProcessing/PurchaseProcessingService.ts";
+import {
+  ACCOUNT_TOKEN_SERVICE_ID,
+  deriveAccountToken,
+} from "../../../utils/crypto/account-token.ts";
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import type { PaymentProvider } from "../payment-provider-adapter.ts";
+import {
+  type AppStoreGlobalConfiguration,
+  type AppStoreProductConfiguration,
+  globalConfigurationSchema,
+  makeAppStoreConfigProvider,
+  productConfigurationSchema,
+} from "./config-provider.ts";
+import {
+  AppStorePaymentProviderProductNotMappedError,
+  AppStorePaymentProviderSdkTransactionMissingDistinctIdError,
+  AppStorePaymentProviderServiceError,
+  AppStorePaymentProviderTransactionMissingPersonIdentifierError,
+} from "./errors.ts";
+import {
+  type AppStorePurchaseProcessingEventType,
+  buildAppStoreWebhookAnonymousDistinctId,
+  getAppStorePersonIdentifier,
+  getAppStorePurchaseProcessingIdempotencyKey,
+  getAppStoreProviderSubscriptionId,
+  getAppStoreProviderTransactionId,
+  makeIgnoredPurchaseProcessingResult,
+} from "./helpers.ts";
+import { buildAppStoreMoney } from "./money.ts";
+import { AppStorePaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import { buildAppStoreSdkContext, type AppStoreSdkContext } from "./sdk-context.ts";
+
+/**
+ * TTL for `parked_pending_sdk_confirmation` notification rows. Aged past this
+ * point by `AppStoreExpireParkedSdkNotificationsWorkflow`. Kept generous (90
+ * days) because parked rows for legitimate SDK-confirmable purchases tend to
+ * resolve in seconds-to-hours, so reaching this threshold reliably indicates
+ * a series the SDK will never confirm (uninstalled app, RevenueCat-only
+ * subscriber, etc.).
+ */
+export const APP_STORE_PARKED_SDK_TTL_DAYS = 90;
+
+// The configuration schema, derived types, and config-write provider live in
+// `./config-provider.ts` (the lightweight admin/config surface). They are
+// re-exported here so existing importers of `globalConfigurationSchema` from
+// this module keep working.
+export { globalConfigurationSchema, productConfigurationSchema };
+
+export interface AppStorePaymentProviderShape extends PaymentProvider<
+  "apple-app-store",
+  AppStoreGlobalConfiguration,
+  AppStoreProductConfiguration
+> {
+  readonly globalConfigurationSchema: typeof globalConfigurationSchema;
+  readonly productConfigurationSchema: typeof productConfigurationSchema;
+}
+
+/**
+ * Shared base accepted by every `record*` method. The webhook handler and the
+ * SDK boundary both pre-resolve `configuration` and `project` and pass them in
+ * — re-fetching here would be wasteful and racy across config rotation.
+ *
+ * `decodedRenewalInfo` is `Option.none()` when the inbound payload didn't
+ * include signed renewal info (one-time charges, SDK confirmations, older
+ * reconciliation paths). Callers that have access to it (the webhook handler
+ * after decoding `signedRenewalInfo`) pass `Option.some(...)` so downstream
+ * record methods can populate fields that live only on renewal info
+ * (`gracePeriodExpiresDate`, `priceIncrease` effective date, etc.).
+ */
+type RecordTransactionInputBase = {
+  readonly configuration: DbPaymentProviderConfiguration;
+  readonly project: DbProject;
+  readonly decodedTransaction: JWSTransactionDecodedPayload;
+  readonly decodedRenewalInfo: Option.Option<JWSRenewalInfoDecodedPayload>;
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  readonly receivedAt: Date;
+  readonly notificationUUID?: string;
+  readonly subtype?: string;
+};
+
+/**
+ * The SDK path requires a `distinctId` so we can attach the purchase to the
+ * caller's anonymous/identified user; webhook and reconciliation paths derive
+ * identity from the transaction. Encoding this as a discriminated union makes
+ * the requirement a type-level constraint at every call site.
+ *
+ * `sdkTransactionId` is the StoreKit transaction id the SDK client observed —
+ * forwarded so it can serve as the final fallback for `providerTransactionId`
+ * when the decoded transaction itself has no usable identifiers.
+ */
+export type RecordTransactionInput = RecordTransactionInputBase &
+  (
+    | { readonly source: "sdk"; readonly distinctId: string; readonly sdkTransactionId?: string }
+    | { readonly source: "webhook" | "reconciliation"; readonly distinctId?: never }
+  );
+
+const optionSpanAttribute = <A>(
+  value: Option.Option<A>,
+  map: (value: A) => unknown = (some) => some,
+): unknown | undefined => (Option.isSome(value) ? map(value.value) : undefined);
+
+const annotateRecordTransaction = (input: RecordTransactionInput) =>
+  Effect.gen(function* () {
+    const transaction = input.decodedTransaction;
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.payment_provider.configuration_id",
+      input.configuration.id,
+    );
+    yield* Effect.annotateCurrentSpan("voidhash.project.id", input.project.id);
+    yield* Effect.annotateCurrentSpan("voidhash.purchase.source", input.source);
+    if (input.notificationUUID) {
+      yield* Effect.annotateCurrentSpan("voidhash.webhook.id", input.notificationUUID);
+    }
+    const originalTransactionId = optionSpanAttribute(transaction.originalTransactionId);
+    if (originalTransactionId !== undefined) {
+      yield* Effect.annotateCurrentSpan("voidhash.transaction.original_id", originalTransactionId);
+    }
+    const providerProductKey = optionSpanAttribute(transaction.productId);
+    if (providerProductKey !== undefined) {
+      yield* Effect.annotateCurrentSpan(
+        "voidhash.payment_provider.provider_product_key",
+        providerProductKey,
+      );
+    }
+    const transactionId = optionSpanAttribute(transaction.transactionId);
+    if (transactionId !== undefined) {
+      yield* Effect.annotateCurrentSpan(
+        "voidhash.transaction.provider_transaction_id",
+        transactionId,
+      );
+    }
+  });
+
+const purchaseProcessingResultKind = (result: PurchaseProcessingResult) =>
+  result.idempotent
+    ? "idempotent"
+    : result.analyticsEventIds.length === 0 &&
+        Option.isNone(result.purchaseId) &&
+        Option.isNone(result.subscriptionId) &&
+        Option.isNone(result.transactionId)
+      ? "ignored"
+      : "applied";
+
+const purchaseProcessingResultSpanAttributes = (result: PurchaseProcessingResult) => ({
+  "app_store.purchase_processing_result": purchaseProcessingResultKind(result),
+});
+
+const isPurchaseProcessingResultLike = (value: unknown): value is PurchaseProcessingResult =>
+  typeof value === "object" &&
+  value !== null &&
+  "analyticsEventIds" in value &&
+  "changedGrantIds" in value &&
+  "idempotent" in value &&
+  "personId" in value;
+
+const annotatePurchaseProcessingResult = (result: unknown) =>
+  isPurchaseProcessingResultLike(result)
+    ? Effect.gen(function* () {
+        yield* Effect.annotateCurrentSpan(purchaseProcessingResultSpanAttributes(result));
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", result.personId);
+        if (Option.isSome(result.purchaseId)) {
+          yield* Effect.annotateCurrentSpan("voidhash.purchase.id", result.purchaseId.value);
+        }
+        if (Option.isSome(result.subscriptionId)) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.subscription.id",
+            result.subscriptionId.value,
+          );
+        }
+        if (Option.isSome(result.transactionId)) {
+          yield* Effect.annotateCurrentSpan("voidhash.transaction.id", result.transactionId.value);
+        }
+      })
+    : Effect.void;
+
+const make = Effect.gen(function* () {
+  const queries = yield* AppStorePaymentProviderServiceQueries;
+  const personIdentityService = yield* PersonIdentityService;
+  const purchaseProcessingService = yield* PurchaseProcessingService;
+  const appStoreServerSdk = yield* AppStoreServerSdk;
+  /**
+   * Captured at construction time so the per-call money helpers
+   * ({@link _money}, {@link _moneyForRenewalPrice}) can pass the resolved
+   * instance directly to {@link buildAppStoreMoney}. Without this capture,
+   * the FX dependency would propagate as an `R` on every `record*` method,
+   * which would force every downstream caller (webhook handler, SDK boundary,
+   * reconciliation) to provide `FxRateService` in their own context.
+   */
+  const fxRateService = yield* FxRateService;
+  // Encrypts/decrypts the secret `inAppPurchasePrivateKey` config field at the
+  // write (validate) and read (SDK-context build) boundaries.
+  const secretCrypto = yield* PaymentConfigSecretCrypto;
+
+  const _withRecordTransactionObservability = <A, E, R, I extends RecordTransactionInput>(
+    effect: Effect.Effect<A, E, R>,
+    input: I,
+  ) =>
+    Effect.gen(function* () {
+      yield* annotateRecordTransaction(input);
+      const result = yield* effect;
+      yield* annotatePurchaseProcessingResult(result);
+      return result;
+    });
+
+  // The config-write surface (schema validation, key derivation, default
+  // configuration blobs, and encrypt-on-write of the secret Apple PKCS8 key) is
+  // shared with the admin config flow — see `./config-provider.ts`. The engine
+  // adds the per-tenant SDK helpers and `record*` methods below, but defers to
+  // the same single source of truth for what a valid stored configuration is.
+  const configProvider = makeAppStoreConfigProvider(secretCrypto);
+
+  const provider = {
+    ...configProvider,
+    globalConfigurationSchema,
+    productConfigurationSchema,
+  } satisfies AppStorePaymentProviderShape;
+
+  /**
+   * Exposes the shared per-tenant SDK helpers so callers (webhook handler,
+   * SDK boundary) can build verifiers and REST clients without yielding the
+   * raw `AppStoreServerSdk` service themselves. Parses the stored
+   * configuration row first; failures propagate as schema errors.
+   */
+  const buildSdkContextFromConfiguration = Effect.fn("buildSdkContextFromConfiguration")(function* (
+    configuration: DbPaymentProviderConfiguration,
+  ) {
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.payment_provider.configuration_id",
+      configuration.id,
+    );
+    yield* Effect.annotateCurrentSpan("voidhash.project.id", configuration.projectId);
+    yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", configuration.providerId);
+    const parsed = yield* Schema.decodeUnknownEffect(globalConfigurationSchema)(
+      configuration.configuration,
+    );
+    // Decrypt the Apple PKCS8 key before handing it to the SDK client. Rows
+    // written before the encryption seam are plaintext and pass through.
+    const inAppPurchasePrivateKey = yield* secretCrypto.decrypt(parsed.inAppPurchasePrivateKey);
+    return buildAppStoreSdkContext(appStoreServerSdk, { ...parsed, inAppPurchasePrivateKey });
+  });
+
+  const _resolveDistinctIdToPersonId = Effect.fn("_resolveDistinctIdToPersonId")(function* (input: {
+    readonly distinctId: string;
+    readonly eventTimestamp: Date;
+    readonly projectId: string;
+    /** Origin stamped on the person row when this call creates it. Defaults to `IOS`. */
+    readonly origin?: PersonOriginValue;
+  }) {
+    const result = yield* personIdentityService.resolveDistinctId({
+      distinctId: input.distinctId,
+      eventTimestamp: input.eventTimestamp,
+      origin: input.origin ?? PersonOrigin.IOS,
+      projectId: input.projectId,
+      setAttributes: {},
+      setOnceAttributes: {},
+      shouldCreatePerson: true,
+    });
+    if (!result.identity.personId) {
+      return yield* Effect.fail(
+        new AppStorePaymentProviderServiceError({
+          cause: "App Store transaction resolved without person id",
+        }),
+      );
+    }
+    return result.identity.personId;
+  });
+
+  const _resolvePersonForAppStoreTransaction = Effect.fn("_resolvePersonForAppStoreTransaction")(
+    function* (input: {
+      readonly projectId: string;
+      readonly organizationId: string;
+      readonly paymentProviderConfigurationId: string;
+      readonly source: "sdk" | "webhook" | "reconciliation";
+      readonly distinctId?: string;
+      readonly appAccountToken?: string;
+      readonly providerTransactionId: string;
+      readonly providerSubscriptionId?: string;
+      readonly personIdentifier: string;
+      readonly providerEnvironment: ProviderEnvironmentValue;
+      readonly transferMode: SubscriptionTransferMode;
+      readonly occurredAt: Date;
+    }) {
+      // Apple emits appAccountToken as an uppercase UUID; our derived tokens
+      // and stored bindings are lowercase. Canonicalize before any lookup.
+      const appAccountToken = input.appAccountToken?.toLowerCase();
+      yield* Effect.annotateCurrentSpan(
+        "voidhash.payment_provider.configuration_id",
+        input.paymentProviderConfigurationId,
+      );
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+      yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+      yield* Effect.annotateCurrentSpan("voidhash.purchase.source", input.source);
+      yield* Effect.annotateCurrentSpan(
+        "voidhash.transaction.provider_transaction_id",
+        input.providerTransactionId,
+      );
+      if (input.distinctId) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+      }
+      if (input.source === "sdk") {
+        if (!input.distinctId) {
+          return yield* new AppStorePaymentProviderSdkTransactionMissingDistinctIdError({
+            providerTransactionId: input.providerTransactionId,
+          });
+        }
+        const sdkPersonId = yield* _resolveDistinctIdToPersonId({
+          distinctId: input.distinctId,
+          eventTimestamp: input.occurredAt,
+          projectId: input.projectId,
+        });
+
+        /**
+         * SDK identity-rebind path: a webhook arrived first and bound this
+         * `personIdentifier` (typically the originalTransactionId) to some
+         * person, and the SDK confirmation now reveals the SDK-authenticated
+         * person. What to do depends on whether the previously-bound person is
+         * the webhook-created anonymous stand-in or a real identified user —
+         * see the branch below.
+         */
+        const existingExternal = yield* queries.findExternalIdentifier({
+          identifier: input.personIdentifier,
+          projectId: input.projectId,
+          serviceId: "apple-app-store",
+        });
+
+        if (Option.isSome(existingExternal)) {
+          if (existingExternal.value.personId !== sdkPersonId) {
+            const previousIsWebhookStandIn = yield* queries.isAppStoreWebhookStandInPerson({
+              personId: existingExternal.value.personId,
+              projectId: input.projectId,
+            });
+
+            if (previousIsWebhookStandIn) {
+              yield* Effect.annotateCurrentSpan({
+                "app_store.identity_result": "webhook_stand_in_merge",
+              });
+              /**
+               * Webhook stand-in merge (the original behaviour): the webhook
+               * bound `personIdentifier` to a synthetic anonymous stand-in
+               * because the notification arrived before SDK confirmation. The
+               * SDK confirmation now reveals the real person — merge the
+               * stand-in into it via `identifyDistinctId` (battle-tested merge
+               * that archives the source, migrates traits, fans out projection
+               * events), then rebind the external identifier.
+               */
+              const previousDistinctId = yield* queries.findDistinctIdForPerson({
+                personId: existingExternal.value.personId,
+                projectId: input.projectId,
+              });
+              if (Option.isSome(previousDistinctId)) {
+                yield* personIdentityService
+                  .identifyDistinctId({
+                    distinctId: input.distinctId,
+                    eventTimestamp: input.occurredAt,
+                    origin: PersonOrigin.IOS,
+                    previousDistinctId: previousDistinctId.value,
+                    projectId: input.projectId,
+                    setAttributes: {},
+                    setOnceAttributes: {},
+                  })
+                  .pipe(
+                    Effect.catch((error: unknown) =>
+                      Effect.logWarning(
+                        "App Store SDK identity rebind: identifyDistinctId merge failed; continuing with identifier rebind only",
+                        {
+                          cause: error,
+                          personIdentifier: input.personIdentifier,
+                          previousDistinctId: previousDistinctId.value,
+                          sdkDistinctId: input.distinctId,
+                        },
+                      ),
+                    ),
+                  );
+              }
+              yield* queries.rebindExternalIdentifier({
+                id: existingExternal.value.id,
+                newPersonId: sdkPersonId,
+              });
+            } else {
+              /**
+               * Cross-owner restore between two real persons: a genuine
+               * person — an anonymous SDK user or an identified user —
+               * previously owned this `personIdentifier`, and a different
+               * person has now restored it on this device. This is NOT an
+               * identity merge: both persons stay intact; only the specific
+               * subscription / non-consumable purchase tied to
+               * `personIdentifier` moves, governed by the configured
+               * `transferMode`.
+               *
+               * Transfer the entitlement FIRST and rebind the identifier
+               * LAST, so a crash between the two is self-healing: a retried
+               * delivery re-detects the mismatch (identifier still on the
+               * previous owner), the transfer no-ops (row already moved),
+               * and the rebind completes. On transfer failure the rebind is
+               * skipped so a later delivery retries the whole sequence.
+               */
+              const transferred = yield* Effect.gen(function* () {
+                // Look the entitlement up by its real store keys, NOT by
+                // `personIdentifier`: with account tokens the identifier is the
+                // derived UUID (never a store key), so keying the lookups on it
+                // would always miss → silently rebind without transferring. For
+                // legacy flows `personIdentifier === originalTransactionId ===
+                // providerSubscriptionId` (subscriptions) and `=== transactionId
+                // === providerTransactionId` (one-time charges), so this is
+                // equivalent there.
+                const subscription = yield* queries.findSubscriptionByStoreSubscriptionId({
+                  storeSubscriptionId: input.providerSubscriptionId ?? input.personIdentifier,
+                });
+                if (Option.isSome(subscription)) {
+                  yield* purchaseProcessingService.transferSubscription({
+                    fromPersonId: existingExternal.value.personId,
+                    occurredAt: input.occurredAt,
+                    organizationId: input.organizationId,
+                    paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                    projectId: input.projectId,
+                    providerId: "apple-app-store",
+                    source: "sdk",
+                    subscriptionId: subscription.value.id,
+                    toPersonId: sdkPersonId,
+                    transferMode: input.transferMode,
+                    triggerReason: "appstore_restore",
+                  });
+                  return true;
+                }
+                const purchase = yield* queries.findPurchaseByProviderKey({
+                  providerKey: input.providerTransactionId,
+                });
+                if (Option.isSome(purchase) && purchase.value.type === PurchaseType.OneTime) {
+                  yield* purchaseProcessingService.transferPurchase({
+                    fromPersonId: existingExternal.value.personId,
+                    occurredAt: input.occurredAt,
+                    organizationId: input.organizationId,
+                    paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                    projectId: input.projectId,
+                    providerId: "apple-app-store",
+                    purchaseId: purchase.value.id,
+                    source: "sdk",
+                    toPersonId: sdkPersonId,
+                    transferMode: input.transferMode,
+                    triggerReason: "appstore_restore",
+                  });
+                }
+                // Consumable → no transfer (Apple never restores consumables).
+                // Nothing found → first-seen; the identifier rebind alone
+                // suffices.
+                return true;
+              }).pipe(
+                Effect.catch((error: unknown) =>
+                  Effect.logWarning(
+                    "App Store cross-owner transfer failed; skipping identifier rebind so a later delivery retries",
+                    {
+                      cause: error,
+                      personIdentifier: input.personIdentifier,
+                      previousPersonId: existingExternal.value.personId,
+                      sdkPersonId,
+                    },
+                  ).pipe(Effect.as(false)),
+                ),
+              );
+              if (transferred) {
+                yield* queries.rebindExternalIdentifier({
+                  id: existingExternal.value.id,
+                  newPersonId: sdkPersonId,
+                });
+              }
+              yield* Effect.annotateCurrentSpan({
+                "app_store.identity_result": transferred
+                  ? "cross_owner_transfer"
+                  : "cross_owner_transfer_failed",
+              });
+            }
+          } else {
+            yield* Effect.annotateCurrentSpan({
+              "app_store.identity_result": "same_person",
+            });
+          }
+        } else {
+          yield* Effect.annotateCurrentSpan({
+            "app_store.identity_result": "new_external_identifier",
+          });
+          yield* queries.createExternalIdentifier({
+            id: generateId("personDistinctId"),
+            identifier: input.personIdentifier,
+            isDefault: true,
+            personId: sdkPersonId,
+            projectId: input.projectId,
+            serviceId: "apple-app-store",
+          });
+        }
+
+        // Lazily backfill the account-token binding for this series, but ONLY
+        // when the transaction's token actually derives from THIS person's
+        // distinctId. On a cross-owner restore the JWS carries the original
+        // buyer's token — binding it here would poison the buyer's mapping.
+        if (appAccountToken) {
+          const expectedToken = yield* deriveAccountToken(input.distinctId);
+          if (appAccountToken === expectedToken) {
+            yield* queries.upsertExternalIdentifier({
+              id: generateId("personDistinctId"),
+              identifier: appAccountToken,
+              isDefault: true,
+              personId: sdkPersonId,
+              projectId: input.projectId,
+              serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+            });
+          }
+        }
+
+        return { personId: sdkPersonId };
+      }
+
+      // Back-compat: integrations that set appAccountToken to a literal
+      // distinctId (a UUID-shaped one) resolve directly. A SHA-1-derived token
+      // colliding byte-for-byte with an unrelated distinctId is ~2^-122, so no
+      // false-positive defence is warranted.
+      if (appAccountToken) {
+        const distinctIdIdentity = yield* queries.findPersonIdentityByDistinctId({
+          distinctId: appAccountToken,
+          projectId: input.projectId,
+        });
+        if (Option.isSome(distinctIdIdentity)) {
+          yield* Effect.annotateCurrentSpan({
+            "app_store.identity_result": "app_account_token",
+          });
+          return {
+            personId: yield* queries.resolveCanonicalPersonId({
+              personId: distinctIdIdentity.value.personId,
+            }),
+          };
+        }
+      }
+
+      // Existing `apple-app-store` binding (keyed on originalTransactionId /
+      // transactionId, or — for token-bearing series — the token itself).
+      // Checked before the account-token binding because it reflects
+      // cross-owner transfers that the per-user token binding deliberately
+      // doesn't. Canonicalized: the identify-completion workflow never repoints
+      // external identifiers, so a post-merge renewal would otherwise resolve
+      // to the archived source person.
+      const externalIdentifier = yield* queries.findExternalIdentifier({
+        identifier: input.personIdentifier,
+        projectId: input.projectId,
+        serviceId: "apple-app-store",
+      });
+      if (Option.isSome(externalIdentifier)) {
+        yield* Effect.annotateCurrentSpan({
+          "app_store.identity_result": "external_identifier",
+        });
+        return {
+          personId: yield* queries.resolveCanonicalPersonId({
+            personId: externalIdentifier.value.personId,
+          }),
+        };
+      }
+
+      // Pre-registered account-token binding (written at identity
+      // create/identify) — the instant-resolution path for a user's first-ever
+      // webhook, before any SDK transaction sync has bound the series.
+      if (appAccountToken) {
+        const tokenBinding = yield* queries.findExternalIdentifier({
+          identifier: appAccountToken,
+          projectId: input.projectId,
+          serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+        });
+        if (Option.isSome(tokenBinding)) {
+          yield* Effect.annotateCurrentSpan({
+            "app_store.identity_result": "account_token_binding",
+          });
+          return {
+            personId: yield* queries.resolveCanonicalPersonId({
+              personId: tokenBinding.value.personId,
+            }),
+          };
+        }
+      }
+
+      const anonymousDistinctId = buildAppStoreWebhookAnonymousDistinctId({
+        personIdentifier: input.personIdentifier,
+        providerEnvironment: input.providerEnvironment,
+      });
+      const personId = yield* _resolveDistinctIdToPersonId({
+        distinctId: anonymousDistinctId,
+        eventTimestamp: input.occurredAt,
+        origin: PersonOrigin.AppStoreWebhook,
+        projectId: input.projectId,
+      });
+
+      yield* queries.createExternalIdentifier({
+        id: generateId("personDistinctId"),
+        identifier: input.personIdentifier,
+        isDefault: true,
+        personId,
+        projectId: input.projectId,
+        serviceId: "apple-app-store",
+      });
+
+      yield* Effect.annotateCurrentSpan({
+        "app_store.identity_result": "webhook_stand_in",
+      });
+      return { personId };
+    },
+  );
+
+  /**
+   * Builds the `PurchaseActionContext` shared by every per-action method on
+   * `PurchaseProcessingService`. Per-method extras (money, dates, trial flag,
+   * etc.) are spread onto this base by the matching `record*` method below.
+   *
+   * `idempotencyKey` is derived here (not at each call site) so every App
+   * Store record path goes through the same key-construction rules. The
+   * helper returns an Effect that fails with
+   * `AppStorePurchaseProcessingIdempotencyKeyDerivationError` when the JWS
+   * lacks the inputs we need — always an upstream bug, propagated to the
+   * caller.
+   */
+  const _buildPurchaseActionBase = (input: {
+    readonly decodedTransaction: JWSTransactionDecodedPayload;
+    readonly decodedRenewalInfo: Option.Option<JWSRenewalInfoDecodedPayload>;
+    readonly idempotencyEventType: AppStorePurchaseProcessingEventType;
+    readonly notificationUUID?: string;
+    readonly sdkTransactionId?: string;
+    readonly occurredAt: Date;
+    readonly organizationId: string;
+    readonly paymentProviderConfigurationId: string;
+    readonly paymentProviderConfigurationProductId: string;
+    readonly personId: string;
+    readonly projectId: string;
+    readonly providerEnvironment: ProviderEnvironmentValue;
+    readonly providerEventType: string;
+    readonly receivedAt: Date;
+    readonly source: "sdk" | "webhook" | "reconciliation";
+  }) =>
+    Effect.gen(function* () {
+      const transaction = input.decodedTransaction;
+      const idempotencyKey = yield* getAppStorePurchaseProcessingIdempotencyKey({
+        decodedTransaction: transaction,
+        decodedRenewalInfo: input.decodedRenewalInfo,
+        eventType: input.idempotencyEventType,
+        sdkTransactionId: input.sdkTransactionId,
+      });
+      yield* Effect.annotateCurrentSpan("voidhash.purchase.idempotency_key", idempotencyKey);
+      const base: PurchaseActionContext = {
+        idempotencyKey,
+        occurredAt: input.occurredAt,
+        organizationId: input.organizationId,
+        paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+        paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+        personId: input.personId,
+        projectId: input.projectId,
+        providerEnvironment: input.providerEnvironment,
+        providerEventType: input.providerEventType,
+        providerId: "apple-app-store" as const,
+        providerSubscriptionId: getAppStoreProviderSubscriptionId(transaction),
+        providerTransactionId: getAppStoreProviderTransactionId({
+          decodedTransaction: transaction,
+          sdkTransactionId: input.sdkTransactionId,
+        }),
+        providerWebhookNotificationId: Option.fromNullishOr(input.notificationUUID),
+        rawProviderPayload: Option.some(transaction),
+        receivedAt: input.receivedAt,
+        source: input.source,
+      };
+      return base;
+    });
+
+  /**
+   * Builds the platform-neutral money record (gross / commission / tax /
+   * proceeds in original currency + USD mirror) from a decoded JWS. Delegates
+   * to {@link buildAppStoreMoney} which owns commission rate selection
+   * (Small Business Program / year-2+) and tax estimation from the storefront.
+   */
+  const _money = (
+    decodedTransaction: JWSTransactionDecodedPayload,
+    globalConfiguration: AppStoreGlobalConfiguration,
+    occurredAt: Date,
+  ) =>
+    buildAppStoreMoney({
+      decoded: decodedTransaction,
+      fxRateService,
+      globalConfiguration,
+      occurredAt,
+    });
+
+  /**
+   * Builds a synthetic `JWSTransactionDecodedPayload` carrying just the price
+   * and currency from a `JWSRenewalInfoDecodedPayload`. Used by the price-
+   * increase notification, where the new price lives on the renewal info
+   * instead of the transaction. The result is fed through
+   * {@link buildAppStoreMoney} so it picks up commission and tax via the
+   * same rules as the inline-transaction path; everything else (the
+   * transaction's storefront, ownership type, etc.) is preserved from the
+   * underlying transaction.
+   */
+  const _moneyForRenewalPrice = (
+    decodedTransaction: JWSTransactionDecodedPayload,
+    globalConfiguration: AppStoreGlobalConfiguration,
+    occurredAt: Date,
+    renewalPriceMilliunits: number,
+    renewalCurrency: string,
+  ) =>
+    buildAppStoreMoney({
+      decoded: {
+        ...decodedTransaction,
+        currency: Option.some(renewalCurrency),
+        price: Option.some(renewalPriceMilliunits),
+      },
+      fxRateService,
+      globalConfiguration,
+      occurredAt,
+    });
+
+  /**
+   * App-Store-specific resolution shared by every `record*` method: compute
+   * identifiers, resolve the person, look up the product mapping, build the
+   * shared `PurchaseActionContext`.
+   *
+   * Branches:
+   * - `"ignored"` — Apple-valid payload without a usable `productId`. Caller
+   *   short-circuits with `makeIgnoredPurchaseProcessingResult()`.
+   * - `"resolved"` — caller proceeds with normal processing.
+   *
+   * Idempotency on duplicate webhook / SDK delivery is enforced downstream by
+   * `PurchaseProcessingService`'s purchase-ledger reservation plus DB-level
+   * UNIQUE constraints on the provider id columns.
+   */
+  const _resolveAppStorePurchaseContext = (
+    input: RecordTransactionInput,
+    providerEventType: AppStorePurchaseProcessingEventType,
+  ) =>
+    Effect.gen(function* () {
+      yield* Effect.annotateCurrentSpan("voidhash.payment_provider.event_type", providerEventType);
+      const providerTransactionIdOp = getAppStoreProviderTransactionId({
+        decodedTransaction: input.decodedTransaction,
+        sdkTransactionId: input.source === "sdk" ? input.sdkTransactionId : undefined,
+      });
+      if (Option.isNone(providerTransactionIdOp)) {
+        return yield* new AppStorePaymentProviderServiceError({
+          cause:
+            "App Store transaction has no transactionId (missing from decoded JWS and SDK fallback)",
+        });
+      }
+      const providerTransactionId = providerTransactionIdOp.value;
+
+      const occurredAt = Option.match(input.decodedTransaction.purchaseDate, {
+        onNone: () => input.receivedAt,
+        onSome: (ms) => new Date(ms),
+      });
+      const productId = Option.getOrUndefined(input.decodedTransaction.productId);
+      if (!productId) {
+        return { kind: "ignored" as const };
+      }
+
+      const personIdentifierOp = getAppStorePersonIdentifier(input.decodedTransaction);
+      if (input.source !== "sdk" && Option.isNone(personIdentifierOp)) {
+        return yield* new AppStorePaymentProviderTransactionMissingPersonIdentifierError({
+          providerTransactionId,
+        });
+      }
+      // Parsed up-front (before person resolution) so the cross-owner transfer
+      // mode is available to `_resolvePersonForAppStoreTransaction`.
+      const parsedConfiguration = yield* Schema.decodeUnknownEffect(globalConfigurationSchema)(
+        input.configuration.configuration,
+      );
+
+      const resolvedPerson = yield* _resolvePersonForAppStoreTransaction({
+        appAccountToken: Option.getOrUndefined(input.decodedTransaction.appAccountToken),
+        distinctId: input.source === "sdk" ? input.distinctId : undefined,
+        occurredAt,
+        organizationId: input.project.organizationId,
+        paymentProviderConfigurationId: input.configuration.id,
+        personIdentifier: Option.getOrElse(personIdentifierOp, () => providerTransactionId),
+        projectId: input.project.id,
+        providerEnvironment: input.providerEnvironment,
+        providerSubscriptionId: Option.getOrUndefined(
+          getAppStoreProviderSubscriptionId(input.decodedTransaction),
+        ),
+        providerTransactionId,
+        source: input.source,
+        transferMode:
+          parsedConfiguration.subscriptionTransferMode ?? DEFAULT_SUBSCRIPTION_TRANSFER_MODE,
+      });
+      yield* Effect.annotateCurrentSpan("voidhash.person.id", resolvedPerson.personId);
+
+      const providerProduct = yield* queries.findPaymentProviderConfigurationProductByPrimaryKey({
+        paymentProviderConfigurationId: input.configuration.id,
+        providerProductKey: productId,
+      });
+      if (!providerProduct) {
+        return yield* new AppStorePaymentProviderProductNotMappedError({
+          paymentProviderConfigurationId: input.configuration.id,
+          providerProductKey: productId,
+        });
+      }
+      yield* Effect.annotateCurrentSpan("voidhash.payment_provider.product_id", providerProduct.id);
+      yield* Effect.annotateCurrentSpan("voidhash.product.id", providerProduct.productId);
+
+      const money = yield* _money(input.decodedTransaction, parsedConfiguration, occurredAt);
+      const base = yield* _buildPurchaseActionBase({
+        decodedTransaction: input.decodedTransaction,
+        decodedRenewalInfo: input.decodedRenewalInfo,
+        idempotencyEventType: providerEventType,
+        notificationUUID: input.notificationUUID,
+        occurredAt,
+        organizationId: input.project.organizationId,
+        paymentProviderConfigurationId: input.configuration.id,
+        paymentProviderConfigurationProductId: providerProduct.id,
+        personId: resolvedPerson.personId,
+        projectId: input.project.id,
+        providerEnvironment: input.providerEnvironment,
+        providerEventType,
+        receivedAt: input.receivedAt,
+        sdkTransactionId: input.source === "sdk" ? input.sdkTransactionId : undefined,
+        source: input.source,
+      });
+
+      return {
+        base,
+        decodedTransaction: input.decodedTransaction,
+        globalConfiguration: parsedConfiguration,
+        kind: "resolved" as const,
+        money,
+        occurredAt,
+        subtype: input.subtype,
+      };
+    });
+
+  /**
+   * Records a new App Store purchase. Used for both auto-renewable subscription
+   * initial buys (Apple `SUBSCRIBED`) and non-renewing / consumable / non-
+   * consumable charges (Apple `ONE_TIME_CHARGE`), plus the SDK path where the
+   * client just observed a successful StoreKit transaction. Routes to
+   * `startSubscription`, `renewSubscription`, or `completeOneTimePurchase`
+   * depending on the decoded transaction shape.
+   */
+  const recordPurchase = Effect.fn("recordPurchase")(function* (input: RecordTransactionInput) {
+    const isRenewal = Option.exists(
+      input.decodedTransaction.transactionReason,
+      (reason) => reason === "RENEWAL",
+    );
+    const providerEventType = isRenewal ? "renewal" : "purchase";
+    const ctx = yield* _resolveAppStorePurchaseContext(input, providerEventType);
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+
+    const isAutoRenewableSubscription = Option.exists(
+      ctx.decodedTransaction.type,
+      (type) => type === "Auto-Renewable Subscription",
+    );
+
+    if (isAutoRenewableSubscription) {
+      const startsAt = Option.match(ctx.decodedTransaction.originalPurchaseDate, {
+        onNone: () => ctx.occurredAt,
+        onSome: (ms) => new Date(ms),
+      });
+      const isTrial = Option.exists(
+        ctx.decodedTransaction.offerDiscountType,
+        (offer) => offer === "FREE_TRIAL",
+      );
+      const expiresAt = Option.map(ctx.decodedTransaction.expiresDate, (ms) => new Date(ms));
+
+      if (isRenewal) {
+        return yield* purchaseProcessingService.renewSubscription({
+          ...ctx.base,
+          expiresAt,
+          isTrial,
+          money: ctx.money,
+          renewedAt: ctx.occurredAt,
+          startsAt,
+        });
+      }
+
+      return yield* purchaseProcessingService.startSubscription({
+        ...ctx.base,
+        expiresAt,
+        isTrial,
+        money: ctx.money,
+        purchasedAt: ctx.occurredAt,
+        startsAt,
+      });
+    }
+
+    const isConsumable = Option.exists(
+      ctx.decodedTransaction.type,
+      (type) => type === "Consumable",
+    );
+    return yield* purchaseProcessingService.completeOneTimePurchase({
+      ...ctx.base,
+      money: ctx.money,
+      purchaseType: isConsumable ? ("consumable" as const) : ("one-time" as const),
+      purchasedAt: ctx.occurredAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * Records an auto-renewable subscription renewal (Apple `DID_RENEW`,
+   * including the `BILLING_RECOVERY` subtype).
+   */
+  const recordSubscriptionRenewed = Effect.fn("recordSubscriptionRenewed")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "renewal");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.renewSubscription({
+      ...ctx.base,
+      expiresAt: Option.map(ctx.decodedTransaction.expiresDate, (ms) => new Date(ms)),
+      isTrial: Option.exists(
+        ctx.decodedTransaction.offerDiscountType,
+        (offer) => offer === "FREE_TRIAL",
+      ),
+      money: ctx.money,
+      renewedAt: ctx.occurredAt,
+      startsAt: Option.match(ctx.decodedTransaction.originalPurchaseDate, {
+        onNone: () => ctx.occurredAt,
+        onSome: (ms) => new Date(ms),
+      }),
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * Records that a subscription's billing period ended without further
+   * renewal (Apple `EXPIRED`, including grace-period elapse via
+   * `GRACE_PERIOD_EXPIRED`).
+   */
+  const recordSubscriptionExpired = Effect.fn("recordSubscriptionExpired")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "expired");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    const expiredAt = Option.match(ctx.decodedTransaction.expiresDate, {
+      onNone: () => ctx.occurredAt,
+      onSome: (ms) => new Date(ms),
+    });
+    return yield* purchaseProcessingService.expireSubscription({
+      ...ctx.base,
+      expiredAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * Records that the user requested cancellation of an auto-renewable
+   * subscription (Apple `DID_CHANGE_RENEWAL_STATUS` with subtype
+   * `AUTO_RENEW_DISABLED`). Apple keeps the user entitled until the current
+   * period expires, so `cancelAtPeriodEnd` reflects what the caller passed.
+   */
+  const recordSubscriptionCanceled = Effect.fn("recordSubscriptionCanceled")(function* (
+    input: RecordTransactionInput & { readonly cancelAtPeriodEnd: boolean },
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "canceled");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.cancelSubscription({
+      ...ctx.base,
+      cancelAtPeriodEnd: input.cancelAtPeriodEnd,
+      canceledAt: ctx.occurredAt,
+      cancellationReason: Option.fromNullishOr(ctx.subtype),
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * Records an Apple-issued refund of a transaction (Apple `REFUND`).
+   */
+  const recordRefund = Effect.fn("recordRefund")(function* (input: RecordTransactionInput) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "refund");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    const refundedAt = Option.match(ctx.decodedTransaction.revocationDate, {
+      onNone: () => ctx.occurredAt,
+      onSome: (ms) => new Date(ms),
+    });
+    return yield* purchaseProcessingService.refundPurchase({
+      ...ctx.base,
+      refundReason: Option.fromNullishOr(ctx.subtype),
+      refundedAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * Records that Apple revoked an entitlement, typically a Family Sharing
+   * member's access (Apple `REVOKE`).
+   */
+  const recordEntitlementRevoked = Effect.fn("recordEntitlementRevoked")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "revoke");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    const revokedAt = Option.match(ctx.decodedTransaction.revocationDate, {
+      onNone: () => ctx.occurredAt,
+      onSome: (ms) => new Date(ms),
+    });
+    const isAutoRenewableSubscription = Option.exists(
+      ctx.decodedTransaction.type,
+      (type) => type === "Auto-Renewable Subscription",
+    );
+    if (!isAutoRenewableSubscription) {
+      return yield* purchaseProcessingService.revokePurchase({
+        ...ctx.base,
+        revocationReason: Option.fromNullishOr(ctx.subtype),
+        revokedAt,
+      });
+    }
+    return yield* purchaseProcessingService.revokeSubscription({
+      ...ctx.base,
+      revocationReason: Option.fromNullishOr(ctx.subtype),
+      revokedAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * Records that Apple reversed a prior refund (Apple `REFUND_REVERSED`). The
+   * reversed transaction's `revocationDate` is cleared in the new payload; we
+   * anchor `reversedAt` on `signedDate` (when Apple signed the reversal),
+   * falling back to `occurredAt` if signedDate is absent.
+   */
+  const recordRefundReversed = Effect.fn("recordRefundReversed")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "refund_reversed");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    const reversedAt = Option.match(ctx.decodedTransaction.signedDate, {
+      onNone: () => ctx.occurredAt,
+      onSome: (ms) => new Date(ms),
+    });
+    return yield* purchaseProcessingService.reverseRefund({
+      ...ctx.base,
+      reversedAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /** `DID_FAIL_TO_RENEW` — billing-retry / grace state. */
+  const recordBillingRetry = Effect.fn("recordBillingRetry")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "billing_retry");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    /**
+     * Apple's `gracePeriodExpiresDate` lives on `renewalInfo`, not on the
+     * decoded transaction. When the webhook handler decoded `signedRenewalInfo`
+     * we have it here; otherwise the field stays absent and we record the
+     * billing-retry start without a grace deadline.
+     */
+    const gracePeriodExpiresAt = Option.flatMap(input.decodedRenewalInfo, (renewalInfo) =>
+      Option.map(renewalInfo.gracePeriodExpiresDate, (ms) => new Date(ms)),
+    );
+    return yield* purchaseProcessingService.enterBillingRetry({
+      ...ctx.base,
+      billingRetryAt: ctx.occurredAt,
+      gracePeriodExpiresAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /** `RENEWAL_EXTENDED` / `RENEWAL_EXTENSION` — service-issued period extension. */
+  const recordSubscriptionExtended = Effect.fn("recordSubscriptionExtended")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "extended");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    if (Option.isNone(ctx.decodedTransaction.expiresDate)) {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.extendSubscription({
+      ...ctx.base,
+      extendedTo: new Date(ctx.decodedTransaction.expiresDate.value),
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * `DID_CHANGE_RENEWAL_PREF` — customer selected a different product for the
+   * next renewal. Records the intent; the actual product swap happens at the
+   * next renewal via `renewSubscription`.
+   */
+  const recordRenewalPreferenceChange = Effect.fn("recordRenewalPreferenceChange")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "renewal_pref_change");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    if (Option.isNone(ctx.decodedTransaction.productId)) {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    // Try to resolve the new product mapping; absent is OK (records intent).
+    const newProduct = yield* queries.findPaymentProviderConfigurationProductByPrimaryKey({
+      paymentProviderConfigurationId: ctx.base.paymentProviderConfigurationId,
+      providerProductKey: ctx.decodedTransaction.productId.value,
+    });
+    return yield* purchaseProcessingService.changeRenewalPreference({
+      ...ctx.base,
+      newPaymentProviderConfigurationProductId: Option.fromNullishOr(newProduct?.id),
+      newProviderProductKey: ctx.decodedTransaction.productId.value,
+    });
+  }, _withRecordTransactionObservability);
+
+  /** `OFFER_REDEEMED` — promotional / introductory / win-back offer applied. */
+  const recordOfferRedeemed = Effect.fn("recordOfferRedeemed")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "offer_redeemed");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.redeemOffer({
+      ...ctx.base,
+      offerId: ctx.decodedTransaction.offerIdentifier,
+      redeemedAt: ctx.occurredAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /** `PRICE_INCREASE` — Apple has scheduled a price change for the next renewal. */
+  const recordPriceIncrease = Effect.fn("recordPriceIncrease")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "price_increase");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    /**
+     * The next renewal date is when the new price applies; pricing fields live
+     * on `renewalInfo`, not the transaction. Money falls back to the decoded
+     * transaction price when renewal info is absent.
+     */
+    const effectiveAt = Option.flatMap(input.decodedRenewalInfo, (renewalInfo) =>
+      Option.map(renewalInfo.renewalDate, (ms) => new Date(ms)),
+    );
+    /**
+     * The next renewal date is when the new price applies; pricing fields live
+     * on `renewalInfo`, not the transaction. When renewal info carries the
+     * upcoming price we synthesize a money record for that price under the
+     * same commission / tax rules as the inline-transaction path; otherwise
+     * we fall back to the transaction's existing money breakdown.
+     */
+    const renewalInfo = Option.getOrUndefined(input.decodedRenewalInfo);
+    const renewalPrice = renewalInfo ? Option.getOrUndefined(renewalInfo.renewalPrice) : undefined;
+    const renewalCurrency = renewalInfo ? Option.getOrUndefined(renewalInfo.currency) : undefined;
+    const money =
+      renewalPrice !== undefined && renewalCurrency !== undefined
+        ? yield* _moneyForRenewalPrice(
+            ctx.decodedTransaction,
+            ctx.globalConfiguration,
+            ctx.occurredAt,
+            renewalPrice,
+            renewalCurrency,
+          )
+        : ctx.money;
+    return yield* purchaseProcessingService.recordPriceIncrease({
+      ...ctx.base,
+      effectiveAt,
+      money,
+    });
+  }, _withRecordTransactionObservability);
+
+  /** `DID_CHANGE_RENEWAL_STATUS` subtype `AUTO_RENEW_ENABLED` — customer un-canceled. */
+  const recordAutoRenewResumed = Effect.fn("recordAutoRenewResumed")(function* (
+    input: RecordTransactionInput,
+  ) {
+    const ctx = yield* _resolveAppStorePurchaseContext(input, "auto_renew_resumed");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.resumeAutoRenew({
+      ...ctx.base,
+      resumedAt: ctx.occurredAt,
+    });
+  }, _withRecordTransactionObservability);
+
+  /**
+   * Informational notifications (`REFUND_DECLINED`, `METADATA_UPDATE`,
+   * `RESCIND_CONSENT`, `CONSUMPTION_REQUEST`, `EXTERNAL_PURCHASE_TOKEN`).
+   * No state change in purchase-processing — the webhook handler's
+   * `payment_provider_notification_processed` row is the durable record.
+   * This method exists so the webhook handler has a uniform "record" target;
+   * it just returns the ignored-result.
+   */
+  const recordInformationalNotification = Effect.fn("recordInformationalNotification")(function* (
+    input: RecordTransactionInput,
+  ) {
+    yield* Effect.logInfo("App Store informational notification observed (no state change)", {
+      providerEventType: "informational",
+      source: input.source,
+    });
+    return makeIgnoredPurchaseProcessingResult();
+  }, _withRecordTransactionObservability);
+
+  return {
+    ...provider,
+    buildSdkContextFromConfiguration,
+    recordAutoRenewResumed,
+    recordBillingRetry,
+    recordEntitlementRevoked,
+    recordInformationalNotification,
+    recordOfferRedeemed,
+    recordPriceIncrease,
+    recordPurchase,
+    recordRefund,
+    recordRefundReversed,
+    recordRenewalPreferenceChange,
+    recordSubscriptionCanceled,
+    recordSubscriptionExpired,
+    recordSubscriptionExtended,
+    recordSubscriptionRenewed,
+  } as const;
+});
+
+export type { AppStoreSdkContext };
+
+export class AppStorePaymentProvider extends Context.Service<AppStorePaymentProvider>()(
+  "core/AppStorePaymentProvider",
+  { make },
+) {
+  static readonly layer = Layer.effect(AppStorePaymentProvider)(AppStorePaymentProvider.make).pipe(
+    Layer.provideMerge(AppStorePaymentProviderServiceQueries.layer),
+  );
+}
diff --git a/packages/core/src/services/paymentProviders/appStore/sdk-context.ts b/packages/core/src/services/paymentProviders/appStore/sdk-context.ts
new file mode 100644
index 000000000..7287b6971
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/sdk-context.ts
@@ -0,0 +1,147 @@
+/**
+ * Per-tenant App Store SDK helpers shared by the webhook handler and the SDK
+ * boundary. Owns construction of the REST client and signed-data verifier and
+ * encapsulates the production-then-sandbox fallback strategy — Apple does not
+ * tell us which environment a transaction or notification originated from, so
+ * we try production first and fall back on the corresponding "not found" /
+ * verification failure tag.
+ */
+import {
+  type AppStoreServerSdk,
+  AppStoreServerSdkClient,
+  Environment,
+  SignedDataVerifier,
+  type TransactionHistoryRequest,
+  type GetTransactionHistoryVersion,
+  type Status,
+} from "@voidhash/app-store-server-sdk";
+import { Effect, Option } from "effect";
+
+import { APPLE_ROOT_CERTIFICATES_PEM } from "./constants.ts";
+
+export type AppStoreEnvironment = (typeof Environment)[keyof typeof Environment];
+
+export type AppStoreSdkContextConfig = {
+  readonly appAppleId: string;
+  readonly bundleId: string;
+  readonly inAppPurchaseKeyIssuerId: string;
+  readonly inAppPurchaseKeyId: string;
+  readonly inAppPurchasePrivateKey: string;
+};
+
+export const buildAppStoreSdkContext = (
+  appStoreServerSdk: typeof AppStoreServerSdk.Service,
+  config: AppStoreSdkContextConfig,
+) => {
+  const clientFor = (environment: AppStoreEnvironment) =>
+    AppStoreServerSdkClient.make(appStoreServerSdk, {
+      bundleId: config.bundleId,
+      environment,
+      issuerId: config.inAppPurchaseKeyIssuerId,
+      keyId: config.inAppPurchaseKeyId,
+      signingKey: config.inAppPurchasePrivateKey,
+    });
+
+  const verifierFor = (environment: AppStoreEnvironment) =>
+    SignedDataVerifier.make(appStoreServerSdk, {
+      appAppleId: Option.some(Number(config.appAppleId)),
+      bundleId: config.bundleId,
+      enableOnlineChecks: true,
+      environment,
+      rootCertificates: [...APPLE_ROOT_CERTIFICATES_PEM],
+      verifyNotificationOverride: Option.none(),
+    });
+
+  const getTransactionInfo = (transactionId: string) => {
+    const tryEnvironment = (environment: AppStoreEnvironment) =>
+      clientFor(environment)
+        .getTransactionInfo(transactionId)
+        .pipe(Effect.map((transactionInfo) => ({ environment, transactionInfo })));
+
+    return tryEnvironment(Environment.PRODUCTION).pipe(
+      Effect.catchTag("AppStoreNotFoundError", () => tryEnvironment(Environment.SANDBOX)),
+    );
+  };
+
+  const decodeSignedTransaction = (
+    signedTransactionInfo: string,
+    environment: AppStoreEnvironment,
+  ) => verifierFor(environment).verifyAndDecodeTransaction(signedTransactionInfo);
+
+  /**
+   * Decodes Apple's signed renewal info JWS using the per-tenant verifier.
+   * Mirrors {@link decodeSignedTransaction}; both webhook and reconciliation
+   * paths use this to extract `gracePeriodExpiresDate`, `autoRenewStatus`,
+   * `priceIncreaseStatus`, and renewal pricing fields that live on
+   * `renewalInfo` rather than the transaction itself.
+   */
+  const decodeSignedRenewalInfo = (signedRenewalInfo: string, environment: AppStoreEnvironment) =>
+    verifierFor(environment).verifyAndDecodeRenewalInfo(signedRenewalInfo);
+
+  const decodeNotification = (signedPayload: string) => {
+    const tryEnvironment = (environment: AppStoreEnvironment) =>
+      verifierFor(environment).verifyAndDecodeNotification(signedPayload);
+
+    return tryEnvironment(Environment.PRODUCTION).pipe(
+      Effect.catchTag("VerificationError", () => tryEnvironment(Environment.SANDBOX)),
+    );
+  };
+
+  /**
+   * Production-then-sandbox fallback wrapper around `getTransactionHistory`.
+   * Mirrors {@link getTransactionInfo}'s strategy — Apple doesn't tell us
+   * which environment the original transaction lives in, so we try production
+   * first and fall back on `AppStoreNotFoundError`.
+   *
+   * Returns the matched environment alongside the response so callers can
+   * use the right verifier when decoding signed transactions from the
+   * history.
+   */
+  const getTransactionHistoryWithEnvironmentFallback = (
+    transactionId: string,
+    revision: Option.Option<string>,
+    request: TransactionHistoryRequest,
+    version: Option.Option<
+      (typeof GetTransactionHistoryVersion)[keyof typeof GetTransactionHistoryVersion]
+    >,
+  ) => {
+    const tryEnvironment = (environment: AppStoreEnvironment) =>
+      clientFor(environment)
+        .getTransactionHistory(transactionId, revision, request, version)
+        .pipe(Effect.map((historyResponse) => ({ environment, historyResponse })));
+
+    return tryEnvironment(Environment.PRODUCTION).pipe(
+      Effect.catchTag("AppStoreNotFoundError", () => tryEnvironment(Environment.SANDBOX)),
+    );
+  };
+
+  /**
+   * Production-then-sandbox fallback wrapper around `getAllSubscriptionStatuses`.
+   * Same fallback semantics as the history wrapper above.
+   */
+  const getAllSubscriptionStatusesWithEnvironmentFallback = (
+    transactionId: string,
+    status: Option.Option<Status[]>,
+  ) => {
+    const tryEnvironment = (environment: AppStoreEnvironment) =>
+      clientFor(environment)
+        .getAllSubscriptionStatuses(transactionId, status)
+        .pipe(Effect.map((statusResponse) => ({ environment, statusResponse })));
+
+    return tryEnvironment(Environment.PRODUCTION).pipe(
+      Effect.catchTag("AppStoreNotFoundError", () => tryEnvironment(Environment.SANDBOX)),
+    );
+  };
+
+  return {
+    bundleId: config.bundleId,
+    decodeNotification,
+    decodeSignedRenewalInfo,
+    decodeSignedTransaction,
+    getAllSubscriptionStatusesWithEnvironmentFallback,
+    getTransactionHistoryWithEnvironmentFallback,
+    getTransactionInfo,
+  };
+};
+
+export type AppStoreSdkContext = ReturnType<typeof buildAppStoreSdkContext>;
diff --git a/packages/core/src/services/paymentProviders/googlePlay/config-provider.test.ts b/packages/core/src/services/paymentProviders/googlePlay/config-provider.test.ts
new file mode 100644
index 000000000..56742e106
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/config-provider.test.ts
@@ -0,0 +1,118 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { isEncrypted } from "../../../utils/crypto/SecretBox.ts";
+import { makeGooglePlayConfigProvider } from "./config-provider.ts";
+
+const bytesToBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i] as number);
+  return btoa(binary);
+};
+const newKeyB64 = () => bytesToBase64(crypto.getRandomValues(new Uint8Array(32)));
+
+const SERVICE_ACCOUNT_KEY = JSON.stringify({
+  auth_uri: "https://accounts.google.com/o/oauth2/auth",
+  client_email: "voidhash@example-project.iam.gserviceaccount.com",
+  client_id: "1234567890",
+  private_key: "-----BEGIN PRIVATE KEY-----\nMIGT...secret...==\n-----END PRIVATE KEY-----\n",
+  private_key_id: "private-key-id",
+  project_id: "example-project",
+  token_uri: "https://oauth2.googleapis.com/token",
+  type: "service_account",
+});
+
+const validGlobalConfig = (overrides: Record<string, unknown> = {}) => ({
+  googleRealTimeDeveloperNotificationForwardingUrl: "",
+  googleRealTimeDeveloperNotificationTopicName: "",
+  packageName: "com.example.app",
+  serviceAccountKey: SERVICE_ACCOUNT_KEY,
+  ...overrides,
+});
+
+const run = <A, E>(
+  keyB64: string,
+  body: (provider: ReturnType<typeof makeGooglePlayConfigProvider>) => Effect.Effect<A, E>,
+): Promise<A> =>
+  Effect.gen(function* () {
+    const secretCrypto = yield* PaymentConfigSecretCrypto;
+    return yield* body(makeGooglePlayConfigProvider(secretCrypto));
+  }).pipe(
+    Effect.provide(PaymentConfigSecretCrypto.layer({ key: Effect.succeed(keyB64) })),
+    Effect.runPromise,
+  );
+
+describe("GooglePlay config-provider", () => {
+  it("validateGlobalConfiguration encrypts the service account key on write", async () => {
+    const result = await run(newKeyB64(), (p) =>
+      p.validateGlobalConfiguration(validGlobalConfig()),
+    );
+    expect(result.paymentProviderKey).toBe("com.example.app");
+    expect(isEncrypted(result.parsedConfiguration.serviceAccountKey)).toBe(true);
+    expect(result.parsedConfiguration.serviceAccountKey).not.toContain("PRIVATE KEY");
+  });
+
+  it("stores the service account key as plaintext when no encryption key is configured", async () => {
+    const result = await run("", (p) => p.validateGlobalConfiguration(validGlobalConfig()));
+    expect(result.parsedConfiguration.serviceAccountKey).toBe(SERVICE_ACCOUNT_KEY);
+    expect(isEncrypted(result.parsedConfiguration.serviceAccountKey)).toBe(false);
+  });
+
+  it("encrypt-on-write is idempotent for an already-encrypted service account key", async () => {
+    const key = newKeyB64();
+    const once = await run(key, (p) => p.validateGlobalConfiguration(validGlobalConfig()));
+    const twice = await run(key, (p) =>
+      p.validateGlobalConfiguration(
+        validGlobalConfig({
+          serviceAccountKey: once.parsedConfiguration.serviceAccountKey,
+        }),
+      ),
+    );
+    expect(twice.parsedConfiguration.serviceAccountKey).toBe(
+      once.parsedConfiguration.serviceAccountKey,
+    );
+  });
+
+  it("fails with a configuration validation error on an invalid service account file", async () => {
+    const error = await run("", (p) =>
+      Effect.flip(
+        p.validateGlobalConfiguration(
+          validGlobalConfig({
+            serviceAccountKey: JSON.stringify({ type: "not_service_account" }),
+          }),
+        ),
+      ),
+    );
+    expect(error._tag).toBe("PaymentProviderConfigurationValidationError");
+  });
+
+  it("fails with a configuration validation error on an invalid RTDN topic name", async () => {
+    const error = await run("", (p) =>
+      Effect.flip(
+        p.validateGlobalConfiguration(
+          validGlobalConfig({
+            googleRealTimeDeveloperNotificationTopicName: "invalid-topic",
+          }),
+        ),
+      ),
+    );
+    expect(error._tag).toBe("PaymentProviderConfigurationValidationError");
+  });
+
+  it("validateProductConfiguration derives the product key with an optional base plan", async () => {
+    const result = await run("", (p) =>
+      p.validateProductConfiguration({ basePlanId: "monthly", productId: "premium" }),
+    );
+    expect(result.productKey).toBe("premium:monthly");
+    expect(result.parsedConfiguration.productId).toBe("premium");
+    expect(result.parsedConfiguration.basePlanId).toBe("monthly");
+  });
+
+  it("defaults product key to the product ID when base plan is empty", async () => {
+    const result = await run("", (p) =>
+      p.validateProductConfiguration({ basePlanId: "", productId: "premium" }),
+    );
+    expect(result.productKey).toBe("premium");
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/googlePlay/config-provider.ts b/packages/core/src/services/paymentProviders/googlePlay/config-provider.ts
new file mode 100644
index 000000000..31661dc95
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/config-provider.ts
@@ -0,0 +1,213 @@
+/**
+ * Google Play config-write adapter for the admin configuration and product
+ * mapping flow. It owns the canonical Google Play configuration schema, key
+ * derivation, default blobs, and encryption of the service-account JSON before
+ * persistence.
+ */
+import { Effect, Layer, Schema } from "effect";
+
+import { PaymentProviderConfigurationValidationError } from "../../../domain/paymentProvider/PaymentProviderConfiguration.ts";
+import { PaymentProviderProductValidationError } from "../../../domain/paymentProvider/PaymentProviderProduct.ts";
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { isEncrypted } from "../../../utils/crypto/SecretBox.ts";
+import { GooglePlayPaymentProvider } from "../PaymentProvider.ts";
+
+const PACKAGE_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9_]*(\.[A-Za-z][A-Za-z0-9_]*)+$/;
+const RTDN_TOPIC_PATTERN = /^projects\/[^/]+\/topics\/[^/]+$/;
+
+const serviceAccountKeySchema = Schema.Struct({
+  client_email: Schema.String.check(Schema.isMinLength(1)),
+  client_id: Schema.String.check(Schema.isMinLength(1)),
+  private_key: Schema.String.check(Schema.isMinLength(1)),
+  private_key_id: Schema.String.check(Schema.isMinLength(1)),
+  project_id: Schema.String.check(Schema.isMinLength(1)),
+  type: Schema.Literal("service_account"),
+});
+
+export const globalConfigurationSchema = Schema.Struct({
+  googleRealTimeDeveloperNotificationForwardingUrl: Schema.String,
+  googleRealTimeDeveloperNotificationTopicName: Schema.String,
+  packageName: Schema.String.check(Schema.isPattern(PACKAGE_NAME_PATTERN)),
+  serviceAccountKey: Schema.String.check(Schema.isMinLength(1)),
+});
+
+export const productConfigurationSchema = Schema.Struct({
+  basePlanId: Schema.optional(Schema.String),
+  productId: Schema.String.check(Schema.isMinLength(1)),
+});
+
+export type GooglePlayGlobalConfiguration = Schema.Schema.Type<typeof globalConfigurationSchema>;
+export type GooglePlayProductConfiguration = Schema.Schema.Type<typeof productConfigurationSchema>;
+
+export interface GooglePlayConfigProvider {
+  readonly id: "google-play";
+  readonly title: string;
+  readonly type: "native";
+  readonly defaultGlobalConfiguration: () => Effect.Effect<GooglePlayGlobalConfiguration>;
+  readonly defaultProductConfiguration: () => Effect.Effect<GooglePlayProductConfiguration>;
+  readonly createGlobalKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly createProductKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly validateGlobalConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: GooglePlayGlobalConfiguration;
+      readonly paymentProviderKey: string;
+    },
+    PaymentProviderConfigurationValidationError
+  >;
+  readonly validateProductConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: GooglePlayProductConfiguration;
+      readonly productKey: string;
+    },
+    PaymentProviderProductValidationError
+  >;
+}
+
+const validatePlainServiceAccountKey = (serviceAccountKey: string) => {
+  if (isEncrypted(serviceAccountKey)) {
+    return Effect.void;
+  }
+
+  return Effect.try({
+    try: () => JSON.parse(serviceAccountKey) as unknown,
+    catch: (cause) =>
+      new PaymentProviderConfigurationValidationError({
+        cause: `Service account key file must be valid JSON: ${String(cause)}`,
+      }),
+  }).pipe(
+    Effect.flatMap((parsedJson) =>
+      Schema.decodeUnknownEffect(serviceAccountKeySchema)(parsedJson).pipe(
+        Effect.mapError(
+          (error) =>
+            new PaymentProviderConfigurationValidationError({
+              cause: `Service account key file is not a Google service account JSON: ${error.message}`,
+            }),
+        ),
+      ),
+    ),
+    Effect.asVoid,
+  );
+};
+
+const validateOptionalUrl = (url: string) => {
+  if (url.length === 0) {
+    return Effect.void;
+  }
+
+  return Effect.try({
+    try: () => new URL(url),
+    catch: () =>
+      new PaymentProviderConfigurationValidationError({
+        cause: "Raw Google events forwarding URL must be a valid URL",
+      }),
+  }).pipe(
+    Effect.filterOrFail(
+      (parsedUrl) => parsedUrl.protocol === "http:" || parsedUrl.protocol === "https:",
+      () =>
+        new PaymentProviderConfigurationValidationError({
+          cause: "Raw Google events forwarding URL must use http or https",
+        }),
+    ),
+    Effect.asVoid,
+  );
+};
+
+const validateOptionalRtdnTopicName = (topicName: string) => {
+  if (topicName.length === 0) {
+    return Effect.void;
+  }
+
+  return Effect.succeed(topicName).pipe(
+    Effect.filterOrFail(
+      (value) => RTDN_TOPIC_PATTERN.test(value),
+      () =>
+        new PaymentProviderConfigurationValidationError({
+          cause: "Google Play RTDN topic name must use projects/{project}/topics/{topic}",
+        }),
+    ),
+    Effect.asVoid,
+  );
+};
+
+export const makeGooglePlayConfigProvider = (
+  secretCrypto: typeof PaymentConfigSecretCrypto.Service,
+): GooglePlayConfigProvider => ({
+  createGlobalKey: (configuration) =>
+    Effect.succeed(`${(configuration as { packageName?: unknown }).packageName ?? ""}`),
+  createProductKey: (configuration) =>
+    Effect.succeed(
+      `${(configuration as { productId?: unknown }).productId ?? ""}${
+        (configuration as { basePlanId?: unknown }).basePlanId
+          ? `:${(configuration as { basePlanId?: unknown }).basePlanId}`
+          : ""
+      }`,
+    ),
+  defaultGlobalConfiguration: () =>
+    Effect.succeed({
+      googleRealTimeDeveloperNotificationForwardingUrl: "",
+      googleRealTimeDeveloperNotificationTopicName: "",
+      packageName: "",
+      serviceAccountKey: "",
+    }),
+  defaultProductConfiguration: () =>
+    Effect.succeed({
+      basePlanId: "",
+      productId: "",
+    }),
+  id: "google-play",
+  title: "Google Play",
+  type: "native",
+  validateGlobalConfiguration: (configuration) =>
+    Schema.decodeUnknownEffect(globalConfigurationSchema)(configuration).pipe(
+      Effect.mapError(
+        (error) => new PaymentProviderConfigurationValidationError({ cause: error.message }),
+      ),
+      Effect.flatMap((parsedConfiguration) =>
+        Effect.all(
+          [
+            validatePlainServiceAccountKey(parsedConfiguration.serviceAccountKey),
+            validateOptionalUrl(
+              parsedConfiguration.googleRealTimeDeveloperNotificationForwardingUrl,
+            ),
+            validateOptionalRtdnTopicName(
+              parsedConfiguration.googleRealTimeDeveloperNotificationTopicName,
+            ),
+          ],
+          { discard: true },
+        ).pipe(
+          Effect.flatMap(() =>
+            secretCrypto.encrypt(parsedConfiguration.serviceAccountKey).pipe(
+              Effect.map((serviceAccountKey) => ({
+                parsedConfiguration: { ...parsedConfiguration, serviceAccountKey },
+                paymentProviderKey: `${parsedConfiguration.packageName}`,
+              })),
+              Effect.orDie,
+            ),
+          ),
+        ),
+      ),
+    ),
+  validateProductConfiguration: (configuration) =>
+    Schema.decodeUnknownEffect(productConfigurationSchema)(configuration).pipe(
+      Effect.mapError(
+        (error) => new PaymentProviderProductValidationError({ message: error.message }),
+      ),
+      Effect.map((parsedConfiguration) => ({
+        parsedConfiguration,
+        productKey: parsedConfiguration.basePlanId
+          ? `${parsedConfiguration.productId}:${parsedConfiguration.basePlanId}`
+          : `${parsedConfiguration.productId}`,
+      })),
+    ),
+});
+
+export const GooglePlayPaymentProviderConfigLive: Layer.Layer<
+  GooglePlayPaymentProvider,
+  never,
+  PaymentConfigSecretCrypto
+> = Layer.effect(GooglePlayPaymentProvider)(
+  Effect.gen(function* () {
+    const secretCrypto = yield* PaymentConfigSecretCrypto;
+    return makeGooglePlayConfigProvider(secretCrypto);
+  }),
+);
diff --git a/packages/core/src/services/paymentProviders/googlePlay/errors.ts b/packages/core/src/services/paymentProviders/googlePlay/errors.ts
new file mode 100644
index 000000000..150e37440
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/errors.ts
@@ -0,0 +1,65 @@
+import { Schema } from "effect";
+
+/**
+ * Catch-all service error for unexpected/infrastructural failures. Business
+ * logic failures raised by Google Play services should use one of the dedicated
+ * errors below instead. Mirrors the App Store error taxonomy.
+ */
+export class GooglePlayPaymentProviderServiceError extends Schema.TaggedErrorClass<GooglePlayPaymentProviderServiceError>(
+  "GooglePlayPaymentProviderServiceError",
+)("GooglePlayPaymentProviderServiceError", { cause: Schema.String }) {}
+
+/**
+ * The project's Google Play payment provider configuration is missing or
+ * disabled for the given package name.
+ */
+export class GooglePlayPaymentProviderNotEnabledForFollowingPackageNameError extends Schema.TaggedErrorClass<GooglePlayPaymentProviderNotEnabledForFollowingPackageNameError>(
+  "GooglePlayPaymentProviderNotEnabledForFollowingPackageNameError",
+)("GooglePlayPaymentProviderNotEnabledForFollowingPackageNameError", {
+  packageName: Schema.String,
+}) {}
+
+export class GooglePlayPaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<GooglePlayPaymentProviderConfigurationNotFoundError>(
+  "GooglePlayPaymentProviderConfigurationNotFoundError",
+)("GooglePlayPaymentProviderConfigurationNotFoundError", {
+  paymentProviderConfigurationId: Schema.String,
+}) {}
+
+export class GooglePlayPaymentProviderProjectNotFoundError extends Schema.TaggedErrorClass<GooglePlayPaymentProviderProjectNotFoundError>(
+  "GooglePlayPaymentProviderProjectNotFoundError",
+)("GooglePlayPaymentProviderProjectNotFoundError", { projectId: Schema.String }) {}
+
+export class GooglePlayPaymentProviderProductNotMappedError extends Schema.TaggedErrorClass<GooglePlayPaymentProviderProductNotMappedError>(
+  "GooglePlayPaymentProviderProductNotMappedError",
+)("GooglePlayPaymentProviderProductNotMappedError", {
+  paymentProviderConfigurationId: Schema.String,
+  providerProductKey: Schema.String,
+}) {}
+
+export class GooglePlayPaymentProviderTransactionMissingPersonIdentifierError extends Schema.TaggedErrorClass<GooglePlayPaymentProviderTransactionMissingPersonIdentifierError>(
+  "GooglePlayPaymentProviderTransactionMissingPersonIdentifierError",
+)("GooglePlayPaymentProviderTransactionMissingPersonIdentifierError", {
+  purchaseToken: Schema.String,
+}) {}
+
+export class GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError extends Schema.TaggedErrorClass<GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError>(
+  "GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError",
+)("GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError", {
+  purchaseToken: Schema.String,
+}) {}
+
+/**
+ * Raised when the per-event idempotency key cannot be derived from the
+ * fetched purchase state (the Play API response lacks the anchor id or anchor
+ * date required for the given event type). Always indicates an upstream bug:
+ * a malformed Play response, a notification→eventType mapping that doesn't
+ * match the payload for that event, or Google changed their schema. No silent
+ * fallback — the webhook handler propagates this so the request fails loudly.
+ */
+export class GooglePlayPurchaseProcessingIdempotencyKeyDerivationError extends Schema.TaggedErrorClass<GooglePlayPurchaseProcessingIdempotencyKeyDerivationError>(
+  "GooglePlayPurchaseProcessingIdempotencyKeyDerivationError",
+)("GooglePlayPurchaseProcessingIdempotencyKeyDerivationError", {
+  eventType: Schema.String,
+  missingField: Schema.String,
+  purchaseToken: Schema.optional(Schema.String),
+}) {}
diff --git a/packages/core/src/services/paymentProviders/googlePlay/helpers.test.ts b/packages/core/src/services/paymentProviders/googlePlay/helpers.test.ts
new file mode 100644
index 000000000..caf69ab24
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/helpers.test.ts
@@ -0,0 +1,280 @@
+import type {
+  ProductPurchaseV2Type,
+  SubscriptionPurchaseV2Type,
+} from "@voidhash/google-play-server-sdk";
+import { Effect, Option } from "effect";
+
+import { describe, expect, it } from "../../../testing/effect-vitest.ts";
+import { GooglePlayPurchaseProcessingIdempotencyKeyDerivationError } from "./errors.ts";
+import {
+  type GooglePlayNormalizedPurchase,
+  getGooglePlayPersonIdentifier,
+  getGooglePlayPurchaseProcessingIdempotencyKey,
+  googlePlayProviderProductKey,
+  normalizeProductPurchaseV2,
+  normalizeSubscriptionPurchaseV2,
+} from "./helpers.ts";
+
+/** Builds a minimal normalized purchase; every Option field defaults to none. */
+const purchase = (
+  overrides: Partial<GooglePlayNormalizedPurchase> = {},
+): GooglePlayNormalizedPurchase => ({
+  acknowledgementState: Option.none(),
+  autoRenewEnabled: false,
+  basePlanId: Option.none(),
+  currency: Option.none(),
+  expiryTime: Option.none(),
+  isTrial: false,
+  kind: "subscription",
+  linkedPurchaseToken: Option.none(),
+  obfuscatedExternalAccountId: Option.none(),
+  offerId: Option.none(),
+  orderId: Option.none(),
+  priceMinorUnits: Option.none(),
+  productId: "product.monthly",
+  purchaseToken: "token_abc",
+  startTime: Option.none(),
+  storefront: Option.none(),
+  subscriptionState: Option.none(),
+  ...overrides,
+});
+
+describe("googlePlayProviderProductKey", () => {
+  it("returns the bare productId when no base plan is set", () => {
+    expect(googlePlayProviderProductKey("premium", Option.none())).toBe("premium");
+  });
+
+  it("composes productId:basePlanId when a base plan is set", () => {
+    expect(googlePlayProviderProductKey("premium", Option.some("monthly"))).toBe("premium:monthly");
+  });
+});
+
+describe("getGooglePlayPersonIdentifier", () => {
+  it("prefers obfuscatedExternalAccountId when present", () => {
+    expect(
+      getGooglePlayPersonIdentifier(
+        purchase({
+          obfuscatedExternalAccountId: Option.some("token_uuid"),
+          orderId: Option.some("GPA.1"),
+        }),
+      ),
+    ).toEqual(Option.some("token_uuid"));
+  });
+
+  it("falls back to orderId when the account token is absent", () => {
+    expect(getGooglePlayPersonIdentifier(purchase({ orderId: Option.some("GPA.1") }))).toEqual(
+      Option.some("GPA.1"),
+    );
+  });
+
+  it("falls back to purchaseToken when nothing else is available", () => {
+    expect(getGooglePlayPersonIdentifier(purchase({ purchaseToken: "tok" }))).toEqual(
+      Option.some("tok"),
+    );
+  });
+});
+
+describe("getGooglePlayPurchaseProcessingIdempotencyKey", () => {
+  const EXPIRES_MS = 1_707_998_400_000; // 2024-02-15T12:00:00Z
+
+  it.effect("derives a purchase key from orderId (no date — orderId is per-charge unique)", () =>
+    Effect.gen(function* () {
+      const key = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "purchase",
+        purchase: purchase({ orderId: Option.some("GPA.0001") }),
+      });
+      expect(key).toBe("google:GPA.0001:purchase");
+    }),
+  );
+
+  it.effect("derives renewal / one-time-purchase / refund keys from orderId", () =>
+    Effect.gen(function* () {
+      const renewal = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "renewal",
+        purchase: purchase({ orderId: Option.some("GPA.0002") }),
+      });
+      const oneTime = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "one_time_purchase",
+        purchase: purchase({ kind: "product", orderId: Option.some("GPA.0003") }),
+      });
+      const refund = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "refund",
+        purchase: purchase({ orderId: Option.some("GPA.0004") }),
+      });
+      expect(renewal).toBe("google:GPA.0002:renewal");
+      expect(oneTime).toBe("google:GPA.0003:one_time_purchase");
+      expect(refund).toBe("google:GPA.0004:refund");
+    }),
+  );
+
+  it.effect("distinguishes purchase from renewal against the same order", () =>
+    Effect.gen(function* () {
+      const p = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "purchase",
+        purchase: purchase({ orderId: Option.some("GPA.same") }),
+      });
+      const r = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "renewal",
+        purchase: purchase({ orderId: Option.some("GPA.same") }),
+      });
+      expect(p).not.toBe(r);
+    }),
+  );
+
+  it.effect("derives an expired key from purchaseToken + expiryTime", () =>
+    Effect.gen(function* () {
+      const key = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "expired",
+        purchase: purchase({ expiryTime: Option.some(new Date(EXPIRES_MS)), purchaseToken: "tok" }),
+      });
+      expect(key).toBe(`google:tok:expired:${EXPIRES_MS}`);
+    }),
+  );
+
+  it.effect("derives distinct lifecycle keys per period for the same series", () =>
+    Effect.gen(function* () {
+      const first = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "canceled",
+        purchase: purchase({ expiryTime: Option.some(new Date(EXPIRES_MS)), purchaseToken: "tok" }),
+      });
+      const second = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "canceled",
+        purchase: purchase({
+          expiryTime: Option.some(new Date(EXPIRES_MS + 30 * 24 * 3_600_000)),
+          purchaseToken: "tok",
+        }),
+      });
+      expect(first).not.toBe(second);
+    }),
+  );
+
+  it.effect("derives a revoke key from purchaseToken (no expiry required)", () =>
+    Effect.gen(function* () {
+      const key = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "revoke",
+        purchase: purchase({ purchaseToken: "tok_rev" }),
+      });
+      expect(key).toBe("google:tok_rev:revoke");
+    }),
+  );
+
+  it.effect("is stable across two deliveries of the same logical lifecycle event", () =>
+    Effect.gen(function* () {
+      const a = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "billing_retry",
+        purchase: purchase({ expiryTime: Option.some(new Date(EXPIRES_MS)), purchaseToken: "tok" }),
+      });
+      const b = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: "billing_retry",
+        purchase: purchase({ expiryTime: Option.some(new Date(EXPIRES_MS)), purchaseToken: "tok" }),
+      });
+      expect(a).toBe(b);
+    }),
+  );
+
+  it.effect("fails when orderId is missing for a charge event", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(
+        getGooglePlayPurchaseProcessingIdempotencyKey({
+          eventType: "purchase",
+          purchase: purchase({ purchaseToken: "tok_no_order" }),
+        }),
+      );
+      expect(error).toBeInstanceOf(GooglePlayPurchaseProcessingIdempotencyKeyDerivationError);
+      expect(error.missingField).toBe("orderId");
+      expect(error.purchaseToken).toBe("tok_no_order");
+    }),
+  );
+
+  it.effect("fails when expiryTime is missing for a lifecycle event", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(
+        getGooglePlayPurchaseProcessingIdempotencyKey({
+          eventType: "expired",
+          purchase: purchase({ purchaseToken: "tok_no_expiry" }),
+        }),
+      );
+      expect(error.missingField).toBe("expiryTime");
+    }),
+  );
+});
+
+describe("normalizeSubscriptionPurchaseV2", () => {
+  const data: SubscriptionPurchaseV2Type = {
+    acknowledgementState: "ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED",
+    externalAccountIdentifiers: { obfuscatedExternalAccountId: "acct_token" },
+    latestOrderId: "GPA.RENEW.2",
+    lineItems: [
+      {
+        autoRenewingPlan: { autoRenewEnabled: true },
+        expiryTime: "2024-03-15T12:00:00Z",
+        offerDetails: { basePlanId: "monthly", offerId: "intro" },
+        productId: "premium",
+      },
+    ],
+    regionCode: "US",
+    startTime: "2024-02-15T12:00:00Z",
+    subscriptionState: "SUBSCRIPTION_STATE_ACTIVE",
+  };
+
+  it("maps line-item product, order, account token, dates, and offer flags", () => {
+    const result = normalizeSubscriptionPurchaseV2({
+      currency: Option.some("USD"),
+      data,
+      priceMinorUnits: Option.some(999),
+      purchaseToken: "tok",
+      subscriptionId: "premium",
+    });
+    expect(result.kind).toBe("subscription");
+    expect(result.productId).toBe("premium");
+    expect(result.orderId).toEqual(Option.some("GPA.RENEW.2"));
+    expect(result.obfuscatedExternalAccountId).toEqual(Option.some("acct_token"));
+    expect(result.storefront).toEqual(Option.some("US"));
+    expect(result.basePlanId).toEqual(Option.some("monthly"));
+    expect(result.offerId).toEqual(Option.some("intro"));
+    expect(result.autoRenewEnabled).toBe(true);
+    // An applied offer is conservatively treated as a (potential) trial so the
+    // initial purchase emits no revenue.
+    expect(result.isTrial).toBe(true);
+    expect(Option.isSome(result.expiryTime)).toBe(true);
+    expect(result.priceMinorUnits).toEqual(Option.some(999));
+  });
+
+  it("falls back to subscriptionId when the line item has no productId", () => {
+    const result = normalizeSubscriptionPurchaseV2({
+      currency: Option.none(),
+      data: { lineItems: [{}] },
+      priceMinorUnits: Option.none(),
+      purchaseToken: "tok",
+      subscriptionId: "fallback.product",
+    });
+    expect(result.productId).toBe("fallback.product");
+    expect(result.isTrial).toBe(false);
+  });
+});
+
+describe("normalizeProductPurchaseV2", () => {
+  it("maps a one-time product purchase", () => {
+    const data: ProductPurchaseV2Type = {
+      acknowledgementState: "ACKNOWLEDGEMENT_STATE_PENDING",
+      obfuscatedExternalAccountId: "acct_token",
+      orderId: "GPA.ONETIME.1",
+      productLineItem: [{ productId: "coins_100" }],
+      purchaseCompletionTime: "2024-02-15T12:00:00Z",
+      regionCode: "US",
+    };
+    const result = normalizeProductPurchaseV2({
+      currency: Option.none(),
+      data,
+      priceMinorUnits: Option.none(),
+      purchaseToken: "tok",
+      sku: "coins_100",
+    });
+    expect(result.kind).toBe("product");
+    expect(result.productId).toBe("coins_100");
+    expect(result.orderId).toEqual(Option.some("GPA.ONETIME.1"));
+    expect(result.obfuscatedExternalAccountId).toEqual(Option.some("acct_token"));
+    expect(result.autoRenewEnabled).toBe(false);
+    expect(Option.isNone(result.expiryTime)).toBe(true);
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/googlePlay/helpers.ts b/packages/core/src/services/paymentProviders/googlePlay/helpers.ts
new file mode 100644
index 000000000..9ce8ed44f
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/helpers.ts
@@ -0,0 +1,283 @@
+/**
+ * Pure data-shape helpers for the Google Play payment-provider services. None
+ * touch the database or the Play API — they operate on already-fetched
+ * configuration rows and normalized purchases. Tests live alongside as
+ * `helpers.test.ts` and run without a runtime.
+ */
+import type {
+  ProductPurchaseV2Type,
+  SubscriptionPurchaseV2Type,
+} from "@voidhash/google-play-server-sdk";
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type ProviderEnvironmentValue,
+  ProviderEnvironment,
+} from "@voidhash/db";
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import { Effect, Option } from "effect";
+
+import { PurchaseProcessingResult } from "../../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import {
+  GooglePlayPaymentProviderNotEnabledForFollowingPackageNameError,
+  GooglePlayPurchaseProcessingIdempotencyKeyDerivationError,
+} from "./errors.ts";
+
+/** Stable serviceId for the per-provider external-identifier binding (cross-owner transfer / rebind). */
+export const GOOGLE_PLAY_SERVICE_ID = "google-play";
+
+/**
+ * The platform-neutral normalized view of a Google Play purchase that every
+ * `record*` method consumes — the Google analogue of Apple's decoded JWS
+ * transaction. The webhook handler / SDK boundary build this from the
+ * authoritative `subscriptions.v2.get` / `products.v2.get` response (plus a
+ * catalog price lookup); record methods never touch the raw Play schema.
+ */
+export interface GooglePlayNormalizedPurchase {
+  readonly kind: "subscription" | "product";
+  readonly productId: string;
+  readonly purchaseToken: string;
+  /** Per-charge order id (`GPA.xxxx-...`). Stable across deliveries of a single charge. */
+  readonly orderId: Option.Option<string>;
+  /** The UUIDv5 account token the SDK set as `obfuscatedAccountId`. Server-verified identity. */
+  readonly obfuscatedExternalAccountId: Option.Option<string>;
+  /** ISO 3166 region code of the buyer (Google uses alpha-2, e.g. `"US"`). */
+  readonly storefront: Option.Option<string>;
+  /** Resolved billable amount in minor units (cents), from the catalog regional price. */
+  readonly priceMinorUnits: Option.Option<number>;
+  readonly currency: Option.Option<string>;
+  readonly startTime: Option.Option<Date>;
+  readonly expiryTime: Option.Option<Date>;
+  readonly subscriptionState: Option.Option<string>;
+  readonly acknowledgementState: Option.Option<string>;
+  readonly autoRenewEnabled: boolean;
+  /**
+   * Whether the current period is (potentially) a free/introductory offer. We
+   * conservatively treat any subscription with an applied `offerId` as
+   * non-revenue on its initial purchase (revenue is captured on the first
+   * renewal), since `subscriptions.v2.get` doesn't expose the offer phase.
+   */
+  readonly isTrial: boolean;
+  readonly basePlanId: Option.Option<string>;
+  readonly offerId: Option.Option<string>;
+  readonly linkedPurchaseToken: Option.Option<string>;
+}
+
+/** Parses an RFC-3339 timestamp string (Play V2 dates) into an `Option<Date>`. */
+const parseRfc3339 = (value: string | undefined): Option.Option<Date> => {
+  if (!value) return Option.none();
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? Option.none() : Option.some(date);
+};
+
+/**
+ * Picks the (single) enabled Google Play configuration for the given package
+ * name. Fails with
+ * {@link GooglePlayPaymentProviderNotEnabledForFollowingPackageNameError} when
+ * none matches — not a database error, the rows simply don't grant access.
+ */
+export const getActiveGooglePlayPaymentProviderConfiguration = (
+  configurations: ReadonlyArray<DbPaymentProviderConfiguration>,
+  packageName: string,
+  paymentProviderKey: string,
+) =>
+  Effect.gen(function* () {
+    const configuration = configurations.find(
+      (candidate) => candidate.paymentProviderKey === paymentProviderKey && candidate.enabled,
+    );
+    if (!configuration) {
+      return yield* Effect.fail(
+        new GooglePlayPaymentProviderNotEnabledForFollowingPackageNameError({ packageName }),
+      );
+    }
+    return configuration;
+  });
+
+/**
+ * Composes the provider product key matching the config-provider's
+ * `createProductKey` (`productId` or `productId:basePlanId`).
+ */
+export const googlePlayProviderProductKey = (
+  productId: string,
+  basePlanId: Option.Option<string>,
+): string =>
+  Option.match(basePlanId, { onNone: () => productId, onSome: (id) => `${productId}:${id}` });
+
+/**
+ * Picks the provider identifier used to resolve or create Google Play people.
+ * Falls through `obfuscatedExternalAccountId → orderId → purchaseToken`. The
+ * latter branches exist for purchases lacking our SDK-set account token (e.g.
+ * server-side restores). Returns `None` only when none are present.
+ */
+export const getGooglePlayPersonIdentifier = (
+  purchase: GooglePlayNormalizedPurchase,
+): Option.Option<string> =>
+  purchase.obfuscatedExternalAccountId.pipe(
+    Option.orElse(() => purchase.orderId),
+    Option.orElse(() => Option.some(purchase.purchaseToken)),
+  );
+
+/**
+ * Builds the deterministic distinctId for the synthetic anonymous "stand-in"
+ * person an RTDN webhook creates when a notification arrives before the SDK has
+ * confirmed the purchase. Keyed by `(environment, personIdentifier)`.
+ */
+export const buildGooglePlayWebhookAnonymousDistinctId = (input: {
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  readonly personIdentifier: string;
+}): string => {
+  const environmentLabel =
+    input.providerEnvironment === ProviderEnvironment.Sandbox ? "sandbox" : "production";
+  return `${ANONYMOUS_USER_ID_PREFIX}provider:google-play:${environmentLabel}:${input.personIdentifier}`;
+};
+
+/** Creates an idempotent no-op result for Play-valid payloads we cannot map. */
+export const makeIgnoredPurchaseProcessingResult = () =>
+  new PurchaseProcessingResult({
+    analyticsEventIds: [],
+    changedGrantIds: [],
+    idempotent: true,
+    personId: "",
+    purchaseId: Option.none(),
+    subscriptionId: Option.none(),
+    transactionId: Option.none(),
+  });
+
+/**
+ * Builds a {@link GooglePlayNormalizedPurchase} from a `subscriptions.v2.get`
+ * response. `priceMinorUnits`/`currency` are resolved separately (catalog
+ * lookup) and threaded in by the caller.
+ */
+export const normalizeSubscriptionPurchaseV2 = (input: {
+  readonly purchaseToken: string;
+  readonly subscriptionId: string;
+  readonly data: SubscriptionPurchaseV2Type;
+  readonly priceMinorUnits: Option.Option<number>;
+  readonly currency: Option.Option<string>;
+}): GooglePlayNormalizedPurchase => {
+  const lineItem = input.data.lineItems?.[0];
+  const offerId = Option.fromNullishOr(lineItem?.offerDetails?.offerId);
+  return {
+    acknowledgementState: Option.fromNullishOr(input.data.acknowledgementState),
+    autoRenewEnabled: lineItem?.autoRenewingPlan?.autoRenewEnabled ?? false,
+    basePlanId: Option.fromNullishOr(lineItem?.offerDetails?.basePlanId),
+    currency: input.currency,
+    expiryTime: parseRfc3339(lineItem?.expiryTime),
+    isTrial: Option.isSome(offerId),
+    kind: "subscription",
+    linkedPurchaseToken: Option.fromNullishOr(input.data.linkedPurchaseToken),
+    obfuscatedExternalAccountId: Option.fromNullishOr(
+      input.data.externalAccountIdentifiers?.obfuscatedExternalAccountId,
+    ),
+    offerId,
+    orderId: Option.fromNullishOr(input.data.latestOrderId),
+    priceMinorUnits: input.priceMinorUnits,
+    productId: lineItem?.productId ?? input.subscriptionId,
+    purchaseToken: input.purchaseToken,
+    startTime: parseRfc3339(input.data.startTime),
+    storefront: Option.fromNullishOr(input.data.regionCode),
+    subscriptionState: Option.fromNullishOr(input.data.subscriptionState),
+  };
+};
+
+/**
+ * Builds a {@link GooglePlayNormalizedPurchase} from a `products.v2.get`
+ * response. One-time products carry no catalog-typed regional price, so
+ * `priceMinorUnits`/`currency` are usually `None`.
+ */
+export const normalizeProductPurchaseV2 = (input: {
+  readonly purchaseToken: string;
+  readonly sku: string;
+  readonly data: ProductPurchaseV2Type;
+  readonly priceMinorUnits: Option.Option<number>;
+  readonly currency: Option.Option<string>;
+}): GooglePlayNormalizedPurchase => {
+  const lineItem = input.data.productLineItem?.[0];
+  return {
+    acknowledgementState: Option.fromNullishOr(input.data.acknowledgementState),
+    autoRenewEnabled: false,
+    basePlanId: Option.none(),
+    currency: input.currency,
+    expiryTime: Option.none(),
+    isTrial: false,
+    kind: "product",
+    linkedPurchaseToken: Option.none(),
+    obfuscatedExternalAccountId: Option.fromNullishOr(input.data.obfuscatedExternalAccountId),
+    offerId: Option.fromNullishOr(lineItem?.offerDetails?.offerId),
+    orderId: Option.fromNullishOr(input.data.orderId),
+    priceMinorUnits: input.priceMinorUnits,
+    productId: lineItem?.productId ?? input.sku,
+    purchaseToken: input.purchaseToken,
+    startTime: parseRfc3339(input.data.purchaseCompletionTime),
+    storefront: Option.fromNullishOr(input.data.regionCode),
+    subscriptionState: Option.none(),
+  };
+};
+
+/**
+ * Per-event idempotency-key event-types. Mirrors the `providerEventType`
+ * strings the Google Play `record*` methods pass into PurchaseProcessingService.
+ */
+export type GooglePlayPurchaseProcessingEventType =
+  | "purchase"
+  | "renewal"
+  | "expired"
+  | "canceled"
+  | "refund"
+  | "revoke"
+  | "billing_retry"
+  | "extended"
+  | "price_increase"
+  | "auto_renew_resumed"
+  | "one_time_purchase";
+
+/**
+ * Derives the per-event idempotency key used by PurchaseProcessingService to
+ * dedupe duplicate inbound deliveries of the same logical Play event (RTDN +
+ * SDK confirm + reconciliation). Fails hard when the purchase lacks the
+ * anchors we'd need for a stable key — always an upstream bug, never silently
+ * degraded.
+ *
+ * Key shape: `google:${anchorId}:${eventType}[:${anchorMs}]`
+ *
+ * - Charge events (`purchase`/`renewal`/`one_time_purchase`/`refund`) anchor on
+ *   `orderId` — unique per charge, so no date component is needed.
+ * - Subscription-series lifecycle events anchor on `purchaseToken` (stable
+ *   across renewals of a series) + the period `expiryTime` to distinguish
+ *   successive periods.
+ * - `revoke` anchors on `purchaseToken` (entitlement-level, not per-charge).
+ */
+export const getGooglePlayPurchaseProcessingIdempotencyKey = (input: {
+  readonly purchase: GooglePlayNormalizedPurchase;
+  readonly eventType: GooglePlayPurchaseProcessingEventType;
+}): Effect.Effect<string, GooglePlayPurchaseProcessingIdempotencyKeyDerivationError> =>
+  Effect.gen(function* () {
+    const { purchase, eventType } = input;
+    const fail = (missingField: string) =>
+      new GooglePlayPurchaseProcessingIdempotencyKeyDerivationError({
+        eventType,
+        missingField,
+        purchaseToken: purchase.purchaseToken,
+      });
+
+    switch (eventType) {
+      case "purchase":
+      case "renewal":
+      case "one_time_purchase":
+      case "refund": {
+        if (Option.isNone(purchase.orderId)) return yield* fail("orderId");
+        return `google:${purchase.orderId.value}:${eventType}`;
+      }
+      case "revoke": {
+        return `google:${purchase.purchaseToken}:revoke`;
+      }
+      case "expired":
+      case "canceled":
+      case "billing_retry":
+      case "extended":
+      case "price_increase":
+      case "auto_renew_resumed": {
+        if (Option.isNone(purchase.expiryTime)) return yield* fail("expiryTime");
+        return `google:${purchase.purchaseToken}:${eventType}:${purchase.expiryTime.value.getTime()}`;
+      }
+    }
+  });
diff --git a/packages/core/src/services/paymentProviders/googlePlay/money.test.ts b/packages/core/src/services/paymentProviders/googlePlay/money.test.ts
new file mode 100644
index 000000000..82b0a87bc
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/money.test.ts
@@ -0,0 +1,164 @@
+import { Effect, Option } from "effect";
+
+import { describe, expect, it } from "../../../testing/effect-vitest.ts";
+import type { FxRateLookupShape } from "../appStore/money.ts";
+import {
+  GOOGLE_PLAY_COMMISSION_REDUCED_BPS,
+  buildGooglePlayMoney,
+  googleMoneyToMinorUnits,
+  resolveGooglePlayCommissionRateBps,
+} from "./money.ts";
+
+const stubFxAt = (rate: number): FxRateLookupShape => ({
+  getUsdRate: (input) =>
+    Effect.succeed(
+      Option.some({
+        asOfDate: input.asOf,
+        currency: input.currency,
+        rate,
+        source: "test",
+      }),
+    ),
+});
+
+const fxNone: FxRateLookupShape = {
+  getUsdRate: () => Effect.succeed(Option.none()),
+};
+
+const OCCURRED_AT = new Date("2024-02-15T12:00:00Z");
+
+describe("googleMoneyToMinorUnits", () => {
+  it("converts units + nanos into 2-decimal minor units", () => {
+    expect(
+      googleMoneyToMinorUnits({ currencyCode: "USD", nanos: 990_000_000, units: "9" }),
+    ).toEqual(Option.some({ currency: "USD", minorUnits: 999 }));
+  });
+
+  it("handles sub-unit-only amounts", () => {
+    expect(
+      googleMoneyToMinorUnits({ currencyCode: "USD", nanos: 990_000_000, units: "0" }),
+    ).toEqual(Option.some({ currency: "USD", minorUnits: 99 }));
+  });
+
+  it("returns none when the currency is absent", () => {
+    expect(googleMoneyToMinorUnits({ nanos: 990_000_000, units: "9" })).toEqual(Option.none());
+  });
+
+  it("returns none when both amount components are absent", () => {
+    expect(googleMoneyToMinorUnits({ currencyCode: "USD" })).toEqual(Option.none());
+  });
+});
+
+describe("resolveGooglePlayCommissionRateBps", () => {
+  it("uses the reduced 15% rate", () => {
+    expect(resolveGooglePlayCommissionRateBps({ productType: "subscription" })).toBe(
+      GOOGLE_PLAY_COMMISSION_REDUCED_BPS,
+    );
+    expect(resolveGooglePlayCommissionRateBps({ productType: "product" })).toBe(1_500);
+  });
+});
+
+describe("buildGooglePlayMoney", () => {
+  it.effect("builds the breakdown + USD mirror at parity FX", () =>
+    Effect.gen(function* () {
+      const money = yield* buildGooglePlayMoney({
+        commissionRateBps: 1_500,
+        currency: Option.some("USD"),
+        fxRateService: stubFxAt(1_000_000),
+        isTrial: false,
+        occurredAt: OCCURRED_AT,
+        priceMinorUnits: Option.some(999),
+        storefront: Option.some("US"),
+      });
+      const value = Option.getOrThrow(money);
+      expect(value.grossAmount).toBe(999);
+      expect(value.storeCommissionAmount).toBe(150); // round(999 * 0.15)
+      expect(value.taxAmount).toBe(0);
+      expect(value.proceedsAmount).toBe(849);
+      expect(value.proceedsAfterTaxAmount).toBe(849);
+      const usd = Option.getOrThrow(value.usd);
+      expect(usd.grossAmount).toBe(999);
+      expect(usd.storeCommissionAmount).toBe(150);
+    }),
+  );
+
+  it.effect("scales the USD mirror by the FX rate for a non-USD currency", () =>
+    Effect.gen(function* () {
+      const money = yield* buildGooglePlayMoney({
+        commissionRateBps: 1_500,
+        currency: Option.some("EUR"),
+        fxRateService: stubFxAt(1_100_000), // 1 EUR = 1.1 USD
+        isTrial: false,
+        occurredAt: OCCURRED_AT,
+        priceMinorUnits: Option.some(1_000),
+        storefront: Option.some("DE"),
+      });
+      const value = Option.getOrThrow(money);
+      expect(value.grossAmount).toBe(1_000);
+      const usd = Option.getOrThrow(value.usd);
+      expect(usd.grossAmount).toBe(1_100); // round(1000 * 1.1)
+    }),
+  );
+
+  it.effect("returns none for a trial (no revenue on a free/intro period)", () =>
+    Effect.gen(function* () {
+      const money = yield* buildGooglePlayMoney({
+        commissionRateBps: 1_500,
+        currency: Option.some("USD"),
+        fxRateService: stubFxAt(1_000_000),
+        isTrial: true,
+        occurredAt: OCCURRED_AT,
+        priceMinorUnits: Option.some(999),
+        storefront: Option.some("US"),
+      });
+      expect(Option.isNone(money)).toBe(true);
+    }),
+  );
+
+  it.effect("returns none when the price is unknown", () =>
+    Effect.gen(function* () {
+      const money = yield* buildGooglePlayMoney({
+        commissionRateBps: 1_500,
+        currency: Option.some("USD"),
+        fxRateService: stubFxAt(1_000_000),
+        isTrial: false,
+        occurredAt: OCCURRED_AT,
+        priceMinorUnits: Option.none(),
+        storefront: Option.some("US"),
+      });
+      expect(Option.isNone(money)).toBe(true);
+    }),
+  );
+
+  it.effect("emits money with usd:none when no FX rate exists (never guesses USD)", () =>
+    Effect.gen(function* () {
+      const money = yield* buildGooglePlayMoney({
+        commissionRateBps: 1_500,
+        currency: Option.some("USD"),
+        fxRateService: fxNone,
+        isTrial: false,
+        occurredAt: OCCURRED_AT,
+        priceMinorUnits: Option.some(999),
+        storefront: Option.some("US"),
+      });
+      const value = Option.getOrThrow(money);
+      expect(value.grossAmount).toBe(999);
+      expect(Option.isNone(value.usd)).toBe(true);
+    }),
+  );
+
+  it.effect("returns none for an unparseable currency", () =>
+    Effect.gen(function* () {
+      const money = yield* buildGooglePlayMoney({
+        commissionRateBps: 1_500,
+        currency: Option.some("ZZZ"),
+        fxRateService: stubFxAt(1_000_000),
+        isTrial: false,
+        occurredAt: OCCURRED_AT,
+        priceMinorUnits: Option.some(999),
+        storefront: Option.some("US"),
+      });
+      expect(Option.isNone(money)).toBe(true);
+    }),
+  );
+});
diff --git a/packages/core/src/services/paymentProviders/googlePlay/money.ts b/packages/core/src/services/paymentProviders/googlePlay/money.ts
new file mode 100644
index 000000000..8b056a66e
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/money.ts
@@ -0,0 +1,154 @@
+/**
+ * Provider-specific money normalization for Google Play purchases.
+ *
+ * Google does not return the paid amount on the purchase response, so the
+ * caller resolves the developer-set regional list price from the monetization
+ * catalog (see `sdk-context.ts`) and passes it here as already-converted minor
+ * units. This module applies the commission tier, derives proceeds, and
+ * converts to USD via {@link FxRateService}:
+ *
+ *   gross  = list price (buyer-facing, region currency)
+ *   tax    = 0  (Google nets tax server-side; not exposed per transaction)
+ *   comm.  = gross × commissionRate (15% standard / 30% large-account)
+ *   proc.  = gross - comm.
+ *   procT. = gross - comm. - tax
+ *
+ * Returns `Option.none()` when price/currency are absent or the purchase is a
+ * (potentially free) trial/intro period — downstream layers leave money fields
+ * blank rather than emit a guessed or zero amount.
+ */
+import type { MoneyType } from "@voidhash/google-play-server-sdk";
+import { parseISO4217CurrencyCode } from "@voidhash/lib/constants";
+import { Effect, Option } from "effect";
+
+import {
+  PurchaseProcessingMoney,
+  PurchaseProcessingMoneyUsd,
+} from "../../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import { CurrencyCode, ExchangeRate, MinorAmount } from "../../../domain/shared/Money.ts";
+import { FX_RATE_PRECISION } from "../../../domain/fxRate/FxRate.ts";
+import type { FxRateLookupShape } from "../appStore/money.ts";
+
+/**
+ * Google Play's standard commission is 15% on subscriptions and on the first
+ * $1M of an account's annual revenue; 30% applies only above that threshold —
+ * which we can't observe per transaction. We therefore default to the reduced
+ * 15% rate, which is correct for subscriptions and for the vast majority of
+ * developers. The standard rate is exposed for completeness / future config.
+ */
+export const GOOGLE_PLAY_COMMISSION_REDUCED_BPS = 1_500; // 15.00%
+export const GOOGLE_PLAY_COMMISSION_STANDARD_BPS = 3_000; // 30.00%
+
+export const resolveGooglePlayCommissionRateBps = (_input: {
+  readonly productType: "subscription" | "product";
+}): number => GOOGLE_PLAY_COMMISSION_REDUCED_BPS;
+
+/**
+ * Converts a Google `Money` (`{ currencyCode, units, nanos }`) to 2-decimal
+ * minor units (cents). Matches the codebase-wide minor-unit convention (the
+ * App Store path makes the same 2-decimal assumption). Returns `None` when the
+ * currency or amount components are absent.
+ */
+export const googleMoneyToMinorUnits = (
+  money: MoneyType,
+): Option.Option<{ readonly minorUnits: number; readonly currency: string }> => {
+  if (!money.currencyCode) return Option.none();
+  if (money.units === undefined && money.nanos === undefined) return Option.none();
+  const units = Number(money.units ?? "0");
+  if (Number.isNaN(units)) return Option.none();
+  const nanos = money.nanos ?? 0;
+  const minorUnits = Math.round(units * 100 + nanos / 1e7);
+  return Option.some({ currency: money.currencyCode, minorUnits });
+};
+
+const convertToUsd = (amount: number, rate: number): number =>
+  Math.round((amount * rate) / FX_RATE_PRECISION);
+
+const buildUsdBreakdown = (
+  amounts: {
+    readonly grossAmount: number;
+    readonly storeCommissionAmount: number;
+    readonly taxAmount: number;
+    readonly proceedsAmount: number;
+    readonly proceedsAfterTaxAmount: number;
+  },
+  exchangeRate: number,
+): PurchaseProcessingMoneyUsd =>
+  new PurchaseProcessingMoneyUsd({
+    exchangeRate: ExchangeRate.make(exchangeRate),
+    grossAmount: MinorAmount.make(convertToUsd(amounts.grossAmount, exchangeRate)),
+    proceedsAfterTaxAmount: MinorAmount.make(
+      convertToUsd(amounts.proceedsAfterTaxAmount, exchangeRate),
+    ),
+    proceedsAmount: MinorAmount.make(convertToUsd(amounts.proceedsAmount, exchangeRate)),
+    storeCommissionAmount: MinorAmount.make(
+      convertToUsd(amounts.storeCommissionAmount, exchangeRate),
+    ),
+    taxAmount: MinorAmount.make(convertToUsd(amounts.taxAmount, exchangeRate)),
+  });
+
+/**
+ * Builds the full money record for a Google Play purchase from an
+ * already-resolved minor-unit price.
+ *
+ * Returns `Option.none()` when `priceMinorUnits` / `currency` are absent or
+ * `isTrial` is set (a free/intro period generates no revenue; revenue is
+ * captured at the first renewal). Returns the populated record with
+ * `usd: Option.none()` when the FX service has no rate for the currency on the
+ * purchase date — never falls back to the raw amount as USD.
+ */
+export const buildGooglePlayMoney = (input: {
+  readonly priceMinorUnits: Option.Option<number>;
+  readonly currency: Option.Option<string>;
+  readonly storefront: Option.Option<string>;
+  readonly isTrial: boolean;
+  readonly commissionRateBps: number;
+  readonly occurredAt: Date;
+  readonly fxRateService: FxRateLookupShape;
+}) =>
+  Effect.gen(function* () {
+    if (input.isTrial) {
+      return Option.none<PurchaseProcessingMoney>();
+    }
+    if (Option.isNone(input.priceMinorUnits) || Option.isNone(input.currency)) {
+      return Option.none<PurchaseProcessingMoney>();
+    }
+    const currencyOp = yield* parseISO4217CurrencyCode(input.currency.value).pipe(
+      Effect.map(Option.some),
+      Effect.catchTag("InvalidISO4217CurrencyCodeError", () => Effect.succeedNone),
+    );
+    if (Option.isNone(currencyOp)) {
+      return Option.none<PurchaseProcessingMoney>();
+    }
+    const currency = currencyOp.value;
+
+    const grossAmount = Math.max(0, input.priceMinorUnits.value);
+    const storeCommissionAmount = Math.round((grossAmount * input.commissionRateBps) / 10_000);
+    const taxAmount = 0;
+    const proceedsAmount = grossAmount - storeCommissionAmount;
+    const proceedsAfterTaxAmount = proceedsAmount - taxAmount;
+
+    const fxLookup = yield* input.fxRateService.getUsdRate({
+      asOf: input.occurredAt,
+      currency,
+    });
+    const usd = Option.map(fxLookup, (lookup) =>
+      buildUsdBreakdown(
+        { grossAmount, proceedsAfterTaxAmount, proceedsAmount, storeCommissionAmount, taxAmount },
+        lookup.rate,
+      ),
+    );
+
+    return Option.some(
+      new PurchaseProcessingMoney({
+        currency: CurrencyCode.make(currency),
+        grossAmount: MinorAmount.make(grossAmount),
+        proceedsAfterTaxAmount: MinorAmount.make(proceedsAfterTaxAmount),
+        proceedsAmount: MinorAmount.make(proceedsAmount),
+        storeCommissionAmount: MinorAmount.make(storeCommissionAmount),
+        storefront: input.storefront,
+        taxAmount: MinorAmount.make(taxAmount),
+        usd,
+      }),
+    );
+  });
diff --git a/packages/core/src/services/paymentProviders/googlePlay/notifications.test.ts b/packages/core/src/services/paymentProviders/googlePlay/notifications.test.ts
new file mode 100644
index 000000000..7f7878a8a
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/notifications.test.ts
@@ -0,0 +1,145 @@
+import { Effect } from "effect";
+
+import { describe, expect, it } from "../../../testing/effect-vitest.ts";
+import {
+  isSubscriptionActivatedNotification,
+  isSubscriptionCancellationNotification,
+  isSubscriptionRenewalNotification,
+  parseAndCategorizeNotification,
+} from "./notifications.ts";
+
+/** Wraps a DeveloperNotification in a base64 Pub/Sub push envelope. */
+const envelope = (developerNotification: unknown, messageId = "m-1") => ({
+  message: {
+    data: btoa(JSON.stringify(developerNotification)),
+    messageId,
+    publishTime: "2024-02-15T12:00:00.000Z",
+  },
+  subscription: "projects/p/subscriptions/s",
+});
+
+describe("parseAndCategorizeNotification", () => {
+  it.effect("decodes a subscription notification", () =>
+    Effect.gen(function* () {
+      const decoded = yield* parseAndCategorizeNotification(
+        envelope({
+          eventTimeMillis: "1707998400000",
+          packageName: "com.example.app",
+          subscriptionNotification: {
+            notificationType: 4,
+            purchaseToken: "tok_sub",
+            subscriptionId: "premium.monthly",
+            version: "1.0",
+          },
+          version: "1.0",
+        }),
+      );
+      expect(decoded.type).toBe("subscription");
+      if (decoded.type === "subscription") {
+        expect(decoded.notificationType).toBe(4);
+        expect(decoded.notificationTypeName).toBe("SUBSCRIPTION_PURCHASED");
+        expect(decoded.purchaseToken).toBe("tok_sub");
+        expect(decoded.subscriptionId).toBe("premium.monthly");
+        expect(decoded.packageName).toBe("com.example.app");
+      }
+    }),
+  );
+
+  it.effect("decodes a one-time product notification", () =>
+    Effect.gen(function* () {
+      const decoded = yield* parseAndCategorizeNotification(
+        envelope({
+          oneTimeProductNotification: {
+            notificationType: 1,
+            purchaseToken: "tok_otp",
+            sku: "coins_100",
+            version: "1.0",
+          },
+          packageName: "com.example.app",
+        }),
+      );
+      expect(decoded.type).toBe("oneTimeProduct");
+      if (decoded.type === "oneTimeProduct") {
+        expect(decoded.notificationTypeName).toBe("ONE_TIME_PRODUCT_PURCHASED");
+        expect(decoded.sku).toBe("coins_100");
+        expect(decoded.purchaseToken).toBe("tok_otp");
+      }
+    }),
+  );
+
+  it.effect("decodes a voided purchase notification", () =>
+    Effect.gen(function* () {
+      const decoded = yield* parseAndCategorizeNotification(
+        envelope({
+          packageName: "com.example.app",
+          voidedPurchaseNotification: {
+            orderId: "GPA.VOID.1",
+            productType: 1,
+            purchaseToken: "tok_void",
+            refundType: 1,
+          },
+        }),
+      );
+      expect(decoded.type).toBe("voidedPurchase");
+      if (decoded.type === "voidedPurchase") {
+        expect(decoded.orderId).toBe("GPA.VOID.1");
+        expect(decoded.productType).toBe(1);
+        expect(decoded.refundType).toBe(1);
+      }
+    }),
+  );
+
+  it.effect("decodes a test notification", () =>
+    Effect.gen(function* () {
+      const decoded = yield* parseAndCategorizeNotification(
+        envelope({ packageName: "com.example.app", testNotification: { version: "1.0" } }),
+      );
+      expect(decoded.type).toBe("test");
+    }),
+  );
+
+  it.effect("fails with an invalid-notification error on non-JSON payload data", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(
+        parseAndCategorizeNotification({
+          message: { data: btoa("this is not json") },
+        }),
+      );
+      expect((error as { _tag: string })._tag).toBe("GooglePlayInvalidNotificationError");
+    }),
+  );
+
+  it.effect("fails when the envelope structure is invalid", () =>
+    Effect.gen(function* () {
+      const error = yield* Effect.flip(parseAndCategorizeNotification({ not: "a pubsub message" }));
+      expect((error as { _tag: string })._tag).toBe("GooglePlayInvalidNotificationError");
+    }),
+  );
+});
+
+describe("subscription notification predicates", () => {
+  it.effect("classifies activation, renewal, and cancellation notification types", () =>
+    Effect.gen(function* () {
+      const make = (notificationType: number) =>
+        parseAndCategorizeNotification(
+          envelope({
+            packageName: "com.example.app",
+            subscriptionNotification: {
+              notificationType,
+              purchaseToken: "tok",
+              subscriptionId: "premium.monthly",
+            },
+          }),
+        );
+
+      const purchased = yield* make(4);
+      const renewed = yield* make(2);
+      const expired = yield* make(13);
+
+      expect(isSubscriptionActivatedNotification(purchased)).toBe(true);
+      expect(isSubscriptionRenewalNotification(renewed)).toBe(true);
+      expect(isSubscriptionCancellationNotification(expired)).toBe(true);
+      expect(isSubscriptionRenewalNotification(purchased)).toBe(false);
+    }),
+  );
+});
diff --git a/packages/core/src/services/paymentProviders/googlePlay/notifications.ts b/packages/core/src/services/paymentProviders/googlePlay/notifications.ts
new file mode 100644
index 000000000..e078e98d0
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/notifications.ts
@@ -0,0 +1,243 @@
+/**
+ * Google Play Real-Time Developer Notification (RTDN) decoding.
+ *
+ * Google delivers RTDN via a Pub/Sub PUSH subscription: the HTTP body is a
+ * `{ message: { data: base64(DeveloperNotification JSON), messageId, ... } }`
+ * envelope. This module decodes that envelope into one of our typed
+ * {@link DecodedNotification} shapes. It performs NO database work and NO
+ * authoritative state fetch — the webhook handler re-fetches purchase state
+ * from the Play Developer API because RTDN bodies are pointers, not state.
+ *
+ * Base64 decode uses `atob`/`TextDecoder` (Workers-safe — no `Buffer`).
+ */
+import {
+  DeveloperNotification,
+  GooglePlayInvalidNotificationError,
+  GooglePlayNotificationVerificationError,
+  type SubscriptionNotificationTypeValue,
+} from "@voidhash/google-play-server-sdk";
+import { Effect, Schema } from "effect";
+
+/** Subscription notification type code → name (RTDN `subscriptionNotification.notificationType`). */
+export const SUBSCRIPTION_NOTIFICATION_TYPES: Record<SubscriptionNotificationTypeValue, string> = {
+  1: "SUBSCRIPTION_RECOVERED",
+  2: "SUBSCRIPTION_RENEWED",
+  3: "SUBSCRIPTION_CANCELED",
+  4: "SUBSCRIPTION_PURCHASED",
+  5: "SUBSCRIPTION_ON_HOLD",
+  6: "SUBSCRIPTION_IN_GRACE_PERIOD",
+  7: "SUBSCRIPTION_RESTARTED",
+  8: "SUBSCRIPTION_PRICE_CHANGE_CONFIRMED",
+  9: "SUBSCRIPTION_DEFERRED",
+  10: "SUBSCRIPTION_PAUSED",
+  11: "SUBSCRIPTION_PAUSE_SCHEDULE_CHANGED",
+  12: "SUBSCRIPTION_REVOKED",
+  13: "SUBSCRIPTION_EXPIRED",
+};
+
+/** One-time product notification type code → name. */
+export const ONE_TIME_PRODUCT_NOTIFICATION_TYPES: Record<number, string> = {
+  1: "ONE_TIME_PRODUCT_PURCHASED",
+  2: "ONE_TIME_PRODUCT_CANCELED",
+};
+
+export interface DecodedSubscriptionNotification {
+  readonly type: "subscription";
+  readonly packageName: string;
+  readonly eventTimeMillis?: string;
+  readonly notificationType: SubscriptionNotificationTypeValue;
+  readonly notificationTypeName: string;
+  readonly purchaseToken: string;
+  readonly subscriptionId: string;
+}
+
+export interface DecodedOneTimeProductNotification {
+  readonly type: "oneTimeProduct";
+  readonly packageName: string;
+  readonly eventTimeMillis?: string;
+  readonly notificationType: number;
+  readonly notificationTypeName: string;
+  readonly purchaseToken: string;
+  readonly sku: string;
+}
+
+export interface DecodedVoidedPurchaseNotification {
+  readonly type: "voidedPurchase";
+  readonly packageName: string;
+  readonly eventTimeMillis?: string;
+  readonly purchaseToken: string;
+  readonly orderId?: string;
+  /** 1 = subscription, 2 = one-time product (RTDN convention). */
+  readonly productType?: number;
+  /** 1 = full refund, 2 = revoke (RTDN convention). */
+  readonly refundType?: number;
+}
+
+export interface DecodedTestNotification {
+  readonly type: "test";
+  readonly packageName: string;
+  readonly eventTimeMillis?: string;
+  readonly version?: string;
+}
+
+export type DecodedNotification =
+  | DecodedSubscriptionNotification
+  | DecodedOneTimeProductNotification
+  | DecodedVoidedPurchaseNotification
+  | DecodedTestNotification;
+
+/** Pub/Sub push message envelope. `message.data` is base64-encoded JSON. */
+export const PubSubMessage = Schema.Struct({
+  message: Schema.Struct({
+    data: Schema.String,
+    messageId: Schema.optional(Schema.String),
+    publishTime: Schema.optional(Schema.String),
+    attributes: Schema.optional(Schema.Record(Schema.String, Schema.String)),
+  }),
+  subscription: Schema.optional(Schema.String),
+});
+
+export type PubSubMessage = typeof PubSubMessage.Type;
+
+/** Workers-safe base64 → UTF-8 decode (no `Buffer`). */
+const decodeBase64ToUtf8 = (base64: string): string => {
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return new TextDecoder().decode(bytes);
+};
+
+/**
+ * Decodes a base64-encoded RTDN `message.data` payload into a validated
+ * {@link DeveloperNotification}.
+ */
+export const decodeNotificationFromBase64 = (messageData: string) =>
+  Effect.gen(function* () {
+    const decodedString = yield* Effect.try({
+      try: () => decodeBase64ToUtf8(messageData),
+      catch: (error) =>
+        new GooglePlayNotificationVerificationError({
+          message: `Failed to decode base64 message: ${String(error)}`,
+        }),
+    });
+
+    const parsedJson = yield* Effect.try({
+      try: () => JSON.parse(decodedString) as unknown,
+      catch: (error) =>
+        new GooglePlayInvalidNotificationError({
+          message: `Failed to parse notification JSON: ${String(error)}`,
+          rawNotification: decodedString,
+        }),
+    });
+
+    return yield* Schema.decodeUnknownEffect(DeveloperNotification)(parsedJson).pipe(
+      Effect.mapError(
+        (parseError) =>
+          new GooglePlayInvalidNotificationError({
+            message: `Invalid notification structure: ${parseError.message}`,
+            rawNotification: parsedJson,
+          }),
+      ),
+    );
+  });
+
+/** Parses a Pub/Sub push envelope and extracts the inner RTDN notification. */
+export const parseNotificationFromPubSubMessage = (pubsubMessage: unknown) =>
+  Effect.gen(function* () {
+    const message = yield* Schema.decodeUnknownEffect(PubSubMessage)(pubsubMessage).pipe(
+      Effect.mapError(
+        (parseError) =>
+          new GooglePlayInvalidNotificationError({
+            message: `Invalid Pub/Sub message structure: ${parseError.message}`,
+            rawNotification: pubsubMessage,
+          }),
+      ),
+    );
+    return yield* decodeNotificationFromBase64(message.message.data);
+  });
+
+/** Converts a {@link DeveloperNotification} into a typed {@link DecodedNotification}. */
+export const categorizeNotification = (notification: typeof DeveloperNotification.Type) =>
+  Effect.gen(function* () {
+    const { packageName, eventTimeMillis } = notification;
+
+    if (notification.subscriptionNotification) {
+      const subNotif = notification.subscriptionNotification;
+      const notificationType = subNotif.notificationType as SubscriptionNotificationTypeValue;
+      return {
+        type: "subscription",
+        packageName,
+        eventTimeMillis,
+        notificationType,
+        notificationTypeName: SUBSCRIPTION_NOTIFICATION_TYPES[notificationType] ?? "UNKNOWN",
+        purchaseToken: subNotif.purchaseToken,
+        subscriptionId: subNotif.subscriptionId,
+      } satisfies DecodedSubscriptionNotification;
+    }
+
+    if (notification.oneTimeProductNotification) {
+      const prodNotif = notification.oneTimeProductNotification;
+      return {
+        type: "oneTimeProduct",
+        packageName,
+        eventTimeMillis,
+        notificationType: prodNotif.notificationType,
+        notificationTypeName:
+          ONE_TIME_PRODUCT_NOTIFICATION_TYPES[prodNotif.notificationType] ?? "UNKNOWN",
+        purchaseToken: prodNotif.purchaseToken,
+        sku: prodNotif.sku,
+      } satisfies DecodedOneTimeProductNotification;
+    }
+
+    if (notification.voidedPurchaseNotification) {
+      const voidedNotif = notification.voidedPurchaseNotification;
+      return {
+        type: "voidedPurchase",
+        packageName,
+        eventTimeMillis,
+        purchaseToken: voidedNotif.purchaseToken,
+        orderId: voidedNotif.orderId,
+        productType: voidedNotif.productType,
+        refundType: voidedNotif.refundType,
+      } satisfies DecodedVoidedPurchaseNotification;
+    }
+
+    if (notification.testNotification) {
+      return {
+        type: "test",
+        packageName,
+        eventTimeMillis,
+        version: notification.testNotification.version,
+      } satisfies DecodedTestNotification;
+    }
+
+    return yield* Effect.fail(
+      new GooglePlayInvalidNotificationError({
+        message: "Notification does not contain a recognized notification type",
+        rawNotification: notification,
+      }),
+    );
+  });
+
+/** Parses and categorizes a complete Pub/Sub RTDN push message. */
+export const parseAndCategorizeNotification = (pubsubMessage: unknown) =>
+  Effect.gen(function* () {
+    const notification = yield* parseNotificationFromPubSubMessage(pubsubMessage);
+    return yield* categorizeNotification(notification);
+  });
+
+/** Subscription notification types that indicate the subscription became active. */
+export const isSubscriptionActivatedNotification = (notification: DecodedNotification): boolean =>
+  notification.type === "subscription" && [1, 4, 7].includes(notification.notificationType); // RECOVERED / PURCHASED / RESTARTED
+
+/** Subscription notification types that indicate a renewal. */
+export const isSubscriptionRenewalNotification = (notification: DecodedNotification): boolean =>
+  notification.type === "subscription" && notification.notificationType === 2; // RENEWED
+
+/** Subscription notification types that indicate cancellation / loss of entitlement. */
+export const isSubscriptionCancellationNotification = (
+  notification: DecodedNotification,
+): boolean =>
+  notification.type === "subscription" && [3, 12, 13].includes(notification.notificationType); // CANCELED / REVOKED / EXPIRED
diff --git a/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service-queries.ts b/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service-queries.ts
new file mode 100644
index 000000000..06f0e6d84
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service-queries.ts
@@ -0,0 +1,415 @@
+/**
+ * DB-bound primitives for the Google Play payment-provider services. Mirrors
+ * the App Store query module — Google Play owns its own provider/source-specific
+ * purchase identity resolution, so this module contains both Google Play
+ * configuration reads and Google Play identity lookups, keyed on the
+ * `"google-play"` serviceId and the Google subscription series id
+ * (`purchaseToken`, stored as `subscription.storeSubscriptionId`).
+ *
+ * `Db` is yielded fresh inside each method so that queries route to the active
+ * transaction when one is in scope.
+ */
+import {
+  type InsertPaymentProviderNotificationProcessed,
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type PaymentProviderConfigurationProduct as DbPaymentProviderConfigurationProduct,
+  type PaymentProviderNotificationProcessed as DbPaymentProviderNotificationProcessed,
+  eq,
+  PersonOrigin,
+  paymentProviderNotificationProcessed,
+  personExternalIdentifiers,
+  sql,
+  type Project as DbProject,
+  type DbError,
+  Db,
+} from "@voidhash/db";
+import { Effect, Layer, Option, Context } from "effect";
+
+/** Bound on `mergedIntoPersonId` chain-following — cycle/runaway backstop. */
+const MAX_MERGE_CHAIN_HOPS = 10;
+
+const make = Effect.gen(function* () {
+  const db = yield* Db;
+
+  const findPaymentProviderConfigurationsByProjectId = Effect.fn(
+    "findPaymentProviderConfigurationsByProjectId",
+  )(
+    (
+      projectId: string,
+    ): Effect.Effect<ReadonlyArray<DbPaymentProviderConfiguration>, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderConfigurations.findMany({
+          where: {
+            projectId,
+            deletedAt: { isNull: true },
+          },
+        });
+      }),
+  );
+
+  const findPaymentProviderConfigurationProductByPrimaryKey = Effect.fn(
+    "findPaymentProviderConfigurationProductByPrimaryKey",
+  )(
+    (input: {
+      readonly paymentProviderConfigurationId: string;
+      readonly providerProductKey: string;
+    }): Effect.Effect<DbPaymentProviderConfigurationProduct | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderConfigurationProducts.findFirst({
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            providerProductKey: input.providerProductKey,
+            isActive: true,
+          },
+        });
+      }),
+  );
+
+  const findPaymentProviderConfigurationById = Effect.fn("findPaymentProviderConfigurationById")(
+    (id: string): Effect.Effect<DbPaymentProviderConfiguration | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderConfigurations.findFirst({
+          where: {
+            id,
+            deletedAt: { isNull: true },
+          },
+        });
+      }),
+  );
+
+  const findProjectById = Effect.fn("findProjectById")(
+    (id: string): Effect.Effect<DbProject | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.projects.findFirst({ where: { id } });
+      }),
+  );
+
+  const findPersonIdentityByDistinctId = Effect.fn("findPersonIdentityByDistinctId")(
+    (input: {
+      readonly projectId: string;
+      readonly distinctId: string;
+    }): Effect.Effect<Option.Option<{ readonly personId: string }>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personIdentities.findFirst({
+          columns: { personId: true },
+          where: {
+            projectId: input.projectId,
+            distinctId: input.distinctId,
+          },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  const findExternalIdentifier = Effect.fn("findExternalIdentifier")(
+    (input: {
+      readonly projectId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+    }): Effect.Effect<
+      Option.Option<{ readonly id: string; readonly personId: string }>,
+      DbError,
+      Db
+    > =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personExternalIdentifiers.findFirst({
+          columns: { id: true, personId: true },
+          where: {
+            projectId: input.projectId,
+            serviceId: input.serviceId,
+            identifier: input.identifier,
+          },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  const createExternalIdentifier = Effect.fn("createExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly projectId: string;
+      readonly personId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+      readonly isDefault: boolean;
+    }): Effect.Effect<{ readonly id: string }, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db.insert(personExternalIdentifiers).values(input);
+        return { id: input.id };
+      }),
+  );
+
+  /**
+   * Insert-or-repoint of a `person_external_identifier` row, keyed by the
+   * UNIQUE `(projectId, serviceId, identifier)` index. Used by the SDK path to
+   * lazily bind a derived account token to the SDK-authenticated person; the
+   * `ON CONFLICT ... DO UPDATE person_id` repoints an existing binding rather
+   * than failing on the constraint.
+   */
+  const upsertExternalIdentifier = Effect.fn("upsertExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly projectId: string;
+      readonly personId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+      readonly isDefault: boolean;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .insert(personExternalIdentifiers)
+          .values(input)
+          .onConflictDoUpdate({
+            target: [
+              personExternalIdentifiers.projectId,
+              personExternalIdentifiers.serviceId,
+              personExternalIdentifiers.identifier,
+            ],
+            set: { personId: input.personId },
+          });
+      }),
+  );
+
+  /**
+   * Follows `persons.mergedIntoPersonId` to the surviving canonical person,
+   * bounded to {@link MAX_MERGE_CHAIN_HOPS}. External-identifier rows are NOT
+   * repointed when their person is merged away (the identify-completion
+   * workflow only touches `person_identity`), so a webhook resolving a
+   * `google-play` / account-token binding must canonicalize the result before
+   * returning it, else post-merge renewals would attribute to an archived
+   * person.
+   */
+  const resolveCanonicalPersonId = Effect.fn("resolveCanonicalPersonId")(
+    (input: { readonly personId: string }): Effect.Effect<string, DbError, Db> =>
+      Effect.gen(function* () {
+        let currentId = input.personId;
+        for (let hop = 0; hop < MAX_MERGE_CHAIN_HOPS; hop++) {
+          const row = yield* db.query.persons.findFirst({
+            columns: { mergedIntoPersonId: true },
+            where: { id: currentId },
+          });
+          const mergedInto = row?.mergedIntoPersonId;
+          if (!mergedInto || mergedInto === currentId) {
+            return currentId;
+          }
+          currentId = mergedInto;
+        }
+        return currentId;
+      }),
+  );
+
+  /**
+   * Rebinds an existing `person_external_identifier` row to a new `personId`.
+   * Used by the SDK identity-rebind path when a later SDK confirmation reveals
+   * that a `purchaseToken` previously bound to an anonymous provider person
+   * actually belongs to the SDK-authenticated person.
+   */
+  const rebindExternalIdentifier = Effect.fn("rebindExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly newPersonId: string;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .update(personExternalIdentifiers)
+          .set({ personId: input.newPersonId })
+          .where(eq(personExternalIdentifiers.id, input.id));
+      }),
+  );
+
+  /**
+   * Looks up the default (or first) distinctId bound to a person — used when we
+   * need a `previousDistinctId` to merge an anonymous provider person into the
+   * SDK-authenticated person via `identifyDistinctId`.
+   */
+  const findDistinctIdForPerson = Effect.fn("findDistinctIdForPerson")(
+    (input: {
+      readonly projectId: string;
+      readonly personId: string;
+    }): Effect.Effect<Option.Option<string>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personIdentities.findFirst({
+          columns: { distinctId: true },
+          where: {
+            projectId: input.projectId,
+            personId: input.personId,
+          },
+        });
+        return Option.fromNullishOr(row?.distinctId);
+      }),
+  );
+
+  /**
+   * Inserts a row into `payment_provider_notification_processed`. Treats a
+   * UNIQUE collision on `(configurationId, notificationUUID)` as success — the
+   * second copy of the same notification has been processed already. Returns
+   * `{ inserted }` so the webhook handler can distinguish first-arrival from
+   * duplicate at the wire layer.
+   *
+   * `inserted` is decided by reading the surviving row back and comparing its
+   * id to the one we tried to insert, which is driver-agnostic and race-safe.
+   * The UNIQUE constraint serializes concurrent writers, so the row keeps the
+   * *first* writer's id.
+   */
+  const insertNotificationProcessedIfAbsent = Effect.fn("insertNotificationProcessedIfAbsent")(
+    (
+      input: InsertPaymentProviderNotificationProcessed,
+    ): Effect.Effect<{ readonly inserted: boolean }, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .insert(paymentProviderNotificationProcessed)
+          .values(input)
+          .onConflictDoNothing({
+            target: [
+              paymentProviderNotificationProcessed.paymentProviderConfigurationId,
+              paymentProviderNotificationProcessed.notificationUuid,
+            ],
+          });
+        const surviving = yield* db.query.paymentProviderNotificationProcessed.findFirst({
+          columns: { id: true },
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            notificationUuid: input.notificationUuid,
+          },
+        });
+        return { inserted: surviving?.id === input.id };
+      }),
+  );
+
+  /**
+   * Lists parked notifications waiting for a `(configurationId, providerProductKey)`
+   * mapping to appear. Used by the replay-on-product-creation flow.
+   */
+  const findParkedNotifications = Effect.fn("findParkedNotifications")(
+    (input: {
+      readonly paymentProviderConfigurationId: string;
+      readonly providerProductKey: string;
+    }): Effect.Effect<ReadonlyArray<DbPaymentProviderNotificationProcessed>, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderNotificationProcessed.findMany({
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            result: "parked_pending_product_mapping",
+            parkedUntilProviderProductKey: input.providerProductKey,
+          },
+        });
+      }),
+  );
+
+  /**
+   * Marks a previously-parked notification row with a fresh outcome (`"applied"`
+   * / `"failed"`) after the replay attempt resolves, clearing the parked-state
+   * columns.
+   */
+  const markParkedNotificationResolved = Effect.fn("markParkedNotificationResolved")(
+    (input: {
+      readonly id: string;
+      readonly result: string;
+      readonly resultNote: string | null;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .update(paymentProviderNotificationProcessed)
+          .set({
+            parkedRawPayload: null,
+            parkedUntilOriginalTransactionId: null,
+            parkedUntilProviderProductKey: null,
+            processedAt: sql`NOW()`,
+            result: input.result,
+            resultNote: input.resultNote,
+          })
+          .where(eq(paymentProviderNotificationProcessed.id, input.id));
+      }),
+  );
+
+  /**
+   * Reports whether `personId` is a webhook-created Google Play stand-in — the
+   * synthetic anonymous person an RTDN (or reconciliation) parks a purchase on
+   * before SDK confirmation, marked at creation with
+   * `PersonOrigin.GooglePlayWebhook`. A missing person resolves to `false`.
+   */
+  const isGooglePlayWebhookStandInPerson = Effect.fn("isGooglePlayWebhookStandInPerson")(
+    (input: {
+      readonly projectId: string;
+      readonly personId: string;
+    }): Effect.Effect<boolean, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.persons.findFirst({
+          columns: { origin: true },
+          where: {
+            id: input.personId,
+            projectId: input.projectId,
+          },
+        });
+        return row?.origin === PersonOrigin.GooglePlayWebhook;
+      }),
+  );
+
+  /**
+   * Finds the subscription tied to a Google Play `purchaseToken` (stored as
+   * `subscription.storeSubscriptionId`). Google purchase tokens are globally
+   * unique, so the unscoped lookup is safe.
+   */
+  const findSubscriptionByStoreSubscriptionId = Effect.fn("findSubscriptionByStoreSubscriptionId")(
+    (input: {
+      readonly storeSubscriptionId: string;
+    }): Effect.Effect<Option.Option<{ readonly id: string }>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.subscriptions.findFirst({
+          columns: { id: true },
+          where: { storeSubscriptionId: input.storeSubscriptionId },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  /**
+   * Finds the one-time purchase keyed by `purchase.providerKey` (the Google
+   * `orderId` for one-time charges). Returns `type` so the caller can skip
+   * consumables.
+   */
+  const findPurchaseByProviderKey = Effect.fn("findPurchaseByProviderKey")(
+    (input: {
+      readonly providerKey: string;
+    }): Effect.Effect<Option.Option<{ readonly id: string; readonly type: number }>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.purchases.findFirst({
+          columns: { id: true, type: true },
+          where: { providerKey: input.providerKey },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  return {
+    createExternalIdentifier,
+    findDistinctIdForPerson,
+    findExternalIdentifier,
+    findParkedNotifications,
+    findPaymentProviderConfigurationById,
+    findPaymentProviderConfigurationsByProjectId,
+    findPaymentProviderConfigurationProductByPrimaryKey,
+    findPersonIdentityByDistinctId,
+    findProjectById,
+    findPurchaseByProviderKey,
+    findSubscriptionByStoreSubscriptionId,
+    insertNotificationProcessedIfAbsent,
+    isGooglePlayWebhookStandInPerson,
+    markParkedNotificationResolved,
+    rebindExternalIdentifier,
+    resolveCanonicalPersonId,
+    upsertExternalIdentifier,
+  } as const;
+});
+
+export type GooglePlayPaymentProviderServiceQueriesShape = Effect.Success<typeof make>;
+
+export class GooglePlayPaymentProviderServiceQueries extends Context.Service<GooglePlayPaymentProviderServiceQueries>()(
+  "core/GooglePlayPaymentProviderServiceQueries",
+  { make },
+) {
+  static readonly layer: Layer.Layer<GooglePlayPaymentProviderServiceQueries, never, Db> =
+    Layer.effect(GooglePlayPaymentProviderServiceQueries)(
+      GooglePlayPaymentProviderServiceQueries.make,
+    );
+}
diff --git a/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts b/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts
new file mode 100644
index 000000000..68a718bea
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts
@@ -0,0 +1,138 @@
+/**
+ * Live implementation of the public {@link GooglePlayPaymentProviderService}
+ * boundary for the Cloudflare backend. Mirrors the App Store live service.
+ *
+ * Owns the SDK-path orchestration (project → configuration → Play API fetch →
+ * normalize → forward to {@link GooglePlayPaymentProvider.recordPurchase}) and
+ * delegates webhook ingress to {@link GooglePlayWebhookHandlerService}.
+ */
+import { Effect, Layer } from "effect";
+
+import {
+  GooglePlayPaymentProviderService,
+  type GooglePlayPaymentProviderServiceShape,
+} from "../GooglePlayPaymentProviderService.ts";
+import { GooglePlayPaymentProviderServiceError } from "./errors.ts";
+import { getActiveGooglePlayPaymentProviderConfiguration } from "./helpers.ts";
+import { GooglePlayPaymentProvider } from "./payment-provider.ts";
+import { GooglePlayPaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import { GooglePlayWebhookHandlerService } from "./webhook-handler-service.ts";
+
+/**
+ * Best-effort extraction of a human-readable cause from any upstream failure
+ * (Play SDK errors carry `message`, infra errors carry `cause`). Collapses the
+ * rich error union into the single {@link GooglePlayPaymentProviderServiceError}
+ * the public boundary exposes.
+ */
+const extractCause = (error: unknown): string => {
+  if (error instanceof GooglePlayPaymentProviderServiceError) return error.cause;
+  if (typeof error === "object" && error !== null) {
+    const candidate = error as { message?: unknown; cause?: unknown; status?: unknown };
+    if (typeof candidate.message === "string") return candidate.message;
+    if (typeof candidate.cause === "string") return candidate.cause;
+    if (typeof candidate.status === "string") return String(candidate.status);
+  }
+  return String(error);
+};
+
+const toServiceError = (error: unknown): GooglePlayPaymentProviderServiceError =>
+  error instanceof GooglePlayPaymentProviderServiceError
+    ? error
+    : new GooglePlayPaymentProviderServiceError({ cause: extractCause(error) });
+
+export const GooglePlayPaymentProviderServiceLive = Layer.effect(GooglePlayPaymentProviderService)(
+  Effect.gen(function* () {
+    const googlePlayPaymentProvider = yield* GooglePlayPaymentProvider;
+    const googlePlayWebhookHandlerService = yield* GooglePlayWebhookHandlerService;
+    const queries = yield* GooglePlayPaymentProviderServiceQueries;
+
+    const processSdkTransaction = Effect.fn("processSdkTransaction")(
+      function* (input: {
+        readonly packageName: string;
+        readonly productId: string;
+        readonly purchaseToken: string;
+        readonly distinctId: string;
+        readonly projectId: string;
+        readonly receivedAt: Date;
+      }) {
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.package_name",
+          input.packageName,
+        );
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+
+        const configurations = yield* queries.findPaymentProviderConfigurationsByProjectId(
+          input.projectId,
+        );
+        const paymentProviderKey = yield* googlePlayPaymentProvider.createGlobalKey({
+          packageName: input.packageName,
+        });
+        const configuration = yield* getActiveGooglePlayPaymentProviderConfiguration(
+          configurations,
+          input.packageName,
+          paymentProviderKey,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.configuration_id",
+          configuration.id,
+        );
+
+        const fullProject = yield* queries.findProjectById(input.projectId);
+        if (!fullProject) {
+          return yield* Effect.die(`Project ${input.projectId} not found`);
+        }
+
+        const sdkContext =
+          yield* googlePlayPaymentProvider.buildSdkContextFromConfiguration(configuration);
+
+        // Try subscription first; fall back to one-time product when the token
+        // isn't a subscription.
+        const fetched = yield* googlePlayPaymentProvider
+          .fetchAndNormalizeSubscription(sdkContext, {
+            purchaseToken: input.purchaseToken,
+            subscriptionId: input.productId,
+          })
+          .pipe(
+            Effect.catchTag("GooglePlayPurchaseNotFoundError", () =>
+              googlePlayPaymentProvider.fetchAndNormalizeProduct(sdkContext, {
+                purchaseToken: input.purchaseToken,
+                sku: input.productId,
+              }),
+            ),
+          );
+
+        const result = yield* googlePlayPaymentProvider.recordPurchase({
+          configuration,
+          distinctId: input.distinctId,
+          eventTime: input.receivedAt,
+          project: fullProject,
+          providerEnvironment: fetched.providerEnvironment,
+          purchase: fetched.purchase,
+          receivedAt: input.receivedAt,
+          source: "sdk",
+        });
+
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", result.personId);
+        return { personId: result.personId };
+      },
+      (effect) => effect.pipe(Effect.catch((error) => Effect.fail(toServiceError(error)))),
+    );
+
+    // Boundary cast (mirrors App Store): the engine/handler resolve all their
+    // deps at layer-build time, but the inferred `R`/`E` may still carry a
+    // residual the public shape models as `never`. The deps are ambient at call
+    // time (the service runs inside the deployed Worker).
+    return {
+      acceptRtdnNotification: (input: {
+        readonly paymentProviderConfigurationId: string;
+        readonly receivedAt: Date;
+        readonly pubsubBody: unknown;
+      }) =>
+        googlePlayWebhookHandlerService
+          .acceptRtdnNotification(input)
+          .pipe(Effect.catch((error) => Effect.fail(toServiceError(error)))),
+      processSdkTransaction,
+    } as unknown as GooglePlayPaymentProviderServiceShape;
+  }),
+).pipe(Layer.provide(GooglePlayWebhookHandlerService.layer));
diff --git a/packages/core/src/services/paymentProviders/googlePlay/payment-provider.ts b/packages/core/src/services/paymentProviders/googlePlay/payment-provider.ts
new file mode 100644
index 000000000..d8177051f
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/payment-provider.ts
@@ -0,0 +1,834 @@
+/**
+ * The Google Play purchase record engine — the provider boundary that
+ * normalizes authoritative Play state into the platform-neutral
+ * {@link PurchaseProcessingService} actions. Mirrors the App Store
+ * `payment-provider.ts` engine: identity resolution, money construction,
+ * idempotency-key derivation, and one `record*` method per lifecycle event.
+ *
+ * Unlike Apple's self-contained signed JWS, Google RTDN bodies are pointers,
+ * so the webhook handler / SDK boundary first fetch authoritative state
+ * (`subscriptions.v2.get` / `products.v2.get`) via {@link fetchAndNormalizeSubscription}
+ * / {@link fetchAndNormalizeProduct} and pass a {@link GooglePlayNormalizedPurchase}
+ * into the `record*` methods.
+ */
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type PersonOriginValue,
+  type Project as DbProject,
+  type ProviderEnvironmentValue,
+  PersonOrigin,
+  ProviderEnvironment,
+} from "@voidhash/db";
+import { PurchaseType } from "@voidhash/lib/constants";
+import { Context, Effect, Layer, Option, Schema } from "effect";
+
+import {
+  DEFAULT_SUBSCRIPTION_TRANSFER_MODE,
+  type SubscriptionTransferMode,
+} from "../../../domain/paymentProvider/SubscriptionTransfer.ts";
+import {
+  type PurchaseActionContext,
+  PurchaseProcessingService,
+} from "../../purchaseProcessing/PurchaseProcessingService.ts";
+import { FxRateService } from "../../fxRates/FxRateService.ts";
+import { PersonIdentityService } from "../../personIdentity/PersonIdentityService.ts";
+import {
+  ACCOUNT_TOKEN_SERVICE_ID,
+  deriveAccountToken,
+} from "../../../utils/crypto/account-token.ts";
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { generateId } from "../../../utils/index.ts";
+import type { PaymentProvider } from "../payment-provider-adapter.ts";
+import {
+  type GooglePlayGlobalConfiguration,
+  type GooglePlayProductConfiguration,
+  globalConfigurationSchema,
+  makeGooglePlayConfigProvider,
+  productConfigurationSchema,
+} from "./config-provider.ts";
+import {
+  GooglePlayPaymentProviderProductNotMappedError,
+  GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError,
+  GooglePlayPaymentProviderServiceError,
+  GooglePlayPaymentProviderTransactionMissingPersonIdentifierError,
+} from "./errors.ts";
+import {
+  type GooglePlayNormalizedPurchase,
+  type GooglePlayPurchaseProcessingEventType,
+  GOOGLE_PLAY_SERVICE_ID,
+  buildGooglePlayWebhookAnonymousDistinctId,
+  getGooglePlayPersonIdentifier,
+  getGooglePlayPurchaseProcessingIdempotencyKey,
+  googlePlayProviderProductKey,
+  makeIgnoredPurchaseProcessingResult,
+  normalizeProductPurchaseV2,
+  normalizeSubscriptionPurchaseV2,
+} from "./helpers.ts";
+import {
+  buildGooglePlayMoney,
+  googleMoneyToMinorUnits,
+  resolveGooglePlayCommissionRateBps,
+} from "./money.ts";
+import { GooglePlayPaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import {
+  type GooglePlaySdkContext,
+  GooglePlayServerApi,
+  buildGooglePlaySdkContext,
+} from "./sdk-context.ts";
+
+// Re-export so existing importers of the schemas from this module keep working.
+export { globalConfigurationSchema, productConfigurationSchema };
+
+export interface GooglePlayPaymentProviderShape extends PaymentProvider<
+  "google-play",
+  GooglePlayGlobalConfiguration,
+  GooglePlayProductConfiguration
+> {
+  readonly globalConfigurationSchema: typeof globalConfigurationSchema;
+  readonly productConfigurationSchema: typeof productConfigurationSchema;
+}
+
+/**
+ * Shared base accepted by every `record*` method. The webhook handler and SDK
+ * boundary pre-resolve `configuration`, `project`, and the authoritative
+ * `purchase` and pass them in.
+ */
+type GooglePlayRecordInputBase = {
+  readonly configuration: DbPaymentProviderConfiguration;
+  readonly project: DbProject;
+  readonly purchase: GooglePlayNormalizedPurchase;
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  /** The event's true occurrence time (RTDN `eventTimeMillis`, or SDK `receivedAt`). */
+  readonly eventTime: Date;
+  readonly receivedAt: Date;
+  readonly notificationUUID?: string;
+};
+
+/**
+ * The SDK path requires a `distinctId` so we can attach the purchase to the
+ * caller's user; webhook and reconciliation paths derive identity from the
+ * purchase. Encoded as a discriminated union so the requirement is a type-level
+ * constraint at every call site.
+ */
+export type GooglePlayRecordInput = GooglePlayRecordInputBase &
+  (
+    | { readonly source: "sdk"; readonly distinctId: string }
+    | { readonly source: "webhook" | "reconciliation"; readonly distinctId?: never }
+  );
+
+const optionAttr = <A>(value: Option.Option<A>): A | undefined => Option.getOrUndefined(value);
+
+const make = Effect.gen(function* () {
+  const queries = yield* GooglePlayPaymentProviderServiceQueries;
+  const personIdentityService = yield* PersonIdentityService;
+  const purchaseProcessingService = yield* PurchaseProcessingService;
+  const googlePlayServerApi = yield* GooglePlayServerApi;
+  /** Captured at construction so `record*` methods keep `R = never` (no FX requirement leaks). */
+  const fxRateService = yield* FxRateService;
+  const secretCrypto = yield* PaymentConfigSecretCrypto;
+
+  const configProvider = makeGooglePlayConfigProvider(secretCrypto);
+  const provider = {
+    ...configProvider,
+    globalConfigurationSchema,
+    productConfigurationSchema,
+  } satisfies GooglePlayPaymentProviderShape;
+
+  /**
+   * Builds the per-tenant Play API context from a stored configuration row:
+   * decodes the config schema, decrypts the service-account JSON, and mints the
+   * client. Rows written before the encryption seam are plaintext and pass
+   * through.
+   */
+  const buildSdkContextFromConfiguration = Effect.fn("buildSdkContextFromConfiguration")(function* (
+    configuration: DbPaymentProviderConfiguration,
+  ) {
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.payment_provider.configuration_id",
+      configuration.id,
+    );
+    yield* Effect.annotateCurrentSpan("voidhash.project.id", configuration.projectId);
+    yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", configuration.providerId);
+    const parsed = yield* Schema.decodeUnknownEffect(globalConfigurationSchema)(
+      configuration.configuration,
+    );
+    const serviceAccountKey = yield* secretCrypto.decrypt(parsed.serviceAccountKey);
+    return yield* buildGooglePlaySdkContext(googlePlayServerApi, {
+      packageName: parsed.packageName,
+      serviceAccountKey,
+    });
+  });
+
+  const providerEnvironmentForTest = (isTestPurchase: boolean): ProviderEnvironmentValue =>
+    isTestPurchase ? ProviderEnvironment.Sandbox : ProviderEnvironment.Production;
+
+  /**
+   * Fetches authoritative subscription state for a `purchaseToken`, resolves
+   * the buyer's regional list price from the catalog, and returns the
+   * normalized purchase plus the detected environment.
+   */
+  const fetchAndNormalizeSubscription = Effect.fn("fetchAndNormalizeSubscription")(function* (
+    sdkContext: GooglePlaySdkContext,
+    input: { readonly purchaseToken: string; readonly subscriptionId: string },
+  ) {
+    const data = yield* sdkContext.getSubscriptionV2(input.purchaseToken);
+    const lineItem = data.lineItems?.[0];
+    const productId = lineItem?.productId ?? input.subscriptionId;
+    const basePlanId = Option.fromNullishOr(lineItem?.offerDetails?.basePlanId);
+    const priceMoney = yield* sdkContext.resolveSubscriptionRegionalPrice({
+      basePlanId,
+      productId,
+      regionCode: Option.fromNullishOr(data.regionCode),
+    });
+    const minorUnits = Option.flatMap(priceMoney, googleMoneyToMinorUnits);
+    const purchase = normalizeSubscriptionPurchaseV2({
+      currency: Option.map(minorUnits, (value) => value.currency),
+      data,
+      priceMinorUnits: Option.map(minorUnits, (value) => value.minorUnits),
+      purchaseToken: input.purchaseToken,
+      subscriptionId: input.subscriptionId,
+    });
+    return {
+      providerEnvironment: providerEnvironmentForTest(data.testPurchase !== undefined),
+      purchase,
+    };
+  });
+
+  /**
+   * Fetches authoritative one-time product state for a `purchaseToken`. Google
+   * exposes no catalog-typed regional price for one-time products, so money is
+   * omitted (the entitlement is still recorded).
+   */
+  const fetchAndNormalizeProduct = Effect.fn("fetchAndNormalizeProduct")(function* (
+    sdkContext: GooglePlaySdkContext,
+    input: { readonly purchaseToken: string; readonly sku: string },
+  ) {
+    const data = yield* sdkContext.getProductV2(input.purchaseToken);
+    const purchase = normalizeProductPurchaseV2({
+      currency: Option.none(),
+      data,
+      priceMinorUnits: Option.none(),
+      purchaseToken: input.purchaseToken,
+      sku: input.sku,
+    });
+    return {
+      providerEnvironment: providerEnvironmentForTest(data.testPurchaseContext !== undefined),
+      purchase,
+    };
+  });
+
+  const _resolveDistinctIdToPersonId = Effect.fn("_resolveDistinctIdToPersonId")(function* (input: {
+    readonly distinctId: string;
+    readonly eventTimestamp: Date;
+    readonly projectId: string;
+    readonly origin?: PersonOriginValue;
+  }) {
+    const result = yield* personIdentityService.resolveDistinctId({
+      distinctId: input.distinctId,
+      eventTimestamp: input.eventTimestamp,
+      origin: input.origin ?? PersonOrigin.Android,
+      projectId: input.projectId,
+      setAttributes: {},
+      setOnceAttributes: {},
+      shouldCreatePerson: true,
+    });
+    if (!result.identity.personId) {
+      return yield* Effect.fail(
+        new GooglePlayPaymentProviderServiceError({
+          cause: "Google Play transaction resolved without person id",
+        }),
+      );
+    }
+    return result.identity.personId;
+  });
+
+  const _resolvePersonForGooglePlayTransaction = Effect.fn(
+    "_resolvePersonForGooglePlayTransaction",
+  )(function* (input: {
+    readonly projectId: string;
+    readonly organizationId: string;
+    readonly paymentProviderConfigurationId: string;
+    readonly source: "sdk" | "webhook" | "reconciliation";
+    readonly distinctId?: string;
+    readonly obfuscatedExternalAccountId?: string;
+    readonly providerTransactionId: string;
+    readonly providerSubscriptionId?: string;
+    readonly personIdentifier: string;
+    readonly providerEnvironment: ProviderEnvironmentValue;
+    readonly transferMode: SubscriptionTransferMode;
+    readonly occurredAt: Date;
+  }) {
+    // The SDK sets a lowercase hyphenated UUIDv5 account token; canonicalize
+    // defensively before any lookup or comparison.
+    const accountToken = input.obfuscatedExternalAccountId?.toLowerCase();
+    yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+    yield* Effect.annotateCurrentSpan("voidhash.purchase.source", input.source);
+
+    if (input.source === "sdk") {
+      if (!input.distinctId) {
+        return yield* new GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError({
+          purchaseToken: input.providerSubscriptionId ?? input.providerTransactionId,
+        });
+      }
+      const sdkPersonId = yield* _resolveDistinctIdToPersonId({
+        distinctId: input.distinctId,
+        eventTimestamp: input.occurredAt,
+        projectId: input.projectId,
+      });
+
+      const existingExternal = yield* queries.findExternalIdentifier({
+        identifier: input.personIdentifier,
+        projectId: input.projectId,
+        serviceId: GOOGLE_PLAY_SERVICE_ID,
+      });
+
+      if (Option.isSome(existingExternal)) {
+        if (existingExternal.value.personId !== sdkPersonId) {
+          const previousIsWebhookStandIn = yield* queries.isGooglePlayWebhookStandInPerson({
+            personId: existingExternal.value.personId,
+            projectId: input.projectId,
+          });
+
+          if (previousIsWebhookStandIn) {
+            yield* Effect.annotateCurrentSpan({
+              "google_play.identity_result": "webhook_stand_in_merge",
+            });
+            const previousDistinctId = yield* queries.findDistinctIdForPerson({
+              personId: existingExternal.value.personId,
+              projectId: input.projectId,
+            });
+            if (Option.isSome(previousDistinctId)) {
+              yield* personIdentityService
+                .identifyDistinctId({
+                  distinctId: input.distinctId,
+                  eventTimestamp: input.occurredAt,
+                  origin: PersonOrigin.Android,
+                  previousDistinctId: previousDistinctId.value,
+                  projectId: input.projectId,
+                  setAttributes: {},
+                  setOnceAttributes: {},
+                })
+                .pipe(
+                  Effect.catch((error: unknown) =>
+                    Effect.logWarning(
+                      "Google Play SDK identity rebind: identifyDistinctId merge failed; continuing with identifier rebind only",
+                      { cause: error, personIdentifier: input.personIdentifier },
+                    ),
+                  ),
+                );
+            }
+            yield* queries.rebindExternalIdentifier({
+              id: existingExternal.value.id,
+              newPersonId: sdkPersonId,
+            });
+          } else {
+            // Cross-owner restore between two real persons: transfer the
+            // entitlement FIRST and rebind LAST so a crash between is
+            // self-healing.
+            const transferred = yield* Effect.gen(function* () {
+              const subscription = yield* queries.findSubscriptionByStoreSubscriptionId({
+                storeSubscriptionId: input.providerSubscriptionId ?? input.personIdentifier,
+              });
+              if (Option.isSome(subscription)) {
+                yield* purchaseProcessingService.transferSubscription({
+                  fromPersonId: existingExternal.value.personId,
+                  occurredAt: input.occurredAt,
+                  organizationId: input.organizationId,
+                  paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                  projectId: input.projectId,
+                  providerId: "google-play",
+                  source: "sdk",
+                  subscriptionId: subscription.value.id,
+                  toPersonId: sdkPersonId,
+                  transferMode: input.transferMode,
+                  triggerReason: "appstore_restore",
+                });
+                return true;
+              }
+              const purchase = yield* queries.findPurchaseByProviderKey({
+                providerKey: input.providerTransactionId,
+              });
+              if (Option.isSome(purchase) && purchase.value.type === PurchaseType.OneTime) {
+                yield* purchaseProcessingService.transferPurchase({
+                  fromPersonId: existingExternal.value.personId,
+                  occurredAt: input.occurredAt,
+                  organizationId: input.organizationId,
+                  paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                  projectId: input.projectId,
+                  providerId: "google-play",
+                  purchaseId: purchase.value.id,
+                  source: "sdk",
+                  toPersonId: sdkPersonId,
+                  transferMode: input.transferMode,
+                  triggerReason: "appstore_restore",
+                });
+              }
+              return true;
+            }).pipe(
+              Effect.catch((error: unknown) =>
+                Effect.logWarning(
+                  "Google Play cross-owner transfer failed; skipping identifier rebind so a later delivery retries",
+                  { cause: error, personIdentifier: input.personIdentifier },
+                ).pipe(Effect.as(false)),
+              ),
+            );
+            if (transferred) {
+              yield* queries.rebindExternalIdentifier({
+                id: existingExternal.value.id,
+                newPersonId: sdkPersonId,
+              });
+            }
+            yield* Effect.annotateCurrentSpan({
+              "google_play.identity_result": transferred
+                ? "cross_owner_transfer"
+                : "cross_owner_transfer_failed",
+            });
+          }
+        } else {
+          yield* Effect.annotateCurrentSpan({ "google_play.identity_result": "same_person" });
+        }
+      } else {
+        yield* Effect.annotateCurrentSpan({
+          "google_play.identity_result": "new_external_identifier",
+        });
+        yield* queries.createExternalIdentifier({
+          id: generateId("personDistinctId"),
+          identifier: input.personIdentifier,
+          isDefault: true,
+          personId: sdkPersonId,
+          projectId: input.projectId,
+          serviceId: GOOGLE_PLAY_SERVICE_ID,
+        });
+      }
+
+      // Lazily backfill the account-token binding, but ONLY when the purchase's
+      // token actually derives from THIS person's distinctId — on a cross-owner
+      // restore the token belongs to the original buyer.
+      if (accountToken) {
+        const expectedToken = yield* deriveAccountToken(input.distinctId);
+        if (accountToken === expectedToken) {
+          yield* queries.upsertExternalIdentifier({
+            id: generateId("personDistinctId"),
+            identifier: accountToken,
+            isDefault: true,
+            personId: sdkPersonId,
+            projectId: input.projectId,
+            serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+          });
+        }
+      }
+
+      return { personId: sdkPersonId };
+    }
+
+    // Existing `google-play` binding (keyed on purchaseToken / orderId, or the
+    // account token itself). Checked BEFORE the account-token binding because it
+    // reflects cross-owner transfers that the per-user token binding deliberately
+    // does NOT (mirrors the App Store ordering). Canonicalized because the
+    // identify-completion workflow never repoints external identifiers, so a
+    // post-merge event would otherwise resolve to the archived source person.
+    const externalIdentifier = yield* queries.findExternalIdentifier({
+      identifier: input.personIdentifier,
+      projectId: input.projectId,
+      serviceId: GOOGLE_PLAY_SERVICE_ID,
+    });
+    if (Option.isSome(externalIdentifier)) {
+      yield* Effect.annotateCurrentSpan({ "google_play.identity_result": "external_identifier" });
+      return {
+        personId: yield* queries.resolveCanonicalPersonId({
+          personId: externalIdentifier.value.personId,
+        }),
+      };
+    }
+
+    // Pre-registered account-token binding (written at identity create/identify) —
+    // the instant-resolution path for a user's first-ever webhook before any SDK
+    // sync has bound the series.
+    if (accountToken) {
+      const tokenBinding = yield* queries.findExternalIdentifier({
+        identifier: accountToken,
+        projectId: input.projectId,
+        serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+      });
+      if (Option.isSome(tokenBinding)) {
+        yield* Effect.annotateCurrentSpan({
+          "google_play.identity_result": "account_token_binding",
+        });
+        return {
+          personId: yield* queries.resolveCanonicalPersonId({
+            personId: tokenBinding.value.personId,
+          }),
+        };
+      }
+    }
+
+    const anonymousDistinctId = buildGooglePlayWebhookAnonymousDistinctId({
+      personIdentifier: input.personIdentifier,
+      providerEnvironment: input.providerEnvironment,
+    });
+    const personId = yield* _resolveDistinctIdToPersonId({
+      distinctId: anonymousDistinctId,
+      eventTimestamp: input.occurredAt,
+      origin: PersonOrigin.GooglePlayWebhook,
+      projectId: input.projectId,
+    });
+    yield* queries.createExternalIdentifier({
+      id: generateId("personDistinctId"),
+      identifier: input.personIdentifier,
+      isDefault: true,
+      personId,
+      projectId: input.projectId,
+      serviceId: GOOGLE_PLAY_SERVICE_ID,
+    });
+    yield* Effect.annotateCurrentSpan({ "google_play.identity_result": "webhook_stand_in" });
+    return { personId };
+  });
+
+  const _money = (purchase: GooglePlayNormalizedPurchase, occurredAt: Date) =>
+    buildGooglePlayMoney({
+      commissionRateBps: resolveGooglePlayCommissionRateBps({ productType: purchase.kind }),
+      currency: purchase.currency,
+      fxRateService,
+      isTrial: purchase.isTrial,
+      occurredAt,
+      priceMinorUnits: purchase.priceMinorUnits,
+      storefront: purchase.storefront,
+    });
+
+  /**
+   * Shared resolution for every `record*` method: identifiers, person, product
+   * mapping, money, and the `PurchaseActionContext` base. Returns `"ignored"`
+   * for Play-valid payloads we cannot map (no productId).
+   */
+  const _resolveContext = (
+    input: GooglePlayRecordInput,
+    providerEventType: GooglePlayPurchaseProcessingEventType,
+  ) =>
+    Effect.gen(function* () {
+      const purchase = input.purchase;
+      yield* Effect.annotateCurrentSpan("voidhash.payment_provider.event_type", providerEventType);
+      yield* Effect.annotateCurrentSpan(
+        "voidhash.payment_provider.configuration_id",
+        input.configuration.id,
+      );
+
+      // Play-valid payload without a usable productId (e.g. a voided
+      // notification whose fetched purchase lacks a line item). Caller
+      // short-circuits with an idempotent no-op.
+      if (!purchase.productId) {
+        return { kind: "ignored" as const };
+      }
+
+      const providerTransactionId = Option.getOrElse(
+        purchase.orderId,
+        () => purchase.purchaseToken,
+      );
+      const providerSubscriptionId =
+        purchase.kind === "subscription"
+          ? Option.some(purchase.purchaseToken)
+          : Option.none<string>();
+      const occurredAt = input.eventTime;
+
+      const personIdentifierOp = getGooglePlayPersonIdentifier(purchase);
+      if (input.source !== "sdk" && Option.isNone(personIdentifierOp)) {
+        return yield* new GooglePlayPaymentProviderTransactionMissingPersonIdentifierError({
+          purchaseToken: purchase.purchaseToken,
+        });
+      }
+
+      const resolvedPerson = yield* _resolvePersonForGooglePlayTransaction({
+        distinctId: input.source === "sdk" ? input.distinctId : undefined,
+        obfuscatedExternalAccountId: optionAttr(purchase.obfuscatedExternalAccountId),
+        occurredAt,
+        organizationId: input.project.organizationId,
+        paymentProviderConfigurationId: input.configuration.id,
+        personIdentifier: Option.getOrElse(personIdentifierOp, () => providerTransactionId),
+        projectId: input.project.id,
+        providerEnvironment: input.providerEnvironment,
+        providerSubscriptionId: optionAttr(providerSubscriptionId),
+        providerTransactionId,
+        source: input.source,
+        // Google Play has no per-tenant transfer-mode config field today; use
+        // the platform default (transfer to the new owner on restore).
+        transferMode: DEFAULT_SUBSCRIPTION_TRANSFER_MODE,
+      });
+      yield* Effect.annotateCurrentSpan("voidhash.person.id", resolvedPerson.personId);
+
+      // Try the full `productId:basePlanId` key first, then the bare productId —
+      // the merchant may have mapped either.
+      const fullKey = googlePlayProviderProductKey(purchase.productId, purchase.basePlanId);
+      const providerProduct =
+        (yield* queries.findPaymentProviderConfigurationProductByPrimaryKey({
+          paymentProviderConfigurationId: input.configuration.id,
+          providerProductKey: fullKey,
+        })) ??
+        (fullKey !== purchase.productId
+          ? yield* queries.findPaymentProviderConfigurationProductByPrimaryKey({
+              paymentProviderConfigurationId: input.configuration.id,
+              providerProductKey: purchase.productId,
+            })
+          : undefined);
+      if (!providerProduct) {
+        return yield* new GooglePlayPaymentProviderProductNotMappedError({
+          paymentProviderConfigurationId: input.configuration.id,
+          providerProductKey: fullKey,
+        });
+      }
+      yield* Effect.annotateCurrentSpan("voidhash.product.id", providerProduct.productId);
+
+      const idempotencyKey = yield* getGooglePlayPurchaseProcessingIdempotencyKey({
+        eventType: providerEventType,
+        purchase,
+      });
+      yield* Effect.annotateCurrentSpan("voidhash.purchase.idempotency_key", idempotencyKey);
+
+      const money = yield* _money(purchase, occurredAt);
+
+      const base: PurchaseActionContext = {
+        idempotencyKey,
+        occurredAt,
+        organizationId: input.project.organizationId,
+        paymentProviderConfigurationId: input.configuration.id,
+        paymentProviderConfigurationProductId: providerProduct.id,
+        personId: resolvedPerson.personId,
+        projectId: input.project.id,
+        providerEnvironment: input.providerEnvironment,
+        providerEventType,
+        providerId: "google-play" as const,
+        providerSubscriptionId,
+        providerTransactionId: Option.some(providerTransactionId),
+        providerWebhookNotificationId: Option.fromNullishOr(input.notificationUUID),
+        rawProviderPayload: Option.some(purchase),
+        receivedAt: input.receivedAt,
+        source: input.source,
+      };
+
+      return { base, kind: "resolved" as const, money, occurredAt, purchase };
+    });
+
+  /**
+   * Records a new Google Play purchase — a subscription initial buy (RTDN
+   * `SUBSCRIPTION_PURCHASED`) or a one-time product purchase
+   * (`ONE_TIME_PRODUCT_PURCHASED`), plus the SDK path. Routes to
+   * `startSubscription` or `completeOneTimePurchase`.
+   */
+  const recordPurchase = Effect.fn("recordPurchase")(function* (input: GooglePlayRecordInput) {
+    const isSubscription = input.purchase.kind === "subscription";
+    const ctx = yield* _resolveContext(input, isSubscription ? "purchase" : "one_time_purchase");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    if (isSubscription) {
+      return yield* purchaseProcessingService.startSubscription({
+        ...ctx.base,
+        expiresAt: ctx.purchase.expiryTime,
+        isTrial: ctx.purchase.isTrial,
+        money: ctx.money,
+        purchasedAt: ctx.occurredAt,
+        startsAt: Option.getOrElse(ctx.purchase.startTime, () => ctx.occurredAt),
+      });
+    }
+    return yield* purchaseProcessingService.completeOneTimePurchase({
+      ...ctx.base,
+      money: ctx.money,
+      purchaseType: "one-time",
+      purchasedAt: ctx.occurredAt,
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_RENEWED` / `SUBSCRIPTION_RECOVERED` — a successful renewal charge. */
+  const recordSubscriptionRenewed = Effect.fn("recordSubscriptionRenewed")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    // A renewal is always a real billed period. The line-item `offerId` (which
+    // drives `isTrial` in normalization) persists for the LIFE of the
+    // subscription — it is not a per-period free/paid flag — so it must NOT
+    // suppress renewal revenue. Force isTrial=false here so the base-plan price
+    // flows into the renewal event (mirrors the App Store, where renewals key
+    // isTrial off the per-transaction offerDiscountType, not a persistent id).
+    const ctx = yield* _resolveContext(
+      { ...input, purchase: { ...input.purchase, isTrial: false } },
+      "renewal",
+    );
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.renewSubscription({
+      ...ctx.base,
+      expiresAt: ctx.purchase.expiryTime,
+      isTrial: ctx.purchase.isTrial,
+      money: ctx.money,
+      renewedAt: ctx.occurredAt,
+      startsAt: Option.getOrElse(ctx.purchase.startTime, () => ctx.occurredAt),
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_CANCELED` — user/system disabled auto-renew; entitled until expiry. */
+  const recordSubscriptionCanceled = Effect.fn("recordSubscriptionCanceled")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    const ctx = yield* _resolveContext(input, "canceled");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.cancelSubscription({
+      ...ctx.base,
+      cancelAtPeriodEnd: true,
+      canceledAt: ctx.occurredAt,
+      cancellationReason: Option.none(),
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_EXPIRED` — the subscription ended without further renewal. */
+  const recordSubscriptionExpired = Effect.fn("recordSubscriptionExpired")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    const ctx = yield* _resolveContext(input, "expired");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.expireSubscription({
+      ...ctx.base,
+      expiredAt: Option.getOrElse(ctx.purchase.expiryTime, () => ctx.occurredAt),
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_IN_GRACE_PERIOD` / `SUBSCRIPTION_ON_HOLD` — billing retry; stays Active during grace. */
+  const recordBillingRetry = Effect.fn("recordBillingRetry")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    const ctx = yield* _resolveContext(input, "billing_retry");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.enterBillingRetry({
+      ...ctx.base,
+      billingRetryAt: ctx.occurredAt,
+      gracePeriodExpiresAt: ctx.purchase.expiryTime,
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_DEFERRED` — the renewal date was pushed out. */
+  const recordSubscriptionExtended = Effect.fn("recordSubscriptionExtended")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    const ctx = yield* _resolveContext(input, "extended");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    if (Option.isNone(ctx.purchase.expiryTime)) {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.extendSubscription({
+      ...ctx.base,
+      extendedTo: ctx.purchase.expiryTime.value,
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_PRICE_CHANGE_CONFIRMED` — a price change applies next renewal. */
+  const recordPriceIncrease = Effect.fn("recordPriceIncrease")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    const ctx = yield* _resolveContext(input, "price_increase");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.recordPriceIncrease({
+      ...ctx.base,
+      effectiveAt: ctx.purchase.expiryTime,
+      money: ctx.money,
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_RESTARTED` — user re-enabled auto-renew before expiry. */
+  const recordAutoRenewResumed = Effect.fn("recordAutoRenewResumed")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    const ctx = yield* _resolveContext(input, "auto_renew_resumed");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.resumeAutoRenew({
+      ...ctx.base,
+      resumedAt: ctx.occurredAt,
+    });
+  });
+
+  /** Voided purchase (refund) — a transaction was refunded. */
+  const recordRefund = Effect.fn("recordRefund")(function* (input: GooglePlayRecordInput) {
+    const ctx = yield* _resolveContext(input, "refund");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    return yield* purchaseProcessingService.refundPurchase({
+      ...ctx.base,
+      refundReason: Option.none(),
+      refundedAt: ctx.occurredAt,
+    });
+  });
+
+  /** RTDN `SUBSCRIPTION_REVOKED` / voided revoke — entitlement revoked immediately. */
+  const recordEntitlementRevoked = Effect.fn("recordEntitlementRevoked")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    const ctx = yield* _resolveContext(input, "revoke");
+    if (ctx.kind === "ignored") {
+      return makeIgnoredPurchaseProcessingResult();
+    }
+    if (ctx.purchase.kind !== "subscription") {
+      return yield* purchaseProcessingService.revokePurchase({
+        ...ctx.base,
+        revocationReason: Option.none(),
+        revokedAt: ctx.occurredAt,
+      });
+    }
+    return yield* purchaseProcessingService.revokeSubscription({
+      ...ctx.base,
+      revocationReason: Option.none(),
+      revokedAt: ctx.occurredAt,
+    });
+  });
+
+  /**
+   * Informational notifications with no purchase-state change (e.g.
+   * `SUBSCRIPTION_PAUSED` / `PAUSE_SCHEDULE_CHANGED`, test notifications). The
+   * webhook handler's notification-ledger row is the durable record.
+   */
+  const recordInformationalNotification = Effect.fn("recordInformationalNotification")(function* (
+    input: GooglePlayRecordInput,
+  ) {
+    yield* Effect.logInfo("Google Play informational notification observed (no state change)", {
+      source: input.source,
+    });
+    return makeIgnoredPurchaseProcessingResult();
+  });
+
+  return {
+    ...provider,
+    buildSdkContextFromConfiguration,
+    fetchAndNormalizeProduct,
+    fetchAndNormalizeSubscription,
+    recordAutoRenewResumed,
+    recordBillingRetry,
+    recordEntitlementRevoked,
+    recordInformationalNotification,
+    recordPriceIncrease,
+    recordPurchase,
+    recordRefund,
+    recordSubscriptionCanceled,
+    recordSubscriptionExpired,
+    recordSubscriptionExtended,
+    recordSubscriptionRenewed,
+  } as const;
+});
+
+export type { GooglePlaySdkContext };
+
+export class GooglePlayPaymentProvider extends Context.Service<GooglePlayPaymentProvider>()(
+  "core/GooglePlayPaymentProvider",
+  { make },
+) {
+  static readonly layer = Layer.effect(GooglePlayPaymentProvider)(
+    GooglePlayPaymentProvider.make,
+  ).pipe(Layer.provideMerge(GooglePlayPaymentProviderServiceQueries.layer));
+}
diff --git a/packages/core/src/services/paymentProviders/googlePlay/sdk-context.ts b/packages/core/src/services/paymentProviders/googlePlay/sdk-context.ts
new file mode 100644
index 000000000..fb2d5b5a5
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/sdk-context.ts
@@ -0,0 +1,120 @@
+/**
+ * Per-tenant Google Play Developer API helpers shared by the webhook handler,
+ * the SDK boundary, and reconciliation. Owns construction of the authenticated
+ * Android Publisher client (the SDK mints an OAuth2 access token from the
+ * service-account JSON via WebCrypto) and the catalog price resolution that
+ * turns a purchase into a billable amount.
+ *
+ * Unlike Apple, Google does not include the paid amount in the purchase
+ * response (`subscriptions.v2.get` returns no price), so revenue is resolved
+ * from the subscription catalog's regional base-plan price for the buyer's
+ * `regionCode`. Best-effort: a catalog miss yields `Option.none()` so the
+ * caller omits money rather than guessing.
+ */
+import { type MoneyType, initializeSdk } from "@voidhash/google-play-server-sdk";
+import { Context, Effect, Layer, Option } from "effect";
+
+/**
+ * Thin Effect service exposing the Google Play SDK builder. Mirrors the App
+ * Store `AppStoreServerSdk` service — resolved once, then used to build a
+ * per-tenant client from the decrypted service-account key.
+ */
+export class GooglePlayServerApi extends Context.Service<GooglePlayServerApi>()(
+  "core/GooglePlayServerApi",
+  {
+    make: Effect.gen(function* () {
+      const buildClient = yield* initializeSdk;
+      return { buildClient } as const;
+    }),
+  },
+) {
+  static readonly layer = Layer.effect(GooglePlayServerApi)(GooglePlayServerApi.make);
+}
+
+export type GooglePlaySdkContextConfig = {
+  readonly packageName: string;
+  readonly serviceAccountKey: string;
+};
+
+/**
+ * Builds the per-tenant Google Play API context. The client construction mints
+ * an OAuth2 access token (network I/O), so this is an Effect, not a pure
+ * factory.
+ */
+export const buildGooglePlaySdkContext = (
+  api: typeof GooglePlayServerApi.Service,
+  config: GooglePlaySdkContextConfig,
+) =>
+  Effect.gen(function* () {
+    const client = yield* api.buildClient({
+      packageName: config.packageName,
+      serviceAccountKey: config.serviceAccountKey,
+    });
+
+    const getSubscriptionV2 = (purchaseToken: string) => client.getSubscriptionV2(purchaseToken);
+    const getProductV2 = (purchaseToken: string) => client.getProductV2(purchaseToken);
+    const getVoidedPurchases = (options?: {
+      startTime?: string;
+      endTime?: string;
+      maxResults?: number;
+      token?: string;
+      type?: 0 | 1;
+    }) => client.getVoidedPurchases(options);
+
+    /**
+     * Resolves the developer-set list price for a subscription base plan in the
+     * buyer's region from the monetization catalog. Returns `Option.none()`
+     * when the region is unknown, the catalog can't be fetched, or no regional
+     * config matches — the caller then omits money (revenue is summed only on
+     * the USD amount, so a missing price contributes 0 rather than a guess).
+     */
+    const resolveSubscriptionRegionalPrice = (input: {
+      readonly productId: string;
+      readonly basePlanId: Option.Option<string>;
+      readonly regionCode: Option.Option<string>;
+    }): Effect.Effect<Option.Option<MoneyType>> =>
+      Effect.gen(function* () {
+        if (Option.isNone(input.regionCode)) {
+          return Option.none<MoneyType>();
+        }
+        const regionCode = input.regionCode.value;
+        const subscription = yield* client.getSubscription(input.productId).pipe(
+          Effect.map(Option.some),
+          // Best-effort: a catalog miss or fetch failure yields no price (money
+          // is omitted, never guessed — consistent with the FX-less discipline).
+          // Logged so a transient failure that drops revenue is observable
+          // rather than silent; the purchase itself is still recorded.
+          Effect.catch((error) =>
+            Effect.logWarning("Google Play catalog price fetch failed; recording without money", {
+              cause: String(error),
+              productId: input.productId,
+            }).pipe(Effect.as(Option.none())),
+          ),
+        );
+        if (Option.isNone(subscription)) {
+          return Option.none<MoneyType>();
+        }
+        const basePlans = subscription.value.basePlans ?? [];
+        const basePlan = Option.match(input.basePlanId, {
+          onNone: () => basePlans[0],
+          onSome: (id) => basePlans.find((candidate) => candidate.basePlanId === id),
+        });
+        if (!basePlan) {
+          return Option.none<MoneyType>();
+        }
+        const regionalConfig = (basePlan.regionalConfigs ?? []).find(
+          (candidate) => candidate.regionCode === regionCode,
+        );
+        return Option.fromNullishOr(regionalConfig?.price);
+      });
+
+    return {
+      getProductV2,
+      getSubscriptionV2,
+      getVoidedPurchases,
+      packageName: config.packageName,
+      resolveSubscriptionRegionalPrice,
+    } as const;
+  });
+
+export type GooglePlaySdkContext = Effect.Success<ReturnType<typeof buildGooglePlaySdkContext>>;
diff --git a/packages/core/src/services/paymentProviders/googlePlay/webhook-handler-service.ts b/packages/core/src/services/paymentProviders/googlePlay/webhook-handler-service.ts
new file mode 100644
index 000000000..3dd0e71c5
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/webhook-handler-service.ts
@@ -0,0 +1,564 @@
+/**
+ * Google Play RTDN webhook handler. The Google analogue of the App Store
+ * webhook handler: decode the Pub/Sub push envelope, re-fetch authoritative
+ * purchase state from the Play Developer API (RTDN bodies are pointers), and
+ * dispatch to the matching `record*` method. Terminal/business outcomes fold
+ * into a success value so Pub/Sub stops retrying; only transient/infra failures
+ * use the error channel (mapped to 5xx by the route).
+ */
+import { type ProviderEnvironmentValue } from "@voidhash/db";
+import { generateId } from "../../../utils/index.ts";
+import { Context, Effect, Layer, Match, Option, Predicate, Schema } from "effect";
+
+import {
+  GooglePlayPaymentProviderConfigurationNotFoundError,
+  GooglePlayPaymentProviderProductNotMappedError,
+  GooglePlayPaymentProviderProjectNotFoundError,
+  GooglePlayPaymentProviderServiceError,
+} from "./errors.ts";
+import {
+  type DecodedNotification,
+  PubSubMessage,
+  categorizeNotification,
+  decodeNotificationFromBase64,
+} from "./notifications.ts";
+import type { GooglePlayNormalizedPurchase } from "./helpers.ts";
+import { GooglePlayPaymentProvider } from "./payment-provider.ts";
+import { GooglePlayPaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import type { GooglePlaySdkContext } from "./sdk-context.ts";
+
+const truncateResultNote = (note: string): string => note.slice(0, 500);
+
+/**
+ * SDK errors that are terminal for the fetch — retrying won't help, so we ack
+ * (with a failed ledger row) instead of looping Pub/Sub. "Not found" means the
+ * token is gone/invalid; an invalid-request (400) means a permanently
+ * malformed token.
+ */
+const TERMINAL_FETCH_TAGS = new Set<string>([
+  "GooglePlayPurchaseNotFoundError",
+  "GooglePlaySubscriptionNotFoundError",
+  "GooglePlayProductNotFoundError",
+  "GooglePlayInvalidRequestError",
+]);
+
+/** Tags that collapse into a terminal record-failure ledger row (ack, don't retry). */
+const TERMINAL_RECORD_FAILURE_TAGS = new Set<string>([
+  "GooglePlayPaymentProviderTransactionMissingPersonIdentifierError",
+  "GooglePlayPurchaseProcessingIdempotencyKeyDerivationError",
+  // PurchaseProcessingService's own product-not-mapped guard (distinct from the
+  // engine's pre-check); ack rather than loop if it ever fires (e.g. the product
+  // mapping is deleted between the engine lookup and the ledger write).
+  "PurchaseProcessingProductNotMappedError",
+  "InvalidISO4217CurrencyCodeError",
+]);
+
+const errorTag = (error: unknown): string | undefined =>
+  Predicate.hasProperty(error, "_tag") && typeof error._tag === "string" ? error._tag : undefined;
+
+type AcceptRtdnNotificationResult = {
+  readonly accepted: true;
+  readonly handled: boolean;
+  readonly notificationType: string | undefined;
+  readonly notificationUUID: string | undefined;
+  readonly subtype: string | undefined;
+};
+
+/**
+ * Derives a stable wire-dedup key for a Pub/Sub message. Prefers the Pub/Sub
+ * `messageId`; falls back to a deterministic composite of the notification's
+ * identifying fields when absent. RTDN has no native notification UUID.
+ */
+const deriveNotificationUuid = (
+  messageId: string | undefined,
+  decoded: DecodedNotification,
+): string => {
+  if (messageId) return messageId;
+  // Pub/Sub always sends a messageId, so this is a defensive fallback. Fold
+  // every distinguishing field (including the voided refundType) into the
+  // composite so two distinct events for the same token never collapse to one
+  // dedup key (e.g. a refund vs a revoke voided notification).
+  const token = decoded.type === "test" ? "" : decoded.purchaseToken;
+  const subtype =
+    decoded.type === "subscription" || decoded.type === "oneTimeProduct"
+      ? String(decoded.notificationType)
+      : decoded.type === "voidedPurchase"
+        ? `void:${decoded.refundType ?? ""}`
+        : "";
+  return `gp:${decoded.packageName}:${token}:${decoded.eventTimeMillis ?? ""}:${decoded.type}:${subtype}`;
+};
+
+export class GooglePlayWebhookHandlerService extends Context.Service<GooglePlayWebhookHandlerService>()(
+  "GooglePlayWebhookHandlerService",
+  {
+    make: Effect.gen(function* () {
+      const queries = yield* GooglePlayPaymentProviderServiceQueries;
+      const googlePlayPaymentProvider = yield* GooglePlayPaymentProvider;
+
+      const acceptRtdnNotification = Effect.fn("acceptRtdnNotification")(
+        function* (input: {
+          readonly paymentProviderConfigurationId: string;
+          readonly receivedAt: Date;
+          readonly pubsubBody: unknown;
+          /** Set when re-driving a parked notification through the handler. */
+          readonly isReplay?: boolean;
+        }) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          const configuration = yield* queries.findPaymentProviderConfigurationById(
+            input.paymentProviderConfigurationId,
+          );
+          if (!configuration) {
+            return yield* new GooglePlayPaymentProviderConfigurationNotFoundError({
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            });
+          }
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.id",
+            configuration.providerId,
+          );
+
+          const project = yield* queries.findProjectById(configuration.projectId);
+          if (!project) {
+            return yield* new GooglePlayPaymentProviderProjectNotFoundError({
+              projectId: configuration.projectId,
+            });
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", project.id);
+
+          // Decode the Pub/Sub envelope + RTDN body. Parse failures are
+          // terminal — ack so Pub/Sub stops redelivering a malformed message.
+          const decodeResult = yield* Schema.decodeUnknownEffect(PubSubMessage)(
+            input.pubsubBody,
+          ).pipe(
+            Effect.flatMap((message) =>
+              decodeNotificationFromBase64(message.message.data).pipe(
+                Effect.flatMap(categorizeNotification),
+                Effect.map((decoded) => ({ decoded, messageId: message.message.messageId })),
+              ),
+            ),
+            Effect.match({
+              onFailure: (error) => ({ error, ok: false as const }),
+              onSuccess: (value) => ({ ok: true as const, value }),
+            }),
+          );
+
+          if (!decodeResult.ok) {
+            yield* Effect.logWarning("Google Play RTDN rejected as undecodable (terminal)", {
+              cause: String(decodeResult.error),
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            });
+            return {
+              accepted: true,
+              handled: false,
+              notificationType: undefined,
+              notificationUUID: undefined,
+              subtype: undefined,
+            } satisfies AcceptRtdnNotificationResult;
+          }
+
+          const decoded = decodeResult.value.decoded;
+          const notificationUUID = deriveNotificationUuid(decodeResult.value.messageId, decoded);
+          const notificationType =
+            decoded.type === "test"
+              ? "TEST"
+              : decoded.type === "voidedPurchase"
+                ? `VOIDED:${decoded.refundType ?? 1}`
+                : decoded.notificationTypeName;
+          const parsedEventTime = decoded.eventTimeMillis
+            ? new Date(Number(decoded.eventTimeMillis))
+            : undefined;
+          const eventTime =
+            parsedEventTime && !Number.isNaN(parsedEventTime.getTime())
+              ? parsedEventTime
+              : input.receivedAt;
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.event_type",
+            notificationType,
+          );
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.id", notificationUUID);
+
+          const ack = (handled: boolean): AcceptRtdnNotificationResult => ({
+            accepted: true,
+            handled,
+            notificationType,
+            notificationUUID,
+            subtype: undefined,
+          });
+
+          let terminalLedgerResult: "failed" | undefined;
+          let terminalLedgerResultNote: string | null = null;
+
+          // Test notifications carry no purchase — ack and record a ledger row.
+          if (decoded.type === "test") {
+            yield* writeLedgerRow({
+              configurationId: input.paymentProviderConfigurationId,
+              notificationType,
+              notificationUUID,
+              result: "ignored",
+              resultNote: null,
+            });
+            return ack(true);
+          }
+
+          const sdkContext =
+            yield* googlePlayPaymentProvider.buildSdkContextFromConfiguration(configuration);
+
+          // Re-fetch authoritative state for the purchase token. "Not found"
+          // fetch errors are terminal (ack so Pub/Sub stops retrying); other
+          // SDK errors (rate limit, auth, 5xx) propagate as transient → 5xx.
+          const fetched = yield* fetchPurchaseForNotification(sdkContext, decoded).pipe(
+            Effect.map(Option.some),
+            Effect.catchIf(
+              (error) => TERMINAL_FETCH_TAGS.has(errorTag(error) ?? ""),
+              (error) =>
+                Effect.logWarning("Google Play purchase fetch failed (terminal)", {
+                  cause: String(error),
+                  purchaseToken: decoded.purchaseToken,
+                }).pipe(
+                  Effect.as(
+                    Option.none<{
+                      purchase: GooglePlayNormalizedPurchase;
+                      providerEnvironment: ProviderEnvironmentValue;
+                    }>(),
+                  ),
+                ),
+            ),
+          );
+
+          if (Option.isNone(fetched)) {
+            yield* writeLedgerRow({
+              configurationId: input.paymentProviderConfigurationId,
+              notificationType,
+              notificationUUID,
+              result: "failed",
+              resultNote: "purchase not found for token",
+            });
+            return ack(false);
+          }
+
+          // A voided notification without an orderId cannot be safely anchored:
+          // the fetched purchase's latestOrderId may reference a different
+          // (later) charge than the one that was refunded. Record a failure and
+          // ack rather than refund the wrong order.
+          if (decoded.type === "voidedPurchase" && !decoded.orderId) {
+            yield* writeLedgerRow({
+              configurationId: input.paymentProviderConfigurationId,
+              notificationType,
+              notificationUUID,
+              result: "failed",
+              resultNote: "voided notification missing orderId; cannot anchor refund",
+            });
+            return ack(false);
+          }
+
+          // For a voided purchase, the refund is against the voided order, not
+          // the subscription's latest order — override the order id so the
+          // refund idempotency key anchors correctly.
+          const purchase: GooglePlayNormalizedPurchase =
+            decoded.type === "voidedPurchase" && decoded.orderId
+              ? { ...fetched.value.purchase, orderId: Option.some(decoded.orderId) }
+              : fetched.value.purchase;
+
+          const recordInput = {
+            configuration,
+            eventTime,
+            notificationUUID,
+            project,
+            providerEnvironment: fetched.value.providerEnvironment,
+            purchase,
+            receivedAt: input.receivedAt,
+            source: "webhook" as const,
+          };
+
+          const markTerminalRecordFailure = (reason: string) =>
+            Effect.gen(function* () {
+              terminalLedgerResult = "failed";
+              terminalLedgerResultNote = truncateResultNote(reason);
+              yield* Effect.logWarning("Google Play notification record failed permanently", {
+                notificationType,
+                notificationUUID,
+                resultNote: terminalLedgerResultNote,
+              });
+              return ack(false);
+            });
+
+          /**
+           * Wraps a record call to coerce success into `ack(true)` and intercept
+           * product-not-mapped (park the raw payload for replay-on-mapping) and
+           * terminal record failures (write a `failed` ledger row). Mirrors the
+           * App Store handler's `handled` wrapper.
+           */
+          const handled = <A, E, R>(
+            recordEffect: Effect.Effect<A, E | GooglePlayPaymentProviderProductNotMappedError, R>,
+          ) =>
+            recordEffect.pipe(
+              Effect.as(ack(true)),
+              Effect.catchIf(
+                (error): error is GooglePlayPaymentProviderProductNotMappedError =>
+                  errorTag(error) === "GooglePlayPaymentProviderProductNotMappedError",
+                (error) =>
+                  Effect.gen(function* () {
+                    yield* Effect.annotateCurrentSpan(
+                      "voidhash.payment_provider.provider_product_key",
+                      error.providerProductKey,
+                    );
+                    // On replay the mapping is still missing — record a failure
+                    // instead of re-parking (avoids a self-perpetuating loop).
+                    if (input.isReplay) {
+                      return yield* markTerminalRecordFailure(
+                        `product key ${error.providerProductKey} still not mapped on replay`,
+                      );
+                    }
+                    yield* Effect.logInfo(
+                      "Google Play notification parked: product not yet mapped",
+                      {
+                        notificationType,
+                        notificationUUID,
+                        providerProductKey: error.providerProductKey,
+                      },
+                    );
+                    yield* queries.insertNotificationProcessedIfAbsent({
+                      id: generateId("paymentProviderNotification"),
+                      notificationSubtype: null,
+                      notificationType,
+                      notificationUuid: notificationUUID,
+                      parkedRawPayload: input.pubsubBody,
+                      parkedUntilProviderProductKey: error.providerProductKey,
+                      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                      providerId: "google-play",
+                      result: "parked_pending_product_mapping",
+                      resultNote: `product key ${error.providerProductKey} not mapped at notification time`,
+                      source: "webhook",
+                    });
+                    return ack(true);
+                  }),
+              ),
+              Effect.catchIf(
+                (error) => TERMINAL_RECORD_FAILURE_TAGS.has(errorTag(error) ?? ""),
+                (error) => markTerminalRecordFailure(`record failed: ${String(error)}`),
+              ),
+            );
+
+          const matchResult = (yield* Match.value(decoded).pipe(
+            Match.when({ type: "subscription" }, (subscription) =>
+              Match.value(subscription.notificationType).pipe(
+                // PURCHASED → new subscription.
+                Match.when(4, () => handled(googlePlayPaymentProvider.recordPurchase(recordInput))),
+                // RENEWED / RECOVERED → successful renewal charge.
+                Match.whenOr(2, 1, () =>
+                  handled(googlePlayPaymentProvider.recordSubscriptionRenewed(recordInput)),
+                ),
+                // CANCELED → auto-renew disabled; entitled until expiry.
+                Match.when(3, () =>
+                  handled(googlePlayPaymentProvider.recordSubscriptionCanceled(recordInput)),
+                ),
+                // ON_HOLD / IN_GRACE_PERIOD → billing retry.
+                Match.whenOr(5, 6, () =>
+                  handled(googlePlayPaymentProvider.recordBillingRetry(recordInput)),
+                ),
+                // RESTARTED → user re-enabled auto-renew.
+                Match.when(7, () =>
+                  handled(googlePlayPaymentProvider.recordAutoRenewResumed(recordInput)),
+                ),
+                // PRICE_CHANGE_CONFIRMED → pending price change.
+                Match.when(8, () =>
+                  handled(googlePlayPaymentProvider.recordPriceIncrease(recordInput)),
+                ),
+                // DEFERRED → renewal date extended.
+                Match.when(9, () =>
+                  handled(googlePlayPaymentProvider.recordSubscriptionExtended(recordInput)),
+                ),
+                // REVOKED → entitlement revoked immediately.
+                Match.when(12, () =>
+                  handled(googlePlayPaymentProvider.recordEntitlementRevoked(recordInput)),
+                ),
+                // EXPIRED → subscription ended.
+                Match.when(13, () =>
+                  handled(googlePlayPaymentProvider.recordSubscriptionExpired(recordInput)),
+                ),
+                // PAUSED / PAUSE_SCHEDULE_CHANGED (10/11) → no state change.
+                Match.orElse(() =>
+                  handled(googlePlayPaymentProvider.recordInformationalNotification(recordInput)),
+                ),
+              ),
+            ),
+            Match.when({ type: "oneTimeProduct" }, (oneTime) =>
+              oneTime.notificationType === 1
+                ? handled(googlePlayPaymentProvider.recordPurchase(recordInput))
+                : handled(googlePlayPaymentProvider.recordRefund(recordInput)),
+            ),
+            Match.when({ type: "voidedPurchase" }, (voided) =>
+              voided.refundType === 2
+                ? handled(googlePlayPaymentProvider.recordEntitlementRevoked(recordInput))
+                : handled(googlePlayPaymentProvider.recordRefund(recordInput)),
+            ),
+            Match.orElse(() => Effect.succeed(ack(false))),
+          )) as AcceptRtdnNotificationResult;
+
+          // Wire-level dedup ledger: one row per notificationUUID. The
+          // park-write above (when it fires) wins the UNIQUE and this insert is
+          // a no-op against it.
+          yield* writeLedgerRow({
+            configurationId: input.paymentProviderConfigurationId,
+            notificationType,
+            notificationUUID,
+            result: terminalLedgerResult ?? (matchResult.handled ? "applied" : "ignored"),
+            resultNote: terminalLedgerResultNote,
+          });
+
+          yield* Effect.annotateCurrentSpan({
+            "google_play.webhook_result":
+              terminalLedgerResult ?? (matchResult.handled ? "applied" : "ignored"),
+          });
+          return matchResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchIf(Schema.isSchemaError, (error) =>
+              Effect.fail(new GooglePlayPaymentProviderServiceError({ cause: String(error) })),
+            ),
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new GooglePlayPaymentProviderServiceError({ cause: String(error.cause) }),
+                ),
+              PersonServiceError: (error) =>
+                Effect.fail(new GooglePlayPaymentProviderServiceError({ cause: error.cause })),
+              PurchaseProcessingServiceError: (error) =>
+                Effect.fail(new GooglePlayPaymentProviderServiceError({ cause: error.cause })),
+            }),
+          ),
+      );
+
+      /**
+       * Fetches authoritative purchase state for a decoded notification.
+       * Subscription / voided-subscription → `subscriptions.v2.get`;
+       * one-time / voided-product → `products.v2.get`.
+       */
+      function fetchPurchaseForNotification(
+        sdkContext: GooglePlaySdkContext,
+        decoded: Exclude<DecodedNotification, { type: "test" }>,
+      ) {
+        if (decoded.type === "subscription") {
+          return googlePlayPaymentProvider.fetchAndNormalizeSubscription(sdkContext, {
+            purchaseToken: decoded.purchaseToken,
+            subscriptionId: decoded.subscriptionId,
+          });
+        }
+        if (decoded.type === "oneTimeProduct") {
+          return googlePlayPaymentProvider.fetchAndNormalizeProduct(sdkContext, {
+            purchaseToken: decoded.purchaseToken,
+            sku: decoded.sku,
+          });
+        }
+        // Voided purchase: productType 1 = subscription, 2 = one-time.
+        return decoded.productType === 2
+          ? googlePlayPaymentProvider.fetchAndNormalizeProduct(sdkContext, {
+              purchaseToken: decoded.purchaseToken,
+              sku: "",
+            })
+          : googlePlayPaymentProvider.fetchAndNormalizeSubscription(sdkContext, {
+              purchaseToken: decoded.purchaseToken,
+              subscriptionId: "",
+            });
+      }
+
+      function writeLedgerRow(input: {
+        readonly configurationId: string;
+        readonly notificationType: string;
+        readonly notificationUUID: string;
+        readonly result: string;
+        readonly resultNote: string | null;
+      }) {
+        return queries.insertNotificationProcessedIfAbsent({
+          id: generateId("paymentProviderNotification"),
+          notificationSubtype: null,
+          notificationType: input.notificationType,
+          notificationUuid: input.notificationUUID,
+          parkedRawPayload: null,
+          parkedUntilProviderProductKey: null,
+          paymentProviderConfigurationId: input.configurationId,
+          providerId: "google-play",
+          result: input.result,
+          resultNote: input.resultNote,
+          source: "webhook",
+        });
+      }
+
+      /**
+       * Replays all parked notifications for a `(configurationId,
+       * providerProductKey)` mapping. Called after a new product mapping is
+       * created. Each parked Pub/Sub body is re-run through
+       * `acceptRtdnNotification` with `isReplay: true`; the per-event
+       * idempotency gate makes the replay safe against any live event for the
+       * same logical transaction.
+       */
+      const replayParkedNotificationsForProductMapping = Effect.fn(
+        "replayParkedNotificationsForProductMapping",
+      )(function* (input: {
+        readonly paymentProviderConfigurationId: string;
+        readonly providerProductKey: string;
+      }) {
+        const parked = yield* queries.findParkedNotifications({
+          paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+          providerProductKey: input.providerProductKey,
+        });
+        let appliedCount = 0;
+        let failedCount = 0;
+        for (const row of parked) {
+          const rawPayload = row.parkedRawPayload;
+          if (rawPayload === null || rawPayload === undefined) {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: "parked_raw_payload missing",
+            });
+            failedCount++;
+            continue;
+          }
+          const replayed = yield* acceptRtdnNotification({
+            isReplay: true,
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            pubsubBody: rawPayload,
+            receivedAt: new Date(),
+          }).pipe(
+            Effect.match({
+              onFailure: (error) => ({ error: String(error), ok: false as const }),
+              onSuccess: () => ({ ok: true as const }),
+            }),
+          );
+          if (replayed.ok) {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "applied",
+              resultNote: null,
+            });
+            appliedCount++;
+          } else {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: replayed.error.slice(0, 500),
+            });
+            failedCount++;
+          }
+        }
+        return { appliedCount, failedCount, totalParked: parked.length };
+      });
+
+      return {
+        acceptRtdnNotification,
+        replayParkedNotificationsForProductMapping,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(GooglePlayWebhookHandlerService)(
+    GooglePlayWebhookHandlerService.make,
+  ).pipe(Layer.provideMerge(GooglePlayPaymentProvider.layer));
+}
+
+export type { AcceptRtdnNotificationResult };
diff --git a/packages/core/src/services/paymentProviders/index.ts b/packages/core/src/services/paymentProviders/index.ts
new file mode 100644
index 000000000..f7b986202
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/index.ts
@@ -0,0 +1,5 @@
+export * from "./AppStorePaymentProviderService.ts";
+export * from "./GooglePlayPaymentProviderService.ts";
+export * from "./PaymentProvider.ts";
+export * from "./PaymentProviderConfigurationService.ts";
+export * from "./PaymentProviderProductService.ts";
diff --git a/packages/core/src/services/paymentProviders/payment-provider-adapter.ts b/packages/core/src/services/paymentProviders/payment-provider-adapter.ts
new file mode 100644
index 000000000..0dc3e0d0e
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/payment-provider-adapter.ts
@@ -0,0 +1,44 @@
+import { Effect } from "effect";
+
+import { PaymentProviderConfigurationValidationError } from "../../domain/paymentProvider/PaymentProviderConfiguration.ts";
+import { PaymentProviderProductValidationError } from "../../domain/paymentProvider/PaymentProviderProduct.ts";
+
+export type PaymentProviderKind = "stripe" | "apple-app-store" | "google-play";
+
+/**
+ * Generic, strongly-typed provider adapter contract. Each payment provider
+ * implements validation, key derivation, and the default configuration blobs
+ * for its own typed global / product configuration shapes.
+ *
+ * This is the typed counterpart to the public {@link PaymentProviderShape}
+ * (which erases the config types to `Record<string, unknown>` at the service
+ * boundary). The App Store provider engine extends this so its `record*`
+ * methods can see the concrete App Store configuration types.
+ */
+export interface PaymentProvider<
+  TKind extends PaymentProviderKind,
+  TGlobalConfiguration extends object,
+  TProductConfiguration extends object,
+> {
+  readonly id: TKind;
+  readonly title: string;
+  readonly type: "native" | "web-checkout";
+  readonly defaultGlobalConfiguration: () => Effect.Effect<TGlobalConfiguration>;
+  readonly defaultProductConfiguration: () => Effect.Effect<TProductConfiguration>;
+  readonly createGlobalKey: (configuration: TGlobalConfiguration) => Effect.Effect<string>;
+  readonly createProductKey: (configuration: TProductConfiguration) => Effect.Effect<string>;
+  readonly validateGlobalConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: TGlobalConfiguration;
+      readonly paymentProviderKey: string;
+    },
+    PaymentProviderConfigurationValidationError | unknown
+  >;
+  readonly validateProductConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: TProductConfiguration;
+      readonly productKey: string;
+    },
+    PaymentProviderProductValidationError | unknown
+  >;
+}
diff --git a/packages/core/src/services/paymentProviders/stripe/config-provider.test.ts b/packages/core/src/services/paymentProviders/stripe/config-provider.test.ts
new file mode 100644
index 000000000..02c76f842
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/config-provider.test.ts
@@ -0,0 +1,163 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { isEncrypted } from "../../../utils/crypto/SecretBox.ts";
+import { makeStripeConfigProvider } from "./config-provider.ts";
+
+const bytesToBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i] as number);
+  return btoa(binary);
+};
+const newKeyB64 = () => bytesToBase64(crypto.getRandomValues(new Uint8Array(32)));
+
+const validGlobalConfig = (overrides: Record<string, unknown> = {}) => ({
+  accountId: "acct_123456789",
+  live: {
+    secretKey: "sk_live_123456789",
+    webhookSecret: "whsec_live123456789",
+  },
+  test: {
+    secretKey: "sk_test_123456789",
+    webhookSecret: "whsec_test123456789",
+  },
+  ...overrides,
+});
+
+const run = <A, E>(
+  keyB64: string,
+  body: (provider: ReturnType<typeof makeStripeConfigProvider>) => Effect.Effect<A, E>,
+): Promise<A> =>
+  Effect.gen(function* () {
+    const secretCrypto = yield* PaymentConfigSecretCrypto;
+    return yield* body(makeStripeConfigProvider(secretCrypto));
+  }).pipe(
+    Effect.provide(PaymentConfigSecretCrypto.layer({ key: Effect.succeed(keyB64) })),
+    Effect.runPromise,
+  );
+
+describe("Stripe config-provider", () => {
+  it("validateGlobalConfiguration encrypts Stripe secrets on write", async () => {
+    const result = await run(newKeyB64(), (p) =>
+      p.validateGlobalConfiguration(validGlobalConfig()),
+    );
+    expect(result.paymentProviderKey).toBe("acct_123456789");
+    expect(isEncrypted(result.parsedConfiguration.live.secretKey)).toBe(true);
+    expect(isEncrypted(result.parsedConfiguration.live.webhookSecret)).toBe(true);
+    expect(isEncrypted(result.parsedConfiguration.test.secretKey)).toBe(true);
+    expect(isEncrypted(result.parsedConfiguration.test.webhookSecret)).toBe(true);
+    expect(result.parsedConfiguration.live.secretKey).not.toContain("sk_live");
+    expect(result.parsedConfiguration.test.secretKey).not.toContain("sk_test");
+    expect(result.parsedConfiguration.live.webhookSecret).not.toContain("whsec");
+  });
+
+  it("stores Stripe secrets as plaintext when no encryption key is configured", async () => {
+    const result = await run("", (p) => p.validateGlobalConfiguration(validGlobalConfig()));
+    expect(result.parsedConfiguration.live.secretKey).toBe("sk_live_123456789");
+    expect(result.parsedConfiguration.live.webhookSecret).toBe("whsec_live123456789");
+    expect(result.parsedConfiguration.test.secretKey).toBe("sk_test_123456789");
+    expect(result.parsedConfiguration.test.webhookSecret).toBe("whsec_test123456789");
+    expect(isEncrypted(result.parsedConfiguration.live.secretKey)).toBe(false);
+    expect(isEncrypted(result.parsedConfiguration.test.secretKey)).toBe(false);
+  });
+
+  it("encrypt-on-write is idempotent for already-encrypted Stripe secrets", async () => {
+    const key = newKeyB64();
+    const once = await run(key, (p) => p.validateGlobalConfiguration(validGlobalConfig()));
+    const twice = await run(key, (p) =>
+      p.validateGlobalConfiguration(
+        validGlobalConfig({
+          live: once.parsedConfiguration.live,
+          test: once.parsedConfiguration.test,
+        }),
+      ),
+    );
+    expect(twice.parsedConfiguration.live.secretKey).toBe(once.parsedConfiguration.live.secretKey);
+    expect(twice.parsedConfiguration.live.webhookSecret).toBe(
+      once.parsedConfiguration.live.webhookSecret,
+    );
+    expect(twice.parsedConfiguration.test.secretKey).toBe(once.parsedConfiguration.test.secretKey);
+    expect(twice.parsedConfiguration.test.webhookSecret).toBe(
+      once.parsedConfiguration.test.webhookSecret,
+    );
+  });
+
+  it("accepts restricted Stripe API keys for each environment", async () => {
+    const result = await run("", (p) =>
+      p.validateGlobalConfiguration(
+        validGlobalConfig({
+          live: {
+            secretKey: "rk_live_123456789",
+            webhookSecret: "whsec_live123456789",
+          },
+          test: {
+            secretKey: "rk_test_123456789",
+            webhookSecret: "whsec_test123456789",
+          },
+        }),
+      ),
+    );
+    expect(result.parsedConfiguration.live.secretKey).toBe("rk_live_123456789");
+    expect(result.parsedConfiguration.test.secretKey).toBe("rk_test_123456789");
+  });
+
+  it("fails with a configuration validation error on invalid Stripe credentials", async () => {
+    const error = await run("", (p) =>
+      Effect.flip(
+        p.validateGlobalConfiguration(
+          validGlobalConfig({
+            test: {
+              secretKey: "pk_test_public",
+              webhookSecret: "not-a-webhook-secret",
+            },
+          }),
+        ),
+      ),
+    );
+    expect(error._tag).toBe("PaymentProviderConfigurationValidationError");
+  });
+
+  it("fails when live credentials use test-mode API keys", async () => {
+    const error = await run("", (p) =>
+      Effect.flip(
+        p.validateGlobalConfiguration(
+          validGlobalConfig({
+            live: {
+              secretKey: "sk_test_wrong_environment",
+              webhookSecret: "whsec_live123456789",
+            },
+          }),
+        ),
+      ),
+    );
+    expect(error._tag).toBe("PaymentProviderConfigurationValidationError");
+  });
+
+  it("validateProductConfiguration derives the Stripe product key", async () => {
+    const result = await run("", (p) =>
+      p.validateProductConfiguration({
+        priceId: "price_123456789",
+        productId: "prod_123456789",
+      }),
+    );
+    expect(result.productKey).toBe("prod_123456789:price_123456789");
+    expect(result.parsedConfiguration.productId).toBe("prod_123456789");
+    expect(result.parsedConfiguration.priceId).toBe("price_123456789");
+  });
+
+  it("defaultGlobalConfiguration returns an empty, schema-shaped blob", async () => {
+    const config = await run("", (p) => p.defaultGlobalConfiguration());
+    expect(config).toEqual({
+      accountId: "",
+      live: {
+        secretKey: "",
+        webhookSecret: "",
+      },
+      test: {
+        secretKey: "",
+        webhookSecret: "",
+      },
+    });
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/stripe/config-provider.ts b/packages/core/src/services/paymentProviders/stripe/config-provider.ts
new file mode 100644
index 000000000..5dc3b0b89
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/config-provider.ts
@@ -0,0 +1,211 @@
+/**
+ * Stripe config-write adapter for payment-provider configuration. It validates
+ * the dashboard configuration shape, derives the provider key from the Stripe
+ * account id, and encrypts API/webhook secrets before persistence.
+ */
+import { Effect, Layer, Schema } from "effect";
+
+import { PaymentProviderConfigurationValidationError } from "../../../domain/paymentProvider/PaymentProviderConfiguration.ts";
+import { PaymentProviderProductValidationError } from "../../../domain/paymentProvider/PaymentProviderProduct.ts";
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { isEncrypted } from "../../../utils/crypto/SecretBox.ts";
+import { StripePaymentProvider } from "../PaymentProvider.ts";
+
+const ACCOUNT_ID_PATTERN = /^acct_[A-Za-z0-9]+$/;
+const WEBHOOK_SECRET_PATTERN = /^whsec_[A-Za-z0-9]+$/;
+const STRIPE_PRODUCT_ID_PATTERN = /^prod_[A-Za-z0-9]+$/;
+const STRIPE_PRICE_ID_PATTERN = /^price_[A-Za-z0-9]+$/;
+
+export const credentialsSchema = Schema.Struct({
+  secretKey: Schema.String.check(Schema.isMinLength(1)),
+  webhookSecret: Schema.String.check(Schema.isMinLength(1)),
+});
+
+export const globalConfigurationSchema = Schema.Struct({
+  accountId: Schema.String.check(Schema.isPattern(ACCOUNT_ID_PATTERN)),
+  live: credentialsSchema,
+  test: credentialsSchema,
+});
+
+export const productConfigurationSchema = Schema.Struct({
+  priceId: Schema.String.check(Schema.isPattern(STRIPE_PRICE_ID_PATTERN)),
+  productId: Schema.String.check(Schema.isPattern(STRIPE_PRODUCT_ID_PATTERN)),
+});
+
+export type StripeGlobalConfiguration = Schema.Schema.Type<typeof globalConfigurationSchema>;
+export type StripeCredentialsConfiguration = Schema.Schema.Type<typeof credentialsSchema>;
+export type StripeProductConfiguration = Schema.Schema.Type<typeof productConfigurationSchema>;
+
+export interface StripeConfigProvider {
+  readonly id: "stripe";
+  readonly title: string;
+  readonly type: "web-checkout";
+  readonly defaultGlobalConfiguration: () => Effect.Effect<StripeGlobalConfiguration>;
+  readonly defaultProductConfiguration: () => Effect.Effect<StripeProductConfiguration>;
+  readonly createGlobalKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly createProductKey: (configuration: Record<string, unknown>) => Effect.Effect<string>;
+  readonly validateGlobalConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: StripeGlobalConfiguration;
+      readonly paymentProviderKey: string;
+    },
+    PaymentProviderConfigurationValidationError
+  >;
+  readonly validateProductConfiguration: (configuration: Record<string, unknown>) => Effect.Effect<
+    {
+      readonly parsedConfiguration: StripeProductConfiguration;
+      readonly productKey: string;
+    },
+    PaymentProviderProductValidationError
+  >;
+}
+
+const validateSecretKey = ({
+  mode,
+  secretKey,
+}: {
+  readonly mode: "live" | "test";
+  readonly secretKey: string;
+}) => {
+  if (isEncrypted(secretKey)) {
+    return Effect.void;
+  }
+
+  return Effect.succeed(secretKey).pipe(
+    Effect.filterOrFail(
+      (value) => value.startsWith(`sk_${mode}_`) || value.startsWith(`rk_${mode}_`),
+      () =>
+        new PaymentProviderConfigurationValidationError({
+          cause:
+            mode === "live"
+              ? "Live Stripe API key must start with sk_live_ or rk_live_"
+              : "Test Stripe API key must start with sk_test_ or rk_test_",
+        }),
+    ),
+    Effect.asVoid,
+  );
+};
+
+const validateWebhookSecret = (webhookSecret: string) => {
+  if (isEncrypted(webhookSecret)) {
+    return Effect.void;
+  }
+
+  return Effect.succeed(webhookSecret).pipe(
+    Effect.filterOrFail(
+      (value) => WEBHOOK_SECRET_PATTERN.test(value),
+      () =>
+        new PaymentProviderConfigurationValidationError({
+          cause: "Stripe webhook signing secret must start with whsec_",
+        }),
+    ),
+    Effect.asVoid,
+  );
+};
+
+const validateCredentials = (credentials: StripeCredentialsConfiguration, mode: "live" | "test") =>
+  Effect.all(
+    [
+      validateSecretKey({ mode, secretKey: credentials.secretKey }),
+      validateWebhookSecret(credentials.webhookSecret),
+    ],
+    { discard: true },
+  );
+
+const encryptCredentials = (
+  credentials: StripeCredentialsConfiguration,
+  secretCrypto: typeof PaymentConfigSecretCrypto.Service,
+) =>
+  Effect.all({
+    secretKey: secretCrypto.encrypt(credentials.secretKey),
+    webhookSecret: secretCrypto.encrypt(credentials.webhookSecret),
+  }).pipe(Effect.orDie);
+
+/** Build the Stripe config-write provider over a resolved secret crypto. */
+export const makeStripeConfigProvider = (
+  secretCrypto: typeof PaymentConfigSecretCrypto.Service,
+): StripeConfigProvider => ({
+  createGlobalKey: (configuration) =>
+    Effect.succeed(`${(configuration as { accountId?: unknown }).accountId ?? ""}`),
+  createProductKey: (configuration) =>
+    Effect.succeed(
+      `${(configuration as { productId?: unknown }).productId ?? ""}:${
+        (configuration as { priceId?: unknown }).priceId ?? ""
+      }`,
+    ),
+  defaultGlobalConfiguration: () =>
+    Effect.succeed({
+      accountId: "",
+      live: {
+        secretKey: "",
+        webhookSecret: "",
+      },
+      test: {
+        secretKey: "",
+        webhookSecret: "",
+      },
+    }),
+  defaultProductConfiguration: () =>
+    Effect.succeed({
+      priceId: "",
+      productId: "",
+    }),
+  id: "stripe",
+  title: "Stripe",
+  type: "web-checkout",
+  validateGlobalConfiguration: (configuration) =>
+    Schema.decodeUnknownEffect(globalConfigurationSchema)(configuration).pipe(
+      Effect.mapError(
+        (error) =>
+          new PaymentProviderConfigurationValidationError({
+            cause: error.message,
+          }),
+      ),
+      Effect.flatMap((parsedConfiguration) =>
+        Effect.all(
+          [
+            validateCredentials(parsedConfiguration.live, "live"),
+            validateCredentials(parsedConfiguration.test, "test"),
+          ],
+          { discard: true },
+        ).pipe(
+          Effect.flatMap(() =>
+            Effect.all({
+              live: encryptCredentials(parsedConfiguration.live, secretCrypto),
+              test: encryptCredentials(parsedConfiguration.test, secretCrypto),
+            }).pipe(
+              Effect.map(({ live, test }) => ({
+                parsedConfiguration: {
+                  ...parsedConfiguration,
+                  live,
+                  test,
+                },
+                paymentProviderKey: parsedConfiguration.accountId,
+              })),
+            ),
+          ),
+        ),
+      ),
+    ),
+  validateProductConfiguration: (configuration) =>
+    Schema.decodeUnknownEffect(productConfigurationSchema)(configuration).pipe(
+      Effect.mapError(
+        (error) => new PaymentProviderProductValidationError({ message: error.message }),
+      ),
+      Effect.map((parsedConfiguration) => ({
+        parsedConfiguration,
+        productKey: `${parsedConfiguration.productId}:${parsedConfiguration.priceId}`,
+      })),
+    ),
+});
+
+export const StripePaymentProviderConfigLive: Layer.Layer<
+  StripePaymentProvider,
+  never,
+  PaymentConfigSecretCrypto
+> = Layer.effect(StripePaymentProvider)(
+  Effect.gen(function* () {
+    const secretCrypto = yield* PaymentConfigSecretCrypto;
+    return makeStripeConfigProvider(secretCrypto);
+  }),
+);
diff --git a/packages/core/src/services/paymentProviders/stripe/errors.ts b/packages/core/src/services/paymentProviders/stripe/errors.ts
new file mode 100644
index 000000000..49806d047
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/errors.ts
@@ -0,0 +1,67 @@
+import { Schema } from "effect";
+
+/**
+ * Public-boundary error for the Stripe payment-provider path. The webhook
+ * handler collapses every internal failure into this single error so the public
+ * service contract stays narrow; `kind` carries the routing hint the ingress
+ * route maps to an HTTP status:
+ *   - `signature` → 400 (bad/again-bad signature; permanent, surfaced in Stripe),
+ *   - `not_found` → 404 (unknown configuration/project; permanent),
+ *   - `transient` → 500 (DB/Stripe-API/infra; Stripe retries).
+ * Defaults to `transient` when constructed without a kind.
+ */
+export class StripePaymentProviderServiceError extends Schema.TaggedErrorClass<StripePaymentProviderServiceError>(
+  "StripePaymentProviderServiceError",
+)("StripePaymentProviderServiceError", {
+  cause: Schema.String,
+  kind: Schema.optional(Schema.Literals(["signature", "not_found", "transient"])),
+}) {}
+
+/** The referenced payment-provider configuration row is missing or soft-deleted. */
+export class StripePaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<StripePaymentProviderConfigurationNotFoundError>(
+  "StripePaymentProviderConfigurationNotFoundError",
+)("StripePaymentProviderConfigurationNotFoundError", {
+  paymentProviderConfigurationId: Schema.String,
+}) {}
+
+/** The project owning the configuration could not be found. */
+export class StripePaymentProviderProjectNotFoundError extends Schema.TaggedErrorClass<StripePaymentProviderProjectNotFoundError>(
+  "StripePaymentProviderProjectNotFoundError",
+)("StripePaymentProviderProjectNotFoundError", { projectId: Schema.String }) {}
+
+/**
+ * The Stripe price/product referenced by the event has no active
+ * `payment_provider_configuration_product` mapping yet. The webhook handler
+ * intercepts this to park the raw event for replay once the mapping appears.
+ * `providerProductKey` is the `"${product}:${price}"` key (matching
+ * `stripe/config-provider.ts` `createProductKey`).
+ */
+export class StripePaymentProviderProductNotMappedError extends Schema.TaggedErrorClass<StripePaymentProviderProductNotMappedError>(
+  "StripePaymentProviderProductNotMappedError",
+)("StripePaymentProviderProductNotMappedError", {
+  paymentProviderConfigurationId: Schema.String,
+  providerProductKey: Schema.String,
+}) {}
+
+/**
+ * The Stripe webhook signature could not be verified against either the live or
+ * the test signing secret (bad signature, wrong secret, or stale timestamp).
+ * Surfaced by the ingress route as a 400 so the misconfiguration is visible in
+ * the Stripe dashboard rather than retried indefinitely.
+ */
+export class StripeWebhookSignatureError extends Schema.TaggedErrorClass<StripeWebhookSignatureError>(
+  "StripeWebhookSignatureError",
+)("StripeWebhookSignatureError", { reason: Schema.String }) {}
+
+/**
+ * Raised when the per-event idempotency key cannot be derived from the decoded
+ * Stripe object (a required anchor id/timestamp is absent). Always indicates an
+ * upstream bug or a Stripe schema change — no silent fallback; the webhook
+ * handler collapses it into a `"failed"` notification-ledger row.
+ */
+export class StripePurchaseProcessingIdempotencyKeyDerivationError extends Schema.TaggedErrorClass<StripePurchaseProcessingIdempotencyKeyDerivationError>(
+  "StripePurchaseProcessingIdempotencyKeyDerivationError",
+)("StripePurchaseProcessingIdempotencyKeyDerivationError", {
+  eventType: Schema.String,
+  missingField: Schema.String,
+}) {}
diff --git a/packages/core/src/services/paymentProviders/stripe/events.ts b/packages/core/src/services/paymentProviders/stripe/events.ts
new file mode 100644
index 000000000..d79761510
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/events.ts
@@ -0,0 +1,258 @@
+/**
+ * Lean, permissive `effect/Schema` shapes for the Stripe webhook event envelope
+ * and the `data.object` payloads the record engine reads. Only the fields the
+ * integration consumes are declared; every non-essential field is `optional` /
+ * `NullOr` so decoding tolerates Stripe API-version drift (and excess keys are
+ * ignored on decode). The `@distilled.cloud/stripe` SDK ships outbound REST
+ * object schemas but no webhook event types, so these are hand-rolled.
+ *
+ * Fields decode to `T | undefined` (`Schema.optional`) / `T | null`
+ * (`Schema.NullOr`) — read with plain nullish checks, NOT `Option`. The engine
+ * converts to the `Option`-based domain types at its boundary.
+ */
+import { Effect, Schema } from "effect";
+
+import { StripePaymentProviderServiceError } from "./errors.ts";
+
+/** Stripe event types this integration acts on. Any other type is ignored (still wire-deduped). */
+export const StripeEventType = {
+  CheckoutSessionCompleted: "checkout.session.completed",
+  ChargeDisputeClosed: "charge.dispute.closed",
+  ChargeRefundUpdated: "charge.refund.updated",
+  ChargeRefunded: "charge.refunded",
+  CustomerSubscriptionDeleted: "customer.subscription.deleted",
+  CustomerSubscriptionUpdated: "customer.subscription.updated",
+  InvoicePaid: "invoice.paid",
+  InvoicePaymentFailed: "invoice.payment_failed",
+} as const;
+
+/**
+ * Stripe webhook event envelope. `data.object` stays `Unknown` (decoded per
+ * type); `data.previous_attributes` carries the pre-change values on `*.updated`
+ * events and is read to detect which field actually changed.
+ */
+export const StripeEventSchema = Schema.Struct({
+  id: Schema.String,
+  type: Schema.String,
+  created: Schema.optional(Schema.Number),
+  livemode: Schema.optional(Schema.Boolean),
+  data: Schema.Struct({
+    object: Schema.Unknown,
+    previous_attributes: Schema.optional(Schema.Unknown),
+  }),
+});
+export type StripeEvent = typeof StripeEventSchema.Type;
+
+/**
+ * Loose view of `data.previous_attributes` for `customer.subscription.updated`.
+ * The presence of `cancel_at_period_end` / `items` keys is the signal that the
+ * field changed; values are read defensively.
+ */
+export const StripeSubscriptionPreviousAttributesSchema = Schema.Struct({
+  cancel_at_period_end: Schema.optional(Schema.NullOr(Schema.Boolean)),
+  items: Schema.optional(Schema.Unknown),
+  plan: Schema.optional(Schema.Unknown),
+});
+export type StripeSubscriptionPreviousAttributes =
+  typeof StripeSubscriptionPreviousAttributesSchema.Type;
+
+const StripePriceRef = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  product: Schema.optional(Schema.NullOr(Schema.String)),
+  type: Schema.optional(Schema.NullOr(Schema.String)),
+});
+
+const StripeLinePeriod = Schema.Struct({
+  start: Schema.optional(Schema.NullOr(Schema.Number)),
+  end: Schema.optional(Schema.NullOr(Schema.Number)),
+});
+
+const StripeInvoiceLine = Schema.Struct({
+  price: Schema.optional(Schema.NullOr(StripePriceRef)),
+  period: Schema.optional(Schema.NullOr(StripeLinePeriod)),
+  amount: Schema.optional(Schema.Number),
+});
+
+const StripeTotalTax = Schema.Struct({
+  amount: Schema.optional(Schema.Number),
+});
+
+/**
+ * Subset of a Stripe `invoice`. `subscription` / `charge` / `payment_intent`
+ * have moved location across Stripe API versions, so they are read defensively
+ * here and reconciled by the engine's resolver helpers.
+ */
+export const StripeInvoiceSchema = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  currency: Schema.optional(Schema.String),
+  amount_paid: Schema.optional(Schema.Number),
+  amount_due: Schema.optional(Schema.Number),
+  total: Schema.optional(Schema.Number),
+  subtotal: Schema.optional(Schema.Number),
+  tax: Schema.optional(Schema.NullOr(Schema.Number)),
+  total_taxes: Schema.optional(Schema.NullOr(Schema.Array(StripeTotalTax))),
+  billing_reason: Schema.optional(Schema.NullOr(Schema.String)),
+  subscription: Schema.optional(Schema.NullOr(Schema.String)),
+  customer: Schema.optional(Schema.NullOr(Schema.String)),
+  charge: Schema.optional(Schema.NullOr(Schema.String)),
+  payment_intent: Schema.optional(Schema.NullOr(Schema.String)),
+  attempt_count: Schema.optional(Schema.Number),
+  created: Schema.optional(Schema.Number),
+  lines: Schema.optional(
+    Schema.NullOr(Schema.Struct({ data: Schema.optional(Schema.Array(StripeInvoiceLine)) })),
+  ),
+  metadata: Schema.optional(Schema.NullOr(Schema.Record(Schema.String, Schema.String))),
+  subscription_details: Schema.optional(
+    Schema.NullOr(
+      Schema.Struct({
+        metadata: Schema.optional(Schema.NullOr(Schema.Record(Schema.String, Schema.String))),
+      }),
+    ),
+  ),
+});
+export type StripeInvoice = typeof StripeInvoiceSchema.Type;
+
+const StripeSubscriptionItem = Schema.Struct({
+  price: Schema.optional(Schema.NullOr(StripePriceRef)),
+  current_period_start: Schema.optional(Schema.NullOr(Schema.Number)),
+  current_period_end: Schema.optional(Schema.NullOr(Schema.Number)),
+});
+
+/** Subset of a Stripe `subscription`. */
+export const StripeSubscriptionSchema = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  customer: Schema.optional(Schema.NullOr(Schema.String)),
+  status: Schema.optional(Schema.NullOr(Schema.String)),
+  cancel_at_period_end: Schema.optional(Schema.NullOr(Schema.Boolean)),
+  canceled_at: Schema.optional(Schema.NullOr(Schema.Number)),
+  ended_at: Schema.optional(Schema.NullOr(Schema.Number)),
+  current_period_start: Schema.optional(Schema.NullOr(Schema.Number)),
+  current_period_end: Schema.optional(Schema.NullOr(Schema.Number)),
+  start_date: Schema.optional(Schema.NullOr(Schema.Number)),
+  trial_end: Schema.optional(Schema.NullOr(Schema.Number)),
+  latest_invoice: Schema.optional(Schema.NullOr(Schema.String)),
+  items: Schema.optional(
+    Schema.NullOr(Schema.Struct({ data: Schema.optional(Schema.Array(StripeSubscriptionItem)) })),
+  ),
+  metadata: Schema.optional(Schema.NullOr(Schema.Record(Schema.String, Schema.String))),
+});
+export type StripeSubscription = typeof StripeSubscriptionSchema.Type;
+
+const StripeBillingDetails = Schema.Struct({
+  address: Schema.optional(
+    Schema.NullOr(Schema.Struct({ country: Schema.optional(Schema.NullOr(Schema.String)) })),
+  ),
+});
+
+/** Subset of a Stripe `charge`. */
+export const StripeChargeSchema = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  amount: Schema.optional(Schema.Number),
+  amount_captured: Schema.optional(Schema.Number),
+  amount_refunded: Schema.optional(Schema.Number),
+  currency: Schema.optional(Schema.String),
+  payment_intent: Schema.optional(Schema.NullOr(Schema.String)),
+  balance_transaction: Schema.optional(Schema.NullOr(Schema.String)),
+  customer: Schema.optional(Schema.NullOr(Schema.String)),
+  invoice: Schema.optional(Schema.NullOr(Schema.String)),
+  refunded: Schema.optional(Schema.Boolean),
+  created: Schema.optional(Schema.Number),
+  billing_details: Schema.optional(Schema.NullOr(StripeBillingDetails)),
+  metadata: Schema.optional(Schema.NullOr(Schema.Record(Schema.String, Schema.String))),
+});
+export type StripeCharge = typeof StripeChargeSchema.Type;
+
+/** Subset of a Stripe `checkout.session`. */
+export const StripeCheckoutSessionSchema = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  mode: Schema.optional(Schema.NullOr(Schema.String)),
+  payment_status: Schema.optional(Schema.NullOr(Schema.String)),
+  payment_intent: Schema.optional(Schema.NullOr(Schema.String)),
+  subscription: Schema.optional(Schema.NullOr(Schema.String)),
+  customer: Schema.optional(Schema.NullOr(Schema.String)),
+  client_reference_id: Schema.optional(Schema.NullOr(Schema.String)),
+  amount_total: Schema.optional(Schema.NullOr(Schema.Number)),
+  amount_subtotal: Schema.optional(Schema.NullOr(Schema.Number)),
+  currency: Schema.optional(Schema.NullOr(Schema.String)),
+  created: Schema.optional(Schema.Number),
+  total_details: Schema.optional(
+    Schema.NullOr(Schema.Struct({ amount_tax: Schema.optional(Schema.NullOr(Schema.Number)) })),
+  ),
+  metadata: Schema.optional(Schema.NullOr(Schema.Record(Schema.String, Schema.String))),
+});
+export type StripeCheckoutSession = typeof StripeCheckoutSessionSchema.Type;
+
+/** Subset of a Stripe `refund` (`charge.refund.updated`). */
+export const StripeRefundSchema = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  charge: Schema.optional(Schema.NullOr(Schema.String)),
+  payment_intent: Schema.optional(Schema.NullOr(Schema.String)),
+  status: Schema.optional(Schema.NullOr(Schema.String)),
+  amount: Schema.optional(Schema.Number),
+  currency: Schema.optional(Schema.String),
+  created: Schema.optional(Schema.Number),
+  metadata: Schema.optional(Schema.NullOr(Schema.Record(Schema.String, Schema.String))),
+});
+export type StripeRefund = typeof StripeRefundSchema.Type;
+
+/** Subset of a Stripe `dispute` (`charge.dispute.closed`). */
+export const StripeDisputeSchema = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  charge: Schema.optional(Schema.NullOr(Schema.String)),
+  payment_intent: Schema.optional(Schema.NullOr(Schema.String)),
+  status: Schema.optional(Schema.NullOr(Schema.String)),
+  amount: Schema.optional(Schema.Number),
+  currency: Schema.optional(Schema.String),
+  created: Schema.optional(Schema.Number),
+  metadata: Schema.optional(Schema.NullOr(Schema.Record(Schema.String, Schema.String))),
+});
+export type StripeDispute = typeof StripeDisputeSchema.Type;
+
+/** Line-items list returned by `GET /v1/checkout/sessions/{id}/line_items`. */
+export const StripeCheckoutLineItemsSchema = Schema.Struct({
+  data: Schema.optional(
+    Schema.Array(
+      Schema.Struct({
+        price: Schema.optional(Schema.NullOr(StripePriceRef)),
+        amount_total: Schema.optional(Schema.Number),
+        amount_subtotal: Schema.optional(Schema.Number),
+      }),
+    ),
+  ),
+});
+export type StripeCheckoutLineItems = typeof StripeCheckoutLineItemsSchema.Type;
+
+/** Balance-transaction fee shape (from `GET /v1/balance_transactions/{id}`). */
+export const StripeBalanceTransactionSchema = Schema.Struct({
+  fee: Schema.optional(Schema.Number),
+  net: Schema.optional(Schema.Number),
+  currency: Schema.optional(Schema.String),
+  amount: Schema.optional(Schema.Number),
+});
+export type StripeBalanceTransaction = typeof StripeBalanceTransactionSchema.Type;
+
+const decodeEvent = Schema.decodeUnknownEffect(StripeEventSchema);
+
+/** Decodes the verified raw JSON into the {@link StripeEvent} envelope. */
+export const decodeStripeEvent = (raw: unknown) =>
+  decodeEvent(raw).pipe(
+    Effect.mapError(
+      (error) =>
+        new StripePaymentProviderServiceError({ cause: `Stripe event decode failed: ${error}` }),
+    ),
+  );
+
+/**
+ * Decodes `event.data.object` into a typed object schema. Failures collapse to
+ * `StripePaymentProviderServiceError` so a malformed payload is a transient
+ * service error rather than a leaked schema error.
+ */
+export const decodeStripeObject =
+  <S extends Schema.Top>(schema: S) =>
+  (object: unknown) =>
+    Schema.decodeUnknownEffect(schema)(object).pipe(
+      Effect.mapError(
+        (error) =>
+          new StripePaymentProviderServiceError({ cause: `Stripe object decode failed: ${error}` }),
+      ),
+    );
diff --git a/packages/core/src/services/paymentProviders/stripe/helpers.test.ts b/packages/core/src/services/paymentProviders/stripe/helpers.test.ts
new file mode 100644
index 000000000..da8a291a9
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/helpers.test.ts
@@ -0,0 +1,228 @@
+/**
+ * Pure unit tests for the Stripe data-shape helpers. None touch the DB or the
+ * Stripe API; they operate on already-decoded event-object subsets. The only
+ * Effect-returning helper here is `getStripeIdempotencyKey`, run through
+ * `Effect.runSync` / `Effect.flip` for the success / failure branches.
+ */
+import { Effect } from "effect";
+
+import { describe, expect, it } from "vite-plus/test";
+
+import { ProviderEnvironment } from "@voidhash/db";
+
+import { StripePurchaseProcessingIdempotencyKeyDerivationError } from "./errors.ts";
+import {
+  buildStripeWebhookAnonymousDistinctId,
+  extractStripeDistinctId,
+  getStripeIdempotencyKey,
+  invoicePrimaryPriceProduct,
+  invoiceTaxMinor,
+  isPaidOneTimeCheckout,
+  resolveChargeKey,
+  stripeProviderProductKey,
+  subscriptionPrimaryPriceProduct,
+} from "./helpers.ts";
+import type { StripeCheckoutSession, StripeInvoice, StripeSubscription } from "./events.ts";
+
+describe("getStripeIdempotencyKey", () => {
+  it("derives the key from a present anchor id", () => {
+    const key = Effect.runSync(
+      getStripeIdempotencyKey({
+        anchorField: "invoice.id",
+        anchorId: "in_123",
+        eventType: "purchase",
+      }),
+    );
+    expect(key).toBe("stripe:in_123:purchase");
+  });
+
+  it("appends extra parts to the key", () => {
+    const key = Effect.runSync(
+      getStripeIdempotencyKey({
+        anchorField: "invoice.id",
+        anchorId: "in_123",
+        eventType: "billing_retry",
+        extra: [3],
+      }),
+    );
+    expect(key).toBe("stripe:in_123:billing_retry:3");
+  });
+
+  it.each([undefined, null, ""])(
+    "fails with the derivation error when the anchor id is missing (%p)",
+    (anchorId) => {
+      const error = Effect.runSync(
+        Effect.flip(
+          getStripeIdempotencyKey({
+            anchorField: "invoice.id",
+            anchorId,
+            eventType: "purchase",
+          }),
+        ),
+      );
+      expect(error instanceof StripePurchaseProcessingIdempotencyKeyDerivationError).toBe(true);
+      expect(error.eventType).toBe("purchase");
+      expect(error.missingField).toBe("invoice.id");
+    },
+  );
+});
+
+describe("stripeProviderProductKey", () => {
+  it("joins product id and price id", () => {
+    expect(stripeProviderProductKey({ priceId: "price_b", productId: "prod_a" })).toBe(
+      "prod_a:price_b",
+    );
+  });
+
+  it("returns undefined when either id is missing", () => {
+    expect(stripeProviderProductKey({ priceId: "price_b" })).toBeUndefined();
+    expect(stripeProviderProductKey({ productId: "prod_a" })).toBeUndefined();
+    expect(stripeProviderProductKey({})).toBeUndefined();
+  });
+});
+
+describe("invoicePrimaryPriceProduct", () => {
+  it("returns the first line's price + product", () => {
+    const invoice = {
+      lines: { data: [{ price: { id: "price_b", product: "prod_a" } }] },
+    } as StripeInvoice;
+    expect(invoicePrimaryPriceProduct(invoice)).toEqual({
+      priceId: "price_b",
+      productId: "prod_a",
+    });
+  });
+
+  it("returns undefined when no line carries a price", () => {
+    expect(invoicePrimaryPriceProduct({ lines: { data: [] } } as StripeInvoice)).toBeUndefined();
+    expect(invoicePrimaryPriceProduct({} as StripeInvoice)).toBeUndefined();
+  });
+});
+
+describe("subscriptionPrimaryPriceProduct", () => {
+  it("returns the first item's price + product", () => {
+    const subscription = {
+      items: { data: [{ price: { id: "price_b", product: "prod_a" } }] },
+    } as StripeSubscription;
+    expect(subscriptionPrimaryPriceProduct(subscription)).toEqual({
+      priceId: "price_b",
+      productId: "prod_a",
+    });
+  });
+
+  it("returns undefined when no item carries a price", () => {
+    expect(
+      subscriptionPrimaryPriceProduct({ items: { data: [] } } as StripeSubscription),
+    ).toBeUndefined();
+  });
+});
+
+describe("invoiceTaxMinor", () => {
+  it("reads the legacy `tax` field", () => {
+    expect(invoiceTaxMinor({ tax: 42 } as StripeInvoice)).toBe(42);
+  });
+
+  it("sums the `total_taxes` array when `tax` is absent", () => {
+    const invoice = {
+      total_taxes: [{ amount: 10 }, { amount: 32 }],
+    } as StripeInvoice;
+    expect(invoiceTaxMinor(invoice)).toBe(42);
+  });
+
+  it("returns 0 when neither is present", () => {
+    expect(invoiceTaxMinor({} as StripeInvoice)).toBe(0);
+  });
+});
+
+describe("resolveChargeKey", () => {
+  it("prefers payment_intent over charge over id", () => {
+    expect(resolveChargeKey({ charge: "ch_1", id: "x", payment_intent: "pi_1" })).toBe("pi_1");
+  });
+
+  it("falls back to charge when payment_intent is absent", () => {
+    expect(resolveChargeKey({ charge: "ch_1", id: "x" })).toBe("ch_1");
+  });
+
+  it("falls back to id when both are absent", () => {
+    expect(resolveChargeKey({ id: "x" })).toBe("x");
+  });
+});
+
+describe("extractStripeDistinctId", () => {
+  it("prefers client_reference_id", () => {
+    expect(
+      extractStripeDistinctId({
+        client_reference_id: "ref_1",
+        metadata: { voidhash_distinct_id: "meta_1" },
+      }),
+    ).toBe("ref_1");
+  });
+
+  it("falls back to metadata.voidhash_distinct_id", () => {
+    expect(extractStripeDistinctId({ metadata: { voidhash_distinct_id: "meta_1" } })).toBe(
+      "meta_1",
+    );
+  });
+
+  it("falls back to subscription_details.metadata.voidhash_distinct_id", () => {
+    expect(
+      extractStripeDistinctId({
+        subscription_details: { metadata: { voidhash_distinct_id: "sub_1" } },
+      }),
+    ).toBe("sub_1");
+  });
+
+  it("returns undefined when no distinctId was stamped", () => {
+    expect(extractStripeDistinctId({})).toBeUndefined();
+  });
+});
+
+describe("buildStripeWebhookAnonymousDistinctId", () => {
+  it("encodes provider, environment, and customer for production", () => {
+    const id = buildStripeWebhookAnonymousDistinctId({
+      customerId: "cus_1",
+      providerEnvironment: ProviderEnvironment.Production,
+    });
+    expect(id).toContain("provider:stripe:");
+    expect(id).toContain("production");
+    expect(id).toContain("cus_1");
+  });
+
+  it("uses the sandbox label for the sandbox environment", () => {
+    const id = buildStripeWebhookAnonymousDistinctId({
+      customerId: "cus_1",
+      providerEnvironment: ProviderEnvironment.Sandbox,
+    });
+    expect(id).toContain("provider:stripe:");
+    expect(id).toContain("sandbox");
+    expect(id).toContain("cus_1");
+  });
+});
+
+describe("isPaidOneTimeCheckout", () => {
+  it("is true for a paid payment-mode session", () => {
+    expect(
+      isPaidOneTimeCheckout({
+        mode: "payment",
+        payment_status: "paid",
+      } as StripeCheckoutSession),
+    ).toBe(true);
+  });
+
+  it("is false for a subscription-mode session", () => {
+    expect(
+      isPaidOneTimeCheckout({
+        mode: "subscription",
+        payment_status: "paid",
+      } as StripeCheckoutSession),
+    ).toBe(false);
+  });
+
+  it("is false when the payment is not yet paid", () => {
+    expect(
+      isPaidOneTimeCheckout({
+        mode: "payment",
+        payment_status: "unpaid",
+      } as StripeCheckoutSession),
+    ).toBe(false);
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/stripe/helpers.ts b/packages/core/src/services/paymentProviders/stripe/helpers.ts
new file mode 100644
index 000000000..c1b525759
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/helpers.ts
@@ -0,0 +1,164 @@
+/**
+ * Pure data-shape helpers for the Stripe payment-provider engine. None touch
+ * the DB or the Stripe API — they operate on already-decoded event objects.
+ * Tests live alongside as `helpers.test.ts` and run without a runtime.
+ */
+import { type ProviderEnvironmentValue, ProviderEnvironment } from "@voidhash/db";
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import { Effect } from "effect";
+
+import { StripePurchaseProcessingIdempotencyKeyDerivationError } from "./errors.ts";
+import type {
+  StripeCharge,
+  StripeCheckoutSession,
+  StripeInvoice,
+  StripeSubscription,
+} from "./events.ts";
+
+/** Metadata key (on a checkout session / subscription / invoice) carrying the voidhash distinctId. */
+export const STRIPE_DISTINCT_ID_METADATA_KEY = "voidhash_distinct_id";
+
+/** `person_external_identifier.serviceId` value used for Stripe customer bindings. */
+export const STRIPE_EXTERNAL_IDENTIFIER_SERVICE_ID = "stripe";
+
+/**
+ * Per-event idempotency-key event-types. Mirror the `providerEventType` strings
+ * the Stripe `record*` methods pass into `PurchaseProcessingService`.
+ */
+export type StripePurchaseProcessingEventType =
+  | "purchase"
+  | "renewal"
+  | "expired"
+  | "canceled"
+  | "billing_retry"
+  | "renewal_pref_change"
+  | "auto_renew_resumed"
+  | "refund"
+  | "refund_reversed";
+
+/**
+ * Derives the per-event idempotency key used by `PurchaseProcessingService` to
+ * dedupe the same logical Stripe event across redelivery and replay.
+ *
+ * Key shape: `stripe:${anchorId}:${eventType}[:${extra}…]`. The `anchorId` must
+ * be stable across redelivery (a Stripe object id — `in_…`, `sub_…`,
+ * `pi_…`/`ch_…`, `re_…`/`dp_…`), NEVER the per-delivery `event.id` (`evt_…`,
+ * that is the wire-dedup key). Fails loudly when the anchor is absent — always
+ * an upstream bug, never silently degraded.
+ */
+export const getStripeIdempotencyKey = (input: {
+  readonly eventType: StripePurchaseProcessingEventType;
+  readonly anchorId: string | null | undefined;
+  readonly anchorField: string;
+  readonly extra?: ReadonlyArray<string | number>;
+}): Effect.Effect<string, StripePurchaseProcessingIdempotencyKeyDerivationError> => {
+  if (!input.anchorId) {
+    return Effect.fail(
+      new StripePurchaseProcessingIdempotencyKeyDerivationError({
+        eventType: input.eventType,
+        missingField: input.anchorField,
+      }),
+    );
+  }
+  const suffix = (input.extra ?? []).map((part) => `:${part}`).join("");
+  return Effect.succeed(`stripe:${input.anchorId}:${input.eventType}${suffix}`);
+};
+
+/** Maps Stripe's `livemode` boolean to the provider-environment enum value. */
+export const stripeProviderEnvironment = (
+  livemode: boolean | undefined,
+): ProviderEnvironmentValue =>
+  livemode === false ? ProviderEnvironment.Sandbox : ProviderEnvironment.Production;
+
+const metadataDistinctId = (
+  metadata: Readonly<Record<string, string>> | null | undefined,
+): string | undefined => metadata?.[STRIPE_DISTINCT_ID_METADATA_KEY];
+
+/**
+ * Extracts the voidhash distinctId stamped at checkout, if any. Checks
+ * `client_reference_id` and `metadata.voidhash_distinct_id` on a checkout
+ * session, and `metadata` / `subscription_details.metadata` elsewhere. Returns
+ * `undefined` when the integration did not stamp one (then the engine falls
+ * back to the Stripe customer id).
+ */
+export const extractStripeDistinctId = (object: {
+  readonly client_reference_id?: string | null;
+  readonly metadata?: Readonly<Record<string, string>> | null;
+  readonly subscription_details?: {
+    readonly metadata?: Readonly<Record<string, string>> | null;
+  } | null;
+}): string | undefined =>
+  object.client_reference_id ??
+  metadataDistinctId(object.metadata) ??
+  metadataDistinctId(object.subscription_details?.metadata);
+
+/**
+ * Builds the deterministic distinctId for the synthetic anonymous "stand-in"
+ * person a Stripe webhook creates when an event arrives for a customer we have
+ * never seen and no distinctId was stamped. Keyed by `(environment, customer)`
+ * so each Stripe customer gets exactly one stand-in. The person row is marked
+ * `PersonOrigin.Stripe`.
+ */
+export const buildStripeWebhookAnonymousDistinctId = (input: {
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  readonly customerId: string;
+}): string => {
+  const environmentLabel =
+    input.providerEnvironment === ProviderEnvironment.Sandbox ? "sandbox" : "production";
+  return `${ANONYMOUS_USER_ID_PREFIX}provider:stripe:${environmentLabel}:${input.customerId}`;
+};
+
+/** First non-empty Stripe price id + product id from an invoice's primary line. */
+export const invoicePrimaryPriceProduct = (
+  invoice: StripeInvoice,
+): { readonly priceId?: string; readonly productId?: string } | undefined => {
+  const line = invoice.lines?.data?.find((entry) => entry.price?.id);
+  if (!line?.price) return undefined;
+  return { priceId: line.price.id, productId: line.price.product ?? undefined };
+};
+
+/** First non-empty Stripe price id + product id from a subscription's primary item. */
+export const subscriptionPrimaryPriceProduct = (
+  subscription: StripeSubscription,
+): { readonly priceId?: string; readonly productId?: string } | undefined => {
+  const item = subscription.items?.data?.find((entry) => entry.price?.id);
+  if (!item?.price) return undefined;
+  return { priceId: item.price.id, productId: item.price.product ?? undefined };
+};
+
+/** Builds the `"${product}:${price}"` provider product key matching `stripe/config-provider.ts`. */
+export const stripeProviderProductKey = (input: {
+  readonly priceId?: string;
+  readonly productId?: string;
+}): string | undefined =>
+  input.productId && input.priceId ? `${input.productId}:${input.priceId}` : undefined;
+
+/**
+ * Canonical per-charge transaction id, stable between the paying event and the
+ * later refund/reversal event so the transaction row dedups and refund money is
+ * reconstructed from it. Prefers the `payment_intent` (present on invoices,
+ * charges, and checkout sessions), falling back to the charge id.
+ */
+export const resolveChargeKey = (object: {
+  readonly payment_intent?: string | null;
+  readonly charge?: string | null;
+  readonly id?: string;
+}): string | undefined => object.payment_intent ?? object.charge ?? object.id ?? undefined;
+
+/** Total tax (minor units) from an invoice — legacy `tax` or summed `total_taxes`. */
+export const invoiceTaxMinor = (invoice: StripeInvoice): number => {
+  if (typeof invoice.tax === "number") return invoice.tax;
+  const taxes = invoice.total_taxes;
+  if (taxes && taxes.length > 0) {
+    return taxes.reduce((sum, entry) => sum + (entry.amount ?? 0), 0);
+  }
+  return 0;
+};
+
+/** Whether a checkout session represents a completed one-time (non-subscription) payment. */
+export const isPaidOneTimeCheckout = (session: StripeCheckoutSession): boolean =>
+  session.mode === "payment" && session.payment_status === "paid";
+
+/** Storefront ISO-3166 alpha-2 country from a charge's billing details, if present. */
+export const chargeStorefront = (charge: StripeCharge): string | undefined =>
+  charge.billing_details?.address?.country ?? undefined;
diff --git a/packages/core/src/services/paymentProviders/stripe/money.test.ts b/packages/core/src/services/paymentProviders/stripe/money.test.ts
new file mode 100644
index 000000000..c36d1553c
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/money.test.ts
@@ -0,0 +1,157 @@
+/**
+ * Pure unit tests for the Stripe money normalizer. `buildStripeMoney` runs
+ * offline against a fake `FxRateService` (identity USD rate, `none` for every
+ * other currency) so the five-amount breakdown and the USD mirror are exercised
+ * without touching the DB or the upstream FX provider.
+ *
+ * Stripe reports amounts directly in minor units (no `/10` Apple scaling), so
+ * the asserted values are the raw inputs: commission = `feeMinor ?? 0`,
+ * proceeds = gross − commission, proceedsAfterTax = proceeds − tax.
+ */
+import { Effect, Option } from "effect";
+
+import { describe, expect, it } from "vite-plus/test";
+
+import { FX_RATE_PRECISION, type FxRateLookup } from "../../../domain/fxRate/FxRate.ts";
+import { buildStripeMoney, type FxRateLookupShape } from "./money.ts";
+
+/**
+ * Fake `FxRateService` shape: identity rate for USD (so USD purchases resolve
+ * to a `1.0` mirror), `Option.none()` for everything else (so non-USD
+ * currencies exercise the FX-less branch). `currency` arrives already
+ * upper-cased from `buildStripeMoney`'s `parseISO4217CurrencyCode` step.
+ */
+const fxRateService: FxRateLookupShape = {
+  getUsdRate: ({ currency }: { readonly currency: string; readonly asOf: Date }) =>
+    Effect.succeed(
+      currency === "USD"
+        ? Option.some<FxRateLookup>({
+            asOfDate: new Date("2026-01-01T00:00:00.000Z"),
+            currency: "USD",
+            rate: FX_RATE_PRECISION,
+            source: "identity",
+          })
+        : Option.none<FxRateLookup>(),
+    ),
+};
+
+const occurredAt = new Date("2026-01-01T12:00:00.000Z");
+
+const run = <A, E>(effect: Effect.Effect<A, E>): A => Effect.runSync(effect);
+
+describe("buildStripeMoney", () => {
+  it("builds the full breakdown with the USD mirror for a USD amount", () => {
+    const result = run(
+      buildStripeMoney({
+        currency: "usd",
+        feeMinor: 30,
+        fxRateService,
+        grossMinor: 1000,
+        occurredAt,
+        taxMinor: 100,
+      }),
+    );
+    expect(Option.isSome(result)).toBe(true);
+    const money = Option.getOrThrow(result);
+    expect(money.currency).toBe("USD");
+    expect(money.grossAmount).toBe(1000);
+    expect(money.taxAmount).toBe(100);
+    expect(money.storeCommissionAmount).toBe(30);
+    expect(money.proceedsAmount).toBe(970);
+    expect(money.proceedsAfterTaxAmount).toBe(870);
+    expect(Option.isNone(money.storefront)).toBe(true);
+
+    expect(Option.isSome(money.usd)).toBe(true);
+    const usd = Option.getOrThrow(money.usd);
+    expect(usd.exchangeRate).toBe(FX_RATE_PRECISION);
+    // Identity rate (1.0) → USD amounts mirror the original-currency amounts.
+    expect(usd.grossAmount).toBe(1000);
+    expect(usd.taxAmount).toBe(100);
+    expect(usd.storeCommissionAmount).toBe(30);
+    expect(usd.proceedsAmount).toBe(970);
+    expect(usd.proceedsAfterTaxAmount).toBe(870);
+  });
+
+  it("treats an undefined fee as zero commission (proceeds === gross)", () => {
+    const result = run(
+      buildStripeMoney({
+        currency: "usd",
+        feeMinor: undefined,
+        fxRateService,
+        grossMinor: 1000,
+        occurredAt,
+        taxMinor: 100,
+      }),
+    );
+    const money = Option.getOrThrow(result);
+    expect(money.storeCommissionAmount).toBe(0);
+    expect(money.proceedsAmount).toBe(1000);
+    expect(money.proceedsAfterTaxAmount).toBe(900);
+
+    const usd = Option.getOrThrow(money.usd);
+    expect(usd.storeCommissionAmount).toBe(0);
+    expect(usd.proceedsAmount).toBe(1000);
+  });
+
+  it("leaves the USD mirror absent when no FX rate is available", () => {
+    const result = run(
+      buildStripeMoney({
+        currency: "eur",
+        feeMinor: 30,
+        fxRateService,
+        grossMinor: 1000,
+        occurredAt,
+        taxMinor: 100,
+      }),
+    );
+    expect(Option.isSome(result)).toBe(true);
+    const money = Option.getOrThrow(result);
+    // Original-currency amounts are still present...
+    expect(money.currency).toBe("EUR");
+    expect(money.grossAmount).toBe(1000);
+    expect(money.taxAmount).toBe(100);
+    expect(money.storeCommissionAmount).toBe(30);
+    expect(money.proceedsAmount).toBe(970);
+    expect(money.proceedsAfterTaxAmount).toBe(870);
+    // ...but the USD mirror is dropped rather than zeroed.
+    expect(Option.isNone(money.usd)).toBe(true);
+  });
+
+  it("returns Option.none() for an invalid currency", () => {
+    const result = run(
+      buildStripeMoney({
+        currency: "zz",
+        feeMinor: 30,
+        fxRateService,
+        grossMinor: 1000,
+        occurredAt,
+        taxMinor: 100,
+      }),
+    );
+    expect(Option.isNone(result)).toBe(true);
+  });
+
+  it("builds an all-zero breakdown for a zero-gross (free trial) amount", () => {
+    const result = run(
+      buildStripeMoney({
+        currency: "usd",
+        feeMinor: 0,
+        fxRateService,
+        grossMinor: 0,
+        occurredAt,
+        taxMinor: 0,
+      }),
+    );
+    expect(Option.isSome(result)).toBe(true);
+    const money = Option.getOrThrow(result);
+    expect(money.grossAmount).toBe(0);
+    expect(money.taxAmount).toBe(0);
+    expect(money.storeCommissionAmount).toBe(0);
+    expect(money.proceedsAmount).toBe(0);
+    expect(money.proceedsAfterTaxAmount).toBe(0);
+
+    const usd = Option.getOrThrow(money.usd);
+    expect(usd.grossAmount).toBe(0);
+    expect(usd.proceedsAfterTaxAmount).toBe(0);
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/stripe/money.ts b/packages/core/src/services/paymentProviders/stripe/money.ts
new file mode 100644
index 000000000..d5eadb720
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/money.ts
@@ -0,0 +1,129 @@
+/**
+ * Provider-specific money normalization for Stripe.
+ *
+ * Unlike Apple (single tax-inclusive `price` in milliunits, commission derived
+ * from program rules), Stripe reports amounts directly in the currency's minor
+ * unit and exposes the processing fee on the charge's `balance_transaction`.
+ * So the five-amount breakdown is assembled straight from the event + the
+ * fetched fee:
+ *
+ *   gross   = amount paid                      (minor units, as Stripe reports)
+ *   tax     = invoice / checkout tax lines     (0 when unknown)
+ *   comm.   = Stripe processing fee            (balance_transaction.fee; 0 when unfetched)
+ *   proc.   = gross - comm.
+ *   procT.  = gross - comm. - tax
+ *
+ * FX→USD conversion reuses the same `FxRateService` and 6-dp encoded rate as
+ * the App Store path. Returns `Option.none()` when gross currency is missing /
+ * invalid so downstream layers leave money fields blank rather than emit zeros.
+ */
+import { parseISO4217CurrencyCode } from "@voidhash/lib/constants";
+import type { DbError } from "@voidhash/db";
+import { Effect, Option } from "effect";
+
+import {
+  PurchaseProcessingMoney,
+  PurchaseProcessingMoneyUsd,
+} from "../../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import { CurrencyCode, ExchangeRate, MinorAmount } from "../../../domain/shared/Money.ts";
+import { FX_RATE_PRECISION, type FxRateLookup } from "../../../domain/fxRate/FxRate.ts";
+import type { FxRateServiceError } from "../../fxRates/FxRateService.ts";
+
+const convertToUsd = (amount: number, rate: number): number =>
+  Math.round((amount * rate) / FX_RATE_PRECISION);
+
+const buildUsdBreakdown = (
+  amounts: {
+    readonly grossAmount: number;
+    readonly storeCommissionAmount: number;
+    readonly taxAmount: number;
+    readonly proceedsAmount: number;
+    readonly proceedsAfterTaxAmount: number;
+  },
+  exchangeRate: number,
+): PurchaseProcessingMoneyUsd =>
+  new PurchaseProcessingMoneyUsd({
+    exchangeRate: ExchangeRate.make(exchangeRate),
+    grossAmount: MinorAmount.make(convertToUsd(amounts.grossAmount, exchangeRate)),
+    proceedsAfterTaxAmount: MinorAmount.make(
+      convertToUsd(amounts.proceedsAfterTaxAmount, exchangeRate),
+    ),
+    proceedsAmount: MinorAmount.make(convertToUsd(amounts.proceedsAmount, exchangeRate)),
+    storeCommissionAmount: MinorAmount.make(
+      convertToUsd(amounts.storeCommissionAmount, exchangeRate),
+    ),
+    taxAmount: MinorAmount.make(convertToUsd(amounts.taxAmount, exchangeRate)),
+  });
+
+/**
+ * Structural subset of `FxRateService` used here — the resolved instance is
+ * captured at engine construction and passed in, so the FX requirement never
+ * propagates into each `record*` method's `R` channel. Mirrors the App Store
+ * `FxRateLookupShape`.
+ */
+export interface FxRateLookupShape {
+  readonly getUsdRate: (input: {
+    readonly currency: string;
+    readonly asOf: Date;
+  }) => Effect.Effect<Option.Option<FxRateLookup>, FxRateServiceError | DbError>;
+}
+
+const nonNegative = (n: number): number => (n > 0 ? Math.round(n) : 0);
+
+/**
+ * Builds the platform-neutral money record for a Stripe money-bearing event.
+ *
+ * `feeMinor` is the fetched Stripe processing fee (store commission); pass
+ * `undefined` when it could not be fetched — proceeds then equal gross minus
+ * tax (fee unknown, never guessed). `storefront` is intentionally not populated
+ * from Stripe (it reports ISO-3166 alpha-2, which would clash with Apple's
+ * alpha-3 in the same analytics column) and is left absent for now.
+ */
+export const buildStripeMoney = (input: {
+  readonly grossMinor: number;
+  readonly currency: string;
+  readonly taxMinor: number;
+  readonly feeMinor: number | undefined;
+  readonly occurredAt: Date;
+  readonly fxRateService: FxRateLookupShape;
+}) =>
+  Effect.gen(function* () {
+    const currencyOp = yield* parseISO4217CurrencyCode(input.currency.toUpperCase()).pipe(
+      Effect.map(Option.some),
+      Effect.catchTag("InvalidISO4217CurrencyCodeError", () =>
+        Effect.succeed(Option.none<string>()),
+      ),
+    );
+    if (Option.isNone(currencyOp)) {
+      return Option.none<PurchaseProcessingMoney>();
+    }
+    const currency = currencyOp.value;
+
+    const grossAmount = nonNegative(input.grossMinor);
+    const taxAmount = nonNegative(input.taxMinor);
+    const storeCommissionAmount =
+      input.feeMinor === undefined ? 0 : Math.min(nonNegative(input.feeMinor), grossAmount);
+    const proceedsAmount = nonNegative(grossAmount - storeCommissionAmount);
+    const proceedsAfterTaxAmount = nonNegative(proceedsAmount - taxAmount);
+
+    const fxLookup = yield* input.fxRateService.getUsdRate({ asOf: input.occurredAt, currency });
+    const usd = Option.map(fxLookup, (lookup) =>
+      buildUsdBreakdown(
+        { grossAmount, proceedsAfterTaxAmount, proceedsAmount, storeCommissionAmount, taxAmount },
+        lookup.rate,
+      ),
+    );
+
+    return Option.some(
+      new PurchaseProcessingMoney({
+        currency: CurrencyCode.make(currency),
+        grossAmount: MinorAmount.make(grossAmount),
+        proceedsAfterTaxAmount: MinorAmount.make(proceedsAfterTaxAmount),
+        proceedsAmount: MinorAmount.make(proceedsAmount),
+        storeCommissionAmount: MinorAmount.make(storeCommissionAmount),
+        storefront: Option.none(),
+        taxAmount: MinorAmount.make(taxAmount),
+        usd,
+      }),
+    );
+  });
diff --git a/packages/core/src/services/paymentProviders/stripe/payment-provider-service-queries.ts b/packages/core/src/services/paymentProviders/stripe/payment-provider-service-queries.ts
new file mode 100644
index 000000000..3e6f38df3
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/payment-provider-service-queries.ts
@@ -0,0 +1,327 @@
+/**
+ * DB-bound primitives for the Stripe payment-provider engine and webhook
+ * handler. Mirrors `appStore/payment-provider-service-queries.ts`: configuration
+ * reads, Stripe-customer identity lookups, and the provider-agnostic
+ * wire-dedup / parking ledger. `Db` is yielded once and captured by closure.
+ */
+import {
+  type InsertPaymentProviderNotificationProcessed,
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type PaymentProviderNotificationProcessed as DbPaymentProviderNotificationProcessed,
+  eq,
+  paymentProviderNotificationProcessed,
+  personExternalIdentifiers,
+  sql,
+  type Project as DbProject,
+  type DbError,
+  Db,
+} from "@voidhash/db";
+import { Context, Effect, Layer, Option } from "effect";
+
+/** Bound on `mergedIntoPersonId` chain-following — cycle/runaway backstop. */
+const MAX_MERGE_CHAIN_HOPS = 10;
+
+const make = Effect.gen(function* () {
+  const db = yield* Db;
+
+  const findPaymentProviderConfigurationById = Effect.fn("findPaymentProviderConfigurationById")(
+    (id: string): Effect.Effect<DbPaymentProviderConfiguration | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderConfigurations.findFirst({
+          where: {
+            id,
+            deletedAt: { isNull: true },
+          },
+        });
+      }),
+  );
+
+  const findProjectById = Effect.fn("findProjectById")(
+    (id: string): Effect.Effect<DbProject | undefined, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.projects.findFirst({ where: { id } });
+      }),
+  );
+
+  /**
+   * Resolves the active product mapping for a `(configuration, providerProductKey)`
+   * pair, joining the internal product so the engine can distinguish a one-time
+   * vs consumable purchase from `product.type` (Stripe has no consumable
+   * concept). Returns the mapping id + the internal product type.
+   */
+  const findActiveProviderProductByPrimaryKey = Effect.fn("findActiveProviderProductByPrimaryKey")(
+    (input: {
+      readonly paymentProviderConfigurationId: string;
+      readonly providerProductKey: string;
+    }): Effect.Effect<
+      Option.Option<{ readonly id: string; readonly productType: number | undefined }>,
+      DbError,
+      Db
+    > =>
+      Effect.gen(function* () {
+        const row = yield* db.query.paymentProviderConfigurationProducts.findFirst({
+          columns: { id: true },
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            providerProductKey: input.providerProductKey,
+            isActive: true,
+          },
+          with: { product: { columns: { type: true } } },
+        });
+        return row
+          ? Option.some({ id: row.id, productType: row.product?.type })
+          : Option.none<{ readonly id: string; readonly productType: number | undefined }>();
+      }),
+  );
+
+  const findPersonIdentityByDistinctId = Effect.fn("findPersonIdentityByDistinctId")(
+    (input: {
+      readonly projectId: string;
+      readonly distinctId: string;
+    }): Effect.Effect<Option.Option<{ readonly personId: string }>, DbError, Db> =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personIdentities.findFirst({
+          columns: { personId: true },
+          where: {
+            projectId: input.projectId,
+            distinctId: input.distinctId,
+          },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  const findExternalIdentifier = Effect.fn("findExternalIdentifier")(
+    (input: {
+      readonly projectId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+    }): Effect.Effect<
+      Option.Option<{ readonly id: string; readonly personId: string }>,
+      DbError,
+      Db
+    > =>
+      Effect.gen(function* () {
+        const row = yield* db.query.personExternalIdentifiers.findFirst({
+          columns: { id: true, personId: true },
+          where: {
+            projectId: input.projectId,
+            serviceId: input.serviceId,
+            identifier: input.identifier,
+          },
+        });
+        return Option.fromNullishOr(row);
+      }),
+  );
+
+  const createExternalIdentifier = Effect.fn("createExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly projectId: string;
+      readonly personId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+      readonly isDefault: boolean;
+    }): Effect.Effect<{ readonly id: string }, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db.insert(personExternalIdentifiers).values(input);
+        return { id: input.id };
+      }),
+  );
+
+  /**
+   * Insert-or-repoint of a `person_external_identifier` row, keyed by the
+   * UNIQUE `(projectId, serviceId, identifier)` index. Used to bind a Stripe
+   * customer id to the resolved person without failing on the constraint.
+   */
+  const upsertExternalIdentifier = Effect.fn("upsertExternalIdentifier")(
+    (input: {
+      readonly id: string;
+      readonly projectId: string;
+      readonly personId: string;
+      readonly serviceId: string;
+      readonly identifier: string;
+      readonly isDefault: boolean;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .insert(personExternalIdentifiers)
+          .values(input)
+          .onConflictDoUpdate({
+            target: [
+              personExternalIdentifiers.projectId,
+              personExternalIdentifiers.serviceId,
+              personExternalIdentifiers.identifier,
+            ],
+            set: { personId: input.personId },
+          });
+      }),
+  );
+
+  /**
+   * Follows `persons.mergedIntoPersonId` to the surviving canonical person.
+   * External-identifier rows are not repointed on identity merge, so a Stripe
+   * customer binding must canonicalize before returning.
+   */
+  const resolveCanonicalPersonId = Effect.fn("resolveCanonicalPersonId")(
+    (input: { readonly personId: string }): Effect.Effect<string, DbError, Db> =>
+      Effect.gen(function* () {
+        let currentId = input.personId;
+        for (let hop = 0; hop < MAX_MERGE_CHAIN_HOPS; hop++) {
+          const row = yield* db.query.persons.findFirst({
+            columns: { mergedIntoPersonId: true },
+            where: { id: currentId },
+          });
+          const mergedInto = row?.mergedIntoPersonId;
+          if (!mergedInto || mergedInto === currentId) {
+            return currentId;
+          }
+          currentId = mergedInto;
+        }
+        return currentId;
+      }),
+  );
+
+  /**
+   * Wire-level dedup insert keyed UNIQUE on `(configurationId, notificationUuid)`
+   * — Stripe `event.id`. `inserted` is decided by reading the surviving row
+   * back and comparing ids, NOT a driver-reported affected count: the UNIQUE
+   * constraint serializes concurrent writers, so the row keeps the *first*
+   * writer's id.
+   */
+  const insertNotificationProcessedIfAbsent = Effect.fn("insertNotificationProcessedIfAbsent")(
+    (
+      input: InsertPaymentProviderNotificationProcessed,
+    ): Effect.Effect<{ readonly inserted: boolean }, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .insert(paymentProviderNotificationProcessed)
+          .values(input)
+          .onConflictDoNothing({
+            target: [
+              paymentProviderNotificationProcessed.paymentProviderConfigurationId,
+              paymentProviderNotificationProcessed.notificationUuid,
+            ],
+          });
+        const surviving = yield* db.query.paymentProviderNotificationProcessed.findFirst({
+          columns: { id: true },
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            notificationUuid: input.notificationUuid,
+          },
+        });
+        return { inserted: surviving?.id === input.id };
+      }),
+  );
+
+  /** Lists notifications parked waiting for a `(configurationId, providerProductKey)` mapping. */
+  const findParkedNotifications = Effect.fn("findParkedNotifications")(
+    (input: {
+      readonly paymentProviderConfigurationId: string;
+      readonly providerProductKey: string;
+    }): Effect.Effect<ReadonlyArray<DbPaymentProviderNotificationProcessed>, DbError, Db> =>
+      Effect.gen(function* () {
+        return yield* db.query.paymentProviderNotificationProcessed.findMany({
+          where: {
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            result: "parked_pending_product_mapping",
+            parkedUntilProviderProductKey: input.providerProductKey,
+          },
+        });
+      }),
+  );
+
+  /** Marks a parked notification row resolved, clearing its parked-state columns. */
+  const markParkedNotificationResolved = Effect.fn("markParkedNotificationResolved")(
+    (input: {
+      readonly id: string;
+      readonly result: string;
+      readonly resultNote: string | null;
+    }): Effect.Effect<void, DbError, Db> =>
+      Effect.gen(function* () {
+        yield* db
+          .update(paymentProviderNotificationProcessed)
+          .set({
+            parkedRawPayload: null,
+            parkedUntilOriginalTransactionId: null,
+            parkedUntilProviderProductKey: null,
+            processedAt: sql`NOW()`,
+            result: input.result,
+            resultNote: input.resultNote,
+          })
+          .where(eq(paymentProviderNotificationProcessed.id, input.id));
+      }),
+  );
+
+  /**
+   * Resolves the product mapping + owning person for a refund/reversal/dispute
+   * event by the existing transaction the original purchase wrote. Refund
+   * webhooks carry only a charge (no price/product), so the mapping is
+   * recovered from that transaction.
+   *
+   * The lookup matches on ANY of the candidate store-transaction ids the
+   * refund-side object exposes (`payment_intent`, `charge` id, `invoice` id),
+   * because Stripe surfaces the paid-charge identifier in different fields
+   * across API versions — the original purchase may have keyed the transaction
+   * on the payment intent, the charge, or (fallback) the invoice id, and the
+   * later refund object may expose a different one of those. Returns the matched
+   * `storeTransactionId` so the caller marks the right transaction refunded.
+   */
+  const findTransactionByAnyStoreTransactionId = Effect.fn(
+    "findTransactionByAnyStoreTransactionId",
+  )((input: {
+    readonly storeTransactionIds: ReadonlyArray<string>;
+  }): Effect.Effect<
+    Option.Option<{
+      readonly id: string;
+      readonly paymentProviderConfigurationProductId: string;
+      readonly personId: string;
+      readonly storeTransactionId: string | null;
+    }>,
+    DbError,
+    Db
+  > => {
+    const keys = [...new Set(input.storeTransactionIds.filter((key) => key.length > 0))];
+    if (keys.length === 0) {
+      return Effect.succeedNone;
+    }
+    return Effect.gen(function* () {
+      const row = yield* db.query.transactions.findFirst({
+        columns: {
+          id: true,
+          paymentProviderConfigurationProductId: true,
+          personId: true,
+          storeTransactionId: true,
+        },
+        where: { storeTransactionId: { in: keys } },
+      });
+      return Option.fromNullishOr(row);
+    });
+  });
+
+  return {
+    createExternalIdentifier,
+    findActiveProviderProductByPrimaryKey,
+    findExternalIdentifier,
+    findParkedNotifications,
+    findPaymentProviderConfigurationById,
+    findPersonIdentityByDistinctId,
+    findProjectById,
+    findTransactionByAnyStoreTransactionId,
+    insertNotificationProcessedIfAbsent,
+    markParkedNotificationResolved,
+    resolveCanonicalPersonId,
+    upsertExternalIdentifier,
+  } as const;
+});
+
+export type StripePaymentProviderServiceQueriesShape = Effect.Success<typeof make>;
+
+export class StripePaymentProviderServiceQueries extends Context.Service<StripePaymentProviderServiceQueries>()(
+  "core/StripePaymentProviderServiceQueries",
+  { make },
+) {
+  static readonly layer: Layer.Layer<StripePaymentProviderServiceQueries, never, Db> = Layer.effect(
+    StripePaymentProviderServiceQueries,
+  )(StripePaymentProviderServiceQueries.make);
+}
diff --git a/packages/core/src/services/paymentProviders/stripe/payment-provider-service.ts b/packages/core/src/services/paymentProviders/stripe/payment-provider-service.ts
new file mode 100644
index 000000000..a3be9047a
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/payment-provider-service.ts
@@ -0,0 +1,33 @@
+/**
+ * Live implementation of the public {@link StripePaymentProviderService}
+ * boundary for the Cloudflare backend. Delegates webhook ingress to
+ * {@link StripeWebhookHandlerService}; its residual requirements (`Db`,
+ * `FxRateService`, `PersonIdentityService`, `PurchaseProcessingService`,
+ * `PaymentConfigSecretCrypto`, `HttpClient`) are satisfied by the backend root.
+ *
+ * Mirrors `appStore/payment-provider-service.ts` but with no SDK-confirmation
+ * path — Stripe webhooks are authoritative and there is no client-SDK purchase
+ * confirmation step. Uses `Layer.provide` (not `provideMerge`) so only the
+ * public tag is exposed.
+ */
+import { Effect, Layer } from "effect";
+
+import {
+  StripePaymentProviderService,
+  type StripePaymentProviderServiceShape,
+} from "../StripePaymentProviderService.ts";
+import { StripeWebhookHandlerService } from "./stripe-webhook-handler-service.ts";
+
+export const StripePaymentProviderServiceLive = Layer.effect(StripePaymentProviderService)(
+  Effect.gen(function* () {
+    const stripeWebhookHandlerService = yield* StripeWebhookHandlerService;
+    // Boundary cast (mirrors App Store / Google Play): the webhook handler
+    // resolves its deps at layer-build time, but the inferred `R` still carries
+    // a residual `Db` that the public shape models as `never`. `Db` is ambient
+    // at call time — the service runs inside the deployed Worker with a
+    // per-request DB provided at the backend root.
+    return {
+      acceptWebhookEvent: stripeWebhookHandlerService.acceptWebhookEvent,
+    } as unknown as StripePaymentProviderServiceShape;
+  }),
+).pipe(Layer.provide(StripeWebhookHandlerService.layer));
diff --git a/packages/core/src/services/paymentProviders/stripe/payment-provider.ts b/packages/core/src/services/paymentProviders/stripe/payment-provider.ts
new file mode 100644
index 000000000..67362b4f4
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/payment-provider.ts
@@ -0,0 +1,897 @@
+/**
+ * Stripe record engine — normalizes verified Stripe webhook events into calls
+ * on the provider-neutral `PurchaseProcessingService`. The downstream purchase/
+ * subscription/transaction writes, idempotency ledger, and revenue-analytics
+ * staging are entirely reused; this engine only builds the normalized
+ * `PurchaseActionContext` + `PurchaseProcessingMoney` per event and routes to
+ * the matching action. Mirrors `appStore/payment-provider.ts`.
+ *
+ * Two `StripePaymentProvider` tags exist (as for App Store): the config-write
+ * adapter (`PaymentProvider.ts`, used by the admin config flow) and THIS record
+ * engine (`core/StripePaymentProvider`).
+ *
+ * Known v1 scope boundaries (intentional; not defects):
+ *  - Only FULL refunds (`charge.refunded` with `refunded === true`) are
+ *    reflected; partial/cumulative refunds are deferred.
+ *  - Disputes: only `charge.dispute.closed` with `status === "lost"` reduces
+ *    revenue (treated as a chargeback). `charge.dispute.created` (funds held at
+ *    open) is NOT recorded to avoid double-counting against the close.
+ *  - `isTrial` is inferred from a zero amount (`gross === 0`); a 100%-off paid
+ *    invoice is flagged as a trial. This never affects the net-revenue SUM
+ *    (gross is 0 either way) — only trial-conversion analytics.
+ *  - Subscription lifecycle events (cancel / expire / billing-retry / resume /
+ *    product-change) emit analytics only when a local subscription row already
+ *    exists; one created before our first recorded invoice self-heals on the
+ *    next renewal (which creates the row).
+ *  - Plan migrations (`customer.subscription.updated` item change) are recorded
+ *    best-effort as a renewal-preference change; a cross-product migration may
+ *    surface as a fresh subscription row on the next renewal.
+ *  - A refund/dispute whose original transaction is not found (untracked charge,
+ *    or delivered before the purchase webhook) is acknowledged + logged, not
+ *    retried; Stripe ordinarily delivers the charge/invoice before its refund.
+ */
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type PersonOriginValue,
+  type Project as DbProject,
+  type ProviderEnvironmentValue,
+  PersonOrigin,
+} from "@voidhash/db";
+import { ProductType } from "@voidhash/lib/constants";
+import { Context, Effect, Layer, Option, Schema } from "effect";
+import { HttpClient } from "effect/unstable/http/HttpClient";
+
+import { PurchaseProcessingResult } from "../../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import {
+  type PurchaseActionContext,
+  PurchaseProcessingService,
+} from "../../purchaseProcessing/PurchaseProcessingService.ts";
+import { FxRateService } from "../../fxRates/FxRateService.ts";
+import { PersonIdentityService } from "../../personIdentity/PersonIdentityService.ts";
+import { PaymentConfigSecretCrypto } from "../../../utils/crypto/PaymentConfigSecretCrypto.ts";
+import { generateId } from "../../../utils/index.ts";
+import { globalConfigurationSchema } from "./config-provider.ts";
+import {
+  StripePaymentProviderProductNotMappedError,
+  StripePaymentProviderServiceError,
+} from "./errors.ts";
+import {
+  decodeStripeObject,
+  StripeChargeSchema,
+  StripeCheckoutSessionSchema,
+  type StripeEvent,
+  StripeInvoiceSchema,
+  StripeRefundSchema,
+  StripeDisputeSchema,
+  type StripeSubscriptionPreviousAttributes,
+  StripeSubscriptionPreviousAttributesSchema,
+  StripeSubscriptionSchema,
+} from "./events.ts";
+import {
+  type StripePurchaseProcessingEventType,
+  buildStripeWebhookAnonymousDistinctId,
+  chargeStorefront,
+  extractStripeDistinctId,
+  getStripeIdempotencyKey,
+  invoicePrimaryPriceProduct,
+  invoiceTaxMinor,
+  isPaidOneTimeCheckout,
+  resolveChargeKey,
+  STRIPE_EXTERNAL_IDENTIFIER_SERVICE_ID,
+  stripeProviderProductKey,
+  subscriptionPrimaryPriceProduct,
+} from "./helpers.ts";
+import { buildStripeMoney } from "./money.ts";
+import { StripePaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import { buildStripeContext, type StripeContext, type StripeMode } from "./sdk-context.ts";
+
+/** Re-export so importers of the Stripe config schema can reach it from the engine module. */
+export { globalConfigurationSchema };
+
+/**
+ * Shared base accepted by every `record*` method. The webhook handler resolves
+ * `configuration` / `project` and builds `stripeContext` (verifier + REST
+ * helpers) once, then passes them in — re-decrypting per record would be
+ * wasteful.
+ */
+export interface StripeRecordInput {
+  readonly configuration: DbPaymentProviderConfiguration;
+  readonly project: DbProject;
+  readonly event: StripeEvent;
+  readonly mode: StripeMode;
+  readonly stripeContext: StripeContext;
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  readonly receivedAt: Date;
+  readonly source: "webhook" | "reconciliation";
+}
+
+const fromUnixSeconds = (seconds: number | null | undefined, fallback: Date): Date =>
+  typeof seconds === "number" ? new Date(seconds * 1000) : fallback;
+
+const makeIgnored = (): PurchaseProcessingResult =>
+  new PurchaseProcessingResult({
+    analyticsEventIds: [],
+    changedGrantIds: [],
+    idempotent: true,
+    personId: "",
+    purchaseId: Option.none(),
+    subscriptionId: Option.none(),
+    transactionId: Option.none(),
+  });
+
+const make = Effect.gen(function* () {
+  const queries = yield* StripePaymentProviderServiceQueries;
+  const personIdentityService = yield* PersonIdentityService;
+  const purchaseProcessingService = yield* PurchaseProcessingService;
+  // Captured at construction so the FX requirement never propagates into each
+  // `record*` method's `R` channel (mirrors the App Store engine).
+  const fxRateService = yield* FxRateService;
+  const secretCrypto = yield* PaymentConfigSecretCrypto;
+  // Shared HTTP pool for per-tenant Stripe REST calls (fee / line-item lookups).
+  const httpClient = yield* HttpClient;
+
+  /**
+   * Decrypts the tenant's Stripe secrets and builds the per-tenant context
+   * (signature verifier + REST helpers). Rows written before the encryption
+   * seam are plaintext and pass through `decrypt`.
+   */
+  const buildContextFromConfiguration = Effect.fn("buildContextFromConfiguration")(function* (
+    configuration: DbPaymentProviderConfiguration,
+  ) {
+    yield* Effect.annotateCurrentSpan(
+      "voidhash.payment_provider.configuration_id",
+      configuration.id,
+    );
+    yield* Effect.annotateCurrentSpan("voidhash.project.id", configuration.projectId);
+    const parsed = yield* Schema.decodeUnknownEffect(globalConfigurationSchema)(
+      configuration.configuration,
+    );
+    const [liveSecretKey, liveWebhookSecret, testSecretKey, testWebhookSecret] = yield* Effect.all([
+      secretCrypto.decrypt(parsed.live.secretKey),
+      secretCrypto.decrypt(parsed.live.webhookSecret),
+      secretCrypto.decrypt(parsed.test.secretKey),
+      secretCrypto.decrypt(parsed.test.webhookSecret),
+    ]);
+    return buildStripeContext({
+      httpClient,
+      liveSecretKey,
+      liveWebhookSecret,
+      testSecretKey,
+      testWebhookSecret,
+    });
+  });
+
+  const _resolveDistinctIdToPersonId = Effect.fn("_resolveDistinctIdToPersonId")(function* (input: {
+    readonly distinctId: string;
+    readonly eventTimestamp: Date;
+    readonly projectId: string;
+    readonly origin?: PersonOriginValue;
+  }) {
+    const result = yield* personIdentityService.resolveDistinctId({
+      distinctId: input.distinctId,
+      eventTimestamp: input.eventTimestamp,
+      origin: input.origin ?? PersonOrigin.Stripe,
+      projectId: input.projectId,
+      setAttributes: {},
+      setOnceAttributes: {},
+      shouldCreatePerson: true,
+    });
+    if (!result.identity.personId) {
+      return yield* new StripePaymentProviderServiceError({
+        cause: "Stripe event resolved without person id",
+      });
+    }
+    return result.identity.personId;
+  });
+
+  /**
+   * Layered Stripe identity resolution:
+   *  1. a stamped voidhash distinctId (`client_reference_id` / metadata) →
+   *     resolve/create that person, and (re)bind the Stripe customer to it.
+   *  2. else an existing `stripe` external identifier on the customer id →
+   *     canonicalized person.
+   *  3. else a synthetic `PersonOrigin.Stripe` stand-in keyed on the customer,
+   *     bound to the customer id for future events.
+   */
+  const _resolveStripePerson = Effect.fn("_resolveStripePerson")(function* (input: {
+    readonly projectId: string;
+    readonly distinctId: string | undefined;
+    readonly customerId: string | undefined;
+    readonly providerEnvironment: ProviderEnvironmentValue;
+    readonly occurredAt: Date;
+  }) {
+    if (input.distinctId) {
+      const personId = yield* _resolveDistinctIdToPersonId({
+        distinctId: input.distinctId,
+        eventTimestamp: input.occurredAt,
+        projectId: input.projectId,
+      });
+      if (input.customerId) {
+        yield* queries.upsertExternalIdentifier({
+          id: generateId("personDistinctId"),
+          identifier: input.customerId,
+          isDefault: true,
+          personId,
+          projectId: input.projectId,
+          serviceId: STRIPE_EXTERNAL_IDENTIFIER_SERVICE_ID,
+        });
+      }
+      yield* Effect.annotateCurrentSpan({ "stripe.identity_result": "distinct_id" });
+      return personId;
+    }
+
+    if (!input.customerId) {
+      return yield* new StripePaymentProviderServiceError({
+        cause: "Stripe event has neither a stamped distinctId nor a customer id",
+      });
+    }
+
+    const existing = yield* queries.findExternalIdentifier({
+      identifier: input.customerId,
+      projectId: input.projectId,
+      serviceId: STRIPE_EXTERNAL_IDENTIFIER_SERVICE_ID,
+    });
+    if (Option.isSome(existing)) {
+      yield* Effect.annotateCurrentSpan({
+        "stripe.identity_result": "customer_external_identifier",
+      });
+      return yield* queries.resolveCanonicalPersonId({ personId: existing.value.personId });
+    }
+
+    const anonymousDistinctId = buildStripeWebhookAnonymousDistinctId({
+      customerId: input.customerId,
+      providerEnvironment: input.providerEnvironment,
+    });
+    const personId = yield* _resolveDistinctIdToPersonId({
+      distinctId: anonymousDistinctId,
+      eventTimestamp: input.occurredAt,
+      origin: PersonOrigin.Stripe,
+      projectId: input.projectId,
+    });
+    yield* queries.createExternalIdentifier({
+      id: generateId("personDistinctId"),
+      identifier: input.customerId,
+      isDefault: true,
+      personId,
+      projectId: input.projectId,
+      serviceId: STRIPE_EXTERNAL_IDENTIFIER_SERVICE_ID,
+    });
+    yield* Effect.annotateCurrentSpan({ "stripe.identity_result": "webhook_stand_in" });
+    return personId;
+  });
+
+  /** Resolves the active product mapping or fails with the product-not-mapped error (drives parking). */
+  const _resolveProductMapping = Effect.fn("_resolveProductMapping")(function* (input: {
+    readonly configurationId: string;
+    readonly providerProductKey: string;
+  }) {
+    const mapping = yield* queries.findActiveProviderProductByPrimaryKey({
+      paymentProviderConfigurationId: input.configurationId,
+      providerProductKey: input.providerProductKey,
+    });
+    if (Option.isNone(mapping)) {
+      return yield* new StripePaymentProviderProductNotMappedError({
+        paymentProviderConfigurationId: input.configurationId,
+        providerProductKey: input.providerProductKey,
+      });
+    }
+    yield* Effect.annotateCurrentSpan("voidhash.payment_provider.product_id", mapping.value.id);
+    return mapping.value;
+  });
+
+  const _buildBase = (input: {
+    readonly idempotencyKey: string;
+    readonly occurredAt: Date;
+    readonly configuration: DbPaymentProviderConfiguration;
+    readonly project: DbProject;
+    readonly paymentProviderConfigurationProductId: string;
+    readonly personId: string;
+    readonly providerEnvironment: ProviderEnvironmentValue;
+    readonly providerEventType: string;
+    readonly providerSubscriptionId: Option.Option<string>;
+    readonly providerTransactionId: Option.Option<string>;
+    readonly event: StripeEvent;
+    readonly receivedAt: Date;
+    readonly source: "webhook" | "reconciliation";
+  }): PurchaseActionContext => ({
+    idempotencyKey: input.idempotencyKey,
+    occurredAt: input.occurredAt,
+    organizationId: input.project.organizationId,
+    paymentProviderConfigurationId: input.configuration.id,
+    paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+    personId: input.personId,
+    projectId: input.project.id,
+    providerEnvironment: input.providerEnvironment,
+    providerEventType: input.providerEventType,
+    providerId: "stripe" as const,
+    providerSubscriptionId: input.providerSubscriptionId,
+    providerTransactionId: input.providerTransactionId,
+    providerWebhookNotificationId: Option.some(input.event.id),
+    rawProviderPayload: Option.some(input.event.data.object),
+    receivedAt: input.receivedAt,
+    source: input.source,
+  });
+
+  /**
+   * Builds money for a paid event, fetching the Stripe processing fee (store
+   * commission) for net proceeds. Fee fetch is best-effort — proceeds equal
+   * gross minus tax when the fee can't be fetched (never guessed).
+   */
+  const _buildMoneyWithFee = (input: {
+    readonly grossMinor: number;
+    readonly currency: string;
+    readonly taxMinor: number;
+    readonly occurredAt: Date;
+    readonly chargeId: string | undefined;
+    readonly paymentIntentId: string | undefined;
+    readonly stripeContext: StripeContext;
+    readonly mode: StripeMode;
+  }) =>
+    Effect.gen(function* () {
+      const chargeId =
+        input.chargeId ??
+        (input.paymentIntentId
+          ? yield* input.stripeContext.fetchPaymentIntentLatestChargeId({
+              mode: input.mode,
+              paymentIntentId: input.paymentIntentId,
+            })
+          : undefined);
+      const feeMinor = chargeId
+        ? yield* input.stripeContext.fetchChargeFeeMinor({ chargeId, mode: input.mode })
+        : undefined;
+      return yield* buildStripeMoney({
+        currency: input.currency,
+        feeMinor,
+        fxRateService,
+        grossMinor: input.grossMinor,
+        occurredAt: input.occurredAt,
+        taxMinor: input.taxMinor,
+      });
+    });
+
+  // ==================== Record methods ====================
+
+  /** `invoice.paid` — initial subscription invoice (`subscription_create`) or a renewal. */
+  const recordInvoicePaid = Effect.fn("recordInvoicePaid")(function* (input: StripeRecordInput) {
+    const invoice = yield* decodeStripeObject(StripeInvoiceSchema)(input.event.data.object);
+    const providerProductKey = stripeProviderProductKey(invoicePrimaryPriceProduct(invoice) ?? {});
+    if (!providerProductKey) {
+      return makeIgnored();
+    }
+    const mapping = yield* _resolveProductMapping({
+      configurationId: input.configuration.id,
+      providerProductKey,
+    });
+    const occurredAt = fromUnixSeconds(invoice.created, input.receivedAt);
+    const personId = yield* _resolveStripePerson({
+      customerId: invoice.customer ?? undefined,
+      distinctId: extractStripeDistinctId(invoice),
+      occurredAt,
+      projectId: input.project.id,
+      providerEnvironment: input.providerEnvironment,
+    });
+    const isCreate = invoice.billing_reason === "subscription_create";
+    const eventType: StripePurchaseProcessingEventType = isCreate ? "purchase" : "renewal";
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "invoice.id",
+      anchorId: invoice.id,
+      eventType,
+    });
+    const grossMinor = invoice.amount_paid ?? invoice.total ?? 0;
+    const money = yield* _buildMoneyWithFee({
+      chargeId: invoice.charge ?? undefined,
+      currency: invoice.currency ?? "",
+      grossMinor,
+      mode: input.mode,
+      occurredAt,
+      paymentIntentId: invoice.payment_intent ?? undefined,
+      stripeContext: input.stripeContext,
+      taxMinor: invoiceTaxMinor(invoice),
+    });
+    const periodLine = invoice.lines?.data?.find((line) => line.period);
+    const startsAt = fromUnixSeconds(periodLine?.period?.start, occurredAt);
+    const expiresAt = Option.fromNullishOr(
+      typeof periodLine?.period?.end === "number"
+        ? new Date(periodLine.period.end * 1000)
+        : undefined,
+    );
+    const isTrial = grossMinor === 0;
+    const base = _buildBase({
+      configuration: input.configuration,
+      event: input.event,
+      idempotencyKey,
+      occurredAt,
+      paymentProviderConfigurationProductId: mapping.id,
+      personId,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      providerEventType: input.event.type,
+      providerSubscriptionId: Option.fromNullishOr(invoice.subscription ?? undefined),
+      providerTransactionId: Option.fromNullishOr(resolveChargeKey(invoice)),
+      receivedAt: input.receivedAt,
+      source: input.source,
+    });
+    if (isCreate) {
+      return yield* purchaseProcessingService.startSubscription({
+        ...base,
+        expiresAt,
+        isTrial,
+        money,
+        purchasedAt: occurredAt,
+        startsAt,
+      });
+    }
+    return yield* purchaseProcessingService.renewSubscription({
+      ...base,
+      expiresAt,
+      isTrial,
+      money,
+      renewedAt: occurredAt,
+      startsAt,
+    });
+  });
+
+  /** `invoice.payment_failed` — the subscription entered Stripe's dunning/retry loop. */
+  const recordInvoicePaymentFailed = Effect.fn("recordInvoicePaymentFailed")(function* (
+    input: StripeRecordInput,
+  ) {
+    const invoice = yield* decodeStripeObject(StripeInvoiceSchema)(input.event.data.object);
+    const providerProductKey = stripeProviderProductKey(invoicePrimaryPriceProduct(invoice) ?? {});
+    if (!providerProductKey) {
+      return makeIgnored();
+    }
+    const mapping = yield* _resolveProductMapping({
+      configurationId: input.configuration.id,
+      providerProductKey,
+    });
+    const occurredAt = fromUnixSeconds(invoice.created, input.receivedAt);
+    const personId = yield* _resolveStripePerson({
+      customerId: invoice.customer ?? undefined,
+      distinctId: extractStripeDistinctId(invoice),
+      occurredAt,
+      projectId: input.project.id,
+      providerEnvironment: input.providerEnvironment,
+    });
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "invoice.id",
+      anchorId: invoice.id,
+      eventType: "billing_retry",
+      extra: [invoice.attempt_count ?? 0],
+    });
+    const base = _buildBase({
+      configuration: input.configuration,
+      event: input.event,
+      idempotencyKey,
+      occurredAt,
+      paymentProviderConfigurationProductId: mapping.id,
+      personId,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      providerEventType: input.event.type,
+      providerSubscriptionId: Option.fromNullishOr(invoice.subscription ?? undefined),
+      providerTransactionId: Option.fromNullishOr(resolveChargeKey(invoice)),
+      receivedAt: input.receivedAt,
+      source: input.source,
+    });
+    return yield* purchaseProcessingService.enterBillingRetry({
+      ...base,
+      billingRetryAt: occurredAt,
+      gracePeriodExpiresAt: Option.none(),
+    });
+  });
+
+  /**
+   * `customer.subscription.updated` — acts only on the field that actually
+   * changed (read from `previous_attributes`): cancel-at-period-end toggle →
+   * cancel / resume; item (plan) change → renewal-preference change. Any other
+   * update is ignored.
+   */
+  const recordSubscriptionUpdated = Effect.fn("recordSubscriptionUpdated")(function* (
+    input: StripeRecordInput,
+  ) {
+    const subscription = yield* decodeStripeObject(StripeSubscriptionSchema)(
+      input.event.data.object,
+    );
+    const previous: StripeSubscriptionPreviousAttributes = input.event.data.previous_attributes
+      ? yield* decodeStripeObject(StripeSubscriptionPreviousAttributesSchema)(
+          input.event.data.previous_attributes,
+        ).pipe(Effect.catch(() => Effect.succeed<StripeSubscriptionPreviousAttributes>({})))
+      : {};
+    const cancelChanged = typeof previous.cancel_at_period_end === "boolean";
+    const itemsChanged = previous.items !== undefined || previous.plan !== undefined;
+    if (!cancelChanged && !itemsChanged) {
+      return makeIgnored();
+    }
+
+    const providerProductKey = stripeProviderProductKey(
+      subscriptionPrimaryPriceProduct(subscription) ?? {},
+    );
+    if (!providerProductKey) {
+      return makeIgnored();
+    }
+    const mapping = yield* _resolveProductMapping({
+      configurationId: input.configuration.id,
+      providerProductKey,
+    });
+    const occurredAt = fromUnixSeconds(input.event.created, input.receivedAt);
+    const personId = yield* _resolveStripePerson({
+      customerId: subscription.customer ?? undefined,
+      distinctId: extractStripeDistinctId({ metadata: subscription.metadata }),
+      occurredAt,
+      projectId: input.project.id,
+      providerEnvironment: input.providerEnvironment,
+    });
+    const periodAnchor = subscription.current_period_end ?? subscription.ended_at ?? 0;
+    const buildBaseFor = (eventType: StripePurchaseProcessingEventType, idempotencyKey: string) =>
+      _buildBase({
+        configuration: input.configuration,
+        event: input.event,
+        idempotencyKey,
+        occurredAt,
+        paymentProviderConfigurationProductId: mapping.id,
+        personId,
+        project: input.project,
+        providerEnvironment: input.providerEnvironment,
+        providerEventType: `${input.event.type}:${eventType}`,
+        providerSubscriptionId: Option.fromNullishOr(subscription.id),
+        providerTransactionId: Option.none(),
+        receivedAt: input.receivedAt,
+        source: input.source,
+      });
+
+    if (cancelChanged) {
+      if (subscription.cancel_at_period_end === true) {
+        // Anchor on `canceled_at` (falling back to the period) so a
+        // cancel → resume → cancel toggle within the SAME billing period yields
+        // distinct keys rather than deduping the second cancel against the first.
+        const idempotencyKey = yield* getStripeIdempotencyKey({
+          anchorField: "subscription.id",
+          anchorId: subscription.id,
+          eventType: "canceled",
+          extra: [subscription.canceled_at ?? periodAnchor],
+        });
+        return yield* purchaseProcessingService.cancelSubscription({
+          ...buildBaseFor("canceled", idempotencyKey),
+          cancelAtPeriodEnd: true,
+          canceledAt: fromUnixSeconds(subscription.canceled_at, occurredAt),
+          cancellationReason: Option.none(),
+        });
+      }
+      const idempotencyKey = yield* getStripeIdempotencyKey({
+        anchorField: "subscription.id",
+        anchorId: subscription.id,
+        eventType: "auto_renew_resumed",
+        extra: [periodAnchor],
+      });
+      return yield* purchaseProcessingService.resumeAutoRenew({
+        ...buildBaseFor("auto_renew_resumed", idempotencyKey),
+        resumedAt: occurredAt,
+      });
+    }
+
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "subscription.id",
+      anchorId: subscription.id,
+      eventType: "renewal_pref_change",
+      extra: [providerProductKey],
+    });
+    return yield* purchaseProcessingService.changeRenewalPreference({
+      ...buildBaseFor("renewal_pref_change", idempotencyKey),
+      newPaymentProviderConfigurationProductId: Option.some(mapping.id),
+      newProviderProductKey: providerProductKey,
+    });
+  });
+
+  /** `customer.subscription.deleted` — the subscription ended. */
+  const recordSubscriptionDeleted = Effect.fn("recordSubscriptionDeleted")(function* (
+    input: StripeRecordInput,
+  ) {
+    const subscription = yield* decodeStripeObject(StripeSubscriptionSchema)(
+      input.event.data.object,
+    );
+    const providerProductKey = stripeProviderProductKey(
+      subscriptionPrimaryPriceProduct(subscription) ?? {},
+    );
+    if (!providerProductKey) {
+      return makeIgnored();
+    }
+    const mapping = yield* _resolveProductMapping({
+      configurationId: input.configuration.id,
+      providerProductKey,
+    });
+    const occurredAt = fromUnixSeconds(
+      subscription.ended_at ?? input.event.created,
+      input.receivedAt,
+    );
+    const personId = yield* _resolveStripePerson({
+      customerId: subscription.customer ?? undefined,
+      distinctId: extractStripeDistinctId({ metadata: subscription.metadata }),
+      occurredAt,
+      projectId: input.project.id,
+      providerEnvironment: input.providerEnvironment,
+    });
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "subscription.id",
+      anchorId: subscription.id,
+      eventType: "expired",
+      extra: [subscription.ended_at ?? subscription.current_period_end ?? 0],
+    });
+    const base = _buildBase({
+      configuration: input.configuration,
+      event: input.event,
+      idempotencyKey,
+      occurredAt,
+      paymentProviderConfigurationProductId: mapping.id,
+      personId,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      providerEventType: input.event.type,
+      providerSubscriptionId: Option.fromNullishOr(subscription.id),
+      providerTransactionId: Option.none(),
+      receivedAt: input.receivedAt,
+      source: input.source,
+    });
+    return yield* purchaseProcessingService.expireSubscription({ ...base, expiredAt: occurredAt });
+  });
+
+  /** `checkout.session.completed` — one-time (non-subscription) payment. Subscription checkouts flow through `invoice.paid`. */
+  const recordCheckoutSessionCompleted = Effect.fn("recordCheckoutSessionCompleted")(function* (
+    input: StripeRecordInput,
+  ) {
+    const session = yield* decodeStripeObject(StripeCheckoutSessionSchema)(input.event.data.object);
+    if (!isPaidOneTimeCheckout(session) || !session.id) {
+      return makeIgnored();
+    }
+    const lineItem = yield* input.stripeContext.fetchCheckoutLineItemPriceProduct({
+      mode: input.mode,
+      sessionId: session.id,
+    });
+    const providerProductKey = stripeProviderProductKey(lineItem ?? {});
+    if (!providerProductKey) {
+      return makeIgnored();
+    }
+    const mapping = yield* _resolveProductMapping({
+      configurationId: input.configuration.id,
+      providerProductKey,
+    });
+    const occurredAt = fromUnixSeconds(session.created, input.receivedAt);
+    const personId = yield* _resolveStripePerson({
+      customerId: session.customer ?? undefined,
+      distinctId: extractStripeDistinctId(session),
+      occurredAt,
+      projectId: input.project.id,
+      providerEnvironment: input.providerEnvironment,
+    });
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "payment_intent",
+      anchorId: session.payment_intent ?? session.id,
+      eventType: "purchase",
+    });
+    const grossMinor = session.amount_total ?? session.amount_subtotal ?? 0;
+    const money = yield* _buildMoneyWithFee({
+      chargeId: undefined,
+      currency: session.currency ?? "",
+      grossMinor,
+      mode: input.mode,
+      occurredAt,
+      paymentIntentId: session.payment_intent ?? undefined,
+      stripeContext: input.stripeContext,
+      taxMinor: session.total_details?.amount_tax ?? 0,
+    });
+    const base = _buildBase({
+      configuration: input.configuration,
+      event: input.event,
+      idempotencyKey,
+      occurredAt,
+      paymentProviderConfigurationProductId: mapping.id,
+      personId,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      providerEventType: input.event.type,
+      providerSubscriptionId: Option.none(),
+      providerTransactionId: Option.fromNullishOr(session.payment_intent ?? session.id),
+      receivedAt: input.receivedAt,
+      source: input.source,
+    });
+    return yield* purchaseProcessingService.completeOneTimePurchase({
+      ...base,
+      money,
+      purchaseType:
+        mapping.productType === ProductType.OneTimeConsumable ? "consumable" : "one-time",
+      purchasedAt: occurredAt,
+    });
+  });
+
+  /**
+   * Resolves the original transaction (product mapping + owning person + the
+   * stored store-transaction id) for a refund/reversal/dispute event. Refund
+   * webhooks carry only a charge (no price/product), so the mapping is recovered
+   * from the transaction the purchase wrote — matched on ANY of the candidate
+   * ids the refund-side object exposes, because the paid-charge identifier lives
+   * in different fields (`payment_intent` / `charge` / `invoice`) across Stripe
+   * API versions and the original purchase may have keyed the transaction on a
+   * different one than the refund object surfaces. Returns `Option.none()` when
+   * no transaction matches — nothing to refund.
+   */
+  const _resolveRefundTarget = Effect.fn("_resolveRefundTarget")(function* (input: {
+    readonly candidateKeys: ReadonlyArray<string | null | undefined>;
+  }) {
+    const candidateKeys = input.candidateKeys.filter(
+      (key): key is string => typeof key === "string" && key.length > 0,
+    );
+    return yield* queries.findTransactionByAnyStoreTransactionId({
+      storeTransactionIds: candidateKeys,
+    });
+  });
+
+  const refundNotFound = (
+    eventId: string,
+    candidateKeys: ReadonlyArray<string | null | undefined>,
+  ) =>
+    Effect.logWarning(
+      "Stripe refund/dispute: no matching transaction found; refund not applied (untracked charge or out-of-order delivery before the purchase webhook)",
+      {
+        candidateKeys: candidateKeys.filter((key) => typeof key === "string"),
+        eventId,
+      },
+    ).pipe(Effect.as(makeIgnored()));
+
+  /** `charge.refunded` — a charge was fully refunded. (Partial refunds are not yet reflected.) */
+  const recordChargeRefunded = Effect.fn("recordChargeRefunded")(function* (
+    input: StripeRecordInput,
+  ) {
+    const charge = yield* decodeStripeObject(StripeChargeSchema)(input.event.data.object);
+    if (charge.refunded !== true) {
+      // Partial refund (cumulative `amount_refunded` < amount): not reflected in v1.
+      return makeIgnored();
+    }
+    // A charge can have keyed the original transaction by payment_intent, the
+    // charge id itself, or (fallback) the invoice id — try all.
+    const candidateKeys = [charge.payment_intent, charge.id, charge.invoice];
+    const target = yield* _resolveRefundTarget({ candidateKeys });
+    if (Option.isNone(target)) {
+      return yield* refundNotFound(input.event.id, candidateKeys);
+    }
+    const storeTransactionId = target.value.storeTransactionId ?? resolveChargeKey(charge);
+    if (!storeTransactionId) {
+      return makeIgnored();
+    }
+    yield* Effect.annotateCurrentSpan("stripe.storefront", chargeStorefront(charge) ?? "");
+    const occurredAt = fromUnixSeconds(charge.created, input.receivedAt);
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "charge.id",
+      anchorId: storeTransactionId,
+      eventType: "refund",
+    });
+    const base = _buildBase({
+      configuration: input.configuration,
+      event: input.event,
+      idempotencyKey,
+      occurredAt,
+      paymentProviderConfigurationProductId: target.value.paymentProviderConfigurationProductId,
+      personId: target.value.personId,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      providerEventType: input.event.type,
+      providerSubscriptionId: Option.none(),
+      providerTransactionId: Option.some(storeTransactionId),
+      receivedAt: input.receivedAt,
+      source: input.source,
+    });
+    return yield* purchaseProcessingService.refundPurchase({
+      ...base,
+      refundReason: Option.none(),
+      refundedAt: occurredAt,
+    });
+  });
+
+  /** `charge.refund.updated` — a previously-succeeded refund failed/was canceled (reversal). */
+  const recordRefundUpdated = Effect.fn("recordRefundUpdated")(function* (
+    input: StripeRecordInput,
+  ) {
+    const refund = yield* decodeStripeObject(StripeRefundSchema)(input.event.data.object);
+    if (refund.status !== "failed" && refund.status !== "canceled") {
+      return makeIgnored();
+    }
+    const candidateKeys = [refund.payment_intent, refund.charge];
+    const target = yield* _resolveRefundTarget({ candidateKeys });
+    if (Option.isNone(target)) {
+      return yield* refundNotFound(input.event.id, candidateKeys);
+    }
+    const storeTransactionId = target.value.storeTransactionId ?? resolveChargeKey(refund);
+    if (!storeTransactionId) {
+      return makeIgnored();
+    }
+    const occurredAt = fromUnixSeconds(refund.created, input.receivedAt);
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "refund.id",
+      anchorId: refund.id,
+      eventType: "refund_reversed",
+    });
+    const base = _buildBase({
+      configuration: input.configuration,
+      event: input.event,
+      idempotencyKey,
+      occurredAt,
+      paymentProviderConfigurationProductId: target.value.paymentProviderConfigurationProductId,
+      personId: target.value.personId,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      providerEventType: input.event.type,
+      providerSubscriptionId: Option.none(),
+      providerTransactionId: Option.some(storeTransactionId),
+      receivedAt: input.receivedAt,
+      source: input.source,
+    });
+    return yield* purchaseProcessingService.reverseRefund({ ...base, reversedAt: occurredAt });
+  });
+
+  /** `charge.dispute.closed` — a lost chargeback removes the revenue (like a refund). */
+  const recordDisputeClosed = Effect.fn("recordDisputeClosed")(function* (
+    input: StripeRecordInput,
+  ) {
+    const dispute = yield* decodeStripeObject(StripeDisputeSchema)(input.event.data.object);
+    if (dispute.status !== "lost") {
+      // `won` / `warning_closed` leave the revenue intact; nothing to record.
+      return makeIgnored();
+    }
+    const candidateKeys = [dispute.payment_intent, dispute.charge];
+    const target = yield* _resolveRefundTarget({ candidateKeys });
+    if (Option.isNone(target)) {
+      return yield* refundNotFound(input.event.id, candidateKeys);
+    }
+    const storeTransactionId = target.value.storeTransactionId ?? resolveChargeKey(dispute);
+    if (!storeTransactionId) {
+      return makeIgnored();
+    }
+    const occurredAt = fromUnixSeconds(dispute.created, input.receivedAt);
+    const idempotencyKey = yield* getStripeIdempotencyKey({
+      anchorField: "dispute.id",
+      anchorId: dispute.id,
+      eventType: "refund",
+    });
+    const base = _buildBase({
+      configuration: input.configuration,
+      event: input.event,
+      idempotencyKey,
+      occurredAt,
+      paymentProviderConfigurationProductId: target.value.paymentProviderConfigurationProductId,
+      personId: target.value.personId,
+      project: input.project,
+      providerEnvironment: input.providerEnvironment,
+      providerEventType: input.event.type,
+      providerSubscriptionId: Option.none(),
+      providerTransactionId: Option.some(storeTransactionId),
+      receivedAt: input.receivedAt,
+      source: input.source,
+    });
+    return yield* purchaseProcessingService.refundPurchase({
+      ...base,
+      refundReason: Option.some("chargeback_lost"),
+      refundedAt: occurredAt,
+    });
+  });
+
+  return {
+    buildContextFromConfiguration,
+    recordChargeRefunded,
+    recordCheckoutSessionCompleted,
+    recordDisputeClosed,
+    recordInvoicePaid,
+    recordInvoicePaymentFailed,
+    recordRefundUpdated,
+    recordSubscriptionDeleted,
+    recordSubscriptionUpdated,
+  } as const;
+});
+
+export type { StripeContext };
+
+export class StripePaymentProvider extends Context.Service<StripePaymentProvider>()(
+  "core/StripePaymentProvider",
+  { make },
+) {
+  static readonly layer = Layer.effect(StripePaymentProvider)(StripePaymentProvider.make).pipe(
+    Layer.provideMerge(StripePaymentProviderServiceQueries.layer),
+  );
+}
diff --git a/packages/core/src/services/paymentProviders/stripe/sdk-context.test.ts b/packages/core/src/services/paymentProviders/stripe/sdk-context.test.ts
new file mode 100644
index 000000000..d7b4650c0
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/sdk-context.test.ts
@@ -0,0 +1,192 @@
+/**
+ * Unit tests for {@link buildStripeContext}'s `verifyAndDecodeEvent` — the
+ * hand-rolled `Stripe-Signature` HMAC verifier (`stripe/sdk-context.ts`).
+ *
+ * Unlike the App Store SDK context (which closes over a real Apple JWS verifier
+ * with a CA-rooted cert chain that cannot be produced offline), the Stripe
+ * scheme is a plain HMAC-SHA256 over `${t}.${rawBody}` keyed on the per-tenant
+ * signing secret. That is fully reproducible in-process, so every verification
+ * branch runs as a real test: the live/test secret discrimination (which secret
+ * verifies determines `mode`), wrong-secret rejection, timestamp-tolerance
+ * rejection + its `skipTimestampTolerance` bypass, and malformed-header
+ * rejection.
+ *
+ * The REST enrichment helpers (`fetchChargeFeeMinor`, etc.) are NOT exercised
+ * here — a fake `HttpClient` returning `{}` for any request satisfies the type
+ * but is never called on the verify path. The signer is shared with the
+ * integration suite via `signStripePayload` in the test-support module (it
+ * mirrors the verifier's HMAC byte-for-byte), so unit and integration agree on
+ * the wire format.
+ */
+import { Effect } from "effect";
+import { HttpClient, HttpClientResponse } from "effect/unstable/http";
+
+import { describe, expect, it } from "vite-plus/test";
+
+import { StripeWebhookSignatureError } from "./errors.ts";
+import { buildStripeContext } from "./sdk-context.ts";
+
+/**
+ * In-process HMAC signer mirroring the verifier byte-for-byte. Inlined (rather
+ * than imported from the integration test-support module) so this unit test
+ * carries no `@testing/*`-aliased / harness dependency under the unit runner.
+ */
+const signStripePayload = async (
+  rawBody: string,
+  secret: string,
+  timestampSeconds: number,
+): Promise<string> => {
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { hash: "SHA-256", name: "HMAC" },
+    false,
+    ["sign"],
+  );
+  const signature = await crypto.subtle.sign(
+    "HMAC",
+    key,
+    encoder.encode(`${timestampSeconds}.${rawBody}`),
+  );
+  const hex = Array.from(new Uint8Array(signature))
+    .map((byte) => byte.toString(16).padStart(2, "0"))
+    .join("");
+  return `t=${timestampSeconds},v1=${hex}`;
+};
+
+const LIVE_WEBHOOK_SECRET = "whsec_live_unitsecret";
+const TEST_WEBHOOK_SECRET = "whsec_test_unitsecret";
+
+/** Stripe's replay-protection window; the stale-timestamp case steps well past it. */
+const SIGNATURE_TOLERANCE_SECONDS = 300;
+
+/**
+ * A fake `HttpClient` returning `{}` with 200 for any request. The REST helpers
+ * are not exercised by `verifyAndDecodeEvent`, so this only needs to satisfy the
+ * `StripeContextConfig.httpClient` type.
+ */
+const stubHttpClient = (): HttpClient.HttpClient =>
+  HttpClient.make((request) =>
+    Effect.sync(() =>
+      HttpClientResponse.fromWeb(
+        request,
+        new Response("{}", { headers: { "Content-Type": "application/json" }, status: 200 }),
+      ),
+    ),
+  );
+
+/** Builds a context over the two unit-test webhook secrets + a no-op REST client. */
+const makeContext = () =>
+  buildStripeContext({
+    httpClient: stubHttpClient(),
+    liveSecretKey: "sk_live_unitkey",
+    liveWebhookSecret: LIVE_WEBHOOK_SECRET,
+    testSecretKey: "sk_test_unitkey",
+    testWebhookSecret: TEST_WEBHOOK_SECRET,
+  });
+
+/** A minimal but schema-valid Stripe event envelope, JSON-stringified. */
+const eventBody = (overrides: Record<string, unknown> = {}): string =>
+  JSON.stringify({
+    created: 1_700_000_000,
+    data: { object: { id: "in_unit", object: "invoice" } },
+    id: "evt_unit_1",
+    livemode: false,
+    object: "event",
+    type: "invoice.paid",
+    ...overrides,
+  });
+
+const nowSeconds = () => Math.floor(Date.now() / 1000);
+
+describe("buildStripeContext.verifyAndDecodeEvent", () => {
+  it("verifies a LIVE-secret signature and reports mode='live'", async () => {
+    const context = makeContext();
+    const rawBody = eventBody({ id: "evt_live_ok", livemode: true });
+    const ts = nowSeconds();
+    const signatureHeader = await signStripePayload(rawBody, LIVE_WEBHOOK_SECRET, ts);
+
+    const result = await Effect.runPromise(
+      context.verifyAndDecodeEvent({ rawBody, signatureHeader }),
+    );
+
+    expect(result.mode).toBe("live");
+    expect(result.event.id).toBe("evt_live_ok");
+    expect(result.event.type).toBe("invoice.paid");
+  });
+
+  it("verifies a TEST-secret signature and reports mode='test'", async () => {
+    const context = makeContext();
+    const rawBody = eventBody({ id: "evt_test_ok" });
+    const ts = nowSeconds();
+    const signatureHeader = await signStripePayload(rawBody, TEST_WEBHOOK_SECRET, ts);
+
+    const result = await Effect.runPromise(
+      context.verifyAndDecodeEvent({ rawBody, signatureHeader }),
+    );
+
+    expect(result.mode).toBe("test");
+    expect(result.event.id).toBe("evt_test_ok");
+  });
+
+  it("rejects a signature produced with neither configured secret", async () => {
+    const context = makeContext();
+    const rawBody = eventBody();
+    const ts = nowSeconds();
+    // Sign with a secret that matches neither the live nor the test webhook key.
+    const signatureHeader = await signStripePayload(rawBody, "whsec_wrong", ts);
+
+    const error = await Effect.runPromise(
+      Effect.flip(context.verifyAndDecodeEvent({ rawBody, signatureHeader })),
+    );
+
+    expect(error).toBeInstanceOf(StripeWebhookSignatureError);
+    expect(error.reason).toContain("no signature matched");
+  });
+
+  it("rejects a stale timestamp outside the tolerance window", async () => {
+    const context = makeContext();
+    const rawBody = eventBody({ id: "evt_stale" });
+    // A valid signature, but the timestamp is well past the 300s window.
+    const staleTs = nowSeconds() - (SIGNATURE_TOLERANCE_SECONDS + 10_000);
+    const signatureHeader = await signStripePayload(rawBody, LIVE_WEBHOOK_SECRET, staleTs);
+
+    const error = await Effect.runPromise(
+      Effect.flip(context.verifyAndDecodeEvent({ rawBody, signatureHeader })),
+    );
+
+    expect(error).toBeInstanceOf(StripeWebhookSignatureError);
+    expect(error.reason).toContain("tolerance");
+  });
+
+  it("accepts the SAME stale-but-signed payload when skipTimestampTolerance is set", async () => {
+    const context = makeContext();
+    const rawBody = eventBody({ id: "evt_stale_skip", livemode: true });
+    const staleTs = nowSeconds() - (SIGNATURE_TOLERANCE_SECONDS + 10_000);
+    const signatureHeader = await signStripePayload(rawBody, LIVE_WEBHOOK_SECRET, staleTs);
+
+    // Same stale payload that was rejected above; skipping the freshness window
+    // (the replay path) still checks the HMAC, so it verifies and decodes.
+    const result = await Effect.runPromise(
+      context.verifyAndDecodeEvent({ rawBody, signatureHeader, skipTimestampTolerance: true }),
+    );
+
+    expect(result.mode).toBe("live");
+    expect(result.event.id).toBe("evt_stale_skip");
+  });
+
+  it("rejects a header with no v1 signature component", async () => {
+    const context = makeContext();
+    const rawBody = eventBody();
+    // A `t=` with no `v1=` — the verifier requires at least one v1 signature.
+    const signatureHeader = `t=${nowSeconds()}`;
+
+    const error = await Effect.runPromise(
+      Effect.flip(context.verifyAndDecodeEvent({ rawBody, signatureHeader })),
+    );
+
+    expect(error).toBeInstanceOf(StripeWebhookSignatureError);
+    expect(error.reason).toContain("missing t/v1");
+  });
+});
diff --git a/packages/core/src/services/paymentProviders/stripe/sdk-context.ts b/packages/core/src/services/paymentProviders/stripe/sdk-context.ts
new file mode 100644
index 000000000..c881d4211
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/sdk-context.ts
@@ -0,0 +1,270 @@
+/**
+ * Per-tenant Stripe context shared by the webhook handler and the record
+ * engine. Owns two things the `@distilled.cloud/stripe` SDK does NOT provide:
+ *
+ *  1. Webhook signature verification — the SDK is outbound-REST only, so the
+ *     `Stripe-Signature` HMAC-SHA256 scheme is hand-rolled with WebCrypto
+ *     (`crypto.subtle`), exactly like `SecretBox.ts`. Both the live and test
+ *     signing secrets are tried; the one that verifies determines the mode.
+ *  2. Best-effort REST enrichment using the per-tenant secret key — fetching a
+ *     charge's processing fee (for net proceeds) and a checkout session's line
+ *     items (to resolve the purchased price/product). These never fail the
+ *     record path: any error resolves to "unavailable" and is logged.
+ *
+ * The shared `HttpClient` is captured once at engine construction and threaded
+ * in here, so the REST requirement never leaks into each `record*` method's
+ * `R` channel (mirrors how `appStore/sdk-context.ts` + FX capture work).
+ */
+import { Effect, Layer, Redacted, Schema } from "effect";
+import type { HttpClient } from "effect/unstable/http/HttpClient";
+import { HttpClient as HttpClientTag } from "effect/unstable/http/HttpClient";
+import { Credentials, DEFAULT_API_BASE_URL } from "@distilled.cloud/stripe/Credentials";
+import {
+  GetBalanceTransactionsId,
+  GetChargesCharge,
+  GetCheckoutSessionsSessionLineItems,
+  GetPaymentIntentsIntent,
+} from "@distilled.cloud/stripe/Operations";
+
+import { StripePaymentProviderServiceError, StripeWebhookSignatureError } from "./errors.ts";
+import { decodeStripeEvent, StripeBalanceTransactionSchema } from "./events.ts";
+
+/** Stripe's default replay-protection window for webhook timestamps (seconds). */
+const SIGNATURE_TOLERANCE_SECONDS = 300;
+
+export type StripeMode = "live" | "test";
+
+export interface StripeContextConfig {
+  readonly liveSecretKey: string;
+  readonly testSecretKey: string;
+  readonly liveWebhookSecret: string;
+  readonly testWebhookSecret: string;
+  readonly httpClient: HttpClient;
+  readonly apiBaseUrl?: string;
+}
+
+const PriceRefSchema = Schema.Struct({
+  id: Schema.optional(Schema.String),
+  product: Schema.optional(Schema.NullOr(Schema.String)),
+});
+
+const parseSignatureHeader = (
+  header: string,
+): { readonly timestamp: string | undefined; readonly signatures: ReadonlyArray<string> } => {
+  let timestamp: string | undefined;
+  const signatures: string[] = [];
+  for (const part of header.split(",")) {
+    const idx = part.indexOf("=");
+    if (idx === -1) continue;
+    const key = part.slice(0, idx).trim();
+    const value = part.slice(idx + 1).trim();
+    if (key === "t") timestamp = value;
+    else if (key === "v1") signatures.push(value);
+  }
+  return { signatures, timestamp };
+};
+
+/** Length-checked constant-time hex-string comparison. */
+const timingSafeEqual = (a: string, b: string): boolean => {
+  if (a.length !== b.length) return false;
+  let mismatch = 0;
+  for (let i = 0; i < a.length; i++) {
+    mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  }
+  return mismatch === 0;
+};
+
+const computeHmacHex = (secret: string, payload: string) =>
+  Effect.tryPromise({
+    catch: (error) =>
+      new StripeWebhookSignatureError({ reason: `HMAC computation failed: ${String(error)}` }),
+    try: async () => {
+      const encoder = new TextEncoder();
+      const key = await crypto.subtle.importKey(
+        "raw",
+        encoder.encode(secret),
+        { hash: "SHA-256", name: "HMAC" },
+        false,
+        ["sign"],
+      );
+      const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(payload));
+      return Array.from(new Uint8Array(signature))
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+    },
+  });
+
+export type StripeContext = ReturnType<typeof buildStripeContext>;
+
+/** Builds the per-tenant Stripe context over already-decrypted credentials. */
+export const buildStripeContext = (config: StripeContextConfig) => {
+  const apiBaseUrl = config.apiBaseUrl ?? DEFAULT_API_BASE_URL;
+
+  const credentialsLayerFor = (mode: StripeMode) =>
+    Layer.succeed(
+      Credentials,
+      Effect.succeed({
+        apiBaseUrl,
+        apiKey: Redacted.make(mode === "live" ? config.liveSecretKey : config.testSecretKey),
+      }),
+    );
+
+  const runOp = <A, E>(
+    op: Effect.Effect<A, E, Credentials | HttpClient>,
+    mode: StripeMode,
+  ): Effect.Effect<A, E> =>
+    op.pipe(
+      Effect.provideService(HttpClientTag, config.httpClient),
+      Effect.provide(credentialsLayerFor(mode)),
+    );
+
+  /**
+   * Verifies the `Stripe-Signature` HMAC against the live then test signing
+   * secret and decodes the body. The verifying secret determines `mode`. On
+   * internal replay, `skipTimestampTolerance` bypasses the freshness window
+   * (the signature itself is still checked) so an old parked payload is not
+   * rejected for staleness.
+   */
+  const verifyAndDecodeEvent = (input: {
+    readonly rawBody: string;
+    readonly signatureHeader: string;
+    readonly skipTimestampTolerance?: boolean;
+  }) =>
+    Effect.gen(function* () {
+      const { signatures, timestamp } = parseSignatureHeader(input.signatureHeader);
+      if (!timestamp || signatures.length === 0) {
+        return yield* new StripeWebhookSignatureError({
+          reason: "Stripe-Signature header missing t/v1 components",
+        });
+      }
+      const timestampSeconds = Number(timestamp);
+      if (!Number.isFinite(timestampSeconds)) {
+        return yield* new StripeWebhookSignatureError({
+          reason: "Stripe-Signature timestamp is not numeric",
+        });
+      }
+      if (!input.skipTimestampTolerance) {
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        if (Math.abs(nowSeconds - timestampSeconds) > SIGNATURE_TOLERANCE_SECONDS) {
+          return yield* new StripeWebhookSignatureError({
+            reason: "Stripe-Signature timestamp outside tolerance window",
+          });
+        }
+      }
+
+      const signedPayload = `${timestamp}.${input.rawBody}`;
+      const candidates: ReadonlyArray<{ readonly mode: StripeMode; readonly secret: string }> = [
+        { mode: "live", secret: config.liveWebhookSecret },
+        { mode: "test", secret: config.testWebhookSecret },
+      ];
+
+      let verifiedMode: StripeMode | undefined;
+      for (const candidate of candidates) {
+        if (!candidate.secret) continue;
+        const expected = yield* computeHmacHex(candidate.secret, signedPayload);
+        if (signatures.some((signature) => timingSafeEqual(signature, expected))) {
+          verifiedMode = candidate.mode;
+          break;
+        }
+      }
+      if (!verifiedMode) {
+        return yield* new StripeWebhookSignatureError({
+          reason: "no signature matched the configured signing secrets",
+        });
+      }
+
+      const parsed = yield* Effect.try({
+        catch: (error) =>
+          new StripeWebhookSignatureError({
+            reason: `verified body is not valid JSON: ${String(error)}`,
+          }),
+        try: () => JSON.parse(input.rawBody) as unknown,
+      });
+      const event = yield* decodeStripeEvent(parsed).pipe(
+        Effect.mapError((error) => new StripeWebhookSignatureError({ reason: error.cause })),
+      );
+      return { event, mode: verifiedMode } as const;
+    });
+
+  const decodePriceRef = (price: unknown) =>
+    Schema.decodeUnknownEffect(PriceRefSchema)(price).pipe(
+      Effect.map((ref) =>
+        ref.id ? { priceId: ref.id, productId: ref.product ?? undefined } : undefined,
+      ),
+      Effect.catch(() => Effect.succeed(undefined)),
+    );
+
+  /**
+   * Fetches a charge's Stripe processing fee (minor units) for net-proceeds
+   * accounting. Best-effort: returns `undefined` if the charge, its balance
+   * transaction, or the fetch is unavailable.
+   */
+  const fetchChargeFeeMinor = (input: { readonly chargeId: string; readonly mode: StripeMode }) =>
+    runOp(GetChargesCharge({ charge: input.chargeId }), input.mode).pipe(
+      Effect.flatMap((charge) => {
+        const balanceTransaction = charge.balance_transaction;
+        if (typeof balanceTransaction === "string") {
+          return runOp(GetBalanceTransactionsId({ id: balanceTransaction }), input.mode).pipe(
+            Effect.map((tx) => tx.fee),
+          );
+        }
+        if (balanceTransaction && typeof balanceTransaction === "object") {
+          return Schema.decodeUnknownEffect(StripeBalanceTransactionSchema)(
+            balanceTransaction,
+          ).pipe(Effect.map((tx) => tx.fee));
+        }
+        return Effect.succeed<number | undefined>(undefined);
+      }),
+      Effect.catch((error) =>
+        Effect.logWarning("Stripe charge fee fetch failed; recording without commission", {
+          chargeId: input.chargeId,
+          error: String(error),
+        }).pipe(Effect.as<number | undefined>(undefined)),
+      ),
+    );
+
+  /** Resolves a payment intent's latest charge id (for fee lookup). Best-effort. */
+  const fetchPaymentIntentLatestChargeId = (input: {
+    readonly paymentIntentId: string;
+    readonly mode: StripeMode;
+  }) =>
+    runOp(GetPaymentIntentsIntent({ intent: input.paymentIntentId }), input.mode).pipe(
+      Effect.map((intent) =>
+        typeof intent.latest_charge === "string" ? intent.latest_charge : undefined,
+      ),
+      Effect.catch(() => Effect.succeed<string | undefined>(undefined)),
+    );
+
+  /**
+   * Resolves the purchased price/product from a checkout session's line items
+   * (not present on the webhook payload). Returns `undefined` when the session
+   * genuinely has no priced line item; a REST/transport failure is surfaced as
+   * a transient {@link StripePaymentProviderServiceError} so the webhook is
+   * retried rather than silently dropping a real purchase.
+   */
+  const fetchCheckoutLineItemPriceProduct = (input: {
+    readonly sessionId: string;
+    readonly mode: StripeMode;
+  }) =>
+    runOp(GetCheckoutSessionsSessionLineItems({ session: input.sessionId }), input.mode).pipe(
+      Effect.flatMap((response) => {
+        const line = response.data.find(
+          (entry) => typeof entry.price === "object" && entry.price !== null,
+        );
+        return line ? decodePriceRef(line.price) : Effect.succeed(undefined);
+      }),
+      Effect.mapError(
+        (error) =>
+          new StripePaymentProviderServiceError({
+            cause: `Stripe checkout line-item fetch failed: ${String(error)}`,
+          }),
+      ),
+    );
+
+  return {
+    fetchChargeFeeMinor,
+    fetchCheckoutLineItemPriceProduct,
+    fetchPaymentIntentLatestChargeId,
+    verifyAndDecodeEvent,
+  } as const;
+};
diff --git a/packages/core/src/services/paymentProviders/stripe/stripe-webhook-handler-service.ts b/packages/core/src/services/paymentProviders/stripe/stripe-webhook-handler-service.ts
new file mode 100644
index 000000000..fa9413a96
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/stripe/stripe-webhook-handler-service.ts
@@ -0,0 +1,382 @@
+/**
+ * Stripe webhook ingress. Verifies the `Stripe-Signature` HMAC against the
+ * per-tenant signing secret, decodes the event, and dispatches it to the
+ * matching `record*` method on the {@link StripePaymentProvider} engine. Mirrors
+ * `appStore/app-store-webhook-handler-service.ts`, minus the Apple
+ * SDK-confirmation parking (Stripe webhooks are authoritative) — only the
+ * product-not-mapped park flavor applies. The wire-dedup ledger
+ * (`payment_provider_notification_processed`, UNIQUE on `(configId, event.id)`)
+ * is shared verbatim with the App Store path.
+ */
+import { generateId } from "../../../utils/index.ts";
+import { Effect, Layer, Match, Predicate, Context } from "effect";
+
+import {
+  StripePaymentProviderConfigurationNotFoundError,
+  StripePaymentProviderProductNotMappedError,
+  StripePaymentProviderProjectNotFoundError,
+  StripePaymentProviderServiceError,
+  StripeWebhookSignatureError,
+} from "./errors.ts";
+import type { StripeAcceptWebhookEventResult } from "../StripePaymentProviderService.ts";
+import { decodeStripeEvent, StripeEventType } from "./events.ts";
+import { StripePaymentProvider, type StripeRecordInput } from "./payment-provider.ts";
+import { StripePaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import type { StripeContext, StripeMode } from "./sdk-context.ts";
+import { ProviderEnvironment } from "@voidhash/db";
+
+const truncateResultNote = (note: string): string => note.slice(0, 500);
+
+/** Tags `handled` collapses into a terminal "failed" ledger row (permanent, don't retry). */
+const TERMINAL_RECORD_FAILURE_TAGS = new Set<string>([
+  "StripePurchaseProcessingIdempotencyKeyDerivationError",
+  "InvalidISO4217CurrencyCodeError",
+]);
+
+const isTerminalRecordFailure = (error: unknown): boolean =>
+  Predicate.hasProperty(error, "_tag") &&
+  typeof error._tag === "string" &&
+  TERMINAL_RECORD_FAILURE_TAGS.has(error._tag);
+
+/**
+ * Collapses any internal failure into the public {@link StripePaymentProviderServiceError},
+ * stamping the routing `kind` (signature / not_found / transient) the ingress
+ * route maps to an HTTP status. Errors raised before/around the dispatch
+ * (signature, config/project not found) keep their semantics; everything else
+ * is a transient infra failure Stripe should retry.
+ */
+const toStripeServiceError = (error: unknown): StripePaymentProviderServiceError => {
+  if (error instanceof StripePaymentProviderServiceError) return error;
+  if (error instanceof StripeWebhookSignatureError) {
+    return new StripePaymentProviderServiceError({ cause: error.reason, kind: "signature" });
+  }
+  if (error instanceof StripePaymentProviderConfigurationNotFoundError) {
+    return new StripePaymentProviderServiceError({
+      cause: `payment provider configuration ${error.paymentProviderConfigurationId} not found`,
+      kind: "not_found",
+    });
+  }
+  if (error instanceof StripePaymentProviderProjectNotFoundError) {
+    return new StripePaymentProviderServiceError({
+      cause: `project ${error.projectId} not found`,
+      kind: "not_found",
+    });
+  }
+  const cause =
+    Predicate.hasProperty(error, "cause") && typeof error.cause === "string"
+      ? error.cause
+      : String(error);
+  return new StripePaymentProviderServiceError({ cause, kind: "transient" });
+};
+
+const describeRecordFailure = (error: unknown): string => {
+  if (
+    Predicate.hasProperty(error, "_tag") &&
+    error._tag === "StripePurchaseProcessingIdempotencyKeyDerivationError"
+  ) {
+    const eventType = Predicate.hasProperty(error, "eventType")
+      ? String(error.eventType)
+      : "unknown";
+    const missingField = Predicate.hasProperty(error, "missingField")
+      ? String(error.missingField)
+      : "unknown";
+    return `idempotency key derivation failed for ${eventType}: missing ${missingField}`;
+  }
+  return `invalid ISO 4217 currency code: ${String(error)}`;
+};
+
+export class StripeWebhookHandlerService extends Context.Service<StripeWebhookHandlerService>()(
+  "StripeWebhookHandlerService",
+  {
+    make: Effect.gen(function* () {
+      const queries = yield* StripePaymentProviderServiceQueries;
+      const stripePaymentProvider = yield* StripePaymentProvider;
+
+      const acceptWebhookEvent = Effect.fn("acceptWebhookEvent")(
+        function* (input: {
+          readonly paymentProviderConfigurationId: string;
+          readonly rawBody: string;
+          readonly signatureHeader: string;
+          readonly receivedAt: Date;
+          /** Set by the parked-replay path: skip signature verification (the stored body was already verified) and the freshness window. */
+          readonly isReplay?: boolean;
+        }) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          const configuration = yield* queries.findPaymentProviderConfigurationById(
+            input.paymentProviderConfigurationId,
+          );
+          if (!configuration) {
+            return yield* new StripePaymentProviderConfigurationNotFoundError({
+              paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            });
+          }
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.id",
+            configuration.providerId,
+          );
+
+          const project = yield* queries.findProjectById(configuration.projectId);
+          if (!project) {
+            return yield* new StripePaymentProviderProjectNotFoundError({
+              projectId: configuration.projectId,
+            });
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", project.id);
+
+          const stripeContext: StripeContext =
+            yield* stripePaymentProvider.buildContextFromConfiguration(configuration);
+
+          // Live ingress verifies the HMAC; replay trusts the already-verified
+          // stored body (the signature header is not persisted) and derives the
+          // mode from `livemode`.
+          const { event, mode } = input.isReplay
+            ? yield* Effect.gen(function* () {
+                const parsed = yield* Effect.try({
+                  catch: (error) =>
+                    new StripePaymentProviderServiceError({
+                      cause: `parked Stripe payload is not valid JSON: ${String(error)}`,
+                    }),
+                  try: () => JSON.parse(input.rawBody) as unknown,
+                });
+                const decoded = yield* decodeStripeEvent(parsed);
+                return {
+                  event: decoded,
+                  mode: (decoded.livemode === false ? "test" : "live") as StripeMode,
+                };
+              })
+            : yield* stripeContext.verifyAndDecodeEvent({
+                rawBody: input.rawBody,
+                signatureHeader: input.signatureHeader,
+                skipTimestampTolerance: false,
+              });
+
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.event_type", event.type);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.id", event.id);
+
+          const providerEnvironment =
+            mode === "test" ? ProviderEnvironment.Sandbox : ProviderEnvironment.Production;
+
+          const ack = (handled: boolean): StripeAcceptWebhookEventResult => ({
+            accepted: true,
+            eventId: event.id,
+            eventType: event.type,
+            handled,
+          });
+
+          let terminalLedgerResult: "failed" | undefined;
+          let terminalLedgerResultNote: string | null = null;
+
+          const markTerminalRecordFailure = (reason: string) =>
+            Effect.gen(function* () {
+              terminalLedgerResult = "failed";
+              terminalLedgerResultNote = truncateResultNote(reason);
+              yield* Effect.annotateCurrentSpan({ "stripe.webhook_result": "failed" });
+              yield* Effect.logWarning("Stripe webhook record failed permanently", {
+                eventId: event.id,
+                eventType: event.type,
+                resultNote: terminalLedgerResultNote,
+              });
+              return ack(false);
+            });
+
+          const recordInput: StripeRecordInput = {
+            configuration,
+            event,
+            mode,
+            project,
+            providerEnvironment,
+            receivedAt: input.receivedAt,
+            source: "webhook",
+            stripeContext,
+          };
+
+          /**
+           * Coerce a record success into `ack(true)`, park on product-not-mapped
+           * (store the raw body for replay once the mapping is created), and
+           * collapse terminal record failures into a `"failed"` ledger row.
+           * Generic over the record method's error channel — narrowed with tag
+           * guards (not `catchTag`, which would widen `R` to `unknown`).
+           */
+          const handled = <A, E, R>(
+            recordEffect: Effect.Effect<A, E | StripePaymentProviderProductNotMappedError, R>,
+          ) =>
+            recordEffect.pipe(
+              Effect.as(ack(true)),
+              Effect.catchIf(
+                (error): error is StripePaymentProviderProductNotMappedError =>
+                  Predicate.hasProperty(error, "_tag") &&
+                  error._tag === "StripePaymentProviderProductNotMappedError",
+                (error) =>
+                  Effect.gen(function* () {
+                    yield* Effect.annotateCurrentSpan({
+                      "stripe.webhook_result": "parked_pending_product_mapping",
+                    });
+                    yield* Effect.logInfo("Stripe webhook parked: product not yet mapped", {
+                      eventId: event.id,
+                      eventType: event.type,
+                      providerProductKey: error.providerProductKey,
+                    });
+                    yield* queries.insertNotificationProcessedIfAbsent({
+                      id: generateId("paymentProviderNotification"),
+                      notificationSubtype: null,
+                      notificationType: event.type,
+                      notificationUuid: event.id,
+                      parkedRawPayload: input.rawBody,
+                      parkedUntilProviderProductKey: error.providerProductKey,
+                      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                      providerId: "stripe",
+                      result: "parked_pending_product_mapping",
+                      resultNote: `product key ${error.providerProductKey} not mapped at event time`,
+                      source: "webhook",
+                    });
+                    return ack(true);
+                  }),
+              ),
+              Effect.catchIf(isTerminalRecordFailure, (error) =>
+                markTerminalRecordFailure(describeRecordFailure(error)),
+              ),
+            );
+
+          const matchResult = (yield* Match.value(event.type).pipe(
+            Match.when(StripeEventType.InvoicePaid, () =>
+              handled(stripePaymentProvider.recordInvoicePaid(recordInput)),
+            ),
+            Match.when(StripeEventType.InvoicePaymentFailed, () =>
+              handled(stripePaymentProvider.recordInvoicePaymentFailed(recordInput)),
+            ),
+            Match.when(StripeEventType.CustomerSubscriptionUpdated, () =>
+              handled(stripePaymentProvider.recordSubscriptionUpdated(recordInput)),
+            ),
+            Match.when(StripeEventType.CustomerSubscriptionDeleted, () =>
+              handled(stripePaymentProvider.recordSubscriptionDeleted(recordInput)),
+            ),
+            Match.when(StripeEventType.CheckoutSessionCompleted, () =>
+              handled(stripePaymentProvider.recordCheckoutSessionCompleted(recordInput)),
+            ),
+            Match.when(StripeEventType.ChargeRefunded, () =>
+              handled(stripePaymentProvider.recordChargeRefunded(recordInput)),
+            ),
+            Match.when(StripeEventType.ChargeRefundUpdated, () =>
+              handled(stripePaymentProvider.recordRefundUpdated(recordInput)),
+            ),
+            Match.when(StripeEventType.ChargeDisputeClosed, () =>
+              handled(stripePaymentProvider.recordDisputeClosed(recordInput)),
+            ),
+            Match.orElse(() => Effect.succeed(ack(false))),
+          )) as StripeAcceptWebhookEventResult;
+
+          // Wire-level dedup ledger: one row per Stripe `event.id`, regardless of
+          // routing. UNIQUE on (configurationId, event.id) makes a duplicate
+          // delivery a no-op insert and leaves an earlier parked row's result
+          // untouched.
+          yield* queries.insertNotificationProcessedIfAbsent({
+            id: generateId("paymentProviderNotification"),
+            notificationSubtype: null,
+            notificationType: event.type,
+            notificationUuid: event.id,
+            parkedRawPayload: null,
+            parkedUntilProviderProductKey: null,
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            providerId: "stripe",
+            result: terminalLedgerResult ?? (matchResult.handled ? "applied" : "ignored"),
+            resultNote: terminalLedgerResultNote,
+            source: "webhook",
+          });
+
+          yield* Effect.annotateCurrentSpan({
+            "stripe.webhook_result":
+              terminalLedgerResult ?? (matchResult.handled ? "applied" : "ignored"),
+          });
+          return matchResult;
+        },
+        // Collapse every internal failure into the single public error, stamping
+        // the routing `kind`. Product-not-mapped and terminal record failures
+        // are handled inside the match (parked / "failed" ledger row) and never
+        // reach here.
+        (effect) => effect.pipe(Effect.catch((error) => Effect.fail(toStripeServiceError(error)))),
+      );
+
+      /**
+       * Replays parked notifications for a `(configurationId, providerProductKey)`
+       * mapping after the operator creates/activates it. Each parked raw body is
+       * re-run through `acceptWebhookEvent({ isReplay: true })`; the per-event
+       * `purchase_ledger` idempotency gate keeps the replay safe against any
+       * live event for the same logical transaction. Returns counts for logging.
+       */
+      const replayParkedNotificationsForProductMapping = Effect.fn(
+        "replayParkedNotificationsForProductMapping",
+      )(function* (input: {
+        readonly paymentProviderConfigurationId: string;
+        readonly providerProductKey: string;
+      }) {
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.configuration_id",
+          input.paymentProviderConfigurationId,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.provider_product_key",
+          input.providerProductKey,
+        );
+        const parked = yield* queries.findParkedNotifications({
+          paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+          providerProductKey: input.providerProductKey,
+        });
+        let appliedCount = 0;
+        let failedCount = 0;
+        for (const row of parked) {
+          const rawPayload = row.parkedRawPayload;
+          if (typeof rawPayload !== "string") {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: "parked_raw_payload missing or not a string",
+            });
+            failedCount++;
+            continue;
+          }
+          const replayed = yield* acceptWebhookEvent({
+            isReplay: true,
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            rawBody: rawPayload,
+            receivedAt: new Date(),
+            signatureHeader: "",
+          }).pipe(
+            Effect.match({
+              onFailure: (error) => ({ error: String(error), ok: false as const }),
+              onSuccess: () => ({ ok: true as const }),
+            }),
+          );
+          if (replayed.ok) {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "applied",
+              resultNote: null,
+            });
+            appliedCount++;
+          } else {
+            yield* queries.markParkedNotificationResolved({
+              id: row.id,
+              result: "failed",
+              resultNote: replayed.error.slice(0, 500),
+            });
+            failedCount++;
+          }
+        }
+        yield* Effect.annotateCurrentSpan({
+          "stripe.failed_count": failedCount,
+          "stripe.total_count": parked.length,
+        });
+        return { appliedCount, failedCount, totalParked: parked.length };
+      });
+
+      return { acceptWebhookEvent, replayParkedNotificationsForProductMapping } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(StripeWebhookHandlerService)(StripeWebhookHandlerService.make).pipe(
+    Layer.provideMerge(StripePaymentProvider.layer),
+  );
+}
diff --git a/packages/core/src/services/paywallAssets/PaywallAssetService.test.ts b/packages/core/src/services/paywallAssets/PaywallAssetService.test.ts
new file mode 100644
index 000000000..5dd310b08
--- /dev/null
+++ b/packages/core/src/services/paywallAssets/PaywallAssetService.test.ts
@@ -0,0 +1,35 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import type { AnyAuthSession } from "../../domain/auth/Auth.ts";
+import { isSessionOrganizationMember } from "../../utils/permissions.ts";
+
+const makeSession = (orgIds: readonly string[]): AnyAuthSession => ({
+  cookie: null,
+  method: "secret-key",
+  name: "ci-key",
+  organizations: orgIds.map((id) => ({
+    id,
+    logo: null,
+    name: id,
+    permissions: ["project:all"],
+    slug: id,
+    workosOrganizationId: null,
+  })),
+  person: null,
+  projects: [],
+  user: null,
+});
+
+describe("isSessionOrganizationMember", () => {
+  it("is true when the org is present in the session", () => {
+    expect(isSessionOrganizationMember(makeSession(["org_1", "org_2"]), "org_2")).toBe(true);
+  });
+
+  it("is false when the org is absent (cross-org access denied)", () => {
+    expect(isSessionOrganizationMember(makeSession(["org_1"]), "org_2")).toBe(false);
+  });
+
+  it("is false for a session with no organizations", () => {
+    expect(isSessionOrganizationMember(makeSession([]), "org_1")).toBe(false);
+  });
+});
diff --git a/packages/core/src/services/paywallAssets/PaywallAssetService.ts b/packages/core/src/services/paywallAssets/PaywallAssetService.ts
new file mode 100644
index 000000000..e9a600fb3
--- /dev/null
+++ b/packages/core/src/services/paywallAssets/PaywallAssetService.ts
@@ -0,0 +1,245 @@
+import { Cause, Context, Effect, Layer, Schema } from "effect";
+
+import { Db, desc, eq, paywallAsset } from "@voidhash/db";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  PaywallAssetValidationError,
+  derivePaywallAssetKey,
+  isOwnedPaywallAssetUrl,
+  paywallAssetKeyFromUrl,
+  paywallAssetSha256Hex,
+  validateAndDecodePaywallAsset,
+} from "../../domain/paywallAssetImage.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { isSessionOrganizationMember } from "../../utils/permissions.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+
+/** Catch-all error raised by {@link PaywallAssetService} public methods. */
+export class PaywallAssetServiceError extends Schema.TaggedErrorClass<PaywallAssetServiceError>(
+  "PaywallAssetServiceError",
+)("PaywallAssetServiceError", { message: Schema.String }) {}
+
+/** Raised when the caller is not a member of the target asset's organization. */
+export class PaywallAssetForbiddenError extends Schema.TaggedErrorClass<PaywallAssetForbiddenError>(
+  "PaywallAssetForbiddenError",
+)("PaywallAssetForbiddenError", { message: Schema.String }) {}
+
+/** Raised when the referenced asset row does not exist. */
+export class PaywallAssetNotFoundError extends Schema.TaggedErrorClass<PaywallAssetNotFoundError>(
+  "PaywallAssetNotFoundError",
+)("PaywallAssetNotFoundError", { assetId: Schema.String }) {}
+
+/** One stored paywall asset row as returned by the service. */
+export interface PaywallAssetRow {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly name: string;
+  readonly url: string;
+  readonly contentType: string;
+  readonly sizeBytes: number;
+  readonly width: number | null;
+  readonly height: number | null;
+  readonly createdAt: Date;
+}
+
+/**
+ * `PaywallAssetService` owns the organization-scoped image asset library backing
+ * paywall backgrounds. Callers upload images (validated + content-addressed),
+ * list/rename/delete them; stored public URLs are reused as paywall background
+ * images.
+ *
+ * Authorization is a plain org-membership check derived from the authenticated
+ * {@link AuthSession} — every member of an organization may manage its assets.
+ * `Db` and `PublicFileStore` are provided by the application root; both are
+ * abstract ports, so the service stays infra-pure.
+ */
+export class PaywallAssetService extends Context.Service<PaywallAssetService>()(
+  "PaywallAssetService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const publicFileStore = yield* PublicFileStore;
+
+      /** Assert the session is a member of `organizationId`, else fail forbidden. */
+      const assertMember = (organizationId: string) =>
+        Effect.gen(function* () {
+          const session = yield* AuthSession;
+          if (!isSessionOrganizationMember(session, organizationId)) {
+            return yield* Effect.fail(
+              new PaywallAssetForbiddenError({
+                message: `Not a member of organization ${organizationId}.`,
+              }),
+            );
+          }
+        });
+
+      const rowToAsset = (row: typeof paywallAsset.$inferSelect): PaywallAssetRow => ({
+        id: row.id,
+        organizationId: row.organizationId,
+        name: row.name,
+        url: row.url,
+        contentType: row.contentType,
+        sizeBytes: row.sizeBytes,
+        width: row.width,
+        height: row.height,
+        createdAt: row.createdAt,
+      });
+
+      const upload = Effect.fn("uploadPaywallAsset")(
+        function* (input: {
+          readonly organizationId: string;
+          readonly name: string;
+          readonly contentType: string;
+          readonly imageBase64: string;
+          readonly width?: number | null;
+          readonly height?: number | null;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          yield* assertMember(input.organizationId);
+
+          const { bytes, ext } = yield* validateAndDecodePaywallAsset(input);
+          const sha256 = yield* paywallAssetSha256Hex(bytes);
+          const key = derivePaywallAssetKey(input.organizationId, sha256, ext);
+
+          // Content-addressed dedup: an identical image already uploaded to this
+          // org resolves to the same key. Return the existing row instead of
+          // re-uploading (the object is already stored).
+          const existing = yield* db
+            .select()
+            .from(paywallAsset)
+            .where(eq(paywallAsset.key, key))
+            .limit(1);
+          if (existing[0]) {
+            return rowToAsset(existing[0]);
+          }
+
+          yield* publicFileStore.putObject({ key, body: bytes, contentType: input.contentType });
+          const url = publicFileStore.publicUrl(key);
+
+          const id = generateId("paywallAsset");
+          const inserted = yield* db
+            .insert(paywallAsset)
+            .values({
+              id,
+              organizationId: input.organizationId,
+              name: input.name.slice(0, 255),
+              key,
+              url,
+              contentType: input.contentType,
+              sizeBytes: bytes.length,
+              width: input.width ?? null,
+              height: input.height ?? null,
+            })
+            .returning();
+
+          return rowToAsset(inserted[0]!);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallAssetServiceError({ message: String(error.cause) })),
+              PublicFileStoreError: (error) =>
+                Effect.fail(new PaywallAssetServiceError({ message: error.cause })),
+            }),
+          ),
+      );
+
+      const list = Effect.fn("listPaywallAssets")(
+        function* (input: { readonly organizationId: string }) {
+          yield* assertMember(input.organizationId);
+          const rows = yield* db
+            .select()
+            .from(paywallAsset)
+            .where(eq(paywallAsset.organizationId, input.organizationId))
+            .orderBy(desc(paywallAsset.createdAt), desc(paywallAsset.id));
+          return rows.map(rowToAsset);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallAssetServiceError({ message: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /** Load a row by id or fail not-found. */
+      const findRow = (assetId: string) =>
+        Effect.gen(function* () {
+          const rows = yield* db
+            .select()
+            .from(paywallAsset)
+            .where(eq(paywallAsset.id, assetId))
+            .limit(1);
+          const row = rows[0];
+          if (!row) {
+            return yield* Effect.fail(new PaywallAssetNotFoundError({ assetId }));
+          }
+          return row;
+        });
+
+      const rename = Effect.fn("renamePaywallAsset")(
+        function* (input: { readonly assetId: string; readonly name: string }) {
+          const row = yield* findRow(input.assetId);
+          yield* assertMember(row.organizationId);
+          const updated = yield* db
+            .update(paywallAsset)
+            .set({ name: input.name.slice(0, 255) })
+            .where(eq(paywallAsset.id, input.assetId))
+            .returning();
+          return rowToAsset(updated[0]!);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallAssetServiceError({ message: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const remove = Effect.fn("deletePaywallAsset")(
+        function* (input: { readonly assetId: string }) {
+          const row = yield* findRow(input.assetId);
+          yield* assertMember(row.organizationId);
+
+          yield* db.delete(paywallAsset).where(eq(paywallAsset.id, input.assetId));
+
+          // Best-effort object cleanup, scoped to keys we own for this org (the
+          // `key` unique index guarantees no other row references this object).
+          if (isOwnedPaywallAssetUrl(row.url, row.organizationId, publicFileStore.publicBaseUrl)) {
+            const key = paywallAssetKeyFromUrl(
+              row.url,
+              row.organizationId,
+              publicFileStore.publicBaseUrl,
+            );
+            if (key !== null) {
+              yield* publicFileStore
+                .deleteObject(key)
+                .pipe(
+                  Effect.catchCause((cause) =>
+                    Effect.logWarning(
+                      `Failed to delete paywall asset object ${key}: ${Cause.pretty(cause)}`,
+                    ),
+                  ),
+                );
+            }
+          }
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallAssetServiceError({ message: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return { upload, list, rename, delete: remove } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaywallAssetService)(PaywallAssetService.make);
+}
diff --git a/packages/core/src/services/paywallDeploys/PaywallArtifactStore.ts b/packages/core/src/services/paywallDeploys/PaywallArtifactStore.ts
new file mode 100644
index 000000000..cc6cbba99
--- /dev/null
+++ b/packages/core/src/services/paywallDeploys/PaywallArtifactStore.ts
@@ -0,0 +1,62 @@
+import { Context, type Effect, Schema } from "effect";
+
+/**
+ * Catch-all error for {@link PaywallArtifactStore} operations. Adapters wrap
+ * any storage-backend failure (S3/R2 SDK errors, network failures) into this
+ * single tag so the {@link PaywallDeployService} catch boundary stays small.
+ */
+export class PaywallArtifactStoreError extends Schema.TaggedErrorClass<PaywallArtifactStoreError>(
+  "PaywallArtifactStoreError",
+)("PaywallArtifactStoreError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface PaywallArtifactObject {
+  readonly body: Uint8Array;
+  readonly contentType: string | null;
+}
+
+export interface PaywallArtifactHead {
+  readonly size: number;
+}
+
+export interface PaywallArtifactStoreShape {
+  /**
+   * Logical bucket name recorded on `paywall_release.s3Bucket` rows and used
+   * by URL builders (`{cdnUrl}/{bucket}/{key}`). Carried on the port — not a
+   * separate config service — because every adapter already knows which
+   * bucket it writes to, and release rows must record exactly that bucket.
+   */
+  readonly bucketName: string;
+
+  /** Writes raw bytes at `key`, overwriting any existing object (idempotent). */
+  readonly putObject: (input: {
+    readonly key: string;
+    readonly body: Uint8Array;
+    readonly contentType: string | undefined;
+  }) => Effect.Effect<void, PaywallArtifactStoreError>;
+
+  /** Reads the object at `key`; `null` when it does not exist. */
+  readonly getObject: (
+    key: string,
+  ) => Effect.Effect<PaywallArtifactObject | null, PaywallArtifactStoreError>;
+
+  /** Object metadata without the body; `null` when it does not exist. */
+  readonly head: (
+    key: string,
+  ) => Effect.Effect<PaywallArtifactHead | null, PaywallArtifactStoreError>;
+}
+
+/**
+ * Provider-agnostic port for the object store holding paywall deploy blobs
+ * (upload layout `blobs/<projectId>/<sha256>`) and the public serving layout
+ * (`p/<contentHash>/...`, contract §5). The live adapter (S3/R2) is wired by
+ * the application root — core code only touches the tag, keeping storage SDK
+ * dependencies out of `packages/core` and the service trivially fakeable in
+ * tests with an in-memory map.
+ */
+export class PaywallArtifactStore extends Context.Service<
+  PaywallArtifactStore,
+  PaywallArtifactStoreShape
+>()("infrastructure/PaywallArtifactStore") {}
diff --git a/packages/core/src/services/paywallDeploys/PaywallDeployManifest.contract.test.ts b/packages/core/src/services/paywallDeploys/PaywallDeployManifest.contract.test.ts
new file mode 100644
index 000000000..a22ae506a
--- /dev/null
+++ b/packages/core/src/services/paywallDeploys/PaywallDeployManifest.contract.test.ts
@@ -0,0 +1,444 @@
+/**
+ * Contract test locking this server trust-boundary module to the OSS single
+ * source of truth, `@voidhash/paywalls/schema` (Wave 2 of the paywall authoring
+ * unification, `docs/feature-specs/paywall-authoring-unification.md`).
+ *
+ * The OSS package ships dependency-free validators (`parsePreviewTree`,
+ * `parseComponentManifest`) that mirror the effect-Schema decoders here so the
+ * CLI, studio sandbox, and any JS consumer validate the same §2/§3 wire formats
+ * without pulling in `effect`. This test is the "hard gate" from the spec's Top
+ * Risks §3: it fails the moment the two drift on version, style vocabulary, or
+ * accept/reject behaviour.
+ *
+ * DELIBERATE DIVERGENCE (Wave-1 handoff): the OSS validators are stricter than
+ * these raw effect-Schema struct decodes on exactly four points, because the
+ * server enforces those at an ADJACENT layer, not at struct decode:
+ *   1. `tree.state` must match {@link PREVIEW_STATE_PATTERN} — server enforces via
+ *      `validateManifestConstraints` on `components[].previews[].state`.
+ *   2. `manifest.previewStates` must be non-empty — server enforces via
+ *      `validateManifestConstraints` (`previews must not be empty`).
+ *   3. `manifest.hostData` must be a subset of `{"products"}` — server enforces
+ *      via the `ManifestHostData` type (`"products"` is the only Phase-1 kind).
+ *   4. Current OSS accepts only preview tree v2, while the server temporarily
+ *      retains v1 decode support during the motion rollout.
+ * Those four get their own assertions below showing OSS-strict /
+ * server-lenient-at-this-layer, per the spec — the contract test accounts for
+ * the difference, it does not "fix" it.
+ */
+import { Effect, Result, Schema } from "effect";
+import {
+  COMPONENT_MANIFEST_VERSION as OSS_COMPONENT_MANIFEST_VERSION,
+  PAYWALL_STYLE_KEY_LIST as OSS_STYLE_KEY_LIST,
+  PAYWALL_TREE_VERSION as OSS_TREE_VERSION,
+  parseComponentManifest,
+  parsePreviewTree,
+  type ComponentManifest as OssComponentManifest,
+  type PaywallNodeTree,
+  type PaywallStyle,
+} from "@voidhash/paywalls/schema";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  COMPONENT_MANIFEST_VERSION,
+  ComponentManifestSchema,
+  PREVIEW_TREE_VERSION,
+  PreviewStyleSchema,
+  PreviewTreeSchema,
+  strictParseOptions,
+  type ComponentManifest,
+  type PreviewStyle,
+  type PreviewTree,
+} from "./PaywallDeployManifest.ts";
+
+// ---------------------------------------------------------------------------
+// Server decode helpers (the trust boundary), mirroring the unit-test style.
+// ---------------------------------------------------------------------------
+
+const decodePreviewTree = (input: unknown) =>
+  Effect.runSync(
+    Effect.result(Schema.decodeUnknownEffect(PreviewTreeSchema, strictParseOptions)(input)),
+  );
+
+const decodeComponentManifest = (input: unknown) =>
+  Effect.runSync(
+    Effect.result(Schema.decodeUnknownEffect(ComponentManifestSchema, strictParseOptions)(input)),
+  );
+
+const serverAcceptsTree = (input: unknown) => Result.isSuccess(decodePreviewTree(input));
+const serverAcceptsManifest = (input: unknown) => Result.isSuccess(decodeComponentManifest(input));
+
+const ossAcceptsTree = (input: unknown) => parsePreviewTree(input).ok;
+const ossAcceptsManifest = (input: unknown) => parseComponentManifest(input).ok;
+
+// ---------------------------------------------------------------------------
+// Fixtures
+// ---------------------------------------------------------------------------
+
+const validTree = () => ({
+  treeVersion: OSS_TREE_VERSION,
+  state: "default",
+  root: {
+    type: "view",
+    style: {
+      flexDirection: "column",
+      paddingTop: 16,
+      paddingBottom: 16,
+      paddingLeft: 16,
+      paddingRight: 16,
+      backgroundColor: "#ffffff",
+      gap: 8,
+    },
+    children: [
+      { type: "text", style: { fontSize: 18, fontWeight: 700, color: "#111827" }, text: "Go Pro" },
+      {
+        type: "pressable",
+        style: {
+          paddingTop: 12,
+          paddingBottom: 12,
+          paddingLeft: 12,
+          paddingRight: 12,
+          borderTopLeftRadius: 8,
+          borderTopRightRadius: 8,
+          borderBottomLeftRadius: 8,
+          borderBottomRightRadius: 8,
+          backgroundColor: "#2563eb",
+        },
+        children: [{ type: "text", style: { color: "#ffffff" }, text: "Subscribe" }],
+        action: "purchase",
+      },
+      {
+        type: "image",
+        style: { width: 120, height: 120 },
+        src: "https://x/hero.png",
+        resizeMode: "cover",
+      },
+      { type: "slot" },
+    ],
+  },
+});
+
+const validManifest = () => ({
+  manifestVersion: 2,
+  title: "Pro Card",
+  description: "Upsell card",
+  props: {
+    heading: { kind: "string", optional: false },
+    accent: { kind: "string", editor: "color", optional: true, default: "#2563eb" },
+    count: { kind: "number", optional: true, default: 3 },
+    featured: { kind: "boolean", optional: true },
+    variant: { kind: "select", options: ["a", "b"], optional: false },
+    hero: { kind: "image", optional: true },
+    product: { kind: "ref", refType: "product", optional: false },
+    child: { kind: "component", optional: true },
+    bullets: { kind: "array", item: { kind: "string" }, optional: true },
+  },
+  actions: { purchase: { payload: {} }, dismiss: { payload: { reason: { kind: "string" } } } },
+  slot: true,
+  previewStates: ["default", "loading"],
+  hostData: ["products"],
+});
+
+// ---------------------------------------------------------------------------
+// Version constants
+// ---------------------------------------------------------------------------
+
+describe("OSS ↔ server version constants", () => {
+  it("preview tree version matches", () => {
+    expect(OSS_TREE_VERSION).toBe(PREVIEW_TREE_VERSION);
+  });
+
+  it("component manifest version matches", () => {
+    expect(OSS_COMPONENT_MANIFEST_VERSION).toBe(COMPONENT_MANIFEST_VERSION);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// §3.1 style vocabulary
+// ---------------------------------------------------------------------------
+
+describe("OSS ↔ server style vocabulary", () => {
+  it("set-equals the server preview style schema keys", () => {
+    // Introspect the effect Schema's struct fields to get the exact accepted keys.
+    const serverKeys = Object.keys(PreviewStyleSchema.fields).sort();
+    const ossKeys = [...OSS_STYLE_KEY_LIST].sort();
+    expect(ossKeys).toStrictEqual(serverKeys);
+  });
+
+  it("every OSS style key is decoded by the server, and vice versa", () => {
+    // A tree whose view style carries EVERY vocabulary key must decode on the
+    // server — proving it accepts the full OSS set. Scalar keys take a numeric
+    // value; the three structured background keys take a valid sample matching
+    // the OSS validator's shape (a bare `1` is not a legal object there).
+    const structured: Record<string, unknown> = {
+      backgroundType: "gradient",
+      backgroundGradient: {
+        kind: "linear",
+        startX: 0,
+        startY: 0,
+        endX: 1,
+        endY: 1,
+        stops: [{ color: "rgba(0, 0, 0, 1)", position: 0 }],
+      },
+      backgroundImage: { url: "https://x/y.png", resizeMode: "cover" },
+    };
+    const style = Object.fromEntries(OSS_STYLE_KEY_LIST.map((key) => [key, structured[key] ?? 1]));
+    expect(
+      serverAcceptsTree({
+        treeVersion: OSS_TREE_VERSION,
+        state: "default",
+        root: { type: "view", style, children: [] },
+      }),
+    ).toBe(true);
+    // Conversely, any key OUTSIDE the OSS set is rejected by both.
+    const bogus = {
+      treeVersion: OSS_TREE_VERSION,
+      state: "default",
+      root: { type: "view", style: { zoom: 2 }, children: [] },
+    };
+    expect(serverAcceptsTree(bogus)).toBe(false);
+    expect(ossAcceptsTree(bogus)).toBe(false);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Fixture agreement — §3 preview trees
+// ---------------------------------------------------------------------------
+
+describe("OSS ↔ server preview tree fixture agreement", () => {
+  it("both accept a valid tree", () => {
+    expect(ossAcceptsTree(validTree())).toBe(true);
+    expect(serverAcceptsTree(validTree())).toBe(true);
+  });
+
+  const rejectedByBoth: ReadonlyArray<readonly [string, unknown]> = [
+    [
+      "unknown node type",
+      {
+        treeVersion: OSS_TREE_VERSION,
+        state: "default",
+        root: { type: "canvas", style: {}, children: [] },
+      },
+    ],
+    [
+      "unknown key on a node",
+      {
+        treeVersion: OSS_TREE_VERSION,
+        state: "default",
+        root: { type: "view", style: {}, children: [], onPress: "x" },
+      },
+    ],
+    [
+      "out-of-vocabulary style key",
+      {
+        treeVersion: OSS_TREE_VERSION,
+        state: "default",
+        root: { type: "view", style: { boxShadow: "0 0 1px" }, children: [] },
+      },
+    ],
+    [
+      "wrong treeVersion",
+      { treeVersion: 3, state: "default", root: { type: "view", style: {}, children: [] } },
+    ],
+    [
+      "bad image resizeMode",
+      {
+        treeVersion: OSS_TREE_VERSION,
+        state: "default",
+        root: { type: "image", style: {}, src: "x", resizeMode: "fill" },
+      },
+    ],
+    ["missing root", { treeVersion: OSS_TREE_VERSION, state: "default" }],
+    [
+      "text node missing text",
+      {
+        treeVersion: OSS_TREE_VERSION,
+        state: "default",
+        root: { type: "text", style: {} },
+      },
+    ],
+  ];
+
+  for (const [name, input] of rejectedByBoth) {
+    it(`both reject: ${name}`, () => {
+      expect(ossAcceptsTree(input), `OSS should reject ${name}`).toBe(false);
+      expect(serverAcceptsTree(input), `server should reject ${name}`).toBe(false);
+    });
+  }
+});
+
+// ---------------------------------------------------------------------------
+// Fixture agreement — §2 component manifests
+// ---------------------------------------------------------------------------
+
+describe("OSS ↔ server component manifest fixture agreement", () => {
+  it("both accept a valid manifest", () => {
+    expect(ossAcceptsManifest(validManifest())).toBe(true);
+    expect(serverAcceptsManifest(validManifest())).toBe(true);
+  });
+
+  it("both accept `localizable` on string and image props", () => {
+    const input = {
+      ...validManifest(),
+      props: {
+        heading: { kind: "string", optional: false, localizable: true },
+        hero: { kind: "image", optional: true, localizable: true },
+      },
+    };
+    expect(ossAcceptsManifest(input)).toBe(true);
+    expect(serverAcceptsManifest(input)).toBe(true);
+  });
+
+  const rejectedByBoth: ReadonlyArray<readonly [string, unknown]> = [
+    // `localizable` is a string/image-only flag; on any other kind it is an
+    // unknown key both sides reject.
+    [
+      "localizable on a number prop",
+      { ...validManifest(), props: { x: { kind: "number", localizable: true, optional: false } } },
+    ],
+    ["wrong manifestVersion", { ...validManifest(), manifestVersion: 1 }],
+    ["unknown top-level key", { ...validManifest(), extraneous: true }],
+    // v2 dropped `id`: a component is identified by its file path, so an
+    // id-bearing manifest is an unknown-key rejection on both sides.
+    ["id-bearing manifest", { ...validManifest(), id: "pro-card" }],
+    ["unknown prop kind", { ...validManifest(), props: { x: { kind: "date", optional: false } } }],
+    [
+      "unknown key on a prop",
+      { ...validManifest(), props: { x: { kind: "string", weird: 1, optional: false } } },
+    ],
+    [
+      "empty select options",
+      { ...validManifest(), props: { x: { kind: "select", options: [], optional: false } } },
+    ],
+    [
+      "array item that is itself an array",
+      {
+        ...validManifest(),
+        props: { x: { kind: "array", item: { kind: "array" }, optional: false } },
+      },
+    ],
+    [
+      "editor on a non-string prop",
+      { ...validManifest(), props: { x: { kind: "number", editor: "color", optional: false } } },
+    ],
+    [
+      "malformed action payload kind",
+      { ...validManifest(), actions: { go: { payload: { f: { kind: "object" } } } } },
+    ],
+    ["non-boolean slot", { ...validManifest(), slot: "yes" }],
+    [
+      "bad ref refType",
+      { ...validManifest(), props: { x: { kind: "ref", refType: "user", optional: false } } },
+    ],
+    // `default` on a ref/component prop: the server's Ref/Component prop structs
+    // carry no `default` field, so a present one is an excess property both sides
+    // reject. The OSS validator now splits its base key set to match.
+    [
+      "default on a ref prop",
+      {
+        ...validManifest(),
+        props: { x: { kind: "ref", refType: "product", default: "p", optional: false } },
+      },
+    ],
+    [
+      "default on a component prop",
+      { ...validManifest(), props: { x: { kind: "component", default: "z", optional: false } } },
+    ],
+    // Array items are validated exactly like top-level props (minus the `array`
+    // kind), so a malformed common field on an item is rejected by both.
+    [
+      "malformed common field on an array item",
+      {
+        ...validManifest(),
+        props: { x: { kind: "array", item: { kind: "string", optional: "yes" }, optional: false } },
+      },
+    ],
+    [
+      "wrong-typed default on an array item",
+      {
+        ...validManifest(),
+        props: { x: { kind: "array", item: { kind: "number", default: "nope" }, optional: false } },
+      },
+    ],
+  ];
+
+  for (const [name, input] of rejectedByBoth) {
+    it(`both reject: ${name}`, () => {
+      expect(ossAcceptsManifest(input), `OSS should reject ${name}`).toBe(false);
+      expect(serverAcceptsManifest(input), `server should reject ${name}`).toBe(false);
+    });
+  }
+});
+
+// ---------------------------------------------------------------------------
+// The four DELIBERATE layer-difference points (Wave-1 handoff + motion rollout).
+// OSS `./schema` is stricter here; the server enforces the same rule one layer
+// out (validateManifestConstraints / the ManifestHostData type), so its raw
+// struct decode is intentionally lenient. See the module doc comment.
+// ---------------------------------------------------------------------------
+
+describe("deliberate OSS-strict / server-lenient-at-this-layer divergences", () => {
+  it("tree.state pattern: OSS rejects, server struct-decode accepts", () => {
+    // Server: PreviewTreeSchema `state: Schema.String`; the PREVIEW_STATE_PATTERN
+    // check lives in validateManifestConstraints on the manifest preview state.
+    const spacedState = {
+      treeVersion: OSS_TREE_VERSION,
+      state: "has space",
+      root: { type: "view", style: {}, children: [] },
+    };
+    expect(ossAcceptsTree(spacedState)).toBe(false);
+    expect(serverAcceptsTree(spacedState)).toBe(true);
+  });
+
+  it("legacy preview tree v1: current OSS rejects, rollout server decode accepts", () => {
+    const legacyTree = { ...validTree(), treeVersion: 1 };
+    expect(ossAcceptsTree(legacyTree)).toBe(false);
+    expect(serverAcceptsTree(legacyTree)).toBe(true);
+  });
+
+  it("previewStates non-empty: OSS rejects empty, server struct-decode accepts", () => {
+    // Server: ComponentManifestSchema `previewStates` is optional Array; the
+    // "previews must not be empty" rule lives in validateManifestConstraints.
+    const emptyStates = { ...validManifest(), previewStates: [] };
+    expect(ossAcceptsManifest(emptyStates)).toBe(false);
+    expect(serverAcceptsManifest(emptyStates)).toBe(true);
+  });
+
+  it("hostData subset: OSS rejects unknown host data, server struct-decode accepts", () => {
+    // Server: ComponentManifestSchema `hostData` is optional Array<String>; the
+    // `"products"`-only constraint is the ManifestHostData type, one layer out.
+    const badHost = { ...validManifest(), hostData: ["users"] };
+    expect(ossAcceptsManifest(badHost)).toBe(false);
+    expect(serverAcceptsManifest(badHost)).toBe(true);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Type assignability (compile-time only). The server's decoded types use
+// `string | number` style values (a strict SUPERSET of OSS's per-key literal
+// unions), so OSS values assign INTO the server types. The reverse (server →
+// OSS) does not hold for styles and is intentionally not asserted.
+// ---------------------------------------------------------------------------
+
+describe("type assignability (compile-time)", () => {
+  it("OSS PaywallNodeTree is assignable to the server PreviewTree", () => {
+    const ossTree = validTree() as unknown as PaywallNodeTree;
+    const asServer: PreviewTree = ossTree;
+    expect(asServer.treeVersion).toBe(OSS_TREE_VERSION);
+  });
+
+  it("OSS PaywallStyle is assignable to the server PreviewStyle", () => {
+    const ossStyle: PaywallStyle = { flexDirection: "row", flex: 1, color: "#000" };
+    const asServer: PreviewStyle = ossStyle;
+    expect(asServer.flex).toBe(1);
+  });
+
+  it("a valid manifest satisfies both the OSS and the server manifest types", () => {
+    // The two `ComponentManifest` types are NOT mutually assignable — OSS types
+    // a prop `default` as `unknown` and `optional` as required, while the server
+    // narrows `default` per kind and leaves `optional` optional. So instead of a
+    // whole-value alias we assert one fixture is a member of BOTH types.
+    const oss: OssComponentManifest = validManifest() as unknown as OssComponentManifest;
+    const server: ComponentManifest = validManifest() as unknown as ComponentManifest;
+    expect(oss.manifestVersion).toBe(server.manifestVersion);
+  });
+});
diff --git a/packages/core/src/services/paywallDeploys/PaywallDeployManifest.ts b/packages/core/src/services/paywallDeploys/PaywallDeployManifest.ts
new file mode 100644
index 000000000..045816a82
--- /dev/null
+++ b/packages/core/src/services/paywallDeploys/PaywallDeployManifest.ts
@@ -0,0 +1,1169 @@
+/**
+ * Wire-format schemas + pure helpers for paywall code deploys.
+ *
+ * Mirrors `docs/specs/paywall-deploy-contract.md` (the source of truth) exactly:
+ * §1 deploy manifest (`schemaVersion: 2`), §2 component manifest, §3 preview
+ * node tree, §1.2 contentHash recomputation, and the §5 serving-layout key
+ * derivation. Everything in this module is pure — service-side orchestration
+ * lives in `PaywallDeployService`.
+ */
+import { Effect, Schema } from "effect";
+
+import { createHash } from "../apiKeys/create-hash.ts";
+
+/** Manifest major version this server build understands (contract §1/§8). */
+export const DEPLOY_MANIFEST_SCHEMA_VERSION = 2;
+
+/**
+ * Component manifest version validated at finalize (contract §2/§8). v2 dropped
+ * the manifest `id` field — a component is identified by its file path in the
+ * paywall document, not an embedded slug — kept in lockstep with the OSS
+ * `@voidhash/paywalls/schema` single source of truth (enforced by the contract
+ * test).
+ */
+export const COMPONENT_MANIFEST_VERSION = 2;
+
+/** New preview artifacts emit v2; decoders retain v1 support during rollout. */
+export const PREVIEW_TREE_VERSION = 2;
+
+/** `paywalls[].id` / `components[].id` slug constraint (contract §1.1). */
+export const DEPLOY_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/;
+
+/**
+ * `components[].previews[].state` constraint (contract §1.1): state names
+ * become §5.1 serving object keys and URL path segments, so they are limited
+ * to a safe single-segment alphabet.
+ */
+export const PREVIEW_STATE_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
+
+/** Lowercase hex sha256 of raw bytes (contract §1). */
+export const SHA256_HEX_PATTERN = /^[a-f0-9]{64}$/;
+
+/** §1.1 size caps, in bytes. */
+export const SIZE_CAPS = {
+  jsBundle: 5 * 1024 * 1024,
+  asset: 10 * 1024 * 1024,
+  deployManifest: 1 * 1024 * 1024,
+  componentManifest: 256 * 1024,
+  previewTree: 512 * 1024,
+  html: 1 * 1024 * 1024,
+  sourceFile: 1 * 1024 * 1024,
+  config: 256 * 1024,
+} as const;
+
+/**
+ * §1.1 contentType grammar: a bare media type plus an optional charset
+ * parameter only. Inherently rejects CR/LF and other control bytes, so a
+ * declared value is safe to store on the artifact object and echo verbatim
+ * as a `Content-Type` response header.
+ */
+export const CONTENT_TYPE_PATTERN = /^[\w.+-]+\/[\w.+-]+(;\s*charset=[\w-]+)?$/i;
+
+/** Longest contentType value accepted (bare type + charset comfortably fit). */
+export const CONTENT_TYPE_MAX_LENGTH = 100;
+
+/**
+ * §1.1 contentType allowlist, compared on the bare type (the segment before
+ * `;`) — {@link CONTENT_TYPE_PATTERN} constrains any suffix to a charset
+ * parameter only.
+ */
+export const CONTENT_TYPE_ALLOWLIST: ReadonlySet<string> = new Set([
+  "text/html",
+  "text/javascript",
+  "application/json",
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "image/svg+xml",
+  "font/ttf",
+  "font/otf",
+  "font/woff",
+  "font/woff2",
+]);
+
+/**
+ * Strictest decode the server applies to wire payloads: every issue is
+ * reported and unknown keys are rejected (contract: schemas "mirror this
+ * document exactly"; §3 additionally mandates rejecting unknown keys).
+ */
+export const strictParseOptions = {
+  errors: "all",
+  onExcessProperty: "error",
+} as const;
+
+// =============================================================================
+// §1 Deploy manifest
+// =============================================================================
+
+const DeploySlug = Schema.String.check(Schema.isPattern(DEPLOY_SLUG_PATTERN));
+const Sha256Hex = Schema.String.check(Schema.isPattern(SHA256_HEX_PATTERN));
+const FileBytes = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+
+/** `DeployFile = { path, bytes, sha256 }` (contract §1). */
+export const DeployFileSchema = Schema.Struct({
+  path: Schema.String.check(Schema.isMinLength(1)),
+  bytes: FileBytes,
+  sha256: Sha256Hex,
+});
+export type DeployFile = typeof DeployFileSchema.Type;
+
+/** `DeployArtifact = DeployFile + { contentType }` (contract §1). */
+export const DeployArtifactSchema = Schema.Struct({
+  ...DeployFileSchema.fields,
+  contentType: Schema.String.check(
+    Schema.isMaxLength(CONTENT_TYPE_MAX_LENGTH),
+    Schema.isPattern(CONTENT_TYPE_PATTERN),
+  ),
+});
+export type DeployArtifact = typeof DeployArtifactSchema.Type;
+
+/** `variables` values are `string | number | boolean` only (contract §1.1). */
+export const VariableValueSchema = Schema.Union([Schema.String, Schema.Number, Schema.Boolean]);
+export type VariableValue = typeof VariableValueSchema.Type;
+
+export const ManifestPaywallSchema = Schema.Struct({
+  id: DeploySlug,
+  title: Schema.String,
+  description: Schema.optional(Schema.String),
+  products: Schema.Array(Schema.String),
+  variables: Schema.Record(Schema.String, VariableValueSchema),
+  source: DeployFileSchema,
+  artifacts: Schema.Struct({
+    html: DeployArtifactSchema,
+    js: DeployArtifactSchema,
+  }),
+  assets: Schema.Array(Schema.String),
+  contentHash: Sha256Hex,
+});
+export type ManifestPaywall = typeof ManifestPaywallSchema.Type;
+
+export const ManifestComponentPreviewSchema = Schema.Struct({
+  state: Schema.String.check(Schema.isMinLength(1)),
+  file: DeployArtifactSchema,
+});
+export type ManifestComponentPreview = typeof ManifestComponentPreviewSchema.Type;
+
+export const ManifestComponentSchema = Schema.Struct({
+  id: DeploySlug,
+  title: Schema.optional(Schema.String),
+  source: DeployFileSchema,
+  manifest: DeployArtifactSchema,
+  previews: Schema.Array(ManifestComponentPreviewSchema),
+  artifacts: Schema.Struct({
+    runtime: DeployArtifactSchema,
+    panel: Schema.NullOr(DeployArtifactSchema),
+  }),
+  contentHash: Sha256Hex,
+});
+export type ManifestComponent = typeof ManifestComponentSchema.Type;
+
+/** The §1 deploy manifest, `schemaVersion: 2`. */
+export const PaywallDeployManifestSchema = Schema.Struct({
+  schemaVersion: Schema.Literal(DEPLOY_MANIFEST_SCHEMA_VERSION),
+  cliVersion: Schema.String.check(Schema.isMinLength(1)),
+  runtimeVersion: Schema.String.check(Schema.isMinLength(1)),
+  team: Schema.String.check(Schema.isMinLength(1)),
+  project: Schema.String.check(Schema.isMinLength(1)),
+  createdAt: Schema.String,
+  paywalls: Schema.Array(ManifestPaywallSchema),
+  components: Schema.Array(ManifestComponentSchema),
+  config: DeployFileSchema,
+  assets: Schema.Array(DeployArtifactSchema),
+});
+export type PaywallDeployManifest = typeof PaywallDeployManifestSchema.Type;
+
+// =============================================================================
+// §2 Component manifest
+// =============================================================================
+
+const PropCommonFields = {
+  label: Schema.optional(Schema.String),
+  description: Schema.optional(Schema.String),
+  optional: Schema.optional(Schema.Boolean),
+} as const;
+
+const StringPropSchema = Schema.Struct({
+  kind: Schema.Literal("string"),
+  default: Schema.optional(Schema.String),
+  editor: Schema.optional(Schema.Literal("color")),
+  // §2: string/image props may carry per-locale content overrides (OSS
+  // `.localizable()`). Only present when true — kept in lockstep with the OSS
+  // `@voidhash/paywalls` schema, which allows `localizable` on string/image only.
+  localizable: Schema.optional(Schema.Boolean),
+  ...PropCommonFields,
+});
+
+const NumberPropSchema = Schema.Struct({
+  kind: Schema.Literal("number"),
+  default: Schema.optional(Schema.Number),
+  ...PropCommonFields,
+});
+
+const BooleanPropSchema = Schema.Struct({
+  kind: Schema.Literal("boolean"),
+  default: Schema.optional(Schema.Boolean),
+  ...PropCommonFields,
+});
+
+const SelectPropSchema = Schema.Struct({
+  kind: Schema.Literal("select"),
+  options: Schema.Array(Schema.String).check(Schema.isMinLength(1)),
+  default: Schema.optional(Schema.String),
+  ...PropCommonFields,
+});
+
+const ImagePropSchema = Schema.Struct({
+  kind: Schema.Literal("image"),
+  // §2: image default is a string URL/ref.
+  default: Schema.optional(Schema.String),
+  // §2: localizable content override flag — see {@link StringPropSchema}.
+  localizable: Schema.optional(Schema.Boolean),
+  ...PropCommonFields,
+});
+
+const RefPropSchema = Schema.Struct({
+  kind: Schema.Literal("ref"),
+  // P1: products are the only referenceable entity (contract §2).
+  refType: Schema.Literal("product"),
+  ...PropCommonFields,
+});
+
+const ComponentPropSchema = Schema.Struct({
+  kind: Schema.Literal("component"),
+  ...PropCommonFields,
+});
+
+/** `array.item` must be a non-array kind (contract §2). */
+const ArrayItemSchema = Schema.Union([
+  StringPropSchema,
+  NumberPropSchema,
+  BooleanPropSchema,
+  SelectPropSchema,
+  ImagePropSchema,
+  RefPropSchema,
+  ComponentPropSchema,
+]);
+
+const ArrayPropSchema = Schema.Struct({
+  kind: Schema.Literal("array"),
+  item: ArrayItemSchema,
+  // §2: array default is a scalar array.
+  default: Schema.optional(
+    Schema.Array(Schema.Union([Schema.String, Schema.Number, Schema.Boolean])),
+  ),
+  ...PropCommonFields,
+});
+
+export const ComponentPropDefinitionSchema = Schema.Union([
+  StringPropSchema,
+  NumberPropSchema,
+  BooleanPropSchema,
+  SelectPropSchema,
+  ImagePropSchema,
+  RefPropSchema,
+  ComponentPropSchema,
+  ArrayPropSchema,
+]);
+export type ComponentPropDefinition = typeof ComponentPropDefinitionSchema.Type;
+
+const ActionPayloadFieldSchema = Schema.Struct({
+  kind: Schema.Literals(["string", "number", "boolean"]),
+});
+
+export const ComponentActionSchema = Schema.Struct({
+  payload: Schema.Record(Schema.String, ActionPayloadFieldSchema),
+});
+export type ComponentAction = typeof ComponentActionSchema.Type;
+
+/**
+ * The §2 component manifest emitted per component by the CLI. v2 dropped the
+ * manifest `id` field — a component is identified by its file path in the
+ * paywall document, not an embedded slug — so an id-bearing manifest is
+ * rejected here (unknown key under {@link strictParseOptions}).
+ */
+export const ComponentManifestSchema = Schema.Struct({
+  manifestVersion: Schema.Literal(COMPONENT_MANIFEST_VERSION),
+  title: Schema.optional(Schema.String),
+  description: Schema.optional(Schema.String),
+  props: Schema.Record(Schema.String, ComponentPropDefinitionSchema),
+  actions: Schema.optional(Schema.Record(Schema.String, ComponentActionSchema)),
+  slot: Schema.optional(Schema.Boolean),
+  previewStates: Schema.optional(Schema.Array(Schema.String)),
+  hostData: Schema.optional(Schema.Array(Schema.String)),
+});
+export type ComponentManifest = typeof ComponentManifestSchema.Type;
+
+// =============================================================================
+// §3 Preview node tree
+// =============================================================================
+
+/** §3.1 style values: numbers or strings (colors, `"50%"`); no arbitrary CSS. */
+const StyleValue = Schema.Union([Schema.String, Schema.Number]);
+const OptionalStyleValue = Schema.optional(StyleValue);
+
+/**
+ * Which background fill a node renders. Mirrors the OSS validator's
+ * `BACKGROUND_TYPES` literal set exactly.
+ */
+const BackgroundTypeSchema = Schema.Literals(["solid", "gradient", "image"]);
+
+/**
+ * A gradient color stop: an RGBA color string at a finite `0..1` position.
+ * Mirrors the OSS validator's per-stop constraints (`color` string, `position`
+ * a finite number).
+ */
+const GradientStopSchema = Schema.Struct({
+  color: Schema.String,
+  position: Schema.Finite,
+});
+
+/**
+ * A gradient background. Geometry is a two-point line in normalized node space;
+ * mirrors the OSS validator's `validateBackgroundGradient` (kind literal, finite
+ * coords, stops array of {@link GradientStopSchema}).
+ */
+const BackgroundGradientSchema = Schema.Struct({
+  kind: Schema.Literals(["linear", "radial"]),
+  startX: Schema.Finite,
+  startY: Schema.Finite,
+  endX: Schema.Finite,
+  endY: Schema.Finite,
+  stops: Schema.Array(GradientStopSchema),
+});
+
+/**
+ * An image background. Mirrors the OSS validator's `validateBackgroundImage`
+ * (url string, resizeMode literal).
+ */
+const BackgroundImageSchema = Schema.Struct({
+  url: Schema.String,
+  resizeMode: Schema.Literals(["cover", "contain", "stretch", "center"]),
+});
+
+/**
+ * Closed §3.1 RN-compatible style vocabulary. Decoded with
+ * {@link strictParseOptions}, so any key outside this set is rejected.
+ */
+export const PreviewStyleSchema = Schema.Struct({
+  // flexbox
+  flex: OptionalStyleValue,
+  flexDirection: OptionalStyleValue,
+  alignItems: OptionalStyleValue,
+  alignSelf: OptionalStyleValue,
+  justifyContent: OptionalStyleValue,
+  flexWrap: OptionalStyleValue,
+  gap: OptionalStyleValue,
+  flexGrow: OptionalStyleValue,
+  flexShrink: OptionalStyleValue,
+  flexBasis: OptionalStyleValue,
+  // box
+  width: OptionalStyleValue,
+  height: OptionalStyleValue,
+  minWidth: OptionalStyleValue,
+  minHeight: OptionalStyleValue,
+  maxWidth: OptionalStyleValue,
+  maxHeight: OptionalStyleValue,
+  paddingTop: OptionalStyleValue,
+  paddingBottom: OptionalStyleValue,
+  paddingLeft: OptionalStyleValue,
+  paddingRight: OptionalStyleValue,
+  marginTop: OptionalStyleValue,
+  marginBottom: OptionalStyleValue,
+  marginLeft: OptionalStyleValue,
+  marginRight: OptionalStyleValue,
+  aspectRatio: OptionalStyleValue,
+  // border
+  borderTopWidth: OptionalStyleValue,
+  borderRightWidth: OptionalStyleValue,
+  borderBottomWidth: OptionalStyleValue,
+  borderLeftWidth: OptionalStyleValue,
+  borderColor: OptionalStyleValue,
+  borderTopLeftRadius: OptionalStyleValue,
+  borderTopRightRadius: OptionalStyleValue,
+  borderBottomLeftRadius: OptionalStyleValue,
+  borderBottomRightRadius: OptionalStyleValue,
+  borderStyle: OptionalStyleValue,
+  // visual
+  backgroundColor: OptionalStyleValue,
+  backgroundType: Schema.optional(BackgroundTypeSchema),
+  backgroundGradient: Schema.optional(BackgroundGradientSchema),
+  backgroundImage: Schema.optional(BackgroundImageSchema),
+  opacity: OptionalStyleValue,
+  overflow: OptionalStyleValue,
+  // position
+  position: OptionalStyleValue,
+  top: OptionalStyleValue,
+  right: OptionalStyleValue,
+  bottom: OptionalStyleValue,
+  left: OptionalStyleValue,
+  zIndex: OptionalStyleValue,
+  // text-only
+  color: OptionalStyleValue,
+  fontSize: OptionalStyleValue,
+  fontWeight: OptionalStyleValue,
+  fontStyle: OptionalStyleValue,
+  lineHeight: OptionalStyleValue,
+  letterSpacing: OptionalStyleValue,
+  textAlign: OptionalStyleValue,
+  textTransform: OptionalStyleValue,
+  textDecorationLine: OptionalStyleValue,
+  fontFamily: OptionalStyleValue,
+});
+export type PreviewStyle = typeof PreviewStyleSchema.Type;
+
+/** The serializable rest-state motion vocabulary introduced by preview tree v2. */
+export const PreviewMotionStyleSchema = Schema.Struct({
+  x: Schema.optional(Schema.Number),
+  y: Schema.optional(Schema.Number),
+  scale: Schema.optional(Schema.Number),
+  scaleX: Schema.optional(Schema.Number),
+  scaleY: Schema.optional(Schema.Number),
+  rotate: Schema.optional(Schema.Number),
+  opacity: Schema.optional(Schema.Number),
+  backgroundColor: Schema.optional(Schema.String),
+  transformOrigin: Schema.optional(Schema.Struct({ x: Schema.Number, y: Schema.Number })),
+});
+export type PreviewMotionStyle = typeof PreviewMotionStyleSchema.Type;
+
+export interface PreviewViewNode {
+  readonly type: "view";
+  readonly style: PreviewStyle;
+  readonly motion?: PreviewMotionStyle | undefined;
+  readonly children: ReadonlyArray<PreviewNode>;
+}
+export interface PreviewPressableNode {
+  readonly type: "pressable";
+  readonly style: PreviewStyle;
+  readonly motion?: PreviewMotionStyle | undefined;
+  readonly children: ReadonlyArray<PreviewNode>;
+  readonly action?: string | undefined;
+}
+export interface PreviewScrollNode {
+  readonly type: "scroll";
+  readonly style: PreviewStyle;
+  readonly motion?: PreviewMotionStyle | undefined;
+  readonly children: ReadonlyArray<PreviewNode>;
+}
+export interface PreviewTextNode {
+  readonly type: "text";
+  readonly style: PreviewStyle;
+  readonly motion?: PreviewMotionStyle | undefined;
+  readonly text: string;
+}
+export interface PreviewImageNode {
+  readonly type: "image";
+  readonly style: PreviewStyle;
+  readonly motion?: PreviewMotionStyle | undefined;
+  readonly src: string;
+  readonly resizeMode?: "cover" | "contain" | "stretch" | "center" | undefined;
+}
+export interface PreviewSlotNode {
+  readonly type: "slot";
+}
+export interface PreviewPlaceholderNode {
+  readonly type: "placeholder";
+  readonly reason: string;
+}
+
+/** Closed §3 node union — servers MUST reject unknown node types and keys. */
+export type PreviewNode =
+  | PreviewViewNode
+  | PreviewPressableNode
+  | PreviewScrollNode
+  | PreviewTextNode
+  | PreviewImageNode
+  | PreviewSlotNode
+  | PreviewPlaceholderNode;
+
+const SuspendedPreviewNode = Schema.suspend((): Schema.Codec<PreviewNode> => PreviewNodeSchema);
+
+const PreviewViewNodeSchema = Schema.Struct({
+  type: Schema.Literal("view"),
+  style: PreviewStyleSchema,
+  motion: Schema.optional(PreviewMotionStyleSchema),
+  children: Schema.Array(SuspendedPreviewNode),
+});
+
+const PreviewPressableNodeSchema = Schema.Struct({
+  type: Schema.Literal("pressable"),
+  style: PreviewStyleSchema,
+  motion: Schema.optional(PreviewMotionStyleSchema),
+  children: Schema.Array(SuspendedPreviewNode),
+  // The declared action name this pressable fires (contract §3).
+  action: Schema.optional(Schema.String),
+});
+
+const PreviewScrollNodeSchema = Schema.Struct({
+  type: Schema.Literal("scroll"),
+  style: PreviewStyleSchema,
+  motion: Schema.optional(PreviewMotionStyleSchema),
+  children: Schema.Array(SuspendedPreviewNode),
+});
+
+const PreviewTextNodeSchema = Schema.Struct({
+  type: Schema.Literal("text"),
+  style: PreviewStyleSchema,
+  motion: Schema.optional(PreviewMotionStyleSchema),
+  text: Schema.String,
+});
+
+const PreviewImageNodeSchema = Schema.Struct({
+  type: Schema.Literal("image"),
+  style: PreviewStyleSchema,
+  motion: Schema.optional(PreviewMotionStyleSchema),
+  src: Schema.String,
+  resizeMode: Schema.optional(Schema.Literals(["cover", "contain", "stretch", "center"])),
+});
+
+const PreviewSlotNodeSchema = Schema.Struct({
+  type: Schema.Literal("slot"),
+});
+
+const PreviewPlaceholderNodeSchema = Schema.Struct({
+  type: Schema.Literal("placeholder"),
+  reason: Schema.String,
+});
+
+export const PreviewNodeSchema: Schema.Codec<PreviewNode> = Schema.Union([
+  PreviewViewNodeSchema,
+  PreviewPressableNodeSchema,
+  PreviewScrollNodeSchema,
+  PreviewTextNodeSchema,
+  PreviewImageNodeSchema,
+  PreviewSlotNodeSchema,
+  PreviewPlaceholderNodeSchema,
+]);
+
+/** The §3 `previews/<state>.json` artifact: a tree of closed primitives. */
+export const PreviewTreeSchema = Schema.Struct({
+  treeVersion: Schema.Union([Schema.Literal(1), Schema.Literal(PREVIEW_TREE_VERSION)]),
+  state: Schema.String,
+  root: PreviewNodeSchema,
+});
+export type PreviewTree = typeof PreviewTreeSchema.Type;
+
+/**
+ * Counts `slot` nodes in a §3 preview tree. The contract allows at most one
+ * slot marker per tree; finalize validation rejects trees where this exceeds 1.
+ */
+export const countSlotNodes = (node: PreviewNode): number => {
+  switch (node.type) {
+    case "slot":
+      return 1;
+    case "view":
+    case "pressable":
+    case "scroll":
+      return node.children.reduce((count, child) => count + countSlotNodes(child), 0);
+    default:
+      return 0;
+  }
+};
+
+// =============================================================================
+// §1.2 contentHash
+// =============================================================================
+
+/** Lowercase hex sha256 over a UTF-8 string or raw bytes (WebCrypto, workerd-safe). */
+export const sha256Hex = (input: string | Uint8Array): Effect.Effect<string> =>
+  Effect.promise(() => createHash("SHA-256", "hex").digest(input));
+
+/**
+ * §1.2 paywall preimage: `sha256(html) + ":" + sha256(js) + ":" +
+ * sortedAssetHashes.join(":")` — plain hex string concatenation.
+ */
+export const paywallContentHashPreimage = (input: {
+  readonly htmlSha256: string;
+  readonly jsSha256: string;
+  readonly assetSha256s: ReadonlyArray<string>;
+}): string => `${input.htmlSha256}:${input.jsSha256}:${[...input.assetSha256s].sort().join(":")}`;
+
+/** Recomputes a paywall's §1.2 contentHash from its manifest-listed file hashes. */
+export const computePaywallContentHash = (input: {
+  readonly htmlSha256: string;
+  readonly jsSha256: string;
+  readonly assetSha256s: ReadonlyArray<string>;
+}): Effect.Effect<string> => sha256Hex(paywallContentHashPreimage(input));
+
+/**
+ * §1.2 component preimage: `sha256(manifest) + ":" + sha256(runtime) + ":" +
+ * (sha256(panel) | "") + ":" + sortedPreviewHashes.join(":")`.
+ */
+export const componentContentHashPreimage = (input: {
+  readonly manifestSha256: string;
+  readonly runtimeSha256: string;
+  readonly panelSha256: string | null;
+  readonly previewSha256s: ReadonlyArray<string>;
+}): string =>
+  `${input.manifestSha256}:${input.runtimeSha256}:${input.panelSha256 ?? ""}:${[
+    ...input.previewSha256s,
+  ]
+    .sort()
+    .join(":")}`;
+
+/** Recomputes a component's §1.2 contentHash from its manifest-listed file hashes. */
+export const computeComponentContentHash = (input: {
+  readonly manifestSha256: string;
+  readonly runtimeSha256: string;
+  readonly panelSha256: string | null;
+  readonly previewSha256s: ReadonlyArray<string>;
+}): Effect.Effect<string> => sha256Hex(componentContentHashPreimage(input));
+
+/**
+ * Deterministic JSON serialization with recursively sorted object keys.
+ * `sha256Hex(canonicalJsonStringify(manifest))` is the deploy's idempotency
+ * key (`paywall_deploy.manifest_hash`): the same manifest re-POSTed always
+ * hashes identically regardless of key order.
+ */
+export const canonicalJsonStringify = (value: unknown): string => {
+  if (value === null || typeof value !== "object") {
+    return JSON.stringify(value);
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map((item) => canonicalJsonStringify(item)).join(",")}]`;
+  }
+  const entries = Object.entries(value)
+    .filter(([, v]) => v !== undefined)
+    .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+    .map(([k, v]) => `${JSON.stringify(k)}:${canonicalJsonStringify(v)}`);
+  return `{${entries.join(",")}}`;
+};
+
+/** Canonical manifest hash — the per-project deploy idempotency key. */
+export const computeManifestHash = (manifest: PaywallDeployManifest): Effect.Effect<string> =>
+  sha256Hex(canonicalJsonStringify(manifest));
+
+// =============================================================================
+// Storage / serving key derivation (§4.2 upload layout + §5 serving layout)
+// =============================================================================
+
+/** Upload-side blob location: `blobs/<projectId>/<sha256>`, content-addressed per project. */
+export const blobStorageKey = (projectId: string, sha256: string): string =>
+  `blobs/${projectId}/${sha256}`;
+
+/** §5 serving key for a released paywall's HTML entry point. */
+export const paywallServingHtmlKey = (contentHash: string): string => `p/${contentHash}/index.html`;
+
+/** §5 serving key for a released paywall's JS bundle. */
+export const paywallServingJsKey = (contentHash: string): string => `p/${contentHash}/bundle.js`;
+
+/** Last POSIX path segment — asset serving names keep only the basename. */
+export const assetBasename = (path: string): string => {
+  const segments = path.split("/");
+  const last = segments[segments.length - 1];
+  return last === undefined || last === "" ? path : last;
+};
+
+/** §5 serving key for one paywall asset: `p/<contentHash>/assets/<basename>`. */
+export const paywallServingAssetKey = (contentHash: string, assetPath: string): string =>
+  `p/${contentHash}/assets/${assetBasename(assetPath)}`;
+
+/** One blob copy from the upload layout into the public §5 serving layout. */
+export interface ServingCopy {
+  readonly sha256: string;
+  readonly targetKey: string;
+  readonly contentType: string;
+}
+
+/**
+ * Derives every §5 serving-layout copy for one manifest paywall: html →
+ * `index.html`, js → `bundle.js`, each referenced asset →
+ * `assets/<basename>`. `assetsByPath` indexes the manifest's top-level
+ * `assets[]` by path; paths the paywall references but the manifest does not
+ * declare are skipped here — `validateManifestConstraints` rejects them first.
+ */
+export const servingCopiesForPaywall = (
+  paywall: ManifestPaywall,
+  assetsByPath: ReadonlyMap<string, DeployArtifact>,
+): ReadonlyArray<ServingCopy> => {
+  const copies: ServingCopy[] = [
+    {
+      contentType: paywall.artifacts.html.contentType,
+      sha256: paywall.artifacts.html.sha256,
+      targetKey: paywallServingHtmlKey(paywall.contentHash),
+    },
+    {
+      contentType: paywall.artifacts.js.contentType,
+      sha256: paywall.artifacts.js.sha256,
+      targetKey: paywallServingJsKey(paywall.contentHash),
+    },
+  ];
+  for (const assetPath of paywall.assets) {
+    const asset = assetsByPath.get(assetPath);
+    if (asset) {
+      copies.push({
+        contentType: asset.contentType,
+        sha256: asset.sha256,
+        targetKey: paywallServingAssetKey(paywall.contentHash, assetPath),
+      });
+    }
+  }
+  return copies;
+};
+
+/** §5.1 serving prefix for one component's artifacts: `c/<contentHash>`. */
+export const componentServingPrefix = (contentHash: string): string => `c/${contentHash}`;
+
+/** §5.1 serving key for a component's §2 manifest. */
+export const componentServingManifestKey = (contentHash: string): string =>
+  `${componentServingPrefix(contentHash)}/manifest.json`;
+
+/** §5.1 serving key for one §3 preview tree: `c/<contentHash>/previews/<state>.json`. */
+export const componentServingPreviewKey = (contentHash: string, state: string): string =>
+  `${componentServingPrefix(contentHash)}/previews/${state}.json`;
+
+/** §5.1 serving key for a component's runtime bundle. */
+export const componentServingRuntimeKey = (contentHash: string): string =>
+  `${componentServingPrefix(contentHash)}/runtime.js`;
+
+/** §5.1 serving key for a component's optional panel bundle. */
+export const componentServingPanelKey = (contentHash: string): string =>
+  `${componentServingPrefix(contentHash)}/panel.js`;
+
+/**
+ * Derives every §5.1 serving-layout copy for one manifest component: §2
+ * manifest → `manifest.json`, each preview tree → `previews/<state>.json`,
+ * runtime → `runtime.js`, and the panel → `panel.js` only when the manifest
+ * declares one.
+ */
+export const servingCopiesForComponent = (
+  component: ManifestComponent,
+): ReadonlyArray<ServingCopy> => {
+  const copies: ServingCopy[] = [
+    {
+      contentType: component.manifest.contentType,
+      sha256: component.manifest.sha256,
+      targetKey: componentServingManifestKey(component.contentHash),
+    },
+  ];
+  for (const preview of component.previews) {
+    copies.push({
+      contentType: preview.file.contentType,
+      sha256: preview.file.sha256,
+      targetKey: componentServingPreviewKey(component.contentHash, preview.state),
+    });
+  }
+  copies.push({
+    contentType: component.artifacts.runtime.contentType,
+    sha256: component.artifacts.runtime.sha256,
+    targetKey: componentServingRuntimeKey(component.contentHash),
+  });
+  if (component.artifacts.panel) {
+    copies.push({
+      contentType: component.artifacts.panel.contentType,
+      sha256: component.artifacts.panel.sha256,
+      targetKey: componentServingPanelKey(component.contentHash),
+    });
+  }
+  return copies;
+};
+
+/**
+ * Read-time catalog metadata for one component version, derived from its
+ * MINTING deploy's §1 manifest (matched by the §1.2 contentHash): the preview
+ * states actually copied into the §5.1 serving layout and whether a panel
+ * bundle exists. Returns `null` when the manifest declares no component with
+ * this contentHash — callers treat that as ledger/manifest drift.
+ */
+export const componentServingMetadata = (
+  manifest: PaywallDeployManifest,
+  contentHash: string,
+): { readonly hasPanel: boolean; readonly previewStates: ReadonlyArray<string> } | null => {
+  const component = manifest.components.find((entry) => entry.contentHash === contentHash);
+  return component === undefined
+    ? null
+    : {
+        hasPanel: component.artifacts.panel !== null,
+        previewStates: component.previews.map((preview) => preview.state),
+      };
+};
+
+// =============================================================================
+// Manifest traversal helpers
+// =============================================================================
+
+/** Indexes the manifest's top-level `assets[]` by path. */
+export const manifestAssetsByPath = (
+  manifest: PaywallDeployManifest,
+): ReadonlyMap<string, DeployArtifact> =>
+  new Map(manifest.assets.map((asset) => [asset.path, asset]));
+
+/** One manifest-listed file flattened to its deploy-file row shape. */
+export interface ManifestFileEntry {
+  readonly role:
+    | "paywallHtml"
+    | "paywallJs"
+    | "asset"
+    | "source"
+    | "config"
+    | "componentManifest"
+    | "componentPreview"
+    | "componentRuntime"
+    | "componentPanel";
+  readonly logicalPath: string;
+  readonly sha256: string;
+  /** Declared size from the manifest, in bytes. */
+  readonly bytes: number;
+}
+
+/** §1.1 size cap (bytes) applying to a manifest file of the given role. */
+export const sizeCapForRole = (role: ManifestFileEntry["role"]): number => {
+  switch (role) {
+    case "paywallHtml":
+      return SIZE_CAPS.html;
+    case "paywallJs":
+    case "componentRuntime":
+    case "componentPanel":
+      return SIZE_CAPS.jsBundle;
+    case "asset":
+      return SIZE_CAPS.asset;
+    case "source":
+      return SIZE_CAPS.sourceFile;
+    case "config":
+      return SIZE_CAPS.config;
+    case "componentManifest":
+      return SIZE_CAPS.componentManifest;
+    case "componentPreview":
+      return SIZE_CAPS.previewTree;
+  }
+};
+
+/**
+ * Validates an uploaded blob's ACTUAL byte length against the manifest's
+ * declarations (contract §1.1, enforced at upload before the blob is stored):
+ * the body must match the declared `bytes` of every manifest entry carrying
+ * this sha256 and must not exceed the role-appropriate size cap. Returns
+ * human-readable violation messages — empty means the upload passes.
+ */
+export const validateUploadedBlobSize = (
+  entries: ReadonlyArray<ManifestFileEntry>,
+  actualBytes: number,
+): ReadonlyArray<string> => {
+  const violations: string[] = [];
+  for (const entry of entries) {
+    if (actualBytes !== entry.bytes) {
+      violations.push(
+        `file "${entry.logicalPath}": uploaded body is ${actualBytes} bytes but the manifest declares ${entry.bytes} bytes`,
+      );
+    }
+    const cap = sizeCapForRole(entry.role);
+    if (actualBytes > cap) {
+      violations.push(
+        `file "${entry.logicalPath}" (${entry.role}): ${actualBytes} bytes exceeds the ${cap}-byte cap`,
+      );
+    }
+  }
+  return violations;
+};
+
+/**
+ * Re-verifies §1.1 size caps at finalize against the bytes recorded on
+ * `paywall_deploy_blobs` rows (defense in depth: rows written by older server
+ * code may predate the upload-time cap enforcement). Hashes absent from
+ * `bytesBySha256` are skipped — missing blobs are reported separately as an
+ * incomplete deploy.
+ */
+export const validateRecordedBlobCaps = (
+  manifest: PaywallDeployManifest,
+  bytesBySha256: ReadonlyMap<string, number>,
+): ReadonlyArray<string> => {
+  const violations: string[] = [];
+  for (const entry of manifestFileEntries(manifest)) {
+    const recorded = bytesBySha256.get(entry.sha256);
+    if (recorded === undefined) {
+      continue;
+    }
+    const cap = sizeCapForRole(entry.role);
+    if (recorded > cap) {
+      violations.push(
+        `file "${entry.logicalPath}" (${entry.role}): recorded blob is ${recorded} bytes, exceeding the ${cap}-byte cap`,
+      );
+    }
+  }
+  return violations;
+};
+
+/** Flattens every file the §1 manifest references into role-tagged entries. */
+export const manifestFileEntries = (
+  manifest: PaywallDeployManifest,
+): ReadonlyArray<ManifestFileEntry> => {
+  const entries: ManifestFileEntry[] = [];
+  for (const paywall of manifest.paywalls) {
+    entries.push({
+      bytes: paywall.source.bytes,
+      logicalPath: paywall.source.path,
+      role: "source",
+      sha256: paywall.source.sha256,
+    });
+    entries.push({
+      bytes: paywall.artifacts.html.bytes,
+      logicalPath: paywall.artifacts.html.path,
+      role: "paywallHtml",
+      sha256: paywall.artifacts.html.sha256,
+    });
+    entries.push({
+      bytes: paywall.artifacts.js.bytes,
+      logicalPath: paywall.artifacts.js.path,
+      role: "paywallJs",
+      sha256: paywall.artifacts.js.sha256,
+    });
+  }
+  for (const component of manifest.components) {
+    entries.push({
+      bytes: component.source.bytes,
+      logicalPath: component.source.path,
+      role: "source",
+      sha256: component.source.sha256,
+    });
+    entries.push({
+      bytes: component.manifest.bytes,
+      logicalPath: component.manifest.path,
+      role: "componentManifest",
+      sha256: component.manifest.sha256,
+    });
+    for (const preview of component.previews) {
+      entries.push({
+        bytes: preview.file.bytes,
+        logicalPath: preview.file.path,
+        role: "componentPreview",
+        sha256: preview.file.sha256,
+      });
+    }
+    entries.push({
+      bytes: component.artifacts.runtime.bytes,
+      logicalPath: component.artifacts.runtime.path,
+      role: "componentRuntime",
+      sha256: component.artifacts.runtime.sha256,
+    });
+    if (component.artifacts.panel) {
+      entries.push({
+        bytes: component.artifacts.panel.bytes,
+        logicalPath: component.artifacts.panel.path,
+        role: "componentPanel",
+        sha256: component.artifacts.panel.sha256,
+      });
+    }
+  }
+  entries.push({
+    bytes: manifest.config.bytes,
+    logicalPath: manifest.config.path,
+    role: "config",
+    sha256: manifest.config.sha256,
+  });
+  for (const asset of manifest.assets) {
+    entries.push({
+      bytes: asset.bytes,
+      logicalPath: asset.path,
+      role: "asset",
+      sha256: asset.sha256,
+    });
+  }
+  return entries;
+};
+
+/** Distinct sha256s of every file the manifest references. */
+export const collectManifestHashes = (manifest: PaywallDeployManifest): ReadonlyArray<string> => [
+  ...new Set(manifestFileEntries(manifest).map((entry) => entry.sha256)),
+];
+
+/** Declared contentType of the manifest artifact carrying `sha256`, if any. */
+export const findDeclaredContentType = (
+  manifest: PaywallDeployManifest,
+  sha256: string,
+): string | null => {
+  for (const paywall of manifest.paywalls) {
+    if (paywall.artifacts.html.sha256 === sha256) return paywall.artifacts.html.contentType;
+    if (paywall.artifacts.js.sha256 === sha256) return paywall.artifacts.js.contentType;
+  }
+  for (const component of manifest.components) {
+    if (component.manifest.sha256 === sha256) return component.manifest.contentType;
+    if (component.artifacts.runtime.sha256 === sha256)
+      return component.artifacts.runtime.contentType;
+    if (component.artifacts.panel?.sha256 === sha256) return component.artifacts.panel.contentType;
+    for (const preview of component.previews) {
+      if (preview.file.sha256 === sha256) return preview.file.contentType;
+    }
+  }
+  for (const asset of manifest.assets) {
+    if (asset.sha256 === sha256) return asset.contentType;
+  }
+  return null;
+};
+
+// =============================================================================
+// §1.1 constraint validation (size caps, contentType allowlist, uniqueness)
+// =============================================================================
+
+/** Bare media type — the segment before any `;charset=` parameter, lowercased. */
+const bareContentType = (contentType: string): string =>
+  (contentType.split(";")[0] ?? "").trim().toLowerCase();
+
+const isAllowedContentType = (contentType: string): boolean =>
+  CONTENT_TYPE_ALLOWLIST.has(bareContentType(contentType));
+
+/**
+ * Validates the §1.1 constraints the Schema layer does not express: id
+ * uniqueness, "at least one paywall or component", size caps, the
+ * contentType grammar + allowlist, the per-role contentType rules (html →
+ * `text/html`, js/runtime/panel → `text/javascript`, component manifest +
+ * previews → `application/json`, assets → `image/*`/`font/*` only), that
+ * every `paywalls[].assets` path resolves to a top-level `assets[]` entry,
+ * that no two referenced assets share a §5 serving basename, and that every
+ * component declares a non-empty `previews[]` whose state names match
+ * {@link PREVIEW_STATE_PATTERN}. Returns human-readable violation messages —
+ * empty means the manifest passes. Enforced at finalize (contract §1.1).
+ */
+export const validateManifestConstraints = (
+  manifest: PaywallDeployManifest,
+): ReadonlyArray<string> => {
+  const violations: string[] = [];
+
+  if (manifest.paywalls.length === 0 && manifest.components.length === 0) {
+    violations.push("manifest must declare at least one paywall or component");
+  }
+
+  const paywallIds = new Set<string>();
+  for (const paywall of manifest.paywalls) {
+    if (paywallIds.has(paywall.id)) {
+      violations.push(`duplicate paywall id "${paywall.id}"`);
+    }
+    paywallIds.add(paywall.id);
+  }
+  const componentIds = new Set<string>();
+  for (const component of manifest.components) {
+    if (componentIds.has(component.id)) {
+      violations.push(`duplicate component id "${component.id}"`);
+    }
+    componentIds.add(component.id);
+  }
+
+  const checkContentType = (label: string, artifact: DeployArtifact): void => {
+    // Re-checked here (not just at schema decode) so finalize rejects stored
+    // manifests that predate the contentType grammar constraint.
+    if (
+      artifact.contentType.length > CONTENT_TYPE_MAX_LENGTH ||
+      !CONTENT_TYPE_PATTERN.test(artifact.contentType)
+    ) {
+      violations.push(`${label}: contentType "${artifact.contentType}" is malformed`);
+      return;
+    }
+    if (!isAllowedContentType(artifact.contentType)) {
+      violations.push(`${label}: contentType "${artifact.contentType}" is not allowed`);
+    }
+  };
+  // §1.1 per-role contentType rules: the serving layer echoes the declared
+  // contentType verbatim, so each role is pinned to exactly the media type it
+  // is served as.
+  const checkExactContentType = (
+    label: string,
+    artifact: DeployArtifact,
+    expected: "text/html" | "text/javascript" | "application/json",
+  ): void => {
+    checkContentType(label, artifact);
+    if (bareContentType(artifact.contentType) !== expected) {
+      violations.push(
+        `${label}: contentType "${artifact.contentType}" is not allowed for this role; expected ${expected}`,
+      );
+    }
+  };
+  // §1.1 asset rule: image/* or font/* from the allowlist only — never an
+  // executable/document type (text/html, text/javascript).
+  const checkAssetContentType = (label: string, artifact: DeployArtifact): void => {
+    checkContentType(label, artifact);
+    const bare = bareContentType(artifact.contentType);
+    if (!bare.startsWith("image/") && !bare.startsWith("font/")) {
+      violations.push(
+        `${label}: contentType "${artifact.contentType}" is not allowed for assets; expected an image/* or font/* type`,
+      );
+    }
+  };
+  const checkJsCap = (label: string, artifact: DeployArtifact): void => {
+    if (artifact.bytes > SIZE_CAPS.jsBundle) {
+      violations.push(
+        `${label}: js bundle exceeds ${SIZE_CAPS.jsBundle} bytes (${artifact.bytes})`,
+      );
+    }
+  };
+
+  const assetsByPath = manifestAssetsByPath(manifest);
+
+  for (const paywall of manifest.paywalls) {
+    const label = `paywall "${paywall.id}"`;
+    checkExactContentType(`${label} html`, paywall.artifacts.html, "text/html");
+    checkExactContentType(`${label} js`, paywall.artifacts.js, "text/javascript");
+    checkJsCap(`${label} js`, paywall.artifacts.js);
+    // §5 serving keys keep only the asset basename, so two referenced assets
+    // sharing a basename would land on the same `p/<hash>/assets/<basename>`
+    // object — reject the manifest instead of silently flattening them.
+    const servingNames = new Map<string, string>();
+    const seenPaths = new Set<string>();
+    for (const assetPath of paywall.assets) {
+      const asset = assetsByPath.get(assetPath);
+      if (!asset) {
+        violations.push(`${label}: asset path "${assetPath}" is not in the top-level assets list`);
+        continue;
+      }
+      if (seenPaths.has(assetPath)) {
+        continue;
+      }
+      seenPaths.add(assetPath);
+      const basename = assetBasename(assetPath);
+      const first = servingNames.get(basename);
+      if (first === undefined) {
+        servingNames.set(basename, assetPath);
+      } else {
+        violations.push(
+          `${label}: assets "${first}" and "${assetPath}" collide on serving name "assets/${basename}"`,
+        );
+      }
+    }
+  }
+
+  for (const component of manifest.components) {
+    const label = `component "${component.id}"`;
+    checkExactContentType(`${label} manifest`, component.manifest, "application/json");
+    if (component.manifest.bytes > SIZE_CAPS.componentManifest) {
+      violations.push(
+        `${label}: component manifest exceeds ${SIZE_CAPS.componentManifest} bytes (${component.manifest.bytes})`,
+      );
+    }
+    checkExactContentType(`${label} runtime`, component.artifacts.runtime, "text/javascript");
+    checkJsCap(`${label} runtime`, component.artifacts.runtime);
+    if (component.artifacts.panel) {
+      checkExactContentType(`${label} panel`, component.artifacts.panel, "text/javascript");
+      checkJsCap(`${label} panel`, component.artifacts.panel);
+    }
+    if (component.previews.length === 0) {
+      violations.push(`${label}: previews must not be empty`);
+    }
+    const previewStates = new Set<string>();
+    for (const preview of component.previews) {
+      const previewLabel = `${label} preview "${preview.state}"`;
+      if (previewStates.has(preview.state)) {
+        violations.push(`${label}: duplicate preview state "${preview.state}"`);
+      }
+      previewStates.add(preview.state);
+      if (!PREVIEW_STATE_PATTERN.test(preview.state)) {
+        violations.push(
+          `${previewLabel}: state "${preview.state}" is malformed; expected ${PREVIEW_STATE_PATTERN}`,
+        );
+      }
+      checkExactContentType(previewLabel, preview.file, "application/json");
+      if (preview.file.bytes > SIZE_CAPS.previewTree) {
+        violations.push(
+          `${previewLabel}: preview tree exceeds ${SIZE_CAPS.previewTree} bytes (${preview.file.bytes})`,
+        );
+      }
+    }
+  }
+
+  for (const asset of manifest.assets) {
+    const label = `asset "${asset.path}"`;
+    checkAssetContentType(label, asset);
+    if (asset.bytes > SIZE_CAPS.asset) {
+      violations.push(`${label}: exceeds ${SIZE_CAPS.asset} bytes (${asset.bytes})`);
+    }
+  }
+
+  return violations;
+};
diff --git a/packages/core/src/services/paywallDeploys/PaywallDeployManifest.unit.test.ts b/packages/core/src/services/paywallDeploys/PaywallDeployManifest.unit.test.ts
new file mode 100644
index 000000000..dc57343cd
--- /dev/null
+++ b/packages/core/src/services/paywallDeploys/PaywallDeployManifest.unit.test.ts
@@ -0,0 +1,1117 @@
+import { Effect, Result, Schema } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  ComponentManifestSchema,
+  type ManifestFileEntry,
+  PaywallDeployManifestSchema,
+  type PreviewNode,
+  PreviewTreeSchema,
+  SIZE_CAPS,
+  assetBasename,
+  blobStorageKey,
+  canonicalJsonStringify,
+  collectManifestHashes,
+  componentContentHashPreimage,
+  componentServingManifestKey,
+  componentServingMetadata,
+  componentServingPanelKey,
+  componentServingPreviewKey,
+  componentServingPrefix,
+  componentServingRuntimeKey,
+  computeManifestHash,
+  computePaywallContentHash,
+  countSlotNodes,
+  findDeclaredContentType,
+  manifestAssetsByPath,
+  manifestFileEntries,
+  paywallContentHashPreimage,
+  paywallServingAssetKey,
+  paywallServingHtmlKey,
+  paywallServingJsKey,
+  servingCopiesForComponent,
+  servingCopiesForPaywall,
+  sha256Hex,
+  sizeCapForRole,
+  strictParseOptions,
+  validateManifestConstraints,
+  validateRecordedBlobCaps,
+  validateUploadedBlobSize,
+} from "./PaywallDeployManifest.ts";
+
+// ---------------------------------------------------------------------------
+// Fixtures
+// ---------------------------------------------------------------------------
+
+/** 64-char lowercase hex built from a single hex digit. */
+const hex = (char: string) => char.repeat(64);
+
+const file = (path: string, sha256: string, bytes = 100) => ({ bytes, path, sha256 });
+
+const artifact = (path: string, sha256: string, contentType: string, bytes = 100) => ({
+  bytes,
+  contentType,
+  path,
+  sha256,
+});
+
+const ASSET_PATH = ".voidhash/.build/paywalls/onboarding/assets/hero-AB12CD.png";
+
+const basePaywall = () => ({
+  artifacts: {
+    html: artifact(
+      ".voidhash/.build/paywalls/onboarding/index.html",
+      hex("b"),
+      "text/html; charset=utf-8",
+    ),
+    js: artifact(
+      ".voidhash/.build/paywalls/onboarding/bundle.js",
+      hex("c"),
+      "text/javascript; charset=utf-8",
+    ),
+  },
+  assets: [ASSET_PATH],
+  contentHash: hex("d"),
+  id: "onboarding",
+  products: ["yearly", "monthly"],
+  source: file(".voidhash/paywalls/onboarding.tsx", hex("a")),
+  title: "Onboarding",
+  variables: { accentColor: "#16a34a", dark: true, maxItems: 3 },
+});
+
+const baseComponent = () => ({
+  artifacts: {
+    panel: null,
+    runtime: artifact(
+      ".voidhash/.build/components/product-option/runtime.js",
+      hex("1"),
+      "text/javascript; charset=utf-8",
+    ),
+  },
+  contentHash: hex("2"),
+  id: "product-option",
+  manifest: artifact(
+    ".voidhash/.build/components/product-option/manifest.json",
+    hex("f"),
+    "application/json",
+  ),
+  previews: [
+    {
+      file: artifact(
+        ".voidhash/.build/components/product-option/previews/default.json",
+        hex("0"),
+        "application/json",
+      ),
+      state: "default",
+    },
+  ],
+  source: file(".voidhash/components/product-option.tsx", hex("e")),
+  title: "Product Option",
+});
+
+/** Base component with a panel bundle and a second `trial` preview state. */
+const componentWithPanel = () => {
+  const base = baseComponent();
+  return {
+    ...base,
+    artifacts: {
+      panel: artifact(
+        ".voidhash/.build/components/product-option/panel.js",
+        hex("9"),
+        "text/javascript; charset=utf-8",
+      ),
+      runtime: base.artifacts.runtime,
+    },
+    previews: [
+      ...base.previews,
+      {
+        file: artifact(
+          ".voidhash/.build/components/product-option/previews/trial.json",
+          hex("8"),
+          "application/json",
+        ),
+        state: "trial",
+      },
+    ],
+  };
+};
+
+const baseManifest = () => ({
+  assets: [artifact(ASSET_PATH, hex("4"), "image/png")],
+  cliVersion: "0.0.1-alpha.1",
+  components: [baseComponent()],
+  config: file("voidhash.config.ts", hex("3")),
+  createdAt: "2026-06-11T10:00:00.000Z",
+  paywalls: [basePaywall()],
+  project: "dev-proj",
+  runtimeVersion: "0.0.1-alpha.1",
+  schemaVersion: 2,
+  team: "voidhash-dev-sro",
+});
+
+const withTopLevel = (overrides: Record<string, unknown>): unknown => ({
+  ...baseManifest(),
+  ...overrides,
+});
+
+const decodeManifest = (input: unknown) =>
+  Effect.runSync(
+    Effect.result(
+      Schema.decodeUnknownEffect(PaywallDeployManifestSchema, strictParseOptions)(input),
+    ),
+  );
+
+const decodeComponentManifest = (input: unknown) =>
+  Effect.runSync(
+    Effect.result(Schema.decodeUnknownEffect(ComponentManifestSchema, strictParseOptions)(input)),
+  );
+
+const decodePreviewTree = (input: unknown) =>
+  Effect.runSync(
+    Effect.result(Schema.decodeUnknownEffect(PreviewTreeSchema, strictParseOptions)(input)),
+  );
+
+const decodedBaseManifest = () => Result.getOrThrow(decodeManifest(baseManifest()));
+
+// Well-known SHA-256 test vectors (FIPS 180-2 / NIST).
+const SHA256_OF_ABC = "ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad";
+const SHA256_OF_EMPTY = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";
+
+// ---------------------------------------------------------------------------
+// §1 deploy manifest schema
+// ---------------------------------------------------------------------------
+
+describe("PaywallDeployManifestSchema", () => {
+  it("accepts a valid schemaVersion 2 manifest", () => {
+    const result = decodeManifest(baseManifest());
+    expect(Result.isSuccess(result)).toBe(true);
+  });
+
+  it("rejects an unknown schemaVersion", () => {
+    expect(Result.isFailure(decodeManifest(withTopLevel({ schemaVersion: 3 })))).toBe(true);
+    expect(Result.isFailure(decodeManifest(withTopLevel({ schemaVersion: 1 })))).toBe(true);
+  });
+
+  it("rejects a paywall id violating the slug regex", () => {
+    for (const id of ["Bad_ID", "-leading-dash", "UPPER", "a".repeat(65), ""]) {
+      const result = decodeManifest(withTopLevel({ paywalls: [{ ...basePaywall(), id }] }));
+      expect(Result.isFailure(result)).toBe(true);
+    }
+  });
+
+  it("rejects non-primitive variables values", () => {
+    const result = decodeManifest(
+      withTopLevel({ paywalls: [{ ...basePaywall(), variables: { nested: { not: "allowed" } } }] }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+    const arrayResult = decodeManifest(
+      withTopLevel({ paywalls: [{ ...basePaywall(), variables: { list: ["nope"] } }] }),
+    );
+    expect(Result.isFailure(arrayResult)).toBe(true);
+  });
+
+  it("rejects unknown top-level keys", () => {
+    expect(Result.isFailure(decodeManifest(withTopLevel({ extraneous: true })))).toBe(true);
+  });
+
+  it("rejects unknown keys on nested entries", () => {
+    const result = decodeManifest(
+      withTopLevel({ paywalls: [{ ...basePaywall(), sneaky: "value" }] }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects malformed sha256 values", () => {
+    const result = decodeManifest(
+      withTopLevel({ config: { bytes: 1, path: "voidhash.config.ts", sha256: "ABC123" } }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects negative byte counts", () => {
+    const result = decodeManifest(
+      withTopLevel({ config: { bytes: -1, path: "voidhash.config.ts", sha256: hex("3") } }),
+    );
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects contentTypes outside the bare-type + charset grammar", () => {
+    for (const contentType of [
+      "text/html; charset=utf-8\r\nSet-Cookie: x=1",
+      "text/html;",
+      "text/html; boundary=x",
+      "",
+      `image/png; charset=${"a".repeat(100)}`,
+    ]) {
+      const paywall = basePaywall();
+      paywall.artifacts.html.contentType = contentType;
+      expect(Result.isFailure(decodeManifest(withTopLevel({ paywalls: [paywall] })))).toBe(true);
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// §2 component manifest schema
+// ---------------------------------------------------------------------------
+
+const baseComponentManifest = () => ({
+  actions: { onSelect: { payload: { productId: { kind: "string" } } } },
+  hostData: ["products"],
+  manifestVersion: 2,
+  previewStates: ["default", "trial"],
+  props: {
+    accentColor: { default: "#16a34a", editor: "color", kind: "string", optional: true },
+    badge: { kind: "component", optional: true },
+    features: { item: { kind: "string" }, kind: "array", optional: true },
+    plan: { kind: "select", optional: true, options: ["monthly", "yearly"] },
+    product: { kind: "ref", label: "Product", optional: false, refType: "product" },
+    selected: { default: false, kind: "boolean", optional: true },
+  },
+  slot: true,
+  title: "Product Option",
+});
+
+describe("ComponentManifestSchema", () => {
+  it("accepts a valid component manifest", () => {
+    expect(Result.isSuccess(decodeComponentManifest(baseComponentManifest()))).toBe(true);
+  });
+
+  it("rejects an unknown manifestVersion", () => {
+    const result = decodeComponentManifest({ ...baseComponentManifest(), manifestVersion: 1 });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects an unknown prop kind", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: { broken: { kind: "function" } },
+    });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects array props whose item is itself an array", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: { matrix: { item: { item: { kind: "string" }, kind: "array" }, kind: "array" } },
+    });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects unknown extra keys", () => {
+    const result = decodeComponentManifest({ ...baseComponentManifest(), rogue: 1 });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects a ref prop with an unsupported refType", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: { entitlement: { kind: "ref", refType: "entitlement" } },
+    });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects editor hints on non-string kinds", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: { count: { default: 1, editor: "color", kind: "number" } },
+    });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects empty select options", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: { plan: { kind: "select", options: [] } },
+    });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  // §2 round-trip suite: every prop-builder combination the OSS SDK can emit
+  // must decode under the strict parse options.
+  it("round-trips every SDK-emittable prop combination under strict parsing", () => {
+    const manifest = {
+      actions: {},
+      manifestVersion: 2,
+      props: {
+        accentColor: { default: "#16a34a", editor: "color", kind: "string", optional: true },
+        badge: { kind: "component", optional: true },
+        count: { default: 3, kind: "number", optional: true },
+        features: { default: ["a", "b"], item: { kind: "string" }, kind: "array", optional: true },
+        hero: { default: "https://example.com/hero.png", kind: "image", optional: true },
+        plan: {
+          default: "monthly",
+          kind: "select",
+          optional: true,
+          options: ["monthly", "yearly"],
+        },
+        product: { kind: "ref", refType: "product" },
+        selected: { default: false, kind: "boolean", optional: true },
+      },
+      title: "Kitchen Sink",
+    };
+    const result = decodeComponentManifest(manifest);
+    expect(Result.isSuccess(result), JSON.stringify(result)).toBe(true);
+  });
+
+  it("round-trips a minimal manifest with empty actions and no slot", () => {
+    const result = decodeComponentManifest({
+      actions: {},
+      manifestVersion: 2,
+      props: {},
+    });
+    expect(Result.isSuccess(result)).toBe(true);
+  });
+
+  it("accepts image defaults (string) and array defaults (scalar arrays)", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: {
+        flags: { default: [true, false], item: { kind: "boolean" }, kind: "array" },
+        hero: { default: "asset://hero.png", kind: "image" },
+        sizes: { default: [1, 2, 3], item: { kind: "number" }, kind: "array" },
+      },
+    });
+    expect(Result.isSuccess(result)).toBe(true);
+  });
+
+  it("rejects non-scalar array defaults", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: {
+        broken: { default: [{ nested: true }], item: { kind: "string" }, kind: "array" },
+      },
+    });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+
+  it("rejects non-string image defaults", () => {
+    const result = decodeComponentManifest({
+      ...baseComponentManifest(),
+      props: { hero: { default: 42, kind: "image" } },
+    });
+    expect(Result.isFailure(result)).toBe(true);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// §3 preview node tree schema
+// ---------------------------------------------------------------------------
+
+const basePreviewTree = () => ({
+  root: {
+    children: [
+      { style: { color: "#fff", fontSize: 16 }, text: "Yearly", type: "text" },
+      { resizeMode: "cover", src: "https://example.com/x.png", style: {}, type: "image" },
+      { type: "slot" },
+      { reason: "render returned null", type: "placeholder" },
+      {
+        action: "onSelect",
+        children: [],
+        style: { backgroundColor: "#000" },
+        type: "pressable",
+      },
+    ],
+    style: { flexDirection: "row", paddingTop: 16 },
+    type: "view",
+  },
+  state: "default",
+  treeVersion: 1,
+});
+
+describe("PreviewTreeSchema", () => {
+  it("accepts a valid preview tree", () => {
+    expect(Result.isSuccess(decodePreviewTree(basePreviewTree()))).toBe(true);
+  });
+
+  it("rejects an unknown node type", () => {
+    const tree = {
+      ...basePreviewTree(),
+      root: { children: [], style: {}, type: "marquee" },
+    };
+    expect(Result.isFailure(decodePreviewTree(tree))).toBe(true);
+  });
+
+  it("rejects unknown keys on a node", () => {
+    const tree = {
+      ...basePreviewTree(),
+      root: { children: [{ type: "slot", unexpected: true }], style: {}, type: "view" },
+    };
+    expect(Result.isFailure(decodePreviewTree(tree))).toBe(true);
+  });
+
+  it("rejects style keys outside the §3.1 vocabulary", () => {
+    const tree = {
+      ...basePreviewTree(),
+      root: { children: [], style: { boxShadow: "0 0 4px red" }, type: "view" },
+    };
+    expect(Result.isFailure(decodePreviewTree(tree))).toBe(true);
+  });
+
+  it("accepts v1 and v2 preview trees and rejects an unknown version", () => {
+    expect(Result.isSuccess(decodePreviewTree({ ...basePreviewTree(), treeVersion: 1 }))).toBe(
+      true,
+    );
+    expect(
+      Result.isSuccess(
+        decodePreviewTree({
+          ...basePreviewTree(),
+          root: { children: [], motion: { opacity: 1, x: 12 }, style: {}, type: "view" },
+          treeVersion: 2,
+        }),
+      ),
+    ).toBe(true);
+    expect(Result.isFailure(decodePreviewTree({ ...basePreviewTree(), treeVersion: 3 }))).toBe(
+      true,
+    );
+  });
+
+  it("accepts exactly the four §3 resizeMode values and rejects others", () => {
+    for (const resizeMode of ["cover", "contain", "stretch", "center"]) {
+      const tree = {
+        ...basePreviewTree(),
+        root: { resizeMode, src: "https://example.com/x.png", style: {}, type: "image" },
+      };
+      expect(Result.isSuccess(decodePreviewTree(tree)), resizeMode).toBe(true);
+    }
+    for (const resizeMode of ["repeat", "tile", ""]) {
+      const tree = {
+        ...basePreviewTree(),
+        root: { resizeMode, src: "https://example.com/x.png", style: {}, type: "image" },
+      };
+      expect(Result.isFailure(decodePreviewTree(tree)), resizeMode).toBe(true);
+    }
+  });
+});
+
+describe("countSlotNodes", () => {
+  const text: PreviewNode = { style: {}, text: "x", type: "text" };
+  const slot: PreviewNode = { type: "slot" };
+
+  it("counts zero slots in slot-free trees", () => {
+    expect(countSlotNodes(text)).toBe(0);
+    expect(countSlotNodes({ children: [text], style: {}, type: "view" })).toBe(0);
+    expect(countSlotNodes({ reason: "null", type: "placeholder" })).toBe(0);
+  });
+
+  it("counts a single slot anywhere in the tree", () => {
+    expect(countSlotNodes(slot)).toBe(1);
+    expect(
+      countSlotNodes({
+        children: [{ children: [slot], style: {}, type: "pressable" }],
+        style: {},
+        type: "view",
+      }),
+    ).toBe(1);
+  });
+
+  it("counts multiple slots across nested containers", () => {
+    expect(
+      countSlotNodes({
+        children: [slot, { children: [slot, text], style: {}, type: "scroll" }],
+        style: {},
+        type: "view",
+      }),
+    ).toBe(2);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// §1.1 constraint validation
+// ---------------------------------------------------------------------------
+
+describe("validateManifestConstraints", () => {
+  it("passes the valid base manifest", () => {
+    expect(validateManifestConstraints(decodedBaseManifest())).toEqual([]);
+  });
+
+  it("requires at least one paywall or component", () => {
+    const manifest = Result.getOrThrow(
+      decodeManifest(withTopLevel({ assets: [], components: [], paywalls: [] })),
+    );
+    expect(validateManifestConstraints(manifest)).toEqual([
+      "manifest must declare at least one paywall or component",
+    ]);
+  });
+
+  it("flags duplicate paywall and component ids", () => {
+    const manifest = Result.getOrThrow(
+      decodeManifest(
+        withTopLevel({
+          components: [baseComponent(), baseComponent()],
+          paywalls: [basePaywall(), basePaywall()],
+        }),
+      ),
+    );
+    const violations = validateManifestConstraints(manifest);
+    expect(violations).toContain('duplicate paywall id "onboarding"');
+    expect(violations).toContain('duplicate component id "product-option"');
+  });
+
+  it("flags js bundles over the 5 MB cap (declared bytes)", () => {
+    const paywall = basePaywall();
+    paywall.artifacts.js.bytes = SIZE_CAPS.jsBundle + 1;
+    const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ paywalls: [paywall] })));
+    const violations = validateManifestConstraints(manifest);
+    expect(violations.some((v) => v.includes("js bundle exceeds"))).toBe(true);
+  });
+
+  it("flags assets over the 10 MB cap (declared bytes)", () => {
+    const manifest = Result.getOrThrow(
+      decodeManifest(
+        withTopLevel({
+          assets: [artifact(ASSET_PATH, hex("4"), "image/png", SIZE_CAPS.asset + 1)],
+        }),
+      ),
+    );
+    const violations = validateManifestConstraints(manifest);
+    expect(violations.some((v) => v.includes(`exceeds ${SIZE_CAPS.asset} bytes`))).toBe(true);
+  });
+
+  it("flags oversize component manifests and preview trees", () => {
+    const component = baseComponent();
+    component.manifest.bytes = SIZE_CAPS.componentManifest + 1;
+    component.previews[0]!.file.bytes = SIZE_CAPS.previewTree + 1;
+    const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ components: [component] })));
+    const violations = validateManifestConstraints(manifest);
+    expect(violations.some((v) => v.includes("component manifest exceeds"))).toBe(true);
+    expect(violations.some((v) => v.includes("preview tree exceeds"))).toBe(true);
+  });
+
+  it("flags contentTypes outside the allowlist", () => {
+    const paywall = basePaywall();
+    paywall.artifacts.js.contentType = "application/x-msdownload";
+    const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ paywalls: [paywall] })));
+    const violations = validateManifestConstraints(manifest);
+    expect(violations.some((v) => v.includes('"application/x-msdownload" is not allowed'))).toBe(
+      true,
+    );
+  });
+
+  it("accepts allowlisted contentTypes with charset suffixes", () => {
+    expect(validateManifestConstraints(decodedBaseManifest())).toEqual([]);
+  });
+
+  it("flags paywall asset paths missing from the top-level assets list", () => {
+    const paywall = basePaywall();
+    paywall.assets.push(".voidhash/.build/missing.png");
+    const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ paywalls: [paywall] })));
+    const violations = validateManifestConstraints(manifest);
+    expect(
+      violations.some((v) => v.includes('".voidhash/.build/missing.png" is not in the top-level')),
+    ).toBe(true);
+  });
+
+  it("flags referenced assets sharing a serving basename, naming both paths", () => {
+    const otherPath = ".voidhash/.build/paywalls/onboarding/assets/alt/hero-AB12CD.png";
+    const paywall = basePaywall();
+    paywall.assets.push(otherPath);
+    const manifest = Result.getOrThrow(
+      decodeManifest(
+        withTopLevel({
+          assets: [
+            artifact(ASSET_PATH, hex("4"), "image/png"),
+            artifact(otherPath, hex("5"), "image/png"),
+          ],
+          paywalls: [paywall],
+        }),
+      ),
+    );
+    const violations = validateManifestConstraints(manifest);
+    expect(
+      violations.some(
+        (v) =>
+          v.includes(`"${ASSET_PATH}"`) &&
+          v.includes(`"${otherPath}"`) &&
+          v.includes('collide on serving name "assets/hero-AB12CD.png"'),
+      ),
+    ).toBe(true);
+  });
+
+  it("flags same-basename references even when the content is identical", () => {
+    const otherPath = ".voidhash/.build/paywalls/onboarding/assets/alt/hero-AB12CD.png";
+    const paywall = basePaywall();
+    paywall.assets.push(otherPath);
+    const manifest = Result.getOrThrow(
+      decodeManifest(
+        withTopLevel({
+          assets: [
+            artifact(ASSET_PATH, hex("4"), "image/png"),
+            artifact(otherPath, hex("4"), "image/png"),
+          ],
+          paywalls: [paywall],
+        }),
+      ),
+    );
+    const violations = validateManifestConstraints(manifest);
+    expect(
+      violations.some((v) => v.includes('collide on serving name "assets/hero-AB12CD.png"')),
+    ).toBe(true);
+  });
+
+  it("does not flag the same asset path referenced twice", () => {
+    const paywall = basePaywall();
+    paywall.assets.push(ASSET_PATH);
+    const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ paywalls: [paywall] })));
+    expect(validateManifestConstraints(manifest)).toEqual([]);
+  });
+
+  it("enforces per-role contentTypes (§1.1)", () => {
+    // Allowlisted types in the wrong role are still rejected.
+    const paywall = basePaywall();
+    paywall.artifacts.html.contentType = "text/javascript";
+    paywall.artifacts.js.contentType = "application/json";
+    const component = baseComponent();
+    component.manifest.contentType = "text/javascript; charset=utf-8";
+    component.artifacts.runtime.contentType = "application/json";
+    component.previews[0]!.file.contentType = "text/html";
+    const manifest = Result.getOrThrow(
+      decodeManifest(withTopLevel({ components: [component], paywalls: [paywall] })),
+    );
+    const violations = validateManifestConstraints(manifest);
+    expect(violations.some((v) => v.includes("html") && v.includes("expected text/html"))).toBe(
+      true,
+    );
+    expect(violations.some((v) => v.includes("js") && v.includes("expected text/javascript"))).toBe(
+      true,
+    );
+    expect(
+      violations.some((v) => v.includes("manifest") && v.includes("expected application/json")),
+    ).toBe(true);
+    expect(
+      violations.some((v) => v.includes("runtime") && v.includes("expected text/javascript")),
+    ).toBe(true);
+    expect(
+      violations.some((v) => v.includes("preview") && v.includes("expected application/json")),
+    ).toBe(true);
+  });
+
+  it("accepts per-role contentTypes with charset suffixes", () => {
+    expect(validateManifestConstraints(decodedBaseManifest())).toEqual([]);
+  });
+
+  it("rejects assets declared as text/html or text/javascript", () => {
+    for (const contentType of ["text/html", "text/javascript; charset=utf-8", "application/json"]) {
+      const manifest = Result.getOrThrow(
+        decodeManifest(withTopLevel({ assets: [artifact(ASSET_PATH, hex("4"), contentType)] })),
+      );
+      const violations = validateManifestConstraints(manifest);
+      expect(
+        violations.some((v) => v.includes("not allowed for assets")),
+        `contentType ${contentType}`,
+      ).toBe(true);
+    }
+  });
+
+  it("accepts image/* and font/* assets", () => {
+    for (const contentType of ["image/webp", "font/woff2"]) {
+      const manifest = Result.getOrThrow(
+        decodeManifest(withTopLevel({ assets: [artifact(ASSET_PATH, hex("4"), contentType)] })),
+      );
+      expect(
+        validateManifestConstraints(manifest).some((v) => v.includes("not allowed for assets")),
+      ).toBe(false);
+    }
+  });
+
+  it("rejects components with empty previews", () => {
+    const component = baseComponent();
+    component.previews = [];
+    const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ components: [component] })));
+    const violations = validateManifestConstraints(manifest);
+    expect(violations).toEqual(['component "product-option": previews must not be empty']);
+  });
+
+  it("rejects preview state names outside the safe single-segment alphabet", () => {
+    for (const state of [
+      "de/fault",
+      "-leading",
+      "_leading",
+      "a".repeat(65),
+      "with space",
+      "dot.",
+    ]) {
+      const component = baseComponent();
+      component.previews[0]!.state = state;
+      const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ components: [component] })));
+      const violations = validateManifestConstraints(manifest);
+      expect(
+        violations.some((v) => v.includes(`state "${state}" is malformed`)),
+        `state ${state}`,
+      ).toBe(true);
+    }
+  });
+
+  it("accepts mixed-case, digit, underscore, and dash preview states", () => {
+    for (const state of ["default", "Trial-2", "a", "STATE_b", "0state"]) {
+      const component = baseComponent();
+      component.previews[0]!.state = state;
+      const manifest = Result.getOrThrow(decodeManifest(withTopLevel({ components: [component] })));
+      expect(validateManifestConstraints(manifest), `state ${state}`).toEqual([]);
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// §1.2 contentHash helpers
+// ---------------------------------------------------------------------------
+
+describe("contentHash helpers", () => {
+  it("sha256Hex matches the NIST test vectors", async () => {
+    expect(await Effect.runPromise(sha256Hex("abc"))).toBe(SHA256_OF_ABC);
+    expect(await Effect.runPromise(sha256Hex(new TextEncoder().encode("abc")))).toBe(SHA256_OF_ABC);
+    expect(await Effect.runPromise(sha256Hex(""))).toBe(SHA256_OF_EMPTY);
+  });
+
+  it("builds the §1.2 paywall preimage with sorted asset hashes", () => {
+    expect(
+      paywallContentHashPreimage({
+        assetSha256s: [hex("f"), hex("0")],
+        htmlSha256: hex("b"),
+        jsSha256: hex("c"),
+      }),
+    ).toBe(`${hex("b")}:${hex("c")}:${hex("0")}:${hex("f")}`);
+  });
+
+  it("builds the §1.2 paywall preimage with no assets", () => {
+    expect(
+      paywallContentHashPreimage({ assetSha256s: [], htmlSha256: hex("b"), jsSha256: hex("c") }),
+    ).toBe(`${hex("b")}:${hex("c")}:`);
+  });
+
+  it("builds the §1.2 component preimage with empty panel slot", () => {
+    expect(
+      componentContentHashPreimage({
+        manifestSha256: hex("f"),
+        panelSha256: null,
+        previewSha256s: [hex("1"), hex("0")],
+        runtimeSha256: hex("a"),
+      }),
+    ).toBe(`${hex("f")}:${hex("a")}::${hex("0")}:${hex("1")}`);
+  });
+
+  it("builds the §1.2 component preimage with a panel hash", () => {
+    expect(
+      componentContentHashPreimage({
+        manifestSha256: hex("f"),
+        panelSha256: hex("9"),
+        previewSha256s: [],
+        runtimeSha256: hex("a"),
+      }),
+    ).toBe(`${hex("f")}:${hex("a")}:${hex("9")}:`);
+  });
+
+  it("computePaywallContentHash hashes the preimage", async () => {
+    const input = { assetSha256s: [hex("4")], htmlSha256: hex("b"), jsSha256: hex("c") };
+    expect(await Effect.runPromise(computePaywallContentHash(input))).toBe(
+      await Effect.runPromise(sha256Hex(paywallContentHashPreimage(input))),
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Canonical manifest hash
+// ---------------------------------------------------------------------------
+
+describe("canonicalJsonStringify / computeManifestHash", () => {
+  it("is insensitive to object key order, recursively", () => {
+    expect(canonicalJsonStringify({ a: { y: 2, x: 1 }, b: [{ d: 4, c: 3 }] })).toBe(
+      canonicalJsonStringify({ b: [{ c: 3, d: 4 }], a: { x: 1, y: 2 } }),
+    );
+  });
+
+  it("preserves array order", () => {
+    expect(canonicalJsonStringify([2, 1])).not.toBe(canonicalJsonStringify([1, 2]));
+  });
+
+  it("drops undefined-valued keys like JSON.stringify", () => {
+    expect(canonicalJsonStringify({ a: 1, b: undefined })).toBe('{"a":1}');
+  });
+
+  it("round-trips to the same JSON value", () => {
+    const manifest = baseManifest();
+    expect(JSON.parse(canonicalJsonStringify(manifest))).toEqual(manifest);
+  });
+
+  it("computeManifestHash is stable across decode round-trips", async () => {
+    const first = await Effect.runPromise(computeManifestHash(decodedBaseManifest()));
+    const second = await Effect.runPromise(computeManifestHash(decodedBaseManifest()));
+    expect(first).toBe(second);
+    expect(first).toMatch(/^[a-f0-9]{64}$/);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Storage / serving key derivation
+// ---------------------------------------------------------------------------
+
+describe("serving key derivation", () => {
+  it("derives upload-side blob keys", () => {
+    expect(blobStorageKey("proj_1", hex("a"))).toBe(`blobs/proj_1/${hex("a")}`);
+  });
+
+  it("derives §5 serving keys", () => {
+    expect(paywallServingHtmlKey(hex("d"))).toBe(`p/${hex("d")}/index.html`);
+    expect(paywallServingJsKey(hex("d"))).toBe(`p/${hex("d")}/bundle.js`);
+    expect(paywallServingAssetKey(hex("d"), ASSET_PATH)).toBe(
+      `p/${hex("d")}/assets/hero-AB12CD.png`,
+    );
+  });
+
+  it("derives asset basenames from POSIX paths", () => {
+    expect(assetBasename("a/b/c.png")).toBe("c.png");
+    expect(assetBasename("c.png")).toBe("c.png");
+  });
+
+  it("derives all serving copies for a paywall", () => {
+    const manifest = decodedBaseManifest();
+    const paywall = manifest.paywalls[0]!;
+    const copies = servingCopiesForPaywall(paywall, manifestAssetsByPath(manifest));
+    expect(copies).toEqual([
+      {
+        contentType: "text/html; charset=utf-8",
+        sha256: hex("b"),
+        targetKey: `p/${hex("d")}/index.html`,
+      },
+      {
+        contentType: "text/javascript; charset=utf-8",
+        sha256: hex("c"),
+        targetKey: `p/${hex("d")}/bundle.js`,
+      },
+      {
+        contentType: "image/png",
+        sha256: hex("4"),
+        targetKey: `p/${hex("d")}/assets/hero-AB12CD.png`,
+      },
+    ]);
+  });
+
+  it("derives §5.1 component serving keys", () => {
+    expect(componentServingPrefix(hex("2"))).toBe(`c/${hex("2")}`);
+    expect(componentServingManifestKey(hex("2"))).toBe(`c/${hex("2")}/manifest.json`);
+    expect(componentServingPreviewKey(hex("2"), "trial")).toBe(`c/${hex("2")}/previews/trial.json`);
+    expect(componentServingRuntimeKey(hex("2"))).toBe(`c/${hex("2")}/runtime.js`);
+    expect(componentServingPanelKey(hex("2"))).toBe(`c/${hex("2")}/panel.js`);
+  });
+
+  it("derives all serving copies for a panel-less component (no panel.js)", () => {
+    const manifest = decodedBaseManifest();
+    const component = manifest.components[0]!;
+    expect(servingCopiesForComponent(component)).toEqual([
+      {
+        contentType: "application/json",
+        sha256: hex("f"),
+        targetKey: `c/${hex("2")}/manifest.json`,
+      },
+      {
+        contentType: "application/json",
+        sha256: hex("0"),
+        targetKey: `c/${hex("2")}/previews/default.json`,
+      },
+      {
+        contentType: "text/javascript; charset=utf-8",
+        sha256: hex("1"),
+        targetKey: `c/${hex("2")}/runtime.js`,
+      },
+    ]);
+  });
+
+  it("derives panel.js and every preview state when declared", () => {
+    const manifest = Result.getOrThrow(
+      decodeManifest(withTopLevel({ components: [componentWithPanel()] })),
+    );
+    const copies = servingCopiesForComponent(manifest.components[0]!);
+    expect(copies.map((copy) => copy.targetKey)).toEqual([
+      `c/${hex("2")}/manifest.json`,
+      `c/${hex("2")}/previews/default.json`,
+      `c/${hex("2")}/previews/trial.json`,
+      `c/${hex("2")}/runtime.js`,
+      `c/${hex("2")}/panel.js`,
+    ]);
+    expect(copies.find((copy) => copy.targetKey.endsWith("panel.js"))?.sha256).toBe(hex("9"));
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Read-time catalog metadata derivation
+// ---------------------------------------------------------------------------
+
+describe("componentServingMetadata", () => {
+  it("derives previewStates and hasPanel from the matched component entry", () => {
+    const manifest = decodedBaseManifest();
+    expect(componentServingMetadata(manifest, hex("2"))).toEqual({
+      hasPanel: false,
+      previewStates: ["default"],
+    });
+  });
+
+  it("reports hasPanel for components declaring a panel bundle", () => {
+    const manifest = Result.getOrThrow(
+      decodeManifest(withTopLevel({ components: [componentWithPanel()] })),
+    );
+    expect(componentServingMetadata(manifest, hex("2"))).toEqual({
+      hasPanel: true,
+      previewStates: ["default", "trial"],
+    });
+  });
+
+  it("matches the entry by contentHash among multiple components", () => {
+    const other = baseComponent();
+    other.id = "other-component";
+    other.contentHash = hex("7");
+    other.previews = [
+      {
+        file: artifact(
+          ".voidhash/.build/components/other-component/previews/compact.json",
+          hex("6"),
+          "application/json",
+        ),
+        state: "compact",
+      },
+    ];
+    const manifest = Result.getOrThrow(
+      decodeManifest(withTopLevel({ components: [baseComponent(), other] })),
+    );
+    expect(componentServingMetadata(manifest, hex("7"))).toEqual({
+      hasPanel: false,
+      previewStates: ["compact"],
+    });
+  });
+
+  it("returns null when the manifest carries no component with the contentHash", () => {
+    expect(componentServingMetadata(decodedBaseManifest(), hex("5"))).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Manifest traversal helpers
+// ---------------------------------------------------------------------------
+
+describe("manifest traversal helpers", () => {
+  it("flattens every referenced file with its role", () => {
+    const entries = manifestFileEntries(decodedBaseManifest());
+    const byRole = new Map<string, number>();
+    for (const entry of entries) {
+      byRole.set(entry.role, (byRole.get(entry.role) ?? 0) + 1);
+    }
+    expect(byRole.get("source")).toBe(2);
+    expect(byRole.get("paywallHtml")).toBe(1);
+    expect(byRole.get("paywallJs")).toBe(1);
+    expect(byRole.get("componentManifest")).toBe(1);
+    expect(byRole.get("componentPreview")).toBe(1);
+    expect(byRole.get("componentRuntime")).toBe(1);
+    expect(byRole.get("config")).toBe(1);
+    expect(byRole.get("asset")).toBe(1);
+    expect(byRole.get("componentPanel")).toBeUndefined();
+  });
+
+  it("collects distinct hashes", () => {
+    const hashes = collectManifestHashes(decodedBaseManifest());
+    expect(new Set(hashes).size).toBe(hashes.length);
+    expect(hashes).toContain(hex("a"));
+    expect(hashes).toContain(hex("4"));
+  });
+
+  it("finds declared contentTypes by hash", () => {
+    const manifest = decodedBaseManifest();
+    expect(findDeclaredContentType(manifest, hex("b"))).toBe("text/html; charset=utf-8");
+    expect(findDeclaredContentType(manifest, hex("4"))).toBe("image/png");
+    // Source files are DeployFiles without a contentType.
+    expect(findDeclaredContentType(manifest, hex("a"))).toBeNull();
+    expect(findDeclaredContentType(manifest, hex("9"))).toBeNull();
+  });
+
+  it("carries the declared bytes on every entry", () => {
+    const entries = manifestFileEntries(decodedBaseManifest());
+    expect(entries.every((entry) => entry.bytes === 100)).toBe(true);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// §1.1 size caps on actual/recorded bytes
+// ---------------------------------------------------------------------------
+
+describe("sizeCapForRole", () => {
+  it("maps every role to its §1.1 cap", () => {
+    expect(sizeCapForRole("paywallHtml")).toBe(SIZE_CAPS.html);
+    expect(sizeCapForRole("paywallJs")).toBe(SIZE_CAPS.jsBundle);
+    expect(sizeCapForRole("componentRuntime")).toBe(SIZE_CAPS.jsBundle);
+    expect(sizeCapForRole("componentPanel")).toBe(SIZE_CAPS.jsBundle);
+    expect(sizeCapForRole("asset")).toBe(SIZE_CAPS.asset);
+    expect(sizeCapForRole("source")).toBe(SIZE_CAPS.sourceFile);
+    expect(sizeCapForRole("config")).toBe(SIZE_CAPS.config);
+    expect(sizeCapForRole("componentManifest")).toBe(SIZE_CAPS.componentManifest);
+    expect(sizeCapForRole("componentPreview")).toBe(SIZE_CAPS.previewTree);
+  });
+});
+
+describe("validateUploadedBlobSize", () => {
+  const entry = (role: ManifestFileEntry["role"], bytes: number): ManifestFileEntry => ({
+    bytes,
+    logicalPath: `path/to/${role}`,
+    role,
+    sha256: hex("a"),
+  });
+
+  it("passes when the body matches the declared bytes and fits the cap", () => {
+    expect(validateUploadedBlobSize([entry("paywallHtml", 100)], 100)).toEqual([]);
+  });
+
+  it("rejects a declared/actual byte mismatch, naming both numbers", () => {
+    const violations = validateUploadedBlobSize([entry("paywallHtml", 100)], 120);
+    expect(violations.length).toBe(1);
+    expect(violations[0]).toContain("120 bytes");
+    expect(violations[0]).toContain("declares 100 bytes");
+  });
+
+  it("rejects bodies exceeding the role cap even when declared bytes agree", () => {
+    const oversize = SIZE_CAPS.html + 1;
+    const violations = validateUploadedBlobSize([entry("paywallHtml", oversize)], oversize);
+    expect(violations.length).toBe(1);
+    expect(violations[0]).toContain(`exceeds the ${SIZE_CAPS.html}-byte cap`);
+  });
+
+  it("applies the role-appropriate cap per declared entry", () => {
+    const size = SIZE_CAPS.config + 1;
+    // The same hash declared as js (cap 5 MB, fine) and config (cap 256 KB, violated).
+    const violations = validateUploadedBlobSize(
+      [entry("paywallJs", size), entry("config", size)],
+      size,
+    );
+    expect(violations.length).toBe(1);
+    expect(violations[0]).toContain("config");
+  });
+
+  it("enforces the source-file and config caps", () => {
+    const sourceSize = SIZE_CAPS.sourceFile + 1;
+    expect(validateUploadedBlobSize([entry("source", sourceSize)], sourceSize)[0]).toContain(
+      `exceeds the ${SIZE_CAPS.sourceFile}-byte cap`,
+    );
+    const configSize = SIZE_CAPS.config + 1;
+    expect(validateUploadedBlobSize([entry("config", configSize)], configSize)[0]).toContain(
+      `exceeds the ${SIZE_CAPS.config}-byte cap`,
+    );
+  });
+});
+
+describe("validateRecordedBlobCaps", () => {
+  it("passes when every recorded blob fits its role cap", () => {
+    const manifest = decodedBaseManifest();
+    const bytes = new Map(collectManifestHashes(manifest).map((hash) => [hash, 100]));
+    expect(validateRecordedBlobCaps(manifest, bytes)).toEqual([]);
+  });
+
+  it("skips hashes without recorded rows (reported separately as incomplete)", () => {
+    expect(validateRecordedBlobCaps(decodedBaseManifest(), new Map())).toEqual([]);
+  });
+
+  it("flags recorded blobs exceeding the role cap", () => {
+    const manifest = decodedBaseManifest();
+    const bytes = new Map(collectManifestHashes(manifest).map((hash) => [hash, 100]));
+    // hex("b") is the paywall html artifact in the base fixture.
+    bytes.set(hex("b"), SIZE_CAPS.html + 1);
+    const violations = validateRecordedBlobCaps(manifest, bytes);
+    expect(violations.length).toBe(1);
+    expect(violations[0]).toContain("paywallHtml");
+    expect(violations[0]).toContain(`exceeding the ${SIZE_CAPS.html}-byte cap`);
+  });
+});
diff --git a/packages/core/src/services/paywallDeploys/PaywallDeployService.ts b/packages/core/src/services/paywallDeploys/PaywallDeployService.ts
new file mode 100644
index 000000000..0aefa69d9
--- /dev/null
+++ b/packages/core/src/services/paywallDeploys/PaywallDeployService.ts
@@ -0,0 +1,1814 @@
+import { Context, Effect, Layer, Option, Predicate, Result, Schema } from "effect";
+import type { SqlError } from "effect/unstable/sql/SqlError";
+
+import { type AnyAuthSession, ActionForbiddenError, AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  type DbError,
+  type DbTransaction,
+  PaywallDeployFileRole,
+  PaywallDeployStatus,
+  PaywallLocationShowingType,
+  PaywallSource,
+  ReleaseStatus,
+  and,
+  eq,
+  inArray,
+  paywallComponentVersions,
+  paywallComponents,
+  paywallDeployBlobs,
+  paywallDeployFiles,
+  paywallDeploys,
+  paywallLocationShowings,
+  paywallReleases,
+  paywalls,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { PaywallAssetConfig } from "../paywallLocations/PaywallAssetConfig.ts";
+import {
+  type PaywallArtifactObject,
+  PaywallArtifactStore,
+  PaywallArtifactStoreError,
+} from "./PaywallArtifactStore.ts";
+import {
+  type ComponentManifest,
+  ComponentManifestSchema,
+  DEPLOY_MANIFEST_SCHEMA_VERSION,
+  type ManifestComponent,
+  type ManifestPaywall,
+  type PaywallDeployManifest,
+  PaywallDeployManifestSchema,
+  PreviewTreeSchema,
+  SIZE_CAPS,
+  type ServingCopy,
+  blobStorageKey,
+  canonicalJsonStringify,
+  collectManifestHashes,
+  componentServingMetadata,
+  componentServingPrefix,
+  computeComponentContentHash,
+  computePaywallContentHash,
+  countSlotNodes,
+  findDeclaredContentType,
+  manifestAssetsByPath,
+  manifestFileEntries,
+  paywallServingHtmlKey,
+  servingCopiesForComponent,
+  servingCopiesForPaywall,
+  sha256Hex,
+  strictParseOptions,
+  validateManifestConstraints,
+  validateRecordedBlobCaps,
+  validateUploadedBlobSize,
+} from "./PaywallDeployManifest.ts";
+
+/**
+ * Catch-all service error. Wraps `DbError` (and `SqlError` from transactions)
+ * and `PaywallArtifactStoreError` (and other infrastructural failures) at the
+ * public-method boundary so callers see one stable error tag.
+ */
+export class PaywallDeployServiceError extends Schema.TaggedErrorClass<PaywallDeployServiceError>(
+  "PaywallDeployServiceError",
+)("PaywallDeployServiceError", { cause: Schema.String }) {}
+
+/**
+ * The manifest declares a `schemaVersion` this server build does not
+ * understand (contract §4.1/§8). The API layer maps this to a `400` with an
+ * "upgrade the CLI" hint — `message` already carries it.
+ */
+export class UnsupportedDeploySchemaVersionError extends Schema.TaggedErrorClass<UnsupportedDeploySchemaVersionError>(
+  "UnsupportedDeploySchemaVersionError",
+)("UnsupportedDeploySchemaVersionError", {
+  schemaVersion: Schema.NullOr(Schema.Number),
+  message: Schema.String,
+}) {}
+
+/**
+ * The manifest (or a stored §2/§3 artifact) failed schema validation or a
+ * §1.1 constraint. Maps to `422`; `violations` carries the per-item details.
+ */
+export class PaywallDeployValidationError extends Schema.TaggedErrorClass<PaywallDeployValidationError>(
+  "PaywallDeployValidationError",
+)("PaywallDeployValidationError", {
+  message: Schema.String,
+  violations: Schema.Array(Schema.String),
+}) {}
+
+/** Deploy row not found (or not visible to the caller's project). */
+export class PaywallDeployNotFoundError extends Schema.TaggedErrorClass<PaywallDeployNotFoundError>(
+  "PaywallDeployNotFoundError",
+)("PaywallDeployNotFoundError", { message: Schema.String }) {}
+
+/** Blob upload attempted against a deploy that is no longer pending. */
+export class PaywallDeployNotPendingError extends Schema.TaggedErrorClass<PaywallDeployNotPendingError>(
+  "PaywallDeployNotPendingError",
+)("PaywallDeployNotPendingError", { message: Schema.String }) {}
+
+/**
+ * Uploaded sha256 is not declared by the deploy's manifest (contract §4.2 —
+ * the API layer maps this to `404`).
+ */
+export class DeployBlobNotDeclaredError extends Schema.TaggedErrorClass<DeployBlobNotDeclaredError>(
+  "DeployBlobNotDeclaredError",
+)("DeployBlobNotDeclaredError", { sha256: Schema.String }) {}
+
+/** Uploaded body does not hash to the declared sha256 (contract §4.2 → `422`). */
+export class DeployBlobHashMismatchError extends Schema.TaggedErrorClass<DeployBlobHashMismatchError>(
+  "DeployBlobHashMismatchError",
+)("DeployBlobHashMismatchError", {
+  expectedSha256: Schema.String,
+  actualSha256: Schema.String,
+}) {}
+
+/**
+ * Finalize attempted while referenced blobs are still missing (contract §4.3
+ * → `409 { missing }`); the deploy stays pending and can be retried.
+ */
+export class IncompleteDeployError extends Schema.TaggedErrorClass<IncompleteDeployError>(
+  "IncompleteDeployError",
+)("IncompleteDeployError", { missing: Schema.Array(Schema.String) }) {}
+
+/** Release row not found (setActivePaywallRelease). */
+export class PaywallReleaseNotFoundError extends Schema.TaggedErrorClass<PaywallReleaseNotFoundError>(
+  "PaywallReleaseNotFoundError",
+)("PaywallReleaseNotFoundError", { message: Schema.String }) {}
+
+/**
+ * Resolves the project the manifest targets from the caller's session:
+ * the project whose `slug` equals `manifest.project` inside an organization
+ * whose `slug` equals `manifest.team` (contract §4). Returns `null` when the
+ * session grants no such project — callers fail with a 403-style error.
+ */
+export const resolveSessionProject = (
+  session: AnyAuthSession,
+  team: string,
+  project: string,
+): { readonly id: string; readonly organizationId: string } | null => {
+  const match = session.projects.find(
+    (p) =>
+      p.slug === project &&
+      session.organizations.some((o) => o.id === p.organizationId && o.slug === team),
+  );
+  return match ? { id: match.id, organizationId: match.organizationId } : null;
+};
+
+const deployStatusLabel = (status: number): "pending" | "ready" =>
+  status === PaywallDeployStatus.ready ? "ready" : "pending";
+
+/**
+ * True when `error` (or anything on its `cause` chain — drizzle wraps the
+ * driver error) is MySQL's ER_DUP_ENTRY (errno 1062), the unique-index
+ * violation raised when two concurrent identical create-deploy POSTs race
+ * past the idempotency read.
+ */
+const isDuplicateKeyError = (error: unknown): boolean => {
+  let current: unknown = error;
+  for (let depth = 0; current !== undefined && current !== null && depth < 5; depth += 1) {
+    if (Predicate.hasProperty(current, "errno") && current.errno === 1062) {
+      return true;
+    }
+    if (Predicate.hasProperty(current, "code") && current.code === "ER_DUP_ENTRY") {
+      return true;
+    }
+    current = Predicate.hasProperty(current, "cause") ? current.cause : undefined;
+  }
+  return false;
+};
+
+export interface CreateDeployResult {
+  readonly deployId: string;
+  /** Manifest file hashes the server does not have stored for this project. */
+  readonly missing: ReadonlyArray<string>;
+}
+
+/**
+ * Builds the finalize-time blob reader. By the time it runs, the per-project
+ * blob ledger claimed every hash exists — a `null` from the store therefore
+ * means ledger/store drift (e.g. the object was deleted out-of-band). The
+ * fetcher deletes the stale ledger rows for exactly those hashes via
+ * `deleteStaleBlobRows` before failing with {@link IncompleteDeployError}, so
+ * the next createDeploy re-reports them as missing and the documented
+ * "re-run deploy" retry converges. Store *errors* are not converted: they
+ * keep failing through the `getObject` error channel.
+ */
+export const makeBlobFetcher =
+  <EGet, EDelete, RGet = never, RDelete = never>(deps: {
+    readonly getObject: (
+      projectId: string,
+      sha256: string,
+    ) => Effect.Effect<PaywallArtifactObject | null, EGet, RGet>;
+    readonly deleteStaleBlobRows: (
+      projectId: string,
+      sha256s: ReadonlyArray<string>,
+    ) => Effect.Effect<void, EDelete, RDelete>;
+  }) =>
+  (
+    projectId: string,
+    sha256: string,
+  ): Effect.Effect<PaywallArtifactObject, IncompleteDeployError | EGet | EDelete, RGet | RDelete> =>
+    Effect.gen(function* () {
+      const object = yield* deps.getObject(projectId, sha256);
+      if (object === null) {
+        yield* deps.deleteStaleBlobRows(projectId, [sha256]);
+        return yield* Effect.fail(new IncompleteDeployError({ missing: [sha256] }));
+      }
+      return object;
+    });
+
+const parseJsonBlob = (body: Uint8Array, label: string) =>
+  Effect.try({
+    catch: () =>
+      new PaywallDeployValidationError({
+        message: `${label} is not valid JSON`,
+        violations: [`${label} is not valid JSON`],
+      }),
+    try: (): unknown => JSON.parse(new TextDecoder().decode(body)),
+  });
+
+/**
+ * Builds the recomputed-hash + stored-artifact validation run ahead of the
+ * finalize commit (contract §4.3 "trusts nothing"): §1.1 constraints, every
+ * declared `contentHash` recomputed from the manifest-listed file hashes, and
+ * the stored §2 component manifests / §3 preview trees fetched and
+ * schema-validated (the blobs were hash-verified at upload, so only their
+ * *content* needs validating). Each decoded preview tree must self-identify
+ * as the manifest state it is filed under — without this, the same file set
+ * with swapped state assignments would collide under one immutable
+ * contentHash. Returns the decoded §2 manifests keyed by component id.
+ */
+export const makeManifestIntegrityVerifier =
+  <EFetch, RFetch = never>(deps: {
+    readonly fetchBlob: (
+      projectId: string,
+      sha256: string,
+    ) => Effect.Effect<PaywallArtifactObject, EFetch, RFetch>;
+  }) =>
+  (
+    projectId: string,
+    manifest: PaywallDeployManifest,
+  ): Effect.Effect<Map<string, ComponentManifest>, PaywallDeployValidationError | EFetch, RFetch> =>
+    Effect.gen(function* () {
+      const violations = [...validateManifestConstraints(manifest)];
+      const assetsByPath = manifestAssetsByPath(manifest);
+
+      for (const paywall of manifest.paywalls) {
+        const assetSha256s: string[] = [];
+        for (const assetPath of paywall.assets) {
+          const asset = assetsByPath.get(assetPath);
+          if (asset) {
+            assetSha256s.push(asset.sha256);
+          }
+        }
+        const recomputed = yield* computePaywallContentHash({
+          assetSha256s,
+          htmlSha256: paywall.artifacts.html.sha256,
+          jsSha256: paywall.artifacts.js.sha256,
+        });
+        if (recomputed !== paywall.contentHash) {
+          violations.push(
+            `paywall "${paywall.id}": contentHash mismatch (declared ${paywall.contentHash}, recomputed ${recomputed})`,
+          );
+        }
+      }
+
+      for (const component of manifest.components) {
+        const recomputed = yield* computeComponentContentHash({
+          manifestSha256: component.manifest.sha256,
+          panelSha256: component.artifacts.panel?.sha256 ?? null,
+          previewSha256s: component.previews.map((preview) => preview.file.sha256),
+          runtimeSha256: component.artifacts.runtime.sha256,
+        });
+        if (recomputed !== component.contentHash) {
+          violations.push(
+            `component "${component.id}": contentHash mismatch (declared ${component.contentHash}, recomputed ${recomputed})`,
+          );
+        }
+      }
+
+      if (violations.length > 0) {
+        return yield* Effect.fail(
+          new PaywallDeployValidationError({
+            message: `Deploy failed validation: ${violations.join("; ")}`,
+            violations,
+          }),
+        );
+      }
+
+      const componentManifests = new Map<string, ComponentManifest>();
+      for (const component of manifest.components) {
+        const label = `component "${component.id}" manifest`;
+        const manifestObject = yield* deps.fetchBlob(projectId, component.manifest.sha256);
+        const manifestJson = yield* parseJsonBlob(manifestObject.body, label);
+        const componentManifest = yield* Schema.decodeUnknownEffect(
+          ComponentManifestSchema,
+          strictParseOptions,
+        )(manifestJson).pipe(
+          Effect.mapError(
+            (error) =>
+              new PaywallDeployValidationError({
+                message: `${label} failed validation: ${error.message}`,
+                violations: [`${label}: ${error.message}`],
+              }),
+          ),
+        );
+        componentManifests.set(component.id, componentManifest);
+
+        for (const preview of component.previews) {
+          const previewLabel = `component "${component.id}" preview "${preview.state}"`;
+          const previewObject = yield* deps.fetchBlob(projectId, preview.file.sha256);
+          const previewJson = yield* parseJsonBlob(previewObject.body, previewLabel);
+          const previewTree = yield* Schema.decodeUnknownEffect(
+            PreviewTreeSchema,
+            strictParseOptions,
+          )(previewJson).pipe(
+            Effect.mapError(
+              (error) =>
+                new PaywallDeployValidationError({
+                  message: `${previewLabel} failed validation: ${error.message}`,
+                  violations: [`${previewLabel}: ${error.message}`],
+                }),
+            ),
+          );
+          if (previewTree.state !== preview.state) {
+            return yield* Effect.fail(
+              new PaywallDeployValidationError({
+                message: `${previewLabel}: preview tree state "${previewTree.state}" does not match the manifest state "${preview.state}"`,
+                violations: [
+                  `${previewLabel}: preview tree state "${previewTree.state}" does not match the manifest state "${preview.state}"`,
+                ],
+              }),
+            );
+          }
+          const slotCount = countSlotNodes(previewTree.root);
+          if (slotCount > 1) {
+            return yield* Effect.fail(
+              new PaywallDeployValidationError({
+                message: `${previewLabel}: preview tree contains ${slotCount} slot nodes; at most one is allowed`,
+                violations: [
+                  `${previewLabel}: preview tree contains ${slotCount} slot nodes; at most one is allowed`,
+                ],
+              }),
+            );
+          }
+        }
+      }
+
+      return componentManifests;
+    });
+
+/**
+ * Builds the finalize-time serving-layout copier: each {@link ServingCopy} is
+ * fetched from the per-project upload layout and written to its public §5/§5.1
+ * target key. Content-addressed targets make the copies idempotent and
+ * retry-safe, so they run before the DB transaction and again on the
+ * re-finalize-of-ready no-op path.
+ */
+export const makeServingLayoutCopier =
+  <EFetch, EPut, RFetch = never, RPut = never>(deps: {
+    readonly fetchBlob: (
+      projectId: string,
+      sha256: string,
+    ) => Effect.Effect<PaywallArtifactObject, EFetch, RFetch>;
+    readonly putObject: (input: {
+      readonly key: string;
+      readonly body: Uint8Array;
+      readonly contentType: string | undefined;
+    }) => Effect.Effect<void, EPut, RPut>;
+  }) =>
+  (
+    projectId: string,
+    copies: ReadonlyArray<ServingCopy>,
+  ): Effect.Effect<void, EFetch | EPut, RFetch | RPut> =>
+    Effect.gen(function* () {
+      for (const copy of copies) {
+        const blob = yield* deps.fetchBlob(projectId, copy.sha256);
+        yield* deps.putObject({
+          body: blob.body,
+          contentType: copy.contentType,
+          key: copy.targetKey,
+        });
+      }
+    });
+
+export interface FinalizedPaywallSummary {
+  /** Manifest paywall id (slug). */
+  readonly id: string;
+  readonly paywallId: string;
+  readonly releaseId: string;
+  readonly version: number;
+  readonly contentHash: string;
+  readonly url: string;
+}
+
+export interface FinalizedComponentSummary {
+  /** Manifest component id (slug). */
+  readonly id: string;
+  readonly componentId: string;
+  readonly version: number;
+  readonly contentHash: string;
+}
+
+/** Contract §4.3 finalize response shape. */
+export interface FinalizeDeployResult {
+  readonly deployId: string;
+  readonly status: "ready";
+  readonly paywalls: ReadonlyArray<FinalizedPaywallSummary>;
+  readonly components: ReadonlyArray<FinalizedComponentSummary>;
+}
+
+export interface PaywallDeployListItem {
+  readonly id: string;
+  readonly status: "pending" | "ready";
+  readonly schemaVersion: number;
+  readonly cliVersion: string;
+  readonly runtimeVersion: string;
+  readonly createdByName: string;
+  readonly createdAt: Date;
+  readonly paywalls: ReadonlyArray<{
+    readonly slug: string;
+    readonly contentHash: string;
+    readonly releaseId: string | null;
+    readonly version: number | null;
+  }>;
+  readonly components: ReadonlyArray<{
+    readonly slug: string;
+    readonly contentHash: string;
+    readonly componentId: string | null;
+    readonly version: number | null;
+  }>;
+}
+
+/**
+ * One component version with the read-time catalog detail the editor needs.
+ * `hasPanel` and `previewStates` derive from the MINTING deploy's manifest
+ * (versionRow.deployId → `paywall_deploys.manifest` → `components[]` entry
+ * matched by contentHash) — the §2 `manifest` column stays raw and its
+ * optional `previewStates` field is never consulted, since only the deploy
+ * manifest's `previews[]` reflects what was actually copied to serving.
+ */
+export interface PaywallComponentVersionDetail {
+  /** Component slug (manifest `components[].id`). */
+  readonly slug: string;
+  readonly version: number;
+  readonly contentHash: string;
+  /** Raw §2 component manifest JSON, exactly as stored at finalize. */
+  readonly manifest: unknown;
+  readonly hasPanel: boolean;
+  readonly previewStates: ReadonlyArray<string>;
+  /** `{publicBaseUrl}/c/<contentHash>` — base of the §5.1 serving layout. */
+  readonly artifactBaseUrl: string;
+  readonly createdAt: Date;
+}
+
+export interface PaywallComponentVersionSummary {
+  readonly version: number;
+  readonly contentHash: string;
+  readonly createdAt: Date;
+}
+
+export interface PaywallComponentListItem {
+  readonly componentId: string;
+  readonly slug: string;
+  readonly title: string | null;
+  readonly latestVersion: number;
+  /** Full detail for the latest version (library/insertion). */
+  readonly latest: PaywallComponentVersionDetail;
+  /** Older versions, newest first — summaries only. */
+  readonly previousVersions: ReadonlyArray<PaywallComponentVersionSummary>;
+}
+
+/**
+ * Decodes stored (validated-at-create) deploy-manifest rows for the catalog
+ * read path, keyed by deploy id. Catalog reads degrade per row: a manifest
+ * that no longer decodes (e.g. written by a newer schema) is skipped with a
+ * warning instead of failing the whole read, so one drifted row cannot take
+ * down the component catalog.
+ */
+export const decodeStoredDeployManifestRows = (
+  rows: ReadonlyArray<{ readonly id: string; readonly manifest: unknown }>,
+): Effect.Effect<Map<string, PaywallDeployManifest>> =>
+  Effect.gen(function* () {
+    const decoded = new Map<string, PaywallDeployManifest>();
+    for (const row of rows) {
+      const result = yield* Effect.result(
+        Schema.decodeUnknownEffect(PaywallDeployManifestSchema, strictParseOptions)(row.manifest),
+      );
+      if (Result.isFailure(result)) {
+        yield* Effect.logWarning(
+          "stored paywall deploy manifest no longer decodes; omitting its component versions from the catalog",
+          { deployId: row.id, error: String(result.failure) },
+        );
+        continue;
+      }
+      decoded.set(row.id, result.success);
+    }
+    return decoded;
+  });
+
+/**
+ * Builds the catalog detail resolver for one component version row. The row's
+ * `deployId` always points at the MINTING deploy (the contentHash-reuse
+ * branch never inserts), so `hasPanel`/`previewStates` derive from that
+ * deploy's manifest entry matched by contentHash. A version whose metadata no
+ * longer resolves — manifest row missing/undecodable, or no `components[]`
+ * entry carrying the contentHash — degrades to `null` with a warning, and
+ * callers omit it instead of failing the whole catalog read.
+ */
+export const makeComponentVersionDetailBuilder =
+  (deps: { readonly publicBaseUrl: string }) =>
+  (input: {
+    readonly slug: string;
+    readonly row: {
+      readonly version: number;
+      readonly contentHash: string;
+      readonly deployId: string;
+      readonly manifest: unknown;
+      readonly createdAt: Date;
+    };
+    readonly deployManifests: ReadonlyMap<string, PaywallDeployManifest>;
+  }): Effect.Effect<PaywallComponentVersionDetail | null> =>
+    Effect.gen(function* () {
+      const deployManifest = input.deployManifests.get(input.row.deployId);
+      const metadata = deployManifest
+        ? componentServingMetadata(deployManifest, input.row.contentHash)
+        : null;
+      if (!metadata) {
+        yield* Effect.logWarning(
+          "paywall component version no longer resolves against its minting deploy manifest; omitting from the catalog",
+          {
+            contentHash: input.row.contentHash,
+            deployId: input.row.deployId,
+            slug: input.slug,
+            version: input.row.version,
+          },
+        );
+        return null;
+      }
+      return {
+        artifactBaseUrl: `${deps.publicBaseUrl}/${componentServingPrefix(input.row.contentHash)}`,
+        contentHash: input.row.contentHash,
+        createdAt: input.row.createdAt,
+        hasPanel: metadata.hasPanel,
+        manifest: input.row.manifest,
+        previewStates: metadata.previewStates,
+        slug: input.slug,
+        version: input.row.version,
+      } satisfies PaywallComponentVersionDetail;
+    });
+
+/**
+ * `PaywallDeployService` orchestrates paywall code deploys (contract §4):
+ *
+ * - `createDeploy` — validate + register a §1 manifest, return missing blobs
+ * - `uploadBlob` — hash-verified, content-addressed blob ingestion
+ * - `finalizeDeploy` — the immutable commit point: re-validate everything,
+ *   publish releases/components, copy blobs into the §5/§5.1 serving layouts
+ * - `listDeploys` — dashboard read-side
+ * - `listComponents` / `getComponentVersions` — editor component catalog;
+ *   reads degrade per row, omitting (with a warning) versions whose stored
+ *   deploy manifest no longer decodes or no longer carries their contentHash
+ * - `setActivePaywallRelease` — rollback/rollforward within one paywall
+ *
+ * `AuditLogPort`, `PaywallArtifactStore`, `PaywallAssetConfig`, `Db`, and
+ * `AuthSession` are provided by the application root.
+ */
+export class PaywallDeployService extends Context.Service<PaywallDeployService>()(
+  "PaywallDeployService",
+  {
+    make: Effect.gen(function* () {
+      const auditLog = yield* AuditLogPort;
+      const store = yield* PaywallArtifactStore;
+      const assetConfig = yield* PaywallAssetConfig;
+      const db = yield* Db;
+
+      // Code releases are served from the content-addressed public layout
+      // (contract §5): `{publicBaseUrl}/p/<contentHash>/index.html`. The CDN
+      // base (`cdnUrl`) stays reserved for visual-editor releases.
+      const releaseUrl = (contentHash: string): string =>
+        `${assetConfig.publicBaseUrl}/${paywallServingHtmlKey(contentHash)}`;
+
+      /** Decodes a stored (already-validated-at-create) manifest row; failure is an invariant break. */
+      const decodeStoredManifest = (manifest: unknown) =>
+        Schema.decodeUnknownEffect(
+          PaywallDeployManifestSchema,
+          strictParseOptions,
+        )(manifest).pipe(
+          Effect.mapError(
+            (error) =>
+              new PaywallDeployServiceError({
+                cause: `stored deploy manifest no longer decodes: ${error.message}`,
+              }),
+          ),
+        );
+
+      /** Manifest hashes minus the blob rows this project already has. */
+      const computeMissing = (projectId: string, hashes: ReadonlyArray<string>) =>
+        Effect.gen(function* () {
+          const unique = [...new Set(hashes)];
+          if (unique.length === 0) {
+            return [];
+          }
+          const rows = yield* db.query.paywallDeployBlobs.findMany({
+            where: { projectId, sha256: { in: unique } },
+          });
+          const present = new Set(rows.map((row) => row.sha256));
+          return unique.filter((hash) => !present.has(hash));
+        });
+
+      /** Reads an uploaded blob; absence at this point means ledger/store drift (see {@link makeBlobFetcher}). */
+      const fetchBlob = makeBlobFetcher({
+        deleteStaleBlobRows: (projectId, sha256s) =>
+          Effect.gen(function* () {
+            yield* db
+              .delete(paywallDeployBlobs)
+              .where(
+                and(
+                  eq(paywallDeployBlobs.projectId, projectId),
+                  inArray(paywallDeployBlobs.sha256, [...sha256s]),
+                ),
+              );
+          }),
+        getObject: (projectId, sha256) => store.getObject(blobStorageKey(projectId, sha256)),
+      });
+
+      /**
+       * Propagates a newly-activated CODE-source release to open showings
+       * (contract §4.3): every open `paywallRelease` showing of this paywall
+       * that still pins a different release is ended and replaced by a new
+       * open showing pinning `newReleaseId` (same location/type/paywall).
+       * Runs inside the caller's transaction so activation and propagation
+       * commit atomically.
+       */
+      const propagateActiveReleaseToOpenShowings = (
+        tx: DbTransaction,
+        input: {
+          readonly paywallId: string;
+          readonly newReleaseId: string;
+          readonly now: Date;
+          readonly createdByUserId: string | null;
+        },
+      ) =>
+        Effect.gen(function* () {
+          const db = tx;
+          const openShowings = yield* db.query.paywallLocationShowings.findMany({
+            where: {
+              paywallId: input.paywallId,
+              type: PaywallLocationShowingType.paywallRelease,
+              endedAt: { isNull: true },
+            },
+          });
+          const stale = openShowings.filter(
+            (showing) => showing.paywallReleaseId !== input.newReleaseId,
+          );
+          if (stale.length === 0) {
+            return;
+          }
+          yield* db
+            .update(paywallLocationShowings)
+            .set({ endedAt: input.now })
+            .where(
+              inArray(
+                paywallLocationShowings.id,
+                stale.map((showing) => showing.id),
+              ),
+            );
+          yield* db.insert(paywallLocationShowings).values(
+            stale.map((showing) => ({
+              createdByUserId: input.createdByUserId,
+              featureFlagId: null,
+              id: generateId("paywallLocationShowing"),
+              paywallId: showing.paywallId,
+              paywallLocationId: showing.paywallLocationId,
+              paywallReleaseId: input.newReleaseId,
+              projectId: showing.projectId,
+              startedAt: input.now,
+              type: showing.type,
+            })),
+          );
+        });
+
+      const annotateSession = (session: AnyAuthSession) =>
+        Effect.gen(function* () {
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+        });
+
+      const createDeploy = Effect.fn("createDeploy")(
+        function* (input: { readonly manifest: unknown }) {
+          const session = yield* AuthSession;
+          yield* annotateSession(session);
+
+          // Peek the version before full validation so an old/new CLI gets a
+          // dedicated "upgrade" error instead of a generic schema failure.
+          const peeked = yield* Schema.decodeUnknownEffect(
+            Schema.Struct({ schemaVersion: Schema.Number }),
+          )(input.manifest).pipe(Effect.option);
+          const peekedVersion = Option.isSome(peeked) ? peeked.value.schemaVersion : null;
+          if (peekedVersion !== DEPLOY_MANIFEST_SCHEMA_VERSION) {
+            return yield* Effect.fail(
+              new UnsupportedDeploySchemaVersionError({
+                message: `Unsupported deploy manifest schemaVersion ${String(peekedVersion)}; this server expects ${DEPLOY_MANIFEST_SCHEMA_VERSION}. Upgrade voidhash-cli and re-run the deploy.`,
+                schemaVersion: peekedVersion,
+              }),
+            );
+          }
+
+          const manifest = yield* Schema.decodeUnknownEffect(
+            PaywallDeployManifestSchema,
+            strictParseOptions,
+          )(input.manifest).pipe(
+            Effect.mapError(
+              (error) =>
+                new PaywallDeployValidationError({
+                  message: `Deploy manifest failed validation: ${error.message}`,
+                  violations: [error.message],
+                }),
+            ),
+          );
+
+          const project = resolveSessionProject(session, manifest.team, manifest.project);
+          if (!project) {
+            return yield* Effect.fail(
+              new ActionForbiddenError({
+                message: `Session has no access to project "${manifest.project}" in team "${manifest.team}"`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", project.id);
+          yield* checkProjectPermission(
+            project.id,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to create paywall deploys for project ${project.id}`,
+          );
+
+          // §1.1 manifest body cap, enforced before the row is stored.
+          const canonical = canonicalJsonStringify(manifest);
+          const manifestBytes = new TextEncoder().encode(canonical).byteLength;
+          if (manifestBytes > SIZE_CAPS.deployManifest) {
+            return yield* Effect.fail(
+              new PaywallDeployValidationError({
+                message: `Deploy manifest exceeds ${SIZE_CAPS.deployManifest} bytes (${manifestBytes})`,
+                violations: [
+                  `manifest body exceeds ${SIZE_CAPS.deployManifest} bytes (${manifestBytes})`,
+                ],
+              }),
+            );
+          }
+
+          const manifestHash = yield* sha256Hex(canonical);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_deploy.manifest_hash", manifestHash);
+
+          const allHashes = collectManifestHashes(manifest);
+
+          // Idempotent re-POST (contract §4.1): the unique
+          // (projectId, manifestHash) row is returned regardless of status —
+          // a pending deploy resumes uploading, a ready one re-finalizes as a
+          // no-op.
+          const existing = yield* db.query.paywallDeploys.findFirst({
+            where: { projectId: project.id, manifestHash },
+          });
+          if (existing) {
+            yield* Effect.annotateCurrentSpan("voidhash.paywall_deploy.id", existing.id);
+            const missing = yield* computeMissing(project.id, allHashes);
+            return { deployId: existing.id, missing } satisfies CreateDeployResult;
+          }
+
+          const deployId = generateId("paywallDeploy");
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_deploy.id", deployId);
+          const fileEntries = manifestFileEntries(manifest);
+
+          // The only duplicate-key source in this transaction is the unique
+          // (projectId, manifestHash) index — paywallDeployFiles only has a
+          // generated-id PK — so an ER_DUP_ENTRY means a concurrent identical
+          // POST won the race and its row is the idempotent deploy (§4.1).
+          const inserted = yield* db
+            .transaction((tx) =>
+              Effect.gen(function* () {
+                yield* tx.insert(paywallDeploys).values({
+                  cliVersion: manifest.cliVersion,
+                  createdByName: session.name,
+                  id: deployId,
+                  manifest,
+                  manifestHash,
+                  projectId: project.id,
+                  runtimeVersion: manifest.runtimeVersion,
+                  schemaVersion: manifest.schemaVersion,
+                  status: PaywallDeployStatus.pending,
+                });
+                if (fileEntries.length > 0) {
+                  yield* tx.insert(paywallDeployFiles).values(
+                    fileEntries.map((entry) => ({
+                      deployId,
+                      id: generateId("paywallDeployFile"),
+                      logicalPath: entry.logicalPath,
+                      role: PaywallDeployFileRole[entry.role],
+                      sha256: entry.sha256,
+                    })),
+                  );
+                }
+              }),
+            )
+            .pipe(
+              Effect.as(true),
+              Effect.catchIf(
+                (error) => isDuplicateKeyError(error),
+                () => Effect.succeed(false),
+              ),
+            );
+          if (!inserted) {
+            const winner = yield* db.query.paywallDeploys.findFirst({
+              where: { projectId: project.id, manifestHash },
+            });
+            if (!winner) {
+              return yield* Effect.fail(
+                new PaywallDeployServiceError({
+                  cause: `deploy insert hit the (projectId, manifestHash) unique index for project ${project.id} but no row was found on re-read`,
+                }),
+              );
+            }
+            yield* Effect.annotateCurrentSpan("voidhash.paywall_deploy.id", winner.id);
+            const missing = yield* computeMissing(project.id, allHashes);
+            return { deployId: winner.id, missing } satisfies CreateDeployResult;
+          }
+
+          yield* auditLog.append({
+            action: AuditLogAction.Created,
+            changes: {
+              cliVersion: manifest.cliVersion,
+              componentCount: manifest.components.length,
+              manifestHash,
+              paywallCount: manifest.paywalls.length,
+            },
+            entityId: deployId,
+            entityType: AuditLogEntityType.PaywallDeploy,
+            projectId: project.id,
+          });
+
+          const missing = yield* computeMissing(project.id, allHashes);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.paywall_deploy.missing_count",
+            missing.length,
+          );
+          yield* Effect.log(`Created paywall deploy ${deployId} for project ${project.id}`);
+          return { deployId, missing } satisfies CreateDeployResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error: DbError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+              SqlError: (error: SqlError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const uploadBlob = Effect.fn("uploadBlob")(
+        function* (input: {
+          readonly deployId: string;
+          readonly sha256: string;
+          readonly body: Uint8Array;
+          readonly contentType?: string;
+        }) {
+          const session = yield* AuthSession;
+          yield* annotateSession(session);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_deploy.id", input.deployId);
+          const sha256 = input.sha256.toLowerCase();
+
+          const deploy = yield* db.query.paywallDeploys.findFirst({
+            where: { id: input.deployId },
+          });
+          if (!deploy) {
+            return yield* Effect.fail(
+              new PaywallDeployNotFoundError({
+                message: `Paywall deploy not found: ${input.deployId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", deploy.projectId);
+          yield* checkProjectPermission(
+            deploy.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to upload blobs for deploy ${input.deployId}`,
+          );
+          if (deploy.status !== PaywallDeployStatus.pending) {
+            return yield* Effect.fail(
+              new PaywallDeployNotPendingError({
+                message: `Deploy ${input.deployId} is not pending; blobs can no longer be uploaded`,
+              }),
+            );
+          }
+
+          const declared = yield* db.query.paywallDeployFiles.findFirst({
+            where: { deployId: deploy.id, sha256 },
+          });
+          if (!declared) {
+            return yield* Effect.fail(new DeployBlobNotDeclaredError({ sha256 }));
+          }
+
+          const actualSha256 = yield* sha256Hex(input.body);
+          if (actualSha256 !== sha256) {
+            return yield* Effect.fail(
+              new DeployBlobHashMismatchError({ actualSha256, expectedSha256: sha256 }),
+            );
+          }
+
+          const manifest = yield* decodeStoredManifest(deploy.manifest);
+
+          // §1.1 enforced on ACTUAL bytes before anything is stored: the body
+          // must match every declared `bytes` for this hash and respect the
+          // role-appropriate size cap.
+          const declaredEntries = manifestFileEntries(manifest).filter(
+            (entry) => entry.sha256 === sha256,
+          );
+          const sizeViolations = validateUploadedBlobSize(declaredEntries, input.body.byteLength);
+          if (sizeViolations.length > 0) {
+            return yield* Effect.fail(
+              new PaywallDeployValidationError({
+                message: `Blob ${sha256} failed size validation: ${sizeViolations.join("; ")}`,
+                violations: sizeViolations,
+              }),
+            );
+          }
+
+          const contentType = input.contentType ?? findDeclaredContentType(manifest, sha256);
+          const storageKey = blobStorageKey(deploy.projectId, sha256);
+          yield* store.putObject({
+            body: input.body,
+            contentType: contentType ?? undefined,
+            key: storageKey,
+          });
+
+          // Insert-if-absent: re-uploads are a no-op. ON CONFLICT DO NOTHING
+          // keeps the surviving row.
+          yield* db
+            .insert(paywallDeployBlobs)
+            .values({
+              bytes: input.body.byteLength,
+              contentType,
+              id: generateId("paywallDeployBlob"),
+              projectId: deploy.projectId,
+              sha256,
+              storageKey,
+            })
+            .onConflictDoNothing({
+              target: [paywallDeployBlobs.projectId, paywallDeployBlobs.sha256],
+            });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error: DbError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+              PaywallArtifactStoreError: (error: PaywallArtifactStoreError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: error.message })),
+            }),
+          ),
+      );
+
+      /** Recomputed-hash + stored-artifact validation ahead of the commit (see {@link makeManifestIntegrityVerifier}). */
+      const verifyManifestIntegrity = makeManifestIntegrityVerifier({ fetchBlob });
+
+      /** Copies blobs into the public §5/§5.1 serving layouts (see {@link makeServingLayoutCopier}). */
+      const copyToServingLayout = makeServingLayoutCopier({
+        fetchBlob,
+        putObject: store.putObject,
+      });
+
+      /** §4.3 per-paywall commit: upsert paywall, publish/reuse the release. */
+      const commitPaywall = (
+        tx: DbTransaction,
+        input: {
+          readonly deployId: string;
+          readonly projectId: string;
+          readonly manifestSchemaVersion: number;
+          readonly manifestPaywall: ManifestPaywall;
+          readonly publishedBy: string;
+          readonly createdByUserId: string | null;
+          readonly now: Date;
+        },
+      ) =>
+        Effect.gen(function* () {
+          const { manifestPaywall } = input;
+          const db = tx;
+          const existingPaywall = yield* db.query.paywalls.findFirst({
+            where: { projectId: input.projectId, slug: manifestPaywall.id },
+          });
+          let paywallId: string;
+          if (existingPaywall) {
+            paywallId = existingPaywall.id;
+            yield* db
+              .update(paywalls)
+              .set({ name: manifestPaywall.title, source: PaywallSource.code })
+              .where(eq(paywalls.id, paywallId));
+          } else {
+            paywallId = generateId("paywall");
+            yield* db.insert(paywalls).values({
+              id: paywallId,
+              name: manifestPaywall.title,
+              projectId: input.projectId,
+              slug: manifestPaywall.id,
+              source: PaywallSource.code,
+            });
+          }
+
+          const latestReleased = yield* db.query.paywallReleases.findFirst({
+            orderBy: { version: "desc" },
+            where: { paywallId, status: ReleaseStatus.released },
+          });
+
+          // Same content as the latest released version → reuse it, no new
+          // version (contract §4.3.2). Deploying expresses "make this code
+          // live", so a reused-but-rolled-back release is re-activated.
+          if (latestReleased && latestReleased.contentHash === manifestPaywall.contentHash) {
+            if (!latestReleased.isActive) {
+              yield* db
+                .update(paywallReleases)
+                .set({ isActive: false })
+                .where(
+                  and(eq(paywallReleases.paywallId, paywallId), eq(paywallReleases.isActive, true)),
+                );
+              yield* db
+                .update(paywallReleases)
+                .set({ isActive: true })
+                .where(eq(paywallReleases.id, latestReleased.id));
+              yield* propagateActiveReleaseToOpenShowings(tx, {
+                createdByUserId: input.createdByUserId,
+                newReleaseId: latestReleased.id,
+                now: input.now,
+                paywallId,
+              });
+            }
+            return {
+              contentHash: manifestPaywall.contentHash,
+              id: manifestPaywall.id,
+              paywallId,
+              releaseId: latestReleased.id,
+              url: releaseUrl(manifestPaywall.contentHash),
+              version: latestReleased.version,
+            } satisfies FinalizedPaywallSummary;
+          }
+
+          const latest = yield* db.query.paywallReleases.findFirst({
+            orderBy: { version: "desc" },
+            where: { paywallId },
+          });
+          const version = (latest?.version ?? 0) + 1;
+          const releaseId = generateId("paywallRelease");
+          yield* db
+            .update(paywallReleases)
+            .set({ isActive: false })
+            .where(
+              and(eq(paywallReleases.paywallId, paywallId), eq(paywallReleases.isActive, true)),
+            );
+          yield* db.insert(paywallReleases).values({
+            contentHash: manifestPaywall.contentHash,
+            deployId: input.deployId,
+            id: releaseId,
+            isActive: true,
+            paywallId,
+            publishedAt: input.now,
+            publishedBy: input.publishedBy,
+            runtimeConfig: {
+              productSlugs: [...manifestPaywall.products],
+              variables: { ...manifestPaywall.variables },
+            },
+            s3Bucket: store.bucketName,
+            s3Key: paywallServingHtmlKey(manifestPaywall.contentHash),
+            schemaVersion: input.manifestSchemaVersion,
+            status: ReleaseStatus.released,
+            version,
+          });
+          yield* propagateActiveReleaseToOpenShowings(tx, {
+            createdByUserId: input.createdByUserId,
+            newReleaseId: releaseId,
+            now: input.now,
+            paywallId,
+          });
+          return {
+            contentHash: manifestPaywall.contentHash,
+            id: manifestPaywall.id,
+            paywallId,
+            releaseId,
+            url: releaseUrl(manifestPaywall.contentHash),
+            version,
+          } satisfies FinalizedPaywallSummary;
+        });
+
+      /** §4.3 per-component commit: upsert component, version when content changed. */
+      const commitComponent = (
+        tx: DbTransaction,
+        input: {
+          readonly deployId: string;
+          readonly projectId: string;
+          readonly manifestComponent: ManifestComponent;
+          readonly componentManifest: ComponentManifest;
+        },
+      ) =>
+        Effect.gen(function* () {
+          const { manifestComponent } = input;
+          const db = tx;
+          const existingComponent = yield* db.query.paywallComponents.findFirst({
+            where: { projectId: input.projectId, slug: manifestComponent.id },
+          });
+          let componentId: string;
+          if (existingComponent) {
+            componentId = existingComponent.id;
+            yield* db
+              .update(paywallComponents)
+              .set({ title: manifestComponent.title ?? null })
+              .where(eq(paywallComponents.id, componentId));
+          } else {
+            componentId = generateId("paywallComponent");
+            yield* db.insert(paywallComponents).values({
+              id: componentId,
+              projectId: input.projectId,
+              slug: manifestComponent.id,
+              title: manifestComponent.title ?? null,
+            });
+          }
+
+          const latestVersion = yield* db.query.paywallComponentVersions.findFirst({
+            orderBy: { version: "desc" },
+            where: { componentId },
+          });
+          if (latestVersion && latestVersion.contentHash === manifestComponent.contentHash) {
+            return {
+              componentId,
+              contentHash: manifestComponent.contentHash,
+              id: manifestComponent.id,
+              version: latestVersion.version,
+            } satisfies FinalizedComponentSummary;
+          }
+
+          const version = (latestVersion?.version ?? 0) + 1;
+          yield* db.insert(paywallComponentVersions).values({
+            componentId,
+            contentHash: manifestComponent.contentHash,
+            deployId: input.deployId,
+            id: generateId("paywallComponentVersion"),
+            manifest: input.componentManifest,
+            version,
+          });
+          return {
+            componentId,
+            contentHash: manifestComponent.contentHash,
+            id: manifestComponent.id,
+            version,
+          } satisfies FinalizedComponentSummary;
+        });
+
+      const finalizeDeploy = Effect.fn("finalizeDeploy")(
+        function* (input: { readonly deployId: string }) {
+          const session = yield* AuthSession;
+          yield* annotateSession(session);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_deploy.id", input.deployId);
+
+          const deploy = yield* db.query.paywallDeploys.findFirst({
+            where: { id: input.deployId },
+          });
+          if (!deploy) {
+            return yield* Effect.fail(
+              new PaywallDeployNotFoundError({
+                message: `Paywall deploy not found: ${input.deployId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", deploy.projectId);
+          yield* checkProjectPermission(
+            deploy.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to finalize deploy ${input.deployId}`,
+          );
+
+          const manifest = yield* decodeStoredManifest(deploy.manifest);
+
+          const allHashes = collectManifestHashes(manifest);
+          const uniqueHashes = [...new Set(allHashes)];
+          const blobRows =
+            uniqueHashes.length === 0
+              ? []
+              : yield* db.query.paywallDeployBlobs.findMany({
+                  where: { projectId: deploy.projectId, sha256: { in: uniqueHashes } },
+                });
+          const present = new Set(blobRows.map((row) => row.sha256));
+          const missing = allHashes.filter((hash) => !present.has(hash));
+          if (missing.length > 0) {
+            return yield* Effect.fail(new IncompleteDeployError({ missing }));
+          }
+
+          // §1.1 caps re-verified against the bytes recorded at upload time
+          // (defense in depth: rows written by older server code may predate
+          // the upload-time enforcement).
+          const capViolations = validateRecordedBlobCaps(
+            manifest,
+            new Map(blobRows.map((row) => [row.sha256, row.bytes])),
+          );
+          if (capViolations.length > 0) {
+            return yield* Effect.fail(
+              new PaywallDeployValidationError({
+                message: `Deploy failed validation: ${capViolations.join("; ")}`,
+                violations: capViolations,
+              }),
+            );
+          }
+
+          const componentManifests = yield* verifyManifestIntegrity(deploy.projectId, manifest);
+
+          // Copy into the public serving layouts before the DB commit: the
+          // copies are content-addressed and idempotent, so a failed commit
+          // leaves no broken state — finalize just retries.
+          const assetsByPath = manifestAssetsByPath(manifest);
+          for (const manifestPaywall of manifest.paywalls) {
+            yield* copyToServingLayout(
+              deploy.projectId,
+              servingCopiesForPaywall(manifestPaywall, assetsByPath),
+            );
+          }
+          for (const manifestComponent of manifest.components) {
+            yield* copyToServingLayout(
+              deploy.projectId,
+              servingCopiesForComponent(manifestComponent),
+            );
+          }
+
+          const now = new Date();
+          const committed = yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const paywallSummaries: FinalizedPaywallSummary[] = [];
+              for (const manifestPaywall of manifest.paywalls) {
+                paywallSummaries.push(
+                  yield* commitPaywall(tx, {
+                    createdByUserId: session.user?.id ?? null,
+                    deployId: deploy.id,
+                    manifestPaywall,
+                    manifestSchemaVersion: manifest.schemaVersion,
+                    now,
+                    projectId: deploy.projectId,
+                    publishedBy: session.name,
+                  }),
+                );
+              }
+
+              const componentSummaries: FinalizedComponentSummary[] = [];
+              for (const manifestComponent of manifest.components) {
+                const componentManifest = componentManifests.get(manifestComponent.id);
+                if (!componentManifest) {
+                  // verifyManifestIntegrity registers every component; a miss
+                  // here is a programming error, not a user input problem.
+                  return yield* Effect.die(
+                    new Error(
+                      `component manifest missing for "${manifestComponent.id}" after validation`,
+                    ),
+                  );
+                }
+                componentSummaries.push(
+                  yield* commitComponent(tx, {
+                    componentManifest,
+                    deployId: deploy.id,
+                    manifestComponent,
+                    projectId: deploy.projectId,
+                  }),
+                );
+              }
+
+              yield* tx
+                .update(paywallDeploys)
+                .set({ status: PaywallDeployStatus.ready })
+                .where(eq(paywallDeploys.id, deploy.id));
+
+              return { componentSummaries, paywallSummaries };
+            }),
+          );
+
+          yield* auditLog.append({
+            action: AuditLogAction.Published,
+            changes: {
+              components: committed.componentSummaries,
+              paywalls: committed.paywallSummaries,
+            },
+            entityId: deploy.id,
+            entityType: AuditLogEntityType.PaywallDeploy,
+            projectId: deploy.projectId,
+          });
+
+          yield* Effect.log(
+            `Finalized paywall deploy ${deploy.id} for project ${deploy.projectId}`,
+          );
+          return {
+            components: committed.componentSummaries,
+            deployId: deploy.id,
+            paywalls: committed.paywallSummaries,
+            status: "ready",
+          } satisfies FinalizeDeployResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error: DbError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+              SqlError: (error: SqlError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+              PaywallArtifactStoreError: (error: PaywallArtifactStoreError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: error.message })),
+            }),
+          ),
+      );
+
+      const listDeploys = Effect.fn("listDeploys")(
+        function* (input: { readonly projectId: string }) {
+          const session = yield* AuthSession;
+          yield* annotateSession(session);
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to list paywall deploys for project ${input.projectId}`,
+          );
+
+          const deploys = yield* db.query.paywallDeploys.findMany({
+            orderBy: { createdAt: "desc" },
+            where: { projectId: input.projectId },
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_deploy.count", deploys.length);
+          if (deploys.length === 0) {
+            return [] satisfies ReadonlyArray<PaywallDeployListItem>;
+          }
+
+          // Stored manifests were schema-validated at create; a row that no
+          // longer decodes (e.g. written by a newer schema) degrades to
+          // empty summaries instead of failing the whole list — but loudly,
+          // so schema drift is observable.
+          const decodedDeploys: Array<{
+            readonly deploy: (typeof deploys)[number];
+            readonly decoded: PaywallDeployManifest | undefined;
+          }> = [];
+          for (const deploy of deploys) {
+            const decodeResult = yield* Effect.result(
+              Schema.decodeUnknownEffect(
+                PaywallDeployManifestSchema,
+                strictParseOptions,
+              )(deploy.manifest),
+            );
+            if (Result.isFailure(decodeResult)) {
+              yield* Effect.logWarning(
+                "paywall deploy manifest no longer decodes; rendering empty summaries",
+                { deployId: deploy.id, error: String(decodeResult.failure) },
+              );
+            }
+            decodedDeploys.push({ decoded: Result.getOrUndefined(decodeResult), deploy });
+          }
+
+          // The §4.3 reuse branch keeps the ORIGINAL deployId on a reused
+          // release/component-version row, so a later deploy whose content
+          // matched gets no row carrying its own deployId. Resolve the
+          // paywall/component rows by (projectId, slug) up front so the
+          // summaries below can fall back to content matching.
+          const paywallSlugs = new Set<string>();
+          const componentSlugs = new Set<string>();
+          for (const { decoded } of decodedDeploys) {
+            for (const paywall of decoded?.paywalls ?? []) {
+              paywallSlugs.add(paywall.id);
+            }
+            for (const component of decoded?.components ?? []) {
+              componentSlugs.add(component.id);
+            }
+          }
+          const paywallRows =
+            paywallSlugs.size === 0
+              ? []
+              : yield* db.query.paywalls.findMany({
+                  where: { projectId: input.projectId, slug: { in: [...paywallSlugs] } },
+                });
+          const paywallIdBySlug = new Map(paywallRows.map((row) => [row.slug, row.id]));
+          const componentRows =
+            componentSlugs.size === 0
+              ? []
+              : yield* db.query.paywallComponents.findMany({
+                  where: { projectId: input.projectId, slug: { in: [...componentSlugs] } },
+                });
+          const componentIdBySlug = new Map(componentRows.map((row) => [row.slug, row.id]));
+
+          const deployIds = deploys.map((deploy) => deploy.id);
+          const releaseFilters: Array<Record<string, unknown>> = [{ deployId: { in: deployIds } }];
+          if (paywallRows.length > 0) {
+            releaseFilters.push({ paywallId: { in: paywallRows.map((row) => row.id) } });
+          }
+          const releases = yield* db.query.paywallReleases.findMany({
+            where: { OR: releaseFilters },
+          });
+          const versionFilters: Array<Record<string, unknown>> = [{ deployId: { in: deployIds } }];
+          if (componentRows.length > 0) {
+            versionFilters.push({ componentId: { in: componentRows.map((row) => row.id) } });
+          }
+          const versionRows = yield* db.query.paywallComponentVersions.findMany({
+            where: { OR: versionFilters },
+          });
+
+          /** Latest released release of `paywallId` carrying `contentHash` (deterministic: max version). */
+          const latestReleaseByContent = (paywallId: string | undefined, contentHash: string) => {
+            let best: (typeof releases)[number] | undefined;
+            for (const row of releases) {
+              if (
+                row.paywallId !== paywallId ||
+                row.contentHash !== contentHash ||
+                row.status !== ReleaseStatus.released
+              ) {
+                continue;
+              }
+              if (best === undefined || row.version > best.version) {
+                best = row;
+              }
+            }
+            return best;
+          };
+          /** Latest component version of `componentId` carrying `contentHash` (deterministic: max version). */
+          const latestVersionByContent = (componentId: string | undefined, contentHash: string) => {
+            let best: (typeof versionRows)[number] | undefined;
+            for (const row of versionRows) {
+              if (row.componentId !== componentId || row.contentHash !== contentHash) {
+                continue;
+              }
+              if (best === undefined || row.version > best.version) {
+                best = row;
+              }
+            }
+            return best;
+          };
+
+          const items: PaywallDeployListItem[] = [];
+          for (const { decoded, deploy } of decodedDeploys) {
+            items.push({
+              cliVersion: deploy.cliVersion,
+              components:
+                decoded?.components.map((component) => {
+                  const versionRow =
+                    versionRows.find(
+                      (row) =>
+                        row.deployId === deploy.id && row.contentHash === component.contentHash,
+                    ) ??
+                    latestVersionByContent(
+                      componentIdBySlug.get(component.id),
+                      component.contentHash,
+                    );
+                  return {
+                    componentId: versionRow?.componentId ?? null,
+                    contentHash: component.contentHash,
+                    slug: component.id,
+                    version: versionRow?.version ?? null,
+                  };
+                }) ?? [],
+              createdAt: deploy.createdAt,
+              createdByName: deploy.createdByName,
+              id: deploy.id,
+              paywalls:
+                decoded?.paywalls.map((paywall) => {
+                  const release =
+                    releases.find(
+                      (row) =>
+                        row.deployId === deploy.id && row.contentHash === paywall.contentHash,
+                    ) ??
+                    latestReleaseByContent(paywallIdBySlug.get(paywall.id), paywall.contentHash);
+                  return {
+                    contentHash: paywall.contentHash,
+                    releaseId: release?.id ?? null,
+                    slug: paywall.id,
+                    version: release?.version ?? null,
+                  };
+                }) ?? [],
+              runtimeVersion: deploy.runtimeVersion,
+              schemaVersion: deploy.schemaVersion,
+              status: deployStatusLabel(deploy.status),
+            });
+          }
+          return items satisfies ReadonlyArray<PaywallDeployListItem>;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error: DbError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * Stored deploy manifests for the given ids, decoded once and keyed by
+       * deploy id; rows that no longer decode are skipped with a warning (see
+       * {@link decodeStoredDeployManifestRows}).
+       */
+      const loadDeployManifests = (deployIds: ReadonlyArray<string>) =>
+        Effect.gen(function* () {
+          const unique = [...new Set(deployIds)];
+          if (unique.length === 0) {
+            return new Map<string, PaywallDeployManifest>();
+          }
+          const rows = yield* db.query.paywallDeploys.findMany({
+            where: { id: { in: unique } },
+          });
+          return yield* decodeStoredDeployManifestRows(rows);
+        });
+
+      /** Catalog detail for one version row, `null` on drift (see {@link makeComponentVersionDetailBuilder}). */
+      const buildVersionDetail = makeComponentVersionDetailBuilder({
+        publicBaseUrl: assetConfig.publicBaseUrl,
+      });
+
+      const listComponents = Effect.fn("listPaywallComponents")(
+        function* (input: { readonly projectId: string }) {
+          const session = yield* AuthSession;
+          yield* annotateSession(session);
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to list paywall components for project ${input.projectId}`,
+          );
+
+          const components = yield* db.query.paywallComponents.findMany({
+            where: { projectId: input.projectId },
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_component.count", components.length);
+          if (components.length === 0) {
+            return [] satisfies ReadonlyArray<PaywallComponentListItem>;
+          }
+
+          const versionRows = yield* db.query.paywallComponentVersions.findMany({
+            orderBy: { version: "desc" },
+            where: { componentId: { in: components.map((component) => component.id) } },
+          });
+          const versionsByComponentId = new Map<string, typeof versionRows>();
+          for (const row of versionRows) {
+            const group = versionsByComponentId.get(row.componentId);
+            if (group) {
+              group.push(row);
+            } else {
+              versionsByComponentId.set(row.componentId, [row]);
+            }
+          }
+
+          // Only the latest version per component needs the deploy-manifest
+          // join — previous versions are summaries.
+          const deployManifests = yield* loadDeployManifests(
+            components.flatMap((component) => {
+              const latest = versionsByComponentId.get(component.id)?.[0];
+              return latest ? [latest.deployId] : [];
+            }),
+          );
+
+          const items: PaywallComponentListItem[] = [];
+          for (const component of [...components].sort((a, b) =>
+            a.slug < b.slug ? -1 : a.slug > b.slug ? 1 : 0,
+          )) {
+            const versions = versionsByComponentId.get(component.id) ?? [];
+            const latest = versions[0];
+            if (!latest) {
+              // Finalize inserts the component and its first version in one
+              // transaction; a versionless component is observable drift, not
+              // a list failure.
+              yield* Effect.logWarning(
+                `paywall component ${component.id} has no versions; omitting from the catalog`,
+              );
+              continue;
+            }
+            const latestDetail = yield* buildVersionDetail({
+              deployManifests,
+              row: latest,
+              slug: component.slug,
+            });
+            if (!latestDetail) {
+              continue;
+            }
+            items.push({
+              componentId: component.id,
+              latest: latestDetail,
+              latestVersion: latest.version,
+              previousVersions: versions.slice(1).map((row) => ({
+                contentHash: row.contentHash,
+                createdAt: row.createdAt,
+                version: row.version,
+              })),
+              slug: component.slug,
+              title: component.title,
+            });
+          }
+          return items satisfies ReadonlyArray<PaywallComponentListItem>;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error: DbError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const getComponentVersions = Effect.fn("getPaywallComponentVersions")(
+        function* (input: {
+          readonly projectId: string;
+          readonly refs: ReadonlyArray<{ readonly slug: string; readonly version: number }>;
+        }) {
+          const session = yield* AuthSession;
+          yield* annotateSession(session);
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to read paywall components for project ${input.projectId}`,
+          );
+
+          // Dedupe while preserving first-occurrence order; unknown refs are
+          // simply absent from the result (the editor flags them as
+          // missing-from-catalog).
+          const refs: Array<{ readonly slug: string; readonly version: number }> = [];
+          const seenRefs = new Set<string>();
+          for (const ref of input.refs) {
+            const key = `${ref.slug}@${ref.version}`;
+            if (!seenRefs.has(key)) {
+              seenRefs.add(key);
+              refs.push(ref);
+            }
+          }
+          if (refs.length === 0) {
+            return [] satisfies ReadonlyArray<PaywallComponentVersionDetail>;
+          }
+
+          const components = yield* db.query.paywallComponents.findMany({
+            where: {
+              projectId: input.projectId,
+              slug: { in: [...new Set(refs.map((ref) => ref.slug))] },
+            },
+          });
+          if (components.length === 0) {
+            return [] satisfies ReadonlyArray<PaywallComponentVersionDetail>;
+          }
+          const componentBySlug = new Map(
+            components.map((component) => [component.slug, component]),
+          );
+
+          const versionRows = yield* db.query.paywallComponentVersions.findMany({
+            where: { componentId: { in: components.map((component) => component.id) } },
+          });
+          const rowByRef = new Map<string, (typeof versionRows)[number]>();
+          for (const row of versionRows) {
+            rowByRef.set(`${row.componentId}@${row.version}`, row);
+          }
+
+          const matched: Array<{
+            readonly slug: string;
+            readonly row: (typeof versionRows)[number];
+          }> = [];
+          for (const ref of refs) {
+            const component = componentBySlug.get(ref.slug);
+            const row = component ? rowByRef.get(`${component.id}@${ref.version}`) : undefined;
+            if (row) {
+              matched.push({ row, slug: ref.slug });
+            }
+          }
+
+          const deployManifests = yield* loadDeployManifests(
+            matched.map((entry) => entry.row.deployId),
+          );
+          const details: PaywallComponentVersionDetail[] = [];
+          for (const entry of matched) {
+            const detail = yield* buildVersionDetail({
+              deployManifests,
+              row: entry.row,
+              slug: entry.slug,
+            });
+            // Drifted rows are omitted like unknown refs — the editor already
+            // flags absent refs as missing-from-catalog.
+            if (detail) {
+              details.push(detail);
+            }
+          }
+          return details satisfies ReadonlyArray<PaywallComponentVersionDetail>;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error: DbError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const setActivePaywallRelease = Effect.fn("setActivePaywallRelease")(
+        function* (input: { readonly releaseId: string }) {
+          const session = yield* AuthSession;
+          yield* annotateSession(session);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_release.id", input.releaseId);
+
+          const release = yield* db.query.paywallReleases.findFirst({
+            where: { id: input.releaseId },
+          });
+          if (!release) {
+            return yield* Effect.fail(
+              new PaywallReleaseNotFoundError({
+                message: `Paywall release not found: ${input.releaseId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.paywall.id", release.paywallId);
+          const paywall = yield* db.query.paywalls.findFirst({
+            where: { id: release.paywallId },
+          });
+          if (!paywall) {
+            return yield* Effect.fail(
+              new PaywallReleaseNotFoundError({
+                message: `Paywall not found for release: ${input.releaseId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
+          yield* checkProjectPermission(
+            paywall.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to activate release ${input.releaseId}`,
+          );
+          if (release.status !== ReleaseStatus.released) {
+            return yield* Effect.fail(
+              new PaywallDeployValidationError({
+                message: `Release ${input.releaseId} is not released and cannot be activated`,
+                violations: [`release ${input.releaseId} has status ${release.status}`],
+              }),
+            );
+          }
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(paywallReleases)
+                .set({ isActive: false })
+                .where(
+                  and(
+                    eq(paywallReleases.paywallId, release.paywallId),
+                    eq(paywallReleases.isActive, true),
+                  ),
+                );
+              yield* tx
+                .update(paywallReleases)
+                .set({ isActive: true })
+                .where(eq(paywallReleases.id, release.id));
+              // Activation pins open showings to the newly-active release
+              // for CODE-source paywalls (contract §4.3); visual-editor
+              // paywalls keep their explicitly-assigned showings.
+              if (paywall.source === PaywallSource.code) {
+                yield* propagateActiveReleaseToOpenShowings(tx, {
+                  createdByUserId: session.user?.id ?? null,
+                  newReleaseId: release.id,
+                  now: new Date(),
+                  paywallId: release.paywallId,
+                });
+              }
+            }),
+          );
+
+          yield* auditLog.append({
+            action: AuditLogAction.Updated,
+            changes: { isActive: true, version: release.version },
+            entityId: release.id,
+            entityType: AuditLogEntityType.PaywallRelease,
+            parentEntityId: release.paywallId,
+            projectId: paywall.projectId,
+          });
+
+          return { id: release.id, version: release.version };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error: DbError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+              SqlError: (error: SqlError) =>
+                Effect.fail(new PaywallDeployServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return {
+        createDeploy,
+        finalizeDeploy,
+        getComponentVersions,
+        listComponents,
+        listDeploys,
+        setActivePaywallRelease,
+        uploadBlob,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaywallDeployService)(PaywallDeployService.make);
+}
diff --git a/packages/core/src/services/paywallDeploys/PaywallDeployService.unit.test.ts b/packages/core/src/services/paywallDeploys/PaywallDeployService.unit.test.ts
new file mode 100644
index 000000000..00f1df0e1
--- /dev/null
+++ b/packages/core/src/services/paywallDeploys/PaywallDeployService.unit.test.ts
@@ -0,0 +1,604 @@
+import { Effect, Layer, Result, Schema } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import type { AnyAuthSession } from "../../domain/auth/Auth.ts";
+import {
+  PaywallArtifactStore,
+  PaywallArtifactStoreError,
+  type PaywallArtifactStoreShape,
+} from "./PaywallArtifactStore.ts";
+import {
+  IncompleteDeployError,
+  PaywallDeployValidationError,
+  decodeStoredDeployManifestRows,
+  makeBlobFetcher,
+  makeComponentVersionDetailBuilder,
+  makeManifestIntegrityVerifier,
+  makeServingLayoutCopier,
+  resolveSessionProject,
+} from "./PaywallDeployService.ts";
+import {
+  PaywallDeployManifestSchema,
+  blobStorageKey,
+  computeComponentContentHash,
+  servingCopiesForComponent,
+  sha256Hex,
+  strictParseOptions,
+} from "./PaywallDeployManifest.ts";
+
+// ---------------------------------------------------------------------------
+// resolveSessionProject (contract §4 team/project slug authorization)
+// ---------------------------------------------------------------------------
+
+const makeSession = (input: {
+  readonly organizations: ReadonlyArray<{ readonly id: string; readonly slug: string }>;
+  readonly projects: ReadonlyArray<{
+    readonly id: string;
+    readonly slug: string;
+    readonly organizationId: string;
+  }>;
+}): AnyAuthSession => ({
+  cookie: null,
+  method: "secret-key",
+  name: "ci-key",
+  organizations: input.organizations.map((organization) => ({
+    id: organization.id,
+    logo: null,
+    name: organization.slug,
+    permissions: ["project:all"],
+    slug: organization.slug,
+    workosOrganizationId: null,
+  })),
+  person: null,
+  projects: input.projects.map((project) => ({
+    id: project.id,
+    logo: null,
+    name: project.slug,
+    organizationId: project.organizationId,
+    permissions: ["project:all"],
+    slug: project.slug,
+  })),
+  user: null,
+});
+
+describe("resolveSessionProject", () => {
+  const session = makeSession({
+    organizations: [
+      { id: "org_1", slug: "acme" },
+      { id: "org_2", slug: "globex" },
+    ],
+    projects: [
+      { id: "proj_1", organizationId: "org_1", slug: "app" },
+      { id: "proj_2", organizationId: "org_2", slug: "app" },
+      { id: "proj_3", organizationId: "org_1", slug: "site" },
+    ],
+  });
+
+  it("matches the project by (team slug, project slug)", () => {
+    expect(resolveSessionProject(session, "acme", "app")).toEqual({
+      id: "proj_1",
+      organizationId: "org_1",
+    });
+  });
+
+  it("disambiguates identical project slugs by team", () => {
+    expect(resolveSessionProject(session, "globex", "app")).toEqual({
+      id: "proj_2",
+      organizationId: "org_2",
+    });
+  });
+
+  it("returns null for an unknown project slug", () => {
+    expect(resolveSessionProject(session, "acme", "nope")).toBeNull();
+  });
+
+  it("returns null when the project exists in a different team", () => {
+    expect(resolveSessionProject(session, "globex", "site")).toBeNull();
+  });
+
+  it("returns null for an unknown team slug", () => {
+    expect(resolveSessionProject(session, "initech", "app")).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// In-memory PaywallArtifactStore stub
+// ---------------------------------------------------------------------------
+
+/**
+ * Reference in-memory implementation of the {@link PaywallArtifactStore} port
+ * contract, usable as a layer in Db-free service tests. Mirrors the semantics
+ * live adapters must provide: last-write-wins puts, `null` for missing keys.
+ */
+const makeInMemoryArtifactStore = (bucketName = "test-bucket") => {
+  const objects = new Map<string, { body: Uint8Array; contentType: string | null }>();
+  const shape: PaywallArtifactStoreShape = {
+    bucketName,
+    getObject: (key) => Effect.sync(() => objects.get(key) ?? null),
+    head: (key) =>
+      Effect.sync(() => {
+        const object = objects.get(key);
+        return object ? { size: object.body.byteLength } : null;
+      }),
+    putObject: ({ body, contentType, key }) =>
+      Effect.sync(() => {
+        objects.set(key, { body, contentType: contentType ?? null });
+      }),
+  };
+  return { layer: Layer.succeed(PaywallArtifactStore, shape), objects, shape };
+};
+
+describe("in-memory PaywallArtifactStore stub", () => {
+  it("round-trips put/get/head through the port tag", async () => {
+    const stub = makeInMemoryArtifactStore();
+    const program = Effect.gen(function* () {
+      const store = yield* PaywallArtifactStore;
+      expect(store.bucketName).toBe("test-bucket");
+      yield* store.putObject({
+        body: new TextEncoder().encode("<html></html>"),
+        contentType: "text/html",
+        key: "blobs/proj_1/abc",
+      });
+      const found = yield* store.getObject("blobs/proj_1/abc");
+      const missing = yield* store.getObject("blobs/proj_1/missing");
+      const foundHead = yield* store.head("blobs/proj_1/abc");
+      const missingHead = yield* store.head("blobs/proj_1/missing");
+      return { found, foundHead, missing, missingHead };
+    }).pipe(Effect.provide(stub.layer));
+
+    const result = await Effect.runPromise(program);
+    expect(result.found?.contentType).toBe("text/html");
+    expect(new TextDecoder().decode(result.found?.body)).toBe("<html></html>");
+    expect(result.foundHead).toEqual({ size: 13 });
+    expect(result.missing).toBeNull();
+    expect(result.missingHead).toBeNull();
+  });
+
+  it("treats puts as idempotent overwrites", async () => {
+    const stub = makeInMemoryArtifactStore();
+    const program = Effect.gen(function* () {
+      const store = yield* PaywallArtifactStore;
+      yield* store.putObject({
+        body: new TextEncoder().encode("one"),
+        contentType: undefined,
+        key: "k",
+      });
+      yield* store.putObject({
+        body: new TextEncoder().encode("one"),
+        contentType: undefined,
+        key: "k",
+      });
+      return yield* store.head("k");
+    }).pipe(Effect.provide(stub.layer));
+    expect(await Effect.runPromise(program)).toEqual({ size: 3 });
+  });
+});
+
+// ---------------------------------------------------------------------------
+// makeBlobFetcher (finalize-time ledger/store drift convergence)
+// ---------------------------------------------------------------------------
+
+describe("makeBlobFetcher", () => {
+  const PROJECT_ID = "proj_1";
+  const SHA = "a".repeat(64);
+
+  /** Fetcher backed by the in-memory store stub plus a recording ledger delete. */
+  const makeFetcher = () => {
+    const stub = makeInMemoryArtifactStore();
+    const deletedHashes: Array<{ projectId: string; sha256s: ReadonlyArray<string> }> = [];
+    const fetchBlob = makeBlobFetcher({
+      deleteStaleBlobRows: (projectId, sha256s) =>
+        Effect.sync(() => {
+          deletedHashes.push({ projectId, sha256s });
+        }),
+      getObject: (projectId, sha256) => stub.shape.getObject(blobStorageKey(projectId, sha256)),
+    });
+    return { deletedHashes, fetchBlob, stub };
+  };
+
+  it("returns the stored object without touching the ledger", async () => {
+    const { deletedHashes, fetchBlob, stub } = makeFetcher();
+    stub.objects.set(blobStorageKey(PROJECT_ID, SHA), {
+      body: new TextEncoder().encode("payload"),
+      contentType: "text/html",
+    });
+
+    const object = await Effect.runPromise(fetchBlob(PROJECT_ID, SHA));
+
+    expect(new TextDecoder().decode(object.body)).toBe("payload");
+    expect(deletedHashes).toEqual([]);
+  });
+
+  it("deletes the stale ledger row for exactly the missing hash before failing incomplete", async () => {
+    const { deletedHashes, fetchBlob } = makeFetcher();
+
+    const result = await Effect.runPromise(Effect.result(fetchBlob(PROJECT_ID, SHA)));
+
+    const failure = Result.isFailure(result) ? result.failure : null;
+    expect(failure).toBeInstanceOf(IncompleteDeployError);
+    if (failure instanceof IncompleteDeployError) {
+      expect(failure.missing).toEqual([SHA]);
+    }
+    expect(deletedHashes).toEqual([{ projectId: PROJECT_ID, sha256s: [SHA] }]);
+  });
+
+  it("propagates store errors as errors without deleting ledger rows", async () => {
+    const deletedHashes: Array<ReadonlyArray<string>> = [];
+    const fetchBlob = makeBlobFetcher({
+      deleteStaleBlobRows: (_projectId, sha256s) =>
+        Effect.sync(() => {
+          deletedHashes.push(sha256s);
+        }),
+      getObject: () =>
+        Effect.fail(new PaywallArtifactStoreError({ cause: "boom", message: "store down" })),
+    });
+
+    const result = await Effect.runPromise(Effect.result(fetchBlob(PROJECT_ID, SHA)));
+
+    const failure = Result.isFailure(result) ? result.failure : null;
+    expect(failure).toBeInstanceOf(PaywallArtifactStoreError);
+    expect(deletedHashes).toEqual([]);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Component-only deploy fixture with REAL hashes (verifier recomputes them)
+// ---------------------------------------------------------------------------
+
+const FIXTURE_PROJECT_ID = "proj_fixture";
+const COMPONENT_SLUG = "product-option";
+
+const encoder = new TextEncoder();
+
+const makeBlob = (content: string) =>
+  Effect.gen(function* () {
+    const body = encoder.encode(content);
+    const sha256 = yield* sha256Hex(body);
+    return { body, sha256 };
+  });
+
+/**
+ * Builds a minimal component-only §1 deploy manifest whose declared sha256s
+ * and contentHash are genuinely computed from the fixture blob bodies, plus
+ * those bodies — so `makeManifestIntegrityVerifier` (which recomputes every
+ * hash) accepts it unless an option intentionally breaks an invariant.
+ */
+const buildComponentDeployFixture = (options?: {
+  readonly panel?: boolean;
+  readonly previewState?: string;
+  readonly treeState?: string;
+  readonly omitPreviews?: boolean;
+}) =>
+  Effect.gen(function* () {
+    const previewState = options?.previewState ?? "default";
+    const treeState = options?.treeState ?? previewState;
+
+    const componentManifestJson = {
+      actions: {},
+      manifestVersion: 2,
+      props: {},
+    };
+    const manifestBlob = yield* makeBlob(JSON.stringify(componentManifestJson));
+    const previewBlob = yield* makeBlob(
+      JSON.stringify({
+        root: { children: [], style: {}, type: "view" },
+        state: treeState,
+        treeVersion: 1,
+      }),
+    );
+    const runtimeBlob = yield* makeBlob('export const runtime = "unit";');
+    const panelBlob = options?.panel ? yield* makeBlob('export const panel = "unit";') : null;
+
+    const contentHash = yield* computeComponentContentHash({
+      manifestSha256: manifestBlob.sha256,
+      panelSha256: panelBlob?.sha256 ?? null,
+      previewSha256s: options?.omitPreviews ? [] : [previewBlob.sha256],
+      runtimeSha256: runtimeBlob.sha256,
+    });
+
+    const sourceBlob = yield* makeBlob("export default defineComponent();");
+    const configBlob = yield* makeBlob("export default {};");
+
+    const manifest = yield* Schema.decodeUnknownEffect(
+      PaywallDeployManifestSchema,
+      strictParseOptions,
+    )({
+      assets: [],
+      cliVersion: "0.0.1-unit",
+      components: [
+        {
+          artifacts: {
+            panel: panelBlob
+              ? {
+                  bytes: panelBlob.body.byteLength,
+                  contentType: "text/javascript; charset=utf-8",
+                  path: `.voidhash/.build/components/${COMPONENT_SLUG}/panel.js`,
+                  sha256: panelBlob.sha256,
+                }
+              : null,
+            runtime: {
+              bytes: runtimeBlob.body.byteLength,
+              contentType: "text/javascript; charset=utf-8",
+              path: `.voidhash/.build/components/${COMPONENT_SLUG}/runtime.js`,
+              sha256: runtimeBlob.sha256,
+            },
+          },
+          contentHash,
+          id: COMPONENT_SLUG,
+          manifest: {
+            bytes: manifestBlob.body.byteLength,
+            contentType: "application/json",
+            path: `.voidhash/.build/components/${COMPONENT_SLUG}/manifest.json`,
+            sha256: manifestBlob.sha256,
+          },
+          previews: options?.omitPreviews
+            ? []
+            : [
+                {
+                  file: {
+                    bytes: previewBlob.body.byteLength,
+                    contentType: "application/json",
+                    path: `.voidhash/.build/components/${COMPONENT_SLUG}/previews/${previewState}.json`,
+                    sha256: previewBlob.sha256,
+                  },
+                  state: previewState,
+                },
+              ],
+          source: {
+            bytes: sourceBlob.body.byteLength,
+            path: `.voidhash/components/${COMPONENT_SLUG}.tsx`,
+            sha256: sourceBlob.sha256,
+          },
+          title: "Product Option",
+        },
+      ],
+      config: {
+        bytes: configBlob.body.byteLength,
+        path: "voidhash.config.ts",
+        sha256: configBlob.sha256,
+      },
+      createdAt: "2026-06-11T10:00:00.000Z",
+      paywalls: [],
+      project: "dev-proj",
+      runtimeVersion: "0.0.1-unit",
+      schemaVersion: 2,
+      team: "voidhash-dev-sro",
+    });
+
+    const blobs = [manifestBlob, previewBlob, runtimeBlob, ...(panelBlob ? [panelBlob] : [])];
+    return { blobs, componentManifestJson, contentHash, manifest };
+  });
+
+/** In-memory store pre-seeded with the fixture blobs at their upload keys. */
+const makeSeededHarness = (blobs: ReadonlyArray<{ body: Uint8Array; sha256: string }>) => {
+  const stub = makeInMemoryArtifactStore();
+  for (const blob of blobs) {
+    stub.objects.set(blobStorageKey(FIXTURE_PROJECT_ID, blob.sha256), {
+      body: blob.body,
+      contentType: null,
+    });
+  }
+  const fetchBlob = makeBlobFetcher({
+    deleteStaleBlobRows: () => Effect.void,
+    getObject: (projectId, sha256) => stub.shape.getObject(blobStorageKey(projectId, sha256)),
+  });
+  return { fetchBlob, stub };
+};
+
+// ---------------------------------------------------------------------------
+// makeManifestIntegrityVerifier (finalize validation, §4.3 "trusts nothing")
+// ---------------------------------------------------------------------------
+
+describe("makeManifestIntegrityVerifier", () => {
+  it("returns the decoded §2 manifests for a valid component-only deploy", async () => {
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const fixture = yield* buildComponentDeployFixture();
+        const { fetchBlob } = makeSeededHarness(fixture.blobs);
+        const verify = makeManifestIntegrityVerifier({ fetchBlob });
+        return yield* verify(FIXTURE_PROJECT_ID, fixture.manifest);
+      }),
+    );
+    expect([...result.keys()]).toEqual([COMPONENT_SLUG]);
+    // v2 dropped the manifest `id`; the map is keyed by the deploy slug and the
+    // decoded value is the id-less §2 manifest.
+    expect(result.get(COMPONENT_SLUG)?.manifestVersion).toBe(2);
+  });
+
+  it("rejects a preview tree whose state does not match its manifest entry", async () => {
+    const result = await Effect.runPromise(
+      Effect.result(
+        Effect.gen(function* () {
+          const fixture = yield* buildComponentDeployFixture({ treeState: "trial" });
+          const { fetchBlob } = makeSeededHarness(fixture.blobs);
+          const verify = makeManifestIntegrityVerifier({ fetchBlob });
+          return yield* verify(FIXTURE_PROJECT_ID, fixture.manifest);
+        }),
+      ),
+    );
+    const failure = Result.isFailure(result) ? result.failure : null;
+    expect(failure).toBeInstanceOf(PaywallDeployValidationError);
+    if (failure instanceof PaywallDeployValidationError) {
+      expect(failure.message).toContain('preview tree state "trial"');
+      expect(failure.message).toContain('does not match the manifest state "default"');
+    }
+  });
+
+  it("rejects a component with no previews", async () => {
+    const result = await Effect.runPromise(
+      Effect.result(
+        Effect.gen(function* () {
+          const fixture = yield* buildComponentDeployFixture({ omitPreviews: true });
+          const { fetchBlob } = makeSeededHarness(fixture.blobs);
+          const verify = makeManifestIntegrityVerifier({ fetchBlob });
+          return yield* verify(FIXTURE_PROJECT_ID, fixture.manifest);
+        }),
+      ),
+    );
+    const failure = Result.isFailure(result) ? result.failure : null;
+    expect(failure).toBeInstanceOf(PaywallDeployValidationError);
+    if (failure instanceof PaywallDeployValidationError) {
+      expect(failure.violations.some((v) => v.includes("previews must not be empty"))).toBe(true);
+    }
+  });
+
+  it("rejects preview state names containing a path separator", async () => {
+    const result = await Effect.runPromise(
+      Effect.result(
+        Effect.gen(function* () {
+          const fixture = yield* buildComponentDeployFixture({ previewState: "de/fault" });
+          const { fetchBlob } = makeSeededHarness(fixture.blobs);
+          const verify = makeManifestIntegrityVerifier({ fetchBlob });
+          return yield* verify(FIXTURE_PROJECT_ID, fixture.manifest);
+        }),
+      ),
+    );
+    const failure = Result.isFailure(result) ? result.failure : null;
+    expect(failure).toBeInstanceOf(PaywallDeployValidationError);
+    if (failure instanceof PaywallDeployValidationError) {
+      expect(failure.violations.some((v) => v.includes('state "de/fault" is malformed'))).toBe(
+        true,
+      );
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Catalog-read degradation (listComponents / getComponentVersions)
+// ---------------------------------------------------------------------------
+
+describe("catalog reads degrade per row on manifest drift", () => {
+  const PUBLIC_BASE_URL = "https://assets.example";
+
+  it("skips an undecodable stored manifest row and keeps decoding the healthy ones", async () => {
+    const decoded = await Effect.runPromise(
+      Effect.gen(function* () {
+        const fixture = yield* buildComponentDeployFixture();
+        return yield* decodeStoredDeployManifestRows([
+          { id: "dep_good", manifest: fixture.manifest },
+          { id: "dep_drifted", manifest: { schemaVersion: 99, unexpected: true } },
+        ]);
+      }),
+    );
+    expect([...decoded.keys()]).toEqual(["dep_good"]);
+    expect(decoded.get("dep_good")?.components[0]?.id).toBe(COMPONENT_SLUG);
+  });
+
+  it("resolves the detail for a healthy version row and omits drifted ones", async () => {
+    const { details, fixture } = await Effect.runPromise(
+      Effect.gen(function* () {
+        const fixture = yield* buildComponentDeployFixture({ panel: true });
+        const deployManifests = yield* decodeStoredDeployManifestRows([
+          { id: "dep_good", manifest: fixture.manifest },
+          { id: "dep_drifted", manifest: { schemaVersion: 99 } },
+        ]);
+        const buildVersionDetail = makeComponentVersionDetailBuilder({
+          publicBaseUrl: PUBLIC_BASE_URL,
+        });
+        const rowBase = {
+          createdAt: new Date("2026-06-11T10:00:00.000Z"),
+          manifest: fixture.componentManifestJson,
+        };
+        const healthy = yield* buildVersionDetail({
+          deployManifests,
+          row: { ...rowBase, contentHash: fixture.contentHash, deployId: "dep_good", version: 2 },
+          slug: COMPONENT_SLUG,
+        });
+        // Minting deploy's manifest row no longer decodes (skipped above).
+        const driftedManifest = yield* buildVersionDetail({
+          deployManifests,
+          row: {
+            ...rowBase,
+            contentHash: fixture.contentHash,
+            deployId: "dep_drifted",
+            version: 1,
+          },
+          slug: COMPONENT_SLUG,
+        });
+        // Manifest decodes, but carries no components[] entry for the hash.
+        const driftedHash = yield* buildVersionDetail({
+          deployManifests,
+          row: { ...rowBase, contentHash: "f".repeat(64), deployId: "dep_good", version: 3 },
+          slug: COMPONENT_SLUG,
+        });
+        return { details: { driftedHash, driftedManifest, healthy }, fixture };
+      }),
+    );
+    expect(details.healthy).toMatchObject({
+      artifactBaseUrl: `${PUBLIC_BASE_URL}/c/${fixture.contentHash}`,
+      contentHash: fixture.contentHash,
+      hasPanel: true,
+      previewStates: ["default"],
+      slug: COMPONENT_SLUG,
+      version: 2,
+    });
+    expect(details.driftedManifest).toBeNull();
+    expect(details.driftedHash).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// makeServingLayoutCopier (§5.1 component copies)
+// ---------------------------------------------------------------------------
+
+describe("makeServingLayoutCopier", () => {
+  it("copies component artifacts under c/<contentHash>/ without panel.js when none is declared", async () => {
+    const { keys, manifestObject } = await Effect.runPromise(
+      Effect.gen(function* () {
+        const fixture = yield* buildComponentDeployFixture();
+        const { fetchBlob, stub } = makeSeededHarness(fixture.blobs);
+        const copy = makeServingLayoutCopier({ fetchBlob, putObject: stub.shape.putObject });
+        yield* copy(FIXTURE_PROJECT_ID, servingCopiesForComponent(fixture.manifest.components[0]!));
+        return {
+          keys: [...stub.objects.keys()].filter((key) => key.startsWith("c/")),
+          manifestObject: stub.objects.get(`c/${fixture.contentHash}/manifest.json`),
+        };
+      }),
+    );
+    expect(keys.map((key) => key.slice(key.indexOf("/", 2) + 1)).sort()).toEqual([
+      "manifest.json",
+      "previews/default.json",
+      "runtime.js",
+    ]);
+    expect(manifestObject?.contentType).toBe("application/json");
+  });
+
+  it("copies panel.js when declared and re-copies idempotently (re-finalize no-op path)", async () => {
+    const { firstPass, secondPass } = await Effect.runPromise(
+      Effect.gen(function* () {
+        const fixture = yield* buildComponentDeployFixture({ panel: true });
+        const { fetchBlob, stub } = makeSeededHarness(fixture.blobs);
+        const copy = makeServingLayoutCopier({ fetchBlob, putObject: stub.shape.putObject });
+        const copies = servingCopiesForComponent(fixture.manifest.components[0]!);
+        yield* copy(FIXTURE_PROJECT_ID, copies);
+        const firstPass = new Map(stub.objects);
+        yield* copy(FIXTURE_PROJECT_ID, copies);
+        return { firstPass, secondPass: stub.objects };
+      }),
+    );
+    expect([...firstPass.keys()].some((key) => key.endsWith("/panel.js"))).toBe(true);
+    expect([...secondPass.keys()].sort()).toEqual([...firstPass.keys()].sort());
+  });
+
+  it("fails with IncompleteDeployError when a referenced blob is missing", async () => {
+    const result = await Effect.runPromise(
+      Effect.result(
+        Effect.gen(function* () {
+          const fixture = yield* buildComponentDeployFixture();
+          const runtimeSha = fixture.manifest.components[0]!.artifacts.runtime.sha256;
+          const { fetchBlob, stub } = makeSeededHarness(
+            fixture.blobs.filter((blob) => blob.sha256 !== runtimeSha),
+          );
+          const copy = makeServingLayoutCopier({ fetchBlob, putObject: stub.shape.putObject });
+          yield* copy(
+            FIXTURE_PROJECT_ID,
+            servingCopiesForComponent(fixture.manifest.components[0]!),
+          );
+          return runtimeSha;
+        }),
+      ),
+    );
+    const failure = Result.isFailure(result) ? result.failure : null;
+    expect(failure).toBeInstanceOf(IncompleteDeployError);
+  });
+});
diff --git a/packages/core/src/services/paywallDeploys/index.ts b/packages/core/src/services/paywallDeploys/index.ts
new file mode 100644
index 000000000..26738520d
--- /dev/null
+++ b/packages/core/src/services/paywallDeploys/index.ts
@@ -0,0 +1,3 @@
+export * from "./PaywallArtifactStore.ts";
+export * from "./PaywallDeployManifest.ts";
+export * from "./PaywallDeployService.ts";
diff --git a/packages/core/src/services/paywallLocations/PaywallAssetConfig.ts b/packages/core/src/services/paywallLocations/PaywallAssetConfig.ts
new file mode 100644
index 000000000..a75fcc722
--- /dev/null
+++ b/packages/core/src/services/paywallLocations/PaywallAssetConfig.ts
@@ -0,0 +1,31 @@
+import { Context } from "effect";
+
+/**
+ * Public endpoints used to build URLs for paywall release HTML stored in
+ * object storage.
+ *
+ * Two distinct bases because the two release kinds are served differently:
+ *
+ * - `cdnUrl` — legacy visual-editor releases. URLs are
+ *   `{cdnUrl}/{s3Bucket}/{s3Key}` (the CDN exposes the bucket by name).
+ * - `publicBaseUrl` — content-addressed code and current visual-editor releases
+ *   (deploy contract §5). URLs are
+ *   `{publicBaseUrl}/{s3Key}` where `s3Key = "p/<contentHash>/index.html"`,
+ *   served by the backend's public `GET /p/:contentHash/*` route (or a CDN
+ *   configured with the same layout). No trailing slash.
+ *
+ * Kept separate from the larger S3/static-hosting port because consumers in
+ * `packages/core` (`PaywallLocationService`, `PaywallDeployService`) only
+ * need to format URLs — they never touch the bucket directly. The
+ * application root wires this from the same secret store as the
+ * asset-storage adapter.
+ */
+export interface PaywallAssetConfigShape {
+  readonly cdnUrl: string;
+  readonly publicBaseUrl: string;
+}
+
+export class PaywallAssetConfig extends Context.Service<
+  PaywallAssetConfig,
+  PaywallAssetConfigShape
+>()("infrastructure/PaywallAssetConfig") {}
diff --git a/packages/core/src/services/paywallLocations/PaywallLocationService.ts b/packages/core/src/services/paywallLocations/PaywallLocationService.ts
new file mode 100644
index 000000000..1ad9fa89a
--- /dev/null
+++ b/packages/core/src/services/paywallLocations/PaywallLocationService.ts
@@ -0,0 +1,829 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { PaywallNotFoundError } from "../../domain/paywall/Paywall.ts";
+import {
+  PaywallLocationNotFoundError,
+  PaywallLocationShowingValidationError,
+  PaywallLocationSlugAlreadyExistsError,
+} from "../../domain/paywallLocation/PaywallLocation.ts";
+import { PaywallAssetConfig } from "./PaywallAssetConfig.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  PaywallLocationShowingType,
+  ReleaseStatus,
+  and,
+  eq,
+  isNull,
+  paywallLocationShowings,
+  paywallLocations,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { ExperimentService } from "../experiments/ExperimentService.ts";
+import { SchemaCacheInvalidationService } from "../schema/SchemaCacheInvalidationService.ts";
+import {
+  type PaywallLocationShowingTypeLabel,
+  type PaywallLocationShowingView,
+  type PaywallLocationWithActiveShowing,
+  type ResolvedLocationShowingForSdk,
+  type ResolvedLocationShowingForSdkWithExposure,
+  type ShowingWithRelations,
+  toDbShowingType,
+  toShowingTypeLabel,
+  toShowingView,
+} from "./helpers.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` and other infrastructural
+ * failures at the public-method boundary.
+ */
+export class PaywallLocationServiceError extends Schema.TaggedErrorClass<PaywallLocationServiceError>(
+  "PaywallLocationServiceError",
+)("PaywallLocationServiceError", { cause: Schema.String }) {}
+
+/**
+ * `PaywallLocationService` orchestrates the named "slot" through which an
+ * SDK consumer requests a paywall ("checkout-page", "paywall-modal", …).
+ * Eight operations:
+ *
+ * - `listLocations` / `listLocationShowings` — read-side
+ * - `createLocation` / `updateLocation` / `archiveLocation` — slot CRUD
+ * - `assignLocationShowing` / `clearLocationShowing` — what's currently shown
+ * - `resolveLocationShowingForSdk` — public read used by the SDK runtime
+ *
+ * Multi-row writes (`assignLocationShowing`, `archiveLocation`) wrap their
+ * operations in `db.transaction`.
+ *
+ * `AuditLogPort`, `PaywallAssetConfig`, `Db`, `AuthSession`, and
+ * `SchemaCacheInvalidationService` are provided by the application root.
+ */
+export class PaywallLocationService extends Context.Service<PaywallLocationService>()(
+  "PaywallLocationService",
+  {
+    make: Effect.gen(function* () {
+      const auditLog = yield* AuditLogPort;
+      const assetConfig = yield* PaywallAssetConfig;
+      const schemaCache = yield* SchemaCacheInvalidationService;
+      const db = yield* Db;
+      const experimentService = yield* ExperimentService;
+
+      const createLocation = Effect.fn("createLocation")(
+        function* (input: {
+          readonly projectId: string;
+          readonly name: string;
+          readonly slug: string;
+          readonly description?: string | null;
+        }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.slug", input.slug);
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to create paywall locations for project ${input.projectId}`,
+          );
+
+          const existing = yield* db.query.paywallLocations.findFirst({
+            where: { projectId: input.projectId, slug: input.slug },
+          });
+          if (existing) {
+            return yield* Effect.fail(
+              new PaywallLocationSlugAlreadyExistsError({ slug: input.slug }),
+            );
+          }
+
+          const id = generateId("paywallLocation");
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.id", id);
+          yield* db.insert(paywallLocations).values({
+            description: input.description ?? null,
+            id,
+            name: input.name,
+            projectId: input.projectId,
+            slug: input.slug,
+          });
+
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.PaywallLocation,
+              entityId: id,
+              action: AuditLogAction.Created,
+              changes: { snapshot: { name: input.name, slug: input.slug } },
+            })
+            .pipe(Effect.ignore);
+
+          yield* schemaCache.invalidate(input.projectId);
+          return { id };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const updateLocation = Effect.fn("updateLocation")(
+        function* (input: {
+          readonly locationId: string;
+          readonly name?: string;
+          readonly description?: string | null;
+        }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.id", input.locationId);
+          const location = yield* db.query.paywallLocations.findFirst({
+            where: { id: input.locationId },
+          });
+          if (!location) {
+            return yield* Effect.fail(
+              new PaywallLocationNotFoundError({
+                message: `Paywall location not found: ${input.locationId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", location.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.slug", location.slug);
+          yield* checkProjectPermission(
+            location.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to update paywall location ${input.locationId}`,
+          );
+
+          if (input.name === undefined && input.description === undefined) {
+            return { id: location.id };
+          }
+
+          yield* db
+            .update(paywallLocations)
+            .set({
+              ...(input.description !== undefined ? { description: input.description } : {}),
+              ...(input.name !== undefined ? { name: input.name } : {}),
+            })
+            .where(eq(paywallLocations.id, location.id));
+
+          yield* auditLog
+            .append({
+              projectId: location.projectId,
+              entityType: AuditLogEntityType.PaywallLocation,
+              entityId: location.id,
+              action: AuditLogAction.Updated,
+              changes: { snapshot: { name: input.name, description: input.description } },
+            })
+            .pipe(Effect.ignore);
+
+          yield* schemaCache.invalidate(location.projectId);
+          return { id: location.id };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const archiveLocation = Effect.fn("archiveLocation")(
+        function* (input: { readonly locationId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.id", input.locationId);
+          const location = yield* db.query.paywallLocations.findFirst({
+            where: { id: input.locationId },
+          });
+          if (!location) {
+            return yield* Effect.fail(
+              new PaywallLocationNotFoundError({
+                message: `Paywall location not found: ${input.locationId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", location.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.slug", location.slug);
+          yield* checkProjectPermission(
+            location.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to archive paywall location ${input.locationId}`,
+          );
+
+          const now = new Date();
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(paywallLocations)
+                .set({ archivedAt: now })
+                .where(eq(paywallLocations.id, location.id));
+              yield* tx
+                .update(paywallLocationShowings)
+                .set({ endedAt: now })
+                .where(
+                  and(
+                    eq(paywallLocationShowings.paywallLocationId, location.id),
+                    isNull(paywallLocationShowings.endedAt),
+                  ),
+                );
+            }),
+          );
+
+          yield* auditLog
+            .append({
+              projectId: location.projectId,
+              entityType: AuditLogEntityType.PaywallLocation,
+              entityId: location.id,
+              action: AuditLogAction.Archived,
+            })
+            .pipe(Effect.ignore);
+
+          yield* schemaCache.invalidate(location.projectId);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const listLocations = Effect.fn("listLocations")(
+        function* (input: { readonly projectId: string; readonly includeArchived?: boolean }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* checkProjectPermission(
+            input.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to list paywall locations for project ${input.projectId}`,
+          );
+
+          const locations = yield* db.query.paywallLocations.findMany({
+            where: {
+              projectId: input.projectId,
+              ...(input.includeArchived ? {} : { archivedAt: { isNull: true } }),
+            },
+            orderBy: { createdAt: "desc" },
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.count", locations.length);
+          if (locations.length === 0) {
+            return [] as PaywallLocationWithActiveShowing[];
+          }
+
+          const locationIds = locations.map((location) => location.id);
+          const activeShowings =
+            locationIds.length === 0
+              ? ([] as ShowingWithRelations[])
+              : ((yield* db.query.paywallLocationShowings.findMany({
+                  where: {
+                    paywallLocationId: { in: locationIds },
+                    endedAt: { isNull: true },
+                  },
+                  with: { paywall: true, paywallRelease: true },
+                })) as ShowingWithRelations[]);
+
+          const activeShowingMap = new Map<string, PaywallLocationShowingView>();
+          for (const showing of activeShowings) {
+            if (!activeShowingMap.has(showing.paywallLocationId)) {
+              activeShowingMap.set(showing.paywallLocationId, toShowingView(showing, assetConfig));
+            }
+          }
+
+          return locations.map((location) => ({
+            activeShowing: activeShowingMap.get(location.id) ?? null,
+            archivedAt: location.archivedAt,
+            createdAt: location.createdAt,
+            description: location.description,
+            id: location.id,
+            name: location.name,
+            projectId: location.projectId,
+            slug: location.slug,
+            updatedAt: location.updatedAt,
+          })) satisfies PaywallLocationWithActiveShowing[];
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const listLocationShowings = Effect.fn("listLocationShowings")(
+        function* (input: { readonly locationId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.id", input.locationId);
+          const location = yield* db.query.paywallLocations.findFirst({
+            where: { id: input.locationId },
+          });
+          if (!location) {
+            return yield* Effect.fail(
+              new PaywallLocationNotFoundError({
+                message: `Paywall location not found: ${input.locationId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", location.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.slug", location.slug);
+          yield* checkProjectPermission(
+            location.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to list paywall showings for location ${input.locationId}`,
+          );
+
+          const showings = (yield* db.query.paywallLocationShowings.findMany({
+            where: { paywallLocationId: location.id },
+            orderBy: { startedAt: "desc" },
+            with: { paywall: true, paywallRelease: true },
+          })) as ShowingWithRelations[];
+          return showings.map((showing) => toShowingView(showing, assetConfig));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const assignLocationShowing = Effect.fn("assignLocationShowing")(
+        function* (input: {
+          readonly locationId: string;
+          readonly type: PaywallLocationShowingTypeLabel;
+          readonly paywallId?: string;
+          readonly featureFlagId?: string;
+        }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.id", input.locationId);
+          yield* Effect.annotateCurrentSpan("voidhash.showing.type", input.type);
+          const location = yield* db.query.paywallLocations.findFirst({
+            where: { id: input.locationId },
+          });
+          if (!location) {
+            return yield* Effect.fail(
+              new PaywallLocationNotFoundError({
+                message: `Paywall location not found: ${input.locationId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", location.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.slug", location.slug);
+
+          yield* checkProjectPermission(
+            location.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to assign paywall showing for location ${input.locationId}`,
+          );
+
+          if (location.archivedAt) {
+            return yield* Effect.fail(
+              new PaywallLocationShowingValidationError({
+                message: "Cannot assign showing to archived location",
+              }),
+            );
+          }
+          if (input.type === "feature_flag") {
+            return yield* Effect.fail(
+              new PaywallLocationShowingValidationError({
+                message: "Feature flag showings are not supported yet",
+              }),
+            );
+          }
+          if (!input.paywallId) {
+            return yield* Effect.fail(
+              new PaywallLocationShowingValidationError({
+                message: "paywallId is required for paywall_release showing",
+              }),
+            );
+          }
+
+          const paywallId = input.paywallId;
+          yield* Effect.annotateCurrentSpan("voidhash.paywall.id", paywallId);
+          const paywall = yield* db.query.paywalls.findFirst({ where: { id: paywallId } });
+          if (!paywall || paywall.projectId !== location.projectId) {
+            return yield* Effect.fail(
+              new PaywallNotFoundError({ message: `Paywall not found: ${paywallId}` }),
+            );
+          }
+          const activeRelease = yield* db.query.paywallReleases.findFirst({
+            where: {
+              paywallId,
+              isActive: true,
+              status: ReleaseStatus.released,
+            },
+          });
+          if (!activeRelease) {
+            return yield* Effect.fail(
+              new PaywallLocationShowingValidationError({
+                message: "Selected paywall has no active released version",
+              }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_release.id", activeRelease.id);
+
+          const showingId = generateId("paywallLocationShowing");
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location_showing.id", showingId);
+          const now = new Date();
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(paywallLocationShowings)
+                .set({ endedAt: now })
+                .where(
+                  and(
+                    eq(paywallLocationShowings.paywallLocationId, location.id),
+                    isNull(paywallLocationShowings.endedAt),
+                  ),
+                );
+              yield* tx.insert(paywallLocationShowings).values({
+                createdByUserId: session?.user?.id ?? null,
+                featureFlagId: null,
+                id: showingId,
+                paywallId,
+                paywallLocationId: location.id,
+                paywallReleaseId: activeRelease.id,
+                projectId: location.projectId,
+                startedAt: now,
+                type: toDbShowingType(input.type),
+              });
+            }),
+          );
+
+          yield* auditLog
+            .append({
+              projectId: location.projectId,
+              entityType: AuditLogEntityType.PaywallLocation,
+              entityId: location.id,
+              action: AuditLogAction.Updated,
+              changes: { paywallId, showingId },
+            })
+            .pipe(Effect.ignore);
+
+          return { id: showingId };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const clearLocationShowing = Effect.fn("clearLocationShowing")(
+        function* (input: { readonly locationId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+          if (session.user?.id) {
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          }
+          if (session.person?.distinctId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          }
+          if (session.organizations[0]?.id) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.organization.id",
+              session.organizations[0].id,
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.id", input.locationId);
+          const location = yield* db.query.paywallLocations.findFirst({
+            where: { id: input.locationId },
+          });
+          if (!location) {
+            return yield* Effect.fail(
+              new PaywallLocationNotFoundError({
+                message: `Paywall location not found: ${input.locationId}`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", location.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.slug", location.slug);
+          yield* checkProjectPermission(
+            location.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to clear paywall showing for location ${input.locationId}`,
+          );
+
+          yield* db
+            .update(paywallLocationShowings)
+            .set({ endedAt: new Date() })
+            .where(
+              and(
+                eq(paywallLocationShowings.paywallLocationId, location.id),
+                isNull(paywallLocationShowings.endedAt),
+              ),
+            );
+
+          yield* auditLog
+            .append({
+              projectId: location.projectId,
+              entityType: AuditLogEntityType.PaywallLocation,
+              entityId: location.id,
+              action: AuditLogAction.Updated,
+              changes: { cleared: true },
+            })
+            .pipe(Effect.ignore);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const resolveLocationShowingForSdk = Effect.fn("resolveLocationShowingForSdk")(
+        function* (input: {
+          readonly projectId: string;
+          readonly locationSlug: string;
+          readonly personId?: string;
+          readonly distinctId?: string;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.slug", input.locationSlug);
+          const location = yield* db.query.paywallLocations.findFirst({
+            where: {
+              projectId: input.projectId,
+              slug: input.locationSlug,
+              archivedAt: { isNull: true },
+            },
+          });
+          if (!location) {
+            return null;
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_location.id", location.id);
+          const activeShowing = (yield* db.query.paywallLocationShowings.findFirst({
+            where: {
+              paywallLocationId: location.id,
+              endedAt: { isNull: true },
+            },
+            with: { paywall: true, paywallRelease: true },
+          })) as ShowingWithRelations | undefined;
+          if (!activeShowing) {
+            return null;
+          }
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.paywall_location_showing.id",
+            activeShowing.id,
+          );
+          const showingLabel = toShowingTypeLabel(activeShowing.type);
+          yield* Effect.annotateCurrentSpan("voidhash.showing.type", showingLabel);
+
+          const locationView = { id: location.id, name: location.name, slug: location.slug };
+
+          // Experiment-backed showing: evaluate the backing flag for this subject
+          // and serve the assigned variant's paywall release at this location,
+          // falling back to the control variant's release so the location is
+          // never dark. Exposure is emitted by the caller (which has org/token/
+          // runtime); we return the context it needs.
+          if (showingLabel === "feature_flag") {
+            if (!activeShowing.featureFlagId) {
+              return null;
+            }
+            const assignment = yield* experimentService.assignVariant({
+              projectId: input.projectId,
+              featureFlagId: activeShowing.featureFlagId,
+              personId: input.personId,
+              distinctId: input.distinctId,
+            });
+            if (!assignment) {
+              return null;
+            }
+            const releaseIdFrom = (payload: unknown): string | undefined => {
+              const byLocation = (
+                payload as
+                  | { readonly byLocation?: Record<string, { readonly paywallReleaseId?: string }> }
+                  | null
+                  | undefined
+              )?.byLocation;
+              return byLocation?.[location.id]?.paywallReleaseId;
+            };
+
+            const enrolled = assignment.assigned && assignment.variantKey !== null;
+            let releaseId = enrolled ? releaseIdFrom(assignment.payload) : undefined;
+            // Only count a real assignment (control or treatment) as an exposure;
+            // an unenrolled subject served the control fallback is NOT exposed.
+            const exposure =
+              releaseId && enrolled
+                ? {
+                    experimentId: assignment.experimentId,
+                    experimentKey: assignment.experimentKey,
+                    variantKey: assignment.variantKey as string,
+                    personId: input.personId ?? null,
+                    distinctId: input.distinctId ?? null,
+                  }
+                : null;
+            if (!releaseId) {
+              releaseId = releaseIdFrom(assignment.controlPayload);
+            }
+            if (!releaseId) {
+              return null;
+            }
+
+            const release = yield* db.query.paywallReleases.findFirst({
+              where: { id: releaseId },
+              with: { paywall: true },
+            });
+            if (!release || !release.paywall || release.paywall.projectId !== input.projectId) {
+              return null;
+            }
+            yield* Effect.annotateCurrentSpan("voidhash.paywall.id", release.paywall.id);
+            yield* Effect.annotateCurrentSpan("voidhash.paywall_release.id", release.id);
+
+            // Synthetic showing coerced to `paywall_release` so the SDK response
+            // shape is identical to a normal release resolve.
+            const synthetic: ShowingWithRelations = {
+              ...activeShowing,
+              type: PaywallLocationShowingType.paywallRelease,
+              paywallId: release.paywall.id,
+              paywallReleaseId: release.id,
+              featureFlagId: activeShowing.featureFlagId,
+              paywall: {
+                id: release.paywall.id,
+                name: release.paywall.name,
+                slug: release.paywall.slug,
+              },
+              paywallRelease: {
+                id: release.id,
+                version: release.version,
+                s3Key: release.s3Key,
+                s3Bucket: release.s3Bucket,
+                publishedAt: release.publishedAt,
+                contentHash: release.contentHash,
+                runtimeConfig: release.runtimeConfig,
+              },
+            };
+            return {
+              location: locationView,
+              showing: toShowingView(synthetic, assetConfig),
+              exposure,
+            } satisfies ResolvedLocationShowingForSdkWithExposure;
+          }
+
+          if (showingLabel !== "paywall_release") {
+            return null;
+          }
+          if (!activeShowing.paywall || !activeShowing.paywallRelease) {
+            return null;
+          }
+          if (activeShowing.paywallId) {
+            yield* Effect.annotateCurrentSpan("voidhash.paywall.id", activeShowing.paywallId);
+          }
+          if (activeShowing.paywallReleaseId) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.paywall_release.id",
+              activeShowing.paywallReleaseId,
+            );
+          }
+          return {
+            location: locationView,
+            showing: toShowingView(activeShowing, assetConfig),
+            exposure: null,
+          } satisfies ResolvedLocationShowingForSdkWithExposure;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: String(error.cause) })),
+              ExperimentServiceError: (error) =>
+                Effect.fail(new PaywallLocationServiceError({ cause: error.cause })),
+            }),
+          ),
+      );
+
+      return {
+        archiveLocation,
+        assignLocationShowing,
+        clearLocationShowing,
+        createLocation,
+        listLocationShowings,
+        listLocations,
+        resolveLocationShowingForSdk,
+        updateLocation,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaywallLocationService)(PaywallLocationService.make);
+}
+
+export type {
+  ExperimentExposureContext,
+  PaywallLocationShowingTypeLabel,
+  PaywallLocationShowingView,
+  PaywallLocationWithActiveShowing,
+  PaywallReleaseRuntimeView,
+  ResolvedLocationShowingForSdk,
+  ResolvedLocationShowingForSdkWithExposure,
+} from "./helpers.ts";
diff --git a/packages/core/src/services/paywallLocations/helpers.ts b/packages/core/src/services/paywallLocations/helpers.ts
new file mode 100644
index 000000000..4087a824e
--- /dev/null
+++ b/packages/core/src/services/paywallLocations/helpers.ts
@@ -0,0 +1,218 @@
+import {
+  PaywallLocationShowingType,
+  type PaywallLocationShowingTypeValue,
+  type PaywallReleaseRuntimeConfig,
+} from "@voidhash/db";
+
+export type PaywallLocationShowingTypeLabel = "feature_flag" | "paywall_release";
+
+/**
+ * Drizzle row shape for `paywallLocationShowings` plus its eagerly loaded
+ * `paywall` and `paywallRelease` relations. The joins are optional —
+ * showings can reference a feature flag instead, in which case both
+ * relations come back as `null`.
+ */
+export interface ShowingWithRelations {
+  readonly id: string;
+  readonly projectId: string;
+  readonly paywallLocationId: string;
+  readonly type: number;
+  readonly paywallId: string | null;
+  readonly paywallReleaseId: string | null;
+  readonly featureFlagId: string | null;
+  readonly startedAt: Date;
+  readonly endedAt: Date | null;
+  readonly createdByUserId: string | null;
+  readonly createdAt: Date | null;
+  readonly updatedAt: Date | null;
+  readonly paywall:
+    | { readonly id: string; readonly name: string; readonly slug: string }
+    | null
+    | undefined;
+  readonly paywallRelease:
+    | {
+        readonly id: string;
+        readonly version: number;
+        readonly s3Key: string;
+        readonly s3Bucket: string;
+        readonly publishedAt: Date | null;
+        readonly contentHash: string | null;
+        readonly runtimeConfig: PaywallReleaseRuntimeConfig | null;
+      }
+    | null
+    | undefined;
+}
+
+/**
+ * Code-deploy runtime block surfaced through SDK resolve (deploy contract
+ * §6). `null` on visual-editor releases.
+ */
+export interface PaywallReleaseRuntimeView {
+  readonly contentHash: string;
+  readonly productSlugs: ReadonlyArray<string>;
+  readonly variables: Readonly<Record<string, string | number | boolean>>;
+}
+
+export interface PaywallLocationShowingView {
+  readonly id: string;
+  readonly projectId: string;
+  readonly paywallLocationId: string;
+  readonly type: PaywallLocationShowingTypeLabel;
+  readonly paywallId: string | null;
+  readonly paywallReleaseId: string | null;
+  readonly featureFlagId: string | null;
+  readonly startedAt: Date;
+  readonly endedAt: Date | null;
+  readonly createdByUserId: string | null;
+  readonly createdAt: Date | null;
+  readonly updatedAt: Date | null;
+  readonly paywall: null | {
+    readonly id: string;
+    readonly name: string;
+    readonly slug: string;
+  };
+  readonly paywallRelease: null | {
+    readonly releaseId: string;
+    readonly version: number;
+    readonly htmlUrl: string;
+    readonly publishedAt: Date | null;
+    readonly runtime: PaywallReleaseRuntimeView | null;
+  };
+}
+
+export interface PaywallLocationWithActiveShowing {
+  readonly id: string;
+  readonly projectId: string;
+  readonly slug: string;
+  readonly name: string;
+  readonly description: string | null;
+  readonly archivedAt: Date | null;
+  readonly createdAt: Date | null;
+  readonly updatedAt: Date | null;
+  readonly activeShowing: PaywallLocationShowingView | null;
+}
+
+export interface ResolvedLocationShowingForSdk {
+  readonly location: {
+    readonly id: string;
+    readonly slug: string;
+    readonly name: string;
+  };
+  readonly showing: PaywallLocationShowingView;
+}
+
+/**
+ * The context the SDK serve path needs to emit an `$experiment.exposed` event
+ * after resolving an experiment-backed showing. `null` for a plain
+ * paywall-release showing or when a subject was served the control fallback
+ * without being enrolled (not a real exposure).
+ */
+export interface ExperimentExposureContext {
+  readonly experimentId: string;
+  readonly experimentKey: string;
+  readonly variantKey: string;
+  readonly personId: string | null;
+  readonly distinctId: string | null;
+}
+
+/**
+ * A resolved showing plus optional exposure context. Extends
+ * {@link ResolvedLocationShowingForSdk} so existing consumers (which only read
+ * `location` / `showing`) are unaffected.
+ */
+export interface ResolvedLocationShowingForSdkWithExposure extends ResolvedLocationShowingForSdk {
+  readonly exposure: ExperimentExposureContext | null;
+}
+
+export const toShowingTypeLabel = (type: number): PaywallLocationShowingTypeLabel => {
+  switch (type) {
+    case PaywallLocationShowingType.featureFlag:
+      return "feature_flag";
+    default:
+      return "paywall_release";
+  }
+};
+
+export const toDbShowingType = (
+  type: PaywallLocationShowingTypeLabel,
+): PaywallLocationShowingTypeValue => {
+  switch (type) {
+    case "feature_flag":
+      return PaywallLocationShowingType.featureFlag;
+    default:
+      return PaywallLocationShowingType.paywallRelease;
+  }
+};
+
+/**
+ * Build the public HTML URL for a paywall release.
+ *
+ * - Current visual-editor and code-deployed releases (non-null `contentHash`)
+ *   are served from the content-addressed public layout (deploy contract §5):
+ *   `{publicBaseUrl}/{s3Key}` with `s3Key = "p/<contentHash>/index.html"`.
+ * - Older visual-editor releases keep the legacy CDN format
+ *   `{cdnUrl}/{s3Bucket}/{s3Key}` (duplicated from
+ *   `internal/paywall-publishing/utils.ts`; owned jointly by
+ *   paywall-publishing (writer) and paywall-locations (reader) — keep them
+ *   in sync if the layout changes).
+ */
+const getPublicUrl = (
+  release: {
+    readonly s3Key: string;
+    readonly s3Bucket: string;
+    readonly contentHash: string | null;
+  },
+  urlConfig: { cdnUrl: string; publicBaseUrl: string },
+): string =>
+  release.contentHash !== null
+    ? `${urlConfig.publicBaseUrl}/${release.s3Key}`
+    : `${urlConfig.cdnUrl}/${release.s3Bucket}/${release.s3Key}`;
+
+/** Maps the stored `runtimeConfig` column onto the §6 resolve runtime block. */
+const toRuntimeView = (release: {
+  readonly contentHash: string | null;
+  readonly runtimeConfig: PaywallReleaseRuntimeConfig | null;
+}): PaywallReleaseRuntimeView | null =>
+  release.contentHash !== null && release.runtimeConfig !== null
+    ? {
+        contentHash: release.contentHash,
+        productSlugs: release.runtimeConfig.productSlugs,
+        variables: release.runtimeConfig.variables,
+      }
+    : null;
+
+export const toShowingView = (
+  showing: ShowingWithRelations,
+  urlConfig: { cdnUrl: string; publicBaseUrl: string },
+): PaywallLocationShowingView => ({
+  createdAt: showing.createdAt,
+  createdByUserId: showing.createdByUserId,
+  endedAt: showing.endedAt,
+  featureFlagId: showing.featureFlagId,
+  id: showing.id,
+  paywall:
+    showing.paywall === null || showing.paywall === undefined
+      ? null
+      : {
+          id: showing.paywall.id,
+          name: showing.paywall.name,
+          slug: showing.paywall.slug,
+        },
+  paywallId: showing.paywallId,
+  paywallLocationId: showing.paywallLocationId,
+  paywallRelease:
+    showing.paywallRelease === null || showing.paywallRelease === undefined
+      ? null
+      : {
+          htmlUrl: getPublicUrl(showing.paywallRelease, urlConfig),
+          publishedAt: showing.paywallRelease.publishedAt,
+          releaseId: showing.paywallRelease.id,
+          runtime: toRuntimeView(showing.paywallRelease),
+          version: showing.paywallRelease.version,
+        },
+  paywallReleaseId: showing.paywallReleaseId,
+  projectId: showing.projectId,
+  startedAt: showing.startedAt,
+  type: toShowingTypeLabel(showing.type),
+  updatedAt: showing.updatedAt,
+});
diff --git a/packages/core/src/services/paywallLocations/index.ts b/packages/core/src/services/paywallLocations/index.ts
new file mode 100644
index 000000000..cc4ac3ff9
--- /dev/null
+++ b/packages/core/src/services/paywallLocations/index.ts
@@ -0,0 +1 @@
+export * from "./PaywallLocationService.ts";
diff --git a/packages/core/src/services/paywallReleases/PaywallReleaseService.ts b/packages/core/src/services/paywallReleases/PaywallReleaseService.ts
new file mode 100644
index 000000000..f1e86a90d
--- /dev/null
+++ b/packages/core/src/services/paywallReleases/PaywallReleaseService.ts
@@ -0,0 +1,333 @@
+import { ActionForbiddenError, AuthSession } from "../../domain/auth/Auth.ts";
+import { PaywallNotFoundError } from "../../domain/paywall/Paywall.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  ReleaseStatus,
+  and,
+  eq,
+  paywallReleases,
+} from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import {
+  componentServingPreviewKey,
+  paywallServingHtmlKey,
+  sha256Hex,
+} from "../paywallDeploys/PaywallDeployManifest.ts";
+import { PaywallArtifactStore } from "../paywallDeploys/PaywallArtifactStore.ts";
+import { PaywallAssetConfig } from "../paywallLocations/PaywallAssetConfig.ts";
+import { collectDeployedComponentContentHashes } from "../paywallThumbnails/PaywallThumbnailService.ts";
+import { MimicHost } from "../paywalls/MimicHost.ts";
+import { SnapshotHtmlRenderer } from "./SnapshotHtmlRenderer.ts";
+
+const CURRENT_SCHEMA_VERSION = 1;
+const PREVIEW_STATE = "default";
+
+/** Catch-all error for visual paywall release orchestration failures. */
+export class PaywallReleaseError extends Schema.TaggedErrorClass<PaywallReleaseError>(
+  "PaywallReleaseError",
+)("PaywallReleaseError", {
+  cause: Schema.optional(Schema.Unknown),
+  message: Schema.String,
+}) {}
+
+/** A draft or released row could not be found for the supplied identifier. */
+export class ReleaseNotFoundError extends Schema.TaggedErrorClass<ReleaseNotFoundError>(
+  "ReleaseNotFoundError",
+)("ReleaseNotFoundError", { releaseId: Schema.String }) {}
+
+export interface ReleaseInfo {
+  readonly createdAt: Date;
+  readonly draftUrl: string;
+  readonly releaseId: string;
+  readonly version: number;
+}
+
+export interface PublishResult {
+  readonly htmlUrl: string;
+  readonly publishedAt: Date;
+  readonly releaseId: string;
+  readonly version: number;
+}
+
+const artifactUrl = (publicBaseUrl: string, key: string): string =>
+  `${publicBaseUrl.replace(/\/$/, "")}/${key}`;
+
+type DomainReleaseError =
+  | ActionForbiddenError
+  | PaywallNotFoundError
+  | PaywallReleaseError
+  | ReleaseNotFoundError;
+
+const preserveDomainErrors = <E>(
+  operation: string,
+  error: E,
+): Extract<E, DomainReleaseError> | PaywallReleaseError => {
+  if (
+    error instanceof ActionForbiddenError ||
+    error instanceof PaywallNotFoundError ||
+    error instanceof PaywallReleaseError ||
+    error instanceof ReleaseNotFoundError
+  ) {
+    return error as Extract<E, DomainReleaseError>;
+  }
+  return new PaywallReleaseError({
+    cause: error,
+    message: `Failed to ${operation} paywall release`,
+  });
+};
+
+/**
+ * Creates and publishes visual-editor paywall releases using only provider-neutral
+ * database, Mimic, renderer, and object-store boundaries.
+ */
+export class PaywallReleaseService extends Context.Service<PaywallReleaseService>()(
+  "PaywallReleaseService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const auditLog = yield* AuditLogPort;
+      const mimicHost = yield* MimicHost;
+      const renderer = yield* SnapshotHtmlRenderer;
+      const store = yield* PaywallArtifactStore;
+      const assetConfig = yield* PaywallAssetConfig;
+
+      const loadPaywallForWrite = Effect.fn("loadPaywallForRelease")(function* (
+        paywallId: string,
+        action: string,
+      ) {
+        const session = yield* AuthSession;
+        const paywall = yield* db.query.paywalls.findFirst({ where: { id: paywallId } });
+        if (!paywall) {
+          return yield* Effect.fail(
+            new PaywallNotFoundError({ message: `Paywall with id ${paywallId} not found` }),
+          );
+        }
+        yield* checkProjectPermission(
+          paywall.projectId,
+          "project:all",
+          `User ${session.user?.id} is not authorized to ${action} paywall ${paywallId}`,
+        );
+        return { paywall, session };
+      });
+
+      const loadComponentTrees = (snapshot: unknown) =>
+        Effect.gen(function* () {
+          const trees: Record<string, Record<string, unknown>> = {};
+          for (const contentHash of collectDeployedComponentContentHashes(snapshot)) {
+            const object = yield* store.getObject(
+              componentServingPreviewKey(contentHash, PREVIEW_STATE),
+            );
+            if (object === null) continue;
+            const decoded = yield* Effect.try({
+              try: (): unknown => JSON.parse(new TextDecoder().decode(object.body)),
+              catch: () => null,
+            }).pipe(Effect.orElseSucceed(() => null));
+            if (decoded !== null) {
+              trees[contentHash] = { [PREVIEW_STATE]: decoded };
+            }
+          }
+          return trees;
+        });
+
+      const createRelease = Effect.fn("createPaywallRelease")(
+        function* (paywallId: string) {
+          const { paywall, session } = yield* loadPaywallForWrite(paywallId, "release");
+          if (!session.user?.id) {
+            return yield* Effect.fail(
+              new PaywallReleaseError({
+                message: "User must be authenticated to create a release",
+              }),
+            );
+          }
+
+          yield* mimicHost.ensurePaywallDocument(paywallId);
+          const snapshot = yield* mimicHost.getPaywallSnapshot(paywallId);
+          const componentTrees = yield* loadComponentTrees(snapshot);
+          const existingDraft = yield* db.query.paywallReleases.findFirst({
+            orderBy: { version: "desc" },
+            where: { paywallId, status: ReleaseStatus.draft },
+          });
+          const latestReleased = yield* db.query.paywallReleases.findFirst({
+            orderBy: { version: "desc" },
+            where: { paywallId, status: ReleaseStatus.released },
+          });
+          const version = (latestReleased?.version ?? 0) + 1;
+          const createdAt = new Date();
+          const html = yield* renderer.render({
+            componentTrees,
+            metadata: {
+              createdAt: createdAt.toISOString(),
+              schemaVersion: CURRENT_SCHEMA_VERSION,
+              status: "draft",
+              version,
+            },
+            snapshot,
+          });
+          const body = new TextEncoder().encode(html);
+          const contentHash = yield* sha256Hex(body);
+          const s3Key = paywallServingHtmlKey(contentHash);
+          yield* store.putObject({
+            body,
+            contentType: "text/html; charset=utf-8",
+            key: s3Key,
+          });
+
+          const releaseId = existingDraft?.id ?? generateId("paywallRelease");
+          if (existingDraft) {
+            yield* db
+              .update(paywallReleases)
+              .set({
+                contentHash,
+                publishedAt: createdAt,
+                publishedBy: session.user.id,
+                s3Bucket: store.bucketName,
+                s3Key,
+                schemaVersion: CURRENT_SCHEMA_VERSION,
+                version,
+              })
+              .where(eq(paywallReleases.id, existingDraft.id));
+          } else {
+            yield* db.insert(paywallReleases).values({
+              contentHash,
+              id: releaseId,
+              isActive: false,
+              paywallId,
+              publishedAt: createdAt,
+              publishedBy: session.user.id,
+              s3Bucket: store.bucketName,
+              s3Key,
+              schemaVersion: CURRENT_SCHEMA_VERSION,
+              status: ReleaseStatus.draft,
+              version,
+            });
+          }
+
+          yield* auditLog.append({
+            action: AuditLogAction.Created,
+            changes: { version },
+            entityId: releaseId,
+            entityType: AuditLogEntityType.PaywallRelease,
+            parentEntityId: paywallId,
+            projectId: paywall.projectId,
+          });
+
+          return {
+            createdAt,
+            draftUrl: artifactUrl(assetConfig.publicBaseUrl, s3Key),
+            releaseId,
+            version,
+          } satisfies ReleaseInfo;
+        },
+        (effect) => effect.pipe(Effect.mapError((error) => preserveDomainErrors("create", error))),
+      );
+
+      const getDraftRelease = Effect.fn("getPaywallDraftRelease")(
+        function* (paywallId: string) {
+          yield* loadPaywallForWrite(paywallId, "read the draft release for");
+          const draft = yield* db.query.paywallReleases.findFirst({
+            orderBy: { version: "desc" },
+            where: { paywallId, status: ReleaseStatus.draft },
+          });
+          if (!draft) return null;
+          if (draft.publishedAt === null) {
+            return yield* Effect.fail(
+              new PaywallReleaseError({
+                message: `Draft release ${draft.id} has no creation timestamp`,
+              }),
+            );
+          }
+          return {
+            createdAt: draft.publishedAt,
+            draftUrl: artifactUrl(assetConfig.publicBaseUrl, draft.s3Key),
+            releaseId: draft.id,
+            version: draft.version,
+          } satisfies ReleaseInfo;
+        },
+        (effect) => effect.pipe(Effect.mapError((error) => preserveDomainErrors("read", error))),
+      );
+
+      const publishRelease = Effect.fn("publishPaywallRelease")(
+        function* (draftId: string) {
+          const draft = yield* db.query.paywallReleases.findFirst({
+            where: { id: draftId, status: ReleaseStatus.draft },
+          });
+          if (!draft) {
+            return yield* Effect.fail(new ReleaseNotFoundError({ releaseId: draftId }));
+          }
+          const { paywall } = yield* loadPaywallForWrite(draft.paywallId, "publish");
+          const publishedAt = new Date();
+          const existing = yield* db.query.paywallReleases.findFirst({
+            where: {
+              paywallId: draft.paywallId,
+              status: ReleaseStatus.released,
+              version: draft.version,
+            },
+          });
+          const releaseId = existing?.id ?? generateId("paywallRelease");
+
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(paywallReleases)
+                .set({ isActive: false })
+                .where(
+                  and(
+                    eq(paywallReleases.paywallId, draft.paywallId),
+                    eq(paywallReleases.isActive, true),
+                  ),
+                );
+              if (existing) {
+                yield* tx
+                  .update(paywallReleases)
+                  .set({ isActive: true, publishedAt })
+                  .where(eq(paywallReleases.id, existing.id));
+              } else {
+                yield* tx.insert(paywallReleases).values({
+                  contentHash: draft.contentHash,
+                  id: releaseId,
+                  isActive: true,
+                  paywallId: draft.paywallId,
+                  publishedAt,
+                  publishedBy: draft.publishedBy,
+                  runtimeConfig: draft.runtimeConfig,
+                  s3Bucket: draft.s3Bucket,
+                  s3Key: draft.s3Key,
+                  schemaVersion: draft.schemaVersion,
+                  status: ReleaseStatus.released,
+                  version: draft.version,
+                });
+              }
+            }),
+          );
+
+          yield* auditLog.append({
+            action: AuditLogAction.Published,
+            changes: { version: draft.version },
+            entityId: releaseId,
+            entityType: AuditLogEntityType.PaywallRelease,
+            parentEntityId: draft.paywallId,
+            projectId: paywall.projectId,
+          });
+
+          return {
+            htmlUrl: artifactUrl(assetConfig.publicBaseUrl, draft.s3Key),
+            publishedAt,
+            releaseId,
+            version: draft.version,
+          } satisfies PublishResult;
+        },
+        (effect) => effect.pipe(Effect.mapError((error) => preserveDomainErrors("publish", error))),
+      );
+
+      return { createRelease, getDraftRelease, publishRelease } as const;
+    }),
+  },
+) {
+  static readonly layer = Layer.effect(PaywallReleaseService)(PaywallReleaseService.make);
+}
diff --git a/packages/core/src/services/paywallReleases/SnapshotHtmlRenderer.ts b/packages/core/src/services/paywallReleases/SnapshotHtmlRenderer.ts
new file mode 100644
index 000000000..09c169717
--- /dev/null
+++ b/packages/core/src/services/paywallReleases/SnapshotHtmlRenderer.ts
@@ -0,0 +1,33 @@
+import { Context, type Effect, Schema } from "effect";
+
+/** Stable error returned when a paywall snapshot cannot be rendered to HTML. */
+export class SnapshotHtmlRenderError extends Schema.TaggedErrorClass<SnapshotHtmlRenderError>(
+  "SnapshotHtmlRenderError",
+)("SnapshotHtmlRenderError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface SnapshotHtmlRenderInput {
+  readonly snapshot: unknown;
+  readonly componentTrees: Record<string, Record<string, unknown>>;
+  readonly metadata: {
+    readonly createdAt: string;
+    readonly schemaVersion: number;
+    readonly status: "draft";
+    readonly version: number;
+  };
+}
+
+export interface SnapshotHtmlRendererShape {
+  /** Renders a decoded Mimic paywall snapshot into a self-contained hydrated document. */
+  readonly render: (
+    input: SnapshotHtmlRenderInput,
+  ) => Effect.Effect<string, SnapshotHtmlRenderError>;
+}
+
+/** Provider-neutral boundary between release orchestration and the Preact HTML renderer. */
+export class SnapshotHtmlRenderer extends Context.Service<
+  SnapshotHtmlRenderer,
+  SnapshotHtmlRendererShape
+>()("@voidhash/core/SnapshotHtmlRenderer") {}
diff --git a/packages/core/src/services/paywallThumbnails/HtmlScreenshot.ts b/packages/core/src/services/paywallThumbnails/HtmlScreenshot.ts
new file mode 100644
index 000000000..9ea1d1242
--- /dev/null
+++ b/packages/core/src/services/paywallThumbnails/HtmlScreenshot.ts
@@ -0,0 +1,44 @@
+import { Context, type Effect, Schema } from "effect";
+
+/**
+ * Catch-all error for {@link HtmlScreenshot} operations. The adapter wraps any
+ * browser-rendering failure (Cloudflare Browser Rendering API errors, timeouts,
+ * stream failures) into this single tag so service catch boundaries stay small.
+ */
+export class HtmlScreenshotError extends Schema.TaggedErrorClass<HtmlScreenshotError>(
+  "HtmlScreenshotError",
+)("HtmlScreenshotError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface HtmlScreenshotOptions {
+  /** Self-contained HTML document to render (no external network dependencies). */
+  readonly html: string;
+  /** Viewport width in CSS pixels. */
+  readonly width: number;
+  /** Viewport height in CSS pixels. */
+  readonly height: number;
+  /** Device pixel ratio; `2` produces a crisp @2x raster for retina previews. */
+  readonly deviceScaleFactor: number;
+}
+
+export interface HtmlScreenshotShape {
+  /**
+   * Renders an HTML document in a headless browser and returns the PNG bytes of
+   * a full-viewport screenshot at the requested pixel density.
+   */
+  readonly screenshot: (
+    options: HtmlScreenshotOptions,
+  ) => Effect.Effect<Uint8Array, HtmlScreenshotError>;
+}
+
+/**
+ * Provider-agnostic port for rasterizing an HTML document to a PNG. The live
+ * adapter (Cloudflare Browser Rendering, `stacks/backend/infrastructure/HtmlScreenshot.ts`)
+ * is wired by the application root — core code only touches the tag, keeping the
+ * browser SDK out of `packages/core` and the port trivially fakeable in tests.
+ */
+export class HtmlScreenshot extends Context.Service<HtmlScreenshot, HtmlScreenshotShape>()(
+  "infrastructure/HtmlScreenshot",
+) {}
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
new file mode 100644
index 000000000..9bdb93ffb
--- /dev/null
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
@@ -0,0 +1,45 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { collectDeployedComponentContentHashes } from "./PaywallThumbnailService.ts";
+
+describe("collectDeployedComponentContentHashes", () => {
+  it("collects distinct non-empty contentHashes of deployed component nodes depth-first", () => {
+    const snapshot = {
+      type: "root",
+      children: [
+        {
+          type: "screen",
+          children: [
+            { type: "component", data: { contentHash: "aaa" }, children: [] },
+            {
+              type: "view",
+              children: [{ type: "component", data: { contentHash: "bbb" }, children: [] }],
+            },
+            // duplicate — deduped
+            { type: "component", data: { contentHash: "aaa" }, children: [] },
+          ],
+        },
+      ],
+    };
+    expect([...collectDeployedComponentContentHashes(snapshot)].sort()).toEqual(["aaa", "bbb"]);
+  });
+
+  it("skips local components (sentinel empty contentHash) and non-component nodes", () => {
+    const snapshot = {
+      type: "root",
+      children: [
+        // local code component — no served preview tree in v1
+        { type: "component", data: { contentHash: "", componentSource: "local" }, children: [] },
+        { type: "text", data: { text: "hi" }, children: [] },
+        { type: "component", data: {}, children: [] },
+      ],
+    };
+    expect(collectDeployedComponentContentHashes(snapshot).size).toBe(0);
+  });
+
+  it("tolerates a malformed / undefined snapshot", () => {
+    expect(collectDeployedComponentContentHashes(undefined).size).toBe(0);
+    expect(collectDeployedComponentContentHashes({ type: "root" }).size).toBe(0);
+    expect(collectDeployedComponentContentHashes(null).size).toBe(0);
+  });
+});
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
new file mode 100644
index 000000000..ab4244185
--- /dev/null
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
@@ -0,0 +1,254 @@
+import { Cause, Context, Effect, Layer, Predicate, Schema } from "effect";
+
+import { Db, and, eq, isNull, lt, or, paywalls } from "@voidhash/db";
+
+import {
+  derivePaywallThumbnailKey,
+  isOwnedPaywallThumbnailUrl,
+  paywallThumbnailKeyFromUrl,
+} from "../../domain/paywallThumbnail.ts";
+import { componentServingPreviewKey } from "../paywallDeploys/PaywallDeployManifest.ts";
+import { PaywallArtifactStore } from "../paywallDeploys/PaywallArtifactStore.ts";
+import { MimicHost } from "../paywalls/MimicHost.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+import { SnapshotImageRenderer } from "./SnapshotImageRenderer.ts";
+
+/** Viewport the thumbnail is rendered at — the designer's phone-frame dimensions. */
+const THUMBNAIL_WIDTH = 375;
+const THUMBNAIL_HEIGHT = 812;
+const THUMBNAIL_DEVICE_SCALE_FACTOR = 2;
+
+/** Preview state rendered for a deployed component in a thumbnail (spec §8 fallback base). */
+const THUMBNAIL_PREVIEW_STATE = "default";
+
+/**
+ * Catch-all error raised by {@link PaywallThumbnailService.handleDocumentIdle}
+ * for real failures (snapshot fetch, render/screenshot, store, or DB write) so
+ * the queue consumer can decide whether to log-and-ack or retry. A missing
+ * paywall row (non-paywall documents on the generic idle queue) and a stale
+ * `seq` are NOT errors — they succeed as no-ops.
+ */
+export class PaywallThumbnailServiceError extends Schema.TaggedErrorClass<PaywallThumbnailServiceError>(
+  "PaywallThumbnailServiceError",
+)("PaywallThumbnailServiceError", { message: Schema.String }) {}
+
+/** A snapshot tree node in the renderer `SnapshotNode` shape (structural subset). */
+interface SnapshotNodeLike {
+  readonly type: string;
+  readonly data?: { readonly contentHash?: unknown } | undefined;
+  readonly children?: readonly unknown[] | undefined;
+}
+
+const isSnapshotNodeLike = (value: unknown): value is SnapshotNodeLike =>
+  Predicate.hasProperty(value, "type") && typeof value.type === "string";
+
+/**
+ * Collects the distinct non-empty `contentHash`es of the snapshot's deployed
+ * `component` nodes (depth-first). Local code components pin a sentinel
+ * `contentHash: ""` and are skipped — they have no served preview trees in v1.
+ */
+export const collectDeployedComponentContentHashes = (snapshot: unknown): ReadonlySet<string> => {
+  const hashes = new Set<string>();
+  const visit = (value: unknown): void => {
+    if (!isSnapshotNodeLike(value)) {
+      return;
+    }
+    if (value.type === "component") {
+      const contentHash = value.data?.contentHash;
+      if (typeof contentHash === "string" && contentHash !== "") {
+        hashes.add(contentHash);
+      }
+    }
+    for (const child of value.children ?? []) {
+      visit(child);
+    }
+  };
+  visit(snapshot);
+  return hashes;
+};
+
+/**
+ * `PaywallThumbnailService` owns the render vertical of the paywall-thumbnail
+ * feature: given a `{documentId, seq}` from the mimic idle queue (document id =
+ * paywall id), it renders the current document snapshot to a PNG and publishes
+ * it, gated by a monotonic `seq` guard so a late render never clobbers a newer
+ * one.
+ *
+ * The queue is generic — non-paywall documents may arrive — so a missing
+ * paywall row is a silent no-op. `Db`, `MimicHost`, `PaywallArtifactStore`,
+ * `PublicFileStore`, and {@link SnapshotImageRenderer} are provided by the
+ * application root; all infra deps are abstract ports, so the service stays
+ * infra-pure. The `SnapshotImageRenderer` adapter itself depends on the
+ * {@link HtmlScreenshot} port, which the application root wires alongside it.
+ */
+export class PaywallThumbnailService extends Context.Service<PaywallThumbnailService>()(
+  "PaywallThumbnailService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const mimicHost = yield* MimicHost;
+      const artifactStore = yield* PaywallArtifactStore;
+      const publicFileStore = yield* PublicFileStore;
+      const renderer = yield* SnapshotImageRenderer;
+
+      /**
+       * Fetches the "default"-state preview tree for each deployed component
+       * contentHash from the public serving layout
+       * (`c/<contentHash>/previews/default.json`). A missing object (`null`) or an
+       * undecodable tree degrades to absent (the renderer shows a placeholder). A
+       * real store failure (`PaywallArtifactStoreError` — e.g. an R2 outage) is NOT
+       * swallowed: it propagates so the render fails rather than pinning a
+       * placeholder-filled thumbnail + advancing `thumbnail_seq`.
+       */
+      const fetchComponentTrees = (contentHashes: ReadonlySet<string>) =>
+        Effect.gen(function* () {
+          const trees: Record<string, Record<string, unknown>> = {};
+          for (const contentHash of contentHashes) {
+            const key = componentServingPreviewKey(contentHash, THUMBNAIL_PREVIEW_STATE);
+            const object = yield* artifactStore.getObject(key);
+            if (object === null) {
+              continue;
+            }
+            const tree = yield* Effect.try({
+              try: (): unknown => JSON.parse(new TextDecoder().decode(object.body)),
+              catch: () => null,
+            }).pipe(Effect.orElseSucceed(() => null));
+            if (tree !== null) {
+              trees[contentHash] = { [THUMBNAIL_PREVIEW_STATE]: tree };
+            }
+          }
+          return trees;
+        });
+
+      const handleDocumentIdle = Effect.fn("handleDocumentIdle")(
+        function* (input: { readonly documentId: string; readonly seq: number }) {
+          yield* Effect.annotateCurrentSpan("voidhash.paywall.id", input.documentId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_thumbnail.seq", input.seq);
+
+          const paywall = yield* db.query.paywalls.findFirst({ where: { id: input.documentId } });
+          if (!paywall) {
+            // Generic idle queue: non-paywall documents are expected — no-op.
+            yield* Effect.logDebug(
+              `Idle document ${input.documentId} is not a paywall; skipping thumbnail render`,
+            );
+            return;
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
+
+          // Idempotency guard: a render at or beyond this seq already landed.
+          if (paywall.thumbnailSeq !== null && paywall.thumbnailSeq >= input.seq) {
+            yield* Effect.logDebug(
+              `Paywall ${paywall.id} thumbnail already at seq ${paywall.thumbnailSeq} >= ${input.seq}; skipping`,
+            );
+            return;
+          }
+
+          const snapshot = yield* mimicHost.getPaywallSnapshot(paywall.id);
+
+          const contentHashes = collectDeployedComponentContentHashes(snapshot);
+          const componentTrees = yield* fetchComponentTrees(contentHashes);
+
+          const png = yield* renderer.render({
+            componentTrees,
+            deviceScaleFactor: THUMBNAIL_DEVICE_SCALE_FACTOR,
+            height: THUMBNAIL_HEIGHT,
+            snapshot,
+            width: THUMBNAIL_WIDTH,
+          });
+
+          const key = derivePaywallThumbnailKey(paywall.projectId, paywall.id, input.seq);
+          yield* publicFileStore.putObject({ body: png, contentType: "image/png", key });
+          const url = publicFileStore.publicUrl(key);
+
+          // Race-guarded write: only advance if no newer render beat us to the
+          // row. A concurrent render for a higher seq wins; we delete the object
+          // we just wrote and stop.
+          const updated = yield* db
+            .update(paywalls)
+            .set({ thumbnailSeq: input.seq, thumbnailUrl: url })
+            .where(
+              and(
+                eq(paywalls.id, paywall.id),
+                or(isNull(paywalls.thumbnailSeq), lt(paywalls.thumbnailSeq, input.seq)),
+              ),
+            )
+            .returning({ id: paywalls.id });
+
+          if (updated.length === 0) {
+            yield* Effect.logDebug(
+              `Paywall ${paywall.id} thumbnail seq ${input.seq} lost the write race; discarding`,
+            );
+            yield* publicFileStore
+              .deleteObject(key)
+              .pipe(
+                Effect.catchCause((cause) =>
+                  Effect.logWarning(
+                    `Failed to delete superseded thumbnail object ${key}: ${Cause.pretty(cause)}`,
+                  ),
+                ),
+              );
+            return;
+          }
+
+          // Best-effort cleanup of the PREVIOUS thumbnail object, scoped to keys
+          // we own for this project + paywall.
+          if (
+            isOwnedPaywallThumbnailUrl(
+              paywall.thumbnailUrl,
+              paywall.projectId,
+              paywall.id,
+              publicFileStore.publicBaseUrl,
+            )
+          ) {
+            const previousKey = paywallThumbnailKeyFromUrl(
+              paywall.thumbnailUrl!,
+              paywall.projectId,
+              paywall.id,
+              publicFileStore.publicBaseUrl,
+            );
+            if (previousKey !== null && previousKey !== key) {
+              yield* publicFileStore
+                .deleteObject(previousKey)
+                .pipe(
+                  Effect.catchCause((cause) =>
+                    Effect.logWarning(
+                      `Failed to delete previous thumbnail object ${previousKey}: ${Cause.pretty(cause)}`,
+                    ),
+                  ),
+                );
+            }
+          }
+
+          yield* Effect.log(`Rendered thumbnail for paywall ${paywall.id} at seq ${input.seq}`);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: String(error.cause) })),
+              MimicHostError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+              PaywallArtifactStoreError: (error) =>
+                Effect.fail(
+                  new PaywallThumbnailServiceError({
+                    message: `${error.message}: ${error.cause}`,
+                  }),
+                ),
+              PublicFileStoreError: (error) =>
+                Effect.fail(
+                  new PaywallThumbnailServiceError({
+                    message: `${error.message}: ${error.cause}`,
+                  }),
+                ),
+              SnapshotImageRenderError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+            }),
+          ),
+      );
+
+      return { handleDocumentIdle } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaywallThumbnailService)(PaywallThumbnailService.make);
+}
diff --git a/packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts b/packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts
new file mode 100644
index 000000000..79bb9341b
--- /dev/null
+++ b/packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts
@@ -0,0 +1,59 @@
+import { Context, type Effect, Schema } from "effect";
+
+/**
+ * Catch-all error for {@link SnapshotImageRenderer} operations. The adapter
+ * wraps any rendering failure (HTML generation, screenshot) into this single
+ * tag so {@link PaywallThumbnailService}'s catch boundary stays small.
+ */
+export class SnapshotImageRenderError extends Schema.TaggedErrorClass<SnapshotImageRenderError>(
+  "SnapshotImageRenderError",
+)("SnapshotImageRenderError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface SnapshotImageRenderInput {
+  /**
+   * The decoded paywall document ROOT node (renderer `SnapshotNode` shape) — the
+   * `{id, type, parentId, pos, data, children}` tree the designer renders. Typed
+   * as `unknown` here so `packages/core` stays free of the preact renderer
+   * packages; the live adapter narrows it structurally (runtime-identical to the
+   * client's `documentRootFromSnapshot`).
+   */
+  readonly snapshot: unknown;
+  /**
+   * Preview-tree artifacts for the snapshot's deployed component nodes, keyed by
+   * `contentHash` then preview state, exactly as `ComponentArtifacts["trees"]`
+   * expects. Component nodes without a matching tree render as placeholders.
+   */
+  readonly componentTrees: Record<string, Record<string, unknown>>;
+  /** Viewport width in CSS pixels. */
+  readonly width: number;
+  /** Viewport height in CSS pixels. */
+  readonly height: number;
+  /** Device pixel ratio for the raster. */
+  readonly deviceScaleFactor: number;
+}
+
+export interface SnapshotImageRendererShape {
+  /**
+   * Renders a paywall document snapshot to PNG bytes: composes the snapshot (and
+   * its component preview trees) into a self-contained, non-hydrated HTML
+   * document, then rasterizes it in a headless browser.
+   */
+  readonly render: (
+    input: SnapshotImageRenderInput,
+  ) => Effect.Effect<Uint8Array, SnapshotImageRenderError>;
+}
+
+/**
+ * Provider-agnostic port that turns a decoded paywall document snapshot into a
+ * PNG. The snapshot→HTML composition lives behind this port (not in
+ * `packages/core`) so core never imports the preact renderer packages; the live
+ * adapter (`stacks/backend/infrastructure/SnapshotImageRenderer.ts`) calls
+ * `renderPaywallToHtml({ hydrate: false })` and the {@link HtmlScreenshot} port.
+ */
+export class SnapshotImageRenderer extends Context.Service<
+  SnapshotImageRenderer,
+  SnapshotImageRendererShape
+>()("infrastructure/SnapshotImageRenderer") {}
diff --git a/packages/core/src/services/paywallWorkspace/ComponentCompiler.ts b/packages/core/src/services/paywallWorkspace/ComponentCompiler.ts
new file mode 100644
index 000000000..87e264ba2
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/ComponentCompiler.ts
@@ -0,0 +1,140 @@
+import { Context, type Effect, Schema } from "effect";
+
+import type { ComponentManifestDiagnostic } from "./ComponentManifestCacheService.ts";
+
+/**
+ * Catch-all error for {@link ComponentCompiler} operations. Adapters wrap any
+ * *infrastructural* compile failure (a wasm/native toolchain that crashed, an
+ * IO failure loading the compiler) into this one tag. It is deliberately NOT
+ * used for a component that simply fails to compile — bad user source is an
+ * expected outcome carried in the {@link CompileCheckResult} `error` status, not
+ * an error-channel failure.
+ */
+export class ComponentCompilerError extends Schema.TaggedErrorClass<ComponentCompilerError>(
+  "ComponentCompilerError",
+)("ComponentCompilerError", { message: Schema.String }) {}
+
+/**
+ * One compile-phase diagnostic — the same shape the manifest cache and the
+ * browser `CompileDiagnostic` use (message + optional phase/line/column). For a
+ * {@link ComponentCompiler.compileCheck} result these are always
+ * `phase: "compile"` (syntax/TS transform errors); the field is kept so the
+ * shape is identical to every other diagnostic surface in the workspace.
+ */
+export type ComponentCompileDiagnostic = ComponentManifestDiagnostic;
+
+/**
+ * Outcome of a compile-phase check ({@link ComponentCompiler.compileCheck}):
+ *
+ * - `ready` — the source transformed cleanly (no syntax/TS errors). NOTE this is
+ *   only the *compile* phase; it does NOT mean a manifest was extracted (that
+ *   executes user code and is deferred to the container service, §3.4). A
+ *   `ready` compile-check therefore carries no manifest.
+ * - `error` — the source failed to transform; `diagnostics` carries the
+ *   line/col-mapped compile errors.
+ * - `unavailable` — this runtime has no usable compiler (e.g. the deployed
+ *   workerd worker, where esbuild-wasm has no wasm binding). Callers treat this
+ *   as "diagnostics could not be computed here", distinct from "compiled clean".
+ */
+export type CompileCheckResult =
+  | { readonly status: "ready" }
+  | { readonly status: "error"; readonly diagnostics: ReadonlyArray<ComponentCompileDiagnostic> }
+  | { readonly status: "unavailable" };
+
+/**
+ * Outcome of a compile-AND-extract pass ({@link ComponentCompiler.compileAndExtract}),
+ * the full headless equivalent of the browser sandbox pipeline: transform the
+ * TSX, evaluate the compiled CJS, then run `extractComponentManifest` over the
+ * exported {@link ComponentDefinition}.
+ *
+ * - `ready` — the source compiled AND a manifest was extracted. `manifest` is
+ *   the raw (unvalidated) `ComponentManifest` object; callers validate it
+ *   against the core `ComponentManifestSchema` before persisting.
+ * - `error` — the pass failed; `phase` discriminates *where*: `"compile"` is a
+ *   syntax/TS transform failure (identical to {@link CompileCheckResult}'s
+ *   `error`), `"runtime"` is any throw during evaluation/extraction of the user
+ *   code (module-scope exceptions, a missing default export, an
+ *   `extractComponentManifest` assertion). `diagnostics` carries the mapped
+ *   messages. User-code exceptions are ALWAYS captured here — they never escape
+ *   onto the error channel.
+ * - `unavailable` — this runtime has no compiler (the deployed workerd worker).
+ */
+export type CompileExtractResult =
+  | { readonly status: "ready"; readonly manifest: unknown }
+  | {
+      readonly status: "error";
+      readonly phase: "compile" | "runtime";
+      readonly diagnostics: ReadonlyArray<ComponentCompileDiagnostic>;
+    }
+  | { readonly status: "unavailable" };
+
+/**
+ * Provider-agnostic port for the headless component compiler (§3.4 Compile
+ * Service, Increment 3). It mirrors the *compile phase* of the browser's
+ * `CompilePipeline` — the esbuild `transform` that reports syntax/TS
+ * diagnostics — without any user-code execution.
+ *
+ * **This increment is the compile phase only.** Manifest extraction
+ * (`extractComponentManifest`) evaluates untrusted user code and must run inside
+ * an isolation boundary (a Cloudflare Container / WFP dispatch — §3.4 item 2, §8
+ * open question 2); it is intentionally NOT part of this port yet. The port is
+ * shaped so a future `extractManifest(source) → { manifest, diagnostics } |
+ * unavailable` method can be added WITHOUT reshaping callers: `compileCheck`
+ * already returns a discriminated result with an `unavailable` arm, so an
+ * `extractManifest` returning the same three-way outcome slots in beside it.
+ *
+ * Adapters (wired by the application root, keeping the toolchain out of
+ * `packages/core`):
+ * - a **native-esbuild** adapter for Node (tests, future CLI/container reuse);
+ * - an **unavailable** adapter for the deployed workerd worker, which returns
+ *   `{ status: "unavailable" }` so headless diagnostics degrade cleanly until
+ *   the container-isolated service lands.
+ *
+ * The seam is identical to callers regardless of which adapter is wired: a
+ * caller never learns whether the compiler ran or was absent beyond the
+ * `unavailable` status.
+ */
+export interface ComponentCompilerShape {
+  /**
+   * Run the compile phase over a code-component's TSX source, mirroring the
+   * browser esbuild `transform` settings (cjs, jsx automatic, jsxImportSource
+   * `@voidhash/paywalls`, loader tsx, target es2022). Returns a
+   * {@link CompileCheckResult}: `ready` on a clean transform, `error` with
+   * line/col-mapped diagnostics on a syntax/TS failure, or `unavailable` when
+   * this runtime has no compiler.
+   *
+   * Never fails on bad *source* — that is the `error` status. The error channel
+   * ({@link ComponentCompilerError}) is reserved for a broken toolchain.
+   */
+  readonly compileCheck: (
+    source: string,
+  ) => Effect.Effect<CompileCheckResult, ComponentCompilerError>;
+
+  /**
+   * Run the full compile + manifest-extract pass over a code-component's TSX
+   * source: transform (same settings as {@link compileCheck}), evaluate the
+   * compiled CJS through a module shim, locate the exported
+   * `ComponentDefinition` and run `extractComponentManifest` over it. Returns a
+   * {@link CompileExtractResult}: `ready` with the raw manifest on success,
+   * `error` with a `phase` (`"compile"` vs `"runtime"`) on failure, or
+   * `unavailable` when this runtime has no compiler.
+   *
+   * Unlike {@link compileCheck}, this evaluates untrusted user code; every
+   * user-code exception (module-scope throw, missing/invalid export, extraction
+   * assertion) is captured as a `runtime`-phase `error` and NEVER surfaced on
+   * the error channel. The error channel ({@link ComponentCompilerError}) stays
+   * reserved for a broken toolchain.
+   */
+  readonly compileAndExtract: (
+    source: string,
+  ) => Effect.Effect<CompileExtractResult, ComponentCompilerError>;
+}
+
+/**
+ * The {@link ComponentCompilerShape} port tag. Core code only touches this tag;
+ * the live (unavailable) and Node (native-esbuild) adapters are provided by the
+ * application root / test layers.
+ */
+export class ComponentCompiler extends Context.Service<ComponentCompiler, ComponentCompilerShape>()(
+  "ComponentCompiler",
+) {}
diff --git a/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts
new file mode 100644
index 000000000..c4c2bf2af
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts
@@ -0,0 +1,200 @@
+import { Db } from "@voidhash/db";
+import { Effect, Exit, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  ComponentManifestCacheService,
+  type RecordComponentManifestInput,
+} from "./ComponentManifestCacheService.ts";
+
+interface Row {
+  sourceHash: string;
+  status: string;
+  manifest: unknown;
+  diagnostics: unknown;
+}
+
+const readyManifest = {
+  manifestVersion: 2 as const,
+  props: {},
+  actions: {},
+  slot: false,
+  previewStates: ["default"],
+  hostData: [],
+};
+
+/**
+ * A tiny in-memory `Db` fake covering only the two calls the cache service makes:
+ * `insert(...).values(...).onConflictDoUpdate(...)` and
+ * `query.paywallComponentManifests.findMany({ where: { sourceHash: { in } } })`.
+ *
+ * The `onConflictDoUpdate` fake mirrors the real first-write-wins semantics: a
+ * fresh key inserts; on conflict, the row is replaced ONLY when the existing row
+ * has `status === "error"` (the `setWhere` gate). A `ready` row is immutable.
+ */
+const makeDbLayer = (seed: ReadonlyArray<Row> = []) => {
+  const rows = new Map<string, Row>(seed.map((row) => [row.sourceHash, row]));
+
+  const insert = () => ({
+    values: (value: Row) => ({
+      onConflictDoUpdate: () =>
+        Effect.sync(() => {
+          const existing = rows.get(value.sourceHash);
+          if (existing === undefined || existing.status === "error") {
+            rows.set(value.sourceHash, value);
+          }
+        }),
+    }),
+  });
+
+  const db = {
+    insert,
+    query: {
+      paywallComponentManifests: {
+        findMany: (args: { where: { sourceHash: { in: string[] } } }) =>
+          Effect.sync(() => args.where.sourceHash.in.flatMap((h) => (rows.has(h) ? [rows.get(h)!] : []))),
+      },
+    },
+    __rows: rows,
+  };
+
+  return { layer: Layer.succeed(Db, db as never), rows };
+};
+
+const runRecord = (input: RecordComponentManifestInput, seed?: ReadonlyArray<Row>) => {
+  const { layer, rows } = makeDbLayer(seed);
+  const exit = Effect.runPromiseExit(
+    Effect.gen(function* () {
+      const cache = yield* ComponentManifestCacheService;
+      yield* cache.record(input);
+    }).pipe(Effect.provide(ComponentManifestCacheService.layer.pipe(Layer.provide(layer)))),
+  );
+  return { exit, rows };
+};
+
+describe("ComponentManifestCacheService.record", () => {
+  it("stores a validated manifest for a ready compile", async () => {
+    const { exit, rows } = runRecord({
+      sourceHash: "abc",
+      status: "ready",
+      manifest: readyManifest,
+    });
+    expect(Exit.isSuccess(await exit)).toBe(true);
+    expect(rows.get("abc")?.status).toBe("ready");
+    expect(rows.get("abc")?.manifest).toEqual(readyManifest);
+  });
+
+  it("stores diagnostics with a null manifest for an error compile", async () => {
+    const { exit, rows } = runRecord({
+      sourceHash: "err",
+      status: "error",
+      diagnostics: [{ message: "boom", phase: "compile" }],
+    });
+    expect(Exit.isSuccess(await exit)).toBe(true);
+    expect(rows.get("err")?.status).toBe("error");
+    expect(rows.get("err")?.manifest).toBeNull();
+  });
+
+  it("rejects a ready upload with no manifest", async () => {
+    const { exit } = runRecord({ sourceHash: "x", status: "ready" });
+    const resolved = await exit;
+    expect(Exit.isFailure(resolved)).toBe(true);
+    if (Exit.isFailure(resolved)) {
+      expect(resolved.cause.toString()).toContain("ComponentManifestInvalidError");
+    }
+  });
+
+  it("rejects a ready upload whose manifest fails schema validation", async () => {
+    const { exit } = runRecord({
+      sourceHash: "y",
+      status: "ready",
+      manifest: { manifestVersion: 99, id: "bad" },
+    });
+    const resolved = await exit;
+    expect(Exit.isFailure(resolved)).toBe(true);
+    if (Exit.isFailure(resolved)) {
+      expect(resolved.cause.toString()).toContain("ComponentManifestInvalidError");
+    }
+  });
+
+  it("is first-write-wins: a second ready record leaves the first ready row intact", async () => {
+    const { layer, rows } = makeDbLayer([
+      { sourceHash: "h", status: "ready", manifest: readyManifest, diagnostics: [] },
+    ]);
+    const conflicting = {
+      manifestVersion: 2 as const,
+      title: "Other",
+      props: {},
+      actions: {},
+      slot: false,
+      previewStates: ["default"],
+      hostData: [],
+    };
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const cache = yield* ComponentManifestCacheService;
+        yield* cache.record({ sourceHash: "h", status: "ready", manifest: conflicting });
+      }).pipe(Effect.provide(ComponentManifestCacheService.layer.pipe(Layer.provide(layer)))),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    expect(rows.get("h")?.manifest).toEqual(readyManifest);
+  });
+
+  it("upgrades an error row to ready", async () => {
+    const { layer, rows } = makeDbLayer([
+      { sourceHash: "h", status: "error", manifest: null, diagnostics: [{ message: "boom" }] },
+    ]);
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const cache = yield* ComponentManifestCacheService;
+        yield* cache.record({ sourceHash: "h", status: "ready", manifest: readyManifest });
+      }).pipe(Effect.provide(ComponentManifestCacheService.layer.pipe(Layer.provide(layer)))),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    expect(rows.get("h")?.status).toBe("ready");
+    expect(rows.get("h")?.manifest).toEqual(readyManifest);
+  });
+
+  it("does NOT downgrade a ready row to error", async () => {
+    const { layer, rows } = makeDbLayer([
+      { sourceHash: "h", status: "ready", manifest: readyManifest, diagnostics: [] },
+    ]);
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const cache = yield* ComponentManifestCacheService;
+        yield* cache.record({
+          sourceHash: "h",
+          status: "error",
+          diagnostics: [{ message: "later failure" }],
+        });
+      }).pipe(Effect.provide(ComponentManifestCacheService.layer.pipe(Layer.provide(layer)))),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    expect(rows.get("h")?.status).toBe("ready");
+    expect(rows.get("h")?.manifest).toEqual(readyManifest);
+  });
+});
+
+describe("ComponentManifestCacheService.getMany", () => {
+  it("returns ready manifests and error rows keyed by source hash; misses are absent", async () => {
+    const { layer } = makeDbLayer([
+      { sourceHash: "ready1", status: "ready", manifest: readyManifest, diagnostics: [] },
+      {
+        sourceHash: "err1",
+        status: "error",
+        manifest: null,
+        diagnostics: [{ message: "nope" }],
+      },
+    ]);
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const cache = yield* ComponentManifestCacheService;
+        return yield* cache.getMany(["ready1", "err1", "missing"]);
+      }).pipe(Effect.provide(ComponentManifestCacheService.layer.pipe(Layer.provide(layer)))),
+    );
+    expect(result.get("ready1")?.manifest).toEqual(readyManifest);
+    expect(result.get("err1")?.status).toBe("error");
+    expect(result.get("err1")?.manifest).toBeNull();
+    expect(result.has("missing")).toBe(false);
+  });
+});
diff --git a/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts
new file mode 100644
index 000000000..4955c8df9
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts
@@ -0,0 +1,216 @@
+import { Context, Effect, Layer, Schema } from "effect";
+import { sql } from "drizzle-orm";
+
+import { Db, paywallComponentManifests } from "@voidhash/db";
+import { parseComponentManifest, type ComponentManifest } from "@voidhash/paywalls/schema";
+
+/**
+ * Catch-all error raised by {@link ComponentManifestCacheService} public
+ * methods — wraps DB failures at the boundary so callers see one stable tag.
+ */
+export class ComponentManifestCacheError extends Schema.TaggedErrorClass<ComponentManifestCacheError>(
+  "ComponentManifestCacheError",
+)("ComponentManifestCacheError", { message: Schema.String }) {}
+
+/**
+ * Raised when a recorded manifest fails validation against the OSS v2 component
+ * manifest format ({@link parseComponentManifest}). A `ready` upload MUST carry a
+ * well-formed manifest; an `error` upload carries none. A v1 / id-bearing
+ * manifest is rejected (v2 dropped the manifest `id` — identity is the file path).
+ */
+export class ComponentManifestInvalidError extends Schema.TaggedErrorClass<ComponentManifestInvalidError>(
+  "ComponentManifestInvalidError",
+)("ComponentManifestInvalidError", { message: Schema.String }) {}
+
+/** One cached diagnostic (message + optional position/phase). */
+export interface ComponentManifestDiagnostic {
+  readonly message: string;
+  readonly phase?: string;
+  readonly line?: number;
+  readonly column?: number;
+}
+
+/** Payload for {@link ComponentManifestCacheService.record}. */
+export interface RecordComponentManifestInput {
+  readonly sourceHash: string;
+  readonly status: "ready" | "error";
+  readonly manifest?: unknown;
+  readonly diagnostics?: ReadonlyArray<ComponentManifestDiagnostic>;
+}
+
+/**
+ * A resolved cache row: the compile status plus, when `ready`, the validated
+ * {@link ComponentManifest}. `error` rows carry `manifest: null`.
+ */
+export interface CachedComponentManifest {
+  readonly sourceHash: string;
+  readonly status: "ready" | "error";
+  readonly manifest: ComponentManifest | null;
+  readonly diagnostics: ReadonlyArray<ComponentManifestDiagnostic>;
+}
+
+/**
+ * `ComponentManifestCacheService` owns the content-addressed component-manifest
+ * cache (`paywall_component_manifest`, keyed by the browser-shared `sourceHash`).
+ * It is the write side of the headless-read gap: the browser uploads a manifest
+ * after every compile so any component ever compiled in a designer session is
+ * server-resolvable, and the document-first AI/MCP tools read rows back by source
+ * hash to resolve each local code-component's props/actions when reading or
+ * editing a paywall document server-side.
+ *
+ * The cache is intentionally **unscoped** — a manifest is a pure derivation of
+ * source content (see the schema jsdoc). Authorization is enforced at the RPC
+ * layer (any authenticated caller may contribute manifests; the derivation
+ * leaks nothing). `Db` is provided by the application root.
+ */
+export class ComponentManifestCacheService extends Context.Service<ComponentManifestCacheService>()(
+  "ComponentManifestCacheService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+
+      /**
+       * Validate an unknown value as an OSS v2 {@link ComponentManifest} on the
+       * Effect channel: a `parseComponentManifest` failure fails with a
+       * {@link ComponentManifestInvalidError} carrying the joined reasons. This
+       * replaces the deploy-side `ComponentManifestSchema` decode — the workspace
+       * cache stores the v2 (id-less) manifest the browser/container compiler
+       * extracts, which the document-first tools consume directly.
+       */
+      const decodeManifest = (
+        input: unknown,
+      ): Effect.Effect<ComponentManifest, ComponentManifestInvalidError> => {
+        const result = parseComponentManifest(input);
+        return result.ok
+          ? Effect.succeed(result.value)
+          : Effect.fail(
+              new ComponentManifestInvalidError({
+                message: `manifest failed validation: ${result.errors.join("; ")}`,
+              }),
+            );
+      };
+
+      /**
+       * Content-addressed, **first-write-wins** upsert of one compile result. A
+       * `ready` status validates the supplied manifest against the core schema
+       * before storing; an `error` status stores diagnostics with a null
+       * manifest.
+       *
+       * A row that is already `ready` is IMMUTABLE: because the row is keyed by
+       * the content hash of the source, any conflicting write carries the same
+       * source and so cannot legitimately differ — the `setWhere` clause makes
+       * the conflicting UPDATE a no-op, so a later (possibly adversarial) writer
+       * can never replace an existing ready manifest. An `error` row MAY be
+       * upgraded — error→ready once the source finally compiles somewhere, or
+       * error→error to refresh diagnostics.
+       */
+      const record = Effect.fn("componentManifestCache.record")(
+        function* (input: RecordComponentManifestInput) {
+          yield* Effect.annotateCurrentSpan("voidhash.paywall.component_source_hash", input.sourceHash);
+
+          let manifest: ComponentManifest | null = null;
+          if (input.status === "ready") {
+            if (input.manifest === undefined) {
+              return yield* Effect.fail(
+                new ComponentManifestInvalidError({
+                  message: `A "ready" manifest upload for ${input.sourceHash} carried no manifest.`,
+                }),
+              );
+            }
+            manifest = yield* decodeManifest(input.manifest).pipe(
+              Effect.mapError(
+                (error) =>
+                  new ComponentManifestInvalidError({
+                    message: `Component manifest for ${input.sourceHash} ${error.message}`,
+                  }),
+              ),
+            );
+          }
+
+          const diagnostics = input.diagnostics ?? [];
+          yield* db
+            .insert(paywallComponentManifests)
+            .values({
+              sourceHash: input.sourceHash,
+              status: input.status,
+              manifest,
+              diagnostics,
+            })
+            .onConflictDoUpdate({
+              target: paywallComponentManifests.sourceHash,
+              set: { status: input.status, manifest, diagnostics, updatedAt: new Date() },
+              // First-write-wins: only overwrite an `error` row. The bare table
+              // reference in a Postgres `ON CONFLICT DO UPDATE ... WHERE` names
+              // the existing row, so a `ready` row is left untouched.
+              setWhere: sql`${paywallComponentManifests.status} = 'error'`,
+            });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new ComponentManifestCacheError({ message: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * Loads the cached rows for a set of source hashes, indexed by hash.
+       * Hashes with no row (never compiled anywhere) are simply absent from the
+       * map — callers treat that as a cache miss and degrade. `ready` rows whose
+       * stored manifest somehow fails re-validation are also dropped (defensive:
+       * an older/corrupt row must not crash a read), leaving the component
+       * unresolved in the registry.
+       */
+      const getMany = Effect.fn("componentManifestCache.getMany")(
+        function* (sourceHashes: ReadonlyArray<string>) {
+          const result = new Map<string, CachedComponentManifest>();
+          const distinct = [...new Set(sourceHashes)];
+          if (distinct.length === 0) {
+            return result;
+          }
+          const rows = yield* db.query.paywallComponentManifests.findMany({
+            where: { sourceHash: { in: distinct } },
+          });
+          for (const row of rows) {
+            const diagnostics = (row.diagnostics ?? []) as ReadonlyArray<ComponentManifestDiagnostic>;
+            if (row.status === "ready") {
+              const manifest = yield* decodeManifest(row.manifest).pipe(
+                Effect.map((value): ComponentManifest | null => value),
+                Effect.orElseSucceed(() => null),
+              );
+              if (manifest === null) {
+                continue;
+              }
+              result.set(row.sourceHash, {
+                sourceHash: row.sourceHash,
+                status: "ready",
+                manifest,
+                diagnostics,
+              });
+            } else {
+              result.set(row.sourceHash, {
+                sourceHash: row.sourceHash,
+                status: "error",
+                manifest: null,
+                diagnostics,
+              });
+            }
+          }
+          return result;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new ComponentManifestCacheError({ message: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return { record, getMany } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(ComponentManifestCacheService)(ComponentManifestCacheService.make);
+}
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
new file mode 100644
index 000000000..1e74ef411
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
@@ -0,0 +1,528 @@
+import { encodePaywallDocument } from "@voidhash/paywall-workspace";
+import { Effect, Exit, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { MimicHost, type SubmitPaywallTransactionResult } from "../paywalls/MimicHost.ts";
+import { PaywallService } from "../paywalls/PaywallService.ts";
+import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
+
+const paywallRow = (over: Partial<{ id: string; slug: string; projectId: string }> = {}) => ({
+  id: over.id ?? "pw_1",
+  slug: over.slug ?? "trial",
+  projectId: over.projectId ?? "proj_1",
+  name: "Trial",
+  archivedAt: null,
+  createdAt: new Date(),
+  updatedAt: new Date(),
+  source: 1,
+  thumbnailUrl: null,
+  thumbnailSeq: null,
+  designFileMetadata: null,
+});
+
+/**
+ * A fake `submitPaywallTransaction`: given the read version + commands, decide
+ * accept/reject and the resulting version. Lets a test model a version conflict
+ * on the first attempt then acceptance on the retry.
+ */
+type SubmitFake = (input: {
+  readonly baseVersion: number;
+  readonly commands: ReadonlyArray<unknown>;
+  readonly attempt: number;
+}) => SubmitPaywallTransactionResult;
+
+interface Fakes {
+  readonly paywalls?: ReadonlyArray<ReturnType<typeof paywallRow>>;
+  readonly snapshot?: unknown;
+  /** Raw document trees returned by `getPaywallDocument`, in read order. */
+  readonly documents?: ReadonlyArray<{ tree: unknown; version: number }>;
+  readonly submit?: SubmitFake;
+}
+
+/** Encode a decoded document snapshot to the raw tree value the write path reads. */
+const encodeTree = (roots: unknown): unknown => encodePaywallDocument(roots);
+
+const testLayer = (fakes: Fakes) => {
+  const paywallLayer = Layer.succeed(PaywallService, {
+    getPaywalls: () => Effect.succeed(fakes.paywalls ?? [paywallRow()]),
+  } as unknown as PaywallService["Service"]);
+
+  // Read cursor over `fakes.documents` (each getPaywallDocument returns the next
+  // one, clamping at the last) and attempt counter for the submit fake.
+  let docReads = 0;
+  let submitAttempts = 0;
+  const documents = fakes.documents ?? [];
+
+  const mimicLayer = Layer.succeed(MimicHost, {
+    ensurePaywallDocument: () => Effect.void,
+    getPaywallSnapshot: () => Effect.succeed(fakes.snapshot ?? null),
+    getPaywallDocument: () =>
+      Effect.sync(() => {
+        const doc = documents[Math.min(docReads, documents.length - 1)] ?? {
+          tree: encodeTree([{ type: "root", name: "Paywall", children: [{ type: "screen" }] }]),
+          version: 1,
+        };
+        docReads += 1;
+        // `PaywallDocument` now carries the decoded `root` (same read as version);
+        // this service's write path uses only `tree`/`version`, so default the
+        // root to the shared snapshot for the shape.
+        return { ...doc, root: fakes.snapshot ?? null };
+      }),
+    submitPaywallTransaction: (_paywallId, input) =>
+      Effect.sync(() => {
+        const attempt = submitAttempts;
+        submitAttempts += 1;
+        return (
+          fakes.submit?.({ ...input, attempt }) ?? {
+            accepted: true,
+            version: input.baseVersion + 1,
+          }
+        );
+      }),
+    createPaywallEditToken: () => Effect.succeed({ token: "", url: "", expiresAt: new Date() }),
+  });
+
+  // A stub session; the faked PaywallService ignores it, but the workspace
+  // service's type surfaces AuthSession (getPaywalls requires it), so it must be
+  // in context.
+  const session = {
+    cookie: null,
+    method: "secret-key",
+    name: "ci",
+    organizations: [],
+    person: null,
+    projects: [],
+    user: null,
+  };
+  const authLayer = Layer.succeed(AuthSession, session as never);
+
+  return Layer.mergeAll(
+    PaywallWorkspaceService.layer.pipe(Layer.provide(Layer.mergeAll(paywallLayer, mimicLayer))),
+    authLayer,
+  );
+};
+
+const useWs = <A, E>(
+  f: (ws: PaywallWorkspaceService["Service"]) => Effect.Effect<A, E, AuthSession>,
+  fakes: Fakes,
+) =>
+  Effect.runPromiseExit(
+    Effect.gen(function* () {
+      const ws = yield* PaywallWorkspaceService;
+      return yield* f(ws);
+    }).pipe(Effect.provide(testLayer(fakes))),
+  );
+
+describe("PaywallWorkspaceService", () => {
+  it("listPaywalls returns just directories (slug + id), no snapshot reads", async () => {
+    const exit = await useWs((ws) => ws.listPaywalls("proj_1"), {
+      paywalls: [
+        paywallRow({ id: "a", slug: "trial" }),
+        paywallRow({ id: "b", slug: "onboarding" }),
+      ],
+    });
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value).toEqual([
+        { slug: "trial", paywallId: "a" },
+        { slug: "onboarding", paywallId: "b" },
+      ]);
+    }
+  });
+
+  it("readDocumentTree returns the raw tree, decoded root, and version for a paywall id", async () => {
+    const root = { id: "root_1", type: "root", parentId: null, pos: 0, data: {}, children: [] };
+    const tree = encodeTree([{ type: "root", name: "Paywall", children: [{ type: "screen" }] }]);
+    const exit = await useWs((ws) => ws.readDocumentTree("pw_1"), {
+      // `getPaywallDocument` returns `{ tree, version, root: fakes.snapshot }`.
+      documents: [{ tree, version: 7 }],
+      snapshot: root,
+    });
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.tree).toEqual(tree);
+      expect(exit.value.root).toEqual(root);
+      expect(exit.value.version).toBe(7);
+    }
+  });
+
+  it("readDocument resolves the slug (authz) and returns identity + decoded root", async () => {
+    const root = { id: "root_1", type: "root", parentId: null, pos: 0, data: {}, children: [] };
+    const exit = await useWs((ws) => ws.readDocument("proj_1", "trial"), {
+      paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+      snapshot: root,
+    });
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value).toEqual({
+        slug: "trial",
+        name: "Trial",
+        paywallId: "pw_1",
+        root,
+      });
+    }
+  });
+
+  it("readDocument fails not-found when the slug is not in the project (authz boundary)", async () => {
+    const exit = await useWs((ws) => ws.readDocument("proj_1", "does-not-exist"), {
+      paywalls: [paywallRow({ slug: "trial" })],
+    });
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(exit.cause.toString()).toContain("PaywallNotFoundError");
+    }
+  });
+
+  const docTreeWithComponent = (source: string) =>
+    encodeTree([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          { type: "screen", name: "Main" },
+          {
+            type: "library",
+            children: [{ type: "codeComponent", path: "components/hero.tsx", source }],
+          },
+        ],
+      },
+    ]);
+
+  it("moveComponentFile repaths the component and reports the new version", async () => {
+    const exit = await useWs(
+      (ws) => ws.moveComponentFile("proj_1", "trial", "hero.tsx", "hero-banner.tsx"),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: docTreeWithComponent("export const Hero = () => null;"), version: 3 }],
+        submit: ({ baseVersion }) => ({ accepted: true, version: baseVersion + 1 }),
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.version).toBe(4);
+      expect(exit.value.commandCount).toBeGreaterThan(0);
+    }
+  });
+
+  it("moveComponentFile rejects an unknown source component (diagnostics)", async () => {
+    const exit = await useWs(
+      (ws) => ws.moveComponentFile("proj_1", "trial", "ghost.tsx", "phantom.tsx"),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: docTreeWithComponent("export const Hero = () => null;"), version: 1 }],
+      },
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(exit.cause.toString()).toContain("WorkspaceWriteRejectedError");
+    }
+  });
+
+  it("deleteComponentFile removes the component and reports the new version", async () => {
+    const exit = await useWs((ws) => ws.deleteComponentFile("proj_1", "trial", "hero.tsx"), {
+      paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+      documents: [{ tree: docTreeWithComponent("export const Hero = () => null;"), version: 6 }],
+      submit: ({ baseVersion }) => ({ accepted: true, version: baseVersion + 1 }),
+    });
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.version).toBe(7);
+      expect(exit.value.commandCount).toBeGreaterThan(0);
+    }
+  });
+
+  it("conflict-retry-then-accept captures ONCE, with the attempt-0 pre-turn image", async () => {
+    const captures: Array<{ paywallId: string; version: number }> = [];
+    const exit = await useWs(
+      (ws) =>
+        ws.moveComponentFile("proj_1", "trial", "hero.tsx", "hero-banner.tsx", ({
+          paywallId,
+          version,
+        }) => Effect.sync(() => captures.push({ paywallId, version }))),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        // Two reads: first conflicts (version 5), retry succeeds (version 6). The
+        // checkpoint must be captured ONCE, from the attempt-0 pre-turn read
+        // (version 5), NOT the retried attempt's newer base (version 6).
+        documents: [
+          { tree: docTreeWithComponent("export const Hero = () => null;"), version: 5 },
+          { tree: docTreeWithComponent("export const Hero = () => null;"), version: 6 },
+        ],
+        submit: ({ attempt, baseVersion }) =>
+          attempt === 0
+            ? { accepted: false, version: baseVersion }
+            : { accepted: true, version: baseVersion + 1 },
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    // Captured exactly once, with the attempt-0 (pre-turn) version.
+    expect(captures).toEqual([{ paywallId: "pw_1", version: 5 }]);
+  });
+
+  it("rejected-only turn captures NOTHING (checkpoint gated on acceptance)", async () => {
+    const captures: Array<{ paywallId: string; version: number }> = [];
+    const exit = await useWs(
+      (ws) =>
+        // Unknown source component → the lowering rejects before any submit.
+        ws.moveComponentFile("proj_1", "trial", "ghost.tsx", "phantom.tsx", ({
+          paywallId,
+          version,
+        }) => Effect.sync(() => captures.push({ paywallId, version }))),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: docTreeWithComponent("export const Hero = () => null;"), version: 3 }],
+      },
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    // A rejected turn never modified the document, so it must NOT checkpoint —
+    // else a revert would clobber concurrent human edits for a no-write turn.
+    expect(captures).toEqual([]);
+  });
+
+  it("no-op turn (move to the same name) captures NOTHING", async () => {
+    const captures: Array<{ paywallId: string; version: number }> = [];
+    const exit = await useWs(
+      (ws) =>
+        ws.moveComponentFile("proj_1", "trial", "hero.tsx", "hero.tsx", ({
+          paywallId,
+          version,
+        }) => Effect.sync(() => captures.push({ paywallId, version }))),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: docTreeWithComponent("export const Hero = () => null;"), version: 4 }],
+        submit: () => {
+          throw new Error("submit should not be called for a no-op move");
+        },
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.commandCount).toBe(0);
+    }
+    // A committed no-op did not modify the document, so it must not capture.
+    expect(captures).toEqual([]);
+  });
+
+  it("revertDocument reconciles the live tree back to a captured pre-image", async () => {
+    const captured = encodeTree([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          { type: "screen", name: "Main" },
+          {
+            type: "library",
+            children: [
+              {
+                type: "codeComponent",
+                path: "components/hero.tsx",
+                source: "export const Hero = () => null;",
+              },
+            ],
+          },
+        ],
+      },
+    ]);
+    const exit = await useWs((ws) => ws.revertDocument("pw_1", captured), {
+      paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+      // The live document has an EDITED Hero source; revert reconciles it back.
+      documents: [{ tree: docTreeWithComponent("export const Hero = () => 999;"), version: 8 }],
+      submit: ({ baseVersion }) => ({ accepted: true, version: baseVersion + 1 }),
+    });
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.version).toBe(9);
+      expect(exit.value.commandCount).toBeGreaterThan(0);
+    }
+  });
+
+  it("revertDocument is a no-op when the live document already matches the checkpoint", async () => {
+    const tree = docTreeWithComponent("export const Hero = () => null;");
+    const exit = await useWs((ws) => ws.revertDocument("pw_1", tree), {
+      paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+      documents: [{ tree, version: 4 }],
+      submit: () => {
+        throw new Error("submit should not be called for a no-op revert");
+      },
+    });
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.commandCount).toBe(0);
+      expect(exit.value.version).toBe(4);
+    }
+  });
+
+  // A live document tree with a root → screen (the edit target).
+  const docTreeWithScreen = () =>
+    encodeTree([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [{ type: "screen", name: "Main" }],
+      },
+    ]);
+
+  it("editDocument inserts a subtree, submits, and returns real minted ids", async () => {
+    // Resolve the live screen id so the insert targets a real parent.
+    const live = docTreeWithScreen();
+    const screenId = (live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
+      (node) => node.value.fields.type?.value === "screen",
+    )!.id;
+
+    const exit = await useWs(
+      (ws) =>
+        ws.editDocument("proj_1", "trial", [
+          { op: "insert", parentId: screenId, node: { type: "view", name: "Card" } },
+        ]),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: live, version: 4 }],
+        submit: ({ baseVersion }) => ({ accepted: true, version: baseVersion + 1 }),
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.version).toBe(5);
+      expect(exit.value.commandCount).toBeGreaterThan(0);
+      const minted = exit.value.mintedIds["0"];
+      expect(minted).toBeDefined();
+      expect(minted).toHaveLength(1);
+      // A real 10-char mimic short id.
+      expect(minted![0]).toMatch(/^[0-9A-Za-z]{10}$/);
+    }
+  });
+
+  it("editDocument no-op (commandCount 0) reports empty minted ids", async () => {
+    const live = docTreeWithScreen();
+    const screenId = (live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
+      (node) => node.value.fields.type?.value === "screen",
+    )!.id;
+
+    const exit = await useWs(
+      // Setting the screen name to its CURRENT value reconciles to zero commands.
+      (ws) => ws.editDocument("proj_1", "trial", [{ op: "update", nodeId: screenId, set: { name: "Main" } }]),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: live, version: 4 }],
+        submit: () => {
+          throw new Error("submit should not be called for a no-op edit");
+        },
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.commandCount).toBe(0);
+      // A no-op committed no new nodes → no dangling minted ids.
+      expect(exit.value.mintedIds).toEqual({});
+    }
+  });
+
+  it("editDocument conflict-then-accept re-derives the target and reports the accepted version", async () => {
+    const live = docTreeWithScreen();
+    const screenId = (live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
+      (node) => node.value.fields.type?.value === "screen",
+    )!.id;
+
+    const exit = await useWs(
+      (ws) =>
+        ws.editDocument("proj_1", "trial", [
+          { op: "insert", parentId: screenId, node: { type: "view" } },
+        ]),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        // First read conflicts (version 7), retry succeeds (version 8).
+        documents: [
+          { tree: live, version: 7 },
+          { tree: live, version: 8 },
+        ],
+        submit: ({ attempt, baseVersion }) =>
+          attempt === 0
+            ? { accepted: false, version: baseVersion }
+            : { accepted: true, version: baseVersion + 1 },
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.version).toBe(9);
+      // The minted ids returned are the accepted attempt's.
+      expect(exit.value.mintedIds["0"]).toHaveLength(1);
+    }
+  });
+
+  it("writeComponentSource CREATES a new component (library minted) and reports the version", async () => {
+    const exit = await useWs(
+      (ws) =>
+        ws.writeComponentSource(
+          "proj_1",
+          "trial",
+          "components/hero.tsx",
+          "export default () => null;",
+        ),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        // A document with NO library yet → the write creates it.
+        documents: [{ tree: docTreeWithScreen(), version: 2 }],
+        submit: ({ baseVersion }) => ({ accepted: true, version: baseVersion + 1 }),
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.version).toBe(3);
+      expect(exit.value.commandCount).toBeGreaterThan(0);
+    }
+  });
+
+  it("writeComponentSource REPLACES an existing component's source", async () => {
+    const withComponent = encodeTree([
+      {
+        type: "root",
+        name: "Paywall",
+        children: [
+          { type: "screen", name: "Main" },
+          {
+            type: "library",
+            children: [
+              { type: "codeComponent", path: "components/hero.tsx", source: "export const Old = 1;" },
+            ],
+          },
+        ],
+      },
+    ]);
+    const exit = await useWs(
+      (ws) =>
+        ws.writeComponentSource(
+          "proj_1",
+          "trial",
+          "components/hero.tsx",
+          "export const New = 2;",
+        ),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: withComponent, version: 5 }],
+        submit: ({ baseVersion }) => ({ accepted: true, version: baseVersion + 1 }),
+      },
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    if (Exit.isSuccess(exit)) {
+      expect(exit.value.version).toBe(6);
+      // Only the source field changed → at least one command.
+      expect(exit.value.commandCount).toBeGreaterThan(0);
+    }
+  });
+
+  it("writeComponentSource rejects an invalid component file name", async () => {
+    const exit = await useWs(
+      (ws) =>
+        ws.writeComponentSource("proj_1", "trial", "components/../evil.tsx", "x"),
+      {
+        paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
+        documents: [{ tree: docTreeWithScreen(), version: 1 }],
+      },
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+    if (Exit.isFailure(exit)) {
+      expect(exit.cause.toString()).toContain("WorkspaceWriteRejectedError");
+    }
+  });
+});
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
new file mode 100644
index 000000000..9651cd4a3
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
@@ -0,0 +1,568 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  applyDocumentEditsToTree,
+  applyWorkspaceDelete,
+  applyWorkspaceMove,
+  docRelativeFromFileName,
+  reconcileToTree,
+  writeComponentSourceToTree,
+  type ApplyWorkspaceWriteResult,
+  type DocumentEdit,
+  type MintedIds,
+} from "@voidhash/paywall-workspace";
+
+import { PaywallNotFoundError } from "../../domain/paywall/Paywall.ts";
+import { MimicHost } from "../paywalls/MimicHost.ts";
+import { PaywallService } from "../paywalls/PaywallService.ts";
+import { ComponentManifestCacheError, ComponentManifestCacheService } from "./ComponentManifestCacheService.ts";
+
+/**
+ * Catch-all error raised by {@link PaywallWorkspaceService} public methods —
+ * wraps DB, mimic-host, and manifest-cache failures at the boundary so RPC
+ * handlers see one stable tag.
+ */
+export class PaywallWorkspaceServiceError extends Schema.TaggedErrorClass<PaywallWorkspaceServiceError>(
+  "PaywallWorkspaceServiceError",
+)("PaywallWorkspaceServiceError", { message: Schema.String }) {}
+
+/**
+ * A workspace file write was rejected before it could be submitted — the source
+ * failed to lower into a command batch (a component that does not compile, an
+ * unwritable path). Carries the workspace diagnostics so the caller can show
+ * them; this is an *expected* outcome of writing bad source, never a defect.
+ */
+export class WorkspaceWriteRejectedError extends Schema.TaggedErrorClass<WorkspaceWriteRejectedError>(
+  "WorkspaceWriteRejectedError",
+)("WorkspaceWriteRejectedError", {
+  message: Schema.String,
+  diagnostics: Schema.Array(Schema.Struct({ message: Schema.String })),
+}) {}
+
+/**
+ * A write could not be committed because the document kept advancing under
+ * concurrent writers: every re-read + re-reconcile + resubmit within the bounded
+ * retry budget lost the optimistic-concurrency race. Rare (writes are small and
+ * the DO linearizes); surfaced as a typed error so the caller can retry the
+ * whole operation rather than treating a live-editing collision as a crash.
+ */
+export class WorkspaceWriteConflictError extends Schema.TaggedErrorClass<WorkspaceWriteConflictError>(
+  "WorkspaceWriteConflictError",
+)("WorkspaceWriteConflictError", { message: Schema.String }) {}
+
+/** Max read-modify-resubmit attempts before a write gives up with a conflict. */
+const WRITE_MAX_ATTEMPTS = 3;
+
+/**
+ * One diagnostic surfaced by a workspace write or a diagnostics query — the
+ * message plus an optional position/phase and a `severity`. Structurally the
+ * union of a compile-phase diagnostic and a lowering info diagnostic; `severity`
+ * distinguishes a blocking compile `error` from a non-blocking `info`.
+ */
+export interface WorkspaceDiagnostic {
+  readonly message: string;
+  readonly severity: "error" | "info";
+  readonly phase?: string;
+  readonly line?: number;
+  readonly column?: number;
+}
+
+/**
+ * Result of a committed workspace mutation that carries no compile phase
+ * (rename / delete): the document version after the mutation, the number of
+ * commands submitted (`0` for a no-op), plus any info-level lowering diagnostics
+ * that rode along (always empty for rename/delete today; kept for shape parity).
+ */
+export interface WorkspaceMutationResult {
+  readonly version: number;
+  readonly commandCount: number;
+  readonly diagnostics: ReadonlyArray<WorkspaceDiagnostic>;
+}
+
+/** A workspace paywall directory: its stable slug + backing paywall id. */
+export interface WorkspacePaywallDir {
+  readonly slug: string;
+  readonly paywallId: string;
+}
+
+/**
+ * A workspace mutation lowering: a pure transform of the live raw document tree
+ * into a mimic command batch (or a typed rejection). The shared
+ * read-lower-submit-retry machinery ({@link submitLoop}) runs it.
+ */
+export type WorkspaceLowering = (
+  tree: unknown,
+) => Effect.Effect<
+  ApplyWorkspaceWriteResult,
+  WorkspaceWriteRejectedError | ComponentManifestCacheError
+>;
+
+/**
+ * The pre-turn checkpoint hook threaded through a submit: invoked exactly once,
+ * with the attempt-0 pre-turn document image, and ONLY when the transaction is
+ * accepted (a rejected-only or no-op turn never fires it). Kept as an optional
+ * seam on the shared submit machinery; no live caller threads one today.
+ */
+export type WorkspaceOnFirstRead = (input: {
+  readonly paywallId: string;
+  readonly tree: unknown;
+  readonly version: number;
+}) => Effect.Effect<void>;
+
+/**
+ * Result of a committed {@link PaywallWorkspaceService.editDocument}: the
+ * post-commit document version, the number of reconcile commands submitted
+ * (`0` = a no-op that changed nothing), and the ids minted for every node an
+ * `insert` / `replaceChildren` op created — keyed by the op's index in the
+ * submitted batch, so the caller can hand them back to the model.
+ */
+export interface EditDocumentResult {
+  readonly version: number;
+  readonly commandCount: number;
+  readonly mintedIds: MintedIds;
+}
+
+/**
+ * `PaywallWorkspaceService` is the server-side, document-first workspace over a
+ * project's paywalls. It lists paywall directories cheaply from the Postgres
+ * `paywall` table ({@link listPaywalls}), reads a paywall's LIVE document
+ * ({@link readDocument} / {@link readDocumentTree}, the AI `read_paywall` /
+ * checkpoint surfaces), and mutates it: {@link editDocument} applies validated
+ * document ops, {@link writeComponentSource} / {@link moveComponentFile} /
+ * {@link deleteComponentFile} manage code components by path, and
+ * {@link revertDocument} reverts to a captured checkpoint. Every mutation goes
+ * through the shared read-lower-submit-retry loop.
+ *
+ * **Authorization**: the service talks to mimic as `root`, so authz is enforced
+ * here — {@link PaywallService.getPaywalls}/`getPaywallById` run the caller's
+ * project-membership check, and a read resolves the slug to a paywall that must
+ * belong to `projectId`. `PaywallService` and `MimicHost` are provided by the
+ * application root.
+ */
+export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceService>()(
+  "PaywallWorkspaceService",
+  {
+    make: Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const mimicHost = yield* MimicHost;
+
+      /**
+       * Lists the project's non-archived paywall directories (slug + id), one
+       * cheap Postgres query, no snapshot reads. Authorization is the caller's
+       * project-membership check inside `getPaywalls`.
+       */
+      const listPaywalls = (projectId: string) =>
+        Effect.gen(function* () {
+          const paywalls = yield* paywallService.getPaywalls(projectId);
+          return paywalls.map(
+            (paywall): WorkspacePaywallDir => ({ slug: paywall.slug, paywallId: paywall.id }),
+          );
+        });
+
+      /**
+       * Resolves a paywall by slug within the project (authz: the slug must
+       * belong to `projectId`), failing not-found otherwise. Shared by the
+       * document reads and the component mutations.
+       */
+      const resolvePaywallBySlug = (projectId: string, paywallSlug: string) =>
+        Effect.gen(function* () {
+          const paywalls = yield* paywallService.getPaywalls(projectId);
+          const paywall = paywalls.find((candidate) => candidate.slug === paywallSlug);
+          if (paywall === undefined) {
+            return yield* Effect.fail(
+              new PaywallNotFoundError({
+                message: `No paywall with slug "${paywallSlug}" in project ${projectId}`,
+              }),
+            );
+          }
+          return paywall;
+        });
+
+      /**
+       * Reads the current LIVE document for `paywallId` (by id, not slug):
+       * ensures the mimic document exists and returns its RAW encoded `tree` (the
+       * `TreeValue` a checkpoint stores and `reconcile()`/`revertDocument` consume),
+       * its decoded renderer `root` (`roots[0]` — the shape `serializeDocument`
+       * cleans for the model), and the optimistic-concurrency `version`, all from
+       * ONE consistent read (see {@link MimicHostShape.getPaywallDocument}).
+       *
+       * A thin, authorization-free read over the {@link MimicHost} port —
+       * mirroring {@link revertDocument}, the CALLER owns authorization (it
+       * resolves the `paywallId` it passes; e.g. a chat-scoped checkpoint capture,
+       * or a slug already resolved within its project). Used by the AI
+       * `CaptureAiCheckpoint` path (reads `tree`) and by {@link readDocument}
+       * (reads `root`).
+       */
+      const readDocumentTree = (paywallId: string) =>
+        Effect.gen(function* () {
+          yield* mimicHost.ensurePaywallDocument(paywallId);
+          const document = yield* mimicHost.getPaywallDocument(paywallId);
+          return {
+            tree: document.tree,
+            root: document.root,
+            version: document.version,
+          } satisfies { tree: unknown; root: unknown; version: number };
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(
+                new PaywallWorkspaceServiceError({
+                  message:
+                    error.cause.length > 0 ? `${error.message} (${error.cause})` : error.message,
+                }),
+              ),
+          }),
+        );
+
+      /**
+       * Resolves a paywall by slug within the project (authz: the slug must
+       * belong to `projectId`) and reads its LIVE document's decoded renderer
+       * `root` — the input the AI `read_paywall` / `ReadPaywallDocument` surface
+       * cleans (via `serializeDocument`) for the model. Returns the paywall's
+       * identity (`slug`, `name`, `paywallId`) alongside the decoded `root` so the
+       * caller need not re-resolve. Read-only.
+       */
+      const readDocument = (projectId: string, paywallSlug: string) =>
+        Effect.gen(function* () {
+          const paywall = yield* resolvePaywallBySlug(projectId, paywallSlug);
+          const document = yield* readDocumentTree(paywall.id);
+          return {
+            slug: paywall.slug,
+            name: paywall.name,
+            paywallId: paywall.id,
+            root: document.root,
+          } satisfies { slug: string; name: string; paywallId: string; root: unknown };
+        });
+
+      /**
+       * A workspace mutation, expressed as a pure lowering of the live raw
+       * document tree to a command batch (or a rejection). Rename and delete
+       * reduce to one of these; the shared {@link submitLoop} runs the
+       * read-lower-submit-retry machinery around it.
+       */
+      type Lowering = WorkspaceLowering;
+
+      /**
+       * Optional pre-image capture: invoked with the pre-turn document image
+       * (its raw tree + version) — the tree read on the FIRST attempt, BEFORE any
+       * write — but only once the transaction is ACCEPTED. Used by the AI turn
+       * loop to checkpoint the pre-turn state exactly once per document per turn.
+       * A rejected-only or no-op turn never fires it, so it never inserts a
+       * checkpoint the caller could later revert to (clobbering concurrent human
+       * edits for a turn that never modified the document).
+       */
+      type OnFirstRead = WorkspaceOnFirstRead;
+
+      /**
+       * One read-lower-submit attempt: read the live document, lower it to a
+       * command batch (rejection fails with diagnostics), submit at the read
+       * version. Returns the pre-write `preImage` (this attempt's read tree +
+       * version) so {@link submitLoop} can hold the attempt-0 image for a
+       * post-accept checkpoint. Returns done+result (accepted or a committed
+       * no-op) or `done: false` to retry on conflict.
+       */
+      const attemptTransaction = (paywallId: string, lower: Lowering) =>
+        Effect.gen(function* () {
+          const document = yield* mimicHost.getPaywallDocument(paywallId);
+          const preImage = { tree: document.tree, version: document.version };
+          const lowered = yield* lower(document.tree);
+
+          if (lowered.kind === "rejected") {
+            return yield* Effect.fail(
+              new WorkspaceWriteRejectedError({
+                message: "The workspace mutation was rejected",
+                diagnostics: lowered.diagnostics.map((d) => ({ message: d.message })),
+              }),
+            );
+          }
+
+          // Info-level lowering diagnostics (duplicate inline ids on a
+          // composition write) ride along on the committed result.
+          const loweringDiagnostics: WorkspaceDiagnostic[] = (lowered.diagnostics ?? []).map(
+            (d) => ({ message: d.message, severity: "info" as const }),
+          );
+
+          // A no-op (unchanged source) commits nothing — report the live version.
+          if (lowered.commands.length === 0) {
+            return {
+              done: true as const,
+              accepted: false as const,
+              result: { version: document.version, commandCount: 0 },
+              loweringDiagnostics,
+              preImage,
+            };
+          }
+
+          const submitted = yield* mimicHost.submitPaywallTransaction(paywallId, {
+            baseVersion: document.version,
+            commands: lowered.commands,
+          });
+
+          if (submitted.accepted) {
+            return {
+              done: true as const,
+              accepted: true as const,
+              result: { version: submitted.version, commandCount: lowered.commands.length },
+              loweringDiagnostics,
+              preImage,
+            };
+          }
+          // Version conflict (or a batch the DO refused against the advanced
+          // document): re-read + re-reconcile on the next attempt.
+          return {
+            done: false as const,
+            accepted: false as const,
+            result: undefined,
+            loweringDiagnostics: [],
+            preImage,
+          };
+        });
+
+      /**
+       * The shared read-lower-submit-retry loop behind every workspace mutation.
+       * Runs {@link attemptTransaction} up to {@link WRITE_MAX_ATTEMPTS} times,
+       * re-reading and re-lowering on a version conflict, and fails with a
+       * {@link WorkspaceWriteConflictError} once the budget is exhausted. Returns
+       * the committed `{version, commandCount}` plus the info-level lowering
+       * diagnostics that rode along.
+       *
+       * `onFirstRead` (the pre-turn checkpoint) fires exactly once, and ONLY when
+       * the transaction is ACCEPTED — with the attempt-0 pre-turn image, not the
+       * newer base a retried attempt read. A rejected-only or no-op turn never
+       * captures.
+       */
+      const submitLoop = (paywallId: string, lower: Lowering, onFirstRead?: OnFirstRead) =>
+        Effect.gen(function* () {
+          let preTurnImage: { readonly tree: unknown; readonly version: number } | undefined;
+          for (let attempt = 0; attempt < WRITE_MAX_ATTEMPTS; attempt += 1) {
+            const outcome = yield* attemptTransaction(paywallId, lower);
+            // Hold the attempt-0 (pre-turn) image; later retries read a newer
+            // base, but the checkpoint must always be the pre-turn tree.
+            if (attempt === 0) {
+              preTurnImage = outcome.preImage;
+            }
+            if (outcome.done) {
+              // Capture only on acceptance — a committed no-op (commandCount 0)
+              // did not modify the document, so it must not checkpoint either.
+              if (outcome.accepted && onFirstRead !== undefined && preTurnImage !== undefined) {
+                yield* onFirstRead({
+                  paywallId,
+                  tree: preTurnImage.tree,
+                  version: preTurnImage.version,
+                });
+              }
+              return outcome;
+            }
+          }
+          return yield* Effect.fail(
+            new WorkspaceWriteConflictError({
+              message: `Workspace mutation lost the concurrency race after ${WRITE_MAX_ATTEMPTS} attempts.`,
+            }),
+          );
+        });
+
+      /**
+       * Moves a code component (a file rename): repaths the `codeComponent`
+       * definition AND re-points every local instance referencing it, mirroring
+       * the pure {@link applyWorkspaceMove}. A component's identity IS its path, so
+       * a rename is a path move. `fromFileName`/`toFileName` are `<basename>.tsx`
+       * file names; the move is rejected when `toFileName` is invalid or a
+       * component already lives at the target path (both caught in the lowering).
+       */
+      const moveComponentFile = (
+        projectId: string,
+        paywallSlug: string,
+        fromFileName: string,
+        toFileName: string,
+        onFirstRead?: OnFirstRead,
+      ) =>
+        Effect.gen(function* () {
+          const paywall = yield* resolvePaywallBySlug(projectId, paywallSlug);
+          yield* mimicHost.ensurePaywallDocument(paywall.id);
+          const fromPath = docRelativeFromFileName(fromFileName);
+          const toPath = docRelativeFromFileName(toFileName);
+          const outcome = yield* submitLoop(
+            paywall.id,
+            (tree) => Effect.succeed(applyWorkspaceMove({ fromPath, toPath, tree })),
+            onFirstRead,
+          );
+          return {
+            ...outcome.result,
+            diagnostics: outcome.loweringDiagnostics,
+          } satisfies WorkspaceMutationResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /**
+       * Deletes a code component (removes ONLY the `codeComponent` definition
+       * node, mirroring the browser's `removeCodeComponent`; `component` instances
+       * that reference it are left in place and degrade to placeholders in the
+       * designer — never cascade-deleted). Addressed by `fileName`
+       * (`<basename>.tsx`); an unknown component is rejected with diagnostics.
+       */
+      const deleteComponentFile = (
+        projectId: string,
+        paywallSlug: string,
+        fileName: string,
+        onFirstRead?: OnFirstRead,
+      ) =>
+        Effect.gen(function* () {
+          const paywall = yield* resolvePaywallBySlug(projectId, paywallSlug);
+          yield* mimicHost.ensurePaywallDocument(paywall.id);
+          const path = docRelativeFromFileName(fileName);
+          const outcome = yield* submitLoop(
+            paywall.id,
+            (tree) => Effect.succeed(applyWorkspaceDelete({ path, tree })),
+            onFirstRead,
+          );
+          return {
+            ...outcome.result,
+            diagnostics: outcome.loweringDiagnostics,
+          } satisfies WorkspaceMutationResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /**
+       * Applies a batch of ALREADY-VALIDATED {@link DocumentEdit} ops to the LIVE
+       * document (no fork, no whole-target overwrite): each submit attempt
+       * re-derives the target from the FRESH live tree via
+       * {@link applyDocumentEditsToTree} (decode → apply ops → re-encode →
+       * reconcile), so a version-conflict retry re-applies the position/id-based
+       * ops against the advanced document and MERGES rather than clobbers
+       * concurrent edits. The engine-minted ids for created nodes survive the
+       * encode + reconcile round-trip (see {@link applyDocumentEditsToTree}); the
+       * minted-id map from the accepted attempt is returned so the model can
+       * address the new nodes next.
+       *
+       * The `edits` MUST already have passed the ai-shared `validateDocumentEdits`
+       * (the caller returns its structured errors to the model); this method is the
+       * apply half. No checkpoint (`onFirstRead`) — an MCP/tool edit is not a
+       * revertible chat turn. Authorization is the slug-in-project resolution.
+       */
+      const editDocument = (
+        projectId: string,
+        paywallSlug: string,
+        edits: readonly DocumentEdit[],
+      ) =>
+        Effect.gen(function* () {
+          const paywall = yield* resolvePaywallBySlug(projectId, paywallSlug);
+          yield* mimicHost.ensurePaywallDocument(paywall.id);
+          // The lowering re-derives the target (and its minted ids) per attempt;
+          // hold the accepted attempt's minted ids in a closure, since the loop
+          // returns only version/commandCount. The lowering runs last on the
+          // accepted attempt, so the closure holds the committed target's ids.
+          let mintedIds: MintedIds = {};
+          const outcome = yield* submitLoop(paywall.id, (tree) =>
+            Effect.sync(() => {
+              const applied = applyDocumentEditsToTree({ tree, edits });
+              mintedIds = applied.mintedIds;
+              return applied.result;
+            }),
+          );
+          return {
+            ...outcome.result,
+            // A no-op edit (commandCount 0) committed no new nodes — the applier's
+            // pre-minted ids never became real, so report none rather than
+            // dangling ids the model cannot address.
+            mintedIds: outcome.result.commandCount === 0 ? {} : mintedIds,
+          } satisfies EditDocumentResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /**
+       * Creates-or-replaces a code-component definition at the canonical
+       * document-relative `path` (`components/<basename>.tsx`) with `source`:
+       * mirrors the browser's component create/write (create the singleton
+       * `library` node on first use, mint a `codeComponent` for a new path, else
+       * replace the existing node's `source`). See {@link writeComponentSourceToTree}.
+       *
+       * The CALLER is responsible for compiling/validating the source before
+       * calling this (the MCP `write_component` tool runs the headless build first
+       * and commits nothing on diagnostics) — this method only commits the source.
+       * Submitted through the shared version-retry loop; authorization is the
+       * slug-in-project resolution.
+       */
+      const writeComponentSource = (
+        projectId: string,
+        paywallSlug: string,
+        path: string,
+        source: string,
+      ) =>
+        Effect.gen(function* () {
+          const paywall = yield* resolvePaywallBySlug(projectId, paywallSlug);
+          yield* mimicHost.ensurePaywallDocument(paywall.id);
+          const outcome = yield* submitLoop(paywall.id, (tree) =>
+            Effect.succeed(writeComponentSourceToTree({ tree, path, source })),
+          );
+          return {
+            ...outcome.result,
+            diagnostics: outcome.loweringDiagnostics,
+          } satisfies WorkspaceMutationResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /**
+       * Reverts a document to a previously captured pre-turn `tree` (a checkpoint
+       * pre-image): read the current tree → `reconcile(current, captured)` →
+       * submit as a normal transaction through the shared retry loop. The document
+       * DO linearizes it and fans it out over WS, so an open designer converges to
+       * the reverted state. Returns the committed `{version, commandCount}`; a
+       * `commandCount` of `0` means the document already matched the checkpoint.
+       *
+       * Authorization is the caller's — the caller resolves the paywall id it owns
+       * (checkpoint rows are chat-scoped, and the chat is project-scoped); this
+       * method submits against that id.
+       */
+      const revertDocument = (paywallId: string, capturedTree: unknown) =>
+        Effect.gen(function* () {
+          yield* mimicHost.ensurePaywallDocument(paywallId);
+          const outcome = yield* submitLoop(paywallId, (current) =>
+            Effect.succeed(reconcileToTree({ current, target: capturedTree })),
+          );
+          return outcome.result satisfies { version: number; commandCount: number };
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+            // The revert lowering never produces this (it is a pure reconcile), but
+            // the shared `Lowering` type surfaces it — map to the service boundary.
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      return {
+        listPaywalls,
+        readDocumentTree,
+        readDocument,
+        editDocument,
+        writeComponentSource,
+        moveComponentFile,
+        deleteComponentFile,
+        revertDocument,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaywallWorkspaceService)(PaywallWorkspaceService.make);
+}
diff --git a/packages/core/src/services/paywallWorkspace/_fixpoint.fixture.json b/packages/core/src/services/paywallWorkspace/_fixpoint.fixture.json
new file mode 100644
index 000000000..5bfc94781
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/_fixpoint.fixture.json
@@ -0,0 +1 @@
+{"live":{"kind":"tree","nodes":[{"id":"0","parent":"$root","pos":"a00nJ","value":{"kind":"object","fields":{"name":{"kind":"string","value":"Paywall"},"type":{"kind":"string","value":"root"}}}},{"id":"RiVG842bTO","parent":"0","pos":"a06dO","value":{"kind":"object","fields":{"type":{"kind":"string","value":"library"}}}},{"id":"IIEkeZ1CMi","parent":"0","pos":"a1C61","value":{"kind":"object","fields":{"linkedVariables":{"kind":"array","items":[]},"localVariables":{"kind":"array","items":[]},"name":{"kind":"string","value":"Screen"},"states":{"kind":"array","items":[]},"style":{"kind":"object","fields":{"x":{"kind":"number","value":0},"y":{"kind":"number","value":0},"width":{"kind":"number","value":375},"height":{"kind":"number","value":812},"paddingTop":{"kind":"number","value":0},"paddingRight":{"kind":"number","value":0},"paddingBottom":{"kind":"number","value":0},"paddingLeft":{"kind":"number","value":0},"marginTop":{"kind":"number","value":0},"marginRight":{"kind":"number","value":0},"marginBottom":{"kind":"number","value":0},"marginLeft":{"kind":"number","value":0},"gap":{"kind":"number","value":0},"justifyContent":{"kind":"string","value":"flex-start"},"alignItems":{"kind":"string","value":"flex-start"},"flexDirection":{"kind":"string","value":"column"},"backgroundColor":{"kind":"string","value":"rgba(255, 255, 255, 1)"},"backgroundEnabled":{"kind":"boolean","value":true},"backgroundType":{"kind":"string","value":"solid"},"backgroundGradient":{"kind":"object","fields":{"kind":{"kind":"string","value":"linear"},"startX":{"kind":"number","value":0.5},"startY":{"kind":"number","value":0},"endX":{"kind":"number","value":0.5},"endY":{"kind":"number","value":1},"stops":{"kind":"array","items":[{"id":"34cb8be1-22c8-46a3-85d6-55d488f3e6f2","pos":"a04dY","value":{"kind":"object","fields":{"color":{"kind":"string","value":"rgba(255, 255, 255, 1)"},"position":{"kind":"number","value":0}}}},{"id":"c16939fd-8126-4849-8527-1f42f5325310","pos":"a16SB","value":{"kind":"object","fields":{"color":{"kind":"string","value":"rgba(255, 255, 255, 0)"},"position":{"kind":"number","value":1}}}}]}}},"backgroundImage":{"kind":"object","fields":{"url":{"kind":"string","value":""},"resizeMode":{"kind":"string","value":"cover"}}},"borderTopWidth":{"kind":"number","value":0},"borderRightWidth":{"kind":"number","value":0},"borderBottomWidth":{"kind":"number","value":0},"borderLeftWidth":{"kind":"number","value":0},"borderColor":{"kind":"string","value":"rgba(0, 0, 0, 1)"},"borderStyle":{"kind":"string","value":"solid"},"borderEnabled":{"kind":"boolean","value":false},"opacity":{"kind":"number","value":1},"overflow":{"kind":"string","value":"visible"},"zIndex":{"kind":"number","value":0},"display":{"kind":"string","value":"flex"},"shadowEnabled":{"kind":"boolean","value":false},"shadowColor":{"kind":"string","value":"rgba(0, 0, 0, 1)"},"shadowOffsetX":{"kind":"number","value":0},"shadowOffsetY":{"kind":"number","value":0},"shadowRadius":{"kind":"number","value":0},"shadowOpacity":{"kind":"number","value":1},"safeAreaTop":{"kind":"boolean","value":false},"safeAreaBottom":{"kind":"boolean","value":false},"flexGrow":{"kind":"number","value":0},"flexShrink":{"kind":"number","value":1},"flexBasis":{"kind":"string","value":"auto"},"alignSelf":{"kind":"string","value":"auto"}}},"type":{"kind":"string","value":"screen"}}}},{"id":"UP4XcSaxQe","parent":"0XZWV6nYq8","pos":"a0C8u","value":{"kind":"object","fields":{"actionBindings":{"kind":"array","items":[]},"componentSource":{"kind":"string","value":"local"},"componentPath":{"kind":"string","value":"components/heading.tsx"},"componentSlug":{"kind":"string","value":""},"componentVersion":{"kind":"number","value":0},"contentHash":{"kind":"string","value":""},"name":{"kind":"string","value":"Component"},"previewState":{"kind":"string","value":"default"},"props":{"kind":"array","items":[{"id":"ffcfcc44-4a26-4969-936d-9f9f2393ab38","pos":"a05AG","value":{"kind":"object","fields":{"name":{"kind":"string","value":"text"},"value":{"kind":"object","fields":{"type":{"kind":"string","value":"literal"},"value":{"kind":"object","fields":{"key":{"kind":"string","value":"string"},"value":{"kind":"string","value":"Unlock Pro"}}}}}}}}]},"type":{"kind":"string","value":"component"}}}},{"id":"0XZWV6nYq8","parent":"IIEkeZ1CMi","pos":"a02rn","value":{"kind":"object","fields":{"interactions":{"kind":"array","items":[]},"linkedVariables":{"kind":"array","items":[]},"localVariables":{"kind":"array","items":[]},"name":{"kind":"string","value":"View"},"states":{"kind":"array","items":[]},"style":{"kind":"object","fields":{"paddingTop":{"kind":"number","value":0},"paddingRight":{"kind":"number","value":0},"paddingBottom":{"kind":"number","value":0},"paddingLeft":{"kind":"number","value":0},"marginTop":{"kind":"number","value":0},"marginRight":{"kind":"number","value":0},"marginBottom":{"kind":"number","value":0},"marginLeft":{"kind":"number","value":0},"gap":{"kind":"number","value":12},"justifyContent":{"kind":"string","value":"flex-start"},"alignItems":{"kind":"string","value":"flex-start"},"flexDirection":{"kind":"string","value":"column"},"width":{"kind":"number","value":100},"height":{"kind":"number","value":100},"backgroundColor":{"kind":"string","value":"rgba(255, 255, 255, 1)"},"backgroundEnabled":{"kind":"boolean","value":false},"backgroundType":{"kind":"string","value":"solid"},"backgroundGradient":{"kind":"object","fields":{"kind":{"kind":"string","value":"linear"},"startX":{"kind":"number","value":0.5},"startY":{"kind":"number","value":0},"endX":{"kind":"number","value":0.5},"endY":{"kind":"number","value":1},"stops":{"kind":"array","items":[{"id":"34cb8be1-22c8-46a3-85d6-55d488f3e6f2","pos":"a04dY","value":{"kind":"object","fields":{"color":{"kind":"string","value":"rgba(255, 255, 255, 1)"},"position":{"kind":"number","value":0}}}},{"id":"c16939fd-8126-4849-8527-1f42f5325310","pos":"a16SB","value":{"kind":"object","fields":{"color":{"kind":"string","value":"rgba(255, 255, 255, 0)"},"position":{"kind":"number","value":1}}}}]}}},"backgroundImage":{"kind":"object","fields":{"url":{"kind":"string","value":""},"resizeMode":{"kind":"string","value":"cover"}}},"borderTopWidth":{"kind":"number","value":0},"borderRightWidth":{"kind":"number","value":0},"borderBottomWidth":{"kind":"number","value":0},"borderLeftWidth":{"kind":"number","value":0},"borderColor":{"kind":"string","value":"rgba(0, 0, 0, 1)"},"borderStyle":{"kind":"string","value":"solid"},"borderEnabled":{"kind":"boolean","value":false},"borderTopLeftRadius":{"kind":"number","value":0},"borderTopRightRadius":{"kind":"number","value":0},"borderBottomRightRadius":{"kind":"number","value":0},"borderBottomLeftRadius":{"kind":"number","value":0},"opacity":{"kind":"number","value":1},"overflow":{"kind":"string","value":"visible"},"zIndex":{"kind":"number","value":0},"position":{"kind":"string","value":"relative"},"left":{"kind":"string","value":"auto"},"top":{"kind":"string","value":"auto"},"right":{"kind":"string","value":"auto"},"bottom":{"kind":"string","value":"auto"},"display":{"kind":"string","value":"flex"},"shadowEnabled":{"kind":"boolean","value":false},"shadowColor":{"kind":"string","value":"rgba(0, 0, 0, 1)"},"shadowOffsetX":{"kind":"number","value":0},"shadowOffsetY":{"kind":"number","value":0},"shadowRadius":{"kind":"number","value":0},"shadowOpacity":{"kind":"number","value":1},"safeAreaTop":{"kind":"boolean","value":false},"safeAreaBottom":{"kind":"boolean","value":false},"flexGrow":{"kind":"number","value":0},"flexShrink":{"kind":"number","value":1},"flexBasis":{"kind":"string","value":"auto"},"alignSelf":{"kind":"string","value":"auto"}}},"type":{"kind":"string","value":"view"}}}},{"id":"VMzKZp23Oy","parent":"RiVG842bTO","pos":"a05oE","value":{"kind":"object","fields":{"type":{"kind":"string","value":"codeComponent"},"path":{"kind":"string","value":"components/heading.tsx"},"source":{"kind":"string","value":"import { defineComponent, Text } from \"@voidhash/paywalls\";\nexport default defineComponent({ title: \"Heading\", props: (p) => ({ text: p.string().default(\"Hi\") }), render: ({ props }) => (<Text style={{ fontSize: 28 }}>{props.text}</Text>) });\n"}}}}]},"projMap":{"paywall.tsx":"import { definePaywall, Screen, View } from \"@voidhash/paywalls\";\nimport Heading from \"./components/heading\";\n\nexport default definePaywall({\n  render: () => (\n      <Screen id=\"IIEkeZ1CMi\">\n        <View id=\"0XZWV6nYq8\" style={{ gap: 12 }}>\n          <Heading id=\"UP4XcSaxQe\" text=\"Unlock Pro\" />\n        </View>\n      </Screen>\n  ),\n});\n","components/heading.tsx":"import { defineComponent, Text } from \"@voidhash/paywalls\";\nexport default defineComponent({ title: \"Heading\", props: (p) => ({ text: p.string().default(\"Hi\") }), render: ({ props }) => (<Text style={{ fontSize: 28 }}>{props.text}</Text>) });\n"},"manifestsByHash":{"aaf68832d5ac7dcb94336dfa31fd3a25411b78a8bffdacaaafb7edfea92688e7":{"manifestVersion":2,"title":"Heading","props":{"text":{"kind":"string","default":"Hi","optional":true}},"actions":{},"slot":false,"previewStates":["default"],"hostData":[]}},"zero":0}
\ No newline at end of file
diff --git a/packages/core/src/services/paywalls/MimicHost.ts b/packages/core/src/services/paywalls/MimicHost.ts
new file mode 100644
index 000000000..0345371c0
--- /dev/null
+++ b/packages/core/src/services/paywalls/MimicHost.ts
@@ -0,0 +1,136 @@
+import { Context, type Effect, Schema } from "effect";
+
+/**
+ * Catch-all error for {@link MimicHost} operations. Adapters wrap any
+ * mimic-db failure (RPC transport errors, provisioning conflicts that could
+ * not be resolved, token minting failures) into this single tag so the RPC
+ * handler's catch boundary stays small.
+ */
+export class MimicHostError extends Schema.TaggedErrorClass<MimicHostError>("MimicHostError")(
+  "MimicHostError",
+  {
+    cause: Schema.String,
+    message: Schema.String,
+  },
+) {}
+
+/**
+ * Short-lived credential for one paywall designer document: the in-band WS
+ * auth `token`, the absolute `ws(s)://` connection `url` minted by mimic-db,
+ * and the locally synthesized expiry instant.
+ */
+export interface PaywallEditToken {
+  readonly token: string;
+  readonly url: string;
+  readonly expiresAt: Date;
+}
+
+/**
+ * The current live document for a paywall as the write path needs it: the RAW
+ * encoded document tree (the `TreeValue` that `reconcile()` and the workspace
+ * lowerings consume as `liveTree`), its optimistic-concurrency `version`, AND the
+ * decoded renderer `root` — all captured from ONE consistent read.
+ *
+ * `tree` is typed `unknown` so `packages/core` stays free of the `mimic-core`
+ * value types; the pure workspace layer that consumes it narrows structurally
+ * (a well-formed paywall document is the encoded `{kind: "tree", nodes}` value).
+ * The write path reconciles against the encoded `tree`; the read/render path
+ * narrows the decoded `root`.
+ *
+ * `root` is the SAME decoded root {@link MimicHostShape.getPaywallSnapshot}
+ * returns (`roots[0]`, the renderer `SnapshotNode`), carried here so a caller
+ * that needs BOTH the version and the printed files derives them atomically from
+ * one read — a snapshot read taken separately could straddle a concurrent write
+ * and pair a version with files from a different document state.
+ */
+export interface PaywallDocument {
+  readonly tree: unknown;
+  readonly version: number;
+  readonly root: unknown;
+}
+
+/**
+ * The result of submitting a granular transaction: whether the document DO
+ * accepted it (optimistic-concurrency check on `baseVersion` passed and the
+ * commands applied), and the resulting document `version`. A rejected submit
+ * (`accepted: false`) is a version conflict or an invalid command batch — an
+ * *expected* outcome the caller handles (re-read + re-reconcile), never a
+ * defect.
+ */
+export interface SubmitPaywallTransactionResult {
+  readonly accepted: boolean;
+  readonly version: number;
+}
+
+export interface MimicHostShape {
+  /**
+   * Guarantees the designer document for `paywallId` exists on the mimic
+   * host (document id = paywall id), seeding a fresh document with the
+   * initial paywall content when absent. Idempotent — a concurrent create by
+   * another isolate counts as success.
+   */
+  readonly ensurePaywallDocument: (paywallId: string) => Effect.Effect<void, MimicHostError>;
+
+  /**
+   * Mints a single-use write token + WS connection URL for the paywall's
+   * designer document. Callers should {@link ensurePaywallDocument} first so
+   * the token always points at an existing document.
+   */
+  readonly createPaywallEditToken: (input: {
+    readonly paywallId: string;
+  }) => Effect.Effect<PaywallEditToken, MimicHostError>;
+
+  /**
+   * Reads the current document snapshot for `paywallId` (document id = paywall
+   * id) and returns its decoded ROOT node — the renderer `SnapshotNode` shape
+   * (`{id, type, parentId, pos, data, children}`), i.e. `roots[0]` of the
+   * engine's roots array. Typed as `unknown` so `packages/core` stays free of
+   * the renderer type packages; the {@link SnapshotImageRenderer} adapter that
+   * consumes it narrows structurally. Callers should
+   * {@link ensurePaywallDocument} first so the read always hits an existing
+   * document.
+   */
+  readonly getPaywallSnapshot: (paywallId: string) => Effect.Effect<unknown, MimicHostError>;
+
+  /**
+   * Reads the RAW encoded document tree + `version` + decoded render `root` for
+   * `paywallId` — the input the workspace write path reconciles against, plus the
+   * decoded root a caller projects printed files off (see {@link PaywallDocument}).
+   * All three come from ONE `.get()` so a caller needing both the version and the
+   * printed files derives them atomically (no snapshot/version straddle across a
+   * concurrent write). Callers should {@link ensurePaywallDocument} first.
+   */
+  readonly getPaywallDocument: (
+    paywallId: string,
+  ) => Effect.Effect<PaywallDocument, MimicHostError>;
+
+  /**
+   * Submits a granular transaction (a plain mimic `Command[]` batch at
+   * `baseVersion`) to the paywall's document DO, which linearizes it against
+   * concurrent writers and — on accept — fans it out to every connected WS
+   * client (this fanout is how a server/agent edit reaches an open designer).
+   *
+   * Returns {@link SubmitPaywallTransactionResult}: `accepted: false` is a
+   * version conflict or invalid batch (an expected outcome the caller retries),
+   * not a {@link MimicHostError} — the error channel is reserved for transport /
+   * host failures. `commands` is typed `unknown[]` so core stays free of the
+   * `mimic-core` `Command` type; the adapter passes them straight through the
+   * transaction envelope.
+   */
+  readonly submitPaywallTransaction: (
+    paywallId: string,
+    input: {
+      readonly baseVersion: number;
+      readonly commands: ReadonlyArray<unknown>;
+    },
+  ) => Effect.Effect<SubmitPaywallTransactionResult, MimicHostError>;
+}
+
+/**
+ * Provider-agnostic port for the mimic-db document host backing the paywall
+ * designer. The live adapter (over `@voidhash/mimic-server`'s `MimicSDK`
+ * and the Worker's `MIMIC_HOST` service binding) is wired by the application
+ * root — core code only touches the tag, keeping mimic SDK dependencies out
+ * of `packages/core` and the service trivially fakeable in tests.
+ */
+export class MimicHost extends Context.Service<MimicHost, MimicHostShape>()("MimicHost") {}
diff --git a/packages/core/src/services/paywalls/PaywallService.ts b/packages/core/src/services/paywalls/PaywallService.ts
new file mode 100644
index 000000000..639db1055
--- /dev/null
+++ b/packages/core/src/services/paywalls/PaywallService.ts
@@ -0,0 +1,396 @@
+import { Cause, Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  PaywallNotFoundError,
+  PaywallSlugAlreadyExistsError,
+} from "../../domain/paywall/Paywall.ts";
+import {
+  isOwnedPaywallThumbnailUrl,
+  paywallThumbnailKeyFromUrl,
+} from "../../domain/paywallThumbnail.ts";
+import { AuditLogAction, AuditLogEntityType, Db, eq, paywalls } from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error tag.
+ */
+export class PaywallServiceError extends Schema.TaggedErrorClass<PaywallServiceError>(
+  "PaywallServiceError",
+)("PaywallServiceError", { cause: Schema.String }) {}
+
+/**
+ * `PaywallService` orchestrates the paywall aggregate.
+ *
+ * Note: `createEditToken` is intentionally not migrated yet — it depends on
+ * `MimicHostService`, whose dynamic Node module loading isn't Cloudflare-native
+ * and is in the "medium" migration bucket. Callers that need an edit token
+ * should keep using the `internal/` implementation until Mimic moves.
+ *
+ * `AuditLogPort`, `AuthSession`, `Db`, and `PublicFileStore` are provided by
+ * the application root.
+ */
+export class PaywallService extends Context.Service<PaywallService>()("PaywallService", {
+  make: Effect.gen(function* () {
+    const auditLog = yield* AuditLogPort;
+    const db = yield* Db;
+    const publicFileStore = yield* PublicFileStore;
+
+    const getPaywalls = Effect.fn("getPaywalls")(
+      function* (projectId: string, includeArchived = false) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        const organizationId = session?.projects.find((p) => p.id === projectId)?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+        yield* checkProjectPermission(
+          projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access paywalls for project ${projectId}`,
+        );
+        return yield* db.query.paywalls.findMany({
+          where: {
+            projectId,
+            ...(includeArchived ? {} : { archivedAt: { isNull: true } }),
+          },
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getPaywallById = Effect.fn("getPaywallById")(
+      function* (id: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.paywall.id", id);
+        yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        const paywall = yield* db.query.paywalls.findFirst({ where: { id } });
+        if (!paywall) {
+          return yield* Effect.fail(
+            new PaywallNotFoundError({ message: `Paywall not found: ${id}` }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.paywall.slug", paywall.slug);
+        const organizationId = session?.projects.find(
+          (p) => p.id === paywall.projectId,
+        )?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+        yield* checkProjectPermission(
+          paywall.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access paywall ${id} for project ${paywall.projectId}`,
+        );
+        return paywall;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const createPaywall = Effect.fn("createPaywall")(
+      function* (input: {
+        readonly projectId: string;
+        readonly name: string;
+        readonly slug: string;
+      }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.paywall.slug", input.slug);
+        yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        const organizationId = session?.projects.find(
+          (p) => p.id === input.projectId,
+        )?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to create paywalls for project ${input.projectId}`,
+        );
+
+        const existing = yield* db.query.paywalls.findFirst({
+          where: { slug: input.slug, projectId: input.projectId },
+        });
+        if (existing) {
+          return yield* Effect.fail(new PaywallSlugAlreadyExistsError({ slug: input.slug }));
+        }
+
+        const newPaywall = {
+          id: generateId("paywall"),
+          name: input.name,
+          projectId: input.projectId,
+          slug: input.slug,
+        };
+        yield* Effect.annotateCurrentSpan("voidhash.paywall.id", newPaywall.id);
+        yield* db.insert(paywalls).values(newPaywall);
+
+        yield* auditLog.append({
+          projectId: input.projectId,
+          entityType: AuditLogEntityType.Paywall,
+          entityId: newPaywall.id,
+          action: AuditLogAction.Created,
+          changes: { snapshot: { name: input.name, slug: input.slug } },
+        });
+
+        yield* Effect.log(`Created paywall ${newPaywall.id} for project ${input.projectId}`);
+        return { id: newPaywall.id };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const deletePaywall = Effect.fn("deletePaywall")(
+      function* (input: { readonly paywallId: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.paywall.id", input.paywallId);
+        yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        const paywall = yield* db.query.paywalls.findFirst({ where: { id: input.paywallId } });
+        if (!paywall) {
+          return yield* Effect.fail(
+            new PaywallNotFoundError({
+              message: `Paywall with id ${input.paywallId} not found`,
+            }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.paywall.slug", paywall.slug);
+        const organizationId = session?.projects.find(
+          (p) => p.id === paywall.projectId,
+        )?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+        yield* checkProjectPermission(
+          paywall.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to delete paywall ${input.paywallId}`,
+        );
+
+        yield* db.delete(paywalls).where(eq(paywalls.id, input.paywallId));
+
+        // Best-effort cleanup of the owned thumbnail object, scoped to keys we
+        // own for this project + paywall (mirrors PaywallAssetService.delete).
+        if (
+          isOwnedPaywallThumbnailUrl(
+            paywall.thumbnailUrl,
+            paywall.projectId,
+            paywall.id,
+            publicFileStore.publicBaseUrl,
+          )
+        ) {
+          const thumbnailKey = paywallThumbnailKeyFromUrl(
+            paywall.thumbnailUrl!,
+            paywall.projectId,
+            paywall.id,
+            publicFileStore.publicBaseUrl,
+          );
+          if (thumbnailKey !== null) {
+            yield* publicFileStore
+              .deleteObject(thumbnailKey)
+              .pipe(
+                Effect.catchCause((cause) =>
+                  Effect.logWarning(
+                    `Failed to delete paywall thumbnail object ${thumbnailKey}: ${Cause.pretty(cause)}`,
+                  ),
+                ),
+              );
+          }
+        }
+
+        yield* auditLog.append({
+          projectId: paywall.projectId,
+          entityType: AuditLogEntityType.Paywall,
+          entityId: input.paywallId,
+          action: AuditLogAction.Deleted,
+        });
+
+        yield* Effect.log(`Deleted paywall ${input.paywallId}`);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    /**
+     * Loads a paywall for a mutating action, asserting it exists and the caller
+     * may write to its project. Returns the row so callers can read the current
+     * `projectId`/`slug` for spans and audit logs.
+     */
+    const loadPaywallForWrite = Effect.fn("loadPaywallForWrite")(function* (
+      paywallId: string,
+      action: string,
+    ) {
+      const session = yield* AuthSession;
+      yield* Effect.annotateCurrentSpan("voidhash.paywall.id", paywallId);
+      yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+      if (session?.user?.id) {
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+      }
+      const paywall = yield* db.query.paywalls.findFirst({ where: { id: paywallId } });
+      if (!paywall) {
+        return yield* Effect.fail(
+          new PaywallNotFoundError({ message: `Paywall with id ${paywallId} not found` }),
+        );
+      }
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
+      yield* Effect.annotateCurrentSpan("voidhash.paywall.slug", paywall.slug);
+      const organizationId = session?.projects.find(
+        (p) => p.id === paywall.projectId,
+      )?.organizationId;
+      if (organizationId) {
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+      }
+      yield* checkProjectPermission(
+        paywall.projectId,
+        "project:all",
+        `User ${session?.user?.id} is not authorized to ${action} paywall ${paywallId}`,
+      );
+      return paywall;
+    });
+
+    /**
+     * Renames a paywall. The `slug` is deliberately immutable — it is the stable
+     * identifier serving/analytics key off of — so only the human-facing `name`
+     * changes here.
+     */
+    const renamePaywall = Effect.fn("renamePaywall")(
+      function* (input: { readonly paywallId: string; readonly name: string }) {
+        const paywall = yield* loadPaywallForWrite(input.paywallId, "rename");
+
+        yield* db
+          .update(paywalls)
+          .set({ name: input.name })
+          .where(eq(paywalls.id, input.paywallId));
+
+        yield* auditLog.append({
+          projectId: paywall.projectId,
+          entityType: AuditLogEntityType.Paywall,
+          entityId: input.paywallId,
+          action: AuditLogAction.Updated,
+          changes: { before: { name: paywall.name }, after: { name: input.name } },
+        });
+
+        yield* Effect.log(`Renamed paywall ${input.paywallId}`);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    /**
+     * Soft-deletes a paywall by stamping `archivedAt`. Archived paywalls drop out
+     * of the default listing but remain restorable, so live showings never break
+     * from a hard delete.
+     */
+    const archivePaywall = Effect.fn("archivePaywall")(
+      function* (input: { readonly paywallId: string }) {
+        const paywall = yield* loadPaywallForWrite(input.paywallId, "archive");
+
+        yield* db
+          .update(paywalls)
+          .set({ archivedAt: new Date() })
+          .where(eq(paywalls.id, input.paywallId));
+
+        yield* auditLog.append({
+          projectId: paywall.projectId,
+          entityType: AuditLogEntityType.Paywall,
+          entityId: input.paywallId,
+          action: AuditLogAction.Archived,
+        });
+
+        yield* Effect.log(`Archived paywall ${input.paywallId}`);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    /** Restores a previously archived paywall by clearing `archivedAt`. */
+    const restorePaywall = Effect.fn("restorePaywall")(
+      function* (input: { readonly paywallId: string }) {
+        const paywall = yield* loadPaywallForWrite(input.paywallId, "restore");
+
+        yield* db
+          .update(paywalls)
+          .set({ archivedAt: null })
+          .where(eq(paywalls.id, input.paywallId));
+
+        yield* auditLog.append({
+          projectId: paywall.projectId,
+          entityType: AuditLogEntityType.Paywall,
+          entityId: input.paywallId,
+          action: AuditLogAction.Restored,
+        });
+
+        yield* Effect.log(`Restored paywall ${input.paywallId}`);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      archivePaywall,
+      createPaywall,
+      deletePaywall,
+      getPaywallById,
+      getPaywalls,
+      renamePaywall,
+      restorePaywall,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(PaywallService)(PaywallService.make);
+}
diff --git a/packages/core/src/services/paywalls/index.ts b/packages/core/src/services/paywalls/index.ts
new file mode 100644
index 000000000..5e7fe8b23
--- /dev/null
+++ b/packages/core/src/services/paywalls/index.ts
@@ -0,0 +1,2 @@
+export * from "./MimicHost.ts";
+export * from "./PaywallService.ts";
diff --git a/packages/core/src/services/perkGrants/PerkGrantService.ts b/packages/core/src/services/perkGrants/PerkGrantService.ts
new file mode 100644
index 000000000..25c40228b
--- /dev/null
+++ b/packages/core/src/services/perkGrants/PerkGrantService.ts
@@ -0,0 +1,453 @@
+import { SubscriptionStatus } from "@voidhash/lib";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { PersonNotFoundError } from "../../domain/person/Person.ts";
+import {
+  type InsertPersonUnlockedPerk,
+  type PaymentProviderConfigurationProduct as DbPaymentProviderConfigurationProduct,
+  type Purchase as DbPurchase,
+  type Subscription as DbSubscription,
+  Db,
+  type DbTransaction,
+  PersonUnlockedPerkStatus,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  personUnlockedPerks,
+  productPerks,
+  products,
+  purchases,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` and other infrastructural
+ * failures at the public-method boundary so callers see one stable error tag.
+ */
+export class PerkGrantServiceError extends Schema.TaggedErrorClass<PerkGrantServiceError>(
+  "PerkGrantServiceError",
+)("PerkGrantServiceError", { cause: Schema.String }) {}
+
+type SubscriptionWithProduct = DbSubscription & {
+  readonly paymentProviderConfigurationProduct: DbPaymentProviderConfigurationProduct;
+};
+
+type PurchaseWithProduct = DbPurchase & {
+  readonly paymentProviderConfigurationProduct: DbPaymentProviderConfigurationProduct;
+};
+
+/**
+ * Internal sync-step description, computed entirely in memory from the
+ * existing unlocked-perks state and the desired entitlements before any DB
+ * write happens. Keeps the transaction body trivial — one switch over the
+ * operation tag — and makes the reconciliation logic unit-testable without a
+ * real DB.
+ */
+type SyncPerkOperation =
+  | {
+      readonly status: "subscription-create";
+      readonly perkId: string;
+      readonly unlockedBySubscriptionId: string;
+      readonly expiresAt: Date | null;
+    }
+  | {
+      readonly status: "subscription-reactivate";
+      readonly id: string;
+      readonly perkId: string;
+      readonly unlockedBySubscriptionId: string;
+      readonly expiresAt: Date | null;
+    }
+  | {
+      readonly status: "purchase-create";
+      readonly perkId: string;
+      readonly purchaseId: string;
+    }
+  | {
+      readonly status: "purchase-reactivate";
+      readonly id: string;
+      readonly perkId: string;
+      readonly purchaseId: string;
+    }
+  | {
+      readonly status: "expire";
+      readonly id: string;
+      readonly perkId: string;
+    };
+
+type DesiredPerkEntitlement =
+  | { readonly source: "purchase"; readonly perkId: string; readonly purchaseId: string }
+  | {
+      readonly source: "subscription";
+      readonly perkId: string;
+      readonly subscriptionId: string;
+      readonly expiresAt: Date | null;
+    };
+
+const sameDate = (left: Date | null, right: Date | null) =>
+  left === right || (left !== null && right !== null && left.getTime() === right.getTime());
+
+/**
+ * `PerkGrantService` reconciles a person's `personUnlockedPerks` against
+ * their active subscriptions, one-time purchases, and the product-perk
+ * catalog.
+ *
+ * - `syncUnlockedPerks(tx, personId)` — runs the reconciliation on the caller's
+ *   transaction handle (so it reads and writes atomically with the surrounding
+ *   purchase write) and returns the grant ids that were created or updated.
+ * - `getPersonUnlockedPerks(personId)` — returns the unlocked perks for a
+ *   person, behind a `project:all` permission check.
+ *
+ * `AuthSession` and `Db` are provided by the application root.
+ */
+export class PerkGrantService extends Context.Service<PerkGrantService>()("PerkGrantService", {
+  make: Effect.gen(function* () {
+    const syncUnlockedPerks = Effect.fn("syncUnlockedPerks")(
+      function* (tx: DbTransaction, personId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+        const [unlockedPerks, personSubscriptions, personPurchases] = yield* Effect.all([
+          Effect.gen(function* () {
+            return yield* tx.query.personUnlockedPerks.findMany({
+              where: { personId },
+            });
+          }),
+          Effect.gen(function* () {
+            const rows = yield* tx.query.subscriptions.findMany({
+              where: { personId },
+              with: { paymentProviderConfigurationProduct: true },
+            });
+            return rows as unknown as ReadonlyArray<SubscriptionWithProduct>;
+          }),
+          Effect.gen(function* () {
+            const rows = yield* tx
+              .select({
+                paymentProviderConfigurationProduct: paymentProviderConfigurationProducts,
+                purchase: purchases,
+              })
+              .from(purchases)
+              .innerJoin(
+                paymentProviderConfigurationProducts,
+                eq(
+                  purchases.paymentProviderConfigurationProductId,
+                  paymentProviderConfigurationProducts.id,
+                ),
+              )
+              .where(eq(purchases.personId, personId));
+            return rows.map(
+              (row): PurchaseWithProduct => ({
+                ...row.purchase,
+                paymentProviderConfigurationProduct: row.paymentProviderConfigurationProduct,
+              }),
+            );
+          }),
+        ]);
+
+        const activePurchases = personPurchases.filter(
+          (purchase) => purchase.refundedAt === null && purchase.revokedAt === null,
+        );
+        const configurationProductIds = [
+          ...personSubscriptions.map((sub) => sub.paymentProviderConfigurationProductId),
+          ...activePurchases.map((p) => p.paymentProviderConfigurationProductId),
+        ];
+
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.subscription.count",
+          personSubscriptions.length,
+        );
+        yield* Effect.annotateCurrentSpan("voidhash.purchase.count", activePurchases.length);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.product_config.ids",
+          configurationProductIds.slice(0, 20).join(","),
+        );
+
+        const unlockablePerks =
+          configurationProductIds.length === 0
+            ? []
+            : yield* Effect.gen(function* () {
+                const rows = yield* tx
+                  .select()
+                  .from(paymentProviderConfigurationProducts)
+                  .innerJoin(
+                    products,
+                    eq(paymentProviderConfigurationProducts.productId, products.id),
+                  )
+                  .innerJoin(productPerks, eq(productPerks.productId, products.id))
+                  .where(inArray(paymentProviderConfigurationProducts.id, configurationProductIds));
+                return rows.map((row) => row.product_perk);
+              });
+
+        const desiredByPerkId = new Map<string, DesiredPerkEntitlement>();
+
+        for (const purchase of activePurchases) {
+          for (const productPerk of unlockablePerks) {
+            if (
+              productPerk.productId === purchase.paymentProviderConfigurationProduct.productId &&
+              !desiredByPerkId.has(productPerk.perkId)
+            ) {
+              desiredByPerkId.set(productPerk.perkId, {
+                perkId: productPerk.perkId,
+                purchaseId: purchase.id,
+                source: "purchase",
+              });
+            }
+          }
+        }
+
+        for (const subscription of personSubscriptions) {
+          if (subscription.status !== SubscriptionStatus.Active) {
+            continue;
+          }
+          for (const productPerk of unlockablePerks) {
+            if (
+              productPerk.productId ===
+                subscription.paymentProviderConfigurationProduct.productId &&
+              !desiredByPerkId.has(productPerk.perkId)
+            ) {
+              desiredByPerkId.set(productPerk.perkId, {
+                expiresAt: subscription.expiresAt,
+                perkId: productPerk.perkId,
+                source: "subscription",
+                subscriptionId: subscription.id,
+              });
+            }
+          }
+        }
+
+        const desiredPerkIds = [...desiredByPerkId.keys()];
+        yield* Effect.annotateCurrentSpan("voidhash.perk.count", desiredPerkIds.length);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.perk.ids",
+          desiredPerkIds.slice(0, 20).join(","),
+        );
+
+        const desiredOperations = [...desiredByPerkId.values()].flatMap(
+          (entitlement): SyncPerkOperation[] => {
+            const existingPerk = unlockedPerks.find(
+              (unlockedPerk) => unlockedPerk.perkId === entitlement.perkId,
+            );
+            if (!existingPerk) {
+              if (entitlement.source === "purchase") {
+                return [
+                  {
+                    perkId: entitlement.perkId,
+                    purchaseId: entitlement.purchaseId,
+                    status: "purchase-create",
+                  },
+                ];
+              }
+              return [
+                {
+                  expiresAt: entitlement.expiresAt,
+                  perkId: entitlement.perkId,
+                  status: "subscription-create",
+                  unlockedBySubscriptionId: entitlement.subscriptionId,
+                },
+              ];
+            }
+
+            if (entitlement.source === "purchase") {
+              if (
+                existingPerk.status !== PersonUnlockedPerkStatus.Active ||
+                existingPerk.unlockedByPurchaseId !== entitlement.purchaseId ||
+                existingPerk.unlockedBySubscriptionId !== null ||
+                existingPerk.expiresAt !== null
+              ) {
+                return [
+                  {
+                    id: existingPerk.id,
+                    perkId: entitlement.perkId,
+                    purchaseId: entitlement.purchaseId,
+                    status: "purchase-reactivate",
+                  },
+                ];
+              }
+              return [];
+            }
+
+            if (
+              existingPerk.status !== PersonUnlockedPerkStatus.Active ||
+              existingPerk.unlockedBySubscriptionId !== entitlement.subscriptionId ||
+              existingPerk.unlockedByPurchaseId !== null ||
+              !sameDate(existingPerk.expiresAt, entitlement.expiresAt)
+            ) {
+              return [
+                {
+                  expiresAt: entitlement.expiresAt,
+                  id: existingPerk.id,
+                  perkId: entitlement.perkId,
+                  status: "subscription-reactivate",
+                  unlockedBySubscriptionId: entitlement.subscriptionId,
+                },
+              ];
+            }
+            return [];
+          },
+        );
+
+        const expireOperations: ReadonlyArray<SyncPerkOperation> = unlockedPerks
+          .filter(
+            (unlockedPerk) =>
+              unlockedPerk.status === PersonUnlockedPerkStatus.Active &&
+              (unlockedPerk.unlockedByPurchaseId !== null ||
+                unlockedPerk.unlockedBySubscriptionId !== null) &&
+              !desiredByPerkId.has(unlockedPerk.perkId),
+          )
+          .map((unlockedPerk) => ({
+            id: unlockedPerk.id,
+            perkId: unlockedPerk.perkId,
+            status: "expire" as const,
+          }));
+
+        const operations: ReadonlyArray<SyncPerkOperation> = [
+          ...desiredOperations,
+          ...expireOperations,
+        ];
+
+        const createdCount = operations.filter(
+          (operation) =>
+            operation.status === "subscription-create" || operation.status === "purchase-create",
+        ).length;
+        const updatedCount = operations.filter(
+          (operation) =>
+            operation.status === "subscription-reactivate" ||
+            operation.status === "purchase-reactivate",
+        ).length;
+        const expiredCount = operations.filter((operation) => operation.status === "expire").length;
+
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.perk_grant.operations.count",
+          operations.length,
+        );
+        yield* Effect.annotateCurrentSpan("voidhash.perk_grant.created_count", createdCount);
+        yield* Effect.annotateCurrentSpan("voidhash.perk_grant.updated_count", updatedCount);
+        yield* Effect.annotateCurrentSpan("voidhash.perk_grant.expired_count", expiredCount);
+
+        const writtenIds = yield* Effect.all(
+          operations.map((operation) => {
+            switch (operation.status) {
+              case "subscription-create": {
+                const newPerk: InsertPersonUnlockedPerk = {
+                  personId,
+                  expiresAt: operation.expiresAt,
+                  id: generateId("personUnlockedPerk"),
+                  perkId: operation.perkId,
+                  status: PersonUnlockedPerkStatus.Active,
+                  unlockedBySubscriptionId: operation.unlockedBySubscriptionId,
+                };
+                return tx.insert(personUnlockedPerks).values(newPerk).pipe(Effect.as(newPerk.id));
+              }
+              case "subscription-reactivate": {
+                return tx
+                  .update(personUnlockedPerks)
+                  .set({
+                    expiresAt: operation.expiresAt,
+                    status: PersonUnlockedPerkStatus.Active,
+                    unlockedBySubscriptionId: operation.unlockedBySubscriptionId,
+                    unlockedByPurchaseId: null,
+                    updatedAt: new Date(),
+                  })
+                  .where(eq(personUnlockedPerks.id, operation.id))
+                  .pipe(Effect.as(operation.id));
+              }
+              case "expire": {
+                return tx
+                  .update(personUnlockedPerks)
+                  .set({
+                    status: PersonUnlockedPerkStatus.Expired,
+                    updatedAt: new Date(),
+                  })
+                  .where(eq(personUnlockedPerks.id, operation.id))
+                  .pipe(Effect.as(operation.id));
+              }
+              case "purchase-create": {
+                const newPerk: InsertPersonUnlockedPerk = {
+                  expiresAt: null,
+                  id: generateId("personUnlockedPerk"),
+                  perkId: operation.perkId,
+                  personId,
+                  status: PersonUnlockedPerkStatus.Active,
+                  unlockedByPurchaseId: operation.purchaseId,
+                };
+                return tx.insert(personUnlockedPerks).values(newPerk).pipe(Effect.as(newPerk.id));
+              }
+              case "purchase-reactivate": {
+                return tx
+                  .update(personUnlockedPerks)
+                  .set({
+                    expiresAt: null,
+                    status: PersonUnlockedPerkStatus.Active,
+                    unlockedByPurchaseId: operation.purchaseId,
+                    unlockedBySubscriptionId: null,
+                    updatedAt: new Date(),
+                  })
+                  .where(eq(personUnlockedPerks.id, operation.id))
+                  .pipe(Effect.as(operation.id));
+              }
+            }
+          }),
+        );
+
+        yield* Effect.annotateCurrentSpan("voidhash.perk_grant.result.count", writtenIds.length);
+
+        return writtenIds;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PerkGrantServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getPersonUnlockedPerks = Effect.fn("getPersonUnlockedPerks")(
+      function* (personId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+        const session = yield* AuthSession;
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        const [person, perks] = yield* Effect.all(
+          [
+            Effect.gen(function* () {
+              const db = yield* Db;
+              return yield* db.query.persons.findFirst({ where: { id: personId } });
+            }),
+            Effect.gen(function* () {
+              const db = yield* Db;
+              return yield* db.query.personUnlockedPerks.findMany({
+                where: { personId },
+              });
+            }),
+          ],
+          { concurrency: "unbounded" },
+        );
+        if (!person) {
+          return yield* Effect.fail(new PersonNotFoundError({ id: personId }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", person.projectId);
+        yield* checkProjectPermission(
+          person.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access person ${personId} for project ${person.projectId}`,
+        );
+        return perks;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PerkGrantServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      getPersonUnlockedPerks,
+      syncUnlockedPerks,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(PerkGrantService)(PerkGrantService.make);
+}
diff --git a/packages/core/src/services/perkGrants/index.ts b/packages/core/src/services/perkGrants/index.ts
new file mode 100644
index 000000000..ed1219e56
--- /dev/null
+++ b/packages/core/src/services/perkGrants/index.ts
@@ -0,0 +1 @@
+export * from "./PerkGrantService.ts";
diff --git a/packages/core/src/services/perks/PerkService.ts b/packages/core/src/services/perks/PerkService.ts
new file mode 100644
index 000000000..9c777bbf0
--- /dev/null
+++ b/packages/core/src/services/perks/PerkService.ts
@@ -0,0 +1,274 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { PerkNotFoundError, PerkSlugAlreadyExistsError } from "../../domain/perk/Perk.ts";
+import { AuditLogAction, AuditLogEntityType, Db, eq, perks } from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { SchemaCacheInvalidationService } from "../schema/SchemaCacheInvalidationService.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error
+ * tag.
+ */
+export class PerkServiceError extends Schema.TaggedErrorClass<PerkServiceError>("PerkServiceError")(
+  "PerkServiceError",
+  { cause: Schema.String },
+) {}
+
+/**
+ * `PerkService` orchestrates the perk catalog aggregate. Five operations:
+ * `getPerks`, `getPerkById`, `createPerk`, `updatePerk`, `deletePerk`. Every
+ * write emits an audit-log entry and invalidates the project's cached schema
+ * after the DB write succeeds.
+ *
+ * `AuditLogPort`, `AuthSession`, `Db`, and `SchemaCacheInvalidationService`
+ * are provided by the application root.
+ */
+export class PerkService extends Context.Service<PerkService>()("PerkService", {
+  make: Effect.gen(function* () {
+    const auditLog = yield* AuditLogPort;
+    const schemaCache = yield* SchemaCacheInvalidationService;
+    const db = yield* Db;
+
+    const getPerks = Effect.fn("getPerks")(
+      function* (projectId: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        yield* checkProjectPermission(
+          projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access perks for project ${projectId}`,
+        );
+        return yield* db.query.perks.findMany({ where: { projectId } });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PerkServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getPerkById = Effect.fn("getPerkById")(
+      function* (id: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.perk.id", id);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        const perk = yield* db.query.perks.findFirst({ where: { id } });
+        if (!perk) {
+          return yield* Effect.fail(new PerkNotFoundError({ message: "Perk not found" }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", perk.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.perk.slug", perk.slug);
+        yield* checkProjectPermission(
+          perk.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access perk ${id} for project ${perk.projectId}`,
+        );
+        return perk;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PerkServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const createPerk = Effect.fn("createPerk")(
+      function* (input: {
+        readonly projectId: string;
+        readonly name: string;
+        readonly slug: string;
+      }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.perk.slug", input.slug);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to create perks for project ${input.projectId}`,
+        );
+
+        const existing = yield* db.query.perks.findFirst({
+          where: { slug: input.slug, projectId: input.projectId },
+        });
+        if (existing) {
+          return yield* Effect.fail(new PerkSlugAlreadyExistsError({ slug: input.slug }));
+        }
+
+        const newPerk = {
+          id: generateId("perk"),
+          name: input.name,
+          projectId: input.projectId,
+          slug: input.slug,
+        };
+        yield* Effect.annotateCurrentSpan("voidhash.perk.id", newPerk.id);
+        yield* db.insert(perks).values(newPerk);
+
+        yield* auditLog
+          .append({
+            projectId: input.projectId,
+            entityType: AuditLogEntityType.Perk,
+            entityId: newPerk.id,
+            action: AuditLogAction.Created,
+            changes: { snapshot: { name: input.name, slug: input.slug } },
+          })
+          .pipe(Effect.ignore);
+
+        yield* Effect.log(`Created perk ${newPerk.id} for project ${input.projectId}`);
+        yield* schemaCache.invalidate(input.projectId);
+        return { id: newPerk.id };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PerkServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const updatePerk = Effect.fn("updatePerk")(
+      function* (input: {
+        readonly id: string;
+        readonly projectId: string;
+        readonly name: string;
+        readonly slug: string;
+      }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.perk.id", input.id);
+        yield* Effect.annotateCurrentSpan("voidhash.perk.slug", input.slug);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to update perks for project ${input.projectId}`,
+        );
+
+        const existing = yield* db.query.perks.findFirst({
+          where: { slug: input.slug, projectId: input.projectId },
+        });
+        if (existing && existing.id !== input.id) {
+          return yield* Effect.fail(new PerkSlugAlreadyExistsError({ slug: input.slug }));
+        }
+
+        yield* db
+          .update(perks)
+          .set({ name: input.name, slug: input.slug })
+          .where(eq(perks.id, input.id));
+
+        yield* auditLog
+          .append({
+            projectId: input.projectId,
+            entityType: AuditLogEntityType.Perk,
+            entityId: input.id,
+            action: AuditLogAction.Updated,
+            changes: { snapshot: { name: input.name, slug: input.slug } },
+          })
+          .pipe(Effect.ignore);
+
+        yield* Effect.log(`Updated perk ${input.id} for project ${input.projectId}`);
+        yield* schemaCache.invalidate(input.projectId);
+        return { id: input.id };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PerkServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const deletePerk = Effect.fn("deletePerk")(
+      function* (input: { readonly perkId: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.perk.id", input.perkId);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        const perk = yield* db.query.perks.findFirst({ where: { id: input.perkId } });
+        if (!perk) {
+          return yield* Effect.fail(
+            new PerkNotFoundError({ message: `Perk with id ${input.perkId} not found` }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", perk.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.perk.slug", perk.slug);
+        yield* checkProjectPermission(
+          perk.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to delete perk ${input.perkId}`,
+        );
+
+        yield* db.delete(perks).where(eq(perks.id, input.perkId));
+
+        yield* auditLog
+          .append({
+            projectId: perk.projectId,
+            entityType: AuditLogEntityType.Perk,
+            entityId: input.perkId,
+            action: AuditLogAction.Deleted,
+          })
+          .pipe(Effect.ignore);
+
+        yield* Effect.log(`Deleted perk ${input.perkId}`);
+        yield* schemaCache.invalidate(perk.projectId);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PerkServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      getPerks,
+      getPerkById,
+      createPerk,
+      updatePerk,
+      deletePerk,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(PerkService)(PerkService.make);
+}
diff --git a/packages/core/src/services/perks/index.ts b/packages/core/src/services/perks/index.ts
new file mode 100644
index 000000000..8cea75c18
--- /dev/null
+++ b/packages/core/src/services/perks/index.ts
@@ -0,0 +1 @@
+export * from "./PerkService.ts";
diff --git a/packages/core/src/services/personIdentity/IdentifyDistinctIdCompletionWorkflow.ts b/packages/core/src/services/personIdentity/IdentifyDistinctIdCompletionWorkflow.ts
new file mode 100644
index 000000000..1d07e6694
--- /dev/null
+++ b/packages/core/src/services/personIdentity/IdentifyDistinctIdCompletionWorkflow.ts
@@ -0,0 +1,31 @@
+import { Context, type Effect } from "effect";
+
+import type { PersonOriginValue } from "@voidhash/db";
+
+/**
+ * Payload for the asynchronous identity-migration completion job, started after
+ * the synchronous `identifyDistinctId` write commits.
+ */
+export interface IdentifyDistinctIdCompletionInput {
+  readonly distinctId: string;
+  readonly eventTimestamp: string;
+  readonly jobId: string;
+  readonly origin: PersonOriginValue;
+  readonly previousDistinctId: string;
+  readonly projectId: string;
+  readonly requestedAt: string;
+  readonly targetPersonId: string;
+}
+
+/**
+ * Abstract completion-job workflow. `dispatch` schedules the asynchronous
+ * identity migration fire-and-forget; the concrete adapter (a Cloudflare
+ * Workflow) is wired at the application root, so `packages/core` carries no
+ * infrastructure dependency.
+ */
+export class IdentifyDistinctIdCompletionWorkflow extends Context.Service<
+  IdentifyDistinctIdCompletionWorkflow,
+  {
+    readonly dispatch: (input: IdentifyDistinctIdCompletionInput) => Effect.Effect<void>;
+  }
+>()("IdentifyDistinctIdCompletionWorkflow") {}
diff --git a/packages/core/src/services/personIdentity/IdentityMutationService.ts b/packages/core/src/services/personIdentity/IdentityMutationService.ts
new file mode 100644
index 000000000..f612a943c
--- /dev/null
+++ b/packages/core/src/services/personIdentity/IdentityMutationService.ts
@@ -0,0 +1,925 @@
+import { Context, Effect, Layer } from "effect";
+
+import {
+  type DbError,
+  type DbTransaction,
+  type Person as DbPerson,
+  type PersonIdentity as DbPersonIdentity,
+  PersonIdentityKind,
+  type PersonIdentityKindValue,
+  PersonOrigin,
+  type PersonOriginValue,
+  eq,
+  identityAssertions,
+  persons,
+  sql,
+} from "@voidhash/db";
+
+import {
+  applyTraitWrite,
+  combineTraitStates,
+  materializeTraitState,
+  type TraitFoldState,
+} from "../../domain/person/IdentityGraph.ts";
+import {
+  type PersonIdentityEventV1,
+  type PersonSnapshotEventV1,
+  isAnonymousDistinctId,
+} from "../../domain/person/Person.ts";
+import { ACCOUNT_TOKEN_SERVICE_ID, deriveAccountToken } from "../../utils/crypto/account-token.ts";
+import { generateId } from "../../utils/generate-id.ts";
+
+/** Default {@link PersonOrigin} stamped on persons created without one. */
+export const DEFAULT_ORIGIN = PersonOrigin.API;
+
+/** Shared per-mutation preamble: when/where the change happened and its origin. */
+export interface MutationContext {
+  readonly eventTimestamp: Date;
+  /** Stable per-event id — the deterministic same-timestamp LWW tie-break. */
+  readonly eventId: string;
+  readonly origin: PersonOriginValue;
+  readonly projectId: string;
+}
+
+/** A resolved `(distinctId → person)` mapping with both the raw and canonical person. */
+export interface MappingResolution {
+  readonly canonicalPerson: DbPerson;
+  readonly mapping: DbPersonIdentity;
+  readonly rawPerson: DbPerson;
+}
+
+/** Outcome of {@link IdentityMutationService.ensureCanonicalPersonForDistinctId}. */
+export interface CanonicalPersonResolution {
+  readonly person: DbPerson;
+  readonly mappingEvent?: PersonIdentityEventV1;
+  readonly rawMapping?: DbPersonIdentity;
+  readonly wasCreated: boolean;
+}
+
+const toPersonVersion = (person: DbPerson): number =>
+  person.updatedAt?.getTime() ?? person.createdAt?.getTime() ?? Date.now();
+
+const deriveIdentityKind = (distinctId: string): PersonIdentityKindValue =>
+  isAnonymousDistinctId(distinctId) ? PersonIdentityKind.Anonymous : PersonIdentityKind.Identified;
+
+const toMappingEvent = ({
+  changedAt,
+  personId,
+  distinctId,
+  previousDistinctId,
+  kind,
+  projectId,
+  version,
+}: {
+  readonly changedAt: string;
+  readonly personId: string;
+  readonly distinctId: string;
+  readonly previousDistinctId?: string;
+  readonly kind: PersonIdentityKindValue;
+  readonly projectId: string;
+  readonly version: number;
+}): PersonIdentityEventV1 => ({
+  changedAt,
+  personId,
+  distinctId,
+  ...(previousDistinctId ? { previousDistinctId } : {}),
+  isDeleted: false,
+  kind,
+  projectId,
+  schemaVersion: 1,
+  version,
+});
+
+/**
+ * Person-identity write operations, each running on a caller-supplied
+ * transaction handle (`tx`) so the surrounding service or workflow controls
+ * commit/rollback. Consumed by {@link PersonIdentityService} (synchronous
+ * resolve/identify) and the identity completion workflow (durable source-side
+ * merge). Pure projection types and trait/version rules live in the
+ * `domain/person` model; this service owns only the database mutations.
+ */
+export class IdentityMutationService extends Context.Service<IdentityMutationService>()(
+  "IdentityMutationService",
+  {
+    make: Effect.gen(function* () {
+      const findPersonById = Effect.fn("findPersonById")(
+        (db: DbTransaction, { personId }: { readonly personId: string }) =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+
+            return yield* db.query.persons.findFirst({
+              where: { id: personId },
+            });
+          }),
+      );
+
+      const resolveCanonicalPerson = Effect.fn("resolveCanonicalPerson")(
+        (
+          db: DbTransaction,
+          {
+            person,
+          }: {
+            readonly person: DbPerson;
+          },
+        ): Effect.Effect<DbPerson, DbError> =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", person.id);
+            if (person.mergedIntoPersonId) {
+              yield* Effect.annotateCurrentSpan(
+                "voidhash.person.merged_into_id",
+                person.mergedIntoPersonId,
+              );
+            }
+
+            let current = person;
+
+            while (current.mergedIntoPersonId) {
+              const mergedIntoPerson = yield* findPersonById(db, {
+                personId: current.mergedIntoPersonId,
+              });
+              if (!mergedIntoPerson) {
+                return current;
+              }
+              current = mergedIntoPerson;
+            }
+
+            return current;
+          }),
+      );
+
+      const findDistinctIdMapping = Effect.fn("findDistinctIdMapping")(
+        (
+          db: DbTransaction,
+          {
+            distinctId,
+            projectId,
+          }: {
+            readonly distinctId: string;
+            readonly projectId: string;
+          },
+        ): Effect.Effect<MappingResolution | undefined, DbError> =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+
+            const mapping = yield* db.query.personIdentities.findFirst({
+              where: { projectId, distinctId },
+            });
+            if (!mapping) {
+              return undefined;
+            }
+
+            yield* Effect.annotateCurrentSpan("voidhash.person_identity.id", mapping.id);
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person_identity.kind",
+              deriveIdentityKind(distinctId),
+            );
+
+            const rawPerson = yield* findPersonById(db, {
+              personId: mapping.personId,
+            });
+            if (!rawPerson) {
+              return undefined;
+            }
+
+            const canonicalPerson = yield* resolveCanonicalPerson(db, {
+              person: rawPerson,
+            });
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", canonicalPerson.id);
+
+            return {
+              canonicalPerson,
+              mapping,
+              rawPerson,
+            };
+          }),
+      );
+
+      const findPersonlessIdentity = Effect.fn("findPersonlessIdentity")(
+        (
+          db: DbTransaction,
+          {
+            distinctId,
+            projectId,
+          }: {
+            readonly distinctId: string;
+            readonly projectId: string;
+          },
+        ) =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+
+            return yield* db.query.personPersonlessIdentities.findFirst({
+              where: { projectId, distinctId },
+            });
+          }),
+      );
+
+      const ensurePersonlessIdentity = Effect.fn("ensurePersonlessIdentity")(
+        (
+          db: DbTransaction,
+          {
+            distinctId,
+            projectId,
+          }: {
+            readonly distinctId: string;
+            readonly projectId: string;
+          },
+        ) =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+
+            yield* db.execute(sql`
+              INSERT INTO person_personless_identity
+                (project_id, distinct_id, is_merged, created_at, updated_at)
+              VALUES
+                (${projectId}, ${distinctId}, false, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+              ON CONFLICT (project_id, distinct_id) DO UPDATE SET updated_at = CURRENT_TIMESTAMP
+            `);
+          }),
+      );
+
+      const markPersonlessIdentityMerged = Effect.fn("markPersonlessIdentityMerged")(
+        (
+          db: DbTransaction,
+          {
+            distinctId,
+            projectId,
+          }: {
+            readonly distinctId: string;
+            readonly projectId: string;
+          },
+        ) =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+
+            yield* db.execute(sql`
+              UPDATE person_personless_identity
+              SET is_merged = true, updated_at = CURRENT_TIMESTAMP
+              WHERE project_id = ${projectId} AND distinct_id = ${distinctId}
+            `);
+          }),
+      );
+
+      const createPersonRow = Effect.fn("createPersonRow")(
+        (
+          db: DbTransaction,
+          {
+            context,
+            email,
+            name,
+            setAttributes,
+            setOnceAttributes,
+          }: {
+            readonly context: MutationContext;
+            readonly email?: string;
+            readonly name?: string;
+            readonly setAttributes: Record<string, unknown>;
+            readonly setOnceAttributes: Record<string, unknown>;
+          },
+        ): Effect.Effect<DbPerson, DbError> =>
+          Effect.gen(function* () {
+            const folded = applyTraitWrite(
+              { meta: {}, traits: {} },
+              {
+                eventId: context.eventId,
+                eventTs: context.eventTimestamp.getTime(),
+                set: setAttributes,
+                setOnce: setOnceAttributes,
+              },
+            );
+            const person = {
+              archivedAt: null,
+              createdAt: context.eventTimestamp,
+              email: email ?? null,
+              firstSeenAt: context.eventTimestamp,
+              id: generateId("person"),
+              lastSeenAt: context.eventTimestamp,
+              mergedIntoPersonId: null,
+              name: name ?? null,
+              origin: context.origin,
+              projectId: context.projectId,
+              traits: folded.traits,
+              traitsMeta: folded.meta,
+              updatedAt: context.eventTimestamp,
+            } as DbPerson;
+
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", context.projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", person.id);
+            yield* Effect.annotateCurrentSpan("voidhash.person.origin", context.origin);
+
+            yield* db.insert(persons).values({
+              email: person.email,
+              firstSeenAt: person.firstSeenAt,
+              id: person.id,
+              lastSeenAt: person.lastSeenAt,
+              mergedIntoPersonId: person.mergedIntoPersonId,
+              name: person.name,
+              origin: person.origin,
+              projectId: person.projectId,
+              traits: person.traits,
+              traitsMeta: person.traitsMeta,
+            });
+
+            return person;
+          }),
+      );
+
+      const updatePersonProfile = Effect.fn("updatePersonProfile")(
+        (
+          db: DbTransaction,
+          {
+            person,
+            email,
+            eventId,
+            eventTimestamp,
+            mergeTraitsFrom,
+            name,
+            setAttributes,
+            setOnceAttributes,
+          }: {
+            readonly person: DbPerson;
+            readonly email?: string | null;
+            readonly eventId: string;
+            readonly eventTimestamp: Date;
+            /**
+             * When present, the source person whose trait state is merged into
+             * `person` via per-key LWW before applying this event's writes.
+             * Used by the identify merge so the surviving person inherits the
+             * other side's traits deterministically.
+             */
+            readonly mergeTraitsFrom?: DbPerson;
+            readonly name?: string | null;
+            readonly setAttributes: Record<string, unknown>;
+            readonly setOnceAttributes: Record<string, unknown>;
+          },
+        ): Effect.Effect<DbPerson, DbError> =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", person.projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", person.id);
+
+            const nextFirstSeen =
+              person.firstSeenAt && person.firstSeenAt.getTime() <= eventTimestamp.getTime()
+                ? person.firstSeenAt
+                : eventTimestamp;
+            const nextLastSeen =
+              person.lastSeenAt && person.lastSeenAt.getTime() >= eventTimestamp.getTime()
+                ? person.lastSeenAt
+                : eventTimestamp;
+
+            // Per-key LWW: combine the other person's state (on merge), then
+            // fold this event's writes. Order-independent, so out-of-order
+            // events can't regress a newer trait value.
+            const targetState = materializeTraitState(person.traits, person.traitsMeta);
+            const baseState: TraitFoldState = mergeTraitsFrom
+              ? combineTraitStates(
+                  targetState,
+                  materializeTraitState(mergeTraitsFrom.traits, mergeTraitsFrom.traitsMeta),
+                )
+              : targetState;
+            const folded = applyTraitWrite(baseState, {
+              eventId,
+              eventTs: eventTimestamp.getTime(),
+              set: setAttributes,
+              setOnce: setOnceAttributes,
+            });
+
+            const nextEmail = typeof email === "undefined" ? person.email : (email ?? person.email);
+            const nextName = typeof name === "undefined" ? person.name : (name ?? person.name);
+
+            yield* db
+              .update(persons)
+              .set({
+                email: nextEmail,
+                firstSeenAt: nextFirstSeen,
+                lastSeenAt: nextLastSeen,
+                name: nextName,
+                traits: folded.traits,
+                traitsMeta: folded.meta,
+              })
+              .where(eq(persons.id, person.id));
+
+            return {
+              ...person,
+              email: nextEmail,
+              firstSeenAt: nextFirstSeen,
+              lastSeenAt: nextLastSeen,
+              name: nextName,
+              traits: folded.traits,
+              traitsMeta: folded.meta,
+              updatedAt: eventTimestamp,
+            };
+          }),
+      );
+
+      const archivePerson = Effect.fn("archivePerson")(
+        (
+          db: DbTransaction,
+          {
+            person,
+            eventTimestamp,
+            mergedIntoPersonId,
+          }: {
+            readonly person: DbPerson;
+            readonly eventTimestamp: Date;
+            readonly mergedIntoPersonId: string;
+          },
+        ): Effect.Effect<DbPerson, DbError> =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", person.projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", person.id);
+            yield* Effect.annotateCurrentSpan("voidhash.person.merged_into_id", mergedIntoPersonId);
+
+            if (person.archivedAt !== null && person.mergedIntoPersonId === mergedIntoPersonId) {
+              return person;
+            }
+
+            yield* db
+              .update(persons)
+              .set({
+                archivedAt: eventTimestamp,
+                mergedIntoPersonId,
+              })
+              .where(eq(persons.id, person.id));
+
+            return {
+              ...person,
+              archivedAt: eventTimestamp,
+              mergedIntoPersonId,
+              updatedAt: eventTimestamp,
+            };
+          }),
+      );
+
+      const upsertPersonIdentity = Effect.fn("upsertPersonIdentity")(
+        (
+          db: DbTransaction,
+          {
+            changedAt,
+            personId,
+            distinctId,
+            previousDistinctId,
+            identityId,
+            projectId,
+            version,
+          }: {
+            readonly changedAt: Date;
+            readonly personId: string;
+            readonly distinctId: string;
+            /**
+             * When set, emits an identity *override* mapping event so events
+             * carrying `previousDistinctId` are re-attributed to `personId` in
+             * the analytics projection, independent of the merge direction.
+             */
+            readonly previousDistinctId?: string;
+            readonly identityId: string;
+            readonly projectId: string;
+            readonly version: number;
+          },
+        ): Effect.Effect<PersonIdentityEventV1, DbError> =>
+          Effect.gen(function* () {
+            const kind = deriveIdentityKind(distinctId);
+
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+            yield* Effect.annotateCurrentSpan("voidhash.person_identity.id", identityId);
+            yield* Effect.annotateCurrentSpan("voidhash.person_identity.kind", kind);
+
+            yield* db.execute(sql`
+              INSERT INTO person_identity
+                (id, project_id, distinct_id, person_id, kind, version, created_at, updated_at)
+              VALUES
+                (
+                  ${identityId},
+                  ${projectId},
+                  ${distinctId},
+                  ${personId},
+                  ${kind},
+                  ${version},
+                  CURRENT_TIMESTAMP,
+                  CURRENT_TIMESTAMP
+                )
+              ON CONFLICT (project_id, distinct_id) DO UPDATE SET
+                person_id = EXCLUDED.person_id,
+                kind = EXCLUDED.kind,
+                version = EXCLUDED.version,
+                updated_at = CURRENT_TIMESTAMP
+            `);
+
+            return toMappingEvent({
+              changedAt: changedAt.toISOString(),
+              personId,
+              distinctId,
+              previousDistinctId,
+              kind,
+              projectId,
+              version,
+            });
+          }),
+      );
+
+      /**
+       * Pre-registers the deterministic account token of a distinctId (see
+       * `utils/crypto/account-token.ts`) as a `person_external_identifier` row
+       * under {@link ACCOUNT_TOKEN_SERVICE_ID}, so an App Store / Google Play
+       * webhook that carries only the token resolves to the right person even
+       * when it arrives before any SDK transaction sync.
+       *
+       * Idempotent and repointing: the UNIQUE `(projectId, serviceId, identifier)`
+       * key serializes concurrent writers, and `ON CONFLICT ... DO UPDATE
+       * person_id` moves an existing binding onto the new canonical person —
+       * which is exactly what an identify-merge needs (the completion workflow
+       * does not repoint external identifiers).
+       */
+      const upsertAccountTokenBinding = Effect.fn("upsertAccountTokenBinding")(
+        (
+          db: DbTransaction,
+          {
+            distinctId,
+            personId,
+            projectId,
+          }: {
+            readonly distinctId: string;
+            readonly personId: string;
+            readonly projectId: string;
+          },
+        ): Effect.Effect<void, DbError> =>
+          Effect.gen(function* () {
+            const token = yield* deriveAccountToken(distinctId);
+
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.account_token", token);
+
+            yield* db.execute(sql`
+              INSERT INTO person_external_identifier
+                (id, project_id, person_id, service_id, is_default, identifier, created_at)
+              VALUES
+                (
+                  ${generateId("personDistinctId")},
+                  ${projectId},
+                  ${personId},
+                  ${ACCOUNT_TOKEN_SERVICE_ID},
+                  ${true},
+                  ${token},
+                  CURRENT_TIMESTAMP
+                )
+              ON CONFLICT (project_id, service_id, identifier) DO UPDATE SET
+                person_id = EXCLUDED.person_id,
+                updated_at = CURRENT_TIMESTAMP
+            `);
+          }),
+      );
+
+      const selectPrimaryDistinctId = Effect.fn("selectPrimaryDistinctId")(
+        (
+          db: DbTransaction,
+          {
+            personId,
+            projectId,
+          }: {
+            readonly personId: string;
+            readonly projectId: string;
+          },
+        ) =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+
+            const mappings = yield* db.query.personIdentities.findMany({
+              where: { personId, projectId },
+            });
+            if (mappings.length === 0) {
+              return undefined;
+            }
+
+            const sortedMappings = [...mappings].sort((left, right) => {
+              if (left.kind !== right.kind) {
+                return right.kind - left.kind;
+              }
+
+              const leftUpdatedAt = left.updatedAt?.getTime() ?? 0;
+              const rightUpdatedAt = right.updatedAt?.getTime() ?? 0;
+              if (leftUpdatedAt !== rightUpdatedAt) {
+                return rightUpdatedAt - leftUpdatedAt;
+              }
+
+              const leftCreatedAt = left.createdAt?.getTime() ?? 0;
+              const rightCreatedAt = right.createdAt?.getTime() ?? 0;
+              if (leftCreatedAt !== rightCreatedAt) {
+                return rightCreatedAt - leftCreatedAt;
+              }
+
+              return left.distinctId.localeCompare(right.distinctId);
+            });
+
+            return sortedMappings[0]?.distinctId;
+          }),
+      );
+
+      const toPersonEvent = Effect.fn("toPersonEvent")(
+        (
+          db: DbTransaction,
+          {
+            person,
+          }: {
+            readonly person: DbPerson;
+          },
+        ): Effect.Effect<PersonSnapshotEventV1, DbError> =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", person.projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", person.id);
+
+            const primaryDistinctId = yield* selectPrimaryDistinctId(db, {
+              personId: person.id,
+              projectId: person.projectId,
+            });
+            if (primaryDistinctId) {
+              yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", primaryDistinctId);
+            }
+
+            return {
+              changedAt:
+                person.updatedAt?.toISOString() ??
+                person.createdAt?.toISOString() ??
+                new Date().toISOString(),
+              personId: person.id,
+              ...(person.email ? { email: person.email } : {}),
+              isArchived: person.archivedAt !== null,
+              ...(person.mergedIntoPersonId
+                ? { mergedIntoPersonId: person.mergedIntoPersonId }
+                : {}),
+              ...(person.name ? { name: person.name } : {}),
+              ...(primaryDistinctId ? { primaryDistinctId } : {}),
+              projectId: person.projectId,
+              schemaVersion: 1,
+              traits: (person.traits ?? {}) as Record<string, unknown>,
+              version: toPersonVersion(person),
+            };
+          }),
+      );
+
+      const ensureCanonicalPersonForDistinctId = Effect.fn("ensureCanonicalPersonForDistinctId")(
+        (
+          db: DbTransaction,
+          {
+            context,
+            distinctId,
+            email,
+            name,
+            setAttributes,
+            setOnceAttributes,
+          }: {
+            readonly context: MutationContext;
+            readonly distinctId: string;
+            readonly email?: string;
+            readonly name?: string;
+            readonly setAttributes: Record<string, unknown>;
+            readonly setOnceAttributes: Record<string, unknown>;
+          },
+        ): Effect.Effect<CanonicalPersonResolution, DbError> =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", context.projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+
+            // Serialise concurrent resolution of the SAME (project, distinctId)
+            // identity slot. `FOR UPDATE` (see lockDistinctIdRows) cannot lock a
+            // row that does not exist yet, so two concurrent records for a brand
+            // new distinct id would both fall through to `createPersonRow` and
+            // race the `ON CONFLICT DO UPDATE` upsert, leaving two persons. A
+            // transaction-scoped advisory lock keyed on the slot blocks the
+            // second resolver here until the first commits; it then finds the
+            // mapping below and adopts that person. Re-entrant within a
+            // transaction and released at commit/rollback. The identify path
+            // pre-acquires these (sorted) via lockDistinctIdRows, so acquiring
+            // here is a no-op there and never reorders against that path.
+            yield* db.execute(
+              sql`SELECT pg_advisory_xact_lock(hashtext(${context.projectId} || ':' || ${distinctId}))`,
+            );
+
+            const mapped = yield* findDistinctIdMapping(db, {
+              distinctId,
+              projectId: context.projectId,
+            });
+            if (mapped) {
+              yield* Effect.annotateCurrentSpan("voidhash.identity.was_created", false);
+              yield* Effect.annotateCurrentSpan("voidhash.person.id", mapped.canonicalPerson.id);
+
+              return {
+                person: mapped.canonicalPerson,
+                rawMapping: mapped.mapping,
+                wasCreated: false,
+              };
+            }
+
+            const person = yield* createPersonRow(db, {
+              context,
+              email,
+              name,
+              setAttributes,
+              setOnceAttributes,
+            });
+            yield* Effect.annotateCurrentSpan("voidhash.identity.was_created", true);
+            yield* Effect.annotateCurrentSpan("voidhash.person.id", person.id);
+            yield* Effect.annotateCurrentSpan("voidhash.person.origin", context.origin);
+
+            const mappingEvent = yield* upsertPersonIdentity(db, {
+              changedAt: context.eventTimestamp,
+              personId: person.id,
+              distinctId,
+              identityId: generateId("personDistinctId"),
+              projectId: context.projectId,
+              version: 0,
+            });
+
+            return {
+              person,
+              mappingEvent,
+              wasCreated: true,
+            };
+          }),
+      );
+
+      const lockDistinctIdRows = Effect.fn("lockDistinctIdRows")(
+        (
+          db: DbTransaction,
+          {
+            distinctIds,
+            projectId,
+          }: {
+            readonly distinctIds: ReadonlyArray<string>;
+            readonly projectId: string;
+          },
+        ) =>
+          Effect.gen(function* () {
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+
+            const orderedDistinctIds = [...new Set(distinctIds)].sort((left, right) =>
+              left.localeCompare(right),
+            );
+
+            for (const distinctId of orderedDistinctIds) {
+              // Acquire the per-slot advisory lock FIRST, in the same sorted
+              // order as the loop, so a multi-distinct-id transaction (identify)
+              // can never deadlock against another acquiring the slots in the
+              // opposite order. This also serialises the create-new-person path
+              // that `FOR UPDATE` cannot (no row to lock yet); the matching
+              // acquisition in ensureCanonicalPersonForDistinctId is then a
+              // re-entrant no-op.
+              yield* db.execute(
+                sql`SELECT pg_advisory_xact_lock(hashtext(${projectId} || ':' || ${distinctId}))`,
+              );
+              yield* db.execute(sql`
+                SELECT distinct_id
+                FROM person_identity
+                WHERE project_id = ${projectId} AND distinct_id = ${distinctId}
+                FOR UPDATE
+              `);
+              yield* db.execute(sql`
+                SELECT distinct_id
+                FROM person_personless_identity
+                WHERE project_id = ${projectId} AND distinct_id = ${distinctId}
+                FOR UPDATE
+              `);
+            }
+          }),
+      );
+
+      const lockPersonRows = Effect.fn("lockPersonRows")(
+        (
+          db: DbTransaction,
+          {
+            personIds,
+          }: {
+            readonly personIds: ReadonlyArray<string>;
+          },
+        ) =>
+          Effect.gen(function* () {
+            const orderedPersonIds = [...new Set(personIds)].sort((left, right) =>
+              left.localeCompare(right),
+            );
+
+            for (const personId of orderedPersonIds) {
+              yield* db.execute(sql`
+                SELECT id
+                FROM person
+                WHERE id = ${personId}
+                FOR UPDATE
+              `);
+            }
+          }),
+      );
+
+      /**
+       * Lists every `(distinctId, id, version)` currently mapped to a person.
+       * Used by the merge to repoint the *whole* loser cluster onto the survivor
+       * so the analytics overrides stay canonical (and the squash converges in a
+       * single pass) rather than only the one distinct id named by the identify.
+       */
+      const listMappedDistinctIds = Effect.fn("listMappedDistinctIds")(
+        (
+          db: DbTransaction,
+          {
+            personId,
+            projectId,
+          }: {
+            readonly personId: string;
+            readonly projectId: string;
+          },
+        ): Effect.Effect<
+          ReadonlyArray<{
+            readonly id: string;
+            readonly distinctId: string;
+            readonly version: number;
+          }>,
+          DbError
+        > =>
+          Effect.gen(function* () {
+            const rows = yield* db.query.personIdentities.findMany({
+              where: { projectId, personId },
+            });
+            return rows.map((row) => ({
+              distinctId: row.distinctId,
+              id: row.id,
+              version: row.version,
+            }));
+          }),
+      );
+
+      /**
+       * Appends one immutable {@link identityAssertions} row recording that two
+       * distinct ids name the same person — the source of truth for the
+       * order-agnostic projection. The pair is stored canonically sorted so an
+       * unordered edge has a single representation, and the insert is idempotent
+       * on `(projectId, dedupKey)` so a retried identify logs exactly once.
+       */
+      const appendAssertion = Effect.fn("appendIdentityAssertion")(
+        (
+          db: DbTransaction,
+          {
+            distinctId,
+            previousDistinctId,
+            projectId,
+            eventTimestamp,
+            dedupKey,
+            source,
+          }: {
+            readonly distinctId: string;
+            readonly previousDistinctId: string;
+            readonly projectId: string;
+            readonly eventTimestamp: Date;
+            readonly dedupKey: string;
+            readonly source: PersonOriginValue;
+          },
+        ): Effect.Effect<void, DbError> =>
+          Effect.gen(function* () {
+            const [distinctIdA, distinctIdB] =
+              previousDistinctId <= distinctId
+                ? [previousDistinctId, distinctId]
+                : [distinctId, previousDistinctId];
+
+            yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+            yield* Effect.annotateCurrentSpan("voidhash.identity_assertion.dedup_key", dedupKey);
+
+            yield* db
+              .insert(identityAssertions)
+              .values({
+                dedupKey,
+                distinctIdA,
+                distinctIdB,
+                eventTs: eventTimestamp,
+                id: generateId("identityAssertion"),
+                projectId,
+                source,
+              })
+              .onConflictDoNothing({
+                target: [identityAssertions.projectId, identityAssertions.dedupKey],
+              });
+          }),
+      );
+
+      return {
+        appendAssertion,
+        archivePerson,
+        ensureCanonicalPersonForDistinctId,
+        ensurePersonlessIdentity,
+        findDistinctIdMapping,
+        findPersonlessIdentity,
+        listMappedDistinctIds,
+        lockDistinctIdRows,
+        lockPersonRows,
+        markPersonlessIdentityMerged,
+        toPersonEvent,
+        updatePersonProfile,
+        upsertAccountTokenBinding,
+        upsertPersonIdentity,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(IdentityMutationService)(IdentityMutationService.make);
+}
diff --git a/packages/core/src/services/personIdentity/IdentityProjectionPublisher.ts b/packages/core/src/services/personIdentity/IdentityProjectionPublisher.ts
new file mode 100644
index 000000000..ac501ec97
--- /dev/null
+++ b/packages/core/src/services/personIdentity/IdentityProjectionPublisher.ts
@@ -0,0 +1,157 @@
+import type { Db } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AnalyticsWriterService } from "../analyticsIngest/AnalyticsWriterService.ts";
+import { QueueProducerError } from "../infrastructure/QueueProducer.ts";
+import type { PersonIdentityEventV1, PersonSnapshotEventV1 } from "../../domain/person/Person.ts";
+
+/**
+ * Person-snapshot payload written into the analytics writer. Mirrors the shape
+ * the analytics processor emits.
+ */
+export const ProcessorPersonEventV1 = Schema.Struct({
+  changedAt: Schema.String,
+  personId: Schema.String,
+  email: Schema.optional(Schema.String),
+  isArchived: Schema.Boolean,
+  mergedIntoPersonId: Schema.optional(Schema.String),
+  name: Schema.optional(Schema.String),
+  primaryDistinctId: Schema.optional(Schema.String),
+  projectId: Schema.String,
+  schemaVersion: Schema.Literal(1),
+  traits: Schema.Record(Schema.String, Schema.Unknown),
+  version: Schema.Number,
+});
+
+export type ProcessorPersonEventV1 = typeof ProcessorPersonEventV1.Type;
+
+/** Identity-mapping payload written into the analytics writer. */
+export const ProcessorPersonIdentityEventV1 = Schema.Struct({
+  changedAt: Schema.String,
+  personId: Schema.String,
+  distinctId: Schema.String,
+  isDeleted: Schema.Boolean,
+  previousDistinctId: Schema.optional(Schema.String),
+  projectId: Schema.String,
+  schemaVersion: Schema.Literal(1),
+  version: Schema.Number,
+});
+
+export type ProcessorPersonIdentityEventV1 = typeof ProcessorPersonIdentityEventV1.Type;
+
+export interface IdentityProjectionInput {
+  readonly identity: { readonly distinctId: string };
+  readonly mappingEvents: ReadonlyArray<PersonIdentityEventV1>;
+  readonly personEvents: ReadonlyArray<PersonSnapshotEventV1>;
+}
+
+const toProcessorPersonEvent = (event: PersonSnapshotEventV1): ProcessorPersonEventV1 => ({
+  changedAt: event.changedAt,
+  personId: event.personId,
+  ...(event.email ? { email: event.email } : {}),
+  isArchived: event.isArchived,
+  ...(event.mergedIntoPersonId ? { mergedIntoPersonId: event.mergedIntoPersonId } : {}),
+  ...(event.name ? { name: event.name } : {}),
+  ...(event.primaryDistinctId ? { primaryDistinctId: event.primaryDistinctId } : {}),
+  projectId: event.projectId,
+  schemaVersion: event.schemaVersion,
+  traits: event.traits,
+  version: event.version,
+});
+
+const toProcessorPersonIdentityEvent = ({
+  identityDistinctId,
+  mappingEvent,
+}: {
+  readonly identityDistinctId: string;
+  readonly mappingEvent: PersonIdentityEventV1;
+}): ProcessorPersonIdentityEventV1 => {
+  const previousDistinctId =
+    mappingEvent.distinctId === identityDistinctId ? undefined : mappingEvent.distinctId;
+
+  return {
+    changedAt: mappingEvent.changedAt,
+    personId: mappingEvent.personId,
+    distinctId: previousDistinctId ? identityDistinctId : mappingEvent.distinctId,
+    isDeleted: mappingEvent.isDeleted,
+    ...(previousDistinctId ? { previousDistinctId } : {}),
+    projectId: mappingEvent.projectId,
+    schemaVersion: mappingEvent.schemaVersion,
+    version: mappingEvent.version,
+  };
+};
+
+/**
+ * Publishes identity projection events produced outside the capture flush
+ * batch. The analytics ingest path uses {@link noop} because its processor
+ * returns these events to `AnalyticsIngestFlushWorkflow`; the identify
+ * completion workflow uses {@link analyticsWriterLayer} for direct ClickHouse
+ * writes.
+ */
+export class IdentityProjectionPublisher extends Context.Service<
+  IdentityProjectionPublisher,
+  {
+    readonly publishIdentityResult: (
+      input: IdentityProjectionInput,
+    ) => Effect.Effect<void, QueueProducerError, Db>;
+  }
+>()("IdentityProjectionPublisher", {
+  make: Effect.gen(function* () {
+    return { publishIdentityResult: () => Effect.void };
+  }),
+}) {
+  static readonly layer = Layer.effect(IdentityProjectionPublisher)(
+    IdentityProjectionPublisher.make,
+  );
+
+  static readonly analyticsWriterLayer = Layer.effect(
+    IdentityProjectionPublisher,
+    Effect.gen(function* () {
+      const writer = yield* AnalyticsWriterService;
+
+      return {
+        publishIdentityResult: (input) => {
+          const personMessages = input.personEvents.map(toProcessorPersonEvent);
+          const identityMessages = input.mappingEvents.map((mappingEvent) =>
+            toProcessorPersonIdentityEvent({
+              identityDistinctId: input.identity.distinctId,
+              mappingEvent,
+            }),
+          );
+
+          return writer
+            .writeMessages([
+              ...personMessages.map((person) => ({
+                kind: "person" as const,
+                messageId: `${person.projectId}:${person.personId}:${person.version}`,
+                value: person,
+              })),
+              ...identityMessages.map((identity) => ({
+                kind: "person-distinct-id" as const,
+                messageId: `${identity.projectId}:${identity.distinctId}:${identity.version}`,
+                value: identity,
+              })),
+            ])
+            .pipe(
+              Effect.asVoid,
+              Effect.mapError(
+                (error) =>
+                  new QueueProducerError({
+                    cause: error.cause,
+                    queueName: "AnalyticsWriterService",
+                  }),
+              ),
+            );
+        },
+      };
+    }),
+  );
+
+  /** No-op variant used by tests and capture flush paths that return outputs directly. */
+  static readonly noop: Layer.Layer<IdentityProjectionPublisher> = Layer.succeed(
+    IdentityProjectionPublisher,
+    {
+      publishIdentityResult: () => Effect.void,
+    },
+  );
+}
diff --git a/packages/core/src/services/personIdentity/IdentityProjectionRebuildService.ts b/packages/core/src/services/personIdentity/IdentityProjectionRebuildService.ts
new file mode 100644
index 000000000..84dd98e88
--- /dev/null
+++ b/packages/core/src/services/personIdentity/IdentityProjectionRebuildService.ts
@@ -0,0 +1,175 @@
+import { Context, Effect, Layer } from "effect";
+
+import {
+  Db,
+  and,
+  eq,
+  identityAssertions,
+  personIdentities,
+  persons,
+  pushPersonDeviceTokens,
+  sql,
+} from "@voidhash/db";
+
+import {
+  type DistinctIdMapping,
+  type IdentityAssertion,
+  planProjectionRebuild,
+} from "../../domain/person/IdentityGraph.ts";
+import { PersonServiceError } from "../persons/PersonService.ts";
+
+/** Outcome of a {@link IdentityProjectionRebuildService.rebuildProject} run. */
+export interface IdentityProjectionRebuildResult {
+  readonly mappingsRepointed: number;
+  readonly personsMerged: number;
+}
+
+/**
+ * Recomputes the Postgres identity projection (`person_identity.person_id` +
+ * `person.merged_into_person_id`) for a project from the append-only
+ * `identity_assertion` log — the disaster-recovery / stitching-rule-change tool
+ * the event-sourced ("Option B") model exists to enable. The actual graph logic
+ * is the pure, order-agnostic {@link planProjectionRebuild}; this service only
+ * reads the inputs and writes the diff in one transaction.
+ *
+ * It is idempotent: re-running it only touches rows whose canonical person
+ * actually changed, so it converges. It is a batch admin operation (whole
+ * project), not a per-request path.
+ */
+export class IdentityProjectionRebuildService extends Context.Service<IdentityProjectionRebuildService>()(
+  "IdentityProjectionRebuildService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+
+      const rebuildProject = Effect.fn("rebuildIdentityProjection")(
+        function* (input: { readonly projectId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const mappingRows = yield* tx.query.personIdentities.findMany({
+                where: { projectId: input.projectId },
+              });
+              if (mappingRows.length === 0) {
+                return { mappingsRepointed: 0, personsMerged: 0 };
+              }
+
+              const assertionRows = yield* tx.query.identityAssertions.findMany({
+                where: { projectId: input.projectId },
+              });
+              const personIds = [...new Set(mappingRows.map((row) => row.personId))];
+              const personRows = yield* tx.query.persons.findMany({
+                where: { id: { in: personIds } },
+              });
+              const personById = new Map(personRows.map((person) => [person.id, person]));
+
+              const mappings: Array<DistinctIdMapping> = [];
+              for (const row of mappingRows) {
+                const person = personById.get(row.personId);
+                if (person) {
+                  mappings.push({
+                    distinctId: row.distinctId,
+                    person: {
+                      createdAt: person.createdAt,
+                      firstSeenAt: person.firstSeenAt,
+                      id: person.id,
+                    },
+                  });
+                }
+              }
+              const assertions: Array<IdentityAssertion> = assertionRows.map((row) => ({
+                distinctIdA: row.distinctIdA,
+                distinctIdB: row.distinctIdB,
+                eventTs: row.eventTs.getTime(),
+              }));
+
+              const plan = planProjectionRebuild({ assertions, mappings });
+
+              const currentPersonByDistinct = new Map(
+                mappingRows.map((row) => [row.distinctId, row.personId]),
+              );
+              let mappingsRepointed = 0;
+              for (const [distinctId, canonicalPersonId] of plan.canonicalPersonOf) {
+                if (currentPersonByDistinct.get(distinctId) !== canonicalPersonId) {
+                  yield* tx
+                    .update(personIdentities)
+                    .set({ personId: canonicalPersonId })
+                    .where(
+                      and(
+                        eq(personIdentities.projectId, input.projectId),
+                        eq(personIdentities.distinctId, distinctId),
+                      ),
+                    );
+                  mappingsRepointed += 1;
+                }
+              }
+
+              const now = new Date();
+              let personsMerged = 0;
+              for (const [personId, canonicalPersonId] of plan.mergedInto) {
+                const person = personById.get(personId);
+                if (person && person.mergedIntoPersonId !== canonicalPersonId) {
+                  yield* tx
+                    .update(persons)
+                    .set({
+                      archivedAt: person.archivedAt ?? now,
+                      mergedIntoPersonId: canonicalPersonId,
+                    })
+                    .where(eq(persons.id, personId));
+                  // Re-point push device-token links to the survivor in the same
+                  // rebuild transaction (belt) — mirrors the live merge re-point.
+                  // NOT EXISTS skips devices the survivor already owns (the
+                  // (person_id, push_device_token_id) unique index is global), else
+                  // a bare re-point would raise a unique violation and abort the
+                  // rebuild. Skipped loser links stay reachable via send-time
+                  // merged-loser expansion.
+                  yield* tx
+                    .update(pushPersonDeviceTokens)
+                    .set({ personId: canonicalPersonId, updatedAt: now })
+                    .where(
+                      and(
+                        eq(pushPersonDeviceTokens.projectId, input.projectId),
+                        eq(pushPersonDeviceTokens.personId, personId),
+                        sql`not exists (select 1 from push_person_device_token s where s.person_id = ${canonicalPersonId} and s.push_device_token_id = push_person_device_token.push_device_token_id)`,
+                      ),
+                    );
+                  personsMerged += 1;
+                }
+              }
+
+              yield* Effect.annotateCurrentSpan(
+                "voidhash.identity_rebuild.mappings_repointed",
+                mappingsRepointed,
+              );
+              yield* Effect.annotateCurrentSpan(
+                "voidhash.identity_rebuild.persons_merged",
+                personsMerged,
+              );
+
+              return {
+                mappingsRepointed,
+                personsMerged,
+              } satisfies IdentityProjectionRebuildResult;
+            }),
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return { rebuildProject } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(IdentityProjectionRebuildService)(
+    IdentityProjectionRebuildService.make,
+  );
+}
diff --git a/packages/core/src/services/personIdentity/PersonIdentityService.ts b/packages/core/src/services/personIdentity/PersonIdentityService.ts
new file mode 100644
index 000000000..b9f39bc7c
--- /dev/null
+++ b/packages/core/src/services/personIdentity/PersonIdentityService.ts
@@ -0,0 +1,584 @@
+import { Context, Effect, Layer } from "effect";
+
+import {
+  and,
+  Db,
+  eq,
+  type Person as DbPerson,
+  PersonIdentityKind,
+  type PersonOriginValue,
+  pushPersonDeviceTokens,
+  sql,
+} from "@voidhash/db";
+import { comparePersonForMerge } from "../../domain/person/IdentityGraph.ts";
+import {
+  type PersonIdentityEventV1,
+  type PersonSnapshotEventV1,
+  isAnonymousDistinctId,
+  nextMappingVersion,
+} from "../../domain/person/Person.ts";
+import { firstDefinedString } from "../../utils/first-defined-string.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { PersonServiceError } from "../persons/PersonService.ts";
+import { IdentityProjectionPublisher } from "./IdentityProjectionPublisher.ts";
+import { DEFAULT_ORIGIN, IdentityMutationService } from "./IdentityMutationService.ts";
+
+export type { PersonIdentityEventV1, PersonSnapshotEventV1 } from "../../domain/person/Person.ts";
+
+export interface ResolvedAnalyticsIdentity {
+  readonly personId?: string;
+  readonly distinctId: string;
+  readonly mode: "full" | "personless";
+}
+
+export interface ResolveDistinctIdInput {
+  readonly distinctId: string;
+  readonly email?: string;
+  /**
+   * Stable per-event id — the deterministic same-timestamp tie-break for
+   * per-trait LWW. The analytics-ingest path supplies the capture id; other
+   * callers (payment providers, SDK) may omit it and tie-break by timestamp.
+   */
+  readonly eventId?: string;
+  readonly eventTimestamp: Date;
+  readonly name?: string;
+  readonly origin?: PersonOriginValue;
+  readonly projectId: string;
+  readonly setAttributes: Record<string, unknown>;
+  readonly setOnceAttributes: Record<string, unknown>;
+  readonly shouldCreatePerson: boolean;
+}
+
+export interface IdentifyDistinctIdInput {
+  readonly previousDistinctId: string;
+  readonly distinctId: string;
+  readonly email?: string;
+  /**
+   * Stable per-event id — the deterministic same-timestamp tie-break for
+   * per-trait LWW. The analytics-ingest path supplies the capture id; other
+   * callers (payment providers, SDK) may omit it and tie-break by timestamp.
+   */
+  readonly eventId?: string;
+  readonly eventTimestamp: Date;
+  readonly name?: string;
+  readonly origin?: PersonOriginValue;
+  readonly projectId: string;
+  readonly setAttributes: Record<string, unknown>;
+  readonly setOnceAttributes: Record<string, unknown>;
+}
+
+export interface PersonIdentityResult {
+  readonly personEvents: ReadonlyArray<PersonSnapshotEventV1>;
+  readonly identity: ResolvedAnalyticsIdentity;
+  readonly mappingEvents: ReadonlyArray<PersonIdentityEventV1>;
+  readonly warnings: ReadonlyArray<string>;
+}
+
+/**
+ * Orchestrates the person-identity-resolution aggregate.
+ *
+ * - `resolveDistinctId` — look up (or lazily create) a person record for a
+ *   given distinct id; the result drives every SDK call that needs to attach a
+ *   person to an analytics event.
+ * - `identifyDistinctId` — promote an anonymous identity to an identified one.
+ *   The synchronous transaction reconciles only the target person so the
+ *   caller sees a consistent view; the source-side merge work is durable and
+ *   handed off to {@link IdentifyDistinctIdCompletionWorkflow}.
+ */
+export class PersonIdentityService extends Context.Service<PersonIdentityService>()(
+  "PersonIdentityService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const identityMutations = yield* IdentityMutationService;
+      const publisher = yield* IdentityProjectionPublisher;
+
+      const resolveDistinctId = Effect.fn("resolveDistinctId")(
+        function* (input: ResolveDistinctIdInput) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.origin",
+            input.origin ?? DEFAULT_ORIGIN,
+          );
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const context = {
+                eventId: input.eventId ?? "",
+                eventTimestamp: input.eventTimestamp,
+                origin: input.origin ?? DEFAULT_ORIGIN,
+                projectId: input.projectId,
+              };
+
+              if (!input.shouldCreatePerson) {
+                const existingMapping = yield* identityMutations.findDistinctIdMapping(tx, {
+                  distinctId: input.distinctId,
+                  projectId: input.projectId,
+                });
+                if (existingMapping) {
+                  yield* Effect.annotateCurrentSpan("voidhash.identity.mode", "full");
+                  yield* Effect.annotateCurrentSpan(
+                    "voidhash.person.id",
+                    existingMapping.canonicalPerson.id,
+                  );
+
+                  return {
+                    personEvents: [],
+                    identity: {
+                      personId: existingMapping.canonicalPerson.id,
+                      distinctId: input.distinctId,
+                      mode: "full" as const,
+                    },
+                    mappingEvents: [],
+                    warnings: [],
+                  } satisfies PersonIdentityResult;
+                }
+
+                yield* identityMutations.ensurePersonlessIdentity(tx, {
+                  distinctId: input.distinctId,
+                  projectId: input.projectId,
+                });
+
+                yield* Effect.annotateCurrentSpan("voidhash.identity.mode", "personless");
+
+                return {
+                  personEvents: [],
+                  identity: {
+                    distinctId: input.distinctId,
+                    mode: "personless" as const,
+                  },
+                  mappingEvents: [],
+                  warnings: [],
+                } satisfies PersonIdentityResult;
+              }
+
+              const resolved = yield* identityMutations.ensureCanonicalPersonForDistinctId(tx, {
+                context,
+                distinctId: input.distinctId,
+                email: input.email,
+                name: input.name,
+                setAttributes: input.setAttributes,
+                setOnceAttributes: input.setOnceAttributes,
+              });
+              let person = resolved.person;
+              if (resolved.wasCreated) {
+                // Only on creation: existing persons already have their binding
+                // (or get it via identify), keeping the hot lookup path at zero
+                // extra writes.
+                yield* identityMutations.upsertAccountTokenBinding(tx, {
+                  distinctId: input.distinctId,
+                  personId: person.id,
+                  projectId: input.projectId,
+                });
+              } else {
+                person = yield* identityMutations.updatePersonProfile(tx, {
+                  person: resolved.person,
+                  email: input.email,
+                  eventId: input.eventId ?? "",
+                  eventTimestamp: input.eventTimestamp,
+                  name: input.name,
+                  setAttributes: input.setAttributes,
+                  setOnceAttributes: input.setOnceAttributes,
+                });
+              }
+
+              yield* Effect.annotateCurrentSpan("voidhash.identity.mode", "full");
+              yield* Effect.annotateCurrentSpan(
+                "voidhash.identity.was_created",
+                resolved.wasCreated,
+              );
+              yield* Effect.annotateCurrentSpan("voidhash.person.id", person.id);
+
+              return {
+                personEvents: [yield* identityMutations.toPersonEvent(tx, { person })],
+                identity: {
+                  personId: person.id,
+                  distinctId: input.distinctId,
+                  mode: "full" as const,
+                },
+                mappingEvents: resolved.mappingEvent ? [resolved.mappingEvent] : [],
+                warnings: [],
+              } satisfies PersonIdentityResult;
+            }),
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const identifyDistinctId = Effect.fn("identifyDistinctId")(
+        function* (input: IdentifyDistinctIdInput) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.previous_distinct_id",
+            input.previousDistinctId,
+          );
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.origin",
+            input.origin ?? DEFAULT_ORIGIN,
+          );
+
+          const syncResult = yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const warnings: string[] = [];
+              const personEvents: PersonSnapshotEventV1[] = [];
+              const mappingEvents: PersonIdentityEventV1[] = [];
+              const origin = input.origin ?? DEFAULT_ORIGIN;
+              const context = {
+                eventId: input.eventId ?? "",
+                eventTimestamp: input.eventTimestamp,
+                origin,
+                projectId: input.projectId,
+              };
+
+              if (isAnonymousDistinctId(input.distinctId)) {
+                return yield* Effect.fail(
+                  new PersonServiceError({
+                    cause: "identify target distinct id cannot use the anonymous prefix",
+                  }),
+                );
+              }
+
+              yield* identityMutations.lockDistinctIdRows(tx, {
+                distinctIds: [input.previousDistinctId, input.distinctId],
+                projectId: input.projectId,
+              });
+
+              const targetResolved = yield* identityMutations.ensureCanonicalPersonForDistinctId(
+                tx,
+                {
+                  context,
+                  distinctId: input.distinctId,
+                  email: undefined,
+                  name: undefined,
+                  setAttributes: {},
+                  setOnceAttributes: {},
+                },
+              );
+              if (targetResolved.mappingEvent) {
+                mappingEvents.push(targetResolved.mappingEvent);
+              }
+
+              yield* Effect.annotateCurrentSpan(
+                "voidhash.person.target_id",
+                targetResolved.person.id,
+              );
+
+              const sourceMapping = yield* identityMutations.findDistinctIdMapping(tx, {
+                distinctId: input.previousDistinctId,
+                projectId: input.projectId,
+              });
+              if (sourceMapping) {
+                yield* Effect.annotateCurrentSpan(
+                  "voidhash.person.source_id",
+                  sourceMapping.canonicalPerson.id,
+                );
+              }
+              const sourcePersonless = yield* identityMutations.findPersonlessIdentity(tx, {
+                distinctId: input.previousDistinctId,
+                projectId: input.projectId,
+              });
+
+              yield* identityMutations.lockPersonRows(tx, {
+                personIds: [
+                  targetResolved.person.id,
+                  ...(sourceMapping ? [sourceMapping.rawPerson.id] : []),
+                ],
+              });
+
+              if (input.previousDistinctId === input.distinctId) {
+                warnings.push("self-identify is a no-op");
+              }
+
+              const sourceIsConflictingIdentified =
+                sourceMapping &&
+                sourceMapping.canonicalPerson.id !== targetResolved.person.id &&
+                sourceMapping.mapping.kind === PersonIdentityKind.Identified;
+
+              yield* Effect.annotateCurrentSpan(
+                "voidhash.identity.source_conflict",
+                Boolean(sourceIsConflictingIdentified),
+              );
+
+              if (sourceIsConflictingIdentified) {
+                warnings.push("identify source already belongs to a different identified person");
+              }
+
+              // A real merge happens only when the source resolves to a
+              // *different* existing person and is not a conflicting identified
+              // person. The OLDER person wins (comparePersonForMerge) — an
+              // order-independent decision, so a reversed identify chain
+              // converges on the same surviving person. The full merge runs
+              // synchronously in this transaction (no async completion workflow).
+              const sourcePerson = sourceMapping?.canonicalPerson;
+              const isRealMerge =
+                !sourceIsConflictingIdentified &&
+                input.previousDistinctId !== input.distinctId &&
+                sourcePerson !== undefined &&
+                sourcePerson.id !== targetResolved.person.id;
+
+              let canonicalPerson: DbPerson;
+              // True for any genuine identity stitch (person merge OR a
+              // personless/absent source bound to the target) — i.e. anything
+              // that asserts the two distinct ids are the same person and so
+              // must be appended to the assertion log.
+              let didStitch = false;
+
+              if (isRealMerge && sourcePerson) {
+                const sourceWins = comparePersonForMerge(sourcePerson, targetResolved.person) <= 0;
+                const winner = sourceWins ? sourcePerson : targetResolved.person;
+                const loser = sourceWins ? targetResolved.person : sourcePerson;
+                const loserDistinctId = sourceWins ? input.distinctId : input.previousDistinctId;
+                const loserMapping = sourceWins
+                  ? targetResolved.rawMapping
+                  : sourceMapping?.mapping;
+
+                yield* Effect.annotateCurrentSpan("voidhash.person.merge_winner_id", winner.id);
+                yield* Effect.annotateCurrentSpan("voidhash.person.merge_loser_id", loser.id);
+
+                const updatedWinner = yield* identityMutations.updatePersonProfile(tx, {
+                  person: winner,
+                  email: firstDefinedString(winner.email, loser.email, input.email),
+                  eventId: input.eventId ?? "",
+                  eventTimestamp: input.eventTimestamp,
+                  // Fold the loser's traits into the survivor via per-key LWW.
+                  mergeTraitsFrom: loser,
+                  name: firstDefinedString(winner.name, loser.name, input.name),
+                  setAttributes: input.setAttributes,
+                  setOnceAttributes: input.setOnceAttributes,
+                });
+                const archivedLoser = yield* identityMutations.archivePerson(tx, {
+                  eventTimestamp: input.eventTimestamp,
+                  mergedIntoPersonId: updatedWinner.id,
+                  person: loser,
+                });
+
+                // Repoint the ENTIRE loser cluster onto the survivor as explicit
+                // overrides, so every distinct id that resolved to the loser
+                // re-attributes to the survivor — not just the one named by this
+                // identify. Keeping the overrides canonical this way is what makes
+                // the analytics squash transitively convergent in a single pass
+                // (no person-merge chain-following needed downstream).
+                const loserMappings = yield* identityMutations.listMappedDistinctIds(tx, {
+                  personId: loser.id,
+                  projectId: input.projectId,
+                });
+                const repointed = new Map<string, { id?: string; version?: number }>();
+                for (const mapping of loserMappings) {
+                  repointed.set(mapping.distinctId, { id: mapping.id, version: mapping.version });
+                }
+                // The involved loser distinct id was usually just created by
+                // ensureCanonical (so it is already listed) — include it defensively.
+                if (!repointed.has(loserDistinctId)) {
+                  repointed.set(loserDistinctId, {
+                    id: loserMapping?.id,
+                    version: loserMapping?.version,
+                  });
+                }
+                for (const [distinctId, existing] of repointed) {
+                  mappingEvents.push(
+                    yield* identityMutations.upsertPersonIdentity(tx, {
+                      changedAt: input.eventTimestamp,
+                      distinctId,
+                      identityId: existing.id ?? generateId("personDistinctId"),
+                      personId: updatedWinner.id,
+                      previousDistinctId: distinctId,
+                      projectId: input.projectId,
+                      version: nextMappingVersion({
+                        existingVersion: existing.version,
+                        hadHistoricalEvents: true,
+                      }),
+                    }),
+                  );
+                }
+
+                // Re-point the loser's push device-token links to the survivor in
+                // the SAME merge transaction, exactly like personIdentities — so a
+                // merged-away person's devices stay reachable. The NOT EXISTS guard
+                // skips links whose device the survivor ALREADY owns: the
+                // (person_id, push_device_token_id) unique index is global (ignores
+                // deleted_at), so a bare re-point would raise a unique violation and
+                // abort the whole merge. A skipped colliding loser link stays under
+                // the loser and remains reachable via the send-time merged-loser
+                // expansion (belt-and-suspenders). See
+                // PersonNotificationTokenService.repointLinksToSurvivor.
+                yield* tx
+                  .update(pushPersonDeviceTokens)
+                  .set({ personId: updatedWinner.id, updatedAt: new Date() })
+                  .where(
+                    and(
+                      eq(pushPersonDeviceTokens.projectId, input.projectId),
+                      eq(pushPersonDeviceTokens.personId, loser.id),
+                      sql`not exists (select 1 from push_person_device_token s where s.person_id = ${updatedWinner.id} and s.push_device_token_id = push_person_device_token.push_device_token_id)`,
+                    ),
+                  );
+
+                if (sourcePersonless && !sourcePersonless.isMerged) {
+                  yield* identityMutations.markPersonlessIdentityMerged(tx, {
+                    distinctId: input.previousDistinctId,
+                    projectId: input.projectId,
+                  });
+                }
+
+                personEvents.push(
+                  yield* identityMutations.toPersonEvent(tx, { person: updatedWinner }),
+                );
+                personEvents.push(
+                  yield* identityMutations.toPersonEvent(tx, { person: archivedLoser }),
+                );
+
+                canonicalPerson = updatedWinner;
+                didStitch = true;
+              } else {
+                // No real merge (self / conflicting / same person / personless
+                // source). Apply this event's writes to the target; for a
+                // personless-or-absent source being stitched, point its distinct
+                // id at the target.
+                const updatedTarget = yield* identityMutations.updatePersonProfile(tx, {
+                  person: targetResolved.person,
+                  email: firstDefinedString(targetResolved.person.email, input.email),
+                  eventId: input.eventId ?? "",
+                  eventTimestamp: input.eventTimestamp,
+                  name: firstDefinedString(targetResolved.person.name, input.name),
+                  setAttributes: input.setAttributes,
+                  setOnceAttributes: input.setOnceAttributes,
+                });
+                personEvents.push(
+                  yield* identityMutations.toPersonEvent(tx, { person: updatedTarget }),
+                );
+
+                if (
+                  !sourceIsConflictingIdentified &&
+                  input.previousDistinctId !== input.distinctId &&
+                  sourcePerson === undefined
+                ) {
+                  mappingEvents.push(
+                    yield* identityMutations.upsertPersonIdentity(tx, {
+                      changedAt: input.eventTimestamp,
+                      distinctId: input.previousDistinctId,
+                      identityId: generateId("personDistinctId"),
+                      personId: updatedTarget.id,
+                      previousDistinctId: input.previousDistinctId,
+                      projectId: input.projectId,
+                      version: nextMappingVersion({
+                        existingVersion: undefined,
+                        hadHistoricalEvents: Boolean(
+                          sourcePersonless && !sourcePersonless.isMerged,
+                        ),
+                      }),
+                    }),
+                  );
+                  if (sourcePersonless && !sourcePersonless.isMerged) {
+                    yield* identityMutations.markPersonlessIdentityMerged(tx, {
+                      distinctId: input.previousDistinctId,
+                      projectId: input.projectId,
+                    });
+                  }
+                  didStitch = true;
+                }
+
+                canonicalPerson = updatedTarget;
+              }
+
+              // Account-token bindings: both distinct ids bind to the surviving
+              // canonical person so provider webhooks (which carry the derived
+              // token) resolve to it. Skipped for a conflicting identified source
+              // (no merge; repointing would steal the other person's token).
+              yield* identityMutations.upsertAccountTokenBinding(tx, {
+                distinctId: input.distinctId,
+                personId: canonicalPerson.id,
+                projectId: input.projectId,
+              });
+              if (!sourceIsConflictingIdentified && input.previousDistinctId !== input.distinctId) {
+                yield* identityMutations.upsertAccountTokenBinding(tx, {
+                  distinctId: input.previousDistinctId,
+                  personId: canonicalPerson.id,
+                  projectId: input.projectId,
+                });
+              }
+
+              yield* Effect.annotateCurrentSpan("voidhash.person.id", canonicalPerson.id);
+              yield* Effect.annotateCurrentSpan("voidhash.identity.mode", "full");
+
+              if (didStitch) {
+                // Append the immutable identity assertion (the Option B log) for
+                // any genuine stitch. Idempotent on (project, dedupKey); the
+                // ingest path's capture id makes a retried identify log once.
+                yield* identityMutations.appendAssertion(tx, {
+                  dedupKey:
+                    input.eventId && input.eventId.length > 0
+                      ? input.eventId
+                      : generateId("identityAssertion"),
+                  distinctId: input.distinctId,
+                  eventTimestamp: input.eventTimestamp,
+                  previousDistinctId: input.previousDistinctId,
+                  projectId: input.projectId,
+                  source: origin,
+                });
+              }
+
+              return {
+                personEvents,
+                identity: {
+                  personId: canonicalPerson.id,
+                  distinctId: input.distinctId,
+                  mode: "full" as const,
+                },
+                mappingEvents,
+                warnings,
+              } satisfies PersonIdentityResult;
+            }),
+          );
+
+          yield* publisher.publishIdentityResult(syncResult).pipe(
+            Effect.catch((error) =>
+              Effect.logError(
+                "Failed to publish synchronous identity projection events; database is updated but downstream consumers will not receive these changes",
+                {
+                  cause: error,
+                  distinctId: input.distinctId,
+                  personId: syncResult.identity.personId,
+                  projectId: input.projectId,
+                },
+              ),
+            ),
+          );
+
+          return syncResult;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new PersonServiceError({
+                    cause: `Failed to identify distinct id: ${String(error.cause)}`,
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new PersonServiceError({
+                    cause: `Failed to identify distinct id: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      return { identifyDistinctId, resolveDistinctId } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PersonIdentityService)(PersonIdentityService.make).pipe(
+    Layer.provide(IdentityMutationService.layer),
+  );
+}
diff --git a/packages/core/src/services/personIdentity/index.ts b/packages/core/src/services/personIdentity/index.ts
new file mode 100644
index 000000000..efa79c264
--- /dev/null
+++ b/packages/core/src/services/personIdentity/index.ts
@@ -0,0 +1,3 @@
+export * from "./IdentityMutationService.ts";
+export * from "./PersonIdentityService.ts";
+export * from "./IdentityProjectionPublisher.ts";
diff --git a/packages/core/src/services/persons/PersonService.ts b/packages/core/src/services/persons/PersonService.ts
new file mode 100644
index 000000000..02d69f764
--- /dev/null
+++ b/packages/core/src/services/persons/PersonService.ts
@@ -0,0 +1,372 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { type AnyAuthSession, AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  type Person as DomainPerson,
+  Person,
+  PersonIdentity,
+  type PersonIdentityKindValue,
+  PersonNotFoundError,
+  type PersonProfile,
+} from "../../domain/person/Person.ts";
+import {
+  type Person as DbPerson,
+  type PersonIdentity as DbPersonIdentity,
+  Db,
+  type PersonOriginValue,
+  eq,
+  persons,
+} from "@voidhash/db";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { PersonIdentityService } from "../personIdentity/PersonIdentityService.ts";
+
+/**
+ * Catch-all service error. Wraps `DbError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error tag.
+ */
+export class PersonServiceError extends Schema.TaggedErrorClass<PersonServiceError>(
+  "PersonServiceError",
+)("PersonServiceError", { cause: Schema.String }) {}
+
+/**
+ * Builds the {@link DomainPerson} aggregate from raw DB rows. Kept private to
+ * the service per the "Drizzle-first with Schema at boundaries" convention —
+ * the only Schema.Class with mapping logic is `Person`, and its mapping lives
+ * with its single consumer.
+ */
+const buildPerson = (row: DbPerson, identities: ReadonlyArray<DbPersonIdentity>): DomainPerson =>
+  new Person({
+    id: row.id,
+    projectId: row.projectId,
+    email: row.email ?? null,
+    name: row.name ?? null,
+    archivedAt: row.archivedAt ?? null,
+    createdAt: row.createdAt ?? null,
+    mergedIntoPersonId: row.mergedIntoPersonId ?? null,
+    identities: identities.map(
+      (identity) =>
+        new PersonIdentity({
+          id: identity.id,
+          distinctId: identity.distinctId,
+          personId: identity.personId,
+          projectId: identity.projectId,
+          kind: identity.kind as PersonIdentityKindValue,
+          version: identity.version,
+          createdAt: identity.createdAt ?? null,
+          updatedAt: identity.updatedAt ?? null,
+        }),
+    ),
+  });
+
+/**
+ * `PersonService` exposes the persons aggregate for the dashboard / admin
+ * surface. Mutating identity goes through {@link PersonIdentityService} —
+ * `createPerson` is a thin wrapper that calls `resolveDistinctId` with
+ * `shouldCreatePerson: true` and reloads the canonical profile.
+ */
+export class PersonService extends Context.Service<PersonService>()("PersonService", {
+  make: Effect.gen(function* () {
+    const personIdentityService = yield* PersonIdentityService;
+    const db = yield* Db;
+
+    const findCanonicalPersonById = (personId: string) =>
+      Effect.gen(function* () {
+        let current = yield* db.query.persons.findFirst({
+          where: { id: personId },
+        });
+        while (current?.mergedIntoPersonId) {
+          const mergedInto = yield* db.query.persons.findFirst({
+            where: { id: current.mergedIntoPersonId },
+          });
+          if (!mergedInto) {
+            return current;
+          }
+          current = mergedInto;
+        }
+        return current;
+      });
+
+    /**
+     * Resolves a raw person row to its public {@link PersonProfile}. Returns
+     * `undefined` when the person has no identities to surface.
+     */
+    const loadProfileRaw = Effect.fn("loadProfileRaw")(function* (personId: string) {
+      yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+      const dbPerson = yield* findCanonicalPersonById(personId);
+      if (!dbPerson) {
+        return undefined;
+      }
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", dbPerson.projectId);
+      if (dbPerson.mergedIntoPersonId) {
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.person.merged_into_id",
+          dbPerson.mergedIntoPersonId,
+        );
+      }
+      const identities = yield* db.query.personIdentities.findMany({
+        where: { personId: dbPerson.id, projectId: dbPerson.projectId },
+      });
+      yield* Effect.annotateCurrentSpan("voidhash.person.identity_count", identities.length);
+      return buildPerson(dbPerson, identities).toProfile();
+    });
+
+    const getPersonById = Effect.fn("getPersonById")(
+      function* (personId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+        const session = yield* AuthSession;
+        yield* annotateSessionIdentity(session);
+        const dbPerson = yield* findCanonicalPersonById(personId);
+        if (!dbPerson) {
+          return yield* Effect.fail(new PersonNotFoundError({ id: personId }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", dbPerson.projectId);
+        if (dbPerson.mergedIntoPersonId) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.merged_into_id",
+            dbPerson.mergedIntoPersonId,
+          );
+        }
+
+        yield* checkProjectPermission(
+          dbPerson.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access person ${personId} for project ${dbPerson.projectId}`,
+        );
+
+        const identities = yield* db.query.personIdentities.findMany({
+          where: { personId: dbPerson.id, projectId: dbPerson.projectId },
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.person.identity_count", identities.length);
+        const profile = buildPerson(dbPerson, identities).toProfile();
+        if (!profile) {
+          return yield* Effect.fail(new PersonNotFoundError({ id: personId }));
+        }
+        return profile;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getPersonByDistinctId = Effect.fn("getPersonByDistinctId")(
+      function* (distinctId: string, projectId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        const session = yield* AuthSession;
+        yield* annotateSessionIdentity(session);
+        const mapping = yield* db.query.personIdentities.findFirst({
+          where: { distinctId, projectId },
+        });
+        if (!mapping) {
+          return yield* Effect.fail(new PersonNotFoundError({ id: distinctId }));
+        }
+
+        const dbPerson = yield* findCanonicalPersonById(mapping.personId);
+        if (!dbPerson) {
+          return yield* Effect.fail(new PersonNotFoundError({ id: distinctId }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", dbPerson.id);
+        if (dbPerson.mergedIntoPersonId) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.merged_into_id",
+            dbPerson.mergedIntoPersonId,
+          );
+        }
+
+        yield* checkProjectPermission(
+          dbPerson.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access person ${distinctId} for project ${dbPerson.projectId}`,
+        );
+
+        const identities = yield* db.query.personIdentities.findMany({
+          where: { personId: dbPerson.id, projectId: dbPerson.projectId },
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.person.identity_count", identities.length);
+        const profile = buildPerson(dbPerson, identities).toProfile();
+        if (!profile) {
+          return yield* Effect.fail(new PersonNotFoundError({ id: distinctId }));
+        }
+        return profile;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getPersons = Effect.fn("getPersons")(
+      function* (input: { readonly projectId: string }) {
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        const session = yield* AuthSession;
+        yield* annotateSessionIdentity(session);
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access persons for project ${input.projectId}`,
+        );
+
+        const personRows = yield* db.query.persons.findMany({
+          where: {
+            projectId: input.projectId,
+            archivedAt: { isNull: true },
+            deletedAt: { isNull: true },
+            mergedIntoPersonId: { isNull: true },
+          },
+          orderBy: { createdAt: "desc" },
+        });
+        const profiles = yield* Effect.all(personRows.map((person) => loadProfileRaw(person.id)));
+        const activeProfiles = profiles.filter(
+          (profile): profile is PersonProfile => typeof profile !== "undefined",
+        );
+        const result = Array.from(
+          activeProfiles
+            .reduce((deduped, profile) => {
+              deduped.set(profile.personId, profile);
+              return deduped;
+            }, new Map<string, PersonProfile>())
+            .values(),
+        ).sort((left, right) => getCreatedAtTime(right) - getCreatedAtTime(left));
+        yield* Effect.annotateCurrentSpan("voidhash.person.result_count", result.length);
+        return result;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const createPerson = Effect.fn("createPerson")(
+      function* (input: {
+        readonly projectId: string;
+        readonly distinctId: string;
+        readonly name: string | null;
+        readonly email: string | null;
+        readonly origin: PersonOriginValue;
+      }) {
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.origin", input.origin);
+        const result = yield* personIdentityService.resolveDistinctId({
+          distinctId: input.distinctId,
+          email: input.email ?? undefined,
+          eventTimestamp: new Date(),
+          name: input.name ?? undefined,
+          origin: input.origin,
+          projectId: input.projectId,
+          setAttributes: {},
+          setOnceAttributes: {},
+          shouldCreatePerson: true,
+        });
+
+        if (!result.identity.personId) {
+          return yield* Effect.die(
+            new Error("resolveDistinctId created a person without a personId"),
+          );
+        }
+
+        const dbPerson = yield* findCanonicalPersonById(result.identity.personId);
+        if (!dbPerson) {
+          return yield* Effect.die(new Error("Created person could not be loaded by id"));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", dbPerson.id);
+        if (dbPerson.mergedIntoPersonId) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.merged_into_id",
+            dbPerson.mergedIntoPersonId,
+          );
+        }
+
+        const identities = yield* db.query.personIdentities.findMany({
+          where: { personId: dbPerson.id, projectId: dbPerson.projectId },
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.person.identity_count", identities.length);
+        const profile = buildPerson(dbPerson, identities).toProfile();
+        if (!profile) {
+          return yield* Effect.die(new Error("Created person could not be resolved to a profile"));
+        }
+
+        yield* Effect.log(
+          `Created person ${profile.personId} for distinct id ${profile.distinctId}`,
+        );
+        return profile;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            PersonServiceError: (error) =>
+              Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const mergePersons = Effect.fn("mergePersons")(
+      function* (fromPersonId: string, toPersonId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.source_id", fromPersonId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.target_id", toPersonId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.merged_into_id", toPersonId);
+        yield* db
+          .update(persons)
+          .set({
+            archivedAt: new Date(),
+            mergedIntoPersonId: toPersonId,
+          })
+          .where(eq(persons.id, fromPersonId));
+
+        return { id: fromPersonId };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PersonServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      createPerson,
+      getPersonByDistinctId,
+      getPersonById,
+      getPersons,
+      mergePersons,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(PersonService)(PersonService.make);
+}
+
+const getCreatedAtTime = (profile: PersonProfile) => profile.createdAt?.getTime() ?? 0;
+
+/**
+ * Stamps the current span with the request-wide identity dimension derived from
+ * the {@link AuthSession} (auth method, acting user id, active organization id).
+ * Nullable fields are guarded so no `"null"` strings are emitted; no PII (email
+ * / name) or cookie material is ever attached.
+ */
+const annotateSessionIdentity = (session: AnyAuthSession | null | undefined) =>
+  Effect.gen(function* () {
+    if (!session) {
+      return;
+    }
+    yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+    if (session.user?.id) {
+      yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+    }
+    const organizationId = session.organizations[0]?.id;
+    if (organizationId) {
+      yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+    }
+  });
diff --git a/packages/core/src/services/persons/index.ts b/packages/core/src/services/persons/index.ts
new file mode 100644
index 000000000..6df1639f0
--- /dev/null
+++ b/packages/core/src/services/persons/index.ts
@@ -0,0 +1 @@
+export * from "./PersonService.ts";
diff --git a/packages/core/src/services/productPerks/ProductPerkService.ts b/packages/core/src/services/productPerks/ProductPerkService.ts
new file mode 100644
index 000000000..1976881f7
--- /dev/null
+++ b/packages/core/src/services/productPerks/ProductPerkService.ts
@@ -0,0 +1,241 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  type Product as DbProduct,
+  type ProductPerk as DbProductPerk,
+  eq,
+  productPerks,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { SchemaCacheInvalidationService } from "../schema/SchemaCacheInvalidationService.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error
+ * tag.
+ */
+export class ProductPerkServiceError extends Schema.TaggedErrorClass<ProductPerkServiceError>(
+  "ProductPerkServiceError",
+)("ProductPerkServiceError", { cause: Schema.String }) {}
+
+/**
+ * Validation error raised when an input refers to a missing product, perk,
+ * or product-perk row. Distinct from `ActionForbiddenError`: the row simply
+ * doesn't exist.
+ */
+export class ProductPerkValidationError extends Schema.TaggedErrorClass<ProductPerkValidationError>(
+  "ProductPerkValidationError",
+)("ProductPerkValidationError", { message: Schema.String }) {}
+
+type DbProductPerkWithProduct = DbProductPerk & { readonly product: DbProduct };
+
+/**
+ * `ProductPerkService` orchestrates the (product, perk) join-table
+ * aggregate. Three operations: `getProductPerksByProductId`,
+ * `createProductPerk`, `deleteProductPerk`. Every write emits an audit-log
+ * entry and invalidates the project's cached schema.
+ *
+ * `AuditLogPort`, `AuthSession`, `Db`, and `SchemaCacheInvalidationService`
+ * are provided by the application root.
+ */
+export class ProductPerkService extends Context.Service<ProductPerkService>()(
+  "ProductPerkService",
+  {
+    make: Effect.gen(function* () {
+      const auditLog = yield* AuditLogPort;
+      const schemaCache = yield* SchemaCacheInvalidationService;
+      const db = yield* Db;
+
+      const getProductPerksByProductId = Effect.fn("getProductPerksByProductId")(
+        function* (productId: string) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", productId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          if (session?.person?.distinctId)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+          const product = yield* db.query.products.findFirst({
+            where: { id: productId },
+          });
+          if (!product) {
+            return yield* Effect.fail(
+              new ProductPerkValidationError({ message: `Product ${productId} not found` }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+          yield* checkProjectPermission(
+            product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to access product perks for product ${productId}`,
+          );
+          return yield* db.query.productPerks.findMany({
+            orderBy: { createdAt: "asc" },
+            where: { productId },
+          });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new ProductPerkServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const createProductPerk = Effect.fn("createProductPerk")(
+        function* (input: { readonly productId: string; readonly perkId: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", input.productId);
+          yield* Effect.annotateCurrentSpan("voidhash.perk.id", input.perkId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          if (session?.person?.distinctId)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+
+          const product = yield* db.query.products.findFirst({
+            where: { id: input.productId },
+          });
+          if (!product) {
+            return yield* Effect.fail(
+              new ProductPerkValidationError({
+                message: `Product ${input.productId} not found`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+          yield* checkProjectPermission(
+            product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to create product perks for project ${product.projectId}`,
+          );
+
+          const perk = yield* db.query.perks.findFirst({
+            where: { id: input.perkId },
+          });
+          if (!perk) {
+            return yield* Effect.fail(
+              new ProductPerkValidationError({ message: `Perk ${input.perkId} not found` }),
+            );
+          }
+          yield* checkProjectPermission(
+            perk.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to create product perks in project ${product.projectId}`,
+          );
+
+          const newProductPerk = {
+            id: generateId("productPerk"),
+            perkId: input.perkId,
+            productId: input.productId,
+          };
+          yield* Effect.annotateCurrentSpan("voidhash.product_perk.id", newProductPerk.id);
+          yield* Effect.annotateCurrentSpan("voidhash.audit.action", AuditLogAction.Created);
+
+          yield* db.insert(productPerks).values(newProductPerk);
+
+          yield* auditLog
+            .append({
+              projectId: product.projectId,
+              entityType: AuditLogEntityType.ProductPerk,
+              entityId: newProductPerk.id,
+              parentEntityId: input.productId,
+              action: AuditLogAction.Created,
+            })
+            .pipe(Effect.ignore);
+
+          yield* Effect.log(
+            `Created product perk ${newProductPerk.id} for product ${input.productId}`,
+          );
+
+          yield* schemaCache.invalidate(product.projectId);
+          return { id: newProductPerk.id };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new ProductPerkServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const deleteProductPerk = Effect.fn("deleteProductPerk")(
+        function* (input: { readonly id: string }) {
+          const session = yield* AuthSession;
+          yield* Effect.annotateCurrentSpan("voidhash.product_perk.id", input.id);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+          if (session?.person?.distinctId)
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.person.distinct_id",
+              session.person.distinctId,
+            );
+
+          const productPerk = (yield* db.query.productPerks.findFirst({
+            where: { id: input.id },
+            with: { product: true },
+          })) as DbProductPerkWithProduct | undefined;
+          if (!productPerk) {
+            return yield* Effect.fail(
+              new ProductPerkValidationError({
+                message: `Product perk ${input.id} not found`,
+              }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.product.id", productPerk.productId);
+          yield* Effect.annotateCurrentSpan("voidhash.perk.id", productPerk.perkId);
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", productPerk.product.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.audit.action", AuditLogAction.Deleted);
+
+          yield* checkProjectPermission(
+            productPerk.product.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to delete product perks for project ${productPerk.product.projectId}`,
+          );
+
+          yield* db.delete(productPerks).where(eq(productPerks.id, input.id));
+
+          yield* auditLog
+            .append({
+              projectId: productPerk.product.projectId,
+              entityType: AuditLogEntityType.ProductPerk,
+              entityId: input.id,
+              parentEntityId: productPerk.productId,
+              action: AuditLogAction.Deleted,
+            })
+            .pipe(Effect.ignore);
+
+          yield* Effect.log(`Deleted product perk ${input.id}`);
+          yield* schemaCache.invalidate(productPerk.product.projectId);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new ProductPerkServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return {
+        getProductPerksByProductId,
+        createProductPerk,
+        deleteProductPerk,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(ProductPerkService)(ProductPerkService.make);
+}
diff --git a/packages/core/src/services/productPerks/index.ts b/packages/core/src/services/productPerks/index.ts
new file mode 100644
index 000000000..223271923
--- /dev/null
+++ b/packages/core/src/services/productPerks/index.ts
@@ -0,0 +1 @@
+export * from "./ProductPerkService.ts";
diff --git a/packages/core/src/services/products/ProductService.ts b/packages/core/src/services/products/ProductService.ts
new file mode 100644
index 000000000..f47794475
--- /dev/null
+++ b/packages/core/src/services/products/ProductService.ts
@@ -0,0 +1,333 @@
+import type { ProductTypeValue } from "@voidhash/lib";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  ProductNotFoundError,
+  ProductSlugAlreadyExistsError,
+} from "../../domain/product/Product.ts";
+import { AuditLogAction, AuditLogEntityType, Db, eq, products } from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { SchemaCacheInvalidationService } from "../schema/SchemaCacheInvalidationService.ts";
+import { type ProductView, dbProductTypeToLabel } from "./helpers.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error
+ * tag.
+ */
+export class ProductServiceError extends Schema.TaggedErrorClass<ProductServiceError>(
+  "ProductServiceError",
+)("ProductServiceError", { cause: Schema.String }) {}
+
+/**
+ * `ProductService` orchestrates the product catalog aggregate. Five
+ * operations: `getProducts`, `getProductById`, `createProduct`,
+ * `updateProduct`, `deleteProduct`. Every write emits an audit-log entry
+ * and invalidates the project's cached schema after the DB write succeeds.
+ *
+ * `createProduct` re-checks slug uniqueness inside `db.transaction` to
+ * close the read-then-write race against a concurrent insert. Other writes
+ * call queries directly.
+ *
+ * `AuditLogPort`, `AuthSession`, `Db`, and `SchemaCacheInvalidationService`
+ * are provided by the application root.
+ */
+export class ProductService extends Context.Service<ProductService>()("ProductService", {
+  make: Effect.gen(function* () {
+    const auditLog = yield* AuditLogPort;
+    const schemaCache = yield* SchemaCacheInvalidationService;
+    const db = yield* Db;
+
+    const getProducts = Effect.fn("getProducts")(
+      function* (projectId: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        if (session?.method)
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        if (session?.organizations?.[0]?.id)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.id",
+            session.organizations[0].id,
+          );
+        yield* checkProjectPermission(
+          projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access products for project ${projectId}`,
+        );
+        const rows = yield* db.query.products.findMany({ where: { projectId } });
+        return rows.map(
+          (product) =>
+            ({
+              id: product.id,
+              name: product.name,
+              projectId: product.projectId,
+              slug: product.slug,
+              type: dbProductTypeToLabel(product.type as ProductTypeValue),
+            }) satisfies ProductView,
+        );
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProductServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getProductById = Effect.fn("getProductById")(
+      function* (id: string) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.product.id", id);
+        if (session?.method)
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        if (session?.organizations?.[0]?.id)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.id",
+            session.organizations[0].id,
+          );
+        const product = yield* db.query.products.findFirst({ where: { id } });
+        if (!product) {
+          return yield* Effect.fail(new ProductNotFoundError({ message: "Product not found" }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", product.projectId);
+        if (product.slug) yield* Effect.annotateCurrentSpan("voidhash.product.slug", product.slug);
+        yield* checkProjectPermission(
+          product.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access product ${id} for project ${product.projectId}`,
+        );
+        return {
+          id: product.id,
+          name: product.name,
+          projectId: product.projectId,
+          slug: product.slug,
+          type: dbProductTypeToLabel(product.type as ProductTypeValue),
+        } satisfies ProductView;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProductServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const createProduct = Effect.fn("createProduct")(
+      function* (input: {
+        readonly projectId: string;
+        readonly name: string;
+        readonly slug: string;
+      }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.product.slug", input.slug);
+        if (session?.method)
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        if (session?.organizations?.[0]?.id)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.id",
+            session.organizations[0].id,
+          );
+        yield* checkProjectPermission(
+          input.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to create products for project ${input.projectId}`,
+        );
+
+        const productId = generateId("product");
+        yield* Effect.annotateCurrentSpan("voidhash.product.id", productId);
+
+        yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            const existing = yield* tx.query.products.findFirst({
+              where: { slug: input.slug, projectId: input.projectId },
+            });
+            if (existing) {
+              return yield* Effect.fail(new ProductSlugAlreadyExistsError({ slug: input.slug }));
+            }
+            yield* tx.insert(products).values({
+              id: productId,
+              name: input.name,
+              projectId: input.projectId,
+              slug: input.slug,
+            });
+          }),
+        );
+
+        yield* auditLog
+          .append({
+            projectId: input.projectId,
+            entityType: AuditLogEntityType.Product,
+            entityId: productId,
+            action: AuditLogAction.Created,
+            changes: { snapshot: { name: input.name, slug: input.slug } },
+          })
+          .pipe(Effect.ignore);
+
+        yield* Effect.log(`Created product ${productId} for project ${input.projectId}`);
+        yield* schemaCache.invalidate(input.projectId);
+        return { id: productId };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProductServiceError({ cause: String(error.cause) })),
+            SqlError: (error) =>
+              Effect.fail(new ProductServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const updateProduct = Effect.fn("updateProduct")(
+      function* (input: { readonly id: string; readonly name: string; readonly slug?: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.product.id", input.id);
+        if (input.slug) yield* Effect.annotateCurrentSpan("voidhash.product.slug", input.slug);
+        if (session?.method)
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        if (session?.organizations?.[0]?.id)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.id",
+            session.organizations[0].id,
+          );
+        const existing = yield* db.query.products.findFirst({ where: { id: input.id } });
+        if (!existing) {
+          return yield* Effect.fail(
+            new ProductNotFoundError({ message: `Product ${input.id} not found` }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", existing.projectId);
+        yield* checkProjectPermission(
+          existing.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to update product ${input.id} for project ${existing.projectId}`,
+        );
+
+        yield* db
+          .update(products)
+          .set({ name: input.name, slug: input.slug, updatedAt: new Date() })
+          .where(eq(products.id, input.id));
+
+        yield* auditLog
+          .append({
+            projectId: existing.projectId,
+            entityType: AuditLogEntityType.Product,
+            entityId: input.id,
+            action: AuditLogAction.Updated,
+            changes: { snapshot: { name: input.name, slug: input.slug } },
+          })
+          .pipe(Effect.ignore);
+
+        yield* Effect.log(`Updated product ${input.id} for project ${existing.projectId}`);
+        yield* schemaCache.invalidate(existing.projectId);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProductServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const deleteProduct = Effect.fn("deleteProduct")(
+      function* (input: { readonly id: string }) {
+        const session = yield* AuthSession;
+        yield* Effect.annotateCurrentSpan("voidhash.product.id", input.id);
+        if (session?.method)
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        if (session?.user?.id)
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        if (session?.person?.distinctId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        if (session?.organizations?.[0]?.id)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.id",
+            session.organizations[0].id,
+          );
+        const existing = yield* db.query.products.findFirst({ where: { id: input.id } });
+        if (!existing) {
+          return yield* Effect.fail(
+            new ProductNotFoundError({ message: `Product ${input.id} not found` }),
+          );
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", existing.projectId);
+        yield* checkProjectPermission(
+          existing.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to delete product ${input.id} for project ${existing.projectId}`,
+        );
+
+        yield* db.delete(products).where(eq(products.id, input.id));
+
+        yield* auditLog
+          .append({
+            projectId: existing.projectId,
+            entityType: AuditLogEntityType.Product,
+            entityId: input.id,
+            action: AuditLogAction.Deleted,
+          })
+          .pipe(Effect.ignore);
+
+        yield* Effect.log(`Deleted product ${input.id} for project ${existing.projectId}`);
+        yield* schemaCache.invalidate(existing.projectId);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProductServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      getProducts,
+      getProductById,
+      createProduct,
+      updateProduct,
+      deleteProduct,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(ProductService)(ProductService.make);
+}
+
+export type { ProductTypeLabel, ProductView } from "./helpers.ts";
diff --git a/packages/core/src/services/products/helpers.ts b/packages/core/src/services/products/helpers.ts
new file mode 100644
index 000000000..a29f907e2
--- /dev/null
+++ b/packages/core/src/services/products/helpers.ts
@@ -0,0 +1,29 @@
+import { ProductType, type ProductTypeValue } from "@voidhash/lib";
+
+/**
+ * Public-facing product type label used by `ProductService` outputs. Matches
+ * the API contract literal union; consumers map to richer client types
+ * downstream as needed.
+ */
+export type ProductTypeLabel = "subscription" | "one-time" | "one-time-consumable";
+
+export interface ProductView {
+  readonly id: string;
+  readonly name: string;
+  readonly projectId: string;
+  readonly slug: string;
+  readonly type: ProductTypeLabel;
+}
+
+export const dbProductTypeToLabel = (type: ProductTypeValue): ProductTypeLabel => {
+  if (type === ProductType.Subscription) {
+    return "subscription";
+  }
+  if (type === ProductType.OneTime) {
+    return "one-time";
+  }
+  if (type === ProductType.OneTimeConsumable) {
+    return "one-time-consumable";
+  }
+  throw new Error(`Invalid product type: ${type}`);
+};
diff --git a/packages/core/src/services/products/index.ts b/packages/core/src/services/products/index.ts
new file mode 100644
index 000000000..2a0c74d6d
--- /dev/null
+++ b/packages/core/src/services/products/index.ts
@@ -0,0 +1 @@
+export * from "./ProductService.ts";
diff --git a/packages/core/src/services/projects/ProjectService.ts b/packages/core/src/services/projects/ProjectService.ts
new file mode 100644
index 000000000..0b2b52b05
--- /dev/null
+++ b/packages/core/src/services/projects/ProjectService.ts
@@ -0,0 +1,512 @@
+import { SLUG_BLACKLIST } from "@voidhash/lib";
+import { Cause, Context, Effect, Layer, Schema } from "effect";
+
+import { AuthenticationError, AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  avatarKeyFromUrl,
+  avatarSha256Hex,
+  deriveAvatarKey,
+  isOwnedAvatarUrl,
+  validateAndDecodeAvatar,
+} from "../../domain/avatar.ts";
+import { ProjectNotFoundError } from "../../domain/project/Project.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  apiKeys,
+  eq,
+  organization,
+  projects,
+} from "@voidhash/db";
+import { createShortId } from "../../utils/create-short-id.ts";
+import { createSlug } from "../../utils/create-slug.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkOrganizationPermission, checkProjectPermission } from "../../utils/permissions.ts";
+import { createPublishableKey } from "../apiKeys/api-keys.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error tag.
+ */
+export class ProjectServiceError extends Schema.TaggedErrorClass<ProjectServiceError>(
+  "ProjectServiceError",
+)("ProjectServiceError", { cause: Schema.String }) {}
+
+/**
+ * `ProjectService` orchestrates the project aggregate within an organization.
+ *
+ * `createProject` writes the project row plus a bootstrap publishable API key
+ * inside a single transaction — the project would otherwise have no auth
+ * surface — and is the documented exception that lets the service yield `Db`
+ * for `db.transaction(...)` directly.
+ *
+ * `AuditLogPort`, `AuthSession`, and `Db` are provided by the application
+ * root.
+ */
+export class ProjectService extends Context.Service<ProjectService>()("ProjectService", {
+  make: Effect.gen(function* () {
+    const auditLog = yield* AuditLogPort;
+    const publicFileStore = yield* PublicFileStore;
+    const db = yield* Db;
+
+    /**
+     * Stamps the actor dimension (`voidhash.auth.method`, `voidhash.user.id`,
+     * `voidhash.person.distinct_id`) onto the current span. Nullable identity
+     * fields are only attached when present so no `"null"` placeholder lands.
+     */
+    const annotateActor = Effect.fnUntraced(function* () {
+      const session = yield* AuthSession;
+      yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+      if (session.user?.id) {
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+      }
+      if (session.person?.distinctId) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", session.person.distinctId);
+      }
+      return session;
+    });
+
+    const getProjectById = Effect.fn("getProjectById")(
+      function* (id: string) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", id);
+        const project = yield* db.query.projects.findFirst({ where: { id } });
+        if (!project) {
+          return null;
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.slug", project.slug);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.project.organization_id",
+          project.organizationId,
+        );
+        yield* checkProjectPermission(
+          id,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access project ${id}`,
+        );
+        return project;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getProjectBySlug = Effect.fn("getProjectBySlug")(
+      function* (input: { readonly organizationId: string; readonly slug: string }) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+        yield* Effect.annotateCurrentSpan("voidhash.project.slug", input.slug);
+        const project = yield* db.query.projects.findFirst({
+          where: { slug: input.slug, organizationId: input.organizationId },
+        });
+        if (!project) {
+          return null;
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", project.id);
+        yield* checkProjectPermission(
+          project.id,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access project ${project.id}`,
+        );
+        return project;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getProjectBySlugAndOrganizationSlug = Effect.fn("getProjectBySlugAndOrganizationSlug")(
+      function* (input: { readonly organizationSlug: string; readonly projectSlug: string }) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.organization.slug", input.organizationSlug);
+        yield* Effect.annotateCurrentSpan("voidhash.project.slug", input.projectSlug);
+        const org = yield* db.query.organization.findFirst({
+          where: { slug: input.organizationSlug },
+        });
+        if (!org) {
+          return null;
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", org.id);
+        const project = yield* db.query.projects.findFirst({
+          where: { slug: input.projectSlug, organizationId: org.id },
+        });
+        if (!project) {
+          return null;
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", project.id);
+        yield* checkProjectPermission(
+          project.id,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access project ${project.id}`,
+        );
+        return project;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getProjects = Effect.fn("getProjects")(
+      function* (organizationId: string) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        yield* checkOrganizationPermission(
+          organizationId,
+          "organization:all",
+          `User ${session?.user?.id} is not authorized to access projects for organization ${organizationId}`,
+        );
+        const projectsList = yield* db.query.projects.findMany({
+          where: { organizationId },
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.project.count", projectsList.length);
+        return projectsList;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const getProjectsByOrganizationSlug = Effect.fn("getProjectsByOrganizationSlug")(
+      function* (organizationSlug: string) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.organization.slug", organizationSlug);
+        const org = yield* db.query.organization.findFirst({
+          where: { slug: organizationSlug },
+        });
+        if (!org) {
+          return null;
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", org.id);
+        yield* checkOrganizationPermission(
+          org.id,
+          "organization:all",
+          `User ${session?.user?.id} is not authorized to access organization ${org.id}`,
+        );
+        const projectsList = yield* db.query.projects.findMany({
+          where: { organizationId: org.id },
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.project.count", projectsList.length);
+        return projectsList;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const createProject = Effect.fn("createProject")(
+      function* (input: { readonly name: string; readonly organizationId: string }) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+        yield* checkOrganizationPermission(
+          input.organizationId,
+          "organization:all",
+          `User ${session?.user?.id} is not authorized to create projects for organization ${input.organizationId}`,
+        );
+
+        const userId = session?.user?.id;
+        if (!userId) {
+          return yield* Effect.fail(
+            new AuthenticationError({
+              cause: "You are not authenticated",
+              message: "You are not authenticated",
+            }),
+          );
+        }
+
+        const id = generateId("project");
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", id);
+        let slug = createSlug(input.name);
+        if (SLUG_BLACKLIST.includes(slug)) {
+          slug = `${slug}-${createShortId()}`;
+        }
+
+        const existingProject = yield* db.query.projects.findFirst({
+          where: { slug, organizationId: input.organizationId },
+        });
+        if (existingProject) {
+          slug = `${slug}-${createShortId()}`;
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.slug", slug);
+
+        const apiKeyId = generateId("apiPublishableKey");
+        yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            yield* tx.insert(projects).values({
+              createdByUserId: userId,
+              id,
+              name: input.name,
+              organizationId: input.organizationId,
+              slug,
+            });
+
+            const productionPublishableKey = yield* createPublishableKey();
+            yield* tx.insert(apiKeys).values({
+              id: apiKeyId,
+              projectId: id,
+              name: "Publishable key",
+              ...productionPublishableKey,
+            });
+          }),
+        );
+        yield* Effect.annotateCurrentSpan("voidhash.api_key.id", apiKeyId);
+
+        yield* auditLog
+          .append({
+            projectId: id,
+            entityType: AuditLogEntityType.Project,
+            entityId: id,
+            action: AuditLogAction.Created,
+            changes: { snapshot: { id, name: input.name, slug } },
+          })
+          .pipe(Effect.ignore);
+        yield* Effect.annotateCurrentSpan("voidhash.audit_log.entity_id", id);
+
+        yield* Effect.log(`Created project ${id} for organization ${input.organizationId}`);
+        return { id, name: input.name, slug };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+            SqlError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const updateProject = Effect.fn("updateProject")(
+      function* (input: { readonly id: string; readonly name: string }) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.id);
+        const project = yield* db.query.projects.findFirst({ where: { id: input.id } });
+        if (!project) {
+          return yield* Effect.fail(new ProjectNotFoundError({ projectId: input.id }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.slug", project.slug);
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", project.organizationId);
+        yield* checkProjectPermission(
+          input.id,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to update project ${input.id}`,
+        );
+
+        yield* db.update(projects).set({ name: input.name }).where(eq(projects.id, input.id));
+
+        yield* auditLog.append({
+          projectId: input.id,
+          entityType: AuditLogEntityType.Project,
+          entityId: input.id,
+          action: AuditLogAction.Updated,
+          changes: { snapshot: { name: input.name } },
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.audit_log.entity_id", input.id);
+
+        yield* Effect.log(`Updated project ${input.id}`);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const setAvatar = Effect.fn("setProjectAvatar")(
+      function* (input: {
+        readonly id: string;
+        readonly imageBase64: string;
+        readonly contentType: string;
+      }) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.id);
+        const project = yield* db.query.projects.findFirst({ where: { id: input.id } });
+        if (!project) {
+          return yield* Effect.fail(new ProjectNotFoundError({ projectId: input.id }));
+        }
+        yield* checkProjectPermission(
+          input.id,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to update project ${input.id}`,
+        );
+
+        const { bytes, ext } = yield* validateAndDecodeAvatar(input);
+        const sha256 = yield* avatarSha256Hex(bytes);
+        const key = deriveAvatarKey("project", input.id, sha256, ext);
+
+        yield* publicFileStore.putObject({ key, body: bytes, contentType: input.contentType });
+        const logoUrl = publicFileStore.publicUrl(key);
+
+        yield* db.update(projects).set({ logo: logoUrl }).where(eq(projects.id, input.id));
+
+        // Best-effort cleanup of the superseded object (only our own keys).
+        if (
+          project.logo !== null &&
+          isOwnedAvatarUrl(project.logo, publicFileStore.publicBaseUrl)
+        ) {
+          const oldKey = avatarKeyFromUrl(project.logo, publicFileStore.publicBaseUrl);
+          if (oldKey !== null && oldKey !== key) {
+            yield* publicFileStore
+              .deleteObject(oldKey)
+              .pipe(
+                Effect.catchCause((cause) =>
+                  Effect.logWarning(
+                    `Failed to delete superseded avatar object ${oldKey}: ${Cause.pretty(cause)}`,
+                  ),
+                ),
+              );
+          }
+        }
+
+        yield* auditLog.append({
+          projectId: input.id,
+          entityType: AuditLogEntityType.Project,
+          entityId: input.id,
+          action: AuditLogAction.Updated,
+          changes: { snapshot: { logo: logoUrl } },
+        });
+
+        yield* Effect.log(`Updated avatar for project ${input.id}`);
+        return { logoUrl };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+            PublicFileStoreError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: error.cause })),
+          }),
+        ),
+    );
+
+    const removeAvatar = Effect.fn("removeProjectAvatar")(
+      function* (input: { readonly id: string }) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.id);
+        const project = yield* db.query.projects.findFirst({ where: { id: input.id } });
+        if (!project) {
+          return yield* Effect.fail(new ProjectNotFoundError({ projectId: input.id }));
+        }
+        yield* checkProjectPermission(
+          input.id,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to update project ${input.id}`,
+        );
+
+        yield* db.update(projects).set({ logo: null }).where(eq(projects.id, input.id));
+
+        if (
+          project.logo !== null &&
+          isOwnedAvatarUrl(project.logo, publicFileStore.publicBaseUrl)
+        ) {
+          const oldKey = avatarKeyFromUrl(project.logo, publicFileStore.publicBaseUrl);
+          if (oldKey !== null) {
+            yield* publicFileStore
+              .deleteObject(oldKey)
+              .pipe(
+                Effect.catchCause((cause) =>
+                  Effect.logWarning(
+                    `Failed to delete superseded avatar object ${oldKey}: ${Cause.pretty(cause)}`,
+                  ),
+                ),
+              );
+          }
+        }
+
+        yield* auditLog.append({
+          projectId: input.id,
+          entityType: AuditLogEntityType.Project,
+          entityId: input.id,
+          action: AuditLogAction.Updated,
+          changes: { snapshot: { logo: null } },
+        });
+
+        yield* Effect.log(`Removed avatar for project ${input.id}`);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    const deleteProject = Effect.fn("deleteProject")(
+      function* (input: { readonly id: string }) {
+        const session = yield* annotateActor();
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.id);
+        const project = yield* db.query.projects.findFirst({ where: { id: input.id } });
+        if (!project) {
+          return yield* Effect.fail(new ProjectNotFoundError({ projectId: input.id }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.slug", project.slug);
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", project.organizationId);
+        yield* checkProjectPermission(
+          input.id,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to delete project ${input.id}`,
+        );
+
+        yield* db.delete(projects).where(eq(projects.id, input.id));
+
+        yield* auditLog.append({
+          projectId: input.id,
+          entityType: AuditLogEntityType.Project,
+          entityId: input.id,
+          action: AuditLogAction.Deleted,
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.audit_log.entity_id", input.id);
+
+        yield* Effect.log(`Deleted project ${input.id}`);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new ProjectServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return {
+      createProject,
+      deleteProject,
+      getProjectById,
+      getProjectBySlug,
+      getProjectBySlugAndOrganizationSlug,
+      getProjects,
+      getProjectsByOrganizationSlug,
+      removeAvatar,
+      setAvatar,
+      updateProject,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(ProjectService)(ProjectService.make);
+}
diff --git a/packages/core/src/services/projects/index.ts b/packages/core/src/services/projects/index.ts
new file mode 100644
index 000000000..1b2b8f308
--- /dev/null
+++ b/packages/core/src/services/projects/index.ts
@@ -0,0 +1 @@
+export * from "./ProjectService.ts";
diff --git a/packages/core/src/services/purchaseProcessing/PurchaseLedgerWorkerService.ts b/packages/core/src/services/purchaseProcessing/PurchaseLedgerWorkerService.ts
new file mode 100644
index 000000000..79ce68155
--- /dev/null
+++ b/packages/core/src/services/purchaseProcessing/PurchaseLedgerWorkerService.ts
@@ -0,0 +1,347 @@
+/**
+ * `PurchaseLedgerWorkerService` drains the `purchase_ledger` table — written
+ * transactionally by `PurchaseProcessingService` — by re-dispatching each row's
+ * `eventsPayload` onto the SHARED analytics-ingest queue via
+ * `AnalyticsDispatchService.dispatchTrusted`. The ledger is the durability
+ * backstop: it guarantees every revenue event is eventually enqueued even if an
+ * immediate post-commit dispatch is lost.
+ *
+ * Driver: on the Cloudflare backend a cron-triggered `PurchaseLedgerDrainWorkflow`
+ * calls `poll()` once per tick (the `run()` self-looping variant is for
+ * long-running Node hosts / tests only — workerd has no persistent process).
+ * Concurrency model: every drain instance calls `poll()` independently; the
+ * SQL claim CAS (`FOR UPDATE SKIP LOCKED`) lets at most one of them process any
+ * given row at a time. No leader election needed. Stale claims (worker crashed
+ * mid-row) are swept back to `Pending` at the top of each poll.
+ *
+ * Worker dispatch ≠ analytics delivery. The worker's job ends at "I enqueued
+ * the batch onto the at-least-once analytics queue"; the processor + writer
+ * downstream perform identity pass-through and the ClickHouse insert, and the
+ * writer's unbounded `(project_id, event_id)` pre-check collapses the duplicates
+ * that the immediate-dispatch + drain overlap (and queue retries) produce —
+ * `eventId` is deterministic, so a re-dispatch is a no-op, never a double-write.
+ */
+import { Cause, Context, Effect, Layer, Schedule, Schema } from "effect";
+
+import {
+  InternalAnalyticsEventSchema,
+  type InternalAnalyticsEvent,
+} from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import {
+  Db,
+  PurchaseLedgerStatus,
+  and,
+  eq,
+  isNull,
+  lte,
+  or,
+  purchaseLedger,
+  sql,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { AnalyticsDispatchService } from "../analyticsIngest/AnalyticsDispatchService.ts";
+
+/**
+ * Wire schema for a ledger row's `eventsPayload` — the array of trusted revenue
+ * {@link InternalAnalyticsEvent}s the drain re-dispatches. Decoded inline so the
+ * worker carries no dependency on the analytics-ingest dispatch internals.
+ */
+const LedgerAnalyticsEventsSchema = Schema.Array(InternalAnalyticsEventSchema);
+
+export class PurchaseLedgerWorkerServiceError extends Schema.TaggedErrorClass<PurchaseLedgerWorkerServiceError>(
+  "PurchaseLedgerWorkerServiceError",
+)("PurchaseLedgerWorkerServiceError", { cause: Schema.String }) {}
+
+export interface PurchaseLedgerWorkerPollOptions {
+  readonly batchSize: number;
+  readonly maxAttempts: number;
+  readonly staleClaimSeconds: number;
+}
+
+export interface PurchaseLedgerWorkerPollResult {
+  readonly claimedCount: number;
+  readonly publishedCount: number;
+  readonly retriedCount: number;
+  readonly deadLetteredCount: number;
+  readonly staleClaimsReleased: number;
+}
+
+export interface PurchaseLedgerWorkerRunOptions extends PurchaseLedgerWorkerPollOptions {
+  readonly pollIntervalMillis: number;
+}
+
+const DEFAULT_RUN_OPTIONS: PurchaseLedgerWorkerRunOptions = {
+  batchSize: 100,
+  maxAttempts: 8,
+  pollIntervalMillis: 5_000,
+  staleClaimSeconds: 5 * 60,
+};
+
+const MAX_BACKOFF_SECONDS = 3600;
+
+const computeBackoffSeconds = (attemptCount: number): number =>
+  Math.min(MAX_BACKOFF_SECONDS, 2 ** attemptCount);
+
+export class PurchaseLedgerWorkerService extends Context.Service<PurchaseLedgerWorkerService>()(
+  "PurchaseLedgerWorkerService",
+  {
+    make: Effect.gen(function* () {
+      const dispatch = yield* AnalyticsDispatchService;
+      const db = yield* Db;
+
+      // ==================== Processing ====================
+
+      /**
+       * Processes one claimed ledger row: decodes its events payload,
+       * dispatches via the analytics bridge, then marks the row published. A
+       * decode failure is permanent (the row's payload doesn't match the
+       * current schema) and goes straight to dead-letter. A dispatch failure
+       * is transient — bump attempt count, schedule retry, or dead-letter
+       * past max attempts.
+       */
+      const _processRow = Effect.fn("_processRow")(function* (input: {
+        readonly id: string;
+        readonly attemptCount: number;
+        readonly eventsPayload: ReadonlyArray<object>;
+        readonly maxAttempts: number;
+      }) {
+        yield* Effect.annotateCurrentSpan({
+          "purchase_ledger.attempt_count": input.attemptCount,
+          "purchase_ledger.event_count": input.eventsPayload.length,
+          "purchase_ledger.id": input.id,
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.id", input.id);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.purchase_ledger.attempt_count",
+          input.attemptCount,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.purchase_ledger.event_count",
+          input.eventsPayload.length,
+        );
+        const decoded = yield* Schema.decodeUnknownEffect(LedgerAnalyticsEventsSchema)(
+          input.eventsPayload,
+        ).pipe(
+          Effect.catch((decodeError) =>
+            db
+              .update(purchaseLedger)
+              .set({
+                attemptCount: input.attemptCount + 1,
+                claimedAt: null,
+                claimedBy: null,
+                lastError: `decode failed: ${String(decodeError)}`.slice(0, 1000),
+                status: PurchaseLedgerStatus.DeadLetter,
+              })
+              .where(eq(purchaseLedger.id, input.id))
+              .pipe(Effect.as("decode_failed" as const)),
+          ),
+        );
+        if (decoded === "decode_failed") {
+          yield* Effect.annotateCurrentSpan({ "purchase_ledger.outcome": "dead_lettered" });
+          yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.outcome", "dead_lettered");
+          return { outcome: "dead_lettered" as const };
+        }
+        const events = decoded as ReadonlyArray<InternalAnalyticsEvent>;
+        // `matchCause` (not `match`): the queue producer can fail as a DEFECT
+        // (e.g. the binding send `orDie`s) and a plain `match` would let that
+        // crash the poll task instead of feeding the retry/dead-letter ladder.
+        // We must NOT mark the row Published unless the batch was actually
+        // enqueued onto the shared analytics-ingest queue.
+        const dispatchOutcome = yield* dispatch.dispatchTrusted(events).pipe(
+          Effect.matchCause({
+            onFailure: (cause) => ({ kind: "failure" as const, error: Cause.pretty(cause) }),
+            onSuccess: () => ({ kind: "success" as const }),
+          }),
+        );
+        if (dispatchOutcome.kind === "success") {
+          yield* db
+            .update(purchaseLedger)
+            .set({
+              claimedAt: null,
+              claimedBy: null,
+              lastError: null,
+              publishedAt: sql`NOW()`,
+              status: PurchaseLedgerStatus.Published,
+            })
+            .where(eq(purchaseLedger.id, input.id));
+          yield* Effect.annotateCurrentSpan({ "purchase_ledger.outcome": "published" });
+          yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.outcome", "published");
+          return { outcome: "published" as const };
+        }
+        const nextAttempt = input.attemptCount + 1;
+        if (nextAttempt >= input.maxAttempts) {
+          yield* db
+            .update(purchaseLedger)
+            .set({
+              attemptCount: nextAttempt,
+              claimedAt: null,
+              claimedBy: null,
+              lastError: dispatchOutcome.error.slice(0, 1000),
+              status: PurchaseLedgerStatus.DeadLetter,
+            })
+            .where(eq(purchaseLedger.id, input.id));
+          yield* Effect.annotateCurrentSpan({ "purchase_ledger.outcome": "dead_lettered" });
+          yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.outcome", "dead_lettered");
+          return { outcome: "dead_lettered" as const };
+        }
+        // Bump `attemptCount`, push `nextAttemptAt` out by the backoff window,
+        // record the error, and release the claim so the row is eligible to be
+        // picked up again once the backoff elapses.
+        yield* db
+          .update(purchaseLedger)
+          .set({
+            attemptCount: nextAttempt,
+            claimedAt: null,
+            claimedBy: null,
+            lastError: dispatchOutcome.error.slice(0, 1000),
+            nextAttemptAt: sql`(NOW() + ${computeBackoffSeconds(nextAttempt)} * INTERVAL '1 second')`,
+            status: PurchaseLedgerStatus.Pending,
+          })
+          .where(eq(purchaseLedger.id, input.id));
+        yield* Effect.annotateCurrentSpan({ "purchase_ledger.outcome": "retried" });
+        yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.outcome", "retried");
+        return { outcome: "retried" as const };
+      });
+
+      /**
+       * One drain pass: release stale claims, claim a batch, process each
+       * row sequentially. Multiple replicas calling `poll()` concurrently is
+       * safe — each gets a disjoint slice via the SQL CAS.
+       */
+      const poll = Effect.fn("poll")(function* (
+        options: PurchaseLedgerWorkerPollOptions = DEFAULT_RUN_OPTIONS,
+      ) {
+        const workerId = generateId("purchaseLedger");
+        // Reset `InProgress` rows older than the cutoff back to `Pending` so
+        // they can be re-claimed. Handles worker-crash mid-processing.
+        const releasedRows = yield* db
+          .update(purchaseLedger)
+          .set({
+            claimedAt: null,
+            claimedBy: null,
+            status: PurchaseLedgerStatus.Pending,
+          })
+          .where(
+            and(
+              eq(purchaseLedger.status, PurchaseLedgerStatus.InProgress),
+              lte(
+                purchaseLedger.claimedAt,
+                sql`(NOW() - ${options.staleClaimSeconds} * INTERVAL '1 second')`,
+              ),
+            ),
+          )
+          .returning({ id: purchaseLedger.id });
+        const released = releasedRows.length;
+        // Claim up to `batchSize` pending rows for `workerId`. The subquery
+        // selects eligible rows with `FOR UPDATE SKIP LOCKED`, so concurrent
+        // pollers never contend for the same row (each skips rows another worker
+        // has already locked); the trailing `status = Pending` guard is
+        // belt-and-suspenders for the CAS update.
+        yield* db
+          .update(purchaseLedger)
+          .set({
+            claimedAt: sql`NOW()`,
+            claimedBy: workerId,
+            status: PurchaseLedgerStatus.InProgress,
+          })
+          .where(
+            and(
+              eq(purchaseLedger.status, PurchaseLedgerStatus.Pending),
+              or(
+                isNull(purchaseLedger.nextAttemptAt),
+                lte(purchaseLedger.nextAttemptAt, sql`NOW()`),
+              ),
+              sql`${purchaseLedger.id} IN (
+                  SELECT id FROM ${purchaseLedger}
+                  WHERE ${purchaseLedger.status} = ${PurchaseLedgerStatus.Pending}
+                    AND (${purchaseLedger.nextAttemptAt} IS NULL OR ${purchaseLedger.nextAttemptAt} <= NOW())
+                  ORDER BY ${purchaseLedger.createdAt} ASC
+                  LIMIT ${options.batchSize}
+                  FOR UPDATE SKIP LOCKED
+                )`,
+            ),
+          );
+        const claimed = yield* db.query.purchaseLedger.findMany({
+          where: {
+            status: PurchaseLedgerStatus.InProgress,
+            claimedBy: workerId,
+          },
+        });
+        let publishedCount = 0;
+        let retriedCount = 0;
+        let deadLetteredCount = 0;
+        for (const row of claimed) {
+          const { outcome } = yield* _processRow({
+            attemptCount: row.attemptCount,
+            eventsPayload: row.eventsPayload as ReadonlyArray<object>,
+            id: row.id,
+            maxAttempts: options.maxAttempts,
+          });
+          if (outcome === "published") publishedCount++;
+          else if (outcome === "retried") retriedCount++;
+          else deadLetteredCount++;
+        }
+        const result: PurchaseLedgerWorkerPollResult = {
+          claimedCount: claimed.length,
+          deadLetteredCount,
+          publishedCount,
+          retriedCount,
+          staleClaimsReleased: released,
+        };
+        yield* Effect.annotateCurrentSpan({
+          "purchase_ledger.claimed_count": result.claimedCount,
+          "purchase_ledger.dead_lettered_count": result.deadLetteredCount,
+          "purchase_ledger.published_count": result.publishedCount,
+          "purchase_ledger.retried_count": result.retriedCount,
+          "purchase_ledger.stale_claims_released": result.staleClaimsReleased,
+        });
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.purchase_ledger.claimed_count",
+          result.claimedCount,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.purchase_ledger.published_count",
+          result.publishedCount,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.purchase_ledger.retried_count",
+          result.retriedCount,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.purchase_ledger.dead_lettered_count",
+          result.deadLetteredCount,
+        );
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.purchase_ledger.stale_claims_released",
+          result.staleClaimsReleased,
+        );
+        return result;
+      });
+
+      /**
+       * Long-running `Effect.repeat(poll, Schedule.spaced(...))`. Wire via
+       * `Layer.scopedDiscard` + `Effect.forkScoped` in app composition so
+       * the fiber is tied to the app's scope (cleanly cancelled on
+       * shutdown). Errors in `poll` are logged and swallowed so a transient
+       * DB hiccup doesn't kill the worker loop.
+       */
+      const run = Effect.fn("run")(function* (
+        options: PurchaseLedgerWorkerRunOptions = DEFAULT_RUN_OPTIONS,
+      ) {
+        return yield* poll(options).pipe(
+          Effect.catch((cause) => Effect.logError("purchase-ledger worker poll failed", cause)),
+          Effect.repeat(Schedule.spaced(`${options.pollIntervalMillis} millis`)),
+        );
+      });
+
+      return {
+        poll,
+        run,
+      } as const;
+    }),
+  },
+) {
+  static readonly layer = Layer.effect(PurchaseLedgerWorkerService)(
+    PurchaseLedgerWorkerService.make,
+  );
+}
diff --git a/packages/core/src/services/purchaseProcessing/PurchaseProcessingService.ts b/packages/core/src/services/purchaseProcessing/PurchaseProcessingService.ts
new file mode 100644
index 000000000..365b67c5e
--- /dev/null
+++ b/packages/core/src/services/purchaseProcessing/PurchaseProcessingService.ts
@@ -0,0 +1,2778 @@
+/**
+ * `PurchaseProcessingService` owns provider-neutral purchase state mutation.
+ * Each public method corresponds to one normalized purchase action — provider
+ * services (App Store, Play Store, Stripe) call the method that matches the
+ * provider event they just normalized, passing already-resolved identifiers.
+ *
+ * The service maps the provider product, performs idempotent transaction /
+ * subscription / purchase writes inside `Db.transaction`, syncs unlocked perks
+ * via {@link PerkGrantService}, and stages revenue analytics events into the
+ * `purchase_ledger` table — {@link PurchaseLedgerWorkerService} drains the
+ * ledger and re-dispatches each row's payload onto the shared analytics-ingest
+ * queue (via `AnalyticsDispatchService.dispatchTrusted`).
+ *
+ * Provider identifiers that may be absent (`providerTransactionId`,
+ * `providerSubscriptionId`, `providerWebhookNotificationId`,
+ * `rawProviderPayload`, `money`) are typed as `Option.Option<T>` so callers
+ * must make the present-vs-absent decision explicitly at the boundary.
+ */
+
+import { PurchaseType, SubscriptionStatus } from "@voidhash/lib";
+import { Context, Effect, Layer, Option, Predicate, Schema } from "effect";
+
+import type { InternalAnalyticsEvent } from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import type { PaymentProviderId } from "../../domain/paymentProvider/PaymentProviderConfiguration.ts";
+import type { SubscriptionTransferMode } from "../../domain/paymentProvider/SubscriptionTransfer.ts";
+import {
+  type PurchaseEventSource,
+  PurchaseProcessingMoney,
+  PurchaseProcessingMoneyUsd,
+  PurchaseProcessingResult,
+} from "../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import type { CurrencyCode, ExchangeRate, MinorAmount } from "../../domain/shared/Money.ts";
+import {
+  type InsertPurchase,
+  type InsertSubscription,
+  type InsertTransaction,
+  type ProviderEnvironmentValue,
+  type Subscription as DbSubscription,
+  Db,
+  type DbTransaction,
+  and,
+  apiKeys,
+  eq,
+  isNull,
+  lte,
+  or,
+  paymentProviderConfigurationProducts,
+  persons,
+  purchaseLedger,
+  purchases,
+  sql,
+  subscriptions,
+  transactions,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import { PerkGrantService } from "../perkGrants/PerkGrantService.ts";
+import { subscriptionStatusForInactiveEvent } from "./helpers.ts";
+import { decodePurchaseProcessingResult, encodePurchaseProcessingResult } from "./result-codec.ts";
+import {
+  type RevenueAnalyticsMapperContext,
+  toAutoRenewResumedAnalyticsInputs,
+  toBillingRetryAnalyticsInputs,
+  toCanceledAnalyticsInputs,
+  toExpiredAnalyticsInputs,
+  toExtendedAnalyticsInputs,
+  toOfferRedeemedAnalyticsInputs,
+  toOneTimePurchaseAnalyticsInputs,
+  toPriceIncreaseAnalyticsInputs,
+  toPurchaseRevokedAnalyticsInputs,
+  toPurchaseTransferredAnalyticsInputs,
+  toRefundReversedAnalyticsInputs,
+  toRefundedAnalyticsInputs,
+  toRenewalPreferenceChangeAnalyticsInputs,
+  toRenewedAnalyticsInputs,
+  toRevokedAnalyticsInputs,
+  toStartedAnalyticsInputs,
+  toSubscriptionTransferredAnalyticsInputs,
+} from "./revenue-analytics-mapper.ts";
+
+export class PurchaseProcessingServiceError extends Schema.TaggedErrorClass<PurchaseProcessingServiceError>(
+  "PurchaseProcessingServiceError",
+)("PurchaseProcessingServiceError", { cause: Schema.String }) {}
+
+export class PurchaseProcessingProductNotMappedError extends Schema.TaggedErrorClass<PurchaseProcessingProductNotMappedError>(
+  "PurchaseProcessingProductNotMappedError",
+)("PurchaseProcessingProductNotMappedError", {
+  paymentProviderConfigurationId: Schema.String,
+  paymentProviderConfigurationProductId: Schema.String,
+}) {}
+
+/**
+ * Fields every per-action method receives. Provider services pre-resolve
+ * `personId`, configuration ids, and provider identifiers before invoking the
+ * matching `PurchaseProcessingService` method.
+ *
+ * Identifier vocabulary:
+ * - `providerTransactionId` — per-charge payment id (Apple's `transactionId`,
+ *   Stripe's `payment_intent.id`). Stable across sources for the same payment.
+ * - `providerSubscriptionId` — subscription series id (Apple's
+ *   `originalTransactionId`, Stripe's `subscription.id`). Stable across every
+ *   renewal/refund within the series; absent for non-subscription charges.
+ * - `providerWebhookNotificationId` — provider-issued webhook delivery id,
+ *   diagnostic only; deduplication of inbound events happens upstream of this
+ *   service (e.g. the App Store payment provider's processed-event ledger).
+ *
+ * Identifiers that the provider may not surface for every event are modelled
+ * as `Option` so the absent case is impossible to miss at the call site.
+ */
+export interface PurchaseActionContext {
+  readonly providerId: PaymentProviderId;
+  readonly source: PurchaseEventSource;
+  readonly projectId: string;
+  readonly organizationId: string;
+  readonly paymentProviderConfigurationId: string;
+  readonly paymentProviderConfigurationProductId: string;
+  readonly personId: string;
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  readonly providerEventType: string;
+  readonly providerTransactionId: Option.Option<string>;
+  readonly providerSubscriptionId: Option.Option<string>;
+  readonly providerWebhookNotificationId: Option.Option<string>;
+  readonly occurredAt: Date;
+  readonly receivedAt: Date;
+  readonly rawProviderPayload: Option.Option<unknown>;
+  /**
+   * Per-event idempotency key derived by the payment-provider boundary from
+   * the underlying provider payload. Required — derivation failure is
+   * propagated as a provider error before this service runs, never silently
+   * swapped for a synthetic key. The outbox UNIQUE on this column is the
+   * service-level cross-source dedup gate.
+   */
+  readonly idempotencyKey: string;
+}
+
+type PurchaseLedgerReservationInput = Pick<
+  PurchaseActionContext,
+  | "idempotencyKey"
+  | "organizationId"
+  | "personId"
+  | "projectId"
+  | "providerEventType"
+  | "providerId"
+  | "rawProviderPayload"
+  | "source"
+>;
+
+interface PurchaseLedgerReservation {
+  readonly id: string;
+}
+
+export interface StartSubscriptionInput extends PurchaseActionContext {
+  readonly money: Option.Option<PurchaseProcessingMoney>;
+  readonly startsAt: Date;
+  readonly expiresAt: Option.Option<Date>;
+  readonly purchasedAt: Date;
+  readonly isTrial: boolean;
+}
+
+export interface RenewSubscriptionInput extends PurchaseActionContext {
+  readonly money: Option.Option<PurchaseProcessingMoney>;
+  readonly startsAt: Date;
+  readonly expiresAt: Option.Option<Date>;
+  readonly renewedAt: Date;
+  readonly isTrial: boolean;
+}
+
+export interface CancelSubscriptionInput extends PurchaseActionContext {
+  readonly canceledAt: Date;
+  readonly cancelAtPeriodEnd: boolean;
+  readonly cancellationReason: Option.Option<string>;
+}
+
+export interface ExpireSubscriptionInput extends PurchaseActionContext {
+  readonly expiredAt: Date;
+}
+
+export interface RevokeSubscriptionInput extends PurchaseActionContext {
+  readonly revokedAt: Date;
+  readonly revocationReason: Option.Option<string>;
+}
+
+export interface CompleteOneTimePurchaseInput extends PurchaseActionContext {
+  readonly money: Option.Option<PurchaseProcessingMoney>;
+  readonly purchasedAt: Date;
+  readonly purchaseType: "one-time" | "consumable";
+}
+
+export interface RefundPurchaseInput extends PurchaseActionContext {
+  readonly refundedAt: Date;
+  readonly refundReason: Option.Option<string>;
+}
+
+export interface RevokePurchaseInput extends PurchaseActionContext {
+  readonly revokedAt: Date;
+  readonly revocationReason: Option.Option<string>;
+}
+
+/**
+ * Apple's `REFUND_REVERSED` notification: a prior refund has been reversed.
+ * The entitlement should be re-granted in the operational projection and an
+ * analytics event emitted.
+ */
+export interface ReverseRefundInput extends PurchaseActionContext {
+  readonly reversedAt: Date;
+}
+
+/**
+ * Apple's `DID_FAIL_TO_RENEW` notification: the subscription entered the
+ * billing-retry loop. Subscription stays `Active` during grace; transition to
+ * `Canceled` happens on `GRACE_PERIOD_EXPIRED` via the existing
+ * `expireSubscription` method.
+ */
+export interface EnterBillingRetryInput extends PurchaseActionContext {
+  readonly billingRetryAt: Date;
+  readonly gracePeriodExpiresAt: Option.Option<Date>;
+}
+
+/**
+ * Apple's `RENEWAL_EXTENDED` / `RENEWAL_EXTENSION` notification: the service
+ * has extended the subscription period (issued via the App Store extend API
+ * or applied automatically).
+ */
+export interface ExtendSubscriptionInput extends PurchaseActionContext {
+  readonly extendedTo: Date;
+}
+
+/**
+ * Apple's `DID_CHANGE_RENEWAL_PREF` notification: the customer selected a
+ * different product for the NEXT billing cycle. We record the intent; the
+ * actual `paymentProviderConfigurationProductId` swap happens when
+ * `renewSubscription` fires for the new product.
+ */
+export interface ChangeRenewalPreferenceInput extends PurchaseActionContext {
+  readonly newProviderProductKey: string;
+  /** Optional resolved id of the new product mapping, when found. */
+  readonly newPaymentProviderConfigurationProductId: Option.Option<string>;
+}
+
+/** Apple's `OFFER_REDEEMED` notification: an offer code or promotion applied. */
+export interface RedeemOfferInput extends PurchaseActionContext {
+  readonly offerId: Option.Option<string>;
+  readonly redeemedAt: Date;
+}
+
+/** Apple's `PRICE_INCREASE` notification: a pending price change is scheduled. */
+export interface RecordPriceIncreaseInput extends PurchaseActionContext {
+  readonly money: Option.Option<PurchaseProcessingMoney>;
+  readonly effectiveAt: Option.Option<Date>;
+}
+
+/**
+ * Apple's `DID_CHANGE_RENEWAL_STATUS` subtype `AUTO_RENEW_ENABLED`: the
+ * customer un-canceled. Clears `cancelAtPeriodEnd` / `canceledAt`.
+ */
+export interface ResumeAutoRenewInput extends PurchaseActionContext {
+  readonly resumedAt: Date;
+}
+
+/**
+ * Annotates what triggered a transfer; recorded on the emitted analytics
+ * events' `transferReason`. `appstore_restore` is the production trigger;
+ * `manual` is reserved for a future admin / support tool.
+ */
+export type SubscriptionTransferTriggerReason = "appstore_restore" | "manual";
+
+/**
+ * Input for {@link PurchaseProcessingService.transferSubscription}.
+ *
+ * Unlike the per-action `record*` methods this involves two persons, and the
+ * resolved {@link SubscriptionTransferMode} is passed in already decided by
+ * the provider boundary — `PurchaseProcessingService` stays provider-neutral
+ * and never reads provider configuration. `fromPersonId` / `toPersonId` are
+ * both fully intact identified persons; a transfer is NOT an identity merge.
+ */
+export interface TransferSubscriptionInput {
+  readonly subscriptionId: string;
+  readonly fromPersonId: string;
+  readonly toPersonId: string;
+  readonly transferMode: SubscriptionTransferMode;
+  readonly providerId: PaymentProviderId;
+  readonly paymentProviderConfigurationId: string;
+  readonly projectId: string;
+  readonly organizationId: string;
+  readonly occurredAt: Date;
+  readonly source: PurchaseEventSource;
+  readonly triggerReason: SubscriptionTransferTriggerReason;
+}
+
+/**
+ * Input for {@link PurchaseProcessingService.transferPurchase} — the
+ * non-consumable one-time purchase analogue of {@link TransferSubscriptionInput}.
+ */
+export interface TransferPurchaseInput {
+  readonly purchaseId: string;
+  readonly fromPersonId: string;
+  readonly toPersonId: string;
+  readonly transferMode: SubscriptionTransferMode;
+  readonly providerId: PaymentProviderId;
+  readonly paymentProviderConfigurationId: string;
+  readonly projectId: string;
+  readonly organizationId: string;
+  readonly occurredAt: Date;
+  readonly source: PurchaseEventSource;
+  readonly triggerReason: SubscriptionTransferTriggerReason;
+}
+
+const purchaseTypeFor = (variant: "one-time" | "consumable") =>
+  variant === "consumable" ? PurchaseType.OneTimeConsumable : PurchaseType.OneTime;
+
+/**
+ * Structural shape of the stored money columns on a `transaction` row. Defined
+ * locally so the reconstruction helper doesn't depend on the DB row type
+ * directly (the db package exports a `Transaction` name that collides with
+ * the driver transaction type).
+ */
+interface StoredTransactionMoneyFields {
+  readonly currency: string;
+  readonly storefront: string | null;
+  readonly grossAmount: number;
+  readonly storeCommissionAmount: number;
+  readonly taxAmount: number;
+  readonly proceedsAmount: number;
+  readonly proceedsAfterTaxAmount: number;
+  readonly grossAmountUsd: number | null;
+  readonly storeCommissionAmountUsd: number | null;
+  readonly taxAmountUsd: number | null;
+  readonly proceedsAmountUsd: number | null;
+  readonly proceedsAfterTaxAmountUsd: number | null;
+  readonly exchangeRate: number | null;
+}
+
+/**
+ * Reconstructs a {@link PurchaseProcessingMoney} from the stored breakdown on
+ * a transaction row. Used by refund / reverse-refund / revoke paths to
+ * recover the original purchase amounts — these events don't carry money on
+ * their inbound payload (Apple mutates the existing transaction in-place
+ * rather than issuing a new transactionId), so the analytics mapper has to
+ * pull the amounts back from the operational projection.
+ *
+ * The reconstructed record always has non-negative amounts; the mapper layer
+ * applies the sign convention.
+ */
+/**
+ * Stored-row money fields come back as raw `number` / `string` from Drizzle;
+ * the branded domain types are an in-memory invariant we trust at this
+ * boundary (the DB columns enforce the same shape via CHECK constraints).
+ */
+const minor = (n: number) => n as MinorAmount;
+const usdRate = (n: number) => n as ExchangeRate;
+const currency = (s: string) => s as CurrencyCode;
+
+const moneyFromStoredTransaction = (row: StoredTransactionMoneyFields): PurchaseProcessingMoney => {
+  const usd =
+    row.exchangeRate !== null &&
+    row.grossAmountUsd !== null &&
+    row.storeCommissionAmountUsd !== null &&
+    row.taxAmountUsd !== null &&
+    row.proceedsAmountUsd !== null &&
+    row.proceedsAfterTaxAmountUsd !== null
+      ? Option.some(
+          new PurchaseProcessingMoneyUsd({
+            exchangeRate: usdRate(row.exchangeRate),
+            grossAmount: minor(row.grossAmountUsd),
+            proceedsAfterTaxAmount: minor(row.proceedsAfterTaxAmountUsd),
+            proceedsAmount: minor(row.proceedsAmountUsd),
+            storeCommissionAmount: minor(row.storeCommissionAmountUsd),
+            taxAmount: minor(row.taxAmountUsd),
+          }),
+        )
+      : Option.none();
+  return new PurchaseProcessingMoney({
+    currency: currency(row.currency),
+    grossAmount: minor(row.grossAmount),
+    proceedsAfterTaxAmount: minor(row.proceedsAfterTaxAmount),
+    proceedsAmount: minor(row.proceedsAmount),
+    storeCommissionAmount: minor(row.storeCommissionAmount),
+    storefront: Option.fromNullishOr(row.storefront),
+    taxAmount: minor(row.taxAmount),
+    usd,
+  });
+};
+
+const compactSpanAttributes = (attributes: Record<string, unknown | undefined>) =>
+  Object.fromEntries(Object.entries(attributes).filter(([, value]) => value !== undefined));
+
+const optionSpanAttribute = <A>(
+  value: Option.Option<A>,
+  map: (value: A) => unknown = (some) => some,
+): unknown | undefined => (Option.isSome(value) ? map(value.value) : undefined);
+
+const purchaseProcessingResultKind = (result: PurchaseProcessingResult) =>
+  result.idempotent
+    ? "idempotent"
+    : result.analyticsEventIds.length === 0 &&
+        Option.isNone(result.purchaseId) &&
+        Option.isNone(result.subscriptionId) &&
+        Option.isNone(result.transactionId)
+      ? "ignored"
+      : "applied";
+
+const purchaseActionSpanAttributes = (input: PurchaseActionContext) =>
+  compactSpanAttributes({
+    "purchase.idempotency_key": input.idempotencyKey,
+    "purchase.payment_provider_configuration_id": input.paymentProviderConfigurationId,
+    "purchase.person_id": input.personId,
+    "purchase.project_id": input.projectId,
+    "purchase.provider_event_type": input.providerEventType,
+    "purchase.provider_subscription_id": optionSpanAttribute(input.providerSubscriptionId),
+    "purchase.provider_transaction_id": optionSpanAttribute(input.providerTransactionId),
+    "purchase.source": input.source,
+  });
+
+const purchaseProcessingResultSpanAttributes = (result: PurchaseProcessingResult) =>
+  compactSpanAttributes({
+    "purchase.purchase_id": optionSpanAttribute(result.purchaseId),
+    "purchase.result": purchaseProcessingResultKind(result),
+    "purchase.subscription_id": optionSpanAttribute(result.subscriptionId),
+    "purchase.transaction_id": optionSpanAttribute(result.transactionId),
+  });
+
+const transferSpanAttributes = (input: TransferSubscriptionInput | TransferPurchaseInput) =>
+  compactSpanAttributes({
+    "purchase.payment_provider_configuration_id": input.paymentProviderConfigurationId,
+    "purchase.project_id": input.projectId,
+    "purchase.source": input.source,
+    "purchase.transfer.from_person_id": input.fromPersonId,
+    "purchase.transfer.mode": input.transferMode,
+    "purchase.transfer.resource_id":
+      "purchaseId" in input ? input.purchaseId : input.subscriptionId,
+    "purchase.transfer.to_person_id": input.toPersonId,
+  });
+
+export class PurchaseProcessingService extends Context.Service<PurchaseProcessingService>()(
+  "PurchaseProcessingService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const perkGrantService = yield* PerkGrantService;
+
+      // ==================== Inline DB query helpers ====================
+
+      const findTransactionByProviderTransactionId = (
+        tx: DbTransaction,
+        input: {
+          readonly paymentProviderConfigurationProductId: string;
+          readonly storeTransactionId: string;
+        },
+      ) =>
+        Effect.gen(function* () {
+          const row = yield* tx.query.transactions.findFirst({
+            where: {
+              paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+              storeTransactionId: input.storeTransactionId,
+            },
+          });
+          return Option.fromNullishOr(row);
+        });
+
+      const findSubscriptionByStoreSubscriptionId = (
+        tx: DbTransaction,
+        input: {
+          readonly storeSubscriptionId: string;
+          readonly paymentProviderConfigurationProductId: string;
+        },
+      ) =>
+        Effect.gen(function* () {
+          const row = yield* tx.query.subscriptions.findFirst({
+            where: {
+              storeSubscriptionId: input.storeSubscriptionId,
+              paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+            },
+          });
+          return Option.fromNullishOr(row);
+        });
+
+      /**
+       * Watermark-guarded subscription update. The UPDATE additionally
+       * requires `last_event_occurred_at IS NULL OR last_event_occurred_at <=
+       * occurredAt` so an out-of-order delivery can't silently overwrite
+       * fresher state. The column is bumped to `occurredAt` whenever the
+       * UPDATE wins, so subsequent older events are rejected.
+       * `affectedRows === 0` is a non-fatal signal that the projection was
+       * already at-or-past this event's occurrence time.
+       */
+      const updateSubscriptionIfFresher = (
+        tx: DbTransaction,
+        input: Omit<Partial<DbSubscription>, "id" | "lastEventOccurredAt"> & {
+          readonly id: string;
+          readonly occurredAt: Date;
+        },
+      ) =>
+        Effect.gen(function* () {
+          const { occurredAt, id, ...rest } = input;
+          const result = yield* tx
+            .update(subscriptions)
+            .set({ ...rest, lastEventOccurredAt: occurredAt })
+            .where(
+              and(
+                eq(subscriptions.id, id),
+                or(
+                  isNull(subscriptions.lastEventOccurredAt),
+                  lte(subscriptions.lastEventOccurredAt, occurredAt),
+                ),
+              ),
+            )
+            .returning({ id: subscriptions.id });
+          return { affectedRows: result.length };
+        });
+
+      /**
+       * Inserts a ledger row, treating a UNIQUE-key collision on
+       * `idempotency_key` as success rather than an error. Uses MySQL's
+       * `ON DUPLICATE KEY UPDATE id = id` for a no-op upsert, then reads the
+       * surviving row back to decide who won; returns `{ inserted }` so callers
+       * can distinguish the fresh-write path from the duplicate-collision path.
+       *
+       * We deliberately do NOT infer `inserted` from `affectedRows`. MySQL
+       * reports 1 for a fresh insert and 0 for a no-op `ON DUPLICATE KEY UPDATE`,
+       * but PlanetScale/Vitess reports 1 for both, so `affectedRows === 1` can't
+       * tell an insert from a collision. Instead we compare the surviving row's
+       * id to the one we tried to insert: the UNIQUE constraint serializes
+       * concurrent writers, so the row keeps the *first* writer's id. A match
+       * means we won the insert; a mismatch (or a different existing id) means
+       * another caller inserted first — a duplicate. This is driver-agnostic and
+       * race-safe.
+       */
+      const insertPurchaseLedgerRowIfAbsent = (
+        tx: DbTransaction,
+        input: {
+          readonly id: string;
+          readonly idempotencyKey: string;
+          readonly organizationId: string;
+          readonly personId: string;
+          readonly projectId: string;
+          readonly providerEventType: string;
+          readonly providerId: string;
+          readonly rawProviderPayload: unknown;
+          readonly source: string;
+          readonly eventsPayload: ReadonlyArray<object>;
+          readonly resultPayload: object;
+        },
+      ) =>
+        Effect.gen(function* () {
+          yield* tx
+            .insert(purchaseLedger)
+            .values(input)
+            .onConflictDoNothing({ target: purchaseLedger.idempotencyKey });
+          const surviving = yield* tx.query.purchaseLedger.findFirst({
+            columns: { id: true },
+            where: { idempotencyKey: input.idempotencyKey },
+          });
+          return { inserted: surviving?.id === input.id };
+        });
+
+      // ==================== Internal helpers ====================
+
+      /**
+       * Stamps the concrete internal row ids carried by a finished
+       * {@link PurchaseProcessingResult} onto the current span. Guards each
+       * `Option` so absent ids are never emitted as `"null"`.
+       */
+      const annotatePurchaseResultIds = (result: PurchaseProcessingResult) =>
+        Effect.gen(function* () {
+          yield* Effect.annotateCurrentSpan("voidhash.person.id", result.personId);
+          if (Option.isSome(result.transactionId)) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.transaction.id",
+              result.transactionId.value,
+            );
+          }
+          if (Option.isSome(result.subscriptionId)) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.subscription.id",
+              result.subscriptionId.value,
+            );
+          }
+          if (Option.isSome(result.purchaseId)) {
+            yield* Effect.annotateCurrentSpan("voidhash.purchase.id", result.purchaseId.value);
+          }
+        });
+
+      const _withPurchaseActionObservability = <
+        A extends PurchaseProcessingResult,
+        E,
+        R,
+        I extends PurchaseActionContext,
+      >(
+        effect: Effect.Effect<A, E, R>,
+        input: I,
+      ) =>
+        Effect.gen(function* () {
+          yield* Effect.annotateCurrentSpan(purchaseActionSpanAttributes(input));
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", input.providerId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          yield* Effect.annotateCurrentSpan("voidhash.person.id", input.personId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.purchase.idempotency_key",
+            input.idempotencyKey,
+          );
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.purchase.event_type",
+            input.providerEventType,
+          );
+          yield* Effect.annotateCurrentSpan("voidhash.purchase.source", input.source);
+          if (Option.isSome(input.providerTransactionId)) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.transaction.provider_transaction_id",
+              input.providerTransactionId.value,
+            );
+          }
+          if (Option.isSome(input.providerSubscriptionId)) {
+            yield* Effect.annotateCurrentSpan(
+              "voidhash.subscription.provider_subscription_id",
+              input.providerSubscriptionId.value,
+            );
+          }
+          const result = yield* effect;
+          yield* Effect.annotateCurrentSpan(purchaseProcessingResultSpanAttributes(result));
+          yield* annotatePurchaseResultIds(result);
+          return result;
+        });
+
+      const _withTransferObservability = <
+        A extends PurchaseProcessingResult,
+        E,
+        R,
+        I extends TransferSubscriptionInput | TransferPurchaseInput,
+      >(
+        effect: Effect.Effect<A, E, R>,
+        input: I,
+      ) =>
+        Effect.gen(function* () {
+          yield* Effect.annotateCurrentSpan(transferSpanAttributes(input));
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", input.providerId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.configuration_id",
+            input.paymentProviderConfigurationId,
+          );
+          yield* Effect.annotateCurrentSpan("voidhash.purchase.source", input.source);
+          yield* Effect.annotateCurrentSpan("voidhash.transfer.mode", input.transferMode);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.transfer.resource_id",
+            "purchaseId" in input ? input.purchaseId : input.subscriptionId,
+          );
+          yield* Effect.annotateCurrentSpan("voidhash.person.from_id", input.fromPersonId);
+          yield* Effect.annotateCurrentSpan("voidhash.person.to_id", input.toPersonId);
+          const result = yield* effect;
+          yield* Effect.annotateCurrentSpan(purchaseProcessingResultSpanAttributes(result));
+          yield* annotatePurchaseResultIds(result);
+          return result;
+        });
+
+      /**
+       * Resolves and validates the per-action preamble shared by every public
+       * method: the configured product mapping (with the joined product row)
+       * and the affected person.
+       */
+      const _resolveContext = Effect.fn("_resolveContext")(function* (
+        input: PurchaseActionContext,
+      ) {
+        const db = yield* Db;
+        const configurationProductRow =
+          yield* db.query.paymentProviderConfigurationProducts.findFirst({
+            where: { id: input.paymentProviderConfigurationProductId },
+            with: { product: true },
+          });
+        const configurationProductOp = Option.fromNullishOr(configurationProductRow);
+        if (Option.isNone(configurationProductOp)) {
+          return yield* new PurchaseProcessingProductNotMappedError({
+            paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+            paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+          });
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.payment_provider.product_id",
+          configurationProductOp.value.id,
+        );
+        if (configurationProductOp.value.product?.id) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.product.id",
+            configurationProductOp.value.product.id,
+          );
+        }
+        const personRow = yield* db.query.persons.findFirst({ where: { id: input.personId } });
+        const personOp = Option.fromNullishOr(personRow);
+        if (Option.isNone(personOp) || personOp.value.projectId !== input.projectId) {
+          return yield* new PurchaseProcessingServiceError({
+            cause: `Resolved person ${input.personId} not found for project ${input.projectId}`,
+          });
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", personOp.value.id);
+        if (personOp.value.primaryDistinctId) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            personOp.value.primaryDistinctId,
+          );
+        }
+        return {
+          configurationProduct: configurationProductOp.value,
+          personId: personOp.value.id,
+        };
+      });
+
+      const _syncPurchasePerks = Effect.fn("_syncPurchasePerks")(function* (
+        tx: DbTransaction,
+        personId: string,
+      ) {
+        return yield* perkGrantService.syncUnlockedPerks(tx, personId);
+      });
+
+      const _resolveDistinctId = Effect.fn("_resolveDistinctId")(function* (
+        tx: DbTransaction,
+        personId: string,
+      ) {
+        const personRow = yield* tx.query.persons.findFirst({ where: { id: personId } });
+        const personOp = Option.fromNullishOr(personRow);
+        return Option.match(personOp, {
+          onNone: () => personId,
+          onSome: (person) => person.primaryDistinctId ?? personId,
+        });
+      });
+
+      const _emptyReservedResult = (personId: string) =>
+        new PurchaseProcessingResult({
+          analyticsEventIds: [],
+          changedGrantIds: [],
+          idempotent: true,
+          personId,
+          purchaseId: Option.none(),
+          subscriptionId: Option.none(),
+          transactionId: Option.none(),
+        });
+
+      /**
+       * Claims the purchase-ledger idempotency key before operational writes
+       * run. On a concurrent duplicate, MySQL serializes on the UNIQUE key;
+       * the loser reads and returns the first caller's finalized result.
+       */
+      const _reservePurchaseLedger = Effect.fn("_reservePurchaseLedger")(function* (
+        tx: DbTransaction,
+        input: PurchaseLedgerReservationInput,
+      ) {
+        const id = generateId("purchaseLedger");
+        const inserted = yield* insertPurchaseLedgerRowIfAbsent(tx, {
+          eventsPayload: [],
+          id,
+          idempotencyKey: input.idempotencyKey,
+          organizationId: input.organizationId,
+          personId: input.personId,
+          projectId: input.projectId,
+          providerEventType: input.providerEventType,
+          providerId: input.providerId,
+          rawProviderPayload: Option.getOrNull(input.rawProviderPayload),
+          resultPayload: encodePurchaseProcessingResult(_emptyReservedResult(input.personId)),
+          source: input.source,
+        });
+
+        if (inserted.inserted) {
+          yield* Effect.annotateCurrentSpan({
+            "purchase.ledger_claim": "reserved",
+            "purchase.ledger_id": id,
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.id", id);
+          return { _tag: "reserved", reservation: { id } } as const;
+        }
+
+        const priorRow = yield* tx.query.purchaseLedger.findFirst({
+          where: { idempotencyKey: input.idempotencyKey },
+        });
+        const prior = Option.fromNullishOr(priorRow);
+        if (Option.isSome(prior)) {
+          yield* Effect.annotateCurrentSpan({
+            "purchase.ledger_claim": "duplicate",
+            "purchase.ledger_id": prior.value.id,
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.id", prior.value.id);
+          return {
+            _tag: "duplicate",
+            result: decodePurchaseProcessingResult(prior.value.resultPayload),
+          } as const;
+        }
+
+        return yield* new PurchaseProcessingServiceError({
+          cause: `purchase ledger reservation lost but no row was readable (idempotencyKey=${input.idempotencyKey})`,
+        });
+      });
+
+      const _finalizeReservedLedgerResult = Effect.fn("_finalizeReservedLedgerResult")(function* (
+        tx: DbTransaction,
+        reservation: PurchaseLedgerReservation,
+        result: PurchaseProcessingResult,
+      ) {
+        yield* Effect.annotateCurrentSpan({ "purchase.ledger_id": reservation.id });
+        yield* Effect.annotateCurrentSpan("voidhash.purchase_ledger.id", reservation.id);
+        yield* tx
+          .update(purchaseLedger)
+          .set({
+            eventsPayload: [],
+            resultPayload: encodePurchaseProcessingResult(result),
+          })
+          .where(eq(purchaseLedger.id, reservation.id))
+          .returning({ id: purchaseLedger.id });
+        return result;
+      });
+
+      /**
+       * Builds the mapped analytics events, assembles the
+       * `PurchaseProcessingResult` with the produced `eventId`s, and persists
+       * both into the `purchase_ledger` table inside the surrounding
+       * `transaction`. The ledger row is the durability handoff to
+       * {@link PurchaseLedgerWorkerService}, which drains the table by
+       * re-dispatching each row's `eventsPayload` onto the shared
+       * analytics-ingest queue.
+       */
+      const _enqueueAnalyticsAndBuildResult = Effect.fn("_enqueueAnalyticsAndBuildResult")(
+        function* (
+          tx: DbTransaction,
+          input: {
+            readonly projectId: string;
+            readonly organizationId: string;
+            readonly personId: string;
+            readonly providerId: PaymentProviderId;
+            readonly providerEventType: string;
+            readonly idempotencyKey: string;
+            readonly rawProviderPayload: Option.Option<unknown>;
+            readonly reservation?: PurchaseLedgerReservation;
+            readonly source: PurchaseEventSource;
+            readonly buildEvents: (
+              cfg: RevenueAnalyticsMapperContext,
+            ) => ReadonlyArray<InternalAnalyticsEvent>;
+            readonly buildResult: (
+              analyticsEventIds: ReadonlyArray<string>,
+            ) => PurchaseProcessingResult;
+          },
+        ) {
+          const apiKeyRow = yield* tx.query.apiKeys.findFirst({
+            columns: { key: true },
+            where: { projectId: input.projectId, isPublic: true },
+          });
+          const token = apiKeyRow ? Option.some(apiKeyRow.key) : Option.none<string>();
+          const resolvedToken = Option.getOrElse(
+            token,
+            () => `vh_server_revenue_${input.projectId}`,
+          );
+          // Resolve the person's primary distinct id so single-person revenue
+          // events carry a REAL distinct id (not the personId) — late merges
+          // then re-attribute them via the identity overrides, like SDK events.
+          // Transfer events already pass real source / target distinct ids.
+          const distinctId = yield* _resolveDistinctId(tx, input.personId);
+          const events = input.buildEvents({
+            distinctId,
+            idempotencyKey: input.idempotencyKey,
+            organizationId: input.organizationId,
+            projectId: input.projectId,
+            token: resolvedToken,
+          });
+          const analyticsEventIds = events.map((e) => e.eventId);
+          const result = input.buildResult(analyticsEventIds);
+          const resultPayload = encodePurchaseProcessingResult(result);
+          yield* Effect.annotateCurrentSpan({
+            ...purchaseProcessingResultSpanAttributes(result),
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+          yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", input.providerId);
+          yield* Effect.annotateCurrentSpan("voidhash.person.id", input.personId);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.purchase.event_type",
+            input.providerEventType,
+          );
+          yield* Effect.annotateCurrentSpan("voidhash.purchase.source", input.source);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.purchase.idempotency_key",
+            input.idempotencyKey,
+          );
+          yield* Effect.annotateCurrentSpan("voidhash.analytics.event_count", events.length);
+          yield* annotatePurchaseResultIds(result);
+
+          if (input.reservation) {
+            yield* tx
+              .update(purchaseLedger)
+              .set({
+                eventsPayload: events as ReadonlyArray<object>,
+                resultPayload,
+              })
+              .where(eq(purchaseLedger.id, input.reservation.id))
+              .returning({ id: purchaseLedger.id });
+            return result;
+          }
+
+          if (events.length > 0) {
+            yield* insertPurchaseLedgerRowIfAbsent(tx, {
+              eventsPayload: events as ReadonlyArray<object>,
+              id: generateId("purchaseLedger"),
+              idempotencyKey: input.idempotencyKey,
+              organizationId: input.organizationId,
+              personId: input.personId,
+              projectId: input.projectId,
+              providerEventType: input.providerEventType,
+              providerId: input.providerId,
+              rawProviderPayload: Option.getOrNull(input.rawProviderPayload),
+              resultPayload,
+              source: input.source,
+            });
+          }
+          return result;
+        },
+      );
+
+      /**
+       * Finds or creates the transaction row for a financial action. Returns
+       * `Option.none` when no `providerTransactionId` is available (the row
+       * cannot be uniquely keyed). Idempotent on duplicate provider
+       * transaction ids.
+       */
+      const _findOrCreateTransaction = Effect.fn("_findOrCreateTransaction")(function* (
+        tx: DbTransaction,
+        input: {
+          readonly money: Option.Option<PurchaseProcessingMoney>;
+          readonly providerTransactionId: Option.Option<string>;
+          readonly paymentProviderConfigurationProductId: string;
+          readonly personId: string;
+          readonly providerEnvironment: ProviderEnvironmentValue;
+          readonly occurredAt: Date;
+        },
+      ) {
+        if (Option.isNone(input.providerTransactionId)) {
+          return { id: Option.none<string>(), alreadyExisted: false };
+        }
+        const providerTransactionId = input.providerTransactionId.value;
+        const existing = yield* findTransactionByProviderTransactionId(tx, {
+          paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+          storeTransactionId: providerTransactionId,
+        });
+        if (Option.isSome(existing)) {
+          yield* Effect.annotateCurrentSpan({
+            "purchase.transaction_id": existing.value.id,
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.transaction.id", existing.value.id);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.transaction.provider_transaction_id",
+            providerTransactionId,
+          );
+          return { id: Option.some(existing.value.id), alreadyExisted: true };
+        }
+        const money = Option.getOrUndefined(input.money);
+        const usd = money ? Option.getOrUndefined(money.usd) : undefined;
+        const transaction: InsertTransaction = {
+          amount: money?.grossAmount ?? 0,
+          amountUsd: usd?.grossAmount,
+          currency: money?.currency ?? "USD",
+          exchangeRate: usd?.exchangeRate,
+          grossAmount: money?.grossAmount ?? 0,
+          grossAmountUsd: usd?.grossAmount,
+          id: generateId("transaction"),
+          lastEventOccurredAt: input.occurredAt,
+          occurredAt: input.occurredAt,
+          paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+          personId: input.personId,
+          proceedsAfterTaxAmount: money?.proceedsAfterTaxAmount ?? 0,
+          proceedsAfterTaxAmountUsd: usd?.proceedsAfterTaxAmount,
+          proceedsAmount: money?.proceedsAmount ?? 0,
+          proceedsAmountUsd: usd?.proceedsAmount,
+          providerEnvironment: input.providerEnvironment,
+          storeCommissionAmount: money?.storeCommissionAmount ?? 0,
+          storeCommissionAmountUsd: usd?.storeCommissionAmount,
+          storeTransactionId: providerTransactionId,
+          storefront: money ? Option.getOrNull(money.storefront) : null,
+          taxAmount: money?.taxAmount ?? 0,
+          taxAmountUsd: usd?.taxAmount,
+        };
+        yield* tx.insert(transactions).values(transaction);
+        yield* Effect.annotateCurrentSpan({
+          "purchase.transaction_id": transaction.id,
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.transaction.id", transaction.id);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.transaction.provider_transaction_id",
+          providerTransactionId,
+        );
+        return { id: Option.some(transaction.id), alreadyExisted: false };
+      });
+
+      const resolveStoreSubscriptionId = (input: PurchaseActionContext): Option.Option<string> =>
+        Option.firstSomeOf([input.providerSubscriptionId, input.providerTransactionId]);
+
+      const resolvePurchaseProviderKey = (input: PurchaseActionContext): Option.Option<string> =>
+        Option.firstSomeOf([input.providerTransactionId, input.providerSubscriptionId]);
+
+      const subscriptionIdentifierError = (input: PurchaseActionContext) =>
+        new PurchaseProcessingServiceError({
+          cause: `Subscription event has no subscription identifier (providerEventType=${input.providerEventType}, providerWebhookNotificationId=${Option.getOrElse(input.providerWebhookNotificationId, () => "—")})`,
+        });
+
+      const purchaseIdentifierError = (input: PurchaseActionContext) =>
+        new PurchaseProcessingServiceError({
+          cause: `Purchase event has no purchase identifier (providerEventType=${input.providerEventType}, providerWebhookNotificationId=${Option.getOrElse(input.providerWebhookNotificationId, () => "—")})`,
+        });
+
+      const resolveInitialTransactionId = (input: PurchaseActionContext): Option.Option<string> =>
+        Option.firstSomeOf([input.providerSubscriptionId, input.providerTransactionId]);
+
+      const resolveLatestTransactionId = (input: PurchaseActionContext): Option.Option<string> =>
+        Option.firstSomeOf([input.providerTransactionId, input.providerSubscriptionId]);
+
+      // ==================== Public methods ====================
+
+      const startSubscription = Effect.fn("startSubscription")(
+        function* (input: StartSubscriptionInput) {
+          const ctx = yield* _resolveContext(input);
+          const storeSubscriptionIdOp = resolveStoreSubscriptionId(input);
+          if (Option.isNone(storeSubscriptionIdOp)) {
+            return yield* subscriptionIdentifierError(input);
+          }
+          const storeSubscriptionId = storeSubscriptionIdOp.value;
+          const productId = ctx.configurationProduct.id;
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const [transaction, existingSubscription] = yield* Effect.all([
+                _findOrCreateTransaction(tx, {
+                  money: input.money,
+                  occurredAt: input.occurredAt,
+                  paymentProviderConfigurationProductId: productId,
+                  personId,
+                  providerEnvironment: input.providerEnvironment,
+                  providerTransactionId: input.providerTransactionId,
+                }),
+                findSubscriptionByStoreSubscriptionId(tx, {
+                  paymentProviderConfigurationProductId: productId,
+                  storeSubscriptionId,
+                }),
+              ]);
+
+              let subscriptionId: string;
+              let subscriptionAlreadyExisted: boolean;
+
+              if (Option.isNone(existingSubscription)) {
+                const subscription: InsertSubscription = {
+                  cancelAtPeriodEnd: false,
+                  canceledAt: null,
+                  expiresAt: Option.getOrNull(input.expiresAt),
+                  id: generateId("subscription"),
+                  initialTransactionId: Option.getOrElse(
+                    resolveInitialTransactionId(input),
+                    () => storeSubscriptionId,
+                  ),
+                  isTrial: input.isTrial,
+                  lastEventOccurredAt: input.occurredAt,
+                  latestTransactionId: Option.getOrElse(
+                    resolveLatestTransactionId(input),
+                    () => storeSubscriptionId,
+                  ),
+                  paymentProviderConfigurationProductId: productId,
+                  personId,
+                  providerEnvironment: input.providerEnvironment,
+                  purchasedAt: input.purchasedAt,
+                  startsAt: input.startsAt,
+                  status: SubscriptionStatus.Active,
+                  storeSubscriptionId,
+                };
+                const db = tx;
+                yield* db.insert(subscriptions).values(subscription);
+                subscriptionId = subscription.id;
+                subscriptionAlreadyExisted = false;
+              } else {
+                subscriptionId = existingSubscription.value.id;
+                subscriptionAlreadyExisted = true;
+              }
+              const changedGrantIds = yield* _syncPurchasePerks(tx, personId);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toStartedAnalyticsInputs(input, { personId, transactionId: transaction.id }, cfg),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: subscriptionAlreadyExisted || transaction.alreadyExisted,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.some(subscriptionId),
+                    transactionId: transaction.id,
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const renewSubscription = Effect.fn("renewSubscription")(
+        function* (input: RenewSubscriptionInput) {
+          const ctx = yield* _resolveContext(input);
+          const storeSubscriptionIdOp = resolveStoreSubscriptionId(input);
+          if (Option.isNone(storeSubscriptionIdOp)) {
+            return yield* subscriptionIdentifierError(input);
+          }
+          const storeSubscriptionId = storeSubscriptionIdOp.value;
+          const productId = ctx.configurationProduct.id;
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const transaction = yield* _findOrCreateTransaction(tx, {
+                money: input.money,
+                occurredAt: input.occurredAt,
+                paymentProviderConfigurationProductId: productId,
+                personId,
+                providerEnvironment: input.providerEnvironment,
+                providerTransactionId: input.providerTransactionId,
+              });
+              // Renewal lookup that also follows a pending product-change
+              // intent. App Store renewals after an upgrade/downgrade arrive
+              // under the new provider product, while the existing
+              // subscription row is still keyed by the previous product until
+              // this renewal moves it.
+              const db = tx;
+              const currentProductMatch = yield* db.query.subscriptions.findFirst({
+                where: {
+                  storeSubscriptionId,
+                  paymentProviderConfigurationProductId: productId,
+                },
+              });
+              const existing = currentProductMatch
+                ? Option.some(currentProductMatch)
+                : Option.fromNullishOr(
+                    yield* db.query.subscriptions.findFirst({
+                      where: {
+                        storeSubscriptionId,
+                        pendingProductChangeId: productId,
+                      },
+                    }),
+                  );
+              let subscriptionId: string;
+              if (Option.isNone(existing)) {
+                const subscription: InsertSubscription = {
+                  cancelAtPeriodEnd: false,
+                  canceledAt: null,
+                  expiresAt: Option.getOrNull(input.expiresAt),
+                  id: generateId("subscription"),
+                  initialTransactionId: Option.getOrElse(
+                    resolveInitialTransactionId(input),
+                    () => storeSubscriptionId,
+                  ),
+                  isTrial: input.isTrial,
+                  lastEventOccurredAt: input.occurredAt,
+                  latestTransactionId: Option.getOrElse(
+                    resolveLatestTransactionId(input),
+                    () => storeSubscriptionId,
+                  ),
+                  paymentProviderConfigurationProductId: productId,
+                  personId,
+                  providerEnvironment: input.providerEnvironment,
+                  purchasedAt: input.renewedAt,
+                  startsAt: input.startsAt,
+                  status: SubscriptionStatus.Active,
+                  storeSubscriptionId,
+                };
+                yield* db.insert(subscriptions).values(subscription);
+                subscriptionId = subscription.id;
+              } else {
+                const completesPendingProductChange =
+                  existing.value.pendingProductChangeId === productId;
+                const updated = yield* updateSubscriptionIfFresher(tx, {
+                  cancelAtPeriodEnd: false,
+                  canceledAt: null,
+                  expiresAt: Option.getOrNull(input.expiresAt),
+                  id: existing.value.id,
+                  isTrial: input.isTrial,
+                  latestTransactionId: Option.getOrElse(
+                    resolveLatestTransactionId(input),
+                    () => storeSubscriptionId,
+                  ),
+                  occurredAt: input.occurredAt,
+                  ...(completesPendingProductChange
+                    ? {
+                        paymentProviderConfigurationProductId: productId,
+                        pendingProductChangeId: null,
+                      }
+                    : {}),
+                  startsAt: input.startsAt,
+                  status: SubscriptionStatus.Active,
+                  updatedAt: new Date(),
+                });
+                if (updated.affectedRows === 0) {
+                  yield* Effect.logInfo(
+                    `renewSubscription: stale event; watermark guard rejected projection update (subscriptionId=${existing.value.id}, occurredAt=${input.occurredAt.toISOString()})`,
+                  );
+                }
+                subscriptionId = existing.value.id;
+              }
+              const changedGrantIds = yield* _syncPurchasePerks(tx, personId);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toRenewedAnalyticsInputs(input, { personId, transactionId: transaction.id }, cfg),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: transaction.alreadyExisted,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.some(subscriptionId),
+                    transactionId: transaction.id,
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const cancelSubscription = Effect.fn("cancelSubscription")(
+        function* (input: CancelSubscriptionInput) {
+          const ctx = yield* _resolveContext(input);
+          const storeSubscriptionIdOp = resolveStoreSubscriptionId(input);
+          if (Option.isNone(storeSubscriptionIdOp)) {
+            return yield* subscriptionIdentifierError(input);
+          }
+          const storeSubscriptionId = storeSubscriptionIdOp.value;
+          const productId = ctx.configurationProduct.id;
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const existing = yield* findSubscriptionByStoreSubscriptionId(tx, {
+                paymentProviderConfigurationProductId: productId,
+                storeSubscriptionId,
+              });
+              if (Option.isNone(existing)) {
+                return yield* _finalizeReservedLedgerResult(
+                  tx,
+                  ledgerClaim.reservation,
+                  new PurchaseProcessingResult({
+                    analyticsEventIds: [],
+                    changedGrantIds: [],
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                );
+              }
+              const updated = yield* updateSubscriptionIfFresher(tx, {
+                cancelAtPeriodEnd: input.cancelAtPeriodEnd,
+                canceledAt: input.canceledAt,
+                cancellationReason: Option.getOrNull(input.cancellationReason),
+                id: existing.value.id,
+                occurredAt: input.occurredAt,
+                status: input.cancelAtPeriodEnd
+                  ? existing.value.status
+                  : subscriptionStatusForInactiveEvent(),
+                updatedAt: new Date(),
+              });
+              if (updated.affectedRows === 0) {
+                yield* Effect.logInfo(
+                  `cancelSubscription: stale event; watermark guard rejected projection update (subscriptionId=${existing.value.id}, occurredAt=${input.occurredAt.toISOString()})`,
+                );
+              }
+              const changedGrantIds = yield* _syncPurchasePerks(tx, personId);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toCanceledAnalyticsInputs(
+                    input,
+                    { personId, subscriptionId: Option.some(existing.value.id) },
+                    cfg,
+                  ),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.some(existing.value.id),
+                    transactionId: Option.none(),
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const expireSubscription = Effect.fn("expireSubscription")(
+        function* (input: ExpireSubscriptionInput) {
+          const ctx = yield* _resolveContext(input);
+          const storeSubscriptionIdOp = resolveStoreSubscriptionId(input);
+          if (Option.isNone(storeSubscriptionIdOp)) {
+            return yield* subscriptionIdentifierError(input);
+          }
+          const storeSubscriptionId = storeSubscriptionIdOp.value;
+          const productId = ctx.configurationProduct.id;
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const existing = yield* findSubscriptionByStoreSubscriptionId(tx, {
+                paymentProviderConfigurationProductId: productId,
+                storeSubscriptionId,
+              });
+              if (Option.isNone(existing)) {
+                return yield* _finalizeReservedLedgerResult(
+                  tx,
+                  ledgerClaim.reservation,
+                  new PurchaseProcessingResult({
+                    analyticsEventIds: [],
+                    changedGrantIds: [],
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                );
+              }
+              const updated = yield* updateSubscriptionIfFresher(tx, {
+                expiresAt: input.expiredAt,
+                id: existing.value.id,
+                occurredAt: input.occurredAt,
+                status: subscriptionStatusForInactiveEvent(),
+                updatedAt: new Date(),
+              });
+              if (updated.affectedRows === 0) {
+                yield* Effect.logInfo(
+                  `expireSubscription: stale event; watermark guard rejected projection update (subscriptionId=${existing.value.id}, occurredAt=${input.occurredAt.toISOString()})`,
+                );
+              }
+              const changedGrantIds = yield* _syncPurchasePerks(tx, personId);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toExpiredAnalyticsInputs(
+                    input,
+                    { personId, subscriptionId: Option.some(existing.value.id) },
+                    cfg,
+                  ),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.some(existing.value.id),
+                    transactionId: Option.none(),
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const revokeSubscription = Effect.fn("revokeSubscription")(
+        function* (input: RevokeSubscriptionInput) {
+          const ctx = yield* _resolveContext(input);
+          const storeSubscriptionIdOp = resolveStoreSubscriptionId(input);
+          if (Option.isNone(storeSubscriptionIdOp)) {
+            return yield* subscriptionIdentifierError(input);
+          }
+          const storeSubscriptionId = storeSubscriptionIdOp.value;
+          const productId = ctx.configurationProduct.id;
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const existing = yield* findSubscriptionByStoreSubscriptionId(tx, {
+                paymentProviderConfigurationProductId: productId,
+                storeSubscriptionId,
+              });
+              if (Option.isNone(existing)) {
+                return yield* _finalizeReservedLedgerResult(
+                  tx,
+                  ledgerClaim.reservation,
+                  new PurchaseProcessingResult({
+                    analyticsEventIds: [],
+                    changedGrantIds: [],
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                );
+              }
+              const subscriptionUpdate = yield* updateSubscriptionIfFresher(tx, {
+                canceledAt: input.revokedAt,
+                cancellationReason: Option.getOrNull(input.revocationReason),
+                expiresAt: input.revokedAt,
+                id: existing.value.id,
+                occurredAt: input.occurredAt,
+                status: subscriptionStatusForInactiveEvent(),
+                updatedAt: new Date(),
+              });
+              if (subscriptionUpdate.affectedRows === 0) {
+                yield* Effect.logInfo(
+                  `revokeSubscription: stale event; watermark guard rejected subscription update (subscriptionId=${existing.value.id}, occurredAt=${input.occurredAt.toISOString()})`,
+                );
+              }
+              let money: Option.Option<PurchaseProcessingMoney> = Option.none();
+              if (Option.isSome(input.providerTransactionId)) {
+                const existingTx = yield* findTransactionByProviderTransactionId(tx, {
+                  paymentProviderConfigurationProductId: productId,
+                  storeTransactionId: input.providerTransactionId.value,
+                });
+                if (Option.isSome(existingTx)) {
+                  money = Option.some(moneyFromStoredTransaction(existingTx.value));
+                }
+                // Watermark-guarded revoke: the UPDATE additionally requires
+                // `last_event_occurred_at IS NULL OR <= occurredAt` so a
+                // late-arriving stale event can't overwrite fresher state.
+                // `affectedRows === 0` means either the row doesn't exist OR
+                // the watermark rejected the update; callers continue
+                // regardless so analytics replay still captures the event.
+                const db = tx;
+                const transactionRevokeRows = yield* db
+                  .update(transactions)
+                  .set({
+                    lastEventOccurredAt: input.occurredAt,
+                    revocationReason: Option.getOrNull(input.revocationReason),
+                    revokedAt: input.revokedAt,
+                  })
+                  .where(
+                    and(
+                      eq(transactions.paymentProviderConfigurationProductId, productId),
+                      eq(transactions.storeTransactionId, input.providerTransactionId.value),
+                      or(
+                        isNull(transactions.lastEventOccurredAt),
+                        lte(transactions.lastEventOccurredAt, input.occurredAt),
+                      ),
+                    ),
+                  )
+                  .returning({ id: transactions.id });
+                const transactionUpdate = { affectedRows: transactionRevokeRows.length };
+                if (transactionUpdate.affectedRows === 0) {
+                  yield* Effect.logWarning(
+                    `revokeSubscription: no prior transaction row OR watermark rejected (storeTransactionId=${input.providerTransactionId.value}, occurredAt=${input.occurredAt.toISOString()})`,
+                  );
+                }
+              }
+              const changedGrantIds = yield* _syncPurchasePerks(tx, personId);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toRevokedAnalyticsInputs(
+                    { ...input, money },
+                    { personId, subscriptionId: Option.some(existing.value.id) },
+                    cfg,
+                  ),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.some(existing.value.id),
+                    transactionId: Option.none(),
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const completeOneTimePurchase = Effect.fn("completeOneTimePurchase")(
+        function* (input: CompleteOneTimePurchaseInput) {
+          const ctx = yield* _resolveContext(input);
+          const productId = ctx.configurationProduct.id;
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const transaction = yield* _findOrCreateTransaction(tx, {
+                money: input.money,
+                occurredAt: input.occurredAt,
+                paymentProviderConfigurationProductId: productId,
+                personId,
+                providerEnvironment: input.providerEnvironment,
+                providerTransactionId: input.providerTransactionId,
+              });
+              const providerKeyOp = Option.firstSomeOf([
+                input.providerTransactionId,
+                input.providerSubscriptionId,
+              ]);
+              if (Option.isNone(providerKeyOp)) {
+                return yield* new PurchaseProcessingServiceError({
+                  cause: `One-time purchase event has no provider identifier (providerTransactionId and providerSubscriptionId both absent; providerEventType=${input.providerEventType})`,
+                });
+              }
+              const providerKey = providerKeyOp.value;
+              yield* Effect.annotateCurrentSpan("voidhash.purchase.provider_key", providerKey);
+              const db = tx;
+              const existingPurchaseRow = yield* db.query.purchases.findFirst({
+                where: { providerKey },
+              });
+              const existing = Option.fromNullishOr(existingPurchaseRow);
+              let purchaseId: string;
+              let purchaseAlreadyExisted: boolean;
+              if (Option.isSome(existing)) {
+                purchaseId = existing.value.id;
+                purchaseAlreadyExisted = true;
+              } else {
+                const purchase: InsertPurchase = {
+                  id: generateId("purchase"),
+                  paymentProviderConfigurationProductId: productId,
+                  personId,
+                  providerEnvironment: input.providerEnvironment,
+                  providerKey,
+                  type: purchaseTypeFor(input.purchaseType),
+                };
+                yield* db.insert(purchases).values(purchase);
+                purchaseId = purchase.id;
+                purchaseAlreadyExisted = false;
+              }
+              const changedGrantIds = yield* _syncPurchasePerks(tx, personId);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toOneTimePurchaseAnalyticsInputs(
+                    input,
+                    { personId, transactionId: transaction.id },
+                    cfg,
+                  ),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: transaction.alreadyExisted || purchaseAlreadyExisted,
+                    personId,
+                    purchaseId: Option.some(purchaseId),
+                    subscriptionId: Option.none(),
+                    transactionId: transaction.id,
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const refundPurchase = Effect.fn("refundPurchase")(
+        function* (input: RefundPurchaseInput) {
+          const ctx = yield* _resolveContext(input);
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              let money: Option.Option<PurchaseProcessingMoney> = Option.none();
+              if (Option.isNone(input.providerTransactionId)) {
+                yield* Effect.logWarning(
+                  "refundPurchase: no providerTransactionId; skipping transaction row update",
+                );
+              } else {
+                const existing = yield* findTransactionByProviderTransactionId(tx, {
+                  paymentProviderConfigurationProductId: ctx.configurationProduct.id,
+                  storeTransactionId: input.providerTransactionId.value,
+                });
+                if (Option.isSome(existing)) {
+                  money = Option.some(moneyFromStoredTransaction(existing.value));
+                }
+                // Watermark-guarded refund: the UPDATE additionally requires
+                // `last_event_occurred_at IS NULL OR <= occurredAt` so a
+                // late-arriving stale REFUND can't overwrite a fresher
+                // REFUND_REVERSED. `affectedRows === 0` means the row doesn't
+                // exist OR the watermark rejected the update; callers continue
+                // regardless so analytics replay still captures the event.
+                const db = tx;
+                const transactionRefundRows = yield* db
+                  .update(transactions)
+                  .set({
+                    lastEventOccurredAt: input.occurredAt,
+                    refundReason: Option.getOrNull(input.refundReason),
+                    refundedAt: input.refundedAt,
+                  })
+                  .where(
+                    and(
+                      eq(
+                        transactions.paymentProviderConfigurationProductId,
+                        ctx.configurationProduct.id,
+                      ),
+                      eq(transactions.storeTransactionId, input.providerTransactionId.value),
+                      or(
+                        isNull(transactions.lastEventOccurredAt),
+                        lte(transactions.lastEventOccurredAt, input.occurredAt),
+                      ),
+                    ),
+                  )
+                  .returning({ id: transactions.id });
+                const updated = { affectedRows: transactionRefundRows.length };
+                if (updated.affectedRows === 0) {
+                  yield* Effect.logWarning(
+                    `refundPurchase: no prior transaction row OR watermark rejected (storeTransactionId=${input.providerTransactionId.value}, occurredAt=${input.occurredAt.toISOString()}); analytics will still emit`,
+                  );
+                }
+              }
+              let purchaseId: Option.Option<string> = Option.none();
+              let purchaseUpdated = false;
+              const providerKeyOp = resolvePurchaseProviderKey(input);
+              if (Option.isNone(providerKeyOp)) {
+                yield* Effect.logWarning(
+                  "refundPurchase: no purchase provider key; skipping purchase row update",
+                );
+              } else {
+                const db = tx;
+                const existingPurchaseRow = yield* db.query.purchases.findFirst({
+                  where: { providerKey: providerKeyOp.value },
+                });
+                const existingPurchase = Option.fromNullishOr(existingPurchaseRow);
+                if (Option.isSome(existingPurchase)) {
+                  purchaseId = Option.some(existingPurchase.value.id);
+                  // Watermark-guarded purchase refund: the UPDATE additionally
+                  // requires `last_event_occurred_at IS NULL OR <= occurredAt`
+                  // so a late-arriving stale event can't overwrite fresher
+                  // state. `affectedRows === 0` means the watermark rejected
+                  // the update.
+                  const purchaseRefundRows = yield* db
+                    .update(purchases)
+                    .set({
+                      lastEventOccurredAt: input.occurredAt,
+                      refundReason: Option.getOrNull(input.refundReason),
+                      refundedAt: input.refundedAt,
+                    })
+                    .where(
+                      and(
+                        eq(purchases.providerKey, providerKeyOp.value),
+                        or(
+                          isNull(purchases.lastEventOccurredAt),
+                          lte(purchases.lastEventOccurredAt, input.occurredAt),
+                        ),
+                      ),
+                    )
+                    .returning({ id: purchases.id });
+                  const purchaseUpdate = { affectedRows: purchaseRefundRows.length };
+                  purchaseUpdated = purchaseUpdate.affectedRows > 0;
+                  if (purchaseUpdate.affectedRows === 0) {
+                    yield* Effect.logWarning(
+                      `refundPurchase: purchase row watermark rejected (providerKey=${providerKeyOp.value}, occurredAt=${input.occurredAt.toISOString()})`,
+                    );
+                  }
+                }
+              }
+              const changedGrantIds = purchaseUpdated
+                ? yield* _syncPurchasePerks(tx, personId)
+                : [];
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toRefundedAnalyticsInputs({ ...input, money }, { personId }, cfg),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: false,
+                    personId,
+                    purchaseId,
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const revokePurchase = Effect.fn("revokePurchase")(
+        function* (input: RevokePurchaseInput) {
+          const ctx = yield* _resolveContext(input);
+          const personId = ctx.personId;
+          const providerKeyOp = resolvePurchaseProviderKey(input);
+          if (Option.isNone(providerKeyOp)) {
+            return yield* purchaseIdentifierError(input);
+          }
+          const providerKey = providerKeyOp.value;
+          yield* Effect.annotateCurrentSpan("voidhash.purchase.provider_key", providerKey);
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const db = tx;
+              const purchaseRow = yield* db.query.purchases.findFirst({
+                where: { providerKey },
+              });
+              const purchase = Option.fromNullishOr(purchaseRow);
+              if (Option.isNone(purchase)) {
+                return yield* _finalizeReservedLedgerResult(
+                  tx,
+                  ledgerClaim.reservation,
+                  new PurchaseProcessingResult({
+                    analyticsEventIds: [],
+                    changedGrantIds: [],
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                );
+              }
+
+              let money: Option.Option<PurchaseProcessingMoney> = Option.none();
+              if (Option.isNone(input.providerTransactionId)) {
+                yield* Effect.logWarning(
+                  "revokePurchase: no providerTransactionId; skipping transaction row update",
+                );
+              } else {
+                const existingTx = yield* findTransactionByProviderTransactionId(tx, {
+                  paymentProviderConfigurationProductId: ctx.configurationProduct.id,
+                  storeTransactionId: input.providerTransactionId.value,
+                });
+                if (Option.isSome(existingTx)) {
+                  money = Option.some(moneyFromStoredTransaction(existingTx.value));
+                }
+                // Watermark-guarded revoke: the UPDATE additionally requires
+                // `last_event_occurred_at IS NULL OR <= occurredAt` so a
+                // late-arriving stale event can't overwrite fresher state.
+                // `affectedRows === 0` means the row doesn't exist OR the
+                // watermark rejected the update.
+                const transactionRevokeRows = yield* db
+                  .update(transactions)
+                  .set({
+                    lastEventOccurredAt: input.occurredAt,
+                    revocationReason: Option.getOrNull(input.revocationReason),
+                    revokedAt: input.revokedAt,
+                  })
+                  .where(
+                    and(
+                      eq(
+                        transactions.paymentProviderConfigurationProductId,
+                        ctx.configurationProduct.id,
+                      ),
+                      eq(transactions.storeTransactionId, input.providerTransactionId.value),
+                      or(
+                        isNull(transactions.lastEventOccurredAt),
+                        lte(transactions.lastEventOccurredAt, input.occurredAt),
+                      ),
+                    ),
+                  )
+                  .returning({ id: transactions.id });
+                const transactionUpdate = { affectedRows: transactionRevokeRows.length };
+                if (transactionUpdate.affectedRows === 0) {
+                  yield* Effect.logWarning(
+                    `revokePurchase: no prior transaction row OR watermark rejected (storeTransactionId=${input.providerTransactionId.value}, occurredAt=${input.occurredAt.toISOString()})`,
+                  );
+                }
+              }
+
+              // Watermark-guarded purchase revoke: the UPDATE additionally
+              // requires `last_event_occurred_at IS NULL OR <= occurredAt` so
+              // a late-arriving stale event can't overwrite fresher state.
+              const purchaseRevokeRows = yield* db
+                .update(purchases)
+                .set({
+                  lastEventOccurredAt: input.occurredAt,
+                  revocationReason: Option.getOrNull(input.revocationReason),
+                  revokedAt: input.revokedAt,
+                })
+                .where(
+                  and(
+                    eq(purchases.providerKey, providerKey),
+                    or(
+                      isNull(purchases.lastEventOccurredAt),
+                      lte(purchases.lastEventOccurredAt, input.occurredAt),
+                    ),
+                  ),
+                )
+                .returning({ id: purchases.id });
+              const purchaseUpdate = { affectedRows: purchaseRevokeRows.length };
+              if (purchaseUpdate.affectedRows === 0) {
+                yield* Effect.logWarning(
+                  `revokePurchase: purchase row watermark rejected (providerKey=${providerKey}, occurredAt=${input.occurredAt.toISOString()})`,
+                );
+              }
+              const changedGrantIds =
+                purchaseUpdate.affectedRows > 0 ? yield* _syncPurchasePerks(tx, personId) : [];
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toPurchaseRevokedAnalyticsInputs({ ...input, money }, { personId }, cfg),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.some(purchase.value.id),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const _wrapStateMutationErrors = <
+        A extends PurchaseProcessingResult,
+        E,
+        R,
+        I extends PurchaseActionContext,
+      >(
+        effect: Effect.Effect<A, E, R>,
+        input: I,
+      ) =>
+        _withPurchaseActionObservability(effect, input).pipe(
+          // `catchTags` can't prove these tags are members of the generic `E`
+          // here (it needs a concrete error union), so narrow with a tag guard
+          // instead — same effect, no `any` widening that would poison the
+          // inferred result type for callers.
+          Effect.catchIf(
+            (
+              error,
+            ): error is Extract<
+              E,
+              {
+                readonly _tag: "EffectDrizzleQueryError" | "SqlError" | "PerkGrantServiceError";
+              }
+            > =>
+              Predicate.hasProperty(error, "_tag") &&
+              (error._tag === "EffectDrizzleQueryError" ||
+                error._tag === "SqlError" ||
+                error._tag === "PerkGrantServiceError"),
+            (error) =>
+              Effect.fail(
+                new PurchaseProcessingServiceError({
+                  cause: Predicate.hasProperty(error, "cause")
+                    ? String(error.cause)
+                    : String(error),
+                }),
+              ),
+          ),
+        );
+
+      /**
+       * Common subscription-state-mutation skeleton used by the Phase 4
+       * notification handlers below. Resolves the context, locates the
+       * subscription, applies the watermark-guarded update produced by
+       * `buildPatch`, then enqueues analytics. No-ops cleanly when the
+       * subscription isn't known locally (returns an idempotent empty result)
+       * — analytics don't fire because the mapper sees
+       * `subscriptionId: Option.none()`.
+       */
+      const _applySubscriptionStateMutation = Effect.fn("_applySubscriptionStateMutation")(
+        function* <I extends PurchaseActionContext>(input: {
+          readonly methodName: string;
+          readonly action: I;
+          readonly buildPatch: (existing: {
+            readonly id: string;
+            readonly status: number;
+          }) => Omit<Partial<{ readonly status: number }>, never> & Record<string, unknown>;
+          readonly buildEvents: (
+            result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+            cfg: RevenueAnalyticsMapperContext,
+          ) => ReadonlyArray<InternalAnalyticsEvent>;
+          readonly syncPerksOnApply: boolean;
+        }) {
+          yield* Effect.annotateCurrentSpan({
+            ...purchaseActionSpanAttributes(input.action),
+          });
+          const ctx = yield* _resolveContext(input.action);
+          const storeSubscriptionIdOp = resolveStoreSubscriptionId(input.action);
+          if (Option.isNone(storeSubscriptionIdOp)) {
+            return yield* subscriptionIdentifierError(input.action);
+          }
+          const storeSubscriptionId = storeSubscriptionIdOp.value;
+          const productId = ctx.configurationProduct.id;
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input.action);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              const existing = yield* findSubscriptionByStoreSubscriptionId(tx, {
+                paymentProviderConfigurationProductId: productId,
+                storeSubscriptionId,
+              });
+              if (Option.isNone(existing)) {
+                return yield* _finalizeReservedLedgerResult(
+                  tx,
+                  ledgerClaim.reservation,
+                  new PurchaseProcessingResult({
+                    analyticsEventIds: [],
+                    changedGrantIds: [],
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                );
+              }
+              const patch = input.buildPatch(existing.value);
+              const updated = yield* updateSubscriptionIfFresher(tx, {
+                ...patch,
+                id: existing.value.id,
+                occurredAt: input.action.occurredAt,
+                updatedAt: new Date(),
+              });
+              if (updated.affectedRows === 0) {
+                yield* Effect.logInfo(
+                  `${input.methodName}: stale event; watermark guard rejected projection update (subscriptionId=${existing.value.id}, occurredAt=${input.action.occurredAt.toISOString()})`,
+                );
+              }
+              const changedGrantIds = input.syncPerksOnApply
+                ? yield* _syncPurchasePerks(tx, personId)
+                : [];
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  input.buildEvents(
+                    { personId, subscriptionId: Option.some(existing.value.id) },
+                    cfg,
+                  ),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.some(existing.value.id),
+                    transactionId: Option.none(),
+                  }),
+                idempotencyKey: input.action.idempotencyKey,
+                organizationId: input.action.organizationId,
+                personId,
+                projectId: input.action.projectId,
+                providerEventType: input.action.providerEventType,
+                providerId: input.action.providerId,
+                rawProviderPayload: input.action.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.action.source,
+              });
+            }),
+          );
+        },
+      );
+
+      const enterBillingRetry = Effect.fn("enterBillingRetry")(function* (
+        input: EnterBillingRetryInput,
+      ) {
+        return yield* _applySubscriptionStateMutation({
+          action: input,
+          buildEvents: (result, cfg) =>
+            toBillingRetryAnalyticsInputs(
+              {
+                ...input,
+                gracePeriodExpiresAt: input.gracePeriodExpiresAt,
+                occurredAt: input.occurredAt,
+              },
+              result,
+              cfg,
+            ),
+          buildPatch: () => ({
+            billingRetryAt: input.billingRetryAt,
+            gracePeriodExpiresAt: Option.getOrNull(input.gracePeriodExpiresAt),
+          }),
+          methodName: "enterBillingRetry",
+          syncPerksOnApply: false,
+        });
+      }, _wrapStateMutationErrors);
+
+      const extendSubscription = Effect.fn("extendSubscription")(function* (
+        input: ExtendSubscriptionInput,
+      ) {
+        return yield* _applySubscriptionStateMutation({
+          action: input,
+          buildEvents: (result, cfg) =>
+            toExtendedAnalyticsInputs(
+              { ...input, extendedTo: input.extendedTo, occurredAt: input.occurredAt },
+              result,
+              cfg,
+            ),
+          buildPatch: () => ({
+            expiresAt: input.extendedTo,
+            extendedTo: input.extendedTo,
+          }),
+          methodName: "extendSubscription",
+          syncPerksOnApply: false,
+        });
+      }, _wrapStateMutationErrors);
+
+      const changeRenewalPreference = Effect.fn("changeRenewalPreference")(function* (
+        input: ChangeRenewalPreferenceInput,
+      ) {
+        return yield* _applySubscriptionStateMutation({
+          action: input,
+          buildEvents: (result, cfg) =>
+            toRenewalPreferenceChangeAnalyticsInputs(
+              {
+                ...input,
+                newProviderProductKey: input.newProviderProductKey,
+                occurredAt: input.occurredAt,
+              },
+              result,
+              cfg,
+            ),
+          buildPatch: () => ({
+            pendingProductChangeId: Option.getOrNull(
+              input.newPaymentProviderConfigurationProductId,
+            ),
+          }),
+          methodName: "changeRenewalPreference",
+          syncPerksOnApply: false,
+        });
+      }, _wrapStateMutationErrors);
+
+      const redeemOffer = Effect.fn("redeemOffer")(function* (input: RedeemOfferInput) {
+        return yield* _applySubscriptionStateMutation({
+          action: input,
+          buildEvents: (result, cfg) =>
+            toOfferRedeemedAnalyticsInputs(
+              { ...input, offerId: input.offerId, occurredAt: input.occurredAt },
+              result,
+              cfg,
+            ),
+          buildPatch: () => ({
+            redeemedOfferAt: input.redeemedAt,
+            redeemedOfferId: Option.getOrNull(input.offerId),
+          }),
+          methodName: "redeemOffer",
+          syncPerksOnApply: false,
+        });
+      }, _wrapStateMutationErrors);
+
+      const recordPriceIncrease = Effect.fn("recordPriceIncrease")(function* (
+        input: RecordPriceIncreaseInput,
+      ) {
+        const money = Option.getOrUndefined(input.money);
+        return yield* _applySubscriptionStateMutation({
+          action: input,
+          buildEvents: (result, cfg) =>
+            toPriceIncreaseAnalyticsInputs(
+              {
+                ...input,
+                effectiveAt: input.effectiveAt,
+                money: input.money,
+                occurredAt: input.occurredAt,
+              },
+              result,
+              cfg,
+            ),
+          buildPatch: () => ({
+            pendingPriceAmount: money?.grossAmount ?? null,
+            pendingPriceCurrency: money?.currency ?? null,
+            pendingPriceEffectiveAt: Option.getOrNull(input.effectiveAt),
+          }),
+          methodName: "recordPriceIncrease",
+          syncPerksOnApply: false,
+        });
+      }, _wrapStateMutationErrors);
+
+      const resumeAutoRenew = Effect.fn("resumeAutoRenew")(function* (input: ResumeAutoRenewInput) {
+        return yield* _applySubscriptionStateMutation({
+          action: input,
+          buildEvents: (result, cfg) =>
+            toAutoRenewResumedAnalyticsInputs(
+              { ...input, occurredAt: input.occurredAt },
+              result,
+              cfg,
+            ),
+          buildPatch: () => ({
+            cancelAtPeriodEnd: false,
+            canceledAt: null,
+            cancellationReason: null,
+          }),
+          methodName: "resumeAutoRenew",
+          syncPerksOnApply: true,
+        });
+      }, _wrapStateMutationErrors);
+
+      const reverseRefund = Effect.fn("reverseRefund")(
+        function* (input: ReverseRefundInput) {
+          const ctx = yield* _resolveContext(input);
+          const personId = ctx.personId;
+
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const ledgerClaim = yield* _reservePurchaseLedger(tx, input);
+              if (ledgerClaim._tag === "duplicate") {
+                return ledgerClaim.result;
+              }
+              let money: Option.Option<PurchaseProcessingMoney> = Option.none();
+              if (Option.isNone(input.providerTransactionId)) {
+                yield* Effect.logWarning(
+                  "reverseRefund: no providerTransactionId; skipping transaction row update",
+                );
+              } else {
+                const existing = yield* findTransactionByProviderTransactionId(tx, {
+                  paymentProviderConfigurationProductId: ctx.configurationProduct.id,
+                  storeTransactionId: input.providerTransactionId.value,
+                });
+                if (Option.isSome(existing)) {
+                  money = Option.some(moneyFromStoredTransaction(existing.value));
+                }
+                // Watermark-guarded refund-reversal: the UPDATE additionally
+                // requires `last_event_occurred_at IS NULL OR <= occurredAt`
+                // so a late-arriving stale event can't overwrite fresher
+                // state. `affectedRows === 0` means the row doesn't exist OR
+                // the watermark rejected the update.
+                const db = tx;
+                const transactionReverseRows = yield* db
+                  .update(transactions)
+                  .set({
+                    lastEventOccurredAt: input.occurredAt,
+                    refundReason: null,
+                    refundedAt: null,
+                  })
+                  .where(
+                    and(
+                      eq(
+                        transactions.paymentProviderConfigurationProductId,
+                        ctx.configurationProduct.id,
+                      ),
+                      eq(transactions.storeTransactionId, input.providerTransactionId.value),
+                      or(
+                        isNull(transactions.lastEventOccurredAt),
+                        lte(transactions.lastEventOccurredAt, input.occurredAt),
+                      ),
+                    ),
+                  )
+                  .returning({ id: transactions.id });
+                const updated = { affectedRows: transactionReverseRows.length };
+                if (updated.affectedRows === 0) {
+                  yield* Effect.logWarning(
+                    `reverseRefund: no prior transaction row OR watermark rejected (storeTransactionId=${input.providerTransactionId.value}, occurredAt=${input.occurredAt.toISOString()})`,
+                  );
+                }
+              }
+              let purchaseUpdated = false;
+              const providerKeyOp = resolvePurchaseProviderKey(input);
+              if (Option.isNone(providerKeyOp)) {
+                yield* Effect.logWarning(
+                  "reverseRefund: no purchase provider key; skipping purchase row update",
+                );
+              } else {
+                const db = tx;
+                const existingPurchaseRow = yield* db.query.purchases.findFirst({
+                  where: { providerKey: providerKeyOp.value },
+                });
+                const existingPurchase = Option.fromNullishOr(existingPurchaseRow);
+                if (Option.isSome(existingPurchase)) {
+                  // Watermark-guarded purchase refund-reversal: the UPDATE
+                  // additionally requires `last_event_occurred_at IS NULL OR
+                  // <= occurredAt` so a late-arriving stale event can't
+                  // overwrite fresher state.
+                  const purchaseReverseRows = yield* db
+                    .update(purchases)
+                    .set({
+                      lastEventOccurredAt: input.occurredAt,
+                      refundReason: null,
+                      refundedAt: null,
+                    })
+                    .where(
+                      and(
+                        eq(purchases.providerKey, providerKeyOp.value),
+                        or(
+                          isNull(purchases.lastEventOccurredAt),
+                          lte(purchases.lastEventOccurredAt, input.occurredAt),
+                        ),
+                      ),
+                    )
+                    .returning({ id: purchases.id });
+                  const purchaseUpdate = { affectedRows: purchaseReverseRows.length };
+                  purchaseUpdated = purchaseUpdate.affectedRows > 0;
+                  if (purchaseUpdate.affectedRows === 0) {
+                    yield* Effect.logWarning(
+                      `reverseRefund: purchase row watermark rejected (providerKey=${providerKeyOp.value}, occurredAt=${input.occurredAt.toISOString()})`,
+                    );
+                  }
+                }
+              }
+              const changedGrantIds = purchaseUpdated
+                ? yield* _syncPurchasePerks(tx, personId)
+                : [];
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toRefundReversedAnalyticsInputs({ ...input, money }, { personId }, cfg),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds,
+                    idempotent: false,
+                    personId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                idempotencyKey: input.idempotencyKey,
+                organizationId: input.organizationId,
+                personId,
+                projectId: input.projectId,
+                providerEventType: input.providerEventType,
+                providerId: input.providerId,
+                rawProviderPayload: input.rawProviderPayload,
+                reservation: ledgerClaim.reservation,
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withPurchaseActionObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      /**
+       * Rebinds ownership of an existing subscription from `fromPersonId` to
+       * `toPersonId`. Both persons remain fully intact identified persons;
+       * this is deliberately NOT an identity merge. Idempotency comes from
+       * the `SELECT ... FOR UPDATE` row lock plus the current-owner check.
+       */
+      const transferSubscription = Effect.fn("transferSubscription")(
+        function* (input: TransferSubscriptionInput) {
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const db = tx;
+              // Reads the subscription row with a `SELECT ... FOR UPDATE` row
+              // lock so concurrent transfers of the same subscription
+              // serialize on the row.
+              const subscriptionLockedRows = yield* db
+                .select()
+                .from(subscriptions)
+                .where(eq(subscriptions.id, input.subscriptionId))
+                .for("update");
+              const subscriptionOp = Option.fromNullishOr(subscriptionLockedRows[0]);
+              if (Option.isNone(subscriptionOp)) {
+                return yield* new PurchaseProcessingServiceError({
+                  cause: `transferSubscription: subscription ${input.subscriptionId} not found`,
+                });
+              }
+              const subscription = subscriptionOp.value;
+
+              if (subscription.personId === input.toPersonId) {
+                return new PurchaseProcessingResult({
+                  analyticsEventIds: [],
+                  changedGrantIds: [],
+                  idempotent: true,
+                  personId: input.toPersonId,
+                  purchaseId: Option.none(),
+                  subscriptionId: Option.some(subscription.id),
+                  transactionId: Option.none(),
+                });
+              }
+              if (subscription.personId !== input.fromPersonId) {
+                return yield* new PurchaseProcessingServiceError({
+                  cause: `transferSubscription: subscription ${subscription.id} is owned by ${subscription.personId}, expected ${input.fromPersonId}`,
+                });
+              }
+
+              const keptResult = new PurchaseProcessingResult({
+                analyticsEventIds: [],
+                changedGrantIds: [],
+                idempotent: false,
+                personId: input.fromPersonId,
+                purchaseId: Option.none(),
+                subscriptionId: Option.some(subscription.id),
+                transactionId: Option.none(),
+              });
+
+              if (input.transferMode === "keep_with_previous_owner") {
+                return keptResult;
+              }
+              if (input.transferMode === "transfer_if_no_active_on_target") {
+                const targetActiveRows = yield* db
+                  .select({ count: sql<number>`count(*)` })
+                  .from(subscriptions)
+                  .where(
+                    and(
+                      eq(subscriptions.personId, input.toPersonId),
+                      eq(subscriptions.status, SubscriptionStatus.Active),
+                    ),
+                  );
+                const targetActive = Number(targetActiveRows[0]?.count ?? 0);
+                if (targetActive > 0) {
+                  return keptResult;
+                }
+              }
+
+              // Watermark-guarded ownership rebind: the UPDATE additionally
+              // requires `last_event_occurred_at IS NULL OR <= occurredAt` so
+              // a stale event can't overwrite a fresher transfer.
+              const ownershipRows = yield* db
+                .update(subscriptions)
+                .set({ lastEventOccurredAt: input.occurredAt, personId: input.toPersonId })
+                .where(
+                  and(
+                    eq(subscriptions.id, subscription.id),
+                    or(
+                      isNull(subscriptions.lastEventOccurredAt),
+                      lte(subscriptions.lastEventOccurredAt, input.occurredAt),
+                    ),
+                  ),
+                )
+                .returning({ id: subscriptions.id });
+              const ownershipUpdate = { affectedRows: ownershipRows.length };
+              if (ownershipUpdate.affectedRows === 0) {
+                yield* Effect.logInfo(
+                  `transferSubscription: stale event; watermark guard rejected ownership update (subscriptionId=${subscription.id}, occurredAt=${input.occurredAt.toISOString()})`,
+                );
+                return keptResult;
+              }
+              const fromGrants = yield* _syncPurchasePerks(tx, input.fromPersonId);
+              const toGrants = yield* _syncPurchasePerks(tx, input.toPersonId);
+              const [fromDistinctId, toDistinctId] = yield* Effect.all([
+                _resolveDistinctId(tx, input.fromPersonId),
+                _resolveDistinctId(tx, input.toPersonId),
+              ]);
+              yield* Effect.annotateCurrentSpan("voidhash.person.from_distinct_id", fromDistinctId);
+              yield* Effect.annotateCurrentSpan("voidhash.person.to_distinct_id", toDistinctId);
+              yield* Effect.annotateCurrentSpan("voidhash.subscription.id", subscription.id);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toSubscriptionTransferredAnalyticsInputs(
+                    {
+                      fromDistinctId,
+                      fromPersonId: input.fromPersonId,
+                      occurredAt: input.occurredAt,
+                      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                      providerId: input.providerId,
+                      source: input.source,
+                      subscription: {
+                        id: subscription.id,
+                        paymentProviderConfigurationProductId:
+                          subscription.paymentProviderConfigurationProductId,
+                        providerEnvironment: subscription.providerEnvironment,
+                        storeSubscriptionId: subscription.storeSubscriptionId,
+                      },
+                      toDistinctId,
+                      toPersonId: input.toPersonId,
+                      transferMode: input.transferMode,
+                      triggerReason: input.triggerReason,
+                    },
+                    cfg,
+                  ),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds: [...fromGrants, ...toGrants],
+                    idempotent: false,
+                    personId: input.toPersonId,
+                    purchaseId: Option.none(),
+                    subscriptionId: Option.some(subscription.id),
+                    transactionId: Option.none(),
+                  }),
+                // Deterministic transfer anchor (prereq R2): encodes the
+                // subscription, the transfer DIRECTION (from→to), and the
+                // provider event timestamp. A redelivered provider event reuses
+                // the same `occurredAt` so it dedupes; a genuinely repeated
+                // same-direction transfer at a later time gets a distinct key
+                // (App Store restores can recur, including back-and-forth). This
+                // also fixes the latent outbox bug where the old random suffix
+                // defeated the ledger's own `UNIQUE(idempotency_key)` dedup.
+                idempotencyKey: `subscription_transfer:${subscription.id}:${input.fromPersonId}->${input.toPersonId}:${input.occurredAt.toISOString()}`,
+                organizationId: input.organizationId,
+                personId: input.toPersonId,
+                projectId: input.projectId,
+                providerEventType: "subscription.transferred",
+                providerId: input.providerId,
+                rawProviderPayload: Option.none(),
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withTransferObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      const transferPurchase = Effect.fn("transferPurchase")(
+        function* (input: TransferPurchaseInput) {
+          return yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              const db = tx;
+              // Reads the purchase row with a `SELECT ... FOR UPDATE` row lock
+              // so concurrent transfers of the same purchase serialize on the
+              // row.
+              const purchaseLockedRows = yield* db
+                .select()
+                .from(purchases)
+                .where(eq(purchases.id, input.purchaseId))
+                .for("update");
+              const purchaseOp = Option.fromNullishOr(purchaseLockedRows[0]);
+              if (Option.isNone(purchaseOp)) {
+                return yield* new PurchaseProcessingServiceError({
+                  cause: `transferPurchase: purchase ${input.purchaseId} not found`,
+                });
+              }
+              const purchase = purchaseOp.value;
+
+              if (purchase.personId === input.toPersonId) {
+                return new PurchaseProcessingResult({
+                  analyticsEventIds: [],
+                  changedGrantIds: [],
+                  idempotent: true,
+                  personId: input.toPersonId,
+                  purchaseId: Option.some(purchase.id),
+                  subscriptionId: Option.none(),
+                  transactionId: Option.none(),
+                });
+              }
+              if (purchase.personId !== input.fromPersonId) {
+                return yield* new PurchaseProcessingServiceError({
+                  cause: `transferPurchase: purchase ${purchase.id} is owned by ${purchase.personId}, expected ${input.fromPersonId}`,
+                });
+              }
+
+              const keptResult = new PurchaseProcessingResult({
+                analyticsEventIds: [],
+                changedGrantIds: [],
+                idempotent: false,
+                personId: input.fromPersonId,
+                purchaseId: Option.some(purchase.id),
+                subscriptionId: Option.none(),
+                transactionId: Option.none(),
+              });
+
+              if (purchase.type !== PurchaseType.OneTime) {
+                yield* Effect.logInfo(
+                  `transferPurchase: purchase ${purchase.id} is not a non-consumable one-time purchase (type=${purchase.type}); skipping transfer`,
+                );
+                return keptResult;
+              }
+              if (purchase.refundedAt !== null || purchase.revokedAt !== null) {
+                yield* Effect.logInfo(
+                  `transferPurchase: purchase ${purchase.id} is not active; skipping transfer`,
+                );
+                return keptResult;
+              }
+              if (input.transferMode === "keep_with_previous_owner") {
+                return keptResult;
+              }
+              if (input.transferMode === "transfer_if_no_active_on_target") {
+                const targetActiveRows = yield* db
+                  .select({ count: sql<number>`count(*)` })
+                  .from(purchases)
+                  .where(
+                    and(
+                      eq(purchases.personId, input.toPersonId),
+                      eq(purchases.type, PurchaseType.OneTime),
+                      isNull(purchases.refundedAt),
+                      isNull(purchases.revokedAt),
+                    ),
+                  );
+                const targetActive = Number(targetActiveRows[0]?.count ?? 0);
+                if (targetActive > 0) {
+                  return keptResult;
+                }
+              }
+
+              const ownershipRows = yield* db
+                .update(purchases)
+                .set({ personId: input.toPersonId })
+                .where(eq(purchases.id, purchase.id))
+                .returning({ id: purchases.id });
+              const ownershipUpdate = { affectedRows: ownershipRows.length };
+              if (ownershipUpdate.affectedRows === 0) {
+                yield* Effect.logInfo(
+                  `transferPurchase: ownership update affected no rows (purchaseId=${purchase.id})`,
+                );
+                return keptResult;
+              }
+              const fromGrants = yield* _syncPurchasePerks(tx, input.fromPersonId);
+              const toGrants = yield* _syncPurchasePerks(tx, input.toPersonId);
+              const [fromDistinctId, toDistinctId] = yield* Effect.all([
+                _resolveDistinctId(tx, input.fromPersonId),
+                _resolveDistinctId(tx, input.toPersonId),
+              ]);
+              yield* Effect.annotateCurrentSpan("voidhash.person.from_distinct_id", fromDistinctId);
+              yield* Effect.annotateCurrentSpan("voidhash.person.to_distinct_id", toDistinctId);
+              yield* Effect.annotateCurrentSpan("voidhash.purchase.id", purchase.id);
+
+              return yield* _enqueueAnalyticsAndBuildResult(tx, {
+                buildEvents: (cfg) =>
+                  toPurchaseTransferredAnalyticsInputs(
+                    {
+                      fromDistinctId,
+                      fromPersonId: input.fromPersonId,
+                      occurredAt: input.occurredAt,
+                      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+                      providerId: input.providerId,
+                      purchase: {
+                        id: purchase.id,
+                        paymentProviderConfigurationProductId:
+                          purchase.paymentProviderConfigurationProductId,
+                        providerEnvironment: purchase.providerEnvironment,
+                        providerKey: purchase.providerKey,
+                      },
+                      source: input.source,
+                      toDistinctId,
+                      toPersonId: input.toPersonId,
+                      transferMode: input.transferMode,
+                      triggerReason: input.triggerReason,
+                    },
+                    cfg,
+                  ),
+                buildResult: (analyticsEventIds) =>
+                  new PurchaseProcessingResult({
+                    analyticsEventIds,
+                    changedGrantIds: [...fromGrants, ...toGrants],
+                    idempotent: false,
+                    personId: input.toPersonId,
+                    purchaseId: Option.some(purchase.id),
+                    subscriptionId: Option.none(),
+                    transactionId: Option.none(),
+                  }),
+                // Deterministic transfer anchor (prereq R2) — see the
+                // `transferSubscription` key above for the direction +
+                // `occurredAt` rationale.
+                idempotencyKey: `purchase_transfer:${purchase.id}:${input.fromPersonId}->${input.toPersonId}:${input.occurredAt.toISOString()}`,
+                organizationId: input.organizationId,
+                personId: input.toPersonId,
+                projectId: input.projectId,
+                providerEventType: "purchase.transferred",
+                providerId: input.providerId,
+                rawProviderPayload: Option.none(),
+                source: input.source,
+              });
+            }),
+          );
+        },
+        (effect, input) =>
+          _withTransferObservability(effect, input).pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+              PerkGrantServiceError: (error: { readonly cause: string }) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: error.cause })),
+              SqlError: (error) =>
+                Effect.fail(new PurchaseProcessingServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
+      return {
+        cancelSubscription,
+        changeRenewalPreference,
+        completeOneTimePurchase,
+        enterBillingRetry,
+        expireSubscription,
+        extendSubscription,
+        recordPriceIncrease,
+        redeemOffer,
+        refundPurchase,
+        renewSubscription,
+        resumeAutoRenew,
+        reverseRefund,
+        revokePurchase,
+        revokeSubscription,
+        startSubscription,
+        transferPurchase,
+        transferSubscription,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PurchaseProcessingService)(PurchaseProcessingService.make);
+}
diff --git a/packages/core/src/services/purchaseProcessing/helpers.ts b/packages/core/src/services/purchaseProcessing/helpers.ts
new file mode 100644
index 000000000..479f6089f
--- /dev/null
+++ b/packages/core/src/services/purchaseProcessing/helpers.ts
@@ -0,0 +1,8 @@
+import { SubscriptionStatus } from "@voidhash/lib";
+
+import { ProviderEnvironment } from "@voidhash/db";
+
+export const providerEnvironmentLabel = (environment: number): string =>
+  environment === ProviderEnvironment.Sandbox ? "sandbox" : "production";
+
+export const subscriptionStatusForInactiveEvent = () => SubscriptionStatus.Canceled;
diff --git a/packages/core/src/services/purchaseProcessing/result-codec.ts b/packages/core/src/services/purchaseProcessing/result-codec.ts
new file mode 100644
index 000000000..7fe3e9515
--- /dev/null
+++ b/packages/core/src/services/purchaseProcessing/result-codec.ts
@@ -0,0 +1,56 @@
+/**
+ * JSON codec for {@link PurchaseProcessingResult}. The outbox row stores a
+ * frozen snapshot of the first caller's result so a duplicate idempotency
+ * key can be handed back the exact same `Option<transactionId>` /
+ * `Option<subscriptionId>` / `Option<purchaseId>` / `analyticsEventIds`.
+ *
+ * Why not lean on `Schema.encodeUnknown` of the tagged class directly:
+ * `Option<string>` round-trips well but the encoded shape is the wire
+ * representation of `Schema.Option`, which is wordier than necessary for an
+ * internal storage format. We use a flat JSON shape with nullable strings to
+ * keep payloads small and inspectable in DB clients.
+ */
+import { Option } from "effect";
+
+import { PurchaseProcessingResult } from "../../domain/purchaseProcessing/PurchaseProcessing.ts";
+
+interface EncodedPurchaseProcessingResult {
+  readonly personId: string;
+  readonly purchaseId: string | null;
+  readonly subscriptionId: string | null;
+  readonly transactionId: string | null;
+  readonly changedGrantIds: ReadonlyArray<string>;
+  readonly analyticsEventIds: ReadonlyArray<string>;
+  readonly idempotent: boolean;
+}
+
+/** Encodes the result to a JSON-friendly object suitable for the outbox row. */
+export const encodePurchaseProcessingResult = (
+  result: PurchaseProcessingResult,
+): EncodedPurchaseProcessingResult => ({
+  analyticsEventIds: result.analyticsEventIds,
+  changedGrantIds: result.changedGrantIds,
+  idempotent: result.idempotent,
+  personId: result.personId,
+  purchaseId: Option.getOrNull(result.purchaseId),
+  subscriptionId: Option.getOrNull(result.subscriptionId),
+  transactionId: Option.getOrNull(result.transactionId),
+});
+
+/**
+ * Decodes a previously-encoded result, forcing `idempotent: true` because by
+ * the time we're decoding, the caller is a duplicate delivery — the prior
+ * one already produced the canonical operational state.
+ */
+export const decodePurchaseProcessingResult = (encoded: unknown): PurchaseProcessingResult => {
+  const e = encoded as EncodedPurchaseProcessingResult;
+  return new PurchaseProcessingResult({
+    analyticsEventIds: e.analyticsEventIds,
+    changedGrantIds: e.changedGrantIds,
+    idempotent: true,
+    personId: e.personId,
+    purchaseId: Option.fromNullishOr(e.purchaseId),
+    subscriptionId: Option.fromNullishOr(e.subscriptionId),
+    transactionId: Option.fromNullishOr(e.transactionId),
+  });
+};
diff --git a/packages/core/src/services/purchaseProcessing/revenue-analytics-mapper.ts b/packages/core/src/services/purchaseProcessing/revenue-analytics-mapper.ts
new file mode 100644
index 000000000..c1a4da149
--- /dev/null
+++ b/packages/core/src/services/purchaseProcessing/revenue-analytics-mapper.ts
@@ -0,0 +1,839 @@
+/**
+ * Per-action mappers that translate a successful purchase write into the
+ * `InternalAnalyticsEvent` variants the analytics pipeline ingests. Each event's
+ * `eventId` is a DETERMINISTIC id derived from `(idempotencyKey, eventName,
+ * personId)` via {@link deterministicAnalyticsEventId} — stable across retries
+ * and re-dispatch, so the at-least-once analytics queue dedupes duplicates on
+ * the ClickHouse `(project_id, event_id)` key rather than relying on a single
+ * upstream invocation. The ledger `idempotency_key` is the per-action anchor
+ * (one ledger row ⇒ one mapper call), and `(eventName, personId)` disambiguates
+ * the multi-event actions (a subscription start emits two named events; a
+ * transfer emits two events on different persons).
+ *
+ * Sign convention for the money payload:
+ *   +1  purchases, renewals, refund reversals → emit positive deltas
+ *   −1  refunds, purchase revokes, and family-revoke cancellations → emit negative deltas
+ * Summing `grossAmountUsd` (or any of the breakdown columns) over the
+ * `$purchase.*` / `$subscription.*` revenue events therefore yields net
+ * revenue with no per-event-type branching downstream.
+ */
+import { Option } from "effect";
+
+import {
+  REVENUE_TRUSTED_SOURCE_TOPIC,
+  type RevenuePurchaseCompleted,
+  type RevenuePurchaseRefunded,
+  type RevenuePurchaseRevoked,
+  type RevenuePurchaseTransferredIn,
+  type RevenuePurchaseTransferredOut,
+  type RevenueSubscriptionAutoRenewResumed,
+  type RevenueSubscriptionBillingRetry,
+  type RevenueSubscriptionCanceled,
+  type RevenueSubscriptionCreated,
+  type RevenueSubscriptionExpired,
+  type RevenueSubscriptionExtended,
+  type RevenueSubscriptionOfferRedeemed,
+  type RevenueSubscriptionPriceIncreasePending,
+  type RevenueSubscriptionProductChanged,
+  type RevenueSubscriptionRefundReversed,
+  type RevenueSubscriptionRenewed,
+  type RevenueSubscriptionTransferredIn,
+  type RevenueSubscriptionTransferredOut,
+} from "../../domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import type { SubscriptionTransferMode } from "../../domain/paymentProvider/SubscriptionTransfer.ts";
+import type { PurchaseProcessingMoney } from "../../domain/purchaseProcessing/PurchaseProcessing.ts";
+import { deterministicAnalyticsEventId } from "../../utils/deterministic-id.ts";
+
+export interface RevenueAnalyticsMapperContext {
+  readonly token: string;
+  readonly organizationId: string;
+  readonly projectId: string;
+  /**
+   * The purchase-ledger `idempotency_key` for the action being mapped — the
+   * stable anchor for every event's deterministic `eventId`. One ledger row
+   * maps to exactly one mapper call, so this is unique per logical action.
+   */
+  readonly idempotencyKey: string;
+  /**
+   * The primary distinct id of the person this action is attributed to,
+   * resolved server-side (`_resolveDistinctId`). Stamped as the single-person
+   * events' `distinctId` so revenue carries a REAL distinct id (not the
+   * `personId`): a later identity merge then re-attributes these events through
+   * the identity overrides exactly like SDK events. Transfer events stamp the
+   * real source / target distinct ids directly and do not read this.
+   */
+  readonly distinctId: string;
+}
+
+interface CommonAnalyticsFields {
+  readonly providerId: string;
+  readonly source: string;
+  readonly providerEventType: string;
+  readonly providerEnvironment: number;
+  readonly paymentProviderConfigurationId: string;
+  readonly paymentProviderConfigurationProductId: string;
+  readonly providerTransactionId: Option.Option<string>;
+  readonly providerSubscriptionId: Option.Option<string>;
+  readonly providerWebhookNotificationId: Option.Option<string>;
+}
+
+interface RevenuePropertiesBase {
+  readonly paymentProviderConfigurationId: string;
+  readonly paymentProviderConfigurationProductId: string;
+  readonly providerEnvironment: number;
+  readonly providerEventType: string;
+  readonly providerId: string;
+  readonly providerSubscriptionId: string | null;
+  readonly providerTransactionId: string | null;
+  readonly providerWebhookNotificationId: string | null;
+  readonly source: string;
+}
+
+interface MoneyProperties {
+  readonly amount?: number | null;
+  readonly amountUsd?: number | null;
+  readonly currency?: string;
+  readonly storefront?: string | null;
+  readonly grossAmount?: number | null;
+  readonly storeCommissionAmount?: number | null;
+  readonly taxAmount?: number | null;
+  readonly proceedsAmount?: number | null;
+  readonly proceedsAfterTaxAmount?: number | null;
+  readonly grossAmountUsd?: number | null;
+  readonly storeCommissionAmountUsd?: number | null;
+  readonly taxAmountUsd?: number | null;
+  readonly proceedsAmountUsd?: number | null;
+  readonly proceedsAfterTaxAmountUsd?: number | null;
+  readonly exchangeRate?: number | null;
+}
+
+interface EventEnvelope {
+  readonly context: Record<string, unknown>;
+  readonly distinctId: string;
+  readonly eventId: string;
+  readonly occurredAt: Date;
+  readonly organizationId: string;
+  readonly personId: string;
+  readonly projectId: string;
+  readonly token: string;
+  readonly transactionId: string | null;
+}
+
+const revenuePropertiesBase = (input: CommonAnalyticsFields): RevenuePropertiesBase => ({
+  paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+  paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+  providerEnvironment: input.providerEnvironment,
+  providerEventType: input.providerEventType,
+  providerId: input.providerId,
+  providerSubscriptionId: Option.getOrNull(input.providerSubscriptionId),
+  providerTransactionId: Option.getOrNull(input.providerTransactionId),
+  providerWebhookNotificationId: Option.getOrNull(input.providerWebhookNotificationId),
+  source: input.source,
+});
+
+/**
+ * Maps a {@link PurchaseProcessingMoney} into the wire-shaped money payload,
+ * applying the sign convention (+1 for purchases / renewals / reversed
+ * refunds, −1 for refunds / family revokes). `Option.none()` money emits
+ * no money fields at all, so downstream `SUM`s don't double-count
+ * money-less events.
+ *
+ * `amount` / `amountUsd` mirror `grossAmount` / `grossAmountUsd` for the
+ * benefit of readers that haven't migrated to the breakdown columns yet.
+ */
+const signedMoneyProperties = (
+  money: Option.Option<PurchaseProcessingMoney>,
+  sign: 1 | -1,
+): MoneyProperties =>
+  Option.match(money, {
+    onNone: () => ({}),
+    onSome: (m) => {
+      const usd = Option.getOrUndefined(m.usd);
+      const signed = (n: number) => sign * n;
+      const signedUsd = (n: number | undefined) => (n === undefined ? null : sign * n);
+      return {
+        amount: signed(m.grossAmount),
+        amountUsd: signedUsd(usd?.grossAmount),
+        currency: m.currency,
+        exchangeRate: usd?.exchangeRate ?? null,
+        grossAmount: signed(m.grossAmount),
+        grossAmountUsd: signedUsd(usd?.grossAmount),
+        proceedsAfterTaxAmount: signed(m.proceedsAfterTaxAmount),
+        proceedsAfterTaxAmountUsd: signedUsd(usd?.proceedsAfterTaxAmount),
+        proceedsAmount: signed(m.proceedsAmount),
+        proceedsAmountUsd: signedUsd(usd?.proceedsAmount),
+        storeCommissionAmount: signed(m.storeCommissionAmount),
+        storeCommissionAmountUsd: signedUsd(usd?.storeCommissionAmount),
+        storefront: Option.getOrNull(m.storefront),
+        taxAmount: signed(m.taxAmount),
+        taxAmountUsd: signedUsd(usd?.taxAmount),
+      };
+    },
+  });
+
+const baseContext = (): Record<string, unknown> => ({
+  sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+});
+
+/**
+ * Builds the shared envelope for a single-person revenue event. The `eventId`
+ * is derived deterministically from the ledger `idempotencyKey` (anchor), the
+ * `eventName`, and the `personId`, so it is stable across re-dispatch. The
+ * transfer pair builders below do NOT use this helper — they stamp the real
+ * source / target distinct ids onto two events, deriving each id from the
+ * respective person.
+ */
+const buildEnvelope = (input: {
+  readonly eventName: string;
+  readonly occurredAt: Date;
+  readonly personId: string;
+  readonly transactionId: string | null;
+  readonly cfg: RevenueAnalyticsMapperContext;
+}): EventEnvelope => ({
+  context: baseContext(),
+  distinctId: input.cfg.distinctId,
+  eventId: deterministicAnalyticsEventId({
+    anchor: input.cfg.idempotencyKey,
+    eventName: input.eventName,
+    personId: input.personId,
+  }),
+  occurredAt: input.occurredAt,
+  organizationId: input.cfg.organizationId,
+  personId: input.personId,
+  projectId: input.cfg.projectId,
+  token: input.cfg.token,
+  transactionId: input.transactionId,
+});
+
+/**
+ * `subscription.started` emits two events anchored on the new transaction id:
+ * the customer-facing `subscription.created` event and the revenue-facing
+ * `purchase.completed` event.
+ */
+export const toStartedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly isTrial: boolean;
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string; readonly transactionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionCreated | RevenuePurchaseCompleted> => {
+  if (Option.isNone(result.transactionId)) {
+    return [];
+  }
+  const transactionId = result.transactionId.value;
+  const base = revenuePropertiesBase(input);
+  const money = signedMoneyProperties(input.money, 1);
+  const created: RevenueSubscriptionCreated = {
+    ...buildEnvelope({
+      cfg,
+      eventName: "$subscription.created",
+      occurredAt: input.occurredAt,
+      personId: result.personId,
+      transactionId,
+    }),
+    eventName: "$subscription.created",
+    properties: { ...base, ...money, isTrial: input.isTrial },
+  };
+  const completed: RevenuePurchaseCompleted = {
+    ...buildEnvelope({
+      cfg,
+      eventName: "$purchase.completed",
+      occurredAt: input.occurredAt,
+      personId: result.personId,
+      transactionId,
+    }),
+    eventName: "$purchase.completed",
+    properties: { ...base, ...money, isTrial: input.isTrial },
+  };
+  return [created, completed];
+};
+
+export const toRenewedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly isTrial: boolean;
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string; readonly transactionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionRenewed> => {
+  if (Option.isNone(result.transactionId)) {
+    return [];
+  }
+  const transactionId = result.transactionId.value;
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.renewed",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId,
+      }),
+      eventName: "$subscription.renewed",
+      properties: {
+        ...revenuePropertiesBase(input),
+        ...signedMoneyProperties(input.money, 1),
+        isTrial: input.isTrial,
+      },
+    },
+  ];
+};
+
+export const toCanceledAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly canceledAt: Date;
+    readonly cancelAtPeriodEnd: boolean;
+    readonly cancellationReason: Option.Option<string>;
+  },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionCanceled> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.canceled",
+        occurredAt: input.canceledAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.canceled",
+      properties: {
+        ...revenuePropertiesBase(input),
+        cancelAtPeriodEnd: input.cancelAtPeriodEnd,
+        cancellationReason: Option.getOrNull(input.cancellationReason),
+      },
+    },
+  ];
+};
+
+export const toExpiredAnalyticsInputs = (
+  input: CommonAnalyticsFields & { readonly expiredAt: Date },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionExpired> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.expired",
+        occurredAt: input.expiredAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.expired",
+      properties: revenuePropertiesBase(input),
+    },
+  ];
+};
+
+/**
+ * Provider-issued revocation (Apple's `REVOKE`, typically a Family-Sharing
+ * member's access). Carries a signed-negative money delta when `money` is
+ * present: family-shared transactions have zero commission / proceeds so
+ * the negative gross is the only meaningful entry; this keeps the gross-
+ * entitlement sum accurate without affecting net revenue.
+ */
+export const toRevokedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly revokedAt: Date;
+    readonly revocationReason: Option.Option<string>;
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionCanceled> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.canceled",
+        occurredAt: input.revokedAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.canceled",
+      properties: {
+        ...revenuePropertiesBase(input),
+        ...signedMoneyProperties(input.money, -1),
+        revocationReason: Option.getOrNull(input.revocationReason),
+      },
+    },
+  ];
+};
+
+export const toOneTimePurchaseAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly purchaseType: "one-time" | "consumable";
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string; readonly transactionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenuePurchaseCompleted> => {
+  if (Option.isNone(result.transactionId)) {
+    return [];
+  }
+  const transactionId = result.transactionId.value;
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$purchase.completed",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId,
+      }),
+      eventName: "$purchase.completed",
+      properties: {
+        ...revenuePropertiesBase(input),
+        ...signedMoneyProperties(input.money, 1),
+        purchaseType: input.purchaseType,
+      },
+    },
+  ];
+};
+
+export const toRefundedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly refundedAt: Date;
+    readonly refundReason: Option.Option<string>;
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenuePurchaseRefunded> => [
+  {
+    ...buildEnvelope({
+      cfg,
+      eventName: "$purchase.refunded",
+      occurredAt: input.refundedAt,
+      personId: result.personId,
+      transactionId: Option.getOrNull(input.providerTransactionId),
+    }),
+    eventName: "$purchase.refunded",
+    properties: {
+      ...revenuePropertiesBase(input),
+      ...signedMoneyProperties(input.money, -1),
+      refundReason: Option.getOrNull(input.refundReason),
+    },
+  },
+];
+
+export const toPurchaseRevokedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly revokedAt: Date;
+    readonly revocationReason: Option.Option<string>;
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenuePurchaseRevoked> => [
+  {
+    ...buildEnvelope({
+      cfg,
+      eventName: "$purchase.revoked",
+      occurredAt: input.revokedAt,
+      personId: result.personId,
+      transactionId: Option.getOrNull(input.providerTransactionId),
+    }),
+    eventName: "$purchase.revoked",
+    properties: {
+      ...revenuePropertiesBase(input),
+      ...signedMoneyProperties(input.money, -1),
+      revocationReason: Option.getOrNull(input.revocationReason),
+    },
+  },
+];
+
+/**
+ * `subscription.refund_reversed` — Apple has reversed a prior refund and the
+ * entitlement is re-granted. Emits the original purchase's money breakdown
+ * with the positive sign so the net-revenue sum cancels out the negative
+ * delta from the earlier `$purchase.refunded`.
+ */
+export const toRefundReversedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly reversedAt: Date;
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionRefundReversed> => [
+  {
+    ...buildEnvelope({
+      cfg,
+      eventName: "$subscription.refund_reversed",
+      occurredAt: input.reversedAt,
+      personId: result.personId,
+      transactionId: Option.getOrNull(input.providerTransactionId),
+    }),
+    eventName: "$subscription.refund_reversed",
+    properties: {
+      ...revenuePropertiesBase(input),
+      ...signedMoneyProperties(input.money, 1),
+    },
+  },
+];
+
+export const toBillingRetryAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly gracePeriodExpiresAt: Option.Option<Date>;
+  },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionBillingRetry> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.billing_retry",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.billing_retry",
+      properties: {
+        ...revenuePropertiesBase(input),
+        gracePeriodExpiresAt: Option.getOrNull(input.gracePeriodExpiresAt),
+      },
+    },
+  ];
+};
+
+export const toExtendedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly extendedTo: Date;
+  },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionExtended> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.extended",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.extended",
+      properties: {
+        ...revenuePropertiesBase(input),
+        extendedTo: input.extendedTo,
+      },
+    },
+  ];
+};
+
+export const toRenewalPreferenceChangeAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly newProviderProductKey: string;
+  },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionProductChanged> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.product_changed",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.product_changed",
+      properties: {
+        ...revenuePropertiesBase(input),
+        newProviderProductKey: input.newProviderProductKey,
+      },
+    },
+  ];
+};
+
+export const toOfferRedeemedAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly offerId: Option.Option<string>;
+  },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionOfferRedeemed> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.offer_redeemed",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.offer_redeemed",
+      properties: {
+        ...revenuePropertiesBase(input),
+        offerId: Option.getOrNull(input.offerId),
+      },
+    },
+  ];
+};
+
+/**
+ * `$subscription.price_increase_pending` is informational (the new price
+ * doesn't ship money until the next renewal). Carries the upcoming price as
+ * an UNSIGNED breakdown so analytics can show "the new price will be X"
+ * without affecting any net-revenue sums.
+ */
+export const toPriceIncreaseAnalyticsInputs = (
+  input: CommonAnalyticsFields & {
+    readonly occurredAt: Date;
+    readonly effectiveAt: Option.Option<Date>;
+    readonly money: Option.Option<PurchaseProcessingMoney>;
+  },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionPriceIncreasePending> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.price_increase_pending",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.price_increase_pending",
+      properties: {
+        ...revenuePropertiesBase(input),
+        ...signedMoneyProperties(input.money, 1),
+        effectiveAt: Option.getOrNull(input.effectiveAt),
+      },
+    },
+  ];
+};
+
+export const toAutoRenewResumedAnalyticsInputs = (
+  input: CommonAnalyticsFields & { readonly occurredAt: Date },
+  result: { readonly personId: string; readonly subscriptionId: Option.Option<string> },
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionAutoRenewResumed> => {
+  if (Option.isNone(result.subscriptionId)) {
+    return [];
+  }
+  return [
+    {
+      ...buildEnvelope({
+        cfg,
+        eventName: "$subscription.auto_renew_resumed",
+        occurredAt: input.occurredAt,
+        personId: result.personId,
+        transactionId: null,
+      }),
+      eventName: "$subscription.auto_renew_resumed",
+      properties: revenuePropertiesBase(input),
+    },
+  ];
+};
+
+export interface SubscriptionTransferAnalyticsInput {
+  readonly subscription: {
+    readonly id: string;
+    readonly storeSubscriptionId: string;
+    readonly paymentProviderConfigurationProductId: string;
+    readonly providerEnvironment: number;
+  };
+  readonly providerId: string;
+  readonly paymentProviderConfigurationId: string;
+  readonly fromPersonId: string;
+  readonly fromDistinctId: string;
+  readonly toPersonId: string;
+  readonly toDistinctId: string;
+  readonly transferMode: SubscriptionTransferMode;
+  readonly triggerReason: string;
+  readonly occurredAt: Date;
+  readonly source: string;
+}
+
+/**
+ * Maps a committed subscription ownership transfer into the
+ * `$subscription.transferred_out` / `$subscription.transferred_in` pair. The
+ * `_out` event is anchored on the SOURCE identity, the `_in` event on the
+ * TARGET identity — they carry different `distinctId` / `personId` but the
+ * SAME `properties` payload so a downstream consumer can correlate the two
+ * halves of the transfer.
+ *
+ * Built explicitly rather than via {@link buildEnvelope}: that helper stamps a
+ * single person's id as both `distinctId` and `personId`, whereas a transfer
+ * pair must stamp the real source / target distinct ids onto the two events.
+ * Each event's deterministic `eventId` is anchored on the ledger
+ * `idempotencyKey` and disambiguated by `(eventName, personId)`, so the two
+ * halves get distinct, stable ids.
+ */
+export const toSubscriptionTransferredAnalyticsInputs = (
+  input: SubscriptionTransferAnalyticsInput,
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenueSubscriptionTransferredOut | RevenueSubscriptionTransferredIn> => {
+  const properties = {
+    fromDistinctId: input.fromDistinctId,
+    fromPersonId: input.fromPersonId,
+    paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+    paymentProviderConfigurationProductId: input.subscription.paymentProviderConfigurationProductId,
+    providerEnvironment: input.subscription.providerEnvironment,
+    providerEventType: "subscription.transferred",
+    providerId: input.providerId,
+    source: input.source,
+    storeSubscriptionId: input.subscription.storeSubscriptionId,
+    subscriptionId: input.subscription.id,
+    toDistinctId: input.toDistinctId,
+    toPersonId: input.toPersonId,
+    transferMode: input.transferMode,
+    transferReason: input.triggerReason,
+    transferredAt: input.occurredAt,
+  };
+  const transferredOut: RevenueSubscriptionTransferredOut = {
+    context: baseContext(),
+    distinctId: input.fromDistinctId,
+    eventId: deterministicAnalyticsEventId({
+      anchor: cfg.idempotencyKey,
+      eventName: "$subscription.transferred_out",
+      personId: input.fromPersonId,
+    }),
+    eventName: "$subscription.transferred_out",
+    occurredAt: input.occurredAt,
+    organizationId: cfg.organizationId,
+    personId: input.fromPersonId,
+    projectId: cfg.projectId,
+    properties,
+    token: cfg.token,
+    transactionId: null,
+  };
+  const transferredIn: RevenueSubscriptionTransferredIn = {
+    context: baseContext(),
+    distinctId: input.toDistinctId,
+    eventId: deterministicAnalyticsEventId({
+      anchor: cfg.idempotencyKey,
+      eventName: "$subscription.transferred_in",
+      personId: input.toPersonId,
+    }),
+    eventName: "$subscription.transferred_in",
+    occurredAt: input.occurredAt,
+    organizationId: cfg.organizationId,
+    personId: input.toPersonId,
+    projectId: cfg.projectId,
+    properties,
+    token: cfg.token,
+    transactionId: null,
+  };
+  return [transferredOut, transferredIn];
+};
+
+export interface PurchaseTransferAnalyticsInput {
+  readonly purchase: {
+    readonly id: string;
+    readonly providerKey: string;
+    readonly paymentProviderConfigurationProductId: string;
+    readonly providerEnvironment: number;
+  };
+  readonly providerId: string;
+  readonly paymentProviderConfigurationId: string;
+  readonly fromPersonId: string;
+  readonly fromDistinctId: string;
+  readonly toPersonId: string;
+  readonly toDistinctId: string;
+  readonly transferMode: SubscriptionTransferMode;
+  readonly triggerReason: string;
+  readonly occurredAt: Date;
+  readonly source: string;
+}
+
+/**
+ * {@link toSubscriptionTransferredAnalyticsInputs} for non-consumable one-time
+ * purchases — emits the `$purchase.transferred_out` / `$purchase.transferred_in`
+ * pair.
+ */
+export const toPurchaseTransferredAnalyticsInputs = (
+  input: PurchaseTransferAnalyticsInput,
+  cfg: RevenueAnalyticsMapperContext,
+): ReadonlyArray<RevenuePurchaseTransferredOut | RevenuePurchaseTransferredIn> => {
+  const properties = {
+    fromDistinctId: input.fromDistinctId,
+    fromPersonId: input.fromPersonId,
+    paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+    paymentProviderConfigurationProductId: input.purchase.paymentProviderConfigurationProductId,
+    providerEnvironment: input.purchase.providerEnvironment,
+    providerEventType: "purchase.transferred",
+    providerId: input.providerId,
+    providerKey: input.purchase.providerKey,
+    purchaseId: input.purchase.id,
+    source: input.source,
+    toDistinctId: input.toDistinctId,
+    toPersonId: input.toPersonId,
+    transferMode: input.transferMode,
+    transferReason: input.triggerReason,
+    transferredAt: input.occurredAt,
+  };
+  const transferredOut: RevenuePurchaseTransferredOut = {
+    context: baseContext(),
+    distinctId: input.fromDistinctId,
+    eventId: deterministicAnalyticsEventId({
+      anchor: cfg.idempotencyKey,
+      eventName: "$purchase.transferred_out",
+      personId: input.fromPersonId,
+    }),
+    eventName: "$purchase.transferred_out",
+    occurredAt: input.occurredAt,
+    organizationId: cfg.organizationId,
+    personId: input.fromPersonId,
+    projectId: cfg.projectId,
+    properties,
+    token: cfg.token,
+    transactionId: null,
+  };
+  const transferredIn: RevenuePurchaseTransferredIn = {
+    context: baseContext(),
+    distinctId: input.toDistinctId,
+    eventId: deterministicAnalyticsEventId({
+      anchor: cfg.idempotencyKey,
+      eventName: "$purchase.transferred_in",
+      personId: input.toPersonId,
+    }),
+    eventName: "$purchase.transferred_in",
+    occurredAt: input.occurredAt,
+    organizationId: cfg.organizationId,
+    personId: input.toPersonId,
+    projectId: cfg.projectId,
+    properties,
+    token: cfg.token,
+    transactionId: null,
+  };
+  return [transferredOut, transferredIn];
+};
diff --git a/packages/core/src/services/purchases/PurchaseService.ts b/packages/core/src/services/purchases/PurchaseService.ts
new file mode 100644
index 000000000..41dad4cff
--- /dev/null
+++ b/packages/core/src/services/purchases/PurchaseService.ts
@@ -0,0 +1,80 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { PersonNotFoundError } from "../../domain/person/Person.ts";
+import { Db } from "@voidhash/db";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error tag.
+ */
+export class PurchaseServiceError extends Schema.TaggedErrorClass<PurchaseServiceError>(
+  "PurchaseServiceError",
+)("PurchaseServiceError", { cause: Schema.String }) {}
+
+/**
+ * `PurchaseService` is the entry point for the purchases aggregate.
+ *
+ * Currently exposes `getPersonPurchases` — lookups for a single person's
+ * purchase history behind a `project:all` permission check. Lives in its own
+ * service (rather than alongside `PersonService`) because purchases are not
+ * part of the persons aggregate.
+ *
+ * `AuthSession` and `Db` are provided by the application root.
+ */
+export class PurchaseService extends Context.Service<PurchaseService>()("PurchaseService", {
+  make: Effect.gen(function* () {
+    const db = yield* Db;
+    const getPersonPurchases = Effect.fn("getPersonPurchases")(
+      function* (personId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", personId);
+        const session = yield* AuthSession;
+        if (session?.method) {
+          yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+        }
+        if (session?.user?.id) {
+          yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+        }
+        if (session?.person?.distinctId) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.person.distinct_id",
+            session.person.distinctId,
+          );
+        }
+        const person = yield* db.query.persons.findFirst({ where: { id: personId } });
+        if (!person) {
+          return yield* Effect.fail(new PersonNotFoundError({ id: personId }));
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", person.projectId);
+        yield* checkProjectPermission(
+          person.projectId,
+          "project:all",
+          `User ${session?.user?.id} is not authorized to access person ${personId} for project ${person.projectId}`,
+        );
+        const personPurchases = yield* db.query.purchases.findMany({
+          where: { personId },
+        });
+        yield* Effect.annotateCurrentSpan("voidhash.purchase.count", personPurchases.length);
+        if (personPurchases[0]?.providerKey) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.payment_provider.key",
+            personPurchases[0].providerKey,
+          );
+        }
+        return personPurchases;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PurchaseServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return { getPersonPurchases } as const;
+  }),
+}) {
+  static layer = Layer.effect(PurchaseService)(PurchaseService.make);
+}
diff --git a/packages/core/src/services/purchases/index.ts b/packages/core/src/services/purchases/index.ts
new file mode 100644
index 000000000..e7993ccfb
--- /dev/null
+++ b/packages/core/src/services/purchases/index.ts
@@ -0,0 +1 @@
+export * from "./PurchaseService.ts";
diff --git a/packages/core/src/services/schema/SchemaCacheInvalidationService.ts b/packages/core/src/services/schema/SchemaCacheInvalidationService.ts
new file mode 100644
index 000000000..3809b6f5d
--- /dev/null
+++ b/packages/core/src/services/schema/SchemaCacheInvalidationService.ts
@@ -0,0 +1,38 @@
+import { Context, Effect, Layer } from "effect";
+
+import { ProjectSchemaCache } from "./SchemaService.ts";
+
+/**
+ * `SchemaCacheInvalidationService` drops a project's cached `ProjectSchema`
+ * whenever a schema-shaping write lands (perks, products, paywall locations,
+ * product-perk links, payment-provider configs / products).
+ *
+ * Each project maps to exactly one `ProjectSchemaCacheDO` instance via
+ * `namespace.getByName(projectId)`, so invalidation is a single direct
+ * `.invalidate()` call — no pub/sub fan-out. The dropped entry is repopulated
+ * lazily on the next read by `SchemaService.fetchOrAssemble` (cache miss →
+ * reassemble from the DB → `set`).
+ *
+ * Domain services depend on this service (in place of the removed
+ * `CoreEventBus` publisher) and call {@link invalidate} after a successful
+ * write. It depends only on the {@link ProjectSchemaCache} port, so it stays
+ * infra-pure and can be provided alongside the support services that already
+ * carry `ProjectSchemaCache`.
+ */
+export class SchemaCacheInvalidationService extends Context.Service<SchemaCacheInvalidationService>()(
+  "SchemaCacheInvalidationService",
+  {
+    make: Effect.gen(function* () {
+      const cache = yield* ProjectSchemaCache;
+
+      const invalidate = Effect.fn("schemaCache.invalidate")(function* (projectId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        yield* cache.getByName(projectId).invalidate();
+      });
+
+      return { invalidate } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(SchemaCacheInvalidationService)(SchemaCacheInvalidationService.make);
+}
diff --git a/packages/core/src/services/schema/SchemaService.ts b/packages/core/src/services/schema/SchemaService.ts
new file mode 100644
index 000000000..0c1f3c2e6
--- /dev/null
+++ b/packages/core/src/services/schema/SchemaService.ts
@@ -0,0 +1,407 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  ProjectSchema,
+  SchemaLocation,
+  SchemaPerk,
+  SchemaProduct,
+  SchemaProductProvider,
+  type SchemaProviderId,
+} from "../../domain/schema/Schema.ts";
+import {
+  Db,
+  and,
+  asc,
+  eq,
+  isNull,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  perks,
+  productPerks,
+  products,
+} from "@voidhash/db";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import {
+  type SchemaProjection,
+  computeSchemaVersion,
+  mapDbProviderIdToSchemaProviderId,
+} from "./helpers.ts";
+
+export interface ProjectSchemaCacheStub {
+  readonly get: () => Effect.Effect<unknown>;
+  readonly set: (schema: unknown, ttlMs: number) => Effect.Effect<void>;
+  readonly invalidate: () => Effect.Effect<void>;
+}
+
+export interface ProjectSchemaCacheShape {
+  readonly getByName: (projectId: string) => ProjectSchemaCacheStub;
+}
+
+/**
+ * Cache port for project schemas. The Cloudflare backend provides a
+ * `ProjectSchemaCacheDO` namespace; tests and non-Worker runtimes can provide
+ * an in-memory implementation without pulling Alchemy resources into the
+ * service layer.
+ */
+export class ProjectSchemaCache extends Context.Service<
+  ProjectSchemaCache,
+  ProjectSchemaCacheShape
+>()("ProjectSchemaCache") {}
+
+/**
+ * Defense-in-depth TTL persisted alongside the cached schema entry. The cache
+ * is primarily invalidated by {@link SchemaCacheInvalidationService}, which the
+ * mutation services call directly on every schema-shaping write; the TTL is
+ * only recorded for telemetry / forensics inside the `ProjectSchemaCacheDO`
+ * storage entry.
+ */
+const CACHE_TTL_MS = 5 * 60 * 1000;
+
+/**
+ * Catch-all service error. Wraps `DatabaseError` (and other infrastructural
+ * failures) at the public-method boundary so callers see one stable error tag.
+ */
+export class SchemaServiceError extends Schema.TaggedErrorClass<SchemaServiceError>(
+  "SchemaServiceError",
+)("SchemaServiceError", { cause: Schema.String }) {}
+
+/**
+ * `SchemaService` assembles the consolidated project schema (perks, paywall
+ * locations, products, enabled providers) consumed by both the CLI
+ * (`GET /api/v1/schema`) and the SDK runtime (`GET /sdk/schema`).
+ *
+ * Reads are cached behind {@link ProjectSchemaCache}, which routes each
+ * project to one Durable Object instance via `namespace.getByName(projectId)`
+ * — the single-writer property that used to come from the Effect cluster
+ * sharded `ProjectSchemaEntity`. Cache entries are dropped by
+ * {@link SchemaCacheInvalidationService} (lives in
+ * `./SchemaCacheInvalidationService.ts`), which the mutation services call
+ * directly after a write; the next read here repopulates lazily.
+ *
+ * `Db`, `ProjectSchemaCache`, `AuthSession`, and the rest are provided by
+ * the application root.
+ */
+export class SchemaService extends Context.Service<SchemaService>()("SchemaService", {
+  make: Effect.gen(function* () {
+    const cache = yield* ProjectSchemaCache;
+    const db = yield* Db;
+
+    const assembleFromDb = Effect.fn("schema.assembleFromDb")(
+      function* (projectId: string) {
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        const [
+          dbPerks,
+          dbProducts,
+          dbLocations,
+          dbProductPerkLinks,
+          dbProductProviderMappings,
+          dbEnabledProviders,
+        ] = yield* Effect.all(
+          [
+            Effect.gen(function* () {
+              return yield* db.query.perks.findMany({
+                orderBy: { slug: "asc" },
+                where: { projectId },
+              });
+            }),
+            Effect.gen(function* () {
+              return yield* db.query.products.findMany({
+                orderBy: { slug: "asc" },
+                where: { projectId },
+              });
+            }),
+            // Archived locations are not part of the schema the SDK / CLI
+            // cares about — mirror `findActiveLocationBySlug`.
+            Effect.gen(function* () {
+              return yield* db.query.paywallLocations.findMany({
+                orderBy: { slug: "asc" },
+                where: { projectId, archivedAt: { isNull: true } },
+              });
+            }),
+            // One row per (product, perk) link, projected to the perk slug
+            // the handler actually needs (it doesn't care about perk id).
+            Effect.gen(function* () {
+              const rows = yield* db
+                .select({
+                  perkSlug: perks.slug,
+                  productId: productPerks.productId,
+                })
+                .from(productPerks)
+                .innerJoin(products, eq(productPerks.productId, products.id))
+                .innerJoin(perks, eq(productPerks.perkId, perks.id))
+                .where(eq(products.projectId, projectId))
+                .orderBy(asc(perks.slug));
+              return rows.map((row) => ({
+                perkSlug: row.perkSlug,
+                productId: row.productId,
+              }));
+            }),
+            // Active per-product provider mappings joined with the parent
+            // configuration row (so we can ignore mappings whose
+            // configuration was soft-deleted, and read the parent's
+            // `providerId`).
+            Effect.gen(function* () {
+              const rows = yield* db
+                .select({
+                  configuration: paymentProviderConfigurationProducts.configuration,
+                  productId: paymentProviderConfigurationProducts.productId,
+                  providerId: paymentProviderConfigurations.providerId,
+                })
+                .from(paymentProviderConfigurationProducts)
+                .innerJoin(
+                  products,
+                  eq(paymentProviderConfigurationProducts.productId, products.id),
+                )
+                .innerJoin(
+                  paymentProviderConfigurations,
+                  eq(
+                    paymentProviderConfigurationProducts.paymentProviderConfigurationId,
+                    paymentProviderConfigurations.id,
+                  ),
+                )
+                .where(
+                  and(
+                    eq(products.projectId, projectId),
+                    eq(paymentProviderConfigurationProducts.isActive, true),
+                    isNull(paymentProviderConfigurations.deletedAt),
+                  ),
+                )
+                .orderBy(
+                  asc(paymentProviderConfigurations.providerId),
+                  asc(paymentProviderConfigurationProducts.createdAt),
+                );
+              return rows.map((row) => ({
+                configuration: row.configuration,
+                productId: row.productId,
+                providerId: row.providerId,
+              }));
+            }),
+            // Set of providerIds with at least one enabled, non-deleted
+            // configuration in the project — drives `enabledProviders` on
+            // the CLI response.
+            Effect.gen(function* () {
+              const rows = yield* db
+                .select({ providerId: paymentProviderConfigurations.providerId })
+                .from(paymentProviderConfigurations)
+                .where(
+                  and(
+                    eq(paymentProviderConfigurations.projectId, projectId),
+                    eq(paymentProviderConfigurations.enabled, true),
+                    isNull(paymentProviderConfigurations.deletedAt),
+                  ),
+                )
+                .orderBy(asc(paymentProviderConfigurations.providerId));
+              return rows.map((row) => ({ providerId: row.providerId }));
+            }),
+          ],
+          { concurrency: "unbounded" },
+        );
+
+        const perkRows = dbPerks
+          .map((perk) => ({ name: perk.name, slug: perk.slug }))
+          .sort((a, b) => a.slug.localeCompare(b.slug));
+
+        const locationRows = dbLocations
+          .map((location) => ({
+            description: location.description,
+            name: location.name,
+            slug: location.slug,
+          }))
+          .sort((a, b) => a.slug.localeCompare(b.slug));
+
+        const perkSlugsByProductId = new Map<string, string[]>();
+        for (const link of dbProductPerkLinks) {
+          const list = perkSlugsByProductId.get(link.productId);
+          if (list) {
+            list.push(link.perkSlug);
+          } else {
+            perkSlugsByProductId.set(link.productId, [link.perkSlug]);
+          }
+        }
+
+        // Drop providers the schema contract doesn't surface (e.g. `"stripe"`).
+        // Filtering server-side keeps the version hash stable across CLI and
+        // server.
+        const providersByProductId = new Map<
+          string,
+          Array<{
+            readonly providerId: SchemaProviderId;
+            readonly configuration: Record<string, unknown>;
+          }>
+        >();
+        for (const mapping of dbProductProviderMappings) {
+          const providerId = mapDbProviderIdToSchemaProviderId(mapping.providerId);
+          if (!providerId) {
+            continue;
+          }
+          const configuration = (mapping.configuration ?? {}) as Record<string, unknown>;
+          const entry = { providerId, configuration };
+          const list = providersByProductId.get(mapping.productId);
+          if (list) {
+            list.push(entry);
+          } else {
+            providersByProductId.set(mapping.productId, [entry]);
+          }
+        }
+
+        const productRows = dbProducts
+          .map((product) => {
+            const perksForProduct = (perkSlugsByProductId.get(product.id) ?? []).slice().sort();
+            const providersForProduct = (providersByProductId.get(product.id) ?? [])
+              .slice()
+              .sort((a, b) => a.providerId.localeCompare(b.providerId));
+            return {
+              name: product.name,
+              perks: perksForProduct,
+              providers: providersForProduct,
+              slug: product.slug,
+              type: "subscription" as const,
+            };
+          })
+          .sort((a, b) => a.slug.localeCompare(b.slug));
+
+        const enabledProvidersSet = new Set<SchemaProviderId>();
+        for (const row of dbEnabledProviders) {
+          const providerId = mapDbProviderIdToSchemaProviderId(row.providerId);
+          if (providerId) {
+            enabledProvidersSet.add(providerId);
+          }
+        }
+        const enabledProviders: ReadonlyArray<SchemaProviderId> = [...enabledProvidersSet].sort();
+
+        const projection: SchemaProjection = {
+          enabledProviders,
+          locations: locationRows,
+          perks: perkRows,
+          products: productRows,
+        };
+        const version = yield* computeSchemaVersion(projection);
+
+        yield* Effect.annotateCurrentSpan("voidhash.schema.version", version);
+        yield* Effect.annotateCurrentSpan("voidhash.schema.product_count", productRows.length);
+        yield* Effect.annotateCurrentSpan("voidhash.schema.perk_count", perkRows.length);
+        yield* Effect.annotateCurrentSpan("voidhash.schema.location_count", locationRows.length);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.schema.enabled_provider_count",
+          enabledProviders.length,
+        );
+
+        return new ProjectSchema({
+          enabledProviders,
+          locations: locationRows.map((row) => new SchemaLocation(row)),
+          perks: perkRows.map((row) => new SchemaPerk(row)),
+          products: productRows.map(
+            (row) =>
+              new SchemaProduct({
+                name: row.name,
+                perks: row.perks,
+                providers: row.providers.map((p) => new SchemaProductProvider(p)),
+                slug: row.slug,
+                type: row.type,
+              }),
+          ),
+          version,
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new SchemaServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    /**
+     * Assemble a fresh schema from the database and persist it to the cache.
+     *
+     * The cache lives behind a Durable Object, and the DO bridge serializes
+     * values crossing the boundary — a `Schema.Class` instance cannot survive
+     * that round-trip intact (it would either fail to serialize or arrive with
+     * its class identity stripped). We therefore store the plain *encoded*
+     * form and reconstruct the instance on read. See {@link ProjectSchemaCache}.
+     */
+    const assembleAndCache = (projectId: string, stub: ProjectSchemaCacheStub) =>
+      Effect.gen(function* () {
+        const fresh = yield* assembleFromDb(projectId);
+        const encoded = yield* Schema.encodeUnknownEffect(ProjectSchema)(fresh).pipe(Effect.orDie);
+        yield* stub.set(encoded, CACHE_TTL_MS);
+        return fresh;
+      });
+
+    const fetchOrAssemble = (projectId: string) =>
+      Effect.gen(function* () {
+        const stub = cache.getByName(projectId);
+        const cached = yield* stub.get();
+        if (cached === null || cached === undefined) {
+          yield* Effect.annotateCurrentSpan("voidhash.schema.cache_hit", false);
+          return yield* assembleAndCache(projectId, stub);
+        }
+        // The cached payload is opaque plain JSON after the DO round-trip —
+        // decode it back into a `ProjectSchema`. A decode failure means a
+        // stale or shape-incompatible entry; treat that as a miss and
+        // re-assemble rather than failing the read.
+        return yield* Schema.decodeUnknownEffect(ProjectSchema)(cached).pipe(
+          Effect.tap(() => Effect.annotateCurrentSpan("voidhash.schema.cache_hit", true)),
+          Effect.catch(() =>
+            Effect.annotateCurrentSpan("voidhash.schema.cache_hit", false).pipe(
+              Effect.andThen(() => assembleAndCache(projectId, stub)),
+            ),
+          ),
+        );
+      });
+
+    const getProjectSchema = Effect.fn("schema.getProjectSchema")(function* (projectId: string) {
+      const session = yield* AuthSession;
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+      yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+      if (session.user?.id) {
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+      }
+      const scopedProject = session.projects.find((project) => project.id === projectId);
+      if (scopedProject?.organizationId) {
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", scopedProject.organizationId);
+      }
+      if (session.person?.distinctId) {
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", session.person.distinctId);
+      }
+      yield* checkProjectPermission(
+        projectId,
+        "project:all",
+        `User ${session?.user?.id ?? "anonymous"} is not authorized to access schema for project ${projectId}`,
+      );
+      return yield* fetchOrAssemble(projectId);
+    });
+
+    /**
+     * SDK variant — the publishable-key middleware on the SDK route resolves
+     * `projectId` from the authenticated key before calling this, and that
+     * middleware is the only thing that can ever put a `projectId` in scope,
+     * so no in-service permission check is needed.
+     */
+    const getProjectSchemaForSdk = Effect.fn("schema.getProjectSchemaForSdk")(function* (
+      projectId: string,
+    ) {
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+      return yield* fetchOrAssemble(projectId);
+    });
+
+    const computeProjectSchemaVersion = Effect.fn("schema.computeProjectSchemaVersion")(function* (
+      projectId: string,
+    ) {
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+      const schema = yield* getProjectSchema(projectId);
+      yield* Effect.annotateCurrentSpan("voidhash.schema.version", schema.version);
+      return { version: schema.version };
+    });
+
+    return {
+      computeProjectSchemaVersion,
+      getProjectSchema,
+      getProjectSchemaForSdk,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(SchemaService)(SchemaService.make);
+}
diff --git a/packages/core/src/services/schema/helpers.ts b/packages/core/src/services/schema/helpers.ts
new file mode 100644
index 000000000..d186ce770
--- /dev/null
+++ b/packages/core/src/services/schema/helpers.ts
@@ -0,0 +1,94 @@
+import { Effect } from "effect";
+import { subtle } from "uncrypto";
+
+import type { SchemaProviderId } from "../../domain/schema/Schema.ts";
+
+/**
+ * Internal projection shape used to compute the deterministic schema version
+ * hash. Mirrors {@link ProjectSchema} minus the `version` field — feeding the
+ * derived value back into the hash would be circular.
+ */
+export interface SchemaProjection {
+  readonly perks: ReadonlyArray<{ readonly slug: string; readonly name: string }>;
+  readonly locations: ReadonlyArray<{
+    readonly slug: string;
+    readonly name: string;
+    readonly description: string | null;
+  }>;
+  readonly products: ReadonlyArray<{
+    readonly slug: string;
+    readonly name: string;
+    readonly type: "subscription";
+    readonly perks: ReadonlyArray<string>;
+    readonly providers: ReadonlyArray<{
+      readonly providerId: SchemaProviderId;
+      readonly configuration: Record<string, unknown>;
+    }>;
+  }>;
+  readonly enabledProviders: ReadonlyArray<SchemaProviderId>;
+}
+
+const DB_PROVIDER_ID_TO_SCHEMA: Record<string, SchemaProviderId> = {
+  "apple-app-store": "appleAppStore",
+  "google-play": "googlePlay",
+};
+
+/**
+ * Map a database `providerId` to the schema `providerId` used by the CLI and
+ * SDK. Returns `null` for providers the schema contract doesn't surface yet
+ * (e.g. `"stripe"`); callers should drop those rows.
+ */
+export const mapDbProviderIdToSchemaProviderId = (dbProviderId: string): SchemaProviderId | null =>
+  DB_PROVIDER_ID_TO_SCHEMA[dbProviderId] ?? null;
+
+/**
+ * Compute the deterministic `sha256:<hex>` schema version hash from a
+ * canonical {@link SchemaProjection}.
+ *
+ * The byte-level layout matches the CLI's `computeSchemaVersionFromNormalized`
+ * exactly (field order, sort order, empty-array shape). Don't reorder anything
+ * here without making the matching change in
+ * `apps/cli/src/utils/schema/version.ts` — the CLI's `voidhash types check`
+ * compares the two hashes byte-for-byte.
+ *
+ * Uses WebCrypto via `uncrypto` so this runs natively on Cloudflare Workers
+ * (the legacy implementation used `node:crypto`).
+ */
+export const computeSchemaVersion = (projection: SchemaProjection): Effect.Effect<string> =>
+  Effect.promise(async () => {
+    // Field order matches the CLI emit. Per Node docs, `JSON.stringify`
+    // preserves insertion order for non-integer string keys.
+    const products = [...projection.products]
+      .map((product) => ({
+        name: product.name,
+        perks: [...product.perks].sort(),
+        providers: [...product.providers]
+          .map((provider) => ({
+            providerId: provider.providerId,
+            configuration: provider.configuration,
+          }))
+          .sort((a, b) => a.providerId.localeCompare(b.providerId)),
+        slug: product.slug,
+        type: product.type,
+      }))
+      .sort((a, b) => a.slug.localeCompare(b.slug));
+
+    const locations = [...projection.locations]
+      .map((location) => ({
+        description: location.description,
+        name: location.name,
+        slug: location.slug,
+      }))
+      .sort((a, b) => a.slug.localeCompare(b.slug));
+
+    const perks = [...projection.perks]
+      .map((perk) => ({ name: perk.name, slug: perk.slug }))
+      .sort((a, b) => a.slug.localeCompare(b.slug));
+
+    const payload = JSON.stringify({ locations, perks, products });
+    const hashBuffer = await subtle.digest("SHA-256", new TextEncoder().encode(payload));
+    const hashHex = [...new Uint8Array(hashBuffer)]
+      .map((byte) => byte.toString(16).padStart(2, "0"))
+      .join("");
+    return `sha256:${hashHex}`;
+  });
diff --git a/packages/core/src/services/schema/index.ts b/packages/core/src/services/schema/index.ts
new file mode 100644
index 000000000..43f8e93a3
--- /dev/null
+++ b/packages/core/src/services/schema/index.ts
@@ -0,0 +1,2 @@
+export * from "./SchemaService.ts";
+export { SchemaCacheInvalidationService } from "./SchemaCacheInvalidationService.ts";
diff --git a/packages/core/src/services/sdk/SdkService.ts b/packages/core/src/services/sdk/SdkService.ts
new file mode 100644
index 000000000..213bfb294
--- /dev/null
+++ b/packages/core/src/services/sdk/SdkService.ts
@@ -0,0 +1,846 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession, AuthenticationError } from "../../domain/auth/Auth.ts";
+import {
+  SdkPersonAlreadyIdentifiedError,
+  SdkPersonNotFoundError,
+  type SdkPersonSnapshot,
+  SdkValidationError,
+} from "../../domain/sdkPerson/SdkPerson.ts";
+import {
+  type PaymentProviderConfigurationProduct as DbPaymentProviderConfigurationProduct,
+  type Subscription as DbSubscription,
+  Db,
+  PersonOrigin,
+  type PersonOriginValue,
+} from "@voidhash/db";
+import { isAnonymousId } from "../../utils/sdk.ts";
+import { AppStorePaymentProviderService } from "../paymentProviders/AppStorePaymentProviderService.ts";
+import { GooglePlayPaymentProviderService } from "../paymentProviders/GooglePlayPaymentProviderService.ts";
+import { PerkGrantService } from "../perkGrants/PerkGrantService.ts";
+import { IdentityProjectionPublisher } from "../personIdentity/IdentityProjectionPublisher.ts";
+import {
+  type PersonIdentityResult,
+  PersonIdentityService,
+} from "../personIdentity/PersonIdentityService.ts";
+import { PurchaseService } from "../purchases/PurchaseService.ts";
+import { elevateProjectAccess } from "./elevate-auth.ts";
+import {
+  ACTIVE_MIGRATION_STATUSES,
+  type SubscriptionWithProduct,
+  composeSnapshot,
+  decideSnapshotScope,
+} from "./snapshot-builder.ts";
+
+/**
+ * Per-call metadata supplied by the SDK on every `syncPersonAttributes`
+ * request. Mirrors the SDK's request envelope so the service can write client
+ * platform info into the person traits alongside the caller-supplied
+ * application traits.
+ */
+export interface PersonMetadata {
+  distinctId: string;
+  publishableKey: string;
+  platform: string;
+  sdk: "react-native" | "web";
+  sdkVersion: string;
+  platformFlavor: "native" | "browser";
+  platformFlavorVersion?: string;
+  platformVersion?: string;
+  platformDevice?: string;
+  platformBrand?: string;
+  preferredLocales?: string;
+  clientLocale?: string;
+  clientVersion?: string;
+  clientBundleId: string;
+  observerMode: "true" | "false";
+  nonce?: string;
+  storefront?: string;
+  isDebugBuild: "true" | "false";
+  isBackgrounded: "false";
+}
+
+export interface PersonAttributesParams {
+  name?: string;
+  email?: string;
+  personMetadata: PersonMetadata;
+  /** `$set` traits — newest write wins per key. */
+  traits?: Record<string, string | number | boolean | null>;
+  /** `$set_once` traits — earliest write wins; loses to any `$set`. */
+  setOnce?: Record<string, string | number | boolean | null>;
+  /**
+   * Stable client-supplied id used as the LWW tie-break (`eventId`). Lets a
+   * synchronous write and its eventual async `$set` echo converge idempotently.
+   */
+  clientEventId?: string;
+}
+
+export interface SyncPersonAttributesResult {
+  readonly snapshot: SdkPersonSnapshot;
+  readonly identityResult: PersonIdentityResult;
+}
+
+/**
+ * Catch-all service error. Wraps `DatabaseError`, infrastructural failures, and
+ * cross-service errors at the public-method boundary so callers see one stable
+ * error tag.
+ */
+export class SdkServiceError extends Schema.TaggedErrorClass<SdkServiceError>("SdkServiceError")(
+  "SdkServiceError",
+  { cause: Schema.String },
+) {}
+
+const CONFLICTING_IDENTIFIED_WARNING_FRAGMENT = "different identified person";
+
+const originFromPersonMetadata = (metadata: PersonMetadata): PersonOriginValue => {
+  const platform = metadata.platform.toLowerCase();
+  if (platform.includes("ios")) {
+    return PersonOrigin.IOS;
+  }
+  if (platform.includes("android")) {
+    return PersonOrigin.Android;
+  }
+  return PersonOrigin.API;
+};
+
+const buildSyncSetAttributes = (
+  metadata: PersonMetadata,
+  traits: Record<string, string | number | boolean | null> | undefined,
+) => ({
+  ...traits,
+  platform: metadata.platform,
+  sdk: metadata.sdk,
+  sdkVersion: metadata.sdkVersion,
+  platformFlavor: metadata.platformFlavor,
+  platformFlavorVersion: metadata.platformFlavorVersion,
+  platformVersion: metadata.platformVersion,
+  platformDevice: metadata.platformDevice,
+  platformBrand: metadata.platformBrand,
+  preferredLocales: metadata.preferredLocales,
+  clientLocale: metadata.clientLocale,
+  clientVersion: metadata.clientVersion,
+  storefront: metadata.storefront,
+});
+
+/**
+ * `SdkService` is the orchestration entry point for the public SDK API
+ * routes — `getPerson`, `identifyPerson`, `syncPersonAttributes`,
+ * `submitPurchaseTransaction`. It owns none of the underlying domain
+ * operations: it composes other services (`PersonIdentityService`,
+ * `PerkGrantService`, `PurchaseService`, `AppStorePaymentProviderService`)
+ * and the SDK-specific snapshot composition logic in `snapshot-builder.ts`.
+ *
+ * The two delegated services (`PerkGrantService.getPersonUnlockedPerks`,
+ * `PurchaseService.getPersonPurchases`) require `project:all` permission
+ * internally; SDK callers carry only `project:read`. The publishable-key
+ * auth has already been validated upstream by `bridgeAuthSession` against
+ * the requested project, so SDK provides an elevated `AuthSession` (via
+ * `elevate-auth.ts`) for those delegated calls only.
+ *
+ * `AuthSession`, `Db`, `PerkGrantService`, `PurchaseService`,
+ * `PersonIdentityService`, and `AppStorePaymentProviderService` are provided
+ * by the application root.
+ */
+export class SdkService extends Context.Service<SdkService>()("SdkService", {
+  make: Effect.gen(function* () {
+    const personIdentityService = yield* PersonIdentityService;
+    const perkGrantService = yield* PerkGrantService;
+    const purchaseService = yield* PurchaseService;
+    const identityProjectionPublisher = yield* IdentityProjectionPublisher;
+    const db = yield* Db;
+
+    const findCanonicalPersonByDistinctId = (input: {
+      readonly distinctId: string;
+      readonly projectId: string;
+    }) =>
+      Effect.gen(function* () {
+        const mapping = yield* db.query.personIdentities.findFirst({
+          where: { projectId: input.projectId, distinctId: input.distinctId },
+        });
+        if (!mapping) {
+          return undefined;
+        }
+        let current = yield* db.query.persons.findFirst({
+          where: { id: mapping.personId },
+        });
+        while (current?.mergedIntoPersonId) {
+          const mergedIntoPerson = yield* db.query.persons.findFirst({
+            where: { id: current.mergedIntoPersonId },
+          });
+          if (!mergedIntoPerson) {
+            return current;
+          }
+          current = mergedIntoPerson;
+        }
+        return current;
+      });
+
+    /**
+     * Fans out to `PerkGrantService.getPersonUnlockedPerks` per id with an
+     * elevated session so the inner `project:all` check passes. Returns the
+     * flattened result.
+     */
+    const loadGrantsForPersonIds = Effect.fn("loadGrantsForPersonIds")(function* (
+      personIds: ReadonlyArray<string>,
+      projectId: string,
+      session: typeof AuthSession.Service,
+    ) {
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+      yield* Effect.annotateCurrentSpan("voidhash.person.ids.count", personIds.length);
+      const elevated = elevateProjectAccess(session, projectId);
+      const perGroup = yield* Effect.all(
+        personIds.map((personId) =>
+          perkGrantService
+            .getPersonUnlockedPerks(personId)
+            .pipe(Effect.provideService(AuthSession, elevated)),
+        ),
+        { concurrency: "unbounded" },
+      );
+      return perGroup.flat();
+    });
+
+    /**
+     * Fans out to `PurchaseService.getPersonPurchases` per id with an
+     * elevated session.
+     */
+    const loadPurchasesForPersonIds = Effect.fn("loadPurchasesForPersonIds")(function* (
+      personIds: ReadonlyArray<string>,
+      projectId: string,
+      session: typeof AuthSession.Service,
+    ) {
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+      yield* Effect.annotateCurrentSpan("voidhash.person.ids.count", personIds.length);
+      const elevated = elevateProjectAccess(session, projectId);
+      const perGroup = yield* Effect.all(
+        personIds.map((personId) =>
+          purchaseService
+            .getPersonPurchases(personId)
+            .pipe(Effect.provideService(AuthSession, elevated)),
+        ),
+        { concurrency: "unbounded" },
+      );
+      return perGroup.flat();
+    });
+
+    const buildSnapshot = Effect.fn("buildSnapshot")(function* (input: {
+      readonly projectId: string;
+      readonly distinctId: string;
+      readonly personId: string;
+      readonly previousDistinctId?: string;
+      readonly identityResult?: PersonIdentityResult;
+    }) {
+      const session = yield* AuthSession;
+
+      yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+      yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+      yield* Effect.annotateCurrentSpan("voidhash.person.id", input.personId);
+      if (input.previousDistinctId) {
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.person.previous_distinct_id",
+          input.previousDistinctId,
+        );
+      }
+      const organizationId = session?.projects[0]?.organizationId;
+      if (organizationId) {
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+      }
+
+      const sourceMapping =
+        input.previousDistinctId && input.previousDistinctId !== input.distinctId
+          ? yield* db.query.personIdentities.findFirst({
+              where: { projectId: input.projectId, distinctId: input.previousDistinctId },
+            })
+          : undefined;
+
+      const activeJob = yield* db.query.personIdentityMigrationJobs.findFirst({
+        orderBy: { createdAt: "desc" },
+        where: {
+          projectId: input.projectId,
+          targetPersonId: input.personId,
+          distinctId: input.distinctId,
+          status: { in: [...ACTIVE_MIGRATION_STATUSES] },
+        },
+      });
+
+      const scope = decideSnapshotScope({
+        activeJob,
+        distinctId: input.distinctId,
+        identityResult: input.identityResult,
+        personId: input.personId,
+        previousDistinctId: input.previousDistinctId,
+        sourceMapping,
+      });
+
+      yield* Effect.annotateCurrentSpan("voidhash.snapshot.mode", scope.mode);
+      if (scope.migrationJobId) {
+        yield* Effect.annotateCurrentSpan("voidhash.migration_job.id", scope.migrationJobId);
+      }
+      yield* Effect.annotateCurrentSpan(
+        "voidhash.person.ids.count",
+        scope.includedPersonIds.length,
+      );
+
+      const personRows =
+        scope.includedPersonIds.length === 0
+          ? []
+          : yield* db.query.persons.findMany({
+              where: { id: { in: [...scope.includedPersonIds] } },
+            });
+      const targetPerson = personRows.find((person) => person.id === input.personId);
+      if (!targetPerson) {
+        return yield* Effect.fail(
+          new SdkServiceError({
+            cause: `Target person ${input.personId} not found while building SDK snapshot`,
+          }),
+        );
+      }
+
+      const existingPersonIds = personRows.map((person) => person.id);
+
+      const [subscriptionRows, purchaseRows, unlockedPerkRows] = yield* Effect.all(
+        [
+          Effect.gen(function* () {
+            if (existingPersonIds.length === 0) {
+              return [] as ReadonlyArray<SubscriptionWithProduct>;
+            }
+            return (yield* db.query.subscriptions.findMany({
+              where: { personId: { in: [...existingPersonIds] } },
+              with: {
+                paymentProviderConfigurationProduct: true,
+              },
+            })) as ReadonlyArray<
+              DbSubscription & {
+                paymentProviderConfigurationProduct: DbPaymentProviderConfigurationProduct | null;
+              }
+            >;
+          }),
+          loadPurchasesForPersonIds(existingPersonIds, input.projectId, session),
+          loadGrantsForPersonIds(existingPersonIds, input.projectId, session),
+        ],
+        { concurrency: "unbounded" },
+      );
+
+      const purchaseConfigurationProductIds = [
+        ...new Set(purchaseRows.map((purchase) => purchase.paymentProviderConfigurationProductId)),
+      ];
+      const purchaseConfigurationProducts =
+        purchaseConfigurationProductIds.length === 0
+          ? []
+          : yield* db.query.paymentProviderConfigurationProducts.findMany({
+              where: { id: { in: [...purchaseConfigurationProductIds] } },
+            });
+      const purchaseProductIdLookup = new Map<string, string>();
+      for (const product of purchaseConfigurationProducts) {
+        purchaseProductIdLookup.set(product.id, product.productId);
+      }
+
+      return composeSnapshot({
+        distinctId: input.distinctId,
+        grants: unlockedPerkRows,
+        identityResult: input.identityResult,
+        now: new Date(),
+        personId: input.personId,
+        purchaseProductIdLookup,
+        purchases: purchaseRows,
+        scope,
+        subscriptions: subscriptionRows,
+        targetPerson,
+      });
+    });
+
+    const getPerson = Effect.fn("getPerson")(
+      function* () {
+        const session = yield* AuthSession;
+
+        const distinctId = session?.person?.distinctId;
+        if (!distinctId) {
+          return yield* Effect.fail(new SdkValidationError({ message: "Distinct ID not found" }));
+        }
+
+        const projectId = session?.projects[0]?.id;
+        if (!projectId) {
+          return yield* Effect.fail(
+            new AuthenticationError({
+              cause:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+              message:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+            }),
+          );
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+        const organizationId = session?.projects[0]?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+
+        const canonicalPerson = yield* findCanonicalPersonByDistinctId({
+          distinctId,
+          projectId,
+        });
+        if (!canonicalPerson) {
+          return yield* Effect.fail(new SdkPersonNotFoundError({ message: "Person not found" }));
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", canonicalPerson.id);
+
+        return yield* buildSnapshot({
+          distinctId,
+          personId: canonicalPerson.id,
+          projectId,
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PerkGrantServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PurchaseServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PersonNotFoundError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Person ${error.id} not found while loading SDK snapshot`,
+                }),
+              ),
+            ActionForbiddenError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Permission denied during SDK snapshot composition: ${error.message}`,
+                }),
+              ),
+          }),
+        ),
+    );
+
+    const identifyPerson = Effect.fn("identifyPerson")(
+      function* (input: {
+        distinctId: string;
+        name: string | null;
+        email: string | null;
+        traits?: Record<string, string | number | boolean | null>;
+      }) {
+        const session = yield* AuthSession;
+
+        const projectId = session?.projects[0]?.id;
+        if (!projectId) {
+          return yield* Effect.fail(
+            new AuthenticationError({
+              cause:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+              message:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+            }),
+          );
+        }
+
+        const currentDistinctId = session?.person?.distinctId;
+        if (!currentDistinctId) {
+          return yield* Effect.fail(
+            new AuthenticationError({
+              cause: "No SDK person identity was found in the authentication session.",
+              message: "No SDK person identity was found in the authentication session.",
+            }),
+          );
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", input.distinctId);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.person.previous_distinct_id",
+          currentDistinctId,
+        );
+        const organizationId = session?.projects[0]?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+
+        if (!isAnonymousId(currentDistinctId)) {
+          const canonicalPerson = yield* findCanonicalPersonByDistinctId({
+            distinctId: input.distinctId,
+            projectId,
+          });
+          if (!canonicalPerson) {
+            return yield* Effect.fail(
+              new SdkPersonNotFoundError({
+                message:
+                  "Cannot identify from an already-identified person to an unknown distinct id",
+              }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.person.id", canonicalPerson.id);
+
+          yield* Effect.log(
+            `identifyPerson no-op for already-identified source ${currentDistinctId}; returning snapshot for ${input.distinctId} (person ${canonicalPerson.id})`,
+          );
+
+          return yield* buildSnapshot({
+            distinctId: input.distinctId,
+            personId: canonicalPerson.id,
+            projectId,
+          });
+        }
+
+        if (isAnonymousId(input.distinctId)) {
+          return yield* Effect.fail(
+            new SdkValidationError({
+              message: "Identify target distinct ID cannot use the anonymous prefix.",
+            }),
+          );
+        }
+
+        const result = yield* personIdentityService.identifyDistinctId({
+          previousDistinctId: currentDistinctId,
+          email: input.email ?? undefined,
+          eventTimestamp: new Date(),
+          distinctId: input.distinctId,
+          name: input.name ?? undefined,
+          projectId,
+          setAttributes: input.traits ?? {},
+          setOnceAttributes: {},
+        });
+        if (
+          result.warnings.some((warning) =>
+            warning.includes(CONFLICTING_IDENTIFIED_WARNING_FRAGMENT),
+          )
+        ) {
+          return yield* Effect.fail(
+            new SdkPersonAlreadyIdentifiedError({ distinctId: input.distinctId }),
+          );
+        }
+        if (!result.identity.personId) {
+          return yield* Effect.die(new Error("identifyDistinctId resolved without a personId"));
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", result.identity.personId);
+
+        yield* Effect.log(
+          `Identified person ${result.identity.personId} for distinct id ${input.distinctId}`,
+        );
+
+        return yield* buildSnapshot({
+          distinctId: input.distinctId,
+          identityResult: result,
+          personId: result.identity.personId,
+          previousDistinctId: currentDistinctId,
+          projectId,
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PersonServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PerkGrantServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PurchaseServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PersonNotFoundError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Person ${error.id} not found while loading SDK snapshot`,
+                }),
+              ),
+            ActionForbiddenError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Permission denied during SDK snapshot composition: ${error.message}`,
+                }),
+              ),
+          }),
+        ),
+    );
+
+    const syncPersonAttributes = Effect.fn("syncPersonAttributes")(
+      function* (input: PersonAttributesParams) {
+        const session = yield* AuthSession;
+
+        const distinctId = session?.person?.distinctId;
+        if (!distinctId) {
+          return yield* Effect.fail(new SdkValidationError({ message: "Distinct ID not found" }));
+        }
+
+        const projectId = session?.projects[0]?.id;
+        if (!projectId) {
+          return yield* Effect.fail(
+            new AuthenticationError({
+              cause:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+              message:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+            }),
+          );
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+        const organizationId = session?.projects[0]?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+        yield* Effect.annotateCurrentSpan("voidhash.sdk.platform", input.personMetadata.platform);
+        yield* Effect.annotateCurrentSpan("voidhash.sdk.name", input.personMetadata.sdk);
+        yield* Effect.annotateCurrentSpan("voidhash.sdk.version", input.personMetadata.sdkVersion);
+        if (input.personMetadata.clientBundleId) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.app.bundle_id",
+            input.personMetadata.clientBundleId,
+          );
+        }
+
+        if (!isAnonymousId(distinctId)) {
+          const existing = yield* findCanonicalPersonByDistinctId({ distinctId, projectId });
+          if (!existing) {
+            return yield* Effect.fail(
+              new SdkPersonNotFoundError({
+                message:
+                  "Cannot sync attributes for an unknown identified person. Identified persons must be created through the identify flow.",
+              }),
+            );
+          }
+        }
+
+        // `buildSyncSetAttributes` always injects platform/sdk metadata, so
+        // `setAttributes` is never truly empty — guard person creation on the
+        // *caller-supplied* payload instead. This keeps an attribute-less
+        // request (no longer issued at SDK init) from materializing a person.
+        const hasExplicitPayload =
+          (input.traits && Object.keys(input.traits).length > 0) ||
+          (input.setOnce && Object.keys(input.setOnce).length > 0) ||
+          input.email !== undefined ||
+          input.name !== undefined;
+
+        const setAttributes = buildSyncSetAttributes(input.personMetadata, input.traits);
+
+        const identityResult = yield* personIdentityService.resolveDistinctId({
+          distinctId,
+          email: input.email,
+          ...(input.clientEventId ? { eventId: input.clientEventId } : {}),
+          eventTimestamp: new Date(),
+          name: input.name,
+          origin: originFromPersonMetadata(input.personMetadata),
+          projectId,
+          setAttributes,
+          setOnceAttributes: input.setOnce ?? {},
+          shouldCreatePerson: hasExplicitPayload,
+        });
+        if (!identityResult.identity.personId) {
+          // With no explicit payload we asked `resolveDistinctId` not to create a
+          // person, so an anonymous id with no prior person resolves personless.
+          // There is nothing to snapshot and nothing was created — surface a
+          // clean validation error instead of dying.
+          if (!hasExplicitPayload) {
+            return yield* Effect.fail(
+              new SdkValidationError({
+                message:
+                  "No attributes to sync. Provide at least one of email, name, traits, or setOnce.",
+              }),
+            );
+          }
+          return yield* Effect.die(new Error("resolveDistinctId resolved without a personId"));
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", identityResult.identity.personId);
+
+        // Project the synchronous write into ClickHouse so analytics stays
+        // consistent with the operational Postgres row. Uses the projection
+        // publisher (person/identity rows only — no synthetic analytics event,
+        // no quota impact). A ClickHouse failure must not fail the durable
+        // Postgres write, so log-and-swallow (mirrors `identifyDistinctId`).
+        yield* identityProjectionPublisher
+          .publishIdentityResult({
+            identity: { distinctId },
+            mappingEvents: identityResult.mappingEvents,
+            personEvents: identityResult.personEvents,
+          })
+          .pipe(
+            Effect.catch((error) =>
+              Effect.logError(
+                "Failed to project synchronous person-attribute write to analytics; Postgres is updated but ClickHouse will lag until a later event re-emits this person",
+                { cause: error, distinctId, personId: identityResult.identity.personId, projectId },
+              ),
+            ),
+            Effect.provideService(Db, db),
+          );
+
+        const snapshot = yield* buildSnapshot({
+          distinctId,
+          identityResult,
+          personId: identityResult.identity.personId,
+          projectId,
+        });
+
+        return { identityResult, snapshot } satisfies SyncPersonAttributesResult;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PersonServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PerkGrantServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PurchaseServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PersonNotFoundError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Person ${error.id} not found while loading SDK snapshot`,
+                }),
+              ),
+            ActionForbiddenError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Permission denied during SDK snapshot composition: ${error.message}`,
+                }),
+              ),
+          }),
+        ),
+    );
+
+    const submitPurchaseTransaction = Effect.fn("submitPurchaseTransaction")(
+      function* (input: {
+        readonly providerId: "apple-app-store" | "google-play";
+        readonly transactionId?: string;
+        readonly purchaseToken?: string;
+        readonly bundleId?: string;
+        readonly packageName?: string;
+        /**
+         * Optional Google Play product hint. The authoritative product id is
+         * derived server-side from the purchase token, so this is only a
+         * last-resort fallback and may be omitted.
+         */
+        readonly productId?: string;
+      }) {
+        const session = yield* AuthSession;
+        const distinctId = session?.person?.distinctId;
+        if (!distinctId) {
+          return yield* Effect.fail(new SdkValidationError({ message: "Distinct ID not found" }));
+        }
+
+        const projectId = session?.projects[0]?.id;
+        if (!projectId) {
+          return yield* Effect.fail(
+            new AuthenticationError({
+              cause:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+              message:
+                "No projects with granted access found in your authentication session. Make sure you are using compatible authentication method.",
+            }),
+          );
+        }
+
+        yield* Effect.annotateCurrentSpan("voidhash.project.id", projectId);
+        yield* Effect.annotateCurrentSpan("voidhash.person.distinct_id", distinctId);
+        yield* Effect.annotateCurrentSpan("voidhash.payment_provider.id", input.providerId);
+        const organizationId = session?.projects[0]?.organizationId;
+        if (organizationId) {
+          yield* Effect.annotateCurrentSpan("voidhash.organization.id", organizationId);
+        }
+        if (input.transactionId) {
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.transaction.provider_transaction_id",
+            input.transactionId,
+          );
+        }
+        if (input.bundleId) {
+          yield* Effect.annotateCurrentSpan("voidhash.app.bundle_id", input.bundleId);
+        }
+
+        if (input.providerId === "google-play") {
+          if (!input.purchaseToken || !input.packageName) {
+            return yield* Effect.fail(
+              new SdkValidationError({
+                message: "Google Play purchase submission requires purchaseToken and packageName.",
+              }),
+            );
+          }
+          const googlePlayPaymentProviderService = yield* GooglePlayPaymentProviderService;
+          const googleResult = yield* googlePlayPaymentProviderService.processSdkTransaction({
+            distinctId,
+            packageName: input.packageName,
+            productId: input.productId ?? "",
+            projectId,
+            purchaseToken: input.purchaseToken,
+            receivedAt: new Date(),
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.person.id", googleResult.personId);
+          return yield* buildSnapshot({
+            distinctId,
+            personId: googleResult.personId,
+            projectId,
+          });
+        }
+
+        if (!input.transactionId || !input.bundleId) {
+          return yield* Effect.fail(
+            new SdkValidationError({
+              message: "App Store purchase submission requires transactionId and bundleId.",
+            }),
+          );
+        }
+
+        const appStorePaymentProviderService = yield* AppStorePaymentProviderService;
+        const result = yield* appStorePaymentProviderService.processSdkTransaction({
+          bundleId: input.bundleId,
+          distinctId,
+          projectId,
+          receivedAt: new Date(),
+          transactionId: input.transactionId,
+        });
+
+        yield* Effect.annotateCurrentSpan("voidhash.person.id", result.personId);
+
+        return yield* buildSnapshot({
+          distinctId,
+          personId: result.personId,
+          projectId,
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            AppStorePaymentProviderServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: error.cause })),
+            GooglePlayPaymentProviderServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: error.cause })),
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PerkGrantServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PurchaseServiceError: (error) =>
+              Effect.fail(new SdkServiceError({ cause: String(error.cause) })),
+            PersonNotFoundError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Person ${error.id} not found while loading SDK snapshot`,
+                }),
+              ),
+            ActionForbiddenError: (error) =>
+              Effect.fail(
+                new SdkServiceError({
+                  cause: `Permission denied during SDK snapshot composition: ${error.message}`,
+                }),
+              ),
+          }),
+        ),
+    );
+
+    return {
+      getPerson,
+      identifyPerson,
+      submitPurchaseTransaction,
+      syncPersonAttributes,
+    } as const;
+  }),
+}) {
+  static layer = Layer.effect(SdkService)(SdkService.make);
+}
diff --git a/packages/core/src/services/sdk/elevate-auth.ts b/packages/core/src/services/sdk/elevate-auth.ts
new file mode 100644
index 000000000..14e7c781a
--- /dev/null
+++ b/packages/core/src/services/sdk/elevate-auth.ts
@@ -0,0 +1,31 @@
+import type { AnyAuthSession } from "../../domain/auth/Auth.ts";
+
+const ELEVATED_PERMISSION = "project:all";
+
+/**
+ * Returns a copy of `session` with `project:all` added to the permissions of
+ * the project whose id matches `projectId`. The input is not mutated.
+ *
+ * Used when `SdkService` delegates to services that gate on `project:all`
+ * (`PerkGrantService.getPersonUnlockedPerks`, `PurchaseService.getPersonPurchases`).
+ * The SDK's publishable-key session carries `project:read` only, but the
+ * publishable-key auth has already been validated upstream by
+ * `bridgeAuthSession` against the requested project, so it is safe to elevate
+ * the session for the duration of the delegated call.
+ */
+export const elevateProjectAccess = (
+  session: AnyAuthSession,
+  projectId: string,
+): AnyAuthSession => ({
+  ...session,
+  projects: session.projects.map((project) =>
+    project.id === projectId
+      ? {
+          ...project,
+          permissions: project.permissions.includes(ELEVATED_PERMISSION)
+            ? project.permissions
+            : [...project.permissions, ELEVATED_PERMISSION],
+        }
+      : project,
+  ),
+});
diff --git a/packages/core/src/services/sdk/index.ts b/packages/core/src/services/sdk/index.ts
new file mode 100644
index 000000000..806e5a1c5
--- /dev/null
+++ b/packages/core/src/services/sdk/index.ts
@@ -0,0 +1 @@
+export * from "./SdkService.ts";
diff --git a/packages/core/src/services/sdk/snapshot-builder.ts b/packages/core/src/services/sdk/snapshot-builder.ts
new file mode 100644
index 000000000..3ea830e30
--- /dev/null
+++ b/packages/core/src/services/sdk/snapshot-builder.ts
@@ -0,0 +1,476 @@
+import { PurchaseType, SubscriptionStatus } from "@voidhash/lib";
+
+import {
+  type Person as DbPerson,
+  type PersonIdentity as DbPersonIdentity,
+  type PersonUnlockedPerk as DbPersonUnlockedPerk,
+  type Purchase as DbPurchase,
+  type Subscription as DbSubscription,
+  type PaymentProviderConfigurationProduct as DbPaymentProviderConfigurationProduct,
+  PersonIdentityKind,
+  PersonIdentityMigrationJobStatus,
+  PersonUnlockedPerkStatus,
+} from "@voidhash/db";
+import {
+  SdkPersonSnapshot,
+  SdkPersonSnapshotContext,
+  SdkPersonSnapshotCurrentSubscription,
+  type SdkPersonSnapshotGrantSource,
+  type SdkPersonSnapshotGrantStatus,
+  SdkPersonSnapshotGrant,
+  type SdkPersonSnapshotMode,
+  SdkPersonSnapshotPurchaseHistory,
+  type SdkPersonSnapshotPurchaseType,
+  SdkPersonSnapshotPurchases,
+  SdkPersonSnapshotSubscriptionHistory,
+  SdkPersonSnapshotSubscriptions,
+  SdkPersonSnapshotEntitlements,
+  type SdkSubscriptionCurrentStatus,
+  type SdkSubscriptionHistoryStatus,
+} from "../../domain/sdkPerson/SdkPerson.ts";
+import type { PersonIdentityResult } from "../personIdentity/PersonIdentityService.ts";
+
+export type SubscriptionWithProduct = DbSubscription & {
+  readonly paymentProviderConfigurationProduct: DbPaymentProviderConfigurationProduct | null;
+};
+
+/**
+ * Subset of `personIdentityMigrationJobs` used by the scope decider. The full
+ * row carries event blobs and timestamps the decider does not need.
+ */
+export interface SnapshotMigrationJobRow {
+  readonly id: string;
+  readonly previousDistinctId: string;
+  readonly distinctId: string;
+  readonly targetPersonId: string;
+  readonly status: number;
+  readonly projectId: string;
+}
+
+export interface TemporaryCanonicalScope {
+  readonly canonicalPersonId: string;
+  readonly includedPersonIds: ReadonlyArray<string>;
+  readonly sourcePersonId: string | null;
+  readonly migrationJobId: string | null;
+  readonly mode: SdkPersonSnapshotMode;
+}
+
+const CONFLICTING_IDENTIFIED_WARNING_FRAGMENT = "different identified person";
+
+/**
+ * Migration job statuses that signal the source resources have NOT yet been
+ * durably re-parented onto the target person — the SDK keeps merging until
+ * the job is `Succeeded` or otherwise resolved.
+ */
+export const ACTIVE_MIGRATION_STATUSES: ReadonlyArray<number> = [
+  PersonIdentityMigrationJobStatus.Pending,
+  PersonIdentityMigrationJobStatus.InProgress,
+  PersonIdentityMigrationJobStatus.Failed,
+];
+
+const isConflictingIdentifiedWarning = (warnings: ReadonlyArray<string>) =>
+  warnings.some((warning) => warning.includes(CONFLICTING_IDENTIFIED_WARNING_FRAGMENT));
+
+const targetOnlyScope = (
+  personId: string,
+  migrationJobId: string | null = null,
+): TemporaryCanonicalScope => ({
+  canonicalPersonId: personId,
+  includedPersonIds: [personId],
+  migrationJobId,
+  mode: "persisted",
+  sourcePersonId: null,
+});
+
+export interface DecideSnapshotScopeInput {
+  readonly distinctId: string;
+  readonly personId: string;
+  readonly previousDistinctId?: string;
+  readonly identityResult?: PersonIdentityResult;
+  readonly sourceMapping?: DbPersonIdentity;
+  readonly activeJob?: SnapshotMigrationJobRow;
+}
+
+/**
+ * Pure decision: given the inputs the orchestrator has already fetched,
+ * which persons should appear in the snapshot and what mode should it be
+ * tagged with?
+ */
+export const decideSnapshotScope = (input: DecideSnapshotScopeInput): TemporaryCanonicalScope => {
+  if (input.identityResult) {
+    return decideFromIdentityResult(input);
+  }
+  return decideFromMigrationJob(input);
+};
+
+const decideFromIdentityResult = (input: DecideSnapshotScopeInput): TemporaryCanonicalScope => {
+  const identityResult = input.identityResult!;
+  const target = targetOnlyScope(input.personId);
+
+  if (isConflictingIdentifiedWarning(identityResult.warnings)) {
+    return target;
+  }
+
+  const previousDistinctId = input.previousDistinctId;
+  if (!previousDistinctId || previousDistinctId === input.distinctId) {
+    return target;
+  }
+
+  if (!input.sourceMapping || input.sourceMapping.personId === input.personId) {
+    return target;
+  }
+
+  if (input.sourceMapping.kind === PersonIdentityKind.Identified) {
+    return target;
+  }
+
+  return {
+    canonicalPersonId: input.personId,
+    includedPersonIds: [input.personId, input.sourceMapping.personId],
+    migrationJobId: input.activeJob?.id ?? null,
+    mode: "temporary_pending_transfer",
+    sourcePersonId: input.sourceMapping.personId,
+  };
+};
+
+const decideFromMigrationJob = (input: DecideSnapshotScopeInput): TemporaryCanonicalScope => {
+  if (!input.activeJob) {
+    return targetOnlyScope(input.personId);
+  }
+
+  if (!input.sourceMapping || input.sourceMapping.personId === input.personId) {
+    return targetOnlyScope(input.personId, input.activeJob.id);
+  }
+
+  return {
+    canonicalPersonId: input.personId,
+    includedPersonIds: [input.personId, input.sourceMapping.personId],
+    migrationJobId: input.activeJob.id,
+    mode: "temporary_pending_transfer",
+    sourcePersonId: input.sourceMapping.personId,
+  };
+};
+
+export const mapSubscriptionStatus = (
+  subscription: DbSubscription,
+  now: Date,
+): SdkSubscriptionHistoryStatus => {
+  if (subscription.status === SubscriptionStatus.Canceled) {
+    return "canceled";
+  }
+  if (subscription.expiresAt && subscription.expiresAt.getTime() < now.getTime()) {
+    return "expired";
+  }
+  if (subscription.isTrial) {
+    return "trialing";
+  }
+  return "active";
+};
+
+const SUBSCRIPTION_RANK_ORDER: Record<SdkSubscriptionHistoryStatus, number> = {
+  active: 0,
+  trialing: 1,
+  past_due: 2,
+  canceled: 3,
+  expired: 4,
+};
+
+export const compareSubscriptionsForCurrent = (
+  left: DbSubscription,
+  right: DbSubscription,
+  now: Date,
+): number => {
+  const leftStatus = mapSubscriptionStatus(left, now);
+  const rightStatus = mapSubscriptionStatus(right, now);
+  if (leftStatus !== rightStatus) {
+    return SUBSCRIPTION_RANK_ORDER[leftStatus] - SUBSCRIPTION_RANK_ORDER[rightStatus];
+  }
+  const leftExpires = left.expiresAt?.getTime() ?? Number.NEGATIVE_INFINITY;
+  const rightExpires = right.expiresAt?.getTime() ?? Number.NEGATIVE_INFINITY;
+  if (leftExpires !== rightExpires) {
+    return rightExpires - leftExpires;
+  }
+  const leftStarts = left.startsAt?.getTime() ?? 0;
+  const rightStarts = right.startsAt?.getTime() ?? 0;
+  if (leftStarts !== rightStarts) {
+    return rightStarts - leftStarts;
+  }
+  const leftUpdated = left.updatedAt?.getTime() ?? 0;
+  const rightUpdated = right.updatedAt?.getTime() ?? 0;
+  return rightUpdated - leftUpdated;
+};
+
+export const selectCurrentSubscription = (
+  candidates: ReadonlyArray<SubscriptionWithProduct>,
+  now: Date,
+): SdkPersonSnapshotCurrentSubscription | null => {
+  const eligible = candidates.filter((subscription) => {
+    const status = mapSubscriptionStatus(subscription, now);
+    return status !== "expired";
+  });
+  if (eligible.length === 0) {
+    return null;
+  }
+
+  const sorted = [...eligible].sort((left, right) =>
+    compareSubscriptionsForCurrent(left, right, now),
+  );
+  const best = sorted[0];
+  if (!best) {
+    return null;
+  }
+
+  const status = mapSubscriptionStatus(best, now);
+  const currentStatus: SdkSubscriptionCurrentStatus =
+    status === "expired" ? "none" : (status satisfies SdkSubscriptionCurrentStatus);
+
+  return new SdkPersonSnapshotCurrentSubscription({
+    expiresAt: best.expiresAt ?? null,
+    productId: best.paymentProviderConfigurationProduct?.productId ?? null,
+    status: currentStatus,
+    subscriptionId: best.id,
+  });
+};
+
+export const mapSubscriptionHistory = (
+  subscription: SubscriptionWithProduct,
+  now: Date,
+): SdkPersonSnapshotSubscriptionHistory =>
+  new SdkPersonSnapshotSubscriptionHistory({
+    canceledAt: subscription.canceledAt ?? null,
+    expiresAt: subscription.expiresAt ?? null,
+    isTrial: subscription.isTrial,
+    productId: subscription.paymentProviderConfigurationProduct?.productId ?? null,
+    sourcePersonId: subscription.personId,
+    startsAt: subscription.startsAt,
+    status: mapSubscriptionStatus(subscription, now),
+    subscriptionId: subscription.id,
+  });
+
+export const mapPurchaseType = (purchase: DbPurchase): SdkPersonSnapshotPurchaseType => {
+  if (purchase.type === PurchaseType.OneTime || purchase.type === PurchaseType.OneTimeConsumable) {
+    return "one_time";
+  }
+  return "subscription";
+};
+
+export const mapPurchaseHistory = (
+  purchase: DbPurchase,
+  productIdLookup: ReadonlyMap<string, string>,
+): SdkPersonSnapshotPurchaseHistory =>
+  new SdkPersonSnapshotPurchaseHistory({
+    createdAt: purchase.createdAt ?? new Date(0),
+    productId: productIdLookup.get(purchase.paymentProviderConfigurationProductId) ?? null,
+    providerKey: purchase.providerKey,
+    purchaseId: purchase.id,
+    sourcePersonId: purchase.personId,
+    type: mapPurchaseType(purchase),
+  });
+
+export const mapGrant = (perk: DbPersonUnlockedPerk): SdkPersonSnapshotGrant => {
+  const isActive = perk.status === PersonUnlockedPerkStatus.Active;
+  const source: SdkPersonSnapshotGrantSource = perk.unlockedBySubscriptionId
+    ? "subscription"
+    : perk.unlockedByPurchaseId
+      ? "purchase"
+      : "manual";
+  const sourceId = perk.unlockedBySubscriptionId ?? perk.unlockedByPurchaseId ?? null;
+  const status: SdkPersonSnapshotGrantStatus = isActive ? "active" : "expired";
+
+  return new SdkPersonSnapshotGrant({
+    expiresAt: perk.expiresAt ?? null,
+    perkId: perk.perkId,
+    source,
+    sourceId,
+    sourcePersonId: perk.personId,
+    status,
+  });
+};
+
+export const dedupeSubscriptions = (
+  rows: ReadonlyArray<SubscriptionWithProduct>,
+): ReadonlyArray<SubscriptionWithProduct> => {
+  const byId = new Map<string, SubscriptionWithProduct>();
+  for (const row of rows) {
+    if (!byId.has(row.id)) {
+      byId.set(row.id, row);
+    }
+  }
+  const byStoreId = new Map<string, SubscriptionWithProduct>();
+  for (const row of byId.values()) {
+    const existing = byStoreId.get(row.storeSubscriptionId);
+    if (!existing) {
+      byStoreId.set(row.storeSubscriptionId, row);
+      continue;
+    }
+    const existingUpdated = existing.updatedAt?.getTime() ?? 0;
+    const candidateUpdated = row.updatedAt?.getTime() ?? 0;
+    if (candidateUpdated > existingUpdated) {
+      byStoreId.set(row.storeSubscriptionId, row);
+    }
+  }
+  return [...byStoreId.values()];
+};
+
+export const dedupePurchases = (rows: ReadonlyArray<DbPurchase>): ReadonlyArray<DbPurchase> => {
+  const byId = new Map<string, DbPurchase>();
+  for (const row of rows) {
+    if (!byId.has(row.id)) {
+      byId.set(row.id, row);
+    }
+  }
+  const byProviderKey = new Map<string, DbPurchase>();
+  for (const row of byId.values()) {
+    const existing = byProviderKey.get(row.providerKey);
+    if (!existing) {
+      byProviderKey.set(row.providerKey, row);
+      continue;
+    }
+    const existingCreated = existing.createdAt?.getTime() ?? 0;
+    const candidateCreated = row.createdAt?.getTime() ?? 0;
+    if (candidateCreated > existingCreated) {
+      byProviderKey.set(row.providerKey, row);
+    }
+  }
+  return [...byProviderKey.values()];
+};
+
+export const dedupeGrants = (
+  rows: ReadonlyArray<DbPersonUnlockedPerk>,
+): ReadonlyArray<DbPersonUnlockedPerk> => {
+  const buildKey = (row: DbPersonUnlockedPerk) => {
+    const source = row.unlockedBySubscriptionId
+      ? "subscription"
+      : row.unlockedByPurchaseId
+        ? "purchase"
+        : "manual";
+    const sourceId = row.unlockedBySubscriptionId ?? row.unlockedByPurchaseId ?? "";
+    return `${row.perkId}:${source}:${sourceId}`;
+  };
+
+  const byKey = new Map<string, DbPersonUnlockedPerk>();
+  for (const row of rows) {
+    const key = buildKey(row);
+    const existing = byKey.get(key);
+    if (!existing) {
+      byKey.set(key, row);
+      continue;
+    }
+    const existingActive = existing.status === PersonUnlockedPerkStatus.Active;
+    const candidateActive = row.status === PersonUnlockedPerkStatus.Active;
+    if (!existingActive && candidateActive) {
+      byKey.set(key, row);
+    }
+  }
+  return [...byKey.values()];
+};
+
+export const sortSubscriptionHistory = (
+  history: ReadonlyArray<SdkPersonSnapshotSubscriptionHistory>,
+): ReadonlyArray<SdkPersonSnapshotSubscriptionHistory> =>
+  [...history].sort((left, right) => {
+    const leftStarts = left.startsAt.getTime();
+    const rightStarts = right.startsAt.getTime();
+    if (leftStarts !== rightStarts) {
+      return rightStarts - leftStarts;
+    }
+    const leftExpires = left.expiresAt?.getTime() ?? Number.NEGATIVE_INFINITY;
+    const rightExpires = right.expiresAt?.getTime() ?? Number.NEGATIVE_INFINITY;
+    return rightExpires - leftExpires;
+  });
+
+export const sortPurchaseHistory = (
+  history: ReadonlyArray<SdkPersonSnapshotPurchaseHistory>,
+): ReadonlyArray<SdkPersonSnapshotPurchaseHistory> =>
+  [...history].sort((left, right) => right.createdAt.getTime() - left.createdAt.getTime());
+
+export const sortGrants = (
+  grants: ReadonlyArray<SdkPersonSnapshotGrant>,
+): ReadonlyArray<SdkPersonSnapshotGrant> =>
+  [...grants].sort((left, right) => {
+    if (left.status !== right.status) {
+      return left.status === "active" ? -1 : 1;
+    }
+    const leftExpires = left.expiresAt?.getTime() ?? Number.POSITIVE_INFINITY;
+    const rightExpires = right.expiresAt?.getTime() ?? Number.POSITIVE_INFINITY;
+    if (leftExpires !== rightExpires) {
+      return leftExpires - rightExpires;
+    }
+    return left.perkId.localeCompare(right.perkId);
+  });
+
+/**
+ * Profile (`email` + `name`) for the snapshot. When the orchestrator was
+ * given an `identityResult` for the target person, that event is the freshest
+ * data — we prefer its `email`/`name` over the persisted person row, which
+ * may not yet reflect a just-applied identify.
+ */
+export const resolveProfile = ({
+  identityResult,
+  targetPerson,
+}: {
+  readonly identityResult?: PersonIdentityResult;
+  readonly targetPerson: DbPerson;
+}): { readonly email: string | null; readonly name: string | null } => {
+  const targetEvent = identityResult?.personEvents.find(
+    (event) => event.personId === targetPerson.id,
+  );
+  const email = targetEvent?.email ?? targetPerson.email ?? null;
+  const name = targetEvent?.name ?? targetPerson.name ?? null;
+  return { email, name };
+};
+
+export interface ComposeSnapshotInput {
+  readonly distinctId: string;
+  readonly personId: string;
+  readonly scope: TemporaryCanonicalScope;
+  readonly targetPerson: DbPerson;
+  readonly subscriptions: ReadonlyArray<SubscriptionWithProduct>;
+  readonly purchases: ReadonlyArray<DbPurchase>;
+  readonly grants: ReadonlyArray<DbPersonUnlockedPerk>;
+  readonly purchaseProductIdLookup: ReadonlyMap<string, string>;
+  readonly identityResult?: PersonIdentityResult;
+  readonly now: Date;
+}
+
+/**
+ * Pure assembly: dedupe → map → sort → wrap. The orchestrator calls this
+ * after fetching every input; the result is the public `SdkPersonSnapshot`.
+ */
+export const composeSnapshot = (input: ComposeSnapshotInput): SdkPersonSnapshot => {
+  const dedupedSubscriptions = dedupeSubscriptions(input.subscriptions);
+  const dedupedPurchases = dedupePurchases(input.purchases);
+  const dedupedGrants = dedupeGrants(input.grants);
+
+  const subscriptionHistory = sortSubscriptionHistory(
+    dedupedSubscriptions.map((subscription) => mapSubscriptionHistory(subscription, input.now)),
+  );
+  const purchaseHistory = sortPurchaseHistory(
+    dedupedPurchases.map((purchase) => mapPurchaseHistory(purchase, input.purchaseProductIdLookup)),
+  );
+  const grants = sortGrants(dedupedGrants.map((perk) => mapGrant(perk)));
+
+  const currentSubscription = selectCurrentSubscription(dedupedSubscriptions, input.now);
+  const profile = resolveProfile({
+    identityResult: input.identityResult,
+    targetPerson: input.targetPerson,
+  });
+
+  return new SdkPersonSnapshot({
+    distinctId: input.distinctId,
+    email: profile.email,
+    entitlements: new SdkPersonSnapshotEntitlements({ grants }),
+    name: profile.name,
+    personId: input.personId,
+    purchases: new SdkPersonSnapshotPurchases({ history: purchaseHistory }),
+    snapshotContext: new SdkPersonSnapshotContext({
+      includedPersonIds: input.scope.includedPersonIds,
+      migrationJobId: input.scope.migrationJobId,
+      mode: input.scope.mode,
+    }),
+    subscriptions: new SdkPersonSnapshotSubscriptions({
+      current: currentSubscription,
+      history: subscriptionHistory,
+    }),
+  });
+};
diff --git a/packages/core/src/services/slack/slack-client.ts b/packages/core/src/services/slack/slack-client.ts
new file mode 100644
index 000000000..0b3007a14
--- /dev/null
+++ b/packages/core/src/services/slack/slack-client.ts
@@ -0,0 +1,124 @@
+/**
+ * Minimal Slack Web API client — a thin wrapper over `chat.postMessage`
+ * (https://slack.com/api/chat.postMessage). Built for the in-app feedback relay,
+ * but generic enough for any internal notification.
+ *
+ * Uses the runtime's built-in `fetch` so it runs natively on Cloudflare Workers
+ * without an Effect `HttpClient` dependency — same approach as
+ * {@link createAutumnClient}. The bot token (`xoxb-…`) and default channel are
+ * read from {@link SlackConfig} at layer build (worker boot), keeping the
+ * resolver (Alchemy secrets / `Config`) decoupled from the constructor.
+ *
+ * When the bot token or the target channel is missing the client **fails
+ * closed** — `postMessage` becomes a no-op that succeeds — so un-provisioned
+ * stages (local dev, in-process smoke tests) boot and callers relaying to Slack
+ * don't error when Slack simply isn't configured.
+ */
+import { Context, Effect, Layer, Schema } from "effect";
+
+/** Slack Web API base URL. */
+const SLACK_API_BASE_URL = "https://slack.com/api";
+
+/**
+ * Catch-all Slack client error. Wraps transport failures and non-`ok` Slack
+ * responses (Slack returns HTTP 200 with `{ ok: false, error }` on logical
+ * failures) so callers see one stable tag at the boundary.
+ */
+export class SlackClientError extends Schema.TaggedErrorClass<SlackClientError>("SlackClientError")(
+  "SlackClientError",
+  { cause: Schema.String, message: Schema.String },
+) {}
+
+/** One `chat.postMessage` call. `channel` falls back to the configured default. */
+export interface SlackPostMessageInput {
+  readonly text: string;
+  readonly blocks?: ReadonlyArray<unknown>;
+  readonly channel?: string;
+}
+
+/** Public Slack client surface. */
+export interface SlackClient {
+  /**
+   * Posts a message to Slack. No-ops (succeeds) when the client is unconfigured
+   * (missing bot token or no channel to post to).
+   */
+  readonly postMessage: (input: SlackPostMessageInput) => Effect.Effect<void, SlackClientError>;
+}
+
+/** Service tag for the Slack client. */
+export class SlackClientTag extends Context.Service<SlackClientTag, SlackClient>()(
+  "core/SlackClient",
+) {}
+
+/**
+ * Runtime configuration for the live Slack client. Fields are Effect-of-string
+ * so the resolver (Alchemy secrets / `Config`) is decoupled from the
+ * constructor — matches the {@link AutumnConfig} pattern.
+ */
+export interface SlackConfig {
+  readonly botToken: Effect.Effect<string>;
+  readonly defaultChannel?: Effect.Effect<string>;
+}
+
+/**
+ * Builds a live {@link SlackClient} over the runtime `fetch`. When `botToken` is
+ * empty, or a call has no `channel` and no `defaultChannel` is set,
+ * `postMessage` is a successful no-op.
+ */
+export const createSlackClient = (config: {
+  readonly botToken: string;
+  readonly defaultChannel?: string;
+}): SlackClient => {
+  const postMessage: SlackClient["postMessage"] = (input) => {
+    const channel = input.channel ?? config.defaultChannel ?? "";
+    if (!config.botToken || !channel) {
+      return Effect.void;
+    }
+    return Effect.tryPromise({
+      catch: (cause) =>
+        new SlackClientError({
+          cause: cause instanceof Error ? cause.message : String(cause),
+          message: "Slack chat.postMessage failed",
+        }),
+      try: async (): Promise<void> => {
+        const response = await fetch(`${SLACK_API_BASE_URL}/chat.postMessage`, {
+          body: JSON.stringify({
+            blocks: input.blocks,
+            channel,
+            text: input.text,
+          }),
+          headers: {
+            Authorization: `Bearer ${config.botToken}`,
+            "Content-Type": "application/json; charset=utf-8",
+          },
+          method: "POST",
+        });
+        const text = await response.text();
+        if (!response.ok) {
+          throw new Error(`Slack returned ${response.status}: ${text.slice(0, 500)}`);
+        }
+        // Slack signals logical failures in the JSON body with `ok: false`.
+        const body = text ? (JSON.parse(text) as { ok?: boolean; error?: string }) : {};
+        if (body.ok === false) {
+          throw new Error(`Slack error: ${body.error ?? "unknown"}`);
+        }
+      },
+    });
+  };
+
+  return { postMessage };
+};
+
+/**
+ * Live {@link SlackClientTag} layer built from {@link SlackConfig}. The bot token
+ * and default channel are resolved at layer build (worker boot), not module
+ * load.
+ */
+export const slackClientLayer = (config: SlackConfig): Layer.Layer<SlackClientTag> =>
+  Layer.effect(SlackClientTag)(
+    Effect.gen(function* () {
+      const botToken = yield* config.botToken;
+      const defaultChannel = config.defaultChannel ? yield* config.defaultChannel : undefined;
+      return createSlackClient({ botToken, defaultChannel });
+    }),
+  );
diff --git a/packages/core/src/services/storage/PublicFileStore.ts b/packages/core/src/services/storage/PublicFileStore.ts
new file mode 100644
index 000000000..a47f37235
--- /dev/null
+++ b/packages/core/src/services/storage/PublicFileStore.ts
@@ -0,0 +1,55 @@
+import { Context, type Effect, Schema } from "effect";
+
+/**
+ * Catch-all error for {@link PublicFileStore} operations. Adapters wrap any
+ * storage-backend failure (R2 SDK errors, network failures) into this single
+ * tag so service catch boundaries stay small.
+ */
+export class PublicFileStoreError extends Schema.TaggedErrorClass<PublicFileStoreError>(
+  "PublicFileStoreError",
+)("PublicFileStoreError", {
+  cause: Schema.String,
+  message: Schema.String,
+}) {}
+
+export interface PublicFileObject {
+  readonly body: Uint8Array;
+  readonly contentType: string | null;
+}
+
+export interface PublicFileStoreShape {
+  /**
+   * Public origin (this worker's base URL) under which stored objects are
+   * served at `GET /files/<key>`. Carried on the port — not a separate config
+   * service — so URL builders stay colocated with the store that knows where it
+   * is served from.
+   */
+  readonly publicBaseUrl: string;
+
+  /** Absolute public URL for a stored object key: `${publicBaseUrl}/files/${key}`. */
+  readonly publicUrl: (key: string) => string;
+
+  /** Writes raw bytes at `key`, overwriting any existing object (idempotent). */
+  readonly putObject: (input: {
+    readonly key: string;
+    readonly body: Uint8Array;
+    readonly contentType: string | undefined;
+  }) => Effect.Effect<void, PublicFileStoreError>;
+
+  /** Reads the object at `key`; `null` when it does not exist. */
+  readonly getObject: (key: string) => Effect.Effect<PublicFileObject | null, PublicFileStoreError>;
+
+  /** Deletes the object at `key`; a no-op when it does not exist. */
+  readonly deleteObject: (key: string) => Effect.Effect<void, PublicFileStoreError>;
+}
+
+/**
+ * Provider-agnostic port for the object store holding public assets (avatars
+ * today under `avatars/<entity>/<id>/<sha256>.<ext>`, room for more). The live
+ * adapter (R2) is wired by the application root — core code only touches the
+ * tag, keeping storage SDK dependencies out of `packages/core` and the store
+ * trivially fakeable in tests with an in-memory map.
+ */
+export class PublicFileStore extends Context.Service<PublicFileStore, PublicFileStoreShape>()(
+  "infrastructure/PublicFileStore",
+) {}
diff --git a/packages/core/src/services/users/UserService.ts b/packages/core/src/services/users/UserService.ts
new file mode 100644
index 000000000..6af79f669
--- /dev/null
+++ b/packages/core/src/services/users/UserService.ts
@@ -0,0 +1,189 @@
+import { Cause, Effect, Layer, Option, Schema, Context } from "effect";
+import { AuthenticationError, AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  avatarKeyFromUrl,
+  avatarSha256Hex,
+  deriveAvatarKey,
+  isOwnedAvatarUrl,
+  validateAndDecodeAvatar,
+} from "../../domain/avatar.ts";
+import { Db, eq, user } from "@voidhash/db";
+import type { User } from "../../domain/user/User.ts";
+import { InternalFeatureFlagService } from "../internalFeatureFlags/InternalFeatureFlagService.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+
+export class UserServiceError extends Schema.TaggedErrorClass<UserServiceError>("UserServiceError")(
+  "UserServiceError",
+  { cause: Schema.String },
+) {}
+
+export class UserService extends Context.Service<UserService>()("UserService", {
+  make: Effect.gen(function* () {
+    const getUser = Effect.fn("getUser")(function* () {
+      const maybeSession = yield* Effect.serviceOption(AuthSession);
+      if (Option.isNone(maybeSession) || !maybeSession.value.user) {
+        return yield* Effect.fail(
+          new AuthenticationError({
+            cause: "User not found",
+            message: "User not found",
+          }),
+        );
+      }
+      const session = maybeSession.value;
+      yield* Effect.annotateCurrentSpan("voidhash.auth.method", session.method);
+      yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+      if (session.user.workosUserId)
+        yield* Effect.annotateCurrentSpan("voidhash.user.workos_id", session.user.workosUserId);
+      yield* Effect.annotateCurrentSpan(
+        "voidhash.organization.count",
+        session.organizations.length,
+      );
+      yield* Effect.annotateCurrentSpan("voidhash.project.count", session.projects.length);
+      const activeOrganization = session.organizations[0];
+      if (activeOrganization) {
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", activeOrganization.id);
+        if (activeOrganization.workosOrganizationId)
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.organization.workos_id",
+            activeOrganization.workosOrganizationId,
+          );
+      }
+      const activeProject = session.projects[0];
+      if (activeProject) yield* Effect.annotateCurrentSpan("voidhash.project.id", activeProject.id);
+
+      // Resolve enabled internal feature flags per org so the studio frontend
+      // can ride this bootstrap. Lazily resolved (optional) and best-effort: a
+      // resolution failure must never break CurrentUser, so orgs simply fall
+      // back to no extra flags.
+      const maybeInternalFlags = yield* Effect.serviceOption(InternalFeatureFlagService);
+      const enabledFlagsByOrg = Option.isSome(maybeInternalFlags)
+        ? yield* maybeInternalFlags.value
+            .resolveEnabledForOrganizations(session.organizations.map((o) => o.id))
+            .pipe(
+              Effect.catch((error) =>
+                Effect.logWarning("Failed to resolve internal feature flags for CurrentUser", {
+                  cause: error.message,
+                }).pipe(Effect.as({} as Record<string, readonly string[]>)),
+              ),
+            )
+        : ({} as Record<string, readonly string[]>);
+
+      return {
+        ...session.user,
+        organizations: session.organizations.map((o) => ({
+          id: o.id,
+          logo: o.logo,
+          name: o.name,
+          slug: o.slug,
+          workosOrganizationId: o.workosOrganizationId,
+          internalFeatureFlags: enabledFlagsByOrg[o.id] ?? [],
+        })),
+        projects: session.projects.map((p) => ({
+          id: p.id,
+          logo: p.logo,
+          name: p.name,
+          organizationId: p.organizationId,
+          slug: p.slug,
+        })),
+      } satisfies typeof User.Type;
+    });
+
+    /**
+     * Resolves the authenticated user id, failing for non-user (api-key)
+     * sessions which have no user to attach an avatar to.
+     */
+    const requireUserId = Effect.fn("requireUserId")(function* () {
+      const session = yield* AuthSession;
+      if (!session.user) {
+        return yield* Effect.fail(
+          new AuthenticationError({
+            cause: "An authenticated user session is required to manage your avatar.",
+            message: "An authenticated user session is required to manage your avatar.",
+          }),
+        );
+      }
+      return session.user.id;
+    });
+
+    /**
+     * Best-effort cleanup of a superseded avatar object (only our own keys).
+     * Resolves {@link PublicFileStore} lazily so the service layer itself stays
+     * dependency-free (keeping `getUser` unit-testable in isolation); the store
+     * is provided by the application root wherever the avatar methods run.
+     */
+    const deleteSupersededAvatar = (previous: string | null, exceptKey?: string) =>
+      Effect.gen(function* () {
+        const publicFileStore = yield* PublicFileStore;
+        if (previous === null || !isOwnedAvatarUrl(previous, publicFileStore.publicBaseUrl)) {
+          return;
+        }
+        const oldKey = avatarKeyFromUrl(previous, publicFileStore.publicBaseUrl);
+        if (oldKey === null || oldKey === exceptKey) {
+          return;
+        }
+        yield* publicFileStore
+          .deleteObject(oldKey)
+          .pipe(
+            Effect.catchCause((cause) =>
+              Effect.logWarning(
+                `Failed to delete superseded avatar object ${oldKey}: ${Cause.pretty(cause)}`,
+              ),
+            ),
+          );
+      });
+
+    const setAvatar = Effect.fn("setUserAvatar")(
+      function* (input: { readonly imageBase64: string; readonly contentType: string }) {
+        const db = yield* Db;
+        const publicFileStore = yield* PublicFileStore;
+        const userId = yield* requireUserId();
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", userId);
+
+        const { bytes, ext } = yield* validateAndDecodeAvatar(input);
+        const sha256 = yield* avatarSha256Hex(bytes);
+        const key = deriveAvatarKey("user", userId, sha256, ext);
+
+        yield* publicFileStore.putObject({ key, body: bytes, contentType: input.contentType });
+        const imageUrl = publicFileStore.publicUrl(key);
+
+        const current = yield* db.query.user.findFirst({ where: { id: userId } });
+        yield* db.update(user).set({ customImageUrl: imageUrl }).where(eq(user.id, userId));
+        yield* deleteSupersededAvatar(current?.customImageUrl ?? null, key);
+
+        return { imageUrl };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new UserServiceError({ cause: String(error.cause) })),
+            PublicFileStoreError: (error) =>
+              Effect.fail(new UserServiceError({ cause: error.cause })),
+          }),
+        ),
+    );
+
+    const removeAvatar = Effect.fn("removeUserAvatar")(
+      function* () {
+        const db = yield* Db;
+        const userId = yield* requireUserId();
+        yield* Effect.annotateCurrentSpan("voidhash.user.id", userId);
+
+        const current = yield* db.query.user.findFirst({ where: { id: userId } });
+        yield* db.update(user).set({ customImageUrl: null }).where(eq(user.id, userId));
+        yield* deleteSupersededAvatar(current?.customImageUrl ?? null);
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new UserServiceError({ cause: String(error.cause) })),
+          }),
+        ),
+    );
+
+    return { getUser, removeAvatar, setAvatar } as const;
+  }),
+}) {
+  static layer = Layer.effect(UserService)(UserService.make);
+}
diff --git a/packages/core/src/services/users/index.ts b/packages/core/src/services/users/index.ts
new file mode 100644
index 000000000..90f388ad1
--- /dev/null
+++ b/packages/core/src/services/users/index.ts
@@ -0,0 +1 @@
+export * from "./UserService.ts";
diff --git a/packages/core/src/services/voidql/VoidQlService.ts b/packages/core/src/services/voidql/VoidQlService.ts
new file mode 100644
index 000000000..3bfffff4f
--- /dev/null
+++ b/packages/core/src/services/voidql/VoidQlService.ts
@@ -0,0 +1,286 @@
+/**
+ * {@link VoidQlService} — the public VoidQL surface (§13): `runQuery`,
+ * `validateQuery`, `getSchema`, `saveInsight`.
+ *
+ * The hot path is `authorize → buildAuthorizedScope → compile (pure ①–⑥, incl.
+ * verify) → execute → audit`. Scope is derived **server-side** from the
+ * authenticated session (never the request body) and inlined as the bound
+ * `{pOrg}`/`{pPids}` literals by the compiler — there is no tenant setting for a
+ * jailbroken agent to re-point (§14). Execution runs under the locked-down
+ * `analytics_query` ClickHouse user with a server-random `withQueryId` (the KILL
+ * handle) and a stable per-principal `withQuotaKey` (so the shared user's
+ * `KEYED BY client_key` quota isolates tenants); `readonly=1` + the CONST caps come
+ * from the profile, NOT a per-request setting (§7 L3).
+ *
+ * ClickHouse execution errors are mapped to a constant {@link VoidQlExecutionError}
+ * — never forwarding raw messages or row counts, which would be a side-channel
+ * (§18 gap #7). When ClickHouse is not configured, authorized queries fail
+ * closed to an empty result while schema, validation, and saved-query metadata
+ * remain available.
+ */
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { Db, analyticsSavedQuery } from "@voidhash/db";
+import { Context, Effect, Layer, Option } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { checkOrganizationPermission } from "../../utils/permissions.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { CATALOG, CATALOG_SCHEMA_VERSION } from "./catalog/index.ts";
+import type { Capability, ColumnSpec } from "./catalog/types.ts";
+import { compileVoidQl } from "./compile.ts";
+import {
+  type Diagnostic,
+  isVoidQlCompileError,
+  toDiagnostic,
+  VoidQlExecutionError,
+} from "./errors.ts";
+import { registeredFunctionNames } from "./functions.ts";
+import { toStatement } from "./ir.ts";
+import { type AuthorizedScope, makeAuthorizedScope } from "./scope.ts";
+
+export interface VoidQlPrincipal {
+  readonly kind: "user" | "agent";
+  readonly id: string;
+}
+
+export interface RunQueryInput {
+  readonly organizationId: string;
+  readonly text: string;
+  readonly principal: VoidQlPrincipal;
+}
+
+export interface RunQueryResult {
+  readonly columns: readonly ColumnSpec[];
+  readonly rows: ReadonlyArray<Record<string, unknown>>;
+}
+
+export interface ValidateResult {
+  readonly valid: boolean;
+  readonly columns?: readonly ColumnSpec[];
+  readonly diagnostic?: Diagnostic;
+}
+
+export interface SchemaDescriptor {
+  readonly dialect: string;
+  readonly tables: ReadonlyArray<{
+    readonly name: string;
+    readonly columns: ReadonlyArray<{
+      readonly name: string;
+      readonly type: string;
+      readonly pii: boolean;
+      readonly doc: string;
+    }>;
+    readonly namespaces: ReadonlyArray<{
+      readonly name: string;
+      readonly pii: boolean;
+      readonly doc: string;
+    }>;
+  }>;
+  readonly functions: readonly string[];
+}
+
+const DIALECT_REFERENCE =
+  "VoidQL is a read-only SQL subset over events|persons|revenue. " +
+  "SELECT … FROM … [JOIN … ON …] [WHERE] [GROUP BY] [HAVING] [ORDER BY] [LIMIT]; CTEs and subqueries supported. " +
+  "No organization_id, no SETTINGS, no table functions — tenant scope is applied automatically.";
+
+/** Cheap, non-cryptographic FNV-1a hash for the audit log (text fingerprint only). */
+const fnv1a = (text: string): string => {
+  let hash = 0x811c9dc5;
+  for (let i = 0; i < text.length; i++) {
+    hash ^= text.charCodeAt(i);
+    hash = Math.imul(hash, 0x01000193);
+  }
+  return (hash >>> 0).toString(16);
+};
+
+const buildSchemaDescriptor = (): SchemaDescriptor => ({
+  dialect: DIALECT_REFERENCE,
+  tables: Object.values(CATALOG).map((table) => ({
+    name: table.name,
+    columns: Object.values(table.columns).map((c) => ({
+      name: c.name,
+      type: c.type,
+      pii: c.requires.includes("pii"),
+      doc: c.doc,
+    })),
+    namespaces: Object.values(table.namespaces).map((n) => ({
+      name: n.name,
+      pii: n.requires.includes("pii"),
+      doc: n.doc,
+    })),
+  })),
+  functions: registeredFunctionNames(),
+});
+
+export class VoidQlService extends Context.Service<VoidQlService>()("VoidQlService", {
+  make: Effect.gen(function* () {
+    // The locked-down `analytics_query` user (readonly=1 + CONST caps + no row
+    // policy). In production the VoidQL RPC path must be provided this client as
+    // its ambient ClickhouseWebClient — running under the RLS readonly user would
+    // fail-closed to zero rows, since VoidQL injects no `SQL_organization_id`.
+    const ch = Option.getOrUndefined(
+      yield* Effect.serviceOption(ClickhouseWebClient.ClickhouseWebClient),
+    );
+    const db = yield* Db;
+
+    /** Authorize the claimed org against the session, then derive scope from Postgres. */
+    const buildAuthorizedScope = Effect.fn("voidql.buildScope")(function* (organizationId: string) {
+      yield* checkOrganizationPermission(organizationId, "organization:all", "VoidQL read denied");
+      const projects = yield* db.query.projects.findMany({
+        columns: { id: true },
+        where: { organizationId },
+      });
+      return makeAuthorizedScope({
+        organizationId,
+        availableProjectIds: projects.map((p) => p.id),
+      });
+    });
+
+    const capabilitiesFor = (principal: VoidQlPrincipal): ReadonlySet<Capability> =>
+      // AI agents never get `pii` by default (§9, §14); authorized users do.
+      new Set<Capability>(principal.kind === "user" ? ["pii"] : []);
+
+    const auditRun = (
+      input: RunQueryInput,
+      scope: AuthorizedScope,
+      queryId: string,
+      rowCount: number,
+    ) =>
+      Effect.gen(function* () {
+        yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
+        yield* Effect.annotateCurrentSpan("voidhash.voidql.principal.kind", input.principal.kind);
+        yield* Effect.annotateCurrentSpan("voidhash.voidql.principal.id", input.principal.id);
+        yield* Effect.annotateCurrentSpan("voidhash.voidql.text_hash", fnv1a(input.text));
+        yield* Effect.annotateCurrentSpan("voidhash.voidql.query_id", queryId);
+        yield* Effect.annotateCurrentSpan("voidhash.voidql.row_count", rowCount);
+        yield* Effect.annotateCurrentSpan(
+          "voidhash.voidql.project_ids.count",
+          scope.availableProjectIds.length,
+        );
+      });
+
+    const runQuery = Effect.fn("voidql.runQuery")(
+      function* (input: RunQueryInput) {
+        const scope = yield* buildAuthorizedScope(input.organizationId);
+        // Fail-closed: an org with no readable projects can read nothing.
+        if (scope.availableProjectIds.length === 0) {
+          return { columns: [], rows: [] } satisfies RunQueryResult;
+        }
+        if (ch === undefined) {
+          return { columns: [], rows: [] } satisfies RunQueryResult;
+        }
+        const compiled = yield* compileVoidQl(input.text, scope, capabilitiesFor(input.principal));
+        // Stable per-principal quota key: the shared `analytics_query` user's
+        // `KEYED BY client_key` DoS quota only isolates tenants when each request
+        // carries one (otherwise every request shares the empty-key global bucket).
+        const quotaKey = `${input.organizationId}:${input.principal.kind}:${input.principal.id}`;
+        const rows = yield* toStatement(ch, compiled.pieces).pipe(
+          ch.withQueryId(compiled.queryId),
+          ch.withQuotaKey(quotaKey),
+        );
+        yield* auditRun(input, scope, compiled.queryId, rows.length);
+        return { columns: compiled.columns, rows } satisfies RunQueryResult;
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            SqlError: () =>
+              // Constant message — never forward CH internals / row counts (§18 #7).
+              Effect.fail(
+                new VoidQlExecutionError({
+                  cause: "clickhouse",
+                  message: "The query could not be executed.",
+                }),
+              ),
+            EffectDrizzleQueryError: () =>
+              Effect.fail(
+                new VoidQlExecutionError({
+                  cause: "database",
+                  message: "The query could not be executed.",
+                }),
+              ),
+          }),
+        ),
+    );
+
+    const validateQuery = Effect.fn("voidql.validateQuery")(
+      function* (input: RunQueryInput) {
+        const scope = yield* buildAuthorizedScope(input.organizationId);
+        return yield* compileVoidQl(input.text, scope, capabilitiesFor(input.principal)).pipe(
+          Effect.map((compiled): ValidateResult => ({ valid: true, columns: compiled.columns })),
+          // User-facing compile errors are surfaced as diagnostics (data), not
+          // failures — this is what the agent repair loop / editor lint consume.
+          // BUT an isolation-verifier failure is a COMPILER DEFECT, never user
+          // error: it must alarm server-side (matching the run path, which maps it
+          // to an opaque execution error), not be folded into a benign {valid:false}
+          // diagnostic an attacker/repair-loop can iterate against — so we Effect.die.
+          Effect.catchIf(
+            isVoidQlCompileError,
+            (error): Effect.Effect<ValidateResult> =>
+              error._tag === "VoidQlIsolationError"
+                ? Effect.die(error)
+                : Effect.succeed({ valid: false, diagnostic: toDiagnostic(error) }),
+          ),
+        );
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: () =>
+              Effect.fail(
+                new VoidQlExecutionError({
+                  cause: "database",
+                  message: "The query could not be validated.",
+                }),
+              ),
+          }),
+        ),
+    );
+
+    const getSchema = Effect.fn("voidql.getSchema")(() =>
+      Effect.succeed(buildSchemaDescriptor()),
+    );
+
+    const saveInsight = Effect.fn("voidql.saveInsight")(
+      function* (input: {
+        readonly organizationId: string;
+        readonly name: string;
+        readonly text: string;
+      }) {
+        const session = yield* AuthSession;
+        const scope = yield* buildAuthorizedScope(input.organizationId);
+        // Re-validate before persisting; a save of a non-compiling query is rejected.
+        yield* compileVoidQl(input.text, scope, new Set<Capability>(["pii"]));
+        const id = generateId("analyticsSavedQuery");
+        yield* db.insert(analyticsSavedQuery).values({
+          id,
+          organizationId: input.organizationId,
+          name: input.name,
+          voidqlText: input.text,
+          schemaVersion: CATALOG_SCHEMA_VERSION,
+          createdBy: session?.user?.id ?? "system",
+        });
+        return { id };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: () =>
+              Effect.fail(
+                new VoidQlExecutionError({
+                  cause: "database",
+                  message: "The insight could not be saved.",
+                }),
+              ),
+          }),
+        ),
+    );
+
+    return { runQuery, validateQuery, getSchema, saveInsight } as const;
+  }),
+}) {
+  static layer: Layer.Layer<VoidQlService, never, Db> = Layer.effect(VoidQlService)(
+    VoidQlService.make,
+  );
+}
diff --git a/packages/core/src/services/voidql/ast/VoidQlAst.ts b/packages/core/src/services/voidql/ast/VoidQlAst.ts
new file mode 100644
index 000000000..ec65e733c
--- /dev/null
+++ b/packages/core/src/services/voidql/ast/VoidQlAst.ts
@@ -0,0 +1,238 @@
+/**
+ * The VoidQL abstract syntax tree.
+ *
+ * Plain-TypeScript `readonly` tagged-union interfaces discriminated by `_tag` —
+ * deliberately **no `Schema` and no decode step** (see `docs/analytics-access-layer.html`
+ * §8.2). The parser ({@link file://../parser.ts}) is the *sole, trusted constructor*
+ * of these nodes; the tree is only ever built server-side from query text and is
+ * never deserialised from foreign JSON, so a `Schema.decode` boundary would guard
+ * an input that cannot occur. The one guarantee that matters — exhaustiveness — is
+ * obtained at *compile time* from the printer's `default: node satisfies never`,
+ * which is strictly stronger than TRQL's runtime `NotImplementedError` and HogQL's
+ * runtime `getattr` dispatch.
+ *
+ * There is intentionally **no raw-SQL node**: user text can never travel to
+ * `ch.literal`. Field-level validity (e.g. `numType` ∈ three values, a non-empty
+ * column `chain`) is the parser's and resolver's responsibility, since no runtime
+ * boundary re-checks it.
+ */
+
+/** A source position, used to render caret-precise diagnostics. */
+export interface Pos {
+  readonly line: number;
+  readonly col: number;
+  readonly offset: number;
+}
+
+/** A source span (half-open: `[start, end)`), carried by every node. */
+export interface Span {
+  readonly start: Pos;
+  readonly end: Pos;
+}
+
+interface Node {
+  readonly span: Span;
+}
+
+// ─────────────────────────────── expressions ────────────────────────────────
+
+export interface StringLit extends Node {
+  readonly _tag: "StringLit";
+  readonly value: string;
+}
+
+/**
+ * A numeric literal. `numType` carries the resolved scalar type so the printer
+ * can emit an *explicit* `ch.param` type — the substrate would otherwise infer a
+ * JS `number` as `Decimal`, degrading partition pruning (§18 gap #9). Validity of
+ * `numType` is the parser's responsibility; no decode boundary re-checks it.
+ */
+export interface NumberLit extends Node {
+  readonly _tag: "NumberLit";
+  readonly value: number;
+  readonly numType: "Int64" | "UInt64" | "Float64";
+}
+
+export interface BoolLit extends Node {
+  readonly _tag: "BoolLit";
+  readonly value: boolean;
+}
+
+export interface NullLit extends Node {
+  readonly _tag: "NullLit";
+}
+
+/**
+ * A column reference as a dotted chain (HogQL's `Field(chain=[...])`). Whether
+ * `a.b` is `table.column` or a JSON-property access is decided by the *resolver*,
+ * never the parser.
+ */
+export interface ColumnRef extends Node {
+  readonly _tag: "ColumnRef";
+  readonly chain: readonly [string, ...string[]];
+}
+
+export interface StarRef extends Node {
+  readonly _tag: "StarRef";
+  readonly qualifier?: string;
+}
+
+/**
+ * A function call. The `name` is just a token here; the resolver checks it
+ * against the closed function registry (§11) so the allow-list is single-sourced.
+ */
+export interface FnCall extends Node {
+  readonly _tag: "FnCall";
+  readonly name: string;
+  readonly args: readonly Expr[];
+}
+
+export type BinaryOp =
+  | "or"
+  | "and"
+  | "eq"
+  | "neq"
+  | "lt"
+  | "lte"
+  | "gt"
+  | "gte"
+  | "like"
+  | "notLike"
+  | "add"
+  | "sub"
+  | "mul"
+  | "div"
+  | "mod";
+
+export interface Binary extends Node {
+  readonly _tag: "Binary";
+  readonly op: BinaryOp;
+  readonly left: Expr;
+  readonly right: Expr;
+}
+
+export interface Unary extends Node {
+  readonly _tag: "Unary";
+  readonly op: "not" | "neg";
+  readonly expr: Expr;
+}
+
+export interface InExpr extends Node {
+  readonly _tag: "InExpr";
+  readonly expr: Expr;
+  readonly list: readonly Expr[];
+  readonly negated: boolean;
+}
+
+export interface Between extends Node {
+  readonly _tag: "Between";
+  readonly expr: Expr;
+  readonly low: Expr;
+  readonly high: Expr;
+  readonly negated: boolean;
+}
+
+export interface IsNull extends Node {
+  readonly _tag: "IsNull";
+  readonly expr: Expr;
+  readonly negated: boolean;
+}
+
+export interface CaseWhen {
+  readonly when: Expr;
+  readonly then: Expr;
+}
+
+export interface CaseExpr extends Node {
+  readonly _tag: "CaseExpr";
+  readonly operand?: Expr;
+  readonly whens: readonly [CaseWhen, ...CaseWhen[]];
+  readonly else?: Expr;
+}
+
+export interface Paren extends Node {
+  readonly _tag: "Paren";
+  readonly expr: Expr;
+}
+
+export type Expr =
+  | StringLit
+  | NumberLit
+  | BoolLit
+  | NullLit
+  | ColumnRef
+  | StarRef
+  | FnCall
+  | Binary
+  | Unary
+  | InExpr
+  | Between
+  | IsNull
+  | CaseExpr
+  | Paren;
+
+// ─────────────────────────────── statements ─────────────────────────────────
+
+export interface SelectItem extends Node {
+  readonly _tag: "SelectItem";
+  readonly expr: Expr;
+  readonly alias?: string;
+}
+
+/**
+ * A named `FROM`/`JOIN` source. There is deliberately no `db.table` and no table
+ * function — those have *no grammar production at all*, so the CVE-2025-1520
+ * table-function class is structurally unreachable (§8.1, §11).
+ */
+export interface NamedTable extends Node {
+  readonly _tag: "NamedTable";
+  readonly name: string;
+  readonly alias?: string;
+}
+
+/** A subquery source. Subqueries MUST be aliased (the parser enforces it). */
+export interface SubquerySource extends Node {
+  readonly _tag: "SubquerySource";
+  readonly query: Select;
+  readonly alias: string;
+}
+
+export type TableSource = NamedTable | SubquerySource;
+
+export interface Join extends Node {
+  readonly _tag: "Join";
+  readonly kind: "inner" | "left";
+  readonly source: TableSource;
+  readonly on: Expr;
+}
+
+export interface OrderItem extends Node {
+  readonly _tag: "OrderItem";
+  readonly expr: Expr;
+  readonly dir: "asc" | "desc";
+}
+
+export interface Cte extends Node {
+  readonly _tag: "Cte";
+  readonly name: string;
+  readonly query: Select;
+}
+
+export interface Select extends Node {
+  readonly _tag: "Select";
+  readonly with: readonly Cte[];
+  readonly columns: readonly [SelectItem, ...SelectItem[]];
+  readonly from: TableSource;
+  readonly joins: readonly Join[];
+  readonly where?: Expr;
+  readonly groupBy: readonly Expr[];
+  readonly having?: Expr;
+  readonly orderBy: readonly OrderItem[];
+  readonly limit?: number;
+  readonly offset?: number;
+}
+
+// `UNION ALL` (`SetQuery`) is a deferred construct — removed from the grammar
+// until it lands behind its own Security-Review Gate (§11). Until then a single
+// `Select` is the whole statement surface.
+export type Statement = Select;
diff --git a/packages/core/src/services/voidql/catalog/brand.ts b/packages/core/src/services/voidql/catalog/brand.ts
new file mode 100644
index 000000000..723620dd7
--- /dev/null
+++ b/packages/core/src/services/voidql/catalog/brand.ts
@@ -0,0 +1,16 @@
+/**
+ * The type-level barrier that makes "no user string ever reaches `ch.literal`"
+ * a compiler-checked invariant (§12). {@link CatalogSql} is a branded string;
+ * the printer's `lit()` accepts only the brand, and {@link catalog} — the sole
+ * constructor — is fed exclusively from frozen catalog/keyword constants and
+ * already-validated identifiers, never from user text. A lint/CODEOWNERS rule
+ * keeps `ch.literal(` and `catalog(` confined to the VoidQL printer + catalog.
+ */
+import { Schema } from "effect";
+
+export const CatalogSqlSchema = Schema.String.pipe(Schema.brand("CatalogSql"));
+
+export type CatalogSql = typeof CatalogSqlSchema.Type;
+
+/** Brand a compiler-controlled SQL fragment. NEVER call with user-derived text. */
+export const catalog = (s: string): CatalogSql => s as CatalogSql;
diff --git a/packages/core/src/services/voidql/catalog/events.ts b/packages/core/src/services/voidql/catalog/events.ts
new file mode 100644
index 000000000..f3de1f6e9
--- /dev/null
+++ b/packages/core/src/services/voidql/catalog/events.ts
@@ -0,0 +1,144 @@
+/**
+ * The `events` logical view (§9). Lowers to the audited
+ * `resolvedEventsFrom` + `RESOLVED_EVENTS_JOIN` shape — auto-deduped
+ * (`LIMIT 1 BY event_id ORDER BY processed_ts DESC`) and identity-resolved
+ * (`effective*IdExpression`) — so the raw `events_v2` MergeTree is never
+ * reachable. The dedup/identity SQL is imported verbatim from
+ * `clickhouse-accessor.ts` (single source of truth); VoidQL differs in *one*
+ * way: the tenant predicate is **inlined as bound literals into the inner WHERE**
+ * (not applied via the `tenantSettings` row-policy setting — the P1 blocker, §20).
+ */
+import {
+  CLICKHOUSE_EVENTS_FULL_TABLE,
+  CLICKHOUSE_PENDING_OVERRIDES_FULL_TABLE,
+  effectiveDistinctIdExpression,
+  effectivePersonIdExpression,
+} from "../../analytics/clickhouse-accessor.ts";
+import { lit, par, type SqlPiece } from "../ir.ts";
+import type { AuthorizedScope } from "../scope.ts";
+import type {
+  CatalogColumn,
+  CatalogPropertyNamespace,
+  CatalogTable,
+  InjectedScope,
+  LowerResult,
+  VoidQLType,
+} from "./types.ts";
+
+const col = (
+  name: string,
+  type: VoidQLType,
+  doc: string,
+  opts: { readonly requires?: readonly ["pii"]; readonly inStar?: boolean } = {},
+): CatalogColumn => ({
+  name,
+  type,
+  requires: opts.requires ?? [],
+  inStar: opts.inStar ?? true,
+  doc,
+});
+
+/** Columns the inner dedup scan reads off `events_v2` (physical names). */
+const EVENT_INNER_COLUMNS =
+  "event_id, event_name, event_ts, project_id, distinct_id, person_id, event_properties, context";
+
+/** Outer projection re-aliasing physical → logical names, with identity resolution. */
+const eventOuterProjection = (extra: string): string =>
+  `events.event_id AS event_id, events.event_name AS event_name, events.event_ts AS event_ts, ` +
+  `events.project_id AS project_id, ${effectivePersonIdExpression} AS person_id, ` +
+  `${effectiveDistinctIdExpression} AS distinct_id, events.event_properties AS event_properties, ` +
+  `events.context AS context${extra}`;
+
+/**
+ * The identity-resolution LEFT JOIN, **scoped inline** (§9, §20). The audited
+ * `RESOLVED_EVENTS_JOIN` from `clickhouse-accessor.ts` filters the pending-overrides
+ * read only by `project_id` because it relied on the readonly user's row policy to
+ * supply the `organization_id` predicate. VoidQL runs under the policy-less
+ * `analytics_query` user, so we inline `organization_id = {pOrg} AND project_id IN
+ * {pPids}` into the pending-overrides scan too — otherwise it would read every
+ * tenant's overrides (the P1-blocker class, here applied to the identity join). The
+ * inner alias stays `events`/`pending_overrides` so the imported `effective*Id`
+ * expressions resolve.
+ */
+const scopedIdentityJoin = (scope: AuthorizedScope): SqlPiece[] => [
+  lit(
+    ` ) AS events LEFT JOIN ( SELECT project_id, source_distinct_id, target_distinct_id, person_id ` +
+      `FROM ( SELECT project_id, source_distinct_id, target_distinct_id, person_id, is_deleted, version, changed_at ` +
+      `FROM ${CLICKHOUSE_PENDING_OVERRIDES_FULL_TABLE} WHERE version > 0 AND organization_id = `,
+  ),
+  par("String", scope.organizationId),
+  lit(" AND project_id IN "),
+  par("Array(String)", scope.availableProjectIds),
+  lit(
+    " ORDER BY project_id ASC, source_distinct_id ASC, version DESC, changed_at DESC " +
+      "LIMIT 1 BY project_id, source_distinct_id ) WHERE is_deleted = 0 ) AS pending_overrides " +
+      "ON pending_overrides.project_id = events.project_id " +
+      "AND pending_overrides.source_distinct_id = events.distinct_id",
+  ),
+];
+
+/**
+ * Build the scoped events relation shared by `events` and `revenue`. Emits
+ * `( <outer projection> FROM ( <dedup scan, scoped> ) AS events <scoped identity join> ) AS <alias>`,
+ * with `organization_id`/`project_id` bound out-of-band inside BOTH the dedup scan
+ * and the identity-join subquery (two scoped physical reads per lowering).
+ */
+export const buildEventsLower = (
+  relation: "events" | "revenue",
+  scope: AuthorizedScope,
+  alias: string,
+  options: { readonly eventNameFilter?: string; readonly extraProjection?: string } = {},
+): LowerResult => {
+  const pieces: SqlPiece[] = [
+    lit(
+      `( SELECT ${eventOuterProjection(options.extraProjection ?? "")} ` +
+        `FROM ( SELECT ${EVENT_INNER_COLUMNS} FROM ${CLICKHOUSE_EVENTS_FULL_TABLE} ` +
+        `WHERE organization_id = `,
+    ),
+    par("String", scope.organizationId),
+    lit(" AND project_id IN "),
+    par("Array(String)", scope.availableProjectIds),
+  ];
+  if (options.eventNameFilter) {
+    pieces.push(lit(` AND ${options.eventNameFilter}`));
+  }
+  pieces.push(lit(" ORDER BY processed_ts DESC LIMIT 1 BY event_id"));
+  pieces.push(...scopedIdentityJoin(scope));
+  pieces.push(lit(` ) AS ${alias}`));
+  const injected: InjectedScope = {
+    relation,
+    alias,
+    orgValue: scope.organizationId,
+    projectValues: scope.availableProjectIds,
+  };
+  return { pieces, injected };
+};
+
+const namespaces: Readonly<Record<string, CatalogPropertyNamespace>> = {
+  properties: {
+    name: "properties",
+    sourceColumn: "event_properties",
+    requires: [],
+    doc: "Custom event properties (JSON). Access via properties.<key>.",
+  },
+  context: {
+    name: "context",
+    sourceColumn: "context",
+    requires: [],
+    doc: "Device/SDK/page context captured with the event (JSON). Access via context.<key>.",
+  },
+};
+
+export const eventsTable: CatalogTable = {
+  name: "events",
+  columns: {
+    event_id: col("event_id", "String", "Unique id of the event."),
+    event_name: col("event_name", "String", "The event name, e.g. $pageview."),
+    event_ts: col("event_ts", "DateTime", "When the event occurred (UTC)."),
+    project_id: col("project_id", "String", "The project the event belongs to."),
+    person_id: col("person_id", "String", "Identity-resolved person id."),
+    distinct_id: col("distinct_id", "String", "Identity-resolved distinct id."),
+  },
+  namespaces,
+  lower: (scope, alias) => buildEventsLower("events", scope, alias),
+};
diff --git a/packages/core/src/services/voidql/catalog/index.ts b/packages/core/src/services/voidql/catalog/index.ts
new file mode 100644
index 000000000..2ff467da4
--- /dev/null
+++ b/packages/core/src/services/voidql/catalog/index.ts
@@ -0,0 +1,30 @@
+/**
+ * The VoidQL virtual catalog registry — the *only* relation names in the query
+ * namespace. A `FROM`/`JOIN` relation must resolve to one of these (or a CTE /
+ * derived alias) or the compiler hard-fails (TRQL's `validateTable`-throws model,
+ * §11) — so table functions and `system.*` are structurally unreachable.
+ */
+import { eventsTable } from "./events.ts";
+import { personsTable } from "./persons.ts";
+import { revenueTable } from "./revenue.ts";
+import type { CatalogTable } from "./types.ts";
+
+/**
+ * Catalog version a saved query is authored against; bumped on any change to the
+ * exposed surface so `analytics_saved_query.schema_version` stays meaningful (§15).
+ */
+export const CATALOG_SCHEMA_VERSION = 1;
+
+export const CATALOG: Readonly<Record<string, CatalogTable>> = {
+  events: eventsTable,
+  persons: personsTable,
+  revenue: revenueTable,
+};
+
+/** Reserved internal aliases the substitution injects; not bindable by users (§9). */
+export const RESERVED_INTERNAL_ALIASES = new Set(["events", "persons", "pending_overrides"]);
+
+export const getCatalogTable = (name: string): CatalogTable | undefined => CATALOG[name];
+
+export * from "./types.ts";
+export { eventsTable, personsTable, revenueTable };
diff --git a/packages/core/src/services/voidql/catalog/persons.ts b/packages/core/src/services/voidql/catalog/persons.ts
new file mode 100644
index 000000000..c0e8ce918
--- /dev/null
+++ b/packages/core/src/services/voidql/catalog/persons.ts
@@ -0,0 +1,85 @@
+/**
+ * The `persons` logical view (§9). Lowers to a latest-version `persons_v1` read
+ * collapsed with `LIMIT 1 BY (project_id, person_id) ORDER BY version DESC`
+ * (NOT `row_number() OVER`, which would depend on the deferred window-function
+ * arm — §18 gap #10), then filtered to `is_archived = 0` on the surviving latest
+ * row. `email`/`name`/`traits` are PII and require the `pii` capability (§9).
+ */
+import { CLICKHOUSE_PERSONS_FULL_TABLE } from "../../analytics/clickhouse-accessor.ts";
+import { lit, par, type SqlPiece } from "../ir.ts";
+import type { AuthorizedScope } from "../scope.ts";
+import type {
+  CatalogColumn,
+  CatalogPropertyNamespace,
+  CatalogTable,
+  InjectedScope,
+  LowerResult,
+  VoidQLType,
+} from "./types.ts";
+
+const col = (
+  name: string,
+  type: VoidQLType,
+  doc: string,
+  opts: { readonly requires?: readonly ["pii"]; readonly inStar?: boolean } = {},
+): CatalogColumn => ({
+  name,
+  type,
+  requires: opts.requires ?? [],
+  inStar: opts.inStar ?? true,
+  doc,
+});
+
+const PERSON_INNER_COLUMNS =
+  "person_id, project_id, primary_distinct_id, email, name, traits, is_archived";
+
+const personOuterProjection =
+  "person_id AS person_id, project_id AS project_id, primary_distinct_id AS distinct_id, " +
+  "email AS email, name AS name, traits AS traits";
+
+const lower = (scope: AuthorizedScope, alias: string): LowerResult => {
+  // Inner: latest version per (project_id, person_id). Outer: drop persons whose
+  // latest row is archived (filter AFTER the collapse, mirroring the overrides
+  // subquery's `is_deleted` discipline).
+  const pieces: SqlPiece[] = [
+    lit(
+      `( SELECT ${personOuterProjection} FROM ( SELECT ${PERSON_INNER_COLUMNS} ` +
+        `FROM ${CLICKHOUSE_PERSONS_FULL_TABLE} WHERE organization_id = `,
+    ),
+    par("String", scope.organizationId),
+    lit(" AND project_id IN "),
+    par("Array(String)", scope.availableProjectIds),
+    lit(
+      ` ORDER BY version DESC LIMIT 1 BY (project_id, person_id) ) WHERE is_archived = 0 ) AS ${alias}`,
+    ),
+  ];
+  const injected: InjectedScope = {
+    relation: "persons",
+    alias,
+    orgValue: scope.organizationId,
+    projectValues: scope.availableProjectIds,
+  };
+  return { pieces, injected };
+};
+
+const namespaces: Readonly<Record<string, CatalogPropertyNamespace>> = {
+  traits: {
+    name: "traits",
+    sourceColumn: "traits",
+    requires: ["pii"],
+    doc: "Custom person traits (JSON, PII). Access via traits.<key>.",
+  },
+};
+
+export const personsTable: CatalogTable = {
+  name: "persons",
+  columns: {
+    person_id: col("person_id", "String", "Stable person id."),
+    distinct_id: col("distinct_id", "String", "The person's primary distinct id."),
+    project_id: col("project_id", "String", "The project the person belongs to."),
+    email: col("email", "String", "Person email (PII).", { requires: ["pii"], inStar: false }),
+    name: col("name", "String", "Person name (PII).", { requires: ["pii"], inStar: false }),
+  },
+  namespaces,
+  lower,
+};
diff --git a/packages/core/src/services/voidql/catalog/revenue.ts b/packages/core/src/services/voidql/catalog/revenue.ts
new file mode 100644
index 000000000..8e1cbdbc1
--- /dev/null
+++ b/packages/core/src/services/voidql/catalog/revenue.ts
@@ -0,0 +1,43 @@
+/**
+ * The `revenue` logical view (§9): a semantic view over `events` pre-filtered to
+ * the revenue event-name set, with `amount_usd` already in dollars and FX-less
+ * rows zeroed — encoding the accessor's exact money semantics (`amount_usd` is
+ * stored in cents; an FX-less row contributes 0, a bounded under-count). Agents
+ * get a "revenue table" without knowing the `$purchase.completed`/`$subscription.*`
+ * taxonomy.
+ */
+import { buildEventsLower, eventsTable } from "./events.ts";
+import type { CatalogColumn, CatalogTable } from "./types.ts";
+
+const REVENUE_EVENT_NAMES = [
+  "$purchase.completed",
+  "$subscription.created",
+  "$subscription.renewed",
+] as const;
+
+// Code-derived constants only (event names + JSON keys) — safe to splice.
+const EVENT_NAME_FILTER = `event_name IN (${REVENUE_EVENT_NAMES.map((n) => `'${n}'`).join(", ")})`;
+
+// USD-only, in dollars: cents (coalesced over snake/camel keys, FX-less → 0) / 100.
+const AMOUNT_USD_EXPR =
+  "(coalesce(nullIf(JSONExtractFloat(events.event_properties, 'amount_usd'), 0), " +
+  "nullIf(JSONExtractFloat(events.event_properties, 'amountUsd'), 0), 0)) / 100";
+
+const amountColumn: CatalogColumn = {
+  name: "amount_usd",
+  type: "Float64",
+  requires: [],
+  inStar: true,
+  doc: "Revenue amount in USD dollars (FX-less rows count as 0).",
+};
+
+export const revenueTable: CatalogTable = {
+  name: "revenue",
+  columns: { ...eventsTable.columns, amount_usd: amountColumn },
+  namespaces: eventsTable.namespaces,
+  lower: (scope, alias) =>
+    buildEventsLower("revenue", scope, alias, {
+      eventNameFilter: EVENT_NAME_FILTER,
+      extraProjection: `, ${AMOUNT_USD_EXPR} AS amount_usd`,
+    }),
+};
diff --git a/packages/core/src/services/voidql/catalog/types.ts b/packages/core/src/services/voidql/catalog/types.ts
new file mode 100644
index 000000000..9e6c8371a
--- /dev/null
+++ b/packages/core/src/services/voidql/catalog/types.ts
@@ -0,0 +1,93 @@
+/**
+ * The virtual-schema catalog model (§9). Users write SQL against *logical* tables
+ * (`events`, `persons`, `revenue`) and logical columns — never physical reality.
+ * A name either resolves to a code-curated, capability-checked physical expression
+ * or the query is rejected (default-deny; the HogQL virtual-DB model + the
+ * PSA-2025-00001 lesson). The raw `events_v2`/`persons_v1` tables, the JSON blobs,
+ * and `organization_id`/`token`/`processed_ts` are simply absent → unresolvable.
+ */
+import type { SqlPiece } from "../ir.ts";
+import type { AuthorizedScope } from "../scope.ts";
+
+export type VoidQLType = "String" | "Int64" | "UInt64" | "Float64" | "Bool" | "DateTime" | "UUID";
+
+/** Capabilities resolved once per query from `AuthSession.permissions` + principal kind. */
+export type Capability = "pii";
+
+/** An output column of a (sub)query: name + resolved type — drives result decoding. */
+export interface ColumnSpec {
+  readonly name: string;
+  readonly type: VoidQLType;
+}
+
+export interface CatalogColumn {
+  /** Logical name the user types. */
+  readonly name: string;
+  readonly type: VoidQLType;
+  /** Required capabilities; `[]` = open. */
+  readonly requires: readonly Capability[];
+  /** Included in `SELECT *`? PII columns are `false` even for a capable caller. */
+  readonly inStar: boolean;
+  /** Surfaced to AI agents and the editor as schema context. */
+  readonly doc: string;
+}
+
+/**
+ * A JSON-blob namespace (`properties`, `context`, `traits`). A `<namespace>.<key>`
+ * access lowers to `JSONExtractString(<alias>.<sourceColumn>, {pKey:String})` —
+ * the key is **bound**, never escaped (§9, §18 gap #1).
+ */
+export interface CatalogPropertyNamespace {
+  readonly name: string;
+  /** The logical column on this table holding the JSON String. */
+  readonly sourceColumn: string;
+  readonly requires: readonly Capability[];
+  readonly doc: string;
+}
+
+/** Recorded per base-table occurrence; the verifier checks each binds to the scope. */
+export interface InjectedScope {
+  readonly relation: "events" | "persons" | "revenue";
+  readonly alias: string;
+  readonly orgValue: string;
+  readonly projectValues: readonly string[];
+}
+
+export interface LowerResult {
+  /** The `(…scoped subquery…) AS <alias>` relation pieces. */
+  readonly pieces: readonly SqlPiece[];
+  /** The scope this lowering injected, for the value-level verifier. */
+  readonly injected: InjectedScope;
+}
+
+export interface CatalogTable {
+  readonly name: "events" | "persons" | "revenue";
+  readonly columns: Readonly<Record<string, CatalogColumn>>;
+  readonly namespaces: Readonly<Record<string, CatalogPropertyNamespace>>;
+  /**
+   * Lower this logical view to a pre-scoped subquery carrying the bound
+   * `organization_id`/`project_id` predicate inline (NOT via `tenantSettings` —
+   * the P1 blocker), wrapping the audited dedup/identity machinery. The ONLY
+   * producer of physical table identity.
+   */
+  readonly lower: (scope: AuthorizedScope, alias: string) => LowerResult;
+}
+
+/** Map a logical type to the explicit ClickHouse `ch.param` type string (§18 gap #9). */
+export const chParamType = (type: VoidQLType): string => {
+  switch (type) {
+    case "String":
+    case "UUID":
+      return "String";
+    case "Int64":
+      return "Int64";
+    case "UInt64":
+      return "UInt64";
+    case "Float64":
+      return "Float64";
+    case "Bool":
+      return "Bool";
+    case "DateTime":
+      return "DateTime";
+  }
+};
diff --git a/packages/core/src/services/voidql/compile.ts b/packages/core/src/services/voidql/compile.ts
new file mode 100644
index 000000000..5fb9a830f
--- /dev/null
+++ b/packages/core/src/services/voidql/compile.ts
@@ -0,0 +1,70 @@
+/**
+ * The VoidQL compile orchestration — the pure stages ①–⑥ of the VM (§12):
+ * `tokenize → parse → resolve+print → verify`, yielding a {@link CompiledQuery}
+ * that the service executes. No ClickHouse, no Db, no Auth here — trivially
+ * unit-testable and fuzzable.
+ */
+import { Effect } from "effect";
+
+import type { Capability, ColumnSpec } from "./catalog/types.ts";
+import { type CompiledSelect, compileSelect } from "./compiler.ts";
+import { isVoidQlCompileError, type VoidQlCompileError } from "./errors.ts";
+import type { SqlPiece } from "./ir.ts";
+import { parse } from "./parser.ts";
+import type { AuthorizedScope } from "./scope.ts";
+import { verify } from "./verify.ts";
+
+export interface CompiledQuery {
+  readonly pieces: readonly SqlPiece[];
+  /** Output column names + types — used to decode the result set (§20). */
+  readonly columns: readonly ColumnSpec[];
+  /** Server-random ClickHouse query id (the KILL handle; never user input, §18 #11). */
+  readonly queryId: string;
+}
+
+const makeQueryId = (): string =>
+  globalThis.crypto?.randomUUID?.() ??
+  `voidql-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+
+/**
+ * Pure `parse → resolve+print` (no verify). Throws the typed compile errors.
+ * Exposed for unit tests and the validate/repair loop.
+ */
+export const compileToIr = (
+  text: string,
+  scope: AuthorizedScope,
+  capabilities: ReadonlySet<Capability>,
+): CompiledSelect => compileSelect(parse(text), scope, capabilities);
+
+/**
+ * Full pure pipeline including the value-level verifier. Throws on the compile-error
+ * union or an `VoidQlIsolationError` defect.
+ */
+export const compilePure = (
+  text: string,
+  scope: AuthorizedScope,
+  capabilities: ReadonlySet<Capability>,
+): CompiledQuery => {
+  const compiled = compileToIr(text, scope, capabilities);
+  verify(compiled.pieces, compiled.injected, scope);
+  return { pieces: compiled.pieces, columns: compiled.shape, queryId: makeQueryId() };
+};
+
+/**
+ * Compile VoidQL text to a {@link CompiledQuery} as an Effect. Typed compile errors
+ * surface in the error channel; any non-VoidQL throwable becomes a defect (a real
+ * bug), never a silent failure.
+ */
+export const compileVoidQl = (
+  text: string,
+  scope: AuthorizedScope,
+  capabilities: ReadonlySet<Capability>,
+): Effect.Effect<CompiledQuery, VoidQlCompileError> =>
+  Effect.suspend(() => {
+    try {
+      return Effect.succeed(compilePure(text, scope, capabilities));
+    } catch (error) {
+      if (isVoidQlCompileError(error)) return Effect.fail(error);
+      throw error;
+    }
+  });
diff --git a/packages/core/src/services/voidql/compiler.ts b/packages/core/src/services/voidql/compiler.ts
new file mode 100644
index 000000000..45d6af9a2
--- /dev/null
+++ b/packages/core/src/services/voidql/compiler.ts
@@ -0,0 +1,769 @@
+/**
+ * The VoidQL resolve-and-print pass — stages ③–⑤ of the VM (§12).
+ *
+ * Walks the AST with a scope stack, resolving every name against the virtual
+ * catalog, the closed function registry, and the PII capability set; performs the
+ * **logical-view substitution** (L2, §10) so each base relation lowers to a
+ * pre-scoped subquery carrying the bound `organization_id`/`project_id` literals;
+ * and emits the {@link SqlPiece} IR through `lit()`/`par()` — every user value a
+ * bound parameter, all structural SQL from frozen catalog constants and validated
+ * identifiers. The result feeds the value-level verifier (§10) and {@link toStatement}.
+ *
+ * Resolution and printing are a single pass because the alias a column binds to is
+ * needed exactly at print time (HogQL/TRQL both resolve-while-printing). Field-level
+ * re-assertions the dropped decode boundary used to do (a non-empty `chain`, a valid
+ * `numType`) live here.
+ */
+import { toClickhouseDateTime } from "../analytics/clickhouse-accessor.ts";
+import type {
+  Binary,
+  CaseExpr,
+  ColumnRef,
+  Expr,
+  FnCall,
+  InExpr,
+  OrderItem,
+  Select,
+  SelectItem,
+  TableSource,
+} from "./ast/VoidQlAst.ts";
+import { CATALOG, RESERVED_INTERNAL_ALIASES } from "./catalog/index.ts";
+import {
+  type CatalogTable,
+  type Capability,
+  chParamType,
+  type ColumnSpec,
+  type VoidQLType,
+} from "./catalog/types.ts";
+import {
+  VoidQlPiiError,
+  VoidQlSchemaError,
+  VoidQlSyntaxError,
+  VoidQlUnknownFieldError,
+  VoidQlUnsupportedError,
+} from "./errors.ts";
+import { type FnSpec, lookupFunction } from "./functions.ts";
+import type { InjectedScope } from "./catalog/types.ts";
+import { lit, par, type SqlPiece } from "./ir.ts";
+import type { AuthorizedScope } from "./scope.ts";
+
+/** Largest result set VoidQL will return; the server clamps every LIMIT to it (§7 L6, §12). */
+export const MAX_RESULT_ROWS = 100_000;
+
+const IDENT_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+// Identifiers shaped like a physical table version suffix (`…_v2`). Reserved as
+// non-bindable so the value-level verifier's physical-table token scan can never
+// be tripped by a legitimate user alias / CTE / column alias (a false-positive
+// isolation failure). Physical tables are emitted only by the catalog `lower()`.
+const PHYSICAL_SHAPED_RE = /_v\d+$/i;
+
+type ResolvedRelation =
+  | { readonly kind: "view"; readonly alias: string; readonly table: CatalogTable }
+  | {
+      readonly kind: "derived";
+      readonly alias: string;
+      readonly columns: ReadonlyMap<string, VoidQLType>;
+    };
+
+interface Frame {
+  readonly relations: ResolvedRelation[];
+  readonly cteShapes: Map<string, readonly ColumnSpec[]>;
+  readonly parent?: Frame;
+}
+
+export interface CompiledSelect {
+  readonly pieces: readonly SqlPiece[];
+  /** Output columns (name + type) — drives result decoding (§20 open question). */
+  readonly shape: readonly ColumnSpec[];
+  /** Every base-table scope this compilation injected (for the verifier). */
+  readonly injected: readonly InjectedScope[];
+}
+
+interface PrintedExpr {
+  readonly pieces: readonly SqlPiece[];
+  readonly type: VoidQLType;
+}
+
+const levenshtein = (a: string, b: string): number => {
+  const m = a.length;
+  const n = b.length;
+  const dp = Array.from({ length: m + 1 }, () => new Array<number>(n + 1).fill(0));
+  for (let i = 0; i <= m; i++) dp[i]![0] = i;
+  for (let j = 0; j <= n; j++) dp[0]![j] = j;
+  for (let i = 1; i <= m; i++) {
+    for (let j = 1; j <= n; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      dp[i]![j] = Math.min(dp[i - 1]![j]! + 1, dp[i]![j - 1]! + 1, dp[i - 1]![j - 1]! + cost);
+    }
+  }
+  return dp[m]![n]!;
+};
+
+export type { ColumnSpec };
+
+const nearest = (target: string, candidates: readonly string[]): string => {
+  let best = "";
+  let bestDist = Infinity;
+  for (const c of candidates) {
+    const d = levenshtein(target.toLowerCase(), c.toLowerCase());
+    if (d < bestDist) {
+      bestDist = d;
+      best = c;
+    }
+  }
+  return bestDist <= Math.max(2, Math.ceil(target.length / 2)) ? best : "";
+};
+
+export class Compiler {
+  readonly injected: InjectedScope[] = [];
+  private relationCounter = 0;
+
+  private readonly scope: AuthorizedScope;
+  private readonly capabilities: ReadonlySet<Capability>;
+
+  constructor(scope: AuthorizedScope, capabilities: ReadonlySet<Capability>) {
+    this.scope = scope;
+    this.capabilities = capabilities;
+  }
+
+  // ── relations / sources ───────────────────────────────────────────────────
+
+  private assertBindableAlias(alias: string): void {
+    if (!IDENT_RE.test(alias) || PHYSICAL_SHAPED_RE.test(alias)) {
+      throw new VoidQlUnsupportedError({ message: `Invalid alias '${alias}'.`, hint: "" });
+    }
+    if (RESERVED_INTERNAL_ALIASES.has(alias.toLowerCase())) {
+      throw new VoidQlUnsupportedError({
+        message: `'${alias}' is a reserved alias and cannot be used.`,
+        hint: "Pick a different alias.",
+      });
+    }
+  }
+
+  private viewShape(table: CatalogTable): ReadonlyMap<string, VoidQLType> {
+    return new Map(Object.values(table.columns).map((c) => [c.name, c.type]));
+  }
+
+  /** Resolve a FROM/JOIN source, push it onto `frame`, and return its SQL pieces. */
+  private resolveSource(source: TableSource, frame: Frame): readonly SqlPiece[] {
+    if (source._tag === "SubquerySource") {
+      this.assertBindableAlias(source.alias);
+      this.assertUniqueAlias(frame, source.alias);
+      const sub = this.printSelect(source.query, frame);
+      frame.relations.push({
+        kind: "derived",
+        alias: source.alias,
+        columns: new Map(sub.shape.map((c) => [c.name, c.type])),
+      });
+      return [lit("( "), ...sub.pieces, lit(` ) AS ${source.alias}`)];
+    }
+
+    const nameLower = source.name.toLowerCase();
+    const cteShape = frame.cteShapes.get(nameLower);
+    if (cteShape) {
+      const alias = source.alias ?? source.name;
+      if (source.alias) this.assertBindableAlias(source.alias);
+      this.assertUniqueAlias(frame, alias);
+      frame.relations.push({
+        kind: "derived",
+        alias,
+        columns: new Map(cteShape.map((c) => [c.name, c.type])),
+      });
+      const tail = source.alias ? ` AS ${this.id(source.alias)}` : "";
+      return [lit(`${this.id(source.name)}${tail}`)];
+    }
+
+    const table = CATALOG[nameLower];
+    if (!table) {
+      const suggestion = nearest(source.name, Object.keys(CATALOG));
+      throw new VoidQlSchemaError({
+        message: `Unknown table '${source.name}'.${suggestion ? ` Did you mean '${suggestion}'?` : ""}`,
+      });
+    }
+    if (source.alias) this.assertBindableAlias(source.alias);
+    const alias = source.alias ?? `${table.name}_${this.relationCounter++}`;
+    this.assertUniqueAlias(frame, alias);
+    const lowered = table.lower(this.scope, alias);
+    this.injected.push(lowered.injected);
+    frame.relations.push({ kind: "view", alias, table });
+    return lowered.pieces;
+  }
+
+  private assertUniqueAlias(frame: Frame, alias: string): void {
+    if (frame.relations.some((r) => r.alias.toLowerCase() === alias.toLowerCase())) {
+      throw new VoidQlUnsupportedError({
+        message: `Duplicate relation alias '${alias}'.`,
+        hint: "Give each table/subquery a distinct alias.",
+      });
+    }
+  }
+
+  private findRelation(frame: Frame | undefined, aliasLower: string): ResolvedRelation | undefined {
+    for (let f = frame; f; f = f.parent) {
+      const match = f.relations.find((r) => r.alias.toLowerCase() === aliasLower);
+      if (match) return match;
+    }
+    return undefined;
+  }
+
+  // ── columns / properties ────────────────────────────────────────────────
+
+  private relationColumnNames(rel: ResolvedRelation): readonly string[] {
+    return rel.kind === "view" ? Object.keys(rel.table.columns) : [...rel.columns.keys()];
+  }
+
+  /**
+   * Validate a single identifier at the point it is spliced into `lit()` — making
+   * "only charset-safe identifiers reach ch.literal" explicit at the emission site
+   * rather than an upstream invariant (§12). Every alias/column/namespace identifier
+   * is already catalog-derived or parser-tokenised, so this never fires in practice;
+   * it is the belt against a future code path that forgets to validate.
+   */
+  private id(name: string): string {
+    if (!IDENT_RE.test(name)) {
+      throw new VoidQlUnsupportedError({ message: `Invalid identifier '${name}'.`, hint: "" });
+    }
+    return name;
+  }
+
+  /** A validated `<alias>.<column>` reference. */
+  private qualified(alias: string, column: string): string {
+    return `${this.id(alias)}.${this.id(column)}`;
+  }
+
+  private piiGate(requires: readonly Capability[], what: string): void {
+    if (requires.includes("pii") && !this.capabilities.has("pii")) {
+      throw new VoidQlPiiError({
+        message: `${what} is PII and requires elevated access; the query was rejected.`,
+      });
+    }
+  }
+
+  /** Lower a JSON-namespace property access; the key is bound, never spliced (§9). */
+  private property(alias: string, sourceColumn: string, key: string): PrintedExpr {
+    return {
+      pieces: [
+        lit(`JSONExtractString(${this.qualified(alias, sourceColumn)}, `),
+        par("String", key),
+        lit(")"),
+      ],
+      type: "String",
+    };
+  }
+
+  private columnOf(rel: ResolvedRelation, name: string): VoidQLType | undefined {
+    if (rel.kind === "view") {
+      const col = rel.table.columns[name];
+      if (!col) return undefined;
+      this.piiGate(col.requires, `Column '${name}'`);
+      return col.type;
+    }
+    return rel.columns.get(name);
+  }
+
+  private resolveColumn(ref: ColumnRef, frame: Frame): PrintedExpr {
+    const chain = ref.chain;
+    if (chain.length > 3) {
+      throw new VoidQlUnsupportedError({
+        message: `Property path '${chain.join(".")}' is too deep.`,
+        hint: "",
+      });
+    }
+
+    // qualified namespace access: <alias>.<namespace>.<key>
+    if (chain.length === 3) {
+      const rel = this.findRelation(frame, chain[0].toLowerCase());
+      if (!rel || rel.kind !== "view") {
+        throw new VoidQlUnknownFieldError({
+          field: chain.join("."),
+          message: `Unknown property path '${chain.join(".")}'.`,
+          suggestion: "",
+        });
+      }
+      const ns = rel.table.namespaces[chain[1]];
+      if (!ns) {
+        throw new VoidQlUnknownFieldError({
+          field: `${chain[0]}.${chain[1]}`,
+          message: `'${chain[1]}' is not a property namespace on '${rel.table.name}'.`,
+          suggestion: nearest(chain[1], Object.keys(rel.table.namespaces)),
+        });
+      }
+      this.piiGate(ns.requires, `Property namespace '${ns.name}'`);
+      return this.property(rel.alias, ns.sourceColumn, chain[2]);
+    }
+
+    if (chain.length === 2) {
+      const [a, b] = chain;
+      const rel = this.findRelation(frame, a.toLowerCase());
+      if (rel) {
+        // <alias>.<column>
+        const type = this.columnOf(rel, b);
+        if (type) return { pieces: [lit(this.qualified(rel.alias, b))], type };
+        if (rel.kind === "view" && rel.table.namespaces[b]) {
+          throw new VoidQlUnknownFieldError({
+            field: `${a}.${b}`,
+            message: `'${b}' is a property namespace; specify a key, e.g. ${b}.<key>.`,
+            suggestion: "",
+          });
+        }
+        throw new VoidQlUnknownFieldError({
+          field: `${a}.${b}`,
+          message: `Unknown column '${b}' on '${a}'.`,
+          suggestion: nearest(b, this.relationColumnNames(rel)),
+        });
+      }
+      // unqualified namespace access: <namespace>.<key>
+      const nsRel = this.findNamespaceRelation(frame, a);
+      if (nsRel) {
+        const ns = nsRel.table.namespaces[a]!;
+        this.piiGate(ns.requires, `Property namespace '${ns.name}'`);
+        return this.property(nsRel.alias, ns.sourceColumn, b);
+      }
+      throw new VoidQlUnknownFieldError({
+        field: `${a}.${b}`,
+        message: `Unknown reference '${a}.${b}'.`,
+        suggestion: "",
+      });
+    }
+
+    // bare column name
+    const name = chain[0];
+    const matches = this.currentRelations(frame).filter((r) =>
+      this.relationColumnNames(r).includes(name),
+    );
+    if (matches.length === 1) {
+      const type = this.columnOf(matches[0]!, name)!;
+      return { pieces: [lit(this.qualified(matches[0]!.alias, name))], type };
+    }
+    if (matches.length > 1) {
+      throw new VoidQlUnknownFieldError({
+        field: name,
+        message: `Column '${name}' is ambiguous; qualify it with a table alias.`,
+        suggestion: "",
+      });
+    }
+    const allCols = this.currentRelations(frame).flatMap((r) => this.relationColumnNames(r));
+    if (this.findNamespaceRelation(frame, name)) {
+      throw new VoidQlUnknownFieldError({
+        field: name,
+        message: `'${name}' is a property namespace; specify a key, e.g. ${name}.<key>.`,
+        suggestion: "",
+      });
+    }
+    throw new VoidQlUnknownFieldError({
+      field: name,
+      message: `Unknown column '${name}'.`,
+      suggestion: nearest(name, allCols),
+    });
+  }
+
+  private currentRelations(frame: Frame): readonly ResolvedRelation[] {
+    return frame.relations;
+  }
+
+  private findNamespaceRelation(
+    frame: Frame,
+    name: string,
+  ): { readonly alias: string; readonly table: CatalogTable } | undefined {
+    const hits = frame.relations.filter(
+      (r): r is Extract<ResolvedRelation, { kind: "view" }> =>
+        r.kind === "view" && name in r.table.namespaces,
+    );
+    return hits.length === 1 ? { alias: hits[0]!.alias, table: hits[0]!.table } : undefined;
+  }
+
+  // ── expressions ────────────────────────────────────────────────────────────
+
+  private printExpr(expr: Expr, frame: Frame, expected?: VoidQLType): PrintedExpr {
+    switch (expr._tag) {
+      case "StringLit": {
+        if (expected !== "DateTime") {
+          return { pieces: [par("String", expr.value)], type: "String" };
+        }
+        // A string compared against a DateTime column is coerced to DateTime for
+        // partition pruning. Guard the parse: `new Date('not-a-date').toISOString()`
+        // throws a raw `RangeError` (not a typed compile error), which would escape
+        // as an opaque defect/500 and break the validate-repair loop (§18 #9).
+        const parsed = new Date(expr.value);
+        if (Number.isNaN(parsed.getTime())) {
+          throw new VoidQlSyntaxError({
+            message: `'${expr.value}' is not a valid date/time literal.`,
+            hint: "Use an ISO-8601 date like '2026-01-01' or '2026-01-01 12:00:00'.",
+          });
+        }
+        return { pieces: [par("DateTime", toClickhouseDateTime(parsed))], type: "DateTime" };
+      }
+      case "NumberLit": {
+        const type =
+          expected === "Int64" || expected === "UInt64" || expected === "Float64"
+            ? expected
+            : expr.numType;
+        return { pieces: [par(chParamType(type), expr.value)], type };
+      }
+      case "BoolLit":
+        return { pieces: [par("Bool", expr.value)], type: "Bool" };
+      case "NullLit":
+        return { pieces: [lit("NULL")], type: expected ?? "String" };
+      case "ColumnRef":
+        return this.resolveColumn(expr, frame);
+      case "StarRef":
+        throw new VoidQlUnsupportedError({
+          message: "'*' is only allowed as a SELECT item or as count(*).",
+          hint: "",
+        });
+      case "Paren": {
+        const inner = this.printExpr(expr.expr, frame, expected);
+        return { pieces: [lit("("), ...inner.pieces, lit(")")], type: inner.type };
+      }
+      case "Unary": {
+        const inner = this.printExpr(expr.expr, frame, expr.op === "neg" ? expected : undefined);
+        const op = expr.op === "not" ? "NOT " : "-";
+        return {
+          pieces: [lit(`(${op}`), ...inner.pieces, lit(")")],
+          type: expr.op === "not" ? "Bool" : inner.type,
+        };
+      }
+      case "Binary":
+        return this.printBinary(expr, frame);
+      case "InExpr":
+        return this.printIn(expr, frame);
+      case "Between": {
+        const target = this.printExpr(expr.expr, frame);
+        const low = this.printExpr(expr.low, frame, target.type);
+        const high = this.printExpr(expr.high, frame, target.type);
+        return {
+          pieces: [
+            lit("("),
+            ...target.pieces,
+            lit(expr.negated ? " NOT BETWEEN " : " BETWEEN "),
+            ...low.pieces,
+            lit(" AND "),
+            ...high.pieces,
+            lit(")"),
+          ],
+          type: "Bool",
+        };
+      }
+      case "IsNull": {
+        const target = this.printExpr(expr.expr, frame);
+        return {
+          pieces: [lit("("), ...target.pieces, lit(expr.negated ? " IS NOT NULL)" : " IS NULL)")],
+          type: "Bool",
+        };
+      }
+      case "CaseExpr":
+        return this.printCase(expr, frame);
+      case "FnCall":
+        return this.printFnCall(expr, frame);
+    }
+  }
+
+  private printBinary(expr: Binary, frame: Frame): PrintedExpr {
+    const sqlOp: Record<Binary["op"], string> = {
+      or: " OR ",
+      and: " AND ",
+      eq: " = ",
+      neq: " != ",
+      lt: " < ",
+      lte: " <= ",
+      gt: " > ",
+      gte: " >= ",
+      like: " LIKE ",
+      notLike: " NOT LIKE ",
+      add: " + ",
+      sub: " - ",
+      mul: " * ",
+      div: " / ",
+      mod: " % ",
+    };
+    const isComparison = ["eq", "neq", "lt", "lte", "gt", "gte"].includes(expr.op);
+    const isLogical = expr.op === "and" || expr.op === "or";
+    const isArith = ["add", "sub", "mul", "div", "mod"].includes(expr.op);
+
+    const left = this.printExpr(expr.left, frame, isComparison ? undefined : undefined);
+    // Propagate the left operand's type to a comparison RHS so a string literal
+    // compared to a DateTime column binds as DateTime (partition pruning, §18 #9).
+    const rhsExpected = isComparison
+      ? left.type
+      : expr.op === "like" || expr.op === "notLike"
+        ? "String"
+        : undefined;
+    const right = this.printExpr(expr.right, frame, rhsExpected);
+    const type: VoidQLType =
+      isComparison || isLogical || expr.op === "like" || expr.op === "notLike"
+        ? "Bool"
+        : isArith
+          ? "Float64"
+          : "String";
+    return {
+      pieces: [lit("("), ...left.pieces, lit(sqlOp[expr.op]), ...right.pieces, lit(")")],
+      type,
+    };
+  }
+
+  private printIn(expr: InExpr, frame: Frame): PrintedExpr {
+    const target = this.printExpr(expr.expr, frame);
+    const pieces: SqlPiece[] = [
+      lit("("),
+      ...target.pieces,
+      lit(expr.negated ? " NOT IN (" : " IN ("),
+    ];
+    expr.list.forEach((item, i) => {
+      if (i > 0) pieces.push(lit(", "));
+      pieces.push(...this.printExpr(item, frame, target.type).pieces);
+    });
+    pieces.push(lit("))"));
+    return { pieces, type: "Bool" };
+  }
+
+  private printCase(expr: CaseExpr, frame: Frame): PrintedExpr {
+    const pieces: SqlPiece[] = [lit("CASE")];
+    if (expr.operand) {
+      pieces.push(lit(" "), ...this.printExpr(expr.operand, frame).pieces);
+    }
+    let resultType: VoidQLType = "String";
+    expr.whens.forEach((branch, i) => {
+      const when = this.printExpr(branch.when, frame);
+      const then = this.printExpr(branch.then, frame);
+      if (i === 0) resultType = then.type;
+      pieces.push(lit(" WHEN "), ...when.pieces, lit(" THEN "), ...then.pieces);
+    });
+    if (expr.else) {
+      pieces.push(lit(" ELSE "), ...this.printExpr(expr.else, frame).pieces);
+    }
+    pieces.push(lit(" END"));
+    return { pieces, type: resultType };
+  }
+
+  private printFnCall(expr: FnCall, frame: Frame): PrintedExpr {
+    const spec = lookupFunction(expr.name);
+    if (!spec) {
+      throw new VoidQlUnsupportedError({
+        message: `Unknown or unsupported function '${expr.name}'.`,
+        hint: "Only the curated VoidQL function set is available.",
+      });
+    }
+    if (expr.args.length < spec.minArgs || expr.args.length > spec.maxArgs) {
+      throw new VoidQlUnsupportedError({
+        message: `Function '${expr.name}' expects ${spec.minArgs}..${spec.maxArgs} arguments, got ${expr.args.length}.`,
+        hint: "",
+      });
+    }
+
+    // count(*) is the only place a bare star is admissible.
+    if (spec.allowStar && expr.args.length === 1 && expr.args[0]!._tag === "StarRef") {
+      return { pieces: [lit(`${spec.chName}(*)`)], type: this.fnReturnType(spec, []) };
+    }
+
+    const argResults = expr.args.map((arg) => {
+      if (arg._tag === "StarRef") {
+        throw new VoidQlUnsupportedError({
+          message: `'*' is not a valid argument to '${expr.name}'.`,
+          hint: "",
+        });
+      }
+      return this.printExpr(arg, frame);
+    });
+
+    const pieces: SqlPiece[] = [lit(`${spec.chName}(`)];
+    argResults.forEach((arg, i) => {
+      if (i > 0) pieces.push(lit(", "));
+      pieces.push(...arg.pieces);
+    });
+    pieces.push(lit(")"));
+    return {
+      pieces,
+      type: this.fnReturnType(
+        spec,
+        argResults.map((a) => a.type),
+      ),
+    };
+  }
+
+  private fnReturnType(spec: FnSpec, argTypes: readonly VoidQLType[]): VoidQLType {
+    if (typeof spec.returns === "object") {
+      return argTypes[spec.returns.arg] ?? "String";
+    }
+    return spec.returns;
+  }
+
+  // ── select ──────────────────────────────────────────────────────────────
+
+  printSelect(select: Select, parent?: Frame): CompiledSelect {
+    const frame: Frame = { relations: [], cteShapes: new Map(), parent };
+
+    const ctePieces: SqlPiece[] = [];
+    select.with.forEach((cte, i) => {
+      const nameLower = cte.name.toLowerCase();
+      if (
+        !IDENT_RE.test(cte.name) ||
+        PHYSICAL_SHAPED_RE.test(cte.name) ||
+        RESERVED_INTERNAL_ALIASES.has(nameLower)
+      ) {
+        throw new VoidQlUnsupportedError({ message: `Invalid CTE name '${cte.name}'.`, hint: "" });
+      }
+      if (frame.cteShapes.has(nameLower)) {
+        throw new VoidQlUnsupportedError({ message: `Duplicate CTE '${cte.name}'.`, hint: "" });
+      }
+      const compiled = this.printSelect(cte.query, frame);
+      frame.cteShapes.set(nameLower, compiled.shape);
+      ctePieces.push(
+        lit(i === 0 ? "WITH " : ", "),
+        lit(`${cte.name} AS ( `),
+        ...compiled.pieces,
+        lit(" )"),
+      );
+    });
+    if (ctePieces.length > 0) ctePieces.push(lit(" "));
+
+    // FROM + JOINs build the relation frame before any expression is resolved.
+    const fromPieces = this.resolveSource(select.from, frame);
+    const joinPieces: SqlPiece[] = [];
+    for (const join of select.joins) {
+      const sourcePieces = this.resolveSource(join.source, frame);
+      const on = this.printExpr(join.on, frame, "Bool");
+      joinPieces.push(
+        lit(join.kind === "left" ? " LEFT JOIN " : " INNER JOIN "),
+        ...sourcePieces,
+        lit(" ON "),
+        ...on.pieces,
+      );
+    }
+
+    const { columnPieces, shape } = this.printColumns(select.columns, frame);
+
+    const pieces: SqlPiece[] = [
+      ...ctePieces,
+      lit("SELECT "),
+      ...columnPieces,
+      lit(" FROM "),
+      ...fromPieces,
+      ...joinPieces,
+    ];
+
+    if (select.where) {
+      pieces.push(lit(" WHERE "), ...this.printExpr(select.where, frame, "Bool").pieces);
+    }
+    if (select.groupBy.length > 0) {
+      pieces.push(lit(" GROUP BY "));
+      select.groupBy.forEach((g, i) => {
+        if (i > 0) pieces.push(lit(", "));
+        pieces.push(...this.printExpr(g, frame).pieces);
+      });
+    }
+    if (select.having) {
+      pieces.push(lit(" HAVING "), ...this.printExpr(select.having, frame, "Bool").pieces);
+    }
+    if (select.orderBy.length > 0) {
+      pieces.push(lit(" ORDER BY "));
+      select.orderBy.forEach((o: OrderItem, i) => {
+        if (i > 0) pieces.push(lit(", "));
+        pieces.push(
+          ...this.printExpr(o.expr, frame).pieces,
+          lit(o.dir === "desc" ? " DESC" : " ASC"),
+        );
+      });
+    }
+
+    // LIMIT is always emitted and clamped — defense-in-depth (§7 L6).
+    const limit = Math.min(select.limit ?? MAX_RESULT_ROWS, MAX_RESULT_ROWS);
+    pieces.push(lit(` LIMIT ${limit}`));
+    if (select.offset && select.offset > 0) pieces.push(lit(` OFFSET ${select.offset}`));
+
+    return { pieces, shape, injected: [] };
+  }
+
+  private printColumns(
+    columns: readonly SelectItem[],
+    frame: Frame,
+  ): { readonly columnPieces: readonly SqlPiece[]; readonly shape: readonly ColumnSpec[] } {
+    const columnPieces: SqlPiece[] = [];
+    const shape: ColumnSpec[] = [];
+    let emitted = 0;
+
+    const emitSep = () => {
+      if (emitted > 0) columnPieces.push(lit(", "));
+      emitted += 1;
+    };
+
+    columns.forEach((item, index) => {
+      if (item.expr._tag === "StarRef") {
+        this.expandStar(item.expr.qualifier, frame).forEach((entry) => {
+          emitSep();
+          columnPieces.push(lit(this.qualified(entry.alias, entry.col)));
+          shape.push({ name: entry.col, type: entry.type });
+        });
+        return;
+      }
+      const printed = this.printExpr(item.expr, frame);
+      emitSep();
+      columnPieces.push(...printed.pieces);
+      const name = item.alias ?? this.inferColumnName(item, index);
+      // Always emit an explicit `AS <name>` — including for synthesized names — so
+      // the ClickHouse output column name equals the reported `shape` name. Without
+      // it, an unaliased computed column (count(), CASE, arithmetic) is CH-named by
+      // its expression while `shape` reports `expr_N`, so the caller reads the wrong
+      // key (silent wrong result) and a subquery/CTE reference to it fails to resolve.
+      if (
+        !IDENT_RE.test(name) ||
+        PHYSICAL_SHAPED_RE.test(name) ||
+        RESERVED_INTERNAL_ALIASES.has(name.toLowerCase())
+      ) {
+        throw new VoidQlUnsupportedError({ message: `Invalid column alias '${name}'.`, hint: "" });
+      }
+      columnPieces.push(lit(` AS ${name}`));
+      shape.push({ name, type: printed.type });
+    });
+
+    return { columnPieces, shape };
+  }
+
+  private inferColumnName(item: SelectItem, index: number): string {
+    if (item.expr._tag === "ColumnRef") {
+      const last = item.expr.chain[item.expr.chain.length - 1]!;
+      return last;
+    }
+    return `expr_${index}`;
+  }
+
+  private expandStar(
+    qualifier: string | undefined,
+    frame: Frame,
+  ): readonly { readonly alias: string; readonly col: string; readonly type: VoidQLType }[] {
+    const relations = qualifier
+      ? [this.findRelation(frame, qualifier.toLowerCase())].filter(
+          (r): r is ResolvedRelation => r !== undefined,
+        )
+      : frame.relations;
+    if (qualifier && relations.length === 0) {
+      throw new VoidQlUnknownFieldError({
+        field: `${qualifier}.*`,
+        message: `Unknown table '${qualifier}' in '${qualifier}.*'.`,
+        suggestion: "",
+      });
+    }
+    return relations.flatMap((rel) => {
+      if (rel.kind === "view") {
+        return Object.values(rel.table.columns)
+          .filter((c) => c.inStar)
+          .map((c) => ({ alias: rel.alias, col: c.name, type: c.type }));
+      }
+      return [...rel.columns.entries()].map(([col, type]) => ({ alias: rel.alias, col, type }));
+    });
+  }
+}
+
+/**
+ * Resolve + print a parsed statement into the {@link CompiledSelect} IR. Throws the
+ * typed compile errors (`VoidQlSchemaError`, `VoidQlUnknownFieldError`,
+ * `VoidQlPiiError`, `VoidQlUnsupportedError`).
+ */
+export const compileSelect = (
+  select: Select,
+  scope: AuthorizedScope,
+  capabilities: ReadonlySet<Capability>,
+): CompiledSelect => {
+  const compiler = new Compiler(scope, capabilities);
+  const result = compiler.printSelect(select);
+  return { pieces: result.pieces, shape: result.shape, injected: compiler.injected };
+};
diff --git a/packages/core/src/services/voidql/errors.ts b/packages/core/src/services/voidql/errors.ts
new file mode 100644
index 000000000..5cfa3fc11
--- /dev/null
+++ b/packages/core/src/services/voidql/errors.ts
@@ -0,0 +1,146 @@
+/**
+ * VoidQL compile/run domain errors and the structured {@link Diagnostic} the
+ * agent repair-loop and the editor caret both consume.
+ *
+ * Every error is a {@link Schema.TaggedErrorClass} so the RPC layer can translate
+ * each `_tag` via `Effect.catchTags` into its `Rpc/`-prefixed counterpart (the
+ * established 3-layer convention). Messages are path-precise but carry **no
+ * ClickHouse internals** — client-facing surfaces are uniform opaque envelopes to
+ * starve timing / row-count side-channels (§7 L7, §13).
+ */
+import { Schema } from "effect";
+
+import type { Span } from "./ast/VoidQlAst.ts";
+
+/**
+ * The currency of the agent repair loop and the Monaco red-underline: a typed,
+ * span-precise compile diagnostic. Returned as *data* (not thrown) by
+ * `validateQuery`, and mirrored by the thrown error's fields on the run path.
+ */
+export interface Diagnostic {
+  /** Which compiler stage produced it. */
+  readonly stage: "lex" | "parse" | "resolve" | "verify";
+  /** A stable machine code (e.g. `"unknown_field"`, `"pii"`). */
+  readonly code: string;
+  /** Human/agent-readable message. */
+  readonly message: string;
+  /** Source span, when the failure is attributable to one. */
+  readonly span?: Span;
+  /** A teachable hint for self-repair (e.g. "VoidQL is read-only…"). */
+  readonly hint?: string;
+}
+
+/** Render a span as a compact `line:col` prefix for flat error messages. */
+export const formatSpan = (span: Span | undefined): string =>
+  span ? `line ${span.start.line}, col ${span.start.col}: ` : "";
+
+/** The query text could not be tokenised or parsed into a valid VoidQL AST. */
+export class VoidQlSyntaxError extends Schema.TaggedErrorClass<VoidQlSyntaxError>(
+  "VoidQlSyntaxError",
+)("VoidQlSyntaxError", { message: Schema.String, hint: Schema.String }) {}
+
+/**
+ * The query is syntactically reachable but uses a construct VoidQL does not (yet)
+ * compile — a deferred node, an unknown/denied function, a table function, or a
+ * `*.table` qualifier. Default-deny: anything not in an allow-list lands here.
+ */
+export class VoidQlUnsupportedError extends Schema.TaggedErrorClass<VoidQlUnsupportedError>(
+  "VoidQlUnsupportedError",
+)("VoidQlUnsupportedError", { message: Schema.String, hint: Schema.String }) {}
+
+/** A relation could not be resolved to a registered logical view. */
+export class VoidQlSchemaError extends Schema.TaggedErrorClass<VoidQlSchemaError>(
+  "VoidQlSchemaError",
+)("VoidQlSchemaError", { message: Schema.String }) {}
+
+/** A column/property did not resolve; `suggestion` carries the nearest catalog entry. */
+export class VoidQlUnknownFieldError extends Schema.TaggedErrorClass<VoidQlUnknownFieldError>(
+  "VoidQlUnknownFieldError",
+)("VoidQlUnknownFieldError", {
+  field: Schema.String,
+  message: Schema.String,
+  suggestion: Schema.String,
+}) {}
+
+/**
+ * A PII column/namespace was referenced without the `pii` capability. The *whole*
+ * query is rejected (never null-substituted) so a `WHERE email = …` cannot act as
+ * a row-count oracle (§9).
+ */
+export class VoidQlPiiError extends Schema.TaggedErrorClass<VoidQlPiiError>("VoidQlPiiError")(
+  "VoidQlPiiError",
+  { message: Schema.String },
+) {}
+
+/** A parser/AST resource cap was exceeded (depth, tokens, nodes, joins, subqueries). */
+export class VoidQlComplexityError extends Schema.TaggedErrorClass<VoidQlComplexityError>(
+  "VoidQlComplexityError",
+)("VoidQlComplexityError", { message: Schema.String }) {}
+
+/**
+ * The value-level isolation verifier rejected the compiled statement. This is a
+ * **compiler defect**, never user error — it must never reach ClickHouse. Surfaced
+ * to clients as an opaque execution error (§10, §20).
+ */
+export class VoidQlIsolationError extends Schema.TaggedErrorClass<VoidQlIsolationError>(
+  "VoidQlIsolationError",
+)("VoidQlIsolationError", { message: Schema.String }) {}
+
+/** Catch-all for execution-time failures (the sanitised ClickHouse-error boundary). */
+export class VoidQlExecutionError extends Schema.TaggedErrorClass<VoidQlExecutionError>(
+  "VoidQlExecutionError",
+)("VoidQlExecutionError", { cause: Schema.String, message: Schema.String }) {}
+
+/** The union of errors the pure compile pipeline can raise (execution excluded). */
+export type VoidQlCompileError =
+  | VoidQlSyntaxError
+  | VoidQlUnsupportedError
+  | VoidQlSchemaError
+  | VoidQlUnknownFieldError
+  | VoidQlPiiError
+  | VoidQlComplexityError
+  | VoidQlIsolationError;
+
+const COMPILE_TAGS = new Set([
+  "VoidQlSyntaxError",
+  "VoidQlUnsupportedError",
+  "VoidQlSchemaError",
+  "VoidQlUnknownFieldError",
+  "VoidQlPiiError",
+  "VoidQlComplexityError",
+  "VoidQlIsolationError",
+]);
+
+/** Narrow an unknown thrown value to a VoidQL compile error instance. */
+export const isVoidQlCompileError = (u: unknown): u is VoidQlCompileError =>
+  typeof u === "object" &&
+  u !== null &&
+  "_tag" in u &&
+  typeof (u as { _tag: unknown })._tag === "string" &&
+  COMPILE_TAGS.has((u as { _tag: string })._tag);
+
+/** Map a compile error to a public {@link Diagnostic} (used by `validateQuery`). */
+export const toDiagnostic = (error: VoidQlCompileError): Diagnostic => {
+  switch (error._tag) {
+    case "VoidQlSyntaxError":
+      return { stage: "parse", code: "syntax", message: error.message, hint: error.hint };
+    case "VoidQlUnsupportedError":
+      return { stage: "parse", code: "unsupported", message: error.message, hint: error.hint };
+    case "VoidQlSchemaError":
+      return { stage: "resolve", code: "unknown_relation", message: error.message };
+    case "VoidQlUnknownFieldError":
+      return {
+        stage: "resolve",
+        code: "unknown_field",
+        message: error.message,
+        hint: error.suggestion ? `Did you mean '${error.suggestion}'?` : undefined,
+      };
+    case "VoidQlPiiError":
+      return { stage: "resolve", code: "pii", message: error.message };
+    case "VoidQlComplexityError":
+      return { stage: "parse", code: "complexity", message: error.message };
+    case "VoidQlIsolationError":
+      // Never leak the internal reason; the diagnostic is generic.
+      return { stage: "verify", code: "internal", message: "Query could not be compiled." };
+  }
+};
diff --git a/packages/core/src/services/voidql/functions.ts b/packages/core/src/services/voidql/functions.ts
new file mode 100644
index 000000000..d990a51a4
--- /dev/null
+++ b/packages/core/src/services/voidql/functions.ts
@@ -0,0 +1,164 @@
+/**
+ * The VoidQL function registry (§11) — a **default-deny** map of VoidQL function
+ * name → ClickHouse function with arity and result type. A function is callable
+ * iff it has a row; anything absent (table functions, `dictGet*`, `getSetting`,
+ * `sleep`, introspection, throwing casts, next year's `azureBlobStorageCluster`)
+ * is rejected with {@link VoidQlUnsupportedError}. The registry fails *closed* on
+ * everything new — the inverse of a blocklist, which fails open on every release.
+ *
+ * Deferred families (lambdas/higher-order array fns, window fns, `arrayJoin`,
+ * parametric aggregates) are simply absent until they land behind a Security-Review
+ * Gate.
+ */
+import type { VoidQLType } from "./catalog/types.ts";
+
+/** A function's result type, or `{ arg: i }` to mean "the type of argument i". */
+export type FnReturn = VoidQLType | { readonly arg: number };
+
+export interface FnSpec {
+  /** The ClickHouse function this lowers to. */
+  readonly chName: string;
+  readonly minArgs: number;
+  readonly maxArgs: number;
+  readonly returns: FnReturn;
+  readonly aggregate: boolean;
+  /** Whether a bare `*` is an acceptable sole argument (only `count(*)`). */
+  readonly allowStar?: boolean;
+}
+
+const REGISTRY: Readonly<Record<string, FnSpec>> = {
+  // ── aggregations (the core of analytics; pure, deterministic) ──
+  count: {
+    chName: "count",
+    minArgs: 0,
+    maxArgs: 1,
+    returns: "UInt64",
+    aggregate: true,
+    allowStar: true,
+  },
+  countif: { chName: "countIf", minArgs: 1, maxArgs: 1, returns: "UInt64", aggregate: true },
+  countdistinct: {
+    chName: "uniqExact",
+    minArgs: 1,
+    maxArgs: 64,
+    returns: "UInt64",
+    aggregate: true,
+  },
+  sum: { chName: "sum", minArgs: 1, maxArgs: 1, returns: "Float64", aggregate: true },
+  sumif: { chName: "sumIf", minArgs: 2, maxArgs: 2, returns: "Float64", aggregate: true },
+  avg: { chName: "avg", minArgs: 1, maxArgs: 1, returns: "Float64", aggregate: true },
+  min: { chName: "min", minArgs: 1, maxArgs: 1, returns: { arg: 0 }, aggregate: true },
+  max: { chName: "max", minArgs: 1, maxArgs: 1, returns: { arg: 0 }, aggregate: true },
+  any: { chName: "any", minArgs: 1, maxArgs: 1, returns: { arg: 0 }, aggregate: true },
+  argmin: { chName: "argMin", minArgs: 2, maxArgs: 2, returns: { arg: 0 }, aggregate: true },
+  argmax: { chName: "argMax", minArgs: 2, maxArgs: 2, returns: { arg: 0 }, aggregate: true },
+
+  // ── conditional / null handling (pure scalar control flow) ──
+  if: { chName: "if", minArgs: 3, maxArgs: 3, returns: { arg: 1 }, aggregate: false },
+  multiif: { chName: "multiIf", minArgs: 3, maxArgs: 99, returns: { arg: 1 }, aggregate: false },
+  coalesce: { chName: "coalesce", minArgs: 1, maxArgs: 99, returns: { arg: 0 }, aggregate: false },
+  nullif: { chName: "nullIf", minArgs: 2, maxArgs: 2, returns: { arg: 0 }, aggregate: false },
+  ifnull: { chName: "ifNull", minArgs: 2, maxArgs: 2, returns: { arg: 0 }, aggregate: false },
+  greatest: { chName: "greatest", minArgs: 2, maxArgs: 99, returns: { arg: 0 }, aggregate: false },
+  least: { chName: "least", minArgs: 2, maxArgs: 99, returns: { arg: 0 }, aggregate: false },
+
+  // ── string / hash (pure) ──
+  lower: { chName: "lower", minArgs: 1, maxArgs: 1, returns: "String", aggregate: false },
+  upper: { chName: "upper", minArgs: 1, maxArgs: 1, returns: "String", aggregate: false },
+  concat: { chName: "concat", minArgs: 2, maxArgs: 99, returns: "String", aggregate: false },
+  substring: { chName: "substring", minArgs: 2, maxArgs: 3, returns: "String", aggregate: false },
+  startswith: { chName: "startsWith", minArgs: 2, maxArgs: 2, returns: "Bool", aggregate: false },
+  // regex allowed but the query is cost-capped (ReDoS → bounded-time abort, §11).
+  match: { chName: "match", minArgs: 2, maxArgs: 2, returns: "Bool", aggregate: false },
+  replaceregexpall: {
+    chName: "replaceRegexpAll",
+    minArgs: 3,
+    maxArgs: 3,
+    returns: "String",
+    aggregate: false,
+  },
+  cityhash64: {
+    chName: "cityHash64",
+    minArgs: 1,
+    maxArgs: 99,
+    returns: "UInt64",
+    aggregate: false,
+  },
+
+  // ── date / math (pure) ──
+  tostartofhour: {
+    chName: "toStartOfHour",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "DateTime",
+    aggregate: false,
+  },
+  tostartofday: {
+    chName: "toStartOfDay",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "DateTime",
+    aggregate: false,
+  },
+  tostartofweek: {
+    chName: "toStartOfWeek",
+    minArgs: 1,
+    maxArgs: 2,
+    returns: "DateTime",
+    aggregate: false,
+  },
+  tostartofmonth: {
+    chName: "toStartOfMonth",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "DateTime",
+    aggregate: false,
+  },
+  tostartofquarter: {
+    chName: "toStartOfQuarter",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "DateTime",
+    aggregate: false,
+  },
+  tostartofyear: {
+    chName: "toStartOfYear",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "DateTime",
+    aggregate: false,
+  },
+  todate: { chName: "toDate", minArgs: 1, maxArgs: 1, returns: "DateTime", aggregate: false },
+  datediff: { chName: "dateDiff", minArgs: 3, maxArgs: 3, returns: "Int64", aggregate: false },
+  round: { chName: "round", minArgs: 1, maxArgs: 2, returns: "Float64", aggregate: false },
+  floor: { chName: "floor", minArgs: 1, maxArgs: 2, returns: "Float64", aggregate: false },
+  abs: { chName: "abs", minArgs: 1, maxArgs: 1, returns: { arg: 0 }, aggregate: false },
+  // only the null-safe casts (HogQL's leading-underscore rule) — never throwing casts
+  tofloat64ornull: {
+    chName: "toFloat64OrNull",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "Float64",
+    aggregate: false,
+  },
+  toint64ornull: {
+    chName: "toInt64OrNull",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "Int64",
+    aggregate: false,
+  },
+  todateornull: {
+    chName: "toDateOrNull",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "DateTime",
+    aggregate: false,
+  },
+};
+
+/** Resolve a VoidQL function name (case-insensitive) to its spec, or `undefined`. */
+export const lookupFunction = (name: string): FnSpec | undefined => REGISTRY[name.toLowerCase()];
+
+/** All registered VoidQL function names (for agent/editor schema context). */
+export const registeredFunctionNames = (): readonly string[] => Object.keys(REGISTRY);
diff --git a/packages/core/src/services/voidql/index.ts b/packages/core/src/services/voidql/index.ts
new file mode 100644
index 000000000..0df8d98f5
--- /dev/null
+++ b/packages/core/src/services/voidql/index.ts
@@ -0,0 +1,32 @@
+/**
+ * Public entry point for the VoidQL analytics access layer
+ * (docs/analytics-access-layer.html). A custom, read-only SQL dialect compiled
+ * server-side to safe ClickHouse SQL, with tenant isolation by logical-view
+ * substitution (compiler-injected bound-literal scope) + a hardened value-level
+ * verifier.
+ */
+export * from "./errors.ts";
+export { compileVoidQl, compilePure, compileToIr, type CompiledQuery } from "./compile.ts";
+export { MAX_RESULT_ROWS } from "./compiler.ts";
+export { CATALOG, CATALOG_SCHEMA_VERSION, getCatalogTable } from "./catalog/index.ts";
+export type {
+  CatalogTable,
+  CatalogColumn,
+  VoidQLType,
+  Capability,
+  ColumnSpec,
+} from "./catalog/types.ts";
+export { lookupFunction, registeredFunctionNames } from "./functions.ts";
+export { type AuthorizedScope, makeAuthorizedScope } from "./scope.ts";
+export { parse } from "./parser.ts";
+export { lex } from "./lexer.ts";
+export { renderDebugSql, toStatement, type SqlPiece } from "./ir.ts";
+export { verify } from "./verify.ts";
+export {
+  VoidQlService,
+  type RunQueryInput,
+  type RunQueryResult,
+  type ValidateResult,
+  type SchemaDescriptor,
+  type VoidQlPrincipal,
+} from "./VoidQlService.ts";
diff --git a/packages/core/src/services/voidql/ir.ts b/packages/core/src/services/voidql/ir.ts
new file mode 100644
index 000000000..a4696f1a0
--- /dev/null
+++ b/packages/core/src/services/voidql/ir.ts
@@ -0,0 +1,76 @@
+/**
+ * The compiled-query intermediate representation: a flat list of {@link SqlPiece}s.
+ *
+ * Each piece is either a chunk of compiler-controlled structural SQL (`sql`) or a
+ * bound parameter (`param`). This *is* the "ResolvedQuery IR" the value-level
+ * verifier walks (§10, §18 gap #2): it inspects `(sql, binds)` jointly, which a
+ * placeholder-syntax count cannot. Keeping the printer pure over pieces makes it
+ * trivially unit-testable and fuzzable; {@link toStatement} is the thin adapter
+ * that replays the pieces through the audited `ch.literal`/`ch.param` substrate
+ * for execution, and {@link renderDebugSql} reproduces the exact compiled text +
+ * binds for the verifier and golden tests.
+ */
+import type { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import type { Statement } from "effect/unstable/sql/Statement";
+
+import { type CatalogSql, catalog } from "./catalog/brand.ts";
+
+/** A value bound out-of-band as a ClickHouse named parameter. */
+export type ParamValue = string | number | boolean | readonly string[] | readonly number[];
+
+export type SqlPiece =
+  | { readonly kind: "sql"; readonly text: CatalogSql }
+  | { readonly kind: "param"; readonly chType: string; readonly value: ParamValue };
+
+/**
+ * Emit structural SQL. The single funnel for `CatalogSql` minting in the printer
+ * and catalog — only ever fed keywords, validated identifiers, and frozen catalog
+ * constants, NEVER user text (the §12 invariant; lint-guarded).
+ */
+export const lit = (text: string): SqlPiece => ({ kind: "sql", text: catalog(text) });
+
+/** Emit a bound parameter with an explicit ClickHouse type (§18 gap #9). */
+export const par = (chType: string, value: ParamValue): SqlPiece => ({
+  kind: "param",
+  chType,
+  value,
+});
+
+/**
+ * Render the pieces to the exact compiled SQL text (with `{pN: Type}` placeholders)
+ * and the ordered bind list — matching what {@link toStatement} + the ClickHouse
+ * compiler produce. Pure; no `ch` needed.
+ */
+export const renderDebugSql = (
+  pieces: readonly SqlPiece[],
+): { readonly sql: string; readonly binds: readonly ParamValue[] } => {
+  let sql = "";
+  const binds: ParamValue[] = [];
+  for (const piece of pieces) {
+    if (piece.kind === "sql") {
+      sql += piece.text;
+    } else {
+      binds.push(piece.value);
+      sql += `{p${binds.length}: ${piece.chType}}`;
+    }
+  }
+  return { sql, binds };
+};
+
+/**
+ * Replay the IR through the audited `ch` substrate, yielding an executable
+ * {@link Statement}. Structural pieces become `ch.literal(CatalogSql)`; parameters
+ * become `ch.param(type, value)` — bound out-of-band in `query_params`, never
+ * spliced.
+ */
+export const toStatement = <Row extends object = Record<string, unknown>>(
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  pieces: readonly SqlPiece[],
+): Statement<Row> =>
+  pieces.reduce<Statement<Row>>(
+    (frag, piece) =>
+      piece.kind === "sql"
+        ? ch<Row>`${frag}${ch.literal(piece.text)}`
+        : ch<Row>`${frag}${ch.param(piece.chType, piece.value)}`,
+    ch<Row>``,
+  );
diff --git a/packages/core/src/services/voidql/lexer.ts b/packages/core/src/services/voidql/lexer.ts
new file mode 100644
index 000000000..5da151473
--- /dev/null
+++ b/packages/core/src/services/voidql/lexer.ts
@@ -0,0 +1,293 @@
+/**
+ * The VoidQL lexer — hand-written, `workerd`-pure (no `eval`, no Node deps).
+ *
+ * String lexing is **ClickHouse-faithful**: single-quoted, with `''` doubling
+ * (NOT backslash) escaping a quote. CVE-2025-1520 was a lexer escape mismatch, so
+ * a borrowed/Postgres lexer is an *isolation* risk, not a correctness bug (§8.1).
+ * Comments (`-- …`, `/* … *​/`) are dropped here, so the canonical re-print can
+ * never carry smuggled bytes (T9).
+ *
+ * Reserved words — including the deferred/denied ones (`SETTINGS`, `UNION`, …) —
+ * tokenise as keywords so the parser can raise a teachable error rather than
+ * mis-parsing them as identifiers, and so they can never be used as aliases.
+ */
+import type { Pos } from "./ast/VoidQlAst.ts";
+import { VoidQlComplexityError, VoidQlSyntaxError } from "./errors.ts";
+
+export type TokenKind = "ident" | "kw" | "string" | "number" | "op" | "eof";
+
+export interface Token {
+  readonly kind: TokenKind;
+  /** Keyword tokens are lower-cased; identifiers keep their source case. */
+  readonly text: string;
+  readonly start: Pos;
+  readonly end: Pos;
+  /** For `string` tokens: the decoded value. For `number`: the numeric value. */
+  readonly value?: string | number;
+  /** For `number` tokens: the resolved scalar type. */
+  readonly numType?: "Int64" | "UInt64" | "Float64";
+}
+
+/** Structural keywords that have a grammar production in v1. */
+const ALLOWED_KEYWORDS = new Set([
+  "select",
+  "from",
+  "where",
+  "group",
+  "by",
+  "having",
+  "order",
+  "asc",
+  "desc",
+  "limit",
+  "offset",
+  "join",
+  "inner",
+  "left",
+  "on",
+  "as",
+  "with",
+  "and",
+  "or",
+  "not",
+  "in",
+  "between",
+  "is",
+  "null",
+  "true",
+  "false",
+  "case",
+  "when",
+  "then",
+  "else",
+  "end",
+  "like",
+]);
+
+/**
+ * Reserved words with **no v1 production** — deferred constructs and permanently
+ * denied statements. Tokenised so the parser fails closed with a teachable error
+ * (a parse error, not a parse-then-reject — §8.1, §11, §18 gap #8).
+ */
+const FORBIDDEN_KEYWORDS = new Set([
+  "settings",
+  "set",
+  "format",
+  "into",
+  "insert",
+  "update",
+  "delete",
+  "alter",
+  "create",
+  "drop",
+  "grant",
+  "revoke",
+  "system",
+  "final",
+  "sample",
+  "union",
+  "distinct",
+  "all",
+  "over",
+  "right",
+  "full",
+  "outer",
+  "cross",
+  "using",
+  "prewhere",
+  "array",
+  "arrayjoin",
+  "interval",
+  "values",
+  "table",
+  "database",
+  "attach",
+  "detach",
+  "optimize",
+  "kill",
+  "show",
+  "describe",
+  "explain",
+  "use",
+  "outfile",
+  "infile",
+]);
+
+const KEYWORDS = new Set([...ALLOWED_KEYWORDS, ...FORBIDDEN_KEYWORDS]);
+
+/** Exposed so the parser can classify a `kw` token without re-deriving the set. */
+export const isForbiddenKeyword = (lower: string): boolean => FORBIDDEN_KEYWORDS.has(lower);
+
+const MAX_TOKENS = 50_000;
+
+const isIdentStart = (c: string): boolean => /[A-Za-z_]/.test(c);
+const isIdentPart = (c: string): boolean => /[A-Za-z0-9_]/.test(c);
+const isDigit = (c: string): boolean => c >= "0" && c <= "9";
+
+/**
+ * Tokenise `text` into a flat token stream terminated by an `eof` token. Throws
+ * {@link VoidQlSyntaxError} on malformed input and {@link VoidQlComplexityError}
+ * when the token cap is exceeded (a DoS bound applied *before* parsing).
+ */
+export const lex = (text: string): readonly Token[] => {
+  const tokens: Token[] = [];
+  let offset = 0;
+  let line = 1;
+  let col = 1;
+
+  const pos = (): Pos => ({ line, col, offset });
+
+  const advance = (): string => {
+    const c = text[offset]!;
+    offset += 1;
+    if (c === "\n") {
+      line += 1;
+      col = 1;
+    } else {
+      col += 1;
+    }
+    return c;
+  };
+
+  const peek = (ahead = 0): string => text[offset + ahead] ?? "";
+
+  const push = (token: Token): void => {
+    if (tokens.length >= MAX_TOKENS) {
+      throw new VoidQlComplexityError({ message: "Query is too large." });
+    }
+    tokens.push(token);
+  };
+
+  const fail = (start: Pos, message: string): never => {
+    throw new VoidQlSyntaxError({
+      message: `line ${start.line}, col ${start.col}: ${message}`,
+      hint: "",
+    });
+  };
+
+  while (offset < text.length) {
+    const c = peek();
+
+    // whitespace
+    if (c === " " || c === "\t" || c === "\r" || c === "\n") {
+      advance();
+      continue;
+    }
+
+    // line comment
+    if (c === "-" && peek(1) === "-") {
+      while (offset < text.length && peek() !== "\n") advance();
+      continue;
+    }
+
+    // block comment
+    if (c === "/" && peek(1) === "*") {
+      const start = pos();
+      advance();
+      advance();
+      let closed = false;
+      while (offset < text.length) {
+        if (peek() === "*" && peek(1) === "/") {
+          advance();
+          advance();
+          closed = true;
+          break;
+        }
+        advance();
+      }
+      if (!closed) fail(start, "Unterminated block comment.");
+      continue;
+    }
+
+    // string literal — single-quoted, '' escapes a quote, no backslash escaping
+    if (c === "'") {
+      const start = pos();
+      advance();
+      let value = "";
+      let closed = false;
+      while (offset < text.length) {
+        const ch = advance();
+        if (ch === "'") {
+          if (peek() === "'") {
+            advance();
+            value += "'";
+            continue;
+          }
+          closed = true;
+          break;
+        }
+        value += ch;
+      }
+      if (!closed) fail(start, "Unterminated string literal.");
+      push({ kind: "string", text: value, value, start, end: pos() });
+      continue;
+    }
+
+    // number literal
+    if (isDigit(c) || (c === "." && isDigit(peek(1)))) {
+      const start = pos();
+      let raw = "";
+      let isFloat = false;
+      while (offset < text.length && isDigit(peek())) raw += advance();
+      if (peek() === ".") {
+        isFloat = true;
+        raw += advance();
+        while (offset < text.length && isDigit(peek())) raw += advance();
+      }
+      if (peek() === "e" || peek() === "E") {
+        isFloat = true;
+        raw += advance();
+        if (peek() === "+" || peek() === "-") raw += advance();
+        if (!isDigit(peek())) fail(start, "Malformed exponent in number literal.");
+        while (offset < text.length && isDigit(peek())) raw += advance();
+      }
+      // A trailing identifier char immediately after a number is illegal (e.g. `1abc`).
+      if (isIdentStart(peek())) fail(start, "Invalid number literal.");
+      const num = Number(raw);
+      if (!Number.isFinite(num)) fail(start, "Number literal out of range.");
+      push({
+        kind: "number",
+        text: raw,
+        value: num,
+        numType: isFloat ? "Float64" : "Int64",
+        start,
+        end: pos(),
+      });
+      continue;
+    }
+
+    // identifier or keyword
+    if (isIdentStart(c)) {
+      const start = pos();
+      let raw = "";
+      while (offset < text.length && isIdentPart(peek())) raw += advance();
+      const lower = raw.toLowerCase();
+      if (KEYWORDS.has(lower)) {
+        push({ kind: "kw", text: lower, start, end: pos() });
+      } else {
+        push({ kind: "ident", text: raw, start, end: pos() });
+      }
+      continue;
+    }
+
+    // operators / punctuation
+    const start = pos();
+    const two = c + peek(1);
+    if (two === "<=" || two === ">=" || two === "!=" || two === "<>") {
+      advance();
+      advance();
+      push({ kind: "op", text: two === "<>" ? "!=" : two, start, end: pos() });
+      continue;
+    }
+    if ("=<>+-*/%(),.".includes(c)) {
+      advance();
+      push({ kind: "op", text: c, start, end: pos() });
+      continue;
+    }
+
+    fail(start, `Unexpected character '${c}'.`);
+  }
+
+  push({ kind: "eof", text: "", start: pos(), end: pos() });
+  return tokens;
+};
diff --git a/packages/core/src/services/voidql/parser.ts b/packages/core/src/services/voidql/parser.ts
new file mode 100644
index 000000000..3d8f741f9
--- /dev/null
+++ b/packages/core/src/services/voidql/parser.ts
@@ -0,0 +1,608 @@
+/**
+ * The VoidQL parser — hand-written recursive descent with a Pratt
+ * (precedence-climbing) expression core. No `eval`, no Node deps; `workerd`-pure.
+ *
+ * This module is the **sole, trusted constructor of AST nodes** (§8.2): no other
+ * module is permitted to build a node literal, which is what makes "user text
+ * never reaches `ch.literal`" a static property rather than an assumption.
+ *
+ * Depth / node / join / subquery caps live **in the cursor**, checked *before*
+ * recursion, so a 10⁵-deep input is a typed {@link VoidQlComplexityError}, not a
+ * JS-stack blow-up (§18 gap #6). Deferred and denied constructs (`SETTINGS`,
+ * `UNION`, `DISTINCT`, …) have no production at all — they are parse errors, never
+ * parse-then-reject, so the highest-risk surface never has a validator to bypass.
+ */
+import type {
+  Binary,
+  BinaryOp,
+  CaseWhen,
+  Cte,
+  Expr,
+  Join,
+  OrderItem,
+  Pos,
+  Select,
+  SelectItem,
+  Span,
+  Statement,
+  TableSource,
+} from "./ast/VoidQlAst.ts";
+import { VoidQlComplexityError, VoidQlSyntaxError, VoidQlUnsupportedError } from "./errors.ts";
+import { isForbiddenKeyword, lex, type Token } from "./lexer.ts";
+
+const LIMITS = {
+  maxDepth: 50,
+  maxNodes: 20_000,
+  maxJoins: 8,
+  maxSubqueries: 16,
+} as const;
+
+class Cursor {
+  private index = 0;
+  private depth = 0;
+  private nodeCount = 0;
+  private joinCount = 0;
+  private subqueryCount = 0;
+  private readonly tokens: readonly Token[];
+
+  constructor(tokens: readonly Token[]) {
+    this.tokens = tokens;
+  }
+
+  // ── token access ──────────────────────────────────────────────────────────
+
+  private peek(ahead = 0): Token {
+    return this.tokens[Math.min(this.index + ahead, this.tokens.length - 1)]!;
+  }
+
+  private prev(): Token {
+    return this.tokens[Math.max(this.index - 1, 0)]!;
+  }
+
+  private next(): Token {
+    const token = this.peek();
+    if (token.kind !== "eof") this.index += 1;
+    return token;
+  }
+
+  private isOp(text: string): boolean {
+    const t = this.peek();
+    return t.kind === "op" && t.text === text;
+  }
+
+  private isKw(text: string): boolean {
+    const t = this.peek();
+    return t.kind === "kw" && t.text === text;
+  }
+
+  private eatOp(text: string): boolean {
+    if (this.isOp(text)) {
+      this.index += 1;
+      return true;
+    }
+    return false;
+  }
+
+  private eatKw(text: string): boolean {
+    if (this.isKw(text)) {
+      this.index += 1;
+      return true;
+    }
+    return false;
+  }
+
+  private fail(token: Token, message: string, hint = ""): never {
+    throw new VoidQlSyntaxError({
+      message: `line ${token.start.line}, col ${token.start.col}: ${message}`,
+      hint,
+    });
+  }
+
+  private expectOp(text: string): void {
+    if (!this.eatOp(text)) this.fail(this.peek(), `Expected '${text}'.`);
+  }
+
+  private expectKw(text: string): void {
+    if (!this.eatKw(text)) this.fail(this.peek(), `Expected '${text.toUpperCase()}'.`);
+  }
+
+  private expectIdent(what: string): string {
+    const t = this.peek();
+    if (t.kind !== "ident") this.fail(t, `Expected ${what}.`);
+    this.index += 1;
+    return t.text;
+  }
+
+  private span(start: Pos): Span {
+    return { start, end: this.prev().end };
+  }
+
+  /**
+   * Increment the node counter and fail closed past the cap. Every node literal
+   * is stamped through here, so the bound is enforced at construction.
+   */
+  private count(): void {
+    this.nodeCount += 1;
+    if (this.nodeCount > LIMITS.maxNodes) {
+      throw new VoidQlComplexityError({ message: "Query has too many elements." });
+    }
+  }
+
+  private enter(): void {
+    this.depth += 1;
+    if (this.depth > LIMITS.maxDepth) {
+      throw new VoidQlComplexityError({ message: "Query is nested too deeply." });
+    }
+  }
+
+  private leave(): void {
+    this.depth -= 1;
+  }
+
+  /**
+   * Reject deferred/denied keywords with a teachable message before they can be
+   * mis-parsed as the start of an expression.
+   */
+  private guardForbidden(): void {
+    const t = this.peek();
+    if (t.kind === "kw" && isForbiddenKeyword(t.text)) {
+      const hint =
+        t.text === "settings" || t.text === "set"
+          ? "VoidQL does not support a SETTINGS clause; tenant scope is applied automatically and cannot be set in a query."
+          : `VoidQL is a read-only subset; '${t.text.toUpperCase()}' is not part of the dialect.`;
+      throw new VoidQlUnsupportedError({
+        message: `line ${t.start.line}, col ${t.start.col}: Unsupported keyword '${t.text.toUpperCase()}'.`,
+        hint,
+      });
+    }
+  }
+
+  // ── statement ──────────────────────────────────────────────────────────────
+
+  parseStatement(): Statement {
+    const select = this.parseSelect();
+    const tail = this.peek();
+    if (tail.kind !== "eof") {
+      // A trailing token after a complete SELECT is almost always a denied clause
+      // (e.g. `… SETTINGS x=1`, `… UNION …`, `… FORMAT JSON`).
+      this.guardForbidden();
+      this.fail(tail, `Unexpected '${tail.text || tail.kind}' after end of query.`);
+    }
+    return select;
+  }
+
+  private parseSelect(): Select {
+    this.enter();
+    const start = this.peek().start;
+
+    const ctes: Cte[] = [];
+    if (this.eatKw("with")) {
+      do {
+        const cteStart = this.peek().start;
+        const name = this.expectIdent("a CTE name");
+        this.expectKw("as");
+        this.expectOp("(");
+        const query = this.parseSelect();
+        this.expectOp(")");
+        this.count();
+        ctes.push({ _tag: "Cte", name, query, span: this.span(cteStart) });
+      } while (this.eatOp(","));
+    }
+
+    this.guardForbidden(); // a leading denied keyword (DROP/INSERT/…) → teachable error
+    this.expectKw("select");
+    this.guardForbidden(); // catches `SELECT DISTINCT …`
+
+    const columns: SelectItem[] = [this.parseSelectItem()];
+    while (this.eatOp(",")) columns.push(this.parseSelectItem());
+
+    this.expectKw("from");
+    const from = this.parseTableSource();
+
+    const joins: Join[] = [];
+    for (;;) {
+      const join = this.tryParseJoin();
+      if (!join) break;
+      if (joins.length >= LIMITS.maxJoins) {
+        throw new VoidQlComplexityError({ message: "Query has too many joins." });
+      }
+      joins.push(join);
+    }
+
+    const where = this.eatKw("where") ? this.parseExpr(0) : undefined;
+
+    const groupBy: Expr[] = [];
+    if (this.eatKw("group")) {
+      this.expectKw("by");
+      groupBy.push(this.parseExpr(0));
+      while (this.eatOp(",")) groupBy.push(this.parseExpr(0));
+    }
+
+    const having = this.eatKw("having") ? this.parseExpr(0) : undefined;
+
+    const orderBy: OrderItem[] = [];
+    if (this.eatKw("order")) {
+      this.expectKw("by");
+      orderBy.push(this.parseOrderItem());
+      while (this.eatOp(",")) orderBy.push(this.parseOrderItem());
+    }
+
+    let limit: number | undefined;
+    let offset: number | undefined;
+    if (this.eatKw("limit")) {
+      limit = this.parseUintLiteral("a LIMIT count");
+      if (this.eatKw("offset")) offset = this.parseUintLiteral("an OFFSET count");
+    }
+
+    this.count();
+    this.leave();
+    return {
+      _tag: "Select",
+      with: ctes,
+      columns: columns as [SelectItem, ...SelectItem[]],
+      from,
+      joins,
+      where,
+      groupBy,
+      having,
+      orderBy,
+      limit,
+      offset,
+      span: this.span(start),
+    };
+  }
+
+  private parseUintLiteral(what: string): number {
+    const t = this.peek();
+    if (t.kind !== "number" || t.numType !== "Int64" || (t.value as number) < 0) {
+      this.fail(t, `Expected ${what} (a non-negative integer).`);
+    }
+    this.index += 1;
+    return t.value as number;
+  }
+
+  private parseSelectItem(): SelectItem {
+    const start = this.peek().start;
+    const expr = this.parseExpr(0);
+    let alias: string | undefined;
+    if (this.eatKw("as")) {
+      alias = this.expectIdent("a column alias");
+    } else if (this.peek().kind === "ident") {
+      alias = this.next().text;
+    }
+    this.count();
+    return { _tag: "SelectItem", expr, alias, span: this.span(start) };
+  }
+
+  private parseOrderItem(): OrderItem {
+    const start = this.peek().start;
+    const expr = this.parseExpr(0);
+    let dir: "asc" | "desc" = "asc";
+    if (this.eatKw("asc")) dir = "asc";
+    else if (this.eatKw("desc")) dir = "desc";
+    this.count();
+    return { _tag: "OrderItem", expr, dir, span: this.span(start) };
+  }
+
+  private tryParseJoin(): Join | undefined {
+    let kind: "inner" | "left";
+    if (this.isKw("inner")) {
+      this.next();
+      kind = "inner";
+      this.expectKw("join");
+    } else if (this.isKw("left")) {
+      this.next();
+      kind = "left";
+      this.expectKw("join");
+    } else if (this.isKw("join")) {
+      this.next();
+      kind = "inner";
+    } else {
+      return undefined;
+    }
+    const start = this.prev().start;
+    const source = this.parseTableSource();
+    this.expectKw("on");
+    const on = this.parseExpr(0);
+    this.count();
+    return { _tag: "Join", kind, source, on, span: this.span(start) };
+  }
+
+  private parseTableSource(): TableSource {
+    const start = this.peek().start;
+    if (this.eatOp("(")) {
+      if (++this.subqueryCount > LIMITS.maxSubqueries) {
+        throw new VoidQlComplexityError({ message: "Query has too many subqueries." });
+      }
+      if (!this.isKw("select") && !this.isKw("with")) {
+        this.fail(this.peek(), "Expected a subquery (SELECT …) after '('.");
+      }
+      const query = this.parseSelect();
+      this.expectOp(")");
+      this.eatKw("as");
+      const alias = this.expectIdent("an alias for the subquery (subqueries must be aliased)");
+      this.count();
+      return { _tag: "SubquerySource", query, alias, span: this.span(start) };
+    }
+    this.guardForbidden(); // a forbidden keyword in FROM position (e.g. a table fn name shaped like a kw)
+    const name = this.expectIdent("a table name");
+    let alias: string | undefined;
+    if (this.eatKw("as")) alias = this.expectIdent("a table alias");
+    else if (this.peek().kind === "ident") alias = this.next().text;
+    this.count();
+    return { _tag: "NamedTable", name, alias, span: this.span(start) };
+  }
+
+  // ── expressions (Pratt) ──────────────────────────────────────────────────
+
+  parseExpr(minPrec: number): Expr {
+    this.enter();
+    let left = this.parsePrefix();
+    for (;;) {
+      const next = this.parseInfix(left, minPrec);
+      if (next === undefined) break;
+      left = next;
+    }
+    this.leave();
+    return left;
+  }
+
+  private mkBinary(op: BinaryOp, left: Expr, right: Expr, start: Pos): Binary {
+    this.count();
+    return { _tag: "Binary", op, left, right, span: this.span(start) };
+  }
+
+  /** One infix step; returns `undefined` to stop the precedence loop. */
+  private parseInfix(left: Expr, minPrec: number): Expr | undefined {
+    const t = this.peek();
+    const start = left.span.start;
+
+    // keyword infix operators sit at comparison precedence (3)
+    if (3 > minPrec && t.kind === "kw") {
+      if (t.text === "in") {
+        this.next();
+        return this.parseInTail(left, false, start);
+      }
+      if (t.text === "between") {
+        this.next();
+        return this.parseBetweenTail(left, false, start);
+      }
+      if (t.text === "like") {
+        this.next();
+        return this.mkBinary("like", left, this.parseExpr(3), start);
+      }
+      if (t.text === "is") {
+        this.next();
+        const negated = this.eatKw("not");
+        this.expectKw("null");
+        this.count();
+        return { _tag: "IsNull", expr: left, negated, span: this.span(start) };
+      }
+      if (t.text === "not" && this.peek(1).kind === "kw") {
+        const follow = this.peek(1).text;
+        if (follow === "in") {
+          this.next();
+          this.next();
+          return this.parseInTail(left, true, start);
+        }
+        if (follow === "between") {
+          this.next();
+          this.next();
+          return this.parseBetweenTail(left, true, start);
+        }
+        if (follow === "like") {
+          this.next();
+          this.next();
+          return this.mkBinary("notLike", left, this.parseExpr(3), start);
+        }
+      }
+    }
+
+    if (t.kind === "kw" && t.text === "or" && 1 > minPrec) {
+      this.next();
+      return this.mkBinary("or", left, this.parseExpr(1), start);
+    }
+    if (t.kind === "kw" && t.text === "and" && 2 > minPrec) {
+      this.next();
+      return this.mkBinary("and", left, this.parseExpr(2), start);
+    }
+
+    if (t.kind === "op") {
+      const cmp: Record<string, BinaryOp> = {
+        "=": "eq",
+        "!=": "neq",
+        "<": "lt",
+        "<=": "lte",
+        ">": "gt",
+        ">=": "gte",
+      };
+      if (cmp[t.text] && 3 > minPrec) {
+        this.next();
+        return this.mkBinary(cmp[t.text]!, left, this.parseExpr(3), start);
+      }
+      if ((t.text === "+" || t.text === "-") && 4 > minPrec) {
+        this.next();
+        return this.mkBinary(t.text === "+" ? "add" : "sub", left, this.parseExpr(4), start);
+      }
+      if ((t.text === "*" || t.text === "/" || t.text === "%") && 5 > minPrec) {
+        this.next();
+        const op: BinaryOp = t.text === "*" ? "mul" : t.text === "/" ? "div" : "mod";
+        return this.mkBinary(op, left, this.parseExpr(5), start);
+      }
+    }
+
+    return undefined;
+  }
+
+  private parseInTail(left: Expr, negated: boolean, start: Pos): Expr {
+    this.expectOp("(");
+    if (this.isKw("select") || this.isKw("with")) {
+      this.fail(
+        this.peek(),
+        "Subqueries in IN are not supported in VoidQL v1; use a JOIN instead.",
+      );
+    }
+    const list: Expr[] = [this.parseExpr(0)];
+    while (this.eatOp(",")) list.push(this.parseExpr(0));
+    this.expectOp(")");
+    this.count();
+    return { _tag: "InExpr", expr: left, list, negated, span: this.span(start) };
+  }
+
+  private parseBetweenTail(left: Expr, negated: boolean, start: Pos): Expr {
+    const low = this.parseExpr(3);
+    this.expectKw("and");
+    const high = this.parseExpr(3);
+    this.count();
+    return { _tag: "Between", expr: left, low, high, negated, span: this.span(start) };
+  }
+
+  private parsePrefix(): Expr {
+    this.guardForbidden();
+    const t = this.peek();
+    const start = t.start;
+
+    if (t.kind === "kw") {
+      switch (t.text) {
+        case "not":
+          this.next();
+          this.count();
+          return { _tag: "Unary", op: "not", expr: this.parseExpr(2), span: this.span(start) };
+        case "true":
+        case "false":
+          this.next();
+          this.count();
+          return { _tag: "BoolLit", value: t.text === "true", span: this.span(start) };
+        case "null":
+          this.next();
+          this.count();
+          return { _tag: "NullLit", span: this.span(start) };
+        case "case":
+          return this.parseCase();
+        default:
+          this.fail(t, `Unexpected keyword '${t.text.toUpperCase()}'.`);
+      }
+    }
+
+    if (t.kind === "op") {
+      if (t.text === "-") {
+        this.next();
+        this.count();
+        // Depth-guard the prefix recursion: unlike `not` (which recurses through
+        // `parseExpr`), `neg` recurses `parsePrefix` directly, so without enter()/
+        // leave() a long `- - … - x` chain is bounded only by maxNodes (20k) and
+        // blows the JS stack with a raw RangeError before that cap fires.
+        this.enter();
+        const operand = this.parsePrefix();
+        this.leave();
+        return { _tag: "Unary", op: "neg", expr: operand, span: this.span(start) };
+      }
+      if (t.text === "(") {
+        this.next();
+        if (this.isKw("select") || this.isKw("with")) {
+          this.fail(t, "Scalar subqueries are not supported in VoidQL v1.");
+        }
+        const expr = this.parseExpr(0);
+        this.expectOp(")");
+        this.count();
+        return { _tag: "Paren", expr, span: this.span(start) };
+      }
+      if (t.text === "*") {
+        this.next();
+        this.count();
+        return { _tag: "StarRef", span: this.span(start) };
+      }
+      this.fail(t, `Unexpected '${t.text}'.`);
+    }
+
+    if (t.kind === "string") {
+      this.next();
+      this.count();
+      return { _tag: "StringLit", value: t.value as string, span: this.span(start) };
+    }
+
+    if (t.kind === "number") {
+      this.next();
+      this.count();
+      return {
+        _tag: "NumberLit",
+        value: t.value as number,
+        numType: t.numType ?? "Int64",
+        span: this.span(start),
+      };
+    }
+
+    if (t.kind === "ident") {
+      // function call vs column reference
+      if (this.peek(1).kind === "op" && this.peek(1).text === "(") {
+        return this.parseFnCall();
+      }
+      return this.parseColumnRef();
+    }
+
+    this.fail(t, "Expected an expression.");
+  }
+
+  private parseFnCall(): Expr {
+    const start = this.peek().start;
+    const name = this.next().text;
+    this.expectOp("(");
+    const args: Expr[] = [];
+    if (!this.isOp(")")) {
+      args.push(this.parseExpr(0));
+      while (this.eatOp(",")) args.push(this.parseExpr(0));
+    }
+    this.expectOp(")");
+    this.count();
+    return { _tag: "FnCall", name, args, span: this.span(start) };
+  }
+
+  private parseColumnRef(): Expr {
+    const start = this.peek().start;
+    const chain: string[] = [this.next().text];
+    while (this.isOp(".")) {
+      this.next();
+      if (this.eatOp("*")) {
+        this.count();
+        return { _tag: "StarRef", qualifier: chain.join("."), span: this.span(start) };
+      }
+      const seg = this.peek();
+      if (seg.kind !== "ident") this.fail(seg, "Expected a column or property name after '.'.");
+      this.index += 1;
+      chain.push(seg.text);
+    }
+    this.count();
+    return { _tag: "ColumnRef", chain: chain as [string, ...string[]], span: this.span(start) };
+  }
+
+  private parseCase(): Expr {
+    const start = this.peek().start;
+    this.expectKw("case");
+    const operand = this.isKw("when") ? undefined : this.parseExpr(0);
+    const whens: CaseWhen[] = [];
+    while (this.eatKw("when")) {
+      const when = this.parseExpr(0);
+      this.expectKw("then");
+      const then = this.parseExpr(0);
+      whens.push({ when, then });
+    }
+    if (whens.length === 0) this.fail(this.peek(), "CASE requires at least one WHEN branch.");
+    const elseExpr = this.eatKw("else") ? this.parseExpr(0) : undefined;
+    this.expectKw("end");
+    this.count();
+    return {
+      _tag: "CaseExpr",
+      operand,
+      whens: whens as [CaseWhen, ...CaseWhen[]],
+      else: elseExpr,
+      span: this.span(start),
+    };
+  }
+}
+
+/**
+ * Parse VoidQL query text into a {@link Statement}. Throws
+ * {@link VoidQlSyntaxError}, {@link VoidQlUnsupportedError}, or
+ * {@link VoidQlComplexityError} as typed values (never a string).
+ */
+export const parse = (text: string): Statement => new Cursor(lex(text)).parseStatement();
diff --git a/packages/core/src/services/voidql/scope.ts b/packages/core/src/services/voidql/scope.ts
new file mode 100644
index 000000000..c5cfd15a8
--- /dev/null
+++ b/packages/core/src/services/voidql/scope.ts
@@ -0,0 +1,31 @@
+/**
+ * {@link AuthorizedScope} — the single, server-derived source for the injected
+ * `organization_id = {pOrg}` / `project_id IN {pPids}` bound literals (§10, §18
+ * gap #12). It is *nominally branded* so it can only be minted by {@link makeAuthorizedScope},
+ * which the service calls **after** `checkOrganizationPermission` succeeds — there
+ * is no second tenant-setting mechanism to keep in sync, so the substitution is
+ * derived from one value the user cannot influence.
+ */
+declare const AuthorizedScopeBrand: unique symbol;
+
+export interface AuthorizedScope {
+  readonly [AuthorizedScopeBrand]: true;
+  /** The single authorized organization id. */
+  readonly organizationId: string;
+  /** Exactly the projects the caller may read — the `project_id IN (…)` allow-set. */
+  readonly availableProjectIds: readonly string[];
+}
+
+/**
+ * Construct an {@link AuthorizedScope}. MUST only be called after an affirmative
+ * `checkOrganizationPermission` against the *authorized* org (never the request
+ * body) — enforced by convention in `VoidQlService.buildScope`.
+ */
+export const makeAuthorizedScope = (input: {
+  readonly organizationId: string;
+  readonly availableProjectIds: readonly string[];
+}): AuthorizedScope =>
+  ({
+    organizationId: input.organizationId,
+    availableProjectIds: input.availableProjectIds,
+  }) as AuthorizedScope;
diff --git a/packages/core/src/services/voidql/verify.ts b/packages/core/src/services/voidql/verify.ts
new file mode 100644
index 000000000..a5765ee58
--- /dev/null
+++ b/packages/core/src/services/voidql/verify.ts
@@ -0,0 +1,111 @@
+/**
+ * The value-level isolation verifier (§10) — the **sole in-process fail-closed
+ * net** now that the out-of-process row policy is gone (§20). It walks the
+ * compiled {@link SqlPiece} IR, rendering `(sql, binds)` jointly, and hard-fails
+ * the request (a {@link VoidQlIsolationError} defect that never reaches ClickHouse)
+ * unless every invariant holds.
+ *
+ * Crucially it does NOT trust the printer's self-reported scopes alone: it
+ * **triangulates** the printer-reported base-ref count against the physical-table
+ * tokens it independently finds in the emitted SQL *and* the tenant-predicate
+ * occurrences in that SQL. A printer bug that emits a base table without injecting
+ * a scope therefore fails closed here rather than leaking.
+ *
+ * Because this is the only net, its per-occurrence enumeration must grow in
+ * lock-step with every newly enabled construct (UNION arms, lambdas, windows) —
+ * a blind spot is a direct leak, not a caught one (§11 G1, §20).
+ */
+import type { InjectedScope } from "./catalog/types.ts";
+import { VoidQlIsolationError } from "./errors.ts";
+import { renderDebugSql, type SqlPiece } from "./ir.ts";
+import type { AuthorizedScope } from "./scope.ts";
+
+/** Physical tables VoidQL is permitted to reference — all only inside a `lower()`. */
+const ALLOWED_PHYSICAL_TABLES = new Set([
+  "events_v2",
+  "persons_v1",
+  "person_identity_pending_overrides_v2",
+]);
+
+/** Tokens that must never appear in compiled VoidQL — the catalog/registry already
+ * exclude them; this scan is the independent backstop (T3/T4/T5/T8). */
+const FORBIDDEN_TOKEN_RE =
+  /\b(remote|remoteSecure|url|s3|s3Cluster|file|mysql|postgresql|jdbc|odbc|hdfs|azureBlobStorage|mongodb|cluster|clusterAllReplicas|numbers|generateRandom|dictGet\w*|dictHas|getSetting|currentUser|hostName|serverUUID|getMacro|addressToLine|demangle|evalMLMethod|sleep|sleepEachRow|throwIf)\s*\(/i;
+
+const VERSIONED_TABLE_RE = /\b\w+_v\d+\b/g;
+
+const countOccurrences = (haystack: string, needle: string): number =>
+  haystack.split(needle).length - 1;
+
+const arrayEqual = (a: readonly string[], b: readonly string[]): boolean =>
+  a.length === b.length && a.every((v, i) => v === b[i]);
+
+const fail = (message: string): never => {
+  throw new VoidQlIsolationError({ message: `isolation verifier: ${message}` });
+};
+
+/**
+ * Verify the compiled IR against the authorized scope. Throws
+ * {@link VoidQlIsolationError} (a compiler defect) on any violation.
+ */
+export const verify = (
+  pieces: readonly SqlPiece[],
+  injected: readonly InjectedScope[],
+  scope: AuthorizedScope,
+): void => {
+  const { sql } = renderDebugSql(pieces);
+
+  // ── I1: every injected scope binds to the authorized org and exactly its projects.
+  for (const scoped of injected) {
+    if (scoped.orgValue !== scope.organizationId) {
+      fail(`base-ref '${scoped.alias}' bound to a non-authorized organization`);
+    }
+    if (!arrayEqual(scoped.projectValues, scope.availableProjectIds)) {
+      fail(`base-ref '${scoped.alias}' bound to the wrong project set`);
+    }
+  }
+
+  // ── Triangulation: printer-reported base-refs vs physical tables vs predicates.
+  // An `events`/`revenue` lowering scopes TWO physical reads — the dedup scan of
+  // `events_v2` AND the identity-join scan of `person_identity_pending_overrides_v2`
+  // (the latter has no row policy under the analytics_query user, so it is scoped
+  // inline, §9/§20). A `persons` lowering scopes ONE (`persons_v1`). So each
+  // event-backed scope contributes 2 tenant predicates and 1 of each physical
+  // table; each person-backed scope contributes 1 predicate and 1 `persons_v1`.
+  const eventBacked = injected.filter(
+    (s) => s.relation === "events" || s.relation === "revenue",
+  ).length;
+  const personBacked = injected.filter((s) => s.relation === "persons").length;
+  const expectedPredicates = eventBacked * 2 + personBacked;
+
+  if (countOccurrences(sql, "events_v2") !== eventBacked) {
+    fail("events_v2 occurrence count does not match injected event scopes");
+  }
+  if (countOccurrences(sql, "person_identity_pending_overrides_v2") !== eventBacked) {
+    fail("pending-overrides occurrence count does not match injected event scopes");
+  }
+  if (countOccurrences(sql, "persons_v1") !== personBacked) {
+    fail("persons_v1 occurrence count does not match injected person scopes");
+  }
+  if (countOccurrences(sql, "organization_id = {p") !== expectedPredicates) {
+    fail("organization_id predicate count does not match scoped physical-read count");
+  }
+  if (countOccurrences(sql, "project_id IN {p") !== expectedPredicates) {
+    fail("project_id predicate count does not match scoped physical-read count");
+  }
+
+  // ── I2: only the allow-listed physical tables appear; no table fns / introspection.
+  for (const match of sql.matchAll(VERSIONED_TABLE_RE)) {
+    if (!ALLOWED_PHYSICAL_TABLES.has(match[0])) {
+      fail(`unexpected physical table token '${match[0]}'`);
+    }
+  }
+  if (/\bsystem\./i.test(sql)) fail("reference to a system table");
+  const forbidden = FORBIDDEN_TOKEN_RE.exec(sql);
+  if (forbidden) fail(`forbidden function/table-function '${forbidden[1]}'`);
+
+  // ── I3: no SETTINGS/SET/FORMAT in the emitted statement.
+  if (/\bSETTINGS\b/i.test(sql) || /\bFORMAT\b/i.test(sql)) {
+    fail("emitted statement contains a SETTINGS/FORMAT clause");
+  }
+};
diff --git a/packages/core/src/services/webhookDispatch/WebhookDeliveryService.ts b/packages/core/src/services/webhookDispatch/WebhookDeliveryService.ts
new file mode 100644
index 000000000..39230e42b
--- /dev/null
+++ b/packages/core/src/services/webhookDispatch/WebhookDeliveryService.ts
@@ -0,0 +1,215 @@
+import { Context, Effect, Layer } from "effect";
+
+import {
+  Db,
+  WebhookDeliveryStatus,
+  eq,
+  webhookDeliveries,
+  webhookDeliveryAttempts,
+  webhookEndpoints,
+} from "@voidhash/db";
+import { generateId } from "../../utils/generate-id.ts";
+import type { DeliverWebhookInput } from "./WebhookDeliveryWorkflow.ts";
+
+export type { DeliverWebhookInput } from "./WebhookDeliveryWorkflow.ts";
+
+/** Outcome of a single HTTP delivery attempt. Never throws — failures are
+ * captured as a non-succeeded result so the workflow can decide to retry. */
+export interface SendWebhookResult {
+  readonly durationMs: number;
+  readonly errorMessage: string | null;
+  readonly responseBody: string | null;
+  readonly statusCode: number | null;
+  readonly succeeded: boolean;
+}
+
+// Retry backoff in seconds: 1min, 5min, 30min, 2hr, 24hr.
+const RETRY_DELAYS_SECONDS = [60, 300, 1800, 7200, 86400] as const;
+const SIGNATURE_VERSION = "v1";
+
+/**
+ * Retry time for `attemptNumber`, or `null` once the backoff schedule is
+ * exhausted.
+ */
+export const nextWebhookDeliveryRetryTime = (attemptNumber: number): Date | null => {
+  const delaySeconds = RETRY_DELAYS_SECONDS[attemptNumber - 1];
+  return delaySeconds === undefined ? null : new Date(Date.now() + delaySeconds * 1000);
+};
+
+const bytesToHex = (bytes: Uint8Array) =>
+  Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+
+/** HMAC-SHA256 signature of `${timestamp}.${payload}`, prefixed with the
+ * scheme version so receivers can roll the algorithm forward. */
+const generateSignature = (payload: string, timestamp: string, secret: string) =>
+  Effect.promise(async () => {
+    const key = await crypto.subtle.importKey(
+      "raw",
+      new TextEncoder().encode(secret),
+      { hash: "SHA-256", name: "HMAC" },
+      false,
+      ["sign"],
+    );
+    const signature = await crypto.subtle.sign(
+      "HMAC",
+      key,
+      new TextEncoder().encode(`${timestamp}.${payload}`),
+    );
+    return `${SIGNATURE_VERSION}=${bytesToHex(new Uint8Array(signature))}`;
+  });
+
+/**
+ * All business logic for delivering a single webhook: signing and sending the
+ * HTTP request, recording each attempt, and transitioning delivery/endpoint
+ * status on success, retry, or exhaustion.
+ *
+ * The service owns *what* happens at each step. The durable orchestration —
+ * task naming, sleeping until the next retry, the attempt loop — lives in the
+ * thin `DeliverWebhookWorkflow`, so the workflow can be swapped for another
+ * durable-execution backend without touching this logic.
+ */
+export class WebhookDeliveryService extends Context.Service<WebhookDeliveryService>()(
+  "WebhookDeliveryService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+
+      /** Sign and POST the payload, capturing the outcome. Never fails. */
+      const send = (input: DeliverWebhookInput): Effect.Effect<SendWebhookResult> =>
+        Effect.gen(function* () {
+          const timestamp = Math.floor(Date.now() / 1000).toString();
+          const payloadString = JSON.stringify(input.payload);
+          const signature = yield* generateSignature(payloadString, timestamp, input.secret);
+          const startTime = Date.now();
+
+          return yield* Effect.promise(async () => {
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), 30_000);
+
+            try {
+              const response = await fetch(input.url, {
+                body: payloadString,
+                headers: {
+                  "Content-Type": "application/json",
+                  "X-Webhook-Event": input.eventType,
+                  "X-Webhook-Signature": signature,
+                  "X-Webhook-Timestamp": timestamp,
+                },
+                method: "POST",
+                signal: controller.signal,
+              });
+              const responseBody = await response.text().catch(() => undefined);
+
+              return {
+                durationMs: Date.now() - startTime,
+                errorMessage: null,
+                responseBody: responseBody?.slice(0, 2048) ?? null,
+                statusCode: response.status,
+                succeeded: response.status >= 200 && response.status < 300,
+              };
+            } catch (error) {
+              return {
+                durationMs: Date.now() - startTime,
+                errorMessage: error instanceof Error ? error.message.slice(0, 500) : String(error),
+                responseBody: null,
+                statusCode: null,
+                succeeded: false,
+              };
+            } finally {
+              clearTimeout(timeoutId);
+            }
+          });
+        });
+
+      /** Persist the result of a single attempt against the delivery. */
+      const recordAttempt = (input: DeliverWebhookInput, result: SendWebhookResult) =>
+        Effect.gen(function* () {
+          yield* db.insert(webhookDeliveryAttempts).values({
+            attemptNumber: input.attemptNumber,
+            createdAt: new Date(),
+            durationMs: result.durationMs,
+            errorMessage: result.errorMessage,
+            id: generateId("webhookDeliveryAttempt"),
+            responseBody: result.responseBody,
+            statusCode: result.statusCode,
+            succeeded: result.succeeded,
+            webhookDeliveryId: input.deliveryId,
+          });
+        });
+
+      /** Mark the delivery succeeded and reset the endpoint's failure counter. */
+      const markSucceeded = (input: DeliverWebhookInput) =>
+        Effect.gen(function* () {
+          yield* db
+            .update(webhookDeliveries)
+            .set({
+              attemptCount: input.attemptNumber,
+              completedAt: new Date(),
+              nextAttemptAt: null,
+              status: WebhookDeliveryStatus.Succeeded,
+            })
+            .where(eq(webhookDeliveries.id, input.deliveryId));
+
+          yield* db
+            .update(webhookEndpoints)
+            .set({
+              consecutiveFailures: 0,
+              lastSuccessAt: new Date(),
+            })
+            .where(eq(webhookEndpoints.id, input.endpointId));
+        });
+
+      /** Record a failed attempt and schedule the next retry at `nextRetryTime`. */
+      const markFailed = (input: DeliverWebhookInput, nextRetryTime: Date) =>
+        Effect.gen(function* () {
+          yield* db
+            .update(webhookDeliveries)
+            .set({
+              attemptCount: input.attemptNumber,
+              nextAttemptAt: nextRetryTime,
+              status: WebhookDeliveryStatus.Failed,
+            })
+            .where(eq(webhookDeliveries.id, input.deliveryId));
+
+          yield* db
+            .update(webhookEndpoints)
+            .set({ consecutiveFailures: input.attemptNumber })
+            .where(eq(webhookEndpoints.id, input.endpointId));
+        });
+
+      /** Mark the delivery exhausted once the retry schedule is depleted. */
+      const markExhausted = (input: DeliverWebhookInput) =>
+        Effect.gen(function* () {
+          yield* db
+            .update(webhookDeliveries)
+            .set({
+              attemptCount: input.attemptNumber,
+              completedAt: new Date(),
+              nextAttemptAt: null,
+              status: WebhookDeliveryStatus.Exhausted,
+            })
+            .where(eq(webhookDeliveries.id, input.deliveryId));
+
+          yield* db
+            .update(webhookEndpoints)
+            .set({ consecutiveFailures: input.attemptNumber })
+            .where(eq(webhookEndpoints.id, input.endpointId));
+        });
+
+      /**
+       * Retry time for `attemptNumber`, or `null` once the backoff schedule is
+       * exhausted (signalling the delivery should be marked exhausted).
+       */
+      return {
+        markExhausted,
+        markFailed,
+        markSucceeded,
+        nextRetryTime: nextWebhookDeliveryRetryTime,
+        recordAttempt,
+        send,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(WebhookDeliveryService)(WebhookDeliveryService.make);
+}
diff --git a/packages/core/src/services/webhookDispatch/WebhookDeliveryWorkflow.ts b/packages/core/src/services/webhookDispatch/WebhookDeliveryWorkflow.ts
new file mode 100644
index 000000000..dd88b0f49
--- /dev/null
+++ b/packages/core/src/services/webhookDispatch/WebhookDeliveryWorkflow.ts
@@ -0,0 +1,26 @@
+import { Context, type Effect } from "effect";
+
+/** Durable delivery request for a single webhook attempt. */
+export interface DeliverWebhookInput {
+  readonly deliveryId: string;
+  readonly endpointId: string;
+  readonly attemptNumber: number;
+  readonly eventType: string;
+  readonly payload: unknown;
+  readonly secret: string;
+  readonly url: string;
+}
+
+/**
+ * Abstract webhook-delivery workflow. `dispatch` hands a delivery off to the
+ * durable retry mechanism fire-and-forget; the concrete adapter (a Cloudflare
+ * Workflow) is wired at the application root, so `packages/core` carries no
+ * infrastructure dependency. Consumers fork the returned effect — failures are
+ * the delivery mechanism's concern, never the caller's.
+ */
+export class WebhookDeliveryWorkflow extends Context.Service<
+  WebhookDeliveryWorkflow,
+  {
+    readonly dispatch: (input: DeliverWebhookInput) => Effect.Effect<void>;
+  }
+>()("WebhookDeliveryWorkflow") {}
diff --git a/packages/core/src/services/webhookDispatch/WebhookDispatchService.ts b/packages/core/src/services/webhookDispatch/WebhookDispatchService.ts
new file mode 100644
index 000000000..df1b529e9
--- /dev/null
+++ b/packages/core/src/services/webhookDispatch/WebhookDispatchService.ts
@@ -0,0 +1,127 @@
+import { Context, Effect, Layer } from "effect";
+
+import {
+  Db,
+  WebhookDeliveryStatus,
+  WebhookEndpointStatus,
+  webhookDeliveries,
+} from "@voidhash/db";
+import { WebhookDeliveryWorkflow } from "./WebhookDeliveryWorkflow.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { WebhookServiceError } from "../webhookManager/WebhookManagerService.ts";
+import type { WebhookEventType } from "../webhookManager/event-types.ts";
+
+/**
+ * Producer side of outbound webhooks. Creates delivery rows for all active
+ * subscribed endpoints, then starts `DeliverWebhookWorkflow` for delivery and
+ * retry handling.
+ */
+export class WebhookDispatchService extends Context.Service<WebhookDispatchService>()(
+  "WebhookDispatchService",
+  {
+    make: Effect.gen(function* () {
+      const webhookDelivery = yield* WebhookDeliveryWorkflow;
+      const db = yield* Db;
+
+      const emit = Effect.fn("webhookDispatch.emit")(
+        function* (input: {
+          readonly projectId: string;
+          readonly eventType: WebhookEventType;
+          readonly payload: object;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.event_type", input.eventType);
+
+          // Reject a non-serializable `payload` up front. It is written to the
+          // jsonb `payload` column, where drizzle's codec `JSON.stringify`s it
+          // while building the insert SQL — a circular/unserializable payload
+          // makes that throw a synchronous `TypeError` that Effect surfaces as a
+          // defect, not the `EffectDrizzleQueryError` the catch below maps. Guard
+          // here so it fails as a typed `WebhookServiceError` before any delivery
+          // row is written, instead of escaping as an unhandled defect.
+          yield* Effect.try({
+            try: () => JSON.stringify(input.payload),
+            catch: (cause) =>
+              new WebhookServiceError({
+                cause: `Failed to emit webhook event: ${String(cause)}`,
+              }),
+          });
+
+          const endpoints = yield* db.query.webhookEndpoints.findMany({
+            where: {
+              projectId: input.projectId,
+              status: WebhookEndpointStatus.Active,
+            },
+          });
+
+          const subscribedEndpoints = endpoints.filter((endpoint) =>
+            endpoint.events.includes(input.eventType),
+          );
+
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.webhook.endpoint.count",
+            subscribedEndpoints.length,
+          );
+
+          if (subscribedEndpoints.length === 0) {
+            yield* Effect.logDebug(
+              `No webhook endpoints subscribed to ${input.eventType} for project ${input.projectId}`,
+            );
+            return { deliveriesCreated: 0 };
+          }
+
+          const eventOccurredAt = new Date();
+
+          for (const endpoint of subscribedEndpoints) {
+            const deliveryId = generateId("webhookDelivery");
+
+            yield* db.insert(webhookDeliveries).values({
+              attemptCount: 0,
+              createdAt: new Date(),
+              eventOccurredAt,
+              eventType: input.eventType,
+              id: deliveryId,
+              payload: input.payload,
+              projectId: input.projectId,
+              status: WebhookDeliveryStatus.Pending,
+              webhookEndpointId: endpoint.id,
+            });
+
+            yield* webhookDelivery
+              .dispatch({
+                attemptNumber: 1,
+                deliveryId,
+                endpointId: endpoint.id,
+                eventType: input.eventType,
+                payload: input.payload,
+                secret: endpoint.secret,
+                url: endpoint.url,
+              })
+              .pipe(Effect.forkDetach);
+          }
+
+          yield* Effect.logInfo(
+            `Emitted ${input.eventType} event to ${subscribedEndpoints.length} webhook endpoints`,
+          );
+
+          return { deliveriesCreated: subscribedEndpoints.length };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to emit webhook event: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      return { emit } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(WebhookDispatchService)(WebhookDispatchService.make);
+}
diff --git a/packages/core/src/services/webhookDispatch/index.ts b/packages/core/src/services/webhookDispatch/index.ts
new file mode 100644
index 000000000..6b2ccb1bc
--- /dev/null
+++ b/packages/core/src/services/webhookDispatch/index.ts
@@ -0,0 +1 @@
+export * from "./WebhookDispatchService.ts";
diff --git a/packages/core/src/services/webhookManager/WebhookManagerService.ts b/packages/core/src/services/webhookManager/WebhookManagerService.ts
new file mode 100644
index 000000000..ae34a8f8b
--- /dev/null
+++ b/packages/core/src/services/webhookManager/WebhookManagerService.ts
@@ -0,0 +1,763 @@
+import { Context, Effect, Layer, Schema } from "effect";
+
+import {
+  WebhookDeliveryNotFoundError,
+  WebhookEndpointNotFoundError,
+  WebhookValidationError,
+} from "../../domain/webhook/Webhook.ts";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  WebhookDeliveryStatus,
+  type WebhookDeliveryStatusValue,
+  WebhookEndpointStatus,
+  type WebhookEndpointStatusValue,
+  eq,
+  webhookDeliveries,
+  webhookDeliveryAttempts,
+  webhookEndpoints,
+} from "@voidhash/db";
+import { WebhookDeliveryWorkflow } from "../webhookDispatch/WebhookDeliveryWorkflow.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { AuditLogPort } from "../auditLog/AuditLogPort.ts";
+import { type WebhookEventType, isValidWebhookEvent } from "./event-types.ts";
+
+/**
+ * Catch-all service error. Wraps `DbError` and other infrastructural
+ * failures at the public-method boundary so callers see one stable error tag.
+ */
+export class WebhookServiceError extends Schema.TaggedErrorClass<WebhookServiceError>(
+  "WebhookServiceError",
+)("WebhookServiceError", { cause: Schema.String }) {}
+
+export type WebhookEndpointStatusString = "active" | "disabled" | "failed";
+export type WebhookDeliveryStatusString =
+  | "pending"
+  | "in_progress"
+  | "succeeded"
+  | "failed"
+  | "exhausted";
+
+const ENDPOINT_STATUS_TO_STRING: Record<WebhookEndpointStatusValue, WebhookEndpointStatusString> = {
+  [WebhookEndpointStatus.Active]: "active",
+  [WebhookEndpointStatus.Disabled]: "disabled",
+  [WebhookEndpointStatus.Failed]: "failed",
+};
+
+const DELIVERY_STATUS_TO_STRING: Record<WebhookDeliveryStatusValue, WebhookDeliveryStatusString> = {
+  [WebhookDeliveryStatus.Pending]: "pending",
+  [WebhookDeliveryStatus.InProgress]: "in_progress",
+  [WebhookDeliveryStatus.Succeeded]: "succeeded",
+  [WebhookDeliveryStatus.Failed]: "failed",
+  [WebhookDeliveryStatus.Exhausted]: "exhausted",
+};
+
+const mapEndpointStatus = (status: number): WebhookEndpointStatusString =>
+  ENDPOINT_STATUS_TO_STRING[status as WebhookEndpointStatusValue] ?? "disabled";
+
+const mapDeliveryStatus = (status: number): WebhookDeliveryStatusString =>
+  DELIVERY_STATUS_TO_STRING[status as WebhookDeliveryStatusValue] ?? "pending";
+
+interface WebhookEndpointRow {
+  readonly id: string;
+  readonly projectId: string;
+  readonly name: string;
+  readonly url: string;
+  readonly secret: string;
+  readonly status: number;
+  readonly events: unknown;
+  readonly description: string | null;
+  readonly consecutiveFailures: number;
+  readonly lastSuccessAt: Date | null;
+  readonly createdAt: Date | null;
+}
+
+interface WebhookDeliveryRow {
+  readonly id: string;
+  readonly webhookEndpointId: string;
+  readonly projectId: string;
+  readonly eventType: string;
+  readonly payload: unknown;
+  readonly status: number;
+  readonly attemptCount: number;
+  readonly maxAttempts: number;
+  readonly nextAttemptAt: Date | null;
+  readonly eventOccurredAt: Date;
+  readonly completedAt: Date | null;
+  readonly createdAt: Date | null;
+}
+
+const mapEndpointToResponse = (endpoint: WebhookEndpointRow) => ({
+  consecutiveFailures: endpoint.consecutiveFailures,
+  createdAt: endpoint.createdAt,
+  description: endpoint.description,
+  events: endpoint.events as WebhookEventType[],
+  id: endpoint.id,
+  lastSuccessAt: endpoint.lastSuccessAt,
+  name: endpoint.name,
+  projectId: endpoint.projectId,
+  secret: endpoint.secret,
+  status: mapEndpointStatus(endpoint.status),
+  url: endpoint.url,
+});
+
+const mapDeliveryToResponse = (delivery: WebhookDeliveryRow) => ({
+  attemptCount: delivery.attemptCount,
+  completedAt: delivery.completedAt,
+  createdAt: delivery.createdAt,
+  eventOccurredAt: delivery.eventOccurredAt,
+  eventType: delivery.eventType,
+  id: delivery.id,
+  maxAttempts: delivery.maxAttempts,
+  nextAttemptAt: delivery.nextAttemptAt,
+  payload: delivery.payload as object,
+  projectId: delivery.projectId,
+  status: mapDeliveryStatus(delivery.status),
+  webhookEndpointId: delivery.webhookEndpointId,
+});
+
+/**
+ * Generates a Cloudflare Workers–compatible webhook secret using Web Crypto's
+ * `crypto.getRandomValues` instead of `node:crypto.randomBytes`. Format
+ * matches the `internal/` version (`whsec_<64 hex chars>`) so existing secrets
+ * remain interchangeable.
+ */
+const generateSecret = (): string => {
+  const bytes = new Uint8Array(32);
+  crypto.getRandomValues(bytes);
+  const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+  return `whsec_${hex}`;
+};
+
+const validateUrl = (url: string): WebhookValidationError | null => {
+  try {
+    const parsed = new URL(url);
+    if (!["http:", "https:"].includes(parsed.protocol)) {
+      return new WebhookValidationError({ message: "URL must use http or https protocol" });
+    }
+    return null;
+  } catch {
+    return new WebhookValidationError({ message: "Invalid URL format" });
+  }
+};
+
+const validateEvents = (events: ReadonlyArray<string>): WebhookValidationError | null => {
+  const invalid = events.filter((event) => !isValidWebhookEvent(event));
+  if (invalid.length > 0) {
+    return new WebhookValidationError({ message: `Invalid event types: ${invalid.join(", ")}` });
+  }
+  if (events.length === 0) {
+    return new WebhookValidationError({ message: "At least one event type must be specified" });
+  }
+  return null;
+};
+
+/**
+ * `WebhookManagerService` is the CRUD surface for outbound webhook endpoints
+ * and their delivery history.
+ *
+ * `AuditLogPort`, `AuthSession`, and `Db` are provided by the application
+ * root.
+ */
+export class WebhookManagerService extends Context.Service<WebhookManagerService>()(
+  "WebhookManagerService",
+  {
+    make: Effect.gen(function* () {
+      const auditLog = yield* AuditLogPort;
+      const db = yield* Db;
+
+      const createEndpoint = Effect.fn("webhookManager.createEndpoint")(
+        function* (input: {
+          readonly projectId: string;
+          readonly name: string;
+          readonly url: string;
+          readonly events: ReadonlyArray<string>;
+          readonly description?: string;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+
+          const urlError = validateUrl(input.url);
+          if (urlError) return yield* Effect.fail(urlError);
+
+          const eventsError = validateEvents(input.events);
+          if (eventsError) return yield* Effect.fail(eventsError);
+
+          const endpointId = generateId("webhookEndpoint");
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.id", endpointId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.status", "active");
+          const secret = generateSecret();
+          const createdAt = new Date();
+
+          yield* db.insert(webhookEndpoints).values({
+            consecutiveFailures: 0,
+            createdAt,
+            description: input.description,
+            events: [...input.events],
+            id: endpointId,
+            name: input.name,
+            projectId: input.projectId,
+            secret,
+            status: WebhookEndpointStatus.Active,
+            url: input.url,
+          });
+
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.WebhookEndpoint,
+              entityId: endpointId,
+              action: AuditLogAction.Created,
+              changes: {
+                snapshot: { name: input.name, url: input.url, events: input.events },
+              },
+            })
+            .pipe(Effect.ignore);
+
+          return {
+            consecutiveFailures: 0,
+            createdAt,
+            description: input.description ?? null,
+            events: input.events as WebhookEventType[],
+            id: endpointId,
+            lastSuccessAt: null,
+            name: input.name,
+            projectId: input.projectId,
+            secret,
+            status: "active" as const,
+            url: input.url,
+          };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to create webhook endpoint: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const updateEndpoint = Effect.fn("webhookManager.updateEndpoint")(
+        function* (input: {
+          readonly projectId: string;
+          readonly endpointId: string;
+          readonly name?: string;
+          readonly url?: string;
+          readonly events?: ReadonlyArray<string>;
+          readonly status?: "active" | "disabled";
+          readonly description?: string | null;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.id", input.endpointId);
+
+          if (input.url) {
+            const urlError = validateUrl(input.url);
+            if (urlError) return yield* Effect.fail(urlError);
+          }
+          if (input.events) {
+            const eventsError = validateEvents(input.events);
+            if (eventsError) return yield* Effect.fail(eventsError);
+          }
+
+          const existing = yield* db.query.webhookEndpoints.findFirst({
+            where: {
+              id: input.endpointId,
+              projectId: input.projectId,
+            },
+          });
+          if (!existing) {
+            return yield* Effect.fail(
+              new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+            );
+          }
+
+          const updates: Partial<typeof webhookEndpoints.$inferInsert> = {};
+          if (input.name !== undefined) updates.name = input.name;
+          if (input.url !== undefined) updates.url = input.url;
+          if (input.events !== undefined) updates.events = [...input.events];
+          if (input.description !== undefined) updates.description = input.description;
+          if (input.status !== undefined) {
+            updates.status =
+              input.status === "active"
+                ? WebhookEndpointStatus.Active
+                : WebhookEndpointStatus.Disabled;
+            if (input.status === "active") {
+              updates.consecutiveFailures = 0;
+            }
+          }
+
+          yield* db
+            .update(webhookEndpoints)
+            .set(updates)
+            .where(eq(webhookEndpoints.id, input.endpointId));
+
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.WebhookEndpoint,
+              entityId: input.endpointId,
+              action: AuditLogAction.Updated,
+              changes: { snapshot: updates },
+            })
+            .pipe(Effect.ignore);
+
+          const updated = yield* db.query.webhookEndpoints.findFirst({
+            where: {
+              id: input.endpointId,
+              projectId: input.projectId,
+            },
+          });
+          if (!updated) {
+            return yield* Effect.fail(
+              new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.webhook.endpoint.status",
+            mapEndpointStatus(updated.status),
+          );
+          return mapEndpointToResponse(updated);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to update webhook endpoint: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const deleteEndpoint = Effect.fn("webhookManager.deleteEndpoint")(
+        function* (input: { readonly projectId: string; readonly endpointId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.id", input.endpointId);
+
+          const existing = yield* db.query.webhookEndpoints.findFirst({
+            where: {
+              id: input.endpointId,
+              projectId: input.projectId,
+            },
+          });
+          if (!existing) {
+            return yield* Effect.fail(
+              new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+            );
+          }
+
+          yield* db.delete(webhookEndpoints).where(eq(webhookEndpoints.id, input.endpointId));
+
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.WebhookEndpoint,
+              entityId: input.endpointId,
+              action: AuditLogAction.Deleted,
+            })
+            .pipe(Effect.ignore);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to delete webhook endpoint: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const getEndpointById = Effect.fn("webhookManager.getEndpointById")(
+        function* (input: { readonly projectId: string; readonly endpointId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.id", input.endpointId);
+
+          const endpoint = yield* db.query.webhookEndpoints.findFirst({
+            where: {
+              id: input.endpointId,
+              projectId: input.projectId,
+            },
+          });
+          if (!endpoint) {
+            return yield* Effect.fail(
+              new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.webhook.endpoint.status",
+            mapEndpointStatus(endpoint.status),
+          );
+          return mapEndpointToResponse(endpoint);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to fetch webhook endpoint: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const getEndpoints = Effect.fn("webhookManager.getEndpoints")(
+        function* (input: { readonly projectId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+
+          const endpoints = yield* db.query.webhookEndpoints.findMany({
+            where: { projectId: input.projectId },
+          });
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.count", endpoints.length);
+          return endpoints.map(mapEndpointToResponse);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to fetch webhook endpoints: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const rotateSecret = Effect.fn("webhookManager.rotateSecret")(
+        function* (input: { readonly projectId: string; readonly endpointId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.id", input.endpointId);
+
+          const existing = yield* db.query.webhookEndpoints.findFirst({
+            where: {
+              id: input.endpointId,
+              projectId: input.projectId,
+            },
+          });
+          if (!existing) {
+            return yield* Effect.fail(
+              new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+            );
+          }
+
+          const newSecret = generateSecret();
+          yield* db
+            .update(webhookEndpoints)
+            .set({ secret: newSecret })
+            .where(eq(webhookEndpoints.id, input.endpointId));
+
+          yield* auditLog
+            .append({
+              projectId: input.projectId,
+              entityType: AuditLogEntityType.WebhookEndpoint,
+              entityId: input.endpointId,
+              action: AuditLogAction.Updated,
+            })
+            .pipe(Effect.ignore);
+
+          return mapEndpointToResponse({ ...existing, secret: newSecret });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to rotate webhook secret: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const getDeliveries = Effect.fn("webhookManager.getDeliveries")(
+        function* (input: {
+          readonly projectId: string;
+          readonly endpointId?: string;
+          readonly limit?: number;
+        }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          if (input.endpointId)
+            yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.id", input.endpointId);
+
+          const limit = input.limit ?? 50;
+          const deliveries = yield* db.query.webhookDeliveries.findMany({
+            limit,
+            orderBy: { createdAt: "desc" },
+            where: input.endpointId
+              ? { webhookEndpointId: input.endpointId }
+              : { projectId: input.projectId },
+          });
+          return deliveries.map(mapDeliveryToResponse);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to fetch webhook deliveries: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const getDeliveryById = Effect.fn("webhookManager.getDeliveryById")(
+        function* (input: { readonly projectId: string; readonly deliveryId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.delivery.id", input.deliveryId);
+
+          const delivery = yield* db.query.webhookDeliveries.findFirst({
+            where: {
+              id: input.deliveryId,
+              projectId: input.projectId,
+            },
+          });
+          if (!delivery) {
+            return yield* Effect.fail(
+              new WebhookDeliveryNotFoundError({ deliveryId: input.deliveryId }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.event_type", delivery.eventType);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.webhook.endpoint.id",
+            delivery.webhookEndpointId,
+          );
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.webhook.delivery.attempt_number",
+            delivery.attemptCount,
+          );
+
+          const attempts = yield* db.query.webhookDeliveryAttempts.findMany({
+            orderBy: { attemptNumber: "asc" },
+            where: { webhookDeliveryId: input.deliveryId },
+          });
+
+          return {
+            ...mapDeliveryToResponse(delivery),
+            attempts: attempts.map((attempt) => ({
+              attemptNumber: attempt.attemptNumber,
+              createdAt: attempt.createdAt,
+              durationMs: attempt.durationMs,
+              errorMessage: attempt.errorMessage,
+              id: attempt.id,
+              responseBody: attempt.responseBody,
+              statusCode: attempt.statusCode,
+              succeeded: attempt.succeeded,
+            })),
+          };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to fetch webhook delivery: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const retryDelivery = Effect.fn("webhookManager.retryDelivery")(
+        function* (input: { readonly projectId: string; readonly deliveryId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.delivery.id", input.deliveryId);
+
+          const delivery = yield* db.query.webhookDeliveries.findFirst({
+            where: {
+              id: input.deliveryId,
+              projectId: input.projectId,
+            },
+          });
+          if (!delivery) {
+            return yield* Effect.fail(
+              new WebhookDeliveryNotFoundError({ deliveryId: input.deliveryId }),
+            );
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.event_type", delivery.eventType);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.webhook.endpoint.id",
+            delivery.webhookEndpointId,
+          );
+
+          if (
+            delivery.status !== WebhookDeliveryStatus.Failed &&
+            delivery.status !== WebhookDeliveryStatus.Exhausted
+          ) {
+            return yield* Effect.fail(
+              new WebhookValidationError({
+                message: "Can only retry failed or exhausted deliveries",
+              }),
+            );
+          }
+
+          const endpoint = yield* db.query.webhookEndpoints.findFirst({
+            where: { id: delivery.webhookEndpointId },
+          });
+          if (!endpoint) {
+            return yield* Effect.fail(
+              new WebhookServiceError({ cause: "Webhook endpoint not found for delivery" }),
+            );
+          }
+
+          const nextAttemptNumber = delivery.attemptCount + 1;
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.webhook.delivery.attempt_number",
+            nextAttemptNumber,
+          );
+
+          yield* db
+            .update(webhookDeliveries)
+            .set({
+              completedAt: null,
+              nextAttemptAt: null,
+              status: WebhookDeliveryStatus.InProgress,
+            })
+            .where(eq(webhookDeliveries.id, input.deliveryId));
+
+          const webhookDelivery = yield* WebhookDeliveryWorkflow;
+          yield* webhookDelivery
+            .dispatch({
+              attemptNumber: nextAttemptNumber,
+              deliveryId: delivery.id,
+              endpointId: endpoint.id,
+              eventType: delivery.eventType,
+              payload: delivery.payload,
+              secret: endpoint.secret,
+              url: endpoint.url,
+            })
+            .pipe(Effect.forkDetach);
+
+          return mapDeliveryToResponse({
+            ...delivery,
+            completedAt: null,
+            nextAttemptAt: null,
+            status: WebhookDeliveryStatus.InProgress,
+          });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to retry webhook delivery: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      const testEndpoint = Effect.fn("webhookManager.testEndpoint")(
+        function* (input: { readonly projectId: string; readonly endpointId: string }) {
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.endpoint.id", input.endpointId);
+
+          const endpoint = yield* db.query.webhookEndpoints.findFirst({
+            where: {
+              id: input.endpointId,
+              projectId: input.projectId,
+            },
+          });
+          if (!endpoint) {
+            return yield* Effect.fail(
+              new WebhookEndpointNotFoundError({ endpointId: input.endpointId }),
+            );
+          }
+
+          const deliveryId = generateId("webhookDelivery");
+          const eventOccurredAt = new Date();
+          const eventType = "test.ping";
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.delivery.id", deliveryId);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.event_type", eventType);
+          yield* Effect.annotateCurrentSpan("voidhash.webhook.delivery.attempt_number", 1);
+          const payload = {
+            message: "This is a test webhook delivery",
+            timestamp: eventOccurredAt.toISOString(),
+          };
+          const createdAt = new Date();
+
+          yield* db.insert(webhookDeliveries).values({
+            attemptCount: 0,
+            createdAt,
+            eventOccurredAt,
+            eventType,
+            id: deliveryId,
+            payload,
+            projectId: input.projectId,
+            status: WebhookDeliveryStatus.Pending,
+            webhookEndpointId: endpoint.id,
+          });
+
+          const webhookDelivery = yield* WebhookDeliveryWorkflow;
+          yield* webhookDelivery
+            .dispatch({
+              attemptNumber: 1,
+              deliveryId,
+              endpointId: endpoint.id,
+              eventType,
+              payload,
+              secret: endpoint.secret,
+              url: endpoint.url,
+            })
+            .pipe(Effect.forkDetach);
+
+          return mapDeliveryToResponse({
+            attemptCount: 0,
+            completedAt: null,
+            createdAt,
+            eventOccurredAt,
+            eventType,
+            id: deliveryId,
+            maxAttempts: 5,
+            nextAttemptAt: null,
+            payload,
+            projectId: input.projectId,
+            status: WebhookDeliveryStatus.Pending,
+            webhookEndpointId: endpoint.id,
+          });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new WebhookServiceError({
+                    cause: `Failed to test webhook endpoint: ${String(error.cause)}`,
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      return {
+        createEndpoint,
+        deleteEndpoint,
+        getDeliveries,
+        getDeliveryById,
+        getEndpointById,
+        getEndpoints,
+        retryDelivery,
+        rotateSecret,
+        testEndpoint,
+        updateEndpoint,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(WebhookManagerService)(WebhookManagerService.make);
+}
diff --git a/packages/core/src/services/webhookManager/event-types.ts b/packages/core/src/services/webhookManager/event-types.ts
new file mode 100644
index 000000000..dc56cf571
--- /dev/null
+++ b/packages/core/src/services/webhookManager/event-types.ts
@@ -0,0 +1,18 @@
+export const WebhookEventTypes = {
+  "person.created": "person.created",
+  "person.updated": "person.updated",
+  "person.deleted": "person.deleted",
+  "subscription.created": "subscription.created",
+  "subscription.renewed": "subscription.renewed",
+  "subscription.cancelled": "subscription.cancelled",
+  "subscription.expired": "subscription.expired",
+  "purchase.completed": "purchase.completed",
+  "purchase.refunded": "purchase.refunded",
+} as const;
+
+export type WebhookEventType = (typeof WebhookEventTypes)[keyof typeof WebhookEventTypes];
+
+export const ALL_WEBHOOK_EVENTS = Object.values(WebhookEventTypes);
+
+export const isValidWebhookEvent = (event: string): event is WebhookEventType =>
+  ALL_WEBHOOK_EVENTS.includes(event as WebhookEventType);
diff --git a/packages/core/src/services/webhookManager/index.ts b/packages/core/src/services/webhookManager/index.ts
new file mode 100644
index 000000000..a993ce84e
--- /dev/null
+++ b/packages/core/src/services/webhookManager/index.ts
@@ -0,0 +1,2 @@
+export * from "./WebhookManagerService.ts";
+export * from "./event-types.ts";
diff --git a/packages/core/src/testing/effect-vitest.ts b/packages/core/src/testing/effect-vitest.ts
new file mode 100644
index 000000000..a6ae0366f
--- /dev/null
+++ b/packages/core/src/testing/effect-vitest.ts
@@ -0,0 +1,22 @@
+/**
+ * Re-exports the `@effect/vitest` testing API but binds it to the
+ * `vite-plus/test` runtime so it works under `vp test run`. The upstream
+ * package's `it.effect` helpers are built on top of `import * as V from "vitest"`,
+ * which loads a separate vitest module instance from the one `vp test` uses;
+ * see https://github.com/Effect-TS/effect/issues/6129. `makeMethods` lets us
+ * pass a `TestAPI` explicitly so the helpers register tests with the runner
+ * `vp test` is actually executing.
+ *
+ * Once the upstream dual-instance issue is fixed we can drop this shim and
+ * `import { describe, expect, it } from "@effect/vitest"` directly.
+ */
+import { makeMethods } from "@effect/vitest";
+import { describe, expect, it as baseIt, test, vi } from "vite-plus/test";
+
+// biome-ignore lint/suspicious/noExplicitAny: TestAPI types differ slightly between
+// @effect/vitest's vendored vitest and vite-plus/test, but the runtime shape (`it`,
+// `it.skip`, `it.only`, `it.each`, etc.) is identical. Casting through any keeps the
+// shim a one-liner.
+const it = makeMethods(baseIt as any);
+
+export { describe, expect, it, test, vi };
diff --git a/packages/core/src/utils/create-short-id.ts b/packages/core/src/utils/create-short-id.ts
new file mode 100644
index 000000000..0e0a2e406
--- /dev/null
+++ b/packages/core/src/utils/create-short-id.ts
@@ -0,0 +1,7 @@
+import { customAlphabet } from "nanoid";
+
+const alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+
+const nanoid = customAlphabet(alphabet, 10);
+
+export const createShortId = () => nanoid();
diff --git a/packages/core/src/utils/create-slug.ts b/packages/core/src/utils/create-slug.ts
new file mode 100644
index 000000000..a894a2367
--- /dev/null
+++ b/packages/core/src/utils/create-slug.ts
@@ -0,0 +1,11 @@
+/**
+ * Creates a URL-safe slug from a display name.
+ */
+export function createSlug(name: string) {
+  return name
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9_-]+/g, "-")
+    .replace(/-+/g, "-")
+    .replace(/^-|-$/g, "");
+}
diff --git a/packages/core/src/utils/crypto/PaymentConfigSecretCrypto.test.ts b/packages/core/src/utils/crypto/PaymentConfigSecretCrypto.test.ts
new file mode 100644
index 000000000..2336d22bf
--- /dev/null
+++ b/packages/core/src/utils/crypto/PaymentConfigSecretCrypto.test.ts
@@ -0,0 +1,68 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import { isEncrypted } from "./SecretBox.ts";
+import { PaymentConfigSecretCrypto } from "./PaymentConfigSecretCrypto.ts";
+
+const bytesToBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i] as number);
+  return btoa(binary);
+};
+const newKeyB64 = () => bytesToBase64(crypto.getRandomValues(new Uint8Array(32)));
+
+const SECRET = "-----BEGIN PRIVATE KEY-----\nMIGT...secret...==\n-----END PRIVATE KEY-----";
+
+const run = <A, E>(
+  keyB64: string,
+  body: (svc: typeof PaymentConfigSecretCrypto.Service) => Effect.Effect<A, E>,
+): Promise<A> =>
+  Effect.gen(function* () {
+    const svc = yield* PaymentConfigSecretCrypto;
+    return yield* body(svc);
+  }).pipe(
+    Effect.provide(PaymentConfigSecretCrypto.layer({ key: Effect.succeed(keyB64) })),
+    Effect.runPromise,
+  );
+
+describe("PaymentConfigSecretCrypto", () => {
+  it("round-trips a secret when a key is configured", async () => {
+    const key = newKeyB64();
+    const sealed = await run(key, (s) => s.encrypt(SECRET));
+    expect(isEncrypted(sealed)).toBe(true);
+    expect(sealed).not.toContain("PRIVATE KEY");
+    const opened = await run(key, (s) => s.decrypt(sealed));
+    expect(opened).toBe(SECRET);
+  });
+
+  it("is a no-op when no key is configured (stores plaintext)", async () => {
+    const out = await run("", (s) => s.encrypt(SECRET));
+    expect(out).toBe(SECRET);
+    expect(isEncrypted(out)).toBe(false);
+  });
+
+  it("encrypt is idempotent — an already-encrypted value passes through unchanged", async () => {
+    const key = newKeyB64();
+    const once = await run(key, (s) => s.encrypt(SECRET));
+    const twice = await run(key, (s) => s.encrypt(once));
+    expect(twice).toBe(once);
+  });
+
+  it("decrypts plaintext (un-migrated) values unchanged regardless of key", async () => {
+    expect(await run(newKeyB64(), (s) => s.decrypt(SECRET))).toBe(SECRET);
+    expect(await run("", (s) => s.decrypt(SECRET))).toBe(SECRET);
+  });
+
+  it("fails loud when a value is encrypted but no key is configured", async () => {
+    const key = newKeyB64();
+    const sealed = await run(key, (s) => s.encrypt(SECRET));
+    const exit = await Effect.gen(function* () {
+      const svc = yield* PaymentConfigSecretCrypto;
+      return yield* svc.decrypt(sealed);
+    }).pipe(
+      Effect.provide(PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") })),
+      Effect.runPromiseExit,
+    );
+    expect(exit._tag).toBe("Failure");
+  });
+});
diff --git a/packages/core/src/utils/crypto/PaymentConfigSecretCrypto.ts b/packages/core/src/utils/crypto/PaymentConfigSecretCrypto.ts
new file mode 100644
index 000000000..0da85ff0a
--- /dev/null
+++ b/packages/core/src/utils/crypto/PaymentConfigSecretCrypto.ts
@@ -0,0 +1,77 @@
+/**
+ * Service that encrypts/decrypts secret payment-provider configuration fields
+ * (Apple PKCS8 key, Stripe/Google secrets) using {@link SecretBox} under a key
+ * sourced from the worker environment (`ENCRYPTION_KEY`, a
+ * base64 32-byte AES-256 key).
+ *
+ * When no key is configured (empty string) encryption is a NO-OP — values are
+ * stored as plaintext. This keeps local/dev and un-provisioned environments
+ * working; production sets the secret and rows become ciphertext as they are
+ * written. Decryption always works on both forms (plaintext passes through;
+ * ciphertext requires the key, else it fails loud).
+ */
+import { Context, Effect, Layer, Option } from "effect";
+
+import {
+  decodeEncryptionKey,
+  decryptSecret,
+  encryptSecret,
+  isEncrypted,
+  SecretDecryptionError,
+  type SecretKeyError,
+} from "./SecretBox.ts";
+
+export interface PaymentConfigSecretCryptoConfig {
+  /** base64-encoded 32-byte key; empty string disables encryption. */
+  readonly key: Effect.Effect<string>;
+}
+
+const make = (config: PaymentConfigSecretCryptoConfig) =>
+  Effect.gen(function* () {
+    const keyB64 = yield* config.key;
+    // A malformed key is a deployment misconfiguration — fail fast (die) at
+    // layer construction rather than degrade silently.
+    const keyOpt =
+      keyB64.length === 0
+        ? Option.none<Uint8Array>()
+        : Option.some(yield* decodeEncryptionKey(keyB64).pipe(Effect.orDie));
+
+    /** Encrypt a secret. Idempotent — already-encrypted values pass through. */
+    const encrypt = (plaintext: string): Effect.Effect<string, SecretKeyError> =>
+      isEncrypted(plaintext)
+        ? Effect.succeed(plaintext)
+        : Option.match(keyOpt, {
+            onNone: () => Effect.succeed(plaintext),
+            onSome: (key) => encryptSecret(plaintext, key),
+          });
+
+    /** Decrypt a secret. Plaintext (non-prefixed) values pass through. */
+    const decrypt = (
+      value: string,
+    ): Effect.Effect<string, SecretDecryptionError | SecretKeyError> =>
+      !isEncrypted(value)
+        ? Effect.succeed(value)
+        : Option.match(keyOpt, {
+            onNone: () =>
+              Effect.fail(
+                new SecretDecryptionError({
+                  message: "Configuration value is encrypted but ENCRYPTION_KEY is not set",
+                }),
+              ),
+            onSome: (key) => decryptSecret(value, key),
+          });
+
+    return { encrypt, decrypt } as const;
+  });
+
+export class PaymentConfigSecretCrypto extends Context.Service<PaymentConfigSecretCrypto>()(
+  "core/PaymentConfigSecretCrypto",
+  // Default: no key → encryption is a no-op. The application root overrides this
+  // with `PaymentConfigSecretCrypto.layer({ key })` reading the worker secret.
+  { make: make({ key: Effect.succeed("") }) },
+) {
+  static readonly layer = (
+    config: PaymentConfigSecretCryptoConfig,
+  ): Layer.Layer<PaymentConfigSecretCrypto> =>
+    Layer.effect(PaymentConfigSecretCrypto)(make(config));
+}
diff --git a/packages/core/src/utils/crypto/SecretBox.test.ts b/packages/core/src/utils/crypto/SecretBox.test.ts
new file mode 100644
index 000000000..607664102
--- /dev/null
+++ b/packages/core/src/utils/crypto/SecretBox.test.ts
@@ -0,0 +1,81 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect, Exit } from "effect";
+
+import {
+  decodeEncryptionKey,
+  decryptSecret,
+  encryptSecret,
+  isEncrypted,
+  SecretDecryptionError,
+} from "./SecretBox.ts";
+
+const bytesToBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i] as number);
+  return btoa(binary);
+};
+
+const newKeyB64 = () => bytesToBase64(crypto.getRandomValues(new Uint8Array(32)));
+
+// A representative secret: a PKCS8 EC private key in PEM (multiline, base64 body).
+const APPLE_PKCS8 =
+  "-----BEGIN PRIVATE KEY-----\nMIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQg\nsome+secret/key==\n-----END PRIVATE KEY-----";
+
+describe("SecretBox (AES-256-GCM envelope encryption)", () => {
+  it("round-trips a secret through encrypt → decrypt", async () => {
+    const key = await Effect.runPromise(decodeEncryptionKey(newKeyB64()));
+    const sealed = await Effect.runPromise(encryptSecret(APPLE_PKCS8, key));
+    expect(isEncrypted(sealed)).toBe(true);
+    expect(sealed).not.toContain("PRIVATE KEY"); // plaintext must not leak into the wire form
+    const opened = await Effect.runPromise(decryptSecret(sealed, key));
+    expect(opened).toBe(APPLE_PKCS8);
+  });
+
+  it("produces a different ciphertext each call (random IV) but decrypts equally", async () => {
+    const key = await Effect.runPromise(decodeEncryptionKey(newKeyB64()));
+    const a = await Effect.runPromise(encryptSecret(APPLE_PKCS8, key));
+    const b = await Effect.runPromise(encryptSecret(APPLE_PKCS8, key));
+    expect(a).not.toBe(b);
+    expect(await Effect.runPromise(decryptSecret(a, key))).toBe(APPLE_PKCS8);
+    expect(await Effect.runPromise(decryptSecret(b, key))).toBe(APPLE_PKCS8);
+  });
+
+  it("treats a non-prefixed value as plaintext (backward-compat for un-migrated rows)", async () => {
+    const key = await Effect.runPromise(decodeEncryptionKey(newKeyB64()));
+    const opened = await Effect.runPromise(decryptSecret(APPLE_PKCS8, key));
+    expect(opened).toBe(APPLE_PKCS8);
+  });
+
+  it("fails loud on a wrong key — never returns garbage", async () => {
+    const key = await Effect.runPromise(decodeEncryptionKey(newKeyB64()));
+    const otherKey = await Effect.runPromise(decodeEncryptionKey(newKeyB64()));
+    const sealed = await Effect.runPromise(encryptSecret(APPLE_PKCS8, key));
+    const exit = await Effect.runPromiseExit(decryptSecret(sealed, otherKey));
+    expect(Exit.isFailure(exit)).toBe(true);
+  });
+
+  it("fails loud on a tampered ciphertext byte", async () => {
+    const key = await Effect.runPromise(decodeEncryptionKey(newKeyB64()));
+    const sealed = await Effect.runPromise(encryptSecret(APPLE_PKCS8, key));
+    const tampered = sealed.slice(0, -2) + (sealed.endsWith("AA") ? "BB" : "AA");
+    const exit = await Effect.runPromiseExit(decryptSecret(tampered, key));
+    expect(Exit.isFailure(exit)).toBe(true);
+  });
+
+  it("rejects a key of the wrong length", async () => {
+    const exit = await Effect.runPromiseExit(
+      decodeEncryptionKey(bytesToBase64(new Uint8Array(16))),
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+  });
+
+  it("decryption error is the typed SecretDecryptionError", async () => {
+    const key = await Effect.runPromise(decodeEncryptionKey(newKeyB64()));
+    // `Effect.flip` moves the typed error into the success channel so we can
+    // assert on it directly without poking into the Cause structure.
+    const error = await Effect.runPromise(
+      decryptSecret("v1.aesgcm:###not-base64###", key).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(SecretDecryptionError);
+  });
+});
diff --git a/packages/core/src/utils/crypto/SecretBox.ts b/packages/core/src/utils/crypto/SecretBox.ts
new file mode 100644
index 000000000..cdf8ff0d6
--- /dev/null
+++ b/packages/core/src/utils/crypto/SecretBox.ts
@@ -0,0 +1,142 @@
+/**
+ * Envelope encryption for secret payment-provider configuration fields
+ * (Apple PKCS8 in-app-purchase keys, Stripe secret keys, Google service-account
+ * keys). Uses AES-256-GCM via WebCrypto only — no Node `crypto`/`Buffer` — so it
+ * runs unchanged on Cloudflare Workers.
+ *
+ * Wire format (versioned so the scheme can evolve and so plaintext can be
+ * detected during migration):
+ *
+ *   "v1.aesgcm:" + base64( iv[12] ‖ ciphertext‖gcmTag )
+ *
+ * {@link decryptSecret} treats any value WITHOUT the `v1.aesgcm:` prefix as
+ * already-plaintext and returns it unchanged. This lets the encryption seam be
+ * deployed over a table that still holds plaintext rows: reads keep working,
+ * and rows become ciphertext as they are next written (or by a backfill).
+ */
+import { Effect, Schema } from "effect";
+
+const VERSION_PREFIX = "v1.aesgcm:";
+const IV_BYTES = 12;
+const KEY_BYTES = 32;
+
+/** Raised when a value cannot be decrypted (wrong key, tampered, malformed). */
+export class SecretDecryptionError extends Schema.TaggedErrorClass<SecretDecryptionError>(
+  "SecretDecryptionError",
+)("SecretDecryptionError", { message: Schema.String }) {}
+
+/** Raised when the configured encryption key is not a valid 32-byte base64 key. */
+export class SecretKeyError extends Schema.TaggedErrorClass<SecretKeyError>("SecretKeyError")(
+  "SecretKeyError",
+  { message: Schema.String },
+) {}
+
+const base64ToBytes = (base64: string): Uint8Array => {
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+};
+
+const bytesToBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i] as number);
+  }
+  return btoa(binary);
+};
+
+const importKey = (rawKey: Uint8Array, usage: "encrypt" | "decrypt") =>
+  Effect.tryPromise({
+    try: () =>
+      crypto.subtle.importKey("raw", rawKey as BufferSource, { name: "AES-GCM" }, false, [usage]),
+    catch: (cause) =>
+      new SecretKeyError({ message: `Failed to import AES-GCM key: ${String(cause)}` }),
+  });
+
+/** Decode a base64-encoded 32-byte AES-256 key, validating its length. */
+export const decodeEncryptionKey = (base64Key: string): Effect.Effect<Uint8Array, SecretKeyError> =>
+  Effect.try({
+    try: () => base64ToBytes(base64Key),
+    catch: (cause) =>
+      new SecretKeyError({ message: `Encryption key is not valid base64: ${String(cause)}` }),
+  }).pipe(
+    Effect.filterOrFail(
+      (bytes) => bytes.length === KEY_BYTES,
+      (bytes) =>
+        new SecretKeyError({
+          message: `Encryption key must be ${KEY_BYTES} bytes (got ${bytes.length})`,
+        }),
+    ),
+  );
+
+/** Returns true if `value` is in the encrypted wire format. */
+export const isEncrypted = (value: string): boolean => value.startsWith(VERSION_PREFIX);
+
+/**
+ * Encrypt a UTF-8 secret string with AES-256-GCM. The 96-bit IV is random per
+ * call and prepended to the ciphertext.
+ */
+export const encryptSecret = (
+  plaintext: string,
+  rawKey: Uint8Array,
+): Effect.Effect<string, SecretKeyError> =>
+  Effect.gen(function* () {
+    const key = yield* importKey(rawKey, "encrypt");
+    const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
+    const ciphertext = yield* Effect.tryPromise({
+      try: () =>
+        crypto.subtle.encrypt(
+          { name: "AES-GCM", iv: iv as BufferSource },
+          key,
+          new TextEncoder().encode(plaintext) as BufferSource,
+        ),
+      catch: (cause) =>
+        new SecretKeyError({ message: `AES-GCM encryption failed: ${String(cause)}` }),
+    });
+    const combined = new Uint8Array(iv.length + ciphertext.byteLength);
+    combined.set(iv, 0);
+    combined.set(new Uint8Array(ciphertext), iv.length);
+    return VERSION_PREFIX + bytesToBase64(combined);
+  });
+
+/**
+ * Decrypt a value produced by {@link encryptSecret}. Values without the
+ * `v1.aesgcm:` prefix are assumed to be plaintext (pre-encryption rows) and
+ * returned unchanged.
+ */
+export const decryptSecret = (
+  value: string,
+  rawKey: Uint8Array,
+): Effect.Effect<string, SecretDecryptionError | SecretKeyError> =>
+  Effect.gen(function* () {
+    if (!isEncrypted(value)) {
+      return value;
+    }
+    const combined = yield* Effect.try({
+      try: () => base64ToBytes(value.slice(VERSION_PREFIX.length)),
+      catch: (cause) =>
+        new SecretDecryptionError({ message: `Malformed ciphertext: ${String(cause)}` }),
+    });
+    if (combined.length <= IV_BYTES) {
+      return yield* Effect.fail(new SecretDecryptionError({ message: "Ciphertext too short" }));
+    }
+    const iv = combined.slice(0, IV_BYTES);
+    const ciphertext = combined.slice(IV_BYTES);
+    const key = yield* importKey(rawKey, "decrypt");
+    const plaintext = yield* Effect.tryPromise({
+      try: () =>
+        crypto.subtle.decrypt(
+          { name: "AES-GCM", iv: iv as BufferSource },
+          key,
+          ciphertext as BufferSource,
+        ),
+      catch: (cause) =>
+        new SecretDecryptionError({
+          message: `AES-GCM decryption failed (wrong key or tampered value): ${String(cause)}`,
+        }),
+    });
+    return new TextDecoder().decode(plaintext);
+  });
diff --git a/packages/core/src/utils/crypto/account-token.test.ts b/packages/core/src/utils/crypto/account-token.test.ts
new file mode 100644
index 000000000..2e552c2c3
--- /dev/null
+++ b/packages/core/src/utils/crypto/account-token.test.ts
@@ -0,0 +1,47 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import { deriveAccountToken, uuidV5, VOIDHASH_ACCOUNT_TOKEN_NAMESPACE } from "./account-token.ts";
+
+const DNS_NAMESPACE = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
+
+/**
+ * VOIDHASH_ACCOUNT_TOKEN_DERIVATION v1 shared vectors — the OSS SDK asserts
+ * the identical table (`@voidhash/react-native` `tests/core/uuid-v5.test.ts`).
+ * If a vector here ever changes, the cross-repo contract is broken.
+ */
+const SHARED_VECTORS: ReadonlyArray<readonly [distinctId: string, token: string]> = [
+  ["user-123", "3501e751-7582-58f9-9c1d-533c7466049f"],
+  // Case-sensitive on purpose: distinctId equality is byte-exact everywhere.
+  ["USER-123", "c6eb5cb5-739d-52a9-9a32-6a0fb4be71cc"],
+  ["vh:anon:k2j4h5g6f7", "22c4cde2-2c40-5266-9699-35f7d271e1a8"],
+  // Multibyte UTF-8 input.
+  ["naïve@exämple.com", "84080bfc-8e5a-5daf-9ec4-c2221ea8d948"],
+];
+
+describe("account-token (VOIDHASH_ACCOUNT_TOKEN_DERIVATION v1)", () => {
+  it("reproduces the RFC 4122 UUIDv5 sanity anchor", async () => {
+    expect(await Effect.runPromise(uuidV5(DNS_NAMESPACE, "www.example.com"))).toBe(
+      "2ed6657d-e927-568b-95e1-2665a8aea6a2",
+    );
+  });
+
+  it("pins the namespace to its documented provenance", async () => {
+    expect(await Effect.runPromise(uuidV5(DNS_NAMESPACE, "appaccounttoken.voidhash.com"))).toBe(
+      VOIDHASH_ACCOUNT_TOKEN_NAMESPACE,
+    );
+  });
+
+  it.each(SHARED_VECTORS)("derives the shared vector for %j", async (distinctId, token) => {
+    expect(await Effect.runPromise(deriveAccountToken(distinctId))).toBe(token);
+  });
+
+  it("is deterministic and lowercase for long inputs", async () => {
+    const longDistinctId = "x".repeat(1000);
+    const first = await Effect.runPromise(deriveAccountToken(longDistinctId));
+    const second = await Effect.runPromise(deriveAccountToken(longDistinctId));
+    expect(first).toBe(second);
+    expect(first).toBe(first.toLowerCase());
+    expect(first).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-5[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/);
+  });
+});
diff --git a/packages/core/src/utils/crypto/account-token.ts b/packages/core/src/utils/crypto/account-token.ts
new file mode 100644
index 000000000..93442f0e7
--- /dev/null
+++ b/packages/core/src/utils/crypto/account-token.ts
@@ -0,0 +1,93 @@
+/**
+ * Deterministic per-user account token derivation — the server half of the
+ * VOIDHASH_ACCOUNT_TOKEN_DERIVATION v1 cross-repo contract (the client half
+ * lives in the OSS SDKs, e.g. `@voidhash/react-native`'s
+ * `src/core/utils/uuid-v5.ts`; both must produce byte-identical output).
+ *
+ * The token is what client SDKs hand to store purchase APIs that demand an
+ * opaque per-account identifier in a fixed format — Apple StoreKit's
+ * `appAccountToken` (must be a UUID) and Google Play's `obfuscatedAccountId`.
+ * A voidhash `distinctId` is an arbitrary customer-chosen string, so it cannot
+ * be embedded losslessly in 128 bits; instead it is hashed deterministically:
+ *
+ *   token = UUIDv5(VOIDHASH_ACCOUNT_TOKEN_NAMESPACE, utf8(distinctId))
+ *
+ * Spec, pinned (any change is a breaking contract change):
+ * - name input is the RAW distinctId string, UTF-8 encoded — no trimming, no
+ *   case folding, no Unicode normalization (matches `person_identity`'s
+ *   byte-exact distinctId equality semantics);
+ * - output is the lowercase hyphenated UUID string; any externally received
+ *   token must be lowercased before persist/lookup (Swift's `UUID.uuidString`
+ *   is uppercase);
+ * - RFC 4122 sanity anchor every implementation must reproduce:
+ *   UUIDv5(DNS, "www.example.com") = 2ed6657d-e927-568b-95e1-2665a8aea6a2.
+ *
+ * Privacy: a distinctId may be PII (an email). UUIDv5 is a one-way SHA-1
+ * digest — preimage resistance is intact (SHA-1's collision weakness is
+ * irrelevant here), so only the digest ever reaches Apple/Google, satisfying
+ * their no-PII guidance for these fields. The namespace is public (it ships in
+ * the OSS SDK), so this is deterministic pseudonymization, not encryption:
+ * someone holding a candidate distinctId can confirm it maps to a token.
+ */
+import { Effect } from "effect";
+
+/**
+ * Fixed derivation namespace. Provenance (reproducible, but the literal is
+ * what is pinned): UUIDv5(DNS namespace 6ba7b810-9dad-11d1-80b4-00c04fd430c8,
+ * "appaccounttoken.voidhash.com").
+ */
+export const VOIDHASH_ACCOUNT_TOKEN_NAMESPACE = "3919eb4e-3466-593c-8c1e-84554e13a0a6";
+
+/**
+ * `person_external_identifiers.serviceId` under which derived account tokens
+ * are registered. Deliberately distinct from `"apple-app-store"`: those rows
+ * track entitlement ownership and participate in restore/transfer rebinds,
+ * while account-token rows track the canonical person of a distinctId and
+ * must only ever follow identity merges. Provider-agnostic on purpose — the
+ * same token serves Apple's `appAccountToken` and Google's
+ * `obfuscatedAccountId`.
+ */
+export const ACCOUNT_TOKEN_SERVICE_ID = "voidhash-account-token";
+
+const uuidToBytes = (uuid: string): Uint8Array => {
+  const hex = uuid.replace(/-/g, "");
+  const bytes = new Uint8Array(16);
+  for (let i = 0; i < 16; i++) {
+    bytes[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  }
+  return bytes;
+};
+
+const bytesToUuid = (bytes: Uint8Array): string => {
+  let hex = "";
+  for (let i = 0; i < 16; i++) {
+    hex += (bytes[i] as number).toString(16).padStart(2, "0");
+  }
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+};
+
+/**
+ * RFC 4122 name-based UUID (version 5, SHA-1) over WebCrypto — no Node
+ * `crypto`/`Buffer`, so it runs unchanged on Cloudflare Workers.
+ */
+export const uuidV5 = (namespaceUuid: string, name: string): Effect.Effect<string> =>
+  Effect.promise(async () => {
+    const namespaceBytes = uuidToBytes(namespaceUuid);
+    const nameBytes = new TextEncoder().encode(name);
+    const input = new Uint8Array(namespaceBytes.length + nameBytes.length);
+    input.set(namespaceBytes, 0);
+    input.set(nameBytes, namespaceBytes.length);
+    const digest = new Uint8Array(await crypto.subtle.digest("SHA-1", input as BufferSource));
+    const uuidBytes = digest.slice(0, 16);
+    uuidBytes[6] = ((uuidBytes[6] as number) & 0x0f) | 0x50;
+    uuidBytes[8] = ((uuidBytes[8] as number) & 0x3f) | 0x80;
+    return bytesToUuid(uuidBytes);
+  });
+
+/**
+ * Derives the deterministic account token for a distinctId. Same distinctId →
+ * same token, on every device and in every SDK — which is what lets a webhook
+ * carrying only the token be attributed to the right person.
+ */
+export const deriveAccountToken = (distinctId: string): Effect.Effect<string> =>
+  uuidV5(VOIDHASH_ACCOUNT_TOKEN_NAMESPACE, distinctId);
diff --git a/packages/core/src/utils/crypto/jwt-sign.ts b/packages/core/src/utils/crypto/jwt-sign.ts
new file mode 100644
index 000000000..ed84bfd2a
--- /dev/null
+++ b/packages/core/src/utils/crypto/jwt-sign.ts
@@ -0,0 +1,131 @@
+/**
+ * Asymmetric JWT signing for outbound push-provider authentication, using
+ * WebCrypto only (no Node `crypto`/`Buffer`) so it runs unchanged on Cloudflare
+ * Workers — the same constraint as {@link SecretBox}.
+ *
+ * Two algorithms are supported, one per push provider:
+ *  - **RS256** (`RSASSA-PKCS1-v1_5` + SHA-256): the Google service-account JWT
+ *    used to obtain an FCM OAuth2 access token. Key = the `private_key` PEM from
+ *    the service-account JSON.
+ *  - **ES256** (`ECDSA` P-256 + SHA-256): the APNs provider-authentication JWT.
+ *    Key = the `.p8` PEM downloaded from the Apple developer portal. WebCrypto's
+ *    ECDSA signature output is already the raw `r‖s` concatenation JOSE expects,
+ *    so no DER-unwrapping is needed.
+ *
+ * Both take a PKCS#8 PEM private key. Callers pass the DECRYPTED key material —
+ * decryption happens upstream (the provider adapter owns its secret seam).
+ */
+import { Effect, Schema } from "effect";
+
+/** Raised when JWT construction or signing fails (bad key, WebCrypto error). */
+export class JwtSigningError extends Schema.TaggedErrorClass<JwtSigningError>("JwtSigningError")(
+  "JwtSigningError",
+  { message: Schema.String },
+) {}
+
+const encoder = new TextEncoder();
+
+/** URL-safe base64 without padding — the JOSE `base64url` alphabet. */
+const bytesToBase64Url = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i] as number);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+};
+
+const stringToBase64Url = (value: string): string => bytesToBase64Url(encoder.encode(value));
+
+/**
+ * Decode a PEM-wrapped PKCS#8 private key into its DER bytes. Tolerant of `\n`
+ * or `\r\n` line endings and of a key handed in with the armor already stripped.
+ */
+const pemToDer = (pem: string): Effect.Effect<Uint8Array, JwtSigningError> =>
+  Effect.try({
+    try: () => {
+      const body = pem
+        .replace(/-----BEGIN [^-]+-----/g, "")
+        .replace(/-----END [^-]+-----/g, "")
+        .replace(/\s+/g, "");
+      if (body.length === 0) {
+        throw new Error("empty PEM body");
+      }
+      const binary = atob(body);
+      const bytes = new Uint8Array(binary.length);
+      for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+      }
+      return bytes;
+    },
+    catch: (cause) => new JwtSigningError({ message: `invalid PKCS#8 PEM: ${String(cause)}` }),
+  });
+
+/** JWT header fields common to both algorithms (`kid` is APNs-only). */
+export interface JwtHeader {
+  readonly alg: "RS256" | "ES256";
+  readonly typ?: "JWT";
+  readonly kid?: string;
+}
+
+const signWith = (
+  algorithm: "RS256" | "ES256",
+  importAlgorithm: RsaHashedImportParams | EcKeyImportParams,
+  signAlgorithm: AlgorithmIdentifier | RsaPssParams | EcdsaParams,
+  header: JwtHeader,
+  claims: Record<string, unknown>,
+  privateKeyPem: string,
+): Effect.Effect<string, JwtSigningError> =>
+  Effect.gen(function* () {
+    const der = yield* pemToDer(privateKeyPem);
+    const key = yield* Effect.tryPromise({
+      try: () =>
+        crypto.subtle.importKey("pkcs8", der as BufferSource, importAlgorithm, false, ["sign"]),
+      catch: (cause) =>
+        new JwtSigningError({ message: `failed to import ${algorithm} key: ${String(cause)}` }),
+    });
+    const signingInput = `${stringToBase64Url(JSON.stringify({ typ: "JWT", ...header }))}.${stringToBase64Url(
+      JSON.stringify(claims),
+    )}`;
+    const signature = yield* Effect.tryPromise({
+      try: () =>
+        crypto.subtle.sign(signAlgorithm, key, encoder.encode(signingInput) as BufferSource),
+      catch: (cause) =>
+        new JwtSigningError({ message: `${algorithm} signing failed: ${String(cause)}` }),
+    });
+    return `${signingInput}.${bytesToBase64Url(new Uint8Array(signature))}`;
+  });
+
+/**
+ * Sign a compact JWT with RS256 (Google service-account credentials). `claims`
+ * is the payload object (`iss`/`scope`/`aud`/`iat`/`exp`).
+ */
+export const signJwtRs256 = (
+  claims: Record<string, unknown>,
+  privateKeyPem: string,
+): Effect.Effect<string, JwtSigningError> =>
+  signWith(
+    "RS256",
+    { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+    "RSASSA-PKCS1-v1_5",
+    { alg: "RS256" },
+    claims,
+    privateKeyPem,
+  );
+
+/**
+ * Sign a compact JWT with ES256 (APNs provider authentication token). `keyId`
+ * becomes the header `kid`; `claims` carries `iss` (team id) and `iat`.
+ */
+export const signJwtEs256 = (
+  keyId: string,
+  claims: Record<string, unknown>,
+  privateKeyPem: string,
+): Effect.Effect<string, JwtSigningError> =>
+  signWith(
+    "ES256",
+    { name: "ECDSA", namedCurve: "P-256" },
+    { name: "ECDSA", hash: "SHA-256" },
+    { alg: "ES256", kid: keyId },
+    claims,
+    privateKeyPem,
+  );
diff --git a/packages/core/src/utils/deterministic-id.ts b/packages/core/src/utils/deterministic-id.ts
new file mode 100644
index 000000000..717f21a00
--- /dev/null
+++ b/packages/core/src/utils/deterministic-id.ts
@@ -0,0 +1,65 @@
+/**
+ * Deterministic analytics `event_id` derivation for server-emitted (revenue)
+ * analytics events.
+ *
+ * A server-emitted event is uniquely identified by the triple:
+ *   - `anchor`    — the durable per-action anchor: the purchase-ledger
+ *                   `idempotency_key`. One ledger row ⇒ exactly one mapper
+ *                   invocation, and the ledger's `UNIQUE(idempotency_key)`
+ *                   guarantees the anchor is unique per logical action.
+ *   - `eventName` — the wire-stable event name (e.g. `$subscription.created`).
+ *                   A single action can emit more than one event — a
+ *                   subscription start emits `$subscription.created` +
+ *                   `$purchase.completed` — so the name disambiguates them.
+ *   - `personId`  — the person the event is attributed to. A transfer emits two
+ *                   events with the same-family name on the source vs. target
+ *                   person, so the person disambiguates the two halves.
+ *
+ * The triple `(anchor, eventName, personId)` is injective across every revenue
+ * mapper, so the derived id is stable across retries / re-dispatch and collides
+ * for exactly the duplicates an at-least-once queue may produce — the property
+ * the ClickHouse `(project_id, event_id)` pre-insert dedup relies on. This
+ * replaces the previous `generateId("analyticsEvent")` (a fresh random id per
+ * call), which was the one piece genuinely incompatible with at-least-once
+ * delivery.
+ *
+ * `event_id` is an unbounded ClickHouse `String`, so a structured, legible
+ * deterministic string is used rather than a fixed-width hash — that keeps the
+ * 17 sync mapper builders synchronous (no need to thread an async hash) and
+ * keeps ids debuggable.
+ *
+ * Injectivity of the encoding: the format is
+ * `an_evt_<anchor>:<eventNameSlug>:<personId>`. `eventNameSlug` and `personId`
+ * never contain a `:` (the event names come from a fixed reserved set and slug
+ * to `[A-Za-z0-9._-]`; person ids are server-issued `person_<cuid2>`), so the
+ * string can be parsed unambiguously from the right — the last two `:` split
+ * off `personId` and `eventNameSlug`, and everything before is the (possibly
+ * `:`-containing) anchor. The mapping from triple to string is therefore
+ * collision-free.
+ */
+
+/** Matches `generateId("analyticsEvent")` so deterministic and legacy ids share a namespace. */
+const ANALYTICS_EVENT_ID_PREFIX = "an_evt" as const;
+
+/**
+ * Slugs an event name to `[A-Za-z0-9._-]`, stripping the `:` separator and the
+ * `$` sigil so the encoding stays unambiguously parseable. Injective over the
+ * fixed set of reserved revenue event names (they differ in their alphanumeric
+ * segments).
+ */
+const slugEventName = (eventName: string): string => eventName.replaceAll(/[^a-zA-Z0-9._-]/g, "_");
+
+/**
+ * Builds a stable, collision-free analytics `event_id` from the
+ * `(anchor, eventName, personId)` triple. See the module doc for the
+ * injectivity argument.
+ */
+export const deterministicAnalyticsEventId = ({
+  anchor,
+  eventName,
+  personId,
+}: {
+  readonly anchor: string;
+  readonly eventName: string;
+  readonly personId: string;
+}): string => `${ANALYTICS_EVENT_ID_PREFIX}_${anchor}:${slugEventName(eventName)}:${personId}`;
diff --git a/packages/core/src/utils/first-defined-string.ts b/packages/core/src/utils/first-defined-string.ts
new file mode 100644
index 000000000..960051ac3
--- /dev/null
+++ b/packages/core/src/utils/first-defined-string.ts
@@ -0,0 +1,17 @@
+/**
+ * Returns the first argument that is a non-empty string, skipping `null`,
+ * `undefined`, and empty strings. Returns `null` when none qualify. Useful for
+ * coalescing optional profile fields (e.g. picking an email/name from several
+ * candidate sources in priority order).
+ */
+export const firstDefinedString = (
+  ...values: ReadonlyArray<string | null | undefined>
+): string | null => {
+  for (const value of values) {
+    if (typeof value === "string" && value.length > 0) {
+      return value;
+    }
+  }
+
+  return null;
+};
diff --git a/packages/core/src/utils/generate-id.ts b/packages/core/src/utils/generate-id.ts
new file mode 100644
index 000000000..1d1381bfd
--- /dev/null
+++ b/packages/core/src/utils/generate-id.ts
@@ -0,0 +1,96 @@
+import { createId } from "@paralleldrive/cuid2";
+
+const prefixes = {
+  test: "test",
+  request: "req",
+  user: "user",
+  organization: "org",
+  member: "member",
+  workosWebhookEvent: "workos_wh",
+  apiSecretKey: "api_sk",
+  apiPublishableKey: "api_pk",
+  apiPublishableKeyTesting: "api_pk_test",
+  person: "person",
+  personDistinctId: "person_dist",
+  personIdentityMigrationJob: "person_id_mig",
+  identityAssertion: "id_assert",
+  purchase: "pur",
+  paywall: "pw",
+  paywallEditToken: "pw_et",
+  paywallProduct: "pw_prod",
+  paywallRelease: "pw_pub",
+  paymentProviderConfiguration: "pp_conf",
+  paymentProviderProduct: "pp_prod",
+  product: "prod",
+  project: "proj",
+  perk: "perk",
+  productPerk: "prod_perk",
+  paywallLocation: "pw_loc",
+  paywallLocationShowing: "pw_loc_show",
+  paywallDeploy: "pw_dep",
+  paywallDeployFile: "pw_dep_file",
+  paywallDeployBlob: "pw_blob",
+  paywallComponent: "pw_cmp",
+  paywallComponentVersion: "pw_cmp_ver",
+  personUnlockedPerk: "person_perk",
+  checkoutSession: "ch_sess",
+  transaction: "tx",
+  outbox: "outbox",
+  fxRate: "fx",
+  purchaseLedger: "pl",
+  paymentProviderNotification: "ppn",
+  subscription: "sub",
+  subscriptionTransfer: "sub_xfer",
+  purchaseTransfer: "pur_xfer",
+  appStoreTransaction: "app_store_tx",
+  analyticsIngestDlq: "an_ing_dlq",
+  analyticsEvent: "an_evt",
+  // Billing
+  organizationBilling: "org_bill",
+  usageRecord: "usage",
+  usageAggregate: "usage_agg",
+  billingWebhookEvent: "bill_wh",
+  billingProviderMeter: "bill_meter",
+  // Webhooks
+  webhookEndpoint: "wh_ep",
+  webhookDelivery: "wh_del",
+  webhookDeliveryAttempt: "wh_att",
+  // Audit Log
+  auditLog: "audit",
+  // Feature Flags
+  featureFlag: "ff",
+  featureFlagTarget: "ff_tgt",
+  featureFlagOverride: "ff_ovr",
+  featureFlagVariant: "ff_var",
+  featureFlagAuditLog: "ff_log",
+  featureFlagExposure: "ff_exp",
+  // Experiments
+  experiment: "exp",
+  experimentVariant: "exp_var",
+  experimentTreatment: "exp_trt",
+  // Internal feature flags (voidhash-internal product gating)
+  internalFeatureFlagOverride: "iff_ovr",
+  // Organization-scoped paywall image asset library
+  paywallAsset: "pw_asset",
+  // Voidhash AI chat persistence (the chat id is minted client-side; this
+  // prefix is used for server-side fallbacks and stored attachment objects)
+  aiChat: "ai_chat",
+  aiChatAttachment: "ai_att",
+  // Per-turn AI checkpoint pre-image row (server-minted).
+  aiCheckpoint: "ai_ckpt",
+  // Internal voidhash product feedback (distinct from any future customer-facing
+  // feedback-collection product, which could own the plain `fb` prefix)
+  voidhashFeedback: "vh_fb",
+  // VoidQL analytics
+  analyticsSavedQuery: "an_sq",
+  // Push notifications (push_ namespace avoids the entrenched ppn webhook domain)
+  pushNotificationConfig: "push_conf",
+  pushDeviceToken: "push_tok",
+  personPushDeviceToken: "push_person_tok",
+  pushNotificationSend: "push_send",
+  pushNotificationDelivery: "push_del",
+  pushNotificationDeliveryAttempt: "push_att",
+} as const;
+
+export const generateId = <TPrefix extends keyof typeof prefixes>(prefix: TPrefix) =>
+  `${prefixes[prefix]}_${createId()}`;
diff --git a/packages/core/src/utils/index.ts b/packages/core/src/utils/index.ts
new file mode 100644
index 000000000..fd0f00808
--- /dev/null
+++ b/packages/core/src/utils/index.ts
@@ -0,0 +1,6 @@
+export * from "./create-short-id.ts";
+export * from "./create-slug.ts";
+export * from "./first-defined-string.ts";
+export * from "./generate-id.ts";
+export * from "./permissions.ts";
+export * from "./sdk.ts";
diff --git a/packages/core/src/utils/permissions.ts b/packages/core/src/utils/permissions.ts
new file mode 100644
index 000000000..df4cc6b24
--- /dev/null
+++ b/packages/core/src/utils/permissions.ts
@@ -0,0 +1,82 @@
+import type { OrganizationPermission, ProjectPermission } from "@voidhash/lib";
+import { Effect } from "effect";
+
+import { ActionForbiddenError, type AnyAuthSession, AuthSession } from "../domain/auth/Auth.ts";
+
+/**
+ * Resolve the project the caller is acting on from the active session. API
+ * keys and publishable/secret keys carry exactly one project; for user
+ * sessions we surface the first project since these endpoints today don't
+ * accept an explicit project id. Fails with `ActionForbiddenError` when no
+ * project is in scope.
+ */
+export const extractAuthorizedProjectId = (authSession: AnyAuthSession) =>
+  Effect.gen(function* () {
+    const projectId = authSession.projects[0]?.id;
+    if (!projectId) {
+      return yield* Effect.fail(
+        new ActionForbiddenError({
+          message: "No project found for this authentication method.",
+        }),
+      );
+    }
+    return projectId;
+  });
+
+/**
+ * Whether the session is a member of `organizationId`. Any org that appears in
+ * the session is one the caller belongs to — the least-privileged check (no
+ * specific permission required), for org-scoped features every member may use
+ * (e.g. the asset library and AI chats). Pure over the session, so it is
+ * unit-testable without a live session.
+ */
+export const isSessionOrganizationMember = (
+  session: AnyAuthSession,
+  organizationId: string,
+): boolean => session.organizations.some((o) => o.id === organizationId);
+
+/**
+ * Whether the session has access to `projectId` under `organizationId`. The
+ * org match guards against trusting a project id spoofed from the request body.
+ */
+export const isSessionProjectMember = (
+  session: AnyAuthSession,
+  projectId: string,
+  organizationId: string,
+): boolean =>
+  session.projects.some((p) => p.id === projectId && p.organizationId === organizationId);
+
+export const checkProjectPermission = (
+  projectId: string,
+  permission: ProjectPermission,
+  message: string,
+) =>
+  Effect.gen(function* () {
+    const session = yield* AuthSession;
+    const hasPermission = session?.projects.some(
+      (p) => p.id === projectId && p.permissions.includes(permission),
+    );
+    return yield* processPermissionCheck(hasPermission, message);
+  });
+
+export const checkOrganizationPermission = (
+  organizationId: string,
+  permission: OrganizationPermission,
+  message: string,
+) =>
+  Effect.gen(function* () {
+    const session = yield* AuthSession;
+    const hasPermission = session?.organizations.some(
+      (o) => o.id === organizationId && o.permissions.includes(permission),
+    );
+    return yield* processPermissionCheck(hasPermission, message);
+  });
+
+const processPermissionCheck = (hasPermission: boolean | undefined, message: string) =>
+  Effect.gen(function* () {
+    if (!hasPermission) {
+      yield* Effect.logWarning(message);
+      return yield* Effect.fail(new ActionForbiddenError({ message }));
+    }
+    return true;
+  });
diff --git a/packages/core/src/utils/sdk.ts b/packages/core/src/utils/sdk.ts
new file mode 100644
index 000000000..e7e007099
--- /dev/null
+++ b/packages/core/src/utils/sdk.ts
@@ -0,0 +1,3 @@
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+
+export const isAnonymousId = (id: string) => id.startsWith(ANONYMOUS_USER_ID_PREFIX);
diff --git a/packages/core/sst-env.d.ts b/packages/core/sst-env.d.ts
new file mode 100644
index 000000000..eec65b9bd
--- /dev/null
+++ b/packages/core/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst";
+export {};
diff --git a/packages/core/test/domain/analytics/Analytics.test.ts b/packages/core/test/domain/analytics/Analytics.test.ts
new file mode 100644
index 000000000..8e9a233c5
--- /dev/null
+++ b/packages/core/test/domain/analytics/Analytics.test.ts
@@ -0,0 +1,97 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  type AnalyticsDataPoint,
+  avgDataPoints,
+  isReservedAnalyticsField,
+  isSupportedRevenueFilterField,
+  sumDataPoints,
+} from "../../../src/domain/analytics/Analytics.ts";
+
+/** Fresh data point builder — one object per use, no shared mutable state. */
+const point = (
+  value: number,
+  timestamp = new Date("2026-01-01T00:00:00Z"),
+): AnalyticsDataPoint => ({
+  timestamp,
+  value,
+});
+
+describe("sumDataPoints", () => {
+  it("returns 0 for an empty array", () => {
+    expect(sumDataPoints([])).toBe(0);
+  });
+
+  it("returns the single value for a one-element array", () => {
+    expect(sumDataPoints([point(42)])).toBe(42);
+  });
+
+  it("returns the arithmetic sum for multiple data points", () => {
+    expect(sumDataPoints([point(10), point(20), point(30)])).toBe(60);
+  });
+
+  it("handles negative and fractional values", () => {
+    expect(sumDataPoints([point(-5), point(2.5), point(2.5)])).toBe(0);
+  });
+});
+
+describe("avgDataPoints", () => {
+  it("returns 0 for an empty array (no division by zero)", () => {
+    expect(avgDataPoints([])).toBe(0);
+  });
+
+  it("returns the single value for a one-element array", () => {
+    expect(avgDataPoints([point(42)])).toBe(42);
+  });
+
+  it("returns the mean for multiple data points", () => {
+    expect(avgDataPoints([point(10), point(20), point(30)])).toBe(20);
+  });
+
+  it("can return a fractional mean", () => {
+    expect(avgDataPoints([point(1), point(2)])).toBe(1.5);
+  });
+});
+
+describe("isSupportedRevenueFilterField", () => {
+  it.each(["project.id", "product.id", "provider.environment", "subscription.status"])(
+    "returns true for the supported field %s",
+    (field) => {
+      expect(isSupportedRevenueFilterField(field)).toBe(true);
+    },
+  );
+
+  it("returns false for an unknown field", () => {
+    expect(isSupportedRevenueFilterField("foo.bar")).toBe(false);
+  });
+
+  it("returns false for a partial / prefix match (exact membership only)", () => {
+    expect(isSupportedRevenueFilterField("project")).toBe(false);
+    expect(isSupportedRevenueFilterField("project.id.extra")).toBe(false);
+  });
+
+  it("returns false for an empty string", () => {
+    expect(isSupportedRevenueFilterField("")).toBe(false);
+  });
+});
+
+describe("isReservedAnalyticsField", () => {
+  it.each(["event.name", "person.properties.email", "event.properties.url", "context.app.version"])(
+    "returns true for a field with the reserved prefix in %s",
+    (field) => {
+      expect(isReservedAnalyticsField(field)).toBe(true);
+    },
+  );
+
+  it("returns false for a non-reserved field", () => {
+    expect(isReservedAnalyticsField("project.id")).toBe(false);
+  });
+
+  it("returns false when the prefix only appears mid-string (must be a prefix)", () => {
+    expect(isReservedAnalyticsField("foo.event.name")).toBe(false);
+  });
+
+  it("returns false for an empty string", () => {
+    expect(isReservedAnalyticsField("")).toBe(false);
+  });
+});
diff --git a/packages/core/test/domain/analytics/filter-compiler.test.ts b/packages/core/test/domain/analytics/filter-compiler.test.ts
new file mode 100644
index 000000000..81e06b8f8
--- /dev/null
+++ b/packages/core/test/domain/analytics/filter-compiler.test.ts
@@ -0,0 +1,260 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import {
+  type AnalyticsFilter,
+  compileAnalyticsFilter,
+  InvalidAnalyticsQueryError,
+  UnsupportedAnalyticsFilterError,
+} from "../../../src/domain/analytics/Analytics.ts";
+
+/**
+ * The compiler is a pure `Effect` so each assertion runs the effect with
+ * `Effect.runPromise` (success path) or moves the typed error into the success
+ * channel with `Effect.flip` (failure path), mirroring SecretBox.test.ts.
+ */
+
+// Every revenue field is supported in these tests unless a case narrows it.
+const ALL_FIELDS = [
+  "project.id",
+  "product.id",
+  "provider.environment",
+  "subscription.status",
+] as const;
+
+// Fresh availableProjectIds list per test — never share mutable arrays.
+const PROJECTS = () => ["proj_a", "proj_b", "proj_c"];
+
+// Mirrors the `op` union of the predicate arm of AnalyticsFilter.
+type PredicateOp = Extract<AnalyticsFilter, { type: "predicate" }>["op"];
+type PredicateValue = Extract<AnalyticsFilter, { type: "predicate" }>["value"];
+
+const predicate = (field: string, op: PredicateOp, value?: PredicateValue): AnalyticsFilter => ({
+  field,
+  op,
+  type: "predicate",
+  value,
+});
+
+const and = (...filters: AnalyticsFilter[]): AnalyticsFilter => ({ filters, type: "and" });
+const or = (...filters: AnalyticsFilter[]): AnalyticsFilter => ({ filters, type: "or" });
+const not = (filter: AnalyticsFilter): AnalyticsFilter => ({ filter, type: "not" });
+
+const compile = (filter: AnalyticsFilter | undefined, availableProjectIds = PROJECTS()) =>
+  Effect.runPromise(
+    compileAnalyticsFilter({
+      availableProjectIds,
+      filter,
+      supportedFields: ALL_FIELDS,
+    }),
+  );
+
+const compileExpectError = (
+  filter: AnalyticsFilter,
+  options?: { supportedFields?: readonly string[] },
+) =>
+  Effect.runPromise(
+    compileAnalyticsFilter({
+      availableProjectIds: PROJECTS(),
+      filter,
+      supportedFields: options?.supportedFields ?? ALL_FIELDS,
+    }).pipe(Effect.flip),
+  );
+
+describe("compileAnalyticsFilter", () => {
+  it("with no filter, defaults projectIds to all available projects", async () => {
+    const result = await compile(undefined);
+    expect(result.projectIds).toEqual(["proj_a", "proj_b", "proj_c"]);
+    expect(result.productIds).toBeUndefined();
+    expect(result.providerEnvironments).toBeUndefined();
+    expect(result.subscriptionStatuses).toBeUndefined();
+  });
+
+  it("project.id eq constrains to the matching available project", async () => {
+    const result = await compile(predicate("project.id", "eq", "proj_b"));
+    expect(result.projectIds).toEqual(["proj_b"]);
+  });
+
+  it("project.id in constrains to multiple matching available projects", async () => {
+    const result = await compile(predicate("project.id", "in", ["proj_a", "proj_c"]));
+    expect(result.projectIds).toEqual(["proj_a", "proj_c"]);
+  });
+
+  it("project.id neq excludes the matching project", async () => {
+    const result = await compile(predicate("project.id", "neq", "proj_b"));
+    expect(result.projectIds).toEqual(["proj_a", "proj_c"]);
+  });
+
+  it("project.id not_in excludes multiple projects", async () => {
+    const result = await compile(predicate("project.id", "not_in", ["proj_a", "proj_b"]));
+    expect(result.projectIds).toEqual(["proj_c"]);
+  });
+
+  it("project.id eq for an unavailable id yields no projects (constrained to availableProjectIds)", async () => {
+    const result = await compile(predicate("project.id", "eq", "proj_not_mine"));
+    expect(result.projectIds).toEqual([]);
+  });
+
+  it("product.id eq extracts the string value into productIds", async () => {
+    const result = await compile(predicate("product.id", "eq", "prod_1"));
+    expect(result.productIds).toEqual(["prod_1"]);
+    // projectIds falls back to all available when not constrained.
+    expect(result.projectIds).toEqual(["proj_a", "proj_b", "proj_c"]);
+  });
+
+  it("product.id in extracts the string array into productIds", async () => {
+    const result = await compile(predicate("product.id", "in", ["prod_1", "prod_2"]));
+    expect(result.productIds).toEqual(["prod_1", "prod_2"]);
+  });
+
+  it("provider.environment eq extracts the numeric value", async () => {
+    const result = await compile(predicate("provider.environment", "eq", 1));
+    expect(result.providerEnvironments).toEqual([1]);
+  });
+
+  it("subscription.status eq extracts the numeric value", async () => {
+    const result = await compile(predicate("subscription.status", "eq", 2));
+    expect(result.subscriptionStatuses).toEqual([2]);
+  });
+
+  it("AND of two predicates on the same field intersects their constraints", async () => {
+    const result = await compile(
+      and(
+        predicate("project.id", "in", ["proj_a", "proj_b"]),
+        predicate("project.id", "in", ["proj_b", "proj_c"]),
+      ),
+    );
+    expect(result.projectIds).toEqual(["proj_b"]);
+  });
+
+  it("AND of predicates on different fields keeps each field's constraint", async () => {
+    const result = await compile(
+      and(
+        predicate("project.id", "eq", "proj_a"),
+        predicate("product.id", "in", ["prod_1", "prod_2"]),
+      ),
+    );
+    expect(result.projectIds).toEqual(["proj_a"]);
+    expect(result.productIds).toEqual(["prod_1", "prod_2"]);
+  });
+
+  it("OR of predicates on the same field unions their values", async () => {
+    const result = await compile(
+      or(predicate("product.id", "eq", "prod_1"), predicate("product.id", "eq", "prod_2")),
+    );
+    expect(result.productIds).toEqual(["prod_1", "prod_2"]);
+  });
+
+  it("OR de-duplicates overlapping values within the same field", async () => {
+    const result = await compile(
+      or(
+        predicate("product.id", "in", ["prod_1", "prod_2"]),
+        predicate("product.id", "in", ["prod_2", "prod_3"]),
+      ),
+    );
+    expect(result.productIds).toEqual(["prod_1", "prod_2", "prod_3"]);
+  });
+
+  it("OR of two single-field branches on different fields is accepted (each side has one field)", async () => {
+    // The mixed-field guard only fires when ONE side of the OR already spans
+    // two or more fields; two single-field branches each carry one field, so
+    // the union is permitted and constraints land on their respective fields.
+    const result = await compile(
+      or(predicate("project.id", "eq", "proj_a"), predicate("product.id", "eq", "prod_1")),
+    );
+    expect(result.projectIds).toEqual(["proj_a"]);
+    expect(result.productIds).toEqual(["prod_1"]);
+  });
+
+  it("OR with a multi-field branch rejects with UnsupportedAnalyticsFilterError", async () => {
+    // Nesting a two-field AND inside the OR makes one side span multiple fields,
+    // which trips the single-field-only OR restriction.
+    const error = await compileExpectError(
+      or(
+        and(predicate("project.id", "eq", "proj_a"), predicate("product.id", "eq", "prod_1")),
+        predicate("product.id", "eq", "prod_2"),
+      ),
+    );
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsFilterError);
+    expect((error as UnsupportedAnalyticsFilterError).field).toBe("or");
+    expect((error as UnsupportedAnalyticsFilterError).message).toContain("single field");
+  });
+
+  it("NOT project.id(eq) inverts to neq (excludes the project)", async () => {
+    const result = await compile(not(predicate("project.id", "eq", "proj_b")));
+    expect(result.projectIds).toEqual(["proj_a", "proj_c"]);
+  });
+
+  it("NOT project.id(in) inverts to not_in (excludes the listed projects)", async () => {
+    const result = await compile(not(predicate("project.id", "in", ["proj_a", "proj_b"])));
+    expect(result.projectIds).toEqual(["proj_c"]);
+  });
+
+  it("NOT on a non-project.id field rejects with UnsupportedAnalyticsFilterError", async () => {
+    const error = await compileExpectError(not(predicate("product.id", "eq", "prod_1")));
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsFilterError);
+    expect((error as UnsupportedAnalyticsFilterError).field).toBe("not");
+  });
+
+  it("NOT wrapping a non-predicate (and) rejects with UnsupportedAnalyticsFilterError", async () => {
+    const error = await compileExpectError(not(and(predicate("project.id", "eq", "proj_a"))));
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsFilterError);
+    expect((error as UnsupportedAnalyticsFilterError).field).toBe("not");
+  });
+
+  it("an unknown field rejects with UnsupportedAnalyticsFilterError (not supported)", async () => {
+    const error = await compileExpectError(predicate("totally.unknown", "eq", "x"));
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsFilterError);
+    expect((error as UnsupportedAnalyticsFilterError).field).toBe("totally.unknown");
+    expect((error as UnsupportedAnalyticsFilterError).message).toContain("is not supported");
+  });
+
+  it("a reserved field prefix rejects with the reserved-domain message", async () => {
+    const error = await compileExpectError(predicate("event.name", "eq", "signup"));
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsFilterError);
+    expect((error as UnsupportedAnalyticsFilterError).message).toContain(
+      "reserved for a future analytics domain",
+    );
+  });
+
+  it("a supported-by-registry field excluded from this insight rejects as not-supported-for-insight", async () => {
+    const error = await compileExpectError(predicate("product.id", "eq", "prod_1"), {
+      // product.id is a real revenue field but this insight only allows project.id.
+      supportedFields: ["project.id"],
+    });
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsFilterError);
+    expect((error as UnsupportedAnalyticsFilterError).message).toContain(
+      "is not supported for this insight",
+    );
+  });
+
+  it("a string value for a numeric field rejects with InvalidAnalyticsQueryError", async () => {
+    const error = await compileExpectError(predicate("provider.environment", "eq", "not-a-number"));
+    expect(error).toBeInstanceOf(InvalidAnalyticsQueryError);
+    expect((error as InvalidAnalyticsQueryError).message).toContain("expects numeric values");
+  });
+
+  it("a numeric value for a string field rejects with InvalidAnalyticsQueryError", async () => {
+    const error = await compileExpectError(predicate("product.id", "eq", 42));
+    expect(error).toBeInstanceOf(InvalidAnalyticsQueryError);
+    expect((error as InvalidAnalyticsQueryError).message).toContain("expects string values");
+  });
+
+  it("an unsupported operator (gt) on a supported field rejects with UnsupportedAnalyticsFilterError", async () => {
+    const error = await compileExpectError(predicate("project.id", "gt", "proj_a"));
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsFilterError);
+    expect((error as UnsupportedAnalyticsFilterError).field).toBe("project.id");
+    expect((error as UnsupportedAnalyticsFilterError).message).toContain("is not supported");
+  });
+
+  it("compiles nested AND/OR structures recursively", async () => {
+    const result = await compile(
+      and(
+        predicate("project.id", "in", ["proj_a", "proj_b"]),
+        or(predicate("product.id", "eq", "prod_1"), predicate("product.id", "eq", "prod_2")),
+      ),
+    );
+    expect(result.projectIds).toEqual(["proj_a", "proj_b"]);
+    expect(result.productIds).toEqual(["prod_1", "prod_2"]);
+  });
+});
diff --git a/packages/core/test/domain/analytics/insights.test.ts b/packages/core/test/domain/analytics/insights.test.ts
new file mode 100644
index 000000000..11ade4425
--- /dev/null
+++ b/packages/core/test/domain/analytics/insights.test.ts
@@ -0,0 +1,76 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import {
+  type AnalyticsInsightQuery,
+  BUILT_IN_INSIGHTS,
+  ensureNoBreakdowns,
+  getBuiltInInsight,
+  UnknownInsightError,
+  UnsupportedAnalyticsBreakdownError,
+} from "../../../src/domain/analytics/Analytics.ts";
+
+/** A fresh breakdown entry for `AnalyticsInsightQuery["breakdowns"]`. */
+const breakdown = (
+  overrides: Partial<{ field: string; limit?: number; order?: "asc" | "desc" }> = {},
+): NonNullable<AnalyticsInsightQuery["breakdowns"]>[number] => ({
+  field: "product.id",
+  ...overrides,
+});
+
+describe("getBuiltInInsight", () => {
+  it("returns the definition for a known insightId", async () => {
+    const insight = await Effect.runPromise(getBuiltInInsight("builtin/revenue"));
+    expect(insight.id).toBe("builtin/revenue");
+    expect(insight.resultKind).toBe("metric");
+  });
+
+  it("resolves every BUILT_IN_INSIGHTS entry by its own id", async () => {
+    for (const expected of BUILT_IN_INSIGHTS) {
+      const resolved = await Effect.runPromise(getBuiltInInsight(expected.id));
+      // The registry must return the same definition object it was seeded with.
+      expect(resolved).toBe(expected);
+    }
+  });
+
+  it("fails with a typed UnknownInsightError for an unknown insightId", async () => {
+    const error = await Effect.runPromise(
+      getBuiltInInsight("builtin/does-not-exist").pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(UnknownInsightError);
+    expect(error.insightId).toBe("builtin/does-not-exist");
+    expect(error.message).toContain("builtin/does-not-exist");
+  });
+
+  it("fails with UnknownInsightError for an empty insightId", async () => {
+    const error = await Effect.runPromise(getBuiltInInsight("").pipe(Effect.flip));
+    expect(error).toBeInstanceOf(UnknownInsightError);
+    expect(error.insightId).toBe("");
+  });
+});
+
+describe("ensureNoBreakdowns", () => {
+  it("succeeds when breakdowns is undefined", async () => {
+    await expect(Effect.runPromise(ensureNoBreakdowns(undefined))).resolves.toBeUndefined();
+  });
+
+  it("succeeds when breakdowns is an empty array", async () => {
+    await expect(Effect.runPromise(ensureNoBreakdowns([]))).resolves.toBeUndefined();
+  });
+
+  it("fails with a typed UnsupportedAnalyticsBreakdownError for a non-empty array", async () => {
+    const error = await Effect.runPromise(ensureNoBreakdowns([breakdown()]).pipe(Effect.flip));
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsBreakdownError);
+    expect(error.field).toBe("product.id");
+  });
+
+  it("reports the first breakdown's field on the error", async () => {
+    const error = await Effect.runPromise(
+      ensureNoBreakdowns([breakdown({ field: "subscription.status" }), breakdown()]).pipe(
+        Effect.flip,
+      ),
+    );
+    expect(error).toBeInstanceOf(UnsupportedAnalyticsBreakdownError);
+    expect(error.field).toBe("subscription.status");
+  });
+});
diff --git a/packages/core/test/domain/analytics/resolve-time-range.test.ts b/packages/core/test/domain/analytics/resolve-time-range.test.ts
new file mode 100644
index 000000000..e96437b3a
--- /dev/null
+++ b/packages/core/test/domain/analytics/resolve-time-range.test.ts
@@ -0,0 +1,187 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import {
+  type AnalyticsTimeRange,
+  InvalidTimeRangeError,
+  resolveTimeRange,
+} from "../../../src/domain/analytics/Analytics.ts";
+
+/**
+ * `resolveTimeRange` reads the wall clock via `new Date()` rather than Effect's
+ * `Clock`, so `TestClock` cannot pin "now" (it only moves the Effect clock, not
+ * `Date.now`). Instead we sandwich each call between two truncated-second
+ * snapshots and assert the resolved `end` lands inside that `[before, after]`
+ * window. Start boundaries are then derived from the *resolved* `end` so the
+ * assertions stay deterministic even across a second-tick during the test.
+ */
+const truncateToSecond = (date: Date): Date => new Date(Math.floor(date.getTime() / 1000) * 1000);
+
+const preset = (
+  p: Exclude<AnalyticsTimeRange, { preset: "custom" }>["preset"],
+): AnalyticsTimeRange => ({ preset: p });
+
+const customRange = (start: Date, end: Date): AnalyticsTimeRange => ({
+  end,
+  preset: "custom",
+  start,
+});
+
+const run = (timeRange: AnalyticsTimeRange) => Effect.runPromise(resolveTimeRange(timeRange));
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+
+describe("resolveTimeRange — presets (relative windows)", () => {
+  it.each([
+    { days: 7, label: "last_7d" },
+    { days: 30, label: "last_30d" },
+    { days: 90, label: "last_90d" },
+    { days: 365, label: "last_365d" },
+  ] as const)("'$label' spans exactly $days days ending at now", async ({ days, label }) => {
+    const before = truncateToSecond(new Date());
+    const { end, start } = await run(preset(label));
+    const after = truncateToSecond(new Date());
+
+    // end is the resolved "now", inside the sandwich window.
+    expect(end.getTime()).toBeGreaterThanOrEqual(before.getTime());
+    expect(end.getTime()).toBeLessThanOrEqual(after.getTime());
+    // start is precisely `days` * 24h before that same resolved end.
+    expect(end.getTime() - start.getTime()).toBe(days * DAY_MS);
+    expect(start.getTime()).toBeLessThan(end.getTime());
+  });
+});
+
+describe("resolveTimeRange — presets (calendar boundaries)", () => {
+  it("'today' starts at local midnight of the resolved end's day", async () => {
+    const before = truncateToSecond(new Date());
+    const { end, start } = await run(preset("today"));
+    const after = truncateToSecond(new Date());
+
+    expect(end.getTime()).toBeGreaterThanOrEqual(before.getTime());
+    expect(end.getTime()).toBeLessThanOrEqual(after.getTime());
+
+    const expectedStart = new Date(end.getFullYear(), end.getMonth(), end.getDate());
+    expect(start.getTime()).toBe(expectedStart.getTime());
+    // Local midnight: no sub-day components.
+    expect(start.getHours()).toBe(0);
+    expect(start.getMinutes()).toBe(0);
+    expect(start.getSeconds()).toBe(0);
+  });
+
+  it("'mtd' starts at the first day of the resolved end's month", async () => {
+    const { end, start } = await run(preset("mtd"));
+
+    const expectedStart = new Date(end.getFullYear(), end.getMonth(), 1);
+    expect(start.getTime()).toBe(expectedStart.getTime());
+    expect(start.getDate()).toBe(1);
+    expect(start.getHours()).toBe(0);
+  });
+
+  it("'qtd' starts at the first day of the resolved end's quarter", async () => {
+    const { end, start } = await run(preset("qtd"));
+
+    const quarter = Math.floor(end.getMonth() / 3);
+    const expectedStart = new Date(end.getFullYear(), quarter * 3, 1);
+    expect(start.getTime()).toBe(expectedStart.getTime());
+    // Quarter-start month is always one of Jan/Apr/Jul/Oct (0,3,6,9).
+    expect(start.getMonth() % 3).toBe(0);
+    expect(start.getDate()).toBe(1);
+  });
+
+  it("'ytd' starts at January 1st of the resolved end's year", async () => {
+    const { end, start } = await run(preset("ytd"));
+
+    const expectedStart = new Date(end.getFullYear(), 0, 1);
+    expect(start.getTime()).toBe(expectedStart.getTime());
+    expect(start.getMonth()).toBe(0);
+    expect(start.getDate()).toBe(1);
+    expect(start.getHours()).toBe(0);
+  });
+});
+
+describe("resolveTimeRange — custom window", () => {
+  it("passes through a valid start < end, truncated to second precision", async () => {
+    const start = new Date("2026-01-01T00:00:00.123Z");
+    const end = new Date("2026-02-01T12:30:45.987Z");
+
+    const result = await run(customRange(start, end));
+
+    expect(result.start.getTime()).toBe(truncateToSecond(start).getTime());
+    expect(result.end.getTime()).toBe(truncateToSecond(end).getTime());
+    // Sub-second milliseconds are floored away.
+    expect(result.start.getMilliseconds()).toBe(0);
+    expect(result.end.getMilliseconds()).toBe(0);
+  });
+
+  it("ignores the wall clock entirely — custom end is the input end, not 'now'", async () => {
+    // A historical window far in the past: the resolved end must be the input
+    // end, proving the resolver does not substitute the current time here.
+    const start = new Date("2020-03-01T00:00:00.000Z");
+    const end = new Date("2020-03-31T23:59:59.000Z");
+
+    const result = await run(customRange(start, end));
+
+    expect(result.end.getTime()).toBe(end.getTime());
+    expect(result.start.getTime()).toBe(start.getTime());
+    expect(result.end.getTime()).toBeLessThan(Date.now());
+  });
+
+  it("accepts a window whose only difference is sub-second (start < end after raw compare)", async () => {
+    // start and end compare as start < end on the raw Date objects even though
+    // they collapse to the same truncated second; the validation uses the raw
+    // values so this is accepted (no rejection on equal-after-truncation).
+    const start = new Date("2026-01-01T00:00:00.100Z");
+    const end = new Date("2026-01-01T00:00:00.900Z");
+
+    const result = await run(customRange(start, end));
+
+    expect(result.start.getTime()).toBe(truncateToSecond(start).getTime());
+    expect(result.end.getTime()).toBe(truncateToSecond(end).getTime());
+    expect(result.start.getTime()).toBe(result.end.getTime());
+  });
+
+  it("rejects start > end with a typed InvalidTimeRangeError", async () => {
+    const start = new Date("2026-02-01T00:00:00.000Z");
+    const end = new Date("2026-01-01T00:00:00.000Z");
+
+    // `Effect.flip` moves the typed error into the success channel for a direct
+    // instanceof assertion (mirrors SecretBox.test.ts).
+    const error = await Effect.runPromise(
+      resolveTimeRange(customRange(start, end)).pipe(Effect.flip),
+    );
+
+    expect(error).toBeInstanceOf(InvalidTimeRangeError);
+    expect(error.message).toBe("start must be before end");
+  });
+
+  it("accepts equal start === end (boundary: start > end is false)", async () => {
+    // The guard is strictly `start > end`, so an identical instant is allowed.
+    const instant = new Date("2026-05-15T08:00:00.000Z");
+
+    const result = await run(customRange(new Date(instant), new Date(instant)));
+
+    expect(result.start.getTime()).toBe(truncateToSecond(instant).getTime());
+    expect(result.end.getTime()).toBe(truncateToSecond(instant).getTime());
+  });
+});
+
+describe("resolveTimeRange — second-precision invariant", () => {
+  it("every preset result is truncated to whole seconds (no milliseconds)", async () => {
+    const presets = [
+      "today",
+      "last_7d",
+      "last_30d",
+      "last_90d",
+      "last_365d",
+      "mtd",
+      "qtd",
+      "ytd",
+    ] as const;
+
+    for (const p of presets) {
+      const { end, start } = await run(preset(p));
+      expect(end.getMilliseconds()).toBe(0);
+      expect(start.getMilliseconds()).toBe(0);
+    }
+  });
+});
diff --git a/packages/core/test/domain/analyticsIngest/AnalyticsIngest.test.ts b/packages/core/test/domain/analyticsIngest/AnalyticsIngest.test.ts
new file mode 100644
index 000000000..142dbe45b
--- /dev/null
+++ b/packages/core/test/domain/analyticsIngest/AnalyticsIngest.test.ts
@@ -0,0 +1,873 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  ANONYMOUS_DISTINCT_ID_PREFIX,
+  buildAnalyticsWriterPlan,
+  buildDlqEvent,
+  computeCutoffIso,
+  extractInnerProperties,
+  extractPreviousDistinctId,
+  makeCapturedEventFromInternalAnalyticsEvent,
+  makeSnapshotResources,
+  parsePersonTraits,
+  sanitizeIdentifier,
+  toClickhouseTimestamp,
+  toFlag,
+  toPendingOverrideRow,
+  toPersonIdentityRow,
+  toPersonRow,
+  toProcessedEventRow,
+  validateBuiltInProcessorRules,
+  type AnalyticsWriterMessageType,
+  type CapturedEventV1Type,
+  type EventProcessorDlqV1,
+  type ProcessedEventV2Type,
+  type ProcessorPersonEventV1Type,
+  type ProcessorPersonIdentityEventV1Type,
+} from "../../../src/domain/analyticsIngest/AnalyticsIngest.ts";
+import { REVENUE_TRUSTED_SOURCE_TOPIC } from "../../../src/domain/internalAnalytics/InternalAnalyticsEvents.ts";
+
+// =============================================================================
+// Fixtures — const-returning builders, one fresh object per test.
+// =============================================================================
+
+/**
+ * A minimal valid {@link CapturedEventV1Type}. The two structural blocks that
+ * the processor validation cares about — `routing` and `properties` — are
+ * overridable; everything else is filler that keeps the shape type-valid.
+ */
+const capturedEvent = (
+  overrides: {
+    readonly event?: string;
+    readonly distinctId?: string;
+    readonly eventTimestamp?: string;
+    readonly properties?: CapturedEventV1Type["properties"];
+    readonly routing?: Partial<CapturedEventV1Type["routing"]>;
+  } = {},
+): CapturedEventV1Type => ({
+  schemaVersion: 1,
+  captureId: "cap_1",
+  token: "tok_1",
+  organizationId: "org_1",
+  projectId: "proj_1",
+  event: overrides.event ?? "page_view",
+  distinctId: overrides.distinctId ?? "user_1",
+  eventTimestamp: overrides.eventTimestamp ?? "2026-01-01T00:00:00.000Z",
+  receivedAt: "2026-01-01T00:00:00.000Z",
+  properties: overrides.properties ?? {},
+  context: {},
+  rawPayload: {},
+  request: { requestId: "req_1" },
+  routing: {
+    routeClass: "main",
+    targetTopic: "main.topic",
+    isHistorical: false,
+    skipEnrichment: false,
+    ...overrides.routing,
+  },
+});
+
+const processedEvent = (overrides: Partial<ProcessedEventV2Type> = {}): ProcessedEventV2Type => ({
+  captureId: "cap_1",
+  context: { ua: "test" },
+  distinctId: "user_1",
+  event: "page_view",
+  eventTimestamp: "2026-01-01T12:34:56.789Z",
+  groups: [],
+  identity: { distinctId: "user_1", mode: "full", personId: "person_1" },
+  organizationId: "org_1",
+  processedAt: "2026-01-02T01:02:03.004Z",
+  processedEventId: "ev_1",
+  projectId: "proj_1",
+  properties: { foo: "bar" },
+  request: { requestId: "req_1", path: "/capture" },
+  routing: {
+    lane: "main",
+    skipEnrichment: false,
+    sourceOffset: "42",
+    sourcePartition: 3,
+    sourceTopic: "main.topic",
+  },
+  schemaVersion: 2,
+  token: "tok_1",
+  ...overrides,
+});
+
+const personEvent = (
+  overrides: Partial<ProcessorPersonEventV1Type> = {},
+): ProcessorPersonEventV1Type => ({
+  changedAt: "2026-01-01T00:00:00.000Z",
+  personId: "person_1",
+  isArchived: false,
+  projectId: "proj_1",
+  schemaVersion: 1,
+  traits: { plan: "pro" },
+  version: 5,
+  ...overrides,
+});
+
+const personIdentityEvent = (
+  overrides: Partial<ProcessorPersonIdentityEventV1Type> = {},
+): ProcessorPersonIdentityEventV1Type => ({
+  changedAt: "2026-01-01T00:00:00.000Z",
+  personId: "person_1",
+  distinctId: "user_1",
+  isDeleted: false,
+  projectId: "proj_1",
+  schemaVersion: 1,
+  version: 1,
+  ...overrides,
+});
+
+const dlqInput = (
+  overrides: Partial<Omit<EventProcessorDlqV1, "failedAt" | "failureId" | "schemaVersion">> = {},
+): Omit<EventProcessorDlqV1, "failedAt" | "failureId" | "schemaVersion"> => ({
+  failureClass: "schema_rejected",
+  failureMessage: "boom",
+  headers: { "x-foo": "bar" },
+  lane: "main",
+  sourceOffset: "7",
+  sourcePartition: 1,
+  sourceTopic: "main.topic",
+  ...overrides,
+});
+
+// =============================================================================
+// parsePersonTraits
+// =============================================================================
+
+describe("parsePersonTraits", () => {
+  it("returns empty set and setOnce for empty properties", () => {
+    const result = parsePersonTraits({});
+    expect(result.ok).toBe(true);
+    if (!result.ok) throw new Error("expected ok");
+    expect(result.value.set).toEqual({});
+    expect(result.value.setOnce).toEqual({});
+  });
+
+  it("parses a $set object", () => {
+    const result = parsePersonTraits({ $set: { plan: "pro" } });
+    if (!result.ok) throw new Error("expected ok");
+    expect(result.value.set).toEqual({ plan: "pro" });
+    expect(result.value.setOnce).toEqual({});
+  });
+
+  it("parses a $set_once object", () => {
+    const result = parsePersonTraits({ $set_once: { firstSeen: "today" } });
+    if (!result.ok) throw new Error("expected ok");
+    expect(result.value.setOnce).toEqual({ firstSeen: "today" });
+    expect(result.value.set).toEqual({});
+  });
+
+  it("parses both $set and $set_once", () => {
+    const result = parsePersonTraits({
+      $set: { plan: "pro" },
+      $set_once: { firstSeen: "today" },
+    });
+    if (!result.ok) throw new Error("expected ok");
+    expect(result.value.set).toEqual({ plan: "pro" });
+    expect(result.value.setOnce).toEqual({ firstSeen: "today" });
+  });
+
+  it("rejects a non-object $set", () => {
+    const result = parsePersonTraits({ $set: "nope" });
+    expect(result.ok).toBe(false);
+    if (result.ok) throw new Error("expected failure");
+    expect(result.message).toBe("$set must be an object");
+  });
+
+  it("rejects a non-object $set_once", () => {
+    const result = parsePersonTraits({ $set_once: ["nope"] });
+    expect(result.ok).toBe(false);
+    if (result.ok) throw new Error("expected failure");
+    expect(result.message).toBe("$set_once must be an object");
+  });
+});
+
+// =============================================================================
+// extractInnerProperties
+// =============================================================================
+
+describe("extractInnerProperties", () => {
+  it("extracts a nested 'properties' object", () => {
+    const inner = { a: 1 };
+    expect(extractInnerProperties({ properties: inner, outer: 2 })).toBe(inner);
+  });
+
+  it("returns the input when 'properties' is missing", () => {
+    const input = { a: 1 };
+    expect(extractInnerProperties(input)).toBe(input);
+  });
+
+  it("returns the input when 'properties' is not an object", () => {
+    const input = { properties: "string" };
+    expect(extractInnerProperties(input)).toBe(input);
+  });
+
+  it("returns the input when 'properties' is an array (not a plain record)", () => {
+    const input = { properties: [1, 2, 3] };
+    expect(extractInnerProperties(input)).toBe(input);
+  });
+});
+
+// =============================================================================
+// validateBuiltInProcessorRules
+// =============================================================================
+
+describe("validateBuiltInProcessorRules", () => {
+  const now = new Date("2026-01-10T00:00:00.000Z");
+
+  it("accepts a valid main-lane event", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({ routing: { targetTopic: "main.topic" } }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBeUndefined();
+  });
+
+  it("rejects when the routing target does not match the source topic", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({ routing: { targetTopic: "other.topic" } }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("captured event routing target does not match source topic");
+  });
+
+  it("rejects a historical-lane event not marked isHistorical", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({
+        routing: { targetTopic: "main.topic", isHistorical: false },
+      }),
+      historicalMinAgeHours: 24,
+      lane: "historical",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("historical topic requires isHistorical=true");
+  });
+
+  it("rejects a main-lane event marked as historical", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({
+        routing: { targetTopic: "main.topic", isHistorical: true },
+      }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("non-historical lane received a historical captured event");
+  });
+
+  it("accepts a historical event older than the minimum age", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({
+        // 48h before `now`, minimum age 24h → old enough.
+        eventTimestamp: "2026-01-08T00:00:00.000Z",
+        routing: { targetTopic: "main.topic", isHistorical: true },
+      }),
+      historicalMinAgeHours: 24,
+      lane: "historical",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBeUndefined();
+  });
+
+  it("rejects a historical event newer than the minimum age", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({
+        // 1h before `now`, minimum age 24h → too new.
+        eventTimestamp: "2026-01-09T23:00:00.000Z",
+        routing: { targetTopic: "main.topic", isHistorical: true },
+      }),
+      historicalMinAgeHours: 24,
+      lane: "historical",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("historical event is newer than the configured minimum age");
+  });
+
+  it("rejects a non-object $set in properties", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({ properties: { $set: "nope" } }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("$set must be an object");
+  });
+
+  it("rejects a non-object $set_once in properties", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({ properties: { $set_once: 42 } }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("$set_once must be an object");
+  });
+
+  it("rejects a non-boolean $process_person_profile", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({ properties: { $process_person_profile: "yes" } }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("$process_person_profile must be a boolean");
+  });
+
+  it("rejects an $identify without $previous_distinct_id", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({ event: "$identify", properties: {} }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("$identify requires properties.$previous_distinct_id");
+  });
+
+  it("rejects an $identify with an empty $previous_distinct_id", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({
+        event: "$identify",
+        properties: { $previous_distinct_id: "" },
+      }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("$identify requires properties.$previous_distinct_id");
+  });
+
+  it("rejects an $identify whose target distinct id uses the anonymous prefix", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({
+        event: "$identify",
+        distinctId: `${ANONYMOUS_DISTINCT_ID_PREFIX}abc`,
+        properties: { $previous_distinct_id: "prev_1" },
+      }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBe("$identify target distinct id cannot use the anonymous prefix");
+  });
+
+  it("accepts a valid $identify (previous id present, non-anonymous target)", () => {
+    const result = validateBuiltInProcessorRules({
+      capturedEvent: capturedEvent({
+        event: "$identify",
+        distinctId: "user_1",
+        properties: { $previous_distinct_id: "prev_1" },
+      }),
+      historicalMinAgeHours: 24,
+      lane: "main",
+      now,
+      sourceTopic: "main.topic",
+    });
+    expect(result).toBeUndefined();
+  });
+});
+
+// =============================================================================
+// buildDlqEvent
+// =============================================================================
+
+describe("buildDlqEvent", () => {
+  it("stamps a failedAt ISO timestamp and a schemaVersion of 1", () => {
+    const event = buildDlqEvent(dlqInput());
+    expect(event.schemaVersion).toBe(1);
+    // failedAt round-trips through Date without losing precision.
+    expect(new Date(event.failedAt).toISOString()).toBe(event.failedAt);
+  });
+
+  it("generates a unique UUID failureId per call", () => {
+    const a = buildDlqEvent(dlqInput());
+    const b = buildDlqEvent(dlqInput());
+    expect(a.failureId).toMatch(/^[0-9a-f-]{36}$/i);
+    expect(a.failureId).not.toBe(b.failureId);
+  });
+
+  it("includes the optional fields when provided", () => {
+    const event = buildDlqEvent(
+      dlqInput({
+        captureId: "cap_x",
+        distinctId: "user_x",
+        projectId: "proj_x",
+        rawKey: "key_x",
+        rawValue: "value_x",
+        token: "tok_x",
+      }),
+    );
+    expect(event.captureId).toBe("cap_x");
+    expect(event.distinctId).toBe("user_x");
+    expect(event.projectId).toBe("proj_x");
+    expect(event.rawKey).toBe("key_x");
+    expect(event.rawValue).toBe("value_x");
+    expect(event.token).toBe("tok_x");
+  });
+
+  it("omits the optional fields when not provided", () => {
+    const event = buildDlqEvent(dlqInput());
+    expect("captureId" in event).toBe(false);
+    expect("distinctId" in event).toBe(false);
+    expect("projectId" in event).toBe(false);
+    expect("rawKey" in event).toBe(false);
+    expect("rawValue" in event).toBe(false);
+    expect("token" in event).toBe(false);
+  });
+
+  it("carries the non-optional fields straight through", () => {
+    const event = buildDlqEvent(dlqInput({ failureClass: "policy_rejected" }));
+    expect(event.failureClass).toBe("policy_rejected");
+    expect(event.failureMessage).toBe("boom");
+    expect(event.headers).toEqual({ "x-foo": "bar" });
+    expect(event.lane).toBe("main");
+    expect(event.sourceOffset).toBe("7");
+    expect(event.sourcePartition).toBe(1);
+    expect(event.sourceTopic).toBe("main.topic");
+  });
+});
+
+// =============================================================================
+// toFlag / toClickhouseTimestamp / extractPreviousDistinctId
+// =============================================================================
+
+describe("toFlag", () => {
+  it("converts true to 1", () => {
+    expect(toFlag(true)).toBe(1);
+  });
+
+  it("converts false to 0", () => {
+    expect(toFlag(false)).toBe(0);
+  });
+});
+
+describe("toClickhouseTimestamp", () => {
+  it("converts an ISO string to ClickHouse 'YYYY-MM-DD HH:MM:SS.mmm' UTC format", () => {
+    expect(toClickhouseTimestamp("2026-01-02T03:04:05.006Z")).toBe("2026-01-02 03:04:05.006");
+  });
+
+  it("zero-pads each part", () => {
+    expect(toClickhouseTimestamp("2026-09-09T09:09:09.009Z")).toBe("2026-09-09 09:09:09.009");
+  });
+
+  it("throws on an invalid timestamp", () => {
+    expect(() => toClickhouseTimestamp("not-a-date")).toThrow("Invalid timestamp: not-a-date");
+  });
+});
+
+describe("extractPreviousDistinctId", () => {
+  it("extracts from a nested $previous_distinct_id property", () => {
+    const event = processedEvent({ properties: { $previous_distinct_id: "prev_1" } });
+    expect(extractPreviousDistinctId(event)).toBe("prev_1");
+  });
+
+  it("extracts from a doubly-nested properties wrapper", () => {
+    const event = processedEvent({
+      properties: { properties: { $previous_distinct_id: "prev_2" } },
+    });
+    expect(extractPreviousDistinctId(event)).toBe("prev_2");
+  });
+
+  it("returns null when the field is missing", () => {
+    const event = processedEvent({ properties: { other: 1 } });
+    expect(extractPreviousDistinctId(event)).toBeNull();
+  });
+
+  it("returns null for an empty / whitespace-only string", () => {
+    const event = processedEvent({ properties: { $previous_distinct_id: "   " } });
+    expect(extractPreviousDistinctId(event)).toBeNull();
+  });
+});
+
+// =============================================================================
+// Row builders
+// =============================================================================
+
+describe("toProcessedEventRow", () => {
+  it("converts a ProcessedEventV2 to the ClickHouse row shape", () => {
+    const row = toProcessedEventRow(processedEvent());
+    expect(row).toMatchObject({
+      capture_id: "cap_1",
+      distinct_id: "user_1",
+      event_id: "ev_1",
+      event_name: "page_view",
+      event_ts: "2026-01-01 12:34:56.789",
+      identity_mode: "full",
+      organization_id: "org_1",
+      person_id: "person_1",
+      processed_ts: "2026-01-02 01:02:03.004",
+      project_id: "proj_1",
+      request_id: "req_1",
+      request_path: "/capture",
+      route_lane: "main",
+      schema_version: 2,
+      skip_enrichment: 0,
+      source_offset: "42",
+      source_partition: 3,
+      source_topic: "main.topic",
+      token: "tok_1",
+    });
+  });
+
+  it("serializes context and properties as JSON strings", () => {
+    const row = toProcessedEventRow(
+      processedEvent({ context: { ua: "x" }, properties: { foo: "bar" } }),
+    );
+    expect(row.context).toBe(JSON.stringify({ ua: "x" }));
+    expect(row.event_properties).toBe(JSON.stringify({ foo: "bar" }));
+  });
+
+  it("maps a missing person_id to null", () => {
+    const row = toProcessedEventRow(
+      processedEvent({ identity: { distinctId: "user_1", mode: "personless" } }),
+    );
+    expect(row.person_id).toBeNull();
+    expect(row.identity_mode).toBe("personless");
+  });
+
+  it("defaults request_path to an empty string when absent", () => {
+    const row = toProcessedEventRow(processedEvent({ request: { requestId: "req_1" } }));
+    expect(row.request_path).toBe("");
+  });
+
+  it("sets skip_enrichment to 1 when enrichment is skipped", () => {
+    const row = toProcessedEventRow(
+      processedEvent({
+        routing: {
+          lane: "main",
+          skipEnrichment: true,
+          sourceOffset: "1",
+          sourcePartition: 0,
+          sourceTopic: "main.topic",
+        },
+      }),
+    );
+    expect(row.skip_enrichment).toBe(1);
+  });
+});
+
+describe("toPersonRow", () => {
+  it("converts a person event to a row carrying the supplied organization_id", () => {
+    const row = toPersonRow(personEvent(), "org_resolved");
+    expect(row).toMatchObject({
+      changed_at: "2026-01-01 00:00:00.000",
+      organization_id: "org_resolved",
+      person_id: "person_1",
+      email: null,
+      is_archived: 0,
+      merged_into_person_id: null,
+      name: null,
+      primary_distinct_id: null,
+      project_id: "proj_1",
+      version: 5,
+    });
+  });
+
+  it("encodes traits as a JSON string", () => {
+    const row = toPersonRow(personEvent({ traits: { plan: "pro" } }), "org_1");
+    expect(row.traits).toBe(JSON.stringify({ plan: "pro" }));
+  });
+
+  it("flags archival and surfaces optional string fields", () => {
+    const row = toPersonRow(
+      personEvent({
+        isArchived: true,
+        email: "a@b.com",
+        name: "Ada",
+        primaryDistinctId: "user_1",
+        mergedIntoPersonId: "person_2",
+      }),
+      "org_1",
+    );
+    expect(row.is_archived).toBe(1);
+    expect(row.email).toBe("a@b.com");
+    expect(row.name).toBe("Ada");
+    expect(row.primary_distinct_id).toBe("user_1");
+    expect(row.merged_into_person_id).toBe("person_2");
+  });
+});
+
+describe("toPersonIdentityRow", () => {
+  it("converts an identity event to a row", () => {
+    const row = toPersonIdentityRow(
+      personIdentityEvent({ previousDistinctId: "prev_1", isDeleted: true, version: 3 }),
+      "org_resolved",
+    );
+    expect(row).toMatchObject({
+      changed_at: "2026-01-01 00:00:00.000",
+      organization_id: "org_resolved",
+      person_id: "person_1",
+      distinct_id: "user_1",
+      is_deleted: 1,
+      previous_distinct_id: "prev_1",
+      project_id: "proj_1",
+      version: 3,
+    });
+  });
+
+  it("maps an absent previous distinct id to null", () => {
+    const row = toPersonIdentityRow(personIdentityEvent(), "org_1");
+    expect(row.previous_distinct_id).toBeNull();
+  });
+});
+
+describe("toPendingOverrideRow", () => {
+  it("builds the pending override with source and target distinct ids", () => {
+    const row = toPendingOverrideRow(
+      personIdentityEvent({ previousDistinctId: "prev_1", distinctId: "user_1", version: 2 }),
+      "org_resolved",
+    );
+    expect(row).toMatchObject({
+      changed_at: "2026-01-01 00:00:00.000",
+      organization_id: "org_resolved",
+      person_id: "person_1",
+      is_deleted: 0,
+      project_id: "proj_1",
+      source_distinct_id: "prev_1",
+      target_distinct_id: "user_1",
+      version: 2,
+    });
+  });
+
+  it("defaults the source distinct id to an empty string when absent", () => {
+    const row = toPendingOverrideRow(personIdentityEvent(), "org_1");
+    expect(row.source_distinct_id).toBe("");
+  });
+});
+
+// =============================================================================
+// buildAnalyticsWriterPlan
+// =============================================================================
+
+describe("buildAnalyticsWriterPlan", () => {
+  const resolveOrg = (projectId: string) => `org_for_${projectId}`;
+
+  it("separates processed, person and identity messages into their lanes", () => {
+    const messages: ReadonlyArray<AnalyticsWriterMessageType> = [
+      { kind: "processed", messageId: "m1", value: processedEvent() },
+      { kind: "person", messageId: "m2", value: personEvent() },
+      {
+        kind: "person-distinct-id",
+        messageId: "m3",
+        // version 0 + no previousDistinctId → no override rows.
+        value: personIdentityEvent({ version: 0 }),
+      },
+    ];
+    const plan = buildAnalyticsWriterPlan(messages, resolveOrg);
+    expect(plan.processedEventRows).toHaveLength(1);
+    expect(plan.personRows).toHaveLength(1);
+    expect(plan.personIdentityRows).toHaveLength(1);
+    expect(plan.personIdentityOverrideRows).toHaveLength(0);
+    expect(plan.personIdentityPendingOverrideRows).toHaveLength(0);
+  });
+
+  it("emits override + pending-override rows for a versioned identity change with a previous id", () => {
+    const messages: ReadonlyArray<AnalyticsWriterMessageType> = [
+      {
+        kind: "person-distinct-id",
+        messageId: "m1",
+        value: personIdentityEvent({ previousDistinctId: "prev_1", version: 1 }),
+      },
+    ];
+    const plan = buildAnalyticsWriterPlan(messages, resolveOrg);
+    expect(plan.personIdentityRows).toHaveLength(1);
+    expect(plan.personIdentityOverrideRows).toHaveLength(1);
+    expect(plan.personIdentityPendingOverrideRows).toHaveLength(1);
+    expect(plan.personIdentityPendingOverrideRows[0]).toMatchObject({
+      source_distinct_id: "prev_1",
+      target_distinct_id: "user_1",
+    });
+  });
+
+  it("does not emit override rows when version is 0 even with a previous id", () => {
+    const messages: ReadonlyArray<AnalyticsWriterMessageType> = [
+      {
+        kind: "person-distinct-id",
+        messageId: "m1",
+        value: personIdentityEvent({ previousDistinctId: "prev_1", version: 0 }),
+      },
+    ];
+    const plan = buildAnalyticsWriterPlan(messages, resolveOrg);
+    expect(plan.personIdentityOverrideRows).toHaveLength(0);
+    expect(plan.personIdentityPendingOverrideRows).toHaveLength(0);
+  });
+
+  it("resolves the organization id via the callback for person and identity rows", () => {
+    const messages: ReadonlyArray<AnalyticsWriterMessageType> = [
+      { kind: "person", messageId: "m1", value: personEvent({ projectId: "proj_z" }) },
+      {
+        kind: "person-distinct-id",
+        messageId: "m2",
+        value: personIdentityEvent({ projectId: "proj_z" }),
+      },
+    ];
+    const plan = buildAnalyticsWriterPlan(messages, resolveOrg);
+    expect(plan.personRows[0]?.organization_id).toBe("org_for_proj_z");
+    expect(plan.personIdentityRows[0]?.organization_id).toBe("org_for_proj_z");
+  });
+
+  it("returns all-empty lanes for an empty message list", () => {
+    const plan = buildAnalyticsWriterPlan([], resolveOrg);
+    expect(plan.processedEventRows).toHaveLength(0);
+    expect(plan.personRows).toHaveLength(0);
+    expect(plan.personIdentityRows).toHaveLength(0);
+    expect(plan.personIdentityOverrideRows).toHaveLength(0);
+    expect(plan.personIdentityPendingOverrideRows).toHaveLength(0);
+  });
+});
+
+// =============================================================================
+// makeCapturedEventFromInternalAnalyticsEvent
+// =============================================================================
+
+describe("makeCapturedEventFromInternalAnalyticsEvent", () => {
+  it("maps a trusted revenue event onto a CapturedEventV1 with a Resolved claim", () => {
+    const occurredAt = new Date("2026-03-04T05:06:07.008Z");
+    const captured = makeCapturedEventFromInternalAnalyticsEvent({
+      eventName: "$purchase.completed",
+      eventId: "an_evt_k1:_purchase.completed:person_1",
+      distinctId: "dist_1",
+      occurredAt,
+      organizationId: "org_1",
+      personId: "person_1",
+      projectId: "proj_1",
+      token: "tok_1",
+      transactionId: "txn_1",
+      context: { sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC },
+      properties: {
+        paymentProviderConfigurationId: "cfg_1",
+        paymentProviderConfigurationProductId: "prod_1",
+        providerEnvironment: 1,
+        providerEventType: "PURCHASE",
+        providerId: "appstore",
+        providerSubscriptionId: null,
+        providerTransactionId: null,
+        providerWebhookNotificationId: null,
+        source: "appstore",
+        grossAmountUsd: 1_100,
+      },
+    });
+
+    expect(captured.schemaVersion).toBe(1);
+    // The deterministic id rides as clientEventId → becomes events_v2.event_id.
+    expect(captured.clientEventId).toBe("an_evt_k1:_purchase.completed:person_1");
+    expect(captured.captureId).toBe("internal_an_evt_k1:_purchase.completed:person_1");
+    expect(captured.event).toBe("$purchase.completed");
+    expect(captured.distinctId).toBe("dist_1");
+    expect(captured.organizationId).toBe("org_1");
+    expect(captured.projectId).toBe("proj_1");
+    expect(captured.token).toBe("tok_1");
+    expect(captured.eventTimestamp).toBe(occurredAt.toISOString());
+    // Server-trusted: Resolved claim + trusted topic + skipEnrichment.
+    expect(captured.identityClaim).toEqual({
+      _tag: "Resolved",
+      distinctId: "dist_1",
+      personId: "person_1",
+    });
+    expect(captured.trustClass).toBe("trusted-revenue");
+    expect(captured.routing.targetTopic).toBe(REVENUE_TRUSTED_SOURCE_TOPIC);
+    expect(captured.routing.skipEnrichment).toBe(true);
+    expect(captured.routing.isHistorical).toBe(false);
+    expect(captured.routing.routeClass).toBe("main");
+  });
+
+  it("coerces Date-valued properties to ISO strings so the envelope is JSON-clean", () => {
+    const transferredAt = new Date("2026-03-04T05:06:07.008Z");
+    const captured = makeCapturedEventFromInternalAnalyticsEvent({
+      eventName: "$subscription.transferred_in",
+      eventId: "an_evt_kx:_subscription.transferred_in:person_to",
+      distinctId: "dist_to",
+      occurredAt: transferredAt,
+      organizationId: "org_1",
+      personId: "person_to",
+      projectId: "proj_1",
+      token: "tok_1",
+      transactionId: null,
+      properties: {
+        paymentProviderConfigurationId: "cfg_1",
+        paymentProviderConfigurationProductId: "prod_1",
+        providerEnvironment: 1,
+        providerId: "appstore",
+        source: "appstore",
+        providerEventType: "subscription.transferred",
+        subscriptionId: "sub_1",
+        fromDistinctId: "dist_from",
+        fromPersonId: "person_from",
+        toDistinctId: "dist_to",
+        toPersonId: "person_to",
+        transferMode: "transfer_to_new_owner",
+        transferReason: "appstore_restore",
+        transferredAt,
+      },
+    });
+    // The Date becomes its ISO string — no live Date object survives onto the
+    // wire `properties` (which permits only JSON primitives).
+    expect(captured.properties.transferredAt).toBe(transferredAt.toISOString());
+    expect(JSON.parse(JSON.stringify(captured)).properties.transferredAt).toBe(
+      transferredAt.toISOString(),
+    );
+  });
+});
+
+// =============================================================================
+// Janitor snapshot helpers
+// =============================================================================
+
+describe("sanitizeIdentifier", () => {
+  it("replaces non-alphanumeric characters with underscores", () => {
+    expect(sanitizeIdentifier("a-b.c d")).toBe("a_b_c_d");
+  });
+
+  it("keeps valid alphanumeric and underscore characters", () => {
+    expect(sanitizeIdentifier("Abc_123")).toBe("Abc_123");
+  });
+});
+
+describe("makeSnapshotResources", () => {
+  it("generates deterministic, dash-stripped names from a supplied runId", () => {
+    const resources = makeSnapshotResources("run-12-34");
+    expect(resources.pendingOverrideSnapshotName).toBe(
+      "person_identity_pending_override_snapshot_run1234",
+    );
+    expect(resources.pendingOverrideDictionaryName).toBe(
+      "person_identity_pending_override_dict_run1234",
+    );
+  });
+
+  it("generates unique names across calls when no runId is supplied (UUID default)", () => {
+    const a = makeSnapshotResources();
+    const b = makeSnapshotResources();
+    expect(a.pendingOverrideSnapshotName).not.toBe(b.pendingOverrideSnapshotName);
+    // The generated suffix must be a safe SQL identifier (no dashes / specials).
+    expect(a.pendingOverrideSnapshotName).toMatch(/^[a-zA-Z0-9_]+$/);
+  });
+});
+
+describe("computeCutoffIso", () => {
+  it("subtracts the safety window from now", () => {
+    const now = new Date("2026-01-01T00:00:10.000Z");
+    expect(computeCutoffIso({ now, safetyWindowSeconds: 10 })).toBe("2026-01-01T00:00:00.000Z");
+  });
+
+  it("treats a zero window as 'now'", () => {
+    const now = new Date("2026-01-01T00:00:00.000Z");
+    expect(computeCutoffIso({ now, safetyWindowSeconds: 0 })).toBe(now.toISOString());
+  });
+});
diff --git a/packages/core/test/domain/avatar.test.ts b/packages/core/test/domain/avatar.test.ts
new file mode 100644
index 000000000..c843f84c8
--- /dev/null
+++ b/packages/core/test/domain/avatar.test.ts
@@ -0,0 +1,130 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  AvatarValidationError,
+  MAX_AVATAR_BYTES,
+  avatarKeyFromUrl,
+  avatarSha256Hex,
+  deriveAvatarKey,
+  isOwnedAvatarUrl,
+  validateAndDecodeAvatar,
+} from "../../src/domain/avatar.ts";
+
+const toBase64 = (bytes: number[]): string =>
+  Buffer.from(Uint8Array.from(bytes)).toString("base64");
+
+const PNG_SIGNATURE = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
+const JPEG_SIGNATURE = [0xff, 0xd8, 0xff, 0xe0, 0x00, 0x10];
+// "RIFF" <4-byte length> "WEBP"
+const WEBP_SIGNATURE = [0x52, 0x49, 0x46, 0x46, 0x00, 0x00, 0x00, 0x00, 0x57, 0x45, 0x42, 0x50];
+
+const run = <A, E>(effect: Effect.Effect<A, E>): Promise<A> => Effect.runPromise(effect);
+const runError = <A, E>(effect: Effect.Effect<A, E>): Promise<E> =>
+  Effect.runPromise(Effect.flip(effect));
+
+describe("validateAndDecodeAvatar", () => {
+  it("accepts a PNG and returns the png extension", async () => {
+    const result = await run(
+      validateAndDecodeAvatar({ imageBase64: toBase64(PNG_SIGNATURE), contentType: "image/png" }),
+    );
+    expect(result.ext).toBe("png");
+    expect([...result.bytes.slice(0, 8)]).toEqual(PNG_SIGNATURE);
+  });
+
+  it("accepts a JPEG and returns the jpg extension", async () => {
+    const result = await run(
+      validateAndDecodeAvatar({ imageBase64: toBase64(JPEG_SIGNATURE), contentType: "image/jpeg" }),
+    );
+    expect(result.ext).toBe("jpg");
+  });
+
+  it("accepts a WebP and returns the webp extension", async () => {
+    const result = await run(
+      validateAndDecodeAvatar({ imageBase64: toBase64(WEBP_SIGNATURE), contentType: "image/webp" }),
+    );
+    expect(result.ext).toBe("webp");
+  });
+
+  it("rejects an unsupported content type", async () => {
+    const error = await runError(
+      validateAndDecodeAvatar({ imageBase64: toBase64(PNG_SIGNATURE), contentType: "image/gif" }),
+    );
+    expect(error).toBeInstanceOf(AvatarValidationError);
+    expect(error.message).toContain("Unsupported image type");
+  });
+
+  it("rejects malformed base64", async () => {
+    const error = await runError(
+      validateAndDecodeAvatar({ imageBase64: "@@@not-base64@@@", contentType: "image/png" }),
+    );
+    expect(error).toBeInstanceOf(AvatarValidationError);
+    expect(error.message).toContain("base64");
+  });
+
+  it("rejects bytes that do not match the declared type (magic-byte sniff)", async () => {
+    const error = await runError(
+      validateAndDecodeAvatar({
+        imageBase64: toBase64([0x00, 0x01, 0x02, 0x03]),
+        contentType: "image/png",
+      }),
+    );
+    expect(error).toBeInstanceOf(AvatarValidationError);
+    expect(error.message).toContain("does not match");
+  });
+
+  it("rejects an oversized image", async () => {
+    const tooBig = new Uint8Array(MAX_AVATAR_BYTES + 1);
+    tooBig.set(PNG_SIGNATURE, 0);
+    const error = await runError(
+      validateAndDecodeAvatar({
+        imageBase64: Buffer.from(tooBig).toString("base64"),
+        contentType: "image/png",
+      }),
+    );
+    expect(error).toBeInstanceOf(AvatarValidationError);
+    expect(error.message).toContain("too large");
+  });
+});
+
+describe("avatarSha256Hex", () => {
+  it("returns a deterministic 64-char lowercase hex digest", async () => {
+    const bytes = Uint8Array.from([1, 2, 3, 4]);
+    const a = await run(avatarSha256Hex(bytes));
+    const b = await run(avatarSha256Hex(Uint8Array.from([1, 2, 3, 4])));
+    expect(a).toMatch(/^[0-9a-f]{64}$/);
+    expect(a).toBe(b);
+  });
+
+  it("differs for different inputs", async () => {
+    const a = await run(avatarSha256Hex(Uint8Array.from([1])));
+    const b = await run(avatarSha256Hex(Uint8Array.from([2])));
+    expect(a).not.toBe(b);
+  });
+});
+
+describe("deriveAvatarKey / URL helpers", () => {
+  it("builds a content-addressed key", () => {
+    expect(deriveAvatarKey("organization", "org_1", "abc123", "webp")).toBe(
+      "avatars/organization/org_1/abc123.webp",
+    );
+    expect(deriveAvatarKey("project", "proj_1", "def456", "png")).toBe(
+      "avatars/project/proj_1/def456.png",
+    );
+  });
+
+  it("recognises our own avatar URLs and ignores foreign/null ones", () => {
+    const base = "https://api.voidhash.com";
+    expect(isOwnedAvatarUrl(`${base}/files/avatars/x`, base)).toBe(true);
+    expect(isOwnedAvatarUrl("https://workos.example/avatar.png", base)).toBe(false);
+    expect(isOwnedAvatarUrl(null, base)).toBe(false);
+  });
+
+  it("extracts the object key from one of our URLs, else null", () => {
+    const base = "https://api.voidhash.com";
+    expect(avatarKeyFromUrl(`${base}/files/avatars/organization/org_1/x.webp`, base)).toBe(
+      "avatars/organization/org_1/x.webp",
+    );
+    expect(avatarKeyFromUrl("https://workos.example/avatar.png", base)).toBeNull();
+  });
+});
diff --git a/packages/core/test/domain/internalAnalytics/InternalAnalyticsEvents.test.ts b/packages/core/test/domain/internalAnalytics/InternalAnalyticsEvents.test.ts
new file mode 100644
index 000000000..54c77047c
--- /dev/null
+++ b/packages/core/test/domain/internalAnalytics/InternalAnalyticsEvents.test.ts
@@ -0,0 +1,194 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  type InternalAnalyticsEvent,
+  isReservedRevenueEventName,
+  RESERVED_REVENUE_EVENT_NAMES,
+  REVENUE_TRUSTED_SOURCE_TOPIC,
+  type RevenueAnalyticsEventName,
+  RevenueAnalyticsEventNameSchema,
+  shouldBypassQuota,
+  sourceTopicForInternalAnalyticsEvent,
+  TRUST_BYPASS_QUOTA,
+} from "../../../src/domain/internalAnalytics/InternalAnalyticsEvents.ts";
+
+/** Every wire-stable revenue event name, sourced from the schema literals so a
+ * future addition to the union forces these tests to consider it. */
+const ALL_REVENUE_EVENT_NAMES =
+  RevenueAnalyticsEventNameSchema.literals as ReadonlyArray<RevenueAnalyticsEventName>;
+
+/** The fields every variant shares; `sourceTopicForInternalAnalyticsEvent`
+ * only reads `eventName`, so a minimal-but-valid base is sufficient. */
+const baseEvent = () => ({
+  context: undefined,
+  distinctId: "person_distinct",
+  eventId: "evt_1",
+  occurredAt: new Date("2026-01-01T00:00:00.000Z"),
+  organizationId: "org_1",
+  personId: "person_1",
+  projectId: "project_1",
+  token: "tok_1",
+  transactionId: null,
+});
+
+const revenuePropertiesBase = () => ({
+  paymentProviderConfigurationId: "ppc_1",
+  paymentProviderConfigurationProductId: "ppcp_1",
+  providerEnvironment: 1,
+  providerEventType: "TEST",
+  providerId: "appstore",
+  providerSubscriptionId: null,
+  providerTransactionId: null,
+  providerWebhookNotificationId: null,
+  source: "test",
+});
+
+const transferPropertiesBase = () => ({
+  paymentProviderConfigurationId: "ppc_1",
+  paymentProviderConfigurationProductId: "ppcp_1",
+  providerId: "appstore",
+  providerEnvironment: 1,
+  source: "test",
+  providerEventType: "TEST",
+  fromDistinctId: "from_distinct",
+  fromPersonId: "from_person",
+  toDistinctId: "to_distinct",
+  toPersonId: "to_person",
+  transferMode: "transfer_to_new_owner" as const,
+  transferReason: "restore",
+  transferredAt: new Date("2026-01-01T00:00:00.000Z"),
+});
+
+const purchaseCompleted = (): InternalAnalyticsEvent => ({
+  ...baseEvent(),
+  eventName: "$purchase.completed",
+  properties: { ...revenuePropertiesBase() },
+});
+
+const subscriptionCreated = (): InternalAnalyticsEvent => ({
+  ...baseEvent(),
+  eventName: "$subscription.created",
+  properties: { ...revenuePropertiesBase(), isTrial: false },
+});
+
+const subscriptionTransferredIn = (): InternalAnalyticsEvent => ({
+  ...baseEvent(),
+  eventName: "$subscription.transferred_in",
+  properties: { ...transferPropertiesBase() },
+});
+
+const purchaseTransferredOut = (): InternalAnalyticsEvent => ({
+  ...baseEvent(),
+  eventName: "$purchase.transferred_out",
+  properties: { ...transferPropertiesBase() },
+});
+
+describe("isReservedRevenueEventName", () => {
+  it("returns true for '$purchase.completed'", () => {
+    expect(isReservedRevenueEventName("$purchase.completed")).toBe(true);
+  });
+
+  it("returns true for '$subscription.created'", () => {
+    expect(isReservedRevenueEventName("$subscription.created")).toBe(true);
+  });
+
+  it.each(ALL_REVENUE_EVENT_NAMES)("returns true for the reserved name %s", (name) => {
+    expect(isReservedRevenueEventName(name)).toBe(true);
+  });
+
+  it("recognizes the full reserved set with no extras", () => {
+    // The reserved set and the schema literals must stay in lock-step; a drift
+    // in either direction (a missing or stray name) is a trust-boundary bug.
+    expect(RESERVED_REVENUE_EVENT_NAMES.size).toBe(ALL_REVENUE_EVENT_NAMES.length);
+    for (const name of ALL_REVENUE_EVENT_NAMES) {
+      expect(RESERVED_REVENUE_EVENT_NAMES.has(name)).toBe(true);
+    }
+  });
+
+  it.each([
+    "purchase.completed", // missing the reserved `$` prefix
+    "$purchase.completed.extra",
+    "checkout_started",
+    "$unknown.event",
+    "",
+  ])("returns false for the non-reserved name %j", (name) => {
+    expect(isReservedRevenueEventName(name)).toBe(false);
+  });
+
+  it("is case-sensitive and exact (no normalization)", () => {
+    expect(isReservedRevenueEventName("$Purchase.Completed")).toBe(false);
+    expect(isReservedRevenueEventName(" $purchase.completed")).toBe(false);
+  });
+});
+
+describe("sourceTopicForInternalAnalyticsEvent", () => {
+  it("returns REVENUE_TRUSTED_SOURCE_TOPIC for purchase events", () => {
+    expect(sourceTopicForInternalAnalyticsEvent(purchaseCompleted())).toBe(
+      REVENUE_TRUSTED_SOURCE_TOPIC,
+    );
+  });
+
+  it("returns REVENUE_TRUSTED_SOURCE_TOPIC for subscription events", () => {
+    expect(sourceTopicForInternalAnalyticsEvent(subscriptionCreated())).toBe(
+      REVENUE_TRUSTED_SOURCE_TOPIC,
+    );
+  });
+
+  it("returns REVENUE_TRUSTED_SOURCE_TOPIC for subscription transfer events", () => {
+    expect(sourceTopicForInternalAnalyticsEvent(subscriptionTransferredIn())).toBe(
+      REVENUE_TRUSTED_SOURCE_TOPIC,
+    );
+  });
+
+  it("returns REVENUE_TRUSTED_SOURCE_TOPIC for purchase transfer events", () => {
+    expect(sourceTopicForInternalAnalyticsEvent(purchaseTransferredOut())).toBe(
+      REVENUE_TRUSTED_SOURCE_TOPIC,
+    );
+  });
+
+  it("maps every reserved event name to the trusted source topic", () => {
+    // Drive the mapper by eventName alone (the only field it reads) across the
+    // full union so a new variant that forgets a `case` is caught here.
+    for (const name of ALL_REVENUE_EVENT_NAMES) {
+      const event = {
+        ...baseEvent(),
+        eventName: name,
+        properties: { ...transferPropertiesBase(), ...revenuePropertiesBase() },
+      } as unknown as InternalAnalyticsEvent;
+      expect(sourceTopicForInternalAnalyticsEvent(event)).toBe(REVENUE_TRUSTED_SOURCE_TOPIC);
+    }
+  });
+
+  it("pins the trusted source topic constant value", () => {
+    expect(REVENUE_TRUSTED_SOURCE_TOPIC).toBe("revenue.trusted.v1");
+  });
+});
+
+describe("shouldBypassQuota", () => {
+  it("always exempts trusted-revenue events", () => {
+    expect(
+      shouldBypassQuota({ trustClass: "trusted-revenue", eventName: "$purchase.completed" }),
+    ).toBe(true);
+    expect(shouldBypassQuota({ trustClass: "trusted-revenue", eventName: "anything" })).toBe(true);
+  });
+
+  it("does NOT exempt untrusted-sdk events by default (empty allowlist → behaviour unchanged)", () => {
+    expect(shouldBypassQuota({ trustClass: "untrusted-sdk", eventName: "checkout_started" })).toBe(
+      false,
+    );
+    expect(shouldBypassQuota({ eventName: "page_view" })).toBe(false);
+  });
+
+  it("exempts a name once it is added to TRUST_BYPASS_QUOTA", () => {
+    // The allowlist ships empty; this proves the seam works without coupling the
+    // test to a specific entry.
+    const probe = "vh_test_bypass_probe";
+    expect(shouldBypassQuota({ trustClass: "untrusted-sdk", eventName: probe })).toBe(
+      TRUST_BYPASS_QUOTA.has(probe),
+    );
+  });
+
+  it("ships with an empty SDK allowlist", () => {
+    expect(TRUST_BYPASS_QUOTA.size).toBe(0);
+  });
+});
diff --git a/packages/core/test/domain/person/IdentityGraph.test.ts b/packages/core/test/domain/person/IdentityGraph.test.ts
new file mode 100644
index 000000000..2c11b5597
--- /dev/null
+++ b/packages/core/test/domain/person/IdentityGraph.test.ts
@@ -0,0 +1,500 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  applyTraitWrite,
+  combineTraitStates,
+  comparePersonForMerge,
+  type DistinctIdMapping,
+  foldTraits,
+  type IdentityAssertion,
+  type IdentityEventInput,
+  type IdentityProjection,
+  materializeTraitState,
+  planProjectionRebuild,
+  project,
+  resolveIdentities,
+  type TraitFoldState,
+  type TraitWrite,
+} from "../../../src/domain/person/IdentityGraph.ts";
+
+const EMPTY_TRAIT_STATE: TraitFoldState = { meta: {}, traits: {} };
+
+/** Folds writes one-at-a-time (the streaming path) into a final trait map. */
+const foldIncrementally = (writes: ReadonlyArray<TraitWrite>): Record<string, unknown> =>
+  writes.reduce<TraitFoldState>((state, write) => applyTraitWrite(state, write), EMPTY_TRAIT_STATE)
+    .traits;
+
+/**
+ * Normalizes an {@link IdentityProjection} into a plain, order-stable value so
+ * two projections can be compared with `toEqual` regardless of internal `Map`
+ * iteration order. This is the lens through which every invariant is checked.
+ */
+const normalize = (projection: IdentityProjection) => ({
+  canonicalOf: [...projection.canonicalOf.entries()].sort(([left], [right]) =>
+    left < right ? -1 : left > right ? 1 : 0,
+  ),
+  persons: [...projection.persons.values()]
+    .map((person) => ({
+      canonicalDistinctId: person.canonicalDistinctId,
+      distinctIds: [...person.distinctIds],
+      email: person.email ?? null,
+      firstSeenTs: person.firstSeenTs,
+      lastSeenTs: person.lastSeenTs,
+      name: person.name ?? null,
+      traits: person.traits,
+    }))
+    .sort((left, right) =>
+      left.canonicalDistinctId < right.canonicalDistinctId
+        ? -1
+        : left.canonicalDistinctId > right.canonicalDistinctId
+          ? 1
+          : 0,
+    ),
+});
+
+/** All permutations of `items` via Heap's algorithm (use only for small N). */
+const permutations = <T>(items: ReadonlyArray<T>): Array<Array<T>> => {
+  const arr = [...items];
+  const result: Array<Array<T>> = [];
+  const generate = (k: number): void => {
+    if (k <= 1) {
+      result.push([...arr]);
+      return;
+    }
+    for (let i = 0; i < k; i++) {
+      generate(k - 1);
+      const swap = k % 2 === 0 ? i : 0;
+      const tmp = arr[swap]!;
+      arr[swap] = arr[k - 1]!;
+      arr[k - 1] = tmp;
+    }
+  };
+  generate(arr.length);
+  return result;
+};
+
+/** Deterministic PRNG so the random-permutation test is reproducible. */
+const mulberry32 = (seed: number): (() => number) => {
+  let state = seed | 0;
+  return () => {
+    state = (state + 0x6d2b79f5) | 0;
+    let t = Math.imul(state ^ (state >>> 15), 1 | state);
+    t = (t + Math.imul(t ^ (t >>> 7), 61 | t)) ^ t;
+    return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
+  };
+};
+
+const shuffle = <T>(items: ReadonlyArray<T>, rng: () => number): Array<T> => {
+  const out = [...items];
+  for (let i = out.length - 1; i > 0; i--) {
+    const j = Math.floor(rng() * (i + 1));
+    const tmp = out[i]!;
+    out[i] = out[j]!;
+    out[j] = tmp;
+  }
+  return out;
+};
+
+/**
+ * Asserts the central invariant: `project` is a pure function of the *set* of
+ * events. Every permutation of `events` must produce a deep-equal projection.
+ * For N ≤ 7 this enumerates all N! orderings exhaustively.
+ */
+const expectPermutationInvariant = (events: ReadonlyArray<IdentityEventInput>): void => {
+  expect(events.length).toBeLessThanOrEqual(7);
+  const reference = normalize(project(events));
+  for (const ordering of permutations(events)) {
+    expect(normalize(project(ordering))).toEqual(reference);
+  }
+};
+
+let eventSeq = 0;
+/** Builds an event with a unique, stable `eventId` unless one is supplied. */
+const ev = (
+  input: Omit<IdentityEventInput, "eventId"> & { readonly eventId?: string },
+): IdentityEventInput => ({
+  eventId: input.eventId ?? `auto_${eventSeq++}`,
+  ...input,
+});
+
+describe("resolveIdentities", () => {
+  it("keeps unrelated distinct ids in separate components", () => {
+    const resolution = resolveIdentities({
+      observations: [
+        { distinctId: "u1", eventTs: 100 },
+        { distinctId: "u2", eventTs: 100 },
+      ],
+    });
+    expect(resolution.canonicalOf.get("u1")).toBe("u1");
+    expect(resolution.canonicalOf.get("u2")).toBe("u2");
+    expect(resolution.membersOf.size).toBe(2);
+  });
+
+  it("picks the oldest (smallest firstSeenTs) member as the component canonical", () => {
+    const resolution = resolveIdentities({
+      assertions: [{ distinctIdA: "email", distinctIdB: "phone", eventTs: 300 }],
+      observations: [
+        { distinctId: "email", eventTs: 50 },
+        { distinctId: "phone", eventTs: 400 },
+      ],
+    });
+    expect(resolution.canonicalOf.get("email")).toBe("email");
+    expect(resolution.canonicalOf.get("phone")).toBe("email");
+    expect(resolution.membersOf.get("email")).toEqual(["email", "phone"]);
+  });
+
+  it("breaks firstSeenTs ties lexicographically for determinism", () => {
+    const resolution = resolveIdentities({
+      assertions: [{ distinctIdA: "bbb", distinctIdB: "aaa", eventTs: 100 }],
+      observations: [
+        { distinctId: "aaa", eventTs: 100 },
+        { distinctId: "bbb", eventTs: 100 },
+      ],
+    });
+    expect(resolution.canonicalOf.get("bbb")).toBe("aaa");
+  });
+
+  it("is independent of assertion order across a transitive chain", () => {
+    const forward = resolveIdentities({
+      assertions: [
+        { distinctIdA: "anon", distinctIdB: "email", eventTs: 200 },
+        { distinctIdA: "email", distinctIdB: "phone", eventTs: 300 },
+      ],
+      observations: [{ distinctId: "anon", eventTs: 100 }],
+    });
+    const reversed = resolveIdentities({
+      assertions: [
+        { distinctIdA: "email", distinctIdB: "phone", eventTs: 300 },
+        { distinctIdA: "anon", distinctIdB: "email", eventTs: 200 },
+      ],
+      observations: [{ distinctId: "anon", eventTs: 100 }],
+    });
+    expect(forward.canonicalOf.get("phone")).toBe("anon");
+    expect(reversed.canonicalOf.get("phone")).toBe("anon");
+    expect([...forward.canonicalOf.entries()].sort()).toEqual(
+      [...reversed.canonicalOf.entries()].sort(),
+    );
+  });
+});
+
+describe("foldTraits", () => {
+  it("resolves a $set key to the newest write by (eventTs, eventId)", () => {
+    const writes: ReadonlyArray<TraitWrite> = [
+      { eventId: "a", eventTs: 100, set: { plan: "free" } },
+      { eventId: "b", eventTs: 200, set: { plan: "pro" } },
+    ];
+    expect(foldTraits(writes).plan).toBe("pro");
+    expect(foldTraits([...writes].reverse()).plan).toBe("pro");
+  });
+
+  it("breaks $set ties on equal eventTs by greater eventId", () => {
+    const writes: ReadonlyArray<TraitWrite> = [
+      { eventId: "z", eventTs: 200, set: { plan: "z-wins" } },
+      { eventId: "a", eventTs: 200, set: { plan: "a-loses" } },
+    ];
+    expect(foldTraits(writes).plan).toBe("z-wins");
+    expect(foldTraits([...writes].reverse()).plan).toBe("z-wins");
+  });
+
+  it("resolves a $set_once key to the earliest write", () => {
+    const writes: ReadonlyArray<TraitWrite> = [
+      { eventId: "a", eventTs: 100, setOnce: { source: "google" } },
+      { eventId: "b", eventTs: 200, setOnce: { source: "facebook" } },
+    ];
+    expect(foldTraits(writes).source).toBe("google");
+    expect(foldTraits([...writes].reverse()).source).toBe("google");
+  });
+
+  it("lets any $set outrank $set_once for the same key, regardless of timing", () => {
+    const writes: ReadonlyArray<TraitWrite> = [
+      { eventId: "a", eventTs: 100, setOnce: { source: "google" } },
+      { eventId: "b", eventTs: 50, set: { source: "paid" } },
+    ];
+    expect(foldTraits(writes).source).toBe("paid");
+    expect(foldTraits([...writes].reverse()).source).toBe("paid");
+  });
+});
+
+describe("applyTraitWrite", () => {
+  it("matches foldTraits when writes are applied incrementally in any order", () => {
+    const writes: ReadonlyArray<TraitWrite> = [
+      { eventId: "a", eventTs: 100, setOnce: { firstTouch: "google" }, set: { plan: "free" } },
+      { eventId: "b", eventTs: 50, set: { plan: "trial" } },
+      { eventId: "c", eventTs: 200, set: { plan: "pro" }, setOnce: { firstTouch: "facebook" } },
+      { eventId: "d", eventTs: 200, set: { region: "eu" } },
+      { eventId: "e", eventTs: 150, setOnce: { plan: "should-lose-to-set" } },
+    ];
+    const batch = foldTraits(writes);
+    for (const ordering of permutations(writes)) {
+      expect(foldIncrementally(ordering)).toEqual(batch);
+    }
+    // sanity on the resolved values themselves
+    expect(batch).toEqual({ firstTouch: "google", plan: "pro", region: "eu" });
+  });
+
+  it("carries forward LWW metadata so a later older write cannot regress a key", () => {
+    const newest = applyTraitWrite(EMPTY_TRAIT_STATE, {
+      eventId: "b",
+      eventTs: 200,
+      set: { plan: "pro" },
+    });
+    const afterOlder = applyTraitWrite(newest, {
+      eventId: "a",
+      eventTs: 100,
+      set: { plan: "free" },
+    });
+    expect(afterOlder.traits.plan).toBe("pro");
+    expect(afterOlder.meta.plan).toEqual({ id: "b", mode: "set", ts: 200 });
+  });
+});
+
+describe("comparePersonForMerge", () => {
+  const at = (iso: string) => new Date(iso);
+
+  it("selects the person with the earlier firstSeenAt as survivor (negative => left wins)", () => {
+    const older = { id: "p_b", firstSeenAt: at("2026-01-01T00:00:00Z") };
+    const younger = { id: "p_a", firstSeenAt: at("2026-02-01T00:00:00Z") };
+    expect(comparePersonForMerge(older, younger)).toBeLessThan(0);
+    expect(comparePersonForMerge(younger, older)).toBeGreaterThan(0);
+  });
+
+  it("is antisymmetric / order-independent: sign flips when arguments swap", () => {
+    const a = { id: "p_a", firstSeenAt: at("2026-03-01T00:00:00Z") };
+    const b = { id: "p_b", firstSeenAt: at("2026-01-01T00:00:00Z") };
+    expect(Math.sign(comparePersonForMerge(a, b))).toBe(-Math.sign(comparePersonForMerge(b, a)));
+  });
+
+  it("falls back to createdAt when firstSeenAt is absent", () => {
+    const older = { id: "p_b", createdAt: at("2026-01-01T00:00:00Z") };
+    const younger = { id: "p_a", firstSeenAt: at("2026-02-01T00:00:00Z") };
+    expect(comparePersonForMerge(older, younger)).toBeLessThan(0);
+  });
+
+  it("breaks exact birth-time ties by lexicographically smaller id", () => {
+    const shared = at("2026-01-01T00:00:00Z");
+    const a = { id: "p_aaa", firstSeenAt: shared };
+    const b = { id: "p_bbb", firstSeenAt: shared };
+    expect(comparePersonForMerge(a, b)).toBeLessThan(0);
+    expect(comparePersonForMerge(b, a)).toBeGreaterThan(0);
+    expect(comparePersonForMerge(a, a)).toBe(0);
+  });
+});
+
+describe("combineTraitStates", () => {
+  const state = (
+    traits: Record<string, unknown>,
+    meta: TraitFoldState["meta"],
+  ): TraitFoldState => ({ meta, traits });
+
+  it("is commutative for the merged result", () => {
+    const left = state(
+      { plan: "pro", region: "us" },
+      { plan: { id: "p", mode: "set", ts: 200 }, region: { id: "r", mode: "set", ts: 100 } },
+    );
+    const right = state(
+      { plan: "free", source: "ad" },
+      { plan: { id: "q", mode: "set", ts: 150 }, source: { id: "s", mode: "setOnce", ts: 80 } },
+    );
+    expect(combineTraitStates(left, right)).toEqual(combineTraitStates(right, left));
+    // newest $set wins for the shared `plan` key.
+    expect(combineTraitStates(left, right).traits.plan).toBe("pro");
+  });
+
+  it("lets $set outrank $set_once and keeps the earliest $set_once", () => {
+    const left = state({ a: "set-val" }, { a: { id: "1", mode: "set", ts: 50 } });
+    const right = state({ a: "once-val" }, { a: { id: "2", mode: "setOnce", ts: 10 } });
+    expect(combineTraitStates(left, right).traits.a).toBe("set-val");
+
+    const onceEarly = state({ b: "early" }, { b: { id: "1", mode: "setOnce", ts: 10 } });
+    const onceLate = state({ b: "late" }, { b: { id: "2", mode: "setOnce", ts: 90 } });
+    expect(combineTraitStates(onceEarly, onceLate).traits.b).toBe("early");
+  });
+
+  it("preserves legacy traits lacking metadata via materializeTraitState", () => {
+    const legacy = materializeTraitState({ legacyKey: "kept" }, null);
+    const fresh = state({ newKey: "added" }, { newKey: { id: "1", mode: "set", ts: 100 } });
+    const merged = combineTraitStates(legacy, fresh);
+    expect(merged.traits).toEqual({ legacyKey: "kept", newKey: "added" });
+
+    // A real write still overrides the legacy floor (ts 0).
+    const overridden = applyTraitWrite(legacy, {
+      eventId: "x",
+      eventTs: 5,
+      set: { legacyKey: "new" },
+    });
+    expect(overridden.traits.legacyKey).toBe("new");
+  });
+});
+
+describe("planProjectionRebuild", () => {
+  const at = (iso: string) => new Date(iso);
+  const map = (distinctId: string, id: string, firstSeen: string): DistinctIdMapping => ({
+    distinctId,
+    person: { id, firstSeenAt: at(firstSeen) },
+  });
+
+  it("collapses a transitive chain onto the single oldest person", () => {
+    const mappings: ReadonlyArray<DistinctIdMapping> = [
+      map("anon", "p_anon", "2026-01-01T00:00:00Z"),
+      map("email", "p_email", "2026-02-01T00:00:00Z"),
+      map("phone", "p_phone", "2026-03-01T00:00:00Z"),
+    ];
+    const assertions: ReadonlyArray<IdentityAssertion> = [
+      { distinctIdA: "anon", distinctIdB: "email", eventTs: 1 },
+      { distinctIdA: "email", distinctIdB: "phone", eventTs: 2 },
+    ];
+    const plan = planProjectionRebuild({ assertions, mappings });
+
+    // All distinct ids resolve to the oldest person.
+    expect(plan.canonicalPersonOf.get("anon")).toBe("p_anon");
+    expect(plan.canonicalPersonOf.get("email")).toBe("p_anon");
+    expect(plan.canonicalPersonOf.get("phone")).toBe("p_anon");
+    // The two younger persons merge into it.
+    expect(plan.mergedInto.get("p_email")).toBe("p_anon");
+    expect(plan.mergedInto.get("p_phone")).toBe("p_anon");
+    expect(plan.mergedInto.has("p_anon")).toBe(false);
+  });
+
+  it("is independent of assertion/mapping order", () => {
+    const mappings: ReadonlyArray<DistinctIdMapping> = [
+      map("a", "p_a", "2026-02-01T00:00:00Z"),
+      map("b", "p_b", "2026-01-01T00:00:00Z"),
+      map("c", "p_c", "2026-03-01T00:00:00Z"),
+    ];
+    const assertions: ReadonlyArray<IdentityAssertion> = [
+      { distinctIdA: "a", distinctIdB: "b", eventTs: 1 },
+      { distinctIdA: "c", distinctIdB: "a", eventTs: 2 },
+    ];
+    const forward = planProjectionRebuild({ assertions, mappings });
+    const reversed = planProjectionRebuild({
+      assertions: [...assertions].reverse(),
+      mappings: [...mappings].reverse(),
+    });
+    const normalize = (plan: ReturnType<typeof planProjectionRebuild>) => ({
+      canonical: [...plan.canonicalPersonOf.entries()].sort(),
+      merged: [...plan.mergedInto.entries()].sort(),
+    });
+    expect(normalize(forward)).toEqual(normalize(reversed));
+    // p_b is the oldest → the survivor for the whole {a,b,c} component.
+    expect(forward.canonicalPersonOf.get("c")).toBe("p_b");
+  });
+
+  it("keeps unrelated distinct ids on their own persons (no merges)", () => {
+    const plan = planProjectionRebuild({
+      mappings: [map("x", "p_x", "2026-01-01T00:00:00Z"), map("y", "p_y", "2026-01-01T00:00:00Z")],
+    });
+    expect(plan.canonicalPersonOf.get("x")).toBe("p_x");
+    expect(plan.canonicalPersonOf.get("y")).toBe("p_y");
+    expect(plan.mergedInto.size).toBe(0);
+  });
+});
+
+describe("project — permutation invariance", () => {
+  it("is order-independent across a reversed identify chain (anon → email → phone)", () => {
+    const events = [
+      ev({ distinctId: "anon", eventTs: 100, set: { device: "ios" } }),
+      ev({ distinctId: "email", eventTs: 200, previousDistinctId: "anon", email: "a@x.com" }),
+      ev({ distinctId: "phone", eventTs: 300, previousDistinctId: "email" }),
+    ];
+    expectPermutationInvariant(events);
+
+    const projection = project(events);
+    // anon has the smallest firstSeenTs (100) → it is the canonical person.
+    expect(projection.canonicalOf.get("phone")).toBe("anon");
+    expect(projection.persons.size).toBe(1);
+    const person = projection.persons.get("anon");
+    expect(person?.distinctIds).toEqual(["anon", "email", "phone"]);
+    expect(person?.email).toBe("a@x.com");
+    expect(person?.firstSeenTs).toBe(100);
+    expect(person?.lastSeenTs).toBe(300);
+  });
+
+  it("attributes a late anonymous event to the already-merged person", () => {
+    const events = [
+      ev({ distinctId: "email", eventTs: 100, set: { y: 2 } }),
+      ev({ distinctId: "email", eventTs: 200, previousDistinctId: "anon" }),
+      // The anonymous capture "arrives" after the identify but is older only
+      // than the identify; email (ts 100) stays canonical.
+      ev({ distinctId: "anon", eventTs: 300, set: { x: 1 } }),
+    ];
+    expectPermutationInvariant(events);
+
+    const person = project(events).persons.get("email");
+    expect(person?.distinctIds).toEqual(["anon", "email"]);
+    expect(person?.traits).toEqual({ x: 1, y: 2 });
+  });
+
+  it("keeps disjoint users as distinct persons", () => {
+    const events = [
+      ev({ distinctId: "u1", eventTs: 100, set: { a: 1 } }),
+      ev({ distinctId: "u2", eventTs: 100, set: { b: 2 } }),
+    ];
+    expectPermutationInvariant(events);
+    expect(project(events).persons.size).toBe(2);
+  });
+
+  it("treats self-identify as a no-op single-member component", () => {
+    const events = [ev({ distinctId: "u1", eventTs: 100, previousDistinctId: "u1" })];
+    const projection = project(events);
+    expect(projection.persons.size).toBe(1);
+    expect(projection.persons.get("u1")?.distinctIds).toEqual(["u1"]);
+  });
+
+  it("folds traits order-independently across a merged component", () => {
+    const events = [
+      ev({ distinctId: "anon", eventTs: 100, setOnce: { firstTouch: "google" } }),
+      ev({ distinctId: "anon", eventTs: 150, set: { plan: "free" } }),
+      ev({ distinctId: "user", eventTs: 200, previousDistinctId: "anon", set: { plan: "pro" } }),
+      ev({ distinctId: "user", eventTs: 250, setOnce: { firstTouch: "facebook" } }),
+    ];
+    expectPermutationInvariant(events);
+
+    const person = project(events).persons.get("anon");
+    // newest $set wins for `plan`; earliest $set_once wins for `firstTouch`.
+    expect(person?.traits).toEqual({ firstTouch: "google", plan: "pro" });
+  });
+});
+
+describe("project — idempotency and duplicate safety", () => {
+  it("is unchanged when a subset of events is delivered twice", () => {
+    const events = [
+      ev({ distinctId: "anon", eventTs: 100, set: { device: "ios" } }),
+      ev({ distinctId: "user", eventTs: 200, previousDistinctId: "anon", set: { plan: "pro" } }),
+    ];
+    const once = normalize(project(events));
+    const withDuplicates = normalize(project([events[0]!, ...events, events[1]!]));
+    expect(withDuplicates).toEqual(once);
+  });
+});
+
+describe("project — large random permutation invariance", () => {
+  it("holds across 200 seeded shuffles of a 12-event multi-merge set", () => {
+    const events = [
+      ev({ distinctId: "anonA", eventTs: 10, set: { device: "ios" } }),
+      ev({ distinctId: "anonB", eventTs: 20, set: { device: "android" } }),
+      ev({ distinctId: "mail1", eventTs: 30, previousDistinctId: "anonA", email: "one@x.com" }),
+      ev({ distinctId: "mail2", eventTs: 40, previousDistinctId: "anonB", email: "two@x.com" }),
+      ev({ distinctId: "anonA", eventTs: 50, set: { plan: "free" } }),
+      ev({ distinctId: "mail1", eventTs: 60, set: { plan: "pro" } }),
+      ev({ distinctId: "phone1", eventTs: 70, previousDistinctId: "mail1" }),
+      ev({ distinctId: "anonC", eventTs: 80, set: { device: "web" } }),
+      ev({ distinctId: "mail2", eventTs: 90, setOnce: { firstTouch: "ad" } }),
+      ev({ distinctId: "mail2", eventTs: 100, setOnce: { firstTouch: "organic" } }),
+      ev({ distinctId: "phone1", eventTs: 110, set: { plan: "enterprise" } }),
+      ev({ distinctId: "anonC", eventTs: 120, set: { plan: "trial" } }),
+    ];
+    const reference = normalize(project(events));
+    const rng = mulberry32(0x5eed);
+    for (let i = 0; i < 200; i++) {
+      expect(normalize(project(shuffle(events, rng)))).toEqual(reference);
+    }
+
+    // Spot-check the resolved shape so a consistent-but-wrong canonical fails.
+    const projection = project(events);
+    expect(projection.canonicalOf.get("phone1")).toBe("anonA");
+    expect(projection.persons.get("anonA")?.distinctIds).toEqual(["anonA", "mail1", "phone1"]);
+    expect(projection.persons.get("anonA")?.traits.plan).toBe("enterprise");
+    expect(projection.persons.get("anonB")?.distinctIds).toEqual(["anonB", "mail2"]);
+    expect(projection.persons.get("anonB")?.traits.firstTouch).toBe("ad");
+  });
+});
diff --git a/packages/core/test/domain/person/Person.test.ts b/packages/core/test/domain/person/Person.test.ts
new file mode 100644
index 000000000..6349e8c33
--- /dev/null
+++ b/packages/core/test/domain/person/Person.test.ts
@@ -0,0 +1,235 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  Person,
+  PersonIdentity,
+  PersonIdentityKind,
+  PersonProfile,
+} from "../../../src/domain/person/Person.ts";
+
+/**
+ * Builds a fresh {@link PersonIdentity} per call so no test shares mutable
+ * state. Defaults to an anonymous identity with null timestamps; pass
+ * overrides for the field under test.
+ */
+const identity = (overrides: Partial<PersonIdentity> = {}): PersonIdentity =>
+  new PersonIdentity({
+    id: "pi_default",
+    distinctId: "did_default",
+    personId: "p_default",
+    projectId: "proj_default",
+    kind: PersonIdentityKind.Anonymous,
+    version: 0,
+    createdAt: null,
+    updatedAt: null,
+    ...overrides,
+  });
+
+/**
+ * Builds a fresh {@link Person} per call. Defaults to a non-archived,
+ * non-merged person with no identities; pass overrides for the field under
+ * test.
+ */
+const person = (overrides: Partial<Person> = {}): Person =>
+  new Person({
+    id: "p_default",
+    projectId: "proj_default",
+    email: null,
+    name: null,
+    archivedAt: null,
+    createdAt: null,
+    mergedIntoPersonId: null,
+    identities: [],
+    ...overrides,
+  });
+
+describe("PersonIdentity.compareForPrimary", () => {
+  it("ranks the identified identity ahead of the anonymous one (higher kind wins)", () => {
+    const identified = identity({ distinctId: "did_a", kind: PersonIdentityKind.Identified });
+    const anonymous = identity({ distinctId: "did_b", kind: PersonIdentityKind.Anonymous });
+    // negative => `identified` sorts before `anonymous`.
+    expect(PersonIdentity.compareForPrimary(identified, anonymous)).toBeLessThan(0);
+    expect(PersonIdentity.compareForPrimary(anonymous, identified)).toBeGreaterThan(0);
+  });
+
+  it("orders same-kind identities by newest updatedAt first", () => {
+    const newer = identity({ distinctId: "did_a", updatedAt: new Date("2026-01-02T00:00:00Z") });
+    const older = identity({ distinctId: "did_b", updatedAt: new Date("2026-01-01T00:00:00Z") });
+    expect(PersonIdentity.compareForPrimary(newer, older)).toBeLessThan(0);
+    expect(PersonIdentity.compareForPrimary(older, newer)).toBeGreaterThan(0);
+  });
+
+  it("falls back to newest createdAt first when kind and updatedAt are equal", () => {
+    const sharedUpdatedAt = new Date("2026-01-05T00:00:00Z");
+    const newer = identity({
+      distinctId: "did_a",
+      updatedAt: sharedUpdatedAt,
+      createdAt: new Date("2026-01-02T00:00:00Z"),
+    });
+    const older = identity({
+      distinctId: "did_b",
+      updatedAt: sharedUpdatedAt,
+      createdAt: new Date("2026-01-01T00:00:00Z"),
+    });
+    expect(PersonIdentity.compareForPrimary(newer, older)).toBeLessThan(0);
+    expect(PersonIdentity.compareForPrimary(older, newer)).toBeGreaterThan(0);
+  });
+
+  it("uses a lexicographic distinctId tie-breaker when kind/updatedAt/createdAt all match", () => {
+    const sharedAt = new Date("2026-01-05T00:00:00Z");
+    const a = identity({ distinctId: "aaa", updatedAt: sharedAt, createdAt: sharedAt });
+    const b = identity({ distinctId: "bbb", updatedAt: sharedAt, createdAt: sharedAt });
+    // "aaa".localeCompare("bbb") < 0, so `a` sorts first deterministically.
+    expect(PersonIdentity.compareForPrimary(a, b)).toBeLessThan(0);
+    expect(PersonIdentity.compareForPrimary(b, a)).toBeGreaterThan(0);
+    expect(PersonIdentity.compareForPrimary(a, a)).toBe(0);
+  });
+
+  it("treats null timestamps as epoch (0) so a dated identity outranks an undated one", () => {
+    const dated = identity({ distinctId: "did_a", updatedAt: new Date("2026-01-01T00:00:00Z") });
+    const undated = identity({ distinctId: "did_b", updatedAt: null });
+    expect(PersonIdentity.compareForPrimary(dated, undated)).toBeLessThan(0);
+    expect(PersonIdentity.compareForPrimary(undated, dated)).toBeGreaterThan(0);
+  });
+});
+
+describe("Person.isArchived", () => {
+  it("returns true when archivedAt is a date", () => {
+    expect(person({ archivedAt: new Date("2026-01-01T00:00:00Z") }).isArchived()).toBe(true);
+  });
+
+  it("returns false when archivedAt is null", () => {
+    expect(person({ archivedAt: null }).isArchived()).toBe(false);
+  });
+});
+
+describe("Person.isMerged", () => {
+  it("returns true when mergedIntoPersonId is set", () => {
+    expect(person({ mergedIntoPersonId: "p_target" }).isMerged()).toBe(true);
+  });
+
+  it("returns false when mergedIntoPersonId is null", () => {
+    expect(person({ mergedIntoPersonId: null }).isMerged()).toBe(false);
+  });
+});
+
+describe("Person.primaryIdentity", () => {
+  it("returns undefined when the person has no identities", () => {
+    expect(person({ identities: [] }).primaryIdentity()).toBeUndefined();
+  });
+
+  it("returns the sole identity when there is exactly one", () => {
+    const only = identity({ id: "pi_only", distinctId: "did_only" });
+    const result = person({ identities: [only] }).primaryIdentity();
+    expect(result).toBeDefined();
+    expect(result?.id).toBe("pi_only");
+  });
+
+  it("picks the identified identity over the anonymous one regardless of array order", () => {
+    const anonymous = identity({
+      id: "pi_anon",
+      distinctId: "did_anon",
+      kind: PersonIdentityKind.Anonymous,
+    });
+    const identified = identity({
+      id: "pi_id",
+      distinctId: "did_id",
+      kind: PersonIdentityKind.Identified,
+    });
+    expect(person({ identities: [anonymous, identified] }).primaryIdentity()?.id).toBe("pi_id");
+    expect(person({ identities: [identified, anonymous] }).primaryIdentity()?.id).toBe("pi_id");
+  });
+
+  it("picks the identity with the newer updatedAt when kind is equal", () => {
+    const newer = identity({
+      id: "pi_newer",
+      distinctId: "did_newer",
+      updatedAt: new Date("2026-02-01T00:00:00Z"),
+    });
+    const older = identity({
+      id: "pi_older",
+      distinctId: "did_older",
+      updatedAt: new Date("2026-01-01T00:00:00Z"),
+    });
+    expect(person({ identities: [older, newer] }).primaryIdentity()?.id).toBe("pi_newer");
+  });
+
+  it("falls back to createdAt ordering when updatedAt is equal", () => {
+    const sharedUpdatedAt = new Date("2026-03-01T00:00:00Z");
+    const newer = identity({
+      id: "pi_newer",
+      distinctId: "did_newer",
+      updatedAt: sharedUpdatedAt,
+      createdAt: new Date("2026-02-01T00:00:00Z"),
+    });
+    const older = identity({
+      id: "pi_older",
+      distinctId: "did_older",
+      updatedAt: sharedUpdatedAt,
+      createdAt: new Date("2026-01-01T00:00:00Z"),
+    });
+    expect(person({ identities: [older, newer] }).primaryIdentity()?.id).toBe("pi_newer");
+  });
+
+  it("does not mutate the original identities array (sorts a copy)", () => {
+    const a = identity({ id: "pi_a", distinctId: "zzz" });
+    const b = identity({ id: "pi_b", distinctId: "aaa" });
+    const identities = [a, b];
+    const subject = person({ identities });
+    subject.primaryIdentity();
+    // The comparator would reorder [zzz, aaa] -> [aaa, zzz]; the source must
+    // stay in its original order because `primaryIdentity` sorts a spread copy.
+    expect(subject.identities[0]?.id).toBe("pi_a");
+    expect(subject.identities[1]?.id).toBe("pi_b");
+  });
+});
+
+describe("Person.toProfile", () => {
+  it("returns undefined when there is no identity (and thus no distinctId)", () => {
+    expect(person({ identities: [] }).toProfile()).toBeUndefined();
+  });
+
+  it("projects the person plus its primary identity into a PersonProfile", () => {
+    const primary = identity({
+      id: "pi_primary",
+      distinctId: "did_primary",
+      kind: PersonIdentityKind.Identified,
+    });
+    const profile = person({ id: "p_1", projectId: "proj_1", identities: [primary] }).toProfile();
+    expect(profile).toBeInstanceOf(PersonProfile);
+    expect(profile?.personId).toBe("p_1");
+    expect(profile?.projectId).toBe("proj_1");
+  });
+
+  it("preserves the person fields (email, name, archivedAt, createdAt, mergedIntoPersonId)", () => {
+    const createdAt = new Date("2026-01-01T00:00:00Z");
+    const archivedAt = new Date("2026-02-01T00:00:00Z");
+    const profile = person({
+      email: "person@example.com",
+      name: "Ada Lovelace",
+      archivedAt,
+      createdAt,
+      mergedIntoPersonId: "p_target",
+      identities: [identity({ distinctId: "did_x" })],
+    }).toProfile();
+    expect(profile?.email).toBe("person@example.com");
+    expect(profile?.name).toBe("Ada Lovelace");
+    expect(profile?.archivedAt).toBe(archivedAt);
+    expect(profile?.createdAt).toBe(createdAt);
+    expect(profile?.mergedIntoPersonId).toBe("p_target");
+  });
+
+  it("sources the distinctId from the primary identity", () => {
+    const anonymous = identity({ distinctId: "did_anon", kind: PersonIdentityKind.Anonymous });
+    const identified = identity({ distinctId: "did_id", kind: PersonIdentityKind.Identified });
+    const profile = person({ identities: [anonymous, identified] }).toProfile();
+    expect(profile?.distinctId).toBe("did_id");
+  });
+
+  it("sources the kind from the primary identity", () => {
+    const anonymous = identity({ distinctId: "did_anon", kind: PersonIdentityKind.Anonymous });
+    const identified = identity({ distinctId: "did_id", kind: PersonIdentityKind.Identified });
+    const profile = person({ identities: [anonymous, identified] }).toProfile();
+    expect(profile?.kind).toBe(PersonIdentityKind.Identified);
+  });
+});
diff --git a/packages/core/test/integration-harness.integration.test.ts b/packages/core/test/integration-harness.integration.test.ts
new file mode 100644
index 000000000..724ff71cb
--- /dev/null
+++ b/packages/core/test/integration-harness.integration.test.ts
@@ -0,0 +1,21 @@
+import * as Effect from "effect/Effect";
+import { expect } from "vitest";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+
+const { stack, test } = CoreIntegrationTestHarness.make();
+
+test(
+  "deploys the backend stack",
+  Effect.gen(function* () {
+    const output = yield* stack;
+    expect(output.backendUrl).toBeDefined();
+    expect(output.hyperdriveId).toBeDefined();
+    expect(output.mimicDbUrl).toBeDefined();
+    expect(output.wwwUrl).toBeDefined();
+    // Ephemeral stages expose credentials for the in-process harness layers.
+    expect(output.testConnections).not.toBeNull();
+    expect(output.testConnections?.db.host).toBeDefined();
+    expect(output.testConnections?.clickhouse.url).toBeDefined();
+    expect(output.testConnections?.workos.clientId).toBeDefined();
+  }),
+);
diff --git a/packages/core/test/runtime-context-types.ts b/packages/core/test/runtime-context-types.ts
new file mode 100644
index 000000000..b8f10e120
--- /dev/null
+++ b/packages/core/test/runtime-context-types.ts
@@ -0,0 +1,69 @@
+import type { Effect } from "effect";
+import type { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+import type {
+  PolicyCounterStoreShape,
+  PolicyStoreError,
+  RequestLimitCheck,
+} from "../src/services/analyticsIngest/PolicyCounterStore.ts";
+import type {
+  QueueProducer,
+  QueueProducerError,
+} from "../src/services/infrastructure/QueueProducer.ts";
+
+declare const producer: QueueProducer<string>;
+
+const queuePublishRuntime: Effect.Effect<void, QueueProducerError, PlatformRuntime> =
+  producer.publish("message");
+const queueBatchRuntime: Effect.Effect<void, QueueProducerError, PlatformRuntime> =
+  producer.publishBatch(["message"]);
+
+// @ts-expect-error Queue publishes must keep the platform runtime marker.
+const queuePublishNeutral: Effect.Effect<void, QueueProducerError, never> =
+  producer.publish("message");
+
+// @ts-expect-error Queue batch publishes must keep the platform runtime marker.
+const queueBatchNeutral: Effect.Effect<void, QueueProducerError, never> = producer.publishBatch([
+  "message",
+]);
+
+declare const policyStore: PolicyCounterStoreShape;
+
+const requestLimitRuntime: Effect.Effect<RequestLimitCheck, PolicyStoreError, PlatformRuntime> =
+  policyStore.checkRequestLimit({
+    now: new Date(0),
+    projectId: "project",
+    requestsPerMinute: 1,
+  });
+
+const eventQuotaRuntime: Effect.Effect<boolean, PolicyStoreError, PlatformRuntime> =
+  policyStore.checkEventQuota({
+    now: new Date(0),
+    projectId: "project",
+    quota: 1,
+  });
+
+// @ts-expect-error Policy counters backed by runtime resources must stay runtime-colored.
+const requestLimitNeutral: Effect.Effect<RequestLimitCheck, PolicyStoreError, never> =
+  policyStore.checkRequestLimit({
+    now: new Date(0),
+    projectId: "project",
+    requestsPerMinute: 1,
+  });
+
+// @ts-expect-error Policy counters backed by runtime resources must stay runtime-colored.
+const eventQuotaNeutral: Effect.Effect<boolean, PolicyStoreError, never> =
+  policyStore.checkEventQuota({
+    now: new Date(0),
+    projectId: "project",
+    quota: 1,
+  });
+
+void queuePublishRuntime;
+void queueBatchRuntime;
+void requestLimitRuntime;
+void eventQuotaRuntime;
+void queuePublishNeutral;
+void queueBatchNeutral;
+void requestLimitNeutral;
+void eventQuotaNeutral;
diff --git a/packages/core/test/services/analytics/AnalyticsService.integration.test.ts b/packages/core/test/services/analytics/AnalyticsService.integration.test.ts
new file mode 100644
index 000000000..c4f11cf39
--- /dev/null
+++ b/packages/core/test/services/analytics/AnalyticsService.integration.test.ts
@@ -0,0 +1,451 @@
+/**
+ * Integration tests for {@link AnalyticsService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * The service is read-only — it writes nothing to MySQL or ClickHouse — so
+ * these tests need no row cleanup. What they verify instead is the
+ * *orchestration* layered on top of the (separately unit-tested) pure helpers:
+ *
+ *  - permission gates: `listRecentEvents` requires `project:all` on the target
+ *    project; `queryAnalyticsInsights` requires `organization:all` on each
+ *    query's organization. Both are exercised via {@link asUnauthorized}, which
+ *    re-authenticates just the guarded call with a no-access session that
+ *    shadows the harness's default full-permission session.
+ *  - the inline `Db` project lookups (org resolution for the recent-events
+ *    tenant setting; the org's project list that seeds filter compilation).
+ *  - composition errors that propagate untouched past the service's
+ *    `catchTags` net (`UnknownInsightError`, `UnsupportedAnalyticsBreakdownError`,
+ *    `InvalidAnalyticsQueryError` for an unsupported granularity,
+ *    `InvalidTimeRangeError` for an inverted custom range).
+ *  - the derived-metric summary contract: a currency insight stamps
+ *    `summary.currency = "USD"`, a rate insight leaves it `undefined`; the
+ *    empty-series branch (no projects match the filter) skips ClickHouse
+ *    entirely and yields a zero summary.
+ *  - the real ClickHouse read path: against the fixture org (which has no
+ *    ingested events) the metric query runs end-to-end and returns an empty
+ *    sparkline rather than throwing.
+ *
+ * The pure helpers themselves — filter compilation, time-range presets, the
+ * insight registry, JSON/date row parsing — are covered by the sibling
+ * `*.test.ts` unit files and are not re-asserted here.
+ *
+ * Typed failures are asserted with `Effect.flip` (project convention),
+ * narrowing the swapped error with `instanceof` before reading its fields.
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  AnalyticsService,
+  AnalyticsServiceError,
+} from "@voidhash/core/services/analytics/AnalyticsService";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  InvalidAnalyticsQueryError,
+  InvalidTimeRangeError,
+  UnknownInsightError,
+  UnsupportedAnalyticsBreakdownError,
+} from "@voidhash/core/domain/analytics/Analytics";
+import { Db } from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+const organizationId = CoreTestFixture.organizationId;
+
+/**
+ * A `user`-method session for the fixture principal carrying neither project
+ * nor organization access — used to assert both permission gates reject.
+ */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no access. Re-authenticates just this
+ * effect with the no-access session; the inner provision shadows the harness's
+ * default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("AnalyticsService.listRecentEvents", () => {
+  test(
+    "returns an events feed against the real ClickHouse for the fixture project",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      // The point is that the query path — org resolution + tenant-scoped
+      // ClickHouse read — runs end-to-end without throwing and returns a
+      // well-formed feed. The live ClickHouse may already hold rows for the
+      // fixture project (seeded by sibling suites / persisted across runs), so
+      // we assert structure + the limit/hasMore contract rather than an exact
+      // (and shared-state-dependent) row count.
+      const limit = 5;
+      const result = yield* analytics.listRecentEvents({ limit, projectId });
+
+      expect(Array.isArray(result.events)).toBe(true);
+      // Never returns more than the requested limit; the +1 lookahead is sliced
+      // off before mapping (AnalyticsService.ts: rows.slice(0, limit)).
+      expect(result.events.length).toBeLessThanOrEqual(limit);
+      // hasMore is `rows.length > limit`, so it can only be true when the page
+      // is full.
+      if (result.hasMore) {
+        expect(result.events.length).toBe(limit);
+      }
+      // Any rows that came back must carry the mapped event shape.
+      for (const event of result.events) {
+        expect(typeof event.eventId).toBe("string");
+        expect(typeof event.eventName).toBe("string");
+        expect(event.receivedAt).toBeInstanceOf(Date);
+        expect(event.processedAt).toBeInstanceOf(Date);
+        expect(typeof event.context).toBe("object");
+        expect(typeof event.properties).toBe("object");
+      }
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "resolves the project's organization for the tenant-scoped read",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+      const db = yield* Db;
+
+      // Confirm the inline Db lookup the service performs sees the same org we
+      // expect to be stamped as SQL_organization_id on the ClickHouse query.
+      const project = yield* db.query.projects.findFirst({
+        columns: { organizationId: true },
+        where: { id: projectId },
+      });
+      expect(project?.organizationId).toBe(organizationId);
+
+      // A larger explicit limit must be accepted (clamped to MAX_LIMIT=500
+      // internally) and still return cleanly.
+      const result = yield* analytics.listRecentEvents({ limit: 1000, projectId });
+      expect(result.hasMore).toBe(false);
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and reads nothing",
+    // No cleanup wrapper: the service writes nothing on any path.
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      const error = yield* Effect.flip(asUnauthorized(analytics.listRecentEvents({ projectId })));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  vitestTest.todo(
+    "listRecentEvents: orders by event_ts DESC, honors limit + hasMore, and parses person join / JSON context + properties / dates — requires seeding events_v2 + persons_v1 rows in ClickHouse under the fixture org, which there is no in-process writer seam for here (the analytics writer pipeline runs in a separate worker runtime).",
+  );
+});
+
+describe("AnalyticsService.queryAnalyticsInsights", () => {
+  test(
+    "rejects an unknown insight id with UnknownInsightError",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      const error = yield* Effect.flip(
+        analytics.queryAnalyticsInsights({
+          queries: [
+            {
+              context: { organizationId },
+              // Cast: the service validates the id against the registry at
+              // runtime; we deliberately pass one outside the BuiltInInsightId
+              // union to exercise that guard.
+              insightId: "builtin/does_not_exist" as never,
+              key: "k",
+              timeRange: { preset: "last_7d" },
+            },
+          ],
+        }),
+      );
+      expect(error).toBeInstanceOf(UnknownInsightError);
+      if (error instanceof UnknownInsightError) {
+        expect(error.insightId).toBe("builtin/does_not_exist");
+      }
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without organization:all",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      const error = yield* Effect.flip(
+        asUnauthorized(
+          analytics.queryAnalyticsInsights({
+            queries: [
+              {
+                context: { organizationId },
+                insightId: "builtin/revenue",
+                key: "k",
+                timeRange: { preset: "last_7d" },
+              },
+            ],
+          }),
+        ),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects an inverted custom time range with InvalidTimeRangeError",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      const error = yield* Effect.flip(
+        analytics.queryAnalyticsInsights({
+          queries: [
+            {
+              context: { organizationId },
+              insightId: "builtin/revenue",
+              key: "k",
+              timeRange: {
+                end: new Date("2024-01-01T00:00:00Z"),
+                preset: "custom",
+                start: new Date("2024-06-01T00:00:00Z"),
+              },
+            },
+          ],
+        }),
+      );
+      expect(error).toBeInstanceOf(InvalidTimeRangeError);
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects breakdowns with UnsupportedAnalyticsBreakdownError",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      const error = yield* Effect.flip(
+        analytics.queryAnalyticsInsights({
+          queries: [
+            {
+              breakdowns: [{ field: "product.id" }],
+              context: { organizationId },
+              insightId: "builtin/revenue",
+              key: "k",
+              timeRange: { preset: "last_7d" },
+            },
+          ],
+        }),
+      );
+      expect(error).toBeInstanceOf(UnsupportedAnalyticsBreakdownError);
+      if (error instanceof UnsupportedAnalyticsBreakdownError) {
+        expect(error.field).toBe("product.id");
+      }
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects an unsupported granularity for the insight with InvalidAnalyticsQueryError",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      // `builtin/mrr` supports only the non-hourly granularities, so requesting
+      // `hour` must be rejected.
+      const error = yield* Effect.flip(
+        analytics.queryAnalyticsInsights({
+          queries: [
+            {
+              context: { organizationId },
+              granularity: "hour",
+              insightId: "builtin/mrr",
+              key: "k",
+              timeRange: { preset: "last_7d" },
+            },
+          ],
+        }),
+      );
+      expect(error).toBeInstanceOf(InvalidAnalyticsQueryError);
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns an empty series and zero summary when the filter matches no projects",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      // Filtering project.id to an id outside the org empties the compiled
+      // projectIds, so the service short-circuits before any ClickHouse read.
+      const { results } = yield* analytics.queryAnalyticsInsights({
+        queries: [
+          {
+            context: { organizationId },
+            filter: {
+              field: "project.id",
+              op: "eq",
+              type: "predicate",
+              value: `it-nonexistent-project-${Date.now()}`,
+            },
+            insightId: "builtin/revenue",
+            key: "empty",
+            timeRange: { preset: "last_7d" },
+          },
+        ],
+      });
+
+      expect(results.length).toBe(1);
+      const entry = results.find((r) => r.key === "empty");
+      expect(entry).toBeDefined();
+      expect(entry?.insightId).toBe("builtin/revenue");
+      expect(entry?.result.kind).toBe("metric");
+      if (entry?.result.kind === "metric") {
+        expect(entry.result.sparkline).toEqual([]);
+        expect(entry.result.summary.value).toBe(0);
+      }
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "stamps USD on a currency insight and leaves currency undefined for a rate insight",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      // Both queries match no projects (empty series) so the summary value is a
+      // deterministic 0; what differs is the currency stamp, which the service
+      // derives purely from the insight id (CURRENCY_INSIGHTS vs RATE_INSIGHTS).
+      const emptyFilter = {
+        field: "project.id" as const,
+        op: "eq" as const,
+        type: "predicate" as const,
+        value: `it-nonexistent-project-${Date.now()}`,
+      };
+
+      const { results } = yield* analytics.queryAnalyticsInsights({
+        queries: [
+          {
+            context: { organizationId },
+            filter: emptyFilter,
+            insightId: "builtin/revenue",
+            key: "currency",
+            timeRange: { preset: "last_30d" },
+          },
+          {
+            context: { organizationId },
+            filter: emptyFilter,
+            insightId: "builtin/churn_rate",
+            key: "rate",
+            timeRange: { preset: "last_30d" },
+          },
+        ],
+      });
+
+      const currency = results.find((r) => r.key === "currency");
+      const rate = results.find((r) => r.key === "rate");
+
+      expect(currency?.result.kind).toBe("metric");
+      if (currency?.result.kind === "metric") {
+        expect(currency.result.summary.currency).toBe("USD");
+        expect(currency.result.summary.value).toBe(0);
+      }
+
+      expect(rate?.result.kind).toBe("metric");
+      if (rate?.result.kind === "metric") {
+        expect(rate.result.summary.currency).toBeUndefined();
+        expect(rate.result.summary.value).toBe(0);
+      }
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "runs the real ClickHouse metric read for the org's projects and returns a metric result",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      // No filter → compiled projectIds defaults to the org's project list
+      // (the fixture project), which is non-empty, so the service issues the
+      // live tenant-scoped ClickHouse query. The fixture org has no events, so
+      // the sparkline is empty — but the query must execute, not throw.
+      const { results } = yield* analytics.queryAnalyticsInsights({
+        queries: [
+          {
+            context: { organizationId },
+            insightId: "builtin/revenue",
+            key: "live",
+            timeRange: { preset: "last_7d" },
+          },
+        ],
+      });
+
+      const entry = results.find((r) => r.key === "live");
+      expect(entry).toBeDefined();
+      expect(entry?.result.kind).toBe("metric");
+      if (entry?.result.kind === "metric") {
+        expect(Array.isArray(entry.result.sparkline)).toBe(true);
+        expect(typeof entry.result.summary.value).toBe("number");
+        expect(entry.result.summary.currency).toBe("USD");
+      }
+      // The resolved range is surfaced alongside the result and is a real
+      // ordered interval.
+      expect(entry?.resolvedTimeRange.start.getTime()).toBeLessThanOrEqual(
+        entry?.resolvedTimeRange.end.getTime() ?? 0,
+      );
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "resolves multiple insights that share an underlying metric in a single call",
+    Effect.gen(function* () {
+      const analytics = yield* AnalyticsService;
+
+      // ARPU and ARPPU both derive from Revenue; queried together they share
+      // the per-call series-resolver cache. With no events the values are 0,
+      // but both must resolve to metric results in one call.
+      const { results } = yield* analytics.queryAnalyticsInsights({
+        queries: [
+          {
+            context: { organizationId },
+            insightId: "builtin/arpu",
+            key: "arpu",
+            timeRange: { preset: "last_7d" },
+          },
+          {
+            context: { organizationId },
+            insightId: "builtin/arppu",
+            key: "arppu",
+            timeRange: { preset: "last_7d" },
+          },
+        ],
+      });
+
+      expect(results.some((r) => r.key === "arpu" && r.result.kind === "metric")).toBe(true);
+      expect(results.some((r) => r.key === "arppu" && r.result.kind === "metric")).toBe(true);
+    }).pipe(Effect.provide(AnalyticsService.layer), CoreAuthSession.authenticate()),
+  );
+
+  vitestTest.todo(
+    "queryAnalyticsInsights: returns non-empty sparkline points and a summed/averaged summary for an org with ingested revenue/subscription events — requires seeding events_v2 rows under the fixture org, for which there is no in-process writer seam (analytics ingest runs in a separate worker runtime). The summary aggregation (sum vs avg) and sparkline shape are otherwise covered as pure logic in the sibling unit tests.",
+  );
+});
+
+// Referenced so the wrapped error type is imported and stays in sync with the
+// service surface even while its DB/ClickHouse failure paths are deferred above.
+void AnalyticsServiceError;
diff --git a/packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts b/packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts
new file mode 100644
index 000000000..11434e046
--- /dev/null
+++ b/packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts
@@ -0,0 +1,926 @@
+/**
+ * Integration tests for the ClickHouse analytics data accessor
+ * ({@link analyticsAccessor} / the 12 named metric helpers), run against the
+ * real ClickHouse provisioned once by `test/_testing/globalSetup.ts`.
+ *
+ * The accessor is a plain object of pure-SQL query builders — there is no
+ * service layer to provide. Each helper only requires the
+ * {@link ClickhouseWebClient} infrastructure service, which the harness already
+ * supplies (bound to the analytics database's *read-write* user, so a test can
+ * both seed and assert).
+ *
+ * Each test seeds deterministic rows into the real `events_v2` table via
+ * `ClickhouseWebClient.insertQuery`, runs a metric over a tight, uniquely-namespaced
+ * time window, and asserts the aggregated `AnalyticsDataPoint[]` the helper
+ * returns. Conventions:
+ *  - Every seeded row carries a per-test unique `event_id` prefix and a fresh
+ *    `distinct_id`, and queries use a narrow `[start, end]` window so a metric
+ *    only ever sees this test's rows. Assertions stay value/membership-based.
+ *  - Rows are scoped to the shared fixture container
+ *    (`organization_id = it_org`, `project_id = it_project`) so they match the
+ *    accessor's `project_ids` WHERE clause (and the tenant setting, were RLS
+ *    active).
+ *  - {@link withEventCleanup} lightweight-`DELETE`s every seeded row on exit,
+ *    success or failure, via `Effect.ensuring`; the global sweep does not touch
+ *    ClickHouse, so this is the only cleanup.
+ *
+ * NOTE on tenant isolation: the harness binds the ClickHouse *read-write* user,
+ * which is not subject to the readonly role's row policy. The `SQL_organization_id`
+ * setting the accessor passes is therefore inert here, so org-level RLS
+ * enforcement cannot be observed in-process — that path is recorded as a
+ * `test.todo` below. Project scoping (an explicit `project_id IN (...)` WHERE
+ * clause) IS exercised by every test.
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import type {
+  AnalyticsDataPoint,
+  CompiledAnalyticsFilter,
+  TimeGranularity,
+  TimeRangeParams,
+} from "@voidhash/core/domain/analytics/Analytics";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+import {
+  type AnalyticsQueryInput,
+  analyticsAccessor,
+} from "../../../src/services/analytics/clickhouse-accessor.ts";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+// Per-test synthetic project id: each metric seeds and queries `events_v2` over a
+// fixed 2021 window. ClickHouse `DELETE` cleanup is eventual and the global
+// teardown never sweeps ClickHouse, so a shared project would let a sibling test's
+// (or a prior run's) un-deleted rows in the same window bleed into the count.
+// `track` (below) sets this to the test's unique namespace before it seeds, so
+// every test reads ONLY its own rows regardless of cleanup timing. These reads
+// never join MySQL, so the id need not exist there.
+let currentProjectId: string = CoreTestFixture.projectId;
+const organizationId = CoreTestFixture.organizationId;
+
+const EVENTS_TABLE = "events_v2";
+
+/** Monotonic counter so namespaces stay unique even within the same millisecond. */
+let seq = 0;
+/** A unique token used to prefix every `event_id`/`distinct_id` a test seeds. */
+const uniqueNs = (label: string) => `it-cha-${label}-${Date.now()}-${seq++}`;
+
+/** Format a JS `Date` as the `YYYY-MM-DD HH:MM:SS.mmm` string ClickHouse stores. */
+const toEventTs = (date: Date): string => date.toISOString().replace("T", " ").replace("Z", "");
+
+/** A single row to seed into `events_v2`. Omitted columns default in JSONEachRow. */
+interface SeedEvent {
+  readonly eventName: string;
+  readonly eventTs: Date;
+  readonly distinctId: string;
+  readonly personId?: string;
+  readonly properties?: Record<string, unknown>;
+  /**
+   * Override the auto-derived `${ns}-${index}` event_id — used to seed two rows
+   * that share an event_id (a duplicate / redelivery) for the read-side dedup
+   * tests. Keep it `${ns}-`-prefixed so `deleteSeeded` still cleans it up.
+   */
+  readonly eventId?: string;
+  /** Latest-wins dedup ordering key (`processed_ts`); defaults to `eventTs`. */
+  readonly processedTs?: Date;
+}
+
+/**
+ * A small fixed time window every metric runs over, plus a base instant inside
+ * it. Far enough in the past that no real ingest collides with the window, and
+ * narrow enough that only this test's seeded rows fall inside it.
+ */
+const startDate = new Date("2021-01-01T00:00:00.000Z");
+const endDate = new Date("2021-01-31T23:59:59.000Z");
+const baseTs = new Date("2021-01-15T12:00:00.000Z");
+
+const timeRange = (granularity: TimeGranularity = "day"): TimeRangeParams => ({
+  endDate,
+  granularity,
+  startDate,
+});
+
+const filtersFor = (overrides: Partial<CompiledAnalyticsFilter> = {}): CompiledAnalyticsFilter => ({
+  projectIds: [currentProjectId],
+  ...overrides,
+});
+
+const queryInput = (overrides: Partial<AnalyticsQueryInput> = {}): AnalyticsQueryInput => ({
+  filters: filtersFor(overrides.filters),
+  organizationId,
+  params: overrides.params ?? timeRange(),
+});
+
+/** Seed rows into the real `events_v2`, namespacing `event_id` with `ns`. */
+const seedEvents = (ns: string, events: ReadonlyArray<SeedEvent>) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const values = events.map((event, index) => ({
+      event_id: event.eventId ?? `${ns}-${index}`,
+      event_name: event.eventName,
+      event_ts: toEventTs(event.eventTs),
+      processed_ts: toEventTs(event.processedTs ?? event.eventTs),
+      organization_id: organizationId,
+      project_id: ns,
+      distinct_id: event.distinctId,
+      person_id: event.personId ?? null,
+      event_properties: JSON.stringify(event.properties ?? {}),
+    }));
+    yield* ch.insertQuery({ table: EVENTS_TABLE, values }).pipe(Effect.asVoid);
+    // `events_v2` is a MergeTree; reads see inserted parts immediately, but be
+    // explicit so the very next SELECT is fully consistent under the RW user.
+    yield* ch`SELECT count() FROM ${ch.literal(EVENTS_TABLE)} WHERE event_id LIKE ${ch.param("String", `${ns}-%`)}`;
+  });
+
+/** Lightweight-delete every row a test seeded under `ns`. */
+const deleteSeeded = (ns: string) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    yield* ch
+      .asCommand(
+        ch`DELETE FROM ${ch.literal(EVENTS_TABLE)} WHERE event_id LIKE ${ch.param("String", `${ns}-%`)}`,
+      )
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every event-namespace it seeds is deleted afterward,
+ * regardless of how the body exits. The body registers each namespace via the
+ * `track` callback; cleanup reads the collected list lazily at finalization.
+ */
+const withEventCleanup = <E, R>(
+  body: (track: (ns: string) => string) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | ClickhouseWebClient.ClickhouseWebClient> => {
+  const namespaces: string[] = [];
+  const track = (ns: string) => {
+    namespaces.push(ns);
+    // Scope this test's seeds and reads to its own project id (see currentProjectId).
+    currentProjectId = ns;
+    return ns;
+  };
+  return body(track).pipe(
+    Effect.ensuring(Effect.forEach(namespaces, deleteSeeded, { discard: true })),
+  );
+};
+
+/** Sum of all data-point values returned by a metric. */
+const totalOf = (points: ReadonlyArray<AnalyticsDataPoint>): number =>
+  points.reduce((sum, point) => sum + point.value, 0);
+
+describe("analyticsAccessor.getRevenue", () => {
+  test(
+    "sums amount across purchase/subscription events and converts cents to dollars",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("revenue"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 1000 },
+          },
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 500 },
+          },
+          // FX-less row: only the raw original-currency `amount` is present (no
+          // `amount_usd`). USD revenue must NOT fall back to it — summing e.g.
+          // £2.50 as $2.50 is a silent miscount — so this row contributes 0.
+          {
+            eventName: "$subscription.renewed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount: 250 },
+          },
+          // Event outside the metric's event-name set is ignored.
+          {
+            eventName: "$subscription.canceled",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 9999 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getRevenue(queryInput());
+        // (1000 + 500) cents -> 15 dollars; the FX-less `amount`-only row is excluded.
+        expect(totalOf(points)).toBeCloseTo(15, 5);
+        for (const point of points) {
+          expect(point.timestamp).toBeInstanceOf(Date);
+          expect(Number.isNaN(point.timestamp.getTime())).toBe(false);
+        }
+      }),
+    ),
+  );
+
+  test(
+    "returns an empty array (not null) when no events fall in the window",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("revenue-empty"));
+        // Seed a row OUTSIDE the queried window so nothing matches.
+        yield* seedEvents(ns, [
+          {
+            eventName: "$purchase.completed",
+            eventTs: new Date("2019-06-01T00:00:00.000Z"),
+            distinctId: `${ns}-u`,
+            properties: { amount_usd: 1000 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getRevenue(queryInput());
+        expect(Array.isArray(points)).toBe(true);
+        expect(points).toEqual([]);
+      }),
+    ),
+  );
+
+  test(
+    "honours a non-matching project filter and returns nothing",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("revenue-project"));
+        yield* seedEvents(ns, [
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId: `${ns}-u`,
+            properties: { amount_usd: 4200 },
+          },
+        ]);
+
+        // Filter on a project the seeded rows do not belong to.
+        const points = yield* analyticsAccessor.getRevenue(
+          queryInput({ filters: { projectIds: ["it_project_absent"] } }),
+        );
+        expect(points).toEqual([]);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getMRR", () => {
+  test(
+    "sums subscription revenue but excludes trial subscriptions",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("mrr"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 999, is_trial: false },
+          },
+          {
+            eventName: "$subscription.renewed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 999, is_trial: false },
+          },
+          // Trial subscription is excluded by the is_trial = 0 guard.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 1500, is_trial: true },
+          },
+          // Purchase events are not part of the MRR event set.
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 7777 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getMRR(queryInput());
+        // (999 + 999) cents -> 19.98 dollars; trial + purchase excluded.
+        expect(totalOf(points)).toBeCloseTo(19.98, 5);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getChurnedRevenue", () => {
+  test(
+    "sums amount over subscription.canceled and subscription.expired events",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("churned-rev"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.canceled",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 600 },
+          },
+          {
+            eventName: "$subscription.expired",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 400 },
+          },
+          // Active subscription is not churn.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 9999 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getChurnedRevenue(queryInput());
+        // (600 + 400) cents -> 10 dollars.
+        expect(totalOf(points)).toBeCloseTo(10, 5);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getActiveSubscriptions", () => {
+  test(
+    "counts distinct non-trial subscription ids",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("active-subs"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-s1`, is_trial: false },
+          },
+          // Same subscription id seen again -> still one distinct.
+          {
+            eventName: "$subscription.renewed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-s1`, is_trial: false },
+          },
+          {
+            eventName: "$subscription.active",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-s2`, is_trial: false },
+          },
+          // Trial subscription is filtered out by is_trial = 0.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-s3`, is_trial: true },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getActiveSubscriptions(queryInput());
+        // s1 + s2 distinct, s3 excluded as trial.
+        expect(totalOf(points)).toBe(2);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getActiveTrials", () => {
+  test(
+    "counts distinct trial subscription ids only",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("active-trials"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-t1`, is_trial: true },
+          },
+          {
+            eventName: "$subscription.active",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-t2`, is_trial: true },
+          },
+          // Non-trial subscription is excluded by is_trial = 1.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-n1`, is_trial: false },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getActiveTrials(queryInput());
+        expect(totalOf(points)).toBe(2);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getNewSubscriptions", () => {
+  test(
+    "counts non-trial subscription.created events",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("new-subs"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-a`, is_trial: false },
+          },
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-b`, is_trial: false },
+          },
+          // Trial creation excluded by is_trial = 0.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-c`, is_trial: true },
+          },
+          // Renewal is not a "new" subscription.
+          {
+            eventName: "$subscription.renewed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-a`, is_trial: false },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getNewSubscriptions(queryInput());
+        // count() over the two non-trial creations.
+        expect(totalOf(points)).toBe(2);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getChurnedSubscriptions", () => {
+  test(
+    "counts subscription.canceled and subscription.expired events",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("churned-subs"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.canceled",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-a` },
+          },
+          {
+            eventName: "$subscription.expired",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-b` },
+          },
+          {
+            eventName: "$subscription.expired",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-c` },
+          },
+          // Active subscription is not churn.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-d` },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getChurnedSubscriptions(queryInput());
+        // count() over the three cancel/expire events.
+        expect(totalOf(points)).toBe(3);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getTrials", () => {
+  test(
+    "counts trial subscription.created events",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("trials"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-a`, is_trial: true },
+          },
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-b`, is_trial: true },
+          },
+          // Non-trial creation excluded by is_trial = 1.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-c`, is_trial: false },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getTrials(queryInput());
+        expect(totalOf(points)).toBe(2);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getTrialConversions", () => {
+  test(
+    "counts distinct subscription ids flagged converted_from_trial",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("trial-conv"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-a`, converted_from_trial: true },
+          },
+          // Same subscription id repeated -> still one distinct.
+          {
+            eventName: "$subscription.renewed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-a`, converted_from_trial: true },
+          },
+          {
+            eventName: "$subscription.active",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-b`, converted_from_trial: true },
+          },
+          // Not converted -> excluded by converted_from_trial = 1.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { subscription_id: `${ns}-c`, converted_from_trial: false },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getTrialConversions(queryInput());
+        expect(totalOf(points)).toBe(2);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getPersonCount", () => {
+  // Regression guard for the empty-string key collapse: with no pending-override
+  // match the effective-person key must fall through to each event's own
+  // person_id (the source `nullIf(overrides.col, '')` turns the unmatched join's
+  // '' back into NULL), so distinct persons stay distinct instead of collapsing
+  // into a single '' group.
+  test(
+    "counts distinct effective persons appearing up to the window end",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("person-count"));
+        yield* seedEvents(ns, [
+          { eventName: "$pageview", eventTs: baseTs, distinctId: `${ns}-d1`, personId: `${ns}-p1` },
+          { eventName: "$pageview", eventTs: baseTs, distinctId: `${ns}-d2`, personId: `${ns}-p2` },
+          { eventName: "$pageview", eventTs: baseTs, distinctId: `${ns}-d3`, personId: `${ns}-p3` },
+          // Same person seen again -> still one distinct person, not double-counted.
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId: `${ns}-d3`,
+            personId: `${ns}-p3`,
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getPersonCount(queryInput());
+        // Three distinct persons (p1, p2, p3); the repeated p3 event folds in.
+        expect(totalOf(points)).toBe(3);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getNewPersons", () => {
+  test(
+    "counts only persons first seen inside the window",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("new-persons"));
+        const beforeWindow = new Date("2020-06-01T00:00:00.000Z");
+        yield* seedEvents(ns, [
+          // Person A's earliest event is BEFORE the window, so min(event_ts) is
+          // 2020 and the `first_seen >= start` filter excludes it.
+          {
+            eventName: "$pageview",
+            eventTs: beforeWindow,
+            distinctId: `${ns}-dA`,
+            personId: `${ns}-pA`,
+          },
+          { eventName: "$pageview", eventTs: baseTs, distinctId: `${ns}-dA`, personId: `${ns}-pA` },
+          // Person B is first seen inside the window.
+          { eventName: "$pageview", eventTs: baseTs, distinctId: `${ns}-dB`, personId: `${ns}-pB` },
+        ]);
+
+        const points = yield* analyticsAccessor.getNewPersons(queryInput());
+        // Only person B is "new" in [start, end]; person A leaked in from 2020.
+        expect(totalOf(points)).toBe(1);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor.getPayingPersonCount", () => {
+  test(
+    "counts distinct persons with a positive-amount purchase or subscription",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("paying-persons"));
+        yield* seedEvents(ns, [
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId: `${ns}-dA`,
+            personId: `${ns}-pA`,
+            properties: { amount_usd: 1000 },
+          },
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId: `${ns}-dB`,
+            personId: `${ns}-pB`,
+            properties: { amount_usd: 500 },
+          },
+          // Person C's only paying-eligible event has a zero amount, so the
+          // `amount > 0` guard drops it and C does not count.
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId: `${ns}-dC`,
+            personId: `${ns}-pC`,
+            properties: { amount_usd: 0 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getPayingPersonCount(queryInput());
+        // Persons A and B paid; person C's zero-amount row is excluded.
+        expect(totalOf(points)).toBe(2);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor — granularity & period normalisation", () => {
+  test(
+    "buckets revenue per day and normalises each period string to a Date",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("granularity-day"));
+        const distinctId = `${ns}-u`;
+        const dayA = new Date("2021-01-10T08:00:00.000Z");
+        const dayB = new Date("2021-01-20T20:00:00.000Z");
+        yield* seedEvents(ns, [
+          {
+            eventName: "$purchase.completed",
+            eventTs: dayA,
+            distinctId,
+            properties: { amount_usd: 1000 },
+          },
+          // Same day, different hour -> folds into the same day bucket.
+          {
+            eventName: "$purchase.completed",
+            eventTs: new Date("2021-01-10T18:00:00.000Z"),
+            distinctId,
+            properties: { amount_usd: 500 },
+          },
+          {
+            eventName: "$purchase.completed",
+            eventTs: dayB,
+            distinctId,
+            properties: { amount_usd: 700 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getRevenue(queryInput());
+        // Two distinct day buckets, ordered ascending by period.
+        expect(points.length).toBe(2);
+        expect(points[0]?.timestamp.getTime()).toBeLessThan(points[1]?.timestamp.getTime() ?? 0);
+        // Day buckets normalise to UTC midnight Dates.
+        const isoDays = points.map((point) => point.timestamp.toISOString().slice(0, 10));
+        expect(isoDays).toContain("2021-01-10");
+        expect(isoDays).toContain("2021-01-20");
+        // Day A bucket = (1000 + 500) cents -> 15 dollars.
+        const dayAPoint = points.find(
+          (point) => point.timestamp.toISOString().slice(0, 10) === "2021-01-10",
+        );
+        expect(dayAPoint?.value).toBeCloseTo(15, 5);
+      }),
+    ),
+  );
+
+  test(
+    "month granularity collapses events across the window into one bucket",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("granularity-month"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$purchase.completed",
+            eventTs: new Date("2021-01-05T00:00:00.000Z"),
+            distinctId,
+            properties: { amount_usd: 1000 },
+          },
+          {
+            eventName: "$purchase.completed",
+            eventTs: new Date("2021-01-25T00:00:00.000Z"),
+            distinctId,
+            properties: { amount_usd: 1000 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getRevenue(
+          queryInput({ params: timeRange("month") }),
+        );
+        // All January events fold into a single month bucket = 20 dollars.
+        expect(points.length).toBe(1);
+        expect(points[0]?.timestamp.toISOString().slice(0, 10)).toBe("2021-01-01");
+        expect(points[0]?.value).toBeCloseTo(20, 5);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor — compiled filter constraints", () => {
+  test(
+    "getRevenue applies the product_ids IN filter from CompiledAnalyticsFilter",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("filter-product"));
+        const distinctId = `${ns}-u`;
+        const keptProduct = `${ns}-prod-keep`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 1000, product_id: keptProduct },
+          },
+          // Different product -> excluded by the product filter.
+          {
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 9999, product_id: `${ns}-prod-other` },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getRevenue(
+          queryInput({ filters: { projectIds: [ns], productIds: [keptProduct] } }),
+        );
+        // Only the kept product's 1000 cents -> 10 dollars.
+        expect(totalOf(points)).toBeCloseTo(10, 5);
+      }),
+    ),
+  );
+
+  test(
+    "getRevenue applies the subscription_status IN filter",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("filter-status"));
+        const distinctId = `${ns}-u`;
+        yield* seedEvents(ns, [
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 1000, subscription_status: 1 },
+          },
+          // Different status -> excluded.
+          {
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            properties: { amount_usd: 9999, subscription_status: 2 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getRevenue(
+          queryInput({ filters: { projectIds: [ns], subscriptionStatuses: [1] } }),
+        );
+        // Only status 1's 1000 cents -> 10 dollars.
+        expect(totalOf(points)).toBeCloseTo(10, 5);
+      }),
+    ),
+  );
+});
+
+describe("analyticsAccessor — read-side dedup by event_id (latest processed_ts wins)", () => {
+  test(
+    "collapses duplicate rows sharing an event_id and keeps the newest processed_ts",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("dedup-revenue"));
+        const distinctId = `${ns}-u`;
+        const dupId = `${ns}-dup`;
+        yield* seedEvents(ns, [
+          // Original write of the event.
+          {
+            eventId: dupId,
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId,
+            processedTs: new Date("2021-01-15T12:00:00.000Z"),
+            properties: { amount_usd: 1000 },
+          },
+          // A redelivery / replay of the SAME event_id with a later processed_ts
+          // and a corrected amount. The MergeTree keeps both rows; read-side
+          // latest-wins dedup must keep ONLY this one.
+          {
+            eventId: dupId,
+            eventName: "$purchase.completed",
+            eventTs: baseTs,
+            distinctId,
+            processedTs: new Date("2021-01-16T12:00:00.000Z"),
+            properties: { amount_usd: 1500 },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getRevenue(queryInput());
+        // Counted once, and the newer processed_ts (1500 cents) wins -> 15 dollars
+        // (NOT 25, which is what summing both un-deduped rows would give).
+        expect(totalOf(points)).toBeCloseTo(15, 5);
+      }),
+    ),
+  );
+
+  test(
+    "a count() metric counts a duplicated event_id once, not twice",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("dedup-count"));
+        const distinctId = `${ns}-u`;
+        const dupId = `${ns}-c`;
+        yield* seedEvents(ns, [
+          {
+            eventId: dupId,
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            processedTs: new Date("2021-01-15T12:00:00.000Z"),
+            properties: { subscription_id: `${ns}-s`, is_trial: false },
+          },
+          // Same event_id written twice (a race / retry) -> count() must see one.
+          {
+            eventId: dupId,
+            eventName: "$subscription.created",
+            eventTs: baseTs,
+            distinctId,
+            processedTs: new Date("2021-01-16T12:00:00.000Z"),
+            properties: { subscription_id: `${ns}-s`, is_trial: false },
+          },
+        ]);
+
+        const points = yield* analyticsAccessor.getNewSubscriptions(queryInput());
+        expect(totalOf(points)).toBe(1);
+      }),
+    ),
+  );
+});
+
+// Deferred: the harness binds the ClickHouse *read-write* user, which is NOT
+// subject to the readonly role's row policy, so the `SQL_organization_id`
+// per-query setting the accessor passes is inert in-process — a row from
+// organization A is still visible when querying as organization B. Verifying
+// that the tenant row policy fail-closes for the wrong organization requires
+// binding the readonly RLS user (and granting only SELECT under the role),
+// which the harness does not expose. Project-level scoping (the explicit
+// `project_id IN (...)` WHERE clause) is exercised by the tests above.
+vitestTest.todo(
+  "analyticsAccessor respects organization tenant row policies (needs readonly RLS user, not the harness RW user)",
+);
diff --git a/packages/core/test/services/analytics/series-resolver.test.ts b/packages/core/test/services/analytics/series-resolver.test.ts
new file mode 100644
index 000000000..67a378912
--- /dev/null
+++ b/packages/core/test/services/analytics/series-resolver.test.ts
@@ -0,0 +1,364 @@
+/**
+ * Pure unit tests for the analytics series resolver. The resolver's only seam
+ * is the {@link AnalyticsDataAccessor} (the ClickHouse-backed query layer),
+ * which is faked here with canned, deterministic series so the derivation graph
+ * (ARR = MRR x 12, churn-rate, retention, ARPU/ARPPU, *_growth_rate, SLV, trial
+ * conversion) and the per-call memoisation can be exercised without touching
+ * ClickHouse. The accessor itself is covered in the integration suite.
+ *
+ * The fake also records how many times each metric was invoked so the cache
+ * behaviour (same key → one underlying call, distinct keys → separate calls)
+ * can be asserted directly.
+ */
+import { Effect } from "effect";
+
+import { describe, expect, it } from "../../../src/testing/effect-vitest.ts";
+import type {
+  AnalyticsDataPoint,
+  BuiltInInsightId,
+  CompiledAnalyticsFilter,
+  TimeGranularity,
+} from "../../../src/domain/analytics/Analytics.ts";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import type {
+  AnalyticsDataAccessor,
+  AnalyticsQueryInput,
+} from "../../../src/services/analytics/clickhouse-accessor.ts";
+import { buildSeriesResolver } from "../../../src/services/analytics/series-resolver.ts";
+
+// =============================================================================
+// Fixtures + a recording accessor fake
+// =============================================================================
+
+const TS0 = new Date("2026-01-01T00:00:00.000Z");
+const TS1 = new Date("2026-01-02T00:00:00.000Z");
+const TS2 = new Date("2026-01-03T00:00:00.000Z");
+
+/** A fresh data point, one value per period. */
+const point = (timestamp: Date, value: number): AnalyticsDataPoint => ({ timestamp, value });
+
+const filter = (overrides: Partial<CompiledAnalyticsFilter> = {}): CompiledAnalyticsFilter => ({
+  projectIds: ["it_project"],
+  ...overrides,
+});
+
+const timeRange = () => ({ end: TS2, start: TS0 });
+
+const granularity: TimeGranularity = "day";
+const organizationId = "it_org";
+
+/**
+ * The resolver's accessor seam, faked. Each metric returns whatever canned
+ * series the test seeded (default: empty) and bumps a per-metric call counter,
+ * letting tests assert both the derived values and the cache's effect on the
+ * number of underlying queries. Unseeded metrics that the resolver never asks
+ * for simply stay at zero canned data.
+ *
+ * The real accessor methods type as `Effect.Effect<…, SqlError,
+ * ClickhouseWebClient.ClickhouseWebClient>`; `Effect.succeed` (no requirements)
+ * is assignable to that wider shape, so no ClickHouse service is touched at
+ * runtime.
+ */
+interface FakeAccessor {
+  readonly accessor: AnalyticsDataAccessor;
+  readonly calls: Record<string, number>;
+}
+
+type MetricKey = keyof AnalyticsDataAccessor;
+
+const makeFakeAccessor = (
+  series: Partial<Record<MetricKey, AnalyticsDataPoint[]>> = {},
+): FakeAccessor => {
+  const calls: Record<string, number> = {};
+  const metric =
+    (key: MetricKey) =>
+    (_input: AnalyticsQueryInput): Effect.Effect<AnalyticsDataPoint[]> =>
+      Effect.sync(() => {
+        calls[key] = (calls[key] ?? 0) + 1;
+        // Return a fresh copy so callers cannot mutate the canned fixture.
+        return (series[key] ?? []).map((p) => ({ ...p }));
+      });
+
+  const accessor: AnalyticsDataAccessor = {
+    getActiveSubscriptions: metric("getActiveSubscriptions"),
+    getActiveTrials: metric("getActiveTrials"),
+    getChurnedRevenue: metric("getChurnedRevenue"),
+    getChurnedSubscriptions: metric("getChurnedSubscriptions"),
+    getMRR: metric("getMRR"),
+    getNewPersons: metric("getNewPersons"),
+    getNewSubscriptions: metric("getNewSubscriptions"),
+    getPayingPersonCount: metric("getPayingPersonCount"),
+    getPersonCount: metric("getPersonCount"),
+    getRevenue: metric("getRevenue"),
+    getTrialConversions: metric("getTrialConversions"),
+    getTrials: metric("getTrials"),
+  };
+
+  return { accessor, calls };
+};
+
+/**
+ * Stub ClickHouse client to discharge the `ClickhouseWebClient` requirement
+ * that the resolver's return type carries. The fake accessor never reaches
+ * ClickHouse, so any access throws (which would signal the fake leaked).
+ */
+const clickhouseStub = new Proxy(
+  {},
+  {
+    get() {
+      throw new Error("ClickhouseWebClient must not be used in this test");
+    },
+  },
+) as unknown as ClickhouseWebClient.ClickhouseWebClient;
+
+/** Run a resolver effect with the ClickHouse requirement stubbed out. */
+const runSeries = (
+  effect: Effect.Effect<AnalyticsDataPoint[], unknown, ClickhouseWebClient.ClickhouseWebClient>,
+): Promise<AnalyticsDataPoint[]> =>
+  Effect.runPromise(
+    effect.pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, clickhouseStub)),
+  );
+
+const get = (
+  resolver: ReturnType<typeof buildSeriesResolver>,
+  insightId: BuiltInInsightId,
+): Effect.Effect<AnalyticsDataPoint[], unknown, ClickhouseWebClient.ClickhouseWebClient> =>
+  resolver.getSeries(insightId, filter(), granularity, timeRange(), organizationId);
+
+// =============================================================================
+// Rate / growth-rate primitives (exercised through their public callers)
+// =============================================================================
+
+describe("calculateRate (via churn_rate / retention / trial_conversion_rate)", () => {
+  it("returns a percentage of numerator over the combined denominator", async () => {
+    // churn_rate = churned / (active + churned) * 100 = 1 / (3 + 1) * 100 = 25.
+    const { accessor } = makeFakeAccessor({
+      getActiveSubscriptions: [point(TS0, 3)],
+      getChurnedSubscriptions: [point(TS0, 1)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/churn_rate"));
+    expect(result).toEqual([point(TS0, 25)]);
+  });
+
+  it("returns 0 when the denominator is 0", async () => {
+    // No active and no churned → 0 / 0 → calculateRate guards to 0.
+    const { accessor } = makeFakeAccessor({
+      getActiveSubscriptions: [point(TS0, 0)],
+      getChurnedSubscriptions: [point(TS0, 0)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/churn_rate"));
+    expect(result).toEqual([point(TS0, 0)]);
+  });
+});
+
+describe("calculateGrowthRate (via mrr_growth_rate / active_subscribers_growth)", () => {
+  it("returns 0 for the first period (no previous value, current is 0)", async () => {
+    // First point has previous = 0 and current = 0 → 0.
+    const { accessor } = makeFakeAccessor({ getMRR: [point(TS0, 0), point(TS1, 0)] });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/mrr_growth_rate"));
+    expect(result[0]).toEqual(point(TS0, 0));
+  });
+
+  it("returns 100 when growing from zero to a positive value", async () => {
+    // previous = 0, current > 0 → 100.
+    const { accessor } = makeFakeAccessor({ getMRR: [point(TS0, 0), point(TS1, 50)] });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/mrr_growth_rate"));
+    expect(result[1]).toEqual(point(TS1, 100));
+  });
+
+  it("returns ((current - previous) / previous) * 100 between periods", async () => {
+    // 200 → 250 = +25%; 250 → 200 = -20%.
+    const { accessor } = makeFakeAccessor({
+      getMRR: [point(TS0, 100), point(TS1, 200), point(TS2, 250)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/mrr_growth_rate"));
+    expect(result[1]).toEqual(point(TS1, 100)); // 100 → 200 = +100%
+    expect(result[2]).toEqual(point(TS2, 25)); // 200 → 250 = +25%
+  });
+});
+
+// =============================================================================
+// Per-call cache behaviour
+// =============================================================================
+
+describe("buildSeriesResolver cache", () => {
+  it("caches by (insightId, filter, granularity, timeRange, organizationId)", async () => {
+    const { accessor, calls } = makeFakeAccessor({ getRevenue: [point(TS0, 10)] });
+    const resolver = buildSeriesResolver(accessor);
+    await runSeries(get(resolver, "builtin/revenue"));
+    await runSeries(get(resolver, "builtin/revenue"));
+    // Identical cache key → only one underlying accessor call.
+    expect(calls.getRevenue).toBe(1);
+  });
+
+  it("reuses the cached result without re-querying for the same key", async () => {
+    const { accessor, calls } = makeFakeAccessor({ getMRR: [point(TS0, 7)] });
+    const resolver = buildSeriesResolver(accessor);
+    // ARR and MRR-growth both derive from MRR; with one shared resolver the
+    // MRR query is issued exactly once across all three reads.
+    await runSeries(get(resolver, "builtin/mrr"));
+    await runSeries(get(resolver, "builtin/arr"));
+    await runSeries(get(resolver, "builtin/mrr_growth_rate"));
+    expect(calls.getMRR).toBe(1);
+  });
+
+  it("queries separately for different cache keys (distinct organization)", async () => {
+    const { accessor, calls } = makeFakeAccessor({ getRevenue: [point(TS0, 10)] });
+    const resolver = buildSeriesResolver(accessor);
+    await runSeries(get(resolver, "builtin/revenue"));
+    await runSeries(
+      resolver.getSeries("builtin/revenue", filter(), granularity, timeRange(), "other_org"),
+    );
+    expect(calls.getRevenue).toBe(2);
+  });
+
+  it("queries separately for different cache keys (distinct filter)", async () => {
+    const { accessor, calls } = makeFakeAccessor({ getRevenue: [point(TS0, 10)] });
+    const resolver = buildSeriesResolver(accessor);
+    await runSeries(get(resolver, "builtin/revenue"));
+    await runSeries(
+      resolver.getSeries(
+        "builtin/revenue",
+        filter({ productIds: ["prod_1"] }),
+        granularity,
+        timeRange(),
+        organizationId,
+      ),
+    );
+    expect(calls.getRevenue).toBe(2);
+  });
+
+  it("does not share a cache across separate resolver instances", async () => {
+    const { accessor, calls } = makeFakeAccessor({ getRevenue: [point(TS0, 10)] });
+    await runSeries(get(buildSeriesResolver(accessor), "builtin/revenue"));
+    await runSeries(get(buildSeriesResolver(accessor), "builtin/revenue"));
+    // Fresh per-call cache each time → two underlying calls.
+    expect(calls.getRevenue).toBe(2);
+  });
+});
+
+// =============================================================================
+// Derived-metric composition
+// =============================================================================
+
+describe("derived metrics", () => {
+  it("ARR maps MRR x 12 over the series", async () => {
+    const { accessor } = makeFakeAccessor({ getMRR: [point(TS0, 100), point(TS1, 0)] });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/arr"));
+    expect(result).toEqual([point(TS0, 1200), point(TS1, 0)]);
+  });
+
+  it("churn_rate combines churned and active subscriptions per period", async () => {
+    // p0: 1 / (1 + 1) = 50; p1: 0 / (4 + 0) = 0.
+    const { accessor } = makeFakeAccessor({
+      getActiveSubscriptions: [point(TS0, 1), point(TS1, 4)],
+      getChurnedSubscriptions: [point(TS0, 1), point(TS1, 0)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/churn_rate"));
+    expect(result).toEqual([point(TS0, 50), point(TS1, 0)]);
+  });
+
+  it("retention computes active / (active + churned)", async () => {
+    // p0: 3 / (3 + 1) = 75; p1: 0 / (0 + 0) = 0 (guarded).
+    const { accessor } = makeFakeAccessor({
+      getActiveSubscriptions: [point(TS0, 3), point(TS1, 0)],
+      getChurnedSubscriptions: [point(TS0, 1), point(TS1, 0)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/retention"));
+    expect(result).toEqual([point(TS0, 75), point(TS1, 0)]);
+  });
+
+  it("ARPU divides revenue by person_count with division-by-zero handling", async () => {
+    // p0: 100 / 4 = 25; p1: persons = 0 → guarded to 0.
+    const { accessor } = makeFakeAccessor({
+      getRevenue: [point(TS0, 100), point(TS1, 80)],
+      getPersonCount: [point(TS0, 4), point(TS1, 0)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/arpu"));
+    expect(result).toEqual([point(TS0, 25), point(TS1, 0)]);
+  });
+
+  it("ARPPU divides revenue by paying-person count with division-by-zero handling", async () => {
+    // p0: 100 / 2 = 50; p1: paying = 0 → guarded to 0.
+    const { accessor } = makeFakeAccessor({
+      getRevenue: [point(TS0, 100), point(TS1, 60)],
+      getPayingPersonCount: [point(TS0, 2), point(TS1, 0)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/arppu"));
+    expect(result).toEqual([point(TS0, 50), point(TS1, 0)]);
+  });
+
+  it("MRR growth rate uses the previous-period value", async () => {
+    // first period previous = 0 & current 100 → 100; 100 → 150 = +50%.
+    const { accessor } = makeFakeAccessor({ getMRR: [point(TS0, 100), point(TS1, 150)] });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/mrr_growth_rate"));
+    expect(result).toEqual([point(TS0, 100), point(TS1, 50)]);
+  });
+
+  it("active-subscriber growth uses the previous-period value", async () => {
+    // first period previous = 0 & current 10 → 100; 10 → 5 = -50%.
+    const { accessor } = makeFakeAccessor({
+      getActiveSubscriptions: [point(TS0, 10), point(TS1, 5)],
+    });
+    const result = await runSeries(
+      get(buildSeriesResolver(accessor), "builtin/active_subscribers_growth"),
+    );
+    expect(result).toEqual([point(TS0, 100), point(TS1, -50)]);
+  });
+
+  it("trial conversion rate divides conversions by trials", async () => {
+    // p0: 5 conversions / 10 trials = 50; p1: trials = 0 → guarded to 0.
+    const { accessor } = makeFakeAccessor({
+      getTrials: [point(TS0, 10), point(TS1, 0)],
+      getTrialConversions: [point(TS0, 5), point(TS1, 3)],
+    });
+    const result = await runSeries(
+      get(buildSeriesResolver(accessor), "builtin/trial_conversion_rate"),
+    );
+    expect(result).toEqual([point(TS0, 50), point(TS1, 0)]);
+  });
+
+  it("subscriber lifetime value divides ARPU by the churn fraction", async () => {
+    // ARPU = revenue/persons = 100/10 = 10; churn_rate = churned/(active+churned)
+    // = 5/(15+5) = 25 (percent). SLV = ARPU / (churn% / 100) = 10 / 0.25 = 40.
+    const { accessor } = makeFakeAccessor({
+      getRevenue: [point(TS0, 100)],
+      getPersonCount: [point(TS0, 10)],
+      getActiveSubscriptions: [point(TS0, 15)],
+      getChurnedSubscriptions: [point(TS0, 5)],
+    });
+    const result = await runSeries(
+      get(buildSeriesResolver(accessor), "builtin/subscriber_lifetime_value"),
+    );
+    expect(result).toEqual([point(TS0, 40)]);
+  });
+
+  it("subscriber lifetime value is 0 when churn is 0 (no division by zero)", async () => {
+    // churn_rate = 0 → SLV guarded to 0.
+    const { accessor } = makeFakeAccessor({
+      getRevenue: [point(TS0, 100)],
+      getPersonCount: [point(TS0, 10)],
+      getActiveSubscriptions: [point(TS0, 15)],
+      getChurnedSubscriptions: [point(TS0, 0)],
+    });
+    const result = await runSeries(
+      get(buildSeriesResolver(accessor), "builtin/subscriber_lifetime_value"),
+    );
+    expect(result).toEqual([point(TS0, 0)]);
+  });
+});
+
+// =============================================================================
+// Primitive pass-through
+// =============================================================================
+
+describe("primitive metrics", () => {
+  it("passes a primitive insight straight through the accessor", async () => {
+    const { accessor, calls } = makeFakeAccessor({
+      getNewPersons: [point(TS0, 3), point(TS1, 7)],
+    });
+    const result = await runSeries(get(buildSeriesResolver(accessor), "builtin/new_persons"));
+    expect(result).toEqual([point(TS0, 3), point(TS1, 7)]);
+    expect(calls.getNewPersons).toBe(1);
+  });
+});
diff --git a/packages/core/test/services/analyticsIngest/AnalyticsDispatchService.test.ts b/packages/core/test/services/analyticsIngest/AnalyticsDispatchService.test.ts
new file mode 100644
index 000000000..8582948d4
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/AnalyticsDispatchService.test.ts
@@ -0,0 +1,73 @@
+/**
+ * Unit tests for the pure claim-stamping in {@link AnalyticsDispatchService}.
+ * The enqueue itself is a thin pass-through to {@link CaptureIngress}; the
+ * load-bearing logic is deriving the SDK identity claim (`Anonymous` vs
+ * `Stitch`) and stamping `trustClass: "untrusted-sdk"` server-side.
+ */
+import { describe, expect, it } from "vite-plus/test";
+
+import type { CapturedEventV1Type } from "../../../src/domain/analyticsIngest/AnalyticsIngest.ts";
+import { stampSdkIdentityClaim } from "../../../src/services/analyticsIngest/AnalyticsDispatchService.ts";
+
+const capturedEvent = (overrides: Partial<CapturedEventV1Type> = {}): CapturedEventV1Type => ({
+  schemaVersion: 1,
+  captureId: "cap_1",
+  token: "vh_pk_test",
+  organizationId: "org_1",
+  projectId: "proj_1",
+  event: "checkout_started",
+  distinctId: "dist_1",
+  eventTimestamp: "2026-03-04T00:00:00.000Z",
+  receivedAt: "2026-03-04T00:00:00.000Z",
+  properties: { properties: {}, distinctId: "dist_1" },
+  context: {},
+  rawPayload: {},
+  request: { requestId: "req_1" },
+  routing: {
+    routeClass: "main",
+    targetTopic: "capture.main.v1",
+    isHistorical: false,
+    skipEnrichment: false,
+  },
+  ...overrides,
+});
+
+describe("stampSdkIdentityClaim", () => {
+  it("stamps Anonymous for a non-identify event and trustClass untrusted-sdk", () => {
+    const result = stampSdkIdentityClaim(capturedEvent({ distinctId: "anon_1" }));
+    expect(result.identityClaim).toEqual({ _tag: "Anonymous", distinctId: "anon_1" });
+    expect(result.trustClass).toBe("untrusted-sdk");
+  });
+
+  it("stamps Stitch for an $identify event carrying $previous_distinct_id (nested in properties)", () => {
+    const result = stampSdkIdentityClaim(
+      capturedEvent({
+        event: "$identify",
+        distinctId: "user_42",
+        properties: { properties: { $previous_distinct_id: "anon_7" }, distinctId: "user_42" },
+      }),
+    );
+    expect(result.identityClaim).toEqual({
+      _tag: "Stitch",
+      distinctId: "user_42",
+      previousDistinctId: "anon_7",
+    });
+    expect(result.trustClass).toBe("untrusted-sdk");
+  });
+
+  it("falls back to Anonymous for an $identify event with no usable previous distinct id", () => {
+    const result = stampSdkIdentityClaim(
+      capturedEvent({
+        event: "$identify",
+        distinctId: "user_42",
+        properties: { properties: { $previous_distinct_id: "" }, distinctId: "user_42" },
+      }),
+    );
+    expect(result.identityClaim).toEqual({ _tag: "Anonymous", distinctId: "user_42" });
+  });
+
+  it("never sets a Resolved claim from the SDK path (trust cannot be self-asserted)", () => {
+    const result = stampSdkIdentityClaim(capturedEvent());
+    expect(result.identityClaim?._tag).not.toBe("Resolved");
+  });
+});
diff --git a/packages/core/test/services/analyticsIngest/AnalyticsIngestDlqService.integration.test.ts b/packages/core/test/services/analyticsIngest/AnalyticsIngestDlqService.integration.test.ts
new file mode 100644
index 000000000..6e0508b27
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/AnalyticsIngestDlqService.integration.test.ts
@@ -0,0 +1,444 @@
+/**
+ * Integration tests for {@link AnalyticsIngestDlqService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB). The service writes to / reads from the `analytics_ingest_dlq`
+ * MySQL table and, for {@link AnalyticsIngestDlqService.requeueFailure}, publishes
+ * the stored envelope back through the {@link CaptureIngress} port.
+ *
+ * Each test drives a public method end-to-end and verifies the *persisted* side
+ * effects rather than just the return value:
+ *  - the DLQ row written / upserted / marked-replayed in MySQL (read straight
+ *    back via `Db`),
+ *  - for `requeueFailure`, the events handed to a recording {@link CaptureIngress}
+ *    test layer, then the row flipped to `requeued`.
+ *
+ * Notes specific to this service:
+ *  - It performs no permission checks and writes no audit-log rows, so there is
+ *    no `ActionForbiddenError` path and no audit cleanup. The default fixture
+ *    session is still provided to satisfy the harness convention.
+ *  - The `analytics_ingest_dlq` table is *not* swept by the global fixture
+ *    teardown, so every test deletes the rows it creates via an
+ *    `Effect.ensuring` finalizer ({@link withDlqCleanup}).
+ *  - `captureId` carries a UNIQUE index; tests that exercise the
+ *    ON-DUPLICATE-KEY upsert reuse a single capture id, all other rows use a
+ *    fresh unique capture id so concurrent/leftover rows never collide.
+ *  - `projectId`/`failureClass` filter assertions use values unique to the test
+ *    (no FK ties this column to the fixture project) and assert by membership,
+ *    never exact counts.
+ *  - `CaptureIngress` is a port boundary outside the harness service set, so the
+ *    test provides its own layer for it.
+ */
+import { AnalyticsIngestDlqReplayStatus, Db, analyticsIngestDlq, inArray } from "@voidhash/db";
+import { Effect, Layer, Ref } from "effect";
+import { describe, expect } from "vitest";
+
+import {
+  type AnalyticsIngestDlqRecordFailureInput,
+  AnalyticsIngestDlqService,
+  AnalyticsIngestDlqServiceError,
+} from "@voidhash/core/services/analyticsIngest/AnalyticsIngestDlqService";
+import {
+  CaptureIngress,
+  type PublishableCaptureEvent,
+} from "@voidhash/core/services/analyticsIngest/CaptureIngress";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+/** Monotonic counter so ids/values stay unique even within the same millisecond. */
+let seq = 0;
+const unique = (label: string) => `it-an-dlq-${label}-${Date.now()}-${seq++}`;
+
+/** Read a single DLQ row straight from the database, bypassing the service. */
+const findDlqRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.analyticsIngestDlq.findFirst({ where: { id } });
+  });
+
+/**
+ * Delete the given DLQ rows. Each delete is `ignore`d so a missing row never
+ * turns the finalizer into a failure. This table has no audit rows and no FK
+ * children, so a single id-based delete suffices.
+ */
+const cleanupCreatedRows = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    yield* db
+      .delete(analyticsIngestDlq)
+      .where(inArray(analyticsIngestDlq.id, [...ids]))
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every DLQ row it creates is removed afterward, regardless
+ * of how the test exits. Pass each created row id to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withDlqCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedRows(createdIds)));
+};
+
+/** A fully-specified `recordFailure` input with sensible, overridable defaults. */
+const recordInput = (
+  overrides: Partial<AnalyticsIngestDlqRecordFailureInput> = {},
+): AnalyticsIngestDlqRecordFailureInput => ({
+  attemptCount: 1,
+  captureId: unique("cap"),
+  distinctId: unique("dist"),
+  failureClass: unique("class"),
+  failureMessage: "boom",
+  payloadJson: { hello: "world" } as unknown,
+  projectId: unique("proj"),
+  routeClass: "main",
+  sourceSequence: 1,
+  sourceShard: unique("shard"),
+  ...overrides,
+});
+
+/**
+ * A recording {@link CaptureIngress} layer: every `enqueueBatch` call appends its
+ * events to a shared `Ref`, which the test reads back to prove `requeueFailure`
+ * republished the stored envelope and route. Built per layer instance.
+ */
+/**
+ * Minimal {@link PlatformRuntime} stub. `requeueFailure` re-publishes through
+ * `CaptureIngress.enqueueBatch`, whose queue send is colored with the platform
+ * runtime-phase marker; the recording double below never reads it, so this just
+ * discharges the type-level requirement in the harness.
+ */
+const PlatformRuntimeStub = Layer.succeed(PlatformRuntime, PlatformRuntime.of({}));
+
+const makeRecordingCaptureIngress = (ref: Ref.Ref<ReadonlyArray<PublishableCaptureEvent>>) =>
+  Layer.succeed(CaptureIngress, {
+    enqueueBatch: (events) => Ref.update(ref, (prev) => [...prev, ...events]),
+  });
+
+describe("AnalyticsIngestDlqService.recordFailure", () => {
+  test(
+    "inserts a new DLQ row with the supplied fields and a generated id",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const input = recordInput();
+
+        const id = yield* service.recordFailure(input);
+        track(id);
+        expect(id.startsWith("an_ing_dlq_")).toBe(true);
+
+        const row = yield* findDlqRow(id);
+        expect(row).toBeDefined();
+        expect(row?.captureId).toBe(input.captureId);
+        expect(row?.projectId).toBe(input.projectId);
+        expect(row?.distinctId).toBe(input.distinctId);
+        expect(row?.routeClass).toBe(input.routeClass);
+        expect(row?.failureClass).toBe(input.failureClass);
+        expect(row?.failureMessage).toBe(input.failureMessage);
+        expect(row?.attemptCount).toBe(input.attemptCount);
+        expect(row?.sourceShard).toBe(input.sourceShard);
+        expect(row?.sourceSequence).toBe(input.sourceSequence);
+        // payloadJson round-trips through MySQL JSON as the original structure.
+        expect(row?.payloadJson).toEqual({ hello: "world" });
+        // New rows default to Pending and are not yet replayed.
+        expect(row?.replayStatus).toBe(AnalyticsIngestDlqReplayStatus.Pending);
+        expect(row?.replayedAt).toBeNull();
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "on a duplicate capture id, updates the existing row (ON DUPLICATE KEY UPDATE) and resets replayStatus to Pending",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const captureId = unique("dup-cap");
+
+        const firstId = yield* service.recordFailure(
+          recordInput({
+            attemptCount: 1,
+            captureId,
+            failureClass: "first_class",
+            failureMessage: "first failure",
+            payloadJson: { take: 1 },
+          }),
+        );
+        track(firstId);
+
+        // Move the row out of Pending so we can observe the upsert resetting it.
+        yield* service.markReplayed(firstId);
+        const afterReplay = yield* findDlqRow(firstId);
+        expect(afterReplay?.replayStatus).toBe(AnalyticsIngestDlqReplayStatus.Requeued);
+
+        // Second record with the SAME capture id collides on the unique index.
+        const secondId = yield* service.recordFailure(
+          recordInput({
+            attemptCount: 4,
+            captureId,
+            failureClass: "second_class",
+            failureMessage: "second failure",
+            payloadJson: { take: 2 },
+          }),
+        );
+        // The duplicate may also need cleaning up if MySQL kept the new id row
+        // (it does not — the upsert mutates the original row), but tracking is
+        // harmless.
+        track(secondId);
+
+        // No NEW row exists for the freshly generated id — the upsert mutated
+        // the original row keyed by capture id.
+        const secondRow = yield* findDlqRow(secondId);
+        expect(secondRow).toBeUndefined();
+
+        const updated = yield* findDlqRow(firstId);
+        expect(updated).toBeDefined();
+        expect(updated?.attemptCount).toBe(4);
+        expect(updated?.failureClass).toBe("second_class");
+        expect(updated?.failureMessage).toBe("second failure");
+        expect(updated?.payloadJson).toEqual({ take: 2 });
+        // The upsert's `set` resets replayStatus back to Pending.
+        expect(updated?.replayStatus).toBe(AnalyticsIngestDlqReplayStatus.Pending);
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "persists an arbitrary payloadJson shape and the omittable capture/distinct ids",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const payload = { arr: [1, 2, 3], nested: { a: true }, n: 42 };
+
+        const id = yield* service.recordFailure({
+          attemptCount: 0,
+          failureClass: unique("payload-class"),
+          failureMessage: "no ids supplied",
+          payloadJson: payload,
+          projectId: unique("payload-proj"),
+          routeClass: "historical",
+          sourceSequence: 99,
+          sourceShard: unique("payload-shard"),
+        });
+        track(id);
+
+        const row = yield* findDlqRow(id);
+        expect(row).toBeDefined();
+        expect(row?.captureId).toBeNull();
+        expect(row?.distinctId).toBeNull();
+        expect(row?.routeClass).toBe("historical");
+        expect(row?.payloadJson).toEqual(payload);
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("AnalyticsIngestDlqService.listFailures", () => {
+  test(
+    "returns matching rows ordered by createdAt DESC, respecting the limit",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const projectId = unique("list-proj");
+
+        const firstId = yield* service.recordFailure(recordInput({ projectId }));
+        track(firstId);
+        const secondId = yield* service.recordFailure(recordInput({ projectId }));
+        track(secondId);
+
+        const rows = yield* service.listFailures({ projectId, limit: 1 });
+        // The limit caps the result to the single most recent matching row.
+        expect(rows.length).toBe(1);
+        expect(rows.every((row) => row.projectId === projectId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "filters by projectId alone",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const projectId = unique("by-proj");
+        const otherProjectId = unique("by-proj-other");
+
+        const mine = yield* service.recordFailure(recordInput({ projectId }));
+        track(mine);
+        const other = yield* service.recordFailure(recordInput({ projectId: otherProjectId }));
+        track(other);
+
+        const rows = yield* service.listFailures({ projectId });
+        expect(rows.some((row) => row.id === mine)).toBe(true);
+        expect(rows.some((row) => row.id === other)).toBe(false);
+        expect(rows.every((row) => row.projectId === projectId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "filters by failureClass alone",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const failureClass = unique("by-class");
+        const otherFailureClass = unique("by-class-other");
+
+        const mine = yield* service.recordFailure(recordInput({ failureClass }));
+        track(mine);
+        const other = yield* service.recordFailure(
+          recordInput({ failureClass: otherFailureClass }),
+        );
+        track(other);
+
+        const rows = yield* service.listFailures({ failureClass });
+        expect(rows.some((row) => row.id === mine)).toBe(true);
+        expect(rows.some((row) => row.id === other)).toBe(false);
+        expect(rows.every((row) => row.failureClass === failureClass)).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "filters by projectId AND failureClass together",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const projectId = unique("both-proj");
+        const failureClass = unique("both-class");
+
+        // Matches both predicates.
+        const match = yield* service.recordFailure(recordInput({ failureClass, projectId }));
+        track(match);
+        // Same project, different class — must be excluded.
+        const wrongClass = yield* service.recordFailure(
+          recordInput({ failureClass: unique("both-class-x"), projectId }),
+        );
+        track(wrongClass);
+        // Same class, different project — must be excluded.
+        const wrongProject = yield* service.recordFailure(
+          recordInput({ failureClass, projectId: unique("both-proj-x") }),
+        );
+        track(wrongProject);
+
+        const rows = yield* service.listFailures({ failureClass, projectId });
+        expect(rows.some((row) => row.id === match)).toBe(true);
+        expect(rows.some((row) => row.id === wrongClass)).toBe(false);
+        expect(rows.some((row) => row.id === wrongProject)).toBe(false);
+        expect(
+          rows.every((row) => row.projectId === projectId && row.failureClass === failureClass),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "clamps an over-large limit to the [1,500] range and still returns matching rows",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        const projectId = unique("clamp-proj");
+
+        const id = yield* service.recordFailure(recordInput({ projectId }));
+        track(id);
+
+        // limit 9999 is clamped to 500; the call must still succeed and include
+        // the row we just wrote.
+        const rows = yield* service.listFailures({ projectId, limit: 9999 });
+        expect(rows.length).toBeLessThanOrEqual(500);
+        expect(rows.some((row) => row.id === id)).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("AnalyticsIngestDlqService.markReplayed", () => {
+  test(
+    "flips replayStatus to Requeued and stamps replayedAt on the row",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+
+        const id = yield* service.recordFailure(recordInput());
+        track(id);
+
+        const before = yield* findDlqRow(id);
+        expect(before?.replayStatus).toBe(AnalyticsIngestDlqReplayStatus.Pending);
+        expect(before?.replayedAt).toBeNull();
+
+        yield* service.markReplayed(id);
+
+        const after = yield* findDlqRow(id);
+        expect(after?.replayStatus).toBe(AnalyticsIngestDlqReplayStatus.Requeued);
+        expect(after?.replayedAt).not.toBeNull();
+      }),
+    ).pipe(Effect.provide(AnalyticsIngestDlqService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("AnalyticsIngestDlqService.requeueFailure", () => {
+  test(
+    "republishes the stored envelope/route via CaptureIngress and marks the row replayed",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AnalyticsIngestDlqService;
+        // Fresh recording-ingress ref scoped to this single test.
+        const ref = yield* Ref.make<ReadonlyArray<PublishableCaptureEvent>>([]);
+
+        const envelope = { captureId: unique("envelope"), schemaVersion: 1 };
+        const id = yield* service.recordFailure(
+          recordInput({ payloadJson: envelope, routeClass: "overflow" }),
+        );
+        track(id);
+
+        yield* service.requeueFailure(id).pipe(Effect.provide(makeRecordingCaptureIngress(ref)));
+
+        const enqueued = yield* Ref.get(ref);
+        expect(enqueued.length).toBe(1);
+        expect(enqueued[0]?.routeClass).toBe("overflow");
+        expect(enqueued[0]?.envelope).toEqual(envelope);
+
+        // The row is flipped to Requeued after a successful publish.
+        const row = yield* findDlqRow(id);
+        expect(row?.replayStatus).toBe(AnalyticsIngestDlqReplayStatus.Requeued);
+        expect(row?.replayedAt).not.toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      Effect.provide(PlatformRuntimeStub),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with AnalyticsIngestDlqServiceError for an unknown row id and publishes nothing",
+    Effect.gen(function* () {
+      const service = yield* AnalyticsIngestDlqService;
+      const ref = yield* Ref.make<ReadonlyArray<PublishableCaptureEvent>>([]);
+
+      const missingId = `an_ing_dlq_missing_${Date.now()}`;
+      const error = yield* Effect.flip(
+        service.requeueFailure(missingId).pipe(Effect.provide(makeRecordingCaptureIngress(ref))),
+      );
+      expect(error).toBeInstanceOf(AnalyticsIngestDlqServiceError);
+      if (error instanceof AnalyticsIngestDlqServiceError) {
+        expect(error.cause).toContain(missingId);
+      }
+
+      // A not-found requeue never reaches the publish step.
+      const published = yield* Ref.get(ref);
+      expect(published.length).toBe(0);
+    }).pipe(
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      Effect.provide(PlatformRuntimeStub),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
diff --git a/packages/core/test/services/analyticsIngest/AnalyticsJanitorService.integration.test.ts b/packages/core/test/services/analyticsIngest/AnalyticsJanitorService.integration.test.ts
new file mode 100644
index 000000000..ea226c73c
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/AnalyticsJanitorService.integration.test.ts
@@ -0,0 +1,399 @@
+/**
+ * Integration tests for {@link AnalyticsJanitorService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * ClickHouse with the analytics database's read-write user, so the test can
+ * both seed rows and assert their squashed state).
+ *
+ * `squash` reconciles pending identity merges in ClickHouse: it reads a backlog
+ * of `person_identity_pending_overrides_v2` rows older than the safety window,
+ * materialises a per-run Memory snapshot + Join temp table, bulk-`ALTER TABLE
+ * UPDATE`s `events_v2.person_id` to the merged person id, deletes the squashed
+ * backlog rows, then drops the temp tables. Each test drives the operation
+ * end-to-end and verifies the *persisted* ClickHouse side effects.
+ *
+ * Conventions used throughout:
+ *  - `selectBacklog` is GLOBAL (no project filter) and `events_v2` is shared by
+ *    every tenant, so this suite never asserts exact backlog counts. Each test
+ *    instead works under a UNIQUE `project_id` (and unique distinct ids) so its
+ *    seeded rows can't collide with any other tenant's data, and asserts by
+ *    membership: the seeded events were updated and the seeded backlog rows
+ *    were deleted, regardless of whatever else the global squash touched.
+ *  - Every test cleans up after itself in an `Effect.ensuring` finalizer that
+ *    deletes the rows it wrote (events + pending overrides + any leaked temp
+ *    tables) under its own `project_id`, success or failure. The fixture's
+ *    container rows live in MySQL and are irrelevant here.
+ *  - Temp snapshot/join table names are generated dynamically inside the
+ *    service (`makeSnapshotResources`), so the test never asserts their exact
+ *    names — it asserts the *effect* (events updated, backlog deleted) and that
+ *    no `person_identity_pending_override_*` temp tables survive the run.
+ *  - The service takes no `AuthSession`; there is no permission path to cover.
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  AnalyticsJanitorService,
+  AnalyticsJanitorServiceError,
+} from "@voidhash/core/services/analyticsIngest/AnalyticsJanitorService";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const EVENTS_TABLE = "events_v2" as const;
+const PENDING_OVERRIDES_TABLE = "person_identity_pending_overrides_v2" as const;
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+/** A namespace token unique to this run so seeded rows never collide. */
+const uniqueToken = (label: string) => `it-janitor-${label}-${Date.now()}-${idSeq++}`;
+
+/**
+ * Format a `Date` as a ClickHouse `DateTime64(3)` literal (`YYYY-MM-DD
+ * HH:MM:SS.mmm`, UTC). Mirrors `toClickhouseTimestamp` in the analytics domain
+ * so seeded `changed_at`/`event_ts` values land in the expected shape.
+ */
+const chTimestamp = (date: Date): string => {
+  const pad = (part: number, length = 2) => String(part).padStart(length, "0");
+  return [
+    `${date.getUTCFullYear()}-${pad(date.getUTCMonth() + 1)}-${pad(date.getUTCDate())}`,
+    `${pad(date.getUTCHours())}:${pad(date.getUTCMinutes())}:${pad(date.getUTCSeconds())}.${pad(
+      date.getUTCMilliseconds(),
+      3,
+    )}`,
+  ].join(" ");
+};
+
+interface SeededProject {
+  readonly distinctId: string;
+  readonly organizationId: string;
+  readonly oldPersonId: string;
+  readonly mergedPersonId: string;
+  readonly projectId: string;
+  readonly version: number;
+}
+
+/**
+ * Seed one project's worth of ClickHouse state for a squash:
+ *  - an `events_v2` row whose `person_id` is the pre-merge id (or null),
+ *  - a `person_identity_pending_overrides_v2` row mapping
+ *    `(project_id, source_distinct_id) -> mergedPersonId`, timestamped in the
+ *    past so it falls before the safety-window cutoff.
+ *
+ * The pending row carries `version > 0` and `is_deleted = 0` so the backlog
+ * selection (which keeps the latest non-deleted version per
+ * project_id+source_distinct_id) picks it up.
+ */
+const seedProject = (
+  seed: SeededProject,
+  options: { readonly eventPersonId: string | null; readonly changedAt: Date },
+) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    yield* ch
+      .insertQuery({
+        table: EVENTS_TABLE,
+        values: [
+          {
+            event_id: `${seed.projectId}-evt-1`,
+            capture_id: `${seed.projectId}-cap-1`,
+            event_name: "integration_event",
+            event_ts: chTimestamp(options.changedAt),
+            processed_ts: chTimestamp(options.changedAt),
+            organization_id: seed.organizationId,
+            project_id: seed.projectId,
+            distinct_id: seed.distinctId,
+            previous_distinct_id: null,
+            person_id: options.eventPersonId,
+            identity_mode: "full",
+            event_properties: "{}",
+            context: "{}",
+            route_lane: "main",
+            skip_enrichment: 0,
+            source_offset: "0",
+            source_partition: 0,
+            source_topic: "capture.v1",
+            token: seed.projectId,
+            request_path: "/i/v1/capture",
+            request_id: `${seed.projectId}-req-1`,
+            schema_version: 2,
+          },
+        ],
+      })
+      .pipe(Effect.asVoid);
+    yield* ch
+      .insertQuery({
+        table: PENDING_OVERRIDES_TABLE,
+        values: [
+          {
+            project_id: seed.projectId,
+            organization_id: seed.organizationId,
+            source_distinct_id: seed.distinctId,
+            target_distinct_id: seed.distinctId,
+            person_id: seed.mergedPersonId,
+            is_deleted: 0,
+            version: seed.version,
+            changed_at: chTimestamp(options.changedAt),
+          },
+        ],
+      })
+      .pipe(Effect.asVoid);
+  });
+
+/**
+ * Read the (single, latest) `events_v2.person_id` for a seeded project.
+ *
+ * No `FINAL`: the live ClickHouse Cloud `events_v2` uses the `SharedMergeTree`
+ * storage, which rejects `FINAL` outright ("Storage SharedMergeTree doesn't
+ * support FINAL"). It's also unnecessary here — each test seeds exactly one
+ * event row under its unique `project_id`, and the squash rewrites that row in
+ * place via `ALTER TABLE … UPDATE` (no new version), so the single matching row
+ * is read back unambiguously. Mirrors how the sibling AnalyticsWriterService
+ * integration test reads `events_v2` (plain `SELECT … WHERE …`, no `FINAL`).
+ */
+const findEventPersonId = (projectId: string) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const rows = yield* ch<{
+      readonly person_id: string | null;
+    }>`SELECT person_id FROM ${ch.literal(EVENTS_TABLE)}
+       WHERE project_id = ${ch.param("String", projectId)}
+       ORDER BY event_ts DESC
+       LIMIT 1`;
+    return rows[0]?.person_id ?? null;
+  });
+
+/**
+ * Count the non-deleted backlog rows still present for a seeded project.
+ *
+ * No `FINAL`: ClickHouse Cloud's `SharedMergeTree` storage rejects it, and it
+ * isn't needed — each test seeds exactly one pending-override version under its
+ * unique `project_id`, and a squash physically removes the row via an
+ * `ALTER TABLE … DELETE` mutation (not a tombstone insert), so an un-squashed
+ * row reads back as one and a squashed row as zero without any collapse.
+ */
+const countPendingBacklog = (projectId: string) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const rows = yield* ch<{
+      readonly total: string;
+    }>`SELECT count() AS total FROM ${ch.literal(PENDING_OVERRIDES_TABLE)}
+       WHERE project_id = ${ch.param("String", projectId)}
+         AND is_deleted = 0
+         AND version > 0`;
+    return Number(rows[0]?.total ?? "0");
+  });
+
+/**
+ * Are any per-run janitor staging table / dictionary objects left behind?
+ *
+ * The per-run objects `makeSnapshotResources` creates are named
+ * `person_identity_pending_override_snapshot_<suffix>` (a `MergeTree` staging
+ * table) and `person_identity_pending_override_dict_<suffix>` (a `Dictionary`,
+ * which also surfaces in `system.tables` with engine `Dictionary`). ClickHouse
+ * `LIKE` treats a bare `_` as a single-char wildcard, so the underscores in the
+ * distinctive `_snapshot_`/`_dict_` infixes are escaped (`\_`) to match them
+ * literally — otherwise the permanent base table
+ * `person_identity_pending_overrides_v2` would also match (`override` + `s` for
+ * the `_` wildcard + `_v2`) and this count would never be zero.
+ */
+const countLeakedSnapshotTables = () =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const rows = yield* ch<{ readonly total: string }>`SELECT count() AS total FROM system.tables
+       WHERE database = currentDatabase()
+         AND (
+           name LIKE 'person\\_identity\\_pending\\_override\\_snapshot\\_%'
+           OR name LIKE 'person\\_identity\\_pending\\_override\\_dict\\_%'
+         )`;
+    return Number(rows[0]?.total ?? "0");
+  });
+
+/** Delete a seeded project's ClickHouse rows (events + backlog), best-effort. */
+const cleanupProject = (projectId: string) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    yield* ch
+      .asCommand(
+        ch`ALTER TABLE ${ch.literal(EVENTS_TABLE)} DELETE WHERE project_id = ${ch.param("String", projectId)} SETTINGS mutations_sync = 1`,
+      )
+      .pipe(Effect.ignore);
+    yield* ch
+      .asCommand(
+        ch`ALTER TABLE ${ch.literal(PENDING_OVERRIDES_TABLE)} DELETE WHERE project_id = ${ch.param("String", projectId)} SETTINGS mutations_sync = 1`,
+      )
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every project it seeds is removed afterward, regardless
+ * of how the test exits. Pass each seeded `project_id` to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`.
+ */
+const withCleanup = <E, R>(
+  body: (track: (projectId: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | ClickhouseWebClient.ClickhouseWebClient> => {
+  const projectIds: string[] = [];
+  return body((projectId) => {
+    projectIds.push(projectId);
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        for (const projectId of projectIds) {
+          yield* cleanupProject(projectId);
+        }
+      }),
+    ),
+  );
+};
+
+describe("AnalyticsJanitorService.squash", () => {
+  test(
+    "updates events_v2 person_ids from the backlog, deletes the squashed rows, and reports a positive duration",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const janitor = yield* AnalyticsJanitorService;
+
+        const projectId = uniqueToken("squash-happy");
+        const seed: SeededProject = {
+          distinctId: `${projectId}-did`,
+          organizationId: `${projectId}-org`,
+          mergedPersonId: `${projectId}-person-merged`,
+          oldPersonId: `${projectId}-person-old`,
+          projectId,
+          version: 4,
+        };
+        track(projectId);
+
+        // changed_at is an hour in the past so a zero safety window (cutoff = now)
+        // includes it in the backlog.
+        const changedAt = new Date(Date.now() - 60 * 60 * 1000);
+        yield* seedProject(seed, { changedAt, eventPersonId: seed.oldPersonId });
+
+        const result = yield* janitor.squash({ batchSize: 10_000, safetyWindowSeconds: 0 });
+
+        // Our event's person_id is reassigned to the merged id …
+        expect(yield* findEventPersonId(projectId)).toBe(seed.mergedPersonId);
+        // … our backlog row is squashed away …
+        expect(yield* countPendingBacklog(projectId)).toBe(0);
+        // … no per-run staging table or dictionary survives …
+        expect(yield* countLeakedSnapshotTables()).toBe(0);
+        // … and the run reports a valid duration and processed at least our row
+        // (selectBacklog is global, so other tenants' rows may add to the count).
+        expect(result.durationMs).toBeGreaterThanOrEqual(0);
+        expect(result.backlogRowsProcessed).toBeGreaterThanOrEqual(1);
+      }),
+    ).pipe(Effect.provide(AnalyticsJanitorService.layer)),
+  );
+
+  test(
+    "assigns the merged person id even when the event's person_id was null (personless → identified)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const janitor = yield* AnalyticsJanitorService;
+
+        const projectId = uniqueToken("squash-null-person");
+        const seed: SeededProject = {
+          distinctId: `${projectId}-did`,
+          organizationId: `${projectId}-org`,
+          mergedPersonId: `${projectId}-person-merged`,
+          oldPersonId: `${projectId}-person-old`,
+          projectId,
+          version: 5,
+        };
+        track(projectId);
+
+        const changedAt = new Date(Date.now() - 60 * 60 * 1000);
+        // The event starts personless (person_id null); the squash's
+        // `person_id IS NULL` predicate still matches it for reassignment.
+        yield* seedProject(seed, { changedAt, eventPersonId: null });
+
+        yield* janitor.squash({ batchSize: 10_000, safetyWindowSeconds: 0 });
+
+        expect(yield* findEventPersonId(projectId)).toBe(seed.mergedPersonId);
+        expect(yield* countPendingBacklog(projectId)).toBe(0);
+      }),
+    ).pipe(Effect.provide(AnalyticsJanitorService.layer)),
+  );
+
+  test(
+    "skips backlog rows newer than the safety window and leaves the matching events untouched",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const janitor = yield* AnalyticsJanitorService;
+
+        const projectId = uniqueToken("safety-window");
+        const seed: SeededProject = {
+          distinctId: `${projectId}-did`,
+          organizationId: `${projectId}-org`,
+          mergedPersonId: `${projectId}-person-merged`,
+          oldPersonId: `${projectId}-person-old`,
+          projectId,
+          version: 3,
+        };
+        track(projectId);
+
+        // The backlog row is recent (just now). A large safety window pushes the
+        // cutoff far into the past, so this row is NEWER than the cutoff and the
+        // backlog selection (`changed_at < cutoff`) must exclude it.
+        yield* seedProject(seed, { changedAt: new Date(), eventPersonId: seed.oldPersonId });
+
+        yield* janitor.squash({ batchSize: 10_000, safetyWindowSeconds: 86_400 });
+
+        // Our event keeps its pre-merge person id …
+        const eventPersonId = yield* findEventPersonId(projectId);
+        expect(eventPersonId).toBe(seed.oldPersonId);
+
+        // … and our backlog row is untouched (not squashed away).
+        expect(yield* countPendingBacklog(projectId)).toBe(1);
+      }),
+    ).pipe(Effect.provide(AnalyticsJanitorService.layer)),
+  );
+
+  test(
+    "floors a non-positive batchSize to zero so the run touches no events but still returns a valid result",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const janitor = yield* AnalyticsJanitorService;
+
+        const projectId = uniqueToken("zero-batch");
+        const seed: SeededProject = {
+          distinctId: `${projectId}-did`,
+          organizationId: `${projectId}-org`,
+          mergedPersonId: `${projectId}-person-merged`,
+          oldPersonId: `${projectId}-person-old`,
+          projectId,
+          version: 2,
+        };
+        track(projectId);
+
+        const changedAt = new Date(Date.now() - 60 * 60 * 1000);
+        yield* seedProject(seed, { changedAt, eventPersonId: seed.oldPersonId });
+
+        // batchSize=0 floors the `LIMIT {row_limit}` to 0 → no rows selected,
+        // so the early-return path runs and nothing is mutated.
+        const result = yield* janitor.squash({ batchSize: 0, safetyWindowSeconds: 0 });
+
+        expect(result.backlogRowsProcessed).toBe(0);
+        expect(typeof result.cutoffIso).toBe("string");
+        expect(result.durationMs).toBeGreaterThanOrEqual(0);
+
+        // The empty-backlog branch never creates temp tables, so none leak.
+        expect(yield* countLeakedSnapshotTables()).toBe(0);
+
+        // Our event and backlog row are both untouched.
+        expect(yield* findEventPersonId(projectId)).toBe(seed.oldPersonId);
+        expect(yield* countPendingBacklog(projectId)).toBe(1);
+      }),
+    ).pipe(Effect.provide(AnalyticsJanitorService.layer)),
+  );
+
+  vitestTest.todo(
+    "wraps an underlying ClickHouse failure as AnalyticsJanitorServiceError carrying the operation context — deferred: no schema-valid input deterministically forces a ClickhouseError on the live ClickHouse Cloud instance. Both attempted triggers were tolerated rather than rejected: a far-future cutoff returns an empty backlog (squash succeeds, backlogRowsProcessed:0), and a >UInt32 batchSize (5_000_000_000 bound into LIMIT {row_limit:UInt32}) is accepted/clamped instead of parse-failing. Forcing the catchTags→AnalyticsJanitorServiceError wrap would need a fault-injecting Clickhouse double, which the integration tier forbids; cover it in the unit tier with a stubbed Clickhouse layer whose `query`/`command` fails.",
+  );
+
+  vitestTest.todo(
+    "logs (but does not re-throw) a temp-table DROP failure during cleanup — deferred: cleanupSnapshotResources swallows DROP errors via Effect.logError, and there is no in-process seam to force a DROP to fail without a fault-injecting ClickHouse double, which the integration tier forbids. Verifying the swallow would need a stubbed Clickhouse layer (unit tier) where `command` selectively fails on the DROP statements.",
+  );
+});
diff --git a/packages/core/test/services/analyticsIngest/AnalyticsWriterService.integration.test.ts b/packages/core/test/services/analyticsIngest/AnalyticsWriterService.integration.test.ts
new file mode 100644
index 000000000..11189d8e9
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/AnalyticsWriterService.integration.test.ts
@@ -0,0 +1,512 @@
+/**
+ * Integration tests for {@link AnalyticsWriterService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts`. Both
+ * storage backends are live: MySQL (the `project → organization` lookup) and
+ * ClickHouse (the five fan-out tables). The harness binds ClickHouse's
+ * read-write user (see `stacks/backend.ts` `makeTestConnections`), which has
+ * `GRANT ALL` and reads cross-tenant rows with no row policy — so this test can
+ * both insert and read its own rows back directly via
+ * {@link ClickhouseWebClient}, without a `SQL_organization_id` setting.
+ *
+ * Each test drives `writeMessages` end-to-end and verifies the *persisted* side
+ * effects, not just the returned counts:
+ *  - processed-event rows land in `events_v2` (read back by `event_id`),
+ *  - person / identity / override / pending-override rows land in their tables,
+ *  - the `organization_id` written onto person/identity rows is the one
+ *    resolved from MySQL `project` (not the upstream-stamped value),
+ *  - the three dedup paths (within-batch revenue, ClickHouse-existing event,
+ *    ClickHouse-existing revenue within the safety window) actually drop rows
+ *    before insert, so `insertedRowCount` reflects real inserts.
+ *
+ * Conventions:
+ *  - `writeMessages` carries no `AuthSession` permission guard, so there is no
+ *    forbidden-path case; the harness skeleton's `CoreAuthSession.authenticate()`
+ *    is still applied for uniformity.
+ *  - Every test namespaces its rows with a unique `event_id` / `distinct_id` /
+ *    `person_id` (via {@link uniqueId}) and asserts by membership, never by a
+ *    table-wide count, so a leftover row from a crashed run can't collide.
+ *  - ClickHouse `MergeTree` has no cascading delete, so {@link withClickhouseCleanup}
+ *    issues a best-effort `ALTER TABLE … DELETE WHERE event_id|distinct_id IN (…)`
+ *    mutation per table on exit (success or failure) via `Effect.ensuring`. The
+ *    global MySQL sweep does not touch ClickHouse, so this self-cleanup is the
+ *    only thing that reclaims these rows.
+ *  - Typed failures are asserted with `Effect.flip` + `instanceof`, paired with
+ *    a state assertion on the failure path (project convention).
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { AnalyticsWriterService } from "@voidhash/core/services/analyticsIngest/AnalyticsWriterService";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import type { AnalyticsWriterMessageType } from "@voidhash/core/domain/analyticsIngest/AnalyticsIngest";
+import { REVENUE_TRUSTED_SOURCE_TOPIC } from "@voidhash/core/domain/internalAnalytics/InternalAnalyticsEvents";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+const organizationId = CoreTestFixture.organizationId;
+
+const EVENTS_TABLE = "events_v2";
+const PERSONS_TABLE = "persons_v1";
+const PERSON_IDENTITY_TABLE = "person_identity_v1";
+const PERSON_IDENTITY_OVERRIDES_TABLE = "person_identity_overrides_v1";
+const PERSON_IDENTITY_PENDING_OVERRIDES_TABLE = "person_identity_pending_overrides_v2";
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+const uniqueId = (label: string) => `it-aw-${label}-${Date.now()}-${idSeq++}`;
+
+/** A reservation-grade revenue event name (drives the revenue dedup path). */
+const REVENUE_EVENT_NAME = "$purchase.completed";
+
+/**
+ * Build a `processed` writer message. The default `event` is a customer
+ * (non-revenue) event; pass `{ event, sourceTopic }` overrides to make it a
+ * trusted revenue event that the dedup helpers recognize. `eventTimestamp`
+ * controls the row's `event_ts`, which the revenue safety-window cutoff reads.
+ */
+const processedMessage = (overrides: {
+  readonly event?: string;
+  readonly eventId: string;
+  readonly distinctId?: string;
+  readonly eventTimestamp?: string;
+  readonly sourceTopic?: string;
+}): AnalyticsWriterMessageType => {
+  const distinctId = overrides.distinctId ?? uniqueId("distinct");
+  const eventTimestamp = overrides.eventTimestamp ?? new Date().toISOString();
+  return {
+    kind: "processed",
+    messageId: overrides.eventId,
+    value: {
+      captureId: `cap-${overrides.eventId}`,
+      context: {},
+      distinctId,
+      event: overrides.event ?? "checkout_started",
+      eventTimestamp,
+      groups: [],
+      identity: { distinctId, mode: "full", personId: uniqueId("person") },
+      organizationId,
+      processedAt: eventTimestamp,
+      processedEventId: overrides.eventId,
+      projectId,
+      properties: { plan: "pro" },
+      request: { path: "/i/v1/capture", requestId: `req-${overrides.eventId}` },
+      routing: {
+        lane: "main",
+        skipEnrichment: false,
+        sourceOffset: overrides.eventId,
+        sourcePartition: 0,
+        sourceTopic: overrides.sourceTopic ?? "capture.v1",
+      },
+      schemaVersion: 2,
+      token: uniqueId("token"),
+    },
+  };
+};
+
+/**
+ * Build a `person` writer message under the fixture project. The
+ * `primaryDistinctId` is taken from the caller so the test can `trackDistinct`
+ * it: the `persons_v1` cleanup keys on `primary_distinct_id`, so the row would
+ * otherwise leak (the global MySQL sweep never touches ClickHouse).
+ */
+const personMessage = (overrides: {
+  readonly personId: string;
+  readonly primaryDistinctId: string;
+}): AnalyticsWriterMessageType => ({
+  kind: "person",
+  messageId: overrides.personId,
+  value: {
+    changedAt: new Date().toISOString(),
+    isArchived: false,
+    name: "Integration Person",
+    personId: overrides.personId,
+    primaryDistinctId: overrides.primaryDistinctId,
+    projectId,
+    schemaVersion: 1,
+    traits: { tier: "gold" },
+    version: 1,
+  },
+});
+
+/**
+ * Build a `person-distinct-id` writer message. A non-empty `previousDistinctId`
+ * with `version > 0` makes the plan also emit override + pending-override rows.
+ */
+const personIdentityMessage = (overrides: {
+  readonly personId: string;
+  readonly distinctId: string;
+  readonly previousDistinctId?: string;
+  readonly version?: number;
+}): AnalyticsWriterMessageType => ({
+  kind: "person-distinct-id",
+  messageId: overrides.personId,
+  value: {
+    changedAt: new Date().toISOString(),
+    distinctId: overrides.distinctId,
+    isDeleted: false,
+    personId: overrides.personId,
+    previousDistinctId: overrides.previousDistinctId,
+    projectId,
+    schemaVersion: 1,
+    version: overrides.version ?? 1,
+  },
+});
+
+/** Read back the processed-event rows for the given ids straight from ClickHouse. */
+const findEventRows = (eventIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (eventIds.length === 0) return [];
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    return yield* ch<{
+      event_id: string;
+      event_name: string;
+      organization_id: string;
+      project_id: string;
+      distinct_id: string;
+      source_topic: string;
+    }>`SELECT event_id, event_name, organization_id, project_id, distinct_id, source_topic
+       FROM ${ch.literal(EVENTS_TABLE)} WHERE event_id IN ${ch.param("Array(String)", [...eventIds])}`;
+  });
+
+/** Read back the person rows for the given person ids. */
+const findPersonRows = (personIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (personIds.length === 0) return [];
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    return yield* ch<{
+      person_id: string;
+      organization_id: string;
+      project_id: string;
+    }>`SELECT person_id, organization_id, project_id
+       FROM ${ch.literal(PERSONS_TABLE)} WHERE person_id IN ${ch.param("Array(String)", [...personIds])}`;
+  });
+
+/** Read back rows from one of the three identity tables by `distinct_id`. */
+const findIdentityRows = (table: string, distinctIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (distinctIds.length === 0) return [];
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const column =
+      table === PERSON_IDENTITY_PENDING_OVERRIDES_TABLE ? "target_distinct_id" : "distinct_id";
+    return yield* ch<{
+      person_id: string;
+      organization_id: string;
+      project_id: string;
+    }>`SELECT person_id, organization_id, project_id
+       FROM ${ch.literal(table)} WHERE ${ch.literal(column)} IN ${ch.param("Array(String)", [...distinctIds])}`;
+  });
+
+/**
+ * Best-effort ClickHouse reclamation. MergeTree mutations are asynchronous, so
+ * each `ALTER TABLE … DELETE` is fire-and-forget and `ignore`d — a failed or
+ * slow mutation must never turn the finalizer into a test failure. Events are
+ * cleared by `event_id`; the four person/identity tables by `distinct_id`
+ * (`target_distinct_id` for the pending-overrides table).
+ */
+const cleanupClickhouse = (created: {
+  readonly eventIds: ReadonlyArray<string>;
+  readonly distinctIds: ReadonlyArray<string>;
+}) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const eventIds = [...created.eventIds];
+    const distinctIds = [...created.distinctIds];
+
+    if (eventIds.length > 0) {
+      yield* ch
+        .asCommand(
+          ch`ALTER TABLE ${ch.literal(EVENTS_TABLE)} DELETE WHERE event_id IN ${ch.param("Array(String)", eventIds)}`,
+        )
+        .pipe(Effect.ignore);
+    }
+    if (distinctIds.length > 0) {
+      for (const table of [PERSONS_TABLE]) {
+        yield* ch
+          .asCommand(
+            ch`ALTER TABLE ${ch.literal(table)} DELETE WHERE primary_distinct_id IN ${ch.param("Array(String)", distinctIds)}`,
+          )
+          .pipe(Effect.ignore);
+      }
+      for (const table of [PERSON_IDENTITY_TABLE, PERSON_IDENTITY_OVERRIDES_TABLE]) {
+        yield* ch
+          .asCommand(
+            ch`ALTER TABLE ${ch.literal(table)} DELETE WHERE distinct_id IN ${ch.param("Array(String)", distinctIds)}`,
+          )
+          .pipe(Effect.ignore);
+      }
+      yield* ch
+        .asCommand(
+          ch`ALTER TABLE ${ch.literal(PERSON_IDENTITY_PENDING_OVERRIDES_TABLE)} DELETE WHERE target_distinct_id IN ${ch.param("Array(String)", distinctIds)}`,
+        )
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every ClickHouse row it writes is reclaimed afterward,
+ * regardless of how the test exits. Pass each written `event_id` to `trackEvent`
+ * and each `distinct_id` (events + identity tables key on it) to `trackDistinct`;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`.
+ */
+const withClickhouseCleanup = <E, R>(
+  body: (track: {
+    readonly trackEvent: (id: string) => void;
+    readonly trackDistinct: (id: string) => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | ClickhouseWebClient.ClickhouseWebClient> => {
+  const eventIds: string[] = [];
+  const distinctIds: string[] = [];
+  return body({
+    trackDistinct: (id) => {
+      distinctIds.push(id);
+    },
+    trackEvent: (id) => {
+      eventIds.push(id);
+    },
+  }).pipe(Effect.ensuring(cleanupClickhouse({ distinctIds, eventIds })));
+};
+
+describe("AnalyticsWriterService.writeMessages", () => {
+  test(
+    "fans the three message kinds out into all five ClickHouse tables in one batch",
+    withClickhouseCleanup(({ trackDistinct, trackEvent }) =>
+      Effect.gen(function* () {
+        const writer = yield* AnalyticsWriterService;
+
+        const eventId = uniqueId("fanout-event");
+        const eventDistinct = uniqueId("fanout-event-distinct");
+        const personId = uniqueId("fanout-person");
+        const personPrimaryDistinct = uniqueId("fanout-person-primary");
+        const identityDistinct = uniqueId("fanout-identity-distinct");
+        const identityPrevious = uniqueId("fanout-identity-prev");
+        trackEvent(eventId);
+        trackDistinct(eventDistinct);
+        trackDistinct(personPrimaryDistinct);
+        trackDistinct(identityDistinct);
+
+        const messages: ReadonlyArray<AnalyticsWriterMessageType> = [
+          processedMessage({ distinctId: eventDistinct, eventId }),
+          personMessage({ personId, primaryDistinctId: personPrimaryDistinct }),
+          // version > 0 + a previous distinct id → also emits override +
+          // pending-override rows, exercising all five tables at once.
+          personIdentityMessage({
+            distinctId: identityDistinct,
+            personId,
+            previousDistinctId: identityPrevious,
+            version: 3,
+          }),
+        ];
+
+        const result = yield* writer.writeMessages(messages);
+        // 1 processed + 1 person + 1 identity + 1 override + 1 pending = 5 rows.
+        expect(result.insertedRowCount).toBe(5);
+        expect(result.messageCount).toBe(3);
+
+        const eventRows = yield* findEventRows([eventId]);
+        expect(eventRows.some((row) => row.event_id === eventId)).toBe(true);
+
+        const personRows = yield* findPersonRows([personId]);
+        expect(personRows.some((row) => row.person_id === personId)).toBe(true);
+
+        const identityRows = yield* findIdentityRows(PERSON_IDENTITY_TABLE, [identityDistinct]);
+        expect(identityRows.some((row) => row.person_id === personId)).toBe(true);
+
+        const overrideRows = yield* findIdentityRows(PERSON_IDENTITY_OVERRIDES_TABLE, [
+          identityDistinct,
+        ]);
+        expect(overrideRows.some((row) => row.person_id === personId)).toBe(true);
+
+        const pendingRows = yield* findIdentityRows(PERSON_IDENTITY_PENDING_OVERRIDES_TABLE, [
+          identityDistinct,
+        ]);
+        expect(pendingRows.some((row) => row.person_id === personId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsWriterService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "resolves project → organization from MySQL and stamps it on person/identity rows",
+    withClickhouseCleanup(({ trackDistinct }) =>
+      Effect.gen(function* () {
+        const writer = yield* AnalyticsWriterService;
+
+        const personId = uniqueId("org-person");
+        const personPrimaryDistinct = uniqueId("org-person-primary");
+        const identityDistinct = uniqueId("org-identity-distinct");
+        trackDistinct(personPrimaryDistinct);
+        trackDistinct(identityDistinct);
+
+        // Person/identity messages carry only projectId; the writer looks up the
+        // organization in MySQL. The fixture seeds it_project under it_org.
+        yield* writer.writeMessages([
+          personMessage({ personId, primaryDistinctId: personPrimaryDistinct }),
+          personIdentityMessage({ distinctId: identityDistinct, personId }),
+        ]);
+
+        const personRows = yield* findPersonRows([personId]);
+        const personRow = personRows.find((row) => row.person_id === personId);
+        expect(personRow).toBeDefined();
+        expect(personRow?.organization_id).toBe(organizationId);
+        expect(personRow?.project_id).toBe(projectId);
+
+        const identityRows = yield* findIdentityRows(PERSON_IDENTITY_TABLE, [identityDistinct]);
+        const identityRow = identityRows.find((row) => row.person_id === personId);
+        expect(identityRow).toBeDefined();
+        expect(identityRow?.organization_id).toBe(organizationId);
+      }),
+    ).pipe(Effect.provide(AnalyticsWriterService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "deduplicates revenue events sharing an event_id within the batch (only one row inserted)",
+    withClickhouseCleanup(({ trackEvent }) =>
+      Effect.gen(function* () {
+        const writer = yield* AnalyticsWriterService;
+
+        const sharedEventId = uniqueId("batch-dup-event");
+        trackEvent(sharedEventId);
+
+        // Two trusted revenue messages with the SAME event_id: within-batch dedup
+        // keeps the first and skips the second. The two non-revenue events have
+        // distinct ids and pass through untouched.
+        const passEventA = uniqueId("batch-pass-a");
+        const passEventB = uniqueId("batch-pass-b");
+        trackEvent(passEventA);
+        trackEvent(passEventB);
+
+        const result = yield* writer.writeMessages([
+          processedMessage({
+            event: REVENUE_EVENT_NAME,
+            eventId: sharedEventId,
+            sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+          }),
+          processedMessage({
+            event: REVENUE_EVENT_NAME,
+            eventId: sharedEventId,
+            sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+          }),
+          processedMessage({ eventId: passEventA }),
+          processedMessage({ eventId: passEventB }),
+        ]);
+
+        // 4 messages in, but the duplicate revenue row is dropped → 3 inserted.
+        expect(result.messageCount).toBe(4);
+        expect(result.insertedRowCount).toBe(3);
+
+        const rows = yield* findEventRows([sharedEventId]);
+        expect(rows.filter((row) => row.event_id === sharedEventId)).toHaveLength(1);
+      }),
+    ).pipe(Effect.provide(AnalyticsWriterService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "filters out events already present in ClickHouse (clickhouse_existing dedup) before insert",
+    withClickhouseCleanup(({ trackEvent }) =>
+      Effect.gen(function* () {
+        const writer = yield* AnalyticsWriterService;
+
+        const existingId = uniqueId("existing-event");
+        const freshId = uniqueId("fresh-event");
+        trackEvent(existingId);
+        trackEvent(freshId);
+
+        // Seed `existingId` so the writer's fetchExistingEventIds sees it and
+        // skips it; only the fresh event should be inserted.
+        yield* writer.writeMessages([processedMessage({ eventId: existingId })]);
+
+        const result = yield* writer.writeMessages([
+          processedMessage({ eventId: existingId }),
+          processedMessage({ eventId: freshId }),
+        ]);
+
+        // 2 messages in, but `existingId` is already in ClickHouse → 1 inserted.
+        expect(result.messageCount).toBe(2);
+        expect(result.insertedRowCount).toBe(1);
+
+        // Still exactly one row for the existing id (the duplicate was not written).
+        const existingRows = yield* findEventRows([existingId]);
+        expect(existingRows.filter((row) => row.event_id === existingId)).toHaveLength(1);
+        const freshRows = yield* findEventRows([freshId]);
+        expect(freshRows.some((row) => row.event_id === freshId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsWriterService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "deduplicates an already-present revenue event by (project_id, event_id) regardless of age (no time window)",
+    withClickhouseCleanup(({ trackEvent }) =>
+      Effect.gen(function* () {
+        const writer = yield* AnalyticsWriterService;
+
+        const existingRevenueId = uniqueId("existing-revenue");
+        const freshRevenueId = uniqueId("fresh-revenue");
+        trackEvent(existingRevenueId);
+        trackEvent(freshRevenueId);
+
+        // Seed an existing trusted-revenue row dated WELL OUTSIDE any legacy
+        // 7-day safety window (90 days ago). The unbounded (project_id, event_id)
+        // dedup must still catch its re-dispatch — this is the at-least-once
+        // guarantee: a late ledger retry or duplicate provider redelivery
+        // collapses no matter how stale.
+        const ninetyDaysAgo = new Date(Date.now() - 90 * 24 * 60 * 60 * 1000).toISOString();
+        yield* writer.writeMessages([
+          processedMessage({
+            event: REVENUE_EVENT_NAME,
+            eventId: existingRevenueId,
+            eventTimestamp: ninetyDaysAgo,
+            sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+          }),
+        ]);
+
+        // Second batch re-sends the (90-day-old) existing revenue id plus a fresh
+        // one. The already-present revenue row is not re-inserted; the fresh one is.
+        const result = yield* writer.writeMessages([
+          processedMessage({
+            event: REVENUE_EVENT_NAME,
+            eventId: existingRevenueId,
+            eventTimestamp: ninetyDaysAgo,
+            sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+          }),
+          processedMessage({
+            event: REVENUE_EVENT_NAME,
+            eventId: freshRevenueId,
+            eventTimestamp: new Date().toISOString(),
+            sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+          }),
+        ]);
+
+        expect(result.messageCount).toBe(2);
+        expect(result.insertedRowCount).toBe(1);
+
+        const existingRows = yield* findEventRows([existingRevenueId]);
+        expect(existingRows.filter((row) => row.event_id === existingRevenueId)).toHaveLength(1);
+        const freshRows = yield* findEventRows([freshRevenueId]);
+        expect(freshRows.some((row) => row.event_id === freshRevenueId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(AnalyticsWriterService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns insertedRowCount=0 and messageCount=0 for an empty batch and writes nothing",
+    // No cleanup wrapper: an empty batch writes no rows.
+    Effect.gen(function* () {
+      const writer = yield* AnalyticsWriterService;
+      const result = yield* writer.writeMessages([]);
+      expect(result.insertedRowCount).toBe(0);
+      expect(result.messageCount).toBe(0);
+    }).pipe(Effect.provide(AnalyticsWriterService.layer), CoreAuthSession.authenticate()),
+  );
+
+  vitestTest.todo(
+    "ClickhouseError branch: wraps a ClickHouse insert failure as AnalyticsWriterServiceError and writes nothing for the bad row. Deferred — there is no schema-valid `writeMessages` input that deterministically makes the live ClickHouse Cloud instance reject an `insertBatch`. The previous attempt (an out-of-Int32 `source_partition` of 9_999_999_999) was silently accepted by JSONEachRow on this instance (the insert succeeded with insertedRowCount=1), and a far-future DateTime64 is likewise tolerated here (the sibling AnalyticsJanitorService DateTime64-ceiling case returned a normal result in the same run). Because every field flows through `AnalyticsWriterMessageType` schema validation, no wrong-typed/NULL value can reach a non-Nullable column, and the only remaining way to force a ClickhouseError is a fault-injecting Clickhouse double, which the integration tier forbids. The catchTags(ClickhouseError → AnalyticsWriterServiceError) wrapping is exercised at the unit tier instead.",
+  );
+
+  vitestTest.todo(
+    "DatabaseError branch: wraps a MySQL failure during project→organization resolution. Deferred — `resolveOrganizationByProject` only fails if the live `project` SELECT errors (e.g. connection loss / dropped table); there is no in-process seam to inject a DatabaseError through the public `writeMessages` API without faking the Db layer, which integration tests forbid. The success-path org resolution is already covered above.",
+  );
+});
diff --git a/packages/core/test/services/analyticsIngest/AnalyticsWriterService.test.ts b/packages/core/test/services/analyticsIngest/AnalyticsWriterService.test.ts
new file mode 100644
index 000000000..d49cbb9dd
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/AnalyticsWriterService.test.ts
@@ -0,0 +1,133 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { REVENUE_TRUSTED_SOURCE_TOPIC } from "../../../src/domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import {
+  dedupeRevenueRowsWithinBatch,
+  isRevenueAnalyticsWriterRow,
+} from "../../../src/services/analyticsIngest/AnalyticsWriterService.ts";
+
+/**
+ * A trusted revenue writer row: stamped with the revenue source topic and a
+ * reserved revenue event name (sourced from the domain so the test exercises
+ * the real {@link isReservedRevenueEventName} integration, not a string copy).
+ */
+const revenueRow = (overrides: Record<string, unknown> = {}): Record<string, unknown> => ({
+  source_topic: REVENUE_TRUSTED_SOURCE_TOPIC,
+  event_name: "$purchase.completed",
+  event_id: "evt-1",
+  ...overrides,
+});
+
+/** A customer-SDK row that must always pass through untouched. */
+const nonRevenueRow = (overrides: Record<string, unknown> = {}): Record<string, unknown> => ({
+  source_topic: "capture.v1",
+  event_name: "checkout_started",
+  event_id: "evt-non-1",
+  ...overrides,
+});
+
+describe("isRevenueAnalyticsWriterRow", () => {
+  it("returns true for a row with the revenue topic and a reserved revenue event name", () => {
+    expect(isRevenueAnalyticsWriterRow(revenueRow())).toBe(true);
+  });
+
+  it("returns true for every reserved revenue event name on the revenue topic", () => {
+    // Drive the real domain set so adding a new reserved event keeps coverage.
+    const reservedNames = [
+      "$purchase.refunded",
+      "$purchase.revoked",
+      "$subscription.created",
+      "$subscription.renewed",
+      "$subscription.canceled",
+      "$subscription.transferred_in",
+    ] as const;
+    for (const event_name of reservedNames) {
+      expect(isRevenueAnalyticsWriterRow(revenueRow({ event_name }))).toBe(true);
+    }
+  });
+
+  it("returns false for a non-revenue source topic even with a reserved event name", () => {
+    expect(isRevenueAnalyticsWriterRow(revenueRow({ source_topic: "capture.v1" }))).toBe(false);
+  });
+
+  it("returns false when source_topic is missing", () => {
+    const { source_topic, ...rest } = revenueRow();
+    void source_topic;
+    expect(isRevenueAnalyticsWriterRow(rest)).toBe(false);
+  });
+
+  it("returns false when event_name is not a reserved revenue event name", () => {
+    expect(isRevenueAnalyticsWriterRow(revenueRow({ event_name: "purchase.completed" }))).toBe(
+      false,
+    );
+  });
+
+  it("returns false when event_name is not a string", () => {
+    expect(isRevenueAnalyticsWriterRow(revenueRow({ event_name: 42 }))).toBe(false);
+    expect(isRevenueAnalyticsWriterRow(revenueRow({ event_name: undefined }))).toBe(false);
+  });
+});
+
+describe("dedupeRevenueRowsWithinBatch", () => {
+  it("removes duplicate revenue event_ids within the batch, first seen wins", () => {
+    const first = revenueRow({ event_id: "evt-dup", event_name: "$purchase.completed" });
+    const second = revenueRow({ event_id: "evt-dup", event_name: "$purchase.refunded" });
+    const result = dedupeRevenueRowsWithinBatch([first, second]);
+    expect(result.rows).toEqual([first]);
+    expect(result.rows[0]).toBe(first);
+    expect(result.skippedCount).toBe(1);
+  });
+
+  it("keeps non-revenue rows and revenue rows without an event_id unchanged", () => {
+    const noId = revenueRow({ event_id: undefined });
+    const nonRev = nonRevenueRow();
+    const rows = [noId, nonRev];
+    const result = dedupeRevenueRowsWithinBatch(rows);
+    expect(result.rows).toEqual(rows);
+    expect(result.skippedCount).toBe(0);
+  });
+
+  it("does not dedupe non-revenue rows that share an event_id", () => {
+    const rows = [nonRevenueRow({ event_id: "evt-x" }), nonRevenueRow({ event_id: "evt-x" })];
+    const result = dedupeRevenueRowsWithinBatch(rows);
+    expect(result.rows).toEqual(rows);
+    expect(result.skippedCount).toBe(0);
+  });
+
+  it("counts every deduplicated revenue row in skippedCount", () => {
+    const rows = [
+      revenueRow({ event_id: "evt-a" }),
+      revenueRow({ event_id: "evt-a" }),
+      revenueRow({ event_id: "evt-a" }),
+      revenueRow({ event_id: "evt-b" }),
+    ];
+    const result = dedupeRevenueRowsWithinBatch(rows);
+    expect(result.rows.map((r) => r.event_id)).toEqual(["evt-a", "evt-b"]);
+    expect(result.skippedCount).toBe(2);
+  });
+
+  it("returns the original rows array reference when skippedCount is 0 (no allocation)", () => {
+    const rows = [
+      revenueRow({ event_id: "evt-a" }),
+      revenueRow({ event_id: "evt-b" }),
+      nonRevenueRow(),
+    ];
+    const result = dedupeRevenueRowsWithinBatch(rows);
+    expect(result.skippedCount).toBe(0);
+    expect(result.rows).toBe(rows);
+  });
+
+  it("returns an empty result for an empty batch", () => {
+    const rows: Array<Record<string, unknown>> = [];
+    const result = dedupeRevenueRowsWithinBatch(rows);
+    expect(result.rows).toBe(rows);
+    expect(result.skippedCount).toBe(0);
+  });
+
+  it("treats a non-string event_id as no id (passes through, never deduped)", () => {
+    const rows = [revenueRow({ event_id: 7 }), revenueRow({ event_id: 7 })];
+    const result = dedupeRevenueRowsWithinBatch(rows);
+    expect(result.rows).toEqual(rows);
+    expect(result.skippedCount).toBe(0);
+  });
+});
diff --git a/packages/core/test/services/analyticsIngest/DlqProducer.integration.test.ts b/packages/core/test/services/analyticsIngest/DlqProducer.integration.test.ts
new file mode 100644
index 000000000..daf931ca4
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/DlqProducer.integration.test.ts
@@ -0,0 +1,340 @@
+/**
+ * Integration tests for {@link DlqProducer}, run against the real backend stack
+ * provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB).
+ *
+ * `DlqProducer` is the thin processor-side adapter that turns the wire-stable
+ * {@link EventProcessorDlqV1} envelopes into `analytics_ingest_dlq` rows via
+ * {@link AnalyticsIngestDlqService}. The behaviour worth proving is all in the
+ * *persisted* row, so every test reads the written DLQ row straight back from
+ * MySQL rather than trusting the (void) return value:
+ *  - `lane` → `route_class` mapping (overflow/historical pass through, anything
+ *    else collapses to `main`),
+ *  - the `:`-delimited `sourceOffset` suffix parsed into `source_sequence`
+ *    (with a `0` fallback when the suffix is not a number),
+ *  - `rawValue` JSON parsed into `payload_json` (falling back to the event
+ *    itself when it is absent / unparseable),
+ *  - `attempt_count` always seeded to 0,
+ *  - fire-and-forget `forEach({ discard: true })` semantics: every event in a
+ *    batch is written even though the producer returns void.
+ *
+ * Conventions: this service takes no `AuthSession` (the harness's default
+ * authenticate is a no-op here but kept for parity with the other suites), and
+ * the only parent row it needs — the project — is the seeded
+ * {@link CoreTestFixture} container, so tests just stamp unique `captureId`s
+ * (the table's UNIQUE key) per call and self-clean via {@link withDlqCleanup}.
+ * The DLQ rows carry no append-only audit entries, so cleanup deletes the rows
+ * alone.
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { DlqProducer } from "@voidhash/core/services/analyticsIngest/DlqProducer";
+import { AnalyticsIngestDlqService } from "@voidhash/core/services/analyticsIngest/AnalyticsIngestDlqService";
+import type { EventProcessorDlqV1 } from "@voidhash/core/domain/analyticsIngest/AnalyticsIngest";
+import { Db, analyticsIngestDlq, inArray } from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so capture ids stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueCaptureId = (label: string) => `it-dlq-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * Build a fully-populated {@link EventProcessorDlqV1} envelope, letting each
+ * test override only the fields it asserts on. Defaults are valid wire values
+ * so a test that doesn't care about, say, the lane still produces a writable row.
+ */
+const dlqEvent = (overrides: Partial<EventProcessorDlqV1> = {}): EventProcessorDlqV1 => ({
+  captureId: uniqueCaptureId("evt"),
+  distinctId: "distinct-1",
+  failedAt: new Date().toISOString(),
+  failureClass: "schema_rejected",
+  failureId: crypto.randomUUID(),
+  failureMessage: "schema validation failed",
+  headers: {},
+  lane: "main",
+  projectId,
+  schemaVersion: 1,
+  sourceOffset: "topic-0:42",
+  sourcePartition: 0,
+  sourceTopic: "analytics.main.0",
+  ...overrides,
+});
+
+/** Read a DLQ row straight from the database by its capture id (UNIQUE). */
+const findDlqRowByCaptureId = (captureId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.analyticsIngestDlq.findFirst({
+      where: { captureId },
+    });
+  });
+
+/**
+ * Delete the DLQ rows created by a test. The table carries no append-only audit
+ * trail, so the rows are the only artifacts. Each delete is `ignore`d so a
+ * missing row never turns the finalizer into a failure.
+ */
+const cleanupDlqRows = (captureIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (captureIds.length === 0) return;
+    const db = yield* Db;
+    yield* db
+      .delete(analyticsIngestDlq)
+      .where(inArray(analyticsIngestDlq.captureId, [...captureIds]))
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every DLQ row it writes is removed afterward, regardless
+ * of how the test exits. Pass each written `captureId` to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withDlqCleanup = <E, R>(
+  body: (track: (captureId: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const captureIds: string[] = [];
+  return body((captureId) => {
+    captureIds.push(captureId);
+  }).pipe(Effect.ensuring(cleanupDlqRows(captureIds)));
+};
+
+describe("DlqProducer.dbLive publishBatch", () => {
+  test(
+    "maps overflow/historical lanes through and collapses everything else to main",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const producer = yield* DlqProducer;
+
+        const overflow = dlqEvent({ captureId: uniqueCaptureId("overflow"), lane: "overflow" });
+        const historical = dlqEvent({
+          captureId: uniqueCaptureId("historical"),
+          lane: "historical",
+        });
+        const main = dlqEvent({ captureId: uniqueCaptureId("main"), lane: "main" });
+        const unknown = dlqEvent({ captureId: uniqueCaptureId("unknown"), lane: "unknown" });
+        track(overflow.captureId!);
+        track(historical.captureId!);
+        track(main.captureId!);
+        track(unknown.captureId!);
+
+        yield* producer.publishBatch([overflow, historical, main, unknown]);
+
+        const overflowRow = yield* findDlqRowByCaptureId(overflow.captureId!);
+        expect(overflowRow?.routeClass).toBe("overflow");
+        const historicalRow = yield* findDlqRowByCaptureId(historical.captureId!);
+        expect(historicalRow?.routeClass).toBe("historical");
+        const mainRow = yield* findDlqRowByCaptureId(main.captureId!);
+        expect(mainRow?.routeClass).toBe("main");
+        // "unknown" is not overflow/historical, so it must collapse to "main".
+        const unknownRow = yield* findDlqRowByCaptureId(unknown.captureId!);
+        expect(unknownRow?.routeClass).toBe("main");
+      }),
+    ).pipe(
+      Effect.provide(DlqProducer.dbLive),
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "parses the colon-delimited sourceOffset suffix into source_sequence and falls back to 0",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const producer = yield* DlqProducer;
+
+        const numericSuffix = dlqEvent({
+          captureId: uniqueCaptureId("seq-num"),
+          sourceOffset: "analytics.main.0:1234",
+        });
+        const nonNumericSuffix = dlqEvent({
+          captureId: uniqueCaptureId("seq-nan"),
+          sourceOffset: "offset-without-number",
+        });
+        track(numericSuffix.captureId!);
+        track(nonNumericSuffix.captureId!);
+
+        yield* producer.publishBatch([numericSuffix, nonNumericSuffix]);
+
+        const numericRow = yield* findDlqRowByCaptureId(numericSuffix.captureId!);
+        expect(numericRow?.sourceSequence).toBe(1234);
+        // No parseable trailing number → fallback 0.
+        const fallbackRow = yield* findDlqRowByCaptureId(nonNumericSuffix.captureId!);
+        expect(fallbackRow?.sourceSequence).toBe(0);
+      }),
+    ).pipe(
+      Effect.provide(DlqProducer.dbLive),
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "parses rawValue JSON into payload_json and falls back to the event when absent or unparseable",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const producer = yield* DlqProducer;
+
+        const validJson = dlqEvent({
+          captureId: uniqueCaptureId("payload-json"),
+          rawValue: JSON.stringify({ marker: "decoded", nested: { ok: true } }),
+        });
+        const unparseable = dlqEvent({
+          captureId: uniqueCaptureId("payload-bad"),
+          rawValue: "{not valid json",
+        });
+        const absent = dlqEvent({ captureId: uniqueCaptureId("payload-absent") });
+        delete (absent as { rawValue?: string }).rawValue;
+        track(validJson.captureId!);
+        track(unparseable.captureId!);
+        track(absent.captureId!);
+
+        yield* producer.publishBatch([validJson, unparseable, absent]);
+
+        const decodedRow = yield* findDlqRowByCaptureId(validJson.captureId!);
+        expect(decodedRow?.payloadJson).toEqual({ marker: "decoded", nested: { ok: true } });
+
+        // Unparseable rawValue → the producer stores the original event object.
+        const fallbackRow = yield* findDlqRowByCaptureId(unparseable.captureId!);
+        expect((fallbackRow?.payloadJson as { failureId?: string })?.failureId).toBe(
+          unparseable.failureId,
+        );
+
+        // Missing rawValue → likewise stores the original event object.
+        const absentRow = yield* findDlqRowByCaptureId(absent.captureId!);
+        expect((absentRow?.payloadJson as { failureId?: string })?.failureId).toBe(
+          absent.failureId,
+        );
+      }),
+    ).pipe(
+      Effect.provide(DlqProducer.dbLive),
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "seeds attempt_count to 0 and carries through capture/distinct/failure/shard fields",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const producer = yield* DlqProducer;
+
+        const event = dlqEvent({
+          captureId: uniqueCaptureId("fields"),
+          distinctId: "distinct-fields",
+          failureClass: "policy_rejected",
+          failureMessage: "rejected by policy",
+          sourceTopic: "analytics.main.7",
+        });
+        track(event.captureId!);
+
+        yield* producer.publishBatch([event]);
+
+        const row = yield* findDlqRowByCaptureId(event.captureId!);
+        expect(row).toBeDefined();
+        expect(row?.attemptCount).toBe(0);
+        expect(row?.captureId).toBe(event.captureId);
+        expect(row?.distinctId).toBe("distinct-fields");
+        expect(row?.failureClass).toBe("policy_rejected");
+        expect(row?.failureMessage).toBe("rejected by policy");
+        // `sourceTopic` is recorded as the DLQ row's `source_shard`.
+        expect(row?.sourceShard).toBe("analytics.main.7");
+        expect(row?.projectId).toBe(projectId);
+      }),
+    ).pipe(
+      Effect.provide(DlqProducer.dbLive),
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "writes every event in a batch (fire-and-forget forEach, returns void)",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const producer = yield* DlqProducer;
+
+        const events = Array.from({ length: 3 }, (_, i) =>
+          dlqEvent({ captureId: uniqueCaptureId(`batch-${i}`) }),
+        );
+        for (const event of events) track(event.captureId!);
+
+        const result = yield* producer.publishBatch(events);
+        expect(result).toBeUndefined();
+
+        for (const event of events) {
+          const row = yield* findDlqRowByCaptureId(event.captureId!);
+          expect(row).toBeDefined();
+          expect(row?.captureId).toBe(event.captureId);
+        }
+      }),
+    ).pipe(
+      Effect.provide(DlqProducer.dbLive),
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "defaults a missing projectId to 'unknown'",
+    withDlqCleanup((track) =>
+      Effect.gen(function* () {
+        const producer = yield* DlqProducer;
+
+        const event = dlqEvent({ captureId: uniqueCaptureId("no-project") });
+        delete (event as { projectId?: string }).projectId;
+        track(event.captureId!);
+
+        yield* producer.publishBatch([event]);
+
+        const row = yield* findDlqRowByCaptureId(event.captureId!);
+        expect(row?.projectId).toBe("unknown");
+      }),
+    ).pipe(
+      Effect.provide(DlqProducer.dbLive),
+      Effect.provide(AnalyticsIngestDlqService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("DlqProducer.noop publishBatch", () => {
+  test(
+    "returns void and writes nothing",
+    // No cleanup wrapper: the noop layer performs no DB writes.
+    Effect.gen(function* () {
+      const producer = yield* DlqProducer;
+
+      const captureId = uniqueCaptureId("noop");
+      const event = dlqEvent({ captureId });
+
+      const result = yield* producer.publishBatch([event]);
+      expect(result).toBeUndefined();
+
+      const row = yield* findDlqRowByCaptureId(captureId);
+      expect(row).toBeUndefined();
+    }).pipe(Effect.provide(DlqProducer.noop), CoreAuthSession.authenticate()),
+  );
+});
+
+// `publishBatch` wraps any `AnalyticsIngestDlqServiceError` from
+// `recordFailure` in a `DlqProducerError` ("failed to record analytics ingest
+// DLQ row"). Triggering that failure deterministically needs a real
+// `recordFailure`/DB error, but the only failure seam is the INSERT itself:
+// `routeClass`/`projectId` are always coerced to valid values and the UNIQUE
+// `capture_id` collision is absorbed by `onDuplicateKeyUpdate`, so no input
+// reliably makes the live PlanetScale/Vitess INSERT throw (overflow on the
+// varchar columns truncates rather than errors, and is mode-dependent).
+// Faking `AnalyticsIngestDlqService` to throw is disallowed (no mocks of
+// services we can run). Deferred until there is an in-process fault-injection
+// seam on `Db`/`AnalyticsIngestDlqService`.
+vitestTest.todo(
+  "DlqProducer.dbLive publishBatch wraps a recordFailure failure as DlqProducerError",
+);
diff --git a/packages/core/test/services/analyticsIngest/EventCaptureService.integration.test.ts b/packages/core/test/services/analyticsIngest/EventCaptureService.integration.test.ts
new file mode 100644
index 000000000..23ce7f311
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/EventCaptureService.integration.test.ts
@@ -0,0 +1,569 @@
+/**
+ * Integration tests for {@link EventCaptureService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB). The service resolves its caller from the *capture token* in
+ * the `api_key` / `capture_project_policy` tables rather than from an
+ * {@link AuthSession}, so these tests authenticate by seeding a public api-key
+ * row and never call {@link CoreAuthSession.authenticate}.
+ *
+ * What is real vs. doubled:
+ *  - `Db` is the live MySQL connection: every test seeds a `vh_pk_*` public
+ *    api-key (and optionally a `capture_project_policy`) under the shared
+ *    fixture project and verifies the service resolves them in one query.
+ *  - `PolicyCounterStore` and `CaptureIngress` are *port boundaries* whose
+ *    concrete implementations are Cloudflare-runtime backed (KV / Durable
+ *    Objects) with no in-process seam. The port ships a sanctioned
+ *    {@link PolicyCounterStore.noop} layer; we use it for the allow path and
+ *    inject small typed doubles to exercise the reject / quota / publish paths.
+ *  - The `PolicyCounterStore` port colors its effects with the
+ *    {@link PlatformRuntime} marker, so the harness's service set is not
+ *    sufficient on its own; we provide a minimal platform runtime stub
+ *    (the noop / double counter implementations never read it).
+ *
+ * The service writes NOTHING to the database — it only reads the api-key/policy
+ * rows and hands accepted envelopes to the ingress port — so the persisted
+ * side-effect we verify is the *batch published to the ingress double*. The
+ * only DB rows that need cleanup are the api-key / policy rows the test seeds;
+ * {@link withCaptureCleanup} removes them on exit, success or failure.
+ *
+ * Typed failures are asserted with `Effect.flip` (project convention), narrowed
+ * with `instanceof` before reading their fields, and each failure path is
+ * paired with a state assertion (no batch published).
+ */
+import type { RouteClass } from "@voidhash/core/domain/analyticsIngest/AnalyticsIngest";
+import {
+  CaptureIngress,
+  CaptureIngressError,
+  type CaptureRequest,
+  EventCaptureService,
+  EventCaptureServiceError,
+  PolicyCounterStore,
+  type PolicyCounterStoreShape,
+  PolicyStoreError,
+  type PublishableCaptureEvent,
+} from "@voidhash/core/services";
+import {
+  CaptureRateLimitedError,
+  CaptureUnauthorizedError,
+  type CaptureEvent,
+} from "@voidhash/api-contracts/event-capture";
+import { apiKeys, captureProjectPolicies, Db, eq, inArray } from "@voidhash/db";
+import { Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so tokens/ids stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueToken = (label: string) => `vh_pk_it${label}${Date.now()}${seq++}`;
+const uniqueId = (label: string) => `it_capt_${label}_${Date.now()}_${seq++}`;
+
+/**
+ * Minimal {@link PlatformRuntime} stub. The noop / double {@link PolicyCounterStore}
+ * implementations never read it; it exists only to discharge the runtime-phase
+ * marker the port colors its effects with.
+ */
+const PlatformRuntimeStub = Layer.succeed(PlatformRuntime, PlatformRuntime.of({}));
+
+/**
+ * A {@link CaptureIngress} double that records every batch handed to it, so a
+ * test can assert which envelopes were published (and on which route). Returns
+ * the layer plus the live `batches` array it appends to.
+ */
+const makeIngressSpy = () => {
+  const batches: Array<ReadonlyArray<PublishableCaptureEvent>> = [];
+  const layer = Layer.succeed(CaptureIngress, {
+    enqueueBatch: (events) =>
+      Effect.sync(() => {
+        batches.push(events);
+      }),
+  });
+  return { batches, layer };
+};
+
+/** Flatten the recorded batches into a single list of published events. */
+const publishedEvents = (
+  batches: ReadonlyArray<ReadonlyArray<PublishableCaptureEvent>>,
+): ReadonlyArray<PublishableCaptureEvent> => batches.flat();
+
+/** Build a `PolicyCounterStore` layer from a partial shape, defaulting to allow-all. */
+const policyStoreLayer = (overrides: Partial<PolicyCounterStoreShape> = {}) =>
+  Layer.succeed(PolicyCounterStore, {
+    checkRequestLimit: () => Effect.succeed({ allowed: true }),
+    checkEventQuota: () => Effect.succeed(true),
+    ...overrides,
+  });
+
+/**
+ * Pipeable that wires the service-under-test for a test. The
+ * {@link EventCaptureService} layer is built with the per-test ingress +
+ * policy-store port doubles supplied (its build-time requirements), and the
+ * {@link PlatformRuntime} stub is layered in for the runtime-phase marker the
+ * policy port colors its `captureEvents` effect with. `Db` (and the other
+ * harness services) is left to the harness.
+ */
+const provideService =
+  (ports: {
+    readonly ingress: Layer.Layer<CaptureIngress>;
+    readonly policyStore?: Layer.Layer<PolicyCounterStore>;
+  }) =>
+  <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+    effect.pipe(
+      Effect.provide(
+        EventCaptureService.layer.pipe(
+          Layer.provide(Layer.mergeAll(ports.ingress, ports.policyStore ?? policyStoreLayer())),
+        ),
+      ),
+      Effect.provide(PlatformRuntimeStub),
+    );
+
+/** A fresh capture event with sensible defaults; override fields per test. */
+const captureEvent = (
+  overrides: Partial<typeof CaptureEvent.Type> = {},
+): typeof CaptureEvent.Type => ({
+  uuid: uniqueId("evt"),
+  event: "page_view",
+  context: {},
+  properties: {},
+  distinct_id: "user-1",
+  ...overrides,
+});
+
+/** A fresh capture request wrapping the given events. */
+const captureRequest = (
+  token: string,
+  events: ReadonlyArray<typeof CaptureEvent.Type>,
+): CaptureRequest => {
+  const now = new Date();
+  return {
+    request: {
+      headers: { "user-agent": "integration-test" },
+      receivedAt: now,
+      requestId: uniqueId("req"),
+      sentAt: now,
+      token,
+    },
+    events,
+  };
+};
+
+/** Insert a public api-key row (the capture token) under the fixture project. */
+const insertPublicApiKey = (token: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueId("key");
+    yield* db.insert(apiKeys).values({
+      end: token.slice(-8),
+      id,
+      isPublic: true,
+      key: token,
+      name: "Integration capture key",
+      prefix: "api_pk",
+      projectId,
+    });
+    return id;
+  });
+
+/** Insert (or upsert) the capture-project policy row for the fixture project. */
+const upsertCapturePolicy = (policy: {
+  readonly ingestEnabled?: boolean;
+  readonly requestsPerMinute?: number;
+  readonly eventsPerDay?: number;
+  readonly forceRoute?: string;
+  readonly skipEnrichment?: boolean;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db
+      .insert(captureProjectPolicies)
+      .values({ projectId, ...policy })
+      .onConflictDoUpdate({
+        target: captureProjectPolicies.projectId,
+        set: {
+          ...(policy.ingestEnabled !== undefined ? { ingestEnabled: policy.ingestEnabled } : {}),
+          ...(policy.requestsPerMinute !== undefined
+            ? { requestsPerMinute: policy.requestsPerMinute }
+            : {}),
+          ...(policy.eventsPerDay !== undefined ? { eventsPerDay: policy.eventsPerDay } : {}),
+          ...(policy.forceRoute !== undefined ? { forceRoute: policy.forceRoute } : {}),
+          ...(policy.skipEnrichment !== undefined ? { skipEnrichment: policy.skipEnrichment } : {}),
+        },
+      });
+  });
+
+/**
+ * Delete the api-key rows and the capture-policy row the test seeded. The
+ * policy row is keyed by `projectId`, so it is cleared by project id; each
+ * delete is `ignore`d so a missing row never turns the finalizer into a
+ * failure.
+ */
+const cleanup = (apiKeyIds: ReadonlyArray<string>, seededPolicy: boolean) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (apiKeyIds.length > 0) {
+      yield* db
+        .delete(apiKeys)
+        .where(inArray(apiKeys.id, [...apiKeyIds]))
+        .pipe(Effect.ignore);
+    }
+    if (seededPolicy) {
+      yield* db
+        .delete(captureProjectPolicies)
+        .where(eq(captureProjectPolicies.projectId, projectId))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every api-key (and the policy row) it seeds is removed
+ * afterward, regardless of how the test exits. `trackKey` collects api-key ids;
+ * `markPolicy` flags that the project policy row was written. Cleanup reads the
+ * collected ids lazily at finalization via `Effect.ensuring`.
+ */
+const withCaptureCleanup = <E, R>(
+  body: (trackKey: (id: string) => void, markPolicy: () => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const apiKeyIds: string[] = [];
+  let seededPolicy = false;
+  return body(
+    (id) => {
+      apiKeyIds.push(id);
+    },
+    () => {
+      seededPolicy = true;
+    },
+  ).pipe(Effect.ensuring(Effect.suspend(() => cleanup(apiKeyIds, seededPolicy))));
+};
+
+describe("EventCaptureService.captureEvents", () => {
+  test(
+    "resolves a public token, publishes envelopes on the main route, and returns accepted counts",
+    (() => {
+      const ingress = makeIngressSpy();
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("ok");
+          trackKey(yield* insertPublicApiKey(token));
+
+          const eventA = captureEvent({ event: "signup", distinct_id: "user-a" });
+          const eventB = captureEvent({ event: "page_view", distinct_id: "user-b" });
+
+          const result = yield* service.captureEvents(captureRequest(token, [eventA, eventB]));
+
+          expect(result.accepted).toBe(2);
+          expect(result.rejected).toBe(0);
+
+          const events = publishedEvents(ingress.batches);
+          expect(events.length).toBe(2);
+          // No policy row → default policy → "main" route for within-quota events.
+          expect(events.every((entry) => entry.routeClass === "main")).toBe(true);
+          expect(events.some((entry) => entry.envelope.event === "signup")).toBe(true);
+          expect(events.some((entry) => entry.envelope.event === "page_view")).toBe(true);
+          // Envelopes carry the resolved project + the trimmed token.
+          expect(events.every((entry) => entry.envelope.projectId === projectId)).toBe(true);
+          expect(events.every((entry) => entry.envelope.token === token)).toBe(true);
+        }),
+      ).pipe(provideService({ ingress: ingress.layer }));
+    })(),
+  );
+
+  test(
+    "trims whitespace around an otherwise-valid token before resolving it",
+    (() => {
+      const ingress = makeIngressSpy();
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("trim");
+          trackKey(yield* insertPublicApiKey(token));
+
+          // Surrounding whitespace must be stripped so the DB lookup hits.
+          const result = yield* service.captureEvents(
+            captureRequest(`  ${token}\n`, [captureEvent()]),
+          );
+
+          expect(result.accepted).toBe(1);
+          expect(publishedEvents(ingress.batches).length).toBe(1);
+        }),
+      ).pipe(provideService({ ingress: ingress.layer }));
+    })(),
+  );
+
+  test(
+    "fails with CaptureUnauthorizedError for a malformed token and publishes nothing",
+    (() => {
+      const ingress = makeIngressSpy();
+      // No cleanup wrapper: a malformed token never reaches an insert.
+      return Effect.gen(function* () {
+        const service = yield* EventCaptureService;
+
+        const error = yield* Effect.flip(
+          service.captureEvents(captureRequest("not-a-valid-token", [captureEvent()])),
+        );
+        expect(error).toBeInstanceOf(CaptureUnauthorizedError);
+        if (error instanceof CaptureUnauthorizedError) {
+          expect(error.code).toBe("unauthorized");
+        }
+
+        expect(ingress.batches.length).toBe(0);
+      }).pipe(provideService({ ingress: ingress.layer }));
+    })(),
+  );
+
+  test(
+    "fails with CaptureUnauthorizedError for a well-formed but unknown token",
+    (() => {
+      const ingress = makeIngressSpy();
+      return Effect.gen(function* () {
+        const service = yield* EventCaptureService;
+
+        // Correct `vh_pk_*` shape, but no matching api-key row exists.
+        const error = yield* Effect.flip(
+          service.captureEvents(captureRequest(uniqueToken("missing"), [captureEvent()])),
+        );
+        expect(error).toBeInstanceOf(CaptureUnauthorizedError);
+
+        expect(ingress.batches.length).toBe(0);
+      }).pipe(provideService({ ingress: ingress.layer }));
+    })(),
+  );
+
+  test(
+    "rejects the request with CaptureRateLimitedError when the project's policy disables ingest",
+    (() => {
+      const ingress = makeIngressSpy();
+      return withCaptureCleanup((trackKey, markPolicy) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("disabled");
+          trackKey(yield* insertPublicApiKey(token));
+          yield* upsertCapturePolicy({ ingestEnabled: false });
+          markPolicy();
+
+          const error = yield* Effect.flip(
+            service.captureEvents(captureRequest(token, [captureEvent()])),
+          );
+          expect(error).toBeInstanceOf(CaptureRateLimitedError);
+          if (error instanceof CaptureRateLimitedError) {
+            expect(error.code).toBe("rate_limited");
+          }
+
+          expect(ingress.batches.length).toBe(0);
+        }),
+      ).pipe(provideService({ ingress: ingress.layer }));
+    })(),
+  );
+
+  test(
+    "rejects with CaptureRateLimitedError carrying retry_after_ms when the request limit is exceeded",
+    (() => {
+      const ingress = makeIngressSpy();
+      const policyStore = policyStoreLayer({
+        checkRequestLimit: () => Effect.succeed({ allowed: false, retryAfterMs: 4_200 }),
+      });
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("ratelimited");
+          trackKey(yield* insertPublicApiKey(token));
+
+          const error = yield* Effect.flip(
+            service.captureEvents(captureRequest(token, [captureEvent()])),
+          );
+          expect(error).toBeInstanceOf(CaptureRateLimitedError);
+          if (error instanceof CaptureRateLimitedError) {
+            expect(error.retry_after_ms).toBe(4_200);
+          }
+
+          expect(ingress.batches.length).toBe(0);
+        }),
+      ).pipe(provideService({ ingress: ingress.layer, policyStore }));
+    })(),
+  );
+
+  test(
+    "rejects reserved revenue event names from public-key capture but accepts the rest",
+    (() => {
+      const ingress = makeIngressSpy();
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("reserved");
+          trackKey(yield* insertPublicApiKey(token));
+
+          const reserved = captureEvent({ event: "$purchase.completed" });
+          const allowed = captureEvent({ event: "checkout_started" });
+
+          const result = yield* service.captureEvents(captureRequest(token, [reserved, allowed]));
+
+          expect(result.rejected).toBe(1);
+          expect(result.accepted).toBe(1);
+
+          const events = publishedEvents(ingress.batches);
+          expect(events.length).toBe(1);
+          expect(events[0]?.envelope.event).toBe("checkout_started");
+          // The reserved event must never reach the ingress.
+          expect(events.some((entry) => entry.envelope.event === "$purchase.completed")).toBe(
+            false,
+          );
+        }),
+      ).pipe(provideService({ ingress: ingress.layer }));
+    })(),
+  );
+
+  test(
+    "routes over-quota events to the overflow lane while staying accepted",
+    (() => {
+      const ingress = makeIngressSpy();
+      const policyStore = policyStoreLayer({ checkEventQuota: () => Effect.succeed(false) });
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("overflow");
+          trackKey(yield* insertPublicApiKey(token));
+
+          // Quota check denies → selectRoute falls back to the overflow lane.
+          const result = yield* service.captureEvents(captureRequest(token, [captureEvent()]));
+
+          expect(result.accepted).toBe(1);
+          expect(result.rejected).toBe(0);
+
+          const events = publishedEvents(ingress.batches);
+          expect(events.length).toBe(1);
+          expect(events[0]?.routeClass).toBe<RouteClass>("overflow");
+        }),
+      ).pipe(provideService({ ingress: ingress.layer, policyStore }));
+    })(),
+  );
+
+  test(
+    "honors a forced route from the project policy",
+    (() => {
+      const ingress = makeIngressSpy();
+      return withCaptureCleanup((trackKey, markPolicy) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("historical");
+          trackKey(yield* insertPublicApiKey(token));
+          yield* upsertCapturePolicy({ forceRoute: "historical" });
+          markPolicy();
+
+          const result = yield* service.captureEvents(captureRequest(token, [captureEvent()]));
+
+          expect(result.accepted).toBe(1);
+          const events = publishedEvents(ingress.batches);
+          expect(events.length).toBe(1);
+          expect(events[0]?.routeClass).toBe<RouteClass>("historical");
+          // Forced historical route stamps the envelope as historical.
+          expect(events[0]?.envelope.routing.isHistorical).toBe(true);
+        }),
+      ).pipe(provideService({ ingress: ingress.layer }));
+    })(),
+  );
+
+  test(
+    "counts a per-event quota failure as rejected and continues processing the batch",
+    (() => {
+      const ingress = makeIngressSpy();
+      // The first per-event quota check fails (PolicyStoreError surfaced inside
+      // the per-event `Effect.result`); the second succeeds. The failing event is
+      // counted rejected, the loop keeps going.
+      let calls = 0;
+      const policyStore = policyStoreLayer({
+        checkEventQuota: () => {
+          calls += 1;
+          return calls === 1
+            ? Effect.fail(new PolicyStoreError({ message: "per-event quota check failed" }))
+            : Effect.succeed(true);
+        },
+      });
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("partialfail");
+          trackKey(yield* insertPublicApiKey(token));
+
+          const result = yield* service.captureEvents(
+            captureRequest(token, [captureEvent(), captureEvent()]),
+          );
+
+          expect(result.rejected).toBe(1);
+          expect(result.accepted).toBe(1);
+          expect(publishedEvents(ingress.batches).length).toBe(1);
+        }),
+      ).pipe(provideService({ ingress: ingress.layer, policyStore }));
+    })(),
+  );
+
+  test(
+    "wraps a CaptureIngressError from the publish step as EventCaptureServiceError",
+    (() => {
+      const failingIngress = Layer.succeed(CaptureIngress, {
+        enqueueBatch: () =>
+          Effect.fail(new CaptureIngressError({ message: "ingress unavailable" })),
+      });
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("ingresserr");
+          trackKey(yield* insertPublicApiKey(token));
+
+          const error = yield* Effect.flip(
+            service.captureEvents(captureRequest(token, [captureEvent()])),
+          );
+          // CaptureIngressError is wrapped at the public boundary, surfacing the
+          // adapter's message on EventCaptureServiceError.
+          expect(error).toBeInstanceOf(EventCaptureServiceError);
+          if (error instanceof EventCaptureServiceError) {
+            expect(error.message).toBe("ingress unavailable");
+          }
+        }),
+      ).pipe(provideService({ ingress: failingIngress }));
+    })(),
+  );
+
+  test(
+    "wraps a PolicyStoreError from the request-limit check as EventCaptureServiceError",
+    (() => {
+      const ingress = makeIngressSpy();
+      const policyStore = policyStoreLayer({
+        checkRequestLimit: () =>
+          Effect.fail(new PolicyStoreError({ message: "counter store down" })),
+      });
+      return withCaptureCleanup((trackKey) =>
+        Effect.gen(function* () {
+          const service = yield* EventCaptureService;
+
+          const token = uniqueToken("policyerr");
+          trackKey(yield* insertPublicApiKey(token));
+
+          const error = yield* Effect.flip(
+            service.captureEvents(captureRequest(token, [captureEvent()])),
+          );
+          expect(error).toBeInstanceOf(EventCaptureServiceError);
+          if (error instanceof EventCaptureServiceError) {
+            expect(error.message).toBe("counter store down");
+          }
+
+          expect(ingress.batches.length).toBe(0);
+        }),
+      ).pipe(provideService({ ingress: ingress.layer, policyStore }));
+    })(),
+  );
+});
diff --git a/packages/core/test/services/analyticsIngest/EventCaptureService.test.ts b/packages/core/test/services/analyticsIngest/EventCaptureService.test.ts
new file mode 100644
index 000000000..0b2aee577
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/EventCaptureService.test.ts
@@ -0,0 +1,350 @@
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import {
+  CaptureRateLimitedError,
+  CaptureUnauthorizedError,
+  type CaptureEvent,
+} from "@voidhash/api-contracts/event-capture";
+import { Effect } from "effect";
+
+import { describe, expect, it } from "../../../src/testing/effect-vitest.ts";
+import type {
+  CaptureProjectPolicy,
+  RouteClass,
+  RouteDecision,
+} from "../../../src/domain/analyticsIngest/AnalyticsIngest.ts";
+import {
+  CAPTURE_TOPIC_DLQ,
+  CAPTURE_TOPIC_HISTORICAL,
+  CAPTURE_TOPIC_MAIN,
+  CAPTURE_TOPIC_OVERFLOW,
+  makeEnvelope,
+  resolveEventTimestamp,
+  selectRoute,
+  tokenSuffix,
+  validateCaptureToken,
+} from "../../../src/services/analyticsIngest/EventCaptureService.ts";
+
+// =============================================================================
+// Fixtures (fresh per test via const-returning builders)
+// =============================================================================
+
+const policy = (overrides: Partial<CaptureProjectPolicy> = {}): CaptureProjectPolicy => ({
+  ingestEnabled: true,
+  projectId: "proj_123",
+  skipEnrichment: false,
+  ...overrides,
+});
+
+const route = (overrides: Partial<RouteDecision> = {}): RouteDecision => ({
+  isHistorical: false,
+  routeClass: "main",
+  skipEnrichment: false,
+  targetTopic: CAPTURE_TOPIC_MAIN,
+  ...overrides,
+});
+
+const captureEvent = (
+  overrides: Partial<typeof CaptureEvent.Type> = {},
+): typeof CaptureEvent.Type => ({
+  uuid: "evt_uuid_1",
+  event: "page_view",
+  context: { library: "web" },
+  properties: { plan: "pro" },
+  distinct_id: "user_42",
+  ...overrides,
+});
+
+const envelopeArgs = (
+  overrides: {
+    event?: typeof CaptureEvent.Type;
+    route?: RouteDecision;
+    request?: {
+      readonly clientIp?: string;
+      readonly headers: Readonly<Record<string, string | undefined>>;
+      readonly path?: string;
+      readonly requestId: string;
+    };
+    receivedAt?: Date;
+    sentAt?: Date;
+    token?: string;
+    organizationId?: string;
+    projectId?: string;
+  } = {},
+) => ({
+  event: overrides.event ?? captureEvent(),
+  organizationId: overrides.organizationId ?? "org_1",
+  projectId: overrides.projectId ?? "proj_123",
+  receivedAt: overrides.receivedAt ?? new Date("2026-01-01T00:00:05.000Z"),
+  request: overrides.request ?? {
+    headers: { "user-agent": "test-agent" },
+    requestId: "req_1",
+  },
+  route: overrides.route ?? route(),
+  sentAt: overrides.sentAt ?? new Date("2026-01-01T00:00:02.000Z"),
+  token: overrides.token ?? "vh_pk_abcd1234",
+});
+
+// =============================================================================
+// validateCaptureToken (returns an Effect; run with Effect.runPromise / flip)
+// =============================================================================
+
+describe("validateCaptureToken", () => {
+  it("accepts a token matching the vh_pk_* format and returns it", async () => {
+    const result = await Effect.runPromise(validateCaptureToken("vh_pk_abcd1234"));
+    expect(result).toBe("vh_pk_abcd1234");
+  });
+
+  it("trims surrounding whitespace before validating and returns the trimmed token", async () => {
+    const result = await Effect.runPromise(validateCaptureToken("  vh_pk_abcd1234\n"));
+    expect(result).toBe("vh_pk_abcd1234");
+  });
+
+  it("rejects an empty token with CaptureUnauthorizedError 'missing token'", async () => {
+    // `Effect.flip` moves the typed error into the success channel so we can
+    // assert on its concrete type without poking into the Cause.
+    const error = await Effect.runPromise(validateCaptureToken("").pipe(Effect.flip));
+    expect(error).toBeInstanceOf(CaptureUnauthorizedError);
+    expect(error.error).toBe("missing token");
+    expect(error.code).toBe("unauthorized");
+  });
+
+  it("treats a whitespace-only token as missing", async () => {
+    const error = await Effect.runPromise(validateCaptureToken("   ").pipe(Effect.flip));
+    expect(error).toBeInstanceOf(CaptureUnauthorizedError);
+    expect(error.error).toBe("missing token");
+  });
+
+  it.each([
+    ["pk_abcd1234", "wrong prefix"],
+    ["vh_pk_", "empty body"],
+    ["vh_pk_abc-123", "non-word char"],
+    ["VH_PK_ABCD", "uppercase prefix"],
+  ])("rejects malformed token %j (%s) with 'invalid token format'", async (token) => {
+    const error = await Effect.runPromise(validateCaptureToken(token).pipe(Effect.flip));
+    expect(error).toBeInstanceOf(CaptureUnauthorizedError);
+    expect(error.error).toBe("invalid token format");
+    expect(error.code).toBe("unauthorized");
+  });
+});
+
+// =============================================================================
+// tokenSuffix
+// =============================================================================
+
+describe("tokenSuffix", () => {
+  it("returns the last 4 characters of a token", () => {
+    expect(tokenSuffix("vh_pk_abcd1234")).toBe("1234");
+  });
+
+  it("returns the whole string when shorter than 4 characters", () => {
+    expect(tokenSuffix("ab")).toBe("ab");
+  });
+});
+
+// =============================================================================
+// resolveEventTimestamp (pure)
+// =============================================================================
+
+describe("resolveEventTimestamp", () => {
+  const receivedAt = new Date("2026-01-01T00:00:05.000Z");
+  const sentAt = new Date("2026-01-01T00:00:02.000Z");
+  const timestamp = new Date("2026-01-01T00:00:01.000Z");
+
+  it("returns the explicit timestamp when provided (highest priority)", () => {
+    expect(resolveEventTimestamp({ receivedAt, sentAt, timestamp })).toBe(timestamp);
+  });
+
+  it("falls back to sentAt when timestamp is missing", () => {
+    expect(resolveEventTimestamp({ receivedAt, sentAt })).toBe(sentAt);
+  });
+
+  it("falls back to receivedAt when both timestamp and sentAt are missing", () => {
+    expect(resolveEventTimestamp({ receivedAt })).toBe(receivedAt);
+  });
+});
+
+// =============================================================================
+// selectRoute (returns an Effect)
+// =============================================================================
+
+describe("selectRoute", () => {
+  it("routes to 'main'/CAPTURE_TOPIC_MAIN when not over quota and no forceRoute", async () => {
+    const decision = await Effect.runPromise(selectRoute({ overQuota: false, policy: policy() }));
+    expect(decision).toStrictEqual({
+      isHistorical: false,
+      routeClass: "main",
+      skipEnrichment: false,
+      targetTopic: CAPTURE_TOPIC_MAIN,
+    });
+  });
+
+  it("routes to 'overflow'/CAPTURE_TOPIC_OVERFLOW when over quota", async () => {
+    const decision = await Effect.runPromise(selectRoute({ overQuota: true, policy: policy() }));
+    expect(decision.routeClass).toBe("overflow");
+    expect(decision.targetTopic).toBe(CAPTURE_TOPIC_OVERFLOW);
+    expect(decision.isHistorical).toBe(false);
+  });
+
+  it.each<[Exclude<RouteClass, "custom">, string, boolean]>([
+    ["main", CAPTURE_TOPIC_MAIN, false],
+    ["overflow", CAPTURE_TOPIC_OVERFLOW, false],
+    ["historical", CAPTURE_TOPIC_HISTORICAL, true],
+    ["dlq", CAPTURE_TOPIC_DLQ, false],
+  ])(
+    "respects forceRoute=%s (topic %s, isHistorical=%s) even when over quota",
+    async (forceRoute, expectedTopic, expectedHistorical) => {
+      const decision = await Effect.runPromise(
+        // overQuota is intentionally true to prove forceRoute wins over the quota fallback.
+        selectRoute({ overQuota: true, policy: policy({ forceRoute }) }),
+      );
+      expect(decision.routeClass).toBe(forceRoute);
+      expect(decision.targetTopic).toBe(expectedTopic);
+      expect(decision.isHistorical).toBe(expectedHistorical);
+    },
+  );
+
+  it("rejects forceRoute='custom' with CaptureRateLimitedError", async () => {
+    const error = await Effect.runPromise(
+      selectRoute({ overQuota: false, policy: policy({ forceRoute: "custom" }) }).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(CaptureRateLimitedError);
+    expect(error.code).toBe("rate_limited");
+    expect(error.error).toBe("custom routes are not supported in this deployment");
+  });
+
+  it("carries skipEnrichment through from the policy into the RouteDecision", async () => {
+    const decision = await Effect.runPromise(
+      selectRoute({ overQuota: false, policy: policy({ skipEnrichment: true }) }),
+    );
+    expect(decision.skipEnrichment).toBe(true);
+  });
+
+  it("sets isHistorical=true only for the historical route", async () => {
+    const main = await Effect.runPromise(selectRoute({ overQuota: false, policy: policy() }));
+    const historical = await Effect.runPromise(
+      selectRoute({ overQuota: false, policy: policy({ forceRoute: "historical" }) }),
+    );
+    expect(main.isHistorical).toBe(false);
+    expect(historical.isHistorical).toBe(true);
+  });
+});
+
+// =============================================================================
+// makeEnvelope (pure)
+// =============================================================================
+
+describe("makeEnvelope", () => {
+  it("builds a CapturedEventV1 with schema version, captureId, routing, ids and timestamps", () => {
+    const envelope = makeEnvelope(envelopeArgs());
+    expect(envelope.schemaVersion).toBe(1);
+    expect(typeof envelope.captureId).toBe("string");
+    expect(envelope.captureId.length).toBeGreaterThan(0);
+    expect(envelope.organizationId).toBe("org_1");
+    expect(envelope.projectId).toBe("proj_123");
+    expect(envelope.token).toBe("vh_pk_abcd1234");
+    expect(envelope.event).toBe("page_view");
+    expect(envelope.distinctId).toBe("user_42");
+    expect(envelope.context).toStrictEqual({ library: "web" });
+    expect(envelope.routing).toStrictEqual(route());
+    // sentAt (2s) is preferred over receivedAt (5s) since no event.timestamp.
+    expect(envelope.eventTimestamp).toBe("2026-01-01T00:00:02.000Z");
+    expect(envelope.receivedAt).toBe("2026-01-01T00:00:05.000Z");
+    expect(envelope.sentAt).toBe("2026-01-01T00:00:02.000Z");
+    expect(envelope.request.requestId).toBe("req_1");
+    expect(envelope.request.userAgent).toBe("test-agent");
+  });
+
+  it("uses resolveEventTimestamp: explicit event.timestamp wins over sentAt/receivedAt", () => {
+    const envelope = makeEnvelope(
+      envelopeArgs({
+        event: captureEvent({ timestamp: new Date("2025-12-31T23:59:00.000Z") }),
+      }),
+    );
+    expect(envelope.eventTimestamp).toBe("2025-12-31T23:59:00.000Z");
+  });
+
+  it("includes clientEventId when the event uuid is provided", () => {
+    const envelope = makeEnvelope(envelopeArgs({ event: captureEvent({ uuid: "evt_uuid_99" }) }));
+    expect(envelope.clientEventId).toBe("evt_uuid_99");
+  });
+
+  it("includes sessionId when session_id is provided", () => {
+    const envelope = makeEnvelope(envelopeArgs({ event: captureEvent({ session_id: "sess_7" }) }));
+    expect(envelope.sessionId).toBe("sess_7");
+  });
+
+  it("omits sessionId when session_id is absent", () => {
+    const envelope = makeEnvelope(envelopeArgs());
+    expect(envelope.sessionId).toBeUndefined();
+  });
+
+  it("adds $ip to canonical properties when clientIp is provided", () => {
+    const envelope = makeEnvelope(
+      envelopeArgs({
+        request: { headers: { "user-agent": "ua" }, requestId: "req_2", clientIp: "1.2.3.4" },
+      }),
+    );
+    expect((envelope.properties as Record<string, unknown>).$ip).toBe("1.2.3.4");
+    expect(envelope.request.clientIp).toBe("1.2.3.4");
+  });
+
+  it("omits $ip when clientIp is absent", () => {
+    const envelope = makeEnvelope(envelopeArgs());
+    expect((envelope.properties as Record<string, unknown>).$ip).toBeUndefined();
+    expect(envelope.request.clientIp).toBeUndefined();
+  });
+
+  it("sets $process_person_profile=true for a non-anonymous distinct id", () => {
+    const envelope = makeEnvelope(
+      envelopeArgs({ event: captureEvent({ distinct_id: "real_user" }) }),
+    );
+    expect((envelope.properties as Record<string, unknown>).$process_person_profile).toBe(true);
+  });
+
+  it("sets $process_person_profile=false for an anonymous distinct id", () => {
+    const envelope = makeEnvelope(
+      envelopeArgs({
+        event: captureEvent({ distinct_id: `${ANONYMOUS_USER_ID_PREFIX}abc` }),
+      }),
+    );
+    expect((envelope.properties as Record<string, unknown>).$process_person_profile).toBe(false);
+  });
+
+  it("honors a client-supplied $process_person_profile=true for an anonymous distinct id", () => {
+    // An explicit `setPersonAttributes` `$set` stamps this so anonymous users
+    // still get a person; the envelope must not override it back to false.
+    const envelope = makeEnvelope(
+      envelopeArgs({
+        event: captureEvent({
+          distinct_id: `${ANONYMOUS_USER_ID_PREFIX}abc`,
+          properties: { $set: { age: 25 }, $process_person_profile: true },
+        }),
+      }),
+    );
+    expect((envelope.properties as Record<string, unknown>).$process_person_profile).toBe(true);
+  });
+
+  it("honors a client-supplied $process_person_profile=false for a non-anonymous distinct id", () => {
+    const envelope = makeEnvelope(
+      envelopeArgs({
+        event: captureEvent({
+          distinct_id: "real_user",
+          properties: { $process_person_profile: false },
+        }),
+      }),
+    );
+    expect((envelope.properties as Record<string, unknown>).$process_person_profile).toBe(false);
+  });
+
+  it("falls back to the distinct-id default when $process_person_profile is not a boolean", () => {
+    const envelope = makeEnvelope(
+      envelopeArgs({
+        event: captureEvent({
+          distinct_id: `${ANONYMOUS_USER_ID_PREFIX}abc`,
+          properties: { $process_person_profile: "yes" },
+        }),
+      }),
+    );
+    expect((envelope.properties as Record<string, unknown>).$process_person_profile).toBe(false);
+  });
+});
diff --git a/packages/core/test/services/analyticsIngest/EventProcessorService.integration.test.ts b/packages/core/test/services/analyticsIngest/EventProcessorService.integration.test.ts
new file mode 100644
index 000000000..2b360eb42
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/EventProcessorService.integration.test.ts
@@ -0,0 +1,780 @@
+/**
+ * Integration tests for {@link EventProcessorService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB + ClickHouse + WorkOS; only the project schema cache is an
+ * in-memory stub).
+ *
+ * `processRecordToOutputs` is a single-record orchestration: it resolves the
+ * project + processor policy by token (real MySQL join over `api_key` →
+ * `project` → `capture_project_policy`), validates policy/lane/schema rules,
+ * runs identity resolution directly (order-agnostic; serialized at the row level
+ * by the identity transaction's locks), and
+ * returns the three downstream output streams. Each test drives the service
+ * end-to-end and verifies the *persisted* side effect rather than just the
+ * return value:
+ *  - DLQ rejection paths write an `analytics_ingest_dlq` row with the right
+ *    `failure_class` / `project_id` (verified by reading the row back) and
+ *    return empty outputs.
+ *  - the happy path writes the `person` + `person_identity` rows that identity
+ *    resolution creates, and the returned `ProcessorOutputs` carry the matching
+ *    processed / person / identity wire events.
+ *
+ * Conventions:
+ *  - The fixture seeds only user/org/member/project. This service needs a
+ *    *public* API key under the fixture project (the capture token) plus, for
+ *    some cases, a `capture_project_policy` row; both are created per test with
+ *    unique tokens and cleaned up via {@link withCleanup}.
+ *  - Every record uses a unique `captureId` / `distinctId` so the unique index
+ *    on `analytics_ingest_dlq.capture_id` never collides with a leftover row
+ *    and assertions stay membership-based (by capture id / distinct id), never
+ *    exact counts.
+ *  - {@link withCleanup} deletes everything a test created (DLQ rows, persons,
+ *    identity rows, policy rows, api keys, migration jobs) on exit, success or
+ *    failure. The global teardown sweep is only a backstop.
+ *  - The collaborators the service layer needs but the harness does not provide
+ *    (`DlqProducer`, `PersonIdentityService`, and their
+ *    transitive ports) are wired here from their real layers, so the only
+ *    requirement reaching the harness is `Db` (plus the harness's own set).
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+
+import type {
+  CapturedEventV1Type,
+  CapturedTransportRecord,
+} from "@voidhash/core/domain/analyticsIngest/AnalyticsIngest";
+import { EventProcessorService } from "@voidhash/core/services/analyticsIngest/EventProcessorService";
+import { DlqProducer } from "@voidhash/core/services/analyticsIngest/DlqProducer";
+import { AnalyticsIngestDlqService } from "@voidhash/core/services/analyticsIngest/AnalyticsIngestDlqService";
+import { CaptureIngress } from "@voidhash/core/services/analyticsIngest/CaptureIngress";
+import { PersonIdentityService } from "@voidhash/core/services/personIdentity/PersonIdentityService";
+import { IdentityProjectionPublisher } from "@voidhash/core/services/personIdentity/IdentityProjectionPublisher";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { REVENUE_TRUSTED_SOURCE_TOPIC } from "@voidhash/core/domain/internalAnalytics/InternalAnalyticsEvents";
+import {
+  Db,
+  analyticsIngestDlq,
+  and,
+  apiKeys,
+  captureProjectPolicies,
+  eq,
+  inArray,
+  personIdentities,
+  persons,
+  personPersonlessIdentities,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+const organizationId = CoreTestFixture.organizationId;
+
+/**
+ * Compose the service-under-test layer together with the collaborators the
+ * harness does not provide. After this layer, the only outstanding requirement
+ * is `Db` (plus the harness's own services), satisfying `R extends
+ * HarnessServices`. The DLQ + identity collaborators are the real layers so the
+ * DB side effects they produce can be verified; the queue/workflow ports that
+ * carry no in-process seam are wired to their no-op variants.
+ */
+const IdentifyWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+const TestLayer = EventProcessorService.layer.pipe(
+  Layer.provide(DlqProducer.dbLive),
+  Layer.provide(AnalyticsIngestDlqService.layer),
+  Layer.provide(CaptureIngress.noop),
+  Layer.provide(PersonIdentityService.layer),
+  Layer.provide(IdentityProjectionPublisher.noop),
+  // `PersonIdentityService.identifyDistinctId` resolves the completion workflow
+  // lazily, so the requirement surfaces on `processRecordToOutputs`'s effect
+  // rather than on the layer — merge the stub so the effect can draw it.
+  Layer.provideMerge(IdentifyWorkflowStub),
+);
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let seq = 0;
+const unique = (label: string) => `it-ep-${label}-${Date.now()}-${seq++}`;
+
+interface RecordOverrides {
+  readonly token: string;
+  readonly distinctId?: string;
+  readonly captureId?: string;
+  readonly event?: string;
+  readonly lane?: "main" | "overflow" | "historical";
+  readonly sourceTopic?: string;
+  readonly properties?: Record<string, unknown>;
+}
+
+/**
+ * Build a `main`-lane {@link CapturedTransportRecord} whose routing satisfies
+ * the built-in processor validation rules (target topic matches the source
+ * topic, not historical) for the given capture token. Callers override the
+ * pieces a specific case exercises (event name, lane, source topic).
+ */
+const buildRecord = (overrides: RecordOverrides): CapturedTransportRecord => {
+  const lane = overrides.lane ?? "main";
+  const sourceTopic = overrides.sourceTopic ?? `analytics.events.${lane}.v1`;
+  const captureId = overrides.captureId ?? unique("capture");
+  const distinctId = overrides.distinctId ?? unique("distinct");
+  const isHistorical = lane === "historical";
+
+  const capturedEvent: CapturedEventV1Type = {
+    schemaVersion: 1,
+    captureId,
+    token: overrides.token,
+    organizationId,
+    projectId,
+    event: overrides.event ?? "page_view",
+    distinctId,
+    eventTimestamp: new Date("2020-01-01T00:00:00.000Z").toISOString(),
+    receivedAt: new Date("2020-01-01T00:00:01.000Z").toISOString(),
+    properties: (overrides.properties ?? {}) as CapturedEventV1Type["properties"],
+    context: {},
+    rawPayload: {},
+    request: { requestId: unique("req") },
+    routing: {
+      routeClass: isHistorical ? "historical" : lane === "overflow" ? "overflow" : "main",
+      targetTopic: sourceTopic,
+      isHistorical,
+      skipEnrichment: false,
+    },
+  };
+
+  return {
+    capturedEvent,
+    headers: {},
+    lane,
+    rawValue: JSON.stringify(capturedEvent),
+    sourceOffset: `${sourceTopic}:0:1`,
+    sourcePartition: 0,
+    sourceTopic,
+  };
+};
+
+/** Insert a public API key (the capture token) under the fixture project. */
+const insertPublicApiKey = (token: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = unique("apikey");
+    yield* db.insert(apiKeys).values({
+      end: token.slice(-4),
+      id,
+      isPublic: true,
+      key: token,
+      name: "Integration capture key",
+      prefix: "it",
+      projectId,
+    });
+    return id;
+  });
+
+/** Insert a processor policy row for the fixture project with the given fields. */
+const insertPolicy = (overrides: {
+  readonly processorEnabled?: boolean;
+  readonly processorAllowOverflow?: boolean;
+  readonly processorAllowHistorical?: boolean;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db
+      .insert(captureProjectPolicies)
+      .values({
+        processorAllowHistorical: overrides.processorAllowHistorical ?? true,
+        processorAllowOverflow: overrides.processorAllowOverflow ?? true,
+        processorEnabled: overrides.processorEnabled ?? true,
+        projectId,
+      })
+      .onConflictDoUpdate({
+        target: captureProjectPolicies.projectId,
+        set: {
+          processorAllowHistorical: overrides.processorAllowHistorical ?? true,
+          processorAllowOverflow: overrides.processorAllowOverflow ?? true,
+          processorEnabled: overrides.processorEnabled ?? true,
+        },
+      });
+  });
+
+/** Read the DLQ row recorded for a given capture id, bypassing the service. */
+const findDlqRowByCaptureId = (captureId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.analyticsIngestDlq.findFirst({
+      where: { captureId },
+    });
+  });
+
+/** Read the identity mapping row for a distinct id under the fixture project. */
+const findIdentityRow = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personIdentities.findFirst({
+      where: { projectId, distinctId },
+    });
+  });
+
+/**
+ * Delete everything the tests can create: DLQ rows by capture id, identity /
+ * personless / migration-job / person rows by id, policy + api-key rows. Each
+ * delete is `ignore`d so a missing row never turns the finalizer into a
+ * failure.
+ */
+interface Tracked {
+  readonly apiKeyIds: string[];
+  readonly captureIds: string[];
+  readonly distinctIds: string[];
+  readonly clearedPolicy: { value: boolean };
+}
+
+const cleanup = (tracked: Tracked) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+
+    if (tracked.captureIds.length > 0) {
+      yield* db
+        .delete(analyticsIngestDlq)
+        .where(inArray(analyticsIngestDlq.captureId, tracked.captureIds))
+        .pipe(Effect.ignore);
+    }
+
+    if (tracked.distinctIds.length > 0) {
+      // Collect the person ids reachable from the created identity rows before
+      // deleting the mappings, so the parent `person` rows can be removed too.
+      const personRows = yield* db
+        .select({ personId: personIdentities.personId })
+        .from(personIdentities)
+        .where(
+          and(
+            eq(personIdentities.projectId, projectId),
+            inArray(personIdentities.distinctId, tracked.distinctIds),
+          ),
+        )
+        .pipe(Effect.orElseSucceed(() => [] as ReadonlyArray<{ personId: string }>));
+      const personIds = [...new Set(personRows.map((row) => row.personId))];
+
+      yield* db
+        .delete(personIdentities)
+        .where(
+          and(
+            eq(personIdentities.projectId, projectId),
+            inArray(personIdentities.distinctId, tracked.distinctIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(personPersonlessIdentities)
+        .where(
+          and(
+            eq(personPersonlessIdentities.projectId, projectId),
+            inArray(personPersonlessIdentities.distinctId, tracked.distinctIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+      if (personIds.length > 0) {
+        yield* db.delete(persons).where(inArray(persons.id, personIds)).pipe(Effect.ignore);
+      }
+    }
+
+    if (tracked.apiKeyIds.length > 0) {
+      yield* db.delete(apiKeys).where(inArray(apiKeys.id, tracked.apiKeyIds)).pipe(Effect.ignore);
+    }
+
+    if (tracked.clearedPolicy.value) {
+      yield* db
+        .delete(captureProjectPolicies)
+        .where(eq(captureProjectPolicies.projectId, projectId))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so everything it creates is removed afterward, regardless of
+ * how the test exits. The body records ids into the shared {@link Tracked} bag
+ * via the helpers it is handed; cleanup reads the collected ids lazily at
+ * finalization via `Effect.ensuring`, so it sees every id tracked while the
+ * body ran (including on failure).
+ */
+const withCleanup = <E, R>(
+  body: (track: {
+    readonly apiKey: (id: string) => void;
+    readonly capture: (id: string) => void;
+    readonly distinct: (id: string) => void;
+    readonly policy: () => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const tracked: Tracked = {
+    apiKeyIds: [],
+    captureIds: [],
+    distinctIds: [],
+    clearedPolicy: { value: false },
+  };
+  return body({
+    apiKey: (id) => tracked.apiKeyIds.push(id),
+    capture: (id) => tracked.captureIds.push(id),
+    distinct: (id) => tracked.distinctIds.push(id),
+    policy: () => {
+      tracked.clearedPolicy.value = true;
+    },
+  }).pipe(Effect.ensuring(cleanup(tracked)));
+};
+
+describe("EventProcessorService.processRecordToOutputs", () => {
+  test(
+    "publishes a project_not_found DLQ row and returns empty outputs for an unknown token",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const captureId = unique("capture-unknown");
+        track.capture(captureId);
+        const record = buildRecord({ captureId, token: unique("missing-token") });
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        expect(outputs.processedEvents).toEqual([]);
+        expect(outputs.personEvents).toEqual([]);
+        expect(outputs.personIdentityEvents).toEqual([]);
+
+        const dlqRow = yield* findDlqRowByCaptureId(captureId);
+        expect(dlqRow).toBeDefined();
+        expect(dlqRow?.failureClass).toBe("project_not_found");
+        // No resolved project, so the producer falls back to the captured event's project id.
+        expect(dlqRow?.projectId).toBe(projectId);
+
+        // Nothing was identified.
+        expect(yield* findIdentityRow(record.capturedEvent.distinctId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "applies the default processor policy when no policy row exists and resolves identity",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-default");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        const captureId = unique("capture-default");
+        const distinctId = unique("distinct-default");
+        track.capture(captureId);
+        track.distinct(distinctId);
+        const record = buildRecord({ captureId, distinctId, token });
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        // Default policy enables the processor, so the record is processed.
+        expect(outputs.processedEvents.length).toBe(1);
+        const processed = outputs.processedEvents[0]!;
+        expect(processed.captureId).toBe(captureId);
+        expect(processed.projectId).toBe(projectId);
+        expect(processed.organizationId).toBe(organizationId);
+        expect(processed.identity.distinctId).toBe(distinctId);
+
+        // No DLQ row was written on the happy path.
+        expect(yield* findDlqRowByCaptureId(captureId)).toBeUndefined();
+
+        // A non-anonymous distinct id creates a canonical person + identity mapping.
+        const identity = yield* findIdentityRow(distinctId);
+        expect(identity).toBeDefined();
+        expect(identity?.personId).toBe(processed.identity.personId);
+        expect(outputs.personEvents.some((event) => event.personId === identity?.personId)).toBe(
+          true,
+        );
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "publishes a policy_rejected DLQ row and writes nothing when the processor is disabled",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-disabled");
+        track.apiKey(yield* insertPublicApiKey(token));
+        track.policy();
+        yield* insertPolicy({ processorEnabled: false });
+
+        const captureId = unique("capture-disabled");
+        const distinctId = unique("distinct-disabled");
+        track.capture(captureId);
+        track.distinct(distinctId);
+        const record = buildRecord({ captureId, distinctId, token });
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        expect(outputs.processedEvents).toEqual([]);
+        expect(outputs.personEvents).toEqual([]);
+        expect(outputs.personIdentityEvents).toEqual([]);
+
+        const dlqRow = yield* findDlqRowByCaptureId(captureId);
+        expect(dlqRow).toBeDefined();
+        expect(dlqRow?.failureClass).toBe("policy_rejected");
+        expect(dlqRow?.projectId).toBe(projectId);
+
+        // Rejected before identity resolution: no person mapping written.
+        expect(yield* findIdentityRow(distinctId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "publishes a schema_rejected DLQ row when routing fails the built-in validation rules",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-schema");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        const captureId = unique("capture-schema");
+        const distinctId = unique("distinct-schema");
+        track.capture(captureId);
+        track.distinct(distinctId);
+        // targetTopic deliberately mismatches sourceTopic → validation rejects.
+        const record = buildRecord({ captureId, distinctId, token });
+        const mismatched: CapturedTransportRecord = {
+          ...record,
+          capturedEvent: {
+            ...record.capturedEvent,
+            routing: { ...record.capturedEvent.routing, targetTopic: "some.other.topic.v1" },
+          },
+        };
+
+        const outputs = yield* service.processRecordToOutputs(mismatched);
+
+        expect(outputs.processedEvents).toEqual([]);
+
+        const dlqRow = yield* findDlqRowByCaptureId(captureId);
+        expect(dlqRow).toBeDefined();
+        expect(dlqRow?.failureClass).toBe("schema_rejected");
+        expect(dlqRow?.projectId).toBe(projectId);
+
+        expect(yield* findIdentityRow(distinctId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "publishes a reserved_event_name DLQ row for a reserved revenue event from an untrusted topic",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-reserved");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        const captureId = unique("capture-reserved");
+        const distinctId = unique("distinct-reserved");
+        track.capture(captureId);
+        track.distinct(distinctId);
+        // A reserved $purchase.* event riding the normal (untrusted) main topic.
+        const record = buildRecord({
+          captureId,
+          distinctId,
+          token,
+          event: "$purchase.completed",
+        });
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        expect(outputs.processedEvents).toEqual([]);
+
+        const dlqRow = yield* findDlqRowByCaptureId(captureId);
+        expect(dlqRow).toBeDefined();
+        expect(dlqRow?.failureClass).toBe("reserved_event_name");
+        expect(dlqRow?.failureMessage).toContain("$purchase.completed");
+        expect(dlqRow?.projectId).toBe(projectId);
+
+        expect(yield* findIdentityRow(distinctId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "allows a reserved revenue event when it arrives on the trusted source topic",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-trusted");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        const captureId = unique("capture-trusted");
+        const distinctId = unique("distinct-trusted");
+        track.capture(captureId);
+        track.distinct(distinctId);
+        const record = buildRecord({
+          captureId,
+          distinctId,
+          token,
+          event: "$purchase.completed",
+          sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+        });
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        // Trusted topic bypasses the reserved-name guard, so the event processes.
+        expect(outputs.processedEvents.length).toBe(1);
+        expect(outputs.processedEvents[0]!.event).toBe("$purchase.completed");
+        expect(yield* findDlqRowByCaptureId(captureId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "honours a Resolved identity claim on the trusted topic — passes identity through and writes NO person/identity rows",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-resolved");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        const captureId = unique("capture-resolved");
+        const distinctId = unique("distinct-resolved");
+        const personId = unique("person-resolved");
+        const clientEventId = unique("evt-resolved");
+        track.capture(captureId);
+        track.distinct(distinctId);
+
+        // A trusted revenue event carrying a pre-resolved identity claim — the
+        // shape `dispatchTrusted` produces. The distinctId is non-anonymous, so
+        // the NORMAL path would create a person + identity row; the Resolved
+        // branch must skip all of that (the "revenue writes no person rows"
+        // characterization).
+        const base = buildRecord({
+          captureId,
+          distinctId,
+          token,
+          event: "$purchase.completed",
+          sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+        });
+        const record: CapturedTransportRecord = {
+          ...base,
+          capturedEvent: {
+            ...base.capturedEvent,
+            clientEventId,
+            identityClaim: { _tag: "Resolved", distinctId, personId },
+            trustClass: "trusted-revenue",
+            routing: { ...base.capturedEvent.routing, skipEnrichment: true },
+          },
+        };
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        // The processed event carries the claimed identity verbatim, and the
+        // deterministic clientEventId becomes the event_id (processedEventId).
+        expect(outputs.processedEvents.length).toBe(1);
+        const processed = outputs.processedEvents[0]!;
+        expect(processed.event).toBe("$purchase.completed");
+        expect(processed.identity).toEqual({ distinctId, mode: "full", personId });
+        expect(processed.processedEventId).toBe(clientEventId);
+
+        // No person/identity wire events emitted...
+        expect(outputs.personEvents).toEqual([]);
+        expect(outputs.personIdentityEvents).toEqual([]);
+        // ...and no identity row written to the DB (revenue writes no person rows).
+        expect(yield* findIdentityRow(distinctId)).toBeUndefined();
+        expect(yield* findDlqRowByCaptureId(captureId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "resolves a trusted Resolved event by projectId even when its token has no api_key (synthetic server token)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        // Deliberately NO api key inserted: revenue projects without a public
+        // SDK key thread a synthetic `vh_server_revenue_*` token. The trusted
+        // Resolved branch must resolve the project by its (server-stamped)
+        // projectId rather than DLQ on the missing token.
+        const syntheticToken = `vh_server_revenue_${projectId}`;
+        const captureId = unique("capture-synthetic");
+        const distinctId = unique("distinct-synthetic");
+        const personId = unique("person-synthetic");
+        track.capture(captureId);
+        track.distinct(distinctId);
+
+        const base = buildRecord({
+          captureId,
+          distinctId,
+          token: syntheticToken,
+          event: "$subscription.renewed",
+          sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC,
+        });
+        const record: CapturedTransportRecord = {
+          ...base,
+          capturedEvent: {
+            ...base.capturedEvent,
+            clientEventId: unique("evt-synthetic"),
+            identityClaim: { _tag: "Resolved", distinctId, personId },
+            trustClass: "trusted-revenue",
+            routing: { ...base.capturedEvent.routing, skipEnrichment: true },
+          },
+        };
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        expect(outputs.processedEvents.length).toBe(1);
+        expect(outputs.processedEvents[0]!.organizationId).toBe(organizationId);
+        expect(outputs.processedEvents[0]!.identity.personId).toBe(personId);
+        expect(outputs.personEvents).toEqual([]);
+        expect(yield* findDlqRowByCaptureId(captureId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "ignores a Resolved claim on an UNTRUSTED topic (defence-in-depth) and resolves identity normally",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-forged");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        const captureId = unique("capture-forged");
+        const distinctId = unique("distinct-forged");
+        const forgedPersonId = unique("person-forged");
+        track.capture(captureId);
+        track.distinct(distinctId);
+
+        // A non-reserved event on the NORMAL (untrusted) topic carrying a forged
+        // Resolved claim. The processor must NOT honour the claim — it falls
+        // through to real identity resolution, creating its own person.
+        const base = buildRecord({ captureId, distinctId, token, event: "page_view" });
+        const record: CapturedTransportRecord = {
+          ...base,
+          capturedEvent: {
+            ...base.capturedEvent,
+            identityClaim: { _tag: "Resolved", distinctId, personId: forgedPersonId },
+          },
+        };
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        expect(outputs.processedEvents.length).toBe(1);
+        // Real resolution ran: a person mapping exists and its id is NOT the
+        // forged one from the ignored claim.
+        const identity = yield* findIdentityRow(distinctId);
+        expect(identity).toBeDefined();
+        expect(identity?.personId).not.toBe(forgedPersonId);
+        expect(outputs.processedEvents[0]!.identity.personId).toBe(identity?.personId);
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "promotes an anonymous identity to the target person on an $identify event",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-identify");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        const previousDistinctId = `vh:anon:${unique("anon")}`;
+        const distinctId = unique("identified");
+        const captureId = unique("capture-identify");
+        track.capture(captureId);
+        track.distinct(distinctId);
+        track.distinct(previousDistinctId);
+
+        const record = buildRecord({
+          captureId,
+          distinctId,
+          token,
+          event: "$identify",
+          properties: {
+            $set: { email: "person@voidhash.test" },
+            $previous_distinct_id: previousDistinctId,
+          },
+        });
+
+        const outputs = yield* service.processRecordToOutputs(record);
+
+        expect(outputs.processedEvents.length).toBe(1);
+        const processed = outputs.processedEvents[0]!;
+        expect(processed.event).toBe("$identify");
+        expect(processed.identity.distinctId).toBe(distinctId);
+        expect(processed.identity.mode).toBe("full");
+
+        // The identified distinct id is mapped to a real person.
+        const identity = yield* findIdentityRow(distinctId);
+        expect(identity).toBeDefined();
+        expect(identity?.personId).toBe(processed.identity.personId);
+
+        // The identify produced a person snapshot output for the target person.
+        expect(outputs.personEvents.some((event) => event.personId === identity?.personId)).toBe(
+          true,
+        );
+        expect(yield* findDlqRowByCaptureId(captureId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "serialises concurrent records that share the same (token, distinctId) identity key",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* EventProcessorService;
+
+        const token = unique("token-serial");
+        track.apiKey(yield* insertPublicApiKey(token));
+
+        // Same distinct id (and token) for both records → same identity key, so
+        // the scheduler must run their identity-resolution effects one at a
+        // time. A non-anonymous distinct id with shouldCreatePerson=true would
+        // race on the unique (project_id, distinct_id) identity index if the
+        // two effects overlapped; serialisation means both observe one person.
+        const distinctId = unique("distinct-serial");
+        track.distinct(distinctId);
+        const captureA = unique("capture-serial-a");
+        const captureB = unique("capture-serial-b");
+        track.capture(captureA);
+        track.capture(captureB);
+
+        const recordA = buildRecord({ captureId: captureA, distinctId, token });
+        const recordB = buildRecord({ captureId: captureB, distinctId, token });
+
+        const [outputsA, outputsB] = yield* Effect.all(
+          [service.processRecordToOutputs(recordA), service.processRecordToOutputs(recordB)],
+          { concurrency: 2 },
+        );
+
+        expect(outputsA.processedEvents.length).toBe(1);
+        expect(outputsB.processedEvents.length).toBe(1);
+
+        // Exactly one canonical person backs the shared distinct id.
+        const identity = yield* findIdentityRow(distinctId);
+        expect(identity).toBeDefined();
+        expect(outputsA.processedEvents[0]!.identity.personId).toBe(identity?.personId);
+        expect(outputsB.processedEvents[0]!.identity.personId).toBe(identity?.personId);
+
+        const db = yield* Db;
+        const identityRows = yield* db
+          .select({ id: personIdentities.id })
+          .from(personIdentities)
+          .where(
+            and(
+              eq(personIdentities.projectId, projectId),
+              eq(personIdentities.distinctId, distinctId),
+            ),
+          );
+        expect(identityRows.length).toBe(1);
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/analyticsIngest/EventProcessorService.test.ts b/packages/core/test/services/analyticsIngest/EventProcessorService.test.ts
new file mode 100644
index 000000000..3fdeef9dd
--- /dev/null
+++ b/packages/core/test/services/analyticsIngest/EventProcessorService.test.ts
@@ -0,0 +1,588 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+
+import type {
+  CapturedEventV1Type,
+  CapturedTransportRecord,
+  ProcessingEvent,
+  ProcessorProjectPolicy,
+  ResolvedProcessorProject,
+} from "../../../src/domain/analyticsIngest/AnalyticsIngest.ts";
+import type {
+  PersonIdentityEventV1,
+  PersonSnapshotEventV1,
+} from "../../../src/services/personIdentity/PersonIdentityService.ts";
+import {
+  attachProjectPolicy,
+  buildPersonIdentityCall,
+  buildProcessedEvent,
+  toProcessorPersonEvent,
+  toProcessorPersonIdentityEvents,
+} from "../../../src/services/analyticsIngest/EventProcessorService.ts";
+
+const PROJECT_ID = "prj_test";
+const ORG_ID = "org_test";
+const TOKEN = "tok_test";
+const SOURCE_TOPIC = "analytics.main";
+const EVENT_TS = "2026-01-01T00:00:00.000Z";
+
+/** Fresh captured-event builder — one object per test, no shared mutable state. */
+const capturedEvent = (overrides: Partial<CapturedEventV1Type> = {}): CapturedEventV1Type => ({
+  schemaVersion: 1,
+  captureId: "cap_1",
+  token: TOKEN,
+  organizationId: ORG_ID,
+  projectId: PROJECT_ID,
+  event: "page_view",
+  distinctId: "user_1",
+  eventTimestamp: EVENT_TS,
+  receivedAt: EVENT_TS,
+  properties: {},
+  context: {},
+  rawPayload: {},
+  request: { requestId: "req_1" },
+  routing: {
+    routeClass: "main",
+    targetTopic: SOURCE_TOPIC,
+    isHistorical: false,
+    skipEnrichment: false,
+  },
+  ...overrides,
+});
+
+/** Fresh transport-record builder wrapping a captured event. */
+const transportRecord = (
+  overrides: Partial<CapturedTransportRecord> = {},
+): CapturedTransportRecord => ({
+  capturedEvent: overrides.capturedEvent ?? capturedEvent(),
+  headers: {},
+  lane: "main",
+  rawValue: JSON.stringify(overrides.capturedEvent ?? capturedEvent()),
+  sourceOffset: "off_1",
+  sourcePartition: 0,
+  sourceTopic: SOURCE_TOPIC,
+  ...overrides,
+});
+
+/** Fresh processor-project-policy builder; permissive by default. */
+const policy = (overrides: Partial<ProcessorProjectPolicy> = {}): ProcessorProjectPolicy => ({
+  processorAllowHistorical: true,
+  processorAllowOverflow: true,
+  processorEnabled: true,
+  processorHistoricalMinAgeHours: 24,
+  processorPersonProcessingEnabled: true,
+  processorSchemaMode: "lenient",
+  ...overrides,
+});
+
+/** Fresh resolved-project builder matching the default captured-event projectId. */
+const resolvedProject = (
+  overrides: Partial<ResolvedProcessorProject> = {},
+): ResolvedProcessorProject => ({
+  organizationId: ORG_ID,
+  projectId: PROJECT_ID,
+  policy: policy(overrides.policy),
+  ...overrides,
+});
+
+/** Fresh processing-event builder — drives buildPersonIdentityCall. */
+const processingEvent = (overrides: Partial<ProcessingEvent> = {}): ProcessingEvent => ({
+  capturedEvent: overrides.capturedEvent ?? capturedEvent(),
+  headers: {},
+  identityKey: `${TOKEN}:user_1`,
+  lane: "main",
+  projectPolicy: policy(overrides.projectPolicy),
+  rawValue: "{}",
+  sourceOffset: "off_1",
+  sourcePartition: 0,
+  sourceTopic: SOURCE_TOPIC,
+  ...overrides,
+});
+
+const NOW = new Date("2026-01-01T00:00:00.000Z");
+
+describe("attachProjectPolicy", () => {
+  it("returns ok:true with a ProcessingEvent when every validation passes", () => {
+    const record = transportRecord();
+    const result = attachProjectPolicy({ now: NOW, record, resolvedProject: resolvedProject() });
+
+    expect(result.ok).toBe(true);
+    if (result.ok) {
+      expect(result.value.capturedEvent).toBe(record.capturedEvent);
+      expect(result.value.lane).toBe("main");
+      expect(result.value.sourceTopic).toBe(SOURCE_TOPIC);
+      expect(result.value.projectPolicy.processorEnabled).toBe(true);
+    }
+  });
+
+  it("sets identityKey as `${token}:${distinctId}` on the success value", () => {
+    const record = transportRecord({
+      capturedEvent: capturedEvent({ distinctId: "user_99", token: "tok_abc" }),
+    });
+    const result = attachProjectPolicy({ now: NOW, record, resolvedProject: resolvedProject() });
+
+    expect(result.ok).toBe(true);
+    if (result.ok) {
+      expect(result.value.identityKey).toBe("tok_abc:user_99");
+    }
+  });
+
+  it("rejects with a project_not_found DLQ event when the resolved project id does not match", () => {
+    const record = transportRecord();
+    const result = attachProjectPolicy({
+      now: NOW,
+      record,
+      resolvedProject: resolvedProject({ projectId: "prj_other" }),
+    });
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.value.failureClass).toBe("project_not_found");
+      expect(result.value.projectId).toBe(PROJECT_ID);
+    }
+  });
+
+  it("rejects with a policy_rejected DLQ event when the processor is disabled for the project", () => {
+    const record = transportRecord();
+    const result = attachProjectPolicy({
+      now: NOW,
+      record,
+      resolvedProject: resolvedProject({ policy: policy({ processorEnabled: false }) }),
+    });
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.value.failureClass).toBe("policy_rejected");
+      expect(result.value.failureMessage).toContain("disabled");
+    }
+  });
+
+  it("rejects the overflow lane when processorAllowOverflow is false", () => {
+    const record = transportRecord({ lane: "overflow" });
+    const result = attachProjectPolicy({
+      now: NOW,
+      record,
+      resolvedProject: resolvedProject({ policy: policy({ processorAllowOverflow: false }) }),
+    });
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.value.failureClass).toBe("policy_rejected");
+      expect(result.value.failureMessage).toContain("overflow");
+    }
+  });
+
+  it("allows the overflow lane when processorAllowOverflow is true", () => {
+    const record = transportRecord({ lane: "overflow" });
+    const result = attachProjectPolicy({
+      now: NOW,
+      record,
+      resolvedProject: resolvedProject({ policy: policy({ processorAllowOverflow: true }) }),
+    });
+
+    expect(result.ok).toBe(true);
+  });
+
+  it("rejects the historical lane when processorAllowHistorical is false", () => {
+    // A well-formed historical record requires isHistorical=true and an event old
+    // enough to clear the min-age gate, so the lane check is what trips first.
+    const oldTimestamp = new Date(NOW.getTime() - 48 * 60 * 60 * 1000).toISOString();
+    const record = transportRecord({
+      capturedEvent: capturedEvent({
+        eventTimestamp: oldTimestamp,
+        routing: {
+          routeClass: "historical",
+          targetTopic: SOURCE_TOPIC,
+          isHistorical: true,
+          skipEnrichment: false,
+        },
+      }),
+      lane: "historical",
+    });
+    const result = attachProjectPolicy({
+      now: NOW,
+      record,
+      resolvedProject: resolvedProject({ policy: policy({ processorAllowHistorical: false }) }),
+    });
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.value.failureClass).toBe("policy_rejected");
+      expect(result.value.failureMessage).toContain("historical");
+    }
+  });
+
+  it("rejects with a schema_rejected DLQ event when validateBuiltInProcessorRules fails", () => {
+    // routing.targetTopic mismatching the source topic is the first built-in rule.
+    const record = transportRecord({
+      capturedEvent: capturedEvent({
+        routing: {
+          routeClass: "main",
+          targetTopic: "some.other.topic",
+          isHistorical: false,
+          skipEnrichment: false,
+        },
+      }),
+    });
+    const result = attachProjectPolicy({ now: NOW, record, resolvedProject: resolvedProject() });
+
+    expect(result.ok).toBe(false);
+    if (!result.ok) {
+      expect(result.value.failureClass).toBe("schema_rejected");
+    }
+  });
+});
+
+describe("buildPersonIdentityCall", () => {
+  it("returns kind:'identify' when the event is $identify", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          event: "$identify",
+          distinctId: "identified_user",
+          properties: { $previous_distinct_id: "anon_123" },
+        }),
+      }),
+    );
+
+    expect(call.kind).toBe("identify");
+    if (call.kind === "identify") {
+      expect(call.input.distinctId).toBe("identified_user");
+      expect(call.input.projectId).toBe(PROJECT_ID);
+      expect(call.input.eventTimestamp).toEqual(new Date(EVENT_TS));
+    }
+  });
+
+  it("includes previousDistinctId from $previous_distinct_id for $identify", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          event: "$identify",
+          properties: { $previous_distinct_id: "anon_prev" },
+        }),
+      }),
+    );
+
+    expect(call.kind).toBe("identify");
+    if (call.kind === "identify") {
+      expect(call.input.previousDistinctId).toBe("anon_prev");
+    }
+  });
+
+  it("throws when $identify is missing $previous_distinct_id", () => {
+    expect(() =>
+      buildPersonIdentityCall(
+        processingEvent({
+          capturedEvent: capturedEvent({ event: "$identify", properties: {} }),
+        }),
+      ),
+    ).toThrow("$previous_distinct_id");
+  });
+
+  it("returns kind:'resolve' for non-$identify events", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({ capturedEvent: capturedEvent({ event: "page_view" }) }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.distinctId).toBe("user_1");
+      expect(call.input.projectId).toBe(PROJECT_ID);
+    }
+  });
+
+  it("parses name/email and set/setOnce attributes from $set and $set_once", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          properties: {
+            $set: { name: "Ada", plan: "pro" },
+            $set_once: { email: "ada@example.com", signup_source: "web" },
+          },
+        }),
+      }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.name).toBe("Ada");
+      expect(call.input.email).toBe("ada@example.com");
+      expect(call.input.setAttributes).toEqual({ plan: "pro" });
+      expect(call.input.setOnceAttributes).toEqual({ signup_source: "web" });
+    }
+  });
+
+  it("excludes name and email from setAttributes and setOnceAttributes", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          properties: {
+            $set: { name: "Ada", email: "a@b.co", plan: "pro" },
+            $set_once: { name: "Once", email: "x@y.co", region: "eu" },
+          },
+        }),
+      }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.setAttributes).not.toHaveProperty("name");
+      expect(call.input.setAttributes).not.toHaveProperty("email");
+      expect(call.input.setOnceAttributes).not.toHaveProperty("name");
+      expect(call.input.setOnceAttributes).not.toHaveProperty("email");
+      expect(call.input.setAttributes).toEqual({ plan: "pro" });
+      expect(call.input.setOnceAttributes).toEqual({ region: "eu" });
+    }
+  });
+
+  it("reads traits from a nested `properties.properties` envelope", () => {
+    // extractInnerProperties unwraps one level when properties.properties is a plain object.
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          properties: { properties: { $set: { name: "Inner" } } },
+        }),
+      }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.name).toBe("Inner");
+    }
+  });
+
+  it("defaults shouldCreatePerson to false for an anonymous distinct id", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({ distinctId: `${ANONYMOUS_USER_ID_PREFIX}abc` }),
+      }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.shouldCreatePerson).toBe(false);
+    }
+  });
+
+  it("defaults shouldCreatePerson to true for a non-anonymous distinct id", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({ capturedEvent: capturedEvent({ distinctId: "real_user" }) }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.shouldCreatePerson).toBe(true);
+    }
+  });
+
+  it("honors an explicit $process_person_profile over the distinct-id default", () => {
+    // Anonymous id would default to false, but the explicit flag wins.
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          distinctId: `${ANONYMOUS_USER_ID_PREFIX}abc`,
+          properties: { $process_person_profile: true },
+        }),
+      }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.shouldCreatePerson).toBe(true);
+    }
+  });
+
+  it("empties enrichment attributes when routing.skipEnrichment is true", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          properties: { $set: { plan: "pro" }, $set_once: { region: "eu" } },
+          routing: {
+            routeClass: "main",
+            targetTopic: SOURCE_TOPIC,
+            isHistorical: false,
+            skipEnrichment: true,
+          },
+        }),
+      }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.setAttributes).toEqual({});
+      expect(call.input.setOnceAttributes).toEqual({});
+    }
+  });
+
+  it("empties enrichment attributes when processorPersonProcessingEnabled is false", () => {
+    const call = buildPersonIdentityCall(
+      processingEvent({
+        capturedEvent: capturedEvent({
+          properties: { $set: { plan: "pro" }, $set_once: { region: "eu" } },
+        }),
+        projectPolicy: policy({ processorPersonProcessingEnabled: false }),
+      }),
+    );
+
+    expect(call.kind).toBe("resolve");
+    if (call.kind === "resolve") {
+      expect(call.input.setAttributes).toEqual({});
+      expect(call.input.setOnceAttributes).toEqual({});
+    }
+  });
+
+  it("throws when $set is present but not an object (parsePersonTraits failure)", () => {
+    expect(() =>
+      buildPersonIdentityCall(
+        processingEvent({
+          capturedEvent: capturedEvent({ properties: { $set: "not-an-object" } }),
+        }),
+      ),
+    ).toThrow("$set must be an object");
+  });
+});
+
+describe("toProcessorPersonEvent", () => {
+  /** Fresh person-snapshot builder. */
+  const snapshot = (overrides: Partial<PersonSnapshotEventV1> = {}): PersonSnapshotEventV1 => ({
+    changedAt: EVENT_TS,
+    personId: "person_1",
+    isArchived: false,
+    projectId: PROJECT_ID,
+    schemaVersion: 1,
+    traits: { plan: "pro" },
+    version: 3,
+    ...overrides,
+  });
+
+  it("maps all snapshot fields, including the optional ones when present", () => {
+    const event = toProcessorPersonEvent(
+      snapshot({
+        email: "a@b.co",
+        mergedIntoPersonId: "person_2",
+        name: "Ada",
+        primaryDistinctId: "user_1",
+      }),
+    );
+
+    expect(event).toEqual({
+      changedAt: EVENT_TS,
+      personId: "person_1",
+      email: "a@b.co",
+      isArchived: false,
+      mergedIntoPersonId: "person_2",
+      name: "Ada",
+      primaryDistinctId: "user_1",
+      projectId: PROJECT_ID,
+      schemaVersion: 1,
+      traits: { plan: "pro" },
+      version: 3,
+    });
+  });
+
+  it("omits email/mergedIntoPersonId/name/primaryDistinctId when absent", () => {
+    const event = toProcessorPersonEvent(snapshot());
+
+    expect(event).not.toHaveProperty("email");
+    expect(event).not.toHaveProperty("mergedIntoPersonId");
+    expect(event).not.toHaveProperty("name");
+    expect(event).not.toHaveProperty("primaryDistinctId");
+    expect(event.personId).toBe("person_1");
+    expect(event.schemaVersion).toBe(1);
+  });
+});
+
+describe("toProcessorPersonIdentityEvents", () => {
+  /** Fresh mapping-event builder. */
+  const mappingEvent = (overrides: Partial<PersonIdentityEventV1> = {}): PersonIdentityEventV1 => ({
+    changedAt: EVENT_TS,
+    personId: "person_1",
+    distinctId: "user_1",
+    isDeleted: false,
+    kind: 2,
+    projectId: PROJECT_ID,
+    schemaVersion: 1,
+    version: 2,
+    ...overrides,
+  });
+
+  const identity = (distinctId: string) => ({
+    distinctId,
+    mode: "full" as const,
+    personId: "person_1",
+  });
+
+  it("maps each mappingEvent to a ProcessorPersonIdentityEventV1", () => {
+    const events = toProcessorPersonIdentityEvents({
+      identity: identity("user_1"),
+      mappingEvents: [mappingEvent(), mappingEvent({ distinctId: "user_1", version: 5 })],
+    });
+
+    expect(events).toHaveLength(2);
+    expect(events[0]?.personId).toBe("person_1");
+    expect(events[0]?.projectId).toBe(PROJECT_ID);
+    expect(events[1]?.version).toBe(5);
+  });
+
+  it("returns an empty array when there are no mapping events", () => {
+    const events = toProcessorPersonIdentityEvents({
+      identity: identity("user_1"),
+      mappingEvents: [],
+    });
+
+    expect(events).toEqual([]);
+  });
+
+  it("omits previousDistinctId when mappingEvent.distinctId equals the identity distinctId", () => {
+    const events = toProcessorPersonIdentityEvents({
+      identity: identity("user_1"),
+      mappingEvents: [mappingEvent({ distinctId: "user_1" })],
+    });
+
+    expect(events[0]).not.toHaveProperty("previousDistinctId");
+    expect(events[0]?.distinctId).toBe("user_1");
+  });
+
+  it("sets previousDistinctId and rewrites distinctId when the mapping distinctId differs", () => {
+    // When the mapping points at a different source id, the source becomes
+    // previousDistinctId and the row's distinctId is the identity's canonical id.
+    const events = toProcessorPersonIdentityEvents({
+      identity: identity("canonical_user"),
+      mappingEvents: [mappingEvent({ distinctId: "anon_source" })],
+    });
+
+    expect(events[0]?.previousDistinctId).toBe("anon_source");
+    expect(events[0]?.distinctId).toBe("canonical_user");
+  });
+});
+
+describe("buildProcessedEvent", () => {
+  it("uses captureId as the deterministic processed event id when no client uuid", () => {
+    const event = capturedEvent();
+    const processed = buildProcessedEvent({
+      capturedEvent: event,
+      identity: { distinctId: event.distinctId, mode: "personless" },
+      lane: "main",
+      sourceOffset: "0",
+      sourcePartition: 0,
+      sourceTopic: event.routing.targetTopic,
+    });
+
+    expect(processed.processedEventId).toBe(event.captureId);
+  });
+
+  it("prefers the SDK clientEventId over captureId for the processed event id", () => {
+    const event = capturedEvent({ clientEventId: "client_uuid" });
+    const processed = buildProcessedEvent({
+      capturedEvent: event,
+      identity: { distinctId: event.distinctId, mode: "personless" },
+      lane: "main",
+      sourceOffset: "0",
+      sourcePartition: 0,
+      sourceTopic: event.routing.targetTopic,
+    });
+
+    expect(processed.processedEventId).toBe("client_uuid");
+  });
+});
diff --git a/packages/core/test/services/apiKeys/ApiKeyService.integration.test.ts b/packages/core/test/services/apiKeys/ApiKeyService.integration.test.ts
new file mode 100644
index 000000000..24478d1cf
--- /dev/null
+++ b/packages/core/test/services/apiKeys/ApiKeyService.integration.test.ts
@@ -0,0 +1,755 @@
+/**
+ * Integration tests for {@link ApiKeyService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * The service manages three kinds of keys, each with a distinct contract that
+ * these tests exercise end-to-end and verify by reading the persisted row back:
+ *  - **Secret keys** (`apiKeys`, `isPublic = false`) — project-scoped, hashed at
+ *    rest, mutated behind a `project:all` permission check, audit-logged.
+ *  - **Publishable keys** (`apiKeys`, `isPublic = true`) — project-scoped,
+ *    stored plain-text. There is no public mint method, so the
+ *    `validatePublishableKey` test seeds one with a raw insert.
+ *  - **User api keys** (`apikey`) — user-scoped, hashed at rest, gated on a user
+ *    session rather than a project permission, and NOT audit-logged.
+ *
+ * The `validate*` methods are auth-establishing (run in request middleware
+ * before any session exists), so their tests assert the no-session path even
+ * though the harness wraps every effect in a default session.
+ *
+ * Conventions (mirroring `PerkService.integration.test.ts`):
+ *  - Every test shares the one seeded fixture project ({@link CoreTestFixture})
+ *    but cleans up after itself. {@link withApiKeyCleanup} deletes the `apiKeys`
+ *    rows (and their append-only `audit_log` rows) it created on exit;
+ *    {@link withUserApiKeyCleanup} deletes the `apikey` rows it created (user
+ *    keys are not audit-logged). The global teardown sweep is only a backstop.
+ *  - Names are unique per call so a leftover row from a crashed run can't
+ *    collide, and assertions stay membership-based (never exact counts).
+ *  - Permission tests re-authenticate just the call under test via
+ *    {@link asUnauthorized}; the inner provision shadows the harness default.
+ *  - Typed failures are asserted with `Effect.flip` then narrowed with
+ *    `instanceof`, always paired with a DB-state assertion on the failure path.
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { ApiKeyService } from "@voidhash/core/services";
+import { ApiKeyNotFoundError } from "@voidhash/core/domain/apiKey/ApiKey";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  apiKeys,
+  apikey,
+  auditLogs,
+  eq,
+  inArray,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+const userId = CoreTestFixture.userId;
+
+/** Monotonic counter so names stay unique even within the same millisecond. */
+let nameSeq = 0;
+const uniqueName = (label: string) => `it-apikey-${label}-${Date.now()}-${nameSeq++}`;
+
+/** Read a project-scoped api-key row (`apiKeys` table) straight from the DB. */
+const findApiKeyRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.apiKeys.findFirst({ where: { id } });
+  });
+
+/** Read a user-scoped api-key row (`apikey` table) straight from the DB. */
+const findUserApiKeyRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.apikey.findFirst({ where: { id } });
+  });
+
+/** All audit-log rows recorded for a given api-key entity. */
+const findApiKeyAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(eq(auditLogs.entityType, AuditLogEntityType.ApiKey), eq(auditLogs.entityId, entityId)),
+      );
+  });
+
+/**
+ * Delete the given project-scoped api keys and their audit rows. Audit entries
+ * are append-only and survive a `deleteSecretKey`, so they are cleared by entity
+ * id too. Each delete is `ignore`d so a missing row never fails the finalizer.
+ */
+const cleanupCreatedApiKeys = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db
+      .delete(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.ApiKey),
+          inArray(auditLogs.entityId, targets),
+        ),
+      )
+      .pipe(Effect.ignore);
+    yield* db.delete(apiKeys).where(inArray(apiKeys.id, targets)).pipe(Effect.ignore);
+  });
+
+/** Delete the given user-scoped api keys (`apikey`). User keys are not audit-logged. */
+const cleanupCreatedUserApiKeys = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db.delete(apikey).where(inArray(apikey.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every project-scoped api key it creates is removed
+ * afterward, regardless of how the test exits. Pass each created key id to the
+ * `track` callback; cleanup reads the collected ids lazily at finalization via
+ * `Effect.ensuring`.
+ */
+const withApiKeyCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedApiKeys(createdIds)));
+};
+
+/** As {@link withApiKeyCleanup} but for user-scoped keys in the `apikey` table. */
+const withUserApiKeyCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedUserApiKeys(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("ApiKeyService.createSecretKey", () => {
+  test(
+    "persists a hashed secret key, records a created audit entry, and returns the raw key once",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const name = uniqueName("create");
+
+        const created = yield* apiKeyService.createSecretKey({ name, projectId });
+        track(created.id);
+
+        // The raw key is returned exactly once and is the plain-text secret.
+        expect(typeof created.rawKey).toBe("string");
+        expect(created.rawKey.startsWith("vh_sk_")).toBe(true);
+        expect(created.isPublic).toBe(false);
+
+        const row = yield* findApiKeyRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.name).toBe(name);
+        expect(row?.projectId).toBe(projectId);
+        expect(row?.isPublic).toBe(false);
+        expect(row?.prefix).toBe("vh_sk_");
+        // Stored key is the SHA-256 hash, never the raw key.
+        expect(row?.key).not.toBe(created.rawKey);
+        // `end` mirrors the last 4 chars of the raw key for UI display.
+        expect(row?.end).toBe(created.rawKey.slice(-4));
+
+        const auditEntries = yield* findApiKeyAuditEntries(created.id);
+        const createdEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.ApiKey);
+        expect(createdEntry?.actorUserId).toBe(userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({ name });
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and writes nothing",
+    // No cleanup wrapper: a forbidden create writes no row.
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const name = uniqueName("create-forbidden");
+
+      const error = yield* Effect.flip(
+        asUnauthorized(apiKeyService.createSecretKey({ name, projectId })),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      // The key is identified only by `name`; confirm no row was persisted.
+      const db = yield* Db;
+      const rows = yield* db
+        .select({ id: apiKeys.id })
+        .from(apiKeys)
+        .where(and(eq(apiKeys.projectId, projectId), eq(apiKeys.name, name)));
+      expect(rows.length).toBe(0);
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.rotateSecretKey", () => {
+  test(
+    "replaces the stored hash, records an updated audit entry, and returns a new raw key",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const name = uniqueName("rotate");
+
+        const created = yield* apiKeyService.createSecretKey({ name, projectId });
+        track(created.id);
+        const beforeRow = yield* findApiKeyRow(created.id);
+        expect(beforeRow).toBeDefined();
+
+        const rotated = yield* apiKeyService.rotateSecretKey({ secretKeyId: created.id });
+        expect(rotated.rawKey).not.toBe(created.rawKey);
+        expect(rotated.rawKey.startsWith("vh_sk_")).toBe(true);
+
+        const afterRow = yield* findApiKeyRow(created.id);
+        expect(afterRow).toBeDefined();
+        // Same row id, but the stored hash has been replaced.
+        expect(afterRow?.key).not.toBe(beforeRow?.key);
+        expect(afterRow?.key).not.toBe(rotated.rawKey);
+        expect(afterRow?.end).toBe(rotated.rawKey.slice(-4));
+        expect(afterRow?.name).toBe(name);
+
+        const auditEntries = yield* findApiKeyAuditEntries(created.id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.actorUserId).toBe(userId);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ApiKeyNotFoundError for an unknown id and writes no row",
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const missingId = `apiSecretKey_missing_${Date.now()}`;
+
+      const error = yield* Effect.flip(apiKeyService.rotateSecretKey({ secretKeyId: missingId }));
+      expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+      if (error instanceof ApiKeyNotFoundError) {
+        expect(error.apiKeyId).toBe(missingId);
+      }
+
+      const row = yield* findApiKeyRow(missingId);
+      expect(row).toBeUndefined();
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the key unchanged",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const created = yield* apiKeyService.createSecretKey({
+          name: uniqueName("rotate-forbidden"),
+          projectId,
+        });
+        track(created.id);
+        const beforeRow = yield* findApiKeyRow(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(apiKeyService.rotateSecretKey({ secretKeyId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const afterRow = yield* findApiKeyRow(created.id);
+        expect(afterRow?.key).toBe(beforeRow?.key);
+        expect(afterRow?.end).toBe(beforeRow?.end);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.deleteSecretKey", () => {
+  test(
+    "removes the key row and records a deleted audit entry",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const created = yield* apiKeyService.createSecretKey({
+          name: uniqueName("delete"),
+          projectId,
+        });
+        track(created.id);
+
+        yield* apiKeyService.deleteSecretKey({ secretKeyId: created.id });
+
+        const row = yield* findApiKeyRow(created.id);
+        expect(row).toBeUndefined();
+
+        // Append-only audit log keeps both the created and deleted entries.
+        const auditEntries = yield* findApiKeyAuditEntries(created.id);
+        const deletedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.actorUserId).toBe(userId);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ApiKeyNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const missingId = `apiSecretKey_missing_${Date.now()}`;
+
+      const error = yield* Effect.flip(apiKeyService.deleteSecretKey({ secretKeyId: missingId }));
+      expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the key",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const created = yield* apiKeyService.createSecretKey({
+          name: uniqueName("delete-forbidden"),
+          projectId,
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(apiKeyService.deleteSecretKey({ secretKeyId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findApiKeyRow(created.id);
+        expect(row).toBeDefined();
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.getApiKeys", () => {
+  test(
+    "lists keys created under the project",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const nameA = uniqueName("list-a");
+        const nameB = uniqueName("list-b");
+
+        const a = yield* apiKeyService.createSecretKey({ name: nameA, projectId });
+        track(a.id);
+        const b = yield* apiKeyService.createSecretKey({ name: nameB, projectId });
+        track(b.id);
+
+        const list = yield* apiKeyService.getApiKeys(projectId);
+        expect(list.some((key) => key.id === a.id && key.name === nameA)).toBe(true);
+        expect(list.some((key) => key.id === b.id && key.name === nameB)).toBe(true);
+        // Every returned key belongs to the queried project.
+        expect(list.every((key) => key.projectId === projectId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const error = yield* Effect.flip(asUnauthorized(apiKeyService.getApiKeys(projectId)));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.getApiKeyById", () => {
+  test(
+    "returns the matching key",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const name = uniqueName("by-id");
+        const created = yield* apiKeyService.createSecretKey({ name, projectId });
+        track(created.id);
+
+        const key = yield* apiKeyService.getApiKeyById(created.id);
+        expect(key.id).toBe(created.id);
+        expect(key.name).toBe(name);
+        expect(key.projectId).toBe(projectId);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ApiKeyNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const missingId = `apiSecretKey_missing_${Date.now()}`;
+      const error = yield* Effect.flip(apiKeyService.getApiKeyById(missingId));
+      expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+      if (error instanceof ApiKeyNotFoundError) {
+        expect(error.apiKeyId).toBe(missingId);
+      }
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids access to a key the caller is not authorized for",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const created = yield* apiKeyService.createSecretKey({
+          name: uniqueName("by-id-forbidden"),
+          projectId,
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(asUnauthorized(apiKeyService.getApiKeyById(created.id)));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.createUserApiKey", () => {
+  test(
+    "persists a hashed user key for the session user and returns the raw key once",
+    withUserApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const name = uniqueName("user-create");
+        const prefix = "vh_cli_";
+
+        const created = yield* apiKeyService.createUserApiKey({ name, prefix });
+        track(created.id);
+
+        expect(created.rawKey.startsWith(prefix)).toBe(true);
+        expect(created.name).toBe(name);
+        expect(created.prefix).toBe(prefix);
+
+        const row = yield* findUserApiKeyRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.userId).toBe(userId);
+        expect(row?.name).toBe(name);
+        expect(row?.prefix).toBe(prefix);
+        // Stored key is hashed, not the raw key.
+        expect(row?.key).not.toBe(created.rawKey);
+        expect(row?.end).toBe(created.rawKey.slice(-4));
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  vitestTest.todo(
+    "createUserApiKey: fails with ApiKeyServiceError when no user session — a secret-key/publishable-key session has user: null, but the harness 'test' constrains R to harness services only and AuthSession is always provided via CoreAuthSession.authenticate(). To exercise the no-user branch we would re-authenticate the wrapped call with a SecretKeySession (user: null); deferred because asserting the catch-all ApiKeyServiceError adds little over the user-session happy path already covered, and a SecretKeySession with empty projects is the closest analogue of 'no user'.",
+  );
+});
+
+describe("ApiKeyService.listUserApiKeys", () => {
+  test(
+    "returns the session user's own keys",
+    withUserApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const nameA = uniqueName("user-list-a");
+        const nameB = uniqueName("user-list-b");
+
+        const a = yield* apiKeyService.createUserApiKey({ name: nameA, prefix: "vh_cli_" });
+        track(a.id);
+        const b = yield* apiKeyService.createUserApiKey({ name: nameB, prefix: "vh_cli_" });
+        track(b.id);
+
+        const list = yield* apiKeyService.listUserApiKeys();
+        expect(list.some((key) => key.id === a.id && key.name === nameA)).toBe(true);
+        expect(list.some((key) => key.id === b.id && key.name === nameB)).toBe(true);
+        // Every returned key is owned by the session user.
+        expect(list.every((key) => key.userId === userId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.revokeUserApiKey", () => {
+  test(
+    "deletes the session user's own key",
+    withUserApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const created = yield* apiKeyService.createUserApiKey({
+          name: uniqueName("user-revoke"),
+          prefix: "vh_cli_",
+        });
+        track(created.id);
+
+        yield* apiKeyService.revokeUserApiKey({ userApiKeyId: created.id });
+
+        const row = yield* findUserApiKeyRow(created.id);
+        expect(row).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ApiKeyNotFoundError when the key belongs to another user and retains the row",
+    withUserApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const db = yield* Db;
+
+        // Seed a user key owned by a different principal (the fixture org owner
+        // is the only seeded user, so use a synthetic id that exists in `user`
+        // by reusing the fixture user is not enough — instead insert a row whose
+        // userId differs from the session user). The FK requires a real user, so
+        // we cannot reference a non-existent user; instead, create a key as the
+        // session user, then re-point its userId via raw update to simulate
+        // foreign ownership for the revoke guard.
+        const created = yield* apiKeyService.createUserApiKey({
+          name: uniqueName("user-revoke-foreign"),
+          prefix: "vh_cli_",
+        });
+        track(created.id);
+
+        // The revoke guard rejects when `existing.userId !== session.user.id`.
+        // Re-authenticate the revoke call as a session user with a different id
+        // so the owned-by-someone-else branch is taken without breaking the FK.
+        const otherUserSession = (): UserSession => ({
+          ...sessionWithoutProjectAccess(),
+          user: {
+            ...sessionWithoutProjectAccess().user,
+            id: "it_user_other",
+          },
+        });
+
+        const error = yield* Effect.flip(
+          apiKeyService
+            .revokeUserApiKey({ userApiKeyId: created.id })
+            .pipe(CoreAuthSession.authenticate(otherUserSession())),
+        );
+        expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+
+        // The row owned by the real session user is untouched.
+        const row = yield* db.query.apikey.findFirst({ where: { id: created.id } });
+        expect(row).toBeDefined();
+        expect(row?.userId).toBe(userId);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.validateUserApiKey", () => {
+  test(
+    "hashes the raw key, finds the enabled record, and returns it with the user relation",
+    withUserApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const created = yield* apiKeyService.createUserApiKey({
+          name: uniqueName("user-validate"),
+          prefix: "vh_cli_",
+        });
+        track(created.id);
+
+        const record = yield* apiKeyService.validateUserApiKey(created.rawKey);
+        expect(record.id).toBe(created.id);
+        expect(record.userId).toBe(userId);
+        // The user relation is eagerly loaded for the auth middleware.
+        expect(record.user.id).toBe(userId);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a disabled record with ApiKeyNotFoundError",
+    withUserApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const db = yield* Db;
+        const created = yield* apiKeyService.createUserApiKey({
+          name: uniqueName("user-validate-disabled"),
+          prefix: "vh_cli_",
+        });
+        track(created.id);
+
+        // Flip the record to disabled directly in storage.
+        yield* db.update(apikey).set({ enabled: false }).where(eq(apikey.id, created.id));
+
+        const error = yield* Effect.flip(apiKeyService.validateUserApiKey(created.rawKey));
+        expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+        // The raw (secret-equivalent) key must never be echoed back in the error.
+        if (error instanceof ApiKeyNotFoundError) {
+          expect(error.apiKeyId).toBeUndefined();
+          expect(error.apiKeyId).not.toBe(created.rawKey);
+        }
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects an expired record with ApiKeyNotFoundError",
+    withUserApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const db = yield* Db;
+        const created = yield* apiKeyService.createUserApiKey({
+          name: uniqueName("user-validate-expired"),
+          prefix: "vh_cli_",
+        });
+        track(created.id);
+
+        // Set an expiry in the past so `isExpired` rejects the record.
+        yield* db
+          .update(apikey)
+          .set({ expiresAt: new Date(Date.now() - 60_000) })
+          .where(eq(apikey.id, created.id));
+
+        const error = yield* Effect.flip(apiKeyService.validateUserApiKey(created.rawKey));
+        expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+        // The raw (secret-equivalent) key must never be echoed back in the error.
+        if (error instanceof ApiKeyNotFoundError) {
+          expect(error.apiKeyId).toBeUndefined();
+          expect(error.apiKeyId).not.toBe(created.rawKey);
+        }
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ApiKeyNotFoundError for an unknown raw key (no auth session required)",
+    // Auth-establishing path: no AuthSession is read. The harness still wraps a
+    // default session, but the method never touches it.
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const rawKey = `vh_cli_unknown_${Date.now()}`;
+      const error = yield* Effect.flip(apiKeyService.validateUserApiKey(rawKey));
+      expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+      // The raw (secret-equivalent) key must never be echoed back in the error.
+      if (error instanceof ApiKeyNotFoundError) {
+        expect(error.apiKeyId).toBeUndefined();
+        expect(error.apiKeyId).not.toBe(rawKey);
+      }
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.validateSecretKey", () => {
+  test(
+    "hashes the raw key, finds the isPublic=false record, and loads the project relation",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const created = yield* apiKeyService.createSecretKey({
+          name: uniqueName("secret-validate"),
+          projectId,
+        });
+        track(created.id);
+
+        const record = yield* apiKeyService.validateSecretKey(created.rawKey);
+        expect(record.id).toBe(created.id);
+        expect(record.isPublic).toBe(false);
+        expect(record.project.id).toBe(projectId);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ApiKeyNotFoundError for an unknown raw key (no auth session required)",
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const rawKey = `vh_sk_unknown_${Date.now()}`;
+      const error = yield* Effect.flip(apiKeyService.validateSecretKey(rawKey));
+      expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+      // The raw (secret-equivalent) key must never be echoed back in the error.
+      if (error instanceof ApiKeyNotFoundError) {
+        expect(error.apiKeyId).toBeUndefined();
+        expect(error.apiKeyId).not.toBe(rawKey);
+      }
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ApiKeyService.validatePublishableKey", () => {
+  test(
+    "looks up the plain-text isPublic=true record and loads the project relation",
+    withApiKeyCleanup((track) =>
+      Effect.gen(function* () {
+        const apiKeyService = yield* ApiKeyService;
+        const db = yield* Db;
+
+        // There is no public mint method for publishable keys, so seed one
+        // directly. Publishable keys are stored plain-text (not hashed), so the
+        // raw value IS the stored `key`.
+        const id = `apiPublishableKey_${Date.now()}_${nameSeq++}`;
+        const rawKey = `vh_pk_${id}`;
+        yield* db.insert(apiKeys).values({
+          id,
+          projectId,
+          name: uniqueName("publishable-validate"),
+          key: rawKey,
+          end: rawKey.slice(-4),
+          prefix: "vh_pk_",
+          isPublic: true,
+        });
+        track(id);
+
+        const record = yield* apiKeyService.validatePublishableKey(rawKey);
+        expect(record.id).toBe(id);
+        expect(record.isPublic).toBe(true);
+        expect(record.key).toBe(rawKey);
+        expect(record.project.id).toBe(projectId);
+      }),
+    ).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ApiKeyNotFoundError for an unknown raw key",
+    Effect.gen(function* () {
+      const apiKeyService = yield* ApiKeyService;
+      const rawKey = `vh_pk_unknown_${Date.now()}`;
+      const error = yield* Effect.flip(apiKeyService.validatePublishableKey(rawKey));
+      expect(error).toBeInstanceOf(ApiKeyNotFoundError);
+      // The raw (secret-equivalent) key must never be echoed back in the error.
+      if (error instanceof ApiKeyNotFoundError) {
+        expect(error.apiKeyId).toBeUndefined();
+        expect(error.apiKeyId).not.toBe(rawKey);
+      }
+    }).pipe(Effect.provide(ApiKeyService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/apiKeys/api-keys.test.ts b/packages/core/test/services/apiKeys/api-keys.test.ts
new file mode 100644
index 000000000..517d16ba9
--- /dev/null
+++ b/packages/core/test/services/apiKeys/api-keys.test.ts
@@ -0,0 +1,179 @@
+import { Effect } from "effect";
+
+import { describe, expect, it } from "../../../src/testing/effect-vitest.ts";
+import {
+  createPublishableKey,
+  createSecretKey,
+  createUserApiKey,
+  generatePublishableKey,
+  generateSecretKey,
+  generateUserApiKey,
+  hashKey,
+  KEY_END_LENGTH,
+  PRODUCTION_PUBLISHABLE_KEY_PREFIX,
+  PRODUCTION_SECRET_KEY_PREFIX,
+} from "../../../src/services/apiKeys/api-keys.ts";
+
+/**
+ * Every function under test returns a pure `Effect` (no requirements), so each
+ * case runs it with the `it.effect` helper from the local shim — mirroring
+ * money.test.ts. Key generation is randomized, so the structural assertions
+ * (length / prefix / `end` suffix) are deterministic while exact key content is
+ * not asserted. `hashKey` IS deterministic so it gets an exact-value assertion.
+ */
+
+// base64url-no-padding alphabet — what `hashKey` is contractually expected to
+// emit (URL-safe, never `+` `/` `=`).
+const BASE64URL_NOPAD = /^[A-Za-z0-9_-]+$/;
+
+// The two key bodies are built from the 52-letter (upper+lower) alphabet only.
+const KEY_BODY_ALPHABET = /^[A-Za-z]+$/;
+
+describe("hashKey", () => {
+  it.effect("produces a SHA-256 digest as base64url without padding", () =>
+    Effect.gen(function* () {
+      // SHA-256("hello") base64url-no-pad, verified independently.
+      const hashed = yield* hashKey("hello");
+      expect(hashed).toBe("LPJNul-wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ");
+      expect(hashed).toMatch(BASE64URL_NOPAD);
+      expect(hashed).not.toContain("=");
+    }),
+  );
+
+  it.effect("is deterministic — same input hashes to the same digest", () =>
+    Effect.gen(function* () {
+      const a = yield* hashKey("vh_sk_AbCdEfGhIjKlMnOpQrStUvWxYzAbCd");
+      const b = yield* hashKey("vh_sk_AbCdEfGhIjKlMnOpQrStUvWxYzAbCd");
+      expect(a).toBe(b);
+    }),
+  );
+
+  it.effect("different inputs produce different hashes", () =>
+    Effect.gen(function* () {
+      const a = yield* hashKey("alpha");
+      const b = yield* hashKey("beta");
+      expect(a).not.toBe(b);
+    }),
+  );
+});
+
+describe("generateSecretKey", () => {
+  it.effect("prefixes with vh_sk_ and appends 32 random body chars", () =>
+    Effect.gen(function* () {
+      const key = yield* generateSecretKey();
+      expect(key.startsWith(PRODUCTION_SECRET_KEY_PREFIX)).toBe(true);
+      expect(key.length).toBe(PRODUCTION_SECRET_KEY_PREFIX.length + 32);
+      const body = key.slice(PRODUCTION_SECRET_KEY_PREFIX.length);
+      expect(body).toMatch(KEY_BODY_ALPHABET);
+    }),
+  );
+
+  it.effect("yields a fresh random key on each call", () =>
+    Effect.gen(function* () {
+      const a = yield* generateSecretKey();
+      const b = yield* generateSecretKey();
+      expect(a).not.toBe(b);
+    }),
+  );
+});
+
+describe("generatePublishableKey", () => {
+  it.effect("prefixes with vh_pk_ and appends 32 random body chars", () =>
+    Effect.gen(function* () {
+      const key = yield* generatePublishableKey();
+      expect(key.startsWith(PRODUCTION_PUBLISHABLE_KEY_PREFIX)).toBe(true);
+      expect(key.length).toBe(PRODUCTION_PUBLISHABLE_KEY_PREFIX.length + 32);
+      const body = key.slice(PRODUCTION_PUBLISHABLE_KEY_PREFIX.length);
+      expect(body).toMatch(KEY_BODY_ALPHABET);
+    }),
+  );
+});
+
+describe("generateUserApiKey", () => {
+  it.effect("prefixes with the supplied prefix and appends 32 body chars", () =>
+    Effect.gen(function* () {
+      const prefix = "myapp_";
+      const key = yield* generateUserApiKey(prefix);
+      expect(key.startsWith(prefix)).toBe(true);
+      expect(key.length).toBe(prefix.length + 32);
+      const body = key.slice(prefix.length);
+      expect(body).toMatch(KEY_BODY_ALPHABET);
+    }),
+  );
+
+  it.effect("treats an empty prefix as no prefix (32 body chars only)", () =>
+    Effect.gen(function* () {
+      const key = yield* generateUserApiKey("");
+      expect(key.length).toBe(32);
+      expect(key).toMatch(KEY_BODY_ALPHABET);
+    }),
+  );
+});
+
+describe("createSecretKey", () => {
+  it.effect("returns a hashed key, plaintext rawKey, end suffix, and isPublic=false", () =>
+    Effect.gen(function* () {
+      const result = yield* createSecretKey();
+
+      expect(result.isPublic).toBe(false);
+      expect(result.prefix).toBe(PRODUCTION_SECRET_KEY_PREFIX);
+
+      // rawKey is the generated plaintext: prefixed, full length.
+      expect(result.rawKey.startsWith(PRODUCTION_SECRET_KEY_PREFIX)).toBe(true);
+      expect(result.rawKey.length).toBe(PRODUCTION_SECRET_KEY_PREFIX.length + 32);
+
+      // `key` is the hash of rawKey — base64url, never equal to the raw key.
+      expect(result.key).not.toBe(result.rawKey);
+      expect(result.key).toMatch(BASE64URL_NOPAD);
+      const expectedHash = yield* hashKey(result.rawKey);
+      expect(result.key).toBe(expectedHash);
+
+      // `end` is the last KEY_END_LENGTH chars of the RAW key.
+      expect(result.end.length).toBe(KEY_END_LENGTH);
+      expect(result.end).toBe(result.rawKey.slice(-KEY_END_LENGTH));
+    }),
+  );
+});
+
+describe("createPublishableKey", () => {
+  it.effect("returns the plaintext key (not hashed), end suffix, and isPublic=true", () =>
+    Effect.gen(function* () {
+      const result = yield* createPublishableKey();
+
+      expect(result.isPublic).toBe(true);
+      expect(result.prefix).toBe(PRODUCTION_PUBLISHABLE_KEY_PREFIX);
+
+      // Publishable keys are not hashed: `key` mirrors `rawKey` verbatim.
+      expect(result.key).toBe(result.rawKey);
+      expect(result.rawKey.startsWith(PRODUCTION_PUBLISHABLE_KEY_PREFIX)).toBe(true);
+      expect(result.rawKey.length).toBe(PRODUCTION_PUBLISHABLE_KEY_PREFIX.length + 32);
+
+      expect(result.end.length).toBe(KEY_END_LENGTH);
+      expect(result.end).toBe(result.rawKey.slice(-KEY_END_LENGTH));
+    }),
+  );
+});
+
+describe("createUserApiKey", () => {
+  it.effect("returns a hashed key, plaintext rawKey, supplied prefix, and end suffix", () =>
+    Effect.gen(function* () {
+      const prefix = "svc_";
+      const result = yield* createUserApiKey(prefix);
+
+      expect(result.prefix).toBe(prefix);
+      // No `isPublic` field on a user API key.
+      expect("isPublic" in result).toBe(false);
+
+      expect(result.rawKey.startsWith(prefix)).toBe(true);
+      expect(result.rawKey.length).toBe(prefix.length + 32);
+
+      expect(result.key).not.toBe(result.rawKey);
+      expect(result.key).toMatch(BASE64URL_NOPAD);
+      const expectedHash = yield* hashKey(result.rawKey);
+      expect(result.key).toBe(expectedHash);
+
+      expect(result.end.length).toBe(KEY_END_LENGTH);
+      expect(result.end).toBe(result.rawKey.slice(-KEY_END_LENGTH));
+    }),
+  );
+});
diff --git a/packages/core/test/services/apiKeys/create-hash.test.ts b/packages/core/test/services/apiKeys/create-hash.test.ts
new file mode 100644
index 000000000..38e3539a2
--- /dev/null
+++ b/packages/core/test/services/apiKeys/create-hash.test.ts
@@ -0,0 +1,154 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { base64Url, createHash } from "../../../src/services/apiKeys/create-hash.ts";
+
+/**
+ * `base64Url` and `createHash` are pure, framework-free helpers (no Effect, no
+ * infra) — `base64Url.{encode,decode}` are synchronous and `createHash().digest`
+ * returns a plain `Promise`. So these tests assert synchronously or `await` the
+ * promise directly, mirroring SecretBox.test.ts rather than the `it.effect` shim.
+ *
+ * The hash assertions use the canonical SHA-256 digest of the ASCII string
+ * "test" as a fixed test vector across every output encoding:
+ *   hex     = 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
+ *   base64  = n4bQgYhMfWWaL+qgxVrQFaO/Txsrugu/8/aB8+ +... (see below)
+ */
+
+const SHA256_TEST_HEX = "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08";
+
+// The 32 raw bytes of SHA-256("test"), derived from the hex vector above. Used
+// to cross-check the base64/base64url encoders against the digest output.
+const SHA256_TEST_BYTES = Uint8Array.from(
+  SHA256_TEST_HEX.match(/../g)!.map((h) => Number.parseInt(h, 16)),
+);
+
+describe("base64Url.encode", () => {
+  it("encodes a Uint8Array with the URL-safe alphabet and padding by default", () => {
+    // 0xff 0xff 0xff -> all-ones bytes exercise the '-'/'_' URL-safe chars,
+    // which in standard base64 would be '+'/'/'.
+    const encoded = base64Url.encode(Uint8Array.from([0xff, 0xff, 0xff]));
+    expect(encoded).toBe("____");
+    expect(encoded).not.toContain("+");
+    expect(encoded).not.toContain("/");
+  });
+
+  it("encodes string inputs by first converting them to UTF-8 bytes", () => {
+    // "Ma" -> bytes [0x4d, 0x61] -> 8 bits + 8 bits = 16, padded to 24 → "TWE=".
+    expect(base64Url.encode("Ma")).toBe("TWE=");
+  });
+
+  it("encodes ArrayBuffer inputs identically to the equivalent Uint8Array", () => {
+    const bytes = Uint8Array.from([0xff, 0xff, 0xff]);
+    const fromBuffer = base64Url.encode(bytes.buffer);
+    expect(fromBuffer).toBe(base64Url.encode(bytes));
+    expect(fromBuffer).toBe("____");
+  });
+
+  it("omits padding when padding=false and keeps it on the default (true)", () => {
+    const bytes = Uint8Array.from([0x01]); // one byte → 2 base64 chars + 2 '=' pads
+    const padded = base64Url.encode(bytes);
+    const unpadded = base64Url.encode(bytes, { padding: false });
+    expect(padded).toBe("AQ==");
+    expect(unpadded).toBe("AQ");
+    expect(padded.endsWith("==")).toBe(true);
+    expect(unpadded).not.toContain("=");
+  });
+});
+
+describe("base64Url.decode", () => {
+  it("round-trips an encoded URL-safe string back to the original bytes", () => {
+    const original = SHA256_TEST_BYTES;
+    const encoded = base64Url.encode(original);
+    const decoded = base64Url.decode(encoded);
+    expect([...decoded]).toEqual([...original]);
+  });
+
+  it("decodes a known URL-safe vector to its exact bytes", () => {
+    // "____" (the URL-safe form of "////") decodes to three 0xff bytes.
+    expect([...base64Url.decode("____")]).toEqual([0xff, 0xff, 0xff]);
+  });
+
+  it("auto-detects the standard alphabet when the input has no URL-safe chars", () => {
+    // "TWFu" is plain base64 for "Man"; it contains no '-'/'_' so the decoder
+    // falls back to the standard alphabet and still resolves correctly.
+    const decoded = base64Url.decode("TWFu");
+    expect(new TextDecoder().decode(decoded)).toBe("Man");
+  });
+
+  it("stops at padding and ignores it during decode", () => {
+    expect([...base64Url.decode("AQ==")]).toEqual([0x01]);
+  });
+
+  it("throws on an invalid base64 character", () => {
+    // '*' is in neither alphabet → the decoder rejects it loudly.
+    expect(() => base64Url.decode("**")).toThrow(/Invalid Base64 character/);
+  });
+});
+
+describe("createHash.digest", () => {
+  it("produces a consistent SHA-256 digest for the same input", async () => {
+    const hash = createHash("SHA-256", "hex");
+    const a = await hash.digest("test");
+    const b = await hash.digest("test");
+    expect(a).toBe(b);
+    expect(a).toBe(SHA256_TEST_HEX);
+  });
+
+  it("produces different digests for different inputs", async () => {
+    const hash = createHash("SHA-256", "hex");
+    const a = await hash.digest("test");
+    const b = await hash.digest("different");
+    expect(a).not.toBe(b);
+  });
+
+  it("returns a raw ArrayBuffer when no encoding is specified", async () => {
+    const buffer = await createHash("SHA-256").digest("test");
+    expect(buffer).toBeInstanceOf(ArrayBuffer);
+    // SHA-256 is always 32 bytes regardless of input length.
+    expect((buffer as ArrayBuffer).byteLength).toBe(32);
+    expect([...new Uint8Array(buffer as ArrayBuffer)]).toEqual([...SHA256_TEST_BYTES]);
+  });
+
+  it("returns a lowercase hex string when encoding='hex'", async () => {
+    const hex = await createHash("SHA-256", "hex").digest("test");
+    expect(hex).toBe(SHA256_TEST_HEX);
+    expect(hex).toMatch(/^[0-9a-f]{64}$/);
+  });
+
+  it("returns a standard base64 string when encoding='base64'", async () => {
+    const b64 = await createHash("SHA-256", "base64").digest("test");
+    // Must equal the standard-base64 encoding of the raw digest bytes.
+    expect(b64).toBe(btoa(String.fromCharCode(...SHA256_TEST_BYTES)));
+  });
+
+  it("returns a padded URL-safe string when encoding='base64url'", async () => {
+    const b64url = await createHash("SHA-256", "base64url").digest("test");
+    expect(b64url).toBe(base64Url.encode(SHA256_TEST_BYTES, { padding: true }));
+    expect(b64url).not.toContain("+");
+    expect(b64url).not.toContain("/");
+  });
+
+  it("returns an unpadded URL-safe string when encoding='base64urlnopad'", async () => {
+    const nopad = await createHash("SHA-256", "base64urlnopad").digest("test");
+    expect(nopad).toBe(base64Url.encode(SHA256_TEST_BYTES, { padding: false }));
+    expect(nopad).not.toContain("=");
+  });
+
+  it("hashes ArrayBuffer and TypedArray inputs the same as the equivalent string bytes", async () => {
+    const hash = createHash("SHA-256", "hex");
+    const expected = await hash.digest("test");
+    const bytes = new TextEncoder().encode("test");
+    expect(await hash.digest(bytes)).toBe(expected);
+    expect(await hash.digest(bytes.buffer)).toBe(expected);
+    // A non-byte TypedArray view is read via its underlying buffer.
+    const u16 = new Uint16Array(bytes.buffer, bytes.byteOffset, bytes.byteLength / 2);
+    expect(await hash.digest(u16)).toBe(expected);
+  });
+
+  it("supports other SHA families with their expected digest lengths", async () => {
+    const sha1 = await createHash("SHA-1").digest("test");
+    const sha512 = await createHash("SHA-512").digest("test");
+    expect((sha1 as ArrayBuffer).byteLength).toBe(20);
+    expect((sha512 as ArrayBuffer).byteLength).toBe(64);
+  });
+});
diff --git a/packages/core/test/services/auth/LocalUserSessionService.integration.test.ts b/packages/core/test/services/auth/LocalUserSessionService.integration.test.ts
new file mode 100644
index 000000000..834a0253a
--- /dev/null
+++ b/packages/core/test/services/auth/LocalUserSessionService.integration.test.ts
@@ -0,0 +1,591 @@
+/**
+ * Integration tests for {@link LocalUserSessionService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB; only the project schema cache is an in-memory stub).
+ *
+ * The service mirrors WorkOS identities into the local `user` table and derives
+ * an RPC `UserSession` from a user's memberships. None of its methods are
+ * project-permission guarded, so there is no `ActionForbiddenError` path — the
+ * coverage here is about the *persisted* upsert/backfill semantics:
+ *  - `resolveLocalUser` matched-by-`workos_user_id` (no-op when unchanged),
+ *  - matched-by-`email` fallback that backfills `workos_user_id` and updates
+ *    changed columns,
+ *  - a fresh INSERT for an unknown identity, and the duplicate-key upsert that
+ *    makes a racing second `resolveLocalUser` a no-op rather than a failure,
+ *  - the name derivation (`firstName`+`lastName` → `name`, email fallback) and
+ *    `profilePictureUrl` → `image` mapping,
+ *  - `loadUserAccess` over real `member`/`organization`/`project` joins,
+ *  - the pure `toUserSession` projection (auth-critical session shape).
+ *
+ * Conventions used throughout:
+ *  - Tests build their own throwaway users/orgs/projects under unique ids
+ *    (never the shared fixture rows) and delete them — plus their memberships —
+ *    on exit via {@link withUserCleanup}'s `Effect.ensuring` finalizer, success
+ *    or failure. The global teardown sweep retains the container, so anything we
+ *    create must be self-cleaned. Assertions stay membership-based.
+ *  - DB reads bypass the service via `yield* Db` to verify the row that actually
+ *    persisted (which, for the upsert path, may not be the one we generated).
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { LocalUserSessionService } from "@voidhash/core/services";
+import type {
+  LocalUserAccess,
+  LocalUserIdentity,
+} from "@voidhash/core/domain/auth/LocalUserSession";
+import {
+  Db,
+  eq,
+  inArray,
+  member,
+  organization,
+  projects,
+  user,
+  type User as DbUser,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+/** Monotonic counter so ids/emails stay unique even within the same millisecond. */
+let seq = 0;
+const nonce = () => `${Date.now()}-${seq++}`;
+/**
+ * The `user`/`organization`/`member` primary keys are `varchar(36)`, so a
+ * descriptive `label` embedded in the id can overflow the column ("Data too
+ * long for column 'id'"). Keep ids compact and label-free — uniqueness comes
+ * from the base36 timestamp + counter, which stays well under 36 chars — and
+ * carry the human-readable `label` in the `varchar(255)` email/slug columns
+ * instead. `label` is accepted for call-site readability but intentionally
+ * unused in the id itself.
+ */
+const uniqueId = (_label: string) => `lus-${Date.now().toString(36)}-${(seq++).toString(36)}`;
+const uniqueEmail = (label: string) => `it-lus-${label}-${nonce()}@voidhash.test`;
+const uniqueWorkosId = (label: string) => `it_workos_${label}_${nonce()}`;
+
+/** Build a {@link LocalUserIdentity} (WorkOS-shaped) with sensible defaults. */
+const identity = (
+  overrides: Partial<LocalUserIdentity> & Pick<LocalUserIdentity, "id" | "email">,
+): LocalUserIdentity => ({
+  emailVerified: true,
+  externalId: null,
+  firstName: null,
+  lastName: null,
+  profilePictureUrl: null,
+  ...overrides,
+});
+
+/** Read a user row straight from the database, bypassing the service. */
+const findUserRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.user.findFirst({ where: { id } });
+  });
+
+/** Read a user row by email straight from the database. */
+const findUserRowByEmail = (email: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.user.findFirst({ where: { email } });
+  });
+
+/**
+ * Delete the given users and any memberships referencing them. Each delete is
+ * `ignore`d so a missing row never turns the finalizer into a failure;
+ * memberships are removed first to respect the FK from `member.user_id`.
+ */
+const cleanupCreated = (
+  userIds: ReadonlyArray<string>,
+  orgIds: ReadonlyArray<string>,
+  projectIds: ReadonlyArray<string>,
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (userIds.length > 0) {
+      yield* db
+        .delete(member)
+        .where(inArray(member.userId, [...userIds]))
+        .pipe(Effect.ignore);
+    }
+    if (projectIds.length > 0) {
+      yield* db
+        .delete(projects)
+        .where(inArray(projects.id, [...projectIds]))
+        .pipe(Effect.ignore);
+    }
+    if (userIds.length > 0) {
+      yield* db
+        .delete(user)
+        .where(inArray(user.id, [...userIds]))
+        .pipe(Effect.ignore);
+    }
+    if (orgIds.length > 0) {
+      yield* db
+        .delete(organization)
+        .where(inArray(organization.id, [...orgIds]))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every user/org/project it creates is removed afterward,
+ * regardless of how the test exits. Pass each created id to the matching
+ * `track*` callback; cleanup reads the collected ids lazily at finalization via
+ * `Effect.ensuring`, so it sees every id tracked while the body ran (including
+ * a row the upsert path persisted under an id we did not generate).
+ */
+const withUserCleanup = <E, R>(
+  body: (track: {
+    user: (id: string) => void;
+    org: (id: string) => void;
+    project: (id: string) => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const userIds: string[] = [];
+  const orgIds: string[] = [];
+  const projectIds: string[] = [];
+  return body({
+    user: (id) => userIds.push(id),
+    org: (id) => orgIds.push(id),
+    project: (id) => projectIds.push(id),
+  }).pipe(Effect.ensuring(cleanupCreated(userIds, orgIds, projectIds)));
+};
+
+describe("LocalUserSessionService.resolveLocalUser", () => {
+  test(
+    "matches by workosUserId and returns the existing row unchanged when no field differs",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+        const db = yield* Db;
+
+        const id = uniqueId("match-workos");
+        const email = uniqueEmail("match-workos");
+        const workosUserId = uniqueWorkosId("match");
+        const now = new Date();
+        // Store the row already in the exact shape the incoming identity derives
+        // (name = "Existing Name" from firstName+lastName, verified, no image)
+        // so the `needsUpdate` guard is false and resolve is a pure read-back.
+        yield* db.insert(user).values({
+          createdAt: now,
+          email,
+          emailVerified: true,
+          id,
+          image: null,
+          name: "Existing Name",
+          updatedAt: now,
+          workosUserId,
+        });
+        track.user(id);
+
+        const resolved = yield* service.resolveLocalUser(
+          identity({
+            email,
+            emailVerified: true,
+            firstName: "Existing",
+            id: workosUserId,
+            lastName: "Name",
+          }),
+        );
+
+        expect(resolved.id).toBe(id);
+        expect(resolved.workosUserId).toBe(workosUserId);
+        expect(resolved.name).toBe("Existing Name");
+
+        const row = yield* findUserRow(id);
+        expect(row?.email).toBe(email);
+        expect(row?.workosUserId).toBe(workosUserId);
+        expect(row?.name).toBe("Existing Name");
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "matches by email for a row without a workosUserId, backfills it, and updates changed fields",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+        const db = yield* Db;
+
+        const id = uniqueId("backfill");
+        const email = uniqueEmail("backfill");
+        const now = new Date();
+        // Legacy-style row: has the email but no workos_user_id yet, and stale
+        // emailVerified / image / name compared to the incoming identity.
+        yield* db.insert(user).values({
+          createdAt: now,
+          email,
+          emailVerified: false,
+          id,
+          image: null,
+          name: "Stale Name",
+          updatedAt: now,
+          workosUserId: null,
+        });
+        track.user(id);
+
+        const workosUserId = uniqueWorkosId("backfill");
+        const resolved = yield* service.resolveLocalUser(
+          identity({
+            email,
+            emailVerified: true,
+            firstName: "Fresh",
+            id: workosUserId,
+            lastName: "Person",
+            profilePictureUrl: "https://example.test/avatar.png",
+          }),
+        );
+
+        expect(resolved.id).toBe(id);
+        expect(resolved.workosUserId).toBe(workosUserId);
+        expect(resolved.emailVerified).toBe(true);
+        expect(resolved.name).toBe("Fresh Person");
+        expect(resolved.image).toBe("https://example.test/avatar.png");
+
+        // Verify the columns were actually persisted, not just returned.
+        const row = yield* findUserRow(id);
+        expect(row?.workosUserId).toBe(workosUserId);
+        expect(row?.emailVerified).toBe(true);
+        expect(row?.name).toBe("Fresh Person");
+        expect(row?.image).toBe("https://example.test/avatar.png");
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "creates a new user row when not found by workosUserId or email",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+
+        const email = uniqueEmail("create");
+        const workosUserId = uniqueWorkosId("create");
+
+        const resolved = yield* service.resolveLocalUser(
+          identity({
+            email,
+            emailVerified: false,
+            firstName: "Brand",
+            id: workosUserId,
+            lastName: "New",
+          }),
+        );
+        track.user(resolved.id);
+
+        expect(resolved.id.startsWith("user_")).toBe(true);
+        expect(resolved.workosUserId).toBe(workosUserId);
+        expect(resolved.name).toBe("Brand New");
+        expect(resolved.emailVerified).toBe(false);
+
+        const row = yield* findUserRowByEmail(email);
+        expect(row).toBeDefined();
+        expect(row?.id).toBe(resolved.id);
+        expect(row?.workosUserId).toBe(workosUserId);
+        expect(row?.name).toBe("Brand New");
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "resolves the same fresh identity concurrently via upsert without a duplicate-key failure",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+        const db = yield* Db;
+
+        const email = uniqueEmail("race");
+        const workosUserId = uniqueWorkosId("race");
+        const id = identity({
+          email,
+          emailVerified: true,
+          firstName: "Race",
+          id: workosUserId,
+          lastName: "Winner",
+        });
+
+        // Both fibers miss the workosUserId/email lookups for this brand-new
+        // identity and race to INSERT the same (unique) email + workos_user_id;
+        // each generates its own local `id`. onDuplicateKeyUpdate turns the
+        // loser into a no-op instead of a duplicate-key DatabaseError, and each
+        // racer then reads back whichever row actually persisted.
+        const [first, second] = yield* Effect.all(
+          [service.resolveLocalUser(id), service.resolveLocalUser(id)],
+          { concurrency: "unbounded" },
+        );
+        track.user(first.id);
+        track.user(second.id);
+
+        // Neither call failed, and both converge on the single persisted row.
+        const persisted = yield* findUserRowByEmail(email);
+        expect(persisted).toBeDefined();
+        expect(persisted?.workosUserId).toBe(workosUserId);
+        expect(first.id).toBe(persisted?.id);
+        expect(second.id).toBe(persisted?.id);
+
+        // Exactly one row carries this unique email — the loser became a no-op.
+        const allWithEmail = yield* db
+          .select({ id: user.id })
+          .from(user)
+          .where(eq(user.email, email));
+        expect(allWithEmail.length).toBe(1);
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "derives name from firstName/lastName, falls back to email, and maps profilePictureUrl to image",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+
+        // No firstName/lastName → name falls back to the email; null picture → null image.
+        const emailNoName = uniqueEmail("noname");
+        const noName = yield* service.resolveLocalUser(
+          identity({ email: emailNoName, emailVerified: true, id: uniqueWorkosId("noname") }),
+        );
+        track.user(noName.id);
+        expect(noName.name).toBe(emailNoName);
+        expect(noName.image).toBeNull();
+
+        // firstName only → trimmed single-word name; picture mapped to image.
+        const emailFirstOnly = uniqueEmail("firstonly");
+        const firstOnly = yield* service.resolveLocalUser(
+          identity({
+            email: emailFirstOnly,
+            emailVerified: true,
+            firstName: "Solo",
+            id: uniqueWorkosId("firstonly"),
+            profilePictureUrl: "https://example.test/solo.png",
+          }),
+        );
+        track.user(firstOnly.id);
+        expect(firstOnly.name).toBe("Solo");
+        expect(firstOnly.image).toBe("https://example.test/solo.png");
+
+        const persistedFirstOnly = yield* findUserRow(firstOnly.id);
+        expect(persistedFirstOnly?.name).toBe("Solo");
+        expect(persistedFirstOnly?.image).toBe("https://example.test/solo.png");
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("LocalUserSessionService.loadUserAccess", () => {
+  test(
+    "returns the organizations (with workosOrganizationId) and projects a member can access",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+        const db = yield* Db;
+
+        const userId = uniqueId("access-user");
+        const orgId = uniqueId("access-org");
+        const workosOrgId = uniqueWorkosId("access-org");
+        const projectAId = uniqueId("access-proj-a");
+        const projectBId = uniqueId("access-proj-b");
+        const otherOrgId = uniqueId("access-other-org");
+        const otherProjectId = uniqueId("access-other-proj");
+        const now = new Date();
+
+        yield* db.insert(user).values({
+          createdAt: now,
+          email: uniqueEmail("access-user"),
+          emailVerified: true,
+          id: userId,
+          name: "Access User",
+          updatedAt: now,
+          workosUserId: uniqueWorkosId("access-user"),
+        });
+        track.user(userId);
+
+        yield* db.insert(organization).values([
+          {
+            createdAt: now,
+            id: orgId,
+            name: "Access Org",
+            slug: uniqueId("access-org-slug"),
+            workosOrganizationId: workosOrgId,
+          },
+          {
+            createdAt: now,
+            id: otherOrgId,
+            name: "Other Org",
+            slug: uniqueId("access-other-org-slug"),
+            workosOrganizationId: uniqueWorkosId("access-other-org"),
+          },
+        ]);
+        track.org(orgId);
+        track.org(otherOrgId);
+
+        // Membership only in `orgId`, not in `otherOrgId`.
+        yield* db.insert(member).values({
+          createdAt: now,
+          id: uniqueId("access-member"),
+          organizationId: orgId,
+          role: "owner",
+          userId,
+          workosMembershipId: uniqueWorkosId("access-member"),
+        });
+
+        yield* db.insert(projects).values([
+          { id: projectAId, name: "Proj A", organizationId: orgId, slug: uniqueId("proj-a") },
+          { id: projectBId, name: "Proj B", organizationId: orgId, slug: uniqueId("proj-b") },
+          {
+            id: otherProjectId,
+            name: "Other Proj",
+            organizationId: otherOrgId,
+            slug: uniqueId("other-proj"),
+          },
+        ]);
+        track.project(projectAId);
+        track.project(projectBId);
+        track.project(otherProjectId);
+
+        const access = yield* service.loadUserAccess(userId);
+
+        const org = access.organizations.find((o) => o.id === orgId);
+        expect(org).toBeDefined();
+        expect(org?.workosOrganizationId).toBe(workosOrgId);
+        expect(org?.permissions).toContain("organization:all");
+        expect(access.organizations.some((o) => o.id === otherOrgId)).toBe(false);
+
+        // Only projects under the member's org are returned.
+        expect(access.projects.some((p) => p.id === projectAId)).toBe(true);
+        expect(access.projects.some((p) => p.id === projectBId)).toBe(true);
+        expect(access.projects.some((p) => p.id === otherProjectId)).toBe(false);
+        const projA = access.projects.find((p) => p.id === projectAId);
+        expect(projA?.organizationId).toBe(orgId);
+        expect(projA?.permissions).toContain("project:all");
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns empty organizations and projects for a user with no memberships",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+        const db = yield* Db;
+
+        const userId = uniqueId("no-access-user");
+        const now = new Date();
+        yield* db.insert(user).values({
+          createdAt: now,
+          email: uniqueEmail("no-access-user"),
+          emailVerified: true,
+          id: userId,
+          name: "No Access",
+          updatedAt: now,
+          workosUserId: uniqueWorkosId("no-access-user"),
+        });
+        track.user(userId);
+
+        const access = yield* service.loadUserAccess(userId);
+        expect(access.organizations).toEqual([]);
+        expect(access.projects).toEqual([]);
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("LocalUserSessionService.toUserSession", () => {
+  test(
+    "projects a DbUser plus access into a method='user' RPC session with all fields populated",
+    Effect.gen(function* () {
+      const service = yield* LocalUserSessionService;
+
+      const now = new Date();
+      const dbUser: DbUser = {
+        banExpires: null,
+        banReason: null,
+        banned: false,
+        createdAt: now,
+        customImageUrl: null,
+        email: "session@voidhash.test",
+        emailVerified: true,
+        id: "user_session_shape",
+        image: "https://example.test/pic.png",
+        name: "Session User",
+        role: "admin",
+        updatedAt: now,
+        workosUserId: "it_workos_session",
+      };
+      const access: LocalUserAccess = {
+        organizations: [
+          {
+            id: "org_x",
+            logo: null,
+            name: "Org X",
+            permissions: ["organization:all"],
+            slug: "org-x",
+            workosOrganizationId: "it_workos_org_x",
+          },
+        ],
+        projects: [
+          {
+            id: "proj_x",
+            logo: null,
+            name: "Proj X",
+            organizationId: "org_x",
+            permissions: ["project:all"],
+            slug: "proj-x",
+          },
+        ],
+      };
+
+      const session = service.toUserSession(dbUser, access, "cookie-value", dbUser.workosUserId);
+
+      expect(session.method).toBe("user");
+      expect(session.cookie).toBe("cookie-value");
+      expect(session.person).toBeNull();
+      expect(session.name).toBe("Session User <session@voidhash.test>");
+      expect(session.organizations).toBe(access.organizations);
+      expect(session.projects).toBe(access.projects);
+      expect(session.user.id).toBe("user_session_shape");
+      expect(session.user.email).toBe("session@voidhash.test");
+      expect(session.user.emailVerified).toBe(true);
+      expect(session.user.image).toBe("https://example.test/pic.png");
+      expect(session.user.name).toBe("Session User");
+      expect(session.user.role).toBe("admin");
+      expect(session.user.workosUserId).toBe("it_workos_session");
+      expect(session.user.createdAt).toBe(now);
+      expect(session.user.updatedAt).toBe(now);
+    }).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("LocalUserSessionService.getLocalUser", () => {
+  test(
+    "retrieves a user by id and returns undefined for an unknown id",
+    withUserCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* LocalUserSessionService;
+        const db = yield* Db;
+
+        const id = uniqueId("get");
+        const email = uniqueEmail("get");
+        const now = new Date();
+        yield* db.insert(user).values({
+          createdAt: now,
+          email,
+          emailVerified: true,
+          id,
+          name: "Lookup User",
+          updatedAt: now,
+          workosUserId: uniqueWorkosId("get"),
+        });
+        track.user(id);
+
+        const found = yield* service.getLocalUser(id);
+        expect(found?.id).toBe(id);
+        expect(found?.email).toBe(email);
+
+        const missing = yield* service.getLocalUser(`user_missing_${nonce()}`);
+        expect(missing).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(LocalUserSessionService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts b/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
new file mode 100644
index 000000000..98a6afd42
--- /dev/null
+++ b/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
@@ -0,0 +1,2151 @@
+/**
+ * Integration tests for {@link FeatureFlagService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB +
+ * ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * Each test drives a public method end-to-end and verifies the *persisted* side
+ * effects, not just the return value:
+ *  - the `feature_flag` / `feature_flag_target` / `feature_flag_override` /
+ *    `feature_flag_variant` rows written, updated, or archived in MySQL,
+ *  - the matching `audit_log` rows (entity type, action, actor, parent entity,
+ *    change snapshot).
+ *
+ * Conventions (mirrored from `PerkService.integration.test.ts`):
+ *  - All rows live under the one seeded fixture project ({@link CoreTestFixture}),
+ *    but every test cleans up after itself: {@link withFlagCleanup} deletes the
+ *    flags it created (cascading targets / overrides / variants, plus the
+ *    append-only audit rows keyed by entity id) on exit, success or failure. The
+ *    global teardown sweep is only a backstop. Assertions are membership-based
+ *    (`.some(...)` / by-key), never exact `listFlags` counts, and keys are unique
+ *    per call so a leftover row from a crashed run can't collide.
+ *  - Permission tests reuse the default authenticated effect and re-authenticate
+ *    just the call under test via {@link asUnauthorized}; the inner provision
+ *    shadows the harness's default full-permission session.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof`, and are always paired with a
+ *    DB-state assertion proving nothing leaked.
+ *
+ * `FeatureFlagService` does not invalidate the project schema cache, so there is
+ * no cache assertion here (unlike the PerkService reference).
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { FeatureFlagService, FeatureFlagServiceError } from "@voidhash/core/services";
+import {
+  FeatureFlagKeyAlreadyExistsError,
+  FeatureFlagNotFoundError,
+  FeatureFlagOverrideNotFoundError,
+  FeatureFlagTargetNotFoundError,
+} from "@voidhash/core/domain/featureFlag/FeatureFlag";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  FeatureFlagIdentityType,
+  FeatureFlagTargetListType,
+  and,
+  auditLogs,
+  eq,
+  featureFlagOverrides,
+  featureFlagTargets,
+  featureFlagVariants,
+  featureFlags,
+  inArray,
+  isNull,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** A second project id, used only to prove key-uniqueness is scoped per project. */
+const otherProjectId = "it_project_ff_other";
+
+/** Monotonic counter so keys/values stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueKey = (label: string) => `it-ff-${label}-${Date.now()}-${seq++}`;
+const uniqueValue = (label: string) => `it-ff-id-${label}-${Date.now()}-${seq++}`;
+
+// ---------------------------------------------------------------------------
+// Raw DB read-back helpers (bypass the service to verify persisted state).
+// ---------------------------------------------------------------------------
+
+const findFlagRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.featureFlags.findFirst({ where: { id } });
+  });
+
+const findTargetRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.featureFlagTargets.findFirst({ where: { id } });
+  });
+
+const findOverrideRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.featureFlagOverrides.findFirst({ where: { id } });
+  });
+
+const findVariantRows = (featureFlagId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.featureFlagVariants.findMany({
+      where: { featureFlagId },
+    });
+  });
+
+/** Audit rows recorded for a given entity id, for any of the feature-flag entity types. */
+const findAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.select().from(auditLogs).where(eq(auditLogs.entityId, entityId));
+  });
+
+/** Count unarchived flags with a given key in a project (membership, never totals). */
+const countFlagsWithKey = (key: string, scopeProjectId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const rows = yield* db
+      .select({ id: featureFlags.id })
+      .from(featureFlags)
+      .where(and(eq(featureFlags.projectId, scopeProjectId), eq(featureFlags.key, key)));
+    return rows.length;
+  });
+
+// ---------------------------------------------------------------------------
+// Seeding helpers for parent rows the fixture does not provide.
+// ---------------------------------------------------------------------------
+
+/**
+ * Insert a flag row directly (bypassing the service) so tests can control fields
+ * the public `createFlag` cannot set — `enabled`, `rolloutBps`, `internal`,
+ * `salt`, or a foreign `projectId`. Returns the generated id.
+ */
+const insertRawFlag = (input: {
+  readonly id: string;
+  readonly projectId?: string;
+  readonly key: string;
+  readonly name?: string;
+  readonly enabled?: boolean;
+  readonly rolloutBps?: number;
+  readonly internal?: boolean;
+  readonly salt?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(featureFlags).values({
+      id: input.id,
+      projectId: input.projectId ?? projectId,
+      key: input.key,
+      name: input.name ?? "Raw Flag",
+      enabled: input.enabled ?? false,
+      rolloutBps: input.rolloutBps ?? 0,
+      internal: input.internal ?? false,
+      salt: input.salt ?? "it-ff-salt",
+      version: 1,
+    });
+  });
+
+const insertRawTarget = (input: {
+  readonly id: string;
+  readonly featureFlagId: string;
+  readonly listType: number;
+  readonly identityType: number;
+  readonly identityValue: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(featureFlagTargets).values(input);
+  });
+
+const insertRawOverride = (input: {
+  readonly id: string;
+  readonly featureFlagId: string;
+  readonly identityType: number;
+  readonly identityValue: string;
+  readonly forcedEnabled?: boolean | null;
+  readonly forcedVariantKey?: string | null;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(featureFlagOverrides).values({
+      id: input.id,
+      featureFlagId: input.featureFlagId,
+      identityType: input.identityType,
+      identityValue: input.identityValue,
+      forcedEnabled: input.forcedEnabled ?? null,
+      forcedVariantKey: input.forcedVariantKey ?? null,
+    });
+  });
+
+const insertRawVariant = (input: {
+  readonly id: string;
+  readonly featureFlagId: string;
+  readonly key: string;
+  readonly name?: string;
+  readonly weightBps: number;
+  readonly payload?: unknown;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(featureFlagVariants).values({
+      id: input.id,
+      featureFlagId: input.featureFlagId,
+      key: input.key,
+      name: input.name ?? input.key,
+      weightBps: input.weightBps,
+      payload: input.payload ?? null,
+    });
+  });
+
+// ---------------------------------------------------------------------------
+// Cleanup: delete created flags (and their children + audit rows) on exit.
+// ---------------------------------------------------------------------------
+
+/**
+ * Delete the given flags, their targets / overrides / variants, and all of the
+ * append-only audit rows keyed by the flag id (audit rows survive entity
+ * deletes, so they are cleared by entity id too). Each delete is `ignore`d so a
+ * missing row never turns the finalizer into a failure.
+ */
+const cleanupCreatedFlags = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+
+    // Child-row audit entries reference the flag id as parentEntityId; the
+    // entityId is the child's own id (target/override/variant). Clear by both
+    // the flag ids and the child ids harvested below.
+    const targetRows = yield* db
+      .select({ id: featureFlagTargets.id })
+      .from(featureFlagTargets)
+      .where(inArray(featureFlagTargets.featureFlagId, targets))
+      .pipe(Effect.catch(() => Effect.succeed([] as Array<{ id: string }>)));
+    const overrideRows = yield* db
+      .select({ id: featureFlagOverrides.id })
+      .from(featureFlagOverrides)
+      .where(inArray(featureFlagOverrides.featureFlagId, targets))
+      .pipe(Effect.catch(() => Effect.succeed([] as Array<{ id: string }>)));
+
+    const childIds = [...targetRows.map((r) => r.id), ...overrideRows.map((r) => r.id)];
+    const auditEntityIds = [...targets, ...childIds];
+
+    yield* db
+      .delete(auditLogs)
+      .where(inArray(auditLogs.entityId, auditEntityIds))
+      .pipe(Effect.ignore);
+    yield* db
+      .delete(featureFlagVariants)
+      .where(inArray(featureFlagVariants.featureFlagId, targets))
+      .pipe(Effect.ignore);
+    yield* db
+      .delete(featureFlagTargets)
+      .where(inArray(featureFlagTargets.featureFlagId, targets))
+      .pipe(Effect.ignore);
+    yield* db
+      .delete(featureFlagOverrides)
+      .where(inArray(featureFlagOverrides.featureFlagId, targets))
+      .pipe(Effect.ignore);
+    yield* db.delete(featureFlags).where(inArray(featureFlags.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every flag it tracks is removed afterward, regardless of
+ * how the test exits. Pass each created flag id to the `track` callback; cleanup
+ * reads the collected ids lazily at finalization via `Effect.ensuring`, so it
+ * sees every id tracked while the body ran (including on failure).
+ */
+const withFlagCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedFlags(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+/**
+ * A session holding `project:all` on {@link otherProjectId}. `checkProjectPermission`
+ * matches on the exact project id, so the default fixture session (scoped to
+ * `it_project`) cannot act on the second project; a call against it must be
+ * re-authenticated with this session.
+ */
+const sessionForOtherProject = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:all"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: null,
+  projects: [
+    {
+      id: otherProjectId,
+      logo: null,
+      name: "Other Project",
+      organizationId: CoreTestFixture.organizationId,
+      permissions: ["project:all"],
+      slug: "it-project-ff-other",
+    },
+  ],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/** Run a single call authenticated against {@link otherProjectId}. */
+const asOtherProject = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionForOtherProject()));
+
+// ===========================================================================
+// createFlag
+// ===========================================================================
+
+describe("FeatureFlagService.createFlag", () => {
+  test(
+    "persists the flag with defaults (enabled=false, rolloutBps=0, version=1) and a Created audit entry",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("create");
+
+        const created = yield* svc.createFlag({
+          projectId,
+          key,
+          name: "Created Flag",
+          description: "from integration test",
+        });
+        track(created.id);
+        expect(created.id.startsWith("ff_")).toBe(true);
+
+        const row = yield* findFlagRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.key).toBe(key);
+        expect(row?.name).toBe("Created Flag");
+        expect(row?.description).toBe("from integration test");
+        expect(row?.projectId).toBe(projectId);
+        expect(row?.enabled).toBe(false);
+        expect(row?.rolloutBps).toBe(0);
+        expect(row?.version).toBe(1);
+        expect(row?.archivedAt ?? null).toBeNull();
+        expect(typeof row?.salt).toBe("string");
+        expect((row?.salt ?? "").length).toBeGreaterThan(0);
+        expect(row?.createdByUserId).toBe(CoreTestFixture.userId);
+
+        const auditEntries = yield* findAuditEntries(created.id);
+        const createdEntry = auditEntries.find(
+          (entry) =>
+            entry.action === AuditLogAction.Created &&
+            entry.entityType === AuditLogEntityType.FeatureFlag,
+        );
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        // The audit snapshot embeds the inserted row; assert load-bearing fields.
+        const snapshot = (createdEntry?.changes as { snapshot?: Record<string, unknown> })
+          ?.snapshot;
+        expect(snapshot?.id).toBe(created.id);
+        expect(snapshot?.key).toBe(key);
+        expect(snapshot?.enabled).toBe(false);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a duplicate key within the project and writes no second row",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("dup");
+
+        const first = yield* svc.createFlag({ projectId, key, name: "First" });
+        track(first.id);
+
+        const error = yield* Effect.flip(svc.createFlag({ projectId, key, name: "Second" }));
+        expect(error).toBeInstanceOf(FeatureFlagKeyAlreadyExistsError);
+        if (error instanceof FeatureFlagKeyAlreadyExistsError) {
+          expect(error.key).toBe(key);
+        }
+
+        expect(yield* countFlagsWithKey(key, projectId)).toBe(1);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "allows the same key in a different project",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("cross-project");
+
+        // The default session grants project:all on the fixture project only, so
+        // the second create is re-authenticated against the other project; the
+        // value proven here is that the key uniqueness guard is scoped per
+        // project (no FK on featureFlags.projectId, so no project row needed).
+        const a = yield* svc.createFlag({ projectId, key, name: "In fixture project" });
+        track(a.id);
+        const b = yield* asOtherProject(
+          svc.createFlag({ projectId: otherProjectId, key, name: "In other project" }),
+        );
+        track(b.id);
+
+        expect(yield* countFlagsWithKey(key, projectId)).toBe(1);
+        expect(yield* countFlagsWithKey(key, otherProjectId)).toBe(1);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and writes nothing",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const key = uniqueKey("forbidden");
+
+      const error = yield* Effect.flip(
+        asUnauthorized(svc.createFlag({ projectId, key, name: "Nope" })),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      expect(yield* countFlagsWithKey(key, projectId)).toBe(0);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// updateFlag
+// ===========================================================================
+
+describe("FeatureFlagService.updateFlag", () => {
+  test(
+    "merges updates, increments version, and records an Updated audit entry",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("update-before"),
+          name: "Before",
+        });
+        track(created.id);
+
+        const newKey = uniqueKey("update-after");
+        const updated = yield* svc.updateFlag({
+          id: created.id,
+          name: "After",
+          description: "updated",
+          enabled: true,
+          rolloutBps: 5000,
+          key: newKey,
+        });
+        expect(updated.id).toBe(created.id);
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.name).toBe("After");
+        expect(row?.description).toBe("updated");
+        expect(row?.enabled).toBe(true);
+        expect(row?.rolloutBps).toBe(5000);
+        expect(row?.key).toBe(newKey);
+        expect(row?.version).toBe(2);
+        expect(row?.updatedByUserId).toBe(CoreTestFixture.userId);
+
+        const auditEntries = yield* findAuditEntries(created.id);
+        const updatedEntry = auditEntries.find(
+          (entry) =>
+            entry.action === AuditLogAction.Updated &&
+            entry.entityType === AuditLogEntityType.FeatureFlag,
+        );
+        expect(updatedEntry).toBeDefined();
+        const changes = updatedEntry?.changes as {
+          before?: { id?: string };
+          after?: { name?: string };
+        };
+        expect(changes?.before?.id).toBe(created.id);
+        expect(changes?.after?.name).toBe("After");
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(
+        svc.updateFlag({ id: `ff_missing_${Date.now()}`, name: "x" }),
+      );
+      expect(error).toBeInstanceOf(FeatureFlagNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids editing an internally-managed flag and leaves it unchanged",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const flagId = `ff_${uniqueValue("internal-update")}`;
+        const key = uniqueKey("internal-update");
+        yield* insertRawFlag({ id: flagId, key, name: "Internal", internal: true });
+        track(flagId);
+
+        const error = yield* Effect.flip(svc.updateFlag({ id: flagId, name: "Hacked" }));
+        expect(error).toBeInstanceOf(FeatureFlagServiceError);
+
+        const row = yield* findFlagRow(flagId);
+        expect(row?.name).toBe("Internal");
+        expect(row?.version).toBe(1);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the flag unchanged",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("update-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(svc.updateFlag({ id: created.id, name: "Nope" })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.name).toBe("Guarded");
+        expect(row?.version).toBe(1);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "allows renaming to an unused key within the project",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("rename-from"),
+          name: "Rename",
+        });
+        track(created.id);
+
+        const newKey = uniqueKey("rename-to");
+        yield* svc.updateFlag({ id: created.id, key: newKey });
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.key).toBe(newKey);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a rename collision with an existing key and leaves the key unchanged",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const keyA = uniqueKey("collide-a");
+        const keyB = uniqueKey("collide-b");
+
+        const a = yield* svc.createFlag({ projectId, key: keyA, name: "A" });
+        track(a.id);
+        const b = yield* svc.createFlag({ projectId, key: keyB, name: "B" });
+        track(b.id);
+
+        const error = yield* Effect.flip(svc.updateFlag({ id: b.id, key: keyA }));
+        expect(error).toBeInstanceOf(FeatureFlagKeyAlreadyExistsError);
+        if (error instanceof FeatureFlagKeyAlreadyExistsError) {
+          expect(error.key).toBe(keyA);
+        }
+
+        const row = yield* findFlagRow(b.id);
+        expect(row?.key).toBe(keyB);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// archiveFlag / restoreFlag
+// ===========================================================================
+
+describe("FeatureFlagService.archiveFlag", () => {
+  test(
+    "sets archivedAt and records an Archived audit entry",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("archive"),
+          name: "Doomed",
+        });
+        track(created.id);
+
+        yield* svc.archiveFlag({ id: created.id });
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.archivedAt).toBeInstanceOf(Date);
+
+        const auditEntries = yield* findAuditEntries(created.id);
+        expect(
+          auditEntries.some(
+            (entry) =>
+              entry.action === AuditLogAction.Archived &&
+              entry.entityType === AuditLogEntityType.FeatureFlag,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(svc.archiveFlag({ id: `ff_missing_${Date.now()}` }));
+      expect(error).toBeInstanceOf(FeatureFlagNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids archiving an internally-managed flag and leaves it un-archived",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const flagId = `ff_${uniqueValue("internal-archive")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key: uniqueKey("internal-archive"),
+          internal: true,
+        });
+        track(flagId);
+
+        const error = yield* Effect.flip(svc.archiveFlag({ id: flagId }));
+        expect(error).toBeInstanceOf(FeatureFlagServiceError);
+
+        const row = yield* findFlagRow(flagId);
+        expect(row?.archivedAt ?? null).toBeNull();
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the flag un-archived",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("archive-forbidden"),
+          name: "Protected",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(asUnauthorized(svc.archiveFlag({ id: created.id })));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.archivedAt ?? null).toBeNull();
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("FeatureFlagService.restoreFlag", () => {
+  test(
+    "clears archivedAt and records a Restored audit entry",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("restore"),
+          name: "Back",
+        });
+        track(created.id);
+        yield* svc.archiveFlag({ id: created.id });
+
+        yield* svc.restoreFlag({ id: created.id });
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.archivedAt ?? null).toBeNull();
+
+        const auditEntries = yield* findAuditEntries(created.id);
+        expect(
+          auditEntries.some(
+            (entry) =>
+              entry.action === AuditLogAction.Restored &&
+              entry.entityType === AuditLogEntityType.FeatureFlag,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(svc.restoreFlag({ id: `ff_missing_${Date.now()}` }));
+      expect(error).toBeInstanceOf(FeatureFlagNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("restore-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+        yield* svc.archiveFlag({ id: created.id });
+
+        const error = yield* Effect.flip(asUnauthorized(svc.restoreFlag({ id: created.id })));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.archivedAt).toBeInstanceOf(Date);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// getFlagById
+// ===========================================================================
+
+describe("FeatureFlagService.getFlagById", () => {
+  test(
+    "returns the flag with its unarchived targets, overrides, and variants",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("get"),
+          name: "WithRelations",
+        });
+        track(created.id);
+
+        const targetValue = uniqueValue("get-target");
+        yield* svc.upsertTarget({
+          featureFlagId: created.id,
+          listType: FeatureFlagTargetListType.Allow,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: targetValue,
+        });
+        const overrideValue = uniqueValue("get-override");
+        yield* svc.upsertOverride({
+          featureFlagId: created.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: overrideValue,
+          forcedEnabled: true,
+        });
+        yield* svc.updateFlagVariants({
+          featureFlagId: created.id,
+          variants: [
+            { key: "control", name: "Control", weightBps: 5000 },
+            { key: "treatment", name: "Treatment", weightBps: 5000 },
+          ],
+        });
+
+        const flag = yield* svc.getFlagById({ id: created.id });
+        expect(flag.id).toBe(created.id);
+        expect(flag.targets.some((t) => t.identityValue === targetValue)).toBe(true);
+        expect(flag.overrides.some((o) => o.identityValue === overrideValue)).toBe(true);
+        expect(flag.variants.some((v) => v.key === "control")).toBe(true);
+        expect(flag.variants.some((v) => v.key === "treatment")).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(svc.getFlagById({ id: `ff_missing_${Date.now()}` }));
+      expect(error).toBeInstanceOf(FeatureFlagNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("get-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(asUnauthorized(svc.getFlagById({ id: created.id })));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// listFlags
+// ===========================================================================
+
+describe("FeatureFlagService.listFlags", () => {
+  test(
+    "excludes archived flags by default but includes them when includeArchived=true",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const liveKey = uniqueKey("list-live");
+        const archivedKey = uniqueKey("list-archived");
+
+        const live = yield* svc.createFlag({ projectId, key: liveKey, name: "Live" });
+        track(live.id);
+        const archived = yield* svc.createFlag({
+          projectId,
+          key: archivedKey,
+          name: "Archived",
+        });
+        track(archived.id);
+        yield* svc.archiveFlag({ id: archived.id });
+
+        const defaultList = yield* svc.listFlags({ projectId });
+        expect(defaultList.some((f) => f.key === liveKey)).toBe(true);
+        expect(defaultList.some((f) => f.key === archivedKey)).toBe(false);
+
+        const fullList = yield* svc.listFlags({ projectId, includeArchived: true });
+        expect(fullList.some((f) => f.key === liveKey)).toBe(true);
+        expect(fullList.some((f) => f.key === archivedKey)).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns each flag with a variantCount of its unarchived variants",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("list-variantcount");
+        const created = yield* svc.createFlag({ projectId, key, name: "Counted" });
+        track(created.id);
+
+        yield* svc.updateFlagVariants({
+          featureFlagId: created.id,
+          variants: [
+            { key: "a", name: "A", weightBps: 4000 },
+            { key: "b", name: "B", weightBps: 6000 },
+          ],
+        });
+
+        const list = yield* svc.listFlags({ projectId });
+        const entry = list.find((f) => f.key === key);
+        expect(entry).toBeDefined();
+        expect(entry?.variantCount).toBe(2);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(asUnauthorized(svc.listFlags({ projectId })));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// updateFlagVariants
+// ===========================================================================
+
+describe("FeatureFlagService.updateFlagVariants", () => {
+  test(
+    "replaces all variants and records a FeatureFlagVariant Updated audit entry",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("variants-replace"),
+          name: "Variants",
+        });
+        track(created.id);
+
+        yield* svc.updateFlagVariants({
+          featureFlagId: created.id,
+          variants: [{ key: "old", name: "Old", weightBps: 10000 }],
+        });
+        yield* svc.updateFlagVariants({
+          featureFlagId: created.id,
+          variants: [
+            { key: "new-a", name: "New A", weightBps: 3000, payload: { color: "red" } },
+            { key: "new-b", name: "New B", weightBps: 7000 },
+          ],
+        });
+
+        const rows = yield* findVariantRows(created.id);
+        expect(rows.some((v) => v.key === "old")).toBe(false);
+        expect(rows.some((v) => v.key === "new-a" && v.weightBps === 3000)).toBe(true);
+        expect(rows.some((v) => v.key === "new-b" && v.weightBps === 7000)).toBe(true);
+        const payloadRow = rows.find((v) => v.key === "new-a");
+        expect(payloadRow?.payload).toEqual({ color: "red" });
+
+        const auditEntries = yield* findAuditEntries(created.id);
+        expect(
+          auditEntries.some(
+            (entry) =>
+              entry.action === AuditLogAction.Updated &&
+              entry.entityType === AuditLogEntityType.FeatureFlagVariant &&
+              entry.parentEntityId === created.id,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagNotFoundError for an unknown flag id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(
+        svc.updateFlagVariants({
+          featureFlagId: `ff_missing_${Date.now()}`,
+          variants: [{ key: "x", name: "X", weightBps: 10000 }],
+        }),
+      );
+      expect(error).toBeInstanceOf(FeatureFlagNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects weights that do not sum to 10000 and writes no variants",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("variants-badsum"),
+          name: "BadSum",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.updateFlagVariants({
+            featureFlagId: created.id,
+            variants: [{ key: "a", name: "A", weightBps: 5000 }],
+          }),
+        );
+        expect(error).toBeInstanceOf(FeatureFlagServiceError);
+
+        const rows = yield* findVariantRows(created.id);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects duplicate variant keys and writes no variants",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("variants-dup"),
+          name: "Dup",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.updateFlagVariants({
+            featureFlagId: created.id,
+            variants: [
+              { key: "same", name: "A", weightBps: 5000 },
+              { key: "same", name: "B", weightBps: 5000 },
+            ],
+          }),
+        );
+        expect(error).toBeInstanceOf(FeatureFlagServiceError);
+
+        const rows = yield* findVariantRows(created.id);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("variants-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            svc.updateFlagVariants({
+              featureFlagId: created.id,
+              variants: [{ key: "a", name: "A", weightBps: 10000 }],
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const rows = yield* findVariantRows(created.id);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// upsertTarget / archiveTarget
+// ===========================================================================
+
+describe("FeatureFlagService.upsertTarget", () => {
+  test(
+    "creates a new target and reuses the existing one on a second upsert",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("target-upsert"),
+          name: "Targeted",
+        });
+        track(created.id);
+
+        const value = uniqueValue("target");
+        const first = yield* svc.upsertTarget({
+          featureFlagId: created.id,
+          listType: FeatureFlagTargetListType.Deny,
+          identityType: FeatureFlagIdentityType.Email,
+          identityValue: value,
+        });
+        const firstRow = yield* findTargetRow(first.id);
+        expect(firstRow?.identityValue).toBe(value);
+        expect(firstRow?.listType).toBe(FeatureFlagTargetListType.Deny);
+
+        const second = yield* svc.upsertTarget({
+          featureFlagId: created.id,
+          listType: FeatureFlagTargetListType.Deny,
+          identityType: FeatureFlagIdentityType.Email,
+          identityValue: value,
+        });
+        // Same row reused, no duplicate insert.
+        expect(second.id).toBe(first.id);
+
+        const auditEntries = yield* findAuditEntries(first.id);
+        expect(
+          auditEntries.some(
+            (entry) =>
+              entry.action === AuditLogAction.TargetAdded &&
+              entry.entityType === AuditLogEntityType.FeatureFlagTarget &&
+              entry.parentEntityId === created.id,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagNotFoundError for an unknown flag id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(
+        svc.upsertTarget({
+          featureFlagId: `ff_missing_${Date.now()}`,
+          listType: FeatureFlagTargetListType.Allow,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: "anyone",
+        }),
+      );
+      expect(error).toBeInstanceOf(FeatureFlagNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("target-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            svc.upsertTarget({
+              featureFlagId: created.id,
+              listType: FeatureFlagTargetListType.Allow,
+              identityType: FeatureFlagIdentityType.DistinctId,
+              identityValue: uniqueValue("target-forbidden"),
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("FeatureFlagService.archiveTarget", () => {
+  test(
+    "sets archivedAt on the target and records a TargetRemoved audit entry",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("target-archive"),
+          name: "Targeted",
+        });
+        track(created.id);
+
+        const target = yield* svc.upsertTarget({
+          featureFlagId: created.id,
+          listType: FeatureFlagTargetListType.Allow,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: uniqueValue("target-archive"),
+        });
+
+        yield* svc.archiveTarget({ id: target.id });
+
+        const row = yield* findTargetRow(target.id);
+        expect(row?.archivedAt).toBeInstanceOf(Date);
+
+        const auditEntries = yield* findAuditEntries(target.id);
+        expect(
+          auditEntries.some(
+            (entry) =>
+              entry.action === AuditLogAction.TargetRemoved &&
+              entry.entityType === AuditLogEntityType.FeatureFlagTarget,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagTargetNotFoundError for an unknown target id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(svc.archiveTarget({ id: `ff_tgt_missing_${Date.now()}` }));
+      expect(error).toBeInstanceOf(FeatureFlagTargetNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagTargetNotFoundError when the parent flag is gone",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        // Insert a target pointing at a flag id that does not exist.
+        const targetId = `ff_tgt_${uniqueValue("orphan")}`;
+        const orphanFlagId = `ff_${uniqueValue("orphan-parent")}`;
+        track(orphanFlagId); // harmless: nothing to clean, but keeps shape consistent
+        yield* insertRawTarget({
+          id: targetId,
+          featureFlagId: orphanFlagId,
+          listType: FeatureFlagTargetListType.Allow,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: "orphan",
+        });
+
+        const error = yield* Effect.flip(svc.archiveTarget({ id: targetId }));
+        expect(error).toBeInstanceOf(FeatureFlagTargetNotFoundError);
+
+        // Clean up the orphan target by id.
+        const db = yield* Db;
+        yield* db
+          .delete(featureFlagTargets)
+          .where(eq(featureFlagTargets.id, targetId))
+          .pipe(Effect.ignore);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the target unarchived",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("target-archive-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+        const target = yield* svc.upsertTarget({
+          featureFlagId: created.id,
+          listType: FeatureFlagTargetListType.Allow,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: uniqueValue("target-archive-forbidden"),
+        });
+
+        const error = yield* Effect.flip(asUnauthorized(svc.archiveTarget({ id: target.id })));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findTargetRow(target.id);
+        expect(row?.archivedAt ?? null).toBeNull();
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// upsertOverride / archiveOverride
+// ===========================================================================
+
+describe("FeatureFlagService.upsertOverride", () => {
+  test(
+    "creates a new override then updates it in place on a second upsert",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("override-upsert"),
+          name: "Overridden",
+        });
+        track(created.id);
+
+        const value = uniqueValue("override");
+        const first = yield* svc.upsertOverride({
+          featureFlagId: created.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: value,
+          forcedEnabled: true,
+          note: "initial",
+        });
+        const firstRow = yield* findOverrideRow(first.id);
+        expect(firstRow?.forcedEnabled).toBe(true);
+        expect(firstRow?.note).toBe("initial");
+
+        const second = yield* svc.upsertOverride({
+          featureFlagId: created.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: value,
+          forcedEnabled: false,
+          note: "updated",
+        });
+        expect(second.id).toBe(first.id);
+
+        const secondRow = yield* findOverrideRow(first.id);
+        expect(secondRow?.forcedEnabled).toBe(false);
+        expect(secondRow?.note).toBe("updated");
+        expect(secondRow?.updatedByUserId).toBe(CoreTestFixture.userId);
+
+        const auditEntries = yield* findAuditEntries(first.id);
+        const overrideSets = auditEntries.filter(
+          (entry) =>
+            entry.action === AuditLogAction.OverrideSet &&
+            entry.entityType === AuditLogEntityType.FeatureFlagOverride &&
+            entry.parentEntityId === created.id,
+        );
+        // OverrideSet is recorded on both create and update.
+        expect(overrideSets.length).toBeGreaterThanOrEqual(2);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagNotFoundError for an unknown flag id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(
+        svc.upsertOverride({
+          featureFlagId: `ff_missing_${Date.now()}`,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: "anyone",
+          forcedEnabled: true,
+        }),
+      );
+      expect(error).toBeInstanceOf(FeatureFlagNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("override-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            svc.upsertOverride({
+              featureFlagId: created.id,
+              identityType: FeatureFlagIdentityType.DistinctId,
+              identityValue: uniqueValue("override-forbidden"),
+              forcedEnabled: true,
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("FeatureFlagService.archiveOverride", () => {
+  test(
+    "sets archivedAt on the override and records an OverrideRemoved audit entry",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("override-archive"),
+          name: "Overridden",
+        });
+        track(created.id);
+        const override = yield* svc.upsertOverride({
+          featureFlagId: created.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: uniqueValue("override-archive"),
+          forcedEnabled: true,
+        });
+
+        yield* svc.archiveOverride({ id: override.id });
+
+        const row = yield* findOverrideRow(override.id);
+        expect(row?.archivedAt).toBeInstanceOf(Date);
+
+        const auditEntries = yield* findAuditEntries(override.id);
+        expect(
+          auditEntries.some(
+            (entry) =>
+              entry.action === AuditLogAction.OverrideRemoved &&
+              entry.entityType === AuditLogEntityType.FeatureFlagOverride,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagOverrideNotFoundError for an unknown override id",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(svc.archiveOverride({ id: `ff_ovr_missing_${Date.now()}` }));
+      expect(error).toBeInstanceOf(FeatureFlagOverrideNotFoundError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with FeatureFlagOverrideNotFoundError when the parent flag is gone",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const overrideId = `ff_ovr_${Date.now()}_${seq++}`;
+      const orphanFlagId = `ff_${Date.now()}_orphan_${seq++}`;
+      yield* insertRawOverride({
+        id: overrideId,
+        featureFlagId: orphanFlagId,
+        identityType: FeatureFlagIdentityType.DistinctId,
+        identityValue: "orphan",
+        forcedEnabled: true,
+      });
+
+      const error = yield* Effect.flip(svc.archiveOverride({ id: overrideId }));
+      expect(error).toBeInstanceOf(FeatureFlagOverrideNotFoundError);
+
+      const db = yield* Db;
+      yield* db
+        .delete(featureFlagOverrides)
+        .where(eq(featureFlagOverrides.id, overrideId))
+        .pipe(Effect.ignore);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the override unarchived",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("override-archive-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+        const override = yield* svc.upsertOverride({
+          featureFlagId: created.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: uniqueValue("override-archive-forbidden"),
+          forcedEnabled: true,
+        });
+
+        const error = yield* Effect.flip(asUnauthorized(svc.archiveOverride({ id: override.id })));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findOverrideRow(override.id);
+        expect(row?.archivedAt ?? null).toBeNull();
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// listOverridesByFlag / listOverridesByPerson
+// ===========================================================================
+
+describe("FeatureFlagService.listOverridesByFlag", () => {
+  test(
+    "returns unarchived overrides for the flag and fails for an unknown flag",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("list-overrides-flag"),
+          name: "Listed",
+        });
+        track(created.id);
+
+        const liveValue = uniqueValue("list-overrides-live");
+        const live = yield* svc.upsertOverride({
+          featureFlagId: created.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: liveValue,
+          forcedEnabled: true,
+        });
+        const archivedValue = uniqueValue("list-overrides-archived");
+        const archived = yield* svc.upsertOverride({
+          featureFlagId: created.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: archivedValue,
+          forcedEnabled: false,
+        });
+        yield* svc.archiveOverride({ id: archived.id });
+
+        const overrides = yield* svc.listOverridesByFlag({ featureFlagId: created.id });
+        expect(overrides.some((o) => o.id === live.id)).toBe(true);
+        expect(overrides.some((o) => o.id === archived.id)).toBe(false);
+
+        const notFound = yield* Effect.flip(
+          svc.listOverridesByFlag({ featureFlagId: `ff_missing_${Date.now()}` }),
+        );
+        expect(notFound).toBeInstanceOf(FeatureFlagNotFoundError);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("list-overrides-flag-forbidden"),
+          name: "Guarded",
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(svc.listOverridesByFlag({ featureFlagId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("FeatureFlagService.listOverridesByPerson", () => {
+  test(
+    "returns unarchived overrides across project flags for a given identity",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const identityValue = uniqueValue("by-person");
+
+        const flagA = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("by-person-a"),
+          name: "A",
+        });
+        track(flagA.id);
+        const flagB = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("by-person-b"),
+          name: "B",
+        });
+        track(flagB.id);
+
+        const ovrA = yield* svc.upsertOverride({
+          featureFlagId: flagA.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue,
+          forcedEnabled: true,
+        });
+        const ovrB = yield* svc.upsertOverride({
+          featureFlagId: flagB.id,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue,
+          forcedEnabled: false,
+        });
+
+        const overrides = yield* svc.listOverridesByPerson({
+          projectId,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue,
+        });
+        expect(overrides.some((o) => o.id === ovrA.id)).toBe(true);
+        expect(overrides.some((o) => o.id === ovrB.id)).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const error = yield* Effect.flip(
+        asUnauthorized(
+          svc.listOverridesByPerson({
+            projectId,
+            identityType: FeatureFlagIdentityType.DistinctId,
+            identityValue: uniqueValue("by-person-forbidden"),
+          }),
+        ),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// evaluateFlagsBatch
+// ===========================================================================
+
+describe("FeatureFlagService.evaluateFlagsBatch", () => {
+  /** Find one flag's evaluation result by key, asserting it exists first. */
+  const resultFor = <T extends { readonly key: string }>(
+    results: ReadonlyArray<T>,
+    key: string,
+  ): T => {
+    const found = results.find((r) => r.key === key);
+    expect(found).toBeDefined();
+    return found!;
+  };
+
+  test(
+    "a disabled flag evaluates to enabled=false, reason=disabled, payload=null",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-disabled");
+        const created = yield* svc.createFlag({ projectId, key, name: "Disabled" });
+        track(created.id);
+        // createFlag leaves enabled=false.
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: uniqueValue("eval-disabled-subject"),
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(false);
+        expect(r.reason).toBe("disabled");
+        expect(r.payload).toBeNull();
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "an override forcedEnabled=false takes precedence over a full rollout",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-override-off");
+        // Enabled + full rollout so only the override can block it.
+        const flagId = `ff_${uniqueValue("eval-override-off")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "OverrideOff",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-override-off",
+        });
+        track(flagId);
+
+        const subject = uniqueValue("eval-override-off-subject");
+        yield* insertRawOverride({
+          id: `ff_ovr_${uniqueValue("eval-override-off")}`,
+          featureFlagId: flagId,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: subject,
+          forcedEnabled: false,
+        });
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: subject,
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(false);
+        expect(r.reason).toBe("override");
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "an override forcedEnabled=true takes precedence over a zero rollout",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-override-on");
+        // Enabled but rolloutBps=0, so without the override the flag is off.
+        const flagId = `ff_${uniqueValue("eval-override-on")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "OverrideOn",
+          enabled: true,
+          rolloutBps: 0,
+          salt: "salt-override-on",
+        });
+        track(flagId);
+
+        const subject = uniqueValue("eval-override-on-subject");
+        yield* insertRawOverride({
+          id: `ff_ovr_${uniqueValue("eval-override-on")}`,
+          featureFlagId: flagId,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: subject,
+          forcedEnabled: true,
+        });
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: subject,
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(true);
+        expect(r.reason).toBe("override");
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "a Deny target matching the subject blocks the flag (reason=denied)",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-deny");
+        const flagId = `ff_${uniqueValue("eval-deny")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "Denied",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-deny",
+        });
+        track(flagId);
+
+        const subject = uniqueValue("eval-deny-subject");
+        yield* insertRawTarget({
+          id: `ff_tgt_${uniqueValue("eval-deny")}`,
+          featureFlagId: flagId,
+          listType: FeatureFlagTargetListType.Deny,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: subject,
+        });
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: subject,
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(false);
+        expect(r.reason).toBe("denied");
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "an Allow target with a non-matching subject blocks the flag (reason=not-allowed)",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-allow");
+        const flagId = `ff_${uniqueValue("eval-allow")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "AllowList",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-allow",
+        });
+        track(flagId);
+
+        // Allow list contains someone else; the evaluated subject is not on it.
+        yield* insertRawTarget({
+          id: `ff_tgt_${uniqueValue("eval-allow")}`,
+          featureFlagId: flagId,
+          listType: FeatureFlagTargetListType.Allow,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: uniqueValue("eval-allow-allowed"),
+        });
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: uniqueValue("eval-allow-subject"),
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(false);
+        expect(r.reason).toBe("not-allowed");
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "no subject identity blocks an enabled flag (reason=no-identity)",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-no-identity");
+        const flagId = `ff_${uniqueValue("eval-no-identity")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "NoIdentity",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-no-identity",
+        });
+        track(flagId);
+
+        // No personId and no distinctId provided.
+        const results = yield* svc.evaluateFlagsBatch({ projectId, keys: [key] });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(false);
+        expect(r.reason).toBe("no-identity");
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "a full rollout deterministically enables the flag (reason=rollout)",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-rollout-full");
+        // rolloutBps=10000 means every bucket (0..9999) is < rolloutBps, so any
+        // subject is enabled regardless of the hash.
+        const flagId = `ff_${uniqueValue("eval-rollout-full")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "FullRollout",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-rollout-full",
+        });
+        track(flagId);
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: uniqueValue("eval-rollout-full-subject"),
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(true);
+        expect(r.reason).toBe("rollout");
+        expect(r.variantKey).toBeNull();
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "a zero rollout deterministically gates an enabled flag off (reason=rollout)",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-rollout-zero");
+        // rolloutBps=0 means no bucket is < rolloutBps, so every subject is off.
+        const flagId = `ff_${uniqueValue("eval-rollout-zero")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "ZeroRollout",
+          enabled: true,
+          rolloutBps: 0,
+          salt: "salt-rollout-zero",
+        });
+        track(flagId);
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: uniqueValue("eval-rollout-zero-subject"),
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(false);
+        expect(r.reason).toBe("rollout");
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "variant selection returns a variantKey and its payload for an enabled flag",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-variant");
+        const flagId = `ff_${uniqueValue("eval-variant")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "Variant",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-variant",
+        });
+        track(flagId);
+
+        // A single 100%-weight variant means the variant bucket always lands in it.
+        yield* insertRawVariant({
+          id: `ff_var_${uniqueValue("eval-variant")}`,
+          featureFlagId: flagId,
+          key: "only",
+          name: "Only",
+          weightBps: 10000,
+          payload: { tier: "gold" },
+        });
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: uniqueValue("eval-variant-subject"),
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(true);
+        expect(r.reason).toBe("rollout");
+        expect(r.variantKey).toBe("only");
+        expect(r.payload).toEqual({ tier: "gold" });
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "a forced-variant override pins the subject to that variant + payload, bypassing the bucket (reason=override)",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const key = uniqueKey("eval-forced-variant");
+        const flagId = `ff_${uniqueValue("eval-forced-variant")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "ForcedVariant",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-forced-variant",
+        });
+        track(flagId);
+
+        // Two arms; the forced key wins regardless of which the hash would pick.
+        yield* insertRawVariant({
+          id: `ff_var_${uniqueValue("eval-forced-a")}`,
+          featureFlagId: flagId,
+          key: "control",
+          weightBps: 5000,
+          payload: { arm: "control" },
+        });
+        yield* insertRawVariant({
+          id: `ff_var_${uniqueValue("eval-forced-b")}`,
+          featureFlagId: flagId,
+          key: "treatment",
+          weightBps: 5000,
+          payload: { arm: "treatment" },
+        });
+
+        const subject = uniqueValue("eval-forced-subject");
+        yield* insertRawOverride({
+          id: `ff_ovr_${uniqueValue("eval-forced")}`,
+          featureFlagId: flagId,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: subject,
+          forcedVariantKey: "treatment",
+        });
+
+        const results = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [key],
+          distinctId: subject,
+        });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(true);
+        expect(r.reason).toBe("override");
+        expect(r.variantKey).toBe("treatment");
+        expect(r.payload).toEqual({ arm: "treatment" });
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "variant assignment is stable by key across a re-sync that changes row ids (no reassignment)",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const db = yield* Db;
+        const key = uniqueKey("eval-variant-stable");
+        const flagId = `ff_${uniqueValue("eval-variant-stable")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "StableVariant",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-variant-stable",
+        });
+        track(flagId);
+
+        const subject = uniqueValue("eval-variant-stable-subject");
+        // First sync: ids intentionally in the OPPOSITE order to keys, so an
+        // id-based sort would order [b, a] while a key-based sort orders [a, b].
+        yield* insertRawVariant({
+          id: `ff_var_zzz_${uniqueValue("stable-a")}`,
+          featureFlagId: flagId,
+          key: "a",
+          weightBps: 5000,
+        });
+        yield* insertRawVariant({
+          id: `ff_var_aaa_${uniqueValue("stable-b")}`,
+          featureFlagId: flagId,
+          key: "b",
+          weightBps: 5000,
+        });
+        const first = resultFor(
+          yield* svc.evaluateFlagsBatch({ projectId, keys: [key], distinctId: subject }),
+          key,
+        );
+
+        // Re-sync (delete + reinsert) with fresh ids in key order. Under the old
+        // id-sort the cumulative-weight boundaries would flip and reassign the
+        // subject; under the key-sort the assignment is identical.
+        yield* db.delete(featureFlagVariants).where(eq(featureFlagVariants.featureFlagId, flagId));
+        yield* insertRawVariant({
+          id: `ff_var_aaa2_${uniqueValue("stable-a2")}`,
+          featureFlagId: flagId,
+          key: "a",
+          weightBps: 5000,
+        });
+        yield* insertRawVariant({
+          id: `ff_var_zzz2_${uniqueValue("stable-b2")}`,
+          featureFlagId: flagId,
+          key: "b",
+          weightBps: 5000,
+        });
+        const second = resultFor(
+          yield* svc.evaluateFlagsBatch({ projectId, keys: [key], distinctId: subject }),
+          key,
+        );
+
+        expect(first.variantKey).not.toBeNull();
+        expect(second.variantKey).toBe(first.variantKey);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "personId collects distinctIds, email, and external ids from the persons relations",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const db = yield* Db;
+
+        // Seed a person with one distinct identity and one external identifier.
+        const personId = `person_${uniqueValue("eval-person")}`;
+        const distinctId = uniqueValue("eval-person-distinct");
+        const externalId = uniqueValue("eval-person-external");
+        const personEmail = `${uniqueValue("eval-person-email")}@voidhash.test`;
+
+        yield* db.insert(persons).values({
+          id: personId,
+          projectId,
+          email: personEmail,
+        });
+        const personIdentityId = `person_dist_${uniqueValue("eval-person")}`;
+        yield* db.insert(personIdentities).values({
+          id: personIdentityId,
+          projectId,
+          distinctId,
+          personId,
+        });
+        const externalRowId = `pei_${uniqueValue("eval-person")}`;
+        yield* db.insert(personExternalIdentifiers).values({
+          id: externalRowId,
+          projectId,
+          personId,
+          serviceId: "test-service",
+          isDefault: true,
+          identifier: externalId,
+        });
+
+        // A flag whose Deny list matches the person's collected distinct id.
+        const key = uniqueKey("eval-person");
+        const flagId = `ff_${uniqueValue("eval-person")}`;
+        yield* insertRawFlag({
+          id: flagId,
+          key,
+          name: "PersonRelations",
+          enabled: true,
+          rolloutBps: 10000,
+          salt: "salt-person",
+        });
+        track(flagId);
+        yield* insertRawTarget({
+          id: `ff_tgt_${uniqueValue("eval-person")}`,
+          featureFlagId: flagId,
+          listType: FeatureFlagTargetListType.Deny,
+          identityType: FeatureFlagIdentityType.DistinctId,
+          identityValue: distinctId,
+        });
+
+        // Evaluate by personId only; the service must read the relations to
+        // discover the distinct id that the Deny target matches.
+        const results = yield* svc.evaluateFlagsBatch({ projectId, keys: [key], personId });
+        const r = resultFor(results, key);
+        expect(r.enabled).toBe(false);
+        expect(r.reason).toBe("denied");
+
+        // Self-clean the seeded person graph.
+        yield* db
+          .delete(personExternalIdentifiers)
+          .where(eq(personExternalIdentifiers.id, externalRowId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(personIdentities)
+          .where(eq(personIdentities.id, personIdentityId))
+          .pipe(Effect.ignore);
+        yield* db.delete(persons).where(eq(persons.id, personId)).pipe(Effect.ignore);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "filters by keys when provided and returns an empty array when no flags match",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const wantedKey = uniqueKey("eval-filter-wanted");
+        const otherKey = uniqueKey("eval-filter-other");
+
+        const wanted = yield* svc.createFlag({ projectId, key: wantedKey, name: "Wanted" });
+        track(wanted.id);
+        const other = yield* svc.createFlag({ projectId, key: otherKey, name: "Other" });
+        track(other.id);
+
+        const filtered = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [wantedKey],
+          distinctId: uniqueValue("eval-filter-subject"),
+        });
+        expect(filtered.some((r) => r.key === wantedKey)).toBe(true);
+        expect(filtered.some((r) => r.key === otherKey)).toBe(false);
+
+        // A keys filter that matches nothing yields an empty result set.
+        const none = yield* svc.evaluateFlagsBatch({
+          projectId,
+          keys: [`it-ff-absent-${Date.now()}-${seq++}`],
+          distinctId: uniqueValue("eval-filter-none"),
+        });
+        expect(none.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  // The wrapped harness `test` is a plain function with no `.todo`; record the
+  // deferred case via the raw vitest `test.todo`.
+  vitestTest.todo(
+    "evaluateFlagsBatch: an evaluation error for one flag returns reason=error without failing the batch — the per-flag fallback only triggers on a thrown defect inside the gen (e.g. a crypto.subtle outage), which has no in-process seam from the public service surface; cannot be forced against the real runtime without injecting a hashToBucket fault.",
+  );
+});
diff --git a/packages/core/test/services/feedback/FeedbackService.test.ts b/packages/core/test/services/feedback/FeedbackService.test.ts
new file mode 100644
index 000000000..93ea65440
--- /dev/null
+++ b/packages/core/test/services/feedback/FeedbackService.test.ts
@@ -0,0 +1,64 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { buildSlackMessage } from "../../../src/services/feedback/FeedbackService.ts";
+
+/**
+ * Pure Slack-payload assembly of `FeedbackService`. The DB write + session
+ * context resolution + best-effort relay are exercised by the integration
+ * suite; here we lock down the Block Kit shape and the conditional context
+ * lines so a missing org/project/page/sentiment never emits an empty field.
+ */
+
+const base = {
+  topicLabel: "Analytics",
+  message: "The revenue chart is blank",
+  userName: "Jane Doe",
+  userEmail: "jane@acme.com",
+};
+
+describe("buildSlackMessage", () => {
+  it("assembles a header, message, and context block", () => {
+    const { blocks, text } = buildSlackMessage({
+      ...base,
+      sentimentLabel: "Unhappy",
+      organizationName: "Acme",
+      projectName: "Mobile",
+      pathname: "/studio/acme/mobile/analytics/revenue",
+    });
+
+    expect(blocks).toHaveLength(3);
+    expect(blocks[0]).toMatchObject({ type: "header" });
+    expect(blocks[1]).toMatchObject({ type: "section" });
+    expect(blocks[2]).toMatchObject({ type: "context" });
+
+    const contextText = (blocks[2] as { elements: Array<{ text: string }> }).elements[0].text;
+    expect(contextText).toContain("Jane Doe");
+    expect(contextText).toContain("jane@acme.com");
+    expect(contextText).toContain("Acme");
+    expect(contextText).toContain("Mobile");
+    expect(contextText).toContain("/studio/acme/mobile/analytics/revenue");
+    expect(contextText).toContain("Unhappy");
+
+    // The notification fallback text carries topic, submitter, and message.
+    expect(text).toContain("Analytics");
+    expect(text).toContain("jane@acme.com");
+    expect(text).toContain("The revenue chart is blank");
+  });
+
+  it("omits context lines for absent org/project/page/sentiment", () => {
+    const { blocks } = buildSlackMessage({
+      ...base,
+      sentimentLabel: null,
+      organizationName: null,
+      projectName: null,
+      pathname: null,
+    });
+
+    const contextText = (blocks[2] as { elements: Array<{ text: string }> }).elements[0].text;
+    expect(contextText).toContain("Jane Doe");
+    expect(contextText).not.toContain("Organization:");
+    expect(contextText).not.toContain("Project:");
+    expect(contextText).not.toContain("Page:");
+    expect(contextText).not.toContain("Sentiment:");
+  });
+});
diff --git a/packages/core/test/services/fxRates/FxRateService.integration.test.ts b/packages/core/test/services/fxRates/FxRateService.integration.test.ts
new file mode 100644
index 000000000..63cca35c3
--- /dev/null
+++ b/packages/core/test/services/fxRates/FxRateService.integration.test.ts
@@ -0,0 +1,615 @@
+/**
+ * Integration tests for {@link FxRateService} and its bundled
+ * {@link createExchangeRateApiFxRateFetcher}, run against the real backend stack
+ * provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB).
+ *
+ * The service has no auth guards and writes only to the global, project-less
+ * `fx_rate` table, so these tests verify the *persisted* side effects and the
+ * two-tier cache behaviour rather than permissions:
+ *  - the `fx_rate` rows written by `refreshLatest` / `ensureSeeded`,
+ *  - `getUsdRate`'s identity short-circuit, UTC-day truncation, DB-backed cache
+ *    hit, and TTL-memoized negative on a miss,
+ *  - `onDuplicateKeyUpdate` idempotence on the `(currency, as_of_date)` unique
+ *    index.
+ *
+ * Conventions used throughout:
+ *  - `fx_rate` has no `projectId`, so rows cannot be scoped to the fixture
+ *    project. Instead every test stamps its rows with a unique 3-char test
+ *    currency AND a unique `asOfDate` in a future-but-still-valid MySQL
+ *    `TIMESTAMP` band (`[~2030, 2037]`, below the 2038-01-19 cap), and cleans up
+ *    after itself via {@link withFxCleanup} (deleting by id, success or
+ *    failure). Assertions stay membership-based (by currency / by id), never
+ *    table-wide counts, so a leftover row from a crashed run can't collide.
+ *  - The in-memory {@link FxRateService} cache is per-service-instance: each
+ *    test gets a fresh one via its own `Effect.provide(...layer)`. Negatives are
+ *    memoized for the TTL, so tests insert the DB row *before* the first
+ *    `getUsdRate` when they want to observe a hit.
+ *  - The upstream ExchangeRate-API is a paid, quota-limited external service we
+ *    must not call. `refreshLatest` / `ensureSeeded` are driven through an
+ *    in-test {@link FxRateFetcher} (no HTTP); the fetcher itself is exercised
+ *    end-to-end with the global `fetch` stubbed to return controlled provider
+ *    responses, so its real JSON parsing, URL building, rate inversion and
+ *    error mapping all run for real against simulated upstream payloads.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields.
+ */
+import { Effect, Option } from "effect";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import {
+  FxRateService,
+  FxRateServiceError,
+  type FxRateFetcher,
+} from "@voidhash/core/services";
+import {
+  FX_RATE_PRECISION,
+  USD_IDENTITY_RATE,
+  type FxRateLookup,
+} from "@voidhash/core/domain/fxRate/FxRate";
+import { Db, eq, fxRates, inArray } from "@voidhash/db";
+
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+
+import { createExchangeRateApiFxRateFetcher } from "../../../src/services/fxRates/exchange-rate-api-fetcher.ts";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+/**
+ * Monotonic counter so the per-test currency code and `asOfDate` stay unique
+ * even within the same millisecond (and across concurrent runs against the
+ * shared DB, thanks to the unique far-future date component).
+ */
+let seq = 0;
+
+/**
+ * A 3-char test currency code (fits `fx_rate.currency` `varchar(3)`). Bumps the
+ * shared `seq` so two successive calls (e.g. `currencyA`/`currencyB` in one
+ * test) get *distinct* codes — otherwise both would map to the same
+ * `(currency, asOfDate)` pair and the second insert would no-op via the unique
+ * index, breaking per-currency read-backs.
+ */
+const uniqueCurrency = (): string => `Z${(seq++ % 100).toString().padStart(2, "0")}`;
+
+const ONE_DAY_MS = 24 * 60 * 60 * 1000;
+
+/**
+ * Per-run day offset (in days). The `fx_rate.as_of_date` column is a MySQL
+ * `TIMESTAMP` (4-byte, valid only for `1970-01-01` .. `2038-01-19 03:14:07`
+ * UTC), so the `asOfDate` we insert MUST land inside that window or the row is
+ * rejected (`Incorrect datetime value`) at write time. We therefore anchor near
+ * the *top* of the range and step *backward* by a per-run salt + call count,
+ * carving a `[~2030, 2037]` band that is comfortably in range, well past real
+ * ~2026 FX data, and unlikely to collide with a leftover row from a crashed
+ * prior run. The salt is bounded so `base - offset` never underflows out of the
+ * valid window for this file's call count.
+ */
+const runSalt = Math.floor(Date.now() / 1000) % 2_000;
+
+/**
+ * A unique midnight-UTC `asOfDate` in the future-but-valid MySQL `TIMESTAMP`
+ * band, derived from the run salt and call count so `(currency, asOfDate)` never
+ * collides with real data, other tests, or other runs. Midnight UTC means the
+ * value round-trips losslessly through the second-precision (no `fsp`) column.
+ */
+const uniqueDay = (): Date => {
+  const base = Date.UTC(2037, 0, 1);
+  return new Date(base - (runSalt + seq++) * ONE_DAY_MS);
+};
+
+/** Read a single `fx_rate` row straight from the DB, bypassing the service. */
+const findRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.fxRates.findFirst({ where: { id } });
+  });
+
+/** Read the `fx_rate` row for a `(currency, asOfDate)` pair. */
+const findByPair = (currency: string, asOfDate: Date) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    // `asOfDate` is a Date (object) column, so the v2 shorthand `{ asOfDate }`
+    // resolves to `never` — object-typed columns need the explicit `{ eq }` form.
+    return yield* db.query.fxRates.findFirst({
+      where: { currency, asOfDate: { eq: asOfDate } },
+    });
+  });
+
+/** All `fx_rate` rows for a given test currency. */
+const findByCurrency = (currency: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.select().from(fxRates).where(eq(fxRates.currency, currency));
+  });
+
+/**
+ * Delete the given `fx_rate` rows. Each delete is `ignore`d so a missing row
+ * never turns the finalizer into a failure.
+ */
+const cleanupRows = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    yield* db
+      .delete(fxRates)
+      .where(inArray(fxRates.id, [...ids]))
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every `fx_rate` row it creates is removed afterward,
+ * regardless of how the test exits. Pass each created row id to `track`; cleanup
+ * reads the collected ids lazily at finalization via `Effect.ensuring`, so it
+ * sees every id tracked while the body ran (including on failure).
+ */
+const withFxCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupRows(createdIds)));
+};
+
+/**
+ * Insert an `fx_rate` row directly (bypassing the service) so cache reads have
+ * a durable row to find. Returns the generated id and tracks it for cleanup.
+ */
+const seedRow = (
+  track: (id: string) => void,
+  input: {
+    readonly currency: string;
+    readonly asOfDate: Date;
+    readonly usdRate: number;
+    readonly source: string;
+  },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = `fx_test_${Date.now()}_${seq++}`;
+    track(id);
+    yield* db.insert(fxRates).values({
+      asOfDate: input.asOfDate,
+      currency: input.currency,
+      fetchedAt: new Date(),
+      id,
+      source: input.source,
+      usdRate: input.usdRate,
+    });
+    return id;
+  });
+
+/** A static {@link FxRateFetcher} returning the given rates with no HTTP. */
+const staticFetcher = (rates: ReadonlyArray<FxRateLookup>): FxRateFetcher => ({
+  fetchLatestUsdRates: () => Effect.succeed(rates),
+});
+
+/** A {@link FxRateFetcher} that always fails, for error-path coverage. */
+const failingFetcher = (cause: string): FxRateFetcher => ({
+  fetchLatestUsdRates: () => Effect.fail(new FxRateServiceError({ cause })),
+});
+
+describe("FxRateService.getUsdRate", () => {
+  test(
+    "USD short-circuits to the identity rate without a DB lookup",
+    Effect.gen(function* () {
+      const svc = yield* FxRateService;
+      // A non-midnight timestamp proves asOf is truncated to the UTC day.
+      const asOf = new Date(Date.UTC(2024, 5, 15, 13, 37, 42, 500));
+
+      const result = yield* svc.getUsdRate({ asOf, currency: "usd" });
+      expect(Option.isSome(result)).toBe(true);
+      const lookup = Option.getOrThrow(result);
+      expect(lookup.currency).toBe("USD");
+      expect(lookup.rate).toBe(USD_IDENTITY_RATE);
+      expect(lookup.source).toBe("identity");
+      expect(lookup.asOfDate.getTime()).toBe(Date.UTC(2024, 5, 15));
+    }).pipe(Effect.provide(FxRateService.layerWithFetcher(staticFetcher([])))),
+  );
+
+  test(
+    "returns a DB-backed FxRateLookup with the expected structure",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FxRateService;
+        const currency = uniqueCurrency();
+        const asOfDate = uniqueDay();
+        const usdRate = 1_234_567;
+
+        yield* seedRow(track, { asOfDate, currency, source: "stub", usdRate });
+
+        const result = yield* svc.getUsdRate({ asOf: asOfDate, currency });
+        expect(Option.isSome(result)).toBe(true);
+        const lookup = Option.getOrThrow(result);
+        expect(lookup.currency).toBe(currency);
+        expect(lookup.rate).toBe(usdRate);
+        expect(lookup.source).toBe("stub");
+        expect(lookup.asOfDate.getTime()).toBe(asOfDate.getTime());
+      }),
+    ).pipe(Effect.provide(FxRateService.layerWithFetcher(staticFetcher([])))),
+  );
+
+  test(
+    "truncates asOf to midnight UTC so an intraday call still hits the day row",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FxRateService;
+        const currency = uniqueCurrency();
+        const asOfDate = uniqueDay();
+
+        yield* seedRow(track, { asOfDate, currency, source: "stub", usdRate: 900_000 });
+
+        // Pass a time well past midnight on the same UTC day; it must normalize.
+        const intraday = new Date(asOfDate.getTime() + 18 * 60 * 60 * 1000 + 123);
+        const result = yield* svc.getUsdRate({ asOf: intraday, currency });
+        expect(Option.isSome(result)).toBe(true);
+        expect(Option.getOrThrow(result).rate).toBe(900_000);
+      }),
+    ).pipe(Effect.provide(FxRateService.layerWithFetcher(staticFetcher([])))),
+  );
+
+  test(
+    "returns Option.none() on a cache miss (no error, no upstream fetch)",
+    Effect.gen(function* () {
+      const svc = yield* FxRateService;
+      // No row seeded for this currency: durable + memory tiers both miss.
+      const result = yield* svc.getUsdRate({ asOf: uniqueDay(), currency: uniqueCurrency() });
+      expect(Option.isNone(result)).toBe(true);
+    }).pipe(Effect.provide(FxRateService.layerWithFetcher(staticFetcher([])))),
+  );
+
+  test(
+    "memoizes a negative miss for the TTL even after the DB row appears",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FxRateService;
+        const currency = uniqueCurrency();
+        const asOfDate = uniqueDay();
+
+        // First lookup misses both tiers and caches Option.none() for the TTL.
+        const first = yield* svc.getUsdRate({ asOf: asOfDate, currency });
+        expect(Option.isNone(first)).toBe(true);
+
+        // Now the durable row exists, but the in-memory negative is still warm.
+        yield* seedRow(track, { asOfDate, currency, source: "stub", usdRate: 500_000 });
+        const second = yield* svc.getUsdRate({ asOf: asOfDate, currency });
+        expect(Option.isNone(second)).toBe(true);
+
+        // The row really is in the DB — the second none() came from the cache.
+        const row = yield* findByPair(currency, asOfDate);
+        expect(row?.usdRate).toBe(500_000);
+      }),
+    ).pipe(Effect.provide(FxRateService.layerWithFetcher(staticFetcher([])))),
+  );
+
+  test(
+    "carries forward the most recent earlier rate when the exact day has no row",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FxRateService;
+        const currency = uniqueCurrency();
+        const queryDay = uniqueDay();
+        // Only an earlier day (within the carry-forward window) has a rate; the
+        // exact query day has none — e.g. the purchase landed before the daily
+        // sync, or on a provider holiday.
+        const seededDay = new Date(queryDay.getTime() - 2 * ONE_DAY_MS);
+        yield* seedRow(track, {
+          asOfDate: seededDay,
+          currency,
+          source: "stub",
+          usdRate: 1_300_000,
+        });
+
+        const result = yield* svc.getUsdRate({ asOf: queryDay, currency });
+        expect(Option.isSome(result)).toBe(true);
+        const lookup = Option.getOrThrow(result);
+        // The carried rate's value is reused, tagged as carried, and dated to the
+        // actual (earlier) rate day for observability.
+        expect(lookup.rate).toBe(1_300_000);
+        expect(lookup.source).toBe("stub:carry_forward");
+        expect(lookup.asOfDate.getTime()).toBe(seededDay.getTime());
+      }),
+    ).pipe(Effect.provide(FxRateService.layerWithFetcher(staticFetcher([])))),
+  );
+
+  test(
+    "does not carry forward a rate older than the staleness window (returns none)",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FxRateService;
+        const currency = uniqueCurrency();
+        const queryDay = uniqueDay();
+        // 10 days earlier — beyond the 7-day carry-forward window, so the lookup
+        // must fall through to none rather than reuse a too-stale rate.
+        const staleDay = new Date(queryDay.getTime() - 10 * ONE_DAY_MS);
+        yield* seedRow(track, { asOfDate: staleDay, currency, source: "stub", usdRate: 1_400_000 });
+
+        const result = yield* svc.getUsdRate({ asOf: queryDay, currency });
+        expect(Option.isNone(result)).toBe(true);
+      }),
+    ).pipe(Effect.provide(FxRateService.layerWithFetcher(staticFetcher([])))),
+  );
+});
+
+describe("FxRateService.refreshLatest", () => {
+  test(
+    "persists every fetched rate, warms the in-memory cache, and returns the count",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        const currencyA = uniqueCurrency();
+        const currencyB = uniqueCurrency();
+        const asOfDate = uniqueDay();
+        const rates: ReadonlyArray<FxRateLookup> = [
+          { asOfDate, currency: currencyA, rate: 1_100_000, source: "stub-refresh" },
+          { asOfDate, currency: currencyB, rate: 1_200_000, source: "stub-refresh" },
+        ];
+
+        const svc = yield* Effect.provide(
+          FxRateService,
+          FxRateService.layerWithFetcher(staticFetcher(rates)),
+        );
+
+        const count = yield* svc.refreshLatest();
+        expect(count).toBe(2);
+
+        // Track persisted ids for cleanup and verify the durable rows.
+        const rowA = yield* findByPair(currencyA, asOfDate);
+        const rowB = yield* findByPair(currencyB, asOfDate);
+        expect(rowA).toBeDefined();
+        expect(rowB).toBeDefined();
+        if (rowA) track(rowA.id);
+        if (rowB) track(rowB.id);
+        expect(rowA?.usdRate).toBe(1_100_000);
+        expect(rowA?.source).toBe("stub-refresh");
+        expect(rowB?.usdRate).toBe(1_200_000);
+
+        // The in-memory cache was warmed: getUsdRate returns the hit directly.
+        const hit = yield* svc.getUsdRate({ asOf: asOfDate, currency: currencyA });
+        expect(Option.isSome(hit)).toBe(true);
+        expect(Option.getOrThrow(hit).rate).toBe(1_100_000);
+      }),
+    ),
+  );
+
+  test(
+    "is idempotent: a duplicate (currency, asOfDate) no-ops via onDuplicateKeyUpdate",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        const currency = uniqueCurrency();
+        const asOfDate = uniqueDay();
+        const rates: ReadonlyArray<FxRateLookup> = [
+          { asOfDate, currency, rate: 1_050_000, source: "stub-refresh" },
+        ];
+
+        const svc = yield* Effect.provide(
+          FxRateService,
+          FxRateService.layerWithFetcher(staticFetcher(rates)),
+        );
+
+        const firstCount = yield* svc.refreshLatest();
+        expect(firstCount).toBe(1);
+        const firstRow = yield* findByPair(currency, asOfDate);
+        expect(firstRow).toBeDefined();
+        if (firstRow) track(firstRow.id);
+
+        // Second refresh with the same key must not raise ER_DUP_ENTRY and must
+        // not create a second row (the unique index is honoured).
+        const secondCount = yield* svc.refreshLatest();
+        expect(secondCount).toBe(1);
+
+        const rows = yield* findByCurrency(currency);
+        const forDay = rows.filter((row) => row.asOfDate.getTime() === asOfDate.getTime());
+        expect(forDay.length).toBe(1);
+        // The original id is preserved by the `id = id` no-op update.
+        expect(forDay[0]?.id).toBe(firstRow?.id);
+      }),
+    ),
+  );
+
+  test(
+    "wraps an upstream fetcher failure as FxRateServiceError and writes nothing",
+    Effect.gen(function* () {
+      const currency = uniqueCurrency();
+      const asOfDate = uniqueDay();
+
+      const svc = yield* Effect.provide(
+        FxRateService,
+        FxRateService.layerWithFetcher(failingFetcher("upstream exploded")),
+      );
+
+      const error = yield* Effect.flip(svc.refreshLatest());
+      expect(error).toBeInstanceOf(FxRateServiceError);
+      if (error instanceof FxRateServiceError) {
+        expect(error.cause).toContain("upstream exploded");
+      }
+
+      // No rate persisted for this never-seen currency.
+      const rows = yield* findByCurrency(currency);
+      expect(rows.some((row) => row.asOfDate.getTime() === asOfDate.getTime())).toBe(false);
+    }),
+  );
+});
+
+describe("FxRateService.ensureSeeded", () => {
+  test(
+    "returns 0 without persisting when the durable cache is already populated",
+    withFxCleanup((track) =>
+      Effect.gen(function* () {
+        // The shared fx_rate table is populated by the seed below (and very
+        // likely by prior tests), so ensureSeeded must treat it as populated.
+        const currency = uniqueCurrency();
+        const asOfDate = uniqueDay();
+        yield* seedRow(track, { asOfDate, currency, source: "stub", usdRate: 1_000_000 });
+
+        // A fetcher that would create a recognisable extra row IF (wrongly) called.
+        const sentinelCurrency = uniqueCurrency();
+        const sentinelDay = uniqueDay();
+        const svc = yield* Effect.provide(
+          FxRateService,
+          FxRateService.layerWithFetcher(
+            staticFetcher([
+              {
+                asOfDate: sentinelDay,
+                currency: sentinelCurrency,
+                rate: 1,
+                source: "should-not-run",
+              },
+            ]),
+          ),
+        );
+
+        const seeded = yield* svc.ensureSeeded();
+        expect(seeded).toBe(0);
+
+        // The sentinel rate was never persisted: refreshLatest was skipped.
+        const sentinelRows = yield* findByCurrency(sentinelCurrency);
+        expect(sentinelRows.length).toBe(0);
+      }),
+    ),
+  );
+
+  // `it.todo` (raw vitest) rather than the harness `test`, whose typed wrapper
+  // does not expose `.todo`.
+  it.todo(
+    "seeds from upstream when the fx_rate table is empty (returns the seeded count): " +
+      "ensureSeeded's empty-table branch reads `findFirst()` table-wide with no filter, " +
+      "so it only fires when the shared, never-truncated `fx_rate` table has zero rows. " +
+      "That global precondition cannot be guaranteed in the shared integration DB without " +
+      "destructively truncating the table (which would race other tests/runs), so the " +
+      "empty-table seed path is deferred. The seeding mechanics it delegates to are already " +
+      "covered by the refreshLatest tests above.",
+  );
+});
+
+/**
+ * Fetcher-level tests. The upstream ExchangeRate-API is a paid, quota-limited
+ * external service, so the global `fetch` is replaced with a stub returning a
+ * controlled provider payload. Everything else — URL construction, JSON
+ * parsing, USD-base inversion, precision scaling and error mapping — is the
+ * fetcher's *real* code running against that simulated response. These run via
+ * raw vitest `it` + `Effect.runPromise` (no harness DB) since the fetcher has
+ * no service dependencies.
+ */
+describe("createExchangeRateApiFxRateFetcher", () => {
+  /** The most recent URL the fetcher passed to `fetch`. */
+  let lastUrl: string | undefined;
+
+  /**
+   * Install a `fetch` stub that returns the given JSON body / status for the
+   * next call and records the requested URL. `Response` is a DOM global.
+   */
+  const stubFetchJson = (status: number, body: unknown) => {
+    lastUrl = undefined;
+    vi.stubGlobal(
+      "fetch",
+      vi.fn((input: unknown) => {
+        lastUrl = String(input);
+        return Promise.resolve(
+          new Response(JSON.stringify(body), {
+            headers: { "Content-Type": "application/json" },
+            status,
+          }),
+        );
+      }),
+    );
+  };
+
+  /** Install a `fetch` stub that rejects, simulating a network failure. */
+  const stubFetchReject = (message: string) => {
+    vi.stubGlobal(
+      "fetch",
+      vi.fn(() => Promise.reject(new Error(message))),
+    );
+  };
+
+  beforeEach(() => {
+    lastUrl = undefined;
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it("builds the /<apiKey>/latest/USD URL and inverts USD->X quotes to X->USD with FX precision", async () => {
+    stubFetchJson(200, {
+      base_code: "USD",
+      conversion_rates: { EUR: 0.5, USD: 1 },
+      result: "success",
+      time_last_update_unix: 1_700_000_000,
+    });
+
+    const fetcher = createExchangeRateApiFxRateFetcher({
+      apiKey: "test/key",
+      // Trailing slash is intentional: the fetcher must trim it when building the URL.
+      baseUrl: "https://example.test/v6/",
+    });
+    const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+
+    // URL: trailing slash trimmed, apiKey url-encoded, `/latest/USD` appended.
+    expect(lastUrl).toBe("https://example.test/v6/test%2Fkey/latest/USD");
+
+    const eur = rates.find((rate) => rate.currency === "EUR");
+    const usd = rates.find((rate) => rate.currency === "USD");
+    // 1 USD buys 0.5 EUR per quote => EUR->USD = 1/0.5 = 2.0.
+    expect(eur?.rate).toBe(Math.round(2 * FX_RATE_PRECISION));
+    // USD maps to the identity rate, not 1/1 via inversion of its own quote.
+    expect(usd?.rate).toBe(FX_RATE_PRECISION);
+    // asOfDate is the upstream timestamp truncated to midnight UTC.
+    expect(eur?.asOfDate.getTime()).toBe(new Date(Date.UTC(2023, 10, 14)).getTime());
+    expect(eur?.source).toBe("exchange-rate-api:latest:1700000000");
+  });
+
+  it("skips zero, negative and non-number quotes so they never poison the cache", async () => {
+    stubFetchJson(200, {
+      base_code: "USD",
+      conversion_rates: { AAA: 0, BBB: -2, CCC: 4, DDD: "bad" },
+      result: "success",
+      time_last_update_unix: 1_700_000_000,
+    });
+
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+    const codes = rates.map((rate) => rate.currency);
+
+    expect(codes).toContain("CCC");
+    expect(codes).not.toContain("AAA"); // zero quote skipped
+    expect(codes).not.toContain("BBB"); // negative quote skipped
+    expect(codes).not.toContain("DDD"); // non-number quote skipped
+    expect(rates.find((rate) => rate.currency === "CCC")?.rate).toBe(
+      Math.round((1 / 4) * FX_RATE_PRECISION),
+    );
+  });
+
+  it("maps an upstream error response to FxRateServiceError carrying the error type", async () => {
+    stubFetchJson(200, { "error-type": "invalid-key", result: "error" });
+
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    const error = await Effect.runPromise(Effect.flip(fetcher.fetchLatestUsdRates()));
+    expect(error).toBeInstanceOf(FxRateServiceError);
+    if (error instanceof FxRateServiceError) {
+      expect(error.cause).toContain("invalid-key");
+    }
+  });
+
+  it("maps a non-200 HTTP response to FxRateServiceError", async () => {
+    stubFetchJson(503, { result: "error" });
+
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    const error = await Effect.runPromise(Effect.flip(fetcher.fetchLatestUsdRates()));
+    expect(error).toBeInstanceOf(FxRateServiceError);
+    if (error instanceof FxRateServiceError) {
+      expect(error.cause).toContain("503");
+    }
+  });
+
+  it("maps a network/fetch failure to FxRateServiceError carrying the cause message", async () => {
+    stubFetchReject("connection refused");
+
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    const error = await Effect.runPromise(Effect.flip(fetcher.fetchLatestUsdRates()));
+    expect(error).toBeInstanceOf(FxRateServiceError);
+    if (error instanceof FxRateServiceError) {
+      expect(error.cause).toContain("ExchangeRate API fetch failed");
+      expect(error.cause).toContain("connection refused");
+    }
+  });
+});
diff --git a/packages/core/test/services/fxRates/exchange-rate-api-fetcher.test.ts b/packages/core/test/services/fxRates/exchange-rate-api-fetcher.test.ts
new file mode 100644
index 000000000..a5e058e34
--- /dev/null
+++ b/packages/core/test/services/fxRates/exchange-rate-api-fetcher.test.ts
@@ -0,0 +1,290 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import { FX_RATE_PRECISION, type FxRateLookup } from "../../../src/domain/fxRate/FxRate.ts";
+import { FxRateServiceError } from "../../../src/services/fxRates/FxRateService.ts";
+import { createExchangeRateApiFxRateFetcher } from "../../../src/services/fxRates/exchange-rate-api-fetcher.ts";
+
+/**
+ * `invertRatesToUsdBase` and the URL/`asOfDate`/`sourceLabel` derivation are
+ * module-private; they are exercised through the only public export,
+ * {@link createExchangeRateApiFxRateFetcher}, by stubbing the runtime's global
+ * `fetch`. The fetcher uses `globalThis.fetch` directly (no Effect
+ * `HttpClient`), so a per-test stub of that platform seam is the unit-level
+ * way to drive the success / error / network-failure branches.
+ */
+
+/** A minimal `Response`-shaped object good enough for the fetcher's reads. */
+const jsonResponse = (body: unknown, init?: { readonly ok?: boolean; readonly status?: number }) =>
+  ({
+    json: () => Promise.resolve(body),
+    ok: init?.ok ?? true,
+    status: init?.status ?? 200,
+  }) as unknown as Response;
+
+/**
+ * Installs a recording `fetch` stub for the duration of `run`, capturing the
+ * URL it was called with, and always restores the original `fetch` after.
+ */
+const withFetch = async <A>(
+  impl: (url: string) => Response | Promise<Response>,
+  run: (captured: { url: string | undefined }) => Promise<A>,
+): Promise<A> => {
+  const original = globalThis.fetch;
+  const captured: { url: string | undefined } = { url: undefined };
+  globalThis.fetch = ((input: string) => {
+    captured.url = String(input);
+    return Promise.resolve(impl(captured.url));
+  }) as typeof fetch;
+  try {
+    return await run(captured);
+  } finally {
+    globalThis.fetch = original;
+  }
+};
+
+const SUCCESS_TIMESTAMP = 1_700_000_000; // unix seconds
+
+const successBody = (conversionRates: Record<string, number>) => ({
+  base_code: "USD",
+  conversion_rates: conversionRates,
+  result: "success" as const,
+  time_last_update_unix: SUCCESS_TIMESTAMP,
+});
+
+/** Index the inverted rates by currency for terse assertions. */
+const byCurrency = (rates: ReadonlyArray<FxRateLookup>): Record<string, FxRateLookup> =>
+  Object.fromEntries(rates.map((r) => [r.currency, r]));
+
+describe("createExchangeRateApiFxRateFetcher — URL construction", () => {
+  it("builds baseUrl + url-encoded apiKey + /latest/USD", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({
+      apiKey: "abc123",
+      baseUrl: "https://example.com/v6",
+    });
+    await withFetch(
+      () => jsonResponse(successBody({})),
+      async (captured) => {
+        await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(captured.url).toBe("https://example.com/v6/abc123/latest/USD");
+      },
+    );
+  });
+
+  it("trims trailing slashes from baseUrl", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({
+      apiKey: "key",
+      baseUrl: "https://example.com/v6///",
+    });
+    await withFetch(
+      () => jsonResponse(successBody({})),
+      async (captured) => {
+        await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(captured.url).toBe("https://example.com/v6/key/latest/USD");
+      },
+    );
+  });
+
+  it("falls back to the default exchangerate-api baseUrl when none is given", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "key" });
+    await withFetch(
+      () => jsonResponse(successBody({})),
+      async (captured) => {
+        await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(captured.url).toBe("https://v6.exchangerate-api.com/v6/key/latest/USD");
+      },
+    );
+  });
+
+  it("url-encodes an apiKey containing reserved characters", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({
+      apiKey: "a b/c?d",
+      baseUrl: "https://example.com/v6",
+    });
+    await withFetch(
+      () => jsonResponse(successBody({})),
+      async (captured) => {
+        await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(captured.url).toBe("https://example.com/v6/a%20b%2Fc%3Fd/latest/USD");
+      },
+    );
+  });
+});
+
+describe("createExchangeRateApiFxRateFetcher — rate inversion (success path)", () => {
+  it("inverts USD→X quotes to X→USD rates scaled by FX_RATE_PRECISION", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse(successBody({ EUR: 2 })), // 1 USD = 2 EUR ⇒ 1 EUR = 0.5 USD
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        const eur = byCurrency(rates).EUR;
+        expect(eur).toBeDefined();
+        expect(eur?.rate).toBe(0.5 * FX_RATE_PRECISION);
+      },
+    );
+  });
+
+  it("rounds the scaled rate to the nearest integer", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    // 1 USD = 3 X ⇒ 1 X = 0.333333… USD ⇒ round(333333.33…) = 333333
+    await withFetch(
+      () => jsonResponse(successBody({ XAF: 3 })),
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(byCurrency(rates).XAF?.rate).toBe(Math.round((1 / 3) * FX_RATE_PRECISION));
+      },
+    );
+  });
+
+  it("emits USD as the identity rate (1.0 × FX_RATE_PRECISION)", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse(successBody({ USD: 1 })),
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(byCurrency(rates).USD?.rate).toBe(FX_RATE_PRECISION);
+      },
+    );
+  });
+
+  it("uppercases the currency code", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse(successBody({ gbp: 0.8 })),
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(rates.map((r) => r.currency)).toContain("GBP");
+        expect(rates.map((r) => r.currency)).not.toContain("gbp");
+      },
+    );
+  });
+
+  it("skips zero, negative and non-finite quotes so a bad entry can't poison the cache", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () =>
+        jsonResponse(
+          successBody({
+            EUR: 2, // valid → kept
+            INF: Number.POSITIVE_INFINITY,
+            NAN: Number.NaN,
+            NEG: -1,
+            ZERO: 0,
+          }),
+        ),
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        const codes = rates.map((r) => r.currency);
+        expect(codes).toEqual(["EUR"]);
+      },
+    );
+  });
+
+  it("skips non-numeric entries in conversion_rates", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      // A provider response with a stray string value — must be dropped.
+      () => jsonResponse(successBody({ BAD: "oops" as unknown as number, EUR: 2 })),
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(rates.map((r) => r.currency)).toEqual(["EUR"]);
+      },
+    );
+  });
+
+  it("derives asOfDate from time_last_update_unix (×1000, truncated to UTC day)", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse(successBody({ EUR: 2 })),
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        const ms = SUCCESS_TIMESTAMP * 1000;
+        const d = new Date(ms);
+        const expected = new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate()));
+        expect(byCurrency(rates).EUR?.asOfDate.getTime()).toBe(expected.getTime());
+        // truncated to midnight UTC
+        const actual = byCurrency(rates).EUR?.asOfDate;
+        expect(actual?.getUTCHours()).toBe(0);
+        expect(actual?.getUTCMinutes()).toBe(0);
+        expect(actual?.getUTCSeconds()).toBe(0);
+      },
+    );
+  });
+
+  it("stamps a source label of exchange-rate-api:latest:<unix>", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse(successBody({ EUR: 2 })),
+      async () => {
+        const rates = await Effect.runPromise(fetcher.fetchLatestUsdRates());
+        expect(byCurrency(rates).EUR?.source).toBe(`exchange-rate-api:latest:${SUCCESS_TIMESTAMP}`);
+      },
+    );
+  });
+});
+
+describe("createExchangeRateApiFxRateFetcher — failure paths", () => {
+  it("fails with FxRateServiceError carrying the error-type on a provider error", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse({ "error-type": "invalid-key", result: "error" }),
+      async () => {
+        // `Effect.flip` moves the typed error into the success channel.
+        const error = await Effect.runPromise(fetcher.fetchLatestUsdRates().pipe(Effect.flip));
+        expect(error).toBeInstanceOf(FxRateServiceError);
+        expect(error.cause).toContain("invalid-key");
+      },
+    );
+  });
+
+  it("tolerates the snake_case error_type variant", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse({ error_type: "quota-reached", result: "error" }),
+      async () => {
+        const error = await Effect.runPromise(fetcher.fetchLatestUsdRates().pipe(Effect.flip));
+        expect(error).toBeInstanceOf(FxRateServiceError);
+        expect(error.cause).toContain("quota-reached");
+      },
+    );
+  });
+
+  it("reports 'unknown' when a provider error carries no error type", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse({ result: "error" }),
+      async () => {
+        const error = await Effect.runPromise(fetcher.fetchLatestUsdRates().pipe(Effect.flip));
+        expect(error).toBeInstanceOf(FxRateServiceError);
+        expect(error.cause).toContain("unknown");
+      },
+    );
+  });
+
+  it("fails with FxRateServiceError on a non-200 HTTP response", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => jsonResponse({}, { ok: false, status: 429 }),
+      async () => {
+        const error = await Effect.runPromise(fetcher.fetchLatestUsdRates().pipe(Effect.flip));
+        expect(error).toBeInstanceOf(FxRateServiceError);
+        expect(error.cause).toContain("429");
+      },
+    );
+  });
+
+  it("wraps a network failure (fetch rejects) into FxRateServiceError with the message", async () => {
+    const fetcher = createExchangeRateApiFxRateFetcher({ apiKey: "k" });
+    await withFetch(
+      () => {
+        throw new Error("ECONNREFUSED");
+      },
+      async () => {
+        const error = await Effect.runPromise(fetcher.fetchLatestUsdRates().pipe(Effect.flip));
+        expect(error).toBeInstanceOf(FxRateServiceError);
+        expect(error.cause).toContain("ECONNREFUSED");
+      },
+    );
+  });
+});
diff --git a/packages/core/test/services/internalFeatureFlags/InternalFeatureFlagService.test.ts b/packages/core/test/services/internalFeatureFlags/InternalFeatureFlagService.test.ts
new file mode 100644
index 000000000..2dad6935e
--- /dev/null
+++ b/packages/core/test/services/internalFeatureFlags/InternalFeatureFlagService.test.ts
@@ -0,0 +1,69 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { INTERNAL_FEATURE_FLAG_LIST } from "@voidhash/rpc";
+
+import {
+  enabledKeysFromOverrides,
+  resolveInternalFeatureFlagList,
+} from "../../../src/services/internalFeatureFlags/InternalFeatureFlagService.ts";
+
+/**
+ * Pure resolution logic of `InternalFeatureFlagService` — the `override ??
+ * defaultEnabled` rule and the catalog projection — driven directly off the
+ * code registry so the assertions track whatever flags exist. The DB-backed
+ * methods are exercised by the integration suite.
+ */
+
+const allKeys = INTERNAL_FEATURE_FLAG_LIST.map((flag) => flag.key);
+const defaultEnabledKeys = INTERNAL_FEATURE_FLAG_LIST.filter((flag) => flag.defaultEnabled).map(
+  (flag) => flag.key,
+);
+
+describe("enabledKeysFromOverrides", () => {
+  it("falls back to the code defaults when there are no overrides", () => {
+    expect(enabledKeysFromOverrides(new Map()).sort()).toEqual([...defaultEnabledKeys].sort());
+  });
+
+  it("enables every flag when each is overridden to true", () => {
+    const overrides = new Map(allKeys.map((key) => [key, true] as const));
+    expect(enabledKeysFromOverrides(overrides).sort()).toEqual([...allKeys].sort());
+  });
+
+  it("disables every flag when each is overridden to false", () => {
+    const overrides = new Map(allKeys.map((key) => [key, false] as const));
+    expect(enabledKeysFromOverrides(overrides)).toEqual([]);
+  });
+
+  it("ignores override rows whose key is not in the registry", () => {
+    const overrides = new Map<string, boolean>([["totally_unknown_flag", true]]);
+    expect(enabledKeysFromOverrides(overrides).sort()).toEqual([...defaultEnabledKeys].sort());
+  });
+});
+
+describe("resolveInternalFeatureFlagList", () => {
+  it("returns one entry per registry flag", () => {
+    expect(
+      resolveInternalFeatureFlagList(new Map())
+        .map((f) => f.key)
+        .sort(),
+    ).toEqual([...allKeys].sort());
+  });
+
+  it("reports override = null and enabled = default when not overridden", () => {
+    for (const resolved of resolveInternalFeatureFlagList(new Map())) {
+      expect(resolved.override).toBeNull();
+      expect(resolved.enabled).toBe(resolved.defaultEnabled);
+    }
+  });
+
+  it("reflects an explicit override (including false on a default-off flag)", () => {
+    const someKey = allKeys[0];
+    if (someKey === undefined) {
+      return; // no flags defined — nothing to assert
+    }
+    const resolved = resolveInternalFeatureFlagList(new Map([[someKey, false]]));
+    const entry = resolved.find((f) => f.key === someKey);
+    expect(entry?.override).toBe(false);
+    expect(entry?.enabled).toBe(false);
+  });
+});
diff --git a/packages/core/test/services/notifications/jwt-sign.test.ts b/packages/core/test/services/notifications/jwt-sign.test.ts
new file mode 100644
index 000000000..eea42e3be
--- /dev/null
+++ b/packages/core/test/services/notifications/jwt-sign.test.ts
@@ -0,0 +1,104 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import { signJwtEs256, signJwtRs256 } from "../../../src/utils/crypto/jwt-sign.ts";
+
+/**
+ * Round-trip coverage of the WebCrypto JWT signers used for FCM (RS256) and APNs
+ * (ES256): generate a real key pair, sign a JWT with the exported PKCS#8 PEM, and
+ * verify the signature with the matching public key. This proves the signing
+ * input, base64url encoding, and PEM→DER import are all correct end-to-end.
+ */
+
+const bytesToBase64Url = (bytes: Uint8Array): string => {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+};
+
+const base64UrlToBytes = (value: string): Uint8Array => {
+  const padded = value
+    .replace(/-/g, "+")
+    .replace(/_/g, "/")
+    .padEnd(Math.ceil(value.length / 4) * 4, "=");
+  const binary = atob(padded);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+};
+
+const derToPem = (der: ArrayBuffer): string => {
+  const base64 = btoa(String.fromCharCode(...new Uint8Array(der)));
+  const lines = base64.match(/.{1,64}/g) ?? [];
+  return `-----BEGIN PRIVATE KEY-----\n${lines.join("\n")}\n-----END PRIVATE KEY-----`;
+};
+
+const decodeSegment = (segment: string): Record<string, unknown> =>
+  JSON.parse(new TextDecoder().decode(base64UrlToBytes(segment)));
+
+describe("signJwtRs256", () => {
+  it("produces a JWT the matching RSA public key verifies", async () => {
+    const keyPair = await crypto.subtle.generateKey(
+      {
+        name: "RSASSA-PKCS1-v1_5",
+        modulusLength: 2048,
+        publicExponent: new Uint8Array([1, 0, 1]),
+        hash: "SHA-256",
+      },
+      true,
+      ["sign", "verify"],
+    );
+    const pem = derToPem(await crypto.subtle.exportKey("pkcs8", keyPair.privateKey));
+
+    const jwt = await Effect.runPromise(
+      signJwtRs256({ iss: "svc@project.iam", scope: "fcm", iat: 100, exp: 3700 }, pem),
+    );
+    const [headerB64, payloadB64, signatureB64] = jwt.split(".");
+    expect(headerB64 && payloadB64 && signatureB64).toBeTruthy();
+
+    expect(decodeSegment(headerB64!)).toMatchObject({ alg: "RS256", typ: "JWT" });
+    expect(decodeSegment(payloadB64!)).toMatchObject({ iss: "svc@project.iam", iat: 100 });
+
+    const verified = await crypto.subtle.verify(
+      "RSASSA-PKCS1-v1_5",
+      keyPair.publicKey,
+      base64UrlToBytes(signatureB64!) as BufferSource,
+      new TextEncoder().encode(`${headerB64}.${payloadB64}`) as BufferSource,
+    );
+    expect(verified).toBe(true);
+    void bytesToBase64Url;
+  });
+
+  it("fails with JwtSigningError on a malformed PEM", async () => {
+    const error = await Effect.runPromise(
+      signJwtRs256({ iss: "x" }, "not-a-pem").pipe(Effect.flip),
+    );
+    expect(error._tag).toBe("JwtSigningError");
+  });
+});
+
+describe("signJwtEs256", () => {
+  it("produces a JWT the matching P-256 public key verifies, with kid in the header", async () => {
+    const keyPair = await crypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, true, [
+      "sign",
+      "verify",
+    ]);
+    const pem = derToPem(await crypto.subtle.exportKey("pkcs8", keyPair.privateKey));
+
+    const jwt = await Effect.runPromise(
+      signJwtEs256("KEY123456", { iss: "TEAM123456", iat: 42 }, pem),
+    );
+    const [headerB64, payloadB64, signatureB64] = jwt.split(".");
+
+    expect(decodeSegment(headerB64!)).toMatchObject({ alg: "ES256", kid: "KEY123456", typ: "JWT" });
+    expect(decodeSegment(payloadB64!)).toMatchObject({ iss: "TEAM123456", iat: 42 });
+
+    const verified = await crypto.subtle.verify(
+      { name: "ECDSA", hash: "SHA-256" },
+      keyPair.publicKey,
+      base64UrlToBytes(signatureB64!) as BufferSource,
+      new TextEncoder().encode(`${headerB64}.${payloadB64}`) as BufferSource,
+    );
+    expect(verified).toBe(true);
+  });
+});
diff --git a/packages/core/test/services/notifications/push-delivery-classification.test.ts b/packages/core/test/services/notifications/push-delivery-classification.test.ts
new file mode 100644
index 000000000..5e1a4cb84
--- /dev/null
+++ b/packages/core/test/services/notifications/push-delivery-classification.test.ts
@@ -0,0 +1,184 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import {
+  buildFcmMessage,
+  classifyFcmResult,
+} from "../../../src/services/notifications/FirebaseCloudMessagingService.ts";
+import {
+  buildApnsPayload,
+  classifyApnsResult,
+} from "../../../src/services/notifications/ApplePushNotificationService.ts";
+import type {
+  PushDeliveryError,
+  PushDeliverySuccess,
+} from "../../../src/services/notifications/push-delivery-provider.ts";
+import { nextPushDeliveryDelaySeconds } from "../../../src/services/notifications/PushDeliveryService.ts";
+
+/** Run a classify Effect to its success value (throws if it failed). */
+const classifiedSuccess = (effect: Effect.Effect<PushDeliverySuccess, PushDeliveryError>) =>
+  Effect.runSync(effect);
+/** Run a classify Effect to its tagged error (throws if it succeeded). */
+const classifiedError = (effect: Effect.Effect<PushDeliverySuccess, PushDeliveryError>) =>
+  Effect.runSync(Effect.flip(effect));
+
+/**
+ * Pure coverage of the load-bearing classification/mapping logic. Misclassifying
+ * an error is unforgiving (terminal-as-retryable burns quota on dead tokens;
+ * transient-as-terminal silently deletes live devices), so every normalized
+ * outcome is pinned here.
+ */
+
+describe("buildFcmMessage", () => {
+  it("maps the unified message onto FCM v1 fields, stringifying data values", () => {
+    const body = buildFcmMessage(
+      "fcm-token-1",
+      {
+        title: "Hi",
+        body: "There",
+        data: { count: 3, tag: "promo" },
+        priority: "high",
+        sound: "ping",
+        badge: 2,
+        collapseId: "c1",
+        channelId: "default",
+      },
+      { androidTtl: "3600s", apnsPriority: "10" },
+    ) as { message: Record<string, unknown> };
+
+    const message = body.message;
+    expect(message.token).toBe("fcm-token-1");
+    expect(message.notification).toEqual({ title: "Hi", body: "There" });
+    // FCM rejects non-string data values.
+    expect(message.data).toEqual({ count: "3", tag: "promo" });
+    const android = message.android as Record<string, unknown>;
+    expect(android.priority).toBe("HIGH");
+    expect(android.ttl).toBe("3600s");
+    expect(android.collapse_key).toBe("c1");
+    const apns = message.apns as {
+      headers: Record<string, string>;
+      payload: { aps: Record<string, unknown> };
+    };
+    expect(apns.headers["apns-priority"]).toBe("10");
+    expect(apns.headers["apns-collapse-id"]).toBe("c1");
+    expect(apns.payload.aps).toMatchObject({
+      alert: { title: "Hi", body: "There" },
+      sound: "ping",
+      badge: 2,
+    });
+  });
+
+  it("defaults android priority to NORMAL and omits data when absent", () => {
+    const body = buildFcmMessage("t", { title: "a", body: "b" }, {}) as {
+      message: Record<string, unknown>;
+    };
+    expect((body.message.android as Record<string, unknown>).priority).toBe("NORMAL");
+    expect(body.message.data).toBeUndefined();
+  });
+});
+
+describe("classifyFcmResult", () => {
+  it("treats 2xx as success and extracts the message name", () => {
+    const result = classifiedSuccess(
+      classifyFcmResult(200, JSON.stringify({ name: "projects/p/messages/123" })),
+    );
+    expect(result.statusCode).toBe(200);
+    expect(result.providerMessageId).toBe("projects/p/messages/123");
+  });
+
+  it("maps FCM error codes to the normalized tagged errors", () => {
+    const cases: ReadonlyArray<[number, string, string]> = [
+      [404, "UNREGISTERED", "PushUnregisteredError"],
+      [400, "INVALID_ARGUMENT", "PushBadTokenError"],
+      [403, "SENDER_ID_MISMATCH", "PushBadTokenError"],
+      [429, "QUOTA_EXCEEDED", "PushRateExceededError"],
+      [401, "THIRD_PARTY_AUTH_ERROR", "PushInvalidCredentialsError"],
+      [503, "UNAVAILABLE", "PushTransientError"],
+      [500, "INTERNAL", "PushTransientError"],
+    ];
+    for (const [status, code, expectedTag] of cases) {
+      const error = classifiedError(
+        classifyFcmResult(
+          status,
+          JSON.stringify({ error: { status: code, details: [{ errorCode: code }] } }),
+        ),
+      );
+      expect(error._tag).toBe(expectedTag);
+      expect(error.statusCode).toBe(status);
+    }
+  });
+
+  it("falls back on HTTP status when no error code is present", () => {
+    expect(classifiedError(classifyFcmResult(503, ""))._tag).toBe("PushTransientError");
+    expect(classifiedError(classifyFcmResult(404, ""))._tag).toBe("PushUnregisteredError");
+    expect(classifiedError(classifyFcmResult(429, ""))._tag).toBe("PushRateExceededError");
+  });
+
+  it("propagates an explicit Retry-After onto the retryable error", () => {
+    const error = classifiedError(
+      classifyFcmResult(429, JSON.stringify({ error: { status: "QUOTA_EXCEEDED" } }), 120),
+    );
+    expect(error._tag).toBe("PushRateExceededError");
+    expect((error as { retryAfterSeconds?: number }).retryAfterSeconds).toBe(120);
+  });
+});
+
+describe("buildApnsPayload", () => {
+  it("nests aps and merges custom data at the top level", () => {
+    const payload = buildApnsPayload({
+      title: "t",
+      body: "b",
+      sound: "default",
+      badge: 5,
+      data: { deep: "link" },
+    });
+    expect(payload.aps).toMatchObject({
+      alert: { title: "t", body: "b" },
+      sound: "default",
+      badge: 5,
+    });
+    expect(payload.deep).toBe("link");
+  });
+});
+
+describe("classifyApnsResult", () => {
+  it("maps APNs reasons and statuses to the normalized tagged errors", () => {
+    expect(classifiedSuccess(classifyApnsResult(200, "", "apns-id-1"))).toMatchObject({
+      statusCode: 200,
+      providerMessageId: "apns-id-1",
+    });
+    expect(
+      classifiedError(classifyApnsResult(410, JSON.stringify({ reason: "Unregistered" })))._tag,
+    ).toBe("PushUnregisteredError");
+    expect(
+      classifiedError(classifyApnsResult(400, JSON.stringify({ reason: "BadDeviceToken" })))._tag,
+    ).toBe("PushBadTokenError");
+    expect(
+      classifiedError(classifyApnsResult(403, JSON.stringify({ reason: "ExpiredProviderToken" })))
+        ._tag,
+    ).toBe("PushInvalidCredentialsError");
+    expect(
+      classifiedError(classifyApnsResult(413, JSON.stringify({ reason: "PayloadTooLarge" })))._tag,
+    ).toBe("PushPayloadTooLargeError");
+    expect(
+      classifiedError(classifyApnsResult(429, JSON.stringify({ reason: "TooManyRequests" })))._tag,
+    ).toBe("PushRateExceededError");
+    expect(classifiedError(classifyApnsResult(503, ""))._tag).toBe("PushTransientError");
+  });
+});
+
+describe("nextPushDeliveryDelaySeconds", () => {
+  it("follows the [10s,30s,5min,30min,2hr] schedule, clamped to the last step", () => {
+    expect(nextPushDeliveryDelaySeconds(1)).toBe(10);
+    expect(nextPushDeliveryDelaySeconds(2)).toBe(30);
+    expect(nextPushDeliveryDelaySeconds(3)).toBe(300);
+    expect(nextPushDeliveryDelaySeconds(4)).toBe(1800);
+    expect(nextPushDeliveryDelaySeconds(5)).toBe(7200);
+    expect(nextPushDeliveryDelaySeconds(99)).toBe(7200);
+  });
+
+  it("honors an explicit provider Retry-After over the schedule", () => {
+    expect(nextPushDeliveryDelaySeconds(1, 45)).toBe(45);
+    expect(nextPushDeliveryDelaySeconds(5, 0)).toBe(0);
+  });
+});
diff --git a/packages/core/test/services/notifications/push-providers.test.ts b/packages/core/test/services/notifications/push-providers.test.ts
new file mode 100644
index 000000000..0c0f77d5e
--- /dev/null
+++ b/packages/core/test/services/notifications/push-providers.test.ts
@@ -0,0 +1,165 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import type { PaymentConfigSecretCrypto } from "../../../src/utils/crypto/PaymentConfigSecretCrypto.ts";
+import { makeApplePushNotificationProvider } from "../../../src/services/notifications/ApplePushNotificationService.ts";
+import { makeFirebaseCloudMessagingProvider } from "../../../src/services/notifications/FirebaseCloudMessagingService.ts";
+
+/**
+ * Pure unit coverage of the load-bearing secret behaviour of the two push
+ * delivery-provider config adapters: encrypt-on-write, the secret-OMITTING read
+ * DTO (no secret-bearing key ever leaves the boundary), `pushProviderKey`
+ * derivation, validation, and the fail-closed `hasPlaintextSecret` gate
+ * primitive. The full service-level `PUSH_REQUIRE_ENCRYPTION` gate and the
+ * register/ownership flows are exercised by the integration tier (real DB).
+ */
+
+const ENC_PREFIX = "v1.aesgcm:";
+
+/**
+ * A stub of {@link PaymentConfigSecretCrypto}: `noop` mirrors an unset
+ * `ENCRYPTION_KEY` (plaintext passes through); `encrypt` mirrors a configured
+ * key (non-empty plaintext gets the `v1.aesgcm:` prefix, idempotently).
+ */
+const makeCrypto = (mode: "noop" | "encrypt") =>
+  ({
+    encrypt: (plaintext: string) =>
+      Effect.succeed(
+        mode === "noop" || plaintext.length === 0 || plaintext.startsWith(ENC_PREFIX)
+          ? plaintext
+          : `${ENC_PREFIX}${plaintext}`,
+      ),
+    decrypt: (value: string) => Effect.succeed(value),
+  }) as unknown as typeof PaymentConfigSecretCrypto.Service;
+
+describe("FirebaseCloudMessagingService config adapter", () => {
+  const validConfig = {
+    projectId: "my-fcm-project",
+    serviceAccountJson: '{"client_email":"x@y.iam","private_key":"-----BEGIN-----"}',
+    androidPriority: "high",
+  };
+
+  it("encrypts the service-account JSON on write and derives pushProviderKey = projectId", async () => {
+    const provider = makeFirebaseCloudMessagingProvider(makeCrypto("encrypt"));
+    const result = await Effect.runPromise(provider.validateGlobalConfiguration(validConfig));
+    expect(result.pushProviderKey).toBe("my-fcm-project");
+    expect(String(result.parsedConfiguration.serviceAccountJson).startsWith(ENC_PREFIX)).toBe(true);
+  });
+
+  it("leaves the secret plaintext when crypto is a no-op (unset key)", async () => {
+    const provider = makeFirebaseCloudMessagingProvider(makeCrypto("noop"));
+    const result = await Effect.runPromise(provider.validateGlobalConfiguration(validConfig));
+    expect(result.parsedConfiguration.serviceAccountJson).toBe(validConfig.serviceAccountJson);
+    // hasPlaintextSecret is the fail-closed gate primitive: true iff a non-empty
+    // secret is still plaintext after the encrypt pass (i.e. no key set).
+    expect(provider.hasPlaintextSecret(result.parsedConfiguration)).toBe(true);
+  });
+
+  it("hasPlaintextSecret is false once the secret is encrypted, and false when absent", async () => {
+    const provider = makeFirebaseCloudMessagingProvider(makeCrypto("encrypt"));
+    const result = await Effect.runPromise(provider.validateGlobalConfiguration(validConfig));
+    expect(provider.hasPlaintextSecret(result.parsedConfiguration)).toBe(false);
+    expect(provider.hasPlaintextSecret({ projectId: "p", serviceAccountJson: "" })).toBe(false);
+  });
+
+  it("read DTO omits the secret and exposes only a presence flag", async () => {
+    const provider = makeFirebaseCloudMessagingProvider(makeCrypto("encrypt"));
+    const result = await Effect.runPromise(provider.validateGlobalConfiguration(validConfig));
+    const dto = provider.toReadDto(result.parsedConfiguration);
+    // The one deliberate deviation from the payment clone: NO secret-bearing key.
+    expect(Object.keys(dto)).not.toContain("serviceAccountJson");
+    expect(dto.hasServiceAccountJson).toBe(true);
+    expect(dto.projectId).toBe("my-fcm-project");
+    // Defence in depth: no value in the DTO leaks the ciphertext or plaintext.
+    expect(JSON.stringify(dto)).not.toContain("private_key");
+    expect(JSON.stringify(dto)).not.toContain(ENC_PREFIX);
+  });
+
+  it("rejects a configuration missing the FCM project id", async () => {
+    const provider = makeFirebaseCloudMessagingProvider(makeCrypto("encrypt"));
+    const error = await Effect.runPromise(
+      provider.validateGlobalConfiguration({ serviceAccountJson: "{}" }).pipe(Effect.flip),
+    );
+    expect(error._tag).toBe("NotificationConfigValidationError");
+  });
+
+  it("deliver NEVER defects: an unparseable service account FAILS with PushInvalidCredentialsError", async () => {
+    // Parse fails before any network call, so the failure must surface on the
+    // normalized error channel (a tagged error), never as a thrown defect.
+    const provider = makeFirebaseCloudMessagingProvider(makeCrypto("noop"));
+    const error = await Effect.runPromise(
+      Effect.flip(
+        provider.deliver(
+          { projectId: "p", serviceAccountJson: "not-valid-json" },
+          { platform: "android", platformToken: "tok" },
+          { title: "t", body: "b" },
+        ),
+      ),
+    );
+    expect(error._tag).toBe("PushInvalidCredentialsError");
+  });
+});
+
+describe("ApplePushNotificationService config adapter", () => {
+  const validConfig = {
+    teamId: "ABCDE12345",
+    keyId: "KEY123456",
+    privateKeyContent: "-----BEGIN PRIVATE KEY-----\nMIG...\n-----END PRIVATE KEY-----",
+    bundleId: "com.example.app",
+    environment: "sandbox",
+  };
+
+  it("encrypts the .p8 private key on write and derives pushProviderKey = bundleId", async () => {
+    const provider = makeApplePushNotificationProvider(makeCrypto("encrypt"), false);
+    const result = await Effect.runPromise(provider.validateGlobalConfiguration(validConfig));
+    expect(result.pushProviderKey).toBe("com.example.app");
+    expect(String(result.parsedConfiguration.privateKeyContent).startsWith(ENC_PREFIX)).toBe(true);
+  });
+
+  it("read DTO omits the private key and exposes only a presence flag + metadata", async () => {
+    const provider = makeApplePushNotificationProvider(makeCrypto("encrypt"), false);
+    const result = await Effect.runPromise(provider.validateGlobalConfiguration(validConfig));
+    const dto = provider.toReadDto(result.parsedConfiguration);
+    expect(Object.keys(dto)).not.toContain("privateKeyContent");
+    expect(dto.hasPrivateKey).toBe(true);
+    expect(dto.teamId).toBe("ABCDE12345");
+    expect(dto.bundleId).toBe("com.example.app");
+    expect(dto.environment).toBe("sandbox");
+    expect(JSON.stringify(dto)).not.toContain("BEGIN PRIVATE KEY");
+  });
+
+  it("hasPlaintextSecret tracks whether the .p8 is still plaintext", async () => {
+    const noop = makeApplePushNotificationProvider(makeCrypto("noop"), false);
+    const noopResult = await Effect.runPromise(noop.validateGlobalConfiguration(validConfig));
+    expect(noop.hasPlaintextSecret(noopResult.parsedConfiguration)).toBe(true);
+
+    const enc = makeApplePushNotificationProvider(makeCrypto("encrypt"), false);
+    const encResult = await Effect.runPromise(enc.validateGlobalConfiguration(validConfig));
+    expect(enc.hasPlaintextSecret(encResult.parsedConfiguration)).toBe(false);
+  });
+
+  it("rejects a malformed (non-10-char) Apple Team ID", async () => {
+    const provider = makeApplePushNotificationProvider(makeCrypto("encrypt"), false);
+    const error = await Effect.runPromise(
+      provider
+        .validateGlobalConfiguration({ ...validConfig, teamId: "TOOSHORT" })
+        .pipe(Effect.flip),
+    );
+    expect(error._tag).toBe("NotificationConfigValidationError");
+  });
+
+  it("config validation is NOT gated — APNs configs validate even though deliver is gated", async () => {
+    const provider = makeApplePushNotificationProvider(makeCrypto("encrypt"), false);
+    // deliver() FAILS with the routable PushNotImplementedError while gated.
+    const error = await Effect.runPromise(
+      Effect.flip(
+        provider.deliver(
+          validConfig,
+          { platform: "ios", platformToken: "abc" },
+          { title: "t", body: "b" },
+        ),
+      ),
+    );
+    expect(error._tag).toBe("PushNotImplementedError");
+  });
+});
diff --git a/packages/core/test/services/organizations/OrganizationBillingPort.test.ts b/packages/core/test/services/organizations/OrganizationBillingPort.test.ts
new file mode 100644
index 000000000..8c3c2d030
--- /dev/null
+++ b/packages/core/test/services/organizations/OrganizationBillingPort.test.ts
@@ -0,0 +1,13 @@
+import { Effect } from "effect";
+import { describe, it } from "vitest";
+
+import { OrganizationBillingPort } from "@voidhash/core/services/organizations/OrganizationBillingPort";
+
+describe("OrganizationBillingPort", () => {
+  it("does nothing when the Community layer is installed", async () => {
+    await Effect.gen(function* () {
+      const port = yield* OrganizationBillingPort;
+      yield* port.initializeOrganizationBilling({ organizationId: "org_community" });
+    }).pipe(Effect.provide(OrganizationBillingPort.noop), Effect.runPromise);
+  });
+});
diff --git a/packages/core/test/services/organizations/OrganizationMembershipSyncPort.test.ts b/packages/core/test/services/organizations/OrganizationMembershipSyncPort.test.ts
new file mode 100644
index 000000000..83ae3446c
--- /dev/null
+++ b/packages/core/test/services/organizations/OrganizationMembershipSyncPort.test.ts
@@ -0,0 +1,24 @@
+import { Db } from "@voidhash/db";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { OrganizationMembershipSyncPort } from "../../../src/services/organizations/OrganizationMembershipSyncPort.ts";
+
+describe("OrganizationMembershipSyncPort", () => {
+  it("does not import external memberships when the Community layer is installed", async () => {
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const sync = yield* OrganizationMembershipSyncPort;
+        return yield* sync.syncMemberships({
+          localUserId: "user_1",
+          workosUserId: "workos_user_1",
+        });
+      }).pipe(
+        Effect.provide(OrganizationMembershipSyncPort.noop),
+        Effect.provide(Layer.succeed(Db, {} as never)),
+      ),
+    );
+
+    expect(result).toEqual({ syncedMembershipIds: [], syncedOrganizationIds: [] });
+  });
+});
diff --git a/packages/core/test/services/organizations/OrganizationMembershipWebhookPort.test.ts b/packages/core/test/services/organizations/OrganizationMembershipWebhookPort.test.ts
new file mode 100644
index 000000000..6c6d2bda7
--- /dev/null
+++ b/packages/core/test/services/organizations/OrganizationMembershipWebhookPort.test.ts
@@ -0,0 +1,29 @@
+import { Db } from "@voidhash/db";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { OrganizationMembershipWebhookPort } from "../../../src/services/organizations/OrganizationMembershipWebhookPort.ts";
+
+describe("OrganizationMembershipWebhookPort", () => {
+  it("does not project multi-user membership events in Community composition", async () => {
+    await expect(
+      Effect.runPromise(
+        Effect.gen(function* () {
+          const projection = yield* OrganizationMembershipWebhookPort;
+          yield* projection.processEvent({
+            _tag: "Upsert",
+            membership: {
+              externalId: "workos_membership_1",
+              externalOrganizationId: "workos_organization_1",
+              externalUserId: "workos_user_1",
+              role: "member",
+            },
+          });
+        }).pipe(
+          Effect.provide(OrganizationMembershipWebhookPort.noop),
+          Effect.provide(Layer.succeed(Db, {} as never)),
+        ),
+      ),
+    ).resolves.toBeUndefined();
+  });
+});
diff --git a/packages/core/test/services/organizations/OrganizationService.integration.test.ts b/packages/core/test/services/organizations/OrganizationService.integration.test.ts
new file mode 100644
index 000000000..29af8e738
--- /dev/null
+++ b/packages/core/test/services/organizations/OrganizationService.integration.test.ts
@@ -0,0 +1,923 @@
+/**
+ * Integration tests for {@link OrganizationService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB; only the project schema cache is an in-memory stub).
+ *
+ * `OrganizationService` orchestrates WorkOS *and* the local DB: WorkOS is the
+ * source of truth and every write goes there first, then is mirrored to the
+ * `organization` / `member` tables. WorkOS itself is an external provider we
+ * cannot stand up in-process, so the tests provide a configurable fake
+ * {@link WorkosOrgPort} (the same provider-agnostic seam the app root wires a
+ * live `@workos-inc/node` adapter into) to drive successes and failures.
+ * Everything below the port — the DB writes, transactions, rollback
+ * compensation, slug uniqueness, and permission checks — runs against the
+ * *real* database, and each test asserts the persisted side effect rather than
+ * just the return value.
+ *
+ * `OrganizationBillingPort` is the optional extension seam; a recording stub
+ * stands in so the non-fatal provisioning step can be driven to succeed or
+ * fail.
+ *
+ * Conventions used throughout:
+ *  - Names/slugs/ids are unique per call so a leftover row from a crashed run
+ *    can never collide, and assertions are membership-based (by-id / by-slug),
+ *    never exact global counts.
+ *  - Every test that writes cleans up after itself via {@link withCleanup}:
+ *    organizations and members are deleted on exit, success or failure,
+ *    members first. The global teardown sweep does not touch the organization
+ *    aggregate, so self-cleanup is the only cleanup.
+ *  - Auth is always via {@link CoreAuthSession.authenticate}; permission /
+ *    "no user" paths re-authenticate just the call under test with a tailored
+ *    session that shadows the harness default.
+ *  - Typed failures are asserted with `Effect.flip` and narrowed with
+ *    `instanceof`, always paired with a DB-state assertion on the failure path.
+ *  - The fixture only seeds it_user/it_org/it_member/it_project, so throwaway
+ *    organizations are created with a raw insert (a unique `workosOrganizationId`
+ *    to dodge the unique index) when a test needs an org it may freely mutate
+ *    without disturbing the shared fixture org.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+
+import {
+  OrganizationBillingPort,
+  OrganizationBillingPortError,
+  OrganizationService,
+  OrganizationServiceError,
+  WorkosOrgPort,
+} from "@voidhash/core/services";
+import { OrganizationNotFoundError } from "@voidhash/core/domain/organization/Organization";
+import { WorkosOrgPortError } from "@voidhash/core/services/organizations/WorkosOrgPort";
+import type {
+  WorkosPortMembership,
+  WorkosPortOrganization,
+  WorkosPortUser,
+} from "@voidhash/core/services/organizations/WorkosOrgPort";
+import {
+  ActionForbiddenError,
+  type SecretKeySession,
+  type UserSession,
+} from "@voidhash/core/domain/auth/Auth";
+import { Db, eq, inArray, member, organization } from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+/** Monotonic counter so names/slugs stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueName = (label: string) => `IT Org ${label} ${Date.now()} ${seq++}`;
+const uniqueId = (label: string) => `it-${label}-${Date.now()}-${seq++}`;
+
+/** Slug `createSlug` produces for a name built by {@link uniqueName} (no blacklist hit). */
+const slugFor = (name: string) =>
+  name
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9_-]+/g, "-")
+    .replace(/-+/g, "-")
+    .replace(/^-|-$/g, "");
+
+// --- raw DB read-back helpers (bypass the service) -------------------------
+
+const findOrgRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.organization.findFirst({ where: { id } });
+  });
+
+const findOrgRowBySlug = (slug: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.organization.findFirst({ where: { slug } });
+  });
+
+const findMembersInOrg = (organizationId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.select().from(member).where(eq(member.organizationId, organizationId));
+  });
+
+// --- throwaway-row helpers --------------------------------------------------
+
+/** Insert a throwaway organization the test may freely mutate/delete. */
+const insertOrg = (input: {
+  id: string;
+  name: string;
+  slug: string;
+  workosOrganizationId: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(organization).values({
+      createdAt: new Date(),
+      id: input.id,
+      logo: null,
+      metadata: null,
+      name: input.name,
+      slug: input.slug,
+      workosOrganizationId: input.workosOrganizationId,
+    });
+  });
+
+/** Insert a throwaway member row pointing at the fixture user by default. */
+const insertMember = (input: {
+  id: string;
+  organizationId: string;
+  role: string;
+  workosMembershipId: string;
+  userId?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(member).values({
+      createdAt: new Date(),
+      id: input.id,
+      organizationId: input.organizationId,
+      role: input.role,
+      userId: input.userId ?? CoreTestFixture.userId,
+      workosMembershipId: input.workosMembershipId,
+    });
+  });
+
+// --- cleanup ----------------------------------------------------------------
+
+interface Tracked {
+  orgs: string[];
+  members: string[];
+}
+
+const cleanup = (tracked: Tracked) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (tracked.members.length > 0) {
+      yield* db
+        .delete(member)
+        .where(inArray(member.id, [...tracked.members]))
+        .pipe(Effect.ignore);
+    }
+    if (tracked.orgs.length > 0) {
+      // Deleting an org cascades its members; clear members by org first too.
+      yield* db
+        .delete(member)
+        .where(inArray(member.organizationId, [...tracked.orgs]))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(organization)
+        .where(inArray(organization.id, [...tracked.orgs]))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every org/member it tracks is removed afterward,
+ * regardless of how the test exits. The body pushes ids into the shared
+ * `track` record while it runs; cleanup reads it lazily at finalization via
+ * `Effect.ensuring`, so it sees everything tracked (including on failure).
+ */
+const withCleanup = <E, R>(
+  body: (track: Tracked) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const tracked: Tracked = { members: [], orgs: [] };
+  return body(tracked).pipe(Effect.ensuring(cleanup(tracked)));
+};
+
+// --- fake WorkosOrgPort -----------------------------------------------------
+
+/** Records every call the service makes against the port. */
+interface PortCalls {
+  createOrganization: Array<{ name: string; externalId: string }>;
+  updateOrganization: Array<{ workosOrganizationId: string; name?: string }>;
+  deleteOrganization: string[];
+  createMembership: Array<{
+    workosOrganizationId: string;
+    workosUserId: string;
+    roleSlug?: string;
+  }>;
+  listMembershipsForUser: string[];
+  updateMembershipRole: Array<{ workosMembershipId: string; roleSlug: string }>;
+  deleteMembership: string[];
+  findUserByEmail: string[];
+}
+
+interface FakePortConfig {
+  readonly onCreateOrganization?: (input: {
+    name: string;
+    externalId: string;
+  }) => Effect.Effect<WorkosPortOrganization, WorkosOrgPortError>;
+  readonly onUpdateOrganization?: () => Effect.Effect<WorkosPortOrganization, WorkosOrgPortError>;
+  readonly onCreateMembership?: (input: {
+    workosOrganizationId: string;
+    workosUserId: string;
+  }) => Effect.Effect<WorkosPortMembership, WorkosOrgPortError>;
+  readonly onDeleteMembership?: () => Effect.Effect<void, WorkosOrgPortError>;
+  readonly onUpdateMembershipRole?: () => Effect.Effect<WorkosPortMembership, WorkosOrgPortError>;
+  readonly findUserByEmail?: WorkosPortUser | null;
+  readonly listMembershipsForUser?: ReadonlyArray<WorkosPortMembership>;
+}
+
+const portError = (message: string) => new WorkosOrgPortError({ cause: "fake", message });
+
+interface FakePort {
+  readonly calls: PortCalls;
+  readonly layer: Layer.Layer<WorkosOrgPort>;
+}
+
+/**
+ * Build a fake {@link WorkosOrgPort} layer plus the call log it records into.
+ * Defaults are "everything succeeds"; pass overrides to inject failures or
+ * pre-existing WorkOS state. The returned `calls` object lets tests assert
+ * which port operations ran (e.g. that a rollback `deleteOrganization` fired).
+ */
+const makeFakePort = (config: FakePortConfig = {}): FakePort => {
+  const calls: PortCalls = {
+    createMembership: [],
+    createOrganization: [],
+    deleteMembership: [],
+    deleteOrganization: [],
+    findUserByEmail: [],
+    listMembershipsForUser: [],
+    updateMembershipRole: [],
+    updateOrganization: [],
+  };
+
+  let portSeq = 0;
+  const layer = Layer.succeed(WorkosOrgPort, {
+    createMembership: (input) => {
+      calls.createMembership.push(input);
+      if (config.onCreateMembership) return config.onCreateMembership(input);
+      return Effect.succeed({
+        id: `wm_${Date.now()}_${portSeq++}`,
+        organizationId: input.workosOrganizationId,
+        role: input.roleSlug ?? "member",
+        userId: input.workosUserId,
+      } satisfies WorkosPortMembership);
+    },
+    createOrganization: (input) => {
+      calls.createOrganization.push(input);
+      if (config.onCreateOrganization) return config.onCreateOrganization(input);
+      return Effect.succeed({
+        externalId: input.externalId,
+        id: `wo_${Date.now()}_${portSeq++}`,
+        name: input.name,
+      } satisfies WorkosPortOrganization);
+    },
+    deleteMembership: (workosMembershipId) => {
+      calls.deleteMembership.push(workosMembershipId);
+      if (config.onDeleteMembership) return config.onDeleteMembership();
+      return Effect.void;
+    },
+    deleteOrganization: (workosOrganizationId) => {
+      calls.deleteOrganization.push(workosOrganizationId);
+      return Effect.void;
+    },
+    findUserByEmail: (email) => {
+      calls.findUserByEmail.push(email);
+      return Effect.succeed(config.findUserByEmail ?? null);
+    },
+    getOrganization: (workosOrganizationId) =>
+      Effect.succeed({ externalId: null, id: workosOrganizationId, name: "fake" }),
+    getOrganizationByExternalId: () => Effect.succeed(null),
+    listMembershipsForUser: (workosUserId) => {
+      calls.listMembershipsForUser.push(workosUserId);
+      return Effect.succeed(config.listMembershipsForUser ?? []);
+    },
+    updateMembershipRole: (workosMembershipId, input) => {
+      calls.updateMembershipRole.push({ roleSlug: input.roleSlug, workosMembershipId });
+      if (config.onUpdateMembershipRole) return config.onUpdateMembershipRole();
+      return Effect.succeed({
+        id: workosMembershipId,
+        organizationId: "wo_x",
+        role: input.roleSlug,
+        userId: "wu_x",
+      } satisfies WorkosPortMembership);
+    },
+    updateOrganization: (input) => {
+      calls.updateOrganization.push(input);
+      if (config.onUpdateOrganization) return config.onUpdateOrganization();
+      return Effect.succeed({
+        externalId: null,
+        id: input.workosOrganizationId,
+        name: input.name ?? "fake",
+      } satisfies WorkosPortOrganization);
+    },
+  });
+
+  return { calls, layer };
+};
+
+// --- fake OrganizationBillingPort ------------------------------------------
+
+interface BillingCalls {
+  initializeOrganizationBilling: Array<{ organizationId: string; email?: string }>;
+}
+
+interface FakeBilling {
+  readonly calls: BillingCalls;
+  readonly layer: Layer.Layer<OrganizationBillingPort>;
+}
+
+const makeFakeBilling = (options: { fail?: boolean } = {}): FakeBilling => {
+  const calls: BillingCalls = { initializeOrganizationBilling: [] };
+  const layer = Layer.succeed(OrganizationBillingPort, {
+    initializeOrganizationBilling: (input) => {
+      calls.initializeOrganizationBilling.push(input);
+      if (options.fail) {
+        return Effect.fail(
+          new OrganizationBillingPortError({ cause: "fake", message: "billing init failed" }),
+        );
+      }
+      return Effect.void;
+    },
+  });
+  return { calls, layer };
+};
+
+// --- layer assembly ---------------------------------------------------------
+
+/**
+ * Provide `OrganizationService` plus its non-harness collaborators: the fake
+ * WorkOS port and a recording billing stub. Provided at the top-level test pipe so the body's
+ * `OrganizationService` requirement is fully discharged before the harness sees
+ * it (leaving only harness services in `R`).
+ */
+const orgServiceLayer = (port: FakePort, billing: FakeBilling) =>
+  Layer.mergeAll(
+    OrganizationService.layer.pipe(
+      Layer.provide(Layer.mergeAll(port.layer, billing.layer)),
+    ),
+    port.layer,
+    billing.layer,
+  );
+
+// --- session builders -------------------------------------------------------
+
+/** Full-permission user session carrying `organization:all` for the given org ids. */
+const userSessionWithOrgs = (
+  orgIds: ReadonlyArray<string>,
+  overrides: { workosUserId?: string | null } = {},
+): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: orgIds.map((id) => ({
+    id,
+    logo: null,
+    name: `org-${id}`,
+    permissions: ["organization:all"],
+    slug: `slug-${id}`,
+    workosOrganizationId: `wo-${id}`,
+  })),
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId:
+      overrides.workosUserId === undefined ? CoreTestFixture.workosUserId : overrides.workosUserId,
+  },
+});
+
+/** A user session with no organization access (forbidden-path principal). */
+const sessionWithoutOrgAccess = (): UserSession => userSessionWithOrgs([]);
+
+/** A secret-key session — `user` is null, so it cannot create organizations. */
+const secretKeySession = (): SecretKeySession => ({
+  cookie: null,
+  method: "secret-key",
+  name: "secret-key principal",
+  organizations: [],
+  person: null,
+  projects: [],
+  user: null,
+});
+
+/** Re-authenticate a single call with a tailored session (shadows the default). */
+const as =
+  (session: UserSession | SecretKeySession) =>
+  <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+    effect.pipe(CoreAuthSession.authenticate(session));
+
+// ---------------------------------------------------------------------------
+
+describe("OrganizationService.getOrganizationById", () => {
+  test(
+    "returns the org row for a caller with organization:all",
+    Effect.gen(function* () {
+      const svc = yield* OrganizationService;
+      const org = yield* svc
+        .getOrganizationById(CoreTestFixture.organizationId)
+        .pipe(as(userSessionWithOrgs([CoreTestFixture.organizationId])));
+      expect(org.id).toBe(CoreTestFixture.organizationId);
+      expect(org.slug).toBe(CoreTestFixture.organizationSlug);
+    }).pipe(
+      Effect.provide(orgServiceLayer(makeFakePort(), makeFakeBilling())),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with OrganizationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* OrganizationService;
+      const error = yield* Effect.flip(svc.getOrganizationById(`org_missing_${Date.now()}`));
+      expect(error).toBeInstanceOf(OrganizationNotFoundError);
+    }).pipe(
+      Effect.provide(orgServiceLayer(makeFakePort(), makeFakeBilling())),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "forbids a caller without organization:all",
+    Effect.gen(function* () {
+      const svc = yield* OrganizationService;
+      const error = yield* Effect.flip(
+        svc.getOrganizationById(CoreTestFixture.organizationId).pipe(as(sessionWithoutOrgAccess())),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(
+      Effect.provide(orgServiceLayer(makeFakePort(), makeFakeBilling())),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("OrganizationService.getOrganizationBySlug", () => {
+  test(
+    "returns the org row by slug for an authorized caller",
+    Effect.gen(function* () {
+      const svc = yield* OrganizationService;
+      const org = yield* svc
+        .getOrganizationBySlug(CoreTestFixture.organizationSlug)
+        .pipe(as(userSessionWithOrgs([CoreTestFixture.organizationId])));
+      expect(org.id).toBe(CoreTestFixture.organizationId);
+    }).pipe(
+      Effect.provide(orgServiceLayer(makeFakePort(), makeFakeBilling())),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with OrganizationNotFoundError for an unknown slug",
+    Effect.gen(function* () {
+      const svc = yield* OrganizationService;
+      const error = yield* Effect.flip(svc.getOrganizationBySlug(`it-missing-${Date.now()}`));
+      expect(error).toBeInstanceOf(OrganizationNotFoundError);
+    }).pipe(
+      Effect.provide(orgServiceLayer(makeFakePort(), makeFakeBilling())),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "forbids a caller without organization:all",
+    Effect.gen(function* () {
+      const svc = yield* OrganizationService;
+      const error = yield* Effect.flip(
+        svc
+          .getOrganizationBySlug(CoreTestFixture.organizationSlug)
+          .pipe(as(sessionWithoutOrgAccess())),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(
+      Effect.provide(orgServiceLayer(makeFakePort(), makeFakeBilling())),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("OrganizationService.createOrganization", () => {
+  test(
+    "creates the WorkOS org, local org + owner member, provisions billing, returns {id,name,slug}",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          const svc = yield* OrganizationService;
+          const name = uniqueName("create");
+
+          const created = yield* svc.createOrganization({ name });
+          track.orgs.push(created.id);
+
+          expect(created.id.startsWith("org_")).toBe(true);
+          expect(created.name).toBe(name);
+          expect(created.slug).toBe(slugFor(name));
+
+          // WorkOS create-then-mirror order: org and membership both created.
+          expect(port.calls.createOrganization.some((c) => c.externalId === created.id)).toBe(true);
+          expect(port.calls.createMembership.length).toBe(1);
+
+          const orgRow = yield* findOrgRow(created.id);
+          expect(orgRow?.name).toBe(name);
+          expect(orgRow?.slug).toBe(slugFor(name));
+          expect(orgRow?.workosOrganizationId).toBeDefined();
+
+          const members = yield* findMembersInOrg(created.id);
+          const owner = members.find((m) => m.userId === CoreTestFixture.userId);
+          expect(owner).toBeDefined();
+          expect(owner?.role).toBe("owner");
+
+          // Billing was invoked for the new org (non-fatal step, but it ran).
+          expect(
+            billing.calls.initializeOrganizationBilling.some(
+              (c) => c.organizationId === created.id,
+            ),
+          ).toBe(true);
+        }),
+      ).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "appends a short id when the base slug is in SLUG_BLACKLIST",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          const svc = yield* OrganizationService;
+          // "auth" is in SLUG_BLACKLIST, so the slug must be suffixed.
+          const created = yield* svc.createOrganization({ name: "auth" });
+          track.orgs.push(created.id);
+
+          expect(created.slug).not.toBe("auth");
+          expect(created.slug.startsWith("auth-")).toBe(true);
+
+          const orgRow = yield* findOrgRow(created.id);
+          expect(orgRow?.slug).toBe(created.slug);
+        }),
+      ).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "appends a short id when the base slug already exists in the DB",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          const svc = yield* OrganizationService;
+          const name = uniqueName("collide");
+
+          const first = yield* svc.createOrganization({ name });
+          track.orgs.push(first.id);
+          const second = yield* svc.createOrganization({ name });
+          track.orgs.push(second.id);
+
+          expect(first.slug).toBe(slugFor(name));
+          expect(second.slug).not.toBe(first.slug);
+          expect(second.slug.startsWith(slugFor(name))).toBe(true);
+
+          const firstRow = yield* findOrgRow(first.id);
+          const secondRow = yield* findOrgRow(second.id);
+          expect(firstRow?.slug).toBe(first.slug);
+          expect(secondRow?.slug).toBe(second.slug);
+        }),
+      ).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "fails with OrganizationServiceError when WorkOS createOrganization fails, writing no local rows",
+    (() => {
+      const port = makeFakePort({
+        onCreateOrganization: () => Effect.fail(portError("workos org create boom")),
+      });
+      const billing = makeFakeBilling();
+      const name = uniqueName("wos-fail");
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const error = yield* Effect.flip(svc.createOrganization({ name }));
+        expect(error).toBeInstanceOf(OrganizationServiceError);
+
+        // No membership attempt, and nothing landed locally for the derived slug.
+        expect(port.calls.createMembership.length).toBe(0);
+        const orgRow = yield* findOrgRowBySlug(slugFor(name));
+        expect(orgRow).toBeUndefined();
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "fails and rolls back the WorkOS org when createMembership fails",
+    (() => {
+      const port = makeFakePort({
+        onCreateMembership: () => Effect.fail(portError("workos membership boom")),
+      });
+      const billing = makeFakeBilling();
+      const name = uniqueName("wm-fail");
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const error = yield* Effect.flip(svc.createOrganization({ name }));
+        expect(error).toBeInstanceOf(OrganizationServiceError);
+
+        // Compensation: the just-created WorkOS org was torn down.
+        expect(port.calls.deleteOrganization.length).toBe(1);
+        const orgRow = yield* findOrgRowBySlug(slugFor(name));
+        expect(orgRow).toBeUndefined();
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "fails and rolls back the WorkOS org when the local DB write fails",
+    (() => {
+      // Force a real DB failure: have WorkOS hand back a workosOrganizationId that
+      // already exists (the fixture org), violating the unique index on the
+      // `organization` insert and aborting the mirror transaction.
+      const port = makeFakePort({
+        onCreateOrganization: (input) =>
+          Effect.succeed({
+            externalId: input.externalId,
+            id: CoreTestFixture.workosOrganizationId,
+            name: input.name,
+          }),
+      });
+      const billing = makeFakeBilling();
+      const name = uniqueName("db-fail");
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const error = yield* Effect.flip(svc.createOrganization({ name }));
+        expect(error).toBeInstanceOf(OrganizationServiceError);
+
+        // Compensation: WorkOS org deleted; no orphan local org for our slug.
+        expect(port.calls.deleteOrganization.length).toBe(1);
+        const orgRow = yield* findOrgRowBySlug(slugFor(name));
+        expect(orgRow).toBeUndefined();
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "still creates the org when billing init fails (non-fatal)",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling({ fail: true });
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          const svc = yield* OrganizationService;
+          const name = uniqueName("billing-fail");
+
+          const created = yield* svc.createOrganization({ name });
+          track.orgs.push(created.id);
+
+          expect(created.name).toBe(name);
+          expect(billing.calls.initializeOrganizationBilling.length).toBe(1);
+
+          // The org + owner member persisted despite the billing failure.
+          const orgRow = yield* findOrgRow(created.id);
+          expect(orgRow).toBeDefined();
+          const members = yield* findMembersInOrg(created.id);
+          expect(members.length).toBe(1);
+        }),
+      ).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "fails with OrganizationServiceError for an api-key (no user) session, writing nothing",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      const name = uniqueName("no-user");
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const error = yield* Effect.flip(
+          svc.createOrganization({ name }).pipe(as(secretKeySession())),
+        );
+        expect(error).toBeInstanceOf(OrganizationServiceError);
+
+        // Bailed before any WorkOS or DB write.
+        expect(port.calls.createOrganization.length).toBe(0);
+        const orgRow = yield* findOrgRowBySlug(slugFor(name));
+        expect(orgRow).toBeUndefined();
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "fails with OrganizationServiceError when the session user has no WorkOS id and none is found by email",
+    (() => {
+      const port = makeFakePort({ findUserByEmail: null });
+      const billing = makeFakeBilling();
+      const name = uniqueName("no-workos-id");
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const error = yield* Effect.flip(
+          svc
+            .createOrganization({ name })
+            .pipe(as(userSessionWithOrgs([], { workosUserId: null }))),
+        );
+        expect(error).toBeInstanceOf(OrganizationServiceError);
+
+        // findUserByEmail was consulted and returned nothing; no org created.
+        expect(port.calls.findUserByEmail.length).toBe(1);
+        expect(port.calls.createOrganization.length).toBe(0);
+        const orgRow = yield* findOrgRowBySlug(slugFor(name));
+        expect(orgRow).toBeUndefined();
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+});
+
+describe("OrganizationService.updateOrganization", () => {
+  test(
+    "renames the org in WorkOS and the local DB",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      const orgId = uniqueId("upd-org");
+      const wo = uniqueId("upd-wo");
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          yield* insertOrg({
+            id: orgId,
+            name: "Before",
+            slug: uniqueId("upd-slug"),
+            workosOrganizationId: wo,
+          });
+          track.orgs.push(orgId);
+
+          const svc = yield* OrganizationService;
+          const newName = uniqueName("renamed");
+          yield* svc
+            .updateOrganization({ name: newName, organizationId: orgId })
+            .pipe(as(userSessionWithOrgs([orgId])));
+
+          expect(port.calls.updateOrganization.some((c) => c.workosOrganizationId === wo)).toBe(
+            true,
+          );
+          const orgRow = yield* findOrgRow(orgId);
+          expect(orgRow?.name).toBe(newName);
+        }),
+      ).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "forbids a caller without organization:all and writes nothing",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const before = yield* findOrgRow(CoreTestFixture.organizationId);
+        const error = yield* Effect.flip(
+          svc
+            .updateOrganization({
+              name: "Hijacked",
+              organizationId: CoreTestFixture.organizationId,
+            })
+            .pipe(as(sessionWithoutOrgAccess())),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        expect(port.calls.updateOrganization.length).toBe(0);
+        const after = yield* findOrgRow(CoreTestFixture.organizationId);
+        expect(after?.name).toBe(before?.name);
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "fails with OrganizationNotFoundError for an unknown org",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      const orgId = `org_missing_${Date.now()}`;
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const error = yield* Effect.flip(
+          svc
+            .updateOrganization({ name: "Nope", organizationId: orgId })
+            .pipe(as(userSessionWithOrgs([orgId]))),
+        );
+        expect(error).toBeInstanceOf(OrganizationNotFoundError);
+        expect(port.calls.updateOrganization.length).toBe(0);
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "fails with OrganizationServiceError on a WorkOS update failure and leaves the name unchanged",
+    (() => {
+      const port = makeFakePort({
+        onUpdateOrganization: () => Effect.fail(portError("workos update boom")),
+      });
+      const billing = makeFakeBilling();
+      const orgId = uniqueId("upd-fail-org");
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          yield* insertOrg({
+            id: orgId,
+            name: "Keep",
+            slug: uniqueId("upd-fail-slug"),
+            workosOrganizationId: uniqueId("upd-fail-wo"),
+          });
+          track.orgs.push(orgId);
+
+          const svc = yield* OrganizationService;
+          const error = yield* Effect.flip(
+            svc
+              .updateOrganization({ name: "Changed", organizationId: orgId })
+              .pipe(as(userSessionWithOrgs([orgId]))),
+          );
+          expect(error).toBeInstanceOf(OrganizationServiceError);
+
+          const orgRow = yield* findOrgRow(orgId);
+          expect(orgRow?.name).toBe("Keep");
+        }),
+      ).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+});
+
+describe("OrganizationService.deleteOrganization", () => {
+  test(
+    "deletes the org in WorkOS and locally, cascading members",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      const orgId = uniqueId("del-org");
+      const wo = uniqueId("del-wo");
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          track.orgs.push(orgId);
+          yield* insertOrg({
+            id: orgId,
+            name: "Doomed",
+            slug: uniqueId("del-slug"),
+            workosOrganizationId: wo,
+          });
+          yield* insertMember({
+            id: uniqueId("del-mem"),
+            organizationId: orgId,
+            role: "owner",
+            workosMembershipId: uniqueId("del-wm"),
+          });
+
+          const svc = yield* OrganizationService;
+          yield* svc
+            .deleteOrganization({ organizationId: orgId })
+            .pipe(as(userSessionWithOrgs([orgId])));
+
+          expect(port.calls.deleteOrganization).toContain(wo);
+          const orgRow = yield* findOrgRow(orgId);
+          expect(orgRow).toBeUndefined();
+          const members = yield* findMembersInOrg(orgId);
+          expect(members.length).toBe(0);
+        }),
+      ).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "forbids a caller without organization:all and retains the org",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        const error = yield* Effect.flip(
+          svc
+            .deleteOrganization({ organizationId: CoreTestFixture.organizationId })
+            .pipe(as(sessionWithoutOrgAccess())),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        expect(port.calls.deleteOrganization.length).toBe(0);
+        const orgRow = yield* findOrgRow(CoreTestFixture.organizationId);
+        expect(orgRow).toBeDefined();
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+
+  test(
+    "succeeds silently and skips WorkOS when the org row is absent (idempotent)",
+    (() => {
+      const port = makeFakePort();
+      const billing = makeFakeBilling();
+      const orgId = `org_missing_${Date.now()}`;
+      return Effect.gen(function* () {
+        const svc = yield* OrganizationService;
+        yield* svc
+          .deleteOrganization({ organizationId: orgId })
+          .pipe(as(userSessionWithOrgs([orgId])));
+
+        // No WorkOS delete fired because there was no local org to mirror.
+        expect(port.calls.deleteOrganization.length).toBe(0);
+      }).pipe(Effect.provide(orgServiceLayer(port, billing)), CoreAuthSession.authenticate());
+    })(),
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/PaymentProviderConfigurationService.integration.test.ts b/packages/core/test/services/paymentProviders/PaymentProviderConfigurationService.integration.test.ts
new file mode 100644
index 000000000..938767d7f
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/PaymentProviderConfigurationService.integration.test.ts
@@ -0,0 +1,693 @@
+/**
+ * Integration tests for {@link PaymentProviderConfigurationService}, run against
+ * the real backend stack provisioned once by `test/_testing/globalSetup.ts`
+ * (live PlanetScale DB + ClickHouse + WorkOS; only the project schema cache is
+ * an in-memory stub).
+ *
+ * The service orchestrates four collaborators — permission checks, the
+ * `paymentProviderConfigurations` DB aggregate, the append-only `auditLogs`
+ * ledger, and schema-cache invalidation — around three provider *adapters*
+ * (Stripe / App Store / Google Play). Those adapters are the only piece we
+ * cannot run in-process here: their real implementations still live in
+ * `internal/` and reach external provider SDKs. They are pure-ish boundaries
+ * (`PaymentProviderShape`), so each test provides a small deterministic stub
+ * (`makeProviderStub`) whose `validateGlobalConfiguration` derives a stable
+ * `paymentProviderKey` from the input — letting us drive the enabled/validated
+ * path and the key-conflict branch without any external dependency. Everything
+ * else (the DB writes, audit rows, cache invalidation, and all permission /
+ * not-found / uniqueness guards) is exercised end-to-end against real infra.
+ *
+ * Conventions (mirrored from the PerkService reference):
+ *  - Each test cleans up the configuration rows (and their append-only audit
+ *    rows) it created via {@link withConfigCleanup}; the global sweep is only a
+ *    backstop. Assertions are membership-based, never exact counts, and the
+ *    `(project, provider)` slot is freed by hard-deleting on exit so a re-run
+ *    never trips the one-config-per-provider uniqueness guard.
+ *  - Schema-cache invalidation is proven by seeding the shared per-test cache
+ *    stub before a write and asserting it reads back `null` afterward.
+ *  - Permission tests re-authenticate just the guarded call with a no-access
+ *    session via {@link asUnauthorized}; typed failures use `Effect.flip` +
+ *    `instanceof`, each paired with a DB-state assertion.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+
+import {
+  PaymentProviderConfigurationService,
+  ProjectSchemaCache,
+} from "@voidhash/core/services";
+import {
+  AppStorePaymentProvider,
+  GooglePlayPaymentProvider,
+  type PaymentProviderKind,
+  type PaymentProviderShape,
+  StripePaymentProvider,
+} from "@voidhash/core/services/paymentProviders/PaymentProvider";
+import {
+  PaymentProviderAlreadyExistsError,
+  PaymentProviderConfigurationNotFoundError,
+  PaymentProviderConfigurationValidationError,
+} from "@voidhash/core/domain/paymentProvider/PaymentProviderConfiguration";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  paymentProviderConfigurations,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so derived keys stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueKey = (label: string) => `it-ppc-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * Deterministic {@link PaymentProviderShape} stub for one provider id. The real
+ * adapters reach external SDKs and live in `internal/`; this double returns
+ * predictable values so the service's orchestration can be tested in-process.
+ *
+ * `validateGlobalConfiguration` echoes the input as `parsedConfiguration` and
+ * uses `configuration.key` (when present) as the derived `paymentProviderKey`,
+ * which lets a test plant a colliding row and exercise the conflict branch.
+ */
+const makeProviderStub = <TKind extends PaymentProviderKind>(
+  id: TKind,
+  title: string,
+): PaymentProviderShape<TKind> => ({
+  id,
+  title,
+  type: "web-checkout",
+  defaultGlobalConfiguration: () => Effect.succeed({ default: true, provider: id }),
+  defaultProductConfiguration: () => Effect.succeed({}),
+  createGlobalKey: (configuration) =>
+    Effect.succeed(typeof configuration.key === "string" ? configuration.key : "stub-key"),
+  createProductKey: () => Effect.succeed("stub-product-key"),
+  validateGlobalConfiguration: (configuration) =>
+    Effect.succeed({
+      parsedConfiguration: { ...configuration, validated: true },
+      paymentProviderKey: typeof configuration.key === "string" ? configuration.key : "stub-key",
+    }),
+  validateProductConfiguration: (configuration) =>
+    Effect.succeed({ parsedConfiguration: configuration, productKey: "stub-product-key" }),
+});
+
+const STRIPE_TITLE = "Stripe (stub)";
+const APP_STORE_TITLE = "App Store (stub)";
+const GOOGLE_PLAY_TITLE = "Google Play (stub)";
+
+/** Layer providing all three provider-adapter stubs the service depends on. */
+const ProviderStubsLive = Layer.mergeAll(
+  Layer.succeed(StripePaymentProvider, makeProviderStub("stripe", STRIPE_TITLE)),
+  Layer.succeed(AppStorePaymentProvider, makeProviderStub("apple-app-store", APP_STORE_TITLE)),
+  Layer.succeed(GooglePlayPaymentProvider, makeProviderStub("google-play", GOOGLE_PLAY_TITLE)),
+);
+
+/** The full layer under test: the service plus its provider-adapter stubs. */
+const ServiceUnderTest = PaymentProviderConfigurationService.layer.pipe(
+  Layer.provide(ProviderStubsLive),
+);
+
+/** Read a configuration row straight from the database, bypassing the service. */
+const findConfigRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderConfigurations.findFirst({
+      where: { id },
+    });
+  });
+
+/** All audit-log rows recorded for a given configuration entity. */
+const findConfigAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.PaymentProviderConfiguration),
+          eq(auditLogs.entityId, entityId),
+        ),
+      );
+  });
+
+/**
+ * Insert a configuration row directly (bypassing the service) so tests can plant
+ * fixtures for read/update/delete paths and key-conflict scenarios. Returns the id.
+ */
+const insertConfigRow = (input: {
+  readonly id: string;
+  readonly providerId: PaymentProviderKind;
+  readonly paymentProviderKey: string;
+  readonly enabled?: boolean;
+  readonly deletedAt?: Date | null;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(paymentProviderConfigurations).values({
+      configuration: { seeded: true },
+      enabled: input.enabled ?? false,
+      id: input.id,
+      name: "Seeded Config",
+      paymentProviderKey: input.paymentProviderKey,
+      projectId,
+      providerId: input.providerId,
+      ...(input.deletedAt !== undefined ? { deletedAt: input.deletedAt } : {}),
+    });
+    return input.id;
+  });
+
+/**
+ * Delete the given configurations and their audit rows. Audit entries are
+ * append-only and survive a (soft) delete, so they are cleared by entity id too.
+ * Each delete is `ignore`d so a missing row never fails the finalizer.
+ */
+const cleanupCreatedConfigs = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db
+      .delete(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.PaymentProviderConfiguration),
+          inArray(auditLogs.entityId, targets),
+        ),
+      )
+      .pipe(Effect.ignore);
+    yield* db
+      .delete(paymentProviderConfigurations)
+      .where(inArray(paymentProviderConfigurations.id, targets))
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every configuration it creates is removed afterward,
+ * regardless of how the test exits. Pass each created id to `track`; cleanup
+ * reads the collected ids lazily at finalization via `Effect.ensuring`.
+ */
+const withConfigCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedConfigs(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. The inner provision
+ * shadows the harness's default full-permission session for this call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("PaymentProviderConfigurationService.createPaymentProviderConfiguration", () => {
+  test(
+    "creates a disabled row with the provider default, records a Created audit entry, and invalidates the schema cache",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+        const cache = yield* ProjectSchemaCache;
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const created = yield* service.createPaymentProviderConfiguration({
+          projectId,
+          providerId: "stripe",
+        });
+        track(created.id);
+        expect(created.id.startsWith("pp_conf")).toBe(true);
+
+        const row = yield* findConfigRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.projectId).toBe(projectId);
+        expect(row?.providerId).toBe("stripe");
+        expect(row?.enabled).toBe(false);
+        expect(row?.name).toBe(STRIPE_TITLE);
+        expect(row?.paymentProviderKey).toBe("empty");
+        expect(row?.configuration).toEqual({ default: true, provider: "stripe" });
+
+        const auditEntries = yield* findConfigAuditEntries(created.id);
+        const createdEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.PaymentProviderConfiguration);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({ snapshot: { providerId: "stripe" } });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects an unknown provider id with a validation error and writes nothing",
+    // No cleanup wrapper: a rejected create writes no row.
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderConfigurationService;
+      const db = yield* Db;
+
+      const error = yield* Effect.flip(
+        service.createPaymentProviderConfiguration({
+          projectId,
+          providerId: "paypal-not-a-provider",
+        }),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderConfigurationValidationError);
+
+      const rows = yield* db.query.paymentProviderConfigurations.findMany({
+        where: { providerId: "paypal-not-a-provider" },
+      });
+      expect(rows.length).toBe(0);
+    }).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a second live configuration for the same provider and writes no second row",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+        const db = yield* Db;
+
+        const countUndeletedGooglePlay = () =>
+          db.query.paymentProviderConfigurations
+            .findMany({
+              where: { projectId, providerId: "google-play" },
+            })
+            .pipe(Effect.map((rows) => rows.filter((r) => r.deletedAt === null)));
+
+        // Baseline absorbs any orphan rows from prior runs / other tests so the
+        // assertion stays a delta (membership), not a fragile exact count on the
+        // shared (project, provider) slot.
+        const baseline = (yield* countUndeletedGooglePlay()).length;
+
+        const first = yield* service.createPaymentProviderConfiguration({
+          projectId,
+          providerId: "google-play",
+        });
+        track(first.id);
+
+        const error = yield* Effect.flip(
+          service.createPaymentProviderConfiguration({ projectId, providerId: "google-play" }),
+        );
+        expect(error).toBeInstanceOf(PaymentProviderAlreadyExistsError);
+
+        // The rejected create wrote no new row: exactly the one we created
+        // (`first`) was added on top of the baseline.
+        const undeleted = yield* countUndeletedGooglePlay();
+        expect(undeleted.length).toBe(baseline + 1);
+        expect(undeleted.some((r) => r.id === first.id)).toBe(true);
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and writes nothing",
+    // No cleanup wrapper: a forbidden create writes no row.
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderConfigurationService;
+      const db = yield* Db;
+
+      const before = yield* db.query.paymentProviderConfigurations.findMany({
+        where: { projectId, providerId: "apple-app-store" },
+      });
+
+      const error = yield* Effect.flip(
+        asUnauthorized(
+          service.createPaymentProviderConfiguration({
+            projectId,
+            providerId: "apple-app-store",
+          }),
+        ),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      const after = yield* db.query.paymentProviderConfigurations.findMany({
+        where: { projectId, providerId: "apple-app-store" },
+      });
+      expect(after.length).toBe(before.length);
+    }).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderConfigurationService.getPaymentProviderConfigurations", () => {
+  test(
+    "returns the non-deleted configurations for the project and excludes soft-deleted rows",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+
+        const liveId = `pp_conf_${uniqueKey("list-live")}`;
+        const deletedId = `pp_conf_${uniqueKey("list-deleted")}`;
+        yield* insertConfigRow({
+          id: liveId,
+          providerId: "stripe",
+          paymentProviderKey: uniqueKey("list-live-key"),
+        });
+        track(liveId);
+        yield* insertConfigRow({
+          id: deletedId,
+          providerId: "google-play",
+          paymentProviderKey: uniqueKey("list-deleted-key"),
+          deletedAt: new Date(),
+        });
+        track(deletedId);
+
+        const list = yield* service.getPaymentProviderConfigurations(projectId);
+        expect(list.some((config) => config.id === liveId)).toBe(true);
+        expect(list.some((config) => config.id === deletedId)).toBe(false);
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderConfigurationService;
+      const error = yield* Effect.flip(
+        asUnauthorized(service.getPaymentProviderConfigurations(projectId)),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderConfigurationService.getPaymentProviderConfigurationById", () => {
+  test(
+    "returns the matching configuration row",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+
+        const id = `pp_conf_${uniqueKey("by-id")}`;
+        const key = uniqueKey("by-id-key");
+        yield* insertConfigRow({ id, providerId: "stripe", paymentProviderKey: key });
+        track(id);
+
+        const config = yield* service.getPaymentProviderConfigurationById(id);
+        expect(config.id).toBe(id);
+        expect(config.projectId).toBe(projectId);
+        expect(config.providerId).toBe("stripe");
+        expect(config.paymentProviderKey).toBe(key);
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderConfigurationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderConfigurationService;
+      const error = yield* Effect.flip(
+        service.getPaymentProviderConfigurationById(`pp_conf_missing_${Date.now()}`),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderConfigurationNotFoundError);
+    }).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids access to a configuration the caller is not authorized for",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+
+        const id = `pp_conf_${uniqueKey("by-id-forbidden")}`;
+        yield* insertConfigRow({
+          id,
+          providerId: "google-play",
+          paymentProviderKey: uniqueKey("by-id-forbidden-key"),
+        });
+        track(id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(service.getPaymentProviderConfigurationById(id)),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderConfigurationService.updatePaymentProviderConfiguration", () => {
+  test(
+    "disabled path: persists the configuration with enabled=false, records an Updated audit entry, and invalidates the cache",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+        const cache = yield* ProjectSchemaCache;
+
+        const id = `pp_conf_${uniqueKey("update-disabled")}`;
+        yield* insertConfigRow({
+          id,
+          providerId: "stripe",
+          paymentProviderKey: uniqueKey("update-disabled-key"),
+          enabled: true,
+        });
+        track(id);
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const result = yield* service.updatePaymentProviderConfiguration({
+          id,
+          enabled: false,
+          name: "Renamed Disabled",
+          configuration: { fresh: "config" },
+        });
+        expect(result.id).toBe(id);
+
+        const row = yield* findConfigRow(id);
+        expect(row?.enabled).toBe(false);
+        expect(row?.name).toBe("Renamed Disabled");
+        expect(row?.configuration).toEqual({ fresh: "config" });
+
+        const auditEntries = yield* findConfigAuditEntries(id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toEqual({ enabled: false });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "enabled path: validates the configuration, stores the parsed config and derived key, records an Updated audit entry, and invalidates the cache",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+        const cache = yield* ProjectSchemaCache;
+
+        const id = `pp_conf_${uniqueKey("update-enabled")}`;
+        const derivedKey = uniqueKey("update-enabled-key");
+        yield* insertConfigRow({
+          id,
+          providerId: "stripe",
+          paymentProviderKey: "empty",
+        });
+        track(id);
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const result = yield* service.updatePaymentProviderConfiguration({
+          id,
+          enabled: true,
+          configuration: { key: derivedKey, secret: "sk_test" },
+        });
+        expect(result.id).toBe(id);
+
+        const row = yield* findConfigRow(id);
+        expect(row?.enabled).toBe(true);
+        // The stub echoes the input and stamps `validated: true`.
+        expect(row?.configuration).toEqual({ key: derivedKey, secret: "sk_test", validated: true });
+        expect(row?.paymentProviderKey).toBe(derivedKey);
+
+        const auditEntries = yield* findConfigAuditEntries(id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toEqual({ enabled: true });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  // NOTE: a test for the update "enabled path" key-collision branch was removed
+  // here. That branch (PaymentProviderConfigurationService.updatePaymentProviderConfiguration,
+  // the live-sibling key lookup) is unreachable: a project may hold at most one
+  // live configuration per provider — enforced by the create-path guard
+  // ("Provider X can only have one configuration") and the unique index on
+  // (project_id, active_provider_id) — so no second live same-provider config
+  // can exist for a key to collide with. The removed test could only set up the
+  // scenario by violating that unique index. See the create-path one-per-provider
+  // test above for the actual enforced invariant.
+
+  test(
+    "fails with PaymentProviderConfigurationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderConfigurationService;
+      const error = yield* Effect.flip(
+        service.updatePaymentProviderConfiguration({
+          id: `pp_conf_missing_${Date.now()}`,
+          enabled: false,
+          configuration: {},
+        }),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderConfigurationNotFoundError);
+    }).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the row unchanged",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+
+        const id = `pp_conf_${uniqueKey("update-forbidden")}`;
+        const key = uniqueKey("update-forbidden-key");
+        yield* insertConfigRow({
+          id,
+          providerId: "stripe",
+          paymentProviderKey: key,
+          enabled: false,
+        });
+        track(id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            service.updatePaymentProviderConfiguration({
+              id,
+              enabled: true,
+              configuration: { key: uniqueKey("update-forbidden-new") },
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findConfigRow(id);
+        expect(row?.enabled).toBe(false);
+        expect(row?.paymentProviderKey).toBe(key);
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderConfigurationService.deletePaymentProviderConfiguration", () => {
+  test(
+    "soft-deletes the configuration, records a Deleted audit entry, and invalidates the cache",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+        const cache = yield* ProjectSchemaCache;
+
+        const id = `pp_conf_${uniqueKey("delete")}`;
+        yield* insertConfigRow({
+          id,
+          providerId: "google-play",
+          paymentProviderKey: uniqueKey("delete-key"),
+        });
+        track(id);
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* service.deletePaymentProviderConfiguration({
+          paymentProviderConfigurationId: id,
+        });
+
+        const row = yield* findConfigRow(id);
+        // Soft delete: row remains but is marked deleted, and the service can no
+        // longer find it as a live configuration.
+        expect(row).toBeDefined();
+        expect(row?.deletedAt).not.toBeNull();
+
+        const lookup = yield* service.getPaymentProviderConfigurations(projectId);
+        expect(lookup.some((config) => config.id === id)).toBe(false);
+
+        const auditEntries = yield* findConfigAuditEntries(id);
+        const deletedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderConfigurationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderConfigurationService;
+      const error = yield* Effect.flip(
+        service.deletePaymentProviderConfiguration({
+          paymentProviderConfigurationId: `pp_conf_missing_${Date.now()}`,
+        }),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderConfigurationNotFoundError);
+    }).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the configuration",
+    withConfigCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderConfigurationService;
+
+        const id = `pp_conf_${uniqueKey("delete-forbidden")}`;
+        yield* insertConfigRow({
+          id,
+          providerId: "stripe",
+          paymentProviderKey: uniqueKey("delete-forbidden-key"),
+        });
+        track(id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            service.deletePaymentProviderConfiguration({ paymentProviderConfigurationId: id }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findConfigRow(id);
+        expect(row).toBeDefined();
+        expect(row?.deletedAt ?? null).toBeNull();
+      }),
+    ).pipe(Effect.provide(ServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/PaymentProviderProductService.integration.test.ts b/packages/core/test/services/paymentProviders/PaymentProviderProductService.integration.test.ts
new file mode 100644
index 000000000..eb3bf5abf
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/PaymentProviderProductService.integration.test.ts
@@ -0,0 +1,1023 @@
+/**
+ * Integration tests for {@link PaymentProviderProductService}, run against the
+ * real backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB + ClickHouse + WorkOS; only the project schema cache is an
+ * in-memory stub).
+ *
+ * The service maps catalog `product` rows to provider-specific product keys via
+ * the `paymentProviderConfigurationProducts` join table. Each test drives a
+ * public method end-to-end and verifies the *persisted* side effects rather
+ * than just the return value:
+ *  - the join row inserted / updated / deactivated / hard-deleted in MySQL,
+ *  - the matching `audit_log` row (entity, action, actor, change snapshot),
+ *  - invalidation of the project's schema cache after a successful write,
+ *  - the App Store parked-notification replay workflow being dispatched only
+ *    when the owning configuration's provider is `apple-app-store`.
+ *
+ * Conventions used throughout:
+ *  - The fixture only seeds user/org/member/project, so every test creates its
+ *    own parent `product` + `paymentProviderConfiguration` rows under
+ *    {@link CoreTestFixture.projectId} and cleans them up on exit via
+ *    {@link withCleanup} (deepest dependents first, plus append-only audit rows
+ *    by entity id). The global teardown sweep is only a backstop.
+ *  - Provider keys are unique per call so a leftover row from a crashed run
+ *    can't collide on the `(configurationId, providerProductKey, productId)`
+ *    unique index, and assertions stay membership-based, never exact counts.
+ *  - The three `PaymentProvider` adapter tags and the
+ *    `AppStoreReplayParkedNotificationsWorkflow` port are NOT real infra here —
+ *    they are deterministic in-process stubs ({@link makeServiceLayer}). The
+ *    Stripe stub echoes the configuration and derives a product key; the App
+ *    Store stub records every replay `dispatch` so the fire-and-forget branch
+ *    is observable.
+ *  - Permission tests re-authenticate just the call under test via
+ *    {@link asUnauthorized}; the inner provision shadows the harness's default
+ *    full-permission session.
+ *  - Typed failures are asserted with `Effect.flip`, narrowing the swapped
+ *    error with `instanceof` before reading its fields, always paired with a
+ *    DB-state assertion on the failure path.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+
+import { PaymentProviderProductService, ProjectSchemaCache } from "@voidhash/core/services";
+import {
+  AppStorePaymentProvider,
+  GooglePlayPaymentProvider,
+  type PaymentProviderShape,
+  StripePaymentProvider,
+} from "@voidhash/core/services/paymentProviders/PaymentProvider";
+import {
+  AppStoreReplayParkedNotificationsWorkflow,
+  type AppStoreReplayParkedNotificationsInput,
+} from "@voidhash/core/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow";
+import { GooglePlayReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow";
+import { StripeReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/StripeReplayParkedNotificationsWorkflow";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  PaymentProviderProductNotFoundError,
+  PaymentProviderProductValidationError,
+} from "@voidhash/core/domain/paymentProvider/PaymentProviderProduct";
+import { generateId } from "@voidhash/core/utils/generate-id";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  products,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so ids/keys stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueKey = (label: string) => `it-ppprod-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * Validation error config marker. When a configuration blob carries
+ * `{ fail: true }` the stub Stripe provider fails with a
+ * {@link PaymentProviderProductValidationError}, letting tests exercise the
+ * provider-validation failure branch without any real SDK.
+ */
+const FAIL_MARKER = "fail" as const;
+
+/**
+ * Records of every replay-workflow `dispatch` the service fires, captured so
+ * tests can assert the App Store branch ran (or did not). A fresh array is
+ * threaded into {@link makeServiceLayer} per test, so dispatches never leak
+ * between tests.
+ */
+type DispatchLog = AppStoreReplayParkedNotificationsInput[];
+
+/** Deterministic Stripe provider stub: echoes config, derives the product key. */
+const stripeStub: PaymentProviderShape<"stripe"> = {
+  createGlobalKey: (configuration) => Effect.succeed(String(configuration.key ?? "stripe-global")),
+  createProductKey: (configuration) =>
+    Effect.succeed(String(configuration.productKey ?? "stripe-product")),
+  defaultGlobalConfiguration: () => Effect.succeed({}),
+  defaultProductConfiguration: () => Effect.succeed({}),
+  id: "stripe",
+  title: "Stripe",
+  type: "web-checkout",
+  validateGlobalConfiguration: (configuration) =>
+    Effect.succeed({ parsedConfiguration: configuration, paymentProviderKey: "stripe-global" }),
+  validateProductConfiguration: (configuration) =>
+    configuration[FAIL_MARKER] === true
+      ? Effect.fail(
+          new PaymentProviderProductValidationError({
+            message: "stub: invalid product configuration",
+          }),
+        )
+      : Effect.succeed({
+          parsedConfiguration: { ...configuration, validated: true },
+          productKey: String(configuration.productKey ?? "stripe-product"),
+        }),
+};
+
+/**
+ * Build the full set of layers the service-under-test needs beyond the harness:
+ * its own layer plus deterministic provider/workflow stubs. The App Store stub
+ * shares the Stripe validation behaviour but carries the `apple-app-store` id
+ * so the replay branch is exercised; its workflow port records every dispatch
+ * into the supplied {@link DispatchLog}.
+ */
+const makeServiceLayer = (dispatches: DispatchLog) => {
+  const appStoreStub: PaymentProviderShape<"apple-app-store"> = {
+    ...stripeStub,
+    id: "apple-app-store",
+    title: "App Store",
+    type: "native",
+  };
+  const googlePlayStub: PaymentProviderShape<"google-play"> = {
+    ...stripeStub,
+    id: "google-play",
+    title: "Google Play",
+    type: "native",
+  };
+
+  const StubbedProviders = Layer.mergeAll(
+    Layer.succeed(StripePaymentProvider, stripeStub),
+    Layer.succeed(AppStorePaymentProvider, appStoreStub),
+    Layer.succeed(GooglePlayPaymentProvider, googlePlayStub),
+    Layer.succeed(AppStoreReplayParkedNotificationsWorkflow, {
+      dispatch: (input: AppStoreReplayParkedNotificationsInput) =>
+        Effect.sync(() => {
+          dispatches.push(input);
+        }),
+    }),
+    Layer.succeed(GooglePlayReplayParkedNotificationsWorkflow, {
+      dispatch: () => Effect.void,
+    }),
+    // Stripe replay port: not exercised by these App-Store-focused assertions,
+    // stubbed to a no-op so the service's request-time requirement is satisfied.
+    Layer.succeed(StripeReplayParkedNotificationsWorkflow, { dispatch: () => Effect.void }),
+  );
+
+  return PaymentProviderProductService.layer.pipe(Layer.provideMerge(StubbedProviders));
+};
+
+// ---------------------------------------------------------------------------
+// Raw DB read-back helpers (bypass the service).
+// ---------------------------------------------------------------------------
+
+/** Read a provider-product join row straight from the database. */
+const findProviderProductRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderConfigurationProducts.findFirst({
+      where: { id },
+    });
+  });
+
+/** All provider-product join rows for a given product (ordered for stability). */
+const findProviderProductRowsForProduct = (productId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderConfigurationProducts.findMany({
+      where: { productId },
+    });
+  });
+
+/** All audit-log rows recorded for a given provider-product entity. */
+const findAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.PaymentProviderProduct),
+          eq(auditLogs.entityId, entityId),
+        ),
+      );
+  });
+
+// ---------------------------------------------------------------------------
+// Parent-row fixtures (the seeded fixture only covers user/org/member/project).
+// ---------------------------------------------------------------------------
+
+/** Insert a product under the fixture project; returns its id. */
+const insertProduct = (track: (kind: "product", id: string) => void) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("product");
+    const slug = uniqueKey("product");
+    yield* db.insert(products).values({ id, name: "IT Product", projectId, slug });
+    track("product", id);
+    return id;
+  });
+
+/** Insert a payment-provider configuration under the fixture project; returns its id. */
+const insertConfiguration = (
+  track: (kind: "configuration", id: string) => void,
+  providerId: "stripe" | "apple-app-store" | "google-play" = "stripe",
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("paymentProviderConfiguration");
+    yield* db.insert(paymentProviderConfigurations).values({
+      enabled: true,
+      id,
+      name: "IT Config",
+      paymentProviderKey: uniqueKey("cfgkey"),
+      projectId,
+      providerId,
+    });
+    track("configuration", id);
+    return id;
+  });
+
+// ---------------------------------------------------------------------------
+// Cleanup: delete created join rows, products, configurations and their
+// append-only audit rows on exit, regardless of how the test ends.
+// ---------------------------------------------------------------------------
+
+interface Tracked {
+  readonly providerProducts: string[];
+  readonly products: string[];
+  readonly configurations: string[];
+}
+
+const cleanup = (tracked: Tracked) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    // `setActivePaymentProviderProduct` records its audit row under the
+    // `PaymentProviderProduct` entity type keyed by the *product* id (not the
+    // join-row id), so the audit sweep must target both id sets.
+    const auditTargets = [...tracked.providerProducts, ...tracked.products];
+    if (auditTargets.length > 0) {
+      yield* db
+        .delete(auditLogs)
+        .where(
+          and(
+            eq(auditLogs.entityType, AuditLogEntityType.PaymentProviderProduct),
+            inArray(auditLogs.entityId, auditTargets),
+          ),
+        )
+        .pipe(Effect.ignore);
+    }
+    if (tracked.providerProducts.length > 0) {
+      yield* db
+        .delete(paymentProviderConfigurationProducts)
+        .where(inArray(paymentProviderConfigurationProducts.id, [...tracked.providerProducts]))
+        .pipe(Effect.ignore);
+    }
+    if (tracked.products.length > 0) {
+      yield* db
+        .delete(paymentProviderConfigurationProducts)
+        .where(inArray(paymentProviderConfigurationProducts.productId, [...tracked.products]))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(products)
+        .where(inArray(products.id, [...tracked.products]))
+        .pipe(Effect.ignore);
+    }
+    if (tracked.configurations.length > 0) {
+      yield* db
+        .delete(paymentProviderConfigurations)
+        .where(inArray(paymentProviderConfigurations.id, [...tracked.configurations]))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every row it creates (provider products, products,
+ * configurations, and their append-only audit rows) is removed afterward,
+ * regardless of how the test exits. The body receives a `track` callback for
+ * each created entity plus the {@link DispatchLog} the workflow stub appends to.
+ * Cleanup reads the collected ids lazily at finalization via `Effect.ensuring`.
+ *
+ * The service layer is built *here* so the {@link DispatchLog} the body asserts
+ * on is the exact same array the workflow stub records into — wiring the layer
+ * with a separate `[]` outside this wrapper would leave every dispatch
+ * assertion reading an array the service never touches.
+ */
+const withCleanup = <E, R>(
+  body: (
+    track: (kind: "providerProduct" | "product" | "configuration", id: string) => void,
+    dispatches: DispatchLog,
+  ) => Effect.Effect<void, E, R>,
+) => {
+  const tracked: Tracked = { configurations: [], products: [], providerProducts: [] };
+  const dispatches: DispatchLog = [];
+  const track = (kind: "providerProduct" | "product" | "configuration", id: string) => {
+    if (kind === "providerProduct") tracked.providerProducts.push(id);
+    else if (kind === "product") tracked.products.push(id);
+    else tracked.configurations.push(id);
+  };
+  return body(track, dispatches).pipe(
+    Effect.ensuring(cleanup(tracked)),
+    Effect.provide(makeServiceLayer(dispatches)),
+  );
+};
+
+// ---------------------------------------------------------------------------
+// Auth helpers.
+// ---------------------------------------------------------------------------
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/** Run a single call as a caller with no project access. */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("PaymentProviderProductService.createPaymentProviderProduct", () => {
+  test(
+    "validates via the provider, inserts the row as active, records a Created audit entry, and invalidates the schema cache",
+    withCleanup((track, dispatches) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const cache = yield* ProjectSchemaCache;
+
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const productKey = uniqueKey("create");
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+        expect(created.id.startsWith("pp_prod_")).toBe(true);
+
+        const row = yield* findProviderProductRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.productId).toBe(productId);
+        expect(row?.paymentProviderConfigurationId).toBe(configId);
+        expect(row?.providerProductKey).toBe(productKey);
+        expect(row?.isActive).toBe(true);
+        // The stub's `validateProductConfiguration` stamps `validated: true`.
+        expect(row?.configuration).toMatchObject({ productKey, validated: true });
+
+        const audit = yield* findAuditEntries(created.id);
+        const createdEntry = audit.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.PaymentProviderProduct);
+        expect(createdEntry?.parentEntityId).toBe(productId);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+
+        // Stripe provider → no App Store replay dispatch.
+        expect(dispatches.length).toBe(0);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "deactivates sibling rows for the same (product, configuration) and schedules the App Store replay when the provider is apple-app-store",
+    withCleanup((track, dispatches) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track, "apple-app-store");
+        const firstKey = uniqueKey("apple-first");
+        const secondKey = uniqueKey("apple-second");
+
+        const first = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: firstKey },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", first.id);
+
+        const second = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: secondKey },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", second.id);
+
+        // The first row was deactivated; the newest insert is the active one.
+        const firstRow = yield* findProviderProductRow(first.id);
+        const secondRow = yield* findProviderProductRow(second.id);
+        expect(firstRow?.isActive).toBe(false);
+        expect(secondRow?.isActive).toBe(true);
+
+        // App Store provider → one replay dispatch per create, carrying the new key.
+        expect(dispatches.length).toBe(2);
+        expect(
+          dispatches.some(
+            (d) => d.paymentProviderProductId === second.id && d.providerProductKey === secondKey,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductValidationError when the product does not exist and writes nothing",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const configId = yield* insertConfiguration(track);
+
+        const error = yield* Effect.flip(
+          service.createPaymentProviderProduct({
+            configuration: { productKey: uniqueKey("missing-product") },
+            paymentProviderConfigurationId: configId,
+            productId: `prod_missing_${Date.now()}`,
+          }),
+        );
+        expect(error).toBeInstanceOf(PaymentProviderProductValidationError);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductValidationError when the configuration does not exist and writes nothing",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+
+        const error = yield* Effect.flip(
+          service.createPaymentProviderProduct({
+            configuration: { productKey: uniqueKey("missing-config") },
+            paymentProviderConfigurationId: `pp_conf_missing_${Date.now()}`,
+            productId,
+          }),
+        );
+        expect(error).toBeInstanceOf(PaymentProviderProductValidationError);
+
+        const rows = yield* findProviderProductRowsForProduct(productId);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "propagates the provider's PaymentProviderProductValidationError and writes nothing",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+
+        const error = yield* Effect.flip(
+          service.createPaymentProviderProduct({
+            // The stub provider fails validation on this marker.
+            configuration: { [FAIL_MARKER]: true, productKey: uniqueKey("provider-invalid") },
+            paymentProviderConfigurationId: configId,
+            productId,
+          }),
+        );
+        expect(error).toBeInstanceOf(PaymentProviderProductValidationError);
+
+        const rows = yield* findProviderProductRowsForProduct(productId);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all on the product and writes nothing",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            service.createPaymentProviderProduct({
+              configuration: { productKey: uniqueKey("forbidden") },
+              paymentProviderConfigurationId: configId,
+              productId,
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const rows = yield* findProviderProductRowsForProduct(productId);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderProductService.setActivePaymentProviderProduct", () => {
+  test(
+    "activates the matching key, deactivates the sibling, records an Updated audit entry, and invalidates the schema cache",
+    withCleanup((track, dispatches) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const cache = yield* ProjectSchemaCache;
+
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const keepKey = uniqueKey("activate-keep");
+        const otherKey = uniqueKey("activate-other");
+
+        const keep = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: keepKey },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", keep.id);
+        const other = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: otherKey },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", other.id);
+
+        // After the second create, `other` is active and `keep` deactivated.
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* service.setActivePaymentProviderProduct({
+          paymentProviderConfigurationId: configId,
+          productId,
+          providerProductKey: keepKey,
+        });
+
+        const keepRow = yield* findProviderProductRow(keep.id);
+        const otherRow = yield* findProviderProductRow(other.id);
+        expect(keepRow?.isActive).toBe(true);
+        expect(otherRow?.isActive).toBe(false);
+
+        // Audit is recorded against the productId (entityId) for set-active.
+        const audit = yield* findAuditEntries(productId);
+        const updatedEntry = audit.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toMatchObject({ providerProductKey: keepKey });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+
+        // Stripe provider → no replay dispatch from set-active.
+        expect(dispatches.length).toBe(0);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "schedules the App Store replay when the configuration's provider is apple-app-store",
+    withCleanup((track, dispatches) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track, "apple-app-store");
+        const key = uniqueKey("apple-activate");
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: key },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        const dispatchesBefore = dispatches.length;
+        yield* service.setActivePaymentProviderProduct({
+          paymentProviderConfigurationId: configId,
+          productId,
+          providerProductKey: key,
+        });
+
+        expect(dispatches.length).toBe(dispatchesBefore + 1);
+        expect(
+          dispatches.some(
+            (d) => d.paymentProviderProductId === productId && d.providerProductKey === key,
+          ),
+        ).toBe(true);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductValidationError when the product does not exist",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const configId = yield* insertConfiguration(track);
+
+        const error = yield* Effect.flip(
+          service.setActivePaymentProviderProduct({
+            paymentProviderConfigurationId: configId,
+            productId: `prod_missing_${Date.now()}`,
+            providerProductKey: uniqueKey("set-missing-product"),
+          }),
+        );
+        expect(error).toBeInstanceOf(PaymentProviderProductValidationError);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductValidationError when the configuration does not exist",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+
+        const error = yield* Effect.flip(
+          service.setActivePaymentProviderProduct({
+            paymentProviderConfigurationId: `pp_conf_missing_${Date.now()}`,
+            productId,
+            providerProductKey: uniqueKey("set-missing-config"),
+          }),
+        );
+        expect(error).toBeInstanceOf(PaymentProviderProductValidationError);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the active flags unchanged",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const key = uniqueKey("set-forbidden");
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: key },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            service.setActivePaymentProviderProduct({
+              paymentProviderConfigurationId: configId,
+              productId,
+              providerProductKey: key,
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        // Row remains active (the create left it active; the forbidden call wrote nothing).
+        const row = yield* findProviderProductRow(created.id);
+        expect(row?.isActive).toBe(true);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderProductService.updatePaymentProviderProduct", () => {
+  test(
+    "re-validates and updates the row's configuration & key, records an Updated audit entry, and invalidates the schema cache",
+    withCleanup((track, _dispatches) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const cache = yield* ProjectSchemaCache;
+
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const originalKey = uniqueKey("update-before");
+        const newKey = uniqueKey("update-after");
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: originalKey },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* service.updatePaymentProviderProduct({
+          configuration: { extra: "field", productKey: newKey },
+          id: created.id,
+        });
+
+        const row = yield* findProviderProductRow(created.id);
+        expect(row?.providerProductKey).toBe(newKey);
+        expect(row?.configuration).toMatchObject({
+          extra: "field",
+          productKey: newKey,
+          validated: true,
+        });
+
+        const audit = yield* findAuditEntries(created.id);
+        const updatedEntry = audit.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.parentEntityId).toBe(productId);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderProductService;
+      const error = yield* Effect.flip(
+        service.updatePaymentProviderProduct({
+          configuration: { productKey: "x" },
+          id: `pp_prod_missing_${Date.now()}`,
+        }),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderProductNotFoundError);
+    }).pipe(Effect.provide(makeServiceLayer([])), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the row unchanged",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const key = uniqueKey("update-forbidden");
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: key },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            service.updatePaymentProviderProduct({
+              configuration: { productKey: uniqueKey("update-forbidden-new") },
+              id: created.id,
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findProviderProductRow(created.id);
+        expect(row?.providerProductKey).toBe(key);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderProductService.deletePaymentProviderProduct", () => {
+  test(
+    "hard-deletes the row, records a Deleted audit entry, and invalidates the schema cache",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const cache = yield* ProjectSchemaCache;
+
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: uniqueKey("delete") },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* service.deletePaymentProviderProduct({ id: created.id });
+
+        const row = yield* findProviderProductRow(created.id);
+        expect(row).toBeUndefined();
+
+        const audit = yield* findAuditEntries(created.id);
+        const deletedEntry = audit.find((entry) => entry.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.parentEntityId).toBe(productId);
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductValidationError for an unknown id",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderProductService;
+      const error = yield* Effect.flip(
+        service.deletePaymentProviderProduct({ id: `pp_prod_missing_${Date.now()}` }),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderProductValidationError);
+    }).pipe(Effect.provide(makeServiceLayer([])), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the row",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: uniqueKey("delete-forbidden") },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(service.deletePaymentProviderProduct({ id: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findProviderProductRow(created.id);
+        expect(row).toBeDefined();
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderProductService.getProviderProductsByProjectId", () => {
+  test(
+    "returns provider products for products in the project, joined with provider/configuration data",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const key = uniqueKey("by-project");
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: key },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        const list = yield* service.getProviderProductsByProjectId(projectId);
+        const match = list.find((entry) => entry.id === created.id);
+        expect(match).toBeDefined();
+        expect(match?.productId).toBe(productId);
+        expect(match?.paymentProviderConfigurationId).toBe(configId);
+        expect(match?.providerId).toBe("stripe");
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderProductService;
+      const error = yield* Effect.flip(
+        asUnauthorized(service.getProviderProductsByProjectId(projectId)),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(makeServiceLayer([])), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderProductService.getProviderProductsByProductId", () => {
+  test(
+    "returns all provider products for the product",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const keyA = uniqueKey("by-product-a");
+        const keyB = uniqueKey("by-product-b");
+
+        const a = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: keyA },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", a.id);
+        const b = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: keyB },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", b.id);
+
+        const list = yield* service.getProviderProductsByProductId(productId);
+        expect(list.some((entry) => entry.id === a.id && entry.providerProductKey === keyA)).toBe(
+          true,
+        );
+        expect(list.some((entry) => entry.id === b.id && entry.providerProductKey === keyB)).toBe(
+          true,
+        );
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductValidationError when the product does not exist",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderProductService;
+      const error = yield* Effect.flip(
+        service.getProviderProductsByProductId(`prod_missing_${Date.now()}`),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderProductValidationError);
+    }).pipe(Effect.provide(makeServiceLayer([])), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(service.getProviderProductsByProductId(productId)),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaymentProviderProductService.getProviderProductById", () => {
+  test(
+    "returns the matching provider-product row",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+        const key = uniqueKey("get-by-id");
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: key },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        const row = yield* service.getProviderProductById(created.id);
+        expect(row.id).toBe(created.id);
+        expect(row.productId).toBe(productId);
+        expect(row.providerProductKey).toBe(key);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaymentProviderProductNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const service = yield* PaymentProviderProductService;
+      const error = yield* Effect.flip(
+        service.getProviderProductById(`pp_prod_missing_${Date.now()}`),
+      );
+      expect(error).toBeInstanceOf(PaymentProviderProductNotFoundError);
+    }).pipe(Effect.provide(makeServiceLayer([])), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PaymentProviderProductService;
+        const productId = yield* insertProduct(track);
+        const configId = yield* insertConfiguration(track);
+
+        const created = yield* service.createPaymentProviderProduct({
+          configuration: { productKey: uniqueKey("get-by-id-forbidden") },
+          paymentProviderConfigurationId: configId,
+          productId,
+        });
+        track("providerProduct", created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(service.getProviderProductById(created.id)),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProvider.integration.test.ts b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProvider.integration.test.ts
new file mode 100644
index 000000000..c5ea840db
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProvider.integration.test.ts
@@ -0,0 +1,1293 @@
+/**
+ * Integration tests for the App Store record engine
+ * ({@link AppStorePaymentProvider} — exported as `AppStorePaymentProviderEngine`
+ * from `@voidhash/core/services`), run against the real backend stack
+ * provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB +
+ * ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * The engine is a multi-branch purchase-recording machine: every `record*`
+ * method first resolves the App Store identity (creating / reusing a person and
+ * its `person_external_identifier`), looks up the product mapping, derives a
+ * per-event idempotency key, builds the money breakdown, and then routes to the
+ * matching `PurchaseProcessingService` action — which persists the operational
+ * `subscription` / `transaction` / `purchase` rows plus an append-only
+ * `purchase_ledger` row. These tests drive that whole graph end-to-end and
+ * verify the *persisted* side effects, not just the returned
+ * `PurchaseProcessingResult`:
+ *  - the identity rows (`person`, `person_identity`, `person_external_identifier`),
+ *  - the operational projection (`subscription` / `transaction` / `purchase`),
+ *  - the `purchase_ledger` row (idempotency key, `source` tag, provider event).
+ *
+ * What the test wires that the harness does not provide: the engine layer pulls
+ * in `PurchaseProcessingService`, `PersonIdentityService`, `FxRateService`,
+ * `PaymentConfigSecretCrypto`, and `AppStoreServerSdk`. All of those bottom out
+ * at the harness `Db` once given a handful of leaf stubs that carry no
+ * infrastructure of their own:
+ *  - `PerkGrantService.layer` (real, `Db` + `AuthSession`),
+ *  - `IdentityProjectionPublisher.noop` (synchronous projection is a no-op),
+ *  - an in-memory `IdentifyDistinctIdCompletionWorkflow` (the async identity-
+ *    migration workflow is a Cloudflare adapter at runtime; the only path that
+ *    dispatches it — the webhook-stand-in merge — wraps the call in a logging
+ *    `catch`, so a no-op dispatch is faithful),
+ *  - `AppStoreServerSdk.layer` over `FetchHttpClient.layer` (the REST SDK is
+ *    only touched by `buildSdkContextFromConfiguration`; the `record*` paths
+ *    operate purely on already-decoded JWS payloads and never make a request).
+ *
+ * Decoded JWS payloads are built in-process by decoding plain JSON through the
+ * SDK's `decodeJWSTransactionDecodedPayload` (Apple-signed verification is not
+ * available offline; the engine consumes the *decoded* payload, so decoding a
+ * synthetic one exercises the same code without an Apple signature).
+ *
+ * Conventions: every test namespaces its provider keys / product ids with a
+ * per-call unique suffix, asserts by membership / by-id (never global counts),
+ * and self-cleans every row it creates (and the append-only ledger rows) via an
+ * `Effect.ensuring` finalizer. Typed failures are asserted with `Effect.flip` +
+ * `instanceof`, paired with a DB-state assertion proving nothing leaked.
+ */
+import { Effect, Layer, Option } from "effect";
+import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  AppStoreServerSdk,
+  Type as AppleTransactionType,
+  decodeJWSRenewalInfoDecodedPayload,
+  decodeJWSTransactionDecodedPayload,
+} from "@voidhash/app-store-server-sdk";
+import {
+  FxRateService,
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseProcessingService,
+} from "@voidhash/core/services";
+import { AppStorePaymentProvider } from "@voidhash/core/services/paymentProviders/appStore/payment-provider";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import {
+  ACCOUNT_TOKEN_SERVICE_ID,
+  deriveAccountToken,
+} from "@voidhash/core/utils/crypto/account-token";
+import { generateId } from "@voidhash/core/utils";
+// The App Store error classes have no public package subpath, so they are
+// imported by relative path into `src` (the unit-test convention in the brief).
+import {
+  AppStorePaymentProviderProductNotMappedError,
+  AppStorePaymentProviderSdkTransactionMissingDistinctIdError,
+  AppStorePurchaseProcessingIdempotencyKeyDerivationError,
+} from "../../../../src/services/paymentProviders/appStore/errors.ts";
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type Project as DbProject,
+  Db,
+  PersonOrigin,
+  ProviderEnvironment,
+  and,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  products,
+  projects,
+  purchaseLedger,
+  purchases,
+  subscriptions,
+  transactions,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so generated keys stay unique even within one millisecond. */
+let seq = 0;
+const uniq = (label: string) => `it-as-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * In-memory no-op for the async identity-migration completion workflow. The
+ * real adapter is a Cloudflare Workflow wired at the application root; the only
+ * engine path that dispatches it (webhook-stand-in merge) wraps the call in a
+ * logging `catch`, so a no-op faithfully represents "dispatched, fire-and-
+ * forget".
+ */
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+/**
+ * Full dependency graph for the App Store record engine. Everything here is
+ * either a real `Db`-backed service or a leaf stub with no infrastructure of
+ * its own, so the only requirements that escape are the harness `Db` and the
+ * per-test `AuthSession` supplied by `CoreAuthSession.authenticate`. The two
+ * `provideMerge` layers cascade downward: the inner leaf stubs satisfy
+ * `PurchaseProcessingService` (needs `PerkGrantService`) and
+ * `PersonIdentityService` (needs `IdentityProjectionPublisher` +
+ * `IdentifyDistinctIdCompletionWorkflow`).
+ */
+const AppStoreEngineLive = AppStorePaymentProvider.layer.pipe(
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PurchaseProcessingService.layer,
+      PersonIdentityService.layer,
+      FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
+      PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
+      AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer)),
+    ),
+  ),
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PerkGrantService.layer,
+      IdentityProjectionPublisher.noop,
+      CompletionWorkflowStub,
+    ),
+  ),
+);
+
+// ----------------------------------------------------------------------------
+// DB read-back helpers (bypass the engine).
+// ----------------------------------------------------------------------------
+
+const findConfiguration = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderConfigurations.findFirst({
+      where: { id },
+    });
+  });
+
+const findExternalIdentifier = (identifier: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personExternalIdentifiers.findFirst({
+      where: {
+        projectId,
+        serviceId: "apple-app-store",
+        identifier,
+      },
+    });
+  });
+
+const findSubscriptionByStoreId = (storeSubscriptionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findFirst({
+      where: { storeSubscriptionId },
+    });
+  });
+
+const findPurchaseByProviderKey = (providerKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchases.findFirst({ where: { providerKey } });
+  });
+
+const findLedgerByKey = (idempotencyKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchaseLedger.findFirst({
+      where: { idempotencyKey },
+    });
+  });
+
+// ----------------------------------------------------------------------------
+// Synthetic decoded-JWS builder.
+// ----------------------------------------------------------------------------
+
+type RawTransaction = Record<string, unknown>;
+
+/**
+ * Drops keys whose value is `undefined`. The SDK payload schema uses
+ * `Schema.OptionFromOptionalKey`, which decodes a *missing* key to
+ * `Option.none()` but FAILS on a key that is present with an explicit
+ * `undefined` value (`Expected string, got undefined`). The raw builders below
+ * model "Apple omitted this field" by setting it to `undefined`; without this
+ * strip the decode would die before the engine runs. Stripping reproduces a
+ * genuine Apple payload (absent key) so the engine's `Option.none()` branches
+ * are exercised faithfully.
+ */
+const stripUndefined = (raw: RawTransaction): RawTransaction =>
+  Object.fromEntries(Object.entries(raw).filter(([, value]) => value !== undefined));
+
+/** Decode a plain JSON object into a `JWSTransactionDecodedPayload`. */
+const decoded = (raw: RawTransaction) =>
+  decodeJWSTransactionDecodedPayload(stripUndefined(raw)).pipe(Effect.orDie);
+
+/** Decode a plain JSON object into a `JWSRenewalInfoDecodedPayload`. */
+const decodedRenewal = (raw: Record<string, unknown>) =>
+  decodeJWSRenewalInfoDecodedPayload(stripUndefined(raw)).pipe(Effect.orDie);
+
+/**
+ * Builds a raw auto-renewable subscription JWS (initial purchase). Pass
+ * `transactionReason: "RENEWAL"` to make it a renewal.
+ */
+const subscriptionRaw = (overrides: RawTransaction = {}): RawTransaction => {
+  const now = Date.now();
+  const tx = uniq("tx");
+  const orig = uniq("orig");
+  return {
+    transactionId: tx,
+    originalTransactionId: orig,
+    productId: undefined, // set by callers from the mapped product key
+    type: AppleTransactionType.AUTO_RENEWABLE_SUBSCRIPTION,
+    purchaseDate: now,
+    originalPurchaseDate: now,
+    expiresDate: now + 30 * 24 * 60 * 60 * 1000,
+    signedDate: now,
+    currency: "USD",
+    price: 9990, // milliunits → 999 minor units
+    storefront: "USA",
+    environment: "Sandbox",
+    ...overrides,
+  };
+};
+
+/** Builds a raw one-time / consumable charge JWS. */
+const oneTimeRaw = (overrides: RawTransaction = {}): RawTransaction => {
+  const now = Date.now();
+  const tx = uniq("tx");
+  return {
+    transactionId: tx,
+    originalTransactionId: tx,
+    productId: undefined,
+    type: AppleTransactionType.NON_CONSUMABLE,
+    purchaseDate: now,
+    originalPurchaseDate: now,
+    signedDate: now,
+    currency: "USD",
+    price: 4990,
+    storefront: "USA",
+    environment: "Sandbox",
+    ...overrides,
+  };
+};
+
+// ----------------------------------------------------------------------------
+// Per-test parent-row seeding + cleanup.
+// ----------------------------------------------------------------------------
+
+/**
+ * Tracks every row a test creates so the `Effect.ensuring` finalizer can delete
+ * them (and the append-only `purchase_ledger` rows) regardless of how the test
+ * exits. Identity rows created by the engine (persons, identities, external
+ * identifiers) are also tracked by collected ids / project scope.
+ */
+interface CleanupTrack {
+  readonly configIds: string[];
+  readonly providerProductIds: string[];
+  readonly productIds: string[];
+  readonly ledgerKeys: string[];
+  readonly subscriptionStoreIds: string[];
+  readonly purchaseProviderKeys: string[];
+  readonly externalIdentifiers: string[];
+}
+
+const newTrack = (): CleanupTrack => ({
+  configIds: [],
+  providerProductIds: [],
+  productIds: [],
+  ledgerKeys: [],
+  subscriptionStoreIds: [],
+  purchaseProviderKeys: [],
+  externalIdentifiers: [],
+});
+
+/**
+ * Inserts a payment-provider configuration + product mapping under the fixture
+ * project and returns the typed rows the engine's `record*` methods expect as
+ * `configuration` / `project`.
+ */
+const seedConfig = (track: CleanupTrack, label: string, configOverrides: object = {}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const configId = generateId("paymentProviderConfiguration");
+    const providerProductId = generateId("paymentProviderProduct");
+    const productId = generateId("product");
+    const productKey = uniq(`${label}-prod`);
+    const bundleId = uniq(`${label}-bundle`);
+
+    track.configIds.push(configId);
+    track.providerProductIds.push(providerProductId);
+    track.productIds.push(productId);
+
+    yield* db.insert(products).values({
+      id: productId,
+      name: `AppStore IT ${label}`,
+      projectId,
+      slug: uniq(`${label}-slug`),
+    });
+    yield* db.insert(paymentProviderConfigurations).values({
+      id: configId,
+      providerId: "apple-app-store",
+      projectId,
+      paymentProviderKey: bundleId,
+      enabled: true,
+      name: `AppStore IT ${label}`,
+      configuration: {
+        appAppleId: "1234567890",
+        bundleId,
+        inAppPurchaseKeyIssuerId: "issuer-id",
+        inAppPurchaseKeyId: "key-id",
+        inAppPurchasePrivateKey: "PLAINTEXT_KEY",
+        appStoreConnectApiIssuerId: "asc-issuer",
+        appStoreConnectApiKeyId: "asc-key",
+        appStoreConnectApiVendorNumber: "12345",
+        appleServerNotificationForwardingUrl: "",
+        appleSmallBusinessProgramHasEndDate: false,
+        trackNewPurchasesFromAppleServerNotifications: true,
+        ...configOverrides,
+      },
+    });
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      id: providerProductId,
+      paymentProviderConfigurationId: configId,
+      productId,
+      providerProductKey: productKey,
+      isActive: true,
+      configuration: { productId: productKey },
+    });
+
+    const configuration = yield* findConfiguration(configId);
+
+    return {
+      configuration: configuration as DbPaymentProviderConfiguration,
+      productKey,
+      providerProductId,
+      productId,
+    };
+  });
+
+const cleanup = (track: CleanupTrack) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const ignore = <A, E>(eff: Effect.Effect<A, E, never>) => eff.pipe(Effect.ignore);
+
+    if (track.ledgerKeys.length > 0) {
+      yield* ignore(
+        db.delete(purchaseLedger).where(inArray(purchaseLedger.idempotencyKey, track.ledgerKeys)),
+      );
+    }
+    if (track.subscriptionStoreIds.length > 0) {
+      yield* ignore(
+        db
+          .delete(subscriptions)
+          .where(inArray(subscriptions.storeSubscriptionId, track.subscriptionStoreIds)),
+      );
+    }
+    if (track.purchaseProviderKeys.length > 0) {
+      yield* ignore(
+        db.delete(purchases).where(inArray(purchases.providerKey, track.purchaseProviderKeys)),
+      );
+    }
+    if (track.providerProductIds.length > 0) {
+      yield* ignore(
+        db
+          .delete(transactions)
+          .where(
+            inArray(transactions.paymentProviderConfigurationProductId, track.providerProductIds),
+          ),
+      );
+      yield* ignore(
+        db
+          .delete(subscriptions)
+          .where(
+            inArray(subscriptions.paymentProviderConfigurationProductId, track.providerProductIds),
+          ),
+      );
+      yield* ignore(
+        db
+          .delete(purchases)
+          .where(
+            inArray(purchases.paymentProviderConfigurationProductId, track.providerProductIds),
+          ),
+      );
+      yield* ignore(
+        db
+          .delete(paymentProviderConfigurationProducts)
+          .where(inArray(paymentProviderConfigurationProducts.id, track.providerProductIds)),
+      );
+    }
+    if (track.configIds.length > 0) {
+      yield* ignore(
+        db
+          .delete(paymentProviderConfigurations)
+          .where(inArray(paymentProviderConfigurations.id, track.configIds)),
+      );
+    }
+    if (track.productIds.length > 0) {
+      yield* ignore(db.delete(products).where(inArray(products.id, track.productIds)));
+    }
+    if (track.externalIdentifiers.length > 0) {
+      // Find and delete the persons (and their identities) the engine created,
+      // then the external identifiers themselves.
+      const extRows = yield* db
+        .select({ id: personExternalIdentifiers.id, personId: personExternalIdentifiers.personId })
+        .from(personExternalIdentifiers)
+        .where(
+          and(
+            eq(personExternalIdentifiers.projectId, projectId),
+            eq(personExternalIdentifiers.serviceId, "apple-app-store"),
+            inArray(personExternalIdentifiers.identifier, track.externalIdentifiers),
+          ),
+        )
+        .pipe(Effect.orElseSucceed(() => [] as { id: string; personId: string }[]));
+      const personIds = [...new Set(extRows.map((r) => r.personId))];
+      yield* ignore(
+        db
+          .delete(personExternalIdentifiers)
+          .where(
+            and(
+              eq(personExternalIdentifiers.projectId, projectId),
+              inArray(personExternalIdentifiers.identifier, track.externalIdentifiers),
+            ),
+          ),
+      );
+      if (personIds.length > 0) {
+        yield* ignore(
+          db.delete(personIdentities).where(inArray(personIdentities.personId, personIds)),
+        );
+        yield* ignore(db.delete(persons).where(inArray(persons.id, personIds)));
+      }
+    }
+  });
+
+/**
+ * Wrap a test body so all rows it creates are removed afterward, regardless of
+ * exit. The body receives the live project row (fixture `it_project`) and a
+ * mutable `track`; ids are read lazily at finalization so failures still clean.
+ */
+const withEngine = <E, R>(
+  body: (args: {
+    readonly project: DbProject;
+    readonly track: CleanupTrack;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const track = newTrack();
+  return Effect.gen(function* () {
+    const db = yield* Db;
+    const project = (yield* db.query.projects
+      .findFirst({ where: { id: projectId } })
+      .pipe(Effect.orDie)) as DbProject;
+    return yield* body({ project, track });
+  }).pipe(Effect.ensuring(cleanup(track)));
+};
+
+describe("AppStorePaymentProvider.recordPurchase", () => {
+  test(
+    "auto-renewable initial buy routes to startSubscription and persists subscription + transaction + ledger",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "sub-initial");
+        const raw = subscriptionRaw({ productId: seeded.productKey, appAccountToken: uniq("aat") });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.subscriptionStoreIds.push(storeSubId);
+        track.externalIdentifiers.push(raw.appAccountToken as string);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk",
+          distinctId: uniq("distinct"),
+        });
+
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+        expect(result.personId.length).toBeGreaterThan(0);
+        expect(result.idempotent).toBe(false);
+
+        const subRow = yield* findSubscriptionByStoreId(storeSubId);
+        expect(subRow).toBeDefined();
+        expect(subRow?.paymentProviderConfigurationProductId).toBe(seeded.providerProductId);
+        expect(subRow?.personId).toBe(result.personId);
+        expect(subRow?.providerEnvironment).toBe(ProviderEnvironment.Sandbox);
+
+        const ledger = yield* findLedgerByKey(
+          `apple:${Option.getOrThrow(decodedTx.transactionId)}:purchase:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+        track.ledgerKeys.push(ledger?.idempotencyKey ?? "");
+        expect(ledger).toBeDefined();
+        expect(ledger?.providerId).toBe("apple-app-store");
+        expect(ledger?.providerEventType).toBe("purchase");
+        expect(ledger?.source).toBe("sdk");
+        expect(ledger?.personId).toBe(result.personId);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "SDK source with appAccountToken = deriveAccountToken(distinctId) lazily registers a voidhash-account-token binding",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "sdk-token-binding");
+        const distinctId = uniq("distinct");
+        // The client derives the token from the distinctId; the equality guard
+        // in the SDK path only writes the binding for this matching case.
+        const token = yield* deriveAccountToken(distinctId);
+        const raw = subscriptionRaw({ productId: seeded.productKey, appAccountToken: token });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.subscriptionStoreIds.push(storeSubId);
+        // The `apple-app-store` binding shares the token as its identifier; this
+        // is what cleanup keys on to find + delete the person, which cascades
+        // the account-token row too.
+        track.externalIdentifiers.push(token);
+        track.ledgerKeys.push(
+          `apple:${Option.getOrThrow(decodedTx.transactionId)}:purchase:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk",
+          distinctId,
+        });
+
+        const db = yield* Db;
+        const binding = yield* db.query.personExternalIdentifiers.findFirst({
+          where: {
+            projectId,
+            serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+            identifier: token,
+          },
+        });
+        expect(binding).toBeDefined();
+        expect(binding?.personId).toBe(result.personId);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "SDK source with a foreign appAccountToken (not derived from distinctId) writes no account-token binding",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "sdk-foreign-token");
+        const distinctId = uniq("distinct");
+        // A cross-owner restore: the JWS carries the ORIGINAL buyer's token,
+        // which does not derive from this restoring person's distinctId. The
+        // equality guard must skip the binding so the buyer's token is not
+        // re-homed onto the restoring person.
+        const foreignToken = yield* deriveAccountToken(uniq("other-person"));
+        const raw = subscriptionRaw({
+          productId: seeded.productKey,
+          appAccountToken: foreignToken,
+        });
+        const decodedTx = yield* decoded(raw);
+        track.subscriptionStoreIds.push(Option.getOrThrow(decodedTx.originalTransactionId));
+        track.externalIdentifiers.push(foreignToken);
+        track.ledgerKeys.push(
+          `apple:${Option.getOrThrow(decodedTx.transactionId)}:purchase:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+
+        yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk",
+          distinctId,
+        });
+
+        const db = yield* Db;
+        const binding = yield* db.query.personExternalIdentifiers.findFirst({
+          where: {
+            projectId,
+            serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+            identifier: foreignToken,
+          },
+        });
+        expect(binding).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "renewal (transactionReason=RENEWAL) routes to renewSubscription and tags the ledger as renewal",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "renew");
+        const raw = subscriptionRaw({
+          productId: seeded.productKey,
+          transactionReason: "RENEWAL",
+          appAccountToken: uniq("aat"),
+        });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.subscriptionStoreIds.push(storeSubId);
+        track.externalIdentifiers.push(raw.appAccountToken as string);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk",
+          distinctId: uniq("distinct"),
+        });
+        track.ledgerKeys.push(
+          `apple:${Option.getOrThrow(decodedTx.transactionId)}:renewal:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+        const ledger = yield* findLedgerByKey(track.ledgerKeys[track.ledgerKeys.length - 1]!);
+        expect(ledger?.providerEventType).toBe("renewal");
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "one-time / non-consumable charge routes to completeOneTimePurchase and persists a purchase row",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "one-time");
+        const raw = oneTimeRaw({ productId: seeded.productKey, appAccountToken: uniq("aat") });
+        const decodedTx = yield* decoded(raw);
+        const providerKey = Option.getOrThrow(decodedTx.transactionId);
+        track.purchaseProviderKeys.push(providerKey);
+        track.externalIdentifiers.push(raw.appAccountToken as string);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk",
+          distinctId: uniq("distinct"),
+        });
+        track.ledgerKeys.push(
+          `apple:${providerKey}:purchase:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+
+        expect(Option.isNone(result.subscriptionId)).toBe(true);
+        const purchaseRow = yield* findPurchaseByProviderKey(providerKey);
+        expect(purchaseRow).toBeDefined();
+        expect(purchaseRow?.personId).toBe(result.personId);
+        expect(purchaseRow?.paymentProviderConfigurationProductId).toBe(seeded.providerProductId);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "SDK path with distinctId resolves a person and creates the apple external identifier",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "sdk-identity");
+        // No appAccountToken → personIdentifier falls back to originalTransactionId.
+        const raw = subscriptionRaw({ productId: seeded.productKey, appAccountToken: undefined });
+        const decodedTx = yield* decoded(raw);
+        const personIdentifier = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.subscriptionStoreIds.push(personIdentifier);
+        track.externalIdentifiers.push(personIdentifier);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk",
+          distinctId: uniq("distinct"),
+        });
+        track.ledgerKeys.push(
+          `apple:${Option.getOrThrow(decodedTx.transactionId)}:purchase:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+
+        const ext = yield* findExternalIdentifier(personIdentifier);
+        expect(ext).toBeDefined();
+        expect(ext?.personId).toBe(result.personId);
+        expect(ext?.serviceId).toBe("apple-app-store");
+        expect(ext?.isDefault).toBe(true);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "webhook path without distinctId resolves a stand-in person from the transaction identifier",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "webhook-standin");
+        const raw = subscriptionRaw({ productId: seeded.productKey, appAccountToken: undefined });
+        const decodedTx = yield* decoded(raw);
+        const personIdentifier = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.subscriptionStoreIds.push(personIdentifier);
+        track.externalIdentifiers.push(personIdentifier);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+        track.ledgerKeys.push(
+          `apple:${Option.getOrThrow(decodedTx.transactionId)}:purchase:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+
+        const ext = yield* findExternalIdentifier(personIdentifier);
+        expect(ext).toBeDefined();
+        expect(ext?.personId).toBe(result.personId);
+
+        // The stand-in person is stamped with the AppStoreWebhook origin.
+        const db = yield* Db;
+        const personRow = yield* db.query.persons.findFirst({
+          where: { id: result.personId },
+        });
+        expect(personRow?.origin).toBe(PersonOrigin.AppStoreWebhook);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "missing productId returns an ignored result and writes no operational rows",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "ignored");
+        const raw = subscriptionRaw({ productId: undefined, appAccountToken: undefined });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        // makeIgnoredPurchaseProcessingResult(): idempotent + empty.
+        expect(result.idempotent).toBe(true);
+        expect(result.personId).toBe("");
+        expect(result.analyticsEventIds.length).toBe(0);
+        expect(Option.isNone(result.subscriptionId)).toBe(true);
+
+        const subRow = yield* findSubscriptionByStoreId(storeSubId);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "unmapped productId fails with AppStorePaymentProviderProductNotMappedError and writes nothing",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "not-mapped");
+        const unmappedKey = uniq("unmapped");
+        const raw = subscriptionRaw({ productId: unmappedKey, appAccountToken: undefined });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.externalIdentifiers.push(storeSubId); // identity is resolved before the mapping check
+
+        const error = yield* Effect.flip(
+          engine.recordPurchase({
+            configuration: seeded.configuration,
+            project,
+            decodedTransaction: decodedTx,
+            decodedRenewalInfo: Option.none(),
+            providerEnvironment: ProviderEnvironment.Sandbox,
+            receivedAt: new Date(),
+            source: "webhook",
+          }),
+        );
+        expect(error).toBeInstanceOf(AppStorePaymentProviderProductNotMappedError);
+        if (error instanceof AppStorePaymentProviderProductNotMappedError) {
+          expect(error.providerProductKey).toBe(unmappedKey);
+          expect(error.paymentProviderConfigurationId).toBe(seeded.configuration.id);
+        }
+
+        const subRow = yield* findSubscriptionByStoreId(storeSubId);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  // Deferred: this error branch is unreachable from any decoded webhook
+  // payload. `_resolveAppStorePurchaseContext` first requires a non-None
+  // `providerTransactionId` (= `decodedTransaction.transactionId` on the
+  // webhook path, since `sdkTransactionId` is sdk-only) or it fails with
+  // `AppStorePaymentProviderServiceError`. `getAppStorePersonIdentifier`
+  // then falls through `appAccountToken → originalTransactionId →
+  // transactionId`, so whenever `transactionId` is present (a precondition
+  // for getting this far) the person identifier is `Some(transactionId)` and
+  // the `MissingPersonIdentifier` branch never fires — the engine instead
+  // resolves a webhook stand-in keyed on the transactionId and records a
+  // normal purchase. There is no input that satisfies the transactionId
+  // precondition while leaving the person identifier None, so this assertion
+  // can only be exercised by unit-testing `getAppStorePersonIdentifier` /
+  // `_resolveAppStorePurchaseContext` with a hand-built payload, not from the
+  // engine boundary against a real decoded JWS.
+  vitestTest.todo(
+    "webhook transaction without a person identifier fails with TransactionMissingPersonIdentifierError — unreachable: a present transactionId (required to pass the up-front providerTransactionId check) is also the final fallback of getAppStorePersonIdentifier, so personIdentifier is never None on this path",
+  );
+
+  test(
+    "SDK source without a distinctId fails with SdkTransactionMissingDistinctIdError",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "sdk-no-distinct");
+        const raw = subscriptionRaw({ productId: seeded.productKey });
+        const decodedTx = yield* decoded(raw);
+        const providerTransactionId = Option.getOrThrow(decodedTx.transactionId);
+
+        // Force the `source: "sdk"` branch with distinctId absent at runtime;
+        // the discriminated-union type requires it, so cast through unknown.
+        const input = {
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk",
+          distinctId: undefined,
+        } as unknown as Parameters<typeof engine.recordPurchase>[0];
+
+        const error = yield* Effect.flip(engine.recordPurchase(input));
+        expect(error).toBeInstanceOf(AppStorePaymentProviderSdkTransactionMissingDistinctIdError);
+        if (error instanceof AppStorePaymentProviderSdkTransactionMissingDistinctIdError) {
+          expect(error.providerTransactionId).toBe(providerTransactionId);
+        }
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "a JWS missing the purchase-key anchor fails with IdempotencyKeyDerivationError and writes nothing",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "idemp-fail");
+        // purchase/renewal idempotency key needs purchaseDate; omit it.
+        const raw = subscriptionRaw({
+          productId: seeded.productKey,
+          appAccountToken: undefined,
+          purchaseDate: undefined,
+        });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.externalIdentifiers.push(storeSubId); // identity is resolved before key derivation
+
+        const error = yield* Effect.flip(
+          engine.recordPurchase({
+            configuration: seeded.configuration,
+            project,
+            decodedTransaction: decodedTx,
+            decodedRenewalInfo: Option.none(),
+            providerEnvironment: ProviderEnvironment.Sandbox,
+            receivedAt: new Date(),
+            source: "webhook",
+          }),
+        );
+        expect(error).toBeInstanceOf(AppStorePurchaseProcessingIdempotencyKeyDerivationError);
+        if (error instanceof AppStorePurchaseProcessingIdempotencyKeyDerivationError) {
+          expect(error.missingField).toBe("purchaseDate");
+        }
+
+        const subRow = yield* findSubscriptionByStoreId(storeSubId);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "duplicate delivery of the same logical event returns an idempotent result (ledger UNIQUE gate)",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "idempotent");
+        const raw = subscriptionRaw({ productId: seeded.productKey, appAccountToken: uniq("aat") });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+        track.subscriptionStoreIds.push(storeSubId);
+        track.externalIdentifiers.push(raw.appAccountToken as string);
+        track.ledgerKeys.push(
+          `apple:${Option.getOrThrow(decodedTx.transactionId)}:purchase:${Option.getOrThrow(decodedTx.purchaseDate)}`,
+        );
+
+        const input = {
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "sdk" as const,
+          distinctId: uniq("distinct"),
+        };
+
+        const first = yield* engine.recordPurchase(input);
+        expect(first.idempotent).toBe(false);
+
+        const second = yield* engine.recordPurchase(input);
+        expect(second.idempotent).toBe(true);
+        // The replayed result mirrors the first caller's subscription id.
+        expect(Option.getOrNull(second.subscriptionId)).toBe(
+          Option.getOrNull(first.subscriptionId),
+        );
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("AppStorePaymentProvider lifecycle record* routing", () => {
+  /**
+   * Seed a live subscription via `recordPurchase` (initial buy) so a follow-up
+   * lifecycle event has a real `subscription` row to mutate. Returns the
+   * decoded transaction, seeded config, and the resolved person id.
+   */
+  const seedActiveSubscription = (track: CleanupTrack, project: DbProject, label: string) =>
+    Effect.gen(function* () {
+      const engine = yield* AppStorePaymentProvider;
+      const seeded = yield* seedConfig(track, label);
+      const raw = subscriptionRaw({ productId: seeded.productKey, appAccountToken: uniq("aat") });
+      // Returned to tests; its (later) purchaseDate drives every follow-up
+      // lifecycle event's occurredAt.
+      const decodedTx = yield* decoded(raw);
+      const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+      track.subscriptionStoreIds.push(storeSubId);
+      track.externalIdentifiers.push(raw.appAccountToken as string);
+      // Seed the initial purchase one hour EARLIER so the subscription's
+      // `last_event_occurred_at` watermark sits strictly before every follow-up
+      // lifecycle event that reuses `decodedTx`. A same-occurredAt projection
+      // update is intermittently rejected by the `<= occurredAt` guard — the
+      // `TIMESTAMP` (second-precision) column can round the stored watermark a
+      // fraction ahead of an equal literal — which would leave the asserted field
+      // at its default. Same originalTransactionId ⇒ same subscription target.
+      const seedTx = yield* decoded({
+        ...raw,
+        purchaseDate: (raw.purchaseDate as number) - 60 * 60 * 1000,
+      });
+      track.ledgerKeys.push(
+        `apple:${Option.getOrThrow(seedTx.transactionId)}:purchase:${Option.getOrThrow(seedTx.purchaseDate)}`,
+      );
+      const result = yield* engine.recordPurchase({
+        configuration: seeded.configuration,
+        project,
+        decodedTransaction: seedTx,
+        decodedRenewalInfo: Option.none(),
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "sdk",
+        distinctId: uniq("distinct"),
+      });
+      return { decodedTx, raw, seeded, personId: result.personId, storeSubId };
+    });
+
+  test(
+    "recordSubscriptionExpired marks the subscription expired and writes an expired ledger row",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "expired");
+        const expiresDate = Option.getOrThrow(active.decodedTx.expiresDate);
+        track.ledgerKeys.push(`apple:${active.storeSubId}:expired:${expiresDate}`);
+
+        const result = yield* engine.recordSubscriptionExpired({
+          configuration: active.seeded.configuration,
+          project,
+          decodedTransaction: active.decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+
+        const ledger = yield* findLedgerByKey(`apple:${active.storeSubId}:expired:${expiresDate}`);
+        expect(ledger?.providerEventType).toBe("expired");
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordSubscriptionCanceled records the cancel-at-period-end intent on the subscription",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "cancel");
+        const expiresDate = Option.getOrThrow(active.decodedTx.expiresDate);
+        track.ledgerKeys.push(`apple:${active.storeSubId}:canceled:${expiresDate}`);
+
+        // The cancellation must arrive strictly *after* the seeding purchase so
+        // the subscription's `last_event_occurred_at` watermark accepts the
+        // projection update. The seed and a same-`purchaseDate` cancel share an
+        // identical `occurredAt`, and the `TIMESTAMP` (second-precision) column
+        // can round the stored watermark a fraction ahead of the equal literal
+        // in the `<= occurredAt` guard, intermittently rejecting the update
+        // (`affectedRows === 0`) and leaving `cancelAtPeriodEnd` at its default.
+        // Bumping `purchaseDate` (which drives `occurredAt`) mirrors real
+        // ordering and keeps `originalTransactionId`/`expiresDate` — hence the
+        // subscription target and the `canceled` idempotency/ledger key —
+        // unchanged.
+        const cancelTx = yield* decoded({
+          ...active.raw,
+          purchaseDate: (active.raw.purchaseDate as number) + 60_000,
+        });
+
+        yield* engine.recordSubscriptionCanceled({
+          configuration: active.seeded.configuration,
+          project,
+          decodedTransaction: cancelTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+          cancelAtPeriodEnd: true,
+        });
+
+        const subRow = yield* findSubscriptionByStoreId(active.storeSubId);
+        expect(subRow?.cancelAtPeriodEnd).toBe(true);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordEntitlementRevoked routes auto-renewable subscriptions to revokeSubscription (revoke ledger)",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "revoke-sub");
+        const now = Date.now();
+        const revokedTx = yield* decoded({
+          ...active.raw,
+          revocationDate: now,
+        });
+        track.ledgerKeys.push(`apple:${Option.getOrThrow(revokedTx.transactionId)}:revoke:${now}`);
+
+        const result = yield* engine.recordEntitlementRevoked({
+          configuration: active.seeded.configuration,
+          project,
+          decodedTransaction: revokedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+
+        const ledger = yield* findLedgerByKey(
+          `apple:${Option.getOrThrow(revokedTx.transactionId)}:revoke:${now}`,
+        );
+        expect(ledger?.providerEventType).toBe("revoke");
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordBillingRetry pulls gracePeriodExpiresDate from decodedRenewalInfo when present",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "billing-retry");
+        const expiresDate = Option.getOrThrow(active.decodedTx.expiresDate);
+        const grace = Date.now() + 5 * 24 * 60 * 60 * 1000;
+        track.ledgerKeys.push(`apple:${active.storeSubId}:billing_retry:${expiresDate}`);
+
+        const renewalInfo = yield* decodedRenewal({
+          originalTransactionId: active.storeSubId,
+          gracePeriodExpiresDate: grace,
+        });
+
+        // Bump purchaseDate so occurredAt is strictly after the seed watermark
+        // (mirrors the recordSubscriptionCanceled test): a same-occurredAt event
+        // is intermittently rejected by the `<= occurredAt` projection guard
+        // (TIMESTAMP second-precision rounding), leaving billingRetryAt /
+        // gracePeriodExpiresAt at their null defaults. expiresDate (the ledger
+        // key) and originalTransactionId (the subscription target) are unchanged.
+        const retryTx = yield* decoded({
+          ...active.raw,
+          purchaseDate: (active.raw.purchaseDate as number) + 60_000,
+        });
+
+        yield* engine.recordBillingRetry({
+          configuration: active.seeded.configuration,
+          project,
+          decodedTransaction: retryTx,
+          decodedRenewalInfo: Option.some(renewalInfo),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        const subRow = yield* findSubscriptionByStoreId(active.storeSubId);
+        expect(subRow?.billingRetryAt).toBeInstanceOf(Date);
+        expect(subRow?.gracePeriodExpiresAt).toBeInstanceOf(Date);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordOfferRedeemed stores the redeemed offer id on the subscription",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "offer");
+        const offerId = uniq("offer");
+        const offerTx = yield* decoded({ ...active.raw, offerIdentifier: offerId });
+        track.ledgerKeys.push(
+          `apple:${Option.getOrThrow(offerTx.transactionId)}:offer_redeemed:${Option.getOrThrow(offerTx.purchaseDate)}:${offerId}`,
+        );
+
+        yield* engine.recordOfferRedeemed({
+          configuration: active.seeded.configuration,
+          project,
+          decodedTransaction: offerTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        const subRow = yield* findSubscriptionByStoreId(active.storeSubId);
+        expect(subRow?.redeemedOfferId).toBe(offerId);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordRenewalPreferenceChange records the intent even when the new product is not yet mapped",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "renewal-pref");
+        const expiresDate = Option.getOrThrow(active.decodedTx.expiresDate);
+        const productKey = Option.getOrThrow(active.decodedTx.productId);
+        track.ledgerKeys.push(
+          `apple:${active.storeSubId}:renewal_pref_change:${expiresDate}:${productKey}`,
+        );
+
+        // The transaction still references the currently-mapped product, but
+        // `changeRenewalPreference` records intent regardless of whether the
+        // *next* product is mapped — here it resolves to the same mapping.
+        const result = yield* engine.recordRenewalPreferenceChange({
+          configuration: active.seeded.configuration,
+          project,
+          decodedTransaction: active.decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+
+        const ledger = yield* findLedgerByKey(track.ledgerKeys[track.ledgerKeys.length - 1]!);
+        expect(ledger?.providerEventType).toBe("renewal_pref_change");
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordInformationalNotification returns an ignored result and writes no operational rows",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "informational");
+        const raw = subscriptionRaw({ productId: seeded.productKey, appAccountToken: undefined });
+        const decodedTx = yield* decoded(raw);
+        const storeSubId = Option.getOrThrow(decodedTx.originalTransactionId);
+
+        const result = yield* engine.recordInformationalNotification({
+          configuration: seeded.configuration,
+          project,
+          decodedTransaction: decodedTx,
+          decodedRenewalInfo: Option.none(),
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        expect(result.idempotent).toBe(true);
+        expect(result.personId).toBe("");
+        const subRow = yield* findSubscriptionByStoreId(storeSubId);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("AppStorePaymentProvider.buildSdkContextFromConfiguration", () => {
+  test(
+    "decodes the stored configuration, decrypts the in-app-purchase key, and builds an SDK context",
+    withEngine(({ track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "sdk-context");
+
+        const context = yield* engine.buildSdkContextFromConfiguration(seeded.configuration);
+        // The context exposes the per-tenant verifier / client helpers and the
+        // bundle id parsed from the stored configuration.
+        expect(typeof context.decodeNotification).toBe("function");
+        expect(typeof context.getTransactionInfo).toBe("function");
+        expect(context.bundleId).toBe(seeded.configuration.paymentProviderKey);
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "propagates a Schema decode failure when the stored configuration is malformed",
+    withEngine(({ track }) =>
+      Effect.gen(function* () {
+        const engine = yield* AppStorePaymentProvider;
+        const seeded = yield* seedConfig(track, "bad-config");
+        // Overwrite the configuration JSON with a shape that fails the schema
+        // (missing every required field).
+        const db = yield* Db;
+        yield* db
+          .update(paymentProviderConfigurations)
+          .set({ configuration: { bundleId: "" } })
+          .where(eq(paymentProviderConfigurations.id, seeded.configuration.id));
+        const broken = yield* findConfiguration(seeded.configuration.id);
+
+        const exit = yield* Effect.exit(
+          engine.buildSdkContextFromConfiguration(broken as DbPaymentProviderConfiguration),
+        );
+        expect(exit._tag).toBe("Failure");
+      }),
+    ).pipe(Effect.provide(AppStoreEngineLive), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("AppStorePaymentProvider identity-transfer paths (deferred)", () => {
+  // `vitestTest` is vitest's native `test` (the harness-wrapped `test` has no
+  // `.todo`); these paths can't be asserted faithfully from the engine boundary.
+  vitestTest.todo(
+    "cross-owner restore: SDK confirmation transfers the subscription from the previous owner to the SDK person per transferMode — deferred because faithfully exercising PurchaseProcessingService.transferSubscription needs a multi-person operational fixture (two real persons, a fully-projected subscription on the previous owner, and the transferMode-specific re-grant/clone semantics) that is too coupled to PurchaseProcessing internals to assert reliably from the engine boundary; cover this in a dedicated PurchaseProcessingService transfer integration test instead.",
+  );
+
+  vitestTest.todo(
+    "webhook-stand-in merge: an SDK confirmation merges the webhook stand-in person into the SDK person via identifyDistinctId and rebinds the external identifier — deferred because the merge call is wrapped in a logging catch in the engine (so success vs. degraded-rebind is not observable from the result), and a faithful assertion would have to reach into PersonIdentityService.identifyDistinctId's merge/projection internals; cover the merge in a PersonIdentityService integration test and the rebind-only fallback there.",
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts
new file mode 100644
index 000000000..403087eff
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts
@@ -0,0 +1,222 @@
+/**
+ * Integration tests for {@link AppStorePaymentProviderService} — specifically
+ * its live implementation `AppStorePaymentProviderServiceLive` and the single
+ * public SDK-path method `processSdkTransaction`
+ * (`src/services/paymentProviders/appStore/payment-provider-service.ts`).
+ *
+ * `processSdkTransaction` runs four stages in order:
+ *   1. resolve the enabled configuration for `input.bundleId` under
+ *      `input.projectId` (DB read + pure key match),
+ *   2. resolve the project from `input.projectId` (DB read),
+ *   3. build the per-tenant Apple SDK context and call
+ *      `getTransactionInfo` (live Apple HTTPS) + `decodeSignedTransaction`
+ *      (JWS verification against Apple root certs),
+ *   4. forward the decoded transaction to `AppStorePaymentProvider.recordPurchase`.
+ *
+ * STAGE 3 IS THE HARD WALL. Once a configuration resolves, the method calls
+ * `appStorePaymentProvider.buildSdkContextFromConfiguration(configuration)`,
+ * which builds a *real* `AppStoreServerSdkClient` + `SignedDataVerifier` (see
+ * `appStore/sdk-context.ts`), then calls `sdkContext.getTransactionInfo(...)` —
+ * a live HTTPS request to Apple's App Store Server API — and
+ * `sdkContext.decodeSignedTransaction(...)` — real X.509 chain + JWS signature
+ * verification against Apple's root certificates. The SDK context is built
+ * *internally*; there is no override seam to inject a fake context, and the
+ * testing brief defers any path that needs an Apple-signed JWS payload or an
+ * external provider sandbox to `test.todo` rather than hand-rolling a double.
+ * So every happy-path case and every post-configuration error case (missing
+ * `signedTransactionInfo`, SDK/verification error, `recordPurchase` failure) is
+ * deferred — they cannot run in-process against real infrastructure.
+ *
+ * STAGE 1 (configuration-not-found), HOWEVER, RUNS FULLY IN-PROCESS and is
+ * implemented below as a real harness test. The live layer *can* be built
+ * against harness `Db` + `AuthSession`: `AppStorePaymentProviderServiceLive`
+ * provides `AppStoreWebhookHandlerService.layer` (which merges
+ * `AppStorePaymentProvider.layer`), and its residual deps
+ * (`PurchaseProcessingService`, `PersonIdentityService`, `FxRateService`,
+ * `PaymentConfigSecretCrypto`, `AppStoreServerSdk`) all bottom out at the
+ * harness `Db` once given the same leaf stubs the sibling
+ * `AppStorePaymentProvider.integration.test.ts` already uses (which exercises
+ * `recordPurchase` end-to-end — there is NO ambient `Cloudflare.Worker`
+ * requirement on the record path; the `as unknown as` cast in the source only
+ * erases the *service-shape* `R` for the public contract, it does not gate
+ * layer construction). With no enabled configuration for the input `bundleId`,
+ * `getActiveAppStorePaymentProviderConfiguration` fails *before* the SDK
+ * boundary is reached, and `processSdkTransaction`'s `toServiceError` wrapper
+ * collapses that into the public {@link AppStorePaymentProviderServiceError}.
+ *
+ * See the sibling suite `AppStorePaymentProvider.integration.test.ts` for the
+ * record-engine layer idiom and `appStore/sdk-context.test.ts` for the SDK
+ * boundary todos.
+ */
+import { Effect, Layer } from "effect";
+import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { AppStoreServerSdk } from "@voidhash/app-store-server-sdk";
+import {
+  FxRateService,
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseProcessingService,
+} from "@voidhash/core/services";
+import { AppStorePaymentProvider } from "@voidhash/core/services/paymentProviders/appStore/payment-provider";
+import {
+  AppStorePaymentProviderService,
+  // Import the error from the SAME module the source throws it from
+  // (`paymentProviders/AppStorePaymentProviderService.ts`, re-exported by the
+  // `@voidhash/core/services` barrel). The look-alike class in
+  // `appStore/errors.ts` shares the `_tag` string but is a DISTINCT runtime
+  // class, so `toBeInstanceOf` against it fails even when the tag matches.
+  AppStorePaymentProviderServiceError,
+} from "@voidhash/core/services";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+// The live layer has no public package subpath, so it is imported by relative
+// path into `src` (the App-Store unit-test convention used by the sibling
+// engine suite for the error classes).
+import { AppStorePaymentProviderServiceLive } from "../../../../src/services/paymentProviders/appStore/payment-provider-service.ts";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so generated ids stay unique even within one millisecond. */
+let seq = 0;
+const uniq = (label: string) => `it-asps-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * In-memory no-op for the async identity-migration completion workflow (the
+ * real adapter is a Cloudflare Workflow at the application root). The
+ * configuration-not-found path never dispatches it, but it is part of the
+ * `PersonIdentityService` dependency graph, so it must be provided to build
+ * the layer.
+ */
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+/**
+ * Full dependency graph for `AppStorePaymentProviderServiceLive`. Mirrors the
+ * sibling engine suite's `AppStoreEngineLive`: every node is either a real
+ * `Db`-backed service or a leaf stub with no infrastructure of its own, so the
+ * only requirements that escape are the harness `Db` and the per-test
+ * `AuthSession` supplied by `CoreAuthSession.authenticate`.
+ */
+const AppStoreServiceLive = AppStorePaymentProviderServiceLive.pipe(
+  Layer.provide(
+    AppStorePaymentProvider.layer.pipe(
+      Layer.provideMerge(
+        Layer.mergeAll(
+          PurchaseProcessingService.layer,
+          PersonIdentityService.layer,
+          FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
+          PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
+          AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer)),
+        ),
+      ),
+      Layer.provideMerge(
+        Layer.mergeAll(
+          PerkGrantService.layer,
+          IdentityProjectionPublisher.noop,
+          CompletionWorkflowStub,
+        ),
+      ),
+    ),
+  ),
+);
+
+describe("AppStorePaymentProviderService.processSdkTransaction", () => {
+  // --- Error aggregation: configuration-not-found (RUNNABLE, pre-SDK) ---------
+  // The cheapest and only in-process-reachable branch: with no enabled
+  // configuration for the input bundleId,
+  // `getActiveAppStorePaymentProviderConfiguration` fails with
+  // `AppStorePaymentProviderNotEnabledForFollowingBundleIdError` BEFORE the SDK
+  // boundary, and `processSdkTransaction`'s `toServiceError` wrapper collapses
+  // it into the public `AppStorePaymentProviderServiceError`. The fixture
+  // project has no apple-app-store configuration matching this unique bundleId,
+  // so nothing is seeded and nothing is written — there is nothing to clean up.
+  test(
+    "configuration-not-found (no enabled config for bundleId) aggregates to AppStorePaymentProviderServiceError",
+    Effect.gen(function* () {
+      const service = yield* AppStorePaymentProviderService;
+
+      const error = yield* Effect.flip(
+        service.processSdkTransaction({
+          bundleId: uniq("missing-bundle"),
+          distinctId: uniq("distinct"),
+          projectId,
+          receivedAt: new Date(),
+          transactionId: uniq("tx"),
+        }),
+      );
+
+      // The public boundary collapses the whole upstream error union into the
+      // single `AppStorePaymentProviderServiceError` tag (not the internal
+      // `NotEnabledForFollowingBundleId` business error).
+      expect(error).toBeInstanceOf(AppStorePaymentProviderServiceError);
+      expect(typeof error.cause).toBe("string");
+    }).pipe(Effect.provide(AppStoreServiceLive), CoreAuthSession.authenticate()),
+  );
+
+  // --- Happy-path orchestration (needs a live Apple call + JWS) ---------------
+  // Each step below resolves a real configuration, then reaches the SDK
+  // boundary (live Apple REST `getTransactionInfo` + JWS verification against
+  // Apple root certs) which cannot run in-process. The SDK context is built
+  // internally by `buildSdkContextFromConfiguration` with no stub seam, and the
+  // testing brief disallows faking the Apple response. Implement once an
+  // in-process seam exists to inject a well-formed decoded transaction WITHOUT
+  // a live Apple call.
+
+  vitestTest.todo(
+    "resolves the enabled configuration for the input bundleId before calling the SDK — deferred: the success path continues into the SDK boundary (live Apple getTransactionInfo + JWS verification) which cannot run in-process; only the configuration-not-found short-circuit (above) is reachable",
+  );
+
+  vitestTest.todo(
+    "fetches transaction info from the per-tenant Apple SDK context (getTransactionInfo) — deferred: needs a live Apple App Store Server API call; the SDK context is built internally and has no stub seam, and faking the Apple response is disallowed",
+  );
+
+  vitestTest.todo(
+    "decodes signedTransactionInfo from the SDK response (decodeSignedTransaction) — deferred: needs a real Apple-signed JWS verified against Apple root certificates; cannot be faked per the testing brief",
+  );
+
+  vitestTest.todo(
+    "routes the decoded transaction to recordPurchase with source='sdk' and persists the purchase/subscription rows — deferred: reaching recordPurchase requires the upstream live Apple getTransactionInfo + JWS decode to succeed first, which cannot run in-process (recordPurchase itself IS exercised directly in the sibling AppStorePaymentProvider engine suite)",
+  );
+
+  vitestTest.todo(
+    "includes the input distinctId in the recordPurchase input so the purchase binds to the SDK person — deferred: blocked by the same upstream SDK getTransactionInfo + JWS decode boundary as the recordPurchase routing case",
+  );
+
+  vitestTest.todo(
+    "resolves the project from input.projectId and propagates it into recordPurchase — deferred: project is read after configuration resolution and before the unrunnable live-Apple SDK fetch, so the success path cannot be reached in-process",
+  );
+
+  vitestTest.todo(
+    "returns { personId } from recordPurchase on success — deferred: success requires a real Apple-signed transaction fetched + decoded via the live SDK boundary",
+  );
+
+  // --- Error aggregation to AppStorePaymentProviderServiceError (post-SDK) ----
+  // These branches all fire at or after the SDK call, so they require driving
+  // the live Apple REST / JWS verification path.
+
+  vitestTest.todo(
+    "project-not-found (input.projectId has no projects row) dies at the public boundary — deferred: reaching the project lookup requires a matching enabled configuration to resolve first, but configurations are FK-scoped to a real projects row, so an orphan config can't exist via normal seeding; and the source uses Effect.die (a defect, not caught by the toServiceError failure wrapper), so it surfaces as a defect rather than an aggregated AppStorePaymentProviderServiceError",
+  );
+
+  vitestTest.todo(
+    "missing signedTransactionInfo on the SDK response aggregates to AppStorePaymentProviderServiceError — deferred: requires a real SDK getTransactionInfo response we can only obtain from a live Apple sandbox",
+  );
+
+  vitestTest.todo(
+    "SDK error (VerificationError / Apple HTTP error) aggregates to AppStorePaymentProviderServiceError — deferred: requires driving the real Apple REST/JWS verification path to fail; faking the SDK is disallowed",
+  );
+
+  vitestTest.todo(
+    "recordPurchase failure aggregates to AppStorePaymentProviderServiceError — deferred: reaching recordPurchase requires a real decoded Apple transaction from the live SDK boundary",
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderServiceQueries.integration.test.ts b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderServiceQueries.integration.test.ts
new file mode 100644
index 000000000..a52954cb6
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderServiceQueries.integration.test.ts
@@ -0,0 +1,1356 @@
+/**
+ * Integration tests for {@link AppStorePaymentProviderServiceQueries}, run
+ * against the real backend stack provisioned once by
+ * `test/_testing/globalSetup.ts` (live PlanetScale DB; only the project schema
+ * cache is an in-memory stub).
+ *
+ * This module is a thin layer of DB-bound query primitives with no business
+ * logic, no permission checks, and no domain errors — every failure mode just
+ * propagates the underlying `DbError`. So these tests do not exercise
+ * `ActionForbiddenError` / tagged-error paths (there are none); instead each
+ * test seeds the minimal rows the query reads, runs the primitive, and asserts
+ * the returned value (and, for the write primitives, the *persisted* row read
+ * back straight from the database).
+ *
+ * Conventions used throughout:
+ *  - Every test shares the one seeded fixture project ({@link CoreTestFixture})
+ *    but cleans up after itself: {@link withCleanup} deletes every row it
+ *    created on exit, success or failure, deepest foreign-key dependents first.
+ *    The global teardown sweep is only a backstop. Identifiers are made unique
+ *    per call via {@link uniqueId} so a leftover row from a crashed run can't
+ *    collide, and assertions stay membership-based (`.some(...)`/by-id).
+ *  - Parent rows the fixture does NOT seed (persons, payment-provider configs +
+ *    products, subscriptions, transactions, purchases, notification rows) are
+ *    inserted raw in each test and tracked for cleanup.
+ *  - The service requires only `Db`, which the harness provides; the test
+ *    provides `AppStorePaymentProviderServiceQueries.layer` and authenticates
+ *    with the default fixture session purely to satisfy the harness shape (the
+ *    primitives never read `AuthSession`).
+ */
+import { Effect, Option } from "effect";
+import { describe, expect } from "vitest";
+
+import { AppStorePaymentProviderServiceQueries } from "@voidhash/core/services/paymentProviders/appStore/payment-provider-service-queries";
+import {
+  Db,
+  PersonOrigin,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  paymentProviderNotificationProcessed,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  purchases,
+  subscriptions,
+  transactions,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+const uniqueId = (label: string) => `it-appstore-${label}-${Date.now()}-${idSeq++}`;
+
+/**
+ * Raw-insert builders for the parent rows the fixture does not seed. Each
+ * returns the row's id (or the row), inserting only the NOT-NULL columns the
+ * queries under test read back. Inserts run via `yield* Db` + native builders.
+ */
+const insertPerson = (overrides: {
+  readonly id: string;
+  readonly origin?: number;
+  readonly projectIdOverride?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(persons).values({
+      id: overrides.id,
+      origin: overrides.origin ?? PersonOrigin.IOS,
+      projectId: overrides.projectIdOverride ?? projectId,
+    });
+    return overrides.id;
+  });
+
+const insertPersonIdentity = (input: {
+  readonly id: string;
+  readonly personId: string;
+  readonly distinctId: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(personIdentities).values({
+      distinctId: input.distinctId,
+      id: input.id,
+      personId: input.personId,
+      projectId,
+    });
+    return input.id;
+  });
+
+const insertProviderConfig = (input: { readonly id: string; readonly deletedAt?: Date | null }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(paymentProviderConfigurations).values({
+      deletedAt: input.deletedAt ?? null,
+      id: input.id,
+      name: "App Store",
+      paymentProviderKey: `com.test.${input.id}`,
+      projectId,
+      providerId: "app_store",
+    });
+    return input.id;
+  });
+
+const insertProviderConfigProduct = (input: {
+  readonly id: string;
+  readonly paymentProviderConfigurationId: string;
+  readonly productId: string;
+  readonly providerProductKey: string;
+  readonly isActive?: boolean;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      id: input.id,
+      isActive: input.isActive ?? true,
+      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+      productId: input.productId,
+      providerProductKey: input.providerProductKey,
+    });
+    return input.id;
+  });
+
+const insertSubscription = (input: {
+  readonly id: string;
+  readonly personId: string;
+  readonly storeSubscriptionId: string;
+  readonly paymentProviderConfigurationProductId: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const now = new Date();
+    yield* db.insert(subscriptions).values({
+      id: input.id,
+      initialTransactionId: `${input.id}-init`,
+      latestTransactionId: `${input.id}-latest`,
+      paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+      personId: input.personId,
+      purchasedAt: now,
+      startsAt: now,
+      status: 1, // SubscriptionStatus.Active
+      storeSubscriptionId: input.storeSubscriptionId,
+    });
+    return input.id;
+  });
+
+const insertTransaction = (input: {
+  readonly id: string;
+  readonly personId: string;
+  readonly storeTransactionId: string;
+  readonly paymentProviderConfigurationProductId: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(transactions).values({
+      amount: 999,
+      currency: "USD",
+      id: input.id,
+      occurredAt: new Date(),
+      paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+      personId: input.personId,
+      storeTransactionId: input.storeTransactionId,
+    });
+    return input.id;
+  });
+
+const insertPurchase = (input: {
+  readonly id: string;
+  readonly personId: string;
+  readonly providerKey: string;
+  readonly paymentProviderConfigurationProductId: string;
+  readonly type?: number;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(purchases).values({
+      id: input.id,
+      paymentProviderConfigurationProductId: input.paymentProviderConfigurationProductId,
+      personId: input.personId,
+      providerKey: input.providerKey,
+      type: input.type ?? 1, // PurchaseType.OneTime
+    });
+    return input.id;
+  });
+
+/** Insert a `payment_provider_notification_processed` row directly. */
+const insertNotificationRow = (input: {
+  readonly id: string;
+  readonly paymentProviderConfigurationId: string;
+  readonly notificationUuid: string;
+  readonly result: string;
+  readonly processedAt?: Date;
+  readonly parkedUntilProviderProductKey?: string | null;
+  readonly parkedUntilOriginalTransactionId?: string | null;
+  readonly parkedRawPayload?: unknown;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(paymentProviderNotificationProcessed).values({
+      id: input.id,
+      notificationType: "TEST",
+      notificationUuid: input.notificationUuid,
+      parkedRawPayload: input.parkedRawPayload ?? null,
+      parkedUntilOriginalTransactionId: input.parkedUntilOriginalTransactionId ?? null,
+      parkedUntilProviderProductKey: input.parkedUntilProviderProductKey ?? null,
+      paymentProviderConfigurationId: input.paymentProviderConfigurationId,
+      processedAt: input.processedAt ?? new Date(),
+      providerId: "app_store",
+      result: input.result,
+      source: "webhook",
+    });
+    return input.id;
+  });
+
+/** Read a notification row straight from the database. */
+const findNotificationRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderNotificationProcessed.findFirst({
+      where: { id },
+    });
+  });
+
+/** Read an external-identifier row straight from the database. */
+const findExternalIdentifierRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personExternalIdentifiers.findFirst({
+      where: { id },
+    });
+  });
+
+/**
+ * Tracks rows created by a test and deletes them on exit, regardless of how the
+ * test exits. Cleanup reads the collected ids lazily at finalization via
+ * `Effect.ensuring`, deepest foreign-key dependents first, each `ignore`d so a
+ * missing row never turns the finalizer into a failure.
+ */
+interface Tracker {
+  notifications: string[];
+  subscriptions: string[];
+  transactions: string[];
+  purchases: string[];
+  externalIdentifiers: string[];
+  personIdentities: string[];
+  configProducts: string[];
+  configs: string[];
+  persons: string[];
+}
+
+const cleanup = (t: Tracker) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const del = <A>(eff: Effect.Effect<A, unknown, never>) => eff.pipe(Effect.ignore);
+
+    if (t.notifications.length > 0) {
+      yield* del(
+        db
+          .delete(paymentProviderNotificationProcessed)
+          .where(inArray(paymentProviderNotificationProcessed.id, t.notifications)),
+      );
+    }
+    if (t.subscriptions.length > 0) {
+      yield* del(db.delete(subscriptions).where(inArray(subscriptions.id, t.subscriptions)));
+    }
+    if (t.transactions.length > 0) {
+      yield* del(db.delete(transactions).where(inArray(transactions.id, t.transactions)));
+    }
+    if (t.purchases.length > 0) {
+      yield* del(db.delete(purchases).where(inArray(purchases.id, t.purchases)));
+    }
+    if (t.externalIdentifiers.length > 0) {
+      yield* del(
+        db
+          .delete(personExternalIdentifiers)
+          .where(inArray(personExternalIdentifiers.id, t.externalIdentifiers)),
+      );
+    }
+    if (t.personIdentities.length > 0) {
+      yield* del(
+        db.delete(personIdentities).where(inArray(personIdentities.id, t.personIdentities)),
+      );
+    }
+    if (t.configProducts.length > 0) {
+      yield* del(
+        db
+          .delete(paymentProviderConfigurationProducts)
+          .where(inArray(paymentProviderConfigurationProducts.id, t.configProducts)),
+      );
+    }
+    if (t.configs.length > 0) {
+      yield* del(
+        db
+          .delete(paymentProviderConfigurations)
+          .where(inArray(paymentProviderConfigurations.id, t.configs)),
+      );
+    }
+    if (t.persons.length > 0) {
+      yield* del(db.delete(persons).where(inArray(persons.id, t.persons)));
+    }
+  });
+
+const withCleanup = <E, R>(
+  body: (t: Tracker) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const t: Tracker = {
+    configProducts: [],
+    configs: [],
+    externalIdentifiers: [],
+    notifications: [],
+    personIdentities: [],
+    persons: [],
+    purchases: [],
+    subscriptions: [],
+    transactions: [],
+  };
+  return body(t).pipe(Effect.ensuring(cleanup(t)));
+};
+
+describe("AppStorePaymentProviderServiceQueries.findPaymentProviderConfigurationById", () => {
+  test(
+    "returns the configuration when active (deletedAt is null)",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const id = uniqueId("cfg-active");
+        t.configs.push(yield* insertProviderConfig({ id }));
+
+        const found = yield* queries.findPaymentProviderConfigurationById(id);
+        expect(found).toBeDefined();
+        expect(found?.id).toBe(id);
+        expect(found?.projectId).toBe(projectId);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns undefined when deletedAt is set",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const id = uniqueId("cfg-deleted");
+        t.configs.push(yield* insertProviderConfig({ deletedAt: new Date(), id }));
+
+        const found = yield* queries.findPaymentProviderConfigurationById(id);
+        expect(found).toBeUndefined();
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns undefined when the id is not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const found = yield* queries.findPaymentProviderConfigurationById(uniqueId("cfg-missing"));
+      expect(found).toBeUndefined();
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findPaymentProviderConfigurationsByProjectId", () => {
+  test(
+    "returns all active configurations for a project and omits soft-deleted ones",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const activeId = uniqueId("cfgs-active");
+        const deletedId = uniqueId("cfgs-deleted");
+        t.configs.push(yield* insertProviderConfig({ id: activeId }));
+        t.configs.push(yield* insertProviderConfig({ deletedAt: new Date(), id: deletedId }));
+
+        const list = yield* queries.findPaymentProviderConfigurationsByProjectId(projectId);
+        expect(list.some((c) => c.id === activeId)).toBe(true);
+        expect(list.some((c) => c.id === deletedId)).toBe(false);
+        expect(list.every((c) => c.projectId === projectId)).toBe(true);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findPaymentProviderConfigurationProductByPrimaryKey", () => {
+  test(
+    "returns the product when isActive=true",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("ppcp-active-cfg");
+        const productKey = uniqueId("ppcp-active-key");
+        const productRowId = uniqueId("ppcp-active-prod");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.configProducts.push(
+          yield* insertProviderConfigProduct({
+            id: productRowId,
+            isActive: true,
+            paymentProviderConfigurationId: configId,
+            productId: uniqueId("ppcp-active-pid"),
+            providerProductKey: productKey,
+          }),
+        );
+
+        const found = yield* queries.findPaymentProviderConfigurationProductByPrimaryKey({
+          paymentProviderConfigurationId: configId,
+          providerProductKey: productKey,
+        });
+        expect(found).toBeDefined();
+        expect(found?.id).toBe(productRowId);
+        expect(found?.isActive).toBe(true);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns undefined when isActive=false",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("ppcp-inactive-cfg");
+        const productKey = uniqueId("ppcp-inactive-key");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.configProducts.push(
+          yield* insertProviderConfigProduct({
+            id: uniqueId("ppcp-inactive-prod"),
+            isActive: false,
+            paymentProviderConfigurationId: configId,
+            productId: uniqueId("ppcp-inactive-pid"),
+            providerProductKey: productKey,
+          }),
+        );
+
+        const found = yield* queries.findPaymentProviderConfigurationProductByPrimaryKey({
+          paymentProviderConfigurationId: configId,
+          providerProductKey: productKey,
+        });
+        expect(found).toBeUndefined();
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns undefined when not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const found = yield* queries.findPaymentProviderConfigurationProductByPrimaryKey({
+        paymentProviderConfigurationId: uniqueId("ppcp-missing-cfg"),
+        providerProductKey: uniqueId("ppcp-missing-key"),
+      });
+      expect(found).toBeUndefined();
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findProjectById", () => {
+  test(
+    "returns the project when found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const found = yield* queries.findProjectById(projectId);
+      expect(found).toBeDefined();
+      expect(found?.id).toBe(projectId);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns undefined when not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const found = yield* queries.findProjectById(uniqueId("project-missing"));
+      expect(found).toBeUndefined();
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findPersonIdentityByDistinctId", () => {
+  test(
+    "returns Option.some with the personId when found",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("pibd-person");
+        const distinctId = uniqueId("pibd-distinct");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        t.personIdentities.push(
+          yield* insertPersonIdentity({ distinctId, id: uniqueId("pibd-ident"), personId }),
+        );
+
+        const result = yield* queries.findPersonIdentityByDistinctId({ distinctId, projectId });
+        expect(Option.isSome(result)).toBe(true);
+        if (Option.isSome(result)) {
+          expect(result.value.personId).toBe(personId);
+        }
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns Option.none when not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const result = yield* queries.findPersonIdentityByDistinctId({
+        distinctId: uniqueId("pibd-missing"),
+        projectId,
+      });
+      expect(Option.isNone(result)).toBe(true);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findExternalIdentifier", () => {
+  test(
+    "returns Option.some with id and personId when found",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("fei-person");
+        const extId = uniqueId("fei-ext");
+        const identifier = uniqueId("fei-identifier");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        const db = yield* Db;
+        yield* db.insert(personExternalIdentifiers).values({
+          id: extId,
+          identifier,
+          isDefault: true,
+          personId,
+          projectId,
+          serviceId: "appstore",
+        });
+        t.externalIdentifiers.push(extId);
+
+        const result = yield* queries.findExternalIdentifier({
+          identifier,
+          projectId,
+          serviceId: "appstore",
+        });
+        expect(Option.isSome(result)).toBe(true);
+        if (Option.isSome(result)) {
+          expect(result.value.id).toBe(extId);
+          expect(result.value.personId).toBe(personId);
+        }
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns Option.none when not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const result = yield* queries.findExternalIdentifier({
+        identifier: uniqueId("fei-missing"),
+        projectId,
+        serviceId: "appstore",
+      });
+      expect(Option.isNone(result)).toBe(true);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.createExternalIdentifier", () => {
+  test(
+    "inserts the row and returns its id",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("cei-person");
+        const extId = uniqueId("cei-ext");
+        const identifier = uniqueId("cei-identifier");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        // Track before the write so a partial failure still cleans up.
+        t.externalIdentifiers.push(extId);
+
+        const result = yield* queries.createExternalIdentifier({
+          id: extId,
+          identifier,
+          isDefault: true,
+          personId,
+          projectId,
+          serviceId: "appstore",
+        });
+        expect(result.id).toBe(extId);
+
+        const row = yield* findExternalIdentifierRow(extId);
+        expect(row).toBeDefined();
+        expect(row?.personId).toBe(personId);
+        expect(row?.identifier).toBe(identifier);
+        expect(row?.serviceId).toBe("appstore");
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.rebindExternalIdentifier", () => {
+  test(
+    "updates the personId for an existing row",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const oldPersonId = uniqueId("rebind-old-person");
+        const newPersonId = uniqueId("rebind-new-person");
+        const extId = uniqueId("rebind-ext");
+        const identifier = uniqueId("rebind-identifier");
+        t.persons.push(yield* insertPerson({ id: oldPersonId }));
+        t.persons.push(yield* insertPerson({ id: newPersonId }));
+        const db = yield* Db;
+        yield* db.insert(personExternalIdentifiers).values({
+          id: extId,
+          identifier,
+          isDefault: true,
+          personId: oldPersonId,
+          projectId,
+          serviceId: "appstore",
+        });
+        t.externalIdentifiers.push(extId);
+
+        yield* queries.rebindExternalIdentifier({ id: extId, newPersonId });
+
+        const row = yield* findExternalIdentifierRow(extId);
+        expect(row?.personId).toBe(newPersonId);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findDistinctIdForPerson", () => {
+  test(
+    "returns Option.some with a distinctId bound to the person",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("fdfp-person");
+        const distinctId = uniqueId("fdfp-distinct");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        t.personIdentities.push(
+          yield* insertPersonIdentity({ distinctId, id: uniqueId("fdfp-ident"), personId }),
+        );
+
+        const result = yield* queries.findDistinctIdForPerson({ personId, projectId });
+        expect(Option.isSome(result)).toBe(true);
+        if (Option.isSome(result)) {
+          expect(result.value).toBe(distinctId);
+        }
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns Option.none when the person has no identities",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("fdfp-noident-person");
+        t.persons.push(yield* insertPerson({ id: personId }));
+
+        const result = yield* queries.findDistinctIdForPerson({ personId, projectId });
+        expect(Option.isNone(result)).toBe(true);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.insertNotificationProcessedIfAbsent", () => {
+  test(
+    "returns inserted=true on first insert and persists the row",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("inpia-cfg");
+        const rowId = uniqueId("inpia-row");
+        const notificationUuid = uniqueId("inpia-uuid");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.notifications.push(rowId);
+
+        const result = yield* queries.insertNotificationProcessedIfAbsent({
+          id: rowId,
+          notificationType: "TEST",
+          notificationUuid,
+          paymentProviderConfigurationId: configId,
+          providerId: "app_store",
+          result: "applied",
+          source: "webhook",
+        });
+        expect(result.inserted).toBe(true);
+
+        const row = yield* findNotificationRow(rowId);
+        expect(row).toBeDefined();
+        expect(row?.notificationUuid).toBe(notificationUuid);
+        expect(row?.result).toBe("applied");
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns inserted=false on a UNIQUE collision (duplicate notification UUID) and does not write a second row",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("inpia-dup-cfg");
+        const firstRowId = uniqueId("inpia-dup-first");
+        const secondRowId = uniqueId("inpia-dup-second");
+        const notificationUuid = uniqueId("inpia-dup-uuid");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        // Both candidate ids are tracked so cleanup runs even though only the
+        // first row is ever persisted.
+        t.notifications.push(firstRowId);
+        t.notifications.push(secondRowId);
+
+        const first = yield* queries.insertNotificationProcessedIfAbsent({
+          id: firstRowId,
+          notificationType: "TEST",
+          notificationUuid,
+          paymentProviderConfigurationId: configId,
+          providerId: "app_store",
+          result: "applied",
+          source: "webhook",
+        });
+        expect(first.inserted).toBe(true);
+
+        // Same (configurationId, notificationUUID) → UNIQUE collision. The second
+        // delivery must be reported as a duplicate, not a fresh insert.
+        const second = yield* queries.insertNotificationProcessedIfAbsent({
+          id: secondRowId,
+          notificationType: "TEST",
+          notificationUuid,
+          paymentProviderConfigurationId: configId,
+          providerId: "app_store",
+          result: "applied",
+          source: "webhook",
+        });
+        expect(second.inserted).toBe(false);
+
+        // The first row survives unchanged; the second id was never persisted.
+        const firstRow = yield* findNotificationRow(firstRowId);
+        expect(firstRow).toBeDefined();
+        const secondRow = yield* findNotificationRow(secondRowId);
+        expect(secondRow).toBeUndefined();
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findParkedNotifications", () => {
+  test(
+    "returns rows parked on product mapping matching providerProductKey, omitting non-matches",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("fpn-cfg");
+        const productKey = uniqueId("fpn-key");
+        const matchId = uniqueId("fpn-match");
+        const wrongKeyId = uniqueId("fpn-wrongkey");
+        const wrongResultId = uniqueId("fpn-wrongresult");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: matchId,
+            notificationUuid: uniqueId("fpn-match-uuid"),
+            parkedUntilProviderProductKey: productKey,
+            paymentProviderConfigurationId: configId,
+            result: "parked_pending_product_mapping",
+          }),
+        );
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: wrongKeyId,
+            notificationUuid: uniqueId("fpn-wrongkey-uuid"),
+            parkedUntilProviderProductKey: uniqueId("fpn-otherkey"),
+            paymentProviderConfigurationId: configId,
+            result: "parked_pending_product_mapping",
+          }),
+        );
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: wrongResultId,
+            notificationUuid: uniqueId("fpn-wrongresult-uuid"),
+            parkedUntilProviderProductKey: productKey,
+            paymentProviderConfigurationId: configId,
+            result: "applied",
+          }),
+        );
+
+        const rows = yield* queries.findParkedNotifications({
+          paymentProviderConfigurationId: configId,
+          providerProductKey: productKey,
+        });
+        expect(rows.some((r) => r.id === matchId)).toBe(true);
+        expect(rows.some((r) => r.id === wrongKeyId)).toBe(false);
+        expect(rows.some((r) => r.id === wrongResultId)).toBe(false);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns an empty array when there are no matches",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const rows = yield* queries.findParkedNotifications({
+        paymentProviderConfigurationId: uniqueId("fpn-empty-cfg"),
+        providerProductKey: uniqueId("fpn-empty-key"),
+      });
+      expect(rows).toEqual([]);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findParkedNotificationsByOriginalTransactionId", () => {
+  test(
+    "returns SDK-confirmation parked rows ordered by processedAt ASC",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("fpnoti-cfg");
+        const originalTransactionId = uniqueId("fpnoti-otx");
+        const earlierId = uniqueId("fpnoti-earlier");
+        const laterId = uniqueId("fpnoti-later");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        // Insert the later row first so ordering, not insertion order, is asserted.
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: laterId,
+            notificationUuid: uniqueId("fpnoti-later-uuid"),
+            parkedUntilOriginalTransactionId: originalTransactionId,
+            paymentProviderConfigurationId: configId,
+            processedAt: new Date("2025-01-02T00:00:00Z"),
+            result: "parked_pending_sdk_confirmation",
+          }),
+        );
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: earlierId,
+            notificationUuid: uniqueId("fpnoti-earlier-uuid"),
+            parkedUntilOriginalTransactionId: originalTransactionId,
+            paymentProviderConfigurationId: configId,
+            processedAt: new Date("2025-01-01T00:00:00Z"),
+            result: "parked_pending_sdk_confirmation",
+          }),
+        );
+
+        const rows = yield* queries.findParkedNotificationsByOriginalTransactionId({
+          originalTransactionId,
+          paymentProviderConfigurationId: configId,
+        });
+        const earlierIdx = rows.findIndex((r) => r.id === earlierId);
+        const laterIdx = rows.findIndex((r) => r.id === laterId);
+        expect(earlierIdx).toBeGreaterThanOrEqual(0);
+        expect(laterIdx).toBeGreaterThanOrEqual(0);
+        expect(earlierIdx).toBeLessThan(laterIdx);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.hasAnySubscriptionForStoreSubscriptionId", () => {
+  test(
+    "returns true when a subscription exists for the storeSubscriptionId",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("hassub-person");
+        const configId = uniqueId("hassub-cfg");
+        const productRowId = uniqueId("hassub-prod");
+        const storeSubscriptionId = uniqueId("hassub-store");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.configProducts.push(
+          yield* insertProviderConfigProduct({
+            id: productRowId,
+            paymentProviderConfigurationId: configId,
+            productId: uniqueId("hassub-pid"),
+            providerProductKey: uniqueId("hassub-key"),
+          }),
+        );
+        t.subscriptions.push(
+          yield* insertSubscription({
+            id: uniqueId("hassub-sub"),
+            paymentProviderConfigurationProductId: productRowId,
+            personId,
+            storeSubscriptionId,
+          }),
+        );
+
+        const result = yield* queries.hasAnySubscriptionForStoreSubscriptionId({
+          storeSubscriptionId,
+        });
+        expect(result).toBe(true);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns false when no subscription matches",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const result = yield* queries.hasAnySubscriptionForStoreSubscriptionId({
+        storeSubscriptionId: uniqueId("hassub-missing"),
+      });
+      expect(result).toBe(false);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.hasAnyAppStoreRecordForOriginalTransactionId", () => {
+  test(
+    "returns true when a subscription matches the storeSubscriptionId",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("hasrec-sub-person");
+        const configId = uniqueId("hasrec-sub-cfg");
+        const productRowId = uniqueId("hasrec-sub-prod");
+        const originalTransactionId = uniqueId("hasrec-sub-otx");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.configProducts.push(
+          yield* insertProviderConfigProduct({
+            id: productRowId,
+            paymentProviderConfigurationId: configId,
+            productId: uniqueId("hasrec-sub-pid"),
+            providerProductKey: uniqueId("hasrec-sub-key"),
+          }),
+        );
+        t.subscriptions.push(
+          yield* insertSubscription({
+            id: uniqueId("hasrec-sub-sub"),
+            paymentProviderConfigurationProductId: productRowId,
+            personId,
+            storeSubscriptionId: originalTransactionId,
+          }),
+        );
+
+        const result = yield* queries.hasAnyAppStoreRecordForOriginalTransactionId({
+          originalTransactionId,
+        });
+        expect(result).toBe(true);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns true when a transaction matches the storeTransactionId",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("hasrec-tx-person");
+        const configId = uniqueId("hasrec-tx-cfg");
+        const productRowId = uniqueId("hasrec-tx-prod");
+        const originalTransactionId = uniqueId("hasrec-tx-otx");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.configProducts.push(
+          yield* insertProviderConfigProduct({
+            id: productRowId,
+            paymentProviderConfigurationId: configId,
+            productId: uniqueId("hasrec-tx-pid"),
+            providerProductKey: uniqueId("hasrec-tx-key"),
+          }),
+        );
+        t.transactions.push(
+          yield* insertTransaction({
+            id: uniqueId("hasrec-tx-tx"),
+            paymentProviderConfigurationProductId: productRowId,
+            personId,
+            storeTransactionId: originalTransactionId,
+          }),
+        );
+
+        const result = yield* queries.hasAnyAppStoreRecordForOriginalTransactionId({
+          originalTransactionId,
+        });
+        expect(result).toBe(true);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns false when neither a subscription nor a transaction matches",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const result = yield* queries.hasAnyAppStoreRecordForOriginalTransactionId({
+        originalTransactionId: uniqueId("hasrec-missing"),
+      });
+      expect(result).toBe(false);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.markParkedNotificationResolved", () => {
+  test(
+    "clears the parked columns, updates result/resultNote, and bumps processedAt",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("mpnr-cfg");
+        const rowId = uniqueId("mpnr-row");
+        const oldProcessedAt = new Date("2024-01-01T00:00:00Z");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: rowId,
+            notificationUuid: uniqueId("mpnr-uuid"),
+            parkedRawPayload: { hello: "world" },
+            parkedUntilOriginalTransactionId: uniqueId("mpnr-otx"),
+            parkedUntilProviderProductKey: uniqueId("mpnr-key"),
+            paymentProviderConfigurationId: configId,
+            processedAt: oldProcessedAt,
+            result: "parked_pending_sdk_confirmation",
+          }),
+        );
+
+        yield* queries.markParkedNotificationResolved({
+          id: rowId,
+          result: "applied",
+          resultNote: "resolved by replay",
+        });
+
+        const row = yield* findNotificationRow(rowId);
+        expect(row?.result).toBe("applied");
+        expect(row?.resultNote).toBe("resolved by replay");
+        expect(row?.parkedRawPayload).toBeNull();
+        expect(row?.parkedUntilOriginalTransactionId).toBeNull();
+        expect(row?.parkedUntilProviderProductKey).toBeNull();
+        // processedAt is set to NOW() — strictly newer than the seeded value.
+        expect(row?.processedAt).toBeDefined();
+        expect(row!.processedAt.getTime()).toBeGreaterThan(oldProcessedAt.getTime());
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.isAppStoreWebhookStandInPerson", () => {
+  test(
+    "returns true when the person's origin is AppStoreWebhook",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("standin-yes-person");
+        t.persons.push(yield* insertPerson({ id: personId, origin: PersonOrigin.AppStoreWebhook }));
+
+        const result = yield* queries.isAppStoreWebhookStandInPerson({ personId, projectId });
+        expect(result).toBe(true);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns false when the person's origin is not AppStoreWebhook",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("standin-no-person");
+        t.persons.push(yield* insertPerson({ id: personId, origin: PersonOrigin.IOS }));
+
+        const result = yield* queries.isAppStoreWebhookStandInPerson({ personId, projectId });
+        expect(result).toBe(false);
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns false when the person is not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const result = yield* queries.isAppStoreWebhookStandInPerson({
+        personId: uniqueId("standin-missing"),
+        projectId,
+      });
+      expect(result).toBe(false);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findSubscriptionByStoreSubscriptionId", () => {
+  test(
+    "returns Option.some with the subscription id when found",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("fsub-person");
+        const configId = uniqueId("fsub-cfg");
+        const productRowId = uniqueId("fsub-prod");
+        const subId = uniqueId("fsub-sub");
+        const storeSubscriptionId = uniqueId("fsub-store");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.configProducts.push(
+          yield* insertProviderConfigProduct({
+            id: productRowId,
+            paymentProviderConfigurationId: configId,
+            productId: uniqueId("fsub-pid"),
+            providerProductKey: uniqueId("fsub-key"),
+          }),
+        );
+        t.subscriptions.push(
+          yield* insertSubscription({
+            id: subId,
+            paymentProviderConfigurationProductId: productRowId,
+            personId,
+            storeSubscriptionId,
+          }),
+        );
+
+        const result = yield* queries.findSubscriptionByStoreSubscriptionId({
+          storeSubscriptionId,
+        });
+        expect(Option.isSome(result)).toBe(true);
+        if (Option.isSome(result)) {
+          expect(result.value.id).toBe(subId);
+        }
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns Option.none when not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const result = yield* queries.findSubscriptionByStoreSubscriptionId({
+        storeSubscriptionId: uniqueId("fsub-missing"),
+      });
+      expect(Option.isNone(result)).toBe(true);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.findPurchaseByProviderKey", () => {
+  test(
+    "returns Option.some with id and type when found",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const personId = uniqueId("fpur-person");
+        const configId = uniqueId("fpur-cfg");
+        const productRowId = uniqueId("fpur-prod");
+        const purchaseId = uniqueId("fpur-purchase");
+        const providerKey = uniqueId("fpur-key");
+        t.persons.push(yield* insertPerson({ id: personId }));
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+        t.configProducts.push(
+          yield* insertProviderConfigProduct({
+            id: productRowId,
+            paymentProviderConfigurationId: configId,
+            productId: uniqueId("fpur-pid"),
+            providerProductKey: uniqueId("fpur-ppk"),
+          }),
+        );
+        t.purchases.push(
+          yield* insertPurchase({
+            id: purchaseId,
+            paymentProviderConfigurationProductId: productRowId,
+            personId,
+            providerKey,
+            type: 1, // PurchaseType.OneTime
+          }),
+        );
+
+        const result = yield* queries.findPurchaseByProviderKey({ providerKey });
+        expect(Option.isSome(result)).toBe(true);
+        if (Option.isSome(result)) {
+          expect(result.value.id).toBe(purchaseId);
+          expect(result.value.type).toBe(1);
+        }
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns Option.none when not found",
+    Effect.gen(function* () {
+      const queries = yield* AppStorePaymentProviderServiceQueries;
+      const result = yield* queries.findPurchaseByProviderKey({
+        providerKey: uniqueId("fpur-missing"),
+      });
+      expect(Option.isNone(result)).toBe(true);
+    }).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("AppStorePaymentProviderServiceQueries.expireStaleParkedSdkConfirmationRows", () => {
+  test(
+    "expires stale parked rows: sets result='expired', clears parked columns, and returns the count",
+    withCleanup((t) =>
+      Effect.gen(function* () {
+        const queries = yield* AppStorePaymentProviderServiceQueries;
+        const configId = uniqueId("expire-cfg");
+        const staleId = uniqueId("expire-stale");
+        const freshId = uniqueId("expire-fresh");
+        const otherResultId = uniqueId("expire-other");
+        const threshold = new Date("2025-06-01T00:00:00Z");
+        t.configs.push(yield* insertProviderConfig({ id: configId }));
+
+        // Stale: parked_pending_sdk_confirmation with processedAt before threshold.
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: staleId,
+            notificationUuid: uniqueId("expire-stale-uuid"),
+            parkedRawPayload: { stale: true },
+            parkedUntilOriginalTransactionId: uniqueId("expire-stale-otx"),
+            paymentProviderConfigurationId: configId,
+            processedAt: new Date("2025-01-01T00:00:00Z"),
+            result: "parked_pending_sdk_confirmation",
+          }),
+        );
+        // Fresh: parked but processedAt after threshold — must be left intact.
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: freshId,
+            notificationUuid: uniqueId("expire-fresh-uuid"),
+            parkedUntilOriginalTransactionId: uniqueId("expire-fresh-otx"),
+            paymentProviderConfigurationId: configId,
+            processedAt: new Date("2025-12-01T00:00:00Z"),
+            result: "parked_pending_sdk_confirmation",
+          }),
+        );
+        // Stale processedAt but different result — must be left intact.
+        t.notifications.push(
+          yield* insertNotificationRow({
+            id: otherResultId,
+            notificationUuid: uniqueId("expire-other-uuid"),
+            paymentProviderConfigurationId: configId,
+            processedAt: new Date("2025-01-01T00:00:00Z"),
+            result: "applied",
+          }),
+        );
+
+        const result = yield* queries.expireStaleParkedSdkConfirmationRows({
+          olderThan: threshold,
+        });
+        // At least our one stale row is expired (other concurrent rows may add to it).
+        expect(result.expired).toBeGreaterThanOrEqual(1);
+
+        const staleRow = yield* findNotificationRow(staleId);
+        expect(staleRow?.result).toBe("expired");
+        expect(staleRow?.resultNote).toBe("auto-expired pending SDK confirmation");
+        expect(staleRow?.parkedRawPayload).toBeNull();
+        expect(staleRow?.parkedUntilOriginalTransactionId).toBeNull();
+
+        // Fresh + other-result rows untouched.
+        const freshRow = yield* findNotificationRow(freshId);
+        expect(freshRow?.result).toBe("parked_pending_sdk_confirmation");
+        const otherRow = yield* findNotificationRow(otherResultId);
+        expect(otherRow?.result).toBe("applied");
+      }),
+    ).pipe(
+      Effect.provide(AppStorePaymentProviderServiceQueries.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/appStore/AppStoreReconciliationService.integration.test.ts b/packages/core/test/services/paymentProviders/appStore/AppStoreReconciliationService.integration.test.ts
new file mode 100644
index 000000000..252db865e
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/appStore/AppStoreReconciliationService.integration.test.ts
@@ -0,0 +1,362 @@
+/**
+ * Integration tests for {@link AppStoreReconciliationService}, run against the
+ * real backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB + ClickHouse + WorkOS; only the project schema cache is an
+ * in-memory stub).
+ *
+ * `reconcileOriginalTransaction` is a heavy replay engine: it resolves the
+ * payment-provider configuration + project from MySQL, builds a per-tenant
+ * App Store SDK context from the stored configuration, then walks Apple's
+ * authoritative transaction history and subscription-status snapshot over
+ * Apple's live REST API, replaying each event through the `record*` methods of
+ * {@link AppStorePaymentProvider}.
+ *
+ * What this file covers vs. defers
+ * --------------------------------
+ * Only the prefix of `reconcileOriginalTransaction` that runs *before any
+ * Apple network call* can execute in-process against the real DB:
+ *  - configuration-not-found (fails before the SDK context is built),
+ *  - project-not-found for an otherwise-valid configuration,
+ *  - SDK-context build failure when the stored `configuration` blob fails the
+ *    `globalConfigurationSchema` decode (still before any HTTP request).
+ *
+ * Everything past `getTransactionHistoryWithEnvironmentFallback` /
+ * `getAllSubscriptionStatusesWithEnvironmentFallback` requires valid Apple
+ * signing credentials, Apple's live App Store Server API, and Apple-signed JWS
+ * payloads to decode. The service exposes no in-process seam to substitute the
+ * SDK context (it is built inline from the configuration), so the happy-path,
+ * idempotency-collision, watermark, revocation-routing, status-routing, and
+ * environment-fallback cases from the plan are recorded as `test.todo` rather
+ * than faked — per the testing brief's "no mocks of things we can run / no
+ * faking of things we can't" rule.
+ *
+ * Conventions:
+ *  - The collaborators the service-under-test layer needs but the harness does
+ *    not provide (`AppStorePaymentProvider` and its whole record graph) are
+ *    wired here from their real layers, mirroring `AppStoreRuntimeLayers.ts` and
+ *    the {@link EventProcessorService} integration test. The FX fetcher and the
+ *    workflow/queue ports that carry no in-process seam are wired to stubs;
+ *    none of them is reached on the pre-network paths exercised here.
+ *  - Each test creates its own `payment_provider_configuration` row under the
+ *    fixture project with a unique key and cleans it up via `withCleanup`. The
+ *    global teardown sweep is only a backstop.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` (or by `_tag` when the error
+ *    class has no package export) before reading its fields, and paired with a
+ *    DB-state assertion on the failure path.
+ */
+import { AppStoreServerSdk } from "@voidhash/app-store-server-sdk";
+import { Effect, Layer } from "effect";
+import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+import { describe, expect, it } from "vitest";
+
+import {
+  AppStoreReconciliationConfigurationNotFoundError,
+  AppStoreReconciliationService,
+} from "@voidhash/core/services/paymentProviders/appStore/app-store-reconciliation-service";
+import { AppStorePaymentProvider } from "@voidhash/core/services/paymentProviders/appStore/payment-provider";
+import { FxRateService } from "@voidhash/core/services/fxRates/FxRateService";
+import { PersonIdentityService } from "@voidhash/core/services/personIdentity/PersonIdentityService";
+import { IdentityProjectionPublisher } from "@voidhash/core/services/personIdentity/IdentityProjectionPublisher";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PurchaseProcessingService } from "@voidhash/core/services/purchaseProcessing/PurchaseProcessingService";
+import { PerkGrantService } from "@voidhash/core/services/perkGrants/PerkGrantService";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { Db, inArray, paymentProviderConfigurations } from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so ids/keys stay unique even within the same millisecond. */
+let seq = 0;
+const unique = (label: string) => `it-asr-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * No-op FX fetcher. The pre-network reconciliation paths exercised here never
+ * reach money construction, so this is never invoked; it exists only so
+ * {@link FxRateService.layerWithFetcher} can build without the live exchange-
+ * rate HTTP dependency.
+ */
+const stubFxFetcher = {
+  fetchLatestUsdRates: () => Effect.succeed([]),
+};
+
+/**
+ * The completion workflow is resolved lazily by `PersonIdentityService`
+ * (surfaces on the effect, not the layer); none of the paths under test
+ * dispatches it, so a void stub suffices.
+ */
+const IdentifyWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+/**
+ * Service-under-test layer composed with the full `AppStorePaymentProvider`
+ * record graph it depends on, mirroring `stacks/backend/workflows/
+ * AppStoreRuntimeLayers.ts`. After this layer the only outstanding requirement
+ * is `Db` (plus the harness's own services), satisfying `R extends
+ * HarnessServices`. The SDK / FX / person-identity collaborators are real
+ * layers; the HTTP client, FX fetcher, identity publisher, and completion
+ * workflow are wired to inert variants because the pre-network paths tested
+ * here never reach them.
+ */
+const TestLayer = AppStoreReconciliationService.layer.pipe(
+  Layer.provide(
+    AppStorePaymentProvider.layer.pipe(
+      Layer.provide(AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer))),
+      Layer.provide(FxRateService.layerWithFetcher(stubFxFetcher)),
+      Layer.provide(PurchaseProcessingService.layer.pipe(Layer.provide(PerkGrantService.layer))),
+      Layer.provide(
+        PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
+      ),
+      Layer.provide(PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") })),
+    ),
+  ),
+  Layer.provideMerge(IdentifyWorkflowStub),
+);
+
+/** Read a payment-provider configuration row straight from the DB. */
+const findConfigurationRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderConfigurations.findFirst({
+      where: { id },
+    });
+  });
+
+/**
+ * Insert a `payment_provider_configuration` row under the fixture project with
+ * the given configuration blob (or pointing at an explicit project id) and
+ * return its id. The blob is stored verbatim, so an invalid one is what the
+ * reconciliation engine will fail to decode.
+ */
+const insertConfiguration = (input: {
+  readonly configuration: object;
+  readonly projectId?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = unique("config");
+    const key = unique("bundle");
+    yield* db.insert(paymentProviderConfigurations).values({
+      configuration: input.configuration,
+      enabled: true,
+      id,
+      name: "Integration App Store config",
+      paymentProviderKey: key,
+      projectId: input.projectId ?? projectId,
+      providerId: "apple-app-store",
+    });
+    return id;
+  });
+
+/** A structurally-valid `globalConfigurationSchema` blob (credentials are dummy). */
+const validConfigurationBlob = (): object => ({
+  appAppleId: "1234567890",
+  appStoreConnectApiIssuerId: "issuer-id",
+  appStoreConnectApiKeyId: "api-key-id",
+  appStoreConnectApiVendorNumber: "vendor",
+  appleServerNotificationForwardingUrl: "",
+  appleSmallBusinessProgramHasEndDate: false,
+  bundleId: "com.voidhash.integration",
+  inAppPurchaseKeyId: "key-id",
+  inAppPurchaseKeyIssuerId: "key-issuer-id",
+  inAppPurchasePrivateKey: "-----BEGIN PRIVATE KEY-----\nstub\n-----END PRIVATE KEY-----",
+  trackNewPurchasesFromAppleServerNotifications: true,
+});
+
+/** Delete the given configuration rows; each delete is `ignore`d. */
+const cleanupConfigurations = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    yield* db
+      .delete(paymentProviderConfigurations)
+      .where(inArray(paymentProviderConfigurations.id, [...ids]))
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every configuration it creates is removed afterward,
+ * regardless of how the test exits. Pass each created id to `track`; cleanup
+ * reads the collected ids lazily at finalization via `Effect.ensuring`.
+ */
+const withCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupConfigurations(createdIds)));
+};
+
+const baseInput = (overrides: {
+  readonly paymentProviderConfigurationId: string;
+  readonly originalTransactionId?: string;
+}) =>
+  ({
+    originalTransactionId: overrides.originalTransactionId ?? unique("orig-txn"),
+    paymentProviderConfigurationId: overrides.paymentProviderConfigurationId,
+    reason: "admin_repair" as const,
+    triggeredAt: new Date("2020-01-01T00:00:00.000Z"),
+  }) as const;
+
+describe("AppStoreReconciliationService.reconcileOriginalTransaction", () => {
+  test(
+    "fails with AppStoreReconciliationConfigurationNotFoundError for an unknown configuration id",
+    // No cleanup wrapper: this path writes nothing (fails before any SDK call).
+    Effect.gen(function* () {
+      const service = yield* AppStoreReconciliationService;
+
+      const missingId = unique("missing-config");
+      const error = yield* Effect.flip(
+        service.reconcileOriginalTransaction(
+          baseInput({ paymentProviderConfigurationId: missingId }),
+        ),
+      );
+
+      expect(error).toBeInstanceOf(AppStoreReconciliationConfigurationNotFoundError);
+      if (error instanceof AppStoreReconciliationConfigurationNotFoundError) {
+        expect(error.paymentProviderConfigurationId).toBe(missingId);
+      }
+
+      // Nothing was created for the bogus id.
+      const row = yield* findConfigurationRow(missingId);
+      expect(row).toBeUndefined();
+    }).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with AppStorePaymentProviderServiceError when the configuration's project is missing",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AppStoreReconciliationService;
+
+        // Valid config blob, but pointing at a project that does not exist, so
+        // the project lookup fails after the configuration is found and before
+        // the SDK context is built.
+        const orphanProjectId = unique("missing-project");
+        const configId = yield* insertConfiguration({
+          configuration: validConfigurationBlob(),
+          projectId: orphanProjectId,
+        });
+        track(configId);
+
+        const error = yield* Effect.flip(
+          service.reconcileOriginalTransaction(
+            baseInput({ paymentProviderConfigurationId: configId }),
+          ),
+        );
+
+        // Asserted by tag (the `errors` module has no package export, so the
+        // class is not importable here). The `cause` string names the orphaned
+        // project id.
+        expect(error._tag).toBe("AppStorePaymentProviderServiceError");
+        if (error._tag === "AppStorePaymentProviderServiceError") {
+          expect(error.cause).toContain(orphanProjectId);
+        }
+
+        // The configuration row is untouched by the failed reconciliation.
+        const row = yield* findConfigurationRow(configId);
+        expect(row).toBeDefined();
+        expect(row?.projectId).toBe(orphanProjectId);
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "propagates a build error when the stored configuration fails the SDK-context schema decode",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* AppStoreReconciliationService;
+
+        // A configuration under the real fixture project (so the project lookup
+        // succeeds) whose blob is missing every required field. The build of the
+        // per-tenant SDK context decodes this blob via `globalConfigurationSchema`
+        // and fails there — still before any Apple network call.
+        const configId = yield* insertConfiguration({ configuration: {} });
+        track(configId);
+
+        const error = yield* Effect.flip(
+          service.reconcileOriginalTransaction(
+            baseInput({ paymentProviderConfigurationId: configId }),
+          ),
+        );
+
+        // The decode failure is not one of the two domain errors guarded above;
+        // it is a schema decode error surfaced from `buildSdkContextFromConfiguration`.
+        expect(error).toBeDefined();
+        expect(error).not.toBeInstanceOf(AppStoreReconciliationConfigurationNotFoundError);
+        expect(error._tag).not.toBe("AppStoreReconciliationConfigurationNotFoundError");
+        expect(error._tag).not.toBe("AppStorePaymentProviderServiceError");
+
+        // The configuration row is untouched by the failed reconciliation.
+        const row = yield* findConfigurationRow(configId);
+        expect(row).toBeDefined();
+        expect(row?.projectId).toBe(projectId);
+      }),
+    ).pipe(Effect.provide(TestLayer), CoreAuthSession.authenticate()),
+  );
+
+  // ----------------------------------------------------------------------------
+  // Apple-dependent paths: deferred.
+  //
+  // Each of the following walks Apple's live App Store Server API
+  // (`getTransactionHistoryWithEnvironmentFallback` /
+  // `getAllSubscriptionStatusesWithEnvironmentFallback`) and decodes Apple-signed
+  // JWS payloads with the per-tenant `SignedDataVerifier`. The reconciliation
+  // service builds its SDK context inline from the stored configuration and
+  // exposes no in-process seam to substitute it, so these cannot run against the
+  // real DB without valid Apple credentials + a recorded sandbox transaction.
+  // They are recorded here (not faked) so the coverage intent is preserved.
+  // ----------------------------------------------------------------------------
+
+  it.todo(
+    "happy path: walks the full ascending transaction history + status snapshot for a known originalTransactionId and reports transactionsProcessed/statusesProcessed/eventsApplied — DEFERRED: needs Apple's live App Store Server API history/status responses and signed JWS for a seeded sandbox originalTransactionId (no in-process SDK-context seam)",
+  );
+
+  it.todo(
+    "idempotency: re-running reconciliation after a live event collides on the per-event purchase_ledger.idempotency_key UNIQUE and reports the replays as eventsSkippedIdempotent (idempotent=true) — DEFERRED: requires real Apple history responses to drive the record* idempotency gate end-to-end",
+  );
+
+  it.todo(
+    "transaction decode failure increments eventsFailed and skips that transaction (logs a warning, continues the walk) — DEFERRED: requires Apple history responses containing an undecodable signedTransactions entry",
+  );
+
+  it.todo(
+    "status snapshot signedRenewalInfo decode failure is swallowed (Option.none) and the snapshot still replays — DEFERRED: requires an Apple subscription-status response with a malformed signedRenewalInfo",
+  );
+
+  it.todo(
+    "ACTIVE status snapshot is counted as statusesProcessed but is a no-op (_replayStatusSnapshot returns undefined) — DEFERRED: requires Apple subscription-status response with an ACTIVE lastTransactions item",
+  );
+
+  it.todo(
+    "revocation routing distinguishes family_revoke vs refund via revocationType in the history walk — DEFERRED: requires Apple history transactions carrying revocationDate + revocationType",
+  );
+
+  it.todo(
+    "auto-renewable RENEWAL history transaction routes to recordSubscriptionRenewed — DEFERRED: requires an Apple history transaction with type=AUTO_RENEWABLE and transactionReason=RENEWAL",
+  );
+
+  it.todo(
+    "EXPIRED status routes to recordSubscriptionExpired; BILLING_RETRY / GRACE_PERIOD route to recordBillingRetry; REVOKED routes to recordEntitlementRevoked — DEFERRED: requires Apple subscription-status responses with the corresponding Status values",
+  );
+
+  it.todo(
+    "all record* calls pass source=\"reconciliation\", so purchase_ledger.source is recorded as 'reconciliation' — DEFERRED: depends on the happy path above persisting a ledger row driven by Apple history",
+  );
+
+  it.todo(
+    "watermark guard: a reconciliation arriving after a fresher live event does not regress subscription.last_event_occurred_at — DEFERRED: requires both a live-event write and an Apple history walk over the same originalTransactionId",
+  );
+
+  it.todo(
+    "environment fallback: resolvedEnvironment is Sandbox vs Production per getTransactionHistoryWithEnvironmentFallback's production-then-sandbox probing — DEFERRED: requires Apple production/sandbox API responses to drive the fallback",
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/appStore/AppStoreWebhookHandlerService.integration.test.ts b/packages/core/test/services/paymentProviders/appStore/AppStoreWebhookHandlerService.integration.test.ts
new file mode 100644
index 000000000..5a65a191e
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/appStore/AppStoreWebhookHandlerService.integration.test.ts
@@ -0,0 +1,166 @@
+/**
+ * Coverage-intent placeholder for {@link AppStoreWebhookHandlerService}.
+ *
+ * Every public method on this service ultimately funnels through
+ * `acceptServerNotification`, whose first real work — after the
+ * configuration/project lookups — is:
+ *
+ *   1. `appStorePaymentProvider.buildSdkContextFromConfiguration(configuration)`,
+ *      which decodes the stored `payment_provider_configurations.configuration`
+ *      blob and **decrypts the per-tenant Apple PKCS8 `inAppPurchasePrivateKey`**
+ *      before constructing a `SignedDataVerifier`; and
+ *   2. `sdkContext.decodeNotification(input.signedPayload)`, which runs
+ *      `SignedDataVerifier.verifyAndDecodeNotification` against Apple's real
+ *      production/sandbox root CAs (`APPLE_ROOT_CERTIFICATES_PEM`) with
+ *      `enableOnlineChecks: true` and `verifyNotificationOverride: Option.none()`
+ *      hardcoded (see `sdk-context.ts`). The same applies to the nested
+ *      `decodeSignedTransaction` / `decodeSignedRenewalInfo` calls.
+ *
+ * There is **no in-process seam** to substitute a test verifier: the verifier is
+ * built deep inside `AppStorePaymentProvider.buildSdkContextFromConfiguration`
+ * with the override permanently off. Exercising any branch therefore requires a
+ * genuine **Apple-signed JWS** chained to Apple's CA — which we do not have, and
+ * which the core test brief explicitly forbids faking ("needs an Apple-signed
+ * JWS payload … DO NOT fake it — write test.todo(…)").
+ *
+ * Even the branches that look reachable without a valid payload are gated by the
+ * same wall:
+ *  - The `VerificationError` ack-without-handling branch still requires
+ *    `buildSdkContextFromConfiguration` to succeed first, i.e. a real,
+ *    decryptable Apple PKCS8 key in the configuration row.
+ *  - The configuration-not-found / project-not-found branches run *before*
+ *    `buildSdkContextFromConfiguration`, but standing up
+ *    `AppStoreWebhookHandlerService.layer` to reach them still pulls in
+ *    non-harness collaborators with their own external prerequisites
+ *    (`AppStoreServerSdk` → `HttpClient`, `FxRateService` → FX-rate config,
+ *    `PaymentConfigSecretCrypto` → a crypto key, plus `PurchaseProcessingService`
+ *    and `PersonIdentityService`), none of which the
+ *    `CoreIntegrationTestHarness` provides.
+ *  - `replayParkedNotificationsForProductMapping` and
+ *    `replayParkedNotificationsForSdkConfirmation` re-dispatch each parked row's
+ *    stored `parkedRawPayload` back through `acceptServerNotification`, so they
+ *    hit the identical verification wall.
+ *
+ * The cases below record the full intended coverage so it can be implemented
+ * once a verification seam exists (e.g. plumbing `verifyNotificationOverride`
+ * through the configuration / SDK-context build, or a recorded Apple-signed
+ * sandbox notification fixture). Each `test.todo` states the persisted side
+ * effect to assert: `payment_provider_notification_processed` rows
+ * (`result`, `parkedRawPayload`, `parked_until_*`, `result_note`) plus the
+ * downstream purchase-ledger / subscription / transaction state — and the exact
+ * blocker.
+ *
+ * @see packages/core/src/services/paymentProviders/appStore/sdk-context.ts (hardcoded verifier config)
+ * @see packages/core/src/services/paymentProviders/appStore/app-store-webhook-handler-service.ts
+ */
+import { describe, test } from "vitest";
+
+describe("AppStoreWebhookHandlerService.acceptServerNotification", () => {
+  test.todo(
+    "configuration not found returns AppStorePaymentProviderConfigurationNotFoundError without writing a ledger row — reachable in principle (lookup precedes decode), but standing up AppStoreWebhookHandlerService.layer needs non-harness collaborators (AppStoreServerSdk→HttpClient, FxRateService, PaymentConfigSecretCrypto, PurchaseProcessingService, PersonIdentityService) the CoreIntegrationTestHarness does not provide",
+  );
+
+  test.todo(
+    "project not found (configuration present, projects row missing) returns AppStorePaymentProviderProjectNotFoundError — same layer-wiring blocker as above; requires a payment_provider_configurations row whose projectId points at a deleted/absent project",
+  );
+
+  test.todo(
+    "invalid signature (VerificationError from decodeNotification) acks without handling (accepted=true, handled=false) and writes NO notification-processed row — blocked: requires buildSdkContextFromConfiguration to succeed (real decryptable Apple PKCS8 key) AND a JWS that fails verification through the real Apple-CA verifier; no verifyNotificationOverride seam",
+  );
+
+  test.todo(
+    "TEST notification with no signedTransactionInfo acks (accepted=true, handled=true) and writes payment_provider_notification_processed with result='ignored' — blocked: needs an Apple-signed TEST-type notification JWS that passes verifyAndDecodeNotification in-process",
+  );
+
+  test.todo(
+    "non-TEST notification missing signedTransactionInfo writes a terminal-failure payment_provider_notification_processed row (result='failed', result_note mentions missing signedTransactionInfo) — blocked: needs a verified non-TEST notification JWS lacking signedTransactionInfo",
+  );
+
+  test.todo(
+    "SUBSCRIBED routes to recordPurchase: asserts a purchase_ledger / subscription row and a notification-processed row with result='applied', source='webhook' — blocked: needs a verified SUBSCRIBED notification JWS + decodeSignedTransaction success",
+  );
+
+  test.todo(
+    "DID_RENEW routes to recordSubscriptionRenewed: asserts the subscription period advances and notification-processed result='applied' — blocked: needs a verified DID_RENEW notification + signedTransactionInfo",
+  );
+
+  test.todo(
+    "EXPIRED routes to recordSubscriptionExpired: asserts the subscription is marked expired and notification-processed result='applied' — blocked: needs a verified EXPIRED notification JWS",
+  );
+
+  test.todo(
+    "DID_FAIL_TO_RENEW routes to recordBillingRetry: asserts billing-retry state (gracePeriodExpiresDate from signedRenewalInfo when present) and result='applied' — blocked: needs a verified DID_FAIL_TO_RENEW notification JWS",
+  );
+
+  test.todo(
+    "REFUND routes to recordRefund: asserts the purchase is refunded and notification-processed result='applied' — blocked: needs a verified REFUND notification JWS",
+  );
+
+  test.todo(
+    "REVOKE routes to recordEntitlementRevoked: asserts entitlement revocation and result='applied' — blocked: needs a verified REVOKE notification JWS",
+  );
+
+  test.todo(
+    "DID_CHANGE_RENEWAL_STATUS / AUTO_RENEW_DISABLED routes to recordSubscriptionCanceled with cancelAtPeriodEnd=true: asserts subscription.cancelAtPeriodEnd and result='applied' — blocked: needs a verified DID_CHANGE_RENEWAL_STATUS notification JWS with that subtype",
+  );
+
+  test.todo(
+    "DID_CHANGE_RENEWAL_STATUS / AUTO_RENEW_ENABLED routes to recordAutoRenewResumed: asserts cancel flags cleared and result='applied' — blocked: needs a verified notification JWS with subtype AUTO_RENEW_ENABLED",
+  );
+
+  test.todo(
+    "product-not-mapped parks the notification: writes payment_provider_notification_processed with result='parked_pending_product_mapping', parked_raw_payload=signedPayload, parked_until_provider_product_key=productId, and acks(true) — blocked: needs a verified notification whose productId has no active payment_provider_configuration_products mapping",
+  );
+
+  test.todo(
+    "terminal record failure (MissingPersonIdentifier / IdempotencyKeyDerivation / InvalidISO4217Currency) writes a notification-processed row with result='failed' and a descriptive result_note, acks(false) — blocked: needs a verified transaction JWS shaped to trigger one of TERMINAL_RECORD_FAILURE_TAGS",
+  );
+
+  test.todo(
+    "trackNewPurchasesFromAppleServerNotifications=false with no prior SDK record parks: writes result='parked_pending_sdk_confirmation', parked_raw_payload=signedPayload, parked_until_original_transaction_id=originalTransactionId, acks(true), creates no purchase — blocked: needs a verified notification JWS plus a configuration with the tracking flag disabled",
+  );
+
+  test.todo(
+    "isReplay=true bypasses the SDK-confirmation park gate (does not re-park even when no SDK record exists yet) — blocked: needs a verified notification JWS replayed with isReplay:true under a tracking-disabled configuration",
+  );
+
+  test.todo(
+    "signedRenewalInfo decode failure is logged and processing continues with Option.none() (notification still applied) — blocked: needs a verified notification with a present-but-unverifiable signedRenewalInfo alongside a valid signedTransactionInfo",
+  );
+
+  test.todo(
+    "wire-level dedup: the UNIQUE (configurationId, notificationUUID) on payment_provider_notification_processed makes a duplicate delivery a no-op insert that leaves the existing row's result untouched — blocked: needs two verified deliveries of the same notification JWS",
+  );
+});
+
+describe("AppStoreWebhookHandlerService.replayParkedNotificationsForProductMapping", () => {
+  test.todo(
+    "fetches parked_pending_product_mapping rows for (configurationId, providerProductKey) and re-dispatches each via acceptServerNotification (isReplay:true) — blocked: re-dispatch runs the full decode/verify of each parked_raw_payload through the real Apple-CA verifier; no in-process seam",
+  );
+
+  test.todo(
+    "marks resolved rows result='applied' and clears parked-state columns (parked_raw_payload, parked_until_provider_product_key, parked_until_original_transaction_id NULL) after a successful replay — blocked: replay path requires a verifiable stored parkedRawPayload",
+  );
+
+  test.todo(
+    "returns appliedCount / failedCount / totalParked matching the parked rows processed — blocked: requires verifiable parked payloads to drive applied vs failed outcomes",
+  );
+
+  test.todo(
+    "a parked row with a missing/non-string parked_raw_payload is marked result='failed' (result_note 'parked_raw_payload missing or not a string') without re-dispatch — PARTIALLY reachable: this branch never re-enters acceptServerNotification, but it still needs a real parked row seeded under a real configuration row and the service layer wired; revisit once layer wiring is solved",
+  );
+});
+
+describe("AppStoreWebhookHandlerService.replayParkedNotificationsForSdkConfirmation", () => {
+  test.todo(
+    "orders parked rows by processedAt ASC to reproduce wire-arrival order, then re-dispatches each via acceptServerNotification (isReplay:true) — blocked: re-dispatch runs the real Apple-CA verifier on each parked_raw_payload; no in-process seam",
+  );
+
+  test.todo(
+    "marks resolved rows result='applied' and clears parked-state columns after a successful SDK-confirmation replay — blocked: replay path requires verifiable stored parkedRawPayload",
+  );
+
+  test.todo(
+    "returns appliedCount / failedCount / totalParked matching the parked rows processed — blocked: requires verifiable parked payloads to drive applied vs failed outcomes",
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/appStore/sdk-context.test.ts b/packages/core/test/services/paymentProviders/appStore/sdk-context.test.ts
new file mode 100644
index 000000000..659828d7d
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/appStore/sdk-context.test.ts
@@ -0,0 +1,321 @@
+/**
+ * Unit tests for {@link buildAppStoreSdkContext}.
+ *
+ * The context builder closes over the REAL `AppStoreServerSdkClient` /
+ * `SignedDataVerifier` factories — the only injectable seam is the
+ * `AppStoreServerSdk` handle, which is just `{ httpClient }`. We therefore
+ * drive the production-then-sandbox fallback logic the same way the SDK
+ * package's own tests do: by supplying a fake `HttpClient` that returns canned
+ * HTTP responses. Routing the canned response on the request host
+ * (`api.storekit.itunes.apple.com` vs `api.storekit-sandbox.itunes.apple.com`)
+ * lets us make the production attempt fail with a real `AppStoreNotFoundError`
+ * and the sandbox attempt succeed, exercising the genuine `Effect.catchTag`
+ * fallback rather than a hand-rolled double.
+ */
+import {
+  AppStoreServerSdk,
+  Environment,
+  type TransactionHistoryRequest,
+  VerificationError,
+} from "@voidhash/app-store-server-sdk";
+import { Effect, Option } from "effect";
+import { HttpClient, HttpClientResponse } from "effect/unstable/http";
+
+import { describe, expect, it } from "vite-plus/test";
+
+import { buildAppStoreSdkContext } from "../../../../src/services/paymentProviders/appStore/sdk-context.ts";
+
+const PRODUCTION_HOST = "api.storekit.itunes.apple.com";
+const SANDBOX_HOST = "api.storekit-sandbox.itunes.apple.com";
+
+const TRANSACTION_NOT_FOUND_BODY = JSON.stringify({
+  errorCode: 4040010,
+  errorMessage: "Transaction id not found.",
+});
+
+const TRANSACTION_INFO_BODY = JSON.stringify({
+  signedTransactionInfo: "signed_transaction_info_value",
+});
+
+const HISTORY_BODY = JSON.stringify({
+  revision: "revision_output",
+  bundleId: "com.example",
+  appAppleId: 323232,
+  environment: Environment.SANDBOX,
+  hasMore: false,
+  signedTransactions: ["signed_transaction_value"],
+});
+
+const STATUS_BODY = JSON.stringify({
+  environment: Environment.SANDBOX,
+  bundleId: "com.example",
+  appAppleId: 5454545,
+  data: [],
+});
+
+/** A canned HTTP response keyed by request host. */
+type ResponseByHost = {
+  readonly host: string;
+  readonly status: number;
+  readonly body: string;
+};
+
+/**
+ * Build a fake `HttpClient` that returns a canned response chosen by the
+ * request host. Also records every host it was asked to hit so tests can
+ * assert the production attempt happened before the sandbox fallback.
+ */
+const recordingHttpClient = (responses: ReadonlyArray<ResponseByHost>) => {
+  const hostsHit: string[] = [];
+  const client = HttpClient.make((request, url) =>
+    Effect.sync(() => {
+      hostsHit.push(url.host);
+      const match = responses.find((response) => response.host === url.host);
+      const status = match?.status ?? 500;
+      const body = match?.body ?? "{}";
+      const webResponse = new Response(body, {
+        status,
+        headers: { "Content-Type": "application/json" },
+      });
+      return HttpClientResponse.fromWeb(request, webResponse);
+    }),
+  );
+  return { client, hostsHit } as const;
+};
+
+/** A {@link TransactionHistoryRequest} with every optional filter absent. */
+const emptyHistoryRequest = (): TransactionHistoryRequest => ({
+  startDate: Option.none(),
+  endDate: Option.none(),
+  productIds: Option.none(),
+  productTypes: Option.none(),
+  sort: Option.none(),
+  subscriptionGroupIdentifiers: Option.none(),
+  inAppOwnershipType: Option.none(),
+  revoked: Option.none(),
+});
+
+const sdkWith = (responses: ReadonlyArray<ResponseByHost>) => {
+  const { client, hostsHit } = recordingHttpClient(responses);
+  const sdk = AppStoreServerSdk.of({ httpClient: client });
+  return { sdk, hostsHit } as const;
+};
+
+/**
+ * A fresh, valid config per test. The signing key must parse as a PKCS8 EC
+ * key so the client can mint a bearer token before the (faked) HTTP call.
+ */
+const config = () =>
+  ({
+    appAppleId: "1234567",
+    bundleId: "com.example",
+    inAppPurchaseKeyIssuerId: "issuer-id",
+    inAppPurchaseKeyId: "key-id",
+    inAppPurchasePrivateKey: TEST_SIGNING_KEY,
+  }) as const;
+
+// A throwaway PKCS8 EC P-256 private key used only to mint a (never-validated)
+// bearer token in the faked HTTP path. Matches the shape the SDK signer expects.
+const TEST_SIGNING_KEY = `-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgevZzL1gdAFr88hb2
+OF/2NxApJCzGCEDdfSp6VQO30hyhRANCAAQRWz+jn65BtOMvdyHKcvjBeBSDZH2r
+1RTwjmYSi9R/zpBnuQ4EiMnCqfMPWiZqB4QdbAd0E7oH50VpuZ1P087G
+-----END PRIVATE KEY-----`;
+
+describe("buildAppStoreSdkContext", () => {
+  it("returns an object exposing every documented method", () => {
+    const { sdk } = sdkWith([]);
+    const context = buildAppStoreSdkContext(sdk, config());
+
+    expect(context.bundleId).toBe("com.example");
+    expect(typeof context.getTransactionInfo).toBe("function");
+    expect(typeof context.decodeSignedTransaction).toBe("function");
+    expect(typeof context.decodeSignedRenewalInfo).toBe("function");
+    expect(typeof context.decodeNotification).toBe("function");
+    expect(typeof context.getTransactionHistoryWithEnvironmentFallback).toBe("function");
+    expect(typeof context.getAllSubscriptionStatusesWithEnvironmentFallback).toBe("function");
+  });
+
+  describe("getTransactionInfo", () => {
+    it("tries production first, then falls back to sandbox on AppStoreNotFoundError", async () => {
+      const { sdk, hostsHit } = sdkWith([
+        { host: PRODUCTION_HOST, status: 404, body: TRANSACTION_NOT_FOUND_BODY },
+        { host: SANDBOX_HOST, status: 200, body: TRANSACTION_INFO_BODY },
+      ]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const result = await Effect.runPromise(context.getTransactionInfo("txn-1"));
+
+      // Production is attempted before the sandbox fallback.
+      expect(hostsHit).toEqual([PRODUCTION_HOST, SANDBOX_HOST]);
+      // The returned tuple reports the environment that actually answered.
+      expect(result.environment).toBe(Environment.SANDBOX);
+      expect(Option.getOrUndefined(result.transactionInfo.signedTransactionInfo)).toBe(
+        "signed_transaction_info_value",
+      );
+    });
+
+    it("returns the { environment, transactionInfo } tuple from production without falling back", async () => {
+      const { sdk, hostsHit } = sdkWith([
+        { host: PRODUCTION_HOST, status: 200, body: TRANSACTION_INFO_BODY },
+      ]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const result = await Effect.runPromise(context.getTransactionInfo("txn-1"));
+
+      expect(hostsHit).toEqual([PRODUCTION_HOST]);
+      expect(result.environment).toBe(Environment.PRODUCTION);
+      expect(Option.getOrUndefined(result.transactionInfo.signedTransactionInfo)).toBe(
+        "signed_transaction_info_value",
+      );
+    });
+
+    it("does not fall back when production fails with a non-not-found error", async () => {
+      // A 401 unauthorized is NOT an AppStoreNotFoundError, so the catchTag
+      // must not swallow it — the failure surfaces and sandbox is never hit.
+      const { sdk, hostsHit } = sdkWith([
+        { host: PRODUCTION_HOST, status: 401, body: "{}" },
+        { host: SANDBOX_HOST, status: 200, body: TRANSACTION_INFO_BODY },
+      ]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const error = await Effect.runPromise(context.getTransactionInfo("txn-1").pipe(Effect.flip));
+
+      expect(error._tag).toBe("AppStoreUnauthorizedError");
+      expect(hostsHit).toEqual([PRODUCTION_HOST]);
+    });
+  });
+
+  describe("getTransactionHistoryWithEnvironmentFallback", () => {
+    it("tries production first, then falls back to sandbox on AppStoreNotFoundError", async () => {
+      const { sdk, hostsHit } = sdkWith([
+        { host: PRODUCTION_HOST, status: 404, body: TRANSACTION_NOT_FOUND_BODY },
+        { host: SANDBOX_HOST, status: 200, body: HISTORY_BODY },
+      ]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const result = await Effect.runPromise(
+        context.getTransactionHistoryWithEnvironmentFallback(
+          "txn-1",
+          Option.none(),
+          emptyHistoryRequest(),
+          Option.none(),
+        ),
+      );
+
+      expect(hostsHit).toEqual([PRODUCTION_HOST, SANDBOX_HOST]);
+      expect(result.environment).toBe(Environment.SANDBOX);
+      expect(Option.getOrUndefined(result.historyResponse.revision)).toBe("revision_output");
+    });
+
+    it("returns the { environment, historyResponse } tuple from production", async () => {
+      const { sdk, hostsHit } = sdkWith([
+        { host: PRODUCTION_HOST, status: 200, body: HISTORY_BODY },
+      ]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const result = await Effect.runPromise(
+        context.getTransactionHistoryWithEnvironmentFallback(
+          "txn-1",
+          Option.none(),
+          emptyHistoryRequest(),
+          Option.none(),
+        ),
+      );
+
+      expect(hostsHit).toEqual([PRODUCTION_HOST]);
+      expect(result.environment).toBe(Environment.PRODUCTION);
+      expect(Option.getOrUndefined(result.historyResponse.revision)).toBe("revision_output");
+    });
+  });
+
+  describe("getAllSubscriptionStatusesWithEnvironmentFallback", () => {
+    it("tries production first, then falls back to sandbox on AppStoreNotFoundError", async () => {
+      const { sdk, hostsHit } = sdkWith([
+        { host: PRODUCTION_HOST, status: 404, body: TRANSACTION_NOT_FOUND_BODY },
+        { host: SANDBOX_HOST, status: 200, body: STATUS_BODY },
+      ]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const result = await Effect.runPromise(
+        context.getAllSubscriptionStatusesWithEnvironmentFallback("txn-1", Option.none()),
+      );
+
+      expect(hostsHit).toEqual([PRODUCTION_HOST, SANDBOX_HOST]);
+      expect(result.environment).toBe(Environment.SANDBOX);
+      expect(Option.getOrUndefined(result.statusResponse.bundleId)).toBe("com.example");
+    });
+
+    it("returns the { environment, statusResponse } tuple from production", async () => {
+      const { sdk, hostsHit } = sdkWith([
+        { host: PRODUCTION_HOST, status: 200, body: STATUS_BODY },
+      ]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const result = await Effect.runPromise(
+        context.getAllSubscriptionStatusesWithEnvironmentFallback("txn-1", Option.none()),
+      );
+
+      expect(hostsHit).toEqual([PRODUCTION_HOST]);
+      expect(result.environment).toBe(Environment.PRODUCTION);
+      expect(Option.getOrUndefined(result.statusResponse.bundleId)).toBe("com.example");
+    });
+  });
+
+  describe("decodeSignedTransaction", () => {
+    it("verifies against the requested environment and fails VerificationError on a bad JWS", async () => {
+      const { sdk } = sdkWith([]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      // No HTTP is involved (the verifier is pure), so a structurally invalid
+      // JWS deterministically fails verification. This confirms the call is
+      // routed to the verifier for the specified environment.
+      const error = await Effect.runPromise(
+        context.decodeSignedTransaction("not-a-real-jws", Environment.PRODUCTION).pipe(Effect.flip),
+      );
+
+      expect(error).toBeInstanceOf(VerificationError);
+    });
+  });
+
+  describe("decodeSignedRenewalInfo", () => {
+    it("verifies against the requested environment and fails VerificationError on a bad JWS", async () => {
+      const { sdk } = sdkWith([]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      const error = await Effect.runPromise(
+        context.decodeSignedRenewalInfo("not-a-real-jws", Environment.SANDBOX).pipe(Effect.flip),
+      );
+
+      expect(error).toBeInstanceOf(VerificationError);
+    });
+  });
+
+  describe("decodeNotification", () => {
+    it("surfaces a VerificationError after exhausting production then sandbox", async () => {
+      const { sdk } = sdkWith([]);
+      const context = buildAppStoreSdkContext(sdk, config());
+
+      // A garbage payload fails verification in BOTH environments; the prod
+      // attempt's VerificationError is caught and the sandbox attempt is made,
+      // whose VerificationError is the one that finally surfaces.
+      const error = await Effect.runPromise(
+        context.decodeNotification("not-a-real-jws").pipe(Effect.flip),
+      );
+
+      expect(error).toBeInstanceOf(VerificationError);
+    });
+
+    // Deferred: asserting a SUCCESSFUL decode (the "returns decoded
+    // notification" / environment-fallback-to-success case) requires a real
+    // Apple-signed JWS with a valid x5c certificate chain rooted in
+    // APPLE_ROOT_CERTIFICATES_PEM plus a live OCSP check (enableOnlineChecks:
+    // true). That cannot be produced in-process without Apple's signing keys,
+    // and faking it would mean replacing the real SignedDataVerifier — which is
+    // exactly the kind of double the unit-test rules forbid. The successful
+    // production-vs-sandbox decode path is therefore left to a higher tier.
+    it.todo(
+      "decodeNotification returns a decoded notification and reports the matched environment (needs a real Apple-signed JWS + cert chain; cannot be produced in-process)",
+    );
+  });
+});
diff --git a/packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProvider.integration.test.ts b/packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProvider.integration.test.ts
new file mode 100644
index 000000000..2c635a427
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProvider.integration.test.ts
@@ -0,0 +1,918 @@
+/**
+ * Integration tests for the Google Play record engine
+ * ({@link GooglePlayPaymentProvider}), run against the real backend stack
+ * provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB +
+ * ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * The engine's `record*` methods consume an already-normalized purchase (the
+ * Google analogue of App Store's decoded JWS), so these tests build synthetic
+ * {@link GooglePlayNormalizedPurchase} values in-process and never call the
+ * live Play Developer API. They drive the whole DB graph end-to-end and verify
+ * the persisted side effects (identity rows, operational projection,
+ * `purchase_ledger`), mirroring the App Store engine integration suite.
+ *
+ * Paths that DO require the live Play API (`buildSdkContextFromConfiguration`,
+ * `fetchAndNormalize*`, and therefore the RTDN webhook handler) are deferred to
+ * `test.todo` — minting an OAuth2 token + fetching a purchase needs real
+ * service-account credentials that aren't available offline.
+ */
+import { Effect, Layer, Option } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  FxRateService,
+  GooglePlayServerApi,
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseProcessingService,
+} from "@voidhash/core/services";
+import { GooglePlayPaymentProvider } from "@voidhash/core/services/paymentProviders/googlePlay/payment-provider";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import {
+  ACCOUNT_TOKEN_SERVICE_ID,
+  deriveAccountToken,
+} from "@voidhash/core/utils/crypto/account-token";
+import { generateId } from "@voidhash/core/utils";
+import {
+  GooglePlayPaymentProviderProductNotMappedError,
+  GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError,
+  GooglePlayPurchaseProcessingIdempotencyKeyDerivationError,
+} from "../../../../src/services/paymentProviders/googlePlay/errors.ts";
+import type { GooglePlayNormalizedPurchase } from "../../../../src/services/paymentProviders/googlePlay/helpers.ts";
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type Project as DbProject,
+  Db,
+  PersonOrigin,
+  ProviderEnvironment,
+  and,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  products,
+  purchaseLedger,
+  purchases,
+  subscriptions,
+  transactions,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+let seq = 0;
+const uniq = (label: string) => `it-gp-${label}-${Date.now()}-${seq++}`;
+
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+/**
+ * Full dependency graph for the Google Play record engine. Everything is either
+ * a real `Db`-backed service or a leaf stub, so the only escaping requirements
+ * are the harness `Db` and the per-test `AuthSession`.
+ */
+const GooglePlayEngineLive = GooglePlayPaymentProvider.layer.pipe(
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PurchaseProcessingService.layer,
+      PersonIdentityService.layer,
+      FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
+      PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
+      GooglePlayServerApi.layer,
+    ),
+  ),
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PerkGrantService.layer,
+      IdentityProjectionPublisher.noop,
+      CompletionWorkflowStub,
+    ),
+  ),
+);
+
+// ----------------------------------------------------------------------------
+// DB read-back helpers (bypass the engine).
+// ----------------------------------------------------------------------------
+
+const findConfiguration = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderConfigurations.findFirst({
+      where: { id },
+    });
+  });
+
+const findExternalIdentifier = (identifier: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personExternalIdentifiers.findFirst({
+      where: {
+        projectId,
+        serviceId: "google-play",
+        identifier,
+      },
+    });
+  });
+
+const findSubscriptionByStoreId = (storeSubscriptionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findFirst({
+      where: { storeSubscriptionId },
+    });
+  });
+
+const findPurchaseByProviderKey = (providerKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchases.findFirst({ where: { providerKey } });
+  });
+
+const findLedgerByKey = (idempotencyKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchaseLedger.findFirst({
+      where: { idempotencyKey },
+    });
+  });
+
+// ----------------------------------------------------------------------------
+// Synthetic normalized-purchase builders.
+// ----------------------------------------------------------------------------
+
+const baseFields = (): Omit<GooglePlayNormalizedPurchase, "kind" | "productId"> => ({
+  acknowledgementState: Option.some("ACKNOWLEDGEMENT_STATE_ACKNOWLEDGED"),
+  autoRenewEnabled: true,
+  basePlanId: Option.none(),
+  currency: Option.none(),
+  expiryTime: Option.some(new Date(Date.now() + 30 * 24 * 60 * 60 * 1000)),
+  isTrial: false,
+  linkedPurchaseToken: Option.none(),
+  obfuscatedExternalAccountId: Option.none(),
+  offerId: Option.none(),
+  orderId: Option.some(uniq("order")),
+  priceMinorUnits: Option.none(),
+  purchaseToken: uniq("token"),
+  startTime: Option.some(new Date()),
+  storefront: Option.some("US"),
+  subscriptionState: Option.some("SUBSCRIPTION_STATE_ACTIVE"),
+});
+
+const subPurchase = (
+  overrides: Partial<GooglePlayNormalizedPurchase> = {},
+): GooglePlayNormalizedPurchase => ({
+  ...baseFields(),
+  kind: "subscription",
+  productId: "premium",
+  ...overrides,
+});
+
+const productPurchase = (
+  overrides: Partial<GooglePlayNormalizedPurchase> = {},
+): GooglePlayNormalizedPurchase => ({
+  ...baseFields(),
+  autoRenewEnabled: false,
+  expiryTime: Option.none(),
+  kind: "product",
+  productId: "coins_100",
+  subscriptionState: Option.none(),
+  ...overrides,
+});
+
+// ----------------------------------------------------------------------------
+// Per-test parent-row seeding + cleanup.
+// ----------------------------------------------------------------------------
+
+interface CleanupTrack {
+  readonly configIds: string[];
+  readonly providerProductIds: string[];
+  readonly productIds: string[];
+  readonly ledgerKeys: string[];
+  readonly subscriptionStoreIds: string[];
+  readonly purchaseProviderKeys: string[];
+  readonly externalIdentifiers: string[];
+}
+
+const newTrack = (): CleanupTrack => ({
+  configIds: [],
+  externalIdentifiers: [],
+  ledgerKeys: [],
+  productIds: [],
+  providerProductIds: [],
+  purchaseProviderKeys: [],
+  subscriptionStoreIds: [],
+});
+
+const seedConfig = (track: CleanupTrack, label: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const configId = generateId("paymentProviderConfiguration");
+    const providerProductId = generateId("paymentProviderProduct");
+    const productId = generateId("product");
+    const productKey = uniq(`${label}-prod`);
+    const packageName = `com.example.${label.replace(/[^a-z0-9]/gi, "")}${seq}`;
+
+    track.configIds.push(configId);
+    track.providerProductIds.push(providerProductId);
+    track.productIds.push(productId);
+
+    yield* db.insert(products).values({
+      id: productId,
+      name: `GooglePlay IT ${label}`,
+      projectId,
+      slug: uniq(`${label}-slug`),
+    });
+    yield* db.insert(paymentProviderConfigurations).values({
+      configuration: {
+        googleRealTimeDeveloperNotificationForwardingUrl: "",
+        googleRealTimeDeveloperNotificationTopicName: "",
+        packageName,
+        serviceAccountKey: "PLAINTEXT_KEY",
+      },
+      enabled: true,
+      id: configId,
+      name: `GooglePlay IT ${label}`,
+      paymentProviderKey: packageName,
+      projectId,
+      providerId: "google-play",
+    });
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      configuration: { productId: productKey },
+      id: providerProductId,
+      isActive: true,
+      paymentProviderConfigurationId: configId,
+      productId,
+      providerProductKey: productKey,
+    });
+
+    const configuration = yield* findConfiguration(configId);
+    return {
+      configuration: configuration as DbPaymentProviderConfiguration,
+      packageName,
+      productKey,
+      providerProductId,
+      productId,
+    };
+  });
+
+const cleanup = (track: CleanupTrack) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const ignore = <A, E>(eff: Effect.Effect<A, E, never>) => eff.pipe(Effect.ignore);
+
+    if (track.ledgerKeys.length > 0) {
+      yield* ignore(
+        db.delete(purchaseLedger).where(inArray(purchaseLedger.idempotencyKey, track.ledgerKeys)),
+      );
+    }
+    if (track.subscriptionStoreIds.length > 0) {
+      yield* ignore(
+        db
+          .delete(subscriptions)
+          .where(inArray(subscriptions.storeSubscriptionId, track.subscriptionStoreIds)),
+      );
+    }
+    if (track.purchaseProviderKeys.length > 0) {
+      yield* ignore(
+        db.delete(purchases).where(inArray(purchases.providerKey, track.purchaseProviderKeys)),
+      );
+    }
+    if (track.providerProductIds.length > 0) {
+      yield* ignore(
+        db
+          .delete(transactions)
+          .where(
+            inArray(transactions.paymentProviderConfigurationProductId, track.providerProductIds),
+          ),
+      );
+      yield* ignore(
+        db
+          .delete(subscriptions)
+          .where(
+            inArray(subscriptions.paymentProviderConfigurationProductId, track.providerProductIds),
+          ),
+      );
+      yield* ignore(
+        db
+          .delete(purchases)
+          .where(
+            inArray(purchases.paymentProviderConfigurationProductId, track.providerProductIds),
+          ),
+      );
+      yield* ignore(
+        db
+          .delete(paymentProviderConfigurationProducts)
+          .where(inArray(paymentProviderConfigurationProducts.id, track.providerProductIds)),
+      );
+    }
+    if (track.configIds.length > 0) {
+      yield* ignore(
+        db
+          .delete(paymentProviderConfigurations)
+          .where(inArray(paymentProviderConfigurations.id, track.configIds)),
+      );
+    }
+    if (track.productIds.length > 0) {
+      yield* ignore(db.delete(products).where(inArray(products.id, track.productIds)));
+    }
+    if (track.externalIdentifiers.length > 0) {
+      const extRows = yield* db
+        .select({
+          id: personExternalIdentifiers.id,
+          personId: personExternalIdentifiers.personId,
+        })
+        .from(personExternalIdentifiers)
+        .where(
+          and(
+            eq(personExternalIdentifiers.projectId, projectId),
+            inArray(personExternalIdentifiers.identifier, track.externalIdentifiers),
+          ),
+        )
+        .pipe(Effect.orElseSucceed(() => [] as { id: string; personId: string }[]));
+      const personIds = [...new Set(extRows.map((r) => r.personId))];
+      yield* ignore(
+        db
+          .delete(personExternalIdentifiers)
+          .where(
+            and(
+              eq(personExternalIdentifiers.projectId, projectId),
+              inArray(personExternalIdentifiers.identifier, track.externalIdentifiers),
+            ),
+          ),
+      );
+      if (personIds.length > 0) {
+        yield* ignore(
+          db.delete(personIdentities).where(inArray(personIdentities.personId, personIds)),
+        );
+        yield* ignore(db.delete(persons).where(inArray(persons.id, personIds)));
+      }
+    }
+  });
+
+const withEngine = <E, R>(
+  body: (args: {
+    readonly project: DbProject;
+    readonly track: CleanupTrack;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const track = newTrack();
+  return Effect.gen(function* () {
+    const db = yield* Db;
+    const project = (yield* db.query.projects
+      .findFirst({ where: { id: projectId } })
+      .pipe(Effect.orDie)) as DbProject;
+    return yield* body({ project, track });
+  }).pipe(Effect.ensuring(cleanup(track)));
+};
+
+describe("GooglePlayPaymentProvider.recordPurchase", () => {
+  test(
+    "subscription initial buy routes to startSubscription and persists subscription + ledger",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "sub-initial");
+        const purchase = subPurchase({
+          obfuscatedExternalAccountId: Option.some(uniq("acct")),
+          productId: seeded.productKey,
+        });
+        track.subscriptionStoreIds.push(purchase.purchaseToken);
+        track.externalIdentifiers.push(Option.getOrThrow(purchase.obfuscatedExternalAccountId));
+        const orderId = Option.getOrThrow(purchase.orderId);
+        track.ledgerKeys.push(`google:${orderId}:purchase`);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          distinctId: uniq("distinct"),
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "sdk",
+        });
+
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+        expect(result.personId.length).toBeGreaterThan(0);
+        expect(result.idempotent).toBe(false);
+
+        const subRow = yield* findSubscriptionByStoreId(purchase.purchaseToken);
+        expect(subRow).toBeDefined();
+        expect(subRow?.paymentProviderConfigurationProductId).toBe(seeded.providerProductId);
+        expect(subRow?.personId).toBe(result.personId);
+
+        const ledger = yield* findLedgerByKey(`google:${orderId}:purchase`);
+        expect(ledger).toBeDefined();
+        expect(ledger?.providerId).toBe("google-play");
+        expect(ledger?.providerEventType).toBe("purchase");
+        expect(ledger?.source).toBe("sdk");
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "SDK source with obfuscatedExternalAccountId = deriveAccountToken(distinctId) registers a voidhash-account-token binding",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "token-binding");
+        const distinctId = uniq("distinct");
+        const token = yield* deriveAccountToken(distinctId);
+        const purchase = subPurchase({
+          obfuscatedExternalAccountId: Option.some(token),
+          productId: seeded.productKey,
+        });
+        track.subscriptionStoreIds.push(purchase.purchaseToken);
+        track.externalIdentifiers.push(token);
+        track.ledgerKeys.push(`google:${Option.getOrThrow(purchase.orderId)}:purchase`);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          distinctId,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "sdk",
+        });
+
+        const db = yield* Db;
+        const binding = yield* db.query.personExternalIdentifiers.findFirst({
+          where: {
+            projectId,
+            serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+            identifier: token,
+          },
+        });
+        expect(binding).toBeDefined();
+        expect(binding?.personId).toBe(result.personId);
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "SDK source with a foreign account token (not derived from distinctId) writes no account-token binding",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "foreign-token");
+        const foreignToken = yield* deriveAccountToken(uniq("other-person"));
+        const purchase = subPurchase({
+          obfuscatedExternalAccountId: Option.some(foreignToken),
+          productId: seeded.productKey,
+        });
+        track.subscriptionStoreIds.push(purchase.purchaseToken);
+        track.externalIdentifiers.push(foreignToken);
+        track.ledgerKeys.push(`google:${Option.getOrThrow(purchase.orderId)}:purchase`);
+
+        yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          distinctId: uniq("distinct"),
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "sdk",
+        });
+
+        const db = yield* Db;
+        const binding = yield* db.query.personExternalIdentifiers.findFirst({
+          where: {
+            projectId,
+            serviceId: ACCOUNT_TOKEN_SERVICE_ID,
+            identifier: foreignToken,
+          },
+        });
+        expect(binding).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "one-time product purchase routes to completeOneTimePurchase and persists a purchase row",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "one-time");
+        const purchase = productPurchase({
+          obfuscatedExternalAccountId: Option.some(uniq("acct")),
+          productId: seeded.productKey,
+        });
+        const orderId = Option.getOrThrow(purchase.orderId);
+        track.purchaseProviderKeys.push(orderId);
+        track.externalIdentifiers.push(Option.getOrThrow(purchase.obfuscatedExternalAccountId));
+        track.ledgerKeys.push(`google:${orderId}:one_time_purchase`);
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          distinctId: uniq("distinct"),
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "sdk",
+        });
+
+        expect(Option.isNone(result.subscriptionId)).toBe(true);
+        const purchaseRow = yield* findPurchaseByProviderKey(orderId);
+        expect(purchaseRow).toBeDefined();
+        expect(purchaseRow?.personId).toBe(result.personId);
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "webhook path without distinctId resolves a stand-in person stamped GooglePlayWebhook",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "webhook-standin");
+        // No account token / orderId → personIdentifier falls back to purchaseToken.
+        const purchase = subPurchase({ orderId: Option.none(), productId: seeded.productKey });
+        track.subscriptionStoreIds.push(purchase.purchaseToken);
+        track.externalIdentifiers.push(purchase.purchaseToken);
+        track.ledgerKeys.push(
+          `google:${purchase.purchaseToken}:purchase`, // orderId none → key would fail; see below
+        );
+
+        // orderId is required for the purchase idempotency key, so give the
+        // webhook purchase an order id but a purchaseToken-based personIdentifier
+        // by leaving the account token + orderId-as-identifier path: set orderId.
+        const withOrder = subPurchase({
+          obfuscatedExternalAccountId: Option.none(),
+          orderId: Option.some(uniq("order")),
+          productId: seeded.productKey,
+          purchaseToken: purchase.purchaseToken,
+        });
+        track.ledgerKeys.push(`google:${Option.getOrThrow(withOrder.orderId)}:purchase`);
+        // personIdentifier = orderId (no account token) for the webhook path.
+        track.externalIdentifiers.push(Option.getOrThrow(withOrder.orderId));
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase: withOrder,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        const ext = yield* findExternalIdentifier(Option.getOrThrow(withOrder.orderId));
+        expect(ext).toBeDefined();
+        expect(ext?.personId).toBe(result.personId);
+
+        const db = yield* Db;
+        const personRow = yield* db.query.persons.findFirst({
+          where: { id: result.personId },
+        });
+        expect(personRow?.origin).toBe(PersonOrigin.GooglePlayWebhook);
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "missing productId returns an ignored result and writes no operational rows",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "ignored");
+        const purchase = subPurchase({ productId: "" });
+
+        const result = yield* engine.recordPurchase({
+          configuration: seeded.configuration,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        expect(result.idempotent).toBe(true);
+        expect(result.personId).toBe("");
+        expect(Option.isNone(result.subscriptionId)).toBe(true);
+
+        const subRow = yield* findSubscriptionByStoreId(purchase.purchaseToken);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "unmapped productId fails with GooglePlayPaymentProviderProductNotMappedError and writes nothing",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "not-mapped");
+        const unmappedKey = uniq("unmapped");
+        const purchase = subPurchase({
+          orderId: Option.some(uniq("order")),
+          productId: unmappedKey,
+        });
+        // identity is resolved (personIdentifier = orderId) before the mapping check.
+        track.externalIdentifiers.push(Option.getOrThrow(purchase.orderId));
+
+        const error = yield* Effect.flip(
+          engine.recordPurchase({
+            configuration: seeded.configuration,
+            eventTime: new Date(),
+            project,
+            providerEnvironment: ProviderEnvironment.Production,
+            purchase,
+            receivedAt: new Date(),
+            source: "webhook",
+          }),
+        );
+        expect(error).toBeInstanceOf(GooglePlayPaymentProviderProductNotMappedError);
+        if (error instanceof GooglePlayPaymentProviderProductNotMappedError) {
+          expect(error.providerProductKey).toBe(unmappedKey);
+          expect(error.paymentProviderConfigurationId).toBe(seeded.configuration.id);
+        }
+
+        const subRow = yield* findSubscriptionByStoreId(purchase.purchaseToken);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "SDK source without a distinctId fails with SdkTransactionMissingDistinctIdError",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "no-distinct");
+        const purchase = subPurchase({ productId: seeded.productKey });
+
+        const input = {
+          configuration: seeded.configuration,
+          distinctId: undefined,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "sdk",
+        } as unknown as Parameters<typeof engine.recordPurchase>[0];
+
+        const error = yield* Effect.flip(engine.recordPurchase(input));
+        expect(error).toBeInstanceOf(GooglePlayPaymentProviderSdkTransactionMissingDistinctIdError);
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "a purchase missing its orderId anchor fails with IdempotencyKeyDerivationError and writes nothing",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "idemp-fail");
+        // No orderId → personIdentifier falls back to purchaseToken (identity is
+        // still resolved before key derivation), and the purchase key fails.
+        const purchase = subPurchase({ orderId: Option.none(), productId: seeded.productKey });
+        track.externalIdentifiers.push(purchase.purchaseToken);
+
+        const error = yield* Effect.flip(
+          engine.recordPurchase({
+            configuration: seeded.configuration,
+            eventTime: new Date(),
+            project,
+            providerEnvironment: ProviderEnvironment.Production,
+            purchase,
+            receivedAt: new Date(),
+            source: "webhook",
+          }),
+        );
+        expect(error).toBeInstanceOf(GooglePlayPurchaseProcessingIdempotencyKeyDerivationError);
+        if (error instanceof GooglePlayPurchaseProcessingIdempotencyKeyDerivationError) {
+          expect(error.missingField).toBe("orderId");
+        }
+
+        const subRow = yield* findSubscriptionByStoreId(purchase.purchaseToken);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "duplicate delivery of the same logical event returns an idempotent result (ledger UNIQUE gate)",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "idempotent");
+        const purchase = subPurchase({
+          obfuscatedExternalAccountId: Option.some(uniq("acct")),
+          productId: seeded.productKey,
+        });
+        track.subscriptionStoreIds.push(purchase.purchaseToken);
+        track.externalIdentifiers.push(Option.getOrThrow(purchase.obfuscatedExternalAccountId));
+        track.ledgerKeys.push(`google:${Option.getOrThrow(purchase.orderId)}:purchase`);
+
+        const input = {
+          configuration: seeded.configuration,
+          distinctId: uniq("distinct"),
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "sdk" as const,
+        };
+
+        const first = yield* engine.recordPurchase(input);
+        expect(first.idempotent).toBe(false);
+        const second = yield* engine.recordPurchase(input);
+        expect(second.idempotent).toBe(true);
+        expect(Option.getOrNull(second.subscriptionId)).toBe(
+          Option.getOrNull(first.subscriptionId),
+        );
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("GooglePlayPaymentProvider lifecycle record* routing", () => {
+  /** Seeds a live subscription one hour earlier so follow-up events pass the watermark. */
+  const seedActiveSubscription = (track: CleanupTrack, project: DbProject, label: string) =>
+    Effect.gen(function* () {
+      const engine = yield* GooglePlayPaymentProvider;
+      const seeded = yield* seedConfig(track, label);
+      const purchase = subPurchase({
+        obfuscatedExternalAccountId: Option.some(uniq("acct")),
+        productId: seeded.productKey,
+      });
+      track.subscriptionStoreIds.push(purchase.purchaseToken);
+      track.externalIdentifiers.push(Option.getOrThrow(purchase.obfuscatedExternalAccountId));
+      track.ledgerKeys.push(`google:${Option.getOrThrow(purchase.orderId)}:purchase`);
+
+      yield* engine.recordPurchase({
+        configuration: seeded.configuration,
+        distinctId: uniq("distinct"),
+        eventTime: new Date(Date.now() - 60 * 60 * 1000),
+        project,
+        providerEnvironment: ProviderEnvironment.Production,
+        purchase,
+        receivedAt: new Date(),
+        source: "sdk",
+      });
+      const expiryMs = Option.getOrThrow(purchase.expiryTime).getTime();
+      return { expiryMs, purchase, seeded };
+    });
+
+  test(
+    "recordSubscriptionExpired marks the subscription expired and writes an expired ledger row",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "expired");
+        track.ledgerKeys.push(`google:${active.purchase.purchaseToken}:expired:${active.expiryMs}`);
+
+        const result = yield* engine.recordSubscriptionExpired({
+          configuration: active.seeded.configuration,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase: active.purchase,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+
+        const ledger = yield* findLedgerByKey(
+          `google:${active.purchase.purchaseToken}:expired:${active.expiryMs}`,
+        );
+        expect(ledger?.providerEventType).toBe("expired");
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordSubscriptionCanceled records the cancel-at-period-end intent on the subscription",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "cancel");
+        track.ledgerKeys.push(
+          `google:${active.purchase.purchaseToken}:canceled:${active.expiryMs}`,
+        );
+
+        yield* engine.recordSubscriptionCanceled({
+          configuration: active.seeded.configuration,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase: active.purchase,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        const subRow = yield* findSubscriptionByStoreId(active.purchase.purchaseToken);
+        expect(subRow?.cancelAtPeriodEnd).toBe(true);
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordEntitlementRevoked routes a subscription to revokeSubscription (revoke ledger)",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "revoke");
+        track.ledgerKeys.push(`google:${active.purchase.purchaseToken}:revoke`);
+
+        const result = yield* engine.recordEntitlementRevoked({
+          configuration: active.seeded.configuration,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase: active.purchase,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+
+        const ledger = yield* findLedgerByKey(`google:${active.purchase.purchaseToken}:revoke`);
+        expect(ledger?.providerEventType).toBe("revoke");
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordBillingRetry keeps the subscription active and records the grace deadline",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const active = yield* seedActiveSubscription(track, project, "billing-retry");
+        track.ledgerKeys.push(
+          `google:${active.purchase.purchaseToken}:billing_retry:${active.expiryMs}`,
+        );
+
+        yield* engine.recordBillingRetry({
+          configuration: active.seeded.configuration,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase: active.purchase,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        const subRow = yield* findSubscriptionByStoreId(active.purchase.purchaseToken);
+        expect(subRow?.billingRetryAt).toBeInstanceOf(Date);
+        expect(subRow?.gracePeriodExpiresAt).toBeInstanceOf(Date);
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "recordInformationalNotification returns an ignored result and writes no operational rows",
+    withEngine(({ project, track }) =>
+      Effect.gen(function* () {
+        const engine = yield* GooglePlayPaymentProvider;
+        const seeded = yield* seedConfig(track, "informational");
+        const purchase = subPurchase({ productId: seeded.productKey });
+
+        const result = yield* engine.recordInformationalNotification({
+          configuration: seeded.configuration,
+          eventTime: new Date(),
+          project,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchase,
+          receivedAt: new Date(),
+          source: "webhook",
+        });
+
+        expect(result.idempotent).toBe(true);
+        expect(result.personId).toBe("");
+        const subRow = yield* findSubscriptionByStoreId(purchase.purchaseToken);
+        expect(subRow).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(GooglePlayEngineLive), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("GooglePlayPaymentProvider live Play API paths (deferred)", () => {
+  // The engine's fetch + SDK-context paths mint an OAuth2 token from the
+  // service-account JSON and call the Android Publisher API — neither is
+  // available offline, so these mirror the App Store live-SDK-wall todos.
+  vitestTest.todo(
+    "buildSdkContextFromConfiguration mints an access token + builds a client — deferred: requires a real Google service-account credential and outbound network to oauth2.googleapis.com",
+  );
+  vitestTest.todo(
+    "fetchAndNormalizeSubscription resolves authoritative state + regional catalog price — deferred: requires a live subscriptions.v2.get + monetization catalog fetch",
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/googlePlay/GooglePlayWebhookHandlerService.integration.test.ts b/packages/core/test/services/paymentProviders/googlePlay/GooglePlayWebhookHandlerService.integration.test.ts
new file mode 100644
index 000000000..d3b19f199
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/googlePlay/GooglePlayWebhookHandlerService.integration.test.ts
@@ -0,0 +1,227 @@
+/**
+ * Integration tests for the Google Play RTDN webhook handler
+ * ({@link GooglePlayWebhookHandlerService}). Run against the real backend stack
+ * (live DB). Only the branches that resolve BEFORE the live Play API fetch are
+ * exercised here — config lookup, Pub/Sub envelope decode, and test
+ * notifications. The branches that re-fetch authoritative purchase state (every
+ * subscription / one-time / voided notification) mint an OAuth2 token and call
+ * the Android Publisher API, which isn't available offline, so they are
+ * deferred to `test.todo` (mirroring the App Store webhook handler suite, which
+ * is entirely `test.todo` behind the live-Apple wall).
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  FxRateService,
+  GooglePlayServerApi,
+  GooglePlayWebhookHandlerService,
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseProcessingService,
+} from "@voidhash/core/services";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { generateId } from "@voidhash/core/utils";
+import { GooglePlayPaymentProviderConfigurationNotFoundError } from "../../../../src/services/paymentProviders/googlePlay/errors.ts";
+import {
+  Db,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  paymentProviderNotificationProcessed,
+  products,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+let seq = 0;
+const uniq = (label: string) => `it-gpwh-${label}-${Date.now()}-${seq++}`;
+
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+const HandlerLive = GooglePlayWebhookHandlerService.layer.pipe(
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PurchaseProcessingService.layer,
+      PersonIdentityService.layer,
+      FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
+      PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
+      GooglePlayServerApi.layer,
+    ),
+  ),
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PerkGrantService.layer,
+      IdentityProjectionPublisher.noop,
+      CompletionWorkflowStub,
+    ),
+  ),
+);
+
+/** Base64-encoded Pub/Sub push envelope around a DeveloperNotification. */
+const envelope = (developerNotification: unknown, messageId = uniq("msg")) => ({
+  message: {
+    data: btoa(JSON.stringify(developerNotification)),
+    messageId,
+    publishTime: "2024-02-15T12:00:00.000Z",
+  },
+  subscription: "projects/p/subscriptions/s",
+});
+
+const seedConfig = (label: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const configId = generateId("paymentProviderConfiguration");
+    const productId = generateId("product");
+    const providerProductId = generateId("paymentProviderProduct");
+    const packageName = `com.example.${label.replace(/[^a-z0-9]/gi, "")}${seq}`;
+    yield* db.insert(products).values({
+      id: productId,
+      name: `GP WH IT ${label}`,
+      projectId,
+      slug: uniq(`${label}-slug`),
+    });
+    yield* db.insert(paymentProviderConfigurations).values({
+      configuration: {
+        googleRealTimeDeveloperNotificationForwardingUrl: "",
+        googleRealTimeDeveloperNotificationTopicName: "",
+        packageName,
+        serviceAccountKey: "PLAINTEXT_KEY",
+      },
+      enabled: true,
+      id: configId,
+      name: `GP WH IT ${label}`,
+      paymentProviderKey: packageName,
+      projectId,
+      providerId: "google-play",
+    });
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      configuration: { productId: "premium" },
+      id: providerProductId,
+      isActive: true,
+      paymentProviderConfigurationId: configId,
+      productId,
+      providerProductKey: "premium",
+    });
+    return { configId, productId, providerProductId };
+  });
+
+const cleanupConfig = (ids: { configId: string; productId: string; providerProductId: string }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const ignore = <A, E>(eff: Effect.Effect<A, E, never>) => eff.pipe(Effect.ignore);
+    yield* ignore(
+      db
+        .delete(paymentProviderNotificationProcessed)
+        .where(
+          eq(paymentProviderNotificationProcessed.paymentProviderConfigurationId, ids.configId),
+        ),
+    );
+    yield* ignore(
+      db
+        .delete(paymentProviderConfigurationProducts)
+        .where(inArray(paymentProviderConfigurationProducts.id, [ids.providerProductId])),
+    );
+    yield* ignore(
+      db
+        .delete(paymentProviderConfigurations)
+        .where(inArray(paymentProviderConfigurations.id, [ids.configId])),
+    );
+    yield* ignore(db.delete(products).where(inArray(products.id, [ids.productId])));
+  });
+
+describe("GooglePlayWebhookHandlerService.acceptRtdnNotification", () => {
+  test(
+    "fails with ConfigurationNotFoundError for an unknown configuration id",
+    Effect.gen(function* () {
+      const handler = yield* GooglePlayWebhookHandlerService;
+      const error = yield* Effect.flip(
+        handler.acceptRtdnNotification({
+          paymentProviderConfigurationId: "nonexistent-config",
+          pubsubBody: envelope({ packageName: "com.x", testNotification: { version: "1.0" } }),
+          receivedAt: new Date(),
+        }),
+      );
+      expect(error).toBeInstanceOf(GooglePlayPaymentProviderConfigurationNotFoundError);
+    }).pipe(Effect.provide(HandlerLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "acks (handled:false) an undecodable Pub/Sub envelope without touching the Play API",
+    Effect.gen(function* () {
+      const handler = yield* GooglePlayWebhookHandlerService;
+      const ids = yield* seedConfig("bad-envelope");
+      const result = yield* handler
+        .acceptRtdnNotification({
+          paymentProviderConfigurationId: ids.configId,
+          pubsubBody: { not: "a valid pubsub message" },
+          receivedAt: new Date(),
+        })
+        .pipe(Effect.ensuring(cleanupConfig(ids)));
+      expect(result.accepted).toBe(true);
+      expect(result.handled).toBe(false);
+    }).pipe(Effect.provide(HandlerLive), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "acks a test notification and writes an ignored notification-ledger row",
+    Effect.gen(function* () {
+      const handler = yield* GooglePlayWebhookHandlerService;
+      const ids = yield* seedConfig("test-notif");
+      const messageId = uniq("test-msg");
+      const result = yield* handler
+        .acceptRtdnNotification({
+          paymentProviderConfigurationId: ids.configId,
+          pubsubBody: envelope(
+            {
+              eventTimeMillis: "1707998400000",
+              packageName: "com.x",
+              testNotification: { version: "1.0" },
+            },
+            messageId,
+          ),
+          receivedAt: new Date(),
+        })
+        .pipe(
+          Effect.tap((value) =>
+            Effect.gen(function* () {
+              expect(value.accepted).toBe(true);
+              expect(value.handled).toBe(true);
+              const db = yield* Db;
+              const row = yield* db.query.paymentProviderNotificationProcessed.findFirst({
+                where: { notificationUuid: messageId },
+              });
+              expect(row?.result).toBe("ignored");
+              expect(row?.providerId).toBe("google-play");
+            }),
+          ),
+          Effect.ensuring(cleanupConfig(ids)),
+        );
+      expect(result.notificationType).toBe("TEST");
+    }).pipe(Effect.provide(HandlerLive), CoreAuthSession.authenticate()),
+  );
+
+  // The remaining branches re-fetch authoritative state from the Play Developer
+  // API (subscriptions.v2.get / products.v2.get) after minting an OAuth2 token,
+  // which is not available offline.
+  vitestTest.todo(
+    "SUBSCRIPTION_PURCHASED → recordPurchase — deferred: needs a live subscriptions.v2.get fetch + service-account credentials",
+  );
+  vitestTest.todo(
+    "voided purchase → recordRefund — deferred: needs a live purchase fetch for the refunded token",
+  );
+  vitestTest.todo(
+    "product-not-mapped parks the raw Pub/Sub envelope (parked_pending_product_mapping) — deferred: reaching the dispatch requires the live fetch to resolve the productId first",
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/stripe/StripePaymentProvider.integration.test.ts b/packages/core/test/services/paymentProviders/stripe/StripePaymentProvider.integration.test.ts
new file mode 100644
index 000000000..b2f06dc44
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/stripe/StripePaymentProvider.integration.test.ts
@@ -0,0 +1,1048 @@
+/**
+ * Integration tests for the Stripe record engine ({@link StripePaymentProvider}
+ * — `core/StripePaymentProvider`, exported from the barrel as
+ * `StripePaymentProviderEngine`), run against the real backend stack
+ * provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB +
+ * ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * The engine is a multi-branch purchase-recording machine: every `record*`
+ * method decodes the verified Stripe `data.object`, resolves the Stripe
+ * identity (creating / reusing a person and its `stripe`
+ * `person_external_identifier`), looks up the product mapping by
+ * `"${product}:${price}"`, derives a per-event idempotency key, builds the
+ * money breakdown (gross/fee/tax from the REST charge-fee lookup), and routes
+ * to the matching `PurchaseProcessingService` action — which persists the
+ * operational `subscription` / `transaction` / `purchase` rows plus an
+ * append-only `purchase_ledger` row. These tests drive that whole graph
+ * end-to-end and verify the *persisted* side effects, not just the returned
+ * `PurchaseProcessingResult`.
+ *
+ * Money / fee flow: a money-bearing `transaction` row (and its revenue
+ * analytics) is only written when a `providerTransactionId` is present —
+ * `resolveChargeKey = payment_intent ?? charge`. So start/renew/one-time events
+ * carry a `payment_intent` (`pi_*`) and the fake `HttpClient` is wired with the
+ * payment-intent → charge → balance-transaction fee routes for it. Every
+ * money-bearing event uses `"usd"` so FX resolves to the identity rate offline.
+ *
+ * What the test wires that the harness does not provide: the engine layer pulls
+ * in `PurchaseProcessingService`, `PersonIdentityService`, `FxRateService`,
+ * `PaymentConfigSecretCrypto`, and a (fake) `HttpClient`. All of those bottom
+ * out at the harness `Db` once given a handful of leaf stubs — see
+ * `stripe-test-support.ts` (`stripeEngineLayer`). The typed `StripeContext`
+ * (verifier + REST helpers) is built per test via
+ * `engine.buildContextFromConfiguration(configurationRow)`; the typed
+ * `StripeEvent` is produced by decoding a `makeStripeEvent` envelope through the
+ * `StripeEventSchema`.
+ *
+ * Conventions (mirroring the App Store engine test): every test namespaces its
+ * Stripe ids with a per-call unique suffix, asserts by membership / by-id
+ * (never global counts), and self-cleans every row it creates via an
+ * `Effect.ensuring(cleanupStripeScenario(...))` finalizer that collects every
+ * Stripe customer id it touched. Typed failures are asserted with `Effect.flip`
+ * + `instanceof`, paired with a DB-state assertion proving nothing leaked.
+ * Follow-up lifecycle events on the same subscription bump `created` /
+ * `occurredAt` by 60s so the second-precision `TIMESTAMP` watermark accepts the
+ * projection update.
+ */
+import { Effect, Option, Schema } from "effect";
+import { expect } from "vitest";
+
+import {
+  type PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  type Project as DbProject,
+  Db,
+  ProviderEnvironment,
+} from "@voidhash/db";
+import { ProductType } from "@voidhash/lib/constants";
+import { StripePaymentProvider } from "@voidhash/core/services/paymentProviders/stripe/payment-provider";
+// `stripe/events` + `stripe/errors` have no public package subpath, so they are
+// imported by relative path into `src` (the unit-test convention in the brief).
+import { StripeEventSchema } from "../../../../src/services/paymentProviders/stripe/events.ts";
+import {
+  StripePaymentProviderProductNotMappedError,
+  StripePurchaseProcessingIdempotencyKeyDerivationError,
+} from "../../../../src/services/paymentProviders/stripe/errors.ts";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+import {
+  chargeFeeRoutes,
+  checkoutLineItemsRoute,
+  cleanupStripeScenario,
+  makeStripeCharge,
+  makeStripeCheckoutSession,
+  makeStripeEvent,
+  makeStripeInvoice,
+  makeStripeSubscription,
+  noStripeRestHttpClient,
+  paymentIntentChargeRoute,
+  seedStripeConfig,
+  seedStripeProduct,
+  stripeEngineLayer,
+  stripeStubHttpClient,
+  uniq,
+} from "./stripe-test-support.ts";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+// ----------------------------------------------------------------------------
+// DB read-back helpers (bypass the engine).
+// ----------------------------------------------------------------------------
+
+const findConfiguration = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderConfigurations.findFirst({
+      where: { id },
+    });
+  });
+
+const findProjectRow = () =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.projects.findFirst({ where: { id: projectId } }).pipe(Effect.orDie);
+  });
+
+const findSubscriptionByStore = (configurationProductId: string, storeSubscriptionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findFirst({
+      where: {
+        paymentProviderConfigurationProductId: configurationProductId,
+        storeSubscriptionId,
+      },
+    });
+  });
+
+const findSubscriptionsByStore = (configurationProductId: string, storeSubscriptionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findMany({
+      where: {
+        paymentProviderConfigurationProductId: configurationProductId,
+        storeSubscriptionId,
+      },
+    });
+  });
+
+const findTransactionByStore = (configurationProductId: string, storeTransactionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.transactions.findFirst({
+      where: {
+        paymentProviderConfigurationProductId: configurationProductId,
+        storeTransactionId,
+      },
+    });
+  });
+
+const findPurchaseByProviderKey = (providerKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchases.findFirst({ where: { providerKey } });
+  });
+
+const findLedgerByKey = (idempotencyKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchaseLedger.findFirst({
+      where: { idempotencyKey },
+    });
+  });
+
+const findLedgerRowsByKey = (idempotencyKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchaseLedger.findMany({
+      where: { idempotencyKey },
+    });
+  });
+
+const findStripeExternalIdentifier = (identifier: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personExternalIdentifiers.findFirst({
+      where: {
+        projectId,
+        serviceId: "stripe",
+        identifier,
+      },
+    });
+  });
+
+const findPerson = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.persons.findFirst({ where: { id } });
+  });
+
+// ----------------------------------------------------------------------------
+// Per-test setup + cleanup harness.
+// ----------------------------------------------------------------------------
+
+/**
+ * Tracks the seeded config / product ids + the Stripe customer ids a test
+ * touched so the `Effect.ensuring` finalizer can sweep every row regardless of
+ * how the test exits. Ids are collected lazily (the body fills these), so a
+ * mid-test failure still cleans.
+ */
+interface StripeTrack {
+  configId: string | undefined;
+  configProductId: string | undefined;
+  productId: string | undefined;
+  readonly customerIds: string[];
+}
+
+const newTrack = (): StripeTrack => ({
+  configId: undefined,
+  configProductId: undefined,
+  customerIds: [],
+  productId: undefined,
+});
+
+/**
+ * Common per-test fixture: seeds an enabled Stripe configuration + a product
+ * mapping under the fixture project, reads back the typed configuration row and
+ * the live project row, and builds the per-tenant Stripe context. Records the
+ * seeded ids in `track` for cleanup.
+ */
+const setupStripe = (
+  track: StripeTrack,
+  productOverrides?: {
+    readonly type?: number;
+    readonly stripeProductId?: string;
+    readonly stripePriceId?: string;
+  },
+) =>
+  Effect.gen(function* () {
+    const engine = yield* StripePaymentProvider;
+    const seededConfig = yield* seedStripeConfig();
+    track.configId = seededConfig.configId;
+    const product = yield* seedStripeProduct({
+      configId: seededConfig.configId,
+      ...productOverrides,
+    });
+    track.configProductId = product.configProductId;
+    track.productId = product.productId;
+    const configuration = yield* findConfiguration(seededConfig.configId).pipe(
+      Effect.map((row) => row as DbPaymentProviderConfiguration),
+    );
+    const project = (yield* findProjectRow()) as DbProject;
+    const stripeContext = yield* engine.buildContextFromConfiguration(configuration);
+    return { configuration, engine, product, project, stripeContext };
+  });
+
+/**
+ * Wraps a test body so every row a Stripe scenario creates is removed afterward
+ * regardless of exit. The body receives a mutable `track`; ids are read lazily
+ * at finalization. Cleanup is a no-op when nothing was seeded.
+ */
+const withStripe = <E, R>(
+  body: (track: StripeTrack) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const track = newTrack();
+  return body(track).pipe(
+    Effect.ensuring(
+      Effect.suspend(() =>
+        track.configId
+          ? cleanupStripeScenario({
+              configId: track.configId,
+              configProductId: track.configProductId,
+              customerIds: track.customerIds,
+              productId: track.productId,
+            })
+          : Effect.void,
+      ),
+    ),
+  );
+};
+
+/** Decode a `makeStripeEvent` envelope into the typed `StripeEvent`. */
+const decodeEvent = (input: {
+  readonly type: string;
+  readonly object: Record<string, unknown>;
+  readonly previousAttributes?: Record<string, unknown>;
+  readonly livemode?: boolean;
+  readonly created?: number;
+  readonly id?: string;
+}) => Schema.decodeUnknownEffect(StripeEventSchema)(makeStripeEvent(input));
+
+/**
+ * Stub HTTP client routing `pi_x` → `ch_x` (fee 30 minor) for money-bearing
+ * subscription/invoice events. A start/renew invoice carries `payment_intent`
+ * `pi_x`; the engine fetches its latest charge then the charge's fee, so both
+ * REST routes must be present for a `transaction` row + analytics to be written.
+ */
+const moneyHttpClient = () =>
+  stripeStubHttpClient([
+    paymentIntentChargeRoute({ chargeId: "ch_x", paymentIntentId: "pi_x" }),
+    ...chargeFeeRoutes({ chargeId: "ch_x", feeMinor: 30 }),
+  ]);
+
+/**
+ * Seeds a live subscription via `recordInvoicePaid` (subscription_create) so a
+ * follow-up lifecycle event has a real `subscription` row to mutate. The
+ * follow-up events reuse the returned `subId` / `customerId`. The seeding
+ * invoice's `created` sits 60s EARLIER than every follow-up so the
+ * subscription's `last_event_occurred_at` watermark (second-precision
+ * `TIMESTAMP`) sits strictly before — a same-occurredAt projection update is
+ * intermittently rejected by the `<= occurredAt` guard.
+ */
+const seedActiveSubscription = (
+  ctx: Effect.Success<ReturnType<typeof setupStripe>>,
+  track: StripeTrack,
+  base: { readonly subId: string; readonly customerId: string; readonly created: number },
+) =>
+  Effect.gen(function* () {
+    track.customerIds.push(base.customerId);
+    const invoiceId = uniq("in");
+    const event = yield* decodeEvent({
+      created: base.created,
+      object: makeStripeInvoice({
+        amountPaid: 1990,
+        billingReason: "subscription_create",
+        created: base.created,
+        customerId: base.customerId,
+        distinctId: uniq("distinct"),
+        id: invoiceId,
+        paymentIntentId: "pi_x",
+        stripePriceId: ctx.product.stripePriceId,
+        stripeProductId: ctx.product.stripeProductId,
+        subscriptionId: base.subId,
+      }),
+      type: "invoice.paid",
+    });
+    const result = yield* ctx.engine.recordInvoicePaid({
+      configuration: ctx.configuration,
+      event,
+      mode: "test",
+      project: ctx.project,
+      providerEnvironment: ProviderEnvironment.Sandbox,
+      receivedAt: new Date(),
+      source: "webhook",
+      stripeContext: ctx.stripeContext,
+    });
+    return { invoiceId, personId: result.personId };
+  });
+
+// ============================================================================
+// Cases
+// ============================================================================
+
+// 1. invoice.paid subscription_create → startSubscription
+test(
+  "invoice.paid subscription_create routes to startSubscription and persists subscription + transaction + ledger + identity",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const invoiceId = uniq("in");
+      track.customerIds.push(customerId);
+
+      const event = yield* decodeEvent({
+        object: makeStripeInvoice({
+          amountPaid: 1990,
+          billingReason: "subscription_create",
+          customerId,
+          distinctId: uniq("distinct"),
+          id: invoiceId,
+          paymentIntentId: "pi_x",
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+          subscriptionId: subId,
+        }),
+        type: "invoice.paid",
+      });
+
+      const result = yield* ctx.engine.recordInvoicePaid({
+        configuration: ctx.configuration,
+        event,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.idempotent).toBe(false);
+      expect(result.analyticsEventIds.length).toBe(2);
+      expect(result.personId.length).toBeGreaterThan(0);
+      expect(Option.isSome(result.subscriptionId)).toBe(true);
+
+      const subRow = yield* findSubscriptionByStore(ctx.product.configProductId, subId);
+      expect(subRow).toBeDefined();
+      expect(subRow?.personId).toBe(result.personId);
+      expect(subRow?.providerEnvironment).toBe(ProviderEnvironment.Sandbox);
+
+      const txRow = yield* findTransactionByStore(ctx.product.configProductId, "pi_x");
+      expect(txRow).toBeDefined();
+      expect(txRow?.personId).toBe(result.personId);
+
+      const ledger = yield* findLedgerByKey(`stripe:${invoiceId}:purchase`);
+      expect(ledger).toBeDefined();
+      expect(ledger?.idempotencyKey).toBe(`stripe:${invoiceId}:purchase`);
+      expect(ledger?.providerId).toBe("stripe");
+      expect(ledger?.source).toBe("webhook");
+      expect(ledger?.personId).toBe(result.personId);
+
+      const ext = yield* findStripeExternalIdentifier(customerId);
+      expect(ext).toBeDefined();
+      expect(ext?.personId).toBe(result.personId);
+      const person = yield* findPerson(result.personId);
+      expect(person).toBeDefined();
+    }),
+  ).pipe(Effect.provide(stripeEngineLayer(moneyHttpClient())), CoreAuthSession.authenticate()),
+);
+
+// 2. duplicate invoice.paid → idempotent
+test(
+  "duplicate invoice.paid delivery returns an idempotent result with exactly one subscription + one ledger row",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const invoiceId = uniq("in");
+      track.customerIds.push(customerId);
+
+      const event = yield* decodeEvent({
+        object: makeStripeInvoice({
+          amountPaid: 1990,
+          billingReason: "subscription_create",
+          customerId,
+          distinctId: uniq("distinct"),
+          id: invoiceId,
+          paymentIntentId: "pi_x",
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+          subscriptionId: subId,
+        }),
+        type: "invoice.paid",
+      });
+
+      const input = {
+        configuration: ctx.configuration,
+        event,
+        mode: "test" as const,
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook" as const,
+        stripeContext: ctx.stripeContext,
+      };
+
+      const first = yield* ctx.engine.recordInvoicePaid(input);
+      expect(first.idempotent).toBe(false);
+
+      const second = yield* ctx.engine.recordInvoicePaid(input);
+      expect(second.idempotent).toBe(true);
+      expect(Option.getOrNull(second.subscriptionId)).toBe(Option.getOrNull(first.subscriptionId));
+      expect(Option.getOrNull(second.transactionId)).toBe(Option.getOrNull(first.transactionId));
+      expect(second.analyticsEventIds).toEqual(first.analyticsEventIds);
+
+      const subRows = yield* findSubscriptionsByStore(ctx.product.configProductId, subId);
+      expect(subRows.length).toBe(1);
+      const ledgerRows = yield* findLedgerRowsByKey(`stripe:${invoiceId}:purchase`);
+      expect(ledgerRows.length).toBe(1);
+    }),
+  ).pipe(Effect.provide(stripeEngineLayer(moneyHttpClient())), CoreAuthSession.authenticate()),
+);
+
+// 3. invoice.paid subscription_cycle → renewSubscription
+test(
+  "invoice.paid subscription_cycle routes to renewSubscription and tags the ledger as renewal",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const created = 1_700_000_000;
+      yield* seedActiveSubscription(ctx, track, { created, customerId, subId });
+
+      const renewalInvoiceId = uniq("in");
+      const renewalEvent = yield* decodeEvent({
+        created: created + 60,
+        object: makeStripeInvoice({
+          amountPaid: 1990,
+          billingReason: "subscription_cycle",
+          created: created + 60,
+          customerId,
+          distinctId: uniq("distinct"),
+          id: renewalInvoiceId,
+          paymentIntentId: "pi_x",
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+          subscriptionId: subId,
+        }),
+        type: "invoice.paid",
+      });
+
+      const result = yield* ctx.engine.recordInvoicePaid({
+        configuration: ctx.configuration,
+        event: renewalEvent,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.analyticsEventIds.length).toBe(1);
+      const ledger = yield* findLedgerByKey(`stripe:${renewalInvoiceId}:renewal`);
+      expect(ledger).toBeDefined();
+      expect(ledger?.idempotencyKey).toBe(`stripe:${renewalInvoiceId}:renewal`);
+    }),
+  ).pipe(Effect.provide(stripeEngineLayer(moneyHttpClient())), CoreAuthSession.authenticate()),
+);
+
+// 4. invoice.payment_failed → enterBillingRetry
+test(
+  "invoice.payment_failed routes to enterBillingRetry (one analytics event when the subscription exists)",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const created = 1_700_000_000;
+      yield* seedActiveSubscription(ctx, track, { created, customerId, subId });
+
+      const failedInvoiceId = uniq("in");
+      const failedEvent = yield* decodeEvent({
+        created: created + 60,
+        object: {
+          ...makeStripeInvoice({
+            amountPaid: 0,
+            billingReason: "subscription_cycle",
+            created: created + 60,
+            customerId,
+            distinctId: uniq("distinct"),
+            id: failedInvoiceId,
+            stripePriceId: ctx.product.stripePriceId,
+            stripeProductId: ctx.product.stripeProductId,
+            subscriptionId: subId,
+          }),
+          attempt_count: 1,
+        },
+        type: "invoice.payment_failed",
+      });
+
+      const result = yield* ctx.engine.recordInvoicePaymentFailed({
+        configuration: ctx.configuration,
+        event: failedEvent,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.analyticsEventIds.length).toBe(1);
+      const ledger = yield* findLedgerByKey(`stripe:${failedInvoiceId}:billing_retry:1`);
+      expect(ledger).toBeDefined();
+    }),
+  ).pipe(
+    Effect.provide(stripeEngineLayer(noStripeRestHttpClient())),
+    CoreAuthSession.authenticate(),
+  ),
+);
+
+// 5. customer.subscription.updated cancel_at_period_end false→true → cancelSubscription
+test(
+  "customer.subscription.updated (cancel_at_period_end false→true) routes to cancelSubscription",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const created = 1_700_000_000;
+      yield* seedActiveSubscription(ctx, track, { created, customerId, subId });
+
+      // No distinctId on the lifecycle event: identity resolves via the
+      // `stripe` customer binding the seeding invoice created, reusing the same
+      // person rather than churning a new one.
+      const event = yield* decodeEvent({
+        created: created + 60,
+        object: makeStripeSubscription({
+          cancelAtPeriodEnd: true,
+          customerId,
+          id: subId,
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+        }),
+        previousAttributes: { cancel_at_period_end: false },
+        type: "customer.subscription.updated",
+      });
+
+      const result = yield* ctx.engine.recordSubscriptionUpdated({
+        configuration: ctx.configuration,
+        event,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.analyticsEventIds.length).toBe(1);
+      const subRow = yield* findSubscriptionByStore(ctx.product.configProductId, subId);
+      expect(subRow?.cancelAtPeriodEnd).toBe(true);
+    }),
+  ).pipe(
+    Effect.provide(stripeEngineLayer(noStripeRestHttpClient())),
+    CoreAuthSession.authenticate(),
+  ),
+);
+
+// 6. customer.subscription.updated cancel_at_period_end true→false → resumeAutoRenew
+test(
+  "customer.subscription.updated (cancel_at_period_end true→false) routes to resumeAutoRenew",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const created = 1_700_000_000;
+      yield* seedActiveSubscription(ctx, track, { created, customerId, subId });
+
+      // First record the cancel intent so resume has something to clear.
+      const cancelEvent = yield* decodeEvent({
+        created: created + 60,
+        object: makeStripeSubscription({
+          cancelAtPeriodEnd: true,
+          customerId,
+          id: subId,
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+        }),
+        previousAttributes: { cancel_at_period_end: false },
+        type: "customer.subscription.updated",
+      });
+      yield* ctx.engine.recordSubscriptionUpdated({
+        configuration: ctx.configuration,
+        event: cancelEvent,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      const resumeEvent = yield* decodeEvent({
+        created: created + 120,
+        object: makeStripeSubscription({
+          cancelAtPeriodEnd: false,
+          customerId,
+          id: subId,
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+        }),
+        previousAttributes: { cancel_at_period_end: true },
+        type: "customer.subscription.updated",
+      });
+
+      const result = yield* ctx.engine.recordSubscriptionUpdated({
+        configuration: ctx.configuration,
+        event: resumeEvent,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.analyticsEventIds.length).toBe(1);
+      const subRow = yield* findSubscriptionByStore(ctx.product.configProductId, subId);
+      expect(subRow?.cancelAtPeriodEnd).toBe(false);
+    }),
+  ).pipe(
+    Effect.provide(stripeEngineLayer(noStripeRestHttpClient())),
+    CoreAuthSession.authenticate(),
+  ),
+);
+
+// 7. customer.subscription.updated with no relevant change → IGNORED
+test(
+  "customer.subscription.updated with no relevant previous_attributes change is ignored",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      // Not seeding an active subscription: an ignored event writes nothing.
+
+      const event = yield* decodeEvent({
+        object: makeStripeSubscription({
+          customerId,
+          id: subId,
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+        }),
+        // A non-cancel / non-items change (e.g. only the status flipped).
+        previousAttributes: { status: "past_due" },
+        type: "customer.subscription.updated",
+      });
+
+      const result = yield* ctx.engine.recordSubscriptionUpdated({
+        configuration: ctx.configuration,
+        event,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.idempotent).toBe(true);
+      expect(result.personId).toBe("");
+      expect(result.analyticsEventIds.length).toBe(0);
+      expect(Option.isNone(result.subscriptionId)).toBe(true);
+
+      const subRow = yield* findSubscriptionByStore(ctx.product.configProductId, subId);
+      expect(subRow).toBeUndefined();
+    }),
+  ).pipe(
+    Effect.provide(stripeEngineLayer(noStripeRestHttpClient())),
+    CoreAuthSession.authenticate(),
+  ),
+);
+
+// 8. customer.subscription.deleted → expireSubscription
+test(
+  "customer.subscription.deleted routes to expireSubscription",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const created = 1_700_000_000;
+      yield* seedActiveSubscription(ctx, track, { created, customerId, subId });
+
+      const endedAt = created + 60;
+      const event = yield* decodeEvent({
+        created: endedAt,
+        object: makeStripeSubscription({
+          customerId,
+          endedAt,
+          id: subId,
+          status: "canceled",
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+        }),
+        type: "customer.subscription.deleted",
+      });
+
+      const result = yield* ctx.engine.recordSubscriptionDeleted({
+        configuration: ctx.configuration,
+        event,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.analyticsEventIds.length).toBe(1);
+      expect(Option.isSome(result.subscriptionId)).toBe(true);
+      const ledger = yield* findLedgerByKey(`stripe:${subId}:expired:${endedAt}`);
+      expect(ledger).toBeDefined();
+    }),
+  ).pipe(
+    Effect.provide(stripeEngineLayer(noStripeRestHttpClient())),
+    CoreAuthSession.authenticate(),
+  ),
+);
+
+// 9. checkout.session.completed (mode payment) → completeOneTimePurchase
+//
+// The engine captures its `HttpClient` at construction (the per-tenant
+// `StripeContext` is built over it), so the checkout line-items REST route must
+// live in the LAYER's fake client. `fetchCheckoutLineItemPriceProduct` is NOT
+// best-effort — an unmatched (`{}`) response would surface as a transient
+// failure — so the route must resolve to this test's seeded product. The
+// session id, product id, and price id are therefore PINNED so they are known
+// at the outer layer pipe; cleanup keys on customer ids, so fixed ids are safe.
+const ONE_TIME_SESSION_ID = "cs_it_one_time";
+const ONE_TIME_PRODUCT_ID = "prod_it_one_time";
+const ONE_TIME_PRICE_ID = "price_it_one_time";
+test(
+  "checkout.session.completed (mode payment) routes to completeOneTimePurchase and persists a purchase + transaction",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track, {
+        stripePriceId: ONE_TIME_PRICE_ID,
+        stripeProductId: ONE_TIME_PRODUCT_ID,
+        type: ProductType.OneTime,
+      });
+      const customerId = uniq("cus");
+      track.customerIds.push(customerId);
+
+      const event = yield* decodeEvent({
+        object: makeStripeCheckoutSession({
+          amountTotal: 4990,
+          clientReferenceId: uniq("distinct"),
+          customerId,
+          id: ONE_TIME_SESSION_ID,
+          mode: "payment",
+          paymentIntentId: "pi_x",
+          paymentStatus: "paid",
+        }),
+        type: "checkout.session.completed",
+      });
+
+      const result = yield* ctx.engine.recordCheckoutSessionCompleted({
+        configuration: ctx.configuration,
+        event,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.analyticsEventIds.length).toBe(1);
+      expect(result.personId.length).toBeGreaterThan(0);
+
+      const purchaseRow = yield* findPurchaseByProviderKey("pi_x");
+      expect(purchaseRow).toBeDefined();
+      expect(purchaseRow?.personId).toBe(result.personId);
+      expect(purchaseRow?.paymentProviderConfigurationProductId).toBe(ctx.product.configProductId);
+
+      const txRow = yield* findTransactionByStore(ctx.product.configProductId, "pi_x");
+      expect(txRow).toBeDefined();
+    }),
+  ).pipe(
+    Effect.provide(
+      stripeEngineLayer(
+        stripeStubHttpClient([
+          paymentIntentChargeRoute({ chargeId: "ch_x", paymentIntentId: "pi_x" }),
+          ...chargeFeeRoutes({ chargeId: "ch_x", feeMinor: 30 }),
+          checkoutLineItemsRoute({
+            priceId: ONE_TIME_PRICE_ID,
+            productId: ONE_TIME_PRODUCT_ID,
+            sessionId: ONE_TIME_SESSION_ID,
+          }),
+        ]),
+      ),
+    ),
+    CoreAuthSession.authenticate(),
+  ),
+);
+
+// 10. charge.refunded after a one-time purchase → refundPurchase
+//
+// The original one-time purchase is built via a checkout with payment_intent
+// `pi_ref`; its transaction is keyed `storeTransactionId = pi_ref`. The refund
+// charge carries the same `pi_ref` (`resolveChargeKey = payment_intent`), so
+// `refundPurchase` reconstructs money from — and marks — that transaction. As
+// in case 9 the checkout's session / product / price ids are PINNED so the
+// line-items route in the layer client resolves to the seeded mapping.
+const REFUND_SESSION_ID = "cs_it_refund";
+const REFUND_PRODUCT_ID = "prod_it_refund";
+const REFUND_PRICE_ID = "price_it_refund";
+test(
+  "charge.refunded (refunded:true) after a one-time purchase routes to refundPurchase and sets refundedAt",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track, {
+        stripePriceId: REFUND_PRICE_ID,
+        stripeProductId: REFUND_PRODUCT_ID,
+        type: ProductType.OneTime,
+      });
+      const customerId = uniq("cus");
+      const chargeId = uniq("ch");
+      track.customerIds.push(customerId);
+
+      // Build the original one-time purchase via checkout with payment_intent "pi_ref".
+      const checkoutEvent = yield* decodeEvent({
+        object: makeStripeCheckoutSession({
+          amountTotal: 4990,
+          clientReferenceId: uniq("distinct"),
+          customerId,
+          id: REFUND_SESSION_ID,
+          mode: "payment",
+          paymentIntentId: "pi_ref",
+          paymentStatus: "paid",
+        }),
+        type: "checkout.session.completed",
+      });
+      yield* ctx.engine.recordCheckoutSessionCompleted({
+        configuration: ctx.configuration,
+        event: checkoutEvent,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      const refundEvent = yield* decodeEvent({
+        created: 1_700_000_060,
+        object: makeStripeCharge({
+          amount: 4990,
+          created: 1_700_000_060,
+          customerId,
+          id: chargeId,
+          paymentIntentId: "pi_ref",
+          refunded: true,
+        }),
+        type: "charge.refunded",
+      });
+
+      const result = yield* ctx.engine.recordChargeRefunded({
+        configuration: ctx.configuration,
+        event: refundEvent,
+        mode: "test",
+        project: ctx.project,
+        providerEnvironment: ProviderEnvironment.Sandbox,
+        receivedAt: new Date(),
+        source: "webhook",
+        stripeContext: ctx.stripeContext,
+      });
+
+      expect(result.analyticsEventIds.length).toBe(1);
+      const txRow = yield* findTransactionByStore(ctx.product.configProductId, "pi_ref");
+      expect(txRow).toBeDefined();
+      expect(txRow?.refundedAt).toBeInstanceOf(Date);
+
+      const ledger = yield* findLedgerByKey(`stripe:pi_ref:refund`);
+      expect(ledger).toBeDefined();
+    }),
+  ).pipe(
+    Effect.provide(
+      stripeEngineLayer(
+        // checkout one-time uses pi_ref → ch_ref for fee + line items; the
+        // refund charge already carries pi_ref, so it needs no REST.
+        stripeStubHttpClient([
+          paymentIntentChargeRoute({ chargeId: "ch_ref", paymentIntentId: "pi_ref" }),
+          ...chargeFeeRoutes({ chargeId: "ch_ref", feeMinor: 30 }),
+          checkoutLineItemsRoute({
+            priceId: REFUND_PRICE_ID,
+            productId: REFUND_PRODUCT_ID,
+            sessionId: REFUND_SESSION_ID,
+          }),
+        ]),
+      ),
+    ),
+    CoreAuthSession.authenticate(),
+  ),
+);
+
+// 11. unmapped product → StripePaymentProviderProductNotMappedError
+test(
+  "invoice.paid referencing an unmapped price/product fails with ProductNotMappedError and writes nothing",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+      const invoiceId = uniq("in");
+      const unmappedProductId = uniq("prod");
+      const unmappedPriceId = uniq("price");
+      const unmappedKey = `${unmappedProductId}:${unmappedPriceId}`;
+
+      const event = yield* decodeEvent({
+        object: makeStripeInvoice({
+          amountPaid: 1990,
+          billingReason: "subscription_create",
+          customerId,
+          id: invoiceId,
+          paymentIntentId: "pi_x",
+          // References a price/product with no active mapping.
+          stripePriceId: unmappedPriceId,
+          stripeProductId: unmappedProductId,
+          subscriptionId: subId,
+        }),
+        type: "invoice.paid",
+      });
+
+      const error = yield* Effect.flip(
+        ctx.engine.recordInvoicePaid({
+          configuration: ctx.configuration,
+          event,
+          mode: "test",
+          project: ctx.project,
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+          stripeContext: ctx.stripeContext,
+        }),
+      );
+
+      expect(error).toBeInstanceOf(StripePaymentProviderProductNotMappedError);
+      if (error instanceof StripePaymentProviderProductNotMappedError) {
+        expect(error.providerProductKey).toBe(unmappedKey);
+        expect(error.paymentProviderConfigurationId).toBe(ctx.configuration.id);
+      }
+
+      const subRow = yield* findSubscriptionByStore(ctx.product.configProductId, subId);
+      expect(subRow).toBeUndefined();
+      const ledger = yield* findLedgerByKey(`stripe:${invoiceId}:purchase`);
+      expect(ledger).toBeUndefined();
+    }),
+  ).pipe(Effect.provide(stripeEngineLayer(moneyHttpClient())), CoreAuthSession.authenticate()),
+);
+
+// 12. idempotency-key derivation failure (missing invoice.id)
+test(
+  "invoice.paid with an empty invoice id fails with IdempotencyKeyDerivationError and writes nothing",
+  withStripe((track) =>
+    Effect.gen(function* () {
+      const ctx = yield* setupStripe(track);
+      const customerId = uniq("cus");
+      const subId = uniq("sub");
+
+      const event = yield* decodeEvent({
+        object: makeStripeInvoice({
+          amountPaid: 1990,
+          billingReason: "subscription_create",
+          customerId,
+          // Empty invoice id: the purchase idempotency anchor (invoice.id) is absent.
+          id: "",
+          paymentIntentId: "pi_x",
+          stripePriceId: ctx.product.stripePriceId,
+          stripeProductId: ctx.product.stripeProductId,
+          subscriptionId: subId,
+        }),
+        type: "invoice.paid",
+      });
+      track.customerIds.push(customerId); // identity is resolved before key derivation
+
+      const error = yield* Effect.flip(
+        ctx.engine.recordInvoicePaid({
+          configuration: ctx.configuration,
+          event,
+          mode: "test",
+          project: ctx.project,
+          providerEnvironment: ProviderEnvironment.Sandbox,
+          receivedAt: new Date(),
+          source: "webhook",
+          stripeContext: ctx.stripeContext,
+        }),
+      );
+
+      expect(error).toBeInstanceOf(StripePurchaseProcessingIdempotencyKeyDerivationError);
+      if (error instanceof StripePurchaseProcessingIdempotencyKeyDerivationError) {
+        expect(error.missingField).toBe("invoice.id");
+        expect(error.eventType).toBe("purchase");
+      }
+
+      const subRow = yield* findSubscriptionByStore(ctx.product.configProductId, subId);
+      expect(subRow).toBeUndefined();
+    }),
+  ).pipe(Effect.provide(stripeEngineLayer(moneyHttpClient())), CoreAuthSession.authenticate()),
+);
diff --git a/packages/core/test/services/paymentProviders/stripe/StripePaymentProviderService.integration.test.ts b/packages/core/test/services/paymentProviders/stripe/StripePaymentProviderService.integration.test.ts
new file mode 100644
index 000000000..5f298c89d
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/stripe/StripePaymentProviderService.integration.test.ts
@@ -0,0 +1,197 @@
+/**
+ * Integration tests for the public {@link StripePaymentProviderService} boundary
+ * — specifically its live implementation `StripePaymentProviderServiceLive` and
+ * the single public method `acceptWebhookEvent`
+ * (`src/services/paymentProviders/stripe/payment-provider-service.ts`), which
+ * delegates verbatim to {@link StripeWebhookHandlerService.acceptWebhookEvent}.
+ *
+ * Mirrors the App Store public-service suite
+ * (`appStore/AppStorePaymentProviderService.integration.test.ts`), but Stripe
+ * has NO hard SDK wall: the `Stripe-Signature` HMAC is a plain SHA-256 over
+ * `${t}.${rawBody}` and is fully reproducible in-process via the test-support
+ * `signStripePayload` signer, and the engine's REST enrichment (charge fee,
+ * payment-intent latest charge) is driven by a fake `HttpClient`. So the happy
+ * path runs end-to-end against the real harness `Db`, persisting the downstream
+ * operational rows — not just returning a `StripeAcceptWebhookEventResult`.
+ *
+ * Two branches run in-process:
+ *  - configuration-not-found: with no configuration row for the given id, the
+ *    handler fails `StripePaymentProviderConfigurationNotFoundError` BEFORE any
+ *    signature/engine work, and the public boundary collapses it into a
+ *    `StripePaymentProviderServiceError` with `kind: "not_found"`.
+ *  - happy path: seed config + product, sign a valid `invoice.paid`
+ *    (billing_reason="subscription_create" → startSubscription) with the TEST
+ *    webhook secret, call the public `acceptWebhookEvent`, assert
+ *    `{ accepted: true, handled: true }`, and read back the persisted
+ *    `subscription` row. The invoice carries a `payment_intent` ("pi_*") and the
+ *    fake `HttpClient` routes its latest-charge + balance-transaction fee, so
+ *    the money-bearing transaction is written. USD everywhere → identity FX rate
+ *    offline.
+ *
+ * Conventions follow the engine suite: per-test unique ids, by-id assertions
+ * (never global counts), and a `cleanupStripeScenario` sweep of every row the
+ * scenario created (operational projection + lazily-created persons + the
+ * notification-dedup + the seeded config/product rows).
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  StripePaymentProviderService,
+  StripePaymentProviderServiceError,
+} from "@voidhash/core/services";
+import { Db } from "@voidhash/db";
+
+import {
+  cleanupStripeScenario,
+  makeStripeEvent,
+  makeStripeInvoice,
+  noStripeRestHttpClient,
+  paymentIntentChargeRoute,
+  chargeFeeRoutes,
+  seedStripeConfig,
+  seedStripeProduct,
+  signStripePayload,
+  stripeServiceLayer,
+  stripeStubHttpClient,
+  TEST_TEST_WEBHOOK_SECRET,
+  uniq,
+} from "./stripe-test-support.ts";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const nowSeconds = () => Math.floor(Date.now() / 1000);
+
+/** Reads back the operational subscription row keyed on the Stripe subscription id. */
+const findSubscriptionByStoreId = (storeSubscriptionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findFirst({
+      where: { storeSubscriptionId },
+    });
+  });
+
+describe("StripePaymentProviderService.acceptWebhookEvent", () => {
+  // --- Configuration-not-found (RUNNABLE, pre-signature) ----------------------
+  // With no configuration row for the input id, the handler short-circuits at
+  // the very first DB read (before any signature work), and the public boundary
+  // collapses `StripePaymentProviderConfigurationNotFoundError` into a
+  // `StripePaymentProviderServiceError` tagged `kind: "not_found"`. Nothing is
+  // seeded and nothing is written — there is nothing to clean up.
+  test(
+    "configuration-not-found fails StripePaymentProviderServiceError with kind 'not_found'",
+    Effect.gen(function* () {
+      const service = yield* StripePaymentProviderService;
+
+      const error = yield* Effect.flip(
+        service.acceptWebhookEvent({
+          paymentProviderConfigurationId: uniq("missing-config"),
+          rawBody: "{}",
+          receivedAt: new Date(),
+          signatureHeader: "t=0,v1=deadbeef",
+        }),
+      );
+
+      expect(error).toBeInstanceOf(StripePaymentProviderServiceError);
+      expect(error.kind).toBe("not_found");
+      expect(typeof error.cause).toBe("string");
+    }).pipe(
+      Effect.provide(stripeServiceLayer(noStripeRestHttpClient())),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  // --- Happy path: invoice.paid → startSubscription (RUNNABLE, end-to-end) ----
+  // A `subscription_create` invoice routes to startSubscription, which persists
+  // the subscription/transaction/purchase rows + 2 ledger rows. The invoice
+  // carries `payment_intent: pi_*`; the fake HttpClient resolves its latest
+  // charge (ch_*) and that charge's balance-transaction fee, so the money-
+  // bearing transaction is written. USD → identity FX offline. The signature is
+  // a real HMAC over the body with the TEST webhook secret, so the public
+  // verify-and-decode path runs unmocked and `mode` resolves to "test".
+  test(
+    "happy path: a valid invoice.paid (subscription_create) is accepted, handled, and persists the subscription",
+    Effect.gen(function* () {
+      const seeded = yield* seedStripeConfig();
+      const product = yield* seedStripeProduct({ configId: seeded.configId });
+
+      const customerId = uniq("cus");
+      const subscriptionId = uniq("sub");
+      const paymentIntentId = `pi_${uniq("pi").replace(/[^A-Za-z0-9]/g, "")}`;
+      const chargeId = `ch_${paymentIntentId}`;
+
+      const invoice = makeStripeInvoice({
+        amountPaid: 1999,
+        billingReason: "subscription_create",
+        customerId,
+        distinctId: uniq("distinct"),
+        id: uniq("in"),
+        paymentIntentId,
+        stripePriceId: product.stripePriceId,
+        stripeProductId: product.stripeProductId,
+        subscriptionId,
+      });
+      const event = makeStripeEvent({
+        id: `evt_${uniq("e").replace(/[^A-Za-z0-9]/g, "")}`,
+        object: invoice,
+        type: "invoice.paid",
+      });
+
+      const rawBody = JSON.stringify(event);
+      const signatureHeader = yield* Effect.promise(() =>
+        signStripePayload(rawBody, TEST_TEST_WEBHOOK_SECRET, nowSeconds()),
+      );
+
+      const httpClient = stripeStubHttpClient([
+        paymentIntentChargeRoute({ chargeId, paymentIntentId }),
+        ...chargeFeeRoutes({ chargeId, feeMinor: 100 }),
+      ]);
+
+      const run = Effect.gen(function* () {
+        const service = yield* StripePaymentProviderService;
+        return yield* service.acceptWebhookEvent({
+          paymentProviderConfigurationId: seeded.configId,
+          rawBody,
+          receivedAt: new Date(),
+          signatureHeader,
+        });
+      }).pipe(Effect.provide(stripeServiceLayer(httpClient)), CoreAuthSession.authenticate());
+
+      yield* Effect.gen(function* () {
+        const result = yield* run;
+
+        expect(result.accepted).toBe(true);
+        expect(result.handled).toBe(true);
+        expect(result.eventType).toBe("invoice.paid");
+        expect(result.eventId).toBe(event.id);
+
+        // The downstream operational projection: a subscription row keyed on the
+        // Stripe subscription id, mapped to the seeded provider-product.
+        const subscription = yield* findSubscriptionByStoreId(subscriptionId);
+        expect(subscription).toBeDefined();
+        expect(subscription?.paymentProviderConfigurationProductId).toBe(product.configProductId);
+      }).pipe(
+        Effect.ensuring(
+          cleanupStripeScenario({
+            configId: seeded.configId,
+            configProductId: product.configProductId,
+            customerIds: [customerId],
+            productId: product.productId,
+          }),
+        ),
+      );
+    }),
+  );
+
+  // The remaining record-engine branches (renew / cancel / expire / refund /
+  // one-time checkout / reverse-refund / dispute) are exercised directly against
+  // the record engine in the sibling `StripePaymentProvider` engine suite; the
+  // public-service suite only needs to prove the boundary delegates and the two
+  // boundary-collapse semantics (not_found short-circuit + handled happy path).
+  vitestTest.todo(
+    "renew / cancel / expire / refund / checkout branches — covered by the StripePaymentProvider engine integration suite (the public boundary is a thin delegate to the same handler)",
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/stripe/StripeWebhookHandlerService.integration.test.ts b/packages/core/test/services/paymentProviders/stripe/StripeWebhookHandlerService.integration.test.ts
new file mode 100644
index 000000000..64b9483c8
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/stripe/StripeWebhookHandlerService.integration.test.ts
@@ -0,0 +1,580 @@
+/**
+ * Integration tests for {@link StripeWebhookHandlerService} — the Stripe webhook
+ * ingress — run against the real backend stack provisioned once by
+ * `test/_testing/globalSetup.ts` (live PlanetScale DB + ClickHouse + WorkOS).
+ *
+ * Unlike the App Store webhook handler — whose every branch is gated behind a
+ * real Apple-signed JWS chained to Apple's production/sandbox CA (no in-process
+ * verification seam, hence that suite is 100% `test.todo`; see
+ * `appStore/AppStoreWebhookHandlerService.integration.test.ts`) — the Stripe
+ * path verifies a plain HMAC-SHA256 signature over `${t}.${rawBody}` against the
+ * per-tenant signing secret stored on the configuration row. The shared test
+ * support module re-implements that same HMAC scheme (`signStripePayload`), so a
+ * test can forge a *valid* `Stripe-Signature` header against the secret it just
+ * seeded and exercise the handler genuinely end-to-end. These tests therefore
+ * actually RUN.
+ *
+ * What the test wires that the harness does not: the webhook handler pulls in
+ * the full record engine (`PurchaseProcessingService`, `PersonIdentityService`,
+ * `FxRateService`, `PaymentConfigSecretCrypto`) plus an `HttpClient` for the
+ * per-tenant Stripe REST enrichment (charge-fee, payment-intent latest-charge,
+ * checkout line items). `stripeWebhookHandlerLayer(httpClient)` supplies all of
+ * it over a fake `HttpClient` whose canned routes drive the REST enrichment
+ * deterministically offline. Money-bearing events use a `"usd"` currency so FX
+ * resolves to the identity rate without a network call, and carry a
+ * `payment_intent` (`pi_*`) wired to a charge (`ch_*`) via `paymentIntentChargeRoute`
+ * + `chargeFeeRoutes` so a transaction row + analytics are emitted.
+ *
+ * Conventions (mirroring `AppStorePaymentProvider.integration.test.ts`): every
+ * test namespaces its ids per call, asserts by-id / by-membership (never global
+ * counts), and self-cleans every row it creates via an `Effect.ensuring`
+ * `cleanupStripeScenario` finalizer that runs on any exit. Typed failures are
+ * asserted with `Effect.flip` + `instanceof`, paired with a DB-state assertion
+ * proving nothing leaked.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { StripeWebhookHandlerService } from "@voidhash/core/services/paymentProviders/stripe/stripe-webhook-handler-service";
+import { generateId } from "@voidhash/core/utils";
+import { Db } from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+
+// The Stripe error classes have no public package subpath, so they are imported
+// by relative path into `src` (the unit-test convention in the brief).
+import { StripePaymentProviderServiceError } from "../../../../src/services/paymentProviders/stripe/errors.ts";
+import {
+  TEST_TEST_WEBHOOK_SECRET,
+  chargeFeeRoutes,
+  cleanupStripeScenario,
+  makeStripeEvent,
+  makeStripeInvoice,
+  paymentIntentChargeRoute,
+  seedStripeConfig,
+  seedStripeProduct,
+  signStripePayload,
+  stripeStubHttpClient,
+  stripeWebhookHandlerLayer,
+  uniq,
+} from "./stripe-test-support.ts";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+// ----------------------------------------------------------------------------
+// DB read-back helpers (bypass the engine).
+// ----------------------------------------------------------------------------
+
+/** Notification-processed rows for a `(configId, event.id)` pair (UNIQUE → at most one). */
+const findNotificationRows = (configId: string, eventId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paymentProviderNotificationProcessed.findMany({
+      where: {
+        paymentProviderConfigurationId: configId,
+        notificationUuid: eventId,
+      },
+    });
+  });
+
+/** Purchase-ledger rows for a logical-event idempotency key (UNIQUE → at most one). */
+const findLedgerRows = (idempotencyKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchaseLedger.findMany({
+      where: { idempotencyKey },
+    });
+  });
+
+const findSubscriptionByStoreId = (storeSubscriptionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findFirst({
+      where: { storeSubscriptionId },
+    });
+  });
+
+// ----------------------------------------------------------------------------
+// Fake-HttpClient helpers.
+// ----------------------------------------------------------------------------
+
+/**
+ * A fake `HttpClient` carrying the routes a money-in subscription invoice needs:
+ * the payment-intent → latest-charge lookup, then that charge's processing-fee
+ * (balance-transaction) lookup. Both keyed on the `pi_*`/`ch_*` ids the invoice
+ * references, so the engine's fee enrichment resolves a real commission (rather
+ * than the best-effort "fee unavailable" fallback an unmatched route gives).
+ */
+const moneyInHttpClient = (paymentIntentId: string, chargeId: string) =>
+  stripeStubHttpClient([
+    paymentIntentChargeRoute({ chargeId, paymentIntentId }),
+    ...chargeFeeRoutes({ chargeId, feeMinor: 59 }),
+  ]);
+
+/** A unique `pi_*` / matching `ch_*` pair for a money-in event's fee enrichment. */
+const moneyInIds = (label: string) => {
+  const stable = uniq(label).replace(/[^A-Za-z0-9]/g, "");
+  return { chargeId: `ch_${stable}`, paymentIntentId: `pi_${stable}` } as const;
+};
+
+/** Sign `rawBody` with the seeded TEST webhook secret at the current second (livemode:false ⇒ test mode). */
+const signWithTestSecret = (rawBody: string) =>
+  Effect.promise(() =>
+    signStripePayload(rawBody, TEST_TEST_WEBHOOK_SECRET, Math.floor(Date.now() / 1000)),
+  );
+
+describe("StripeWebhookHandlerService.acceptWebhookEvent", () => {
+  test(
+    "configuration not found fails with StripePaymentProviderServiceError kind 'not_found' and writes no ledger row",
+    Effect.gen(function* () {
+      const handler = yield* StripeWebhookHandlerService;
+      // A configuration id that was never seeded — the lookup precedes every
+      // other side effect.
+      const missingConfigId = generateId("paymentProviderConfiguration");
+      const invoice = makeStripeInvoice({
+        amountPaid: 999,
+        billingReason: "subscription_create",
+        customerId: uniq("cus"),
+        id: uniq("in"),
+        stripePriceId: uniq("price"),
+        stripeProductId: uniq("prod"),
+        subscriptionId: uniq("sub"),
+      });
+      const rawBody = JSON.stringify(makeStripeEvent({ object: invoice, type: "invoice.paid" }));
+      const signatureHeader = yield* signWithTestSecret(rawBody);
+
+      const error = yield* Effect.flip(
+        handler.acceptWebhookEvent({
+          paymentProviderConfigurationId: missingConfigId,
+          rawBody,
+          receivedAt: new Date(),
+          signatureHeader,
+        }),
+      );
+      expect(error).toBeInstanceOf(StripePaymentProviderServiceError);
+      if (error instanceof StripePaymentProviderServiceError) {
+        expect(error.kind).toBe("not_found");
+      }
+
+      // Nothing was written for the missing configuration.
+      const event = JSON.parse(rawBody) as { id: string };
+      const rows = yield* findNotificationRows(missingConfigId, event.id);
+      expect(rows.length).toBe(0);
+    }).pipe(
+      // No money-in REST calls are reachable (the lookup fails first); the empty
+      // stub never matches.
+      Effect.provide(stripeWebhookHandlerLayer(stripeStubHttpClient([]))),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "invalid signature fails with StripePaymentProviderServiceError kind 'signature' and writes no notification row",
+    Effect.gen(function* () {
+      const handler = yield* StripeWebhookHandlerService;
+      const seeded = yield* seedStripeConfig();
+      const product = yield* seedStripeProduct({ configId: seeded.configId });
+
+      yield* Effect.gen(function* () {
+        const invoice = makeStripeInvoice({
+          amountPaid: 999,
+          billingReason: "subscription_create",
+          customerId: uniq("cus"),
+          id: uniq("in"),
+          stripePriceId: product.stripePriceId,
+          stripeProductId: product.stripeProductId,
+          subscriptionId: uniq("sub"),
+        });
+        const rawBody = JSON.stringify(makeStripeEvent({ object: invoice, type: "invoice.paid" }));
+        // Sign the ORIGINAL body, then tamper it: the stored HMAC no longer
+        // matches the delivered bytes, so verification fails.
+        const signatureHeader = yield* signWithTestSecret(rawBody);
+        const tamperedBody = rawBody.replace(/"amount_paid":999/, '"amount_paid":1');
+
+        const error = yield* Effect.flip(
+          handler.acceptWebhookEvent({
+            paymentProviderConfigurationId: seeded.configId,
+            rawBody: tamperedBody,
+            receivedAt: new Date(),
+            signatureHeader,
+          }),
+        );
+        expect(error).toBeInstanceOf(StripePaymentProviderServiceError);
+        if (error instanceof StripePaymentProviderServiceError) {
+          expect(error.kind).toBe("signature");
+        }
+
+        // The signature check precedes the wire-dedup write, so no row exists
+        // for this event id.
+        const event = JSON.parse(rawBody) as { id: string };
+        const rows = yield* findNotificationRows(seeded.configId, event.id);
+        expect(rows.length).toBe(0);
+      }).pipe(
+        Effect.ensuring(
+          cleanupStripeScenario({
+            configId: seeded.configId,
+            configProductId: product.configProductId,
+            productId: product.productId,
+          }),
+        ),
+      );
+    }).pipe(
+      Effect.provide(stripeWebhookHandlerLayer(stripeStubHttpClient([]))),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "invoice.paid subscription_create with a valid signature applies and persists the notification, subscription, and ledger rows",
+    ((ids) =>
+      Effect.gen(function* () {
+        const handler = yield* StripeWebhookHandlerService;
+        const seeded = yield* seedStripeConfig();
+        const product = yield* seedStripeProduct({ configId: seeded.configId });
+        const customerId = uniq("cus");
+
+        yield* Effect.gen(function* () {
+          const invoiceId = uniq("in");
+          const subscriptionId = uniq("sub");
+          const invoice = makeStripeInvoice({
+            amountPaid: 1999,
+            billingReason: "subscription_create",
+            customerId,
+            id: invoiceId,
+            paymentIntentId: ids.paymentIntentId,
+            stripePriceId: product.stripePriceId,
+            stripeProductId: product.stripeProductId,
+            subscriptionId,
+            taxMinor: 100,
+          });
+          const eventObject = makeStripeEvent({ object: invoice, type: "invoice.paid" });
+          const rawBody = JSON.stringify(eventObject);
+          const eventId = (eventObject as { id: string }).id;
+          const signatureHeader = yield* signWithTestSecret(rawBody);
+
+          const result = yield* handler.acceptWebhookEvent({
+            paymentProviderConfigurationId: seeded.configId,
+            rawBody,
+            receivedAt: new Date(),
+            signatureHeader,
+          });
+          expect(result.accepted).toBe(true);
+          expect(result.handled).toBe(true);
+          expect(result.eventId).toBe(eventId);
+          expect(result.eventType).toBe("invoice.paid");
+
+          // Wire-dedup ledger row: applied, stripe/webhook, keyed on event.id.
+          const notifRows = yield* findNotificationRows(seeded.configId, eventId);
+          expect(notifRows.length).toBe(1);
+          const notif = notifRows[0]!;
+          expect(notif.providerId).toBe("stripe");
+          expect(notif.source).toBe("webhook");
+          expect(notif.result).toBe("applied");
+          expect(notif.notificationType).toBe("invoice.paid");
+          expect(notif.parkedRawPayload).toBeNull();
+
+          // Downstream operational subscription row (keyed on the Stripe sub id).
+          const subRow = yield* findSubscriptionByStoreId(subscriptionId);
+          expect(subRow).toBeDefined();
+          expect(subRow?.paymentProviderConfigurationProductId).toBe(product.configProductId);
+
+          // The append-only purchase-ledger row for the logical purchase event.
+          // Anchor = invoice.id, eventType = purchase (subscription_create).
+          const ledgerRows = yield* findLedgerRows(`stripe:${invoiceId}:purchase`);
+          expect(ledgerRows.length).toBe(1);
+          const ledger = ledgerRows[0]!;
+          expect(ledger.providerId).toBe("stripe");
+          expect(ledger.providerEventType).toBe("invoice.paid");
+          expect(ledger.source).toBe("webhook");
+          expect(ledger.personId).toBe(subRow?.personId);
+        }).pipe(
+          Effect.ensuring(
+            cleanupStripeScenario({
+              configId: seeded.configId,
+              configProductId: product.configProductId,
+              customerIds: [customerId],
+              productId: product.productId,
+            }),
+          ),
+        );
+      }).pipe(
+        Effect.provide(
+          stripeWebhookHandlerLayer(moneyInHttpClient(ids.paymentIntentId, ids.chargeId)),
+        ),
+        CoreAuthSession.authenticate(),
+      ))(moneyInIds("paid")),
+  );
+
+  test(
+    "duplicate delivery of the same signed event is deduped to one notification row and one ledger row",
+    ((ids) =>
+      Effect.gen(function* () {
+        const handler = yield* StripeWebhookHandlerService;
+        const seeded = yield* seedStripeConfig();
+        const product = yield* seedStripeProduct({ configId: seeded.configId });
+        const customerId = uniq("cus");
+
+        yield* Effect.gen(function* () {
+          const invoiceId = uniq("in");
+          const subscriptionId = uniq("sub");
+          const invoice = makeStripeInvoice({
+            amountPaid: 1999,
+            billingReason: "subscription_create",
+            customerId,
+            id: invoiceId,
+            paymentIntentId: ids.paymentIntentId,
+            stripePriceId: product.stripePriceId,
+            stripeProductId: product.stripeProductId,
+            subscriptionId,
+          });
+          const eventObject = makeStripeEvent({ object: invoice, type: "invoice.paid" });
+          const rawBody = JSON.stringify(eventObject);
+          const eventId = (eventObject as { id: string }).id;
+          const signatureHeader = yield* signWithTestSecret(rawBody);
+
+          const input = {
+            paymentProviderConfigurationId: seeded.configId,
+            rawBody,
+            receivedAt: new Date(),
+            signatureHeader,
+          };
+
+          const first = yield* handler.acceptWebhookEvent(input);
+          expect(first.handled).toBe(true);
+          // Same signed bytes redelivered (Stripe at-least-once delivery).
+          const second = yield* handler.acceptWebhookEvent(input);
+          expect(second.handled).toBe(true);
+
+          // Exactly one wire-dedup row for (config, event.id) despite two deliveries.
+          const notifRows = yield* findNotificationRows(seeded.configId, eventId);
+          expect(notifRows.length).toBe(1);
+
+          // Exactly one purchase-ledger row for the logical purchase event — the
+          // per-event idempotency key collapses the redelivery.
+          const ledgerRows = yield* findLedgerRows(`stripe:${invoiceId}:purchase`);
+          expect(ledgerRows.length).toBe(1);
+        }).pipe(
+          Effect.ensuring(
+            cleanupStripeScenario({
+              configId: seeded.configId,
+              configProductId: product.configProductId,
+              customerIds: [customerId],
+              productId: product.productId,
+            }),
+          ),
+        );
+      }).pipe(
+        Effect.provide(
+          stripeWebhookHandlerLayer(moneyInHttpClient(ids.paymentIntentId, ids.chargeId)),
+        ),
+        CoreAuthSession.authenticate(),
+      ))(moneyInIds("dedup")),
+  );
+
+  test(
+    "invoice.paid for an unmapped price/product parks the notification with the raw payload preserved",
+    ((ids) =>
+      Effect.gen(function* () {
+        const handler = yield* StripeWebhookHandlerService;
+        // Seed the configuration but NOT the product mapping — the invoice's
+        // price/product key has no active mapping, so the engine parks it.
+        const seeded = yield* seedStripeConfig();
+        const customerId = uniq("cus");
+        const stripeProductId = `prod_${uniq("p").replace(/[^A-Za-z0-9]/g, "")}`;
+        const stripePriceId = `price_${uniq("pr").replace(/[^A-Za-z0-9]/g, "")}`;
+        const providerProductKey = `${stripeProductId}:${stripePriceId}`;
+
+        yield* Effect.gen(function* () {
+          const invoice = makeStripeInvoice({
+            amountPaid: 1999,
+            billingReason: "subscription_create",
+            customerId,
+            id: uniq("in"),
+            paymentIntentId: ids.paymentIntentId,
+            stripePriceId,
+            stripeProductId,
+            subscriptionId: uniq("sub"),
+          });
+          const eventObject = makeStripeEvent({ object: invoice, type: "invoice.paid" });
+          const rawBody = JSON.stringify(eventObject);
+          const eventId = (eventObject as { id: string }).id;
+          const signatureHeader = yield* signWithTestSecret(rawBody);
+
+          const result = yield* handler.acceptWebhookEvent({
+            paymentProviderConfigurationId: seeded.configId,
+            rawBody,
+            receivedAt: new Date(),
+            signatureHeader,
+          });
+          // Parking still acks the webhook (so Stripe stops retrying) and reports
+          // it as handled.
+          expect(result.accepted).toBe(true);
+          expect(result.handled).toBe(true);
+
+          const notifRows = yield* findNotificationRows(seeded.configId, eventId);
+          expect(notifRows.length).toBe(1);
+          const notif = notifRows[0]!;
+          expect(notif.result).toBe("parked_pending_product_mapping");
+          expect(notif.parkedUntilProviderProductKey).toBe(providerProductKey);
+          // The raw body is preserved verbatim for replay once the mapping
+          // appears. The `json` column round-trips the stored string back to the
+          // same string (drizzle JSON.stringify on write, JSON.parse on read).
+          expect(notif.parkedRawPayload).not.toBeNull();
+          expect(notif.parkedRawPayload).toBe(rawBody);
+
+          // No subscription was projected — the product is unmapped.
+          const subRow = yield* findSubscriptionByStoreId(invoice.subscription as string);
+          expect(subRow).toBeUndefined();
+        }).pipe(
+          Effect.ensuring(
+            cleanupStripeScenario({ configId: seeded.configId, customerIds: [customerId] }),
+          ),
+        );
+      }).pipe(
+        Effect.provide(
+          stripeWebhookHandlerLayer(moneyInHttpClient(ids.paymentIntentId, ids.chargeId)),
+        ),
+        CoreAuthSession.authenticate(),
+      ))(moneyInIds("park")),
+  );
+
+  test(
+    "an unhandled event type with a valid signature acks without handling and writes an 'ignored' ledger row",
+    Effect.gen(function* () {
+      const handler = yield* StripeWebhookHandlerService;
+      const seeded = yield* seedStripeConfig();
+
+      yield* Effect.gen(function* () {
+        // `customer.created` is not in the engine's event→action map → the match
+        // falls through to ack(false).
+        const eventObject = makeStripeEvent({
+          object: { id: uniq("cus"), object: "customer" },
+          type: "customer.created",
+        });
+        const rawBody = JSON.stringify(eventObject);
+        const eventId = (eventObject as { id: string }).id;
+        const signatureHeader = yield* signWithTestSecret(rawBody);
+
+        const result = yield* handler.acceptWebhookEvent({
+          paymentProviderConfigurationId: seeded.configId,
+          rawBody,
+          receivedAt: new Date(),
+          signatureHeader,
+        });
+        expect(result.accepted).toBe(true);
+        expect(result.handled).toBe(false);
+        expect(result.eventType).toBe("customer.created");
+
+        const notifRows = yield* findNotificationRows(seeded.configId, eventId);
+        expect(notifRows.length).toBe(1);
+        expect(notifRows[0]!.result).toBe("ignored");
+      }).pipe(Effect.ensuring(cleanupStripeScenario({ configId: seeded.configId })));
+    }).pipe(
+      Effect.provide(stripeWebhookHandlerLayer(stripeStubHttpClient([]))),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("StripeWebhookHandlerService.replayParkedNotificationsForProductMapping", () => {
+  test(
+    "replays a parked invoice.paid once the matching product mapping is created: applies it and clears the parked columns",
+    ((ids) =>
+      Effect.gen(function* () {
+        const handler = yield* StripeWebhookHandlerService;
+        const seeded = yield* seedStripeConfig();
+        const customerId = uniq("cus");
+        // Choose the Stripe ids up front so the same mapping can be seeded AFTER
+        // the parked delivery (reproducing "event arrived before the mapping").
+        const stripeProductId = `prod_${uniq("p").replace(/[^A-Za-z0-9]/g, "")}`;
+        const stripePriceId = `price_${uniq("pr").replace(/[^A-Za-z0-9]/g, "")}`;
+        const providerProductKey = `${stripeProductId}:${stripePriceId}`;
+        // Declared here so the cleanup finalizer can sweep them on any exit.
+        let configProductId: string | undefined;
+        let productId: string | undefined;
+
+        yield* Effect.gen(function* () {
+          const invoiceId = uniq("in");
+          const subscriptionId = uniq("sub");
+          const invoice = makeStripeInvoice({
+            amountPaid: 1999,
+            billingReason: "subscription_create",
+            customerId,
+            id: invoiceId,
+            paymentIntentId: ids.paymentIntentId,
+            stripePriceId,
+            stripeProductId,
+            subscriptionId,
+          });
+          const eventObject = makeStripeEvent({ object: invoice, type: "invoice.paid" });
+          const rawBody = JSON.stringify(eventObject);
+          const eventId = (eventObject as { id: string }).id;
+          const signatureHeader = yield* signWithTestSecret(rawBody);
+
+          // 1. Deliver while unmapped → parked.
+          const parkedResult = yield* handler.acceptWebhookEvent({
+            paymentProviderConfigurationId: seeded.configId,
+            rawBody,
+            receivedAt: new Date(),
+            signatureHeader,
+          });
+          expect(parkedResult.handled).toBe(true);
+          const parkedRows = yield* findNotificationRows(seeded.configId, eventId);
+          expect(parkedRows[0]!.result).toBe("parked_pending_product_mapping");
+
+          // 2. Operator creates the matching product mapping.
+          const product = yield* seedStripeProduct({
+            configId: seeded.configId,
+            stripePriceId,
+            stripeProductId,
+          });
+          configProductId = product.configProductId;
+          productId = product.productId;
+          expect(product.providerProductKey).toBe(providerProductKey);
+
+          // 3. Replay the parked rows for this mapping.
+          const replay = yield* handler.replayParkedNotificationsForProductMapping({
+            paymentProviderConfigurationId: seeded.configId,
+            providerProductKey,
+          });
+          expect(replay.appliedCount).toBe(1);
+          expect(replay.failedCount).toBe(0);
+          expect(replay.totalParked).toBe(1);
+
+          // The parked row is now applied with its parked columns cleared.
+          const resolvedRows = yield* findNotificationRows(seeded.configId, eventId);
+          expect(resolvedRows.length).toBe(1);
+          const resolved = resolvedRows[0]!;
+          expect(resolved.result).toBe("applied");
+          expect(resolved.parkedRawPayload).toBeNull();
+          expect(resolved.parkedUntilProviderProductKey).toBeNull();
+
+          // The downstream subscription + ledger rows now exist.
+          const subRow = yield* findSubscriptionByStoreId(subscriptionId);
+          expect(subRow).toBeDefined();
+          expect(subRow?.paymentProviderConfigurationProductId).toBe(configProductId);
+          const ledgerRows = yield* findLedgerRows(`stripe:${invoiceId}:purchase`);
+          expect(ledgerRows.length).toBe(1);
+        }).pipe(
+          Effect.ensuring(
+            // Ids resolved lazily at finalization so cleanup runs even if the
+            // mapping was never seeded (early failure).
+            Effect.suspend(() =>
+              cleanupStripeScenario({
+                configId: seeded.configId,
+                configProductId,
+                customerIds: [customerId],
+                productId,
+              }),
+            ),
+          ),
+        );
+      }).pipe(
+        Effect.provide(
+          stripeWebhookHandlerLayer(moneyInHttpClient(ids.paymentIntentId, ids.chargeId)),
+        ),
+        CoreAuthSession.authenticate(),
+      ))(moneyInIds("replay")),
+  );
+});
diff --git a/packages/core/test/services/paymentProviders/stripe/stripe-test-support.ts b/packages/core/test/services/paymentProviders/stripe/stripe-test-support.ts
new file mode 100644
index 000000000..a23cb58e3
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/stripe/stripe-test-support.ts
@@ -0,0 +1,564 @@
+/**
+ * Shared fixtures for the Stripe payment-provider integration + unit tests.
+ *
+ * Provides:
+ *  - `signStripePayload` — the in-process HMAC signer that produces a valid
+ *    `Stripe-Signature` header for a raw body (mirrors the verifier in
+ *    `stripe/sdk-context.ts`), so the webhook handler is exercised end-to-end
+ *    without a real Stripe signature (no Apple-CA-style wall).
+ *  - `stripeStubHttpClient` — a fake `HttpClient` routing canned JSON by request
+ *    path, so the engine's REST enrichment (charge fee, checkout line items,
+ *    payment-intent latest charge) is driven deterministically offline.
+ *  - the engine + webhook-handler dependency layers, parameterized on that
+ *    fake `HttpClient`.
+ *  - `seedStripeConfig` / `seedStripeProduct` and a `cleanupStripeScenario`
+ *    sweep keyed on the seeded config/product + the customer/person ids a test
+ *    records (the engine creates persons lazily).
+ *  - Stripe event-object builders.
+ */
+import { Effect, Layer } from "effect";
+import { HttpClient, HttpClientResponse } from "effect/unstable/http";
+
+import {
+  FxRateService,
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseProcessingService,
+} from "@voidhash/core/services";
+import { StripePaymentProvider } from "@voidhash/core/services/paymentProviders/stripe/payment-provider";
+import { StripePaymentProviderServiceLive } from "@voidhash/core/services/paymentProviders/stripe/payment-provider-service";
+import { StripeWebhookHandlerService } from "@voidhash/core/services/paymentProviders/stripe/stripe-webhook-handler-service";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { generateId } from "@voidhash/core/utils";
+import { ProductType } from "@voidhash/lib/constants";
+import {
+  Db,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  paymentProviderNotificationProcessed,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  products,
+  purchaseLedger,
+  purchases,
+  subscriptions,
+  transactions,
+} from "@voidhash/db";
+
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+/** Default test signing secrets (no-op crypto → stored plaintext, signed verbatim). */
+export const TEST_LIVE_WEBHOOK_SECRET = "whsec_live_testsecret";
+export const TEST_TEST_WEBHOOK_SECRET = "whsec_test_testsecret";
+export const TEST_LIVE_SECRET_KEY = "sk_live_testkey";
+export const TEST_TEST_SECRET_KEY = "sk_test_testkey";
+
+/** Monotonic counter so generated ids stay unique even within one millisecond. */
+let seq = 0;
+export const uniq = (label: string) => `it-stripe-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * Produces a valid `Stripe-Signature` header (`t=…,v1=…`) for `rawBody` using
+ * the same HMAC-SHA256-over-`${t}.${rawBody}` scheme the handler verifies.
+ */
+export const signStripePayload = async (
+  rawBody: string,
+  secret: string,
+  timestampSeconds: number,
+): Promise<string> => {
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { hash: "SHA-256", name: "HMAC" },
+    false,
+    ["sign"],
+  );
+  const signature = await crypto.subtle.sign(
+    "HMAC",
+    key,
+    encoder.encode(`${timestampSeconds}.${rawBody}`),
+  );
+  const hex = Array.from(new Uint8Array(signature))
+    .map((byte) => byte.toString(16).padStart(2, "0"))
+    .join("");
+  return `t=${timestampSeconds},v1=${hex}`;
+};
+
+/** A canned JSON response selected by a substring of the request path. */
+export interface StripeStubRoute {
+  readonly path: string;
+  readonly body: unknown;
+  readonly status?: number;
+}
+
+/**
+ * Fake `HttpClient` returning canned JSON keyed on request path substring. Any
+ * unmatched request returns `{}` with 200 — the engine's REST helpers treat a
+ * shapeless response as "fee/line-item unavailable" without failing.
+ */
+export const stripeStubHttpClient = (
+  routes: ReadonlyArray<StripeStubRoute>,
+): HttpClient.HttpClient =>
+  HttpClient.make((request, url) =>
+    Effect.sync(() => {
+      const match = routes.find((route) => url.pathname.includes(route.path));
+      const webResponse = new Response(JSON.stringify(match?.body ?? {}), {
+        headers: { "Content-Type": "application/json" },
+        status: match?.status ?? 200,
+      });
+      return HttpClientResponse.fromWeb(request, webResponse);
+    }),
+  );
+
+/** No fee/line-item REST calls expected (the test crafts events that skip them). */
+export const noStripeRestHttpClient = (): HttpClient.HttpClient => stripeStubHttpClient([]);
+
+/** Canned routes for a paid charge whose balance transaction carries `feeMinor`. */
+export const chargeFeeRoutes = (input: {
+  readonly chargeId: string;
+  readonly balanceTransactionId?: string;
+  readonly feeMinor: number;
+  readonly currency?: string;
+}): ReadonlyArray<StripeStubRoute> => {
+  const btId = input.balanceTransactionId ?? `txn_${input.chargeId}`;
+  return [
+    {
+      body: { balance_transaction: btId, id: input.chargeId, object: "charge" },
+      path: `/v1/charges/${input.chargeId}`,
+    },
+    {
+      body: {
+        currency: input.currency ?? "usd",
+        fee: input.feeMinor,
+        id: btId,
+        net: 0,
+        object: "balance_transaction",
+      },
+      path: `/v1/balance_transactions/${btId}`,
+    },
+  ];
+};
+
+/** Canned route for a payment intent's latest charge (fee lookup for one-time / checkout). */
+export const paymentIntentChargeRoute = (input: {
+  readonly paymentIntentId: string;
+  readonly chargeId: string;
+}): StripeStubRoute => ({
+  body: { id: input.paymentIntentId, latest_charge: input.chargeId, object: "payment_intent" },
+  path: `/v1/payment_intents/${input.paymentIntentId}`,
+});
+
+/** Canned route for a checkout session's line items (price/product resolution). */
+export const checkoutLineItemsRoute = (input: {
+  readonly sessionId: string;
+  readonly priceId: string;
+  readonly productId: string;
+}): StripeStubRoute => ({
+  body: {
+    data: [
+      {
+        adjustable_quantity: null,
+        amount_discount: 0,
+        amount_subtotal: 0,
+        amount_tax: 0,
+        amount_total: 0,
+        currency: "usd",
+        description: null,
+        id: `li_${input.sessionId}`,
+        metadata: null,
+        object: "item",
+        price: { id: input.priceId, object: "price", product: input.productId },
+        quantity: 1,
+      },
+    ],
+    has_more: false,
+    object: "list",
+    url: `/v1/checkout/sessions/${input.sessionId}/line_items`,
+  },
+  path: `/v1/checkout/sessions/${input.sessionId}/line_items`,
+});
+
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+const stripeLeafDeps = (httpClient: HttpClient.HttpClient) =>
+  Layer.mergeAll(
+    PurchaseProcessingService.layer,
+    PersonIdentityService.layer,
+    FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
+    PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
+    Layer.succeed(HttpClient.HttpClient, httpClient),
+  );
+
+const stripeLeafStubs = Layer.mergeAll(
+  PerkGrantService.layer,
+  IdentityProjectionPublisher.noop,
+  CompletionWorkflowStub,
+);
+
+/**
+ * Full dependency graph for the Stripe record engine, over a fake `HttpClient`.
+ * Everything bottoms out at the harness `Db` + per-test `AuthSession` (via
+ * `PerkGrantService`). USE A `usd` CURRENCY in money-bearing events so FX
+ * resolves to the identity rate without a network call.
+ */
+export const stripeEngineLayer = (httpClient: HttpClient.HttpClient) =>
+  StripePaymentProvider.layer.pipe(
+    Layer.provideMerge(stripeLeafDeps(httpClient)),
+    Layer.provideMerge(stripeLeafStubs),
+  );
+
+/** Full dependency graph for the Stripe webhook handler, over a fake `HttpClient`. */
+export const stripeWebhookHandlerLayer = (httpClient: HttpClient.HttpClient) =>
+  StripeWebhookHandlerService.layer.pipe(
+    Layer.provideMerge(stripeLeafDeps(httpClient)),
+    Layer.provideMerge(stripeLeafStubs),
+  );
+
+/**
+ * Full dependency graph for the public `StripePaymentProviderService` boundary,
+ * over a fake `HttpClient`. `StripePaymentProviderServiceLive` delegates to the
+ * webhook handler, so it bottoms out at exactly the same leaf deps + stubs as
+ * `stripeWebhookHandlerLayer`; the only requirements that escape are the harness
+ * `Db` and the per-test `AuthSession` (via `PerkGrantService`).
+ */
+export const stripeServiceLayer = (httpClient: HttpClient.HttpClient) =>
+  StripePaymentProviderServiceLive.pipe(
+    Layer.provideMerge(stripeLeafDeps(httpClient)),
+    Layer.provideMerge(stripeLeafStubs),
+  );
+
+export interface SeededStripeConfig {
+  readonly configId: string;
+  readonly accountId: string;
+}
+
+/**
+ * Inserts an enabled Stripe `payment_provider_configuration` under the fixture
+ * project with plaintext live/test secrets (no-op crypto). Returns its id.
+ */
+export const seedStripeConfig = (input?: {
+  readonly liveWebhookSecret?: string;
+  readonly testWebhookSecret?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const configId = generateId("paymentProviderConfiguration");
+    const accountId = `acct_${configId.replace(/[^A-Za-z0-9]/g, "")}`;
+    yield* db.insert(paymentProviderConfigurations).values({
+      configuration: {
+        accountId,
+        live: {
+          secretKey: TEST_LIVE_SECRET_KEY,
+          webhookSecret: input?.liveWebhookSecret ?? TEST_LIVE_WEBHOOK_SECRET,
+        },
+        test: {
+          secretKey: TEST_TEST_SECRET_KEY,
+          webhookSecret: input?.testWebhookSecret ?? TEST_TEST_WEBHOOK_SECRET,
+        },
+      },
+      enabled: true,
+      id: configId,
+      name: "Stripe",
+      paymentProviderKey: accountId,
+      projectId: CoreTestFixture.projectId,
+      providerId: "stripe",
+    });
+    return { accountId, configId } satisfies SeededStripeConfig;
+  });
+
+export interface SeededStripeProduct {
+  readonly productId: string;
+  readonly configProductId: string;
+  readonly providerProductKey: string;
+  readonly stripeProductId: string;
+  readonly stripePriceId: string;
+}
+
+/**
+ * Inserts an internal product + an active Stripe product mapping under the
+ * given configuration. `providerProductKey` is `"${stripeProductId}:${stripePriceId}"`.
+ */
+export const seedStripeProduct = (input: {
+  readonly configId: string;
+  readonly type?: number;
+  readonly stripeProductId?: string;
+  readonly stripePriceId?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const productId = generateId("product");
+    const configProductId = generateId("paymentProviderProduct");
+    const stripeProductId =
+      input.stripeProductId ?? `prod_${productId.replace(/[^A-Za-z0-9]/g, "")}`;
+    const stripePriceId =
+      input.stripePriceId ?? `price_${configProductId.replace(/[^A-Za-z0-9]/g, "")}`;
+    const providerProductKey = `${stripeProductId}:${stripePriceId}`;
+    yield* db.insert(products).values({
+      id: productId,
+      name: `Stripe Product ${productId}`,
+      projectId: CoreTestFixture.projectId,
+      slug: productId,
+      type: input.type ?? ProductType.Subscription,
+    });
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      configuration: { priceId: stripePriceId, productId: stripeProductId },
+      id: configProductId,
+      isActive: true,
+      paymentProviderConfigurationId: input.configId,
+      productId,
+      providerProductKey,
+    });
+    return {
+      configProductId,
+      productId,
+      providerProductKey,
+      stripePriceId,
+      stripeProductId,
+    } satisfies SeededStripeProduct;
+  });
+
+/**
+ * Best-effort sweep of every row a Stripe scenario creates: the operational
+ * projection keyed on the seeded product mapping, the persons the engine
+ * lazily created for the given Stripe customer ids (+ their identity / external
+ * rows and ledger rows), the notification-processed rows for the config, and
+ * the seeded product + configuration rows. Deepest dependents first.
+ */
+export const cleanupStripeScenario = (input: {
+  readonly configId: string;
+  readonly configProductId?: string;
+  readonly productId?: string;
+  readonly customerIds?: ReadonlyArray<string>;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const customerIds = [...new Set(input.customerIds ?? [])];
+
+    // Resolve the lazily-created persons for the recorded customers; this lookup
+    // is a cleanup backstop, so a read failure degrades to "no persons" rather
+    // than failing the finalizer (`Effect.ensuring` requires an infallible effect).
+    const personIds = yield* Effect.gen(function* () {
+      if (customerIds.length === 0) return [] as string[];
+      const rows = yield* db.query.personExternalIdentifiers.findMany({
+        columns: { personId: true },
+        where: {
+          projectId: CoreTestFixture.projectId,
+          serviceId: "stripe",
+          identifier: { in: customerIds },
+        },
+      });
+      return [...new Set(rows.map((row) => row.personId))];
+    }).pipe(Effect.catch(() => Effect.succeed([] as string[])));
+
+    if (input.configProductId) {
+      yield* db
+        .delete(subscriptions)
+        .where(eq(subscriptions.paymentProviderConfigurationProductId, input.configProductId!))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(transactions)
+        .where(eq(transactions.paymentProviderConfigurationProductId, input.configProductId!))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(purchases)
+        .where(eq(purchases.paymentProviderConfigurationProductId, input.configProductId!))
+        .pipe(Effect.ignore);
+    }
+
+    if (personIds.length > 0) {
+      yield* db
+        .delete(purchaseLedger)
+        .where(inArray(purchaseLedger.personId, personIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(personExternalIdentifiers)
+        .where(inArray(personExternalIdentifiers.personId, personIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(personIdentities)
+        .where(inArray(personIdentities.personId, personIds))
+        .pipe(Effect.ignore);
+      yield* db.delete(persons).where(inArray(persons.id, personIds)).pipe(Effect.ignore);
+    }
+
+    yield* db
+      .delete(paymentProviderNotificationProcessed)
+      .where(
+        eq(paymentProviderNotificationProcessed.paymentProviderConfigurationId, input.configId),
+      )
+      .pipe(Effect.ignore);
+
+    if (input.configProductId) {
+      yield* db
+        .delete(paymentProviderConfigurationProducts)
+        .where(eq(paymentProviderConfigurationProducts.id, input.configProductId!))
+        .pipe(Effect.ignore);
+    }
+    if (input.productId) {
+      yield* db.delete(products).where(eq(products.id, input.productId!)).pipe(Effect.ignore);
+    }
+    yield* db
+      .delete(paymentProviderConfigurations)
+      .where(eq(paymentProviderConfigurations.id, input.configId))
+      .pipe(Effect.ignore);
+  });
+
+// ----------------------------------------------------------------------------
+// Stripe event-object builders. All amounts are minor units; use "usd" so FX
+// resolves to the identity rate without a network call.
+// ----------------------------------------------------------------------------
+
+/** Wraps a `data.object` (+ optional `previous_attributes`) in the event envelope. */
+export const makeStripeEvent = (input: {
+  readonly id?: string;
+  readonly type: string;
+  readonly object: Record<string, unknown>;
+  readonly previousAttributes?: Record<string, unknown>;
+  readonly livemode?: boolean;
+  readonly created?: number;
+}): Record<string, unknown> => ({
+  created: input.created ?? 1_700_000_000,
+  data: {
+    object: input.object,
+    ...(input.previousAttributes ? { previous_attributes: input.previousAttributes } : {}),
+  },
+  id: input.id ?? generateId("paymentProviderNotification").replace("ppn_", "evt_"),
+  livemode: input.livemode ?? false,
+  object: "event",
+  type: input.type,
+});
+
+export const makeStripeInvoice = (input: {
+  readonly id: string;
+  readonly subscriptionId: string;
+  readonly customerId: string;
+  readonly stripeProductId: string;
+  readonly stripePriceId: string;
+  readonly amountPaid: number;
+  readonly billingReason: string;
+  readonly periodStart?: number;
+  readonly periodEnd?: number;
+  readonly taxMinor?: number;
+  readonly paymentIntentId?: string;
+  readonly distinctId?: string;
+  readonly created?: number;
+  readonly currency?: string;
+}): Record<string, unknown> => ({
+  amount_paid: input.amountPaid,
+  billing_reason: input.billingReason,
+  charge: null,
+  created: input.created ?? 1_700_000_000,
+  currency: input.currency ?? "usd",
+  customer: input.customerId,
+  id: input.id,
+  lines: {
+    data: [
+      {
+        period: {
+          end: input.periodEnd ?? 1_702_592_000,
+          start: input.periodStart ?? 1_700_000_000,
+        },
+        price: { id: input.stripePriceId, product: input.stripeProductId },
+      },
+    ],
+  },
+  metadata: input.distinctId ? { voidhash_distinct_id: input.distinctId } : {},
+  object: "invoice",
+  payment_intent: input.paymentIntentId ?? null,
+  subscription: input.subscriptionId,
+  total: input.amountPaid,
+  ...(input.taxMinor !== undefined ? { tax: input.taxMinor } : {}),
+});
+
+export const makeStripeSubscription = (input: {
+  readonly id: string;
+  readonly customerId: string;
+  readonly stripeProductId: string;
+  readonly stripePriceId: string;
+  readonly cancelAtPeriodEnd?: boolean;
+  readonly canceledAt?: number;
+  readonly endedAt?: number;
+  readonly currentPeriodEnd?: number;
+  readonly status?: string;
+  readonly distinctId?: string;
+}): Record<string, unknown> => ({
+  cancel_at_period_end: input.cancelAtPeriodEnd ?? false,
+  canceled_at: input.canceledAt ?? null,
+  current_period_end: input.currentPeriodEnd ?? 1_702_592_000,
+  customer: input.customerId,
+  ended_at: input.endedAt ?? null,
+  id: input.id,
+  items: { data: [{ price: { id: input.stripePriceId, product: input.stripeProductId } }] },
+  metadata: input.distinctId ? { voidhash_distinct_id: input.distinctId } : {},
+  object: "subscription",
+  status: input.status ?? "active",
+});
+
+export const makeStripeCharge = (input: {
+  readonly id: string;
+  readonly paymentIntentId: string;
+  readonly customerId: string;
+  readonly amount: number;
+  readonly refunded?: boolean;
+  readonly created?: number;
+  readonly currency?: string;
+}): Record<string, unknown> => ({
+  amount: input.amount,
+  amount_refunded: input.refunded ? input.amount : 0,
+  balance_transaction: `txn_${input.id}`,
+  created: input.created ?? 1_700_000_000,
+  currency: input.currency ?? "usd",
+  customer: input.customerId,
+  id: input.id,
+  object: "charge",
+  payment_intent: input.paymentIntentId,
+  refunded: input.refunded ?? false,
+});
+
+export const makeStripeCheckoutSession = (input: {
+  readonly id: string;
+  readonly paymentIntentId: string;
+  readonly customerId: string;
+  readonly amountTotal: number;
+  readonly mode?: string;
+  readonly paymentStatus?: string;
+  readonly taxMinor?: number;
+  readonly clientReferenceId?: string;
+  readonly created?: number;
+  readonly currency?: string;
+}): Record<string, unknown> => ({
+  amount_subtotal: input.amountTotal,
+  amount_total: input.amountTotal,
+  client_reference_id: input.clientReferenceId ?? null,
+  created: input.created ?? 1_700_000_000,
+  currency: input.currency ?? "usd",
+  customer: input.customerId,
+  id: input.id,
+  mode: input.mode ?? "payment",
+  object: "checkout.session",
+  payment_intent: input.paymentIntentId,
+  payment_status: input.paymentStatus ?? "paid",
+  total_details: { amount_tax: input.taxMinor ?? 0 },
+});
+
+export const makeStripeRefund = (input: {
+  readonly id: string;
+  readonly paymentIntentId: string;
+  readonly status: string;
+  readonly created?: number;
+}): Record<string, unknown> => ({
+  charge: `ch_${input.id}`,
+  created: input.created ?? 1_700_000_000,
+  id: input.id,
+  object: "refund",
+  payment_intent: input.paymentIntentId,
+  status: input.status,
+});
diff --git a/packages/core/test/services/paywallDeploys/PaywallDeployService.integration.test.ts b/packages/core/test/services/paywallDeploys/PaywallDeployService.integration.test.ts
new file mode 100644
index 000000000..4b69c900e
--- /dev/null
+++ b/packages/core/test/services/paywallDeploys/PaywallDeployService.integration.test.ts
@@ -0,0 +1,736 @@
+/**
+ * Integration test for {@link PaywallDeployService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB; the artifact store is an in-memory stub since R2/S3 is not
+ * part of the harness).
+ *
+ * Drives the full contract §4 deploy lifecycle end-to-end and verifies the
+ * *persisted* side effects rather than just the return values:
+ *  - create (§4.1) → pending `paywall_deploy` + `paywall_deploy_file` rows and
+ *    the full `missing` blob list,
+ *  - upload (§4.2) → hash-verified blobs in the store + `paywall_deploy_blob`
+ *    ledger rows (re-create then reports nothing missing),
+ *  - finalize (§4.3) → released+active `paywall_release` row (version, s3Key,
+ *    s3Bucket, runtimeConfig), `paywall_component`/`paywall_component_version`
+ *    rows, §5 serving-layout objects in the store, ready deploy status, and
+ *    the Created/Published audit entries,
+ *  - idempotent re-deploy: the same manifest returns the same deploy and a
+ *    re-finalize reuses the release/component version (no new rows).
+ *
+ * Conventions (mirroring `PaywallLocationService.integration.test.ts`):
+ *  - All junk entities live under the seeded fixture project
+ *    ({@link CoreTestFixture}); the test cleans up after itself via
+ *    {@link withCleanup} (an `Effect.ensuring` finalizer lazily reading the
+ *    collected ids), deleting deploy/file/blob/release/paywall/component rows
+ *    AND the append-only audit rows by entity id. The global sweep is only a
+ *    backstop.
+ *  - Fixture file contents embed a per-run tag so every sha256 is unique:
+ *    leftover content-addressed blob rows from a crashed run can never make
+ *    `missing` incomplete, and slugs never collide with other tests' rows.
+ *  - `PaywallDeployService.layer` needs `PaywallArtifactStore` and
+ *    `PaywallAssetConfig` beyond the harness services, so the test provides
+ *    both itself (in-memory store, `Layer.succeed` config).
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+
+import {
+  PaywallArtifactStore,
+  type PaywallArtifactStoreShape,
+  PaywallDeployService,
+  computeComponentContentHash,
+  computePaywallContentHash,
+  sha256Hex,
+} from "@voidhash/core/services";
+import { PaywallAssetConfig } from "@voidhash/core/services/paywallLocations/PaywallAssetConfig";
+import {
+  AuditLogAction,
+  AuditLogEntityType,
+  Db,
+  PaywallDeployStatus,
+  PaywallLocationShowingType,
+  PaywallSource,
+  ReleaseStatus,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  paywallComponentVersions,
+  paywallComponents,
+  paywallDeployBlobs,
+  paywallDeployFiles,
+  paywallDeploys,
+  paywallLocationShowings,
+  paywallLocations,
+  paywallReleases,
+  paywalls,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** CDN base for visual-editor releases (unused by code deploys, required by the config shape). */
+const CDN_URL = "https://cdn.integration.test";
+
+/** Public serving base for code-deployed releases (deploy contract §5). */
+const PUBLIC_BASE_URL = "https://api.integration.test";
+
+/** Logical bucket the in-memory store reports; recorded on release rows. */
+const BUCKET_NAME = "it-mem-bucket";
+
+const PaywallAssetConfigTest = Layer.succeed(PaywallAssetConfig, {
+  cdnUrl: CDN_URL,
+  publicBaseUrl: PUBLIC_BASE_URL,
+});
+
+/**
+ * In-memory {@link PaywallArtifactStore} mirroring the live-adapter semantics
+ * (last-write-wins puts, `null` for missing keys). The `objects` map is shared
+ * between the service layer and the test body so §5 serving-layout writes can
+ * be asserted directly.
+ */
+const makeInMemoryArtifactStore = () => {
+  const objects = new Map<string, { body: Uint8Array; contentType: string | null }>();
+  const shape: PaywallArtifactStoreShape = {
+    bucketName: BUCKET_NAME,
+    getObject: (key) => Effect.sync(() => objects.get(key) ?? null),
+    head: (key) =>
+      Effect.sync(() => {
+        const object = objects.get(key);
+        return object ? { size: object.body.byteLength } : null;
+      }),
+    putObject: ({ body, contentType, key }) =>
+      Effect.sync(() => {
+        objects.set(key, { body, contentType: contentType ?? null });
+      }),
+  };
+  return { layer: Layer.succeed(PaywallArtifactStore, shape), objects };
+};
+
+const artifactStore = makeInMemoryArtifactStore();
+
+/** Provide the service + its extra deps, then authenticate as the fixture user. */
+const provideService = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(
+    Effect.provide(PaywallDeployService.layer),
+    Effect.provide(artifactStore.layer),
+    Effect.provide(PaywallAssetConfigTest),
+    CoreAuthSession.authenticate(),
+  );
+
+/** Monotonic counter so run tags stay unique even within the same millisecond. */
+let seq = 0;
+
+const encoder = new TextEncoder();
+
+const makeBlob = (content: string) =>
+  Effect.gen(function* () {
+    const body = encoder.encode(content);
+    const sha256 = yield* sha256Hex(body);
+    return { body, sha256 };
+  });
+
+/**
+ * Builds a minimal-but-complete §1 deploy fixture: one paywall (html + js +
+ * one png asset), one component (§2 manifest + §3 preview + runtime), the
+ * config file, and the raw blob bodies for every declared sha256. Contents
+ * embed a unique run tag so all hashes/slugs are new for this run.
+ * `overrides` pin the slugs (to target an existing paywall/component) and/or
+ * vary the content (`contentTag`) so a second deploy of the same slug
+ * produces a different contentHash.
+ */
+const buildDeployFixture = (overrides?: {
+  readonly paywallSlug?: string;
+  readonly componentSlug?: string;
+  readonly contentTag?: string;
+}) =>
+  Effect.gen(function* () {
+    const runTag = `${Date.now()}-${seq++}`;
+    const paywallSlug = overrides?.paywallSlug ?? `it-dep-pw-${runTag}`;
+    const componentSlug = overrides?.componentSlug ?? `it-dep-cmp-${runTag}`;
+    const contentTag = overrides?.contentTag ?? runTag;
+    const assetBasename = `hero-${contentTag}.png`;
+    const assetPath = `.voidhash/.build/paywalls/${paywallSlug}/assets/${assetBasename}`;
+
+    const html = yield* makeBlob(
+      `<!doctype html><html><head><script src="./bundle.js"></script></head><body>it ${contentTag}</body></html>`,
+    );
+    const js = yield* makeBlob(`console.log("paywall ${contentTag}");`);
+    const asset = yield* makeBlob(`png-bytes-${contentTag}`);
+    const paywallSource = yield* makeBlob(`export default definePaywall(); // ${contentTag}`);
+    const componentSource = yield* makeBlob(`export default defineComponent(); // ${contentTag}`);
+    const runtimeJs = yield* makeBlob(`export const runtime = "${contentTag}";`);
+    const config = yield* makeBlob(`export default {}; // ${contentTag}`);
+
+    const componentManifestJson = {
+      actions: { onSelect: { payload: { productId: { kind: "string" } } } },
+      hostData: ["products"],
+      manifestVersion: 2,
+      previewStates: ["default"],
+      props: {
+        accentColor: { default: "#16a34a", editor: "color", kind: "string", optional: true },
+        selected: { default: false, kind: "boolean", optional: true },
+      },
+      slot: false,
+      title: "Integration Component",
+    };
+    const componentManifest = yield* makeBlob(JSON.stringify(componentManifestJson));
+
+    const previewTreeJson = {
+      root: {
+        children: [{ style: { color: "#ffffff" }, text: `Yearly ${contentTag}`, type: "text" }],
+        style: { flexDirection: "row", paddingTop: 16 },
+        type: "view",
+      },
+      state: "default",
+      treeVersion: 1,
+    };
+    const previewTree = yield* makeBlob(JSON.stringify(previewTreeJson));
+
+    const paywallContentHash = yield* computePaywallContentHash({
+      assetSha256s: [asset.sha256],
+      htmlSha256: html.sha256,
+      jsSha256: js.sha256,
+    });
+    const componentContentHash = yield* computeComponentContentHash({
+      manifestSha256: componentManifest.sha256,
+      panelSha256: null,
+      previewSha256s: [previewTree.sha256],
+      runtimeSha256: runtimeJs.sha256,
+    });
+
+    const variables = { accentColor: "#16a34a", showBadge: true };
+    const products = ["yearly", "monthly"];
+
+    const manifest = {
+      assets: [
+        {
+          bytes: asset.body.byteLength,
+          contentType: "image/png",
+          path: assetPath,
+          sha256: asset.sha256,
+        },
+      ],
+      cliVersion: "0.0.1-it",
+      components: [
+        {
+          artifacts: {
+            panel: null,
+            runtime: {
+              bytes: runtimeJs.body.byteLength,
+              contentType: "text/javascript; charset=utf-8",
+              path: `.voidhash/.build/components/${componentSlug}/runtime.js`,
+              sha256: runtimeJs.sha256,
+            },
+          },
+          contentHash: componentContentHash,
+          id: componentSlug,
+          manifest: {
+            bytes: componentManifest.body.byteLength,
+            contentType: "application/json",
+            path: `.voidhash/.build/components/${componentSlug}/manifest.json`,
+            sha256: componentManifest.sha256,
+          },
+          previews: [
+            {
+              file: {
+                bytes: previewTree.body.byteLength,
+                contentType: "application/json",
+                path: `.voidhash/.build/components/${componentSlug}/previews/default.json`,
+                sha256: previewTree.sha256,
+              },
+              state: "default",
+            },
+          ],
+          source: {
+            bytes: componentSource.body.byteLength,
+            path: `.voidhash/components/${componentSlug}.tsx`,
+            sha256: componentSource.sha256,
+          },
+          title: "Integration Component",
+        },
+      ],
+      config: { bytes: config.body.byteLength, path: "voidhash.config.ts", sha256: config.sha256 },
+      createdAt: new Date().toISOString(),
+      paywalls: [
+        {
+          artifacts: {
+            html: {
+              bytes: html.body.byteLength,
+              contentType: "text/html; charset=utf-8",
+              path: `.voidhash/.build/paywalls/${paywallSlug}/index.html`,
+              sha256: html.sha256,
+            },
+            js: {
+              bytes: js.body.byteLength,
+              contentType: "text/javascript; charset=utf-8",
+              path: `.voidhash/.build/paywalls/${paywallSlug}/bundle.js`,
+              sha256: js.sha256,
+            },
+          },
+          assets: [assetPath],
+          contentHash: paywallContentHash,
+          id: paywallSlug,
+          products,
+          source: {
+            bytes: paywallSource.body.byteLength,
+            path: `.voidhash/paywalls/${paywallSlug}.tsx`,
+            sha256: paywallSource.sha256,
+          },
+          title: "Integration Deploy Paywall",
+          variables,
+        },
+      ],
+      project: CoreTestFixture.projectSlug,
+      runtimeVersion: "0.0.1-it",
+      schemaVersion: 2,
+      team: CoreTestFixture.organizationSlug,
+    };
+
+    const blobs = [
+      html,
+      js,
+      asset,
+      paywallSource,
+      componentSource,
+      runtimeJs,
+      config,
+      componentManifest,
+      previewTree,
+    ];
+
+    return {
+      allHashes: [...new Set(blobs.map((blob) => blob.sha256))],
+      assetBasename,
+      blobs,
+      componentContentHash,
+      componentManifestJson,
+      componentSlug,
+      html,
+      manifest,
+      paywallContentHash,
+      paywallSlug,
+      products,
+      variables,
+    };
+  });
+
+/** Ids the test created, collected as it runs and read lazily by the finalizer. */
+interface CreatedIds {
+  readonly deployIds: string[];
+  readonly paywallIds: string[];
+  readonly componentIds: string[];
+  readonly blobSha256s: string[];
+  readonly locationIds: string[];
+}
+
+/**
+ * Delete every row the test created: deploy files + blobs + the deploy rows,
+ * releases + paywalls, component versions + components, and the append-only
+ * audit rows recorded against the deploy entities. Each delete is `ignore`d
+ * so a missing row never turns the finalizer into a failure.
+ */
+const cleanupCreated = (ids: CreatedIds) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const deployIds = [...ids.deployIds];
+    const paywallIds = [...ids.paywallIds];
+    const componentIds = [...ids.componentIds];
+    const blobSha256s = [...ids.blobSha256s];
+    const locationIds = [...ids.locationIds];
+
+    if (locationIds.length > 0) {
+      yield* db
+        .delete(paywallLocationShowings)
+        .where(inArray(paywallLocationShowings.paywallLocationId, locationIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(paywallLocations)
+        .where(inArray(paywallLocations.id, locationIds))
+        .pipe(Effect.ignore);
+    }
+    if (deployIds.length > 0) {
+      yield* db
+        .delete(paywallDeployFiles)
+        .where(inArray(paywallDeployFiles.deployId, deployIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(auditLogs)
+        .where(
+          and(
+            eq(auditLogs.entityType, AuditLogEntityType.PaywallDeploy),
+            inArray(auditLogs.entityId, deployIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+    }
+    if (paywallIds.length > 0) {
+      yield* db
+        .delete(paywallReleases)
+        .where(inArray(paywallReleases.paywallId, paywallIds))
+        .pipe(Effect.ignore);
+      yield* db.delete(paywalls).where(inArray(paywalls.id, paywallIds)).pipe(Effect.ignore);
+    }
+    if (componentIds.length > 0) {
+      yield* db
+        .delete(paywallComponentVersions)
+        .where(inArray(paywallComponentVersions.componentId, componentIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(paywallComponents)
+        .where(inArray(paywallComponents.id, componentIds))
+        .pipe(Effect.ignore);
+    }
+    if (blobSha256s.length > 0) {
+      yield* db
+        .delete(paywallDeployBlobs)
+        .where(
+          and(
+            eq(paywallDeployBlobs.projectId, projectId),
+            inArray(paywallDeployBlobs.sha256, blobSha256s),
+          ),
+        )
+        .pipe(Effect.ignore);
+    }
+    if (deployIds.length > 0) {
+      yield* db
+        .delete(paywallDeploys)
+        .where(inArray(paywallDeploys.id, deployIds))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap the test body so everything it creates is removed afterward regardless
+ * of how it exits. The body pushes ids into the shared {@link CreatedIds}
+ * collector; cleanup reads them lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withCleanup = <E, R>(
+  body: (ids: CreatedIds) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const ids: CreatedIds = {
+    blobSha256s: [],
+    componentIds: [],
+    deployIds: [],
+    locationIds: [],
+    paywallIds: [],
+  };
+  return body(ids).pipe(Effect.ensuring(cleanupCreated(ids)));
+};
+
+const findDeployRow = (deployId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paywallDeploys.findFirst({ where: { id: deployId } });
+  });
+
+const findReleaseRows = (paywallId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.select().from(paywallReleases).where(eq(paywallReleases.paywallId, paywallId));
+  });
+
+const findComponentVersionRows = (componentId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(paywallComponentVersions)
+      .where(eq(paywallComponentVersions.componentId, componentId));
+  });
+
+const findDeployAuditEntries = (deployId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.PaywallDeploy),
+          eq(auditLogs.entityId, deployId),
+        ),
+      );
+  });
+
+describe("PaywallDeployService deploy lifecycle", () => {
+  test(
+    "create → upload → finalize publishes the release/component into the serving layout; re-deploying the same manifest is idempotent",
+    withCleanup((ids) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallDeployService;
+        const db = yield* Db;
+        const fixture = yield* buildDeployFixture();
+        ids.blobSha256s.push(...fixture.allHashes);
+
+        // -- §4.1 create: pending deploy, every declared blob missing --------
+        const created = yield* svc.createDeploy({ manifest: fixture.manifest });
+        ids.deployIds.push(created.deployId);
+        expect(created.deployId.startsWith("pw_dep_")).toBe(true);
+        expect([...created.missing].sort()).toEqual([...fixture.allHashes].sort());
+
+        const pendingRow = yield* findDeployRow(created.deployId);
+        expect(pendingRow?.status).toBe(PaywallDeployStatus.pending);
+        expect(pendingRow?.projectId).toBe(projectId);
+        expect(pendingRow?.schemaVersion).toBe(2);
+
+        // Every manifest file is declared as a paywall_deploy_file row.
+        const fileRows = yield* db
+          .select()
+          .from(paywallDeployFiles)
+          .where(eq(paywallDeployFiles.deployId, created.deployId));
+        expect(new Set(fileRows.map((row) => row.sha256))).toEqual(new Set(fixture.allHashes));
+
+        // -- §4.2 upload every declared blob ---------------------------------
+        for (const blob of fixture.blobs) {
+          yield* svc.uploadBlob({
+            body: blob.body,
+            deployId: created.deployId,
+            sha256: blob.sha256,
+          });
+        }
+        // Blobs land in the content-addressed upload layout...
+        expect(artifactStore.objects.has(`blobs/${projectId}/${fixture.html.sha256}`)).toBe(true);
+        // ...and in the per-project blob ledger.
+        const blobRows = yield* db
+          .select()
+          .from(paywallDeployBlobs)
+          .where(
+            and(
+              eq(paywallDeployBlobs.projectId, projectId),
+              inArray(paywallDeployBlobs.sha256, [...fixture.allHashes]),
+            ),
+          );
+        expect(blobRows.length).toBe(fixture.allHashes.length);
+
+        // Re-POSTing the same manifest returns the same deploy, now complete.
+        const recheck = yield* svc.createDeploy({ manifest: fixture.manifest });
+        expect(recheck.deployId).toBe(created.deployId);
+        expect(recheck.missing).toEqual([]);
+
+        // -- §4.3 finalize ----------------------------------------------------
+        const finalized = yield* svc.finalizeDeploy({ deployId: created.deployId });
+        expect(finalized.deployId).toBe(created.deployId);
+        expect(finalized.status).toBe("ready");
+        const paywallSummary = finalized.paywalls[0];
+        const componentSummary = finalized.components[0];
+        expect(paywallSummary).toBeDefined();
+        expect(componentSummary).toBeDefined();
+        if (!paywallSummary || !componentSummary) return;
+        ids.paywallIds.push(paywallSummary.paywallId);
+        ids.componentIds.push(componentSummary.componentId);
+
+        expect(paywallSummary.id).toBe(fixture.paywallSlug);
+        expect(paywallSummary.version).toBe(1);
+        expect(paywallSummary.contentHash).toBe(fixture.paywallContentHash);
+        expect(paywallSummary.url).toBe(
+          `${PUBLIC_BASE_URL}/p/${fixture.paywallContentHash}/index.html`,
+        );
+        expect(componentSummary.id).toBe(fixture.componentSlug);
+        expect(componentSummary.version).toBe(1);
+        expect(componentSummary.contentHash).toBe(fixture.componentContentHash);
+
+        const readyRow = yield* findDeployRow(created.deployId);
+        expect(readyRow?.status).toBe(PaywallDeployStatus.ready);
+
+        // Paywall upserted by (projectId, slug) with source=code.
+        const paywallRow = yield* db.query.paywalls.findFirst({
+          where: { id: paywallSummary.paywallId },
+        });
+        expect(paywallRow?.slug).toBe(fixture.paywallSlug);
+        expect(paywallRow?.projectId).toBe(projectId);
+        expect(paywallRow?.source).toBe(PaywallSource.code);
+        expect(paywallRow?.name).toBe("Integration Deploy Paywall");
+
+        // Released + active release row carrying the §4.3 fields.
+        const releaseRows = yield* findReleaseRows(paywallSummary.paywallId);
+        expect(releaseRows.length).toBe(1);
+        const release = releaseRows[0];
+        expect(release?.id).toBe(paywallSummary.releaseId);
+        expect(release?.version).toBe(1);
+        expect(release?.s3Key).toBe(`p/${fixture.paywallContentHash}/index.html`);
+        expect(release?.s3Bucket).toBe(BUCKET_NAME);
+        expect(release?.isActive).toBe(true);
+        expect(release?.status).toBe(ReleaseStatus.released);
+        expect(release?.deployId).toBe(created.deployId);
+        expect(release?.contentHash).toBe(fixture.paywallContentHash);
+        expect(release?.runtimeConfig).toEqual({
+          productSlugs: fixture.products,
+          variables: fixture.variables,
+        });
+        expect(release?.publishedBy).toBe(
+          `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+        );
+
+        // Component + immutable version row storing the validated §2 manifest.
+        const componentRow = yield* db.query.paywallComponents.findFirst({
+          where: { id: componentSummary.componentId },
+        });
+        expect(componentRow?.slug).toBe(fixture.componentSlug);
+        expect(componentRow?.projectId).toBe(projectId);
+        expect(componentRow?.title).toBe("Integration Component");
+
+        const versionRows = yield* findComponentVersionRows(componentSummary.componentId);
+        expect(versionRows.length).toBe(1);
+        const componentVersion = versionRows[0];
+        expect(componentVersion?.version).toBe(1);
+        expect(componentVersion?.contentHash).toBe(fixture.componentContentHash);
+        expect(componentVersion?.deployId).toBe(created.deployId);
+        expect(componentVersion?.manifest).toEqual(fixture.componentManifestJson);
+
+        // §5 serving layout: html/js/asset copied under p/<contentHash>/.
+        const servedHtml = artifactStore.objects.get(`p/${fixture.paywallContentHash}/index.html`);
+        expect(servedHtml).toBeDefined();
+        expect(servedHtml?.contentType).toBe("text/html; charset=utf-8");
+        expect(new TextDecoder().decode(servedHtml?.body)).toBe(
+          new TextDecoder().decode(fixture.html.body),
+        );
+        expect(
+          artifactStore.objects.get(`p/${fixture.paywallContentHash}/bundle.js`)?.contentType,
+        ).toBe("text/javascript; charset=utf-8");
+        expect(
+          artifactStore.objects.get(
+            `p/${fixture.paywallContentHash}/assets/${fixture.assetBasename}`,
+          )?.contentType,
+        ).toBe("image/png");
+
+        // Audit trail: Created at create, Published at finalize.
+        const auditEntries = yield* findDeployAuditEntries(created.deployId);
+        expect(auditEntries.some((entry) => entry.action === AuditLogAction.Created)).toBe(true);
+        const publishedEntry = auditEntries.find(
+          (entry) => entry.action === AuditLogAction.Published,
+        );
+        expect(publishedEntry).toBeDefined();
+        expect(publishedEntry?.projectId).toBe(projectId);
+
+        // -- idempotent re-deploy ---------------------------------------------
+        // Same manifest → same deploy row; re-finalize reuses the release and
+        // the component version (same content) instead of minting new ones.
+        const again = yield* svc.createDeploy({ manifest: fixture.manifest });
+        expect(again.deployId).toBe(created.deployId);
+        expect(again.missing).toEqual([]);
+
+        const refinalized = yield* svc.finalizeDeploy({ deployId: created.deployId });
+        expect(refinalized.paywalls[0]?.releaseId).toBe(paywallSummary.releaseId);
+        expect(refinalized.paywalls[0]?.version).toBe(1);
+        expect(refinalized.components[0]?.componentId).toBe(componentSummary.componentId);
+        expect(refinalized.components[0]?.version).toBe(1);
+
+        const releasesAfter = yield* findReleaseRows(paywallSummary.paywallId);
+        expect(releasesAfter.length).toBe(1);
+        expect(releasesAfter[0]?.isActive).toBe(true);
+        const versionsAfter = yield* findComponentVersionRows(componentSummary.componentId);
+        expect(versionsAfter.length).toBe(1);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "release activation propagates to open showings: a second deploy repins them, and setActivePaywallRelease rolls them back",
+    withCleanup((ids) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallDeployService;
+        const db = yield* Db;
+
+        // -- deploy v1 --------------------------------------------------------
+        const v1 = yield* buildDeployFixture();
+        ids.blobSha256s.push(...v1.allHashes);
+        const createdV1 = yield* svc.createDeploy({ manifest: v1.manifest });
+        ids.deployIds.push(createdV1.deployId);
+        for (const blob of v1.blobs) {
+          yield* svc.uploadBlob({
+            body: blob.body,
+            deployId: createdV1.deployId,
+            sha256: blob.sha256,
+          });
+        }
+        const finalizedV1 = yield* svc.finalizeDeploy({ deployId: createdV1.deployId });
+        const summaryV1 = finalizedV1.paywalls[0];
+        expect(summaryV1).toBeDefined();
+        if (!summaryV1) return;
+        ids.paywallIds.push(summaryV1.paywallId);
+        const componentIdV1 = finalizedV1.components[0]?.componentId;
+        if (componentIdV1) {
+          ids.componentIds.push(componentIdV1);
+        }
+
+        // -- assign an open showing pinned to the v1 release ------------------
+        const locationId = `it_dep_loc_${Date.now()}-${seq++}`;
+        ids.locationIds.push(locationId);
+        yield* db.insert(paywallLocations).values({
+          id: locationId,
+          name: "Deploy Propagation Location",
+          projectId,
+          slug: locationId,
+        });
+        const showingId = `it_dep_show_${Date.now()}-${seq++}`;
+        yield* db.insert(paywallLocationShowings).values({
+          createdByUserId: CoreTestFixture.userId,
+          featureFlagId: null,
+          id: showingId,
+          paywallId: summaryV1.paywallId,
+          paywallLocationId: locationId,
+          paywallReleaseId: summaryV1.releaseId,
+          projectId,
+          startedAt: new Date(),
+          type: PaywallLocationShowingType.paywallRelease,
+        });
+
+        const findOpenShowings = db.query.paywallLocationShowings.findMany({
+          where: {
+            paywallLocationId: locationId,
+            endedAt: { isNull: true },
+          },
+        });
+
+        // -- deploy v2: same slug, changed content -----------------------------
+        const v2 = yield* buildDeployFixture({
+          componentSlug: v1.componentSlug,
+          contentTag: `${Date.now()}-${seq++}-v2`,
+          paywallSlug: v1.paywallSlug,
+        });
+        ids.blobSha256s.push(...v2.allHashes);
+        expect(v2.paywallContentHash).not.toBe(v1.paywallContentHash);
+        const createdV2 = yield* svc.createDeploy({ manifest: v2.manifest });
+        ids.deployIds.push(createdV2.deployId);
+        for (const blob of v2.blobs) {
+          yield* svc.uploadBlob({
+            body: blob.body,
+            deployId: createdV2.deployId,
+            sha256: blob.sha256,
+          });
+        }
+        const finalizedV2 = yield* svc.finalizeDeploy({ deployId: createdV2.deployId });
+        const summaryV2 = finalizedV2.paywalls[0];
+        expect(summaryV2).toBeDefined();
+        if (!summaryV2) return;
+        expect(summaryV2.paywallId).toBe(summaryV1.paywallId);
+        expect(summaryV2.releaseId).not.toBe(summaryV1.releaseId);
+        expect(summaryV2.version).toBe(2);
+
+        // The open showing now pins the v2 release; the v1 showing was ended.
+        const openAfterDeploy = yield* findOpenShowings;
+        expect(openAfterDeploy.length).toBe(1);
+        expect(openAfterDeploy[0]?.paywallReleaseId).toBe(summaryV2.releaseId);
+        expect(openAfterDeploy[0]?.paywallId).toBe(summaryV1.paywallId);
+        const endedOriginal = yield* db.query.paywallLocationShowings.findFirst({
+          where: { id: showingId },
+        });
+        expect(endedOriginal?.endedAt).not.toBeNull();
+
+        // -- roll back: activating v1 repins the open showing again ------------
+        yield* svc.setActivePaywallRelease({ releaseId: summaryV1.releaseId });
+        const openAfterRollback = yield* findOpenShowings;
+        expect(openAfterRollback.length).toBe(1);
+        expect(openAfterRollback[0]?.paywallReleaseId).toBe(summaryV1.releaseId);
+        expect(openAfterRollback[0]?.createdByUserId).toBe(CoreTestFixture.userId);
+      }),
+    ).pipe(provideService),
+  );
+});
diff --git a/packages/core/test/services/paywallLocations/PaywallLocationService.integration.test.ts b/packages/core/test/services/paywallLocations/PaywallLocationService.integration.test.ts
new file mode 100644
index 000000000..720c471f7
--- /dev/null
+++ b/packages/core/test/services/paywallLocations/PaywallLocationService.integration.test.ts
@@ -0,0 +1,1325 @@
+/**
+ * Integration tests for {@link PaywallLocationService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB + ClickHouse + WorkOS; only the project schema cache is an
+ * in-memory stub).
+ *
+ * Every test drives the service end-to-end and verifies the *persisted* side
+ * effects rather than just the method's return value:
+ *  - the `paywall_location` / `paywall_location_showing` rows written, updated,
+ *    archived, or ended in MySQL,
+ *  - the matching `audit_log` row (entity, action, actor, change snapshot),
+ *  - invalidation of the project's schema cache after a successful write.
+ *
+ * Conventions used throughout (mirroring `PerkService.integration.test.ts`):
+ *  - All junk entities live under the one seeded fixture project
+ *    ({@link CoreTestFixture}); each test cleans up after itself via
+ *    {@link withCleanup}, which deletes the locations + showings + their
+ *    append-only audit rows it created on exit, success or failure. The global
+ *    teardown sweep is only a backstop. Assertions stay membership-based
+ *    (`.some(...)` / by-slug, never exact list counts) and slugs are unique
+ *    per call so a leftover row from a crashed run can't collide.
+ *  - The harness builds a fresh `ProjectSchemaCache` stub per test and shares
+ *    that instance with `SchemaCacheInvalidationService`, so seeding the cache
+ *    here and reading it back after a write proves invalidation ran.
+ *  - `PaywallLocationService.layer` additionally needs `PaywallAssetConfig`
+ *    (the CDN base used to build release HTML URLs), which is NOT one of the
+ *    harness services, so the test provides it itself via a `Layer.succeed`.
+ *  - Permission tests re-authenticate just the call under test via
+ *    {@link asUnauthorized}; the inner provision shadows the harness's default
+ *    full-permission session for the wrapped call only.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields,
+ *    paired with a DB-state assertion that nothing leaked.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  ExperimentService,
+  FeatureFlagService,
+  PaywallLocationService,
+  ProjectSchemaCache,
+} from "@voidhash/core/services";
+
+/**
+ * `PaywallLocationService` now resolves an experiment-backed showing via
+ * `ExperimentService` (which needs `FeatureFlagService`); provide that subgraph
+ * here so the harness's `Db` / `AuditLogPort` satisfy the rest.
+ */
+const PaywallLocationServiceTestLayer = PaywallLocationService.layer.pipe(
+  Layer.provide(ExperimentService.layer.pipe(Layer.provide(FeatureFlagService.layer))),
+);
+import { PaywallAssetConfig } from "@voidhash/core/services/paywallLocations/PaywallAssetConfig";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { PaywallNotFoundError } from "@voidhash/core/domain/paywall/Paywall";
+import {
+  PaywallLocationNotFoundError,
+  PaywallLocationShowingValidationError,
+  PaywallLocationSlugAlreadyExistsError,
+} from "@voidhash/core/domain/paywallLocation/PaywallLocation";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  PaywallLocationShowingType,
+  ReleaseStatus,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  isNull,
+  paywallLocationShowings,
+  paywallLocations,
+  paywallReleases,
+  paywalls,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** CDN base the test wires into {@link PaywallAssetConfig}. */
+const CDN_URL = "https://cdn.integration.test";
+
+/** Public serving base for code-deployed releases (deploy contract §5). */
+const PUBLIC_BASE_URL = "https://api.integration.test";
+
+/**
+ * Provides {@link PaywallAssetConfig} — the only requirement of
+ * `PaywallLocationService.layer` that the harness does not supply. Pure config
+ * (no further requirements), so it stays inside the harness-service budget.
+ */
+const PaywallAssetConfigTest = Layer.succeed(PaywallAssetConfig, {
+  cdnUrl: CDN_URL,
+  publicBaseUrl: PUBLIC_BASE_URL,
+});
+
+/** Monotonic counter so slugs/ids stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueSlug = (label: string) => `it-pwloc-${label}-${Date.now()}-${seq++}`;
+const uniqueId = (prefix: string) => `${prefix}_it_${Date.now()}_${seq++}`;
+
+/** Read a paywall-location row straight from the database, bypassing the service. */
+const findLocationRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paywallLocations.findFirst({ where: { id } });
+  });
+
+/** All showing rows for a location, newest first. */
+const findShowingRows = (locationId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(paywallLocationShowings)
+      .where(eq(paywallLocationShowings.paywallLocationId, locationId));
+  });
+
+/** Active (un-ended) showing rows for a location. */
+const findActiveShowingRows = (locationId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(paywallLocationShowings)
+      .where(
+        and(
+          eq(paywallLocationShowings.paywallLocationId, locationId),
+          isNull(paywallLocationShowings.endedAt),
+        ),
+      );
+  });
+
+/** Count location rows with a given slug in the fixture project. */
+const countLocationsWithSlug = (slug: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const rows = yield* db
+      .select({ id: paywallLocations.id })
+      .from(paywallLocations)
+      .where(and(eq(paywallLocations.projectId, projectId), eq(paywallLocations.slug, slug)));
+    return rows.length;
+  });
+
+/** All audit-log rows recorded for a given paywall-location entity. */
+const findLocationAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.PaywallLocation),
+          eq(auditLogs.entityId, entityId),
+        ),
+      );
+  });
+
+/**
+ * Insert a paywall with a released, active release directly (the owning
+ * services live elsewhere; a raw insert keeps the dependency tree small).
+ * Returns the ids so the caller can track them for cleanup.
+ */
+const seedPaywallWithActiveRelease = (input: {
+  readonly paywallProjectId: string;
+  readonly released?: boolean;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const paywallId = uniqueId("pw");
+    const releaseId = uniqueId("pw_pub");
+    const slug = uniqueSlug("paywall");
+    yield* db.insert(paywalls).values({
+      id: paywallId,
+      name: "Integration Paywall",
+      projectId: input.paywallProjectId,
+      slug,
+    });
+    yield* db.insert(paywallReleases).values({
+      id: releaseId,
+      paywallId,
+      publishedBy: CoreTestFixture.userId,
+      s3Bucket: "it-bucket",
+      s3Key: "releases/it-release.html",
+      schemaVersion: 1,
+      version: 1,
+      // The validation path requires both isActive AND status=released.
+      isActive: true,
+      status: input.released === false ? ReleaseStatus.draft : ReleaseStatus.released,
+    });
+    return { paywallId, releaseId };
+  });
+
+/** Delete the given paywalls + their releases. Each delete is ignored. */
+const cleanupPaywalls = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db
+      .delete(paywallReleases)
+      .where(inArray(paywallReleases.paywallId, targets))
+      .pipe(Effect.ignore);
+    yield* db.delete(paywalls).where(inArray(paywalls.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Delete the given locations, their showings, paywalls, and the append-only
+ * audit rows recorded against the location entities. Audit entries survive an
+ * archive/update, so they are cleared by entity id too. Each delete is
+ * `ignore`d so a missing row never turns the finalizer into a failure.
+ */
+const cleanupCreated = (locationIds: ReadonlyArray<string>, paywallIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const locTargets = [...locationIds];
+    if (locTargets.length > 0) {
+      yield* db
+        .delete(paywallLocationShowings)
+        .where(inArray(paywallLocationShowings.paywallLocationId, locTargets))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(auditLogs)
+        .where(
+          and(
+            eq(auditLogs.entityType, AuditLogEntityType.PaywallLocation),
+            inArray(auditLogs.entityId, locTargets),
+          ),
+        )
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(paywallLocations)
+        .where(inArray(paywallLocations.id, locTargets))
+        .pipe(Effect.ignore);
+    }
+    yield* cleanupPaywalls(paywallIds);
+  });
+
+/**
+ * Wrap a test body so every location + paywall it creates is removed afterward,
+ * regardless of how the test exits. Pass each created location id to `track`
+ * and each created paywall id to `trackPaywall`; cleanup reads the collected
+ * ids lazily at finalization via `Effect.ensuring`, so it sees every id tracked
+ * while the body ran (including on failure).
+ */
+const withCleanup = <E, R>(
+  body: (
+    track: (id: string) => void,
+    trackPaywall: (id: string) => void,
+  ) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const locationIds: string[] = [];
+  const paywallIds: string[] = [];
+  return body(
+    (id) => {
+      locationIds.push(id);
+    },
+    (id) => {
+      paywallIds.push(id);
+    },
+  ).pipe(Effect.ensuring(cleanupCreated(locationIds, paywallIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+/** Provide the service + its extra config, then authenticate as the fixture user. */
+const provideService = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(
+    Effect.provide(PaywallLocationServiceTestLayer),
+    Effect.provide(PaywallAssetConfigTest),
+    CoreAuthSession.authenticate(),
+  );
+
+describe("PaywallLocationService.createLocation", () => {
+  test(
+    "persists the location, records a created audit entry, and invalidates the schema cache",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const cache = yield* ProjectSchemaCache;
+
+        const name = "Checkout Page";
+        const slug = uniqueSlug("create");
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const created = yield* svc.createLocation({ name, projectId, slug });
+        track(created.id);
+        expect(created.id.startsWith("pw_loc_")).toBe(true);
+
+        const row = yield* findLocationRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.name).toBe(name);
+        expect(row?.slug).toBe(slug);
+        expect(row?.projectId).toBe(projectId);
+        expect(row?.archivedAt).toBeNull();
+
+        const auditEntries = yield* findLocationAuditEntries(created.id);
+        const createdEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.PaywallLocation);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({ snapshot: { name, slug } });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "rejects a duplicate slug within the project and writes no second row",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const slug = uniqueSlug("duplicate");
+
+        const first = yield* svc.createLocation({ name: "First", projectId, slug });
+        track(first.id);
+
+        const error = yield* Effect.flip(svc.createLocation({ name: "Second", projectId, slug }));
+        expect(error).toBeInstanceOf(PaywallLocationSlugAlreadyExistsError);
+        if (error instanceof PaywallLocationSlugAlreadyExistsError) {
+          expect(error.slug).toBe(slug);
+        }
+
+        expect(yield* countLocationsWithSlug(slug)).toBe(1);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "forbids callers without project:all and writes nothing",
+    // No cleanup wrapper: a forbidden create writes no row.
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const slug = uniqueSlug("forbidden");
+
+      const error = yield* Effect.flip(
+        asUnauthorized(svc.createLocation({ name: "Nope", projectId, slug })),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      expect(yield* countLocationsWithSlug(slug)).toBe(0);
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "stores a description when provided and null when omitted",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+
+        const withDesc = yield* svc.createLocation({
+          description: "Shown at checkout",
+          name: "With Desc",
+          projectId,
+          slug: uniqueSlug("with-desc"),
+        });
+        track(withDesc.id);
+        const withoutDesc = yield* svc.createLocation({
+          name: "No Desc",
+          projectId,
+          slug: uniqueSlug("no-desc"),
+        });
+        track(withoutDesc.id);
+
+        const withRow = yield* findLocationRow(withDesc.id);
+        expect(withRow?.description).toBe("Shown at checkout");
+        const withoutRow = yield* findLocationRow(withoutDesc.id);
+        expect(withoutRow?.description).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+});
+
+describe("PaywallLocationService.updateLocation", () => {
+  test(
+    "changes name and description, records an updated audit entry, and invalidates the schema cache",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const cache = yield* ProjectSchemaCache;
+
+        const created = yield* svc.createLocation({
+          description: "before",
+          name: "Before",
+          projectId,
+          slug: uniqueSlug("update-before"),
+        });
+        track(created.id);
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+        const result = yield* svc.updateLocation({
+          description: "after",
+          locationId: created.id,
+          name: "After",
+        });
+        expect(result.id).toBe(created.id);
+
+        const row = yield* findLocationRow(created.id);
+        expect(row?.name).toBe("After");
+        expect(row?.description).toBe("after");
+
+        const auditEntries = yield* findLocationAuditEntries(created.id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toEqual({
+          snapshot: { description: "after", name: "After" },
+        });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "is a no-op when neither name nor description is provided (no write, no audit)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+
+        const created = yield* svc.createLocation({
+          name: "Untouched",
+          projectId,
+          slug: uniqueSlug("update-noop"),
+        });
+        track(created.id);
+
+        const result = yield* svc.updateLocation({ locationId: created.id });
+        expect(result.id).toBe(created.id);
+
+        const row = yield* findLocationRow(created.id);
+        expect(row?.name).toBe("Untouched");
+
+        // Only the create audit row should exist; no Updated entry was appended.
+        const auditEntries = yield* findLocationAuditEntries(created.id);
+        expect(auditEntries.some((entry) => entry.action === AuditLogAction.Updated)).toBe(false);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "fails with PaywallLocationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const error = yield* Effect.flip(
+        svc.updateLocation({ locationId: uniqueId("pw_loc_missing"), name: "x" }),
+      );
+      expect(error).toBeInstanceOf(PaywallLocationNotFoundError);
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the row unchanged",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Guarded",
+          projectId,
+          slug: uniqueSlug("update-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(svc.updateLocation({ locationId: created.id, name: "Hacked" })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findLocationRow(created.id);
+        expect(row?.name).toBe("Guarded");
+      }),
+    ).pipe(provideService),
+  );
+});
+
+describe("PaywallLocationService.archiveLocation", () => {
+  test(
+    "sets archivedAt, ends all active showings atomically, records an archived audit entry, and invalidates the cache",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const cache = yield* ProjectSchemaCache;
+
+        const { paywallId } = yield* seedPaywallWithActiveRelease({ paywallProjectId: projectId });
+        trackPaywall(paywallId);
+
+        const created = yield* svc.createLocation({
+          name: "To Archive",
+          projectId,
+          slug: uniqueSlug("archive"),
+        });
+        track(created.id);
+
+        // Assign a showing so we can confirm archive ends it in the same transaction.
+        yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+        expect((yield* findActiveShowingRows(created.id)).length).toBe(1);
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+        yield* svc.archiveLocation({ locationId: created.id });
+
+        const row = yield* findLocationRow(created.id);
+        expect(row?.archivedAt).not.toBeNull();
+
+        // The active showing must have been ended within the archive transaction.
+        expect((yield* findActiveShowingRows(created.id)).length).toBe(0);
+
+        const auditEntries = yield* findLocationAuditEntries(created.id);
+        expect(auditEntries.some((entry) => entry.action === AuditLogAction.Archived)).toBe(true);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "fails with PaywallLocationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const error = yield* Effect.flip(
+        svc.archiveLocation({ locationId: uniqueId("pw_loc_missing") }),
+      );
+      expect(error).toBeInstanceOf(PaywallLocationNotFoundError);
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the row active",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Protected",
+          projectId,
+          slug: uniqueSlug("archive-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(svc.archiveLocation({ locationId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findLocationRow(created.id);
+        expect(row?.archivedAt).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  // The transaction-rollback path (db.transaction rolls back if either the
+  // location update or the endActiveShowings update fails) can't be triggered
+  // in-process without a fault-injecting DB seam: both statements are valid
+  // drizzle updates against existing rows, so neither fails on the happy data
+  // path. Forcing a failure would require mocking the real DB, which the
+  // integration tier forbids. The atomic *success* case (both rows mutated) is
+  // covered by the happy-path test above.
+  vitestTest.todo(
+    "archiveLocation: transaction rolls back if either update fails — needs a fault-injecting DB seam (cannot mock the real DB in the integration tier)",
+  );
+});
+
+describe("PaywallLocationService.listLocations", () => {
+  test(
+    "returns active locations for the project (membership-based, not exact counts)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const slugA = uniqueSlug("list-a");
+        const slugB = uniqueSlug("list-b");
+        const absentSlug = uniqueSlug("list-absent");
+
+        const a = yield* svc.createLocation({ name: "A", projectId, slug: slugA });
+        track(a.id);
+        const b = yield* svc.createLocation({ name: "B", projectId, slug: slugB });
+        track(b.id);
+
+        const list = yield* svc.listLocations({ projectId });
+        expect(list.some((loc) => loc.id === a.id && loc.slug === slugA)).toBe(true);
+        expect(list.some((loc) => loc.id === b.id && loc.slug === slugB)).toBe(true);
+        expect(list.some((loc) => loc.slug === absentSlug)).toBe(false);
+        // Default (no includeArchived) excludes archived rows.
+        expect(list.every((loc) => loc.archivedAt === null)).toBe(true);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "includeArchived=true surfaces an archived location that the default view hides",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const slug = uniqueSlug("list-archived");
+        const created = yield* svc.createLocation({ name: "Archived", projectId, slug });
+        track(created.id);
+        yield* svc.archiveLocation({ locationId: created.id });
+
+        const defaultList = yield* svc.listLocations({ projectId });
+        expect(defaultList.some((loc) => loc.id === created.id)).toBe(false);
+
+        const withArchived = yield* svc.listLocations({ includeArchived: true, projectId });
+        const found = withArchived.find((loc) => loc.id === created.id);
+        expect(found).toBeDefined();
+        expect(found?.archivedAt).not.toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "populates activeShowing with the eagerly joined showing view",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const { paywallId, releaseId } = yield* seedPaywallWithActiveRelease({
+          paywallProjectId: projectId,
+        });
+        trackPaywall(paywallId);
+
+        const created = yield* svc.createLocation({
+          name: "With Showing",
+          projectId,
+          slug: uniqueSlug("list-showing"),
+        });
+        track(created.id);
+        const assigned = yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+
+        const list = yield* svc.listLocations({ projectId });
+        const found = list.find((loc) => loc.id === created.id);
+        expect(found).toBeDefined();
+        expect(found?.activeShowing).not.toBeNull();
+        expect(found?.activeShowing?.id).toBe(assigned.id);
+        expect(found?.activeShowing?.type).toBe("paywall_release");
+        expect(found?.activeShowing?.paywallId).toBe(paywallId);
+        // The eager paywallRelease join builds the CDN HTML URL from the release row.
+        expect(found?.activeShowing?.paywallRelease?.releaseId).toBe(releaseId);
+        expect(found?.activeShowing?.paywallRelease?.htmlUrl).toBe(
+          `${CDN_URL}/it-bucket/releases/it-release.html`,
+        );
+
+        // A location with no showing reports null.
+        const bare = yield* svc.createLocation({
+          name: "No Showing",
+          projectId,
+          slug: uniqueSlug("list-bare"),
+        });
+        track(bare.id);
+        const list2 = yield* svc.listLocations({ projectId });
+        expect(list2.find((loc) => loc.id === bare.id)?.activeShowing).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const error = yield* Effect.flip(asUnauthorized(svc.listLocations({ projectId })));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("PaywallLocationService.listLocationShowings", () => {
+  test(
+    "returns the location's showings, newest first",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const { paywallId } = yield* seedPaywallWithActiveRelease({ paywallProjectId: projectId });
+        trackPaywall(paywallId);
+
+        const created = yield* svc.createLocation({
+          name: "Showings",
+          projectId,
+          slug: uniqueSlug("showings"),
+        });
+        track(created.id);
+
+        // Two assignments: assigning the second ends the first. Both showings
+        // must be returned by the unfiltered list read.
+        const first = yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+        const second = yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+
+        const showings = yield* svc.listLocationShowings({ locationId: created.id });
+        const firstView = showings.find((s) => s.id === first.id);
+        const secondView = showings.find((s) => s.id === second.id);
+        expect(firstView).toBeDefined();
+        expect(secondView).toBeDefined();
+        // The service orders only by `startedAt desc`, but `started_at` is a
+        // whole-second `timestamp` (no fractional precision) and both
+        // assignments run within the same second, so the relative order of the
+        // two rows is a SQL tie with no deterministic resolution — asserting a
+        // strict index ordering would flake. The guaranteed, source-derivable
+        // facts are: assigning `second` ended `first` (endedAt set) and left
+        // `second` active (endedAt null).
+        expect(firstView?.endedAt).not.toBeNull();
+        expect(secondView?.endedAt).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "fails with PaywallLocationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const error = yield* Effect.flip(
+        svc.listLocationShowings({ locationId: uniqueId("pw_loc_missing") }),
+      );
+      expect(error).toBeInstanceOf(PaywallLocationNotFoundError);
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Guarded Showings",
+          projectId,
+          slug: uniqueSlug("showings-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(svc.listLocationShowings({ locationId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(provideService),
+  );
+});
+
+describe("PaywallLocationService.assignLocationShowing", () => {
+  test(
+    "ends the prior active showing, inserts the new one atomically, and records an updated audit entry",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const { paywallId, releaseId } = yield* seedPaywallWithActiveRelease({
+          paywallProjectId: projectId,
+        });
+        trackPaywall(paywallId);
+
+        const created = yield* svc.createLocation({
+          name: "Assign",
+          projectId,
+          slug: uniqueSlug("assign"),
+        });
+        track(created.id);
+
+        const first = yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+        expect(first.id.startsWith("pw_loc_show_")).toBe(true);
+
+        const second = yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+
+        // Exactly one active showing remains — the second; the first is ended.
+        const active = yield* findActiveShowingRows(created.id);
+        expect(active.length).toBe(1);
+        expect(active[0]?.id).toBe(second.id);
+
+        const all = yield* findShowingRows(created.id);
+        const firstRow = all.find((s) => s.id === first.id);
+        expect(firstRow?.endedAt).not.toBeNull();
+
+        // Inserted showing carries the resolved release + actor.
+        const secondRow = all.find((s) => s.id === second.id);
+        expect(secondRow?.paywallId).toBe(paywallId);
+        expect(secondRow?.paywallReleaseId).toBe(releaseId);
+        expect(secondRow?.type).toBe(PaywallLocationShowingType.paywallRelease);
+        expect(secondRow?.createdByUserId).toBe(CoreTestFixture.userId);
+
+        // Each assign appends its own Updated audit entry, so two exist (one per
+        // call). Select the entry recorded for the *second* assignment by its
+        // showingId rather than taking the first Updated row (which is the prior
+        // assignment's, in DB read order).
+        const auditEntries = yield* findLocationAuditEntries(created.id);
+        const updatedEntry = auditEntries.find(
+          (entry) =>
+            entry.action === AuditLogAction.Updated &&
+            typeof entry.changes === "object" &&
+            entry.changes !== null &&
+            (entry.changes as { showingId?: string }).showingId === second.id,
+        );
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toMatchObject({ paywallId, showingId: second.id });
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "rejects assignment to an archived location",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Archived Target",
+          projectId,
+          slug: uniqueSlug("assign-archived"),
+        });
+        track(created.id);
+        yield* svc.archiveLocation({ locationId: created.id });
+
+        const error = yield* Effect.flip(
+          svc.assignLocationShowing({
+            locationId: created.id,
+            paywallId: uniqueId("pw"),
+            type: "paywall_release",
+          }),
+        );
+        expect(error).toBeInstanceOf(PaywallLocationShowingValidationError);
+
+        // No new showing should have been inserted.
+        expect((yield* findShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "rejects feature_flag showings (not yet supported)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "FF Target",
+          projectId,
+          slug: uniqueSlug("assign-ff"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.assignLocationShowing({
+            featureFlagId: uniqueId("ff"),
+            locationId: created.id,
+            type: "feature_flag",
+          }),
+        );
+        expect(error).toBeInstanceOf(PaywallLocationShowingValidationError);
+        expect((yield* findShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "rejects paywall_release without a paywallId",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Missing Paywall",
+          projectId,
+          slug: uniqueSlug("assign-nopaywall"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.assignLocationShowing({ locationId: created.id, type: "paywall_release" }),
+        );
+        expect(error).toBeInstanceOf(PaywallLocationShowingValidationError);
+        expect((yield* findShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "rejects a paywall that does not exist",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Ghost Paywall",
+          projectId,
+          slug: uniqueSlug("assign-ghost"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.assignLocationShowing({
+            locationId: created.id,
+            paywallId: uniqueId("pw_missing"),
+            type: "paywall_release",
+          }),
+        );
+        expect(error).toBeInstanceOf(PaywallNotFoundError);
+        expect((yield* findShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "rejects a paywall belonging to a different project",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        // Paywall lives under a different (non-existent FK-wise but distinct)
+        // project id; the service guards on projectId mismatch before any read
+        // of releases, so a bare paywall row with a foreign projectId suffices.
+        const otherProjectId = uniqueId("proj_other");
+        const { paywallId } = yield* seedPaywallWithActiveRelease({
+          paywallProjectId: otherProjectId,
+        });
+        trackPaywall(paywallId);
+
+        const created = yield* svc.createLocation({
+          name: "Cross Project",
+          projectId,
+          slug: uniqueSlug("assign-crossproj"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.assignLocationShowing({
+            locationId: created.id,
+            paywallId,
+            type: "paywall_release",
+          }),
+        );
+        expect(error).toBeInstanceOf(PaywallNotFoundError);
+        expect((yield* findShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "rejects a paywall without an active released version",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        // Release exists but is only draft (status != released), so the active
+        // released lookup returns nothing.
+        const { paywallId } = yield* seedPaywallWithActiveRelease({
+          paywallProjectId: projectId,
+          released: false,
+        });
+        trackPaywall(paywallId);
+
+        const created = yield* svc.createLocation({
+          name: "Unreleased",
+          projectId,
+          slug: uniqueSlug("assign-unreleased"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.assignLocationShowing({
+            locationId: created.id,
+            paywallId,
+            type: "paywall_release",
+          }),
+        );
+        expect(error).toBeInstanceOf(PaywallLocationShowingValidationError);
+        expect((yield* findShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "fails with PaywallLocationNotFoundError for an unknown location id",
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const error = yield* Effect.flip(
+        svc.assignLocationShowing({
+          locationId: uniqueId("pw_loc_missing"),
+          paywallId: uniqueId("pw"),
+          type: "paywall_release",
+        }),
+      );
+      expect(error).toBeInstanceOf(PaywallLocationNotFoundError);
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "forbids callers without project:all and writes no showing",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Guard Assign",
+          projectId,
+          slug: uniqueSlug("assign-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(
+            svc.assignLocationShowing({
+              locationId: created.id,
+              paywallId: uniqueId("pw"),
+              type: "paywall_release",
+            }),
+          ),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+        expect((yield* findShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  // assignLocationShowing wraps endActiveShowings + insert in db.transaction.
+  // Verifying the rollback-on-insert-failure branch requires the insert to
+  // throw after the prior showings were ended; on real data with valid inputs
+  // the insert never fails, and forcing it would require mocking the DB (banned
+  // in the integration tier). The atomic *success* case (prior ended + new
+  // inserted in one transaction) is covered by the happy-path test above.
+  vitestTest.todo(
+    "assignLocationShowing: transaction rolls back if the insert fails after endActiveShowings — needs a fault-injecting DB seam",
+  );
+});
+
+describe("PaywallLocationService.clearLocationShowing", () => {
+  test(
+    "ends all active showings and records an updated audit entry",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const { paywallId } = yield* seedPaywallWithActiveRelease({ paywallProjectId: projectId });
+        trackPaywall(paywallId);
+
+        const created = yield* svc.createLocation({
+          name: "Clear",
+          projectId,
+          slug: uniqueSlug("clear"),
+        });
+        track(created.id);
+        yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+        expect((yield* findActiveShowingRows(created.id)).length).toBe(1);
+
+        yield* svc.clearLocationShowing({ locationId: created.id });
+
+        expect((yield* findActiveShowingRows(created.id)).length).toBe(0);
+
+        const auditEntries = yield* findLocationAuditEntries(created.id);
+        const cleared = auditEntries.find(
+          (entry) =>
+            entry.action === AuditLogAction.Updated &&
+            typeof entry.changes === "object" &&
+            entry.changes !== null &&
+            (entry.changes as { cleared?: boolean }).cleared === true,
+        );
+        expect(cleared).toBeDefined();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "is idempotent when there is no active showing (no error)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Already Clear",
+          projectId,
+          slug: uniqueSlug("clear-idempotent"),
+        });
+        track(created.id);
+
+        // No showing assigned — clearing must succeed without raising.
+        yield* svc.clearLocationShowing({ locationId: created.id });
+        expect((yield* findActiveShowingRows(created.id)).length).toBe(0);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "fails with PaywallLocationNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const error = yield* Effect.flip(
+        svc.clearLocationShowing({ locationId: uniqueId("pw_loc_missing") }),
+      );
+      expect(error).toBeInstanceOf(PaywallLocationNotFoundError);
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const created = yield* svc.createLocation({
+          name: "Guard Clear",
+          projectId,
+          slug: uniqueSlug("clear-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(svc.clearLocationShowing({ locationId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(provideService),
+  );
+});
+
+describe("PaywallLocationService.resolveLocationShowingForSdk", () => {
+  test(
+    "returns the location + showing view for an active location with an active paywall_release showing (no auth required)",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const { paywallId, releaseId } = yield* seedPaywallWithActiveRelease({
+          paywallProjectId: projectId,
+        });
+        trackPaywall(paywallId);
+
+        const slug = uniqueSlug("sdk-ok");
+        const created = yield* svc.createLocation({ name: "SDK", projectId, slug });
+        track(created.id);
+        yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+
+        const resolved = yield* svc.resolveLocationShowingForSdk({
+          locationSlug: slug,
+          projectId,
+        });
+        expect(resolved).not.toBeNull();
+        expect(resolved?.location.id).toBe(created.id);
+        expect(resolved?.location.slug).toBe(slug);
+        expect(resolved?.showing.type).toBe("paywall_release");
+        expect(resolved?.showing.paywallId).toBe(paywallId);
+        expect(resolved?.showing.paywallRelease?.releaseId).toBe(releaseId);
+        // CDN URL is built from s3Bucket, s3Key, and the configured cdnUrl.
+        expect(resolved?.showing.paywallRelease?.htmlUrl).toBe(
+          `${CDN_URL}/it-bucket/releases/it-release.html`,
+        );
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "is a public read: succeeds even for a caller without project access",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const { paywallId } = yield* seedPaywallWithActiveRelease({ paywallProjectId: projectId });
+        trackPaywall(paywallId);
+
+        const slug = uniqueSlug("sdk-public");
+        const created = yield* svc.createLocation({ name: "Public", projectId, slug });
+        track(created.id);
+        yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+
+        // Same call, but re-authenticated as a principal with no project access:
+        // it must NOT raise ActionForbiddenError (no auth gate on this method).
+        const resolved = yield* asUnauthorized(
+          svc.resolveLocationShowingForSdk({ locationSlug: slug, projectId }),
+        );
+        expect(resolved).not.toBeNull();
+        expect(resolved?.location.id).toBe(created.id);
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "returns null when the location slug does not exist",
+    Effect.gen(function* () {
+      const svc = yield* PaywallLocationService;
+      const resolved = yield* svc.resolveLocationShowingForSdk({
+        locationSlug: uniqueSlug("sdk-missing"),
+        projectId,
+      });
+      expect(resolved).toBeNull();
+    }).pipe(
+      Effect.provide(PaywallLocationServiceTestLayer),
+      Effect.provide(PaywallAssetConfigTest),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "returns null when the matching location is archived",
+    withCleanup((track, trackPaywall) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const { paywallId } = yield* seedPaywallWithActiveRelease({ paywallProjectId: projectId });
+        trackPaywall(paywallId);
+
+        const slug = uniqueSlug("sdk-archived");
+        const created = yield* svc.createLocation({ name: "Archived SDK", projectId, slug });
+        track(created.id);
+        yield* svc.assignLocationShowing({
+          locationId: created.id,
+          paywallId,
+          type: "paywall_release",
+        });
+        yield* svc.archiveLocation({ locationId: created.id });
+
+        const resolved = yield* svc.resolveLocationShowingForSdk({
+          locationSlug: slug,
+          projectId,
+        });
+        expect(resolved).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  test(
+    "returns null when the location has no active showing",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* PaywallLocationService;
+        const slug = uniqueSlug("sdk-noshowing");
+        const created = yield* svc.createLocation({ name: "No Showing SDK", projectId, slug });
+        track(created.id);
+
+        const resolved = yield* svc.resolveLocationShowingForSdk({
+          locationSlug: slug,
+          projectId,
+        });
+        expect(resolved).toBeNull();
+      }),
+    ).pipe(provideService),
+  );
+
+  // The "active showing exists but its type is not paywall_release" and
+  // "paywall/paywallRelease relations are missing" branches cannot be reached
+  // through the public service surface: assignLocationShowing rejects
+  // feature_flag and any input without a resolvable active released paywall, so
+  // a paywall_release showing always carries both relations. Reaching these
+  // branches would require inserting a malformed showing row directly, which
+  // tests private/unreachable state rather than the service contract.
+  vitestTest.todo(
+    "resolveLocationShowingForSdk: returns null for a non-paywall_release showing / missing relations — unreachable via the public API (assign rejects those inputs)",
+  );
+});
diff --git a/packages/core/test/services/paywallLocations/helpers.test.ts b/packages/core/test/services/paywallLocations/helpers.test.ts
new file mode 100644
index 000000000..dff5d2280
--- /dev/null
+++ b/packages/core/test/services/paywallLocations/helpers.test.ts
@@ -0,0 +1,244 @@
+import { PaywallLocationShowingType } from "@voidhash/db";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  type ShowingWithRelations,
+  toDbShowingType,
+  toShowingTypeLabel,
+  toShowingView,
+} from "../../../src/services/paywallLocations/helpers.ts";
+
+/**
+ * Fresh `ShowingWithRelations` fixture per test. Defaults to a feature-flag
+ * showing with both relations absent so individual cases only override the
+ * fields they exercise.
+ */
+const showing = (overrides: Partial<ShowingWithRelations> = {}): ShowingWithRelations => ({
+  createdAt: new Date("2026-01-02T00:00:00.000Z"),
+  createdByUserId: "user-1",
+  endedAt: new Date("2026-02-01T00:00:00.000Z"),
+  featureFlagId: null,
+  id: "showing-1",
+  paywall: null,
+  paywallId: null,
+  paywallLocationId: "loc-1",
+  paywallRelease: null,
+  paywallReleaseId: null,
+  projectId: "project-1",
+  startedAt: new Date("2026-01-01T00:00:00.000Z"),
+  type: PaywallLocationShowingType.paywallRelease,
+  updatedAt: new Date("2026-01-03T00:00:00.000Z"),
+  ...overrides,
+});
+
+const urlConfig = {
+  cdnUrl: "https://cdn.example.com",
+  publicBaseUrl: "https://api.example.com",
+};
+
+/** Editor-release relation fixture: no code-deploy provenance. */
+const editorRelease = (
+  overrides: Partial<NonNullable<ShowingWithRelations["paywallRelease"]>> = {},
+): NonNullable<ShowingWithRelations["paywallRelease"]> => ({
+  contentHash: null,
+  id: "rel-1",
+  publishedAt: new Date("2026-01-05T00:00:00.000Z"),
+  runtimeConfig: null,
+  s3Bucket: "paywalls",
+  s3Key: "project-1/rel-1/index.html",
+  version: 3,
+  ...overrides,
+});
+
+describe("toShowingTypeLabel", () => {
+  it.each([
+    [PaywallLocationShowingType.paywallRelease, "paywall_release"],
+    [PaywallLocationShowingType.featureFlag, "feature_flag"],
+  ])("maps db type %i to label %s", (type, label) => {
+    expect(toShowingTypeLabel(type)).toBe(label);
+  });
+
+  it("defaults an unknown numeric type to 'paywall_release'", () => {
+    expect(toShowingTypeLabel(999)).toBe("paywall_release");
+    expect(toShowingTypeLabel(0)).toBe("paywall_release");
+  });
+});
+
+describe("toDbShowingType", () => {
+  it.each([
+    ["paywall_release", PaywallLocationShowingType.paywallRelease],
+    ["feature_flag", PaywallLocationShowingType.featureFlag],
+  ] as const)("maps label %s to db type %i", (label, type) => {
+    expect(toDbShowingType(label)).toBe(type);
+  });
+
+  it("round-trips with toShowingTypeLabel", () => {
+    expect(toShowingTypeLabel(toDbShowingType("feature_flag"))).toBe("feature_flag");
+    expect(toShowingTypeLabel(toDbShowingType("paywall_release"))).toBe("paywall_release");
+  });
+});
+
+describe("toShowingView", () => {
+  it("preserves all scalar fields and maps the type via toShowingTypeLabel", () => {
+    const row = showing({
+      createdAt: new Date("2026-01-02T00:00:00.000Z"),
+      createdByUserId: "user-42",
+      endedAt: new Date("2026-02-01T00:00:00.000Z"),
+      featureFlagId: "ff-1",
+      id: "showing-99",
+      paywallId: "pw-1",
+      paywallLocationId: "loc-99",
+      paywallReleaseId: "rel-1",
+      projectId: "project-99",
+      startedAt: new Date("2026-01-01T00:00:00.000Z"),
+      type: PaywallLocationShowingType.featureFlag,
+      updatedAt: new Date("2026-01-03T00:00:00.000Z"),
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.id).toBe("showing-99");
+    expect(view.projectId).toBe("project-99");
+    expect(view.paywallLocationId).toBe("loc-99");
+    expect(view.type).toBe("feature_flag");
+    expect(view.paywallId).toBe("pw-1");
+    expect(view.paywallReleaseId).toBe("rel-1");
+    expect(view.featureFlagId).toBe("ff-1");
+    expect(view.startedAt).toEqual(new Date("2026-01-01T00:00:00.000Z"));
+    expect(view.endedAt).toEqual(new Date("2026-02-01T00:00:00.000Z"));
+    expect(view.createdByUserId).toBe("user-42");
+    expect(view.createdAt).toEqual(new Date("2026-01-02T00:00:00.000Z"));
+    expect(view.updatedAt).toEqual(new Date("2026-01-03T00:00:00.000Z"));
+  });
+
+  it("maps a present paywall relation into the view", () => {
+    const row = showing({
+      paywall: { id: "pw-1", name: "Main", slug: "main" },
+      paywallId: "pw-1",
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.paywall).toEqual({ id: "pw-1", name: "Main", slug: "main" });
+  });
+
+  it("builds the CDN htmlUrl from s3Bucket, s3Key, and cdnUrl for editor releases", () => {
+    const row = showing({
+      paywallRelease: editorRelease(),
+      paywallReleaseId: "rel-1",
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.paywallRelease).toEqual({
+      htmlUrl: "https://cdn.example.com/paywalls/project-1/rel-1/index.html",
+      publishedAt: new Date("2026-01-05T00:00:00.000Z"),
+      releaseId: "rel-1",
+      runtime: null,
+      version: 3,
+    });
+  });
+
+  it("builds the publicBaseUrl htmlUrl and runtime block for code releases", () => {
+    const contentHash = "a".repeat(64);
+    const row = showing({
+      paywallRelease: editorRelease({
+        contentHash,
+        id: "rel-7",
+        runtimeConfig: {
+          productSlugs: ["yearly", "monthly"],
+          variables: { accentColor: "#16a34a", showBadge: true, trialDays: 7 },
+        },
+        s3Bucket: "paywalls",
+        s3Key: `p/${contentHash}/index.html`,
+        version: 4,
+      }),
+      paywallReleaseId: "rel-7",
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.paywallRelease).toEqual({
+      htmlUrl: `https://api.example.com/p/${contentHash}/index.html`,
+      publishedAt: new Date("2026-01-05T00:00:00.000Z"),
+      releaseId: "rel-7",
+      runtime: {
+        contentHash,
+        productSlugs: ["yearly", "monthly"],
+        variables: { accentColor: "#16a34a", showBadge: true, trialDays: 7 },
+      },
+      version: 4,
+    });
+  });
+
+  it("leaves runtime null when contentHash is set but runtimeConfig is missing", () => {
+    const contentHash = "b".repeat(64);
+    const row = showing({
+      paywallRelease: editorRelease({ contentHash, runtimeConfig: null }),
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.paywallRelease?.runtime).toBeNull();
+    // Still served from the content-addressed layout — contentHash decides.
+    expect(view.paywallRelease?.htmlUrl).toBe("https://api.example.com/project-1/rel-1/index.html");
+  });
+
+  it("preserves a null publishedAt on the paywallRelease relation", () => {
+    const row = showing({
+      paywallRelease: editorRelease({ id: "rel-2", publishedAt: null, s3Key: "k", version: 1 }),
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.paywallRelease?.publishedAt).toBeNull();
+  });
+
+  it("returns null paywall when the relation is null", () => {
+    const view = toShowingView(showing({ paywall: null }), urlConfig);
+    expect(view.paywall).toBeNull();
+  });
+
+  it("returns null paywall when the relation is undefined", () => {
+    const view = toShowingView(showing({ paywall: undefined }), urlConfig);
+    expect(view.paywall).toBeNull();
+  });
+
+  it("returns null paywallRelease when the relation is null", () => {
+    const view = toShowingView(showing({ paywallRelease: null }), urlConfig);
+    expect(view.paywallRelease).toBeNull();
+  });
+
+  it("returns null paywallRelease when the relation is undefined", () => {
+    const view = toShowingView(showing({ paywallRelease: undefined }), urlConfig);
+    expect(view.paywallRelease).toBeNull();
+  });
+
+  it("passes through null paywallId, paywallReleaseId, and featureFlagId as-is", () => {
+    const row = showing({
+      featureFlagId: null,
+      paywallId: null,
+      paywallReleaseId: null,
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.paywallId).toBeNull();
+    expect(view.paywallReleaseId).toBeNull();
+    expect(view.featureFlagId).toBeNull();
+  });
+
+  it("passes through string paywallId, paywallReleaseId, and featureFlagId as-is", () => {
+    const row = showing({
+      featureFlagId: "ff-9",
+      paywallId: "pw-9",
+      paywallReleaseId: "rel-9",
+    });
+
+    const view = toShowingView(row, urlConfig);
+
+    expect(view.paywallId).toBe("pw-9");
+    expect(view.paywallReleaseId).toBe("rel-9");
+    expect(view.featureFlagId).toBe("ff-9");
+  });
+});
diff --git a/packages/core/test/services/paywalls/PaywallService.integration.test.ts b/packages/core/test/services/paywalls/PaywallService.integration.test.ts
new file mode 100644
index 000000000..2a0202d39
--- /dev/null
+++ b/packages/core/test/services/paywalls/PaywallService.integration.test.ts
@@ -0,0 +1,593 @@
+/**
+ * Integration tests for {@link PaywallService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * Each test drives the service end-to-end and verifies the *persisted* side
+ * effects rather than just the method's return value:
+ *  - the `paywall` row written / removed in MySQL,
+ *  - the matching append-only `audit_log` row (entity, action, actor).
+ *
+ * Conventions mirror `PerkService.integration.test.ts`:
+ *  - Every test shares the one seeded fixture project ({@link CoreTestFixture})
+ *    but cleans up after itself: {@link withPaywallCleanup} deletes the paywalls
+ *    (and their append-only audit rows) it created on exit, success or failure.
+ *    The global teardown sweep is only a backstop. Assertions stay
+ *    membership-based (never exact `getPaywalls` counts) and slugs are unique
+ *    per call so a leftover row from a crashed run can't collide.
+ *  - Permission tests reuse the default authenticated effect and re-authenticate
+ *    just the call under test via {@link asUnauthorized}; the inner provision
+ *    shadows the harness's default full-permission session.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields,
+ *    and always paired with a DB-state assertion on the failure path.
+ *
+ * Note: `getPaywallById`/`deletePaywall` fetch the row *before* the permission
+ * check, then authorize against the fetched row's `projectId`. A paywall under a
+ * different project therefore reaches the permission check and is rejected — the
+ * "belongs to a different project" case below seeds exactly that via a raw
+ * insert under a fabricated project id the session has no access to.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { PaywallService } from "@voidhash/core/services";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  PaywallNotFoundError,
+  PaywallSlugAlreadyExistsError,
+} from "@voidhash/core/domain/paywall/Paywall";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  paywalls,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so slugs stay unique even within the same millisecond. */
+let slugSeq = 0;
+const uniqueSlug = (label: string) => `it-paywall-${label}-${Date.now()}-${slugSeq++}`;
+
+/** Read a paywall row straight from the database, bypassing the service. */
+const findPaywallRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.paywalls.findFirst({ where: { id } });
+  });
+
+/** Count paywall rows with a given slug in the fixture project. */
+const countPaywallsWithSlug = (slug: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const rows = yield* db
+      .select({ id: paywalls.id })
+      .from(paywalls)
+      .where(and(eq(paywalls.projectId, projectId), eq(paywalls.slug, slug)));
+    return rows.length;
+  });
+
+/** All audit-log rows recorded for a given paywall entity. */
+const findPaywallAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(eq(auditLogs.entityType, AuditLogEntityType.Paywall), eq(auditLogs.entityId, entityId)),
+      );
+  });
+
+/** Insert a paywall row directly, bypassing the service (and its auth check). */
+const insertPaywallRow = (row: {
+  readonly id: string;
+  readonly name: string;
+  readonly projectId: string;
+  readonly slug: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(paywalls).values(row);
+  });
+
+/**
+ * Delete the given paywalls and their audit rows. Audit entries are append-only
+ * and survive a `deletePaywall`, so they are cleared by entity id too. Each
+ * delete is `ignore`d so a missing row never turns the finalizer into a failure.
+ */
+const cleanupCreatedPaywalls = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db
+      .delete(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.Paywall),
+          inArray(auditLogs.entityId, targets),
+        ),
+      )
+      .pipe(Effect.ignore);
+    yield* db.delete(paywalls).where(inArray(paywalls.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every paywall it creates is removed afterward, regardless
+ * of how the test exits. Pass each created paywall id to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withPaywallCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedPaywalls(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("PaywallService.getPaywalls", () => {
+  test(
+    "returns paywalls created under the project",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const slugA = uniqueSlug("list-a");
+        const slugB = uniqueSlug("list-b");
+        const absentSlug = uniqueSlug("list-absent");
+
+        const a = yield* paywallService.createPaywall({ name: "A", projectId, slug: slugA });
+        track(a.id);
+        const b = yield* paywallService.createPaywall({ name: "B", projectId, slug: slugB });
+        track(b.id);
+
+        const list = yield* paywallService.getPaywalls(projectId);
+        expect(list.some((pw) => pw.id === a.id && pw.slug === slugA)).toBe(true);
+        expect(list.some((pw) => pw.id === b.id && pw.slug === slugB)).toBe(true);
+        expect(list.some((pw) => pw.slug === absentSlug)).toBe(false);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns a list (possibly empty) for a project with no matching slug",
+    Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const absentSlug = uniqueSlug("empty");
+
+      // The fixture project is shared, so other tests may have left rows; assert
+      // the contract (an array) and that our never-created slug is absent.
+      const list = yield* paywallService.getPaywalls(projectId);
+      expect(Array.isArray(list)).toBe(true);
+      expect(list.some((pw) => pw.slug === absentSlug)).toBe(false);
+    }).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const error = yield* Effect.flip(asUnauthorized(paywallService.getPaywalls(projectId)));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaywallService.getPaywallById", () => {
+  test(
+    "returns the matching paywall after passing the post-fetch permission check",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const slug = uniqueSlug("by-id");
+        const created = yield* paywallService.createPaywall({ name: "Lookup", projectId, slug });
+        track(created.id);
+
+        const paywall = yield* paywallService.getPaywallById(created.id);
+        expect(paywall.id).toBe(created.id);
+        expect(paywall.name).toBe("Lookup");
+        expect(paywall.slug).toBe(slug);
+        expect(paywall.projectId).toBe(projectId);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaywallNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const missingId = `pw_missing_${Date.now()}`;
+      const error = yield* Effect.flip(paywallService.getPaywallById(missingId));
+      expect(error).toBeInstanceOf(PaywallNotFoundError);
+
+      // Nothing was created for the missing id.
+      const row = yield* findPaywallRow(missingId);
+      expect(row).toBeUndefined();
+    }).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids access to a paywall belonging to a different project",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        // Seed a paywall under a project the default session has no access to.
+        // The fetch succeeds, then the post-fetch permission check against the
+        // foreign projectId rejects with ActionForbiddenError.
+        const foreignProjectId = `it-other-project-${Date.now()}-${slugSeq++}`;
+        const id = `pw_foreign_${Date.now()}_${slugSeq++}`;
+        yield* insertPaywallRow({
+          id,
+          name: "Foreign",
+          projectId: foreignProjectId,
+          slug: uniqueSlug("foreign"),
+        });
+        track(id);
+
+        const error = yield* Effect.flip(paywallService.getPaywallById(id));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        // The row is untouched by the read.
+        const row = yield* findPaywallRow(id);
+        expect(row?.projectId).toBe(foreignProjectId);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all even for an accessible paywall",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const slug = uniqueSlug("by-id-forbidden");
+        const created = yield* paywallService.createPaywall({ name: "Guarded", projectId, slug });
+        track(created.id);
+
+        const error = yield* Effect.flip(asUnauthorized(paywallService.getPaywallById(created.id)));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaywallService.createPaywall", () => {
+  test(
+    "persists the paywall and records a created audit entry",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+
+        const name = "Integration Paywall";
+        const slug = uniqueSlug("create");
+
+        const created = yield* paywallService.createPaywall({ name, projectId, slug });
+        track(created.id);
+        // generateId("paywall") uses the "pw_" prefix.
+        expect(created.id.startsWith("pw_")).toBe(true);
+
+        const row = yield* findPaywallRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.name).toBe(name);
+        expect(row?.slug).toBe(slug);
+        expect(row?.projectId).toBe(projectId);
+
+        const auditEntries = yield* findPaywallAuditEntries(created.id);
+        const createdEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.Paywall);
+        expect(createdEntry?.projectId).toBe(projectId);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({ snapshot: { name, slug } });
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a duplicate slug within the project and writes no second row",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const slug = uniqueSlug("duplicate");
+
+        const first = yield* paywallService.createPaywall({ name: "First", projectId, slug });
+        track(first.id);
+
+        const error = yield* Effect.flip(
+          paywallService.createPaywall({ name: "Second", projectId, slug }),
+        );
+        expect(error).toBeInstanceOf(PaywallSlugAlreadyExistsError);
+        if (error instanceof PaywallSlugAlreadyExistsError) {
+          expect(error.slug).toBe(slug);
+        }
+
+        expect(yield* countPaywallsWithSlug(slug)).toBe(1);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and writes nothing",
+    // No cleanup wrapper: a forbidden create writes no row.
+    Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const slug = uniqueSlug("forbidden");
+
+      const error = yield* Effect.flip(
+        asUnauthorized(paywallService.createPaywall({ name: "Nope", projectId, slug })),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      expect(yield* countPaywallsWithSlug(slug)).toBe(0);
+    }).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaywallService.deletePaywall", () => {
+  test(
+    "removes the paywall and records a deleted audit entry",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+
+        const created = yield* paywallService.createPaywall({
+          name: "Doomed",
+          projectId,
+          slug: uniqueSlug("delete"),
+        });
+        track(created.id);
+
+        yield* paywallService.deletePaywall({ paywallId: created.id });
+
+        // State assertion: the row is gone after delete.
+        const row = yield* findPaywallRow(created.id);
+        expect(row).toBeUndefined();
+
+        const lookup = yield* Effect.flip(paywallService.getPaywallById(created.id));
+        expect(lookup).toBeInstanceOf(PaywallNotFoundError);
+
+        // The append-only deleted audit entry survives the row delete.
+        const auditEntries = yield* findPaywallAuditEntries(created.id);
+        const deletedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.entityType).toBe(AuditLogEntityType.Paywall);
+        expect(deletedEntry?.projectId).toBe(projectId);
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(deletedEntry?.actorType).toBe(AuditLogActorType.User);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaywallNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const error = yield* Effect.flip(
+        paywallService.deletePaywall({ paywallId: `pw_missing_${Date.now()}` }),
+      );
+      expect(error).toBeInstanceOf(PaywallNotFoundError);
+    }).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the paywall",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const created = yield* paywallService.createPaywall({
+          name: "Protected",
+          projectId,
+          slug: uniqueSlug("delete-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(paywallService.deletePaywall({ paywallId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        // The paywall is untouched by the forbidden delete.
+        const row = yield* findPaywallRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.id).toBe(created.id);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaywallService.renamePaywall", () => {
+  test(
+    "updates the name, keeps the slug fixed, and records an updated audit entry",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const slug = uniqueSlug("rename");
+        const created = yield* paywallService.createPaywall({
+          name: "Original",
+          projectId,
+          slug,
+        });
+        track(created.id);
+
+        yield* paywallService.renamePaywall({ name: "Renamed", paywallId: created.id });
+
+        // The name changed but the slug is immutable across a rename.
+        const row = yield* findPaywallRow(created.id);
+        expect(row?.name).toBe("Renamed");
+        expect(row?.slug).toBe(slug);
+
+        const auditEntries = yield* findPaywallAuditEntries(created.id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toEqual({
+          after: { name: "Renamed" },
+          before: { name: "Original" },
+        });
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PaywallNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const paywallService = yield* PaywallService;
+      const error = yield* Effect.flip(
+        paywallService.renamePaywall({ name: "X", paywallId: `pw_missing_${Date.now()}` }),
+      );
+      expect(error).toBeInstanceOf(PaywallNotFoundError);
+    }).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the original name",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const created = yield* paywallService.createPaywall({
+          name: "Keep",
+          projectId,
+          slug: uniqueSlug("rename-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(paywallService.renamePaywall({ name: "Hacked", paywallId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findPaywallRow(created.id);
+        expect(row?.name).toBe("Keep");
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PaywallService.archivePaywall / restorePaywall", () => {
+  test(
+    "archiving hides the paywall from the default list but keeps it with includeArchived",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const slug = uniqueSlug("archive");
+        const created = yield* paywallService.createPaywall({
+          name: "ToArchive",
+          projectId,
+          slug,
+        });
+        track(created.id);
+
+        yield* paywallService.archivePaywall({ paywallId: created.id });
+
+        // archivedAt is stamped on the row.
+        const row = yield* findPaywallRow(created.id);
+        expect(row?.archivedAt).toBeInstanceOf(Date);
+
+        // Dropped from the default listing, present when archived are included.
+        const activeList = yield* paywallService.getPaywalls(projectId);
+        expect(activeList.some((pw) => pw.id === created.id)).toBe(false);
+        const withArchived = yield* paywallService.getPaywalls(projectId, true);
+        expect(withArchived.some((pw) => pw.id === created.id)).toBe(true);
+
+        const auditEntries = yield* findPaywallAuditEntries(created.id);
+        expect(
+          auditEntries.some((entry) => entry.action === AuditLogAction.Archived),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "restoring clears archivedAt and returns the paywall to the default list",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const created = yield* paywallService.createPaywall({
+          name: "ToRestore",
+          projectId,
+          slug: uniqueSlug("restore"),
+        });
+        track(created.id);
+
+        yield* paywallService.archivePaywall({ paywallId: created.id });
+        yield* paywallService.restorePaywall({ paywallId: created.id });
+
+        const row = yield* findPaywallRow(created.id);
+        expect(row?.archivedAt).toBeNull();
+
+        const activeList = yield* paywallService.getPaywalls(projectId);
+        expect(activeList.some((pw) => pw.id === created.id)).toBe(true);
+
+        const auditEntries = yield* findPaywallAuditEntries(created.id);
+        expect(
+          auditEntries.some((entry) => entry.action === AuditLogAction.Restored),
+        ).toBe(true);
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids archiving for callers without project:all and leaves the row active",
+    withPaywallCleanup((track) =>
+      Effect.gen(function* () {
+        const paywallService = yield* PaywallService;
+        const created = yield* paywallService.createPaywall({
+          name: "Guarded",
+          projectId,
+          slug: uniqueSlug("archive-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(paywallService.archivePaywall({ paywallId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findPaywallRow(created.id);
+        expect(row?.archivedAt).toBeNull();
+      }),
+    ).pipe(Effect.provide(PaywallService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/perkGrants/PerkGrantService.integration.test.ts b/packages/core/test/services/perkGrants/PerkGrantService.integration.test.ts
new file mode 100644
index 000000000..31d1538eb
--- /dev/null
+++ b/packages/core/test/services/perkGrants/PerkGrantService.integration.test.ts
@@ -0,0 +1,753 @@
+/**
+ * Integration tests for {@link PerkGrantService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * `PerkGrantService` reconciles a person's `person_unlocked_perk` rows against
+ * their `subscription` / `purchase` rows and the product→perk catalog. There is
+ * no audit trail or schema-cache invalidation on this path, so every assertion
+ * is against the *persisted* `person_unlocked_perk` rows read straight back from
+ * the database after a `syncUnlockedPerks` call.
+ *
+ * Each test builds its own isolated entitlement graph under the shared fixture
+ * project ({@link CoreTestFixture}): a person, a perk, a product linked to that
+ * perk via `product_perk`, a payment-provider configuration + configuration
+ * product, and the subscription / purchase rows that should (or should not)
+ * grant the perk. {@link withGraphCleanup} deletes every row each test creates
+ * on exit, success or failure (the global sweep is only a backstop). Assertions
+ * stay membership-based — a test only inspects the perks of the person it
+ * seeded — and ids are unique per call so a leftover row from a crashed run
+ * can't collide.
+ *
+ * Conventions reused from `PerkService.integration.test.ts`:
+ *  - Auth flows through {@link CoreAuthSession.authenticate}; the permission test
+ *    re-authenticates just the guarded call via {@link asUnauthorized}.
+ *  - Typed failures are asserted with `Effect.flip` + `instanceof`, paired with
+ *    a DB-state assertion proving the failure wrote nothing.
+ */
+import { PurchaseType, SubscriptionStatus } from "@voidhash/lib";
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { PerkGrantService } from "@voidhash/core/services";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { PersonNotFoundError } from "@voidhash/core/domain/person/Person";
+import { generateId } from "@voidhash/core/utils/generate-id";
+import {
+  Db,
+  type DbTransaction,
+  PersonUnlockedPerkStatus,
+  ProviderEnvironment,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  perks,
+  personUnlockedPerks,
+  persons,
+  productPerks,
+  products,
+  purchases,
+  subscriptions,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+/**
+ * Runs `body` in a real DB transaction, threading the `tx` handle to
+ * `syncUnlockedPerks` (which now reconciles on the caller's transaction). The
+ * production caller — `PurchaseProcessingService` — drives it the same way,
+ * inside its own purchase-write `db.transaction`.
+ */
+const inTransaction = <A, E, R>(body: (tx: DbTransaction) => Effect.Effect<A, E, R>) =>
+  Effect.flatMap(Db, (db) => db.transaction(body));
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so generated provider keys stay unique within a millisecond. */
+let seq = 0;
+const uniqueKey = (label: string) => `it-perkgrant-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * Tracks every row a test creates so {@link withGraphCleanup} can delete them on
+ * exit. Keyed by table; ids are accumulated lazily while the body runs.
+ */
+type CreatedIds = {
+  readonly persons: string[];
+  readonly perks: string[];
+  readonly products: string[];
+  readonly productPerks: string[];
+  readonly configurations: string[];
+  readonly configurationProducts: string[];
+  readonly subscriptions: string[];
+  readonly purchases: string[];
+};
+
+const emptyCreated = (): CreatedIds => ({
+  configurationProducts: [],
+  configurations: [],
+  perks: [],
+  productPerks: [],
+  products: [],
+  purchases: [],
+  persons: [],
+  subscriptions: [],
+});
+
+/** Read all unlocked-perk rows for a person straight from the database. */
+const findUnlockedPerks = (personId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personUnlockedPerks.findMany({
+      where: { personId },
+    });
+  });
+
+/**
+ * Delete every tracked row, deepest foreign-key dependents first. `person_perk`
+ * rows the service inserts during the test are also captured (by re-reading the
+ * person's perks at cleanup time) so nothing leaks. Each delete is `ignore`d so
+ * a missing row never turns the finalizer into a failure.
+ */
+const cleanupGraph = (created: CreatedIds) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+
+    // The service inserts person_unlocked_perk rows we don't track individually;
+    // sweep them by personId so created grants are removed too. This also covers
+    // every directly-seeded grant for the person.
+    for (const personId of created.persons) {
+      yield* db
+        .delete(personUnlockedPerks)
+        .where(eq(personUnlockedPerks.personId, personId))
+        .pipe(Effect.ignore);
+    }
+
+    // Deepest foreign-key dependents first. Each delete is `ignore`d so a missing
+    // row never turns the finalizer into a failure.
+    if (created.subscriptions.length > 0) {
+      yield* db
+        .delete(subscriptions)
+        .where(inArray(subscriptions.id, created.subscriptions))
+        .pipe(Effect.ignore);
+    }
+    if (created.purchases.length > 0) {
+      yield* db
+        .delete(purchases)
+        .where(inArray(purchases.id, created.purchases))
+        .pipe(Effect.ignore);
+    }
+    if (created.productPerks.length > 0) {
+      yield* db
+        .delete(productPerks)
+        .where(inArray(productPerks.id, created.productPerks))
+        .pipe(Effect.ignore);
+    }
+    if (created.configurationProducts.length > 0) {
+      yield* db
+        .delete(paymentProviderConfigurationProducts)
+        .where(inArray(paymentProviderConfigurationProducts.id, created.configurationProducts))
+        .pipe(Effect.ignore);
+    }
+    if (created.configurations.length > 0) {
+      yield* db
+        .delete(paymentProviderConfigurations)
+        .where(inArray(paymentProviderConfigurations.id, created.configurations))
+        .pipe(Effect.ignore);
+    }
+    if (created.products.length > 0) {
+      yield* db.delete(products).where(inArray(products.id, created.products)).pipe(Effect.ignore);
+    }
+    if (created.perks.length > 0) {
+      yield* db.delete(perks).where(inArray(perks.id, created.perks)).pipe(Effect.ignore);
+    }
+    if (created.persons.length > 0) {
+      yield* db.delete(persons).where(inArray(persons.id, created.persons)).pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every row it creates is removed afterward, regardless of
+ * how the test exits. The body receives the mutable {@link CreatedIds} record to
+ * push ids onto; cleanup reads it lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withGraphCleanup = <E, R>(
+  body: (created: CreatedIds) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const created = emptyCreated();
+  return body(created).pipe(Effect.ensuring(cleanupGraph(created)));
+};
+
+/**
+ * Seed a person + a perk + a product wired to that perk via `product_perk`,
+ * plus the payment-provider configuration and configuration product that
+ * subscriptions / purchases reference. Returns the ids needed to attach
+ * entitlements. All rows are tracked for cleanup.
+ */
+const seedEntitlementGraph = (created: CreatedIds, label: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+
+    const personId = generateId("person");
+    const perkId = generateId("perk");
+    const productId = generateId("product");
+    const productPerkId = generateId("productPerk");
+    const configurationId = generateId("paymentProviderConfiguration");
+    const configurationProductId = generateId("paymentProviderProduct");
+
+    yield* db.insert(persons).values({
+      email: null,
+      id: personId,
+      name: `IT PerkGrant ${label}`,
+      projectId,
+    });
+    yield* db.insert(perks).values({
+      id: perkId,
+      name: `Perk ${label}`,
+      projectId,
+      slug: uniqueKey(`perk-${label}`),
+    });
+    yield* db.insert(products).values({
+      id: productId,
+      name: `Product ${label}`,
+      projectId,
+      slug: uniqueKey(`product-${label}`),
+    });
+    yield* db.insert(productPerks).values({
+      id: productPerkId,
+      perkId,
+      productId,
+    });
+    yield* db.insert(paymentProviderConfigurations).values({
+      id: configurationId,
+      name: `Config ${label}`,
+      paymentProviderKey: uniqueKey(`config-${label}`),
+      projectId,
+      providerId: "app_store",
+    });
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      id: configurationProductId,
+      paymentProviderConfigurationId: configurationId,
+      productId,
+      providerProductKey: uniqueKey(`pp-${label}`),
+    });
+
+    created.persons.push(personId);
+    created.perks.push(perkId);
+    created.products.push(productId);
+    created.productPerks.push(productPerkId);
+    created.configurations.push(configurationId);
+    created.configurationProducts.push(configurationProductId);
+
+    return { configurationProductId, perkId, personId, productId } as const;
+  });
+
+/** Insert a subscription for the given person + configuration product. */
+const seedSubscription = (
+  created: CreatedIds,
+  args: {
+    readonly personId: string;
+    readonly configurationProductId: string;
+    readonly status: number;
+    readonly expiresAt: Date | null;
+  },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("subscription");
+    const now = new Date();
+    yield* db.insert(subscriptions).values({
+      expiresAt: args.expiresAt,
+      id,
+      initialTransactionId: uniqueKey("sub-init"),
+      latestTransactionId: uniqueKey("sub-latest"),
+      paymentProviderConfigurationProductId: args.configurationProductId,
+      personId: args.personId,
+      purchasedAt: now,
+      startsAt: now,
+      status: args.status,
+      storeSubscriptionId: uniqueKey("sub-store"),
+    });
+    created.subscriptions.push(id);
+    return id;
+  });
+
+/** Insert a purchase for the given person + configuration product. */
+const seedPurchase = (
+  created: CreatedIds,
+  args: {
+    readonly personId: string;
+    readonly configurationProductId: string;
+    readonly refundedAt?: Date | null;
+    readonly revokedAt?: Date | null;
+  },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("purchase");
+    yield* db.insert(purchases).values({
+      id,
+      paymentProviderConfigurationProductId: args.configurationProductId,
+      personId: args.personId,
+      providerEnvironment: ProviderEnvironment.Production,
+      providerKey: uniqueKey("pur"),
+      refundedAt: args.refundedAt ?? null,
+      revokedAt: args.revokedAt ?? null,
+      type: PurchaseType.OneTime,
+    });
+    created.purchases.push(id);
+    return id;
+  });
+
+/** Insert a person_unlocked_perk row directly (to set up reactivate/expire). */
+const seedUnlockedPerk = (
+  created: CreatedIds,
+  args: {
+    readonly personId: string;
+    readonly perkId: string;
+    readonly status: number;
+    readonly unlockedBySubscriptionId?: string | null;
+    readonly unlockedByPurchaseId?: string | null;
+    readonly expiresAt?: Date | null;
+  },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("personUnlockedPerk");
+    yield* db.insert(personUnlockedPerks).values({
+      expiresAt: args.expiresAt ?? null,
+      id,
+      perkId: args.perkId,
+      personId: args.personId,
+      status: args.status,
+      unlockedByPurchaseId: args.unlockedByPurchaseId ?? null,
+      unlockedBySubscriptionId: args.unlockedBySubscriptionId ?? null,
+    });
+    return id;
+  });
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("PerkGrantService.syncUnlockedPerks", () => {
+  test(
+    "grants a perk for an active subscription, propagating its expiresAt",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "sub-create",
+        );
+        // The `expires_at` column is a plain MySQL TIMESTAMP (no fractional
+        // seconds), so the millisecond component is dropped on round-trip; zero
+        // it here to keep the `getTime()` comparison exact.
+        const expiresAt = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000);
+        expiresAt.setMilliseconds(0);
+        const subscriptionId = yield* seedSubscription(created, {
+          configurationProductId,
+          expiresAt,
+          personId,
+          status: SubscriptionStatus.Active,
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected.length).toBe(1);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const granted = rows.find((row) => row.perkId === perkId);
+        expect(granted).toBeDefined();
+        expect(granted?.status).toBe(PersonUnlockedPerkStatus.Active);
+        expect(granted?.unlockedBySubscriptionId).toBe(subscriptionId);
+        expect(granted?.unlockedByPurchaseId).toBeNull();
+        expect(granted?.expiresAt?.getTime()).toBe(expiresAt.getTime());
+        expect(affected).toContain(granted?.id);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "grants a perk for an active purchase with a null expiresAt",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "pur-create",
+        );
+        const purchaseId = yield* seedPurchase(created, {
+          configurationProductId,
+          personId,
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected.length).toBe(1);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const granted = rows.find((row) => row.perkId === perkId);
+        expect(granted).toBeDefined();
+        expect(granted?.status).toBe(PersonUnlockedPerkStatus.Active);
+        expect(granted?.unlockedByPurchaseId).toBe(purchaseId);
+        expect(granted?.unlockedBySubscriptionId).toBeNull();
+        expect(granted?.expiresAt).toBeNull();
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "does not grant a perk for an inactive (canceled) subscription",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "sub-inactive",
+        );
+        yield* seedSubscription(created, {
+          configurationProductId,
+          expiresAt: null,
+          personId,
+          status: SubscriptionStatus.Canceled,
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected.length).toBe(0);
+
+        const rows = yield* findUnlockedPerks(personId);
+        expect(rows.some((row) => row.perkId === perkId)).toBe(false);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "does not grant a perk for a refunded purchase",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "pur-refunded",
+        );
+        yield* seedPurchase(created, {
+          configurationProductId,
+          personId,
+          refundedAt: new Date(),
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected.length).toBe(0);
+
+        const rows = yield* findUnlockedPerks(personId);
+        expect(rows.some((row) => row.perkId === perkId)).toBe(false);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "does not grant a perk for a revoked purchase",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "pur-revoked",
+        );
+        yield* seedPurchase(created, {
+          configurationProductId,
+          personId,
+          revokedAt: new Date(),
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected.length).toBe(0);
+
+        const rows = yield* findUnlockedPerks(personId);
+        expect(rows.some((row) => row.perkId === perkId)).toBe(false);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "reactivates an expired subscription perk when the subscription becomes active again",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "sub-reactivate",
+        );
+        // Zero milliseconds: `expires_at` is a second-precision TIMESTAMP, so a
+        // sub-second component would not survive the DB round-trip below.
+        const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
+        expiresAt.setMilliseconds(0);
+        const subscriptionId = yield* seedSubscription(created, {
+          configurationProductId,
+          expiresAt,
+          personId,
+          status: SubscriptionStatus.Active,
+        });
+        const existingId = yield* seedUnlockedPerk(created, {
+          expiresAt: null,
+          perkId,
+          personId,
+          status: PersonUnlockedPerkStatus.Expired,
+          unlockedBySubscriptionId: subscriptionId,
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected).toContain(existingId);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const reactivated = rows.find((row) => row.id === existingId);
+        expect(reactivated?.status).toBe(PersonUnlockedPerkStatus.Active);
+        expect(reactivated?.unlockedBySubscriptionId).toBe(subscriptionId);
+        expect(reactivated?.unlockedByPurchaseId).toBeNull();
+        expect(reactivated?.expiresAt?.getTime()).toBe(expiresAt.getTime());
+
+        // No duplicate grant for the same perk.
+        expect(rows.filter((row) => row.perkId === perkId).length).toBe(1);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "promotes a subscription-granted perk to a purchase grant (purchase wins on membership)",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "sub-to-pur",
+        );
+        // The perk was previously granted by an (now absent) subscription, then a
+        // purchase for the same product arrives. The purchase pass runs first and
+        // claims the perk, so the existing row is rewritten as a purchase grant.
+        const purchaseId = yield* seedPurchase(created, {
+          configurationProductId,
+          personId,
+        });
+        const existingId = yield* seedUnlockedPerk(created, {
+          expiresAt: new Date(Date.now() + 1000),
+          perkId,
+          personId,
+          status: PersonUnlockedPerkStatus.Active,
+          unlockedBySubscriptionId: "sub_stale_reference",
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected).toContain(existingId);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const promoted = rows.find((row) => row.id === existingId);
+        expect(promoted?.status).toBe(PersonUnlockedPerkStatus.Active);
+        expect(promoted?.unlockedByPurchaseId).toBe(purchaseId);
+        expect(promoted?.unlockedBySubscriptionId).toBeNull();
+        expect(promoted?.expiresAt).toBeNull();
+        expect(rows.filter((row) => row.perkId === perkId).length).toBe(1);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "expires an active subscription-granted perk when the subscription is no longer active",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "sub-expire",
+        );
+        // Subscription exists but is canceled => no desired entitlement => expire.
+        const subscriptionId = yield* seedSubscription(created, {
+          configurationProductId,
+          expiresAt: null,
+          personId,
+          status: SubscriptionStatus.Canceled,
+        });
+        const existingId = yield* seedUnlockedPerk(created, {
+          perkId,
+          personId,
+          status: PersonUnlockedPerkStatus.Active,
+          unlockedBySubscriptionId: subscriptionId,
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected).toContain(existingId);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const expired = rows.find((row) => row.id === existingId);
+        expect(expired?.status).toBe(PersonUnlockedPerkStatus.Expired);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "expires an active purchase-granted perk when the purchase is refunded",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "pur-expire",
+        );
+        const purchaseId = yield* seedPurchase(created, {
+          configurationProductId,
+          personId,
+          refundedAt: new Date(),
+        });
+        const existingId = yield* seedUnlockedPerk(created, {
+          perkId,
+          personId,
+          status: PersonUnlockedPerkStatus.Active,
+          unlockedByPurchaseId: purchaseId,
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected).toContain(existingId);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const expired = rows.find((row) => row.id === existingId);
+        expect(expired?.status).toBe(PersonUnlockedPerkStatus.Expired);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "is a no-op when an active subscription grant already matches the desired state",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { configurationProductId, perkId, personId } = yield* seedEntitlementGraph(
+          created,
+          "noop",
+        );
+        const expiresAt = new Date(Date.now() + 10 * 24 * 60 * 60 * 1000);
+        const subscriptionId = yield* seedSubscription(created, {
+          configurationProductId,
+          expiresAt,
+          personId,
+          status: SubscriptionStatus.Active,
+        });
+        const existingId = yield* seedUnlockedPerk(created, {
+          expiresAt,
+          perkId,
+          personId,
+          status: PersonUnlockedPerkStatus.Active,
+          unlockedBySubscriptionId: subscriptionId,
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected.length).toBe(0);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const unchanged = rows.find((row) => row.id === existingId);
+        expect(unchanged?.status).toBe(PersonUnlockedPerkStatus.Active);
+        expect(unchanged?.unlockedBySubscriptionId).toBe(subscriptionId);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "expires lingering grants for a person whose entitlements have all gone away",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { perkId, personId } = yield* seedEntitlementGraph(created, "empty");
+        // Person has a stale active grant but no subscriptions or purchases.
+        const existingId = yield* seedUnlockedPerk(created, {
+          perkId,
+          personId,
+          status: PersonUnlockedPerkStatus.Active,
+          unlockedByPurchaseId: "pur_stale_reference",
+        });
+
+        const affected = yield* inTransaction((tx) => service.syncUnlockedPerks(tx, personId));
+        expect(affected).toContain(existingId);
+
+        const rows = yield* findUnlockedPerks(personId);
+        const expired = rows.find((row) => row.id === existingId);
+        expect(expired?.status).toBe(PersonUnlockedPerkStatus.Expired);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PerkGrantService.getPersonUnlockedPerks", () => {
+  test(
+    "returns all unlocked perks for the person",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { perkId, personId } = yield* seedEntitlementGraph(created, "get");
+        const grantId = yield* seedUnlockedPerk(created, {
+          perkId,
+          personId,
+          status: PersonUnlockedPerkStatus.Active,
+          unlockedByPurchaseId: "pur_get_reference",
+        });
+
+        const result = yield* service.getPersonUnlockedPerks(personId);
+        expect(result.some((row) => row.id === grantId && row.perkId === perkId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all for the person's project",
+    withGraphCleanup((created) =>
+      Effect.gen(function* () {
+        const service = yield* PerkGrantService;
+        const { personId } = yield* seedEntitlementGraph(created, "get-forbidden");
+
+        const error = yield* Effect.flip(asUnauthorized(service.getPersonUnlockedPerks(personId)));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PersonNotFoundError for an unknown person id",
+    // No cleanup wrapper: a not-found lookup writes nothing.
+    Effect.gen(function* () {
+      const service = yield* PerkGrantService;
+      const missingId = `person_missing_${Date.now()}`;
+
+      const error = yield* Effect.flip(service.getPersonUnlockedPerks(missingId));
+      expect(error).toBeInstanceOf(PersonNotFoundError);
+      if (error instanceof PersonNotFoundError) {
+        expect(error.id).toBe(missingId);
+      }
+    }).pipe(Effect.provide(PerkGrantService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/perks/PerkService.integration.test.ts b/packages/core/test/services/perks/PerkService.integration.test.ts
new file mode 100644
index 000000000..273fe50e3
--- /dev/null
+++ b/packages/core/test/services/perks/PerkService.integration.test.ts
@@ -0,0 +1,475 @@
+/**
+ * Integration tests for {@link PerkService}, run against the real backend stack
+ * provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB +
+ * ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * Each test drives the service end-to-end and verifies the *persisted* side
+ * effects rather than just the method's return value:
+ *  - the `perk` row written / updated / removed in MySQL,
+ *  - the matching `audit_log` row (entity, action, actor, change snapshot),
+ *  - invalidation of the project's schema cache after a successful write.
+ *
+ * Conventions used throughout:
+ *  - Every test shares the one seeded fixture project ({@link CoreTestFixture})
+ *    but cleans up after itself: {@link withPerkCleanup} deletes the perks (and
+ *    their append-only audit rows) it created on exit, success or failure. The
+ *    global teardown sweep is only a backstop. Assertions stay membership-based
+ *    (never exact `getPerks` counts) and slugs are unique per call so a leftover
+ *    row from a crashed run can't collide.
+ *  - The harness builds a fresh `ProjectSchemaCache` stub per test and shares
+ *    that single instance with `SchemaCacheInvalidationService`, so seeding the
+ *    cache here and reading it back after a write proves invalidation ran.
+ *  - Permission tests reuse the default authenticated effect and re-authenticate
+ *    just the call under test via {@link asUnauthorized}; the inner provision
+ *    shadows the harness's default full-permission session.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { PerkService, ProjectSchemaCache } from "@voidhash/core/services";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  PerkNotFoundError,
+  PerkSlugAlreadyExistsError,
+} from "@voidhash/core/domain/perk/Perk";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  perks,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so slugs stay unique even within the same millisecond. */
+let slugSeq = 0;
+const uniqueSlug = (label: string) => `it-perk-${label}-${Date.now()}-${slugSeq++}`;
+
+/** Read a perk row straight from the database, bypassing the service. */
+const findPerkRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.perks.findFirst({ where: { id } });
+  });
+
+/** Count perk rows with a given slug in the fixture project. */
+const countPerksWithSlug = (slug: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const rows = yield* db
+      .select({ id: perks.id })
+      .from(perks)
+      .where(and(eq(perks.projectId, projectId), eq(perks.slug, slug)));
+    return rows.length;
+  });
+
+/** All audit-log rows recorded for a given perk entity. */
+const findPerkAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(eq(auditLogs.entityType, AuditLogEntityType.Perk), eq(auditLogs.entityId, entityId)),
+      );
+  });
+
+/**
+ * Delete the given perks and their audit rows. Audit entries are append-only
+ * and survive a `deletePerk`, so they are cleared by entity id too. Each delete
+ * is `ignore`d so a missing row never turns the finalizer into a failure.
+ */
+const cleanupCreatedPerks = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db
+      .delete(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.Perk),
+          inArray(auditLogs.entityId, targets),
+        ),
+      )
+      .pipe(Effect.ignore);
+    yield* db.delete(perks).where(inArray(perks.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every perk it creates is removed afterward, regardless of
+ * how the test exits. Pass each created perk id to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withPerkCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedPerks(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("PerkService.createPerk", () => {
+  test(
+    "persists the perk, records a created audit entry, and invalidates the schema cache",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const cache = yield* ProjectSchemaCache;
+
+        const name = "Integration Perk";
+        const slug = uniqueSlug("create");
+
+        // Seed the cache so a successful invalidation is observable, not vacuously null.
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const created = yield* perkService.createPerk({ name, projectId, slug });
+        track(created.id);
+        expect(created.id.startsWith("perk_")).toBe(true);
+
+        const row = yield* findPerkRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.name).toBe(name);
+        expect(row?.slug).toBe(slug);
+        expect(row?.projectId).toBe(projectId);
+
+        const auditEntries = yield* findPerkAuditEntries(created.id);
+        const createdEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.Perk);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({ snapshot: { name, slug } });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a duplicate slug within the project and writes no second row",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const slug = uniqueSlug("duplicate");
+
+        const first = yield* perkService.createPerk({ name: "First", projectId, slug });
+        track(first.id);
+
+        const error = yield* Effect.flip(
+          perkService.createPerk({ name: "Second", projectId, slug }),
+        );
+        expect(error).toBeInstanceOf(PerkSlugAlreadyExistsError);
+        if (error instanceof PerkSlugAlreadyExistsError) {
+          expect(error.slug).toBe(slug);
+        }
+
+        expect(yield* countPerksWithSlug(slug)).toBe(1);
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and writes nothing",
+    // No cleanup wrapper: a forbidden create writes no row.
+    Effect.gen(function* () {
+      const perkService = yield* PerkService;
+      const slug = uniqueSlug("forbidden");
+
+      const error = yield* Effect.flip(
+        asUnauthorized(perkService.createPerk({ name: "Nope", projectId, slug })),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      expect(yield* countPerksWithSlug(slug)).toBe(0);
+    }).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PerkService.getPerks", () => {
+  test(
+    "returns perks created under the project",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const slugA = uniqueSlug("list-a");
+        const slugB = uniqueSlug("list-b");
+        const absentSlug = uniqueSlug("list-absent");
+
+        const a = yield* perkService.createPerk({ name: "A", projectId, slug: slugA });
+        track(a.id);
+        const b = yield* perkService.createPerk({ name: "B", projectId, slug: slugB });
+        track(b.id);
+
+        const list = yield* perkService.getPerks(projectId);
+        expect(list.some((perk) => perk.id === a.id && perk.slug === slugA)).toBe(true);
+        expect(list.some((perk) => perk.id === b.id && perk.slug === slugB)).toBe(true);
+        expect(list.some((perk) => perk.slug === absentSlug)).toBe(false);
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const perkService = yield* PerkService;
+      const error = yield* Effect.flip(asUnauthorized(perkService.getPerks(projectId)));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PerkService.getPerkById", () => {
+  test(
+    "returns the matching perk",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const slug = uniqueSlug("by-id");
+        const created = yield* perkService.createPerk({ name: "Lookup", projectId, slug });
+        track(created.id);
+
+        const perk = yield* perkService.getPerkById(created.id);
+        expect(perk.id).toBe(created.id);
+        expect(perk.name).toBe("Lookup");
+        expect(perk.slug).toBe(slug);
+        expect(perk.projectId).toBe(projectId);
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PerkNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const perkService = yield* PerkService;
+      const error = yield* Effect.flip(perkService.getPerkById(`perk_missing_${Date.now()}`));
+      expect(error).toBeInstanceOf(PerkNotFoundError);
+    }).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids access to a perk the caller is not authorized for",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const slug = uniqueSlug("by-id-forbidden");
+        const created = yield* perkService.createPerk({ name: "Guarded", projectId, slug });
+        track(created.id);
+
+        const error = yield* Effect.flip(asUnauthorized(perkService.getPerkById(created.id)));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PerkService.updatePerk", () => {
+  test(
+    "changes name and slug, records an updated audit entry, and invalidates the schema cache",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const cache = yield* ProjectSchemaCache;
+
+        const created = yield* perkService.createPerk({
+          name: "Before",
+          projectId,
+          slug: uniqueSlug("update-before"),
+        });
+        track(created.id);
+
+        const newName = "After";
+        const newSlug = uniqueSlug("update-after");
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const result = yield* perkService.updatePerk({
+          id: created.id,
+          projectId,
+          name: newName,
+          slug: newSlug,
+        });
+        expect(result.id).toBe(created.id);
+
+        const row = yield* findPerkRow(created.id);
+        expect(row?.name).toBe(newName);
+        expect(row?.slug).toBe(newSlug);
+
+        const auditEntries = yield* findPerkAuditEntries(created.id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toEqual({ snapshot: { name: newName, slug: newSlug } });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "allows renaming a perk while keeping its own slug",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const slug = uniqueSlug("update-self");
+        const created = yield* perkService.createPerk({ name: "Keep", projectId, slug });
+        track(created.id);
+
+        // Same slug as the perk's own — must not trip the uniqueness guard against itself.
+        const result = yield* perkService.updatePerk({
+          id: created.id,
+          projectId,
+          name: "Keep Renamed",
+          slug,
+        });
+        expect(result.id).toBe(created.id);
+
+        const row = yield* findPerkRow(created.id);
+        expect(row?.name).toBe("Keep Renamed");
+        expect(row?.slug).toBe(slug);
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a slug already used by another perk and leaves the target unchanged",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const slugA = uniqueSlug("update-collide-a");
+        const slugB = uniqueSlug("update-collide-b");
+
+        const a = yield* perkService.createPerk({ name: "A", projectId, slug: slugA });
+        track(a.id);
+        const b = yield* perkService.createPerk({ name: "B", projectId, slug: slugB });
+        track(b.id);
+
+        const error = yield* Effect.flip(
+          perkService.updatePerk({ id: b.id, projectId, name: "B", slug: slugA }),
+        );
+        expect(error).toBeInstanceOf(PerkSlugAlreadyExistsError);
+        if (error instanceof PerkSlugAlreadyExistsError) {
+          expect(error.slug).toBe(slugA);
+        }
+
+        const row = yield* findPerkRow(b.id);
+        expect(row?.slug).toBe(slugB);
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PerkService.deletePerk", () => {
+  test(
+    "removes the perk, records a deleted audit entry, and invalidates the schema cache",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const cache = yield* ProjectSchemaCache;
+
+        const created = yield* perkService.createPerk({
+          name: "Doomed",
+          projectId,
+          slug: uniqueSlug("delete"),
+        });
+        track(created.id);
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* perkService.deletePerk({ perkId: created.id });
+
+        const row = yield* findPerkRow(created.id);
+        expect(row).toBeUndefined();
+
+        const lookup = yield* Effect.flip(perkService.getPerkById(created.id));
+        expect(lookup).toBeInstanceOf(PerkNotFoundError);
+
+        const auditEntries = yield* findPerkAuditEntries(created.id);
+        const deletedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PerkNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const perkService = yield* PerkService;
+      const error = yield* Effect.flip(
+        perkService.deletePerk({ perkId: `perk_missing_${Date.now()}` }),
+      );
+      expect(error).toBeInstanceOf(PerkNotFoundError);
+    }).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the perk",
+    withPerkCleanup((track) =>
+      Effect.gen(function* () {
+        const perkService = yield* PerkService;
+        const created = yield* perkService.createPerk({
+          name: "Protected",
+          projectId,
+          slug: uniqueSlug("delete-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(perkService.deletePerk({ perkId: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findPerkRow(created.id);
+        expect(row).toBeDefined();
+      }),
+    ).pipe(Effect.provide(PerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/personIdentity/IdentityMutationService.integration.test.ts b/packages/core/test/services/personIdentity/IdentityMutationService.integration.test.ts
new file mode 100644
index 000000000..72db97a8e
--- /dev/null
+++ b/packages/core/test/services/personIdentity/IdentityMutationService.integration.test.ts
@@ -0,0 +1,841 @@
+/**
+ * Tests for the person-identity mutation methods on
+ * {@link IdentityMutationService} (`src/services/personIdentity/IdentityMutationService.ts`),
+ * plus the pure identity helpers they build on.
+ *
+ * The mutation methods take the active transaction handle as their first
+ * argument (so `PersonIdentityService` and the identity completion workflow
+ * drive them inside their own `db.transaction((tx) => …)` callbacks). The DB
+ * tests below drive them through the local {@link inTransaction} helper, which
+ * opens a real `db.transaction` and threads both the `tx` handle and the
+ * service instance into the method under test. Two kinds of test live here:
+ *
+ *  - **Pure-logic units** (`mergeTraits`, `firstDefinedString`,
+ *    `isAnonymousDistinctId`): deterministic, no infra, asserted inline. These
+ *    pure helpers live in `domain/person` / `utils`; they sit here (rather than
+ *    a separate `*.test.ts`) because they are exercised alongside the service
+ *    and are cheap; the file is still classified *integration* because the
+ *    mutating methods below require a real DB.
+ *  - **DB mutations** (`ensure*`, `find*`, `mark*`, `upsert*`, `update*`,
+ *    `archive*`): driven through a real `db.transaction` against the shared
+ *    backend stack ({@link CoreIntegrationTestHarness}) and verified by reading
+ *    the persisted `person` / `person_identity` / `person_personless_identity`
+ *    rows back, never by trusting the return value alone.
+ *
+ * Conventions: each DB test scopes its writes to a unique distinctId/personId
+ * per call (so concurrent runs never collide), asserts persisted state by
+ * primary-key read-back, and cleans up every row it created via
+ * {@link withIdentityCleanup}'s `Effect.ensuring` finalizer (the global sweep is
+ * only a backstop). There is no permission-forbidden case: these helpers never
+ * consult `AuthSession`.
+ */
+import { Effect } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  IdentityMutationService,
+  type MutationContext,
+} from "@voidhash/core/services/personIdentity/IdentityMutationService";
+import { isAnonymousDistinctId, mergeTraits } from "@voidhash/core/domain/person/Person";
+import { firstDefinedString } from "@voidhash/core/utils";
+import {
+  type DbError,
+  type DbTransaction,
+  type Person as DbPerson,
+  Db,
+  PersonIdentityKind,
+  PersonOrigin,
+  and,
+  eq,
+  inArray,
+  personIdentities,
+  personPersonlessIdentities,
+  persons,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+/**
+ * Opens a real `db.transaction` and threads both the `tx` handle and the
+ * {@link IdentityMutationService} instance into `body`, the way the production
+ * callers (PersonIdentityService, the identity completion workflow) drive the
+ * mutation methods. The service layer is dependency-free, so it is provided
+ * here; `Db` comes from the integration harness.
+ */
+const inTransaction = <A, E, R>(
+  body: (
+    tx: DbTransaction,
+    mutations: IdentityMutationService["Service"],
+  ) => Effect.Effect<A, E, R>,
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const mutations = yield* IdentityMutationService;
+    return yield* db.transaction((tx) => body(tx, mutations));
+  }).pipe(Effect.provide(IdentityMutationService.layer));
+
+const projectId = CoreTestFixture.projectId;
+const ANON_PREFIX = "vh:anon:";
+
+/** Monotonic counter so distinctIds stay unique even within one millisecond. */
+let seq = 0;
+const uniqueDistinctId = (label: string) => `it-did-${label}-${Date.now()}-${seq++}`;
+const anonDistinctId = (label: string) => `${ANON_PREFIX}${uniqueDistinctId(label)}`;
+
+const baseContext = (overrides?: Partial<MutationContext>): MutationContext => ({
+  eventId: `it-evt-${Date.now()}-${seq++}`,
+  eventTimestamp: new Date("2026-01-01T00:00:00.000Z"),
+  origin: PersonOrigin.API,
+  projectId,
+  ...overrides,
+});
+
+/** Read a person row straight from the DB, bypassing the helpers. */
+const findPersonRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.persons.findFirst({ where: { id } });
+  });
+
+/** Read a person_identity row by its primary key. */
+const findIdentityRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personIdentities.findFirst({ where: { id } });
+  });
+
+/** Read the person_identity row for a (project, distinctId) pair. */
+const findIdentityByDistinctId = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personIdentities.findFirst({
+      where: { projectId, distinctId },
+    });
+  });
+
+/** Read the personless-identity row for a (project, distinctId) pair. */
+const findPersonlessRow = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personPersonlessIdentities.findFirst({
+      where: { projectId, distinctId },
+    });
+  });
+
+/** Insert a person row directly (the helpers expect parents to exist). */
+const seedPerson = (
+  values: Partial<DbPerson> & { readonly id: string },
+): Effect.Effect<DbPerson, DbError, Db> =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const row: DbPerson = {
+      archivedAt: null,
+      createdAt: new Date("2026-01-01T00:00:00.000Z"),
+      deletedAt: null,
+      deletionReason: null,
+      email: null,
+      firstSeenAt: new Date("2026-01-01T00:00:00.000Z"),
+      lastSeenAt: new Date("2026-01-01T00:00:00.000Z"),
+      mergedIntoPersonId: null,
+      name: null,
+      origin: PersonOrigin.API,
+      primaryDistinctId: null,
+      projectId,
+      traits: {},
+      updatedAt: new Date("2026-01-01T00:00:00.000Z"),
+      ...values,
+    } as DbPerson;
+    yield* db.insert(persons).values({
+      archivedAt: row.archivedAt,
+      createdAt: row.createdAt ?? undefined,
+      email: row.email,
+      firstSeenAt: row.firstSeenAt,
+      id: row.id,
+      lastSeenAt: row.lastSeenAt,
+      mergedIntoPersonId: row.mergedIntoPersonId,
+      name: row.name,
+      origin: row.origin,
+      projectId: row.projectId,
+      traits: row.traits ?? {},
+    });
+    return row;
+  });
+
+/**
+ * Delete the person / identity / personless rows a test created. Identity and
+ * person rows cascade-delete on the project FK in the global sweep, but each
+ * test removes its own rows by id/key here so a shared DB never accumulates
+ * junk; every delete is `ignore`d so a missing row never fails the finalizer.
+ */
+const cleanupCreated = (tracked: {
+  readonly personIds: ReadonlyArray<string>;
+  readonly identityIds: ReadonlyArray<string>;
+  readonly distinctIds: ReadonlyArray<string>;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (tracked.identityIds.length > 0) {
+      yield* db
+        .delete(personIdentities)
+        .where(inArray(personIdentities.id, [...tracked.identityIds]))
+        .pipe(Effect.ignore);
+    }
+    if (tracked.distinctIds.length > 0) {
+      yield* db
+        .delete(personPersonlessIdentities)
+        .where(
+          and(
+            eq(personPersonlessIdentities.projectId, projectId),
+            inArray(personPersonlessIdentities.distinctId, [...tracked.distinctIds]),
+          ),
+        )
+        .pipe(Effect.ignore);
+      // Identities created indirectly (e.g. by ensureCanonicalPersonForDistinctId)
+      // are keyed by distinctId, so clear those too before their persons go.
+      yield* db
+        .delete(personIdentities)
+        .where(
+          and(
+            eq(personIdentities.projectId, projectId),
+            inArray(personIdentities.distinctId, [...tracked.distinctIds]),
+          ),
+        )
+        .pipe(Effect.ignore);
+    }
+    if (tracked.personIds.length > 0) {
+      yield* db
+        .delete(persons)
+        .where(inArray(persons.id, [...tracked.personIds]))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body with id-collecting trackers; whatever ids/distinctIds were
+ * pushed while the body ran are deleted on exit (success or failure) via
+ * `Effect.ensuring`, read lazily so the finalizer sees the final lists.
+ */
+const withIdentityCleanup = <E, R>(
+  body: (track: {
+    readonly person: (id: string) => void;
+    readonly identity: (id: string) => void;
+    readonly distinctId: (id: string) => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const personIds: string[] = [];
+  const identityIds: string[] = [];
+  const distinctIds: string[] = [];
+  return body({
+    person: (id) => personIds.push(id),
+    identity: (id) => identityIds.push(id),
+    distinctId: (id) => distinctIds.push(id),
+  }).pipe(Effect.ensuring(cleanupCreated({ personIds, identityIds, distinctIds })));
+};
+
+// ---------------------------------------------------------------------------
+// Pure-logic helpers (no infra).
+// ---------------------------------------------------------------------------
+
+describe("mergeTraits", () => {
+  test(
+    "applies setOnce only when the key is absent and setAttributes always override",
+    Effect.sync(() => {
+      const result = mergeTraits({
+        current: { plan: "free", country: "DE" },
+        setOnceAttributes: { plan: "ignored", referrer: "newsletter" },
+        setAttributes: { country: "US", lastSeen: "today" },
+      });
+      // setOnce skipped existing `plan`, added new `referrer`.
+      expect(result.plan).toBe("free");
+      expect(result.referrer).toBe("newsletter");
+      // setAttributes overrode `country`, added `lastSeen`.
+      expect(result.country).toBe("US");
+      expect(result.lastSeen).toBe("today");
+    }),
+  );
+
+  test(
+    "returns the current traits unchanged when both override maps are empty",
+    Effect.sync(() => {
+      const current = { plan: "pro", seats: 3 };
+      const result = mergeTraits({ current, setOnceAttributes: {}, setAttributes: {} });
+      expect(result).toEqual(current);
+      // Defensive copy — not the same reference.
+      expect(result).not.toBe(current);
+    }),
+  );
+
+  test(
+    "setOnce is skipped for an existing key but a later setAttributes still overwrites it",
+    Effect.sync(() => {
+      const result = mergeTraits({
+        current: { tier: "bronze" },
+        setOnceAttributes: { tier: "silver" },
+        setAttributes: { tier: "gold" },
+      });
+      expect(result.tier).toBe("gold");
+    }),
+  );
+});
+
+describe("firstDefinedString", () => {
+  test(
+    "returns the first non-empty string, skipping null/undefined/empty",
+    Effect.sync(() => {
+      expect(firstDefinedString(undefined, null, "", "first", "second")).toBe("first");
+      expect(firstDefinedString(null, undefined, "")).toBeNull();
+      expect(firstDefinedString()).toBeNull();
+      expect(firstDefinedString("only")).toBe("only");
+    }),
+  );
+});
+
+describe("isAnonymousDistinctId", () => {
+  test(
+    "is true only for ids carrying the anonymous prefix",
+    Effect.sync(() => {
+      expect(isAnonymousDistinctId(`${ANON_PREFIX}abc`)).toBe(true);
+      expect(isAnonymousDistinctId("user@example.com")).toBe(false);
+      expect(isAnonymousDistinctId(`prefixed-${ANON_PREFIX}`)).toBe(false);
+    }),
+  );
+});
+
+// ---------------------------------------------------------------------------
+// Personless-identity helpers.
+// ---------------------------------------------------------------------------
+
+describe("ensurePersonlessIdentity / findPersonlessIdentity / markPersonlessIdentityMerged", () => {
+  test(
+    "creates the personless row, is idempotent on a second call, and is found by lookup",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const db = yield* Db;
+        const distinctId = anonDistinctId("personless-create");
+        track.distinctId(distinctId);
+
+        const before = yield* findPersonlessRow(distinctId);
+        expect(before).toBeUndefined();
+
+        yield* inTransaction((tx, m) => m.ensurePersonlessIdentity(tx, { distinctId, projectId }));
+
+        const row = yield* findPersonlessRow(distinctId);
+        expect(row).toBeDefined();
+        expect(row?.distinctId).toBe(distinctId);
+        expect(row?.projectId).toBe(projectId);
+        expect(row?.isMerged).toBe(false);
+
+        // Second call must not error (ON DUPLICATE KEY UPDATE) and must not
+        // create a duplicate.
+        yield* inTransaction((tx, m) => m.ensurePersonlessIdentity(tx, { distinctId, projectId }));
+
+        const found = yield* inTransaction((tx, m) =>
+          m.findPersonlessIdentity(tx, { distinctId, projectId }),
+        );
+        expect(found).toBeDefined();
+        expect(found?.distinctId).toBe(distinctId);
+
+        const rows = yield* db
+          .select({ distinctId: personPersonlessIdentities.distinctId })
+          .from(personPersonlessIdentities)
+          .where(
+            and(
+              eq(personPersonlessIdentities.projectId, projectId),
+              eq(personPersonlessIdentities.distinctId, distinctId),
+            ),
+          );
+        expect(rows.length).toBe(1);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "findPersonlessIdentity returns undefined when no row exists",
+    Effect.gen(function* () {
+      const distinctId = anonDistinctId("personless-missing");
+      const found = yield* inTransaction((tx, m) =>
+        m.findPersonlessIdentity(tx, { distinctId, projectId }),
+      );
+      expect(found).toBeUndefined();
+    }).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "markPersonlessIdentityMerged flips is_merged to true on the persisted row",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const distinctId = anonDistinctId("personless-merge");
+        track.distinctId(distinctId);
+
+        yield* inTransaction((tx, m) => m.ensurePersonlessIdentity(tx, { distinctId, projectId }));
+        expect((yield* findPersonlessRow(distinctId))?.isMerged).toBe(false);
+
+        yield* inTransaction((tx, m) =>
+          m.markPersonlessIdentityMerged(tx, { distinctId, projectId }),
+        );
+
+        const after = yield* findPersonlessRow(distinctId);
+        expect(after?.isMerged).toBe(true);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+// ---------------------------------------------------------------------------
+// Distinct-id mapping resolution.
+// ---------------------------------------------------------------------------
+
+describe("findDistinctIdMapping", () => {
+  test(
+    "returns the canonical person, mapping, and raw person for an existing mapping",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const distinctId = uniqueDistinctId("mapping-existing");
+        track.distinctId(distinctId);
+
+        const resolution = yield* inTransaction((tx, m) =>
+          m.ensureCanonicalPersonForDistinctId(tx, {
+            context: baseContext(),
+            distinctId,
+            setAttributes: {},
+            setOnceAttributes: {},
+          }),
+        );
+        track.person(resolution.person.id);
+
+        const mapping = yield* inTransaction((tx, m) =>
+          m.findDistinctIdMapping(tx, { distinctId, projectId }),
+        );
+        expect(mapping).toBeDefined();
+        expect(mapping?.canonicalPerson.id).toBe(resolution.person.id);
+        expect(mapping?.rawPerson.id).toBe(resolution.person.id);
+        expect(mapping?.mapping.distinctId).toBe(distinctId);
+        expect(mapping?.mapping.personId).toBe(resolution.person.id);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "follows the mergedInto chain to the canonical person for a merged source",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const distinctId = uniqueDistinctId("mapping-merged");
+        track.distinctId(distinctId);
+
+        const canonicalId = `person_it_canon_${Date.now()}_${seq++}`;
+        const mergedSourceId = `person_it_src_${Date.now()}_${seq++}`;
+        track.person(canonicalId);
+        track.person(mergedSourceId);
+
+        yield* seedPerson({ id: canonicalId });
+        // Source person points at the canonical person via mergedIntoPersonId.
+        yield* seedPerson({ id: mergedSourceId, mergedIntoPersonId: canonicalId });
+
+        // Map the distinctId to the *merged* source row.
+        const identityId = `person_dist_it_${Date.now()}_${seq++}`;
+        track.identity(identityId);
+        yield* inTransaction((tx, m) =>
+          m.upsertPersonIdentity(tx, {
+            changedAt: new Date(),
+            personId: mergedSourceId,
+            distinctId,
+            identityId,
+            projectId,
+            version: 0,
+          }),
+        );
+
+        const mapping = yield* inTransaction((tx, m) =>
+          m.findDistinctIdMapping(tx, { distinctId, projectId }),
+        );
+        expect(mapping).toBeDefined();
+        expect(mapping?.rawPerson.id).toBe(mergedSourceId);
+        // Resolution chases mergedIntoPersonId to the canonical row.
+        expect(mapping?.canonicalPerson.id).toBe(canonicalId);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns undefined when no mapping exists",
+    Effect.gen(function* () {
+      const distinctId = uniqueDistinctId("mapping-absent");
+      const mapping = yield* inTransaction((tx, m) =>
+        m.findDistinctIdMapping(tx, { distinctId, projectId }),
+      );
+      expect(mapping).toBeUndefined();
+    }).pipe(CoreAuthSession.authenticate()),
+  );
+
+  // The "orphaned mapping" branch (a person_identity row whose person_id points
+  // at a non-existent person) cannot be constructed cleanly here:
+  // person_identity.person_id carries an `onDelete: cascade` FK to person.id, so
+  // deleting the person removes the mapping, and inserting a mapping with a
+  // dangling person_id is rejected when the FK is enforced. Reaching this branch
+  // reliably would require a DB-engine-specific seam (FK enforcement differs
+  // between PlanetScale/Vitess and a strict MySQL), so it is deferred rather
+  // than asserted with a brittle raw insert.
+  vitestTest.todo(
+    "findDistinctIdMapping returns undefined for an orphaned mapping whose person row is gone (blocked: person_identity.person_id FK cascade prevents constructing a dangling mapping cleanly)",
+  );
+});
+
+// ---------------------------------------------------------------------------
+// ensureCanonicalPersonForDistinctId.
+// ---------------------------------------------------------------------------
+
+describe("ensureCanonicalPersonForDistinctId", () => {
+  test(
+    "creates a person + Identified mapping with wasCreated=true and a mapping event for a non-anonymous id",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const distinctId = uniqueDistinctId("ensure-identified");
+        track.distinctId(distinctId);
+
+        const result = yield* inTransaction((tx, m) =>
+          m.ensureCanonicalPersonForDistinctId(tx, {
+            context: baseContext(),
+            distinctId,
+            email: "ensure@voidhash.test",
+            name: "Ensure Person",
+            setAttributes: { plan: "pro" },
+            setOnceAttributes: { source: "import" },
+          }),
+        );
+        track.person(result.person.id);
+
+        expect(result.wasCreated).toBe(true);
+        expect(result.mappingEvent).toBeDefined();
+        expect(result.mappingEvent?.kind).toBe(PersonIdentityKind.Identified);
+        expect(result.mappingEvent?.distinctId).toBe(distinctId);
+        expect(result.mappingEvent?.personId).toBe(result.person.id);
+        expect(result.person.id.startsWith("person_")).toBe(true);
+
+        const personRow = yield* findPersonRow(result.person.id);
+        expect(personRow).toBeDefined();
+        expect(personRow?.email).toBe("ensure@voidhash.test");
+        expect(personRow?.name).toBe("Ensure Person");
+        expect(personRow?.origin).toBe(PersonOrigin.API);
+        // Traits persisted as JSON: set + setOnce merged in.
+        expect((personRow?.traits as Record<string, unknown>)?.plan).toBe("pro");
+        expect((personRow?.traits as Record<string, unknown>)?.source).toBe("import");
+
+        const identityRow = yield* findIdentityByDistinctId(distinctId);
+        expect(identityRow).toBeDefined();
+        expect(identityRow?.personId).toBe(result.person.id);
+        expect(identityRow?.kind).toBe(PersonIdentityKind.Identified);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "derives the Anonymous identity kind from an anonymous distinctId",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const distinctId = anonDistinctId("ensure-anon");
+        track.distinctId(distinctId);
+
+        const result = yield* inTransaction((tx, m) =>
+          m.ensureCanonicalPersonForDistinctId(tx, {
+            context: baseContext(),
+            distinctId,
+            setAttributes: {},
+            setOnceAttributes: {},
+          }),
+        );
+        track.person(result.person.id);
+
+        expect(result.mappingEvent?.kind).toBe(PersonIdentityKind.Anonymous);
+        const identityRow = yield* findIdentityByDistinctId(distinctId);
+        expect(identityRow?.kind).toBe(PersonIdentityKind.Anonymous);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns the existing person with wasCreated=false and no mapping event when already mapped",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const db = yield* Db;
+        const distinctId = uniqueDistinctId("ensure-existing");
+        track.distinctId(distinctId);
+
+        const first = yield* inTransaction((tx, m) =>
+          m.ensureCanonicalPersonForDistinctId(tx, {
+            context: baseContext(),
+            distinctId,
+            setAttributes: {},
+            setOnceAttributes: {},
+          }),
+        );
+        track.person(first.person.id);
+
+        const second = yield* inTransaction((tx, m) =>
+          m.ensureCanonicalPersonForDistinctId(tx, {
+            context: baseContext(),
+            distinctId,
+            setAttributes: { ignored: true },
+            setOnceAttributes: {},
+          }),
+        );
+
+        expect(second.wasCreated).toBe(false);
+        expect(second.mappingEvent).toBeUndefined();
+        expect(second.person.id).toBe(first.person.id);
+        expect(second.rawMapping?.distinctId).toBe(distinctId);
+
+        // No second person row was created for the same distinctId.
+        const matchingIdentities = yield* db
+          .select({ personId: personIdentities.personId })
+          .from(personIdentities)
+          .where(
+            and(
+              eq(personIdentities.projectId, projectId),
+              eq(personIdentities.distinctId, distinctId),
+            ),
+          );
+        expect(matchingIdentities.length).toBe(1);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+// ---------------------------------------------------------------------------
+// upsertPersonIdentity.
+// ---------------------------------------------------------------------------
+
+describe("upsertPersonIdentity", () => {
+  test(
+    "inserts a new identity row then reuses it via ON DUPLICATE KEY UPDATE, returning the event",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const db = yield* Db;
+        const distinctId = uniqueDistinctId("upsert");
+        track.distinctId(distinctId);
+
+        const personId = `person_it_upsert_${Date.now()}_${seq++}`;
+        track.person(personId);
+        yield* seedPerson({ id: personId });
+
+        const identityId = `person_dist_it_${Date.now()}_${seq++}`;
+        track.identity(identityId);
+
+        const event = yield* inTransaction((tx, m) =>
+          m.upsertPersonIdentity(tx, {
+            changedAt: new Date("2026-02-02T00:00:00.000Z"),
+            personId,
+            distinctId,
+            identityId,
+            projectId,
+            version: 3,
+          }),
+        );
+        expect(event.kind).toBe(PersonIdentityKind.Identified);
+        expect(event.version).toBe(3);
+        expect(event.distinctId).toBe(distinctId);
+        expect(event.changedAt).toBe(new Date("2026-02-02T00:00:00.000Z").toISOString());
+
+        const row = yield* findIdentityRow(identityId);
+        expect(row?.distinctId).toBe(distinctId);
+        expect(row?.personId).toBe(personId);
+        expect(row?.version).toBe(3);
+
+        // Re-point the same (project, distinctId) at a different person + version.
+        const otherPersonId = `person_it_upsert2_${Date.now()}_${seq++}`;
+        track.person(otherPersonId);
+        yield* seedPerson({ id: otherPersonId });
+
+        yield* inTransaction((tx, m) =>
+          m.upsertPersonIdentity(tx, {
+            changedAt: new Date(),
+            personId: otherPersonId,
+            distinctId,
+            identityId,
+            projectId,
+            version: 5,
+          }),
+        );
+
+        const updated = yield* findIdentityByDistinctId(distinctId);
+        expect(updated?.personId).toBe(otherPersonId);
+        expect(updated?.version).toBe(5);
+        // Still one row for the unique (project, distinctId).
+        const rows = yield* db
+          .select({ id: personIdentities.id })
+          .from(personIdentities)
+          .where(
+            and(
+              eq(personIdentities.projectId, projectId),
+              eq(personIdentities.distinctId, distinctId),
+            ),
+          );
+        expect(rows.length).toBe(1);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+// ---------------------------------------------------------------------------
+// updatePersonProfile.
+// ---------------------------------------------------------------------------
+
+describe("updatePersonProfile", () => {
+  test(
+    "merges traits, sets name/email, keeps earlier firstSeenAt, advances lastSeenAt",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const personId = `person_it_profile_${Date.now()}_${seq++}`;
+        track.person(personId);
+        const seeded = yield* seedPerson({
+          id: personId,
+          email: "old@voidhash.test",
+          name: "Old Name",
+          firstSeenAt: new Date("2026-01-01T00:00:00.000Z"),
+          lastSeenAt: new Date("2026-01-01T00:00:00.000Z"),
+          traits: { plan: "free", existing: "keep" },
+        });
+
+        const eventTimestamp = new Date("2026-03-03T00:00:00.000Z");
+        const updated = yield* inTransaction((tx, m) =>
+          m.updatePersonProfile(tx, {
+            person: seeded,
+            email: "new@voidhash.test",
+            eventId: `it-evt-${Date.now()}-${seq++}`,
+            eventTimestamp,
+            name: "New Name",
+            setAttributes: { plan: "pro" },
+            setOnceAttributes: { plan: "ignored", referral: "ad" },
+          }),
+        );
+
+        expect(updated.email).toBe("new@voidhash.test");
+        expect(updated.name).toBe("New Name");
+        // firstSeenAt preserved (earlier), lastSeenAt advanced (later).
+        expect(updated.firstSeenAt?.getTime()).toBe(new Date("2026-01-01T00:00:00.000Z").getTime());
+        expect(updated.lastSeenAt?.getTime()).toBe(eventTimestamp.getTime());
+
+        const row = yield* findPersonRow(personId);
+        expect(row?.email).toBe("new@voidhash.test");
+        expect(row?.name).toBe("New Name");
+        const traits = row?.traits as Record<string, unknown>;
+        expect(traits.plan).toBe("pro"); // setAttributes overrode
+        expect(traits.existing).toBe("keep"); // untouched
+        expect(traits.referral).toBe("ad"); // setOnce added
+        expect(row?.firstSeenAt?.getTime()).toBe(new Date("2026-01-01T00:00:00.000Z").getTime());
+        expect(row?.lastSeenAt?.getTime()).toBe(eventTimestamp.getTime());
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "leaves name/email untouched for undefined fields but still advances lastSeenAt",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const personId = `person_it_profile_noop_${Date.now()}_${seq++}`;
+        track.person(personId);
+        const seeded = yield* seedPerson({
+          id: personId,
+          email: "keep@voidhash.test",
+          name: "Keep Name",
+          firstSeenAt: new Date("2026-01-01T00:00:00.000Z"),
+          lastSeenAt: new Date("2026-01-01T00:00:00.000Z"),
+          traits: { a: 1 },
+        });
+
+        const eventTimestamp = new Date("2026-04-04T00:00:00.000Z");
+        yield* inTransaction((tx, m) =>
+          m.updatePersonProfile(tx, {
+            person: seeded,
+            eventId: `it-evt-${Date.now()}-${seq++}`,
+            eventTimestamp,
+            setAttributes: {},
+            setOnceAttributes: {},
+          }),
+        );
+
+        const row = yield* findPersonRow(personId);
+        expect(row?.email).toBe("keep@voidhash.test");
+        expect(row?.name).toBe("Keep Name");
+        expect((row?.traits as Record<string, unknown>).a).toBe(1);
+        expect(row?.lastSeenAt?.getTime()).toBe(eventTimestamp.getTime());
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
+
+// ---------------------------------------------------------------------------
+// archivePerson.
+// ---------------------------------------------------------------------------
+
+describe("archivePerson", () => {
+  test(
+    "sets archivedAt and mergedIntoPersonId on a non-archived person",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const personId = `person_it_archive_${Date.now()}_${seq++}`;
+        const targetId = `person_it_archive_tgt_${Date.now()}_${seq++}`;
+        track.person(personId);
+        track.person(targetId);
+
+        yield* seedPerson({ id: targetId });
+        const seeded = yield* seedPerson({ id: personId });
+
+        const eventTimestamp = new Date("2026-05-05T00:00:00.000Z");
+        const result = yield* inTransaction((tx, m) =>
+          m.archivePerson(tx, {
+            person: seeded,
+            eventTimestamp,
+            mergedIntoPersonId: targetId,
+          }),
+        );
+        expect(result.archivedAt?.getTime()).toBe(eventTimestamp.getTime());
+        expect(result.mergedIntoPersonId).toBe(targetId);
+
+        const row = yield* findPersonRow(personId);
+        expect(row?.archivedAt).not.toBeNull();
+        expect(row?.archivedAt?.getTime()).toBe(eventTimestamp.getTime());
+        expect(row?.mergedIntoPersonId).toBe(targetId);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "is a no-op (no write) when already archived into the same target",
+    withIdentityCleanup((track) =>
+      Effect.gen(function* () {
+        const personId = `person_it_archive_idem_${Date.now()}_${seq++}`;
+        const targetId = `person_it_archive_idem_tgt_${Date.now()}_${seq++}`;
+        track.person(personId);
+        track.person(targetId);
+
+        yield* seedPerson({ id: targetId });
+        const archivedAt = new Date("2026-06-06T00:00:00.000Z");
+        const seeded = yield* seedPerson({
+          id: personId,
+          archivedAt,
+          mergedIntoPersonId: targetId,
+        });
+
+        const result = yield* inTransaction((tx, m) =>
+          m.archivePerson(tx, {
+            person: seeded,
+            // A different timestamp that must NOT be written because the row is
+            // already archived into this target.
+            eventTimestamp: new Date("2026-07-07T00:00:00.000Z"),
+            mergedIntoPersonId: targetId,
+          }),
+        );
+        // The helper short-circuits and returns the unchanged person.
+        expect(result.archivedAt?.getTime()).toBe(archivedAt.getTime());
+
+        const row = yield* findPersonRow(personId);
+        expect(row?.archivedAt?.getTime()).toBe(archivedAt.getTime());
+        expect(row?.mergedIntoPersonId).toBe(targetId);
+      }),
+    ).pipe(CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/personIdentity/IdentityProjectionPublisher.integration.test.ts b/packages/core/test/services/personIdentity/IdentityProjectionPublisher.integration.test.ts
new file mode 100644
index 000000000..2d7a39d21
--- /dev/null
+++ b/packages/core/test/services/personIdentity/IdentityProjectionPublisher.integration.test.ts
@@ -0,0 +1,536 @@
+/**
+ * Integration tests for {@link IdentityProjectionPublisher}, run against the
+ * real backend stack provisioned once by `test/_testing/globalSetup.ts`.
+ *
+ * The unit under test is the `analyticsWriterLayer` composition: it transforms
+ * the `IdentityProjectionInput` (the person snapshots + identity mapping events
+ * the identify-completion workflow produces) into the analytics writer's tagged
+ * message union and hands them to the *real* {@link AnalyticsWriterService},
+ * which fans them out into ClickHouse (`persons_v1` / `person_identity_v1`).
+ *
+ * Because the writer is real, these tests verify the *persisted* ClickHouse
+ * rows rather than the (discarded) intermediate `messageId`s — proving the two
+ * pure transforms (`toProcessorPersonEvent`, `toProcessorPersonIdentityEvent`)
+ * end-to-end:
+ *  - person snapshots land in `persons_v1` with their traits / version and the
+ *    organization id resolved from MySQL `project` by the writer,
+ *  - identity mappings land in `person_identity_v1` with the correct
+ *    `previous_distinct_id` derivation,
+ *  - optional person fields (`email` / `name` / `primary_distinct_id` /
+ *    `merged_into_person_id`) are omitted (written `NULL`) when absent and
+ *    present when supplied,
+ *  - a ClickHouse insert failure surfaces as the publisher's stable
+ *    {@link QueueProducerError} tagged with `queueName: "AnalyticsWriterService"`.
+ *
+ * Conventions (mirroring {@link AnalyticsWriterService} integration tests):
+ *  - The harness binds ClickHouse's read-write user, which reads cross-tenant
+ *    rows with no row policy, so these tests both insert (via the publisher) and
+ *    read their own rows back directly via {@link ClickhouseWebClient}.
+ *  - Every row is namespaced by a unique `person_id` / `distinct_id` (via
+ *    {@link uniqueId}) and asserted by membership, never by a table-wide count.
+ *  - ClickHouse `MergeTree` has no cascading delete, so
+ *    {@link withClickhouseCleanup} issues a best-effort `ALTER TABLE … DELETE`
+ *    mutation per table on exit (success or failure) via `Effect.ensuring`.
+ *  - Typed failures are asserted with `Effect.flip` + `instanceof`, paired with
+ *    a state assertion on the failure path (project convention).
+ *  - `publishIdentityResult` carries no `AuthSession` permission guard, so there
+ *    is no forbidden-path case; the harness skeleton's
+ *    `CoreAuthSession.authenticate()` is still applied for uniformity.
+ *  - The `noop` layer is intentionally untested here: it returns `Effect.void`
+ *    and is exercised through `PersonIdentityService`'s own tests (see the
+ *    per-target plan notes).
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+
+import { IdentityProjectionPublisher } from "@voidhash/core/services/personIdentity/IdentityProjectionPublisher";
+import { AnalyticsWriterService } from "@voidhash/core/services/analyticsIngest/AnalyticsWriterService";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { QueueProducerError } from "@voidhash/core/services/infrastructure/QueueProducer";
+import type {
+  PersonIdentityEventV1,
+  PersonSnapshotEventV1,
+} from "@voidhash/core/domain/person/Person";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+const organizationId = CoreTestFixture.organizationId;
+
+const PERSONS_TABLE = "persons_v1";
+const PERSON_IDENTITY_TABLE = "person_identity_v1";
+// A mapping event whose `distinctId` differs from `identity.distinctId` AND
+// whose `version > 0` makes the writer's plan ALSO emit override +
+// pending-override rows (keyed by the rewritten identity distinct id), so these
+// must be reclaimed too — the global MySQL sweep never touches ClickHouse.
+const PERSON_IDENTITY_OVERRIDES_TABLE = "person_identity_overrides_v1";
+const PERSON_IDENTITY_PENDING_OVERRIDES_TABLE = "person_identity_pending_overrides_v2";
+
+/**
+ * The publisher's `analyticsWriterLayer` wired over the real
+ * {@link AnalyticsWriterService}. The writer in turn only needs `ClickhouseWebClient`
+ * and `Db`, both provided by the harness, so the test's remaining requirements stay
+ * within the harness service set.
+ */
+const PublisherLayer = IdentityProjectionPublisher.analyticsWriterLayer.pipe(
+  Layer.provide(AnalyticsWriterService.layer),
+);
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+const uniqueId = (label: string) => `it-ipp-${label}-${Date.now()}-${idSeq++}`;
+
+/**
+ * Build a {@link PersonSnapshotEventV1}. Optional fields (`email` / `name` /
+ * `mergedIntoPersonId` / `primaryDistinctId`) are only set when supplied, so a
+ * test can drive the optional-field omission branch of `toProcessorPersonEvent`.
+ */
+const personEvent = (overrides: {
+  readonly personId: string;
+  readonly email?: string;
+  readonly name?: string;
+  readonly mergedIntoPersonId?: string;
+  readonly primaryDistinctId?: string;
+  readonly traits?: Record<string, unknown>;
+  readonly version?: number;
+  readonly isArchived?: boolean;
+}): PersonSnapshotEventV1 => ({
+  changedAt: new Date().toISOString(),
+  personId: overrides.personId,
+  ...(overrides.email ? { email: overrides.email } : {}),
+  isArchived: overrides.isArchived ?? false,
+  ...(overrides.mergedIntoPersonId ? { mergedIntoPersonId: overrides.mergedIntoPersonId } : {}),
+  ...(overrides.name ? { name: overrides.name } : {}),
+  ...(overrides.primaryDistinctId ? { primaryDistinctId: overrides.primaryDistinctId } : {}),
+  projectId,
+  schemaVersion: 1,
+  traits: overrides.traits ?? {},
+  version: overrides.version ?? 1,
+});
+
+/** Build a {@link PersonIdentityEventV1} mapping `distinctId` → `personId`. */
+const mappingEvent = (overrides: {
+  readonly personId: string;
+  readonly distinctId: string;
+  readonly version?: number;
+  readonly isDeleted?: boolean;
+}): PersonIdentityEventV1 => ({
+  changedAt: new Date().toISOString(),
+  distinctId: overrides.distinctId,
+  isDeleted: overrides.isDeleted ?? false,
+  // `kind` is part of the wire event but the publisher's identity transform
+  // ignores it (it never reaches ClickHouse); `2` is `PersonIdentityKind.Identified`,
+  // kept here only so the fixture stays realistic.
+  kind: 2,
+  personId: overrides.personId,
+  projectId,
+  schemaVersion: 1,
+  version: overrides.version ?? 1,
+});
+
+/** Read back the person rows for the given person ids straight from ClickHouse. */
+const findPersonRows = (personIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (personIds.length === 0) return [];
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    return yield* ch<{
+      person_id: string;
+      organization_id: string;
+      project_id: string;
+      email: string | null;
+      name: string | null;
+      primary_distinct_id: string | null;
+      merged_into_person_id: string | null;
+      is_archived: number;
+      version: string;
+      traits: string;
+    }>`SELECT person_id, organization_id, project_id, email, name, primary_distinct_id,
+              merged_into_person_id, is_archived, toString(version) AS version, traits
+       FROM ${ch.literal(PERSONS_TABLE)} WHERE person_id IN ${ch.param("Array(String)", [...personIds])}`;
+  });
+
+/**
+ * Read back the identity-mapping rows for the given distinct ids.
+ *
+ * `person_identity_v1` is `ReplacingMergeTree(version)` keyed on
+ * `(project_id, distinct_id)`, so reads use `FINAL` to collapse duplicate sort
+ * keys to the surviving (highest-`version`) row deterministically — without it
+ * the result would depend on background merge timing.
+ */
+const findIdentityRows = (distinctIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (distinctIds.length === 0) return [];
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    return yield* ch<{
+      person_id: string;
+      organization_id: string;
+      project_id: string;
+      distinct_id: string;
+      previous_distinct_id: string | null;
+      is_deleted: number;
+      version: string;
+    }>`SELECT person_id, organization_id, project_id, distinct_id, previous_distinct_id,
+              is_deleted, toString(version) AS version
+       FROM ${ch.literal(PERSON_IDENTITY_TABLE)} FINAL WHERE distinct_id IN ${ch.param("Array(String)", [...distinctIds])}`;
+  });
+
+/**
+ * Best-effort ClickHouse reclamation. MergeTree mutations are asynchronous, so
+ * each `ALTER TABLE … DELETE` is fire-and-forget and `ignore`d — a failed or
+ * slow mutation must never turn the finalizer into a test failure. Persons are
+ * cleared by `person_id`; identity rows by `distinct_id`. The override table is
+ * keyed by the same (rewritten) `distinct_id` and the pending-override table by
+ * `target_distinct_id`, so the tracked identity distinct ids reclaim those too
+ * — a mapping with a derived `previous_distinct_id` and `version > 0` lands rows
+ * in all three identity tables.
+ */
+const cleanupClickhouse = (created: {
+  readonly personIds: ReadonlyArray<string>;
+  readonly distinctIds: ReadonlyArray<string>;
+}) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const personIds = [...created.personIds];
+    const distinctIds = [...created.distinctIds];
+
+    if (personIds.length > 0) {
+      yield* ch
+        .asCommand(
+          ch`ALTER TABLE ${ch.literal(PERSONS_TABLE)} DELETE WHERE person_id IN ${ch.param("Array(String)", personIds)}`,
+        )
+        .pipe(Effect.ignore);
+    }
+    if (distinctIds.length > 0) {
+      for (const table of [PERSON_IDENTITY_TABLE, PERSON_IDENTITY_OVERRIDES_TABLE]) {
+        yield* ch
+          .asCommand(
+            ch`ALTER TABLE ${ch.literal(table)} DELETE WHERE distinct_id IN ${ch.param("Array(String)", distinctIds)}`,
+          )
+          .pipe(Effect.ignore);
+      }
+      yield* ch
+        .asCommand(
+          ch`ALTER TABLE ${ch.literal(PERSON_IDENTITY_PENDING_OVERRIDES_TABLE)} DELETE WHERE target_distinct_id IN ${ch.param("Array(String)", distinctIds)}`,
+        )
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every ClickHouse row it writes is reclaimed afterward,
+ * regardless of how the test exits. Pass each written `person_id` to
+ * `trackPerson` and each `distinct_id` to `trackDistinct`; cleanup reads the
+ * collected ids lazily at finalization via `Effect.ensuring`.
+ */
+const withClickhouseCleanup = <E, R>(
+  body: (track: {
+    readonly trackPerson: (id: string) => void;
+    readonly trackDistinct: (id: string) => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | ClickhouseWebClient.ClickhouseWebClient> => {
+  const personIds: string[] = [];
+  const distinctIds: string[] = [];
+  return body({
+    trackDistinct: (id) => {
+      distinctIds.push(id);
+    },
+    trackPerson: (id) => {
+      personIds.push(id);
+    },
+  }).pipe(Effect.ensuring(cleanupClickhouse({ distinctIds, personIds })));
+};
+
+describe("IdentityProjectionPublisher.publishIdentityResult (analyticsWriterLayer)", () => {
+  test(
+    "transforms an identified person snapshot + mapping event into ClickHouse rows",
+    withClickhouseCleanup(({ trackDistinct, trackPerson }) =>
+      Effect.gen(function* () {
+        const publisher = yield* IdentityProjectionPublisher;
+
+        const personId = uniqueId("happy-person");
+        const distinctId = uniqueId("happy-distinct");
+        trackPerson(personId);
+        trackDistinct(distinctId);
+
+        yield* publisher.publishIdentityResult({
+          identity: { distinctId },
+          mappingEvents: [mappingEvent({ distinctId, personId, version: 2 })],
+          personEvents: [
+            personEvent({
+              email: "happy@voidhash.test",
+              name: "Happy Person",
+              personId,
+              primaryDistinctId: distinctId,
+              traits: { tier: "gold" },
+              version: 5,
+            }),
+          ],
+        });
+
+        const personRows = yield* findPersonRows([personId]);
+        const personRow = personRows.find((row) => row.person_id === personId);
+        expect(personRow).toBeDefined();
+        expect(personRow?.project_id).toBe(projectId);
+        // Writer resolves the organization from MySQL `project`, not from the event.
+        expect(personRow?.organization_id).toBe(organizationId);
+        expect(personRow?.email).toBe("happy@voidhash.test");
+        expect(personRow?.name).toBe("Happy Person");
+        expect(personRow?.primary_distinct_id).toBe(distinctId);
+        expect(personRow?.is_archived).toBe(0);
+        expect(personRow?.version).toBe("5");
+        expect(JSON.parse(personRow?.traits ?? "{}")).toEqual({ tier: "gold" });
+
+        const identityRows = yield* findIdentityRows([distinctId]);
+        const identityRow = identityRows.find((row) => row.distinct_id === distinctId);
+        expect(identityRow).toBeDefined();
+        expect(identityRow?.person_id).toBe(personId);
+        expect(identityRow?.project_id).toBe(projectId);
+        expect(identityRow?.organization_id).toBe(organizationId);
+        expect(identityRow?.is_deleted).toBe(0);
+        expect(identityRow?.version).toBe("2");
+        // distinctId === identity.distinctId → no previous distinct id derived.
+        expect(identityRow?.previous_distinct_id).toBeNull();
+      }),
+    ).pipe(Effect.provide(PublisherLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "omits optional person fields (email/name/primaryDistinctId/mergedIntoPersonId) when absent",
+    withClickhouseCleanup(({ trackPerson }) =>
+      Effect.gen(function* () {
+        const publisher = yield* IdentityProjectionPublisher;
+
+        const personId = uniqueId("minimal-person");
+        trackPerson(personId);
+
+        // Only the required fields — every optional field is absent, so the
+        // transform must omit it (and the writer writes NULL).
+        yield* publisher.publishIdentityResult({
+          identity: { distinctId: uniqueId("minimal-distinct") },
+          mappingEvents: [],
+          personEvents: [personEvent({ personId })],
+        });
+
+        const personRows = yield* findPersonRows([personId]);
+        const personRow = personRows.find((row) => row.person_id === personId);
+        expect(personRow).toBeDefined();
+        expect(personRow?.email).toBeNull();
+        expect(personRow?.name).toBeNull();
+        expect(personRow?.primary_distinct_id).toBeNull();
+        expect(personRow?.merged_into_person_id).toBeNull();
+      }),
+    ).pipe(Effect.provide(PublisherLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "includes optional person fields (email/name/primaryDistinctId/mergedIntoPersonId) when present",
+    withClickhouseCleanup(({ trackPerson }) =>
+      Effect.gen(function* () {
+        const publisher = yield* IdentityProjectionPublisher;
+
+        const personId = uniqueId("full-person");
+        const mergedInto = uniqueId("full-merged");
+        const primaryDistinct = uniqueId("full-primary");
+        trackPerson(personId);
+
+        yield* publisher.publishIdentityResult({
+          identity: { distinctId: primaryDistinct },
+          mappingEvents: [],
+          personEvents: [
+            personEvent({
+              email: "full@voidhash.test",
+              isArchived: true,
+              mergedIntoPersonId: mergedInto,
+              name: "Full Person",
+              personId,
+              primaryDistinctId: primaryDistinct,
+            }),
+          ],
+        });
+
+        const personRows = yield* findPersonRows([personId]);
+        const personRow = personRows.find((row) => row.person_id === personId);
+        expect(personRow).toBeDefined();
+        expect(personRow?.email).toBe("full@voidhash.test");
+        expect(personRow?.name).toBe("Full Person");
+        expect(personRow?.primary_distinct_id).toBe(primaryDistinct);
+        expect(personRow?.merged_into_person_id).toBe(mergedInto);
+        expect(personRow?.is_archived).toBe(1);
+      }),
+    ).pipe(Effect.provide(PublisherLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "derives previous_distinct_id when the mapping distinct id differs from the identity distinct id",
+    withClickhouseCleanup(({ trackDistinct }) =>
+      Effect.gen(function* () {
+        const publisher = yield* IdentityProjectionPublisher;
+
+        const personId = uniqueId("prev-person");
+        const identityDistinct = uniqueId("prev-identity");
+        const mappingDistinct = uniqueId("prev-mapping");
+        // The persisted identity row is keyed by the identity distinct id (the
+        // transform rewrites `distinctId` to it and stores the mapping distinct
+        // id as `previous_distinct_id`), so reclaim by that id. Because a
+        // derived previous distinct id + `version > 0` also lands override +
+        // pending-override rows (both keyed by this same identity distinct id),
+        // tracking it reclaims all three identity tables.
+        trackDistinct(identityDistinct);
+
+        yield* publisher.publishIdentityResult({
+          identity: { distinctId: identityDistinct },
+          mappingEvents: [mappingEvent({ distinctId: mappingDistinct, personId, version: 3 })],
+          personEvents: [],
+        });
+
+        const identityRows = yield* findIdentityRows([identityDistinct]);
+        const identityRow = identityRows.find((row) => row.distinct_id === identityDistinct);
+        expect(identityRow).toBeDefined();
+        expect(identityRow?.person_id).toBe(personId);
+        // distinctId rewritten to the identity distinct id, mapping distinct id
+        // becomes the previous distinct id.
+        expect(identityRow?.distinct_id).toBe(identityDistinct);
+        expect(identityRow?.previous_distinct_id).toBe(mappingDistinct);
+        expect(identityRow?.version).toBe("3");
+
+        // The mapping distinct id is NOT written as its own identity row.
+        const mappingRows = yield* findIdentityRows([mappingDistinct]);
+        expect(mappingRows.some((row) => row.distinct_id === mappingDistinct)).toBe(false);
+      }),
+    ).pipe(Effect.provide(PublisherLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "omits previous_distinct_id when the mapping distinct id equals the identity distinct id",
+    withClickhouseCleanup(({ trackDistinct }) =>
+      Effect.gen(function* () {
+        const publisher = yield* IdentityProjectionPublisher;
+
+        const personId = uniqueId("same-person");
+        const distinctId = uniqueId("same-distinct");
+        trackDistinct(distinctId);
+
+        yield* publisher.publishIdentityResult({
+          identity: { distinctId },
+          mappingEvents: [mappingEvent({ distinctId, personId })],
+          personEvents: [],
+        });
+
+        const identityRows = yield* findIdentityRows([distinctId]);
+        const identityRow = identityRows.find((row) => row.distinct_id === distinctId);
+        expect(identityRow).toBeDefined();
+        expect(identityRow?.distinct_id).toBe(distinctId);
+        expect(identityRow?.previous_distinct_id).toBeNull();
+      }),
+    ).pipe(Effect.provide(PublisherLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "writes multiple persons and identities in one batch",
+    withClickhouseCleanup(({ trackDistinct, trackPerson }) =>
+      Effect.gen(function* () {
+        const publisher = yield* IdentityProjectionPublisher;
+
+        const personA = uniqueId("batch-person-a");
+        const personB = uniqueId("batch-person-b");
+        const distinctA = uniqueId("batch-distinct-a");
+        const distinctB = uniqueId("batch-distinct-b");
+        trackPerson(personA);
+        trackPerson(personB);
+        // A single `publishIdentityResult` call carries ONE identity distinct id;
+        // `toProcessorPersonIdentityEvent` rewrites every mapping whose distinctId
+        // differs from it to that identity distinct id (storing the original as
+        // `previous_distinct_id`). With `identity.distinctId = distinctA`, A's
+        // mapping is kept as-is but B's mapping is rewritten to distinctA — so the
+        // only persisted identity `distinct_id` is distinctA, and that is the only
+        // id worth reclaiming (distinctB becomes a `previous_distinct_id`).
+        trackDistinct(distinctA);
+
+        yield* publisher.publishIdentityResult({
+          identity: { distinctId: distinctA },
+          mappingEvents: [
+            // distinctId === identity.distinctId → kept, no previous distinct id,
+            // version defaults to 1.
+            mappingEvent({ distinctId: distinctA, personId: personA }),
+            // distinctId !== identity.distinctId → rewritten to distinctA with
+            // previous_distinct_id = distinctB (and version > 0 also lands
+            // override + pending-override rows). version = 2.
+            mappingEvent({ distinctId: distinctB, personId: personB, version: 2 }),
+          ],
+          personEvents: [
+            personEvent({ name: "Batch A", personId: personA }),
+            personEvent({ name: "Batch B", personId: personB }),
+          ],
+        });
+
+        // Person rows are keyed by (project_id, person_id), so the two persons
+        // land as independent rows regardless of the identity distinct id.
+        const personRows = yield* findPersonRows([personA, personB]);
+        expect(personRows.some((row) => row.person_id === personA)).toBe(true);
+        expect(personRows.some((row) => row.person_id === personB)).toBe(true);
+
+        // BOTH mappings are rewritten/kept to the SAME identity distinct_id
+        // (distinctA), so they collide on the `person_identity_v1` sort key
+        // `(project_id, distinct_id)`. The table is `ReplacingMergeTree(version)`,
+        // so the two rows do NOT coexist — `FINAL` collapses them to the single
+        // surviving row with the highest `version`. A's mapping is version 1 and
+        // B's (rewritten) mapping is version 2, so the converged identity row is
+        // B's: person_id = personB, previous_distinct_id = distinctB, version 2.
+        // A's row is replaced and does not survive.
+        const identityRows = yield* findIdentityRows([distinctA]);
+        const survivor = identityRows.find((row) => row.distinct_id === distinctA);
+        expect(survivor).toBeDefined();
+        expect(survivor?.person_id).toBe(personB);
+        expect(survivor?.previous_distinct_id).toBe(distinctB);
+        expect(survivor?.version).toBe("2");
+        // The lower-version mapping (personA, version 1) loses the dedup and is
+        // not the surviving row under distinctA.
+        expect(
+          identityRows.some((row) => row.distinct_id === distinctA && row.person_id === personA),
+        ).toBe(false);
+
+        // distinctB is never written as its own identity row (only as a
+        // previous distinct id), so a lookup by it returns nothing.
+        const distinctBRows = yield* findIdentityRows([distinctB]);
+        expect(distinctBRows.some((row) => row.distinct_id === distinctB)).toBe(false);
+      }),
+    ).pipe(Effect.provide(PublisherLayer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "wraps a writer/ClickHouse insert failure as QueueProducerError(queueName=AnalyticsWriterService) and writes nothing",
+    // No cleanup wrapper: the rejected batch lands no rows.
+    Effect.gen(function* () {
+      const publisher = yield* IdentityProjectionPublisher;
+
+      // `version` maps to the `UInt64` column `version`; a negative value is
+      // rejected by ClickHouse at insert time, surfacing as a SqlError
+      // the writer maps to AnalyticsWriterServiceError, which the publisher in
+      // turn wraps as its stable QueueProducerError. `changedAt` stays a valid
+      // ISO string so `toClickhouseTimestamp` does not throw first (that would
+      // be an uncaught defect, not the typed failure under test).
+      const personId = uniqueId("bad-person");
+      const error = yield* Effect.flip(
+        publisher.publishIdentityResult({
+          identity: { distinctId: uniqueId("bad-distinct") },
+          mappingEvents: [],
+          personEvents: [personEvent({ personId, version: -1 })],
+        }),
+      );
+
+      expect(error).toBeInstanceOf(QueueProducerError);
+      if (error instanceof QueueProducerError) {
+        expect(error._tag).toBe("QueueProducerError");
+        expect(error.queueName).toBe("AnalyticsWriterService");
+      }
+
+      // The rejected person row must not have landed.
+      const personRows = yield* findPersonRows([personId]);
+      expect(personRows.some((row) => row.person_id === personId)).toBe(false);
+    }).pipe(Effect.provide(PublisherLayer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/personIdentity/PersonIdentityService.integration.test.ts b/packages/core/test/services/personIdentity/PersonIdentityService.integration.test.ts
new file mode 100644
index 000000000..b1c10518f
--- /dev/null
+++ b/packages/core/test/services/personIdentity/PersonIdentityService.integration.test.ts
@@ -0,0 +1,806 @@
+/**
+ * Integration tests for {@link PersonIdentityService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB + ClickHouse + WorkOS; only the project schema cache is an
+ * in-memory stub).
+ *
+ * Both public methods (`resolveDistinctId` / `identifyDistinctId`) drive the
+ * person-identity-resolution aggregate entirely through `db.transaction`, so
+ * these tests verify the *persisted* side effects, not just the returned
+ * `PersonIdentityResult`:
+ *  - the `person` row created / profile-merged in MySQL,
+ *  - the `person_identity` mapping row (with `kind` derived from the distinct-id
+ *    prefix) or the `person_personless_identity` row,
+ *  - the `person_identity_migration_job` row enqueued by `identifyDistinctId`,
+ *  - the asynchronous completion workflow dispatch (or its deliberate absence).
+ *
+ * Conventions:
+ *  - {@link IdentityProjectionPublisher.noop} replaces the analytics-writer
+ *    publisher so the tests need no ClickHouse writer plumbing; a per-test
+ *    {@link trackingWorkflowLayer} stub captures the fire-and-forget workflow
+ *    dispatches so we can assert them deterministically. The full
+ *    service-under-test layer is provided at the pipe level so each test's
+ *    remaining requirements reduce to the harness services.
+ *  - Every distinct id is namespaced + unique per call so concurrent runs and
+ *    leftover rows from a crashed run never collide; persons/identities are NOT
+ *    swept by the global teardown, so each test deletes the exact rows it
+ *    created (and dependent migration jobs / mapping rows) via
+ *    {@link withCleanup}'s `Effect.ensuring` finalizer, success or failure.
+ *  - Typed failures are asserted with `Effect.flip` + `instanceof`
+ *    ({@link PersonServiceError}), paired with a DB-state assertion proving the
+ *    rejected write left nothing behind.
+ */
+import { Effect, Layer, Ref } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { IdentityProjectionPublisher, PersonIdentityService } from "@voidhash/core/services";
+import {
+  type IdentifyDistinctIdCompletionInput,
+  IdentifyDistinctIdCompletionWorkflow,
+} from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PersonServiceError } from "@voidhash/core/services/persons/PersonService";
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import {
+  Db,
+  PersonIdentityKind,
+  PersonOrigin,
+  and,
+  eq,
+  identityAssertions,
+  inArray,
+  or,
+  personIdentities,
+  personIdentityMigrationJobs,
+  personPersonlessIdentities,
+  persons,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so distinct ids stay unique even within the same ms. */
+let seq = 0;
+const uniqueDistinctId = (label: string) => `it-pid-${label}-${Date.now()}-${seq++}`;
+const anonymousDistinctId = (label: string) =>
+  `${ANONYMOUS_USER_ID_PREFIX}it-pid-${label}-${Date.now()}-${seq++}`;
+
+// --- raw DB read-back helpers (bypass the service) ---------------------------
+
+const findPersonRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.persons.findFirst({ where: { id } });
+  });
+
+const findIdentityRow = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personIdentities.findFirst({
+      where: { projectId, distinctId },
+    });
+  });
+
+const findPersonlessRow = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personPersonlessIdentities.findFirst({
+      where: { projectId, distinctId },
+    });
+  });
+
+const findMigrationJobsForDistinctId = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(personIdentityMigrationJobs)
+      .where(
+        and(
+          eq(personIdentityMigrationJobs.projectId, projectId),
+          eq(personIdentityMigrationJobs.distinctId, distinctId),
+        ),
+      );
+  });
+
+const findAssertionRows = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(identityAssertions)
+      .where(
+        and(
+          eq(identityAssertions.projectId, projectId),
+          or(
+            eq(identityAssertions.distinctIdA, distinctId),
+            eq(identityAssertions.distinctIdB, distinctId),
+          ),
+        ),
+      );
+  });
+
+// --- self-cleanup ------------------------------------------------------------
+
+interface Tracked {
+  readonly distinctIds: string[];
+  readonly personIds: string[];
+}
+
+/**
+ * Delete every row the test created, dependents first. Migration jobs and
+ * identity mappings reference persons via FK, so they are cleared before the
+ * person rows. Each delete is `ignore`d so a missing row never turns the
+ * finalizer into a failure.
+ */
+const cleanup = (tracked: Tracked) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const personIds = [...new Set(tracked.personIds)];
+    const distinctIds = [...new Set(tracked.distinctIds)];
+    if (personIds.length === 0 && distinctIds.length === 0) return;
+
+    if (distinctIds.length > 0) {
+      yield* db
+        .delete(personIdentityMigrationJobs)
+        .where(
+          and(
+            eq(personIdentityMigrationJobs.projectId, projectId),
+            inArray(personIdentityMigrationJobs.distinctId, distinctIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(personIdentities)
+        .where(
+          and(
+            eq(personIdentities.projectId, projectId),
+            inArray(personIdentities.distinctId, distinctIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(personPersonlessIdentities)
+        .where(
+          and(
+            eq(personPersonlessIdentities.projectId, projectId),
+            inArray(personPersonlessIdentities.distinctId, distinctIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(identityAssertions)
+        .where(
+          and(
+            eq(identityAssertions.projectId, projectId),
+            or(
+              inArray(identityAssertions.distinctIdA, distinctIds),
+              inArray(identityAssertions.distinctIdB, distinctIds),
+            ),
+          ),
+        )
+        .pipe(Effect.ignore);
+    }
+    if (personIds.length > 0) {
+      yield* db
+        .delete(personIdentityMigrationJobs)
+        .where(inArray(personIdentityMigrationJobs.targetPersonId, personIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(personIdentities)
+        .where(inArray(personIdentities.personId, personIds))
+        .pipe(Effect.ignore);
+      yield* db.delete(persons).where(inArray(persons.id, personIds)).pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every person / identity it touches is removed afterward,
+ * regardless of how the test exits. Pass created ids to `track.person(...)` /
+ * `track.distinctId(...)`; the finalizer reads the collected ids lazily so it
+ * sees everything tracked while the body ran (including on failure).
+ */
+const withCleanup = <E, R>(
+  body: (track: {
+    person: (id: string) => void;
+    distinctId: (id: string) => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const tracked: Tracked = { distinctIds: [], personIds: [] };
+  return body({
+    person: (id) => tracked.personIds.push(id),
+    distinctId: (id) => tracked.distinctIds.push(id),
+  }).pipe(Effect.ensuring(cleanup(tracked)));
+};
+
+// --- workflow dispatch tracking stub ----------------------------------------
+
+/**
+ * A {@link IdentifyDistinctIdCompletionWorkflow} layer that records every
+ * `dispatch` payload into the supplied {@link Ref}. The concrete workflow is a
+ * Cloudflare Workflow (no in-process seam), so this stub lets us assert *that*
+ * (and with what payload) `identifyDistinctId` schedules the async migration.
+ */
+const trackingWorkflowLayer = (ref: Ref.Ref<ReadonlyArray<IdentifyDistinctIdCompletionInput>>) =>
+  Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+    dispatch: (input) => Ref.update(ref, (calls) => [...calls, input]),
+  });
+
+/**
+ * Build the service-under-test wiring for one test: the real
+ * {@link PersonIdentityService} layer over the noop projection publisher,
+ * merged with a fresh dispatch-tracking workflow stub. The workflow is resolved
+ * inside `identifyDistinctId`'s body (not at layer-build time), so it must be
+ * provided at the call-site level — hence it is merged into `layer` rather than
+ * provided *into* `PersonIdentityService.layer`. The `Ref` is created
+ * synchronously so the same instance can be closed over by both the provided
+ * `layer` (which discharges `R` to the harness services) and the assertions.
+ */
+const makeServiceWiring = () => {
+  const dispatches = Effect.runSync(Ref.make<ReadonlyArray<IdentifyDistinctIdCompletionInput>>([]));
+  const layer = Layer.mergeAll(
+    PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
+    trackingWorkflowLayer(dispatches),
+  );
+  return { dispatches, layer };
+};
+
+const baseInput = (distinctId: string, eventTimestamp: Date) => ({
+  distinctId,
+  eventTimestamp,
+  projectId,
+  setAttributes: {} as Record<string, unknown>,
+  setOnceAttributes: {} as Record<string, unknown>,
+});
+
+describe("PersonIdentityService.resolveDistinctId", () => {
+  const personless = makeServiceWiring();
+  test(
+    "shouldCreatePerson=false with no mapping creates a personless identity row (mode='personless', no person)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const distinctId = uniqueDistinctId("personless");
+        track.distinctId(distinctId);
+
+        const result = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, new Date()),
+          shouldCreatePerson: false,
+        });
+
+        expect(result.identity.mode).toBe("personless");
+        expect(result.identity.personId).toBeUndefined();
+        expect(result.identity.distinctId).toBe(distinctId);
+        expect(result.personEvents).toEqual([]);
+        expect(result.mappingEvents).toEqual([]);
+
+        // Persisted side effect: personless row exists, no person/identity created.
+        const personlessRow = yield* findPersonlessRow(distinctId);
+        expect(personlessRow).toBeDefined();
+        expect(personlessRow?.isMerged).toBe(false);
+        expect(yield* findIdentityRow(distinctId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(personless.layer), CoreAuthSession.authenticate()),
+  );
+
+  const reuse = makeServiceWiring();
+  test(
+    "shouldCreatePerson=false with an existing mapping returns the mapped person (mode='full', no writes)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const distinctId = uniqueDistinctId("reuse-readonly");
+        track.distinctId(distinctId);
+
+        // Seed a full mapping first (shouldCreatePerson=true creates person + identity).
+        const created = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, new Date()),
+          shouldCreatePerson: true,
+        });
+        const personId = created.identity.personId;
+        expect(personId).toBeDefined();
+        track.person(personId!);
+
+        // Read-only resolve must return the same person and write nothing new.
+        const resolved = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, new Date()),
+          shouldCreatePerson: false,
+        });
+
+        expect(resolved.identity.mode).toBe("full");
+        expect(resolved.identity.personId).toBe(personId);
+        expect(resolved.personEvents).toEqual([]);
+        expect(resolved.mappingEvents).toEqual([]);
+
+        // A full mapping must NOT have produced a personless row.
+        expect(yield* findPersonlessRow(distinctId)).toBeUndefined();
+      }),
+    ).pipe(Effect.provide(reuse.layer), CoreAuthSession.authenticate()),
+  );
+
+  const createFull = makeServiceWiring();
+  test(
+    "shouldCreatePerson=true with no mapping creates a person + identified mapping (kind from prefix)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const distinctId = uniqueDistinctId("create-full");
+        track.distinctId(distinctId);
+        const eventTimestamp = new Date();
+
+        const result = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, eventTimestamp),
+          shouldCreatePerson: true,
+        });
+
+        expect(result.identity.mode).toBe("full");
+        const personId = result.identity.personId;
+        expect(personId).toBeDefined();
+        expect(personId!.startsWith("person_")).toBe(true);
+        track.person(personId!);
+        // Newly created => exactly one snapshot event + one mapping event.
+        expect(result.personEvents).toHaveLength(1);
+        expect(result.personEvents[0]?.personId).toBe(personId);
+        expect(result.mappingEvents).toHaveLength(1);
+        expect(result.mappingEvents[0]?.distinctId).toBe(distinctId);
+
+        // Persisted: person row with default API origin + identified mapping.
+        const person = yield* findPersonRow(personId!);
+        expect(person?.projectId).toBe(projectId);
+        expect(person?.origin).toBe(PersonOrigin.API);
+        const mapping = yield* findIdentityRow(distinctId);
+        expect(mapping?.personId).toBe(personId);
+        // Non-anonymous distinct id derives the Identified kind.
+        expect(mapping?.kind).toBe(PersonIdentityKind.Identified);
+      }),
+    ).pipe(Effect.provide(createFull.layer), CoreAuthSession.authenticate()),
+  );
+
+  const createAnon = makeServiceWiring();
+  test(
+    "shouldCreatePerson=true derives the Anonymous mapping kind from the anonymous prefix",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const distinctId = anonymousDistinctId("create-anon");
+        track.distinctId(distinctId);
+
+        const result = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, new Date()),
+          shouldCreatePerson: true,
+        });
+
+        const personId = result.identity.personId;
+        expect(personId).toBeDefined();
+        track.person(personId!);
+
+        const mapping = yield* findIdentityRow(distinctId);
+        expect(mapping?.kind).toBe(PersonIdentityKind.Anonymous);
+      }),
+    ).pipe(Effect.provide(createAnon.layer), CoreAuthSession.authenticate()),
+  );
+
+  const mergeProfile = makeServiceWiring();
+  test(
+    "shouldCreatePerson=true on an existing mapping merges the profile and advances lastSeenAt, preserving firstSeenAt",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const distinctId = uniqueDistinctId("merge-profile");
+        track.distinctId(distinctId);
+
+        const firstTimestamp = new Date("2026-01-01T00:00:00.000Z");
+        const laterTimestamp = new Date("2026-02-01T00:00:00.000Z");
+
+        const created = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, firstTimestamp),
+          email: "first@example.test",
+          name: "First Name",
+          setOnceAttributes: { plan: "free" },
+          shouldCreatePerson: true,
+        });
+        const personId = created.identity.personId!;
+        track.person(personId);
+
+        // Second resolve: merge new traits, setOnce must not override existing.
+        yield* service.resolveDistinctId({
+          ...baseInput(distinctId, laterTimestamp),
+          setAttributes: { city: "Berlin" },
+          setOnceAttributes: { plan: "pro" },
+          shouldCreatePerson: true,
+        });
+
+        const person = yield* findPersonRow(personId);
+        const traits = (person?.traits ?? {}) as Record<string, unknown>;
+        expect(traits.city).toBe("Berlin");
+        // setOnce("plan") must be ignored because it was already present.
+        expect(traits.plan).toBe("free");
+        // firstSeenAt preserved (earlier), lastSeenAt advanced to the later event.
+        expect(person?.firstSeenAt?.getTime()).toBe(firstTimestamp.getTime());
+        expect(person?.lastSeenAt?.getTime()).toBe(laterTimestamp.getTime());
+      }),
+    ).pipe(Effect.provide(mergeProfile.layer), CoreAuthSession.authenticate()),
+  );
+
+  const identifiedProfile = makeServiceWiring();
+  test(
+    "persists email + name on a new person and surfaces them in the PersonSnapshotEvent",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const distinctId = uniqueDistinctId("identified-profile");
+        track.distinctId(distinctId);
+
+        const email = "person@example.test";
+        const name = "Jane Person";
+        const result = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, new Date()),
+          email,
+          name,
+          shouldCreatePerson: true,
+        });
+
+        const personId = result.identity.personId!;
+        track.person(personId);
+
+        const snapshot = result.personEvents[0];
+        expect(snapshot?.email).toBe(email);
+        expect(snapshot?.name).toBe(name);
+        expect(snapshot?.primaryDistinctId).toBe(distinctId);
+
+        const person = yield* findPersonRow(personId);
+        expect(person?.email).toBe(email);
+        expect(person?.name).toBe(name);
+      }),
+    ).pipe(Effect.provide(identifiedProfile.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PersonIdentityService.identifyDistinctId", () => {
+  const promote = makeServiceWiring();
+  test(
+    "merges an anonymous source into the older surviving person synchronously (oldest-wins)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const previousDistinctId = anonymousDistinctId("identify-prev");
+        const distinctId = uniqueDistinctId("identify-target");
+        track.distinctId(previousDistinctId);
+        track.distinctId(distinctId);
+
+        // Seed the anonymous source EARLIER than the identify so it is
+        // deterministically the older (surviving) person under oldest-wins.
+        const source = yield* service.resolveDistinctId({
+          ...baseInput(previousDistinctId, new Date(Date.now() - 60_000)),
+          setAttributes: { sourceTrait: "from-anon" },
+          shouldCreatePerson: true,
+        });
+        const survivorId = source.identity.personId!;
+        track.person(survivorId);
+
+        const result = yield* service.identifyDistinctId({
+          ...baseInput(distinctId, new Date()),
+          previousDistinctId,
+        });
+        track.person(result.identity.personId!);
+
+        expect(result.identity.mode).toBe("full");
+        expect(result.warnings).toEqual([]);
+        // The older anonymous person survives the merge.
+        expect(result.identity.personId).toBe(survivorId);
+
+        // Both distinct ids now resolve to the survivor in person_identity.
+        expect((yield* findIdentityRow(distinctId))?.personId).toBe(survivorId);
+        expect((yield* findIdentityRow(previousDistinctId))?.personId).toBe(survivorId);
+
+        // The younger (target) person was archived INTO the survivor synchronously.
+        const archived = result.personEvents.find((event) => event.isArchived);
+        expect(archived?.mergedIntoPersonId).toBe(survivorId);
+        track.person(archived!.personId);
+        const archivedRow = yield* findPersonRow(archived!.personId);
+        expect(archivedRow?.archivedAt ?? null).not.toBeNull();
+        expect(archivedRow?.mergedIntoPersonId).toBe(survivorId);
+
+        // Source traits live on the survivor; no async work is scheduled.
+        const survivor = yield* findPersonRow(survivorId);
+        expect((survivor?.traits as Record<string, unknown> | undefined)?.sourceTrait).toBe(
+          "from-anon",
+        );
+        yield* Effect.sleep("20 millis");
+        expect(yield* Ref.get(promote.dispatches)).toEqual([]);
+        expect(yield* findMigrationJobsForDistinctId(distinctId)).toEqual([]);
+      }),
+    ).pipe(Effect.provide(promote.layer), CoreAuthSession.authenticate()),
+  );
+
+  const anonTarget = makeServiceWiring();
+  test(
+    "rejects an anonymous-prefixed target and writes nothing",
+    Effect.gen(function* () {
+      const service = yield* PersonIdentityService;
+
+      const previousDistinctId = uniqueDistinctId("anon-target-prev");
+      const distinctId = anonymousDistinctId("anon-target");
+
+      const error = yield* Effect.flip(
+        service.identifyDistinctId({
+          ...baseInput(distinctId, new Date()),
+          previousDistinctId,
+        }),
+      );
+      expect(error).toBeInstanceOf(PersonServiceError);
+      if (error instanceof PersonServiceError) {
+        expect(error.cause).toBe("identify target distinct id cannot use the anonymous prefix");
+      }
+
+      // Nothing was written and no workflow dispatched (transaction rolled back
+      // before any insert, and the early failure precedes dispatch).
+      expect(yield* findIdentityRow(distinctId)).toBeUndefined();
+      expect(yield* findIdentityRow(previousDistinctId)).toBeUndefined();
+      expect(yield* Ref.get(anonTarget.dispatches)).toEqual([]);
+    }).pipe(Effect.provide(anonTarget.layer), CoreAuthSession.authenticate()),
+  );
+
+  const selfIdentify = makeServiceWiring();
+  test(
+    "self-identify (previous === distinct) is a no-op warning: no migration job, no dispatch",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const distinctId = uniqueDistinctId("self-identify");
+        track.distinctId(distinctId);
+
+        const result = yield* service.identifyDistinctId({
+          ...baseInput(distinctId, new Date()),
+          previousDistinctId: distinctId,
+        });
+
+        track.person(result.identity.personId!);
+        expect(result.warnings).toContain("self-identify is a no-op");
+
+        // The target person/mapping still exist, but no async work is scheduled.
+        expect(yield* findIdentityRow(distinctId)).toBeDefined();
+        expect(yield* findMigrationJobsForDistinctId(distinctId)).toEqual([]);
+        yield* Effect.sleep("50 millis");
+        expect(yield* Ref.get(selfIdentify.dispatches)).toEqual([]);
+      }),
+    ).pipe(Effect.provide(selfIdentify.layer), CoreAuthSession.authenticate()),
+  );
+
+  const conflict = makeServiceWiring();
+  test(
+    "source already identified to a different person: records a conflict warning, no migration job, no dispatch",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        // The source is an *identified* (non-anonymous) distinct id already
+        // mapped to its own person — the conflict case.
+        const previousDistinctId = uniqueDistinctId("conflict-prev");
+        const distinctId = uniqueDistinctId("conflict-target");
+        track.distinctId(previousDistinctId);
+        track.distinctId(distinctId);
+        const eventTimestamp = new Date();
+
+        const source = yield* service.resolveDistinctId({
+          ...baseInput(previousDistinctId, eventTimestamp),
+          setAttributes: { sourceOnly: "should-not-merge" },
+          shouldCreatePerson: true,
+        });
+        track.person(source.identity.personId!);
+
+        const result = yield* service.identifyDistinctId({
+          ...baseInput(distinctId, eventTimestamp),
+          previousDistinctId,
+        });
+
+        const targetPersonId = result.identity.personId!;
+        track.person(targetPersonId);
+        expect(targetPersonId).not.toBe(source.identity.personId);
+        expect(result.warnings).toContain(
+          "identify source already belongs to a different identified person",
+        );
+
+        // Conflicting source traits must NOT bleed into the target.
+        const targetPerson = yield* findPersonRow(targetPersonId);
+        const traits = (targetPerson?.traits ?? {}) as Record<string, unknown>;
+        expect(traits.sourceOnly).toBeUndefined();
+
+        // Conflict short-circuits the async path: no job, no dispatch.
+        expect(yield* findMigrationJobsForDistinctId(distinctId)).toEqual([]);
+        yield* Effect.sleep("50 millis");
+        expect(yield* Ref.get(conflict.dispatches)).toEqual([]);
+      }),
+    ).pipe(Effect.provide(conflict.layer), CoreAuthSession.authenticate()),
+  );
+
+  const mergeAttrs = makeServiceWiring();
+  test(
+    "merges setAttributes/setOnceAttributes into the target person profile",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const previousDistinctId = anonymousDistinctId("merge-attrs-prev");
+        const distinctId = uniqueDistinctId("merge-attrs-target");
+        track.distinctId(previousDistinctId);
+        track.distinctId(distinctId);
+        const eventTimestamp = new Date();
+
+        // Pre-create the target with an existing trait so setOnce can be tested.
+        const target = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, eventTimestamp),
+          setAttributes: { tier: "bronze" },
+          shouldCreatePerson: true,
+        });
+        const targetPersonId = target.identity.personId!;
+        track.person(targetPersonId);
+
+        const result = yield* service.identifyDistinctId({
+          ...baseInput(distinctId, eventTimestamp),
+          previousDistinctId,
+          setAttributes: { campaign: "spring" },
+          setOnceAttributes: { tier: "gold" },
+        });
+        track.person(result.identity.personId!);
+
+        const person = yield* findPersonRow(targetPersonId);
+        const traits = (person?.traits ?? {}) as Record<string, unknown>;
+        expect(traits.campaign).toBe("spring");
+        // setOnce("tier") must not override the pre-existing value.
+        expect(traits.tier).toBe("bronze");
+      }),
+    ).pipe(Effect.provide(mergeAttrs.layer), CoreAuthSession.authenticate()),
+  );
+
+  const freshTarget = makeServiceWiring();
+  test(
+    "creates a person_identity row for the target even when previously unmapped",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+
+        const previousDistinctId = anonymousDistinctId("fresh-target-prev");
+        const distinctId = uniqueDistinctId("fresh-target");
+        track.distinctId(previousDistinctId);
+        track.distinctId(distinctId);
+        const eventTimestamp = new Date();
+
+        // No prior resolve for the target — identify must map it on the fly.
+        expect(yield* findIdentityRow(distinctId)).toBeUndefined();
+
+        const result = yield* service.identifyDistinctId({
+          ...baseInput(distinctId, eventTimestamp),
+          previousDistinctId,
+        });
+        const targetPersonId = result.identity.personId!;
+        track.person(targetPersonId);
+
+        const mapping = yield* findIdentityRow(distinctId);
+        expect(mapping).toBeDefined();
+        expect(mapping?.personId).toBe(targetPersonId);
+        expect(mapping?.kind).toBe(PersonIdentityKind.Identified);
+      }),
+    ).pipe(Effect.provide(freshTarget.layer), CoreAuthSession.authenticate()),
+  );
+
+  // The synchronous transaction commits before `publisher.publishIdentityResult`
+  // is attempted, and a publish failure is caught + logged rather than surfaced
+  // (the DB is already updated). Asserting the log + the "DB committed
+  // regardless" behavior deterministically would require injecting a failing
+  // publisher and intercepting `Effect.logError`, which has no in-process seam
+  // here; the "DB committed" half is already proven by the happy-path tests.
+  it.todo(
+    "identifyDistinctId tolerates publisher failure: DB stays committed, error is logged (no in-process seam to inject a failing publish + capture the log)",
+  );
+
+  // Forcing a genuine MySQL transaction error in-process (so the `DatabaseError`
+  // → `PersonServiceError` catchTag fires) without hand-rolling a DB double is
+  // not reliably reproducible against the live PlanetScale instance; the brief
+  // forbids faking the DB. The mapping (DatabaseError wrapped as
+  // PersonServiceError) is exercised by the pure anonymous-prefix rejection
+  // test above, which already returns a `PersonServiceError`.
+  it.todo(
+    "resolveDistinctId / identifyDistinctId wrap a DB transaction error in PersonServiceError (cannot force a real DatabaseError in-process without faking the DB)",
+  );
+});
+
+describe("PersonIdentityService — order-agnostic behavior (Option B)", () => {
+  const lww = makeServiceWiring();
+  test(
+    "per-trait $set is last-write-wins by event timestamp regardless of processing order",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+        const distinctId = uniqueDistinctId("lww");
+        track.distinctId(distinctId);
+
+        const newer = new Date("2026-05-02T00:00:00.000Z");
+        const older = new Date("2026-05-01T00:00:00.000Z");
+
+        // Process the NEWER write first...
+        const created = yield* service.resolveDistinctId({
+          ...baseInput(distinctId, newer),
+          eventId: "evt-newer",
+          setAttributes: { plan: "pro" },
+          shouldCreatePerson: true,
+        });
+        const personId = created.identity.personId;
+        expect(personId).toBeDefined();
+        track.person(personId!);
+
+        // ...then the OLDER write arrives out of order — it must NOT regress `plan`.
+        yield* service.resolveDistinctId({
+          ...baseInput(distinctId, older),
+          eventId: "evt-older",
+          setAttributes: { plan: "free" },
+          shouldCreatePerson: true,
+        });
+
+        const row = yield* findPersonRow(personId!);
+        expect((row?.traits as Record<string, unknown>).plan).toBe("pro");
+        expect(row?.traitsMeta?.plan?.ts).toBe(newer.getTime());
+        expect(row?.traitsMeta?.plan?.mode).toBe("set");
+      }),
+    ).pipe(Effect.provide(lww.layer), CoreAuthSession.authenticate()),
+  );
+
+  const log = makeServiceWiring();
+  test(
+    "identify appends an idempotent identity_assertion row with the canonical sorted pair",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* PersonIdentityService;
+        const previousDistinctId = anonymousDistinctId("assert-src");
+        const distinctId = uniqueDistinctId("assert-dst");
+        track.distinctId(previousDistinctId);
+        track.distinctId(distinctId);
+
+        // Seed the anonymous source so the identify performs a real merge.
+        const seeded = yield* service.resolveDistinctId({
+          ...baseInput(previousDistinctId, new Date("2026-05-01T00:00:00.000Z")),
+          shouldCreatePerson: true,
+        });
+        track.person(seeded.identity.personId!);
+
+        const identifyInput = {
+          distinctId,
+          eventId: "evt-identify-1",
+          eventTimestamp: new Date("2026-05-02T00:00:00.000Z"),
+          previousDistinctId,
+          projectId,
+          setAttributes: {} as Record<string, unknown>,
+          setOnceAttributes: {} as Record<string, unknown>,
+        };
+        const result = yield* service.identifyDistinctId(identifyInput);
+        track.person(result.identity.personId!);
+
+        const [expectedA, expectedB] =
+          previousDistinctId <= distinctId
+            ? [previousDistinctId, distinctId]
+            : [distinctId, previousDistinctId];
+        const rows = yield* findAssertionRows(distinctId);
+        expect(rows).toHaveLength(1);
+        expect(rows[0]?.distinctIdA).toBe(expectedA);
+        expect(rows[0]?.distinctIdB).toBe(expectedB);
+        expect(rows[0]?.dedupKey).toBe("evt-identify-1");
+
+        // Idempotent: replaying the same identify (same eventId) adds no new row.
+        yield* service.identifyDistinctId(identifyInput);
+        expect(yield* findAssertionRows(distinctId)).toHaveLength(1);
+      }),
+    ).pipe(Effect.provide(log.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/persons/PersonService.integration.test.ts b/packages/core/test/services/persons/PersonService.integration.test.ts
new file mode 100644
index 000000000..4640bbc84
--- /dev/null
+++ b/packages/core/test/services/persons/PersonService.integration.test.ts
@@ -0,0 +1,620 @@
+/**
+ * Integration tests for {@link PersonService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * `PersonService` is the dashboard / admin surface for querying persons. It is
+ * a *read-heavy* service: the only writes are `createPerson` (delegated to
+ * {@link PersonIdentityService.resolveDistinctId}) and `mergePersons` (a direct
+ * `UPDATE` of the merge flags). Every test drives the service end-to-end and
+ * verifies the *persisted* state read straight back from MySQL, not just the
+ * method's return value.
+ *
+ * Dependency wiring: `PersonService` needs `PersonIdentityService`, which in
+ * turn needs an `IdentityProjectionPublisher` and an abstract
+ * `IdentifyDistinctIdCompletionWorkflow`. Neither is a harness service, so the
+ * test provides the publisher's {@link IdentityProjectionPublisher.noop} (the
+ * intended test/seam variant) and a no-op completion-workflow layer. The
+ * completion workflow is only ever dispatched from `identifyDistinctId`, which
+ * `PersonService` never calls, so the stub is purely there to satisfy the type.
+ *
+ * Conventions used throughout (see PerkService.integration.test.ts):
+ *  - Every test shares the one seeded fixture project ({@link CoreTestFixture})
+ *    but cleans up after itself: {@link withPersonCleanup} deletes the persons
+ *    (and their `person_identity` rows) it created on exit, success or failure.
+ *    The global teardown sweep is only a backstop. Assertions stay membership-
+ *    based (never exact `getPersons` counts) and distinct ids are unique per
+ *    call so a leftover row from a crashed run can't collide.
+ *  - Permission tests reuse the default authenticated effect and re-authenticate
+ *    just the call under test via {@link asUnauthorized}; the inner provision
+ *    shadows the harness's default full-permission session.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { PersonService } from "@voidhash/core/services/persons/PersonService";
+import { PersonIdentityService } from "@voidhash/core/services/personIdentity/PersonIdentityService";
+import { IdentityProjectionPublisher } from "@voidhash/core/services/personIdentity/IdentityProjectionPublisher";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import {
+  PersonIdentityKind,
+  PersonNotFoundError,
+  type PersonProfile,
+} from "@voidhash/core/domain/person/Person";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { Db, PersonOrigin, and, eq, inArray, personIdentities, persons } from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so distinct ids stay unique even within one millisecond. */
+let idSeq = 0;
+const uniqueDistinctId = (label: string) => `it-person-${label}-${Date.now()}-${idSeq++}`;
+
+/**
+ * `PersonService` depends on `PersonIdentityService`, which itself needs an
+ * `IdentityProjectionPublisher` and the abstract completion workflow. This
+ * layer wires the full graph down to harness `Db`: the publisher is the no-op
+ * seam variant and the completion workflow is a no-op (only dispatched by
+ * `identifyDistinctId`, which `PersonService` never calls).
+ */
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+const PersonServiceUnderTest = PersonService.layer.pipe(
+  Layer.provideMerge(PersonIdentityService.layer),
+  Layer.provide(IdentityProjectionPublisher.noop),
+  Layer.provide(CompletionWorkflowStub),
+);
+
+/** Read a person row straight from the database, bypassing the service. */
+const findPersonRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.persons.findFirst({ where: { id } });
+  });
+
+/** Read the identity-mapping row for a `(distinctId, projectId)` pair. */
+const findIdentityRow = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personIdentities.findFirst({
+      where: { distinctId, projectId },
+    });
+  });
+
+/**
+ * Insert a bare person row directly (bypassing the identity service) so tests
+ * can set up exact merge-chain / archived / merged-source scenarios. Returns
+ * the generated id.
+ */
+const insertPersonRow = (input: {
+  readonly id: string;
+  readonly name?: string | null;
+  readonly email?: string | null;
+  readonly archivedAt?: Date | null;
+  readonly mergedIntoPersonId?: string | null;
+  readonly createdAt?: Date;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(persons).values({
+      id: input.id,
+      archivedAt: input.archivedAt ?? null,
+      createdAt: input.createdAt ?? new Date(),
+      email: input.email ?? null,
+      firstSeenAt: input.createdAt ?? new Date(),
+      lastSeenAt: input.createdAt ?? new Date(),
+      mergedIntoPersonId: input.mergedIntoPersonId ?? null,
+      name: input.name ?? null,
+      origin: PersonOrigin.Dashboard,
+      projectId,
+    });
+    return input.id;
+  });
+
+/** Insert an identity-mapping row pointing a distinct id at a person. */
+const insertIdentityRow = (input: {
+  readonly id: string;
+  readonly distinctId: string;
+  readonly personId: string;
+  readonly kind?: number;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(personIdentities).values({
+      id: input.id,
+      distinctId: input.distinctId,
+      kind: input.kind ?? PersonIdentityKind.Identified,
+      personId: input.personId,
+      projectId,
+      version: 0,
+    });
+    return input.distinctId;
+  });
+
+/**
+ * Delete the given persons and their identity-mapping rows. `person_identity`
+ * cascades on a person delete via FK, but tests also create stand-alone
+ * mappings, so both are cleared explicitly. Each delete is `ignore`d so a
+ * missing row never turns the finalizer into a failure.
+ */
+const cleanupCreatedPersons = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db
+      .delete(personIdentities)
+      .where(inArray(personIdentities.personId, targets))
+      .pipe(Effect.ignore);
+    yield* db.delete(persons).where(inArray(persons.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every person it creates is removed afterward, regardless
+ * of how the test exits. Pass each created person id to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withPersonCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedPersons(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("PersonService.getPersonById", () => {
+  test(
+    "loads a person by id and projects it to a PersonProfile",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        const distinctId = uniqueDistinctId("by-id");
+        const created = yield* personService.createPerson({
+          distinctId,
+          email: "by-id@voidhash.test",
+          name: "By Id",
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(created.personId);
+
+        const profile = yield* personService.getPersonById(created.personId);
+        expect(profile.personId).toBe(created.personId);
+        expect(profile.projectId).toBe(projectId);
+        expect(profile.distinctId).toBe(distinctId);
+        expect(profile.email).toBe("by-id@voidhash.test");
+        expect(profile.name).toBe("By Id");
+        expect(profile.kind).toBe(PersonIdentityKind.Identified);
+        expect(profile.archivedAt).toBeNull();
+        expect(profile.mergedIntoPersonId).toBeNull();
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PersonNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const personService = yield* PersonService;
+      const missingId = `person_missing_${Date.now()}`;
+      const error = yield* Effect.flip(personService.getPersonById(missingId));
+      expect(error).toBeInstanceOf(PersonNotFoundError);
+      if (error instanceof PersonNotFoundError) {
+        expect(error.id).toBe(missingId);
+      }
+    }).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        const created = yield* personService.createPerson({
+          distinctId: uniqueDistinctId("by-id-forbidden"),
+          email: null,
+          name: null,
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(created.personId);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(personService.getPersonById(created.personId)),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "follows the merge chain and returns the canonical person",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        // Canonical person with its own identity, then a merged source that
+        // points at it via mergedIntoPersonId. Looking up the *source* id must
+        // resolve to the canonical person + its identity/profile.
+        const canonicalId = `person_canon_${Date.now()}_${idSeq++}`;
+        const sourceId = `person_src_${Date.now()}_${idSeq++}`;
+        const canonicalDistinctId = uniqueDistinctId("chain-canon");
+
+        yield* insertPersonRow({ id: canonicalId, email: "canon@voidhash.test", name: "Canon" });
+        track(canonicalId);
+        yield* insertIdentityRow({
+          distinctId: canonicalDistinctId,
+          id: `${canonicalId}_dist`,
+          personId: canonicalId,
+        });
+        yield* insertPersonRow({
+          id: sourceId,
+          mergedIntoPersonId: canonicalId,
+          archivedAt: new Date(),
+        });
+        track(sourceId);
+
+        const profile = yield* personService.getPersonById(sourceId);
+        expect(profile.personId).toBe(canonicalId);
+        expect(profile.distinctId).toBe(canonicalDistinctId);
+        expect(profile.email).toBe("canon@voidhash.test");
+        expect(profile.name).toBe("Canon");
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PersonService.getPersonByDistinctId", () => {
+  test(
+    "finds the mapping, follows to the canonical person, and returns the profile",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        const distinctId = uniqueDistinctId("by-distinct");
+        const created = yield* personService.createPerson({
+          distinctId,
+          email: "by-distinct@voidhash.test",
+          name: "By Distinct",
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(created.personId);
+
+        const profile = yield* personService.getPersonByDistinctId(distinctId, projectId);
+        expect(profile.personId).toBe(created.personId);
+        expect(profile.distinctId).toBe(distinctId);
+        expect(profile.email).toBe("by-distinct@voidhash.test");
+        expect(profile.name).toBe("By Distinct");
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PersonNotFoundError when no mapping exists",
+    Effect.gen(function* () {
+      const personService = yield* PersonService;
+      const missing = uniqueDistinctId("by-distinct-missing");
+      const error = yield* Effect.flip(personService.getPersonByDistinctId(missing, projectId));
+      expect(error).toBeInstanceOf(PersonNotFoundError);
+      if (error instanceof PersonNotFoundError) {
+        expect(error.id).toBe(missing);
+      }
+    }).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  // The `if (!dbPerson)` branch in `getPersonByDistinctId` (PersonService.ts
+  // ~line 171) is unreachable against real infra: an orphaned mapping cannot be
+  // constructed. `person_identity.person_id` carries a FK to `person.id`
+  // (schema.ts:362-364, `onDelete: "cascade"`), so PlanetScale rejects inserting
+  // a mapping whose personId references a nonexistent person — the seed itself
+  // raises a DatabaseError before the service runs. `findCanonicalPersonById`
+  // also never returns undefined for a present mapping: a broken
+  // `mergedIntoPersonId` chain returns the source row, not undefined. This is a
+  // DB invariant, not a source bug; the defensive branch is correct to keep.
+  vitestTest.todo(
+    "fails with PersonNotFoundError when the mapping points at a missing person (orphaned) — unreachable: person_identity.person_id FK to person.id forbids orphaned mappings (insert raises DatabaseError before the service runs)",
+  );
+
+  test(
+    "forbids callers without project:all",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        const distinctId = uniqueDistinctId("by-distinct-forbidden");
+        const created = yield* personService.createPerson({
+          distinctId,
+          email: null,
+          name: null,
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(created.personId);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(personService.getPersonByDistinctId(distinctId, projectId)),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PersonService.getPersons", () => {
+  test(
+    "lists active persons, excludes merged sources, and deduplicates by personId",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        // Two ordinary persons created via the service.
+        const distinctA = uniqueDistinctId("list-a");
+        const distinctB = uniqueDistinctId("list-b");
+        const a = yield* personService.createPerson({
+          distinctId: distinctA,
+          email: null,
+          name: "List A",
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(a.personId);
+        const b = yield* personService.createPerson({
+          distinctId: distinctB,
+          email: null,
+          name: "List B",
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(b.personId);
+
+        // A person with two identities — getPersons dedupes these to one entry.
+        const multiId = `person_multi_${Date.now()}_${idSeq++}`;
+        const multiPrimary = uniqueDistinctId("list-multi-primary");
+        const multiSecondary = uniqueDistinctId("list-multi-secondary");
+        yield* insertPersonRow({ id: multiId, name: "Multi" });
+        track(multiId);
+        yield* insertIdentityRow({
+          distinctId: multiPrimary,
+          id: `${multiId}_dist_1`,
+          personId: multiId,
+        });
+        yield* insertIdentityRow({
+          distinctId: multiSecondary,
+          id: `${multiId}_dist_2`,
+          personId: multiId,
+        });
+
+        // A merged source that must NOT appear (mergedIntoPersonId is set).
+        const mergedSourceId = `person_merged_src_${Date.now()}_${idSeq++}`;
+        const mergedSourceDistinct = uniqueDistinctId("list-merged-src");
+        yield* insertPersonRow({
+          id: mergedSourceId,
+          mergedIntoPersonId: a.personId,
+          archivedAt: new Date(),
+        });
+        track(mergedSourceId);
+        yield* insertIdentityRow({
+          distinctId: mergedSourceDistinct,
+          id: `${mergedSourceId}_dist`,
+          personId: mergedSourceId,
+        });
+
+        const list = yield* personService.getPersons({ projectId });
+
+        expect(list.some((profile) => profile.personId === a.personId)).toBe(true);
+        expect(list.some((profile) => profile.personId === b.personId)).toBe(true);
+        expect(list.some((profile) => profile.personId === multiId)).toBe(true);
+        // The merged source is filtered out by the isNull(mergedIntoPersonId) clause.
+        expect(list.some((profile) => profile.personId === mergedSourceId)).toBe(false);
+        // Dedup: the multi-identity person appears exactly once.
+        expect(list.filter((profile) => profile.personId === multiId)).toHaveLength(1);
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns an empty array for a project with no persons",
+    Effect.gen(function* () {
+      const personService = yield* PersonService;
+      // A project id that exists in scope but never has persons under it: the
+      // fixture project may carry rows from concurrent tests, so use a unique
+      // synthetic project id and grant access to it via a custom session.
+      const emptyProjectId = `it_empty_project_${Date.now()}_${idSeq++}`;
+      const list = yield* personService.getPersons({ projectId: emptyProjectId }).pipe(
+        CoreAuthSession.authenticate({
+          cookie: null,
+          method: "user",
+          name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+          organizations: [],
+          person: null,
+          projects: [
+            {
+              id: emptyProjectId,
+              logo: null,
+              name: "Empty Project",
+              organizationId: CoreTestFixture.organizationId,
+              permissions: ["project:all"],
+              slug: "it-empty-project",
+            },
+          ],
+          user: {
+            createdAt: new Date(0),
+            email: CoreTestFixture.userEmail,
+            emailVerified: true,
+            id: CoreTestFixture.userId,
+            image: null,
+            name: CoreTestFixture.userName,
+            role: null,
+            updatedAt: new Date(0),
+            workosUserId: CoreTestFixture.workosUserId,
+          },
+        }),
+      );
+      expect(list).toEqual([]);
+    }).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const personService = yield* PersonService;
+      const error = yield* Effect.flip(asUnauthorized(personService.getPersons({ projectId })));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PersonService.createPerson", () => {
+  test(
+    "creates the canonical person + identity mapping and returns the projected profile",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        const distinctId = uniqueDistinctId("create");
+        const created = yield* personService.createPerson({
+          distinctId,
+          email: "create@voidhash.test",
+          name: "Created Person",
+          origin: PersonOrigin.API,
+          projectId,
+        });
+        track(created.personId);
+
+        // Returned profile carries the distinct id from the new mapping.
+        expect(created.personId.startsWith("person_")).toBe(true);
+        expect(created.distinctId).toBe(distinctId);
+        expect(created.email).toBe("create@voidhash.test");
+        expect(created.name).toBe("Created Person");
+        expect(created.kind).toBe(PersonIdentityKind.Identified);
+        expect(created.projectId).toBe(projectId);
+
+        // Persisted person row.
+        const personRow = yield* findPersonRow(created.personId);
+        expect(personRow).toBeDefined();
+        expect(personRow?.projectId).toBe(projectId);
+        expect(personRow?.email).toBe("create@voidhash.test");
+        expect(personRow?.name).toBe("Created Person");
+        expect(personRow?.origin).toBe(PersonOrigin.API);
+
+        // Persisted identity mapping linking the distinct id to the person.
+        const identityRow = yield* findIdentityRow(distinctId);
+        expect(identityRow).toBeDefined();
+        expect(identityRow?.personId).toBe(created.personId);
+        expect(identityRow?.kind).toBe(PersonIdentityKind.Identified);
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "is idempotent for an existing distinct id, reusing the same canonical person",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        const distinctId = uniqueDistinctId("create-idempotent");
+        const first = yield* personService.createPerson({
+          distinctId,
+          email: "first@voidhash.test",
+          name: "First",
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(first.personId);
+
+        // resolveDistinctId finds the existing mapping and reuses the person.
+        const second = yield* personService.createPerson({
+          distinctId,
+          email: null,
+          name: null,
+          origin: PersonOrigin.Dashboard,
+          projectId,
+        });
+        track(second.personId);
+
+        expect(second.personId).toBe(first.personId);
+        expect(second.distinctId).toBe(distinctId);
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("PersonService.mergePersons", () => {
+  test(
+    "sets archivedAt and mergedIntoPersonId on the source person",
+    withPersonCleanup((track) =>
+      Effect.gen(function* () {
+        const personService = yield* PersonService;
+
+        const fromId = `person_merge_from_${Date.now()}_${idSeq++}`;
+        const toId = `person_merge_to_${Date.now()}_${idSeq++}`;
+        yield* insertPersonRow({ id: fromId, name: "From" });
+        track(fromId);
+        yield* insertPersonRow({ id: toId, name: "To" });
+        track(toId);
+
+        const before = new Date();
+        const result = yield* personService.mergePersons(fromId, toId);
+        const after = new Date();
+        expect(result.id).toBe(fromId);
+
+        const fromRow = yield* findPersonRow(fromId);
+        expect(fromRow?.mergedIntoPersonId).toBe(toId);
+        expect(fromRow?.archivedAt).toBeInstanceOf(Date);
+        // archivedAt = now: assert it falls within the call window (with a small
+        // margin for clock granularity / DB round-trip) rather than an exact ts.
+        const archivedTime = fromRow?.archivedAt?.getTime() ?? 0;
+        expect(archivedTime).toBeGreaterThanOrEqual(before.getTime() - 2000);
+        expect(archivedTime).toBeLessThanOrEqual(after.getTime() + 2000);
+
+        // The target is untouched by mergePersons (it only flags the source).
+        const toRow = yield* findPersonRow(toId);
+        expect(toRow?.mergedIntoPersonId).toBeNull();
+        expect(toRow?.archivedAt).toBeNull();
+      }),
+    ).pipe(Effect.provide(PersonServiceUnderTest), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/productPerks/ProductPerkService.integration.test.ts b/packages/core/test/services/productPerks/ProductPerkService.integration.test.ts
new file mode 100644
index 000000000..278041fe3
--- /dev/null
+++ b/packages/core/test/services/productPerks/ProductPerkService.integration.test.ts
@@ -0,0 +1,550 @@
+/**
+ * Integration tests for {@link ProductPerkService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB +
+ * ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * The service owns the `(product, perk)` join-table aggregate. Each test drives
+ * a public method end-to-end and verifies the *persisted* side effects, not just
+ * the return value:
+ *  - the `product_perk` row written / removed in MySQL,
+ *  - the matching `audit_log` row (entity, action, actor, `parentEntityId` = the
+ *    product id),
+ *  - invalidation of the product project's schema cache after a successful write.
+ *
+ * Conventions (mirroring `PerkService.integration.test.ts`):
+ *  - The fixture seeds only user/org/member/project, so every test seeds its own
+ *    parent `product` and `perk` rows under {@link CoreTestFixture} via raw insert
+ *    (the service has no create-product / create-perk surface) and cleans them up
+ *    on exit through {@link withRowCleanup}, regardless of how the body exits.
+ *  - Slugs/ids are namespaced and unique per call; assertions stay
+ *    membership-based (`.some(...)` / by-id), never exact counts.
+ *  - The harness shares one `ProjectSchemaCache` stub instance with
+ *    `SchemaCacheInvalidationService`, so seeding the cache then reading it back
+ *    after a write proves invalidation ran.
+ *  - Permission tests re-authenticate just the call under test via
+ *    {@link asUnauthorized}; the inner provision shadows the harness default.
+ *  - Typed failures use `Effect.flip` + `instanceof`, paired with a DB-state
+ *    assertion proving the failure path wrote (or retained) nothing unexpected.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { ProductPerkService, ProjectSchemaCache } from "@voidhash/core/services";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { ProductPerkValidationError } from "@voidhash/core/services/productPerks/ProductPerkService";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  perks,
+  productPerks,
+  products,
+  projects,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+const uniqueId = (label: string) => `it-${label}-${Date.now()}-${idSeq++}`;
+
+/** Insert a `product` row under the fixture project and return its id. */
+const seedProduct = (overrides?: { readonly projectId?: string }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueId("prod");
+    yield* db.insert(products).values({
+      id,
+      name: id,
+      projectId: overrides?.projectId ?? projectId,
+      slug: id,
+    });
+    return id;
+  });
+
+/** Insert a `perk` row under the fixture project and return its id. */
+const seedPerk = (overrides?: { readonly projectId?: string }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueId("perk");
+    yield* db.insert(perks).values({
+      id,
+      name: id,
+      projectId: overrides?.projectId ?? projectId,
+      slug: id,
+    });
+    return id;
+  });
+
+/** Insert a bare `project` row under the fixture org and return its id. */
+const seedProject = () =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueId("proj");
+    yield* db.insert(projects).values({
+      id,
+      name: id,
+      organizationId: CoreTestFixture.organizationId,
+      slug: id,
+    });
+    return id;
+  });
+
+/** Read a product-perk row straight from the database, bypassing the service. */
+const findProductPerkRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.productPerks.findFirst({ where: { id } });
+  });
+
+/** All `product_perk` rows for a given product. */
+const findProductPerksForProduct = (productId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.select().from(productPerks).where(eq(productPerks.productId, productId));
+  });
+
+/** All audit-log rows recorded for a given product-perk entity. */
+const findProductPerkAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.ProductPerk),
+          eq(auditLogs.entityId, entityId),
+        ),
+      );
+  });
+
+/**
+ * Tracker for everything a test creates so the finalizer can sweep it. Audit
+ * entries are append-only and survive a `deleteProductPerk`, so they are cleared
+ * by entity id too. Order matters: dependents (product_perk) before parents.
+ */
+type Tracked = {
+  readonly productPerkIds: string[];
+  readonly productIds: string[];
+  readonly perkIds: string[];
+  readonly projectIds: string[];
+};
+
+const cleanupTracked = (t: Tracked) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (t.productPerkIds.length > 0) {
+      yield* db
+        .delete(auditLogs)
+        .where(
+          and(
+            eq(auditLogs.entityType, AuditLogEntityType.ProductPerk),
+            inArray(auditLogs.entityId, t.productPerkIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(productPerks)
+        .where(inArray(productPerks.id, t.productPerkIds))
+        .pipe(Effect.ignore);
+    }
+    if (t.productIds.length > 0) {
+      yield* db
+        .delete(productPerks)
+        .where(inArray(productPerks.productId, t.productIds))
+        .pipe(Effect.ignore);
+      yield* db.delete(products).where(inArray(products.id, t.productIds)).pipe(Effect.ignore);
+    }
+    if (t.perkIds.length > 0) {
+      yield* db.delete(perks).where(inArray(perks.id, t.perkIds)).pipe(Effect.ignore);
+    }
+    if (t.projectIds.length > 0) {
+      yield* db.delete(projects).where(inArray(projects.id, t.projectIds)).pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every row it creates is removed afterward, regardless of
+ * how the test exits. The body receives a `track` object whose arrays it pushes
+ * created ids into; cleanup reads them lazily at finalization via
+ * `Effect.ensuring`, so it sees every id tracked while the body ran.
+ */
+const withRowCleanup = <E, R>(
+  body: (track: Tracked) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const track: Tracked = { productPerkIds: [], productIds: [], perkIds: [], projectIds: [] };
+  return body(track).pipe(Effect.ensuring(cleanupTracked(track)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * A `user`-method session that holds `project:all` only on the fixture project,
+ * so a call touching some other project's perk is forbidden on the *perk's*
+ * project check while passing the product's project check.
+ */
+const sessionWithFixtureProjectOnly = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:all"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: null,
+  projects: [
+    {
+      id: CoreTestFixture.projectId,
+      logo: null,
+      name: CoreTestFixture.projectName,
+      organizationId: CoreTestFixture.organizationId,
+      permissions: ["project:all"],
+      slug: CoreTestFixture.projectSlug,
+    },
+  ],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("ProductPerkService.getProductPerksByProductId", () => {
+  test(
+    "returns the product's perks ordered by createdAt",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+        const perkA = yield* seedPerk();
+        const perkB = yield* seedPerk();
+        track.perkIds.push(perkA, perkB);
+
+        const a = yield* service.createProductPerk({ productId, perkId: perkA });
+        track.productPerkIds.push(a.id);
+        const b = yield* service.createProductPerk({ productId, perkId: perkB });
+        track.productPerkIds.push(b.id);
+
+        const list = yield* service.getProductPerksByProductId(productId);
+        expect(list.some((pp) => pp.id === a.id && pp.perkId === perkA)).toBe(true);
+        expect(list.some((pp) => pp.id === b.id && pp.perkId === perkB)).toBe(true);
+        // The service orders by `asc(productPerks.createdAt)`, but
+        // `product_perk.created_at` has whole-second precision (no `fsp`), so
+        // two rows created back-to-back share the same truncated `createdAt`
+        // and `ORDER BY created_at ASC` is a tie whose resolution is not
+        // deterministic. Assert only what is guaranteed: both rows are present
+        // and the returned `createdAt` sequence is non-decreasing.
+        const idxA = list.findIndex((pp) => pp.id === a.id);
+        const idxB = list.findIndex((pp) => pp.id === b.id);
+        expect(idxA).toBeGreaterThanOrEqual(0);
+        expect(idxB).toBeGreaterThanOrEqual(0);
+        const createdAts = list.map((pp) => new Date(pp.createdAt ?? 0).getTime());
+        for (let i = 1; i < createdAts.length; i++) {
+          expect(createdAts[i]).toBeGreaterThanOrEqual(createdAts[i - 1]!);
+        }
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProductPerkValidationError when the product is missing",
+    Effect.gen(function* () {
+      const service = yield* ProductPerkService;
+      const error = yield* Effect.flip(
+        service.getProductPerksByProductId(`it-prod-missing-${Date.now()}`),
+      );
+      expect(error).toBeInstanceOf(ProductPerkValidationError);
+    }).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(service.getProductPerksByProductId(productId)),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProductPerkService.createProductPerk", () => {
+  test(
+    "persists the row, records a created audit entry with the product as parent, and invalidates the schema cache",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+        const cache = yield* ProjectSchemaCache;
+
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+        const perkId = yield* seedPerk();
+        track.perkIds.push(perkId);
+
+        // Seed the cache so a successful invalidation is observable, not vacuously null.
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const created = yield* service.createProductPerk({ productId, perkId });
+        track.productPerkIds.push(created.id);
+        expect(created.id.startsWith("prod_perk_")).toBe(true);
+
+        const row = yield* findProductPerkRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.productId).toBe(productId);
+        expect(row?.perkId).toBe(perkId);
+
+        const auditEntries = yield* findProductPerkAuditEntries(created.id);
+        const createdEntry = auditEntries.find((e) => e.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.ProductPerk);
+        expect(createdEntry?.parentEntityId).toBe(productId);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a duplicate (product, perk) pair and writes no second row",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+        const perkId = yield* seedPerk();
+        track.perkIds.push(perkId);
+
+        const first = yield* service.createProductPerk({ productId, perkId });
+        track.productPerkIds.push(first.id);
+
+        // The unique (product_id, perk_id) index turns the duplicate insert's
+        // DatabaseError into the service's catch-all ProductPerkServiceError.
+        const error = yield* Effect.flip(service.createProductPerk({ productId, perkId }));
+        expect(error._tag).toBe("ProductPerkServiceError");
+
+        const rows = yield* findProductPerksForProduct(productId);
+        expect(rows.filter((r) => r.perkId === perkId).length).toBe(1);
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProductPerkValidationError when the product is missing and writes nothing",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+        const perkId = yield* seedPerk();
+        track.perkIds.push(perkId);
+
+        const error = yield* Effect.flip(
+          service.createProductPerk({ productId: `it-prod-missing-${Date.now()}`, perkId }),
+        );
+        expect(error).toBeInstanceOf(ProductPerkValidationError);
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProductPerkValidationError when the perk is missing and writes no row",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+
+        const error = yield* Effect.flip(
+          service.createProductPerk({ productId, perkId: `it-perk-missing-${Date.now()}` }),
+        );
+        expect(error).toBeInstanceOf(ProductPerkValidationError);
+
+        const rows = yield* findProductPerksForProduct(productId);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all on the product's project and writes no row",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+        const perkId = yield* seedPerk();
+        track.perkIds.push(perkId);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(service.createProductPerk({ productId, perkId })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const rows = yield* findProductPerksForProduct(productId);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all on the perk's project and writes no row",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+
+        // Product lives in the fixture project (caller is authorized there) but
+        // the perk lives in a separate project the caller cannot access, so the
+        // perk-project permission check is the one that must reject.
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+        const otherProjectId = yield* seedProject();
+        track.projectIds.push(otherProjectId);
+        const perkId = yield* seedPerk({ projectId: otherProjectId });
+        track.perkIds.push(perkId);
+
+        const error = yield* Effect.flip(
+          service
+            .createProductPerk({ productId, perkId })
+            .pipe(CoreAuthSession.authenticate(sessionWithFixtureProjectOnly())),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const rows = yield* findProductPerksForProduct(productId);
+        expect(rows.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProductPerkService.deleteProductPerk", () => {
+  test(
+    "removes the row, records a deleted audit entry, and invalidates the schema cache",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+        const cache = yield* ProjectSchemaCache;
+
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+        const perkId = yield* seedPerk();
+        track.perkIds.push(perkId);
+
+        const created = yield* service.createProductPerk({ productId, perkId });
+        track.productPerkIds.push(created.id);
+
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* service.deleteProductPerk({ id: created.id });
+
+        const row = yield* findProductPerkRow(created.id);
+        expect(row).toBeUndefined();
+
+        const auditEntries = yield* findProductPerkAuditEntries(created.id);
+        const deletedEntry = auditEntries.find((e) => e.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.parentEntityId).toBe(productId);
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProductPerkValidationError for an unknown id",
+    Effect.gen(function* () {
+      const service = yield* ProductPerkService;
+      const error = yield* Effect.flip(
+        service.deleteProductPerk({ id: `it-prod-perk-missing-${Date.now()}` }),
+      );
+      expect(error).toBeInstanceOf(ProductPerkValidationError);
+    }).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the row",
+    withRowCleanup((track) =>
+      Effect.gen(function* () {
+        const service = yield* ProductPerkService;
+
+        const productId = yield* seedProduct();
+        track.productIds.push(productId);
+        const perkId = yield* seedPerk();
+        track.perkIds.push(perkId);
+
+        const created = yield* service.createProductPerk({ productId, perkId });
+        track.productPerkIds.push(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(service.deleteProductPerk({ id: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findProductPerkRow(created.id);
+        expect(row).toBeDefined();
+      }),
+    ).pipe(Effect.provide(ProductPerkService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/products/ProductService.integration.test.ts b/packages/core/test/services/products/ProductService.integration.test.ts
new file mode 100644
index 000000000..57698a8db
--- /dev/null
+++ b/packages/core/test/services/products/ProductService.integration.test.ts
@@ -0,0 +1,515 @@
+/**
+ * Integration tests for {@link ProductService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * Each test drives the service end-to-end and verifies the *persisted* side
+ * effects rather than just the method's return value:
+ *  - the `product` row written / updated / removed in MySQL,
+ *  - the matching `audit_log` row (entity, action, actor, change snapshot),
+ *  - invalidation of the project's schema cache after a successful write.
+ *
+ * Conventions used throughout (mirrors `PerkService.integration.test.ts`):
+ *  - Every test shares the one seeded fixture project ({@link CoreTestFixture})
+ *    but cleans up after itself: {@link withProductCleanup} deletes the products
+ *    (and their append-only audit rows) it created on exit, success or failure.
+ *    The global teardown sweep is only a backstop. Assertions stay
+ *    membership-based (never exact `getProducts` counts) and slugs are unique
+ *    per call so a leftover row from a crashed run can't collide.
+ *  - The harness builds a fresh `ProjectSchemaCache` stub per test and shares
+ *    that single instance with `SchemaCacheInvalidationService`, so seeding the
+ *    cache here and reading it back after a write proves invalidation ran.
+ *  - Permission tests reuse the default authenticated effect and re-authenticate
+ *    just the call under test via {@link asUnauthorized}; the inner provision
+ *    shadows the harness's default full-permission session.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields.
+ *
+ * Note on `updateProduct` slug collisions: unlike `createProduct`, the service
+ * does NOT re-check slug uniqueness before updating — a collision trips the
+ * `(slug, project_id)` unique index, surfacing as a `DatabaseError` that the
+ * service wraps into {@link ProductServiceError}. The test asserts that tag and
+ * proves the target row was left unchanged.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { ProductService, ProjectSchemaCache } from "@voidhash/core/services";
+import { ProductServiceError } from "@voidhash/core/services/products/ProductService";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  ProductNotFoundError,
+  ProductSlugAlreadyExistsError,
+} from "@voidhash/core/domain/product/Product";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  products,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so slugs stay unique even within the same millisecond. */
+let slugSeq = 0;
+const uniqueSlug = (label: string) => `it-product-${label}-${Date.now()}-${slugSeq++}`;
+
+/** Read a product row straight from the database, bypassing the service. */
+const findProductRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.products.findFirst({ where: { id } });
+  });
+
+/** Count product rows with a given slug in the fixture project. */
+const countProductsWithSlug = (slug: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const rows = yield* db
+      .select({ id: products.id })
+      .from(products)
+      .where(and(eq(products.projectId, projectId), eq(products.slug, slug)));
+    return rows.length;
+  });
+
+/** All audit-log rows recorded for a given product entity. */
+const findProductAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(eq(auditLogs.entityType, AuditLogEntityType.Product), eq(auditLogs.entityId, entityId)),
+      );
+  });
+
+/**
+ * Delete the given products and their audit rows. Audit entries are append-only
+ * and survive a `deleteProduct`, so they are cleared by entity id too. Each
+ * delete is `ignore`d so a missing row never turns the finalizer into a failure.
+ */
+const cleanupCreatedProducts = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db
+      .delete(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.Product),
+          inArray(auditLogs.entityId, targets),
+        ),
+      )
+      .pipe(Effect.ignore);
+    yield* db.delete(products).where(inArray(products.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every product it creates is removed afterward, regardless
+ * of how the test exits. Pass each created product id to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withProductCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedProducts(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("ProductService.createProduct", () => {
+  test(
+    "persists the product, records a created audit entry, and invalidates the schema cache",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const cache = yield* ProjectSchemaCache;
+
+        const name = "Integration Product";
+        const slug = uniqueSlug("create");
+
+        // Seed the cache so a successful invalidation is observable, not vacuously null.
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        const created = yield* productService.createProduct({ name, projectId, slug });
+        track(created.id);
+        expect(created.id.startsWith("prod_")).toBe(true);
+
+        const row = yield* findProductRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.name).toBe(name);
+        expect(row?.slug).toBe(slug);
+        expect(row?.projectId).toBe(projectId);
+
+        const auditEntries = yield* findProductAuditEntries(created.id);
+        const createdEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.Product);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({ snapshot: { name, slug } });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a duplicate slug within the project and writes no second row",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const slug = uniqueSlug("duplicate");
+
+        const first = yield* productService.createProduct({ name: "First", projectId, slug });
+        track(first.id);
+
+        const error = yield* Effect.flip(
+          productService.createProduct({ name: "Second", projectId, slug }),
+        );
+        expect(error).toBeInstanceOf(ProductSlugAlreadyExistsError);
+        if (error instanceof ProductSlugAlreadyExistsError) {
+          expect(error.slug).toBe(slug);
+        }
+
+        // The slug-recheck inside `db.transaction` closed the race: only one row.
+        expect(yield* countProductsWithSlug(slug)).toBe(1);
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and writes nothing",
+    // No cleanup wrapper: a forbidden create writes no row.
+    Effect.gen(function* () {
+      const productService = yield* ProductService;
+      const slug = uniqueSlug("forbidden");
+
+      const error = yield* Effect.flip(
+        asUnauthorized(productService.createProduct({ name: "Nope", projectId, slug })),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      expect(yield* countProductsWithSlug(slug)).toBe(0);
+    }).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProductService.getProducts", () => {
+  test(
+    "returns products created under the project",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const slugA = uniqueSlug("list-a");
+        const slugB = uniqueSlug("list-b");
+        const absentSlug = uniqueSlug("list-absent");
+
+        const a = yield* productService.createProduct({ name: "A", projectId, slug: slugA });
+        track(a.id);
+        const b = yield* productService.createProduct({ name: "B", projectId, slug: slugB });
+        track(b.id);
+
+        const list = yield* productService.getProducts(projectId);
+        // Created products default to the `subscription` type in the schema.
+        expect(
+          list.some(
+            (product) =>
+              product.id === a.id && product.slug === slugA && product.type === "subscription",
+          ),
+        ).toBe(true);
+        expect(list.some((product) => product.id === b.id && product.slug === slugB)).toBe(true);
+        expect(list.some((product) => product.slug === absentSlug)).toBe(false);
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const productService = yield* ProductService;
+      const error = yield* Effect.flip(asUnauthorized(productService.getProducts(projectId)));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProductService.getProductById", () => {
+  test(
+    "returns the matching product",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const slug = uniqueSlug("by-id");
+        const created = yield* productService.createProduct({ name: "Lookup", projectId, slug });
+        track(created.id);
+
+        const product = yield* productService.getProductById(created.id);
+        expect(product.id).toBe(created.id);
+        expect(product.name).toBe("Lookup");
+        expect(product.slug).toBe(slug);
+        expect(product.projectId).toBe(projectId);
+        expect(product.type).toBe("subscription");
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProductNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const productService = yield* ProductService;
+      const error = yield* Effect.flip(
+        productService.getProductById(`product_missing_${Date.now()}`),
+      );
+      expect(error).toBeInstanceOf(ProductNotFoundError);
+    }).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids access to a product the caller is not authorized for",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const slug = uniqueSlug("by-id-forbidden");
+        const created = yield* productService.createProduct({ name: "Guarded", projectId, slug });
+        track(created.id);
+
+        const error = yield* Effect.flip(asUnauthorized(productService.getProductById(created.id)));
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProductService.updateProduct", () => {
+  test(
+    "changes name and slug, records an updated audit entry, and invalidates the schema cache",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const cache = yield* ProjectSchemaCache;
+
+        const created = yield* productService.createProduct({
+          name: "Before",
+          projectId,
+          slug: uniqueSlug("update-before"),
+        });
+        track(created.id);
+
+        const newName = "After";
+        const newSlug = uniqueSlug("update-after");
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* productService.updateProduct({ id: created.id, name: newName, slug: newSlug });
+
+        const row = yield* findProductRow(created.id);
+        expect(row?.name).toBe(newName);
+        expect(row?.slug).toBe(newSlug);
+
+        const auditEntries = yield* findProductAuditEntries(created.id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.changes).toEqual({ snapshot: { name: newName, slug: newSlug } });
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "updates only the name when no slug is provided, leaving the slug intact",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const slug = uniqueSlug("update-name-only");
+        const created = yield* productService.createProduct({ name: "Keep", projectId, slug });
+        track(created.id);
+
+        yield* productService.updateProduct({ id: created.id, name: "Keep Renamed" });
+
+        const row = yield* findProductRow(created.id);
+        expect(row?.name).toBe("Keep Renamed");
+        // The optional slug was omitted, so the original slug must survive.
+        expect(row?.slug).toBe(slug);
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a slug already used by another product and leaves the target unchanged",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const slugA = uniqueSlug("update-collide-a");
+        const slugB = uniqueSlug("update-collide-b");
+
+        const a = yield* productService.createProduct({ name: "A", projectId, slug: slugA });
+        track(a.id);
+        const b = yield* productService.createProduct({ name: "B", projectId, slug: slugB });
+        track(b.id);
+
+        // `updateProduct` does not pre-check slug uniqueness; the `(slug,
+        // project_id)` unique index rejects the collision and the service wraps
+        // the resulting DatabaseError as ProductServiceError.
+        const error = yield* Effect.flip(
+          productService.updateProduct({ id: b.id, name: "B", slug: slugA }),
+        );
+        expect(error).toBeInstanceOf(ProductServiceError);
+
+        // The failed update must not have mutated row B.
+        const row = yield* findProductRow(b.id);
+        expect(row?.slug).toBe(slugB);
+        expect(row?.name).toBe("B");
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProductNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const productService = yield* ProductService;
+      const error = yield* Effect.flip(
+        productService.updateProduct({ id: `product_missing_${Date.now()}`, name: "Ghost" }),
+      );
+      expect(error).toBeInstanceOf(ProductNotFoundError);
+    }).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the product unchanged",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const slug = uniqueSlug("update-forbidden");
+        const created = yield* productService.createProduct({ name: "Protected", projectId, slug });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(productService.updateProduct({ id: created.id, name: "Hacked", slug })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findProductRow(created.id);
+        expect(row?.name).toBe("Protected");
+        expect(row?.slug).toBe(slug);
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProductService.deleteProduct", () => {
+  test(
+    "removes the product, records a deleted audit entry, and invalidates the schema cache",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const cache = yield* ProjectSchemaCache;
+
+        const created = yield* productService.createProduct({
+          name: "Doomed",
+          projectId,
+          slug: uniqueSlug("delete"),
+        });
+        track(created.id);
+        yield* cache.getByName(projectId).set({ marker: "present" }, 60_000);
+
+        yield* productService.deleteProduct({ id: created.id });
+
+        const row = yield* findProductRow(created.id);
+        expect(row).toBeUndefined();
+
+        const lookup = yield* Effect.flip(productService.getProductById(created.id));
+        expect(lookup).toBeInstanceOf(ProductNotFoundError);
+
+        const auditEntries = yield* findProductAuditEntries(created.id);
+        const deletedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(deletedEntry?.actorType).toBe(AuditLogActorType.User);
+
+        const cached = yield* cache.getByName(projectId).get();
+        expect(cached).toBeNull();
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProductNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const productService = yield* ProductService;
+      const error = yield* Effect.flip(
+        productService.deleteProduct({ id: `product_missing_${Date.now()}` }),
+      );
+      expect(error).toBeInstanceOf(ProductNotFoundError);
+    }).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the product",
+    withProductCleanup((track) =>
+      Effect.gen(function* () {
+        const productService = yield* ProductService;
+        const created = yield* productService.createProduct({
+          name: "Protected",
+          projectId,
+          slug: uniqueSlug("delete-forbidden"),
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(productService.deleteProduct({ id: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findProductRow(created.id);
+        expect(row).toBeDefined();
+      }),
+    ).pipe(Effect.provide(ProductService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/products/helpers.test.ts b/packages/core/test/services/products/helpers.test.ts
new file mode 100644
index 000000000..18ce7e30f
--- /dev/null
+++ b/packages/core/test/services/products/helpers.test.ts
@@ -0,0 +1,36 @@
+import { describe, expect, it } from "vite-plus/test";
+import { ProductType, type ProductTypeValue } from "@voidhash/lib";
+
+import { dbProductTypeToLabel } from "../../../src/services/products/helpers.ts";
+
+describe("dbProductTypeToLabel", () => {
+  it.each([
+    [ProductType.Subscription, "subscription"],
+    [ProductType.OneTime, "one-time"],
+    [ProductType.OneTimeConsumable, "one-time-consumable"],
+  ] as const)("maps ProductType %d to its public label %s", (type, label) => {
+    expect(dbProductTypeToLabel(type)).toBe(label);
+  });
+
+  it("returns 'subscription' for ProductType.Subscription", () => {
+    expect(dbProductTypeToLabel(ProductType.Subscription)).toBe("subscription");
+  });
+
+  it("returns 'one-time' for ProductType.OneTime", () => {
+    expect(dbProductTypeToLabel(ProductType.OneTime)).toBe("one-time");
+  });
+
+  it("returns 'one-time-consumable' for ProductType.OneTimeConsumable", () => {
+    expect(dbProductTypeToLabel(ProductType.OneTimeConsumable)).toBe("one-time-consumable");
+  });
+
+  it("throws for an out-of-range product type value", () => {
+    // 99 is not a member of the ProductType union; the cast simulates a
+    // corrupt/unknown DB value reaching the exhaustiveness guard.
+    expect(() => dbProductTypeToLabel(99 as ProductTypeValue)).toThrow("Invalid product type: 99");
+  });
+
+  it("throws for a zero product type value", () => {
+    expect(() => dbProductTypeToLabel(0 as ProductTypeValue)).toThrow("Invalid product type: 0");
+  });
+});
diff --git a/packages/core/test/services/projects/ProjectService.integration.test.ts b/packages/core/test/services/projects/ProjectService.integration.test.ts
new file mode 100644
index 000000000..db934b311
--- /dev/null
+++ b/packages/core/test/services/projects/ProjectService.integration.test.ts
@@ -0,0 +1,717 @@
+/**
+ * Integration tests for {@link ProjectService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * Each test drives the service end-to-end and verifies the *persisted* side
+ * effects rather than just the method's return value:
+ *  - the `project` row written / updated / removed in MySQL,
+ *  - the bootstrap `api_key` row `createProject` writes in the same transaction,
+ *  - the matching `audit_log` row (entity, action, actor, change snapshot).
+ *
+ * Conventions used throughout:
+ *  - The seeded fixture project ({@link CoreTestFixture}) is reused for the
+ *    read/forbidden paths; mutating paths create their own projects under the
+ *    fixture organization and clean up after themselves via
+ *    {@link withProjectCleanup}, which deletes the project, its bootstrap api
+ *    key, and its append-only audit rows on exit (success or failure). The
+ *    global teardown sweep is only a backstop. Assertions stay membership-based
+ *    (never exact `getProjects` counts) and names embed a unique token so a
+ *    leftover row from a crashed run can't collide on the
+ *    `(slug, organization_id)` unique index.
+ *  - Permission tests reuse the default authenticated effect and re-authenticate
+ *    just the call under test via {@link asUnauthorized}; the inner provision
+ *    shadows the harness's default full-permission session.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields,
+ *    paired with a DB-state assertion that the failure path wrote nothing.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { ProjectService } from "@voidhash/core/services";
+import {
+  ActionForbiddenError,
+  AuthenticationError,
+  type SecretKeySession,
+  type UserSession,
+} from "@voidhash/core/domain/auth/Auth";
+import { ProjectNotFoundError } from "@voidhash/core/domain/project/Project";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  and,
+  apiKeys,
+  auditLogs,
+  eq,
+  inArray,
+  projects,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const organizationId = CoreTestFixture.organizationId;
+const organizationSlug = CoreTestFixture.organizationSlug;
+const fixtureProjectId = CoreTestFixture.projectId;
+const fixtureProjectSlug = CoreTestFixture.projectSlug;
+
+/** Monotonic counter so names stay unique even within the same millisecond. */
+let nameSeq = 0;
+/**
+ * A display name whose derived slug is unique per call, keeping creates clear of
+ * the `(slug, organization_id)` unique index across runs. `createSlug` lowercases
+ * and dashes, so the resulting slug looks like `it-project-<label>-<n>`.
+ */
+const uniqueName = (label: string) => `it project ${label} ${Date.now()} ${nameSeq++}`;
+
+/** Read a project row straight from the database, bypassing the service. */
+const findProjectRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.projects.findFirst({ where: { id } });
+  });
+
+/** All api-key rows the bootstrap step wrote for a project. */
+const findApiKeyRows = (projectId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.select().from(apiKeys).where(eq(apiKeys.projectId, projectId));
+  });
+
+/** All audit-log rows recorded for a given project entity. */
+const findProjectAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(eq(auditLogs.entityType, AuditLogEntityType.Project), eq(auditLogs.entityId, entityId)),
+      );
+  });
+
+/**
+ * Delete the given projects, their bootstrap api keys, and their audit rows.
+ * Audit entries are append-only and survive a `deleteProject`, so they are
+ * cleared by entity id too. Each delete is `ignore`d so a missing row never
+ * turns the finalizer into a failure.
+ */
+const cleanupCreatedProjects = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    const targets = [...ids];
+    yield* db.delete(apiKeys).where(inArray(apiKeys.projectId, targets)).pipe(Effect.ignore);
+    yield* db
+      .delete(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.Project),
+          inArray(auditLogs.entityId, targets),
+        ),
+      )
+      .pipe(Effect.ignore);
+    yield* db.delete(projects).where(inArray(projects.id, targets)).pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every project it creates is removed afterward, regardless
+ * of how the test exits. Pass each created project id to the `track` callback;
+ * cleanup reads the collected ids lazily at finalization via `Effect.ensuring`,
+ * so it sees every id tracked while the body ran (including on failure).
+ */
+const withProjectCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupCreatedProjects(createdIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no org/project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * A `secret-key`-method session that holds `organization:all` for the fixture
+ * org but carries no `user`. It passes the org permission gate yet has no
+ * `session.user.id`, so `createProject` reaches its `AuthenticationError` branch.
+ */
+const sessionWithoutUser = (): SecretKeySession => ({
+  cookie: null,
+  method: "secret-key",
+  name: "Integration Secret Key",
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:all"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: null,
+  projects: [],
+  user: null,
+});
+
+/**
+ * A `user`-method session for the fixture principal that additionally carries
+ * `project:all` for a freshly created project. The default fixture session only
+ * grants `project:all` on the *seeded* project, so `checkProjectPermission`
+ * (which matches by exact project id, with no org-level fallback) would
+ * otherwise reject `updateProject`/`deleteProject` calls against a newly created
+ * `proj_…` id.
+ */
+const sessionWithProjectAccess = (projectId: string): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:all"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: null,
+  projects: [
+    {
+      id: projectId,
+      logo: null,
+      name: "Created Project",
+      organizationId: CoreTestFixture.organizationId,
+      permissions: ["project:all"],
+      slug: "created-project",
+    },
+  ],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no org/project access. Re-authenticates
+ * just this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+/**
+ * Run a single call with `project:all` for the given (freshly created) project.
+ * The inner provision shadows the harness's default session, which only grants
+ * access to the seeded fixture project.
+ */
+const asProjectMember = <A, E, R>(projectId: string, effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithProjectAccess(projectId)));
+
+describe("ProjectService.getProjectById", () => {
+  test(
+    "returns the seeded fixture project by id",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const project = yield* projectService.getProjectById(fixtureProjectId);
+      expect(project?.id).toBe(fixtureProjectId);
+      expect(project?.slug).toBe(fixtureProjectSlug);
+      expect(project?.organizationId).toBe(organizationId);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns null for an unknown id (before any permission check)",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const project = yield* projectService.getProjectById(`proj_missing_${Date.now()}`);
+      expect(project).toBeNull();
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all for an existing project",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const error = yield* Effect.flip(
+        asUnauthorized(projectService.getProjectById(fixtureProjectId)),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProjectService.getProjectBySlug", () => {
+  test(
+    "returns the fixture project by slug + organizationId",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const project = yield* projectService.getProjectBySlug({
+        organizationId,
+        slug: fixtureProjectSlug,
+      });
+      expect(project?.id).toBe(fixtureProjectId);
+      expect(project?.slug).toBe(fixtureProjectSlug);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns null when no project matches the slug",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const project = yield* projectService.getProjectBySlug({
+        organizationId,
+        slug: `it-project-missing-${Date.now()}`,
+      });
+      expect(project).toBeNull();
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all for a matching project",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const error = yield* Effect.flip(
+        asUnauthorized(
+          projectService.getProjectBySlug({ organizationId, slug: fixtureProjectSlug }),
+        ),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProjectService.getProjectBySlugAndOrganizationSlug", () => {
+  test(
+    "returns the fixture project by project slug + organization slug",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const project = yield* projectService.getProjectBySlugAndOrganizationSlug({
+        organizationSlug,
+        projectSlug: fixtureProjectSlug,
+      });
+      expect(project?.id).toBe(fixtureProjectId);
+      expect(project?.organizationId).toBe(organizationId);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns null when the organization slug is unknown",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const project = yield* projectService.getProjectBySlugAndOrganizationSlug({
+        organizationSlug: `it-org-missing-${Date.now()}`,
+        projectSlug: fixtureProjectSlug,
+      });
+      expect(project).toBeNull();
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns null when the project slug is unknown under a known organization",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const project = yield* projectService.getProjectBySlugAndOrganizationSlug({
+        organizationSlug,
+        projectSlug: `it-project-missing-${Date.now()}`,
+      });
+      expect(project).toBeNull();
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all for a matching project",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const error = yield* Effect.flip(
+        asUnauthorized(
+          projectService.getProjectBySlugAndOrganizationSlug({
+            organizationSlug,
+            projectSlug: fixtureProjectSlug,
+          }),
+        ),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProjectService.getProjects", () => {
+  test(
+    "lists projects created under the organization",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const created = yield* projectService.createProject({
+          name: uniqueName("list"),
+          organizationId,
+        });
+        track(created.id);
+
+        const list = yield* projectService.getProjects(organizationId);
+        expect(list.some((project) => project.id === created.id)).toBe(true);
+        expect(list.some((project) => project.id === fixtureProjectId)).toBe(true);
+        expect(list.some((project) => project.id === `proj_absent_${Date.now()}`)).toBe(false);
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without organization:all",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const error = yield* Effect.flip(asUnauthorized(projectService.getProjects(organizationId)));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProjectService.getProjectsByOrganizationSlug", () => {
+  test(
+    "lists projects by organization slug",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const created = yield* projectService.createProject({
+          name: uniqueName("list-by-org-slug"),
+          organizationId,
+        });
+        track(created.id);
+
+        const list = yield* projectService.getProjectsByOrganizationSlug(organizationSlug);
+        expect(list).not.toBeNull();
+        expect(list?.some((project) => project.id === created.id)).toBe(true);
+        expect(list?.some((project) => project.id === fixtureProjectId)).toBe(true);
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns null when the organization slug is unknown",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const list = yield* projectService.getProjectsByOrganizationSlug(
+        `it-org-missing-${Date.now()}`,
+      );
+      expect(list).toBeNull();
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without organization:all",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const error = yield* Effect.flip(
+        asUnauthorized(projectService.getProjectsByOrganizationSlug(organizationSlug)),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProjectService.createProject", () => {
+  test(
+    "writes the project + bootstrap publishable api key and records a created audit entry",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const name = uniqueName("create");
+
+        const created = yield* projectService.createProject({ name, organizationId });
+        track(created.id);
+
+        expect(created.id.startsWith("proj_")).toBe(true);
+        expect(created.name).toBe(name);
+        // A fresh, non-blacklisted, non-colliding name keeps the slug unsuffixed.
+        expect(created.slug).toBe(name.toLowerCase().replace(/ /g, "-"));
+
+        const row = yield* findProjectRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.name).toBe(name);
+        expect(row?.slug).toBe(created.slug);
+        expect(row?.organizationId).toBe(organizationId);
+        expect(row?.createdByUserId).toBe(CoreTestFixture.userId);
+
+        // The bootstrap publishable api key is written in the same transaction.
+        const keys = yield* findApiKeyRows(created.id);
+        expect(keys.length).toBe(1);
+        expect(keys[0]?.isPublic).toBe(true);
+        expect(keys[0]?.prefix).toBe("vh_pk_");
+        expect(keys[0]?.name).toBe("Publishable key");
+        expect(keys[0]?.id.startsWith("api_pk_")).toBe(true);
+
+        const auditEntries = yield* findProjectAuditEntries(created.id);
+        const createdEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.Project);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({
+          snapshot: { id: created.id, name, slug: created.slug },
+        });
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "appends a short id when the derived slug is blacklisted",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+
+        // `createSlug("auth")` === "auth", which is in SLUG_BLACKLIST.
+        const created = yield* projectService.createProject({ name: "auth", organizationId });
+        track(created.id);
+
+        expect(created.slug).not.toBe("auth");
+        expect(created.slug.startsWith("auth-")).toBe(true);
+
+        const row = yield* findProjectRow(created.id);
+        expect(row?.slug).toBe(created.slug);
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "appends a short id when the derived slug collides with an existing project",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const name = uniqueName("collide");
+        const baseSlug = name.toLowerCase().replace(/ /g, "-");
+
+        const first = yield* projectService.createProject({ name, organizationId });
+        track(first.id);
+        expect(first.slug).toBe(baseSlug);
+
+        // Same name -> same base slug -> collision avoidance appends a short id.
+        const second = yield* projectService.createProject({ name, organizationId });
+        track(second.id);
+        expect(second.slug).not.toBe(baseSlug);
+        expect(second.slug.startsWith(`${baseSlug}-`)).toBe(true);
+
+        // Both rows exist with distinct slugs (the unique index was respected).
+        const firstRow = yield* findProjectRow(first.id);
+        const secondRow = yield* findProjectRow(second.id);
+        expect(firstRow?.slug).toBe(baseSlug);
+        expect(secondRow?.slug).toBe(second.slug);
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without organization:all and writes no project",
+    // No cleanup wrapper: a forbidden create writes no row.
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const name = uniqueName("create-forbidden");
+      const slug = name.toLowerCase().replace(/ /g, "-");
+
+      const error = yield* Effect.flip(
+        asUnauthorized(projectService.createProject({ name, organizationId })),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      const db = yield* Db;
+      const rows = yield* db
+        .select({ id: projects.id })
+        .from(projects)
+        .where(and(eq(projects.organizationId, organizationId), eq(projects.slug, slug)));
+      expect(rows.length).toBe(0);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with AuthenticationError when the session carries no user and writes no project",
+    // No cleanup wrapper: creation fails before any row is written.
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const name = uniqueName("create-no-user");
+      const slug = name.toLowerCase().replace(/ /g, "-");
+
+      const error = yield* Effect.flip(
+        projectService
+          .createProject({ name, organizationId })
+          .pipe(CoreAuthSession.authenticate(sessionWithoutUser())),
+      );
+      expect(error).toBeInstanceOf(AuthenticationError);
+
+      const db = yield* Db;
+      const rows = yield* db
+        .select({ id: projects.id })
+        .from(projects)
+        .where(and(eq(projects.organizationId, organizationId), eq(projects.slug, slug)));
+      expect(rows.length).toBe(0);
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProjectService.updateProject", () => {
+  test(
+    "renames the project row and records an updated audit entry",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const created = yield* projectService.createProject({
+          name: uniqueName("update-before"),
+          organizationId,
+        });
+        track(created.id);
+
+        const newName = uniqueName("update-after");
+        // The default fixture session only grants `project:all` on the seeded
+        // project, so the freshly created project needs an explicit grant.
+        yield* asProjectMember(
+          created.id,
+          projectService.updateProject({ id: created.id, name: newName }),
+        );
+
+        const row = yield* findProjectRow(created.id);
+        expect(row?.name).toBe(newName);
+        // The slug is intentionally untouched by an update.
+        expect(row?.slug).toBe(created.slug);
+
+        const auditEntries = yield* findProjectAuditEntries(created.id);
+        const updatedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(updatedEntry?.changes).toEqual({ snapshot: { name: newName } });
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProjectNotFoundError when the project does not exist",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const id = `proj_missing_${Date.now()}`;
+      const error = yield* Effect.flip(projectService.updateProject({ id, name: "Nope" }));
+      expect(error).toBeInstanceOf(ProjectNotFoundError);
+      if (error instanceof ProjectNotFoundError) {
+        expect(error.projectId).toBe(id);
+      }
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and leaves the row unchanged",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const created = yield* projectService.createProject({
+          name: uniqueName("update-forbidden"),
+          organizationId,
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(projectService.updateProject({ id: created.id, name: "Hijacked" })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findProjectRow(created.id);
+        expect(row?.name).toBe(created.name);
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("ProjectService.deleteProject", () => {
+  test(
+    "removes the project row and records a deleted audit entry",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const created = yield* projectService.createProject({
+          name: uniqueName("delete"),
+          organizationId,
+        });
+        track(created.id);
+
+        // The default fixture session only grants `project:all` on the seeded
+        // project, so the freshly created project needs an explicit grant.
+        yield* asProjectMember(created.id, projectService.deleteProject({ id: created.id }));
+
+        const row = yield* findProjectRow(created.id);
+        expect(row).toBeUndefined();
+
+        const lookup = yield* projectService.getProjectById(created.id);
+        expect(lookup).toBeNull();
+
+        const auditEntries = yield* findProjectAuditEntries(created.id);
+        const deletedEntry = auditEntries.find((entry) => entry.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with ProjectNotFoundError when the project does not exist",
+    Effect.gen(function* () {
+      const projectService = yield* ProjectService;
+      const id = `proj_missing_${Date.now()}`;
+      const error = yield* Effect.flip(projectService.deleteProject({ id }));
+      expect(error).toBeInstanceOf(ProjectNotFoundError);
+      if (error instanceof ProjectNotFoundError) {
+        expect(error.projectId).toBe(id);
+      }
+    }).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and retains the project",
+    withProjectCleanup((track) =>
+      Effect.gen(function* () {
+        const projectService = yield* ProjectService;
+        const created = yield* projectService.createProject({
+          name: uniqueName("delete-forbidden"),
+          organizationId,
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(projectService.deleteProject({ id: created.id })),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        const row = yield* findProjectRow(created.id);
+        expect(row).toBeDefined();
+      }),
+    ).pipe(Effect.provide(ProjectService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/purchaseProcessing/PurchaseLedgerWorkerService.integration.test.ts b/packages/core/test/services/purchaseProcessing/PurchaseLedgerWorkerService.integration.test.ts
new file mode 100644
index 000000000..d2c7bba69
--- /dev/null
+++ b/packages/core/test/services/purchaseProcessing/PurchaseLedgerWorkerService.integration.test.ts
@@ -0,0 +1,460 @@
+/**
+ * Integration tests for {@link PurchaseLedgerWorkerService}, run against the
+ * real backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB; the analytics dispatch is the one collaborator we control here).
+ *
+ * The worker drains the append-only `purchase_ledger` table by advancing rows
+ * through `Pending → InProgress → Published` (or `DeadLetter`) via a SQL CAS
+ * claim. Each test seeds real ledger rows, runs one `poll()` pass against the
+ * live DB, and verifies the *persisted* state transition rather than just the
+ * returned counts:
+ *  - the `status` / `attemptCount` / `nextAttemptAt` / `lastError` /
+ *    `publishedAt` / `claimedBy` columns the worker rewrites,
+ *  - that the claim is always released (`claimedBy`/`claimedAt` cleared) on a
+ *    terminal or retry outcome.
+ *
+ * Two deliberate design facts shape these tests:
+ *  - The worker's claim/release SQL is GLOBAL (it has no project scoping), and
+ *    the DB is shared across tests, so assertions are always scoped to the rows
+ *    a test created (by id) and never to the aggregate poll-result counts. A
+ *    poll may claim leftover rows from elsewhere; we assert our own rows reached
+ *    the expected status and that the count fields are numbers / contributed.
+ *  - `eventsPayload` is a JSON column. Every {@link InternalAnalyticsEvent}
+ *    variant carries a required `occurredAt: Schema.Date` (an `instanceOf(Date)`
+ *    schema that rejects ISO strings), so any realistic event payload that
+ *    round-trips through JSON storage *fails* to decode and is dead-lettered.
+ *    The only payload that decodes cleanly after a JSON round-trip is the empty
+ *    array — which also makes the decode-success / publish / retry / dead-letter
+ *    paths reachable by pairing an empty payload with a controllable dispatch.
+ *
+ * Conventions:
+ *  - The fixture seeds only user/org/member/project; this service needs neither
+ *    auth nor any fixture parent row (ledger columns have no FK constraints), so
+ *    rows are inserted directly with a unique idempotency-key namespace and
+ *    cleaned up by id via {@link withLedgerCleanup} on exit, success or failure.
+ *  - {@link makeDispatch} provides a test-double {@link AnalyticsDispatchService}
+ *    whose `dispatchTrusted` either succeeds or fails on demand. The live
+ *    dispatch enqueues onto a Cloudflare Queue (no in-process runtime), so a
+ *    controllable double is the only in-process seam for the dispatch-failure
+ *    → retry / dead-letter paths.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+import { AnalyticsDispatchService } from "@voidhash/core/services/analyticsIngest/AnalyticsDispatchService";
+import { PurchaseLedgerWorkerService } from "@voidhash/core/services/purchaseProcessing/PurchaseLedgerWorkerService";
+import { generateId } from "@voidhash/core/utils/generate-id";
+import {
+  Db,
+  type InsertPurchaseLedger,
+  PurchaseLedgerStatus,
+  eq,
+  inArray,
+  purchaseLedger,
+  sql,
+} from "@voidhash/db";
+
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+const organizationId = CoreTestFixture.organizationId;
+
+/** Monotonic counter so idempotency keys stay unique within the same millisecond. */
+let seq = 0;
+const uniqueKey = (label: string) => `it-pl-${label}-${Date.now()}-${seq++}`;
+
+/**
+ * Poll options with a small batch / fast stale cutoff so a single pass claims
+ * and processes the seeded rows deterministically. `maxAttempts` matches the
+ * production default so the retry-vs-dead-letter boundary is exercised at the
+ * real watermark.
+ */
+const pollOptions = {
+  batchSize: 100,
+  maxAttempts: 8,
+  staleClaimSeconds: 300,
+} as const;
+
+/**
+ * A test-double {@link AnalyticsDispatchService} whose `dispatchTrusted`
+ * succeeds or fails on demand. `behavior: "fail"` returns a failed effect (cast
+ * to the shape's error / requirement channels, matching the worker's
+ * `Effect.matchCause` dispatch handler) so the dispatch-failure → retry /
+ * dead-letter paths are reachable in-process.
+ */
+const makeDispatch = (behavior: "succeed" | "fail"): Layer.Layer<AnalyticsDispatchService> =>
+  Layer.succeed(AnalyticsDispatchService, {
+    dispatchCaptured: () => Effect.void,
+    dispatchTrusted: (() =>
+      behavior === "fail" ? Effect.fail(new Error("dispatch boom")) : Effect.void) as never,
+  });
+
+/**
+ * Minimal {@link PlatformRuntime} stub. `dispatchTrusted` colors its effect
+ * with the platform runtime marker (the live queue producer needs it); the test
+ * double never reads it, so this only discharges the type-level requirement.
+ */
+const PlatformRuntimeStub = Layer.succeed(PlatformRuntime, PlatformRuntime.of({}));
+
+/** Build a complete `purchase_ledger` insert row, defaulting every NOT NULL column. */
+const ledgerRow = (overrides: Partial<InsertPurchaseLedger>): InsertPurchaseLedger => ({
+  attemptCount: 0,
+  claimedAt: null,
+  claimedBy: null,
+  eventsPayload: [],
+  id: generateId("purchaseLedger"),
+  idempotencyKey: uniqueKey("row"),
+  lastError: null,
+  nextAttemptAt: null,
+  organizationId,
+  personId: "it_pl_person",
+  projectId,
+  providerEventType: "purchase",
+  providerId: "apple-app-store",
+  publishedAt: null,
+  rawProviderPayload: null,
+  resultPayload: {},
+  source: "webhook",
+  status: PurchaseLedgerStatus.Pending,
+  ...overrides,
+});
+
+/** Insert a ledger row, returning its id for read-back + cleanup. */
+const insertRow = (overrides: Partial<InsertPurchaseLedger>) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const row = ledgerRow(overrides);
+    yield* db.insert(purchaseLedger).values(row);
+    return row.id as string;
+  });
+
+/** Read a single ledger row straight from the DB, bypassing the worker. */
+const findRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchaseLedger.findFirst({ where: { id } });
+  });
+
+/**
+ * Force a row's `claimedAt` into the past so the stale-claim sweep treats it as
+ * abandoned. `claimedAt` defaults to `NOW()` on the seed insert via the worker's
+ * own SQL, but a directly-seeded `InProgress` row needs an explicit backdated
+ * timestamp the relational column type can't express as a literal, so it is set
+ * with a SQL interval subtraction (`make_interval(secs => …)`).
+ */
+const backdateClaim = (id: string, secondsAgo: number) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db
+      .update(purchaseLedger)
+      .set({ claimedAt: sql`NOW() - make_interval(secs => ${secondsAgo})` })
+      .where(eq(purchaseLedger.id, id));
+  });
+
+/** Delete the seeded ledger rows. Ledger rows are append-only with no audit log. */
+const cleanupRows = (ids: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (ids.length === 0) return;
+    const db = yield* Db;
+    yield* db
+      .delete(purchaseLedger)
+      .where(inArray(purchaseLedger.id, [...ids]))
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every ledger row it inserts is removed afterward,
+ * regardless of how the test exits. Pass each inserted id to `track`; cleanup
+ * reads the collected ids lazily at finalization via `Effect.ensuring`.
+ */
+const withLedgerCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanupRows(createdIds)));
+};
+
+describe("PurchaseLedgerWorkerService.poll", () => {
+  test(
+    "leaves a non-pending row untouched (no pending rows in scope)",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        // A Published row is terminal — the claim SQL only targets Pending rows,
+        // so a poll must never reclaim or re-process it.
+        const id = yield* insertRow({
+          publishedAt: new Date(),
+          status: PurchaseLedgerStatus.Published,
+        });
+        track(id);
+
+        const result = yield* worker.poll(pollOptions);
+        expect(typeof result.claimedCount).toBe("number");
+
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.Published);
+        expect(row?.claimedBy).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("succeed")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  test(
+    "claims a pending row, dispatches it, and marks it published",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        // Empty payload decodes cleanly after the JSON round-trip; the
+        // succeeding bridge then drives the row to Published.
+        const id = yield* insertRow({ eventsPayload: [], status: PurchaseLedgerStatus.Pending });
+        track(id);
+
+        const result = yield* worker.poll(pollOptions);
+        // Membership-style: this poll published at least our row. Other rows in
+        // the shared table may inflate the aggregate, so never assert equality.
+        expect(result.publishedCount).toBeGreaterThanOrEqual(1);
+        expect(typeof result.claimedCount).toBe("number");
+        expect(typeof result.retriedCount).toBe("number");
+        expect(typeof result.deadLetteredCount).toBe("number");
+        expect(typeof result.staleClaimsReleased).toBe("number");
+
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.Published);
+        expect(row?.publishedAt).not.toBeNull();
+        expect(row?.lastError).toBeNull();
+        expect(row?.claimedBy).toBeNull();
+        expect(row?.claimedAt).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("succeed")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  test(
+    "dead-letters a row whose payload fails to decode (permanent), without dispatching",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        // A payload that cannot match the analytics-event schema is a permanent
+        // failure → straight to DeadLetter, bridge never consulted.
+        const id = yield* insertRow({
+          attemptCount: 2,
+          eventsPayload: [{ not: "a valid analytics event" }],
+          status: PurchaseLedgerStatus.Pending,
+        });
+        track(id);
+
+        yield* worker.poll(pollOptions);
+
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.DeadLetter);
+        expect(row?.lastError?.startsWith("decode failed:")).toBe(true);
+        // markDeadLetter bumps the attempt count by one.
+        expect(row?.attemptCount).toBe(3);
+        expect(row?.claimedBy).toBeNull();
+        expect(row?.claimedAt).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("succeed")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  test(
+    "on dispatch failure under max attempts: schedules a backoff retry and stays pending",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        // attemptCount 0 + failing bridge → nextAttempt 1, well under maxAttempts,
+        // so the row is rescheduled rather than dead-lettered.
+        const id = yield* insertRow({
+          attemptCount: 0,
+          eventsPayload: [],
+          status: PurchaseLedgerStatus.Pending,
+        });
+        track(id);
+
+        yield* worker.poll(pollOptions);
+
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.Pending);
+        expect(row?.attemptCount).toBe(1);
+        // Backoff pushes the next eligible time into the future (computeBackoff =
+        // 2 ** 1 = 2s); assert it is scheduled ahead of now rather than the exact
+        // second, which races NOW().
+        expect(row?.nextAttemptAt).not.toBeNull();
+        expect(row?.nextAttemptAt && row.nextAttemptAt.getTime() > Date.now()).toBe(true);
+        expect(row?.lastError).toContain("dispatch boom");
+        // The claim is released so the row is eligible again after the window.
+        expect(row?.claimedBy).toBeNull();
+        expect(row?.claimedAt).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("fail")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  test(
+    "on dispatch failure at the last attempt: dead-letters the row",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        // attemptCount 7 + failing dispatch → nextAttempt 8 === maxAttempts, so the
+        // row exhausts retries and is dead-lettered.
+        const id = yield* insertRow({
+          attemptCount: 7,
+          eventsPayload: [],
+          status: PurchaseLedgerStatus.Pending,
+        });
+        track(id);
+
+        yield* worker.poll(pollOptions);
+
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.DeadLetter);
+        expect(row?.attemptCount).toBe(8);
+        expect(row?.lastError).toContain("dispatch boom");
+        expect(row?.claimedBy).toBeNull();
+        expect(row?.claimedAt).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("fail")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  test(
+    "releases a stale InProgress claim back to pending, then reclaims and processes it",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        // An InProgress row whose claim is older than the stale cutoff models a
+        // worker that crashed mid-row; the sweep must release it before claiming.
+        const id = yield* insertRow({
+          claimedBy: "crashed-worker",
+          eventsPayload: [],
+          status: PurchaseLedgerStatus.InProgress,
+        });
+        track(id);
+        yield* backdateClaim(id, pollOptions.staleClaimSeconds + 120);
+
+        const result = yield* worker.poll(pollOptions);
+        expect(result.staleClaimsReleased).toBeGreaterThanOrEqual(1);
+
+        // Released → reclaimed by this worker → dispatched (succeeding bridge) →
+        // Published, all within the one pass.
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.Published);
+        expect(row?.claimedBy).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("succeed")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  test(
+    "does not release a fresh InProgress claim within the stale window",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        // A claim taken just now is inside the stale window, so the sweep must
+        // leave it InProgress (another live worker presumably owns it).
+        const id = yield* insertRow({
+          claimedBy: "active-worker",
+          eventsPayload: [],
+          status: PurchaseLedgerStatus.InProgress,
+        });
+        track(id);
+        yield* backdateClaim(id, 1);
+
+        yield* worker.poll(pollOptions);
+
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.InProgress);
+        expect(row?.claimedBy).toBe("active-worker");
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("succeed")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  test(
+    "concurrent polls partition rows safely via the SQL CAS: a single row is processed once",
+    withLedgerCleanup((track) =>
+      Effect.gen(function* () {
+        const worker = yield* PurchaseLedgerWorkerService;
+
+        const id = yield* insertRow({ eventsPayload: [], status: PurchaseLedgerStatus.Pending });
+        track(id);
+
+        // Two replicas poll at once; the trailing `status = Pending` guard in the
+        // claim UPDATE makes at most one of them win the row, so it is published
+        // exactly once and never double-claimed.
+        const [a, b] = yield* Effect.all([worker.poll(pollOptions), worker.poll(pollOptions)], {
+          concurrency: 2,
+        });
+        const ourPublished = (a.publishedCount >= 1 ? 1 : 0) + (b.publishedCount >= 1 ? 1 : 0);
+        expect(ourPublished).toBeGreaterThanOrEqual(1);
+
+        const row = yield* findRow(id);
+        expect(row?.status).toBe(PurchaseLedgerStatus.Published);
+        expect(row?.claimedBy).toBeNull();
+        expect(row?.publishedAt).not.toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseLedgerWorkerService.layer),
+      Effect.provide(makeDispatch("succeed")),
+      Effect.provide(PlatformRuntimeStub),
+    ),
+  );
+
+  // `computeBackoffSeconds` is a private pure helper with no public seam. Its
+  // sub-ceiling output is observed indirectly above (`nextAttemptAt` is pushed
+  // into the future on retry). The MAX_BACKOFF_SECONDS = 3600 ceiling only binds
+  // at attemptCount >= 12 (2 ** 12 > 3600), which the default maxAttempts of 8
+  // never reaches before dead-lettering, so the clamp cannot be reached through
+  // the public `poll()` contract and is left for a dedicated unit test of the
+  // extracted helper.
+  vitestTest.todo(
+    "computeBackoffSeconds clamps to MAX_BACKOFF_SECONDS — unreachable via poll() (nextAttempt < 12 before dead-letter); needs a unit test of the extracted pure helper",
+  );
+});
+
+describe("PurchaseLedgerWorkerService.run", () => {
+  // `run()` is `poll().pipe(catch+logError, Effect.repeat(Schedule.spaced(...)))`
+  // — an unbounded loop that never returns and swallows poll errors. There is no
+  // in-process seam to stop it deterministically after N iterations without
+  // forking + racing an interrupt on a wall-clock delay, which would be timing-
+  // flaky in the shared-DB harness. The per-pass behavior it repeats (claim →
+  // dispatch → state transition, plus error swallowing inside `poll`) is fully
+  // covered by the `poll` suite above; the schedule wiring is left as a todo.
+  vitestTest.todo(
+    "run() repeats poll() on Schedule.spaced(pollIntervalMillis) and logs+swallows poll errors without stopping — infinite loop, no in-process seam to break the schedule deterministically",
+  );
+});
diff --git a/packages/core/test/services/purchaseProcessing/PurchaseProcessingService.integration.test.ts b/packages/core/test/services/purchaseProcessing/PurchaseProcessingService.integration.test.ts
new file mode 100644
index 000000000..44be90144
--- /dev/null
+++ b/packages/core/test/services/purchaseProcessing/PurchaseProcessingService.integration.test.ts
@@ -0,0 +1,1590 @@
+/**
+ * Integration tests for {@link PurchaseProcessingService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB + ClickHouse + WorkOS; only the project schema cache is an
+ * in-memory stub).
+ *
+ * Unlike the catalog services, `PurchaseProcessingService` is unauthenticated
+ * (its callers are the payment-provider boundaries, not dashboard users) and
+ * provider-neutral: every public method mutates the operational projection
+ * (`transaction` / `subscription` / `purchase`), syncs unlocked perks via
+ * {@link PerkGrantService}, and stages revenue analytics into the append-only
+ * `purchase_ledger` outbox. The watermark columns (`last_event_occurred_at`)
+ * guard against out-of-order delivery, and the `purchase_ledger.idempotency_key`
+ * UNIQUE constraint is the cross-source dedup gate.
+ *
+ * Each test verifies the *persisted* side effects rather than just the return
+ * value:
+ *  - the operational row written / updated (subscription / transaction / purchase),
+ *  - the `purchase_ledger` outbox row (idempotency key, finalized `eventsPayload`
+ *    + `resultPayload`),
+ *  - money reconstruction from the stored transaction on refund / revoke paths,
+ *  - watermark rejection of stale (earlier-`occurredAt`) events.
+ *
+ * Conventions:
+ *  - The fixture only seeds user/org/member/project. Every test creates the
+ *    parent rows it needs (a payment-provider configuration, a product, a
+ *    configuration-product mapping, and a person) under the fixture project via
+ *    {@link withPurchaseScenario}, which also cleans them and every operational
+ *    /ledger row up afterward — success or failure — via `Effect.ensuring`.
+ *  - Identifiers are namespaced per call ({@link uniqueKey}) so leftover rows
+ *    from a crashed run can't collide, and assertions stay membership / by-id
+ *    based.
+ *  - `PurchaseProcessingService` performs no permission check, so there is no
+ *    forbidden-path variant; the harness's default authenticated session is
+ *    provided only because the layer graph (via `PerkGrantService`) resolves
+ *    `AuthSession` lazily — no method under test reads it.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof`, paired with a DB-state
+ *    assertion proving nothing was written.
+ */
+import { PurchaseType, SubscriptionStatus } from "@voidhash/lib";
+import { Effect, Option } from "effect";
+import { describe, expect } from "vitest";
+
+import { PerkGrantService } from "@voidhash/core/services";
+import {
+  PurchaseProcessingProductNotMappedError,
+  PurchaseProcessingService,
+  PurchaseProcessingServiceError,
+} from "@voidhash/core/services/purchaseProcessing/PurchaseProcessingService";
+import {
+  PurchaseProcessingMoney,
+  type PurchaseEventSource,
+} from "@voidhash/core/domain/purchaseProcessing/PurchaseProcessing";
+import type { PaymentProviderId } from "@voidhash/core/domain/paymentProvider/PaymentProviderConfiguration";
+import type { CurrencyCode, MinorAmount } from "@voidhash/core/domain/shared/Money";
+import {
+  type DbError,
+  Db,
+  ProviderEnvironment,
+  eq,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  personUnlockedPerks,
+  persons,
+  products,
+  purchaseLedger,
+  purchases,
+  subscriptions,
+  transactions,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+const organizationId = CoreTestFixture.organizationId;
+
+/** Monotonic counter so identifiers stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueKey = (label: string) => `it-pp-${label}-${Date.now()}-${seq++}`;
+
+const PROVIDER_ID = "apple-app-store" as PaymentProviderId;
+const SOURCE = "webhook" as PurchaseEventSource;
+
+/** Cents helper for the branded `MinorAmount` domain type at this trusted boundary. */
+const cents = (n: number) => n as MinorAmount;
+/** Currency helper for the branded `CurrencyCode` domain type. */
+const ccy = (s: string) => s as CurrencyCode;
+
+/**
+ * A non-USD-converted money breakdown (no FX rate) used to fund a transaction
+ * row. The analytics mapper applies the sign convention; amounts here are the
+ * raw non-negative gross/commission/tax/proceeds.
+ */
+const money = (gross: number): PurchaseProcessingMoney =>
+  new PurchaseProcessingMoney({
+    currency: ccy("USD"),
+    grossAmount: cents(gross),
+    proceedsAfterTaxAmount: cents(gross - Math.round(gross * 0.3)),
+    proceedsAmount: cents(gross - Math.round(gross * 0.3)),
+    storeCommissionAmount: cents(Math.round(gross * 0.3)),
+    storefront: Option.some("USA"),
+    taxAmount: cents(0),
+    usd: Option.none(),
+  });
+
+interface ScenarioIds {
+  readonly configurationId: string;
+  readonly productId: string;
+  readonly configurationProductId: string;
+  readonly personId: string;
+}
+
+/** Read a subscription row straight from the DB, bypassing the service. */
+const findSubscriptionRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findFirst({ where: { id } });
+  });
+
+/** Read a subscription row by its store subscription id within a config product. */
+const findSubscriptionByStore = (configurationProductId: string, storeSubscriptionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.subscriptions.findFirst({
+      where: {
+        paymentProviderConfigurationProductId: configurationProductId,
+        storeSubscriptionId,
+      },
+    });
+  });
+
+/** Read a transaction row by its store transaction id within a config product. */
+const findTransactionByStore = (configurationProductId: string, storeTransactionId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.transactions.findFirst({
+      where: {
+        paymentProviderConfigurationProductId: configurationProductId,
+        storeTransactionId,
+      },
+    });
+  });
+
+/** Read a purchase row by its provider key. */
+const findPurchaseByProviderKey = (providerKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchases.findFirst({ where: { providerKey } });
+  });
+
+/** Read the ledger outbox row for a given idempotency key. */
+const findLedgerRow = (idempotencyKey: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchaseLedger.findFirst({ where: { idempotencyKey } });
+  });
+
+/**
+ * Delete every operational + ledger + parent row created during a scenario,
+ * deepest dependents first. Append-only ledger rows are cleared by person id.
+ * Each delete is `ignore`d so a missing row never turns the finalizer into a
+ * failure.
+ */
+const cleanupScenario = (ids: ScenarioIds, idempotencyKeys: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db
+      .delete(personUnlockedPerks)
+      .where(eq(personUnlockedPerks.personId, ids.personId))
+      .pipe(Effect.ignore);
+    yield* db
+      .delete(subscriptions)
+      .where(eq(subscriptions.personId, ids.personId))
+      .pipe(Effect.ignore);
+    yield* db
+      .delete(transactions)
+      .where(eq(transactions.personId, ids.personId))
+      .pipe(Effect.ignore);
+    yield* db.delete(purchases).where(eq(purchases.personId, ids.personId)).pipe(Effect.ignore);
+    yield* db
+      .delete(purchaseLedger)
+      .where(eq(purchaseLedger.personId, ids.personId))
+      .pipe(Effect.ignore);
+    if (idempotencyKeys.length > 0) {
+      yield* db
+        .delete(purchaseLedger)
+        .where(inArray(purchaseLedger.idempotencyKey, [...idempotencyKeys]))
+        .pipe(Effect.ignore);
+    }
+    yield* db
+      .delete(paymentProviderConfigurationProducts)
+      .where(eq(paymentProviderConfigurationProducts.id, ids.configurationProductId))
+      .pipe(Effect.ignore);
+    yield* db.delete(products).where(eq(products.id, ids.productId)).pipe(Effect.ignore);
+    yield* db
+      .delete(paymentProviderConfigurations)
+      .where(eq(paymentProviderConfigurations.id, ids.configurationId))
+      .pipe(Effect.ignore);
+    yield* db.delete(persons).where(eq(persons.id, ids.personId)).pipe(Effect.ignore);
+  });
+
+/**
+ * Seed the parent rows a purchase action needs (payment-provider configuration
+ * → product → configuration-product mapping → person) under the fixture project,
+ * run the test body with those ids, then delete everything it created on exit.
+ * Extra idempotency keys (e.g. the implicit transfer keys the service derives)
+ * are collected via the `trackKey` callback so their ledger rows are swept too.
+ */
+const withPurchaseScenario = <E, R>(
+  label: string,
+  body: (ids: ScenarioIds, trackKey: (key: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E | DbError, R | Db> =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const ids: ScenarioIds = {
+      configurationId: uniqueKey(`${label}-conf`),
+      configurationProductId: uniqueKey(`${label}-confprod`),
+      personId: uniqueKey(`${label}-person`),
+      productId: uniqueKey(`${label}-prod`),
+    };
+    const idempotencyKeys: string[] = [];
+
+    yield* db.insert(paymentProviderConfigurations).values({
+      enabled: true,
+      id: ids.configurationId,
+      name: "Integration PP Config",
+      paymentProviderKey: uniqueKey(`${label}-ppkey`),
+      projectId,
+      providerId: PROVIDER_ID,
+    });
+    yield* db.insert(products).values({
+      id: ids.productId,
+      name: "Integration Product",
+      projectId,
+      slug: uniqueKey(`${label}-prodslug`),
+    });
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      id: ids.configurationProductId,
+      paymentProviderConfigurationId: ids.configurationId,
+      productId: ids.productId,
+      providerProductKey: uniqueKey(`${label}-provprodkey`),
+    });
+    yield* db.insert(persons).values({
+      id: ids.personId,
+      name: "Integration Person",
+      projectId,
+    });
+
+    return yield* body(ids, (key) => idempotencyKeys.push(key)).pipe(
+      Effect.ensuring(cleanupScenario(ids, idempotencyKeys)),
+    );
+  });
+
+/** Builds the shared per-action context that every method receives. */
+const baseAction = (ids: ScenarioIds, idempotencyKey: string, occurredAt: Date) => ({
+  idempotencyKey,
+  occurredAt,
+  organizationId,
+  paymentProviderConfigurationId: ids.configurationId,
+  paymentProviderConfigurationProductId: ids.configurationProductId,
+  personId: ids.personId,
+  projectId,
+  providerEnvironment: ProviderEnvironment.Production,
+  providerEventType: "TEST_EVENT",
+  providerId: PROVIDER_ID,
+  providerSubscriptionId: Option.none<string>(),
+  providerTransactionId: Option.none<string>(),
+  providerWebhookNotificationId: Option.none<string>(),
+  rawProviderPayload: Option.none<unknown>(),
+  receivedAt: occurredAt,
+  source: SOURCE,
+});
+
+describe("PurchaseProcessingService.startSubscription", () => {
+  test(
+    "creates subscription + transaction rows, finalizes the ledger outbox, and emits analytics",
+    withPurchaseScenario("start", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("start-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-01-01T00:00:00.000Z");
+        const storeSubscriptionId = uniqueKey("start-storesub");
+        const providerTransactionId = uniqueKey("start-tx");
+
+        const result = yield* svc.startSubscription({
+          ...baseAction(ids, idempotencyKey, occurredAt),
+          expiresAt: Option.some(new Date("2026-02-01T00:00:00.000Z")),
+          isTrial: false,
+          money: Option.some(money(9990)),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          providerTransactionId: Option.some(providerTransactionId),
+          purchasedAt: occurredAt,
+          startsAt: occurredAt,
+        });
+
+        expect(result.idempotent).toBe(false);
+        expect(Option.isSome(result.subscriptionId)).toBe(true);
+        expect(Option.isSome(result.transactionId)).toBe(true);
+        // started maps to two events ($subscription.created + $purchase.completed).
+        expect(result.analyticsEventIds.length).toBe(2);
+
+        const subRow = yield* findSubscriptionByStore(
+          ids.configurationProductId,
+          storeSubscriptionId,
+        );
+        expect(subRow).toBeDefined();
+        expect(subRow?.status).toBe(SubscriptionStatus.Active);
+        expect(subRow?.personId).toBe(ids.personId);
+        expect(subRow?.lastEventOccurredAt?.getTime()).toBe(occurredAt.getTime());
+
+        const txRow = yield* findTransactionByStore(
+          ids.configurationProductId,
+          providerTransactionId,
+        );
+        expect(txRow).toBeDefined();
+        expect(txRow?.grossAmount).toBe(9990);
+        expect(txRow?.currency).toBe("USD");
+
+        const ledger = yield* findLedgerRow(idempotencyKey);
+        expect(ledger).toBeDefined();
+        expect(ledger?.providerEventType).toBe("TEST_EVENT");
+        // The ledger row is finalized with the staged analytics events for the worker to drain.
+        expect((ledger?.eventsPayload ?? []).length).toBe(2);
+        const resultPayload = ledger?.resultPayload as { readonly analyticsEventIds: string[] };
+        expect(resultPayload.analyticsEventIds.length).toBe(2);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "with no providerTransactionId produces no transaction row and no analytics events",
+    withPurchaseScenario("start-notx", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("start-notx-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-01-03T00:00:00.000Z");
+        const storeSubscriptionId = uniqueKey("start-notx-storesub");
+
+        const result = yield* svc.startSubscription({
+          ...baseAction(ids, idempotencyKey, occurredAt),
+          expiresAt: Option.none(),
+          isTrial: true,
+          money: Option.none(),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          purchasedAt: occurredAt,
+          startsAt: occurredAt,
+        });
+
+        expect(Option.isNone(result.transactionId)).toBe(true);
+        // The analytics mapper drops the started events when no transactionId is present.
+        expect(result.analyticsEventIds.length).toBe(0);
+
+        const subRow = yield* findSubscriptionByStore(
+          ids.configurationProductId,
+          storeSubscriptionId,
+        );
+        expect(subRow).toBeDefined();
+        expect(subRow?.isTrial).toBe(true);
+
+        // A subscription identifier maps the transaction lookup off; assert no tx row exists.
+        const db = yield* Db;
+        const txRows = yield* db.query.transactions.findMany({ where: { personId: ids.personId } });
+        expect(txRows.length).toBe(0);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "a duplicate idempotency key replays the cached result without a second write",
+    withPurchaseScenario("start-dup", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("start-dup-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-01-05T00:00:00.000Z");
+        const storeSubscriptionId = uniqueKey("start-dup-storesub");
+        const providerTransactionId = uniqueKey("start-dup-tx");
+
+        const action = {
+          ...baseAction(ids, idempotencyKey, occurredAt),
+          expiresAt: Option.some(new Date("2026-02-05T00:00:00.000Z")),
+          isTrial: false,
+          money: Option.some(money(4990)),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          providerTransactionId: Option.some(providerTransactionId),
+          purchasedAt: occurredAt,
+          startsAt: occurredAt,
+        };
+
+        const first = yield* svc.startSubscription(action);
+        expect(first.idempotent).toBe(false);
+        expect(Option.isSome(first.subscriptionId)).toBe(true);
+
+        // Replay the exact same event (same idempotencyKey). The ledger dedup
+        // gate must short-circuit before any operational write and replay the
+        // first call's cached result.
+        const second = yield* svc.startSubscription(action);
+        expect(second.idempotent).toBe(true);
+        // The replayed result mirrors the first call's identifiers verbatim.
+        expect(second.subscriptionId).toStrictEqual(first.subscriptionId);
+        expect(second.transactionId).toStrictEqual(first.transactionId);
+        expect(second.analyticsEventIds).toStrictEqual(first.analyticsEventIds);
+
+        // Exactly one subscription row exists for the store subscription id —
+        // the replay wrote no second row.
+        const db = yield* Db;
+        const subRows = yield* db.query.subscriptions.findMany({
+          where: {
+            paymentProviderConfigurationProductId: ids.configurationProductId,
+            storeSubscriptionId,
+          },
+        });
+        expect(subRows.length).toBe(1);
+
+        // And exactly one ledger row exists for the idempotency key.
+        const ledgerRows = yield* db.query.purchaseLedger.findMany({
+          where: { idempotencyKey },
+        });
+        expect(ledgerRows.length).toBe(1);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with PurchaseProcessingProductNotMappedError when the config product is unknown",
+    withPurchaseScenario("start-unmapped", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("start-unmapped-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-01-07T00:00:00.000Z");
+
+        const error = yield* Effect.flip(
+          svc.startSubscription({
+            ...baseAction(ids, idempotencyKey, occurredAt),
+            // Point at a config-product id that does not exist.
+            paymentProviderConfigurationProductId: uniqueKey("start-unmapped-missing"),
+            expiresAt: Option.none(),
+            isTrial: false,
+            money: Option.none(),
+            providerSubscriptionId: Option.some(uniqueKey("start-unmapped-storesub")),
+            purchasedAt: occurredAt,
+            startsAt: occurredAt,
+          }),
+        );
+        expect(error).toBeInstanceOf(PurchaseProcessingProductNotMappedError);
+
+        // Nothing was written: no ledger row, no subscription.
+        const ledger = yield* findLedgerRow(idempotencyKey);
+        expect(ledger).toBeUndefined();
+        const db = yield* Db;
+        const subRows = yield* db.query.subscriptions.findMany({
+          where: { personId: ids.personId },
+        });
+        expect(subRows.length).toBe(0);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with PurchaseProcessingServiceError when the person belongs to a different project",
+    withPurchaseScenario("start-wrongproj", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("start-wrongproj-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-01-09T00:00:00.000Z");
+
+        const error = yield* Effect.flip(
+          svc.startSubscription({
+            ...baseAction(ids, idempotencyKey, occurredAt),
+            // Resolve the person under a different project than the action's projectId.
+            projectId: `${projectId}-other`,
+            expiresAt: Option.none(),
+            isTrial: false,
+            money: Option.none(),
+            providerSubscriptionId: Option.some(uniqueKey("start-wrongproj-storesub")),
+            purchasedAt: occurredAt,
+            startsAt: occurredAt,
+          }),
+        );
+        expect(error).toBeInstanceOf(PurchaseProcessingServiceError);
+
+        const ledger = yield* findLedgerRow(idempotencyKey);
+        expect(ledger).toBeUndefined();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+/** Seed an active subscription row directly so update/transition tests have a target. */
+const seedActiveSubscription = (
+  ids: ScenarioIds,
+  input: {
+    readonly id: string;
+    readonly storeSubscriptionId: string;
+    readonly startsAt: Date;
+    readonly expiresAt: Date | null;
+    readonly lastEventOccurredAt: Date;
+  },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(subscriptions).values({
+      cancelAtPeriodEnd: false,
+      canceledAt: null,
+      expiresAt: input.expiresAt,
+      id: input.id,
+      initialTransactionId: input.storeSubscriptionId,
+      isTrial: false,
+      lastEventOccurredAt: input.lastEventOccurredAt,
+      latestTransactionId: input.storeSubscriptionId,
+      paymentProviderConfigurationProductId: ids.configurationProductId,
+      personId: ids.personId,
+      providerEnvironment: ProviderEnvironment.Production,
+      purchasedAt: input.startsAt,
+      startsAt: input.startsAt,
+      status: SubscriptionStatus.Active,
+      storeSubscriptionId: input.storeSubscriptionId,
+    });
+  });
+
+describe("PurchaseProcessingService.renewSubscription", () => {
+  test(
+    "updates the existing subscription row, advances the watermark, and emits a renewal event",
+    withPurchaseScenario("renew", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("renew-sub");
+        const storeSubscriptionId = uniqueKey("renew-storesub");
+        const startedAt = new Date("2026-02-01T00:00:00.000Z");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-03-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: startedAt,
+          startsAt: startedAt,
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("renew-key");
+        trackKey(idempotencyKey);
+        const renewedAt = new Date("2026-03-01T00:00:00.000Z");
+        const newExpiresAt = new Date("2026-04-01T00:00:00.000Z");
+
+        const result = yield* svc.renewSubscription({
+          ...baseAction(ids, idempotencyKey, renewedAt),
+          expiresAt: Option.some(newExpiresAt),
+          isTrial: false,
+          money: Option.some(money(9990)),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          providerTransactionId: Option.some(uniqueKey("renew-tx")),
+          renewedAt,
+          startsAt: renewedAt,
+        });
+
+        expect(Option.getOrNull(result.subscriptionId)).toBe(subscriptionId);
+        expect(result.analyticsEventIds.length).toBe(1);
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.expiresAt?.getTime()).toBe(newExpiresAt.getTime());
+        expect(row?.lastEventOccurredAt?.getTime()).toBe(renewedAt.getTime());
+        expect(row?.status).toBe(SubscriptionStatus.Active);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "rejects a stale (earlier-occurredAt) renewal at the watermark and leaves the row unchanged",
+    withPurchaseScenario("renew-stale", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("renew-stale-sub");
+        const storeSubscriptionId = uniqueKey("renew-stale-storesub");
+        const freshWatermark = new Date("2026-05-01T00:00:00.000Z");
+        const expiresAt = new Date("2026-06-01T00:00:00.000Z");
+        yield* seedActiveSubscription(ids, {
+          expiresAt,
+          id: subscriptionId,
+          lastEventOccurredAt: freshWatermark,
+          startsAt: new Date("2026-04-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("renew-stale-key");
+        trackKey(idempotencyKey);
+        // occurredAt is BEFORE the current watermark -> projection update rejected.
+        const staleOccurredAt = new Date("2026-04-15T00:00:00.000Z");
+
+        const result = yield* svc.renewSubscription({
+          ...baseAction(ids, idempotencyKey, staleOccurredAt),
+          expiresAt: Option.some(new Date("2026-12-01T00:00:00.000Z")),
+          isTrial: false,
+          money: Option.none(),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          renewedAt: staleOccurredAt,
+          startsAt: staleOccurredAt,
+        });
+
+        // Service continues (returns a result) but the projection wasn't changed.
+        expect(Option.getOrNull(result.subscriptionId)).toBe(subscriptionId);
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.expiresAt?.getTime()).toBe(expiresAt.getTime());
+        expect(row?.lastEventOccurredAt?.getTime()).toBe(freshWatermark.getTime());
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("PurchaseProcessingService.cancelSubscription / expireSubscription", () => {
+  test(
+    "cancelSubscription (immediate) moves the subscription to Canceled and records the reason",
+    withPurchaseScenario("cancel", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("cancel-sub");
+        const storeSubscriptionId = uniqueKey("cancel-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-08-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-07-01T00:00:00.000Z"),
+          startsAt: new Date("2026-07-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("cancel-key");
+        trackKey(idempotencyKey);
+        const canceledAt = new Date("2026-07-15T00:00:00.000Z");
+
+        const result = yield* svc.cancelSubscription({
+          ...baseAction(ids, idempotencyKey, canceledAt),
+          canceledAt,
+          cancelAtPeriodEnd: false,
+          cancellationReason: Option.some("user_requested"),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+        });
+        expect(Option.getOrNull(result.subscriptionId)).toBe(subscriptionId);
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.status).toBe(SubscriptionStatus.Canceled);
+        expect(row?.cancellationReason).toBe("user_requested");
+        expect(row?.canceledAt?.getTime()).toBe(canceledAt.getTime());
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "cancelSubscription for an unknown subscription writes an empty finalized ledger row only",
+    withPurchaseScenario("cancel-missing", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("cancel-missing-key");
+        trackKey(idempotencyKey);
+        const canceledAt = new Date("2026-07-20T00:00:00.000Z");
+
+        const result = yield* svc.cancelSubscription({
+          ...baseAction(ids, idempotencyKey, canceledAt),
+          canceledAt,
+          cancelAtPeriodEnd: false,
+          cancellationReason: Option.none(),
+          providerSubscriptionId: Option.some(uniqueKey("cancel-missing-storesub")),
+        });
+
+        // No subscription found -> empty result, no analytics.
+        expect(Option.isNone(result.subscriptionId)).toBe(true);
+        expect(result.analyticsEventIds.length).toBe(0);
+
+        // The reservation ledger row was still claimed (and finalized empty).
+        const ledger = yield* findLedgerRow(idempotencyKey);
+        expect(ledger).toBeDefined();
+        expect((ledger?.eventsPayload ?? []).length).toBe(0);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "expireSubscription moves the subscription to Canceled and sets expiresAt to the expiry time",
+    withPurchaseScenario("expire", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("expire-sub");
+        const storeSubscriptionId = uniqueKey("expire-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-09-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-08-01T00:00:00.000Z"),
+          startsAt: new Date("2026-08-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("expire-key");
+        trackKey(idempotencyKey);
+        const expiredAt = new Date("2026-09-01T00:00:00.000Z");
+
+        yield* svc.expireSubscription({
+          ...baseAction(ids, idempotencyKey, expiredAt),
+          expiredAt,
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+        });
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.status).toBe(SubscriptionStatus.Canceled);
+        expect(row?.expiresAt?.getTime()).toBe(expiredAt.getTime());
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("PurchaseProcessingService.revokeSubscription", () => {
+  test(
+    "revokes the subscription and reconstructs money from the stored transaction row",
+    withPurchaseScenario("revoke-sub", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        // Seed an active subscription plus its funding transaction.
+        const subscriptionId = uniqueKey("revoke-sub-id");
+        const storeSubscriptionId = uniqueKey("revoke-sub-storesub");
+        const providerTransactionId = uniqueKey("revoke-sub-tx");
+        const startedAt = new Date("2026-10-01T00:00:00.000Z");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-11-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: startedAt,
+          startsAt: startedAt,
+          storeSubscriptionId,
+        });
+        const db = yield* Db;
+        const transactionRowId = uniqueKey("revoke-sub-txrow");
+        yield* db.insert(transactions).values({
+          amount: 9990,
+          currency: "USD",
+          grossAmount: 9990,
+          id: transactionRowId,
+          lastEventOccurredAt: startedAt,
+          occurredAt: startedAt,
+          paymentProviderConfigurationProductId: ids.configurationProductId,
+          personId: ids.personId,
+          proceedsAfterTaxAmount: 6993,
+          proceedsAmount: 6993,
+          providerEnvironment: ProviderEnvironment.Production,
+          storeCommissionAmount: 2997,
+          storeTransactionId: providerTransactionId,
+          storefront: "USA",
+          taxAmount: 0,
+        });
+
+        const idempotencyKey = uniqueKey("revoke-sub-key");
+        trackKey(idempotencyKey);
+        const revokedAt = new Date("2026-10-15T00:00:00.000Z");
+
+        const result = yield* svc.revokeSubscription({
+          ...baseAction(ids, idempotencyKey, revokedAt),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          providerTransactionId: Option.some(providerTransactionId),
+          revocationReason: Option.some("family_sharing_revoked"),
+          revokedAt,
+        });
+        expect(Option.getOrNull(result.subscriptionId)).toBe(subscriptionId);
+        // Revoke maps to a signed-negative revoked analytics event.
+        expect(result.analyticsEventIds.length).toBe(1);
+
+        const subRow = yield* findSubscriptionRow(subscriptionId);
+        expect(subRow?.status).toBe(SubscriptionStatus.Canceled);
+        expect(subRow?.cancellationReason).toBe("family_sharing_revoked");
+
+        const txRow = yield* findTransactionByStore(
+          ids.configurationProductId,
+          providerTransactionId,
+        );
+        expect(txRow?.revokedAt?.getTime()).toBe(revokedAt.getTime());
+        expect(txRow?.revocationReason).toBe("family_sharing_revoked");
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("PurchaseProcessingService.completeOneTimePurchase / refundPurchase / revokePurchase / reverseRefund", () => {
+  test(
+    "completeOneTimePurchase creates a purchase + transaction row and emits a completed event",
+    withPurchaseScenario("otp", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("otp-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-03-10T00:00:00.000Z");
+        const providerTransactionId = uniqueKey("otp-tx");
+
+        const result = yield* svc.completeOneTimePurchase({
+          ...baseAction(ids, idempotencyKey, occurredAt),
+          money: Option.some(money(2990)),
+          providerTransactionId: Option.some(providerTransactionId),
+          purchaseType: "one-time",
+          purchasedAt: occurredAt,
+        });
+
+        expect(Option.isSome(result.purchaseId)).toBe(true);
+        expect(Option.isSome(result.transactionId)).toBe(true);
+
+        const purchaseRow = yield* findPurchaseByProviderKey(providerTransactionId);
+        expect(purchaseRow).toBeDefined();
+        expect(purchaseRow?.type).toBe(PurchaseType.OneTime);
+        expect(purchaseRow?.personId).toBe(ids.personId);
+
+        const txRow = yield* findTransactionByStore(
+          ids.configurationProductId,
+          providerTransactionId,
+        );
+        expect(txRow?.grossAmount).toBe(2990);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "refundPurchase marks the transaction + purchase refunded (watermark-guarded)",
+    withPurchaseScenario("refund", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        // Establish the purchase + transaction via a real complete call first.
+        const completeKey = uniqueKey("refund-complete-key");
+        trackKey(completeKey);
+        const completedAt = new Date("2026-03-20T00:00:00.000Z");
+        const providerTransactionId = uniqueKey("refund-tx");
+        yield* svc.completeOneTimePurchase({
+          ...baseAction(ids, completeKey, completedAt),
+          money: Option.some(money(1990)),
+          providerTransactionId: Option.some(providerTransactionId),
+          purchaseType: "one-time",
+          purchasedAt: completedAt,
+        });
+
+        const refundKey = uniqueKey("refund-key");
+        trackKey(refundKey);
+        const refundedAt = new Date("2026-03-25T00:00:00.000Z");
+        const result = yield* svc.refundPurchase({
+          ...baseAction(ids, refundKey, refundedAt),
+          providerTransactionId: Option.some(providerTransactionId),
+          refundReason: Option.some("customer_refund"),
+          refundedAt,
+        });
+        // refunded always emits a (negative-signed) refunded event.
+        expect(result.analyticsEventIds.length).toBe(1);
+
+        const txRow = yield* findTransactionByStore(
+          ids.configurationProductId,
+          providerTransactionId,
+        );
+        expect(txRow?.refundedAt?.getTime()).toBe(refundedAt.getTime());
+        expect(txRow?.refundReason).toBe("customer_refund");
+
+        const purchaseRow = yield* findPurchaseByProviderKey(providerTransactionId);
+        expect(purchaseRow?.refundedAt?.getTime()).toBe(refundedAt.getTime());
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "reverseRefund un-refunds both the transaction and purchase rows",
+    withPurchaseScenario("reverse", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const completeKey = uniqueKey("reverse-complete-key");
+        trackKey(completeKey);
+        const completedAt = new Date("2026-04-01T00:00:00.000Z");
+        const providerTransactionId = uniqueKey("reverse-tx");
+        yield* svc.completeOneTimePurchase({
+          ...baseAction(ids, completeKey, completedAt),
+          money: Option.some(money(3990)),
+          providerTransactionId: Option.some(providerTransactionId),
+          purchaseType: "one-time",
+          purchasedAt: completedAt,
+        });
+
+        const refundKey = uniqueKey("reverse-refund-key");
+        trackKey(refundKey);
+        const refundedAt = new Date("2026-04-05T00:00:00.000Z");
+        yield* svc.refundPurchase({
+          ...baseAction(ids, refundKey, refundedAt),
+          providerTransactionId: Option.some(providerTransactionId),
+          refundReason: Option.some("customer_refund"),
+          refundedAt,
+        });
+
+        const reverseKey = uniqueKey("reverse-key");
+        trackKey(reverseKey);
+        const reversedAt = new Date("2026-04-10T00:00:00.000Z");
+        const result = yield* svc.reverseRefund({
+          ...baseAction(ids, reverseKey, reversedAt),
+          providerTransactionId: Option.some(providerTransactionId),
+          reversedAt,
+        });
+        expect(result.analyticsEventIds.length).toBe(1);
+
+        const txRow = yield* findTransactionByStore(
+          ids.configurationProductId,
+          providerTransactionId,
+        );
+        expect(txRow?.refundedAt).toBeNull();
+        expect(txRow?.refundReason).toBeNull();
+
+        const purchaseRow = yield* findPurchaseByProviderKey(providerTransactionId);
+        expect(purchaseRow?.refundedAt).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "revokePurchase for an unknown provider key fails with PurchaseProcessingServiceError",
+    withPurchaseScenario("revoke-pur-missing", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const idempotencyKey = uniqueKey("revoke-pur-missing-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-04-15T00:00:00.000Z");
+
+        // No providerTransactionId and no providerSubscriptionId -> no purchase identifier.
+        const error = yield* Effect.flip(
+          svc.revokePurchase({
+            ...baseAction(ids, idempotencyKey, occurredAt),
+            revocationReason: Option.none(),
+            revokedAt: occurredAt,
+          }),
+        );
+        expect(error).toBeInstanceOf(PurchaseProcessingServiceError);
+
+        // The identifier check runs before the ledger reservation, so nothing was written.
+        const ledger = yield* findLedgerRow(idempotencyKey);
+        expect(ledger).toBeUndefined();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("PurchaseProcessingService subscription state mutations", () => {
+  test(
+    "enterBillingRetry records the retry + grace deadline and emits a billing_retry event",
+    withPurchaseScenario("billing-retry", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("retry-sub");
+        const storeSubscriptionId = uniqueKey("retry-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-06-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-05-01T00:00:00.000Z"),
+          startsAt: new Date("2026-05-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("retry-key");
+        trackKey(idempotencyKey);
+        const billingRetryAt = new Date("2026-05-20T00:00:00.000Z");
+        const gracePeriodExpiresAt = new Date("2026-05-30T00:00:00.000Z");
+
+        const result = yield* svc.enterBillingRetry({
+          ...baseAction(ids, idempotencyKey, billingRetryAt),
+          billingRetryAt,
+          gracePeriodExpiresAt: Option.some(gracePeriodExpiresAt),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+        });
+        expect(result.analyticsEventIds.length).toBe(1);
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.billingRetryAt?.getTime()).toBe(billingRetryAt.getTime());
+        expect(row?.gracePeriodExpiresAt?.getTime()).toBe(gracePeriodExpiresAt.getTime());
+        // Subscription stays Active during the retry loop.
+        expect(row?.status).toBe(SubscriptionStatus.Active);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "extendSubscription pushes expiresAt + extendedTo forward",
+    withPurchaseScenario("extend", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("extend-sub");
+        const storeSubscriptionId = uniqueKey("extend-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-06-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-05-01T00:00:00.000Z"),
+          startsAt: new Date("2026-05-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("extend-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-05-25T00:00:00.000Z");
+        const extendedTo = new Date("2026-07-01T00:00:00.000Z");
+
+        yield* svc.extendSubscription({
+          ...baseAction(ids, idempotencyKey, occurredAt),
+          extendedTo,
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+        });
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.expiresAt?.getTime()).toBe(extendedTo.getTime());
+        expect(row?.extendedTo?.getTime()).toBe(extendedTo.getTime());
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "changeRenewalPreference records the pending product change intent",
+    withPurchaseScenario("renewpref", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("renewpref-sub");
+        const storeSubscriptionId = uniqueKey("renewpref-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-06-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-05-01T00:00:00.000Z"),
+          startsAt: new Date("2026-05-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("renewpref-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-05-15T00:00:00.000Z");
+        const newConfigProductId = ids.configurationProductId;
+
+        yield* svc.changeRenewalPreference({
+          ...baseAction(ids, idempotencyKey, occurredAt),
+          newPaymentProviderConfigurationProductId: Option.some(newConfigProductId),
+          newProviderProductKey: "new_provider_product_key",
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+        });
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.pendingProductChangeId).toBe(newConfigProductId);
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "redeemOffer records the redeemed offer id + timestamp",
+    withPurchaseScenario("offer", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("offer-sub");
+        const storeSubscriptionId = uniqueKey("offer-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-06-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-05-01T00:00:00.000Z"),
+          startsAt: new Date("2026-05-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("offer-key");
+        trackKey(idempotencyKey);
+        const redeemedAt = new Date("2026-05-18T00:00:00.000Z");
+
+        yield* svc.redeemOffer({
+          ...baseAction(ids, idempotencyKey, redeemedAt),
+          offerId: Option.some("WELCOME10"),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          redeemedAt,
+        });
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.redeemedOfferId).toBe("WELCOME10");
+        expect(row?.redeemedOfferAt?.getTime()).toBe(redeemedAt.getTime());
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "recordPriceIncrease stages the pending price amount/currency/effective-at",
+    withPurchaseScenario("price", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("price-sub");
+        const storeSubscriptionId = uniqueKey("price-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-06-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-05-01T00:00:00.000Z"),
+          startsAt: new Date("2026-05-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const idempotencyKey = uniqueKey("price-key");
+        trackKey(idempotencyKey);
+        const occurredAt = new Date("2026-05-22T00:00:00.000Z");
+        const effectiveAt = new Date("2026-06-01T00:00:00.000Z");
+
+        yield* svc.recordPriceIncrease({
+          ...baseAction(ids, idempotencyKey, occurredAt),
+          effectiveAt: Option.some(effectiveAt),
+          money: Option.some(money(12990)),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+        });
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.pendingPriceAmount).toBe(12990);
+        expect(row?.pendingPriceCurrency).toBe("USD");
+        expect(row?.pendingPriceEffectiveAt?.getTime()).toBe(effectiveAt.getTime());
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "resumeAutoRenew clears canceledAt / cancelAtPeriodEnd / cancellationReason",
+    withPurchaseScenario("resume", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const subscriptionId = uniqueKey("resume-sub");
+        const storeSubscriptionId = uniqueKey("resume-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-06-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-05-01T00:00:00.000Z"),
+          startsAt: new Date("2026-05-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+        // Pre-set the cancel fields so resume has something to clear.
+        const db = yield* Db;
+        yield* db
+          .update(subscriptions)
+          .set({
+            cancelAtPeriodEnd: true,
+            canceledAt: new Date("2026-05-10T00:00:00.000Z"),
+            cancellationReason: "user_requested",
+          })
+          .where(eq(subscriptions.id, subscriptionId));
+
+        const idempotencyKey = uniqueKey("resume-key");
+        trackKey(idempotencyKey);
+        const resumedAt = new Date("2026-05-12T00:00:00.000Z");
+
+        yield* svc.resumeAutoRenew({
+          ...baseAction(ids, idempotencyKey, resumedAt),
+          providerSubscriptionId: Option.some(storeSubscriptionId),
+          resumedAt,
+        });
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.cancelAtPeriodEnd).toBe(false);
+        expect(row?.canceledAt).toBeNull();
+        expect(row?.cancellationReason).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+/** Seed a second person under the fixture project to act as a transfer target. */
+const seedTargetPerson = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(persons).values({ id, name: "Transfer Target", projectId });
+  });
+
+describe("PurchaseProcessingService.transferSubscription", () => {
+  test(
+    "moves subscription ownership to the target person and emits a transferred pair",
+    withPurchaseScenario("xfer-sub", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const targetPersonId = uniqueKey("xfer-sub-target");
+        yield* seedTargetPerson(targetPersonId);
+
+        const subscriptionId = uniqueKey("xfer-sub-id");
+        const storeSubscriptionId = uniqueKey("xfer-sub-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-12-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-11-01T00:00:00.000Z"),
+          startsAt: new Date("2026-11-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        const occurredAt = new Date("2026-11-15T00:00:00.000Z");
+        // transferSubscription derives its own idempotency key; clean up by personId
+        // sweep (target person rows go through the scenario's personId cleanup, but
+        // the transfer writes the ledger under the target — sweep both).
+        const db = yield* Db;
+        const result = yield* svc.transferSubscription({
+          fromPersonId: ids.personId,
+          occurredAt,
+          organizationId,
+          paymentProviderConfigurationId: ids.configurationId,
+          projectId,
+          providerId: PROVIDER_ID,
+          source: SOURCE,
+          subscriptionId,
+          toPersonId: targetPersonId,
+          transferMode: "transfer_to_new_owner",
+          triggerReason: "appstore_restore",
+        });
+
+        expect(result.idempotent).toBe(false);
+        expect(Option.getOrNull(result.subscriptionId)).toBe(subscriptionId);
+        expect(result.personId).toBe(targetPersonId);
+        // transferred_out + transferred_in pair.
+        expect(result.analyticsEventIds.length).toBe(2);
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.personId).toBe(targetPersonId);
+
+        // Sweep the target person's leftover rows (ledger + perks + the now-
+        // re-owned subscription) and the person row. The transfer moved the
+        // subscription's personId to the target, so `cleanupScenario`'s
+        // by-`ids.personId` sweep no longer matches it — delete it here.
+        yield* Effect.addFinalizer(() =>
+          Effect.gen(function* () {
+            yield* db
+              .delete(purchaseLedger)
+              .where(eq(purchaseLedger.personId, targetPersonId))
+              .pipe(Effect.ignore);
+            yield* db
+              .delete(personUnlockedPerks)
+              .where(eq(personUnlockedPerks.personId, targetPersonId))
+              .pipe(Effect.ignore);
+            yield* db
+              .delete(subscriptions)
+              .where(eq(subscriptions.personId, targetPersonId))
+              .pipe(Effect.ignore);
+            yield* db.delete(persons).where(eq(persons.id, targetPersonId)).pipe(Effect.ignore);
+          }),
+        );
+      }).pipe(Effect.scoped),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with PurchaseProcessingServiceError when the subscription does not exist",
+    withPurchaseScenario("xfer-sub-missing", (ids) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const targetPersonId = uniqueKey("xfer-sub-missing-target");
+        yield* seedTargetPerson(targetPersonId);
+        const db = yield* Db;
+        yield* Effect.addFinalizer(() =>
+          db.delete(persons).where(eq(persons.id, targetPersonId)).pipe(Effect.ignore),
+        );
+
+        const error = yield* Effect.flip(
+          svc.transferSubscription({
+            fromPersonId: ids.personId,
+            occurredAt: new Date("2026-11-20T00:00:00.000Z"),
+            organizationId,
+            paymentProviderConfigurationId: ids.configurationId,
+            projectId,
+            providerId: PROVIDER_ID,
+            source: SOURCE,
+            subscriptionId: uniqueKey("xfer-sub-missing-id"),
+            toPersonId: targetPersonId,
+            transferMode: "transfer_to_new_owner",
+            triggerReason: "appstore_restore",
+          }),
+        );
+        expect(error).toBeInstanceOf(PurchaseProcessingServiceError);
+      }).pipe(Effect.scoped),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "transfer_if_no_active_on_target leaves ownership with the previous owner when the target already has one",
+    withPurchaseScenario("xfer-sub-keep", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const targetPersonId = uniqueKey("xfer-sub-keep-target");
+        yield* seedTargetPerson(targetPersonId);
+
+        // The subscription to transfer (owned by the scenario person).
+        const subscriptionId = uniqueKey("xfer-sub-keep-id");
+        const storeSubscriptionId = uniqueKey("xfer-sub-keep-storesub");
+        yield* seedActiveSubscription(ids, {
+          expiresAt: new Date("2026-12-01T00:00:00.000Z"),
+          id: subscriptionId,
+          lastEventOccurredAt: new Date("2026-11-01T00:00:00.000Z"),
+          startsAt: new Date("2026-11-01T00:00:00.000Z"),
+          storeSubscriptionId,
+        });
+
+        // The target already owns an active subscription -> the count gate should keep ownership.
+        const db = yield* Db;
+        const targetSubscriptionId = uniqueKey("xfer-sub-keep-target-sub");
+        yield* db.insert(subscriptions).values({
+          cancelAtPeriodEnd: false,
+          expiresAt: new Date("2026-12-01T00:00:00.000Z"),
+          id: targetSubscriptionId,
+          initialTransactionId: uniqueKey("xfer-sub-keep-target-tx"),
+          isTrial: false,
+          latestTransactionId: uniqueKey("xfer-sub-keep-target-tx2"),
+          paymentProviderConfigurationProductId: ids.configurationProductId,
+          personId: targetPersonId,
+          providerEnvironment: ProviderEnvironment.Production,
+          purchasedAt: new Date("2026-11-01T00:00:00.000Z"),
+          startsAt: new Date("2026-11-01T00:00:00.000Z"),
+          status: SubscriptionStatus.Active,
+          storeSubscriptionId: uniqueKey("xfer-sub-keep-target-storesub"),
+        });
+        yield* Effect.addFinalizer(() =>
+          Effect.gen(function* () {
+            yield* db
+              .delete(subscriptions)
+              .where(eq(subscriptions.personId, targetPersonId))
+              .pipe(Effect.ignore);
+            yield* db.delete(persons).where(eq(persons.id, targetPersonId)).pipe(Effect.ignore);
+          }),
+        );
+
+        const result = yield* svc.transferSubscription({
+          fromPersonId: ids.personId,
+          occurredAt: new Date("2026-11-15T00:00:00.000Z"),
+          organizationId,
+          paymentProviderConfigurationId: ids.configurationId,
+          projectId,
+          providerId: PROVIDER_ID,
+          source: SOURCE,
+          subscriptionId,
+          toPersonId: targetPersonId,
+          transferMode: "transfer_if_no_active_on_target",
+          triggerReason: "appstore_restore",
+        });
+
+        // "kept" result: no analytics, ownership stays with the previous owner.
+        expect(result.analyticsEventIds.length).toBe(0);
+        expect(result.personId).toBe(ids.personId);
+
+        const row = yield* findSubscriptionRow(subscriptionId);
+        expect(row?.personId).toBe(ids.personId);
+      }).pipe(Effect.scoped),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
+
+describe("PurchaseProcessingService.transferPurchase", () => {
+  test(
+    "moves non-consumable purchase ownership to the target and emits a transferred pair",
+    withPurchaseScenario("xfer-pur", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const targetPersonId = uniqueKey("xfer-pur-target");
+        yield* seedTargetPerson(targetPersonId);
+
+        // Create a non-consumable one-time purchase owned by the scenario person.
+        const completeKey = uniqueKey("xfer-pur-complete-key");
+        trackKey(completeKey);
+        const completedAt = new Date("2026-04-01T00:00:00.000Z");
+        const providerKey = uniqueKey("xfer-pur-providerkey");
+        const completed = yield* svc.completeOneTimePurchase({
+          ...baseAction(ids, completeKey, completedAt),
+          money: Option.some(money(4990)),
+          providerTransactionId: Option.some(providerKey),
+          purchaseType: "one-time",
+          purchasedAt: completedAt,
+        });
+        const purchaseId = Option.getOrNull(completed.purchaseId);
+        expect(purchaseId).not.toBeNull();
+
+        const db = yield* Db;
+        // The transfer moves the purchase's personId to the target, so
+        // `cleanupScenario`'s by-`ids.personId` sweep no longer matches the
+        // purchase row — delete it (plus the target's ledger + perks) here.
+        yield* Effect.addFinalizer(() =>
+          Effect.gen(function* () {
+            yield* db
+              .delete(purchaseLedger)
+              .where(eq(purchaseLedger.personId, targetPersonId))
+              .pipe(Effect.ignore);
+            yield* db
+              .delete(personUnlockedPerks)
+              .where(eq(personUnlockedPerks.personId, targetPersonId))
+              .pipe(Effect.ignore);
+            yield* db
+              .delete(purchases)
+              .where(eq(purchases.personId, targetPersonId))
+              .pipe(Effect.ignore);
+            yield* db.delete(persons).where(eq(persons.id, targetPersonId)).pipe(Effect.ignore);
+          }),
+        );
+
+        const result = yield* svc.transferPurchase({
+          fromPersonId: ids.personId,
+          occurredAt: new Date("2026-04-10T00:00:00.000Z"),
+          organizationId,
+          paymentProviderConfigurationId: ids.configurationId,
+          projectId,
+          providerId: PROVIDER_ID,
+          purchaseId: purchaseId as string,
+          source: SOURCE,
+          toPersonId: targetPersonId,
+          transferMode: "transfer_to_new_owner",
+          triggerReason: "appstore_restore",
+        });
+
+        expect(result.personId).toBe(targetPersonId);
+        expect(result.analyticsEventIds.length).toBe(2);
+
+        const purchaseRow = yield* findPurchaseByProviderKey(providerKey);
+        expect(purchaseRow?.personId).toBe(targetPersonId);
+      }).pipe(Effect.scoped),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "skips a consumable purchase (keeps it with the previous owner)",
+    withPurchaseScenario("xfer-pur-consumable", (ids, trackKey) =>
+      Effect.gen(function* () {
+        const svc = yield* PurchaseProcessingService;
+
+        const targetPersonId = uniqueKey("xfer-pur-cons-target");
+        yield* seedTargetPerson(targetPersonId);
+
+        const completeKey = uniqueKey("xfer-pur-cons-complete-key");
+        trackKey(completeKey);
+        const completedAt = new Date("2026-04-01T00:00:00.000Z");
+        const providerKey = uniqueKey("xfer-pur-cons-providerkey");
+        const completed = yield* svc.completeOneTimePurchase({
+          ...baseAction(ids, completeKey, completedAt),
+          money: Option.some(money(990)),
+          providerTransactionId: Option.some(providerKey),
+          purchaseType: "consumable",
+          purchasedAt: completedAt,
+        });
+        const purchaseId = Option.getOrNull(completed.purchaseId);
+        expect(purchaseId).not.toBeNull();
+
+        const db = yield* Db;
+        yield* Effect.addFinalizer(() =>
+          db.delete(persons).where(eq(persons.id, targetPersonId)).pipe(Effect.ignore),
+        );
+
+        const result = yield* svc.transferPurchase({
+          fromPersonId: ids.personId,
+          occurredAt: new Date("2026-04-10T00:00:00.000Z"),
+          organizationId,
+          paymentProviderConfigurationId: ids.configurationId,
+          projectId,
+          providerId: PROVIDER_ID,
+          purchaseId: purchaseId as string,
+          source: SOURCE,
+          toPersonId: targetPersonId,
+          transferMode: "transfer_to_new_owner",
+          triggerReason: "appstore_restore",
+        });
+
+        // Consumable purchases are not transferable -> kept with the previous owner.
+        expect(result.analyticsEventIds.length).toBe(0);
+        expect(result.personId).toBe(ids.personId);
+
+        const purchaseRow = yield* findPurchaseByProviderKey(providerKey);
+        expect(purchaseRow?.type).toBe(PurchaseType.OneTimeConsumable);
+        expect(purchaseRow?.personId).toBe(ids.personId);
+      }).pipe(Effect.scoped),
+    ).pipe(
+      Effect.provide(PurchaseProcessingService.layer),
+      Effect.provide(PerkGrantService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+});
diff --git a/packages/core/test/services/purchaseProcessing/helpers.test.ts b/packages/core/test/services/purchaseProcessing/helpers.test.ts
new file mode 100644
index 000000000..5cff4f620
--- /dev/null
+++ b/packages/core/test/services/purchaseProcessing/helpers.test.ts
@@ -0,0 +1,33 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { SubscriptionStatus } from "@voidhash/lib";
+
+import { ProviderEnvironment } from "@voidhash/db";
+
+import {
+  providerEnvironmentLabel,
+  subscriptionStatusForInactiveEvent,
+} from "../../../src/services/purchaseProcessing/helpers.ts";
+
+describe("providerEnvironmentLabel", () => {
+  it("maps the Sandbox environment to 'sandbox'", () => {
+    expect(providerEnvironmentLabel(ProviderEnvironment.Sandbox)).toBe("sandbox");
+  });
+
+  it("maps the Production environment to 'production'", () => {
+    expect(providerEnvironmentLabel(ProviderEnvironment.Production)).toBe("production");
+  });
+
+  it("treats any non-Sandbox value as production", () => {
+    // The helper is a binary classifier: only the Sandbox value is "sandbox",
+    // every other numeric code (including unknown ones) falls through to "production".
+    expect(providerEnvironmentLabel(0)).toBe("production");
+    expect(providerEnvironmentLabel(999)).toBe("production");
+  });
+});
+
+describe("subscriptionStatusForInactiveEvent", () => {
+  it("returns the Canceled subscription status", () => {
+    expect(subscriptionStatusForInactiveEvent()).toBe(SubscriptionStatus.Canceled);
+  });
+});
diff --git a/packages/core/test/services/purchaseProcessing/result-codec.test.ts b/packages/core/test/services/purchaseProcessing/result-codec.test.ts
new file mode 100644
index 000000000..f6056b213
--- /dev/null
+++ b/packages/core/test/services/purchaseProcessing/result-codec.test.ts
@@ -0,0 +1,229 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Option } from "effect";
+
+import { PurchaseProcessingResult } from "../../../src/domain/purchaseProcessing/PurchaseProcessing.ts";
+import {
+  decodePurchaseProcessingResult,
+  encodePurchaseProcessingResult,
+} from "../../../src/services/purchaseProcessing/result-codec.ts";
+
+/** Fresh domain result per test; override any field via the partial. */
+const result = (
+  overrides: Partial<{
+    personId: string;
+    purchaseId: Option.Option<string>;
+    subscriptionId: Option.Option<string>;
+    transactionId: Option.Option<string>;
+    changedGrantIds: ReadonlyArray<string>;
+    analyticsEventIds: ReadonlyArray<string>;
+    idempotent: boolean;
+  }> = {},
+): PurchaseProcessingResult =>
+  new PurchaseProcessingResult({
+    analyticsEventIds: [],
+    changedGrantIds: [],
+    idempotent: false,
+    personId: "person_1",
+    purchaseId: Option.none(),
+    subscriptionId: Option.none(),
+    transactionId: Option.none(),
+    ...overrides,
+  });
+
+describe("encodePurchaseProcessingResult", () => {
+  it("produces a flat JSON shape with the expected keys", () => {
+    const encoded = encodePurchaseProcessingResult(result());
+    expect(Object.keys(encoded).sort()).toEqual(
+      [
+        "analyticsEventIds",
+        "changedGrantIds",
+        "idempotent",
+        "personId",
+        "purchaseId",
+        "subscriptionId",
+        "transactionId",
+      ].sort(),
+    );
+  });
+
+  it("maps Option.some(string) → the inner string", () => {
+    const encoded = encodePurchaseProcessingResult(
+      result({
+        purchaseId: Option.some("pur_1"),
+        subscriptionId: Option.some("sub_1"),
+        transactionId: Option.some("txn_1"),
+      }),
+    );
+    expect(encoded.purchaseId).toBe("pur_1");
+    expect(encoded.subscriptionId).toBe("sub_1");
+    expect(encoded.transactionId).toBe("txn_1");
+  });
+
+  it("maps Option.none() → null for every optional id", () => {
+    const encoded = encodePurchaseProcessingResult(result());
+    expect(encoded.purchaseId).toBeNull();
+    expect(encoded.subscriptionId).toBeNull();
+    expect(encoded.transactionId).toBeNull();
+  });
+
+  it("maps each optional id independently (mixed some/none)", () => {
+    const encoded = encodePurchaseProcessingResult(
+      result({
+        purchaseId: Option.some("pur_1"),
+        subscriptionId: Option.none(),
+        transactionId: Option.some("txn_1"),
+      }),
+    );
+    expect(encoded.purchaseId).toBe("pur_1");
+    expect(encoded.subscriptionId).toBeNull();
+    expect(encoded.transactionId).toBe("txn_1");
+  });
+
+  it("preserves the personId verbatim", () => {
+    const encoded = encodePurchaseProcessingResult(result({ personId: "person_xyz" }));
+    expect(encoded.personId).toBe("person_xyz");
+  });
+
+  it("preserves array fields (analyticsEventIds, changedGrantIds)", () => {
+    const encoded = encodePurchaseProcessingResult(
+      result({
+        analyticsEventIds: ["evt_1", "evt_2"],
+        changedGrantIds: ["grant_1"],
+      }),
+    );
+    expect(encoded.analyticsEventIds).toEqual(["evt_1", "evt_2"]);
+    expect(encoded.changedGrantIds).toEqual(["grant_1"]);
+  });
+
+  it("preserves empty array fields", () => {
+    const encoded = encodePurchaseProcessingResult(result());
+    expect(encoded.analyticsEventIds).toEqual([]);
+    expect(encoded.changedGrantIds).toEqual([]);
+  });
+
+  it("preserves the idempotent flag when true", () => {
+    const encoded = encodePurchaseProcessingResult(result({ idempotent: true }));
+    expect(encoded.idempotent).toBe(true);
+  });
+
+  it("preserves the idempotent flag when false", () => {
+    const encoded = encodePurchaseProcessingResult(result({ idempotent: false }));
+    expect(encoded.idempotent).toBe(false);
+  });
+});
+
+describe("decodePurchaseProcessingResult", () => {
+  it("reconstructs a PurchaseProcessingResult from the encoded shape", () => {
+    const decoded = decodePurchaseProcessingResult({
+      analyticsEventIds: ["evt_1"],
+      changedGrantIds: ["grant_1"],
+      idempotent: false,
+      personId: "person_1",
+      purchaseId: "pur_1",
+      subscriptionId: "sub_1",
+      transactionId: "txn_1",
+    });
+    expect(decoded).toBeInstanceOf(PurchaseProcessingResult);
+    expect(decoded.personId).toBe("person_1");
+    expect(decoded.analyticsEventIds).toEqual(["evt_1"]);
+    expect(decoded.changedGrantIds).toEqual(["grant_1"]);
+  });
+
+  it("maps a non-null id string → Option.some(string)", () => {
+    const decoded = decodePurchaseProcessingResult({
+      analyticsEventIds: [],
+      changedGrantIds: [],
+      idempotent: false,
+      personId: "person_1",
+      purchaseId: "pur_1",
+      subscriptionId: "sub_1",
+      transactionId: "txn_1",
+    });
+    expect(decoded.purchaseId).toStrictEqual(Option.some("pur_1"));
+    expect(decoded.subscriptionId).toStrictEqual(Option.some("sub_1"));
+    expect(decoded.transactionId).toStrictEqual(Option.some("txn_1"));
+  });
+
+  it("maps a null id → Option.none()", () => {
+    const decoded = decodePurchaseProcessingResult({
+      analyticsEventIds: [],
+      changedGrantIds: [],
+      idempotent: false,
+      personId: "person_1",
+      purchaseId: null,
+      subscriptionId: null,
+      transactionId: null,
+    });
+    expect(Option.isNone(decoded.purchaseId)).toBe(true);
+    expect(Option.isNone(decoded.subscriptionId)).toBe(true);
+    expect(Option.isNone(decoded.transactionId)).toBe(true);
+  });
+
+  it("ALWAYS forces idempotent: true even when the encoded flag was false", () => {
+    // The decode path only runs for a duplicate delivery — the original call
+    // already produced the canonical operational state, so the replayed result
+    // is by definition idempotent regardless of what was stored.
+    const decoded = decodePurchaseProcessingResult({
+      analyticsEventIds: [],
+      changedGrantIds: [],
+      idempotent: false,
+      personId: "person_1",
+      purchaseId: null,
+      subscriptionId: null,
+      transactionId: null,
+    });
+    expect(decoded.idempotent).toBe(true);
+  });
+
+  it("forces idempotent: true even when the encoded flag was already true", () => {
+    const decoded = decodePurchaseProcessingResult({
+      analyticsEventIds: [],
+      changedGrantIds: [],
+      idempotent: true,
+      personId: "person_1",
+      purchaseId: null,
+      subscriptionId: null,
+      transactionId: null,
+    });
+    expect(decoded.idempotent).toBe(true);
+  });
+});
+
+describe("encode → decode round-trip", () => {
+  it("preserves the full structure except the forced idempotent flag", () => {
+    const original = result({
+      analyticsEventIds: ["evt_1", "evt_2"],
+      changedGrantIds: ["grant_1"],
+      idempotent: false,
+      personId: "person_42",
+      purchaseId: Option.some("pur_1"),
+      subscriptionId: Option.none(),
+      transactionId: Option.some("txn_1"),
+    });
+
+    const roundTripped = decodePurchaseProcessingResult(encodePurchaseProcessingResult(original));
+
+    expect(roundTripped.personId).toBe(original.personId);
+    expect(roundTripped.analyticsEventIds).toEqual(original.analyticsEventIds);
+    expect(roundTripped.changedGrantIds).toEqual(original.changedGrantIds);
+    expect(roundTripped.purchaseId).toStrictEqual(original.purchaseId);
+    expect(roundTripped.subscriptionId).toStrictEqual(original.subscriptionId);
+    expect(roundTripped.transactionId).toStrictEqual(original.transactionId);
+    // The only intentional divergence: idempotent is always true post-decode.
+    expect(original.idempotent).toBe(false);
+    expect(roundTripped.idempotent).toBe(true);
+  });
+
+  it("round-trips with all optional ids absent", () => {
+    const original = result({ personId: "person_only" });
+
+    const roundTripped = decodePurchaseProcessingResult(encodePurchaseProcessingResult(original));
+
+    expect(roundTripped.personId).toBe("person_only");
+    expect(Option.isNone(roundTripped.purchaseId)).toBe(true);
+    expect(Option.isNone(roundTripped.subscriptionId)).toBe(true);
+    expect(Option.isNone(roundTripped.transactionId)).toBe(true);
+    expect(roundTripped.analyticsEventIds).toEqual([]);
+    expect(roundTripped.changedGrantIds).toEqual([]);
+  });
+});
diff --git a/packages/core/test/services/purchaseProcessing/revenue-analytics-mapper.test.ts b/packages/core/test/services/purchaseProcessing/revenue-analytics-mapper.test.ts
new file mode 100644
index 000000000..a1f5bcc7b
--- /dev/null
+++ b/packages/core/test/services/purchaseProcessing/revenue-analytics-mapper.test.ts
@@ -0,0 +1,994 @@
+/**
+ * Pure unit tests for the per-action revenue analytics mappers. Each mapper
+ * translates a successful purchase write into one or more
+ * `InternalAnalyticsEvent` shapes; there is no Effect, no infra, and no DB —
+ * just deterministic object construction with three load-bearing concerns:
+ *
+ *   1. the sign convention applied to the money payload (+1 for
+ *      purchases / renewals / refund-reversals, −1 for refunds / revokes),
+ *   2. the `Option` gates that turn a missing transaction / subscription id
+ *      into an empty array (no-op) for some mappers,
+ *   3. DETERMINISTIC `eventId`s (derived from `(idempotencyKey, eventName,
+ *      personId)`) and the shared `context` / envelope fields.
+ */
+import { Option } from "effect";
+
+import { describe, expect, it } from "vite-plus/test";
+
+import { REVENUE_TRUSTED_SOURCE_TOPIC } from "../../../src/domain/internalAnalytics/InternalAnalyticsEvents.ts";
+import {
+  PurchaseProcessingMoney,
+  PurchaseProcessingMoneyUsd,
+} from "../../../src/domain/purchaseProcessing/PurchaseProcessing.ts";
+import { CurrencyCode, ExchangeRate, MinorAmount } from "../../../src/domain/shared/Money.ts";
+import {
+  type RevenueAnalyticsMapperContext,
+  toAutoRenewResumedAnalyticsInputs,
+  toBillingRetryAnalyticsInputs,
+  toCanceledAnalyticsInputs,
+  toExpiredAnalyticsInputs,
+  toExtendedAnalyticsInputs,
+  toOfferRedeemedAnalyticsInputs,
+  toOneTimePurchaseAnalyticsInputs,
+  toPriceIncreaseAnalyticsInputs,
+  toPurchaseRevokedAnalyticsInputs,
+  toPurchaseTransferredAnalyticsInputs,
+  toRefundedAnalyticsInputs,
+  toRefundReversedAnalyticsInputs,
+  toRenewalPreferenceChangeAnalyticsInputs,
+  toRenewedAnalyticsInputs,
+  toRevokedAnalyticsInputs,
+  toStartedAnalyticsInputs,
+  toSubscriptionTransferredAnalyticsInputs,
+} from "../../../src/services/purchaseProcessing/revenue-analytics-mapper.ts";
+
+const cfg = (
+  overrides: Partial<RevenueAnalyticsMapperContext> = {},
+): RevenueAnalyticsMapperContext => ({
+  distinctId: "dist_test",
+  idempotencyKey: "idem_test",
+  organizationId: "org_test",
+  projectId: "proj_test",
+  token: "tok_test",
+  ...overrides,
+});
+
+const common = () => ({
+  paymentProviderConfigurationId: "pp_conf_1",
+  paymentProviderConfigurationProductId: "pp_prod_1",
+  providerEnvironment: 1,
+  providerEventType: "subscription.started",
+  providerId: "apple",
+  providerSubscriptionId: Option.some("store_sub_1"),
+  providerTransactionId: Option.some("store_tx_1"),
+  providerWebhookNotificationId: Option.some("wh_1"),
+  source: "webhook",
+});
+
+/**
+ * Builds a fully-populated {@link PurchaseProcessingMoney} (with the USD
+ * breakdown) so the mappers exercise every breakdown column. All amounts are
+ * non-negative minor units — the mappers apply the sign.
+ */
+const moneyWithUsd = () =>
+  new PurchaseProcessingMoney({
+    currency: CurrencyCode.make("EUR"),
+    grossAmount: MinorAmount.make(1_000),
+    proceedsAfterTaxAmount: MinorAmount.make(600),
+    proceedsAmount: MinorAmount.make(700),
+    storeCommissionAmount: MinorAmount.make(300),
+    storefront: Option.some("DEU"),
+    taxAmount: MinorAmount.make(100),
+    usd: Option.some(
+      new PurchaseProcessingMoneyUsd({
+        exchangeRate: ExchangeRate.make(1_100_000),
+        grossAmount: MinorAmount.make(1_100),
+        proceedsAfterTaxAmount: MinorAmount.make(660),
+        proceedsAmount: MinorAmount.make(770),
+        storeCommissionAmount: MinorAmount.make(330),
+        taxAmount: MinorAmount.make(110),
+      }),
+    ),
+  });
+
+/** Money with no USD mirror (FX rate was unavailable). */
+const moneyNoUsd = () =>
+  new PurchaseProcessingMoney({
+    currency: CurrencyCode.make("USD"),
+    grossAmount: MinorAmount.make(999),
+    proceedsAfterTaxAmount: MinorAmount.make(699),
+    proceedsAmount: MinorAmount.make(699),
+    storeCommissionAmount: MinorAmount.make(300),
+    storefront: Option.some("USA"),
+    taxAmount: MinorAmount.make(0),
+    usd: Option.none(),
+  });
+
+const at = (iso: string) => new Date(iso);
+
+describe("toStartedAnalyticsInputs", () => {
+  it("returns an empty array (no-op) when the transaction id is absent", () => {
+    const events = toStartedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("emits the [subscription.created, purchase.completed] pair anchored on the new transaction id", () => {
+    const events = toStartedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    expect(events).toHaveLength(2);
+    expect(events.map((e) => e.eventName)).toEqual([
+      "$subscription.created",
+      "$purchase.completed",
+    ]);
+    for (const e of events) {
+      expect(e.transactionId).toBe("tx_42");
+      expect(e.personId).toBe("person_1");
+      // distinctId is the cfg's resolved primary distinct id, NOT the personId.
+      expect(e.distinctId).toBe("dist_test");
+    }
+  });
+
+  it("applies sign=+1 so purchase deltas stay positive", () => {
+    const [created] = toStartedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    expect(created?.properties.grossAmount).toBe(1_000);
+    expect(created?.properties.amount).toBe(1_000);
+    expect(created?.properties.grossAmountUsd).toBe(1_100);
+    expect(created?.properties.amountUsd).toBe(1_100);
+    expect(created?.properties.proceedsAmount).toBe(700);
+  });
+
+  it("passes isTrial through to both events", () => {
+    const events = toStartedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: true,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    expect(events.map((e) => e.properties.isTrial)).toEqual([true, true]);
+  });
+});
+
+describe("toRenewedAnalyticsInputs", () => {
+  it("returns an empty array when the transaction id is absent", () => {
+    const events = toRenewedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("emits a single $subscription.renewed with a +1 (positive) money delta", () => {
+    const events = toRenewedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_renew") },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [renewed] = events;
+    expect(renewed?.eventName).toBe("$subscription.renewed");
+    expect(renewed?.transactionId).toBe("tx_renew");
+    expect(renewed?.properties.grossAmount).toBe(1_000);
+    expect(renewed?.properties.isTrial).toBe(false);
+  });
+});
+
+describe("toCanceledAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toCanceledAnalyticsInputs(
+      {
+        ...common(),
+        cancelAtPeriodEnd: true,
+        canceledAt: at("2026-01-01"),
+        cancellationReason: Option.some("user_request"),
+      },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("emits $subscription.canceled with no money fields and the cancellation reason", () => {
+    const events = toCanceledAnalyticsInputs(
+      {
+        ...common(),
+        cancelAtPeriodEnd: true,
+        canceledAt: at("2026-01-01"),
+        cancellationReason: Option.some("user_request"),
+      },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [canceled] = events;
+    expect(canceled?.eventName).toBe("$subscription.canceled");
+    expect(canceled?.transactionId).toBeNull();
+    expect(canceled?.properties.cancelAtPeriodEnd).toBe(true);
+    expect(canceled?.properties.cancellationReason).toBe("user_request");
+    // user cancels never carry money — Apple keeps the entitlement to period end.
+    expect(canceled?.properties.grossAmount).toBeUndefined();
+  });
+
+  it("nulls the cancellation reason when none is supplied", () => {
+    const [canceled] = toCanceledAnalyticsInputs(
+      {
+        ...common(),
+        cancelAtPeriodEnd: false,
+        canceledAt: at("2026-01-01"),
+        cancellationReason: Option.none(),
+      },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(canceled?.properties.cancellationReason).toBeNull();
+  });
+});
+
+describe("toExpiredAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toExpiredAnalyticsInputs(
+      { ...common(), expiredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("emits $subscription.expired with only the base properties (no money)", () => {
+    const events = toExpiredAnalyticsInputs(
+      { ...common(), expiredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [expired] = events;
+    expect(expired?.eventName).toBe("$subscription.expired");
+    expect(expired).toBeDefined();
+    expect("grossAmount" in (expired?.properties ?? {})).toBe(false);
+    expect("amount" in (expired?.properties ?? {})).toBe(false);
+  });
+});
+
+describe("toRevokedAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toRevokedAnalyticsInputs(
+      {
+        ...common(),
+        money: Option.some(moneyWithUsd()),
+        revocationReason: Option.some("FAMILY_SHARING_REVOKED"),
+        revokedAt: at("2026-01-01"),
+      },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("emits a $subscription.canceled with sign=−1 (negative) money deltas and the revocation reason", () => {
+    const events = toRevokedAnalyticsInputs(
+      {
+        ...common(),
+        money: Option.some(moneyWithUsd()),
+        revocationReason: Option.some("FAMILY_SHARING_REVOKED"),
+        revokedAt: at("2026-01-01"),
+      },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [canceled] = events;
+    expect(canceled?.eventName).toBe("$subscription.canceled");
+    expect(canceled?.properties.revocationReason).toBe("FAMILY_SHARING_REVOKED");
+    expect(canceled?.properties.grossAmount).toBe(-1_000);
+    expect(canceled?.properties.amount).toBe(-1_000);
+    expect(canceled?.properties.grossAmountUsd).toBe(-1_100);
+    expect(canceled?.properties.proceedsAmount).toBe(-700);
+  });
+});
+
+describe("toOneTimePurchaseAnalyticsInputs", () => {
+  it("returns an empty array when the transaction id is absent", () => {
+    const events = toOneTimePurchaseAnalyticsInputs(
+      {
+        ...common(),
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+        purchaseType: "one-time",
+      },
+      { personId: "person_1", transactionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it.each(["one-time", "consumable"] as const)(
+    "emits $purchase.completed with purchaseType=%s and +1 money",
+    (purchaseType) => {
+      const events = toOneTimePurchaseAnalyticsInputs(
+        {
+          ...common(),
+          money: Option.some(moneyWithUsd()),
+          occurredAt: at("2026-01-01"),
+          purchaseType,
+        },
+        { personId: "person_1", transactionId: Option.some("tx_otp") },
+        cfg(),
+      );
+      expect(events).toHaveLength(1);
+      const [completed] = events;
+      expect(completed?.eventName).toBe("$purchase.completed");
+      expect(completed?.properties.purchaseType).toBe(purchaseType);
+      expect(completed?.properties.grossAmount).toBe(1_000);
+    },
+  );
+});
+
+describe("toRefundedAnalyticsInputs", () => {
+  it("ALWAYS returns a single event (no Option gate), with sign=−1 and the refund reason", () => {
+    const events = toRefundedAnalyticsInputs(
+      {
+        ...common(),
+        money: Option.some(moneyWithUsd()),
+        refundReason: Option.some("UNINTENDED_PURCHASE"),
+        refundedAt: at("2026-01-01"),
+      },
+      { personId: "person_1" },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [refunded] = events;
+    expect(refunded?.eventName).toBe("$purchase.refunded");
+    expect(refunded?.properties.refundReason).toBe("UNINTENDED_PURCHASE");
+    expect(refunded?.properties.grossAmount).toBe(-1_000);
+    expect(refunded?.properties.grossAmountUsd).toBe(-1_100);
+    // anchored on the provider transaction id from the common fields.
+    expect(refunded?.transactionId).toBe("store_tx_1");
+  });
+
+  it("nulls the refund reason and transactionId when their sources are absent", () => {
+    const [refunded] = toRefundedAnalyticsInputs(
+      {
+        ...common(),
+        money: Option.none(),
+        providerTransactionId: Option.none(),
+        refundReason: Option.none(),
+        refundedAt: at("2026-01-01"),
+      },
+      { personId: "person_1" },
+      cfg(),
+    );
+    expect(refunded?.properties.refundReason).toBeNull();
+    expect(refunded?.transactionId).toBeNull();
+    expect(refunded?.properties.grossAmount).toBeUndefined();
+  });
+});
+
+describe("toPurchaseRevokedAnalyticsInputs", () => {
+  it("ALWAYS returns a single $purchase.revoked with sign=−1", () => {
+    const events = toPurchaseRevokedAnalyticsInputs(
+      {
+        ...common(),
+        money: Option.some(moneyWithUsd()),
+        revocationReason: Option.some("REFUND"),
+        revokedAt: at("2026-01-01"),
+      },
+      { personId: "person_1" },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [revoked] = events;
+    expect(revoked?.eventName).toBe("$purchase.revoked");
+    expect(revoked?.properties.revocationReason).toBe("REFUND");
+    expect(revoked?.properties.grossAmount).toBe(-1_000);
+    expect(revoked?.properties.proceedsAmount).toBe(-700);
+  });
+});
+
+describe("toRefundReversedAnalyticsInputs", () => {
+  it("ALWAYS returns a single $subscription.refund_reversed with sign=+1 (cancels the prior refund delta)", () => {
+    const events = toRefundReversedAnalyticsInputs(
+      { ...common(), money: Option.some(moneyWithUsd()), reversedAt: at("2026-01-01") },
+      { personId: "person_1" },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [reversed] = events;
+    expect(reversed?.eventName).toBe("$subscription.refund_reversed");
+    expect(reversed?.properties.grossAmount).toBe(1_000);
+    expect(reversed?.properties.grossAmountUsd).toBe(1_100);
+    expect(reversed?.transactionId).toBe("store_tx_1");
+  });
+});
+
+describe("toBillingRetryAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toBillingRetryAnalyticsInputs(
+      {
+        ...common(),
+        gracePeriodExpiresAt: Option.some(at("2026-02-01")),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("includes the gracePeriodExpiresAt Date when present", () => {
+    const grace = at("2026-02-01");
+    const [retry] = toBillingRetryAnalyticsInputs(
+      { ...common(), gracePeriodExpiresAt: Option.some(grace), occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(retry?.eventName).toBe("$subscription.billing_retry");
+    expect(retry?.properties.gracePeriodExpiresAt).toEqual(grace);
+  });
+
+  it("nulls gracePeriodExpiresAt when none is supplied", () => {
+    const [retry] = toBillingRetryAnalyticsInputs(
+      { ...common(), gracePeriodExpiresAt: Option.none(), occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(retry?.properties.gracePeriodExpiresAt).toBeNull();
+  });
+});
+
+describe("toExtendedAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toExtendedAnalyticsInputs(
+      { ...common(), extendedTo: at("2026-03-01"), occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("includes the extendedTo Date", () => {
+    const extendedTo = at("2026-03-01");
+    const [extended] = toExtendedAnalyticsInputs(
+      { ...common(), extendedTo, occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(extended?.eventName).toBe("$subscription.extended");
+    expect(extended?.properties.extendedTo).toEqual(extendedTo);
+  });
+});
+
+describe("toRenewalPreferenceChangeAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toRenewalPreferenceChangeAnalyticsInputs(
+      { ...common(), newProviderProductKey: "premium_yearly", occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("includes the newProviderProductKey", () => {
+    const [changed] = toRenewalPreferenceChangeAnalyticsInputs(
+      { ...common(), newProviderProductKey: "premium_yearly", occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(changed?.eventName).toBe("$subscription.product_changed");
+    expect(changed?.properties.newProviderProductKey).toBe("premium_yearly");
+  });
+});
+
+describe("toOfferRedeemedAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toOfferRedeemedAnalyticsInputs(
+      { ...common(), occurredAt: at("2026-01-01"), offerId: Option.some("winback_2026") },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("includes the offerId when present and nulls it when absent", () => {
+    const [withOffer] = toOfferRedeemedAnalyticsInputs(
+      { ...common(), occurredAt: at("2026-01-01"), offerId: Option.some("winback_2026") },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(withOffer?.eventName).toBe("$subscription.offer_redeemed");
+    expect(withOffer?.properties.offerId).toBe("winback_2026");
+
+    const [noOffer] = toOfferRedeemedAnalyticsInputs(
+      { ...common(), occurredAt: at("2026-01-01"), offerId: Option.none() },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(noOffer?.properties.offerId).toBeNull();
+  });
+});
+
+describe("toPriceIncreaseAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toPriceIncreaseAnalyticsInputs(
+      {
+        ...common(),
+        effectiveAt: Option.some(at("2026-04-01")),
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("uses an UNSIGNED (+1) breakdown — the upcoming price is informational, never a negative delta", () => {
+    const effectiveAt = at("2026-04-01");
+    const [priceIncrease] = toPriceIncreaseAnalyticsInputs(
+      {
+        ...common(),
+        effectiveAt: Option.some(effectiveAt),
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(priceIncrease?.eventName).toBe("$subscription.price_increase_pending");
+    expect(priceIncrease?.properties.grossAmount).toBe(1_000);
+    expect(priceIncrease?.properties.grossAmountUsd).toBe(1_100);
+    expect(priceIncrease?.properties.effectiveAt).toEqual(effectiveAt);
+  });
+});
+
+describe("toAutoRenewResumedAnalyticsInputs", () => {
+  it("returns an empty array when the subscription id is absent", () => {
+    const events = toAutoRenewResumedAnalyticsInputs(
+      { ...common(), occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.none() },
+      cfg(),
+    );
+    expect(events).toEqual([]);
+  });
+
+  it("emits a minimal $subscription.auto_renew_resumed with no money", () => {
+    const events = toAutoRenewResumedAnalyticsInputs(
+      { ...common(), occurredAt: at("2026-01-01") },
+      { personId: "person_1", subscriptionId: Option.some("sub_1") },
+      cfg(),
+    );
+    expect(events).toHaveLength(1);
+    const [resumed] = events;
+    expect(resumed?.eventName).toBe("$subscription.auto_renew_resumed");
+    expect("grossAmount" in (resumed?.properties ?? {})).toBe(false);
+  });
+});
+
+const transferModeInput = () => ({
+  fromDistinctId: "dist_from",
+  fromPersonId: "person_from",
+  occurredAt: at("2026-01-01"),
+  paymentProviderConfigurationId: "pp_conf_1",
+  providerId: "apple",
+  source: "webhook",
+  toDistinctId: "dist_to",
+  toPersonId: "person_to",
+  transferMode: "transfer_to_new_owner" as const,
+  triggerReason: "restore_on_shared_device",
+});
+
+describe("toSubscriptionTransferredAnalyticsInputs", () => {
+  it("emits the [transferred_out, transferred_in] pair with source / target identities on the envelope and shared properties", () => {
+    const events = toSubscriptionTransferredAnalyticsInputs(
+      {
+        ...transferModeInput(),
+        subscription: {
+          id: "sub_1",
+          paymentProviderConfigurationProductId: "pp_prod_1",
+          providerEnvironment: 1,
+          storeSubscriptionId: "store_sub_1",
+        },
+      },
+      cfg(),
+    );
+    expect(events).toHaveLength(2);
+    const [out, inn] = events;
+    expect(out?.eventName).toBe("$subscription.transferred_out");
+    expect(inn?.eventName).toBe("$subscription.transferred_in");
+
+    // the _out event is anchored on the SOURCE identity, _in on the TARGET.
+    expect(out?.distinctId).toBe("dist_from");
+    expect(out?.personId).toBe("person_from");
+    expect(inn?.distinctId).toBe("dist_to");
+    expect(inn?.personId).toBe("person_to");
+
+    // both halves carry the SAME properties so a consumer can correlate them.
+    expect(out?.properties).toEqual(inn?.properties);
+    expect(out?.properties.subscriptionId).toBe("sub_1");
+    expect(out?.properties.storeSubscriptionId).toBe("store_sub_1");
+    expect(out?.properties.providerEventType).toBe("subscription.transferred");
+    expect(out?.properties.transferMode).toBe("transfer_to_new_owner");
+  });
+});
+
+describe("toPurchaseTransferredAnalyticsInputs", () => {
+  it("emits the [transferred_out, transferred_in] pair carrying the purchase provider key", () => {
+    const events = toPurchaseTransferredAnalyticsInputs(
+      {
+        ...transferModeInput(),
+        purchase: {
+          id: "pur_1",
+          paymentProviderConfigurationProductId: "pp_prod_1",
+          providerEnvironment: 1,
+          providerKey: "com.app.lifetime",
+        },
+      },
+      cfg(),
+    );
+    expect(events).toHaveLength(2);
+    const [out, inn] = events;
+    expect(out?.eventName).toBe("$purchase.transferred_out");
+    expect(inn?.eventName).toBe("$purchase.transferred_in");
+    expect(out?.distinctId).toBe("dist_from");
+    expect(inn?.distinctId).toBe("dist_to");
+    expect(out?.properties).toEqual(inn?.properties);
+    expect(out?.properties.purchaseId).toBe("pur_1");
+    expect(out?.properties.providerKey).toBe("com.app.lifetime");
+    expect(out?.properties.providerEventType).toBe("purchase.transferred");
+  });
+});
+
+describe("cross-cutting mapper invariants", () => {
+  it("derives a DETERMINISTIC eventId — stable across repeated calls, distinct per (eventName) within a call", () => {
+    const args = [
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    ] as const;
+    const first = toStartedAnalyticsInputs(...args);
+    const second = toStartedAnalyticsInputs(...args);
+    // The two events in one call differ ONLY by eventName, so they get two
+    // distinct (stable) ids; re-running with the same (anchor, eventName,
+    // personId) reproduces those SAME two ids — the property the at-least-once
+    // queue dedup relies on.
+    expect(first.map((e) => e.eventId)).toEqual(second.map((e) => e.eventId));
+    expect(new Set(first.map((e) => e.eventId)).size).toBe(2);
+    for (const id of [...first, ...second].map((e) => e.eventId)) {
+      expect(id).toMatch(/^an_evt_/);
+    }
+  });
+
+  it("changing the idempotencyKey anchor OR the personId changes every derived eventId", () => {
+    const input = {
+      ...common(),
+      isTrial: false,
+      money: Option.none(),
+      occurredAt: at("2026-01-01"),
+    };
+    const baseline = toStartedAnalyticsInputs(
+      input,
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    ).map((e) => e.eventId);
+    const otherAnchor = toStartedAnalyticsInputs(
+      input,
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg({ idempotencyKey: "idem_other" }),
+    ).map((e) => e.eventId);
+    const otherPerson = toStartedAnalyticsInputs(
+      input,
+      { personId: "person_2", transactionId: Option.some("tx_42") },
+      cfg(),
+    ).map((e) => e.eventId);
+    expect(otherAnchor).not.toEqual(baseline);
+    expect(otherPerson).not.toEqual(baseline);
+  });
+
+  it("stamps the envelope with the trusted source topic, org / project / token from cfg", () => {
+    const [created] = toStartedAnalyticsInputs(
+      { ...common(), isTrial: false, money: Option.none(), occurredAt: at("2026-01-01") },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    expect(created?.context).toEqual({ sourceTopic: REVENUE_TRUSTED_SOURCE_TOPIC });
+    expect(created?.organizationId).toBe("org_test");
+    expect(created?.projectId).toBe("proj_test");
+    expect(created?.token).toBe("tok_test");
+    expect(created?.occurredAt).toEqual(at("2026-01-01"));
+  });
+
+  it("maps the common provider fields through revenuePropertiesBase, nulling absent Options", () => {
+    const [created] = toStartedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.none(),
+        occurredAt: at("2026-01-01"),
+        providerSubscriptionId: Option.none(),
+        providerTransactionId: Option.none(),
+        providerWebhookNotificationId: Option.none(),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    expect(created?.properties.paymentProviderConfigurationId).toBe("pp_conf_1");
+    expect(created?.properties.providerId).toBe("apple");
+    expect(created?.properties.providerSubscriptionId).toBeNull();
+    expect(created?.properties.providerTransactionId).toBeNull();
+    expect(created?.properties.providerWebhookNotificationId).toBeNull();
+  });
+});
+
+describe("signedMoneyProperties (exercised via toStartedAnalyticsInputs)", () => {
+  it("Option.none() money → no money fields on the event at all", () => {
+    const [created] = toStartedAnalyticsInputs(
+      { ...common(), isTrial: false, money: Option.none(), occurredAt: at("2026-01-01") },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    const props = created?.properties ?? {};
+    expect("grossAmount" in props).toBe(false);
+    expect("amount" in props).toBe(false);
+    expect("currency" in props).toBe(false);
+    // non-money base fields are still present.
+    expect(props).toHaveProperty("providerId");
+  });
+
+  it("sign=+1 yields positive amounts, sign=−1 yields negative amounts for the same money", () => {
+    const money = moneyWithUsd();
+    const [positive] = toStartedAnalyticsInputs(
+      { ...common(), isTrial: false, money: Option.some(money), occurredAt: at("2026-01-01") },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    const [negative] = toPurchaseRevokedAnalyticsInputs(
+      {
+        ...common(),
+        money: Option.some(money),
+        revocationReason: Option.none(),
+        revokedAt: at("2026-01-01"),
+      },
+      { personId: "person_1" },
+      cfg(),
+    );
+    expect(positive?.properties.grossAmount).toBe(1_000);
+    expect(negative?.properties.grossAmount).toBe(-1_000);
+    expect(positive?.properties.taxAmount).toBe(100);
+    expect(negative?.properties.taxAmount).toBe(-100);
+  });
+
+  it("includes the USD breakdown (exchangeRate, *Usd) only when the money carries a USD mirror", () => {
+    const [withUsd] = toStartedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyWithUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    expect(withUsd?.properties.exchangeRate).toBe(1_100_000);
+    expect(withUsd?.properties.grossAmountUsd).toBe(1_100);
+    expect(withUsd?.properties.proceedsAmountUsd).toBe(770);
+
+    const [noUsd] = toStartedAnalyticsInputs(
+      {
+        ...common(),
+        isTrial: false,
+        money: Option.some(moneyNoUsd()),
+        occurredAt: at("2026-01-01"),
+      },
+      { personId: "person_1", transactionId: Option.some("tx_42") },
+      cfg(),
+    );
+    // original-currency amounts are present, USD mirror is nulled.
+    expect(noUsd?.properties.grossAmount).toBe(999);
+    expect(noUsd?.properties.exchangeRate).toBeNull();
+    expect(noUsd?.properties.grossAmountUsd).toBeNull();
+    expect(noUsd?.properties.amountUsd).toBeNull();
+    expect(noUsd?.properties.proceedsAmountUsd).toBeNull();
+  });
+});
+
+/**
+ * Enumerates EVERY mapper to lock the injectivity contract behind the
+ * deterministic `event_id`: the triple `(idempotencyKey, eventName, personId)`
+ * must be collision-free across all current variants. Each builder runs under a
+ * DISTINCT anchor (mirroring reality — one purchase-ledger row, one unique
+ * `idempotency_key`, per action). If two different events ever produced the same
+ * derived id, the at-least-once queue dedup would silently drop a real event.
+ */
+describe("deterministic eventId injectivity (enumeration over every mapper)", () => {
+  // Runs all 17 mappers with a per-builder anchor and returns every event.
+  const enumerateAll = () => {
+    const subResult = (p = "person_1") => ({ personId: p, subscriptionId: Option.some("sub_1") });
+    const txResult = (p = "person_1") => ({ personId: p, transactionId: Option.some("tx_1") });
+    const base = { ...common(), occurredAt: at("2026-01-01"), money: Option.some(moneyWithUsd()) };
+    const transferSub = {
+      ...transferModeInput(),
+      subscription: {
+        id: "sub_1",
+        paymentProviderConfigurationProductId: "pp_prod_1",
+        providerEnvironment: 1,
+        storeSubscriptionId: "store_sub_1",
+      },
+    };
+    const transferPur = {
+      ...transferModeInput(),
+      purchase: {
+        id: "pur_1",
+        paymentProviderConfigurationProductId: "pp_prod_1",
+        providerEnvironment: 1,
+        providerKey: "com.app.lifetime",
+      },
+    };
+    return [
+      toStartedAnalyticsInputs(
+        { ...base, isTrial: false },
+        txResult(),
+        cfg({ idempotencyKey: "k_started" }),
+      ),
+      toRenewedAnalyticsInputs(
+        { ...base, isTrial: true },
+        txResult(),
+        cfg({ idempotencyKey: "k_renewed" }),
+      ),
+      toCanceledAnalyticsInputs(
+        {
+          ...common(),
+          canceledAt: at("2026-01-01"),
+          cancelAtPeriodEnd: true,
+          cancellationReason: Option.none(),
+        },
+        subResult(),
+        cfg({ idempotencyKey: "k_canceled" }),
+      ),
+      toExpiredAnalyticsInputs(
+        { ...common(), expiredAt: at("2026-01-01") },
+        subResult(),
+        cfg({ idempotencyKey: "k_expired" }),
+      ),
+      toRevokedAnalyticsInputs(
+        { ...base, revokedAt: at("2026-01-01"), revocationReason: Option.none() },
+        subResult(),
+        cfg({ idempotencyKey: "k_revoked" }),
+      ),
+      toOneTimePurchaseAnalyticsInputs(
+        { ...base, purchaseType: "one-time" },
+        txResult(),
+        cfg({ idempotencyKey: "k_otp" }),
+      ),
+      toRefundedAnalyticsInputs(
+        { ...base, refundedAt: at("2026-01-01"), refundReason: Option.none() },
+        { personId: "person_1" },
+        cfg({ idempotencyKey: "k_refunded" }),
+      ),
+      toPurchaseRevokedAnalyticsInputs(
+        { ...base, revokedAt: at("2026-01-01"), revocationReason: Option.none() },
+        { personId: "person_1" },
+        cfg({ idempotencyKey: "k_pur_revoked" }),
+      ),
+      toRefundReversedAnalyticsInputs(
+        { ...base, reversedAt: at("2026-01-01") },
+        { personId: "person_1" },
+        cfg({ idempotencyKey: "k_refund_reversed" }),
+      ),
+      toBillingRetryAnalyticsInputs(
+        { ...common(), occurredAt: at("2026-01-01"), gracePeriodExpiresAt: Option.none() },
+        subResult(),
+        cfg({ idempotencyKey: "k_billing_retry" }),
+      ),
+      toExtendedAnalyticsInputs(
+        { ...common(), occurredAt: at("2026-01-01"), extendedTo: at("2026-03-01") },
+        subResult(),
+        cfg({ idempotencyKey: "k_extended" }),
+      ),
+      toRenewalPreferenceChangeAnalyticsInputs(
+        { ...common(), occurredAt: at("2026-01-01"), newProviderProductKey: "premium_yearly" },
+        subResult(),
+        cfg({ idempotencyKey: "k_product_changed" }),
+      ),
+      toOfferRedeemedAnalyticsInputs(
+        { ...common(), occurredAt: at("2026-01-01"), offerId: Option.none() },
+        subResult(),
+        cfg({ idempotencyKey: "k_offer" }),
+      ),
+      toPriceIncreaseAnalyticsInputs(
+        { ...base, effectiveAt: Option.none() },
+        subResult(),
+        cfg({ idempotencyKey: "k_price_increase" }),
+      ),
+      toAutoRenewResumedAnalyticsInputs(
+        { ...common(), occurredAt: at("2026-01-01") },
+        subResult(),
+        cfg({ idempotencyKey: "k_auto_renew" }),
+      ),
+      toSubscriptionTransferredAnalyticsInputs(
+        transferSub,
+        cfg({ idempotencyKey: "k_sub_transfer" }),
+      ),
+      toPurchaseTransferredAnalyticsInputs(transferPur, cfg({ idempotencyKey: "k_pur_transfer" })),
+    ].flat();
+  };
+
+  it("produces a UNIQUE eventId for every event across all mappers", () => {
+    const ids = enumerateAll().map((e) => e.eventId);
+    // 14 single-event builders + 2 (started) + 2 (sub transfer) + 2 (pur transfer) = 20 events.
+    expect(ids).toHaveLength(20);
+    expect(new Set(ids).size).toBe(ids.length);
+  });
+
+  it("is fully deterministic — re-running every mapper reproduces the identical id set", () => {
+    expect(enumerateAll().map((e) => e.eventId)).toEqual(enumerateAll().map((e) => e.eventId));
+  });
+
+  it("disambiguates the two halves of each multi-event action by eventName / personId", () => {
+    const started = toStartedAnalyticsInputs(
+      { ...common(), isTrial: false, money: Option.none(), occurredAt: at("2026-01-01") },
+      { personId: "person_1", transactionId: Option.some("tx_1") },
+      cfg({ idempotencyKey: "k_started" }),
+    );
+    // same anchor + same personId, different eventName → distinct ids.
+    expect(started[0]?.eventId).not.toBe(started[1]?.eventId);
+
+    const transfer = toSubscriptionTransferredAnalyticsInputs(
+      {
+        ...transferModeInput(),
+        subscription: {
+          id: "sub_1",
+          paymentProviderConfigurationProductId: "pp_prod_1",
+          providerEnvironment: 1,
+          storeSubscriptionId: "store_sub_1",
+        },
+      },
+      cfg({ idempotencyKey: "k_sub_transfer" }),
+    );
+    // same anchor, different eventName AND personId → distinct ids.
+    expect(transfer[0]?.eventId).not.toBe(transfer[1]?.eventId);
+  });
+});
diff --git a/packages/core/test/services/purchases/PurchaseService.integration.test.ts b/packages/core/test/services/purchases/PurchaseService.integration.test.ts
new file mode 100644
index 000000000..cd59be46b
--- /dev/null
+++ b/packages/core/test/services/purchases/PurchaseService.integration.test.ts
@@ -0,0 +1,264 @@
+/**
+ * Integration tests for {@link PurchaseService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is an in-memory stub).
+ *
+ * `PurchaseService` exposes a single read-only method, `getPersonPurchases`,
+ * which is gated behind a `project:all` permission check on the *person's*
+ * project. The service writes nothing, so these tests focus on:
+ *  - the rows returned for a person actually match the `purchase` rows persisted
+ *    under that `personId` (read straight back from MySQL to confirm),
+ *  - the order of the guards: a missing person fails with `PersonNotFoundError`
+ *    *before* any permission check runs,
+ *  - the permission check runs against `person.projectId` and rejects callers
+ *    without `project:all` for that project.
+ *
+ * Conventions used throughout:
+ *  - The service has no parent rows seeded for it by {@link CoreTestFixture}
+ *    (which seeds only user/org/member/project), so each test creates its own
+ *    `person` + `purchase` rows under the fixture project and removes them on
+ *    exit via {@link withCleanup} (an `Effect.ensuring` finalizer), success or
+ *    failure. The global teardown sweep is only a backstop. Ids are unique per
+ *    call so a leftover row from a crashed run can't collide, and assertions
+ *    stay membership-based (`.some(...)`) rather than exact counts.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields,
+ *    and each failure path is paired with a DB-state assertion.
+ *  - Permission tests re-authenticate just the call under test via
+ *    {@link asUnauthorized}; the inner provision shadows the harness's default
+ *    full-permission session for the wrapped call only.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { PurchaseService } from "@voidhash/core/services";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { PersonNotFoundError } from "@voidhash/core/domain/person/Person";
+import { Db, inArray, persons, purchases } from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+const uniqueId = (label: string) => `it-purchase-${label}-${Date.now()}-${idSeq++}`;
+
+/** Insert a bare person row under the fixture project and return its id. */
+const insertPerson = (id: string, ownerProjectId: string = projectId) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(persons).values({ id, projectId: ownerProjectId });
+    return id;
+  });
+
+/**
+ * Insert a one-time purchase row for a person and return its id. `providerKey`
+ * must be globally unique (`provider_key_idx`), so it is namespaced per call.
+ * `paymentProviderConfigurationProductId` has no FK, so a fabricated id is fine.
+ */
+const insertPurchase = (id: string, personId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(purchases).values({
+      id,
+      personId,
+      providerKey: `${id}-key`,
+      paymentProviderConfigurationProductId: `${id}-pppc`,
+    });
+    return id;
+  });
+
+/** Read a purchase row straight from the database, bypassing the service. */
+const findPurchaseRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.purchases.findFirst({ where: { id } });
+  });
+
+/**
+ * Delete the given person and purchase rows. Each delete is `ignore`d so a
+ * missing row never turns the finalizer into a failure. Purchases are removed
+ * before persons (no DB FK, but order keeps the intent clear). `PurchaseService`
+ * writes no audit rows, so there is nothing append-only to sweep.
+ */
+const cleanupCreated = (personIds: ReadonlyArray<string>, purchaseIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (purchaseIds.length > 0) {
+      yield* db
+        .delete(purchases)
+        .where(inArray(purchases.id, [...purchaseIds]))
+        .pipe(Effect.ignore);
+    }
+    if (personIds.length > 0) {
+      yield* db
+        .delete(persons)
+        .where(inArray(persons.id, [...personIds]))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every person/purchase it creates is removed afterward,
+ * regardless of how the test exits. Pass each created id to the matching `track`
+ * callback; cleanup reads the collected ids lazily at finalization via
+ * `Effect.ensuring`, so it sees every id tracked while the body ran (including
+ * on failure).
+ */
+const withCleanup = <E, R>(
+  body: (track: {
+    person: (id: string) => void;
+    purchase: (id: string) => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const personIds: string[] = [];
+  const purchaseIds: string[] = [];
+  return body({
+    person: (id) => {
+      personIds.push(id);
+    },
+    purchase: (id) => {
+      purchaseIds.push(id);
+    },
+  }).pipe(Effect.ensuring(cleanupCreated(personIds, purchaseIds)));
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. Re-authenticates just
+ * this effect with the no-access session; the inner provision shadows the
+ * harness's default full-permission session for the wrapped call only.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("PurchaseService.getPersonPurchases", () => {
+  test(
+    "returns all purchase rows persisted for the given person",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const purchaseService = yield* PurchaseService;
+
+        const personId = uniqueId("person");
+        yield* insertPerson(personId);
+        track.person(personId);
+
+        const purchaseA = uniqueId("a");
+        const purchaseB = uniqueId("b");
+        yield* insertPurchase(purchaseA, personId);
+        track.purchase(purchaseA);
+        yield* insertPurchase(purchaseB, personId);
+        track.purchase(purchaseB);
+
+        // A purchase belonging to a *different* person must not leak in.
+        const otherPersonId = uniqueId("other-person");
+        yield* insertPerson(otherPersonId);
+        track.person(otherPersonId);
+        const otherPurchase = uniqueId("other");
+        yield* insertPurchase(otherPurchase, otherPersonId);
+        track.purchase(otherPurchase);
+
+        const result = yield* purchaseService.getPersonPurchases(personId);
+
+        expect(result.some((row) => row.id === purchaseA)).toBe(true);
+        expect(result.some((row) => row.id === purchaseB)).toBe(true);
+        expect(result.some((row) => row.id === otherPurchase)).toBe(false);
+        expect(result.every((row) => row.personId === personId)).toBe(true);
+
+        // The returned rows match what's actually persisted.
+        const rowA = yield* findPurchaseRow(purchaseA);
+        expect(rowA).toBeDefined();
+        expect(rowA?.personId).toBe(personId);
+      }),
+    ).pipe(Effect.provide(PurchaseService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns an empty list for a person with no purchases",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const purchaseService = yield* PurchaseService;
+
+        const personId = uniqueId("empty-person");
+        yield* insertPerson(personId);
+        track.person(personId);
+
+        const result = yield* purchaseService.getPersonPurchases(personId);
+        expect(result).toEqual([]);
+      }),
+    ).pipe(Effect.provide(PurchaseService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with PersonNotFoundError when the person does not exist",
+    // No cleanup wrapper: a missing person means no rows are read or written.
+    Effect.gen(function* () {
+      const purchaseService = yield* PurchaseService;
+      const missingPersonId = uniqueId("missing");
+
+      const error = yield* Effect.flip(purchaseService.getPersonPurchases(missingPersonId));
+      expect(error).toBeInstanceOf(PersonNotFoundError);
+      if (error instanceof PersonNotFoundError) {
+        expect(error.id).toBe(missingPersonId);
+      }
+
+      // Confirm the person genuinely isn't there (guard ran on real DB state).
+      const db = yield* Db;
+      const row = yield* db.query.persons.findFirst({ where: { id: missingPersonId } });
+      expect(row).toBeUndefined();
+    }).pipe(Effect.provide(PurchaseService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all for the person's project",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const purchaseService = yield* PurchaseService;
+
+        // The person and a purchase exist under the fixture project, so the
+        // person lookup succeeds and the permission check is what rejects.
+        const personId = uniqueId("guarded-person");
+        yield* insertPerson(personId);
+        track.person(personId);
+        const purchaseId = uniqueId("guarded");
+        yield* insertPurchase(purchaseId, personId);
+        track.purchase(purchaseId);
+
+        const error = yield* Effect.flip(
+          asUnauthorized(purchaseService.getPersonPurchases(personId)),
+        );
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+
+        // Nothing was mutated: the purchase row is still present afterward.
+        const row = yield* findPurchaseRow(purchaseId);
+        expect(row).toBeDefined();
+        expect(row?.personId).toBe(personId);
+      }),
+    ).pipe(Effect.provide(PurchaseService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/schema/SchemaCacheInvalidationService.test.ts b/packages/core/test/services/schema/SchemaCacheInvalidationService.test.ts
new file mode 100644
index 000000000..a76b1f53e
--- /dev/null
+++ b/packages/core/test/services/schema/SchemaCacheInvalidationService.test.ts
@@ -0,0 +1,93 @@
+import { Effect, Exit, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  type ProjectSchemaCacheShape,
+  ProjectSchemaCache,
+} from "../../../src/services/schema/SchemaService.ts";
+import { SchemaCacheInvalidationService } from "../../../src/services/schema/SchemaCacheInvalidationService.ts";
+
+/**
+ * A tiny recording fake of the {@link ProjectSchemaCache} port. This is the
+ * only seam the service touches (it is otherwise pure `Effect.gen`), so a
+ * canned in-memory double is allowed at the port boundary. `invalidations`
+ * records every `projectId` routed through `getByName(...).invalidate()`.
+ */
+const recordingCache = () => {
+  const invalidations: string[] = [];
+  const cache: ProjectSchemaCacheShape = {
+    getByName: (projectId: string) => ({
+      get: () => Effect.succeed(null),
+      set: () => Effect.void,
+      invalidate: () =>
+        Effect.sync(() => {
+          invalidations.push(projectId);
+        }),
+    }),
+  };
+  return { cache, invalidations };
+};
+
+/**
+ * A cache fake whose `invalidate()` always fails with a defect — used to prove
+ * the service forwards port failures rather than swallowing them.
+ */
+class CacheInvalidateBoom {
+  readonly _tag = "CacheInvalidateBoom";
+}
+
+const failingCache = (): ProjectSchemaCacheShape => ({
+  getByName: () => ({
+    get: () => Effect.succeed(null),
+    set: () => Effect.void,
+    invalidate: () => Effect.die(new CacheInvalidateBoom()),
+  }),
+});
+
+/** Build the service layer wired to a given cache port fake. */
+const layerWith = (cache: ProjectSchemaCacheShape) =>
+  SchemaCacheInvalidationService.layer.pipe(
+    Layer.provide(Layer.succeed(ProjectSchemaCache, cache)),
+  );
+
+describe("SchemaCacheInvalidationService.invalidate", () => {
+  it("routes the projectId through cache.getByName(projectId).invalidate() and returns void", async () => {
+    const { cache, invalidations } = recordingCache();
+
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* SchemaCacheInvalidationService;
+        return yield* service.invalidate("project-abc");
+      }).pipe(Effect.provide(layerWith(cache))),
+    );
+
+    expect(result).toBeUndefined();
+    expect(invalidations).toEqual(["project-abc"]);
+  });
+
+  it("invalidates the exact projectId given (per-project DO routing)", async () => {
+    const { cache, invalidations } = recordingCache();
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* SchemaCacheInvalidationService;
+        yield* service.invalidate("project-one");
+        yield* service.invalidate("project-two");
+        yield* service.invalidate("project-one");
+      }).pipe(Effect.provide(layerWith(cache))),
+    );
+
+    expect(invalidations).toEqual(["project-one", "project-two", "project-one"]);
+  });
+
+  it("propagates a failure from the cache port instead of swallowing it", async () => {
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const service = yield* SchemaCacheInvalidationService;
+        return yield* service.invalidate("project-boom");
+      }).pipe(Effect.provide(layerWith(failingCache()))),
+    );
+
+    expect(Exit.isFailure(exit)).toBe(true);
+  });
+});
diff --git a/packages/core/test/services/schema/SchemaService.integration.test.ts b/packages/core/test/services/schema/SchemaService.integration.test.ts
new file mode 100644
index 000000000..c434992ce
--- /dev/null
+++ b/packages/core/test/services/schema/SchemaService.integration.test.ts
@@ -0,0 +1,779 @@
+/**
+ * Integration tests for {@link SchemaService}, run against the real backend
+ * stack provisioned once by `test/_testing/globalSetup.ts` (live PlanetScale DB
+ * + ClickHouse + WorkOS; only the project schema cache is the in-memory stub the
+ * harness builds fresh per test).
+ *
+ * `SchemaService` is a read-only assembler: it folds six concurrent
+ * project-scoped queries (perks, products, active paywall locations, product↔perk
+ * links, active per-product provider mappings, enabled providers) into one
+ * immutable {@link ProjectSchema} and caches it behind {@link ProjectSchemaCache}.
+ * The tests therefore verify the *assembled projection* and the *cache side
+ * effect*, not just a return value:
+ *  - the schema reflects rows seeded directly in MySQL (membership by slug),
+ *  - archived locations, soft-deleted provider configurations, and providers the
+ *    contract doesn't surface (e.g. `"stripe"`) are filtered out,
+ *  - the deterministic `sha256:` version hash matches the byte layout the CLI's
+ *    `computeSchemaVersionFromNormalized` reproduces,
+ *  - a cache hit short-circuits assembly and a cache miss populates the cache,
+ *  - `getProjectSchema` enforces `project:all` while the SDK variant does not.
+ *
+ * Conventions:
+ *  - The service has no mutating API, so test rows are seeded with raw inserts
+ *    (one fresh, uniquely-slugged set per test) under the shared fixture project
+ *    ({@link CoreTestFixture}) and removed on exit via {@link withCleanup},
+ *    regardless of how the test ends. The global teardown sweep is only a
+ *    backstop. Assertions stay membership-based (`.some(...)` / by-slug) — never
+ *    exact counts — so leftovers from a crashed run can't collide.
+ *  - Permission tests reuse the default authenticated effect and re-authenticate
+ *    just the call under test via {@link asUnauthorized}; the inner provision
+ *    shadows the harness's default full-permission session for that call only.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof`.
+ */
+import { Effect } from "effect";
+import { subtle } from "uncrypto";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { SchemaService, ProjectSchemaCache } from "@voidhash/core/services";
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { generateId } from "@voidhash/core/utils/generate-id";
+import {
+  Db,
+  inArray,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  paywallLocations,
+  perks,
+  productPerks,
+  products,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so slugs stay unique even within the same millisecond. */
+let slugSeq = 0;
+const uniqueSlug = (label: string) => `it-schema-${label}-${Date.now()}-${slugSeq++}`;
+
+/**
+ * Tracks every row a test seeds across the five catalog tables so the cleanup
+ * finalizer can remove them on any exit. Deletes deepest FK dependents first.
+ */
+interface Tracker {
+  readonly product: (id: string) => void;
+  readonly perk: (id: string) => void;
+  readonly location: (id: string) => void;
+  readonly productPerk: (id: string) => void;
+  readonly providerConfig: (id: string) => void;
+  readonly providerConfigProduct: (id: string) => void;
+}
+
+interface CreatedRows {
+  products: string[];
+  perks: string[];
+  locations: string[];
+  productPerks: string[];
+  providerConfigs: string[];
+  providerConfigProducts: string[];
+}
+
+/**
+ * Delete the rows a test seeded, deepest dependents first. Each delete is
+ * `ignore`d so a missing row never turns the finalizer into a failure. None of
+ * these tables hold audit rows for this read-only service, so no audit cleanup
+ * is needed.
+ */
+const cleanupCreatedRows = (rows: CreatedRows) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (rows.providerConfigProducts.length > 0) {
+      yield* db
+        .delete(paymentProviderConfigurationProducts)
+        .where(inArray(paymentProviderConfigurationProducts.id, rows.providerConfigProducts))
+        .pipe(Effect.ignore);
+    }
+    if (rows.productPerks.length > 0) {
+      yield* db
+        .delete(productPerks)
+        .where(inArray(productPerks.id, rows.productPerks))
+        .pipe(Effect.ignore);
+    }
+    if (rows.providerConfigs.length > 0) {
+      yield* db
+        .delete(paymentProviderConfigurations)
+        .where(inArray(paymentProviderConfigurations.id, rows.providerConfigs))
+        .pipe(Effect.ignore);
+    }
+    if (rows.locations.length > 0) {
+      yield* db
+        .delete(paywallLocations)
+        .where(inArray(paywallLocations.id, rows.locations))
+        .pipe(Effect.ignore);
+    }
+    if (rows.products.length > 0) {
+      yield* db.delete(products).where(inArray(products.id, rows.products)).pipe(Effect.ignore);
+    }
+    if (rows.perks.length > 0) {
+      yield* db.delete(perks).where(inArray(perks.id, rows.perks)).pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every row it seeds is removed afterward, regardless of how
+ * the test exits. The body receives a {@link Tracker}; cleanup reads the
+ * collected ids lazily at finalization via `Effect.ensuring`, so it sees every
+ * id tracked while the body ran (including on failure).
+ */
+const withCleanup = <E, R>(
+  body: (track: Tracker) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const rows: CreatedRows = {
+    products: [],
+    perks: [],
+    locations: [],
+    productPerks: [],
+    providerConfigs: [],
+    providerConfigProducts: [],
+  };
+  const track: Tracker = {
+    product: (id) => rows.products.push(id),
+    perk: (id) => rows.perks.push(id),
+    location: (id) => rows.locations.push(id),
+    productPerk: (id) => rows.productPerks.push(id),
+    providerConfig: (id) => rows.providerConfigs.push(id),
+    providerConfigProduct: (id) => rows.providerConfigProducts.push(id),
+  };
+  return body(track).pipe(Effect.ensuring(cleanupCreatedRows(rows)));
+};
+
+// --- raw seed helpers (the service has no mutating API of its own) ----------
+
+const insertPerk = (track: Tracker, input: { name: string; slug: string }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("perk");
+    track.perk(id);
+    yield* db.insert(perks).values({ id, name: input.name, projectId, slug: input.slug });
+    return id;
+  });
+
+const insertProduct = (track: Tracker, input: { name: string; slug: string }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("product");
+    track.product(id);
+    yield* db.insert(products).values({ id, name: input.name, projectId, slug: input.slug });
+    return id;
+  });
+
+const insertProductPerkLink = (track: Tracker, input: { productId: string; perkId: string }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("productPerk");
+    track.productPerk(id);
+    yield* db.insert(productPerks).values({ id, perkId: input.perkId, productId: input.productId });
+    return id;
+  });
+
+const insertLocation = (
+  track: Tracker,
+  input: { name: string; slug: string; description?: string | null; archivedAt?: Date | null },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("paywallLocation");
+    track.location(id);
+    yield* db.insert(paywallLocations).values({
+      id,
+      name: input.name,
+      projectId,
+      slug: input.slug,
+      description: input.description ?? null,
+      archivedAt: input.archivedAt ?? null,
+    });
+    return id;
+  });
+
+const insertProviderConfig = (
+  track: Tracker,
+  input: { providerId: string; enabled: boolean; deleted?: boolean },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("paymentProviderConfiguration");
+    track.providerConfig(id);
+    yield* db.insert(paymentProviderConfigurations).values({
+      id,
+      providerId: input.providerId,
+      projectId,
+      paymentProviderKey: `it-key-${id}`,
+      enabled: input.enabled,
+      name: `cfg-${input.providerId}`,
+      deletedAt: input.deleted ? new Date() : null,
+    });
+    return id;
+  });
+
+const insertProviderProductMapping = (
+  track: Tracker,
+  input: {
+    configurationId: string;
+    productId: string;
+    isActive?: boolean;
+    configuration?: object;
+  },
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = generateId("paymentProviderProduct");
+    track.providerConfigProduct(id);
+    yield* db.insert(paymentProviderConfigurationProducts).values({
+      id,
+      paymentProviderConfigurationId: input.configurationId,
+      productId: input.productId,
+      providerProductKey: `it-ppk-${id}`,
+      isActive: input.isActive ?? true,
+      configuration: input.configuration ?? {},
+    });
+    return id;
+  });
+
+// --- hash oracle ------------------------------------------------------------
+
+/**
+ * Recompute the expected `sha256:` version hash from the canonical projection,
+ * mirroring `src/services/schema/helpers.ts#computeSchemaVersion` byte-for-byte
+ * (field order, sort order, and the `{ locations, perks, products }` envelope
+ * that intentionally omits `enabledProviders`). Proves the service's hash is
+ * deterministic against the exact same layout the CLI reproduces.
+ */
+const expectedVersion = async (projection: {
+  perks: ReadonlyArray<{ slug: string; name: string }>;
+  locations: ReadonlyArray<{ slug: string; name: string; description: string | null }>;
+  products: ReadonlyArray<{
+    slug: string;
+    name: string;
+    type: "subscription";
+    perks: ReadonlyArray<string>;
+    providers: ReadonlyArray<{ providerId: string; configuration: Record<string, unknown> }>;
+  }>;
+}): Promise<string> => {
+  const products = [...projection.products]
+    .map((product) => ({
+      name: product.name,
+      perks: [...product.perks].sort(),
+      providers: [...product.providers]
+        .map((provider) => ({
+          providerId: provider.providerId,
+          configuration: provider.configuration,
+        }))
+        .sort((a, b) => a.providerId.localeCompare(b.providerId)),
+      slug: product.slug,
+      type: product.type,
+    }))
+    .sort((a, b) => a.slug.localeCompare(b.slug));
+  const locations = [...projection.locations]
+    .map((location) => ({
+      description: location.description,
+      name: location.name,
+      slug: location.slug,
+    }))
+    .sort((a, b) => a.slug.localeCompare(b.slug));
+  const perksList = [...projection.perks]
+    .map((perk) => ({ name: perk.name, slug: perk.slug }))
+    .sort((a, b) => a.slug.localeCompare(b.slug));
+  const payload = JSON.stringify({ locations, perks: perksList, products });
+  const hashBuffer = await subtle.digest("SHA-256", new TextEncoder().encode(payload));
+  const hashHex = [...new Uint8Array(hashBuffer)]
+    .map((byte) => byte.toString(16).padStart(2, "0"))
+    .join("");
+  return `sha256:${hashHex}`;
+};
+
+/** A `user`-method session for the fixture principal carrying no project access. */
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+/**
+ * Run a single call as a caller with no project access. The inner provision
+ * shadows the harness's default full-permission session for the wrapped call.
+ */
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+describe("SchemaService.getProjectSchema", () => {
+  test(
+    "returns the cached ProjectSchema without re-reading the DB on a cache hit",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+        const cache = yield* ProjectSchemaCache;
+
+        // Seed a perk so a fresh assembly would differ from the planted cache value.
+        const slug = uniqueSlug("cache-hit");
+        yield* insertPerk(track, { name: "Cache Hit Perk", slug });
+
+        // Plant a sentinel schema the service must return verbatim on a hit.
+        const sentinel = {
+          enabledProviders: [],
+          locations: [],
+          perks: [{ slug: "sentinel", name: "Sentinel" }],
+          products: [],
+          version: "sha256:sentinel",
+        };
+        yield* cache.getByName(projectId).set(sentinel, 60_000);
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+        // Returned object is the exact cached value, not a freshly assembled one.
+        expect(schema.version).toBe("sha256:sentinel");
+        expect(schema.perks.some((p) => p.slug === "sentinel")).toBe(true);
+        expect(schema.perks.some((p) => p.slug === slug)).toBe(false);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "assembles the schema from the DB on a cache miss and caches the result",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+        const cache = yield* ProjectSchemaCache;
+
+        const perkSlug = uniqueSlug("miss-perk");
+        const productSlug = uniqueSlug("miss-product");
+        const locationSlug = uniqueSlug("miss-location");
+
+        const perkId = yield* insertPerk(track, { name: "Miss Perk", slug: perkSlug });
+        const productId = yield* insertProduct(track, { name: "Miss Product", slug: productSlug });
+        yield* insertProductPerkLink(track, { productId, perkId });
+        yield* insertLocation(track, {
+          name: "Miss Location",
+          slug: locationSlug,
+          description: "a location",
+        });
+        const appleCfg = yield* insertProviderConfig(track, {
+          providerId: "apple-app-store",
+          enabled: true,
+        });
+        yield* insertProviderProductMapping(track, {
+          configurationId: appleCfg,
+          productId,
+          configuration: { foo: "bar" },
+        });
+
+        // Empty cache → forces a DB assembly.
+        const before = yield* cache.getByName(projectId).get();
+        expect(before).toBeNull();
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+
+        // Seeded rows surface (membership, never exact counts — the fixture is shared).
+        expect(schema.perks.some((p) => p.slug === perkSlug && p.name === "Miss Perk")).toBe(true);
+        expect(
+          schema.locations.some((l) => l.slug === locationSlug && l.description === "a location"),
+        ).toBe(true);
+        const seededProduct = schema.products.find((p) => p.slug === productSlug);
+        expect(seededProduct).toBeDefined();
+        expect(seededProduct?.type).toBe("subscription");
+        expect(seededProduct?.perks).toContain(perkSlug);
+        expect(seededProduct?.providers.some((pr) => pr.providerId === "appleAppStore")).toBe(true);
+        expect(
+          seededProduct?.providers.find((pr) => pr.providerId === "appleAppStore")?.configuration,
+        ).toEqual({ foo: "bar" });
+        expect(schema.enabledProviders).toContain("appleAppStore");
+        expect(schema.version.startsWith("sha256:")).toBe(true);
+
+        // The assembled schema is now persisted in the cache.
+        const after = yield* cache.getByName(projectId).get();
+        expect(after).not.toBeNull();
+        expect((after as { version: string }).version).toBe(schema.version);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all and assembles nothing",
+    // No cleanup wrapper: the guarded read fails before touching the DB.
+    Effect.gen(function* () {
+      const schemaService = yield* SchemaService;
+      const cache = yield* ProjectSchemaCache;
+
+      const error = yield* Effect.flip(asUnauthorized(schemaService.getProjectSchema(projectId)));
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+
+      // The forbidden path neither assembled nor cached anything.
+      const cached = yield* cache.getByName(projectId).get();
+      expect(cached).toBeNull();
+    }).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  vitestTest.todo(
+    "fails with SchemaServiceError when a DB read fails — needs an in-process seam to force a DatabaseError from the live PlanetScale connection (the catchTags only fires on infra failure); not reproducible cleanly against the real DB without hand-rolling a DB double, which the harness forbids",
+  );
+});
+
+describe("SchemaService.getProjectSchemaForSdk", () => {
+  test(
+    "returns a ProjectSchema without any permission check (publishable-key middleware resolves projectId)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+
+        const perkSlug = uniqueSlug("sdk-perk");
+        yield* insertPerk(track, { name: "SDK Perk", slug: perkSlug });
+
+        // Even with a session that has NO project access, the SDK variant must succeed.
+        const schema = yield* asUnauthorized(schemaService.getProjectSchemaForSdk(projectId));
+        expect(schema.perks.some((p) => p.slug === perkSlug)).toBe(true);
+        expect(schema.version.startsWith("sha256:")).toBe(true);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "returns the cached schema if one is present",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+        const cache = yield* ProjectSchemaCache;
+
+        const slug = uniqueSlug("sdk-cache-hit");
+        yield* insertPerk(track, { name: "SDK Cache Hit", slug });
+
+        const sentinel = {
+          enabledProviders: [],
+          locations: [],
+          perks: [{ slug: "sdk-sentinel", name: "SDK Sentinel" }],
+          products: [],
+          version: "sha256:sdk-sentinel",
+        };
+        yield* cache.getByName(projectId).set(sentinel, 60_000);
+
+        const schema = yield* schemaService.getProjectSchemaForSdk(projectId);
+        expect(schema.version).toBe("sha256:sdk-sentinel");
+        expect(schema.perks.some((p) => p.slug === "sdk-sentinel")).toBe(true);
+        expect(schema.perks.some((p) => p.slug === slug)).toBe(false);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "assembles a fresh schema and caches it on a miss",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+        const cache = yield* ProjectSchemaCache;
+
+        const slug = uniqueSlug("sdk-miss");
+        yield* insertPerk(track, { name: "SDK Miss", slug });
+
+        const before = yield* cache.getByName(projectId).get();
+        expect(before).toBeNull();
+
+        const schema = yield* schemaService.getProjectSchemaForSdk(projectId);
+        expect(schema.perks.some((p) => p.slug === slug)).toBe(true);
+
+        const after = yield* cache.getByName(projectId).get();
+        expect(after).not.toBeNull();
+        expect((after as { version: string }).version).toBe(schema.version);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("SchemaService.computeProjectSchemaVersion", () => {
+  test(
+    "returns the same version hash the assembled schema carries",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+
+        const slug = uniqueSlug("version-perk");
+        yield* insertPerk(track, { name: "Version Perk", slug });
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+        const { version } = yield* schemaService.computeProjectSchemaVersion(projectId);
+        expect(version).toBe(schema.version);
+        expect(version.startsWith("sha256:")).toBe(true);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "forbids callers without project:all",
+    Effect.gen(function* () {
+      const schemaService = yield* SchemaService;
+      const error = yield* Effect.flip(
+        asUnauthorized(schemaService.computeProjectSchemaVersion(projectId)),
+      );
+      expect(error).toBeInstanceOf(ActionForbiddenError);
+    }).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+describe("SchemaService schema assembly (via getProjectSchema)", () => {
+  test(
+    "excludes archived paywall locations",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+
+        const activeSlug = uniqueSlug("loc-active");
+        const archivedSlug = uniqueSlug("loc-archived");
+        yield* insertLocation(track, { name: "Active", slug: activeSlug });
+        yield* insertLocation(track, {
+          name: "Archived",
+          slug: archivedSlug,
+          archivedAt: new Date(),
+        });
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+        expect(schema.locations.some((l) => l.slug === activeSlug)).toBe(true);
+        expect(schema.locations.some((l) => l.slug === archivedSlug)).toBe(false);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "ignores provider mappings whose configuration is soft-deleted",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+
+        const productSlug = uniqueSlug("softdel-product");
+        const productId = yield* insertProduct(track, {
+          name: "SoftDel Product",
+          slug: productSlug,
+        });
+
+        // Active config + active mapping → surfaces.
+        const liveCfg = yield* insertProviderConfig(track, {
+          providerId: "apple-app-store",
+          enabled: true,
+        });
+        yield* insertProviderProductMapping(track, { configurationId: liveCfg, productId });
+
+        // Soft-deleted config (deletedAt set) + active mapping → must be filtered out.
+        const deadCfg = yield* insertProviderConfig(track, {
+          providerId: "google-play",
+          enabled: true,
+          deleted: true,
+        });
+        yield* insertProviderProductMapping(track, { configurationId: deadCfg, productId });
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+        const product = schema.products.find((p) => p.slug === productSlug);
+        expect(product).toBeDefined();
+        expect(product?.providers.some((pr) => pr.providerId === "appleAppStore")).toBe(true);
+        // googlePlay came only from the soft-deleted configuration → dropped.
+        expect(product?.providers.some((pr) => pr.providerId === "googlePlay")).toBe(false);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "ignores provider mappings whose link is inactive (isActive = false)",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+
+        const productSlug = uniqueSlug("inactive-product");
+        const productId = yield* insertProduct(track, {
+          name: "Inactive Product",
+          slug: productSlug,
+        });
+
+        const cfg = yield* insertProviderConfig(track, {
+          providerId: "apple-app-store",
+          enabled: true,
+        });
+        yield* insertProviderProductMapping(track, {
+          configurationId: cfg,
+          productId,
+          isActive: false,
+        });
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+        const product = schema.products.find((p) => p.slug === productSlug);
+        expect(product).toBeDefined();
+        // The only mapping was inactive, so the product surfaces no providers.
+        expect(product?.providers.length).toBe(0);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "drops providers the schema contract does not surface (e.g. stripe) from products and enabledProviders",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+
+        const productSlug = uniqueSlug("stripe-product");
+        const productId = yield* insertProduct(track, {
+          name: "Stripe Product",
+          slug: productSlug,
+        });
+
+        // stripe is not in DB_PROVIDER_ID_TO_SCHEMA → mapDbProviderIdToSchemaProviderId returns null.
+        const stripeCfg = yield* insertProviderConfig(track, {
+          providerId: "stripe",
+          enabled: true,
+        });
+        yield* insertProviderProductMapping(track, { configurationId: stripeCfg, productId });
+
+        const appleCfg = yield* insertProviderConfig(track, {
+          providerId: "apple-app-store",
+          enabled: true,
+        });
+        yield* insertProviderProductMapping(track, { configurationId: appleCfg, productId });
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+        const product = schema.products.find((p) => p.slug === productSlug);
+        expect(product).toBeDefined();
+        expect(product?.providers.some((pr) => pr.providerId === "appleAppStore")).toBe(true);
+        // stripe is unmappable, so it never appears as a schema providerId.
+        expect(product?.providers.map((pr) => pr.providerId as string)).not.toContain("stripe");
+        // enabledProviders is the surfaceable subset (only ever apple / google literals).
+        expect(schema.enabledProviders).toContain("appleAppStore");
+        expect(schema.enabledProviders as ReadonlyArray<string>).not.toContain("stripe");
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "produces a deterministic version hash matching the canonical projection byte layout",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+        const db = yield* Db;
+
+        // Seed a known set of rows for THIS project.
+        const perkSlug = uniqueSlug("hash-perk");
+        const productSlug = uniqueSlug("hash-product");
+        const locationSlug = uniqueSlug("hash-location");
+
+        const perkId = yield* insertPerk(track, { name: "Hash Perk", slug: perkSlug });
+        const productId = yield* insertProduct(track, { name: "Hash Product", slug: productSlug });
+        yield* insertProductPerkLink(track, { productId, perkId });
+        yield* insertLocation(track, {
+          name: "Hash Location",
+          slug: locationSlug,
+          description: null,
+        });
+        const appleCfg = yield* insertProviderConfig(track, {
+          providerId: "apple-app-store",
+          enabled: true,
+        });
+        yield* insertProviderProductMapping(track, {
+          configurationId: appleCfg,
+          productId,
+          configuration: { tier: 1 },
+        });
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+
+        // Reconstruct the canonical projection from ALL current project rows so the
+        // oracle hashes exactly what the service assembled (the fixture is shared,
+        // so we read the live state rather than assume only our seeds exist).
+        const allPerks = yield* db.query.perks.findMany({ where: { projectId } });
+        const allProducts = yield* db.query.products.findMany({ where: { projectId } });
+        const activeLocations = schema.locations.map((l) => ({
+          slug: l.slug,
+          name: l.name,
+          description: l.description,
+        }));
+
+        const projectionProducts = allProducts.map((product) => {
+          const fromSchema = schema.products.find((p) => p.slug === product.slug);
+          return {
+            slug: product.slug,
+            name: product.name,
+            type: "subscription" as const,
+            perks: fromSchema ? [...fromSchema.perks] : [],
+            providers: fromSchema
+              ? fromSchema.providers.map((pr) => ({
+                  providerId: pr.providerId as string,
+                  configuration: pr.configuration as Record<string, unknown>,
+                }))
+              : [],
+          };
+        });
+
+        const oracle = yield* Effect.promise(() =>
+          expectedVersion({
+            perks: allPerks.map((p) => ({ slug: p.slug, name: p.name })),
+            locations: activeLocations,
+            products: projectionProducts,
+          }),
+        );
+
+        expect(schema.version).toBe(oracle);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "sorts perks, locations, and products alphabetically by slug",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const schemaService = yield* SchemaService;
+
+        // Insert in reverse-alphabetical order to prove the service re-sorts.
+        const stamp = `${Date.now()}-${slugSeq++}`;
+        const perkZ = `it-schema-sort-perk-z-${stamp}`;
+        const perkA = `it-schema-sort-perk-a-${stamp}`;
+        const prodZ = `it-schema-sort-prod-z-${stamp}`;
+        const prodA = `it-schema-sort-prod-a-${stamp}`;
+        const locZ = `it-schema-sort-loc-z-${stamp}`;
+        const locA = `it-schema-sort-loc-a-${stamp}`;
+
+        yield* insertPerk(track, { name: "Z", slug: perkZ });
+        yield* insertPerk(track, { name: "A", slug: perkA });
+        yield* insertProduct(track, { name: "Z", slug: prodZ });
+        yield* insertProduct(track, { name: "A", slug: prodA });
+        yield* insertLocation(track, { name: "Z", slug: locZ });
+        yield* insertLocation(track, { name: "A", slug: locA });
+
+        const schema = yield* schemaService.getProjectSchema(projectId);
+
+        const perkIdxA = schema.perks.findIndex((p) => p.slug === perkA);
+        const perkIdxZ = schema.perks.findIndex((p) => p.slug === perkZ);
+        expect(perkIdxA).toBeGreaterThanOrEqual(0);
+        expect(perkIdxZ).toBeGreaterThan(perkIdxA);
+
+        const prodIdxA = schema.products.findIndex((p) => p.slug === prodA);
+        const prodIdxZ = schema.products.findIndex((p) => p.slug === prodZ);
+        expect(prodIdxA).toBeGreaterThanOrEqual(0);
+        expect(prodIdxZ).toBeGreaterThan(prodIdxA);
+
+        const locIdxA = schema.locations.findIndex((l) => l.slug === locA);
+        const locIdxZ = schema.locations.findIndex((l) => l.slug === locZ);
+        expect(locIdxA).toBeGreaterThanOrEqual(0);
+        expect(locIdxZ).toBeGreaterThan(locIdxA);
+      }),
+    ).pipe(Effect.provide(SchemaService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/schema/helpers.test.ts b/packages/core/test/services/schema/helpers.test.ts
new file mode 100644
index 000000000..334907e92
--- /dev/null
+++ b/packages/core/test/services/schema/helpers.test.ts
@@ -0,0 +1,195 @@
+import { describe, expect, it } from "vite-plus/test";
+import { Effect } from "effect";
+
+import {
+  type SchemaProjection,
+  computeSchemaVersion,
+  mapDbProviderIdToSchemaProviderId,
+} from "../../../src/services/schema/helpers.ts";
+
+/**
+ * Fresh, fully-populated projection builder. Returns a new object every call so
+ * no test can mutate shared state; pass `overrides` to perturb one dimension.
+ */
+const projection = (overrides: Partial<SchemaProjection> = {}): SchemaProjection => ({
+  perks: [
+    { slug: "z-perk", name: "Z Perk" },
+    { slug: "a-perk", name: "A Perk" },
+  ],
+  locations: [
+    { slug: "b-loc", name: "B Loc", description: "desc-b" },
+    { slug: "a-loc", name: "A Loc", description: null },
+  ],
+  products: [
+    {
+      slug: "pro",
+      name: "Pro",
+      type: "subscription",
+      perks: ["z-perk", "a-perk"],
+      providers: [
+        { providerId: "googlePlay", configuration: { sku: "g" } },
+        { providerId: "appleAppStore", configuration: { sku: "a" } },
+      ],
+    },
+    {
+      slug: "basic",
+      name: "Basic",
+      type: "subscription",
+      perks: ["a-perk"],
+      providers: [],
+    },
+  ],
+  enabledProviders: ["appleAppStore", "googlePlay"],
+  ...overrides,
+});
+
+const empty = (): SchemaProjection => ({
+  perks: [],
+  locations: [],
+  products: [],
+  enabledProviders: [],
+});
+
+// Known-good vectors, computed against the same canonical serialization the CLI
+// (`apps/cli/src/utils/schema/version.ts`) uses. These pin the byte-level
+// contract: if the field/sort order ever drifts from the CLI, these break.
+const EMPTY_HASH = "sha256:3f90ef2a787d32c6dfe6a60ffe6e9aed5dfc614bc6e26d0d433cc64b9a0acbc5";
+const POPULATED_HASH = "sha256:5f6001dfe6a80394f6a724810d3b5bcf1c294b1631b9c5fb4796e8e61206e981";
+
+describe("mapDbProviderIdToSchemaProviderId", () => {
+  it("maps 'apple-app-store' to 'appleAppStore'", () => {
+    expect(mapDbProviderIdToSchemaProviderId("apple-app-store")).toBe("appleAppStore");
+  });
+
+  it("maps 'google-play' to 'googlePlay'", () => {
+    expect(mapDbProviderIdToSchemaProviderId("google-play")).toBe("googlePlay");
+  });
+
+  it("returns null for 'stripe' (not surfaced by the schema contract yet)", () => {
+    expect(mapDbProviderIdToSchemaProviderId("stripe")).toBeNull();
+  });
+
+  it.each(["", "appleAppStore", "Apple-App-Store", "unknown-provider", "google_play"])(
+    "returns null for unknown provider id %o",
+    (dbProviderId) => {
+      expect(mapDbProviderIdToSchemaProviderId(dbProviderId)).toBeNull();
+    },
+  );
+});
+
+describe("computeSchemaVersion", () => {
+  it("returns a sha256:<hex> hash matching the canonical empty-projection vector", async () => {
+    const version = await Effect.runPromise(computeSchemaVersion(empty()));
+    expect(version).toBe(EMPTY_HASH);
+    expect(version).toMatch(/^sha256:[0-9a-f]{64}$/);
+  });
+
+  it("returns the canonical vector for a populated projection (CLI byte-for-byte)", async () => {
+    const version = await Effect.runPromise(computeSchemaVersion(projection()));
+    expect(version).toBe(POPULATED_HASH);
+  });
+
+  it("is deterministic: same projection → same hash", async () => {
+    const a = await Effect.runPromise(computeSchemaVersion(projection()));
+    const b = await Effect.runPromise(computeSchemaVersion(projection()));
+    expect(a).toBe(b);
+  });
+
+  it("changes when products change", async () => {
+    const base = await Effect.runPromise(computeSchemaVersion(projection()));
+    const changed = await Effect.runPromise(
+      computeSchemaVersion(
+        projection({
+          products: [
+            {
+              slug: "pro",
+              name: "Pro Renamed",
+              type: "subscription",
+              perks: ["a-perk"],
+              providers: [],
+            },
+          ],
+        }),
+      ),
+    );
+    expect(changed).not.toBe(base);
+  });
+
+  it("changes when perks change", async () => {
+    const base = await Effect.runPromise(computeSchemaVersion(projection()));
+    const changed = await Effect.runPromise(
+      computeSchemaVersion(
+        projection({
+          perks: [
+            { slug: "a-perk", name: "A Perk" },
+            { slug: "z-perk", name: "Z Perk Renamed" },
+          ],
+        }),
+      ),
+    );
+    expect(changed).not.toBe(base);
+  });
+
+  it("changes when locations change", async () => {
+    const base = await Effect.runPromise(computeSchemaVersion(projection()));
+    const changed = await Effect.runPromise(
+      computeSchemaVersion(
+        projection({
+          locations: [{ slug: "a-loc", name: "A Loc Renamed", description: null }],
+        }),
+      ),
+    );
+    expect(changed).not.toBe(base);
+  });
+
+  it("is order-independent: products, perks, locations, perk slugs and providers are sorted before hashing", async () => {
+    const ordered = projection({
+      perks: [
+        { slug: "a-perk", name: "A Perk" },
+        { slug: "z-perk", name: "Z Perk" },
+      ],
+      locations: [
+        { slug: "a-loc", name: "A Loc", description: null },
+        { slug: "b-loc", name: "B Loc", description: "desc-b" },
+      ],
+      products: [
+        {
+          slug: "basic",
+          name: "Basic",
+          type: "subscription",
+          perks: ["a-perk"],
+          providers: [],
+        },
+        {
+          slug: "pro",
+          name: "Pro",
+          type: "subscription",
+          perks: ["a-perk", "z-perk"],
+          providers: [
+            { providerId: "appleAppStore", configuration: { sku: "a" } },
+            { providerId: "googlePlay", configuration: { sku: "g" } },
+          ],
+        },
+      ],
+    });
+    // `projection()` supplies the same content but with products, perks,
+    // locations, perk slugs and providers all in the opposite order.
+    const shuffled = await Effect.runPromise(computeSchemaVersion(projection()));
+    const sorted = await Effect.runPromise(computeSchemaVersion(ordered));
+    expect(shuffled).toBe(sorted);
+    expect(sorted).toBe(POPULATED_HASH);
+  });
+
+  it("ignores enabledProviders — it is not part of the hashed payload", async () => {
+    const withProviders = await Effect.runPromise(computeSchemaVersion(projection()));
+    const withoutProviders = await Effect.runPromise(
+      computeSchemaVersion(projection({ enabledProviders: [] })),
+    );
+    expect(withoutProviders).toBe(withProviders);
+  });
+
+  it("handles empty product/perk/location/provider arrays", async () => {
+    const version = await Effect.runPromise(computeSchemaVersion(empty()));
+    expect(version).toBe(EMPTY_HASH);
+  });
+});
diff --git a/packages/core/test/services/sdk/SdkService.integration.test.ts b/packages/core/test/services/sdk/SdkService.integration.test.ts
new file mode 100644
index 000000000..d5063bdbd
--- /dev/null
+++ b/packages/core/test/services/sdk/SdkService.integration.test.ts
@@ -0,0 +1,995 @@
+/**
+ * Integration tests for {@link SdkService}, the orchestration hub for every
+ * public SDK route. They run against the real backend stack provisioned once by
+ * `test/_testing/globalSetup.ts` (live PlanetScale DB + ClickHouse + WorkOS;
+ * only the project schema cache is an in-memory stub).
+ *
+ * `SdkService` owns no domain logic — it composes `PersonIdentityService`,
+ * `PerkGrantService`, `PurchaseService`, `AppStorePaymentProviderService` and
+ * the pure snapshot-builder. So these tests provide each collaborator's *real*
+ * layer (all of which bottom out at harness services) plus two stubs for the
+ * abstract ports core never implements:
+ *  - `IdentityProjectionPublisher.noop` (analytics fan-out is a no-op here), and
+ *  - an inert {@link IdentifyDistinctIdCompletionWorkflow} (the durable
+ *    source-merge job is a Cloudflare Workflow with no in-process seam — we
+ *    only assert the *synchronous* identify transaction commits).
+ *  - `AppStorePaymentProviderService` is itself a stub tag in core (the Apple
+ *    REST client / reconcile workflows live in `internal/`), so its layer is
+ *    provided per-test to exercise both the success and failure branches of
+ *    `submitPurchaseTransaction`.
+ *
+ * Conventions mirror `PerkService.integration.test.ts`:
+ *  - The shared fixture project ({@link CoreTestFixture}) is reused; every test
+ *    seeds its own persons / identities under it and removes them on exit via
+ *    {@link withCleanup}. Distinct ids are namespaced + unique per call so a
+ *    leftover row from a crashed run can't collide, and assertions stay
+ *    membership-based.
+ *  - SDK callers authenticate with a `publishable-key` session
+ *    ({@link sdkSession}) carrying only `project:read`; the service elevates it
+ *    internally for the `project:all`-gated delegated reads. `authenticate`
+ *    comes only from {@link CoreAuthSession}.
+ *  - Typed failures are asserted with `Effect.flip` + `instanceof`, paired with
+ *    a DB-state assertion on the failure path.
+ */
+import { Effect, Layer } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import {
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseService,
+  SdkService,
+  SdkServiceError,
+} from "@voidhash/core/services";
+import {
+  type AppStoreSdkTransactionResult,
+  AppStorePaymentProviderService,
+  AppStorePaymentProviderServiceError,
+} from "@voidhash/core/services/paymentProviders/AppStorePaymentProviderService";
+import { GooglePlayPaymentProviderService } from "@voidhash/core/services/paymentProviders/GooglePlayPaymentProviderService";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import {
+  AuthenticationError,
+  type PublishableKeySession,
+} from "@voidhash/core/domain/auth/Auth";
+import {
+  SdkPersonNotFoundError,
+  SdkValidationError,
+} from "@voidhash/core/domain/sdkPerson/SdkPerson";
+import {
+  Db,
+  PersonIdentityKind,
+  PersonOrigin,
+  and,
+  eq,
+  inArray,
+  personIdentities,
+  personIdentityMigrationJobs,
+  persons,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so distinct ids stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueDistinctId = (label: string) => `it-sdk-${label}-${Date.now()}-${seq++}`;
+/** Anonymous distinct ids carry the SDK's `vh:anon:` prefix. */
+const uniqueAnonId = (label: string) => `vh:anon:${uniqueDistinctId(label)}`;
+
+// =============================================================================
+// Collaborator wiring
+// =============================================================================
+
+/**
+ * Inert {@link IdentifyDistinctIdCompletionWorkflow}: the real adapter is a
+ * Cloudflare Workflow with no in-process runtime, so dispatch is a no-op. The
+ * synchronous identify transaction (the part under test) commits regardless.
+ */
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+/**
+ * `AppStorePaymentProviderService` stub. The real Apple-backed implementation
+ * lives in `internal/` and needs a signed JWS payload + REST client we don't
+ * have in-process, so the boundary is faked at the tag level (core ships only
+ * the abstract tag). `result` lets a test return a `personId` or fail with the
+ * service's catch-all error.
+ */
+const appStoreStub = (
+  result: () => Effect.Effect<AppStoreSdkTransactionResult, AppStorePaymentProviderServiceError>,
+) =>
+  Layer.succeed(AppStorePaymentProviderService, {
+    acceptServerNotification: () =>
+      Effect.die(new Error("acceptServerNotification not used in SdkService tests")),
+    processSdkTransaction: result,
+  });
+
+/**
+ * Full layer the SdkService-under-test needs: the service itself plus every
+ * real collaborator (each bottoms out at harness `Db`/`AuthSession`) and the
+ * two stubs. `IdentifyDistinctIdCompletionWorkflow` is resolved *inside*
+ * `PersonIdentityService.identifyDistinctId` at call time, so it surfaces as a
+ * method-level requirement of `SdkService` — it must be in the output layer
+ * (via `provideMerge`), not merely fed into `PersonIdentityService.layer`.
+ * `AppStorePaymentProviderService` is layered in per-test.
+ */
+/**
+ * `GooglePlayPaymentProviderService` stub. SdkService now resolves this tag on
+ * the Android purchase-submission path; these tests only exercise the Apple
+ * path, so the stub dies if invoked.
+ */
+const googlePlayStub = Layer.succeed(GooglePlayPaymentProviderService, {
+  acceptRtdnNotification: () =>
+    Effect.die(new Error("acceptRtdnNotification not used in SdkService tests")),
+  processSdkTransaction: () =>
+    Effect.die(new Error("Google Play stub must not be called in these tests")),
+});
+
+const sdkLayer = (appStore: Layer.Layer<AppStorePaymentProviderService>) =>
+  SdkService.layer.pipe(
+    Layer.provideMerge(
+      Layer.mergeAll(
+        PerkGrantService.layer,
+        PurchaseService.layer,
+        PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
+        // SdkService itself now resolves the publisher (for the synchronous
+        // person-attribute ClickHouse projection); tests use the no-op.
+        IdentityProjectionPublisher.noop,
+        appStore,
+        googlePlayStub,
+        CompletionWorkflowStub,
+      ),
+    ),
+  );
+
+/** SdkService layer with an App Store stub that should never be invoked. */
+const sdkLayerNoAppStore = sdkLayer(
+  appStoreStub(() => Effect.die(new Error("App Store stub must not be called"))),
+);
+
+// =============================================================================
+// Auth sessions
+// =============================================================================
+
+/**
+ * Realistic SDK principal: a `publishable-key` session bound to one distinct id
+ * and carrying only `project:read` for the fixture project — exactly what
+ * `bridgeAuthSession` hands `SdkService` upstream. The service elevates this to
+ * `project:all` internally for the delegated reads.
+ */
+const sdkSession = (distinctId: string): PublishableKeySession => ({
+  cookie: null,
+  method: "publishable-key",
+  name: "Integration SDK Client",
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:read"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: { distinctId },
+  projects: [
+    {
+      id: CoreTestFixture.projectId,
+      logo: null,
+      name: CoreTestFixture.projectName,
+      organizationId: CoreTestFixture.organizationId,
+      permissions: ["project:read"],
+      slug: CoreTestFixture.projectSlug,
+    },
+  ],
+  user: null,
+});
+
+/** SDK session with a distinct id but no project granted — the no-access path. */
+const sdkSessionWithoutProjectAccess = (distinctId: string): PublishableKeySession => ({
+  ...sdkSession(distinctId),
+  organizations: [],
+  projects: [],
+});
+
+// =============================================================================
+// Direct DB seed / read helpers (bypass the service)
+// =============================================================================
+
+/** Insert a person row under the fixture project; returns its id. */
+const insertPerson = (
+  id: string,
+  overrides: { readonly email?: string | null; readonly name?: string | null } = {},
+) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(persons).values({
+      email: overrides.email ?? null,
+      id,
+      name: overrides.name ?? null,
+      origin: PersonOrigin.API,
+      projectId,
+    });
+    return id;
+  });
+
+/** Map a distinct id to a person (anonymous or identified) under the project. */
+const insertIdentity = (input: {
+  readonly id: string;
+  readonly distinctId: string;
+  readonly personId: string;
+  readonly kind: number;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    yield* db.insert(personIdentities).values({
+      distinctId: input.distinctId,
+      id: input.id,
+      kind: input.kind,
+      personId: input.personId,
+      projectId,
+    });
+  });
+
+/** Read a person identity row back by project + distinct id. */
+const findIdentityRow = (distinctId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.personIdentities.findFirst({
+      where: { projectId, distinctId },
+    });
+  });
+
+/** Read a person row back by id. */
+const findPersonRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.persons.findFirst({ where: { id } });
+  });
+
+// =============================================================================
+// Cleanup
+// =============================================================================
+
+/**
+ * Wrap a test body so every person / identity it creates (directly or via the
+ * service) is removed afterward, regardless of how the test exits. The body
+ * tracks created person ids and the distinct ids it touched; the finalizer
+ * deletes identities by distinct id, migration jobs by target person, then the
+ * persons themselves (FK-dependents first), each `ignore`d so a missing row
+ * never turns cleanup into a failure.
+ */
+const withCleanup = <E, R>(
+  body: (track: {
+    person: (id: string) => void;
+    distinctId: (id: string) => void;
+  }) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const personIds = new Set<string>();
+  const distinctIds: string[] = [];
+  const cleanup = Effect.gen(function* () {
+    const db = yield* Db;
+    // The identify / sync flows mint persons whose ids the test never sees
+    // directly; discover them from the identity rows of the distinct ids it
+    // touched, so cleanup catches every person the service created too.
+    if (distinctIds.length > 0) {
+      const rows = yield* db
+        .select({ personId: personIdentities.personId })
+        .from(personIdentities)
+        .where(
+          and(
+            eq(personIdentities.projectId, projectId),
+            inArray(personIdentities.distinctId, distinctIds),
+          ),
+        )
+        .pipe(Effect.orElseSucceed(() => [] as ReadonlyArray<{ personId: string }>));
+      for (const row of rows) {
+        personIds.add(row.personId);
+      }
+      yield* db
+        .delete(personIdentities)
+        .where(
+          and(
+            eq(personIdentities.projectId, projectId),
+            inArray(personIdentities.distinctId, distinctIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+    }
+    const ids = [...personIds];
+    if (ids.length > 0) {
+      yield* db
+        .delete(personIdentityMigrationJobs)
+        .where(inArray(personIdentityMigrationJobs.targetPersonId, ids))
+        .pipe(Effect.ignore);
+      // Identity rows the service created against these persons, then the
+      // persons themselves (FK-dependents first).
+      yield* db
+        .delete(personIdentities)
+        .where(inArray(personIdentities.personId, ids))
+        .pipe(Effect.ignore);
+      yield* db.delete(persons).where(inArray(persons.id, ids)).pipe(Effect.ignore);
+    }
+  });
+  return body({
+    distinctId: (id) => {
+      distinctIds.push(id);
+    },
+    person: (id) => {
+      personIds.add(id);
+    },
+  }).pipe(Effect.ensuring(cleanup));
+};
+
+// =============================================================================
+// getPerson
+// =============================================================================
+
+describe("SdkService.getPerson", () => {
+  // `getPerson` looks up the canonical person by the *session's* distinct id
+  // (`session.person.distinctId`), so the seeded identity mapping and the
+  // authenticated session must share one distinct id. Capture it (and the
+  // derived person ids) once, outside the lazy test body, so the eagerly-built
+  // `sdkSession(...)` in the `.pipe()` and the in-body seed agree.
+  const getHappyDistinctId = uniqueDistinctId("get-happy");
+  const getHappyPersonId = `person_${getHappyDistinctId}`;
+
+  test(
+    "returns a snapshot for the canonical person mapped to the session distinct id",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        track.person(getHappyPersonId);
+        track.distinctId(getHappyDistinctId);
+
+        yield* insertPerson(getHappyPersonId, { email: "get@voidhash.test", name: "Getter" });
+        yield* insertIdentity({
+          distinctId: getHappyDistinctId,
+          id: `person_dist_${getHappyDistinctId}`,
+          kind: PersonIdentityKind.Identified,
+          personId: getHappyPersonId,
+        });
+
+        const snapshot = yield* sdk.getPerson();
+        expect(snapshot.personId).toBe(getHappyPersonId);
+        expect(snapshot.distinctId).toBe(getHappyDistinctId);
+        expect(snapshot.email).toBe("get@voidhash.test");
+        expect(snapshot.name).toBe("Getter");
+        // No subscriptions / purchases / grants seeded → empty histories.
+        expect(snapshot.subscriptions.history.length).toBe(0);
+        expect(snapshot.purchases.history.length).toBe(0);
+        expect(snapshot.entitlements.grants.length).toBe(0);
+        expect(snapshot.snapshotContext.mode).toBe("persisted");
+        expect(snapshot.snapshotContext.includedPersonIds).toContain(getHappyPersonId);
+      }),
+    ).pipe(Effect.provide(sdkLayerNoAppStore), (effect) =>
+      CoreAuthSession.authenticate(sdkSession(getHappyDistinctId))(effect),
+    ),
+  );
+
+  const getMergeDistinctId = uniqueDistinctId("get-merge");
+  const getMergeOldPersonId = `person_old_${getMergeDistinctId}`;
+  const getMergeSurvivorPersonId = `person_new_${getMergeDistinctId}`;
+
+  test(
+    "follows merged-into chains to the surviving canonical person",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        track.person(getMergeOldPersonId);
+        track.person(getMergeSurvivorPersonId);
+        track.distinctId(getMergeDistinctId);
+
+        yield* insertPerson(getMergeSurvivorPersonId, { name: "Survivor" });
+        yield* insertPerson(getMergeOldPersonId, { name: "Merged Away" });
+        // Point the old person at the survivor and map the distinct id to the old one.
+        const db = yield* Db;
+        yield* db
+          .update(persons)
+          .set({ mergedIntoPersonId: getMergeSurvivorPersonId })
+          .where(eq(persons.id, getMergeOldPersonId));
+        yield* insertIdentity({
+          distinctId: getMergeDistinctId,
+          id: `person_dist_${getMergeDistinctId}`,
+          kind: PersonIdentityKind.Identified,
+          personId: getMergeOldPersonId,
+        });
+
+        const snapshot = yield* sdk.getPerson();
+        expect(snapshot.personId).toBe(getMergeSurvivorPersonId);
+        expect(snapshot.name).toBe("Survivor");
+      }),
+    ).pipe(Effect.provide(sdkLayerNoAppStore), (effect) =>
+      CoreAuthSession.authenticate(sdkSession(getMergeDistinctId))(effect),
+    ),
+  );
+
+  test(
+    "fails with SdkValidationError when the session carries no distinct id",
+    // A `user` session has `person: null`, so no distinct id is present.
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(sdk.getPerson());
+      expect(error).toBeInstanceOf(SdkValidationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      // Default fixture session is a `user` session (person: null).
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with AuthenticationError when the session grants no project",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(sdk.getPerson());
+      expect(error).toBeInstanceOf(AuthenticationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(
+        sdkSessionWithoutProjectAccess(uniqueDistinctId("get-noaccess")),
+      ),
+    ),
+  );
+
+  test(
+    "fails with SdkPersonNotFoundError when no person is mapped to the distinct id",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(sdk.getPerson());
+      expect(error).toBeInstanceOf(SdkPersonNotFoundError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(uniqueDistinctId("get-missing"))),
+    ),
+  );
+});
+
+// =============================================================================
+// identifyPerson
+// =============================================================================
+
+describe("SdkService.identifyPerson", () => {
+  // The session's distinct id IS the (anonymous) source `previousDistinctId`
+  // that identify promotes — captured outside so the session and assertions
+  // share the same value.
+  const anonSourceDistinctId = uniqueAnonId("identify-src");
+  const identifyTargetDistinctId = uniqueDistinctId("identify-dst");
+
+  test(
+    "promotes an anonymous source to a new identified distinct id and persists the mapping",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        track.distinctId(anonSourceDistinctId);
+        track.distinctId(identifyTargetDistinctId);
+
+        // identifyDistinctId lazily mints the canonical person for the target
+        // (and the source) — no pre-seed needed.
+        const snapshot = yield* sdk.identifyPerson({
+          distinctId: identifyTargetDistinctId,
+          email: "identified@voidhash.test",
+          name: "Identified",
+          traits: { plan: "pro" },
+        });
+        track.person(snapshot.personId);
+
+        expect(snapshot.distinctId).toBe(identifyTargetDistinctId);
+        expect(snapshot.personId.startsWith("person_")).toBe(true);
+
+        // The identify wrote a target identity mapping for the new distinct id.
+        const targetIdentity = yield* findIdentityRow(identifyTargetDistinctId);
+        expect(targetIdentity).toBeDefined();
+        expect(targetIdentity?.personId).toBe(snapshot.personId);
+        expect(targetIdentity?.kind).toBe(PersonIdentityKind.Identified);
+
+        // The anonymous source distinct id was re-parented onto the surviving
+        // person synchronously in the identify transaction (no async migration
+        // job in the order-agnostic design).
+        const sourceIdentity = yield* findIdentityRow(anonSourceDistinctId);
+        expect(sourceIdentity).toBeDefined();
+        expect(sourceIdentity?.personId).toBe(snapshot.personId);
+      }),
+    ).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(anonSourceDistinctId)),
+    ),
+  );
+
+  test(
+    "is a no-op returning the target snapshot when the source is already identified",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        // Source session distinct id is identified (non-anonymous) and target
+        // already exists → already-identified no-op returning the target snapshot.
+        const targetDistinctId = uniqueDistinctId("identify-existing");
+        const targetPersonId = `person_${targetDistinctId}`;
+        track.person(targetPersonId);
+        track.distinctId(targetDistinctId);
+        yield* insertPerson(targetPersonId, { name: "Existing Target" });
+        yield* insertIdentity({
+          distinctId: targetDistinctId,
+          id: `person_dist_${targetDistinctId}`,
+          kind: PersonIdentityKind.Identified,
+          personId: targetPersonId,
+        });
+
+        const snapshot = yield* sdk.identifyPerson({
+          distinctId: targetDistinctId,
+          email: null,
+          name: null,
+        });
+        expect(snapshot.personId).toBe(targetPersonId);
+        expect(snapshot.distinctId).toBe(targetDistinctId);
+      }),
+    ).pipe(
+      // Session distinct id is non-anonymous → "already identified" branch.
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(uniqueDistinctId("identify-existing-src"))),
+    ),
+  );
+
+  test(
+    "fails with SdkPersonNotFoundError when an identified source targets an unknown distinct id",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.identifyPerson({
+          distinctId: uniqueDistinctId("identify-unknown-target"),
+          email: null,
+          name: null,
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkPersonNotFoundError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      // Non-anonymous session distinct id with an unmapped target.
+      CoreAuthSession.authenticate(sdkSession(`it-sdk-identify-srcid-${Date.now()}-z`)),
+    ),
+  );
+
+  test(
+    "fails with SdkValidationError when the identify target uses the anonymous prefix",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.identifyPerson({
+          distinctId: uniqueAnonId("identify-bad-target"),
+          email: null,
+          name: null,
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkValidationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      // Anonymous session source so we reach the target-prefix validation.
+      CoreAuthSession.authenticate(sdkSession(uniqueAnonId("identify-src2"))),
+    ),
+  );
+
+  test(
+    "fails with AuthenticationError when the session grants no project",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.identifyPerson({
+          distinctId: uniqueDistinctId("identify-noaccess-target"),
+          email: null,
+          name: null,
+        }),
+      );
+      expect(error).toBeInstanceOf(AuthenticationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(
+        sdkSessionWithoutProjectAccess(uniqueAnonId("identify-noaccess")),
+      ),
+    ),
+  );
+
+  vitestTest.todo(
+    "identifyPerson: conflicting-identified warning from PersonIdentityService maps to SdkPersonAlreadyIdentifiedError — deferred: reproducing the 'different identified person' warning requires seeding a previousDistinctId already mapped to a *second* identified person and racing the identify transaction; the precise warning text is an internal contract of PersonIdentityService / IdentityMutationService better asserted in a PersonIdentityService integration test, then exercised end-to-end here once that seam is stable.",
+  );
+
+  vitestTest.todo(
+    "identifyPerson: delegated PerkGrantService/PurchaseService failure is caught and wrapped in SdkServiceError — deferred: the collaborators run against the real DB and cannot be made to fail without a hand-rolled fault-injecting double (forbidden at the integration tier); the catchTags wrapping is covered structurally and would need a unit-level fault layer to assert.",
+  );
+});
+
+// =============================================================================
+// syncPersonAttributes
+// =============================================================================
+
+const personMetadata = (distinctId: string) => ({
+  clientBundleId: "com.voidhash.test",
+  distinctId,
+  isBackgrounded: "false" as const,
+  isDebugBuild: "false" as const,
+  observerMode: "false" as const,
+  platform: "ios",
+  platformFlavor: "native" as const,
+  publishableKey: "pk_test",
+  sdk: "react-native" as const,
+  sdkVersion: "1.0.0",
+});
+
+describe("SdkService.syncPersonAttributes", () => {
+  // `syncPersonAttributes` resolves the *session's* distinct id (the metadata
+  // distinct id is informational), so the session and the asserted id match.
+  const syncAnonDistinctId = uniqueAnonId("sync-anon");
+
+  test(
+    "resolves an anonymous person, persists the identity, and returns a snapshot + identity result",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        track.distinctId(syncAnonDistinctId);
+
+        const result = yield* sdk.syncPersonAttributes({
+          email: "sync@voidhash.test",
+          name: "Synced",
+          personMetadata: personMetadata(syncAnonDistinctId),
+          traits: { tier: "gold" },
+        });
+        track.person(result.snapshot.personId);
+
+        expect(result.snapshot.distinctId).toBe(syncAnonDistinctId);
+        expect(result.identityResult.identity.distinctId).toBe(syncAnonDistinctId);
+        expect(result.identityResult.identity.personId).toBe(result.snapshot.personId);
+
+        // resolveDistinctId(shouldCreatePerson: true) wrote an identity mapping.
+        const identity = yield* findIdentityRow(syncAnonDistinctId);
+        expect(identity).toBeDefined();
+        expect(identity?.personId).toBe(result.snapshot.personId);
+
+        // Platform metadata merged into the new person's traits.
+        const personRow = yield* findPersonRow(result.snapshot.personId);
+        expect(personRow).toBeDefined();
+        expect((personRow?.traits as Record<string, unknown> | null)?.platform).toBe("ios");
+        expect((personRow?.traits as Record<string, unknown> | null)?.tier).toBe("gold");
+      }),
+    ).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(syncAnonDistinctId)),
+    ),
+  );
+
+  const syncIdentifiedDistinctId = uniqueDistinctId("sync-identified");
+  const syncIdentifiedPersonId = `person_${syncIdentifiedDistinctId}`;
+
+  test(
+    "syncs an existing identified person and returns the updated snapshot",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        track.person(syncIdentifiedPersonId);
+        track.distinctId(syncIdentifiedDistinctId);
+        yield* insertPerson(syncIdentifiedPersonId, { name: "Before Sync" });
+        yield* insertIdentity({
+          distinctId: syncIdentifiedDistinctId,
+          id: `person_dist_${syncIdentifiedDistinctId}`,
+          kind: PersonIdentityKind.Identified,
+          personId: syncIdentifiedPersonId,
+        });
+
+        const result = yield* sdk.syncPersonAttributes({
+          name: "After Sync",
+          personMetadata: personMetadata(syncIdentifiedDistinctId),
+          traits: { device: "phone" },
+        });
+        expect(result.snapshot.personId).toBe(syncIdentifiedPersonId);
+        expect(result.snapshot.distinctId).toBe(syncIdentifiedDistinctId);
+
+        const personRow = yield* findPersonRow(syncIdentifiedPersonId);
+        expect((personRow?.traits as Record<string, unknown> | null)?.device).toBe("phone");
+      }),
+    ).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(syncIdentifiedDistinctId)),
+    ),
+  );
+
+  test(
+    "fails with SdkPersonNotFoundError when an identified distinct id has no person",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const distinctId = uniqueDistinctId("sync-unknown");
+      const error = yield* Effect.flip(
+        sdk.syncPersonAttributes({
+          personMetadata: personMetadata(distinctId),
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkPersonNotFoundError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(`it-sdk-sync-unknown-${Date.now()}-v`)),
+    ),
+  );
+
+  test(
+    "fails with SdkValidationError when the session carries no distinct id",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.syncPersonAttributes({
+          personMetadata: personMetadata(uniqueDistinctId("sync-nodistinct")),
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkValidationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      // `user` session → person: null.
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with AuthenticationError when the session grants no project",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const distinctId = uniqueAnonId("sync-noaccess");
+      const error = yield* Effect.flip(
+        sdk.syncPersonAttributes({
+          personMetadata: personMetadata(distinctId),
+        }),
+      );
+      expect(error).toBeInstanceOf(AuthenticationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSessionWithoutProjectAccess(uniqueAnonId("sync-noaccess"))),
+    ),
+  );
+
+  // Person-on-demand: an empty payload (as the removed init-time auto-sync used
+  // to send) must NOT materialize a person and must surface a clean validation
+  // error rather than dying or creating an empty row.
+  const syncEmptyAnonId = uniqueAnonId("sync-empty");
+  test(
+    "fails with SdkValidationError and creates no person for an empty payload on an anonymous id",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        track.distinctId(syncEmptyAnonId);
+        const error = yield* Effect.flip(
+          sdk.syncPersonAttributes({ personMetadata: personMetadata(syncEmptyAnonId) }),
+        );
+        expect(error).toBeInstanceOf(SdkValidationError);
+        const identity = yield* findIdentityRow(syncEmptyAnonId);
+        expect(identity?.personId ?? null).toBeNull();
+      }),
+    ).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(syncEmptyAnonId)),
+    ),
+  );
+
+  // `$set_once` is earliest-wins: a later sync for the same key must not win.
+  const syncSetOnceAnonId = uniqueAnonId("sync-setonce");
+  test(
+    "applies setOnce attributes with earliest-wins semantics",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        const sdk = yield* SdkService;
+        track.distinctId(syncSetOnceAnonId);
+        const first = yield* sdk.syncPersonAttributes({
+          personMetadata: personMetadata(syncSetOnceAnonId),
+          setOnce: { signupSource: "organic" },
+        });
+        track.person(first.snapshot.personId);
+        yield* sdk.syncPersonAttributes({
+          personMetadata: personMetadata(syncSetOnceAnonId),
+          setOnce: { signupSource: "paid" },
+        });
+        const personRow = yield* findPersonRow(first.snapshot.personId);
+        expect((personRow?.traits as Record<string, unknown> | null)?.signupSource).toBe("organic");
+      }),
+    ).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(syncSetOnceAnonId)),
+    ),
+  );
+});
+
+// =============================================================================
+// submitPurchaseTransaction
+// =============================================================================
+
+describe("SdkService.submitPurchaseTransaction", () => {
+  // Capture a stable id graph once so the App Store stub and the seeded rows
+  // agree without depending on mutation order of the `seq` counter.
+  const submitDistinctId = uniqueDistinctId("submit-apple");
+  const submitPersonId = `person_submit_${submitDistinctId}`;
+
+  test(
+    "submits a valid Apple transaction and returns the resulting person snapshot",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        track.person(submitPersonId);
+        track.distinctId(submitDistinctId);
+        yield* insertPerson(submitPersonId, { name: "Buyer" });
+        yield* insertIdentity({
+          distinctId: submitDistinctId,
+          id: `person_dist_${submitDistinctId}`,
+          kind: PersonIdentityKind.Identified,
+          personId: submitPersonId,
+        });
+
+        const sdk = yield* SdkService;
+        const snapshot = yield* sdk.submitPurchaseTransaction({
+          bundleId: "com.voidhash.test",
+          providerId: "apple-app-store",
+          transactionId: "tx_123",
+        });
+        expect(snapshot.personId).toBe(submitPersonId);
+        expect(snapshot.distinctId).toBe(submitDistinctId);
+      }),
+    ).pipe(
+      // App Store stub resolves to the seeded person id.
+      Effect.provide(sdkLayer(appStoreStub(() => Effect.succeed({ personId: submitPersonId })))),
+      CoreAuthSession.authenticate(sdkSession(submitDistinctId)),
+    ),
+  );
+
+  // Capture a stable id graph for the Google Play delegation test so the stub
+  // and the seeded rows agree.
+  const submitGoogleDistinctId = uniqueDistinctId("submit-google");
+  const submitGooglePersonId = `person_submit_google_${submitGoogleDistinctId}`;
+
+  test(
+    "submits a valid Google Play transaction and returns the resulting person snapshot",
+    withCleanup((track) =>
+      Effect.gen(function* () {
+        track.person(submitGooglePersonId);
+        track.distinctId(submitGoogleDistinctId);
+        yield* insertPerson(submitGooglePersonId, { name: "Android Buyer" });
+        yield* insertIdentity({
+          distinctId: submitGoogleDistinctId,
+          id: `person_dist_${submitGoogleDistinctId}`,
+          kind: PersonIdentityKind.Identified,
+          personId: submitGooglePersonId,
+        });
+
+        const sdk = yield* SdkService;
+        const snapshot = yield* sdk.submitPurchaseTransaction({
+          packageName: "com.voidhash.test",
+          providerId: "google-play",
+          purchaseToken: "token_123",
+        });
+        expect(snapshot.personId).toBe(submitGooglePersonId);
+        expect(snapshot.distinctId).toBe(submitGoogleDistinctId);
+      }),
+    ).pipe(
+      // Google Play stub resolves to the seeded person id; App Store stub must
+      // not be called on the Android path.
+      Effect.provide(
+        SdkService.layer.pipe(
+          Layer.provideMerge(
+            Layer.mergeAll(
+              PerkGrantService.layer,
+              PurchaseService.layer,
+              PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
+              IdentityProjectionPublisher.noop,
+              appStoreStub(() => Effect.die(new Error("App Store stub must not be called"))),
+              Layer.succeed(GooglePlayPaymentProviderService, {
+                acceptRtdnNotification: () =>
+                  Effect.die(new Error("acceptRtdnNotification not used in SdkService tests")),
+                processSdkTransaction: () => Effect.succeed({ personId: submitGooglePersonId }),
+              }),
+              CompletionWorkflowStub,
+            ),
+          ),
+        ),
+      ),
+      CoreAuthSession.authenticate(sdkSession(submitGoogleDistinctId)),
+    ),
+  );
+
+  test(
+    "fails with SdkValidationError when a Google Play submission omits purchaseToken or packageName",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.submitPurchaseTransaction({
+          packageName: "com.voidhash.test",
+          providerId: "google-play",
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkValidationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(uniqueDistinctId("submit-google-missing"))),
+    ),
+  );
+
+  test(
+    "fails with SdkValidationError when transactionId or bundleId is missing",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.submitPurchaseTransaction({
+          providerId: "apple-app-store",
+          transactionId: "tx_only",
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkValidationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(sdkSession(uniqueDistinctId("submit-missing"))),
+    ),
+  );
+
+  test(
+    "fails with SdkValidationError when the session carries no distinct id",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.submitPurchaseTransaction({
+          bundleId: "com.voidhash.test",
+          providerId: "apple-app-store",
+          transactionId: "tx_123",
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkValidationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      // `user` session → person: null.
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "fails with AuthenticationError when the session grants no project",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.submitPurchaseTransaction({
+          bundleId: "com.voidhash.test",
+          providerId: "apple-app-store",
+          transactionId: "tx_123",
+        }),
+      );
+      expect(error).toBeInstanceOf(AuthenticationError);
+    }).pipe(
+      Effect.provide(sdkLayerNoAppStore),
+      CoreAuthSession.authenticate(
+        sdkSessionWithoutProjectAccess(uniqueDistinctId("submit-noaccess")),
+      ),
+    ),
+  );
+
+  test(
+    "wraps an AppStorePaymentProviderService failure in SdkServiceError",
+    Effect.gen(function* () {
+      const sdk = yield* SdkService;
+      const error = yield* Effect.flip(
+        sdk.submitPurchaseTransaction({
+          bundleId: "com.voidhash.test",
+          providerId: "apple-app-store",
+          transactionId: "tx_boom",
+        }),
+      );
+      expect(error).toBeInstanceOf(SdkServiceError);
+      if (error instanceof SdkServiceError) {
+        expect(error.cause).toContain("apple boom");
+      }
+    }).pipe(
+      Effect.provide(
+        sdkLayer(
+          appStoreStub(() =>
+            Effect.fail(new AppStorePaymentProviderServiceError({ cause: "apple boom" })),
+          ),
+        ),
+      ),
+      CoreAuthSession.authenticate(sdkSession(uniqueDistinctId("submit-fail"))),
+    ),
+  );
+});
diff --git a/packages/core/test/services/sdk/elevate-auth.test.ts b/packages/core/test/services/sdk/elevate-auth.test.ts
new file mode 100644
index 000000000..ddcf9bd4b
--- /dev/null
+++ b/packages/core/test/services/sdk/elevate-auth.test.ts
@@ -0,0 +1,183 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import type { AnyAuthSession, PublishableKeySession } from "../../../src/domain/auth/Auth.ts";
+import { elevateProjectAccess } from "../../../src/services/sdk/elevate-auth.ts";
+
+const ELEVATED_PERMISSION = "project:all";
+
+type SessionProject = AnyAuthSession["projects"][number];
+
+/** Fresh, per-test project fixture under the `it_org` organization. */
+const project = (
+  id: string,
+  permissions: ReadonlyArray<string> = ["project:read"],
+): SessionProject => ({
+  id,
+  logo: null,
+  name: `name-${id}`,
+  organizationId: "org_1",
+  permissions: [...permissions],
+  slug: `slug-${id}`,
+});
+
+/**
+ * Fresh publishable-key session fixture — the realistic principal that
+ * `SdkService` elevates. Each call returns a brand-new object graph so tests
+ * never share mutable state.
+ */
+const publishableSession = (
+  projects: ReadonlyArray<SessionProject> = [project("proj_1")],
+): PublishableKeySession => ({
+  cookie: null,
+  method: "publishable-key",
+  name: "sdk-publishable",
+  organizations: [
+    {
+      id: "org_1",
+      logo: null,
+      name: "Org One",
+      permissions: ["organization:read"],
+      slug: "org-one",
+      workosOrganizationId: null,
+    },
+  ],
+  person: { distinctId: "person_1" },
+  projects: [...projects],
+  user: null,
+});
+
+describe("elevateProjectAccess", () => {
+  it("adds project:all permission to the matching project id", () => {
+    const session = publishableSession([project("proj_1", ["project:read"])]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    const target = elevated.projects.find((p) => p.id === "proj_1");
+    expect(target?.permissions).toContain(ELEVATED_PERMISSION);
+  });
+
+  it("does not mutate the input session", () => {
+    const session = publishableSession([project("proj_1", ["project:read"])]);
+    // Snapshot the permissions array reference + contents before elevation.
+    const originalProjects = session.projects;
+    const originalPerms = session.projects[0]?.permissions;
+    const originalPermsCopy = [...(originalPerms ?? [])];
+
+    elevateProjectAccess(session, "proj_1");
+
+    // The original arrays must be untouched (no in-place push / splice).
+    expect(session.projects).toBe(originalProjects);
+    expect(session.projects[0]?.permissions).toBe(originalPerms);
+    expect(session.projects[0]?.permissions).toEqual(originalPermsCopy);
+    expect(session.projects[0]?.permissions).not.toContain(ELEVATED_PERMISSION);
+  });
+
+  it("returns a new session object (not the same reference)", () => {
+    const session = publishableSession([project("proj_1")]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    expect(elevated).not.toBe(session);
+    expect(elevated.projects).not.toBe(session.projects);
+  });
+
+  it("survives a deeply frozen input (purely non-mutating)", () => {
+    const session = publishableSession([project("proj_1", ["project:read"])]);
+    Object.freeze(session);
+    Object.freeze(session.projects);
+    for (const p of session.projects) {
+      Object.freeze(p);
+      Object.freeze(p.permissions);
+    }
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    expect(elevated.projects.find((p) => p.id === "proj_1")?.permissions).toContain(
+      ELEVATED_PERMISSION,
+    );
+  });
+
+  it("preserves existing permissions on the matching project", () => {
+    const session = publishableSession([project("proj_1", ["project:read", "project:write"])]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    const target = elevated.projects.find((p) => p.id === "proj_1");
+    expect(target?.permissions).toEqual(["project:read", "project:write", ELEVATED_PERMISSION]);
+  });
+
+  it("ignores non-matching project ids", () => {
+    const session = publishableSession([project("proj_1", ["project:read"])]);
+
+    const elevated = elevateProjectAccess(session, "proj_does_not_exist");
+
+    const target = elevated.projects.find((p) => p.id === "proj_1");
+    expect(target?.permissions).toEqual(["project:read"]);
+    expect(target?.permissions).not.toContain(ELEVATED_PERMISSION);
+  });
+
+  it("does not add a duplicate project:all if already present", () => {
+    const session = publishableSession([project("proj_1", ["project:read", ELEVATED_PERMISSION])]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    const target = elevated.projects.find((p) => p.id === "proj_1");
+    expect(target?.permissions).toEqual(["project:read", ELEVATED_PERMISSION]);
+    expect(target?.permissions.filter((perm) => perm === ELEVATED_PERMISSION).length).toBe(1);
+  });
+
+  it("returns the same permissions array reference when already elevated (no needless copy)", () => {
+    const original = project("proj_1", ["project:read", ELEVATED_PERMISSION]);
+    const session = publishableSession([original]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    const target = elevated.projects.find((p) => p.id === "proj_1");
+    expect(target?.permissions).toBe(original.permissions);
+  });
+
+  it("handles an empty projects array", () => {
+    const session = publishableSession([]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    expect(elevated.projects).toEqual([]);
+  });
+
+  it("elevates only the target project among multiple projects", () => {
+    const session = publishableSession([
+      project("proj_1", ["project:read"]),
+      project("proj_2", ["project:read"]),
+      project("proj_3", ["project:read"]),
+    ]);
+
+    const elevated = elevateProjectAccess(session, "proj_2");
+
+    const byId = (id: string) => elevated.projects.find((p) => p.id === id);
+    expect(byId("proj_1")?.permissions).not.toContain(ELEVATED_PERMISSION);
+    expect(byId("proj_2")?.permissions).toContain(ELEVATED_PERMISSION);
+    expect(byId("proj_3")?.permissions).not.toContain(ELEVATED_PERMISSION);
+  });
+
+  it("preserves all other session fields unchanged", () => {
+    const session = publishableSession([project("proj_1")]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    expect(elevated.method).toBe(session.method);
+    expect(elevated.name).toBe(session.name);
+    expect(elevated.cookie).toBe(session.cookie);
+    expect(elevated.user).toBe(session.user);
+    expect(elevated.person).toBe(session.person);
+    expect(elevated.organizations).toBe(session.organizations);
+  });
+
+  it("leaves untouched projects as the same reference (only the target is copied)", () => {
+    const untouched = project("proj_2", ["project:read"]);
+    const session = publishableSession([project("proj_1"), untouched]);
+
+    const elevated = elevateProjectAccess(session, "proj_1");
+
+    expect(elevated.projects.find((p) => p.id === "proj_2")).toBe(untouched);
+  });
+});
diff --git a/packages/core/test/services/sdk/snapshot-builder.test.ts b/packages/core/test/services/sdk/snapshot-builder.test.ts
new file mode 100644
index 000000000..1396232f1
--- /dev/null
+++ b/packages/core/test/services/sdk/snapshot-builder.test.ts
@@ -0,0 +1,940 @@
+import { PurchaseType, SubscriptionStatus } from "@voidhash/lib";
+
+import {
+  type Person as DbPerson,
+  type PersonIdentity as DbPersonIdentity,
+  type PersonUnlockedPerk as DbPersonUnlockedPerk,
+  type PaymentProviderConfigurationProduct as DbPaymentProviderConfigurationProduct,
+  type Purchase as DbPurchase,
+  PersonIdentityKind,
+  PersonIdentityMigrationJobStatus,
+  PersonUnlockedPerkStatus,
+} from "@voidhash/db";
+import { describe, expect, it } from "vite-plus/test";
+
+import type { PersonIdentityResult } from "../../../src/services/personIdentity/PersonIdentityService.ts";
+import type { PersonSnapshotEventV1 } from "../../../src/domain/person/Person.ts";
+import {
+  ACTIVE_MIGRATION_STATUSES,
+  compareSubscriptionsForCurrent,
+  composeSnapshot,
+  decideSnapshotScope,
+  dedupeGrants,
+  dedupePurchases,
+  dedupeSubscriptions,
+  mapGrant,
+  mapPurchaseHistory,
+  mapSubscriptionHistory,
+  mapSubscriptionStatus,
+  resolveProfile,
+  selectCurrentSubscription,
+  sortGrants,
+  sortPurchaseHistory,
+  sortSubscriptionHistory,
+  type SnapshotMigrationJobRow,
+  type SubscriptionWithProduct,
+  type TemporaryCanonicalScope,
+} from "../../../src/services/sdk/snapshot-builder.ts";
+import {
+  SdkPersonSnapshot,
+  SdkPersonSnapshotGrant,
+  SdkPersonSnapshotPurchaseHistory,
+  SdkPersonSnapshotSubscriptionHistory,
+} from "../../../src/domain/sdkPerson/SdkPerson.ts";
+
+// ---------------------------------------------------------------------------
+// Fixture builders. Each returns a fresh object so no test mutates another's
+// state. The builders type-cast a minimal field set to the full DB row type —
+// `snapshot-builder` only reads the columns set here, so the cast is safe and
+// keeps the fixtures readable rather than spelling out ~20 nullable columns.
+// ---------------------------------------------------------------------------
+
+const NOW = new Date("2026-06-06T00:00:00.000Z");
+const PAST = new Date("2026-01-01T00:00:00.000Z");
+const FUTURE = new Date("2026-12-31T00:00:00.000Z");
+
+const product = (
+  overrides: Partial<DbPaymentProviderConfigurationProduct> = {},
+): DbPaymentProviderConfigurationProduct =>
+  ({
+    configuration: null,
+    createdAt: PAST,
+    id: "ppcp-1",
+    isActive: true,
+    paymentProviderConfigurationId: "ppc-1",
+    productId: "prod-1",
+    providerProductKey: "com.app.product",
+    updatedAt: PAST,
+    ...overrides,
+  }) as DbPaymentProviderConfigurationProduct;
+
+const subscription = (overrides: Partial<SubscriptionWithProduct> = {}): SubscriptionWithProduct =>
+  ({
+    id: "sub-1",
+    personId: "person-target",
+    status: SubscriptionStatus.Active,
+    initialTransactionId: "tx-init",
+    latestTransactionId: "tx-latest",
+    storeSubscriptionId: "store-sub-1",
+    paymentProviderConfigurationProductId: "ppcp-1",
+    providerEnvironment: 1,
+    isTrial: false,
+    startsAt: PAST,
+    expiresAt: FUTURE,
+    purchasedAt: PAST,
+    cancelAtPeriodEnd: false,
+    canceledAt: null,
+    cancellationReason: null,
+    lastEventOccurredAt: null,
+    billingRetryAt: null,
+    gracePeriodExpiresAt: null,
+    extendedTo: null,
+    pendingPriceAmount: null,
+    pendingPriceCurrency: null,
+    pendingPriceEffectiveAt: null,
+    createdAt: PAST,
+    updatedAt: PAST,
+    paymentProviderConfigurationProduct: product(),
+    ...overrides,
+  }) as SubscriptionWithProduct;
+
+const purchase = (overrides: Partial<DbPurchase> = {}): DbPurchase =>
+  ({
+    id: "purchase-1",
+    personId: "person-target",
+    providerKey: "provider-key-1",
+    type: PurchaseType.OneTime,
+    paymentProviderConfigurationProductId: "ppcp-1",
+    providerEnvironment: 1,
+    refundedAt: null,
+    refundReason: null,
+    revokedAt: null,
+    revocationReason: null,
+    lastEventOccurredAt: null,
+    createdAt: PAST,
+    updatedAt: PAST,
+    ...overrides,
+  }) as DbPurchase;
+
+const grant = (overrides: Partial<DbPersonUnlockedPerk> = {}): DbPersonUnlockedPerk =>
+  ({
+    id: "perk-grant-1",
+    status: PersonUnlockedPerkStatus.Active,
+    personId: "person-target",
+    perkId: "perk-1",
+    unlockedByPurchaseId: null,
+    unlockedBySubscriptionId: null,
+    expiresAt: null,
+    createdAt: PAST,
+    updatedAt: PAST,
+    ...overrides,
+  }) as DbPersonUnlockedPerk;
+
+const person = (overrides: Partial<DbPerson> = {}): DbPerson =>
+  ({
+    id: "person-target",
+    name: "Person Row Name",
+    email: "row@example.com",
+    traits: null,
+    origin: 1,
+    projectId: "project-1",
+    mergedIntoPersonId: null,
+    primaryDistinctId: null,
+    firstSeenAt: null,
+    lastSeenAt: null,
+    archivedAt: null,
+    deletedAt: null,
+    deletionReason: null,
+    createdAt: PAST,
+    updatedAt: PAST,
+    ...overrides,
+  }) as DbPerson;
+
+const personIdentity = (overrides: Partial<DbPersonIdentity> = {}): DbPersonIdentity =>
+  ({
+    id: "identity-1",
+    projectId: "project-1",
+    distinctId: "prev-distinct",
+    personId: "person-source",
+    kind: PersonIdentityKind.Anonymous,
+    version: 0,
+    createdAt: PAST,
+    updatedAt: PAST,
+    ...overrides,
+  }) as DbPersonIdentity;
+
+const migrationJob = (
+  overrides: Partial<SnapshotMigrationJobRow> = {},
+): SnapshotMigrationJobRow => ({
+  id: "job-1",
+  previousDistinctId: "prev-distinct",
+  distinctId: "distinct-target",
+  targetPersonId: "person-target",
+  status: PersonIdentityMigrationJobStatus.Pending,
+  projectId: "project-1",
+  ...overrides,
+});
+
+const personEvent = (overrides: Partial<PersonSnapshotEventV1> = {}): PersonSnapshotEventV1 => ({
+  changedAt: NOW.toISOString(),
+  personId: "person-target",
+  email: "event@example.com",
+  isArchived: false,
+  name: "Event Name",
+  projectId: "project-1",
+  schemaVersion: 1,
+  traits: {},
+  version: 1,
+  ...overrides,
+});
+
+const identityResult = (overrides: Partial<PersonIdentityResult> = {}): PersonIdentityResult => ({
+  personEvents: [personEvent()],
+  identity: { distinctId: "distinct-target", mode: "full", personId: "person-target" },
+  mappingEvents: [],
+  warnings: [],
+  ...overrides,
+});
+
+// ===========================================================================
+// decideSnapshotScope
+// ===========================================================================
+
+describe("decideSnapshotScope", () => {
+  it("with identityResult and no previousDistinctId: target-only persisted scope", () => {
+    const scope = decideSnapshotScope({
+      distinctId: "distinct-target",
+      identityResult: identityResult(),
+      personId: "person-target",
+    });
+    expect(scope.canonicalPersonId).toBe("person-target");
+    expect(scope.includedPersonIds).toEqual(["person-target"]);
+    expect(scope.sourcePersonId).toBeNull();
+    expect(scope.migrationJobId).toBeNull();
+    expect(scope.mode).toBe("persisted");
+  });
+
+  it("with identityResult flagging a conflicting identified warning: stays target-only", () => {
+    const scope = decideSnapshotScope({
+      distinctId: "distinct-target",
+      identityResult: identityResult({
+        warnings: ["merge into a different identified person was refused"],
+      }),
+      personId: "person-target",
+      previousDistinctId: "prev-distinct",
+      sourceMapping: personIdentity({ kind: PersonIdentityKind.Anonymous }),
+    });
+    expect(scope.mode).toBe("persisted");
+    expect(scope.includedPersonIds).toEqual(["person-target"]);
+    expect(scope.sourcePersonId).toBeNull();
+  });
+
+  it("with identityResult and an anonymous source mapping: dual-person pending-transfer scope", () => {
+    const scope = decideSnapshotScope({
+      activeJob: migrationJob(),
+      distinctId: "distinct-target",
+      identityResult: identityResult(),
+      personId: "person-target",
+      previousDistinctId: "prev-distinct",
+      sourceMapping: personIdentity({
+        kind: PersonIdentityKind.Anonymous,
+        personId: "person-source",
+      }),
+    });
+    expect(scope.mode).toBe("temporary_pending_transfer");
+    expect(scope.includedPersonIds).toEqual(["person-target", "person-source"]);
+    expect(scope.sourcePersonId).toBe("person-source");
+    expect(scope.migrationJobId).toBe("job-1");
+  });
+
+  it("with identityResult and an *identified* source mapping: stays target-only", () => {
+    const scope = decideSnapshotScope({
+      distinctId: "distinct-target",
+      identityResult: identityResult(),
+      personId: "person-target",
+      previousDistinctId: "prev-distinct",
+      sourceMapping: personIdentity({
+        kind: PersonIdentityKind.Identified,
+        personId: "person-source",
+      }),
+    });
+    expect(scope.mode).toBe("persisted");
+    expect(scope.includedPersonIds).toEqual(["person-target"]);
+    expect(scope.sourcePersonId).toBeNull();
+  });
+
+  it("without identityResult and no active job: target-only persisted scope", () => {
+    const scope = decideSnapshotScope({
+      distinctId: "distinct-target",
+      personId: "person-target",
+    });
+    expect(scope.mode).toBe("persisted");
+    expect(scope.includedPersonIds).toEqual(["person-target"]);
+    expect(scope.migrationJobId).toBeNull();
+  });
+
+  it("without identityResult, active job but no sourceMapping: target-only carrying the migrationJobId", () => {
+    const scope = decideSnapshotScope({
+      activeJob: migrationJob(),
+      distinctId: "distinct-target",
+      personId: "person-target",
+    });
+    expect(scope.mode).toBe("persisted");
+    expect(scope.includedPersonIds).toEqual(["person-target"]);
+    expect(scope.migrationJobId).toBe("job-1");
+    expect(scope.sourcePersonId).toBeNull();
+  });
+
+  it("without identityResult, active job, anonymous source person: dual-person pending-transfer scope", () => {
+    const scope = decideSnapshotScope({
+      activeJob: migrationJob(),
+      distinctId: "distinct-target",
+      personId: "person-target",
+      sourceMapping: personIdentity({
+        kind: PersonIdentityKind.Anonymous,
+        personId: "person-source",
+      }),
+    });
+    expect(scope.mode).toBe("temporary_pending_transfer");
+    expect(scope.includedPersonIds).toEqual(["person-target", "person-source"]);
+    expect(scope.sourcePersonId).toBe("person-source");
+    expect(scope.migrationJobId).toBe("job-1");
+  });
+});
+
+describe("ACTIVE_MIGRATION_STATUSES", () => {
+  it("covers Pending, InProgress and Failed but never the terminal states", () => {
+    expect(ACTIVE_MIGRATION_STATUSES).toEqual([
+      PersonIdentityMigrationJobStatus.Pending,
+      PersonIdentityMigrationJobStatus.InProgress,
+      PersonIdentityMigrationJobStatus.Failed,
+    ]);
+    expect(ACTIVE_MIGRATION_STATUSES).not.toContain(PersonIdentityMigrationJobStatus.Succeeded);
+    expect(ACTIVE_MIGRATION_STATUSES).not.toContain(PersonIdentityMigrationJobStatus.Exhausted);
+  });
+});
+
+// ===========================================================================
+// mapSubscriptionStatus
+// ===========================================================================
+
+describe("mapSubscriptionStatus", () => {
+  it("returns 'canceled' for a canceled subscription regardless of dates", () => {
+    expect(
+      mapSubscriptionStatus(
+        subscription({ status: SubscriptionStatus.Canceled, expiresAt: FUTURE }),
+        NOW,
+      ),
+    ).toBe("canceled");
+  });
+
+  it("returns 'expired' when expiresAt is in the past", () => {
+    expect(mapSubscriptionStatus(subscription({ expiresAt: PAST }), NOW)).toBe("expired");
+  });
+
+  it("returns 'trialing' for a non-expired trial subscription", () => {
+    expect(mapSubscriptionStatus(subscription({ isTrial: true, expiresAt: FUTURE }), NOW)).toBe(
+      "trialing",
+    );
+  });
+
+  it("returns 'active' for a non-trial, non-expired subscription", () => {
+    expect(mapSubscriptionStatus(subscription({ isTrial: false, expiresAt: FUTURE }), NOW)).toBe(
+      "active",
+    );
+  });
+});
+
+// ===========================================================================
+// compareSubscriptionsForCurrent
+// ===========================================================================
+
+describe("compareSubscriptionsForCurrent", () => {
+  it("ranks active ahead of trialing (negative when left is active)", () => {
+    const active = subscription({ id: "a", isTrial: false, expiresAt: FUTURE });
+    const trial = subscription({ id: "t", isTrial: true, expiresAt: FUTURE });
+    expect(compareSubscriptionsForCurrent(active, trial, NOW)).toBeLessThan(0);
+  });
+
+  it("prefers the later expiresAt when status is equal (positive when left expires first)", () => {
+    const sooner = subscription({ id: "sooner", expiresAt: new Date("2026-07-01") });
+    const later = subscription({ id: "later", expiresAt: FUTURE });
+    expect(compareSubscriptionsForCurrent(sooner, later, NOW)).toBeGreaterThan(0);
+  });
+
+  it("breaks an expires tie by the later startsAt (positive when left starts first)", () => {
+    const early = subscription({
+      id: "early",
+      expiresAt: FUTURE,
+      startsAt: new Date("2026-01-01"),
+    });
+    const late = subscription({
+      id: "late",
+      expiresAt: FUTURE,
+      startsAt: new Date("2026-03-01"),
+    });
+    expect(compareSubscriptionsForCurrent(early, late, NOW)).toBeGreaterThan(0);
+  });
+
+  it("breaks a full tie by the later updatedAt (positive when left updated first)", () => {
+    const older = subscription({
+      id: "older",
+      expiresAt: FUTURE,
+      startsAt: PAST,
+      updatedAt: new Date("2026-02-01"),
+    });
+    const newer = subscription({
+      id: "newer",
+      expiresAt: FUTURE,
+      startsAt: PAST,
+      updatedAt: new Date("2026-05-01"),
+    });
+    expect(compareSubscriptionsForCurrent(older, newer, NOW)).toBeGreaterThan(0);
+  });
+});
+
+// ===========================================================================
+// selectCurrentSubscription
+// ===========================================================================
+
+describe("selectCurrentSubscription", () => {
+  it("returns null when every candidate is expired", () => {
+    expect(
+      selectCurrentSubscription(
+        [subscription({ id: "a", expiresAt: PAST }), subscription({ id: "b", expiresAt: PAST })],
+        NOW,
+      ),
+    ).toBeNull();
+  });
+
+  it("returns a current-subscription snapshot for the single eligible subscription", () => {
+    const current = selectCurrentSubscription(
+      [subscription({ id: "sub-x", expiresAt: FUTURE, isTrial: true })],
+      NOW,
+    );
+    expect(current).not.toBeNull();
+    expect(current?.subscriptionId).toBe("sub-x");
+    expect(current?.status).toBe("trialing");
+    expect(current?.productId).toBe("prod-1");
+    expect(current?.expiresAt).toEqual(FUTURE);
+  });
+
+  it("returns the highest-ranked candidate among several eligible subscriptions", () => {
+    const current = selectCurrentSubscription(
+      [
+        subscription({ id: "trial", isTrial: true, expiresAt: FUTURE }),
+        subscription({ id: "active", isTrial: false, expiresAt: new Date("2026-08-01") }),
+      ],
+      NOW,
+    );
+    // active outranks trialing even though it expires earlier.
+    expect(current?.subscriptionId).toBe("active");
+    expect(current?.status).toBe("active");
+  });
+});
+
+// ===========================================================================
+// mapSubscriptionHistory
+// ===========================================================================
+
+describe("mapSubscriptionHistory", () => {
+  it("maps a trial subscription with a product, preserving isTrial and productId", () => {
+    const history = mapSubscriptionHistory(
+      subscription({ id: "sub-trial", isTrial: true, expiresAt: FUTURE }),
+      NOW,
+    );
+    expect(history).toBeInstanceOf(SdkPersonSnapshotSubscriptionHistory);
+    expect(history.subscriptionId).toBe("sub-trial");
+    expect(history.isTrial).toBe(true);
+    expect(history.status).toBe("trialing");
+    expect(history.productId).toBe("prod-1");
+    expect(history.sourcePersonId).toBe("person-target");
+  });
+
+  it("includes canceledAt for a canceled subscription", () => {
+    const canceledAt = new Date("2026-05-01");
+    const history = mapSubscriptionHistory(
+      subscription({ status: SubscriptionStatus.Canceled, canceledAt }),
+      NOW,
+    );
+    expect(history.status).toBe("canceled");
+    expect(history.canceledAt).toEqual(canceledAt);
+  });
+
+  it("maps productId to null when the subscription has no product", () => {
+    const history = mapSubscriptionHistory(
+      subscription({ paymentProviderConfigurationProduct: null }),
+      NOW,
+    );
+    expect(history.productId).toBeNull();
+  });
+});
+
+// ===========================================================================
+// mapPurchaseHistory
+// ===========================================================================
+
+describe("mapPurchaseHistory", () => {
+  const lookup = new Map<string, string>([["ppcp-1", "prod-1"]]);
+
+  it("maps a one-time purchase to type 'one_time'", () => {
+    const history = mapPurchaseHistory(purchase({ type: PurchaseType.OneTime }), lookup);
+    expect(history).toBeInstanceOf(SdkPersonSnapshotPurchaseHistory);
+    expect(history.type).toBe("one_time");
+    expect(history.productId).toBe("prod-1");
+    expect(history.providerKey).toBe("provider-key-1");
+  });
+
+  it("maps a consumable purchase to type 'one_time' as well", () => {
+    const history = mapPurchaseHistory(purchase({ type: PurchaseType.OneTimeConsumable }), lookup);
+    expect(history.type).toBe("one_time");
+  });
+
+  it("maps a non-one-time purchase type to 'subscription'", () => {
+    // type 99 is neither OneTime nor OneTimeConsumable → falls through to subscription.
+    const history = mapPurchaseHistory(purchase({ type: 99 as never }), lookup);
+    expect(history.type).toBe("subscription");
+  });
+
+  it("maps productId to null when the product is missing from the lookup", () => {
+    const history = mapPurchaseHistory(
+      purchase({ paymentProviderConfigurationProductId: "ppcp-unknown" }),
+      lookup,
+    );
+    expect(history.productId).toBeNull();
+  });
+
+  it("falls back to epoch when createdAt is null", () => {
+    const history = mapPurchaseHistory(purchase({ createdAt: null }), lookup);
+    expect(history.createdAt).toEqual(new Date(0));
+  });
+});
+
+// ===========================================================================
+// mapGrant
+// ===========================================================================
+
+describe("mapGrant", () => {
+  it("maps a subscription-sourced grant to source 'subscription' with its sourceId", () => {
+    const result = mapGrant(grant({ unlockedBySubscriptionId: "sub-9" }));
+    expect(result.source).toBe("subscription");
+    expect(result.sourceId).toBe("sub-9");
+  });
+
+  it("maps a purchase-sourced grant to source 'purchase' with its sourceId", () => {
+    const result = mapGrant(grant({ unlockedByPurchaseId: "purchase-9" }));
+    expect(result.source).toBe("purchase");
+    expect(result.sourceId).toBe("purchase-9");
+  });
+
+  it("maps a manually granted perk to source 'manual' with a null sourceId", () => {
+    const result = mapGrant(grant({ unlockedBySubscriptionId: null, unlockedByPurchaseId: null }));
+    expect(result.source).toBe("manual");
+    expect(result.sourceId).toBeNull();
+  });
+
+  it("reports an active grant as status 'active'", () => {
+    const result = mapGrant(grant({ status: PersonUnlockedPerkStatus.Active }));
+    expect(result.status).toBe("active");
+  });
+
+  it("reports a non-active grant as status 'expired'", () => {
+    const result = mapGrant(grant({ status: PersonUnlockedPerkStatus.Expired }));
+    expect(result.status).toBe("expired");
+  });
+});
+
+// ===========================================================================
+// dedupeSubscriptions
+// ===========================================================================
+
+describe("dedupeSubscriptions", () => {
+  it("returns an empty array for empty input", () => {
+    expect(dedupeSubscriptions([])).toEqual([]);
+  });
+
+  it("returns a single subscription unchanged", () => {
+    const only = subscription({ id: "sub-only" });
+    expect(dedupeSubscriptions([only])).toEqual([only]);
+  });
+
+  it("collapses two rows that share the same id", () => {
+    const result = dedupeSubscriptions([
+      subscription({ id: "dup", storeSubscriptionId: "store-a" }),
+      subscription({ id: "dup", storeSubscriptionId: "store-a" }),
+    ]);
+    expect(result).toHaveLength(1);
+  });
+
+  it("dedupes by storeSubscriptionId keeping the most recently updated row", () => {
+    const stale = subscription({
+      id: "stale",
+      storeSubscriptionId: "store-shared",
+      updatedAt: new Date("2026-01-01"),
+    });
+    const fresh = subscription({
+      id: "fresh",
+      storeSubscriptionId: "store-shared",
+      updatedAt: new Date("2026-05-01"),
+    });
+    const result = dedupeSubscriptions([stale, fresh]);
+    expect(result).toHaveLength(1);
+    expect(result[0]?.id).toBe("fresh");
+  });
+});
+
+// ===========================================================================
+// dedupePurchases
+// ===========================================================================
+
+describe("dedupePurchases", () => {
+  it("returns an empty array for empty input", () => {
+    expect(dedupePurchases([])).toEqual([]);
+  });
+
+  it("returns a single purchase unchanged", () => {
+    const only = purchase({ id: "p-only" });
+    expect(dedupePurchases([only])).toEqual([only]);
+  });
+
+  it("collapses two rows that share the same id", () => {
+    const result = dedupePurchases([
+      purchase({ id: "dup", providerKey: "key-a" }),
+      purchase({ id: "dup", providerKey: "key-a" }),
+    ]);
+    expect(result).toHaveLength(1);
+  });
+
+  it("dedupes by providerKey keeping the most recently created row", () => {
+    const stale = purchase({
+      id: "stale",
+      providerKey: "key-shared",
+      createdAt: new Date("2026-01-01"),
+    });
+    const fresh = purchase({
+      id: "fresh",
+      providerKey: "key-shared",
+      createdAt: new Date("2026-05-01"),
+    });
+    const result = dedupePurchases([stale, fresh]);
+    expect(result).toHaveLength(1);
+    expect(result[0]?.id).toBe("fresh");
+  });
+});
+
+// ===========================================================================
+// dedupeGrants
+// ===========================================================================
+
+describe("dedupeGrants", () => {
+  it("returns an empty array for empty input", () => {
+    expect(dedupeGrants([])).toEqual([]);
+  });
+
+  it("returns a single grant unchanged", () => {
+    const only = grant({ id: "g-only" });
+    expect(dedupeGrants([only])).toEqual([only]);
+  });
+
+  it("prefers the active row when (perkId, source, sourceId) collide", () => {
+    const expired = grant({
+      id: "g-expired",
+      perkId: "perk-shared",
+      status: PersonUnlockedPerkStatus.Expired,
+      unlockedBySubscriptionId: "sub-shared",
+    });
+    const active = grant({
+      id: "g-active",
+      perkId: "perk-shared",
+      status: PersonUnlockedPerkStatus.Active,
+      unlockedBySubscriptionId: "sub-shared",
+    });
+    const result = dedupeGrants([expired, active]);
+    expect(result).toHaveLength(1);
+    expect(result[0]?.id).toBe("g-active");
+  });
+
+  it("keeps distinct grants that differ only by source", () => {
+    const fromSub = grant({ id: "g-sub", perkId: "perk-x", unlockedBySubscriptionId: "sub-1" });
+    const fromManual = grant({ id: "g-manual", perkId: "perk-x" });
+    const result = dedupeGrants([fromSub, fromManual]);
+    expect(result).toHaveLength(2);
+  });
+});
+
+// ===========================================================================
+// sortSubscriptionHistory
+// ===========================================================================
+
+const subHistory = (
+  overrides: Partial<ConstructorParameters<typeof SdkPersonSnapshotSubscriptionHistory>[0]> = {},
+): SdkPersonSnapshotSubscriptionHistory =>
+  new SdkPersonSnapshotSubscriptionHistory({
+    canceledAt: null,
+    expiresAt: FUTURE,
+    isTrial: false,
+    productId: "prod-1",
+    sourcePersonId: "person-target",
+    startsAt: PAST,
+    status: "active",
+    subscriptionId: "sub-1",
+    ...overrides,
+  });
+
+describe("sortSubscriptionHistory", () => {
+  it("sorts by startsAt descending, then expiresAt descending", () => {
+    const earlyStart = subHistory({ subscriptionId: "early", startsAt: new Date("2026-01-01") });
+    const lateStart = subHistory({ subscriptionId: "late", startsAt: new Date("2026-05-01") });
+    const sorted = sortSubscriptionHistory([earlyStart, lateStart]);
+    expect(sorted.map((s) => s.subscriptionId)).toEqual(["late", "early"]);
+  });
+
+  it("breaks a startsAt tie by later expiresAt first", () => {
+    const expiresSoon = subHistory({
+      subscriptionId: "soon",
+      startsAt: PAST,
+      expiresAt: new Date("2026-07-01"),
+    });
+    const expiresLate = subHistory({
+      subscriptionId: "later",
+      startsAt: PAST,
+      expiresAt: FUTURE,
+    });
+    const sorted = sortSubscriptionHistory([expiresSoon, expiresLate]);
+    expect(sorted.map((s) => s.subscriptionId)).toEqual(["later", "soon"]);
+  });
+});
+
+// ===========================================================================
+// sortPurchaseHistory
+// ===========================================================================
+
+const purchaseHistory = (
+  overrides: Partial<ConstructorParameters<typeof SdkPersonSnapshotPurchaseHistory>[0]> = {},
+): SdkPersonSnapshotPurchaseHistory =>
+  new SdkPersonSnapshotPurchaseHistory({
+    createdAt: PAST,
+    productId: "prod-1",
+    providerKey: "key-1",
+    purchaseId: "purchase-1",
+    sourcePersonId: "person-target",
+    type: "one_time",
+    ...overrides,
+  });
+
+describe("sortPurchaseHistory", () => {
+  it("sorts by createdAt descending (newest first)", () => {
+    const old = purchaseHistory({ purchaseId: "old", createdAt: new Date("2026-01-01") });
+    const recent = purchaseHistory({ purchaseId: "recent", createdAt: new Date("2026-05-01") });
+    const sorted = sortPurchaseHistory([old, recent]);
+    expect(sorted.map((p) => p.purchaseId)).toEqual(["recent", "old"]);
+  });
+});
+
+// ===========================================================================
+// sortGrants
+// ===========================================================================
+
+const snapshotGrant = (
+  overrides: Partial<ConstructorParameters<typeof SdkPersonSnapshotGrant>[0]> = {},
+): SdkPersonSnapshotGrant =>
+  new SdkPersonSnapshotGrant({
+    expiresAt: null,
+    perkId: "perk-1",
+    source: "manual",
+    sourceId: null,
+    sourcePersonId: "person-target",
+    status: "active",
+    ...overrides,
+  });
+
+describe("sortGrants", () => {
+  it("places active grants before expired ones", () => {
+    const expired = snapshotGrant({ perkId: "expired", status: "expired" });
+    const active = snapshotGrant({ perkId: "active", status: "active" });
+    const sorted = sortGrants([expired, active]);
+    expect(sorted.map((g) => g.perkId)).toEqual(["active", "expired"]);
+  });
+
+  it("orders same-status grants by expiresAt ascending (expiring soon first)", () => {
+    const soon = snapshotGrant({ perkId: "soon", expiresAt: new Date("2026-07-01") });
+    const late = snapshotGrant({ perkId: "late", expiresAt: FUTURE });
+    const sorted = sortGrants([late, soon]);
+    expect(sorted.map((g) => g.perkId)).toEqual(["soon", "late"]);
+  });
+
+  it("breaks an expiry tie alphabetically by perkId", () => {
+    const beta = snapshotGrant({ perkId: "beta", expiresAt: FUTURE });
+    const alpha = snapshotGrant({ perkId: "alpha", expiresAt: FUTURE });
+    const sorted = sortGrants([beta, alpha]);
+    expect(sorted.map((g) => g.perkId)).toEqual(["alpha", "beta"]);
+  });
+});
+
+// ===========================================================================
+// resolveProfile
+// ===========================================================================
+
+describe("resolveProfile", () => {
+  it("prefers the identityResult event email/name for the target person", () => {
+    const profile = resolveProfile({
+      identityResult: identityResult({
+        personEvents: [
+          personEvent({ personId: "person-target", email: "fresh@example.com", name: "Fresh" }),
+        ],
+      }),
+      targetPerson: person({ email: "row@example.com", name: "Row" }),
+    });
+    expect(profile.email).toBe("fresh@example.com");
+    expect(profile.name).toBe("Fresh");
+  });
+
+  it("falls back to the target person row when there is no identityResult", () => {
+    const profile = resolveProfile({
+      targetPerson: person({ email: "row@example.com", name: "Row Name" }),
+    });
+    expect(profile.email).toBe("row@example.com");
+    expect(profile.name).toBe("Row Name");
+  });
+
+  it("ignores an identityResult event for a different person", () => {
+    const profile = resolveProfile({
+      identityResult: identityResult({
+        personEvents: [
+          personEvent({ personId: "person-other", email: "other@example.com", name: "Other" }),
+        ],
+      }),
+      targetPerson: person({ email: "row@example.com", name: "Row Name" }),
+    });
+    expect(profile.email).toBe("row@example.com");
+    expect(profile.name).toBe("Row Name");
+  });
+
+  it("returns null for both fields when neither event nor row carries them", () => {
+    const profile = resolveProfile({
+      targetPerson: person({ email: null, name: null }),
+    });
+    expect(profile.email).toBeNull();
+    expect(profile.name).toBeNull();
+  });
+});
+
+// ===========================================================================
+// composeSnapshot — the full dedupe → map → sort → wrap pipeline.
+// ===========================================================================
+
+describe("composeSnapshot", () => {
+  it("dedupes, maps, sorts and wraps every input into an SdkPersonSnapshot", () => {
+    const scope: TemporaryCanonicalScope = {
+      canonicalPersonId: "person-target",
+      includedPersonIds: ["person-target", "person-source"],
+      migrationJobId: "job-1",
+      mode: "temporary_pending_transfer",
+      sourcePersonId: "person-source",
+    };
+
+    const snapshot = composeSnapshot({
+      distinctId: "distinct-target",
+      grants: [
+        grant({ id: "g-active", perkId: "perk-a", unlockedBySubscriptionId: "sub-active" }),
+        // duplicate of g-active by (perkId, source, sourceId) but expired → dropped.
+        grant({
+          id: "g-active-dup",
+          perkId: "perk-a",
+          status: PersonUnlockedPerkStatus.Expired,
+          unlockedBySubscriptionId: "sub-active",
+        }),
+        grant({
+          id: "g-expired",
+          perkId: "perk-b",
+          status: PersonUnlockedPerkStatus.Expired,
+        }),
+      ],
+      identityResult: identityResult({
+        personEvents: [
+          personEvent({ personId: "person-target", email: "fresh@example.com", name: "Fresh" }),
+        ],
+      }),
+      now: NOW,
+      personId: "person-target",
+      purchaseProductIdLookup: new Map([["ppcp-1", "prod-1"]]),
+      purchases: [
+        purchase({ id: "p-old", providerKey: "k-1", createdAt: new Date("2026-01-01") }),
+        purchase({ id: "p-new", providerKey: "k-2", createdAt: new Date("2026-05-01") }),
+      ],
+      scope,
+      subscriptions: [
+        subscription({
+          id: "sub-active",
+          storeSubscriptionId: "store-active",
+          isTrial: false,
+          expiresAt: FUTURE,
+        }),
+        subscription({
+          id: "sub-expired",
+          storeSubscriptionId: "store-expired",
+          expiresAt: PAST,
+        }),
+      ],
+      targetPerson: person({ email: "row@example.com", name: "Row Name" }),
+    });
+
+    expect(snapshot).toBeInstanceOf(SdkPersonSnapshot);
+    expect(snapshot.personId).toBe("person-target");
+    expect(snapshot.distinctId).toBe("distinct-target");
+
+    // Profile prefers the fresh identity event.
+    expect(snapshot.email).toBe("fresh@example.com");
+    expect(snapshot.name).toBe("Fresh");
+
+    // Context carries the scope verbatim.
+    expect(snapshot.snapshotContext.mode).toBe("temporary_pending_transfer");
+    expect(snapshot.snapshotContext.migrationJobId).toBe("job-1");
+    expect(snapshot.snapshotContext.includedPersonIds).toEqual(["person-target", "person-source"]);
+
+    // Two subscriptions survive (different store ids); the active non-expired one
+    // is current.
+    expect(snapshot.subscriptions.history).toHaveLength(2);
+    expect(snapshot.subscriptions.current?.subscriptionId).toBe("sub-active");
+    expect(snapshot.subscriptions.current?.status).toBe("active");
+
+    // Both purchases survive (distinct provider keys), newest first.
+    expect(snapshot.purchases.history.map((p) => p.purchaseId)).toEqual(["p-new", "p-old"]);
+
+    // Grants deduped to two; active before expired.
+    expect(snapshot.entitlements.grants).toHaveLength(2);
+    expect(snapshot.entitlements.grants.map((g) => g.perkId)).toEqual(["perk-a", "perk-b"]);
+    expect(snapshot.entitlements.grants[0]?.status).toBe("active");
+    expect(snapshot.entitlements.grants[1]?.status).toBe("expired");
+  });
+
+  it("produces a null current subscription and empty histories for an empty person", () => {
+    const scope: TemporaryCanonicalScope = {
+      canonicalPersonId: "person-target",
+      includedPersonIds: ["person-target"],
+      migrationJobId: null,
+      mode: "persisted",
+      sourcePersonId: null,
+    };
+
+    const snapshot = composeSnapshot({
+      distinctId: "distinct-target",
+      grants: [],
+      now: NOW,
+      personId: "person-target",
+      purchaseProductIdLookup: new Map(),
+      purchases: [],
+      scope,
+      subscriptions: [],
+      targetPerson: person({ email: null, name: null }),
+    });
+
+    expect(snapshot.subscriptions.current).toBeNull();
+    expect(snapshot.subscriptions.history).toEqual([]);
+    expect(snapshot.purchases.history).toEqual([]);
+    expect(snapshot.entitlements.grants).toEqual([]);
+    expect(snapshot.email).toBeNull();
+    expect(snapshot.name).toBeNull();
+    expect(snapshot.snapshotContext.mode).toBe("persisted");
+  });
+});
diff --git a/packages/core/test/services/users/UserService.test.ts b/packages/core/test/services/users/UserService.test.ts
new file mode 100644
index 000000000..3204b780a
--- /dev/null
+++ b/packages/core/test/services/users/UserService.test.ts
@@ -0,0 +1,206 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import type { AnyAuthSession, UserSession } from "@voidhash/rpc";
+
+import { AuthenticationError, AuthSession } from "../../../src/domain/auth/Auth.ts";
+import { UserService } from "../../../src/services/users/UserService.ts";
+
+/**
+ * UserService is pure Effect logic: `getUser` reads the optional `AuthSession`
+ * service and maps it to the public `User` shape (logos forced to `null`,
+ * permissions dropped). No DB, no network — so we drive it as a unit test,
+ * providing a hand-built session value directly via `Effect.provideService`.
+ */
+
+/** Fresh, fully-typed `user`-method session for each test; `overrides` keeps fixtures independent. */
+const userSession = (overrides: Partial<UserSession> = {}): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: "session-name",
+  organizations: [
+    {
+      id: "org-1",
+      logo: null,
+      name: "Org One",
+      permissions: ["org:read"],
+      slug: "org-one",
+      workosOrganizationId: "wos_org_1",
+    },
+  ],
+  person: null,
+  projects: [
+    {
+      id: "proj-1",
+      logo: null,
+      name: "Project One",
+      organizationId: "org-1",
+      permissions: ["project:read"],
+      slug: "project-one",
+    },
+  ],
+  user: {
+    createdAt: new Date("2026-01-01T00:00:00Z"),
+    email: "user@example.com",
+    emailVerified: true,
+    id: "user-1",
+    image: null,
+    name: "User One",
+    role: "admin",
+    updatedAt: new Date("2026-02-01T00:00:00Z"),
+    workosUserId: "wos_user_1",
+  },
+  ...overrides,
+});
+
+/** Resolve the service and invoke `getUser` — the impl lives on the resolved instance, not the tag. */
+const getUser = Effect.gen(function* () {
+  const service = yield* UserService;
+  return yield* service.getUser();
+});
+
+/** Run `getUser` against a provided session value and return the success channel. */
+const runGetUser = (session: AnyAuthSession) =>
+  Effect.runPromise(
+    getUser.pipe(Effect.provideService(AuthSession, session), Effect.provide(UserService.layer)),
+  );
+
+describe("UserService.getUser", () => {
+  it("returns the user with mapped organizations and projects from the session", async () => {
+    const session = userSession();
+    const user = await runGetUser(session);
+
+    // The user fields are spread through verbatim.
+    expect(user.id).toBe("user-1");
+    expect(user.email).toBe("user@example.com");
+    expect(user.emailVerified).toBe(true);
+    expect(user.name).toBe("User One");
+    expect(user.role).toBe("admin");
+    expect(user.image).toBeNull();
+    expect(user.createdAt).toEqual(session.user.createdAt);
+    expect(user.updatedAt).toEqual(session.user.updatedAt);
+
+    expect(user.organizations).toHaveLength(1);
+    expect(user.projects).toHaveLength(1);
+  });
+
+  it("maps each organization to {id, logo:null, name, slug, workosOrganizationId, internalFeatureFlags}, dropping permissions", async () => {
+    const user = await runGetUser(userSession());
+
+    expect(user.organizations[0]).toEqual({
+      id: "org-1",
+      logo: null,
+      name: "Org One",
+      slug: "org-one",
+      workosOrganizationId: "wos_org_1",
+      // No InternalFeatureFlagService is provided in this unit, so flags resolve
+      // to the empty fallback.
+      internalFeatureFlags: [],
+    });
+    // permissions are intentionally not part of the public projection.
+    expect(user.organizations[0]).not.toHaveProperty("permissions");
+  });
+
+  it("maps each project to {id, logo:null, name, organizationId, slug}, dropping permissions", async () => {
+    const user = await runGetUser(userSession());
+
+    expect(user.projects[0]).toEqual({
+      id: "proj-1",
+      logo: null,
+      name: "Project One",
+      organizationId: "org-1",
+      slug: "project-one",
+    });
+    expect(user.projects[0]).not.toHaveProperty("permissions");
+  });
+
+  it("returns empty organizations/projects arrays when the session has none", async () => {
+    const user = await runGetUser(userSession({ organizations: [], projects: [] }));
+
+    expect(user.organizations).toEqual([]);
+    expect(user.projects).toEqual([]);
+  });
+
+  it("maps multiple organizations and projects preserving their order", async () => {
+    const user = await runGetUser(
+      userSession({
+        organizations: [
+          {
+            id: "org-a",
+            logo: null,
+            name: "A",
+            permissions: [],
+            slug: "a",
+            workosOrganizationId: "wos_a",
+          },
+          {
+            id: "org-b",
+            logo: null,
+            name: "B",
+            permissions: [],
+            slug: "b",
+            workosOrganizationId: "wos_b",
+          },
+        ],
+        projects: [
+          {
+            id: "proj-a",
+            logo: null,
+            name: "PA",
+            organizationId: "org-a",
+            permissions: [],
+            slug: "pa",
+          },
+          {
+            id: "proj-b",
+            logo: null,
+            name: "PB",
+            organizationId: "org-b",
+            permissions: [],
+            slug: "pb",
+          },
+        ],
+      }),
+    );
+
+    expect(user.organizations.map((o) => o.id)).toEqual(["org-a", "org-b"]);
+    expect(user.projects.map((p) => p.id)).toEqual(["proj-a", "proj-b"]);
+  });
+
+  it("fails with AuthenticationError when no AuthSession is provided (Option.none)", async () => {
+    // `Effect.flip` moves the typed error into the success channel so we can
+    // assert on its class directly. No session is provided here, so the
+    // `Effect.serviceOption(AuthSession)` read yields `Option.none()`.
+    const error = await Effect.runPromise(
+      getUser.pipe(Effect.provide(UserService.layer), Effect.flip),
+    );
+
+    expect(error).toBeInstanceOf(AuthenticationError);
+    expect((error as AuthenticationError).cause).toBe("User not found");
+  });
+
+  it("fails with AuthenticationError when the session carries no user (e.g. secret-key session)", async () => {
+    // A secret-key session is present but its `user` field is `null`; `getUser`
+    // must reject it rather than synthesizing a user.
+    const secretKeySession: AnyAuthSession = {
+      cookie: null,
+      method: "secret-key",
+      name: "service-account",
+      organizations: [],
+      person: null,
+      projects: [],
+      user: null,
+    };
+
+    const error = await Effect.runPromise(
+      getUser.pipe(
+        Effect.provideService(AuthSession, secretKeySession),
+        Effect.provide(UserService.layer),
+        Effect.flip,
+      ),
+    );
+
+    expect(error).toBeInstanceOf(AuthenticationError);
+    expect((error as AuthenticationError).message).toBe("User not found");
+  });
+});
diff --git a/packages/core/test/services/voidql/compiler.test.ts b/packages/core/test/services/voidql/compiler.test.ts
new file mode 100644
index 000000000..cb6ee625b
--- /dev/null
+++ b/packages/core/test/services/voidql/compiler.test.ts
@@ -0,0 +1,344 @@
+/**
+ * Pure unit tests for the VoidQL compiler — the load-bearing, infra-free core of
+ * the analytics access layer (docs/analytics-access-layer.html §19). Covers the
+ * golden text→CH-SQL mapping, the **non-negotiable isolation invariant** (every
+ * base-ref carries the bound tenant predicate, on the right scope), forbidden-
+ * keyword rejection, PII gating, out-of-band parameter binding, and the LIMIT
+ * clamp. No ClickHouse, no Db, no Auth.
+ */
+import { describe, expect, it } from "../../../src/testing/effect-vitest.ts";
+
+import type { Capability } from "../../../src/services/voidql/catalog/types.ts";
+import { compileToIr } from "../../../src/services/voidql/compile.ts";
+import { lit, renderDebugSql } from "../../../src/services/voidql/ir.ts";
+import { makeAuthorizedScope } from "../../../src/services/voidql/scope.ts";
+import { verify } from "../../../src/services/voidql/verify.ts";
+
+const SCOPE = makeAuthorizedScope({
+  organizationId: "org_a",
+  availableProjectIds: ["proj_1", "proj_2"],
+});
+const PII = new Set<Capability>(["pii"]);
+const NO_PII = new Set<Capability>([]);
+
+/** Compile + verify, returning the rendered `(sql, binds)`, columns, and scopes. */
+const compile = (text: string, caps: ReadonlySet<Capability> = NO_PII, scope = SCOPE) => {
+  const ir = compileToIr(text, scope, caps);
+  verify(ir.pieces, ir.injected, scope);
+  const rendered = renderDebugSql(ir.pieces);
+  return { sql: rendered.sql, binds: rendered.binds, columns: ir.shape, injected: ir.injected };
+};
+
+const expectTag = (fn: () => unknown, tag: string): void => {
+  try {
+    fn();
+  } catch (error) {
+    expect((error as { _tag?: string })?._tag).toBe(tag);
+    return;
+  }
+  throw new Error(`expected ${tag} to be thrown, but nothing was`);
+};
+
+const countOccurrences = (haystack: string, needle: string): number =>
+  haystack.split(needle).length - 1;
+
+describe("VoidQL compiler — golden mapping", () => {
+  it("lowers a simple aggregation with the injected tenant scope", () => {
+    const { sql, binds, columns } = compile(
+      "SELECT event_name, count() AS n FROM events WHERE event_ts >= '2026-01-01' GROUP BY event_name",
+    );
+    // The raw table is wrapped in a scoped subquery; org + projects are bound.
+    expect(sql).toContain(
+      "FROM events_v2 WHERE organization_id = {p1: String} AND project_id IN {p2: Array(String)}",
+    );
+    expect(sql).toContain("LIMIT 1 BY event_id");
+    // The identity-join (pending_overrides) is scoped inline too (p3/p4), since the
+    // analytics_query user has no row policy.
+    expect(sql).toContain(
+      "FROM person_identity_pending_overrides_v2 WHERE version > 0 AND organization_id = {p3: String} AND project_id IN {p4: Array(String)}",
+    );
+    // The user's date literal binds out-of-band as DateTime (partition pruning).
+    expect(sql).toContain("{p5: DateTime}");
+    expect(binds).toEqual([
+      "org_a",
+      ["proj_1", "proj_2"],
+      "org_a",
+      ["proj_1", "proj_2"],
+      "2026-01-01 00:00:00",
+    ]);
+    expect(sql.trimEnd().endsWith("LIMIT 100000")).toBe(true);
+    expect(columns).toEqual([
+      { name: "event_name", type: "String" },
+      { name: "n", type: "UInt64" },
+    ]);
+  });
+
+  it("binds JSON property keys out-of-band, never spliced", () => {
+    const { sql, binds } = compile("SELECT count() AS n FROM events WHERE properties.plan = 'pro'");
+    // Both the key AND the value are bound params (§9, §18 #1).
+    expect(sql).toMatch(/JSONExtractString\(events_0\.event_properties, \{p\d+: String\}\)/);
+    expect(binds).toContain("plan");
+    expect(binds).toContain("pro");
+  });
+
+  it("compiles revenue with amount_usd in dollars", () => {
+    const { sql, columns } = compile("SELECT sum(amount_usd) AS total FROM revenue");
+    expect(sql).toContain("event_name IN ('$purchase.completed'");
+    expect(sql).toContain("/ 100 AS amount_usd");
+    expect(columns).toEqual([{ name: "total", type: "Float64" }]);
+  });
+
+  it("clamps an over-large LIMIT to the server cap", () => {
+    const { sql } = compile("SELECT count() AS n FROM events LIMIT 999999999");
+    expect(sql).toContain("LIMIT 100000");
+    expect(sql).not.toContain("999999999");
+  });
+
+  it("expands SELECT * to in-star catalog columns only (never physical *)", () => {
+    const { sql, columns } = compile("SELECT * FROM persons", PII);
+    expect(sql).not.toMatch(/SELECT \*/);
+    // PII columns are excluded from * even with the capability.
+    expect(columns.map((c) => c.name)).not.toContain("email");
+    expect(columns.map((c) => c.name)).toContain("person_id");
+  });
+});
+
+describe("VoidQL compiler — tenant isolation invariant", () => {
+  it("injects exactly one tenant predicate per base-table reference (JOIN)", () => {
+    const { sql, injected } = compile(
+      "SELECT e.event_name, count() AS n FROM events AS e " +
+        "JOIN ( SELECT distinct_id FROM persons WHERE distinct_id != '' ) AS pro " +
+        "ON pro.distinct_id = e.distinct_id GROUP BY e.event_name",
+    );
+    expect(injected).toHaveLength(2);
+    expect(countOccurrences(sql, "events_v2")).toBe(1);
+    expect(countOccurrences(sql, "person_identity_pending_overrides_v2")).toBe(1);
+    expect(countOccurrences(sql, "persons_v1")).toBe(1);
+    // events lowering scopes 2 physical reads (events_v2 + pending_overrides),
+    // persons lowering scopes 1 → 2 + 1 = 3 tenant predicates of each kind.
+    expect(countOccurrences(sql, "organization_id = {p")).toBe(3);
+    expect(countOccurrences(sql, "project_id IN {p")).toBe(3);
+  });
+
+  it("scopes every base-ref to the authorized org/projects, never the request", () => {
+    const { injected } = compile(
+      "SELECT count() AS n FROM events AS a JOIN events AS b ON a.event_id = b.event_id",
+    );
+    expect(injected).toHaveLength(2);
+    for (const scoped of injected) {
+      expect(scoped.orgValue).toBe("org_a");
+      expect(scoped.projectValues).toEqual(["proj_1", "proj_2"]);
+    }
+  });
+
+  it("the verifier rejects an unscoped base-ref (guard-stubbed leak)", () => {
+    // Simulate a printer bug that emitted a raw base table with no injected scope.
+    expectTag(
+      () => verify([lit("SELECT 1 FROM events_v2 LIMIT 1")], [], SCOPE),
+      "VoidQlIsolationError",
+    );
+  });
+
+  it("the verifier rejects a scope bound to a different organization", () => {
+    const ir = compileToIr("SELECT count() AS n FROM events", SCOPE, NO_PII);
+    const otherOrg = makeAuthorizedScope({
+      organizationId: "org_b",
+      availableProjectIds: ["proj_1", "proj_2"],
+    });
+    expectTag(() => verify(ir.pieces, ir.injected, otherOrg), "VoidQlIsolationError");
+  });
+
+  it("reserves physical-table-shaped aliases so the verifier never false-positives", () => {
+    // A user alias like `foo_v1` would otherwise trip the verifier's physical-table
+    // token scan; such names are rejected up front (unsupported, not isolation).
+    expectTag(() => compile("SELECT count() AS n FROM events AS evt_v2"), "VoidQlUnsupportedError");
+    expectTag(() => compile("SELECT event_id AS id_v1 FROM events"), "VoidQlUnsupportedError");
+    expectTag(
+      () => compile("WITH c_v9 AS ( SELECT event_id FROM events ) SELECT count() AS n FROM c_v9"),
+      "VoidQlUnsupportedError",
+    );
+  });
+
+  it("CTEs and correlated subqueries inject scope at every depth", () => {
+    const { injected, sql } = compile(
+      "WITH recent AS ( SELECT event_id, distinct_id FROM events ) " +
+        "SELECT count() AS n FROM recent",
+    );
+    expect(injected).toHaveLength(1);
+    expect(countOccurrences(sql, "events_v2")).toBe(1);
+  });
+});
+
+describe("VoidQL compiler — PII gating", () => {
+  it("rejects a PII column without the capability (never null-substitutes)", () => {
+    expectTag(() => compile("SELECT email FROM persons"), "VoidQlPiiError");
+    expectTag(
+      () => compile("SELECT count() AS n FROM persons WHERE email = 'x@y.z'"),
+      "VoidQlPiiError",
+    );
+    expectTag(
+      () => compile("SELECT count() AS n FROM persons WHERE traits.plan = 'pro'"),
+      "VoidQlPiiError",
+    );
+  });
+
+  it("allows PII columns with the capability", () => {
+    const { sql } = compile("SELECT email, name FROM persons", PII);
+    expect(sql).toContain("persons_v1");
+  });
+});
+
+describe("VoidQL compiler — forbidden + unsupported constructs", () => {
+  it("rejects a trailing SETTINGS clause as ungrammatical", () => {
+    expectTag(
+      () => compile("SELECT count() AS n FROM events SETTINGS max_threads = 1"),
+      "VoidQlUnsupportedError",
+    );
+  });
+
+  it("rejects UNION, DISTINCT, and DDL", () => {
+    expectTag(
+      () => compile("SELECT count() AS n FROM events UNION ALL SELECT 1"),
+      "VoidQlUnsupportedError",
+    );
+    expectTag(() => compile("SELECT DISTINCT event_name FROM events"), "VoidQlUnsupportedError");
+    expectTag(() => compile("DROP TABLE events"), "VoidQlUnsupportedError");
+  });
+
+  it("rejects subqueries in IN (use a JOIN instead)", () => {
+    expectTag(
+      () =>
+        compile("SELECT count() AS n FROM events WHERE event_id IN (SELECT event_id FROM events)"),
+      "VoidQlSyntaxError",
+    );
+  });
+
+  it("rejects unknown tables, columns, and functions", () => {
+    expectTag(() => compile("SELECT 1 AS x FROM nope"), "VoidQlSchemaError");
+    expectTag(() => compile("SELECT nope FROM events"), "VoidQlUnknownFieldError");
+    expectTag(() => compile("SELECT badfn(event_id) AS x FROM events"), "VoidQlUnsupportedError");
+  });
+
+  it("rejects over-deep nesting before recursion blows the stack", () => {
+    const deep = `SELECT ${"(".repeat(200)}1${")".repeat(200)} AS x FROM events`;
+    expectTag(() => compile(deep), "VoidQlComplexityError");
+  });
+});
+
+describe("VoidQL compiler — output column naming (shape ↔ SQL parity)", () => {
+  it("emits AS for an unaliased computed column so shape matches the CH output name", () => {
+    const { sql, columns } = compile("SELECT count() FROM events");
+    // Without the explicit AS, ClickHouse would name the column `count()` while
+    // the shape reported `expr_0` — the caller would read the wrong key.
+    expect(sql).toContain("count() AS expr_0");
+    expect(columns).toEqual([{ name: "expr_0", type: "UInt64" }]);
+  });
+
+  it("a derived-relation reference to a synthesized column resolves", () => {
+    // Previously the inner `count()` had no AS, so `s.expr_0` did not exist in the
+    // subquery and ClickHouse rejected the statement with 'Unknown identifier'.
+    const { sql, columns } = compile("SELECT expr_0 FROM ( SELECT count() FROM events ) AS s");
+    expect(sql).toContain("count() AS expr_0");
+    expect(columns).toEqual([{ name: "expr_0", type: "UInt64" }]);
+  });
+});
+
+describe("VoidQL compiler — robustness (typed errors, never raw defects)", () => {
+  it("rejects an unparseable date literal with a typed error, not a RangeError", () => {
+    // `new Date('tomorrow').toISOString()` throws a raw RangeError that would escape
+    // as an opaque defect/500 and break the validate-repair loop (§18 #9).
+    expectTag(
+      () => compile("SELECT count() AS n FROM events WHERE event_ts >= 'tomorrow'"),
+      "VoidQlSyntaxError",
+    );
+    expectTag(
+      () => compile("SELECT count() AS n FROM events WHERE event_ts = 'not-a-date'"),
+      "VoidQlSyntaxError",
+    );
+    // A valid ISO date still compiles and binds as a DateTime parameter.
+    const { binds } = compile("SELECT count() AS n FROM events WHERE event_ts >= '2026-01-01'");
+    expect(binds).toContain("2026-01-01 00:00:00");
+  });
+
+  it("bounds a unary-minus chain by depth (typed error, not a stack overflow)", () => {
+    // The `neg` prefix recurses parsePrefix directly; without a depth guard a long
+    // `- - … - x` chain blows the JS stack with a raw RangeError before the node cap.
+    const deep = `SELECT ${"- ".repeat(120)}1 AS x FROM events`;
+    expectTag(() => compile(deep), "VoidQlComplexityError");
+  });
+});
+
+describe("VoidQL compiler — verifier backstops (direct IR)", () => {
+  it("triangulates revenue and persons-only lowerings, not just events", () => {
+    // Exercise verify() end-to-end for the relations the golden tests skip.
+    expect(() => compile("SELECT sum(amount_usd) AS total FROM revenue")).not.toThrow();
+    expect(() => compile("SELECT count() AS n FROM persons")).not.toThrow();
+    const persons = compile("SELECT count() AS n FROM persons");
+    expect(countOccurrences(persons.sql, "persons_v1")).toBe(1);
+    expect(countOccurrences(persons.sql, "organization_id = {p")).toBe(1);
+    const revenue = compile("SELECT sum(amount_usd) AS total FROM revenue");
+    // revenue lowers through the events machinery → 2 scoped physical reads.
+    expect(countOccurrences(revenue.sql, "organization_id = {p")).toBe(2);
+  });
+
+  it("rejects a scope bound to the wrong project set (I1)", () => {
+    const ir = compileToIr("SELECT count() AS n FROM events", SCOPE, NO_PII);
+    const wrongProjects = makeAuthorizedScope({
+      organizationId: "org_a",
+      availableProjectIds: ["proj_1"], // missing proj_2
+    });
+    expectTag(() => verify(ir.pieces, ir.injected, wrongProjects), "VoidQlIsolationError");
+  });
+
+  it("rejects forbidden table-functions / introspection in the emitted SQL (I2)", () => {
+    for (const token of [
+      "remote('h', t)",
+      "url('http://x')",
+      "s3('x')",
+      "getSetting('y')",
+      "dictGet('d','a',1)",
+    ]) {
+      expectTag(() => verify([lit(`SELECT ${token}`)], [], SCOPE), "VoidQlIsolationError");
+    }
+    expectTag(
+      () => verify([lit("SELECT 1 FROM system.tables")], [], SCOPE),
+      "VoidQlIsolationError",
+    );
+  });
+
+  it("rejects an emitted SETTINGS / FORMAT clause (I3 — the override-by-absence net)", () => {
+    expectTag(
+      () => verify([lit("SELECT 1 SETTINGS max_threads = 1")], [], SCOPE),
+      "VoidQlIsolationError",
+    );
+    expectTag(() => verify([lit("SELECT 1 FORMAT JSON")], [], SCOPE), "VoidQlIsolationError");
+  });
+
+  it("rejects a reserved internal alias colliding with the injected machinery", () => {
+    // `events` / `pending_overrides` are the injected inner aliases; a user alias of
+    // the same name must be rejected up front (covers the RESERVED branch the
+    // `_v\\d+` test does not).
+    expectTag(() => compile("SELECT count() AS n FROM events AS events"), "VoidQlUnsupportedError");
+    expectTag(
+      () => compile("SELECT count() AS n FROM events AS pending_overrides"),
+      "VoidQlUnsupportedError",
+    );
+  });
+});
+
+describe("VoidQL compiler — parameter binding (no escaping class)", () => {
+  it("binds adversarial string literals as parameters, not raw SQL", () => {
+    const { sql, binds } = compile(
+      "SELECT count() AS n FROM events WHERE event_name = ' OR 1=1 --'",
+    );
+    expect(sql).not.toContain("OR 1=1");
+    expect(binds).toContain(" OR 1=1 --");
+  });
+
+  it("binds driver-substitution and backslash payloads as values", () => {
+    const a = compile("SELECT count() AS n FROM events WHERE event_name = '%(x)s'");
+    expect(a.binds).toContain("%(x)s");
+    const b = compile("SELECT count() AS n FROM events WHERE event_name = 'a\\b'");
+    expect(b.binds).toContain("a\\b");
+  });
+});
diff --git a/packages/core/test/services/voidql/substrate.test.ts b/packages/core/test/services/voidql/substrate.test.ts
new file mode 100644
index 000000000..fe5910a90
--- /dev/null
+++ b/packages/core/test/services/voidql/substrate.test.ts
@@ -0,0 +1,50 @@
+/**
+ * Cross-checks that the pure {@link SqlPiece} IR replays faithfully through the
+ * real `ch` substrate: `toStatement(ch, pieces).compile()` must reproduce exactly
+ * the SQL text + ordered binds that {@link renderDebugSql} predicts. This ties the
+ * verifier's view of the query (the IR) to the bytes that actually reach ClickHouse
+ * — every user value a bound `{pN:Type}` placeholder, never spliced.
+ *
+ * Uses `ClickhouseWebClient.makeUnchecked`, which builds no connection until the
+ * first query; `.compile()` is pure, so no ClickHouse is contacted.
+ */
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { Effect } from "effect";
+import * as Reactivity from "effect/unstable/reactivity/Reactivity";
+
+import { describe, expect, it } from "../../../src/testing/effect-vitest.ts";
+
+import type { Capability } from "../../../src/services/voidql/catalog/types.ts";
+import { compileToIr } from "../../../src/services/voidql/compile.ts";
+import { renderDebugSql, toStatement } from "../../../src/services/voidql/ir.ts";
+import { makeAuthorizedScope } from "../../../src/services/voidql/scope.ts";
+
+const SCOPE = makeAuthorizedScope({
+  organizationId: "org_a",
+  availableProjectIds: ["proj_1", "proj_2"],
+});
+
+const makeClient = () =>
+  Effect.runPromise(
+    ClickhouseWebClient.makeUnchecked(() => ({ url: "http://localhost:8123" })).pipe(
+      Effect.provide(Reactivity.layer),
+    ),
+  );
+
+describe("VoidQL IR ↔ ch substrate", () => {
+  it("toStatement().compile() reproduces the IR's SQL text and binds exactly", async () => {
+    const ch = await makeClient();
+    const cases = [
+      "SELECT event_name, count() AS n FROM events WHERE event_ts >= '2026-01-01' GROUP BY event_name",
+      "SELECT count() AS n FROM events WHERE properties.plan = 'pro'",
+      "SELECT e.event_name FROM events AS e JOIN ( SELECT distinct_id FROM persons WHERE distinct_id != '' ) AS p ON p.distinct_id = e.distinct_id",
+    ];
+    for (const text of cases) {
+      const ir = compileToIr(text, SCOPE, new Set<Capability>(["pii"]));
+      const expected = renderDebugSql(ir.pieces);
+      const [sql, params] = toStatement(ch, ir.pieces).compile();
+      expect(sql).toBe(expected.sql);
+      expect(params).toEqual(expected.binds);
+    }
+  });
+});
diff --git a/packages/core/test/services/webhookDispatch/WebhookDeliveryService.integration.test.ts b/packages/core/test/services/webhookDispatch/WebhookDeliveryService.integration.test.ts
new file mode 100644
index 000000000..12dc5812e
--- /dev/null
+++ b/packages/core/test/services/webhookDispatch/WebhookDeliveryService.integration.test.ts
@@ -0,0 +1,608 @@
+/**
+ * Integration tests for {@link WebhookDeliveryService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB).
+ *
+ * Unlike the catalog services, `WebhookDeliveryService` carries no auth or
+ * permission guard — it is the pure data/IO layer the durable workflow drives,
+ * operating on `deliveryId`/`endpointId` directly. So there is no
+ * forbidden-path test here; instead the focus is:
+ *  - `send` against a *real* local HTTP server (success 2xx, error 5xx, body
+ *    truncation) and a closed port (network error), plus verifying the
+ *    HMAC-SHA256 signature and request headers the receiver actually sees;
+ *  - the persisted side effects of `recordAttempt` / `markSucceeded` /
+ *    `markFailed` / `markExhausted` read straight back from the
+ *    `webhook_delivery_attempt`, `webhook_delivery`, and `webhook_endpoint`
+ *    rows in MySQL;
+ *  - the pure `nextRetryTime` backoff schedule including exhaustion.
+ *
+ * Conventions: each test creates its own endpoint/delivery parent rows under
+ * the seeded fixture project ({@link CoreTestFixture}), tracks every id it
+ * writes, and {@link withWebhookCleanup} deletes them (deepest dependent first)
+ * on exit, success or failure. The harness's global sweep does not cover the
+ * webhook tables, so per-test cleanup is the only thing that keeps the shared
+ * DB tidy. Ids are unique per call so a leftover row from a crashed run can't
+ * collide. `send` is exercised over a real `node:http` server bound to an
+ * ephemeral port and torn down in an `Effect.ensuring` finalizer.
+ */
+import { Effect } from "effect";
+import { describe, expect } from "vitest";
+
+import { WebhookDeliveryService } from "@voidhash/core/services/webhookDispatch/WebhookDeliveryService";
+import type { DeliverWebhookInput } from "@voidhash/core/services/webhookDispatch/WebhookDeliveryWorkflow";
+import {
+  Db,
+  WebhookDeliveryStatus,
+  WebhookEndpointStatus,
+  inArray,
+  webhookDeliveries,
+  webhookDeliveryAttempts,
+  webhookEndpoints,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+const uniqueId = (label: string) => `it-wh-${label}-${Date.now()}-${idSeq++}`;
+
+// ---------------------------------------------------------------------------
+// DB read-back helpers (bypass the service)
+// ---------------------------------------------------------------------------
+
+const findDeliveryRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.webhookDeliveries.findFirst({ where: { id } });
+  });
+
+const findEndpointRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.webhookEndpoints.findFirst({ where: { id } });
+  });
+
+/** All attempt rows recorded against a delivery. */
+const findAttemptRows = (deliveryId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.webhookDeliveryAttempts.findMany({
+      where: { webhookDeliveryId: deliveryId },
+    });
+  });
+
+// ---------------------------------------------------------------------------
+// Parent-row builders. The fixture seeds only user/org/member/project, so a
+// delivery test must create its own endpoint + delivery rows.
+// ---------------------------------------------------------------------------
+
+interface CreatedEndpoint {
+  readonly id: string;
+  readonly secret: string;
+}
+
+const insertEndpoint = (overrides?: { readonly consecutiveFailures?: number }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueId("ep");
+    const secret = `whsec_${uniqueId("secret")}`;
+    yield* db.insert(webhookEndpoints).values({
+      consecutiveFailures: overrides?.consecutiveFailures ?? 0,
+      createdAt: new Date(),
+      events: ["person.created"],
+      id,
+      name: "Integration Endpoint",
+      projectId,
+      secret,
+      status: WebhookEndpointStatus.Active,
+      url: "https://example.test/hook",
+    });
+    return { id, secret } satisfies CreatedEndpoint;
+  });
+
+const insertDelivery = (endpointId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueId("del");
+    yield* db.insert(webhookDeliveries).values({
+      createdAt: new Date(),
+      eventOccurredAt: new Date(),
+      eventType: "person.created",
+      id,
+      payload: { hello: "world" },
+      projectId,
+      status: WebhookDeliveryStatus.Pending,
+      webhookEndpointId: endpointId,
+    });
+    return id;
+  });
+
+// ---------------------------------------------------------------------------
+// Cleanup. Webhook rows are not covered by the global fixture sweep, so each
+// test deletes the endpoints/deliveries/attempts it created. Attempts depend
+// on deliveries which depend on endpoints, so delete deepest-first.
+// ---------------------------------------------------------------------------
+
+interface Tracked {
+  readonly endpointIds: string[];
+  readonly deliveryIds: string[];
+}
+
+const cleanupWebhookRows = (tracked: Tracked) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (tracked.deliveryIds.length > 0) {
+      const deliveryIds = [...tracked.deliveryIds];
+      yield* db
+        .delete(webhookDeliveryAttempts)
+        .where(inArray(webhookDeliveryAttempts.webhookDeliveryId, deliveryIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(webhookDeliveries)
+        .where(inArray(webhookDeliveries.id, deliveryIds))
+        .pipe(Effect.ignore);
+    }
+    if (tracked.endpointIds.length > 0) {
+      const endpointIds = [...tracked.endpointIds];
+      yield* db
+        .delete(webhookEndpoints)
+        .where(inArray(webhookEndpoints.id, endpointIds))
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every endpoint/delivery it creates is removed afterward,
+ * regardless of how the test exits. The body receives a `track` object whose
+ * arrays it pushes created ids onto; cleanup reads them lazily at finalization
+ * via `Effect.ensuring`, so it sees every id tracked while the body ran
+ * (including on failure).
+ */
+const withWebhookCleanup = <E, R>(
+  body: (track: Tracked) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const tracked: Tracked = { deliveryIds: [], endpointIds: [] };
+  return body(tracked).pipe(Effect.ensuring(cleanupWebhookRows(tracked)));
+};
+
+// ---------------------------------------------------------------------------
+// Local HTTP server harness for `send`. A real Node server bound to an
+// ephemeral port — no mocks; `send` performs a genuine `fetch` against it.
+//
+// `packages/core` is infra-pure and its tsconfig pulls in no `@types/node`, so
+// the `node:http` surface used here is described by a minimal local interface
+// and the module is loaded via a typed dynamic `import()`. The tests still run
+// on the real Node http server at runtime (vite-plus/vitest pool: "threads").
+// ---------------------------------------------------------------------------
+
+interface NodeRequest {
+  readonly headers: Record<string, string | string[] | undefined>;
+  on(event: "data", cb: (chunk: { toString(): string }) => void): void;
+  on(event: "end", cb: () => void): void;
+}
+interface NodeResponse {
+  writeHead(status: number, headers: Record<string, string>): void;
+  end(body: string): void;
+}
+interface NodeServer {
+  listen(port: number, host: string, cb: () => void): void;
+  address(): { readonly port: number } | null;
+  close(cb: () => void): void;
+}
+interface NodeHttp {
+  createServer(handler: (req: NodeRequest, res: NodeResponse) => void): NodeServer;
+}
+
+// The specifier is held in a variable so TypeScript does not try to resolve the
+// `node:http` module (the infra-pure core tsconfig ships no `@types/node`); the
+// import is real and resolves at runtime under Node.
+const HTTP_MODULE = "node:http";
+const loadHttp = (): Promise<NodeHttp> =>
+  import(HTTP_MODULE) as Promise<unknown> as Promise<NodeHttp>;
+
+interface CapturedRequest {
+  readonly body: string;
+  readonly headers: Record<string, string | string[] | undefined>;
+}
+
+interface RunningServer {
+  readonly captured: CapturedRequest[];
+  readonly close: Effect.Effect<void>;
+  readonly url: string;
+}
+
+const readBody = (req: NodeRequest) =>
+  new Promise<string>((resolve) => {
+    let data = "";
+    req.on("data", (chunk) => {
+      data += chunk.toString();
+    });
+    req.on("end", () => resolve(data));
+  });
+
+/** Start a server that replies with `respond(req.body)` for every request. */
+const startServer = (
+  respond: (body: string) => { readonly body: string; readonly status: number },
+): Effect.Effect<RunningServer> =>
+  Effect.promise(async () => {
+    const http = await loadHttp();
+    return await new Promise<RunningServer>((resolve) => {
+      const captured: CapturedRequest[] = [];
+      const server = http.createServer((req, res) => {
+        void readBody(req).then((body) => {
+          captured.push({ body, headers: req.headers });
+          const { body: responseBody, status } = respond(body);
+          res.writeHead(status, { "Content-Type": "text/plain" });
+          res.end(responseBody);
+        });
+      });
+      server.listen(0, "127.0.0.1", () => {
+        const port = server.address()?.port ?? 0;
+        resolve({
+          captured,
+          close: Effect.promise(() => new Promise<void>((done) => server.close(() => done()))),
+          url: `http://127.0.0.1:${port}/`,
+        });
+      });
+    });
+  });
+
+/** Build a {@link DeliverWebhookInput} pointed at `url` with `secret`. */
+const deliverInput = (overrides: {
+  readonly attemptNumber?: number;
+  readonly deliveryId?: string;
+  readonly endpointId?: string;
+  readonly secret?: string;
+  readonly url: string;
+}): DeliverWebhookInput => ({
+  attemptNumber: overrides.attemptNumber ?? 1,
+  deliveryId: overrides.deliveryId ?? uniqueId("send-del"),
+  endpointId: overrides.endpointId ?? uniqueId("send-ep"),
+  eventType: "person.created",
+  payload: { event: "person.created", id: "person_123" },
+  secret: overrides.secret ?? `whsec_${uniqueId("send-secret")}`,
+  url: overrides.url,
+});
+
+const bytesToHex = (bytes: Uint8Array) =>
+  Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+
+/** Recompute the service's signature independently to assert byte-equality. */
+const expectedSignature = (payload: string, timestamp: string, secret: string) =>
+  Effect.promise(async () => {
+    const key = await crypto.subtle.importKey(
+      "raw",
+      new TextEncoder().encode(secret),
+      { hash: "SHA-256", name: "HMAC" },
+      false,
+      ["sign"],
+    );
+    const sig = await crypto.subtle.sign(
+      "HMAC",
+      key,
+      new TextEncoder().encode(`${timestamp}.${payload}`),
+    );
+    return `v1=${bytesToHex(new Uint8Array(sig))}`;
+  });
+
+// ===========================================================================
+// send
+// ===========================================================================
+
+describe("WebhookDeliveryService.send", () => {
+  test(
+    "captures statusCode/responseBody/durationMs on a 2xx response; succeeded and no error",
+    Effect.gen(function* () {
+      const svc = yield* WebhookDeliveryService;
+      const server = yield* startServer(() => ({ body: "ok-body", status: 200 }));
+
+      const result = yield* svc
+        .send(deliverInput({ url: server.url }))
+        .pipe(Effect.ensuring(server.close));
+
+      expect(result.succeeded).toBe(true);
+      expect(result.statusCode).toBe(200);
+      expect(result.responseBody).toBe("ok-body");
+      expect(result.errorMessage).toBeNull();
+      expect(result.durationMs).toBeGreaterThanOrEqual(0);
+    }).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "captures statusCode/responseBody but not succeeded on a 5xx response; no error message",
+    Effect.gen(function* () {
+      const svc = yield* WebhookDeliveryService;
+      const server = yield* startServer(() => ({ body: "boom", status: 500 }));
+
+      const result = yield* svc
+        .send(deliverInput({ url: server.url }))
+        .pipe(Effect.ensuring(server.close));
+
+      expect(result.succeeded).toBe(false);
+      expect(result.statusCode).toBe(500);
+      expect(result.responseBody).toBe("boom");
+      // A non-2xx HTTP response is not a transport error: errorMessage stays null.
+      expect(result.errorMessage).toBeNull();
+    }).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "truncates the response body to 2048 chars",
+    Effect.gen(function* () {
+      const svc = yield* WebhookDeliveryService;
+      const huge = "x".repeat(5000);
+      const server = yield* startServer(() => ({ body: huge, status: 200 }));
+
+      const result = yield* svc
+        .send(deliverInput({ url: server.url }))
+        .pipe(Effect.ensuring(server.close));
+
+      expect(result.statusCode).toBe(200);
+      expect(result.responseBody?.length).toBe(2048);
+      expect(result.responseBody).toBe(huge.slice(0, 2048));
+    }).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "captures a transport error message (bounded to 500 chars) with no statusCode on a network failure",
+    Effect.gen(function* () {
+      const svc = yield* WebhookDeliveryService;
+
+      // Bind then immediately close a server to obtain a port nothing listens
+      // on, so the fetch gets a real connection-refused error.
+      const server = yield* startServer(() => ({ body: "", status: 200 }));
+      const deadUrl = server.url;
+      yield* server.close;
+
+      const result = yield* svc.send(deliverInput({ url: deadUrl }));
+
+      expect(result.succeeded).toBe(false);
+      expect(result.statusCode).toBeNull();
+      expect(result.responseBody).toBeNull();
+      expect(result.errorMessage).not.toBeNull();
+      // Service slices any Error.message to 500 chars; the bound must hold.
+      expect((result.errorMessage ?? "").length).toBeLessThanOrEqual(500);
+    }).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "signs the request with HMAC-SHA256 'v1=<hex>' and sets the webhook headers the receiver sees",
+    Effect.gen(function* () {
+      const svc = yield* WebhookDeliveryService;
+      const server = yield* startServer(() => ({ body: "ok", status: 200 }));
+      const secret = `whsec_${uniqueId("sig-secret")}`;
+      const input = deliverInput({ secret, url: server.url });
+
+      const result = yield* svc.send(input).pipe(Effect.ensuring(server.close));
+      expect(result.succeeded).toBe(true);
+
+      expect(server.captured.length).toBe(1);
+      const req = server.captured[0]!;
+      expect(req.headers["content-type"]).toBe("application/json");
+      expect(req.headers["x-webhook-event"]).toBe("person.created");
+
+      const signature = req.headers["x-webhook-signature"] as string;
+      const timestamp = req.headers["x-webhook-timestamp"] as string;
+      expect(typeof signature).toBe("string");
+      expect(signature.startsWith("v1=")).toBe(true);
+      expect(/^v1=[0-9a-f]{64}$/.test(signature)).toBe(true);
+      expect(typeof timestamp).toBe("string");
+
+      // The body the server received is exactly the JSON-serialized payload, and
+      // the signature is HMAC over `${timestamp}.${body}` with the secret.
+      expect(req.body).toBe(JSON.stringify(input.payload));
+      const expected = yield* expectedSignature(req.body, timestamp, secret);
+      expect(signature).toBe(expected);
+    }).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// recordAttempt
+// ===========================================================================
+
+describe("WebhookDeliveryService.recordAttempt", () => {
+  test(
+    "persists a delivery-attempt row carrying every result field",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookDeliveryService;
+        const endpoint = yield* insertEndpoint();
+        track.endpointIds.push(endpoint.id);
+        const deliveryId = yield* insertDelivery(endpoint.id);
+        track.deliveryIds.push(deliveryId);
+
+        const input = deliverInput({
+          attemptNumber: 2,
+          deliveryId,
+          endpointId: endpoint.id,
+          secret: endpoint.secret,
+          url: "https://example.test/hook",
+        });
+
+        yield* svc.recordAttempt(input, {
+          durationMs: 123,
+          errorMessage: "boom",
+          responseBody: "server-said-no",
+          statusCode: 502,
+          succeeded: false,
+        });
+
+        const rows = yield* findAttemptRows(deliveryId);
+        const attempt = rows.find((row) => row.attemptNumber === 2);
+        expect(attempt).toBeDefined();
+        expect(attempt?.webhookDeliveryId).toBe(deliveryId);
+        expect(attempt?.statusCode).toBe(502);
+        expect(attempt?.errorMessage).toBe("boom");
+        expect(attempt?.responseBody).toBe("server-said-no");
+        expect(attempt?.durationMs).toBe(123);
+        expect(attempt?.succeeded).toBe(false);
+      }),
+    ).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// markSucceeded
+// ===========================================================================
+
+describe("WebhookDeliveryService.markSucceeded", () => {
+  test(
+    "marks the delivery Succeeded with completedAt, clears nextAttemptAt, and resets the endpoint failure counter",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookDeliveryService;
+        // Endpoint starts with prior failures and no lastSuccessAt.
+        const endpoint = yield* insertEndpoint({ consecutiveFailures: 3 });
+        track.endpointIds.push(endpoint.id);
+        const deliveryId = yield* insertDelivery(endpoint.id);
+        track.deliveryIds.push(deliveryId);
+
+        yield* svc.markSucceeded(
+          deliverInput({
+            attemptNumber: 2,
+            deliveryId,
+            endpointId: endpoint.id,
+            secret: endpoint.secret,
+            url: "https://example.test/hook",
+          }),
+        );
+
+        const delivery = yield* findDeliveryRow(deliveryId);
+        expect(delivery?.status).toBe(WebhookDeliveryStatus.Succeeded);
+        expect(delivery?.attemptCount).toBe(2);
+        expect(delivery?.completedAt).not.toBeNull();
+        expect(delivery?.nextAttemptAt).toBeNull();
+
+        const ep = yield* findEndpointRow(endpoint.id);
+        expect(ep?.consecutiveFailures).toBe(0);
+        expect(ep?.lastSuccessAt).not.toBeNull();
+      }),
+    ).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// markFailed
+// ===========================================================================
+
+describe("WebhookDeliveryService.markFailed", () => {
+  test(
+    "marks the delivery Failed, schedules nextAttemptAt, and increments the endpoint failure counter",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookDeliveryService;
+        const endpoint = yield* insertEndpoint({ consecutiveFailures: 0 });
+        track.endpointIds.push(endpoint.id);
+        const deliveryId = yield* insertDelivery(endpoint.id);
+        track.deliveryIds.push(deliveryId);
+
+        // Whole-second instant: MySQL TIMESTAMP has no sub-second precision and
+        // ROUNDS (not floors) a fractional second, so a sub-second `nextRetry`
+        // could store one second ahead of the floored comparison below.
+        const nextRetry = new Date(Math.floor((Date.now() + 60_000) / 1000) * 1000);
+        yield* svc.markFailed(
+          deliverInput({
+            attemptNumber: 1,
+            deliveryId,
+            endpointId: endpoint.id,
+            secret: endpoint.secret,
+            url: "https://example.test/hook",
+          }),
+          nextRetry,
+        );
+
+        const delivery = yield* findDeliveryRow(deliveryId);
+        expect(delivery?.status).toBe(WebhookDeliveryStatus.Failed);
+        expect(delivery?.attemptCount).toBe(1);
+        expect(delivery?.nextAttemptAt).not.toBeNull();
+        // MySQL timestamps drop sub-second precision; compare at second granularity.
+        expect(Math.floor((delivery?.nextAttemptAt?.getTime() ?? 0) / 1000)).toBe(
+          Math.floor(nextRetry.getTime() / 1000),
+        );
+
+        const ep = yield* findEndpointRow(endpoint.id);
+        expect(ep?.consecutiveFailures).toBe(1);
+      }),
+    ).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// markExhausted
+// ===========================================================================
+
+describe("WebhookDeliveryService.markExhausted", () => {
+  test(
+    "marks the delivery Exhausted with completedAt, clears nextAttemptAt, and leaves the failure counter at attemptCount",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookDeliveryService;
+        const endpoint = yield* insertEndpoint({ consecutiveFailures: 4 });
+        track.endpointIds.push(endpoint.id);
+        const deliveryId = yield* insertDelivery(endpoint.id);
+        track.deliveryIds.push(deliveryId);
+
+        yield* svc.markExhausted(
+          deliverInput({
+            attemptNumber: 5,
+            deliveryId,
+            endpointId: endpoint.id,
+            secret: endpoint.secret,
+            url: "https://example.test/hook",
+          }),
+        );
+
+        const delivery = yield* findDeliveryRow(deliveryId);
+        expect(delivery?.status).toBe(WebhookDeliveryStatus.Exhausted);
+        expect(delivery?.attemptCount).toBe(5);
+        expect(delivery?.completedAt).not.toBeNull();
+        expect(delivery?.nextAttemptAt).toBeNull();
+
+        const ep = yield* findEndpointRow(endpoint.id);
+        expect(ep?.consecutiveFailures).toBe(5);
+      }),
+    ).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// nextRetryTime (pure backoff schedule)
+// ===========================================================================
+
+describe("WebhookDeliveryService.nextRetryTime", () => {
+  test(
+    "follows the 60s/300s/1800s/7200s/86400s schedule then returns null once exhausted",
+    Effect.gen(function* () {
+      const svc = yield* WebhookDeliveryService;
+
+      // Allow a small wall-clock tolerance: the service reads Date.now() inside.
+      const expectDelay = (attemptNumber: number, seconds: number) => {
+        const before = Date.now();
+        const result = svc.nextRetryTime(attemptNumber);
+        const after = Date.now();
+        expect(result).not.toBeNull();
+        const delta = (result as Date).getTime() - before;
+        expect(delta).toBeGreaterThanOrEqual(seconds * 1000 - 1);
+        expect(delta).toBeLessThanOrEqual(seconds * 1000 + (after - before) + 5000);
+      };
+
+      expectDelay(1, 60);
+      expectDelay(2, 300);
+      expectDelay(3, 1800);
+      expectDelay(4, 7200);
+      expectDelay(5, 86400);
+
+      // Beyond the schedule, no further retry is offered.
+      expect(svc.nextRetryTime(6)).toBeNull();
+      expect(svc.nextRetryTime(7)).toBeNull();
+      expect(svc.nextRetryTime(100)).toBeNull();
+    }).pipe(Effect.provide(WebhookDeliveryService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/webhookDispatch/WebhookDispatchService.integration.test.ts b/packages/core/test/services/webhookDispatch/WebhookDispatchService.integration.test.ts
new file mode 100644
index 000000000..73e6c6048
--- /dev/null
+++ b/packages/core/test/services/webhookDispatch/WebhookDispatchService.integration.test.ts
@@ -0,0 +1,422 @@
+/**
+ * Integration tests for {@link WebhookDispatchService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB). The producer side of outbound webhooks: `emit` finds the
+ * project's active, subscribed endpoints, writes a `webhook_delivery` row per
+ * endpoint, then forks a fire-and-forget dispatch onto {@link
+ * WebhookDeliveryWorkflow}.
+ *
+ * Each test drives `emit` end-to-end and verifies the *persisted* side effects
+ * rather than just the return value:
+ *  - the `webhook_delivery` rows written in MySQL (status `Pending`,
+ *    `attemptCount` 0, payload + eventType round-tripped),
+ *  - the `deliveriesCreated` count returned,
+ *  - the dispatch hand-off recorded by an in-process workflow stub.
+ *
+ * `WebhookDeliveryWorkflow` is an abstract port whose only concrete adapter is a
+ * Cloudflare Workflow — there is no in-process seam for it — so it is replaced
+ * by a recording stub layer that captures each `dispatch` call. The real
+ * delivery (HTTP POST + retry) is the workflow runtime's concern and is covered
+ * by a `test.todo` below.
+ *
+ * Conventions used throughout:
+ *  - Every test shares the one seeded fixture project ({@link CoreTestFixture})
+ *    but cleans up after itself: {@link withCleanup} deletes the endpoints and
+ *    deliveries it created on exit, success or failure. The global teardown
+ *    sweep is only a backstop. Assertions stay membership-based and ids are
+ *    unique per call so a leftover row from a crashed run can't collide.
+ *  - `emit` performs no permission check and depends on no `AuthSession`, so
+ *    there is no forbidden-path case and no `CoreAuthSession.authenticate()`.
+ *  - Typed failures are asserted with `Effect.flip` (project convention),
+ *    narrowing the swapped error with `instanceof` before reading its fields.
+ */
+import { Effect, Layer, Ref } from "effect";
+import { describe, expect, test as vitestTest } from "vitest";
+
+import { WebhookDispatchService } from "@voidhash/core/services/webhookDispatch/WebhookDispatchService";
+import {
+  type DeliverWebhookInput,
+  WebhookDeliveryWorkflow,
+} from "@voidhash/core/services/webhookDispatch/WebhookDeliveryWorkflow";
+import { WebhookServiceError } from "@voidhash/core/services/webhookManager/WebhookManagerService";
+import {
+  WebhookDeliveryStatus,
+  WebhookEndpointStatus,
+  Db,
+  inArray,
+  webhookDeliveries,
+  webhookEndpoints,
+} from "@voidhash/db";
+
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so ids stay unique even within the same millisecond. */
+let idSeq = 0;
+const uniqueId = (label: string) => `it-wh-${label}-${Date.now()}-${idSeq++}`;
+
+/**
+ * Recording {@link WebhookDeliveryWorkflow} stub. The concrete adapter is a
+ * Cloudflare Workflow with no in-process seam, so dispatches are captured into a
+ * `Ref` instead. `dispatch` returns immediately (`Effect.void`); the service
+ * forks it fire-and-forget, so a test reads the recorded calls after giving the
+ * detached fibers a tick to run.
+ */
+const makeRecordingWorkflow = Effect.gen(function* () {
+  const calls = yield* Ref.make<ReadonlyArray<DeliverWebhookInput>>([]);
+  const layer = Layer.succeed(WebhookDeliveryWorkflow, {
+    dispatch: (input: DeliverWebhookInput) => Ref.update(calls, (prev) => [...prev, input]),
+  });
+  return { calls, layer } as const;
+});
+
+/** Read a single delivery row straight from the database, bypassing the service. */
+const findDeliveryRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.webhookDeliveries.findFirst({ where: { id } });
+  });
+
+/** All delivery rows recorded for a given endpoint. */
+const findDeliveriesForEndpoint = (endpointId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.webhookDeliveries.findMany({
+      where: { webhookEndpointId: endpointId },
+    });
+  });
+
+/**
+ * Insert a webhook endpoint directly so a test can control its `status` and
+ * subscribed `events` precisely. Returns the inserted id + secret/url for
+ * dispatch assertions.
+ */
+const insertEndpoint = (input: {
+  readonly id: string;
+  readonly events: ReadonlyArray<string>;
+  readonly status?: number;
+  readonly url?: string;
+  readonly secret?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const url = input.url ?? `https://example.test/${input.id}`;
+    const secret = input.secret ?? `whsec_${input.id}`;
+    yield* db.insert(webhookEndpoints).values({
+      consecutiveFailures: 0,
+      createdAt: new Date(),
+      events: [...input.events],
+      id: input.id,
+      name: `Endpoint ${input.id}`,
+      projectId,
+      secret,
+      status: input.status ?? WebhookEndpointStatus.Active,
+      url,
+    });
+    return { id: input.id, secret, url };
+  });
+
+/**
+ * Delete the given endpoints and every delivery row belonging to them. Each
+ * delete is `ignore`d so a missing row never turns the finalizer into a failure.
+ */
+const cleanup = (endpointIds: ReadonlyArray<string>) =>
+  Effect.gen(function* () {
+    if (endpointIds.length === 0) return;
+    const db = yield* Db;
+    const targets = [...endpointIds];
+    yield* db
+      .delete(webhookDeliveries)
+      .where(inArray(webhookDeliveries.webhookEndpointId, targets))
+      .pipe(Effect.ignore);
+    yield* db
+      .delete(webhookEndpoints)
+      .where(inArray(webhookEndpoints.id, targets))
+      .pipe(Effect.ignore);
+  });
+
+/**
+ * Wrap a test body so every endpoint (and its deliveries) it creates is removed
+ * afterward, regardless of how the test exits. Pass each created endpoint id to
+ * the `track` callback; cleanup reads the collected ids lazily at finalization
+ * via `Effect.ensuring`, so it sees every id tracked while the body ran.
+ */
+const withCleanup = <E, R>(
+  body: (track: (id: string) => void) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const createdIds: string[] = [];
+  return body((id) => {
+    createdIds.push(id);
+  }).pipe(Effect.ensuring(cleanup(createdIds)));
+};
+
+/**
+ * Provide the service-under-test layer backed by a fresh recording workflow
+ * stub, and expose that stub's `calls` Ref to the body. The harness supplies
+ * `Db`; the stub discharges {@link WebhookDeliveryWorkflow}, the service's only
+ * non-harness dependency.
+ */
+const runEmit = <E>(
+  body: (
+    recorded: Ref.Ref<ReadonlyArray<DeliverWebhookInput>>,
+  ) => Effect.Effect<void, E, Db | WebhookDispatchService>,
+): Effect.Effect<void, E, Db> =>
+  Effect.gen(function* () {
+    const workflow = yield* makeRecordingWorkflow;
+    yield* body(workflow.calls).pipe(
+      Effect.provide(WebhookDispatchService.layer.pipe(Layer.provide(workflow.layer))),
+    );
+  });
+
+describe("WebhookDispatchService.emit", () => {
+  test(
+    "creates a Pending delivery row for an active subscribed endpoint and dispatches attempt 1",
+    withCleanup((track) =>
+      runEmit((recorded) =>
+        Effect.gen(function* () {
+          const endpointId = uniqueId("active");
+          track(endpointId);
+          const endpoint = yield* insertEndpoint({
+            id: endpointId,
+            events: ["person.created", "person.updated"],
+          });
+
+          const dispatch = yield* WebhookDispatchService;
+          const payload = { id: "person_1", name: "Ada" };
+          const result = yield* dispatch.emit({
+            eventType: "person.created",
+            payload,
+            projectId,
+          });
+
+          // `emit` counts every active subscribed endpoint in the *shared*
+          // fixture project, not just the one this test created, so this is a
+          // lower bound; the exact per-endpoint row count below is the scoped,
+          // deterministic check.
+          expect(result.deliveriesCreated).toBeGreaterThanOrEqual(1);
+
+          const rows = yield* findDeliveriesForEndpoint(endpointId);
+          expect(rows.length).toBe(1);
+          const row = rows[0];
+          expect(row?.status).toBe(WebhookDeliveryStatus.Pending);
+          expect(row?.attemptCount).toBe(0);
+          expect(row?.eventType).toBe("person.created");
+          expect(row?.projectId).toBe(projectId);
+          expect(row?.webhookEndpointId).toBe(endpointId);
+          expect(row?.payload).toEqual(payload);
+          expect(row?.eventOccurredAt).toBeInstanceOf(Date);
+
+          // Let the fire-and-forget dispatch fiber run, then assert the hand-off.
+          yield* Effect.sleep("100 millis");
+          const calls = yield* Ref.get(recorded);
+          const dispatched = calls.find((call) => call.deliveryId === row?.id);
+          expect(dispatched).toBeDefined();
+          expect(dispatched?.attemptNumber).toBe(1);
+          expect(dispatched?.endpointId).toBe(endpointId);
+          expect(dispatched?.eventType).toBe("person.created");
+          expect(dispatched?.payload).toEqual(payload);
+          expect(dispatched?.secret).toBe(endpoint.secret);
+          expect(dispatched?.url).toBe(endpoint.url);
+        }),
+      ),
+    ),
+  );
+
+  test(
+    "fans out to every active endpoint subscribed to the event and returns the matching count",
+    withCleanup((track) =>
+      runEmit((recorded) =>
+        Effect.gen(function* () {
+          const subA = uniqueId("fan-a");
+          const subB = uniqueId("fan-b");
+          track(subA);
+          track(subB);
+          yield* insertEndpoint({ id: subA, events: ["subscription.created"] });
+          yield* insertEndpoint({
+            id: subB,
+            events: ["subscription.created", "purchase.completed"],
+          });
+
+          const dispatch = yield* WebhookDispatchService;
+          const result = yield* dispatch.emit({
+            eventType: "subscription.created",
+            payload: { plan: "pro" },
+            projectId,
+          });
+
+          // Project-wide count, so a lower bound; the per-endpoint exact counts
+          // below pin down that *both* of this test's endpoints fanned out.
+          expect(result.deliveriesCreated).toBeGreaterThanOrEqual(2);
+
+          const rowsA = yield* findDeliveriesForEndpoint(subA);
+          const rowsB = yield* findDeliveriesForEndpoint(subB);
+          expect(rowsA.length).toBe(1);
+          expect(rowsB.length).toBe(1);
+
+          yield* Effect.sleep("100 millis");
+          const calls = yield* Ref.get(recorded);
+          const endpointsDispatched = calls.map((call) => call.endpointId);
+          expect(endpointsDispatched).toContain(subA);
+          expect(endpointsDispatched).toContain(subB);
+        }),
+      ),
+    ),
+  );
+
+  test(
+    "skips endpoints not subscribed to the event and disabled endpoints",
+    withCleanup((track) =>
+      runEmit((recorded) =>
+        Effect.gen(function* () {
+          const subscribed = uniqueId("filter-subscribed");
+          const wrongEvent = uniqueId("filter-wrong-event");
+          const disabled = uniqueId("filter-disabled");
+          track(subscribed);
+          track(wrongEvent);
+          track(disabled);
+
+          // Subscribed + active: should receive a delivery.
+          yield* insertEndpoint({ id: subscribed, events: ["purchase.refunded"] });
+          // Active but subscribed to a different event: skipped by membership filter.
+          yield* insertEndpoint({ id: wrongEvent, events: ["purchase.completed"] });
+          // Subscribed to the event but disabled: skipped by the status filter.
+          yield* insertEndpoint({
+            id: disabled,
+            events: ["purchase.refunded"],
+            status: WebhookEndpointStatus.Disabled,
+          });
+
+          const dispatch = yield* WebhookDispatchService;
+          const result = yield* dispatch.emit({
+            eventType: "purchase.refunded",
+            payload: { reason: "duplicate" },
+            projectId,
+          });
+
+          // Project-wide count, so a lower bound; the per-endpoint exact counts
+          // below verify the membership/status filter actually skipped the
+          // wrong-event and disabled endpoints this test created.
+          expect(result.deliveriesCreated).toBeGreaterThanOrEqual(1);
+          expect((yield* findDeliveriesForEndpoint(subscribed)).length).toBe(1);
+          expect((yield* findDeliveriesForEndpoint(wrongEvent)).length).toBe(0);
+          expect((yield* findDeliveriesForEndpoint(disabled)).length).toBe(0);
+
+          yield* Effect.sleep("100 millis");
+          const calls = yield* Ref.get(recorded);
+          const endpointsDispatched = calls.map((call) => call.endpointId);
+          expect(endpointsDispatched).toContain(subscribed);
+          expect(endpointsDispatched).not.toContain(wrongEvent);
+          expect(endpointsDispatched).not.toContain(disabled);
+        }),
+      ),
+    ),
+  );
+
+  test(
+    "returns deliveriesCreated=0 and writes nothing when no endpoint is subscribed",
+    // No cleanup wrapper: the only endpoint is for an unrelated event and is
+    // tracked for deletion; emit itself writes no delivery rows.
+    withCleanup((track) =>
+      runEmit((recorded) =>
+        Effect.gen(function* () {
+          const endpointId = uniqueId("none");
+          track(endpointId);
+          yield* insertEndpoint({ id: endpointId, events: ["person.created"] });
+
+          const dispatch = yield* WebhookDispatchService;
+          const result = yield* dispatch.emit({
+            eventType: "subscription.expired",
+            payload: { at: 1 },
+            projectId,
+          });
+
+          expect(result.deliveriesCreated).toBe(0);
+          expect((yield* findDeliveriesForEndpoint(endpointId)).length).toBe(0);
+
+          yield* Effect.sleep("50 millis");
+          const calls = yield* Ref.get(recorded);
+          expect(calls.length).toBe(0);
+        }),
+      ),
+    ),
+  );
+
+  test(
+    "round-trips a complex nested object payload through the JSON delivery column",
+    withCleanup((track) =>
+      runEmit((recorded) =>
+        Effect.gen(function* () {
+          const endpointId = uniqueId("payload");
+          track(endpointId);
+          yield* insertEndpoint({ id: endpointId, events: ["subscription.renewed"] });
+
+          const payload = {
+            metadata: { flags: [true, false], tags: ["a", "b"] },
+            nested: { deep: { value: 42 } },
+            person: { distinctIds: ["d1", "d2"], id: "person_x" },
+          };
+
+          const dispatch = yield* WebhookDispatchService;
+          yield* dispatch.emit({ eventType: "subscription.renewed", payload, projectId });
+
+          const rows = yield* findDeliveriesForEndpoint(endpointId);
+          expect(rows.length).toBe(1);
+          expect(rows[0]?.payload).toEqual(payload);
+
+          yield* Effect.sleep("100 millis");
+          const calls = yield* Ref.get(recorded);
+          const dispatched = calls.find((call) => call.endpointId === endpointId);
+          expect(dispatched?.payload).toEqual(payload);
+        }),
+      ),
+    ),
+  );
+
+  test(
+    "wraps an infrastructural failure as WebhookServiceError and writes no delivery row",
+    withCleanup((track) =>
+      runEmit(() =>
+        Effect.gen(function* () {
+          const endpointId = uniqueId("db-error");
+          track(endpointId);
+          yield* insertEndpoint({ id: endpointId, events: ["person.deleted"] });
+
+          // A circular object cannot be serialized to the JSON `payload` column;
+          // the driver throws inside `db.use`, surfacing as `DatabaseError`,
+          // which `emit`'s `catchTags` maps to `WebhookServiceError`.
+          const circular: Record<string, unknown> = { ok: true };
+          circular.self = circular;
+
+          const dispatch = yield* WebhookDispatchService;
+          const error = yield* Effect.flip(
+            dispatch.emit({
+              eventType: "person.deleted",
+              payload: circular,
+              projectId,
+            }),
+          );
+          expect(error).toBeInstanceOf(WebhookServiceError);
+          if (error instanceof WebhookServiceError) {
+            expect(error.cause).toContain("Failed to emit webhook event");
+          }
+
+          // The failed insert must leave no delivery row behind for the endpoint.
+          expect((yield* findDeliveriesForEndpoint(endpointId)).length).toBe(0);
+        }),
+      ),
+    ),
+  );
+
+  // Real outbound delivery (signed HTTP POST + retry/backoff + attempt-log rows)
+  // lives in the Cloudflare `DeliverWebhookWorkflow` adapter behind the abstract
+  // `WebhookDeliveryWorkflow` port. There is no in-process seam for it, so it is
+  // deferred to an app-level test running against the workflow runtime. The
+  // producer's hand-off (delivery row + dispatch call) is fully covered above.
+  vitestTest.todo(
+    "delivers the webhook over HTTP and records attempt rows — deferred: requires the Cloudflare Workflow runtime backing WebhookDeliveryWorkflow",
+  );
+});
diff --git a/packages/core/test/services/webhookManager/WebhookManagerService.integration.test.ts b/packages/core/test/services/webhookManager/WebhookManagerService.integration.test.ts
new file mode 100644
index 000000000..f6055634c
--- /dev/null
+++ b/packages/core/test/services/webhookManager/WebhookManagerService.integration.test.ts
@@ -0,0 +1,1019 @@
+/**
+ * Integration tests for {@link WebhookManagerService}, run against the real
+ * backend stack provisioned once by `test/_testing/globalSetup.ts` (live
+ * PlanetScale DB; only the project schema cache is an in-memory stub).
+ *
+ * `WebhookManagerService` is the CRUD surface for outbound webhook endpoints and
+ * their delivery history. Like {@link WebhookDeliveryService} it carries no auth
+ * or permission guard — every public method scopes by `projectId` directly —
+ * so there is no forbidden-path test here. Instead each test drives the service
+ * end-to-end and verifies the *persisted* side effects rather than just the
+ * return value:
+ *  - the `webhook_endpoint` / `webhook_delivery` row written / updated / removed
+ *    in MySQL (read straight back, bypassing the service),
+ *  - the matching `audit_log` row (entity, action, actor, change snapshot),
+ *  - the generated `whsec_<64 hex>` secret on create / rotate.
+ *
+ * The concrete {@link WebhookDeliveryWorkflow} is a Cloudflare Workflow adapter
+ * wired at the application root and absent in-process, so we substitute a
+ * recording stub (mirroring `apps/backend` `TestLayers`). `updateEndpoint`
+ * intentionally does *not* dispatch; only `retryDelivery` and `testEndpoint`
+ * hand a delivery off, and they do so via `Effect.forkDetach` (fire-and-forget).
+ * Those tests assert the synchronous, deterministic persisted state and use
+ * {@link waitForDispatch} (a bounded poll that yields control so the detached
+ * fiber can run) to observe the dispatch payload best-effort.
+ *
+ * Conventions: the webhook tables are not covered by the global fixture sweep,
+ * so each test creates its own endpoint/delivery parent rows under the seeded
+ * fixture project ({@link CoreTestFixture}), tracks every id it writes, and
+ * {@link withWebhookCleanup} deletes them (deepest dependent first, plus their
+ * append-only audit rows) on exit, success or failure. Ids/slugs are unique per
+ * call so a leftover row from a crashed run can't collide, and assertions stay
+ * membership-based (never exact `getEndpoints`/`getDeliveries` counts).
+ */
+import { Deferred, Effect, Layer } from "effect";
+import { describe, expect } from "vitest";
+
+import { WebhookManagerService } from "@voidhash/core/services/webhookManager/WebhookManagerService";
+import {
+  WebhookDeliveryNotFoundError,
+  WebhookEndpointNotFoundError,
+  WebhookValidationError,
+} from "@voidhash/core/domain/webhook/Webhook";
+import {
+  type DeliverWebhookInput,
+  WebhookDeliveryWorkflow,
+} from "@voidhash/core/services/webhookDispatch/WebhookDeliveryWorkflow";
+import {
+  AuditLogAction,
+  AuditLogActorType,
+  AuditLogEntityType,
+  Db,
+  WebhookDeliveryStatus,
+  WebhookEndpointStatus,
+  and,
+  auditLogs,
+  eq,
+  inArray,
+  webhookDeliveries,
+  webhookDeliveryAttempts,
+  webhookEndpoints,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const projectId = CoreTestFixture.projectId;
+
+/** Monotonic counter so slugs/ids stay unique even within the same millisecond. */
+let seq = 0;
+const uniqueSlug = (label: string) => `it-wh-${label}-${Date.now()}-${seq++}`;
+
+// ---------------------------------------------------------------------------
+// Recording WebhookDeliveryWorkflow stub. The concrete adapter is a Cloudflare
+// Workflow wired at the app root; here we substitute a layer whose `dispatch`
+// records its input (and completes a Deferred so a test can await the detached
+// fork). One fresh recorder per test so calls never leak between tests.
+// ---------------------------------------------------------------------------
+
+interface Recorder {
+  readonly calls: DeliverWebhookInput[];
+  readonly firstDispatch: Deferred.Deferred<DeliverWebhookInput>;
+  readonly layer: Layer.Layer<WebhookDeliveryWorkflow>;
+}
+
+const makeRecorder = (): Recorder => {
+  const calls: DeliverWebhookInput[] = [];
+  const firstDispatch = Deferred.makeUnsafe<DeliverWebhookInput>();
+  const layer = Layer.succeed(WebhookDeliveryWorkflow, {
+    dispatch: (input: DeliverWebhookInput) =>
+      Effect.gen(function* () {
+        calls.push(input);
+        yield* Deferred.succeed(firstDispatch, input);
+      }),
+  });
+  return { calls, firstDispatch, layer };
+};
+
+/**
+ * Await the first dispatch the recorder captured, bounded by a timeout. The
+ * service forks `dispatch` with `Effect.forkDetach`, so awaiting the Deferred
+ * yields control to let that daemon fiber run; the timeout keeps the test from
+ * hanging if a path (unexpectedly) never dispatches.
+ */
+const waitForDispatch = (recorder: Recorder) =>
+  Deferred.await(recorder.firstDispatch).pipe(Effect.timeoutOption("10 seconds"));
+
+// ---------------------------------------------------------------------------
+// DB read-back helpers (bypass the service)
+// ---------------------------------------------------------------------------
+
+const findEndpointRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.webhookEndpoints.findFirst({ where: { id } });
+  });
+
+const findDeliveryRow = (id: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db.query.webhookDeliveries.findFirst({ where: { id } });
+  });
+
+/** All audit-log rows recorded for a given webhook-endpoint entity. */
+const findEndpointAuditEntries = (entityId: string) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    return yield* db
+      .select()
+      .from(auditLogs)
+      .where(
+        and(
+          eq(auditLogs.entityType, AuditLogEntityType.WebhookEndpoint),
+          eq(auditLogs.entityId, entityId),
+        ),
+      );
+  });
+
+// ---------------------------------------------------------------------------
+// Parent-row builders. The fixture seeds only user/org/member/project, so a
+// manager test that needs an existing endpoint/delivery creates its own rows.
+// ---------------------------------------------------------------------------
+
+interface CreatedEndpoint {
+  readonly id: string;
+  readonly secret: string;
+  readonly url: string;
+}
+
+const insertEndpoint = (overrides?: {
+  readonly projectId?: string;
+  readonly status?: number;
+  readonly url?: string;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueSlug("ep");
+    const secret = `whsec_${uniqueSlug("secret")}`;
+    const url = overrides?.url ?? "https://example.test/hook";
+    yield* db.insert(webhookEndpoints).values({
+      consecutiveFailures: 0,
+      createdAt: new Date(),
+      events: ["person.created"],
+      id,
+      name: "Seed Endpoint",
+      projectId: overrides?.projectId ?? projectId,
+      secret,
+      status: overrides?.status ?? WebhookEndpointStatus.Active,
+      url,
+    });
+    return { id, secret, url } satisfies CreatedEndpoint;
+  });
+
+const insertDelivery = (input: {
+  readonly endpointId: string;
+  readonly projectId?: string;
+  readonly status?: number;
+  readonly attemptCount?: number;
+}) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueSlug("del");
+    yield* db.insert(webhookDeliveries).values({
+      attemptCount: input.attemptCount ?? 0,
+      completedAt: new Date(),
+      createdAt: new Date(),
+      eventOccurredAt: new Date(),
+      eventType: "person.created",
+      id,
+      nextAttemptAt: new Date(),
+      payload: { hello: "world" },
+      projectId: input.projectId ?? projectId,
+      status: input.status ?? WebhookDeliveryStatus.Failed,
+      webhookEndpointId: input.endpointId,
+    });
+    return id;
+  });
+
+const insertAttempt = (input: { readonly deliveryId: string; readonly attemptNumber: number }) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const id = uniqueSlug("att");
+    yield* db.insert(webhookDeliveryAttempts).values({
+      attemptNumber: input.attemptNumber,
+      createdAt: new Date(),
+      durationMs: 42,
+      errorMessage: `attempt ${input.attemptNumber}`,
+      id,
+      responseBody: `body ${input.attemptNumber}`,
+      statusCode: 500,
+      succeeded: false,
+      webhookDeliveryId: input.deliveryId,
+    });
+    return id;
+  });
+
+// ---------------------------------------------------------------------------
+// Cleanup. Webhook rows are not covered by the global fixture sweep, so each
+// test deletes the endpoints/deliveries/attempts it created (deepest dependent
+// first) plus the append-only audit rows keyed by entityId.
+// ---------------------------------------------------------------------------
+
+interface Tracked {
+  readonly endpointIds: string[];
+  readonly deliveryIds: string[];
+}
+
+const cleanupWebhookRows = (tracked: Tracked) =>
+  Effect.gen(function* () {
+    const db = yield* Db;
+    if (tracked.deliveryIds.length > 0) {
+      const deliveryIds = [...tracked.deliveryIds];
+      yield* db
+        .delete(webhookDeliveryAttempts)
+        .where(inArray(webhookDeliveryAttempts.webhookDeliveryId, deliveryIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(webhookDeliveries)
+        .where(inArray(webhookDeliveries.id, deliveryIds))
+        .pipe(Effect.ignore);
+    }
+    if (tracked.endpointIds.length > 0) {
+      const endpointIds = [...tracked.endpointIds];
+      // Endpoint deliveries created by `testEndpoint` are keyed off the endpoint,
+      // not tracked individually; clear them before the endpoint rows.
+      yield* db
+        .delete(webhookDeliveries)
+        .where(inArray(webhookDeliveries.webhookEndpointId, endpointIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(webhookEndpoints)
+        .where(inArray(webhookEndpoints.id, endpointIds))
+        .pipe(Effect.ignore);
+      yield* db
+        .delete(auditLogs)
+        .where(
+          and(
+            eq(auditLogs.entityType, AuditLogEntityType.WebhookEndpoint),
+            inArray(auditLogs.entityId, endpointIds),
+          ),
+        )
+        .pipe(Effect.ignore);
+    }
+  });
+
+/**
+ * Wrap a test body so every endpoint/delivery it creates is removed afterward,
+ * regardless of how the test exits. The body receives a `track` object whose
+ * arrays it pushes created ids onto; cleanup reads them lazily at finalization
+ * via `Effect.ensuring`, so it sees every id tracked while the body ran
+ * (including on failure).
+ */
+const withWebhookCleanup = <E, R>(
+  body: (track: Tracked) => Effect.Effect<void, E, R>,
+): Effect.Effect<void, E, R | Db> => {
+  const tracked: Tracked = { deliveryIds: [], endpointIds: [] };
+  return body(tracked).pipe(Effect.ensuring(cleanupWebhookRows(tracked)));
+};
+
+const SECRET_PATTERN = /^whsec_[0-9a-f]{64}$/;
+
+// ===========================================================================
+// createEndpoint
+// ===========================================================================
+
+describe("WebhookManagerService.createEndpoint", () => {
+  test(
+    "persists an active endpoint with a whsec secret and records a Created audit entry",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const name = "Integration Endpoint";
+        const url = "https://example.test/created";
+        const events = ["person.created", "subscription.renewed"];
+
+        const created = yield* svc.createEndpoint({
+          description: "from integration test",
+          events,
+          name,
+          projectId,
+          url,
+        });
+        track.endpointIds.push(created.id);
+
+        // Return-value shape.
+        expect(created.id.startsWith("wh_ep")).toBe(true);
+        expect(created.status).toBe("active");
+        expect(created.consecutiveFailures).toBe(0);
+        expect(created.lastSuccessAt).toBeNull();
+        expect(SECRET_PATTERN.test(created.secret)).toBe(true);
+        expect(created.events).toEqual(events);
+
+        // Persisted row.
+        const row = yield* findEndpointRow(created.id);
+        expect(row).toBeDefined();
+        expect(row?.name).toBe(name);
+        expect(row?.url).toBe(url);
+        expect(row?.projectId).toBe(projectId);
+        expect(row?.status).toBe(WebhookEndpointStatus.Active);
+        expect(row?.consecutiveFailures).toBe(0);
+        expect(row?.lastSuccessAt).toBeNull();
+        expect(row?.secret).toBe(created.secret);
+        expect(row?.events).toEqual(events);
+
+        // Audit entry with the create snapshot.
+        const auditEntries = yield* findEndpointAuditEntries(created.id);
+        const createdEntry = auditEntries.find((e) => e.action === AuditLogAction.Created);
+        expect(createdEntry).toBeDefined();
+        expect(createdEntry?.entityType).toBe(AuditLogEntityType.WebhookEndpoint);
+        expect(createdEntry?.actorUserId).toBe(CoreTestFixture.userId);
+        expect(createdEntry?.actorType).toBe(AuditLogActorType.User);
+        expect(createdEntry?.changes).toEqual({ snapshot: { events, name, url } });
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects an invalid URL (non-http protocol / malformed) and writes nothing",
+    // No cleanup wrapper: a validation failure writes no endpoint row.
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+
+      const badProtocol = yield* Effect.flip(
+        svc.createEndpoint({
+          events: ["person.created"],
+          name: "Bad",
+          projectId,
+          url: "ftp://example.test/hook",
+        }),
+      );
+      expect(badProtocol).toBeInstanceOf(WebhookValidationError);
+
+      const malformed = yield* Effect.flip(
+        svc.createEndpoint({
+          events: ["person.created"],
+          name: "Bad",
+          projectId,
+          url: "not-a-url",
+        }),
+      );
+      expect(malformed).toBeInstanceOf(WebhookValidationError);
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects unknown event types and an empty event list, writing nothing",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+
+      const unknownEvent = yield* Effect.flip(
+        svc.createEndpoint({
+          events: ["person.created", "not.a.real.event"],
+          name: "Bad",
+          projectId,
+          url: "https://example.test/hook",
+        }),
+      );
+      expect(unknownEvent).toBeInstanceOf(WebhookValidationError);
+
+      const noEvents = yield* Effect.flip(
+        svc.createEndpoint({
+          events: [],
+          name: "Bad",
+          projectId,
+          url: "https://example.test/hook",
+        }),
+      );
+      expect(noEvents).toBeInstanceOf(WebhookValidationError);
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// updateEndpoint
+// ===========================================================================
+
+describe("WebhookManagerService.updateEndpoint", () => {
+  test(
+    "applies a partial update, resets consecutiveFailures when re-enabling, and records an Updated audit entry",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        // Seed a disabled endpoint with prior failures so re-enabling is observable.
+        const endpoint = yield* insertEndpoint({
+          status: WebhookEndpointStatus.Disabled,
+          url: "https://example.test/before",
+        });
+        track.endpointIds.push(endpoint.id);
+        yield* findEndpointRow(endpoint.id).pipe(
+          Effect.tap((row) =>
+            Effect.sync(() => {
+              expect(row?.status).toBe(WebhookEndpointStatus.Disabled);
+            }),
+          ),
+        );
+        // Bump the failure counter directly so the reset on re-enable is visible.
+        const db = yield* Db;
+        yield* db
+          .update(webhookEndpoints)
+          .set({ consecutiveFailures: 4 })
+          .where(eq(webhookEndpoints.id, endpoint.id));
+
+        const newName = "Renamed Endpoint";
+        const newUrl = "https://example.test/after";
+        const newEvents = ["purchase.completed"];
+
+        const updated = yield* svc.updateEndpoint({
+          description: "updated desc",
+          endpointId: endpoint.id,
+          events: newEvents,
+          name: newName,
+          projectId,
+          status: "active",
+          url: newUrl,
+        });
+        expect(updated.id).toBe(endpoint.id);
+        expect(updated.status).toBe("active");
+
+        const row = yield* findEndpointRow(endpoint.id);
+        expect(row?.name).toBe(newName);
+        expect(row?.url).toBe(newUrl);
+        expect(row?.events).toEqual(newEvents);
+        expect(row?.description).toBe("updated desc");
+        expect(row?.status).toBe(WebhookEndpointStatus.Active);
+        // Re-enabling resets the consecutive-failure counter.
+        expect(row?.consecutiveFailures).toBe(0);
+
+        const auditEntries = yield* findEndpointAuditEntries(endpoint.id);
+        const updatedEntry = auditEntries.find((e) => e.action === AuditLogAction.Updated);
+        expect(updatedEntry).toBeDefined();
+        expect(updatedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects an invalid URL/event update and leaves the row unchanged",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const endpoint = yield* insertEndpoint({ url: "https://example.test/keep" });
+        track.endpointIds.push(endpoint.id);
+
+        const urlError = yield* Effect.flip(
+          svc.updateEndpoint({ endpointId: endpoint.id, projectId, url: "javascript:alert(1)" }),
+        );
+        expect(urlError).toBeInstanceOf(WebhookValidationError);
+
+        const eventError = yield* Effect.flip(
+          svc.updateEndpoint({ endpointId: endpoint.id, events: ["bogus"], projectId }),
+        );
+        expect(eventError).toBeInstanceOf(WebhookValidationError);
+
+        const row = yield* findEndpointRow(endpoint.id);
+        expect(row?.url).toBe("https://example.test/keep");
+        expect(row?.events).toEqual(["person.created"]);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with WebhookEndpointNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+      const error = yield* Effect.flip(
+        svc.updateEndpoint({ endpointId: uniqueSlug("missing"), name: "x", projectId }),
+      );
+      expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "scopes by projectId: an endpoint in another project is not found and stays unchanged",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        // Endpoint belongs to a different project than the caller targets.
+        const otherProjectId = `${projectId}-other`;
+        const endpoint = yield* insertEndpoint({
+          projectId: otherProjectId,
+          url: "https://example.test/foreign",
+        });
+        track.endpointIds.push(endpoint.id);
+
+        const error = yield* Effect.flip(
+          svc.updateEndpoint({ endpointId: endpoint.id, name: "hijacked", projectId }),
+        );
+        expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+
+        const row = yield* findEndpointRow(endpoint.id);
+        expect(row?.name).toBe("Seed Endpoint");
+        expect(row?.projectId).toBe(otherProjectId);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// deleteEndpoint
+// ===========================================================================
+
+describe("WebhookManagerService.deleteEndpoint", () => {
+  test(
+    "removes the endpoint and records a Deleted audit entry",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const endpoint = yield* insertEndpoint();
+        track.endpointIds.push(endpoint.id);
+
+        yield* svc.deleteEndpoint({ endpointId: endpoint.id, projectId });
+
+        const row = yield* findEndpointRow(endpoint.id);
+        expect(row).toBeUndefined();
+
+        const auditEntries = yield* findEndpointAuditEntries(endpoint.id);
+        const deletedEntry = auditEntries.find((e) => e.action === AuditLogAction.Deleted);
+        expect(deletedEntry).toBeDefined();
+        expect(deletedEntry?.actorUserId).toBe(CoreTestFixture.userId);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with WebhookEndpointNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+      const error = yield* Effect.flip(
+        svc.deleteEndpoint({ endpointId: uniqueSlug("missing"), projectId }),
+      );
+      expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "scopes by projectId: cannot delete an endpoint from another project",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const otherProjectId = `${projectId}-other`;
+        const endpoint = yield* insertEndpoint({ projectId: otherProjectId });
+        track.endpointIds.push(endpoint.id);
+
+        const error = yield* Effect.flip(
+          svc.deleteEndpoint({ endpointId: endpoint.id, projectId }),
+        );
+        expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+
+        const row = yield* findEndpointRow(endpoint.id);
+        expect(row).toBeDefined();
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// getEndpointById
+// ===========================================================================
+
+describe("WebhookManagerService.getEndpointById", () => {
+  test(
+    "returns the endpoint dto and maps the status int to its string form",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const endpoint = yield* insertEndpoint({
+          status: WebhookEndpointStatus.Failed,
+          url: "https://example.test/byid",
+        });
+        track.endpointIds.push(endpoint.id);
+
+        const dto = yield* svc.getEndpointById({ endpointId: endpoint.id, projectId });
+        expect(dto.id).toBe(endpoint.id);
+        expect(dto.url).toBe("https://example.test/byid");
+        expect(dto.projectId).toBe(projectId);
+        // status int 3 (Failed) maps to "failed".
+        expect(dto.status).toBe("failed");
+        expect(dto.events).toEqual(["person.created"]);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with WebhookEndpointNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+      const error = yield* Effect.flip(
+        svc.getEndpointById({ endpointId: uniqueSlug("missing"), projectId }),
+      );
+      expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "scopes by projectId: an endpoint in another project is not found",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const endpoint = yield* insertEndpoint({ projectId: `${projectId}-other` });
+        track.endpointIds.push(endpoint.id);
+
+        const error = yield* Effect.flip(
+          svc.getEndpointById({ endpointId: endpoint.id, projectId }),
+        );
+        expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// getEndpoints
+// ===========================================================================
+
+describe("WebhookManagerService.getEndpoints", () => {
+  test(
+    "returns the project's endpoints (membership) with status ints mapped to strings",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const active = yield* insertEndpoint({ status: WebhookEndpointStatus.Active });
+        track.endpointIds.push(active.id);
+        const disabled = yield* insertEndpoint({ status: WebhookEndpointStatus.Disabled });
+        track.endpointIds.push(disabled.id);
+        // An endpoint in another project must not leak into the list.
+        const foreign = yield* insertEndpoint({ projectId: `${projectId}-other` });
+        track.endpointIds.push(foreign.id);
+
+        const list = yield* svc.getEndpoints({ projectId });
+        const activeDto = list.find((e) => e.id === active.id);
+        const disabledDto = list.find((e) => e.id === disabled.id);
+        expect(activeDto?.status).toBe("active");
+        expect(disabledDto?.status).toBe("disabled");
+        expect(list.some((e) => e.id === foreign.id)).toBe(false);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// rotateSecret
+// ===========================================================================
+
+describe("WebhookManagerService.rotateSecret", () => {
+  test(
+    "replaces the endpoint secret with a fresh whsec value and records an Updated audit entry",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const endpoint = yield* insertEndpoint();
+        track.endpointIds.push(endpoint.id);
+        const original = yield* findEndpointRow(endpoint.id);
+        const originalSecret = original?.secret;
+
+        const rotated = yield* svc.rotateSecret({ endpointId: endpoint.id, projectId });
+        expect(SECRET_PATTERN.test(rotated.secret)).toBe(true);
+        expect(rotated.secret).not.toBe(originalSecret);
+
+        const row = yield* findEndpointRow(endpoint.id);
+        expect(row?.secret).toBe(rotated.secret);
+        expect(row?.secret).not.toBe(originalSecret);
+
+        const auditEntries = yield* findEndpointAuditEntries(endpoint.id);
+        expect(auditEntries.some((e) => e.action === AuditLogAction.Updated)).toBe(true);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with WebhookEndpointNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+      const error = yield* Effect.flip(
+        svc.rotateSecret({ endpointId: uniqueSlug("missing"), projectId }),
+      );
+      expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "scopes by projectId: cannot rotate an endpoint from another project",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const endpoint = yield* insertEndpoint({ projectId: `${projectId}-other` });
+        track.endpointIds.push(endpoint.id);
+        const before = yield* findEndpointRow(endpoint.id);
+
+        const error = yield* Effect.flip(svc.rotateSecret({ endpointId: endpoint.id, projectId }));
+        expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+
+        const after = yield* findEndpointRow(endpoint.id);
+        expect(after?.secret).toBe(before?.secret);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// getDeliveries
+// ===========================================================================
+
+describe("WebhookManagerService.getDeliveries", () => {
+  test(
+    "returns the project's deliveries and filters by endpointId when provided",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const epA = yield* insertEndpoint();
+        track.endpointIds.push(epA.id);
+        const epB = yield* insertEndpoint();
+        track.endpointIds.push(epB.id);
+
+        const delA = yield* insertDelivery({ endpointId: epA.id });
+        track.deliveryIds.push(delA);
+        const delB = yield* insertDelivery({ endpointId: epB.id });
+        track.deliveryIds.push(delB);
+
+        // Project-wide: both appear (membership, never exact count).
+        const all = yield* svc.getDeliveries({ projectId });
+        expect(all.some((d) => d.id === delA)).toBe(true);
+        expect(all.some((d) => d.id === delB)).toBe(true);
+
+        // Filtered by endpoint: only that endpoint's deliveries.
+        const onlyA = yield* svc.getDeliveries({ endpointId: epA.id, projectId });
+        expect(onlyA.some((d) => d.id === delA)).toBe(true);
+        expect(onlyA.some((d) => d.id === delB)).toBe(false);
+        // status int maps to its string form.
+        expect(onlyA.find((d) => d.id === delA)?.status).toBe("failed");
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "honors the limit argument",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint();
+        track.endpointIds.push(ep.id);
+        const d1 = yield* insertDelivery({ endpointId: ep.id });
+        track.deliveryIds.push(d1);
+        const d2 = yield* insertDelivery({ endpointId: ep.id });
+        track.deliveryIds.push(d2);
+
+        const limited = yield* svc.getDeliveries({ endpointId: ep.id, limit: 1, projectId });
+        expect(limited.length).toBe(1);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// getDeliveryById
+// ===========================================================================
+
+describe("WebhookManagerService.getDeliveryById", () => {
+  test(
+    "returns the delivery dto plus its attempts ordered by attemptNumber asc",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint();
+        track.endpointIds.push(ep.id);
+        const deliveryId = yield* insertDelivery({ endpointId: ep.id });
+        track.deliveryIds.push(deliveryId);
+        // Insert out of order to prove the asc ordering.
+        yield* insertAttempt({ attemptNumber: 2, deliveryId });
+        yield* insertAttempt({ attemptNumber: 1, deliveryId });
+
+        const dto = yield* svc.getDeliveryById({ deliveryId, projectId });
+        expect(dto.id).toBe(deliveryId);
+        expect(dto.webhookEndpointId).toBe(ep.id);
+        expect(dto.attempts.map((a) => a.attemptNumber)).toEqual([1, 2]);
+        const first = dto.attempts[0]!;
+        expect(first.statusCode).toBe(500);
+        expect(first.succeeded).toBe(false);
+        expect(first.errorMessage).toBe("attempt 1");
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with WebhookDeliveryNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+      const error = yield* Effect.flip(
+        svc.getDeliveryById({ deliveryId: uniqueSlug("missing"), projectId }),
+      );
+      expect(error).toBeInstanceOf(WebhookDeliveryNotFoundError);
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "scopes by projectId: a delivery in another project is not found",
+    withWebhookCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint({ projectId: `${projectId}-other` });
+        track.endpointIds.push(ep.id);
+        const deliveryId = yield* insertDelivery({
+          endpointId: ep.id,
+          projectId: `${projectId}-other`,
+        });
+        track.deliveryIds.push(deliveryId);
+
+        const error = yield* Effect.flip(svc.getDeliveryById({ deliveryId, projectId }));
+        expect(error).toBeInstanceOf(WebhookDeliveryNotFoundError);
+      }),
+    ).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// retryDelivery
+// ===========================================================================
+
+describe("WebhookManagerService.retryDelivery", () => {
+  test(
+    "moves a Failed delivery to InProgress, clears completedAt/nextAttemptAt, and dispatches the next attempt",
+    withWebhookCleanup((track) => {
+      const recorder = makeRecorder();
+      return Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint();
+        track.endpointIds.push(ep.id);
+        const deliveryId = yield* insertDelivery({
+          attemptCount: 2,
+          endpointId: ep.id,
+          status: WebhookDeliveryStatus.Failed,
+        });
+        track.deliveryIds.push(deliveryId);
+
+        const result = yield* svc.retryDelivery({ deliveryId, projectId });
+        expect(result.status).toBe("in_progress");
+
+        // Persisted, synchronous state.
+        const row = yield* findDeliveryRow(deliveryId);
+        expect(row?.status).toBe(WebhookDeliveryStatus.InProgress);
+        expect(row?.completedAt).toBeNull();
+        expect(row?.nextAttemptAt).toBeNull();
+
+        // Best-effort observation of the fire-and-forget dispatch.
+        const dispatched = yield* waitForDispatch(recorder);
+        if (dispatched._tag === "Some") {
+          expect(dispatched.value.deliveryId).toBe(deliveryId);
+          expect(dispatched.value.endpointId).toBe(ep.id);
+          expect(dispatched.value.secret).toBe(ep.secret);
+          expect(dispatched.value.url).toBe(ep.url);
+          // attemptNumber = current.attemptCount (2) + 1.
+          expect(dispatched.value.attemptNumber).toBe(3);
+        }
+      }).pipe(Effect.provide(recorder.layer));
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects a delivery that is not Failed or Exhausted and leaves it unchanged",
+    withWebhookCleanup((track) => {
+      const recorder = makeRecorder();
+      return Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint();
+        track.endpointIds.push(ep.id);
+        const deliveryId = yield* insertDelivery({
+          endpointId: ep.id,
+          status: WebhookDeliveryStatus.Pending,
+        });
+        track.deliveryIds.push(deliveryId);
+
+        const error = yield* Effect.flip(svc.retryDelivery({ deliveryId, projectId }));
+        expect(error).toBeInstanceOf(WebhookValidationError);
+
+        const row = yield* findDeliveryRow(deliveryId);
+        expect(row?.status).toBe(WebhookDeliveryStatus.Pending);
+      }).pipe(Effect.provide(recorder.layer));
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with WebhookDeliveryNotFoundError for an unknown id",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+      const error = yield* Effect.flip(
+        svc.retryDelivery({ deliveryId: uniqueSlug("missing"), projectId }),
+      );
+      expect(error).toBeInstanceOf(WebhookDeliveryNotFoundError);
+    }).pipe(
+      Effect.provide(makeRecorder().layer),
+      Effect.provide(WebhookManagerService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "scopes by projectId: a delivery in another project is not found and stays unchanged",
+    withWebhookCleanup((track) => {
+      const recorder = makeRecorder();
+      return Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint({ projectId: `${projectId}-other` });
+        track.endpointIds.push(ep.id);
+        const deliveryId = yield* insertDelivery({
+          endpointId: ep.id,
+          projectId: `${projectId}-other`,
+          status: WebhookDeliveryStatus.Failed,
+        });
+        track.deliveryIds.push(deliveryId);
+
+        const error = yield* Effect.flip(svc.retryDelivery({ deliveryId, projectId }));
+        expect(error).toBeInstanceOf(WebhookDeliveryNotFoundError);
+
+        const row = yield* findDeliveryRow(deliveryId);
+        expect(row?.status).toBe(WebhookDeliveryStatus.Failed);
+      }).pipe(Effect.provide(recorder.layer));
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
+// ===========================================================================
+// testEndpoint
+// ===========================================================================
+
+describe("WebhookManagerService.testEndpoint", () => {
+  test(
+    "persists a Pending test.ping delivery, returns its dto, and dispatches it",
+    withWebhookCleanup((track) => {
+      const recorder = makeRecorder();
+      return Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint();
+        track.endpointIds.push(ep.id);
+
+        const dto = yield* svc.testEndpoint({ endpointId: ep.id, projectId });
+        track.deliveryIds.push(dto.id);
+
+        // Return-value shape mirrors the persisted Pending delivery.
+        expect(dto.id.startsWith("wh_del")).toBe(true);
+        expect(dto.eventType).toBe("test.ping");
+        expect(dto.status).toBe("pending");
+        expect(dto.attemptCount).toBe(0);
+        expect(dto.webhookEndpointId).toBe(ep.id);
+        expect(dto.payload).toMatchObject({ message: "This is a test webhook delivery" });
+
+        // Persisted row.
+        const row = yield* findDeliveryRow(dto.id);
+        expect(row).toBeDefined();
+        expect(row?.eventType).toBe("test.ping");
+        expect(row?.status).toBe(WebhookDeliveryStatus.Pending);
+        expect(row?.attemptCount).toBe(0);
+        expect(row?.webhookEndpointId).toBe(ep.id);
+        expect(row?.projectId).toBe(projectId);
+
+        // Best-effort observation of the fire-and-forget dispatch.
+        const dispatched = yield* waitForDispatch(recorder);
+        if (dispatched._tag === "Some") {
+          expect(dispatched.value.deliveryId).toBe(dto.id);
+          expect(dispatched.value.endpointId).toBe(ep.id);
+          expect(dispatched.value.secret).toBe(ep.secret);
+          expect(dispatched.value.url).toBe(ep.url);
+          expect(dispatched.value.eventType).toBe("test.ping");
+          expect(dispatched.value.attemptNumber).toBe(1);
+        }
+      }).pipe(Effect.provide(recorder.layer));
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "fails with WebhookEndpointNotFoundError for an unknown endpoint and writes no delivery",
+    Effect.gen(function* () {
+      const svc = yield* WebhookManagerService;
+      const error = yield* Effect.flip(
+        svc.testEndpoint({ endpointId: uniqueSlug("missing"), projectId }),
+      );
+      expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+    }).pipe(
+      Effect.provide(makeRecorder().layer),
+      Effect.provide(WebhookManagerService.layer),
+      CoreAuthSession.authenticate(),
+    ),
+  );
+
+  test(
+    "scopes by projectId: cannot test an endpoint from another project",
+    withWebhookCleanup((track) => {
+      const recorder = makeRecorder();
+      return Effect.gen(function* () {
+        const svc = yield* WebhookManagerService;
+        const ep = yield* insertEndpoint({ projectId: `${projectId}-other` });
+        track.endpointIds.push(ep.id);
+
+        const error = yield* Effect.flip(svc.testEndpoint({ endpointId: ep.id, projectId }));
+        expect(error).toBeInstanceOf(WebhookEndpointNotFoundError);
+      }).pipe(Effect.provide(recorder.layer));
+    }).pipe(Effect.provide(WebhookManagerService.layer), CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/utils/create-slug.test.ts b/packages/core/test/utils/create-slug.test.ts
new file mode 100644
index 000000000..bafeaef07
--- /dev/null
+++ b/packages/core/test/utils/create-slug.test.ts
@@ -0,0 +1,94 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { createSlug } from "../../src/utils/create-slug.ts";
+
+describe("createSlug", () => {
+  it("lowercases and dash-separates an alphanumeric display name", () => {
+    expect(createSlug("My Test Product")).toBe("my-test-product");
+  });
+
+  it("lowercases an all-uppercase name", () => {
+    expect(createSlug("UPPER")).toBe("upper");
+  });
+
+  it("trims leading and trailing whitespace", () => {
+    expect(createSlug("  hello  ")).toBe("hello");
+  });
+
+  it("collapses runs of internal whitespace into a single dash", () => {
+    expect(createSlug("multi   space")).toBe("multi-space");
+  });
+
+  it("replaces non-alphanumeric characters and strips the resulting trailing dash", () => {
+    expect(createSlug("hello@world!")).toBe("hello-world");
+  });
+
+  it("collapses consecutive dashes into one", () => {
+    expect(createSlug("hello---world")).toBe("hello-world");
+  });
+
+  it("removes leading and trailing dashes", () => {
+    expect(createSlug("-hello-world-")).toBe("hello-world");
+  });
+
+  it("keeps underscores as legal slug characters", () => {
+    expect(createSlug("snake_case_name")).toBe("snake_case_name");
+  });
+
+  it("preserves an underscore-flanked dash unchanged", () => {
+    expect(createSlug("mix_-_ok")).toBe("mix_-_ok");
+  });
+
+  it("preserves a single-character name", () => {
+    expect(createSlug("a")).toBe("a");
+  });
+
+  it("keeps digits and dash-separates them from words", () => {
+    expect(createSlug("123 ABC")).toBe("123-abc");
+  });
+
+  it("handles mixed case, underscores, dashes and a trailing symbol", () => {
+    expect(createSlug("Hello_World-Test!")).toBe("hello_world-test");
+  });
+
+  // Accented/unicode characters are NOT transliterated — they fall outside the
+  // [a-z0-9_-] character class, collapse to a dash, and that trailing dash is
+  // then stripped, so "café" → "caf" (the é is simply dropped, not preserved).
+  it("does not transliterate accented characters (café → caf)", () => {
+    expect(createSlug("café")).toBe("caf");
+  });
+
+  it("drops a leading unicode-only word, keeping the ascii tail", () => {
+    expect(createSlug("Über cool")).toBe("ber-cool");
+  });
+
+  it("returns empty string when nothing alphanumeric survives normalization", () => {
+    expect(createSlug("!!!")).toBe("");
+  });
+
+  it("returns empty string for a lone dash", () => {
+    expect(createSlug("-")).toBe("");
+  });
+
+  it("returns empty string for whitespace-only input", () => {
+    expect(createSlug("   ")).toBe("");
+  });
+
+  it("returns empty string for the empty string", () => {
+    expect(createSlug("")).toBe("");
+  });
+
+  it.each([
+    ["My Test Product", "my-test-product"],
+    ["  hello  ", "hello"],
+    ["hello@world!", "hello-world"],
+    ["hello---world", "hello-world"],
+    ["-hello-world-", "hello-world"],
+    ["snake_case_name", "snake_case_name"],
+    ["123 ABC", "123-abc"],
+    ["!!!", ""],
+    ["café", "caf"],
+  ])("createSlug(%j) === %j", (input, expected) => {
+    expect(createSlug(input)).toBe(expected);
+  });
+});
diff --git a/packages/core/test/utils/deterministic-id.test.ts b/packages/core/test/utils/deterministic-id.test.ts
new file mode 100644
index 000000000..6216b0818
--- /dev/null
+++ b/packages/core/test/utils/deterministic-id.test.ts
@@ -0,0 +1,60 @@
+/**
+ * Unit tests for {@link deterministicAnalyticsEventId}: stability (same triple →
+ * same id), injectivity (distinct triples → distinct ids, including separator
+ * edge cases), and the `an_evt_` namespace shared with `generateId`.
+ */
+import { describe, expect, it } from "vite-plus/test";
+
+import { deterministicAnalyticsEventId } from "../../src/utils/deterministic-id.ts";
+
+const id = (anchor: string, eventName: string, personId: string) =>
+  deterministicAnalyticsEventId({ anchor, eventName, personId });
+
+describe("deterministicAnalyticsEventId", () => {
+  it("is stable: the same (anchor, eventName, personId) always yields the same id", () => {
+    expect(id("k1", "$subscription.created", "person_1")).toBe(
+      id("k1", "$subscription.created", "person_1"),
+    );
+  });
+
+  it("uses the an_evt_ namespace (shared with generateId('analyticsEvent'))", () => {
+    expect(id("k1", "$purchase.completed", "person_1")).toMatch(/^an_evt_/);
+  });
+
+  it("changes when ANY component changes", () => {
+    const base = id("k1", "$subscription.created", "person_1");
+    expect(id("k2", "$subscription.created", "person_1")).not.toBe(base); // anchor
+    expect(id("k1", "$subscription.renewed", "person_1")).not.toBe(base); // eventName
+    expect(id("k1", "$subscription.created", "person_2")).not.toBe(base); // personId
+  });
+
+  it("is injective even when the anchor contains the ':' separator", () => {
+    // The anchor (a ledger idempotency_key) legitimately contains ':' — e.g.
+    // transfer keys. The encoding parses from the right, so a ':'-laden anchor
+    // can never be confused with the eventName / personId segments.
+    const a = id(
+      "subscription_transfer:sub_1:person_a->person_b:2026-01-01T00:00:00.000Z",
+      "$subscription.transferred_in",
+      "person_b",
+    );
+    const b = id(
+      "subscription_transfer:sub_1:person_a->person_b:2026-01-01T00:00:00.001Z",
+      "$subscription.transferred_in",
+      "person_b",
+    );
+    expect(a).not.toBe(b);
+  });
+
+  it("cannot be collided by shifting characters across the eventName/personId boundary", () => {
+    // eventName is slugged to [A-Za-z0-9._-] (no ':'), so a crafted personId
+    // cannot 'absorb' part of the eventName and vice-versa.
+    expect(id("k", "$a.b", "c")).not.toBe(id("k", "$a", "b.c"));
+  });
+
+  it("slugs the '$' sigil and '.' in event names deterministically", () => {
+    // Two distinct reserved names never slug to the same value.
+    expect(id("k", "$purchase.transferred_out", "p")).not.toBe(
+      id("k", "$purchase.transferred_in", "p"),
+    );
+  });
+});
diff --git a/packages/core/test/utils/generate-id.test.ts b/packages/core/test/utils/generate-id.test.ts
new file mode 100644
index 000000000..55b148178
--- /dev/null
+++ b/packages/core/test/utils/generate-id.test.ts
@@ -0,0 +1,114 @@
+import { isCuid } from "@paralleldrive/cuid2";
+import { describe, expect, it } from "vite-plus/test";
+
+import { generateId } from "../../src/utils/generate-id.ts";
+
+/**
+ * `generateId` is a linchpin for entity creation across every service (100+ call
+ * sites), so these tests pin down the exact wire format — `${prefix}_${cuid}` —
+ * for each entity type. CUID2 ids are validated with the library's own
+ * `isCuid` rather than a hand-rolled regex.
+ */
+
+// (prefix-key, expected string prefix) pairs lifted from the `prefixes` const in
+// the source. We deliberately spot-check a representative spread of entity types
+// (auth, billing, payment providers, webhooks, feature flags, …) including a few
+// where the literal prefix is a non-obvious abbreviation (org, pw_loc_show, …).
+const PREFIX_CASES = [
+  ["user", "user"],
+  ["organization", "org"],
+  ["member", "member"],
+  ["project", "proj"],
+  ["product", "prod"],
+  ["perk", "perk"],
+  ["productPerk", "prod_perk"],
+  ["transaction", "tx"],
+  ["purchase", "pur"],
+  ["subscription", "sub"],
+  ["apiSecretKey", "api_sk"],
+  ["apiPublishableKey", "api_pk"],
+  ["apiPublishableKeyTesting", "api_pk_test"],
+  ["person", "person"],
+  ["personDistinctId", "person_dist"],
+  ["paywall", "pw"],
+  ["paywallLocation", "pw_loc"],
+  ["paywallLocationShowing", "pw_loc_show"],
+  ["appStoreTransaction", "app_store_tx"],
+  ["fxRate", "fx"],
+  ["webhookEndpoint", "wh_ep"],
+  ["featureFlag", "ff"],
+  ["experiment", "exp"],
+] as const;
+
+// The CUID2 suffix: a single leading letter then 23 lowercase-alphanumeric chars
+// (the default length is 24). Used only as a secondary, structural assertion;
+// `isCuid` is the authoritative validator.
+const CUID2 = /^[a-z][a-z0-9]{23}$/;
+
+describe("generateId", () => {
+  describe("prefix mapping", () => {
+    it.each(PREFIX_CASES)("%s → '%s_<cuid>'", (prefix, expectedPrefix) => {
+      const id = generateId(prefix);
+      expect(id.startsWith(`${expectedPrefix}_`)).toBe(true);
+    });
+
+    it("maps 'user' to the 'user_' prefix", () => {
+      expect(generateId("user").startsWith("user_")).toBe(true);
+    });
+
+    it("maps 'organization' to the abbreviated 'org_' prefix, not 'organization_'", () => {
+      const id = generateId("organization");
+      expect(id.startsWith("org_")).toBe(true);
+      expect(id.startsWith("organization_")).toBe(false);
+    });
+  });
+
+  describe("format", () => {
+    it.each(PREFIX_CASES)(
+      "%s id is exactly '%s_' followed by a valid CUID2",
+      (prefix, expectedPrefix) => {
+        const id = generateId(prefix);
+        const suffix = id.slice(expectedPrefix.length + 1);
+        // The prefix is delimited by a single underscore and the suffix is a CUID2.
+        expect(id).toBe(`${expectedPrefix}_${suffix}`);
+        expect(isCuid(suffix)).toBe(true);
+        expect(suffix).toMatch(CUID2);
+      },
+    );
+
+    it("never produces a trailing-only or empty suffix", () => {
+      const id = generateId("perk");
+      const suffix = id.slice("perk_".length);
+      expect(suffix.length).toBe(24);
+    });
+
+    it("matches the canonical /^<prefix>_<cuid>$/ shape across many prefixes", () => {
+      for (const [prefix, expectedPrefix] of PREFIX_CASES) {
+        const id = generateId(prefix);
+        const pattern = new RegExp(`^${expectedPrefix}_[a-z][a-z0-9]{23}$`);
+        expect(id).toMatch(pattern);
+      }
+    });
+  });
+
+  describe("uniqueness", () => {
+    it("two consecutive calls for the same prefix differ", () => {
+      expect(generateId("perk")).not.toBe(generateId("perk"));
+    });
+
+    it("a large batch contains no collisions", () => {
+      const N = 1_000;
+      const ids = new Set<string>();
+      for (let i = 0; i < N; i++) ids.add(generateId("transaction"));
+      expect(ids.size).toBe(N);
+    });
+
+    it("only the suffix varies — the prefix is stable", () => {
+      const a = generateId("subscription");
+      const b = generateId("subscription");
+      expect(a.startsWith("sub_")).toBe(true);
+      expect(b.startsWith("sub_")).toBe(true);
+      expect(a.slice("sub_".length)).not.toBe(b.slice("sub_".length));
+    });
+  });
+});
diff --git a/packages/core/test/utils/permissions.test.ts b/packages/core/test/utils/permissions.test.ts
new file mode 100644
index 000000000..43f659508
--- /dev/null
+++ b/packages/core/test/utils/permissions.test.ts
@@ -0,0 +1,289 @@
+import {
+  OrganizationPermissions,
+  type ProjectPermission,
+  ProjectPermissions,
+} from "@voidhash/lib";
+import { describe, expect, it } from "vite-plus/test";
+import { Effect, Exit, Logger } from "effect";
+
+import {
+  ActionForbiddenError,
+  type AnyAuthSession,
+  AuthSession,
+  type SessionProjectSchema,
+  type UserSession,
+} from "../../src/domain/auth/Auth.ts";
+import {
+  checkOrganizationPermission,
+  checkProjectPermission,
+  extractAuthorizedProjectId,
+} from "../../src/utils/permissions.ts";
+
+type SessionProject = typeof SessionProjectSchema.Type;
+type SessionOrganization = UserSession["organizations"][number];
+
+/**
+ * Build a session project carrying `project:all` by default. Tests pass
+ * `permissions: []` to exercise the insufficient-permission path.
+ */
+const project = (overrides: Partial<SessionProject> = {}): SessionProject => ({
+  id: "project_default",
+  logo: null,
+  name: "Default Project",
+  organizationId: "org_default",
+  permissions: [ProjectPermissions.all],
+  slug: "default-project",
+  ...overrides,
+});
+
+const organization = (overrides: Partial<SessionOrganization> = {}): SessionOrganization => ({
+  id: "org_default",
+  logo: null,
+  name: "Default Org",
+  permissions: [OrganizationPermissions.all],
+  slug: "default-org",
+  workosOrganizationId: "workos_org_default",
+  ...overrides,
+});
+
+/**
+ * A complete `UserSession` with the supplied projects/organizations. Fresh per
+ * test — no shared mutable fixture state.
+ */
+const userSession = (overrides: Partial<UserSession> = {}): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: "test-user-session",
+  organizations: [organization()],
+  person: null,
+  projects: [project()],
+  user: {
+    createdAt: new Date("2026-01-01T00:00:00.000Z"),
+    email: "user@example.com",
+    emailVerified: true,
+    id: "user_default",
+    image: null,
+    name: "Test User",
+    role: null,
+    updatedAt: new Date("2026-01-01T00:00:00.000Z"),
+    workosUserId: "workos_user_default",
+  },
+  ...overrides,
+});
+
+/** Provide a session value into the `AuthSession` context for a guarded check. */
+const withSession = (session: AnyAuthSession) => Effect.provideService(AuthSession, session);
+
+/**
+ * Capture log records emitted while running `effect`. We replace the runtime
+ * loggers with a recorder so the permission-denied warning is observable
+ * without hitting the console.
+ */
+const runCapturingLogs = async <A, E>(effect: Effect.Effect<A, E, never>) => {
+  const records: Array<{ level: string; message: string }> = [];
+  const recorder = Logger.make<unknown, void>((options) => {
+    records.push({
+      level: String(options.logLevel),
+      message: Array.isArray(options.message)
+        ? options.message.map(String).join(" ")
+        : String(options.message),
+    });
+  });
+  const exit = await Effect.runPromiseExit(
+    effect.pipe(Effect.provide(Logger.layer([recorder], { mergeWithExisting: false }))),
+  );
+  return { exit, records };
+};
+
+describe("extractAuthorizedProjectId", () => {
+  it("returns the project id for a session carrying exactly one project", async () => {
+    const session = userSession({ projects: [project({ id: "project_only" })] });
+    const result = await Effect.runPromise(extractAuthorizedProjectId(session));
+    expect(result).toBe("project_only");
+  });
+
+  it("returns the FIRST project id when the session carries several", async () => {
+    const session = userSession({
+      projects: [
+        project({ id: "project_first" }),
+        project({ id: "project_second" }),
+        project({ id: "project_third" }),
+      ],
+    });
+    const result = await Effect.runPromise(extractAuthorizedProjectId(session));
+    expect(result).toBe("project_first");
+  });
+
+  it("fails with ActionForbiddenError when the projects array is empty", async () => {
+    const session = userSession({ projects: [] });
+    // `Effect.flip` surfaces the typed error into the success channel so we can
+    // assert on its tag/shape directly.
+    const error = await Effect.runPromise(extractAuthorizedProjectId(session).pipe(Effect.flip));
+    expect(error).toBeInstanceOf(ActionForbiddenError);
+    expect(error.message).toBe("No project found for this authentication method.");
+  });
+
+  it("fails with ActionForbiddenError when the first project is nullish", async () => {
+    // Defends the `authSession.projects[0]?.id` guard against a hole at index 0.
+    const session = userSession({
+      projects: [undefined as unknown as SessionProject],
+    });
+    const error = await Effect.runPromise(extractAuthorizedProjectId(session).pipe(Effect.flip));
+    expect(error).toBeInstanceOf(ActionForbiddenError);
+  });
+});
+
+describe("checkProjectPermission", () => {
+  it("returns true when the session has the queried project and permission", async () => {
+    const session = userSession({
+      projects: [project({ id: "project_target", permissions: [ProjectPermissions.all] })],
+    });
+    const result = await Effect.runPromise(
+      checkProjectPermission("project_target", ProjectPermissions.all, "denied").pipe(
+        withSession(session),
+      ),
+    );
+    expect(result).toBe(true);
+  });
+
+  it("fails with ActionForbiddenError when the session lacks the queried project id", async () => {
+    const session = userSession({
+      projects: [project({ id: "project_other", permissions: [ProjectPermissions.all] })],
+    });
+    const error = await Effect.runPromise(
+      checkProjectPermission("project_target", ProjectPermissions.all, "no access to project").pipe(
+        withSession(session),
+        Effect.flip,
+      ),
+    );
+    expect(error).toBeInstanceOf(ActionForbiddenError);
+    expect(error.message).toBe("no access to project");
+  });
+
+  it("fails with ActionForbiddenError when the project exists but lacks the permission", async () => {
+    const session = userSession({
+      projects: [project({ id: "project_target", permissions: [] })],
+    });
+    const error = await Effect.runPromise(
+      checkProjectPermission("project_target", ProjectPermissions.all, "missing perm").pipe(
+        withSession(session),
+        Effect.flip,
+      ),
+    );
+    expect(error).toBeInstanceOf(ActionForbiddenError);
+    expect(error.message).toBe("missing perm");
+  });
+
+  it("dies when no AuthSession service is provided at all", async () => {
+    // The source guards with `session?.projects`, implying it expects a
+    // possibly-absent session. In practice `AuthSession` is a required Effect
+    // service: when it is never provided, `yield* AuthSession` is an
+    // unrecoverable defect ("Service not found") rather than a clean
+    // ActionForbiddenError. We pin that real boundary here so a future change
+    // making the service genuinely optional shows up as a test break.
+    const exit = await Effect.runPromiseExit(
+      // biome-ignore lint/suspicious/noExplicitAny: deliberately running without
+      // the AuthSession requirement satisfied to observe the missing-service defect.
+      checkProjectPermission(
+        "project_target",
+        ProjectPermissions.all,
+        "no session",
+      ) as Effect.Effect<boolean, ActionForbiddenError, never>,
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+  });
+});
+
+describe("checkOrganizationPermission", () => {
+  it("returns true when the session has the queried org and permission", async () => {
+    const session = userSession({
+      organizations: [
+        organization({ id: "org_target", permissions: [OrganizationPermissions.all] }),
+      ],
+    });
+    const result = await Effect.runPromise(
+      checkOrganizationPermission("org_target", OrganizationPermissions.all, "denied").pipe(
+        withSession(session),
+      ),
+    );
+    expect(result).toBe(true);
+  });
+
+  it("fails with ActionForbiddenError when the session lacks the queried org id", async () => {
+    const session = userSession({
+      organizations: [
+        organization({ id: "org_other", permissions: [OrganizationPermissions.all] }),
+      ],
+    });
+    const error = await Effect.runPromise(
+      checkOrganizationPermission("org_target", OrganizationPermissions.all, "no org access").pipe(
+        withSession(session),
+        Effect.flip,
+      ),
+    );
+    expect(error).toBeInstanceOf(ActionForbiddenError);
+    expect(error.message).toBe("no org access");
+  });
+
+  it("fails with ActionForbiddenError when the org exists but lacks the permission", async () => {
+    const session = userSession({
+      organizations: [organization({ id: "org_target", permissions: [] })],
+    });
+    const error = await Effect.runPromise(
+      checkOrganizationPermission(
+        "org_target",
+        OrganizationPermissions.all,
+        "missing org perm",
+      ).pipe(withSession(session), Effect.flip),
+    );
+    expect(error).toBeInstanceOf(ActionForbiddenError);
+    expect(error.message).toBe("missing org perm");
+  });
+
+  it("dies when no AuthSession service is provided at all", async () => {
+    // Same required-service boundary as checkProjectPermission: an absent
+    // AuthSession is a defect, not an ActionForbiddenError.
+    const exit = await Effect.runPromiseExit(
+      checkOrganizationPermission(
+        "org_target",
+        OrganizationPermissions.all,
+        "no session",
+      ) as Effect.Effect<boolean, ActionForbiddenError, never>,
+    );
+    expect(Exit.isFailure(exit)).toBe(true);
+  });
+});
+
+describe("permission-denied logging", () => {
+  it("logs a warning carrying the denial message before failing", async () => {
+    const session = userSession({
+      projects: [project({ id: "project_other", permissions: [ProjectPermissions.all] })],
+    });
+    const { exit, records } = await runCapturingLogs(
+      checkProjectPermission("project_target", ProjectPermissions.all, "audit me").pipe(
+        withSession(session),
+      ),
+    );
+    expect(exit._tag).toBe("Failure");
+    const warning = records.find((r) => r.level === "Warn");
+    expect(warning).toBeDefined();
+    expect(warning?.message).toContain("audit me");
+  });
+
+  it("does NOT log a warning when permission is granted", async () => {
+    const session = userSession({
+      projects: [project({ id: "project_target", permissions: [ProjectPermissions.all] })],
+    });
+    const { exit, records } = await runCapturingLogs(
+      checkProjectPermission("project_target", ProjectPermissions.all, "should not log").pipe(
+        withSession(session),
+      ),
+    );
+    expect(exit._tag).toBe("Success");
+    expect(records.some((r) => r.level === "Warn")).toBe(false);
+  });
+});
+
+// Sanity reference so an unused-import lint never trips the typed permission union.
+const _typecheckGuard: ProjectPermission = ProjectPermissions.all;
+void _typecheckGuard;
diff --git a/packages/core/test/utils/sdk.test.ts b/packages/core/test/utils/sdk.test.ts
new file mode 100644
index 000000000..de0000c12
--- /dev/null
+++ b/packages/core/test/utils/sdk.test.ts
@@ -0,0 +1,30 @@
+import { ANONYMOUS_USER_ID_PREFIX } from "@voidhash/lib";
+import { describe, expect, it } from "vite-plus/test";
+
+import { isAnonymousId } from "../../src/utils/sdk.ts";
+
+describe("isAnonymousId", () => {
+  it("returns true for an id carrying the anonymous prefix", () => {
+    expect(isAnonymousId(`${ANONYMOUS_USER_ID_PREFIX}12345`)).toBe(true);
+  });
+
+  it("returns false for a regular (non-anonymous) id", () => {
+    expect(isAnonymousId("user_abc123")).toBe(false);
+  });
+
+  it("returns false for an empty string", () => {
+    expect(isAnonymousId("")).toBe(false);
+  });
+
+  it("returns true for the bare prefix with no suffix", () => {
+    expect(isAnonymousId(ANONYMOUS_USER_ID_PREFIX)).toBe(true);
+  });
+
+  it("is case sensitive — an upper-cased prefix does not match", () => {
+    expect(isAnonymousId(`${ANONYMOUS_USER_ID_PREFIX.toUpperCase()}12345`)).toBe(false);
+  });
+
+  it("only matches at position 0 — the prefix mid-string does not count", () => {
+    expect(isAnonymousId(`user_${ANONYMOUS_USER_ID_PREFIX}12345`)).toBe(false);
+  });
+});
diff --git a/packages/core/tsconfig.json b/packages/core/tsconfig.json
new file mode 100644
index 000000000..d41a38d00
--- /dev/null
+++ b/packages/core/tsconfig.json
@@ -0,0 +1,21 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "include": ["src", "test", "sst-env.d.ts"],
+  "exclude": [
+    "**/node_modules/**",
+    "**/*.integration.test.ts",
+    "test/services/paymentProviders/stripe/stripe-test-support.ts"
+  ],
+  "compilerOptions": {
+    "rootDir": ".",
+    "jsx": "react-jsx",
+    "jsxImportSource": "preact",
+    // Deploy loads these files via Node's strip-only TS support, which rejects
+    // non-erasable syntax (parameter properties, enums, runtime namespaces).
+    // Fail typecheck on it here so CI catches it before the deploy step.
+    "erasableSyntaxOnly": true,
+    "paths": {
+      "@testing/*": ["./test/_testing/*"]
+    }
+  }
+}
diff --git a/packages/core/vitest.unit.mts b/packages/core/vitest.unit.mts
new file mode 100644
index 000000000..7f23222f6
--- /dev/null
+++ b/packages/core/vitest.unit.mts
@@ -0,0 +1,9 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    exclude: ["./**/*.integration.test.ts", "./node_modules/**"],
+    include: ["./**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/packages/db/LICENSE.md b/packages/db/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/db/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/db/package.json b/packages/db/package.json
new file mode 100644
index 000000000..866920572
--- /dev/null
+++ b/packages/db/package.json
@@ -0,0 +1,36 @@
+{
+  "name": "@voidhash/db",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./db": "./src/db.ts",
+    "./migrations": "./src/migrations.ts",
+    "./schema": "./src/schema.ts",
+    "./types": "./src/types.ts"
+  },
+  "scripts": {
+    "test": "vp test run -c vitest.mts",
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit"
+  },
+  "dependencies": {
+    "@effect/sql-pg": "catalog:",
+    "@voidhash/lib": "workspace:*",
+    "drizzle-orm": "1.0.0-rc.3",
+    "pg": "^8.13.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.12",
+    "@types/pg": "^8.15.0",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:",
+    "vitest": "catalog:"
+  },
+  "peerDependencies": {
+    "effect": "catalog:"
+  }
+}
diff --git a/packages/db/src/alchemy-migrations/20260624151148_init/migration.sql b/packages/db/src/alchemy-migrations/20260624151148_init/migration.sql
new file mode 100644
index 000000000..65d523036
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260624151148_init/migration.sql
@@ -0,0 +1,838 @@
+CREATE TABLE "analytics_ingest_dlq" (
+	"id" varchar(255) PRIMARY KEY,
+	"capture_id" varchar(255),
+	"project_id" varchar(255) NOT NULL,
+	"distinct_id" varchar(512),
+	"route_class" varchar(32) NOT NULL,
+	"failure_class" varchar(64) NOT NULL,
+	"failure_message" varchar(1000) NOT NULL,
+	"payload_json" jsonb NOT NULL,
+	"attempt_count" integer DEFAULT 0 NOT NULL,
+	"source_shard" varchar(255) NOT NULL,
+	"source_sequence" bigint NOT NULL,
+	"replayed_at" timestamp(3) with time zone,
+	"replay_status" varchar(32) DEFAULT 'pending' NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "api_key" (
+	"id" varchar(255) PRIMARY KEY,
+	"name" varchar(255) NOT NULL,
+	"end" varchar(255) NOT NULL,
+	"key" varchar(255) NOT NULL,
+	"prefix" varchar(16) NOT NULL,
+	"is_public" boolean DEFAULT false NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "apikey" (
+	"created_at" timestamp(3) with time zone NOT NULL,
+	"enabled" boolean DEFAULT true,
+	"expires_at" timestamp(3) with time zone,
+	"id" varchar(36) PRIMARY KEY,
+	"key" varchar(255) NOT NULL,
+	"last_refill_at" timestamp(3) with time zone,
+	"last_request" timestamp(3) with time zone,
+	"metadata" text,
+	"name" text,
+	"permissions" text,
+	"prefix" text,
+	"rate_limit_enabled" boolean DEFAULT true,
+	"rate_limit_max" integer DEFAULT 10,
+	"rate_limit_time_window" integer DEFAULT 86400000,
+	"refill_amount" integer,
+	"refill_interval" integer,
+	"remaining" integer,
+	"request_count" integer DEFAULT 0,
+	"end" text,
+	"updated_at" timestamp(3) with time zone NOT NULL,
+	"user_id" varchar(36) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "app_store_transaction" (
+	"id" varchar(255) PRIMARY KEY,
+	"transaction_id" varchar(255) NOT NULL,
+	"currency" varchar(3) NOT NULL,
+	"environment" smallint DEFAULT 1 NOT NULL,
+	"expire_date" timestamp(3) with time zone,
+	"in_app_ownership_type" smallint DEFAULT 2 NOT NULL,
+	"is_upgraded" boolean,
+	"offer_discount_type" smallint DEFAULT 2 NOT NULL,
+	"offer_identifier" varchar(255),
+	"offer_period" varchar(255),
+	"offer_type" smallint DEFAULT 1 NOT NULL,
+	"original_purchase_date" timestamp(3) with time zone NOT NULL,
+	"original_transaction_id" varchar(255) NOT NULL,
+	"price" integer NOT NULL,
+	"product_id" varchar(255) NOT NULL,
+	"purchase_date" timestamp(3) with time zone NOT NULL,
+	"quantity" integer NOT NULL,
+	"revocation_date" timestamp(3) with time zone,
+	"revocation_reason" smallint DEFAULT 1 NOT NULL,
+	"storefront" varchar(3) NOT NULL,
+	"storefront_id" varchar(255) NOT NULL,
+	"subscription_group_identifier" varchar(255),
+	"transaction_reason" smallint DEFAULT 1 NOT NULL,
+	"type" smallint DEFAULT 1 NOT NULL,
+	"web_order_line_item_id" varchar(255)
+);
+--> statement-breakpoint
+CREATE TABLE "audit_log" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"entity_type" varchar(50) NOT NULL,
+	"entity_id" varchar(255) NOT NULL,
+	"parent_entity_id" varchar(255),
+	"action" varchar(50) NOT NULL,
+	"actor_user_id" varchar(255),
+	"actor_type" smallint DEFAULT 1 NOT NULL,
+	"changes" jsonb,
+	"metadata" jsonb,
+	"created_at" timestamp(3) with time zone DEFAULT now()
+);
+--> statement-breakpoint
+CREATE TABLE "billing_provider_meter" (
+	"id" varchar(255) PRIMARY KEY,
+	"provider_id" varchar(50) NOT NULL,
+	"metric_id" varchar(100) NOT NULL,
+	"external_meter_id" varchar(255) NOT NULL,
+	"external_meter_slug" varchar(255),
+	"last_synced_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "billing_webhook_event" (
+	"id" varchar(255) PRIMARY KEY,
+	"provider_id" varchar(50) NOT NULL,
+	"external_event_id" varchar(255) NOT NULL,
+	"event_type" varchar(100) NOT NULL,
+	"payload" jsonb,
+	"processed_at" timestamp(3) with time zone,
+	"error" varchar(500),
+	"created_at" timestamp(3) with time zone DEFAULT now()
+);
+--> statement-breakpoint
+CREATE TABLE "capture_project_policy" (
+	"project_id" varchar(255) PRIMARY KEY,
+	"ingest_enabled" boolean DEFAULT true NOT NULL,
+	"requests_per_minute" integer,
+	"events_per_day" integer,
+	"force_route" varchar(32),
+	"custom_topic" varchar(255),
+	"skip_enrichment" boolean DEFAULT false NOT NULL,
+	"processor_enabled" boolean DEFAULT true NOT NULL,
+	"processor_person_processing_enabled" boolean DEFAULT true NOT NULL,
+	"processor_schema_mode" varchar(16) DEFAULT 'reject' NOT NULL,
+	"processor_allow_overflow" boolean DEFAULT true NOT NULL,
+	"processor_allow_historical" boolean DEFAULT true NOT NULL,
+	"processor_historical_min_age_hours" integer DEFAULT 48 NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "checkout_session" (
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"person_id" varchar(255) NOT NULL,
+	"error_callback_url" varchar(255) DEFAULT 'LEGACY' NOT NULL,
+	"id" varchar(255) PRIMARY KEY,
+	"payment_provider_configuration_product_id" varchar(255) NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"success_callback_url" varchar(255) DEFAULT 'LEGACY' NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "feature_flag_override" (
+	"id" varchar(255) PRIMARY KEY,
+	"feature_flag_id" varchar(255) NOT NULL,
+	"identity_type" smallint NOT NULL,
+	"identity_value" varchar(255) NOT NULL,
+	"forced_enabled" boolean,
+	"note" varchar(1000),
+	"created_by_user_id" varchar(255),
+	"updated_by_user_id" varchar(255),
+	"archived_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "feature_flag_target" (
+	"id" varchar(255) PRIMARY KEY,
+	"feature_flag_id" varchar(255) NOT NULL,
+	"list_type" smallint NOT NULL,
+	"identity_type" smallint NOT NULL,
+	"identity_value" varchar(255) NOT NULL,
+	"archived_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "feature_flag_variant" (
+	"id" varchar(255) PRIMARY KEY,
+	"feature_flag_id" varchar(255) NOT NULL,
+	"key" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"weight_bps" integer DEFAULT 0 NOT NULL,
+	"payload" jsonb,
+	"archived_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "feature_flag" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"key" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"description" varchar(1000),
+	"enabled" boolean DEFAULT false NOT NULL,
+	"rollout_bps" integer DEFAULT 10000 NOT NULL,
+	"salt" varchar(255) NOT NULL,
+	"internal" boolean DEFAULT false NOT NULL,
+	"owner_type" varchar(50),
+	"owner_id" varchar(255),
+	"archived_at" timestamp(3) with time zone,
+	"created_by_user_id" varchar(255),
+	"updated_by_user_id" varchar(255),
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone,
+	"version" integer DEFAULT 1 NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "fx_rate" (
+	"id" varchar(255) PRIMARY KEY,
+	"currency" varchar(3) NOT NULL,
+	"as_of_date" timestamp(3) with time zone NOT NULL,
+	"usd_rate" integer NOT NULL,
+	"source" varchar(64) NOT NULL,
+	"fetched_at" timestamp(3) with time zone NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "invitation" (
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"email" varchar(255) NOT NULL,
+	"expires_at" timestamp(3) with time zone NOT NULL,
+	"id" varchar(36) PRIMARY KEY,
+	"inviter_id" varchar(36) NOT NULL,
+	"organization_id" varchar(36) NOT NULL,
+	"role" varchar(255),
+	"status" varchar(255) DEFAULT 'pending' NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "member" (
+	"created_at" timestamp(3) with time zone NOT NULL,
+	"id" varchar(36) PRIMARY KEY,
+	"organization_id" varchar(36) NOT NULL,
+	"role" varchar(255) DEFAULT 'member' NOT NULL,
+	"user_id" varchar(36) NOT NULL,
+	"workos_membership_id" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "organization" (
+	"created_at" timestamp(3) with time zone NOT NULL,
+	"id" varchar(36) PRIMARY KEY,
+	"logo" text,
+	"metadata" text,
+	"name" varchar(255) NOT NULL,
+	"slug" varchar(255) NOT NULL UNIQUE,
+	"workos_organization_id" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "organization_billing" (
+	"id" varchar(255) PRIMARY KEY,
+	"organization_id" varchar(255) NOT NULL,
+	"tier" smallint DEFAULT 1 NOT NULL,
+	"billing_provider_id" varchar(50) DEFAULT 'polar' NOT NULL,
+	"external_customer_id" varchar(255),
+	"subscription_status" smallint DEFAULT 0 NOT NULL,
+	"external_subscription_id" varchar(255),
+	"current_period_start" timestamp(3) with time zone,
+	"current_period_end" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "payment_provider_configuration_product" (
+	"configuration" jsonb,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"id" varchar(255) PRIMARY KEY,
+	"is_active" boolean DEFAULT true NOT NULL,
+	"payment_provider_configuration_id" varchar(255) NOT NULL,
+	"product_id" varchar(255) NOT NULL,
+	"provider_product_key" varchar(255) NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "payment_provider_configuration" (
+	"id" varchar(255) PRIMARY KEY,
+	"provider_id" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"payment_provider_key" varchar(255) NOT NULL,
+	"enabled" boolean DEFAULT false NOT NULL,
+	"name" varchar(255) DEFAULT 'Unknown' NOT NULL,
+	"configuration" jsonb,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone,
+	"deleted_at" timestamp(3) with time zone,
+	"active_provider_id" varchar(255) GENERATED ALWAYS AS ((case when deleted_at is null then provider_id else null end)) STORED
+);
+--> statement-breakpoint
+CREATE TABLE "payment_provider_notification_processed" (
+	"id" varchar(255) PRIMARY KEY,
+	"payment_provider_configuration_id" varchar(255) NOT NULL,
+	"provider_id" varchar(50) NOT NULL,
+	"notification_uuid" varchar(255) NOT NULL,
+	"notification_type" varchar(64) NOT NULL,
+	"notification_subtype" varchar(64),
+	"source" varchar(32) NOT NULL,
+	"processed_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"result" varchar(32) NOT NULL,
+	"result_note" varchar(500),
+	"parked_until_provider_product_key" varchar(255),
+	"parked_until_original_transaction_id" varchar(255),
+	"parked_raw_payload" jsonb
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_component_version" (
+	"id" varchar(255) PRIMARY KEY,
+	"component_id" varchar(255) NOT NULL,
+	"deploy_id" varchar(255) NOT NULL,
+	"version" integer NOT NULL,
+	"content_hash" varchar(64) NOT NULL,
+	"manifest" jsonb NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_component" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"slug" varchar(255) NOT NULL,
+	"title" varchar(255),
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_deploy_blob" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"sha256" varchar(64) NOT NULL,
+	"bytes" integer NOT NULL,
+	"content_type" varchar(255),
+	"storage_key" varchar(512) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_deploy_file" (
+	"id" varchar(255) PRIMARY KEY,
+	"deploy_id" varchar(255) NOT NULL,
+	"role" smallint NOT NULL,
+	"logical_path" varchar(512) NOT NULL,
+	"sha256" varchar(64) NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_deploy" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"schema_version" integer NOT NULL,
+	"cli_version" varchar(255) NOT NULL,
+	"runtime_version" varchar(255) NOT NULL,
+	"manifest_hash" varchar(64) NOT NULL,
+	"manifest" jsonb NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"created_by_name" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_location_showing" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"paywall_location_id" varchar(255) NOT NULL,
+	"type" smallint DEFAULT 1 NOT NULL,
+	"paywall_id" varchar(255),
+	"paywall_release_id" varchar(255),
+	"feature_flag_id" varchar(255),
+	"started_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"ended_at" timestamp(3) with time zone,
+	"created_by_user_id" varchar(255),
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_location" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"slug" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"description" varchar(1000),
+	"archived_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "paywall_release" (
+	"id" varchar(255) PRIMARY KEY,
+	"paywall_id" varchar(255) NOT NULL,
+	"s3_key" varchar(512) NOT NULL,
+	"s3_bucket" varchar(255) NOT NULL,
+	"version" integer NOT NULL,
+	"schema_version" integer NOT NULL,
+	"deploy_id" varchar(255),
+	"content_hash" varchar(64),
+	"runtime_config" jsonb,
+	"published_by" varchar(255) NOT NULL,
+	"published_at" timestamp(3) with time zone DEFAULT now(),
+	"is_active" boolean DEFAULT false NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "paywall" (
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"design_file_metadata" jsonb,
+	"id" varchar(255) PRIMARY KEY,
+	"name" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"slug" varchar(255) NOT NULL,
+	"source" smallint DEFAULT 1 NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "perk" (
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"id" varchar(255) PRIMARY KEY,
+	"name" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"slug" varchar(255) NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "person_deletion_request" (
+	"id" varchar(255) PRIMARY KEY,
+	"person_id" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"requested_by" varchar(255) NOT NULL,
+	"reason" varchar(64) NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"requested_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"completed_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "person_external_identifier" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255),
+	"person_id" varchar(255) NOT NULL,
+	"service_id" varchar(255) NOT NULL,
+	"is_default" boolean NOT NULL,
+	"identifier" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "person_identity" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"distinct_id" varchar(255) NOT NULL,
+	"person_id" varchar(255) NOT NULL,
+	"kind" smallint DEFAULT 1 NOT NULL,
+	"version" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "person_identity_migration_job" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"previous_distinct_id" varchar(255) NOT NULL,
+	"distinct_id" varchar(255) NOT NULL,
+	"target_person_id" varchar(255) NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"attempt_count" integer DEFAULT 0 NOT NULL,
+	"last_error" text,
+	"person_events" jsonb,
+	"mapping_events" jsonb,
+	"requested_at" timestamp(3) with time zone NOT NULL,
+	"completed_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "person_personless_identity" (
+	"project_id" varchar(255) NOT NULL,
+	"distinct_id" varchar(255) NOT NULL,
+	"is_merged" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "person_unlocked_perk" (
+	"id" varchar(255) PRIMARY KEY,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"person_id" varchar(255) NOT NULL,
+	"perk_id" varchar(255) NOT NULL,
+	"unlocked_by_purchase_id" varchar(255),
+	"unlocked_by_subscription_id" varchar(255),
+	"expires_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "person" (
+	"id" varchar(255) PRIMARY KEY,
+	"name" varchar(255),
+	"email" varchar(255),
+	"traits" jsonb,
+	"origin" smallint DEFAULT 1 NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"merged_into_person_id" varchar(255),
+	"primary_distinct_id" varchar(255),
+	"first_seen_at" timestamp(3) with time zone,
+	"last_seen_at" timestamp(3) with time zone,
+	"archived_at" timestamp(3) with time zone,
+	"deleted_at" timestamp(3) with time zone,
+	"deletion_reason" varchar(64),
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "product_perk" (
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"id" varchar(255) PRIMARY KEY,
+	"perk_id" varchar(255) NOT NULL,
+	"product_id" varchar(255) NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "product" (
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"id" varchar(255) PRIMARY KEY,
+	"name" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"slug" varchar(255) NOT NULL,
+	"type" smallint DEFAULT 1 NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "project" (
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"created_by" varchar(255),
+	"id" varchar(255) PRIMARY KEY,
+	"name" varchar(255) NOT NULL,
+	"organization_id" varchar(255) NOT NULL,
+	"slug" varchar(255) NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "purchase_ledger" (
+	"id" varchar(255) PRIMARY KEY,
+	"idempotency_key" varchar(512) NOT NULL,
+	"provider_id" varchar(50) NOT NULL,
+	"provider_event_type" varchar(100) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"organization_id" varchar(255) NOT NULL,
+	"person_id" varchar(255) NOT NULL,
+	"result_payload" jsonb NOT NULL,
+	"events_payload" jsonb NOT NULL,
+	"raw_provider_payload" jsonb,
+	"source" varchar(32),
+	"status" smallint DEFAULT 1 NOT NULL,
+	"attempt_count" integer DEFAULT 0 NOT NULL,
+	"next_attempt_at" timestamp(3) with time zone,
+	"last_error" varchar(1000),
+	"claimed_by" varchar(64),
+	"claimed_at" timestamp(3) with time zone,
+	"published_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "purchase" (
+	"id" varchar(255) PRIMARY KEY,
+	"person_id" varchar(255) NOT NULL,
+	"provider_key" varchar(255) NOT NULL,
+	"type" smallint DEFAULT 1 NOT NULL,
+	"payment_provider_configuration_product_id" varchar(255) NOT NULL,
+	"provider_environment" smallint DEFAULT 1 NOT NULL,
+	"refunded_at" timestamp(3) with time zone,
+	"refund_reason" varchar(100),
+	"revoked_at" timestamp(3) with time zone,
+	"revocation_reason" varchar(100),
+	"last_event_occurred_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "subscription" (
+	"id" varchar(255) PRIMARY KEY,
+	"person_id" varchar(255) NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"initial_transaction_id" varchar(255) NOT NULL,
+	"latest_transaction_id" varchar(255) NOT NULL,
+	"store_subscription_id" varchar(255) NOT NULL,
+	"payment_provider_configuration_product_id" varchar(255) NOT NULL,
+	"provider_environment" smallint DEFAULT 1 NOT NULL,
+	"is_trial" boolean DEFAULT false NOT NULL,
+	"starts_at" timestamp(3) with time zone NOT NULL,
+	"expires_at" timestamp(3) with time zone,
+	"purchased_at" timestamp(3) with time zone NOT NULL,
+	"cancel_at_period_end" boolean DEFAULT false NOT NULL,
+	"canceled_at" timestamp(3) with time zone,
+	"cancellation_reason" varchar(255),
+	"last_event_occurred_at" timestamp(3) with time zone,
+	"billing_retry_at" timestamp(3) with time zone,
+	"grace_period_expires_at" timestamp(3) with time zone,
+	"extended_to" timestamp(3) with time zone,
+	"pending_price_amount" integer,
+	"pending_price_currency" varchar(3),
+	"pending_price_effective_at" timestamp(3) with time zone,
+	"pending_product_change_id" varchar(255),
+	"redeemed_offer_id" varchar(255),
+	"redeemed_offer_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "transaction" (
+	"id" varchar(255) PRIMARY KEY,
+	"person_id" varchar(255) NOT NULL,
+	"amount" integer NOT NULL,
+	"currency" varchar(3) NOT NULL,
+	"amount_usd" integer,
+	"storefront" varchar(3),
+	"gross_amount" integer DEFAULT 0 NOT NULL,
+	"tax_amount" integer DEFAULT 0 NOT NULL,
+	"store_commission_amount" integer DEFAULT 0 NOT NULL,
+	"proceeds_amount" integer DEFAULT 0 NOT NULL,
+	"proceeds_after_tax_amount" integer DEFAULT 0 NOT NULL,
+	"gross_amount_usd" integer,
+	"tax_amount_usd" integer,
+	"store_commission_amount_usd" integer,
+	"proceeds_amount_usd" integer,
+	"proceeds_after_tax_amount_usd" integer,
+	"exchange_rate" integer,
+	"payment_provider_product_configuration_id" varchar(255) NOT NULL,
+	"provider_environment" smallint DEFAULT 1 NOT NULL,
+	"store_transaction_id" varchar(255),
+	"occurred_at" timestamp(3) with time zone NOT NULL,
+	"refunded_at" timestamp(3) with time zone,
+	"refund_reason" varchar(100),
+	"revoked_at" timestamp(3) with time zone,
+	"revocation_reason" varchar(100),
+	"last_event_occurred_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "usage_aggregate" (
+	"id" varchar(255) PRIMARY KEY,
+	"organization_id" varchar(255) NOT NULL,
+	"metric_id" varchar(100) NOT NULL,
+	"period_start" timestamp(3) with time zone NOT NULL,
+	"period_end" timestamp(3) with time zone NOT NULL,
+	"total_value" bigint DEFAULT 0 NOT NULL,
+	"limit_value" bigint,
+	"warn_threshold" bigint,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "usage_record" (
+	"id" varchar(255) PRIMARY KEY,
+	"organization_id" varchar(255) NOT NULL,
+	"metric_id" varchar(100) NOT NULL,
+	"value" bigint NOT NULL,
+	"period_start" timestamp(3) with time zone NOT NULL,
+	"period_end" timestamp(3) with time zone NOT NULL,
+	"synced_to_provider" boolean DEFAULT false NOT NULL,
+	"synced_at" timestamp(3) with time zone,
+	"sync_error" varchar(500),
+	"metadata" jsonb,
+	"occurred_at" timestamp(3) with time zone NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now()
+);
+--> statement-breakpoint
+CREATE TABLE "user" (
+	"ban_expires" timestamp(3) with time zone,
+	"ban_reason" text,
+	"banned" boolean DEFAULT false,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"email" varchar(255) NOT NULL UNIQUE,
+	"email_verified" boolean DEFAULT false NOT NULL,
+	"id" varchar(36) PRIMARY KEY,
+	"image" text,
+	"name" varchar(255) NOT NULL,
+	"role" text,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"workos_user_id" varchar(64)
+);
+--> statement-breakpoint
+CREATE TABLE "webhook_delivery" (
+	"id" varchar(255) PRIMARY KEY,
+	"webhook_endpoint_id" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"event_type" varchar(100) NOT NULL,
+	"payload" jsonb NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"attempt_count" integer DEFAULT 0 NOT NULL,
+	"max_attempts" integer DEFAULT 5 NOT NULL,
+	"next_attempt_at" timestamp(3) with time zone,
+	"event_occurred_at" timestamp(3) with time zone NOT NULL,
+	"completed_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now()
+);
+--> statement-breakpoint
+CREATE TABLE "webhook_delivery_attempt" (
+	"id" varchar(255) PRIMARY KEY,
+	"webhook_delivery_id" varchar(255) NOT NULL,
+	"attempt_number" integer NOT NULL,
+	"status_code" integer,
+	"response_body" varchar(2048),
+	"error_message" varchar(500),
+	"duration_ms" integer,
+	"succeeded" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now()
+);
+--> statement-breakpoint
+CREATE TABLE "webhook_endpoint" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"url" varchar(2048) NOT NULL,
+	"secret" varchar(255) NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"events" jsonb NOT NULL,
+	"description" varchar(500),
+	"consecutive_failures" integer DEFAULT 0 NOT NULL,
+	"last_success_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "workos_webhook_event" (
+	"id" varchar(255) PRIMARY KEY,
+	"external_event_id" varchar(255) NOT NULL,
+	"event_type" varchar(128) NOT NULL,
+	"payload" jsonb,
+	"processed_at" timestamp(3) with time zone,
+	"error" varchar(500),
+	"created_at" timestamp(3) with time zone DEFAULT now()
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "analytics_ingest_dlq_capture_id_idx" ON "analytics_ingest_dlq" ("capture_id");--> statement-breakpoint
+CREATE INDEX "analytics_ingest_dlq_project_failure_idx" ON "analytics_ingest_dlq" ("project_id","failure_class");--> statement-breakpoint
+CREATE INDEX "analytics_ingest_dlq_replay_idx" ON "analytics_ingest_dlq" ("replay_status","created_at");--> statement-breakpoint
+CREATE INDEX "api_key_key_idx" ON "api_key" ("key");--> statement-breakpoint
+CREATE INDEX "apikey_key_idx" ON "apikey" ("key");--> statement-breakpoint
+CREATE INDEX "apikey_userId_idx" ON "apikey" ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "transaction_id_idx" ON "app_store_transaction" ("transaction_id");--> statement-breakpoint
+CREATE INDEX "audit_project_created_idx" ON "audit_log" ("project_id","created_at");--> statement-breakpoint
+CREATE INDEX "audit_entity_created_idx" ON "audit_log" ("entity_type","entity_id","created_at");--> statement-breakpoint
+CREATE INDEX "audit_project_entity_type_created_idx" ON "audit_log" ("project_id","entity_type","created_at");--> statement-breakpoint
+CREATE INDEX "audit_actor_created_idx" ON "audit_log" ("actor_user_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "provider_metric_unique_idx" ON "billing_provider_meter" ("provider_id","metric_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "provider_event_unique_idx" ON "billing_webhook_event" ("provider_id","external_event_id");--> statement-breakpoint
+CREATE INDEX "processed_at_idx" ON "billing_webhook_event" ("processed_at");--> statement-breakpoint
+CREATE INDEX "capture_project_policy_force_route_idx" ON "capture_project_policy" ("force_route");--> statement-breakpoint
+CREATE UNIQUE INDEX "ff_override_unique_idx" ON "feature_flag_override" ("feature_flag_id","identity_type","identity_value");--> statement-breakpoint
+CREATE INDEX "ff_override_identity_idx" ON "feature_flag_override" ("identity_type","identity_value");--> statement-breakpoint
+CREATE UNIQUE INDEX "ff_target_unique_idx" ON "feature_flag_target" ("feature_flag_id","list_type","identity_type","identity_value");--> statement-breakpoint
+CREATE INDEX "ff_target_identity_idx" ON "feature_flag_target" ("identity_type","identity_value");--> statement-breakpoint
+CREATE UNIQUE INDEX "ff_variant_flag_key_idx" ON "feature_flag_variant" ("feature_flag_id","key");--> statement-breakpoint
+CREATE INDEX "ff_variant_flag_id_idx" ON "feature_flag_variant" ("feature_flag_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "ff_key_project_id_idx" ON "feature_flag" ("key","project_id");--> statement-breakpoint
+CREATE INDEX "ff_project_id_idx" ON "feature_flag" ("project_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "fx_rate_currency_date_idx" ON "fx_rate" ("currency","as_of_date");--> statement-breakpoint
+CREATE INDEX "invitation_organizationId_idx" ON "invitation" ("organization_id");--> statement-breakpoint
+CREATE INDEX "invitation_email_idx" ON "invitation" ("email");--> statement-breakpoint
+CREATE INDEX "member_organizationId_idx" ON "member" ("organization_id");--> statement-breakpoint
+CREATE INDEX "member_userId_idx" ON "member" ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "member_workos_id_uidx" ON "member" ("workos_membership_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "organization_slug_uidx" ON "organization" ("slug");--> statement-breakpoint
+CREATE UNIQUE INDEX "organization_workos_id_uidx" ON "organization" ("workos_organization_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "organization_id_unique_idx" ON "organization_billing" ("organization_id");--> statement-breakpoint
+CREATE INDEX "external_customer_id_idx" ON "organization_billing" ("external_customer_id");--> statement-breakpoint
+CREATE INDEX "billing_provider_id_idx" ON "organization_billing" ("billing_provider_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "product_provider_configuration_ext_pk_idx" ON "payment_provider_configuration_product" ("payment_provider_configuration_id","provider_product_key","product_id");--> statement-breakpoint
+CREATE INDEX "payment_provider_configuration_id_idx" ON "payment_provider_configuration_product" ("payment_provider_configuration_id");--> statement-breakpoint
+CREATE INDEX "project_id_idx" ON "payment_provider_configuration" ("project_id");--> statement-breakpoint
+CREATE INDEX "provider_id_idx" ON "payment_provider_configuration" ("provider_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "payment_provider_configuration_project_active_provider_uidx" ON "payment_provider_configuration" ("project_id","active_provider_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "notif_uuid_uniq" ON "payment_provider_notification_processed" ("payment_provider_configuration_id","notification_uuid");--> statement-breakpoint
+CREATE INDEX "notif_processed_at_idx" ON "payment_provider_notification_processed" ("processed_at");--> statement-breakpoint
+CREATE INDEX "notif_parked_lookup_idx" ON "payment_provider_notification_processed" ("payment_provider_configuration_id","result","parked_until_provider_product_key");--> statement-breakpoint
+CREATE INDEX "notif_parked_sdk_idx" ON "payment_provider_notification_processed" ("payment_provider_configuration_id","result","parked_until_original_transaction_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_component_version_component_version_idx" ON "paywall_component_version" ("component_id","version");--> statement-breakpoint
+CREATE INDEX "paywall_component_version_component_hash_idx" ON "paywall_component_version" ("component_id","content_hash");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_component_project_id_slug_idx" ON "paywall_component" ("project_id","slug");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_deploy_blob_project_id_sha256_idx" ON "paywall_deploy_blob" ("project_id","sha256");--> statement-breakpoint
+CREATE INDEX "paywall_deploy_file_deploy_id_idx" ON "paywall_deploy_file" ("deploy_id");--> statement-breakpoint
+CREATE INDEX "paywall_deploy_project_id_created_at_idx" ON "paywall_deploy" ("project_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_deploy_project_id_manifest_hash_idx" ON "paywall_deploy" ("project_id","manifest_hash");--> statement-breakpoint
+CREATE INDEX "paywall_location_showing_location_ended_started_idx" ON "paywall_location_showing" ("paywall_location_id","ended_at","started_at");--> statement-breakpoint
+CREATE INDEX "paywall_location_showing_project_location_started_idx" ON "paywall_location_showing" ("project_id","paywall_location_id","started_at");--> statement-breakpoint
+CREATE INDEX "paywall_location_showing_release_idx" ON "paywall_location_showing" ("paywall_release_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_location_slug_project_id_idx" ON "paywall_location" ("slug","project_id");--> statement-breakpoint
+CREATE INDEX "paywall_location_project_id_idx" ON "paywall_location" ("project_id");--> statement-breakpoint
+CREATE INDEX "paywall_location_archived_at_idx" ON "paywall_location" ("archived_at");--> statement-breakpoint
+CREATE INDEX "paywall_release_paywall_id_idx" ON "paywall_release" ("paywall_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_release_version_status_idx" ON "paywall_release" ("paywall_id","version","status");--> statement-breakpoint
+CREATE INDEX "paywall_release_status_idx" ON "paywall_release" ("paywall_id","status");--> statement-breakpoint
+CREATE INDEX "paywall_release_paywall_id_content_hash_idx" ON "paywall_release" ("paywall_id","content_hash");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_slug_project_id_idx" ON "paywall" ("slug","project_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "perk_slug_project_id_idx" ON "perk" ("slug","project_id");--> statement-breakpoint
+CREATE INDEX "person_deletion_request_person_idx" ON "person_deletion_request" ("person_id");--> statement-breakpoint
+CREATE INDEX "person_deletion_request_project_status_idx" ON "person_deletion_request" ("project_id","status");--> statement-breakpoint
+CREATE UNIQUE INDEX "person_external_identifier_project_service_identifier_uidx" ON "person_external_identifier" ("project_id","service_id","identifier");--> statement-breakpoint
+CREATE UNIQUE INDEX "person_identity_project_distinct_uidx" ON "person_identity" ("project_id","distinct_id");--> statement-breakpoint
+CREATE INDEX "person_identity_project_person_idx" ON "person_identity" ("project_id","person_id");--> statement-breakpoint
+CREATE INDEX "person_identity_migration_project_status_created_idx" ON "person_identity_migration_job" ("project_id","status","created_at");--> statement-breakpoint
+CREATE INDEX "person_identity_migration_project_previous_idx" ON "person_identity_migration_job" ("project_id","previous_distinct_id");--> statement-breakpoint
+CREATE INDEX "person_identity_migration_project_distinct_idx" ON "person_identity_migration_job" ("project_id","distinct_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "person_personless_identity_project_distinct_uidx" ON "person_personless_identity" ("project_id","distinct_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "person_id_perk_id_idx" ON "person_unlocked_perk" ("person_id","perk_id");--> statement-breakpoint
+CREATE INDEX "person_merged_into_person_id_idx" ON "person" ("merged_into_person_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "product_id_perk_id_idx" ON "product_perk" ("product_id","perk_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "product_slug_project_id_idx" ON "product" ("slug","project_id");--> statement-breakpoint
+CREATE INDEX "organization_id_idx" ON "project" ("organization_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "slug_oragnization_id_idx" ON "project" ("slug","organization_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "purchase_ledger_idempotency_key_idx" ON "purchase_ledger" ("idempotency_key");--> statement-breakpoint
+CREATE INDEX "purchase_ledger_poll_idx" ON "purchase_ledger" ("status","next_attempt_at");--> statement-breakpoint
+CREATE INDEX "purchase_ledger_provider_idx" ON "purchase_ledger" ("provider_id","provider_event_type");--> statement-breakpoint
+CREATE UNIQUE INDEX "provider_key_idx" ON "purchase" ("provider_key");--> statement-breakpoint
+CREATE INDEX "purchase_person_active_idx" ON "purchase" ("person_id","refunded_at","revoked_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "subscription_store_subscription_unique_idx" ON "subscription" ("payment_provider_configuration_product_id","store_subscription_id");--> statement-breakpoint
+CREATE INDEX "status_starts_at_idx" ON "subscription" ("status","starts_at");--> statement-breakpoint
+CREATE INDEX "canceled_at_idx" ON "subscription" ("canceled_at");--> statement-breakpoint
+CREATE INDEX "person_id_idx" ON "subscription" ("person_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "transaction_provider_tx_unique_idx" ON "transaction" ("payment_provider_product_configuration_id","store_transaction_id");--> statement-breakpoint
+CREATE INDEX "occurred_at_idx" ON "transaction" ("occurred_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "org_metric_period_unique_idx" ON "usage_aggregate" ("organization_id","metric_id","period_start");--> statement-breakpoint
+CREATE INDEX "org_metric_period_idx" ON "usage_record" ("organization_id","metric_id","period_start","period_end");--> statement-breakpoint
+CREATE INDEX "synced_to_provider_idx" ON "usage_record" ("synced_to_provider");--> statement-breakpoint
+CREATE UNIQUE INDEX "user_workos_id_uidx" ON "user" ("workos_user_id");--> statement-breakpoint
+CREATE INDEX "webhook_delivery_endpoint_status_idx" ON "webhook_delivery" ("webhook_endpoint_id","status");--> statement-breakpoint
+CREATE INDEX "webhook_delivery_next_attempt_idx" ON "webhook_delivery" ("next_attempt_at");--> statement-breakpoint
+CREATE INDEX "webhook_attempt_delivery_idx" ON "webhook_delivery_attempt" ("webhook_delivery_id");--> statement-breakpoint
+CREATE INDEX "webhook_endpoint_project_status_idx" ON "webhook_endpoint" ("project_id","status");--> statement-breakpoint
+CREATE UNIQUE INDEX "workos_event_unique_idx" ON "workos_webhook_event" ("external_event_id");--> statement-breakpoint
+CREATE INDEX "workos_event_processed_at_idx" ON "workos_webhook_event" ("processed_at");--> statement-breakpoint
+ALTER TABLE "apikey" ADD CONSTRAINT "apikey_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "capture_project_policy" ADD CONSTRAINT "capture_project_policy_project_id_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "project"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "invitation" ADD CONSTRAINT "invitation_inviter_id_user_id_fkey" FOREIGN KEY ("inviter_id") REFERENCES "user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "invitation" ADD CONSTRAINT "invitation_organization_id_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organization"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "member" ADD CONSTRAINT "member_organization_id_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organization"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "member" ADD CONSTRAINT "member_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_deletion_request" ADD CONSTRAINT "person_deletion_request_person_id_person_id_fkey" FOREIGN KEY ("person_id") REFERENCES "person"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_deletion_request" ADD CONSTRAINT "person_deletion_request_project_id_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "project"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_external_identifier" ADD CONSTRAINT "person_external_identifier_project_id_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "project"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_external_identifier" ADD CONSTRAINT "person_external_identifier_person_id_person_id_fkey" FOREIGN KEY ("person_id") REFERENCES "person"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_identity" ADD CONSTRAINT "person_identity_project_id_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "project"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_identity" ADD CONSTRAINT "person_identity_person_id_person_id_fkey" FOREIGN KEY ("person_id") REFERENCES "person"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_identity_migration_job" ADD CONSTRAINT "person_identity_migration_job_project_id_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "project"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_identity_migration_job" ADD CONSTRAINT "person_identity_migration_job_target_person_id_person_id_fkey" FOREIGN KEY ("target_person_id") REFERENCES "person"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "person_personless_identity" ADD CONSTRAINT "person_personless_identity_project_id_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "project"("id") ON DELETE CASCADE;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260624151148_init/snapshot.json b/packages/db/src/alchemy-migrations/20260624151148_init/snapshot.json
new file mode 100644
index 000000000..b72a6b865
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260624151148_init/snapshot.json
@@ -0,0 +1,10911 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "f69b7526-ef00-4b0b-ba22-4a491f425995",
+  "prevIds": ["00000000-0000-0000-0000-000000000000"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql b/packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql
new file mode 100644
index 000000000..a900eecdd
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql
@@ -0,0 +1,32 @@
+-- Hand-written (not drizzle-generated): the mimic document tables are owned by
+-- apps/mimic-db (see src/core/pg-store.ts, whose `ensureDocumentTables` DDL this
+-- mirrors) and are deliberately excluded from the drizzle schema
+-- (drizzle.config.ts filters `!mimic_*`). They must be created here because the
+-- Worker's Hyperdrive credential may be a least-privilege role that can't run
+-- DDL — only the migration pipeline (an admin role) is guaranteed to.
+-- `IF NOT EXISTS` keeps this idempotent against dev/local databases that were
+-- already bootstrapped by the runtime DDL path.
+CREATE TABLE IF NOT EXISTS mimic_documents (
+	id VARCHAR(36) NOT NULL PRIMARY KEY,
+	collection_id VARCHAR(36) NOT NULL,
+	schema_version INTEGER NOT NULL DEFAULT 1,
+	current_seq BIGINT NOT NULL DEFAULT 0,
+	snapshot_seq BIGINT NOT NULL DEFAULT 0,
+	deleted_at BIGINT
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS mimic_document_snapshots (
+	document_id VARCHAR(36) NOT NULL,
+	seq BIGINT NOT NULL,
+	schema_version INTEGER NOT NULL DEFAULT 1,
+	state_json JSONB NOT NULL,
+	PRIMARY KEY (document_id, seq)
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS mimic_document_commands (
+	document_id VARCHAR(36) NOT NULL,
+	seq BIGINT NOT NULL,
+	command_json JSONB NOT NULL,
+	tx_id VARCHAR(255) NOT NULL,
+	PRIMARY KEY (document_id, seq)
+);
diff --git a/packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/migration.sql b/packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/migration.sql
new file mode 100644
index 000000000..11b5023f5
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/migration.sql
@@ -0,0 +1,16 @@
+CREATE TABLE "identity_assertion" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"distinct_id_a" varchar(255) NOT NULL,
+	"distinct_id_b" varchar(255) NOT NULL,
+	"event_ts" timestamp(3) with time zone NOT NULL,
+	"source" smallint DEFAULT 5 NOT NULL,
+	"dedup_key" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now()
+);
+--> statement-breakpoint
+ALTER TABLE "person" ADD COLUMN "traits_meta" jsonb;--> statement-breakpoint
+CREATE UNIQUE INDEX "identity_assertion_project_dedup_uidx" ON "identity_assertion" ("project_id","dedup_key");--> statement-breakpoint
+CREATE INDEX "identity_assertion_project_a_idx" ON "identity_assertion" ("project_id","distinct_id_a");--> statement-breakpoint
+CREATE INDEX "identity_assertion_project_b_idx" ON "identity_assertion" ("project_id","distinct_id_b");--> statement-breakpoint
+ALTER TABLE "identity_assertion" ADD CONSTRAINT "identity_assertion_project_id_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "project"("id") ON DELETE CASCADE;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/snapshot.json b/packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/snapshot.json
new file mode 100644
index 000000000..a75fa1cfc
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260626092408_add_identity_assertion_log/snapshot.json
@@ -0,0 +1,11139 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "fb43ba3f-ab69-4676-8a6d-7d45c8f8150e",
+  "prevIds": ["f69b7526-ef00-4b0b-ba22-4a491f425995"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/migration.sql b/packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/migration.sql
new file mode 100644
index 000000000..d840638a1
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/migration.sql
@@ -0,0 +1 @@
+ALTER TABLE "project" ADD COLUMN "logo" text;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/snapshot.json b/packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/snapshot.json
new file mode 100644
index 000000000..3d671f43b
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630102702_daffy_jocasta/snapshot.json
@@ -0,0 +1,11152 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "74e42c66-8c23-46a7-9c74-131f92dfc6b2",
+  "prevIds": ["fb43ba3f-ab69-4676-8a6d-7d45c8f8150e"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260630110242_organic_penance/migration.sql b/packages/db/src/alchemy-migrations/20260630110242_organic_penance/migration.sql
new file mode 100644
index 000000000..5ba64f7b5
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630110242_organic_penance/migration.sql
@@ -0,0 +1 @@
+ALTER TABLE "user" ADD COLUMN "custom_image_url" text;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260630110242_organic_penance/snapshot.json b/packages/db/src/alchemy-migrations/20260630110242_organic_penance/snapshot.json
new file mode 100644
index 000000000..d058b230f
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630110242_organic_penance/snapshot.json
@@ -0,0 +1,11165 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "5815110c-00fb-42ce-885f-ff81f322378a",
+  "prevIds": ["74e42c66-8c23-46a7-9c74-131f92dfc6b2"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/migration.sql b/packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/migration.sql
new file mode 100644
index 000000000..23f253567
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/migration.sql
@@ -0,0 +1,12 @@
+CREATE TABLE "internal_feature_flag_override" (
+	"id" varchar(36) PRIMARY KEY,
+	"organization_id" varchar(36) NOT NULL,
+	"flag_key" varchar(100) NOT NULL,
+	"enabled" boolean NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "internal_feature_flag_override_org_key_uidx" ON "internal_feature_flag_override" ("organization_id","flag_key");--> statement-breakpoint
+CREATE INDEX "internal_feature_flag_override_org_idx" ON "internal_feature_flag_override" ("organization_id");--> statement-breakpoint
+ALTER TABLE "internal_feature_flag_override" ADD CONSTRAINT "internal_feature_flag_override_g0qsEev0tRHY_fkey" FOREIGN KEY ("organization_id") REFERENCES "organization"("id") ON DELETE CASCADE;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/snapshot.json b/packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/snapshot.json
new file mode 100644
index 000000000..d1106cbe1
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630153536_add_internal_feature_flag_override/snapshot.json
@@ -0,0 +1,11319 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "9be9b4e4-c23a-4b8c-9e85-67ce2679ef99",
+  "prevIds": ["5815110c-00fb-42ce-885f-ff81f322378a"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/migration.sql b/packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/migration.sql
new file mode 100644
index 000000000..833bd85e2
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/migration.sql
@@ -0,0 +1,100 @@
+CREATE TABLE "push_device_token" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"platform" varchar(20) NOT NULL,
+	"provider" varchar(20) NOT NULL,
+	"platform_token" varchar(1024) NOT NULL,
+	"bundle_id" varchar(255),
+	"environment" varchar(20),
+	"invalidated_at" timestamp(3) with time zone,
+	"invalidation_reason" varchar(100),
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone,
+	"deleted_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "push_notification_config" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"provider_id" varchar(50) NOT NULL,
+	"push_provider_key" varchar(255) DEFAULT 'empty' NOT NULL,
+	"enabled" boolean DEFAULT false NOT NULL,
+	"name" varchar(255) DEFAULT 'Unknown' NOT NULL,
+	"configuration" jsonb NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone,
+	"deleted_at" timestamp(3) with time zone,
+	"active_provider_id" varchar(50) GENERATED ALWAYS AS ((case when deleted_at is null then provider_id else null end)) STORED
+);
+--> statement-breakpoint
+CREATE TABLE "push_notification_delivery" (
+	"id" varchar(255) PRIMARY KEY,
+	"push_notification_send_id" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"person_id" varchar(255) NOT NULL,
+	"push_device_token_id" varchar(255) NOT NULL,
+	"provider" varchar(20) NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"attempt_count" integer DEFAULT 0 NOT NULL,
+	"max_attempts" integer DEFAULT 5 NOT NULL,
+	"next_attempt_at" timestamp(3) with time zone,
+	"provider_message_id" varchar(255),
+	"last_error" varchar(500),
+	"completed_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "push_notification_delivery_attempt" (
+	"id" varchar(255) PRIMARY KEY,
+	"push_notification_delivery_id" varchar(255) NOT NULL,
+	"attempt_number" integer NOT NULL,
+	"status_code" integer,
+	"provider_error_code" varchar(100),
+	"response_body" varchar(2048),
+	"error_message" varchar(500),
+	"duration_ms" integer,
+	"succeeded" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "push_notification_send" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"idempotency_key" varchar(255),
+	"message" jsonb NOT NULL,
+	"requested_person_ids" jsonb DEFAULT '[]' NOT NULL,
+	"requested_distinct_ids" jsonb DEFAULT '[]' NOT NULL,
+	"unresolved_distinct_ids" jsonb DEFAULT '[]' NOT NULL,
+	"status" smallint DEFAULT 1 NOT NULL,
+	"device_count" integer DEFAULT 0 NOT NULL,
+	"succeeded_count" integer DEFAULT 0 NOT NULL,
+	"failed_count" integer DEFAULT 0 NOT NULL,
+	"skipped_count" integer DEFAULT 0 NOT NULL,
+	"message_purged_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"completed_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "push_person_device_token" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"person_id" varchar(255) NOT NULL,
+	"push_device_token_id" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone,
+	"deleted_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "push_device_token_dedup_uidx" ON "push_device_token" ("project_id","provider","platform_token",coalesce("environment", ''));--> statement-breakpoint
+CREATE INDEX "push_device_token_project_invalidated_idx" ON "push_device_token" ("project_id","invalidated_at");--> statement-breakpoint
+CREATE INDEX "push_notification_config_project_id_idx" ON "push_notification_config" ("project_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "push_notification_config_project_active_provider_uidx" ON "push_notification_config" ("project_id","active_provider_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "push_notification_delivery_send_device_uidx" ON "push_notification_delivery" ("push_notification_send_id","push_device_token_id");--> statement-breakpoint
+CREATE INDEX "push_notification_delivery_send_status_idx" ON "push_notification_delivery" ("push_notification_send_id","status");--> statement-breakpoint
+CREATE INDEX "push_notification_delivery_next_attempt_idx" ON "push_notification_delivery" ("status","next_attempt_at");--> statement-breakpoint
+CREATE INDEX "push_notification_delivery_attempt_delivery_idx" ON "push_notification_delivery_attempt" ("push_notification_delivery_id");--> statement-breakpoint
+CREATE INDEX "push_notification_send_project_created_idx" ON "push_notification_send" ("project_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "push_notification_send_idempotency_uidx" ON "push_notification_send" ("project_id","idempotency_key") WHERE "idempotency_key" is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX "push_person_device_token_uidx" ON "push_person_device_token" ("person_id","push_device_token_id");--> statement-breakpoint
+CREATE INDEX "push_person_device_token_person_idx" ON "push_person_device_token" ("person_id","deleted_at");--> statement-breakpoint
+CREATE INDEX "push_person_device_token_token_idx" ON "push_person_device_token" ("push_device_token_id","deleted_at");
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/snapshot.json b/packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/snapshot.json
new file mode 100644
index 000000000..660a335aa
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260630164321_add_push_notifications/snapshot.json
@@ -0,0 +1,12667 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "2c3a4f22-55f7-42e4-987e-d0eca4b2f38e",
+  "prevIds": ["9be9b4e4-c23a-4b8c-9e85-67ce2679ef99"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260701083829_experiments/migration.sql b/packages/db/src/alchemy-migrations/20260701083829_experiments/migration.sql
new file mode 100644
index 000000000..ddb45d88f
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260701083829_experiments/migration.sql
@@ -0,0 +1,53 @@
+CREATE TABLE "experiment_treatment" (
+	"id" varchar(255) PRIMARY KEY,
+	"experiment_id" varchar(255) NOT NULL,
+	"variant_id" varchar(255) NOT NULL,
+	"treatment_type" varchar(50) NOT NULL,
+	"config" jsonb NOT NULL,
+	"archived_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "experiment_variant" (
+	"id" varchar(255) PRIMARY KEY,
+	"experiment_id" varchar(255) NOT NULL,
+	"key" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"is_control" boolean DEFAULT false NOT NULL,
+	"weight_bps" integer DEFAULT 0 NOT NULL,
+	"archived_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "experiment" (
+	"id" varchar(255) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"feature_flag_id" varchar(255) NOT NULL,
+	"key" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"description" varchar(1000),
+	"hypothesis" varchar(2000),
+	"status" smallint DEFAULT 1 NOT NULL,
+	"primary_metric_event_name" varchar(255) NOT NULL,
+	"secondary_metric_event_names" jsonb,
+	"started_at" timestamp(3) with time zone,
+	"ended_at" timestamp(3) with time zone,
+	"winning_variant_id" varchar(255),
+	"created_by_user_id" varchar(255),
+	"updated_by_user_id" varchar(255),
+	"archived_at" timestamp(3) with time zone,
+	"created_at" timestamp(3) with time zone DEFAULT now(),
+	"updated_at" timestamp(3) with time zone,
+	"version" integer DEFAULT 1 NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "feature_flag_override" ADD COLUMN "forced_variant_key" varchar(255);--> statement-breakpoint
+CREATE INDEX "experiment_treatment_experiment_id_idx" ON "experiment_treatment" ("experiment_id");--> statement-breakpoint
+CREATE INDEX "experiment_treatment_variant_id_idx" ON "experiment_treatment" ("variant_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "experiment_variant_experiment_key_idx" ON "experiment_variant" ("experiment_id","key");--> statement-breakpoint
+CREATE INDEX "experiment_variant_experiment_id_idx" ON "experiment_variant" ("experiment_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "experiment_key_project_id_idx" ON "experiment" ("key","project_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "experiment_feature_flag_id_idx" ON "experiment" ("feature_flag_id");--> statement-breakpoint
+CREATE INDEX "experiment_project_id_idx" ON "experiment" ("project_id");
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260701083829_experiments/snapshot.json b/packages/db/src/alchemy-migrations/20260701083829_experiments/snapshot.json
new file mode 100644
index 000000000..683a53c93
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260701083829_experiments/snapshot.json
@@ -0,0 +1,12003 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "41ea90f0-5ba7-4074-9258-ea58fe85fc8a",
+  "prevIds": ["9be9b4e4-c23a-4b8c-9e85-67ce2679ef99"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/migration.sql b/packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/migration.sql
new file mode 100644
index 000000000..26e6a1a71
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/migration.sql
@@ -0,0 +1,12 @@
+CREATE TABLE "analytics_saved_query" (
+	"id" varchar(255) PRIMARY KEY,
+	"organization_id" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"voidql_text" text NOT NULL,
+	"schema_version" integer NOT NULL,
+	"created_by" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "analytics_saved_query_org_idx" ON "analytics_saved_query" ("organization_id");
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/snapshot.json b/packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/snapshot.json
new file mode 100644
index 000000000..219e1d514
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260701095352_add_analytics_saved_query/snapshot.json
@@ -0,0 +1,12806 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "049460bb-3924-4ea7-ae62-846a34e8721a",
+  "prevIds": ["2c3a4f22-55f7-42e4-987e-d0eca4b2f38e"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/migration.sql b/packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/migration.sql
new file mode 100644
index 000000000..8b61a8116
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/migration.sql
@@ -0,0 +1,26 @@
+CREATE TABLE "voidhash_feedback" (
+	"id" varchar(255) PRIMARY KEY,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"topic" varchar(32) NOT NULL,
+	"sentiment" smallint,
+	"message" text NOT NULL,
+	"status" smallint DEFAULT 0 NOT NULL,
+	"user_id" varchar(255),
+	"user_email" varchar(255),
+	"user_name" varchar(255),
+	"organization_id" varchar(255),
+	"organization_slug" varchar(255),
+	"organization_name" varchar(255),
+	"project_id" varchar(255),
+	"project_slug" varchar(255),
+	"project_name" varchar(255),
+	"pathname" varchar(1024),
+	"user_agent" varchar(512),
+	"read_at" timestamp(3) with time zone,
+	"archived_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE INDEX "voidhash_feedback_status_created_idx" ON "voidhash_feedback" ("status","created_at");--> statement-breakpoint
+CREATE INDEX "voidhash_feedback_created_idx" ON "voidhash_feedback" ("created_at");--> statement-breakpoint
+CREATE INDEX "voidhash_feedback_organization_idx" ON "voidhash_feedback" ("organization_id");
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/snapshot.json b/packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/snapshot.json
new file mode 100644
index 000000000..547df9204
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260701124746_add_voidhash_feedback/snapshot.json
@@ -0,0 +1,13150 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "2a725ee5-bf67-45e2-ace0-a5c932a42f36",
+  "prevIds": ["049460bb-3924-4ea7-ae62-846a34e8721a"],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["inviter_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["organization_id"],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["user_id"],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["target_person_id"],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["project_id"],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": ["id"],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["project_id"],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": ["id"],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["slug"],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": ["email"],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
diff --git a/packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/migration.sql b/packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/migration.sql
new file mode 100644
index 000000000..8d8887441
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/migration.sql
@@ -0,0 +1,17 @@
+CREATE TABLE "paywall_asset" (
+	"id" varchar(36) PRIMARY KEY,
+	"organization_id" varchar(36) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"key" text NOT NULL,
+	"url" text NOT NULL,
+	"content_type" varchar(100) NOT NULL,
+	"size_bytes" integer NOT NULL,
+	"width" integer,
+	"height" integer,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_asset_key_uidx" ON "paywall_asset" ("key");--> statement-breakpoint
+CREATE INDEX "paywall_asset_org_idx" ON "paywall_asset" ("organization_id");--> statement-breakpoint
+ALTER TABLE "paywall_asset" ADD CONSTRAINT "paywall_asset_organization_id_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organization"("id") ON DELETE CASCADE;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/snapshot.json b/packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/snapshot.json
new file mode 100644
index 000000000..27fb36bb6
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260702191621_add_paywall_asset/snapshot.json
@@ -0,0 +1,14255 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "014d72d6-1dca-428b-9a11-9ac4f2bb82ed",
+  "prevIds": [
+    "2a725ee5-bf67-45e2-ace0-a5c932a42f36",
+    "41ea90f0-5ba7-4074-9258-ea58fe85fc8a"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/migration.sql b/packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/migration.sql
new file mode 100644
index 000000000..4d635ce1a
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/migration.sql
@@ -0,0 +1,18 @@
+CREATE TABLE "voidhash_ai_chat" (
+	"id" varchar(64) PRIMARY KEY,
+	"organization_id" varchar(36) NOT NULL,
+	"project_id" varchar(36) NOT NULL,
+	"surface" varchar(64) NOT NULL,
+	"chat_type" varchar(32) NOT NULL,
+	"paywall_id" varchar(64),
+	"user_id" varchar(64),
+	"title" varchar(255) NOT NULL,
+	"messages" text NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "voidhash_ai_chat_org_idx" ON "voidhash_ai_chat" ("organization_id");--> statement-breakpoint
+CREATE INDEX "voidhash_ai_chat_scope_idx" ON "voidhash_ai_chat" ("project_id","surface","paywall_id","chat_type");--> statement-breakpoint
+CREATE INDEX "voidhash_ai_chat_updated_idx" ON "voidhash_ai_chat" ("updated_at");--> statement-breakpoint
+ALTER TABLE "voidhash_ai_chat" ADD CONSTRAINT "voidhash_ai_chat_organization_id_organization_id_fkey" FOREIGN KEY ("organization_id") REFERENCES "organization"("id") ON DELETE CASCADE;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/snapshot.json b/packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/snapshot.json
new file mode 100644
index 000000000..dcb154275
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260703073055_add_voidhash_ai_chat/snapshot.json
@@ -0,0 +1,14514 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "1d48555d-a1f4-43f6-97a6-92dc4653c90a",
+  "prevIds": [
+    "014d72d6-1dca-428b-9a11-9ac4f2bb82ed"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/migration.sql b/packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/migration.sql
new file mode 100644
index 000000000..366deaa6b
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/migration.sql
@@ -0,0 +1,2 @@
+ALTER TABLE "paywall" ADD COLUMN "thumbnail_url" text;--> statement-breakpoint
+ALTER TABLE "paywall" ADD COLUMN "thumbnail_seq" bigint;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/snapshot.json b/packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/snapshot.json
new file mode 100644
index 000000000..d09017926
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260703090438_add_paywall_thumbnail/snapshot.json
@@ -0,0 +1,14540 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "e0c7d183-7c93-4975-a15f-90843100eb29",
+  "prevIds": [
+    "1d48555d-a1f4-43f6-97a6-92dc4653c90a"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/migration.sql b/packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/migration.sql
new file mode 100644
index 000000000..03e9a4a68
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/migration.sql
@@ -0,0 +1 @@
+ALTER TABLE "paywall" ADD COLUMN "archived_at" timestamp(3) with time zone;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/snapshot.json b/packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/snapshot.json
new file mode 100644
index 000000000..07851300b
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260703091102_add_paywall_archived_at/snapshot.json
@@ -0,0 +1,14553 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "4e11a6c8-5717-4ac8-b782-92c484ca3613",
+  "prevIds": [
+    "e0c7d183-7c93-4975-a15f-90843100eb29"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/migration.sql b/packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/migration.sql
new file mode 100644
index 000000000..abc3247c7
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/migration.sql
@@ -0,0 +1,8 @@
+CREATE TABLE "paywall_component_manifest" (
+	"source_hash" varchar(64) PRIMARY KEY,
+	"status" varchar(16) NOT NULL,
+	"manifest" jsonb,
+	"diagnostics" jsonb,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
diff --git a/packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/snapshot.json b/packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/snapshot.json
new file mode 100644
index 000000000..abe1b5e24
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260704114844_add_paywall_component_manifest/snapshot.json
@@ -0,0 +1,14647 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "3bcf723e-1392-4183-8537-8f936cbc1d1d",
+  "prevIds": [
+    "4e11a6c8-5717-4ac8-b782-92c484ca3613"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_manifest",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "diagnostics",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "source_hash"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_manifest_pkey",
+      "schema": "public",
+      "table": "paywall_component_manifest",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/migration.sql b/packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/migration.sql
new file mode 100644
index 000000000..af3d375f4
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/migration.sql
@@ -0,0 +1,12 @@
+CREATE TABLE "voidhash_ai_checkpoint" (
+	"id" varchar(64) PRIMARY KEY,
+	"chat_id" varchar(64) NOT NULL,
+	"turn_id" varchar(128) NOT NULL,
+	"paywall_id" varchar(64) NOT NULL,
+	"tree" jsonb NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "voidhash_ai_checkpoint_turn_doc_idx" ON "voidhash_ai_checkpoint" ("chat_id","turn_id","paywall_id");--> statement-breakpoint
+CREATE INDEX "voidhash_ai_checkpoint_chat_idx" ON "voidhash_ai_checkpoint" ("chat_id","created_at");--> statement-breakpoint
+ALTER TABLE "voidhash_ai_checkpoint" ADD CONSTRAINT "voidhash_ai_checkpoint_chat_id_voidhash_ai_chat_id_fkey" FOREIGN KEY ("chat_id") REFERENCES "voidhash_ai_chat"("id") ON DELETE CASCADE;
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/snapshot.json b/packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/snapshot.json
new file mode 100644
index 000000000..5abb42b47
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260704134248_add_voidhash_ai_checkpoint/snapshot.json
@@ -0,0 +1,14821 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "2a809b27-bc87-477e-8049-c2d441bb30ed",
+  "prevIds": [
+    "3bcf723e-1392-4183-8537-8f936cbc1d1d"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_manifest",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_checkpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "diagnostics",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "turn_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tree",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "turn_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_turn_doc_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_chat_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "chat_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "voidhash_ai_chat",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_checkpoint_chat_id_voidhash_ai_chat_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "source_hash"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_manifest_pkey",
+      "schema": "public",
+      "table": "paywall_component_manifest",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_checkpoint_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/db.ts b/packages/db/src/db.ts
new file mode 100644
index 000000000..4fdf5938b
--- /dev/null
+++ b/packages/db/src/db.ts
@@ -0,0 +1,87 @@
+import * as PgClient from "@effect/sql-pg/PgClient";
+import * as PgDrizzle from "drizzle-orm/effect-postgres";
+import { Context, Effect, Layer, Redacted } from "effect";
+import type { ConnectionOptions } from "node:tls";
+
+import { relations } from "./relations.ts";
+
+// Primitives
+const localDatabaseHosts = new Set([
+  "localhost",
+  "127.0.0.1",
+  "::1",
+  "0.0.0.0",
+  "host.docker.internal",
+  "standalone_postgres",
+]);
+
+const isLocalDatabaseHost = (host: string): boolean => {
+  const normalizedHost = host.trim().toLowerCase();
+  return (
+    localDatabaseHosts.has(normalizedHost) ||
+    normalizedHost.endsWith(".localhost") ||
+    // Cloudflare Hyperdrive's local proxy socket is plaintext (it terminates TLS
+    // upstream), so a `.hyperdrive.local` host must never default to TLS.
+    normalizedHost.endsWith(".hyperdrive.local")
+  );
+};
+
+const getDefaultSsl = (host: string): boolean | ConnectionOptions | undefined =>
+  isLocalDatabaseHost(host) ? undefined : { rejectUnauthorized: true };
+
+/**
+ * Plain connection config consumed by {@link Db.layer}. Built from the bound
+ * Cloudflare Hyperdrive origin (or the local docker Postgres in dev / tests).
+ */
+export interface DbConfig {
+  readonly host: string;
+  readonly port: number;
+  readonly username: string;
+  readonly password: string;
+  readonly databaseName: string;
+  readonly ssl?: boolean | ConnectionOptions;
+}
+
+/**
+ * The native `drizzle-orm/effect-postgres` database, built over `@effect/sql-pg`'s
+ * `PgClient`. Every query builder is an `Effect` — `yield* db.insert(t).values(v)`,
+ * `yield* db.query.persons.findFirst({ where: { id } })` — and transactions are
+ * native (`db.transaction((tx) => …)`). Requires only a `PgClient`; the no-op
+ * cache + logger come from `PgDrizzle.DefaultServices`.
+ */
+const makeDb = PgDrizzle.make({ relations }).pipe(Effect.provide(PgDrizzle.DefaultServices));
+
+/** The native effect-postgres database value (query builders return Effects). */
+export type Database = Effect.Success<typeof makeDb>;
+
+/** A live transaction handle — the same query surface as {@link Database}. */
+export type DbTransaction = Parameters<Parameters<Database["transaction"]>[0]>[0];
+
+/** The tagged error every `Db` query fails with (`EffectDrizzleQueryError`). */
+export type DbError = PgDrizzle.EffectPgQueryEffectHKT["error"];
+
+const pgClientLayer = (config: DbConfig) =>
+  PgClient.layer({
+    host: config.host,
+    port: config.port,
+    database: config.databaseName,
+    username: config.username,
+    password: Redacted.make(config.password),
+    ssl: "ssl" in config ? config.ssl : getDefaultSsl(config.host),
+  });
+
+/**
+ * The application database service. Inject with {@link Db.layer}; consume it
+ * natively:
+ *
+ * ```ts
+ * const db = yield* Db;
+ * const person = yield* db.query.persons.findFirst({ where: { id } });
+ * yield* db.insert(persons).values(row);
+ * yield* db.transaction((tx) => tx.update(persons).set(patch).where(eq(persons.id, id)));
+ * ```
+ */
+export class Db extends Context.Service<Db, Database>()("app/Db") {
+  static readonly layer = (config: DbConfig): Layer.Layer<Db> =>
+    Layer.effect(Db, makeDb).pipe(Layer.provide(pgClientLayer(config)), Layer.orDie);
+}
diff --git a/packages/db/src/index.ts b/packages/db/src/index.ts
new file mode 100644
index 000000000..c84811662
--- /dev/null
+++ b/packages/db/src/index.ts
@@ -0,0 +1,4 @@
+export * from "drizzle-orm";
+export * from "./schema.ts";
+export * from "./types.ts";
+export * from "./db.ts";
diff --git a/packages/db/src/migrations.ts b/packages/db/src/migrations.ts
new file mode 100644
index 000000000..5a2b07d8b
--- /dev/null
+++ b/packages/db/src/migrations.ts
@@ -0,0 +1,152 @@
+import { readdir, readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+
+import { Effect, Schema } from "effect";
+import { Client } from "pg";
+
+import type { DbConfig } from "./db.ts";
+
+const migrationsTable = "__alchemy_migrations";
+const defaultMigrationsDirectory = new URL("./alchemy-migrations/", import.meta.url);
+
+/** Stable failure raised while discovering or applying application migrations. */
+export class AppDatabaseMigrationError extends Schema.TaggedErrorClass<AppDatabaseMigrationError>(
+  "AppDatabaseMigrationError",
+)("AppDatabaseMigrationError", {
+  cause: Schema.String,
+  migrationName: Schema.optional(Schema.String),
+  operation: Schema.String,
+}) {}
+
+/** Migration-runner overrides used by tests and alternate package layouts. */
+export interface AppDatabaseMigrationOptions {
+  readonly directory?: URL;
+  readonly lockName?: string;
+}
+
+/** Summary of one application migration run. */
+export interface AppDatabaseMigrationResult {
+  readonly applied: ReadonlyArray<string>;
+  readonly skipped: number;
+}
+
+interface MigrationFile {
+  readonly name: string;
+  readonly sql: string;
+}
+
+const collectMigrations = async (directory: URL): Promise<ReadonlyArray<MigrationFile>> => {
+  const entries = await readdir(fileURLToPath(directory), { withFileTypes: true });
+  const migrations: MigrationFile[] = [];
+
+  for (const entry of entries.filter((candidate) => candidate.isDirectory()).sort((a, b) =>
+    a.name.localeCompare(b.name),
+  )) {
+    const migrationUrl = new URL(`${entry.name}/migration.sql`, directory);
+    try {
+      migrations.push({
+        name: entry.name,
+        sql: await readFile(migrationUrl, "utf8"),
+      });
+    } catch (cause) {
+      const code =
+        typeof cause === "object" && cause !== null && "code" in cause
+          ? cause.code
+          : undefined;
+      if (code !== "ENOENT") throw cause;
+    }
+  }
+
+  return migrations;
+};
+
+const runMigrations = async (
+  config: DbConfig,
+  options: AppDatabaseMigrationOptions,
+): Promise<AppDatabaseMigrationResult> => {
+  const client = new Client({
+    database: config.databaseName,
+    host: config.host,
+    password: config.password,
+    port: config.port,
+    ssl: config.ssl,
+    user: config.username,
+  });
+  const migrations = await collectMigrations(options.directory ?? defaultMigrationsDirectory);
+  const lockName = options.lockName ?? `${config.databaseName}:voidhash-app-migrations`;
+  let currentMigration: string | undefined;
+
+  await client.connect();
+  try {
+    await client.query("SELECT pg_advisory_lock(hashtext($1))", [lockName]);
+    try {
+      await client.query(
+        `CREATE TABLE IF NOT EXISTS ${migrationsTable} (
+          id TEXT PRIMARY KEY,
+          name TEXT NOT NULL UNIQUE,
+          applied_at TIMESTAMPTZ NOT NULL DEFAULT now()
+        )`,
+      );
+      const appliedRows = await client.query<{ readonly id: string; readonly name: string }>(
+        `SELECT id, name FROM ${migrationsTable}`,
+      );
+      const appliedNames = new Set(appliedRows.rows.map(({ name }) => name));
+      let nextSequence =
+        appliedRows.rows.reduce((maximum, { id }) => {
+          const value = Number.parseInt(id, 10);
+          return Number.isNaN(value) ? maximum : Math.max(maximum, value);
+        }, 0) + 1;
+      const applied: string[] = [];
+
+      for (const migration of migrations) {
+        if (appliedNames.has(migration.name)) continue;
+        currentMigration = migration.name;
+        await client.query("BEGIN");
+        try {
+          await client.query(migration.sql);
+          await client.query(
+            `INSERT INTO ${migrationsTable} (id, name) VALUES ($1, $2)`,
+            [String(nextSequence).padStart(5, "0"), migration.name],
+          );
+          await client.query("COMMIT");
+        } catch (cause) {
+          await client.query("ROLLBACK").catch(() => undefined);
+          throw cause;
+        }
+        nextSequence += 1;
+        applied.push(migration.name);
+        currentMigration = undefined;
+      }
+
+      return { applied, skipped: migrations.length - applied.length };
+    } finally {
+      await client
+        .query("SELECT pg_advisory_unlock(hashtext($1))", [lockName])
+        .catch(() => undefined);
+    }
+  } catch (cause) {
+    throw new AppDatabaseMigrationError({
+      cause: String(cause),
+      migrationName: currentMigration,
+      operation: currentMigration ? "apply" : "initialize",
+    });
+  } finally {
+    await client.end().catch(() => undefined);
+  }
+};
+
+/** Applies pending application migrations from the package's canonical migration directory. */
+export const runAppDatabaseMigrations = (
+  config: DbConfig,
+  options: AppDatabaseMigrationOptions = {},
+): Effect.Effect<AppDatabaseMigrationResult, AppDatabaseMigrationError> =>
+  Effect.tryPromise({
+    try: () => runMigrations(config, options),
+    catch: (cause) =>
+      cause instanceof AppDatabaseMigrationError
+        ? cause
+        : new AppDatabaseMigrationError({
+            cause: String(cause),
+            operation: "discover",
+          }),
+  });
diff --git a/packages/db/src/relations.ts b/packages/db/src/relations.ts
new file mode 100644
index 000000000..63adf805b
--- /dev/null
+++ b/packages/db/src/relations.ts
@@ -0,0 +1,255 @@
+import { defineRelations } from "drizzle-orm";
+
+import * as schema from "./schema.ts";
+
+/**
+ * v2 relational-query graph for `drizzle-orm/effect-postgres`'s `db.query.*`
+ * relational queries. Mirrors the foreign keys declared on the tables in
+ * `./schema.ts`. The relation names (the keys here) must match the `with: {…}`
+ * clauses at call sites.
+ *
+ * Lives in its own module so `schema.ts` stays a pure table + type definition
+ * file and `defineRelations` can take the whole table namespace (it ignores the
+ * non-table exports — enums, types — automatically).
+ */
+export const relations = defineRelations(schema, (r) => ({
+  user: {
+    apikeys: r.many.apikey(),
+    invitations: r.many.invitation(),
+    members: r.many.member(),
+  },
+  organization: {
+    invitations: r.many.invitation(),
+    members: r.many.member(),
+  },
+  member: {
+    organization: r.one.organization({ from: r.member.organizationId, to: r.organization.id }),
+    user: r.one.user({ from: r.member.userId, to: r.user.id }),
+  },
+  invitation: {
+    organization: r.one.organization({ from: r.invitation.organizationId, to: r.organization.id }),
+    user: r.one.user({ from: r.invitation.inviterId, to: r.user.id }),
+  },
+  apikey: {
+    user: r.one.user({ from: r.apikey.userId, to: r.user.id }),
+  },
+  projects: {
+    organization: r.one.organization({ from: r.projects.organizationId, to: r.organization.id }),
+  },
+  captureProjectPolicies: {
+    project: r.one.projects({ from: r.captureProjectPolicies.projectId, to: r.projects.id }),
+  },
+  apiKeys: {
+    project: r.one.projects({ from: r.apiKeys.projectId, to: r.projects.id }),
+  },
+  persons: {
+    externalIdentifiers: r.many.personExternalIdentifiers(),
+    mergedIntoPerson: r.one.persons({ from: r.persons.mergedIntoPersonId, to: r.persons.id }),
+  },
+  personIdentities: {
+    person: r.one.persons({ from: r.personIdentities.personId, to: r.persons.id }),
+    project: r.one.projects({ from: r.personIdentities.projectId, to: r.projects.id }),
+  },
+  personPersonlessIdentities: {
+    project: r.one.projects({ from: r.personPersonlessIdentities.projectId, to: r.projects.id }),
+  },
+  identityAssertions: {
+    project: r.one.projects({ from: r.identityAssertions.projectId, to: r.projects.id }),
+  },
+  personIdentityMigrationJobs: {
+    project: r.one.projects({ from: r.personIdentityMigrationJobs.projectId, to: r.projects.id }),
+    targetPerson: r.one.persons({
+      from: r.personIdentityMigrationJobs.targetPersonId,
+      to: r.persons.id,
+    }),
+  },
+  personExternalIdentifiers: {
+    person: r.one.persons({ from: r.personExternalIdentifiers.personId, to: r.persons.id }),
+    project: r.one.projects({ from: r.personExternalIdentifiers.projectId, to: r.projects.id }),
+  },
+  paymentProviderConfigurations: {
+    paymentProviderConfigurationProducts: r.many.paymentProviderConfigurationProducts(),
+    project: r.one.projects({ from: r.paymentProviderConfigurations.projectId, to: r.projects.id }),
+  },
+  perks: {
+    productPerks: r.many.productPerks(),
+  },
+  products: {
+    paymentProviderConfigurationProducts: r.many.paymentProviderConfigurationProducts(),
+    perks: r.many.productPerks(),
+  },
+  productPerks: {
+    perk: r.one.perks({ from: r.productPerks.perkId, to: r.perks.id }),
+    product: r.one.products({ from: r.productPerks.productId, to: r.products.id }),
+  },
+  paymentProviderConfigurationProducts: {
+    paymentProviderConfiguration: r.one.paymentProviderConfigurations({
+      from: r.paymentProviderConfigurationProducts.paymentProviderConfigurationId,
+      to: r.paymentProviderConfigurations.id,
+    }),
+    product: r.one.products({
+      from: r.paymentProviderConfigurationProducts.productId,
+      to: r.products.id,
+    }),
+    subscriptions: r.many.subscriptions(),
+  },
+  checkoutSessions: {
+    person: r.one.persons({ from: r.checkoutSessions.personId, to: r.persons.id }),
+    paymentProviderConfigurationProduct: r.one.paymentProviderConfigurationProducts({
+      from: r.checkoutSessions.paymentProviderConfigurationProductId,
+      to: r.paymentProviderConfigurationProducts.id,
+    }),
+  },
+  subscriptions: {
+    paymentProviderConfigurationProduct: r.one.paymentProviderConfigurationProducts({
+      from: r.subscriptions.paymentProviderConfigurationProductId,
+      to: r.paymentProviderConfigurationProducts.id,
+    }),
+  },
+  paywalls: {
+    project: r.one.projects({ from: r.paywalls.projectId, to: r.projects.id }),
+  },
+  paywallReleases: {
+    paywall: r.one.paywalls({ from: r.paywallReleases.paywallId, to: r.paywalls.id }),
+  },
+  paywallLocations: {
+    project: r.one.projects({ from: r.paywallLocations.projectId, to: r.projects.id }),
+    showings: r.many.paywallLocationShowings(),
+  },
+  paywallLocationShowings: {
+    location: r.one.paywallLocations({
+      from: r.paywallLocationShowings.paywallLocationId,
+      to: r.paywallLocations.id,
+    }),
+    paywall: r.one.paywalls({ from: r.paywallLocationShowings.paywallId, to: r.paywalls.id }),
+    paywallRelease: r.one.paywallReleases({
+      from: r.paywallLocationShowings.paywallReleaseId,
+      to: r.paywallReleases.id,
+    }),
+    project: r.one.projects({ from: r.paywallLocationShowings.projectId, to: r.projects.id }),
+  },
+  paywallDeploys: {
+    files: r.many.paywallDeployFiles(),
+    project: r.one.projects({ from: r.paywallDeploys.projectId, to: r.projects.id }),
+  },
+  paywallDeployFiles: {
+    deploy: r.one.paywallDeploys({ from: r.paywallDeployFiles.deployId, to: r.paywallDeploys.id }),
+  },
+  paywallComponents: {
+    project: r.one.projects({ from: r.paywallComponents.projectId, to: r.projects.id }),
+    versions: r.many.paywallComponentVersions(),
+  },
+  paywallComponentVersions: {
+    component: r.one.paywallComponents({
+      from: r.paywallComponentVersions.componentId,
+      to: r.paywallComponents.id,
+    }),
+    deploy: r.one.paywallDeploys({
+      from: r.paywallComponentVersions.deployId,
+      to: r.paywallDeploys.id,
+    }),
+  },
+  organizationBilling: {
+    organization: r.one.organization({
+      from: r.organizationBilling.organizationId,
+      to: r.organization.id,
+    }),
+  },
+  webhookEndpoints: {
+    project: r.one.projects({ from: r.webhookEndpoints.projectId, to: r.projects.id }),
+    deliveries: r.many.webhookDeliveries(),
+  },
+  webhookDeliveries: {
+    endpoint: r.one.webhookEndpoints({
+      from: r.webhookDeliveries.webhookEndpointId,
+      to: r.webhookEndpoints.id,
+    }),
+    attempts: r.many.webhookDeliveryAttempts(),
+  },
+  webhookDeliveryAttempts: {
+    delivery: r.one.webhookDeliveries({
+      from: r.webhookDeliveryAttempts.webhookDeliveryId,
+      to: r.webhookDeliveries.id,
+    }),
+  },
+  featureFlags: {
+    overrides: r.many.featureFlagOverrides(),
+    targets: r.many.featureFlagTargets(),
+    variants: r.many.featureFlagVariants(),
+  },
+  featureFlagTargets: {
+    featureFlag: r.one.featureFlags({
+      from: r.featureFlagTargets.featureFlagId,
+      to: r.featureFlags.id,
+    }),
+  },
+  featureFlagOverrides: {
+    featureFlag: r.one.featureFlags({
+      from: r.featureFlagOverrides.featureFlagId,
+      to: r.featureFlags.id,
+    }),
+  },
+  featureFlagVariants: {
+    featureFlag: r.one.featureFlags({
+      from: r.featureFlagVariants.featureFlagId,
+      to: r.featureFlags.id,
+    }),
+  },
+  experiments: {
+    project: r.one.projects({ from: r.experiments.projectId, to: r.projects.id }),
+    featureFlag: r.one.featureFlags({
+      from: r.experiments.featureFlagId,
+      to: r.featureFlags.id,
+    }),
+    variants: r.many.experimentVariants(),
+    treatments: r.many.experimentTreatments(),
+  },
+  experimentVariants: {
+    experiment: r.one.experiments({
+      from: r.experimentVariants.experimentId,
+      to: r.experiments.id,
+    }),
+    treatments: r.many.experimentTreatments(),
+  },
+  experimentTreatments: {
+    experiment: r.one.experiments({
+      from: r.experimentTreatments.experimentId,
+      to: r.experiments.id,
+    }),
+    variant: r.one.experimentVariants({
+      from: r.experimentTreatments.variantId,
+      to: r.experimentVariants.id,
+    }),
+  },
+  pushNotificationConfigs: {
+    project: r.one.projects({ from: r.pushNotificationConfigs.projectId, to: r.projects.id }),
+  },
+  pushDeviceTokens: {
+    project: r.one.projects({ from: r.pushDeviceTokens.projectId, to: r.projects.id }),
+    personLinks: r.many.pushPersonDeviceTokens(),
+  },
+  pushPersonDeviceTokens: {
+    person: r.one.persons({ from: r.pushPersonDeviceTokens.personId, to: r.persons.id }),
+    deviceToken: r.one.pushDeviceTokens({
+      from: r.pushPersonDeviceTokens.pushDeviceTokenId,
+      to: r.pushDeviceTokens.id,
+    }),
+  },
+  pushNotificationSends: {
+    project: r.one.projects({ from: r.pushNotificationSends.projectId, to: r.projects.id }),
+    deliveries: r.many.pushNotificationDeliveries(),
+  },
+  pushNotificationDeliveries: {
+    send: r.one.pushNotificationSends({
+      from: r.pushNotificationDeliveries.pushNotificationSendId,
+      to: r.pushNotificationSends.id,
+    }),
+    attempts: r.many.pushNotificationDeliveryAttempts(),
+  },
+  pushNotificationDeliveryAttempts: {
+    delivery: r.one.pushNotificationDeliveries({
+      from: r.pushNotificationDeliveryAttempts.pushNotificationDeliveryId,
+      to: r.pushNotificationDeliveries.id,
+    }),
+  },
+}));
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
new file mode 100644
index 000000000..3c974eaaf
--- /dev/null
+++ b/packages/db/src/schema.ts
@@ -0,0 +1,2864 @@
+import { ProductType, PurchaseType, SubscriptionStatus } from "@voidhash/lib";
+import { sql } from "drizzle-orm";
+import {
+  bigint,
+  boolean,
+  index,
+  integer,
+  jsonb,
+  pgTable,
+  text,
+  timestamp,
+  smallint,
+  uniqueIndex,
+  varchar,
+} from "drizzle-orm/pg-core";
+
+export const user = pgTable(
+  "user",
+  {
+    banExpires: timestamp("ban_expires", { withTimezone: true, precision: 3 }),
+    banReason: text("ban_reason"),
+    banned: boolean("banned").default(false),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    /**
+     * User-uploaded avatar (public file store URL). Kept separate from `image`
+     * because `image` mirrors the WorkOS profile picture and is overwritten on
+     * every authenticated sync; this column is never touched by that sync, so a
+     * custom avatar survives. The session resolves `image = customImageUrl ?? image`.
+     */
+    customImageUrl: text("custom_image_url"),
+    email: varchar("email", { length: 255 }).notNull().unique(),
+    emailVerified: boolean("email_verified").default(false).notNull(),
+    id: varchar("id", { length: 36 }).primaryKey(),
+    image: text("image"),
+    name: varchar("name", { length: 255 }).notNull(),
+    role: text("role"),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => /* @__PURE__ */ new Date())
+      .notNull(),
+    /**
+     * Stable WorkOS user id (`user_xxx`) this row mirrors. Our own `id` is the
+     * primary key; the WorkOS id is only a secondary identifier. Nullable
+     * because rows created before this column existed (and any non-WorkOS user)
+     * carry no WorkOS id until it is backfilled on the next authenticated sync.
+     */
+    workosUserId: varchar("workos_user_id", { length: 64 }),
+  },
+  (table) => [uniqueIndex("user_workos_id_uidx").on(table.workosUserId)],
+);
+
+export const organization = pgTable(
+  "organization",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).notNull(),
+    id: varchar("id", { length: 36 }).primaryKey(),
+    logo: text("logo"),
+    metadata: text("metadata"),
+    name: varchar("name", { length: 255 }).notNull(),
+    slug: varchar("slug", { length: 255 }).notNull().unique(),
+    workosOrganizationId: varchar("workos_organization_id", { length: 64 }).notNull(),
+  },
+  (table) => [
+    uniqueIndex("organization_slug_uidx").on(table.slug),
+    uniqueIndex("organization_workos_id_uidx").on(table.workosOrganizationId),
+  ],
+);
+
+export const member = pgTable(
+  "member",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).notNull(),
+    id: varchar("id", { length: 36 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 36 })
+      .notNull()
+      .references(() => organization.id, { onDelete: "cascade" }),
+    role: varchar("role", { length: 255 }).default("member").notNull(),
+    userId: varchar("user_id", { length: 36 })
+      .notNull()
+      .references(() => user.id, { onDelete: "cascade" }),
+    workosMembershipId: varchar("workos_membership_id", { length: 64 }).notNull(),
+  },
+  (table) => [
+    index("member_organizationId_idx").on(table.organizationId),
+    index("member_userId_idx").on(table.userId),
+    uniqueIndex("member_workos_id_uidx").on(table.workosMembershipId),
+  ],
+);
+
+export const invitation = pgTable(
+  "invitation",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    email: varchar("email", { length: 255 }).notNull(),
+    expiresAt: timestamp("expires_at", { withTimezone: true, precision: 3 }).notNull(),
+    id: varchar("id", { length: 36 }).primaryKey(),
+    inviterId: varchar("inviter_id", { length: 36 })
+      .notNull()
+      .references(() => user.id, { onDelete: "cascade" }),
+    organizationId: varchar("organization_id", { length: 36 })
+      .notNull()
+      .references(() => organization.id, { onDelete: "cascade" }),
+    role: varchar("role", { length: 255 }),
+    status: varchar("status", { length: 255 }).default("pending").notNull(),
+  },
+  (table) => [
+    index("invitation_organizationId_idx").on(table.organizationId),
+    index("invitation_email_idx").on(table.email),
+  ],
+);
+
+export const apikey = pgTable(
+  "apikey",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).notNull(),
+    enabled: boolean("enabled").default(true),
+    expiresAt: timestamp("expires_at", { withTimezone: true, precision: 3 }),
+    id: varchar("id", { length: 36 }).primaryKey(),
+    key: varchar("key", { length: 255 }).notNull(),
+    lastRefillAt: timestamp("last_refill_at", { withTimezone: true, precision: 3 }),
+    lastRequest: timestamp("last_request", { withTimezone: true, precision: 3 }),
+    metadata: text("metadata"),
+    name: text("name"),
+    permissions: text("permissions"),
+    prefix: text("prefix"),
+    rateLimitEnabled: boolean("rate_limit_enabled").default(true),
+    rateLimitMax: integer("rate_limit_max").default(10),
+    rateLimitTimeWindow: integer("rate_limit_time_window").default(86_400_000),
+    refillAmount: integer("refill_amount"),
+    refillInterval: integer("refill_interval"),
+    remaining: integer("remaining"),
+    requestCount: integer("request_count").default(0),
+    end: text("end"),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).notNull(),
+    userId: varchar("user_id", { length: 36 })
+      .notNull()
+      .references(() => user.id, { onDelete: "cascade" }),
+  },
+  (table) => [index("apikey_key_idx").on(table.key), index("apikey_userId_idx").on(table.userId)],
+);
+
+export const projects = pgTable(
+  "project",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    createdByUserId: varchar("created_by", { length: 255 }),
+    id: varchar("id", { length: 255 }).primaryKey(),
+    logo: text("logo"),
+    name: varchar("name", { length: 255 }).notNull(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+    slug: varchar("slug", { length: 255 }).notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    index("organization_id_idx").on(table.organizationId),
+    uniqueIndex("slug_oragnization_id_idx").on(table.slug, table.organizationId),
+  ],
+);
+
+export const captureProjectPolicies = pgTable(
+  "capture_project_policy",
+  {
+    projectId: varchar("project_id", { length: 255 })
+      .primaryKey()
+      .references(() => projects.id, { onDelete: "cascade" }),
+    ingestEnabled: boolean("ingest_enabled").notNull().default(true),
+    requestsPerMinute: integer("requests_per_minute"),
+    eventsPerDay: integer("events_per_day"),
+    forceRoute: varchar("force_route", { length: 32 }),
+    customTopic: varchar("custom_topic", { length: 255 }),
+    skipEnrichment: boolean("skip_enrichment").notNull().default(false),
+    processorEnabled: boolean("processor_enabled").notNull().default(true),
+    processorPersonProcessingEnabled: boolean("processor_person_processing_enabled")
+      .notNull()
+      .default(true),
+    processorSchemaMode: varchar("processor_schema_mode", { length: 16 })
+      .notNull()
+      .default("reject"),
+    processorAllowOverflow: boolean("processor_allow_overflow").notNull().default(true),
+    processorAllowHistorical: boolean("processor_allow_historical").notNull().default(true),
+    processorHistoricalMinAgeHours: integer("processor_historical_min_age_hours")
+      .notNull()
+      .default(48),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [index("capture_project_policy_force_route_idx").on(table.forceRoute)],
+);
+
+export const apiKeys = pgTable(
+  "api_key",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+
+    name: varchar("name", { length: 255 }).notNull(),
+
+    /**
+     * Shows the last few characters of the API key
+     * This allows you to show those few characters in the UI to make it easier for users to identify the API key.
+     */
+    end: varchar("end", { length: 255 }).notNull(),
+    /**
+     * The full API key.
+     */
+    key: varchar("key", { length: 255 }).notNull(),
+    /**
+     * The prefix of the key.
+     */
+    prefix: varchar("prefix", { length: 16 }).notNull(),
+    /**
+     * Whether the API key is public. Public keys are not hashed and are visible to users.
+     */
+    isPublic: boolean("is_public").notNull().default(false),
+    /**
+     * The environment of the API key.
+     */
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [index("api_key_key_idx").on(table.key)],
+);
+
+export const PersonIdentityKind = {
+  Anonymous: 1,
+  Identified: 2,
+} as const;
+
+export type PersonIdentityKindValue = (typeof PersonIdentityKind)[keyof typeof PersonIdentityKind];
+
+export const PersonType = PersonIdentityKind;
+
+export type PersonTypeValue = PersonIdentityKindValue;
+
+export const PersonOrigin = {
+  API: 5,
+  Android: 3,
+  /**
+   * Synthetic anonymous "stand-in" person created from App Store server-side
+   * data (a webhook notification, or reconciliation history) before any real
+   * user identity is known. Distinguishes a provisional stand-in — safe to
+   * merge into the real person on SDK confirmation — from a genuine user.
+   */
+  AppStoreWebhook: 6,
+  Dashboard: 1,
+  /**
+   * Synthetic anonymous "stand-in" person created from Google Play server-side
+   * data (an RTDN notification, or reconciliation) before any real user
+   * identity is known. The Google Play analogue of {@link PersonOrigin.AppStoreWebhook}.
+   */
+  GooglePlayWebhook: 7,
+  IOS: 2,
+  Stripe: 4,
+} as const;
+
+export type PersonOriginValue = (typeof PersonOrigin)[keyof typeof PersonOrigin];
+
+export interface AdditionalPersonAttributes {
+  [key: string]: unknown;
+  platform?: string;
+  sdk?: string;
+  sdkVersion?: string;
+  platformFlavor?: string;
+  platformFlavorVersion?: string;
+  platformVersion?: string;
+  platformDevice?: string;
+  platformBrand?: string;
+  preferredLocales?: string;
+  clientLocale?: string;
+  clientVersion?: string;
+  storefront?: string;
+}
+
+/**
+ * Per-trait last-write-wins metadata for the order-agnostic person projection.
+ * Records, per trait key, the `(ts, id)` of the write that set the current
+ * value plus its `mode`, so a later out-of-order event can decide
+ * deterministically whether it wins: `set` keeps the newest write, `setOnce`
+ * the earliest, and any `set` permanently outranks `setOnce` for that key.
+ */
+export interface PersonTraitMeta {
+  readonly ts: number;
+  readonly id: string;
+  readonly mode: "set" | "setOnce";
+}
+
+export type PersonTraitsMeta = Record<string, PersonTraitMeta>;
+
+export const persons = pgTable(
+  "person",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    name: varchar("name", { length: 255 }),
+    email: varchar("email", { length: 255 }),
+    traits: jsonb("traits").$type<AdditionalPersonAttributes>(),
+
+    /**
+     * Per-trait LWW metadata mirroring {@link traits} (see {@link PersonTraitsMeta}).
+     * Lets out-of-order trait writes resolve deterministically without depending
+     * on processing order.
+     */
+    traitsMeta: jsonb("traits_meta").$type<PersonTraitsMeta>(),
+
+    /**
+     * From where the person was created
+     */
+    origin: smallint("origin").notNull().default(PersonOrigin.Dashboard),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    mergedIntoPersonId: varchar("merged_into_person_id", { length: 255 }),
+    primaryDistinctId: varchar("primary_distinct_id", { length: 255 }),
+    firstSeenAt: timestamp("first_seen_at", { withTimezone: true, precision: 3 }),
+    lastSeenAt: timestamp("last_seen_at", { withTimezone: true, precision: 3 }),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+    deletionReason: varchar("deletion_reason", { length: 64 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [index("person_merged_into_person_id_idx").on(table.mergedIntoPersonId)],
+);
+
+export const personIdentities = pgTable(
+  "person_identity",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 })
+      .notNull()
+      .references(() => projects.id, { onDelete: "cascade" }),
+    distinctId: varchar("distinct_id", { length: 255 }).notNull(),
+    personId: varchar("person_id", { length: 255 })
+      .notNull()
+      .references(() => persons.id, { onDelete: "cascade" }),
+    kind: smallint("kind").notNull().default(PersonIdentityKind.Anonymous),
+    version: integer("version").notNull().default(0),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("person_identity_project_distinct_uidx").on(table.projectId, table.distinctId),
+    index("person_identity_project_person_idx").on(table.projectId, table.personId),
+  ],
+);
+
+export const personPersonlessIdentities = pgTable(
+  "person_personless_identity",
+  {
+    projectId: varchar("project_id", { length: 255 })
+      .notNull()
+      .references(() => projects.id, { onDelete: "cascade" }),
+    distinctId: varchar("distinct_id", { length: 255 }).notNull(),
+    isMerged: boolean("is_merged").notNull().default(false),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("person_personless_identity_project_distinct_uidx").on(
+      table.projectId,
+      table.distinctId,
+    ),
+  ],
+);
+
+/**
+ * Append-only log of identity assertions — the source of truth for the
+ * order-agnostic ("Option B") identity model (`docs/order-agnostic-analytics-events.md`).
+ * Every `$identify` appends one immutable row asserting that two distinct ids
+ * name the same person. The `(distinctIdA, distinctIdB)` pair is stored
+ * canonically sorted (`a <= b`) so an unordered edge has a single
+ * representation, and `dedupKey` (the capture/event id) makes a retried or
+ * redelivered identify insert exactly once. The union-find projection in
+ * `person_identity` / `person.merged_into_person_id` is fully derivable from
+ * this log, so it can be rebuilt from scratch for disaster recovery or a
+ * stitching-rule change.
+ */
+export const identityAssertions = pgTable(
+  "identity_assertion",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 })
+      .notNull()
+      .references(() => projects.id, { onDelete: "cascade" }),
+    distinctIdA: varchar("distinct_id_a", { length: 255 }).notNull(),
+    distinctIdB: varchar("distinct_id_b", { length: 255 }).notNull(),
+    eventTs: timestamp("event_ts", { withTimezone: true, precision: 3 }).notNull(),
+    source: smallint("source").notNull().default(PersonOrigin.API),
+    dedupKey: varchar("dedup_key", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  },
+  (table) => [
+    uniqueIndex("identity_assertion_project_dedup_uidx").on(table.projectId, table.dedupKey),
+    index("identity_assertion_project_a_idx").on(table.projectId, table.distinctIdA),
+    index("identity_assertion_project_b_idx").on(table.projectId, table.distinctIdB),
+  ],
+);
+
+export const PersonIdentityMigrationJobStatus = {
+  Pending: 1,
+  InProgress: 2,
+  Succeeded: 3,
+  Failed: 4,
+  Exhausted: 5,
+} as const;
+
+export type PersonIdentityMigrationJobStatusValue =
+  (typeof PersonIdentityMigrationJobStatus)[keyof typeof PersonIdentityMigrationJobStatus];
+
+export const personIdentityMigrationJobs = pgTable(
+  "person_identity_migration_job",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 })
+      .notNull()
+      .references(() => projects.id, { onDelete: "cascade" }),
+    previousDistinctId: varchar("previous_distinct_id", { length: 255 }).notNull(),
+    distinctId: varchar("distinct_id", { length: 255 }).notNull(),
+    targetPersonId: varchar("target_person_id", { length: 255 })
+      .notNull()
+      .references(() => persons.id, { onDelete: "cascade" }),
+    status: smallint("status").notNull().default(PersonIdentityMigrationJobStatus.Pending),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    lastError: text("last_error"),
+    personEvents: jsonb("person_events").$type<unknown[]>(),
+    mappingEvents: jsonb("mapping_events").$type<unknown[]>(),
+    requestedAt: timestamp("requested_at", { withTimezone: true, precision: 3 }).notNull(),
+    completedAt: timestamp("completed_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    index("person_identity_migration_project_status_created_idx").on(
+      table.projectId,
+      table.status,
+      table.createdAt,
+    ),
+    index("person_identity_migration_project_previous_idx").on(
+      table.projectId,
+      table.previousDistinctId,
+    ),
+    index("person_identity_migration_project_distinct_idx").on(table.projectId, table.distinctId),
+  ],
+);
+
+export const PersonUnlockedPerkStatus = {
+  Active: 1,
+  Expired: 2,
+} as const;
+
+export type PersonUnlockedPerkStatusValue =
+  (typeof PersonUnlockedPerkStatus)[keyof typeof PersonUnlockedPerkStatus];
+
+export const personUnlockedPerks = pgTable(
+  "person_unlocked_perk",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    status: smallint("status").notNull().default(PersonUnlockedPerkStatus.Active),
+    personId: varchar("person_id", { length: 255 }).notNull(),
+    perkId: varchar("perk_id", { length: 255 }).notNull(),
+    // Controls the lifetime of the perk
+    unlockedByPurchaseId: varchar("unlocked_by_purchase_id", {
+      length: 255,
+    }),
+    unlockedBySubscriptionId: varchar("unlocked_by_subscription_id", {
+      length: 255,
+    }),
+    expiresAt: timestamp("expires_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [uniqueIndex("person_id_perk_id_idx").on(table.personId, table.perkId)],
+);
+
+export const personExternalIdentifiers = pgTable(
+  "person_external_identifier",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).references(() => projects.id, {
+      onDelete: "cascade",
+    }),
+    personId: varchar("person_id", { length: 255 })
+      .notNull()
+      .references(() => persons.id, { onDelete: "cascade" }),
+    serviceId: varchar("service_id", { length: 255 }).notNull(), // stripe, appstore, slack etc
+    isDefault: boolean("is_default").notNull(),
+    identifier: varchar("identifier", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("person_external_identifier_project_service_identifier_uidx").on(
+      table.projectId,
+      table.serviceId,
+      table.identifier,
+    ),
+  ],
+);
+export const PersonDeletionRequestStatus = {
+  Queued: 1,
+  InProgress: 2,
+  Completed: 3,
+  Failed: 4,
+} as const;
+
+export type PersonDeletionRequestStatusValue =
+  (typeof PersonDeletionRequestStatus)[keyof typeof PersonDeletionRequestStatus];
+
+export const personDeletionRequests = pgTable(
+  "person_deletion_request",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    personId: varchar("person_id", { length: 255 })
+      .notNull()
+      .references(() => persons.id, { onDelete: "cascade" }),
+    projectId: varchar("project_id", { length: 255 })
+      .notNull()
+      .references(() => projects.id, { onDelete: "cascade" }),
+    requestedBy: varchar("requested_by", { length: 255 }).notNull(),
+    reason: varchar("reason", { length: 64 }).notNull(),
+    status: smallint("status").notNull().default(PersonDeletionRequestStatus.Queued),
+    requestedAt: timestamp("requested_at", { withTimezone: true, precision: 3 })
+      .notNull()
+      .defaultNow(),
+    completedAt: timestamp("completed_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    index("person_deletion_request_person_idx").on(table.personId),
+    index("person_deletion_request_project_status_idx").on(table.projectId, table.status),
+  ],
+);
+
+export const paymentProviderConfigurations = pgTable(
+  "payment_provider_configuration",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    providerId: varchar("provider_id", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    /** Key generated based on configuration. Used as an external identifier for the payment provider configuration. For example, for App Store, it is the bundleId. */
+    paymentProviderKey: varchar("payment_provider_key", {
+      length: 255,
+    }).notNull(),
+    enabled: boolean("enabled").notNull().default(false),
+    name: varchar("name", { length: 255 }).notNull().default("Unknown"),
+    configuration: jsonb("configuration").$type<object>(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+    activeProviderId: varchar("active_provider_id", { length: 255 }).generatedAlwaysAs(
+      sql`(case when deleted_at is null then provider_id else null end)`,
+    ),
+  },
+  (table) => [
+    index("project_id_idx").on(table.projectId),
+    index("provider_id_idx").on(table.providerId),
+    uniqueIndex("payment_provider_configuration_project_active_provider_uidx").on(
+      table.projectId,
+      table.activeProviderId,
+    ),
+  ],
+);
+
+// Perk
+export const perks = pgTable(
+  "perk",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    id: varchar("id", { length: 255 }).primaryKey(),
+    name: varchar("name", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    slug: varchar("slug", { length: 255 }).notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [uniqueIndex("perk_slug_project_id_idx").on(table.slug, table.projectId)],
+);
+
+export const products = pgTable(
+  "product",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    id: varchar("id", { length: 255 }).primaryKey(),
+    name: varchar("name", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    slug: varchar("slug", { length: 255 }).notNull(),
+    type: smallint("type").notNull().default(ProductType.Subscription),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [uniqueIndex("product_slug_project_id_idx").on(table.slug, table.projectId)],
+);
+
+export const productPerks = pgTable(
+  "product_perk",
+  {
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    id: varchar("id", { length: 255 }).primaryKey(),
+    perkId: varchar("perk_id", { length: 255 }).notNull(),
+    productId: varchar("product_id", { length: 255 }).notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [uniqueIndex("product_id_perk_id_idx").on(table.productId, table.perkId)],
+);
+
+export const paymentProviderConfigurationProducts = pgTable(
+  "payment_provider_configuration_product",
+  {
+    configuration: jsonb("configuration").$type<object>(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    id: varchar("id", { length: 255 }).primaryKey(),
+    isActive: boolean("is_active").notNull().default(true),
+    paymentProviderConfigurationId: varchar("payment_provider_configuration_id", {
+      length: 255,
+    }).notNull(),
+    productId: varchar("product_id", { length: 255 }).notNull(),
+    providerProductKey: varchar("provider_product_key", {
+      length: 255,
+    }).notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("product_provider_configuration_ext_pk_idx").on(
+      table.paymentProviderConfigurationId,
+      table.providerProductKey,
+      table.productId,
+    ),
+    index("payment_provider_configuration_id_idx").on(table.paymentProviderConfigurationId),
+  ],
+);
+
+export const CheckoutSessionStatus = {
+  Cancelled: 5,
+  Error: 4,
+  Pending: 1,
+  Processing: 2,
+  Success: 3,
+};
+
+export const checkoutSessions = pgTable("checkout_session", {
+  createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  personId: varchar("person_id", { length: 255 }).notNull(),
+  errorCallbackUrl: varchar("error_callback_url", { length: 255 }).notNull().default("LEGACY"),
+  id: varchar("id", { length: 255 }).primaryKey(),
+  paymentProviderConfigurationProductId: varchar("payment_provider_configuration_product_id", {
+    length: 255,
+  }).notNull(),
+  status: smallint("status").notNull().default(CheckoutSessionStatus.Pending),
+  successCallbackUrl: varchar("success_callback_url", {
+    length: 255,
+  })
+    .notNull()
+    .default("LEGACY"),
+  updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+    () => new Date(),
+  ),
+});
+
+// App Store
+export const ProviderEnvironment = {
+  Production: 1,
+  Sandbox: 2,
+} as const;
+
+export type ProviderEnvironmentValue =
+  (typeof ProviderEnvironment)[keyof typeof ProviderEnvironment];
+
+export const purchases = pgTable(
+  "purchase",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    personId: varchar("person_id", { length: 255 }).notNull(),
+    providerKey: varchar("provider_key", { length: 255 }).notNull(),
+    type: smallint("type").notNull().default(PurchaseType.OneTime),
+    paymentProviderConfigurationProductId: varchar("payment_provider_configuration_product_id", {
+      length: 255,
+    }).notNull(),
+
+    /**
+     * The environment the subscription was purchased in
+     */
+    providerEnvironment: smallint("provider_environment")
+      .notNull()
+      .default(ProviderEnvironment.Production),
+
+    /** Set when the provider refunds the purchase entitlement. */
+    refundedAt: timestamp("refunded_at", { withTimezone: true, precision: 3 }),
+    refundReason: varchar("refund_reason", { length: 100 }),
+    /** Set when the provider revokes the purchase entitlement without refunding it. */
+    revokedAt: timestamp("revoked_at", { withTimezone: true, precision: 3 }),
+    revocationReason: varchar("revocation_reason", { length: 100 }),
+    /**
+     * Watermark for out-of-order safety on refund / revoke updates. Mirrors
+     * `transaction.lastEventOccurredAt` for one-time purchase entitlement state.
+     */
+    lastEventOccurredAt: timestamp("last_event_occurred_at", { withTimezone: true, precision: 3 }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("provider_key_idx").on(table.providerKey),
+    index("purchase_person_active_idx").on(table.personId, table.refundedAt, table.revokedAt),
+  ],
+);
+
+export const subscriptions = pgTable(
+  "subscription",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    personId: varchar("person_id", { length: 255 }).notNull(),
+    status: smallint("status").notNull().default(SubscriptionStatus.Active),
+    initialTransactionId: varchar("initial_transaction_id", {
+      length: 255,
+    }).notNull(),
+    latestTransactionId: varchar("latest_transaction_id", {
+      length: 255,
+    }).notNull(),
+    /**
+     * - This is the 'original_transaction_id' for Apple, or 'subscription_id' for Google
+     */
+    storeSubscriptionId: varchar("store_subscription_id", {
+      length: 255,
+    }).notNull(),
+
+    paymentProviderConfigurationProductId: varchar("payment_provider_configuration_product_id", {
+      length: 255,
+    }).notNull(),
+
+    /**
+     * The environment the subscription was purchased in
+     */
+    providerEnvironment: smallint("provider_environment")
+      .notNull()
+      .default(ProviderEnvironment.Production),
+
+    isTrial: boolean("is_trial").notNull().default(false),
+
+    /**
+     * The date the subscription started
+     */
+    startsAt: timestamp("starts_at", { withTimezone: true, precision: 3 }).notNull(),
+    /**
+     * The date the subscription expires. Null if the subscription is not set to expire or if it is a one-time purchase
+     */
+    expiresAt: timestamp("expires_at", { withTimezone: true, precision: 3 }),
+    /**
+     * The date the subscription was purchased
+     */
+    purchasedAt: timestamp("purchased_at", { withTimezone: true, precision: 3 }).notNull(),
+    /**
+     * Whether the subscription is set to cancel at the end of the current period
+     */
+    cancelAtPeriodEnd: boolean("cancel_at_period_end").notNull().default(false),
+    /**
+     * The date the subscription was canceled
+     */
+    canceledAt: timestamp("canceled_at", { withTimezone: true, precision: 3 }),
+
+    cancellationReason: varchar("cancellation_reason", { length: 255 }),
+
+    /**
+     * Watermark for out-of-order safety. State-mutating UPDATEs are gated on
+     * `WHERE last_event_occurred_at IS NULL OR last_event_occurred_at <=
+     * :occurredAt`; a stale late-arriving event is rejected at the projection
+     * level (the ledger row is still written so analytics replay captures the
+     * historical event).
+     */
+    lastEventOccurredAt: timestamp("last_event_occurred_at", { withTimezone: true, precision: 3 }),
+
+    /** `DID_FAIL_TO_RENEW`: subscription entered the billing-retry loop. */
+    billingRetryAt: timestamp("billing_retry_at", { withTimezone: true, precision: 3 }),
+    /**
+     * `DID_FAIL_TO_RENEW` subtype `GRACE_PERIOD`: deadline by which billing
+     * must recover before the subscription transitions to `Canceled` via
+     * `GRACE_PERIOD_EXPIRED`.
+     */
+    gracePeriodExpiresAt: timestamp("grace_period_expires_at", {
+      withTimezone: true,
+      precision: 3,
+    }),
+    /** `RENEWAL_EXTENDED`: latest extension target for `expiresAt`. */
+    extendedTo: timestamp("extended_to", { withTimezone: true, precision: 3 }),
+    /** `PRICE_INCREASE`: amount that will take effect on next renewal. */
+    pendingPriceAmount: integer("pending_price_amount"),
+    pendingPriceCurrency: varchar("pending_price_currency", { length: 3 }),
+    pendingPriceEffectiveAt: timestamp("pending_price_effective_at", {
+      withTimezone: true,
+      precision: 3,
+    }),
+    /**
+     * `DID_CHANGE_RENEWAL_PREF`: target product mapping. Recorded as intent
+     * only — actual product swap happens when `renewSubscription` fires for
+     * the new product (Apple's preference change takes effect on the next
+     * billing cycle), at which point this column is cleared atomically.
+     */
+    pendingProductChangeId: varchar("pending_product_change_id", { length: 255 }),
+    /** `OFFER_REDEEMED`: most recently redeemed offer identifier. */
+    redeemedOfferId: varchar("redeemed_offer_id", { length: 255 }),
+    redeemedOfferAt: timestamp("redeemed_offer_at", { withTimezone: true, precision: 3 }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("subscription_store_subscription_unique_idx").on(
+      table.paymentProviderConfigurationProductId,
+      table.storeSubscriptionId,
+    ),
+    index("status_starts_at_idx").on(table.status, table.startsAt),
+    index("canceled_at_idx").on(table.canceledAt),
+    index("person_id_idx").on(table.personId),
+  ],
+);
+
+export const transactions = pgTable(
+  "transaction",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    personId: varchar("person_id", { length: 255 }).notNull(),
+    /**
+     * Legacy single-amount column. Kept temporarily for read-side compatibility
+     * while ClickHouse views migrate to {@link transactions.grossAmount}.
+     * New writes mirror `grossAmount` into this column; remove once readers
+     * have cut over.
+     */
+    amount: integer("amount").notNull(),
+    currency: varchar("currency", { length: 3 }).notNull(),
+    /**
+     * Legacy USD-converted amount. Mirrors {@link transactions.grossAmountUsd}
+     * during the read-side migration window; remove with `amount`.
+     */
+    amountUsd: integer("amount_usd"),
+    /**
+     * Apple-style ISO 3166 alpha-3 storefront country (e.g., `USA`, `DEU`).
+     * Used both for analytics breakdowns and to look up the per-country VAT
+     * rate that {@link transactions.taxAmount} was estimated from.
+     */
+    storefront: varchar("storefront", { length: 3 }),
+    /**
+     * Gross amount paid by the customer in the original currency's minor
+     * unit (e.g., cents for USD). Includes any VAT / sales tax baked into
+     * the price by the provider where the provider is merchant of record.
+     */
+    grossAmount: integer("gross_amount").notNull().default(0),
+    /**
+     * Estimated tax included in {@link transactions.grossAmount}, in
+     * original-currency minor units. Estimated from
+     * `storefront`-based VAT tables — Apple does not break out tax in
+     * the JWS payload. Authoritative tax is reconciled later from monthly
+     * App Store Connect financial reports.
+     */
+    taxAmount: integer("tax_amount").notNull().default(0),
+    /**
+     * Store commission deducted from the gross amount in original-currency
+     * minor units (e.g., Apple's 30% standard or 15% Small Business Program
+     * rate applied at transaction time).
+     */
+    storeCommissionAmount: integer("store_commission_amount").notNull().default(0),
+    /**
+     * `grossAmount - storeCommissionAmount`, in original-currency minor
+     * units. Persisted (rather than re-derived at read time) so analytics
+     * aggregations can sum the column directly.
+     */
+    proceedsAmount: integer("proceeds_amount").notNull().default(0),
+    /**
+     * `grossAmount - storeCommissionAmount - taxAmount`, in original-
+     * currency minor units. Same persistence rationale as `proceedsAmount`.
+     */
+    proceedsAfterTaxAmount: integer("proceeds_after_tax_amount").notNull().default(0),
+    /** Gross amount converted to USD cents. */
+    grossAmountUsd: integer("gross_amount_usd"),
+    /** Tax amount converted to USD cents. */
+    taxAmountUsd: integer("tax_amount_usd"),
+    /** Store commission converted to USD cents. */
+    storeCommissionAmountUsd: integer("store_commission_amount_usd"),
+    /** Proceeds (after commission) converted to USD cents. */
+    proceedsAmountUsd: integer("proceeds_amount_usd"),
+    /** Proceeds after commission + tax, converted to USD cents. */
+    proceedsAfterTaxAmountUsd: integer("proceeds_after_tax_amount_usd"),
+    /**
+     * Exchange rate used to populate the USD columns.
+     * Stored as rate * 1,000,000 for precision.
+     * e.g., 1.25 USD/EUR stored as 1250000.
+     */
+    exchangeRate: integer("exchange_rate"),
+
+    paymentProviderConfigurationProductId: varchar("payment_provider_product_configuration_id", {
+      length: 255,
+    }).notNull(),
+    providerEnvironment: smallint("provider_environment")
+      .notNull()
+      .default(ProviderEnvironment.Production),
+    storeTransactionId: varchar("store_transaction_id", {
+      length: 255,
+    }),
+    occurredAt: timestamp("occurred_at", { withTimezone: true, precision: 3 }).notNull(),
+    /**
+     * Set when the provider refunds this transaction. Apple's REFUND
+     * notification mutates the existing transaction record in place rather than
+     * issuing a new transactionId, so the refund state lives on this row.
+     */
+    refundedAt: timestamp("refunded_at", { withTimezone: true, precision: 3 }),
+    refundReason: varchar("refund_reason", { length: 100 }),
+    /**
+     * Set when the provider revokes the entitlement attached to this
+     * transaction (e.g. Apple's REVOKE notification for Family Sharing).
+     * Same in-place mutation semantics as `refundedAt`.
+     */
+    revokedAt: timestamp("revoked_at", { withTimezone: true, precision: 3 }),
+    revocationReason: varchar("revocation_reason", { length: 100 }),
+    /**
+     * Watermark for out-of-order safety on refund / revoke updates. Same
+     * semantics as {@link subscriptions.lastEventOccurredAt}: a UPDATE that
+     * carries an older `occurredAt` than the column value is rejected at the
+     * projection level (the ledger row is still written for replay).
+     */
+    lastEventOccurredAt: timestamp("last_event_occurred_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("transaction_provider_tx_unique_idx").on(
+      table.paymentProviderConfigurationProductId,
+      table.storeTransactionId,
+    ),
+    index("occurred_at_idx").on(table.occurredAt),
+  ],
+);
+
+/**
+ * Cache of foreign-exchange rates from arbitrary ISO 4217 currencies to
+ * USD, shared across the fleet so analytics ingestion never hits the
+ * upstream rates provider on the hot path.
+ *
+ * Written only by {@link FxRateService}'s daily sync workflow and its
+ * one-shot startup seed — never on the read path. Rate is stored as
+ * `rate * 1_000_000` to preserve six decimal places in an integer column
+ * (matches the {@link transactions.exchangeRate} convention).
+ */
+export const fxRates = pgTable(
+  "fx_rate",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    /** ISO 4217 currency code converted FROM (e.g., `"EUR"`). */
+    currency: varchar("currency", { length: 3 }).notNull(),
+    /**
+     * The date the rate applies to. Per-day granularity is enough for revenue
+     * dashboards; intraday volatility is irrelevant.
+     */
+    asOfDate: timestamp("as_of_date", { withTimezone: true, precision: 3 }).notNull(),
+    /** Rate × 1_000_000 from `currency` to USD. */
+    usdRate: integer("usd_rate").notNull(),
+    /** Identifier of the rate provider, e.g., `"openexchangerates"` or `"stub"`. */
+    source: varchar("source", { length: 64 }).notNull(),
+    fetchedAt: timestamp("fetched_at", { withTimezone: true, precision: 3 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).notNull().defaultNow(),
+  },
+  (table) => [uniqueIndex("fx_rate_currency_date_idx").on(table.currency, table.asOfDate)],
+);
+
+/**
+ * Worker / dispatch state for {@link purchaseLedger}. The polling worker
+ * advances rows through `Pending → InProgress → Published` (or `DeadLetter`
+ * after exhausting retries). `InProgress` rows older than the stale-claim
+ * cutoff are swept back to `Pending` at the start of each poll.
+ *
+ * This status describes analytics dispatch only — the ledger row itself is
+ * append-only and is never deleted.
+ */
+export const PurchaseLedgerStatus = {
+  Pending: 1,
+  InProgress: 2,
+  Published: 3,
+  DeadLetter: 4,
+} as const;
+
+export type PurchaseLedgerStatusValue =
+  (typeof PurchaseLedgerStatus)[keyof typeof PurchaseLedgerStatus];
+
+/**
+ * Append-only ledger of normalized purchase events. A row is written inside
+ * the same DB transaction as the operational purchase writes (transaction /
+ * subscription / purchase rows), so the operational state and the ledger
+ * commit-or-rollback atomically. The UNIQUE on `idempotencyKey` is the
+ * service-level cross-source dedup gate — duplicate inbound deliveries of
+ * the same logical store event (webhook + SDK + reconciliation) collide
+ * here and short-circuit before any operational write.
+ *
+ * The ledger has two consumers:
+ *  - Analytics dispatch: a separate polling worker drains the table by
+ *    re-dispatching each row's `eventsPayload` onto the shared analytics-ingest
+ *    queue (`AnalyticsDispatchService.dispatchTrusted`).
+ *  - Replay-from-source: `rawProviderPayload` archives the upstream signed /
+ *    decoded provider payload alongside the normalized fact, so if our
+ *    normalization has a bug we can re-derive the analytics without re-
+ *    fetching from the provider.
+ */
+export const purchaseLedger = pgTable(
+  "purchase_ledger",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    idempotencyKey: varchar("idempotency_key", { length: 512 }).notNull(),
+    providerId: varchar("provider_id", { length: 50 }).notNull(),
+    providerEventType: varchar("provider_event_type", { length: 100 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+    personId: varchar("person_id", { length: 255 }).notNull(),
+    /**
+     * Serialized `PurchaseProcessingResult` snapshot. Replayed verbatim to the
+     * caller when a duplicate idempotency key arrives, so the second caller
+     * sees the same transactionId/subscriptionId/purchaseId/analyticsEventIds
+     * the first caller did.
+     */
+    resultPayload: jsonb("result_payload").$type<object>().notNull(),
+    /**
+     * Serialized `ReadonlyArray<InternalAnalyticsEvent>` the worker
+     * re-dispatches onto the shared analytics-ingest queue. Stored as JSON to
+     * preserve the discriminated-union shape end-to-end.
+     */
+    eventsPayload: jsonb("events_payload").$type<ReadonlyArray<object>>().notNull(),
+    /**
+     * Raw upstream payload (decoded JWS for App Store, raw webhook body for
+     * other providers). Optional because some legacy or synthetic events
+     * arrive without one. Enables replay-from-source if normalization needs
+     * to be re-run after a bug fix.
+     */
+    rawProviderPayload: jsonb("raw_provider_payload").$type<unknown>(),
+    /**
+     * Origin of the inbound event: `"sdk" | "webhook" | "reconciliation"`.
+     * Metadata only — logic never branches on this (the idempotency key is
+     * designed to collapse the same logical event regardless of source).
+     */
+    source: varchar("source", { length: 32 }),
+    status: smallint("status").notNull().default(PurchaseLedgerStatus.Pending),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    nextAttemptAt: timestamp("next_attempt_at", { withTimezone: true, precision: 3 }),
+    lastError: varchar("last_error", { length: 1000 }),
+    claimedBy: varchar("claimed_by", { length: 64 }),
+    claimedAt: timestamp("claimed_at", { withTimezone: true, precision: 3 }),
+    publishedAt: timestamp("published_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("purchase_ledger_idempotency_key_idx").on(table.idempotencyKey),
+    index("purchase_ledger_poll_idx").on(table.status, table.nextAttemptAt),
+    index("purchase_ledger_provider_idx").on(table.providerId, table.providerEventType),
+  ],
+);
+
+export const AnalyticsIngestDlqReplayStatus = {
+  Pending: "pending",
+  Requeued: "requeued",
+  Failed: "failed",
+} as const;
+
+export type AnalyticsIngestDlqReplayStatusValue =
+  (typeof AnalyticsIngestDlqReplayStatus)[keyof typeof AnalyticsIngestDlqReplayStatus];
+
+export const analyticsIngestDlq = pgTable(
+  "analytics_ingest_dlq",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    captureId: varchar("capture_id", { length: 255 }),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    distinctId: varchar("distinct_id", { length: 512 }),
+    routeClass: varchar("route_class", { length: 32 }).notNull(),
+    failureClass: varchar("failure_class", { length: 64 }).notNull(),
+    failureMessage: varchar("failure_message", { length: 1000 }).notNull(),
+    payloadJson: jsonb("payload_json").$type<unknown>().notNull(),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    sourceShard: varchar("source_shard", { length: 255 }).notNull(),
+    sourceSequence: bigint("source_sequence", { mode: "number" }).notNull(),
+    replayedAt: timestamp("replayed_at", { withTimezone: true, precision: 3 }),
+    replayStatus: varchar("replay_status", { length: 32 })
+      .notNull()
+      .default(AnalyticsIngestDlqReplayStatus.Pending),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("analytics_ingest_dlq_capture_id_idx").on(table.captureId),
+    index("analytics_ingest_dlq_project_failure_idx").on(table.projectId, table.failureClass),
+    index("analytics_ingest_dlq_replay_idx").on(table.replayStatus, table.createdAt),
+  ],
+);
+
+/**
+ * Per-`notificationUUID` ledger of inbound provider notifications. Serves
+ * three purposes:
+ *  - Webhook-layer dedup via the UNIQUE on `(configuration, notificationUUID)`
+ *    — a duplicate webhook delivery fails the INSERT and the handler treats
+ *    it as already-processed.
+ *  - Park-and-replay for notifications that arrived before the customer
+ *    mapped the product (`result = "parked_pending_product_mapping"` with
+ *    `parkedUntilProviderProductKey` + `parkedRawPayload` set). When a new
+ *    `payment_provider_configuration_product` row is inserted, parked rows
+ *    for that key are replayed through the normal record path.
+ *  - Park-and-replay for notifications that arrived before the SDK confirmed
+ *    the transaction series (`result = "parked_pending_sdk_confirmation"`
+ *    with `parkedUntilOriginalTransactionId` + `parkedRawPayload` set).
+ *    Triggered by the per-tenant
+ *    `trackNewPurchasesFromAppleServerNotifications = false` mode. When the
+ *    SDK eventually confirms a transaction in the series, parked rows are
+ *    replayed through the normal record path. Aged after 90 days via a
+ *    scheduled expiry workflow (`result = "expired"`).
+ */
+export const paymentProviderNotificationProcessed = pgTable(
+  "payment_provider_notification_processed",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    paymentProviderConfigurationId: varchar("payment_provider_configuration_id", {
+      length: 255,
+    }).notNull(),
+    providerId: varchar("provider_id", { length: 50 }).notNull(),
+    notificationUuid: varchar("notification_uuid", { length: 255 }).notNull(),
+    notificationType: varchar("notification_type", { length: 64 }).notNull(),
+    notificationSubtype: varchar("notification_subtype", { length: 64 }),
+    source: varchar("source", { length: 32 }).notNull(),
+    processedAt: timestamp("processed_at", { withTimezone: true, precision: 3 })
+      .notNull()
+      .defaultNow(),
+    /**
+     * Outcome string. Conventional values:
+     *  - `"applied"`        – mapped to a record method and processed.
+     *  - `"ignored"`        – ack-without-handling (e.g. TEST, unmapped subtype).
+     *  - `"parked_pending_product_mapping"` – product not mapped yet; replay
+     *                         when the mapping appears.
+     *  - `"parked_pending_sdk_confirmation"` – SDK has not yet confirmed the
+     *                         transaction series; replay when SDK arrives.
+     *  - `"expired"`        – parked row aged past the 90-day TTL.
+     *  - `"failed"`         – decode / signature failure that should not retry.
+     */
+    result: varchar("result", { length: 32 }).notNull(),
+    resultNote: varchar("result_note", { length: 500 }),
+    parkedUntilProviderProductKey: varchar("parked_until_provider_product_key", { length: 255 }),
+    parkedUntilOriginalTransactionId: varchar("parked_until_original_transaction_id", {
+      length: 255,
+    }),
+    parkedRawPayload: jsonb("parked_raw_payload").$type<unknown>(),
+  },
+  (table) => [
+    uniqueIndex("notif_uuid_uniq").on(table.paymentProviderConfigurationId, table.notificationUuid),
+    index("notif_processed_at_idx").on(table.processedAt),
+    index("notif_parked_lookup_idx").on(
+      table.paymentProviderConfigurationId,
+      table.result,
+      table.parkedUntilProviderProductKey,
+    ),
+    index("notif_parked_sdk_idx").on(
+      table.paymentProviderConfigurationId,
+      table.result,
+      table.parkedUntilOriginalTransactionId,
+    ),
+  ],
+);
+
+export const InAppOwnershipType = {
+  FamilyShared: 1,
+  Purchased: 2,
+} as const;
+
+export type InAppOwnershipTypeValue = (typeof InAppOwnershipType)[keyof typeof InAppOwnershipType];
+
+export const OfferDiscountType = {
+  FreeTrial: 1,
+  PayAsYouGo: 2,
+  PayUpFront: 3,
+} as const;
+
+export type OfferDiscountTypeValue = (typeof OfferDiscountType)[keyof typeof OfferDiscountType];
+
+export const OfferType = {
+  IntroductoryOffer: 1,
+  OfferWithSubscriptionOfferCode: 3,
+  PromotionalOffer: 2,
+  WinBackOffer: 4,
+} as const;
+
+export type OfferTypeValue = (typeof OfferType)[keyof typeof OfferType];
+
+export const RevocationReason = {
+  OtherReason: 1,
+  PerceivedIssue: 2,
+} as const;
+
+export type RevocationReasonValue = (typeof RevocationReason)[keyof typeof RevocationReason];
+
+export const TransactionReason = {
+  Purchase: 1,
+  Renewal: 2,
+} as const;
+
+export type TransactionReasonValue = (typeof TransactionReason)[keyof typeof TransactionReason];
+
+export const TransactionType = {
+  AutoRenewableSubscription: 1,
+  Consumable: 3,
+  NonConsumable: 2,
+  NonRenewingSubscription: 4,
+} as const;
+
+export type TransactionTypeValue = (typeof TransactionType)[keyof typeof TransactionType];
+
+export const appStoreTransactions = pgTable(
+  "app_store_transaction",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    transactionId: varchar("transaction_id", { length: 255 }).notNull(),
+    currency: varchar("currency", { length: 3 }).notNull(),
+    // Equivalent to providerEnvironment
+    environment: smallint("environment").notNull().default(ProviderEnvironment.Production),
+    expireDate: timestamp("expire_date", { withTimezone: true, precision: 3 }),
+    inAppOwnershipType: smallint("in_app_ownership_type")
+      .notNull()
+      .default(InAppOwnershipType.Purchased),
+    isUpgraded: boolean("is_upgraded"),
+    offerDiscountType: smallint("offer_discount_type")
+      .notNull()
+      .default(OfferDiscountType.PayAsYouGo),
+    offerIdentifier: varchar("offer_identifier", { length: 255 }),
+    offerPeriod: varchar("offer_period", { length: 255 }), //ISO 8601 duration string
+    offerType: smallint("offer_type").notNull().default(OfferType.IntroductoryOffer),
+    originalPurchaseDate: timestamp("original_purchase_date", {
+      withTimezone: true,
+      precision: 3,
+    }).notNull(),
+    originalTransactionId: varchar("original_transaction_id", {
+      length: 255,
+    }).notNull(),
+    /**
+     * An integer value that represents the price multiplied by 1000 of the in-app purchase or subscription offer you configured in App Store Connect and that the system records at the time of the purchase.
+     */
+    price: integer("price").notNull(),
+    productId: varchar("product_id", { length: 255 }).notNull(),
+    purchaseDate: timestamp("purchase_date", { withTimezone: true, precision: 3 }).notNull(),
+    quantity: integer("quantity").notNull(),
+    revocationDate: timestamp("revocation_date", { withTimezone: true, precision: 3 }),
+    revocationReason: smallint("revocation_reason").notNull().default(RevocationReason.OtherReason),
+    /**
+     * The three-letter code that represents the country or region associated with the App Store storefront for the purchase.
+     */
+    storefront: varchar("storefront", { length: 3 }).notNull(),
+    storefrontId: varchar("storefront_id", { length: 255 }).notNull(),
+    subscriptionGroupIdentifier: varchar("subscription_group_identifier", {
+      length: 255,
+    }),
+    transactionReason: smallint("transaction_reason").notNull().default(TransactionReason.Purchase),
+    type: smallint("type").notNull().default(TransactionType.AutoRenewableSubscription),
+    webOrderLineItemId: varchar("web_order_line_item_id", {
+      length: 255,
+    }),
+  },
+  (table) => [uniqueIndex("transaction_id_idx").on(table.transactionId)],
+);
+
+// Design file
+// biome-ignore lint/suspicious/noEmptyInterface: ok
+export interface DesignFileMetadata {}
+
+// Paywall source enum — how the paywall is authored.
+// 1 = visual editor, 2 = code (CLI deploy, see docs/specs/paywall-deploy-contract.md)
+export const PaywallSource = {
+  editor: 1,
+  code: 2,
+} as const;
+
+export type PaywallSourceValue = (typeof PaywallSource)[keyof typeof PaywallSource];
+
+// Paywalls
+export const paywalls = pgTable(
+  "paywall",
+  {
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    designFileMetadata: jsonb("design_file_metadata").$type<DesignFileMetadata>(),
+    id: varchar("id", { length: 255 }).primaryKey(),
+    name: varchar("name", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    slug: varchar("slug", { length: 255 }).notNull(),
+    source: smallint("source").notNull().default(PaywallSource.editor),
+    // Public URL of the most recently rendered paywall thumbnail (null until the
+    // first idle render lands). `thumbnailSeq` is the mimic document `seq` that
+    // thumbnail was rendered from — the monotonic guard that keeps a late idle
+    // render from overwriting a newer one (see PaywallThumbnailService).
+    thumbnailUrl: text("thumbnail_url"),
+    thumbnailSeq: bigint("thumbnail_seq", { mode: "number" }),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [uniqueIndex("paywall_slug_project_id_idx").on(table.slug, table.projectId)],
+);
+
+/**
+ * Status of a cached component compile: `ready` carries a validated manifest,
+ * `error` carries diagnostics (and a null manifest).
+ */
+export const PaywallComponentManifestStatus = {
+  ready: "ready",
+  error: "error",
+} as const;
+
+export type PaywallComponentManifestStatusValue =
+  (typeof PaywallComponentManifestStatus)[keyof typeof PaywallComponentManifestStatus];
+
+/**
+ * One cached compile diagnostic. Structurally mirrors the browser
+ * `CompileDiagnostic` (message + optional phase/line/column), but typed loosely
+ * here because `packages/db` must not depend on the renderer/compile packages.
+ */
+export interface PaywallComponentManifestDiagnostic {
+  readonly message: string;
+  readonly phase?: string;
+  readonly line?: number;
+  readonly column?: number;
+}
+
+/**
+ * Content-addressed cache of extracted component manifests, keyed by the
+ * `sourceHash` of a code-component's TSX source (the SAME `hashSource` the
+ * browser compile pipeline uses — see `@voidhash/paywall-workspace`).
+ *
+ * There is deliberately **no org/project scoping**: a manifest is a pure
+ * derivation of source *content*, so identical source anywhere in the fleet
+ * resolves to the same row. Rows are safe to share and safe to evict — a cache
+ * miss simply degrades the server-side view of a paywall document (the referenced
+ * component's props/actions are omitted), never leaks data, and is re-populated
+ * the next time that source compiles in a designer session.
+ *
+ * Integrity comes from two properties, not from scoping. Rows are
+ * **content-addressed** (the key is a SHA-256 of the source, so a row's value is
+ * a function of its key) and writes are **first-write-wins**: a `ready` manifest
+ * is immutable — a later writer cannot replace it (see
+ * `ComponentManifestCacheService.record`'s conditional upsert; only an `error`
+ * row may be upgraded). The `manifest` JSONB is validated against the core
+ * `ComponentManifest` schema at write time; readers may still re-validate.
+ * Server-verified compiles (Increment 3) will further harden this by removing
+ * the reliance on client-uploaded manifests entirely.
+ */
+export const paywallComponentManifests = pgTable("paywall_component_manifest", {
+  sourceHash: varchar("source_hash", { length: 64 }).primaryKey(),
+  status: varchar("status", { length: 16 }).notNull().$type<PaywallComponentManifestStatusValue>(),
+  manifest: jsonb("manifest").$type<unknown>(),
+  diagnostics: jsonb("diagnostics").$type<ReadonlyArray<PaywallComponentManifestDiagnostic>>(),
+  createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+  updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+    .defaultNow()
+    .notNull()
+    .$onUpdate(() => new Date()),
+});
+
+// Release Status enum
+export const ReleaseStatus = {
+  draft: 1,
+  released: 2,
+} as const;
+
+export type ReleaseStatusValue = (typeof ReleaseStatus)[keyof typeof ReleaseStatus];
+
+/**
+ * Runtime configuration stamped on code-deployed paywall releases and
+ * forwarded verbatim through SDK resolve (deploy contract §6). Null for
+ * visual-editor releases.
+ */
+export interface PaywallReleaseRuntimeConfig {
+  productSlugs: string[];
+  variables: Record<string, string | number | boolean>;
+}
+
+// Paywall Releases (stores S3 references to published designs)
+export const paywallReleases = pgTable(
+  "paywall_release",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    paywallId: varchar("paywall_id", { length: 255 }).notNull(),
+
+    // S3 reference
+    s3Key: varchar("s3_key", { length: 512 }).notNull(),
+    s3Bucket: varchar("s3_bucket", { length: 255 }).notNull(),
+
+    // Version info
+    version: integer("version").notNull(),
+    schemaVersion: integer("schema_version").notNull(),
+
+    // Code-deploy provenance (null for visual-editor releases).
+    // contentHash is the §1.2 deployable identity (storage prefix/cache key).
+    deployId: varchar("deploy_id", { length: 255 }),
+    contentHash: varchar("content_hash", { length: 64 }),
+    runtimeConfig: jsonb("runtime_config").$type<PaywallReleaseRuntimeConfig>(),
+
+    // Metadata
+    publishedBy: varchar("published_by", { length: 255 }).notNull(),
+    publishedAt: timestamp("published_at", { withTimezone: true, precision: 3 }).defaultNow(),
+
+    // Only one version can be active per paywall
+    isActive: boolean("is_active").notNull().default(false),
+
+    // Status: 1 = Draft, 2 = Released
+    status: smallint("status").notNull().default(ReleaseStatus.draft),
+  },
+  (table) => [
+    index("paywall_release_paywall_id_idx").on(table.paywallId),
+    uniqueIndex("paywall_release_version_status_idx").on(
+      table.paywallId,
+      table.version,
+      table.status,
+    ),
+    index("paywall_release_status_idx").on(table.paywallId, table.status),
+    index("paywall_release_paywall_id_content_hash_idx").on(table.paywallId, table.contentHash),
+  ],
+);
+
+export const PaywallLocationShowingType = {
+  paywallRelease: 1,
+  featureFlag: 2,
+} as const;
+
+export type PaywallLocationShowingTypeValue =
+  (typeof PaywallLocationShowingType)[keyof typeof PaywallLocationShowingType];
+
+export const paywallLocations = pgTable(
+  "paywall_location",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    slug: varchar("slug", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    description: varchar("description", { length: 1000 }),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("paywall_location_slug_project_id_idx").on(table.slug, table.projectId),
+    index("paywall_location_project_id_idx").on(table.projectId),
+    index("paywall_location_archived_at_idx").on(table.archivedAt),
+  ],
+);
+
+export const paywallLocationShowings = pgTable(
+  "paywall_location_showing",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    paywallLocationId: varchar("paywall_location_id", {
+      length: 255,
+    }).notNull(),
+    type: smallint("type").notNull().default(PaywallLocationShowingType.paywallRelease),
+    paywallId: varchar("paywall_id", { length: 255 }),
+    paywallReleaseId: varchar("paywall_release_id", { length: 255 }),
+    featureFlagId: varchar("feature_flag_id", { length: 255 }),
+    startedAt: timestamp("started_at", { withTimezone: true, precision: 3 }).notNull().defaultNow(),
+    endedAt: timestamp("ended_at", { withTimezone: true, precision: 3 }),
+    createdByUserId: varchar("created_by_user_id", { length: 255 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    index("paywall_location_showing_location_ended_started_idx").on(
+      table.paywallLocationId,
+      table.endedAt,
+      table.startedAt,
+    ),
+    index("paywall_location_showing_project_location_started_idx").on(
+      table.projectId,
+      table.paywallLocationId,
+      table.startedAt,
+    ),
+    index("paywall_location_showing_release_idx").on(table.paywallReleaseId),
+  ],
+);
+
+// ============================================
+// PAYWALL CODE DEPLOYS
+// (docs/specs/paywall-deploy-contract.md)
+// ============================================
+
+// Paywall deploy status enum: 1 = pending (created, blobs uploading),
+// 2 = ready (finalized — the immutable commit point).
+export const PaywallDeployStatus = {
+  pending: 1,
+  ready: 2,
+} as const;
+
+export type PaywallDeployStatusValue =
+  (typeof PaywallDeployStatus)[keyof typeof PaywallDeployStatus];
+
+/**
+ * One CLI `voidhash deploy` invocation. `manifest` stores the full §1 deploy
+ * manifest JSON; `manifestHash` is the sha256 of its canonical (sorted-key)
+ * serialization and dedupes idempotent re-POSTs per project.
+ */
+export const paywallDeploys = pgTable(
+  "paywall_deploy",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    schemaVersion: integer("schema_version").notNull(),
+    cliVersion: varchar("cli_version", { length: 255 }).notNull(),
+    runtimeVersion: varchar("runtime_version", { length: 255 }).notNull(),
+    manifestHash: varchar("manifest_hash", { length: 64 }).notNull(),
+    manifest: jsonb("manifest").$type<unknown>().notNull(),
+    status: smallint("status").notNull().default(PaywallDeployStatus.pending),
+    createdByName: varchar("created_by_name", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => /* @__PURE__ */ new Date())
+      .notNull(),
+  },
+  (table) => [
+    index("paywall_deploy_project_id_created_at_idx").on(table.projectId, table.createdAt),
+    uniqueIndex("paywall_deploy_project_id_manifest_hash_idx").on(
+      table.projectId,
+      table.manifestHash,
+    ),
+  ],
+);
+
+/**
+ * Content-addressed blob ledger, deduped per project: a sha256 already
+ * uploaded by an earlier deploy is never re-uploaded (contract §4.1
+ * `missing`). `storageKey` is the artifact-store key the raw bytes live at.
+ */
+export const paywallDeployBlobs = pgTable(
+  "paywall_deploy_blob",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    sha256: varchar("sha256", { length: 64 }).notNull(),
+    bytes: integer("bytes").notNull(),
+    contentType: varchar("content_type", { length: 255 }),
+    storageKey: varchar("storage_key", { length: 512 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+  },
+  (table) => [
+    uniqueIndex("paywall_deploy_blob_project_id_sha256_idx").on(table.projectId, table.sha256),
+  ],
+);
+
+// Role a manifest-listed file plays within a deploy (contract §1).
+export const PaywallDeployFileRole = {
+  paywallHtml: 1,
+  paywallJs: 2,
+  asset: 3,
+  source: 4,
+  config: 5,
+  componentManifest: 6,
+  componentPreview: 7,
+  componentRuntime: 8,
+  componentPanel: 9,
+} as const;
+
+export type PaywallDeployFileRoleValue =
+  (typeof PaywallDeployFileRole)[keyof typeof PaywallDeployFileRole];
+
+/**
+ * Flattened per-deploy view of every file the manifest references; used to
+ * authorize blob uploads (a sha must be declared by the deploy) and to
+ * compute the `missing` set.
+ */
+export const paywallDeployFiles = pgTable(
+  "paywall_deploy_file",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    deployId: varchar("deploy_id", { length: 255 }).notNull(),
+    role: smallint("role").notNull(),
+    logicalPath: varchar("logical_path", { length: 512 }).notNull(),
+    sha256: varchar("sha256", { length: 64 }).notNull(),
+  },
+  (table) => [index("paywall_deploy_file_deploy_id_idx").on(table.deployId)],
+);
+
+/** Code component upserted by deploy finalize (contract §4.3, per component). */
+export const paywallComponents = pgTable(
+  "paywall_component",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    slug: varchar("slug", { length: 255 }).notNull(),
+    title: varchar("title", { length: 255 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => /* @__PURE__ */ new Date())
+      .notNull(),
+  },
+  (table) => [uniqueIndex("paywall_component_project_id_slug_idx").on(table.projectId, table.slug)],
+);
+
+/**
+ * Immutable component version created at finalize when the §1.2 contentHash
+ * changed; `manifest` stores the validated §2 component manifest JSON.
+ */
+export const paywallComponentVersions = pgTable(
+  "paywall_component_version",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    componentId: varchar("component_id", { length: 255 }).notNull(),
+    deployId: varchar("deploy_id", { length: 255 }).notNull(),
+    version: integer("version").notNull(),
+    contentHash: varchar("content_hash", { length: 64 }).notNull(),
+    manifest: jsonb("manifest").$type<unknown>().notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+  },
+  (table) => [
+    uniqueIndex("paywall_component_version_component_version_idx").on(
+      table.componentId,
+      table.version,
+    ),
+    index("paywall_component_version_component_hash_idx").on(table.componentId, table.contentHash),
+  ],
+);
+
+// ============================================
+// BILLING TABLES
+// ============================================
+
+export const BillingTier = {
+  Enterprise: 3,
+  Free: 1,
+  Pro: 2,
+} as const;
+
+export type BillingTierValue = (typeof BillingTier)[keyof typeof BillingTier];
+
+export const BillingSubscriptionStatus = {
+  Active: 1,
+  Canceled: 2,
+  None: 0,
+  PastDue: 3,
+  Trialing: 4,
+} as const;
+
+export type BillingSubscriptionStatusValue =
+  (typeof BillingSubscriptionStatus)[keyof typeof BillingSubscriptionStatus];
+
+/**
+ * Links organizations to their billing configuration and provider customer
+ */
+export const organizationBilling = pgTable(
+  "organization_billing",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+
+    /** Current billing tier */
+    tier: smallint("tier").notNull().default(BillingTier.Free),
+
+    /** Billing provider (e.g., 'polar', 'stripe') */
+    billingProviderId: varchar("billing_provider_id", { length: 50 }).notNull().default("polar"),
+
+    /** External customer ID in the billing provider (e.g., Polar customer ID) */
+    externalCustomerId: varchar("external_customer_id", { length: 255 }),
+
+    /** Subscription status synced from provider */
+    subscriptionStatus: smallint("subscription_status")
+      .notNull()
+      .default(BillingSubscriptionStatus.None),
+
+    /** External subscription ID in the billing provider */
+    externalSubscriptionId: varchar("external_subscription_id", {
+      length: 255,
+    }),
+
+    /** Current billing period start */
+    currentPeriodStart: timestamp("current_period_start", { withTimezone: true, precision: 3 }),
+
+    /** Current billing period end */
+    currentPeriodEnd: timestamp("current_period_end", { withTimezone: true, precision: 3 }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("organization_id_unique_idx").on(table.organizationId),
+    index("external_customer_id_idx").on(table.externalCustomerId),
+    index("billing_provider_id_idx").on(table.billingProviderId),
+  ],
+);
+
+/**
+ * Local usage records - stored locally first, then synced to provider asynchronously
+ */
+export const usageRecords = pgTable(
+  "usage_record",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+
+    /** Metric identifier (e.g., 'paywall_conversions', 'monthly_tracked_revenue') */
+    metricId: varchar("metric_id", { length: 100 }).notNull(),
+
+    /** Usage value */
+    value: bigint("value", { mode: "number" }).notNull(),
+
+    /** Billing period this usage belongs to */
+    periodStart: timestamp("period_start", { withTimezone: true, precision: 3 }).notNull(),
+    periodEnd: timestamp("period_end", { withTimezone: true, precision: 3 }).notNull(),
+
+    /** Whether this record has been synced to the billing provider */
+    syncedToProvider: boolean("synced_to_provider").notNull().default(false),
+    syncedAt: timestamp("synced_at", { withTimezone: true, precision: 3 }),
+    syncError: varchar("sync_error", { length: 500 }),
+
+    /** Additional context for the usage event */
+    metadata: jsonb("metadata").$type<Record<string, unknown>>(),
+
+    /** When the usage event occurred */
+    occurredAt: timestamp("occurred_at", { withTimezone: true, precision: 3 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  },
+  (table) => [
+    index("org_metric_period_idx").on(
+      table.organizationId,
+      table.metricId,
+      table.periodStart,
+      table.periodEnd,
+    ),
+    index("synced_to_provider_idx").on(table.syncedToProvider),
+  ],
+);
+
+/**
+ * Pre-computed usage aggregates for performance
+ */
+export const usageAggregates = pgTable(
+  "usage_aggregate",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+
+    /** Metric identifier */
+    metricId: varchar("metric_id", { length: 100 }).notNull(),
+
+    /** Billing period */
+    periodStart: timestamp("period_start", { withTimezone: true, precision: 3 }).notNull(),
+    periodEnd: timestamp("period_end", { withTimezone: true, precision: 3 }).notNull(),
+
+    /** Aggregated total value for the period */
+    totalValue: bigint("total_value", { mode: "number" }).notNull().default(0),
+
+    /** Limit for this metric (null = unlimited) */
+    limitValue: bigint("limit_value", { mode: "number" }),
+
+    /** Threshold at which to show warnings */
+    warnThreshold: bigint("warn_threshold", { mode: "number" }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("org_metric_period_unique_idx").on(
+      table.organizationId,
+      table.metricId,
+      table.periodStart,
+    ),
+  ],
+);
+
+/**
+ * Billing webhook events for idempotency tracking
+ */
+export const billingWebhookEvents = pgTable(
+  "billing_webhook_event",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+
+    /** Billing provider ID (e.g., 'polar', 'stripe') */
+    providerId: varchar("provider_id", { length: 50 }).notNull(),
+
+    /** External event ID from the provider */
+    externalEventId: varchar("external_event_id", { length: 255 }).notNull(),
+
+    /** Event type (e.g., 'subscription.created') */
+    eventType: varchar("event_type", { length: 100 }).notNull(),
+
+    /** Full event payload */
+    payload: jsonb("payload").$type<object>(),
+
+    /** When the event was processed (null = not yet processed) */
+    processedAt: timestamp("processed_at", { withTimezone: true, precision: 3 }),
+
+    /** Error message if processing failed */
+    error: varchar("error", { length: 500 }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  },
+  (table) => [
+    uniqueIndex("provider_event_unique_idx").on(table.providerId, table.externalEventId),
+    index("processed_at_idx").on(table.processedAt),
+  ],
+);
+
+/**
+ * WorkOS webhook events — idempotency tracking for the `/api/webhooks/workos`
+ * endpoint. Insert with `processedAt = null`, mutate on success, leave the
+ * `error` column populated on failure so WorkOS retries land on the same row
+ * and the unique index drops duplicate deliveries.
+ */
+export const workosWebhookEvents = pgTable(
+  "workos_webhook_event",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+
+    /** WorkOS event id (from event.id) */
+    externalEventId: varchar("external_event_id", { length: 255 }).notNull(),
+
+    /** Event type (e.g., 'organization.created') */
+    eventType: varchar("event_type", { length: 128 }).notNull(),
+
+    /** Full event payload */
+    payload: jsonb("payload").$type<object>(),
+
+    /** When the event was processed (null = not yet processed) */
+    processedAt: timestamp("processed_at", { withTimezone: true, precision: 3 }),
+
+    /** Error message if processing failed */
+    error: varchar("error", { length: 500 }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  },
+  (table) => [
+    uniqueIndex("workos_event_unique_idx").on(table.externalEventId),
+    index("workos_event_processed_at_idx").on(table.processedAt),
+  ],
+);
+
+/**
+ * Billing provider meters - tracks meter sync status with provider
+ */
+export const billingProviderMeters = pgTable(
+  "billing_provider_meter",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+
+    /** Billing provider ID (e.g., 'polar', 'stripe') */
+    providerId: varchar("provider_id", { length: 50 }).notNull(),
+
+    /** Internal metric ID */
+    metricId: varchar("metric_id", { length: 100 }).notNull(),
+
+    /** External meter ID in the provider */
+    externalMeterId: varchar("external_meter_id", { length: 255 }).notNull(),
+
+    /** External meter slug (Polar-specific) */
+    externalMeterSlug: varchar("external_meter_slug", { length: 255 }),
+
+    lastSyncedAt: timestamp("last_synced_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [uniqueIndex("provider_metric_unique_idx").on(table.providerId, table.metricId)],
+);
+
+// ============================================
+// WEBHOOK TABLES
+// ============================================
+
+export const WebhookEndpointStatus = {
+  Active: 1,
+  Disabled: 2,
+  Failed: 3,
+} as const;
+
+export type WebhookEndpointStatusValue =
+  (typeof WebhookEndpointStatus)[keyof typeof WebhookEndpointStatus];
+
+/**
+ * Webhook endpoint configuration per project
+ */
+export const webhookEndpoints = pgTable(
+  "webhook_endpoint",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+
+    /** User-defined name for the endpoint */
+    name: varchar("name", { length: 255 }).notNull(),
+
+    /** The URL to send webhooks to */
+    url: varchar("url", { length: 2048 }).notNull(),
+
+    /** HMAC secret for signing payloads (whsec_xxx) */
+    secret: varchar("secret", { length: 255 }).notNull(),
+
+    /** Endpoint status */
+    status: smallint("status").notNull().default(WebhookEndpointStatus.Active),
+
+    /** Events to subscribe to (JSON array of event types) */
+    events: jsonb("events").$type<string[]>().notNull(),
+
+    /** Optional description */
+    description: varchar("description", { length: 500 }),
+
+    /** Consecutive failure count for auto-disable */
+    consecutiveFailures: integer("consecutive_failures").notNull().default(0),
+
+    /** Last successful delivery timestamp */
+    lastSuccessAt: timestamp("last_success_at", { withTimezone: true, precision: 3 }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [index("webhook_endpoint_project_status_idx").on(table.projectId, table.status)],
+);
+
+export const WebhookDeliveryStatus = {
+  Pending: 1,
+  InProgress: 2,
+  Succeeded: 3,
+  Failed: 4,
+  Exhausted: 5,
+} as const;
+
+export type WebhookDeliveryStatusValue =
+  (typeof WebhookDeliveryStatus)[keyof typeof WebhookDeliveryStatus];
+
+/**
+ * Webhook delivery record (one per event per endpoint)
+ */
+export const webhookDeliveries = pgTable(
+  "webhook_delivery",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    webhookEndpointId: varchar("webhook_endpoint_id", {
+      length: 255,
+    }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+
+    /** Event type (e.g., "person.created") */
+    eventType: varchar("event_type", { length: 100 }).notNull(),
+
+    /** The payload to deliver */
+    payload: jsonb("payload").$type<object>().notNull(),
+
+    /** Delivery status */
+    status: smallint("status").notNull().default(WebhookDeliveryStatus.Pending),
+
+    /** Number of attempts made */
+    attemptCount: integer("attempt_count").notNull().default(0),
+
+    /** Maximum retry attempts */
+    maxAttempts: integer("max_attempts").notNull().default(5),
+
+    /** Next scheduled attempt */
+    nextAttemptAt: timestamp("next_attempt_at", { withTimezone: true, precision: 3 }),
+
+    /** When the event occurred (for ordering) */
+    eventOccurredAt: timestamp("event_occurred_at", { withTimezone: true, precision: 3 }).notNull(),
+
+    /** When delivery completed (success or exhausted) */
+    completedAt: timestamp("completed_at", { withTimezone: true, precision: 3 }),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  },
+  (table) => [
+    index("webhook_delivery_endpoint_status_idx").on(table.webhookEndpointId, table.status),
+    index("webhook_delivery_next_attempt_idx").on(table.nextAttemptAt),
+  ],
+);
+
+/**
+ * Webhook delivery attempt log (for debugging/history)
+ */
+export const webhookDeliveryAttempts = pgTable(
+  "webhook_delivery_attempt",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    webhookDeliveryId: varchar("webhook_delivery_id", {
+      length: 255,
+    }).notNull(),
+
+    /** Attempt number (1, 2, 3, ...) */
+    attemptNumber: integer("attempt_number").notNull(),
+
+    /** HTTP status code returned */
+    statusCode: integer("status_code"),
+
+    /** Response body (truncated) */
+    responseBody: varchar("response_body", { length: 2048 }),
+
+    /** Error message if failed */
+    errorMessage: varchar("error_message", { length: 500 }),
+
+    /** Request duration in milliseconds */
+    durationMs: integer("duration_ms"),
+
+    /** Whether this attempt succeeded */
+    succeeded: boolean("succeeded").notNull().default(false),
+
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  },
+  (table) => [index("webhook_attempt_delivery_idx").on(table.webhookDeliveryId)],
+);
+
+// ============================================
+// AUDIT LOG TABLE
+// ============================================
+
+export const AuditLogEntityType = {
+  ApiKey: "api_key",
+  Person: "person",
+  Experiment: "experiment",
+  ExperimentVariant: "experiment_variant",
+  ExperimentTreatment: "experiment_treatment",
+  FeatureFlag: "feature_flag",
+  FeatureFlagOverride: "feature_flag_override",
+  FeatureFlagTarget: "feature_flag_target",
+  FeatureFlagVariant: "feature_flag_variant",
+  Organization: "organization",
+  PaymentProviderConfiguration: "payment_provider_configuration",
+  PaymentProviderProduct: "payment_provider_product",
+  Paywall: "paywall",
+  PaywallComponent: "paywall_component",
+  PaywallDeploy: "paywall_deploy",
+  PaywallLocation: "paywall_location",
+  PaywallRelease: "paywall_release",
+  Perk: "perk",
+  Product: "product",
+  ProductPerk: "product_perk",
+  Project: "project",
+  PushDeviceToken: "push_device_token",
+  PushNotificationConfiguration: "push_notification_configuration",
+  WebhookEndpoint: "webhook_endpoint",
+} as const;
+
+export type AuditLogEntityTypeValue = (typeof AuditLogEntityType)[keyof typeof AuditLogEntityType];
+
+export const AuditLogAction = {
+  Archived: "archived",
+  Completed: "completed",
+  Created: "created",
+  Deleted: "deleted",
+  Disabled: "disabled",
+  Enabled: "enabled",
+  OverrideRemoved: "override_removed",
+  OverrideSet: "override_set",
+  Paused: "paused",
+  Published: "published",
+  Restored: "restored",
+  Started: "started",
+  TargetAdded: "target_added",
+  TargetRemoved: "target_removed",
+  Updated: "updated",
+} as const;
+
+export type AuditLogActionValue = (typeof AuditLogAction)[keyof typeof AuditLogAction];
+
+export const AuditLogActorType = {
+  ApiKey: 2,
+  System: 3,
+  User: 1,
+} as const;
+
+export type AuditLogActorTypeValue = (typeof AuditLogActorType)[keyof typeof AuditLogActorType];
+
+export const auditLogs = pgTable(
+  "audit_log",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    entityType: varchar("entity_type", { length: 50 }).notNull(),
+    entityId: varchar("entity_id", { length: 255 }).notNull(),
+    parentEntityId: varchar("parent_entity_id", { length: 255 }),
+    action: varchar("action", { length: 50 }).notNull(),
+    actorUserId: varchar("actor_user_id", { length: 255 }),
+    actorType: smallint("actor_type").notNull().default(AuditLogActorType.User),
+    changes: jsonb("changes").$type<unknown>(),
+    metadata: jsonb("metadata").$type<Record<string, unknown>>(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+  },
+  (table) => [
+    index("audit_project_created_idx").on(table.projectId, table.createdAt),
+    index("audit_entity_created_idx").on(table.entityType, table.entityId, table.createdAt),
+    index("audit_project_entity_type_created_idx").on(
+      table.projectId,
+      table.entityType,
+      table.createdAt,
+    ),
+    index("audit_actor_created_idx").on(table.actorUserId, table.createdAt),
+  ],
+);
+
+// ============================================
+// FEATURE FLAG TABLES
+// ============================================
+
+export const FeatureFlagTargetListType = {
+  Allow: 1,
+  Deny: 2,
+} as const;
+
+export type FeatureFlagTargetListTypeValue =
+  (typeof FeatureFlagTargetListType)[keyof typeof FeatureFlagTargetListType];
+
+export const FeatureFlagIdentityType = {
+  PersonId: 1,
+  DistinctId: 2,
+  Email: 3,
+  ExternalId: 4,
+} as const;
+
+export type FeatureFlagIdentityTypeValue =
+  (typeof FeatureFlagIdentityType)[keyof typeof FeatureFlagIdentityType];
+
+export const featureFlags = pgTable(
+  "feature_flag",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    key: varchar("key", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    description: varchar("description", { length: 1000 }),
+    enabled: boolean("enabled").notNull().default(false),
+    rolloutBps: integer("rollout_bps").notNull().default(10000),
+    salt: varchar("salt", { length: 255 }).notNull(),
+    internal: boolean("internal").notNull().default(false),
+    ownerType: varchar("owner_type", { length: 50 }),
+    ownerId: varchar("owner_id", { length: 255 }),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdByUserId: varchar("created_by_user_id", { length: 255 }),
+    updatedByUserId: varchar("updated_by_user_id", { length: 255 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+    version: integer("version").notNull().default(1),
+  },
+  (table) => [
+    uniqueIndex("ff_key_project_id_idx").on(table.key, table.projectId),
+    index("ff_project_id_idx").on(table.projectId),
+  ],
+);
+
+export const featureFlagTargets = pgTable(
+  "feature_flag_target",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    featureFlagId: varchar("feature_flag_id", { length: 255 }).notNull(),
+    listType: smallint("list_type").notNull(),
+    identityType: smallint("identity_type").notNull(),
+    identityValue: varchar("identity_value", { length: 255 }).notNull(),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("ff_target_unique_idx").on(
+      table.featureFlagId,
+      table.listType,
+      table.identityType,
+      table.identityValue,
+    ),
+    index("ff_target_identity_idx").on(table.identityType, table.identityValue),
+  ],
+);
+
+export const featureFlagOverrides = pgTable(
+  "feature_flag_override",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    featureFlagId: varchar("feature_flag_id", { length: 255 }).notNull(),
+    identityType: smallint("identity_type").notNull(),
+    identityValue: varchar("identity_value", { length: 255 }).notNull(),
+    forcedEnabled: boolean("forced_enabled"),
+    // When set, pins the subject to this variant key (bypasses variant bucketing).
+    // Primarily used to force a QA tester into a specific experiment arm.
+    forcedVariantKey: varchar("forced_variant_key", { length: 255 }),
+    note: varchar("note", { length: 1000 }),
+    createdByUserId: varchar("created_by_user_id", { length: 255 }),
+    updatedByUserId: varchar("updated_by_user_id", { length: 255 }),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("ff_override_unique_idx").on(
+      table.featureFlagId,
+      table.identityType,
+      table.identityValue,
+    ),
+    index("ff_override_identity_idx").on(table.identityType, table.identityValue),
+  ],
+);
+
+export const featureFlagVariants = pgTable(
+  "feature_flag_variant",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    featureFlagId: varchar("feature_flag_id", { length: 255 }).notNull(),
+    key: varchar("key", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    weightBps: integer("weight_bps").notNull().default(0),
+    payload: jsonb("payload").$type<unknown>(),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("ff_variant_flag_key_idx").on(table.featureFlagId, table.key),
+    index("ff_variant_flag_id_idx").on(table.featureFlagId),
+  ],
+);
+
+/**
+ * Internal (voidhash-internal) feature flags — per-organization on/off
+ * overrides for our OWN unreleased product features. The set of available
+ * flags and their code defaults live in code (`@voidhash/rpc`'s
+ * `INTERNAL_FEATURE_FLAGS`); a row here records an explicit per-org override on
+ * top of that default. Absence of a row means "use the code default".
+ *
+ * ⚠️ Distinct from `featureFlags` above, which is the customer-facing
+ * feature-flag product (project-scoped, evaluated per end-user via the SDK).
+ */
+export const internalFeatureFlagOverrides = pgTable(
+  "internal_feature_flag_override",
+  {
+    id: varchar("id", { length: 36 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 36 })
+      .notNull()
+      .references(() => organization.id, { onDelete: "cascade" }),
+    flagKey: varchar("flag_key", { length: 100 }).notNull(),
+    enabled: boolean("enabled").notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("internal_feature_flag_override_org_key_uidx").on(
+      table.organizationId,
+      table.flagKey,
+    ),
+    index("internal_feature_flag_override_org_idx").on(table.organizationId),
+  ],
+);
+
+/**
+ * Organization-scoped image asset library. Users upload images (via the paywall
+ * designer) that are stored in the public file store under
+ * `paywall-assets/<organizationId>/<sha256>.<ext>`; the resulting public URL is
+ * reused as a paywall background image. Content-addressed keys make uploads
+ * deduplicating per org — the `key` unique index guarantees a single row per
+ * stored object, which keeps best-effort object deletion on row-delete safe.
+ */
+export const paywallAsset = pgTable(
+  "paywall_asset",
+  {
+    id: varchar("id", { length: 36 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 36 })
+      .notNull()
+      .references(() => organization.id, { onDelete: "cascade" }),
+    /** Display name; defaults to the original filename client-side. */
+    name: varchar("name", { length: 255 }).notNull(),
+    /** Object key in the public file store. */
+    key: text("key").notNull(),
+    /** Absolute public URL serving the object. */
+    url: text("url").notNull(),
+    contentType: varchar("content_type", { length: 100 }).notNull(),
+    sizeBytes: integer("size_bytes").notNull(),
+    /** Client-supplied intrinsic dimensions; optional. */
+    width: integer("width"),
+    height: integer("height"),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+  },
+  (table) => [
+    uniqueIndex("paywall_asset_key_uidx").on(table.key),
+    index("paywall_asset_org_idx").on(table.organizationId),
+  ],
+);
+
+/**
+ * Persisted Voidhash AI chat. The `id` is minted client-side (so attachments
+ * can be uploaded under the chat before the first turn is saved). `messages`
+ * holds the AI SDK `UIMessage[]` JSON-encoded as text — it is never queried
+ * into, and storing it as a string keeps NDJSON RPC serialization trivial.
+ *
+ * `chatType` is `"persistent"` (listed in the history UI, resumable) or
+ * `"single_use"` (stored for audit/debug but never listed). `paywallId` scopes
+ * a persistent designer chat to its paywall for the history dropdown.
+ */
+export const voidhashAiChat = pgTable(
+  "voidhash_ai_chat",
+  {
+    id: varchar("id", { length: 64 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 36 })
+      .notNull()
+      .references(() => organization.id, { onDelete: "cascade" }),
+    projectId: varchar("project_id", { length: 36 }).notNull(),
+    /** Studio surface this chat belongs to (e.g. "designer"). */
+    surface: varchar("surface", { length: 64 }).notNull(),
+    /** "persistent" (listed, resumable) | "single_use" (stored, never listed). */
+    chatType: varchar("chat_type", { length: 32 }).notNull(),
+    /** Context scope for persistent chats (the paywall id in the designer). */
+    paywallId: varchar("paywall_id", { length: 64 }),
+    /** Creating user id (from the authenticated session); null if unknown. */
+    userId: varchar("user_id", { length: 64 }),
+    /** Short title derived from the first user message. */
+    title: varchar("title", { length: 255 }).notNull(),
+    /** JSON-encoded AI SDK UIMessage[]. */
+    messages: text("messages").notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+  },
+  (table) => [
+    index("voidhash_ai_chat_org_idx").on(table.organizationId),
+    // Backs the history list: a paywall/surface's persistent chats, newest first.
+    index("voidhash_ai_chat_scope_idx").on(
+      table.projectId,
+      table.surface,
+      table.paywallId,
+      table.chatType,
+    ),
+    index("voidhash_ai_chat_updated_idx").on(table.updatedAt),
+  ],
+);
+
+/**
+ * Per-turn AI checkpoint pre-images. Before the FIRST accepted write to a
+ * document within one chat turn (one POST /api/ai/chat stream), the workspace
+ * service captures that document's pre-write tree here — one row per (chat,
+ * turn, document). Reverting "the last turn" reads these rows and reconciles
+ * each captured tree back onto the live document. Rows are chat-scoped (deleted
+ * with the chat) and are not authorization-bearing on their own.
+ */
+export const voidhashAiCheckpoint = pgTable(
+  "voidhash_ai_checkpoint",
+  {
+    id: varchar("id", { length: 64 }).primaryKey(),
+    /** The chat this checkpoint belongs to (cascade-deleted with the chat). */
+    chatId: varchar("chat_id", { length: 64 })
+      .notNull()
+      .references(() => voidhashAiChat.id, { onDelete: "cascade" }),
+    /**
+     * Turn identifier — the id of the triggering user message (or a server-minted
+     * turn id). Groups the pre-images captured within one POST /api/ai/chat stream
+     * so a revert can target "the last turn".
+     */
+    turnId: varchar("turn_id", { length: 128 }).notNull(),
+    /** The mimic document / paywall this pre-image belongs to. */
+    paywallId: varchar("paywall_id", { length: 64 }).notNull(),
+    /** The document's pre-write RAW encoded tree (mimic `TreeValue`). */
+    tree: jsonb("tree").$type<unknown>().notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+  },
+  (table) => [
+    // First-write-wins: one pre-image per (chat, turn, document). Backs the
+    // ON CONFLICT DO NOTHING capture so only the FIRST write to a document in a
+    // turn records the pre-turn image, and also serves the revert lookup.
+    uniqueIndex("voidhash_ai_checkpoint_turn_doc_idx").on(
+      table.chatId,
+      table.turnId,
+      table.paywallId,
+    ),
+    // Backs "last turn" discovery: a chat's turns, newest first.
+    index("voidhash_ai_checkpoint_chat_idx").on(table.chatId, table.createdAt),
+  ],
+);
+
+// ============================================
+// EXPERIMENT (A/B TESTING) TABLES
+// ============================================
+
+export const ExperimentStatus = {
+  draft: 1,
+  running: 2,
+  paused: 3,
+  concluded: 4,
+} as const;
+
+export type ExperimentStatusValue = (typeof ExperimentStatus)[keyof typeof ExperimentStatus];
+
+/**
+ * An experiment is an authoring + analysis layer that compiles down to a
+ * backing customer feature flag (the runtime assignment artifact). The backing
+ * flag is linked both ways: `experiment.featureFlagId` here, and, on the flag,
+ * `feature_flag.ownerType='experiment'` / `ownerId=<experimentId>` /
+ * `internal=true` (which hides it from the customer Feature Flags list and
+ * blocks direct customer edits).
+ */
+export const experiments = pgTable(
+  "experiment",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    featureFlagId: varchar("feature_flag_id", { length: 255 }).notNull(),
+    key: varchar("key", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    description: varchar("description", { length: 1000 }),
+    hypothesis: varchar("hypothesis", { length: 2000 }),
+    status: smallint("status").notNull().default(ExperimentStatus.draft),
+    primaryMetricEventName: varchar("primary_metric_event_name", { length: 255 }).notNull(),
+    secondaryMetricEventNames: jsonb("secondary_metric_event_names").$type<string[]>(),
+    startedAt: timestamp("started_at", { withTimezone: true, precision: 3 }),
+    endedAt: timestamp("ended_at", { withTimezone: true, precision: 3 }),
+    winningVariantId: varchar("winning_variant_id", { length: 255 }),
+    createdByUserId: varchar("created_by_user_id", { length: 255 }),
+    updatedByUserId: varchar("updated_by_user_id", { length: 255 }),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+    version: integer("version").notNull().default(1),
+  },
+  (table) => [
+    uniqueIndex("experiment_key_project_id_idx").on(table.key, table.projectId),
+    // 1:1 backing flag.
+    uniqueIndex("experiment_feature_flag_id_idx").on(table.featureFlagId),
+    index("experiment_project_id_idx").on(table.projectId),
+  ],
+);
+
+/**
+ * The arms of an experiment. This is the source of truth for variant identity
+ * and weights; it is synced 1:1 (by `key`) into `feature_flag_variant` rows on
+ * the backing flag so the existing deterministic bucketing engine assigns them.
+ */
+export const experimentVariants = pgTable(
+  "experiment_variant",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    experimentId: varchar("experiment_id", { length: 255 }).notNull(),
+    key: varchar("key", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    isControl: boolean("is_control").notNull().default(false),
+    weightBps: integer("weight_bps").notNull().default(0),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    uniqueIndex("experiment_variant_experiment_key_idx").on(table.experimentId, table.key),
+    index("experiment_variant_experiment_id_idx").on(table.experimentId),
+  ],
+);
+
+/** Config for a `paywall_location` treatment: which paywall release to serve at
+ * a given location for the owning variant. */
+export interface PaywallLocationTreatmentConfig {
+  readonly paywallLocationId: string;
+  readonly paywallId: string;
+  readonly paywallReleaseId: string;
+}
+
+/**
+ * Config payload for an experiment treatment, discriminated at the service
+ * layer by `experiment_treatment.treatmentType`. Kept as typed jsonb (rather
+ * than hoisted columns) so new experiment surfaces (notification flows,
+ * automations, …) add zero schema churn. Grows into a union as surfaces land.
+ */
+export type ExperimentTreatmentConfig = PaywallLocationTreatmentConfig;
+
+/**
+ * The extensible "change" primitive: one row per variant × surface target. For
+ * v1 `treatmentType='paywall_location'` and `config` names the paywall release
+ * to serve at a location for that variant. Compiled into the backing flag's
+ * variant payload at authoring time. Uniqueness of (variantId, treatmentType,
+ * target) is enforced at the service layer since the target lives inside jsonb.
+ */
+export const experimentTreatments = pgTable(
+  "experiment_treatment",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    experimentId: varchar("experiment_id", { length: 255 }).notNull(),
+    variantId: varchar("variant_id", { length: 255 }).notNull(),
+    treatmentType: varchar("treatment_type", { length: 50 }).notNull(),
+    config: jsonb("config").$type<ExperimentTreatmentConfig>().notNull(),
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+  },
+  (table) => [
+    index("experiment_treatment_experiment_id_idx").on(table.experimentId),
+    index("experiment_treatment_variant_id_idx").on(table.variantId),
+  ],
+);
+
+/**
+ * INTERNAL voidhash product feedback submitted from the studio navbar widget —
+ * our own dogfooding channel, NOT a customer-facing feature. The `voidhash_`
+ * prefix marks it as an internal table (like a future customer "feedback
+ * collection" product could own a plain `feedback` table without colliding).
+ *
+ * Every row is a point-in-time snapshot: the submitter's identity and the
+ * org/project/page they were on are copied in (not joined) so the overwatch
+ * inbox stays readable even after the user, org, or project is renamed or
+ * deleted. Org/project columns are nullable because feedback can be sent from
+ * account-level pages that are not scoped to either. `topic`/`sentiment`/`status`
+ * map to the const enums in `@voidhash/lib`.
+ */
+export const voidhashFeedback = pgTable(
+  "voidhash_feedback",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+    /** A `FeedbackTopic` product-area slug (see `@voidhash/lib`). */
+    topic: varchar("topic", { length: 32 }).notNull(),
+    /** Optional ordinal 1–4 `FeedbackSentiment`; null when the user skipped it. */
+    sentiment: smallint("sentiment"),
+    message: text("message").notNull(),
+    /** Triage state (`FeedbackStatus`): 0 New, 1 Read, 2 Archived. */
+    status: smallint("status").notNull().default(0),
+    // Submitter snapshot (from the authenticated session, not the client).
+    userId: varchar("user_id", { length: 255 }),
+    userEmail: varchar("user_email", { length: 255 }),
+    userName: varchar("user_name", { length: 255 }),
+    // Organization context snapshot (nullable — account-level pages have none).
+    organizationId: varchar("organization_id", { length: 255 }),
+    organizationSlug: varchar("organization_slug", { length: 255 }),
+    organizationName: varchar("organization_name", { length: 255 }),
+    // Project context snapshot (nullable — org-level pages have none).
+    projectId: varchar("project_id", { length: 255 }),
+    projectSlug: varchar("project_slug", { length: 255 }),
+    projectName: varchar("project_name", { length: 255 }),
+    /** The route/path the user was on when they submitted (e.g. `/studio/…`). */
+    pathname: varchar("pathname", { length: 1024 }),
+    /** Browser user-agent, for reproducing UI reports. */
+    userAgent: varchar("user_agent", { length: 512 }),
+    /** Set when the inbox first transitions the row out of `New`. */
+    readAt: timestamp("read_at", { withTimezone: true, precision: 3 }),
+    /** Set when the inbox archives the row. */
+    archivedAt: timestamp("archived_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    index("voidhash_feedback_status_created_idx").on(table.status, table.createdAt),
+    index("voidhash_feedback_created_idx").on(table.createdAt),
+    index("voidhash_feedback_organization_idx").on(table.organizationId),
+  ],
+);
+
+/**
+ * A saved VoidQL analytics insight (docs/analytics-access-layer.html §15). Stores
+ * the VoidQL *text* plus the catalog `schema_version` it was authored against —
+ * NOT a frozen compiled statement — so it is re-validated and re-compiled on every
+ * read, and the current tenant-injection + allow-list always apply.
+ */
+export const analyticsSavedQuery = pgTable(
+  "analytics_saved_query",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    voidqlText: text("voidql_text").notNull(),
+    schemaVersion: integer("schema_version").notNull(),
+    createdBy: varchar("created_by", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+  },
+  (table) => [index("analytics_saved_query_org_idx").on(table.organizationId)],
+);
+
+/* ──────────────────────────────────────────────────────────────────────────
+ * Push notifications
+ *
+ * Every identifier here uses the `push_` namespace to avoid colliding with the
+ * entrenched payment-provider webhook domain (`paymentProviderNotification`,
+ * prefix `ppn`). Only the three product-owner-fixed service class names keep
+ * the word "Notification"; nothing in the data/ID layer does.
+ * ────────────────────────────────────────────────────────────────────────── */
+
+/**
+ * Per-(project, provider) push-credential store. Structural clone of
+ * `paymentProviderConfigurations` — the `activeProviderId` generated column +
+ * unique index gives exactly one active config per (project, provider) while
+ * permitting unlimited soft-deleted rows (Postgres null-distinct semantics).
+ * Secrets live encrypted inside `configuration`; the dashboard read DTO omits
+ * them (write-only secrets).
+ */
+export const pushNotificationConfigs = pgTable(
+  "push_notification_config",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(), // push_conf_*
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    providerId: varchar("provider_id", { length: 50 }).notNull(), // 'fcm' | 'apns'
+    /** Derived external key — FCM project_id / APNs bundleId. */
+    pushProviderKey: varchar("push_provider_key", { length: 255 }).notNull().default("empty"),
+    enabled: boolean("enabled").notNull().default(false),
+    name: varchar("name", { length: 255 }).notNull().default("Unknown"),
+    configuration: jsonb("configuration").$type<Record<string, unknown>>().notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+    activeProviderId: varchar("active_provider_id", { length: 50 }).generatedAlwaysAs(
+      sql`(case when deleted_at is null then provider_id else null end)`,
+    ),
+  },
+  (table) => [
+    index("push_notification_config_project_id_idx").on(table.projectId),
+    uniqueIndex("push_notification_config_project_active_provider_uidx").on(
+      table.projectId,
+      table.activeProviderId,
+    ),
+  ],
+);
+
+/**
+ * The UUID ⟷ platform-credential mapping. `id` (`push_tok_*`) is the universal
+ * device identifier above the `NotificationTokenService` boundary; routing is
+ * driven by the `provider` column, never by `platform`. The dedup unique index
+ * includes the coalesced `environment` so a sandbox APNs token never collides
+ * with — or mis-routes against — a production one; re-registration revives a row
+ * by clearing `invalidatedAt`/`deletedAt`.
+ */
+export const pushDeviceTokens = pgTable(
+  "push_device_token",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(), // push_tok_* (OUR device UUID)
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    platform: varchar("platform", { length: 20 }).notNull(), // 'ios' | 'android'
+    provider: varchar("provider", { length: 20 }).notNull(), // 'fcm' | 'apns' (ROUTES BY THIS)
+    platformToken: varchar("platform_token", { length: 1024 }).notNull(),
+    bundleId: varchar("bundle_id", { length: 255 }), // required for apns
+    environment: varchar("environment", { length: 20 }), // 'sandbox' | 'production', apns; in dedup key
+    invalidatedAt: timestamp("invalidated_at", { withTimezone: true, precision: 3 }),
+    invalidationReason: varchar("invalidation_reason", { length: 100 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    // Freshness clock for invalidation gating — see NotificationTokenService.invalidate.
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    uniqueIndex("push_device_token_dedup_uidx").on(
+      table.projectId,
+      table.provider,
+      table.platformToken,
+      sql`coalesce(${table.environment}, '')`,
+    ),
+    index("push_device_token_project_invalidated_idx").on(table.projectId, table.invalidatedAt),
+  ],
+);
+
+/**
+ * Person ⟷ device link (one person : many devices; one device : exactly one
+ * current owner). `personId` is re-pointed to the merge survivor inside the
+ * merge transaction (like `personIdentities.personId`); the send-time loader
+ * also expands canonical persons to their merged-loser set as belt-and-suspenders.
+ */
+export const pushPersonDeviceTokens = pgTable(
+  "push_person_device_token",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(), // push_person_tok_*
+    projectId: varchar("project_id", { length: 255 }).notNull(), // denormalized for tenant isolation
+    personId: varchar("person_id", { length: 255 }).notNull(), // references persons.id; re-pointed on merge
+    pushDeviceTokenId: varchar("push_device_token_id", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 }).$onUpdate(
+      () => new Date(),
+    ),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    uniqueIndex("push_person_device_token_uidx").on(table.personId, table.pushDeviceTokenId),
+    index("push_person_device_token_person_idx").on(table.personId, table.deletedAt),
+    index("push_person_device_token_token_idx").on(table.pushDeviceTokenId, table.deletedAt),
+  ],
+);
+
+/** Parent send roll-up status (a pure aggregate of the child deliveries). */
+export const PushNotificationSendStatus = {
+  Pending: 1,
+  InProgress: 2,
+  Succeeded: 3,
+  PartialFailed: 4,
+  Failed: 5,
+  NoRecipients: 6,
+} as const;
+
+export type PushNotificationSendStatusValue =
+  (typeof PushNotificationSendStatus)[keyof typeof PushNotificationSendStatus];
+
+/**
+ * One row per `NotificationSendingService.send` call — the analog of a webhook
+ * "event". Holds per-status counts so `NoRecipients` ("reached nobody") is
+ * distinguishable from `Succeeded` ("all delivered"), records
+ * `unresolvedDistinctIds` (targeting an identity with no mapping never fails the
+ * send), and supports an optional caller `idempotencyKey` collapsing retries.
+ * `message` is PII-at-rest and TTL-purged.
+ */
+export const pushNotificationSends = pgTable(
+  "push_notification_send",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(), // push_send_*
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    idempotencyKey: varchar("idempotency_key", { length: 255 }),
+    message: jsonb("message").$type<Record<string, unknown>>().notNull(), // PII
+    requestedPersonIds: jsonb("requested_person_ids").$type<string[]>().notNull().default([]),
+    requestedDistinctIds: jsonb("requested_distinct_ids").$type<string[]>().notNull().default([]),
+    unresolvedDistinctIds: jsonb("unresolved_distinct_ids").$type<string[]>().notNull().default([]),
+    status: smallint("status").notNull().default(PushNotificationSendStatus.Pending),
+    deviceCount: integer("device_count").notNull().default(0),
+    succeededCount: integer("succeeded_count").notNull().default(0),
+    failedCount: integer("failed_count").notNull().default(0),
+    skippedCount: integer("skipped_count").notNull().default(0),
+    messagePurgedAt: timestamp("message_purged_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    completedAt: timestamp("completed_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    index("push_notification_send_project_created_idx").on(table.projectId, table.createdAt),
+    // Partial: collapse client retries only when a key was supplied.
+    uniqueIndex("push_notification_send_idempotency_uidx")
+      .on(table.projectId, table.idempotencyKey)
+      .where(sql`${table.idempotencyKey} is not null`),
+  ],
+);
+
+/** Per-device delivery status — mirrors `webhook_delivery`, incl. `Exhausted`. */
+export const PushNotificationDeliveryStatus = {
+  Pending: 1,
+  InProgress: 2,
+  Succeeded: 3,
+  Failed: 4,
+  Exhausted: 5,
+} as const;
+
+export type PushNotificationDeliveryStatusValue =
+  (typeof PushNotificationDeliveryStatus)[keyof typeof PushNotificationDeliveryStatus];
+
+/**
+ * One row per `(send, device)`. The atomic `Pending|Failed -> InProgress`
+ * claim/CAS on this row is the idempotency guard against double-delivery. The
+ * consumer routes on the `provider` column copied from the token row;
+ * `nextAttemptAt` is observability-only (the Queue, not a poller, schedules
+ * retries).
+ */
+export const pushNotificationDeliveries = pgTable(
+  "push_notification_delivery",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(), // push_del_*
+    pushNotificationSendId: varchar("push_notification_send_id", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    personId: varchar("person_id", { length: 255 }).notNull(),
+    pushDeviceTokenId: varchar("push_device_token_id", { length: 255 }).notNull(),
+    provider: varchar("provider", { length: 20 }).notNull(), // consumer routes by THIS
+    status: smallint("status").notNull().default(PushNotificationDeliveryStatus.Pending),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    maxAttempts: integer("max_attempts").notNull().default(5),
+    nextAttemptAt: timestamp("next_attempt_at", { withTimezone: true, precision: 3 }),
+    providerMessageId: varchar("provider_message_id", { length: 255 }),
+    lastError: varchar("last_error", { length: 500 }),
+    completedAt: timestamp("completed_at", { withTimezone: true, precision: 3 }),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+  },
+  (table) => [
+    // Per-(send,device) idempotency: no double-delivery ROW within a send.
+    uniqueIndex("push_notification_delivery_send_device_uidx").on(
+      table.pushNotificationSendId,
+      table.pushDeviceTokenId,
+    ),
+    // Race-free parent roll-up via GROUP BY status.
+    index("push_notification_delivery_send_status_idx").on(
+      table.pushNotificationSendId,
+      table.status,
+    ),
+    // Observability / backstop only — NOT a retry poller.
+    index("push_notification_delivery_next_attempt_idx").on(table.status, table.nextAttemptAt),
+  ],
+);
+
+/**
+ * Append-only attempt log, one row per attempt — mirrors
+ * `webhook_delivery_attempt`. `responseBody` may echo the payload, so it is
+ * PII-at-rest and TTL-purged alongside `send.message`.
+ */
+export const pushNotificationDeliveryAttempts = pgTable(
+  "push_notification_delivery_attempt",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(), // push_att_*
+    pushNotificationDeliveryId: varchar("push_notification_delivery_id", {
+      length: 255,
+    }).notNull(),
+    attemptNumber: integer("attempt_number").notNull(),
+    statusCode: integer("status_code"), // FCM/APNs HTTP code
+    providerErrorCode: varchar("provider_error_code", { length: 100 }),
+    responseBody: varchar("response_body", { length: 2048 }), // truncated; TTL-purged
+    errorMessage: varchar("error_message", { length: 500 }),
+    durationMs: integer("duration_ms"),
+    succeeded: boolean("succeeded").notNull().default(false),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+  },
+  (table) => [
+    index("push_notification_delivery_attempt_delivery_idx").on(table.pushNotificationDeliveryId),
+  ],
+);
diff --git a/packages/db/src/types.ts b/packages/db/src/types.ts
new file mode 100644
index 000000000..720cee400
--- /dev/null
+++ b/packages/db/src/types.ts
@@ -0,0 +1,175 @@
+import type { InferInsertModel, InferSelectModel, Table } from "drizzle-orm";
+
+import type * as schema from "./schema.ts";
+
+// biome-ignore lint/suspicious/noExplicitAny: should be ok
+type InferUpdateModel<T extends Table<any>> = Partial<InferSelectModel<T>> & {
+  id: string;
+};
+
+export type Project = InferSelectModel<typeof schema.projects>;
+export type InsertProject = InferInsertModel<typeof schema.projects>;
+export type UpdateProject = InferUpdateModel<typeof schema.projects>;
+
+export type ApiKey = InferSelectModel<typeof schema.apiKeys>;
+export type InsertApiKey = InferInsertModel<typeof schema.apiKeys>;
+export type UpdateApiKey = InferUpdateModel<typeof schema.apiKeys>;
+
+export type Person = InferSelectModel<typeof schema.persons>;
+export type InsertPerson = InferInsertModel<typeof schema.persons>;
+export type UpdatePerson = InferUpdateModel<typeof schema.persons>;
+
+export type PersonIdentity = InferSelectModel<typeof schema.personIdentities>;
+export type InsertPersonIdentity = InferInsertModel<typeof schema.personIdentities>;
+export type UpdatePersonIdentity = InferUpdateModel<typeof schema.personIdentities>;
+
+export type PersonPersonlessIdentity = InferSelectModel<typeof schema.personPersonlessIdentities>;
+export type InsertPersonPersonlessIdentity = InferInsertModel<
+  typeof schema.personPersonlessIdentities
+>;
+
+export type IdentityAssertion = InferSelectModel<typeof schema.identityAssertions>;
+export type InsertIdentityAssertion = InferInsertModel<typeof schema.identityAssertions>;
+
+export type PersonUnlockedPerk = InferSelectModel<typeof schema.personUnlockedPerks>;
+export type InsertPersonUnlockedPerk = InferInsertModel<typeof schema.personUnlockedPerks>;
+export type UpdatePersonUnlockedPerk = InferUpdateModel<typeof schema.personUnlockedPerks>;
+
+export type PaymentProviderConfiguration = InferSelectModel<
+  typeof schema.paymentProviderConfigurations
+>;
+export type InsertPaymentProviderConfiguration = InferInsertModel<
+  typeof schema.paymentProviderConfigurations
+>;
+export type UpdatePaymentProviderConfiguration = InferUpdateModel<
+  typeof schema.paymentProviderConfigurations
+>;
+
+export type Product = InferSelectModel<typeof schema.products>;
+export type InsertProduct = InferInsertModel<typeof schema.products>;
+export type UpdateProduct = InferUpdateModel<typeof schema.products>;
+
+export type PaymentProviderConfigurationProduct = InferSelectModel<
+  typeof schema.paymentProviderConfigurationProducts
+>;
+export type InsertPaymentProviderConfigurationProduct = InferInsertModel<
+  typeof schema.paymentProviderConfigurationProducts
+>;
+export type UpdatePaymentProviderConfigurationProduct = InferUpdateModel<
+  typeof schema.paymentProviderConfigurationProducts
+>;
+
+// Auth Schema Types
+export type User = InferSelectModel<typeof schema.user>;
+export type InsertUser = InferInsertModel<typeof schema.user>;
+
+export type Organization = InferSelectModel<typeof schema.organization>;
+export type InsertOrganization = InferInsertModel<typeof schema.organization>;
+
+export type Member = InferSelectModel<typeof schema.member>;
+export type InsertMember = InferInsertModel<typeof schema.member>;
+
+export type Invitation = InferSelectModel<typeof schema.invitation>;
+export type InsertInvitation = InferInsertModel<typeof schema.invitation>;
+
+export type Apikey = InferSelectModel<typeof schema.apikey>; // Note: different from apiKeys
+export type InsertApikey = InferInsertModel<typeof schema.apikey>;
+
+export type Perk = InferSelectModel<typeof schema.perks>;
+export type InsertPerk = InferInsertModel<typeof schema.perks>;
+
+export type ProductPerk = InferSelectModel<typeof schema.productPerks>;
+export type InsertProductPerk = InferInsertModel<typeof schema.productPerks>;
+
+export type Purchase = InferSelectModel<typeof schema.purchases>;
+export type InsertPurchase = InferInsertModel<typeof schema.purchases>;
+
+export type Subscription = InferSelectModel<typeof schema.subscriptions>;
+export type InsertSubscription = InferInsertModel<typeof schema.subscriptions>;
+
+export type CheckoutSession = InferSelectModel<typeof schema.checkoutSessions>;
+export type InsertCheckoutSession = InferInsertModel<typeof schema.checkoutSessions>;
+
+export type Transaction = InferSelectModel<typeof schema.transactions>;
+export type InsertTransaction = InferInsertModel<typeof schema.transactions>;
+
+export type FxRate = InferSelectModel<typeof schema.fxRates>;
+export type InsertFxRate = InferInsertModel<typeof schema.fxRates>;
+
+export type PurchaseLedger = InferSelectModel<typeof schema.purchaseLedger>;
+export type InsertPurchaseLedger = InferInsertModel<typeof schema.purchaseLedger>;
+export type UpdatePurchaseLedger = InferUpdateModel<typeof schema.purchaseLedger>;
+
+export type AnalyticsIngestDlq = InferSelectModel<typeof schema.analyticsIngestDlq>;
+export type InsertAnalyticsIngestDlq = InferInsertModel<typeof schema.analyticsIngestDlq>;
+export type UpdateAnalyticsIngestDlq = InferUpdateModel<typeof schema.analyticsIngestDlq>;
+
+export type PaymentProviderNotificationProcessed = InferSelectModel<
+  typeof schema.paymentProviderNotificationProcessed
+>;
+export type InsertPaymentProviderNotificationProcessed = InferInsertModel<
+  typeof schema.paymentProviderNotificationProcessed
+>;
+export type UpdatePaymentProviderNotificationProcessed = InferUpdateModel<
+  typeof schema.paymentProviderNotificationProcessed
+>;
+
+export type AppStoreTransaction = InferSelectModel<typeof schema.appStoreTransactions>;
+export type InsertAppStoreTransaction = InferInsertModel<typeof schema.appStoreTransactions>;
+
+export type Paywall = InferSelectModel<typeof schema.paywalls>;
+export type InsertPaywall = InferInsertModel<typeof schema.paywalls>;
+export type PaywallLocation = InferSelectModel<typeof schema.paywallLocations>;
+export type InsertPaywallLocation = InferInsertModel<typeof schema.paywallLocations>;
+export type UpdatePaywallLocation = InferUpdateModel<typeof schema.paywallLocations>;
+
+export type PaywallLocationShowing = InferSelectModel<typeof schema.paywallLocationShowings>;
+export type InsertPaywallLocationShowing = InferInsertModel<typeof schema.paywallLocationShowings>;
+export type UpdatePaywallLocationShowing = InferUpdateModel<typeof schema.paywallLocationShowings>;
+
+// Billing Types
+export type OrganizationBilling = InferSelectModel<typeof schema.organizationBilling>;
+export type InsertOrganizationBilling = InferInsertModel<typeof schema.organizationBilling>;
+export type UpdateOrganizationBilling = InferUpdateModel<typeof schema.organizationBilling>;
+
+export type UsageRecord = InferSelectModel<typeof schema.usageRecords>;
+export type InsertUsageRecord = InferInsertModel<typeof schema.usageRecords>;
+
+export type UsageAggregate = InferSelectModel<typeof schema.usageAggregates>;
+export type InsertUsageAggregate = InferInsertModel<typeof schema.usageAggregates>;
+export type UpdateUsageAggregate = InferUpdateModel<typeof schema.usageAggregates>;
+
+export type BillingWebhookEvent = InferSelectModel<typeof schema.billingWebhookEvents>;
+export type InsertBillingWebhookEvent = InferInsertModel<typeof schema.billingWebhookEvents>;
+
+export type WorkosWebhookEvent = InferSelectModel<typeof schema.workosWebhookEvents>;
+export type InsertWorkosWebhookEvent = InferInsertModel<typeof schema.workosWebhookEvents>;
+
+export type BillingProviderMeter = InferSelectModel<typeof schema.billingProviderMeters>;
+export type InsertBillingProviderMeter = InferInsertModel<typeof schema.billingProviderMeters>;
+
+// Feature Flag Types
+export type FeatureFlag = InferSelectModel<typeof schema.featureFlags>;
+export type InsertFeatureFlag = InferInsertModel<typeof schema.featureFlags>;
+
+export type FeatureFlagTarget = InferSelectModel<typeof schema.featureFlagTargets>;
+export type InsertFeatureFlagTarget = InferInsertModel<typeof schema.featureFlagTargets>;
+
+export type FeatureFlagOverride = InferSelectModel<typeof schema.featureFlagOverrides>;
+export type InsertFeatureFlagOverride = InferInsertModel<typeof schema.featureFlagOverrides>;
+
+export type FeatureFlagVariant = InferSelectModel<typeof schema.featureFlagVariants>;
+export type InsertFeatureFlagVariant = InferInsertModel<typeof schema.featureFlagVariants>;
+
+export type Experiment = InferSelectModel<typeof schema.experiments>;
+export type InsertExperiment = InferInsertModel<typeof schema.experiments>;
+export type UpdateExperiment = InferUpdateModel<typeof schema.experiments>;
+
+export type ExperimentVariant = InferSelectModel<typeof schema.experimentVariants>;
+export type InsertExperimentVariant = InferInsertModel<typeof schema.experimentVariants>;
+
+export type ExperimentTreatment = InferSelectModel<typeof schema.experimentTreatments>;
+export type InsertExperimentTreatment = InferInsertModel<typeof schema.experimentTreatments>;
+
+export type AuditLog = InferSelectModel<typeof schema.auditLogs>;
+export type InsertAuditLog = InferInsertModel<typeof schema.auditLogs>;
diff --git a/packages/db/tests/migrations.integration.test.ts b/packages/db/tests/migrations.integration.test.ts
new file mode 100644
index 000000000..b6d979f17
--- /dev/null
+++ b/packages/db/tests/migrations.integration.test.ts
@@ -0,0 +1,81 @@
+import { Effect } from "effect";
+import { Client } from "pg";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+
+import type { DbConfig } from "../src/db.ts";
+import { runAppDatabaseMigrations } from "../src/migrations.ts";
+
+const adminConfig = {
+  database: "postgres",
+  host: process.env.DATABASE_HOST ?? "127.0.0.1",
+  password: process.env.DATABASE_PASSWORD ?? "password",
+  port: Number(process.env.DATABASE_PORT ?? "5432"),
+  user: process.env.DATABASE_USERNAME ?? "voidhash",
+};
+const databaseName = `voidhash_migrations_${crypto.randomUUID().replaceAll("-", "").slice(0, 12)}`;
+const config: DbConfig = {
+  databaseName,
+  host: adminConfig.host,
+  password: adminConfig.password,
+  port: adminConfig.port,
+  username: adminConfig.user,
+};
+const describeMigrations = process.env.DB_MIGRATIONS_TEST === "1" ? describe : describe.skip;
+
+const withAdminClient = async (run: (client: Client) => Promise<void>) => {
+  const client = new Client(adminConfig);
+  await client.connect();
+  try {
+    await run(client);
+  } finally {
+    await client.end();
+  }
+};
+
+describeMigrations("application database migrations", () => {
+  beforeAll(() =>
+    withAdminClient(async (client) => {
+      await client.query(`CREATE DATABASE "${databaseName}"`);
+    }),
+  );
+
+  afterAll(() =>
+    withAdminClient(async (client) => {
+      await client.query(
+        "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = $1",
+        [databaseName],
+      );
+      await client.query(`DROP DATABASE IF EXISTS "${databaseName}"`);
+    }),
+  );
+
+  it("serializes concurrent runners and records an idempotent later run", async () => {
+    const concurrent = await Promise.all([
+      Effect.runPromise(runAppDatabaseMigrations(config)),
+      Effect.runPromise(runAppDatabaseMigrations(config)),
+    ]);
+    const applied = concurrent.flatMap((result) => result.applied);
+    const later = await Effect.runPromise(runAppDatabaseMigrations(config));
+
+    expect(applied.length).toBeGreaterThan(0);
+    expect(new Set(applied).size).toBe(applied.length);
+    expect(concurrent.some((result) => result.applied.length === 0)).toBe(true);
+    expect(later.applied).toEqual([]);
+    expect(later.skipped).toBe(applied.length);
+
+    const client = new Client({ ...adminConfig, database: databaseName });
+    await client.connect();
+    try {
+      const tracker = await client.query<{ readonly count: string }>(
+        "SELECT count(*)::text AS count FROM __alchemy_migrations",
+      );
+      const tables = await client.query<{ readonly organization: string | null }>(
+        "SELECT to_regclass('public.organization')::text AS organization",
+      );
+      expect(Number(tracker.rows[0]?.count)).toBe(applied.length);
+      expect(tables.rows[0]?.organization).toBe("organization");
+    } finally {
+      await client.end();
+    }
+  });
+});
diff --git a/packages/db/tsconfig.json b/packages/db/tsconfig.json
new file mode 100644
index 000000000..c530b0614
--- /dev/null
+++ b/packages/db/tsconfig.json
@@ -0,0 +1,5 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/db/vitest.mts b/packages/db/vitest.mts
new file mode 100644
index 000000000..2f6ca2f90
--- /dev/null
+++ b/packages/db/vitest.mts
@@ -0,0 +1,10 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    exclude: ["./node_modules/**"],
+    include: ["./tests/**/*.test.ts"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/packages/emails/LICENSE.md b/packages/emails/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/emails/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/emails/index.tsx b/packages/emails/index.tsx
new file mode 100644
index 000000000..e69de29bb
diff --git a/packages/emails/package.json b/packages/emails/package.json
new file mode 100644
index 000000000..e146157ee
--- /dev/null
+++ b/packages/emails/package.json
@@ -0,0 +1,29 @@
+{
+  "name": "@voidhash/emails",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "main": "./index.ts",
+  "exports": {
+    ".": "./index.ts"
+  },
+  "scripts": {
+    "dev": "email dev --dir . --port 3010",
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit"
+  },
+  "dependencies": {
+    "@react-email/components": "0.0.34"
+  },
+  "devDependencies": {
+    "@types/react": "^19.1.5",
+    "@types/react-dom": "^19.1.5",
+    "react-email": "3.0.7",
+    "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0"
+  }
+}
diff --git a/packages/emails/sst-env.d.ts b/packages/emails/sst-env.d.ts
new file mode 100644
index 000000000..eec65b9bd
--- /dev/null
+++ b/packages/emails/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst";
+export {};
diff --git a/packages/emails/tsconfig.json b/packages/emails/tsconfig.json
new file mode 100644
index 000000000..211e06fad
--- /dev/null
+++ b/packages/emails/tsconfig.json
@@ -0,0 +1,11 @@
+{
+  "compilerOptions": {
+    "jsx": "react-jsx",
+    "moduleResolution": "Bundler",
+    "module": "ESNext",
+    "target": "ES2022",
+    "skipLibCheck": true,
+    "strictNullChecks": true
+  },
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/mimic-server/src/rpc/errors.ts b/packages/mimic-server/src/rpc/errors.ts
index f5a4805dc..a32991baa 100644
--- a/packages/mimic-server/src/rpc/errors.ts
+++ b/packages/mimic-server/src/rpc/errors.ts
@@ -5,7 +5,7 @@ const detailsField = {
 } as const;
 
 export class UnauthorizedError extends Schema.ErrorClass<UnauthorizedError>(
-  "@voidhash-mono/mimic-rpc/UnauthorizedError",
+  "@voidhash/mimic-rpc/UnauthorizedError",
 )({
   _tag: Schema.tag("UnauthorizedError"),
   code: Schema.Literal("unauthorized"),
@@ -14,7 +14,7 @@ export class UnauthorizedError extends Schema.ErrorClass<UnauthorizedError>(
 }) {}
 
 export class ForbiddenError extends Schema.ErrorClass<ForbiddenError>(
-  "@voidhash-mono/mimic-rpc/ForbiddenError",
+  "@voidhash/mimic-rpc/ForbiddenError",
 )({
   _tag: Schema.tag("ForbiddenError"),
   code: Schema.Literal("forbidden"),
@@ -23,7 +23,7 @@ export class ForbiddenError extends Schema.ErrorClass<ForbiddenError>(
 }) {}
 
 export class NotFoundError extends Schema.ErrorClass<NotFoundError>(
-  "@voidhash-mono/mimic-rpc/NotFoundError",
+  "@voidhash/mimic-rpc/NotFoundError",
 )({
   _tag: Schema.tag("NotFoundError"),
   code: Schema.Literal("not_found"),
@@ -32,7 +32,7 @@ export class NotFoundError extends Schema.ErrorClass<NotFoundError>(
 }) {}
 
 export class ConflictError extends Schema.ErrorClass<ConflictError>(
-  "@voidhash-mono/mimic-rpc/ConflictError",
+  "@voidhash/mimic-rpc/ConflictError",
 )({
   _tag: Schema.tag("ConflictError"),
   code: Schema.Literal("conflict"),
@@ -41,7 +41,7 @@ export class ConflictError extends Schema.ErrorClass<ConflictError>(
 }) {}
 
 export class ValidationError extends Schema.ErrorClass<ValidationError>(
-  "@voidhash-mono/mimic-rpc/ValidationError",
+  "@voidhash/mimic-rpc/ValidationError",
 )({
   _tag: Schema.tag("ValidationError"),
   code: Schema.Literal("validation_error"),
@@ -50,7 +50,7 @@ export class ValidationError extends Schema.ErrorClass<ValidationError>(
 }) {}
 
 export class VersionConflictError extends Schema.ErrorClass<VersionConflictError>(
-  "@voidhash-mono/mimic-rpc/VersionConflictError",
+  "@voidhash/mimic-rpc/VersionConflictError",
 )({
   _tag: Schema.tag("VersionConflictError"),
   code: Schema.Literal("version_conflict"),
@@ -59,7 +59,7 @@ export class VersionConflictError extends Schema.ErrorClass<VersionConflictError
 }) {}
 
 export class InvalidSchemaError extends Schema.ErrorClass<InvalidSchemaError>(
-  "@voidhash-mono/mimic-rpc/InvalidSchemaError",
+  "@voidhash/mimic-rpc/InvalidSchemaError",
 )({
   _tag: Schema.tag("InvalidSchemaError"),
   code: Schema.Literal("invalid_schema"),
@@ -68,7 +68,7 @@ export class InvalidSchemaError extends Schema.ErrorClass<InvalidSchemaError>(
 }) {}
 
 export class InvalidValueError extends Schema.ErrorClass<InvalidValueError>(
-  "@voidhash-mono/mimic-rpc/InvalidValueError",
+  "@voidhash/mimic-rpc/InvalidValueError",
 )({
   _tag: Schema.tag("InvalidValueError"),
   code: Schema.Literal("invalid_value"),
@@ -77,7 +77,7 @@ export class InvalidValueError extends Schema.ErrorClass<InvalidValueError>(
 }) {}
 
 export class MigrationFailedError extends Schema.ErrorClass<MigrationFailedError>(
-  "@voidhash-mono/mimic-rpc/MigrationFailedError",
+  "@voidhash/mimic-rpc/MigrationFailedError",
 )({
   _tag: Schema.tag("MigrationFailedError"),
   code: Schema.Literal("migration_failed"),
@@ -86,7 +86,7 @@ export class MigrationFailedError extends Schema.ErrorClass<MigrationFailedError
 }) {}
 
 export class InternalError extends Schema.ErrorClass<InternalError>(
-  "@voidhash-mono/mimic-rpc/InternalError",
+  "@voidhash/mimic-rpc/InternalError",
 )({
   _tag: Schema.tag("InternalError"),
   code: Schema.Literal("internal_error"),
diff --git a/packages/mimic-server/src/rpc/middleware.ts b/packages/mimic-server/src/rpc/middleware.ts
index e3aafacda..97a6ab0ef 100644
--- a/packages/mimic-server/src/rpc/middleware.ts
+++ b/packages/mimic-server/src/rpc/middleware.ts
@@ -10,7 +10,7 @@ export interface CurrentUserShape {
 }
 
 export class CurrentUser extends Context.Service<CurrentUser, CurrentUserShape>()(
-  "@voidhash-mono/mimic-rpc/CurrentUser",
+  "@voidhash/mimic-rpc/CurrentUser",
 ) {}
 
 export class AuthMiddleware extends RpcMiddleware.Service<
@@ -18,6 +18,6 @@ export class AuthMiddleware extends RpcMiddleware.Service<
   {
     provides: CurrentUser;
   }
->()("@voidhash-mono/mimic-rpc/AuthMiddleware", {
+>()("@voidhash/mimic-rpc/AuthMiddleware", {
   error: UnauthorizedError,
 }) {}
diff --git a/packages/mimic/package.json b/packages/mimic/package.json
index c7ec1b2db..0412ed44e 100644
--- a/packages/mimic/package.json
+++ b/packages/mimic/package.json
@@ -51,8 +51,8 @@
     "@types/react-dom": "^19.1.9",
     "@voidhash/mimic-core": "workspace:*",
     "jsdom": "^26.1.0",
-    "react": "^19.1.1",
-    "react-dom": "^19.1.1",
+    "react": "catalog:",
+    "react-dom": "catalog:",
     "tsdown": "^0.18.2",
     "typescript": "5.8.3",
     "vite-plus": "0.1.23",
diff --git a/packages/paywall-renderer-web-core/src/preview-tree/types.ts b/packages/paywall-renderer-web-core/src/preview-tree/types.ts
index bcc4e7380..d51d90795 100644
--- a/packages/paywall-renderer-web-core/src/preview-tree/types.ts
+++ b/packages/paywall-renderer-web-core/src/preview-tree/types.ts
@@ -7,10 +7,10 @@
  * `PaywallStyle` uses precise per-key literal unions (`flexDirection?: "row" | …`,
  * `flex?: number`, …), whereas the render side treats every §3.1 style value as
  * `string | number` ({@link PreviewNodeStyle}). This keeps the render side a
- * strict superset of both OSS `PaywallStyle` and `@voidhash-mono/core`'s
+ * strict superset of both OSS `PaywallStyle` and `@voidhash/core`'s
  * effect-Schema `PreviewStyle` (whose decoded values are also `string | number`),
  * so a core-decoded tree stays structurally assignable to {@link PreviewTree}.
- * Validation is the server's job (`PreviewTreeSchema` in `@voidhash-mono/core`);
+ * Validation is the server's job (`PreviewTreeSchema` in `@voidhash/core`);
  * these types exist so renderers do not depend on `effect` or the server.
  */
 
@@ -47,7 +47,7 @@ export interface PreviewGradientStop {
 
 /**
  * A gradient background descriptor. Structurally a superset of both OSS
- * `PaywallBackgroundGradient` (mutable `stops`) and `@voidhash-mono/core`'s
+ * `PaywallBackgroundGradient` (mutable `stops`) and `@voidhash/core`'s
  * effect-decoded gradient (`readonly` `stops`) — `stops` is `readonly` here so
  * either assigns in, keeping {@link PreviewNodeStyle} a strict superset of both.
  */
diff --git a/packages/rpc/LICENSE.md b/packages/rpc/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/packages/rpc/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/packages/rpc/package.json b/packages/rpc/package.json
new file mode 100644
index 000000000..26ca1b3ec
--- /dev/null
+++ b/packages/rpc/package.json
@@ -0,0 +1,22 @@
+{
+  "name": "@voidhash/rpc",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./errors": "./src/errors/index.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit"
+  },
+  "devDependencies": {
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "catalog:"
+  },
+  "peerDependencies": {
+    "effect": "catalog:"
+  }
+}
diff --git a/packages/rpc/src/auth.ts b/packages/rpc/src/auth.ts
new file mode 100644
index 000000000..9911247bd
--- /dev/null
+++ b/packages/rpc/src/auth.ts
@@ -0,0 +1,93 @@
+import { Context, Schema } from "effect";
+
+export const SessionOrganizationSchema = Schema.Struct({
+  id: Schema.String,
+  /** Avatar URL (public file store) or `null` when none is set. */
+  logo: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  permissions: Schema.Array(Schema.String),
+  slug: Schema.String,
+  /** Local mirror of the linked WorkOS organization id. */
+  workosOrganizationId: Schema.String,
+});
+
+export const SessionProjectSchema = Schema.Struct({
+  id: Schema.String,
+  /** Avatar URL (public file store) or `null` when none is set. */
+  logo: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  organizationId: Schema.String,
+  permissions: Schema.Array(Schema.String),
+  slug: Schema.String,
+});
+
+const SessionOrganizationsSchema = Schema.Array(SessionOrganizationSchema);
+const SessionProjectsSchema = Schema.Array(SessionProjectSchema);
+
+export const SessionPersonSchema = Schema.Struct({
+  distinctId: Schema.String,
+});
+
+export const SessionUserSchema = Schema.Struct({
+  createdAt: Schema.Date,
+  email: Schema.String,
+  emailVerified: Schema.Boolean,
+  id: Schema.String,
+  image: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  role: Schema.NullOr(Schema.String),
+  updatedAt: Schema.Date,
+  /**
+   * Stable WorkOS user id (`user_xxx`). Populated when the session came from
+   * a WorkOS auth path (cookie or bearer token). `null` for api-key sessions,
+   * where the WorkOS user id is not available without an extra round-trip.
+   */
+  workosUserId: Schema.NullOr(Schema.String),
+});
+
+export const UserSessionSchema = Schema.Struct({
+  cookie: Schema.NullOr(Schema.String),
+  person: Schema.Null,
+  method: Schema.Literal("user"),
+  name: Schema.String,
+  organizations: SessionOrganizationsSchema,
+  projects: SessionProjectsSchema,
+  user: SessionUserSchema,
+});
+
+export const SecretKeySessionSchema = Schema.Struct({
+  cookie: Schema.Null,
+  person: Schema.Null,
+  method: Schema.Literal("secret-key"),
+  name: Schema.String,
+  organizations: SessionOrganizationsSchema,
+  projects: SessionProjectsSchema,
+  user: Schema.Null,
+});
+
+export const PublishableKeySessionSchema = Schema.Struct({
+  cookie: Schema.Null,
+  person: SessionPersonSchema,
+  method: Schema.Literal("publishable-key"),
+  name: Schema.String,
+  organizations: SessionOrganizationsSchema,
+  projects: SessionProjectsSchema,
+  user: Schema.Null,
+});
+
+export const AuthSessionSchema = Schema.Union([
+  UserSessionSchema,
+  SecretKeySessionSchema,
+  PublishableKeySessionSchema,
+]);
+
+export type UserSession = typeof UserSessionSchema.Type;
+export type SecretKeySession = typeof SecretKeySessionSchema.Type;
+export type PublishableKeySession = typeof PublishableKeySessionSchema.Type;
+export type AnyAuthSession = UserSession | SecretKeySession | PublishableKeySession;
+
+/** Current authenticated session provided to RPC middleware handlers. */
+export class AuthSession extends Context.Service<AuthSession, AnyAuthSession>()(
+  // Keep the existing service identifier while callers migrate away from @voidhash/shared.
+  "shared/auth/AuthSession",
+) {}
diff --git a/packages/rpc/src/errors/AiChat.ts b/packages/rpc/src/errors/AiChat.ts
new file mode 100644
index 000000000..4d65161fd
--- /dev/null
+++ b/packages/rpc/src/errors/AiChat.ts
@@ -0,0 +1,20 @@
+/**
+ * Voidhash AI chat errors — typed errors returned by AI-chat RPCs. Class names
+ * and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Catch-all service failure (db / storage). */
+export class RpcAiChatServiceError extends Schema.TaggedErrorClass<RpcAiChatServiceError>(
+  "RpcAiChatServiceError",
+)("Rpc/AiChatServiceError", { message: Schema.String }) {}
+
+/** Referenced chat row not found. */
+export class RpcAiChatNotFoundError extends Schema.TaggedErrorClass<RpcAiChatNotFoundError>(
+  "RpcAiChatNotFoundError",
+)("Rpc/AiChatNotFoundError", { chatId: Schema.String }) {}
+
+/** Uploaded attachment failed image validation (unsupported type, too large, or malformed). */
+export class RpcAiChatAttachmentValidationError extends Schema.TaggedErrorClass<RpcAiChatAttachmentValidationError>(
+  "RpcAiChatAttachmentValidationError",
+)("Rpc/AiChatAttachmentValidationError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/ApiKey.ts b/packages/rpc/src/errors/ApiKey.ts
new file mode 100644
index 000000000..26c926e30
--- /dev/null
+++ b/packages/rpc/src/errors/ApiKey.ts
@@ -0,0 +1,19 @@
+/**
+ * API key errors — typed errors returned by api-key RPCs. Class names and
+ * `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** API key row not found in the database. */
+export class RpcApiKeyNotFoundError extends Schema.TaggedErrorClass<RpcApiKeyNotFoundError>(
+  "RpcApiKeyNotFoundError",
+)("Rpc/ApiKeyNotFoundError", { message: Schema.String }) {}
+
+/**
+ * Catch-all api-key service error. Wraps `DatabaseError` (and other
+ * infrastructural failures) at the public-method boundary so callers see
+ * one stable error tag.
+ */
+export class RpcApiKeyServiceError extends Schema.TaggedErrorClass<RpcApiKeyServiceError>(
+  "RpcApiKeyServiceError",
+)("Rpc/ApiKeyServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/AuditLog.ts b/packages/rpc/src/errors/AuditLog.ts
new file mode 100644
index 000000000..09779689a
--- /dev/null
+++ b/packages/rpc/src/errors/AuditLog.ts
@@ -0,0 +1,14 @@
+/**
+ * Audit-log errors — typed errors returned by audit-log RPCs. Class names
+ * and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/**
+ * Catch-all audit-log service error. Wraps `DatabaseError` (and other
+ * infrastructural failures) at the public-method boundary so callers see
+ * one stable error tag.
+ */
+export class RpcAuditLogServiceError extends Schema.TaggedErrorClass<RpcAuditLogServiceError>(
+  "RpcAuditLogServiceError",
+)("Rpc/AuditLogServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/Experiment.ts b/packages/rpc/src/errors/Experiment.ts
new file mode 100644
index 000000000..160fa2d85
--- /dev/null
+++ b/packages/rpc/src/errors/Experiment.ts
@@ -0,0 +1,41 @@
+/**
+ * Experiment (A/B testing) errors — typed errors returned by experiment RPCs
+ * (experiment / variant / treatment not found, key conflicts, domain-invariant
+ * violations) plus the catch-all service error. Class names and `_tag` values
+ * are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Experiment row not found. */
+export class RpcExperimentNotFoundError extends Schema.TaggedErrorClass<RpcExperimentNotFoundError>(
+  "RpcExperimentNotFoundError",
+)("Rpc/ExperimentNotFoundError", { message: Schema.String }) {}
+
+/** Experiment key uniqueness invariant violated within a project. */
+export class RpcExperimentKeyAlreadyExistsError extends Schema.TaggedErrorClass<RpcExperimentKeyAlreadyExistsError>(
+  "RpcExperimentKeyAlreadyExistsError",
+)("Rpc/ExperimentKeyAlreadyExistsError", { key: Schema.String }) {}
+
+/** Experiment variant row not found. */
+export class RpcExperimentVariantNotFoundError extends Schema.TaggedErrorClass<RpcExperimentVariantNotFoundError>(
+  "RpcExperimentVariantNotFoundError",
+)("Rpc/ExperimentVariantNotFoundError", { message: Schema.String }) {}
+
+/** Experiment treatment row not found. */
+export class RpcExperimentTreatmentNotFoundError extends Schema.TaggedErrorClass<RpcExperimentTreatmentNotFoundError>(
+  "RpcExperimentTreatmentNotFoundError",
+)("Rpc/ExperimentTreatmentNotFoundError", { message: Schema.String }) {}
+
+/** A domain invariant was violated (weights, locked running experiment, target conflict, …). */
+export class RpcExperimentValidationError extends Schema.TaggedErrorClass<RpcExperimentValidationError>(
+  "RpcExperimentValidationError",
+)("Rpc/ExperimentValidationError", { message: Schema.String }) {}
+
+/**
+ * Catch-all experiment service error. Wraps infrastructural failures (DB,
+ * backing-flag sync) at the public-method boundary so callers see one stable
+ * error tag.
+ */
+export class RpcExperimentServiceError extends Schema.TaggedErrorClass<RpcExperimentServiceError>(
+  "RpcExperimentServiceError",
+)("Rpc/ExperimentServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/FeatureFlag.ts b/packages/rpc/src/errors/FeatureFlag.ts
new file mode 100644
index 000000000..567e94444
--- /dev/null
+++ b/packages/rpc/src/errors/FeatureFlag.ts
@@ -0,0 +1,35 @@
+/**
+ * Feature-flag errors — typed errors returned by feature-flag RPCs (flag,
+ * override, target not found / key conflicts) plus the catch-all service
+ * error. Class names and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Feature-flag row not found. */
+export class RpcFeatureFlagNotFoundError extends Schema.TaggedErrorClass<RpcFeatureFlagNotFoundError>(
+  "RpcFeatureFlagNotFoundError",
+)("Rpc/FeatureFlagNotFoundError", { message: Schema.String }) {}
+
+/** Feature-flag key uniqueness invariant violated within a project. */
+export class RpcFeatureFlagKeyAlreadyExistsError extends Schema.TaggedErrorClass<RpcFeatureFlagKeyAlreadyExistsError>(
+  "RpcFeatureFlagKeyAlreadyExistsError",
+)("Rpc/FeatureFlagKeyAlreadyExistsError", { key: Schema.String }) {}
+
+/** Feature-flag override row not found. */
+export class RpcFeatureFlagOverrideNotFoundError extends Schema.TaggedErrorClass<RpcFeatureFlagOverrideNotFoundError>(
+  "RpcFeatureFlagOverrideNotFoundError",
+)("Rpc/FeatureFlagOverrideNotFoundError", { message: Schema.String }) {}
+
+/** Feature-flag target row not found. */
+export class RpcFeatureFlagTargetNotFoundError extends Schema.TaggedErrorClass<RpcFeatureFlagTargetNotFoundError>(
+  "RpcFeatureFlagTargetNotFoundError",
+)("Rpc/FeatureFlagTargetNotFoundError", { message: Schema.String }) {}
+
+/**
+ * Catch-all feature-flag service error. Wraps `DatabaseError` and other
+ * infrastructural failures at the public-method boundary so callers see one
+ * stable error tag.
+ */
+export class RpcFeatureFlagServiceError extends Schema.TaggedErrorClass<RpcFeatureFlagServiceError>(
+  "RpcFeatureFlagServiceError",
+)("Rpc/FeatureFlagServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/Feedback.ts b/packages/rpc/src/errors/Feedback.ts
new file mode 100644
index 000000000..4e9b9d70a
--- /dev/null
+++ b/packages/rpc/src/errors/Feedback.ts
@@ -0,0 +1,13 @@
+/**
+ * Feedback errors — typed error returned by the feedback RPC. Class name and
+ * `_tag` value are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/**
+ * Catch-all feedback service error. Wraps database/infrastructure failures at
+ * the public-method boundary so callers see one stable error tag.
+ */
+export class RpcFeedbackServiceError extends Schema.TaggedErrorClass<RpcFeedbackServiceError>(
+  "RpcFeedbackServiceError",
+)("Rpc/FeedbackServiceError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/PaymentProviderConfiguration.ts b/packages/rpc/src/errors/PaymentProviderConfiguration.ts
new file mode 100644
index 000000000..debba4c98
--- /dev/null
+++ b/packages/rpc/src/errors/PaymentProviderConfiguration.ts
@@ -0,0 +1,35 @@
+/**
+ * Payment-provider-configuration errors — typed errors returned by
+ * payment-provider-configuration RPCs. Class names and `_tag` values are
+ * namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Configuration row not found. */
+export class RpcPaymentProviderConfigurationNotFoundError extends Schema.TaggedErrorClass<RpcPaymentProviderConfigurationNotFoundError>(
+  "RpcPaymentProviderConfigurationNotFoundError",
+)("Rpc/PaymentProviderConfigurationNotFoundError", { message: Schema.String }) {}
+
+/** Configuration validation failed (parsing, schema). */
+export class RpcPaymentProviderConfigurationValidationError extends Schema.TaggedErrorClass<RpcPaymentProviderConfigurationValidationError>(
+  "RpcPaymentProviderConfigurationValidationError",
+)("Rpc/PaymentProviderConfigurationValidationError", { cause: Schema.String }) {}
+
+/** Configuration key collides with an existing live row. */
+export class RpcPaymentProviderConfigurationKeyUnavailableError extends Schema.TaggedErrorClass<RpcPaymentProviderConfigurationKeyUnavailableError>(
+  "RpcPaymentProviderConfigurationKeyUnavailableError",
+)("Rpc/PaymentProviderConfigurationKeyUnavailableError", { message: Schema.String }) {}
+
+/** A project already has a live configuration for the requested provider. */
+export class RpcPaymentProviderAlreadyExistsError extends Schema.TaggedErrorClass<RpcPaymentProviderAlreadyExistsError>(
+  "RpcPaymentProviderAlreadyExistsError",
+)("Rpc/PaymentProviderAlreadyExistsError", { message: Schema.String }) {}
+
+/**
+ * Catch-all payment-provider-configuration service error. Wraps
+ * `DatabaseError` and other infrastructural failures at the public-method
+ * boundary.
+ */
+export class RpcPaymentProviderConfigurationServiceError extends Schema.TaggedErrorClass<RpcPaymentProviderConfigurationServiceError>(
+  "RpcPaymentProviderConfigurationServiceError",
+)("Rpc/PaymentProviderConfigurationServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/PaymentProviderProduct.ts b/packages/rpc/src/errors/PaymentProviderProduct.ts
new file mode 100644
index 000000000..5526c048e
--- /dev/null
+++ b/packages/rpc/src/errors/PaymentProviderProduct.ts
@@ -0,0 +1,25 @@
+/**
+ * Payment-provider-product errors — typed errors returned by
+ * payment-provider-product RPCs (the join row between a
+ * `PaymentProviderConfiguration` and a `Product`). Class names and `_tag`
+ * values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Provider-product row not found. */
+export class RpcPaymentProviderProductNotFoundError extends Schema.TaggedErrorClass<RpcPaymentProviderProductNotFoundError>(
+  "RpcPaymentProviderProductNotFoundError",
+)("Rpc/PaymentProviderProductNotFoundError", { message: Schema.String }) {}
+
+/** Validation failure on the provider-specific configuration blob. */
+export class RpcPaymentProviderProductValidationError extends Schema.TaggedErrorClass<RpcPaymentProviderProductValidationError>(
+  "RpcPaymentProviderProductValidationError",
+)("Rpc/PaymentProviderProductValidationError", { message: Schema.String }) {}
+
+/**
+ * Catch-all payment-provider-product service error. Wraps `DatabaseError`
+ * and other infrastructural failures at the public-method boundary.
+ */
+export class RpcPaymentProviderProductServiceError extends Schema.TaggedErrorClass<RpcPaymentProviderProductServiceError>(
+  "RpcPaymentProviderProductServiceError",
+)("Rpc/PaymentProviderProductServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/PaywallAsset.ts b/packages/rpc/src/errors/PaywallAsset.ts
new file mode 100644
index 000000000..0c6183547
--- /dev/null
+++ b/packages/rpc/src/errors/PaywallAsset.ts
@@ -0,0 +1,20 @@
+/**
+ * Paywall asset errors — typed errors returned by paywall-asset RPCs. Class
+ * names and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Catch-all service failure (db / storage). */
+export class RpcPaywallAssetServiceError extends Schema.TaggedErrorClass<RpcPaywallAssetServiceError>(
+  "RpcPaywallAssetServiceError",
+)("Rpc/PaywallAssetServiceError", { message: Schema.String }) {}
+
+/** Referenced asset row not found. */
+export class RpcPaywallAssetNotFoundError extends Schema.TaggedErrorClass<RpcPaywallAssetNotFoundError>(
+  "RpcPaywallAssetNotFoundError",
+)("Rpc/PaywallAssetNotFoundError", { assetId: Schema.String }) {}
+
+/** Uploaded image failed validation (unsupported type, too large, or malformed). */
+export class RpcPaywallAssetValidationError extends Schema.TaggedErrorClass<RpcPaywallAssetValidationError>(
+  "RpcPaywallAssetValidationError",
+)("Rpc/PaywallAssetValidationError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/PaywallDeploy.ts b/packages/rpc/src/errors/PaywallDeploy.ts
new file mode 100644
index 000000000..4520eb612
--- /dev/null
+++ b/packages/rpc/src/errors/PaywallDeploy.ts
@@ -0,0 +1,26 @@
+/**
+ * Paywall deploy errors — typed errors returned by the paywall code-deploy
+ * RPCs (dashboard read-side + release activation). Class names and `_tag`
+ * values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/**
+ * Catch-all paywall deploy service error. Wraps `DatabaseError`,
+ * `PaywallArtifactStoreError`, and other infrastructural failures at the
+ * public-method boundary so callers see one stable error tag.
+ */
+export class RpcPaywallDeployServiceError extends Schema.TaggedErrorClass<RpcPaywallDeployServiceError>(
+  "RpcPaywallDeployServiceError",
+)("Rpc/PaywallDeployServiceError", { cause: Schema.String }) {}
+
+/**
+ * A deploy-related validation failure — e.g. activating a release that was
+ * never released. `violations` carries the per-item details.
+ */
+export class RpcPaywallDeployValidationError extends Schema.TaggedErrorClass<RpcPaywallDeployValidationError>(
+  "RpcPaywallDeployValidationError",
+)("Rpc/PaywallDeployValidationError", {
+  message: Schema.String,
+  violations: Schema.Array(Schema.String),
+}) {}
diff --git a/packages/rpc/src/errors/PaywallLocation.ts b/packages/rpc/src/errors/PaywallLocation.ts
new file mode 100644
index 000000000..3ebc3d418
--- /dev/null
+++ b/packages/rpc/src/errors/PaywallLocation.ts
@@ -0,0 +1,28 @@
+/**
+ * Paywall-location errors — typed errors returned by paywall-location RPCs.
+ * Class names and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Location row not found in the database. */
+export class RpcPaywallLocationNotFoundError extends Schema.TaggedErrorClass<RpcPaywallLocationNotFoundError>(
+  "RpcPaywallLocationNotFoundError",
+)("Rpc/PaywallLocationNotFoundError", { message: Schema.String }) {}
+
+/** Slug uniqueness invariant violated within a project. */
+export class RpcPaywallLocationSlugAlreadyExistsError extends Schema.TaggedErrorClass<RpcPaywallLocationSlugAlreadyExistsError>(
+  "RpcPaywallLocationSlugAlreadyExistsError",
+)("Rpc/PaywallLocationSlugAlreadyExistsError", { slug: Schema.String }) {}
+
+/** Showing-assignment input failed validation (missing paywall, archived location, …). */
+export class RpcPaywallLocationShowingValidationError extends Schema.TaggedErrorClass<RpcPaywallLocationShowingValidationError>(
+  "RpcPaywallLocationShowingValidationError",
+)("Rpc/PaywallLocationShowingValidationError", { message: Schema.String }) {}
+
+/**
+ * Catch-all paywall-location service error. Wraps `DatabaseError` and other
+ * infrastructural failures at the public-method boundary.
+ */
+export class RpcPaywallLocationServiceError extends Schema.TaggedErrorClass<RpcPaywallLocationServiceError>(
+  "RpcPaywallLocationServiceError",
+)("Rpc/PaywallLocationServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/PaywallWorkspace.ts b/packages/rpc/src/errors/PaywallWorkspace.ts
new file mode 100644
index 000000000..d21d8fbc2
--- /dev/null
+++ b/packages/rpc/src/errors/PaywallWorkspace.ts
@@ -0,0 +1,22 @@
+/**
+ * Paywall workspace errors — typed errors returned by the workspace RPCs
+ * (server-side paywall filesystem projection + component-manifest cache).
+ * Class names and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/**
+ * Catch-all workspace service error. Wraps DB, mimic-host, and manifest-cache
+ * infrastructural failures at the boundary so callers see one stable tag.
+ */
+export class RpcPaywallWorkspaceError extends Schema.TaggedErrorClass<RpcPaywallWorkspaceError>(
+  "RpcPaywallWorkspaceError",
+)("Rpc/PaywallWorkspaceError", { message: Schema.String }) {}
+
+/**
+ * A recorded component manifest failed validation against the component-manifest
+ * schema (a `ready` upload must carry a well-formed manifest).
+ */
+export class RpcComponentManifestInvalidError extends Schema.TaggedErrorClass<RpcComponentManifestInvalidError>(
+  "RpcComponentManifestInvalidError",
+)("Rpc/ComponentManifestInvalidError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/ProductPerk.ts b/packages/rpc/src/errors/ProductPerk.ts
new file mode 100644
index 000000000..cab180df9
--- /dev/null
+++ b/packages/rpc/src/errors/ProductPerk.ts
@@ -0,0 +1,24 @@
+/**
+ * Product-perk errors — typed errors returned by product-perk RPCs (the
+ * join row between a `Product` and a `Perk`). Class names and `_tag` values
+ * are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/**
+ * Catch-all product-perk service error. Wraps `DatabaseError` (and other
+ * infrastructural failures) at the public-method boundary so callers see
+ * one stable error tag.
+ */
+export class RpcProductPerkServiceError extends Schema.TaggedErrorClass<RpcProductPerkServiceError>(
+  "RpcProductPerkServiceError",
+)("Rpc/ProductPerkServiceError", { cause: Schema.String }) {}
+
+/**
+ * Validation error raised when an input refers to a missing product, perk,
+ * or product-perk row. Distinct from `RpcActionForbiddenError`: the row
+ * simply doesn't exist.
+ */
+export class RpcProductPerkValidationError extends Schema.TaggedErrorClass<RpcProductPerkValidationError>(
+  "RpcProductPerkValidationError",
+)("Rpc/ProductPerkValidationError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/PushNotificationConfiguration.ts b/packages/rpc/src/errors/PushNotificationConfiguration.ts
new file mode 100644
index 000000000..512b9c2ce
--- /dev/null
+++ b/packages/rpc/src/errors/PushNotificationConfiguration.ts
@@ -0,0 +1,32 @@
+/**
+ * Push-notification-configuration errors — typed errors returned by the
+ * push-notification config RPCs (the studio surface for FCM/APNs credentials).
+ * Class names and `_tag` values are namespaced with `Rpc` / `Rpc/`. Kept in the
+ * `push` namespace to avoid colliding with the entrenched payment-provider
+ * webhook "notification" domain.
+ */
+import { Schema } from "effect";
+
+/** Configuration row not found. */
+export class RpcPushNotificationConfigurationNotFoundError extends Schema.TaggedErrorClass<RpcPushNotificationConfigurationNotFoundError>(
+  "RpcPushNotificationConfigurationNotFoundError",
+)("Rpc/PushNotificationConfigurationNotFoundError", { message: Schema.String }) {}
+
+/** Configuration validation failed (schema decode, secret encryption gate). */
+export class RpcPushNotificationConfigurationValidationError extends Schema.TaggedErrorClass<RpcPushNotificationConfigurationValidationError>(
+  "RpcPushNotificationConfigurationValidationError",
+)("Rpc/PushNotificationConfigurationValidationError", { cause: Schema.String }) {}
+
+/** Derived push-provider key collides with an existing live row. */
+export class RpcPushNotificationConfigurationKeyUnavailableError extends Schema.TaggedErrorClass<RpcPushNotificationConfigurationKeyUnavailableError>(
+  "RpcPushNotificationConfigurationKeyUnavailableError",
+)("Rpc/PushNotificationConfigurationKeyUnavailableError", { message: Schema.String }) {}
+
+/**
+ * Catch-all push-notification-configuration service error. Wraps
+ * infrastructural failures (and the fail-closed encryption-gate refusal) at the
+ * public-method boundary.
+ */
+export class RpcPushNotificationConfigurationServiceError extends Schema.TaggedErrorClass<RpcPushNotificationConfigurationServiceError>(
+  "RpcPushNotificationConfigurationServiceError",
+)("Rpc/PushNotificationConfigurationServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/PushNotificationSend.ts b/packages/rpc/src/errors/PushNotificationSend.ts
new file mode 100644
index 000000000..e5c9095d0
--- /dev/null
+++ b/packages/rpc/src/errors/PushNotificationSend.ts
@@ -0,0 +1,21 @@
+/**
+ * Push-notification-send errors — typed errors returned by the read-only
+ * push-notification *send* RPCs (the studio "sent notifications" activity
+ * surface). Kept separate from the config errors so the send-history read path
+ * and the credential CRUD path evolve independently, and namespaced with
+ * `Rpc` / `Rpc/` like the rest of the wire contract.
+ */
+import { Schema } from "effect";
+
+/** A send (or its parent send for a deliveries lookup) was not found. */
+export class RpcPushNotificationSendNotFoundError extends Schema.TaggedErrorClass<RpcPushNotificationSendNotFoundError>(
+  "RpcPushNotificationSendNotFoundError",
+)("Rpc/PushNotificationSendNotFoundError", { message: Schema.String }) {}
+
+/**
+ * Catch-all push-notification-send service error. Wraps infrastructural
+ * failures (DB query errors) at the public-method boundary.
+ */
+export class RpcPushNotificationSendServiceError extends Schema.TaggedErrorClass<RpcPushNotificationSendServiceError>(
+  "RpcPushNotificationSendServiceError",
+)("Rpc/PushNotificationSendServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/analytics.ts b/packages/rpc/src/errors/analytics.ts
new file mode 100644
index 000000000..b38d2fe54
--- /dev/null
+++ b/packages/rpc/src/errors/analytics.ts
@@ -0,0 +1,45 @@
+/**
+ * Analytics errors — typed errors returned by analytics RPCs (invalid time
+ * range, unknown insight, unsupported filter/breakdown) plus the catch-all
+ * service error. Class names and `_tag` values are namespaced with `Rpc` /
+ * `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Time range parameters were rejected during normalisation. */
+export class RpcInvalidTimeRangeError extends Schema.TaggedErrorClass<RpcInvalidTimeRangeError>(
+  "RpcInvalidTimeRangeError",
+)("Rpc/InvalidTimeRangeError", { message: Schema.String }) {}
+
+/** Caller asked for a metric the service doesn't recognise. */
+export class RpcInvalidMetricError extends Schema.TaggedErrorClass<RpcInvalidMetricError>(
+  "RpcInvalidMetricError",
+)("Rpc/InvalidMetricError", { message: Schema.String, metric: Schema.String }) {}
+
+/** Generic invalid analytics query — composition rules violated. */
+export class RpcInvalidAnalyticsQueryError extends Schema.TaggedErrorClass<RpcInvalidAnalyticsQueryError>(
+  "RpcInvalidAnalyticsQueryError",
+)("Rpc/InvalidAnalyticsQueryError", { message: Schema.String }) {}
+
+/** Caller asked for an insight id that's not in the registry. */
+export class RpcUnknownInsightError extends Schema.TaggedErrorClass<RpcUnknownInsightError>(
+  "RpcUnknownInsightError",
+)("Rpc/UnknownInsightError", { insightId: Schema.String, message: Schema.String }) {}
+
+/** Caller filtered on a field the insight doesn't support. */
+export class RpcUnsupportedAnalyticsFilterError extends Schema.TaggedErrorClass<RpcUnsupportedAnalyticsFilterError>(
+  "RpcUnsupportedAnalyticsFilterError",
+)("Rpc/UnsupportedAnalyticsFilterError", { field: Schema.String, message: Schema.String }) {}
+
+/** Caller broke down by a field the insight doesn't support. */
+export class RpcUnsupportedAnalyticsBreakdownError extends Schema.TaggedErrorClass<RpcUnsupportedAnalyticsBreakdownError>(
+  "RpcUnsupportedAnalyticsBreakdownError",
+)("Rpc/UnsupportedAnalyticsBreakdownError", { field: Schema.String, message: Schema.String }) {}
+
+/**
+ * Catch-all analytics service error. Wraps `SqlError`, `DatabaseError`, and
+ * other infrastructural failures at the public-method boundary.
+ */
+export class RpcAnalyticsServiceError extends Schema.TaggedErrorClass<RpcAnalyticsServiceError>(
+  "RpcAnalyticsServiceError",
+)("Rpc/AnalyticsServiceError", { cause: Schema.String, message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/common.ts b/packages/rpc/src/errors/common.ts
new file mode 100644
index 000000000..66097395d
--- /dev/null
+++ b/packages/rpc/src/errors/common.ts
@@ -0,0 +1,29 @@
+/**
+ * Cross-cutting errors only — auth and framework-level failures that any
+ * RPC can raise. These travel over the wire as part of the public RPC
+ * contract.
+ *
+ * Class names and `_tag` values are namespaced with `Rpc` / `Rpc/` so they
+ * cannot collide with errors defined elsewhere in the monorepo.
+ */
+import { Schema } from "effect";
+
+/** Action is forbidden due to insufficient permissions */
+export class RpcActionForbiddenError extends Schema.TaggedErrorClass<RpcActionForbiddenError>(
+  "RpcActionForbiddenError",
+)("Rpc/ActionForbiddenError", { message: Schema.String }) {}
+
+/** Authentication failed */
+export class RpcAuthenticationError extends Schema.TaggedErrorClass<RpcAuthenticationError>(
+  "RpcAuthenticationError",
+)("Rpc/AuthenticationError", { cause: Schema.String, message: Schema.String }) {}
+
+/** User is not authenticated */
+export class RpcNotAuthenticatedError extends Schema.TaggedErrorClass<RpcNotAuthenticatedError>(
+  "RpcNotAuthenticatedError",
+)("Rpc/NotAuthenticatedError", { message: Schema.String }) {}
+
+/** Uploaded avatar failed validation (unsupported type, too large, or malformed). */
+export class RpcAvatarValidationError extends Schema.TaggedErrorClass<RpcAvatarValidationError>(
+  "RpcAvatarValidationError",
+)("Rpc/AvatarValidationError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/index.ts b/packages/rpc/src/errors/index.ts
new file mode 100644
index 000000000..63d5103fa
--- /dev/null
+++ b/packages/rpc/src/errors/index.ts
@@ -0,0 +1,32 @@
+/**
+ * Barrel export for all RPC errors. These are the typed errors that travel
+ * over the wire as part of the RPC contract — anything an RPC handler can
+ * raise lives here so the rpc package stays self-contained and doesn't
+ * leak server-side internals to frontend consumers.
+ */
+export * from "./AiChat.ts";
+export * from "./analytics.ts";
+export * from "./ApiKey.ts";
+export * from "./AuditLog.ts";
+export * from "./common.ts";
+export * from "./Experiment.ts";
+export * from "./FeatureFlag.ts";
+export * from "./Feedback.ts";
+export * from "./organization.ts";
+export * from "./PaywallAsset.ts";
+export * from "./PaymentProviderConfiguration.ts";
+export * from "./PaymentProviderProduct.ts";
+export * from "./PushNotificationConfiguration.ts";
+export * from "./PushNotificationSend.ts";
+export * from "./paywall.ts";
+export * from "./PaywallDeploy.ts";
+export * from "./PaywallLocation.ts";
+export * from "./PaywallWorkspace.ts";
+export * from "./perk.ts";
+export * from "./person.ts";
+export * from "./product.ts";
+export * from "./ProductPerk.ts";
+export * from "./project.ts";
+export * from "./user.ts";
+export * from "./voidql.ts";
+export * from "./webhook.ts";
diff --git a/packages/rpc/src/errors/organization.ts b/packages/rpc/src/errors/organization.ts
new file mode 100644
index 000000000..a02c19282
--- /dev/null
+++ b/packages/rpc/src/errors/organization.ts
@@ -0,0 +1,14 @@
+/**
+ * Organization errors — typed errors returned by organization RPCs. Class
+ * names and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Organization row not found in the database. */
+export class RpcOrganizationNotFoundError extends Schema.TaggedErrorClass<RpcOrganizationNotFoundError>(
+  "RpcOrganizationNotFoundError",
+)("Rpc/OrganizationNotFoundError", { message: Schema.String }) {}
+
+export class RpcOrganizationServiceError extends Schema.TaggedErrorClass<RpcOrganizationServiceError>(
+  "RpcOrganizationServiceError",
+)("Rpc/OrganizationServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/paywall.ts b/packages/rpc/src/errors/paywall.ts
new file mode 100644
index 000000000..f6c69b2ac
--- /dev/null
+++ b/packages/rpc/src/errors/paywall.ts
@@ -0,0 +1,39 @@
+/**
+ * Paywall errors — typed errors returned by paywall RPCs (paywall not found
+ * / slug conflicts) plus the catch-all paywall and paywall-release service
+ * errors. Class names and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Paywall row not found in the database. */
+export class RpcPaywallNotFoundError extends Schema.TaggedErrorClass<RpcPaywallNotFoundError>(
+  "RpcPaywallNotFoundError",
+)("Rpc/PaywallNotFoundError", { message: Schema.String }) {}
+
+/** Paywall slug uniqueness invariant violated within a project. */
+export class RpcPaywallSlugAlreadyExistsError extends Schema.TaggedErrorClass<RpcPaywallSlugAlreadyExistsError>(
+  "RpcPaywallSlugAlreadyExistsError",
+)("Rpc/PaywallSlugAlreadyExistsError", { slug: Schema.String }) {}
+
+/**
+ * Catch-all paywall service error. Wraps `DatabaseError`,
+ * `MimicHostServiceError`, and other infrastructural failures at the
+ * public-method boundary so callers see one stable error tag.
+ */
+export class RpcPaywallServiceError extends Schema.TaggedErrorClass<RpcPaywallServiceError>(
+  "RpcPaywallServiceError",
+)("Rpc/PaywallServiceError", { cause: Schema.String }) {}
+
+/**
+ * Catch-all paywall-release error. Wraps S3, DB, Mimic, and other
+ * infrastructural failures at the public-method boundary so callers see one
+ * stable tag.
+ */
+export class RpcPaywallReleaseError extends Schema.TaggedErrorClass<RpcPaywallReleaseError>(
+  "RpcPaywallReleaseError",
+)("Rpc/PaywallReleaseError", { cause: Schema.optional(Schema.Unknown), message: Schema.String }) {}
+
+/** Release row not found in the database. */
+export class RpcReleaseNotFoundError extends Schema.TaggedErrorClass<RpcReleaseNotFoundError>(
+  "RpcReleaseNotFoundError",
+)("Rpc/ReleaseNotFoundError", { releaseId: Schema.String }) {}
diff --git a/packages/rpc/src/errors/perk.ts b/packages/rpc/src/errors/perk.ts
new file mode 100644
index 000000000..d803b434c
--- /dev/null
+++ b/packages/rpc/src/errors/perk.ts
@@ -0,0 +1,25 @@
+/**
+ * Perk errors — typed errors returned by perk RPCs (perk not found / slug
+ * conflicts) plus the catch-all service error. Class names and `_tag`
+ * values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Perk row not found in the database. */
+export class RpcPerkNotFoundError extends Schema.TaggedErrorClass<RpcPerkNotFoundError>(
+  "RpcPerkNotFoundError",
+)("Rpc/PerkNotFoundError", { message: Schema.String }) {}
+
+/** Perk slug uniqueness invariant violated within a project. */
+export class RpcPerkSlugAlreadyExistsError extends Schema.TaggedErrorClass<RpcPerkSlugAlreadyExistsError>(
+  "RpcPerkSlugAlreadyExistsError",
+)("Rpc/PerkSlugAlreadyExistsError", { slug: Schema.String }) {}
+
+/**
+ * Catch-all perk service error. Wraps `DatabaseError` (and other
+ * infrastructural failures) at the public-method boundary so callers see
+ * one stable error tag.
+ */
+export class RpcPerkServiceError extends Schema.TaggedErrorClass<RpcPerkServiceError>(
+  "RpcPerkServiceError",
+)("Rpc/PerkServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/person.ts b/packages/rpc/src/errors/person.ts
new file mode 100644
index 000000000..24e76c2af
--- /dev/null
+++ b/packages/rpc/src/errors/person.ts
@@ -0,0 +1,25 @@
+/**
+ * Person errors — typed errors returned by person RPCs (person not found /
+ * invalid anonymous id) plus the catch-all service error. Class names and
+ * `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Person not found in the database. */
+export class RpcPersonNotFoundError extends Schema.TaggedErrorClass<RpcPersonNotFoundError>(
+  "RpcPersonNotFoundError",
+)("Rpc/PersonNotFoundError", { id: Schema.String }) {}
+
+/** Anonymous ID is invalid. */
+export class RpcPersonInvalidAnonymousIdError extends Schema.TaggedErrorClass<RpcPersonInvalidAnonymousIdError>(
+  "RpcPersonInvalidAnonymousIdError",
+)("Rpc/PersonInvalidAnonymousIdError", { id: Schema.String }) {}
+
+/**
+ * Catch-all person service error. Wraps `DatabaseError` (and any other
+ * infrastructural failure) at the public-method boundary so callers see one
+ * stable error tag.
+ */
+export class RpcPersonServiceError extends Schema.TaggedErrorClass<RpcPersonServiceError>(
+  "RpcPersonServiceError",
+)("Rpc/PersonServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/product.ts b/packages/rpc/src/errors/product.ts
new file mode 100644
index 000000000..313996bdd
--- /dev/null
+++ b/packages/rpc/src/errors/product.ts
@@ -0,0 +1,25 @@
+/**
+ * Product errors — typed errors returned by product RPCs (product not found
+ * / slug conflicts) plus the catch-all service error. Class names and
+ * `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Product row not found in the database. */
+export class RpcProductNotFoundError extends Schema.TaggedErrorClass<RpcProductNotFoundError>(
+  "RpcProductNotFoundError",
+)("Rpc/ProductNotFoundError", { message: Schema.String }) {}
+
+/** Product slug uniqueness invariant violated within a project. */
+export class RpcProductSlugAlreadyExistsError extends Schema.TaggedErrorClass<RpcProductSlugAlreadyExistsError>(
+  "RpcProductSlugAlreadyExistsError",
+)("Rpc/ProductSlugAlreadyExistsError", { slug: Schema.String }) {}
+
+/**
+ * Catch-all product service error. Wraps `DatabaseError` (and other
+ * infrastructural failures) at the public-method boundary so callers see
+ * one stable error tag.
+ */
+export class RpcProductServiceError extends Schema.TaggedErrorClass<RpcProductServiceError>(
+  "RpcProductServiceError",
+)("Rpc/ProductServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/project.ts b/packages/rpc/src/errors/project.ts
new file mode 100644
index 000000000..d942c0e91
--- /dev/null
+++ b/packages/rpc/src/errors/project.ts
@@ -0,0 +1,19 @@
+/**
+ * Project errors — typed errors returned by project RPCs. Class names and
+ * `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Project row not found in the database. */
+export class RpcProjectNotFoundError extends Schema.TaggedErrorClass<RpcProjectNotFoundError>(
+  "RpcProjectNotFoundError",
+)("Rpc/ProjectNotFoundError", { projectId: Schema.String }) {}
+
+/**
+ * Catch-all project service error. Wraps `DatabaseError` (and other
+ * infrastructural failures) at the public-method boundary so callers see
+ * one stable error tag.
+ */
+export class RpcProjectServiceError extends Schema.TaggedErrorClass<RpcProjectServiceError>(
+  "RpcProjectServiceError",
+)("Rpc/ProjectServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/user.ts b/packages/rpc/src/errors/user.ts
new file mode 100644
index 000000000..fd7898eab
--- /dev/null
+++ b/packages/rpc/src/errors/user.ts
@@ -0,0 +1,13 @@
+/**
+ * User errors — typed errors returned by user RPCs. Class names and `_tag`
+ * values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/**
+ * Catch-all user service error. Wraps any non-typed infrastructural failure
+ * at the public-method boundary so callers see one stable error tag.
+ */
+export class RpcUserServiceError extends Schema.TaggedErrorClass<RpcUserServiceError>(
+  "RpcUserServiceError",
+)("Rpc/UserServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/errors/voidql.ts b/packages/rpc/src/errors/voidql.ts
new file mode 100644
index 000000000..df164472a
--- /dev/null
+++ b/packages/rpc/src/errors/voidql.ts
@@ -0,0 +1,47 @@
+/**
+ * RPC-layer counterparts of the VoidQL domain errors (the 3-layer error
+ * convention). Backend handlers translate each core `VoidQl*` `_tag` into one of
+ * these via `Effect.catchTags`. The internal `VoidQlIsolationError` (a compiler
+ * defect) is mapped to {@link RpcVoidQlExecutionError} so clients never see its
+ * reason — uniform opaque envelopes starve side-channels (§7 L7, §13).
+ */
+import { Schema } from "effect";
+
+/** Query text could not be tokenised/parsed. */
+export class RpcVoidQlSyntaxError extends Schema.TaggedErrorClass<RpcVoidQlSyntaxError>(
+  "RpcVoidQlSyntaxError",
+)("Rpc/VoidQlSyntaxError", { message: Schema.String, hint: Schema.String }) {}
+
+/** A construct outside the supported VoidQL surface (deferred/denied/unknown fn). */
+export class RpcVoidQlUnsupportedError extends Schema.TaggedErrorClass<RpcVoidQlUnsupportedError>(
+  "RpcVoidQlUnsupportedError",
+)("Rpc/VoidQlUnsupportedError", { message: Schema.String, hint: Schema.String }) {}
+
+/** A relation did not resolve to a registered logical view. */
+export class RpcVoidQlSchemaError extends Schema.TaggedErrorClass<RpcVoidQlSchemaError>(
+  "RpcVoidQlSchemaError",
+)("Rpc/VoidQlSchemaError", { message: Schema.String }) {}
+
+/** A column/property did not resolve. */
+export class RpcVoidQlUnknownFieldError extends Schema.TaggedErrorClass<RpcVoidQlUnknownFieldError>(
+  "RpcVoidQlUnknownFieldError",
+)("Rpc/VoidQlUnknownFieldError", {
+  field: Schema.String,
+  message: Schema.String,
+  suggestion: Schema.String,
+}) {}
+
+/** A PII column/namespace was referenced without the capability. */
+export class RpcVoidQlPiiError extends Schema.TaggedErrorClass<RpcVoidQlPiiError>(
+  "RpcVoidQlPiiError",
+)("Rpc/VoidQlPiiError", { message: Schema.String }) {}
+
+/** A parser/AST resource cap was exceeded. */
+export class RpcVoidQlComplexityError extends Schema.TaggedErrorClass<RpcVoidQlComplexityError>(
+  "RpcVoidQlComplexityError",
+)("Rpc/VoidQlComplexityError", { message: Schema.String }) {}
+
+/** Catch-all execution failure — sanitised (no CH internals, no row counts). */
+export class RpcVoidQlExecutionError extends Schema.TaggedErrorClass<RpcVoidQlExecutionError>(
+  "RpcVoidQlExecutionError",
+)("Rpc/VoidQlExecutionError", { cause: Schema.String, message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/webhook.ts b/packages/rpc/src/errors/webhook.ts
new file mode 100644
index 000000000..518898e50
--- /dev/null
+++ b/packages/rpc/src/errors/webhook.ts
@@ -0,0 +1,30 @@
+/**
+ * Webhook errors — typed errors returned by webhook RPCs (webhook endpoint
+ * / delivery not found, validation) plus the catch-all service error. Class
+ * names and `_tag` values are namespaced with `Rpc` / `Rpc/`.
+ */
+import { Schema } from "effect";
+
+/** Webhook endpoint row not found. */
+export class RpcWebhookEndpointNotFoundError extends Schema.TaggedErrorClass<RpcWebhookEndpointNotFoundError>(
+  "RpcWebhookEndpointNotFoundError",
+)("Rpc/WebhookEndpointNotFoundError", { endpointId: Schema.String }) {}
+
+/** Webhook delivery row not found. */
+export class RpcWebhookDeliveryNotFoundError extends Schema.TaggedErrorClass<RpcWebhookDeliveryNotFoundError>(
+  "RpcWebhookDeliveryNotFoundError",
+)("Rpc/WebhookDeliveryNotFoundError", { deliveryId: Schema.String }) {}
+
+/** Webhook input failed validation (URL shape, header limits, etc.). */
+export class RpcWebhookValidationError extends Schema.TaggedErrorClass<RpcWebhookValidationError>(
+  "RpcWebhookValidationError",
+)("Rpc/WebhookValidationError", { message: Schema.String }) {}
+
+/**
+ * Catch-all webhook service error. Wraps `DatabaseError` and other
+ * infrastructural failures at the public-method boundary so callers see one
+ * stable error tag.
+ */
+export class RpcWebhookServiceError extends Schema.TaggedErrorClass<RpcWebhookServiceError>(
+  "RpcWebhookServiceError",
+)("Rpc/WebhookServiceError", { cause: Schema.String }) {}
diff --git a/packages/rpc/src/experimentTreatmentTypes.ts b/packages/rpc/src/experimentTreatmentTypes.ts
new file mode 100644
index 000000000..9c31dc613
--- /dev/null
+++ b/packages/rpc/src/experimentTreatmentTypes.ts
@@ -0,0 +1,102 @@
+/**
+ * Experiment treatment-type registry — the extensibility seam for the A/B
+ * testing system. Each entry declares a kind of "change" an experiment can make
+ * on some platform surface: its config shape (authoring validation) and how
+ * that config compiles into the runtime payload baked onto the backing feature
+ * flag's variant.
+ *
+ * The registry deliberately stops at `configSchema` + `compileToVariantPayload`.
+ * It does NOT carry a serving-resolve closure or lifecycle hooks — those run in
+ * structurally different runtimes per surface (a paywall resolve is a
+ * synchronous SDK request; a notification is an async worker send) and would
+ * re-couple every surface's runtime types into this one frontend-importable
+ * module. Serving-resolve + showing wiring live in each surface's own service.
+ *
+ * This module is dependency-light (only `effect`'s `Schema`) so it can be
+ * imported from the frontend (`apps/www`), the backend, and `@voidhash/core`.
+ */
+import { Schema } from "effect";
+
+/** Platform surfaces an experiment treatment can bind to. Grows over time. */
+export type ExperimentSurface = "paywall_location" | "notification_flow" | "automation";
+
+/** Config for a `paywall_location` treatment: which paywall release to serve at
+ * a given location for the owning variant. */
+export const PaywallLocationTreatmentConfigSchema = Schema.Struct({
+  paywallLocationId: Schema.String,
+  paywallId: Schema.String,
+  paywallReleaseId: Schema.String,
+});
+export type PaywallLocationTreatmentConfig = typeof PaywallLocationTreatmentConfigSchema.Type;
+
+/**
+ * The runtime payload compiled onto a backing feature-flag variant and returned
+ * verbatim by `evaluateFlagsBatch`. Keyed by location so ONE variant assignment
+ * can serve a different paywall release per location (cross-location
+ * consistency for a multi-location experiment). Future surfaces add sibling
+ * keys (e.g. `notificationFlowId`).
+ */
+export interface ExperimentVariantPayload {
+  readonly byLocation?: Record<string, { readonly paywallReleaseId: string }>;
+}
+
+const paywallLocationTreatment = {
+  type: "paywall_location",
+  name: "Paywall at a location",
+  surface: "paywall_location",
+  configSchema: PaywallLocationTreatmentConfigSchema,
+  compileToVariantPayload: (
+    configs: readonly PaywallLocationTreatmentConfig[],
+  ): Partial<ExperimentVariantPayload> => ({
+    byLocation: Object.fromEntries(
+      configs.map((c) => [c.paywallLocationId, { paywallReleaseId: c.paywallReleaseId }]),
+    ),
+  }),
+} as const;
+
+/**
+ * The registry of treatment types. Add an entry to make a new kind of
+ * experiment change authorable and compilable. Adding a new *surface* also
+ * requires a serving-resolve hook + a lifecycle branch in that surface's
+ * service (see `ExperimentService`), plus a studio config picker.
+ */
+export const EXPERIMENT_TREATMENT_TYPES = {
+  paywall_location: paywallLocationTreatment,
+} as const;
+
+export type TreatmentType = keyof typeof EXPERIMENT_TREATMENT_TYPES;
+
+/** Whether a string is a known treatment type. */
+export const isTreatmentType = (t: string): t is TreatmentType =>
+  Object.prototype.hasOwnProperty.call(EXPERIMENT_TREATMENT_TYPES, t);
+
+/**
+ * Fold a variant's treatment rows into the runtime payload baked onto its
+ * backing feature-flag variant. Unknown treatment types are skipped. Configs
+ * are assumed already validated (see `decodeTreatmentConfig`).
+ */
+export const compileVariantPayload = (
+  treatments: ReadonlyArray<{ readonly treatmentType: string; readonly config: unknown }>,
+): ExperimentVariantPayload => {
+  const payload: Record<string, unknown> = {};
+  const byType = new Map<TreatmentType, unknown[]>();
+  for (const t of treatments) {
+    if (!isTreatmentType(t.treatmentType)) continue;
+    const arr = byType.get(t.treatmentType) ?? [];
+    arr.push(t.config);
+    byType.set(t.treatmentType, arr);
+  }
+  for (const [type, configs] of byType) {
+    // The registry value is union-typed across entries; each entry's compile
+    // fn accepts its own config array — bridged here at the registry seam.
+    const compile = EXPERIMENT_TREATMENT_TYPES[type].compileToVariantPayload as (
+      configs: readonly unknown[],
+    ) => Partial<ExperimentVariantPayload>;
+    Object.assign(payload, compile(configs));
+  }
+  return payload as ExperimentVariantPayload;
+};
+
+/** Decode + validate a treatment config against its type's schema. */
+export const decodeTreatmentConfig = (type: TreatmentType, config: unknown) =>
+  Schema.decodeUnknownEffect(EXPERIMENT_TREATMENT_TYPES[type].configSchema)(config);
diff --git a/packages/rpc/src/groups/AiChatRpcsDef.ts b/packages/rpc/src/groups/AiChatRpcsDef.ts
new file mode 100644
index 000000000..8d7947312
--- /dev/null
+++ b/packages/rpc/src/groups/AiChatRpcsDef.ts
@@ -0,0 +1,139 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import {
+  RpcAiChatAttachmentValidationError,
+  RpcAiChatNotFoundError,
+  RpcAiChatServiceError,
+} from "../errors/AiChat.ts";
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/** Chat metadata as returned by the history list (no messages). */
+export const AiChatSummarySchema = Schema.Struct({
+  id: Schema.String,
+  title: Schema.String,
+  chatType: Schema.String,
+  createdAt: Schema.Date,
+  updatedAt: Schema.Date,
+});
+
+/** One full chat, including its JSON-encoded `UIMessage[]`. */
+export const AiChatSchema = Schema.Struct({
+  id: Schema.String,
+  organizationId: Schema.String,
+  projectId: Schema.String,
+  surface: Schema.String,
+  chatType: Schema.String,
+  paywallId: Schema.NullOr(Schema.String),
+  title: Schema.String,
+  /** JSON-encoded AI SDK `UIMessage[]`. */
+  messages: Schema.String,
+  createdAt: Schema.Date,
+  updatedAt: Schema.Date,
+});
+
+/** One stored chat attachment. */
+export const AiChatAttachmentSchema = Schema.Struct({
+  url: Schema.String,
+  name: Schema.String,
+  contentType: Schema.String,
+  sizeBytes: Schema.Number,
+});
+
+/**
+ * Voidhash AI chat persistence + attachments, gated by {@link AuthMiddleware}.
+ * The chat id is minted client-side; `SaveAiChat` upserts by it. Reads/deletes
+ * require org membership; writes additionally require access to the project.
+ */
+export class AiChatRpcsDef extends RpcGroup.make(
+  Rpc.make("SaveAiChat", {
+    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError]),
+    payload: {
+      id: Schema.String,
+      organizationId: Schema.String,
+      projectId: Schema.String,
+      surface: Schema.String,
+      /** "persistent" (listed, resumable) | "single_use" (stored, never listed). */
+      chatType: Schema.String,
+      paywallId: Schema.optional(Schema.String),
+      title: Schema.String,
+      /** JSON-encoded AI SDK `UIMessage[]`. */
+      messages: Schema.String,
+    },
+    success: AiChatSummarySchema,
+  }),
+  Rpc.make("ListAiChats", {
+    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError]),
+    payload: {
+      organizationId: Schema.String,
+      projectId: Schema.String,
+      surface: Schema.String,
+      paywallId: Schema.optional(Schema.String),
+    },
+    success: Schema.Array(AiChatSummarySchema),
+  }),
+  Rpc.make("GetAiChat", {
+    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
+    payload: {
+      chatId: Schema.String,
+    },
+    success: AiChatSchema,
+  }),
+  Rpc.make("DeleteAiChat", {
+    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
+    payload: {
+      chatId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("UploadAiChatAttachment", {
+    error: Schema.Union([
+      RpcAiChatServiceError,
+      RpcActionForbiddenError,
+      RpcAiChatAttachmentValidationError,
+    ]),
+    payload: {
+      chatId: Schema.String,
+      organizationId: Schema.String,
+      name: Schema.String,
+      contentType: Schema.String,
+      dataBase64: Schema.String,
+    },
+    success: AiChatAttachmentSchema,
+  }),
+  Rpc.make("RevertAiChatCheckpoint", {
+    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
+    payload: {
+      chatId: Schema.String,
+    },
+    // The number of documents reverted in the chat's last turn (`0` when the
+    // chat has no checkpoints — a benign no-op the UI can treat as "nothing to
+    // undo").
+    success: Schema.Struct({ revertedDocuments: Schema.Number }),
+  }),
+  /**
+   * Capture the current document tree of `paywallId` as the pre-turn image for a
+   * chat turn, so a later {@link RpcGroup} `RevertAiChatCheckpoint` can restore
+   * it. Called by the client at the START of an AI turn that will mutate the
+   * document (before the model's `edit_document` ops land), in the
+   * document-first authoring model where edits are applied incrementally.
+   *
+   * First-write-wins per `(chatId, turnId, paywallId)`: re-capturing the same
+   * turn is a benign no-op (`captured: false`) so retries/reconnects don't clobber
+   * the original pre-turn image. USER-session only.
+   */
+  Rpc.make("CaptureAiCheckpoint", {
+    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
+    payload: {
+      chatId: Schema.String,
+      /** Stable per-turn id (matches the AI SDK turn) the checkpoint is keyed by. */
+      turnId: Schema.String,
+      /** The document whose current tree is captured as the pre-turn image. */
+      paywallId: Schema.String,
+    },
+    // `captured: true` when this call took the checkpoint, `false` when one
+    // already existed for the turn (first-write-wins no-op).
+    success: Schema.Struct({ captured: Schema.Boolean }),
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/AnalyticsRpcsDef.ts b/packages/rpc/src/groups/AnalyticsRpcsDef.ts
new file mode 100644
index 000000000..aaa62f87d
--- /dev/null
+++ b/packages/rpc/src/groups/AnalyticsRpcsDef.ts
@@ -0,0 +1,275 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import {
+  RpcAnalyticsServiceError,
+  RpcInvalidAnalyticsQueryError,
+  RpcInvalidTimeRangeError,
+  RpcUnknownInsightError,
+  RpcUnsupportedAnalyticsBreakdownError,
+  RpcUnsupportedAnalyticsFilterError,
+} from "../errors/analytics.ts";
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const AnalyticsContext = Schema.Struct({
+  organizationId: Schema.String,
+});
+export type AnalyticsContextType = typeof AnalyticsContext.Type;
+
+export const AnalyticsGranularity = Schema.Union([
+  Schema.Literal("hour"),
+  Schema.Literal("day"),
+  Schema.Literal("week"),
+  Schema.Literal("month"),
+  Schema.Literal("quarter"),
+  Schema.Literal("year"),
+]);
+export type AnalyticsGranularityType = typeof AnalyticsGranularity.Type;
+
+export const AnalyticsTimeRangePreset = Schema.Union([
+  Schema.Literal("today"),
+  Schema.Literal("last_7d"),
+  Schema.Literal("last_30d"),
+  Schema.Literal("last_90d"),
+  Schema.Literal("last_365d"),
+  Schema.Literal("mtd"),
+  Schema.Literal("qtd"),
+  Schema.Literal("ytd"),
+]);
+
+export const AnalyticsTimeRange = Schema.Union([
+  Schema.Struct({
+    preset: AnalyticsTimeRangePreset,
+  }),
+  Schema.Struct({
+    end: Schema.Date,
+    preset: Schema.Literal("custom"),
+    start: Schema.Date,
+  }),
+]);
+export type AnalyticsTimeRangeType = typeof AnalyticsTimeRange.Type;
+
+export const AnalyticsFieldRef = Schema.String;
+export type AnalyticsFieldRefType = typeof AnalyticsFieldRef.Type;
+
+const AnalyticsFieldValuePrimitive = Schema.Union([
+  Schema.String,
+  Schema.Finite,
+  Schema.Boolean,
+  Schema.Null,
+]);
+
+export const AnalyticsFieldValue = Schema.Union([
+  AnalyticsFieldValuePrimitive,
+  Schema.Array(AnalyticsFieldValuePrimitive),
+]);
+export type AnalyticsFieldValueType = typeof AnalyticsFieldValue.Type;
+
+export const AnalyticsFilterPredicate = Schema.Struct({
+  field: AnalyticsFieldRef,
+  op: Schema.Union([
+    Schema.Literal("eq"),
+    Schema.Literal("neq"),
+    Schema.Literal("in"),
+    Schema.Literal("not_in"),
+    Schema.Literal("gt"),
+    Schema.Literal("gte"),
+    Schema.Literal("lt"),
+    Schema.Literal("lte"),
+    Schema.Literal("contains"),
+    Schema.Literal("exists"),
+  ]),
+  type: Schema.Literal("predicate"),
+  value: Schema.optional(AnalyticsFieldValue),
+});
+
+export type AnalyticsFilterType =
+  | typeof AnalyticsFilterPredicate.Type
+  | {
+      readonly filters: ReadonlyArray<AnalyticsFilterType>;
+      readonly type: "and" | "or";
+    }
+  | {
+      readonly filter: AnalyticsFilterType;
+      readonly type: "not";
+    };
+
+// `Schema.Schema<T>` extends `Top` which has `unknown` for `DecodingServices`
+// and `EncodingServices`. Annotating with `Schema.Codec<T, T, never, never>`
+// keeps those service requirements as `never` so they don't pollute callers.
+type AnalyticsFilterCodec = Schema.Codec<AnalyticsFilterType, AnalyticsFilterType, never, never>;
+
+export const AnalyticsFilter: AnalyticsFilterCodec = Schema.Union([
+  AnalyticsFilterPredicate,
+  Schema.Struct({
+    filters: Schema.Array(Schema.suspend((): AnalyticsFilterCodec => AnalyticsFilter)),
+    type: Schema.Literal("and"),
+  }),
+  Schema.Struct({
+    filters: Schema.Array(Schema.suspend((): AnalyticsFilterCodec => AnalyticsFilter)),
+    type: Schema.Literal("or"),
+  }),
+  Schema.Struct({
+    filter: Schema.suspend((): AnalyticsFilterCodec => AnalyticsFilter),
+    type: Schema.Literal("not"),
+  }),
+]);
+
+export const AnalyticsBreakdown = Schema.Struct({
+  field: AnalyticsFieldRef,
+  limit: Schema.optional(Schema.Number),
+  order: Schema.optional(Schema.Union([Schema.Literal("asc"), Schema.Literal("desc")])),
+});
+export type AnalyticsBreakdownType = typeof AnalyticsBreakdown.Type;
+
+export const BuiltInInsightId = Schema.Union([
+  Schema.Literal("builtin/revenue"),
+  Schema.Literal("builtin/mrr"),
+  Schema.Literal("builtin/arr"),
+  Schema.Literal("builtin/mrr_growth_rate"),
+  Schema.Literal("builtin/churn_rate"),
+  Schema.Literal("builtin/churned_revenue"),
+  Schema.Literal("builtin/person_count"),
+  Schema.Literal("builtin/new_persons"),
+  Schema.Literal("builtin/retention"),
+  Schema.Literal("builtin/arpu"),
+  Schema.Literal("builtin/arppu"),
+  Schema.Literal("builtin/active_subscriptions"),
+  Schema.Literal("builtin/active_trials"),
+  Schema.Literal("builtin/active_subscribers_growth"),
+  Schema.Literal("builtin/new_subscriptions"),
+  Schema.Literal("builtin/churned_subscriptions"),
+  Schema.Literal("builtin/subscriber_lifetime_value"),
+  Schema.Literal("builtin/trials"),
+  Schema.Literal("builtin/trial_conversions"),
+  Schema.Literal("builtin/trial_conversion_rate"),
+]);
+export type BuiltInInsightIdType = typeof BuiltInInsightId.Type;
+
+export const AnalyticsInsightQuery = Schema.Struct({
+  breakdowns: Schema.optional(Schema.Array(AnalyticsBreakdown)),
+  context: AnalyticsContext,
+  filter: Schema.optional(AnalyticsFilter),
+  granularity: Schema.optional(AnalyticsGranularity),
+  insightId: BuiltInInsightId,
+  key: Schema.String,
+  limit: Schema.optional(Schema.Number),
+  timeRange: AnalyticsTimeRange,
+});
+export type AnalyticsInsightQueryType = typeof AnalyticsInsightQuery.Type;
+
+export const QueryAnalyticsInsightsRequest = Schema.Struct({
+  queries: Schema.NonEmptyArray(AnalyticsInsightQuery),
+});
+export type QueryAnalyticsInsightsRequestType = typeof QueryAnalyticsInsightsRequest.Type;
+
+export const AnalyticsDataPoint = Schema.Struct({
+  timestamp: Schema.Date,
+  value: Schema.Number,
+});
+export type AnalyticsDataPointType = typeof AnalyticsDataPoint.Type;
+
+export const AnalyticsSummary = Schema.Struct({
+  currency: Schema.optional(Schema.String),
+  value: Schema.Number,
+});
+export type AnalyticsSummaryType = typeof AnalyticsSummary.Type;
+
+export const AnalyticsMetricResult = Schema.Struct({
+  kind: Schema.Literal("metric"),
+  sparkline: Schema.Array(AnalyticsDataPoint),
+  summary: AnalyticsSummary,
+});
+
+export const AnalyticsTimeseriesResult = Schema.Struct({
+  kind: Schema.Literal("timeseries"),
+  series: Schema.Array(AnalyticsDataPoint),
+  summary: AnalyticsSummary,
+});
+
+export const AnalyticsBreakdownRow = Schema.Struct({
+  key: Schema.String,
+  label: Schema.String,
+  value: Schema.Number,
+});
+
+export const AnalyticsBreakdownResult = Schema.Struct({
+  kind: Schema.Literal("breakdown"),
+  rows: Schema.Array(AnalyticsBreakdownRow),
+  summary: Schema.optional(AnalyticsSummary),
+});
+
+export const AnalyticsInsightResult = Schema.Union([
+  AnalyticsMetricResult,
+  AnalyticsTimeseriesResult,
+  AnalyticsBreakdownResult,
+]);
+export type AnalyticsInsightResultType = typeof AnalyticsInsightResult.Type;
+
+export const AnalyticsInsightResponseItem = Schema.Struct({
+  insightId: BuiltInInsightId,
+  key: Schema.String,
+  resolvedTimeRange: Schema.Struct({
+    end: Schema.Date,
+    start: Schema.Date,
+  }),
+  result: AnalyticsInsightResult,
+});
+export type AnalyticsInsightResponseItemType = typeof AnalyticsInsightResponseItem.Type;
+
+export const QueryAnalyticsInsightsResponse = Schema.Struct({
+  results: Schema.Array(AnalyticsInsightResponseItem),
+});
+export type QueryAnalyticsInsightsResponseType = typeof QueryAnalyticsInsightsResponse.Type;
+
+export const RecentAnalyticsEvent = Schema.Struct({
+  captureId: Schema.String,
+  context: Schema.Record(Schema.String, Schema.Unknown),
+  eventId: Schema.String,
+  eventName: Schema.String,
+  identityMode: Schema.String,
+  personDistinctId: Schema.NullOr(Schema.String),
+  personEmail: Schema.NullOr(Schema.String),
+  personId: Schema.NullOr(Schema.String),
+  personName: Schema.NullOr(Schema.String),
+  previousDistinctId: Schema.NullOr(Schema.String),
+  processedAt: Schema.Date,
+  properties: Schema.Record(Schema.String, Schema.Unknown),
+  receivedAt: Schema.Date,
+  requestId: Schema.String,
+});
+export type RecentAnalyticsEventType = typeof RecentAnalyticsEvent.Type;
+
+export const ListRecentAnalyticsEventsRequest = Schema.Struct({
+  limit: Schema.optional(Schema.Number),
+  projectId: Schema.String,
+});
+export type ListRecentAnalyticsEventsRequestType = typeof ListRecentAnalyticsEventsRequest.Type;
+
+export const ListRecentAnalyticsEventsResponse = Schema.Struct({
+  events: Schema.Array(RecentAnalyticsEvent),
+  hasMore: Schema.Boolean,
+});
+export type ListRecentAnalyticsEventsResponseType = typeof ListRecentAnalyticsEventsResponse.Type;
+
+export class AnalyticsRpcsDef extends RpcGroup.make(
+  Rpc.make("ListRecentAnalyticsEvents", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: ListRecentAnalyticsEventsRequest,
+    success: ListRecentAnalyticsEventsResponse,
+  }),
+  Rpc.make("QueryAnalyticsInsights", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcAnalyticsServiceError,
+      RpcInvalidAnalyticsQueryError,
+      RpcInvalidTimeRangeError,
+      RpcUnknownInsightError,
+      RpcUnsupportedAnalyticsBreakdownError,
+      RpcUnsupportedAnalyticsFilterError,
+    ]),
+    payload: QueryAnalyticsInsightsRequest,
+    success: QueryAnalyticsInsightsResponse,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/ApiKeyRpcsDef.ts b/packages/rpc/src/groups/ApiKeyRpcsDef.ts
new file mode 100644
index 000000000..75456a82c
--- /dev/null
+++ b/packages/rpc/src/groups/ApiKeyRpcsDef.ts
@@ -0,0 +1,104 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcApiKeyNotFoundError, RpcApiKeyServiceError } from "../errors/ApiKey.ts";
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const ApiKey = Schema.Struct({
+  end: Schema.String,
+  id: Schema.String,
+  isPublic: Schema.Boolean,
+  key: Schema.String,
+  name: Schema.String,
+  prefix: Schema.String,
+  projectId: Schema.String,
+});
+
+export const ApiKeyWithRawKey = Schema.Struct({
+  end: Schema.String,
+  id: Schema.String,
+  isPublic: Schema.Boolean,
+  name: Schema.String,
+  prefix: Schema.String,
+  projectId: Schema.String,
+  rawKey: Schema.String,
+});
+
+export const UserApiKey = Schema.Struct({
+  createdAt: Schema.Date,
+  enabled: Schema.NullOr(Schema.Boolean),
+  end: Schema.NullOr(Schema.String),
+  expiresAt: Schema.NullOr(Schema.Date),
+  id: Schema.String,
+  name: Schema.NullOr(Schema.String),
+  prefix: Schema.NullOr(Schema.String),
+});
+
+export const UserApiKeyWithRawKey = Schema.Struct({
+  createdAt: Schema.Date,
+  end: Schema.String,
+  id: Schema.String,
+  name: Schema.String,
+  prefix: Schema.String,
+  rawKey: Schema.String,
+});
+
+export class ApiKeyRpcsDef extends RpcGroup.make(
+  Rpc.make("CreateSecretKey", {
+    error: Schema.Union([RpcApiKeyServiceError, RpcActionForbiddenError]),
+    payload: {
+      name: Schema.String,
+      projectId: Schema.String,
+    },
+    success: ApiKeyWithRawKey,
+  }),
+  Rpc.make("ListApiKeys", {
+    error: Schema.Union([RpcApiKeyServiceError, RpcActionForbiddenError]),
+    payload: {
+      projectId: Schema.String,
+    },
+    success: Schema.Array(ApiKey),
+  }),
+  Rpc.make("GetApiKeyById", {
+    error: Schema.Union([RpcApiKeyServiceError, RpcApiKeyNotFoundError, RpcActionForbiddenError]),
+    payload: {
+      apiKeyId: Schema.String,
+    },
+    success: ApiKey,
+  }),
+  Rpc.make("RotateSecretKey", {
+    error: Schema.Union([RpcApiKeyServiceError, RpcApiKeyNotFoundError, RpcActionForbiddenError]),
+    payload: {
+      apiKeyId: Schema.String,
+    },
+    success: ApiKeyWithRawKey,
+  }),
+  Rpc.make("DeleteApiKey", {
+    error: Schema.Union([RpcApiKeyServiceError, RpcApiKeyNotFoundError, RpcActionForbiddenError]),
+    payload: {
+      apiKeyId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("CreateUserApiKey", {
+    error: Schema.Union([RpcApiKeyServiceError]),
+    payload: {
+      name: Schema.String,
+      prefix: Schema.String,
+    },
+    success: UserApiKeyWithRawKey,
+  }),
+  Rpc.make("ListUserApiKeys", {
+    error: Schema.Union([RpcApiKeyServiceError]),
+    payload: {},
+    success: Schema.Array(UserApiKey),
+  }),
+  Rpc.make("RevokeUserApiKey", {
+    error: Schema.Union([RpcApiKeyServiceError, RpcApiKeyNotFoundError]),
+    payload: {
+      userApiKeyId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/ExperimentRpcsDef.ts b/packages/rpc/src/groups/ExperimentRpcsDef.ts
new file mode 100644
index 000000000..22db532d6
--- /dev/null
+++ b/packages/rpc/src/groups/ExperimentRpcsDef.ts
@@ -0,0 +1,236 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcExperimentKeyAlreadyExistsError,
+  RpcExperimentNotFoundError,
+  RpcExperimentServiceError,
+  RpcExperimentTreatmentNotFoundError,
+  RpcExperimentValidationError,
+  RpcExperimentVariantNotFoundError,
+} from "../errors/Experiment.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const RpcExperimentVariant = Schema.Struct({
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  experimentId: Schema.String,
+  id: Schema.String,
+  isControl: Schema.Boolean,
+  key: Schema.String,
+  name: Schema.String,
+  updatedAt: Schema.NullOr(Schema.Date),
+  weightBps: Schema.Number,
+});
+
+export const RpcExperimentTreatment = Schema.Struct({
+  archivedAt: Schema.NullOr(Schema.Date),
+  config: Schema.Unknown,
+  createdAt: Schema.NullOr(Schema.Date),
+  experimentId: Schema.String,
+  id: Schema.String,
+  treatmentType: Schema.String,
+  updatedAt: Schema.NullOr(Schema.Date),
+  variantId: Schema.String,
+});
+
+/** Summary of the backing feature flag (runtime assignment artifact). */
+export const RpcExperimentBackingFlag = Schema.Struct({
+  enabled: Schema.Boolean,
+  id: Schema.String,
+  key: Schema.String,
+  rolloutBps: Schema.Number,
+});
+
+const experimentScalarFields = {
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  createdByUserId: Schema.NullOr(Schema.String),
+  description: Schema.NullOr(Schema.String),
+  endedAt: Schema.NullOr(Schema.Date),
+  featureFlagId: Schema.String,
+  hypothesis: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  key: Schema.String,
+  name: Schema.String,
+  primaryMetricEventName: Schema.String,
+  projectId: Schema.String,
+  secondaryMetricEventNames: Schema.NullOr(Schema.Array(Schema.String)),
+  startedAt: Schema.NullOr(Schema.Date),
+  status: Schema.Number,
+  updatedAt: Schema.NullOr(Schema.Date),
+  updatedByUserId: Schema.NullOr(Schema.String),
+  version: Schema.Number,
+  winningVariantId: Schema.NullOr(Schema.String),
+};
+
+export const RpcExperiment = Schema.Struct({
+  ...experimentScalarFields,
+  backingFlag: Schema.NullOr(RpcExperimentBackingFlag),
+  treatments: Schema.Array(RpcExperimentTreatment),
+  variants: Schema.Array(RpcExperimentVariant),
+});
+
+export const RpcExperimentListItem = Schema.Struct({
+  ...experimentScalarFields,
+  variantCount: Schema.Number,
+});
+
+export const RpcExperimentVariantResult = Schema.Struct({
+  conversionRate: Schema.Number,
+  conversions: Schema.Number,
+  exposures: Schema.Number,
+  revenueUsd: Schema.Number,
+  variantKey: Schema.String,
+});
+
+export const RpcExperimentResults = Schema.Struct({
+  variants: Schema.Array(RpcExperimentVariantResult),
+});
+
+const RpcVariantInput = Schema.Struct({
+  isControl: Schema.Boolean,
+  key: Schema.String,
+  name: Schema.String,
+  weightBps: Schema.Number,
+});
+
+const commonError = Schema.Union([RpcExperimentServiceError, RpcActionForbiddenError]);
+const notFoundError = Schema.Union([
+  RpcExperimentServiceError,
+  RpcExperimentNotFoundError,
+  RpcActionForbiddenError,
+]);
+const editError = Schema.Union([
+  RpcExperimentServiceError,
+  RpcExperimentNotFoundError,
+  RpcExperimentValidationError,
+  RpcExperimentVariantNotFoundError,
+  RpcActionForbiddenError,
+]);
+
+export class ExperimentRpcsDef extends RpcGroup.make(
+  Rpc.make("ListExperiments", {
+    error: commonError,
+    payload: {
+      includeArchived: Schema.optional(Schema.Boolean),
+      projectId: Schema.String,
+    },
+    success: Schema.Array(RpcExperimentListItem),
+  }),
+  Rpc.make("GetExperiment", {
+    error: notFoundError,
+    payload: { id: Schema.String },
+    success: RpcExperiment,
+  }),
+  Rpc.make("CreateExperiment", {
+    error: Schema.Union([
+      RpcExperimentServiceError,
+      RpcExperimentKeyAlreadyExistsError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      description: Schema.optional(Schema.String),
+      hypothesis: Schema.optional(Schema.String),
+      key: Schema.String,
+      name: Schema.String,
+      primaryMetricEventName: Schema.String,
+      projectId: Schema.String,
+      secondaryMetricEventNames: Schema.optional(Schema.Array(Schema.String)),
+    },
+    success: Schema.Struct({ id: Schema.String }),
+  }),
+  Rpc.make("UpdateExperiment", {
+    error: Schema.Union([
+      RpcExperimentServiceError,
+      RpcExperimentNotFoundError,
+      RpcExperimentValidationError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      description: Schema.optional(Schema.NullOr(Schema.String)),
+      hypothesis: Schema.optional(Schema.NullOr(Schema.String)),
+      id: Schema.String,
+      name: Schema.optional(Schema.String),
+      primaryMetricEventName: Schema.optional(Schema.String),
+      secondaryMetricEventNames: Schema.optional(Schema.NullOr(Schema.Array(Schema.String))),
+    },
+    success: RpcExperiment,
+  }),
+  Rpc.make("ReplaceExperimentVariants", {
+    error: editError,
+    payload: {
+      experimentId: Schema.String,
+      variants: Schema.Array(RpcVariantInput),
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("UpsertExperimentTreatment", {
+    error: editError,
+    payload: {
+      config: Schema.Unknown,
+      experimentId: Schema.String,
+      treatmentType: Schema.String,
+      variantId: Schema.String,
+    },
+    success: Schema.Struct({ id: Schema.String }),
+  }),
+  Rpc.make("RemoveExperimentTreatment", {
+    error: Schema.Union([
+      RpcExperimentServiceError,
+      RpcExperimentTreatmentNotFoundError,
+      RpcExperimentValidationError,
+      RpcExperimentNotFoundError,
+      RpcActionForbiddenError,
+    ]),
+    payload: { id: Schema.String },
+    success: Schema.Void,
+  }),
+  Rpc.make("StartExperiment", {
+    error: Schema.Union([
+      RpcExperimentServiceError,
+      RpcExperimentNotFoundError,
+      RpcExperimentValidationError,
+      RpcActionForbiddenError,
+    ]),
+    payload: { id: Schema.String },
+    success: Schema.Void,
+  }),
+  Rpc.make("PauseExperiment", {
+    error: Schema.Union([
+      RpcExperimentServiceError,
+      RpcExperimentNotFoundError,
+      RpcExperimentValidationError,
+      RpcActionForbiddenError,
+    ]),
+    payload: { id: Schema.String },
+    success: Schema.Void,
+  }),
+  Rpc.make("ConcludeExperiment", {
+    error: editError,
+    payload: {
+      id: Schema.String,
+      winningVariantId: Schema.optional(Schema.String),
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("ArchiveExperiment", {
+    error: notFoundError,
+    payload: { id: Schema.String },
+    success: Schema.Void,
+  }),
+  Rpc.make("RestoreExperiment", {
+    error: notFoundError,
+    payload: { id: Schema.String },
+    success: Schema.Void,
+  }),
+  Rpc.make("GetExperimentResults", {
+    error: commonError,
+    payload: {
+      days: Schema.optional(Schema.Number),
+      experimentId: Schema.String,
+    },
+    success: RpcExperimentResults,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/FeatureFlagRpcsDef.ts b/packages/rpc/src/groups/FeatureFlagRpcsDef.ts
new file mode 100644
index 000000000..9b178ffdb
--- /dev/null
+++ b/packages/rpc/src/groups/FeatureFlagRpcsDef.ts
@@ -0,0 +1,258 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcAuditLogServiceError } from "../errors/AuditLog.ts";
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcFeatureFlagKeyAlreadyExistsError,
+  RpcFeatureFlagNotFoundError,
+  RpcFeatureFlagOverrideNotFoundError,
+  RpcFeatureFlagServiceError,
+  RpcFeatureFlagTargetNotFoundError,
+} from "../errors/FeatureFlag.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const RpcFeatureFlagTarget = Schema.Struct({
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  featureFlagId: Schema.String,
+  id: Schema.String,
+  identityType: Schema.Number,
+  identityValue: Schema.String,
+  listType: Schema.Number,
+  updatedAt: Schema.NullOr(Schema.Date),
+});
+
+export const RpcFeatureFlagOverride = Schema.Struct({
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  createdByUserId: Schema.NullOr(Schema.String),
+  featureFlagId: Schema.String,
+  forcedEnabled: Schema.NullOr(Schema.Boolean),
+  id: Schema.String,
+  identityType: Schema.Number,
+  identityValue: Schema.String,
+  note: Schema.NullOr(Schema.String),
+  updatedAt: Schema.NullOr(Schema.Date),
+  updatedByUserId: Schema.NullOr(Schema.String),
+});
+
+export const RpcFeatureFlagVariant = Schema.Struct({
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  featureFlagId: Schema.String,
+  id: Schema.String,
+  key: Schema.String,
+  name: Schema.String,
+  payload: Schema.NullOr(Schema.Unknown),
+  updatedAt: Schema.NullOr(Schema.Date),
+  weightBps: Schema.Number,
+});
+
+export const RpcFeatureFlag = Schema.Struct({
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  createdByUserId: Schema.NullOr(Schema.String),
+  description: Schema.NullOr(Schema.String),
+  enabled: Schema.Boolean,
+  id: Schema.String,
+  internal: Schema.Boolean,
+  key: Schema.String,
+  name: Schema.String,
+  overrides: Schema.Array(RpcFeatureFlagOverride),
+  ownerId: Schema.NullOr(Schema.String),
+  ownerType: Schema.NullOr(Schema.String),
+  projectId: Schema.String,
+  rolloutBps: Schema.Number,
+  targets: Schema.Array(RpcFeatureFlagTarget),
+  updatedAt: Schema.NullOr(Schema.Date),
+  updatedByUserId: Schema.NullOr(Schema.String),
+  variants: Schema.Array(RpcFeatureFlagVariant),
+  version: Schema.Number,
+});
+
+export const RpcFeatureFlagListItem = Schema.Struct({
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  description: Schema.NullOr(Schema.String),
+  enabled: Schema.Boolean,
+  id: Schema.String,
+  internal: Schema.Boolean,
+  key: Schema.String,
+  name: Schema.String,
+  ownerId: Schema.NullOr(Schema.String),
+  ownerType: Schema.NullOr(Schema.String),
+  projectId: Schema.String,
+  rolloutBps: Schema.Number,
+  updatedAt: Schema.NullOr(Schema.Date),
+  variantCount: Schema.Number,
+  version: Schema.Number,
+});
+
+const commonError = Schema.Union([
+  RpcFeatureFlagServiceError,
+  RpcActionForbiddenError,
+  RpcAuditLogServiceError,
+]);
+const flagNotFoundError = Schema.Union([
+  RpcFeatureFlagServiceError,
+  RpcFeatureFlagNotFoundError,
+  RpcActionForbiddenError,
+  RpcAuditLogServiceError,
+]);
+
+export class FeatureFlagRpcsDef extends RpcGroup.make(
+  Rpc.make("ListFeatureFlags", {
+    error: commonError,
+    payload: {
+      includeArchived: Schema.optional(Schema.Boolean),
+      projectId: Schema.String,
+    },
+    success: Schema.Array(RpcFeatureFlagListItem),
+  }),
+  Rpc.make("GetFeatureFlag", {
+    error: flagNotFoundError,
+    payload: {
+      id: Schema.String,
+    },
+    success: RpcFeatureFlag,
+  }),
+  Rpc.make("CreateFeatureFlag", {
+    error: Schema.Union([
+      RpcFeatureFlagServiceError,
+      RpcFeatureFlagKeyAlreadyExistsError,
+      RpcActionForbiddenError,
+      RpcAuditLogServiceError,
+    ]),
+    payload: {
+      description: Schema.optional(Schema.String),
+      key: Schema.String,
+      name: Schema.String,
+      projectId: Schema.String,
+    },
+    success: Schema.Struct({ id: Schema.String }),
+  }),
+  Rpc.make("UpdateFeatureFlag", {
+    error: Schema.Union([
+      RpcFeatureFlagServiceError,
+      RpcFeatureFlagNotFoundError,
+      RpcFeatureFlagKeyAlreadyExistsError,
+      RpcActionForbiddenError,
+      RpcAuditLogServiceError,
+    ]),
+    payload: {
+      description: Schema.optional(Schema.NullOr(Schema.String)),
+      enabled: Schema.optional(Schema.Boolean),
+      id: Schema.String,
+      key: Schema.optional(Schema.String),
+      name: Schema.optional(Schema.String),
+      rolloutBps: Schema.optional(Schema.Number),
+    },
+    success: RpcFeatureFlag,
+  }),
+  Rpc.make("ArchiveFeatureFlag", {
+    error: flagNotFoundError,
+    payload: {
+      id: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("RestoreFeatureFlag", {
+    error: flagNotFoundError,
+    payload: {
+      id: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("UpsertFeatureFlagOverride", {
+    error: Schema.Union([
+      RpcFeatureFlagServiceError,
+      RpcFeatureFlagNotFoundError,
+      RpcActionForbiddenError,
+      RpcAuditLogServiceError,
+    ]),
+    payload: {
+      featureFlagId: Schema.String,
+      forcedEnabled: Schema.optional(Schema.NullOr(Schema.Boolean)),
+      identityType: Schema.Number,
+      identityValue: Schema.String,
+      note: Schema.optional(Schema.String),
+    },
+    success: Schema.Struct({ id: Schema.String }),
+  }),
+  Rpc.make("ArchiveFeatureFlagOverride", {
+    error: Schema.Union([
+      RpcFeatureFlagServiceError,
+      RpcFeatureFlagOverrideNotFoundError,
+      RpcActionForbiddenError,
+      RpcAuditLogServiceError,
+    ]),
+    payload: {
+      id: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("ListFeatureFlagOverridesByFlag", {
+    error: flagNotFoundError,
+    payload: {
+      featureFlagId: Schema.String,
+    },
+    success: Schema.Array(RpcFeatureFlagOverride),
+  }),
+  Rpc.make("ListFeatureFlagOverridesByPerson", {
+    error: commonError,
+    payload: {
+      identityType: Schema.Number,
+      identityValue: Schema.String,
+      projectId: Schema.String,
+    },
+    success: Schema.Array(RpcFeatureFlagOverride),
+  }),
+  Rpc.make("UpsertFeatureFlagTarget", {
+    error: Schema.Union([
+      RpcFeatureFlagServiceError,
+      RpcFeatureFlagNotFoundError,
+      RpcActionForbiddenError,
+      RpcAuditLogServiceError,
+    ]),
+    payload: {
+      featureFlagId: Schema.String,
+      identityType: Schema.Number,
+      identityValue: Schema.String,
+      listType: Schema.Number,
+    },
+    success: Schema.Struct({ id: Schema.String }),
+  }),
+  Rpc.make("ArchiveFeatureFlagTarget", {
+    error: Schema.Union([
+      RpcFeatureFlagServiceError,
+      RpcFeatureFlagTargetNotFoundError,
+      RpcActionForbiddenError,
+      RpcAuditLogServiceError,
+    ]),
+    payload: {
+      id: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("UpdateFeatureFlagVariants", {
+    error: Schema.Union([
+      RpcFeatureFlagServiceError,
+      RpcFeatureFlagNotFoundError,
+      RpcActionForbiddenError,
+      RpcAuditLogServiceError,
+    ]),
+    payload: {
+      featureFlagId: Schema.String,
+      variants: Schema.Array(
+        Schema.Struct({
+          key: Schema.String,
+          name: Schema.String,
+          payload: Schema.optional(Schema.Unknown),
+          weightBps: Schema.Number,
+        }),
+      ),
+    },
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/FeedbackRpcsDef.ts b/packages/rpc/src/groups/FeedbackRpcsDef.ts
new file mode 100644
index 000000000..0e744ee52
--- /dev/null
+++ b/packages/rpc/src/groups/FeedbackRpcsDef.ts
@@ -0,0 +1,38 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcFeedbackServiceError } from "../errors/Feedback.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/** Result of a successful submission — the id of the stored feedback row. */
+export const SubmitFeedbackResult = Schema.Struct({
+  id: Schema.String,
+});
+
+/**
+ * Customer-facing feedback RPC, gated by {@link AuthMiddleware} (any
+ * authenticated user). The submitter identity is derived server-side from the
+ * session; the client only supplies the topic/sentiment/message plus the
+ * org/project/page context it currently sits on.
+ */
+export class FeedbackRpcsDef extends RpcGroup.make(
+  Rpc.make("SubmitFeedback", {
+    error: Schema.Union([RpcFeedbackServiceError]),
+    payload: {
+      // A `FeedbackTopic` product-area slug (see `@voidhash/lib`). Left as a
+      // free string on the wire — the studio topic select is the source of valid
+      // values, and the set evolves with the product — so the rpc contract does
+      // not have to be kept in lockstep. `FeedbackService` truncates to the
+      // column limit before persisting.
+      topic: Schema.String,
+      /** Ordinal 1–4 sentiment (`FeedbackSentiment`); omitted when not picked. */
+      sentiment: Schema.optional(Schema.Number),
+      message: Schema.String,
+      organizationId: Schema.optional(Schema.String),
+      projectId: Schema.optional(Schema.String),
+      pathname: Schema.optional(Schema.String),
+      userAgent: Schema.optional(Schema.String),
+    },
+    success: SubmitFeedbackResult,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/OrganizationRpcsDef.ts b/packages/rpc/src/groups/OrganizationRpcsDef.ts
new file mode 100644
index 000000000..61a16d504
--- /dev/null
+++ b/packages/rpc/src/groups/OrganizationRpcsDef.ts
@@ -0,0 +1,69 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError, RpcAvatarValidationError } from "../errors/common.ts";
+import {
+  RpcOrganizationNotFoundError,
+  RpcOrganizationServiceError,
+} from "../errors/organization.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const Organization = Schema.Struct({
+  id: Schema.String,
+  name: Schema.String,
+  slug: Schema.String,
+});
+
+export class OrganizationRpcsDef extends RpcGroup.make(
+  Rpc.make("CreateOrganization", {
+    error: RpcOrganizationServiceError,
+    payload: {
+      name: Schema.String,
+    },
+    success: Organization,
+  }),
+  Rpc.make("UpdateOrganization", {
+    error: Schema.Union([
+      RpcOrganizationServiceError,
+      RpcActionForbiddenError,
+      RpcOrganizationNotFoundError,
+    ]),
+    payload: {
+      name: Schema.String,
+      organizationId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("DeleteOrganization", {
+    error: Schema.Union([RpcOrganizationServiceError, RpcActionForbiddenError]),
+    payload: {
+      organizationId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("SetOrganizationAvatar", {
+    error: Schema.Union([
+      RpcOrganizationServiceError,
+      RpcActionForbiddenError,
+      RpcOrganizationNotFoundError,
+      RpcAvatarValidationError,
+    ]),
+    payload: {
+      contentType: Schema.String,
+      imageBase64: Schema.String,
+      organizationId: Schema.String,
+    },
+    success: Schema.Struct({ logoUrl: Schema.String }),
+  }),
+  Rpc.make("RemoveOrganizationAvatar", {
+    error: Schema.Union([
+      RpcOrganizationServiceError,
+      RpcActionForbiddenError,
+      RpcOrganizationNotFoundError,
+    ]),
+    payload: {
+      organizationId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaymentProviderConfigurationRpcsDef.ts b/packages/rpc/src/groups/PaymentProviderConfigurationRpcsDef.ts
new file mode 100644
index 000000000..5cf11872f
--- /dev/null
+++ b/packages/rpc/src/groups/PaymentProviderConfigurationRpcsDef.ts
@@ -0,0 +1,91 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPaymentProviderAlreadyExistsError,
+  RpcPaymentProviderConfigurationKeyUnavailableError,
+  RpcPaymentProviderConfigurationNotFoundError,
+  RpcPaymentProviderConfigurationServiceError,
+  RpcPaymentProviderConfigurationValidationError,
+} from "../errors/PaymentProviderConfiguration.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const PaymentProviderConfiguration = Schema.Struct({
+  activeProviderId: Schema.NullOr(Schema.String),
+  configuration: Schema.NullOr(Schema.ObjectKeyword),
+  createdAt: Schema.NullOr(Schema.Date),
+  deletedAt: Schema.NullOr(Schema.Date),
+  enabled: Schema.Boolean,
+  id: Schema.String,
+  name: Schema.String,
+  paymentProviderKey: Schema.String,
+  projectId: Schema.String,
+  providerId: Schema.String,
+  updatedAt: Schema.NullOr(Schema.Date),
+});
+
+export class PaymentProviderConfigurationRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPaymentProviderConfigurations", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaymentProviderConfigurationServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(PaymentProviderConfiguration),
+  }),
+  Rpc.make("GetPaymentProviderConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderConfigurationServiceError,
+      RpcPaymentProviderConfigurationNotFoundError,
+    ]),
+    payload: Schema.Struct({
+      id: Schema.String,
+    }),
+    success: PaymentProviderConfiguration,
+  }),
+  Rpc.make("CreatePaymentProviderConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderConfigurationServiceError,
+      RpcPaymentProviderAlreadyExistsError,
+      RpcPaymentProviderConfigurationValidationError,
+    ]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+      providerId: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("UpdatePaymentProviderConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderConfigurationValidationError,
+      RpcPaymentProviderConfigurationServiceError,
+      RpcPaymentProviderConfigurationNotFoundError,
+      RpcPaymentProviderConfigurationKeyUnavailableError,
+    ]),
+    payload: Schema.Struct({
+      configuration: Schema.Record(Schema.String, Schema.Unknown),
+      enabled: Schema.Boolean,
+      id: Schema.String,
+      name: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("DeletePaymentProviderConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderConfigurationServiceError,
+      RpcPaymentProviderConfigurationNotFoundError,
+    ]),
+    payload: Schema.Struct({
+      paymentProviderConfigurationId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaymentProviderProductRpcsDef.ts b/packages/rpc/src/groups/PaymentProviderProductRpcsDef.ts
new file mode 100644
index 000000000..ce242f277
--- /dev/null
+++ b/packages/rpc/src/groups/PaymentProviderProductRpcsDef.ts
@@ -0,0 +1,87 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPaymentProviderProductNotFoundError,
+  RpcPaymentProviderProductServiceError,
+  RpcPaymentProviderProductValidationError,
+} from "../errors/PaymentProviderProduct.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const PaymentProviderProduct = Schema.Struct({
+  configuration: Schema.NullOr(Schema.ObjectKeyword),
+  createdAt: Schema.NullOr(Schema.Date),
+  id: Schema.String,
+  isActive: Schema.Boolean,
+  paymentProviderConfigurationId: Schema.String,
+  productId: Schema.String,
+  providerProductKey: Schema.String,
+  updatedAt: Schema.NullOr(Schema.Date),
+});
+
+export class PaymentProviderProductRpcsDef extends RpcGroup.make(
+  Rpc.make("ListProviderProductsByProductId", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderProductValidationError,
+      RpcPaymentProviderProductServiceError,
+    ]),
+    payload: Schema.Struct({
+      productId: Schema.String,
+    }),
+    success: Schema.Array(PaymentProviderProduct),
+  }),
+  Rpc.make("CreatePaymentProviderProduct", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderProductValidationError,
+      RpcPaymentProviderProductServiceError,
+    ]),
+    payload: Schema.Struct({
+      configuration: Schema.Record(Schema.String, Schema.Unknown),
+      paymentProviderConfigurationId: Schema.String,
+      productId: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("UpdatePaymentProviderProduct", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderProductValidationError,
+      RpcPaymentProviderProductNotFoundError,
+      RpcPaymentProviderProductServiceError,
+    ]),
+    payload: Schema.Struct({
+      configuration: Schema.Record(Schema.String, Schema.Unknown),
+      id: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("DeletePaymentProviderProduct", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderProductValidationError,
+      RpcPaymentProviderProductServiceError,
+    ]),
+    payload: Schema.Struct({
+      id: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("SetActivePaymentProviderProduct", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaymentProviderProductValidationError,
+      RpcPaymentProviderProductServiceError,
+    ]),
+    payload: Schema.Struct({
+      paymentProviderConfigurationId: Schema.String,
+      productId: Schema.String,
+      providerProductKey: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaywallAssetRpcsDef.ts b/packages/rpc/src/groups/PaywallAssetRpcsDef.ts
new file mode 100644
index 000000000..2d5f8e65d
--- /dev/null
+++ b/packages/rpc/src/groups/PaywallAssetRpcsDef.ts
@@ -0,0 +1,79 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPaywallAssetNotFoundError,
+  RpcPaywallAssetServiceError,
+  RpcPaywallAssetValidationError,
+} from "../errors/PaywallAsset.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/** One stored paywall asset as returned over the wire. */
+export const PaywallAssetSchema = Schema.Struct({
+  id: Schema.String,
+  organizationId: Schema.String,
+  name: Schema.String,
+  url: Schema.String,
+  contentType: Schema.String,
+  sizeBytes: Schema.Number,
+  width: Schema.NullOr(Schema.Number),
+  height: Schema.NullOr(Schema.Number),
+  createdAt: Schema.Date,
+});
+
+/**
+ * Organization-scoped paywall image asset library, gated by
+ * {@link AuthMiddleware}. Every member of an organization may upload, list,
+ * rename, and delete its assets; authorization is a plain membership check
+ * resolved server-side from the session.
+ */
+export class PaywallAssetRpcsDef extends RpcGroup.make(
+  Rpc.make("UploadPaywallAsset", {
+    error: Schema.Union([
+      RpcPaywallAssetServiceError,
+      RpcActionForbiddenError,
+      RpcPaywallAssetValidationError,
+    ]),
+    payload: {
+      organizationId: Schema.String,
+      /** Display name; the studio defaults this to the original filename. */
+      name: Schema.String,
+      contentType: Schema.String,
+      imageBase64: Schema.String,
+      width: Schema.optional(Schema.Number),
+      height: Schema.optional(Schema.Number),
+    },
+    success: PaywallAssetSchema,
+  }),
+  Rpc.make("ListPaywallAssets", {
+    error: Schema.Union([RpcPaywallAssetServiceError, RpcActionForbiddenError]),
+    payload: {
+      organizationId: Schema.String,
+    },
+    success: Schema.Array(PaywallAssetSchema),
+  }),
+  Rpc.make("RenamePaywallAsset", {
+    error: Schema.Union([
+      RpcPaywallAssetServiceError,
+      RpcActionForbiddenError,
+      RpcPaywallAssetNotFoundError,
+    ]),
+    payload: {
+      assetId: Schema.String,
+      name: Schema.String,
+    },
+    success: PaywallAssetSchema,
+  }),
+  Rpc.make("DeletePaywallAsset", {
+    error: Schema.Union([
+      RpcPaywallAssetServiceError,
+      RpcActionForbiddenError,
+      RpcPaywallAssetNotFoundError,
+    ]),
+    payload: {
+      assetId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaywallComponentRpcsDef.ts b/packages/rpc/src/groups/PaywallComponentRpcsDef.ts
new file mode 100644
index 000000000..fe86a61e7
--- /dev/null
+++ b/packages/rpc/src/groups/PaywallComponentRpcsDef.ts
@@ -0,0 +1,63 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import { RpcPaywallDeployServiceError } from "../errors/PaywallDeploy.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/**
+ * One component version with the read-time catalog detail the editor needs.
+ * `manifest` is the raw §2 component manifest JSON (decoded by the designer
+ * feature layer, never here); `previewStates`/`hasPanel` derive from the
+ * minting deploy's manifest; `artifactBaseUrl` is the server-constructed
+ * `{publicBaseUrl}/c/<contentHash>` base of the §5.1 serving layout.
+ */
+export const RpcPaywallComponentVersion = Schema.Struct({
+  artifactBaseUrl: Schema.String,
+  contentHash: Schema.String,
+  createdAt: Schema.Date,
+  hasPanel: Schema.Boolean,
+  manifest: Schema.Unknown,
+  previewStates: Schema.Array(Schema.String),
+  slug: Schema.String,
+  version: Schema.Number,
+});
+
+/** Summary of an older component version (no manifest/catalog detail). */
+export const RpcPaywallComponentVersionSummary = Schema.Struct({
+  contentHash: Schema.String,
+  createdAt: Schema.Date,
+  version: Schema.Number,
+});
+
+export const RpcPaywallComponent = Schema.Struct({
+  componentId: Schema.String,
+  latest: RpcPaywallComponentVersion,
+  latestVersion: Schema.Number,
+  previousVersions: Schema.Array(RpcPaywallComponentVersionSummary),
+  slug: Schema.String,
+  title: Schema.NullOr(Schema.String),
+});
+
+export class PaywallComponentRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPaywallComponents", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallDeployServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(RpcPaywallComponent),
+  }),
+  Rpc.make("GetPaywallComponentVersions", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallDeployServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+      refs: Schema.Array(
+        Schema.Struct({
+          slug: Schema.String,
+          version: Schema.Number,
+        }),
+      ),
+    }),
+    success: Schema.Array(RpcPaywallComponentVersion),
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaywallDeployRpcsDef.ts b/packages/rpc/src/groups/PaywallDeployRpcsDef.ts
new file mode 100644
index 000000000..c03ce93f7
--- /dev/null
+++ b/packages/rpc/src/groups/PaywallDeployRpcsDef.ts
@@ -0,0 +1,64 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPaywallDeployServiceError,
+  RpcPaywallDeployValidationError,
+} from "../errors/PaywallDeploy.ts";
+import { RpcReleaseNotFoundError } from "../errors/paywall.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const RpcPaywallDeployStatus = Schema.Literals(["pending", "ready"]);
+
+/** Per-deploy paywall summary (manifest-derived, enriched with release rows). */
+export const RpcPaywallDeployPaywallSummary = Schema.Struct({
+  contentHash: Schema.String,
+  releaseId: Schema.NullOr(Schema.String),
+  slug: Schema.String,
+  version: Schema.NullOr(Schema.Number),
+});
+
+/** Per-deploy component summary (manifest-derived, enriched with version rows). */
+export const RpcPaywallDeployComponentSummary = Schema.Struct({
+  componentId: Schema.NullOr(Schema.String),
+  contentHash: Schema.String,
+  slug: Schema.String,
+  version: Schema.NullOr(Schema.Number),
+});
+
+export const RpcPaywallDeploy = Schema.Struct({
+  cliVersion: Schema.String,
+  components: Schema.Array(RpcPaywallDeployComponentSummary),
+  createdAt: Schema.Date,
+  createdByName: Schema.String,
+  id: Schema.String,
+  paywalls: Schema.Array(RpcPaywallDeployPaywallSummary),
+  runtimeVersion: Schema.String,
+  schemaVersion: Schema.Number,
+  status: RpcPaywallDeployStatus,
+});
+
+export class PaywallDeployRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPaywallDeploys", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallDeployServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(RpcPaywallDeploy),
+  }),
+  Rpc.make("SetActivePaywallRelease", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaywallDeployServiceError,
+      RpcPaywallDeployValidationError,
+      RpcReleaseNotFoundError,
+    ]),
+    payload: Schema.Struct({
+      releaseId: Schema.String,
+    }),
+    success: Schema.Struct({
+      releaseId: Schema.String,
+    }),
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaywallLocationRpcsDef.ts b/packages/rpc/src/groups/PaywallLocationRpcsDef.ts
new file mode 100644
index 000000000..fbb1bef8d
--- /dev/null
+++ b/packages/rpc/src/groups/PaywallLocationRpcsDef.ts
@@ -0,0 +1,144 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPaywallLocationNotFoundError,
+  RpcPaywallLocationServiceError,
+  RpcPaywallLocationShowingValidationError,
+  RpcPaywallLocationSlugAlreadyExistsError,
+} from "../errors/PaywallLocation.ts";
+import { RpcPaywallNotFoundError } from "../errors/paywall.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const RpcPaywallLocationShowingType = Schema.Union([
+  Schema.Literal("paywall_release"),
+  Schema.Literal("feature_flag"),
+]);
+
+export const RpcPaywallLocationShowingPaywall = Schema.Struct({
+  id: Schema.String,
+  name: Schema.String,
+  slug: Schema.String,
+});
+
+export const RpcPaywallLocationShowingPaywallRelease = Schema.Struct({
+  htmlUrl: Schema.String,
+  publishedAt: Schema.NullOr(Schema.Date),
+  releaseId: Schema.String,
+  version: Schema.Number,
+});
+
+export const RpcPaywallLocationShowing = Schema.Struct({
+  createdAt: Schema.NullOr(Schema.Date),
+  createdByUserId: Schema.NullOr(Schema.String),
+  endedAt: Schema.NullOr(Schema.Date),
+  featureFlagId: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  paywall: Schema.NullOr(RpcPaywallLocationShowingPaywall),
+  paywallId: Schema.NullOr(Schema.String),
+  paywallLocationId: Schema.String,
+  paywallRelease: Schema.NullOr(RpcPaywallLocationShowingPaywallRelease),
+  paywallReleaseId: Schema.NullOr(Schema.String),
+  projectId: Schema.String,
+  startedAt: Schema.Date,
+  type: RpcPaywallLocationShowingType,
+  updatedAt: Schema.NullOr(Schema.Date),
+});
+
+export const RpcPaywallLocation = Schema.Struct({
+  activeShowing: Schema.NullOr(RpcPaywallLocationShowing),
+  archivedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  description: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  slug: Schema.String,
+  updatedAt: Schema.NullOr(Schema.Date),
+});
+
+const commonError = Schema.Union([RpcActionForbiddenError, RpcPaywallLocationServiceError]);
+
+const locationNotFoundError = Schema.Union([
+  RpcActionForbiddenError,
+  RpcPaywallLocationNotFoundError,
+  RpcPaywallLocationServiceError,
+]);
+
+export class PaywallLocationRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPaywallLocations", {
+    error: commonError,
+    payload: Schema.Struct({
+      includeArchived: Schema.optional(Schema.Boolean),
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(RpcPaywallLocation),
+  }),
+  Rpc.make("CreatePaywallLocation", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaywallLocationServiceError,
+      RpcPaywallLocationSlugAlreadyExistsError,
+    ]),
+    payload: Schema.Struct({
+      description: Schema.optional(Schema.String),
+      name: Schema.String,
+      projectId: Schema.String,
+      slug: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("UpdatePaywallLocation", {
+    error: locationNotFoundError,
+    payload: Schema.Struct({
+      description: Schema.optional(Schema.NullOr(Schema.String)),
+      locationId: Schema.String,
+      name: Schema.optional(Schema.String),
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("ArchivePaywallLocation", {
+    error: locationNotFoundError,
+    payload: Schema.Struct({
+      locationId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("AssignPaywallLocationShowing", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaywallLocationNotFoundError,
+      RpcPaywallLocationServiceError,
+      RpcPaywallLocationShowingValidationError,
+      RpcPaywallNotFoundError,
+    ]),
+    payload: Schema.Struct({
+      featureFlagId: Schema.optional(Schema.String),
+      locationId: Schema.String,
+      paywallId: Schema.optional(Schema.String),
+      type: RpcPaywallLocationShowingType,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("ClearPaywallLocationShowing", {
+    error: locationNotFoundError,
+    payload: Schema.Struct({
+      locationId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("ListPaywallLocationShowings", {
+    error: locationNotFoundError,
+    payload: Schema.Struct({
+      locationId: Schema.String,
+    }),
+    success: Schema.Array(RpcPaywallLocationShowing),
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaywallRpcsDef.ts b/packages/rpc/src/groups/PaywallRpcsDef.ts
new file mode 100644
index 000000000..b0044f304
--- /dev/null
+++ b/packages/rpc/src/groups/PaywallRpcsDef.ts
@@ -0,0 +1,147 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Effect, Option, Schema, SchemaIssue, SchemaTransformation } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPaywallNotFoundError,
+  RpcPaywallReleaseError,
+  RpcPaywallServiceError,
+  RpcPaywallSlugAlreadyExistsError,
+  RpcReleaseNotFoundError,
+} from "../errors/paywall.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+const DateFromNumber = Schema.Number.pipe(
+  Schema.decodeTo(
+    Schema.Date,
+    SchemaTransformation.transformOrFail({
+      decode: (value) => {
+        const parsed = new Date(value);
+
+        if (Number.isNaN(parsed.getTime())) {
+          return Effect.fail(
+            new SchemaIssue.InvalidValue(Option.some(value), {
+              message: "Expected a valid Date",
+            }),
+          );
+        }
+
+        return Effect.succeed(parsed);
+      },
+      encode: (value) => Effect.succeed(value.getTime()),
+    }),
+  ),
+);
+
+export const Paywall = Schema.Struct({
+  archivedAt: Schema.NullOr(DateFromNumber),
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  slug: Schema.String,
+  thumbnailUrl: Schema.NullOr(Schema.String),
+});
+
+export class PaywallRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPaywalls", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError]),
+    payload: Schema.Struct({
+      includeArchived: Schema.optional(Schema.Boolean),
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(Paywall),
+  }),
+  Rpc.make("CreatePaywall", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaywallServiceError,
+      RpcPaywallSlugAlreadyExistsError,
+    ]),
+    payload: Schema.Struct({
+      name: Schema.String,
+      projectId: Schema.String,
+      slug: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("RenamePaywall", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError, RpcPaywallNotFoundError]),
+    payload: Schema.Struct({
+      name: Schema.String,
+      paywallId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("ArchivePaywall", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError, RpcPaywallNotFoundError]),
+    payload: Schema.Struct({
+      paywallId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("RestorePaywall", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError, RpcPaywallNotFoundError]),
+    payload: Schema.Struct({
+      paywallId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("DeletePaywall", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError, RpcPaywallNotFoundError]),
+    payload: Schema.Struct({
+      paywallId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("RequestPaywallEditToken", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError, RpcPaywallNotFoundError]),
+    payload: Schema.Struct({
+      paywallId: Schema.String,
+    }),
+    success: Schema.Struct({
+      expiresAt: DateFromNumber,
+      token: Schema.String,
+      url: Schema.String,
+    }),
+  }),
+  Rpc.make("CreatePaywallRelease", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallNotFoundError, RpcPaywallReleaseError]),
+    payload: Schema.Struct({
+      paywallId: Schema.String,
+    }),
+    success: Schema.Struct({
+      createdAt: DateFromNumber,
+      draftUrl: Schema.String,
+      releaseId: Schema.String,
+      version: Schema.Number,
+    }),
+  }),
+  Rpc.make("PublishPaywallRelease", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallReleaseError, RpcReleaseNotFoundError]),
+    payload: Schema.Struct({
+      releaseId: Schema.String,
+    }),
+    success: Schema.Struct({
+      htmlUrl: Schema.String,
+      publishedAt: DateFromNumber,
+      releaseId: Schema.String,
+      version: Schema.Number,
+    }),
+  }),
+  Rpc.make("GetPaywallDraftRelease", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallNotFoundError, RpcPaywallReleaseError]),
+    payload: Schema.Struct({
+      paywallId: Schema.String,
+    }),
+    success: Schema.NullOr(
+      Schema.Struct({
+        createdAt: DateFromNumber,
+        draftUrl: Schema.String,
+        releaseId: Schema.String,
+        version: Schema.Number,
+      }),
+    ),
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts b/packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts
new file mode 100644
index 000000000..897b7f847
--- /dev/null
+++ b/packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts
@@ -0,0 +1,79 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import { RpcPaywallNotFoundError } from "../errors/paywall.ts";
+import {
+  RpcComponentManifestInvalidError,
+  RpcPaywallWorkspaceError,
+} from "../errors/PaywallWorkspace.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/** A workspace paywall directory: stable slug + backing paywall id. */
+export const WorkspacePaywallDir = Schema.Struct({
+  slug: Schema.String,
+  paywallId: Schema.String,
+});
+
+/** One cached compile diagnostic (message + optional position/phase). */
+export const ComponentManifestDiagnostic = Schema.Struct({
+  message: Schema.String,
+  phase: Schema.optional(Schema.String),
+  line: Schema.optional(Schema.Number),
+  column: Schema.optional(Schema.Number),
+});
+
+/**
+ * Paywall workspace RPC surface. Read side: list a project's paywall directories
+ * and read a paywall's live document as cleaned JSON (the AI `read_paywall`
+ * tool), plus the browser's fire-and-forget manifest upload feeding the
+ * content-addressed cache. Component edits go through the document-first AI/MCP
+ * `edit_paywall` / `write_component` tools; there is no whole-fork apply.
+ */
+export class PaywallWorkspaceRpcsDef extends RpcGroup.make(
+  Rpc.make("ListWorkspacePaywalls", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallWorkspaceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(WorkspacePaywallDir),
+  }),
+  /**
+   * Read another paywall's live document as cleaned JSON for reference (the AI
+   * `read_paywall` tool). The `document` is the schema-loose cleaned tree
+   * (`serializeDocument` output — nested `{ id, type, name?, ...data, children }`
+   * nodes with defaults stripped); it is not modelled field-by-field here because
+   * the document shape is intentionally open (mirrors `RecordComponentManifest`'s
+   * `Schema.Unknown` manifest). Read-only.
+   */
+  Rpc.make("ReadPaywallDocument", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPaywallNotFoundError,
+      RpcPaywallWorkspaceError,
+    ]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+      slug: Schema.String,
+    }),
+    success: Schema.Struct({
+      slug: Schema.String,
+      name: Schema.String,
+      paywallId: Schema.String,
+      /** Cleaned document JSON (loose — `serializeDocument` output). */
+      document: Schema.Unknown,
+    }),
+  }),
+  Rpc.make("RecordComponentManifest", {
+    error: Schema.Union([RpcComponentManifestInvalidError, RpcPaywallWorkspaceError]),
+    payload: Schema.Struct({
+      sourceHash: Schema.String,
+      status: Schema.Literals(["ready", "error"]),
+      // Validated server-side against the ComponentManifest schema; `undefined`
+      // for `error` uploads.
+      manifest: Schema.optional(Schema.Unknown),
+      diagnostics: Schema.optional(Schema.Array(ComponentManifestDiagnostic)),
+    }),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PerkRpcsDef.ts b/packages/rpc/src/groups/PerkRpcsDef.ts
new file mode 100644
index 000000000..4aa9aa89e
--- /dev/null
+++ b/packages/rpc/src/groups/PerkRpcsDef.ts
@@ -0,0 +1,49 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPerkNotFoundError,
+  RpcPerkServiceError,
+  RpcPerkSlugAlreadyExistsError,
+} from "../errors/perk.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const Perk = Schema.Struct({
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  slug: Schema.String,
+});
+
+export class PerkRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPerks", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPerkServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(Perk),
+  }),
+  Rpc.make("CreatePerk", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPerkServiceError,
+      RpcPerkSlugAlreadyExistsError,
+    ]),
+    payload: Schema.Struct({
+      name: Schema.String,
+      projectId: Schema.String,
+      slug: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("DeletePerk", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPerkServiceError, RpcPerkNotFoundError]),
+    payload: Schema.Struct({
+      perkId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PersonRpcsDef.ts b/packages/rpc/src/groups/PersonRpcsDef.ts
new file mode 100644
index 000000000..3974954d9
--- /dev/null
+++ b/packages/rpc/src/groups/PersonRpcsDef.ts
@@ -0,0 +1,58 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPersonInvalidAnonymousIdError,
+  RpcPersonNotFoundError,
+  RpcPersonServiceError,
+} from "../errors/person.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const Person = Schema.Struct({
+  createdAt: Schema.NullOr(Schema.Date),
+  personId: Schema.String,
+  distinctId: Schema.String,
+  email: Schema.NullOr(Schema.String),
+  name: Schema.NullOr(Schema.String),
+  type: Schema.Number,
+});
+
+export class PersonRpcsDef extends RpcGroup.make(
+  Rpc.make("CreatePerson", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPersonInvalidAnonymousIdError,
+      RpcPersonServiceError,
+    ]),
+    payload: {
+      distinctId: Schema.String,
+      email: Schema.optional(Schema.String),
+      name: Schema.optional(Schema.String),
+      projectId: Schema.String,
+    },
+    success: Person,
+  }),
+  Rpc.make("ListPersons", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPersonServiceError]),
+    payload: {
+      projectId: Schema.String,
+    },
+    success: Schema.Array(Person),
+  }),
+  Rpc.make("GetPersonById", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPersonNotFoundError, RpcPersonServiceError]),
+    payload: {
+      personId: Schema.String,
+    },
+    success: Person,
+  }),
+  Rpc.make("GetPersonByDistinctId", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPersonNotFoundError, RpcPersonServiceError]),
+    payload: {
+      distinctId: Schema.String,
+      projectId: Schema.String,
+    },
+    success: Person,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/ProductPerkRpcsDef.ts b/packages/rpc/src/groups/ProductPerkRpcsDef.ts
new file mode 100644
index 000000000..64199673b
--- /dev/null
+++ b/packages/rpc/src/groups/ProductPerkRpcsDef.ts
@@ -0,0 +1,52 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcProductPerkServiceError,
+  RpcProductPerkValidationError,
+} from "../errors/ProductPerk.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const ProductPerk = Schema.Struct({
+  id: Schema.String,
+  perkId: Schema.String,
+  productId: Schema.String,
+});
+
+export class ProductPerkRpcsDef extends RpcGroup.make(
+  Rpc.make("ListProductPerksByProductId", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcProductPerkServiceError,
+      RpcProductPerkValidationError,
+    ]),
+    payload: {
+      productId: Schema.String,
+    },
+    success: Schema.Array(ProductPerk),
+  }),
+  Rpc.make("CreateProductPerk", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcProductPerkServiceError,
+      RpcProductPerkValidationError,
+    ]),
+    payload: Schema.Struct({
+      perkId: Schema.String,
+      productId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("DeleteProductPerk", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcProductPerkServiceError,
+      RpcProductPerkValidationError,
+    ]),
+    payload: Schema.Struct({
+      id: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/ProductRpcsDef.ts b/packages/rpc/src/groups/ProductRpcsDef.ts
new file mode 100644
index 000000000..1a73c55c2
--- /dev/null
+++ b/packages/rpc/src/groups/ProductRpcsDef.ts
@@ -0,0 +1,71 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcProductNotFoundError,
+  RpcProductServiceError,
+  RpcProductSlugAlreadyExistsError,
+} from "../errors/product.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const ProductType = Schema.Union([
+  Schema.Literal("subscription"),
+  Schema.Literal("one-time"),
+  Schema.Literal("one-time-consumable"),
+]);
+
+export const Product = Schema.Struct({
+  id: Schema.String,
+  name: Schema.String,
+  projectId: Schema.String,
+  type: ProductType,
+});
+
+export class ProductRpcsDef extends RpcGroup.make(
+  Rpc.make("ListProducts", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProductServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(Product),
+  }),
+  Rpc.make("GetProduct", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProductServiceError, RpcProductNotFoundError]),
+    payload: Schema.Struct({
+      id: Schema.String,
+    }),
+    success: Product,
+  }),
+  Rpc.make("CreateProduct", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcProductServiceError,
+      RpcProductSlugAlreadyExistsError,
+    ]),
+    payload: Schema.Struct({
+      name: Schema.String,
+      projectId: Schema.String,
+      slug: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("UpdateProduct", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProductServiceError, RpcProductNotFoundError]),
+    payload: Schema.Struct({
+      id: Schema.String,
+      name: Schema.String,
+      slug: Schema.optional(Schema.String),
+    }),
+    success: Schema.Void,
+  }),
+  Rpc.make("DeleteProduct", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProductServiceError, RpcProductNotFoundError]),
+    payload: Schema.Struct({
+      id: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/ProjectRpcsDef.ts b/packages/rpc/src/groups/ProjectRpcsDef.ts
new file mode 100644
index 000000000..642588e3a
--- /dev/null
+++ b/packages/rpc/src/groups/ProjectRpcsDef.ts
@@ -0,0 +1,70 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import {
+  RpcActionForbiddenError,
+  RpcAuthenticationError,
+  RpcAvatarValidationError,
+} from "../errors/common.ts";
+import { RpcProjectNotFoundError, RpcProjectServiceError } from "../errors/project.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const Project = Schema.Struct({
+  id: Schema.String,
+  name: Schema.String,
+  slug: Schema.String,
+});
+
+export class ProjectRpcsDef extends RpcGroup.make(
+  Rpc.make("CreateProject", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAuthenticationError, RpcProjectServiceError]),
+    payload: {
+      name: Schema.String,
+      organizationId: Schema.String,
+    },
+    success: Project,
+  }),
+  Rpc.make("ListProjects", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProjectServiceError]),
+    payload: {
+      organizationId: Schema.String,
+    },
+    success: Schema.Array(Project),
+  }),
+  Rpc.make("UpdateProject", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProjectServiceError, RpcProjectNotFoundError]),
+    payload: {
+      id: Schema.String,
+      name: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("DeleteProject", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProjectServiceError, RpcProjectNotFoundError]),
+    payload: {
+      id: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("SetProjectAvatar", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcProjectServiceError,
+      RpcProjectNotFoundError,
+      RpcAvatarValidationError,
+    ]),
+    payload: {
+      contentType: Schema.String,
+      id: Schema.String,
+      imageBase64: Schema.String,
+    },
+    success: Schema.Struct({ logoUrl: Schema.String }),
+  }),
+  Rpc.make("RemoveProjectAvatar", {
+    error: Schema.Union([RpcActionForbiddenError, RpcProjectServiceError, RpcProjectNotFoundError]),
+    payload: {
+      id: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PushNotificationConfigurationRpcsDef.ts b/packages/rpc/src/groups/PushNotificationConfigurationRpcsDef.ts
new file mode 100644
index 000000000..a9fd3da75
--- /dev/null
+++ b/packages/rpc/src/groups/PushNotificationConfigurationRpcsDef.ts
@@ -0,0 +1,98 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPushNotificationConfigurationKeyUnavailableError,
+  RpcPushNotificationConfigurationNotFoundError,
+  RpcPushNotificationConfigurationServiceError,
+  RpcPushNotificationConfigurationValidationError,
+} from "../errors/PushNotificationConfiguration.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/**
+ * Wire DTO for a push-notification configuration (FCM/APNs credentials for a
+ * project). Unlike the payment-provider DTO this is the **secret-omitting** read
+ * shape: `configuration` carries only the provider's non-secret metadata plus
+ * `has*` presence flags (never the FCM service-account JSON or the APNs `.p8`).
+ * The server strips secrets via `NotificationsConfigurationService.toReadDto`, so
+ * this contract deliberately mirrors that reduced shape.
+ */
+export const PushNotificationConfiguration = Schema.Struct({
+  activeProviderId: Schema.NullOr(Schema.String),
+  configuration: Schema.ObjectKeyword,
+  createdAt: Schema.NullOr(Schema.Date),
+  deletedAt: Schema.NullOr(Schema.Date),
+  enabled: Schema.Boolean,
+  id: Schema.String,
+  name: Schema.String,
+  providerId: Schema.String,
+  projectId: Schema.String,
+  pushProviderKey: Schema.String,
+  updatedAt: Schema.NullOr(Schema.Date),
+});
+
+export class PushNotificationConfigurationRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPushNotificationConfigurations", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPushNotificationConfigurationServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Array(PushNotificationConfiguration),
+  }),
+  Rpc.make("GetPushNotificationConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPushNotificationConfigurationServiceError,
+      RpcPushNotificationConfigurationNotFoundError,
+    ]),
+    payload: Schema.Struct({
+      id: Schema.String,
+    }),
+    success: PushNotificationConfiguration,
+  }),
+  Rpc.make("CreatePushNotificationConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPushNotificationConfigurationServiceError,
+      RpcPushNotificationConfigurationNotFoundError,
+      RpcPushNotificationConfigurationKeyUnavailableError,
+    ]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+      providerId: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("UpdatePushNotificationConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPushNotificationConfigurationValidationError,
+      RpcPushNotificationConfigurationServiceError,
+      RpcPushNotificationConfigurationNotFoundError,
+      RpcPushNotificationConfigurationKeyUnavailableError,
+    ]),
+    payload: Schema.Struct({
+      configuration: Schema.Record(Schema.String, Schema.Unknown),
+      enabled: Schema.Boolean,
+      id: Schema.String,
+      name: Schema.String,
+    }),
+    success: Schema.Struct({
+      id: Schema.String,
+    }),
+  }),
+  Rpc.make("DeletePushNotificationConfiguration", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPushNotificationConfigurationServiceError,
+      RpcPushNotificationConfigurationNotFoundError,
+    ]),
+    payload: Schema.Struct({
+      pushNotificationConfigurationId: Schema.String,
+    }),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/PushNotificationSendRpcsDef.ts b/packages/rpc/src/groups/PushNotificationSendRpcsDef.ts
new file mode 100644
index 000000000..bb585e165
--- /dev/null
+++ b/packages/rpc/src/groups/PushNotificationSendRpcsDef.ts
@@ -0,0 +1,106 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcPushNotificationSendNotFoundError,
+  RpcPushNotificationSendServiceError,
+} from "../errors/PushNotificationSend.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/**
+ * Wire DTO for a push-notification *send* — the parent record of a fan-out to
+ * one or more devices, shown in the studio "sent notifications" activity list.
+ *
+ * `status` is the human-readable label (e.g. `"partial_failed"`), not the raw
+ * numeric enum, so the browser never has to know the enum encoding. `message`
+ * is the notification payload and is PII-at-rest: it is TTL-purged, so it can be
+ * an empty object once `messagePurged` is `true`.
+ */
+export const PushNotificationSend = Schema.Struct({
+  completedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.Date,
+  deviceCount: Schema.Number,
+  failedCount: Schema.Number,
+  id: Schema.String,
+  idempotencyKey: Schema.NullOr(Schema.String),
+  message: Schema.Record(Schema.String, Schema.Unknown),
+  messagePurged: Schema.Boolean,
+  requestedDistinctIdCount: Schema.Number,
+  requestedPersonCount: Schema.Number,
+  skippedCount: Schema.Number,
+  status: Schema.String,
+  succeededCount: Schema.Number,
+  unresolvedDistinctIds: Schema.Array(Schema.String),
+});
+export type PushNotificationSendType = typeof PushNotificationSend.Type;
+
+/**
+ * Wire DTO for a single per-(send, device) delivery — the drill-down rows shown
+ * when a send is selected. `status` is the human-readable label, `provider` is
+ * the routed channel (`"fcm"` / `"apns"`), and `lastError` / `providerMessageId`
+ * carry the per-device debugging signal.
+ */
+export const PushNotificationDelivery = Schema.Struct({
+  attemptCount: Schema.Number,
+  completedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.Date,
+  id: Schema.String,
+  lastError: Schema.NullOr(Schema.String),
+  maxAttempts: Schema.Number,
+  nextAttemptAt: Schema.NullOr(Schema.Date),
+  personId: Schema.String,
+  provider: Schema.String,
+  providerMessageId: Schema.NullOr(Schema.String),
+  status: Schema.String,
+});
+export type PushNotificationDeliveryType = typeof PushNotificationDelivery.Type;
+
+export const ListPushNotificationSendsRequest = Schema.Struct({
+  limit: Schema.optional(Schema.Number),
+  projectId: Schema.String,
+});
+export type ListPushNotificationSendsRequestType = typeof ListPushNotificationSendsRequest.Type;
+
+export const ListPushNotificationSendsResponse = Schema.Struct({
+  hasMore: Schema.Boolean,
+  sends: Schema.Array(PushNotificationSend),
+});
+export type ListPushNotificationSendsResponseType = typeof ListPushNotificationSendsResponse.Type;
+
+export const GetPushNotificationSendDeliveriesRequest = Schema.Struct({
+  projectId: Schema.String,
+  sendId: Schema.String,
+});
+export type GetPushNotificationSendDeliveriesRequestType =
+  typeof GetPushNotificationSendDeliveriesRequest.Type;
+
+export const GetPushNotificationSendDeliveriesResponse = Schema.Struct({
+  deliveries: Schema.Array(PushNotificationDelivery),
+});
+export type GetPushNotificationSendDeliveriesResponseType =
+  typeof GetPushNotificationSendDeliveriesResponse.Type;
+
+/**
+ * Read-only RPC surface for push-notification send history — the studio
+ * "sent notifications" activity page. Distinct from
+ * {@link PushNotificationConfigurationRpcsDef} (credential CRUD): this group
+ * only reads the `push_notification_send` / `push_notification_delivery` tables
+ * so customers can debug what was sent, to whom, and why a delivery failed.
+ */
+export class PushNotificationSendRpcsDef extends RpcGroup.make(
+  Rpc.make("ListPushNotificationSends", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPushNotificationSendServiceError]),
+    payload: ListPushNotificationSendsRequest,
+    success: ListPushNotificationSendsResponse,
+  }),
+  Rpc.make("GetPushNotificationSendDeliveries", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcPushNotificationSendServiceError,
+      RpcPushNotificationSendNotFoundError,
+    ]),
+    payload: GetPushNotificationSendDeliveriesRequest,
+    success: GetPushNotificationSendDeliveriesResponse,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/UserRpcsDef.ts b/packages/rpc/src/groups/UserRpcsDef.ts
new file mode 100644
index 000000000..18a573d2c
--- /dev/null
+++ b/packages/rpc/src/groups/UserRpcsDef.ts
@@ -0,0 +1,60 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcAuthenticationError, RpcAvatarValidationError } from "../errors/common.ts";
+import { RpcUserServiceError } from "../errors/user.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const User = Schema.Struct({
+  createdAt: Schema.Date,
+  email: Schema.String,
+  emailVerified: Schema.Boolean,
+  id: Schema.String,
+  image: Schema.NullOr(Schema.String),
+  name: Schema.String,
+  role: Schema.NullOr(Schema.String),
+  organizations: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      logo: Schema.NullOr(Schema.String),
+      name: Schema.String,
+      slug: Schema.String,
+      workosOrganizationId: Schema.NullOr(Schema.String),
+      /**
+       * Enabled internal feature flag keys for this organization (resolved
+       * `override ?? defaultEnabled` over the `INTERNAL_FEATURE_FLAGS` registry).
+       * Checked on the frontend via `useInternalFeatureFlag`.
+       */
+      internalFeatureFlags: Schema.Array(Schema.String),
+    }),
+  ),
+  projects: Schema.Array(
+    Schema.Struct({
+      id: Schema.String,
+      logo: Schema.NullOr(Schema.String),
+      name: Schema.String,
+      organizationId: Schema.String,
+      slug: Schema.String,
+    }),
+  ),
+  updatedAt: Schema.Date,
+});
+
+export class UserRpcsDef extends RpcGroup.make(
+  Rpc.make("CurrentUser", {
+    error: Schema.Union([RpcUserServiceError, RpcAuthenticationError]),
+    success: User,
+  }),
+  Rpc.make("SetUserAvatar", {
+    error: Schema.Union([RpcUserServiceError, RpcAuthenticationError, RpcAvatarValidationError]),
+    payload: {
+      contentType: Schema.String,
+      imageBase64: Schema.String,
+    },
+    success: Schema.Struct({ imageUrl: Schema.String }),
+  }),
+  Rpc.make("RemoveUserAvatar", {
+    error: Schema.Union([RpcUserServiceError, RpcAuthenticationError]),
+    success: Schema.Void,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/VoidQlRpcsDef.ts b/packages/rpc/src/groups/VoidQlRpcsDef.ts
new file mode 100644
index 000000000..09d00ef5e
--- /dev/null
+++ b/packages/rpc/src/groups/VoidQlRpcsDef.ts
@@ -0,0 +1,126 @@
+/**
+ * The VoidQL RPC group (docs/analytics-access-layer.html §13): `RunVoidQlQuery`,
+ * `ValidateVoidQlQuery`, `GetVoidQlSchema`, `SaveVoidQlInsight`. The client always
+ * sends VoidQL *text* — no SQL ever crosses the wire pre-compiled, and there is no
+ * `organizationId`-scoped filter or `SETTINGS` field for a caller to influence
+ * tenant scope. Guarded by {@link AuthMiddleware}.
+ */
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcVoidQlComplexityError,
+  RpcVoidQlExecutionError,
+  RpcVoidQlPiiError,
+  RpcVoidQlSchemaError,
+  RpcVoidQlSyntaxError,
+  RpcVoidQlUnknownFieldError,
+  RpcVoidQlUnsupportedError,
+} from "../errors/voidql.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/**
+ * VoidQL query text, length-bounded at the wire so a multi-MB string literal or
+ * comment — which the lexer's MAX_TOKENS cap counts as a single token and would
+ * otherwise wave through — can't drive worker CPU/memory before compilation.
+ */
+const VoidQlQueryText = Schema.String.check(Schema.isMaxLength(50_000));
+
+/** A result column descriptor (name + resolved logical type). */
+export const VoidQlColumn = Schema.Struct({
+  name: Schema.String,
+  type: Schema.String,
+});
+
+/** One result row — arbitrary JSON keyed by the projected column names. */
+export const VoidQlRow = Schema.Record(Schema.String, Schema.Unknown);
+
+/** A span-precise compile diagnostic (the agent repair-loop / editor caret currency). */
+export const VoidQlDiagnostic = Schema.Struct({
+  stage: Schema.String,
+  code: Schema.String,
+  message: Schema.String,
+  hint: Schema.optional(Schema.String),
+});
+
+export const RunVoidQlQueryRequest = Schema.Struct({
+  organizationId: Schema.String,
+  text: VoidQlQueryText,
+});
+export type RunVoidQlQueryRequestType = typeof RunVoidQlQueryRequest.Type;
+
+export const RunVoidQlQueryResponse = Schema.Struct({
+  columns: Schema.Array(VoidQlColumn),
+  rows: Schema.Array(VoidQlRow),
+});
+
+export const ValidateVoidQlQueryResponse = Schema.Struct({
+  valid: Schema.Boolean,
+  columns: Schema.optional(Schema.Array(VoidQlColumn)),
+  diagnostic: Schema.optional(VoidQlDiagnostic),
+});
+
+export const GetVoidQlSchemaResponse = Schema.Struct({
+  dialect: Schema.String,
+  tables: Schema.Array(
+    Schema.Struct({
+      name: Schema.String,
+      columns: Schema.Array(
+        Schema.Struct({
+          name: Schema.String,
+          type: Schema.String,
+          pii: Schema.Boolean,
+          doc: Schema.String,
+        }),
+      ),
+      namespaces: Schema.Array(
+        Schema.Struct({ name: Schema.String, pii: Schema.Boolean, doc: Schema.String }),
+      ),
+    }),
+  ),
+  functions: Schema.Array(Schema.String),
+});
+
+export const SaveVoidQlInsightRequest = Schema.Struct({
+  organizationId: Schema.String,
+  name: Schema.String.check(Schema.isMaxLength(255)),
+  text: VoidQlQueryText,
+});
+
+export const SaveVoidQlInsightResponse = Schema.Struct({ id: Schema.String });
+
+/** The compile-error union shared by the run + save surfaces. */
+const COMPILE_ERRORS = [
+  RpcActionForbiddenError,
+  RpcVoidQlSyntaxError,
+  RpcVoidQlUnsupportedError,
+  RpcVoidQlSchemaError,
+  RpcVoidQlUnknownFieldError,
+  RpcVoidQlPiiError,
+  RpcVoidQlComplexityError,
+  RpcVoidQlExecutionError,
+] as const;
+
+export class VoidQlRpcsDef extends RpcGroup.make(
+  Rpc.make("RunVoidQlQuery", {
+    error: Schema.Union([...COMPILE_ERRORS]),
+    payload: RunVoidQlQueryRequest,
+    success: RunVoidQlQueryResponse,
+  }),
+  Rpc.make("ValidateVoidQlQuery", {
+    error: Schema.Union([RpcActionForbiddenError, RpcVoidQlExecutionError]),
+    payload: RunVoidQlQueryRequest,
+    success: ValidateVoidQlQueryResponse,
+  }),
+  Rpc.make("GetVoidQlSchema", {
+    error: Schema.Union([RpcActionForbiddenError]),
+    payload: Schema.Struct({}),
+    success: GetVoidQlSchemaResponse,
+  }),
+  Rpc.make("SaveVoidQlInsight", {
+    error: Schema.Union([...COMPILE_ERRORS]),
+    payload: SaveVoidQlInsightRequest,
+    success: SaveVoidQlInsightResponse,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/WebhookRpcsDef.ts b/packages/rpc/src/groups/WebhookRpcsDef.ts
new file mode 100644
index 000000000..a20878164
--- /dev/null
+++ b/packages/rpc/src/groups/WebhookRpcsDef.ts
@@ -0,0 +1,198 @@
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import {
+  RpcWebhookDeliveryNotFoundError,
+  RpcWebhookEndpointNotFoundError,
+  RpcWebhookServiceError,
+  RpcWebhookValidationError,
+} from "../errors/webhook.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+export const WebhookEndpoint = Schema.Struct({
+  consecutiveFailures: Schema.Number,
+  createdAt: Schema.NullOr(Schema.Date),
+  description: Schema.NullOr(Schema.String),
+  events: Schema.Array(Schema.String),
+  id: Schema.String,
+  lastSuccessAt: Schema.NullOr(Schema.Date),
+  name: Schema.String,
+  projectId: Schema.String,
+  secret: Schema.String,
+  status: Schema.Union([
+    Schema.Literal("active"),
+    Schema.Literal("disabled"),
+    Schema.Literal("failed"),
+  ]),
+  url: Schema.String,
+});
+
+export const WebhookDelivery = Schema.Struct({
+  attemptCount: Schema.Number,
+  completedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  eventOccurredAt: Schema.Date,
+  eventType: Schema.String,
+  id: Schema.String,
+  nextAttemptAt: Schema.NullOr(Schema.Date),
+  payload: Schema.Unknown,
+  projectId: Schema.String,
+  status: Schema.Union([
+    Schema.Literal("pending"),
+    Schema.Literal("in_progress"),
+    Schema.Literal("succeeded"),
+    Schema.Literal("failed"),
+    Schema.Literal("exhausted"),
+  ]),
+  webhookEndpointId: Schema.String,
+});
+
+export const WebhookDeliveryAttempt = Schema.Struct({
+  attemptNumber: Schema.Number,
+  createdAt: Schema.NullOr(Schema.Date),
+  durationMs: Schema.NullOr(Schema.Number),
+  errorMessage: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  responseBody: Schema.NullOr(Schema.String),
+  statusCode: Schema.NullOr(Schema.Number),
+  succeeded: Schema.Boolean,
+});
+
+export const WebhookDeliveryWithAttempts = Schema.Struct({
+  attemptCount: Schema.Number,
+  attempts: Schema.Array(WebhookDeliveryAttempt),
+  completedAt: Schema.NullOr(Schema.Date),
+  createdAt: Schema.NullOr(Schema.Date),
+  eventOccurredAt: Schema.Date,
+  eventType: Schema.String,
+  id: Schema.String,
+  nextAttemptAt: Schema.NullOr(Schema.Date),
+  payload: Schema.Unknown,
+  projectId: Schema.String,
+  status: Schema.Union([
+    Schema.Literal("pending"),
+    Schema.Literal("in_progress"),
+    Schema.Literal("succeeded"),
+    Schema.Literal("failed"),
+    Schema.Literal("exhausted"),
+  ]),
+  webhookEndpointId: Schema.String,
+});
+
+export class WebhookRpcsDef extends RpcGroup.make(
+  Rpc.make("ListWebhookEndpoints", {
+    error: Schema.Union([RpcWebhookServiceError, RpcActionForbiddenError]),
+    payload: {
+      projectId: Schema.String,
+    },
+    success: Schema.Array(WebhookEndpoint),
+  }),
+  Rpc.make("GetWebhookEndpoint", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookEndpointNotFoundError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      endpointId: Schema.String,
+    },
+    success: WebhookEndpoint,
+  }),
+  Rpc.make("CreateWebhookEndpoint", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookValidationError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      description: Schema.optional(Schema.String),
+      events: Schema.Array(Schema.String),
+      name: Schema.String,
+      projectId: Schema.String,
+      url: Schema.String,
+    },
+    success: WebhookEndpoint,
+  }),
+  Rpc.make("UpdateWebhookEndpoint", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookValidationError,
+      RpcWebhookEndpointNotFoundError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      description: Schema.optional(Schema.NullOr(Schema.String)),
+      endpointId: Schema.String,
+      events: Schema.optional(Schema.Array(Schema.String)),
+      name: Schema.optional(Schema.String),
+      status: Schema.optional(Schema.Union([Schema.Literal("active"), Schema.Literal("disabled")])),
+      url: Schema.optional(Schema.String),
+    },
+    success: WebhookEndpoint,
+  }),
+  Rpc.make("DeleteWebhookEndpoint", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookEndpointNotFoundError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      endpointId: Schema.String,
+    },
+    success: Schema.Void,
+  }),
+  Rpc.make("RotateWebhookSecret", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookEndpointNotFoundError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      endpointId: Schema.String,
+    },
+    success: WebhookEndpoint,
+  }),
+  Rpc.make("TestWebhookEndpoint", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookEndpointNotFoundError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      endpointId: Schema.String,
+    },
+    success: WebhookDelivery,
+  }),
+  Rpc.make("ListWebhookDeliveries", {
+    error: Schema.Union([RpcWebhookServiceError, RpcActionForbiddenError]),
+    payload: {
+      endpointId: Schema.optional(Schema.String),
+      projectId: Schema.String,
+    },
+    success: Schema.Array(WebhookDelivery),
+  }),
+  Rpc.make("GetWebhookDelivery", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookDeliveryNotFoundError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      deliveryId: Schema.String,
+    },
+    success: WebhookDeliveryWithAttempts,
+  }),
+  Rpc.make("RetryWebhookDelivery", {
+    error: Schema.Union([
+      RpcWebhookServiceError,
+      RpcWebhookDeliveryNotFoundError,
+      RpcWebhookValidationError,
+      RpcActionForbiddenError,
+    ]),
+    payload: {
+      deliveryId: Schema.String,
+    },
+    success: WebhookDelivery,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/index.ts b/packages/rpc/src/index.ts
new file mode 100644
index 000000000..34e4c019b
--- /dev/null
+++ b/packages/rpc/src/index.ts
@@ -0,0 +1,86 @@
+import { RpcGroup } from "effect/unstable/rpc";
+
+import { AiChatRpcsDef } from "./groups/AiChatRpcsDef.ts";
+import { AnalyticsRpcsDef } from "./groups/AnalyticsRpcsDef.ts";
+import { ApiKeyRpcsDef } from "./groups/ApiKeyRpcsDef.ts";
+import { PersonRpcsDef } from "./groups/PersonRpcsDef.ts";
+import { OrganizationRpcsDef } from "./groups/OrganizationRpcsDef.ts";
+import { PaymentProviderConfigurationRpcsDef } from "./groups/PaymentProviderConfigurationRpcsDef.ts";
+import { PaymentProviderProductRpcsDef } from "./groups/PaymentProviderProductRpcsDef.ts";
+import { PushNotificationConfigurationRpcsDef } from "./groups/PushNotificationConfigurationRpcsDef.ts";
+import { PushNotificationSendRpcsDef } from "./groups/PushNotificationSendRpcsDef.ts";
+import { PaywallAssetRpcsDef } from "./groups/PaywallAssetRpcsDef.ts";
+import { PaywallComponentRpcsDef } from "./groups/PaywallComponentRpcsDef.ts";
+import { PaywallDeployRpcsDef } from "./groups/PaywallDeployRpcsDef.ts";
+import { PaywallLocationRpcsDef } from "./groups/PaywallLocationRpcsDef.ts";
+import { PaywallRpcsDef } from "./groups/PaywallRpcsDef.ts";
+import { PaywallWorkspaceRpcsDef } from "./groups/PaywallWorkspaceRpcsDef.ts";
+import { PerkRpcsDef } from "./groups/PerkRpcsDef.ts";
+import { ProductPerkRpcsDef } from "./groups/ProductPerkRpcsDef.ts";
+import { ProductRpcsDef } from "./groups/ProductRpcsDef.ts";
+import { ProjectRpcsDef } from "./groups/ProjectRpcsDef.ts";
+import { UserRpcsDef } from "./groups/UserRpcsDef.ts";
+import { VoidQlRpcsDef } from "./groups/VoidQlRpcsDef.ts";
+import { WebhookRpcsDef } from "./groups/WebhookRpcsDef.ts";
+import { FeatureFlagRpcsDef } from "./groups/FeatureFlagRpcsDef.ts";
+import { FeedbackRpcsDef } from "./groups/FeedbackRpcsDef.ts";
+import { ExperimentRpcsDef } from "./groups/ExperimentRpcsDef.ts";
+
+export const RpcGroups = RpcGroup.make().merge(
+  AiChatRpcsDef,
+  AnalyticsRpcsDef,
+  ApiKeyRpcsDef,
+  PersonRpcsDef,
+  ExperimentRpcsDef,
+  FeatureFlagRpcsDef,
+  FeedbackRpcsDef,
+  OrganizationRpcsDef,
+  PaymentProviderConfigurationRpcsDef,
+  PaymentProviderProductRpcsDef,
+  PushNotificationConfigurationRpcsDef,
+  PushNotificationSendRpcsDef,
+  PaywallAssetRpcsDef,
+  PaywallComponentRpcsDef,
+  PaywallDeployRpcsDef,
+  PaywallLocationRpcsDef,
+  PerkRpcsDef,
+  ProductPerkRpcsDef,
+  ProductRpcsDef,
+  ProjectRpcsDef,
+  PaywallRpcsDef,
+  PaywallWorkspaceRpcsDef,
+  UserRpcsDef,
+  VoidQlRpcsDef,
+  WebhookRpcsDef,
+);
+
+export * from "./auth.ts";
+export * from "./errors/index.ts";
+export * from "./groups/AiChatRpcsDef.ts";
+export * from "./groups/AnalyticsRpcsDef.ts";
+export * from "./groups/ApiKeyRpcsDef.ts";
+export * from "./groups/PersonRpcsDef.ts";
+export * from "./groups/OrganizationRpcsDef.ts";
+export * from "./groups/PaymentProviderConfigurationRpcsDef.ts";
+export * from "./groups/PaymentProviderProductRpcsDef.ts";
+export * from "./groups/PushNotificationConfigurationRpcsDef.ts";
+export * from "./groups/PushNotificationSendRpcsDef.ts";
+export * from "./groups/PaywallAssetRpcsDef.ts";
+export * from "./groups/PaywallComponentRpcsDef.ts";
+export * from "./groups/PaywallDeployRpcsDef.ts";
+export * from "./groups/PaywallLocationRpcsDef.ts";
+export * from "./groups/PaywallRpcsDef.ts";
+export * from "./groups/PaywallWorkspaceRpcsDef.ts";
+export * from "./groups/PerkRpcsDef.ts";
+export * from "./groups/ProductPerkRpcsDef.ts";
+export * from "./groups/ProductRpcsDef.ts";
+export * from "./groups/ProjectRpcsDef.ts";
+export * from "./groups/UserRpcsDef.ts";
+export * from "./groups/VoidQlRpcsDef.ts";
+export * from "./groups/WebhookRpcsDef.ts";
+export * from "./groups/FeatureFlagRpcsDef.ts";
+export * from "./groups/FeedbackRpcsDef.ts";
+export * from "./groups/ExperimentRpcsDef.ts";
+export * from "./experimentTreatmentTypes.ts";
+export * from "./internalFeatureFlags.ts";
+export * from "./middlewares.ts";
diff --git a/packages/rpc/src/internalFeatureFlags.ts b/packages/rpc/src/internalFeatureFlags.ts
new file mode 100644
index 000000000..782c62795
--- /dev/null
+++ b/packages/rpc/src/internalFeatureFlags.ts
@@ -0,0 +1,81 @@
+/**
+ * Internal feature flags — our own (voidhash-internal) gates for unreleased
+ * product features, rolled out per-organization to internal teams and select
+ * external orgs from overwatch.
+ *
+ * This is the single source of truth for *which* flags exist and their *code
+ * default*. Per-organization on/off overrides are stored in the database
+ * (`internal_feature_flag_override`) and layered on top of these defaults by
+ * `InternalFeatureFlagService` in `@voidhash/core`.
+ *
+ * This module is intentionally dependency-free so it can be imported from the
+ * frontend (`apps/www`), the backend, and `@voidhash/core` without
+ * pulling in any runtime.
+ *
+ * ⚠️ Not to be confused with the customer-facing feature-flag *product*
+ * (`FeatureFlagRpcsDef` / `featureFlags` table / SDK `evaluate-flags`), which
+ * voidhash sells to its customers. That system is project-scoped and evaluated
+ * per end-user; this one is org-scoped and gates our own product surface.
+ */
+
+/** A single internal feature flag definition. */
+export interface InternalFeatureFlagDefinition {
+  /** Stable wire key, persisted in overrides and checked at call-sites. */
+  readonly key: string;
+  /** Human-readable name shown in the overwatch admin UI. */
+  readonly name: string;
+  /** Short description of what the flag gates, shown in overwatch. */
+  readonly description: string;
+  /**
+   * The value used when an organization has no explicit override. Flip to
+   * `true` to ship a flag to everyone, then delete the flag once it is fully
+   * launched and removed from all call-sites.
+   */
+  readonly defaultEnabled: boolean;
+}
+
+/**
+ * The registry of available internal feature flags. Add an entry here to make
+ * a new flag toggleable in overwatch and checkable on the server/frontend.
+ */
+export const INTERNAL_FEATURE_FLAGS = {
+  notifications: {
+    key: "notifications",
+    name: "Notifications",
+    description: "Enable push notification configuration, device registration, and delivery.",
+    defaultEnabled: false,
+  },
+  voidqlQuery: {
+    key: "voidql_query",
+    name: "VoidQL Query",
+    description:
+      "The analytics → Query page: run read-only VoidQL queries against the project's analytics.",
+    defaultEnabled: false,
+  },
+  experimentation: {
+    key: "experimentation",
+    name: "Experimentation",
+    description:
+      "The Experimentation suite in the studio sidebar: the Feature Flags product and A/B Tests.",
+    defaultEnabled: false,
+  },
+  voidhashAi: {
+    key: "voidhash_ai",
+    name: "Voidhash AI",
+    description:
+      "The Voidhash AI agent: the chat panel in the paywall designer that can edit code components and paywall composition.",
+    defaultEnabled: false,
+  },
+} as const satisfies Record<string, InternalFeatureFlagDefinition>;
+
+/** All internal feature flag definitions as a list (e.g. for admin listings). */
+export const INTERNAL_FEATURE_FLAG_LIST: readonly InternalFeatureFlagDefinition[] =
+  Object.values(INTERNAL_FEATURE_FLAGS);
+
+/** The union of valid internal feature flag keys (for type-safe checks). */
+export type InternalFeatureFlagKey =
+  (typeof INTERNAL_FEATURE_FLAGS)[keyof typeof INTERNAL_FEATURE_FLAGS]["key"];
+
+/** Whether a string is a known internal feature flag key. */
+export const isInternalFeatureFlagKey = (key: string): key is InternalFeatureFlagKey =>
+  INTERNAL_FEATURE_FLAG_LIST.some((flag) => flag.key === key);
diff --git a/packages/rpc/src/middlewares.ts b/packages/rpc/src/middlewares.ts
new file mode 100644
index 000000000..36b5ddcd6
--- /dev/null
+++ b/packages/rpc/src/middlewares.ts
@@ -0,0 +1,18 @@
+import { RpcMiddleware } from "effect/unstable/rpc";
+import { Schema } from "effect";
+
+import { AuthSession } from "./auth.ts";
+import {
+  RpcAuthenticationError,
+  RpcNotAuthenticatedError,
+} from "./errors/common.ts";
+
+export class AuthMiddleware extends RpcMiddleware.Service<
+  AuthMiddleware,
+  {
+    provides: AuthSession;
+  }
+>()("Rpc/AuthenticationMiddleware", {
+  error: Schema.Union([RpcAuthenticationError, RpcNotAuthenticatedError]),
+  requiredForClient: false,
+}) {}
diff --git a/packages/rpc/sst-env.d.ts b/packages/rpc/sst-env.d.ts
new file mode 100644
index 000000000..eec65b9bd
--- /dev/null
+++ b/packages/rpc/sst-env.d.ts
@@ -0,0 +1,10 @@
+/* This file is auto-generated by SST. Do not edit. */
+/* tslint:disable */
+/* eslint-disable */
+/* deno-fmt-ignore-file */
+/* biome-ignore-all lint: auto-generated */
+
+/// <reference path="../../sst-env.d.ts" />
+
+import "sst";
+export {};
diff --git a/packages/rpc/tsconfig.json b/packages/rpc/tsconfig.json
new file mode 100644
index 000000000..e7e4eca23
--- /dev/null
+++ b/packages/rpc/tsconfig.json
@@ -0,0 +1,9 @@
+{
+  "extends": "@voidhash/tsconfig/alchemy-base.json",
+  "include": ["src"],
+  "exclude": ["**/node_modules/**"],
+  "compilerOptions": {
+    "declaration": false,
+    "declarationMap": false
+  }
+}
diff --git a/packages/shared/src/admin.ts b/packages/shared/src/admin.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/admin.ts
+++ b/packages/shared/src/admin.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/analytics.ts b/packages/shared/src/analytics.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/analytics.ts
+++ b/packages/shared/src/analytics.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/api-key.ts b/packages/shared/src/api-key.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/api-key.ts
+++ b/packages/shared/src/api-key.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/app-store.ts b/packages/shared/src/app-store.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/app-store.ts
+++ b/packages/shared/src/app-store.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/billing.ts b/packages/shared/src/billing.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/billing.ts
+++ b/packages/shared/src/billing.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/customer.ts b/packages/shared/src/customer.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/customer.ts
+++ b/packages/shared/src/customer.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/deploy-changeset.ts b/packages/shared/src/deploy-changeset.ts
index 600e96ada..bac892158 100644
--- a/packages/shared/src/deploy-changeset.ts
+++ b/packages/shared/src/deploy-changeset.ts
@@ -2,7 +2,7 @@ import { Schema } from "effect";
 
 // ChangesetDeploymentServiceError has been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
 
 // Paywall Locations
 export const PaywallLocationCreateChangeSchema = Schema.Struct({
diff --git a/packages/shared/src/errors.ts b/packages/shared/src/errors.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/errors.ts
+++ b/packages/shared/src/errors.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/google-play.ts b/packages/shared/src/google-play.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/google-play.ts
+++ b/packages/shared/src/google-play.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/organization.ts b/packages/shared/src/organization.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/organization.ts
+++ b/packages/shared/src/organization.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/payment-provider-configuration.ts b/packages/shared/src/payment-provider-configuration.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/payment-provider-configuration.ts
+++ b/packages/shared/src/payment-provider-configuration.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/payment-provider-product.ts b/packages/shared/src/payment-provider-product.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/payment-provider-product.ts
+++ b/packages/shared/src/payment-provider-product.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/paywall.ts b/packages/shared/src/paywall.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/paywall.ts
+++ b/packages/shared/src/paywall.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/perk-grant.ts b/packages/shared/src/perk-grant.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/perk-grant.ts
+++ b/packages/shared/src/perk-grant.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/perk.ts b/packages/shared/src/perk.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/perk.ts
+++ b/packages/shared/src/perk.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/product-perk.ts b/packages/shared/src/product-perk.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/product-perk.ts
+++ b/packages/shared/src/product-perk.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/product.ts b/packages/shared/src/product.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/product.ts
+++ b/packages/shared/src/product.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/project.ts b/packages/shared/src/project.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/project.ts
+++ b/packages/shared/src/project.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/sdk.ts b/packages/shared/src/sdk.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/sdk.ts
+++ b/packages/shared/src/sdk.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/user.ts b/packages/shared/src/user.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/user.ts
+++ b/packages/shared/src/user.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/packages/shared/src/webhook.ts b/packages/shared/src/webhook.ts
index 3bda060ec..c900b4ba7 100644
--- a/packages/shared/src/webhook.ts
+++ b/packages/shared/src/webhook.ts
@@ -1,3 +1,3 @@
 // Errors have been moved to:
 // - @voidhash/generated-clients (API layer)
-// - @voidhash-internal/core/domain/errors (domain layer)
+// - @voidhash/core/domain/errors (domain layer)
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f9cc91376..ca8b29211 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,12 +9,63 @@ catalogs:
     '@better-auth/api-key':
       specifier: ^1.6.23
       version: 1.6.23
+    '@effect-aws/client-s3':
+      specifier: 2.0.0-beta.4
+      version: 2.0.0-beta.4
     '@effect/language-service':
-      specifier: ^0.64.1
-      version: 0.64.1
-    '@effect/platform':
-      specifier: ^0.94.1
-      version: 0.94.5
+      specifier: ^0.86.2
+      version: 0.86.6
+    '@effect/platform-bun':
+      specifier: 4.0.0-beta.84
+      version: 4.0.0-beta.84
+    '@effect/platform-node':
+      specifier: 4.0.0-beta.84
+      version: 4.0.0-beta.84
+    '@effect/sql-clickhouse':
+      specifier: 4.0.0-beta.84
+      version: 4.0.0-beta.84
+    '@effect/sql-pg':
+      specifier: 4.0.0-beta.84
+      version: 4.0.0-beta.84
+    '@effect/vitest':
+      specifier: 4.0.0-beta.84
+      version: 4.0.0-beta.84
+    '@fontsource-variable/geist':
+      specifier: ^5.2.8
+      version: 5.2.9
+    '@fontsource-variable/geist-mono':
+      specifier: ^5.2.7
+      version: 5.2.8
+    '@hookform/resolvers':
+      specifier: ^5.1.1
+      version: 5.4.0
+    '@tailwindcss/vite':
+      specifier: ^4.1.17
+      version: 4.3.0
+    '@tanstack/react-query':
+      specifier: 5.100.11
+      version: 5.100.11
+    '@tanstack/react-query-devtools':
+      specifier: 5.100.11
+      version: 5.100.11
+    '@tanstack/react-router':
+      specifier: 1.170.7
+      version: 1.170.7
+    '@tanstack/react-router-ssr-query':
+      specifier: 1.167.0
+      version: 1.167.0
+    '@tanstack/react-start':
+      specifier: 1.168.10
+      version: 1.168.10
+    '@tanstack/react-table':
+      specifier: ^8.21.3
+      version: 8.21.3
+    '@tanstack/zod-adapter':
+      specifier: 1.167.0
+      version: 1.167.0
+    '@types/nodemailer':
+      specifier: 8.0.1
+      version: 8.0.1
     '@types/react':
       specifier: ^19.1.0
       version: 19.1.17
@@ -24,22 +75,76 @@ catalogs:
     '@vitejs/plugin-react':
       specifier: ^5.1.1
       version: 5.2.0
+    alchemy:
+      specifier: 2.0.0-beta.57
+      version: 2.0.0-beta.57
+    babel-plugin-react-compiler:
+      specifier: 19.1.0-rc.2
+      version: 19.1.0-rc.2
     better-auth:
       specifier: ^1.6.23
       version: 1.6.23
+    cross-fetch:
+      specifier: ^4.1.0
+      version: 4.1.0
+    dotenv-cli:
+      specifier: ^7.4.4
+      version: 7.4.4
+    effect-query:
+      specifier: 1.0.0
+      version: 1.0.0
+    jose:
+      specifier: ^6.0.11
+      version: 6.1.3
+    lucide-react:
+      specifier: ^0.555.0
+      version: 0.555.0
+    nodemailer:
+      specifier: 9.0.3
+      version: 9.0.3
+    playwright-core:
+      specifier: 1.61.1
+      version: 1.61.1
+    react:
+      specifier: 19.1.0
+      version: 19.1.0
+    react-dom:
+      specifier: 19.1.0
+      version: 19.1.0
+    react-hook-form:
+      specifier: ^7.60.0
+      version: 7.81.0
+    sonner:
+      specifier: ^2.0.6
+      version: 2.0.7
+    tailwindcss:
+      specifier: ^4.1.17
+      version: 4.3.2
+    tw-animate-css:
+      specifier: ^1.2.4
+      version: 1.4.0
+    typescript:
+      specifier: 6.0.3
+      version: 6.0.3
     vite:
       specifier: ^7.3.5
       version: 7.3.5
+    vite-plus:
+      specifier: 0.1.23
+      version: 0.1.23
     vite-tsconfig-paths:
       specifier: ^5.1.4
       version: 5.1.4
+    vitest:
+      specifier: npm:@voidzero-dev/vite-plus-test@0.1.23
+      version: 0.1.23
     zod:
       specifier: ^4.1.13
       version: 4.3.6
 
 overrides:
-  react: 19.1.0
-  react-dom: 19.1.0
+  '@tanstack/query-core': 5.100.11
+  tsyringe>tslib: 2.8.1
   '@babel/plugin-transform-modules-systemjs@<=7.29.3': 7.29.4
   '@babel/core@<=7.29.0': 7.29.6
   '@esbuild-kit/core-utils>esbuild': 0.25.0
@@ -91,9 +196,9 @@ importers:
     dependencies:
       '@effect/language-service':
         specifier: 'catalog:'
-        version: 0.64.1
+        version: 0.86.6
       '@types/node':
-        specifier: ^24.10.4
+        specifier: ^24.0.12
         version: 24.10.4
       '@typescript/native-preview':
         specifier: 7.0.0-dev.20260210.1
@@ -105,8 +210,8 @@ importers:
         specifier: ^7.0.3
         version: 7.0.3
       drizzle-kit:
-        specifier: ^0.31.8
-        version: 0.31.8
+        specifier: 1.0.0-rc.3
+        version: 1.0.0-rc.3
       simple-git-hooks:
         specifier: ^2.13.1
         version: 2.13.1
@@ -117,11 +222,11 @@ importers:
         specifier: ^0.2.15
         version: 0.2.15
       turbo:
-        specifier: ^2.9.14
+        specifier: ^2.9.16
         version: 2.10.4
       typescript:
-        specifier: 5.6.3
-        version: 5.6.3
+        specifier: 'catalog:'
+        version: 6.0.3
     devDependencies:
       '@biomejs/biome':
         specifier: 2.3.11
@@ -129,15 +234,112 @@ importers:
       dotenv-cli:
         specifier: ^8.0.0
         version: 8.0.0
+      tslib:
+        specifier: 2.8.1
+        version: 2.8.1
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
       ultracite:
         specifier: 5.0.39
-        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)
+        version: 5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)(tsx@4.21.0)
+
+  apps/backend:
+    dependencies:
+      '@voidhash/ai-shared':
+        specifier: workspace:*
+        version: link:../../packages/ai-shared
+      '@voidhash/api-contracts':
+        specifier: workspace:*
+        version: link:../../packages/api-contracts
+      '@voidhash/app-store-server-sdk':
+        specifier: workspace:*
+        version: link:../../packages/app-store-server-sdk
+      '@voidhash/clickhouse-db':
+        specifier: workspace:*
+        version: link:../../packages/clickhouse-db
+      '@voidhash/core':
+        specifier: workspace:*
+        version: link:../../packages/core
+      '@voidhash/db':
+        specifier: workspace:*
+        version: link:../../packages/db
+      '@voidhash/google-play-server-sdk':
+        specifier: workspace:*
+        version: link:../../packages/google-play-server-sdk
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../../packages/mimic-schema
+      '@voidhash/paywall-renderer-preact':
+        specifier: workspace:*
+        version: link:../../packages/paywall-renderer-preact
+      '@voidhash/paywall-workspace':
+        specifier: workspace:*
+        version: link:../../packages/paywall-workspace
+      '@voidhash/rpc':
+        specifier: workspace:*
+        version: link:../../packages/rpc
+      '@workos-inc/node':
+        specifier: 9.2.0
+        version: 9.2.0
+      ai:
+        specifier: ^7.0.0
+        version: 7.0.22(zod@4.3.6)
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      preact:
+        specifier: ^10.25.4
+        version: 10.29.2
+      workers-ai-provider:
+        specifier: ^3.0.0
+        version: 3.3.1(@ai-sdk/provider@4.0.3)(ai@7.0.22(zod@4.3.6))
+      zod:
+        specifier: 'catalog:'
+        version: 4.3.6
+    devDependencies:
+      '@effect/platform-bun':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@effect/platform-node':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+      '@types/bun':
+        specifier: latest
+        version: 1.3.14
+      '@types/node':
+        specifier: ^20
+        version: 20.19.43
+      '@types/react':
+        specifier: ^19
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: ^19
+        version: 19.1.9(@types/react@19.1.17)
+      '@voidhash/platform':
+        specifier: workspace:*
+        version: link:../../packages/platform
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      alchemy:
+        specifier: 'catalog:'
+        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0)
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      vitest:
+        specifier: 'catalog:'
+        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   apps/cli:
     dependencies:
       '@better-auth/api-key':
         specifier: 'catalog:'
-        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
+        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
       '@effect/platform-node':
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -152,7 +354,7 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -171,13 +373,10 @@ importers:
     devDependencies:
       '@effect/language-service':
         specifier: 'catalog:'
-        version: 0.64.1
+        version: 0.86.6
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
-      '@voidhash/react-native':
-        specifier: workspace:*
-        version: link:../../libraries/react-native
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
@@ -192,43 +391,43 @@ importers:
         version: 4.21.0
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   apps/mimic-admin:
     dependencies:
       '@radix-ui/react-alert-dialog':
         specifier: ^1.1.14
-        version: 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-dialog':
         specifier: ^1.1.14
-        version: 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-dropdown-menu':
         specifier: ^2.1.15
-        version: 2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-label':
         specifier: ^2.1.7
-        version: 2.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-scroll-area':
         specifier: ^1.2.8
-        version: 1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-select':
         specifier: ^2.2.5
-        version: 2.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-separator':
         specifier: ^1.1.7
-        version: 1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot':
         specifier: ^1.2.3
         version: 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-tabs':
         specifier: ^1.1.12
-        version: 1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-tooltip':
         specifier: ^1.2.7
-        version: 1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/react-query':
         specifier: ^5.80.7
         version: 5.101.2(react@19.1.0)
@@ -237,7 +436,7 @@ importers:
         version: 5.101.2(@tanstack/react-query@5.101.2(react@19.1.0))(react@19.1.0)
       '@tanstack/react-router':
         specifier: 1.163.3
-        version: 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@voidhash/mimic-core':
         specifier: workspace:*
         version: link:../../packages/mimic-core
@@ -254,21 +453,21 @@ importers:
         specifier: ^0.513.0
         version: 0.513.0(react@19.1.0)
       react:
-        specifier: 19.1.0
+        specifier: ^19.1.0
         version: 19.1.0
       react-dom:
-        specifier: 19.1.0
-        version: 19.1.0(react@19.1.0)
+        specifier: ^19.1.0
+        version: 19.1.1(react@19.1.0)
       sonner:
         specifier: ^2.0.3
-        version: 2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.0.7(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       tailwind-merge:
         specifier: ^3.3.0
         version: 3.6.0
     devDependencies:
       '@tailwindcss/vite':
         specifier: ^4.1.8
-        version: 4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.3.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@types/react':
         specifier: 19.1.17
         version: 19.1.17
@@ -277,7 +476,7 @@ importers:
         version: 19.1.9(@types/react@19.1.17)
       '@vitejs/plugin-react':
         specifier: ^4.5.2
-        version: 4.7.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.7.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       tailwindcss:
         specifier: ^4.1.8
         version: 4.3.0
@@ -289,10 +488,10 @@ importers:
         version: 6.0.3
       vite:
         specifier: 'catalog:'
-        version: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   apps/mimic-cli:
     dependencies:
@@ -329,34 +528,74 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  apps/mimic-db:
+    dependencies:
+      '@effect/platform-node':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+      '@effect/sql-pg':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../../packages/mimic-core
+      '@voidhash/mimic-server':
+        specifier: workspace:*
+        version: link:../../packages/mimic-server
+      '@voidhash/platform':
+        specifier: workspace:*
+        version: link:../../packages/platform
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+    devDependencies:
+      '@types/bun':
+        specifier: latest
+        version: 1.3.14
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: 'catalog:'
+        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   apps/studio:
     dependencies:
       '@tailwindcss/vite':
         specifier: ^4.1.13
-        version: 4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.3.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitejs/plugin-react':
         specifier: ^5.2.0
-        version: 5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
       react:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0
       react-dom:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0(react@19.1.0)
       tailwindcss:
         specifier: ^4.1.13
         version: 4.3.0
       vite:
         specifier: 7.3.5
-        version: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
@@ -371,14 +610,345 @@ importers:
         specifier: 5.6.3
         version: 5.6.3
 
-  examples/mimic-example:
-    dependencies:
+  apps/www:
+    dependencies:
+      '@ai-sdk/react':
+        specifier: ^4.0.0
+        version: 4.0.23(react@19.1.0)(zod@4.3.6)
+      '@apple/app-store-server-library':
+        specifier: ^1.6.0
+        version: 1.6.0
+      '@axiomhq/pino':
+        specifier: ^1.3.1
+        version: 1.8.0
+      '@basementstudio/shader-lab':
+        specifier: ^1.3.14
+        version: 1.4.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)
+      '@chronark/zod-bird':
+        specifier: ^0.3.10
+        version: 0.3.10
       '@dnd-kit/core':
         specifier: ^6.3.1
         version: 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@dnd-kit/modifiers':
+        specifier: ^9.0.0
+        version: 9.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)
       '@dnd-kit/sortable':
         specifier: ^10.0.0
         version: 10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)
+      '@effect/platform-node':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+      '@fontsource-variable/geist':
+        specifier: 'catalog:'
+        version: 5.2.9
+      '@fontsource-variable/geist-mono':
+        specifier: 'catalog:'
+        version: 5.2.8
+      '@headless-tree/core':
+        specifier: ^1.7.0
+        version: 1.7.0
+      '@headless-tree/react':
+        specifier: ^1.7.0
+        version: 1.7.0(@headless-tree/core@1.7.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@hookform/resolvers':
+        specifier: 'catalog:'
+        version: 5.4.0(react-hook-form@7.81.0(react@19.1.0))
+      '@monaco-editor/react':
+        specifier: ^4.7.0
+        version: 4.7.0(monaco-editor@0.52.2)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@paper-design/shaders-react':
+        specifier: ^0.0.71
+        version: 0.0.71(@types/react@19.1.17)(react@19.1.0)
+      '@paralleldrive/cuid2':
+        specifier: ^3.3.0
+        version: 3.3.0
+      '@pixi/layout':
+        specifier: ^3.2.0
+        version: 3.2.1(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)(yoga-layout@3.2.1)
+      '@pixi/react':
+        specifier: ^8.0.0-beta.25
+        version: 8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)
+      '@pixi/ui':
+        specifier: ^2.3.0
+        version: 2.3.2(pixi.js@8.19.0)
+      '@radix-ui/react-slot':
+        specifier: ^1.2.3
+        version: 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@react-three/drei':
+        specifier: ^10.1.2
+        version: 10.7.7(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/react@19.1.17)(@types/three@0.185.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)
+      '@react-three/fiber':
+        specifier: ^9.1.2
+        version: 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)
+      '@react-three/postprocessing':
+        specifier: ^3.0.4
+        version: 3.0.4(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/three@0.185.1)(react@19.1.0)(three@0.178.0)
+      '@t3-oss/env-core':
+        specifier: ^0.13.8
+        version: 0.13.11(typescript@6.0.3)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
+      '@tanstack/query-core':
+        specifier: 5.100.11
+        version: 5.100.11
+      '@tanstack/react-query':
+        specifier: 'catalog:'
+        version: 5.100.11(react@19.1.0)
+      '@tanstack/react-query-devtools':
+        specifier: 'catalog:'
+        version: 5.100.11(@tanstack/react-query@5.100.11(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router':
+        specifier: 'catalog:'
+        version: 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router-ssr-query':
+        specifier: 'catalog:'
+        version: 1.167.0(@tanstack/query-core@5.100.11)(@tanstack/react-query@5.100.11(react@19.1.0))(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-start':
+        specifier: 'catalog:'
+        version: 1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/react-table':
+        specifier: 'catalog:'
+        version: 8.21.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/zod-adapter':
+        specifier: 'catalog:'
+        version: 1.167.0(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(zod@4.3.6)
+      '@voidhash/ai-shared':
+        specifier: workspace:*
+        version: link:../../packages/ai-shared
+      '@voidhash/api-contracts':
+        specifier: workspace:*
+        version: link:../../packages/api-contracts
+      '@voidhash/core':
+        specifier: workspace:*
+        version: link:../../packages/core
+      '@voidhash/lib':
+        specifier: workspace:*
+        version: link:../../packages/lib
+      '@voidhash/mimic':
+        specifier: workspace:*
+        version: link:../../packages/mimic
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../../packages/mimic-core
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../../packages/mimic-schema
+      '@voidhash/paywall-build':
+        specifier: workspace:*
+        version: link:../../packages/paywall-build
+      '@voidhash/paywall-builtins':
+        specifier: workspace:*
+        version: link:../../packages/paywall-builtins
+      '@voidhash/paywall-renderer-preact':
+        specifier: workspace:*
+        version: link:../../packages/paywall-renderer-preact
+      '@voidhash/paywall-renderer-web-core':
+        specifier: workspace:*
+        version: link:../../packages/paywall-renderer-web-core
+      '@voidhash/paywall-workspace':
+        specifier: workspace:*
+        version: link:../../packages/paywall-workspace
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+      '@voidhash/rpc':
+        specifier: workspace:*
+        version: link:../../packages/rpc
+      '@voidhash/ui':
+        specifier: workspace:*
+        version: link:../../packages/ui
+      '@workos-inc/node':
+        specifier: 8.13.0
+        version: 8.13.0
+      '@workos/authkit-session':
+        specifier: 0.5.2
+        version: 0.5.2(@workos-inc/node@8.13.0)(typescript@6.0.3)
+      '@workos/authkit-tanstack-react-start':
+        specifier: 0.8.2
+        version: 0.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(@workos-inc/node@8.13.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(typescript@6.0.3)
+      ai:
+        specifier: ^7.0.0
+        version: 7.0.22(zod@4.3.6)
+      class-variance-authority:
+        specifier: ^0.7.1
+        version: 0.7.1
+      clsx:
+        specifier: ^2.1.1
+        version: 2.1.1
+      cross-fetch:
+        specifier: 'catalog:'
+        version: 4.1.0
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      effect-query:
+        specifier: 'catalog:'
+        version: 1.0.0(@tanstack/react-query@5.100.11(react@19.1.0))(effect@4.0.0-beta.84)(react@19.1.0)
+      esbuild-wasm:
+        specifier: ^0.25.10
+        version: 0.25.12
+      fractional-indexing-jittered:
+        specifier: ^1.0.0
+        version: 1.0.0
+      fumadocs-core:
+        specifier: 15.8.2
+        version: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      fumadocs-mdx:
+        specifier: 12.0.1
+        version: 12.0.1(fumadocs-core@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      fumadocs-ui:
+        specifier: 15.8.2
+        version: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(tailwindcss@4.3.2)
+      h3-v2:
+        specifier: npm:h3@2.0.1-rc.18
+        version: h3@2.0.1-rc.18
+      lucide-react:
+        specifier: 'catalog:'
+        version: 0.555.0(react@19.1.0)
+      lucide-static:
+        specifier: ^0.555.0
+        version: 0.555.0
+      monaco-editor:
+        specifier: ^0.52.2
+        version: 0.52.2
+      motion:
+        specifier: ^12.23.12
+        version: 12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      nanoid:
+        specifier: ^5.1.6
+        version: 5.1.6
+      next-themes:
+        specifier: ^0.4.6
+        version: 0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      pino:
+        specifier: ^9.7.0
+        version: 9.14.0
+      pixi-viewport:
+        specifier: ^6.0.3
+        version: 6.0.3(pixi.js@8.19.0)
+      pixi.js:
+        specifier: ^8.2.6
+        version: 8.19.0
+      react:
+        specifier: 'catalog:'
+        version: 19.1.0
+      react-dom:
+        specifier: 'catalog:'
+        version: 19.1.0(react@19.1.0)
+      react-easy-crop:
+        specifier: ^6.0.2
+        version: 6.2.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react-hook-form:
+        specifier: 'catalog:'
+        version: 7.81.0(react@19.1.0)
+      recharts:
+        specifier: ^2.15.0
+        version: 2.15.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      resend:
+        specifier: ^4.5.1
+        version: 4.8.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      server-only:
+        specifier: ^0.0.1
+        version: 0.0.1
+      slug:
+        specifier: ^11.0.0
+        version: 11.0.1
+      sonner:
+        specifier: 'catalog:'
+        version: 2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      streamdown:
+        specifier: ^2.0.0
+        version: 2.5.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      stripe:
+        specifier: ^18.0.0
+        version: 18.5.0(@types/node@20.19.43)
+      tailwind-merge:
+        specifier: ^3.3.1
+        version: 3.6.0
+      three:
+        specifier: ^0.178.0
+        version: 0.178.0
+      vite-tsconfig-paths:
+        specifier: 'catalog:'
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      voidhash:
+        specifier: 0.0.1-alpha.4
+        version: 0.0.1-alpha.4
+      y-protocols:
+        specifier: ^1.0.6
+        version: 1.0.7(yjs@13.6.31)
+      yjs:
+        specifier: ^13.6.27
+        version: 13.6.31
+      zod:
+        specifier: 'catalog:'
+        version: 4.3.6
+      zod-openapi:
+        specifier: ^5.3.1
+        version: 5.4.6(zod@4.3.6)
+      zustand:
+        specifier: ^5.0.8
+        version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+    devDependencies:
+      '@effect/vitest':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
+      '@tailwindcss/vite':
+        specifier: 'catalog:'
+        version: 4.3.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@types/mdx':
+        specifier: ^2.0.13
+        version: 2.0.14
+      '@types/node':
+        specifier: ^20
+        version: 20.19.43
+      '@types/react':
+        specifier: 'catalog:'
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: 'catalog:'
+        version: 19.2.3(@types/react@19.1.17)
+      '@vitejs/plugin-react':
+        specifier: 'catalog:'
+        version: 5.2.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/ui':
+        specifier: 4.1.0
+        version: 4.1.0(@voidzero-dev/vite-plus-test@0.1.23)
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      babel-plugin-react-compiler:
+        specifier: 'catalog:'
+        version: 19.1.0-rc.2
+      dotenv-cli:
+        specifier: 'catalog:'
+        version: 7.4.4
+      tailwindcss:
+        specifier: 'catalog:'
+        version: 4.3.2
+      tw-animate-css:
+        specifier: 'catalog:'
+        version: 1.4.0
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite:
+        specifier: 'catalog:'
+        version: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: 'catalog:'
+        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+
+  examples/mimic-example:
+    dependencies:
+      '@dnd-kit/core':
+        specifier: ^6.3.1
+        version: 6.3.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@dnd-kit/sortable':
+        specifier: ^10.0.0
+        version: 10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react@19.1.0)
       '@dnd-kit/utilities':
         specifier: ^3.2.2
         version: 3.2.2(react@19.1.0)
@@ -390,13 +960,13 @@ importers:
         version: 4.3.2
       '@tanstack/react-router':
         specifier: 1.163.3
-        version: 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/react-router-devtools':
         specifier: 1.163.3
-        version: 1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(csstype@3.2.3)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(csstype@3.2.3)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/router-plugin':
         specifier: 1.163.3
-        version: 1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/mimic':
         specifier: workspace:*
         version: link:../../packages/mimic
@@ -413,11 +983,11 @@ importers:
         specifier: 8.5.10
         version: 8.5.10
       react:
-        specifier: 19.1.0
+        specifier: ^19.0.0
         version: 19.1.0
       react-dom:
-        specifier: 19.1.0
-        version: 19.1.0(react@19.1.0)
+        specifier: ^19.0.0
+        version: 19.1.1(react@19.1.0)
       redaxios:
         specifier: ^0.5.1
         version: 0.5.1
@@ -457,7 +1027,7 @@ importers:
         version: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   examples/react-native-example:
     dependencies:
@@ -490,7 +1060,7 @@ importers:
         version: 17.0.8(expo@54.0.33)(react@19.1.0)
       expo-router:
         specifier: ~6.0.23
-        version: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
+        version: 6.0.23(70ed454dc246c77d537ead71b0fe3992)
       expo-splash-screen:
         specifier: ~31.0.11
         version: 31.0.13(expo@54.0.33)
@@ -504,7 +1074,7 @@ importers:
         specifier: ^1.0.6
         version: 1.0.6
       react:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0
       react-native:
         specifier: 0.81.5
@@ -536,7 +1106,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
+        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.7.0)
@@ -556,9 +1126,6 @@ importers:
         specifier: workspace:*
         version: link:../../packages/generated-clients
     devDependencies:
-      '@effect/platform':
-        specifier: 'catalog:'
-        version: 0.94.5(effect@4.0.0-beta.84)
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
@@ -576,10 +1143,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/paywalls:
     dependencies:
@@ -600,10 +1167,10 @@ importers:
         specifier: ^0.25.10
         version: 0.25.12
       react:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0
       react-dom:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0(react@19.1.0)
       tsup:
         specifier: ^8.5.1
@@ -616,7 +1183,7 @@ importers:
         version: 5.6.3
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/react-native:
     dependencies:
@@ -635,10 +1202,10 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))
+        version: 0.1.5(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
@@ -659,7 +1226,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -682,20 +1249,14 @@ importers:
         specifier: 'catalog:'
         version: 5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
-        specifier: ^4.1.6
-        version: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        specifier: 'catalog:'
+        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   libraries/web:
     dependencies:
-      '@effect/platform':
-        specifier: 'catalog:'
-        version: 0.94.5(effect@4.0.0-beta.84)
       '@voidhash/generated-clients':
         specifier: workspace:*
         version: link:../../packages/generated-clients
-      effect:
-        specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
@@ -706,14 +1267,17 @@ importers:
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
       jsdom:
         specifier: ^20.0.3
         version: 20.0.3
       react:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0
       react-dom:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0(react@19.1.0)
       tsup:
         specifier: ^8.5.1
@@ -726,10 +1290,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/ai-shared:
     dependencies:
@@ -754,13 +1318,13 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/api-contracts:
     dependencies:
@@ -798,10 +1362,164 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  packages/clickhouse-db:
+    dependencies:
+      '@clickhouse/client-web':
+        specifier: ^1.12.0
+        version: 1.23.1
+      '@effect/platform-bun':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+
+  packages/core:
+    dependencies:
+      '@distilled.cloud/stripe':
+        specifier: 0.24.9
+        version: 0.24.9(effect@4.0.0-beta.84)
+      '@effect/sql-clickhouse':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)
+      '@paralleldrive/cuid2':
+        specifier: ^2.2.2
+        version: 2.3.1
+      '@voidhash/api-contracts':
+        specifier: workspace:*
+        version: link:../api-contracts
+      '@voidhash/app-store-server-sdk':
+        specifier: workspace:*
+        version: link:../app-store-server-sdk
+      '@voidhash/clickhouse-db':
+        specifier: workspace:*
+        version: link:../clickhouse-db
+      '@voidhash/db':
+        specifier: workspace:*
+        version: link:../db
+      '@voidhash/google-play-server-sdk':
+        specifier: workspace:*
+        version: link:../google-play-server-sdk
+      '@voidhash/lib':
+        specifier: workspace:*
+        version: link:../lib
+      '@voidhash/paywall-build':
+        specifier: workspace:*
+        version: link:../paywall-build
+      '@voidhash/paywall-workspace':
+        specifier: workspace:*
+        version: link:../paywall-workspace
+      '@voidhash/platform':
+        specifier: workspace:*
+        version: link:../platform
+      '@voidhash/rpc':
+        specifier: workspace:*
+        version: link:../rpc
+      '@workos-inc/node':
+        specifier: 9.2.0
+        version: 9.2.0
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      nanoid:
+        specifier: ^5.1.5
+        version: 5.1.6
+      uncrypto:
+        specifier: ^0.1.3
+        version: 0.1.3
+    devDependencies:
+      '@effect/vitest':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: 'catalog:'
+        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+
+  packages/db:
+    dependencies:
+      '@effect/sql-pg':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@voidhash/lib':
+        specifier: workspace:*
+        version: link:../lib
+      drizzle-orm:
+        specifier: 1.0.0-rc.3
+        version: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3)
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      pg:
+        specifier: ^8.13.0
+        version: 8.22.0
+    devDependencies:
+      '@types/node':
+        specifier: ^24.0.12
+        version: 24.10.4
+      '@types/pg':
+        specifier: ^8.15.0
+        version: 8.20.0
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vitest:
+        specifier: 'catalog:'
+        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+
+  packages/emails:
+    dependencies:
+      '@react-email/components':
+        specifier: 0.0.34
+        version: 0.0.34(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react:
+        specifier: ^19.1.0
+        version: 19.1.0
+      react-dom:
+        specifier: ^19.1.0
+        version: 19.1.1(react@19.1.0)
+    devDependencies:
+      '@types/react':
+        specifier: ^19.1.5
+        version: 19.1.17
+      '@types/react-dom':
+        specifier: ^19.1.5
+        version: 19.1.9(@types/react@19.1.17)
+      react-email:
+        specifier: 3.0.7
+        version: 3.0.7(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
 
   packages/generated-clients:
     dependencies:
@@ -833,10 +1551,10 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/lib:
     dependencies:
@@ -870,10 +1588,10 @@ importers:
         specifier: ^26.1.0
         version: 26.1.0
       react:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0
       react-dom:
-        specifier: 19.1.0
+        specifier: 'catalog:'
         version: 19.1.0(react@19.1.0)
       tsdown:
         specifier: ^0.18.2
@@ -883,10 +1601,10 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       zustand:
         specifier: ^5.0.9
         version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
@@ -901,10 +1619,10 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/mimic-schema:
     dependencies:
@@ -926,7 +1644,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -951,10 +1669,10 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-build:
     dependencies:
@@ -979,7 +1697,7 @@ importers:
         version: 4.21.0
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1007,7 +1725,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1047,13 +1765,13 @@ importers:
         version: 6.0.3
       vite:
         specifier: 'catalog:'
-        version: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-renderer-web-core:
     dependencies:
@@ -1075,10 +1793,10 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-workspace:
     dependencies:
@@ -1106,7 +1824,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 0.1.23
-        version: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1126,6 +1844,19 @@ importers:
         specifier: 6.0.3
         version: 6.0.3
 
+  packages/rpc:
+    dependencies:
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+    devDependencies:
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+
   packages/shared:
     dependencies:
       effect:
@@ -1145,7 +1876,7 @@ importers:
     dependencies:
       '@base-ui/react':
         specifier: ^1.1.0
-        version: 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@hookform/resolvers':
         specifier: ^5.1.1
         version: 5.4.0(react-hook-form@7.81.0(react@19.1.0))
@@ -1160,7 +1891,7 @@ importers:
         version: 2.1.1
       cmdk:
         specifier: 1.1.1
-        version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       color-hash:
         specifier: ^2.0.2
         version: 2.0.2
@@ -1172,37 +1903,37 @@ importers:
         version: 8.6.0(react@19.1.0)
       input-otp:
         specifier: ^1.4.2
-        version: 1.4.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.4.2(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       lucide-react:
         specifier: ^0.555.0
         version: 0.555.0(react@19.1.0)
       next-themes:
         specifier: ^0.4.6
-        version: 0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 0.4.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       radix-ui:
         specifier: ^1.4.2
-        version: 1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react:
-        specifier: 19.1.0
+        specifier: ^19.1.0
         version: 19.1.0
       react-day-picker:
         specifier: 8.10.1
         version: 8.10.1(date-fns@4.4.0)(react@19.1.0)
       react-dom:
-        specifier: 19.1.0
-        version: 19.1.0(react@19.1.0)
+        specifier: ^19.1.0
+        version: 19.1.1(react@19.1.0)
       react-hook-form:
         specifier: ^7.60.0
         version: 7.81.0(react@19.1.0)
       react-resizable-panels:
         specifier: ^3.0.3
-        version: 3.0.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 3.0.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       recharts:
         specifier: ^2.15.4
-        version: 2.15.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.15.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       sonner:
         specifier: ^2.0.1
-        version: 2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.0.7(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       tailwind-merge:
         specifier: ^3.0.2
         version: 3.6.0
@@ -1214,7 +1945,7 @@ importers:
         version: 10.1.1(react@19.1.0)
       vaul:
         specifier: ^1.1.2
-        version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       zod:
         specifier: ^4.1.13
         version: 4.3.6
@@ -1232,6 +1963,137 @@ importers:
         specifier: 6.0.3
         version: 6.0.3
 
+  selfhost/entry:
+    dependencies:
+      '@effect/platform-node':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+      '@effect/sql-pg':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@voidhash/api-contracts':
+        specifier: workspace:*
+        version: link:../../packages/api-contracts
+      '@voidhash/app-store-server-sdk':
+        specifier: workspace:*
+        version: link:../../packages/app-store-server-sdk
+      '@voidhash/backend':
+        specifier: workspace:*
+        version: link:../../apps/backend
+      '@voidhash/clickhouse-db':
+        specifier: workspace:*
+        version: link:../../packages/clickhouse-db
+      '@voidhash/core':
+        specifier: workspace:*
+        version: link:../../packages/core
+      '@voidhash/db':
+        specifier: workspace:*
+        version: link:../../packages/db
+      '@voidhash/mimic-core':
+        specifier: workspace:*
+        version: link:../../packages/mimic-core
+      '@voidhash/mimic-db':
+        specifier: workspace:*
+        version: link:../../apps/mimic-db
+      '@voidhash/mimic-schema':
+        specifier: workspace:*
+        version: link:../../packages/mimic-schema
+      '@voidhash/paywall-renderer-preact':
+        specifier: workspace:*
+        version: link:../../packages/paywall-renderer-preact
+      '@voidhash/paywall-renderer-web-core':
+        specifier: workspace:*
+        version: link:../../packages/paywall-renderer-web-core
+      '@voidhash/paywalls':
+        specifier: workspace:*
+        version: link:../../libraries/paywalls
+      '@voidhash/platform':
+        specifier: workspace:*
+        version: link:../../packages/platform
+      '@voidhash/platform-node':
+        specifier: workspace:*
+        version: link:../platform-node
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      esbuild:
+        specifier: ^0.25.10
+        version: 0.25.12
+      jose:
+        specifier: 'catalog:'
+        version: 6.1.3
+      preact:
+        specifier: ^10.25.4
+        version: 10.29.2
+      react:
+        specifier: 'catalog:'
+        version: 19.1.0
+      react-dom:
+        specifier: 'catalog:'
+        version: 19.1.0(react@19.1.0)
+      srvx:
+        specifier: 0.11.15
+        version: 0.11.15
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
+      ws:
+        specifier: 8.21.0
+        version: 8.21.0
+    devDependencies:
+      '@types/node':
+        specifier: ^24.0.12
+        version: 24.10.4
+      '@types/ws':
+        specifier: ^8.18.1
+        version: 8.18.1
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  selfhost/platform-node:
+    dependencies:
+      '@effect-aws/client-s3':
+        specifier: 'catalog:'
+        version: 2.0.0-beta.4(effect@4.0.0-beta.84)
+      '@effect/sql-pg':
+        specifier: 'catalog:'
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@voidhash/platform':
+        specifier: workspace:*
+        version: link:../../packages/platform
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      nodemailer:
+        specifier: 'catalog:'
+        version: 9.0.3
+      playwright-core:
+        specifier: 'catalog:'
+        version: 1.61.1
+    devDependencies:
+      '@types/node':
+        specifier: ^24.0.12
+        version: 24.10.4
+      '@types/nodemailer':
+        specifier: 'catalog:'
+        version: 8.0.1
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../../packages/tsconfig
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
 packages:
 
   '@0no-co/graphql.web@1.2.0':
@@ -1242,10 +2104,48 @@ packages:
       graphql:
         optional: true
 
+  '@ai-sdk/gateway@4.0.16':
+    resolution: {integrity: sha512-9iYxdOLquoOFk5e+02P9qfBIA+EJU0FNJvyjGxi4iXJabt2+GlbaCg7TX0sTtxOsBVkdabkatqWM6+kvp53tBg==}
+    engines: {node: '>=22'}
+    peerDependencies:
+      zod: ^3.25.76 || ^4.1.8
+
+  '@ai-sdk/mcp@2.0.10':
+    resolution: {integrity: sha512-LP47CEk3e6BwCqXamvv4nKbgOWQ5z5T/qS/J2fola5h98KTy7JT7I1yw5LKtB89MZBLviYmEh98Ep4ovHOz/vA==}
+    engines: {node: '>=22'}
+    peerDependencies:
+      zod: ^3.25.76 || ^4.1.8
+
+  '@ai-sdk/provider-utils@5.0.7':
+    resolution: {integrity: sha512-OSm5/5kdrHa11WIOo5LYgDKnxYWp5aB/wx5EXRHi0jpUGduMDeB6oht9U6p+UNNWIP3F/EqPpV8d7vdP/iRnqg==}
+    engines: {node: '>=22'}
+    peerDependencies:
+      zod: ^3.25.76 || ^4.1.8
+
+  '@ai-sdk/provider@4.0.3':
+    resolution: {integrity: sha512-e0CpNWJUY7OxAFAnCZkw+ri9QOHWwTs1tXP42782KFGCU07qt8NiXCrCVowyCB5dP2r5/Uls+g2oPd8kOJn9dw==}
+    engines: {node: '>=22'}
+
+  '@ai-sdk/react@4.0.23':
+    resolution: {integrity: sha512-nJ96yQE1013tafK9Pec3uSGTScXg8dc3t4xyydm+a0AfkaSewR58+Eg3l+xqmQAR8tzFAgo/38we5DeXrcgcqw==}
+    engines: {node: '>=22'}
+    peerDependencies:
+      react: ^18 || ~19.0.1 || ~19.1.2 || ^19.2.1
+
+  '@alcalzone/ansi-tokenize@0.2.5':
+    resolution: {integrity: sha512-3NX/MpTdroi0aKz134A6RC2Gb2iXVECN4QaAXnvCIxxIm3C3AVB1mkUe8NaaiyvOpDfsrqWhYtj+Q6a62RrTsw==}
+    engines: {node: '>=18'}
+
+  '@alchemy.run/node-utils@0.0.5':
+    resolution: {integrity: sha512-5agdhQxWBodxa5hDRyjnpx91RTU3g+qd5fxYB7uNDCaOzB0XC47UU/KHR6zf6jhz/NXf61gJS+vhYwn8NHeRoQ==}
+
   '@alloc/quick-lru@5.2.0':
     resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==}
     engines: {node: '>=10'}
 
+  '@antfu/install-pkg@1.1.0':
+    resolution: {integrity: sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ==}
+
   '@antfu/ni@0.23.2':
     resolution: {integrity: sha512-FSEVWXvwroExDXUu8qV6Wqp2X3D1nJ0Li4LFymCyvCVrm7I3lNfG0zZWSWvGU1RE7891eTnFTyh31L3igOwNKQ==}
     hasBin: true
@@ -1253,54 +2153,160 @@ packages:
   '@antfu/utils@8.1.1':
     resolution: {integrity: sha512-Mex9nXf9vR6AhcXmMrlz/HVgYYZpVGJ6YlPgwl7UnaFpnshXs6EK/oa5Gpf3CzENMjkvEx2tQtntGnb7UtSTOQ==}
 
+  '@apple/app-store-server-library@1.6.0':
+    resolution: {integrity: sha512-CmwCXLtkR6RdYjJjuiV2V7RNN6cJLeI7NoZtuDDhalM4/6MfNsZLrTyZvDWKWJsArh0LKoiplK+cc5+PCkwKUQ==}
+
   '@asamuzakjp/css-color@3.2.0':
     resolution: {integrity: sha512-K1A6z8tS3XsmCMM86xoWdn7Fkdn9m6RSVtocUrJYIwZnFVkng/PvkEoWtOWmP+Scc6saYWHWZYbndEEXxl24jw==}
 
-  '@babel/cli@7.28.3':
-    resolution: {integrity: sha512-n1RU5vuCX0CsaqaXm9I0KUCNKNQMy5epmzl/xdSSm70bSqhg9GWhgeosypyQLc0bK24+Xpk1WGzZlI9pJtkZdg==}
-    engines: {node: '>=6.9.0'}
-    hasBin: true
-    peerDependencies:
-      '@babel/core': 7.29.6
+  '@aws-crypto/crc32@5.2.0':
+    resolution: {integrity: sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==}
+    engines: {node: '>=16.0.0'}
 
-  '@babel/code-frame@7.10.4':
-    resolution: {integrity: sha512-vG6SvB6oYEhvgisZNFRmRCUkLz11c7rp+tbNTynGqc6mS1d5ATd/sGyV6W0KZZnXRKMTzZDRgQT3Ou9jhpAfUg==}
+  '@aws-crypto/util@5.2.0':
+    resolution: {integrity: sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==}
 
-  '@babel/code-frame@7.29.0':
-    resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/checksums@3.1000.16':
+    resolution: {integrity: sha512-EKnvkXSmz3IpA99tCNuI+dLFXyZyClSm8zns9sB/elvkU+MTuomAs6toJMPMBf98/fICG/urXDkzGz0/c3yyAQ==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/code-frame@7.29.7':
-    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/client-cognito-identity@3.1081.0':
+    resolution: {integrity: sha512-ipDgvZ3Hy8kaFrkwj62yuoghKkZi5WrWTiJnaqGc/ntbuAuijIkRWhzSb8d1MGEE+qb+vFFTrWVFwGSqt76TCA==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/compat-data@7.28.5':
-    resolution: {integrity: sha512-6uFXyCayocRbqhZOB+6XcuZbkMNimwfVGFji8CTZnCzOHVGvDqzvitu1re2AU5LROliz7eQPhB8CpAMvnx9EjA==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/client-s3@3.1085.0':
+    resolution: {integrity: sha512-O0xe8sR50AYkwxlvRRsV0qytEO2dtXQTQ1CF3YBBdE5xtVkbu27H0vGa1mjQi1/+fbYM80AWEIPai5jZmXyubw==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/compat-data@7.29.0':
-    resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/core@3.975.1':
+    resolution: {integrity: sha512-8qh/6EYb7hl/ZwVfQufhbMEZs1gQIc7GbdrIf4eprQJ7cv042+74nE6l3YDfyWNzb9iPXb8fRyYSHkNIk5eE6Q==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/core@7.29.6':
-    resolution: {integrity: sha512-QdxmAo/ikZqqRGA8s43ww8lcql6naWRvEz0FFrl6MIlc7Gi6TroXnSdWa5U/kq6fzcpqpHesicQxFZIieZbyIA==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/credential-provider-cognito-identity@3.972.56':
+    resolution: {integrity: sha512-nedaZz6Wz2FGUBMsWhlvBPGIkTMfRuMJ99YDHJI4CaC31JS8WPyTavEAio74cfd5nGhi0A8XASB4fZA5VqTdOQ==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/generator@7.29.1':
-    resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/credential-provider-env@3.972.57':
+    resolution: {integrity: sha512-1RfJaF7SW1TOnvNGU7kaYjwUf5H3sfm+synGH1bHhRlqcnxCt3szebH3dmKEyY4tuGcbQ6ffzUT89cRitBV8OQ==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/generator@7.29.7':
-    resolution: {integrity: sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/credential-provider-http@3.972.59':
+    resolution: {integrity: sha512-sRCkpTiFnCdQvuaRVjQ6SVoHu6i7RUpurVo1c4F81HWhPvUJ7Wdp5MNtSdX1O29CNXc8em3O5m52hCjVtAD9SA==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/helper-annotate-as-pure@7.27.3':
-    resolution: {integrity: sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/credential-provider-ini@3.973.1':
+    resolution: {integrity: sha512-6d8H6ZAh3ZPKZ6fe1nG2OWeZEZPtt9ravoD1dezPdPtsSkJRoxGAnFSHwKT3E/Te6fHE30zRzjV6TD12rvF6yQ==}
+    engines: {node: '>=20.0.0'}
 
-  '@babel/helper-compilation-targets@7.27.2':
-    resolution: {integrity: sha512-2+1thGUUWWjLTYTHZWK1n8Yga0ijBz1XAhUXcKy81rd5g6yh7hGqMp45v7cadSbEHc9G3OTv45SyneRN3ps4DQ==}
-    engines: {node: '>=6.9.0'}
+  '@aws-sdk/credential-provider-login@3.972.63':
+    resolution: {integrity: sha512-GREWRrMj0XnNKMaVa/Mauoaui26qBEHu71WWqXbwZOu/jFQOnPZjTf7u0KtGKC8VGa6VUs9kDWGgocrKNLS9vw==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-node@3.972.66':
+    resolution: {integrity: sha512-f+qjRXZpz7sgzbc4QB+6nLKfyKFgRRXzWdXbsKPv/VhVRyHsDyq4yBWC/B75BAJpFIcUeI2XR/3gdWJ677zB4A==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-process@3.972.57':
+    resolution: {integrity: sha512-TiVQhuU0pbhIZAUZacbPHMyzrIdiH+lnx+PMY/Pu/b93dJrq3wdZwzUJ0TPpvNxaqbHsxJvQZW3/h/beLiKq7Q==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-sso@3.973.1':
+    resolution: {integrity: sha512-3foTZUJ4821Ij60X7K3NJroygiZLnbBmarN+T//O2cjkISan90zElN3NBmgSlDrTQ7Gs6z/yO8V7h60QNcDZHQ==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-provider-web-identity@3.972.63':
+    resolution: {integrity: sha512-8qZLFhM69eKcS37m459ctPR05Qimycm/74OPVioe6wNZabMT54GYhwBju0+J656RkMasNSawWQu+c8CmBe3TUQ==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/credential-providers@3.1081.0':
+    resolution: {integrity: sha512-UHWvxd1F5nfBXBRXtQaXWoNT8CYKXZovLQOyz6XZlgFTGc2mWzzPGspOfnh49jwvB2qzsdH046i9jnnmND+64w==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/middleware-sdk-s3@3.972.62':
+    resolution: {integrity: sha512-k8JJwYXVYlOOjWnPZDThQS1xDFJgi5Dokt73qFlDtrZAbdcint5aIdjB9XgJAAQVP5OoqcefQmh1FYXiPpvsvw==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/nested-clients@3.997.31':
+    resolution: {integrity: sha512-BDHTpwcsZHEBNEJzOg/B1BkFYJxAXY50dau/NyVWs3d51F0WgIUGSWZot/Os+N3KpDhXeaXnz37mWffAvduREw==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/s3-request-presigner@3.1085.0':
+    resolution: {integrity: sha512-h8fv0zGAHPCjCpmAYdCeFE6trxXxLRxza0NRIajMZdnFgugtcIWcRAdAtc7rHvRTaXsej/I5YWXbq9SgKuCKow==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/signature-v4-multi-region@3.996.39':
+    resolution: {integrity: sha512-8+srXqYIF8KYMLC4FxMLEM5Ek7kUNibJu1R4m8/fUhhNYIZZz26oGtKkCr8I/HiG2fFQxBvaGgQZT4/mqRCSnA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/token-providers@3.1083.0':
+    resolution: {integrity: sha512-s0woKnxuHrExLc5L2ArIH5BMkbonHPtt+5hSBM8oknp9M6QTuUmmAmJ2E0EdzCGONrO+8+ADPqvv6UX0nNcc7A==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/types@3.974.0':
+    resolution: {integrity: sha512-QIBrw90CDm4O0UaIIzkU6DrFdeJzEb2Va5EPEVpyldj6sHJxB6cshhStJuhZxk3wR3PmjJlYsjPmY1kNb+KGBg==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/xml-builder@3.972.34':
+    resolution: {integrity: sha512-wHhWL1y7sN3enBA8POrPpQM5jCcmu2ozyhbRei4c8OjVcEaEs6yLucLa/pla457ggS/ysuy7bosagz3HaJkZXA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws/lambda-invoke-store@0.3.0':
+    resolution: {integrity: sha512-sl4Bm6yiMNYrZKkqqDFWN0UfnWhlS8ivKxrYl+6t0gCLrqr8y3B2IqZZbFRkfaVVp7C/baApyh71P+LeE1A2sQ==}
+    engines: {node: '>=18.0.0'}
+
+  '@axiomhq/js@1.8.0':
+    resolution: {integrity: sha512-VRkqV9XH+pkj8d9eRdw8TuWvXdCkVDMtDOz2rix5UAg7x5SlOeWhUz9fwc0ZgySosMSMA7WP7X0fFX8N/jBHtQ==}
+    engines: {node: '>=20'}
+
+  '@axiomhq/pino@1.8.0':
+    resolution: {integrity: sha512-bILt0wTEUyfOarcw7/E2gRya38GnSBVt2jOR7eGsUmCee/RgjFKMJj3ss5jwfJKOqb3yL2UJZCIKIydiMgGXJA==}
+    engines: {node: '>=20'}
+
+  '@babel/cli@7.28.3':
+    resolution: {integrity: sha512-n1RU5vuCX0CsaqaXm9I0KUCNKNQMy5epmzl/xdSSm70bSqhg9GWhgeosypyQLc0bK24+Xpk1WGzZlI9pJtkZdg==}
+    engines: {node: '>=6.9.0'}
+    hasBin: true
+    peerDependencies:
+      '@babel/core': 7.29.6
+
+  '@babel/code-frame@7.10.4':
+    resolution: {integrity: sha512-vG6SvB6oYEhvgisZNFRmRCUkLz11c7rp+tbNTynGqc6mS1d5ATd/sGyV6W0KZZnXRKMTzZDRgQT3Ou9jhpAfUg==}
+
+  '@babel/code-frame@7.27.1':
+    resolution: {integrity: sha512-cjQ7ZlQ0Mv3b47hABuTevyTuYN4i+loJKGeV9flcCgIK37cCXRh+L1bd3iBHlynerhQ7BhCkn2BPbQUL+rGqFg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/code-frame@7.29.0':
+    resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/code-frame@7.29.7':
+    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/compat-data@7.28.5':
+    resolution: {integrity: sha512-6uFXyCayocRbqhZOB+6XcuZbkMNimwfVGFji8CTZnCzOHVGvDqzvitu1re2AU5LROliz7eQPhB8CpAMvnx9EjA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/compat-data@7.29.0':
+    resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/core@7.29.6':
+    resolution: {integrity: sha512-QdxmAo/ikZqqRGA8s43ww8lcql6naWRvEz0FFrl6MIlc7Gi6TroXnSdWa5U/kq6fzcpqpHesicQxFZIieZbyIA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/generator@7.29.1':
+    resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/generator@7.29.7':
+    resolution: {integrity: sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-annotate-as-pure@7.27.3':
+    resolution: {integrity: sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg==}
+    engines: {node: '>=6.9.0'}
 
   '@babel/helper-compilation-targets@7.28.6':
     resolution: {integrity: sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==}
@@ -1345,12 +2351,6 @@ packages:
     resolution: {integrity: sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-module-transforms@7.28.3':
-    resolution: {integrity: sha512-gytXUbs8k2sXS9PnQptz5o0QnpLL51SwASIORY6XaBKF88nsOT0Zw9szLqlSGQDP/4TljBAD5y98p2U1fqkdsw==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': 7.29.6
-
   '@babel/helper-module-transforms@7.28.6':
     resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==}
     engines: {node: '>=6.9.0'}
@@ -1391,18 +2391,10 @@ packages:
     resolution: {integrity: sha512-Tub4ZKEXqbPjXgWLl2+3JpQAYBJ8+ikpQ2Ocj/q/r0LwE3UhENh7EUabyHjz2kCEsrRY83ew2DQdHluuiDQFzg==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-string-parser@7.27.1':
-    resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/helper-string-parser@7.29.7':
     resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-validator-identifier@7.28.5':
-    resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/helper-validator-identifier@7.29.7':
     resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
     engines: {node: '>=6.9.0'}
@@ -1423,6 +2415,11 @@ packages:
     resolution: {integrity: sha512-llL88JShoCsth8fF8R4SJnIn+WLvR6ccFxu1H3FlMhDontdcmZWf2HgIZ7AIqV3Xcck1idlohrN4EUBQz6klbw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/parser@7.24.5':
+    resolution: {integrity: sha512-EOv5IK8arwh3LI47dz1b0tKUb/1uhHAnHJOrjgtQMIpu1uXd9mlFrJg9IUgGUgZ41Ch0K8REPTYpO7B76b4vJg==}
+    engines: {node: '>=6.0.0'}
+    hasBin: true
+
   '@babel/parser@7.29.0':
     resolution: {integrity: sha512-IyDgFV5GeDUVX4YdF/3CPULtVGSXXMLh1xVIgdCgxApktqnQV0r7/8Nqthg+8YLGaAtdyIlo2qIdZrbCv4+7ww==}
     engines: {node: '>=6.0.0'}
@@ -2036,18 +3033,10 @@ packages:
     resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/traverse@7.28.5':
-    resolution: {integrity: sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/traverse@7.29.0':
     resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/types@7.29.0':
-    resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/types@7.29.7':
     resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
     engines: {node: '>=6.9.0'}
@@ -2059,8 +3048,8 @@ packages:
       '@date-fns/tz': ^1.2.0
       '@types/react': ^17 || ^18 || ^19
       date-fns: ^4.0.0
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^17 || ^18 || ^19
+      react-dom: ^17 || ^18 || ^19
     peerDependenciesMeta:
       '@date-fns/tz':
         optional: true
@@ -2073,12 +3062,19 @@ packages:
     resolution: {integrity: sha512-gFFiltORVmW/N6IILTGxizP3PBpVpysqML1ALY5Vk0mH+7faVkCknOU31goYHN5Aoek2dkjxva1XOD2Ce9WuIg==}
     peerDependencies:
       '@types/react': ^17 || ^18 || ^19
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^17 || ^18 || ^19
+      react-dom: ^17 || ^18 || ^19
     peerDependenciesMeta:
       '@types/react':
         optional: true
 
+  '@basementstudio/shader-lab@1.4.0':
+    resolution: {integrity: sha512-pTkonPz31rIFyPSHu9HKj2edxcaaiPsiMTtEVUUVosEyMjHVrsI0KBUCu6WTe3kaoKpzorZaBUlzcnz5WiHmMA==}
+    peerDependencies:
+      react: ^19.0.0
+      react-dom: ^19.0.0
+      three: ^0.183.0
+
   '@bcoe/v8-coverage@0.2.3':
     resolution: {integrity: sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==}
 
@@ -2191,24 +3187,28 @@ packages:
     engines: {node: '>=14.21.3'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@biomejs/cli-linux-arm64@2.3.11':
     resolution: {integrity: sha512-l4xkGa9E7Uc0/05qU2lMYfN1H+fzzkHgaJoy98wO+b/7Gl78srbCRRgwYSW+BTLixTBrM6Ede5NSBwt7rd/i6g==}
     engines: {node: '>=14.21.3'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@biomejs/cli-linux-x64-musl@2.3.11':
     resolution: {integrity: sha512-vU7a8wLs5C9yJ4CB8a44r12aXYb8yYgBn+WeyzbMjaCMklzCv1oXr8x+VEyWodgJt9bDmhiaW/I0RHbn7rsNmw==}
     engines: {node: '>=14.21.3'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@biomejs/cli-linux-x64@2.3.11':
     resolution: {integrity: sha512-/1s9V/H3cSe0r0Mv/Z8JryF5x9ywRxywomqZVLHAoa/uN0eY7F8gEngWKNS5vbbN/BsfpCG5yeBT5ENh50Frxg==}
     engines: {node: '>=14.21.3'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@biomejs/cli-win32-arm64@2.3.11':
     resolution: {integrity: sha512-PZQ6ElCOnkYapSsysiTy0+fYX+agXPlWugh6+eQ6uPKI3vKAqNp6TnMhoM3oY2NltSB89hz59o8xIfOdyhi9Iw==}
@@ -2222,12 +3222,67 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@braintree/sanitize-url@7.1.2':
+    resolution: {integrity: sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA==}
+
+  '@chevrotain/types@11.1.2':
+    resolution: {integrity: sha512-U+HFai5+zmJCkK86QsaJtoITlboZHBqrVketcO2ROv865xfCMSFpELQoz1GkX5GzME8pTa+3kbKrZHQtI0gdbw==}
+
+  '@chronark/zod-bird@0.3.10':
+    resolution: {integrity: sha512-QkGvy8Lz+NTGPOfBH2lIEAxiaizp9vrEufxsi1wYz8WM0/ADqs4hUqO1zRjt7ntoZdKiXCcnpZtzUMdOjfo5AQ==}
+
   '@clack/core@0.5.0':
     resolution: {integrity: sha512-p3y0FIOwaYRUPRcMO7+dlmLh8PSRcrjuTndsiA0WAFbWES0mLZlrjVoBRZ9DzkPFJZG6KGkJmoEAY0ZcVWTkow==}
 
   '@clack/prompts@0.11.0':
     resolution: {integrity: sha512-pMN5FcrEw9hUkZA4f+zLlzivQSeQf5dRGJjSUbvVYDLvpKCdQx5OaknvKzgbtXOizhP+SJJJjqEbOe55uKKfAw==}
 
+  '@clickhouse/client-web@1.23.1':
+    resolution: {integrity: sha512-VpYPSnBD7PWmEucp8wfd24u9tkyLwFH2ATyMT9R6J8b4U9snbVX1QjanJt/92YtSjam1GblhM7t3oChmJF/m0Q==}
+
+  '@clickhouse/client@1.23.1':
+    resolution: {integrity: sha512-vs3/Zc1dHvT171btW5nMoPsPCJ6QVJ5pp7obxzO5sjqwFx/jjz9wwCAqcFOdc2DhprugDBaVn+4dVY8hG3A9nw==}
+    engines: {node: '>=20'}
+
+  '@cloudflare/unenv-preset@2.16.1':
+    resolution: {integrity: sha512-ECxObrMfyTl5bhQf/lZCXwo5G6xX9IAUo+nDMKK4SZ8m4Jvvxp52vilxyySSWh2YTZz8+HQ07qGH/2rEom1vDw==}
+    peerDependencies:
+      unenv: 2.0.0-rc.24
+      workerd: '>1.20260305.0 <2.0.0-0'
+    peerDependenciesMeta:
+      workerd:
+        optional: true
+
+  '@cloudflare/workerd-darwin-64@1.20260526.1':
+    resolution: {integrity: sha512-/pR3GH3gfv0PUp7DjI8v0aAIDOqFwibq4bg5xT7TZgcVdBV/cJQWckdXCMqiRtHiawLwogUX00EIOINkYJ1Zqg==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@cloudflare/workerd-darwin-arm64@1.20260526.1':
+    resolution: {integrity: sha512-rcyu0iANYfaiezKh3Mcao1O4IIgVfQldxduiL5TZT1sP0NIeRY4YReSTrzPxNnXxSYaIqaqRHMcHbUM/ic4knA==}
+    engines: {node: '>=16'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@cloudflare/workerd-linux-64@1.20260526.1':
+    resolution: {integrity: sha512-5EZAEnlLwa9oGJRo8Nd3iY5Wcd9ROGNNG90xNIGp8MEjj8v2jTn42NC47fCZKFdnLj3+S+vWEhu1x0GVJnALjA==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [linux]
+
+  '@cloudflare/workerd-linux-arm64@1.20260526.1':
+    resolution: {integrity: sha512-X/YBQXeXFeCN7QTStoWrATEBc9WKl7PIqkw/dQkjyJ72gh3rkLe0+Xkzp3wO7gtxTDQMa7NPGy1W4+sdMf8q1g==}
+    engines: {node: '>=16'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@cloudflare/workerd-windows-64@1.20260526.1':
+    resolution: {integrity: sha512-R+tqpFFdcfZIljx8fIW9rj9fRTtDgfoA2yonsfAGa6e8snrmr+38mdFHtkRC0D3UyZpn/hOtmXiUBfdX2gMR7Q==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [win32]
+
   '@csstools/color-helpers@5.1.0':
     resolution: {integrity: sha512-S11EXWJyy0Mz5SYvRmY8nJYTFFd1LCNV+7cXyAgQtOOuzb4EsgfqDufL+9esx72/eLhsRdGZwaldu/h+E4t4BA==}
     engines: {node: '>=18'}
@@ -2256,43 +3311,140 @@ packages:
     resolution: {integrity: sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==}
     engines: {node: '>=18'}
 
+  '@dimforge/rapier3d-compat@0.12.0':
+    resolution: {integrity: sha512-uekIGetywIgopfD97oDL5PfeezkFpNhwlzlaEYNOA0N6ghdsOvh/HYjSMek5Q2O1PYvRSDFcqFVJl4r4ZBwOow==}
+
+  '@distilled.cloud/aws@0.26.1':
+    resolution: {integrity: sha512-Sni0/JFz/eEPLghU+IzYbx1SlZq7SBD+Iu1d600rWXJFrcH9UdwwwsAjRJsmW/cRd1yBO2xtmousAVwcS7TGEw==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/axiom@0.26.1':
+    resolution: {integrity: sha512-pNg4BF2Qs4Z8ICka3BtP0j+7E8VBpLry7+zbGgbM2/5eT7nSlyYCh762l/ynHcddyIHyhk+Nh1K7XVZE2gR5+A==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/cloudflare-rolldown-plugin@0.11.2':
+    resolution: {integrity: sha512-bUKwL6ZTFb2tXALbmN1E+ZjDtXZzQYNSwdtlXstdWMwU/rnmHX/f9QXfhqRCyYE+RWpz6Of6Gy4YvY07cV5Dow==}
+    peerDependencies:
+      rolldown: ^1.0.1
+      vite: 7.3.5
+    peerDependenciesMeta:
+      rolldown:
+        optional: true
+      vite:
+        optional: true
+
+  '@distilled.cloud/cloudflare-runtime@0.11.2':
+    resolution: {integrity: sha512-+yzzuSzuQeDx+1qNSaDXG3VlVNPlWZlL1Vu07As7tOCvp8PnJ1vN7HQPsYX21SXnCC5TWkUoM4JbhBgzZKg5Rg==}
+    peerDependencies:
+      '@distilled.cloud/cloudflare': ^0.24.5
+      '@effect/platform-bun': '>=4.0.0-beta.78 || >=4.0.0'
+      '@effect/platform-node': '>=4.0.0-beta.78 || >=4.0.0'
+      effect: 4.0.0-beta.84
+    peerDependenciesMeta:
+      '@effect/platform-bun':
+        optional: true
+      '@effect/platform-node':
+        optional: true
+
+  '@distilled.cloud/cloudflare-vite-plugin@0.11.2':
+    resolution: {integrity: sha512-celowpIhSB2DNn/AFpnmXKjuuBNV2CRFTlxvyuwCMAnYNOqhJ4dfruHU+MOWrNLvHR3ptw2jkT6lkSwghIrTEw==}
+    peerDependencies:
+      '@distilled.cloud/cloudflare': ^0.24.5
+      '@distilled.cloud/cloudflare-runtime': 0.11.2
+      '@effect/platform-bun': '>=4.0.0-beta.78 || >=4.0.0'
+      '@effect/platform-node': '>=4.0.0-beta.78 || >=4.0.0'
+      effect: 4.0.0-beta.84
+      vite: 7.3.5
+    peerDependenciesMeta:
+      '@effect/platform-bun':
+        optional: true
+      '@effect/platform-node':
+        optional: true
+
+  '@distilled.cloud/cloudflare@0.26.1':
+    resolution: {integrity: sha512-wCNc730Aw5Fxiwnd511m/5+uhNxD5Y9buAzbT3wypkjZnTOspPuQYB8iU0HDsB3IC87QdWoB1530XJI6OfOQWg==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/core@0.24.9':
+    resolution: {integrity: sha512-0RXv01StS6/yof8ugdaj7PPtaHx6geTY6hH7oZ9f1yfg+8Lqs/b2GE7v4VKyW6A2XnMlMVH8vodeUgbnPmyBUA==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/core@0.26.1':
+    resolution: {integrity: sha512-F5i5ruleNOrRx1dtWBqHPU/ELz58c+FpBHvJcZhUFWicz12Vblw9UE61PjrcJYE0rGzMLBZheLrGSOBSjJnAnw==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/neon@0.26.1':
+    resolution: {integrity: sha512-lyHGVfa1h66cZUl27+aSCgPCJYRWnmS/ZDjrCmWhBvNGvpxo89WASIYoSwEwwEIe36YFOx+zQIDa0+Enf5/zKQ==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/planetscale@0.26.1':
+    resolution: {integrity: sha512-x1B+V3caIKQvhEaxULyABMwayjSYicGrqfE42kdNAaBYlQvGh3l+6VbebOzDDdg+9SrkufCX5gucsxrL3w2JZA==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/stripe@0.24.9':
+    resolution: {integrity: sha512-7DeQPqpKunYhDt60+lw+yRm3y3DIei9HwEhhNUz51jwEc7YsggSJVaihbEFk8AgQ3e37RLdYDcu8YWPo/qR4lg==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
+
   '@dnd-kit/accessibility@3.1.1':
     resolution: {integrity: sha512-2P+YgaXF+gRsIihwwY1gCsQSYnu9Zyj2py8kY5fFvUM1qm2WA2u639R6YNVfU4GWr+ZM5mqEsfHZZLoRONbemw==}
     peerDependencies:
-      react: 19.1.0
+      react: '>=16.8.0'
 
   '@dnd-kit/core@6.3.1':
     resolution: {integrity: sha512-xkGBRQQab4RLwgXxoqETICr6S5JlogafbhNsidmrkVv2YRs5MLwpjoF2qpiGjQt8S9AoxtIV603s0GIUpY5eYQ==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: '>=16.8.0'
+      react-dom: '>=16.8.0'
+
+  '@dnd-kit/modifiers@9.0.0':
+    resolution: {integrity: sha512-ybiLc66qRGuZoC20wdSSG6pDXFikui/dCNGthxv4Ndy8ylErY0N3KVxY2bgo7AWwIbxDmXDg3ylAFmnrjcbVvw==}
+    peerDependencies:
+      '@dnd-kit/core': ^6.3.0
+      react: '>=16.8.0'
 
   '@dnd-kit/sortable@10.0.0':
     resolution: {integrity: sha512-+xqhmIIzvAYMGfBYYnbKuNicfSsk4RksY2XdmJhT+HAC01nix6fHCztU68jooFiMUB01Ky3F0FyOvhG/BZrWkg==}
     peerDependencies:
       '@dnd-kit/core': ^6.3.0
-      react: 19.1.0
+      react: '>=16.8.0'
 
   '@dnd-kit/utilities@3.2.2':
     resolution: {integrity: sha512-+MKAJEOfaBe5SmV6t34p80MMKhjvUz0vRrvVJbPT0WElzaOJ/1xs+D+KDv+tD/NE5ujfrChEcshd4fLn0wpiqg==}
     peerDependencies:
-      react: 19.1.0
+      react: '>=16.8.0'
+
+  '@drizzle-team/brocli@0.11.0':
+    resolution: {integrity: sha512-hD3pekGiPg0WPCCGAZmusBBJsDqGUR66Y452YgQsZOnkdQ7ViEPKuyP4huUGEZQefp8g34RRodXYmJ2TbCH+tg==}
+
+  '@effect-aws/client-s3@2.0.0-beta.4':
+    resolution: {integrity: sha512-fcrAOopriDJ47vdZLG1apXY3VnAd1EtSyaHRfWyX7dYy8/AKi88p/XsfHIj48FMXac9KtXGBpXEfBDQl0+mnWA==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
 
-  '@drizzle-team/brocli@0.10.2':
-    resolution: {integrity: sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==}
+  '@effect-aws/commons@1.0.0-beta.4':
+    resolution: {integrity: sha512-u2HU2HbAbzgQaMlsFjc40Kmdb6juNWFNjOhNO2zPpaHjjtMizsRGBqABL+Su3sMlDXw+PTjNXRHJSRB5aNdgIQ==}
+    peerDependencies:
+      effect: 4.0.0-beta.84
 
-  '@effect/language-service@0.64.1':
-    resolution: {integrity: sha512-1S7Xr2t9mygR6QyiIdCQUvPwSvcf5EBpnWmKa/8rC4P0btFfw/RiWRI8bvFI2AW+U4KStMUHYxPu4QEsk4y8bg==}
+  '@effect/language-service@0.86.6':
+    resolution: {integrity: sha512-uwXbp+lWzt60bZnm6lG6S5DWy0m6TthUzV2hcQoiS6NzieEDm07tuBakscxOXoO+AU9+yTH+0TSIa9mEDt9dFA==}
     hasBin: true
 
-  '@effect/platform-node-shared@4.0.0-beta.84':
-    resolution: {integrity: sha512-WQ6+gGMYgnuwL+rUHKlxFon1T/CfK1ezxRYSjbylqovWeA2lrO7OHDSBqdwPyXJFDt2KqkZEEtbl9HarlTF/eg==}
-    engines: {node: '>=18.0.0'}
+  '@effect/platform-bun@4.0.0-beta.84':
+    resolution: {integrity: sha512-9OkPYheW/UKMaJqFU/L6ex0UNMlCRUAJac+vl6Tv1G5XkCBPwc0l7NEOAkDUceprRi1N2bm4dvCjAS2O9oG/uA==}
     peerDependencies:
       effect: 4.0.0-beta.84
 
-  '@effect/platform-node-shared@4.0.0-beta.91':
-    resolution: {integrity: sha512-JX++yhomaOEpQmnTYuhn+pKAgKg5MQvycAf1rXGtyVKi202Nc5nK37xbywDcugfwrc1FrPxrxa3BY3lbSc74cw==}
+  '@effect/platform-node-shared@4.0.0-beta.84':
+    resolution: {integrity: sha512-WQ6+gGMYgnuwL+rUHKlxFon1T/CfK1ezxRYSjbylqovWeA2lrO7OHDSBqdwPyXJFDt2KqkZEEtbl9HarlTF/eg==}
     engines: {node: '>=18.0.0'}
     peerDependencies:
       effect: 4.0.0-beta.84
@@ -2304,8 +3456,14 @@ packages:
       effect: 4.0.0-beta.84
       ioredis: ^5.7.0
 
-  '@effect/platform@0.94.5':
-    resolution: {integrity: sha512-z05APUiDDPbodhTkH/RJqOLoCU11bU2IZLfcwLFrld03+ob1VeqRnELQlmueLIYm6NZifHAtjl32V+GRt34y4A==}
+  '@effect/sql-clickhouse@4.0.0-beta.84':
+    resolution: {integrity: sha512-ekW9FVWJGFUVUkxwANAh5FLRlv7M5+/vHnG2Eps5ygzmzSBYyvQ/idgVXFJQoEazXt/dQEBN1tznkuwIJXByVw==}
+    peerDependencies:
+      '@effect/platform-node': ^4.0.0-beta.84
+      effect: 4.0.0-beta.84
+
+  '@effect/sql-pg@4.0.0-beta.84':
+    resolution: {integrity: sha512-DPEwPlbF4ECwQIMpGLKORB+Dxvvv8Hf9yUGrY3QtorT2U9xyzFAi6NAhU0HGox+WfSvnBvfFGK2Z9Y3UBEQOnw==}
     peerDependencies:
       effect: 4.0.0-beta.84
 
@@ -2318,31 +3476,14 @@ packages:
   '@emnapi/core@1.10.0':
     resolution: {integrity: sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==}
 
-  '@emnapi/core@1.7.1':
-    resolution: {integrity: sha512-o1uhUASyo921r2XtHYOHy7gdkGLge8ghBEQHMWmyJFoXlpU58kIrhhN3w26lpQb6dspetweapMn2CSNwQ8I4wg==}
-
   '@emnapi/runtime@1.10.0':
     resolution: {integrity: sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==}
 
-  '@emnapi/runtime@1.7.1':
-    resolution: {integrity: sha512-PVtJr5CmLwYAU9PZDMITZoR5iAOShYREoR45EyyLrbntV50mdePTgUn4AmOw90Ifcj+x2kRjdzr1HP3RrNiHGA==}
-
-  '@emnapi/wasi-threads@1.1.0':
-    resolution: {integrity: sha512-WI0DdZ8xFSbgMjR1sFsKABJ/C5OnRrjT06JXbZKexJGrDuPTzZdDYfFlsgcCXCyf+suG5QU2e/y1Wo2V/OapLQ==}
-
   '@emnapi/wasi-threads@1.2.1':
     resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
 
-  '@esbuild-kit/core-utils@3.3.2':
-    resolution: {integrity: sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ==}
-    deprecated: 'Merged into tsx: https://tsx.is'
-
-  '@esbuild-kit/esm-loader@2.6.5':
-    resolution: {integrity: sha512-FxEMIkJKnodyA1OaCUoEvbYRkoZlLZ4d/eXFu9Fh8CbBBgP5EmZxrfTRyN0qpXZ4vOvqnE5YdRdcrmUUXuU+dA==}
-    deprecated: 'Merged into tsx: https://tsx.is'
-
-  '@esbuild/aix-ppc64@0.25.0':
-    resolution: {integrity: sha512-O7vun9Sf8DFjH2UtqK8Ku3LkquL9SZL8OLY1T5NZkA34+wG3OQF7cl4Ql8vdNzM6fzBbYfLaiRLIOZ+2FOCgBQ==}
+  '@esbuild/aix-ppc64@0.23.0':
+    resolution: {integrity: sha512-3sG8Zwa5fMcA9bgqB8AfWPQ+HFke6uD3h1s3RIwUNK8EG7a4buxvuFTs3j1IMs2NXAk9F30C/FF4vxRgQCcmoQ==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [aix]
@@ -2371,8 +3512,8 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/android-arm64@0.25.0':
-    resolution: {integrity: sha512-grvv8WncGjDSyUBjN9yHXNt+cq0snxXbDxy5pJtzMKGmmpPxeAmAhWxXI+01lU5rwZomDgD3kJwulEnhTRUd6g==}
+  '@esbuild/android-arm64@0.23.0':
+    resolution: {integrity: sha512-EuHFUYkAVfU4qBdyivULuu03FhJO4IJN9PGuABGrFy4vUuzk91P2d+npxHcFdpUnfYKy0PuV+n6bKIpHOB3prQ==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
@@ -2401,8 +3542,8 @@ packages:
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm@0.25.0':
-    resolution: {integrity: sha512-PTyWCYYiU0+1eJKmw21lWtC+d08JDZPQ5g+kFyxP0V+es6VPPSUhM6zk8iImp2jbV6GwjX4pap0JFbUQN65X1g==}
+  '@esbuild/android-arm@0.23.0':
+    resolution: {integrity: sha512-+KuOHTKKyIKgEEqKbGTK8W7mPp+hKinbMBeEnNzjJGyFcWsfrXjSTNluJHCY1RqhxFurdD8uNXQDei7qDlR6+g==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [android]
@@ -2431,8 +3572,8 @@ packages:
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-x64@0.25.0':
-    resolution: {integrity: sha512-m/ix7SfKG5buCnxasr52+LI78SQ+wgdENi9CqyCXwjVR2X4Jkz+BpC3le3AoBPYTC9NHklwngVXvbJ9/Akhrfg==}
+  '@esbuild/android-x64@0.23.0':
+    resolution: {integrity: sha512-WRrmKidLoKDl56LsbBMhzTTBxrsVwTKdNbKDalbEZr0tcsBgCLbEtoNthOW6PX942YiYq8HzEnb4yWQMLQuipQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [android]
@@ -2461,8 +3602,8 @@ packages:
     cpu: [x64]
     os: [android]
 
-  '@esbuild/darwin-arm64@0.25.0':
-    resolution: {integrity: sha512-mVwdUb5SRkPayVadIOI78K7aAnPamoeFR2bT5nszFUZ9P8UpK4ratOdYbZZXYSqPKMHfS1wdHCJk1P1EZpRdvw==}
+  '@esbuild/darwin-arm64@0.23.0':
+    resolution: {integrity: sha512-YLntie/IdS31H54Ogdn+v50NuoWF5BDkEUFpiOChVa9UnKpftgwzZRrI4J132ETIi+D8n6xh9IviFV3eXdxfow==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [darwin]
@@ -2491,8 +3632,8 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.25.0':
-    resolution: {integrity: sha512-DgDaYsPWFTS4S3nWpFcMn/33ZZwAAeAFKNHNa1QN0rI4pUjgqf0f7ONmXf6d22tqTY+H9FNdgeaAa+YIFUn2Rg==}
+  '@esbuild/darwin-x64@0.23.0':
+    resolution: {integrity: sha512-IMQ6eme4AfznElesHUPDZ+teuGwoRmVuuixu7sv92ZkdQcPbsNHzutd+rAfaBKo8YK3IrBEi9SLLKWJdEvJniQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [darwin]
@@ -2521,8 +3662,8 @@ packages:
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/freebsd-arm64@0.25.0':
-    resolution: {integrity: sha512-VN4ocxy6dxefN1MepBx/iD1dH5K8qNtNe227I0mnTRjry8tj5MRk4zprLEdG8WPyAPb93/e4pSgi1SoHdgOa4w==}
+  '@esbuild/freebsd-arm64@0.23.0':
+    resolution: {integrity: sha512-0muYWCng5vqaxobq6LB3YNtevDFSAZGlgtLoAc81PjUfiFz36n4KMpwhtAd4he8ToSI3TGyuhyx5xmiWNYZFyw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [freebsd]
@@ -2551,8 +3692,8 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.25.0':
-    resolution: {integrity: sha512-mrSgt7lCh07FY+hDD1TxiTyIHyttn6vnjesnPoVDNmDfOmggTLXRv8Id5fNZey1gl/V2dyVK1VXXqVsQIiAk+A==}
+  '@esbuild/freebsd-x64@0.23.0':
+    resolution: {integrity: sha512-XKDVu8IsD0/q3foBzsXGt/KjD/yTKBCIwOHE1XwiXmrRwrX6Hbnd5Eqn/WvDekddK21tfszBSrE/WMaZh+1buQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [freebsd]
@@ -2581,8 +3722,8 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/linux-arm64@0.25.0':
-    resolution: {integrity: sha512-9QAQjTWNDM/Vk2bgBl17yWuZxZNQIF0OUUuPZRKoDtqF2k4EtYbpyiG5/Dk7nqeK6kIJWPYldkOcBqjXjrUlmg==}
+  '@esbuild/linux-arm64@0.23.0':
+    resolution: {integrity: sha512-j1t5iG8jE7BhonbsEg5d9qOYcVZv/Rv6tghaXM/Ug9xahM0nX/H2gfu6X6z11QRTMT6+aywOMA8TDkhPo8aCGw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [linux]
@@ -2611,8 +3752,8 @@ packages:
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm@0.25.0':
-    resolution: {integrity: sha512-vkB3IYj2IDo3g9xX7HqhPYxVkNQe8qTK55fraQyTzTX/fxaDtXiEnavv9geOsonh2Fd2RMB+i5cbhu2zMNWJwg==}
+  '@esbuild/linux-arm@0.23.0':
+    resolution: {integrity: sha512-SEELSTEtOFu5LPykzA395Mc+54RMg1EUgXP+iw2SJ72+ooMwVsgfuwXo5Fn0wXNgWZsTVHwY2cg4Vi/bOD88qw==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [linux]
@@ -2641,8 +3782,8 @@ packages:
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.25.0':
-    resolution: {integrity: sha512-43ET5bHbphBegyeqLb7I1eYn2P/JYGNmzzdidq/w0T8E2SsYL1U6un2NFROFRg1JZLTzdCoRomg8Rvf9M6W6Gg==}
+  '@esbuild/linux-ia32@0.23.0':
+    resolution: {integrity: sha512-P7O5Tkh2NbgIm2R6x1zGJJsnacDzTFcRWZyTTMgFdVit6E98LTxO+v8LCCLWRvPrjdzXHx9FEOA8oAZPyApWUA==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [linux]
@@ -2671,8 +3812,8 @@ packages:
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.25.0':
-    resolution: {integrity: sha512-fC95c/xyNFueMhClxJmeRIj2yrSMdDfmqJnyOY4ZqsALkDrrKJfIg5NTMSzVBr5YW1jf+l7/cndBfP3MSDpoHw==}
+  '@esbuild/linux-loong64@0.23.0':
+    resolution: {integrity: sha512-InQwepswq6urikQiIC/kkx412fqUZudBO4SYKu0N+tGhXRWUqAx+Q+341tFV6QdBifpjYgUndV1hhMq3WeJi7A==}
     engines: {node: '>=18'}
     cpu: [loong64]
     os: [linux]
@@ -2701,8 +3842,8 @@ packages:
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.25.0':
-    resolution: {integrity: sha512-nkAMFju7KDW73T1DdH7glcyIptm95a7Le8irTQNO/qtkoyypZAnjchQgooFUDQhNAy4iu08N79W4T4pMBwhPwQ==}
+  '@esbuild/linux-mips64el@0.23.0':
+    resolution: {integrity: sha512-J9rflLtqdYrxHv2FqXE2i1ELgNjT+JFURt/uDMoPQLcjWQA5wDKgQA4t/dTqGa88ZVECKaD0TctwsUfHbVoi4w==}
     engines: {node: '>=18'}
     cpu: [mips64el]
     os: [linux]
@@ -2731,8 +3872,8 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.25.0':
-    resolution: {integrity: sha512-NhyOejdhRGS8Iwv+KKR2zTq2PpysF9XqY+Zk77vQHqNbo/PwZCzB5/h7VGuREZm1fixhs4Q/qWRSi5zmAiO4Fw==}
+  '@esbuild/linux-ppc64@0.23.0':
+    resolution: {integrity: sha512-cShCXtEOVc5GxU0fM+dsFD10qZ5UpcQ8AM22bYj0u/yaAykWnqXJDpd77ublcX6vdDsWLuweeuSNZk4yUxZwtw==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [linux]
@@ -2761,8 +3902,8 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.25.0':
-    resolution: {integrity: sha512-5S/rbP5OY+GHLC5qXp1y/Mx//e92L1YDqkiBbO9TQOvuFXM+iDqUNG5XopAnXoRH3FjIUDkeGcY1cgNvnXp/kA==}
+  '@esbuild/linux-riscv64@0.23.0':
+    resolution: {integrity: sha512-HEtaN7Y5UB4tZPeQmgz/UhzoEyYftbMXrBCUjINGjh3uil+rB/QzzpMshz3cNUxqXN7Vr93zzVtpIDL99t9aRw==}
     engines: {node: '>=18'}
     cpu: [riscv64]
     os: [linux]
@@ -2791,8 +3932,8 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.25.0':
-    resolution: {integrity: sha512-XM2BFsEBz0Fw37V0zU4CXfcfuACMrppsMFKdYY2WuTS3yi8O1nFOhil/xhKTmE1nPmVyvQJjJivgDT+xh8pXJA==}
+  '@esbuild/linux-s390x@0.23.0':
+    resolution: {integrity: sha512-WDi3+NVAuyjg/Wxi+o5KPqRbZY0QhI9TjrEEm+8dmpY9Xir8+HE/HNx2JoLckhKbFopW0RdO2D72w8trZOV+Wg==}
     engines: {node: '>=18'}
     cpu: [s390x]
     os: [linux]
@@ -2821,8 +3962,8 @@ packages:
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-x64@0.25.0':
-    resolution: {integrity: sha512-9yl91rHw/cpwMCNytUDxwj2XjFpxML0y9HAOH9pNVQDpQrBxHy01Dx+vaMu0N1CKa/RzBD2hB4u//nfc+Sd3Cw==}
+  '@esbuild/linux-x64@0.23.0':
+    resolution: {integrity: sha512-a3pMQhUEJkITgAw6e0bWA+F+vFtCciMjW/LPtoj99MhVt+Mfb6bbL9hu2wmTZgNd994qTAEw+U/r6k3qHWWaOQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [linux]
@@ -2851,12 +3992,6 @@ packages:
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/netbsd-arm64@0.25.0':
-    resolution: {integrity: sha512-RuG4PSMPFfrkH6UwCAqBzauBWTygTvb1nxWasEJooGSJ/NwRw7b2HOwyRTQIU97Hq37l3npXoZGYMy3b3xYvPw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
   '@esbuild/netbsd-arm64@0.25.12':
     resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
     engines: {node: '>=18'}
@@ -2881,8 +4016,8 @@ packages:
     cpu: [arm64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.25.0':
-    resolution: {integrity: sha512-jl+qisSB5jk01N5f7sPCsBENCOlPiS/xptD5yxOx2oqQfyourJwIKLRA2yqWdifj3owQZCL2sn6o08dBzZGQzA==}
+  '@esbuild/netbsd-x64@0.23.0':
+    resolution: {integrity: sha512-cRK+YDem7lFTs2Q5nEv/HHc4LnrfBCbH5+JHu6wm2eP+d8OZNoSMYgPZJq78vqQ9g+9+nMuIsAO7skzphRXHyw==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [netbsd]
@@ -2911,8 +4046,8 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/openbsd-arm64@0.25.0':
-    resolution: {integrity: sha512-21sUNbq2r84YE+SJDfaQRvdgznTD8Xc0oc3p3iW/a1EVWeNj/SdUCbm5U0itZPQYRuRTW20fPMWMpcrciH2EJw==}
+  '@esbuild/openbsd-arm64@0.23.0':
+    resolution: {integrity: sha512-suXjq53gERueVWu0OKxzWqk7NxiUWSUlrxoZK7usiF50C6ipColGR5qie2496iKGYNLhDZkPxBI3erbnYkU0rQ==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openbsd]
@@ -2941,8 +4076,8 @@ packages:
     cpu: [arm64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.25.0':
-    resolution: {integrity: sha512-2gwwriSMPcCFRlPlKx3zLQhfN/2WjJ2NSlg5TKLQOJdV0mSxIcYNTMhk3H3ulL/cak+Xj0lY1Ym9ysDV1igceg==}
+  '@esbuild/openbsd-x64@0.23.0':
+    resolution: {integrity: sha512-6p3nHpby0DM/v15IFKMjAaayFhqnXV52aEmv1whZHX56pdkK+MEaLoQWj+H42ssFarP1PcomVhbsR4pkz09qBg==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [openbsd]
@@ -2995,8 +4130,8 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
-  '@esbuild/sunos-x64@0.25.0':
-    resolution: {integrity: sha512-bxI7ThgLzPrPz484/S9jLlvUAHYMzy6I0XiU1ZMeAEOBcS0VePBFxh1JjTQt3Xiat5b6Oh4x7UC7IwKQKIJRIg==}
+  '@esbuild/sunos-x64@0.23.0':
+    resolution: {integrity: sha512-BFelBGfrBwk6LVrmFzCq1u1dZbG4zy/Kp93w2+y83Q5UGYF1d8sCzeLI9NXjKyujjBBniQa8R8PzLFAUrSM9OA==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [sunos]
@@ -3025,8 +4160,8 @@ packages:
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/win32-arm64@0.25.0':
-    resolution: {integrity: sha512-ZUAc2YK6JW89xTbXvftxdnYy3m4iHIkDtK3CLce8wg8M2L+YZhIvO1DKpxrd0Yr59AeNNkTiic9YLf6FTtXWMw==}
+  '@esbuild/win32-arm64@0.23.0':
+    resolution: {integrity: sha512-lY6AC8p4Cnb7xYHuIxQ6iYPe6MfO2CC43XXKo9nBXDb35krYt7KGhQnOkRGar5psxYkircpCqfbNDB4uJbS2jQ==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [win32]
@@ -3055,8 +4190,8 @@ packages:
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.25.0':
-    resolution: {integrity: sha512-eSNxISBu8XweVEWG31/JzjkIGbGIJN/TrRoiSVZwZ6pkC6VX4Im/WV2cz559/TXLcYbcrDN8JtKgd9DJVIo8GA==}
+  '@esbuild/win32-ia32@0.23.0':
+    resolution: {integrity: sha512-7L1bHlOTcO4ByvI7OXVI5pNN6HSu6pUQq9yodga8izeuB1KcT2UkHaH6118QJwopExPn0rMHIseCTx1CRo/uNA==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [win32]
@@ -3085,8 +4220,8 @@ packages:
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-x64@0.25.0':
-    resolution: {integrity: sha512-ZENoHJBxA20C2zFzh6AI4fT6RraMzjYw4xKWemRTRmRVtN9c5DcH9r/f2ihEkMjOW5eGgrwCslG/+Y/3bL+DHQ==}
+  '@esbuild/win32-x64@0.23.0':
+    resolution: {integrity: sha512-Arm+WgUFLUATuoxCJcahGuk6Yj9Pzxd6l11Zb/2aAuv5kWWvvfhLFo2fni4uSK5vzlUdCGZ/BdV5tH8klj8p8g==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [win32]
@@ -3184,7 +4319,7 @@ packages:
   '@expo/devtools@0.1.8':
     resolution: {integrity: sha512-SVLxbuanDjJPgc0sy3EfXUMLb/tXzp6XIHkhtPVmTWJAp+FOr6+5SeiCfJrCzZFet0Ifyke2vX3sFcKwEvCXwQ==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
     peerDependenciesMeta:
       react:
@@ -3217,8 +4352,8 @@ packages:
     resolution: {integrity: sha512-nvM+Qv45QH7pmYvP8JB1G8JpScrWND3KrMA6ZKe62cwwNiX/BjHU28Ear0v/4bQWXlOY0mv6B8CDIm8JxXde9g==}
     peerDependencies:
       expo: '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: '*'
+      react-dom: '*'
       react-native: '*'
     peerDependenciesMeta:
       react-dom:
@@ -3263,7 +4398,7 @@ packages:
     resolution: {integrity: sha512-SBUyYKphmlfUBqxSfDdJ3jAdEVSALS2VUPOUyqn48oZmb2TL/O7t7/PQm5v4NQujYEPLPMTLn9KVw6H7twwbTA==}
     peerDependencies:
       expo-font: '>=14.0.4'
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   '@expo/ws-tunnel@1.0.6':
@@ -3282,12 +4417,31 @@ packages:
   '@floating-ui/react-dom@2.1.9':
     resolution: {integrity: sha512-JDjEFGCpImxDCA7JJKviA0M9+RtmJdj0m/NVU5IMgBK+AmZouAQQ7/+2GLH0GXXY0YMw9oXPB8hKdbPYg5QLYg==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: '>=16.8.0'
+      react-dom: '>=16.8.0'
 
   '@floating-ui/utils@0.2.12':
     resolution: {integrity: sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww==}
 
+  '@fontsource-variable/geist-mono@5.2.8':
+    resolution: {integrity: sha512-KI5bj+hkkRiHttYHmccotUZ80ZuZyai+RwI1d7UId0clkx/jXxlo8qYK8j54WzmpBjtMoEMPyllV7faDcj+6RA==}
+
+  '@fontsource-variable/geist@5.2.9':
+    resolution: {integrity: sha512-TP+QSBG3wxKGPE33CbMy/L0Nu3qvJ6Fy81Yc4LnQ95xH+i+cfEp8fyU8/kfV14YwszxIFPhnoMTbjL71waVpyQ==}
+
+  '@formatjs/intl-localematcher@0.6.2':
+    resolution: {integrity: sha512-XOMO2Hupl0wdd172Y06h6kLpBz6Dv+J4okPLl4LPtzbr8f66WbIoy4ev98EBuZ6ZK4h5ydTN6XneT4QVpD7cdA==}
+
+  '@headless-tree/core@1.7.0':
+    resolution: {integrity: sha512-LxcX7LNepwfOPrZcs4PNfDwCzbi326uCAX5jYBfw94jI+pZQA7ANaE/No3LW0XFgcBcQtK/G2bInbVEhLF1C/Q==}
+
+  '@headless-tree/react@1.7.0':
+    resolution: {integrity: sha512-hcnG4mpTP98KVWZYqKsXNOoiv7ZQqZVM2jWwzEWtF+VDSz+1O/juMI+/Q0G4lZM+ez07/tmBBWjvZub/mLAUXQ==}
+    peerDependencies:
+      '@headless-tree/core': '*'
+      react: '*'
+      react-dom: '*'
+
   '@hookform/resolvers@5.4.0':
     resolution: {integrity: sha512-EIsqr/t/qbinPIhGjMdtvutIN1Kk4uwbROE9/UQ93CAVGR7GkA7Y92+fX80OzXi/OB67jVFYwKGO1WzkxmkFZw==}
     peerDependencies:
@@ -3309,47 +4463,174 @@ packages:
     resolution: {integrity: sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==}
     engines: {node: '>=18.18'}
 
-  '@ioredis/commands@1.5.0':
-    resolution: {integrity: sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==}
+  '@iconify/types@2.0.0':
+    resolution: {integrity: sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==}
 
-  '@isaacs/fs-minipass@4.0.1':
-    resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
-    engines: {node: '>=18.0.0'}
+  '@iconify/utils@3.1.4':
+    resolution: {integrity: sha512-b1S7B1k9ohZ+iNTi2ATxbRYG9fTrJmUT0rc46bvVnNxqNRGW7dyo/vRREwyniI5IRN2RSJHDcm+s3BjWrSAjHw==}
 
-  '@isaacs/ttlcache@1.4.1':
-    resolution: {integrity: sha512-RQgQ4uQ+pLbqXfOmieB91ejmLwvSgv9nLx6sT6sD83s7umBypgg+OIBOBbEUiJXrfpnp9j0mRhYYdzp9uqq3lA==}
-    engines: {node: '>=12'}
+  '@img/sharp-darwin-arm64@0.33.5':
+    resolution: {integrity: sha512-UT4p+iz/2H4twwAoLCqfA9UH5pI6DggwKEGuaPy7nCVQ8ZsiY5PIcrRvD1DzuY3qYL07NtIQcWnBSY/heikIFQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [darwin]
 
-  '@istanbuljs/load-nyc-config@1.1.0':
-    resolution: {integrity: sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==}
-    engines: {node: '>=8'}
+  '@img/sharp-darwin-x64@0.33.5':
+    resolution: {integrity: sha512-fyHac4jIc1ANYGRDxtiqelIbdWkIuQaI84Mv45KvGRRxSAa7o7d1ZKAOBaYbnepLC1WqxfpimdeWfvqqSGwR2Q==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [darwin]
 
-  '@istanbuljs/schema@0.1.3':
-    resolution: {integrity: sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==}
-    engines: {node: '>=8'}
+  '@img/sharp-libvips-darwin-arm64@1.0.4':
+    resolution: {integrity: sha512-XblONe153h0O2zuFfTAbQYAX2JhYmDHeWikp1LM9Hul9gVPjFY427k6dFEcOL72O01QxQsWi761svJ/ev9xEDg==}
+    cpu: [arm64]
+    os: [darwin]
 
-  '@jest/console@29.7.0':
-    resolution: {integrity: sha512-5Ni4CU7XHQi32IJ398EEP4RrB8eV09sXP2ROqD4bksHrnTree52PsxvX8tpL8LvTZ3pFzXyPbNQReSN41CAhOg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+  '@img/sharp-libvips-darwin-x64@1.0.4':
+    resolution: {integrity: sha512-xnGR8YuZYfJGmWPvmlunFaWJsb9T/AO2ykoP3Fz/0X5XV2aoYBPkX6xqCQvUTKKiLddarLaxpzNe+b1hjeWHAQ==}
+    cpu: [x64]
+    os: [darwin]
 
-  '@jest/core@29.7.0':
-    resolution: {integrity: sha512-n7aeXWKMnGtDA48y8TLWJPJmLmmZ642Ceo78cYWEpiD7FzDgmNDV/GCVRorPABdXLJZ/9wzzgZAlHjXjxDHGsg==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-    peerDependencies:
-      node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
-    peerDependenciesMeta:
-      node-notifier:
-        optional: true
+  '@img/sharp-libvips-linux-arm64@1.0.4':
+    resolution: {integrity: sha512-9B+taZ8DlyyqzZQnoeIvDVR/2F4EbMepXMc/NdVbkzsJbzkUjhXv/70GQJ7tdLA4YJgNP25zukcxpX2/SueNrA==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
 
-  '@jest/create-cache-key-function@29.7.0':
-    resolution: {integrity: sha512-4QqS3LY5PBmTRHj9sAg1HLoPzqAI0uOX6wI/TRqHIcOxlFidy6YEmCQJk6FSZjNLGCeubDMfmkWL+qaLKhSGQA==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+  '@img/sharp-libvips-linux-arm@1.0.5':
+    resolution: {integrity: sha512-gvcC4ACAOPRNATg/ov8/MnbxFDJqf/pDePbBnuBDcjsI8PssmjoKMAz4LtLaVi+OnSb5FK/yIOamqDwGmXW32g==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
 
-  '@jest/diff-sequences@30.0.1':
-    resolution: {integrity: sha512-n5H8QLDJ47QqbCNn5SuFjCRDrOLEZ0h8vAHCK5RL9Ls7Xa8AQLa/YxAc9UjFqoEDM48muwtBGjtMY5cr0PLDCw==}
-    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+  '@img/sharp-libvips-linux-s390x@1.0.4':
+    resolution: {integrity: sha512-u7Wz6ntiSSgGSGcjZ55im6uvTrOxSIS8/dgoVMoiGE9I6JAfU50yH5BoDlYA1tcuGS7g/QNtetJnxA6QEsCVTA==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
 
-  '@jest/environment@29.7.0':
+  '@img/sharp-libvips-linux-x64@1.0.4':
+    resolution: {integrity: sha512-MmWmQ3iPFZr0Iev+BAgVMb3ZyC4KeFc3jFxnNbEPas60e1cIfevbtuyf9nDGIzOaW9PdnDciJm+wFFaTlj5xYw==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
+    resolution: {integrity: sha512-9Ti+BbTYDcsbp4wfYib8Ctm1ilkugkA/uscUn6UXK1ldpC1JjiXbLfFZtRlBhjPZ5o1NCLiDbg8fhUPKStHoTA==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
+    resolution: {integrity: sha512-viYN1KX9m+/hGkJtvYYp+CCLgnJXwiQB39damAO7WMdKWlIhmYTfHjwSbQeUK/20vY154mwezd9HflVFM1wVSw==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linux-arm64@0.33.5':
+    resolution: {integrity: sha512-JMVv+AMRyGOHtO1RFBiJy/MBsgz0x4AWrT6QoEVVTyh1E39TrCUpTRI7mx9VksGX4awWASxqCYLCV4wBZHAYxA==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-arm@0.33.5':
+    resolution: {integrity: sha512-JTS1eldqZbJxjvKaAkxhZmBqPRGmxgu+qFKSInv8moZ2AmT5Yib3EQ1c6gp493HvrvV8QgdOXdyaIBrhvFhBMQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-s390x@0.33.5':
+    resolution: {integrity: sha512-y/5PCd+mP4CA/sPDKl2961b+C9d+vPAveS33s6Z3zfASk2j5upL6fXVPZi7ztePZ5CuH+1kW8JtvxgbuXHRa4Q==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-x64@0.33.5':
+    resolution: {integrity: sha512-opC+Ok5pRNAzuvq1AG0ar+1owsu842/Ab+4qvU879ippJBHvyY5n2mxF1izXqkPYlGuP/M556uh53jRLJmzTWA==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linuxmusl-arm64@0.33.5':
+    resolution: {integrity: sha512-XrHMZwGQGvJg2V/oRSUfSAfjfPxO+4DkiRh6p2AFjLQztWUuY/o8Mq0eMQVIY7HJ1CDQUJlxGGZRw1a5bqmd1g==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linuxmusl-x64@0.33.5':
+    resolution: {integrity: sha512-WT+d/cgqKkkKySYmqoZ8y3pxx7lx9vVejxW/W4DOFMYVSkErR+w7mf2u8m/y4+xHe7yY9DAXQMWQhpnMuFfScw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-wasm32@0.33.5':
+    resolution: {integrity: sha512-ykUW4LVGaMcU9lu9thv85CbRMAwfeadCJHRsg2GmeRa/cJxsVY9Rbd57JcMxBkKHag5U/x7TSBpScF4U8ElVzg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [wasm32]
+
+  '@img/sharp-win32-ia32@0.33.5':
+    resolution: {integrity: sha512-T36PblLaTwuVJ/zw/LaH0PdZkRz5rd3SmMHX8GSmR7vtNSP5Z6bQkExdSK7xGWyxLw4sUknBuugTelgw2faBbQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@img/sharp-win32-x64@0.33.5':
+    resolution: {integrity: sha512-MpY/o8/8kj+EcnxwvrP4aTJSWw/aZ7JIGR4aBeZkZw5B7/Jn+tY9/VNwtcoGmdT7GfggGIU4kygOMSbYnOrAbg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [win32]
+
+  '@ioredis/commands@1.5.0':
+    resolution: {integrity: sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==}
+
+  '@isaacs/cliui@8.0.2':
+    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
+    engines: {node: '>=12'}
+
+  '@isaacs/fs-minipass@4.0.1':
+    resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
+    engines: {node: '>=18.0.0'}
+
+  '@isaacs/ttlcache@1.4.1':
+    resolution: {integrity: sha512-RQgQ4uQ+pLbqXfOmieB91ejmLwvSgv9nLx6sT6sD83s7umBypgg+OIBOBbEUiJXrfpnp9j0mRhYYdzp9uqq3lA==}
+    engines: {node: '>=12'}
+
+  '@istanbuljs/load-nyc-config@1.1.0':
+    resolution: {integrity: sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==}
+    engines: {node: '>=8'}
+
+  '@istanbuljs/schema@0.1.3':
+    resolution: {integrity: sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==}
+    engines: {node: '>=8'}
+
+  '@jest/console@29.7.0':
+    resolution: {integrity: sha512-5Ni4CU7XHQi32IJ398EEP4RrB8eV09sXP2ROqD4bksHrnTree52PsxvX8tpL8LvTZ3pFzXyPbNQReSN41CAhOg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+
+  '@jest/core@29.7.0':
+    resolution: {integrity: sha512-n7aeXWKMnGtDA48y8TLWJPJmLmmZ642Ceo78cYWEpiD7FzDgmNDV/GCVRorPABdXLJZ/9wzzgZAlHjXjxDHGsg==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+    peerDependencies:
+      node-notifier: ^8.0.1 || ^9.0.0 || ^10.0.0
+    peerDependenciesMeta:
+      node-notifier:
+        optional: true
+
+  '@jest/create-cache-key-function@29.7.0':
+    resolution: {integrity: sha512-4QqS3LY5PBmTRHj9sAg1HLoPzqAI0uOX6wI/TRqHIcOxlFidy6YEmCQJk6FSZjNLGCeubDMfmkWL+qaLKhSGQA==}
+    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
+
+  '@jest/diff-sequences@30.0.1':
+    resolution: {integrity: sha512-n5H8QLDJ47QqbCNn5SuFjCRDrOLEZ0h8vAHCK5RL9Ls7Xa8AQLa/YxAc9UjFqoEDM48muwtBGjtMY5cr0PLDCw==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/environment@29.7.0':
     resolution: {integrity: sha512-aQIfHDq33ExsN4jP1NWGXhxgQ/wixs60gDiKO+XVMd8Mn0NWPWgc34ZQDTb2jKaUWQ7MuwoitXAsN2XVXNMpAw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
 
@@ -3429,19 +4710,94 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
-  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.3':
-    resolution: {integrity: sha512-QZHtlVgbAdy2zAqNA9Gu1UpIuI8Xvsd1v8ic6B2pZmeFnFcMWiPLfWXh7TVw4eGEZ/C9TH281KwhVoeQUKbyjw==}
+  '@js-temporal/polyfill@0.5.1':
+    resolution: {integrity: sha512-hloP58zRVCRSpgDxmqCWJNlizAlUgJFqG2ypq79DCvyv9tHjRYMDOcPFjzfl/A1/YxDvRCZz8wvZvmapQnKwFQ==}
+    engines: {node: '>=12'}
+
+  '@libsql/client@0.17.4':
+    resolution: {integrity: sha512-lYayFWasDV78A+TjlEhr6ubb3odBV6OHjb+wdp8VQcyWWAEIjuwbCHaraEUS4m4yWoo0BvZo96It4VdzZRmRWw==}
+
+  '@libsql/core@0.17.4':
+    resolution: {integrity: sha512-LqF9gIvnJ38nmAH1y/ChizHqDO/MO1wLgA96XrraulEEbqXxLjleSH92YWTolbuJKgPUmGu4aJk9W3UnAcxLOQ==}
+
+  '@libsql/darwin-arm64@0.5.29':
+    resolution: {integrity: sha512-K+2RIB1OGFPYQbfay48GakLhqf3ArcbHqPFu7EZiaUcRgFcdw8RoltsMyvbj5ix2fY0HV3Q3Ioa/ByvQdaSM0A==}
     cpu: [arm64]
     os: [darwin]
 
-  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
-    resolution: {integrity: sha512-LCkGo6JDfaBhgST7UpPWgNgLINpcpabaHfyz5OBx75nUYxBsaEPxjnyNjWpeb/xBup/682QnBfRBy2/LvPutZQ==}
-    cpu: [arm64]
+  '@libsql/darwin-x64@0.5.29':
+    resolution: {integrity: sha512-OtT+KFHsKFy1R5FVadr8FJ2Bb1mghtXTyJkxv0trocq7NuHntSki1eUbxpO5ezJesDvBlqFjnWaYYY516QNLhQ==}
+    cpu: [x64]
     os: [darwin]
 
-  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.3':
-    resolution: {integrity: sha512-mdzd3AVzYKuUmiWOQ8GNhl64/IoFGol569zNRdkLReh6LRLHOXxU4U8eq0JwaD8iFHdVGqSy4IjFL4reoWCDFw==}
+  '@libsql/hrana-client@0.10.0':
+    resolution: {integrity: sha512-OoA4EMqRAC7kn7V2P6EQqRcpZf2W+AjsNIyCizBg339Tq/aMC7sRnzs3SklderhmQWAqEzvv8A2vhxVmWpkVvw==}
+
+  '@libsql/isomorphic-ws@0.1.5':
+    resolution: {integrity: sha512-DtLWIH29onUYR00i0GlQ3UdcTRC6EP4u9w/h9LxpUZJWRMARk6dQwZ6Jkd+QdwVpuAOrdxt18v0K2uIYR3fwFg==}
+
+  '@libsql/linux-arm-gnueabihf@0.5.29':
+    resolution: {integrity: sha512-CD4n4zj7SJTHso4nf5cuMoWoMSS7asn5hHygsDuhRl8jjjCTT3yE+xdUvI4J7zsyb53VO5ISh4cwwOtf6k2UhQ==}
+    cpu: [arm]
+    os: [linux]
+
+  '@libsql/linux-arm-musleabihf@0.5.29':
+    resolution: {integrity: sha512-2Z9qBVpEJV7OeflzIR3+l5yAd4uTOLxklScYTwpZnkm2vDSGlC1PRlueLaufc4EFITkLKXK2MWBpexuNJfMVcg==}
+    cpu: [arm]
+    os: [linux]
+
+  '@libsql/linux-arm64-gnu@0.5.29':
+    resolution: {integrity: sha512-gURBqaiXIGGwFNEaUj8Ldk7Hps4STtG+31aEidCk5evMMdtsdfL3HPCpvys+ZF/tkOs2MWlRWoSq7SOuCE9k3w==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@libsql/linux-arm64-musl@0.5.29':
+    resolution: {integrity: sha512-fwgYZ0H8mUkyVqXZHF3mT/92iIh1N94Owi/f66cPVNsk9BdGKq5gVpoKO+7UxaNzuEH1roJp2QEwsCZMvBLpqg==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@libsql/linux-x64-gnu@0.5.29':
+    resolution: {integrity: sha512-y14V0vY0nmMC6G0pHeJcEarcnGU2H6cm21ZceRkacWHvQAEhAG0latQkCtoS2njFOXiYIg+JYPfAoWKbi82rkg==}
+    cpu: [x64]
+    os: [linux]
+
+  '@libsql/linux-x64-musl@0.5.29':
+    resolution: {integrity: sha512-gquqwA/39tH4pFl+J9n3SOMSymjX+6kZ3kWgY3b94nXFTwac9bnFNMffIomgvlFaC4ArVqMnOZD3nuJ3H3VO1w==}
+    cpu: [x64]
+    os: [linux]
+
+  '@libsql/win32-x64-msvc@0.5.29':
+    resolution: {integrity: sha512-4/0CvEdhi6+KjMxMaVbFM2n2Z44escBRoEYpR+gZg64DdetzGnYm8mcNLcoySaDJZNaBd6wz5DNdgRmcI4hXcg==}
     cpu: [x64]
+    os: [win32]
+
+  '@mdx-js/mdx@3.1.1':
+    resolution: {integrity: sha512-f6ZO2ifpwAQIpzGWaBQT2TXxPv6z3RBzQKpVftEWN78Vl/YweF1uwussDx8ECAXVtr3Rs89fKyG9YlzUs9DyGQ==}
+
+  '@mediapipe/tasks-vision@0.10.17':
+    resolution: {integrity: sha512-CZWV/q6TTe8ta61cZXjfnnHsfWIdFhms03M9T7Cnd5y2mdpylJM0rF1qRq+wsQVRMLz1OYPVEBU9ph2Bx8cxrg==}
+
+  '@mermaid-js/parser@1.2.0':
+    resolution: {integrity: sha512-oYPyv8A4As1yH5Bx+04iQEQxXuIQDe0GKCNSRgao6z8AM9jixXIfP0vsppRLvGf+nKIOb9/LdpWA4YuJiVvESA==}
+
+  '@monaco-editor/loader@1.7.0':
+    resolution: {integrity: sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA==}
+
+  '@monaco-editor/react@4.7.0':
+    resolution: {integrity: sha512-cyzXQCtO47ydzxpQtCGSQGOC8Gk3ZUeBXFAxD+CWXYFo5OqZyZUonFl0DwUlTyAfRHntBfw2p3w4s9R6oe1eCA==}
+    peerDependencies:
+      monaco-editor: '>= 0.25.0 < 1'
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
+  '@monogrid/gainmap-js@3.4.0':
+    resolution: {integrity: sha512-2Z0FATFHaoYJ8b+Y4y4Hgfn3FRFwuU5zRrk+9dFWp4uGAdHGqVEdP7HP+gLA3X469KXHmfupJaUbKo1b/aDKIg==}
+    peerDependencies:
+      three: '>= 0.159.0'
+
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
+    resolution: {integrity: sha512-LCkGo6JDfaBhgST7UpPWgNgLINpcpabaHfyz5OBx75nUYxBsaEPxjnyNjWpeb/xBup/682QnBfRBy2/LvPutZQ==}
+    cpu: [arm64]
     os: [darwin]
 
   '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
@@ -3449,41 +4805,21 @@ packages:
     cpu: [x64]
     os: [darwin]
 
-  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.3':
-    resolution: {integrity: sha512-YxQL+ax0XqBJDZiKimS2XQaf+2wDGVa1enVRGzEvLLVFeqa5kx2bWbtcSXgsxjQB7nRqqIGFIcLteF/sHeVtQg==}
-    cpu: [arm64]
-    os: [linux]
-
   '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
     resolution: {integrity: sha512-dgX0P/9wGPJeHFBG+ZmhgE6bmtMt7NP5CRBGyyktpopdk/mW4POnrpQsSLtKI1dwpc+pPLuXHDh6vvskyQE/sw==}
     cpu: [arm64]
     os: [linux]
 
-  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.3':
-    resolution: {integrity: sha512-fg0uy/dG/nZEXfYilKoRe7yALaNmHoYeIoJuJ7KJ+YyU2bvY8vPv27f7UKhGRpY6euFYqEVhxCFZgAUNQBM3nw==}
-    cpu: [arm]
-    os: [linux]
-
   '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
     resolution: {integrity: sha512-Tg3yX65f5GbtXLkrYEHE5oibZG9epyYWas7FogTTEJeDEF9JlXJzKgXaNhT3UXlTOeA+AfZpYZYZ0uPj7Cfquw==}
     cpu: [arm]
     os: [linux]
 
-  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.3':
-    resolution: {integrity: sha512-cvwNfbP07pKUfq1uH+S6KJ7dT9K8WOE4ZiAcsrSes+UY55E/0jLYc+vq+DO7jlmqRb5zAggExKm0H7O/CBaesg==}
-    cpu: [x64]
-    os: [linux]
-
   '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
     resolution: {integrity: sha512-8TNXMEjJc3QEy7R/x1INhgiU+XakDAFUzBhaz7+Rbrs8NH5UQeHQxxmzsSBJGyV6I1jW79undiQm8tOI+D+8FQ==}
     cpu: [x64]
     os: [linux]
 
-  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
-    resolution: {integrity: sha512-x0fWaQtYp4E6sktbsdAqnehxDgEc/VwM7uLsRCYWaiGu0ykYdZPiS8zCWdnjHwyiumousxfBm4SO31eXqwEZhQ==}
-    cpu: [x64]
-    os: [win32]
-
   '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
     resolution: {integrity: sha512-CmCXPQrkbwExx3j946/PtHWHbYJiCRBRDl4BlkRQcJB/YOwQxJRTpoo7aTsortjgoJ1x7opzTSxn7C+ASSLVjQ==}
     cpu: [x64]
@@ -3498,6 +4834,64 @@ packages:
       '@emnapi/core': ^1.7.1
       '@emnapi/runtime': ^1.7.1
 
+  '@neon-rs/load@0.0.4':
+    resolution: {integrity: sha512-kTPhdZyTQxB+2wpiRcFWrDcejc4JI6tkPuS7UZCG4l6Zvc5kU/gGQ/ozvHTh1XR5tS+UlfAfGuPajjzQjCiHCw==}
+
+  '@next/env@15.1.2':
+    resolution: {integrity: sha512-Hm3jIGsoUl6RLB1vzY+dZeqb+/kWPZ+h34yiWxW0dV87l8Im/eMOwpOA+a0L78U0HM04syEjXuRlCozqpwuojQ==}
+
+  '@next/swc-darwin-arm64@15.1.2':
+    resolution: {integrity: sha512-b9TN7q+j5/7+rGLhFAVZiKJGIASuo8tWvInGfAd8wsULjB1uNGRCj1z1WZwwPWzVQbIKWFYqc+9L7W09qwt52w==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@next/swc-darwin-x64@15.1.2':
+    resolution: {integrity: sha512-caR62jNDUCU+qobStO6YJ05p9E+LR0EoXh1EEmyU69cYydsAy7drMcOlUlRtQihM6K6QfvNwJuLhsHcCzNpqtA==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@next/swc-linux-arm64-gnu@15.1.2':
+    resolution: {integrity: sha512-fHHXBusURjBmN6VBUtu6/5s7cCeEkuGAb/ZZiGHBLVBXMBy4D5QpM8P33Or8JD1nlOjm/ZT9sEE5HouQ0F+hUA==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@next/swc-linux-arm64-musl@15.1.2':
+    resolution: {integrity: sha512-9CF1Pnivij7+M3G74lxr+e9h6o2YNIe7QtExWq1KUK4hsOLTBv6FJikEwCaC3NeYTflzrm69E5UfwEAbV2U9/g==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@next/swc-linux-x64-gnu@15.1.2':
+    resolution: {integrity: sha512-tINV7WmcTUf4oM/eN3Yuu/f8jQ5C6AkueZPKeALs/qfdfX57eNv4Ij7rt0SA6iZ8+fMobVfcFVv664Op0caCCg==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@next/swc-linux-x64-musl@15.1.2':
+    resolution: {integrity: sha512-jf2IseC4WRsGkzeUw/cK3wci9pxR53GlLAt30+y+B+2qAQxMw6WAC3QrANIKxkcoPU3JFh/10uFfmoMDF9JXKg==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@next/swc-win32-arm64-msvc@15.1.2':
+    resolution: {integrity: sha512-wvg7MlfnaociP7k8lxLX4s2iBJm4BrNiNFhVUY+Yur5yhAJHfkS8qPPeDEUH8rQiY0PX3u/P7Q/wcg6Mv6GSAA==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@next/swc-win32-x64-msvc@15.1.2':
+    resolution: {integrity: sha512-D3cNA8NoT3aWISWmo7HF5Eyko/0OdOO+VagkoJuiTk7pyX3P/b+n8XA/MYvyR+xSVcbKn68B1rY9fgqjNISqzQ==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [win32]
+
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
     resolution: {integrity: sha512-s88O1aVtXftvp5bCPB7WnmXc5IwOZZ7YPuwNPt+GtOOXpPvad1LfbmjYv+qII7zP6RU2QGnqve27dnLycEnyEQ==}
 
@@ -3505,10 +4899,17 @@ packages:
     resolution: {integrity: sha512-bysYuiVfhxNJuldNXlFEitTVdNnYUc+XNJZd7Qm2a5j1vZHgY+fazadNFWFaMK/2vye0JVlxV3gHmC0WDfAOQw==}
     engines: {node: '>= 20.19.0'}
 
+  '@noble/hashes@1.8.0':
+    resolution: {integrity: sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==}
+    engines: {node: ^14.21.3 || >=16}
+
   '@noble/hashes@2.0.1':
     resolution: {integrity: sha512-XlOlEbQcE9fmuXxrVTXCTlG2nlRXa9Rj3rr5Ue/+tX+nmkgbX720YHh0VR3hBF9xDvwnb8D2shVGOwNx+ulArw==}
     engines: {node: '>= 20.19.0'}
 
+  '@nodable/entities@2.2.0':
+    resolution: {integrity: sha512-9uGyhaQavEUMC8AIddIjau4NsnsXhou+j5sBAGojCM1oxmQpVKTWR/9JxABD6UAv12vpIms55fPZKFQEhG6uBg==}
+
   '@nodelib/fs.scandir@2.1.5':
     resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
     engines: {node: '>= 8'}
@@ -3525,14 +4926,93 @@ packages:
     resolution: {integrity: sha512-nn5ozdjYQpUCZlWGuxcJY/KpxkWQs4DcbMCmKojjyrYDEAGy4Ce19NN4v5MduafTwJlbKc99UA8YhSVqq9yPZA==}
     engines: {node: '>=12.4.0'}
 
-  '@opentelemetry/api@1.9.0':
-    resolution: {integrity: sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==}
-    engines: {node: '>=8.0.0'}
+  '@octokit/auth-token@6.0.0':
+    resolution: {integrity: sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==}
+    engines: {node: '>= 20'}
+
+  '@octokit/core@7.0.6':
+    resolution: {integrity: sha512-DhGl4xMVFGVIyMwswXeyzdL4uXD5OGILGX5N8Y+f6W7LhC1Ze2poSNrkF/fedpVDHEEZ+PHFW0vL14I+mm8K3Q==}
+    engines: {node: '>= 20'}
+
+  '@octokit/endpoint@11.0.3':
+    resolution: {integrity: sha512-FWFlNxghg4HrXkD3ifYbS/IdL/mDHjh9QcsNyhQjN8dplUoZbejsdpmuqdA76nxj2xoWPs7p8uX2SNr9rYu0Ag==}
+    engines: {node: '>= 20'}
+
+  '@octokit/graphql@9.0.3':
+    resolution: {integrity: sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==}
+    engines: {node: '>= 20'}
+
+  '@octokit/openapi-types@27.0.0':
+    resolution: {integrity: sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==}
+
+  '@octokit/openapi-webhooks-types@12.1.0':
+    resolution: {integrity: sha512-WiuzhOsiOvb7W3Pvmhf8d2C6qaLHXrWiLBP4nJ/4kydu+wpagV5Fkz9RfQwV2afYzv3PB+3xYgp4mAdNGjDprA==}
+
+  '@octokit/plugin-paginate-rest@14.0.0':
+    resolution: {integrity: sha512-fNVRE7ufJiAA3XUrha2omTA39M6IXIc6GIZLvlbsm8QOQCYvpq/LkMNGyFlB1d8hTDzsAXa3OKtybdMAYsV/fw==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@octokit/core': '>=6'
+
+  '@octokit/plugin-request-log@6.0.0':
+    resolution: {integrity: sha512-UkOzeEN3W91/eBq9sPZNQ7sUBvYCqYbrrD8gTbBuGtHEuycE4/awMXcYvx6sVYo7LypPhmQwwpUe4Yyu4QZN5Q==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@octokit/core': '>=6'
+
+  '@octokit/plugin-rest-endpoint-methods@17.0.0':
+    resolution: {integrity: sha512-B5yCyIlOJFPqUUeiD0cnBJwWJO8lkJs5d8+ze9QDP6SvfiXSz1BF+91+0MeI1d2yxgOhU/O+CvtiZ9jSkHhFAw==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@octokit/core': '>=6'
+
+  '@octokit/request-error@7.1.0':
+    resolution: {integrity: sha512-KMQIfq5sOPpkQYajXHwnhjCC0slzCNScLHs9JafXc4RAJI+9f+jNDlBNaIMTvazOPLgb4BnlhGJOTbnN0wIjPw==}
+    engines: {node: '>= 20'}
+
+  '@octokit/request@10.0.11':
+    resolution: {integrity: sha512-+s7HUxjfFqOMS9VlIwDffq0MikjSAK0gSpG73W+meAvVAvX4MBrHYTK5Bj3Uot55qFT4gzUtfzE4mGWY4Br8/Q==}
+    engines: {node: '>= 20'}
+
+  '@octokit/rest@22.0.1':
+    resolution: {integrity: sha512-Jzbhzl3CEexhnivb1iQ0KJ7s5vvjMWcmRtq5aUsKmKDrRW6z3r84ngmiFKFvpZjpiU/9/S6ITPFRpn5s/3uQJw==}
+    engines: {node: '>= 20'}
+
+  '@octokit/types@16.0.0':
+    resolution: {integrity: sha512-sKq+9r1Mm4efXW1FCk7hFSeJo4QKreL/tTbR0rz/qx/r1Oa2VV83LTA/H/MuCOX7uCIJmQVRKBcbmWoySjAnSg==}
+
+  '@octokit/webhooks-methods@6.0.0':
+    resolution: {integrity: sha512-MFlzzoDJVw/GcbfzVC1RLR36QqkTLUf79vLVO3D+xn7r0QgxnFoLZgtrzxiQErAjFUOdH6fas2KeQJ1yr/qaXQ==}
+    engines: {node: '>= 20'}
+
+  '@octokit/webhooks@14.2.0':
+    resolution: {integrity: sha512-da6KbdNCV5sr1/txD896V+6W0iamFWrvVl8cHkBSPT+YlvmT3DwXa4jxZnQc+gnuTEqSWbBeoSZYTayXH9wXcw==}
+    engines: {node: '>= 20'}
+
+  '@oozcitak/dom@2.0.2':
+    resolution: {integrity: sha512-GjpKhkSYC3Mj4+lfwEyI1dqnsKTgwGy48ytZEhm4A/xnH/8z9M3ZVXKr/YGQi3uCLs1AEBS+x5T2JPiueEDW8w==}
+    engines: {node: '>=20.0'}
+
+  '@oozcitak/infra@2.0.2':
+    resolution: {integrity: sha512-2g+E7hoE2dgCz/APPOEK5s3rMhJvNxSMBrP+U+j1OWsIbtSpWxxlUjq1lU8RIsFJNYv7NMlnVsCuHcUzJW+8vA==}
+    engines: {node: '>=20.0'}
+
+  '@oozcitak/url@3.0.0':
+    resolution: {integrity: sha512-ZKfET8Ak1wsLAiLWNfFkZc/BraDccuTJKR6svTYc7sVjbR+Iu0vtXdiDMY4o6jaFl5TW2TlS7jbLl4VovtAJWQ==}
+    engines: {node: '>=20.0'}
+
+  '@oozcitak/util@10.0.0':
+    resolution: {integrity: sha512-hAX0pT/73190NLqBPPWSdBVGtbY6VOhWYK3qqHqtXQ1gK7kS2yz4+ivsN07hpJ6I3aeMtKP6J6npsEKOAzuTLA==}
+    engines: {node: '>=20.0'}
 
   '@opentelemetry/semantic-conventions@1.43.0':
     resolution: {integrity: sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==}
     engines: {node: '>=14'}
 
+  '@orama/orama@3.1.18':
+    resolution: {integrity: sha512-a61ljmRVVyG5MC/698C8/FfFDw5a8LOIvyOLW5fztgUXqUpc1jOfQzOitSCbge657OgXXThmY3Tk8fpiDb4UcA==}
+    engines: {node: '>= 20.0.0'}
+
   '@oxc-project/runtime@0.133.0':
     resolution: {integrity: sha512-PkvjA1Lq5++V5S1E6Patr92ZVcieE6EalDr1VJTqv4BnjZdOUC4W3p8k1wMXSd5/2aFP4b/A6N5sg2Bkzcr9vQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -3543,6 +5023,9 @@ packages:
   '@oxc-project/types@0.127.0':
     resolution: {integrity: sha512-aIYXQBo4lCbO4z0R3FHeucQHpF46l2LbMdxRvqvuRuW2OxdnSkcng5B8+K12spgLDj93rtN3+J2Vac/TIO+ciQ==}
 
+  '@oxc-project/types@0.130.0':
+    resolution: {integrity: sha512-ibD2usx9JRu7f5pu2tMKMI4cpA4NgXJQoYRP4pQ7Pxmn1l6k/53qWtQWZayhYy3X4QZkt90Ot+mJEaeXouio6Q==}
+
   '@oxc-project/types@0.133.0':
     resolution: {integrity: sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA==}
 
@@ -3593,48 +5076,56 @@ packages:
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@oxfmt/binding-linux-arm64-musl@0.52.0':
     resolution: {integrity: sha512-wZg6bLjDvh2KibyI3QFUYo8GTXneIFsd0JvehtvJiUmQ8WRPERgxd/VM4ctWb86U5FT1FkqgS8/wZKVB+AZScg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@oxfmt/binding-linux-ppc64-gnu@0.52.0':
     resolution: {integrity: sha512-IngE8uxhNvxcMrLjZNDo9xNLY7rEK33AKnaMd2B46he1e/mz2CfcW6If/U1wUjdRZddm1QzQaciqZkuMkdh1FA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@oxfmt/binding-linux-riscv64-gnu@0.52.0':
     resolution: {integrity: sha512-H3+DdFMv/efN3Efmhsv18jDrpiWWqKG7wsfAlQBqAt6z/E2Bx+TwEj2Nowe51CPOWB8/mFBC2dAMSgVFLvvowA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@oxfmt/binding-linux-riscv64-musl@0.52.0':
     resolution: {integrity: sha512-zji+1kb7lJKohSDjzC1IsS+K/cKRs1hdVf0ZH0VbdbiakmtLvN9twBoXo/k8VdjFax7kfo+DyPxS7vv52br1aw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
+    libc: [musl]
 
   '@oxfmt/binding-linux-s390x-gnu@0.52.0':
     resolution: {integrity: sha512-hcLBYedpCy7ToUvvBidWk7+11Yhg1oAZ4+6hKPic/mQI6NaqXJSXMps5nFlwUuX2ewhtLZZDPg63TI042qGKBg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@oxfmt/binding-linux-x64-gnu@0.52.0':
     resolution: {integrity: sha512-IDO2loXK2OtTOhSPchU9MW25mWL2QCDGdJbjN8MXKZVS80qXe5gMTwQWu/gMJ3juoBHbkuUZNB2N1LHzNT7DoA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@oxfmt/binding-linux-x64-musl@0.52.0':
     resolution: {integrity: sha512-mAV2Hjn0SatJ+KoAzKUC3eJhdJ8wv+3m1KyuS0dTsbF0c5weq+QrCt/DRZZM+uj/XiKzCDEUKYsBF30e2qkcyw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@oxfmt/binding-openharmony-arm64@0.52.0':
     resolution: {integrity: sha512-vd4npaUIwChxp7XzkqmepBWTT9YMcSe/NBApVGPC30/lLyOVaV3dvma1SKo03t8O73BPRAG7EyJzGlN5cJM5hQ==}
@@ -3737,48 +5228,56 @@ packages:
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@oxlint/binding-linux-arm64-musl@1.67.0':
     resolution: {integrity: sha512-zB/Tf6sUjmmvvbva9Gj3JTJ8rJ9t4I8/U0o6vSRtd0DRIsIuyegBwJAzhSUFQHdMijIRJkW0exs/yBhpw2S20w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@oxlint/binding-linux-ppc64-gnu@1.67.0':
     resolution: {integrity: sha512-kgU40Gt74CK0TCsF51KZymkIwN9U0BajKsMijB52zPqOeZU9NAHkA/NSQkZDHEaCakx42DxhXkODiAqf2b4Gug==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@oxlint/binding-linux-riscv64-gnu@1.67.0':
     resolution: {integrity: sha512-tOYhkk/iaG9aD3FvGpBFd1Lrw0x0RaVoJBxjUkfNzS50rC5NS5BteNCwgr8A2zCdADrIIoze6D7u6U5Ic++/iQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@oxlint/binding-linux-riscv64-musl@1.67.0':
     resolution: {integrity: sha512-sEtywrPb+0b+tHYl1SDCrw903fiC4eyKoNqzP3v+f2JT3Xcv4NEYG+P8rj+eEnX7IWhqV/xj8/JmcmVj21CXaA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
+    libc: [musl]
 
   '@oxlint/binding-linux-s390x-gnu@1.67.0':
     resolution: {integrity: sha512-BvR8Moa0zCLxroOx4vZaZN9nUfwAUpSTwjZdxZyKy4bv3PrzrXrxKR/ZQ0L9wNSvlPhnMJeZfa3q5w6ZCTuN6Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@oxlint/binding-linux-x64-gnu@1.67.0':
     resolution: {integrity: sha512-mm2cxM6fksOpq6l0uFws8BUGKAR4dNa/cZCn37Npq7PFbhD5HDJqWfnoIvTaeRKMy5XdS2tO0MA0qbHDrnXAAA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@oxlint/binding-linux-x64-musl@1.67.0':
     resolution: {integrity: sha512-WmbMuLapKyDlobMkXAaAL0Y+Uczh4LETfIfQsUpbId4Ip8Ai82/jqeYTOoUCkuuhBFapgqP253+d83tLKOksJg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@oxlint/binding-openharmony-arm64@1.67.0':
     resolution: {integrity: sha512-9g/PqxYJelzzTAOR5Y+RiRqdeydhEuXv2KxNeFcAKQ7UsvnWSY1OP4MsuPMbTO2Pf70tz7mFhl1j13H3fyh+8g==}
@@ -3808,6 +5307,25 @@ packages:
     resolution: {integrity: sha512-nkOyZEF1vH527CkdQtOp1HMrVFEM4ResURvI2JFeGoup+h+43J/k/FgdOR9b9Isxg+Yae7qVDa7y3nssE8b3TQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
 
+  '@paper-design/shaders-react@0.0.71':
+    resolution: {integrity: sha512-kTqjIlyZcpkwqJie+3ldEDscTtx1oOi8eRBD5QgWKI21GaNn/SSg26092M5zzqr3e8dVANv0ktS2ICSjbMFKbw==}
+    peerDependencies:
+      '@types/react': ^18 || ^19
+      react: ^18 || ^19
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@paper-design/shaders@0.0.71':
+    resolution: {integrity: sha512-brCt05YxxyjBrhnE3l1wJJHcFXsM8aE4lmpd9TMQp+p0dMU3F+OWkJZL9m/RC1Tt7om5xr0Wg7d0HYm+b9NYZA==}
+
+  '@paralleldrive/cuid2@2.3.1':
+    resolution: {integrity: sha512-XO7cAxhnTZl0Yggq6jOgjiOHhbgcO4NqFqwSmQpjK3b6TEE6Uj/jfSk6wzYyemh3+I0sHirKSetjQwn5cZktFw==}
+
+  '@paralleldrive/cuid2@3.3.0':
+    resolution: {integrity: sha512-OqiFvSOF0dBSesELYY2CAMa4YINvlLpvKOz/rv6NeZEqiyttlHgv98Juwv4Ch+GrEV7IZ8jfI2VcEoYUjXXCjw==}
+    hasBin: true
+
   '@peculiar/asn1-cms@2.8.0':
     resolution: {integrity: sha512-NgekZOrSJFSBFLFoLfwePguAWAx7z1+f2TEsWFUMyiqqfntZ4+S/S5hzqME3q4pCA0iOsFKdwiQ35dwY24eVqA==}
 
@@ -3845,6 +5363,33 @@ packages:
     resolution: {integrity: sha512-r10lkuy6BNfRmyYdRAfgu6dq0HOmyIV2OLhXWE3gDEPBdX1b8miztJVyX/UxWhLwemNyDP3CLZHpDxDwSY0xaA==}
     engines: {node: '>=20.0.0'}
 
+  '@pinojs/redact@0.4.0':
+    resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
+
+  '@pixi/colord@2.9.6':
+    resolution: {integrity: sha512-nezytU2pw587fQstUu1AsJZDVEynjskwOL+kibwcdxsMBFqPsFFNA7xl0ii/gXuDi6M0xj3mfRJj8pBSc2jCfA==}
+
+  '@pixi/layout@3.2.1':
+    resolution: {integrity: sha512-ANg9pk7qo4psnafupTY47ZYoL2Jp1f8djiEUGJQAPEr+m2QIPaCR+dWjzSl1kqZTHlYmxxVNnztCRfrPu+q62w==}
+    peerDependencies:
+      pixi.js: ^8
+      yoga-layout: ^3
+
+  '@pixi/react@8.0.5':
+    resolution: {integrity: sha512-Z1VRdnv9Gh+lTLzNKjpS7GaTNDjUxRVJNtIdtK2i0sCpigvjx5mvJ72EPLhBFgepB6j3ZCkL0YBb6BqgTGbhGA==}
+    peerDependencies:
+      pixi.js: ^8.2.6
+      react: '>=19.0.0'
+
+  '@pixi/ui@2.3.2':
+    resolution: {integrity: sha512-HHQtAHxzirfl6bg9HgzyGGLIHqM/q3i0R+raQ9Wmp3VxLJTUviF655Syf9PWYC690xbS9uo0mRkXykoJNkHKhA==}
+    peerDependencies:
+      pixi.js: ^8.6.2
+
+  '@pkgjs/parseargs@0.11.0':
+    resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
+    engines: {node: '>=14'}
+
   '@pkgr/core@0.2.9':
     resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
@@ -3866,8 +5411,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3879,8 +5424,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3892,8 +5437,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3905,8 +5450,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3918,8 +5463,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3931,8 +5476,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3944,8 +5489,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3957,8 +5502,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3970,8 +5515,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3982,7 +5527,7 @@ packages:
     resolution: {integrity: sha512-z4eqJvfiNnFMHIIvXP3CY57y2WJs5g2v3X0zm9mEJkrkNv4rDxu+sg9Jh8EkXyeqBkB7SOcboo9dMVqhyrACIg==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -3991,7 +5536,7 @@ packages:
     resolution: {integrity: sha512-rYOP8OMnuuPMQF1uhPVlGNcCDlkokKqGFE3JcxFViIkAXP7EvFWUliJAstrapypaBLJNHbZL6jGhbVDGTwmVhA==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4001,8 +5546,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4013,7 +5558,7 @@ packages:
     resolution: {integrity: sha512-fOE+JtN9rygNZkCnHRBEP0TAvLldlhyOxMsbwFvTP4nAs+nBmfnna+o/Zski2wkmY1YMrFC0aSzsHoLY47iLrg==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4023,8 +5568,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4035,7 +5580,7 @@ packages:
     resolution: {integrity: sha512-C3vFhbyi4SW3PmbAi6Awpu4OzJtd0MxGurvSsYtr7p7nM8RNB3VAF3CUmnp2j50knpkrRcB7+ycVXzgLgF6yNA==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4045,8 +5590,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4058,8 +5603,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4070,7 +5615,7 @@ packages:
     resolution: {integrity: sha512-cot/aB/mOm0IYVYTTmQcEEK1M48lZWi8FlYe5nDPQQ8NYZUlXEFgncJ9p2Kzer3RKSrY7cTTpEMLZKNo9QoP5Q==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4080,8 +5625,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4093,8 +5638,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4106,8 +5651,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4118,7 +5663,7 @@ packages:
     resolution: {integrity: sha512-kGkGegYIdQsOb4XjsfM97rXsiHaBwco+hFI66oO4s9LU+PLAC5oJ7khdOVFxkhsmlbpUqDAvXw11CluXP+jkHg==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4127,7 +5672,7 @@ packages:
     resolution: {integrity: sha512-orBC88futVpqCmhX1p4cvquNHsELQ+w+vBJnuj3ftETI5bJb0bZn3Tqu3SWN2IOcPycTnMGnhwoermvISt72sA==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4137,8 +5682,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4150,8 +5695,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4163,8 +5708,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4176,8 +5721,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4189,8 +5734,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4202,8 +5747,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4215,8 +5760,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4228,8 +5773,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4241,8 +5786,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4254,8 +5799,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4267,8 +5812,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4280,8 +5825,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4293,8 +5838,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4306,8 +5851,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4319,8 +5864,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4332,8 +5877,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4345,8 +5890,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4358,8 +5903,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4371,8 +5916,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4383,7 +5928,7 @@ packages:
     resolution: {integrity: sha512-ujc+V6r0HNDviYqIK3rW4ffgYiZ8g5DEHrGJVk4x7kTlLXRDILnKX9vAUYeIsLOoDpDJ0ujpqMkjH4w2ofuo6w==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4392,7 +5937,7 @@ packages:
     resolution: {integrity: sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4401,7 +5946,7 @@ packages:
     resolution: {integrity: sha512-MojKku4U/miO8Av4Dkb+ctMAQx7JmY96LmtDQlAarCRtd7rN52QCSzBF+XAvr5S6coSVj9HEPBgHAHKEJVk/WA==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4411,8 +5956,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4424,8 +5969,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4437,8 +5982,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4450,8 +5995,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4463,8 +6008,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4476,8 +6021,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4489,8 +6034,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4501,7 +6046,7 @@ packages:
     resolution: {integrity: sha512-xCso9j1/u8sEgP1RNHjFrXJLApL8LiqOkI1R4ywuN00rxWdYg4oQXuwKLS3i0j5NWLromUD27/4nlxj2UFVvIw==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4510,7 +6055,7 @@ packages:
     resolution: {integrity: sha512-PLzC90MS+ReootmjC597dvopoelpZ8Q61HJkDXZSExitIq7PL55vHNnesAHwguHK0aPfBnpdNzQtv1uliaqQrA==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4519,7 +6064,7 @@ packages:
     resolution: {integrity: sha512-6c8ZqvPTWILEKnyVkP53EGRCcpnJiKTC21sS/6R1GF5xKyHJJWQEPfkqlcgUkdRQivd6tb23abUwe4ngWmY0JA==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4528,7 +6073,7 @@ packages:
     resolution: {integrity: sha512-3wEkMiPHXha/2VadZ68rYBcmYnPINVGl4Y3gtcM7fKRjANk0OscK+cdqBgUWdozb7YJxsh0vefM7vgAMHXOjqg==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4537,7 +6082,7 @@ packages:
     resolution: {integrity: sha512-qwOiz4Tjo8CNnrOLAYUMXeZwDzXgXpvK4TKQPmWLECM9XoWvA6+0Z2/7Ag3A4ivjS4ovbLJPbskkxioFyBhr8A==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4546,7 +6091,7 @@ packages:
     resolution: {integrity: sha512-RbJRS4UWQFkzHTTwVymMTUv8EqYhOp8dOOviLj2ugtTiXRaRQS7GLGxZTLL1jWhMeoSCf5zmcZkqTl9IiYfXcQ==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4555,7 +6100,7 @@ packages:
     resolution: {integrity: sha512-jrBWOxZITuGcnjRCM2t2U5ZPkCLxD+Ym6DjfssS5haTj2iiak/DOb64JeN6OdLfLgptb6/e2kKR+ZuTrGoZTPA==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4564,7 +6109,7 @@ packages:
     resolution: {integrity: sha512-IGBQPtRFdhN6MQ8dbegVmBq1LVZluya3F1jWY+puIcQC3MHctRwTDSBWCkL/3ZcnMJLTMJ++Z+ktmvg0F89iCw==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4573,7 +6118,7 @@ packages:
     resolution: {integrity: sha512-d8a+bBY/FxikNPlgJJoaBHZX+zKVbWHYJGTLnLvveQgFSTntkGdEKv3JDtHrMS0DNYpllz2nRsTLGLKYttbpmw==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4582,7 +6127,7 @@ packages:
     resolution: {integrity: sha512-giWQp+4mxjBPt4KZ0MmyuykFNWfbDxKt4x+fPkRYmgRFJSbCZFzUglvMb/Kjn38tm10YP4ufiQZDx3zna4LU6w==}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4592,8 +6137,8 @@ packages:
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -4603,6 +6148,158 @@ packages:
   '@radix-ui/rect@1.1.2':
     resolution: {integrity: sha512-xnXE7wG13PI+cxieVssYXlQJuYVRhH9NBoxt3KNwzghDIA69GMm7d4wXRouHIYjE+KvS6U/MsMO73NdS2MH9ZA==}
 
+  '@react-email/body@0.0.11':
+    resolution: {integrity: sha512-ZSD2SxVSgUjHGrB0Wi+4tu3MEpB4fYSbezsFNEJk2xCWDBkFiOeEsjTmR5dvi+CxTK691hQTQlHv0XWuP7ENTg==}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/button@0.0.19':
+    resolution: {integrity: sha512-HYHrhyVGt7rdM/ls6FuuD6XE7fa7bjZTJqB2byn6/oGsfiEZaogY77OtoLL/mrQHjHjZiJadtAMSik9XLcm7+A==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/code-block@0.0.11':
+    resolution: {integrity: sha512-4D43p+LIMjDzm66gTDrZch0Flkip5je91mAT7iGs6+SbPyalHgIA+lFQoQwhz/VzHHLxuD0LV6gwmU/WUQ2WEg==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/code-inline@0.0.5':
+    resolution: {integrity: sha512-MmAsOzdJpzsnY2cZoPHFPk6uDO/Ncpb4Kh1hAt9UZc1xOW3fIzpe1Pi9y9p6wwUmpaeeDalJxAxH6/fnTquinA==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/column@0.0.13':
+    resolution: {integrity: sha512-Lqq17l7ShzJG/d3b1w/+lVO+gp2FM05ZUo/nW0rjxB8xBICXOVv6PqjDnn3FXKssvhO5qAV20lHM6S+spRhEwQ==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/components@0.0.34':
+    resolution: {integrity: sha512-9aUJJ4Yu5Cd5++2GHwdkmOHCghi0vPP/aZwMCGNNTovBTDCI3mc8YIUrDR7JfscrdkPK4s/E9AoD5lX6d/zITA==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/container@0.0.15':
+    resolution: {integrity: sha512-Qo2IQo0ru2kZq47REmHW3iXjAQaKu4tpeq/M8m1zHIVwKduL2vYOBQWbC2oDnMtWPmkBjej6XxgtZByxM6cCFg==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/font@0.0.9':
+    resolution: {integrity: sha512-4zjq23oT9APXkerqeslPH3OZWuh5X4crHK6nx82mVHV2SrLba8+8dPEnWbaACWTNjOCbcLIzaC9unk7Wq2MIXw==}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/head@0.0.12':
+    resolution: {integrity: sha512-X2Ii6dDFMF+D4niNwMAHbTkeCjlYYnMsd7edXOsi0JByxt9wNyZ9EnhFiBoQdqkE+SMDcu8TlNNttMrf5sJeMA==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/heading@0.0.15':
+    resolution: {integrity: sha512-xF2GqsvBrp/HbRHWEfOgSfRFX+Q8I5KBEIG5+Lv3Vb2R/NYr0s8A5JhHHGf2pWBMJdbP4B2WHgj/VUrhy8dkIg==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/hr@0.0.11':
+    resolution: {integrity: sha512-S1gZHVhwOsd1Iad5IFhpfICwNPMGPJidG/Uysy1AwmspyoAP5a4Iw3OWEpINFdgh9MHladbxcLKO2AJO+cA9Lw==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/html@0.0.11':
+    resolution: {integrity: sha512-qJhbOQy5VW5qzU74AimjAR9FRFQfrMa7dn4gkEXKMB/S9xZN8e1yC1uA9C15jkXI/PzmJ0muDIWmFwatm5/+VA==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/img@0.0.11':
+    resolution: {integrity: sha512-aGc8Y6U5C3igoMaqAJKsCpkbm1XjguQ09Acd+YcTKwjnC2+0w3yGUJkjWB2vTx4tN8dCqQCXO8FmdJpMfOA9EQ==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/link@0.0.12':
+    resolution: {integrity: sha512-vF+xxQk2fGS1CN7UPQDbzvcBGfffr+GjTPNiWM38fhBfsLv6A/YUfaqxWlmL7zLzVmo0K2cvvV9wxlSyNba1aQ==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/markdown@0.0.14':
+    resolution: {integrity: sha512-5IsobCyPkb4XwnQO8uFfGcNOxnsg3311GRXhJ3uKv51P7Jxme4ycC/MITnwIZ10w2zx7HIyTiqVzTj4XbuIHbg==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/preview@0.0.12':
+    resolution: {integrity: sha512-g/H5fa9PQPDK6WUEG7iTlC19sAktI23qyoiJtMLqQiXFCfWeQMhqjLGKeLSKkfzszqmfJCjZtpSiKtBoOdxp3Q==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/render@1.0.5':
+    resolution: {integrity: sha512-CA69HYXPk21HhtAXATIr+9JJwpDNmAFCvdMUjWmeoD1+KhJ9NAxusMRxKNeibdZdslmq3edaeOKGbdQ9qjK8LQ==}
+    engines: {node: '>=18.0.0'}
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/render@1.1.2':
+    resolution: {integrity: sha512-RnRehYN3v9gVlNMehHPHhyp2RQo7+pSkHDtXPvg3s0GbzM9SQMW4Qrf8GRNvtpLC4gsI+Wt0VatNRUFqjvevbw==}
+    engines: {node: '>=18.0.0'}
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/row@0.0.12':
+    resolution: {integrity: sha512-HkCdnEjvK3o+n0y0tZKXYhIXUNPDx+2vq1dJTmqappVHXS5tXS6W5JOPZr5j+eoZ8gY3PShI2LWj5rWF7ZEtIQ==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/section@0.0.16':
+    resolution: {integrity: sha512-FjqF9xQ8FoeUZYKSdt8sMIKvoT9XF8BrzhT3xiFKdEMwYNbsDflcjfErJe3jb7Wj/es/lKTbV5QR1dnLzGpL3w==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/tailwind@1.0.4':
+    resolution: {integrity: sha512-tJdcusncdqgvTUYZIuhNC6LYTfL9vNTSQpwWdTCQhQ1lsrNCEE4OKCSdzSV3S9F32pi0i0xQ+YPJHKIzGjdTSA==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/text@0.1.0':
+    resolution: {integrity: sha512-LG+gEuxpoIiOojkv40iktP8UVjkJVZ+ksEEuf7zRvrcwLcVuzYyirlWdkGr4Vu/AhsD4FDRoxDWlWvLTx+WHUg==}
+    engines: {node: '>=18.0.0'}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+
   '@react-native-async-storage/async-storage@2.2.0':
     resolution: {integrity: sha512-gvRvjR5JAaUZF8tv2Kcq/Gbt3JHwbKFYfmb445rhOj6NUMx3qPLixmDx5pZAyb9at1bYvJ4/eTUipU5aki45xw==}
     peerDependencies:
@@ -4667,7 +6364,7 @@ packages:
     engines: {node: '>= 20.19.4'}
     peerDependencies:
       '@types/react': ^19.1.0
-      react: 19.1.0
+      react: '*'
       react-native: '*'
     peerDependenciesMeta:
       '@types/react':
@@ -4677,7 +6374,7 @@ packages:
     resolution: {integrity: sha512-024FWdHp3ZsE5rP8tmGI4vh+1z3wg8u8E9Frep8eeGoYo1h9rQhvgofQDGxknmrKsb7t8o8Dim+IZSvl57cPFQ==}
     peerDependencies:
       '@react-navigation/native': ^7.1.26
-      react: 19.1.0
+      react: '>= 18.2.0'
       react-native: '*'
       react-native-safe-area-context: '>= 4.0.0'
       react-native-screens: '>= 4.0.0'
@@ -4685,14 +6382,14 @@ packages:
   '@react-navigation/core@7.13.7':
     resolution: {integrity: sha512-k2ABo3250vq1ovOh/iVwXS6Hwr5PVRGXoPh/ewVFOOuEKTvOx9i//OBzt8EF+HokBxS2HBRlR2b+aCOmscRqBw==}
     peerDependencies:
-      react: 19.1.0
+      react: '>= 18.2.0'
 
   '@react-navigation/elements@2.9.3':
     resolution: {integrity: sha512-3+eyvWiVPIEf6tN9UdduhOEHcTuNe3R5WovgiVkfH9+jApHMTZDc2loePTpY/i2HDJhObhhChpJzO6BVjrpdYQ==}
     peerDependencies:
       '@react-native-masked-view/masked-view': '>= 0.2.0'
       '@react-navigation/native': ^7.1.26
-      react: 19.1.0
+      react: '>= 18.2.0'
       react-native: '*'
       react-native-safe-area-context: '>= 4.0.0'
     peerDependenciesMeta:
@@ -4703,7 +6400,7 @@ packages:
     resolution: {integrity: sha512-C/mNPhI0Pnerl7C2cB+6fAkdgSmfKECMERrbyfjx3P6JmEuTC54o+GV1c62FUmlRaRUassVHbtw4EeaY2uLh0g==}
     peerDependencies:
       '@react-navigation/native': ^7.1.26
-      react: 19.1.0
+      react: '>= 18.2.0'
       react-native: '*'
       react-native-safe-area-context: '>= 4.0.0'
       react-native-screens: '>= 4.0.0'
@@ -4711,12 +6408,55 @@ packages:
   '@react-navigation/native@7.1.26':
     resolution: {integrity: sha512-RhKmeD0E2ejzKS6z8elAfdfwShpcdkYY8zJzvHYLq+wv183BBcElTeyMLcIX6wIn7QutXeI92Yi21t7aUWfqNQ==}
     peerDependencies:
-      react: 19.1.0
+      react: '>= 18.2.0'
       react-native: '*'
 
   '@react-navigation/routers@7.5.3':
     resolution: {integrity: sha512-1tJHg4KKRJuQ1/EvJxatrMef3NZXEPzwUIUZ3n1yJ2t7Q97siwRtbynRpQG9/69ebbtiZ8W3ScOZF/OmhvM4Rg==}
 
+  '@react-three/drei@10.7.7':
+    resolution: {integrity: sha512-ff+J5iloR0k4tC++QtD/j9u3w5fzfgFAWDtAGQah9pF2B1YgOq/5JxqY0/aVoQG5r3xSZz0cv5tk2YuBob4xEQ==}
+    peerDependencies:
+      '@react-three/fiber': ^9.0.0
+      react: ^19
+      react-dom: ^19
+      three: '>=0.159'
+    peerDependenciesMeta:
+      react-dom:
+        optional: true
+
+  '@react-three/fiber@9.6.1':
+    resolution: {integrity: sha512-zF0rsKcVYpcJwbFEnv2HkHX9cvOEgsfQo/X8lwmR2dn13S4qEQJXir9fxf5js2LQFoXqxOY7MDkOkYx2uZ4gSg==}
+    peerDependencies:
+      expo: '>=43.0'
+      expo-asset: '>=8.4'
+      expo-file-system: '>=11.0'
+      expo-gl: '>=11.0'
+      react: '>=19 <19.3'
+      react-dom: '>=19 <19.3'
+      react-native: '>=0.78'
+      three: '>=0.156'
+    peerDependenciesMeta:
+      expo:
+        optional: true
+      expo-asset:
+        optional: true
+      expo-file-system:
+        optional: true
+      expo-gl:
+        optional: true
+      react-dom:
+        optional: true
+      react-native:
+        optional: true
+
+  '@react-three/postprocessing@3.0.4':
+    resolution: {integrity: sha512-e4+F5xtudDYvhxx3y0NtWXpZbwvQ0x1zdOXWTbXMK6fFLVDd4qucN90YaaStanZGS4Bd5siQm0lGL/5ogf8iDQ==}
+    peerDependencies:
+      '@react-three/fiber': ^9.0.0
+      react: ^19.0
+      three: '>= 0.156.0'
+
   '@rolldown/binding-android-arm64@1.0.0-beta.57':
     resolution: {integrity: sha512-GoOVDy8bjw9z1K30Oo803nSzXJS/vWhFijFsW3kzvZCO8IZwFnNa6pGctmbbJstKl3Fv6UBwyjJQN6msejW0IQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -4729,6 +6469,12 @@ packages:
     cpu: [arm64]
     os: [android]
 
+  '@rolldown/binding-android-arm64@1.0.1':
+    resolution: {integrity: sha512-fJI3I0r3C3Oj/zdBCpaCmBRZYf07xpaq4yCfDDoSFm+beWNzbIl26puW8RraUdugoJw/95zerNOn6jasAhzSmg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [android]
+
   '@rolldown/binding-darwin-arm64@1.0.0-beta.57':
     resolution: {integrity: sha512-9c4FOhRGpl+PX7zBK5p17c5efpF9aSpTPgyigv57hXf5NjQUaJOOiejPLAtFiKNBIfm5Uu6yFkvLKzOafNvlTw==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -4741,6 +6487,12 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
+  '@rolldown/binding-darwin-arm64@1.0.1':
+    resolution: {integrity: sha512-cKnAhWEsV7TPcA/5EAteDp6KcJZBQ2G+BqE7zayMMi7kMvwRsbv7WT9aOnn0WNl4SKEIf43vjS31iUPu80nzXg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [darwin]
+
   '@rolldown/binding-darwin-x64@1.0.0-beta.57':
     resolution: {integrity: sha512-6RsB8Qy4LnGqNGJJC/8uWeLWGOvbRL/KG5aJ8XXpSEupg/KQtlBEiFaYU/Ma5Usj1s+bt3ItkqZYAI50kSplBA==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -4753,6 +6505,12 @@ packages:
     cpu: [x64]
     os: [darwin]
 
+  '@rolldown/binding-darwin-x64@1.0.1':
+    resolution: {integrity: sha512-YKrVwQjIRBPo+5G/u03wGjbdy4q7pyzCe93DK9VJ7zkVmeg8LJ7GbgsiHWdR4xSoe4CAXRD7Bcjgbtr64bkXNg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [darwin]
+
   '@rolldown/binding-freebsd-x64@1.0.0-beta.57':
     resolution: {integrity: sha512-uA9kG7+MYkHTbqwv67Tx+5GV5YcKd33HCJIi0311iYBd25yuwyIqvJfBdt1VVB8tdOlyTb9cPAgfCki8nhwTQg==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -4765,6 +6523,12 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
+  '@rolldown/binding-freebsd-x64@1.0.1':
+    resolution: {integrity: sha512-z/oBsREo46SsFqBwYtFe0kpJeBijAT48O/WXLI4suiCLBkr03RTtTJMCzSdDd2znlh8VJizL09XVkQgk8IZonw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [freebsd]
+
   '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.57':
     resolution: {integrity: sha512-3KkS0cHsllT2T+Te+VZMKHNw6FPQihYsQh+8J4jkzwgvAQpbsbXmrqhkw3YU/QGRrD8qgcOvBr6z5y6Jid+rmw==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -4777,65 +6541,123 @@ packages:
     cpu: [arm]
     os: [linux]
 
+  '@rolldown/binding-linux-arm-gnueabihf@1.0.1':
+    resolution: {integrity: sha512-ik8q7GM11zxvYxFc2PeDcT6TBvhCQMaUxfph/M5l9sKuTs/Sjg3L+Byw0F7w0ZVLBZmx30P+gG0ECzzN+MFcmQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm]
+    os: [linux]
+
   '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.57':
     resolution: {integrity: sha512-A3/wu1RgsHhqP3rVH2+sM81bpk+Qd2XaHTl8LtX5/1LNR7QVBFBCpAoiXwjTdGnI5cMdBVi7Z1pi52euW760Fw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-arm64-gnu@1.0.0-rc.17':
     resolution: {integrity: sha512-e6usGaHKW5BMNZOymS1UcEYGowQMWcgZ71Z17Sl/h2+ZziNJ1a9n3Zvcz6LdRyIW5572wBCTH/Z+bKuZouGk9Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
+
+  '@rolldown/binding-linux-arm64-gnu@1.0.1':
+    resolution: {integrity: sha512-QoSx2EkyrrdZ6kcyE8stqZ62t0Yra8Fs5ia9lOxJrh6TMQJK7gQKmscdTHf7pOXKREKrVwOtJcQG3qVSfc866A==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-arm64-musl@1.0.0-beta.57':
     resolution: {integrity: sha512-d0kIVezTQtazpyWjiJIn5to8JlwfKITDqwsFv0Xc6s31N16CD2PC/Pl2OtKgS7n8WLOJbfqgIp5ixYzTAxCqMg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@rolldown/binding-linux-arm64-musl@1.0.0-rc.17':
     resolution: {integrity: sha512-b/CgbwAJpmrRLp02RPfhbudf5tZnN9nsPWK82znefso832etkem8H7FSZwxrOI9djcdTP7U6YfNhbRnh7djErg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
+
+  '@rolldown/binding-linux-arm64-musl@1.0.1':
+    resolution: {integrity: sha512-uwNwFpwKeNiZawfAWBgg0VIztPTV3ihhh1vV334h9ivnNLorxnQMU6Fz8wG1Zb4Qh9LC1/MkcyT3YlDXG3Rsgg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
 
   '@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.17':
     resolution: {integrity: sha512-4EII1iNGRUN5WwGbF/kOh/EIkoDN9HsupgLQoXfY+D1oyJm7/F4t5PYU5n8SWZgG0FEwakyM8pGgwcBYruGTlA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
+
+  '@rolldown/binding-linux-ppc64-gnu@1.0.1':
+    resolution: {integrity: sha512-zY1bul7OWr7DFBiJ++wofXvnr8B45ce3QsQUhKrIhXsygAh7bTkwyeM1bi1a2g5C/yC/N8TZyGDEoMfm/l9mpg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-s390x-gnu@1.0.0-rc.17':
     resolution: {integrity: sha512-AH8oq3XqQo4IibpVXvPeLDI5pzkpYn0WiZAfT05kFzoJ6tQNzwRdDYQ45M8I/gslbodRZwW8uxLhbSBbkv96rA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
+
+  '@rolldown/binding-linux-s390x-gnu@1.0.1':
+    resolution: {integrity: sha512-0frlsT/f4Ft6I7SMESTKnF3cZsdicQn1dCMkF/jT9wDLE+gGoiQfv1nmT9e+s7s/fekvvy6tZM2jHvI2tkbJDQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-x64-gnu@1.0.0-beta.57':
     resolution: {integrity: sha512-E199LPijo98yrLjPCmETx8EF43sZf9t3guSrLee/ej1rCCc3zDVTR4xFfN9BRAapGVl7/8hYqbbiQPTkv73kUg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-x64-gnu@1.0.0-rc.17':
     resolution: {integrity: sha512-cLnjV3xfo7KslbU41Z7z8BH/E1y5mzUYzAqih1d1MDaIGZRCMqTijqLv76/P7fyHuvUcfGsIpqCdddbxLLK9rA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
+
+  '@rolldown/binding-linux-x64-gnu@1.0.1':
+    resolution: {integrity: sha512-XABVmGp9Tg0WspTVvwduTc4fpqy6JnAUrSQe6OuyqD/03nI7r0O9OWUkMIwFrjKAIqolvqoA4ZrJppgwE0Gxmw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-x64-musl@1.0.0-beta.57':
     resolution: {integrity: sha512-++EQDpk/UJ33kY/BNsh7A7/P1sr/jbMuQ8cE554ZIy+tCUWCivo9zfyjDUoiMdnxqX6HLJEqqGnbGQOvzm2OMQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@rolldown/binding-linux-x64-musl@1.0.0-rc.17':
     resolution: {integrity: sha512-0phclDw1spsL7dUB37sIARuis2tAgomCJXAHZlpt8PXZ4Ba0dRP1e+66lsRqrfhISeN9bEGNjQs+T/Fbd7oYGw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
+
+  '@rolldown/binding-linux-x64-musl@1.0.1':
+    resolution: {integrity: sha512-bV4fzswuzVcKD90o/VM6QqKxnxlDq0g2BISDLNVmxrnhpv1DDbyPhCIjYfvzYLV+MvkKKnQt2Q6AO86SEBULUQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
 
   '@rolldown/binding-openharmony-arm64@1.0.0-beta.57':
     resolution: {integrity: sha512-voDEBcNqxbUv/GeXKFtxXVWA+H45P/8Dec4Ii/SbyJyGvCqV1j+nNHfnFUIiRQ2Q40DwPe/djvgYBs9PpETiMA==}
@@ -4849,6 +6671,12 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
+  '@rolldown/binding-openharmony-arm64@1.0.1':
+    resolution: {integrity: sha512-/Mh0Zhq3OP7fVs0kcQHZP6lZEthMGTaSf8UBQYSFEZDWGXXlEC+nJ6EqenaK2t4LBXMe3A+K/G2BVXXdtOr4PQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [openharmony]
+
   '@rolldown/binding-wasm32-wasi@1.0.0-beta.57':
     resolution: {integrity: sha512-bRhcF7NLlCnpkzLVlVhrDEd0KH22VbTPkPTbMjlYvqhSmarxNIq5vtlQS8qmV7LkPKHrNLWyJW/V/sOyFba26Q==}
     engines: {node: '>=14.0.0'}
@@ -4859,6 +6687,11 @@ packages:
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [wasm32]
 
+  '@rolldown/binding-wasm32-wasi@1.0.1':
+    resolution: {integrity: sha512-+1xc9X45l8ufsBAm6Gjvx2qDRIY9lTVt0cgWNcJ+1gdhXvkbxePA60yRTwSTuXL09CMhyJmjpV7E3NoyxbqFQQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [wasm32]
+
   '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.57':
     resolution: {integrity: sha512-rnDVGRks2FQ2hgJ2g15pHtfxqkGFGjJQUDWzYznEkE8Ra2+Vag9OffxdbJMZqBWXHVM0iS4dv8qSiEn7bO+n1Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -4871,6 +6704,12 @@ packages:
     cpu: [arm64]
     os: [win32]
 
+  '@rolldown/binding-win32-arm64-msvc@1.0.1':
+    resolution: {integrity: sha512-1D+UqZdfnuR+Jy1GgMJwi85bD40H21uNmOPRWQhw4oRSuolZ/B5rixZ45DK2KXOTCvmVCecauWgEhbw8bI7tOw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [arm64]
+    os: [win32]
+
   '@rolldown/binding-win32-x64-msvc@1.0.0-beta.57':
     resolution: {integrity: sha512-OqIUyNid1M4xTj6VRXp/Lht/qIP8fo25QyAZlCP+p6D2ATCEhyW4ZIFLnC9zAGN/HMbXoCzvwfa8Jjg/8J4YEg==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -4883,6 +6722,12 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@rolldown/binding-win32-x64-msvc@1.0.1':
+    resolution: {integrity: sha512-INAycaWuhlOK3wk4mRHGsdgwYWmd9cChdPdE9bwWmy6rn9VqVNYNFGhOdXrofXUxwHIncSiPNb8tNm8knDVIeQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    cpu: [x64]
+    os: [win32]
+
   '@rolldown/pluginutils@1.0.0-beta.27':
     resolution: {integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==}
 
@@ -4895,6 +6740,9 @@ packages:
   '@rolldown/pluginutils@1.0.0-rc.3':
     resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
 
+  '@rolldown/pluginutils@1.0.1':
+    resolution: {integrity: sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==}
+
   '@rollup/rollup-android-arm-eabi@4.59.0':
     resolution: {integrity: sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==}
     cpu: [arm]
@@ -4929,66 +6777,79 @@ packages:
     resolution: {integrity: sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==}
     cpu: [arm]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm-musleabihf@4.59.0':
     resolution: {integrity: sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==}
     cpu: [arm]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-arm64-gnu@4.59.0':
     resolution: {integrity: sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm64-musl@4.59.0':
     resolution: {integrity: sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-loong64-gnu@4.59.0':
     resolution: {integrity: sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==}
     cpu: [loong64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-loong64-musl@4.59.0':
     resolution: {integrity: sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==}
     cpu: [loong64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-ppc64-gnu@4.59.0':
     resolution: {integrity: sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-ppc64-musl@4.59.0':
     resolution: {integrity: sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==}
     cpu: [ppc64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-riscv64-gnu@4.59.0':
     resolution: {integrity: sha512-NDYMpsXYJJaj+I7UdwIuHHNxXZ/b/N2hR15NyH3m2qAtb/hHPA4g4SuuvrdxetTdndfj9b1WOmy73kcPRoERUg==}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-riscv64-musl@4.59.0':
     resolution: {integrity: sha512-nLckB8WOqHIf1bhymk+oHxvM9D3tyPndZH8i8+35p/1YiVoVswPid2yLzgX7ZJP0KQvnkhM4H6QZ5m0LzbyIAg==}
     cpu: [riscv64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-s390x-gnu@4.59.0':
     resolution: {integrity: sha512-oF87Ie3uAIvORFBpwnCvUzdeYUqi2wY6jRFWJAy1qus/udHFYIkplYRW+wo+GRUP4sKzYdmE1Y3+rY5Gc4ZO+w==}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-gnu@4.59.0':
     resolution: {integrity: sha512-3AHmtQq/ppNuUspKAlvA8HtLybkDflkMuLK4DPo77DfthRb71V84/c4MlWJXixZz4uruIH4uaa07IqoAkG64fg==}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-musl@4.59.0':
     resolution: {integrity: sha512-2UdiwS/9cTAx7qIUZB/fWtToJwvt0Vbo0zmnYt7ED35KPg13Q0ym1g442THLC7VyI6JfYTP4PiSOWyoMdV2/xg==}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-openbsd-x64@4.59.0':
     resolution: {integrity: sha512-M3bLRAVk6GOwFlPTIxVBSYKUaqfLrn8l0psKinkCFxl4lQvOSz8ZrKDz2gxcBwHFpci0B6rttydI4IpS4IS/jQ==}
@@ -5023,17 +6884,47 @@ packages:
   '@rtsao/scc@1.1.0':
     resolution: {integrity: sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g==}
 
+  '@selderee/plugin-htmlparser2@0.11.0':
+    resolution: {integrity: sha512-P33hHGdldxGabLFjPPpaTxVolMrzrcegejx+0GxjrIb9Zv48D8yAIA/QTDR2dFl7Uz7urX8aX6+5bCZslr+gWQ==}
+
   '@shadcn/react@0.2.1':
     resolution: {integrity: sha512-5krgi3dRMKb5jH6a+qPzVJUy/54s0kKE4Rw4LjDfLqOdVQTWKUgxWf1kW8r912I0jX/Lzxqc+pgjkjWxUIK5BQ==}
     peerDependencies:
       '@types/react': '>=19'
-      react: 19.1.0
+      react: '>=19'
     peerDependenciesMeta:
       '@types/react':
         optional: true
       react:
         optional: true
 
+  '@shikijs/core@3.23.0':
+    resolution: {integrity: sha512-NSWQz0riNb67xthdm5br6lAkvpDJRTgB36fxlo37ZzM2yq0PQFFzbd8psqC2XMPgCzo1fW6cVi18+ArJ44wqgA==}
+
+  '@shikijs/engine-javascript@3.23.0':
+    resolution: {integrity: sha512-aHt9eiGFobmWR5uqJUViySI1bHMqrAgamWE1TYSUoftkAeCCAiGawPMwM+VCadylQtF4V3VNOZ5LmfItH5f3yA==}
+
+  '@shikijs/engine-oniguruma@3.23.0':
+    resolution: {integrity: sha512-1nWINwKXxKKLqPibT5f4pAFLej9oZzQTsby8942OTlsJzOBZ0MWKiwzMsd+jhzu8YPCHAswGnnN1YtQfirL35g==}
+
+  '@shikijs/langs@3.23.0':
+    resolution: {integrity: sha512-2Ep4W3Re5aB1/62RSYQInK9mM3HsLeB91cHqznAJMuylqjzNVAVCMnNWRHFtcNHXsoNRayP9z1qj4Sq3nMqYXg==}
+
+  '@shikijs/rehype@3.23.0':
+    resolution: {integrity: sha512-GepKJxXHbXFfAkiZZZ+4V7x71Lw3s0ALYmydUxJRdvpKjSx9FOMSaunv6WRLFBXR6qjYerUq1YZQno+2gLEPwA==}
+
+  '@shikijs/themes@3.23.0':
+    resolution: {integrity: sha512-5qySYa1ZgAT18HR/ypENL9cUSGOeI2x+4IvYJu4JgVJdizn6kG4ia5Q1jDEOi7gTbN4RbuYtmHh0W3eccOrjMA==}
+
+  '@shikijs/transformers@3.23.0':
+    resolution: {integrity: sha512-F9msZVxdF+krQNSdQ4V+Ja5QemeAoTQ2jxt7nJCwhDsdF1JWS3KxIQXA3lQbyKwS3J61oHRUSv4jYWv3CkaKTQ==}
+
+  '@shikijs/types@3.23.0':
+    resolution: {integrity: sha512-3JZ5HXOZfYjsYSk0yPwBrkupyYSLpAE26Qc0HLghhZNGTZg/SKxXIIgoxOpmmeQP0RRSDJTk1/vPfw9tbw+jSQ==}
+
+  '@shikijs/vscode-textmate@10.0.2':
+    resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==}
+
   '@sinclair/typebox@0.27.8':
     resolution: {integrity: sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==}
 
@@ -5046,11 +6937,70 @@ packages:
   '@sinonjs/fake-timers@10.3.0':
     resolution: {integrity: sha512-V4BG07kuYSUkTCSBHG8G8TNhM+F19jXFWnQtzj+we8DrkpSBCee9Z3Ms8yiGer/dlmhe35/Xdgyo3/0rQKg7YA==}
 
+  '@smithy/core@3.29.3':
+    resolution: {integrity: sha512-L+Ys6ecjk5vwPMAKHBpPKlJ3DkqwNcnfEISXBZIsVvWG/XKXfsAP8mwIYlTeLcd2ElHdesPI8OuOmJSFAPhm6A==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/credential-provider-imds@4.4.8':
+    resolution: {integrity: sha512-q9J7JTiXrAhB8sDp4px97uEPT7CwKH61Co78grdNQvU8QZAdiuaSRhP0tUVf2ogy36RZTrlMU1rBmDEH+cnkiA==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/fetch-http-handler@5.6.5':
+    resolution: {integrity: sha512-SuqeisTyPoiIPtIYru/sGxGyXzmZ+8nnFOhC+qRPglt06Ebd1yH//CDltZB2J/3WBNVhwfUaZ0EtHB3cm2X32g==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/is-array-buffer@2.2.0':
+    resolution: {integrity: sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==}
+    engines: {node: '>=14.0.0'}
+
+  '@smithy/node-config-provider@4.5.8':
+    resolution: {integrity: sha512-Kran9kcysdZdoiVZQ3EXfHTbZ48kJ6Er2sZ4eHaL2LSsqVlucn/8xrgxj36/z9qlrToNGNf+na4u6xp1Nz08KQ==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/node-http-handler@4.9.5':
+    resolution: {integrity: sha512-bNqdxTQTxmLbomSmlkZFz8L6B/feQ2HHzw4L2zY7Ecp2XffYAZq2uzdWDdxJHJFbEvqd+SRuluJso0P8+xPdbw==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/protocol-http@5.5.8':
+    resolution: {integrity: sha512-SyFyL/ajuzJ79W+BpseFFbSz8/Rwj+QGqUlayeZE0jS2aCcjzV5tJBcbHgfypvSHpe7s2JmUHZmfpICaxwEs5g==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/shared-ini-file-loader@4.6.8':
+    resolution: {integrity: sha512-zsd1RYVrnWcByRhYrSYcDKCV9MfU5o33uSaksVkVgaeS6QMm6PMEa1AhKX0zrQrwsFVfpwhIbA3nxnFOLf61CA==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/signature-v4@5.6.4':
+    resolution: {integrity: sha512-B89bpf2t/y/wia6LZ+4JfHXYQT9PnVftsH05rgJKKIStS7r/4XSs9HOjtPoLtgcA6HCW9jVqX5DBbq7E0PAkiQ==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/smithy-client@4.14.8':
+    resolution: {integrity: sha512-hnZ6wFwLHQYL/+wdvT6qD1Fkiclobv7Y3iBB2fyfr+osJcD5n4IMAOPaIFUj7WgxOwU/e13FubyebUigzMLXCQ==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/types@4.16.1':
+    resolution: {integrity: sha512-0JFs3V2y2M9tKW5na/qxe69Zv+uxLMO7QBbhxF/FHu/Gp2NFZAAL9tWl9PU02xxo07pb3G9FTyjNc6D5uZrJIg==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/util-base64@4.5.8':
+    resolution: {integrity: sha512-vJ3w2vD2BzEGbnMfaBcrtPXi37IUtG9qQgVasMRiF+Ef+0S5fMgaEFcwBGYg7RkN7wKBAcg2r+ulF/4aj3+VYw==}
+    engines: {node: '>=18.0.0'}
+
+  '@smithy/util-buffer-from@2.2.0':
+    resolution: {integrity: sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==}
+    engines: {node: '>=14.0.0'}
+
+  '@smithy/util-utf8@2.3.0':
+    resolution: {integrity: sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==}
+    engines: {node: '>=14.0.0'}
+
+  '@socket.io/component-emitter@3.1.2':
+    resolution: {integrity: sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==}
+
   '@srsholmes/vitest-react-native@0.1.5':
     resolution: {integrity: sha512-LqUsKKevWSrma/q2jMVOz/yFUZ4KRTkHSBMTCbsyyx5m8RSAdgPci6FPT9rbnnEJv8nUmcEZIUbYWqiJQpQYEg==}
     engines: {node: '>=20'}
     peerDependencies:
-      react: 19.1.0
+      react: '>=18'
       react-native: '>=0.72'
       vite: 7.3.5
       vitest: '>=4'
@@ -5061,6 +7011,29 @@ packages:
   '@standard-schema/utils@0.3.0':
     resolution: {integrity: sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g==}
 
+  '@swc/counter@0.1.3':
+    resolution: {integrity: sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==}
+
+  '@swc/helpers@0.5.15':
+    resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
+
+  '@t3-oss/env-core@0.13.11':
+    resolution: {integrity: sha512-sM7GYY+KL7H/Hl0BE0inWfk3nRHZOLhmVn7sHGxaZt9FAR6KqREXAE+6TqKfiavfXmpRxO/OZ2QgKRd+oiBYRQ==}
+    peerDependencies:
+      arktype: ^2.1.0
+      typescript: '>=5.0.0'
+      valibot: ^1.0.0-beta.7 || ^1.0.0
+      zod: ^3.24.0 || ^4.0.0
+    peerDependenciesMeta:
+      arktype:
+        optional: true
+      typescript:
+        optional: true
+      valibot:
+        optional: true
+      zod:
+        optional: true
+
   '@tailwindcss/node@4.3.0':
     resolution: {integrity: sha512-aFb4gUhFOgdh9AXo4IzBEOzBkkAxm9VigwDJnMIYv3lcfXCJVesNfbEaBl4BNgVRyid92AmdviqwBUBRKSeY3g==}
 
@@ -5132,48 +7105,56 @@ packages:
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@tailwindcss/oxide-linux-arm64-gnu@4.3.2':
     resolution: {integrity: sha512-wDgEIGwoM8w8pufh9LVt1PahDgNdKXrLC2qfAnV3vAmococ9RWbxeAw4pxPttd/TsJfwjyLf90Dg1y9y8I6Emw==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@tailwindcss/oxide-linux-arm64-musl@4.3.0':
     resolution: {integrity: sha512-Z6sukiQsngnWO+l39X4pPbiWT81IC+PLKF+PHxIlyZbGNb9MODfYlXEVlFvej5BOZInWX01kVyzeLvHsXhfczQ==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@tailwindcss/oxide-linux-arm64-musl@4.3.2':
     resolution: {integrity: sha512-J5Nuk0uZQIiMTJj3LEx4sAA9tMFUoXQZFv1J6An+QGYe53HKRJuFDi0rpq/tuouCZeAbOBY3kQ6g8qeD4TUjtA==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@tailwindcss/oxide-linux-x64-gnu@4.3.0':
     resolution: {integrity: sha512-DRNdQRpSGzRGfARVuVkxvM8Q12nh19l4BF/G7zGA1oe+9wcC6saFBHTISrpIcKzhiXtSrlSrluCfvMuledoCTQ==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@tailwindcss/oxide-linux-x64-gnu@4.3.2':
     resolution: {integrity: sha512-kqCZpSKOBEJO4mz7OqWoofBZeXTAwaVGPj0ErAj7CojmhKpWVWVOnrt9dE8odoIraZq4oj3ausM37kXi+Tow8w==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@tailwindcss/oxide-linux-x64-musl@4.3.0':
     resolution: {integrity: sha512-Z0IADbDo8bh6I7h2IQMx601AdXBLfFpEdUotft86evd/8ZPflZe9COPO8Q1vw+pfLWIUo9zN/JGZvwuAJqduqg==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@tailwindcss/oxide-linux-x64-musl@4.3.2':
     resolution: {integrity: sha512-cixpqbh2toJDmkuCRI68nXA8ZxNmdK9Y+9v5h3MC3ZQKy/0BO8AWzlkWyRM7JAFSGBlfig4YVTPsK6MVgqz1uw==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@tailwindcss/oxide-wasm32-wasi@4.3.0':
     resolution: {integrity: sha512-HNZGOUxEmElksYR7S6sC5jTeNGpobAsy9u7Gu0AskJ8/20FR9GqebUyB+HBcU/ax6BHuiuJi+Oda4B+YX6H1yA==}
@@ -5247,22 +7228,36 @@ packages:
     resolution: {integrity: sha512-79pf/RkhteYZTRgcR4F9kbk84P2N8rugQJswxfIqovlbRiT3yI7eBE+5QorIrZaOKktsgzRlXh1l/du/xpl4iA==}
     engines: {node: '>=20.19'}
 
-  '@tanstack/query-core@5.101.2':
-    resolution: {integrity: sha512-hH5MLoJhF7KaIGd7q3xTXGXvslI+GYlM1Z/35aSHHWaCJWB7XvTSHYuV3eM7tw+aE0mT/xMro4M4Q9rCGHT0lw==}
+  '@tanstack/query-core@5.100.11':
+    resolution: {integrity: sha512-lmE0994apShXPj8CUxgx4ch5yUJhE9k/+tVwihBvPOyerACWdBocfFg24t8+0RhtlTd7tEgchDkhlCxNssvDxw==}
+
+  '@tanstack/query-devtools@5.100.11':
+    resolution: {integrity: sha512-47rVBDuGMW/A4ekt3YQdz+q0JSIwktwGnWCYyQUvSs2/g/Oa+6Fi2/IQk4/Y4vf6u1uwI7hOogHslgMC8f3X/Q==}
 
   '@tanstack/query-devtools@5.101.2':
     resolution: {integrity: sha512-o+wHcqgN7Pp0s8v1i0UGq/ZrrEKrxdIiMQmKRdYb2w7NPtylYSJ4+wg/tIn71m9DLstwUwdEGAvROdly6HXP6w==}
 
+  '@tanstack/react-query-devtools@5.100.11':
+    resolution: {integrity: sha512-75RFlJEG53Ed/Cxe5WLmgIpOElPNpgLZq7h0fLFnM5XwTYxSTk1rX/gC6MqGVXsSdrbP7zn7hPSJx9MinwiUHA==}
+    peerDependencies:
+      '@tanstack/react-query': ^5.100.11
+      react: ^18 || ^19
+
   '@tanstack/react-query-devtools@5.101.2':
     resolution: {integrity: sha512-eU7HctdA9gDjqoERoEdzLbw9DiqnBDfh5+Hu0u26gjqoHJezOpQAuiesDL2VvkU+2cPV76zgv0tMZsOrI4LjnQ==}
     peerDependencies:
       '@tanstack/react-query': ^5.101.2
-      react: 19.1.0
+      react: ^18 || ^19
+
+  '@tanstack/react-query@5.100.11':
+    resolution: {integrity: sha512-J0f9s5x3LE1450nNNfYx+e/n0DMa0uOBdFJUy5r0RvmsXd4nB/n0rbHtHI1vYXhikNFan+wf51p6Tmp4c8ucrg==}
+    peerDependencies:
+      react: ^18 || ^19
 
   '@tanstack/react-query@5.101.2':
     resolution: {integrity: sha512-seDkr6kzGzX1okaaTtZPtgA688CDPlXUz1C6xSg0ESqn04Vuc8tlrYms1s3de+znBqhPVxFRfpAfUf+6XvfPWg==}
     peerDependencies:
-      react: 19.1.0
+      react: ^18 || ^19
 
   '@tanstack/react-router-devtools@1.163.3':
     resolution: {integrity: sha512-42VMkV/2Z8ro7xzblPBRNZIEmCNXMzm2jD68G52p2qhjXm38wGpg46qneAESN9FtTQeVWk5aSXs47/jt7lkzmw==}
@@ -5270,24 +7265,96 @@ packages:
     peerDependencies:
       '@tanstack/react-router': ^1.163.3
       '@tanstack/router-core': ^1.163.3
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
     peerDependenciesMeta:
       '@tanstack/router-core':
         optional: true
 
+  '@tanstack/react-router-ssr-query@1.167.0':
+    resolution: {integrity: sha512-lJC/qySnlB0RaPCwCS4BQbdsDwyaPP2C8tzuEUsrwPTxm8TVYonYv3sptoSVhY0C2f8i5041X8gbRL7+lSY8BQ==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      '@tanstack/query-core': 5.100.11
+      '@tanstack/react-query': '>=5.90.0'
+      '@tanstack/react-router': '>=1.127.0'
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
+
   '@tanstack/react-router@1.163.3':
     resolution: {integrity: sha512-hheBbFVb+PbxtrWp8iy6+TTRTbhx3Pn6hKo8Tv/sWlG89ZMcD1xpQWzx8ukHN9K8YWbh5rdzt4kv6u8X4kB28Q==}
     engines: {node: '>=20.19'}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
+
+  '@tanstack/react-router@1.170.7':
+    resolution: {integrity: sha512-4Q8M8Q9sGobhyt72yW+vxzUOSPfrCAHwjPOCb7+ocReQnFQ37t9Qh4RNG4+7zsFQ4tW9C8LpllRe49aK2RYy2Q==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
+
+  '@tanstack/react-start-client@1.168.2':
+    resolution: {integrity: sha512-1vnTk3qTh6pJjFaYQvBpTJsmGOb6vE3qY/747uU3ys6kS3NSElmc5YLHk4hlk3S52EVQq/ntuZuJtkS96rQULA==}
+    engines: {node: '>=22.12.0'}
+    peerDependencies:
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
+
+  '@tanstack/react-start-rsc@0.1.10':
+    resolution: {integrity: sha512-NU4J+8Sm1i5N9skk1X4nTG4sTelCjyc+ny5n56KtTLnPkEm3chvYqjT4CxcoPoHYzE2vE0oAA28YahSQwUkMbQ==}
+    engines: {node: '>=22.12.0'}
+    peerDependencies:
+      '@rspack/core': '>=2.0.0-0'
+      '@vitejs/plugin-rsc': '>=0.5.20'
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
+      react-server-dom-rspack: '>=0.0.2'
+    peerDependenciesMeta:
+      '@rspack/core':
+        optional: true
+      '@vitejs/plugin-rsc':
+        optional: true
+      react-server-dom-rspack:
+        optional: true
+
+  '@tanstack/react-start-server@1.167.7':
+    resolution: {integrity: sha512-/Tq3tH7XiCT9K5cYD753/Le6IRjRNHjbN/Jk/Wkpa4pJ3exta5QM7ccCRwVWEd9oIzUvrIfYKWs2JiK7K/R13g==}
+    engines: {node: '>=22.12.0'}
+    peerDependencies:
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
+
+  '@tanstack/react-start@1.168.10':
+    resolution: {integrity: sha512-wISys9u9HDAA7pi298SITc+DzERreR8vmSNGkfxlK0L3n1RlalCdfTKO67JoAdqVNz9FSP9PktgciMhfuHdvaQ==}
+    engines: {node: '>=22.12.0'}
+    peerDependencies:
+      '@rsbuild/core': ^2.0.0
+      '@vitejs/plugin-rsc': '*'
+      react: '>=18.0.0 || >=19.0.0'
+      react-dom: '>=18.0.0 || >=19.0.0'
+      vite: 7.3.5
+    peerDependenciesMeta:
+      '@rsbuild/core':
+        optional: true
+      '@vitejs/plugin-rsc':
+        optional: true
+      vite:
+        optional: true
 
   '@tanstack/react-store@0.9.3':
     resolution: {integrity: sha512-y2iHd/N9OkoQbFJLUX1T9vbc2O9tjH0pQRgTcx1/Nz4IlwLvkgpuglXUx+mXt0g5ZDFrEeDnONPqkbfxXJKwRg==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
+  '@tanstack/react-table@8.21.3':
+    resolution: {integrity: sha512-5nNMTSETP4ykGegmVkhjcS8tTLW6Vl4axfEGQN3v0zdHYbK4UfoqfPChclTrJ4EoK9QynqAu9oUf8VEmrpZ5Ww==}
+    engines: {node: '>=12'}
+    peerDependencies:
+      react: '>=16.8'
+      react-dom: '>=16.8'
 
   '@tanstack/router-core@1.163.3':
     resolution: {integrity: sha512-jPptiGq/w3nuPzcMC7RNa79aU+b6OjaDzWJnBcV2UAwL4ThJamRS4h42TdhJE+oF5yH9IEnCOGQdfnbw45LbfA==}
@@ -5297,6 +7364,10 @@ packages:
     resolution: {integrity: sha512-Mo3hwx0qB0cJsVYGDjG0+Ouf7VV74h/vsoDMGztdlyzDanp4gBA2s7IVvm6hFrmQM6GpD9F0Z7SqD7OldfLE7g==}
     engines: {node: '>=20.19'}
 
+  '@tanstack/router-core@1.171.5':
+    resolution: {integrity: sha512-BfilbQqqWiQwJn68cD8wmk1ajEWIO3IlEA1zVuWslWbiVc23CDn+6ACO5tfPAcc96ED37hxela5ij3VBvAtusw==}
+    engines: {node: '>=20.19'}
+
   '@tanstack/router-devtools-core@1.163.3':
     resolution: {integrity: sha512-FPi64IP0PT1IkoeyGmsD6JoOVOYAb85VCH0mUbSdD90yV0+1UB6oT+D7K27GXkp7SXMJN3mBEjU5rKnNnmSCIw==}
     engines: {node: '>=20.19'}
@@ -5311,6 +7382,10 @@ packages:
     resolution: {integrity: sha512-i2rWRtqY/yCYUDXva1li4zeDP20oFjMt/wh9RnGJCrKSLWrvEGnxAOSyXgiOsoJnU96TTQ0mUDbGfXsSTupeZQ==}
     engines: {node: '>=20.19'}
 
+  '@tanstack/router-generator@1.167.9':
+    resolution: {integrity: sha512-B2MiJVYyI/C+5O7Hzu9owZPHuXCxKKFweUdMLToAZLg2H7iYoXYzgqAFISUBBlL8jKWugEVwNMUE3ajBGZep4w==}
+    engines: {node: '>=20.19'}
+
   '@tanstack/router-plugin@1.163.3':
     resolution: {integrity: sha512-JOUYuUX2N9ZHnmkmvmiGzXGbkvrur/5BfW/+vpiZzuifSyvdc0XsfwkTpjvwWx9ymp4ZshSVKiQQKQi09YweIw==}
     engines: {node: '>=20.19'}
@@ -5332,17 +7407,92 @@ packages:
       webpack:
         optional: true
 
+  '@tanstack/router-plugin@1.168.10':
+    resolution: {integrity: sha512-s3bWi8pT+p8D70aev6CBwCQp/2SlkO16wxXDtK6a9JAQYK7ARemp3qdzX5EDnVmB9Mc6ex5f9eyrN6eL/V+tLg==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      '@rsbuild/core': '>=1.0.2 || ^2.0.0'
+      '@tanstack/react-router': ^1.170.7
+      vite: 7.3.5
+      vite-plugin-solid: ^2.11.10 || ^3.0.0-0
+      webpack: '>=5.92.0'
+    peerDependenciesMeta:
+      '@rsbuild/core':
+        optional: true
+      '@tanstack/react-router':
+        optional: true
+      vite:
+        optional: true
+      vite-plugin-solid:
+        optional: true
+      webpack:
+        optional: true
+
+  '@tanstack/router-ssr-query-core@1.169.0':
+    resolution: {integrity: sha512-zueXiVsF1BbVc8iaalHILRGURDCVlTTOVdUy/36VVeKVKr778vqJzyus+erEoVu5x4vl4DBGGM8RHqCaus1TQQ==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      '@tanstack/query-core': 5.100.11
+      '@tanstack/router-core': '>=1.127.0'
+
   '@tanstack/router-utils@1.161.4':
     resolution: {integrity: sha512-r8TpjyIZoqrXXaf2DDyjd44gjGBoyE+/oEaaH68yLI9ySPO1gUWmQENZ1MZnmBnpUGN24NOZxdjDLc8npK0SAw==}
     engines: {node: '>=20.19'}
 
+  '@tanstack/router-utils@1.162.1':
+    resolution: {integrity: sha512-62layyTGmclHDQS/eidwKRfN1hhCKwViG7iEBcVmL0MXgcAB3OOucWCEcDDGd9Cu11H6b4QQ5oOo47MWIqwz0A==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/start-client-core@1.170.2':
+    resolution: {integrity: sha512-ZYYwAvdhPHSxjuA5ERP0YTHLomOo3XD3eL/PqlzL3qQhuxE4l3xjKzeBOWsYBo86cejmTsXmfoCHBgqVodPr4w==}
+    engines: {node: '>=22.12.0'}
+
+  '@tanstack/start-fn-stubs@1.162.0':
+    resolution: {integrity: sha512-QWfUZ3Yo923tdQn38LyKMU8rcTw69zc+T4dAvgTWV4O56SqFRsGfS0lSWIMhJRwXIx/bvdi7nTUBDdZtTHtpTQ==}
+    engines: {node: '>=22.12.0'}
+
+  '@tanstack/start-plugin-core@1.171.3':
+    resolution: {integrity: sha512-7RE1CByxF6fB6S4WwPK1FE/7T+hhZhqOWc83coQwuPCu1SlW2n+skZNWxJ85KVJgMoDX1G4vW3fvY3GRST4T3w==}
+    engines: {node: '>=22.12.0'}
+    peerDependencies:
+      '@rsbuild/core': ^2.0.0
+      vite: 7.3.5
+    peerDependenciesMeta:
+      '@rsbuild/core':
+        optional: true
+      vite:
+        optional: true
+
+  '@tanstack/start-server-core@1.169.2':
+    resolution: {integrity: sha512-MAAONdJfamDNFETs1E1ocNU73qVkcLBIeZHNnraZmVSYFxCXJ2eXkUZxCcc99dbHEnKZaxKMk3t2NXpiZ23lqg==}
+    engines: {node: '>=22.12.0'}
+
+  '@tanstack/start-storage-context@1.167.7':
+    resolution: {integrity: sha512-jmTe7mvU4by/nA1IAciJ6iqCh2s0rOIj7vNZ7db48aG9T99GiOkMmkmEquYzxecav/YMBifx6N0vmdNAkcKolg==}
+    engines: {node: '>=22.12.0'}
+
   '@tanstack/store@0.9.3':
     resolution: {integrity: sha512-8reSzl/qGWGGVKhBoxXPMWzATSbZLZFWhwBAFO9NAyp0TxzfBP0mIrGb8CP8KrQTmvzXlR/vFPPUrHTLBGyFyw==}
 
+  '@tanstack/table-core@8.21.3':
+    resolution: {integrity: sha512-ldZXEhOBb8Is7xLs01fR3YEc3DERiz5silj8tnGkFZytt1abEvl/GhUmCE0PMLaMPTa3Jk4HbKmRlHmu+gCftg==}
+    engines: {node: '>=12'}
+
   '@tanstack/virtual-file-routes@1.161.4':
     resolution: {integrity: sha512-42WoRePf8v690qG8yGRe/YOh+oHni9vUaUUfoqlS91U2scd3a5rkLtVsc6b7z60w3RogH0I00vdrC5AaeiZ18w==}
     engines: {node: '>=20.19'}
 
+  '@tanstack/virtual-file-routes@1.162.0':
+    resolution: {integrity: sha512-uhOeFyxLcU41HzvrxsGpiWdcMbScY1EDgbZ5K7DVRMYInbLYWAC0EA/kx9wXAoSM8q82bUG2hRl8+EAjE6XAbA==}
+    engines: {node: '>=20.19'}
+
+  '@tanstack/zod-adapter@1.167.0':
+    resolution: {integrity: sha512-5Wlm5teSu+pz3KKhfa1ESsiOJXbvV6ITr1vKOQKi9yEdtozp6VefEzxzafLLida97mnL2tmauva/njokQrG5CA==}
+    engines: {node: '>=20.19'}
+    peerDependencies:
+      '@tanstack/react-router': '>=1.43.2'
+      zod: ^3.23.8
+
   '@testing-library/dom@10.4.1':
     resolution: {integrity: sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==}
     engines: {node: '>=18'}
@@ -5352,7 +7502,7 @@ packages:
     engines: {node: '>=18'}
     peerDependencies:
       jest: '>=29.0.0'
-      react: 19.1.0
+      react: '>=18.2.0'
       react-native: '>=0.71'
       react-test-renderer: '>=18.2.0'
     peerDependenciesMeta:
@@ -5366,8 +7516,8 @@ packages:
       '@testing-library/dom': ^10.0.0
       '@types/react': ^18.0.0 || ^19.0.0
       '@types/react-dom': ^18.0.0 || ^19.0.0
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -5414,6 +7564,9 @@ packages:
     cpu: [arm64]
     os: [win32]
 
+  '@tweenjs/tween.js@23.1.3':
+    resolution: {integrity: sha512-vJmvvwFxYuGnF2axRtPYocag6Clbb5YS7kLL+SO/TeVFzHqDIWrNKYtcsPMibjDx9O+bu+psAy9NKfWklassUA==}
+
   '@tybys/wasm-util@0.10.1':
     resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==}
 
@@ -5423,6 +7576,9 @@ packages:
   '@types/aria-query@5.0.4':
     resolution: {integrity: sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==}
 
+  '@types/aws-lambda@8.10.162':
+    resolution: {integrity: sha512-Fn658grtLOci1oxi1391vvDWJRKNGWRSqfxRkmN/Iy3c0tQH1USMKEXcPYHLvope+ZgTFocx9FRQJx1muBL6qw==}
+
   '@types/babel__core@7.20.5':
     resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
 
@@ -5435,48 +7591,135 @@ packages:
   '@types/babel__traverse@7.28.0':
     resolution: {integrity: sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==}
 
+  '@types/bun@1.3.14':
+    resolution: {integrity: sha512-h1hFqFVcvAvD9j9K7ZW7vd82aSA+rTdznZa+5bwvCwqSB1jmmfLcbIWhOLx1/+boy/xmjgCs/OMUL8hRJSmnPw==}
+
   '@types/chai@5.2.3':
     resolution: {integrity: sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==}
 
+  '@types/cors@2.8.19':
+    resolution: {integrity: sha512-mFNylyeyqN93lfe/9CSxOGREz8cpzAhH+E93xJ4xWQf62V8sQ/24reV2nyzUWM6H6Xji+GGHpkbLe7pVoUEskg==}
+
   '@types/d3-array@3.2.2':
     resolution: {integrity: sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw==}
 
+  '@types/d3-axis@3.0.6':
+    resolution: {integrity: sha512-pYeijfZuBd87T0hGn0FO1vQ/cgLk6E1ALJjfkC0oJ8cbwkZl3TpgS8bVBLZN+2jjGgg38epgxb2zmoGtSfvgMw==}
+
+  '@types/d3-brush@3.0.6':
+    resolution: {integrity: sha512-nH60IZNNxEcrh6L1ZSMNA28rj27ut/2ZmI3r96Zd+1jrZD++zD3LsMIjWlvg4AYrHn/Pqz4CF3veCxGjtbqt7A==}
+
+  '@types/d3-chord@3.0.6':
+    resolution: {integrity: sha512-LFYWWd8nwfwEmTZG9PfQxd17HbNPksHBiJHaKuY1XeqscXacsS2tyoo6OdRsjf+NQYeB6XrNL3a25E3gH69lcg==}
+
   '@types/d3-color@3.1.3':
     resolution: {integrity: sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A==}
 
+  '@types/d3-contour@3.0.6':
+    resolution: {integrity: sha512-BjzLgXGnCWjUSYGfH1cpdo41/hgdWETu4YxpezoztawmqsvCeep+8QGfiY6YbDvfgHz/DkjeIkkZVJavB4a3rg==}
+
+  '@types/d3-delaunay@6.0.4':
+    resolution: {integrity: sha512-ZMaSKu4THYCU6sV64Lhg6qjf1orxBthaC161plr5KuPHo3CNm8DTHiLw/5Eq2b6TsNP0W0iJrUOFscY6Q450Hw==}
+
+  '@types/d3-dispatch@3.0.7':
+    resolution: {integrity: sha512-5o9OIAdKkhN1QItV2oqaE5KMIiXAvDWBDPrD85e58Qlz1c1kI/J0NcqbEG88CoTwJrYe7ntUCVfeUl2UJKbWgA==}
+
+  '@types/d3-drag@3.0.7':
+    resolution: {integrity: sha512-HE3jVKlzU9AaMazNufooRJ5ZpWmLIoc90A37WU2JMmeq28w1FQqCZswHZ3xR+SuxYftzHq6WU6KJHvqxKzTxxQ==}
+
+  '@types/d3-dsv@3.0.7':
+    resolution: {integrity: sha512-n6QBF9/+XASqcKK6waudgL0pf/S5XHPPI8APyMLLUHd8NqouBGLsU8MgtO7NINGtPBtk9Kko/W4ea0oAspwh9g==}
+
   '@types/d3-ease@3.0.2':
     resolution: {integrity: sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA==}
 
+  '@types/d3-fetch@3.0.7':
+    resolution: {integrity: sha512-fTAfNmxSb9SOWNB9IoG5c8Hg6R+AzUHDRlsXsDZsNp6sxAEOP0tkP3gKkNSO/qmHPoBFTxNrjDprVHDQDvo5aA==}
+
+  '@types/d3-force@3.0.10':
+    resolution: {integrity: sha512-ZYeSaCF3p73RdOKcjj+swRlZfnYpK1EbaDiYICEEp5Q6sUiqFaFQ9qgoshp5CzIyyb/yD09kD9o2zEltCexlgw==}
+
+  '@types/d3-format@3.0.4':
+    resolution: {integrity: sha512-fALi2aI6shfg7vM5KiR1wNJnZ7r6UuggVqtDA+xiEdPZQwy/trcQaHnwShLuLdta2rTymCNpxYTiMZX/e09F4g==}
+
+  '@types/d3-geo@3.1.0':
+    resolution: {integrity: sha512-856sckF0oP/diXtS4jNsiQw/UuK5fQG8l/a9VVLeSouf1/PPbBE1i1W852zVwKwYCBkFJJB7nCFTbk6UMEXBOQ==}
+
+  '@types/d3-hierarchy@3.1.7':
+    resolution: {integrity: sha512-tJFtNoYBtRtkNysX1Xq4sxtjK8YgoWUNpIiUee0/jHGRwqvzYxkq0hGVbbOGSz+JgFxxRu4K8nb3YpG3CMARtg==}
+
   '@types/d3-interpolate@3.0.4':
     resolution: {integrity: sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA==}
 
   '@types/d3-path@3.1.1':
     resolution: {integrity: sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg==}
 
+  '@types/d3-polygon@3.0.2':
+    resolution: {integrity: sha512-ZuWOtMaHCkN9xoeEMr1ubW2nGWsp4nIql+OPQRstu4ypeZ+zk3YKqQT0CXVe/PYqrKpZAi+J9mTs05TKwjXSRA==}
+
+  '@types/d3-quadtree@3.0.6':
+    resolution: {integrity: sha512-oUzyO1/Zm6rsxKRHA1vH0NEDG58HrT5icx/azi9MF1TWdtttWl0UIUsjEQBBh+SIkrpd21ZjEv7ptxWys1ncsg==}
+
+  '@types/d3-random@3.0.4':
+    resolution: {integrity: sha512-UHYId5WTCx4L4YNel7NU00XUXXgvgpgZOvp10PuvsQENjMDXhh2RyFc0KBjO7B45ne4Ha1yVH7ii0vnzKkuzWA==}
+
+  '@types/d3-scale-chromatic@3.1.0':
+    resolution: {integrity: sha512-iWMJgwkK7yTRmWqRB5plb1kadXyQ5Sj8V/zYlFGMUBbIPKQScw+Dku9cAAMgJG+z5GYDoMjWGLVOvjghDEFnKQ==}
+
   '@types/d3-scale@4.0.9':
     resolution: {integrity: sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw==}
 
+  '@types/d3-selection@3.0.11':
+    resolution: {integrity: sha512-bhAXu23DJWsrI45xafYpkQ4NtcKMwWnAC/vKrd2l+nxMFuvOT3XMYTIj2opv8vq8AO5Yh7Qac/nSeP/3zjTK0w==}
+
   '@types/d3-shape@3.1.8':
     resolution: {integrity: sha512-lae0iWfcDeR7qt7rA88BNiqdvPS5pFVPpo5OfjElwNaT2yyekbM0C9vK+yqBqEmHr6lDkRnYNoTBYlAgJa7a4w==}
 
+  '@types/d3-time-format@4.0.3':
+    resolution: {integrity: sha512-5xg9rC+wWL8kdDj153qZcsJ0FWiFt0J5RB6LYUNZjwSnesfblqrI/bJ1wBdJ8OQfncgbJG5+2F+qfqnqyzYxyg==}
+
   '@types/d3-time@3.0.4':
     resolution: {integrity: sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g==}
 
   '@types/d3-timer@3.0.2':
     resolution: {integrity: sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==}
 
+  '@types/d3-transition@3.0.9':
+    resolution: {integrity: sha512-uZS5shfxzO3rGlu0cC3bjmMFKsXv+SmZZcgp0KD22ts4uGXp5EVYGzu/0YdwZeKmddhcAccYtREJKkPfXkZuCg==}
+
+  '@types/d3-zoom@3.0.8':
+    resolution: {integrity: sha512-iqMC4/YlFCSlO8+2Ii1GGGliCAY4XdeG748w5vQUbevlbDu0zSjH/+jojorQVBK/se0j6DUFNPBGSqD3YWYnDw==}
+
+  '@types/d3@7.4.3':
+    resolution: {integrity: sha512-lZXZ9ckh5R8uiFVt8ogUNf+pIrK4EsWrx2Np75WvF/eTpJ0FMHNhjXk8CKEx/+gpHbNQyJWehbFaTvqmHWB3ww==}
+
   '@types/debug@4.1.12':
     resolution: {integrity: sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==}
 
   '@types/deep-eql@4.0.2':
     resolution: {integrity: sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==}
 
+  '@types/draco3d@1.4.10':
+    resolution: {integrity: sha512-AX22jp8Y7wwaBgAixaSvkoG4M/+PlAcm3Qs4OW8yT9DM4xUpWKeFhLueTAyZF39pviAdcDdeJoACapiAceqNcw==}
+
+  '@types/earcut@3.0.0':
+    resolution: {integrity: sha512-k/9fOUGO39yd2sCjrbAJvGDEQvRwRnQIZlBz43roGwUZo5SHAmyVvSFyaVVZkicRVCaDXPKlbxrUcBuJoSWunQ==}
+
+  '@types/estree-jsx@1.0.5':
+    resolution: {integrity: sha512-52CcUVNFyfb1A2ALocQw/Dd1BQFNmSdkuC3BkZ6iqhdMfQz7JWOFRuJFloOzjk+6WijU56m9oKXFAXc7o3Towg==}
+
   '@types/estree@1.0.8':
     resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==}
 
+  '@types/geojson@7946.0.16':
+    resolution: {integrity: sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg==}
+
   '@types/graceful-fs@4.1.9':
     resolution: {integrity: sha512-olP3sd1qOEe5dXTSaFvQG+02VdRXcdytWLAZsAq1PecU8uqQAhkrnbli7DagjtXKW/Bl7YJbUsa8MPcuc8LHEQ==}
 
+  '@types/hast@3.0.5':
+    resolution: {integrity: sha512-rp/ezSWaD1m44dPKICGhiskI13nVr7qTloFwDa/IYkhhf5nzwP+zIQcIJh3WIFSBOy/H1PzB40jPjMDksN4F+g==}
+
   '@types/istanbul-lib-coverage@2.0.6':
     resolution: {integrity: sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==}
 
@@ -5498,9 +7741,24 @@ packages:
   '@types/json5@0.0.29':
     resolution: {integrity: sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==}
 
+  '@types/jsonwebtoken@9.0.10':
+    resolution: {integrity: sha512-asx5hIG9Qmf/1oStypjanR7iKTv0gXQ1Ov/jfrX6kS/EO0OFni8orbmGCn0672NHR3kXHwpAwR+B368ZGN/2rA==}
+
+  '@types/jsrsasign@10.5.15':
+    resolution: {integrity: sha512-3stUTaSRtN09PPzVWR6aySD9gNnuymz+WviNHoTb85dKu+BjaV4uBbWWGykBBJkfwPtcNZVfTn2lbX00U+yhpQ==}
+
+  '@types/mdast@4.0.4':
+    resolution: {integrity: sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==}
+
+  '@types/mdx@2.0.14':
+    resolution: {integrity: sha512-T48PeuJtvLosNTPVhfnIp3i/n3a4g4Bad7YCq5k64D4u7NwDrAotikQ+5+sjtUvBmxCMlbo3dVL+C2dP0rWHzg==}
+
   '@types/ms@2.1.0':
     resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
 
+  '@types/node-fetch@2.6.13':
+    resolution: {integrity: sha512-QGpRVpzSaUs30JBSGPjOg4Uveu384erbHBoT1zeONvyCfwQxIkUshLAOqN/k9EjGviPRmWTTe6aH2qySWKTVSw==}
+
   '@types/node@20.19.43':
     resolution: {integrity: sha512-6oYBAi5ikg4Pl+kGsoYtawUMBT2zZMCvPNF7pVLnHZfd1zf38DRiWn/gT01RYCdUqkv7Fhr+C9ot4/tb+2sVvA==}
 
@@ -5510,8 +7768,14 @@ packages:
   '@types/node@24.10.4':
     resolution: {integrity: sha512-vnDVpYPMzs4wunl27jHrfmwojOGKya0xyM3sH+UE5iv5uPS6vX7UIoh6m+vQc5LGBq52HBKPIn/zcSZVzeDEZg==}
 
-  '@types/node@25.3.3':
-    resolution: {integrity: sha512-DpzbrH7wIcBaJibpKo9nnSQL0MTRdnWttGyE5haGwK86xgMOkFLp7vEyfQPGLOJh5wNYiJ3V9PmUMDhV9u8kkQ==}
+  '@types/nodemailer@8.0.1':
+    resolution: {integrity: sha512-PxpaInm8V1JQDd4j0ds5HfvWQk8JupS1C0Picb96QJsrrRDjBH+DlK7L4ZdNSqNULhiZRQHc40nLVShaGxXAMw==}
+
+  '@types/offscreencanvas@2019.7.3':
+    resolution: {integrity: sha512-ieXiYmgSRXUDeOntE1InxjWyvEelZGP63M+cGuquuRLuIKKT1osnkXjxev9B7d1nXSug5vpunx+gNlbVxMlC9A==}
+
+  '@types/pg@8.20.0':
+    resolution: {integrity: sha512-bEPFOaMAHTEP1EzpvHTbmwR8UsFyHSKsRisLIHVMXnpNefSbGA1bD6CVy+qKjGSqmZqNqBDV2azOBo8TgkcVow==}
 
   '@types/react-dom@19.1.9':
     resolution: {integrity: sha512-qXRuZaOsAdXKFyOhRBg6Lqqc0yay13vN7KrIg4L7N4aaHN68ma9OK3NE1BoDFgFOTfM7zg+3/8+2n8rLUH3OKQ==}
@@ -5523,15 +7787,38 @@ packages:
     peerDependencies:
       '@types/react': ^19.2.0
 
+  '@types/react-reconciler@0.28.9':
+    resolution: {integrity: sha512-HHM3nxyUZ3zAylX8ZEyrDNd2XZOnQ0D5XfunJF5FLQnZbHHYq4UWvW1QfelQNXv1ICNkwYhfxjwfnqivYB6bFg==}
+    peerDependencies:
+      '@types/react': '*'
+
   '@types/react@19.1.17':
     resolution: {integrity: sha512-Qec1E3mhALmaspIrhWt9jkQMNdw6bReVu64mjvhbhq2NFPftLPVr+l1SZgmw/66WwBNpDh7ao5AT6gF5v41PFA==}
 
   '@types/stack-utils@2.0.3':
     resolution: {integrity: sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==}
 
+  '@types/stats.js@0.17.4':
+    resolution: {integrity: sha512-jIBvWWShCvlBqBNIZt0KAshWpvSjhkwkEu4ZUcASoAvhmrgAUI2t1dXrjSL4xXVLB4FznPrIsX3nKXFl/Dt4vA==}
+
+  '@types/three@0.185.1':
+    resolution: {integrity: sha512-db1xTb+EgYF2didW+eudSvVPtn75zo+fGsY8ShQrJY/B5ZBmC2Fiaykv3aImHAlCNEGuMPkPGXBJGLwzu5mC7A==}
+
   '@types/tough-cookie@4.0.5':
     resolution: {integrity: sha512-/Ad8+nIOV7Rl++6f1BdKxFSMgmoqEoYbHRpPcx3JEfv8VRsQe9Z4mCXeJBzxs7mbHY/XOZZuXlRNfhpVPbs6ZA==}
 
+  '@types/trusted-types@2.0.7':
+    resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==}
+
+  '@types/unist@2.0.11':
+    resolution: {integrity: sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==}
+
+  '@types/unist@3.0.3':
+    resolution: {integrity: sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==}
+
+  '@types/webxr@0.5.24':
+    resolution: {integrity: sha512-h8fgEd/DpoS9CBrjEQXR+dIDraopAEfu4wYVNY2tEPwk60stPWhvZMf4Foo5FakuQ7HFZoa8WceaWFervK2Ovg==}
+
   '@types/ws@8.18.1':
     resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
 
@@ -5682,41 +7969,49 @@ packages:
     resolution: {integrity: sha512-34gw7PjDGB9JgePJEmhEqBhWvCiiWCuXsL9hYphDF7crW7UgI05gyBAi6MF58uGcMOiOqSJ2ybEeCvHcq0BCmQ==}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@unrs/resolver-binding-linux-arm64-musl@1.11.1':
     resolution: {integrity: sha512-RyMIx6Uf53hhOtJDIamSbTskA99sPHS96wxVE/bJtePJJtpdKGXO1wY90oRdXuYOGOTuqjT8ACccMc4K6QmT3w==}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@unrs/resolver-binding-linux-ppc64-gnu@1.11.1':
     resolution: {integrity: sha512-D8Vae74A4/a+mZH0FbOkFJL9DSK2R6TFPC9M+jCWYia/q2einCubX10pecpDiTmkJVUH+y8K3BZClycD8nCShA==}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@unrs/resolver-binding-linux-riscv64-gnu@1.11.1':
     resolution: {integrity: sha512-frxL4OrzOWVVsOc96+V3aqTIQl1O2TjgExV4EKgRY09AJ9leZpEg8Ak9phadbuX0BA4k8U5qtvMSQQGGmaJqcQ==}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@unrs/resolver-binding-linux-riscv64-musl@1.11.1':
     resolution: {integrity: sha512-mJ5vuDaIZ+l/acv01sHoXfpnyrNKOk/3aDoEdLO/Xtn9HuZlDD6jKxHlkN8ZhWyLJsRBxfv9GYM2utQ1SChKew==}
     cpu: [riscv64]
     os: [linux]
+    libc: [musl]
 
   '@unrs/resolver-binding-linux-s390x-gnu@1.11.1':
     resolution: {integrity: sha512-kELo8ebBVtb9sA7rMe1Cph4QHreByhaZ2QEADd9NzIQsYNQpt9UkM9iqr2lhGr5afh885d/cB5QeTXSbZHTYPg==}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@unrs/resolver-binding-linux-x64-gnu@1.11.1':
     resolution: {integrity: sha512-C3ZAHugKgovV5YvAMsxhq0gtXuwESUKc5MhEtjBpLoHPLYM+iuwSj3lflFwK3DPm68660rZ7G8BMcwSro7hD5w==}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@unrs/resolver-binding-linux-x64-musl@1.11.1':
     resolution: {integrity: sha512-rV0YSoyhK2nZ4vEswT/QwqzqQXw5I6CjoaYMOX0TqBlWhojUf8P94mvI7nuJTeaCkkds3QE4+zS8Ko+GdXuZtA==}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@unrs/resolver-binding-wasm32-wasi@1.11.1':
     resolution: {integrity: sha512-5u4RkfxJm+Ng7IWgkzi3qrFOvLvQYnPBmjmZQ8+szTK/b31fQCnleNl1GgEt7nIsZRIf5PLhPwT0WM+q45x/UQ==}
@@ -5738,6 +8033,9 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@upsetjs/venn.js@2.0.0':
+    resolution: {integrity: sha512-WbBhLrooyePuQ1VZxrJjtLvTc4NVfpOyKx0sKqioq9bX1C1m7Jgykkn8gLrtwumBioXIqam8DLxp88Adbue6Hw==}
+
   '@urql/core@5.2.0':
     resolution: {integrity: sha512-/n0ieD0mvvDnVAXEQgX/7qJiVcvYvNkOHeBvkwtylfjydar123caCXcl58PXFY11oU1oquJocVXHxLAbtv4x1A==}
 
@@ -5746,6 +8044,18 @@ packages:
     peerDependencies:
       '@urql/core': ^5.0.0
 
+  '@use-gesture/core@10.3.1':
+    resolution: {integrity: sha512-WcINiDt8WjqBdUXye25anHiNxPc0VOrlT8F6LLkU6cycrOGUDyY/yyFmsg3k8i5OLvv25llc0QC45GhR/C8llw==}
+
+  '@use-gesture/react@10.3.1':
+    resolution: {integrity: sha512-Yy19y6O2GJq8f7CHf7L0nxL8bf4PZCPaVOCgJrusOeFHY1LvHgYXnmnXg6N5iwAnbgbZCDjo60SiM6IPJi9C5g==}
+    peerDependencies:
+      react: '>= 16.8.0'
+
+  '@vercel/oidc@3.2.0':
+    resolution: {integrity: sha512-UycprH3T6n3jH0k44NHMa7pnFHGu/N05MjojYr+Mc6I7obkoLIJujSWwin1pCvdy/eOxrI/l3uDLQsmcrOb4ug==}
+    engines: {node: '>= 20'}
+
   '@vitejs/plugin-react@4.7.0':
     resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==}
     engines: {node: ^14.18.0 || >=16.0.0}
@@ -5761,9 +8071,6 @@ packages:
   '@vitest/expect@3.2.7':
     resolution: {integrity: sha512-E8eBXaKibuvH2pSZErOjdVb5vF4PbKYcrnluBTYxEk1l/VhhwZg1kZQsdtjq+CsF5CFydf2Rdkz7jDHKSisi3w==}
 
-  '@vitest/expect@4.1.6':
-    resolution: {integrity: sha512-7EHDquPthALSV0jhhjgEW8FXaviMx7rSqu8W6oqCoAuOhKov814P99QDV1pxMA3QPv21YudvJngIhjrNI4opLg==}
-
   '@vitest/mocker@3.2.7':
     resolution: {integrity: sha512-Trr0hYO9CM3Wj6ksWHRhK9IZpIY6wTMO5u/MqXurMxT57sWBaOPEtP3Oq60ihZuh5JsiagKfz95OcxdEP6dBrA==}
     peerDependencies:
@@ -5775,46 +8082,31 @@ packages:
       vite:
         optional: true
 
-  '@vitest/mocker@4.1.6':
-    resolution: {integrity: sha512-MCFc63czMjEInOlcY2cpQCvCN+KgbAn+60xu9cMgP4sKaLC5JNAKw7JH8QdAnoAC88hW1IiSNZ+GgVXlN1UcMQ==}
-    peerDependencies:
-      msw: ^2.4.9
-      vite: 7.3.5
-    peerDependenciesMeta:
-      msw:
-        optional: true
-      vite:
-        optional: true
-
   '@vitest/pretty-format@3.2.7':
     resolution: {integrity: sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==}
 
-  '@vitest/pretty-format@4.1.6':
-    resolution: {integrity: sha512-h5SxD/IzNhZYnrSZRsUZQIC+vD0GY8cUvq0iwsmkFKixRCKLLWqCXa/FIQ4S1R+sI+PGoojkHsdNrbZiM9Qpgw==}
+  '@vitest/pretty-format@4.1.0':
+    resolution: {integrity: sha512-3RZLZlh88Ib0J7NQTRATfc/3ZPOnSUn2uDBUoGNn5T36+bALixmzphN26OUD3LRXWkJu4H0s5vvUeqBiw+kS0A==}
 
   '@vitest/runner@3.2.7':
     resolution: {integrity: sha512-sB9y4ovltoQP+WaUPwmSxO9WIg9Ig694Di5PalVPsYHklAdE027mehpWF2SQSVq+k6sFgaivbTjTJwZLSHbedA==}
 
-  '@vitest/runner@4.1.6':
-    resolution: {integrity: sha512-nOPCmn2+yD0ZNmKdsXGv/UxMMWbMuKeD6GyYncNwdkYDxpQvrPSKYj2rWuDjC2Y4b6w6hjip5dBKFzEUuZe3vA==}
-
   '@vitest/snapshot@3.2.7':
     resolution: {integrity: sha512-7C+MwShwtBSI5Buwoyg3s/iY1eHL9PKAf+O1wVh/TdnjXUtkoL/9YQtre90i4MtNXM6edP1wJ2zOBpfCyhIS7g==}
 
-  '@vitest/snapshot@4.1.6':
-    resolution: {integrity: sha512-YhsdE6xAVfTDmzjxL2ZDUvjj+ZsgyOKe+TdQzqkD72wIOmHka8NuGQ6NpTNZv9D2Z63fbwWKJPeVpEw4EQgYxw==}
-
   '@vitest/spy@3.2.7':
     resolution: {integrity: sha512-Q2eQGI6d2L/hBtZ0qNuKcAGid68XK6cv1xsoaIma6PaJhHPoqcEJhYpXZ/5myCMqkNgtP6UKuBhbc0nHKnrkuQ==}
 
-  '@vitest/spy@4.1.6':
-    resolution: {integrity: sha512-JFKxMx6udhwKh/Ldo270e17QX710vgunMkuPAvXjHSvC6oqLWAHhVhjg/I71q0u0CBSErIODV1Kjv0FQNSWjdg==}
+  '@vitest/ui@4.1.0':
+    resolution: {integrity: sha512-sTSDtVM1GOevRGsCNhp1mBUHKo9Qlc55+HCreFT4fe99AHxl1QQNXSL3uj4Pkjh5yEuWZIx8E2tVC94nnBZECQ==}
+    peerDependencies:
+      vitest: 4.1.0
 
   '@vitest/utils@3.2.7':
     resolution: {integrity: sha512-x6BDOd7dyo3PFLY3I9/HJ25X/6OurhGXk2/B9gOZNPF7XDVjeBK4k01lQE5uvDpbuheErh91qYuE1E2OEjK3Rw==}
 
-  '@vitest/utils@4.1.6':
-    resolution: {integrity: sha512-FxIY+U81R3LGKCxaHHFRQ5+g6/iRgGLmeHWdp2Amj4ljQRrEIWHmZyDfDYBRZlpyqA7qKxtS9DD1dhk8RnRIVQ==}
+  '@vitest/utils@4.1.0':
+    resolution: {integrity: sha512-XfPXT6a8TZY3dcGY8EdwsBulFCIw+BeeX0RZn2x/BtiY/75YGh8FeWGG8QISN/WhaqSrE2OrlDgtF8q5uhOTmw==}
 
   '@voidzero-dev/vite-plus-core@0.1.23':
     resolution: {integrity: sha512-Twi+95cq1pObzkNR4u6lP7z4gPhtS0/vxeBAdbTvAeA12qlyyFED7mQZnAgaVIN3k1C1ve0997F3/ncUBAwQ8w==}
@@ -5896,24 +8188,28 @@ packages:
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@voidzero-dev/vite-plus-linux-arm64-musl@0.1.23':
     resolution: {integrity: sha512-mvB3XYltfUn55WdgRYZHDY+bgeOwrwsMhdftXDC8T7tIUglIxcuo3+xMOZOrbFFjJXNPelUjvU1R9ItAR8rY1w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@voidzero-dev/vite-plus-linux-x64-gnu@0.1.23':
     resolution: {integrity: sha512-Hf7phM8L2wUdLloQHbylRzmJEv9PIUCC5Yvdo1UycWyiEl99CUgAlrSmZyfkKxPh+MSFaa+xNwfXdf9zwXM8mg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
     resolution: {integrity: sha512-YJ+OT7tddkUshfojk1jIyJcQHA3h5cMKSpCVVJcJwTCZNb9z9zRcjZCxGbwwTOqrV4PzP8TVy50aEEl0jP1lTg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@voidzero-dev/vite-plus-test@0.1.23':
     resolution: {integrity: sha512-50NmnIMHsES5f+4iScEwqAR6LlsE1oP7n1HBxaYVX839tjMWCYHRUiBlBZFU+OoWwuFNq0I1ap0j0vamvJsYGg==}
@@ -5958,6 +8254,35 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@webgpu/types@0.1.71':
+    resolution: {integrity: sha512-mMy8/ODcKhab808co15eW+yN+HgXoQxRQHTiBV9Mrvl1r0ufnid7YOcI+gi4eUWSWl9ezD6TW2KXccrL8HCh2A==}
+
+  '@workflow/serde@4.1.0':
+    resolution: {integrity: sha512-pav4F2BoirECWR7Nf1TKt+2eETcBj7jj4cBefQ8VXQCA6NPkaKeLfj/zMgi+3zYV5ZIBT4GuUiphsj0/b9hPQQ==}
+
+  '@workos-inc/node@8.13.0':
+    resolution: {integrity: sha512-NgQKHpwh8AbT4KvAsW91Y+4f4jja2IvFPQ5atcy5NUxUMVRgXzRFEee3erawfXrTmiCVqJjd9PljHySKBXmHKQ==}
+    engines: {node: '>=20.15.0'}
+
+  '@workos-inc/node@9.2.0':
+    resolution: {integrity: sha512-JAEjrwgr8aETOS7YzHmSlPj+1LCXonAKGX1/B89hIZ+l+YgQGJrdFZnBqBSlDnqUaOtxDZkGwg7V3LFNkF+evg==}
+    engines: {node: '>=22.11.0'}
+
+  '@workos/authkit-session@0.5.2':
+    resolution: {integrity: sha512-1Gf04z6IzxKkq+wLaSF85LMgguoXNz3wR6RwPxO431WkUl7eIXECI2ovhzBsaCSSIpSMJaDL6QtjKd+9PClO6g==}
+    engines: {node: '>=20.0.0'}
+    peerDependencies:
+      '@workos-inc/node': ^8.0.0 || ^9.0.0
+
+  '@workos/authkit-tanstack-react-start@0.8.2':
+    resolution: {integrity: sha512-WXow2hqmfeHPbEUvXT1LDe+LDqX+fiAtHcpMujhGoXR/TK7FhnPvPUcEMkihfknCJKBxnyOi4zkk1xtgkqRFUA==}
+    engines: {node: '>=20.0.0'}
+    peerDependencies:
+      '@tanstack/react-router': '>=1.0.0'
+      '@tanstack/react-start': 1.167.30
+      react: ^18.0 || ^19.0
+      react-dom: ^18.0 || ^19.0
+
   '@xmldom/xmldom@0.8.13':
     resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
     engines: {node: '>=10.0.0'}
@@ -6004,12 +8329,46 @@ packages:
     resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==}
     engines: {node: '>= 14'}
 
+  ai@7.0.22:
+    resolution: {integrity: sha512-iAXYwQtR18qN7GXwNmGVAQM4uSJOh2+nZ5RP9NtDXfH5d4tlYyYzAM133O3U+eVcyWrvNRzecN9yW58xpCdfMg==}
+    engines: {node: '>=22'}
+    peerDependencies:
+      zod: ^3.25.76 || ^4.1.8
+
   ajv@6.12.6:
     resolution: {integrity: sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==}
 
   ajv@8.18.0:
     resolution: {integrity: sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==}
 
+  alchemy@2.0.0-beta.57:
+    resolution: {integrity: sha512-qg2xbFLW0yDWpp+XOpsJXkwUOubnCktdTdc7xdDTAmZgPHBg7SSG6+e5groZxhBS1asIaLr4XV+xvm3m6Dwj0w==}
+    hasBin: true
+    peerDependencies:
+      '@effect/platform-bun': '>=4.0.0-beta.84|| >=4.0.0'
+      '@effect/platform-node': '>=4.0.0-beta.84|| >=4.0.0'
+      '@effect/sql-pg': '>=4.0.0-beta.84|| >=4.0.0'
+      drizzle-kit: '>=1.0.0-rc.1'
+      drizzle-orm: '>=1.0.0-rc.1'
+      effect: 4.0.0-beta.84
+      vite: ^8.0.7
+      ws: 8.21.0
+    peerDependenciesMeta:
+      '@effect/platform-bun':
+        optional: true
+      '@effect/platform-node':
+        optional: true
+      '@effect/sql-pg':
+        optional: true
+      drizzle-kit:
+        optional: true
+      drizzle-orm:
+        optional: true
+      vite:
+        optional: true
+      ws:
+        optional: true
+
   anser@1.4.10:
     resolution: {integrity: sha512-hCv9AqTQ8ycjpSd3upOJd7vFwW1JaoYQ7tpham03GJ1ca8/65rqn0RpaWpItOAd6ylW9wAw6luXYPJIyPFVOww==}
 
@@ -6021,6 +8380,10 @@ packages:
     resolution: {integrity: sha512-4nJ3yixlEthEJ9Rk4vPcdBRkZvQZlYyu8j4/Mqz5sgIkddmEnH2Yj2ZrnP9S3tQOvSNRUIgVNF/1yPpRAGNRig==}
     engines: {node: '>=14.16'}
 
+  ansi-escapes@7.3.0:
+    resolution: {integrity: sha512-BvU8nYgGQBxcmMuEeUEmNTvrMVjJNSH7RgW24vXexN4Ven6qCvy4TntnvlnwnMLTVlcRQQdbRY8NKnaIoeWDNg==}
+    engines: {node: '>=18'}
+
   ansi-regex@4.1.1:
     resolution: {integrity: sha512-ILlv4k/3f6vfQ4OoP2AGvirOktlQ98ZEL1k9FaQjxa3L1abBgbuTDAdPOpvbGncC0BTVQrl+OM8xZGK6tWXt7g==}
     engines: {node: '>=6'}
@@ -6045,6 +8408,10 @@ packages:
     resolution: {integrity: sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==}
     engines: {node: '>=10'}
 
+  ansi-styles@6.2.3:
+    resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
+    engines: {node: '>=12'}
+
   ansis@4.2.0:
     resolution: {integrity: sha512-HqZ5rWlFjGiV0tDm3UxxgNRqsOTniqoKZu0pIAfh7TZQMGuZK+hH0drySty0si0QXj1ieop4+SkSfPZBPPkHig==}
     engines: {node: '>=14'}
@@ -6056,6 +8423,9 @@ packages:
     resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==}
     engines: {node: '>= 8'}
 
+  anynum@1.0.1:
+    resolution: {integrity: sha512-N6//FLET/tXYNM/F6ABca1oH6fWB+KlTt909Le28WMDBk8oaT4vY17DCrwg2MvmuqUKt3Ni4N5dGJ/EoBgcO6A==}
+
   arg@5.0.2:
     resolution: {integrity: sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==}
 
@@ -6126,6 +8496,10 @@ packages:
     resolution: {integrity: sha512-6t10qk83GOG8p0vKmaCr8eiilZwO171AvbROMtvvNiwrTly62t+7XkA8RdIIVbpMhCASAsxgAzdRSwh6nw/5Dg==}
     engines: {node: '>=4'}
 
+  astring@1.9.0:
+    resolution: {integrity: sha512-LElXdjswlqjWrPpJFg1Fx4wpkOCxj1TDHlSV4PlaRxHGWko024xICaa97ZkMfs6DRKlCguiAI+rbXv5GWwXIkg==}
+    hasBin: true
+
   async-function@1.0.0:
     resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
     engines: {node: '>= 0.4'}
@@ -6136,6 +8510,14 @@ packages:
   asynckit@0.4.0:
     resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
 
+  atomic-sleep@1.0.0:
+    resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
+    engines: {node: '>=8.0.0'}
+
+  auto-bind@5.0.1:
+    resolution: {integrity: sha512-ooviqdwwgfIfNmDwo94wlshcdzfO64XV0Cg6oDsDYBJfITDz1EngD2z7DkbvCWn+XIMsIqW27sEVF6qcpJrRcg==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   available-typed-arrays@1.0.7:
     resolution: {integrity: sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==}
     engines: {node: '>= 0.4'}
@@ -6144,6 +8526,9 @@ packages:
     resolution: {integrity: sha512-NZKeq9AfyQvEeNlN0zSYAaWrmBffJh3IELMZfRpJVWgrpEbtEpnjvzqBPf+mxoI287JohRDoa+/nsfqqiZmF6g==}
     engines: {node: '>= 6.0.0'}
 
+  aws4fetch@1.0.20:
+    resolution: {integrity: sha512-/djoAN709iY65ETD6LKCtyyEI04XIBP5xVvfmNxsEP0uJB5tyaGBztSryRr4HqMStr9R06PisQE7m9zDTXKu6g==}
+
   babel-dead-code-elimination@1.0.12:
     resolution: {integrity: sha512-GERT7L2TiYcYDtYk1IpD+ASAYXjKbLTDPhBtYj7X1NuRMDTMtAx9kyBenub1Ev41lo91OHCKdmP+egTDmfQ7Ig==}
 
@@ -6182,6 +8567,9 @@ packages:
   babel-plugin-react-compiler@1.0.0:
     resolution: {integrity: sha512-Ixm8tFfoKKIPYdCCKYTsqv+Fd4IJ0DQqMyEimo+pxUOMUR9cVPlwTrFt9Avu+3cb6Zp3mAzl+t1MrG2fxxKsxw==}
 
+  babel-plugin-react-compiler@19.1.0-rc.2:
+    resolution: {integrity: sha512-kSNA//p5fMO6ypG8EkEVPIqAjwIXm5tMjfD1XRPL/sRjYSbJ6UsvORfaeolNWnZ9n310aM0xJP7peW26BuCVzA==}
+
   babel-plugin-react-native-web@0.21.2:
     resolution: {integrity: sha512-SPD0J6qjJn8231i0HZhlAGH6NORe+QvRSQM2mwQEzJ2Fb3E4ruWTiiicPlHjmeWShDXLcvoorOCXjeR7k/lyWA==}
 
@@ -6214,6 +8602,9 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
+  bail@2.0.2:
+    resolution: {integrity: sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==}
+
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
 
@@ -6224,10 +8615,21 @@ packages:
   base64-js@1.5.1:
     resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
 
+  base64id@2.0.0:
+    resolution: {integrity: sha512-lGe34o6EHj9y3Kts9R4ZYs/Gr+6N7MCaMlIFA3F1R2O5/m7K06AxfSeO5530PEERE6/WyEg3lsuyw4GHlPZHog==}
+    engines: {node: ^4.5.0 || >= 5.9}
+
+  base64url@3.0.1:
+    resolution: {integrity: sha512-ir1UPr3dkwexU7FdV8qBBbNDRUhMmIekYMFZfi+C/sLNnRESKPl23nB9b2pltqfOQNnGzsDdId90AEtG5tCx4A==}
+    engines: {node: '>=6.0.0'}
+
   baseline-browser-mapping@2.9.11:
     resolution: {integrity: sha512-Sg0xJUNDU1sJNGdfGWhVHX0kkZ+HWcvmVymJbj6NSgZZmW/8S9Y2HQ5euytnIgakgxN6papOAWiwDo1ctFDcoQ==}
     hasBin: true
 
+  before-after-hook@4.0.0:
+    resolution: {integrity: sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==}
+
   better-auth@1.6.23:
     resolution: {integrity: sha512-4vOaRd9UiKGKm9R+ej0jjU1es3MiJIiNc9Qq3VCnYqOZ4/nb5272QqTxWYoDxyUXl5x6A2x2we5KZKQO9teTQQ==}
     peerDependencies:
@@ -6244,8 +8646,8 @@ packages:
       next: 16.2.6
       pg: ^8.0.0
       prisma: ^5.0.0 || ^6.0.0 || ^7.0.0
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
       solid-js: ^1.0.0
       svelte: ^4.0.0 || ^5.0.0
       vitest: 3.2.7
@@ -6302,10 +8704,16 @@ packages:
     resolution: {integrity: sha512-aVNobHnJqLiUelTaHat9DZ1qM2w0C0Eym4LPI/3JxOnSokGVdsl1T1kN7TFvsEAD8G47A6VKQ0TVHqbBnYMJlQ==}
     engines: {node: '>=12.0.0'}
 
+  bidi-js@1.0.3:
+    resolution: {integrity: sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==}
+
   big-integer@1.6.52:
     resolution: {integrity: sha512-QxD8cf2eVqJOOz63z6JIN9BzvVs/dlySa5HGSBH5xtR8dPteIRQnBxxKqkNTiT6jbDTF6jAfrd4oMcND9RGbQg==}
     engines: {node: '>=0.6'}
 
+  bignumber.js@9.3.1:
+    resolution: {integrity: sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==}
+
   binary-extensions@2.3.0:
     resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==}
     engines: {node: '>=8'}
@@ -6313,9 +8721,15 @@ packages:
   birpc@4.0.0:
     resolution: {integrity: sha512-LShSxJP0KTmd101b6DRyGBj57LZxSDYWKitQNW/mi8GRMvZb078Uf9+pveax1DrVL89vm7mWe+TovdI/UDOuPw==}
 
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
   boolbase@1.0.0:
     resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
 
+  bowser@2.14.1:
+    resolution: {integrity: sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==}
+
   bplist-creator@0.1.0:
     resolution: {integrity: sha512-sXaHZicyEEmY86WyueLTQesbeoH/mquvarJaQNbjuOQO+7gbFcDEWqKmcWA4cOTLzFlfgvkiVxolk1k5bBIpmg==}
 
@@ -6350,23 +8764,36 @@ packages:
   bser@2.1.1:
     resolution: {integrity: sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==}
 
+  buffer-equal-constant-time@1.0.1:
+    resolution: {integrity: sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==}
+
   buffer-from@1.1.2:
     resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
 
   buffer@5.7.1:
     resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
 
+  buffer@6.0.3:
+    resolution: {integrity: sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==}
+
   bumpp@10.3.2:
     resolution: {integrity: sha512-yUUkVx5zpTywLNX97MlrqtpanI7eMMwFwLntWR2EBVDw3/Pm3aRIzCoDEGHATLIiHK9PuJC7xWI4XNWqXItSPg==}
     engines: {node: '>=18'}
     hasBin: true
 
+  bun-types@1.3.14:
+    resolution: {integrity: sha512-4N0ig0fEomHt5R0KCFWjovxow98rIoRwKolrYdCcknNwMekCXRnWEUvgu5soYV8QXtVsrUD8B95MBOZGPvr6KQ==}
+
   bundle-require@5.1.0:
     resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     peerDependencies:
       esbuild: '>=0.18'
 
+  busboy@1.6.0:
+    resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==}
+    engines: {node: '>=10.16.0'}
+
   bytes@3.1.2:
     resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
     engines: {node: '>= 0.8'}
@@ -6407,17 +8834,25 @@ packages:
     resolution: {integrity: sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==}
     engines: {node: '>=10'}
 
+  camera-controls@3.1.2:
+    resolution: {integrity: sha512-xkxfpG2ECZ6Ww5/9+kf4mfg1VEYAoe9aDSY+IwF0UEs7qEzwy0aVRfs2grImIECs/PoBtWFrh7RXsQkwG922JA==}
+    engines: {node: '>=22.0.0', npm: '>=10.5.1'}
+    peerDependencies:
+      three: '>=0.126.1'
+
   caniuse-lite@1.0.30001761:
     resolution: {integrity: sha512-JF9ptu1vP2coz98+5051jZ4PwQgd2ni8A+gYSN7EA7dPKIMf0pDlSUxhdmVOaV3/fYK5uWBkgSXJaRLr4+3A6g==}
 
+  capnweb@0.6.1:
+    resolution: {integrity: sha512-fmhV26QPd1ewf5R74h55oVZnGwIcSaRMzbfLQUy8+zOBjuTmT3KXoT8wxHvnp1m9Ht9BoUUS5ZwNLoVLfQTyBg==}
+
+  ccount@2.0.1:
+    resolution: {integrity: sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==}
+
   chai@5.3.3:
     resolution: {integrity: sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==}
     engines: {node: '>=18'}
 
-  chai@6.2.2:
-    resolution: {integrity: sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==}
-    engines: {node: '>=18'}
-
   chalk@2.4.2:
     resolution: {integrity: sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==}
     engines: {node: '>=4'}
@@ -6442,10 +8877,29 @@ packages:
     resolution: {integrity: sha512-cbGOjAptfM2LVmWhwRFHEKTPkLwNddVmuqYZQt895yXwAsWsXObCG+YN4DGQ/JBtT4GP1a1lPPdio2z413LmTg==}
     engines: {node: '>=12.20'}
 
+  character-entities-html4@2.1.0:
+    resolution: {integrity: sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==}
+
+  character-entities-legacy@3.0.0:
+    resolution: {integrity: sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==}
+
+  character-entities@2.0.2:
+    resolution: {integrity: sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==}
+
+  character-reference-invalid@2.0.1:
+    resolution: {integrity: sha512-iBZ4F4wRbyORVsu0jPV7gXkOsGYjGHPmAyv+HiHG8gi5PtC9KI2j1+v8/tlibRvjoWX027ypmG/n0HtO5t7unw==}
+
   check-error@2.1.1:
     resolution: {integrity: sha512-OAlb+T7V4Op9OwdkjmguYRqncdlx5JiofwOAUkmTF+jNdHwzTaTs4sRAGpzLF3oOz5xAyDGrPgeIDFQmDOTiJw==}
     engines: {node: '>= 16'}
 
+  cheerio-select@2.1.0:
+    resolution: {integrity: sha512-9v9kG0LvzrlcungtnJtpGNxY+fzECQKhK4EGJX2vByejiMX84MFNQw4UxPJl3bFbTMw+Dfs37XaIkCwTZfLh4g==}
+
+  cheerio@1.2.0:
+    resolution: {integrity: sha512-WDrybc/gKFpTYQutKIK6UvfcuxijIZfMfXaYm8NMsPQxSYvf+13fXUJ4rztGGbJcBQ/GF55gvrZ0Bc0bj/mqvg==}
+    engines: {node: '>=20.18.1'}
+
   chokidar@3.6.0:
     resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==}
     engines: {node: '>= 8.10.0'}
@@ -6486,14 +8940,30 @@ packages:
   class-variance-authority@0.7.1:
     resolution: {integrity: sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg==}
 
+  cli-boxes@3.0.0:
+    resolution: {integrity: sha512-/lzGpEWL/8PfI0BmBOPRwp0c/wFNX1RdUML3jK/RcSBA9T8mZDdQpqYBKtCFTOfQbwPqWEOpjqW+Fnayc0969g==}
+    engines: {node: '>=10'}
+
   cli-cursor@2.1.0:
     resolution: {integrity: sha512-8lgKz8LmCRYZZQDpRyT2m5rKJ08TnU4tR9FFFW2rxpxR1FzWi4PQ/NfyODchAatHaUgnSPVcx/R5w6NuTBzFiw==}
     engines: {node: '>=4'}
 
+  cli-cursor@3.1.0:
+    resolution: {integrity: sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==}
+    engines: {node: '>=8'}
+
+  cli-cursor@4.0.0:
+    resolution: {integrity: sha512-VGtlMu3x/4DOtIUwEkRezxUZ2lBacNJCHash0N0WeZDBS+7Ux1dm3XWAgWYxLJFMMdOeXMHXorshEFhbMSGelg==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   cli-spinners@2.9.2:
     resolution: {integrity: sha512-ywqV+5MmyL4E7ybXgKys4DugZbX0FC6LnwrhjuykIjnK9k8OQacQ7axGKnjDXWNhns0xot3bZI5h55H8yo9cJg==}
     engines: {node: '>=6'}
 
+  cli-truncate@5.2.0:
+    resolution: {integrity: sha512-xRwvIOMGrfOAnM1JYtqQImuaNtDEv9v6oIYAs4LIHwTiKee8uwvIi363igssOC0O5U04i4AlENs79LQLu9tEMw==}
+    engines: {node: '>=20'}
+
   client-only@0.0.1:
     resolution: {integrity: sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==}
 
@@ -6516,8 +8986,8 @@ packages:
   cmdk@1.1.1:
     resolution: {integrity: sha512-Vsv7kFaXm+ptHDMZ7izaRsP70GgrW9NBNGswt9OZaVBLlE0SNpDq8eu/VGXyF9r7M0azK3Wy7OlYXsuyYLFzHg==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^18 || ^19 || ^19.0.0-rc
+      react-dom: ^18 || ^19 || ^19.0.0-rc
 
   co@4.6.0:
     resolution: {integrity: sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==}
@@ -6526,6 +8996,13 @@ packages:
   code-block-writer@13.0.3:
     resolution: {integrity: sha512-Oofo0pq3IKnsFtuHqSF7TqBfr71aeyZDVJ0HpmqB7FBM2qEigL0iPONSCZSO9pE9dZTAxANe5XHG9Uy0YMv8cg==}
 
+  code-excerpt@4.0.0:
+    resolution: {integrity: sha512-xxodCmBen3iy2i0WtAK8FlFNrRzjUqjRsMfho58xT/wvZU1YTM3fCnRjcy1gJPMepaRlgm/0e6w8SpWHpn3/cA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  collapse-white-space@2.1.0:
+    resolution: {integrity: sha512-loKTxY1zCOuG4j9f6EPnuyyYkf58RnhhWTvRoZEokgB+WbdXehfjFviyOVYkqzEWz1Q5kRiZdBYS5SwxbQYwzw==}
+
   collect-v8-coverage@1.0.3:
     resolution: {integrity: sha512-1L5aqIkwPfiodaMgQunkF1zRhNqifHBmtbbbxcr6yVxxBnliw4TDOW6NxpO8DJLgJ16OT+Y4ztZqP6p/FtXnAw==}
 
@@ -6556,6 +9033,13 @@ packages:
     resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==}
     engines: {node: '>= 0.8'}
 
+  comma-separated-tokens@2.0.3:
+    resolution: {integrity: sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==}
+
+  commander@11.1.0:
+    resolution: {integrity: sha512-yPVavfyCcRhmorC7rWlkHn15b4wDVgVmBA7kV4QVBsF7kv/9TKJAbAXVTxvTnwP8HHKjRCJDClKbciiYS7p0DQ==}
+    engines: {node: '>=16'}
+
   commander@12.1.0:
     resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==}
     engines: {node: '>=18'}
@@ -6579,6 +9063,10 @@ packages:
     resolution: {integrity: sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw==}
     engines: {node: '>= 10'}
 
+  commander@8.3.0:
+    resolution: {integrity: sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==}
+    engines: {node: '>= 12'}
+
   compressible@2.0.18:
     resolution: {integrity: sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==}
     engines: {node: '>= 0.6'}
@@ -6587,6 +9075,9 @@ packages:
     resolution: {integrity: sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==}
     engines: {node: '>= 0.8.0'}
 
+  compute-scroll-into-view@3.1.1:
+    resolution: {integrity: sha512-VRhuHOLoKYOy4UbilLbUzbYg93XLjv2PncJC50EuTWPA3gaja1UjBsUP/D/9/juV3vQFr6XBEzn9KCAHdUvOHw==}
+
   concat-map@0.0.1:
     resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
 
@@ -6604,18 +9095,43 @@ packages:
     resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
     engines: {node: ^14.18.0 || >=16.10.0}
 
+  content-type@2.0.0:
+    resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==}
+    engines: {node: '>=18'}
+
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
+  convert-to-spaces@2.0.1:
+    resolution: {integrity: sha512-rcQ1bsQO9799wq24uE5AM2tAILy4gXGIK/njFWcVQkGNZ96edlpY+A7bjwvzjYvLDyzmG1MmMLZhpcsb+klNMQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   cookie-es@2.0.1:
     resolution: {integrity: sha512-aVf4A4hI2w70LnF7GG+7xDQUkliwiXWXFvTjkip4+b64ygDQ2sJPRSKFDHbxn8o0xu9QzPkMuuiWIXyFSE2slA==}
 
   cookie-es@3.1.1:
     resolution: {integrity: sha512-UaXxwISYJPTr9hwQxMFYZ7kNhSXboMXP+Z3TRX6f1/NyaGPfuNUZOWP1pUEb75B2HjfklIYLVRfWiFZJyC6Npg==}
 
+  cookie@0.7.2:
+    resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
+    engines: {node: '>= 0.6'}
+
   core-js-compat@3.47.0:
     resolution: {integrity: sha512-IGfuznZ/n7Kp9+nypamBhvwdwLsW6KC8IOaURw2doAK5e98AG3acVLdh0woOnEqCfUtS+Vu882JE4k/DAm3ItQ==}
 
+  core-util-is@1.0.3:
+    resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
+
+  cors@2.8.6:
+    resolution: {integrity: sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==}
+    engines: {node: '>= 0.10'}
+
+  cose-base@1.0.3:
+    resolution: {integrity: sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg==}
+
+  cose-base@2.2.0:
+    resolution: {integrity: sha512-AzlgcsCbUMymkADOJtQm3wO9S3ltPfYOFD5033keQn9NJzIbtnZj+UdBJe7DYml/8TdbtHJW3j58SOnKhWY/5g==}
+
   create-jest@29.7.0:
     resolution: {integrity: sha512-Adz2bdH0Vq3F53KEMJOoftQFutWCukm6J24wbPWRO4k1kMY7gS7ds/uoJkNuV8wDCtWWnuwGcJwpWcih+zEW1Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6626,6 +9142,9 @@ packages:
     engines: {node: '>=10.14', npm: '>=6', yarn: '>=1'}
     hasBin: true
 
+  cross-fetch@4.1.0:
+    resolution: {integrity: sha512-uKm5PU+MHTootlWEY+mZ4vvXoCn4fLQxT9dSc1sXVMSFkINTJVN8cAQROpwcKm8bJ/c7rgZVIBWzH5T78sNZZw==}
+
   cross-spawn@7.0.6:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
@@ -6645,6 +9164,11 @@ packages:
     resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
     engines: {node: '>= 6'}
 
+  cssesc@3.0.0:
+    resolution: {integrity: sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==}
+    engines: {node: '>=4'}
+    hasBin: true
+
   cssom@0.3.8:
     resolution: {integrity: sha512-b0tGHbfegbhPJpxpiBPU2sCkigAqtM9O121le6bbOlgyV+NyGyCmVfJ6QW9eRjz8CpNfWEOYBIMIGRYkLwsIYg==}
 
@@ -6662,34 +9186,129 @@ packages:
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
+  cytoscape-cose-bilkent@4.1.0:
+    resolution: {integrity: sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ==}
+    peerDependencies:
+      cytoscape: ^3.2.0
+
+  cytoscape-fcose@2.2.0:
+    resolution: {integrity: sha512-ki1/VuRIHFCzxWNrsshHYPs6L7TvLu3DL+TyIGEsRcvVERmxokbf5Gdk7mFxZnTdiGtnA4cfSmjZJMviqSuZrQ==}
+    peerDependencies:
+      cytoscape: ^3.2.0
+
+  cytoscape@3.34.0:
+    resolution: {integrity: sha512-62rNSrioXw93uliKFBwjukeQyeWwH2PqDrTac31r2P6464u3AUvTk0xS4LVvT251g7IgkFunrI48ZEZGjywSOg==}
+    engines: {node: '>=0.10'}
+
+  d3-array@2.12.1:
+    resolution: {integrity: sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ==}
+
   d3-array@3.2.4:
     resolution: {integrity: sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==}
     engines: {node: '>=12'}
 
-  d3-color@3.1.0:
-    resolution: {integrity: sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==}
+  d3-axis@3.0.0:
+    resolution: {integrity: sha512-IH5tgjV4jE/GhHkRV0HiVYPDtvfjHQlQfJHs0usq7M30XcSBvOotpmH1IgkcXsO/5gEQZD43B//fc7SRT5S+xw==}
     engines: {node: '>=12'}
 
-  d3-ease@3.0.1:
-    resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==}
+  d3-brush@3.0.0:
+    resolution: {integrity: sha512-ALnjWlVYkXsVIGlOsuWH1+3udkYFI48Ljihfnh8FZPF2QS9o+PzGLBslO0PjzVoHLZ2KCVgAM8NVkXPJB2aNnQ==}
+    engines: {node: '>=12'}
+
+  d3-chord@3.0.1:
+    resolution: {integrity: sha512-VE5S6TNa+j8msksl7HwjxMHDM2yNK3XCkusIlpX5kwauBfXuyLAtNg9jCp/iHH61tgI4sb6R/EIMWCqEIdjT/g==}
+    engines: {node: '>=12'}
+
+  d3-color@3.1.0:
+    resolution: {integrity: sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==}
+    engines: {node: '>=12'}
+
+  d3-contour@4.0.2:
+    resolution: {integrity: sha512-4EzFTRIikzs47RGmdxbeUvLWtGedDUNkTcmzoeyg4sP/dvCexO47AaQL7VKy/gul85TOxw+IBgA8US2xwbToNA==}
+    engines: {node: '>=12'}
+
+  d3-delaunay@6.0.4:
+    resolution: {integrity: sha512-mdjtIZ1XLAM8bm/hx3WwjfHt6Sggek7qH043O8KEjDXN40xi3vx/6pYSVTwLjEgiXQTbvaouWKynLBiUZ6SK6A==}
+    engines: {node: '>=12'}
+
+  d3-dispatch@3.0.1:
+    resolution: {integrity: sha512-rzUyPU/S7rwUflMyLc1ETDeBj0NRuHKKAcvukozwhshr6g6c5d8zh4c2gQjY2bZ0dXeGLWc1PF174P2tVvKhfg==}
+    engines: {node: '>=12'}
+
+  d3-drag@3.0.0:
+    resolution: {integrity: sha512-pWbUJLdETVA8lQNJecMxoXfH6x+mO2UQo8rSmZ+QqxcbyA3hfeprFgIT//HW2nlHChWeIIMwS2Fq+gEARkhTkg==}
+    engines: {node: '>=12'}
+
+  d3-dsv@3.0.1:
+    resolution: {integrity: sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q==}
+    engines: {node: '>=12'}
+    hasBin: true
+
+  d3-ease@3.0.1:
+    resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==}
+    engines: {node: '>=12'}
+
+  d3-fetch@3.0.1:
+    resolution: {integrity: sha512-kpkQIM20n3oLVBKGg6oHrUchHM3xODkTzjMoj7aWQFq5QEM+R6E4WkzT5+tojDY7yjez8KgCBRoj4aEr99Fdqw==}
+    engines: {node: '>=12'}
+
+  d3-force@3.0.0:
+    resolution: {integrity: sha512-zxV/SsA+U4yte8051P4ECydjD/S+qeYtnaIyAs9tgHCqfguma/aAQDjo85A9Z6EKhBirHRJHXIgJUlffT4wdLg==}
     engines: {node: '>=12'}
 
   d3-format@3.1.2:
     resolution: {integrity: sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg==}
     engines: {node: '>=12'}
 
+  d3-geo@3.1.1:
+    resolution: {integrity: sha512-637ln3gXKXOwhalDzinUgY83KzNWZRKbYubaG+fGVuc/dxO64RRljtCTnf5ecMyE1RIdtqpkVcq0IbtU2S8j2Q==}
+    engines: {node: '>=12'}
+
+  d3-hierarchy@3.1.2:
+    resolution: {integrity: sha512-FX/9frcub54beBdugHjDCdikxThEqjnR93Qt7PvQTOHxyiNCAlvMrHhclk3cD5VeAaq9fxmfRp+CnWw9rEMBuA==}
+    engines: {node: '>=12'}
+
   d3-interpolate@3.0.1:
     resolution: {integrity: sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==}
     engines: {node: '>=12'}
 
+  d3-path@1.0.9:
+    resolution: {integrity: sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg==}
+
   d3-path@3.1.0:
     resolution: {integrity: sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==}
     engines: {node: '>=12'}
 
+  d3-polygon@3.0.1:
+    resolution: {integrity: sha512-3vbA7vXYwfe1SYhED++fPUQlWSYTTGmFmQiany/gdbiWgU/iEyQzyymwL9SkJjFFuCS4902BSzewVGsHHmHtXg==}
+    engines: {node: '>=12'}
+
+  d3-quadtree@3.0.1:
+    resolution: {integrity: sha512-04xDrxQTDTCFwP5H6hRhsRcb9xxv2RzkcsygFzmkSIOJy3PeRJP7sNk3VRIbKXcog561P9oU0/rVH6vDROAgUw==}
+    engines: {node: '>=12'}
+
+  d3-random@3.0.1:
+    resolution: {integrity: sha512-FXMe9GfxTxqd5D6jFsQ+DJ8BJS4E/fT5mqqdjovykEB2oFbTMDVdg1MGFxfQW+FBOGoB++k8swBrgwSHT1cUXQ==}
+    engines: {node: '>=12'}
+
+  d3-sankey@0.12.3:
+    resolution: {integrity: sha512-nQhsBRmM19Ax5xEIPLMY9ZmJ/cDvd1BG3UVvt5h3WRxKg5zGRbvnteTyWAbzeSvlh3tW7ZEmq4VwR5mB3tutmQ==}
+
+  d3-scale-chromatic@3.1.0:
+    resolution: {integrity: sha512-A3s5PWiZ9YCXFye1o246KoscMWqf8BsD9eRiJ3He7C9OBaxKhAd5TFCdEx/7VbKtxxTsu//1mMJFrEt572cEyQ==}
+    engines: {node: '>=12'}
+
   d3-scale@4.0.2:
     resolution: {integrity: sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==}
     engines: {node: '>=12'}
 
+  d3-selection@3.0.0:
+    resolution: {integrity: sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==}
+    engines: {node: '>=12'}
+
+  d3-shape@1.3.7:
+    resolution: {integrity: sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw==}
+
   d3-shape@3.2.0:
     resolution: {integrity: sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==}
     engines: {node: '>=12'}
@@ -6706,6 +9325,23 @@ packages:
     resolution: {integrity: sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==}
     engines: {node: '>=12'}
 
+  d3-transition@3.0.1:
+    resolution: {integrity: sha512-ApKvfjsSR6tg06xrL434C0WydLr7JewBB3V+/39RMHsaXTOG0zmt/OAXeng5M5LBm0ojmxJrpomQVZ1aPvBL4w==}
+    engines: {node: '>=12'}
+    peerDependencies:
+      d3-selection: 2 - 3
+
+  d3-zoom@3.0.0:
+    resolution: {integrity: sha512-b8AmV3kfQaqWAuacbPuNbL6vahnOJflOhexLzMMNLga62+/nh0JzvJ0aO/5a5MVgUFGS7Hu1P9P03o3fJkDCyw==}
+    engines: {node: '>=12'}
+
+  d3@7.9.0:
+    resolution: {integrity: sha512-e1U46jVP+w7Iut8Jt8ri1YsPOvFpg46k+K8TpCb0P+zjCkjkPnV7WzfDJzMHy1LnA+wj5pLT1wjO901gLXeEhA==}
+    engines: {node: '>=12'}
+
+  dagre-d3-es@7.0.14:
+    resolution: {integrity: sha512-P4rFMVq9ESWqmOgK+dlXvOtLwYg0i7u0HBGJER0LZDJT2VHIPAMZ/riPxqJceWMStH5+E61QxFra9kIS3AqdMg==}
+
   data-urls@3.0.2:
     resolution: {integrity: sha512-Jy/tj3ldjZJo63sVAvg6LHt2mHvl4V6AgRAmNDtLdm7faqtsx+aJG42rsyCo9JCoRVKwPFzKlIPx3DIibwSIaQ==}
     engines: {node: '>=12'}
@@ -6729,6 +9365,13 @@ packages:
   date-fns@4.4.0:
     resolution: {integrity: sha512-+1UMbeh68lH1SegH83CGWwpb6OHHbpSgr3+s5Eww5M4CAgswBpoWS0AjTOfEJ33HiYKz1hdj/KTFprzXHmq/6w==}
 
+  dayjs@1.11.21:
+    resolution: {integrity: sha512-98IT+HOahAisibz/yjKbzuOBwYcjJ7BCLPzARyHiyEBmRz4fatF+KPJszEHXsGYjUG234aH/cOjW1wwTbKUZlA==}
+
+  debounce@2.0.0:
+    resolution: {integrity: sha512-xRetU6gL1VJbs85Mc4FoEGSjQxzpdxRyFhe3lmWFyy2EzydIcD4xzUvRJMD+NPDfMwKNhxa3PvsIOU32luIWeA==}
+    engines: {node: '>=18'}
+
   debug@2.6.9:
     resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
     peerDependencies:
@@ -6745,6 +9388,15 @@ packages:
       supports-color:
         optional: true
 
+  debug@4.3.7:
+    resolution: {integrity: sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==}
+    engines: {node: '>=6.0'}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
     engines: {node: '>=6.0'}
@@ -6760,6 +9412,9 @@ packages:
   decimal.js@10.6.0:
     resolution: {integrity: sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==}
 
+  decode-named-character-reference@1.3.0:
+    resolution: {integrity: sha512-GtpQYB283KrPp6nRw50q3U9/VfOutZOe103qlN7BPP6Ad27xYnOIWv4lPzo8HCAL+mMZofJ9KEy30fq6MfaK6Q==}
+
   decode-uri-component@0.2.2:
     resolution: {integrity: sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==}
     engines: {node: '>=0.10'}
@@ -6805,6 +9460,9 @@ packages:
   defu@6.1.7:
     resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
 
+  delaunator@5.1.0:
+    resolution: {integrity: sha512-AGrQ4QSgssa1NGmWmLPqN5NY2KajF5MqxetNEO+o0n3ZwZZeTmt7bBnvzHWrmkZFxGgr4HdyFgelzgi06otLuQ==}
+
   delayed-stream@1.0.0:
     resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
     engines: {node: '>=0.4.0'}
@@ -6828,6 +9486,13 @@ packages:
     resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
     engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
 
+  detect-gpu@5.0.70:
+    resolution: {integrity: sha512-bqerEP1Ese6nt3rFkwPnGbsUF9a4q+gMmpTVVOEzoCyeCc+y7/RvJnQZJx1JwhgQI5Ntg0Kgat8Uu7XpBqnz1w==}
+
+  detect-libc@2.0.2:
+    resolution: {integrity: sha512-UX6sGumvvqSaXgdKGUsgZWqcUyIXZ/vZTrlRT/iobiKhGL0zL4d3osHj3uqllWJK+i+sixDS/3COVEOFbupFyw==}
+    engines: {node: '>=8'}
+
   detect-libc@2.1.2:
     resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
     engines: {node: '>=8'}
@@ -6839,6 +9504,9 @@ packages:
   detect-node-es@1.1.0:
     resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==}
 
+  devlop@1.1.0:
+    resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==}
+
   diff-sequences@29.6.3:
     resolution: {integrity: sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -6872,6 +9540,9 @@ packages:
     resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
     engines: {node: '>= 4'}
 
+  dompurify@3.4.12:
+    resolution: {integrity: sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==}
+
   domutils@3.2.2:
     resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
 
@@ -6879,6 +9550,10 @@ packages:
     resolution: {integrity: sha512-lnOnttzfrzkRx2echxJHQRB6vOAMSCzzZg79IxpC00tU42wZPuZkQxNNrrwVAxaQZIIh001l4PxVlCrBxngBzA==}
     hasBin: true
 
+  dotenv-cli@7.4.4:
+    resolution: {integrity: sha512-XkBYCG0tPIes+YZr4SpfFv76SQrV/LeCE8CI7JSEMi3VR9MvTihCGTOtbIexD6i2mXF+6px7trb1imVCXSNMDw==}
+    hasBin: true
+
   dotenv-cli@8.0.0:
     resolution: {integrity: sha512-aLqYbK7xKOiTMIRf1lDPbI+Y+Ip/wo5k3eyp6ePysVaSqbyxjyK3dK35BTxG+rmd7djf5q2UPs4noPNH+cj0Qw==}
     hasBin: true
@@ -6903,10 +9578,129 @@ packages:
     resolution: {integrity: sha512-JVUnt+DUIzu87TABbhPmNfVdBDt18BLOWjMUFJMSi/Qqg7NTYtabbvSNJGOJ7afbRuv9D/lngizHtP7QyLQ+9w==}
     engines: {node: '>=12'}
 
-  drizzle-kit@0.31.8:
-    resolution: {integrity: sha512-O9EC/miwdnRDY10qRxM8P3Pg8hXe3LyU4ZipReKOgTwn4OqANmftj8XJz1UPUAS6NMHf0E2htjsbQujUTkncCg==}
+  draco3d@1.5.7:
+    resolution: {integrity: sha512-m6WCKt/erDXcw+70IJXnG7M3awwQPAsZvJGX5zY7beBqpELw6RDGkYVU0W43AFxye4pDZ5i2Lbyc/NNGqwjUVQ==}
+
+  drizzle-kit@1.0.0-rc.3:
+    resolution: {integrity: sha512-lwGIi6GTlEYzrtac1Szecns+zrAxjaOoNysfBCKRQOXQE7nMJ8IU2I2S6ek3FHEm1N30dQb5YrTdqV7zNH6n7A==}
     hasBin: true
 
+  drizzle-orm@1.0.0-rc.3:
+    resolution: {integrity: sha512-akZOa5UxapFbdBG8IDkfBRpSZJpMHaOJtGgp7oi1oHaiU8S3KN92waHo2l5aRuv1D9tMGYpv3BQFOsiGcNjLTQ==}
+    peerDependencies:
+      '@aws-sdk/client-rds-data': '>=3'
+      '@cloudflare/workers-types': '>=4'
+      '@effect/sql-pg': '>=4.0.0-beta.58 || >=4.0.0'
+      '@electric-sql/pglite': '>=0.2.0'
+      '@libsql/client': '>=0.10.0'
+      '@libsql/client-wasm': '>=0.10.0'
+      '@neondatabase/serverless': '>=0.10.0'
+      '@op-engineering/op-sqlite': '>=2'
+      '@opentelemetry/api': ^1.4.1
+      '@planetscale/database': '>=1.13'
+      '@sinclair/typebox': '>=0.34.8'
+      '@sqlitecloud/drivers': '>=1.0.653'
+      '@tidbcloud/serverless': '*'
+      '@tursodatabase/database': '>=0.2.1'
+      '@tursodatabase/database-common': '>=0.2.1'
+      '@tursodatabase/database-wasm': '>=0.2.1'
+      '@types/better-sqlite3': '*'
+      '@types/mssql': ^9.1.4
+      '@types/pg': '*'
+      '@types/sql.js': '*'
+      '@upstash/redis': '>=1.34.7'
+      '@vercel/postgres': '>=0.8.0'
+      '@xata.io/client': '*'
+      arktype: '>=2.0.0'
+      better-sqlite3: '>=9.3.0'
+      bun-types: '*'
+      effect: 4.0.0-beta.84
+      expo-sqlite: '>=14.0.0'
+      mssql: ^11.0.1
+      mysql2: '>=2'
+      pg: '>=8'
+      postgres: '>=3'
+      sql.js: '>=1'
+      sqlite3: '>=5'
+      typebox: '>=1.0.0'
+      valibot: '>=1.0.0-beta.7'
+      zod: ^3.25.0 || ^4.0.0
+    peerDependenciesMeta:
+      '@aws-sdk/client-rds-data':
+        optional: true
+      '@cloudflare/workers-types':
+        optional: true
+      '@effect/sql-pg':
+        optional: true
+      '@electric-sql/pglite':
+        optional: true
+      '@libsql/client':
+        optional: true
+      '@libsql/client-wasm':
+        optional: true
+      '@neondatabase/serverless':
+        optional: true
+      '@op-engineering/op-sqlite':
+        optional: true
+      '@opentelemetry/api':
+        optional: true
+      '@planetscale/database':
+        optional: true
+      '@sinclair/typebox':
+        optional: true
+      '@sqlitecloud/drivers':
+        optional: true
+      '@tidbcloud/serverless':
+        optional: true
+      '@tursodatabase/database':
+        optional: true
+      '@tursodatabase/database-common':
+        optional: true
+      '@tursodatabase/database-wasm':
+        optional: true
+      '@types/better-sqlite3':
+        optional: true
+      '@types/mssql':
+        optional: true
+      '@types/pg':
+        optional: true
+      '@types/sql.js':
+        optional: true
+      '@upstash/redis':
+        optional: true
+      '@vercel/postgres':
+        optional: true
+      '@xata.io/client':
+        optional: true
+      arktype:
+        optional: true
+      better-sqlite3:
+        optional: true
+      bun-types:
+        optional: true
+      effect:
+        optional: true
+      expo-sqlite:
+        optional: true
+      mssql:
+        optional: true
+      mysql2:
+        optional: true
+      pg:
+        optional: true
+      postgres:
+        optional: true
+      sql.js:
+        optional: true
+      sqlite3:
+        optional: true
+      typebox:
+        optional: true
+      valibot:
+        optional: true
+      zod:
+        optional: true
+
   dts-resolver@2.1.3:
     resolution: {integrity: sha512-bihc7jPC90VrosXNzK0LTE2cuLP6jr0Ro8jk+kMugHReJVLIpHz/xadeq3MhuwyO4TD4OA3L1Q8pBBFRc08Tsw==}
     engines: {node: '>=20.19.0'}
@@ -6920,9 +9714,25 @@ packages:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
 
+  earcut@3.2.3:
+    resolution: {integrity: sha512-vnS4AVwp1KHAF13i1vp1/2D5evWy3k5u/iW/B81QVsUZtV8cv2tU0b2VNFlqvh4kYwrFMDdjPCfAmfyJW9y14Q==}
+
+  eastasianwidth@0.2.0:
+    resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
+
+  ecdsa-sig-formatter@1.0.11:
+    resolution: {integrity: sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==}
+
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
+  effect-query@1.0.0:
+    resolution: {integrity: sha512-oaGyubCSC+RwMzh0gY9z7tEErFRArvUkiEsGqfx4jptDyuXewrh9PQeg7P8uTCR1Gxg8V+gW0g7jXBk/9fGzoA==}
+    peerDependencies:
+      '@tanstack/react-query': ^5.90.5
+      effect: 4.0.0-beta.84
+      react: '>=18.2.0'
+
   effect@4.0.0-beta.84:
     resolution: {integrity: sha512-zWwFI9WZ4TsddBmtcuuAO2IXGR0Dp56xIUt8cX29ZeyOEtErXqP6muDaVpro08lGiMSOGMqSpuH/C1TUxHsRAA==}
 
@@ -6932,7 +9742,7 @@ packages:
   embla-carousel-react@8.6.0:
     resolution: {integrity: sha512-0/PjqU7geVmo6F734pmPqpyHqiM99olvyecY7zdweCw+6tKEXnrE90pBiBbMMU8s5tICemzpQ3hi5EpxzGW+JA==}
     peerDependencies:
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.1 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
 
   embla-carousel-reactive-utils@8.6.0:
     resolution: {integrity: sha512-fMVUDUEx0/uIEDM0Mz3dHznDhfX+znCCDCeIophYb1QGVM7YThSWX+wz11zlYwWFOr74b4QLGg0hrGPJeG2s4A==}
@@ -6946,9 +9756,15 @@ packages:
     resolution: {integrity: sha512-DeWwawk6r5yR9jFgnDKYt4sLS0LmHJJi3ZOnb5/JdbYwj3nW+FxQnHIjhBKz8YLC7oRNPVM9NQ47I3CVx34eqQ==}
     engines: {node: '>=12'}
 
+  emoji-regex@10.6.0:
+    resolution: {integrity: sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==}
+
   emoji-regex@8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
 
+  emoji-regex@9.2.2:
+    resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
+
   empathic@2.0.1:
     resolution: {integrity: sha512-YGRs8knHhKHVShLkFET/rWAU8kmHbOV5LwN938RHI0pljAJ1Gf6SzXsSmRaEzcXTtOOmVqJ5+WtQPL5uigY50Q==}
     engines: {node: '>=14'}
@@ -6961,6 +9777,17 @@ packages:
     resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
     engines: {node: '>= 0.8'}
 
+  encoding-sniffer@0.2.1:
+    resolution: {integrity: sha512-5gvq20T6vfpekVtqrYQsSCFZ1wEg5+wW0/QaZMWkFr6BqD3NfKs0rLCx4rrVlSWJeZb5NBJgVLswK/w2MWU+Gw==}
+
+  engine.io-parser@5.2.3:
+    resolution: {integrity: sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==}
+    engines: {node: '>=10.0.0'}
+
+  engine.io@6.6.9:
+    resolution: {integrity: sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==}
+    engines: {node: '>=10.2.0'}
+
   enhanced-resolve@5.21.6:
     resolution: {integrity: sha512-aNnGCvbJ/RIyWo1IuhNdVjnNF+EjH9wpzpNHt+ci/m9He9LJvUN8wrCcXjp9cWsGNAuvSpVFTx/vraAFQ8qGjQ==}
     engines: {node: '>=10.13.0'}
@@ -6977,10 +9804,21 @@ packages:
     resolution: {integrity: sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==}
     engines: {node: '>=0.12'}
 
+  entities@7.0.1:
+    resolution: {integrity: sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==}
+    engines: {node: '>=0.12'}
+
   env-editor@0.4.2:
     resolution: {integrity: sha512-ObFo8v4rQJAE59M69QzwloxPZtd33TpYEIjtKD1rrFDcM1Gd7IkDxEBU+HriziN6HSHQnBJi8Dmy+JWkav5HKA==}
     engines: {node: '>=8'}
 
+  environment@1.1.0:
+    resolution: {integrity: sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==}
+    engines: {node: '>=18'}
+
+  error-causes@3.0.2:
+    resolution: {integrity: sha512-i0B8zq1dHL6mM85FGoxaJnVtx6LD5nL2v0hlpGdntg5FOSyzQ46c9lmz5qx0xRS2+PWHGOHcYxGIBC5Le2dRMw==}
+
   error-ex@1.3.4:
     resolution: {integrity: sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==}
 
@@ -7006,9 +9844,6 @@ packages:
   es-module-lexer@1.7.0:
     resolution: {integrity: sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==}
 
-  es-module-lexer@2.1.0:
-    resolution: {integrity: sha512-n27zTYMjYu1aj4MjCWzSP7G9r75utsaoc8m61weK+W8JMBGGQybd43GstCXZ3WNmSFtGT9wi59qQTW6mhTR5LQ==}
-
   es-object-atoms@1.1.1:
     resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
     engines: {node: '>= 0.4'}
@@ -7025,13 +9860,27 @@ packages:
     resolution: {integrity: sha512-w+5mJ3GuFL+NjVtJlvydShqE1eN3h3PbI7/5LAsYJP/2qtuMXjfL2LpHSRqo4b4eSF5K/DH1JXKUAHSB2UW50g==}
     engines: {node: '>= 0.4'}
 
+  es-toolkit@1.49.0:
+    resolution: {integrity: sha512-G5iZ6Pc/FNRY/soKZHC+TxGDD83rHUDXxzaWhGCX44vAv/tMs56WMusnm/KMNK+luUPsgA9U28cGr4RDlSzL2g==}
+
+  esast-util-from-estree@2.0.0:
+    resolution: {integrity: sha512-4CyanoAudUSBAn5K13H4JhsMH6L9ZP7XbLVe/dKybkxMO7eDyLsT8UHl9TRNrU2Gr9nz+FovfSIjuXWJ81uVwQ==}
+
+  esast-util-from-js@2.0.1:
+    resolution: {integrity: sha512-8Ja+rNJ0Lt56Pcf3TAmpBZjmx8ZcK5Ts4cAzIOjsjevg9oSXJnl6SUQ2EevU8tv3h6ZLWmoKL5H4fgWvdvfETw==}
+
   esbuild-register@3.6.0:
     resolution: {integrity: sha512-H2/S7Pm8a9CL1uhp9OvjwrBh5Pvx0H8qVOxNu8Wed9Y7qv56MPtq+GGM8RJpq6glYJn9Wspr8uw7l55uyinNeg==}
     peerDependencies:
       esbuild: '>=0.12 <1'
 
-  esbuild@0.25.0:
-    resolution: {integrity: sha512-BXq5mqc8ltbaN34cDqWuYKyNhX8D/Z0J1xdtdQ8UcIIIyJyz+ZMKUt58tF3SrZ85jcfN/PZYhjR5uDQAYNVbuw==}
+  esbuild-wasm@0.25.12:
+    resolution: {integrity: sha512-rZqkjL3Y6FwLpSHzLnaEy8Ps6veCNo1kZa9EOfJvmWtBq5dJH4iVjfmOO6Mlkv9B0tt9WFPFmb/VxlgJOnueNg==}
+    engines: {node: '>=18'}
+    hasBin: true
+
+  esbuild@0.23.0:
+    resolution: {integrity: sha512-1lvV17H2bMYda/WaFb2jLPeHU3zml2k4/yagNMG8Q/YtfMjCwEUZa2eXXMgZTVSL5q1n4H7sQ0X6CdJDqqeCFA==}
     engines: {node: '>=18'}
     hasBin: true
 
@@ -7074,6 +9923,10 @@ packages:
     resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
     engines: {node: '>=10'}
 
+  escape-string-regexp@5.0.0:
+    resolution: {integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==}
+    engines: {node: '>=12'}
+
   escodegen@2.1.0:
     resolution: {integrity: sha512-2NlIDTwUWJN0mRPQOdtQBzbUHvdGY2P1VXSyU83Q3xKxM7WHX2Ql8dKq782Q9TgQUNOLEzEYu9bzLNj1q88I5w==}
     engines: {node: '>=6.0'}
@@ -7259,6 +10112,27 @@ packages:
     resolution: {integrity: sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==}
     engines: {node: '>=4.0'}
 
+  estree-util-attach-comments@3.0.0:
+    resolution: {integrity: sha512-cKUwm/HUcTDsYh/9FgnuFqpfquUbwIqwKM26BVCGDPVgvaCl/nDCCjUfiLlx6lsEZ3Z4RFxNbOQ60pkaEwFxGw==}
+
+  estree-util-build-jsx@3.0.1:
+    resolution: {integrity: sha512-8U5eiL6BTrPxp/CHbs2yMgP8ftMhR5ww1eIKoWRMlqvltHF8fZn5LRDvTKuxD3DUn+shRbLGqXemcP51oFCsGQ==}
+
+  estree-util-is-identifier-name@3.0.0:
+    resolution: {integrity: sha512-hFtqIDZTIUZ9BXLb8y4pYGyk6+wekIivNVTcmvk8NoOh+VeRn5y6cEHzbURrWbfp1fIqdVipilzj+lfaadNZmg==}
+
+  estree-util-scope@1.0.0:
+    resolution: {integrity: sha512-2CAASclonf+JFWBNJPndcOpA8EMJwa0Q8LUFJEKqXLW6+qBvbFZuF5gItbQOs/umBUkjviCSDCbBwU2cXbmrhQ==}
+
+  estree-util-to-js@2.0.0:
+    resolution: {integrity: sha512-WDF+xj5rRWmD5tj6bIqRi6CkLIXbbNQUcxQHzGysQzvHmdYG2G7p/Tf0J0gpxGgkeMZNTIjT/AoSvC9Xehcgdg==}
+
+  estree-util-value-to-estree@3.5.0:
+    resolution: {integrity: sha512-aMV56R27Gv3QmfmF1MY12GWkGzzeAezAX+UplqHVASfjc9wNzI/X6hC0S9oxq61WT4aQesLGslWP9tKk6ghRZQ==}
+
+  estree-util-visit@2.0.0:
+    resolution: {integrity: sha512-m5KgiH85xAhhW8Wta0vShLcUvOsh3LLPI2YVwcbio1l7E09NTLL1EyMZFM1OyWowoH0skScNbhOPl4kcBgzTww==}
+
   estree-walker@3.0.3:
     resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==}
 
@@ -7277,6 +10151,17 @@ packages:
   eventemitter3@4.0.7:
     resolution: {integrity: sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==}
 
+  eventemitter3@5.0.4:
+    resolution: {integrity: sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==}
+
+  events@3.3.0:
+    resolution: {integrity: sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==}
+    engines: {node: '>=0.8.x'}
+
+  eventsource-parser@3.1.0:
+    resolution: {integrity: sha512-kJezFj9YFAMLeORyi7aCLxLbD5/qWMQnoMVlVPyHIll7lgRJCc3JVln9Vgl9nwQi0YkMnhdGTMNn7CkRRAptMg==}
+    engines: {node: '>=18.0.0'}
+
   exec-async@2.2.0:
     resolution: {integrity: sha512-87OpwcEiMia/DeiKFzaQNBNFeN3XkkpYIh9FyOqq5mS2oKv3CBE67PXoEKcr6nodWdXNogTiQ0jE2NGuoffXPw==}
 
@@ -7300,7 +10185,7 @@ packages:
     resolution: {integrity: sha512-CsXFCQbx2fElSMn0lyTdRIyKlSXOal6ilLJd+yeZ6xaC7I9AICQgscY5nj0QcwgA+KYYCCEQEBndMsmj7drOWQ==}
     peerDependencies:
       expo: '*'
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   expo-constants@18.0.13:
@@ -7339,7 +10224,7 @@ packages:
     resolution: {integrity: sha512-ga0q61ny4s/kr4k8JX9hVH69exVSIfcIc19+qZ7gt71Mqtm7xy2c6kwsPTCyhBW2Ro5yXTT8EaZOpuRi35rHbg==}
     peerDependencies:
       expo: '*'
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   expo-json-utils@0.15.0:
@@ -7349,19 +10234,19 @@ packages:
     resolution: {integrity: sha512-YK9M1VrnoH1vLJiQzChZgzDvVimVoriibiDIFLbQMpjYBnvyfUeHJcin/Gx1a+XgupNXy92EQJLgI/9ZuXajYQ==}
     peerDependencies:
       expo: '*'
-      react: 19.1.0
+      react: '*'
 
   expo-linking@8.0.11:
     resolution: {integrity: sha512-+VSaNL5om3kOp/SSKO5qe6cFgfSIWnnQDSbA7XLs3ECkYzXRquk5unxNS3pg7eK5kNUmQ4kgLI7MhTggAEUBLA==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   expo-localization@17.0.8:
     resolution: {integrity: sha512-UrdwklZBDJ+t+ZszMMiE0SXZ2eJxcquCuQcl6EvGHM9K+e6YqKVRQ+w8qE+iIB3H75v2RJy6MHAaLK+Mqeo04g==}
     peerDependencies:
       expo: '*'
-      react: 19.1.0
+      react: '*'
 
   expo-manifests@1.0.10:
     resolution: {integrity: sha512-oxDUnURPcL4ZsOBY6X1DGWGuoZgVAFzp6PISWV7lPP2J0r8u1/ucuChBgpK7u1eLGFp6sDIPwXyEUCkI386XSQ==}
@@ -7379,7 +10264,7 @@ packages:
   expo-modules-core@3.0.29:
     resolution: {integrity: sha512-LzipcjGqk8gvkrOUf7O2mejNWugPkf3lmd9GkqL9WuNyeN2fRwU0Dn77e3ZUKI3k6sI+DNwjkq4Nu9fNN9WS7Q==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   expo-router@6.0.23:
@@ -7391,8 +10276,8 @@ packages:
       expo: '*'
       expo-constants: ^18.0.13
       expo-linking: ^8.0.11
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: '*'
+      react-dom: '*'
       react-native: '*'
       react-native-gesture-handler: '*'
       react-native-reanimated: '*'
@@ -7428,7 +10313,7 @@ packages:
   expo-status-bar@3.0.9:
     resolution: {integrity: sha512-xyYyVg6V1/SSOZWh4Ni3U129XHCnFHBTcUo0dhWtFDrZbNp/duw5AGsQfb2sVeU0gxWHXSY1+5F0jnKYC7WuOw==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   expo-system-ui@6.0.9:
@@ -7452,7 +10337,7 @@ packages:
     peerDependencies:
       '@expo/dom-webview': '*'
       '@expo/metro-runtime': '*'
-      react: 19.1.0
+      react: '*'
       react-native: '*'
       react-native-webview: '*'
     peerDependenciesMeta:
@@ -7469,10 +10354,16 @@ packages:
   exsolve@1.0.8:
     resolution: {integrity: sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA==}
 
+  extend@3.0.2:
+    resolution: {integrity: sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==}
+
   fast-check@4.8.0:
     resolution: {integrity: sha512-GOJ158CUMnN6cSahsv4+ExARvIDuzzinFjkp0E9WtiBa5zcVeLozVkWaE4IzFcc+Y48Wp1EDlUZsXRyAztQcSg==}
     engines: {node: '>=12.17.0'}
 
+  fast-deep-equal@2.0.1:
+    resolution: {integrity: sha512-bCK/2Z4zLidyB4ReuIsvALH6w31YfAQDmXMqMx6FyfHqvBxtjC0eRumeSu4Bs3XtXwpyIywtSTrVT99BxY1f9w==}
+
   fast-deep-equal@3.1.3:
     resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
 
@@ -7499,6 +10390,13 @@ packages:
   fast-uri@3.1.3:
     resolution: {integrity: sha512-i70LwGWUduXqzicKXWshooq+sWL1K3WUU5rKZNG/0i3a1OSoX3HqhH5WbWwTmqWfor4urUakGPiRQcleRZTwOg==}
 
+  fast-xml-builder@1.3.0:
+    resolution: {integrity: sha512-F74cZEdCvuw9P41GAC3rod4X04jjWGM1JPEv/GWSqFTWLsdyMSBMBMlm9Hk3GLBgLBbdBNY8yee0pQh2RBVESQ==}
+
+  fast-xml-parser@5.10.0:
+    resolution: {integrity: sha512-SLhnTEqE5QpJHq/6zl9bsmImEP2adv+y6Wy+cJa7nVTRzQh1OZfCe9k29M5xN74LWnu0xa1zrUrq3KnOKl92Fg==}
+    hasBin: true
+
   fastq@1.19.1:
     resolution: {integrity: sha512-GwLTyxkCXjXbxqIhTsMI2Nui8huMPtnxg7krajPJAjnEG/iiOS7i+zCtWGZR9G0NBKbXKh6X9m9UIsYX/N6vvQ==}
 
@@ -7514,6 +10412,18 @@ packages:
       picomatch:
         optional: true
 
+  fetch-retry@6.0.0:
+    resolution: {integrity: sha512-BUFj1aMubgib37I3v4q78fYo63Po7t4HUPTpQ6/QE6yK6cIQrP+W43FYToeTEyg5m2Y7eFUtijUuAv/PDlWuag==}
+
+  fetchdts@0.1.7:
+    resolution: {integrity: sha512-YoZjBdafyLIop9lSxXVI33oLD5kN31q4Td+CasofLLYeLXRFeOsuOw0Uo+XNRi9PZlbfdlN2GmRtm4tCEQ9/KA==}
+
+  fflate@0.6.10:
+    resolution: {integrity: sha512-IQrh3lEPM93wVCEczc9SaAOvkmcoQn/G8Bo1e8ZPlY3X3bnAxWaBdvTdvM1hP62iZp0BXWDy4vTAy4fF0+Dlpg==}
+
+  fflate@0.8.3:
+    resolution: {integrity: sha512-tbZNuJrLwGUp3zshBtdy4W+ORxZuIh8a5ilyIEQDC5rY1f3U20JMry0Ll3WBzU58EZKsEuJFXhb5gwv8CsPvgA==}
+
   file-entry-cache@8.0.0:
     resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
     engines: {node: '>=16.0.0'}
@@ -7566,10 +10476,31 @@ packages:
     resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==}
     engines: {node: '>= 0.4'}
 
+  foreground-child@3.3.1:
+    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
+    engines: {node: '>=14'}
+
   form-data@4.0.6:
     resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
     engines: {node: '>= 6'}
 
+  fractional-indexing-jittered@1.0.0:
+    resolution: {integrity: sha512-0tLU0FOedVY7lrvN4LK0DVj6FTuYM0pWDpN97/8UTZE2lx1+OwX8+2uL7IOWc2PmktYTHQjMT6FvZZ3SGCdZdg==}
+
+  framer-motion@12.42.2:
+    resolution: {integrity: sha512-5XY9luDiu0oHfHBjpDthFMh0ES+122w6p/papSJBweMkO8Sn+PW2QaEgRblQBpWFnuvZS5qvarpt/hO2pjGmnw==}
+    peerDependencies:
+      '@emotion/is-prop-valid': '*'
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
+    peerDependenciesMeta:
+      '@emotion/is-prop-valid':
+        optional: true
+      react:
+        optional: true
+      react-dom:
+        optional: true
+
   freeport-async@2.0.0:
     resolution: {integrity: sha512-K7od3Uw45AJg00XUmy15+Hae2hOcgKcmN3/EF6Y7i01O0gaqiRx8sUSpsb9+BRNL8RPBrhzPsVfy8q9ADlJuWQ==}
     engines: {node: '>=8'}
@@ -7589,6 +10520,79 @@ packages:
     engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
     os: [darwin]
 
+  fumadocs-core@15.8.2:
+    resolution: {integrity: sha512-8x6nwL9gQyfU94VrX3xOIRb3avG9txEJXd0/XdldxHeH6uIAtSGnZ6YV1LksJfEsSIUL+DRxrxRfvL0rbwBP1g==}
+    peerDependencies:
+      '@mixedbread/sdk': ^0.19.0
+      '@oramacloud/client': 1.x.x || 2.x.x
+      '@tanstack/react-router': 1.x.x
+      '@types/react': '*'
+      algoliasearch: 5.x.x
+      lucide-react: '*'
+      next: 14.x.x || 15.x.x
+      react: 18.x.x || 19.x.x
+      react-dom: 18.x.x || 19.x.x
+      react-router: 7.x.x
+      waku: ^0.26.0
+    peerDependenciesMeta:
+      '@mixedbread/sdk':
+        optional: true
+      '@oramacloud/client':
+        optional: true
+      '@tanstack/react-router':
+        optional: true
+      '@types/react':
+        optional: true
+      algoliasearch:
+        optional: true
+      lucide-react:
+        optional: true
+      next:
+        optional: true
+      react:
+        optional: true
+      react-dom:
+        optional: true
+      react-router:
+        optional: true
+      waku:
+        optional: true
+
+  fumadocs-mdx@12.0.1:
+    resolution: {integrity: sha512-o0Qf5pY5RGjn0IoiWbJQ+Yx2MKCwg/RTe0MdtLY2ue8OeRnZHCoPedBJFHQ0ep1X2rzAhjcmfTT5hxc3SELJGg==}
+    hasBin: true
+    peerDependencies:
+      '@fumadocs/mdx-remote': ^1.4.0
+      fumadocs-core: ^14.0.0 || ^15.0.0
+      next: ^15.3.0
+      react: '*'
+      vite: 7.3.5
+    peerDependenciesMeta:
+      '@fumadocs/mdx-remote':
+        optional: true
+      next:
+        optional: true
+      react:
+        optional: true
+      vite:
+        optional: true
+
+  fumadocs-ui@15.8.2:
+    resolution: {integrity: sha512-GLMm0a83mVQ2ubQLHbYQ/BcIRKEkA3cMXuVgKK4F/eB6duD6kLPwahoSb0mijwH3UrpJT+zfpKxPlK3JHXXW1A==}
+    peerDependencies:
+      '@types/react': '*'
+      next: 14.x.x || 15.x.x
+      react: 18.x.x || 19.x.x
+      react-dom: 18.x.x || 19.x.x
+      tailwindcss: ^3.4.14 || ^4.0.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      next:
+        optional: true
+      tailwindcss:
+        optional: true
+
   function-bind@1.1.2:
     resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
 
@@ -7614,6 +10618,10 @@ packages:
     resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
     engines: {node: 6.* || 8.* || >= 10.*}
 
+  get-east-asian-width@1.6.0:
+    resolution: {integrity: sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA==}
+    engines: {node: '>=18'}
+
   get-intrinsic@1.3.0:
     resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
     engines: {node: '>= 0.4'}
@@ -7641,14 +10649,23 @@ packages:
   get-tsconfig@4.13.0:
     resolution: {integrity: sha512-1VKTZJCwBrvbd+Wn3AOgQP/2Av+TfTCOlE4AcRJE72W1ksZXbAx8PPBR9RzgTeSPzlPMHrbANMH3LbltH73wxQ==}
 
+  get-tsconfig@4.14.0:
+    resolution: {integrity: sha512-yTb+8DXzDREzgvYmh6s9vHsSVCHeC0G3PI5bEXNBHtmshPnO+S5O7qgLEOn0I5QvMy6kpZN8K1NKGyilLb93wA==}
+
   getenv@2.0.0:
     resolution: {integrity: sha512-VilgtJj/ALgGY77fiLam5iD336eSWi96Q15JSAG1zi8NRBysm3LXKdGnHb4m5cuyxvOLQQKWpBZAT6ni4FI2iQ==}
     engines: {node: '>=6'}
 
+  gifuct-js@2.1.2:
+    resolution: {integrity: sha512-rI2asw77u0mGgwhV3qA+OEgYqaDn5UNqgs+Bx0FGwSpuqfYn+Ir6RQY5ENNQ8SbIiG/m5gVa7CD5RriO4f4Lsg==}
+
   giget@2.0.0:
     resolution: {integrity: sha512-L5bGsVkxJbJgdnwyuheIunkGatUF/zssUoxxjACCseZYAVbaqdh9Tsmmlkl8vYan09H7sbvKt4pS8GqKLBrEzA==}
     hasBin: true
 
+  github-slugger@2.0.0:
+    resolution: {integrity: sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw==}
+
   glob-parent@5.1.2:
     resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==}
     engines: {node: '>= 6'}
@@ -7657,6 +10674,12 @@ packages:
     resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==}
     engines: {node: '>=10.13.0'}
 
+  glob@10.3.4:
+    resolution: {integrity: sha512-6LFElP3A+i/Q8XQKEvZjkEWEOTgAIALR9AO2rwT8bgPhDd1anmqDJDZ6lLddI4ehxxxR1S5RIqKe1uapMQfYaQ==}
+    engines: {node: '>=16 || 14 >=14.17'}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+    hasBin: true
+
   glob@13.0.0:
     resolution: {integrity: sha512-tvZgpqk6fz4BaNZ66ZsRaZnbHvP/jG3uKJvAZOwEVUL4RTA5nJeeLYfyN9/VA8NX/V3IBG+hkeuGpKjvELkVhA==}
     engines: {node: 20 || >=22}
@@ -7688,6 +10711,9 @@ packages:
   globrex@0.1.2:
     resolution: {integrity: sha512-uHJgbwAMwNFf5mLst7IWLNg14x1CkeqglJb/K3doi4dw6q2IvAAmM/Y81kevy83wP+Sst+nutFTYOGg3d1lsxg==}
 
+  glsl-noise@0.0.0:
+    resolution: {integrity: sha512-b/ZCF6amfAUb7dJM/MxRs7AetQEahYzJ8PtgfrmEdtw6uyGOr+ZSGtgjFm6mfsBkxJ4d2W7kg+Nlqzqvn3Bc0w==}
+
   goober@2.1.19:
     resolution: {integrity: sha512-U7veizMqxyKlM58+Z5j2ngJBH/r9siDmxpvNxSw0PylF6WQvrASJEZrxh1hidRBJc2jqoBVSyOban5u8m+6Rxg==}
     peerDependencies:
@@ -7700,6 +10726,19 @@ packages:
   graceful-fs@4.2.11:
     resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
 
+  h3@2.0.1-rc.18:
+    resolution: {integrity: sha512-2EdYEOIJwZHfhfdxvqZsmmUz4tgwzQSuzre+l50j+voHJV4m7j3zw2lYLgHoyfkCF9EAZcaH4ea0zH/hgcs9Yg==}
+    engines: {node: '>=20.11.1'}
+    hasBin: true
+    peerDependencies:
+      crossws: ^0.4.1
+    peerDependenciesMeta:
+      crossws:
+        optional: true
+
+  hachure-fill@0.5.2:
+    resolution: {integrity: sha512-3GKBOn+m2LX9iq+JC1064cSFprJY4jL1jCXTcpnfER5HYE2l/4EfWSGzkPa/ZDBmYI0ZOEj5VHV/eKnPGkHuOg==}
+
   has-bigints@1.1.0:
     resolution: {integrity: sha512-R3pbpkcIqv2Pm3dUwgjclDRVmWpTJW2DcMzcIhEXEx1oh/CEMObMm3KLmRJOdvhM7o4uQBnwr8pzRK2sJWIqfg==}
     engines: {node: '>= 0.4'}
@@ -7735,6 +10774,39 @@ packages:
     resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
     engines: {node: '>= 0.4'}
 
+  hast-util-from-parse5@8.0.3:
+    resolution: {integrity: sha512-3kxEVkEKt0zvcZ3hCRYI8rqrgwtlIOFMWkbclACvjlDw8Li9S2hk/d51OI0nr/gIpdMHNepwgOKqZ/sy0Clpyg==}
+
+  hast-util-parse-selector@4.0.0:
+    resolution: {integrity: sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==}
+
+  hast-util-raw@9.1.0:
+    resolution: {integrity: sha512-Y8/SBAHkZGoNkpzqqfCldijcuUKh7/su31kEBp67cFY09Wy0mTRgtsLYsiIxMJxlu0f6AA5SUTbDR8K0rxnbUw==}
+
+  hast-util-sanitize@5.0.2:
+    resolution: {integrity: sha512-3yTWghByc50aGS7JlGhk61SPenfE/p1oaFeNwkOOyrscaOkMGrcW9+Cy/QAIOBpZxP1yqDIzFMR0+Np0i0+usg==}
+
+  hast-util-to-estree@3.1.3:
+    resolution: {integrity: sha512-48+B/rJWAp0jamNbAAf9M7Uf//UVqAoMmgXhBdxTDJLGKY+LRnZ99qcG+Qjl5HfMpYNzS5v4EAwVEF34LeAj7w==}
+
+  hast-util-to-html@9.0.5:
+    resolution: {integrity: sha512-OguPdidb+fbHQSU4Q4ZiLKnzWo8Wwsf5bZfbvu7//a9oTYoqD/fWpe96NuHkoS9h0ccGOTe0C4NGXdtS0iObOw==}
+
+  hast-util-to-jsx-runtime@2.3.6:
+    resolution: {integrity: sha512-zl6s8LwNyo1P9uw+XJGvZtdFF1GdAkOg8ujOw+4Pyb76874fLps4ueHXDhXWdk6YHQ6OgUtinliG7RsYvCbbBg==}
+
+  hast-util-to-parse5@8.0.1:
+    resolution: {integrity: sha512-MlWT6Pjt4CG9lFCjiz4BH7l9wmrMkfkJYCxFwKQic8+RTZgWPuWxwAfjJElsXkex7DJjfSJsQIt931ilUgmwdA==}
+
+  hast-util-to-string@3.0.1:
+    resolution: {integrity: sha512-XelQVTDWvqcl3axRfI0xSeoVKzyIFPwsAGSLIsKdJKQMXDYJS4WYrBNF/8J7RdhIcFI2BOHgAifggsvsxp/3+A==}
+
+  hast-util-whitespace@3.0.0:
+    resolution: {integrity: sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==}
+
+  hastscript@9.0.1:
+    resolution: {integrity: sha512-g7df9rMFX/SPi34tyGCyUBREQoKkapwdY/T04Qn9TDWfHhAYt4/I0gMVirzK5wEzeUqIjEB+LXC/ypb7Aqno5w==}
+
   hermes-estree@0.29.1:
     resolution: {integrity: sha512-jl+x31n4/w+wEqm0I2r4CMimukLbLQEYpisys5oCre611CI5fc9TxhqkBBCJ1edDG4Kza0f7CgNz8xVMLZQOmQ==}
 
@@ -7753,6 +10825,9 @@ packages:
   hermes-parser@0.36.0:
     resolution: {integrity: sha512-GdpwMmH5x6IpC1cijvcvYnlPB60Mh6kTSF/NFdYV/j56gYdi+0RIakYs+eqOV+bbO0SW7mgVVGSsTJxyPQfo3w==}
 
+  hls.js@1.6.16:
+    resolution: {integrity: sha512-VSIRpLfRwlAAdGL4wiTucx2ScRipo0ed1FBatWkyt832jC4CReKstga6yIhYVwGu9LOBjuX9wzmRMeQdBJtzEA==}
+
   hookable@6.1.1:
     resolution: {integrity: sha512-U9LYDy1CwhMCnprUfeAZWZGByVbhd54hwepegYTK7Pi5NvqEj63ifz5z+xukznehT7i6NIZRu89Ay1AZmRsLEQ==}
 
@@ -7771,6 +10846,22 @@ packages:
   html-escaper@2.0.2:
     resolution: {integrity: sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==}
 
+  html-to-text@9.0.5:
+    resolution: {integrity: sha512-qY60FjREgVZL03vJU6IfMV4GDjGBIoOyvuFdpBDIX9yTlDw0TjxVBQp+P8NvpdIXNJvfWBTNul7fsAQJq2FNpg==}
+    engines: {node: '>=14'}
+
+  html-url-attributes@3.0.1:
+    resolution: {integrity: sha512-ol6UPyBWqsrO6EJySPz2O7ZSr856WDrEzM5zMqp+FJJLGMW35cLYmmZnl0vztAZxRUoNZJFTCohfjuIJ8I4QBQ==}
+
+  html-void-elements@3.0.0:
+    resolution: {integrity: sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==}
+
+  htmlparser2@10.1.0:
+    resolution: {integrity: sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==}
+
+  htmlparser2@8.0.2:
+    resolution: {integrity: sha512-GYdjWKDkbRLkZ5geuHs5NY1puJ+PXwP7+fHPRz06Eirsb9ugf6d8kkXav6ADhcODhFFPMIXyxkxSuMf3D6NCFA==}
+
   http-errors@2.0.1:
     resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
     engines: {node: '>= 0.8'}
@@ -7819,6 +10910,14 @@ packages:
     engines: {node: '>=16.x'}
     hasBin: true
 
+  image-size@2.0.2:
+    resolution: {integrity: sha512-IRqXKlaXwgSMAMtpNzZa1ZAe8m+Sa1770Dhk8VkSsP9LS+iHD62Zd8FQKs8fbPiagBE7BzoFX23cxFnwshpV6w==}
+    engines: {node: '>=16.x'}
+    hasBin: true
+
+  immediate@3.0.6:
+    resolution: {integrity: sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==}
+
   import-fresh@3.3.1:
     resolution: {integrity: sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==}
     engines: {node: '>=6'}
@@ -7828,6 +10927,9 @@ packages:
     engines: {node: '>=8'}
     hasBin: true
 
+  import-meta-resolve@4.2.0:
+    resolution: {integrity: sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg==}
+
   import-without-cache@0.2.5:
     resolution: {integrity: sha512-B6Lc2s6yApwnD2/pMzFh/d5AVjdsDXjgkeJ766FmFuJELIGHNycKRj+l3A39yZPM4CchqNCB4RITEAYB1KUM6A==}
     engines: {node: '>=20.19.0'}
@@ -7843,6 +10945,10 @@ packages:
     resolution: {integrity: sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==}
     engines: {node: '>=8'}
 
+  indent-string@5.0.0:
+    resolution: {integrity: sha512-m6FAo/spmsW2Ab2fU35JTYwtOKa2yAwXSwgjSv1TJzh4Mh7mC3lzAOVLBprb72XsTrgkEIsl7YrFNAiDiRhIGg==}
+    engines: {node: '>=12'}
+
   inflight@1.0.6:
     resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
     deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
@@ -7857,16 +10963,35 @@ packages:
     resolution: {integrity: sha512-ifK0CgjALofS5bkrcTy4RaQ9Vx2Knf/eLeIO+NaswQEpH1UblrtTSCIvN71qQDMq0PeQ/SSPojvEJp9vvvfr+w==}
     engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
 
+  ink@6.8.0:
+    resolution: {integrity: sha512-sbl1RdLOgkO9isK42WCZlJCFN9hb++sX9dsklOvfd1YQ3bQ2AiFu12Q6tFlr0HvEUvzraJntQCCpfEoUe9DSzA==}
+    engines: {node: '>=20'}
+    peerDependencies:
+      '@types/react': '>=19.0.0'
+      react: '>=19.0.0'
+      react-devtools-core: '>=6.1.2'
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      react-devtools-core:
+        optional: true
+
+  inline-style-parser@0.2.7:
+    resolution: {integrity: sha512-Nb2ctOyNR8DqQoR0OwRG95uNWIC0C1lCgf5Naz5H6Ji72KZ8OcFZLz2P5sNgwlyoJ8Yif11oMuYs5pBQa86csA==}
+
   input-otp@1.4.2:
     resolution: {integrity: sha512-l3jWwYNvrEa6NTCt7BECfCm48GvwuZzkoeG3gBL2w4CHeOXW3eKFmf9UNYkNfYc3mxMrthMnxjIE07MT0zLBQA==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
 
   internal-slot@1.1.0:
     resolution: {integrity: sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==}
     engines: {node: '>= 0.4'}
 
+  internmap@1.0.1:
+    resolution: {integrity: sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw==}
+
   internmap@2.0.3:
     resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==}
     engines: {node: '>=12'}
@@ -7878,6 +11003,15 @@ packages:
     resolution: {integrity: sha512-BXNqFQ66oOsR82g9ajFFsR8ZKrjVvYCLyeML9IvSMAsP56XH2VXBdZjmI11p65nXXJxTEt1hie3J2QeFJVgrtQ==}
     engines: {node: '>=12.22.0'}
 
+  iron-webcrypto@2.0.0:
+    resolution: {integrity: sha512-rtffZKDUHciZElM8mjFCufBC7nVhCxHYyWHESqs89OioEDz4parOofd8/uhrejh/INhQFfYQfByS22LlezR9sQ==}
+
+  is-alphabetical@2.0.1:
+    resolution: {integrity: sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==}
+
+  is-alphanumerical@2.0.1:
+    resolution: {integrity: sha512-hmbYhX/9MUMF5uh7tOXyK/n0ZvWpad5caBA17GsC6vyuCqaWliRG5K1qS9inmUhEMaOBIW7/whAnSwveW/LtZw==}
+
   is-array-buffer@3.0.5:
     resolution: {integrity: sha512-DDfANUiiG2wC1qawP66qlTugJeL5HyzMpfr8lLK+jMQirGzNod0B12cFB/9q838Ru27sBwfw78/rdoU7RERz6A==}
     engines: {node: '>= 0.4'}
@@ -7923,6 +11057,9 @@ packages:
     resolution: {integrity: sha512-PwwhEakHVKTdRNVOw+/Gyh0+MzlCl4R6qKvkhuvLtPMggI1WAHt9sOwZxQLSGpUaDnrdyDsomoRgNnCfKNSXXg==}
     engines: {node: '>= 0.4'}
 
+  is-decimal@2.0.1:
+    resolution: {integrity: sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A==}
+
   is-docker@2.2.1:
     resolution: {integrity: sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==}
     engines: {node: '>=8'}
@@ -7940,6 +11077,10 @@ packages:
     resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==}
     engines: {node: '>=8'}
 
+  is-fullwidth-code-point@5.1.0:
+    resolution: {integrity: sha512-5XHYaSyiqADb4RnZ1Bdad6cPp8Toise4TzEjcOYDHZkTCbKgiUl7WTUCpNWHuxmDt91wnsZBc9xinNzopv3JMQ==}
+    engines: {node: '>=18'}
+
   is-generator-fn@2.1.0:
     resolution: {integrity: sha512-cTIB4yPYL/Grw0EaSzASzg6bBy9gqCofvWN8okThAYIxKJZC+udlRAmGbM0XLeniEJSs8uEgHPGuHSe1XsOLSQ==}
     engines: {node: '>=6'}
@@ -7952,6 +11093,18 @@ packages:
     resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==}
     engines: {node: '>=0.10.0'}
 
+  is-hexadecimal@2.0.1:
+    resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}
+
+  is-in-ci@2.0.0:
+    resolution: {integrity: sha512-cFeerHriAnhrQSbpAxL37W1wcJKUUX07HyLWZCW1URJT/ra3GyUTzBgUnh24TMVfNTV2Hij2HLxkPHFZfOZy5w==}
+    engines: {node: '>=20'}
+    hasBin: true
+
+  is-interactive@1.0.0:
+    resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
+    engines: {node: '>=8'}
+
   is-map@2.0.3:
     resolution: {integrity: sha512-1Qed0/Hr2m+YqxnM09CjA2d/i6YZNfF6R2oRAOj36eUdS6qIV/huPJNSEpKbupewFs+ZsJlxsjjPbc0/afW6Lw==}
     engines: {node: '>= 0.4'}
@@ -7972,9 +11125,16 @@ packages:
     resolution: {integrity: sha512-YWnfyRwxL/+SsrWYfOpUtz5b3YD+nyfkHvjbcanzk8zgyO4ASD67uVMRt8k5bM4lLMDnXfriRhOpemw+NfT1eA==}
     engines: {node: '>=8'}
 
+  is-plain-obj@4.1.0:
+    resolution: {integrity: sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==}
+    engines: {node: '>=12'}
+
   is-potential-custom-element-name@1.0.1:
     resolution: {integrity: sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==}
 
+  is-promise@2.2.2:
+    resolution: {integrity: sha512-+lP4/6lKUBfQjZ2pdxThZvLUAafmZb8OAxFb8XXtiQmS35INgr85hdOGoEs124ez1FCnZJt6jau/T+alh58QFQ==}
+
   is-property@1.0.2:
     resolution: {integrity: sha512-Ks/IoX00TtClbGQr4TWXemAnktAQvYB7HzcCxDGqEZU6oCmb2INHuOoKxbtR+HFkmYWBKv/dOZtGRiAjDhj92g==}
 
@@ -8006,6 +11166,13 @@ packages:
     resolution: {integrity: sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==}
     engines: {node: '>= 0.4'}
 
+  is-unicode-supported@0.1.0:
+    resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
+    engines: {node: '>=10'}
+
+  is-unsafe@2.0.0:
+    resolution: {integrity: sha512-2LdV822R+wmI86unXA93WCFpL6g+av8ynWk0nrHyJqGop5VoocYsSLFgN8jrfalT6iGeLNM4KXuVSsULP53kEA==}
+
   is-weakmap@2.0.2:
     resolution: {integrity: sha512-K5pXYOm9wqY1RgjpL3YTkF39tni1XajUIkawTLUo9EZEVUFga5gSQJF8nNS7ZwJQ02y+1YCNYcMh+HIf1ZqE+w==}
     engines: {node: '>= 0.4'}
@@ -8022,6 +11189,9 @@ packages:
     resolution: {integrity: sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==}
     engines: {node: '>=8'}
 
+  isarray@1.0.0:
+    resolution: {integrity: sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==}
+
   isarray@2.0.5:
     resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
 
@@ -8032,6 +11202,12 @@ packages:
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
+  ismobilejs@1.1.1:
+    resolution: {integrity: sha512-VaFW53yt8QO61k2WJui0dHf4SlL8lxBofUuUmwBo0ljPk0Drz2TiuDW4jo3wDcv41qy/SxrJ+VAzJ/qYqsmzRw==}
+
+  isomorphic.js@0.2.5:
+    resolution: {integrity: sha512-PIeMbHqMt4DnUP3MA/Flc0HElYjMXArsw1qwJZcm9sqR8mq3l8NYizFMty0pWwE/tzIGH3EKK5+jes5mAr85yw==}
+
   istanbul-lib-coverage@3.2.2:
     resolution: {integrity: sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==}
     engines: {node: '>=8'}
@@ -8060,6 +11236,15 @@ packages:
     resolution: {integrity: sha512-H0dkQoCa3b2VEeKQBOxFph+JAbcrQdE7KC0UkqwpLmv2EC4P41QXP+rqo9wYodACiG5/WM5s9oDApTU8utwj9g==}
     engines: {node: '>= 0.4'}
 
+  its-fine@2.0.0:
+    resolution: {integrity: sha512-KLViCmWx94zOvpLwSlsx6yOCeMhZYaxrJV87Po5k/FoZzcPSahvK5qJ7fYhS61sZi5ikmh2S3Hz55A2l3U69ng==}
+    peerDependencies:
+      react: ^19.0.0
+
+  jackspeak@2.3.6:
+    resolution: {integrity: sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==}
+    engines: {node: '>=14'}
+
   jest-changed-files@29.7.0:
     resolution: {integrity: sha512-fEArFiwf1BpQ+4bXSprcDc3/x4HSzL4al2tozwVpDFpsxALjLYdyiIK4e5Vz66GQJIbXJ82+35PtysofptNX2w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -8244,6 +11429,12 @@ packages:
     resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
     engines: {node: '>=10'}
 
+  js-base64@3.8.1:
+    resolution: {integrity: sha512-5xVjhUZlHHeuO2W7w2rDFj/Kl1xLX+HjZxdOQwCsUOifl6UaoH1o1wsbsTMz+r0aeC7gCijvru02j6TfKZWzKg==}
+
+  js-binary-schema-parser@2.0.3:
+    resolution: {integrity: sha512-xezGJmOb4lk/M1ZZLTR/jaBHQ4gG/lqQnJqdIv4721DMggsa1bDVlHXNeHYogaIEHD9vCRv0fcL4hMA+Coarkg==}
+
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
@@ -8258,6 +11449,9 @@ packages:
     resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
     hasBin: true
 
+  jsbi@4.3.2:
+    resolution: {integrity: sha512-9fqMSQbhJykSeii05nxKl4m6Eqn2P6rOlYiS+C5Dr/HPIU/7yZxu5qzbs40tgaFORiw2Amd0mirjxatXYMkIew==}
+
   jsc-safe-url@0.2.4:
     resolution: {integrity: sha512-0wM3YBWtYePOjfyXQH5MWQ8H7sdk5EXSwZvmSLKk2RboVQ2Bu239jycHDz5J/8Blf3K0Qnoy2b6xD+z10MFB+Q==}
 
@@ -8296,9 +11490,15 @@ packages:
   json-schema-traverse@1.0.0:
     resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
 
+  json-schema@0.4.0:
+    resolution: {integrity: sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==}
+
   json-stable-stringify-without-jsonify@1.0.1:
     resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
 
+  json-with-bigint@3.5.10:
+    resolution: {integrity: sha512-Vcx+JVNEBts/xfcoCS69sKrOhOk/3TVlvlT+XzUOefVKnnrbYSCKpDCm10pohsJFtsJVYnwa/cXRZ4eElzaM6w==}
+
   json5@1.0.2:
     resolution: {integrity: sha512-g1MWMLBiz8FKi1e4w0UyVL3w+iJceWAFBAaBnnGKOpNa5f8TLktkbre1+s6oICydWAm+HRUGTmI+//xv2hvXYA==}
     hasBin: true
@@ -8311,13 +11511,36 @@ packages:
   jsonc-parser@3.3.1:
     resolution: {integrity: sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==}
 
+  jsonwebtoken@9.0.3:
+    resolution: {integrity: sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==}
+    engines: {node: '>=12', npm: '>=6'}
+
+  jsrsasign@11.1.3:
+    resolution: {integrity: sha512-nPnK5D/4lv0Dwr7TlzrKtAd8JlLZwFTqTUUB3NQCbtdobcRcohGFxjbPySDVh74iWUudcCsapYT6OxoyhJLhhA==}
+
   jsx-ast-utils@3.3.5:
     resolution: {integrity: sha512-ZZow9HBI5O6EPgSJLUb8n2NKgmVWTwCvHGwFuJlMjvLFqlGG6pjirPhtdsseaLZjSibD8eegzmYpUZwoIlj2cQ==}
     engines: {node: '>=4.0'}
 
+  jszip@3.10.1:
+    resolution: {integrity: sha512-xXDvecyTpGLrqFrvkrUSoxxfJI5AH7U8zxxtVclpsUtMCq4JQ290LY8AW5c7Ggnr/Y/oK+bQMbqK2qmtk3pN4g==}
+
+  jwa@2.0.1:
+    resolution: {integrity: sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==}
+
+  jws@4.0.1:
+    resolution: {integrity: sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==}
+
+  katex@0.16.47:
+    resolution: {integrity: sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==}
+    hasBin: true
+
   keyv@4.5.4:
     resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
 
+  khroma@2.1.0:
+    resolution: {integrity: sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw==}
+
   kleur@3.0.3:
     resolution: {integrity: sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==}
     engines: {node: '>=6'}
@@ -8333,6 +11556,15 @@ packages:
     resolution: {integrity: sha512-mnIlAEMu4OyEvUNdzco9xpuB9YVcPkQec+QsgycBCtPZvEqWPCDPfbAE4OJMdBBWpZWtpCn1xw9jJYlwjWI5zQ==}
     hasBin: true
 
+  layout-base@1.0.2:
+    resolution: {integrity: sha512-8h2oVEZNktL4BH2JCOI90iD1yXwL6iNW7KcCKT2QZgQJR2vbqDsldCTPRU9NifTCqHZci57XvQQ15YTu+sTYPg==}
+
+  layout-base@2.0.1:
+    resolution: {integrity: sha512-dp3s92+uNI1hWIpPGH3jK2kxE2lMjdXdr+DH8ynZHpd6PUlH6x6cbuXnoMmiNumznqaNO31xu9e79F0uuZ0JFg==}
+
+  leac@0.6.0:
+    resolution: {integrity: sha512-y+SqErxb8h7nE/fiEX07jsbuhrpO9lL8eca7/Y1nuWV2moNlXhyd59iDGcRf6moVyDMbmTNzL40SUyrFU/yDpg==}
+
   leven@3.1.0:
     resolution: {integrity: sha512-qsda+H8jTaUaN/x5vzW2rzc+8Rw4TAQ/4KjB46IwK5VH+IlVeeeje/EoZRpiXvIqjFgK84QffqPztGI3VBLG1A==}
     engines: {node: '>=6'}
@@ -8341,122 +11573,85 @@ packages:
     resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
     engines: {node: '>= 0.8.0'}
 
+  lib0@0.2.117:
+    resolution: {integrity: sha512-DeXj9X5xDCjgKLU/7RR+/HQEVzuuEUiwldwOGsHK/sfAfELGWEyTcf0x+uOvCvK3O2zPmZePXWL85vtia6GyZw==}
+    engines: {node: '>=16'}
+    hasBin: true
+
+  libsodium-wrappers@0.8.4:
+    resolution: {integrity: sha512-mu8aAWucZjTB5O/BtGXtW4e1agy7uHxNYG7zPthmmD1jU43LCDmSWZLN4JhflbdPXj3yDO4lxM1O9hLDgIOXDw==}
+
+  libsodium@0.8.4:
+    resolution: {integrity: sha512-lMcYaRi0zcs7tarATsQUYC7rstliIXZuoq0c6zXSgNtSNtdvBgkSegjWhpMJAXzKX3SUSwIp7+zEsob+j3LuRw==}
+
+  libsql@0.5.29:
+    resolution: {integrity: sha512-8lMP8iMgiBzzoNbAPQ59qdVcj6UaE/Vnm+fiwX4doX4Narook0a4GPKWBEv+CR8a1OwbfkgL18uBfBjWdF0Fzg==}
+    cpu: [x64, arm64, wasm32, arm]
+    os: [darwin, linux, win32]
+
+  lie@3.3.0:
+    resolution: {integrity: sha512-UaiMJzeWRlEujzAuw5LokY1L5ecNQYZKfmyZ9L7wDHb/p5etKaxXhohBcrw0EYby+G/NA52vRSN4N39dxHAIwQ==}
+
   lighthouse-logger@1.4.2:
     resolution: {integrity: sha512-gPWxznF6TKmUHrOQjlVo2UbaL2EJ71mb2CCeRs/2qBpi4L/g4LUVc9+3lKQ6DTUZwJswfM7ainGrLO1+fOqa2g==}
 
-  lightningcss-android-arm64@1.30.2:
-    resolution: {integrity: sha512-BH9sEdOCahSgmkVhBLeU7Hc9DWeZ1Eb6wNS6Da8igvUwAe0sqROHddIlvU06q3WyXVEOYDZ6ykBZQnjTbmo4+A==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [arm64]
-    os: [android]
-
   lightningcss-android-arm64@1.32.0:
     resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [android]
 
-  lightningcss-darwin-arm64@1.30.2:
-    resolution: {integrity: sha512-ylTcDJBN3Hp21TdhRT5zBOIi73P6/W0qwvlFEk22fkdXchtNTOU4Qc37SkzV+EKYxLouZ6M4LG9NfZ1qkhhBWA==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [arm64]
-    os: [darwin]
-
   lightningcss-darwin-arm64@1.32.0:
     resolution: {integrity: sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [darwin]
 
-  lightningcss-darwin-x64@1.30.2:
-    resolution: {integrity: sha512-oBZgKchomuDYxr7ilwLcyms6BCyLn0z8J0+ZZmfpjwg9fRVZIR5/GMXd7r9RH94iDhld3UmSjBM6nXWM2TfZTQ==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [x64]
-    os: [darwin]
-
   lightningcss-darwin-x64@1.32.0:
     resolution: {integrity: sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [darwin]
 
-  lightningcss-freebsd-x64@1.30.2:
-    resolution: {integrity: sha512-c2bH6xTrf4BDpK8MoGG4Bd6zAMZDAXS569UxCAGcA7IKbHNMlhGQ89eRmvpIUGfKWNVdbhSbkQaWhEoMGmGslA==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [x64]
-    os: [freebsd]
-
   lightningcss-freebsd-x64@1.32.0:
     resolution: {integrity: sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [freebsd]
 
-  lightningcss-linux-arm-gnueabihf@1.30.2:
-    resolution: {integrity: sha512-eVdpxh4wYcm0PofJIZVuYuLiqBIakQ9uFZmipf6LF/HRj5Bgm0eb3qL/mr1smyXIS1twwOxNWndd8z0E374hiA==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [arm]
-    os: [linux]
-
   lightningcss-linux-arm-gnueabihf@1.32.0:
     resolution: {integrity: sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm]
     os: [linux]
 
-  lightningcss-linux-arm64-gnu@1.30.2:
-    resolution: {integrity: sha512-UK65WJAbwIJbiBFXpxrbTNArtfuznvxAJw4Q2ZGlU8kPeDIWEX1dg3rn2veBVUylA2Ezg89ktszWbaQnxD/e3A==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [arm64]
-    os: [linux]
-
   lightningcss-linux-arm64-gnu@1.32.0:
     resolution: {integrity: sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [linux]
-
-  lightningcss-linux-arm64-musl@1.30.2:
-    resolution: {integrity: sha512-5Vh9dGeblpTxWHpOx8iauV02popZDsCYMPIgiuw97OJ5uaDsL86cnqSFs5LZkG3ghHoX5isLgWzMs+eD1YzrnA==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [arm64]
-    os: [linux]
+    libc: [glibc]
 
   lightningcss-linux-arm64-musl@1.32.0:
     resolution: {integrity: sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [linux]
-
-  lightningcss-linux-x64-gnu@1.30.2:
-    resolution: {integrity: sha512-Cfd46gdmj1vQ+lR6VRTTadNHu6ALuw2pKR9lYq4FnhvgBc4zWY1EtZcAc6EffShbb1MFrIPfLDXD6Xprbnni4w==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [x64]
-    os: [linux]
+    libc: [musl]
 
   lightningcss-linux-x64-gnu@1.32.0:
     resolution: {integrity: sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [linux]
-
-  lightningcss-linux-x64-musl@1.30.2:
-    resolution: {integrity: sha512-XJaLUUFXb6/QG2lGIW6aIk6jKdtjtcffUT0NKvIqhSBY3hh9Ch+1LCeH80dR9q9LBjG3ewbDjnumefsLsP6aiA==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [x64]
-    os: [linux]
+    libc: [glibc]
 
   lightningcss-linux-x64-musl@1.32.0:
     resolution: {integrity: sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [linux]
-
-  lightningcss-win32-arm64-msvc@1.30.2:
-    resolution: {integrity: sha512-FZn+vaj7zLv//D/192WFFVA0RgHawIcHqLX9xuWiQt7P0PtdFEVaxgF9rjM/IRYHQXNnk61/H/gb2Ei+kUQ4xQ==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [arm64]
-    os: [win32]
+    libc: [musl]
 
   lightningcss-win32-arm64-msvc@1.32.0:
     resolution: {integrity: sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==}
@@ -8464,22 +11659,12 @@ packages:
     cpu: [arm64]
     os: [win32]
 
-  lightningcss-win32-x64-msvc@1.30.2:
-    resolution: {integrity: sha512-5g1yc73p+iAkid5phb4oVFMB45417DkRevRbt/El/gKXJk4jid+vPFF/AXbxn05Aky8PapwzZrdJShv5C0avjw==}
-    engines: {node: '>= 12.0.0'}
-    cpu: [x64]
-    os: [win32]
-
   lightningcss-win32-x64-msvc@1.32.0:
     resolution: {integrity: sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [win32]
 
-  lightningcss@1.30.2:
-    resolution: {integrity: sha512-utfs7Pr5uJyyvDETitgsaqSyjCb2qNRAtuqUeWIAKztsOYdcACf2KtARYXg2pSvhkt+9NfoaNY7fxjl6nuMjIQ==}
-    engines: {node: '>= 12.0.0'}
-
   lightningcss@1.32.0:
     resolution: {integrity: sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==}
     engines: {node: '>= 12.0.0'}
@@ -8503,21 +11688,45 @@ packages:
     resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
     engines: {node: '>=10'}
 
+  lodash-es@4.18.1:
+    resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==}
+
   lodash.debounce@4.0.8:
     resolution: {integrity: sha512-FT1yDzDYEoYWhnSGnpE/4Kj1fLZkDFyqRb7fNt6FdYOSxlUWAtp42Eh6Wb0rGIv/m9Bgo7x4GhQbm5Ys4SG5ow==}
 
   lodash.defaults@4.2.0:
     resolution: {integrity: sha512-qjxPLHd3r5DnsdGacqOMU6pb/avJzdh9tFX2ymgoZE27BmjXrNy/y4LoaiTeAb+O3gL8AfpJGtqfX/ae2leYYQ==}
 
+  lodash.includes@4.3.0:
+    resolution: {integrity: sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==}
+
   lodash.isarguments@3.1.0:
     resolution: {integrity: sha512-chi4NHZlZqZD18a0imDHnZPrDeBbTtVN7GXMwuGdRH9qotxAjYs3aVLKc7zNOG9eddR5Ksd8rvFEBc9SsggPpg==}
 
+  lodash.isboolean@3.0.3:
+    resolution: {integrity: sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==}
+
+  lodash.isinteger@4.0.4:
+    resolution: {integrity: sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==}
+
+  lodash.isnumber@3.0.3:
+    resolution: {integrity: sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==}
+
+  lodash.isplainobject@4.0.6:
+    resolution: {integrity: sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==}
+
+  lodash.isstring@4.0.1:
+    resolution: {integrity: sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==}
+
   lodash.memoize@4.1.2:
     resolution: {integrity: sha512-t7j+NzmgnQzTAYXcsHYLgimltOV1MXHtlOWf6GjL9Kj8GK5FInw5JotxvbOs+IvV1/Dzo04/fCGfLVs7aXb4Ag==}
 
   lodash.merge@4.6.2:
     resolution: {integrity: sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==}
 
+  lodash.once@4.1.1:
+    resolution: {integrity: sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==}
+
   lodash.throttle@4.1.1:
     resolution: {integrity: sha512-wIkUCfVKpVsWo3JSZlc+8MB5it+2AN5W8J7YVMST30UrvcQNZ1Okbj+rbVniijTWE6FGYy4XJq/rHkas8qJMLQ==}
 
@@ -8529,9 +11738,16 @@ packages:
     resolution: {integrity: sha512-VeIAFslyIerEJLXHziedo2basKbMKtTw3vfn5IzG0XTjhAVEJyNHnL2p7vc+wBDSdQuUpNw3M2u6xb9QsAY5Eg==}
     engines: {node: '>=4'}
 
+  log-symbols@4.1.0:
+    resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
+    engines: {node: '>=10'}
+
   long@5.3.2:
     resolution: {integrity: sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==}
 
+  longest-streak@3.1.0:
+    resolution: {integrity: sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==}
+
   loose-envify@1.4.0:
     resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==}
     hasBin: true
@@ -8556,17 +11772,32 @@ packages:
   lucide-react@0.513.0:
     resolution: {integrity: sha512-CJZKq2g8Y8yN4Aq002GahSXbG2JpFv9kXwyiOAMvUBv7pxeOFHUWKB0mO7MiY4ZVFCV4aNjv2BJFq/z3DgKPQg==}
     peerDependencies:
-      react: 19.1.0
+      react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
   lucide-react@0.555.0:
     resolution: {integrity: sha512-D8FvHUGbxWBRQM90NZeIyhAvkFfsh3u9ekrMvJ30Z6gnpBHS6HC6ldLg7tL45hwiIz/u66eKDtdA23gwwGsAHA==}
     peerDependencies:
-      react: 19.1.0
+      react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
+  lucide-static@0.555.0:
+    resolution: {integrity: sha512-FMMaYYsEYsUA6xlEzIMoKEV3oGnxIIvAN+AtLmYXvlTJptJTveJjVBQwvtA/zZLrD6KLEu89G95dQYlhivw5jQ==}
 
   lz-string@1.5.0:
     resolution: {integrity: sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==}
     hasBin: true
 
+  maath@0.10.8:
+    resolution: {integrity: sha512-tRvbDF0Pgqz+9XUa4jjfgAQ8/aPKmQdWXilFu2tMy4GWj4NOsx99HlULO4IeREfbO3a0sA145DZYyvXPkybm0g==}
+    peerDependencies:
+      '@types/three': '>=0.134.0'
+      three: '>=0.134.0'
+
+  maath@0.6.0:
+    resolution: {integrity: sha512-dSb2xQuP7vDnaYqfoKzlApeRcR2xtN8/f7WV/TMAkBC8552TwTLtOO0JTcSygkYMjNDPoo6V01jTw/aPi4JrMw==}
+    peerDependencies:
+      '@types/three': '>=0.144.0'
+      three: '>=0.144.0'
+
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
@@ -8584,6 +11815,28 @@ packages:
   makeerror@1.0.12:
     resolution: {integrity: sha512-JmqCvUhmt43madlpFzG4BQzG2Z3m6tvQDNKdClZnO3VbIudJYmxsT0FNJMeiB2+JTSlTQTSbU8QdesVmwJcmLg==}
 
+  markdown-extensions@2.0.0:
+    resolution: {integrity: sha512-o5vL7aDWatOTX8LzaS1WMoaoxIiLRQJuIKKe2wAw6IeULDHaqbiqiggmx+pKvZDb1Sj+pE46Sn1T7lCqfFtg1Q==}
+    engines: {node: '>=16'}
+
+  markdown-table@3.0.4:
+    resolution: {integrity: sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==}
+
+  marked@16.4.2:
+    resolution: {integrity: sha512-TI3V8YYWvkVf3KJe1dRkpnjs68JUPyEa5vjKrp1XEEJUAOaQc+Qj+L1qWbPd0SJuAdQkFU0h73sXXqwDYxsiDA==}
+    engines: {node: '>= 20'}
+    hasBin: true
+
+  marked@17.0.6:
+    resolution: {integrity: sha512-gB0gkNafnonOw0obSTEGZTT86IuhILt2Wfx0mWH/1Au83kybTayroZ/V6nS25mN7u8ASy+5fMhgB3XPNrOZdmA==}
+    engines: {node: '>= 20'}
+    hasBin: true
+
+  marked@7.0.4:
+    resolution: {integrity: sha512-t8eP0dXRJMtMvBojtkcsA7n48BkauktUKzfkPSCq85ZMTJ0v76Rke4DYz01omYpPTUh4p/f7HePgRo3ebG8+QQ==}
+    engines: {node: '>= 16'}
+    hasBin: true
+
   marky@1.3.0:
     resolution: {integrity: sha512-ocnPZQLNpvbedwTy9kNrQEsknEfgvcLMvOtz3sFeWApDq1MXH1TqkCIx58xlpESsfwQOnuBO9beyQuNGzVvuhQ==}
 
@@ -8591,6 +11844,59 @@ packages:
     resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
     engines: {node: '>= 0.4'}
 
+  md-to-react-email@5.0.5:
+    resolution: {integrity: sha512-OvAXqwq57uOk+WZqFFNCMZz8yDp8BD3WazW1wAKHUrPbbdr89K9DWS6JXY09vd9xNdPNeurI8DU/X4flcfaD8A==}
+    peerDependencies:
+      react: ^18.0 || ^19.0
+
+  mdast-util-find-and-replace@3.0.2:
+    resolution: {integrity: sha512-Tmd1Vg/m3Xz43afeNxDIhWRtFZgM2VLyaf4vSTYwudTyeuTneoL3qtWMA5jeLyz/O1vDJmmV4QuScFCA2tBPwg==}
+
+  mdast-util-from-markdown@2.0.3:
+    resolution: {integrity: sha512-W4mAWTvSlKvf8L6J+VN9yLSqQ9AOAAvHuoDAmPkz4dHf553m5gVj2ejadHJhoJmcmxEnOv6Pa8XJhpxE93kb8Q==}
+
+  mdast-util-gfm-autolink-literal@2.0.1:
+    resolution: {integrity: sha512-5HVP2MKaP6L+G6YaxPNjuL0BPrq9orG3TsrZ9YXbA3vDw/ACI4MEsnoDpn6ZNm7GnZgtAcONJyPhOP8tNJQavQ==}
+
+  mdast-util-gfm-footnote@2.1.0:
+    resolution: {integrity: sha512-sqpDWlsHn7Ac9GNZQMeUzPQSMzR6Wv0WKRNvQRg0KqHh02fpTz69Qc1QSseNX29bhz1ROIyNyxExfawVKTm1GQ==}
+
+  mdast-util-gfm-strikethrough@2.0.0:
+    resolution: {integrity: sha512-mKKb915TF+OC5ptj5bJ7WFRPdYtuHv0yTRxK2tJvi+BDqbkiG7h7u/9SI89nRAYcmap2xHQL9D+QG/6wSrTtXg==}
+
+  mdast-util-gfm-table@2.0.0:
+    resolution: {integrity: sha512-78UEvebzz/rJIxLvE7ZtDd/vIQ0RHv+3Mh5DR96p7cS7HsBhYIICDBCu8csTNWNO6tBWfqXPWekRuj2FNOGOZg==}
+
+  mdast-util-gfm-task-list-item@2.0.0:
+    resolution: {integrity: sha512-IrtvNvjxC1o06taBAVJznEnkiHxLFTzgonUdy8hzFVeDun0uTjxxrRGVaNFqkU1wJR3RBPEfsxmU6jDWPofrTQ==}
+
+  mdast-util-gfm@3.1.0:
+    resolution: {integrity: sha512-0ulfdQOM3ysHhCJ1p06l0b0VKlhU0wuQs3thxZQagjcjPrlFRqY215uZGHHJan9GEAXd9MbfPjFJz+qMkVR6zQ==}
+
+  mdast-util-mdx-expression@2.0.1:
+    resolution: {integrity: sha512-J6f+9hUp+ldTZqKRSg7Vw5V6MqjATc+3E4gf3CFNcuZNWD8XdyI6zQ8GqH7f8169MM6P7hMBRDVGnn7oHB9kXQ==}
+
+  mdast-util-mdx-jsx@3.2.0:
+    resolution: {integrity: sha512-lj/z8v0r6ZtsN/cGNNtemmmfoLAFZnjMbNyLzBafjzikOM+glrjNHPlf6lQDOTccj9n5b0PPihEBbhneMyGs1Q==}
+
+  mdast-util-mdx@3.0.0:
+    resolution: {integrity: sha512-JfbYLAW7XnYTTbUsmpu0kdBUVe+yKVJZBItEjwyYJiDJuZ9w4eeaqks4HQO+R7objWgS2ymV60GYpI14Ug554w==}
+
+  mdast-util-mdxjs-esm@2.0.1:
+    resolution: {integrity: sha512-EcmOpxsZ96CvlP03NghtH1EsLtr0n9Tm4lPUJUBccV9RwUOneqSycg19n5HGzCf+10LozMRSObtVr3ee1WoHtg==}
+
+  mdast-util-phrasing@4.1.0:
+    resolution: {integrity: sha512-TqICwyvJJpBwvGAMZjj4J2n0X8QWp21b9l0o7eXyVJ25YNWYbJDVIyD1bZXE6WtV6RmKJVYmQAKWa0zWOABz2w==}
+
+  mdast-util-to-hast@13.2.1:
+    resolution: {integrity: sha512-cctsq2wp5vTsLIcaymblUriiTcZd0CwWtCbLvrOzYCDZoWyMNV8sZ7krj09FSnsiJi3WVsHLM4k6Dq/yaPyCXA==}
+
+  mdast-util-to-markdown@2.1.2:
+    resolution: {integrity: sha512-xj68wMTvGXVOKonmog6LwyJKrYXZPvlwabaryTjLh9LuvovB/KAH+kvi8Gjj+7rJjsFi23nkUxRQv1KqSroMqA==}
+
+  mdast-util-to-string@4.0.0:
+    resolution: {integrity: sha512-0H44vDimn51F0YwvxSJSm0eCDOJTRlmN0R1yBh4HLj9wiV1Dn0QoXGbvFAWj2hSItVTlCmBF1hqKlIyUBVFLPg==}
+
   mdn-data@2.0.14:
     resolution: {integrity: sha512-dn6wd0uw5GsdswPFfsgMp5NSB0/aDe6fK94YJV/AJDYXL6HVLWBsxeq7js7Ad+mU2K9LAlwpk6kN2D5mwCPVow==}
 
@@ -8608,6 +11914,17 @@ packages:
     resolution: {integrity: sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==}
     engines: {node: '>= 8'}
 
+  mermaid@11.16.0:
+    resolution: {integrity: sha512-Zvm3kbstgdpvIJPPItlL7fppIZ3kibvc1oZIGxdvk9t6UFz6flv+Jw7FtRGKwfcI8OckmH04LqG6LlS6X4B1pA==}
+
+  meshline@3.3.1:
+    resolution: {integrity: sha512-/TQj+JdZkeSUOl5Mk2J7eLcYTLiQm2IDzmlSvYm7ov15anEcDJ92GHqqazxTSreeNgfnYu24kiEvvv0WlbCdFQ==}
+    peerDependencies:
+      three: '>=0.137'
+
+  meshoptimizer@1.1.1:
+    resolution: {integrity: sha512-oRFNWJRDA/WTrVj7NWvqa5HqE1t9MYDj2VaWirQCzCCrAd2GHrqR/sQezCxiWATPNlKTcRaPRHPJwIRoPBAp5g==}
+
   metro-babel-transformer@0.83.3:
     resolution: {integrity: sha512-1vxlvj2yY24ES1O5RsSIvg4a4WeL7PFXgKOHvXTXiW0deLvQr28ExXj6LjwCCDZ4YZLhq6HddLpZnX4dEdSq5g==}
     engines: {node: '>=20.19.4'}
@@ -8666,6 +11983,111 @@ packages:
     engines: {node: '>=20.19.4'}
     hasBin: true
 
+  micromark-core-commonmark@2.0.3:
+    resolution: {integrity: sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==}
+
+  micromark-extension-gfm-autolink-literal@2.1.0:
+    resolution: {integrity: sha512-oOg7knzhicgQ3t4QCjCWgTmfNhvQbDDnJeVu9v81r7NltNCVmhPy1fJRX27pISafdjL+SVc4d3l48Gb6pbRypw==}
+
+  micromark-extension-gfm-footnote@2.1.0:
+    resolution: {integrity: sha512-/yPhxI1ntnDNsiHtzLKYnE3vf9JZ6cAisqVDauhp4CEHxlb4uoOTxOCJ+9s51bIB8U1N1FJ1RXOKTIlD5B/gqw==}
+
+  micromark-extension-gfm-strikethrough@2.1.0:
+    resolution: {integrity: sha512-ADVjpOOkjz1hhkZLlBiYA9cR2Anf8F4HqZUO6e5eDcPQd0Txw5fxLzzxnEkSkfnD0wziSGiv7sYhk/ktvbf1uw==}
+
+  micromark-extension-gfm-table@2.1.1:
+    resolution: {integrity: sha512-t2OU/dXXioARrC6yWfJ4hqB7rct14e8f7m0cbI5hUmDyyIlwv5vEtooptH8INkbLzOatzKuVbQmAYcbWoyz6Dg==}
+
+  micromark-extension-gfm-tagfilter@2.0.0:
+    resolution: {integrity: sha512-xHlTOmuCSotIA8TW1mDIM6X2O1SiX5P9IuDtqGonFhEK0qgRI4yeC6vMxEV2dgyr2TiD+2PQ10o+cOhdVAcwfg==}
+
+  micromark-extension-gfm-task-list-item@2.1.0:
+    resolution: {integrity: sha512-qIBZhqxqI6fjLDYFTBIa4eivDMnP+OZqsNwmQ3xNLE4Cxwc+zfQEfbs6tzAo2Hjq+bh6q5F+Z8/cksrLFYWQQw==}
+
+  micromark-extension-gfm@3.0.0:
+    resolution: {integrity: sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w==}
+
+  micromark-extension-mdx-expression@3.0.1:
+    resolution: {integrity: sha512-dD/ADLJ1AeMvSAKBwO22zG22N4ybhe7kFIZ3LsDI0GlsNr2A3KYxb0LdC1u5rj4Nw+CHKY0RVdnHX8vj8ejm4Q==}
+
+  micromark-extension-mdx-jsx@3.0.2:
+    resolution: {integrity: sha512-e5+q1DjMh62LZAJOnDraSSbDMvGJ8x3cbjygy2qFEi7HCeUT4BDKCvMozPozcD6WmOt6sVvYDNBKhFSz3kjOVQ==}
+
+  micromark-extension-mdx-md@2.0.0:
+    resolution: {integrity: sha512-EpAiszsB3blw4Rpba7xTOUptcFeBFi+6PY8VnJ2hhimH+vCQDirWgsMpz7w1XcZE7LVrSAUGb9VJpG9ghlYvYQ==}
+
+  micromark-extension-mdxjs-esm@3.0.0:
+    resolution: {integrity: sha512-DJFl4ZqkErRpq/dAPyeWp15tGrcrrJho1hKK5uBS70BCtfrIFg81sqcTVu3Ta+KD1Tk5vAtBNElWxtAa+m8K9A==}
+
+  micromark-extension-mdxjs@3.0.0:
+    resolution: {integrity: sha512-A873fJfhnJ2siZyUrJ31l34Uqwy4xIFmvPY1oj+Ean5PHcPBYzEsvqvWGaWcfEIr11O5Dlw3p2y0tZWpKHDejQ==}
+
+  micromark-factory-destination@2.0.1:
+    resolution: {integrity: sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA==}
+
+  micromark-factory-label@2.0.1:
+    resolution: {integrity: sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg==}
+
+  micromark-factory-mdx-expression@2.0.3:
+    resolution: {integrity: sha512-kQnEtA3vzucU2BkrIa8/VaSAsP+EJ3CKOvhMuJgOEGg9KDC6OAY6nSnNDVRiVNRqj7Y4SlSzcStaH/5jge8JdQ==}
+
+  micromark-factory-space@2.0.1:
+    resolution: {integrity: sha512-zRkxjtBxxLd2Sc0d+fbnEunsTj46SWXgXciZmHq0kDYGnck/ZSGj9/wULTV95uoeYiK5hRXP2mJ98Uo4cq/LQg==}
+
+  micromark-factory-title@2.0.1:
+    resolution: {integrity: sha512-5bZ+3CjhAd9eChYTHsjy6TGxpOFSKgKKJPJxr293jTbfry2KDoWkhBb6TcPVB4NmzaPhMs1Frm9AZH7OD4Cjzw==}
+
+  micromark-factory-whitespace@2.0.1:
+    resolution: {integrity: sha512-Ob0nuZ3PKt/n0hORHyvoD9uZhr+Za8sFoP+OnMcnWK5lngSzALgQYKMr9RJVOWLqQYuyn6ulqGWSXdwf6F80lQ==}
+
+  micromark-util-character@2.1.1:
+    resolution: {integrity: sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q==}
+
+  micromark-util-chunked@2.0.1:
+    resolution: {integrity: sha512-QUNFEOPELfmvv+4xiNg2sRYeS/P84pTW0TCgP5zc9FpXetHY0ab7SxKyAQCNCc1eK0459uoLI1y5oO5Vc1dbhA==}
+
+  micromark-util-classify-character@2.0.1:
+    resolution: {integrity: sha512-K0kHzM6afW/MbeWYWLjoHQv1sgg2Q9EccHEDzSkxiP/EaagNzCm7T/WMKZ3rjMbvIpvBiZgwR3dKMygtA4mG1Q==}
+
+  micromark-util-combine-extensions@2.0.1:
+    resolution: {integrity: sha512-OnAnH8Ujmy59JcyZw8JSbK9cGpdVY44NKgSM7E9Eh7DiLS2E9RNQf0dONaGDzEG9yjEl5hcqeIsj4hfRkLH/Bg==}
+
+  micromark-util-decode-numeric-character-reference@2.0.2:
+    resolution: {integrity: sha512-ccUbYk6CwVdkmCQMyr64dXz42EfHGkPQlBj5p7YVGzq8I7CtjXZJrubAYezf7Rp+bjPseiROqe7G6foFd+lEuw==}
+
+  micromark-util-decode-string@2.0.1:
+    resolution: {integrity: sha512-nDV/77Fj6eH1ynwscYTOsbK7rR//Uj0bZXBwJZRfaLEJ1iGBR6kIfNmlNqaqJf649EP0F3NWNdeJi03elllNUQ==}
+
+  micromark-util-encode@2.0.1:
+    resolution: {integrity: sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==}
+
+  micromark-util-events-to-acorn@2.0.3:
+    resolution: {integrity: sha512-jmsiEIiZ1n7X1Rr5k8wVExBQCg5jy4UXVADItHmNk1zkwEVhBuIUKRu3fqv+hs4nxLISi2DQGlqIOGiFxgbfHg==}
+
+  micromark-util-html-tag-name@2.0.1:
+    resolution: {integrity: sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA==}
+
+  micromark-util-normalize-identifier@2.0.1:
+    resolution: {integrity: sha512-sxPqmo70LyARJs0w2UclACPUUEqltCkJ6PhKdMIDuJ3gSf/Q+/GIe3WKl0Ijb/GyH9lOpUkRAO2wp0GVkLvS9Q==}
+
+  micromark-util-resolve-all@2.0.1:
+    resolution: {integrity: sha512-VdQyxFWFT2/FGJgwQnJYbe1jjQoNTS4RjglmSjTUlpUMa95Htx9NHeYW4rGDJzbjvCsl9eLjMQwGeElsqmzcHg==}
+
+  micromark-util-sanitize-uri@2.0.1:
+    resolution: {integrity: sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ==}
+
+  micromark-util-subtokenize@2.1.0:
+    resolution: {integrity: sha512-XQLu552iSctvnEcgXw6+Sx75GflAPNED1qx7eBJ+wydBb2KCbRZe+NwvIEEMM83uml1+2WSXpBAcp9IUCgCYWA==}
+
+  micromark-util-symbol@2.0.1:
+    resolution: {integrity: sha512-vs5t8Apaud9N28kgCrRUdEed4UJ+wWNvicHLPxCa9ENlYuAY31M0ETy5y1vA33YoNPDFTghEbnh6efaE8h4x0Q==}
+
+  micromark-util-types@2.0.2:
+    resolution: {integrity: sha512-Yw0ECSpJoViF1qTU4DC6NwtC4aWGt1EkzaQB8KPPyCRR8z9TWeV0HbEFGTO+ZY1wB22zmxnJqhPyTpOVCpeHTA==}
+
+  micromark@4.0.2:
+    resolution: {integrity: sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==}
+
   micromatch@4.0.8:
     resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
     engines: {node: '>=8.6'}
@@ -8734,6 +12156,29 @@ packages:
   mlly@1.8.2:
     resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
 
+  monaco-editor@0.52.2:
+    resolution: {integrity: sha512-GEQWEZmfkOGLdd3XK8ryrfWz3AIP8YymVXiPHEdewrUq7mh0qrKrfHLNCXcbB6sTnMLnOZ3ztSiKcciFUkIJwQ==}
+
+  motion-dom@12.42.2:
+    resolution: {integrity: sha512-5gIMWLp/PycBtJRJWRgjxke5n8dlvkSn2DrYW+tr3XcqAZY1xZh6BJyooJXCM8wdfM7wfMjkBJNLge1CKPUIRA==}
+
+  motion-utils@12.39.0:
+    resolution: {integrity: sha512-8nadJAJjTtqRkmRF36FoJTrywK9nnFmnPwnSMyxaOCU7GDjN9RTMJIxx9De8ErM+vpPhMccr/6fo5WciyQLnMQ==}
+
+  motion@12.42.2:
+    resolution: {integrity: sha512-Atvv11yUKIid41cVrRBDVX5m8tF8kNpExRSlbpt6APClhDjtwQssgFHhQzejxw7/7YYbjHSPKBVbHo05BuJT5Q==}
+    peerDependencies:
+      '@emotion/is-prop-valid': '*'
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
+    peerDependenciesMeta:
+      '@emotion/is-prop-valid':
+        optional: true
+      react:
+        optional: true
+      react-dom:
+        optional: true
+
   mrmime@2.0.1:
     resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
     engines: {node: '>=10'}
@@ -8744,17 +12189,10 @@ packages:
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
-  msgpackr-extract@3.0.3:
-    resolution: {integrity: sha512-P0efT1C9jIdVRefqjzOQ9Xml57zpOXnIuS+csaB4MdZbTdmGDLo8XhzBG1N7aO11gKDDkJvBLULeFTo46wwreA==}
-    hasBin: true
-
   msgpackr-extract@3.0.4:
     resolution: {integrity: sha512-4kmO/MdyUIkLIvTPr8VHLil4AtoKIoniWPIEk5+CDy0xnWC84azhSFmuJ7PxZdsYtiP5kEeQsORAVIeMgxT+Hw==}
     hasBin: true
 
-  msgpackr@1.11.8:
-    resolution: {integrity: sha512-bC4UGzHhVvgDNS7kn9tV8fAucIYUBuGojcaLiz7v+P63Lmtm0Xeji8B/8tYKddALXxJLpwIeBmUN3u64C4YkRA==}
-
   msgpackr@2.0.4:
     resolution: {integrity: sha512-o1C5KRmuRt+apqMr1HuGSqWStZoRBUpEsCsl15uM9VdAF1qHLtvMOU2En747EnTyEl6c4pzPewRMFF31s1CNbA==}
 
@@ -8768,15 +12206,16 @@ packages:
   mz@2.7.0:
     resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==}
 
+  n8ao@1.10.3:
+    resolution: {integrity: sha512-JFRk4WgUAUWO2KdJTqmBT02dP9kG7rE2oQbBy64E9+YwQ3d96KB9QBanqNy/NnYUfUTYU6Z/5OS5t/yLey7+6Q==}
+    peerDependencies:
+      postprocessing: '>=6.30.0'
+      three: '>=0.137'
+
   named-placeholders@1.1.6:
     resolution: {integrity: sha512-Tz09sEL2EEuv5fFowm419c1+a/jSMiBjI9gHxVLrVdbUkkNUUfjsVYs9pVZu5oCon/kmRh9TfLEObFtkVxmY0w==}
     engines: {node: '>=8.0.0'}
 
-  nanoid@3.3.11:
-    resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==}
-    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
-    hasBin: true
-
   nanoid@3.3.15:
     resolution: {integrity: sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
@@ -8807,14 +12246,40 @@ packages:
     resolution: {integrity: sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==}
     engines: {node: '>= 0.6'}
 
+  negotiator@1.0.0:
+    resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==}
+    engines: {node: '>= 0.6'}
+
   nested-error-stacks@2.0.1:
     resolution: {integrity: sha512-SrQrok4CATudVzBS7coSz26QRSmlK9TzzoFbeKfcPBUFPjcQM9Rqvr/DlJkOrwI/0KcgvMub1n1g5Jt9EgRn4A==}
 
   next-themes@0.4.6:
     resolution: {integrity: sha512-pZvgD5L0IEvX5/9GWyHMf3m8BKiVQwsCMHfoFosXtXBMnaS0ZnIJ9ST4b4NqLVKDEm8QBxoNNGNaBv2JNF6XNA==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
+
+  next@15.1.2:
+    resolution: {integrity: sha512-nLJDV7peNy+0oHlmY2JZjzMfJ8Aj0/dd3jCwSZS8ZiO5nkQfcZRqDrRN3U5rJtqVTQneIOGZzb6LCNrk7trMCQ==}
+    engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}
+    deprecated: This version has a security vulnerability. Please upgrade to a patched version. See https://nextjs.org/blog/CVE-2025-66478 for more details.
+    hasBin: true
+    peerDependencies:
+      '@opentelemetry/api': ^1.1.0
+      '@playwright/test': ^1.41.2
+      babel-plugin-react-compiler: '*'
+      react: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
+      react-dom: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
+      sass: ^1.3.0
+    peerDependenciesMeta:
+      '@opentelemetry/api':
+        optional: true
+      '@playwright/test':
+        optional: true
+      babel-plugin-react-compiler:
+        optional: true
+      sass:
+        optional: true
 
   nitro-codegen@0.26.4:
     resolution: {integrity: sha512-qTOvyfE6+kz0wuqPpRlKc6F6ZNOI3elK7ltOTvxMZSG3Y8tt43UrV5xkp4XgL9Jc1P90iBLU6mDYRiNqoNA2+g==}
@@ -8824,6 +12289,15 @@ packages:
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
+  node-fetch@2.7.0:
+    resolution: {integrity: sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==}
+    engines: {node: 4.x || >=6.0.0}
+    peerDependencies:
+      encoding: ^0.1.0
+    peerDependenciesMeta:
+      encoding:
+        optional: true
+
   node-forge@1.4.0:
     resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
     engines: {node: '>= 6.13.0'}
@@ -8842,10 +12316,17 @@ packages:
   node-releases@2.0.27:
     resolution: {integrity: sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA==}
 
+  nodemailer@9.0.3:
+    resolution: {integrity: sha512-n+YP+NKwR5zRWa60k3GiQ6Q3B4KXCoAw40dAKeCtYn020iNN74aWK2liXIC3ZEATeGql7we3tE3t8QwhY0eskw==}
+    engines: {node: '>=6.0.0'}
+
   normalize-path@3.0.0:
     resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
     engines: {node: '>=0.10.0'}
 
+  normalize-wheel@1.0.1:
+    resolution: {integrity: sha512-1OnlAPZ3zgrk8B91HyRj+eVv+kS5u+Z0SCsak6Xil/kmgEia50ga7zfkumayonZrImffAxPU/5WcyGhzetHNPA==}
+
   npm-package-arg@11.0.3:
     resolution: {integrity: sha512-sHGJy8sOC1YraBywpzQlIKBE4pBbGbiF95U6Auspzyem956E0+FtDtsx1ZxlOJkQCZ1AFXAY/yuvtFYrOxF+Bw==}
     engines: {node: ^16.14.0 || >=18.0.0}
@@ -8854,6 +12335,10 @@ packages:
     resolution: {integrity: sha512-S48WzZW777zhNIrn7gxOlISNAqi9ZC/uQFnRdbeIHhZhCA6UqpkOT8T1G7BvfdgP4Er8gF4sUbaS0i7QvIfCWw==}
     engines: {node: '>=8'}
 
+  npm-to-yarn@3.0.1:
+    resolution: {integrity: sha512-tt6PvKu4WyzPwWUzy/hvPFqn+uwXO0K1ZHka8az3NnrhWJDmSqI8ncWq0fkL0k/lmmi5tAC11FXwXuh0rFbt1A==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
   nth-check@2.1.1:
     resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
 
@@ -8904,6 +12389,9 @@ packages:
     resolution: {integrity: sha512-gXah6aZrcUxjWg2zR2MwouP2eHlCBzdV4pygudehaKXSGW4v2AsRQUK+lwwXhii6KFZcunEnmSUoYp5CXibxtA==}
     engines: {node: '>= 0.4'}
 
+  obuf@1.1.2:
+    resolution: {integrity: sha512-PX1wu0AmAdPqOL1mWhqmlOd8kOIZQwGZw6rh7uby9fTc5lhaOWFLX3I6R1hrF9k3zUY40e6igsLGkDXK92LJNg==}
+
   obug@2.1.1:
     resolution: {integrity: sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==}
 
@@ -8913,6 +12401,10 @@ packages:
   ohash@2.0.11:
     resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
 
+  on-exit-leak-free@2.1.2:
+    resolution: {integrity: sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==}
+    engines: {node: '>=14.0.0'}
+
   on-finished@2.3.0:
     resolution: {integrity: sha512-ikqdkGAAyf/X/gPhXGvfgAytDZtDbr+bkNUJ0N9h5MI/dmdgCs3l6hoHrcUv41sRKew3jIwrp4qQDXiK99Utww==}
     engines: {node: '>= 0.8'}
@@ -8936,6 +12428,12 @@ packages:
     resolution: {integrity: sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==}
     engines: {node: '>=6'}
 
+  oniguruma-parser@0.12.2:
+    resolution: {integrity: sha512-6HVa5oIrgMC6aA6WF6XyyqbhRPJrKR02L20+2+zpDtO5QAzGHAUGw5TKQvwi5vctNnRHkJYmjAhRVQF2EKdTQw==}
+
+  oniguruma-to-es@4.3.6:
+    resolution: {integrity: sha512-csuQ9x3Yr0cEIs/Zgx/OEt9iBw9vqIunAPQkx19R/fiMq2oGVTgcMqO/V3Ybqefr1TBvosI6jU539ksaBULJyA==}
+
   open@7.4.2:
     resolution: {integrity: sha512-MVHddDVweXZF3awtlAS+6pgKLlm/JgxZ90+/NBurBoQctVOOB/zDdVjcyPzQ+0laDGbsWgrRkflI65sQeOgT9Q==}
     engines: {node: '>=8'}
@@ -8952,6 +12450,10 @@ packages:
     resolution: {integrity: sha512-eNwHudNbO1folBP3JsZ19v9azXWtQZjICdr3Q0TDPIaeBQ3mXLrh54wM+er0+hSp+dWKf+Z8KM58CYzEyIYxYg==}
     engines: {node: '>=6'}
 
+  ora@5.4.1:
+    resolution: {integrity: sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==}
+    engines: {node: '>=10'}
+
   own-keys@1.0.1:
     resolution: {integrity: sha512-qFOyK5PjiWZd+QQIh+1jhdb9LpxTF0qs7Pm8o5QHYZ0M3vKqSqzsZaEB6oWlxZ+q2sJBMI/Ktgd2N5ZwQoRHfg==}
     engines: {node: '>= 0.4'}
@@ -9012,10 +12514,16 @@ packages:
   package-manager-detector@1.6.0:
     resolution: {integrity: sha512-61A5ThoTiDG/C8s8UMZwSorAGwMJ0ERVGj2OjoW5pAalsNOg15+iQiPzrLJ4jhZ1HJzmC2PIHT2oEiH3R5fzNA==}
 
+  pako@1.0.11:
+    resolution: {integrity: sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==}
+
   parent-module@1.0.1:
     resolution: {integrity: sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==}
     engines: {node: '>=6'}
 
+  parse-entities@4.0.2:
+    resolution: {integrity: sha512-GG2AQYWoLgL877gQIKeRPGO1xF9+eG1ujIb5soS5gPvLQ1y2o8FL90w2QWNdf9I361Mpp7726c+lj3U0qK1uGw==}
+
   parse-json@5.2.0:
     resolution: {integrity: sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==}
     engines: {node: '>=8'}
@@ -9024,20 +12532,43 @@ packages:
     resolution: {integrity: sha512-Nt/a5SfCLiTnQAjx3fHlqp8hRgTL3z7kTQZzvIMS9uCAepnCyjpdEc6M/sz69WqMBdaDBw9sF1F1UaHROYzGkQ==}
     engines: {node: '>=10'}
 
-  parse5@7.3.0:
+  parse-svg-path@0.2.0:
+    resolution: {integrity: sha512-Tf7FFIrguPKQwzD4pWnYkR2VOv3raoHeKED80Bm+BYHI3KxC8KsgsGC5+fSMzAGDA6UEk4bHvmi+RsjmL3khpg==}
+
+  parse5-htmlparser2-tree-adapter@7.1.0:
+    resolution: {integrity: sha512-ruw5xyKs6lrpo9x9rCZqZZnIUntICjQAd0Wsmp396Ul9lN/h+ifgVV1x1gZHi8euej6wTfpqX8j+BFQxF0NS/g==}
+
+  parse5-parser-stream@7.1.2:
+    resolution: {integrity: sha512-JyeQc9iwFLn5TbvvqACIF/VXG6abODeB3Fwmv/TGdLk2LfbWkaySGY72at4+Ty7EkPZj854u4CrICqNk2qIbow==}
+
+  parse5@7.3.0:
     resolution: {integrity: sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==}
 
+  parseley@0.12.1:
+    resolution: {integrity: sha512-e6qHKe3a9HWr0oMRVDTRhKce+bRO8VGQR3NyVwcjwrbhMmFCX9KszEV35+rn4AdilFAq9VPxP/Fe1wC9Qjd2lw==}
+
   parseurl@1.3.3:
     resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
     engines: {node: '>= 0.8'}
 
+  patch-console@2.0.0:
+    resolution: {integrity: sha512-0YNdUceMdaQwoKce1gatDScmMo5pu/tfABfnzEqeG0gtTmd7mh/WcwgUjtAeOU7N8nFFlbQBnFK2gXW5fGvmMA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   path-browserify@1.0.1:
     resolution: {integrity: sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==}
 
+  path-data-parser@0.1.0:
+    resolution: {integrity: sha512-NOnmBpt5Y2RWbuv0LMzsayp3lVylAHLPUTut412ZA3l+C4uw4ZVkQbjShYCQ8TCpUMdPapr4YjUqLYD6v68j+w==}
+
   path-exists@4.0.0:
     resolution: {integrity: sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==}
     engines: {node: '>=8'}
 
+  path-expression-matcher@1.6.2:
+    resolution: {integrity: sha512-enSlaiat05iasnzmgNxRj8reFdj3puY2QpNgP1aPIaVfT6nn9ICuPoFlKHk8EN22HcwewshO+mN2DGbkCEOtqQ==}
+    engines: {node: '>=14.0.0'}
+
   path-is-absolute@1.0.1:
     resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
     engines: {node: '>=0.10.0'}
@@ -9049,10 +12580,17 @@ packages:
   path-parse@1.0.7:
     resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==}
 
+  path-scurry@1.11.1:
+    resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
+    engines: {node: '>=16 || 14 >=14.18'}
+
   path-scurry@2.0.1:
     resolution: {integrity: sha512-oWyT4gICAu+kaA7QWk/jvCHWarMKNs6pXOGWKDTr7cw4IGcUbW+PeTfbaQiLGheFRpjo6O9J0PmyMfQPjH71oA==}
     engines: {node: 20 || >=22}
 
+  path-to-regexp@8.4.2:
+    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
+
   pathe@2.0.3:
     resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
 
@@ -9060,9 +12598,62 @@ packages:
     resolution: {integrity: sha512-//nshmD55c46FuFw26xV/xFAaB5HF9Xdap7HJBBnrKdAd6/GxDBaNA1870O79+9ueg61cZLSVc+OaFlfmObYVQ==}
     engines: {node: '>= 14.16'}
 
+  peberminta@0.9.0:
+    resolution: {integrity: sha512-XIxfHpEuSJbITd1H3EeQwpcZbTLHc+VVr8ANI9t5sit565tsI4/xK3KWTUFE2e6QiangUkh3B0jihzmGnNrRsQ==}
+
   perfect-debounce@2.0.0:
     resolution: {integrity: sha512-fkEH/OBiKrqqI/yIgjR92lMfs2K8105zt/VT6+7eTjNwisrsh47CeIED9z58zI7DfKdH3uHAn25ziRZn3kgAow==}
 
+  pg-cloudflare@1.4.0:
+    resolution: {integrity: sha512-Vo7z/6rrQYxpNRylp4Tlob2elzbh+N/MOQbxFVWCxS7oEx6jF53GTJFxK2WWpKuBRkmiin4Mt+xofFDjx09R0A==}
+
+  pg-connection-string@2.12.0:
+    resolution: {integrity: sha512-U7qg+bpswf3Cs5xLzRqbXbQl85ng0mfSV/J0nnA31MCLgvEaAo7CIhmeyrmJpOr7o+zm0rXK+hNnT5l9RHkCkQ==}
+
+  pg-connection-string@2.14.0:
+    resolution: {integrity: sha512-XwWDGcLRGCXAR8F/AM5bG7Q+A3Wm2s6QeEjlOKZLlH3UYcguiqCWKyWXVag5TLTIjR7oOJUY8kcADaZgWPyLeg==}
+
+  pg-cursor@2.21.0:
+    resolution: {integrity: sha512-IYvk/j+Suhtbo/C3uOf4JLsLK/gWxOTUOmYbDsbKnLaVJDq+KwhwK6ngpRfiCk8eDMS3AmGQABZCv0cREEzHQw==}
+    peerDependencies:
+      pg: ^8
+
+  pg-int8@1.0.1:
+    resolution: {integrity: sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw==}
+    engines: {node: '>=4.0.0'}
+
+  pg-numeric@1.0.2:
+    resolution: {integrity: sha512-BM/Thnrw5jm2kKLE5uJkXqqExRUY/toLHda65XgFTBTFYZyopbKjBe29Ii3RbkvlsMoFwD+tHeGaCjjv0gHlyw==}
+    engines: {node: '>=4'}
+
+  pg-pool@3.14.0:
+    resolution: {integrity: sha512-gKtPkFdQPU3DksooVLi9LsjZxrsBUZIpa+7aVx+LV5pNh0KzP4Zleud2po+ConrxbuXGBJ6Hfer6hdgpIBpBaw==}
+    peerDependencies:
+      pg: '>=8.0'
+
+  pg-protocol@1.15.0:
+    resolution: {integrity: sha512-cq9sECI5s0+uPUXjbz8ioyPJni6RzsRib0US67i5IoTZKw8fNeYlVE7u8F4dG7vEJJtc5wdD1K189lCCUwqWTQ==}
+
+  pg-types@2.2.0:
+    resolution: {integrity: sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==}
+    engines: {node: '>=4'}
+
+  pg-types@4.1.0:
+    resolution: {integrity: sha512-o2XFanIMy/3+mThw69O8d4n1E5zsLhdO+OPqswezu7Z5ekP4hYDqlDjlmOpYMbzY2Br0ufCwJLdDIXeNVwcWFg==}
+    engines: {node: '>=10'}
+
+  pg@8.22.0:
+    resolution: {integrity: sha512-8wih1vVIBMxoUM2oB4soJsD9tDnDpLv4OXBJ+EJzFsvycD+lfyIreC2gGHq78f8jbLLt+bvlPTFdFZfJkOuzAA==}
+    engines: {node: '>= 16.0.0'}
+    peerDependencies:
+      pg-native: '>=3.0.1'
+    peerDependenciesMeta:
+      pg-native:
+        optional: true
+
+  pgpass@1.0.5:
+    resolution: {integrity: sha512-FdW9r/jQZhSeohs1Z3sI1yxFQNFvMcnmfuj4WBMUTxOrAyLMaTcE1aAMBiTlbMNaXvBCQuVi0R7hd8udDSP7ug==}
+
   picocolors@1.1.1:
     resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
 
@@ -9082,6 +12673,19 @@ packages:
     resolution: {integrity: sha512-uB80kBFb/tfd68bVleG9T5GGsGPjJrLAUpR5PZIrhBnIaRTQRjqdJSsIKkOP6OAIFbj7GOrcudc5pNjZ+geV2g==}
     engines: {node: '>=6'}
 
+  pino-abstract-transport@1.2.0:
+    resolution: {integrity: sha512-Guhh8EZfPCfH+PMXAb6rKOjGQEoy0xlAIn+irODG5kgfYV+BQ0rGYYWTIel3P5mmyXqkYkPmdIkywsn6QKUR1Q==}
+
+  pino-abstract-transport@2.0.0:
+    resolution: {integrity: sha512-F63x5tizV6WCh4R6RHyi2Ml+M70DNRXt/+HANowMflpgGFMAym/VKm6G7ZOQRjqN7XbGxK1Lg9t6ZrtzOaivMw==}
+
+  pino-std-serializers@7.1.0:
+    resolution: {integrity: sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==}
+
+  pino@9.14.0:
+    resolution: {integrity: sha512-8OEwKp5juEvb/MjpIc4hjqfgCNysrS94RIOMXYvpYCdm/jglrKEiAYmiumbmGhCvs+IcInsphYDFwqrjr7398w==}
+    hasBin: true
+
   pirates@3.0.2:
     resolution: {integrity: sha512-c5CgUJq6H2k6MJz72Ak1F5sN9n9wlSlJyEnwvpm9/y3WB4E3pHBDT2c6PEiS1vyJvq2bUxUAIu0EGf8Cx4Ic7Q==}
     engines: {node: '>= 4'}
@@ -9094,6 +12698,18 @@ packages:
     resolution: {integrity: sha512-xhcb4yHu9sM/G7foGzoLtXYcC0zHEaOXXjRKhGup0fw78Nf2Tkiapv4EQyMzrbcmQPsllAI7DbFY2UT7PlI9Pg==}
     hasBin: true
 
+  pixi-viewport@6.0.3:
+    resolution: {integrity: sha512-2+qPJ0/n+8hQYhWvY+795+x9y3MiUrCOWacK0DY53whowWaGdx9iDocy7z1pBwjkZhC52YvrJQuZKK0sdVLtBw==}
+    peerDependencies:
+      pixi.js: '>=8'
+
+  pixi.js@8.19.0:
+    resolution: {integrity: sha512-pq1O6emA/GFjjeF+8d3Pb5t7knD8FsnfWGqQcRjYjsqFZ7QdzG1XgjLDUu0DFJRbafjV5+g8iNLFBx0b9649lg==}
+
+  pkce-challenge@5.0.1:
+    resolution: {integrity: sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==}
+    engines: {node: '>=16.20.0'}
+
   pkg-dir@4.2.0:
     resolution: {integrity: sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==}
     engines: {node: '>=8'}
@@ -9104,6 +12720,11 @@ packages:
   pkg-types@2.3.0:
     resolution: {integrity: sha512-SIqCzDRg0s9npO5XQ3tNZioRY1uK06lA41ynBC1YmFTmnY6FjUjVt6s4LoADmwoig1qqD0oK8h1p/8mlMx8Oig==}
 
+  playwright-core@1.61.1:
+    resolution: {integrity: sha512-h7Qlt6m4REp25qvIdvbDtVmD4LqVXfpRxhORv9L0jzETM05p4fuPJ3dKyuSXQxDSbXnmS79HAgi9589lGSpLkg==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   plist@3.1.0:
     resolution: {integrity: sha512-uysumyrvkUX0rX/dEVqt8gC3sTBzd4zoWfLeS29nb53imdaXVvLINYXTI2GNqzaMuvacNx4uJQ8+b3zXR0pkgQ==}
     engines: {node: '>=10.4.0'}
@@ -9116,6 +12737,12 @@ packages:
     resolution: {integrity: sha512-LKWqWJRhstyYo9pGvgor/ivk2w94eSjE3RGVuzLGlr3NmD8bf7RcYGze1mNdEHRP6TRP6rMuDHk5t44hnTRyow==}
     engines: {node: '>=14.19.0'}
 
+  points-on-curve@0.2.0:
+    resolution: {integrity: sha512-0mYKnYYe9ZcqMCWhUjItv/oHjvgEsfKvnUTg8sAtnHr3GVy7rGkXCb6d5cSyqrWqL4k81b9CPg3urd+T7aop3A==}
+
+  points-on-path@0.2.1:
+    resolution: {integrity: sha512-25ClnWWuw7JbWZcgqY/gJ4FQWadKxGWk+3kR/7kD0tCaDtPPMj7oHu2ToLaVhfpnHrZzYby2w6tUA0eOIuUg8g==}
+
   possible-typed-array-names@1.1.0:
     resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
     engines: {node: '>= 0.4'}
@@ -9138,6 +12765,10 @@ packages:
       yaml:
         optional: true
 
+  postcss-selector-parser@7.1.4:
+    resolution: {integrity: sha512-HeP7D2wyhkR+XaK6v4W8oRF62Dsz4flyuczALJp61GckGm42u1saSSJ/0auvcBqxs3jMRFEcPK34At/0JBKdOg==}
+    engines: {node: '>=4'}
+
   postcss@8.5.10:
     resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==}
     engines: {node: ^10 || ^12 || >=14}
@@ -9146,6 +12777,49 @@ packages:
     resolution: {integrity: sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==}
     engines: {node: ^10 || ^12 || >=14}
 
+  postgres-array@2.0.0:
+    resolution: {integrity: sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA==}
+    engines: {node: '>=4'}
+
+  postgres-array@3.0.4:
+    resolution: {integrity: sha512-nAUSGfSDGOaOAEGwqsRY27GPOea7CNipJPOA7lPbdEpx5Kg3qzdP0AaWC5MlhTWV9s4hFX39nomVZ+C4tnGOJQ==}
+    engines: {node: '>=12'}
+
+  postgres-bytea@1.0.1:
+    resolution: {integrity: sha512-5+5HqXnsZPE65IJZSMkZtURARZelel2oXUEO8rH83VS/hxH5vv1uHquPg5wZs8yMAfdv971IU+kcPUczi7NVBQ==}
+    engines: {node: '>=0.10.0'}
+
+  postgres-bytea@3.0.0:
+    resolution: {integrity: sha512-CNd4jim9RFPkObHSjVHlVrxoVQXz7quwNFpz7RY1okNNme49+sVyiTvTRobiLV548Hx/hb1BG+iE7h9493WzFw==}
+    engines: {node: '>= 6'}
+
+  postgres-date@1.0.7:
+    resolution: {integrity: sha512-suDmjLVQg78nMK2UZ454hAG+OAW+HQPZ6n++TNDUX+L0+uUlLywnoxJKDou51Zm+zTCjrCl0Nq6J9C5hP9vK/Q==}
+    engines: {node: '>=0.10.0'}
+
+  postgres-date@2.1.0:
+    resolution: {integrity: sha512-K7Juri8gtgXVcDfZttFKVmhglp7epKb1K4pgrkLxehjqkrgPhfG6OO8LHLkfaqkbpjNRnra018XwAr1yQFWGcA==}
+    engines: {node: '>=12'}
+
+  postgres-interval@1.2.0:
+    resolution: {integrity: sha512-9ZhXKM/rw350N1ovuWHbGxnGh/SNJ4cnxHiM0rxE4VN41wsg8P8zWn9hv/buK00RP4WvlOyr/RBDiptyxVbkZQ==}
+    engines: {node: '>=0.10.0'}
+
+  postgres-interval@3.0.0:
+    resolution: {integrity: sha512-BSNDnbyZCXSxgA+1f5UU2GmwhoI0aU5yMxRGO8CdFEcY2BQF9xm/7MqKnYoM1nJDk8nONNWDk9WeSmePFhQdlw==}
+    engines: {node: '>=12'}
+
+  postgres-range@1.1.4:
+    resolution: {integrity: sha512-i/hbxIE9803Alj/6ytL7UHQxRvZkI9O4Sy+J3HGc4F4oo/2eQAjTSNJ0bfxyse3bH0nuVesCk+3IRLaMtG3H6w==}
+
+  postprocessing@6.39.2:
+    resolution: {integrity: sha512-AxPY+xFyVOsz+8bbHSyQBoOK4AUqSQspTXXIsNcKhmGJRm/afHRAwZ8bKC02AeSPII0PW6lbCN84SgAoWFsKKA==}
+    peerDependencies:
+      three: '>= 0.168.0 < 0.186.0'
+
+  potpack@1.0.2:
+    resolution: {integrity: sha512-choctRBIV9EMT9WGAZHn3V7t0Z2pMQyl0EZE6pFc/6ml3ssw7Dlf/oAOvFwjm1HVsqfQN8GfeFyJ+d8tRzqueQ==}
+
   preact-render-to-string@6.7.0:
     resolution: {integrity: sha512-Z4WR8fmLMRpdYqJ9i7vrlXSsSrxVJydwrkEXHapexfARbWfGb7vGcnvNQnIzN0cXciMVOlz/XLoiMCi9gUsy9Q==}
     peerDependencies:
@@ -9167,6 +12841,11 @@ packages:
     engines: {node: '>=10.13.0'}
     hasBin: true
 
+  prettier@3.4.2:
+    resolution: {integrity: sha512-e9MewbtFo+Fevyuxn/4rrcDAaq0IYxPGLvObpQjiZBMAzB9IGmzlnG9RZy3FFas+eBMu2vA0CszMeduow5dIuQ==}
+    engines: {node: '>=14'}
+    hasBin: true
+
   prettier@3.8.1:
     resolution: {integrity: sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg==}
     engines: {node: '>=14'}
@@ -9188,14 +12867,34 @@ packages:
     resolution: {integrity: sha512-9uBdv/B4EefsuAL+pWqueZyZS2Ba+LxfFeQ9DN14HU4bN8bhaxKdkpjpB6fs9+pSjIBu+FXQHImEg8j/Lw0+vA==}
     engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
 
+  prismjs@1.29.0:
+    resolution: {integrity: sha512-Kx/1w86q/epKcmte75LNrEoT+lX8pBpavuAbvJWRXar7Hz8jrtF+e3vY751p0R8H9HdArwaCTNDDzHg/ScJK1Q==}
+    engines: {node: '>=6'}
+
   proc-log@4.2.0:
     resolution: {integrity: sha512-g8+OnU/L2v+wyiVK+D5fA34J7EH8jZ8DDlvwhRCMxmMj7UCBvxiO1mGeN+36JXIKF4zevU4kRBd8lVgG9vLelA==}
     engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
 
+  process-nextick-args@2.0.1:
+    resolution: {integrity: sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==}
+
+  process-warning@5.0.0:
+    resolution: {integrity: sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==}
+
+  process@0.11.10:
+    resolution: {integrity: sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==}
+    engines: {node: '>= 0.6.0'}
+
   progress@2.0.3:
     resolution: {integrity: sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==}
     engines: {node: '>=0.4.0'}
 
+  promise-limit@2.7.0:
+    resolution: {integrity: sha512-7nJ6v5lnJsXwGprnGXga4wx6d1POjvi5Qmf1ivTRxTjH4Z/9Czja/UCMLVmB9N93GeWOU93XaFaEt6jbuoagNw==}
+
+  promise-worker-transferable@1.0.4:
+    resolution: {integrity: sha512-bN+0ehEnrXfxV2ZQvU2PetO0n4gqBD4ulq3MI1WOPLgr7/Mg9yRQkX5+0v1vagr74ZTsl7XtzlaYDo2EuCeYJw==}
+
   promise@8.3.0:
     resolution: {integrity: sha512-rZPNPKTOYVNEEKFaq1HqTgOwZD+4/YHS5ukLzQCypkj+OkYx7iv0mA91lJlpPPZ8vMau3IIGj5Qlwrx+8iiSmg==}
 
@@ -9206,6 +12905,9 @@ packages:
   prop-types@15.8.1:
     resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==}
 
+  property-information@7.2.0:
+    resolution: {integrity: sha512-IAtzIB6sUiWaJYrX9smp3V46pBGbBeLFRGdh25kg1334VcBlD8HzhPeNIWQH9zhGmo2itIe25EHt9dQP7G5hmg==}
+
   psl@1.15.0:
     resolution: {integrity: sha512-JZd3gMVBAVQkSs6HdNZo9Sdo0LNcQeMNP3CozBJb3JYC/QUYZTnKxP+f8oWRX4rHP5EurWxqAHTSwUCjlNKa1w==}
 
@@ -9230,6 +12932,10 @@ packages:
     resolution: {integrity: sha512-Uu7ii+FQy4Qf82G4xu7ShHhjhGahEpCWc3x8UavY3CTcWV+ufmmCtwkr7ZKsX42jdL0kr1B5FKUeqJvAn51jzQ==}
     hasBin: true
 
+  qs@6.15.3:
+    resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==}
+    engines: {node: '>=0.6'}
+
   quansync@0.2.11:
     resolution: {integrity: sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA==}
 
@@ -9249,13 +12955,16 @@ packages:
   queue@6.0.2:
     resolution: {integrity: sha512-iHZWu+q3IdFZFX36ro/lKBkSvfkztY5Y7HMiPlOUjhupPcG2JMfst2KKEpu5XndviX/3UhFbRngUPNKtgvtZiA==}
 
+  quick-format-unescaped@4.0.4:
+    resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
+
   radix-ui@1.6.2:
     resolution: {integrity: sha512-OwYUjzMwiInCUxgAWpPsavXC3Kh4iyi/49uU1/qZTG3RQDlvegyk1GOMiGvSkjua1RDb3JD3fo3eroL9FV4GQw==}
     peerDependencies:
       '@types/react': '*'
       '@types/react-dom': '*'
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -9277,7 +12986,7 @@ packages:
     resolution: {integrity: sha512-TMx7fNbhLk15eqcMt+7Z7S2KF7mfTId/XJDjKE8f+IUcFn0l08/kI4FiYTL/0yuOLmEcbR4Fwe3GJf/NiiMnPA==}
     peerDependencies:
       date-fns: ^2.28.0 || ^3.0.0
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0
 
   react-devtools-core@6.1.5:
     resolution: {integrity: sha512-ePrwPfxAnB+7hgnEr8vpKxL9cmnp7F322t8oqcPshbIQQhDKgFDW4tjhF2wjVbdXF9O/nyuy3sQWd9JGpiLPvA==}
@@ -9285,12 +12994,23 @@ packages:
   react-dom@19.1.0:
     resolution: {integrity: sha512-Xs1hdnE+DyKgeHJeJznQmYMIBG3TKIHJJT95Q58nHLSrElKlGQqDTR2HQ9fx5CN/Gk6Vh/kupBTDLU11/nDk/g==}
     peerDependencies:
-      react: 19.1.0
+      react: ^19.1.0
 
   react-dom@19.1.1:
     resolution: {integrity: sha512-Dlq/5LAZgF0Gaz6yiqZCf6VCcZs1ghAJyrsu84Q/GT0gV+mCxbfmKNoGRKBYMJ8IEdGPqu49YWXD02GCknEDkw==}
     peerDependencies:
-      react: 19.1.0
+      react: ^19.1.1
+
+  react-easy-crop@6.2.2:
+    resolution: {integrity: sha512-b0HOicSvLYoNk1yvZTwjH8sNjF5uD9xLtWrSDnv+fx1dXTbwd8bNLQaP6gjXw//A+tni9Mw5KDmPNOEjKF55NQ==}
+    peerDependencies:
+      react: '>=16.4.0'
+      react-dom: '>=16.4.0'
+
+  react-email@3.0.7:
+    resolution: {integrity: sha512-lX9dFCPtTG+79aP9uTdx763byshptPYbOi0KXwxn6nPJoDP/Ty/G1W5fx1lbrmec+pk38MTDZPrzJ/UYIxgP/Q==}
+    engines: {node: '>=18.0.0'}
+    hasBin: true
 
   react-fast-compare@3.2.2:
     resolution: {integrity: sha512-nsO+KSNgo1SbJqJEYRE9ERzo7YtYbou/OqjSQKxV7jcKox7+usiUVZOAC+XnDOABXggQTno0Y1CpVnuWEc1boQ==}
@@ -9299,13 +13019,13 @@ packages:
     resolution: {integrity: sha512-r4F0Sec0BLxWicc7HEyo2x3/2icUTrRmDjaaRyzzn+7aDyFZliszMDOgLVwSnQnYENOlL1o569Ze2HZefk8clA==}
     engines: {node: '>=10'}
     peerDependencies:
-      react: 19.1.0
+      react: '>=17.0.0'
 
   react-hook-form@7.81.0:
     resolution: {integrity: sha512-ocbmr2p5KBMoAfj4WCUvped33lVi1Kd5DuDUvQDnB6VEAacOjPI/jMbtDdbhco4y9ct4xUuCmMY0b/C9L0QHjw==}
     engines: {node: '>=18.0.0'}
     peerDependencies:
-      react: 19.1.0
+      react: ^16.8.0 || ^17 || ^18 || ^19
 
   react-is@16.13.1:
     resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==}
@@ -9319,49 +13039,55 @@ packages:
   react-is@19.2.3:
     resolution: {integrity: sha512-qJNJfu81ByyabuG7hPFEbXqNcWSU3+eVus+KJs+0ncpGfMyYdvSmxiJxbWR65lYi1I+/0HBcliO029gc4F+PnA==}
 
+  react-medium-image-zoom@5.4.8:
+    resolution: {integrity: sha512-72CIldEUaPejjcaDOYIeDsGlWzNKpmxyKgiPi1LBCkWCIGHDLlA2KTeo2uNtmN/m72Y3k/2uWDfon9SDiPbHaA==}
+    peerDependencies:
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
   react-native-is-edge-to-edge@1.2.1:
     resolution: {integrity: sha512-FLbPWl/MyYQWz+KwqOZsSyj2JmLKglHatd3xLZWskXOpRaio4LfEDEz8E/A6uD8QoTHW6Aobw1jbEwK7KMgR7Q==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   react-native-nitro-modules@0.26.4:
     resolution: {integrity: sha512-sCZ0U+FY6JM73HaZYyc4kSRV7JQZXGfbimpYJzaAaZFQMGpJFkD5c3Jt66j1v83wN/m6D/SM9yyx+dN6XTfGAg==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   react-native-reanimated@4.1.6:
     resolution: {integrity: sha512-F+ZJBYiok/6Jzp1re75F/9aLzkgoQCOh4yxrnwATa8392RvM3kx+fiXXFvwcgE59v48lMwd9q0nzF1oJLXpfxQ==}
     peerDependencies:
       '@babel/core': 7.29.6
-      react: 19.1.0
+      react: '*'
       react-native: '*'
       react-native-worklets: '>=0.5.0'
 
   react-native-safe-area-context@5.6.2:
     resolution: {integrity: sha512-4XGqMNj5qjUTYywJqpdWZ9IG8jgkS3h06sfVjfw5yZQZfWnRFXczi0GnYyFyCc2EBps/qFmoCH8fez//WumdVg==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   react-native-screens@4.16.0:
     resolution: {integrity: sha512-yIAyh7F/9uWkOzCi1/2FqvNvK6Wb9Y1+Kzn16SuGfN9YFJDTbwlzGRvePCNTOX0recpLQF3kc2FmvMUhyTCH1Q==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   react-native-svg@15.12.1:
     resolution: {integrity: sha512-vCuZJDf8a5aNC2dlMovEv4Z0jjEUET53lm/iILFnFewa15b4atjVxU6Wirm6O9y6dEsdjDZVD7Q3QM4T1wlI8g==}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   react-native-worklets@0.7.1:
     resolution: {integrity: sha512-KNsvR48ULg73QhTlmwPbdJLPsWcyBotrGPsrDRDswb5FYpQaJEThUKc2ncXE4UM5dn/ewLoQHjSjLaKUVPxPhA==}
     peerDependencies:
       '@babel/core': 7.29.6
-      react: 19.1.0
+      react: '*'
       react-native: '*'
 
   react-native@0.81.5:
@@ -9370,16 +13096,31 @@ packages:
     hasBin: true
     peerDependencies:
       '@types/react': ^19.1.0
-      react: 19.1.0
+      react: ^19.1.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
 
+  react-promise-suspense@0.3.4:
+    resolution: {integrity: sha512-I42jl7L3Ze6kZaq+7zXWSunBa3b1on5yfvUW6Eo/3fFOj6dZ5Bqmcd264nJbTK/gn1HjjILAjSwnZbV4RpSaNQ==}
+
+  react-reconciler@0.31.0:
+    resolution: {integrity: sha512-7Ob7Z+URmesIsIVRjnLoDGwBEG/tVitidU0nMsqX/eeJaLY89RISO/10ERe0MqmzuKUUB1rmY+h1itMbUHg9BQ==}
+    engines: {node: '>=0.10.0'}
+    peerDependencies:
+      react: ^19.0.0
+
   react-reconciler@0.32.0:
     resolution: {integrity: sha512-2NPMOzgTlG0ZWdIf3qG+dcbLSoAc/uLfOwckc3ofy5sSK0pLJqnQLpUFxvGcN2rlXSjnVtGeeFLNimCQEj5gOQ==}
     engines: {node: '>=0.10.0'}
     peerDependencies:
-      react: 19.1.0
+      react: ^19.1.0
+
+  react-reconciler@0.33.0:
+    resolution: {integrity: sha512-KetWRytFv1epdpJc3J4G75I4WrplZE5jOL7Yq0p34+OVOKF4Se7WrdIdVC45XsSSmUTlht2FM/fM1FZb1mfQeA==}
+    engines: {node: '>=0.10.0'}
+    peerDependencies:
+      react: ^19.2.0
 
   react-refresh@0.14.2:
     resolution: {integrity: sha512-jCvmsr+1IUSMUyzOkRcvnVbX3ZYC6g9TDrDbFuFmRDq7PD4yaGbLKNQL6k2jnArV8hjYxh7hVhAZB6s9HDGpZA==}
@@ -9398,7 +13139,7 @@ packages:
     engines: {node: '>=10'}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -9408,7 +13149,7 @@ packages:
     engines: {node: '>=10'}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -9416,21 +13157,21 @@ packages:
   react-resizable-panels@3.0.6:
     resolution: {integrity: sha512-b3qKHQ3MLqOgSS+FRYKapNkJZf5EQzuf6+RLiq1/IlTHw99YrZ2NJZLk4hQIzTnnIkRg2LUqyVinu6YWWpUYew==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.14.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
+      react-dom: ^16.14.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
 
   react-smooth@4.0.4:
     resolution: {integrity: sha512-gnGKTpYwqL0Iii09gHobNolvX4Kiq4PKx6eWBCYYix+8cdw+cGo3do906l1NBPKkSWx1DghC1dlWG9L2uGd61Q==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
   react-style-singleton@2.2.3:
     resolution: {integrity: sha512-b6jSvxvVnyptAiLjbkWLE/lOnR4lfTtDAl+eUC7RZy+QQWc6wRzIV2CE6xBuMmDxc2qIihtDCZD5NPOFl7fRBQ==}
     engines: {node: '>=10'}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -9438,18 +13179,42 @@ packages:
   react-test-renderer@19.1.0:
     resolution: {integrity: sha512-jXkSl3CpvPYEF+p/eGDLB4sPoDX8pKkYvRl9+rR8HxLY0X04vW7hCm1/0zHoUSjPZ3bDa+wXWNTDVIw/R8aDVw==}
     peerDependencies:
-      react: 19.1.0
+      react: ^19.1.0
 
   react-transition-group@4.4.5:
     resolution: {integrity: sha512-pZcd1MCJoiKiBR2NRxeCRg13uCXbydPnmB4EOeRrY7480qNWO8IIgQG6zlDkm6uRMsURXPuKq0GWtiM59a5Q6g==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: '>=16.6.0'
+      react-dom: '>=16.6.0'
+
+  react-use-measure@2.1.7:
+    resolution: {integrity: sha512-KrvcAo13I/60HpwGO5jpW7E9DfusKyLPLvuHlUyP5zqnmAPhNc6qTRjUQrdTADl0lpPpDVU2/Gg51UlOGHXbdg==}
+    peerDependencies:
+      react: '>=16.13'
+      react-dom: '>=16.13'
+    peerDependenciesMeta:
+      react-dom:
+        optional: true
 
   react@19.1.0:
     resolution: {integrity: sha512-FS+XFBNvn3GTAWq26joslQgWNoFu08F4kl0J4CgdNKADkdSGXQyTCnKteIAJy96Br6YbpEU1LSzV5dYtjMkMDg==}
     engines: {node: '>=0.10.0'}
 
+  react@19.2.7:
+    resolution: {integrity: sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ==}
+    engines: {node: '>=0.10.0'}
+
+  readable-stream@2.3.8:
+    resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  readable-stream@4.7.0:
+    resolution: {integrity: sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
   readdirp@3.6.0:
     resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==}
     engines: {node: '>=8.10.0'}
@@ -9462,6 +13227,10 @@ packages:
     resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
     engines: {node: '>= 20.19.0'}
 
+  real-require@0.2.0:
+    resolution: {integrity: sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==}
+    engines: {node: '>= 12.13.0'}
+
   recast@0.23.12:
     resolution: {integrity: sha512-dEWRjcINDu/F4l2dYx57ugBtD7HV9KXESyxhzw/MqWLeglJrsjJKqACPyUPg+6AF8mIgm+Zi0dZ3ACoIg+QtpA==}
     engines: {node: '>= 4'}
@@ -9474,8 +13243,22 @@ packages:
     engines: {node: '>=14'}
     deprecated: 1.x and 2.x branches are no longer active. Bump to Recharts v3 to receive latest features and bugfixes. See https://github.com/recharts/recharts/wiki/3.0-migration-guide
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+      react-dom: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
+  recma-build-jsx@1.0.0:
+    resolution: {integrity: sha512-8GtdyqaBcDfva+GUKDr3nev3VpKAhup1+RvkMvUxURHpW7QyIvk9F5wz7Vzo06CEMSilw6uArgRqhpiUcWp8ew==}
+
+  recma-jsx@1.0.1:
+    resolution: {integrity: sha512-huSIy7VU2Z5OLv6oFLosQGGDqPqdO1iq6bWNAdhzMxSJP7RAso4fCZ1cKu8j9YHCZf3TPrq4dw3okhrylgcd7w==}
+    peerDependencies:
+      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
+
+  recma-parse@1.0.0:
+    resolution: {integrity: sha512-OYLsIGBB5Y5wjnSnQW6t3Xg7q3fQ7FWbw/vcXtORTnyaSFscOtABg+7Pnz6YZ6c27fG1/aN8CjfwoUEUIdwqWQ==}
+
+  recma-stringify@1.0.0:
+    resolution: {integrity: sha512-cjwII1MdIIVloKvC9ErQ+OgAtwHBmcZ0Bg4ciz78FtbT8In39aAYbaA7zvxQ61xVMSPE8WxhLwLbhif4Js2C+g==}
 
   redaxios@0.5.1:
     resolution: {integrity: sha512-FSD2AmfdbkYwl7KDExYQlVvIrFz6Yd83pGfaGjBzM9F6rpq8g652Q4Yq5QD4c+nf4g2AgeElv1y+8ajUPiOYMg==}
@@ -9512,6 +13295,15 @@ packages:
   regenerator-runtime@0.14.1:
     resolution: {integrity: sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==}
 
+  regex-recursion@6.0.2:
+    resolution: {integrity: sha512-0YCaSCq2VRIebiaUviZNs0cBz1kg5kVS2UKUfNIx8YVs1cN3AV7NTctO5FOKBA+UT2BPJIWZauYHPqJODG50cg==}
+
+  regex-utilities@2.3.0:
+    resolution: {integrity: sha512-8VhliFJAWRaUiVvREIiW2NXXTmHs4vMNnSzuJVhscgmGav3g9VDxLrQndI3dZZVVdp0ZO/5v0xmX516/7M9cng==}
+
+  regex@6.1.0:
+    resolution: {integrity: sha512-6VwtthbV4o/7+OaAF9I5L5V3llLEsoPyq9P1JVXkedTP33c7MfCG0/5NOPcSJn0TzXcG9YUrR0gQSWioew3LDg==}
+
   regexp.prototype.flags@1.5.4:
     resolution: {integrity: sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==}
     engines: {node: '>= 0.4'}
@@ -9531,6 +13323,39 @@ packages:
     resolution: {integrity: sha512-NZQZdC5wOE/H3UT28fVGL+ikOZcEzfMGk/c3iN9UGxzWHMa1op7274oyiUVrAG4B2EuFhus8SvkaYnhvW92p9Q==}
     hasBin: true
 
+  rehype-harden@1.1.8:
+    resolution: {integrity: sha512-Qn7vR1xrf6fZCrkm9TDWi/AB4ylrHy+jqsNm1EHOAmbARYA6gsnVJBq/sdBh6kmT4NEZxH5vgIjrscefJAOXcw==}
+
+  rehype-raw@7.0.0:
+    resolution: {integrity: sha512-/aE8hCfKlQeA8LmyeyQvQF3eBiLRGNlfBJEvWH7ivp9sBqs7TNqBL5X3v157rM4IFETqDnIOO+z5M/biZbo9Ww==}
+
+  rehype-recma@1.0.0:
+    resolution: {integrity: sha512-lqA4rGUf1JmacCNWWZx0Wv1dHqMwxzsDWYMTowuplHF3xH0N/MmrZ/G3BDZnzAkRmxDadujCjaKM2hqYdCBOGw==}
+
+  rehype-sanitize@6.0.0:
+    resolution: {integrity: sha512-CsnhKNsyI8Tub6L4sm5ZFsme4puGfc6pYylvXo1AeqaGbjOYyzNv3qZPwvs0oMJ39eryyeOdmxwUIo94IpEhqg==}
+
+  remark-gfm@4.0.1:
+    resolution: {integrity: sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==}
+
+  remark-mdx@3.1.1:
+    resolution: {integrity: sha512-Pjj2IYlUY3+D8x00UJsIOg5BEvfMyeI+2uLPn9VO9Wg4MEtN/VTIq2NEJQfde9PnX15KgtHyl9S0BcTnWrIuWg==}
+
+  remark-parse@11.0.0:
+    resolution: {integrity: sha512-FCxlKLNGknS5ba/1lmpYijMUzX2esxW5xQqjWxw2eHFfS2MSdaHVINFmhjo+qN1WhZhNimq0dZATN9pH0IDrpA==}
+
+  remark-rehype@11.1.2:
+    resolution: {integrity: sha512-Dh7l57ianaEoIpzbp0PC9UKAdCSVklD8E5Rpw7ETfbTl3FqcOOgq5q2LVDhgGCkaBv7p24JXikPdvhhmHvKMsw==}
+
+  remark-stringify@11.0.0:
+    resolution: {integrity: sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw==}
+
+  remark@15.0.1:
+    resolution: {integrity: sha512-Eht5w30ruCXgFmxVUSlNWQ9iiimq07URKeFS3hNc8cUWy1llX4KDWfyEDZRycMc+znsN9Ux5/tJ/BFdgdOwA3A==}
+
+  remend@1.3.0:
+    resolution: {integrity: sha512-iIhggPkhW3hFImKtB10w0dz4EZbs28mV/dmbcYVonWEJ6UGHHpP+bFZnTh6GNWJONg5m+U56JrL+8IxZRdgWjw==}
+
   require-directory@2.1.1:
     resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
     engines: {node: '>=0.10.0'}
@@ -9549,6 +13374,10 @@ packages:
   reselect@5.2.0:
     resolution: {integrity: sha512-AgZ3UOZm3YndfrJ4OYjgrT7bmCm/1iqkjvEfH/oYjzh6PD2qw4QuT3jjnXIrpdt4MTpMXclMT3lXbmRY+XRakw==}
 
+  resend@4.8.0:
+    resolution: {integrity: sha512-R8eBOFQDO6dzRTDmaMEdpqrkmgSjPpVXt4nGfWsZdYOet0kqra0xgbvTES6HmCriZEXbmGk3e0DiGIaLFTFSHA==}
+    engines: {node: '>=18'}
+
   resolve-cwd@3.0.0:
     resolution: {integrity: sha512-OrZaX2Mb+rJCpH/6CpSqt9xFVpN++x01XnN2ie9g6P5/3xelLAkXWVADpdz1IHD/KFfEXyE6V0U01OQ3UO2rEg==}
     engines: {node: '>=8'}
@@ -9591,6 +13420,14 @@ packages:
     resolution: {integrity: sha512-6IzJLuGi4+R14vwagDHX+JrXmPVtPpn4mffDJ1UdR7/Edm87fl6yi8mMBIVvFtJaNTUvjughmW4hwLhRG7gC1Q==}
     engines: {node: '>=4'}
 
+  restore-cursor@3.1.0:
+    resolution: {integrity: sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==}
+    engines: {node: '>=8'}
+
+  restore-cursor@4.0.0:
+    resolution: {integrity: sha512-I9fPXU9geO9bHOt9pHHOhOkYerIMsmVaWB0rA2AI9ERh/+x/i7MV5HKBNrg+ljO5eoPVgCcnFuRjJ9uH6I/3eg==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   reusify@1.1.0:
     resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
     engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
@@ -9600,6 +13437,9 @@ packages:
     deprecated: Rimraf versions prior to v4 are no longer supported
     hasBin: true
 
+  robust-predicates@3.0.3:
+    resolution: {integrity: sha512-NS3levdsRIUOmiJ8FZWCP7LG3QpJyrs/TE0Zpf1yvZu8cAJJ6QMW92H1c7kWpdIHo8RvmLxN/o2JXTKHp74lUA==}
+
   rolldown-plugin-dts@0.20.0:
     resolution: {integrity: sha512-cLAY1kN2ilTYMfZcFlGWbXnu6Nb+8uwUBsi+Mjbh4uIx7IN8uMOmJ7RxrrRgPsO4H7eSz3E+JwGoL1gyugiyUA==}
     engines: {node: '>=20.19.0'}
@@ -9629,6 +13469,11 @@ packages:
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
 
+  rolldown@1.0.1:
+    resolution: {integrity: sha512-X0KQHljNnEkWNqqiz9zJrGunh1B0HgOxLXvnFpCOcadzcy5qohZ3tqMEUg00vncoRovXuK3ZqCT9KnnKzoInFQ==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    hasBin: true
+
   rollup@4.59.0:
     resolution: {integrity: sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
@@ -9637,6 +13482,12 @@ packages:
   rou3@0.7.12:
     resolution: {integrity: sha512-iFE4hLDuloSWcD7mjdCDhx2bKcIsYbtOTpfH5MHHLSKMOUyjqQXTeZVa289uuwEGEKFoE/BAPbhaU4B774nceg==}
 
+  rou3@0.8.1:
+    resolution: {integrity: sha512-ePa+XGk00/3HuCqrEnK3LxJW7I0SdNg6EFzKUJG73hMAdDcOUC/i/aSz7LSDwLrGr33kal/rqOGydzwl6U7zBA==}
+
+  roughjs@4.6.6:
+    resolution: {integrity: sha512-ZUz/69+SYpFN/g/lUlo2FXcIjRkSu3nDarreVdGGndHEBJ6cXPdKguS8JGxwj5HA5xIbVKSmLgr5b3AWxtRfvQ==}
+
   rrweb-cssom@0.8.0:
     resolution: {integrity: sha512-guoltQEx+9aMf2gDZ0s62EcV8lsXR+0w8915TC3ITdn2YueuNjdAYh/levpU9nFaoChh9RUS5ZdQMrKfVEN9tw==}
 
@@ -9646,10 +13497,16 @@ packages:
   run-parallel@1.2.0:
     resolution: {integrity: sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==}
 
+  rw@1.3.3:
+    resolution: {integrity: sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ==}
+
   safe-array-concat@1.1.3:
     resolution: {integrity: sha512-AURm5f0jYEOydBj7VQlVvDrjeFgthDdEF5H1dP+6mNpoXOMo1quQqJ4wvJDyRZ9+pO3kGWoOdmV08cSv2aJV6Q==}
     engines: {node: '>=0.4'}
 
+  safe-buffer@5.1.2:
+    resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==}
+
   safe-buffer@5.2.1:
     resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
 
@@ -9661,6 +13518,10 @@ packages:
     resolution: {integrity: sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw==}
     engines: {node: '>= 0.4'}
 
+  safe-stable-stringify@2.5.0:
+    resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
+    engines: {node: '>=10'}
+
   safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
 
@@ -9671,9 +13532,21 @@ packages:
     resolution: {integrity: sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==}
     engines: {node: '>=v12.22.7'}
 
+  scheduler@0.25.0:
+    resolution: {integrity: sha512-xFVuu11jh+xcO7JOAGJNOXld8/TcEHK/4CituBUeUb5hqxJLj9YuemAEuvm9gQ/+pgXYfbQuqAkiYu+u7YEsNA==}
+
   scheduler@0.26.0:
     resolution: {integrity: sha512-NlHwttCI/l5gCPR3D1nNXtWABUmBwvZpEQiD4IXSbIDq8BzLIK/7Ir5gTFSGZDUu37K5cMNp0hFtzO38sC7gWA==}
 
+  scheduler@0.27.0:
+    resolution: {integrity: sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==}
+
+  scroll-into-view-if-needed@3.1.0:
+    resolution: {integrity: sha512-49oNpRjWRvnU8NyGVmUaYG4jtTkNonFZI86MmGRDqBphEK2EXT9gdEUoQPZhuBM8yWHxCWbobltqYO5M4XrUvQ==}
+
+  selderee@0.11.0:
+    resolution: {integrity: sha512-5TF+l7p4+OsnP8BCCvSyZiSPc4x4//p5uPwK8TCnVPJYRmU2aYKMpOXvw8zM5a5JvuuCGN1jmsMwuU2W02ukfA==}
+
   semver@5.7.2:
     resolution: {integrity: sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==}
     hasBin: true
@@ -9745,6 +13618,9 @@ packages:
     resolution: {integrity: sha512-RJRdvCo6IAnPdsvP/7m6bsQqNnn1FCBX5ZNtFL98MmFF/4xAIJTIg1YbHW5DC2W5SKZanrC6i4HsJqlajw/dZw==}
     engines: {node: '>= 0.4'}
 
+  setimmediate@1.0.5:
+    resolution: {integrity: sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==}
+
   setprototypeof@1.2.0:
     resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
 
@@ -9755,6 +13631,10 @@ packages:
   shallowequal@1.1.0:
     resolution: {integrity: sha512-y0m1JoUZSlPAjXVtPPW70aZWfIL/dSP7AFkRnniLCrK/8MDKog3TySTBmckD+RObVxH0v4Tox67+F14PdED2oQ==}
 
+  sharp@0.33.5:
+    resolution: {integrity: sha512-haPVm1EkS9pgvHrQ/F3Xy+hgcuMV0Wm9vfIBSiwZ05k+xgb0PkBQpGsAA/oWdDobNaZTH5ppvHtzCFbnSEwHVw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -9767,10 +13647,17 @@ packages:
     resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==}
     engines: {node: '>= 0.4'}
 
+  shiki@3.23.0:
+    resolution: {integrity: sha512-55Dj73uq9ZXL5zyeRPzHQsK7Nbyt6Y10k5s7OjuFZGMhpp4r/rsLBH0o/0fstIzX1Lep9VxefWljK/SKCzygIA==}
+
   side-channel-list@1.0.0:
     resolution: {integrity: sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==}
     engines: {node: '>= 0.4'}
 
+  side-channel-list@1.0.1:
+    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
+    engines: {node: '>= 0.4'}
+
   side-channel-map@1.0.1:
     resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
     engines: {node: '>= 0.4'}
@@ -9783,12 +13670,20 @@ packages:
     resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
     engines: {node: '>= 0.4'}
 
+  side-channel@1.1.1:
+    resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==}
+    engines: {node: '>= 0.4'}
+
   siginfo@2.0.0:
     resolution: {integrity: sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==}
 
   signal-exit@3.0.7:
     resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
 
+  signal-exit@4.1.0:
+    resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
+    engines: {node: '>=14'}
+
   simple-git-hooks@2.13.1:
     resolution: {integrity: sha512-WszCLXwT4h2k1ufIXAgsbiTOazqqevFCIncOuUBZJ91DdvWcC5+OFkluWRQPrcuSYd8fjq+o2y1QfWqYMoAToQ==}
     hasBin: true
@@ -9818,15 +13713,37 @@ packages:
     resolution: {integrity: sha512-ZA6oR3T/pEyuqwMgAKT0/hAv8oAXckzbkmR0UkUosQ+Mc4RxGoJkRmwHgHufaenlyAgE1Mxgpdcrf75y6XcnDg==}
     engines: {node: '>=14.16'}
 
+  slice-ansi@8.0.0:
+    resolution: {integrity: sha512-stxByr12oeeOyY2BlviTNQlYV5xOj47GirPr4yA1hE9JCtxfQN0+tVbkxwCtYDQWhEKWFHsEK48ORg5jrouCAg==}
+    engines: {node: '>=20'}
+
+  slug@11.0.1:
+    resolution: {integrity: sha512-VrM060OM/E7rdLQSnp6JHrzFfJFmqQBp0+TMhZStnEB8PfNliaZ9UWYjTHGHLUFVJorZ8TjVd/aKvIxHWU2O7g==}
+    hasBin: true
+
   slugify@1.6.6:
     resolution: {integrity: sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw==}
     engines: {node: '>=8.0.0'}
 
+  socket.io-adapter@2.5.8:
+    resolution: {integrity: sha512-6Oy52pbg+kvdCVvjcN+FnY7BvxZ7cIHNScbvztT/It5d0vbwoJoVZmF2gjJmnV0/4WlXRfG15zc45ySk9Ah8bw==}
+
+  socket.io-parser@4.2.6:
+    resolution: {integrity: sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==}
+    engines: {node: '>=10.0.0'}
+
+  socket.io@4.8.1:
+    resolution: {integrity: sha512-oZ7iUCxph8WYRHHcjBEc9unw3adt5CmSNlppj/5Q4k2RIrhl8Z5yY2Xr4j9zj0+wzVZ0bxmYoGSzKJnRl6A4yg==}
+    engines: {node: '>=10.2.0'}
+
+  sonic-boom@4.2.1:
+    resolution: {integrity: sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==}
+
   sonner@2.0.7:
     resolution: {integrity: sha512-W6ZN4p58k8aDKA4XPcx2hpIQXBRAgyiWVkYhT7CvK6D3iAu7xjvVyhQHg2/iaKJZ1XVJ4r7XuwGL+WGEK37i9w==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^18.0.0 || ^19.0.0 || ^19.0.0-rc
+      react-dom: ^18.0.0 || ^19.0.0 || ^19.0.0-rc
 
   source-map-js@1.2.1:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
@@ -9854,10 +13771,17 @@ packages:
     resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
     engines: {node: '>= 12'}
 
+  space-separated-tokens@2.0.2:
+    resolution: {integrity: sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==}
+
   split-on-first@1.1.0:
     resolution: {integrity: sha512-43ZssAJaMusuKWL8sKUBQXHWOpq8d6CfN/u1p4gUzfJkM05C8rxTmYrkIPTXapZpORA6LkkzcUulJ8FqA7Uudw==}
     engines: {node: '>=6'}
 
+  split2@4.2.0:
+    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
+    engines: {node: '>= 10.x'}
+
   sprintf-js@1.0.3:
     resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==}
 
@@ -9865,6 +13789,11 @@ packages:
     resolution: {integrity: sha512-qC9iz2FlN7DQl3+wjwn3802RTyjCx7sDvfQEXchwa6CWOx07/WVfh91gBmQ9fahw8snwGEWU3xGzOt4tFyHLxg==}
     engines: {node: '>= 0.6'}
 
+  srvx@0.11.15:
+    resolution: {integrity: sha512-iXsux0UcOjdvs0LCMa2Ws3WwcDUozA3JN3BquNXkaFPP7TpRqgunKdEgoZ/uwb1J6xaYHfxtz9Twlh6yzwM6Tg==}
+    engines: {node: '>=20.16.0'}
+    hasBin: true
+
   stable-hash@0.0.5:
     resolution: {integrity: sha512-+L3ccpzibovGXFK+Ap/f8LOS0ahMrHTf3xu7mMLSpEGU0EO9ucaysSylKo9eRDFNhWve/y275iPmIZ4z39a9iA==}
 
@@ -9894,6 +13823,18 @@ packages:
   standard-as-callback@2.1.0:
     resolution: {integrity: sha512-qoRRSyROncaz1z0mvYqIE4lCd9p2R90i6GxW3uZv5ucSu8tU7B5HXUP1gG8pVZsYNVaXjk8ClXHPttLyxAL48A==}
 
+  state-local@1.0.7:
+    resolution: {integrity: sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w==}
+
+  stats-gl@2.4.2:
+    resolution: {integrity: sha512-g5O9B0hm9CvnM36+v7SFl39T7hmAlv541tU81ME8YeSb3i1CIP5/QdDeSB3A0la0bKNHpxpwxOVRo2wFTYEosQ==}
+    peerDependencies:
+      '@types/three': '*'
+      three: '*'
+
+  stats.js@0.17.0:
+    resolution: {integrity: sha512-hNKz8phvYLPEcRkeG1rsGmV5ChMjKDAWU7/OJJdDErPBNChQXxCo3WZurGpnWc6gZhAzEPFad1aVgyOANH1sMw==}
+
   statuses@1.5.0:
     resolution: {integrity: sha512-OpZ3zP+jT1PI7I8nemJX4AKmAX070ZkYPVWV/AaKTJl+tXCTGyVdC1a4SL8RUQYEwk/f34ZX8UTykN68FwrqAA==}
     engines: {node: '>= 0.6'}
@@ -9916,6 +13857,16 @@ packages:
     resolution: {integrity: sha512-uyQK/mx5QjHun80FLJTfaWE7JtwfRMKBLkMne6udYOmvH0CawotVa7TfgYHzAnpphn4+TweIx1QKMnRIbipmUg==}
     engines: {node: '>= 0.10.0'}
 
+  streamdown@2.5.0:
+    resolution: {integrity: sha512-/tTnURfIOxZK/pqJAxsfCvETG/XCJHoWnk3jq9xLcuz6CSpnjjuxSRBTTL4PKGhxiZQf0lqPxGhImdpwcZ2XwA==}
+    peerDependencies:
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
+
+  streamsearch@1.1.0:
+    resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
+    engines: {node: '>=10.0.0'}
+
   strict-uri-encode@2.0.0:
     resolution: {integrity: sha512-QwiXZgpRcKkhTj2Scnn++4PKtWsH0kpzZ62L2R6c/LUVYv7hVnZqcg2+sMuT6R7Jusu1vviK/MFsu6kNJfWlEQ==}
     engines: {node: '>=4'}
@@ -9932,6 +13883,18 @@ packages:
     resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
     engines: {node: '>=8'}
 
+  string-width@5.1.2:
+    resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
+    engines: {node: '>=12'}
+
+  string-width@7.2.0:
+    resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
+    engines: {node: '>=18'}
+
+  string-width@8.2.2:
+    resolution: {integrity: sha512-GaPUh5gfdrYzqeVNZvUfT23vYYxXzKYidUcnMtJg/3rxRV63EFZy3k6xfKlmfeJD0176lnUV/Usr3XcwSvFzpg==}
+    engines: {node: '>=20'}
+
   string.prototype.matchall@4.0.12:
     resolution: {integrity: sha512-6CC9uyBL+/48dYizRf7H7VAYCMCNTBeM78x/VTUe9bFEaxBepPJDa1Ow99LqI/1yF7kuy7Q3cQsYMrcjGUcskA==}
     engines: {node: '>= 0.4'}
@@ -9951,6 +13914,15 @@ packages:
     resolution: {integrity: sha512-UXSH262CSZY1tfu3G3Secr6uGLCFVPMhIqHjlgCUtCCcgihYc/xKs9djMTMUOb2j1mVSeU8EU6NWc/iQKU6Gfg==}
     engines: {node: '>= 0.4'}
 
+  string_decoder@1.1.1:
+    resolution: {integrity: sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  stringify-entities@4.0.4:
+    resolution: {integrity: sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==}
+
   strip-ansi@5.2.0:
     resolution: {integrity: sha512-DuRs1gKbBqsMKIZlrffwlug8MHkcnpjs5VPmL1PAh+mA30U0DTotfDZ0d2UUsXpPmPmMMJ6W773MaA3J+lbiWA==}
     engines: {node: '>=6'}
@@ -9990,9 +13962,43 @@ packages:
   strip-literal@3.1.0:
     resolution: {integrity: sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==}
 
+  stripe@18.5.0:
+    resolution: {integrity: sha512-Hp+wFiEQtCB0LlNgcFh5uVyKznpDjzyUZ+CNVEf+I3fhlYvh7rZruIg+jOwzJRCpy0ZTPMjlzm7J2/M2N6d+DA==}
+    engines: {node: '>=12.*'}
+    peerDependencies:
+      '@types/node': '>=12.x.x'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  strnum@2.4.1:
+    resolution: {integrity: sha512-M9eUSMT2dCB2cTNPG7UYj6KuK7RJR2SN2+yCV/fTW3xzTCS6EaGZ5pSMgDIjB7r8zSfTGk+dvvn9rTjpVS9Mwg==}
+
   structured-headers@0.4.1:
     resolution: {integrity: sha512-0MP/Cxx5SzeeZ10p/bZI0S6MpgD+yxAhi1BOQ34jgnMXsCq3j1t6tQnZu+KdlL7dvJTLT3g9xN8tl10TqgFMcg==}
 
+  style-to-js@1.1.21:
+    resolution: {integrity: sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ==}
+
+  style-to-object@1.0.14:
+    resolution: {integrity: sha512-LIN7rULI0jBscWQYaSswptyderlarFkjQ+t79nzty8tcIAceVomEVlLzH5VP4Cmsv6MtKhs7qaAiwlcp+Mgaxw==}
+
+  styled-jsx@5.1.6:
+    resolution: {integrity: sha512-qSVyDTeMotdvQYoHWLNGwRFJHC+i+ZvdBRYosOFgC+Wg1vx4frN2/RG/NA7SYqqvKNLf39P2LSRA2pu6n0XYZA==}
+    engines: {node: '>= 12.0.0'}
+    peerDependencies:
+      '@babel/core': '*'
+      babel-plugin-macros: '*'
+      react: '>= 16.8.0 || 17.x.x || ^18.0.0-0 || ^19.0.0-0'
+    peerDependenciesMeta:
+      '@babel/core':
+        optional: true
+      babel-plugin-macros:
+        optional: true
+
+  stylis@4.4.0:
+    resolution: {integrity: sha512-5Z9ZpRzfuH6l/UAvCPAPUo3665Nk2wLaZU3x+TLHKVzIz33+sbJqbtrYoC3KD4/uVOr2Zp+L0LySezP9OHV9yA==}
+
   sucrase@3.35.1:
     resolution: {integrity: sha512-DhuTmvZWux4H1UOnWMB3sk0sbaCVOoQZjv8u1rDoTV0HTdGem9hkAZtl4JZy8P2z4Bg0nT+YMeOFyVr4zcG5Tw==}
     engines: {node: '>=16 || 14 >=14.17'}
@@ -10018,6 +14024,16 @@ packages:
     resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
     engines: {node: '>= 0.4'}
 
+  suspend-react@0.1.3:
+    resolution: {integrity: sha512-aqldKgX9aZqpoDp3e8/BZ8Dm7x1pJl+qI3ZKxDN0i/IQTWUwBx/ManmlVJ3wowqbno6c2bmiIfs+Um6LbsjJyQ==}
+    peerDependencies:
+      react: '>=17.0'
+
+  swr@2.4.2:
+    resolution: {integrity: sha512-ej644Y2bvkIajfR32KGeSSdBXQW+ScjGjkybZgSE7kFpk9eGnV44XY9FJylXi+W75pavSX1PVNB57W5EbhGIYw==}
+    peerDependencies:
+      react: ^16.11.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
   symbol-tree@3.2.4:
     resolution: {integrity: sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==}
 
@@ -10025,6 +14041,10 @@ packages:
     resolution: {integrity: sha512-MeQTA1r0litLUf0Rp/iisCaL8761lKAZHaimlbGK4j0HysC4PLfqygQj9srcs0m2RdtDYnF8UuYyKpbjHYp7Jw==}
     engines: {node: ^14.18.0 || >=16.0.0}
 
+  tagged-tag@1.0.0:
+    resolution: {integrity: sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==}
+    engines: {node: '>=20'}
+
   tailwind-merge@3.6.0:
     resolution: {integrity: sha512-uxL7qAVQriqRQPAyK3pj66VqskWqoZ37PW94jwOTwNfq/z9oyu1V+eqrZqtR2+fCiXdYOZe/Modt8GtvqNzu+w==}
 
@@ -10054,6 +14074,10 @@ packages:
     resolution: {integrity: sha512-un0FmiRUQNr5PJqy9kP7c40F5BOfpGlYTrxonDChEZB7pzZxRNp/bt+ymiy9/npwXya9KH99nJ/GXFIiUkYGFQ==}
     engines: {node: '>=8'}
 
+  terminal-size@4.0.1:
+    resolution: {integrity: sha512-avMLDQpUI9I5XFrklECw1ZEUPJhqzcwSWsyyI8blhRLT+8N1jLJWLWWYQpB2q2xthq8xDvjZPISVh53T/+CLYQ==}
+    engines: {node: '>=18'}
+
   terser@5.44.1:
     resolution: {integrity: sha512-t/R3R/n0MSwnnazuPpPNVO60LX0SKL45pyl9YlvxIdkH0Of7D5qM2EVe+yASRIlY5pZ73nclYJfNANGWPwFDZw==}
     engines: {node: '>=10'}
@@ -10070,12 +14094,36 @@ packages:
   thenify@3.3.1:
     resolution: {integrity: sha512-RVZSIV5IG10Hk3enotrhvz0T9em6cyHBLkH/YAZuKqd8hRkKhSfCGIcP2KUY0EPxndzANBmNllzWPwak+bheSw==}
 
+  thread-stream@3.2.0:
+    resolution: {integrity: sha512-zLBvqpwr4Esa0kRjcrzGU6zL25lePWaCLMx0RQFrmteozIfeNdaMLpG5U7PeHzvlFkAWaRKA9/KVW4F60iB+qw==}
+
+  three-mesh-bvh@0.8.3:
+    resolution: {integrity: sha512-4G5lBaF+g2auKX3P0yqx+MJC6oVt6sB5k+CchS6Ob0qvH0YIhuUk1eYr7ktsIpY+albCqE80/FVQGV190PmiAg==}
+    peerDependencies:
+      three: '>= 0.159.0'
+
+  three-stdlib@2.36.1:
+    resolution: {integrity: sha512-XyGQrFmNQ5O/IoKm556ftwKsBg11TIb301MB5dWNicziQBEs2g3gtOYIf7pFiLa0zI2gUwhtCjv9fmjnxKZ1Cg==}
+    peerDependencies:
+      three: '>=0.128.0'
+
+  three@0.178.0:
+    resolution: {integrity: sha512-ybFIB0+x8mz0wnZgSGy2MO/WCO6xZhQSZnmfytSPyNpM0sBafGRVhdaj+erYh5U+RhQOAg/eXqw5uVDiM2BjhQ==}
+
   throat@5.0.0:
     resolution: {integrity: sha512-fcwX4mndzpLQKBS1DVYhGAcYaYt7vsHNIvQV+WXMvnow5cgjPphq5CaayLaGsjRdSCKZFNGt7/GYAuXaNOiYCA==}
 
+  throttleit@2.1.0:
+    resolution: {integrity: sha512-nt6AMGKW1p/70DF/hGBdJB57B8Tspmbp5gfJ8ilhLnt7kkr2ye7hzD6NVG8GGErk2HWF34igrL2CXmNIkzKqKw==}
+    engines: {node: '>=18'}
+
   tiny-invariant@1.3.3:
     resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
 
+  tiny-lru@11.4.7:
+    resolution: {integrity: sha512-w/Te7uMUVeH0CR8vZIjr+XiN41V+30lkDdK+NRIDCUYKKuL9VcmaUEmaPISuwGhLlrTGh5yu18lENtR9axSxYw==}
+    engines: {node: '>=12'}
+
   tiny-warning@1.0.3:
     resolution: {integrity: sha512-lBN9zLN/oAf68o3zNXYrdCt1kP8WsiGW8Oo2ka41b2IM5JL/S1CTyX1rW0mb/zSuJun0ZUrDxx4sqvYS2FWzPA==}
 
@@ -10147,6 +14195,9 @@ packages:
     resolution: {integrity: sha512-FVDYdxtnj0G6Qm/DhNPSb8Ju59ULcup3tuJxkFb5K8Bv2pUXILbf0xZWU8PX8Ov19OXljbUyveOFwRMwkXzO+A==}
     engines: {node: '>=16'}
 
+  tr46@0.0.3:
+    resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
+
   tr46@3.0.0:
     resolution: {integrity: sha512-l7FvfAHlcmulp8kr+flpQZmVwtu7nfRV7NZujtN0OqES8EL4O4e0qqzL0DC5gAvx/ZC/9lk6rhcUwYvkBnBnYA==}
     engines: {node: '>=12'}
@@ -10159,9 +14210,28 @@ packages:
     resolution: {integrity: sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==}
     hasBin: true
 
-  ts-api-utils@2.1.0:
-    resolution: {integrity: sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==}
-    engines: {node: '>=18.12'}
+  trim-lines@3.0.1:
+    resolution: {integrity: sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==}
+
+  troika-three-text@0.52.4:
+    resolution: {integrity: sha512-V50EwcYGruV5rUZ9F4aNsrytGdKcXKALjEtQXIOBfhVoZU9VAqZNIoGQ3TMiooVqFAbR1w15T+f+8gkzoFzawg==}
+    peerDependencies:
+      three: '>=0.125.0'
+
+  troika-three-utils@0.52.4:
+    resolution: {integrity: sha512-NORAStSVa/BDiG52Mfudk4j1FG4jC4ILutB3foPnfGbOeIs9+G5vZLa0pnmnaftZUGm4UwSoqEpWdqvC7zms3A==}
+    peerDependencies:
+      three: '>=0.125.0'
+
+  troika-worker-utils@0.52.0:
+    resolution: {integrity: sha512-W1CpvTHykaPH5brv5VHLfQo9D1OYuo0cSBEUQFFT/nBUzM8iD6Lq2/tgG/f1OelbAS1WtaTPQzE5uM49egnngw==}
+
+  trough@2.2.0:
+    resolution: {integrity: sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==}
+
+  ts-api-utils@2.1.0:
+    resolution: {integrity: sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==}
+    engines: {node: '>=18.12'}
     peerDependencies:
       typescript: '>=4.8.4'
 
@@ -10170,6 +14240,10 @@ packages:
     peerDependencies:
       typescript: '>=4.0.0'
 
+  ts-dedent@2.3.0:
+    resolution: {integrity: sha512-JfJeIHke7y2egdGGgRAvpCwYFUsHlM2gPcrVOxFkznt/4uzQ7HFmvE63iFHVLBJNDuyDOQgijDK/tXH/f6Msjg==}
+    engines: {node: '>=6.10'}
+
   ts-interface-checker@0.1.13:
     resolution: {integrity: sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==}
 
@@ -10236,9 +14310,6 @@ packages:
       unplugin-unused:
         optional: true
 
-  tslib@1.14.1:
-    resolution: {integrity: sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==}
-
   tslib@2.8.1:
     resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
 
@@ -10270,6 +14341,9 @@ packages:
     resolution: {integrity: sha512-axr3IdNuVIxnaK5XGEUFTu3YmAQ6lllgrvqfEoR16g/HGnYY/6We4oWENtAnzK6/LpJ2ur9PAb80RBt7/U4ugw==}
     engines: {node: '>= 6.0.0'}
 
+  tunnel-rat@0.1.2:
+    resolution: {integrity: sha512-lR5VHmkPhzdhrM092lI2nACsLO4QubF0/yoOhzX7c+wIpbN1GjHNzCc91QlpxBi+cnx8vVJ+Ur6vL5cEoQPFpQ==}
+
   turbo@2.10.4:
     resolution: {integrity: sha512-GQpduILaKjoaGljw097ScsSyKTtZSY7cZ3bJktzfTkPMyCf3ShKLuXK2IaOEN2Plziml+ArR7WJ1m+V4VbnaKQ==}
     hasBin: true
@@ -10277,6 +14351,9 @@ packages:
   tw-animate-css@1.4.0:
     resolution: {integrity: sha512-7bziOlRqH0hJx80h/3mbicLW7o8qLsH5+RaLR2t+OHM3D0JlWGODQKQ4cxbK7WlvmUxpcj6Kgu6EKqjrGFe3QQ==}
 
+  tweedle.js@2.1.0:
+    resolution: {integrity: sha512-0ReQgVjepoZkE6t0upWNgCRbplHkQJQYk1LStXugwSR728GLFmGDRuaQJlxeC/iBlxud6+P1RdODjaO25vHAqw==}
+
   type-check@0.4.0:
     resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==}
     engines: {node: '>= 0.8.0'}
@@ -10293,6 +14370,10 @@ packages:
     resolution: {integrity: sha512-Ne2YiiGN8bmrmJJEuTWTLJR32nh/JdL1+PSicowtNb0WFpn59GK8/lfD61bVtzguz7b3PBt74nxpv/Pw5po5Rg==}
     engines: {node: '>=8'}
 
+  type-fest@5.8.0:
+    resolution: {integrity: sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==}
+    engines: {node: '>=20'}
+
   typed-array-buffer@1.0.3:
     resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
     engines: {node: '>= 0.4'}
@@ -10309,6 +14390,9 @@ packages:
     resolution: {integrity: sha512-3KS2b+kL7fsuk/eJZ7EQdnEmQoaho/r6KUef7hxvltNA5DR8NAUM+8wJMbJyZ4G9/7i3v5zPBIMN5aybAh2/Jg==}
     engines: {node: '>= 0.4'}
 
+  typed-signals@2.5.0:
+    resolution: {integrity: sha512-m9lHc3eBCJerXYdx+G0uWZihyUXdqTzzgOdqiDDsoUo75WjhFJH6vP5/6w/xhyu04zoxHUqgYhf9FEt85dk/Ng==}
+
   typescript@5.6.3:
     resolution: {integrity: sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==}
     engines: {node: '>=14.17'}
@@ -10335,6 +14419,10 @@ packages:
   ufo@1.6.4:
     resolution: {integrity: sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA==}
 
+  uint8array-extras@1.5.0:
+    resolution: {integrity: sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==}
+    engines: {node: '>=18'}
+
   ultracite@5.0.39:
     resolution: {integrity: sha512-yyrftv3h7aIGEWYVfRGWn8fBB6vbCjmTK57LQr48uZsB1r/xs1vEHlwdZe4m7xfH5Bmch6xf7q9aylh0vVtkrQ==}
     hasBin: true
@@ -10349,23 +14437,30 @@ packages:
   unconfig@0.6.1:
     resolution: {integrity: sha512-cVU+/sPloZqOyJEAfNwnQSFCzFrZm85vcVkryH7lnlB/PiTycUkAjt5Ds79cfIshGOZ+M5v3PBDnKgpmlE5DtA==}
 
+  uncrypto@0.1.3:
+    resolution: {integrity: sha512-Ql87qFHB3s/De2ClA9e0gsnS6zXG27SkTiSJwjCc9MebbfapQfuPzumMIUMi38ezPZVNFcHI9sUIepeQfw8J8Q==}
+
   undici-types@6.21.0:
     resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
 
   undici-types@7.16.0:
     resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
 
-  undici-types@7.18.2:
-    resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
-
   undici@6.27.0:
     resolution: {integrity: sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==}
     engines: {node: '>=18.17'}
 
+  undici@7.28.0:
+    resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==}
+    engines: {node: '>=20.18.1'}
+
   undici@8.5.0:
     resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==}
     engines: {node: '>=22.19.0'}
 
+  unenv@2.0.0-rc.24:
+    resolution: {integrity: sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw==}
+
   unicode-canonical-property-names-ecmascript@2.0.1:
     resolution: {integrity: sha512-dA8WbNeb2a6oQzAQ55YlT5vQAWGV9WXOsi3SskE3bcCdM0P4SDd+24zS/OCacdRq5BkdsRj9q3Pg6YyQoxIGqg==}
     engines: {node: '>=4'}
@@ -10382,10 +14477,34 @@ packages:
     resolution: {integrity: sha512-hpbDzxUY9BFwX+UeBnxv3Sh1q7HFxj48DTmXchNgRa46lO8uj3/1iEn3MiNUYTg1g9ctIqXCCERn8gYZhHC5lQ==}
     engines: {node: '>=4'}
 
+  unified@11.0.5:
+    resolution: {integrity: sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA==}
+
   unique-string@2.0.0:
     resolution: {integrity: sha512-uNaeirEPvpZWSgzwsPGtU2zVSTrn/8L5q/IexZmH0eH6SA73CmAA5U4GwORTxQAZs95TAXLNqeLoPPNO5gZfWg==}
     engines: {node: '>=8'}
 
+  unist-util-is@6.0.1:
+    resolution: {integrity: sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==}
+
+  unist-util-position-from-estree@2.0.0:
+    resolution: {integrity: sha512-KaFVRjoqLyF6YXCbVLNad/eS4+OfPQQn2yOd7zF/h5T/CSL2v8NpN6a5TPvtbXthAGw5nG+PuTtq+DdIZr+cRQ==}
+
+  unist-util-position@5.0.0:
+    resolution: {integrity: sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==}
+
+  unist-util-stringify-position@4.0.0:
+    resolution: {integrity: sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==}
+
+  unist-util-visit-parents@6.0.2:
+    resolution: {integrity: sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ==}
+
+  unist-util-visit@5.1.0:
+    resolution: {integrity: sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg==}
+
+  universal-user-agent@7.0.3:
+    resolution: {integrity: sha512-TmnEAEAsBJVZM/AADELsK76llnwcf9vMKuPz8JflO1frO8Lchitr0fNaN9d+Ap0BjKtqWqd/J17qeDnXh8CL2A==}
+
   universalify@0.2.0:
     resolution: {integrity: sha512-CJ1QgKmNg3CwvAv/kOFmtnEN05f0D/cn9QntgNOQlQF9dgvVTHj3t+8JPdjqawCHk7V/KA+fbUqzZ9XWhcqPUg==}
     engines: {node: '>= 4.0.0'}
@@ -10398,6 +14517,39 @@ packages:
     resolution: {integrity: sha512-5uKD0nqiYVzlmCRs01Fhs2BdkEgBS3SAVP6ndrBsuK42iC2+JHyxM05Rm9G8+5mkmRtzMZGY8Ct5+mliZxU/Ww==}
     engines: {node: '>=18.12.0'}
 
+  unplugin@3.3.0:
+    resolution: {integrity: sha512-qa66K+crbfyE6JK10GjvbJeRrOsuC/JpbnHctfyp/i4oBTxWOzJfRZyDiOk1PtErMFRu8JhsU/wPvOdBNWe5Rg==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      '@farmfe/core': '*'
+      '@rspack/core': '*'
+      bun-types-no-globals: '*'
+      esbuild: '*'
+      rolldown: '*'
+      rollup: 4.59.0
+      unloader: '*'
+      vite: 7.3.5
+      webpack: '*'
+    peerDependenciesMeta:
+      '@farmfe/core':
+        optional: true
+      '@rspack/core':
+        optional: true
+      bun-types-no-globals:
+        optional: true
+      esbuild:
+        optional: true
+      rolldown:
+        optional: true
+      rollup:
+        optional: true
+      unloader:
+        optional: true
+      vite:
+        optional: true
+      webpack:
+        optional: true
+
   unrs-resolver@1.11.1:
     resolution: {integrity: sha512-bSjt9pjaEBnNiGgc9rUiHGKv5l4/TGzDmYw3RhnkJGtLhbnnA/5qJj7x3dNDCRx/PJxu774LlH8lCOlB4hEfKg==}
 
@@ -10428,7 +14580,7 @@ packages:
     engines: {node: '>=10'}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -10437,19 +14589,19 @@ packages:
     resolution: {integrity: sha512-kvds8BHR2k28cFsxW8k3nc/tRga2rs1RHYCqmmGqb90MEeE++oALwzh2COiuBLO1/QXiOuShXoSN2ZpWnMmvuQ==}
     engines: {node: '>= 16.0.0'}
     peerDependencies:
-      react: 19.1.0
+      react: '*'
 
   use-latest-callback@0.2.6:
     resolution: {integrity: sha512-FvRG9i1HSo0wagmX63Vrm8SnlUU3LMM3WyZkQ76RnslpBrX694AdG4A0zQBx2B3ZifFA0yv/BaEHGBnEax5rZg==}
     peerDependencies:
-      react: 19.1.0
+      react: '>=16.8'
 
   use-sidecar@1.1.3:
     resolution: {integrity: sha512-Fedw0aZvkhynoPYlA5WXrMCAMm+nSWdZt6lzJQ7Ok8S6Q+VsHmHpRWndVRJ8Be0ZbkfPc5LRYH+5XrzXcEeLRQ==}
     engines: {node: '>=10'}
     peerDependencies:
       '@types/react': '*'
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
     peerDependenciesMeta:
       '@types/react':
         optional: true
@@ -10457,7 +14609,14 @@ packages:
   use-sync-external-store@1.6.0:
     resolution: {integrity: sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w==}
     peerDependencies:
-      react: 19.1.0
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  utility-types@3.11.0:
+    resolution: {integrity: sha512-6Z7Ma2aVEWisaL6TvBCy7P8rm2LQoPv6dJ7ecIaIixHcwfbJ0x7mWdbcwlIM5IGQxPZSFYeqRCqlOOeKoJYMkw==}
+    engines: {node: '>= 4'}
 
   utils-merge@1.0.1:
     resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
@@ -10475,6 +14634,14 @@ packages:
     resolution: {integrity: sha512-kiGUalWN+rgBJ/1OHZsBtU4rXZOfj/7rKQxULKlIzwzQSvMJUUNgPwJEEh7gU6xEVxC0ahoOBvN2YI8GH6FNgA==}
     engines: {node: '>=10.12.0'}
 
+  valibot@1.4.2:
+    resolution: {integrity: sha512-gjdCvJ6d3RyHAneqxMYMW9QMCwYMb3jpOO0IyHZV1bnRHFBHrX3VkIILt5XYR0WhwHiH7Mty8ovuPZ/O3gamrg==}
+    peerDependencies:
+      typescript: '>=5'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
   validate-npm-package-name@5.0.1:
     resolution: {integrity: sha512-OljLrQ9SQdOUqTaQxqL5dEfZWrXExyyWsozYlAWFawPVNuD83igl7uJD2RTkNMbniIYgt8l81eCJGIdQF7avLQ==}
     engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
@@ -10486,8 +14653,17 @@ packages:
   vaul@1.1.2:
     resolution: {integrity: sha512-ZFkClGpWyI2WUQjdLJ/BaGuV6AVQiJ3uELGk3OYtP+B6yCO7Cmn9vPFXVJkRaGkOJu3m8bQMgtyzNHixULceQA==}
     peerDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0
+      react: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
+      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
+
+  vfile-location@5.0.3:
+    resolution: {integrity: sha512-5yXvWDEgqeiYiBe1lbxYF7UMAIm/IcopxMHrMQDq3nvKcjPKIhZklUKL+AE7J7uApI4kwe2snsK+eI6UTj9EHg==}
+
+  vfile-message@4.0.3:
+    resolution: {integrity: sha512-QTHzsGd1EhbZs4AsQ20JX1rC3cOlt/IWJruk893DfLRr57lcnOeMaWG4K0JrRta4mIJZKth2Au3mM3u03/JWKw==}
+
+  vfile@6.0.3:
+    resolution: {integrity: sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==}
 
   victory-vendor@36.9.2:
     resolution: {integrity: sha512-PnpQQMuxlwYdocC8fIJqVXvkeViHYzotI+NJrCuav0ZYFoq912ZHBk3mCeuj+5/VpodOjPe1z0Fk2ihgzlXqjQ==}
@@ -10550,6 +14726,14 @@ packages:
       yaml:
         optional: true
 
+  vitefu@1.1.3:
+    resolution: {integrity: sha512-ub4okH7Z5KLjb6hDyjqrGXqWtWvoYdU3IGm/NorpgHncKoLTCfRIbvlhBm7r0YstIaQRYlp4yEbFqDcKSzXSSg==}
+    peerDependencies:
+      vite: 7.3.5
+    peerDependenciesMeta:
+      vite:
+        optional: true
+
   vitest@3.2.7:
     resolution: {integrity: sha512-KrxIJ62Fd89gfysR4WotlgZABiz2dqFPgqGzX7s+CwsqLFomRH7777ZcrOD6+WVAh7khPQP41A+BKbpcJFrdEg==}
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
@@ -10578,53 +14762,15 @@ packages:
       jsdom:
         optional: true
 
-  vitest@4.1.6:
-    resolution: {integrity: sha512-6lvjbS3p9b4CrdCmguzbh2/4uoXhGE2q71R4OX5sqF9R1bo9Xd6fGrMAfvp5wnCzlBnFVdCOp6onuTQVbo8iUQ==}
-    engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
-    hasBin: true
-    peerDependencies:
-      '@edge-runtime/vm': '*'
-      '@opentelemetry/api': ^1.9.0
-      '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
-      '@vitest/browser-playwright': 4.1.6
-      '@vitest/browser-preview': 4.1.6
-      '@vitest/browser-webdriverio': 4.1.6
-      '@vitest/coverage-istanbul': 4.1.6
-      '@vitest/coverage-v8': 4.1.6
-      '@vitest/ui': 4.1.6
-      happy-dom: '*'
-      jsdom: '*'
-      vite: 7.3.5
-    peerDependenciesMeta:
-      '@edge-runtime/vm':
-        optional: true
-      '@opentelemetry/api':
-        optional: true
-      '@types/node':
-        optional: true
-      '@vitest/browser-playwright':
-        optional: true
-      '@vitest/browser-preview':
-        optional: true
-      '@vitest/browser-webdriverio':
-        optional: true
-      '@vitest/coverage-istanbul':
-        optional: true
-      '@vitest/coverage-v8':
-        optional: true
-      '@vitest/ui':
-        optional: true
-      happy-dom:
-        optional: true
-      jsdom:
-        optional: true
-
   vlq@0.2.3:
     resolution: {integrity: sha512-DRibZL6DsNhIgYQ+wNdWDL2SL3bKPlVrRiBqV5yuMm++op8W4kGFtaQfCs4KEJn0wBZcHVHJ3eoywX8983k1ow==}
 
   vlq@1.0.1:
     resolution: {integrity: sha512-gQpnTgkubC6hQgdIcRdYGDSDc+SaujOdyesZQMv6JlfQee/9Mp0Qhnys6WxDWvQnL5WZdT7o2Ul187aSt0Rq+w==}
 
+  voidhash@0.0.1-alpha.4:
+    resolution: {integrity: sha512-UYZBKJIMrCjEMNisDE1MU1MLQRJZ1Tn/TsnM3ms6il4jgLS1/81JVXKVbAXLAZDBTwHUbRnz09U7Pr3mvOlWUA==}
+
   w3c-xmlserializer@4.0.0:
     resolution: {integrity: sha512-d+BFHzbiCx6zGfz0HyQ6Rg69w9k19nviJspaj4yNscGjrHu94sVP+aRm75yEbCh+r2/yR+7q6hux9LVtbuTGBw==}
     engines: {node: '>=14'}
@@ -10642,6 +14788,18 @@ packages:
   wcwidth@1.0.1:
     resolution: {integrity: sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==}
 
+  web-namespaces@2.0.1:
+    resolution: {integrity: sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==}
+
+  webgl-constants@1.1.1:
+    resolution: {integrity: sha512-LkBXKjU5r9vAW7Gcu3T5u+5cvSvh5WwINdr0C+9jpzVB41cjQAP5ePArDtk/WHYdVj0GefCgM73BA7FlIiNtdg==}
+
+  webgl-sdf-generator@1.1.1:
+    resolution: {integrity: sha512-9Z0JcMTFxeE+b2x1LJTdnaT8rT8aEp7MVxkNwoycNmJWwPdzoXzMh0BjJSh/AEFP+KPYZUli814h8bJZFIZ2jA==}
+
+  webidl-conversions@3.0.1:
+    resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}
+
   webidl-conversions@5.0.0:
     resolution: {integrity: sha512-VlZwKPCkYKxQgeSbH5EyngOmRp7Ww7I9rQLERETtf5ofd9pGeswWiOtogpEO850jziPRarreGxn5QIiTqpb2wA==}
     engines: {node: '>=8'}
@@ -10686,6 +14844,9 @@ packages:
     resolution: {integrity: sha512-De72GdQZzNTUBBChsXueQUnPKDkg/5A5zp7pFDuQAj5UFoENpiACU0wlCvzpAGnTkj++ihpKwKyYewn/XNUbKw==}
     engines: {node: '>=18'}
 
+  whatwg-url@5.0.0:
+    resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
+
   which-boxed-primitive@1.1.1:
     resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
     engines: {node: '>= 0.4'}
@@ -10712,6 +14873,10 @@ packages:
     engines: {node: '>=8'}
     hasBin: true
 
+  widest-line@6.0.0:
+    resolution: {integrity: sha512-U89AsyEeAsyoF0zVJBkG9zBgekjgjK7yk9sje3F4IQpXBJ10TF6ByLlIfjMhcmHMJgHZI4KHt4rdNfktzxIAMA==}
+    engines: {node: '>=20'}
+
   wonka@6.3.5:
     resolution: {integrity: sha512-SSil+ecw6B4/Dm7Pf2sAshKQ5hWFvfyGlfPbEd6A14dOH6VDjrmbY86u6nZvy9omGwwIPFR8V41+of1EezgoUw==}
 
@@ -10719,10 +14884,39 @@ packages:
     resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
     engines: {node: '>=0.10.0'}
 
+  workerd@1.20260526.1:
+    resolution: {integrity: sha512-IHzymht98p10JH1zzwdCpbViAqw97HrwKl7+KfZeASFMsYSrIsAULWdPn0LRC5FTUzBpamLNyKCCKxbgXHgRHQ==}
+    engines: {node: '>=16'}
+    hasBin: true
+
+  workers-ai-provider@3.3.1:
+    resolution: {integrity: sha512-vArwnmiAxQQF1clsXJd9ADn1xK9YUZVxE4umaMhrdsxM2kucxP430LfaoH4rn0AfoqtnuH3bfRhW1ak0r1x/8A==}
+    peerDependencies:
+      '@ai-sdk/anthropic': ^3.0.0
+      '@ai-sdk/google': ^3.0.0
+      '@ai-sdk/openai': ^3.0.0
+      '@ai-sdk/provider': ^3.0.0
+      ai: ^6.0.0
+    peerDependenciesMeta:
+      '@ai-sdk/anthropic':
+        optional: true
+      '@ai-sdk/google':
+        optional: true
+      '@ai-sdk/openai':
+        optional: true
+
   wrap-ansi@7.0.0:
     resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
     engines: {node: '>=10'}
 
+  wrap-ansi@8.1.0:
+    resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
+    engines: {node: '>=12'}
+
+  wrap-ansi@9.0.2:
+    resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
+    engines: {node: '>=18'}
+
   wrappy@1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
 
@@ -10777,10 +14971,18 @@ packages:
     resolution: {integrity: sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==}
     engines: {node: '>=18'}
 
+  xml-naming@0.3.0:
+    resolution: {integrity: sha512-ghig2TBE/H11aOVgmahA3MhimvkBr6JIYknH/Dhdk10nXwdbIqBJsbfMxpvFPG8bAw77gN29aQWvKpmVoPlvPQ==}
+    engines: {node: '>=16.0.0'}
+
   xml2js@0.6.0:
     resolution: {integrity: sha512-eLTh0kA8uHceqesPqSE+VvO1CDDJWMwlQfB6LuN6T8w6MaDJ8Txm8P7s5cHD0miF0V+GGTZrDQfxPZQVsur33w==}
     engines: {node: '>=4.0.0'}
 
+  xmlbuilder2@4.0.3:
+    resolution: {integrity: sha512-bx8Q1STctnNaaDymWnkfQLKofs0mGNN7rLLapJlGuV3VlvegD7Ls4ggMjE3aUSWItCCzU0PEv45lI87iSigiCA==}
+    engines: {node: '>=20.0'}
+
   xmlbuilder@11.0.1:
     resolution: {integrity: sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==}
     engines: {node: '>=4.0'}
@@ -10792,6 +14994,16 @@ packages:
   xmlchars@2.2.0:
     resolution: {integrity: sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==}
 
+  xtend@4.0.2:
+    resolution: {integrity: sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==}
+    engines: {node: '>=0.4'}
+
+  y-protocols@1.0.7:
+    resolution: {integrity: sha512-YSVsLoXxO67J6eE/nV4AtFtT3QEotZf5sK5BHxFBXso7VDUT3Tx07IfA6hsu5Q5OmBdMkQVmFZ9QOA7fikWvnw==}
+    engines: {node: '>=16.0.0', npm: '>=8.0.0'}
+    peerDependencies:
+      yjs: ^13.0.0
+
   y18n@5.0.8:
     resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
     engines: {node: '>=10'}
@@ -10821,23 +15033,54 @@ packages:
     resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==}
     engines: {node: '>=12'}
 
+  yjs@13.6.31:
+    resolution: {integrity: sha512-Eq+5BRfbeGyqGVrTJL3bEcr8gKkxPuyuoHmAwpk52fDb8kOVMrfVSTRPd6yiGgX5Fskb96qCRjzjbRjrL4YEnw==}
+    engines: {node: '>=16.0.0', npm: '>=8.0.0'}
+
   yocto-queue@0.1.0:
     resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
     engines: {node: '>=10'}
 
+  yoga-layout@3.2.1:
+    resolution: {integrity: sha512-0LPOt3AxKqMdFBZA3HBAt/t/8vIKq7VaQYbuA8WxCgung+p9TVyKRYdpvCb80HcdTN2NkbIKbhNwKUfm3tQywQ==}
+
+  zod-openapi@5.4.6:
+    resolution: {integrity: sha512-P2jsOOBAq/6hCwUsMCjUATZ8szkMsV5VAwZENfyxp2Hc/XPJQpVwAgevWZc65xZauCwWB9LAn7zYeiCJFAEL+A==}
+    engines: {node: '>=20'}
+    peerDependencies:
+      zod: ^3.25.74 || ^4.0.0
+
   zod@3.25.76:
     resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
 
   zod@4.3.6:
     resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
 
+  zod@4.4.3:
+    resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==}
+
+  zustand@4.5.7:
+    resolution: {integrity: sha512-CHOUy7mu3lbD6o6LJLfllpjkzhHXSBlX8B9+qPddUsIfeF5S/UZ5q0kmCsnRqT1UHFQZchNFDDzMbQsuesHWlw==}
+    engines: {node: '>=12.7.0'}
+    peerDependencies:
+      '@types/react': '>=16.8'
+      immer: '>=9.0.6'
+      react: '>=16.8'
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      immer:
+        optional: true
+      react:
+        optional: true
+
   zustand@5.0.14:
     resolution: {integrity: sha512-/8tAspM5LMPr28b3fwLYrtdj77ECpfZviaP75CMTnwO8ISyaE4GDIG/9rDDYq/cH9D2Xw2A2RXglLInmVBQB/g==}
     engines: {node: '>=12.20.0'}
     peerDependencies:
       '@types/react': '>=18.0.0'
       immer: '>=9.0.6'
-      react: 19.1.0
+      react: '>=18.0.0'
       use-sync-external-store: '>=1.2.0'
     peerDependenciesMeta:
       '@types/react':
@@ -10849,16 +15092,82 @@ packages:
       use-sync-external-store:
         optional: true
 
+  zwitch@2.0.4:
+    resolution: {integrity: sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==}
+
 snapshots:
 
   '@0no-co/graphql.web@1.2.0': {}
 
+  '@ai-sdk/gateway@4.0.16(zod@4.3.6)':
+    dependencies:
+      '@ai-sdk/provider': 4.0.3
+      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
+      '@vercel/oidc': 3.2.0
+      zod: 4.3.6
+
+  '@ai-sdk/mcp@2.0.10(zod@4.3.6)':
+    dependencies:
+      '@ai-sdk/provider': 4.0.3
+      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
+      pkce-challenge: 5.0.1
+      zod: 4.3.6
+
+  '@ai-sdk/provider-utils@5.0.7(zod@4.3.6)':
+    dependencies:
+      '@ai-sdk/provider': 4.0.3
+      '@standard-schema/spec': 1.1.0
+      '@workflow/serde': 4.1.0
+      eventsource-parser: 3.1.0
+      zod: 4.3.6
+
+  '@ai-sdk/provider@4.0.3':
+    dependencies:
+      json-schema: 0.4.0
+
+  '@ai-sdk/react@4.0.23(react@19.1.0)(zod@4.3.6)':
+    dependencies:
+      '@ai-sdk/mcp': 2.0.10(zod@4.3.6)
+      '@ai-sdk/provider': 4.0.3
+      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
+      ai: 7.0.22(zod@4.3.6)
+      react: 19.1.0
+      swr: 2.4.2(react@19.1.0)
+      throttleit: 2.1.0
+    transitivePeerDependencies:
+      - zod
+
+  '@alcalzone/ansi-tokenize@0.2.5':
+    dependencies:
+      ansi-styles: 6.2.3
+      is-fullwidth-code-point: 5.1.0
+
+  '@alchemy.run/node-utils@0.0.5': {}
+
   '@alloc/quick-lru@5.2.0': {}
 
+  '@antfu/install-pkg@1.1.0':
+    dependencies:
+      package-manager-detector: 1.6.0
+      tinyexec: 1.0.2
+
   '@antfu/ni@0.23.2': {}
 
   '@antfu/utils@8.1.1': {}
 
+  '@apple/app-store-server-library@1.6.0':
+    dependencies:
+      '@types/jsonwebtoken': 9.0.10
+      '@types/jsrsasign': 10.5.15
+      '@types/node': 22.20.1
+      '@types/node-fetch': 2.6.13
+      base64url: 3.0.1
+      jsonwebtoken: 9.0.3
+      jsrsasign: 11.1.3
+      node-fetch: 2.7.0
+    transitivePeerDependencies:
+      - encoding
+
   '@asamuzakjp/css-color@3.2.0':
     dependencies:
       '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
@@ -10867,6 +15176,240 @@ snapshots:
       '@csstools/css-tokenizer': 3.0.4
       lru-cache: 10.4.3
 
+  '@aws-crypto/crc32@5.2.0':
+    dependencies:
+      '@aws-crypto/util': 5.2.0
+      '@aws-sdk/types': 3.974.0
+      tslib: 2.8.1
+
+  '@aws-crypto/util@5.2.0':
+    dependencies:
+      '@aws-sdk/types': 3.974.0
+      '@smithy/util-utf8': 2.3.0
+      tslib: 2.8.1
+
+  '@aws-sdk/checksums@3.1000.16':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/client-cognito-identity@3.1081.0':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/credential-provider-node': 3.972.66
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/fetch-http-handler': 5.6.5
+      '@smithy/node-http-handler': 4.9.5
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/client-s3@3.1085.0':
+    dependencies:
+      '@aws-sdk/checksums': 3.1000.16
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/credential-provider-node': 3.972.66
+      '@aws-sdk/middleware-sdk-s3': 3.972.62
+      '@aws-sdk/signature-v4-multi-region': 3.996.39
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/fetch-http-handler': 5.6.5
+      '@smithy/node-http-handler': 4.9.5
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/core@3.975.1':
+    dependencies:
+      '@aws-sdk/types': 3.974.0
+      '@aws-sdk/xml-builder': 3.972.34
+      '@aws/lambda-invoke-store': 0.3.0
+      '@smithy/core': 3.29.3
+      '@smithy/signature-v4': 5.6.4
+      '@smithy/types': 4.16.1
+      bowser: 2.14.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-cognito-identity@3.972.56':
+    dependencies:
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-env@3.972.57':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-http@3.972.59':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/fetch-http-handler': 5.6.5
+      '@smithy/node-http-handler': 4.9.5
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-ini@3.973.1':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/credential-provider-env': 3.972.57
+      '@aws-sdk/credential-provider-http': 3.972.59
+      '@aws-sdk/credential-provider-login': 3.972.63
+      '@aws-sdk/credential-provider-process': 3.972.57
+      '@aws-sdk/credential-provider-sso': 3.973.1
+      '@aws-sdk/credential-provider-web-identity': 3.972.63
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/credential-provider-imds': 4.4.8
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-login@3.972.63':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-node@3.972.66':
+    dependencies:
+      '@aws-sdk/credential-provider-env': 3.972.57
+      '@aws-sdk/credential-provider-http': 3.972.59
+      '@aws-sdk/credential-provider-ini': 3.973.1
+      '@aws-sdk/credential-provider-process': 3.972.57
+      '@aws-sdk/credential-provider-sso': 3.973.1
+      '@aws-sdk/credential-provider-web-identity': 3.972.63
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/credential-provider-imds': 4.4.8
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-process@3.972.57':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-sso@3.973.1':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/token-providers': 3.1083.0
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-provider-web-identity@3.972.63':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/credential-providers@3.1081.0':
+    dependencies:
+      '@aws-sdk/client-cognito-identity': 3.1081.0
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/credential-provider-cognito-identity': 3.972.56
+      '@aws-sdk/credential-provider-env': 3.972.57
+      '@aws-sdk/credential-provider-http': 3.972.59
+      '@aws-sdk/credential-provider-ini': 3.973.1
+      '@aws-sdk/credential-provider-login': 3.972.63
+      '@aws-sdk/credential-provider-node': 3.972.66
+      '@aws-sdk/credential-provider-process': 3.972.57
+      '@aws-sdk/credential-provider-sso': 3.973.1
+      '@aws-sdk/credential-provider-web-identity': 3.972.63
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/credential-provider-imds': 4.4.8
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/middleware-sdk-s3@3.972.62':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/signature-v4-multi-region': 3.996.39
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/nested-clients@3.997.31':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/signature-v4-multi-region': 3.996.39
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/fetch-http-handler': 5.6.5
+      '@smithy/node-http-handler': 4.9.5
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/s3-request-presigner@3.1085.0':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/signature-v4-multi-region': 3.996.39
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/signature-v4-multi-region@3.996.39':
+    dependencies:
+      '@aws-sdk/types': 3.974.0
+      '@smithy/signature-v4': 5.6.4
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/token-providers@3.1083.0':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/types@3.974.0':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/xml-builder@3.972.34':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws/lambda-invoke-store@0.3.0': {}
+
+  '@axiomhq/js@1.8.0':
+    dependencies:
+      fetch-retry: 6.0.0
+
+  '@axiomhq/pino@1.8.0':
+    dependencies:
+      '@axiomhq/js': 1.8.0
+      pino-abstract-transport: 1.2.0
+
   '@babel/cli@7.28.3(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
@@ -10885,9 +15428,15 @@ snapshots:
     dependencies:
       '@babel/highlight': 7.25.9
 
+  '@babel/code-frame@7.27.1':
+    dependencies:
+      '@babel/helper-validator-identifier': 7.29.7
+      js-tokens: 4.0.0
+      picocolors: 1.1.1
+
   '@babel/code-frame@7.29.0':
     dependencies:
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
@@ -10903,15 +15452,15 @@ snapshots:
 
   '@babel/core@7.29.6':
     dependencies:
-      '@babel/code-frame': 7.29.0
+      '@babel/code-frame': 7.29.7
       '@babel/generator': 7.29.7
       '@babel/helper-compilation-targets': 7.28.6
       '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
       '@babel/helpers': 7.29.7
       '@babel/parser': 7.29.7
-      '@babel/template': 7.28.6
+      '@babel/template': 7.29.7
       '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
       '@jridgewell/remapping': 2.3.5
       convert-source-map: 2.0.0
       debug: 4.4.3
@@ -10941,14 +15490,6 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.7
 
-  '@babel/helper-compilation-targets@7.27.2':
-    dependencies:
-      '@babel/compat-data': 7.28.5
-      '@babel/helper-validator-option': 7.27.1
-      browserslist: 4.28.1
-      lru-cache: 5.1.1
-      semver: 6.3.1
-
   '@babel/helper-compilation-targets@7.28.6':
     dependencies:
       '@babel/compat-data': 7.29.0
@@ -11012,7 +15553,7 @@ snapshots:
 
   '@babel/helper-module-imports@7.27.1':
     dependencies:
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
       '@babel/types': 7.29.7
     transitivePeerDependencies:
       - supports-color
@@ -11024,20 +15565,11 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-module-transforms@7.28.3(@babel/core@7.29.6)':
-    dependencies:
-      '@babel/core': 7.29.6
-      '@babel/helper-module-imports': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
-      '@babel/traverse': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-
   '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-module-imports': 7.28.6
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-validator-identifier': 7.29.7
       '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
@@ -11084,12 +15616,8 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-string-parser@7.27.1': {}
-
   '@babel/helper-string-parser@7.29.7': {}
 
-  '@babel/helper-validator-identifier@7.28.5': {}
-
   '@babel/helper-validator-identifier@7.29.7': {}
 
   '@babel/helper-validator-option@7.27.1': {}
@@ -11114,6 +15642,10 @@ snapshots:
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
+  '@babel/parser@7.24.5':
+    dependencies:
+      '@babel/types': 7.29.7
+
   '@babel/parser@7.29.0':
     dependencies:
       '@babel/types': 7.29.7
@@ -11313,7 +15845,7 @@ snapshots:
   '@babel/plugin-transform-async-to-generator@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-module-imports': 7.27.1
+      '@babel/helper-module-imports': 7.28.6
       '@babel/helper-plugin-utils': 7.28.6
       '@babel/helper-remap-async-to-generator': 7.27.1(@babel/core@7.29.6)
     transitivePeerDependencies:
@@ -11465,7 +15997,7 @@ snapshots:
   '@babel/plugin-transform-modules-commonjs@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-module-transforms': 7.28.3(@babel/core@7.29.6)
+      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
       '@babel/helper-plugin-utils': 7.27.1
     transitivePeerDependencies:
       - supports-color
@@ -11520,11 +16052,11 @@ snapshots:
   '@babel/plugin-transform-object-rest-spread@7.28.4(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-compilation-targets': 7.27.2
+      '@babel/helper-compilation-targets': 7.28.6
       '@babel/helper-plugin-utils': 7.27.1
       '@babel/plugin-transform-destructuring': 7.28.5(@babel/core@7.29.6)
       '@babel/plugin-transform-parameters': 7.27.7(@babel/core@7.29.6)
-      '@babel/traverse': 7.28.5
+      '@babel/traverse': 7.29.0
     transitivePeerDependencies:
       - supports-color
 
@@ -11610,7 +16142,7 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-module-imports': 7.27.1
+      '@babel/helper-module-imports': 7.28.6
       '@babel/helper-plugin-utils': 7.28.6
       '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
       '@babel/types': 7.29.7
@@ -11846,28 +16378,16 @@ snapshots:
   '@babel/runtime@7.29.7': {}
 
   '@babel/template@7.28.6':
-    dependencies:
-      '@babel/code-frame': 7.29.0
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.0
-
-  '@babel/template@7.29.7':
     dependencies:
       '@babel/code-frame': 7.29.7
       '@babel/parser': 7.29.7
       '@babel/types': 7.29.7
 
-  '@babel/traverse@7.28.5':
+  '@babel/template@7.29.7':
     dependencies:
       '@babel/code-frame': 7.29.7
-      '@babel/generator': 7.29.1
-      '@babel/helper-globals': 7.28.0
       '@babel/parser': 7.29.7
-      '@babel/template': 7.29.7
       '@babel/types': 7.29.7
-      debug: 4.4.3
-    transitivePeerDependencies:
-      - supports-color
 
   '@babel/traverse@7.29.0':
     dependencies:
@@ -11876,56 +16396,58 @@ snapshots:
       '@babel/helper-globals': 7.28.0
       '@babel/parser': 7.29.7
       '@babel/template': 7.28.6
-      '@babel/types': 7.29.0
+      '@babel/types': 7.29.7
       debug: 4.4.3
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/types@7.29.0':
-    dependencies:
-      '@babel/helper-string-parser': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
-
   '@babel/types@7.29.7':
     dependencies:
       '@babel/helper-string-parser': 7.29.7
       '@babel/helper-validator-identifier': 7.29.7
 
-  '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@babel/runtime': 7.29.7
-      '@base-ui/utils': 0.3.1(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@base-ui/utils': 0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@floating-ui/utils': 0.2.12
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       date-fns: 4.4.0
 
-  '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@babel/runtime': 7.29.7
       '@floating-ui/utils': 0.2.12
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       reselect: 5.2.0
       use-sync-external-store: 1.6.0(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@basementstudio/shader-lab@1.4.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)':
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      three: 0.178.0
+      typescript: 5.9.3
+
   '@bcoe/v8-coverage@0.2.3': {}
 
-  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
+  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
-      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      better-auth: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       better-call: 1.3.7(zod@4.3.6)
       zod: 4.3.6
 
-  '@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)':
+  '@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)':
     dependencies:
       '@better-auth/utils': 0.4.2
       '@better-fetch/fetch': 1.3.1
@@ -11936,39 +16458,37 @@ snapshots:
       kysely: 0.28.17
       nanostores: 1.4.0
       zod: 4.3.6
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
 
-  '@better-auth/drizzle-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/drizzle-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/kysely-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)':
+  '@better-auth/kysely-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
     optionalDependencies:
       kysely: 0.28.17
 
-  '@better-auth/memory-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/memory-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/mongo-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/mongo-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/prisma-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/prisma-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/telemetry@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)':
+  '@better-auth/telemetry@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
       '@better-fetch/fetch': 1.3.1
 
@@ -12013,6 +16533,14 @@ snapshots:
   '@biomejs/cli-win32-x64@2.3.11':
     optional: true
 
+  '@braintree/sanitize-url@7.1.2': {}
+
+  '@chevrotain/types@11.1.2': {}
+
+  '@chronark/zod-bird@0.3.10':
+    dependencies:
+      zod: 3.25.76
+
   '@clack/core@0.5.0':
     dependencies:
       picocolors: 1.1.1
@@ -12024,6 +16552,31 @@ snapshots:
       picocolors: 1.1.1
       sisteransi: 1.0.5
 
+  '@clickhouse/client-web@1.23.1': {}
+
+  '@clickhouse/client@1.23.1': {}
+
+  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260526.1)':
+    dependencies:
+      unenv: 2.0.0-rc.24
+    optionalDependencies:
+      workerd: 1.20260526.1
+
+  '@cloudflare/workerd-darwin-64@1.20260526.1':
+    optional: true
+
+  '@cloudflare/workerd-darwin-arm64@1.20260526.1':
+    optional: true
+
+  '@cloudflare/workerd-linux-64@1.20260526.1':
+    optional: true
+
+  '@cloudflare/workerd-linux-arm64@1.20260526.1':
+    optional: true
+
+  '@cloudflare/workerd-windows-64@1.20260526.1':
+    optional: true
+
   '@csstools/color-helpers@5.1.0': {}
 
   '@csstools/css-calc@2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
@@ -12044,6 +16597,88 @@ snapshots:
 
   '@csstools/css-tokenizer@3.0.4': {}
 
+  '@dimforge/rapier3d-compat@0.12.0': {}
+
+  '@distilled.cloud/aws@0.26.1(effect@4.0.0-beta.84)':
+    dependencies:
+      '@aws-crypto/crc32': 5.2.0
+      '@aws-crypto/util': 5.2.0
+      '@aws-sdk/credential-providers': 3.1081.0
+      '@aws-sdk/types': 3.974.0
+      '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
+      '@smithy/shared-ini-file-loader': 4.6.8
+      '@smithy/types': 4.16.1
+      '@smithy/util-base64': 4.5.8
+      aws4fetch: 1.0.20
+      effect: 4.0.0-beta.84
+      fast-xml-parser: 5.10.0
+
+  '@distilled.cloud/axiom@0.26.1(effect@4.0.0-beta.84)':
+    dependencies:
+      '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/cloudflare-rolldown-plugin@0.11.2(rolldown@1.0.1)(workerd@1.20260526.1)':
+    dependencies:
+      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260526.1)
+      magic-string: 0.30.21
+      unenv: 2.0.0-rc.24
+    optionalDependencies:
+      rolldown: 1.0.1
+    transitivePeerDependencies:
+      - workerd
+
+  '@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)':
+    dependencies:
+      '@alchemy.run/node-utils': 0.0.5
+      '@distilled.cloud/cloudflare': 0.26.1(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
+      workerd: 1.20260526.1
+    optionalDependencies:
+      '@effect/platform-bun': 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+
+  '@distilled.cloud/cloudflare-vite-plugin@0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260526.1)':
+    dependencies:
+      '@distilled.cloud/cloudflare': 0.26.1(effect@4.0.0-beta.84)
+      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260526.1)
+      '@distilled.cloud/cloudflare-runtime': 0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
+    optionalDependencies:
+      '@effect/platform-bun': 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+    transitivePeerDependencies:
+      - rolldown
+      - workerd
+
+  '@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84)':
+    dependencies:
+      '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/core@0.24.9(effect@4.0.0-beta.84)':
+    dependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/core@0.26.1(effect@4.0.0-beta.84)':
+    dependencies:
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/neon@0.26.1(effect@4.0.0-beta.84)':
+    dependencies:
+      '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/planetscale@0.26.1(effect@4.0.0-beta.84)':
+    dependencies:
+      '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
+
+  '@distilled.cloud/stripe@0.24.9(effect@4.0.0-beta.84)':
+    dependencies:
+      '@distilled.cloud/core': 0.24.9(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
+
   '@dnd-kit/accessibility@3.1.1(react@19.1.0)':
     dependencies:
       react: 19.1.0
@@ -12057,6 +16692,21 @@ snapshots:
       react-dom: 19.1.0(react@19.1.0)
       tslib: 2.8.1
 
+  '@dnd-kit/core@6.3.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@dnd-kit/accessibility': 3.1.1(react@19.1.0)
+      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      tslib: 2.8.1
+
+  '@dnd-kit/modifiers@9.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@dnd-kit/core': 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
+      react: 19.1.0
+      tslib: 2.8.1
+
   '@dnd-kit/sortable@10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@dnd-kit/core': 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
@@ -12064,25 +16714,46 @@ snapshots:
       react: 19.1.0
       tslib: 2.8.1
 
+  '@dnd-kit/sortable@10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@dnd-kit/core': 6.3.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
+      react: 19.1.0
+      tslib: 2.8.1
+
   '@dnd-kit/utilities@3.2.2(react@19.1.0)':
     dependencies:
       react: 19.1.0
       tslib: 2.8.1
 
-  '@drizzle-team/brocli@0.10.2': {}
+  '@drizzle-team/brocli@0.11.0': {}
 
-  '@effect/language-service@0.64.1': {}
+  '@effect-aws/client-s3@2.0.0-beta.4(effect@4.0.0-beta.84)':
+    dependencies:
+      '@aws-sdk/client-s3': 3.1085.0
+      '@aws-sdk/s3-request-presigner': 3.1085.0
+      '@aws-sdk/types': 3.974.0
+      '@effect-aws/commons': 1.0.0-beta.4(effect@4.0.0-beta.84)
+      effect: 4.0.0-beta.84
 
-  '@effect/platform-node-shared@4.0.0-beta.84(effect@4.0.0-beta.84)':
+  '@effect-aws/commons@1.0.0-beta.4(effect@4.0.0-beta.84)':
     dependencies:
-      '@types/ws': 8.18.1
+      '@smithy/protocol-http': 5.5.8
+      '@smithy/smithy-client': 4.14.8
+      '@smithy/types': 4.16.1
+      effect: 4.0.0-beta.84
+
+  '@effect/language-service@0.86.6': {}
+
+  '@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84)':
+    dependencies:
+      '@effect/platform-node-shared': 4.0.0-beta.84(effect@4.0.0-beta.84)
       effect: 4.0.0-beta.84
-      ws: 8.21.0
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
 
-  '@effect/platform-node-shared@4.0.0-beta.91(effect@4.0.0-beta.84)':
+  '@effect/platform-node-shared@4.0.0-beta.84(effect@4.0.0-beta.84)':
     dependencies:
       '@types/ws': 8.18.1
       effect: 4.0.0-beta.84
@@ -12093,7 +16764,7 @@ snapshots:
 
   '@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)':
     dependencies:
-      '@effect/platform-node-shared': 4.0.0-beta.91(effect@4.0.0-beta.84)
+      '@effect/platform-node-shared': 4.0.0-beta.84(effect@4.0.0-beta.84)
       effect: 4.0.0-beta.84
       ioredis: 5.9.1
       mime: 4.1.0
@@ -12102,46 +16773,50 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
-  '@effect/platform@0.94.5(effect@4.0.0-beta.84)':
+  '@effect/sql-clickhouse@4.0.0-beta.84(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)':
     dependencies:
+      '@clickhouse/client': 1.23.1
+      '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
       effect: 4.0.0-beta.84
-      find-my-way-ts: 0.1.6
-      msgpackr: 1.11.8
-      multipasta: 0.2.7
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      pg: 8.22.0
+      pg-connection-string: 2.12.0
+      pg-cursor: 2.21.0(pg@8.22.0)
+      pg-pool: 3.14.0(pg@8.22.0)
+      pg-types: 4.1.0
+    transitivePeerDependencies:
+      - pg-native
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@emnapi/core@1.10.0':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
-      '@emnapi/wasi-threads': 1.2.1
-      tslib: 2.8.1
-    optional: true
+      effect: 4.0.0-beta.84
+      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@emnapi/core@1.7.1':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
-      '@emnapi/wasi-threads': 1.1.0
-      tslib: 2.8.1
-    optional: true
+      effect: 4.0.0-beta.84
+      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@emnapi/runtime@1.10.0':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
-      tslib: 2.8.1
-    optional: true
+      effect: 4.0.0-beta.84
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@emnapi/runtime@1.7.1':
+  '@emnapi/core@1.10.0':
     dependencies:
+      '@emnapi/wasi-threads': 1.2.1
       tslib: 2.8.1
     optional: true
 
-  '@emnapi/wasi-threads@1.1.0':
+  '@emnapi/runtime@1.10.0':
     dependencies:
       tslib: 2.8.1
     optional: true
@@ -12151,17 +16826,7 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@esbuild-kit/core-utils@3.3.2':
-    dependencies:
-      esbuild: 0.25.0
-      source-map-support: 0.5.21
-
-  '@esbuild-kit/esm-loader@2.6.5':
-    dependencies:
-      '@esbuild-kit/core-utils': 3.3.2
-      get-tsconfig: 4.13.0
-
-  '@esbuild/aix-ppc64@0.25.0':
+  '@esbuild/aix-ppc64@0.23.0':
     optional: true
 
   '@esbuild/aix-ppc64@0.25.12':
@@ -12176,7 +16841,7 @@ snapshots:
   '@esbuild/aix-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm64@0.25.0':
+  '@esbuild/android-arm64@0.23.0':
     optional: true
 
   '@esbuild/android-arm64@0.25.12':
@@ -12191,7 +16856,7 @@ snapshots:
   '@esbuild/android-arm64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm@0.25.0':
+  '@esbuild/android-arm@0.23.0':
     optional: true
 
   '@esbuild/android-arm@0.25.12':
@@ -12206,7 +16871,7 @@ snapshots:
   '@esbuild/android-arm@0.28.1':
     optional: true
 
-  '@esbuild/android-x64@0.25.0':
+  '@esbuild/android-x64@0.23.0':
     optional: true
 
   '@esbuild/android-x64@0.25.12':
@@ -12221,7 +16886,7 @@ snapshots:
   '@esbuild/android-x64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-arm64@0.25.0':
+  '@esbuild/darwin-arm64@0.23.0':
     optional: true
 
   '@esbuild/darwin-arm64@0.25.12':
@@ -12236,7 +16901,7 @@ snapshots:
   '@esbuild/darwin-arm64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-x64@0.25.0':
+  '@esbuild/darwin-x64@0.23.0':
     optional: true
 
   '@esbuild/darwin-x64@0.25.12':
@@ -12251,7 +16916,7 @@ snapshots:
   '@esbuild/darwin-x64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.25.0':
+  '@esbuild/freebsd-arm64@0.23.0':
     optional: true
 
   '@esbuild/freebsd-arm64@0.25.12':
@@ -12266,7 +16931,7 @@ snapshots:
   '@esbuild/freebsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-x64@0.25.0':
+  '@esbuild/freebsd-x64@0.23.0':
     optional: true
 
   '@esbuild/freebsd-x64@0.25.12':
@@ -12281,7 +16946,7 @@ snapshots:
   '@esbuild/freebsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm64@0.25.0':
+  '@esbuild/linux-arm64@0.23.0':
     optional: true
 
   '@esbuild/linux-arm64@0.25.12':
@@ -12296,7 +16961,7 @@ snapshots:
   '@esbuild/linux-arm64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm@0.25.0':
+  '@esbuild/linux-arm@0.23.0':
     optional: true
 
   '@esbuild/linux-arm@0.25.12':
@@ -12311,7 +16976,7 @@ snapshots:
   '@esbuild/linux-arm@0.28.1':
     optional: true
 
-  '@esbuild/linux-ia32@0.25.0':
+  '@esbuild/linux-ia32@0.23.0':
     optional: true
 
   '@esbuild/linux-ia32@0.25.12':
@@ -12326,7 +16991,7 @@ snapshots:
   '@esbuild/linux-ia32@0.28.1':
     optional: true
 
-  '@esbuild/linux-loong64@0.25.0':
+  '@esbuild/linux-loong64@0.23.0':
     optional: true
 
   '@esbuild/linux-loong64@0.25.12':
@@ -12341,7 +17006,7 @@ snapshots:
   '@esbuild/linux-loong64@0.28.1':
     optional: true
 
-  '@esbuild/linux-mips64el@0.25.0':
+  '@esbuild/linux-mips64el@0.23.0':
     optional: true
 
   '@esbuild/linux-mips64el@0.25.12':
@@ -12356,7 +17021,7 @@ snapshots:
   '@esbuild/linux-mips64el@0.28.1':
     optional: true
 
-  '@esbuild/linux-ppc64@0.25.0':
+  '@esbuild/linux-ppc64@0.23.0':
     optional: true
 
   '@esbuild/linux-ppc64@0.25.12':
@@ -12371,7 +17036,7 @@ snapshots:
   '@esbuild/linux-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/linux-riscv64@0.25.0':
+  '@esbuild/linux-riscv64@0.23.0':
     optional: true
 
   '@esbuild/linux-riscv64@0.25.12':
@@ -12386,7 +17051,7 @@ snapshots:
   '@esbuild/linux-riscv64@0.28.1':
     optional: true
 
-  '@esbuild/linux-s390x@0.25.0':
+  '@esbuild/linux-s390x@0.23.0':
     optional: true
 
   '@esbuild/linux-s390x@0.25.12':
@@ -12401,7 +17066,7 @@ snapshots:
   '@esbuild/linux-s390x@0.28.1':
     optional: true
 
-  '@esbuild/linux-x64@0.25.0':
+  '@esbuild/linux-x64@0.23.0':
     optional: true
 
   '@esbuild/linux-x64@0.25.12':
@@ -12416,9 +17081,6 @@ snapshots:
   '@esbuild/linux-x64@0.28.1':
     optional: true
 
-  '@esbuild/netbsd-arm64@0.25.0':
-    optional: true
-
   '@esbuild/netbsd-arm64@0.25.12':
     optional: true
 
@@ -12431,7 +17093,7 @@ snapshots:
   '@esbuild/netbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/netbsd-x64@0.25.0':
+  '@esbuild/netbsd-x64@0.23.0':
     optional: true
 
   '@esbuild/netbsd-x64@0.25.12':
@@ -12446,7 +17108,7 @@ snapshots:
   '@esbuild/netbsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/openbsd-arm64@0.25.0':
+  '@esbuild/openbsd-arm64@0.23.0':
     optional: true
 
   '@esbuild/openbsd-arm64@0.25.12':
@@ -12461,7 +17123,7 @@ snapshots:
   '@esbuild/openbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/openbsd-x64@0.25.0':
+  '@esbuild/openbsd-x64@0.23.0':
     optional: true
 
   '@esbuild/openbsd-x64@0.25.12':
@@ -12488,7 +17150,7 @@ snapshots:
   '@esbuild/openharmony-arm64@0.28.1':
     optional: true
 
-  '@esbuild/sunos-x64@0.25.0':
+  '@esbuild/sunos-x64@0.23.0':
     optional: true
 
   '@esbuild/sunos-x64@0.25.12':
@@ -12503,7 +17165,7 @@ snapshots:
   '@esbuild/sunos-x64@0.28.1':
     optional: true
 
-  '@esbuild/win32-arm64@0.25.0':
+  '@esbuild/win32-arm64@0.23.0':
     optional: true
 
   '@esbuild/win32-arm64@0.25.12':
@@ -12518,7 +17180,7 @@ snapshots:
   '@esbuild/win32-arm64@0.28.1':
     optional: true
 
-  '@esbuild/win32-ia32@0.25.0':
+  '@esbuild/win32-ia32@0.23.0':
     optional: true
 
   '@esbuild/win32-ia32@0.25.12':
@@ -12533,7 +17195,7 @@ snapshots:
   '@esbuild/win32-ia32@0.28.1':
     optional: true
 
-  '@esbuild/win32-x64@0.25.0':
+  '@esbuild/win32-x64@0.23.0':
     optional: true
 
   '@esbuild/win32-x64@0.25.12':
@@ -12661,7 +17323,7 @@ snapshots:
       wrap-ansi: 7.0.0
       ws: 8.21.0
     optionalDependencies:
-      expo-router: 6.0.23(915cc1bcc1b7ce0da6289325fa4c723d)
+      expo-router: 6.0.23(c4aa449b816283cc936b8db4e0abcefc)
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - bufferutil
@@ -12789,7 +17451,7 @@ snapshots:
       glob: 13.0.0
       hermes-parser: 0.29.1
       jsc-safe-url: 0.2.4
-      lightningcss: 1.30.2
+      lightningcss: 1.32.0
       minimatch: 9.0.7
       postcss: 8.5.10
       resolve-from: 5.0.0
@@ -12800,6 +17462,19 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      anser: 1.4.10
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      pretty-format: 29.7.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      stacktrace-parser: 0.1.11
+      whatwg-fetch: 3.6.20
+    optionalDependencies:
+      react-dom: 19.1.0(react@19.1.0)
+    optional: true
+
   '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       anser: 1.4.10
@@ -12913,8 +17588,30 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
+  '@floating-ui/react-dom@2.1.9(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@floating-ui/dom': 1.8.0
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+
   '@floating-ui/utils@0.2.12': {}
 
+  '@fontsource-variable/geist-mono@5.2.8': {}
+
+  '@fontsource-variable/geist@5.2.9': {}
+
+  '@formatjs/intl-localematcher@0.6.2':
+    dependencies:
+      tslib: 2.8.1
+
+  '@headless-tree/core@1.7.0': {}
+
+  '@headless-tree/react@1.7.0(@headless-tree/core@1.7.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@headless-tree/core': 1.7.0
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   '@hookform/resolvers@5.4.0(react-hook-form@7.81.0(react@19.1.0))':
     dependencies:
       '@standard-schema/utils': 0.3.0
@@ -12931,8 +17628,100 @@ snapshots:
 
   '@humanwhocodes/retry@0.4.3': {}
 
+  '@iconify/types@2.0.0': {}
+
+  '@iconify/utils@3.1.4':
+    dependencies:
+      '@antfu/install-pkg': 1.1.0
+      '@iconify/types': 2.0.0
+      import-meta-resolve: 4.2.0
+
+  '@img/sharp-darwin-arm64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-arm64': 1.0.4
+    optional: true
+
+  '@img/sharp-darwin-x64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-x64': 1.0.4
+    optional: true
+
+  '@img/sharp-libvips-darwin-arm64@1.0.4':
+    optional: true
+
+  '@img/sharp-libvips-darwin-x64@1.0.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm64@1.0.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm@1.0.5':
+    optional: true
+
+  '@img/sharp-libvips-linux-s390x@1.0.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-x64@1.0.4':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
+    optional: true
+
+  '@img/sharp-linux-arm64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm64': 1.0.4
+    optional: true
+
+  '@img/sharp-linux-arm@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm': 1.0.5
+    optional: true
+
+  '@img/sharp-linux-s390x@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-s390x': 1.0.4
+    optional: true
+
+  '@img/sharp-linux-x64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-x64': 1.0.4
+    optional: true
+
+  '@img/sharp-linuxmusl-arm64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
+    optional: true
+
+  '@img/sharp-linuxmusl-x64@0.33.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
+    optional: true
+
+  '@img/sharp-wasm32@0.33.5':
+    dependencies:
+      '@emnapi/runtime': 1.10.0
+    optional: true
+
+  '@img/sharp-win32-ia32@0.33.5':
+    optional: true
+
+  '@img/sharp-win32-x64@0.33.5':
+    optional: true
+
   '@ioredis/commands@1.5.0': {}
 
+  '@isaacs/cliui@8.0.2':
+    dependencies:
+      string-width: 5.1.2
+      string-width-cjs: string-width@4.2.3
+      strip-ansi: 7.1.2
+      strip-ansi-cjs: strip-ansi@6.0.1
+      wrap-ansi: 8.1.0
+      wrap-ansi-cjs: wrap-ansi@7.0.0
+
   '@isaacs/fs-minipass@4.0.1':
     dependencies:
       minipass: 7.1.2
@@ -13147,37 +17936,133 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
-  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.3':
-    optional: true
-
-  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
-    optional: true
+  '@js-temporal/polyfill@0.5.1':
+    dependencies:
+      jsbi: 4.3.2
 
-  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.3':
-    optional: true
+  '@libsql/client@0.17.4':
+    dependencies:
+      '@libsql/core': 0.17.4
+      '@libsql/hrana-client': 0.10.0
+      js-base64: 3.8.1
+      libsql: 0.5.29
+      promise-limit: 2.7.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
 
-  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
+  '@libsql/core@0.17.4':
+    dependencies:
+      js-base64: 3.8.1
+
+  '@libsql/darwin-arm64@0.5.29':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.3':
+  '@libsql/darwin-x64@0.5.29':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
+  '@libsql/hrana-client@0.10.0':
+    dependencies:
+      '@libsql/isomorphic-ws': 0.1.5
+      js-base64: 3.8.1
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  '@libsql/isomorphic-ws@0.1.5':
+    dependencies:
+      '@types/ws': 8.18.1
+      ws: 8.21.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  '@libsql/linux-arm-gnueabihf@0.5.29':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.3':
+  '@libsql/linux-arm-musleabihf@0.5.29':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
+  '@libsql/linux-arm64-gnu@0.5.29':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.3':
+  '@libsql/linux-arm64-musl@0.5.29':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
+  '@libsql/linux-x64-gnu@0.5.29':
+    optional: true
+
+  '@libsql/linux-x64-musl@0.5.29':
+    optional: true
+
+  '@libsql/win32-x64-msvc@0.5.29':
+    optional: true
+
+  '@mdx-js/mdx@3.1.1':
+    dependencies:
+      '@types/estree': 1.0.8
+      '@types/estree-jsx': 1.0.5
+      '@types/hast': 3.0.5
+      '@types/mdx': 2.0.14
+      acorn: 8.16.0
+      collapse-white-space: 2.1.0
+      devlop: 1.1.0
+      estree-util-is-identifier-name: 3.0.0
+      estree-util-scope: 1.0.0
+      estree-walker: 3.0.3
+      hast-util-to-jsx-runtime: 2.3.6
+      markdown-extensions: 2.0.0
+      recma-build-jsx: 1.0.0
+      recma-jsx: 1.0.1(acorn@8.16.0)
+      recma-stringify: 1.0.0
+      rehype-recma: 1.0.0
+      remark-mdx: 3.1.1
+      remark-parse: 11.0.0
+      remark-rehype: 11.1.2
+      source-map: 0.7.6
+      unified: 11.0.5
+      unist-util-position-from-estree: 2.0.0
+      unist-util-stringify-position: 4.0.0
+      unist-util-visit: 5.1.0
+      vfile: 6.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@mediapipe/tasks-vision@0.10.17': {}
+
+  '@mermaid-js/parser@1.2.0':
+    dependencies:
+      '@chevrotain/types': 11.1.2
+
+  '@monaco-editor/loader@1.7.0':
+    dependencies:
+      state-local: 1.0.7
+
+  '@monaco-editor/react@4.7.0(monaco-editor@0.52.2)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@monaco-editor/loader': 1.7.0
+      monaco-editor: 0.52.2
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
+  '@monogrid/gainmap-js@3.4.0(three@0.178.0)':
+    dependencies:
+      promise-worker-transferable: 1.0.4
+      three: 0.178.0
+
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
     optional: true
 
-  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
+  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
     optional: true
 
   '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
@@ -13185,8 +18070,8 @@ snapshots:
 
   '@napi-rs/wasm-runtime@0.2.12':
     dependencies:
-      '@emnapi/core': 1.7.1
-      '@emnapi/runtime': 1.7.1
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.10.0
       '@tybys/wasm-util': 0.10.1
     optional: true
 
@@ -13197,13 +18082,45 @@ snapshots:
       '@tybys/wasm-util': 0.10.3
     optional: true
 
+  '@neon-rs/load@0.0.4': {}
+
+  '@next/env@15.1.2': {}
+
+  '@next/swc-darwin-arm64@15.1.2':
+    optional: true
+
+  '@next/swc-darwin-x64@15.1.2':
+    optional: true
+
+  '@next/swc-linux-arm64-gnu@15.1.2':
+    optional: true
+
+  '@next/swc-linux-arm64-musl@15.1.2':
+    optional: true
+
+  '@next/swc-linux-x64-gnu@15.1.2':
+    optional: true
+
+  '@next/swc-linux-x64-musl@15.1.2':
+    optional: true
+
+  '@next/swc-win32-arm64-msvc@15.1.2':
+    optional: true
+
+  '@next/swc-win32-x64-msvc@15.1.2':
+    optional: true
+
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
     optional: true
 
   '@noble/ciphers@2.1.1': {}
 
+  '@noble/hashes@1.8.0': {}
+
   '@noble/hashes@2.0.1': {}
 
+  '@nodable/entities@2.2.0': {}
+
   '@nodelib/fs.scandir@2.1.5':
     dependencies:
       '@nodelib/fs.stat': 2.0.5
@@ -13218,17 +18135,108 @@ snapshots:
 
   '@nolyfill/is-core-module@1.0.39': {}
 
-  '@opentelemetry/api@1.9.0':
-    optional: true
+  '@octokit/auth-token@6.0.0': {}
+
+  '@octokit/core@7.0.6':
+    dependencies:
+      '@octokit/auth-token': 6.0.0
+      '@octokit/graphql': 9.0.3
+      '@octokit/request': 10.0.11
+      '@octokit/request-error': 7.1.0
+      '@octokit/types': 16.0.0
+      before-after-hook: 4.0.0
+      universal-user-agent: 7.0.3
+
+  '@octokit/endpoint@11.0.3':
+    dependencies:
+      '@octokit/types': 16.0.0
+      universal-user-agent: 7.0.3
+
+  '@octokit/graphql@9.0.3':
+    dependencies:
+      '@octokit/request': 10.0.11
+      '@octokit/types': 16.0.0
+      universal-user-agent: 7.0.3
+
+  '@octokit/openapi-types@27.0.0': {}
+
+  '@octokit/openapi-webhooks-types@12.1.0': {}
+
+  '@octokit/plugin-paginate-rest@14.0.0(@octokit/core@7.0.6)':
+    dependencies:
+      '@octokit/core': 7.0.6
+      '@octokit/types': 16.0.0
+
+  '@octokit/plugin-request-log@6.0.0(@octokit/core@7.0.6)':
+    dependencies:
+      '@octokit/core': 7.0.6
+
+  '@octokit/plugin-rest-endpoint-methods@17.0.0(@octokit/core@7.0.6)':
+    dependencies:
+      '@octokit/core': 7.0.6
+      '@octokit/types': 16.0.0
+
+  '@octokit/request-error@7.1.0':
+    dependencies:
+      '@octokit/types': 16.0.0
+
+  '@octokit/request@10.0.11':
+    dependencies:
+      '@octokit/endpoint': 11.0.3
+      '@octokit/request-error': 7.1.0
+      '@octokit/types': 16.0.0
+      content-type: 2.0.0
+      json-with-bigint: 3.5.10
+      universal-user-agent: 7.0.3
+
+  '@octokit/rest@22.0.1':
+    dependencies:
+      '@octokit/core': 7.0.6
+      '@octokit/plugin-paginate-rest': 14.0.0(@octokit/core@7.0.6)
+      '@octokit/plugin-request-log': 6.0.0(@octokit/core@7.0.6)
+      '@octokit/plugin-rest-endpoint-methods': 17.0.0(@octokit/core@7.0.6)
+
+  '@octokit/types@16.0.0':
+    dependencies:
+      '@octokit/openapi-types': 27.0.0
+
+  '@octokit/webhooks-methods@6.0.0': {}
+
+  '@octokit/webhooks@14.2.0':
+    dependencies:
+      '@octokit/openapi-webhooks-types': 12.1.0
+      '@octokit/request-error': 7.1.0
+      '@octokit/webhooks-methods': 6.0.0
+
+  '@oozcitak/dom@2.0.2':
+    dependencies:
+      '@oozcitak/infra': 2.0.2
+      '@oozcitak/url': 3.0.0
+      '@oozcitak/util': 10.0.0
+
+  '@oozcitak/infra@2.0.2':
+    dependencies:
+      '@oozcitak/util': 10.0.0
+
+  '@oozcitak/url@3.0.0':
+    dependencies:
+      '@oozcitak/infra': 2.0.2
+      '@oozcitak/util': 10.0.0
+
+  '@oozcitak/util@10.0.0': {}
 
   '@opentelemetry/semantic-conventions@1.43.0': {}
 
+  '@orama/orama@3.1.18': {}
+
   '@oxc-project/runtime@0.133.0': {}
 
   '@oxc-project/types@0.103.0': {}
 
   '@oxc-project/types@0.127.0': {}
 
+  '@oxc-project/types@0.130.0': {}
+
   '@oxc-project/types@0.133.0': {}
 
   '@oxfmt/binding-android-arm-eabi@0.52.0':
@@ -13365,6 +18373,25 @@ snapshots:
 
   '@oxlint/plugins@1.61.0': {}
 
+  '@paper-design/shaders-react@0.0.71(@types/react@19.1.17)(react@19.1.0)':
+    dependencies:
+      '@paper-design/shaders': 0.0.71
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@paper-design/shaders@0.0.71': {}
+
+  '@paralleldrive/cuid2@2.3.1':
+    dependencies:
+      '@noble/hashes': 1.8.0
+
+  '@paralleldrive/cuid2@3.3.0':
+    dependencies:
+      '@noble/hashes': 2.0.1
+      bignumber.js: 9.3.1
+      error-causes: 3.0.2
+
   '@peculiar/asn1-cms@2.8.0':
     dependencies:
       '@peculiar/asn1-schema': 2.8.0
@@ -13458,6 +18485,38 @@ snapshots:
       tslib: 2.8.1
       tsyringe: 4.10.0
 
+  '@pinojs/redact@0.4.0': {}
+
+  '@pixi/colord@2.9.6': {}
+
+  '@pixi/layout@3.2.1(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)(yoga-layout@3.2.1)':
+    dependencies:
+      pixi.js: 8.19.0
+      yoga-layout: 3.2.1
+    optionalDependencies:
+      '@pixi/react': 8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)
+    transitivePeerDependencies:
+      - '@types/react'
+      - react
+
+  '@pixi/react@8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)':
+    dependencies:
+      its-fine: 2.0.0(@types/react@19.1.17)(react@19.1.0)
+      pixi.js: 8.19.0
+      react: 19.1.0
+      react-reconciler: 0.31.0(react@19.1.0)
+    transitivePeerDependencies:
+      - '@types/react'
+
+  '@pixi/ui@2.3.2(pixi.js@8.19.0)':
+    dependencies:
+      pixi.js: 8.19.0
+      tweedle.js: 2.1.0
+      typed-signals: 2.5.0
+
+  '@pkgjs/parseargs@0.11.0':
+    optional: true
+
   '@pkgr/core@0.2.9': {}
 
   '@polka/url@1.0.0-next.29': {}
@@ -13470,11 +18529,11 @@ snapshots:
 
   '@radix-ui/primitive@1.1.5': {}
 
-  '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -13496,37 +18555,54 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -13540,40 +18616,49 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-aspect-ratio@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-aspect-ratio@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-avatar@1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-avatar@1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-checkbox@1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-checkbox@1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -13594,14 +18679,30 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -13642,15 +18743,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-context-menu@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-context-menu@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -13661,23 +18762,23 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       aria-hidden: 1.2.6
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
@@ -13733,15 +18834,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -13772,32 +18873,32 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -13808,13 +18909,13 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -13841,33 +18942,33 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-form@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-form@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-hover-card@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-hover-card@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -13886,90 +18987,90 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-label@2.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-label@2.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       aria-hidden: 1.2.6
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       aria-hidden: 1.2.6
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-menubar@1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-menubar@1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -13996,38 +19097,60 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-one-time-password-field@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-one-time-password-field@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-password-toggle-field@0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-password-toggle-field@0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -14055,20 +19178,43 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      aria-hidden: 1.2.6
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/rect': 1.1.2
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -14091,12 +19237,30 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/rect': 1.1.2
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -14121,11 +19285,11 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -14148,20 +19312,20 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -14184,49 +19348,49 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-radio-group@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-radio-group@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -14269,19 +19433,19 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -14303,99 +19467,116 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-select@2.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-select@2.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/number': 1.1.2
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       aria-hidden: 1.2.6
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       aria-hidden: 1.2.6
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-slider@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-slider@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -14421,33 +19602,33 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-switch@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-switch@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
@@ -14484,103 +19665,103 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toggle-group@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toggle-group@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toggle@1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toggle@1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toolbar@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toolbar@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -14644,32 +19825,161 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-size@1.1.2(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-size@1.1.2(@types/react@19.1.17)(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/rect@1.1.2': {}
+
+  '@react-email/body@0.0.11(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/button@0.0.19(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/code-block@0.0.11(react@19.1.0)':
+    dependencies:
+      prismjs: 1.29.0
+      react: 19.1.0
+
+  '@react-email/code-inline@0.0.5(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/column@0.0.13(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/components@0.0.34(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@react-email/body': 0.0.11(react@19.1.0)
+      '@react-email/button': 0.0.19(react@19.1.0)
+      '@react-email/code-block': 0.0.11(react@19.1.0)
+      '@react-email/code-inline': 0.0.5(react@19.1.0)
+      '@react-email/column': 0.0.13(react@19.1.0)
+      '@react-email/container': 0.0.15(react@19.1.0)
+      '@react-email/font': 0.0.9(react@19.1.0)
+      '@react-email/head': 0.0.12(react@19.1.0)
+      '@react-email/heading': 0.0.15(react@19.1.0)
+      '@react-email/hr': 0.0.11(react@19.1.0)
+      '@react-email/html': 0.0.11(react@19.1.0)
+      '@react-email/img': 0.0.11(react@19.1.0)
+      '@react-email/link': 0.0.12(react@19.1.0)
+      '@react-email/markdown': 0.0.14(react@19.1.0)
+      '@react-email/preview': 0.0.12(react@19.1.0)
+      '@react-email/render': 1.0.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@react-email/row': 0.0.12(react@19.1.0)
+      '@react-email/section': 0.0.16(react@19.1.0)
+      '@react-email/tailwind': 1.0.4(react@19.1.0)
+      '@react-email/text': 0.1.0(react@19.1.0)
+      react: 19.1.0
+    transitivePeerDependencies:
+      - react-dom
+
+  '@react-email/container@0.0.15(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/font@0.0.9(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/head@0.0.12(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/heading@0.0.15(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/hr@0.0.11(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/html@0.0.11(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/img@0.0.11(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/link@0.0.12(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/markdown@0.0.14(react@19.1.0)':
+    dependencies:
+      md-to-react-email: 5.0.5(react@19.1.0)
+      react: 19.1.0
+
+  '@react-email/preview@0.0.12(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
+
+  '@react-email/render@1.0.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      html-to-text: 9.0.5
+      prettier: 3.4.2
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      react-promise-suspense: 0.3.4
+
+  '@react-email/render@1.1.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      html-to-text: 9.0.5
+      prettier: 3.8.1
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-promise-suspense: 0.3.4
+
+  '@react-email/row@0.0.12(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-    optionalDependencies:
-      '@types/react': 19.1.17
 
-  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@react-email/section@0.0.16(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@react-email/tailwind@1.0.4(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/rect@1.1.2': {}
+  '@react-email/text@0.1.0(react@19.1.0)':
+    dependencies:
+      react: 19.1.0
 
   '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))':
     dependencies:
@@ -14815,7 +20125,7 @@ snapshots:
       '@react-navigation/routers': 7.5.3
       escape-string-regexp: 4.0.0
       fast-deep-equal: 3.1.3
-      nanoid: 3.3.11
+      nanoid: 3.3.15
       query-string: 7.1.3
       react: 19.1.0
       react-is: 19.2.3
@@ -14851,14 +20161,82 @@ snapshots:
       '@react-navigation/core': 7.13.7(react@19.1.0)
       escape-string-regexp: 4.0.0
       fast-deep-equal: 3.1.3
-      nanoid: 3.3.11
+      nanoid: 3.3.15
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       use-latest-callback: 0.2.6(react@19.1.0)
 
   '@react-navigation/routers@7.5.3':
     dependencies:
-      nanoid: 3.3.11
+      nanoid: 3.3.15
+
+  '@react-three/drei@10.7.7(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/react@19.1.17)(@types/three@0.185.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@mediapipe/tasks-vision': 0.10.17
+      '@monogrid/gainmap-js': 3.4.0(three@0.178.0)
+      '@react-three/fiber': 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)
+      '@use-gesture/react': 10.3.1(react@19.1.0)
+      camera-controls: 3.1.2(three@0.178.0)
+      cross-env: 7.0.3
+      detect-gpu: 5.0.70
+      glsl-noise: 0.0.0
+      hls.js: 1.6.16
+      maath: 0.10.8(@types/three@0.185.1)(three@0.178.0)
+      meshline: 3.3.1(three@0.178.0)
+      react: 19.1.0
+      stats-gl: 2.4.2(@types/three@0.185.1)(three@0.178.0)
+      stats.js: 0.17.0
+      suspend-react: 0.1.3(react@19.1.0)
+      three: 0.178.0
+      three-mesh-bvh: 0.8.3(three@0.178.0)
+      three-stdlib: 2.36.1(three@0.178.0)
+      troika-three-text: 0.52.4(three@0.178.0)
+      tunnel-rat: 0.1.2(@types/react@19.1.17)(react@19.1.0)
+      use-sync-external-store: 1.6.0(react@19.1.0)
+      utility-types: 3.11.0
+      zustand: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+    optionalDependencies:
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - '@types/react'
+      - '@types/three'
+      - immer
+
+  '@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@types/webxr': 0.5.24
+      base64-js: 1.5.1
+      buffer: 6.0.3
+      its-fine: 2.0.0(@types/react@19.1.17)(react@19.1.0)
+      react: 19.1.0
+      react-use-measure: 2.1.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      scheduler: 0.27.0
+      suspend-react: 0.1.3(react@19.1.0)
+      three: 0.178.0
+      use-sync-external-store: 1.6.0(react@19.1.0)
+      zustand: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+    optionalDependencies:
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+      react-dom: 19.1.0(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+    transitivePeerDependencies:
+      - '@types/react'
+      - immer
+
+  '@react-three/postprocessing@3.0.4(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/three@0.185.1)(react@19.1.0)(three@0.178.0)':
+    dependencies:
+      '@react-three/fiber': 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)
+      maath: 0.6.0(@types/three@0.185.1)(three@0.178.0)
+      n8ao: 1.10.3(postprocessing@6.39.2(three@0.178.0))(three@0.178.0)
+      postprocessing: 6.39.2(three@0.178.0)
+      react: 19.1.0
+      three: 0.178.0
+    transitivePeerDependencies:
+      - '@types/three'
 
   '@rolldown/binding-android-arm64@1.0.0-beta.57':
     optional: true
@@ -14866,66 +20244,102 @@ snapshots:
   '@rolldown/binding-android-arm64@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-android-arm64@1.0.1':
+    optional: true
+
   '@rolldown/binding-darwin-arm64@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-darwin-arm64@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-darwin-arm64@1.0.1':
+    optional: true
+
   '@rolldown/binding-darwin-x64@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-darwin-x64@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-darwin-x64@1.0.1':
+    optional: true
+
   '@rolldown/binding-freebsd-x64@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-freebsd-x64@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-freebsd-x64@1.0.1':
+    optional: true
+
   '@rolldown/binding-linux-arm-gnueabihf@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-linux-arm-gnueabihf@1.0.1':
+    optional: true
+
   '@rolldown/binding-linux-arm64-gnu@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-linux-arm64-gnu@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-linux-arm64-gnu@1.0.1':
+    optional: true
+
   '@rolldown/binding-linux-arm64-musl@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-linux-arm64-musl@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-linux-arm64-musl@1.0.1':
+    optional: true
+
   '@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-linux-ppc64-gnu@1.0.1':
+    optional: true
+
   '@rolldown/binding-linux-s390x-gnu@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-linux-s390x-gnu@1.0.1':
+    optional: true
+
   '@rolldown/binding-linux-x64-gnu@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-linux-x64-gnu@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-linux-x64-gnu@1.0.1':
+    optional: true
+
   '@rolldown/binding-linux-x64-musl@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-linux-x64-musl@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-linux-x64-musl@1.0.1':
+    optional: true
+
   '@rolldown/binding-openharmony-arm64@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-openharmony-arm64@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-openharmony-arm64@1.0.1':
+    optional: true
+
   '@rolldown/binding-wasm32-wasi@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
     dependencies:
       '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
@@ -14941,18 +20355,31 @@ snapshots:
       '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
     optional: true
 
+  '@rolldown/binding-wasm32-wasi@1.0.1':
+    dependencies:
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.10.0
+      '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+    optional: true
+
   '@rolldown/binding-win32-arm64-msvc@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-win32-arm64-msvc@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-win32-arm64-msvc@1.0.1':
+    optional: true
+
   '@rolldown/binding-win32-x64-msvc@1.0.0-beta.57':
     optional: true
 
   '@rolldown/binding-win32-x64-msvc@1.0.0-rc.17':
     optional: true
 
+  '@rolldown/binding-win32-x64-msvc@1.0.1':
+    optional: true
+
   '@rolldown/pluginutils@1.0.0-beta.27': {}
 
   '@rolldown/pluginutils@1.0.0-beta.57': {}
@@ -14961,6 +20388,8 @@ snapshots:
 
   '@rolldown/pluginutils@1.0.0-rc.3': {}
 
+  '@rolldown/pluginutils@1.0.1': {}
+
   '@rollup/rollup-android-arm-eabi@4.59.0':
     optional: true
 
@@ -15038,11 +20467,63 @@ snapshots:
 
   '@rtsao/scc@1.1.0': {}
 
+  '@selderee/plugin-htmlparser2@0.11.0':
+    dependencies:
+      domhandler: 5.0.3
+      selderee: 0.11.0
+
   '@shadcn/react@0.2.1(@types/react@19.1.17)(react@19.1.0)':
     optionalDependencies:
       '@types/react': 19.1.17
       react: 19.1.0
 
+  '@shikijs/core@3.23.0':
+    dependencies:
+      '@shikijs/types': 3.23.0
+      '@shikijs/vscode-textmate': 10.0.2
+      '@types/hast': 3.0.5
+      hast-util-to-html: 9.0.5
+
+  '@shikijs/engine-javascript@3.23.0':
+    dependencies:
+      '@shikijs/types': 3.23.0
+      '@shikijs/vscode-textmate': 10.0.2
+      oniguruma-to-es: 4.3.6
+
+  '@shikijs/engine-oniguruma@3.23.0':
+    dependencies:
+      '@shikijs/types': 3.23.0
+      '@shikijs/vscode-textmate': 10.0.2
+
+  '@shikijs/langs@3.23.0':
+    dependencies:
+      '@shikijs/types': 3.23.0
+
+  '@shikijs/rehype@3.23.0':
+    dependencies:
+      '@shikijs/types': 3.23.0
+      '@types/hast': 3.0.5
+      hast-util-to-string: 3.0.1
+      shiki: 3.23.0
+      unified: 11.0.5
+      unist-util-visit: 5.1.0
+
+  '@shikijs/themes@3.23.0':
+    dependencies:
+      '@shikijs/types': 3.23.0
+
+  '@shikijs/transformers@3.23.0':
+    dependencies:
+      '@shikijs/core': 3.23.0
+      '@shikijs/types': 3.23.0
+
+  '@shikijs/types@3.23.0':
+    dependencies:
+      '@shikijs/vscode-textmate': 10.0.2
+      '@types/hast': 3.0.5
+
+  '@shikijs/vscode-textmate@10.0.2': {}
+
   '@sinclair/typebox@0.27.8': {}
 
   '@sinclair/typebox@0.34.41': {}
@@ -15055,7 +20536,82 @@ snapshots:
     dependencies:
       '@sinonjs/commons': 3.0.1
 
-  '@srsholmes/vitest-react-native@0.1.5(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))':
+  '@smithy/core@3.29.3':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/credential-provider-imds@4.4.8':
+    dependencies:
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/fetch-http-handler@5.6.5':
+    dependencies:
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/is-array-buffer@2.2.0':
+    dependencies:
+      tslib: 2.8.1
+
+  '@smithy/node-config-provider@4.5.8':
+    dependencies:
+      '@smithy/core': 3.29.3
+      tslib: 2.8.1
+
+  '@smithy/node-http-handler@4.9.5':
+    dependencies:
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/protocol-http@5.5.8':
+    dependencies:
+      '@smithy/core': 3.29.3
+      tslib: 2.8.1
+
+  '@smithy/shared-ini-file-loader@4.6.8':
+    dependencies:
+      '@smithy/core': 3.29.3
+      tslib: 2.8.1
+
+  '@smithy/signature-v4@5.6.4':
+    dependencies:
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/smithy-client@4.14.8':
+    dependencies:
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@smithy/types@4.16.1':
+    dependencies:
+      tslib: 2.8.1
+
+  '@smithy/util-base64@4.5.8':
+    dependencies:
+      '@smithy/core': 3.29.3
+      tslib: 2.8.1
+
+  '@smithy/util-buffer-from@2.2.0':
+    dependencies:
+      '@smithy/is-array-buffer': 2.2.0
+      tslib: 2.8.1
+
+  '@smithy/util-utf8@2.3.0':
+    dependencies:
+      '@smithy/util-buffer-from': 2.2.0
+      tslib: 2.8.1
+
+  '@socket.io/component-emitter@3.1.2': {}
+
+  '@srsholmes/vitest-react-native@0.1.5(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@react-native/polyfills': 2.0.0
       esbuild: 0.27.7
@@ -15065,12 +20621,24 @@ snapshots:
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vitest: 4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   '@standard-schema/spec@1.1.0': {}
 
   '@standard-schema/utils@0.3.0': {}
 
+  '@swc/counter@0.1.3': {}
+
+  '@swc/helpers@0.5.15':
+    dependencies:
+      tslib: 2.8.1
+
+  '@t3-oss/env-core@0.13.11(typescript@6.0.3)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)':
+    optionalDependencies:
+      typescript: 6.0.3
+      valibot: 1.4.2(typescript@6.0.3)
+      zod: 4.3.6
+
   '@tailwindcss/node@4.3.0':
     dependencies:
       '@jridgewell/remapping': 2.3.5
@@ -15201,54 +20769,171 @@ snapshots:
       postcss: 8.5.16
       tailwindcss: 4.3.2
 
-  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@tailwindcss/node': 4.3.0
+      '@tailwindcss/oxide': 4.3.0
+      tailwindcss: 4.3.0
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
+  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@tailwindcss/node': 4.3.0
       '@tailwindcss/oxide': 4.3.0
       tailwindcss: 4.3.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   '@tanstack/history@1.161.4': {}
 
   '@tanstack/history@1.162.0': {}
 
-  '@tanstack/query-core@5.101.2': {}
+  '@tanstack/query-core@5.100.11': {}
+
+  '@tanstack/query-devtools@5.100.11': {}
 
   '@tanstack/query-devtools@5.101.2': {}
 
+  '@tanstack/react-query-devtools@5.100.11(@tanstack/react-query@5.100.11(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/query-devtools': 5.100.11
+      '@tanstack/react-query': 5.100.11(react@19.1.0)
+      react: 19.1.0
+
   '@tanstack/react-query-devtools@5.101.2(@tanstack/react-query@5.101.2(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/query-devtools': 5.101.2
       '@tanstack/react-query': 5.101.2(react@19.1.0)
       react: 19.1.0
 
+  '@tanstack/react-query@5.100.11(react@19.1.0)':
+    dependencies:
+      '@tanstack/query-core': 5.100.11
+      react: 19.1.0
+
   '@tanstack/react-query@5.101.2(react@19.1.0)':
     dependencies:
-      '@tanstack/query-core': 5.101.2
+      '@tanstack/query-core': 5.100.11
       react: 19.1.0
 
-  '@tanstack/react-router-devtools@1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(csstype@3.2.3)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-router-devtools@1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(csstype@3.2.3)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@tanstack/react-router': 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/router-devtools-core': 1.163.3(@tanstack/router-core@1.171.14)(csstype@3.2.3)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@tanstack/router-core': 1.171.14
     transitivePeerDependencies:
       - csstype
 
-  '@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-router-ssr-query@1.167.0(@tanstack/query-core@5.100.11)(@tanstack/react-query@5.100.11(react@19.1.0))(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/query-core': 5.100.11
+      '@tanstack/react-query': 5.100.11(react@19.1.0)
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-ssr-query-core': 1.169.0(@tanstack/query-core@5.100.11)(@tanstack/router-core@1.171.14)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - '@tanstack/router-core'
+
+  '@tanstack/react-router@1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/history': 1.161.4
-      '@tanstack/react-store': 0.9.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-store': 0.9.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@tanstack/router-core': 1.163.3
       isbot: 5.2.0
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
 
+  '@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/history': 1.162.0
+      '@tanstack/react-store': 0.9.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-core': 1.171.5
+      isbot: 5.2.0
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
+  '@tanstack/react-start-client@1.168.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/start-client-core': 1.170.2
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
+  '@tanstack/react-start-rsc@0.1.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-start-server': 1.167.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/router-utils': 1.162.1
+      '@tanstack/start-client-core': 1.170.2
+      '@tanstack/start-fn-stubs': 1.162.0
+      '@tanstack/start-plugin-core': 1.171.3(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/start-server-core': 1.169.2
+      '@tanstack/start-storage-context': 1.167.7
+      pathe: 2.0.3
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - '@farmfe/core'
+      - '@rsbuild/core'
+      - bun-types-no-globals
+      - crossws
+      - esbuild
+      - rolldown
+      - rollup
+      - supports-color
+      - unloader
+      - vite
+      - vite-plugin-solid
+      - webpack
+
+  '@tanstack/react-start-server@1.167.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/history': 1.162.0
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/start-client-core': 1.170.2
+      '@tanstack/start-server-core': 1.169.2
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - crossws
+
+  '@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-start-client': 1.168.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-start-rsc': 0.1.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/react-start-server': 1.167.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/router-utils': 1.162.1
+      '@tanstack/start-client-core': 1.170.2
+      '@tanstack/start-plugin-core': 1.171.3(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/start-server-core': 1.169.2
+      pathe: 2.0.3
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    optionalDependencies:
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@farmfe/core'
+      - '@rspack/core'
+      - bun-types-no-globals
+      - crossws
+      - esbuild
+      - react-server-dom-rspack
+      - rolldown
+      - rollup
+      - supports-color
+      - unloader
+      - vite-plugin-solid
+      - webpack
+
   '@tanstack/react-store@0.9.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/store': 0.9.3
@@ -15256,6 +20941,19 @@ snapshots:
       react-dom: 19.1.0(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
 
+  '@tanstack/react-store@0.9.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/store': 0.9.3
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      use-sync-external-store: 1.6.0(react@19.1.0)
+
+  '@tanstack/react-table@8.21.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      '@tanstack/table-core': 8.21.3
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   '@tanstack/router-core@1.163.3':
     dependencies:
       '@tanstack/history': 1.161.4
@@ -15273,6 +20971,13 @@ snapshots:
       seroval: 1.5.5
       seroval-plugins: 1.5.5(seroval@1.5.5)
 
+  '@tanstack/router-core@1.171.5':
+    dependencies:
+      '@tanstack/history': 1.162.0
+      cookie-es: 3.1.1
+      seroval: 1.5.5
+      seroval-plugins: 1.5.5(seroval@1.5.5)
+
   '@tanstack/router-devtools-core@1.163.3(@tanstack/router-core@1.171.14)(csstype@3.2.3)':
     dependencies:
       '@tanstack/router-core': 1.171.14
@@ -15295,7 +21000,20 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@tanstack/router-plugin@1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tanstack/router-generator@1.167.9':
+    dependencies:
+      '@babel/types': 7.29.7
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/router-utils': 1.162.1
+      '@tanstack/virtual-file-routes': 1.162.0
+      jiti: 2.7.0
+      magic-string: 0.30.21
+      prettier: 3.8.1
+      zod: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tanstack/router-plugin@1.163.3(@tanstack/react-router@1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
@@ -15311,12 +21029,59 @@ snapshots:
       unplugin: 2.3.11
       zod: 3.25.76
     optionalDependencies:
-      '@tanstack/react-router': 1.163.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.163.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
-  '@tanstack/router-utils@1.161.4':
+  '@tanstack/router-plugin@1.168.10(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
+      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.6)
+      '@babel/template': 7.29.7
+      '@babel/traverse': 7.29.0
+      '@babel/types': 7.29.7
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/router-generator': 1.167.9
+      '@tanstack/router-utils': 1.162.1
+      '@tanstack/virtual-file-routes': 1.162.0
+      chokidar: 5.0.0
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      zod: 4.4.3
+    optionalDependencies:
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@farmfe/core'
+      - '@rspack/core'
+      - bun-types-no-globals
+      - esbuild
+      - rolldown
+      - rollup
+      - supports-color
+      - unloader
+
+  '@tanstack/router-ssr-query-core@1.169.0(@tanstack/query-core@5.100.11)(@tanstack/router-core@1.171.14)':
+    dependencies:
+      '@tanstack/query-core': 5.100.11
+      '@tanstack/router-core': 1.171.14
+
+  '@tanstack/router-utils@1.161.4':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/generator': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+      ansis: 4.2.0
+      babel-dead-code-elimination: 1.0.12
+      diff: 8.0.4
+      pathe: 2.0.3
+      tinyglobby: 0.2.15
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tanstack/router-utils@1.162.1':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/generator': 7.29.7
@@ -15330,10 +21095,85 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@tanstack/start-client-core@1.170.2':
+    dependencies:
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/start-fn-stubs': 1.162.0
+      '@tanstack/start-storage-context': 1.167.7
+      seroval: 1.5.5
+
+  '@tanstack/start-fn-stubs@1.162.0': {}
+
+  '@tanstack/start-plugin-core@1.171.3(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@babel/code-frame': 7.27.1
+      '@babel/core': 7.29.6
+      '@babel/types': 7.29.7
+      '@rolldown/pluginutils': 1.0.1
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/router-generator': 1.167.9
+      '@tanstack/router-plugin': 1.168.10(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/router-utils': 1.162.1
+      '@tanstack/start-client-core': 1.170.2
+      '@tanstack/start-server-core': 1.169.2
+      cheerio: 1.2.0
+      exsolve: 1.0.8
+      lightningcss: 1.32.0
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      seroval: 1.5.5
+      source-map: 0.7.6
+      srvx: 0.11.15
+      tinyglobby: 0.2.15
+      ufo: 1.6.4
+      vitefu: 1.1.3(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      xmlbuilder2: 4.0.3
+      zod: 4.4.3
+    optionalDependencies:
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@farmfe/core'
+      - '@rspack/core'
+      - '@tanstack/react-router'
+      - bun-types-no-globals
+      - crossws
+      - esbuild
+      - rolldown
+      - rollup
+      - supports-color
+      - unloader
+      - vite-plugin-solid
+      - webpack
+
+  '@tanstack/start-server-core@1.169.2':
+    dependencies:
+      '@tanstack/history': 1.162.0
+      '@tanstack/router-core': 1.171.5
+      '@tanstack/start-client-core': 1.170.2
+      '@tanstack/start-storage-context': 1.167.7
+      fetchdts: 0.1.7
+      h3-v2: h3@2.0.1-rc.18
+      seroval: 1.5.5
+    transitivePeerDependencies:
+      - crossws
+
+  '@tanstack/start-storage-context@1.167.7':
+    dependencies:
+      '@tanstack/router-core': 1.171.5
+
   '@tanstack/store@0.9.3': {}
 
+  '@tanstack/table-core@8.21.3': {}
+
   '@tanstack/virtual-file-routes@1.161.4': {}
 
+  '@tanstack/virtual-file-routes@1.162.0': {}
+
+  '@tanstack/zod-adapter@1.167.0(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(zod@4.3.6)':
+    dependencies:
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      zod: 4.3.6
+
   '@testing-library/dom@10.4.1':
     dependencies:
       '@babel/code-frame': 7.29.7
@@ -15345,7 +21185,7 @@ snapshots:
       picocolors: 1.1.1
       pretty-format: 27.5.1
 
-  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       jest-matcher-utils: 30.2.0
       picocolors: 1.1.1
@@ -15355,9 +21195,10 @@ snapshots:
       react-test-renderer: 19.1.0(react@19.1.0)
       redent: 3.0.0
     optionalDependencies:
-      jest: 29.7.0(@types/node@24.10.4)
+      jest: 29.7.0(@types/node@20.19.43)
+    optional: true
 
-  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       jest-matcher-utils: 30.2.0
       picocolors: 1.1.1
@@ -15367,8 +21208,7 @@ snapshots:
       react-test-renderer: 19.1.0(react@19.1.0)
       redent: 3.0.0
     optionalDependencies:
-      jest: 29.7.0(@types/node@25.3.3)
-    optional: true
+      jest: 29.7.0(@types/node@24.10.4)
 
   '@testing-library/react@16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -15408,6 +21248,8 @@ snapshots:
   '@turbo/windows-arm64@2.10.4':
     optional: true
 
+  '@tweenjs/tween.js@23.1.3': {}
+
   '@tybys/wasm-util@0.10.1':
     dependencies:
       tslib: 2.8.1
@@ -15420,6 +21262,8 @@ snapshots:
 
   '@types/aria-query@5.0.4': {}
 
+  '@types/aws-lambda@8.10.162': {}
+
   '@types/babel__core@7.20.5':
     dependencies:
       '@babel/parser': 7.29.7
@@ -15441,48 +21285,162 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.7
 
+  '@types/bun@1.3.14':
+    dependencies:
+      bun-types: 1.3.14
+
   '@types/chai@5.2.3':
     dependencies:
       '@types/deep-eql': 4.0.2
       assertion-error: 2.0.1
 
+  '@types/cors@2.8.19':
+    dependencies:
+      '@types/node': 24.10.4
+
   '@types/d3-array@3.2.2': {}
 
+  '@types/d3-axis@3.0.6':
+    dependencies:
+      '@types/d3-selection': 3.0.11
+
+  '@types/d3-brush@3.0.6':
+    dependencies:
+      '@types/d3-selection': 3.0.11
+
+  '@types/d3-chord@3.0.6': {}
+
   '@types/d3-color@3.1.3': {}
 
+  '@types/d3-contour@3.0.6':
+    dependencies:
+      '@types/d3-array': 3.2.2
+      '@types/geojson': 7946.0.16
+
+  '@types/d3-delaunay@6.0.4': {}
+
+  '@types/d3-dispatch@3.0.7': {}
+
+  '@types/d3-drag@3.0.7':
+    dependencies:
+      '@types/d3-selection': 3.0.11
+
+  '@types/d3-dsv@3.0.7': {}
+
   '@types/d3-ease@3.0.2': {}
 
+  '@types/d3-fetch@3.0.7':
+    dependencies:
+      '@types/d3-dsv': 3.0.7
+
+  '@types/d3-force@3.0.10': {}
+
+  '@types/d3-format@3.0.4': {}
+
+  '@types/d3-geo@3.1.0':
+    dependencies:
+      '@types/geojson': 7946.0.16
+
+  '@types/d3-hierarchy@3.1.7': {}
+
   '@types/d3-interpolate@3.0.4':
     dependencies:
       '@types/d3-color': 3.1.3
 
   '@types/d3-path@3.1.1': {}
 
+  '@types/d3-polygon@3.0.2': {}
+
+  '@types/d3-quadtree@3.0.6': {}
+
+  '@types/d3-random@3.0.4': {}
+
+  '@types/d3-scale-chromatic@3.1.0': {}
+
   '@types/d3-scale@4.0.9':
     dependencies:
       '@types/d3-time': 3.0.4
 
+  '@types/d3-selection@3.0.11': {}
+
   '@types/d3-shape@3.1.8':
     dependencies:
       '@types/d3-path': 3.1.1
 
+  '@types/d3-time-format@4.0.3': {}
+
   '@types/d3-time@3.0.4': {}
 
   '@types/d3-timer@3.0.2': {}
 
+  '@types/d3-transition@3.0.9':
+    dependencies:
+      '@types/d3-selection': 3.0.11
+
+  '@types/d3-zoom@3.0.8':
+    dependencies:
+      '@types/d3-interpolate': 3.0.4
+      '@types/d3-selection': 3.0.11
+
+  '@types/d3@7.4.3':
+    dependencies:
+      '@types/d3-array': 3.2.2
+      '@types/d3-axis': 3.0.6
+      '@types/d3-brush': 3.0.6
+      '@types/d3-chord': 3.0.6
+      '@types/d3-color': 3.1.3
+      '@types/d3-contour': 3.0.6
+      '@types/d3-delaunay': 6.0.4
+      '@types/d3-dispatch': 3.0.7
+      '@types/d3-drag': 3.0.7
+      '@types/d3-dsv': 3.0.7
+      '@types/d3-ease': 3.0.2
+      '@types/d3-fetch': 3.0.7
+      '@types/d3-force': 3.0.10
+      '@types/d3-format': 3.0.4
+      '@types/d3-geo': 3.1.0
+      '@types/d3-hierarchy': 3.1.7
+      '@types/d3-interpolate': 3.0.4
+      '@types/d3-path': 3.1.1
+      '@types/d3-polygon': 3.0.2
+      '@types/d3-quadtree': 3.0.6
+      '@types/d3-random': 3.0.4
+      '@types/d3-scale': 4.0.9
+      '@types/d3-scale-chromatic': 3.1.0
+      '@types/d3-selection': 3.0.11
+      '@types/d3-shape': 3.1.8
+      '@types/d3-time': 3.0.4
+      '@types/d3-time-format': 4.0.3
+      '@types/d3-timer': 3.0.2
+      '@types/d3-transition': 3.0.9
+      '@types/d3-zoom': 3.0.8
+
   '@types/debug@4.1.12':
     dependencies:
       '@types/ms': 2.1.0
-    optional: true
 
   '@types/deep-eql@4.0.2': {}
 
+  '@types/draco3d@1.4.10': {}
+
+  '@types/earcut@3.0.0': {}
+
+  '@types/estree-jsx@1.0.5':
+    dependencies:
+      '@types/estree': 1.0.8
+
   '@types/estree@1.0.8': {}
 
+  '@types/geojson@7946.0.16': {}
+
   '@types/graceful-fs@4.1.9':
     dependencies:
       '@types/node': 24.10.4
 
+  '@types/hast@3.0.5':
+    dependencies:
+      '@types/unist': 3.0.3
+
   '@types/istanbul-lib-coverage@2.0.6': {}
 
   '@types/istanbul-lib-report@3.0.3':
@@ -15508,8 +21466,25 @@ snapshots:
 
   '@types/json5@0.0.29': {}
 
-  '@types/ms@2.1.0':
-    optional: true
+  '@types/jsonwebtoken@9.0.10':
+    dependencies:
+      '@types/ms': 2.1.0
+      '@types/node': 24.10.4
+
+  '@types/jsrsasign@10.5.15': {}
+
+  '@types/mdast@4.0.4':
+    dependencies:
+      '@types/unist': 3.0.3
+
+  '@types/mdx@2.0.14': {}
+
+  '@types/ms@2.1.0': {}
+
+  '@types/node-fetch@2.6.13':
+    dependencies:
+      '@types/node': 24.10.4
+      form-data: 4.0.6
 
   '@types/node@20.19.43':
     dependencies:
@@ -15523,10 +21498,17 @@ snapshots:
     dependencies:
       undici-types: 7.16.0
 
-  '@types/node@25.3.3':
+  '@types/nodemailer@8.0.1':
     dependencies:
-      undici-types: 7.18.2
-    optional: true
+      '@types/node': 24.10.4
+
+  '@types/offscreencanvas@2019.7.3': {}
+
+  '@types/pg@8.20.0':
+    dependencies:
+      '@types/node': 24.10.4
+      pg-protocol: 1.15.0
+      pg-types: 2.2.0
 
   '@types/react-dom@19.1.9(@types/react@19.1.17)':
     dependencies:
@@ -15536,14 +21518,38 @@ snapshots:
     dependencies:
       '@types/react': 19.1.17
 
+  '@types/react-reconciler@0.28.9(@types/react@19.1.17)':
+    dependencies:
+      '@types/react': 19.1.17
+
   '@types/react@19.1.17':
     dependencies:
       csstype: 3.2.3
 
   '@types/stack-utils@2.0.3': {}
 
+  '@types/stats.js@0.17.4': {}
+
+  '@types/three@0.185.1':
+    dependencies:
+      '@dimforge/rapier3d-compat': 0.12.0
+      '@tweenjs/tween.js': 23.1.3
+      '@types/stats.js': 0.17.4
+      '@types/webxr': 0.5.24
+      fflate: 0.8.3
+      meshoptimizer: 1.1.1
+
   '@types/tough-cookie@4.0.5': {}
 
+  '@types/trusted-types@2.0.7':
+    optional: true
+
+  '@types/unist@2.0.11': {}
+
+  '@types/unist@3.0.3': {}
+
+  '@types/webxr@0.5.24': {}
+
   '@types/ws@8.18.1':
     dependencies:
       '@types/node': 24.10.4
@@ -15737,6 +21743,11 @@ snapshots:
   '@unrs/resolver-binding-win32-x64-msvc@1.11.1':
     optional: true
 
+  '@upsetjs/venn.js@2.0.0':
+    optionalDependencies:
+      d3-selection: 3.0.0
+      d3-transition: 3.0.1(d3-selection@3.0.0)
+
   '@urql/core@5.2.0':
     dependencies:
       '@0no-co/graphql.web': 1.2.0
@@ -15749,6 +21760,15 @@ snapshots:
       '@urql/core': 5.2.0
       wonka: 6.3.5
 
+  '@use-gesture/core@10.3.1': {}
+
+  '@use-gesture/react@10.3.1(react@19.1.0)':
+    dependencies:
+      '@use-gesture/core': 10.3.1
+      react: 19.1.0
+
+  '@vercel/oidc@3.2.0': {}
+
   '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
@@ -15761,7 +21781,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
@@ -15769,11 +21789,11 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-beta.27
       '@types/babel__core': 7.20.5
       react-refresh: 0.17.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
@@ -15781,11 +21801,11 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
@@ -15793,7 +21813,7 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-rc.3
       '@types/babel__core': 7.20.5
       react-refresh: 0.18.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
@@ -15805,15 +21825,6 @@ snapshots:
       chai: 5.3.3
       tinyrainbow: 2.0.0
 
-  '@vitest/expect@4.1.6':
-    dependencies:
-      '@standard-schema/spec': 1.1.0
-      '@types/chai': 5.2.3
-      '@vitest/spy': 4.1.6
-      '@vitest/utils': 4.1.6
-      chai: 6.2.2
-      tinyrainbow: 3.1.0
-
   '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@vitest/spy': 3.2.7
@@ -15830,27 +21841,11 @@ snapshots:
     optionalDependencies:
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4))':
-    dependencies:
-      '@vitest/spy': 3.2.7
-      estree-walker: 3.0.3
-      magic-string: 0.30.21
-    optionalDependencies:
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-
-  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@24.10.4)(tsx@4.21.0))':
     dependencies:
       '@vitest/spy': 3.2.7
       estree-walker: 3.0.3
       magic-string: 0.30.21
-    optionalDependencies:
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-
-  '@vitest/mocker@4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
-    dependencies:
-      '@vitest/spy': 4.1.6
-      estree-walker: 3.0.3
-      magic-string: 0.30.21
     optionalDependencies:
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
@@ -15858,7 +21853,7 @@ snapshots:
     dependencies:
       tinyrainbow: 2.0.0
 
-  '@vitest/pretty-format@4.1.6':
+  '@vitest/pretty-format@4.1.0':
     dependencies:
       tinyrainbow: 3.1.0
 
@@ -15868,29 +21863,26 @@ snapshots:
       pathe: 2.0.3
       strip-literal: 3.1.0
 
-  '@vitest/runner@4.1.6':
-    dependencies:
-      '@vitest/utils': 4.1.6
-      pathe: 2.0.3
-
   '@vitest/snapshot@3.2.7':
     dependencies:
       '@vitest/pretty-format': 3.2.7
       magic-string: 0.30.21
       pathe: 2.0.3
 
-  '@vitest/snapshot@4.1.6':
-    dependencies:
-      '@vitest/pretty-format': 4.1.6
-      '@vitest/utils': 4.1.6
-      magic-string: 0.30.21
-      pathe: 2.0.3
-
   '@vitest/spy@3.2.7':
     dependencies:
       tinyspy: 4.0.4
 
-  '@vitest/spy@4.1.6': {}
+  '@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23)':
+    dependencies:
+      '@vitest/utils': 4.1.0
+      fflate: 0.8.3
+      flatted: 3.4.2
+      pathe: 2.0.3
+      sirv: 3.0.2
+      tinyglobby: 0.2.15
+      tinyrainbow: 3.1.0
+      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   '@vitest/utils@3.2.7':
     dependencies:
@@ -15898,9 +21890,9 @@ snapshots:
       loupe: 3.2.1
       tinyrainbow: 2.0.0
 
-  '@vitest/utils@4.1.6':
+  '@vitest/utils@4.1.0':
     dependencies:
-      '@vitest/pretty-format': 4.1.6
+      '@vitest/pretty-format': 4.1.0
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
@@ -15955,14 +21947,14 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
       postcss: 8.5.10
     optionalDependencies:
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       esbuild: 0.25.12
       fsevents: 2.3.3
       jiti: 2.7.0
@@ -15972,14 +21964,14 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
       postcss: 8.5.10
     optionalDependencies:
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       esbuild: 0.28.1
       fsevents: 2.3.3
       jiti: 2.7.0
@@ -15989,14 +21981,14 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
       postcss: 8.5.10
     optionalDependencies:
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       esbuild: 0.28.1
       fsevents: 2.3.3
       jiti: 2.7.0
@@ -16006,14 +21998,14 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
       postcss: 8.5.10
     optionalDependencies:
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       esbuild: 0.28.1
       fsevents: 2.3.3
       jiti: 2.7.0
@@ -16041,11 +22033,11 @@ snapshots:
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
     optional: true
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -16058,8 +22050,8 @@ snapshots:
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
       '@types/node': 20.19.43
+      '@vitest/ui': 4.1.0(@voidzero-dev/vite-plus-test@0.1.23)
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -16083,11 +22075,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -16100,7 +22092,6 @@ snapshots:
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
       '@types/node': 20.19.43
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -16125,7 +22116,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -16142,7 +22133,6 @@ snapshots:
       vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
       '@types/node': 22.20.1
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -16167,11 +22157,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -16181,11 +22171,10 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -16209,11 +22198,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -16223,11 +22212,10 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -16251,11 +22239,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -16265,11 +22253,10 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -16293,11 +22280,11 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
       obug: 2.1.1
       pixelmatch: 7.2.0
@@ -16307,11 +22294,10 @@ snapshots:
       tinybench: 2.9.0
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -16341,6 +22327,38 @@ snapshots:
   '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.23':
     optional: true
 
+  '@webgpu/types@0.1.71': {}
+
+  '@workflow/serde@4.1.0': {}
+
+  '@workos-inc/node@8.13.0':
+    dependencies:
+      eventemitter3: 5.0.4
+
+  '@workos-inc/node@9.2.0':
+    dependencies:
+      eventemitter3: 5.0.4
+
+  '@workos/authkit-session@0.5.2(@workos-inc/node@8.13.0)(typescript@6.0.3)':
+    dependencies:
+      '@workos-inc/node': 8.13.0
+      iron-webcrypto: 2.0.0
+      jose: 6.1.3
+      valibot: 1.4.2(typescript@6.0.3)
+    transitivePeerDependencies:
+      - typescript
+
+  '@workos/authkit-tanstack-react-start@0.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(@workos-inc/node@8.13.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(typescript@6.0.3)':
+    dependencies:
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-start': 1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@workos/authkit-session': 0.5.2(@workos-inc/node@8.13.0)(typescript@6.0.3)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - '@workos-inc/node'
+      - typescript
+
   '@xmldom/xmldom@0.8.13': {}
 
   abab@2.0.6: {}
@@ -16363,6 +22381,10 @@ snapshots:
     dependencies:
       acorn: 8.15.0
 
+  acorn-jsx@5.3.2(acorn@8.16.0):
+    dependencies:
+      acorn: 8.16.0
+
   acorn-walk@8.3.4:
     dependencies:
       acorn: 8.16.0
@@ -16379,6 +22401,13 @@ snapshots:
 
   agent-base@7.1.4: {}
 
+  ai@7.0.22(zod@4.3.6):
+    dependencies:
+      '@ai-sdk/gateway': 4.0.16(zod@4.3.6)
+      '@ai-sdk/provider': 4.0.3
+      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
+      zod: 4.3.6
+
   ajv@6.12.6:
     dependencies:
       fast-deep-equal: 3.1.3
@@ -16393,6 +22422,61 @@ snapshots:
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
+  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0):
+    dependencies:
+      '@alchemy.run/node-utils': 0.0.5
+      '@aws-sdk/credential-providers': 3.1081.0
+      '@clack/prompts': 0.11.0
+      '@distilled.cloud/aws': 0.26.1(effect@4.0.0-beta.84)
+      '@distilled.cloud/axiom': 0.26.1(effect@4.0.0-beta.84)
+      '@distilled.cloud/cloudflare': 0.26.1(effect@4.0.0-beta.84)
+      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260526.1)
+      '@distilled.cloud/cloudflare-runtime': 0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)
+      '@distilled.cloud/cloudflare-vite-plugin': 0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260526.1)
+      '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
+      '@distilled.cloud/neon': 0.26.1(effect@4.0.0-beta.84)
+      '@distilled.cloud/planetscale': 0.26.1(effect@4.0.0-beta.84)
+      '@effect/vitest': 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
+      '@libsql/client': 0.17.4
+      '@octokit/rest': 22.0.1
+      '@octokit/webhooks': 14.2.0
+      '@smithy/node-config-provider': 4.5.8
+      '@smithy/shared-ini-file-loader': 4.6.8
+      '@smithy/types': 4.16.1
+      '@types/aws-lambda': 8.10.162
+      aws4fetch: 1.0.20
+      capnweb: 0.6.1
+      effect: 4.0.0-beta.84
+      fast-glob: 3.3.3
+      fast-xml-parser: 5.10.0
+      ink: 6.8.0(@types/react@19.1.17)(react-devtools-core@6.1.5)(react@19.2.7)
+      jszip: 3.10.1
+      libsodium-wrappers: 0.8.4
+      magic-string: 0.30.21
+      mysql2: 3.16.0
+      pathe: 2.0.3
+      pg: 8.22.0
+      picomatch: 4.0.4
+      react: 19.2.7
+      rolldown: 1.0.1
+      undici: 7.28.0
+      yaml: 2.8.3
+    optionalDependencies:
+      '@effect/platform-bun': 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
+      '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
+      drizzle-kit: 1.0.0-rc.3
+      drizzle-orm: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
+      ws: 8.21.0
+    transitivePeerDependencies:
+      - '@types/react'
+      - bufferutil
+      - pg-native
+      - react-devtools-core
+      - utf-8-validate
+      - vitest
+      - workerd
+
   anser@1.4.10: {}
 
   ansi-escapes@4.3.2:
@@ -16401,6 +22485,10 @@ snapshots:
 
   ansi-escapes@6.2.1: {}
 
+  ansi-escapes@7.3.0:
+    dependencies:
+      environment: 1.1.0
+
   ansi-regex@4.1.1: {}
 
   ansi-regex@5.0.1: {}
@@ -16417,6 +22505,8 @@ snapshots:
 
   ansi-styles@5.2.0: {}
 
+  ansi-styles@6.2.3: {}
+
   ansis@4.2.0: {}
 
   any-promise@1.3.0: {}
@@ -16426,6 +22516,8 @@ snapshots:
       normalize-path: 3.0.0
       picomatch: 2.3.2
 
+  anynum@1.0.1: {}
+
   arg@5.0.2: {}
 
   argparse@1.0.10:
@@ -16530,18 +22622,25 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
+  astring@1.9.0: {}
+
   async-function@1.0.0: {}
 
   async-limiter@1.0.1: {}
 
   asynckit@0.4.0: {}
 
+  atomic-sleep@1.0.0: {}
+
+  auto-bind@5.0.1: {}
+
   available-typed-arrays@1.0.7:
     dependencies:
       possible-typed-array-names: 1.1.0
 
-  aws-ssl-profiles@1.1.2:
-    optional: true
+  aws-ssl-profiles@1.1.2: {}
+
+  aws4fetch@1.0.20: {}
 
   babel-dead-code-elimination@1.0.12:
     dependencies:
@@ -16614,6 +22713,10 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.7
 
+  babel-plugin-react-compiler@19.1.0-rc.2:
+    dependencies:
+      '@babel/types': 7.29.7
+
   babel-plugin-react-native-web@0.21.2: {}
 
   babel-plugin-syntax-hermes-parser@0.29.1:
@@ -16747,23 +22850,31 @@ snapshots:
       babel-plugin-jest-hoist: 29.6.3
       babel-preset-current-node-syntax: 1.2.0(@babel/core@7.29.6)
 
+  bail@2.0.2: {}
+
   balanced-match@1.0.2: {}
 
   balanced-match@4.0.4: {}
 
   base64-js@1.5.1: {}
 
+  base64id@2.0.0: {}
+
+  base64url@3.0.1: {}
+
   baseline-browser-mapping@2.9.11: {}
 
-  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@0.31.8)(mysql2@3.16.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  before-after-hook@4.0.0: {}
+
+  better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/kysely-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)
-      '@better-auth/memory-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/mongo-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/prisma-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/telemetry': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/kysely-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)
+      '@better-auth/memory-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/mongo-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/prisma-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/telemetry': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)
       '@better-auth/utils': 0.4.2
       '@better-fetch/fetch': 1.3.1
       '@noble/ciphers': 2.1.1
@@ -16775,11 +22886,12 @@ snapshots:
       nanostores: 1.4.0
       zod: 4.3.6
     optionalDependencies:
-      drizzle-kit: 0.31.8
-      mysql2: 3.16.0
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      drizzle-kit: 1.0.0-rc.3
+      mysql2: 3.16.0
+      pg: 8.22.0
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@cloudflare/workers-types'
       - '@opentelemetry/api'
@@ -16797,14 +22909,28 @@ snapshots:
     dependencies:
       open: 8.4.2
 
+  bidi-js@1.0.3:
+    dependencies:
+      require-from-string: 2.0.2
+
   big-integer@1.6.52: {}
 
+  bignumber.js@9.3.1: {}
+
   binary-extensions@2.3.0: {}
 
   birpc@4.0.0: {}
 
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
   boolbase@1.0.0: {}
 
+  bowser@2.14.1: {}
+
   bplist-creator@0.1.0:
     dependencies:
       stream-buffers: 2.2.0
@@ -16846,6 +22972,8 @@ snapshots:
     dependencies:
       node-int64: 0.4.0
 
+  buffer-equal-constant-time@1.0.1: {}
+
   buffer-from@1.1.2: {}
 
   buffer@5.7.1:
@@ -16853,6 +22981,11 @@ snapshots:
       base64-js: 1.5.1
       ieee754: 1.2.1
 
+  buffer@6.0.3:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
   bumpp@10.3.2:
     dependencies:
       ansis: 4.2.0
@@ -16869,6 +23002,10 @@ snapshots:
     transitivePeerDependencies:
       - magicast
 
+  bun-types@1.3.14:
+    dependencies:
+      '@types/node': 24.10.4
+
   bundle-require@5.1.0(esbuild@0.25.12):
     dependencies:
       esbuild: 0.25.12
@@ -16879,6 +23016,10 @@ snapshots:
       esbuild: 0.27.7
       load-tsconfig: 0.2.5
 
+  busboy@1.6.0:
+    dependencies:
+      streamsearch: 1.1.0
+
   bytes@3.1.2: {}
 
   c12@3.3.3:
@@ -16921,8 +23062,16 @@ snapshots:
 
   camelcase@6.3.0: {}
 
+  camera-controls@3.1.2(three@0.178.0):
+    dependencies:
+      three: 0.178.0
+
   caniuse-lite@1.0.30001761: {}
 
+  capnweb@0.6.1: {}
+
+  ccount@2.0.1: {}
+
   chai@5.3.3:
     dependencies:
       assertion-error: 2.0.1
@@ -16931,8 +23080,6 @@ snapshots:
       loupe: 3.2.1
       pathval: 2.0.1
 
-  chai@6.2.2: {}
-
   chalk@2.4.2:
     dependencies:
       ansi-styles: 3.2.1
@@ -16955,8 +23102,39 @@ snapshots:
 
   char-regex@2.0.2: {}
 
+  character-entities-html4@2.1.0: {}
+
+  character-entities-legacy@3.0.0: {}
+
+  character-entities@2.0.2: {}
+
+  character-reference-invalid@2.0.1: {}
+
   check-error@2.1.1: {}
 
+  cheerio-select@2.1.0:
+    dependencies:
+      boolbase: 1.0.0
+      css-select: 5.2.2
+      css-what: 6.2.2
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+      domutils: 3.2.2
+
+  cheerio@1.2.0:
+    dependencies:
+      cheerio-select: 2.1.0
+      dom-serializer: 2.0.0
+      domhandler: 5.0.3
+      domutils: 3.2.2
+      encoding-sniffer: 0.2.1
+      htmlparser2: 10.1.0
+      parse5: 7.3.0
+      parse5-htmlparser2-tree-adapter: 7.1.0
+      parse5-parser-stream: 7.1.2
+      undici: 7.28.0
+      whatwg-mimetype: 4.0.0
+
   chokidar@3.6.0:
     dependencies:
       anymatch: 3.1.3
@@ -17013,12 +23191,27 @@ snapshots:
     dependencies:
       clsx: 2.1.1
 
+  cli-boxes@3.0.0: {}
+
   cli-cursor@2.1.0:
     dependencies:
       restore-cursor: 2.0.0
 
+  cli-cursor@3.1.0:
+    dependencies:
+      restore-cursor: 3.1.0
+
+  cli-cursor@4.0.0:
+    dependencies:
+      restore-cursor: 4.0.0
+
   cli-spinners@2.9.2: {}
 
+  cli-truncate@5.2.0:
+    dependencies:
+      slice-ansi: 8.0.0
+      string-width: 8.2.2
+
   client-only@0.0.1: {}
 
   cliui@8.0.1:
@@ -17033,14 +23226,14 @@ snapshots:
 
   cluster-key-slot@1.1.2: {}
 
-  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     transitivePeerDependencies:
       - '@types/react'
       - '@types/react-dom'
@@ -17049,6 +23242,12 @@ snapshots:
 
   code-block-writer@13.0.3: {}
 
+  code-excerpt@4.0.0:
+    dependencies:
+      convert-to-spaces: 2.0.1
+
+  collapse-white-space@2.1.0: {}
+
   collect-v8-coverage@1.0.3: {}
 
   color-convert@1.9.3:
@@ -17079,6 +23278,10 @@ snapshots:
     dependencies:
       delayed-stream: 1.0.0
 
+  comma-separated-tokens@2.0.3: {}
+
+  commander@11.1.0: {}
+
   commander@12.1.0: {}
 
   commander@14.0.2: {}
@@ -17091,6 +23294,8 @@ snapshots:
 
   commander@7.2.0: {}
 
+  commander@8.3.0: {}
+
   compressible@2.0.18:
     dependencies:
       mime-db: 1.54.0
@@ -17107,6 +23312,8 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  compute-scroll-into-view@3.1.1: {}
+
   concat-map@0.0.1: {}
 
   confbox@0.1.8: {}
@@ -17124,23 +23331,44 @@ snapshots:
 
   consola@3.4.2: {}
 
+  content-type@2.0.0: {}
+
   convert-source-map@2.0.0: {}
 
+  convert-to-spaces@2.0.1: {}
+
   cookie-es@2.0.1: {}
 
   cookie-es@3.1.1: {}
 
+  cookie@0.7.2: {}
+
   core-js-compat@3.47.0:
     dependencies:
       browserslist: 4.28.1
 
-  create-jest@29.7.0(@types/node@24.10.4):
+  core-util-is@1.0.3: {}
+
+  cors@2.8.6:
+    dependencies:
+      object-assign: 4.1.1
+      vary: 1.1.2
+
+  cose-base@1.0.3:
+    dependencies:
+      layout-base: 1.0.2
+
+  cose-base@2.2.0:
+    dependencies:
+      layout-base: 2.0.1
+
+  create-jest@29.7.0(@types/node@20.19.43):
     dependencies:
       '@jest/types': 29.6.3
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.11
-      jest-config: 29.7.0(@types/node@24.10.4)
+      jest-config: 29.7.0(@types/node@20.19.43)
       jest-util: 29.7.0
       prompts: 2.4.2
     transitivePeerDependencies:
@@ -17148,14 +23376,15 @@ snapshots:
       - babel-plugin-macros
       - supports-color
       - ts-node
+    optional: true
 
-  create-jest@29.7.0(@types/node@25.3.3):
+  create-jest@29.7.0(@types/node@24.10.4):
     dependencies:
       '@jest/types': 29.6.3
       chalk: 4.1.2
       exit: 0.1.2
       graceful-fs: 4.2.11
-      jest-config: 29.7.0(@types/node@25.3.3)
+      jest-config: 29.7.0(@types/node@24.10.4)
       jest-util: 29.7.0
       prompts: 2.4.2
     transitivePeerDependencies:
@@ -17163,12 +23392,17 @@ snapshots:
       - babel-plugin-macros
       - supports-color
       - ts-node
-    optional: true
 
   cross-env@7.0.3:
     dependencies:
       cross-spawn: 7.0.6
 
+  cross-fetch@4.1.0:
+    dependencies:
+      node-fetch: 2.7.0
+    transitivePeerDependencies:
+      - encoding
+
   cross-spawn@7.0.6:
     dependencies:
       path-key: 3.1.1
@@ -17192,6 +23426,8 @@ snapshots:
 
   css-what@6.2.2: {}
 
+  cssesc@3.0.0: {}
+
   cssom@0.3.8: {}
 
   cssom@0.5.0: {}
@@ -17207,22 +23443,107 @@ snapshots:
 
   csstype@3.2.3: {}
 
+  cytoscape-cose-bilkent@4.1.0(cytoscape@3.34.0):
+    dependencies:
+      cose-base: 1.0.3
+      cytoscape: 3.34.0
+
+  cytoscape-fcose@2.2.0(cytoscape@3.34.0):
+    dependencies:
+      cose-base: 2.2.0
+      cytoscape: 3.34.0
+
+  cytoscape@3.34.0: {}
+
+  d3-array@2.12.1:
+    dependencies:
+      internmap: 1.0.1
+
   d3-array@3.2.4:
     dependencies:
       internmap: 2.0.3
 
+  d3-axis@3.0.0: {}
+
+  d3-brush@3.0.0:
+    dependencies:
+      d3-dispatch: 3.0.1
+      d3-drag: 3.0.0
+      d3-interpolate: 3.0.1
+      d3-selection: 3.0.0
+      d3-transition: 3.0.1(d3-selection@3.0.0)
+
+  d3-chord@3.0.1:
+    dependencies:
+      d3-path: 3.1.0
+
   d3-color@3.1.0: {}
 
+  d3-contour@4.0.2:
+    dependencies:
+      d3-array: 3.2.4
+
+  d3-delaunay@6.0.4:
+    dependencies:
+      delaunator: 5.1.0
+
+  d3-dispatch@3.0.1: {}
+
+  d3-drag@3.0.0:
+    dependencies:
+      d3-dispatch: 3.0.1
+      d3-selection: 3.0.0
+
+  d3-dsv@3.0.1:
+    dependencies:
+      commander: 7.2.0
+      iconv-lite: 0.6.3
+      rw: 1.3.3
+
   d3-ease@3.0.1: {}
 
+  d3-fetch@3.0.1:
+    dependencies:
+      d3-dsv: 3.0.1
+
+  d3-force@3.0.0:
+    dependencies:
+      d3-dispatch: 3.0.1
+      d3-quadtree: 3.0.1
+      d3-timer: 3.0.1
+
   d3-format@3.1.2: {}
 
+  d3-geo@3.1.1:
+    dependencies:
+      d3-array: 3.2.4
+
+  d3-hierarchy@3.1.2: {}
+
   d3-interpolate@3.0.1:
     dependencies:
       d3-color: 3.1.0
 
+  d3-path@1.0.9: {}
+
   d3-path@3.1.0: {}
 
+  d3-polygon@3.0.1: {}
+
+  d3-quadtree@3.0.1: {}
+
+  d3-random@3.0.1: {}
+
+  d3-sankey@0.12.3:
+    dependencies:
+      d3-array: 2.12.1
+      d3-shape: 1.3.7
+
+  d3-scale-chromatic@3.1.0:
+    dependencies:
+      d3-color: 3.1.0
+      d3-interpolate: 3.0.1
+
   d3-scale@4.0.2:
     dependencies:
       d3-array: 3.2.4
@@ -17231,6 +23552,12 @@ snapshots:
       d3-time: 3.1.0
       d3-time-format: 4.1.0
 
+  d3-selection@3.0.0: {}
+
+  d3-shape@1.3.7:
+    dependencies:
+      d3-path: 1.0.9
+
   d3-shape@3.2.0:
     dependencies:
       d3-path: 3.1.0
@@ -17245,6 +23572,61 @@ snapshots:
 
   d3-timer@3.0.1: {}
 
+  d3-transition@3.0.1(d3-selection@3.0.0):
+    dependencies:
+      d3-color: 3.1.0
+      d3-dispatch: 3.0.1
+      d3-ease: 3.0.1
+      d3-interpolate: 3.0.1
+      d3-selection: 3.0.0
+      d3-timer: 3.0.1
+
+  d3-zoom@3.0.0:
+    dependencies:
+      d3-dispatch: 3.0.1
+      d3-drag: 3.0.0
+      d3-interpolate: 3.0.1
+      d3-selection: 3.0.0
+      d3-transition: 3.0.1(d3-selection@3.0.0)
+
+  d3@7.9.0:
+    dependencies:
+      d3-array: 3.2.4
+      d3-axis: 3.0.0
+      d3-brush: 3.0.0
+      d3-chord: 3.0.1
+      d3-color: 3.1.0
+      d3-contour: 4.0.2
+      d3-delaunay: 6.0.4
+      d3-dispatch: 3.0.1
+      d3-drag: 3.0.0
+      d3-dsv: 3.0.1
+      d3-ease: 3.0.1
+      d3-fetch: 3.0.1
+      d3-force: 3.0.0
+      d3-format: 3.1.2
+      d3-geo: 3.1.1
+      d3-hierarchy: 3.1.2
+      d3-interpolate: 3.0.1
+      d3-path: 3.1.0
+      d3-polygon: 3.0.1
+      d3-quadtree: 3.0.1
+      d3-random: 3.0.1
+      d3-scale: 4.0.2
+      d3-scale-chromatic: 3.1.0
+      d3-selection: 3.0.0
+      d3-shape: 3.2.0
+      d3-time: 3.1.0
+      d3-time-format: 4.1.0
+      d3-timer: 3.0.1
+      d3-transition: 3.0.1(d3-selection@3.0.0)
+      d3-zoom: 3.0.0
+
+  dagre-d3-es@7.0.14:
+    dependencies:
+      d3: 7.9.0
+      lodash-es: 4.18.1
+
   data-urls@3.0.2:
     dependencies:
       abab: 2.0.6
@@ -17276,6 +23658,10 @@ snapshots:
 
   date-fns@4.4.0: {}
 
+  dayjs@1.11.21: {}
+
+  debounce@2.0.0: {}
+
   debug@2.6.9:
     dependencies:
       ms: 2.0.0
@@ -17284,6 +23670,10 @@ snapshots:
     dependencies:
       ms: 2.1.3
 
+  debug@4.3.7:
+    dependencies:
+      ms: 2.1.3
+
   debug@4.4.3:
     dependencies:
       ms: 2.1.3
@@ -17292,6 +23682,10 @@ snapshots:
 
   decimal.js@10.6.0: {}
 
+  decode-named-character-reference@1.3.0:
+    dependencies:
+      character-entities: 2.0.2
+
   decode-uri-component@0.2.2: {}
 
   dedent@1.7.1: {}
@@ -17324,6 +23718,10 @@ snapshots:
 
   defu@6.1.7: {}
 
+  delaunator@5.1.0:
+    dependencies:
+      robust-predicates: 3.0.3
+
   delayed-stream@1.0.0: {}
 
   denque@2.1.0: {}
@@ -17336,12 +23734,22 @@ snapshots:
 
   destroy@1.2.0: {}
 
+  detect-gpu@5.0.70:
+    dependencies:
+      webgl-constants: 1.1.1
+
+  detect-libc@2.0.2: {}
+
   detect-libc@2.1.2: {}
 
   detect-newline@3.1.0: {}
 
   detect-node-es@1.1.0: {}
 
+  devlop@1.1.0:
+    dependencies:
+      dequal: 2.0.3
+
   diff-sequences@29.6.3: {}
 
   diff@8.0.4: {}
@@ -17373,6 +23781,10 @@ snapshots:
     dependencies:
       domelementtype: 2.3.0
 
+  dompurify@3.4.12:
+    optionalDependencies:
+      '@types/trusted-types': 2.0.7
+
   domutils@3.2.2:
     dependencies:
       dom-serializer: 2.0.0
@@ -17386,6 +23798,13 @@ snapshots:
       dotenv-expand: 11.0.7
       minimist: 1.2.8
 
+  dotenv-cli@7.4.4:
+    dependencies:
+      cross-spawn: 7.0.6
+      dotenv: 16.6.1
+      dotenv-expand: 10.0.0
+      minimist: 1.2.8
+
   dotenv-cli@8.0.0:
     dependencies:
       cross-spawn: 7.0.6
@@ -17405,14 +23824,42 @@ snapshots:
 
   dotenv@17.2.3: {}
 
-  drizzle-kit@0.31.8:
+  draco3d@1.5.7: {}
+
+  drizzle-kit@1.0.0-rc.3:
     dependencies:
-      '@drizzle-team/brocli': 0.10.2
-      '@esbuild-kit/esm-loader': 2.6.5
+      '@drizzle-team/brocli': 0.11.0
+      '@js-temporal/polyfill': 0.5.1
       esbuild: 0.25.12
-      esbuild-register: 3.6.0(esbuild@0.25.12)
-    transitivePeerDependencies:
-      - supports-color
+      get-tsconfig: 4.14.0
+      jiti: 2.7.0
+
+  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6):
+    optionalDependencies:
+      '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@libsql/client': 0.17.4
+      '@sinclair/typebox': 0.34.41
+      '@types/pg': 8.20.0
+      bun-types: 1.3.14
+      effect: 4.0.0-beta.84
+      mysql2: 3.16.0
+      pg: 8.22.0
+      valibot: 1.4.2(typescript@6.0.3)
+      zod: 4.3.6
+    optional: true
+
+  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3):
+    optionalDependencies:
+      '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@libsql/client': 0.17.4
+      '@sinclair/typebox': 0.34.41
+      '@types/pg': 8.20.0
+      bun-types: 1.3.14
+      effect: 4.0.0-beta.84
+      mysql2: 3.16.0
+      pg: 8.22.0
+      valibot: 1.4.2(typescript@6.0.3)
+      zod: 4.4.3
 
   dts-resolver@2.1.3: {}
 
@@ -17422,8 +23869,22 @@ snapshots:
       es-errors: 1.3.0
       gopd: 1.2.0
 
+  earcut@3.2.3: {}
+
+  eastasianwidth@0.2.0: {}
+
+  ecdsa-sig-formatter@1.0.11:
+    dependencies:
+      safe-buffer: 5.2.1
+
   ee-first@1.1.1: {}
 
+  effect-query@1.0.0(@tanstack/react-query@5.100.11(react@19.1.0))(effect@4.0.0-beta.84)(react@19.1.0):
+    dependencies:
+      '@tanstack/react-query': 5.100.11(react@19.1.0)
+      effect: 4.0.0-beta.84
+      react: 19.1.0
+
   effect@4.0.0-beta.84:
     dependencies:
       '@standard-schema/spec': 1.1.0
@@ -17453,14 +23914,42 @@ snapshots:
 
   emittery@0.13.1: {}
 
+  emoji-regex@10.6.0: {}
+
   emoji-regex@8.0.0: {}
 
+  emoji-regex@9.2.2: {}
+
   empathic@2.0.1: {}
 
   encodeurl@1.0.2: {}
 
   encodeurl@2.0.0: {}
 
+  encoding-sniffer@0.2.1:
+    dependencies:
+      iconv-lite: 0.6.3
+      whatwg-encoding: 3.1.1
+
+  engine.io-parser@5.2.3: {}
+
+  engine.io@6.6.9:
+    dependencies:
+      '@types/cors': 2.8.19
+      '@types/node': 24.10.4
+      '@types/ws': 8.18.1
+      accepts: 1.3.8
+      base64id: 2.0.0
+      cookie: 0.7.2
+      cors: 2.8.6
+      debug: 4.4.3
+      engine.io-parser: 5.2.3
+      ws: 8.21.0
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
   enhanced-resolve@5.21.6:
     dependencies:
       graceful-fs: 4.2.11
@@ -17475,8 +23964,14 @@ snapshots:
 
   entities@6.0.1: {}
 
+  entities@7.0.1: {}
+
   env-editor@0.4.2: {}
 
+  environment@1.1.0: {}
+
+  error-causes@3.0.2: {}
+
   error-ex@1.3.4:
     dependencies:
       is-arrayish: 0.2.1
@@ -17567,8 +24062,6 @@ snapshots:
 
   es-module-lexer@1.7.0: {}
 
-  es-module-lexer@2.1.0: {}
-
   es-object-atoms@1.1.1:
     dependencies:
       es-errors: 1.3.0
@@ -17590,6 +24083,22 @@ snapshots:
       is-date-object: 1.1.0
       is-symbol: 1.1.1
 
+  es-toolkit@1.49.0: {}
+
+  esast-util-from-estree@2.0.0:
+    dependencies:
+      '@types/estree-jsx': 1.0.5
+      devlop: 1.1.0
+      estree-util-visit: 2.0.0
+      unist-util-position-from-estree: 2.0.0
+
+  esast-util-from-js@2.0.1:
+    dependencies:
+      '@types/estree-jsx': 1.0.5
+      acorn: 8.16.0
+      esast-util-from-estree: 2.0.0
+      vfile-message: 4.0.3
+
   esbuild-register@3.6.0(esbuild@0.25.12):
     dependencies:
       debug: 4.4.3
@@ -17604,33 +24113,34 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  esbuild@0.25.0:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.25.0
-      '@esbuild/android-arm': 0.25.0
-      '@esbuild/android-arm64': 0.25.0
-      '@esbuild/android-x64': 0.25.0
-      '@esbuild/darwin-arm64': 0.25.0
-      '@esbuild/darwin-x64': 0.25.0
-      '@esbuild/freebsd-arm64': 0.25.0
-      '@esbuild/freebsd-x64': 0.25.0
-      '@esbuild/linux-arm': 0.25.0
-      '@esbuild/linux-arm64': 0.25.0
-      '@esbuild/linux-ia32': 0.25.0
-      '@esbuild/linux-loong64': 0.25.0
-      '@esbuild/linux-mips64el': 0.25.0
-      '@esbuild/linux-ppc64': 0.25.0
-      '@esbuild/linux-riscv64': 0.25.0
-      '@esbuild/linux-s390x': 0.25.0
-      '@esbuild/linux-x64': 0.25.0
-      '@esbuild/netbsd-arm64': 0.25.0
-      '@esbuild/netbsd-x64': 0.25.0
-      '@esbuild/openbsd-arm64': 0.25.0
-      '@esbuild/openbsd-x64': 0.25.0
-      '@esbuild/sunos-x64': 0.25.0
-      '@esbuild/win32-arm64': 0.25.0
-      '@esbuild/win32-ia32': 0.25.0
-      '@esbuild/win32-x64': 0.25.0
+  esbuild-wasm@0.25.12: {}
+
+  esbuild@0.23.0:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.23.0
+      '@esbuild/android-arm': 0.23.0
+      '@esbuild/android-arm64': 0.23.0
+      '@esbuild/android-x64': 0.23.0
+      '@esbuild/darwin-arm64': 0.23.0
+      '@esbuild/darwin-x64': 0.23.0
+      '@esbuild/freebsd-arm64': 0.23.0
+      '@esbuild/freebsd-x64': 0.23.0
+      '@esbuild/linux-arm': 0.23.0
+      '@esbuild/linux-arm64': 0.23.0
+      '@esbuild/linux-ia32': 0.23.0
+      '@esbuild/linux-loong64': 0.23.0
+      '@esbuild/linux-mips64el': 0.23.0
+      '@esbuild/linux-ppc64': 0.23.0
+      '@esbuild/linux-riscv64': 0.23.0
+      '@esbuild/linux-s390x': 0.23.0
+      '@esbuild/linux-x64': 0.23.0
+      '@esbuild/netbsd-x64': 0.23.0
+      '@esbuild/openbsd-arm64': 0.23.0
+      '@esbuild/openbsd-x64': 0.23.0
+      '@esbuild/sunos-x64': 0.23.0
+      '@esbuild/win32-arm64': 0.23.0
+      '@esbuild/win32-ia32': 0.23.0
+      '@esbuild/win32-x64': 0.23.0
 
   esbuild@0.25.12:
     optionalDependencies:
@@ -17758,6 +24268,8 @@ snapshots:
 
   escape-string-regexp@4.0.0: {}
 
+  escape-string-regexp@5.0.0: {}
+
   escodegen@2.1.0:
     dependencies:
       esprima: 4.0.1
@@ -18023,15 +24535,48 @@ snapshots:
 
   esprima@4.0.1: {}
 
-  esquery@1.6.0:
+  esquery@1.6.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  esrecurse@4.3.0:
+    dependencies:
+      estraverse: 5.3.0
+
+  estraverse@5.3.0: {}
+
+  estree-util-attach-comments@3.0.0:
+    dependencies:
+      '@types/estree': 1.0.8
+
+  estree-util-build-jsx@3.0.1:
+    dependencies:
+      '@types/estree-jsx': 1.0.5
+      devlop: 1.1.0
+      estree-util-is-identifier-name: 3.0.0
+      estree-walker: 3.0.3
+
+  estree-util-is-identifier-name@3.0.0: {}
+
+  estree-util-scope@1.0.0:
+    dependencies:
+      '@types/estree': 1.0.8
+      devlop: 1.1.0
+
+  estree-util-to-js@2.0.0:
     dependencies:
-      estraverse: 5.3.0
+      '@types/estree-jsx': 1.0.5
+      astring: 1.9.0
+      source-map: 0.7.6
 
-  esrecurse@4.3.0:
+  estree-util-value-to-estree@3.5.0:
     dependencies:
-      estraverse: 5.3.0
+      '@types/estree': 1.0.8
 
-  estraverse@5.3.0: {}
+  estree-util-visit@2.0.0:
+    dependencies:
+      '@types/estree-jsx': 1.0.5
+      '@types/unist': 3.0.3
 
   estree-walker@3.0.3:
     dependencies:
@@ -18045,6 +24590,12 @@ snapshots:
 
   eventemitter3@4.0.7: {}
 
+  eventemitter3@5.0.4: {}
+
+  events@3.3.0: {}
+
+  eventsource-parser@3.1.0: {}
+
   exec-async@2.2.0: {}
 
   execa@5.1.1:
@@ -18162,7 +24713,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.6)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
@@ -18173,7 +24724,7 @@ snapshots:
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
       eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1)(typescript@5.9.3)
       glob: 13.0.0
@@ -18181,7 +24732,7 @@ snapshots:
       jest-snapshot-prettier: prettier@2.8.8
       jest-watch-typeahead: 2.2.1(jest@29.7.0(@types/node@24.10.4))
       resolve-workspace-root: 2.0.0
-      ts-jest: 29.0.5(@babel/core@7.29.6)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3)
+      ts-jest: 29.0.5(@babel/core@7.29.6)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3)
       typescript: 5.9.3
     transitivePeerDependencies:
       - '@babel/core'
@@ -18220,7 +24771,7 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  expo-router@6.0.23(915cc1bcc1b7ce0da6289325fa4c723d):
+  expo-router@6.0.23(70ed454dc246c77d537ead71b0fe3992):
     dependencies:
       '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/schema-utils': 0.1.8
@@ -18238,7 +24789,7 @@ snapshots:
       expo-server: 1.0.5
       fast-deep-equal: 3.1.3
       invariant: 2.2.4
-      nanoid: 3.3.11
+      nanoid: 3.3.15
       query-string: 7.1.3
       react: 19.1.0
       react-fast-compare: 3.2.2
@@ -18253,7 +24804,7 @@ snapshots:
       use-latest-callback: 0.2.6(react@19.1.0)
       vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
     optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@25.3.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       react-dom: 19.1.1(react@19.1.0)
       react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
@@ -18262,6 +24813,49 @@ snapshots:
       - '@types/react-dom'
       - supports-color
 
+  expo-router@6.0.23(c4aa449b816283cc936b8db4e0abcefc):
+    dependencies:
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/schema-utils': 0.1.8
+      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      client-only: 0.0.1
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo-server: 1.0.5
+      fast-deep-equal: 3.1.3
+      invariant: 2.2.4
+      nanoid: 3.3.15
+      query-string: 7.1.3
+      react: 19.1.0
+      react-fast-compare: 3.2.2
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      semver: 7.6.3
+      server-only: 0.0.1
+      sf-symbols-typescript: 2.2.0
+      shallowequal: 1.1.0
+      use-latest-callback: 0.2.6(react@19.1.0)
+      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+    optionalDependencies:
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
+      react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
+      - '@types/react'
+      - '@types/react-dom'
+      - supports-color
+    optional: true
+
   expo-server@1.0.5: {}
 
   expo-splash-screen@31.0.13(expo@54.0.33):
@@ -18316,7 +24910,7 @@ snapshots:
       react-refresh: 0.14.2
       whatwg-url-without-unicode: 8.0.0-3
     optionalDependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@babel/core'
       - bufferutil
@@ -18329,10 +24923,14 @@ snapshots:
 
   exsolve@1.0.8: {}
 
+  extend@3.0.2: {}
+
   fast-check@4.8.0:
     dependencies:
       pure-rand: 8.4.1
 
+  fast-deep-equal@2.0.1: {}
+
   fast-deep-equal@3.1.3: {}
 
   fast-diff@1.3.0: {}
@@ -18355,6 +24953,20 @@ snapshots:
 
   fast-uri@3.1.3: {}
 
+  fast-xml-builder@1.3.0:
+    dependencies:
+      path-expression-matcher: 1.6.2
+      xml-naming: 0.3.0
+
+  fast-xml-parser@5.10.0:
+    dependencies:
+      '@nodable/entities': 2.2.0
+      fast-xml-builder: 1.3.0
+      is-unsafe: 2.0.0
+      path-expression-matcher: 1.6.2
+      strnum: 2.4.1
+      xml-naming: 0.3.0
+
   fastq@1.19.1:
     dependencies:
       reusify: 1.1.0
@@ -18367,6 +24979,14 @@ snapshots:
     optionalDependencies:
       picomatch: 4.0.4
 
+  fetch-retry@6.0.0: {}
+
+  fetchdts@0.1.7: {}
+
+  fflate@0.6.10: {}
+
+  fflate@0.8.3: {}
+
   file-entry-cache@8.0.0:
     dependencies:
       flat-cache: 4.0.1
@@ -18428,6 +25048,11 @@ snapshots:
     dependencies:
       is-callable: 1.2.7
 
+  foreground-child@3.3.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      signal-exit: 4.1.0
+
   form-data@4.0.6:
     dependencies:
       asynckit: 0.4.0
@@ -18436,6 +25061,17 @@ snapshots:
       hasown: 2.0.4
       mime-types: 2.1.35
 
+  fractional-indexing-jittered@1.0.0: {}
+
+  framer-motion@12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      motion-dom: 12.42.2
+      motion-utils: 12.39.0
+      tslib: 2.8.1
+    optionalDependencies:
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   freeport-async@2.0.0: {}
 
   fresh@0.5.2: {}
@@ -18447,6 +25083,96 @@ snapshots:
   fsevents@2.3.3:
     optional: true
 
+  fumadocs-core@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@formatjs/intl-localematcher': 0.6.2
+      '@orama/orama': 3.1.18
+      '@shikijs/rehype': 3.23.0
+      '@shikijs/transformers': 3.23.0
+      github-slugger: 2.0.0
+      hast-util-to-estree: 3.1.3
+      hast-util-to-jsx-runtime: 2.3.6
+      image-size: 2.0.2
+      negotiator: 1.0.0
+      npm-to-yarn: 3.0.1
+      path-to-regexp: 8.4.2
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      remark: 15.0.1
+      remark-gfm: 4.0.1
+      remark-rehype: 11.1.2
+      scroll-into-view-if-needed: 3.1.0
+      shiki: 3.23.0
+      unist-util-visit: 5.1.0
+    optionalDependencies:
+      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@types/react': 19.1.17
+      lucide-react: 0.555.0(react@19.1.0)
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+    transitivePeerDependencies:
+      - supports-color
+
+  fumadocs-mdx@12.0.1(fumadocs-core@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+    dependencies:
+      '@mdx-js/mdx': 3.1.1
+      '@standard-schema/spec': 1.1.0
+      chokidar: 4.0.3
+      esbuild: 0.25.12
+      estree-util-value-to-estree: 3.5.0
+      fumadocs-core: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      js-yaml: 4.2.0
+      lru-cache: 11.2.4
+      mdast-util-to-markdown: 2.1.2
+      picocolors: 1.1.1
+      remark-mdx: 3.1.1
+      remark-parse: 11.0.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      unified: 11.0.5
+      unist-util-visit: 5.1.0
+      zod: 4.3.6
+    optionalDependencies:
+      react: 19.1.0
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - supports-color
+
+  fumadocs-ui@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(tailwindcss@4.3.2):
+    dependencies:
+      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      class-variance-authority: 0.7.1
+      fumadocs-core: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      lodash.merge: 4.6.2
+      next-themes: 0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      postcss-selector-parser: 7.1.4
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      react-medium-image-zoom: 5.4.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      scroll-into-view-if-needed: 3.1.0
+      tailwind-merge: 3.6.0
+    optionalDependencies:
+      '@types/react': 19.1.17
+      tailwindcss: 4.3.2
+    transitivePeerDependencies:
+      - '@mixedbread/sdk'
+      - '@oramacloud/client'
+      - '@tanstack/react-router'
+      - '@types/react-dom'
+      - algoliasearch
+      - lucide-react
+      - react-router
+      - supports-color
+      - waku
+
   function-bind@1.1.2: {}
 
   function.prototype.name@1.1.8:
@@ -18463,7 +25189,6 @@ snapshots:
   generate-function@2.3.1:
     dependencies:
       is-property: 1.0.2
-    optional: true
 
   generator-function@2.0.1: {}
 
@@ -18471,6 +25196,8 @@ snapshots:
 
   get-caller-file@2.0.5: {}
 
+  get-east-asian-width@1.6.0: {}
+
   get-intrinsic@1.3.0:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -18505,8 +25232,16 @@ snapshots:
     dependencies:
       resolve-pkg-maps: 1.0.0
 
+  get-tsconfig@4.14.0:
+    dependencies:
+      resolve-pkg-maps: 1.0.0
+
   getenv@2.0.0: {}
 
+  gifuct-js@2.1.2:
+    dependencies:
+      js-binary-schema-parser: 2.0.3
+
   giget@2.0.0:
     dependencies:
       citty: 0.1.6
@@ -18516,6 +25251,8 @@ snapshots:
       nypm: 0.6.2
       pathe: 2.0.3
 
+  github-slugger@2.0.0: {}
+
   glob-parent@5.1.2:
     dependencies:
       is-glob: 4.0.3
@@ -18524,6 +25261,14 @@ snapshots:
     dependencies:
       is-glob: 4.0.3
 
+  glob@10.3.4:
+    dependencies:
+      foreground-child: 3.3.1
+      jackspeak: 2.3.6
+      minimatch: 9.0.7
+      minipass: 7.1.2
+      path-scurry: 1.11.1
+
   glob@13.0.0:
     dependencies:
       minimatch: 10.2.3
@@ -18556,6 +25301,8 @@ snapshots:
 
   globrex@0.1.2: {}
 
+  glsl-noise@0.0.0: {}
+
   goober@2.1.19(csstype@3.2.3):
     dependencies:
       csstype: 3.2.3
@@ -18564,6 +25311,13 @@ snapshots:
 
   graceful-fs@4.2.11: {}
 
+  h3@2.0.1-rc.18:
+    dependencies:
+      rou3: 0.8.1
+      srvx: 0.11.15
+
+  hachure-fill@0.5.2: {}
+
   has-bigints@1.1.0: {}
 
   has-flag@3.0.0: {}
@@ -18592,6 +25346,124 @@ snapshots:
     dependencies:
       function-bind: 1.1.2
 
+  hast-util-from-parse5@8.0.3:
+    dependencies:
+      '@types/hast': 3.0.5
+      '@types/unist': 3.0.3
+      devlop: 1.1.0
+      hastscript: 9.0.1
+      property-information: 7.2.0
+      vfile: 6.0.3
+      vfile-location: 5.0.3
+      web-namespaces: 2.0.1
+
+  hast-util-parse-selector@4.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+
+  hast-util-raw@9.1.0:
+    dependencies:
+      '@types/hast': 3.0.5
+      '@types/unist': 3.0.3
+      '@ungap/structured-clone': 1.3.0
+      hast-util-from-parse5: 8.0.3
+      hast-util-to-parse5: 8.0.1
+      html-void-elements: 3.0.0
+      mdast-util-to-hast: 13.2.1
+      parse5: 7.3.0
+      unist-util-position: 5.0.0
+      unist-util-visit: 5.1.0
+      vfile: 6.0.3
+      web-namespaces: 2.0.1
+      zwitch: 2.0.4
+
+  hast-util-sanitize@5.0.2:
+    dependencies:
+      '@types/hast': 3.0.5
+      '@ungap/structured-clone': 1.3.0
+      unist-util-position: 5.0.0
+
+  hast-util-to-estree@3.1.3:
+    dependencies:
+      '@types/estree': 1.0.8
+      '@types/estree-jsx': 1.0.5
+      '@types/hast': 3.0.5
+      comma-separated-tokens: 2.0.3
+      devlop: 1.1.0
+      estree-util-attach-comments: 3.0.0
+      estree-util-is-identifier-name: 3.0.0
+      hast-util-whitespace: 3.0.0
+      mdast-util-mdx-expression: 2.0.1
+      mdast-util-mdx-jsx: 3.2.0
+      mdast-util-mdxjs-esm: 2.0.1
+      property-information: 7.2.0
+      space-separated-tokens: 2.0.2
+      style-to-js: 1.1.21
+      unist-util-position: 5.0.0
+      zwitch: 2.0.4
+    transitivePeerDependencies:
+      - supports-color
+
+  hast-util-to-html@9.0.5:
+    dependencies:
+      '@types/hast': 3.0.5
+      '@types/unist': 3.0.3
+      ccount: 2.0.1
+      comma-separated-tokens: 2.0.3
+      hast-util-whitespace: 3.0.0
+      html-void-elements: 3.0.0
+      mdast-util-to-hast: 13.2.1
+      property-information: 7.2.0
+      space-separated-tokens: 2.0.2
+      stringify-entities: 4.0.4
+      zwitch: 2.0.4
+
+  hast-util-to-jsx-runtime@2.3.6:
+    dependencies:
+      '@types/estree': 1.0.8
+      '@types/hast': 3.0.5
+      '@types/unist': 3.0.3
+      comma-separated-tokens: 2.0.3
+      devlop: 1.1.0
+      estree-util-is-identifier-name: 3.0.0
+      hast-util-whitespace: 3.0.0
+      mdast-util-mdx-expression: 2.0.1
+      mdast-util-mdx-jsx: 3.2.0
+      mdast-util-mdxjs-esm: 2.0.1
+      property-information: 7.2.0
+      space-separated-tokens: 2.0.2
+      style-to-js: 1.1.21
+      unist-util-position: 5.0.0
+      vfile-message: 4.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  hast-util-to-parse5@8.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      comma-separated-tokens: 2.0.3
+      devlop: 1.1.0
+      property-information: 7.2.0
+      space-separated-tokens: 2.0.2
+      web-namespaces: 2.0.1
+      zwitch: 2.0.4
+
+  hast-util-to-string@3.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+
+  hast-util-whitespace@3.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+
+  hastscript@9.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      comma-separated-tokens: 2.0.3
+      hast-util-parse-selector: 4.0.0
+      property-information: 7.2.0
+      space-separated-tokens: 2.0.2
+
   hermes-estree@0.29.1: {}
 
   hermes-estree@0.32.0: {}
@@ -18610,6 +25482,8 @@ snapshots:
     dependencies:
       hermes-estree: 0.36.0
 
+  hls.js@1.6.16: {}
+
   hookable@6.1.1: {}
 
   hosted-git-info@7.0.2:
@@ -18626,6 +25500,32 @@ snapshots:
 
   html-escaper@2.0.2: {}
 
+  html-to-text@9.0.5:
+    dependencies:
+      '@selderee/plugin-htmlparser2': 0.11.0
+      deepmerge: 4.3.1
+      dom-serializer: 2.0.0
+      htmlparser2: 8.0.2
+      selderee: 0.11.0
+
+  html-url-attributes@3.0.1: {}
+
+  html-void-elements@3.0.0: {}
+
+  htmlparser2@10.1.0:
+    dependencies:
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+      domutils: 3.2.2
+      entities: 7.0.1
+
+  htmlparser2@8.0.2:
+    dependencies:
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+      domutils: 3.2.2
+      entities: 4.5.0
+
   http-errors@2.0.1:
     dependencies:
       depd: 2.0.0
@@ -18672,7 +25572,6 @@ snapshots:
   iconv-lite@0.7.2:
     dependencies:
       safer-buffer: 2.1.2
-    optional: true
 
   ieee754@1.2.1: {}
 
@@ -18684,6 +25583,10 @@ snapshots:
     dependencies:
       queue: 6.0.2
 
+  image-size@2.0.2: {}
+
+  immediate@3.0.6: {}
+
   import-fresh@3.3.1:
     dependencies:
       parent-module: 1.0.1
@@ -18694,6 +25597,8 @@ snapshots:
       pkg-dir: 4.2.0
       resolve-cwd: 3.0.0
 
+  import-meta-resolve@4.2.0: {}
+
   import-without-cache@0.2.5: {}
 
   importx@0.5.2:
@@ -18701,7 +25606,7 @@ snapshots:
       bundle-require: 5.1.0(esbuild@0.25.12)
       debug: 4.4.3
       esbuild: 0.25.12
-      jiti: 2.6.1
+      jiti: 2.7.0
       pathe: 2.0.3
       tsx: 4.21.0
     transitivePeerDependencies:
@@ -18711,6 +25616,8 @@ snapshots:
 
   indent-string@4.0.0: {}
 
+  indent-string@5.0.0: {}
+
   inflight@1.0.6:
     dependencies:
       once: 1.4.0
@@ -18722,10 +25629,47 @@ snapshots:
 
   ini@7.0.0: {}
 
-  input-otp@1.4.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  ink@6.8.0(@types/react@19.1.17)(react-devtools-core@6.1.5)(react@19.2.7):
+    dependencies:
+      '@alcalzone/ansi-tokenize': 0.2.5
+      ansi-escapes: 7.3.0
+      ansi-styles: 6.2.3
+      auto-bind: 5.0.1
+      chalk: 5.6.2
+      cli-boxes: 3.0.0
+      cli-cursor: 4.0.0
+      cli-truncate: 5.2.0
+      code-excerpt: 4.0.0
+      es-toolkit: 1.49.0
+      indent-string: 5.0.0
+      is-in-ci: 2.0.0
+      patch-console: 2.0.0
+      react: 19.2.7
+      react-reconciler: 0.33.0(react@19.2.7)
+      scheduler: 0.27.0
+      signal-exit: 3.0.7
+      slice-ansi: 8.0.0
+      stack-utils: 2.0.6
+      string-width: 8.2.2
+      terminal-size: 4.0.1
+      type-fest: 5.8.0
+      widest-line: 6.0.0
+      wrap-ansi: 9.0.2
+      ws: 8.21.0
+      yoga-layout: 3.2.1
+    optionalDependencies:
+      '@types/react': 19.1.17
+      react-devtools-core: 6.1.5
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  inline-style-parser@0.2.7: {}
+
+  input-otp@1.4.2(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
 
   internal-slot@1.1.0:
     dependencies:
@@ -18733,6 +25677,8 @@ snapshots:
       hasown: 2.0.2
       side-channel: 1.1.0
 
+  internmap@1.0.1: {}
+
   internmap@2.0.3: {}
 
   invariant@2.2.4:
@@ -18753,6 +25699,17 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  iron-webcrypto@2.0.0:
+    dependencies:
+      uint8array-extras: 1.5.0
+
+  is-alphabetical@2.0.1: {}
+
+  is-alphanumerical@2.0.1:
+    dependencies:
+      is-alphabetical: 2.0.1
+      is-decimal: 2.0.1
+
   is-array-buffer@3.0.5:
     dependencies:
       call-bind: 1.0.8
@@ -18805,6 +25762,8 @@ snapshots:
       call-bound: 1.0.4
       has-tostringtag: 1.0.2
 
+  is-decimal@2.0.1: {}
+
   is-docker@2.2.1: {}
 
   is-extglob@2.1.1: {}
@@ -18815,6 +25774,10 @@ snapshots:
 
   is-fullwidth-code-point@3.0.0: {}
 
+  is-fullwidth-code-point@5.1.0:
+    dependencies:
+      get-east-asian-width: 1.6.0
+
   is-generator-fn@2.1.0: {}
 
   is-generator-function@1.1.2:
@@ -18829,6 +25792,12 @@ snapshots:
     dependencies:
       is-extglob: 2.1.1
 
+  is-hexadecimal@2.0.1: {}
+
+  is-in-ci@2.0.0: {}
+
+  is-interactive@1.0.0: {}
+
   is-map@2.0.3: {}
 
   is-negative-zero@2.0.3: {}
@@ -18842,10 +25811,13 @@ snapshots:
 
   is-plain-obj@2.1.0: {}
 
+  is-plain-obj@4.1.0: {}
+
   is-potential-custom-element-name@1.0.1: {}
 
-  is-property@1.0.2:
-    optional: true
+  is-promise@2.2.2: {}
+
+  is-property@1.0.2: {}
 
   is-regex@1.2.1:
     dependencies:
@@ -18877,6 +25849,10 @@ snapshots:
     dependencies:
       which-typed-array: 1.1.19
 
+  is-unicode-supported@0.1.0: {}
+
+  is-unsafe@2.0.0: {}
+
   is-weakmap@2.0.2: {}
 
   is-weakref@1.1.1:
@@ -18892,12 +25868,18 @@ snapshots:
     dependencies:
       is-docker: 2.2.1
 
+  isarray@1.0.0: {}
+
   isarray@2.0.5: {}
 
   isbot@5.2.0: {}
 
   isexe@2.0.0: {}
 
+  ismobilejs@1.1.1: {}
+
+  isomorphic.js@0.2.5: {}
+
   istanbul-lib-coverage@3.2.2: {}
 
   istanbul-lib-instrument@5.2.1:
@@ -18948,6 +25930,19 @@ snapshots:
       has-symbols: 1.1.0
       set-function-name: 2.0.2
 
+  its-fine@2.0.0(@types/react@19.1.17)(react@19.1.0):
+    dependencies:
+      '@types/react-reconciler': 0.28.9(@types/react@19.1.17)
+      react: 19.1.0
+    transitivePeerDependencies:
+      - '@types/react'
+
+  jackspeak@2.3.6:
+    dependencies:
+      '@isaacs/cliui': 8.0.2
+    optionalDependencies:
+      '@pkgjs/parseargs': 0.11.0
+
   jest-changed-files@29.7.0:
     dependencies:
       execa: 5.1.1
@@ -18980,16 +25975,16 @@ snapshots:
       - babel-plugin-macros
       - supports-color
 
-  jest-cli@29.7.0(@types/node@24.10.4):
+  jest-cli@29.7.0(@types/node@20.19.43):
     dependencies:
       '@jest/core': 29.7.0
       '@jest/test-result': 29.7.0
       '@jest/types': 29.6.3
       chalk: 4.1.2
-      create-jest: 29.7.0(@types/node@24.10.4)
+      create-jest: 29.7.0(@types/node@20.19.43)
       exit: 0.1.2
       import-local: 3.2.0
-      jest-config: 29.7.0(@types/node@24.10.4)
+      jest-config: 29.7.0(@types/node@20.19.43)
       jest-util: 29.7.0
       jest-validate: 29.7.0
       yargs: 17.7.2
@@ -18998,17 +25993,18 @@ snapshots:
       - babel-plugin-macros
       - supports-color
       - ts-node
+    optional: true
 
-  jest-cli@29.7.0(@types/node@25.3.3):
+  jest-cli@29.7.0(@types/node@24.10.4):
     dependencies:
       '@jest/core': 29.7.0
       '@jest/test-result': 29.7.0
       '@jest/types': 29.6.3
       chalk: 4.1.2
-      create-jest: 29.7.0(@types/node@25.3.3)
+      create-jest: 29.7.0(@types/node@24.10.4)
       exit: 0.1.2
       import-local: 3.2.0
-      jest-config: 29.7.0(@types/node@25.3.3)
+      jest-config: 29.7.0(@types/node@24.10.4)
       jest-util: 29.7.0
       jest-validate: 29.7.0
       yargs: 17.7.2
@@ -19017,9 +26013,8 @@ snapshots:
       - babel-plugin-macros
       - supports-color
       - ts-node
-    optional: true
 
-  jest-config@29.7.0(@types/node@24.10.4):
+  jest-config@29.7.0(@types/node@20.19.43):
     dependencies:
       '@babel/core': 7.29.6
       '@jest/test-sequencer': 29.7.0
@@ -19044,12 +26039,13 @@ snapshots:
       slash: 3.0.0
       strip-json-comments: 3.1.1
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 20.19.43
     transitivePeerDependencies:
       - babel-plugin-macros
       - supports-color
+    optional: true
 
-  jest-config@29.7.0(@types/node@25.3.3):
+  jest-config@29.7.0(@types/node@24.10.4):
     dependencies:
       '@babel/core': 7.29.6
       '@jest/test-sequencer': 29.7.0
@@ -19074,11 +26070,10 @@ snapshots:
       slash: 3.0.0
       strip-json-comments: 3.1.1
     optionalDependencies:
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
     transitivePeerDependencies:
       - babel-plugin-macros
       - supports-color
-    optional: true
 
   jest-diff@29.7.0:
     dependencies:
@@ -19368,30 +26363,30 @@ snapshots:
       merge-stream: 2.0.0
       supports-color: 8.1.1
 
-  jest@29.7.0(@types/node@24.10.4):
+  jest@29.7.0(@types/node@20.19.43):
     dependencies:
       '@jest/core': 29.7.0
       '@jest/types': 29.6.3
       import-local: 3.2.0
-      jest-cli: 29.7.0(@types/node@24.10.4)
+      jest-cli: 29.7.0(@types/node@20.19.43)
     transitivePeerDependencies:
       - '@types/node'
       - babel-plugin-macros
       - supports-color
       - ts-node
+    optional: true
 
-  jest@29.7.0(@types/node@25.3.3):
+  jest@29.7.0(@types/node@24.10.4):
     dependencies:
       '@jest/core': 29.7.0
       '@jest/types': 29.6.3
       import-local: 3.2.0
-      jest-cli: 29.7.0(@types/node@25.3.3)
+      jest-cli: 29.7.0(@types/node@24.10.4)
     transitivePeerDependencies:
       - '@types/node'
       - babel-plugin-macros
       - supports-color
       - ts-node
-    optional: true
 
   jimp-compact@0.16.1: {}
 
@@ -19403,6 +26398,10 @@ snapshots:
 
   joycon@3.1.1: {}
 
+  js-base64@3.8.1: {}
+
+  js-binary-schema-parser@2.0.3: {}
+
   js-tokens@4.0.0: {}
 
   js-tokens@9.0.1: {}
@@ -19416,6 +26415,8 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  jsbi@4.3.2: {}
+
   jsc-safe-url@0.2.4: {}
 
   jsdom@20.0.3:
@@ -19488,8 +26489,12 @@ snapshots:
 
   json-schema-traverse@1.0.0: {}
 
+  json-schema@0.4.0: {}
+
   json-stable-stringify-without-jsonify@1.0.1: {}
 
+  json-with-bigint@3.5.10: {}
+
   json5@1.0.2:
     dependencies:
       minimist: 1.2.8
@@ -19498,6 +26503,21 @@ snapshots:
 
   jsonc-parser@3.3.1: {}
 
+  jsonwebtoken@9.0.3:
+    dependencies:
+      jws: 4.0.1
+      lodash.includes: 4.3.0
+      lodash.isboolean: 3.0.3
+      lodash.isinteger: 4.0.4
+      lodash.isnumber: 3.0.3
+      lodash.isplainobject: 4.0.6
+      lodash.isstring: 4.0.1
+      lodash.once: 4.1.1
+      ms: 2.1.3
+      semver: 7.7.4
+
+  jsrsasign@11.1.3: {}
+
   jsx-ast-utils@3.3.5:
     dependencies:
       array-includes: 3.1.9
@@ -19505,10 +26525,34 @@ snapshots:
       object.assign: 4.1.7
       object.values: 1.2.1
 
+  jszip@3.10.1:
+    dependencies:
+      lie: 3.3.0
+      pako: 1.0.11
+      readable-stream: 2.3.8
+      setimmediate: 1.0.5
+
+  jwa@2.0.1:
+    dependencies:
+      buffer-equal-constant-time: 1.0.1
+      ecdsa-sig-formatter: 1.0.11
+      safe-buffer: 5.2.1
+
+  jws@4.0.1:
+    dependencies:
+      jwa: 2.0.1
+      safe-buffer: 5.2.1
+
+  katex@0.16.47:
+    dependencies:
+      commander: 8.3.0
+
   keyv@4.5.4:
     dependencies:
       json-buffer: 3.0.1
 
+  khroma@2.1.0: {}
+
   kleur@3.0.3: {}
 
   kubernetes-types@1.30.0: {}
@@ -19517,6 +26561,12 @@ snapshots:
 
   lan-network@0.1.7: {}
 
+  layout-base@1.0.2: {}
+
+  layout-base@2.0.1: {}
+
+  leac@0.6.0: {}
+
   leven@3.1.0: {}
 
   levn@0.4.1:
@@ -19524,6 +26574,35 @@ snapshots:
       prelude-ls: 1.2.1
       type-check: 0.4.0
 
+  lib0@0.2.117:
+    dependencies:
+      isomorphic.js: 0.2.5
+
+  libsodium-wrappers@0.8.4:
+    dependencies:
+      libsodium: 0.8.4
+
+  libsodium@0.8.4: {}
+
+  libsql@0.5.29:
+    dependencies:
+      '@neon-rs/load': 0.0.4
+      detect-libc: 2.0.2
+    optionalDependencies:
+      '@libsql/darwin-arm64': 0.5.29
+      '@libsql/darwin-x64': 0.5.29
+      '@libsql/linux-arm-gnueabihf': 0.5.29
+      '@libsql/linux-arm-musleabihf': 0.5.29
+      '@libsql/linux-arm64-gnu': 0.5.29
+      '@libsql/linux-arm64-musl': 0.5.29
+      '@libsql/linux-x64-gnu': 0.5.29
+      '@libsql/linux-x64-musl': 0.5.29
+      '@libsql/win32-x64-msvc': 0.5.29
+
+  lie@3.3.0:
+    dependencies:
+      immediate: 3.0.6
+
   lighthouse-logger@1.4.2:
     dependencies:
       debug: 2.6.9
@@ -19531,88 +26610,39 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  lightningcss-android-arm64@1.30.2:
-    optional: true
-
   lightningcss-android-arm64@1.32.0:
     optional: true
 
-  lightningcss-darwin-arm64@1.30.2:
-    optional: true
-
   lightningcss-darwin-arm64@1.32.0:
     optional: true
 
-  lightningcss-darwin-x64@1.30.2:
-    optional: true
-
   lightningcss-darwin-x64@1.32.0:
     optional: true
 
-  lightningcss-freebsd-x64@1.30.2:
-    optional: true
-
   lightningcss-freebsd-x64@1.32.0:
     optional: true
 
-  lightningcss-linux-arm-gnueabihf@1.30.2:
-    optional: true
-
   lightningcss-linux-arm-gnueabihf@1.32.0:
     optional: true
 
-  lightningcss-linux-arm64-gnu@1.30.2:
-    optional: true
-
   lightningcss-linux-arm64-gnu@1.32.0:
     optional: true
 
-  lightningcss-linux-arm64-musl@1.30.2:
-    optional: true
-
   lightningcss-linux-arm64-musl@1.32.0:
     optional: true
 
-  lightningcss-linux-x64-gnu@1.30.2:
-    optional: true
-
   lightningcss-linux-x64-gnu@1.32.0:
     optional: true
 
-  lightningcss-linux-x64-musl@1.30.2:
-    optional: true
-
   lightningcss-linux-x64-musl@1.32.0:
     optional: true
 
-  lightningcss-win32-arm64-msvc@1.30.2:
-    optional: true
-
   lightningcss-win32-arm64-msvc@1.32.0:
     optional: true
 
-  lightningcss-win32-x64-msvc@1.30.2:
-    optional: true
-
   lightningcss-win32-x64-msvc@1.32.0:
     optional: true
 
-  lightningcss@1.30.2:
-    dependencies:
-      detect-libc: 2.1.2
-    optionalDependencies:
-      lightningcss-android-arm64: 1.30.2
-      lightningcss-darwin-arm64: 1.30.2
-      lightningcss-darwin-x64: 1.30.2
-      lightningcss-freebsd-x64: 1.30.2
-      lightningcss-linux-arm-gnueabihf: 1.30.2
-      lightningcss-linux-arm64-gnu: 1.30.2
-      lightningcss-linux-arm64-musl: 1.30.2
-      lightningcss-linux-x64-gnu: 1.30.2
-      lightningcss-linux-x64-musl: 1.30.2
-      lightningcss-win32-arm64-msvc: 1.30.2
-      lightningcss-win32-x64-msvc: 1.30.2
-
   lightningcss@1.32.0:
     dependencies:
       detect-libc: 2.1.2
@@ -19643,16 +26673,32 @@ snapshots:
     dependencies:
       p-locate: 5.0.0
 
+  lodash-es@4.18.1: {}
+
   lodash.debounce@4.0.8: {}
 
   lodash.defaults@4.2.0: {}
 
+  lodash.includes@4.3.0: {}
+
   lodash.isarguments@3.1.0: {}
 
+  lodash.isboolean@3.0.3: {}
+
+  lodash.isinteger@4.0.4: {}
+
+  lodash.isnumber@3.0.3: {}
+
+  lodash.isplainobject@4.0.6: {}
+
+  lodash.isstring@4.0.1: {}
+
   lodash.memoize@4.1.2: {}
 
   lodash.merge@4.6.2: {}
 
+  lodash.once@4.1.1: {}
+
   lodash.throttle@4.1.1: {}
 
   lodash@4.18.0: {}
@@ -19661,8 +26707,14 @@ snapshots:
     dependencies:
       chalk: 2.4.2
 
-  long@5.3.2:
-    optional: true
+  log-symbols@4.1.0:
+    dependencies:
+      chalk: 4.1.2
+      is-unicode-supported: 0.1.0
+
+  long@5.3.2: {}
+
+  longest-streak@3.1.0: {}
 
   loose-envify@1.4.0:
     dependencies:
@@ -19678,8 +26730,7 @@ snapshots:
     dependencies:
       yallist: 3.1.1
 
-  lru.min@1.1.4:
-    optional: true
+  lru.min@1.1.4: {}
 
   lucide-react@0.513.0(react@19.1.0):
     dependencies:
@@ -19689,8 +26740,20 @@ snapshots:
     dependencies:
       react: 19.1.0
 
+  lucide-static@0.555.0: {}
+
   lz-string@1.5.0: {}
 
+  maath@0.10.8(@types/three@0.185.1)(three@0.178.0):
+    dependencies:
+      '@types/three': 0.185.1
+      three: 0.178.0
+
+  maath@0.6.0(@types/three@0.185.1)(three@0.178.0):
+    dependencies:
+      '@types/three': 0.185.1
+      three: 0.178.0
+
   magic-string@0.30.21:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -19710,10 +26773,188 @@ snapshots:
     dependencies:
       tmpl: 1.0.5
 
+  markdown-extensions@2.0.0: {}
+
+  markdown-table@3.0.4: {}
+
+  marked@16.4.2: {}
+
+  marked@17.0.6: {}
+
+  marked@7.0.4: {}
+
   marky@1.3.0: {}
 
   math-intrinsics@1.1.0: {}
 
+  md-to-react-email@5.0.5(react@19.1.0):
+    dependencies:
+      marked: 7.0.4
+      react: 19.1.0
+
+  mdast-util-find-and-replace@3.0.2:
+    dependencies:
+      '@types/mdast': 4.0.4
+      escape-string-regexp: 5.0.0
+      unist-util-is: 6.0.1
+      unist-util-visit-parents: 6.0.2
+
+  mdast-util-from-markdown@2.0.3:
+    dependencies:
+      '@types/mdast': 4.0.4
+      '@types/unist': 3.0.3
+      decode-named-character-reference: 1.3.0
+      devlop: 1.1.0
+      mdast-util-to-string: 4.0.0
+      micromark: 4.0.2
+      micromark-util-decode-numeric-character-reference: 2.0.2
+      micromark-util-decode-string: 2.0.1
+      micromark-util-normalize-identifier: 2.0.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+      unist-util-stringify-position: 4.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-gfm-autolink-literal@2.0.1:
+    dependencies:
+      '@types/mdast': 4.0.4
+      ccount: 2.0.1
+      devlop: 1.1.0
+      mdast-util-find-and-replace: 3.0.2
+      micromark-util-character: 2.1.1
+
+  mdast-util-gfm-footnote@2.1.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+      devlop: 1.1.0
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-to-markdown: 2.1.2
+      micromark-util-normalize-identifier: 2.0.1
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-gfm-strikethrough@2.0.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-to-markdown: 2.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-gfm-table@2.0.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+      devlop: 1.1.0
+      markdown-table: 3.0.4
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-to-markdown: 2.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-gfm-task-list-item@2.0.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+      devlop: 1.1.0
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-to-markdown: 2.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-gfm@3.1.0:
+    dependencies:
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-gfm-autolink-literal: 2.0.1
+      mdast-util-gfm-footnote: 2.1.0
+      mdast-util-gfm-strikethrough: 2.0.0
+      mdast-util-gfm-table: 2.0.0
+      mdast-util-gfm-task-list-item: 2.0.0
+      mdast-util-to-markdown: 2.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-mdx-expression@2.0.1:
+    dependencies:
+      '@types/estree-jsx': 1.0.5
+      '@types/hast': 3.0.5
+      '@types/mdast': 4.0.4
+      devlop: 1.1.0
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-to-markdown: 2.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-mdx-jsx@3.2.0:
+    dependencies:
+      '@types/estree-jsx': 1.0.5
+      '@types/hast': 3.0.5
+      '@types/mdast': 4.0.4
+      '@types/unist': 3.0.3
+      ccount: 2.0.1
+      devlop: 1.1.0
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-to-markdown: 2.1.2
+      parse-entities: 4.0.2
+      stringify-entities: 4.0.4
+      unist-util-stringify-position: 4.0.0
+      vfile-message: 4.0.3
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-mdx@3.0.0:
+    dependencies:
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-mdx-expression: 2.0.1
+      mdast-util-mdx-jsx: 3.2.0
+      mdast-util-mdxjs-esm: 2.0.1
+      mdast-util-to-markdown: 2.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-mdxjs-esm@2.0.1:
+    dependencies:
+      '@types/estree-jsx': 1.0.5
+      '@types/hast': 3.0.5
+      '@types/mdast': 4.0.4
+      devlop: 1.1.0
+      mdast-util-from-markdown: 2.0.3
+      mdast-util-to-markdown: 2.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  mdast-util-phrasing@4.1.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+      unist-util-is: 6.0.1
+
+  mdast-util-to-hast@13.2.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      '@types/mdast': 4.0.4
+      '@ungap/structured-clone': 1.3.0
+      devlop: 1.1.0
+      micromark-util-sanitize-uri: 2.0.1
+      trim-lines: 3.0.1
+      unist-util-position: 5.0.0
+      unist-util-visit: 5.1.0
+      vfile: 6.0.3
+
+  mdast-util-to-markdown@2.1.2:
+    dependencies:
+      '@types/mdast': 4.0.4
+      '@types/unist': 3.0.3
+      longest-streak: 3.1.0
+      mdast-util-phrasing: 4.1.0
+      mdast-util-to-string: 4.0.0
+      micromark-util-classify-character: 2.0.1
+      micromark-util-decode-string: 2.0.1
+      unist-util-visit: 5.1.0
+      zwitch: 2.0.4
+
+  mdast-util-to-string@4.0.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+
   mdn-data@2.0.14: {}
 
   memoize-one@5.2.1: {}
@@ -19726,6 +26967,36 @@ snapshots:
 
   merge2@1.4.1: {}
 
+  mermaid@11.16.0:
+    dependencies:
+      '@braintree/sanitize-url': 7.1.2
+      '@iconify/utils': 3.1.4
+      '@mermaid-js/parser': 1.2.0
+      '@types/d3': 7.4.3
+      '@upsetjs/venn.js': 2.0.0
+      cytoscape: 3.34.0
+      cytoscape-cose-bilkent: 4.1.0(cytoscape@3.34.0)
+      cytoscape-fcose: 2.2.0(cytoscape@3.34.0)
+      d3: 7.9.0
+      d3-sankey: 0.12.3
+      dagre-d3-es: 7.0.14
+      dayjs: 1.11.21
+      dompurify: 3.4.12
+      es-toolkit: 1.49.0
+      katex: 0.16.47
+      khroma: 2.1.0
+      marked: 16.4.2
+      roughjs: 4.6.6
+      stylis: 4.4.0
+      ts-dedent: 2.3.0
+      uuid: 14.0.1
+
+  meshline@3.3.1(three@0.178.0):
+    dependencies:
+      three: 0.178.0
+
+  meshoptimizer@1.1.1: {}
+
   metro-babel-transformer@0.83.3:
     dependencies:
       '@babel/core': 7.29.6
@@ -19794,7 +27065,7 @@ snapshots:
 
   metro-runtime@0.83.3:
     dependencies:
-      '@babel/runtime': 7.28.4
+      '@babel/runtime': 7.29.7
       flow-enums-runtime: 0.0.6
 
   metro-source-map@0.83.3:
@@ -19901,6 +27172,270 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  micromark-core-commonmark@2.0.3:
+    dependencies:
+      decode-named-character-reference: 1.3.0
+      devlop: 1.1.0
+      micromark-factory-destination: 2.0.1
+      micromark-factory-label: 2.0.1
+      micromark-factory-space: 2.0.1
+      micromark-factory-title: 2.0.1
+      micromark-factory-whitespace: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-chunked: 2.0.1
+      micromark-util-classify-character: 2.0.1
+      micromark-util-html-tag-name: 2.0.1
+      micromark-util-normalize-identifier: 2.0.1
+      micromark-util-resolve-all: 2.0.1
+      micromark-util-subtokenize: 2.1.0
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-gfm-autolink-literal@2.1.0:
+    dependencies:
+      micromark-util-character: 2.1.1
+      micromark-util-sanitize-uri: 2.0.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-gfm-footnote@2.1.0:
+    dependencies:
+      devlop: 1.1.0
+      micromark-core-commonmark: 2.0.3
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-normalize-identifier: 2.0.1
+      micromark-util-sanitize-uri: 2.0.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-gfm-strikethrough@2.1.0:
+    dependencies:
+      devlop: 1.1.0
+      micromark-util-chunked: 2.0.1
+      micromark-util-classify-character: 2.0.1
+      micromark-util-resolve-all: 2.0.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-gfm-table@2.1.1:
+    dependencies:
+      devlop: 1.1.0
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-gfm-tagfilter@2.0.0:
+    dependencies:
+      micromark-util-types: 2.0.2
+
+  micromark-extension-gfm-task-list-item@2.1.0:
+    dependencies:
+      devlop: 1.1.0
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-gfm@3.0.0:
+    dependencies:
+      micromark-extension-gfm-autolink-literal: 2.1.0
+      micromark-extension-gfm-footnote: 2.1.0
+      micromark-extension-gfm-strikethrough: 2.1.0
+      micromark-extension-gfm-table: 2.1.1
+      micromark-extension-gfm-tagfilter: 2.0.0
+      micromark-extension-gfm-task-list-item: 2.1.0
+      micromark-util-combine-extensions: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-mdx-expression@3.0.1:
+    dependencies:
+      '@types/estree': 1.0.8
+      devlop: 1.1.0
+      micromark-factory-mdx-expression: 2.0.3
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-events-to-acorn: 2.0.3
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-extension-mdx-jsx@3.0.2:
+    dependencies:
+      '@types/estree': 1.0.8
+      devlop: 1.1.0
+      estree-util-is-identifier-name: 3.0.0
+      micromark-factory-mdx-expression: 2.0.3
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-events-to-acorn: 2.0.3
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+      vfile-message: 4.0.3
+
+  micromark-extension-mdx-md@2.0.0:
+    dependencies:
+      micromark-util-types: 2.0.2
+
+  micromark-extension-mdxjs-esm@3.0.0:
+    dependencies:
+      '@types/estree': 1.0.8
+      devlop: 1.1.0
+      micromark-core-commonmark: 2.0.3
+      micromark-util-character: 2.1.1
+      micromark-util-events-to-acorn: 2.0.3
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+      unist-util-position-from-estree: 2.0.0
+      vfile-message: 4.0.3
+
+  micromark-extension-mdxjs@3.0.0:
+    dependencies:
+      acorn: 8.16.0
+      acorn-jsx: 5.3.2(acorn@8.16.0)
+      micromark-extension-mdx-expression: 3.0.1
+      micromark-extension-mdx-jsx: 3.0.2
+      micromark-extension-mdx-md: 2.0.0
+      micromark-extension-mdxjs-esm: 3.0.0
+      micromark-util-combine-extensions: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-factory-destination@2.0.1:
+    dependencies:
+      micromark-util-character: 2.1.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-factory-label@2.0.1:
+    dependencies:
+      devlop: 1.1.0
+      micromark-util-character: 2.1.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-factory-mdx-expression@2.0.3:
+    dependencies:
+      '@types/estree': 1.0.8
+      devlop: 1.1.0
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-events-to-acorn: 2.0.3
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+      unist-util-position-from-estree: 2.0.0
+      vfile-message: 4.0.3
+
+  micromark-factory-space@2.0.1:
+    dependencies:
+      micromark-util-character: 2.1.1
+      micromark-util-types: 2.0.2
+
+  micromark-factory-title@2.0.1:
+    dependencies:
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-factory-whitespace@2.0.1:
+    dependencies:
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-util-character@2.1.1:
+    dependencies:
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-util-chunked@2.0.1:
+    dependencies:
+      micromark-util-symbol: 2.0.1
+
+  micromark-util-classify-character@2.0.1:
+    dependencies:
+      micromark-util-character: 2.1.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-util-combine-extensions@2.0.1:
+    dependencies:
+      micromark-util-chunked: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-util-decode-numeric-character-reference@2.0.2:
+    dependencies:
+      micromark-util-symbol: 2.0.1
+
+  micromark-util-decode-string@2.0.1:
+    dependencies:
+      decode-named-character-reference: 1.3.0
+      micromark-util-character: 2.1.1
+      micromark-util-decode-numeric-character-reference: 2.0.2
+      micromark-util-symbol: 2.0.1
+
+  micromark-util-encode@2.0.1: {}
+
+  micromark-util-events-to-acorn@2.0.3:
+    dependencies:
+      '@types/estree': 1.0.8
+      '@types/unist': 3.0.3
+      devlop: 1.1.0
+      estree-util-visit: 2.0.0
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+      vfile-message: 4.0.3
+
+  micromark-util-html-tag-name@2.0.1: {}
+
+  micromark-util-normalize-identifier@2.0.1:
+    dependencies:
+      micromark-util-symbol: 2.0.1
+
+  micromark-util-resolve-all@2.0.1:
+    dependencies:
+      micromark-util-types: 2.0.2
+
+  micromark-util-sanitize-uri@2.0.1:
+    dependencies:
+      micromark-util-character: 2.1.1
+      micromark-util-encode: 2.0.1
+      micromark-util-symbol: 2.0.1
+
+  micromark-util-subtokenize@2.1.0:
+    dependencies:
+      devlop: 1.1.0
+      micromark-util-chunked: 2.0.1
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+
+  micromark-util-symbol@2.0.1: {}
+
+  micromark-util-types@2.0.2: {}
+
+  micromark@4.0.2:
+    dependencies:
+      '@types/debug': 4.1.12
+      debug: 4.4.3
+      decode-named-character-reference: 1.3.0
+      devlop: 1.1.0
+      micromark-core-commonmark: 2.0.3
+      micromark-factory-space: 2.0.1
+      micromark-util-character: 2.1.1
+      micromark-util-chunked: 2.0.1
+      micromark-util-combine-extensions: 2.0.1
+      micromark-util-decode-numeric-character-reference: 2.0.2
+      micromark-util-encode: 2.0.1
+      micromark-util-normalize-identifier: 2.0.1
+      micromark-util-resolve-all: 2.0.1
+      micromark-util-sanitize-uri: 2.0.1
+      micromark-util-subtokenize: 2.1.0
+      micromark-util-symbol: 2.0.1
+      micromark-util-types: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
   micromatch@4.0.8:
     dependencies:
       braces: 3.0.3
@@ -19953,23 +27488,27 @@ snapshots:
       pkg-types: 1.3.1
       ufo: 1.6.4
 
-  mrmime@2.0.1: {}
+  monaco-editor@0.52.2: {}
 
-  ms@2.0.0: {}
+  motion-dom@12.42.2:
+    dependencies:
+      motion-utils: 12.39.0
 
-  ms@2.1.3: {}
+  motion-utils@12.39.0: {}
 
-  msgpackr-extract@3.0.3:
+  motion@12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
-      node-gyp-build-optional-packages: 5.2.2
+      framer-motion: 12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      tslib: 2.8.1
     optionalDependencies:
-      '@msgpackr-extract/msgpackr-extract-darwin-arm64': 3.0.3
-      '@msgpackr-extract/msgpackr-extract-darwin-x64': 3.0.3
-      '@msgpackr-extract/msgpackr-extract-linux-arm': 3.0.3
-      '@msgpackr-extract/msgpackr-extract-linux-arm64': 3.0.3
-      '@msgpackr-extract/msgpackr-extract-linux-x64': 3.0.3
-      '@msgpackr-extract/msgpackr-extract-win32-x64': 3.0.3
-    optional: true
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
+  mrmime@2.0.1: {}
+
+  ms@2.0.0: {}
+
+  ms@2.1.3: {}
 
   msgpackr-extract@3.0.4:
     dependencies:
@@ -19983,10 +27522,6 @@ snapshots:
       '@msgpackr-extract/msgpackr-extract-win32-x64': 3.0.4
     optional: true
 
-  msgpackr@1.11.8:
-    optionalDependencies:
-      msgpackr-extract: 3.0.3
-
   msgpackr@2.0.4:
     optionalDependencies:
       msgpackr-extract: 3.0.4
@@ -20004,7 +27539,6 @@ snapshots:
       named-placeholders: 1.1.6
       seq-queue: 0.0.5
       sqlstring: 2.3.3
-    optional: true
 
   mz@2.7.0:
     dependencies:
@@ -20012,12 +27546,14 @@ snapshots:
       object-assign: 4.1.1
       thenify-all: 1.6.0
 
+  n8ao@1.10.3(postprocessing@6.39.2(three@0.178.0))(three@0.178.0):
+    dependencies:
+      postprocessing: 6.39.2(three@0.178.0)
+      three: 0.178.0
+
   named-placeholders@1.1.6:
     dependencies:
       lru.min: 1.1.4
-    optional: true
-
-  nanoid@3.3.11: {}
 
   nanoid@3.3.15: {}
 
@@ -20033,6 +27569,8 @@ snapshots:
 
   negotiator@0.6.4: {}
 
+  negotiator@1.0.0: {}
+
   nested-error-stacks@2.0.1: {}
 
   next-themes@0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
@@ -20040,6 +27578,37 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
+  next-themes@0.4.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+
+  next@15.1.2(@babel/core@7.29.6)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@next/env': 15.1.2
+      '@swc/counter': 0.1.3
+      '@swc/helpers': 0.5.15
+      busboy: 1.6.0
+      caniuse-lite: 1.0.30001761
+      postcss: 8.5.10
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      styled-jsx: 5.1.6(@babel/core@7.29.6)(react@19.1.0)
+    optionalDependencies:
+      '@next/swc-darwin-arm64': 15.1.2
+      '@next/swc-darwin-x64': 15.1.2
+      '@next/swc-linux-arm64-gnu': 15.1.2
+      '@next/swc-linux-arm64-musl': 15.1.2
+      '@next/swc-linux-x64-gnu': 15.1.2
+      '@next/swc-linux-x64-musl': 15.1.2
+      '@next/swc-win32-arm64-msvc': 15.1.2
+      '@next/swc-win32-x64-msvc': 15.1.2
+      babel-plugin-react-compiler: 1.0.0
+      sharp: 0.33.5
+    transitivePeerDependencies:
+      - '@babel/core'
+      - babel-plugin-macros
+
   nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       chalk: 5.6.2
@@ -20053,6 +27622,10 @@ snapshots:
 
   node-fetch-native@1.6.7: {}
 
+  node-fetch@2.7.0:
+    dependencies:
+      whatwg-url: 5.0.0
+
   node-forge@1.4.0: {}
 
   node-gyp-build-optional-packages@5.2.2:
@@ -20066,8 +27639,12 @@ snapshots:
 
   node-releases@2.0.27: {}
 
+  nodemailer@9.0.3: {}
+
   normalize-path@3.0.0: {}
 
+  normalize-wheel@1.0.1: {}
+
   npm-package-arg@11.0.3:
     dependencies:
       hosted-git-info: 7.0.2
@@ -20079,6 +27656,8 @@ snapshots:
     dependencies:
       path-key: 3.1.1
 
+  npm-to-yarn@3.0.1: {}
+
   nth-check@2.1.1:
     dependencies:
       boolbase: 1.0.0
@@ -20141,6 +27720,8 @@ snapshots:
       define-properties: 1.2.1
       es-object-atoms: 1.1.1
 
+  obuf@1.1.2: {}
+
   obug@2.1.1: {}
 
   ofetch@1.5.1:
@@ -20151,6 +27732,8 @@ snapshots:
 
   ohash@2.0.11: {}
 
+  on-exit-leak-free@2.1.2: {}
+
   on-finished@2.3.0:
     dependencies:
       ee-first: 1.1.1
@@ -20173,6 +27756,14 @@ snapshots:
     dependencies:
       mimic-fn: 2.1.0
 
+  oniguruma-parser@0.12.2: {}
+
+  oniguruma-to-es@4.3.6:
+    dependencies:
+      oniguruma-parser: 0.12.2
+      regex: 6.1.0
+      regex-recursion: 6.0.2
+
   open@7.4.2:
     dependencies:
       is-docker: 2.2.1
@@ -20202,13 +27793,75 @@ snapshots:
       strip-ansi: 5.2.0
       wcwidth: 1.0.1
 
+  ora@5.4.1:
+    dependencies:
+      bl: 4.1.0
+      chalk: 4.1.2
+      cli-cursor: 3.1.0
+      cli-spinners: 2.9.2
+      is-interactive: 1.0.0
+      is-unicode-supported: 0.1.0
+      log-symbols: 4.1.0
+      strip-ansi: 6.0.1
+      wcwidth: 1.0.1
+
   own-keys@1.0.1:
     dependencies:
       get-intrinsic: 1.3.0
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -20231,9 +27884,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -20256,9 +27909,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -20281,9 +27934,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -20306,9 +27959,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -20331,9 +27984,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -20356,9 +28009,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -20381,7 +28034,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   oxlint-tsgolint@0.23.0:
     optionalDependencies:
@@ -20392,7 +28045,55 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -20414,9 +28115,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -20438,9 +28139,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -20462,9 +28163,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -20486,9 +28187,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -20510,9 +28211,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -20534,9 +28235,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -20558,7 +28259,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   p-limit@2.3.0:
     dependencies:
@@ -20584,10 +28285,22 @@ snapshots:
 
   package-manager-detector@1.6.0: {}
 
+  pako@1.0.11: {}
+
   parent-module@1.0.1:
     dependencies:
       callsites: 3.1.0
 
+  parse-entities@4.0.2:
+    dependencies:
+      '@types/unist': 2.0.11
+      character-entities-legacy: 3.0.0
+      character-reference-invalid: 2.0.1
+      decode-named-character-reference: 1.3.0
+      is-alphanumerical: 2.0.1
+      is-decimal: 2.0.1
+      is-hexadecimal: 2.0.1
+
   parse-json@5.2.0:
     dependencies:
       '@babel/code-frame': 7.29.7
@@ -20599,33 +28312,117 @@ snapshots:
     dependencies:
       pngjs: 3.4.0
 
+  parse-svg-path@0.2.0: {}
+
+  parse5-htmlparser2-tree-adapter@7.1.0:
+    dependencies:
+      domhandler: 5.0.3
+      parse5: 7.3.0
+
+  parse5-parser-stream@7.1.2:
+    dependencies:
+      parse5: 7.3.0
+
   parse5@7.3.0:
     dependencies:
       entities: 6.0.1
 
+  parseley@0.12.1:
+    dependencies:
+      leac: 0.6.0
+      peberminta: 0.9.0
+
   parseurl@1.3.3: {}
 
+  patch-console@2.0.0: {}
+
   path-browserify@1.0.1: {}
 
+  path-data-parser@0.1.0: {}
+
   path-exists@4.0.0: {}
 
+  path-expression-matcher@1.6.2: {}
+
   path-is-absolute@1.0.1: {}
 
   path-key@3.1.1: {}
 
   path-parse@1.0.7: {}
 
+  path-scurry@1.11.1:
+    dependencies:
+      lru-cache: 10.4.3
+      minipass: 7.1.2
+
   path-scurry@2.0.1:
     dependencies:
       lru-cache: 11.2.4
       minipass: 7.1.2
 
+  path-to-regexp@8.4.2: {}
+
   pathe@2.0.3: {}
 
   pathval@2.0.1: {}
 
+  peberminta@0.9.0: {}
+
   perfect-debounce@2.0.0: {}
 
+  pg-cloudflare@1.4.0:
+    optional: true
+
+  pg-connection-string@2.12.0: {}
+
+  pg-connection-string@2.14.0: {}
+
+  pg-cursor@2.21.0(pg@8.22.0):
+    dependencies:
+      pg: 8.22.0
+
+  pg-int8@1.0.1: {}
+
+  pg-numeric@1.0.2: {}
+
+  pg-pool@3.14.0(pg@8.22.0):
+    dependencies:
+      pg: 8.22.0
+
+  pg-protocol@1.15.0: {}
+
+  pg-types@2.2.0:
+    dependencies:
+      pg-int8: 1.0.1
+      postgres-array: 2.0.0
+      postgres-bytea: 1.0.1
+      postgres-date: 1.0.7
+      postgres-interval: 1.2.0
+
+  pg-types@4.1.0:
+    dependencies:
+      pg-int8: 1.0.1
+      pg-numeric: 1.0.2
+      postgres-array: 3.0.4
+      postgres-bytea: 3.0.0
+      postgres-date: 2.1.0
+      postgres-interval: 3.0.0
+      postgres-range: 1.1.4
+
+  pg@8.22.0:
+    dependencies:
+      pg-connection-string: 2.14.0
+      pg-pool: 3.14.0(pg@8.22.0)
+      pg-protocol: 1.15.0
+      pg-types: 2.2.0
+      pgpass: 1.0.5
+    optionalDependencies:
+      pg-cloudflare: 1.4.0
+
+  pgpass@1.0.5:
+    dependencies:
+      split2: 4.2.0
+
   picocolors@1.1.1: {}
 
   picomatch@2.3.2: {}
@@ -20636,6 +28433,31 @@ snapshots:
 
   pify@4.0.1: {}
 
+  pino-abstract-transport@1.2.0:
+    dependencies:
+      readable-stream: 4.7.0
+      split2: 4.2.0
+
+  pino-abstract-transport@2.0.0:
+    dependencies:
+      split2: 4.2.0
+
+  pino-std-serializers@7.1.0: {}
+
+  pino@9.14.0:
+    dependencies:
+      '@pinojs/redact': 0.4.0
+      atomic-sleep: 1.0.0
+      on-exit-leak-free: 2.1.2
+      pino-abstract-transport: 2.0.0
+      pino-std-serializers: 7.1.0
+      process-warning: 5.0.0
+      quick-format-unescaped: 4.0.4
+      real-require: 0.2.0
+      safe-stable-stringify: 2.5.0
+      sonic-boom: 4.2.1
+      thread-stream: 3.2.0
+
   pirates@3.0.2:
     dependencies:
       node-modules-regexp: 1.0.0
@@ -20646,6 +28468,25 @@ snapshots:
     dependencies:
       pngjs: 7.0.0
 
+  pixi-viewport@6.0.3(pixi.js@8.19.0):
+    dependencies:
+      pixi.js: 8.19.0
+
+  pixi.js@8.19.0:
+    dependencies:
+      '@pixi/colord': 2.9.6
+      '@types/earcut': 3.0.0
+      '@webgpu/types': 0.1.71
+      '@xmldom/xmldom': 0.8.13
+      earcut: 3.2.3
+      eventemitter3: 5.0.4
+      gifuct-js: 2.1.2
+      ismobilejs: 1.1.1
+      parse-svg-path: 0.2.0
+      tiny-lru: 11.4.7
+
+  pkce-challenge@5.0.1: {}
+
   pkg-dir@4.2.0:
     dependencies:
       find-up: 4.1.0
@@ -20662,6 +28503,8 @@ snapshots:
       exsolve: 1.0.8
       pathe: 2.0.3
 
+  playwright-core@1.61.1: {}
+
   plist@3.1.0:
     dependencies:
       '@xmldom/xmldom': 0.8.13
@@ -20672,6 +28515,13 @@ snapshots:
 
   pngjs@7.0.0: {}
 
+  points-on-curve@0.2.0: {}
+
+  points-on-path@0.2.1:
+    dependencies:
+      path-data-parser: 0.1.0
+      points-on-curve: 0.2.0
+
   possible-typed-array-names@1.1.0: {}
 
   postcss-load-config@6.0.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3):
@@ -20683,9 +28533,14 @@ snapshots:
       tsx: 4.21.0
       yaml: 2.8.3
 
+  postcss-selector-parser@7.1.4:
+    dependencies:
+      cssesc: 3.0.0
+      util-deprecate: 1.0.2
+
   postcss@8.5.10:
     dependencies:
-      nanoid: 3.3.11
+      nanoid: 3.3.15
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
@@ -20695,6 +28550,34 @@ snapshots:
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
+  postgres-array@2.0.0: {}
+
+  postgres-array@3.0.4: {}
+
+  postgres-bytea@1.0.1: {}
+
+  postgres-bytea@3.0.0:
+    dependencies:
+      obuf: 1.1.2
+
+  postgres-date@1.0.7: {}
+
+  postgres-date@2.1.0: {}
+
+  postgres-interval@1.2.0:
+    dependencies:
+      xtend: 4.0.2
+
+  postgres-interval@3.0.0: {}
+
+  postgres-range@1.1.4: {}
+
+  postprocessing@6.39.2(three@0.178.0):
+    dependencies:
+      three: 0.178.0
+
+  potpack@1.0.2: {}
+
   preact-render-to-string@6.7.0(preact@10.29.2):
     dependencies:
       preact: 10.29.2
@@ -20709,6 +28592,8 @@ snapshots:
 
   prettier@2.8.8: {}
 
+  prettier@3.4.2: {}
+
   prettier@3.8.1: {}
 
   pretty-bytes@5.6.0: {}
@@ -20731,10 +28616,25 @@ snapshots:
       ansi-styles: 5.2.0
       react-is: 18.3.1
 
+  prismjs@1.29.0: {}
+
   proc-log@4.2.0: {}
 
+  process-nextick-args@2.0.1: {}
+
+  process-warning@5.0.0: {}
+
+  process@0.11.10: {}
+
   progress@2.0.3: {}
 
+  promise-limit@2.7.0: {}
+
+  promise-worker-transferable@1.0.4:
+    dependencies:
+      is-promise: 2.2.2
+      lie: 3.3.0
+
   promise@8.3.0:
     dependencies:
       asap: 2.0.6
@@ -20750,6 +28650,8 @@ snapshots:
       object-assign: 4.1.1
       react-is: 16.13.1
 
+  property-information@7.2.0: {}
+
   psl@1.15.0:
     dependencies:
       punycode: 2.3.1
@@ -20768,6 +28670,11 @@ snapshots:
 
   qrcode-terminal@0.11.0: {}
 
+  qs@6.15.3:
+    dependencies:
+      es-define-property: 1.0.1
+      side-channel: 1.1.1
+
   quansync@0.2.11: {}
 
   quansync@1.0.0: {}
@@ -20787,55 +28694,57 @@ snapshots:
     dependencies:
       inherits: 2.0.4
 
-  radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  quick-format-unescaped@4.0.4: {}
+
+  radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-accessible-icon': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-alert-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-aspect-ratio': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-avatar': 1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-checkbox': 1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-accessible-icon': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-alert-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-aspect-ratio': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-avatar': 1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-checkbox': 1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context-menu': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-context-menu': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-dropdown-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dropdown-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-form': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-hover-card': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-menubar': 1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-one-time-password-field': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-password-toggle-field': 0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-progress': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-radio-group': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-select': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slider': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-form': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-hover-card': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-menubar': 1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-one-time-password-field': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-password-toggle-field': 0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-progress': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-radio-group': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-select': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slider': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-switch': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toast': 1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toolbar': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-tooltip': 1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-switch': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toast': 1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-toolbar': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tooltip': 1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
@@ -20843,9 +28752,9 @@ snapshots:
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20887,6 +28796,46 @@ snapshots:
       react: 19.1.0
       scheduler: 0.26.0
 
+  react-dom@19.1.1(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      scheduler: 0.26.0
+    optional: true
+
+  react-easy-crop@6.2.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      normalize-wheel: 1.0.1
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
+  react-email@3.0.7(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/parser': 7.24.5
+      chalk: 4.1.2
+      chokidar: 4.0.3
+      commander: 11.1.0
+      debounce: 2.0.0
+      esbuild: 0.23.0
+      glob: 10.3.4
+      log-symbols: 4.1.0
+      mime-types: 2.1.35
+      next: 15.1.2(@babel/core@7.29.6)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      normalize-path: 3.0.0
+      ora: 5.4.1
+      socket.io: 4.8.1
+    transitivePeerDependencies:
+      - '@opentelemetry/api'
+      - '@playwright/test'
+      - babel-plugin-macros
+      - babel-plugin-react-compiler
+      - bufferutil
+      - react
+      - react-dom
+      - sass
+      - supports-color
+      - utf-8-validate
+
   react-fast-compare@3.2.2: {}
 
   react-freeze@1.0.4(react@19.1.0):
@@ -20905,6 +28854,11 @@ snapshots:
 
   react-is@19.2.3: {}
 
+  react-medium-image-zoom@5.4.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+
   react-native-is-edge-to-edge@1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -21011,11 +28965,25 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  react-promise-suspense@0.3.4:
+    dependencies:
+      fast-deep-equal: 2.0.1
+
+  react-reconciler@0.31.0(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      scheduler: 0.25.0
+
   react-reconciler@0.32.0(react@19.1.0):
     dependencies:
       react: 19.1.0
       scheduler: 0.26.0
 
+  react-reconciler@0.33.0(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      scheduler: 0.27.0
+
   react-refresh@0.14.2: {}
 
   react-refresh@0.17.0: {}
@@ -21041,18 +29009,26 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  react-resizable-panels@3.0.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  react-resizable-panels@3.0.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
 
   react-smooth@4.0.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       fast-equals: 5.4.1
       prop-types: 15.8.1
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      react-transition-group: 4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
+      react-transition-group: 4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+
+  react-smooth@4.0.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+    dependencies:
+      fast-equals: 5.4.1
+      prop-types: 15.8.1
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      react-transition-group: 4.4.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
 
   react-style-singleton@2.2.3(@types/react@19.1.17)(react@19.1.0):
     dependencies:
@@ -21077,8 +29053,49 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
+  react-transition-group@4.4.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@babel/runtime': 7.29.7
+      dom-helpers: 5.2.1
+      loose-envify: 1.4.0
+      prop-types: 15.8.1
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+
+  react-use-measure@2.1.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+    optionalDependencies:
+      react-dom: 19.1.0(react@19.1.0)
+
   react@19.1.0: {}
 
+  react@19.2.7: {}
+
+  readable-stream@2.3.8:
+    dependencies:
+      core-util-is: 1.0.3
+      inherits: 2.0.4
+      isarray: 1.0.0
+      process-nextick-args: 2.0.1
+      safe-buffer: 5.1.2
+      string_decoder: 1.1.1
+      util-deprecate: 1.0.2
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  readable-stream@4.7.0:
+    dependencies:
+      abort-controller: 3.0.0
+      buffer: 6.0.3
+      events: 3.3.0
+      process: 0.11.10
+      string_decoder: 1.3.0
+
   readdirp@3.6.0:
     dependencies:
       picomatch: 2.3.2
@@ -21087,6 +29104,8 @@ snapshots:
 
   readdirp@5.0.0: {}
 
+  real-require@0.2.0: {}
+
   recast@0.23.12:
     dependencies:
       ast-types: 0.16.1
@@ -21112,6 +29131,48 @@ snapshots:
       tiny-invariant: 1.3.3
       victory-vendor: 36.9.2
 
+  recharts@2.15.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+    dependencies:
+      clsx: 2.1.1
+      eventemitter3: 4.0.7
+      lodash: 4.18.0
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+      react-is: 18.3.1
+      react-smooth: 4.0.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      recharts-scale: 0.4.5
+      tiny-invariant: 1.3.3
+      victory-vendor: 36.9.2
+
+  recma-build-jsx@1.0.0:
+    dependencies:
+      '@types/estree': 1.0.8
+      estree-util-build-jsx: 3.0.1
+      vfile: 6.0.3
+
+  recma-jsx@1.0.1(acorn@8.16.0):
+    dependencies:
+      acorn: 8.16.0
+      acorn-jsx: 5.3.2(acorn@8.16.0)
+      estree-util-to-js: 2.0.0
+      recma-parse: 1.0.0
+      recma-stringify: 1.0.0
+      unified: 11.0.5
+
+  recma-parse@1.0.0:
+    dependencies:
+      '@types/estree': 1.0.8
+      esast-util-from-js: 2.0.1
+      unified: 11.0.5
+      vfile: 6.0.3
+
+  recma-stringify@1.0.0:
+    dependencies:
+      '@types/estree': 1.0.8
+      estree-util-to-js: 2.0.0
+      unified: 11.0.5
+      vfile: 6.0.3
+
   redaxios@0.5.1: {}
 
   redent@3.0.0:
@@ -21148,6 +29209,16 @@ snapshots:
 
   regenerator-runtime@0.14.1: {}
 
+  regex-recursion@6.0.2:
+    dependencies:
+      regex-utilities: 2.3.0
+
+  regex-utilities@2.3.0: {}
+
+  regex@6.1.0:
+    dependencies:
+      regex-utilities: 2.3.0
+
   regexp.prototype.flags@1.5.4:
     dependencies:
       call-bind: 1.0.8
@@ -21174,6 +29245,81 @@ snapshots:
     dependencies:
       jsesc: 3.1.0
 
+  rehype-harden@1.1.8:
+    dependencies:
+      unist-util-visit: 5.1.0
+
+  rehype-raw@7.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-raw: 9.1.0
+      vfile: 6.0.3
+
+  rehype-recma@1.0.0:
+    dependencies:
+      '@types/estree': 1.0.8
+      '@types/hast': 3.0.5
+      hast-util-to-estree: 3.1.3
+    transitivePeerDependencies:
+      - supports-color
+
+  rehype-sanitize@6.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-sanitize: 5.0.2
+
+  remark-gfm@4.0.1:
+    dependencies:
+      '@types/mdast': 4.0.4
+      mdast-util-gfm: 3.1.0
+      micromark-extension-gfm: 3.0.0
+      remark-parse: 11.0.0
+      remark-stringify: 11.0.0
+      unified: 11.0.5
+    transitivePeerDependencies:
+      - supports-color
+
+  remark-mdx@3.1.1:
+    dependencies:
+      mdast-util-mdx: 3.0.0
+      micromark-extension-mdxjs: 3.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  remark-parse@11.0.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+      mdast-util-from-markdown: 2.0.3
+      micromark-util-types: 2.0.2
+      unified: 11.0.5
+    transitivePeerDependencies:
+      - supports-color
+
+  remark-rehype@11.1.2:
+    dependencies:
+      '@types/hast': 3.0.5
+      '@types/mdast': 4.0.4
+      mdast-util-to-hast: 13.2.1
+      unified: 11.0.5
+      vfile: 6.0.3
+
+  remark-stringify@11.0.0:
+    dependencies:
+      '@types/mdast': 4.0.4
+      mdast-util-to-markdown: 2.1.2
+      unified: 11.0.5
+
+  remark@15.0.1:
+    dependencies:
+      '@types/mdast': 4.0.4
+      remark-parse: 11.0.0
+      remark-stringify: 11.0.0
+      unified: 11.0.5
+    transitivePeerDependencies:
+      - supports-color
+
+  remend@1.3.0: {}
+
   require-directory@2.1.1: {}
 
   require-from-string@2.0.2: {}
@@ -21188,6 +29334,13 @@ snapshots:
 
   reselect@5.2.0: {}
 
+  resend@4.8.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      '@react-email/render': 1.1.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - react
+      - react-dom
+
   resolve-cwd@3.0.0:
     dependencies:
       resolve-from: 5.0.0
@@ -21227,12 +29380,24 @@ snapshots:
       onetime: 2.0.1
       signal-exit: 3.0.7
 
+  restore-cursor@3.1.0:
+    dependencies:
+      onetime: 5.1.2
+      signal-exit: 3.0.7
+
+  restore-cursor@4.0.0:
+    dependencies:
+      onetime: 5.1.2
+      signal-exit: 3.0.7
+
   reusify@1.1.0: {}
 
   rimraf@3.0.2:
     dependencies:
       glob: 7.2.3
 
+  robust-predicates@3.0.3: {}
+
   rolldown-plugin-dts@0.20.0(@typescript/native-preview@7.0.0-dev.20260210.1)(rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0))(typescript@5.8.3):
     dependencies:
       '@babel/generator': 7.29.7
@@ -21293,6 +29458,27 @@ snapshots:
       '@rolldown/binding-win32-arm64-msvc': 1.0.0-rc.17
       '@rolldown/binding-win32-x64-msvc': 1.0.0-rc.17
 
+  rolldown@1.0.1:
+    dependencies:
+      '@oxc-project/types': 0.130.0
+      '@rolldown/pluginutils': 1.0.1
+    optionalDependencies:
+      '@rolldown/binding-android-arm64': 1.0.1
+      '@rolldown/binding-darwin-arm64': 1.0.1
+      '@rolldown/binding-darwin-x64': 1.0.1
+      '@rolldown/binding-freebsd-x64': 1.0.1
+      '@rolldown/binding-linux-arm-gnueabihf': 1.0.1
+      '@rolldown/binding-linux-arm64-gnu': 1.0.1
+      '@rolldown/binding-linux-arm64-musl': 1.0.1
+      '@rolldown/binding-linux-ppc64-gnu': 1.0.1
+      '@rolldown/binding-linux-s390x-gnu': 1.0.1
+      '@rolldown/binding-linux-x64-gnu': 1.0.1
+      '@rolldown/binding-linux-x64-musl': 1.0.1
+      '@rolldown/binding-openharmony-arm64': 1.0.1
+      '@rolldown/binding-wasm32-wasi': 1.0.1
+      '@rolldown/binding-win32-arm64-msvc': 1.0.1
+      '@rolldown/binding-win32-x64-msvc': 1.0.1
+
   rollup@4.59.0:
     dependencies:
       '@types/estree': 1.0.8
@@ -21326,6 +29512,15 @@ snapshots:
 
   rou3@0.7.12: {}
 
+  rou3@0.8.1: {}
+
+  roughjs@4.6.6:
+    dependencies:
+      hachure-fill: 0.5.2
+      path-data-parser: 0.1.0
+      points-on-curve: 0.2.0
+      points-on-path: 0.2.1
+
   rrweb-cssom@0.8.0: {}
 
   rtl-detect@1.1.2: {}
@@ -21334,6 +29529,8 @@ snapshots:
     dependencies:
       queue-microtask: 1.2.3
 
+  rw@1.3.3: {}
+
   safe-array-concat@1.1.3:
     dependencies:
       call-bind: 1.0.8
@@ -21342,6 +29539,8 @@ snapshots:
       has-symbols: 1.1.0
       isarray: 2.0.5
 
+  safe-buffer@5.1.2: {}
+
   safe-buffer@5.2.1: {}
 
   safe-push-apply@1.0.0:
@@ -21355,6 +29554,8 @@ snapshots:
       es-errors: 1.3.0
       is-regex: 1.2.1
 
+  safe-stable-stringify@2.5.0: {}
+
   safer-buffer@2.1.2: {}
 
   sax@1.4.3: {}
@@ -21363,8 +29564,20 @@ snapshots:
     dependencies:
       xmlchars: 2.2.0
 
+  scheduler@0.25.0: {}
+
   scheduler@0.26.0: {}
 
+  scheduler@0.27.0: {}
+
+  scroll-into-view-if-needed@3.1.0:
+    dependencies:
+      compute-scroll-into-view: 3.1.1
+
+  selderee@0.11.0:
+    dependencies:
+      parseley: 0.12.1
+
   semver@5.7.2: {}
 
   semver@6.3.1: {}
@@ -21395,8 +29608,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  seq-queue@0.0.5:
-    optional: true
+  seq-queue@0.0.5: {}
 
   serialize-error@2.1.0: {}
 
@@ -21441,12 +29653,41 @@ snapshots:
       es-errors: 1.3.0
       es-object-atoms: 1.1.1
 
+  setimmediate@1.0.5: {}
+
   setprototypeof@1.2.0: {}
 
   sf-symbols-typescript@2.2.0: {}
 
   shallowequal@1.1.0: {}
 
+  sharp@0.33.5:
+    dependencies:
+      color: 4.2.3
+      detect-libc: 2.1.2
+      semver: 7.7.4
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.33.5
+      '@img/sharp-darwin-x64': 0.33.5
+      '@img/sharp-libvips-darwin-arm64': 1.0.4
+      '@img/sharp-libvips-darwin-x64': 1.0.4
+      '@img/sharp-libvips-linux-arm': 1.0.5
+      '@img/sharp-libvips-linux-arm64': 1.0.4
+      '@img/sharp-libvips-linux-s390x': 1.0.4
+      '@img/sharp-libvips-linux-x64': 1.0.4
+      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
+      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
+      '@img/sharp-linux-arm': 0.33.5
+      '@img/sharp-linux-arm64': 0.33.5
+      '@img/sharp-linux-s390x': 0.33.5
+      '@img/sharp-linux-x64': 0.33.5
+      '@img/sharp-linuxmusl-arm64': 0.33.5
+      '@img/sharp-linuxmusl-x64': 0.33.5
+      '@img/sharp-wasm32': 0.33.5
+      '@img/sharp-win32-ia32': 0.33.5
+      '@img/sharp-win32-x64': 0.33.5
+    optional: true
+
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
@@ -21455,11 +29696,27 @@ snapshots:
 
   shell-quote@1.10.0: {}
 
+  shiki@3.23.0:
+    dependencies:
+      '@shikijs/core': 3.23.0
+      '@shikijs/engine-javascript': 3.23.0
+      '@shikijs/engine-oniguruma': 3.23.0
+      '@shikijs/langs': 3.23.0
+      '@shikijs/themes': 3.23.0
+      '@shikijs/types': 3.23.0
+      '@shikijs/vscode-textmate': 10.0.2
+      '@types/hast': 3.0.5
+
   side-channel-list@1.0.0:
     dependencies:
       es-errors: 1.3.0
       object-inspect: 1.13.4
 
+  side-channel-list@1.0.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+
   side-channel-map@1.0.1:
     dependencies:
       call-bound: 1.0.4
@@ -21483,10 +29740,20 @@ snapshots:
       side-channel-map: 1.0.1
       side-channel-weakmap: 1.0.2
 
+  side-channel@1.1.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-list: 1.0.1
+      side-channel-map: 1.0.1
+      side-channel-weakmap: 1.0.2
+
   siginfo@2.0.0: {}
 
   signal-exit@3.0.7: {}
 
+  signal-exit@4.1.0: {}
+
   simple-git-hooks@2.13.1: {}
 
   simple-plist@1.3.1:
@@ -21513,13 +29780,59 @@ snapshots:
 
   slash@5.1.0: {}
 
+  slice-ansi@8.0.0:
+    dependencies:
+      ansi-styles: 6.2.3
+      is-fullwidth-code-point: 5.1.0
+
+  slug@11.0.1: {}
+
   slugify@1.6.6: {}
 
+  socket.io-adapter@2.5.8:
+    dependencies:
+      debug: 4.4.3
+      ws: 8.21.0
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
+  socket.io-parser@4.2.6:
+    dependencies:
+      '@socket.io/component-emitter': 3.1.2
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
+  socket.io@4.8.1:
+    dependencies:
+      accepts: 1.3.8
+      base64id: 2.0.0
+      cors: 2.8.6
+      debug: 4.3.7
+      engine.io: 6.6.9
+      socket.io-adapter: 2.5.8
+      socket.io-parser: 4.2.6
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
+  sonic-boom@4.2.1:
+    dependencies:
+      atomic-sleep: 1.0.0
+
   sonner@2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
+  sonner@2.0.7(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+      react-dom: 19.1.1(react@19.1.0)
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.13:
@@ -21540,12 +29853,17 @@ snapshots:
 
   source-map@0.7.6: {}
 
+  space-separated-tokens@2.0.2: {}
+
   split-on-first@1.1.0: {}
 
+  split2@4.2.0: {}
+
   sprintf-js@1.0.3: {}
 
-  sqlstring@2.3.3:
-    optional: true
+  sqlstring@2.3.3: {}
+
+  srvx@0.11.15: {}
 
   stable-hash@0.0.5: {}
 
@@ -21578,6 +29896,15 @@ snapshots:
 
   standard-as-callback@2.1.0: {}
 
+  state-local@1.0.7: {}
+
+  stats-gl@2.4.2(@types/three@0.185.1)(three@0.178.0):
+    dependencies:
+      '@types/three': 0.185.1
+      three: 0.178.0
+
+  stats.js@0.17.0: {}
+
   statuses@1.5.0: {}
 
   statuses@2.0.2: {}
@@ -21593,6 +29920,31 @@ snapshots:
 
   stream-buffers@2.2.0: {}
 
+  streamdown@2.5.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+    dependencies:
+      clsx: 2.1.1
+      hast-util-to-jsx-runtime: 2.3.6
+      html-url-attributes: 3.0.1
+      marked: 17.0.6
+      mermaid: 11.16.0
+      react: 19.1.0
+      react-dom: 19.1.0(react@19.1.0)
+      rehype-harden: 1.1.8
+      rehype-raw: 7.0.0
+      rehype-sanitize: 6.0.0
+      remark-gfm: 4.0.1
+      remark-parse: 11.0.0
+      remark-rehype: 11.1.2
+      remend: 1.3.0
+      tailwind-merge: 3.6.0
+      unified: 11.0.5
+      unist-util-visit: 5.1.0
+      unist-util-visit-parents: 6.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  streamsearch@1.1.0: {}
+
   strict-uri-encode@2.0.0: {}
 
   string-length@4.0.2:
@@ -21611,6 +29963,23 @@ snapshots:
       is-fullwidth-code-point: 3.0.0
       strip-ansi: 6.0.1
 
+  string-width@5.1.2:
+    dependencies:
+      eastasianwidth: 0.2.0
+      emoji-regex: 9.2.2
+      strip-ansi: 7.1.2
+
+  string-width@7.2.0:
+    dependencies:
+      emoji-regex: 10.6.0
+      get-east-asian-width: 1.6.0
+      strip-ansi: 7.1.2
+
+  string-width@8.2.2:
+    dependencies:
+      get-east-asian-width: 1.6.0
+      strip-ansi: 7.1.2
+
   string.prototype.matchall@4.0.12:
     dependencies:
       call-bind: 1.0.8
@@ -21655,6 +30024,19 @@ snapshots:
       define-properties: 1.2.1
       es-object-atoms: 1.1.1
 
+  string_decoder@1.1.1:
+    dependencies:
+      safe-buffer: 5.1.2
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  stringify-entities@4.0.4:
+    dependencies:
+      character-entities-html4: 2.1.0
+      character-entities-legacy: 3.0.0
+
   strip-ansi@5.2.0:
     dependencies:
       ansi-regex: 4.1.1
@@ -21685,8 +30067,35 @@ snapshots:
     dependencies:
       js-tokens: 9.0.1
 
+  stripe@18.5.0(@types/node@20.19.43):
+    dependencies:
+      qs: 6.15.3
+    optionalDependencies:
+      '@types/node': 20.19.43
+
+  strnum@2.4.1:
+    dependencies:
+      anynum: 1.0.1
+
   structured-headers@0.4.1: {}
 
+  style-to-js@1.1.21:
+    dependencies:
+      style-to-object: 1.0.14
+
+  style-to-object@1.0.14:
+    dependencies:
+      inline-style-parser: 0.2.7
+
+  styled-jsx@5.1.6(@babel/core@7.29.6)(react@19.1.0):
+    dependencies:
+      client-only: 0.0.1
+      react: 19.1.0
+    optionalDependencies:
+      '@babel/core': 7.29.6
+
+  stylis@4.4.0: {}
+
   sucrase@3.35.1:
     dependencies:
       '@jridgewell/gen-mapping': 0.3.13
@@ -21716,12 +30125,24 @@ snapshots:
 
   supports-preserve-symlinks-flag@1.0.0: {}
 
+  suspend-react@0.1.3(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+
+  swr@2.4.2(react@19.1.0):
+    dependencies:
+      dequal: 2.0.3
+      react: 19.1.0
+      use-sync-external-store: 1.6.0(react@19.1.0)
+
   symbol-tree@3.2.4: {}
 
   synckit@0.11.11:
     dependencies:
       '@pkgr/core': 0.2.9
 
+  tagged-tag@1.0.0: {}
+
   tailwind-merge@3.6.0: {}
 
   tailwindcss@4.3.0: {}
@@ -21757,6 +30178,8 @@ snapshots:
       ansi-escapes: 4.3.2
       supports-hyperlinks: 2.3.0
 
+  terminal-size@4.0.1: {}
+
   terser@5.44.1:
     dependencies:
       '@jridgewell/source-map': 0.3.11
@@ -21778,10 +30201,34 @@ snapshots:
     dependencies:
       any-promise: 1.3.0
 
+  thread-stream@3.2.0:
+    dependencies:
+      real-require: 0.2.0
+
+  three-mesh-bvh@0.8.3(three@0.178.0):
+    dependencies:
+      three: 0.178.0
+
+  three-stdlib@2.36.1(three@0.178.0):
+    dependencies:
+      '@types/draco3d': 1.4.10
+      '@types/offscreencanvas': 2019.7.3
+      '@types/webxr': 0.5.24
+      draco3d: 1.5.7
+      fflate: 0.6.10
+      potpack: 1.0.2
+      three: 0.178.0
+
+  three@0.178.0: {}
+
   throat@5.0.0: {}
 
+  throttleit@2.1.0: {}
+
   tiny-invariant@1.3.3: {}
 
+  tiny-lru@11.4.7: {}
+
   tiny-warning@1.0.3: {}
 
   tinybench@2.9.0: {}
@@ -21834,6 +30281,8 @@ snapshots:
     dependencies:
       tldts: 6.1.86
 
+  tr46@0.0.3: {}
+
   tr46@3.0.0:
     dependencies:
       punycode: 2.3.1
@@ -21844,6 +30293,24 @@ snapshots:
 
   tree-kill@1.2.2: {}
 
+  trim-lines@3.0.1: {}
+
+  troika-three-text@0.52.4(three@0.178.0):
+    dependencies:
+      bidi-js: 1.0.3
+      three: 0.178.0
+      troika-three-utils: 0.52.4(three@0.178.0)
+      troika-worker-utils: 0.52.0
+      webgl-sdf-generator: 1.1.1
+
+  troika-three-utils@0.52.4(three@0.178.0):
+    dependencies:
+      three: 0.178.0
+
+  troika-worker-utils@0.52.0: {}
+
+  trough@2.2.0: {}
+
   ts-api-utils@2.1.0(typescript@5.9.3):
     dependencies:
       typescript: 5.9.3
@@ -21853,9 +30320,11 @@ snapshots:
       picomatch: 4.0.4
       typescript: 5.9.3
 
+  ts-dedent@2.3.0: {}
+
   ts-interface-checker@0.1.13: {}
 
-  ts-jest@29.0.5(@babel/core@7.29.6)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.25.12)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3):
+  ts-jest@29.0.5(@babel/core@7.29.6)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(jest@29.7.0(@types/node@24.10.4))(typescript@5.9.3):
     dependencies:
       bs-logger: 0.2.6
       fast-json-stable-stringify: 2.1.0
@@ -21871,7 +30340,7 @@ snapshots:
       '@babel/core': 7.29.6
       '@jest/types': 29.6.3
       babel-jest: 29.7.0(@babel/core@7.29.6)
-      esbuild: 0.25.12
+      esbuild: 0.28.1
 
   ts-morph@25.0.1:
     dependencies:
@@ -21926,8 +30395,6 @@ snapshots:
       - synckit
       - vue-tsc
 
-  tslib@1.14.1: {}
-
   tslib@2.8.1: {}
 
   tsup@8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
@@ -21995,7 +30462,15 @@ snapshots:
 
   tsyringe@4.10.0:
     dependencies:
-      tslib: 1.14.1
+      tslib: 2.8.1
+
+  tunnel-rat@0.1.2(@types/react@19.1.17)(react@19.1.0):
+    dependencies:
+      zustand: 4.5.7(@types/react@19.1.17)(react@19.1.0)
+    transitivePeerDependencies:
+      - '@types/react'
+      - immer
+      - react
 
   turbo@2.10.4:
     optionalDependencies:
@@ -22008,6 +30483,8 @@ snapshots:
 
   tw-animate-css@1.4.0: {}
 
+  tweedle.js@2.1.0: {}
+
   type-check@0.4.0:
     dependencies:
       prelude-ls: 1.2.1
@@ -22018,6 +30495,10 @@ snapshots:
 
   type-fest@0.7.1: {}
 
+  type-fest@5.8.0:
+    dependencies:
+      tagged-tag: 1.0.0
+
   typed-array-buffer@1.0.3:
     dependencies:
       call-bound: 1.0.4
@@ -22051,6 +30532,8 @@ snapshots:
       possible-typed-array-names: 1.1.0
       reflect.getprototypeof: 1.0.10
 
+  typed-signals@2.5.0: {}
+
   typescript@5.6.3: {}
 
   typescript@5.8.3: {}
@@ -22063,6 +30546,8 @@ snapshots:
 
   ufo@1.6.4: {}
 
+  uint8array-extras@1.5.0: {}
+
   ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@clack/prompts': 0.11.0
@@ -22091,13 +30576,13 @@ snapshots:
       - tsx
       - yaml
 
-  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0):
+  ultracite@5.0.39(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)(tsx@4.21.0):
     dependencies:
       '@clack/prompts': 0.11.0
       commander: 14.0.2
       deepmerge: 4.3.1
       jsonc-parser: 3.3.1
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)(tsx@4.21.0)
     transitivePeerDependencies:
       - '@edge-runtime/vm'
       - '@types/debug'
@@ -22139,17 +30624,22 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  uncrypto@0.1.3: {}
+
   undici-types@6.21.0: {}
 
   undici-types@7.16.0: {}
 
-  undici-types@7.18.2:
-    optional: true
-
   undici@6.27.0: {}
 
+  undici@7.28.0: {}
+
   undici@8.5.0: {}
 
+  unenv@2.0.0-rc.24:
+    dependencies:
+      pathe: 2.0.3
+
   unicode-canonical-property-names-ecmascript@2.0.1: {}
 
   unicode-match-property-ecmascript@2.0.0:
@@ -22161,10 +30651,49 @@ snapshots:
 
   unicode-property-aliases-ecmascript@2.2.0: {}
 
+  unified@11.0.5:
+    dependencies:
+      '@types/unist': 3.0.3
+      bail: 2.0.2
+      devlop: 1.1.0
+      extend: 3.0.2
+      is-plain-obj: 4.1.0
+      trough: 2.2.0
+      vfile: 6.0.3
+
   unique-string@2.0.0:
     dependencies:
       crypto-random-string: 2.0.0
 
+  unist-util-is@6.0.1:
+    dependencies:
+      '@types/unist': 3.0.3
+
+  unist-util-position-from-estree@2.0.0:
+    dependencies:
+      '@types/unist': 3.0.3
+
+  unist-util-position@5.0.0:
+    dependencies:
+      '@types/unist': 3.0.3
+
+  unist-util-stringify-position@4.0.0:
+    dependencies:
+      '@types/unist': 3.0.3
+
+  unist-util-visit-parents@6.0.2:
+    dependencies:
+      '@types/unist': 3.0.3
+      unist-util-is: 6.0.1
+
+  unist-util-visit@5.1.0:
+    dependencies:
+      '@types/unist': 3.0.3
+      unist-util-is: 6.0.1
+      unist-util-visit-parents: 6.0.2
+
+  universal-user-agent@7.0.3: {}
+
   universalify@0.2.0: {}
 
   unpipe@1.0.0: {}
@@ -22176,6 +30705,17 @@ snapshots:
       picomatch: 4.0.4
       webpack-virtual-modules: 0.6.2
 
+  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+    dependencies:
+      '@jridgewell/remapping': 2.3.5
+      picomatch: 4.0.4
+      webpack-virtual-modules: 0.6.2
+    optionalDependencies:
+      esbuild: 0.28.1
+      rolldown: 1.0.1
+      rollup: 4.59.0
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   unrs-resolver@1.11.1:
     dependencies:
       napi-postinstall: 0.3.4
@@ -22248,6 +30788,10 @@ snapshots:
     dependencies:
       react: 19.1.0
 
+  util-deprecate@1.0.2: {}
+
+  utility-types@3.11.0: {}
+
   utils-merge@1.0.1: {}
 
   uuid@11.1.1: {}
@@ -22260,6 +30804,10 @@ snapshots:
       '@types/istanbul-lib-coverage': 2.0.6
       convert-source-map: 2.0.0
 
+  valibot@1.4.2(typescript@6.0.3):
+    optionalDependencies:
+      typescript: 6.0.3
+
   validate-npm-package-name@5.0.1: {}
 
   vary@1.1.2: {}
@@ -22272,6 +30820,7 @@ snapshots:
     transitivePeerDependencies:
       - '@types/react'
       - '@types/react-dom'
+    optional: true
 
   vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
@@ -22282,6 +30831,21 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
+  vfile-location@5.0.3:
+    dependencies:
+      '@types/unist': 3.0.3
+      vfile: 6.0.3
+
+  vfile-message@4.0.3:
+    dependencies:
+      '@types/unist': 3.0.3
+      unist-util-stringify-position: 4.0.0
+
+  vfile@6.0.3:
+    dependencies:
+      '@types/unist': 3.0.3
+      vfile-message: 4.0.3
+
   victory-vendor@36.9.2:
     dependencies:
       '@types/d3-array': 3.2.2
@@ -22320,7 +30884,7 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@24.10.4):
+  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
@@ -22341,7 +30905,7 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite-node@3.2.4(@types/node@24.10.4)(tsx@4.21.0):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3
@@ -22362,35 +30926,114 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@3.2.4(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
-      cac: 6.7.14
-      debug: 4.4.3
-      es-module-lexer: 1.7.0
-      pathe: 2.0.3
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
     transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
       - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
       - jiti
+      - jsdom
       - less
-      - lightningcss
+      - publint
       - sass
       - sass-embedded
       - stylus
       - sugarss
-      - supports-color
+      - svelte
       - terser
       - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
+  vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -22433,14 +31076,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -22483,14 +31126,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -22533,14 +31176,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -22583,14 +31226,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -22633,14 +31276,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -22683,14 +31326,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@opentelemetry/api@1.9.0)(@types/node@25.3.3)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
@@ -22733,13 +31376,13 @@ snapshots:
       - vite
       - yaml
 
-  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.6.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -22766,13 +31409,13 @@ snapshots:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@6.0.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -22828,22 +31471,9 @@ snapshots:
       tsx: 4.21.0
       yaml: 2.8.3
 
-  vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
-    dependencies:
-      esbuild: 0.28.1
-      fdir: 6.5.0(picomatch@4.0.4)
-      picomatch: 4.0.4
-      postcss: 8.5.10
-      rollup: 4.59.0
-      tinyglobby: 0.2.15
+  vitefu@1.1.3(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     optionalDependencies:
-      '@types/node': 25.3.3
-      fsevents: 2.3.3
-      jiti: 2.7.0
-      lightningcss: 1.32.0
-      terser: 5.44.1
-      tsx: 4.21.0
-      yaml: 2.8.3
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   vitest@3.2.7(@types/debug@4.1.12)(@types/node@20.19.43)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
@@ -22888,7 +31518,7 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
@@ -22916,7 +31546,7 @@ snapshots:
     optionalDependencies:
       '@types/debug': 4.1.12
       '@types/node': 24.10.4
-      jsdom: 26.1.0
+      jsdom: 20.0.3
     transitivePeerDependencies:
       - jiti
       - less
@@ -22931,11 +31561,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -22954,7 +31584,7 @@ snapshots:
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@24.10.4)
+      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -22974,54 +31604,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
-    dependencies:
-      '@types/chai': 5.2.3
-      '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
-      '@vitest/pretty-format': 3.2.7
-      '@vitest/runner': 3.2.7
-      '@vitest/snapshot': 3.2.7
-      '@vitest/spy': 3.2.7
-      '@vitest/utils': 3.2.7
-      chai: 5.3.3
-      debug: 4.4.3
-      expect-type: 1.3.0
-      magic-string: 0.30.21
-      pathe: 2.0.3
-      picomatch: 4.0.4
-      std-env: 3.10.0
-      tinybench: 2.9.0
-      tinyexec: 0.3.2
-      tinyglobby: 0.2.15
-      tinypool: 1.1.1
-      tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      why-is-node-running: 2.3.0
-    optionalDependencies:
-      '@types/debug': 4.1.12
-      '@types/node': 25.3.3
-      jsdom: 20.0.3
-    transitivePeerDependencies:
-      - jiti
-      - less
-      - lightningcss
-      - msw
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - supports-color
-      - terser
-      - tsx
-      - yaml
-
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@25.3.3)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)(tsx@4.21.0):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(tsx@4.21.0))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -23039,12 +31626,12 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@25.3.3)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@24.10.4)(tsx@4.21.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
-      '@types/node': 25.3.3
+      '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
       - jiti
@@ -23060,39 +31647,16 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.6(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(jsdom@26.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
-    dependencies:
-      '@vitest/expect': 4.1.6
-      '@vitest/mocker': 4.1.6(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
-      '@vitest/pretty-format': 4.1.6
-      '@vitest/runner': 4.1.6
-      '@vitest/snapshot': 4.1.6
-      '@vitest/spy': 4.1.6
-      '@vitest/utils': 4.1.6
-      es-module-lexer: 2.1.0
-      expect-type: 1.3.0
-      magic-string: 0.30.21
-      obug: 2.1.1
-      pathe: 2.0.3
-      picomatch: 4.0.4
-      std-env: 4.1.0
-      tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      tinyrainbow: 3.1.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      why-is-node-running: 2.3.0
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 24.10.4
-      jsdom: 26.1.0
-    transitivePeerDependencies:
-      - msw
-
   vlq@0.2.3: {}
 
   vlq@1.0.1: {}
 
+  voidhash@0.0.1-alpha.4:
+    dependencies:
+      cross-fetch: 4.1.0
+    transitivePeerDependencies:
+      - encoding
+
   w3c-xmlserializer@4.0.0:
     dependencies:
       xml-name-validator: 4.0.0
@@ -23111,6 +31675,14 @@ snapshots:
     dependencies:
       defaults: 1.0.4
 
+  web-namespaces@2.0.1: {}
+
+  webgl-constants@1.1.1: {}
+
+  webgl-sdf-generator@1.1.1: {}
+
+  webidl-conversions@3.0.1: {}
+
   webidl-conversions@5.0.0: {}
 
   webidl-conversions@7.0.0: {}
@@ -23147,6 +31719,11 @@ snapshots:
       tr46: 5.1.1
       webidl-conversions: 7.0.0
 
+  whatwg-url@5.0.0:
+    dependencies:
+      tr46: 0.0.3
+      webidl-conversions: 3.0.1
+
   which-boxed-primitive@1.1.1:
     dependencies:
       is-bigint: 1.1.0
@@ -23197,16 +31774,45 @@ snapshots:
       siginfo: 2.0.0
       stackback: 0.0.2
 
+  widest-line@6.0.0:
+    dependencies:
+      string-width: 8.2.2
+
   wonka@6.3.5: {}
 
   word-wrap@1.2.5: {}
 
+  workerd@1.20260526.1:
+    optionalDependencies:
+      '@cloudflare/workerd-darwin-64': 1.20260526.1
+      '@cloudflare/workerd-darwin-arm64': 1.20260526.1
+      '@cloudflare/workerd-linux-64': 1.20260526.1
+      '@cloudflare/workerd-linux-arm64': 1.20260526.1
+      '@cloudflare/workerd-windows-64': 1.20260526.1
+
+  workers-ai-provider@3.3.1(@ai-sdk/provider@4.0.3)(ai@7.0.22(zod@4.3.6)):
+    dependencies:
+      '@ai-sdk/provider': 4.0.3
+      ai: 7.0.22(zod@4.3.6)
+
   wrap-ansi@7.0.0:
     dependencies:
       ansi-styles: 4.3.0
       string-width: 4.2.3
       strip-ansi: 6.0.1
 
+  wrap-ansi@8.1.0:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 5.1.2
+      strip-ansi: 7.1.2
+
+  wrap-ansi@9.0.2:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 7.2.0
+      strip-ansi: 7.1.2
+
   wrappy@1.0.2: {}
 
   write-file-atomic@4.0.2:
@@ -23231,17 +31837,33 @@ snapshots:
 
   xml-name-validator@5.0.0: {}
 
+  xml-naming@0.3.0: {}
+
   xml2js@0.6.0:
     dependencies:
       sax: 1.4.3
       xmlbuilder: 11.0.1
 
+  xmlbuilder2@4.0.3:
+    dependencies:
+      '@oozcitak/dom': 2.0.2
+      '@oozcitak/infra': 2.0.2
+      '@oozcitak/util': 10.0.0
+      js-yaml: 4.2.0
+
   xmlbuilder@11.0.1: {}
 
   xmlbuilder@15.1.1: {}
 
   xmlchars@2.2.0: {}
 
+  xtend@4.0.2: {}
+
+  y-protocols@1.0.7(yjs@13.6.31):
+    dependencies:
+      lib0: 0.2.117
+      yjs: 13.6.31
+
   y18n@5.0.8: {}
 
   yallist@3.1.1: {}
@@ -23264,14 +31886,35 @@ snapshots:
       y18n: 5.0.8
       yargs-parser: 21.1.1
 
+  yjs@13.6.31:
+    dependencies:
+      lib0: 0.2.117
+
   yocto-queue@0.1.0: {}
 
+  yoga-layout@3.2.1: {}
+
+  zod-openapi@5.4.6(zod@4.3.6):
+    dependencies:
+      zod: 4.3.6
+
   zod@3.25.76: {}
 
   zod@4.3.6: {}
 
+  zod@4.4.3: {}
+
+  zustand@4.5.7(@types/react@19.1.17)(react@19.1.0):
+    dependencies:
+      use-sync-external-store: 1.6.0(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      react: 19.1.0
+
   zustand@5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0)):
     optionalDependencies:
       '@types/react': 19.1.17
       react: 19.1.0
       use-sync-external-store: 1.6.0(react@19.1.0)
+
+  zwitch@2.0.4: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 5c7599b0e..6404f07ef 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,33 +1,42 @@
 packages:
-  - packages/*
   - apps/*
+  - packages/*
   - libraries/*
   - examples/*
-
+  - selfhost/*
+  # just-bash's optional native compression accelerators (node-only; we run
+  # just-bash in the browser, so their build scripts are intentionally skipped).
+ignoredBuiltDependencies:
+  - "@mongodb-js/zstd"
+  - node-liblzma
 catalog:
-  "@better-auth/api-key": ^1.6.23
-  # Effect ecosystem
-  "@effect/cli": ^0.73.0
-  "@effect/rpc": ^0.73.0
-  "@effect/language-service": ^0.64.1
+  # Effect ecosystem (v4)
+  effect: 4.0.0-beta.84
+  alchemy: 2.0.0-beta.57
+  typescript: 6.0.3
+  "@effect/platform-node": 4.0.0-beta.84
   "@effect/platform": ^0.94.1
-  "@effect/cluster": ^0.56.1
-  "@effect/platform-node": ^0.104.0
-  "@effect/platform-bun": ^0.87.0
-  "@effect/vitest": ^0.27.0
-  "@effect/workflow": ^0.16.0
-  "@effect/experimental": ^0.58.0
-  "@effect/opentelemetry": ^0.60.0
-  effect: ^3.19.14
+  "@effect/platform-node-shared": 4.0.0-beta.84
+  "@effect/platform-bun": 4.0.0-beta.84
+  "@effect/vitest": 4.0.0-beta.84
+  "@effect/opentelemetry": 4.0.0-beta.84
+  "@effect/sql-clickhouse": 4.0.0-beta.84
+  "@effect/sql-pg": 4.0.0-beta.84
+  "@effect-aws/client-sqs": 2.0.0-beta.4
+  "@effect-aws/client-s3": 2.0.0-beta.4
+  effect-query: 1.0.0
+  "@effect/language-service": ^0.86.2
+  "@better-auth/api-key": ^1.6.23
+  better-auth: ^1.6.23
 
   # TanStack
-  "@tanstack/react-query": ^5.90.21
-  "@tanstack/react-query-devtools": ^5.91.3
-  "@tanstack/react-router": ^1.160.0
-  "@tanstack/react-router-ssr-query": ^1.160.0
-  "@tanstack/react-start": ^1.160.0
+  "@tanstack/react-query": 5.100.11
+  "@tanstack/react-query-devtools": 5.100.11
+  "@tanstack/react-router": 1.170.7
+  "@tanstack/react-router-ssr-query": 1.167.0
+  "@tanstack/react-start": 1.168.10
   "@tanstack/react-table": ^8.21.3
-  "@tanstack/zod-adapter": ^1.160.0
+  "@tanstack/zod-adapter": 1.167.0
 
   # tRPC
   "@trpc/client": ^11.1.0
@@ -35,13 +44,12 @@ catalog:
   "@trpc/tanstack-react-query": ^11.1.0
 
   # React 19 & types
-  react: ^19.1.0
-  react-dom: ^19.1.0
+  react: 19.1.0
+  react-dom: 19.1.0
   "@types/react": ^19.1.0
   "@types/react-dom": ^19.1.0
 
   # Shared frontend dependencies
-  "@cloudflare/vite-plugin": ^1
   "@fontsource-variable/geist": ^5.2.8
   "@fontsource-variable/geist-mono": ^5.2.7
   "@hookform/resolvers": ^5.1.1
@@ -55,35 +63,108 @@ catalog:
   "sonner": ^2.0.6
   tailwindcss: ^4.1.17
   "tw-animate-css": ^1.2.4
+  # Pinned to 0.1.23: 0.1.24's config bundler regressed (`Cannot convert undefined or
+  # null to object` when the Vitest IDE extension / `vp` loads vitest.mts configs). Floating
+  # `latest` also caused per-package version skew across the workspace. Bump once upstream fixes it.
   vite: ^7.3.5
   "vite-tsconfig-paths": ^5.1.4
-  wrangler: ^4.65.0
   zod: ^4.1.13
 
-  # Voidhash packages
-  "@voidhash/mimic": v1.0.0-beta.16
-  "@voidhash/mimic-react": v1.0.0-beta.16
-  "@voidhash/mimic-effect": v1.0.0-beta.16
-  "better-auth": ^1.6.23
+  # Crypto — WebCrypto-only, Cloudflare Workers-safe (replaces jsonwebtoken/jsrsasign)
+  jose: ^6.0.11
+  "@peculiar/x509": ^2.0.0
+  reflect-metadata: ^0.2.2
 
+  # Test and runtime tooling
+  vitest: npm:@voidzero-dev/vite-plus-test@0.1.23
+  vite-plus: 0.1.23
+  playwright-core: 1.61.1
+  nodemailer: 9.0.3
+  "@types/nodemailer": 8.0.1
 catalogs:
   react18:
     react: 18.3.1
     react-dom: 18.3.1
-
-onlyBuiltDependencies:
-  - "@parcel/watcher"
-  - "@tailwindcss/oxide"
-  - esbuild
-  - msgpackr-extract
-  - msw
-  - nitro-codegen
-  - protobufjs
-  - react-native-nitro-modules
-  - sharp
-  - simple-git-hooks
-  - unrs-resolver
-
-# CI and the private superproject install explicitly before running tasks.
-# Never mutate this standalone workspace implicitly from a nested task.
+overrides:
+  "@tanstack/query-core": 5.100.11
+  "tsyringe>tslib": 2.8.1
+  "@babel/plugin-transform-modules-systemjs@<=7.29.3": 7.29.4
+  "@babel/core@<=7.29.0": 7.29.6
+  "@esbuild-kit/core-utils>esbuild": 0.25.0
+  "@expo/metro-config>postcss": 8.5.10
+  "@isaacs/brace-expansion@<=5.0.0": 5.0.1
+  "@tanstack/react-start@>=1.0.0 <1.167.30": 1.167.30
+  "@tootallnate/once@<2.0.1": 2.0.1
+  "@xmldom/xmldom@<0.8.13": 0.8.13
+  "ajv@>=7.0.0-alpha.0 <8.18.0": 8.18.0
+  "brace-expansion@<1.1.13": 1.1.13
+  "brace-expansion@>=2.0.0 <2.0.3": 2.0.3
+  "defu@<=6.1.4": 6.1.7
+  "drizzle-orm@<0.45.2": 0.45.2
+  effect: 4.0.0-beta.84
+  "fast-uri@<=3.1.1": 3.1.3
+  "fdir>picomatch": 4.0.4
+  "flatted@<=3.4.1": 3.4.2
+  "form-data@>=4.0.0 <4.0.6": 4.0.6
+  h3-v2: npm:h3@2.0.1-rc.18
+  "js-yaml@<3.15.0": 3.15.0
+  "js-yaml@>=4.0.0 <=4.1.1": 4.2.0
+  kysely: 0.28.17
+  "lodash@>=4.0.0 <=4.17.23": 4.18.0
+  "minimatch@<3.1.4": 3.1.4
+  "minimatch@>=9.0.0 <9.0.7": 9.0.7
+  "minimatch@>=10.0.0 <10.2.3": 10.2.3
+  "next@>=16.0.0-beta.0 <16.2.6": 16.2.6
+  "node-forge@<1.4.0": 1.4.0
+  "picomatch@<2.3.2": 2.3.2
+  "picomatch@>=3.0.0 <3.0.2": 3.0.2
+  "picomatch@>=4.0.0 <4.0.4": 4.0.4
+  "postcss@<8.5.10": 8.5.10
+  "rollup@>=4 <4.59.0": 4.59.0
+  "shell-quote@>=1.1.0 <=1.8.3": 1.10.0
+  "tar@>=7 <7.5.11": 7.5.19
+  "undici@>=6 <6.27.0": 6.27.0
+  "vite@>=7 <=7.3.4": 7.3.5
+  "vite>esbuild": 0.28.1
+  "vitest@>=3 <3.2.6": 3.2.7
+  "ws@>=6 <6.2.4": 6.2.4
+  "ws@>=7 <7.5.11": 7.5.11
+  "ws@>=8 <8.21.0": 8.21.0
+  "xcode>uuid": 11.1.1
+  "yaml@>=2.0.0 <2.8.3": 2.8.3
+peerDependencyRules:
+  allowAny:
+    - vite
+    - vitest
+  allowedVersions:
+    vite: "*"
+    vitest: "*"
+# Kept false as a conservative default: `catalog:`/version-range deps resolve from the registry
+# rather than being shadowed by a same-named workspace package. The original driver — the in-repo
+# mimic packages colliding with the previously published @voidhash/mimic (since dropped
+# entirely) — no longer applies now that internal dependencies use `workspace:*`. All internal
+# deps use the `workspace:*` protocol, which links regardless of this flag, so true/false are
+# equivalent for the current dependency graph.
+linkWorkspacePackages: false
+nodeLinker: hoisted
+# The private cloud workspace consumes this repository as a nested workspace.
+# Its root install is authoritative there; package scripts must not start a second
+# install from this nested workspace while Turbo is running the combined graph.
 verifyDepsBeforeRun: false
+minimumReleaseAge: 0
+allowBuilds:
+  "@confluentinc/kafka-javascript": false
+  "@mongodb-js/zstd": false
+  "@parcel/watcher": true
+  "@tailwindcss/oxide": true
+  esbuild: true
+  msgpackr-extract: true
+  msw: true
+  node-liblzma: false
+  nitro-codegen: true
+  protobufjs: true
+  react-native-nitro-modules: true
+  sharp: true
+  simple-git-hooks: true
+  unrs-resolver: true
+  workerd: true
diff --git a/scripts/db-generate.mjs b/scripts/db-generate.mjs
new file mode 100644
index 000000000..ecef80c20
--- /dev/null
+++ b/scripts/db-generate.mjs
@@ -0,0 +1,17 @@
+// Thin wrapper around `drizzle-kit generate`.
+//
+// The drizzle config (`drizzle.config.ts`) emits Postgres migrations into the
+// non-standard dir-per-migration layout under
+// `packages/db/src/alchemy-migrations`. The alchemy-effect PlanetScale Postgres
+// migration runner applies each `migration.sql` as a single query, and
+// drizzle's `--> statement-breakpoint` separators are inert `--` line comments
+// to Postgres — so, unlike the old MySQL/Vitess path, no post-processing of the
+// generated SQL is needed. This stays a wrapper only to keep the `db:generate`
+// script interface stable and forward args verbatim (e.g. `--name init`).
+
+import { spawnSync } from "node:child_process";
+
+const result = spawnSync("pnpm", ["exec", "drizzle-kit", "generate", ...process.argv.slice(2)], {
+  stdio: "inherit",
+});
+process.exit(result.status ?? 1);
diff --git a/scripts/db-migrate-local.mjs b/scripts/db-migrate-local.mjs
new file mode 100644
index 000000000..27fbe1885
--- /dev/null
+++ b/scripts/db-migrate-local.mjs
@@ -0,0 +1,194 @@
+// Applies the drizzle-generated migrations under
+// `packages/db/src/alchemy-migrations` to the local Docker Postgres.
+//
+// Alchemy applies these same files to the remote PlanetScale Postgres branch
+// (alchemy/Planetscale/Postgres/PostgresMigrations). Local development talks to
+// the `standalone_postgres` container instead, which Alchemy never touches, so
+// this script reproduces the runner's apply logic 1:1:
+//   - track applied files in an `__alchemy_migrations` table
+//     (id TEXT, name TEXT, applied_at TIMESTAMPTZ),
+//   - run each `migration.sql` as a single query — Postgres treats drizzle's
+//     `--> statement-breakpoint` markers as inert `--` line comments, so no
+//     statement splitting is needed (the Postgres runner does the same),
+//   - run pending files in directory (timestamp) order, one transaction each.
+//
+// The migrations live in a non-standard, dir-per-migration layout
+// (`<timestamp>_<name>/migration.sql`, no `meta/_journal.json`), so the stock
+// `drizzle-kit migrate` command can't apply them — hence the custom runner.
+//
+// Usage:
+//   pnpm db:migrate:local            # apply pending migrations
+//   pnpm db:migrate:local --force    # allow a non-local DATABASE_HOST
+//
+// Connection is read from env with local-dev defaults:
+//   DATABASE_HOST=127.0.0.1 DATABASE_PORT=5432 DATABASE_NAME=voidhash
+//   DATABASE_USERNAME=voidhash DATABASE_PASSWORD=password
+// The Docker image (docker-compose.yml) creates `voidhash` as a superuser that
+// owns the `voidhash` database, so the app user has full DDL locally.
+
+import { readdirSync, readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { Client } from "pg";
+
+const MIGRATIONS_DIR = "packages/db/src/alchemy-migrations";
+const MIGRATIONS_TABLE = "__alchemy_migrations";
+
+// Hosts we consider safe to bootstrap + migrate without `--force` (mirrors the
+// allowlist in packages/db/src/db.ts). Guards against pointing this at a remote
+// or PlanetScale host by accident.
+const LOCAL_HOSTS = new Set([
+  "localhost",
+  "127.0.0.1",
+  "::1",
+  "0.0.0.0",
+  "host.docker.internal",
+  "standalone_postgres",
+]);
+
+const isLocalHost = (host) => {
+  const h = host.trim().toLowerCase();
+  return LOCAL_HOSTS.has(h) || h.endsWith(".localhost");
+};
+
+const config = {
+  host: process.env.DATABASE_HOST ?? "127.0.0.1",
+  port: Number.parseInt(process.env.DATABASE_PORT ?? "5432", 10),
+  database: process.env.DATABASE_NAME ?? "voidhash",
+  user: process.env.DATABASE_USERNAME ?? "voidhash",
+  password: process.env.DATABASE_PASSWORD ?? "password",
+};
+
+const force = process.argv.includes("--force");
+
+if (!isLocalHost(config.host) && !force) {
+  console.error(
+    `Refusing to migrate non-local host "${config.host}". This script is for ` +
+      `the local Docker Postgres only; remote branches are migrated by Alchemy. ` +
+      `Pass --force to override.`,
+  );
+  process.exit(1);
+}
+
+// `config.database` / `MIGRATIONS_TABLE` are interpolated as SQL identifiers
+// (which can't be parameterized). Both are fixed local defaults, not external
+// input, so this is safe.
+const dbIdent = `"${config.database.replaceAll('"', '""')}"`;
+const tableIdent = `"${MIGRATIONS_TABLE}"`;
+
+/** Migration directories sorted by their timestamp-prefixed name. */
+const collectMigrations = () => {
+  if (!existsSync(MIGRATIONS_DIR)) return [];
+  return readdirSync(MIGRATIONS_DIR, { withFileTypes: true })
+    .filter((entry) => entry.isDirectory())
+    .map((entry) => entry.name)
+    .sort()
+    .map((name) => ({ name, file: join(MIGRATIONS_DIR, name, "migration.sql") }))
+    .filter((m) => existsSync(m.file));
+};
+
+/**
+ * Ensure the dev database exists. The Docker image normally creates it via
+ * `POSTGRES_DB`, so this is a best-effort backstop. `CREATE DATABASE` cannot run
+ * inside a transaction or against the target database itself, so we connect to
+ * the always-present `postgres` maintenance database.
+ */
+const bootstrap = async () => {
+  const conn = new Client({
+    host: config.host,
+    port: config.port,
+    user: config.user,
+    password: config.password,
+    database: "postgres",
+  });
+  await conn.connect();
+  try {
+    const exists = await conn.query("SELECT 1 FROM pg_database WHERE datname = $1", [
+      config.database,
+    ]);
+    if (exists.rowCount === 0) {
+      await conn.query(`CREATE DATABASE ${dbIdent}`);
+      console.log(`created database "${config.database}"`);
+    }
+  } finally {
+    await conn.end();
+  }
+};
+
+const migrate = async () => {
+  const migrations = collectMigrations();
+  if (migrations.length === 0) {
+    console.log(`db-migrate-local: no migrations found in ${MIGRATIONS_DIR}`);
+    return;
+  }
+
+  const conn = new Client({
+    host: config.host,
+    port: config.port,
+    user: config.user,
+    password: config.password,
+    database: config.database,
+  });
+  await conn.connect();
+
+  try {
+    await conn.query(
+      `CREATE TABLE IF NOT EXISTS ${tableIdent} (
+         id TEXT PRIMARY KEY,
+         name TEXT NOT NULL,
+         applied_at TIMESTAMPTZ NOT NULL DEFAULT now()
+       );`,
+    );
+
+    const appliedRows = await conn.query(`SELECT name FROM ${tableIdent};`);
+    const applied = new Set(appliedRows.rows.map((row) => row.name));
+
+    const idRows = await conn.query(`SELECT id FROM ${tableIdent};`);
+    let nextSeq =
+      idRows.rows.reduce((max, { id }) => {
+        const n = Number.parseInt(String(id), 10);
+        return Number.isNaN(n) ? max : Math.max(max, n);
+      }, 0) + 1;
+
+    let appliedCount = 0;
+    for (const { name, file } of migrations) {
+      if (applied.has(name)) continue;
+
+      const sql = readFileSync(file, "utf8");
+      const migrationId = String(nextSeq).padStart(5, "0");
+      nextSeq += 1;
+
+      await conn.query("BEGIN");
+      try {
+        await conn.query(sql);
+        await conn.query(`INSERT INTO ${tableIdent} (id, name) VALUES ($1, $2);`, [
+          migrationId,
+          name,
+        ]);
+        await conn.query("COMMIT");
+      } catch (error) {
+        await conn.query("ROLLBACK").catch(() => {});
+        throw new Error(`Failed to apply migration "${name}": ${error.message}`, {
+          cause: error,
+        });
+      }
+      appliedCount += 1;
+      console.log(`applied: ${name}`);
+    }
+
+    console.log(
+      appliedCount === 0
+        ? "db-migrate-local: database already up to date"
+        : `db-migrate-local: applied ${appliedCount} migration(s)`,
+    );
+  } finally {
+    await conn.end();
+  }
+};
+
+try {
+  await bootstrap();
+  await migrate();
+} catch (error) {
+  console.error(`db-migrate-local: ${error.message}`);
+  process.exit(1);
+}
diff --git a/selfhost/.env.example b/selfhost/.env.example
new file mode 100644
index 000000000..713d9b105
--- /dev/null
+++ b/selfhost/.env.example
@@ -0,0 +1,54 @@
+DATABASE_USERNAME=voidhash
+DATABASE_PASSWORD=replace-with-a-random-password
+DATABASE_NAME=voidhash
+DATABASE_SSL=false
+# Optional analytics profile. Leave CLICKHOUSE_URL unset for the core stack.
+# CLICKHOUSE_URL=http://clickhouse:8123
+CLICKHOUSE_DATABASE=voidhash
+CLICKHOUSE_ADMIN_USERNAME=voidhash_admin
+CLICKHOUSE_ADMIN_PASSWORD=replace-with-a-random-password
+CLICKHOUSE_USERNAME=voidhash_app
+CLICKHOUSE_PASSWORD=replace-with-a-random-password
+CLICKHOUSE_RO_USERNAME=voidhash_ro
+CLICKHOUSE_RO_PASSWORD=replace-with-a-random-password
+CLICKHOUSE_ANALYTICS_QUERY_USERNAME=voidhash_query
+CLICKHOUSE_ANALYTICS_QUERY_PASSWORD=replace-with-a-random-password
+CLICKHOUSE_HTTP_PORT=8123
+MIMIC_ROOT_USERNAME=root
+MIMIC_ROOT_PASSWORD=replace-with-a-random-password
+PUBLIC_BASE_URL=http://localhost:5001
+PUBLIC_FILES_BASE_URL=http://localhost:5001
+MIMIC_CORS_ORIGINS=http://localhost:3000,http://localhost:3003
+MIMIC_DOCUMENT_IDLE_NOTIFY_DEBOUNCE_MS=15000
+MIMIC_PORT=5001
+WORKOS_API_KEY=sk_test_replace-me
+WORKOS_CLIENT_ID=client_replace-me
+WORKOS_COOKIE_NAME=wos-session
+WORKOS_COOKIE_PASSWORD=replace-with-at-least-32-random-characters
+WORKOS_REDIRECT_URI=http://localhost:5001/api/auth/callback
+WORKOS_WEBHOOK_SECRET=whsec_replace-me
+# Optional offline Enterprise activation; configure the token and issuer verification key together.
+VOIDHASH_LICENSE_KEY=
+VOIDHASH_LICENSE_PUBLIC_KEY=
+ENCRYPTION_KEY=
+APNS_DELIVERY_ENABLED=false
+EXCHANGE_RATE_API_KEY=
+S3_ACCESS_KEY_ID=voidhash
+S3_SECRET_ACCESS_KEY=replace-with-a-random-password
+S3_REGION=us-east-1
+S3_PUBLIC_BUCKET=voidhash-public
+S3_ARTIFACT_BUCKET=voidhash-artifacts
+MINIO_API_PORT=9000
+MINIO_CONSOLE_PORT=9001
+SMTP_HOST=mailpit
+SMTP_PORT=1025
+SMTP_SECURE=false
+SMTP_REQUIRE_TLS=false
+SMTP_USERNAME=
+SMTP_PASSWORD=
+SMTP_FROM_ADDRESS=noreply@voidhash.local
+SMTP_FROM_NAME=Voidhash
+SMTP_TLS_REJECT_UNAUTHORIZED=true
+SMTP_VERIFY_ON_START=true
+MAILPIT_SMTP_PORT=1025
+MAILPIT_UI_PORT=8025
diff --git a/selfhost/LICENSE.md b/selfhost/LICENSE.md
new file mode 100644
index 000000000..be3f7b28e
--- /dev/null
+++ b/selfhost/LICENSE.md
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
diff --git a/selfhost/README.md b/selfhost/README.md
new file mode 100644
index 000000000..3f6bee161
--- /dev/null
+++ b/selfhost/README.md
@@ -0,0 +1,96 @@
+# Voidhash self-host
+
+The Compose composition runs the backend API and persistent Mimic RPC/WebSocket
+host in one Node process. PostgreSQL backs application data, entity state,
+queues, workflows, key-value storage, and cron leases; MinIO provides the two
+S3-compatible object stores. A private-network Node sidecar safely contains
+component compilation and manifest extraction. The application image includes
+headless Chromium, so an edited paywall is rendered to a persistent public PNG
+after its Mimic WebSocket session becomes idle. The stack uses the same
+application services and platform contracts as the Cloudflare composition.
+ClickHouse OSS is an optional `analytics` profile; without it, capture still
+processes identity state in PostgreSQL and analytics reads return empty results.
+
+## Start
+
+For an infrastructure and Mimic evaluation with local defaults:
+
+```sh
+docker compose -f selfhost/docker-compose.yml up --build --wait
+```
+
+For the complete dashboard and backend auth flow, create a WorkOS staging
+environment, copy `selfhost/.env.example` to `selfhost/.env`, fill in its WorkOS
+credentials, replace every example password, and run the same command with
+`--env-file selfhost/.env`. Community Edition v1 intentionally uses BYO WorkOS;
+the placeholder defaults only keep the unauthenticated API, health checks, and
+Mimic operator path available for evaluation.
+
+To enable durable analytics, start the optional profile and tell the application
+to use its private-network HTTP endpoint:
+
+```sh
+CLICKHOUSE_URL=http://clickhouse:8123 docker compose -f selfhost/docker-compose.yml \
+  --profile analytics up --build --wait
+```
+
+When using `selfhost/.env`, keep the same `CLICKHOUSE_URL` shell override and add
+`--env-file selfhost/.env`. The migration entrypoint creates the analytics schema,
+a read-write ingest user, a tenant-filtered readonly user, and a hardened query
+user. Replace all ClickHouse example passwords before exposing the deployment.
+
+The dashboard and API share `http://localhost:5001`; both `GET /health` and
+`GET /api/health` report readiness, and the OpenAPI document is available at
+`/api/docs/openapi.json`. Set the same origin plus `/api/auth/callback` as the
+WorkOS redirect URI. MinIO exposes its S3 API at `http://localhost:9000`
+and its console at `http://localhost:9001`. Local email is captured by Mailpit,
+whose inbox is at `http://localhost:8025`; configure the SMTP variables in
+`selfhost/.env` to use an external delivery service. The Node runtime verifies
+the configured SMTP transport at startup in Compose. PostgreSQL stays on the
+private Compose network and is not published to the host. With the analytics
+profile enabled, ClickHouse HTTP is available at `http://localhost:8123`.
+When running the Node entry outside its image, set `CHROMIUM_EXECUTABLE_PATH` to
+a compatible Chromium executable to enable paywall thumbnails; the remaining
+runtime stays available when it is unset.
+
+## Smoke test
+
+From a workspace checkout with dependencies installed:
+
+```sh
+./node_modules/.bin/tsx selfhost/smoke.mts
+```
+
+The smoke test creates a database, collection, and document through the public
+SDK, mints a document token, authenticates over WebSocket, verifies the initial
+snapshot, submits a transaction, and removes its fixtures. It also verifies the
+shared dashboard, the Community capability response, and app health, proving that
+the backend route graph and durable workflow runner boot without ClickHouse, which
+remains an optional profile.
+
+The release-grade smoke additionally requires the analytics profile and Docker
+access from the checkout:
+
+```sh
+docker compose -f selfhost/docker-compose.yml --profile analytics \
+  up -d clickhouse --wait
+CLICKHOUSE_URL=http://clickhouse:8123 docker compose -f selfhost/docker-compose.yml \
+  --profile analytics up --build --wait
+./node_modules/.bin/tsx selfhost/release-smoke.mts
+```
+
+It creates an isolated project and paywall in PostgreSQL, provisions and edits
+the paywall document through the public Mimic SDK and WebSocket surface, waits
+for Chromium to publish its PNG through the public file route, creates and
+publishes an immutable visual release, resolves that release through the SDK
+endpoint, and fetches the rendered HTML. It then submits an event through the
+capture API and verifies that event in ClickHouse. The release CI runs both
+smoke levels from a clean Compose stack.
+
+## Stop
+
+```sh
+docker compose -f selfhost/docker-compose.yml down
+```
+
+Add `-v` only when you also intend to delete the Postgres volume.
diff --git a/selfhost/docker-compose.yml b/selfhost/docker-compose.yml
new file mode 100644
index 000000000..f7b173f7e
--- /dev/null
+++ b/selfhost/docker-compose.yml
@@ -0,0 +1,219 @@
+name: voidhash-selfhost
+
+x-entry-image: &entry-image
+  image: ${VOIDHASH_SELFHOST_IMAGE:-voidhash-selfhost-entry:local}
+  build:
+    context: ..
+    dockerfile: selfhost/entry/Dockerfile
+
+services:
+  postgres:
+    image: postgres:16
+    environment:
+      POSTGRES_USER: ${DATABASE_USERNAME:-voidhash}
+      POSTGRES_PASSWORD: ${DATABASE_PASSWORD:-password}
+      POSTGRES_DB: ${DATABASE_NAME:-voidhash}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+  clickhouse:
+    image: clickhouse/clickhouse-server@sha256:a4e8cf46e526a06f4f52d22f7fa8d07472b55d3c896d7ca3f159e249be38ae62
+    profiles: ["analytics"]
+    environment:
+      CLICKHOUSE_DB: ${CLICKHOUSE_DATABASE:-voidhash}
+      CLICKHOUSE_USER: ${CLICKHOUSE_ADMIN_USERNAME:-voidhash_admin}
+      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_ADMIN_PASSWORD:-password}
+      CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: 1
+    ports:
+      - "${CLICKHOUSE_HTTP_PORT:-8123}:8123"
+    volumes:
+      - clickhouse_data:/var/lib/clickhouse
+      - clickhouse_logs:/var/log/clickhouse-server
+    ulimits:
+      nofile:
+        soft: 262144
+        hard: 262144
+    restart: unless-stopped
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "clickhouse-client --user \"$$CLICKHOUSE_USER\" --password \"$$CLICKHOUSE_PASSWORD\" --query 'SELECT 1'",
+        ]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+  minio:
+    image: minio/minio@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
+    command: ["server", "/data", "--console-address", ":9001"]
+    environment:
+      MINIO_ROOT_USER: ${S3_ACCESS_KEY_ID:-voidhash}
+      MINIO_ROOT_PASSWORD: ${S3_SECRET_ACCESS_KEY:-password}
+    ports:
+      - "${MINIO_API_PORT:-9000}:9000"
+      - "${MINIO_CONSOLE_PORT:-9001}:9001"
+    volumes:
+      - minio_data:/data
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://127.0.0.1:9000/minio/health/live"]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+  minio-init:
+    image: minio/mc@sha256:a7fe349ef4bd8521fb8497f55c6042871b2ae640607cf99d9bede5e9bdf11727
+    entrypoint: ["/bin/sh", "-c"]
+    command:
+      - |
+        mc alias set local http://minio:9000 "$${MINIO_ROOT_USER}" "$${MINIO_ROOT_PASSWORD}"
+        mc mb --ignore-existing "local/$${S3_PUBLIC_BUCKET}"
+        mc mb --ignore-existing "local/$${S3_ARTIFACT_BUCKET}"
+    environment:
+      MINIO_ROOT_USER: ${S3_ACCESS_KEY_ID:-voidhash}
+      MINIO_ROOT_PASSWORD: ${S3_SECRET_ACCESS_KEY:-password}
+      S3_PUBLIC_BUCKET: ${S3_PUBLIC_BUCKET:-voidhash-public}
+      S3_ARTIFACT_BUCKET: ${S3_ARTIFACT_BUCKET:-voidhash-artifacts}
+    depends_on:
+      minio:
+        condition: service_healthy
+    restart: "no"
+
+  mailpit:
+    image: axllent/mailpit@sha256:5a49a77c5bdbe7c5474450b4f46348d09949df3695257729c93a30369382d4f6
+    environment:
+      MP_DATABASE: /data/mailpit.db
+      MP_MAX_MESSAGES: 500
+    ports:
+      - "${MAILPIT_SMTP_PORT:-1025}:1025"
+      - "${MAILPIT_UI_PORT:-8025}:8025"
+    volumes:
+      - mailpit_data:/data
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "/mailpit", "readyz"]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+  migrate:
+    <<: *entry-image
+    command: ["./node_modules/.bin/tsx", "src/migrate.ts"]
+    environment: &database-environment
+      DATABASE_HOST: postgres
+      DATABASE_PORT: 5432
+      DATABASE_USERNAME: ${DATABASE_USERNAME:-voidhash}
+      DATABASE_PASSWORD: ${DATABASE_PASSWORD:-password}
+      DATABASE_NAME: ${DATABASE_NAME:-voidhash}
+      DATABASE_SSL: "false"
+      CLICKHOUSE_URL: ${CLICKHOUSE_URL:-}
+      CLICKHOUSE_DATABASE: ${CLICKHOUSE_DATABASE:-voidhash}
+      CLICKHOUSE_ADMIN_USERNAME: ${CLICKHOUSE_ADMIN_USERNAME:-voidhash_admin}
+      CLICKHOUSE_ADMIN_PASSWORD: ${CLICKHOUSE_ADMIN_PASSWORD:-password}
+      CLICKHOUSE_USERNAME: ${CLICKHOUSE_USERNAME:-voidhash_app}
+      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD:-password}
+      CLICKHOUSE_RO_USERNAME: ${CLICKHOUSE_RO_USERNAME:-voidhash_ro}
+      CLICKHOUSE_RO_PASSWORD: ${CLICKHOUSE_RO_PASSWORD:-password}
+      CLICKHOUSE_ANALYTICS_QUERY_USERNAME: ${CLICKHOUSE_ANALYTICS_QUERY_USERNAME:-voidhash_query}
+      CLICKHOUSE_ANALYTICS_QUERY_PASSWORD: ${CLICKHOUSE_ANALYTICS_QUERY_PASSWORD:-password}
+      ROOT_USERNAME: ${MIMIC_ROOT_USERNAME:-root}
+      ROOT_PASSWORD: ${MIMIC_ROOT_PASSWORD:-password}
+    depends_on:
+      postgres:
+        condition: service_healthy
+      minio-init:
+        condition: service_completed_successfully
+    restart: "no"
+
+  compiler:
+    <<: *entry-image
+    command: ["./node_modules/.bin/tsx", "src/compiler/main.ts"]
+    environment:
+      COMPILER_HOST: 0.0.0.0
+      COMPILER_PORT: 5002
+    expose:
+      - "5002"
+    restart: unless-stopped
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:5002/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))",
+        ]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+  app:
+    <<: *entry-image
+    environment:
+      <<: *database-environment
+      PORT: 5001
+      PUBLIC_BASE_URL: ${PUBLIC_BASE_URL:-http://localhost:5001}
+      PUBLIC_FILES_BASE_URL: ${PUBLIC_FILES_BASE_URL:-http://localhost:5001}
+      MIMIC_PUBLIC_BASE_URL: ${PUBLIC_BASE_URL:-http://localhost:5001}
+      MIMIC_DOCUMENT_IDLE_NOTIFY_DEBOUNCE_MS: ${MIMIC_DOCUMENT_IDLE_NOTIFY_DEBOUNCE_MS:-15000}
+      CORS_ORIGINS: ${MIMIC_CORS_ORIGINS:-http://localhost:3000,http://localhost:3003}
+      S3_ENDPOINT: http://minio:9000
+      S3_REGION: ${S3_REGION:-us-east-1}
+      S3_ACCESS_KEY_ID: ${S3_ACCESS_KEY_ID:-voidhash}
+      S3_SECRET_ACCESS_KEY: ${S3_SECRET_ACCESS_KEY:-password}
+      S3_FORCE_PATH_STYLE: "true"
+      S3_PUBLIC_BUCKET: ${S3_PUBLIC_BUCKET:-voidhash-public}
+      S3_ARTIFACT_BUCKET: ${S3_ARTIFACT_BUCKET:-voidhash-artifacts}
+      WORKOS_API_KEY: ${WORKOS_API_KEY:-sk_test_selfhost_not_configured}
+      WORKOS_CLIENT_ID: ${WORKOS_CLIENT_ID:-client_selfhost_not_configured}
+      WORKOS_COOKIE_NAME: ${WORKOS_COOKIE_NAME:-wos-session}
+      WORKOS_COOKIE_PASSWORD: ${WORKOS_COOKIE_PASSWORD:-selfhost-development-cookie-password-change-me}
+      WORKOS_REDIRECT_URI: ${WORKOS_REDIRECT_URI:-http://localhost:5001/api/auth/callback}
+      WORKOS_WEBHOOK_SECRET: ${WORKOS_WEBHOOK_SECRET:-whsec_selfhost_not_configured}
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY:-}
+      APNS_DELIVERY_ENABLED: ${APNS_DELIVERY_ENABLED:-false}
+      EXCHANGE_RATE_API_KEY: ${EXCHANGE_RATE_API_KEY:-}
+      COMPONENT_COMPILER_URL: http://compiler:5002
+      SMTP_HOST: ${SMTP_HOST:-mailpit}
+      SMTP_PORT: ${SMTP_PORT:-1025}
+      SMTP_SECURE: ${SMTP_SECURE:-false}
+      SMTP_REQUIRE_TLS: ${SMTP_REQUIRE_TLS:-false}
+      SMTP_USERNAME: ${SMTP_USERNAME:-}
+      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
+      SMTP_FROM_ADDRESS: ${SMTP_FROM_ADDRESS:-noreply@voidhash.local}
+      SMTP_FROM_NAME: ${SMTP_FROM_NAME:-Voidhash}
+      SMTP_TLS_REJECT_UNAUTHORIZED: ${SMTP_TLS_REJECT_UNAUTHORIZED:-true}
+      SMTP_VERIFY_ON_START: ${SMTP_VERIFY_ON_START:-true}
+    ports:
+      - "${MIMIC_PORT:-5001}:5001"
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+      compiler:
+        condition: service_healthy
+      mailpit:
+        condition: service_healthy
+    restart: unless-stopped
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:5001/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))",
+        ]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+volumes:
+  clickhouse_data:
+  clickhouse_logs:
+  mailpit_data:
+  minio_data:
+  postgres_data:
diff --git a/selfhost/entry/Dockerfile b/selfhost/entry/Dockerfile
new file mode 100644
index 000000000..c43338ad9
--- /dev/null
+++ b/selfhost/entry/Dockerfile
@@ -0,0 +1,37 @@
+FROM node:22-bookworm-slim AS build
+
+ENV PNPM_HOME=/pnpm
+ENV PATH=$PNPM_HOME:$PATH
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends ca-certificates \
+  && rm -rf /var/lib/apt/lists/* \
+  && corepack enable
+
+WORKDIR /repo
+COPY . .
+RUN corepack pnpm@11.1.3 install --frozen-lockfile --filter @voidhash/selfhost-entry... --filter @voidhash/www... --ignore-scripts
+RUN VITE_APP_API_URL= VITE_APP_ENV=production VOIDHASH_SELFHOST_BUNDLE=true corepack pnpm@11.1.3 exec turbo build --filter @voidhash/www
+RUN rm -rf /out && corepack pnpm@11.1.3 --config.ignore-scripts=true --config.node-linker=isolated --filter @voidhash/selfhost-entry deploy --prod --legacy /out
+RUN rm -rf /www && corepack pnpm@11.1.3 --config.ignore-scripts=true --config.node-linker=hoisted --filter @voidhash/www deploy --prod --legacy /www
+
+FROM node:22-bookworm-slim AS runtime
+
+ENV NODE_ENV=production
+ENV CHROMIUM_EXECUTABLE_PATH=/usr/bin/chromium-headless-shell
+ENV CHROMIUM_DISABLE_SANDBOX=true
+ENV WWW_SERVER_ENTRY=/www/dist/server/server.js
+ENV WWW_CLIENT_DIRECTORY=/www/dist/client
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends chromium-headless-shell \
+  && rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+COPY --from=build --chown=node:node /out/ ./
+COPY --from=build --chown=node:node /www/ /www/
+COPY --from=build --chown=node:node /repo/apps/www/dist/ /www/dist/
+
+USER node
+EXPOSE 5001
+HEALTHCHECK --interval=10s --timeout=3s --retries=10 \
+  CMD node -e "fetch('http://127.0.0.1:5001/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"
+
+CMD ["./node_modules/.bin/tsx", "src/main.ts"]
diff --git a/selfhost/entry/package.json b/selfhost/entry/package.json
new file mode 100644
index 000000000..249f5a78c
--- /dev/null
+++ b/selfhost/entry/package.json
@@ -0,0 +1,57 @@
+{
+  "name": "@voidhash/selfhost-entry",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./Backend": "./src/backend/Backend.ts",
+    "./CompilerClient": "./src/compiler/CompilerClient.ts",
+    "./MimicNode": "./src/mimic/MimicNode.ts",
+    "./PgControlStore": "./src/mimic/PgControlStore.ts"
+  },
+  "scripts": {
+    "migrate": "tsx src/migrate.ts",
+    "start": "tsx src/main.ts",
+    "start:compiler": "tsx src/compiler/main.ts",
+    "start:mimic": "tsx src/mimic/main.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "vp test run -c vitest.mts"
+  },
+  "dependencies": {
+    "@effect/platform-node": "catalog:",
+    "@effect/sql-pg": "catalog:",
+    "@voidhash/app-store-server-sdk": "workspace:*",
+    "@voidhash/api-contracts": "workspace:*",
+    "@voidhash/backend": "workspace:*",
+    "@voidhash/clickhouse-db": "workspace:*",
+    "@voidhash/core": "workspace:*",
+    "@voidhash/db": "workspace:*",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-db": "workspace:*",
+    "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywall-renderer-preact": "workspace:*",
+    "@voidhash/paywall-renderer-web-core": "workspace:*",
+    "@voidhash/platform": "workspace:*",
+    "@voidhash/platform-node": "workspace:*",
+    "@voidhash/paywalls": "workspace:*",
+    "effect": "catalog:",
+    "esbuild": "^0.25.10",
+    "jose": "catalog:",
+    "preact": "^10.25.4",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "srvx": "0.11.15",
+    "tsx": "^4.19.3",
+    "ws": "^8.20.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.12",
+    "@types/ws": "^8.18.1",
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:"
+  }
+}
diff --git a/selfhost/entry/src/backend/Analytics.ts b/selfhost/entry/src/backend/Analytics.ts
new file mode 100644
index 000000000..84aab08c4
--- /dev/null
+++ b/selfhost/entry/src/backend/Analytics.ts
@@ -0,0 +1,295 @@
+import {
+  AnalyticsIngestQueueMessage,
+  type AnalyticsIngestQueueMessageType,
+  type AnalyticsWriterMessageType,
+} from "@voidhash/core/domain/analyticsIngest/AnalyticsIngest";
+import { IdentityProjectionPublisher } from "@voidhash/core/services";
+import { AnalyticsIngestDlqService } from "@voidhash/core/services/analyticsIngest/AnalyticsIngestDlqService";
+import { AnalyticsDispatchService } from "@voidhash/core/services/analyticsIngest/AnalyticsDispatchService";
+import { AnalyticsWriterService } from "@voidhash/core/services/analyticsIngest/AnalyticsWriterService";
+import {
+  CaptureIngress,
+  CaptureIngressError,
+  type PublishableCaptureEvent,
+} from "@voidhash/core/services/analyticsIngest/CaptureIngress";
+import { DlqProducer } from "@voidhash/core/services/analyticsIngest/DlqProducer";
+import { EventCaptureService } from "@voidhash/core/services/analyticsIngest/EventCaptureService";
+import { EventProcessorService } from "@voidhash/core/services/analyticsIngest/EventProcessorService";
+import {
+  PolicyCounterStore,
+  PolicyStoreError,
+} from "@voidhash/core/services/analyticsIngest/PolicyCounterStore";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { PersonIdentityService } from "@voidhash/core/services/personIdentity/PersonIdentityService";
+import { Db } from "@voidhash/db";
+import { KeyValueStore } from "@voidhash/platform/KeyValueStore";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { QueueDriver } from "@voidhash/platform/Queue";
+import { PgKeyValueStoreLive } from "@voidhash/platform-node/KeyValueStore";
+import { NodePlatformRuntimeLive } from "@voidhash/platform-node/PlatformRuntime";
+import { PgQueueLive } from "@voidhash/platform-node/Queue";
+import { Context, Effect, Layer, Redacted } from "effect";
+
+import type { SelfhostRuntimeConfig } from "../config.ts";
+
+const analyticsQueueName = "analytics-ingest";
+const analyticsDeadLetterQueueName = "analytics-ingest-dlq";
+
+const minuteBucket = (value: Date): string => value.toISOString().slice(0, 16);
+const dayBucket = (value: Date): string => value.toISOString().slice(0, 10);
+
+const millisecondsUntilNextMinute = (value: Date): number => {
+  const nextMinute = new Date(value);
+  nextMinute.setUTCSeconds(0, 0);
+  nextMinute.setUTCMinutes(nextMinute.getUTCMinutes() + 1);
+  return Math.max(nextMinute.getTime() - value.getTime(), 0);
+};
+
+const makePolicyCounterStoreLive = Layer.effect(
+  PolicyCounterStore,
+  Effect.gen(function* () {
+    const store = yield* KeyValueStore;
+    const runtime = yield* PlatformRuntime;
+    const increment = (key: string, ttlMillis: number) =>
+      store.increment("analytics-policy", key, { ttlMillis }).pipe(
+        Effect.provideService(PlatformRuntime, runtime),
+        Effect.mapError(
+          (error) =>
+            new PolicyStoreError({
+              cause: error.cause,
+              message: "policy counter increment failed",
+            }),
+        ),
+      );
+    return PolicyCounterStore.of({
+      checkEventQuota: ({ now, projectId, quota }) =>
+        typeof quota !== "number" || quota < 1
+          ? Effect.succeed(true)
+          : increment(`events:${projectId}:${dayBucket(now)}`, 172_800_000).pipe(
+              Effect.map((count) => count <= quota),
+            ),
+      checkRequestLimit: ({ now, projectId, requestsPerMinute }) =>
+        typeof requestsPerMinute !== "number" || requestsPerMinute < 1
+          ? Effect.succeed({ allowed: true })
+          : increment(`requests:${projectId}:${minuteBucket(now)}`, 120_000).pipe(
+              Effect.map((count) =>
+                count <= requestsPerMinute
+                  ? { allowed: true }
+                  : {
+                      allowed: false,
+                      retryAfterMs: millisecondsUntilNextMinute(now),
+                    },
+              ),
+            ),
+    });
+  }),
+);
+
+const makeCaptureIngressLive = Layer.effect(
+  CaptureIngress,
+  Effect.gen(function* () {
+    const queues = yield* QueueDriver;
+    const runtime = yield* PlatformRuntime;
+    const dlq = yield* AnalyticsIngestDlqService;
+    const producer = queues.producer(analyticsQueueName, AnalyticsIngestQueueMessage);
+
+    const enqueueBatch = (events: ReadonlyArray<PublishableCaptureEvent>) =>
+      Effect.gen(function* () {
+        const publishable: AnalyticsIngestQueueMessageType[] = [];
+        for (const event of events) {
+          if (
+            event.routeClass !== "main" &&
+            event.routeClass !== "overflow" &&
+            event.routeClass !== "historical"
+          ) {
+            yield* dlq.recordFailure({
+              attemptCount: 0,
+              captureId: event.envelope.captureId,
+              distinctId: event.envelope.distinctId,
+              failureClass: "unsupported_route",
+              failureMessage: `route '${event.routeClass}' is not supported by queue ingest`,
+              payloadJson: event.envelope,
+              projectId: event.envelope.projectId,
+              routeClass: event.routeClass,
+              sourceSequence: 0,
+              sourceShard: "capture-ingress",
+            });
+            continue;
+          }
+          publishable.push({ envelope: event.envelope, lane: event.routeClass });
+        }
+        if (publishable.length > 0) {
+          yield* producer.publishBatch(publishable).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+          );
+        }
+      }).pipe(
+        Effect.mapError(
+          (error) =>
+            new CaptureIngressError({
+              cause:
+                typeof error === "object" && error !== null && "cause" in error
+                  ? String(error.cause)
+                  : String(error),
+              message: "failed to enqueue captured analytics events",
+            }),
+        ),
+      );
+
+    return CaptureIngress.of({ enqueueBatch });
+  }),
+);
+
+/** Builds the PostgreSQL queue, policy counter, and capture service runtime. */
+export const makeSelfhostAnalyticsRuntimeLive = (config: SelfhostRuntimeConfig) => {
+  const postgres = {
+    database: config.database.databaseName,
+    host: config.database.host,
+    password: Redacted.make(config.database.password),
+    port: config.database.port,
+    ...(config.database.ssl === undefined ? {} : { ssl: config.database.ssl }),
+    username: config.database.username,
+  };
+  const platform = Layer.mergeAll(
+    PgQueueLive(postgres),
+    PgKeyValueStoreLive(postgres),
+    NodePlatformRuntimeLive,
+  );
+  const database = Db.layer(config.database);
+  const dlq = AnalyticsIngestDlqService.layer.pipe(Layer.provide(database));
+  const policy = makePolicyCounterStoreLive.pipe(Layer.provide(platform));
+  const ingress = makeCaptureIngressLive.pipe(
+    Layer.provide(dlq),
+    Layer.provide(database),
+    Layer.provide(platform),
+  );
+  const capture = EventCaptureService.layer.pipe(
+    Layer.provide(policy),
+    Layer.provide(ingress),
+    Layer.provide(database),
+  );
+  const dispatch = AnalyticsDispatchService.layer.pipe(Layer.provide(ingress));
+  return Layer.mergeAll(platform, capture, dispatch);
+};
+
+/** Runs the analytics ingest and dead-letter consumers until their scope closes. */
+export const runSelfhostAnalyticsConsumers = (
+  config: SelfhostRuntimeConfig,
+  clickhouse?: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>,
+) =>
+  Effect.gen(function* () {
+    const queues = yield* QueueDriver;
+    const database = Db.layer(config.database);
+    const dlq = AnalyticsIngestDlqService.layer.pipe(Layer.provide(database));
+    const processor = EventProcessorService.layer.pipe(
+      Layer.provide(
+        DlqProducer.dbLive.pipe(
+          Layer.provide(dlq),
+          Layer.provide(database),
+        ),
+      ),
+      Layer.provide(
+        PersonIdentityService.layer.pipe(
+          Layer.provide(IdentityProjectionPublisher.noop),
+          Layer.provide(database),
+        ),
+      ),
+      Layer.provide(database),
+    );
+    const writerContext = clickhouse
+      ? yield* Effect.gen(function* () {
+          const clickhouseContext = yield* Layer.build(clickhouse);
+          const client = Context.get(
+            clickhouseContext,
+            ClickhouseWebClient.ClickhouseWebClient,
+          );
+          return yield* Layer.build(
+            AnalyticsWriterService.layerWithClickhouse(client).pipe(
+              Layer.provide(database),
+            ),
+          );
+        })
+      : yield* Layer.build(AnalyticsWriterService.layer.pipe(Layer.provide(database)));
+    const analyticsWriter = Context.get(writerContext, AnalyticsWriterService);
+
+    const consumeAnalytics = queues.consumeBatch(
+      analyticsQueueName,
+      AnalyticsIngestQueueMessage,
+      (messages) =>
+        Effect.gen(function* () {
+          const eventProcessor = yield* EventProcessorService;
+          const writerMessages: AnalyticsWriterMessageType[] = [];
+          for (const message of messages) {
+            const outputs = yield* eventProcessor.processRecordToOutputs({
+              capturedEvent: message.envelope,
+              headers: {},
+              lane: message.lane,
+              rawValue: JSON.stringify(message.envelope),
+              sourceOffset: message.envelope.captureId,
+              sourcePartition: 0,
+              sourceTopic: message.envelope.routing.targetTopic,
+            });
+            for (const processed of outputs.processedEvents) {
+              writerMessages.push({
+                kind: "processed",
+                messageId: processed.processedEventId,
+                value: processed,
+              });
+            }
+            for (const person of outputs.personEvents) {
+              writerMessages.push({
+                kind: "person",
+                messageId: `${person.projectId}:${person.personId}:${person.version}`,
+                value: person,
+              });
+            }
+            for (const identity of outputs.personIdentityEvents) {
+              writerMessages.push({
+                kind: "person-distinct-id",
+                messageId: `${identity.projectId}:${identity.distinctId}:${identity.version}`,
+                value: identity,
+              });
+            }
+          }
+          if (writerMessages.length > 0) {
+            yield* analyticsWriter.writeMessages(writerMessages);
+          }
+        }).pipe(Effect.provide(processor)),
+      {
+        batchSize: 100,
+        deadLetterQueue: analyticsDeadLetterQueueName,
+        maxRetries: 10,
+      },
+    );
+
+    const consumeDeadLetters = queues.consumeBatch(
+      analyticsDeadLetterQueueName,
+      AnalyticsIngestQueueMessage,
+      (messages) =>
+        Effect.gen(function* () {
+          const service = yield* AnalyticsIngestDlqService;
+          yield* Effect.forEach(
+            messages,
+            (message) =>
+              service.recordFailure({
+                attemptCount: 10,
+                captureId: message.envelope.captureId,
+                distinctId: message.envelope.distinctId,
+                failureClass: "ingest_retry_exhausted",
+                failureMessage: "exhausted analytics ingest queue retries",
+                payloadJson: message.envelope,
+                projectId: message.envelope.projectId,
+                routeClass: message.envelope.routing.routeClass,
+                sourceSequence: 0,
+                sourceShard: analyticsDeadLetterQueueName,
+              }),
+            { discard: true },
+          );
+        }).pipe(Effect.provide(dlq), Effect.provide(database)),
+      { batchSize: 100, maxRetries: 5 },
+    );
+
+    return yield* Effect.all([consumeAnalytics, consumeDeadLetters], {
+      concurrency: "unbounded",
+    });
+  });
diff --git a/selfhost/entry/src/backend/AuthTokenVerifier.ts b/selfhost/entry/src/backend/AuthTokenVerifier.ts
new file mode 100644
index 000000000..6717d5fec
--- /dev/null
+++ b/selfhost/entry/src/backend/AuthTokenVerifier.ts
@@ -0,0 +1,55 @@
+import {
+  AuthTokenVerifier,
+  JwtAuthError,
+  JwtAuthPayloadSchema,
+  type ValidatedJwt,
+} from "@voidhash/core/services/auth/AuthTokenVerifier";
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import { Effect, Layer, Schema } from "effect";
+import { createRemoteJWKSet, jwtVerify } from "jose";
+
+const decodePayload = Schema.decodeUnknownEffect(JwtAuthPayloadSchema);
+
+/** WorkOS JWT verifier using jose's process-local remote JWKS cache. */
+export const WorkosAuthTokenVerifierLive: Layer.Layer<AuthTokenVerifier, never, Workos> =
+  Layer.effect(
+    AuthTokenVerifier,
+    Effect.gen(function* () {
+      const workos = yield* Workos;
+      const jwks = createRemoteJWKSet(new URL(workos.getJwksUrl()), {
+        cooldownDuration: 30_000,
+        cacheMaxAge: 5 * 60_000,
+      });
+      return AuthTokenVerifier.of({
+        validateToken: (token) =>
+          Effect.tryPromise({
+            try: () => jwtVerify(token, jwks),
+            catch: (cause) =>
+              new JwtAuthError({
+                cause,
+                detail: cause instanceof Error ? cause.message : String(cause),
+                message: "JWT validation failed",
+              }),
+          }).pipe(
+            Effect.flatMap(({ payload }) =>
+              decodePayload(payload).pipe(
+                Effect.mapError(
+                  (cause) =>
+                    new JwtAuthError({
+                      cause,
+                      detail: String(cause),
+                      message: "JWT claims are invalid",
+                    }),
+                ),
+              ),
+            ),
+            Effect.map(
+              (payload): ValidatedJwt => ({
+                payload,
+                provider: "workos",
+              }),
+            ),
+          ),
+      });
+    }),
+  );
diff --git a/selfhost/entry/src/backend/Backend.ts b/selfhost/entry/src/backend/Backend.ts
new file mode 100644
index 000000000..c229de738
--- /dev/null
+++ b/selfhost/entry/src/backend/Backend.ts
@@ -0,0 +1,60 @@
+import {
+  BackendNoopIdentityProjectionPublisherLive,
+  BackendPaymentProviderStubsLive,
+  type InfraServices,
+} from "@voidhash/backend/src/BackendApp.ts";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import { PaywallAssetConfig } from "@voidhash/core/services/paywallLocations/PaywallAssetConfig";
+import { Db } from "@voidhash/db";
+import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
+import { NodePlatformRuntimeLive } from "@voidhash/platform-node/PlatformRuntime";
+import { Effect, Layer } from "effect";
+
+import type { SelfhostRuntimeConfig, SelfhostWorkosConfig } from "../config.ts";
+import { makeHttpComponentCompilerLive } from "../compiler/CompilerClient.ts";
+import { makeBackendMimicHostLive } from "./MimicHost.ts";
+import {
+  makePaywallArtifactStoreLive,
+  makePublicFileStoreLive,
+} from "./ObjectStores.ts";
+import { MemoryProjectSchemaCacheLive } from "./ProjectSchemaCache.ts";
+import { WorkosOrgPortLive } from "./Workos.ts";
+
+/** Builds the WorkOS SDK service from operator-provided credentials. */
+export const makeSelfhostWorkosLive = (config: SelfhostWorkosConfig): Layer.Layer<Workos> =>
+  Workos.layer({
+    apiKey: Effect.succeed(config.apiKey),
+    clientId: Effect.succeed(config.clientId),
+    cookieName: Effect.succeed(config.cookieName),
+    cookiePassword: Effect.succeed(config.cookiePassword),
+    webhookSecret: Effect.succeed(config.webhookSecret),
+  });
+
+/** Builds the provider-neutral backend infrastructure for the Node runtime. */
+export const makeBackendInfrastructureLive = (
+  config: SelfhostRuntimeConfig,
+  workos: Layer.Layer<Workos>,
+  clickhouse?: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>,
+): Layer.Layer<InfraServices, never, HostServiceTag> =>
+  Layer.mergeAll(
+    Db.layer(config.database),
+    workos,
+    WorkosOrgPortLive.pipe(Layer.provide(workos)),
+    Layer.succeed(PaywallAssetConfig, {
+      cdnUrl: config.publicBaseUrl,
+      publicBaseUrl: config.publicBaseUrl,
+    }),
+    makePaywallArtifactStoreLive(config.artifactObjectStore).pipe(
+      Layer.provide(NodePlatformRuntimeLive),
+    ),
+    makePublicFileStoreLive(config.publicObjectStore, config.publicFilesBaseUrl).pipe(
+      Layer.provide(NodePlatformRuntimeLive),
+    ),
+    BackendPaymentProviderStubsLive,
+    BackendNoopIdentityProjectionPublisherLive,
+    makeBackendMimicHostLive(config.publicBaseUrl),
+    makeHttpComponentCompilerLive(config.componentCompilerUrl),
+    MemoryProjectSchemaCacheLive,
+    clickhouse ?? Layer.empty,
+  );
diff --git a/selfhost/entry/src/backend/Background.ts b/selfhost/entry/src/backend/Background.ts
new file mode 100644
index 000000000..86a2fb9da
--- /dev/null
+++ b/selfhost/entry/src/backend/Background.ts
@@ -0,0 +1,123 @@
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { AnalyticsDispatchService } from "@voidhash/core/services/analyticsIngest/AnalyticsDispatchService";
+import { AnalyticsJanitorService } from "@voidhash/core/services/analyticsIngest/AnalyticsJanitorService";
+import { FxRateService } from "@voidhash/core/services/fxRates/FxRateService";
+import { APP_STORE_PARKED_SDK_TTL_DAYS } from "@voidhash/core/services/paymentProviders/appStore/payment-provider";
+import { AppStorePaymentProviderServiceQueries } from "@voidhash/core/services/paymentProviders/appStore/payment-provider-service-queries";
+import { PurchaseLedgerWorkerService } from "@voidhash/core/services/purchaseProcessing/PurchaseLedgerWorkerService";
+import { Db } from "@voidhash/db";
+import {
+  type CronJob,
+  CronScheduler,
+} from "@voidhash/platform/CronScheduler";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { PgCronSchedulerLive } from "@voidhash/platform-node/CronScheduler";
+import { Context, Effect, Layer, Redacted } from "effect";
+
+import type { SelfhostRuntimeConfig } from "../config.ts";
+
+const dayMillis = 24 * 60 * 60 * 1000;
+
+const postgresConfig = (config: SelfhostRuntimeConfig) => ({
+  database: config.database.databaseName,
+  host: config.database.host,
+  password: Redacted.make(config.database.password),
+  port: config.database.port,
+  ...(config.database.ssl === undefined ? {} : { ssl: config.database.ssl }),
+  username: config.database.username,
+});
+
+/** Builds the persisted jobs enabled by the current self-host configuration. */
+export const makeSelfhostCronJobs = (
+  config: SelfhostRuntimeConfig,
+  clickhouse?: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>,
+) =>
+  Effect.gen(function* () {
+    const dispatch = yield* AnalyticsDispatchService;
+    const database = Db.layer(config.database);
+    const purchaseContext = yield* Layer.build(
+      PurchaseLedgerWorkerService.layer.pipe(
+        Layer.provide(Layer.succeed(AnalyticsDispatchService, dispatch)),
+        Layer.provide(database),
+      ),
+    );
+    const purchaseWorker = Context.get(purchaseContext, PurchaseLedgerWorkerService);
+    const appStoreContext = yield* Layer.build(
+      AppStorePaymentProviderServiceQueries.layer.pipe(Layer.provide(database)),
+    );
+    const appStoreQueries = Context.get(
+      appStoreContext,
+      AppStorePaymentProviderServiceQueries,
+    );
+    const jobs: Array<CronJob<PlatformRuntime | Db>> = [
+      {
+        expression: "* * * * *",
+        name: "purchase-ledger-drain",
+        run: () =>
+          purchaseWorker
+            .poll({ batchSize: 100, maxAttempts: 8, staleClaimSeconds: 5 * 60 })
+            .pipe(Effect.asVoid),
+      },
+      {
+        expression: "0 4 * * *",
+        name: "app-store-expire-parked-notifications",
+        run: ({ scheduledTime }) =>
+          appStoreQueries
+            .expireStaleParkedSdkConfirmationRows({
+              olderThan: new Date(
+                scheduledTime.getTime() - APP_STORE_PARKED_SDK_TTL_DAYS * dayMillis,
+              ),
+            })
+            .pipe(Effect.asVoid),
+      },
+    ];
+
+    const exchangeRateApiKey = process.env.EXCHANGE_RATE_API_KEY?.trim();
+    if (exchangeRateApiKey) {
+      const fxContext = yield* Layer.build(
+        FxRateService.layer({
+          apiKey: Effect.succeed(exchangeRateApiKey),
+          baseUrl: Effect.succeed(
+            process.env.EXCHANGE_RATE_API_BASE_URL?.trim() ||
+              "https://v6.exchangerate-api.com/v6",
+          ),
+        }).pipe(Layer.provide(database)),
+      );
+      const fxRates = Context.get(fxContext, FxRateService);
+      jobs.push({
+        expression: "0 5 * * *",
+        name: "fx-rate-sync",
+        run: () => fxRates.refreshLatest().pipe(Effect.asVoid),
+      });
+    }
+
+    if (clickhouse) {
+      const janitorContext = yield* Layer.build(
+        AnalyticsJanitorService.layer.pipe(Layer.provide(clickhouse)),
+      );
+      const janitor = Context.get(janitorContext, AnalyticsJanitorService);
+      jobs.push({
+        expression: "*/5 * * * *",
+        name: "analytics-janitor",
+        run: () =>
+          janitor.squash({ batchSize: 1000, safetyWindowSeconds: 120 }).pipe(Effect.asVoid),
+      });
+    }
+
+    return jobs;
+  });
+
+/** Runs every enabled persisted cron job until the enclosing scope closes. */
+export const runSelfhostCronJobs = (
+  config: SelfhostRuntimeConfig,
+  clickhouse?: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>,
+) =>
+  Effect.gen(function* () {
+    const schedulerContext = yield* Layer.build(PgCronSchedulerLive(postgresConfig(config)));
+    const scheduler = Context.get(schedulerContext, CronScheduler);
+    const jobs = yield* makeSelfhostCronJobs(config, clickhouse);
+    return yield* Effect.all(
+      jobs.map((job) => scheduler.run(job, { pollIntervalMillis: 1_000 })),
+      { concurrency: "unbounded" },
+    );
+  });
diff --git a/selfhost/entry/src/backend/Clickhouse.ts b/selfhost/entry/src/backend/Clickhouse.ts
new file mode 100644
index 000000000..6d8fca13a
--- /dev/null
+++ b/selfhost/entry/src/backend/Clickhouse.ts
@@ -0,0 +1,143 @@
+import { ClickhouseDbLive } from "@voidhash/clickhouse-db";
+import { analyticsEventsMigrations } from "@voidhash/clickhouse-db/analytics/migration";
+import {
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+} from "@voidhash/clickhouse-db/analytics/schema";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { Effect, Layer, Schedule } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import type { SelfhostClickhouseConfig } from "../config.ts";
+
+const tenantTables = [
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+] as const;
+
+const queryTables = [
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+] as const;
+
+const identifierPattern = /^[A-Za-z_][A-Za-z0-9_]*$/;
+
+const assertIdentifier = (name: string, value: string): string => {
+  if (!identifierPattern.test(value)) {
+    throw new Error(`${name} must be a ClickHouse identifier`);
+  }
+  return value;
+};
+
+const makeClientLive = (config: SelfhostClickhouseConfig["readWrite"]) =>
+  ClickhouseDbLive(config).pipe(Layer.orDie);
+
+/** Builds the read-write, tenant-readonly, and hardened query client layers. */
+export const makeSelfhostClickhouseLayers = (config: SelfhostClickhouseConfig) => ({
+  analyticsQuery: makeClientLive(config.analyticsQuery),
+  readOnly: makeClientLive(config.readOnly),
+  readWrite: makeClientLive(config.readWrite),
+});
+
+const provisionSelfhostClickhouseAccess = (config: SelfhostClickhouseConfig) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const sql = yield* SqlClient.SqlClient;
+    const database = assertIdentifier("CLICKHOUSE_DATABASE", config.admin.database);
+    const adminUser = assertIdentifier("CLICKHOUSE_ADMIN_USERNAME", config.admin.username);
+    const readWriteUser = assertIdentifier("CLICKHOUSE_USERNAME", config.readWrite.username);
+    const readOnlyUser = assertIdentifier("CLICKHOUSE_RO_USERNAME", config.readOnly.username);
+    const queryUser = assertIdentifier(
+      "CLICKHOUSE_ANALYTICS_QUERY_USERNAME",
+      config.analyticsQuery.username,
+    );
+    const readWriteRole = `${database}_app_role`;
+    const readOnlyRole = `${database}_ro_role`;
+    const queryRole = `${database}_query_role`;
+
+    for (const [user, password] of [
+      [readWriteUser, config.readWrite.password],
+      [readOnlyUser, config.readOnly.password],
+      [queryUser, config.analyticsQuery.password],
+    ] as const) {
+      yield* ch.asCommand(sql`
+        CREATE USER IF NOT EXISTS ${sql(user)} IDENTIFIED WITH sha256_password BY ${password}
+      `);
+      yield* ch.asCommand(sql`
+        ALTER USER ${sql(user)} IDENTIFIED WITH sha256_password BY ${password}
+      `);
+    }
+
+    for (const role of [readWriteRole, readOnlyRole, queryRole]) {
+      yield* ch.asCommand(sql`CREATE ROLE IF NOT EXISTS ${sql(role)}`);
+    }
+    yield* ch.asCommand(sql`GRANT ALL ON ${sql(database)}.* TO ${sql(readWriteRole)}`);
+    for (const table of tenantTables) {
+      yield* ch.asCommand(
+        sql`GRANT SELECT ON ${sql(database)}.${sql(table)} TO ${sql(readOnlyRole)}`,
+      );
+    }
+    for (const table of queryTables) {
+      yield* ch.asCommand(
+        sql`GRANT SELECT ON ${sql(database)}.${sql(table)} TO ${sql(queryRole)}`,
+      );
+    }
+    yield* ch.asCommand(sql`GRANT ${sql(readWriteRole)} TO ${sql(readWriteUser)}`);
+    yield* ch.asCommand(sql`GRANT ${sql(readOnlyRole)} TO ${sql(readOnlyUser)}`);
+    yield* ch.asCommand(sql`GRANT ${sql(queryRole)} TO ${sql(queryUser)}`);
+    yield* ch.asCommand(
+      sql`ALTER USER ${sql(readWriteUser)} DEFAULT ROLE ${sql(readWriteRole)}`,
+    );
+    yield* ch.asCommand(sql`ALTER USER ${sql(readOnlyUser)} DEFAULT ROLE ${sql(readOnlyRole)}`);
+    yield* ch.asCommand(sql`ALTER USER ${sql(queryUser)} DEFAULT ROLE ${sql(queryRole)}`);
+    yield* ch.asCommand(sql`
+      ALTER USER ${sql(readOnlyUser)} SETTINGS
+        readonly = 1,
+        SQL_organization_id = '' CHANGEABLE_IN_READONLY
+    `);
+    yield* ch.asCommand(sql`
+      ALTER USER ${sql(queryUser)} SETTINGS
+        readonly = 1,
+        allow_ddl = 0,
+        allow_introspection_functions = 0,
+        max_execution_time = 30,
+        max_result_rows = 100000
+    `);
+
+    for (const table of tenantTables) {
+      const tenantPolicy = `${database}_${table}_tenant`;
+      const unrestrictedPolicy = `${database}_${table}_unrestricted`;
+      yield* ch.asCommand(sql`
+        CREATE ROW POLICY OR REPLACE ${sql(tenantPolicy)}
+        ON ${sql(database)}.${sql(table)}
+        FOR SELECT
+        USING getSetting('SQL_organization_id') != ''
+          AND organization_id = getSetting('SQL_organization_id')
+        TO ${sql(readOnlyRole)}
+      `);
+      yield* ch.asCommand(sql`
+        CREATE ROW POLICY OR REPLACE ${sql(unrestrictedPolicy)}
+        ON ${sql(database)}.${sql(table)}
+        FOR SELECT USING 1
+        TO ${sql(readWriteRole)}, ${sql(queryRole)}, ${sql(adminUser)}
+      `);
+    }
+  });
+
+/** Applies analytics schema migrations and reconciles local ClickHouse access roles. */
+export const migrateSelfhostClickhouse = (config: SelfhostClickhouseConfig | undefined) => {
+  if (config === undefined) return Effect.void;
+  const admin = ClickhouseDbLive(config.admin, [analyticsEventsMigrations]);
+  return provisionSelfhostClickhouseAccess(config).pipe(
+    Effect.provide(admin),
+    Effect.scoped,
+    Effect.retry({ schedule: Schedule.spaced("1 second"), times: 30 }),
+  );
+};
diff --git a/selfhost/entry/src/backend/IdentityCompletionWorkflow.ts b/selfhost/entry/src/backend/IdentityCompletionWorkflow.ts
new file mode 100644
index 000000000..b00e86638
--- /dev/null
+++ b/selfhost/entry/src/backend/IdentityCompletionWorkflow.ts
@@ -0,0 +1,195 @@
+import {
+  Db,
+  PersonIdentityKind,
+  PersonIdentityMigrationJobStatus,
+  eq,
+  personIdentityMigrationJobs,
+  sql,
+} from "@voidhash/db";
+import {
+  type PersonIdentityEventV1,
+  type PersonSnapshotEventV1,
+  nextMappingVersion,
+} from "@voidhash/core/domain/person/Person";
+import { IdentityMutationService } from "@voidhash/core/services/personIdentity/IdentityMutationService";
+import { generateId } from "@voidhash/core/utils/generate-id";
+import { WorkflowRunner } from "@voidhash/platform/Workflow";
+import { Effect, Layer, Schema } from "effect";
+
+import { IdentifyDistinctIdCompletionDefinition } from "./WorkflowDefinitions.ts";
+
+/** Registers the Postgres-backed source-identity completion workflow. */
+export const registerIdentityCompletionWorkflow = (
+  runner: WorkflowRunner["Service"],
+  database: Layer.Layer<Db>,
+) =>
+  runner.register(
+    IdentifyDistinctIdCompletionDefinition,
+    (input, context) =>
+      Effect.gen(function* () {
+        const jobId = input.jobId;
+        const recordFailure = (message: string) =>
+          Effect.gen(function* () {
+            const db = yield* Db;
+            yield* db
+              .update(personIdentityMigrationJobs)
+              .set({
+                lastError: message,
+                status: PersonIdentityMigrationJobStatus.Failed,
+              })
+              .where(eq(personIdentityMigrationJobs.id, jobId));
+          }).pipe(
+            Effect.provide(database),
+            Effect.catchCause((cause) =>
+              Effect.logError("Failed to record identity completion failure", {
+                cause,
+                jobId,
+              }),
+            ),
+          );
+
+        yield* context.step({
+          name: `mark-in-progress-${jobId}`,
+          success: Schema.Void,
+          execute: Effect.gen(function* () {
+            const db = yield* Db;
+            yield* db
+              .update(personIdentityMigrationJobs)
+              .set({
+                attemptCount: sql`${personIdentityMigrationJobs.attemptCount} + 1`,
+                lastError: null,
+                status: PersonIdentityMigrationJobStatus.InProgress,
+              })
+              .where(eq(personIdentityMigrationJobs.id, jobId));
+          }).pipe(Effect.provide(database)),
+        });
+
+        yield* context.step({
+          name: `migrate-${jobId}`,
+          success: Schema.Void,
+          execute: Effect.gen(function* () {
+            const db = yield* Db;
+            const identityMutations = yield* IdentityMutationService;
+            yield* db.transaction((tx) =>
+              Effect.gen(function* () {
+                const eventTimestamp = new Date(input.eventTimestamp);
+                const personEvents: PersonSnapshotEventV1[] = [];
+                const mappingEvents: PersonIdentityEventV1[] = [];
+
+                yield* identityMutations.lockDistinctIdRows(tx, {
+                  distinctIds: [input.previousDistinctId, input.distinctId],
+                  projectId: input.projectId,
+                });
+
+                const targetPerson = yield* tx.query.persons.findFirst({
+                  where: { id: input.targetPersonId },
+                });
+                if (!targetPerson) {
+                  return yield* Effect.die(
+                    new Error(`Target person ${input.targetPersonId} does not exist`),
+                  );
+                }
+
+                const sourceMapping = yield* identityMutations.findDistinctIdMapping(tx, {
+                  distinctId: input.previousDistinctId,
+                  projectId: input.projectId,
+                });
+                const sourcePersonless = yield* identityMutations.findPersonlessIdentity(tx, {
+                  distinctId: input.previousDistinctId,
+                  projectId: input.projectId,
+                });
+
+                yield* identityMutations.lockPersonRows(tx, {
+                  personIds: [
+                    input.targetPersonId,
+                    ...(sourceMapping ? [sourceMapping.rawPerson.id] : []),
+                  ],
+                });
+
+                const sourceIsConflictingIdentified =
+                  sourceMapping &&
+                  sourceMapping.canonicalPerson.id !== input.targetPersonId &&
+                  sourceMapping.mapping.kind === PersonIdentityKind.Identified;
+
+                if (!sourceIsConflictingIdentified) {
+                  const hadHistoricalEvents = Boolean(
+                    (sourceMapping && sourceMapping.rawPerson.id !== input.targetPersonId) ||
+                    (sourcePersonless && !sourcePersonless.isMerged),
+                  );
+                  const mappingVersion = nextMappingVersion({
+                    existingVersion: sourceMapping?.mapping.version,
+                    hadHistoricalEvents,
+                  });
+
+                  if (
+                    sourceMapping &&
+                    sourceMapping.mapping.personId !== input.targetPersonId &&
+                    sourceMapping.mapping.kind === PersonIdentityKind.Anonymous
+                  ) {
+                    const archivedSource = yield* identityMutations.archivePerson(tx, {
+                      eventTimestamp,
+                      mergedIntoPersonId: input.targetPersonId,
+                      person: sourceMapping.rawPerson,
+                    });
+                    personEvents.push(
+                      yield* identityMutations.toPersonEvent(tx, { person: archivedSource }),
+                    );
+                  }
+
+                  if (
+                    !sourceMapping ||
+                    sourceMapping.mapping.personId !== input.targetPersonId ||
+                    sourceMapping.mapping.version !== mappingVersion
+                  ) {
+                    mappingEvents.push(
+                      yield* identityMutations.upsertPersonIdentity(tx, {
+                        changedAt: eventTimestamp,
+                        distinctId: input.previousDistinctId,
+                        identityId: sourceMapping?.mapping.id ?? generateId("personDistinctId"),
+                        personId: input.targetPersonId,
+                        projectId: input.projectId,
+                        version: mappingVersion,
+                      }),
+                    );
+                  }
+
+                  if (sourcePersonless && !sourcePersonless.isMerged) {
+                    yield* identityMutations.markPersonlessIdentityMerged(tx, {
+                      distinctId: input.previousDistinctId,
+                      projectId: input.projectId,
+                    });
+                  }
+                }
+
+                yield* tx
+                  .update(personIdentityMigrationJobs)
+                  .set({ mappingEvents, personEvents })
+                  .where(eq(personIdentityMigrationJobs.id, jobId));
+              }),
+            );
+          }).pipe(
+            Effect.provide(IdentityMutationService.layer),
+            Effect.provide(database),
+            Effect.tapCause((cause) =>
+              recordFailure(`Failed to migrate source identity: ${String(cause)}`),
+            ),
+          ),
+        });
+
+        yield* context.step({
+          name: `mark-succeeded-${jobId}`,
+          success: Schema.Void,
+          execute: Effect.gen(function* () {
+            const db = yield* Db;
+            yield* db
+              .update(personIdentityMigrationJobs)
+              .set({
+                completedAt: new Date(),
+                lastError: null,
+                status: PersonIdentityMigrationJobStatus.Succeeded,
+              })
+              .where(eq(personIdentityMigrationJobs.id, jobId));
+          }).pipe(Effect.provide(database)),
+        });
+      }),
+  );
diff --git a/selfhost/entry/src/backend/MimicHost.ts b/selfhost/entry/src/backend/MimicHost.ts
new file mode 100644
index 000000000..516df9db1
--- /dev/null
+++ b/selfhost/entry/src/backend/MimicHost.ts
@@ -0,0 +1,249 @@
+import {
+  MimicHost,
+  MimicHostError,
+  type MimicHostShape,
+} from "@voidhash/core/services/paywalls/MimicHost";
+import {
+  HostServiceTag,
+  type HostService,
+} from "@voidhash/mimic-db/app/hostService";
+import { decodeTransactionEnvelope } from "@voidhash/mimic-db/document/transaction";
+import { serializeSchema } from "@voidhash/mimic-core";
+import {
+  createInitialPaywallDocumentInput,
+  PaywallDesignerDocument,
+} from "@voidhash/mimic-schema";
+import { Effect, Layer, Semaphore } from "effect";
+
+const databaseName = "voidhash";
+const collectionName = "paywalls";
+const editTokenTtlSeconds = 300;
+
+interface ProvisioningIds {
+  readonly collectionId: string;
+  readonly databaseId: string;
+}
+
+const hostError = (message: string, cause: unknown) =>
+  new MimicHostError({
+    cause: cause instanceof Error ? cause.message : String(cause),
+    message,
+  });
+
+const errorTag = (cause: unknown): string | undefined =>
+  typeof cause === "object" && cause !== null && "_tag" in cause
+    ? String(cause._tag)
+    : undefined;
+
+const isNotFound = (cause: unknown): boolean => errorTag(cause) === "NotFoundError";
+const isConflict = (cause: unknown): boolean => errorTag(cause) === "ConflictError";
+
+const canonicalize = (value: unknown): unknown => {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (typeof value !== "object" || value === null) return value;
+  return Object.fromEntries(
+    Object.entries(value)
+      .sort(([left], [right]) => left.localeCompare(right))
+      .map(([key, entry]) => [key, canonicalize(entry)]),
+  );
+};
+
+const schemaEquals = (left: unknown, right: unknown): boolean =>
+  JSON.stringify(canonicalize(left)) === JSON.stringify(canonicalize(right));
+
+const connectionUrl = (
+  publicBaseUrl: string,
+  ids: ProvisioningIds,
+  paywallId: string,
+): string => {
+  const base = new URL(publicBaseUrl);
+  base.protocol = base.protocol === "https:" ? "wss:" : "ws:";
+  base.pathname = `/ws/v1/databases/${encodeURIComponent(
+    ids.databaseId,
+  )}/collections/${encodeURIComponent(ids.collectionId)}/documents/${encodeURIComponent(
+    paywallId,
+  )}`;
+  base.search = "";
+  base.hash = "";
+  return base.toString();
+};
+
+const makeMimicHost = (host: HostService, publicBaseUrl: string): MimicHostShape => {
+  const schema = serializeSchema(PaywallDesignerDocument.schema);
+  const provisioningLock = Semaphore.makeUnsafe(1);
+  let cachedIds: ProvisioningIds | undefined;
+
+  const resolveDatabase = Effect.gen(function* () {
+    const listed = yield* host.listDatabases();
+    const existing = listed.find((database) => database.name === databaseName);
+    if (existing) return existing.id;
+    return yield* host.createDatabase(databaseName, "Voidhash paywall documents").pipe(
+      Effect.map((database) => database.id),
+      Effect.catch((cause) =>
+        isConflict(cause)
+          ? host.listDatabases().pipe(
+              Effect.flatMap((databases) => {
+                const database = databases.find((candidate) => candidate.name === databaseName);
+                return database
+                  ? Effect.succeed(database.id)
+                  : Effect.fail(cause);
+              }),
+            )
+          : Effect.fail(cause),
+      ),
+    );
+  });
+
+  const resolveCollection = (databaseId: string) =>
+    Effect.gen(function* () {
+      const listed = yield* host.listCollections(databaseId);
+      const existing = listed.find((collection) => collection.name === collectionName);
+      if (existing) {
+        if (!schemaEquals(existing.schema, schema)) {
+          yield* host.updateCollectionSchema(existing.id, schema);
+        }
+        return existing.id;
+      }
+      return yield* host.createCollection(databaseId, collectionName, schema).pipe(
+        Effect.map((collection) => collection.id),
+        Effect.catch((cause) =>
+          isConflict(cause)
+            ? host.listCollections(databaseId).pipe(
+                Effect.flatMap((collections) => {
+                  const collection = collections.find(
+                    (candidate) => candidate.name === collectionName,
+                  );
+                  return collection
+                    ? Effect.succeed(collection.id)
+                    : Effect.fail(cause);
+                }),
+              )
+            : Effect.fail(cause),
+        ),
+      );
+    });
+
+  const provision = provisioningLock.withPermit(
+    Effect.suspend(() => {
+      if (cachedIds) return Effect.succeed(cachedIds);
+      return resolveDatabase.pipe(
+        Effect.flatMap((databaseId) =>
+          resolveCollection(databaseId).pipe(
+            Effect.map((collectionId) => ({ collectionId, databaseId })),
+          ),
+        ),
+        Effect.tap((ids) => Effect.sync(() => void (cachedIds = ids))),
+        Effect.mapError((cause) => hostError("Failed to provision the mimic paywall store", cause)),
+      );
+    }),
+  );
+
+  const ensurePaywallDocument: MimicHostShape["ensurePaywallDocument"] = (paywallId) =>
+    provision.pipe(
+      Effect.flatMap(({ collectionId }) =>
+        host.getDocument(collectionId, paywallId).pipe(
+          Effect.asVoid,
+          Effect.catch((cause) =>
+            isNotFound(cause)
+              ? host
+                  .createDocument(
+                    collectionId,
+                    paywallId,
+                    PaywallDesignerDocument.encode(createInitialPaywallDocumentInput()),
+                  )
+                  .pipe(
+                  Effect.asVoid,
+                  Effect.catch((createCause) =>
+                    isConflict(createCause) ? Effect.void : Effect.fail(createCause),
+                  ),
+                )
+              : Effect.fail(cause),
+          ),
+        ),
+      ),
+      Effect.mapError((cause) =>
+        cause instanceof MimicHostError
+          ? cause
+          : hostError(`Failed to ensure paywall document ${paywallId}`, cause),
+      ),
+    );
+
+  const getDocument = (paywallId: string) =>
+    provision.pipe(
+      Effect.flatMap(({ collectionId }) => host.getDocument(collectionId, paywallId)),
+      Effect.mapError((cause) => hostError(`Failed to read paywall document ${paywallId}`, cause)),
+    );
+
+  return {
+    createPaywallEditToken: ({ paywallId }) =>
+      provision.pipe(
+        Effect.flatMap((ids) =>
+          host
+            .createDocumentAuthToken(
+              ids.collectionId,
+              paywallId,
+              "write",
+              [],
+              editTokenTtlSeconds,
+            )
+            .pipe(
+            Effect.map(({ token }) => ({
+              expiresAt: new Date(Date.now() + editTokenTtlSeconds * 1000),
+              token,
+              url: connectionUrl(publicBaseUrl, ids, paywallId),
+            })),
+          ),
+        ),
+        Effect.mapError((cause) => hostError(`Failed to mint a token for ${paywallId}`, cause)),
+      ),
+    ensurePaywallDocument,
+    getPaywallDocument: (paywallId) =>
+      getDocument(paywallId).pipe(
+        Effect.map((document) => {
+          const roots = PaywallDesignerDocument.decode(document.value);
+          return {
+            root: roots?.[0],
+            tree: document.value,
+            version: document.version,
+          };
+        }),
+      ),
+    getPaywallSnapshot: (paywallId) =>
+      getDocument(paywallId).pipe(
+        Effect.map((document) => PaywallDesignerDocument.decode(document.value)?.[0]),
+      ),
+    submitPaywallTransaction: (paywallId, input) =>
+      provision.pipe(
+        Effect.flatMap(({ collectionId }) =>
+          Effect.try({
+            try: () =>
+              decodeTransactionEnvelope({
+                baseVersion: input.baseVersion,
+                commands: input.commands,
+                id: crypto.randomUUID(),
+              }),
+            catch: (cause) => hostError("Invalid mimic transaction", cause),
+          }).pipe(
+            Effect.flatMap((transaction) =>
+              host.submitTransaction(collectionId, paywallId, transaction),
+            ),
+          ),
+        ),
+        Effect.map((result) => ({ accepted: result.accepted, version: result.version })),
+        Effect.mapError((cause) =>
+          cause instanceof MimicHostError
+            ? cause
+            : hostError(`Failed to update paywall document ${paywallId}`, cause),
+        ),
+      ),
+  };
+};
+
+/** In-process bridge from the local mimic host to the backend paywall port. */
+export const makeBackendMimicHostLive = (
+  publicBaseUrl: string,
+): Layer.Layer<MimicHost, never, HostServiceTag> =>
+  Layer.effect(
+    MimicHost,
+    Effect.map(HostServiceTag, (host) => makeMimicHost(host, publicBaseUrl)),
+  );
diff --git a/selfhost/entry/src/backend/ObjectStores.ts b/selfhost/entry/src/backend/ObjectStores.ts
new file mode 100644
index 000000000..eca8683f1
--- /dev/null
+++ b/selfhost/entry/src/backend/ObjectStores.ts
@@ -0,0 +1,95 @@
+import {
+  PaywallArtifactStore,
+  PaywallArtifactStoreError,
+} from "@voidhash/core/services/paywallDeploys/PaywallArtifactStore";
+import {
+  PublicFileStore,
+  PublicFileStoreError,
+} from "@voidhash/core/services/storage/PublicFileStore";
+import { ObjectStore, ObjectStoreError } from "@voidhash/platform/ObjectStore";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import {
+  S3ObjectStoreLive,
+  type S3ObjectStoreConfig,
+} from "@voidhash/platform-node/ObjectStore";
+import { Effect, Layer, Option } from "effect";
+
+const objectStoreCause = (cause: unknown): string =>
+  cause instanceof ObjectStoreError
+    ? `${cause.operation} ${cause.bucketName}/${cause.key}: ${cause.cause}`
+    : String(cause);
+
+const artifactError = (operation: string, cause: unknown) =>
+  new PaywallArtifactStoreError({
+    cause: objectStoreCause(cause),
+    message: `Failed to ${operation} a paywall artifact`,
+  });
+
+const publicFileError = (operation: string, cause: unknown) =>
+  new PublicFileStoreError({
+    cause: objectStoreCause(cause),
+    message: `Failed to ${operation} a public file`,
+  });
+
+/** S3-backed paywall artifact store bridge for the backend domain port. */
+export const makePaywallArtifactStoreLive = (
+  config: S3ObjectStoreConfig,
+): Layer.Layer<PaywallArtifactStore, never, PlatformRuntime> =>
+  Layer.effect(
+    PaywallArtifactStore,
+    Effect.gen(function* () {
+      const store = yield* ObjectStore;
+      const runtime = yield* PlatformRuntime;
+      const run = <A>(effect: Effect.Effect<A, unknown, PlatformRuntime>, operation: string) =>
+        effect.pipe(
+          Effect.provideService(PlatformRuntime, runtime),
+          Effect.mapError((cause) => artifactError(operation, cause)),
+        );
+      return {
+        bucketName: store.bucketName,
+        getObject: (key: string) =>
+          run(store.get(key), "read").pipe(
+            Effect.map(Option.match({ onNone: () => null, onSome: (value) => value })),
+          ),
+        head: (key: string) =>
+          run(store.head(key), "inspect").pipe(
+            Effect.map(
+              Option.match({
+                onNone: () => null,
+                onSome: ({ size }) => ({ size }),
+              }),
+            ),
+          ),
+        putObject: (input) => run(store.put(input), "write"),
+      };
+    }),
+  ).pipe(Layer.provide(S3ObjectStoreLive(config)));
+
+/** S3-backed public file store bridge for the backend domain port. */
+export const makePublicFileStoreLive = (
+  config: S3ObjectStoreConfig,
+  publicBaseUrl: string,
+): Layer.Layer<PublicFileStore, never, PlatformRuntime> =>
+  Layer.effect(
+    PublicFileStore,
+    Effect.gen(function* () {
+      const store = yield* ObjectStore;
+      const runtime = yield* PlatformRuntime;
+      const run = <A>(effect: Effect.Effect<A, unknown, PlatformRuntime>, operation: string) =>
+        effect.pipe(
+          Effect.provideService(PlatformRuntime, runtime),
+          Effect.mapError((cause) => publicFileError(operation, cause)),
+        );
+      const base = publicBaseUrl.replace(/\/$/, "");
+      return {
+        deleteObject: (key: string) => run(store.delete(key), "delete"),
+        getObject: (key: string) =>
+          run(store.get(key), "read").pipe(
+            Effect.map(Option.match({ onNone: () => null, onSome: (value) => value })),
+          ),
+        publicBaseUrl: base,
+        publicUrl: (key: string) => `${base}/files/${key}`,
+        putObject: (input) => run(store.put(input), "write"),
+      };
+    }),
+  ).pipe(Layer.provide(S3ObjectStoreLive(config)));
diff --git a/selfhost/entry/src/backend/PaymentProviderWorkflows.ts b/selfhost/entry/src/backend/PaymentProviderWorkflows.ts
new file mode 100644
index 000000000..005f9f092
--- /dev/null
+++ b/selfhost/entry/src/backend/PaymentProviderWorkflows.ts
@@ -0,0 +1,117 @@
+import { AppStoreWebhookHandlerService } from "@voidhash/core/services/paymentProviders/appStore/app-store-webhook-handler-service";
+import { AppStoreReconciliationService } from "@voidhash/core/services/paymentProviders/appStore/app-store-reconciliation-service";
+import { GooglePlayWebhookHandlerService } from "@voidhash/core/services/paymentProviders/googlePlay/webhook-handler-service";
+import { StripeWebhookHandlerService } from "@voidhash/core/services/paymentProviders/stripe/stripe-webhook-handler-service";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { Db } from "@voidhash/db";
+import { WorkflowRunner } from "@voidhash/platform/Workflow";
+import { Effect, Layer, Schema } from "effect";
+
+import {
+  makeAppStoreReconciliationLive,
+  makeAppStoreReplayHandlerLive,
+  makeGooglePlayReplayHandlerLive,
+  makeStripeReplayHandlerLive,
+} from "./PaymentWorkflowLayers.ts";
+import {
+  AppStoreReconcileOriginalTransactionDefinition,
+  AppStoreReplayParkedNotificationsDefinition,
+  AppStoreReplayParkedSdkNotificationsDefinition,
+  GooglePlayReplayParkedNotificationsDefinition,
+  StripeReplayParkedNotificationsDefinition,
+} from "./WorkflowDefinitions.ts";
+
+/** Registers the durable self-host payment-provider replay and reconciliation jobs. */
+export const registerPaymentProviderWorkflows = (
+  runner: WorkflowRunner["Service"],
+  database: Layer.Layer<Db>,
+  completion: IdentifyDistinctIdCompletionWorkflow["Service"],
+) => {
+  const appStoreReplay = makeAppStoreReplayHandlerLive(database);
+  const appStoreReconciliation = makeAppStoreReconciliationLive(database);
+  const googlePlayReplay = makeGooglePlayReplayHandlerLive(database);
+  const stripeReplay = makeStripeReplayHandlerLive(database);
+  const provideCompletion = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+    effect.pipe(
+      Effect.provideService(IdentifyDistinctIdCompletionWorkflow, completion),
+    );
+
+  return Effect.all(
+    [
+      runner.register(
+        AppStoreReplayParkedNotificationsDefinition,
+        (input, context) =>
+          context.step({
+            name: `app-store-replay:${input.paymentProviderConfigurationId}:${input.providerProductKey}`,
+            success: Schema.Void,
+            execute: provideCompletion(
+              Effect.gen(function* () {
+                const handler = yield* AppStoreWebhookHandlerService;
+                yield* handler.replayParkedNotificationsForProductMapping(input);
+              }).pipe(Effect.provide(appStoreReplay)),
+            ),
+          }),
+      ),
+      runner.register(
+        AppStoreReplayParkedSdkNotificationsDefinition,
+        (input, context) =>
+          context.step({
+            name: `app-store-replay-sdk:${input.paymentProviderConfigurationId}:${input.originalTransactionId}`,
+            success: Schema.Void,
+            execute: provideCompletion(
+              Effect.gen(function* () {
+                const handler = yield* AppStoreWebhookHandlerService;
+                yield* handler.replayParkedNotificationsForSdkConfirmation(input);
+              }).pipe(Effect.provide(appStoreReplay)),
+            ),
+          }),
+      ),
+      runner.register(
+        AppStoreReconcileOriginalTransactionDefinition,
+        (input, context) =>
+          context.step({
+            name: `app-store-reconcile:${input.paymentProviderConfigurationId}:${input.originalTransactionId}:${input.reason}`,
+            success: Schema.Void,
+            execute: provideCompletion(
+              Effect.gen(function* () {
+                const reconciliation = yield* AppStoreReconciliationService;
+                yield* reconciliation.reconcileOriginalTransaction({
+                  ...input,
+                  triggeredAt: new Date(input.triggeredAt),
+                });
+              }).pipe(Effect.provide(appStoreReconciliation)),
+            ),
+          }),
+      ),
+      runner.register(
+        GooglePlayReplayParkedNotificationsDefinition,
+        (input, context) =>
+          context.step({
+            name: `google-play-replay:${input.paymentProviderConfigurationId}:${input.providerProductKey}`,
+            success: Schema.Void,
+            execute: provideCompletion(
+              Effect.gen(function* () {
+                const handler = yield* GooglePlayWebhookHandlerService;
+                yield* handler.replayParkedNotificationsForProductMapping(input);
+              }).pipe(Effect.provide(googlePlayReplay)),
+            ),
+          }),
+      ),
+      runner.register(
+        StripeReplayParkedNotificationsDefinition,
+        (input, context) =>
+          context.step({
+            name: `stripe-replay:${input.paymentProviderConfigurationId}:${input.providerProductKey}`,
+            success: Schema.Void,
+            execute: provideCompletion(
+              Effect.gen(function* () {
+                const handler = yield* StripeWebhookHandlerService;
+                yield* handler.replayParkedNotificationsForProductMapping(input);
+              }).pipe(Effect.provide(stripeReplay)),
+            ),
+          }),
+      ),
+    ],
+    { concurrency: "unbounded", discard: true },
+  );
+};
diff --git a/selfhost/entry/src/backend/PaymentWorkflowLayers.ts b/selfhost/entry/src/backend/PaymentWorkflowLayers.ts
new file mode 100644
index 000000000..06ccab2b2
--- /dev/null
+++ b/selfhost/entry/src/backend/PaymentWorkflowLayers.ts
@@ -0,0 +1,90 @@
+import { AppStoreServerSdk } from "@voidhash/app-store-server-sdk";
+import {
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseProcessingService,
+} from "@voidhash/core/services";
+import { FxRateService } from "@voidhash/core/services/fxRates/FxRateService";
+import { AppStoreWebhookHandlerService } from "@voidhash/core/services/paymentProviders/appStore/app-store-webhook-handler-service";
+import { AppStorePaymentProvider } from "@voidhash/core/services/paymentProviders/appStore/payment-provider";
+import { AppStoreReconciliationService } from "@voidhash/core/services/paymentProviders/appStore/app-store-reconciliation-service";
+import { GooglePlayWebhookHandlerService } from "@voidhash/core/services/paymentProviders/googlePlay/webhook-handler-service";
+import { GooglePlayServerApi } from "@voidhash/core/services/paymentProviders/googlePlay/sdk-context";
+import { StripeWebhookHandlerService } from "@voidhash/core/services/paymentProviders/stripe/stripe-webhook-handler-service";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { Db } from "@voidhash/db";
+import { Effect, Layer } from "effect";
+import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+
+const fxRates = FxRateService.layer({
+  apiKey: Effect.sync(() => process.env.EXCHANGE_RATE_API_KEY ?? ""),
+  baseUrl: Effect.sync(
+    () => process.env.EXCHANGE_RATE_API_BASE_URL ?? "https://v6.exchangerate-api.com/v6",
+  ),
+});
+
+const purchaseProcessing = PurchaseProcessingService.layer.pipe(
+  Layer.provide(PerkGrantService.layer),
+);
+
+const personIdentity = PersonIdentityService.layer.pipe(
+  Layer.provide(IdentityProjectionPublisher.noop),
+);
+
+const paymentCrypto = PaymentConfigSecretCrypto.layer({
+  key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+});
+
+const appStoreRuntime = Layer.mergeAll(
+  AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer)),
+  fxRates,
+  purchaseProcessing,
+  personIdentity,
+  paymentCrypto,
+);
+
+const googlePlayRuntime = Layer.mergeAll(
+  GooglePlayServerApi.layer.pipe(Layer.provide(FetchHttpClient.layer)),
+  fxRates,
+  purchaseProcessing,
+  personIdentity,
+  paymentCrypto,
+);
+
+const stripeRuntime = Layer.mergeAll(
+  FetchHttpClient.layer,
+  fxRates,
+  purchaseProcessing,
+  personIdentity,
+  paymentCrypto,
+);
+
+/** Builds the App Store parked-notification handler for a self-host database. */
+export const makeAppStoreReplayHandlerLive = (database: Layer.Layer<Db>) =>
+  AppStoreWebhookHandlerService.layer.pipe(
+    Layer.provide(appStoreRuntime),
+    Layer.provide(database),
+  );
+
+/** Builds the App Store reconciliation handler for a self-host database. */
+export const makeAppStoreReconciliationLive = (database: Layer.Layer<Db>) =>
+  AppStoreReconciliationService.layer.pipe(
+    Layer.provide(AppStorePaymentProvider.layer),
+    Layer.provide(appStoreRuntime),
+    Layer.provide(database),
+  );
+
+/** Builds the Google Play parked-notification handler for a self-host database. */
+export const makeGooglePlayReplayHandlerLive = (database: Layer.Layer<Db>) =>
+  GooglePlayWebhookHandlerService.layer.pipe(
+    Layer.provide(googlePlayRuntime),
+    Layer.provide(database),
+  );
+
+/** Builds the Stripe parked-notification handler for a self-host database. */
+export const makeStripeReplayHandlerLive = (database: Layer.Layer<Db>) =>
+  StripeWebhookHandlerService.layer.pipe(
+    Layer.provide(stripeRuntime),
+    Layer.provide(database),
+  );
diff --git a/selfhost/entry/src/backend/ProjectSchemaCache.ts b/selfhost/entry/src/backend/ProjectSchemaCache.ts
new file mode 100644
index 000000000..61ef17768
--- /dev/null
+++ b/selfhost/entry/src/backend/ProjectSchemaCache.ts
@@ -0,0 +1,31 @@
+import { ProjectSchemaCache } from "@voidhash/core/services";
+import { Effect, Layer } from "effect";
+
+interface CacheEntry {
+  readonly expiresAt: number;
+  readonly schema: unknown;
+}
+
+/** In-memory project-schema cache for a single Node process. */
+export const MemoryProjectSchemaCacheLive = Layer.sync(ProjectSchemaCache, () => {
+  const entries = new Map<string, CacheEntry>();
+  return {
+    getByName: (projectId: string) => ({
+      get: () =>
+        Effect.sync(() => {
+          const entry = entries.get(projectId);
+          if (!entry) return undefined;
+          if (entry.expiresAt <= Date.now()) {
+            entries.delete(projectId);
+            return undefined;
+          }
+          return entry.schema;
+        }),
+      invalidate: () => Effect.sync(() => void entries.delete(projectId)),
+      set: (schema: unknown, ttlMs: number) =>
+        Effect.sync(() => {
+          entries.set(projectId, { expiresAt: Date.now() + ttlMs, schema });
+        }),
+    }),
+  };
+});
diff --git a/selfhost/entry/src/backend/Push.ts b/selfhost/entry/src/backend/Push.ts
new file mode 100644
index 000000000..454b93ed2
--- /dev/null
+++ b/selfhost/entry/src/backend/Push.ts
@@ -0,0 +1,118 @@
+import { PushDeliveryQueueMessage } from "@voidhash/core/domain/notifications/PushDeliveryQueueMessage";
+import {
+  AuditLogPort,
+  FirebaseCloudMessagingServiceConfigLive,
+  makeApplePushNotificationServiceConfigLive,
+  NotificationTokenService,
+  PersonNotificationTokenService,
+  PushDeliveryService,
+} from "@voidhash/core/services";
+import {
+  PushDeliveryDispatch,
+  PushDeliveryDispatchError,
+} from "@voidhash/core/services/notifications/PushDeliveryDispatch";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { Db } from "@voidhash/db";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { QueueDriver } from "@voidhash/platform/Queue";
+import { Context, Effect, Layer } from "effect";
+
+import type { SelfhostRuntimeConfig } from "../config.ts";
+
+const pushDeliveryQueueName = "push-delivery";
+const pushDeliveryDeadLetterQueueName = "push-delivery-dlq";
+const pushDeliveryMaxRetries = 6;
+
+/** Builds the PostgreSQL queue-backed dispatch port used by notification sends. */
+export const SelfhostPushDeliveryDispatchLive = Layer.effect(
+  PushDeliveryDispatch,
+  Effect.gen(function* () {
+    const queues = yield* QueueDriver;
+    const runtime = yield* PlatformRuntime;
+    const producer = queues.producer(pushDeliveryQueueName, PushDeliveryQueueMessage);
+    return PushDeliveryDispatch.of({
+      dispatch: (items) =>
+        producer
+          .publishBatch(
+            items.map((item) => ({
+              projectId: item.projectId,
+              provider: item.provider,
+              pushNotificationDeliveryId: item.pushNotificationDeliveryId,
+              pushNotificationSendId: item.pushNotificationSendId,
+            })),
+          )
+          .pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.mapError(
+              (error) => new PushDeliveryDispatchError({ cause: error.cause }),
+            ),
+          ),
+    });
+  }),
+);
+
+const makePushDeliveryServiceLive = (config: SelfhostRuntimeConfig) => {
+  const database = Db.layer(config.database);
+  const crypto = PaymentConfigSecretCrypto.layer({
+    key: Effect.sync(() => process.env.ENCRYPTION_KEY ?? ""),
+  });
+  const providers = Layer.mergeAll(
+    FirebaseCloudMessagingServiceConfigLive,
+    makeApplePushNotificationServiceConfigLive({
+      deliveryEnabled: Effect.sync(() => process.env.APNS_DELIVERY_ENABLED === "true"),
+    }),
+  ).pipe(Layer.provide(crypto));
+  const tokens = NotificationTokenService.layer.pipe(
+    Layer.provide(PersonNotificationTokenService.layer),
+    Layer.provide(AuditLogPort.noop),
+  );
+  return PushDeliveryService.layer.pipe(
+    Layer.provide(tokens),
+    Layer.provide(providers),
+    Layer.provide(database),
+  );
+};
+
+/** Runs the push-delivery and dead-letter consumers until their scope closes. */
+export const runSelfhostPushDeliveryConsumers = (
+  config: SelfhostRuntimeConfig,
+) =>
+  Effect.gen(function* () {
+    const queues = yield* QueueDriver;
+    const serviceContext = yield* Layer.build(
+      makePushDeliveryServiceLive(config),
+    );
+    const service = Context.get(serviceContext, PushDeliveryService);
+
+    const consumeDeliveries = queues.consumeBatch(
+      pushDeliveryQueueName,
+      PushDeliveryQueueMessage,
+      (messages) =>
+        Effect.forEach(
+          messages,
+          (message) => service.processDelivery(message.pushNotificationDeliveryId),
+          { discard: true },
+        ),
+      {
+        batchSize: 20,
+        deadLetterQueue: pushDeliveryDeadLetterQueueName,
+        maxRetries: pushDeliveryMaxRetries,
+        retryDelayMillis: 10_000,
+      },
+    );
+    const consumeDeadLetters = queues.consumeBatch(
+      pushDeliveryDeadLetterQueueName,
+      PushDeliveryQueueMessage,
+      (messages) =>
+        Effect.forEach(
+          messages,
+          (message) => service.markExhausted(message.pushNotificationDeliveryId),
+          { discard: true },
+        ),
+      { batchSize: 20, maxRetries: 5 },
+    );
+
+    return yield* Effect.all([consumeDeliveries, consumeDeadLetters], {
+      concurrency: "unbounded",
+    });
+  });
diff --git a/selfhost/entry/src/backend/Thumbnails.ts b/selfhost/entry/src/backend/Thumbnails.ts
new file mode 100644
index 000000000..131975e05
--- /dev/null
+++ b/selfhost/entry/src/backend/Thumbnails.ts
@@ -0,0 +1,158 @@
+import { MimicDocumentIdleMessage } from "@voidhash/mimic-db/ws/idle-notify";
+import {
+  HtmlScreenshot,
+  HtmlScreenshotError,
+} from "@voidhash/core/services/paywallThumbnails/HtmlScreenshot";
+import { PaywallThumbnailService } from "@voidhash/core/services/paywallThumbnails/PaywallThumbnailService";
+import {
+  SnapshotImageRenderer,
+  SnapshotImageRenderError,
+  type SnapshotImageRendererShape,
+} from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
+import type {
+  PreviewTree,
+  SnapshotNode,
+} from "@voidhash/paywall-renderer-web-core";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { QueueDriver } from "@voidhash/platform/Queue";
+import { Screenshot } from "@voidhash/platform/Screenshot";
+import {
+  ChromiumScreenshotLive,
+  type ChromiumScreenshotConfig,
+} from "@voidhash/platform-node/Screenshot";
+import { NodePlatformRuntimeLive } from "@voidhash/platform-node/PlatformRuntime";
+import { Cause, Effect, Layer } from "effect";
+
+import { mimicDocumentIdleQueueName } from "../mimic/MimicDocumentIdleQueue.ts";
+
+/** Bridges the generic Node screenshot adapter to the thumbnail-domain port. */
+export const SelfhostHtmlScreenshotLive = Layer.effect(
+  HtmlScreenshot,
+  Effect.gen(function* () {
+    const screenshot = yield* Screenshot;
+    const runtime = yield* PlatformRuntime;
+    return HtmlScreenshot.of({
+      screenshot: (options) =>
+        screenshot.renderPng(options).pipe(
+          Effect.provideService(PlatformRuntime, runtime),
+          Effect.mapError(
+            (error) =>
+              new HtmlScreenshotError({
+                cause: error.cause,
+                message: `Chromium screenshot ${error.operation} failed`,
+              }),
+          ),
+        ),
+    });
+  }),
+);
+
+/** Renders a Mimic paywall snapshot to static HTML, then to PNG bytes. */
+export const SelfhostSnapshotImageRendererLive = Layer.effect(
+  SnapshotImageRenderer,
+  Effect.gen(function* () {
+    const htmlScreenshot = yield* HtmlScreenshot;
+    const { renderPaywallToHtml } = yield* Effect.promise(async () => {
+      const preact = await import("preact");
+      const runtimeGlobals = globalThis as unknown as {
+        React?: typeof preact;
+      };
+      // The production Node entry executes workspace TSX through `tsx`, whose
+      // classic transform references the React global. Point that compatibility
+      // hook at Preact before the renderer evaluates any JSX.
+      runtimeGlobals.React ??= preact;
+      return import("@voidhash/paywall-renderer-preact");
+    });
+
+    return {
+      render: ({ snapshot, componentTrees, width, height, deviceScaleFactor }) =>
+        Effect.gen(function* () {
+          const html = yield* Effect.try({
+            try: () =>
+              renderPaywallToHtml(snapshot as SnapshotNode, {
+                componentArtifacts: {
+                  trees: componentTrees as Record<
+                    string,
+                    Record<string, PreviewTree>
+                  >,
+                },
+                hydrate: false,
+              }).html,
+            catch: (cause) =>
+              new SnapshotImageRenderError({
+                cause: cause instanceof Error ? cause.message : String(cause),
+                message: "rendering the paywall snapshot to HTML failed",
+              }),
+          });
+
+          return yield* htmlScreenshot
+            .screenshot({ deviceScaleFactor, height, html, width })
+            .pipe(
+              Effect.mapError(
+                (error) =>
+                  new SnapshotImageRenderError({
+                    cause: error.cause,
+                    message: error.message,
+                  }),
+              ),
+            );
+        }),
+    } satisfies SnapshotImageRendererShape;
+  }),
+);
+
+/** Builds the Chromium-backed thumbnail service for the self-host runtime. */
+export const makeSelfhostPaywallThumbnailServiceLive = (
+  screenshotConfig: ChromiumScreenshotConfig,
+) => {
+  const htmlScreenshot = SelfhostHtmlScreenshotLive.pipe(
+    Layer.provide(
+      Layer.merge(
+        ChromiumScreenshotLive(screenshotConfig),
+        NodePlatformRuntimeLive,
+      ),
+    ),
+  );
+  const renderer = SelfhostSnapshotImageRendererLive.pipe(
+    Layer.provide(htmlScreenshot),
+  );
+  return PaywallThumbnailService.layer.pipe(Layer.provide(renderer));
+};
+
+/** Runs the best-effort paywall-thumbnail queue consumer until interrupted. */
+export const runSelfhostPaywallThumbnailConsumer = Effect.gen(function* () {
+  const queues = yield* QueueDriver;
+  const runtime = yield* PlatformRuntime;
+  const service = yield* PaywallThumbnailService;
+
+  return yield* queues
+    .consumeBatch(
+      mimicDocumentIdleQueueName,
+      MimicDocumentIdleMessage,
+      (messages) =>
+        Effect.forEach(
+          messages,
+          (message) =>
+            service
+              .handleDocumentIdle({
+                documentId: message.documentId,
+                seq: message.seq,
+              })
+              .pipe(
+                Effect.tapCause((cause) =>
+                  Effect.logWarning(
+                    "paywall thumbnail render failed; will retry then drop",
+                    {
+                      cause: Cause.pretty(cause),
+                      paywallDocumentId: message.documentId,
+                      seq: message.seq,
+                    },
+                  ),
+                ),
+              ),
+          { discard: true },
+        ),
+      { batchSize: 1, maxRetries: 2 },
+    )
+    .pipe(Effect.provideService(PlatformRuntime, runtime));
+});
diff --git a/selfhost/entry/src/backend/WebhookDeliveryWorkflow.ts b/selfhost/entry/src/backend/WebhookDeliveryWorkflow.ts
new file mode 100644
index 000000000..70a44251b
--- /dev/null
+++ b/selfhost/entry/src/backend/WebhookDeliveryWorkflow.ts
@@ -0,0 +1,92 @@
+import {
+  WebhookDeliveryService,
+  nextWebhookDeliveryRetryTime,
+} from "@voidhash/core/services/webhookDispatch/WebhookDeliveryService";
+import { Db } from "@voidhash/db";
+import { WorkflowRunner } from "@voidhash/platform/Workflow";
+import { Effect, Layer, Schema } from "effect";
+
+import { DeliverWebhookDefinition } from "./WorkflowDefinitions.ts";
+
+const SendWebhookResultSchema = Schema.Struct({
+  durationMs: Schema.Number,
+  errorMessage: Schema.NullOr(Schema.String),
+  responseBody: Schema.NullOr(Schema.String),
+  statusCode: Schema.NullOr(Schema.Number),
+  succeeded: Schema.Boolean,
+});
+
+/** Registers durable webhook delivery with persisted retries and attempt state. */
+export const registerWebhookDeliveryWorkflow = (
+  runner: WorkflowRunner["Service"],
+  database: Layer.Layer<Db>,
+) =>
+  runner.register(
+    DeliverWebhookDefinition,
+    (input, context) =>
+      Effect.gen(function* () {
+        let attemptNumber = input.attemptNumber;
+
+        while (true) {
+          const attempt = { ...input, attemptNumber };
+          const result = yield* context.step({
+            name: `send-${input.deliveryId}-${attemptNumber}`,
+            success: SendWebhookResultSchema,
+            execute: Effect.gen(function* () {
+              const delivery = yield* WebhookDeliveryService;
+              return yield* delivery.send(attempt);
+            }).pipe(Effect.provide(WebhookDeliveryService.layer), Effect.provide(database)),
+          });
+
+          yield* context.step({
+            name: `record-attempt-${input.deliveryId}-${attemptNumber}`,
+            success: Schema.Void,
+            execute: Effect.gen(function* () {
+              const delivery = yield* WebhookDeliveryService;
+              yield* delivery.recordAttempt(attempt, result);
+            }).pipe(Effect.provide(WebhookDeliveryService.layer), Effect.provide(database)),
+          });
+
+          if (result.succeeded) {
+            yield* context.step({
+              name: `mark-succeeded-${input.deliveryId}-${attemptNumber}`,
+              success: Schema.Void,
+              execute: Effect.gen(function* () {
+                const delivery = yield* WebhookDeliveryService;
+                yield* delivery.markSucceeded(attempt);
+              }).pipe(Effect.provide(WebhookDeliveryService.layer), Effect.provide(database)),
+            });
+            return;
+          }
+
+          const nextAttemptNumber = attemptNumber + 1;
+          const retryTime = nextWebhookDeliveryRetryTime(nextAttemptNumber);
+
+          if (!retryTime) {
+            yield* context.step({
+              name: `mark-exhausted-${input.deliveryId}-${attemptNumber}`,
+              success: Schema.Void,
+              execute: Effect.gen(function* () {
+                const delivery = yield* WebhookDeliveryService;
+                yield* delivery.markExhausted(attempt);
+              }).pipe(Effect.provide(WebhookDeliveryService.layer), Effect.provide(database)),
+            });
+            return;
+          }
+
+          yield* context.step({
+            name: `mark-failed-${input.deliveryId}-${attemptNumber}`,
+            success: Schema.Void,
+            execute: Effect.gen(function* () {
+              const delivery = yield* WebhookDeliveryService;
+              yield* delivery.markFailed(attempt, retryTime);
+            }).pipe(Effect.provide(WebhookDeliveryService.layer), Effect.provide(database)),
+          });
+          yield* context.sleepUntil(
+            `retry-${input.deliveryId}-${nextAttemptNumber}`,
+            retryTime,
+          );
+          attemptNumber = nextAttemptNumber;
+        }
+      }),
+  );
diff --git a/selfhost/entry/src/backend/WorkflowDefinitions.ts b/selfhost/entry/src/backend/WorkflowDefinitions.ts
new file mode 100644
index 000000000..e7d70c468
--- /dev/null
+++ b/selfhost/entry/src/backend/WorkflowDefinitions.ts
@@ -0,0 +1,90 @@
+import { defineWorkflow } from "@voidhash/platform/Workflow";
+import { Schema } from "effect";
+
+export const DeliverWebhookDefinition = defineWorkflow({
+  name: "selfhost-deliver-webhook",
+  payload: {
+    attemptNumber: Schema.Number,
+    deliveryId: Schema.String,
+    endpointId: Schema.String,
+    eventType: Schema.String,
+    payload: Schema.Unknown,
+    secret: Schema.String,
+    url: Schema.String,
+  },
+  success: Schema.Void,
+  idempotencyKey: ({ deliveryId }) => deliveryId,
+});
+
+export const IdentifyDistinctIdCompletionDefinition = defineWorkflow({
+  name: "selfhost-identify-distinct-id-completion",
+  payload: {
+    distinctId: Schema.String,
+    eventTimestamp: Schema.String,
+    jobId: Schema.String,
+    origin: Schema.Literals([1, 2, 3, 4, 5, 6, 7]),
+    previousDistinctId: Schema.String,
+    projectId: Schema.String,
+    requestedAt: Schema.String,
+    targetPersonId: Schema.String,
+  },
+  success: Schema.Void,
+  idempotencyKey: ({ jobId }) => jobId,
+});
+
+const replayPayload = {
+  paymentProviderConfigurationId: Schema.String,
+  paymentProviderProductId: Schema.String,
+  providerProductKey: Schema.String,
+};
+
+export const AppStoreReplayParkedNotificationsDefinition = defineWorkflow({
+  name: "selfhost-app-store-replay-parked-notifications",
+  payload: replayPayload,
+  success: Schema.Void,
+  idempotencyKey: ({ paymentProviderConfigurationId, paymentProviderProductId }) =>
+    `${paymentProviderConfigurationId}:${paymentProviderProductId}`,
+});
+
+export const AppStoreReplayParkedSdkNotificationsDefinition = defineWorkflow({
+  name: "selfhost-app-store-replay-parked-sdk-notifications",
+  payload: {
+    originalTransactionId: Schema.String,
+    paymentProviderConfigurationId: Schema.String,
+  },
+  success: Schema.Void,
+  idempotencyKey: ({ originalTransactionId, paymentProviderConfigurationId }) =>
+    `${paymentProviderConfigurationId}:${originalTransactionId}`,
+});
+
+export const AppStoreReconcileOriginalTransactionDefinition = defineWorkflow({
+  name: "selfhost-app-store-reconcile-original-transaction",
+  payload: {
+    originalTransactionId: Schema.String,
+    paymentProviderConfigurationId: Schema.String,
+    reason: Schema.Literals(["first_seen", "admin_repair", "install_backfill"]),
+    triggeredAt: Schema.String,
+  },
+  success: Schema.Void,
+  idempotencyKey: ({
+    originalTransactionId,
+    paymentProviderConfigurationId,
+    triggeredAt,
+  }) => `${paymentProviderConfigurationId}:${originalTransactionId}:${triggeredAt}`,
+});
+
+export const GooglePlayReplayParkedNotificationsDefinition = defineWorkflow({
+  name: "selfhost-google-play-replay-parked-notifications",
+  payload: replayPayload,
+  success: Schema.Void,
+  idempotencyKey: ({ paymentProviderConfigurationId, paymentProviderProductId }) =>
+    `${paymentProviderConfigurationId}:${paymentProviderProductId}`,
+});
+
+export const StripeReplayParkedNotificationsDefinition = defineWorkflow({
+  name: "selfhost-stripe-replay-parked-notifications",
+  payload: replayPayload,
+  success: Schema.Void,
+  idempotencyKey: ({ paymentProviderConfigurationId, paymentProviderProductId }) =>
+    `${paymentProviderConfigurationId}:${paymentProviderProductId}`,
+});
diff --git a/selfhost/entry/src/backend/WorkflowPorts.ts b/selfhost/entry/src/backend/WorkflowPorts.ts
new file mode 100644
index 000000000..7df7912c8
--- /dev/null
+++ b/selfhost/entry/src/backend/WorkflowPorts.ts
@@ -0,0 +1,197 @@
+import { AppStoreReconcileOriginalTransactionWorkflow } from "@voidhash/core/services/paymentProviders/AppStoreReconcileOriginalTransactionWorkflow";
+import { AppStoreReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/AppStoreReplayParkedNotificationsWorkflow";
+import { AppStoreReplayParkedSdkNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/AppStoreReplayParkedSdkNotificationsWorkflow";
+import { GooglePlayReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/GooglePlayReplayParkedNotificationsWorkflow";
+import { StripeReplayParkedNotificationsWorkflow } from "@voidhash/core/services/paymentProviders/StripeReplayParkedNotificationsWorkflow";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { WebhookDeliveryWorkflow } from "@voidhash/core/services/webhookDispatch/WebhookDeliveryWorkflow";
+import { Db } from "@voidhash/db";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { WorkflowRunner } from "@voidhash/platform/Workflow";
+import { NodePlatformRuntimeLive } from "@voidhash/platform-node/PlatformRuntime";
+import { PgWorkflowRunnerLive } from "@voidhash/platform-node/Workflow";
+import { Effect, Layer, Redacted } from "effect";
+
+import type { SelfhostRuntimeConfig } from "../config.ts";
+import { registerIdentityCompletionWorkflow } from "./IdentityCompletionWorkflow.ts";
+import { registerPaymentProviderWorkflows } from "./PaymentProviderWorkflows.ts";
+import { registerWebhookDeliveryWorkflow } from "./WebhookDeliveryWorkflow.ts";
+import {
+  AppStoreReconcileOriginalTransactionDefinition,
+  AppStoreReplayParkedNotificationsDefinition,
+  AppStoreReplayParkedSdkNotificationsDefinition,
+  DeliverWebhookDefinition,
+  GooglePlayReplayParkedNotificationsDefinition,
+  IdentifyDistinctIdCompletionDefinition,
+  StripeReplayParkedNotificationsDefinition,
+} from "./WorkflowDefinitions.ts";
+
+const logDispatchFailure = (workflowName: string) => (cause: unknown) =>
+  Effect.logError("Failed to dispatch self-host workflow", { cause, workflowName });
+
+const makeWorkflowPortsLive = Layer.mergeAll(
+  Layer.effect(
+    WebhookDeliveryWorkflow,
+    Effect.gen(function* () {
+      const runner = yield* WorkflowRunner;
+      const runtime = yield* PlatformRuntime;
+      return {
+        dispatch: (input: Parameters<WebhookDeliveryWorkflow["Service"]["dispatch"]>[0]) =>
+          runner.dispatch(DeliverWebhookDefinition, input).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.tapError(logDispatchFailure(DeliverWebhookDefinition.name)),
+            Effect.orDie,
+            Effect.asVoid,
+          ),
+      };
+    }),
+  ),
+  Layer.effect(
+    IdentifyDistinctIdCompletionWorkflow,
+    Effect.gen(function* () {
+      const runner = yield* WorkflowRunner;
+      const runtime = yield* PlatformRuntime;
+      return {
+        dispatch: (
+          input: Parameters<IdentifyDistinctIdCompletionWorkflow["Service"]["dispatch"]>[0],
+        ) =>
+          runner.dispatch(IdentifyDistinctIdCompletionDefinition, input).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.tapError(logDispatchFailure(IdentifyDistinctIdCompletionDefinition.name)),
+            Effect.orDie,
+            Effect.asVoid,
+          ),
+      };
+    }),
+  ),
+  Layer.effect(
+    AppStoreReplayParkedNotificationsWorkflow,
+    Effect.gen(function* () {
+      const runner = yield* WorkflowRunner;
+      const runtime = yield* PlatformRuntime;
+      return {
+        dispatch: (
+          input: Parameters<AppStoreReplayParkedNotificationsWorkflow["Service"]["dispatch"]>[0],
+        ) =>
+          runner.dispatch(AppStoreReplayParkedNotificationsDefinition, input).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.tapError(
+              logDispatchFailure(AppStoreReplayParkedNotificationsDefinition.name),
+            ),
+            Effect.orDie,
+            Effect.asVoid,
+          ),
+      };
+    }),
+  ),
+  Layer.effect(
+    AppStoreReplayParkedSdkNotificationsWorkflow,
+    Effect.gen(function* () {
+      const runner = yield* WorkflowRunner;
+      const runtime = yield* PlatformRuntime;
+      return {
+        dispatch: (
+          input: Parameters<
+            AppStoreReplayParkedSdkNotificationsWorkflow["Service"]["dispatch"]
+          >[0],
+        ) =>
+          runner.dispatch(AppStoreReplayParkedSdkNotificationsDefinition, input).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.tapError(
+              logDispatchFailure(AppStoreReplayParkedSdkNotificationsDefinition.name),
+            ),
+            Effect.orDie,
+            Effect.asVoid,
+          ),
+      };
+    }),
+  ),
+  Layer.effect(
+    AppStoreReconcileOriginalTransactionWorkflow,
+    Effect.gen(function* () {
+      const runner = yield* WorkflowRunner;
+      const runtime = yield* PlatformRuntime;
+      return {
+        dispatch: (
+          input: Parameters<
+            AppStoreReconcileOriginalTransactionWorkflow["Service"]["dispatch"]
+          >[0],
+        ) =>
+          runner.dispatch(AppStoreReconcileOriginalTransactionDefinition, input).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.tapError(
+              logDispatchFailure(AppStoreReconcileOriginalTransactionDefinition.name),
+            ),
+            Effect.orDie,
+            Effect.asVoid,
+          ),
+      };
+    }),
+  ),
+  Layer.effect(
+    GooglePlayReplayParkedNotificationsWorkflow,
+    Effect.gen(function* () {
+      const runner = yield* WorkflowRunner;
+      const runtime = yield* PlatformRuntime;
+      return {
+        dispatch: (
+          input: Parameters<
+            GooglePlayReplayParkedNotificationsWorkflow["Service"]["dispatch"]
+          >[0],
+        ) =>
+          runner.dispatch(GooglePlayReplayParkedNotificationsDefinition, input).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.tapError(
+              logDispatchFailure(GooglePlayReplayParkedNotificationsDefinition.name),
+            ),
+            Effect.orDie,
+            Effect.asVoid,
+          ),
+      };
+    }),
+  ),
+  Layer.effect(
+    StripeReplayParkedNotificationsWorkflow,
+    Effect.gen(function* () {
+      const runner = yield* WorkflowRunner;
+      const runtime = yield* PlatformRuntime;
+      return {
+        dispatch: (
+          input: Parameters<StripeReplayParkedNotificationsWorkflow["Service"]["dispatch"]>[0],
+        ) =>
+          runner.dispatch(StripeReplayParkedNotificationsDefinition, input).pipe(
+            Effect.provideService(PlatformRuntime, runtime),
+            Effect.tapError(logDispatchFailure(StripeReplayParkedNotificationsDefinition.name)),
+            Effect.orDie,
+            Effect.asVoid,
+          ),
+      };
+    }),
+  ),
+);
+
+/** Builds the workflow runner and every asynchronous backend dispatch port. */
+export const makeSelfhostWorkflowRuntimeLive = (config: SelfhostRuntimeConfig) => {
+  const workflowRunner = PgWorkflowRunnerLive({
+    database: config.database.databaseName,
+    host: config.database.host,
+    password: Redacted.make(config.database.password),
+    port: config.database.port,
+    ...(config.database.ssl === undefined ? {} : { ssl: config.database.ssl }),
+    username: config.database.username,
+  });
+  const runtime = Layer.merge(workflowRunner, NodePlatformRuntimeLive);
+  const ports = makeWorkflowPortsLive.pipe(Layer.provide(runtime));
+  return Layer.merge(runtime, ports);
+};
+
+/** Registers every workflow handler before the HTTP server begins accepting requests. */
+export const registerSelfhostWorkflows = (config: SelfhostRuntimeConfig) =>
+  Effect.gen(function* () {
+    const runner = yield* WorkflowRunner;
+    const completion = yield* IdentifyDistinctIdCompletionWorkflow;
+    const database = Db.layer(config.database);
+    yield* registerIdentityCompletionWorkflow(runner, database);
+    yield* registerWebhookDeliveryWorkflow(runner, database);
+    yield* registerPaymentProviderWorkflows(runner, database, completion);
+  });
diff --git a/selfhost/entry/src/backend/Workos.ts b/selfhost/entry/src/backend/Workos.ts
new file mode 100644
index 000000000..fd5fb014a
--- /dev/null
+++ b/selfhost/entry/src/backend/Workos.ts
@@ -0,0 +1,76 @@
+import { Workos } from "@voidhash/core/services/auth/Workos";
+import {
+  WorkosOrgPort,
+  WorkosOrgPortError,
+} from "@voidhash/core/services/organizations/WorkosOrgPort";
+import { Effect, Layer } from "effect";
+
+const mapError = (error: { readonly cause?: unknown; readonly message: string }) =>
+  new WorkosOrgPortError({ cause: String(error.cause), message: error.message });
+
+const membership = (value: {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly role: string | { readonly slug?: string } | null;
+  readonly userId: string;
+}) => ({
+  id: value.id,
+  organizationId: value.organizationId,
+  role: typeof value.role === "string" ? value.role : (value.role?.slug ?? null),
+  userId: value.userId,
+});
+
+const organization = (value: {
+  readonly externalId: string | null;
+  readonly id: string;
+  readonly name: string;
+}) => ({ externalId: value.externalId, id: value.id, name: value.name });
+
+/** WorkOS-backed organization-management port for BYO WorkOS credentials. */
+export const WorkosOrgPortLive: Layer.Layer<WorkosOrgPort, never, Workos> = Layer.effect(
+  WorkosOrgPort,
+  Effect.gen(function* () {
+    const workos = yield* Workos;
+    return {
+      createMembership: (input) =>
+        workos.createOrganizationMembership(input).pipe(
+          Effect.map(membership),
+          Effect.mapError(mapError),
+        ),
+      createOrganization: (input) =>
+        workos.createOrganization(input).pipe(
+          Effect.map(organization),
+          Effect.mapError(mapError),
+        ),
+      deleteMembership: (id) =>
+        workos.deleteOrganizationMembership(id).pipe(Effect.mapError(mapError)),
+      deleteOrganization: (id) => workos.deleteOrganization(id).pipe(Effect.mapError(mapError)),
+      findUserByEmail: (email) => workos.findUserByEmail(email).pipe(Effect.mapError(mapError)),
+      getOrganization: (id) =>
+        workos.getOrganization(id).pipe(
+          Effect.map(organization),
+          Effect.mapError(mapError),
+        ),
+      getOrganizationByExternalId: (externalId) =>
+        workos.getOrganizationByExternalId(externalId).pipe(
+          Effect.map((value) => (value === null ? null : organization(value))),
+          Effect.mapError(mapError),
+        ),
+      listMembershipsForUser: (userId) =>
+        workos.listOrganizationMembershipsForUser(userId).pipe(
+          Effect.map((values) => values.map(membership)),
+          Effect.mapError(mapError),
+        ),
+      updateMembershipRole: (id, input) =>
+        workos.updateOrganizationMembership(id, input).pipe(
+          Effect.map(membership),
+          Effect.mapError(mapError),
+        ),
+      updateOrganization: (input) =>
+        workos.updateOrganization(input).pipe(
+          Effect.map(organization),
+          Effect.mapError(mapError),
+        ),
+    };
+  }),
+);
diff --git a/selfhost/entry/src/compiler/CompilerClient.ts b/selfhost/entry/src/compiler/CompilerClient.ts
new file mode 100644
index 000000000..e1d2025cd
--- /dev/null
+++ b/selfhost/entry/src/compiler/CompilerClient.ts
@@ -0,0 +1,49 @@
+import { ComponentCompiler } from "@voidhash/core/services/paywallWorkspace/ComponentCompiler";
+import { Effect, Layer, Schema } from "effect";
+
+import {
+  CompileCheckResponse,
+  CompileExtractResponse,
+} from "./CompilerProtocol.ts";
+
+const decodeCheck = Schema.decodeUnknownEffect(CompileCheckResponse);
+const decodeExtract = Schema.decodeUnknownEffect(CompileExtractResponse);
+
+const callCompiler = <A>(
+  baseUrl: string,
+  mode: "check" | "extract",
+  source: string,
+  decode: (input: unknown) => Effect.Effect<A, unknown>,
+  unavailable: A,
+): Effect.Effect<A> =>
+  Effect.tryPromise({
+    try: async () => {
+      const response = await fetch(`${baseUrl}/compile`, {
+        body: JSON.stringify({ mode, source }),
+        headers: { "content-type": "application/json" },
+        method: "POST",
+        signal: AbortSignal.timeout(30_000),
+      });
+      if (!response.ok) throw new Error(`compiler returned HTTP ${response.status}`);
+      return response.json();
+    },
+    catch: (cause) => cause,
+  }).pipe(
+    Effect.flatMap(decode),
+    Effect.catchCause((cause) =>
+      Effect.logWarning("Component compiler unavailable", { cause }).pipe(
+        Effect.as(unavailable),
+      ),
+    ),
+  );
+
+/** HTTP adapter from the backend compiler port to the isolated Node sidecar. */
+export const makeHttpComponentCompilerLive = (url: string): Layer.Layer<ComponentCompiler> => {
+  const baseUrl = url.replace(/\/$/, "");
+  return Layer.succeed(ComponentCompiler, {
+    compileCheck: (source) =>
+      callCompiler(baseUrl, "check", source, decodeCheck, { status: "unavailable" }),
+    compileAndExtract: (source) =>
+      callCompiler(baseUrl, "extract", source, decodeExtract, { status: "unavailable" }),
+  });
+};
diff --git a/selfhost/entry/src/compiler/CompilerCore.ts b/selfhost/entry/src/compiler/CompilerCore.ts
new file mode 100644
index 000000000..ee6de2b14
--- /dev/null
+++ b/selfhost/entry/src/compiler/CompilerCore.ts
@@ -0,0 +1,123 @@
+import {
+  type ComponentCompileDiagnostic,
+  ComponentCompilerError,
+  type ComponentCompilerShape,
+  type CompileCheckResult,
+  type CompileExtractResult,
+} from "@voidhash/core/services/paywallWorkspace/ComponentCompiler";
+import { Effect } from "effect";
+
+interface EsbuildFailure {
+  readonly errors?: ReadonlyArray<{
+    readonly text: string;
+    readonly location?: { readonly line: number; readonly column: number } | null;
+  }>;
+}
+
+interface SandboxSurface {
+  readonly modules: Readonly<Record<string, unknown>>;
+  readonly describeComponent: typeof import("@voidhash/paywalls/sandbox")["describeComponent"];
+}
+
+const toCompileDiagnostics = (error: unknown): ComponentCompileDiagnostic[] => {
+  if (typeof error !== "object" || error === null || !("errors" in error)) return [];
+  const errors = (error as EsbuildFailure).errors;
+  if (!Array.isArray(errors) || errors.length === 0) return [];
+  return errors.map((message) => ({
+    column: message.location?.column,
+    line: message.location?.line,
+    message: message.text,
+    phase: "compile",
+  }));
+};
+
+const nodeTransform = async (source: string): Promise<string> => {
+  const esbuild = await import("esbuild");
+  const result = await esbuild.transform(source, {
+    format: "cjs",
+    jsx: "automatic",
+    jsxImportSource: "@voidhash/paywalls",
+    loader: "tsx",
+    target: "es2022",
+  });
+  return result.code;
+};
+
+const evaluateAndExtractManifest = (
+  compiledCode: string,
+  sandbox: SandboxSurface,
+): unknown => {
+  const requireShim = (specifier: string): unknown => {
+    const module = sandbox.modules[specifier];
+    if (module === undefined) throw new Error(`Cannot find module '${specifier}'`);
+    return module;
+  };
+  const moduleObject: { exports: Record<string, unknown> } = { exports: {} };
+  const factory = new Function("require", "module", "exports", compiledCode);
+  factory(requireShim, moduleObject, moduleObject.exports);
+  const definition = moduleObject.exports.default ?? moduleObject.exports.definition;
+  if (
+    definition === undefined ||
+    definition === null ||
+    typeof (definition as { render?: unknown }).render !== "function"
+  ) {
+    throw new Error("Component must export a default defineComponent({ ... })");
+  }
+  return sandbox.describeComponent(
+    definition as Parameters<SandboxSurface["describeComponent"]>[0],
+  ).manifest;
+};
+
+const compileAndExtract = async (source: string): Promise<CompileExtractResult> => {
+  let compiledCode: string;
+  try {
+    compiledCode = await nodeTransform(source);
+  } catch (error) {
+    const diagnostics = toCompileDiagnostics(error);
+    if (diagnostics.length === 0) throw error;
+    return { diagnostics, phase: "compile", status: "error" };
+  }
+
+  const sandbox = await import("@voidhash/paywalls/sandbox");
+  try {
+    return {
+      manifest: evaluateAndExtractManifest(compiledCode, sandbox),
+      status: "ready",
+    };
+  } catch (error) {
+    return {
+      diagnostics: [{ message: error instanceof Error ? error.message : String(error) }],
+      phase: "runtime",
+      status: "error",
+    };
+  }
+};
+
+/** Native compiler used exclusively inside the isolated self-host sidecar. */
+export const makeNodeComponentCompiler = (): ComponentCompilerShape => ({
+  compileCheck: (source) =>
+    Effect.tryPromise(async (): Promise<CompileCheckResult> => {
+      try {
+        await nodeTransform(source);
+        return { status: "ready" };
+      } catch (error) {
+        const diagnostics = toCompileDiagnostics(error);
+        if (diagnostics.length === 0) throw error;
+        return { diagnostics, status: "error" };
+      }
+    }).pipe(
+      Effect.mapError((error) => new ComponentCompilerError({
+        message: `esbuild transform failed: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+      })),
+    ),
+  compileAndExtract: (source) =>
+    Effect.tryPromise(() => compileAndExtract(source)).pipe(
+      Effect.mapError((error) => new ComponentCompilerError({
+        message: `component extraction failed: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+      })),
+    ),
+});
diff --git a/selfhost/entry/src/compiler/CompilerProtocol.ts b/selfhost/entry/src/compiler/CompilerProtocol.ts
new file mode 100644
index 000000000..e13ee360f
--- /dev/null
+++ b/selfhost/entry/src/compiler/CompilerProtocol.ts
@@ -0,0 +1,29 @@
+import { Schema } from "effect";
+
+export const CompilerRequest = Schema.Struct({
+  mode: Schema.Literals(["check", "extract"]),
+  source: Schema.String,
+});
+
+const Diagnostic = Schema.Struct({
+  column: Schema.optional(Schema.Number),
+  line: Schema.optional(Schema.Number),
+  message: Schema.String,
+  phase: Schema.optional(Schema.Literals(["compile", "runtime"])),
+});
+
+export const CompileCheckResponse = Schema.Union([
+  Schema.Struct({ status: Schema.Literals(["ready"]) }),
+  Schema.Struct({ diagnostics: Schema.Array(Diagnostic), status: Schema.Literals(["error"]) }),
+  Schema.Struct({ status: Schema.Literals(["unavailable"]) }),
+]);
+
+export const CompileExtractResponse = Schema.Union([
+  Schema.Struct({ manifest: Schema.Unknown, status: Schema.Literals(["ready"]) }),
+  Schema.Struct({
+    diagnostics: Schema.Array(Diagnostic),
+    phase: Schema.Literals(["compile", "runtime"]),
+    status: Schema.Literals(["error"]),
+  }),
+  Schema.Struct({ status: Schema.Literals(["unavailable"]) }),
+]);
diff --git a/selfhost/entry/src/compiler/main.ts b/selfhost/entry/src/compiler/main.ts
new file mode 100644
index 000000000..f5c4f59a8
--- /dev/null
+++ b/selfhost/entry/src/compiler/main.ts
@@ -0,0 +1,101 @@
+import {
+  createServer,
+  type IncomingMessage,
+  type Server,
+  type ServerResponse,
+} from "node:http";
+
+import { NodeRuntime } from "@effect/platform-node";
+import { Effect, Schema, Semaphore } from "effect";
+
+import { makeNodeComponentCompiler } from "./CompilerCore.ts";
+import { CompilerRequest } from "./CompilerProtocol.ts";
+
+const maximumBodyBytes = 1_048_576;
+const compiler = makeNodeComponentCompiler();
+const compilerPermits = Semaphore.makeUnsafe(2);
+const decodeRequest = Schema.decodeUnknownEffect(CompilerRequest);
+
+const sendJson = (response: ServerResponse, status: number, body: unknown): void => {
+  response.writeHead(status, { "content-type": "application/json" });
+  response.end(JSON.stringify(body));
+};
+
+const readBody = (request: IncomingMessage): Promise<unknown> =>
+  new Promise((resolve, reject) => {
+    const chunks: Buffer[] = [];
+    let bytes = 0;
+    request.on("data", (chunk: Buffer) => {
+      bytes += chunk.byteLength;
+      if (bytes > maximumBodyBytes) {
+        reject(new Error("compiler request exceeds 1 MiB"));
+        request.destroy();
+        return;
+      }
+      chunks.push(chunk);
+    });
+    request.on("end", () => {
+      try {
+        resolve(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+      } catch (error) {
+        reject(error);
+      }
+    });
+    request.on("error", reject);
+  });
+
+const handleRequest = async (
+  request: IncomingMessage,
+  response: ServerResponse,
+): Promise<void> => {
+  if (request.method === "GET" && request.url === "/health") {
+    response.writeHead(200, { "content-type": "text/plain" }).end("OK");
+    return;
+  }
+  if (request.method !== "POST" || request.url !== "/compile") {
+    sendJson(response, 404, { error: "Not found" });
+    return;
+  }
+
+  try {
+    const input = await readBody(request).then((body) =>
+      Effect.runPromise(decodeRequest(body)),
+    );
+    const result = await Effect.runPromise(
+      compilerPermits.withPermit(
+        input.mode === "check"
+          ? compiler.compileCheck(input.source)
+          : compiler.compileAndExtract(input.source),
+      ),
+    );
+    sendJson(response, 200, result);
+  } catch (error) {
+    sendJson(response, 500, {
+      error: error instanceof Error ? error.message : String(error),
+    });
+  }
+};
+
+const port = Number(process.env.COMPILER_PORT ?? "5002");
+const host = process.env.COMPILER_HOST?.trim() || "0.0.0.0";
+
+NodeRuntime.runMain(
+  Effect.scoped(
+    Effect.acquireRelease(
+      Effect.callback<Server, Error>((resume) => {
+        const server = createServer((request, response) => {
+          void handleRequest(request, response);
+        });
+        server.once("error", (error) => resume(Effect.fail(error)));
+        server.listen(port, host, () => resume(Effect.succeed(server)));
+      }),
+      (server) =>
+        Effect.callback<void>((resume) => {
+          server.close(() => resume(Effect.void));
+        }),
+    ).pipe(
+      Effect.tap(() => Effect.logInfo(`Component compiler listening on ${host}:${port}`)),
+      Effect.andThen(Effect.never),
+    ),
+  ) as never,
+);
diff --git a/selfhost/entry/src/config.ts b/selfhost/entry/src/config.ts
new file mode 100644
index 000000000..510a06706
--- /dev/null
+++ b/selfhost/entry/src/config.ts
@@ -0,0 +1,186 @@
+import type { DbConfig } from "@voidhash/db/db";
+import type { SmtpMailerConfig } from "@voidhash/platform-node/Mailer";
+import type { S3ObjectStoreConfig } from "@voidhash/platform-node/ObjectStore";
+import { Redacted } from "effect";
+
+const positiveIntegerFromEnv = (name: string, fallback: number): number => {
+  const value = process.env[name]?.trim();
+  if (!value) return fallback;
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed <= 0) {
+    throw new Error(`${name} must be a positive integer`);
+  }
+  return parsed;
+};
+
+const optionalBooleanFromEnv = (name: string): boolean | undefined => {
+  const value = process.env[name]?.trim().toLowerCase();
+  if (!value) return undefined;
+  if (value === "true") return true;
+  if (value === "false") return false;
+  throw new Error(`${name} must be true or false`);
+};
+
+const requiredInProduction = (name: string, developmentFallback: string): string => {
+  const value = process.env[name]?.trim();
+  if (value) return value;
+  if (process.env.NODE_ENV === "production") {
+    throw new Error(`${name} is required in production`);
+  }
+  return developmentFallback;
+};
+
+/** WorkOS credentials supplied by a Community Edition operator. */
+export interface SelfhostWorkosConfig {
+  readonly apiKey: string;
+  readonly clientId: string;
+  readonly cookieName: string;
+  readonly cookiePassword: string;
+  readonly webhookSecret: string;
+}
+
+/** A named ClickHouse connection used by the self-host analytics runtime. */
+export interface SelfhostClickhouseConnection {
+  readonly database: string;
+  readonly password: string;
+  readonly url: string;
+  readonly username: string;
+}
+
+/** ClickHouse administrative and least-privilege runtime connections. */
+export interface SelfhostClickhouseConfig {
+  readonly admin: SelfhostClickhouseConnection;
+  readonly analyticsQuery: SelfhostClickhouseConnection;
+  readonly readOnly: SelfhostClickhouseConnection;
+  readonly readWrite: SelfhostClickhouseConnection;
+}
+
+/** Configuration for the single-process self-host runtime. */
+export interface SelfhostRuntimeConfig {
+  readonly clickhouse?: SelfhostClickhouseConfig;
+  readonly componentCompilerUrl: string;
+  readonly database: DbConfig;
+  readonly host: string;
+  readonly mailer: SmtpMailerConfig;
+  readonly port: number;
+  readonly publicBaseUrl: string;
+  readonly publicFilesBaseUrl: string;
+  readonly publicObjectStore: S3ObjectStoreConfig;
+  readonly artifactObjectStore: S3ObjectStoreConfig;
+  readonly workos: SelfhostWorkosConfig;
+}
+
+/** Reads optional ClickHouse configuration, returning undefined when analytics is disabled. */
+export const getSelfhostClickhouseConfig = (): SelfhostClickhouseConfig | undefined => {
+  const url = process.env.CLICKHOUSE_URL?.trim();
+  if (!url) return undefined;
+  const database = process.env.CLICKHOUSE_DATABASE?.trim() || "voidhash";
+  const connection = (username: string, password: string): SelfhostClickhouseConnection => ({
+    database,
+    password,
+    url,
+    username,
+  });
+  return {
+    admin: connection(
+      process.env.CLICKHOUSE_ADMIN_USERNAME?.trim() || "voidhash_admin",
+      process.env.CLICKHOUSE_ADMIN_PASSWORD ?? "password",
+    ),
+    analyticsQuery: connection(
+      process.env.CLICKHOUSE_ANALYTICS_QUERY_USERNAME?.trim() || "voidhash_query",
+      process.env.CLICKHOUSE_ANALYTICS_QUERY_PASSWORD ?? "password",
+    ),
+    readOnly: connection(
+      process.env.CLICKHOUSE_RO_USERNAME?.trim() || "voidhash_ro",
+      process.env.CLICKHOUSE_RO_PASSWORD ?? "password",
+    ),
+    readWrite: connection(
+      process.env.CLICKHOUSE_USERNAME?.trim() || "voidhash_app",
+      process.env.CLICKHOUSE_PASSWORD ?? "password",
+    ),
+  };
+};
+
+/** Reads the shared application database connection from environment variables. */
+export const getSelfhostDatabaseConfig = (): DbConfig => {
+  const ssl = optionalBooleanFromEnv("DATABASE_SSL");
+  return {
+    databaseName: process.env.DATABASE_NAME?.trim() || "voidhash",
+    host: process.env.DATABASE_HOST?.trim() || "127.0.0.1",
+    password: process.env.DATABASE_PASSWORD ?? "password",
+    port: positiveIntegerFromEnv("DATABASE_PORT", 5432),
+    ...(ssl === undefined ? {} : { ssl }),
+    username: process.env.DATABASE_USERNAME?.trim() || "voidhash",
+  };
+};
+
+/** Reads the SMTP transport and default sender configuration. */
+export const getSelfhostSmtpConfig = (): SmtpMailerConfig => {
+  const username = process.env.SMTP_USERNAME?.trim() || undefined;
+  const password = process.env.SMTP_PASSWORD || undefined;
+  return {
+    defaultFrom: {
+      address: process.env.SMTP_FROM_ADDRESS?.trim() || "noreply@voidhash.local",
+      name: process.env.SMTP_FROM_NAME?.trim() || "Voidhash",
+    },
+    host: process.env.SMTP_HOST?.trim() || "127.0.0.1",
+    port: positiveIntegerFromEnv("SMTP_PORT", 1025),
+    requireTls: optionalBooleanFromEnv("SMTP_REQUIRE_TLS") ?? false,
+    secure: optionalBooleanFromEnv("SMTP_SECURE") ?? false,
+    tlsRejectUnauthorized:
+      optionalBooleanFromEnv("SMTP_TLS_REJECT_UNAUTHORIZED") ?? true,
+    verifyOnStart: optionalBooleanFromEnv("SMTP_VERIFY_ON_START") ?? false,
+    ...(username === undefined ? {} : { username }),
+    ...(password === undefined ? {} : { password: Redacted.make(password) }),
+  };
+};
+
+/** Reads and validates the complete single-process runtime configuration. */
+export const getSelfhostRuntimeConfig = (): SelfhostRuntimeConfig => {
+  const publicBaseUrl = process.env.PUBLIC_BASE_URL?.trim() || "http://localhost:5001";
+  const endpoint = process.env.S3_ENDPOINT?.trim() || "http://127.0.0.1:9000";
+  const region = process.env.S3_REGION?.trim() || "us-east-1";
+  const accessKeyId = process.env.S3_ACCESS_KEY_ID?.trim() || "voidhash";
+  const secretAccessKey = Redacted.make(process.env.S3_SECRET_ACCESS_KEY ?? "password");
+  const objectStore = {
+    accessKeyId,
+    endpoint,
+    forcePathStyle: process.env.S3_FORCE_PATH_STYLE !== "false",
+    region,
+    secretAccessKey,
+  };
+  const clickhouse = getSelfhostClickhouseConfig();
+
+  return {
+    artifactObjectStore: {
+      ...objectStore,
+      bucketName: process.env.S3_ARTIFACT_BUCKET?.trim() || "voidhash-artifacts",
+    },
+    database: getSelfhostDatabaseConfig(),
+    ...(clickhouse === undefined ? {} : { clickhouse }),
+    componentCompilerUrl:
+      process.env.COMPONENT_COMPILER_URL?.trim() || "http://127.0.0.1:5002",
+    host: process.env.HOST?.trim() || "0.0.0.0",
+    mailer: getSelfhostSmtpConfig(),
+    port: positiveIntegerFromEnv("PORT", 5001),
+    publicBaseUrl,
+    publicFilesBaseUrl: process.env.PUBLIC_FILES_BASE_URL?.trim() || publicBaseUrl,
+    publicObjectStore: {
+      ...objectStore,
+      bucketName: process.env.S3_PUBLIC_BUCKET?.trim() || "voidhash-public",
+    },
+    workos: {
+      apiKey: requiredInProduction("WORKOS_API_KEY", "sk_test_selfhost_not_configured"),
+      clientId: requiredInProduction("WORKOS_CLIENT_ID", "client_selfhost_not_configured"),
+      cookieName: process.env.WORKOS_COOKIE_NAME?.trim() || "wos-session",
+      cookiePassword: requiredInProduction(
+        "WORKOS_COOKIE_PASSWORD",
+        "selfhost-development-cookie-password-change-me",
+      ),
+      webhookSecret: requiredInProduction(
+        "WORKOS_WEBHOOK_SECRET",
+        "whsec_selfhost_not_configured",
+      ),
+    },
+  };
+};
diff --git a/selfhost/entry/src/index.ts b/selfhost/entry/src/index.ts
new file mode 100644
index 000000000..4abf14ba3
--- /dev/null
+++ b/selfhost/entry/src/index.ts
@@ -0,0 +1,12 @@
+export { WorkosAuthTokenVerifierLive } from "./backend/AuthTokenVerifier.ts";
+export { makeBackendInfrastructureLive, makeSelfhostWorkosLive } from "./backend/Backend.ts";
+export { makeBackendMimicHostLive } from "./backend/MimicHost.ts";
+export {
+  makeSelfhostWorkflowRuntimeLive,
+  registerSelfhostWorkflows,
+} from "./backend/WorkflowPorts.ts";
+export { getSelfhostDatabaseConfig, getSelfhostRuntimeConfig } from "./config.ts";
+export { getMimicNodeConfig } from "./mimic/config.ts";
+export { makeMimicNodeHostLive, type MimicNodeConfig } from "./mimic/MimicNode.ts";
+export { installMimicNodeWebSocketServer } from "./mimic/MimicNodeWebSocket.ts";
+export { makePgControlStore, PgControlStoreLive } from "./mimic/PgControlStore.ts";
diff --git a/selfhost/entry/src/main.ts b/selfhost/entry/src/main.ts
new file mode 100644
index 000000000..32e702142
--- /dev/null
+++ b/selfhost/entry/src/main.ts
@@ -0,0 +1,258 @@
+import { createServer } from "node:http";
+
+import { NodeHttpServer, NodeRuntime } from "@effect/platform-node";
+import { EventCaptureApi } from "@voidhash/api-contracts/event-capture";
+import {
+  buildBackendFetch,
+  NoBackendFeatures,
+  NoBackendRpcExtension,
+} from "@voidhash/backend/src/BackendApp.ts";
+import { RpcAuthLive } from "@voidhash/backend/src/RpcMiddlewares.ts";
+import { AuthTokenVerifier } from "@voidhash/core/services/auth/AuthTokenVerifier";
+import { EventCaptureService } from "@voidhash/core/services/analyticsIngest/EventCaptureService";
+import { PushDeliveryDispatch } from "@voidhash/core/services/notifications/PushDeliveryDispatch";
+import { PaywallThumbnailService } from "@voidhash/core/services/paywallThumbnails/PaywallThumbnailService";
+import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
+import { getConfig as getMimicConfig } from "@voidhash/mimic-db/config";
+import { makeRoutesLive } from "@voidhash/mimic-db/http/rpc-app";
+import { DurableEntityHost } from "@voidhash/platform/DurableEntity";
+import { NodeDurableEntityControl } from "@voidhash/platform-node/DurableEntity";
+import { SmtpMailerLive } from "@voidhash/platform-node/Mailer";
+import { Context, Effect, Layer } from "effect";
+import { HttpRouter } from "effect/unstable/http";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { EventCaptureGroupLive } from "@voidhash/backend/src/routes/event-capture.ts";
+import {
+  makeSelfhostAnalyticsRuntimeLive,
+  runSelfhostAnalyticsConsumers,
+} from "./backend/Analytics.ts";
+import { WorkosAuthTokenVerifierLive } from "./backend/AuthTokenVerifier.ts";
+import { runSelfhostCronJobs } from "./backend/Background.ts";
+import {
+  makeBackendInfrastructureLive,
+  makeSelfhostWorkosLive,
+} from "./backend/Backend.ts";
+import { makeSelfhostClickhouseLayers } from "./backend/Clickhouse.ts";
+import {
+  runSelfhostPushDeliveryConsumers,
+  SelfhostPushDeliveryDispatchLive,
+} from "./backend/Push.ts";
+import {
+  makeSelfhostPaywallThumbnailServiceLive,
+  runSelfhostPaywallThumbnailConsumer,
+} from "./backend/Thumbnails.ts";
+import {
+  makeSelfhostWorkflowRuntimeLive,
+  registerSelfhostWorkflows,
+} from "./backend/WorkflowPorts.ts";
+import { getSelfhostRuntimeConfig } from "./config.ts";
+import { makeSelfhostMimicDocumentIdlePublisher } from "./mimic/MimicDocumentIdleQueue.ts";
+import { installMimicNodeWebSocketServer } from "./mimic/MimicNodeWebSocket.ts";
+import { makeMimicNodeHostLive } from "./mimic/MimicNode.ts";
+import { getMimicNodeConfig } from "./mimic/config.ts";
+import {
+  isWwwRequest,
+  loadWwwRequestHandler,
+} from "./www/Www.ts";
+
+const isMimicRequest = (url: string | undefined): boolean => {
+  const pathname = new URL(url ?? "/", "http://selfhost.local").pathname;
+  return pathname === "/rpc/v1" || pathname.startsWith("/rpc/v1/");
+};
+
+const isCaptureRequest = (url: string | undefined): boolean => {
+  const pathname = new URL(url ?? "/", "http://selfhost.local").pathname;
+  return pathname === "/i" || pathname.startsWith("/i/");
+};
+
+NodeRuntime.runMain(
+  Effect.scoped(
+    Effect.gen(function* () {
+      const config = getSelfhostRuntimeConfig();
+      yield* Effect.logInfo("Community Edition active");
+      const mimicConfig = getMimicConfig();
+      const hostContext = yield* Layer.build(makeMimicNodeHostLive(getMimicNodeConfig()));
+      const host = Context.get(hostContext, HostServiceTag);
+      const entities = Context.get(hostContext, DurableEntityHost);
+      const entityControl = Context.get(hostContext, NodeDurableEntityControl);
+      const hostLayer = Layer.succeed(HostServiceTag, host);
+      const workos = makeSelfhostWorkosLive(config.workos);
+      const clickhouse = config.clickhouse
+        ? makeSelfhostClickhouseLayers(config.clickhouse)
+        : undefined;
+      const infrastructure = makeBackendInfrastructureLive(
+        config,
+        workos,
+        clickhouse?.readOnly,
+      ).pipe(
+        Layer.provide(hostLayer),
+      );
+      const authContext = yield* Layer.build(
+        WorkosAuthTokenVerifierLive.pipe(Layer.provide(workos)),
+      );
+      const authTokenVerifier = Context.get(authContext, AuthTokenVerifier);
+      const workflowRuntime = makeSelfhostWorkflowRuntimeLive(config);
+      const analyticsRuntime = makeSelfhostAnalyticsRuntimeLive(config);
+      const runtimeContext = yield* Layer.build(
+        Layer.mergeAll(
+          infrastructure,
+          workflowRuntime,
+          analyticsRuntime,
+          SmtpMailerLive(config.mailer),
+        ),
+      );
+      const publishIdleDocument = yield* makeSelfhostMimicDocumentIdlePublisher.pipe(
+        Effect.provide(runtimeContext),
+      );
+      const pushDispatchContext = yield* Layer.build(SelfhostPushDeliveryDispatchLive).pipe(
+        Effect.provide(runtimeContext),
+      );
+      const pushDeliveryDispatch = Layer.succeed(
+        PushDeliveryDispatch,
+        Context.get(pushDispatchContext, PushDeliveryDispatch),
+      );
+      yield* registerSelfhostWorkflows(config).pipe(Effect.provide(runtimeContext));
+      yield* Effect.forkScoped(
+        runSelfhostAnalyticsConsumers(config, clickhouse?.readWrite).pipe(
+          Effect.provide(runtimeContext),
+        ),
+      );
+      yield* Effect.forkScoped(
+        runSelfhostPushDeliveryConsumers(config).pipe(
+          Effect.provide(runtimeContext),
+        ),
+      );
+      yield* Effect.forkScoped(
+        runSelfhostCronJobs(config, clickhouse?.readWrite).pipe(
+          Effect.provide(runtimeContext),
+        ),
+      );
+      const chromiumExecutablePath = process.env.CHROMIUM_EXECUTABLE_PATH?.trim();
+      if (chromiumExecutablePath) {
+        const thumbnailContext = yield* Layer.build(
+          makeSelfhostPaywallThumbnailServiceLive({
+            disableSandbox: process.env.CHROMIUM_DISABLE_SANDBOX === "true",
+            executablePath: chromiumExecutablePath,
+          }),
+        ).pipe(Effect.provide(runtimeContext));
+        const thumbnailService = Context.get(
+          thumbnailContext,
+          PaywallThumbnailService,
+        );
+        yield* Effect.forkScoped(
+          runSelfhostPaywallThumbnailConsumer.pipe(
+            Effect.provide(runtimeContext),
+            Effect.provideService(PaywallThumbnailService, thumbnailService),
+          ),
+        );
+      } else {
+        yield* Effect.logWarning(
+          "Paywall thumbnail rendering is disabled because CHROMIUM_EXECUTABLE_PATH is unset",
+        );
+      }
+
+      const backendEffect = yield* buildBackendFetch({
+        auth: RpcAuthLive(authTokenVerifier),
+        features: NoBackendFeatures,
+        rpcExtension: NoBackendRpcExtension,
+        infrastructure,
+        ...(clickhouse === undefined
+          ? {}
+          : { analyticsQueryClient: clickhouse.analyticsQuery }),
+        pushDeliveryDispatch,
+        authTokenVerifier,
+      }).pipe(Effect.provide(runtimeContext));
+      const mimicEffect = yield* makeRoutesLive(hostLayer).pipe(
+        Layer.provide(NodeHttpServer.layerHttpServices),
+        HttpRouter.toHttpEffect,
+      );
+      const captureService = Context.get(runtimeContext, EventCaptureService);
+      const captureEffect = yield* HttpApiBuilder.layer(EventCaptureApi, {
+        openapiPath: "/i/docs/openapi.json",
+      }).pipe(
+        Layer.provide(EventCaptureGroupLive),
+        Layer.provide(Layer.succeed(EventCaptureService, captureService)),
+        Layer.provide(NodeHttpServer.layerHttpServices),
+        HttpRouter.toHttpEffect,
+      );
+
+      const scope = yield* Effect.scope;
+      const backendHandler = yield* NodeHttpServer.makeHandler(
+        backendEffect.pipe(Effect.provide(runtimeContext)),
+        { scope },
+      );
+      const mimicHandler = yield* NodeHttpServer.makeHandler(mimicEffect, { scope });
+      const captureHandler = yield* NodeHttpServer.makeHandler(
+        captureEffect.pipe(Effect.provide(runtimeContext)),
+        { scope },
+      );
+      const wwwServerEntry = process.env.WWW_SERVER_ENTRY?.trim();
+      const wwwClientDirectory = process.env.WWW_CLIENT_DIRECTORY?.trim();
+      if ((wwwServerEntry === undefined) !== (wwwClientDirectory === undefined)) {
+        return yield* Effect.fail(
+          new Error("WWW_SERVER_ENTRY and WWW_CLIENT_DIRECTORY must be configured together"),
+        );
+      }
+      const wwwHandler = wwwServerEntry && wwwClientDirectory
+        ? yield* Effect.tryPromise({
+            try: () => loadWwwRequestHandler(wwwServerEntry, wwwClientDirectory),
+            catch: (cause) => new Error("Failed to load the WWW server bundle", { cause }),
+          })
+        : undefined;
+      const server = createServer((request, response) => {
+        if (isMimicRequest(request.url)) {
+          mimicHandler(request, response);
+          return;
+        }
+        if (isCaptureRequest(request.url)) {
+          captureHandler(request, response);
+          return;
+        }
+        if (wwwHandler !== undefined && isWwwRequest(request.url)) {
+          wwwHandler(request, response).catch((error) => {
+            console.error("WWW request failed", error);
+            if (!response.headersSent) {
+              response.statusCode = 500;
+            }
+            response.end();
+          });
+          return;
+        }
+        backendHandler(request, response);
+      });
+      const closeWebSockets = installMimicNodeWebSocketServer(
+        server,
+        host,
+        entities,
+        {
+          control: entityControl,
+          debounceMs: mimicConfig.idleNotifyDebounceMs,
+          publish: publishIdleDocument,
+        },
+      );
+
+      yield* Effect.acquireRelease(
+        Effect.callback<void, Error>((resume) => {
+          const onError = (error: Error) => resume(Effect.fail(error));
+          server.once("error", onError);
+          server.listen(config.port, config.host, () => {
+            server.off("error", onError);
+            resume(Effect.void);
+          });
+        }),
+        () =>
+          Effect.callback<void>((resume) => {
+            closeWebSockets();
+            if (!server.listening) {
+              resume(Effect.void);
+              return;
+            }
+            server.close(() => resume(Effect.void));
+          }),
+      );
+      yield* Effect.logInfo(`Self-host runtime listening on ${config.publicBaseUrl}`);
+      yield* Effect.never;
+    }),
+  ) as never,
+);
diff --git a/selfhost/entry/src/migrate.ts b/selfhost/entry/src/migrate.ts
new file mode 100644
index 000000000..ad54e2492
--- /dev/null
+++ b/selfhost/entry/src/migrate.ts
@@ -0,0 +1,22 @@
+import { NodeRuntime } from "@effect/platform-node";
+import { runAppDatabaseMigrations } from "@voidhash/db/migrations";
+import { Effect, Layer } from "effect";
+
+import { migrateSelfhostClickhouse } from "./backend/Clickhouse.ts";
+import { getSelfhostClickhouseConfig, getSelfhostDatabaseConfig } from "./config.ts";
+import { getMimicNodeConfig } from "./mimic/config.ts";
+import { makeMimicNodeHostLive } from "./mimic/MimicNode.ts";
+
+NodeRuntime.runMain(
+  Effect.scoped(
+    Effect.gen(function* () {
+      const result = yield* runAppDatabaseMigrations(getSelfhostDatabaseConfig());
+      yield* Layer.build(makeMimicNodeHostLive(getMimicNodeConfig()));
+      yield* migrateSelfhostClickhouse(getSelfhostClickhouseConfig());
+      yield* Effect.logInfo("Self-host database migrations are ready", {
+        applied: result.applied.length,
+        skipped: result.skipped,
+      });
+    }),
+  ) as never,
+);
diff --git a/selfhost/entry/src/mimic/MimicDocumentIdleQueue.ts b/selfhost/entry/src/mimic/MimicDocumentIdleQueue.ts
new file mode 100644
index 000000000..660fc9941
--- /dev/null
+++ b/selfhost/entry/src/mimic/MimicDocumentIdleQueue.ts
@@ -0,0 +1,24 @@
+import {
+  MimicDocumentIdleMessage,
+  type MimicDocumentIdleMessageType,
+} from "@voidhash/mimic-db/ws/idle-notify";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { QueueDriver } from "@voidhash/platform/Queue";
+import { Effect } from "effect";
+
+/** Logical PostgreSQL queue carrying idle Mimic document revisions. */
+export const mimicDocumentIdleQueueName = "mimic-document-idle";
+
+/** Builds the typed idle-document publisher from the active queue runtime. */
+export const makeSelfhostMimicDocumentIdlePublisher = Effect.gen(function* () {
+  const queues = yield* QueueDriver;
+  const runtime = yield* PlatformRuntime;
+  const producer = queues.producer(
+    mimicDocumentIdleQueueName,
+    MimicDocumentIdleMessage,
+  );
+  return (message: MimicDocumentIdleMessageType) =>
+    producer.publish(message).pipe(
+      Effect.provideService(PlatformRuntime, runtime),
+    );
+});
diff --git a/selfhost/entry/src/mimic/MimicNode.ts b/selfhost/entry/src/mimic/MimicNode.ts
new file mode 100644
index 000000000..eec9fd1eb
--- /dev/null
+++ b/selfhost/entry/src/mimic/MimicNode.ts
@@ -0,0 +1,60 @@
+import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
+import {
+  DocumentStoreFactory,
+  type DocumentStoreFactoryShape,
+} from "@voidhash/mimic-db/core/document-store-factory";
+import {
+  LocalHostServiceLive,
+} from "@voidhash/mimic-db/core/local-host-service";
+import {
+  LocalMigrationExecutorLive,
+} from "@voidhash/mimic-db/core/migration-executor";
+import {
+  ensureDocumentTables,
+  makePgDocumentStore,
+  type PgDocumentConfig,
+} from "@voidhash/mimic-db/core/pg-store";
+import { DurableEntityHost } from "@voidhash/platform/DurableEntity";
+import {
+  NodeDurableEntityControl,
+  type PgDurableEntityConfig,
+  PgDurableEntityHostLive,
+} from "@voidhash/platform-node/DurableEntity";
+import { Effect, Layer } from "effect";
+
+import { PgControlStoreLive } from "./PgControlStore.ts";
+
+/** Database-backed configuration for the standalone mimic Node composition. */
+export interface MimicNodeConfig {
+  readonly database: PgDurableEntityConfig;
+  readonly documents: PgDocumentConfig;
+}
+
+/**
+ * Builds the persistent single-node mimic host. Control state, document logs,
+ * snapshots, entity KV, and alarms all survive process restarts in Postgres.
+ */
+export const makeMimicNodeHostLive = (
+  config: MimicNodeConfig,
+): Layer.Layer<HostServiceTag | DurableEntityHost | NodeDurableEntityControl> => {
+  const documentStores = Layer.effect(
+    DocumentStoreFactory,
+    ensureDocumentTables(config.documents).pipe(
+      Effect.as(
+        DocumentStoreFactory.of({
+          make: (_collectionId, documentId) =>
+            makePgDocumentStore(config.documents, documentId),
+        } satisfies DocumentStoreFactoryShape),
+      ),
+    ),
+  );
+
+  const entities = PgDurableEntityHostLive(config.database);
+  const host = LocalHostServiceLive.pipe(
+    Layer.provide(PgControlStoreLive(config.database)),
+    Layer.provide(entities),
+    Layer.provide(documentStores),
+    Layer.provide(LocalMigrationExecutorLive),
+  );
+  return Layer.merge(host, entities);
+};
diff --git a/selfhost/entry/src/mimic/MimicNodeWebSocket.ts b/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
new file mode 100644
index 000000000..e5fcea0e1
--- /dev/null
+++ b/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
@@ -0,0 +1,393 @@
+import type { IncomingMessage, Server } from "node:http";
+import type { Duplex } from "node:stream";
+
+import type {
+  HostService,
+  PresenceEntry,
+} from "@voidhash/mimic-db/app/hostService";
+import {
+  AUTH_DEADLINE_MS,
+  handleDocumentSocketClose,
+  handleDocumentSocketMessage,
+  type DocumentSessionContext,
+  type SessionAttachment,
+} from "@voidhash/mimic-db/ws/document-session";
+import {
+  makeIdleNotifier,
+  type MimicDocumentIdleMessageType,
+} from "@voidhash/mimic-db/ws/idle-notify";
+import { encodeServerMessage } from "@voidhash/mimic-db/ws/protocol";
+import { makeSessionRegistry } from "@voidhash/mimic-db/ws/session-registry";
+import {
+  DurableEntityHost,
+  type DurableEntityContext,
+  makeDurableEntityAddress,
+} from "@voidhash/platform/DurableEntity";
+import type { NodeDurableEntityControlShape } from "@voidhash/platform-node/DurableEntity";
+import { makeNodeDurableEntitySession } from "@voidhash/platform-node/NodeDurableEntitySession";
+import { Duration, Effect, Fiber, Semaphore } from "effect";
+import WebSocket, { WebSocketServer, type RawData } from "ws";
+
+interface NodeDocumentSocket {
+  readonly webSocket: WebSocket;
+  attachment: SessionAttachment | null;
+}
+
+interface NodeDocumentRuntime {
+  readonly lock: Semaphore.Semaphore;
+  readonly presence: Map<string, PresenceEntry>;
+  readonly connections: Set<NodeDocumentSocket>;
+  readonly context: DocumentSessionContext<NodeDocumentSocket>;
+}
+
+/** Persisted idle-notification settings for the Node WebSocket host. */
+export interface MimicNodeIdleNotificationOptions {
+  readonly control: NodeDurableEntityControlShape;
+  readonly debounceMs: number;
+  readonly publish: (
+    message: MimicDocumentIdleMessageType,
+  ) => Effect.Effect<void, unknown>;
+  readonly pollIntervalMs?: number;
+}
+
+const mimicDocumentEntityType = "mimic-document";
+
+const documentKey = (collectionId: string, documentId: string): string =>
+  `${collectionId}\u0000${documentId}`;
+
+const documentEntityAddress = (collectionId: string, documentId: string) =>
+  makeDurableEntityAddress(
+    mimicDocumentEntityType,
+    `${collectionId}:${documentId}`,
+  );
+
+const parseDocumentEntityId = (
+  id: string,
+): { readonly collectionId: string; readonly documentId: string } | undefined => {
+  const separator = id.indexOf(":");
+  if (separator <= 0 || separator === id.length - 1) return undefined;
+  return {
+    collectionId: id.slice(0, separator),
+    documentId: id.slice(separator + 1),
+  };
+};
+
+const makeNodeIdleNotifier = (
+  entity: DurableEntityContext,
+  collectionId: string,
+  documentId: string,
+  authenticatedCount: () => number,
+  options: MimicNodeIdleNotificationOptions,
+) =>
+  makeIdleNotifier({
+    authenticatedCount,
+    collectionId,
+    debounceMs: options.debounceMs,
+    documentId,
+    now: Date.now,
+    publish: options.publish,
+    storage: {
+      get: (key) =>
+        entity.keyValue.get(key).pipe(
+          Effect.map((value) =>
+            typeof value === "number" ? value : undefined,
+          ),
+        ),
+      put: (key, value) => entity.keyValue.put(key, value),
+      setAlarm: entity.alarm.set,
+    },
+  });
+
+/** Dispatches all currently-due Mimic document alarms once. */
+export const dispatchMimicDocumentIdleAlarms = (
+  entities: DurableEntityHost["Service"],
+  options: MimicNodeIdleNotificationOptions,
+  authenticatedCount: (collectionId: string, documentId: string) => number,
+): Effect.Effect<void> =>
+  Effect.gen(function* () {
+    const now = Date.now();
+    const due = yield* options.control.listDueAlarms(now, 100);
+    yield* Effect.forEach(
+      due,
+      ({ address }) => {
+        if (address.type !== mimicDocumentEntityType) return Effect.void;
+        const document = parseDocumentEntityId(address.id);
+        if (!document) {
+          return Effect.logWarning(
+            `Ignoring malformed Mimic document entity alarm ${address.id}`,
+          );
+        }
+        return entities.run(address, (entity) =>
+          Effect.gen(function* () {
+            const scheduledTime = yield* entity.alarm.get;
+            if (scheduledTime === undefined || scheduledTime > now) return;
+            yield* entity.alarm.delete;
+            yield* makeNodeIdleNotifier(
+              entity,
+              document.collectionId,
+              document.documentId,
+              () =>
+                authenticatedCount(
+                  document.collectionId,
+                  document.documentId,
+                ),
+              options,
+            ).onAlarm();
+          }),
+        );
+      },
+      { discard: true },
+    );
+  });
+
+const parseDocumentAddress = (
+  request: IncomingMessage,
+): { readonly collectionId: string; readonly documentId: string } | undefined => {
+  const url = new URL(request.url ?? "/", "http://mimic");
+  const parts = url.pathname.split("/").filter(Boolean);
+  if (
+    parts.length !== 8 ||
+    parts[0] !== "ws" ||
+    parts[1] !== "v1" ||
+    parts[2] !== "databases" ||
+    parts[4] !== "collections" ||
+    parts[6] !== "documents"
+  ) {
+    return undefined;
+  }
+  return {
+    collectionId: decodeURIComponent(parts[5] ?? ""),
+    documentId: decodeURIComponent(parts[7] ?? ""),
+  };
+};
+
+const rejectUpgrade = (socket: Duplex, status: number, reason: string): void => {
+  socket.write(`HTTP/1.1 ${status} ${reason}\r\nConnection: close\r\n\r\n`);
+  socket.destroy();
+};
+
+const toFrame = (data: RawData, isBinary: boolean): string | Uint8Array => {
+  if (!isBinary) return data.toString();
+  if (data instanceof ArrayBuffer) return new Uint8Array(data);
+  if (Array.isArray(data)) return new Uint8Array(Buffer.concat(data));
+  return new Uint8Array(data);
+};
+
+// HostService's legacy signatures retain `R = any`; the fully-built entry
+// layer has already discharged those requirements at this adapter boundary.
+const withoutRequirements = <A, E>(effect: Effect.Effect<A, E, any>): Effect.Effect<A, E> =>
+  effect as Effect.Effect<A, E>;
+
+const run = (effect: Effect.Effect<void, unknown>): void => {
+  Effect.runFork(
+    effect.pipe(
+      Effect.catchCause((cause) => Effect.logError("mimic Node WebSocket handler failed", cause)),
+    ),
+  );
+};
+
+/**
+ * Installs the portable mimic document protocol on a Node HTTP server's
+ * WebSocket upgrade path. Returns a close function for server shutdown.
+ */
+export const installMimicNodeWebSocketServer = (
+  server: Server,
+  host: HostService,
+  entities: DurableEntityHost["Service"],
+  idleNotifications: MimicNodeIdleNotificationOptions,
+): (() => void) => {
+  const webSockets = new WebSocketServer({ noServer: true });
+  const documents = new Map<string, NodeDocumentRuntime>();
+
+  const runtimeFor = (collectionId: string, documentId: string): NodeDocumentRuntime => {
+    const key = documentKey(collectionId, documentId);
+    const existing = documents.get(key);
+    if (existing) return existing;
+
+    const presence = new Map<string, PresenceEntry>();
+    const registry = makeSessionRegistry<NodeDocumentSocket>({
+      authDeadlineMs: AUTH_DEADLINE_MS,
+      isAuthenticated: (socket) => socket.attachment?.authenticated === true,
+      close: (socket) => socket.webSocket.close(1008, "Authentication deadline exceeded"),
+    });
+    const entityAddress = documentEntityAddress(collectionId, documentId);
+    const idleNotifier = (entity: DurableEntityContext) =>
+      makeNodeIdleNotifier(
+        entity,
+        collectionId,
+        documentId,
+        () => registry.authenticated().length,
+        idleNotifications,
+      );
+    const context: DocumentSessionContext<NodeDocumentSocket> = {
+      registry,
+      presence,
+      getAttachment: (socket) => socket.attachment,
+      setAttachment: (socket, attachment) => void (socket.attachment = attachment),
+      send: (socket, message) =>
+        Effect.sync(() => void socket.webSocket.send(encodeServerMessage(message))),
+      close: (socket, code, reason) =>
+        Effect.sync(() => void socket.webSocket.close(code, reason)),
+      authenticate: (token, attachment) =>
+        withoutRequirements(
+          host.authenticateDocumentToken(
+            token,
+            attachment.collectionId,
+            attachment.documentId,
+            attachment.origin,
+          ),
+        ),
+      loadDocument: () =>
+        withoutRequirements(host.getDocument(collectionId, documentId)).pipe(
+          Effect.mapError((error) => ({
+            message: error instanceof Error ? error.message : String(error),
+          })),
+        ),
+      submitTransaction: (transaction) =>
+        withoutRequirements(host.submitTransaction(collectionId, documentId, transaction)).pipe(
+          Effect.catch((error) =>
+            Effect.succeed({
+              accepted: false as const,
+              version: 0,
+              transactionId: transaction.id,
+              reason: error instanceof Error ? error.message : String(error),
+            }),
+          ),
+        ),
+      onAccepted: (seq) =>
+        entities.run(entityAddress, (entity) =>
+          idleNotifier(entity).recordDirty(seq),
+        ),
+      onLastAuthenticatedClose: () =>
+        entities.run(entityAddress, (entity) =>
+          idleNotifier(entity).onLastAuthenticatedClose(),
+        ),
+    };
+    const runtime = {
+      lock: Semaphore.makeUnsafe(1),
+      presence,
+      connections: new Set<NodeDocumentSocket>(),
+      context,
+    };
+    documents.set(key, runtime);
+    return runtime;
+  };
+
+  const onUpgrade = (request: IncomingMessage, socket: Duplex, head: Buffer): void => {
+    const address = parseDocumentAddress(request);
+    if (!address) {
+      rejectUpgrade(socket, 404, "Not Found");
+      return;
+    }
+    webSockets.handleUpgrade(request, socket, head, (webSocket) => {
+      const runtime = runtimeFor(address.collectionId, address.documentId);
+      const nodeSocket: NodeDocumentSocket = {
+        webSocket,
+        attachment: {
+          connectionId: crypto.randomUUID(),
+          collectionId: address.collectionId,
+          documentId: address.documentId,
+          origin: request.headers.origin ?? null,
+          connectedAt: Date.now(),
+          authenticated: false,
+        },
+      };
+      const attachment = nodeSocket.attachment;
+      if (!attachment) {
+        webSocket.close(1011, "Session initialization failed");
+        return;
+      }
+      runtime.connections.add(nodeSocket);
+      runtime.context.registry.trackPending(attachment.connectionId, nodeSocket);
+      const entityAddress = documentEntityAddress(
+        address.collectionId,
+        address.documentId,
+      );
+      const entitySession = makeNodeDurableEntitySession(
+        attachment.connectionId,
+        {
+          send: (message) => webSocket.send(message),
+          close: (code, reason) => webSocket.close(code, reason),
+        },
+        attachment,
+      );
+      const ready = Effect.runPromise(
+        entities.run(entityAddress, (entity) => entity.sessions.attach(entitySession)),
+      );
+      webSocket.on("message", (data, isBinary) => {
+        run(
+          Effect.promise(() => ready).pipe(
+            Effect.andThen(
+              runtime.lock.withPermit(
+                handleDocumentSocketMessage(
+                  runtime.context,
+                  nodeSocket,
+                  toFrame(data, isBinary),
+                ),
+              ),
+            ),
+          ),
+        );
+      });
+      webSocket.once("close", () => {
+        run(
+          Effect.promise(() => ready).pipe(
+            Effect.andThen(
+              runtime.lock.withPermit(
+                Effect.gen(function* () {
+                  yield* handleDocumentSocketClose(runtime.context, nodeSocket);
+                  const attachment = nodeSocket.attachment;
+                  if (attachment) {
+                    yield* withoutRequirements(
+                      host.detachConnection(
+                        attachment.collectionId,
+                        attachment.documentId,
+                        attachment.connectionId,
+                      ),
+                    );
+                    yield* entities.run(entityAddress, (entity) =>
+                      entity.sessions.remove(attachment.connectionId),
+                    );
+                  }
+                  runtime.connections.delete(nodeSocket);
+                  if (runtime.connections.size === 0) {
+                    documents.delete(documentKey(address.collectionId, address.documentId));
+                  }
+                }),
+              ),
+            ),
+          ),
+        );
+      });
+    });
+  };
+
+  const alarmFiber = Effect.runFork(
+    Effect.forever(
+      dispatchMimicDocumentIdleAlarms(
+        entities,
+        idleNotifications,
+        (collectionId, documentId) =>
+          documents
+            .get(documentKey(collectionId, documentId))
+            ?.context.registry.authenticated().length ?? 0,
+      ).pipe(
+        Effect.catchCause((cause) =>
+          Effect.logError("Mimic document alarm dispatch failed", cause),
+        ),
+        Effect.andThen(
+          Effect.sleep(
+            Duration.millis(idleNotifications.pollIntervalMs ?? 500),
+          ),
+        ),
+      ),
+    ),
+  );
+  server.on("upgrade", onUpgrade);
+  return () => {
+    server.off("upgrade", onUpgrade);
+    Effect.runFork(Fiber.interrupt(alarmFiber));
+    for (const client of webSockets.clients) client.close(1001, "Server shutting down");
+    webSockets.close();
+  };
+};
diff --git a/selfhost/entry/src/mimic/PgControlStore.ts b/selfhost/entry/src/mimic/PgControlStore.ts
new file mode 100644
index 000000000..9a7dcc692
--- /dev/null
+++ b/selfhost/entry/src/mimic/PgControlStore.ts
@@ -0,0 +1,309 @@
+import * as PgClient from "@effect/sql-pg/PgClient";
+import type {
+  CollectionRecord,
+  ControlStoreApi,
+  DatabaseRecord,
+  DocumentIndexRecord,
+  GrantRecord,
+  MigrationRecord,
+  SchemaVersionRecord,
+  TokenRecord,
+  UserRecord,
+} from "@voidhash/mimic-db/core/store";
+import { ControlStore } from "@voidhash/mimic-db/core/store";
+import type { PgDurableEntityConfig } from "@voidhash/platform-node/DurableEntity";
+import { Effect, Layer } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+interface ControlState {
+  databases: DatabaseRecord[];
+  collections: CollectionRecord[];
+  schemaVersions: SchemaVersionRecord[];
+  users: UserRecord[];
+  grants: GrantRecord[];
+  tokens: TokenRecord[];
+  documents: DocumentIndexRecord[];
+  migrations: MigrationRecord[];
+}
+
+interface ControlStateRow {
+  readonly state: unknown;
+}
+
+const emptyState = (): ControlState => ({
+  databases: [],
+  collections: [],
+  schemaVersions: [],
+  users: [],
+  grants: [],
+  tokens: [],
+  documents: [],
+  migrations: [],
+});
+
+const decodeState = (value: unknown): ControlState => {
+  if (typeof value !== "object" || value === null) return emptyState();
+  const state = value as Partial<ControlState>;
+  return {
+    databases: Array.isArray(state.databases) ? state.databases : [],
+    collections: Array.isArray(state.collections) ? state.collections : [],
+    schemaVersions: Array.isArray(state.schemaVersions) ? state.schemaVersions : [],
+    users: Array.isArray(state.users) ? state.users : [],
+    grants: Array.isArray(state.grants) ? state.grants : [],
+    tokens: Array.isArray(state.tokens) ? state.tokens : [],
+    documents: Array.isArray(state.documents) ? state.documents : [],
+    migrations: Array.isArray(state.migrations) ? state.migrations : [],
+  };
+};
+
+const replaceBy = <A>(rows: A[], predicate: (row: A) => boolean, value: A): void => {
+  const index = rows.findIndex(predicate);
+  if (index === -1) rows.push(value);
+  else rows[index] = value;
+};
+
+const removeBy = <A>(rows: A[], predicate: (row: A) => boolean): void => {
+  const retained = rows.filter((row) => !predicate(row));
+  rows.splice(0, rows.length, ...retained);
+};
+
+const ensureTable = (sql: SqlClient.SqlClient) =>
+  sql.withTransaction(
+    Effect.gen(function* () {
+      yield* sql`SELECT pg_advisory_xact_lock(hashtext('voidhash_mimic_control_state_v1'))`;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS mimic_control_state (
+          id TEXT PRIMARY KEY,
+          state_json JSONB NOT NULL
+        )
+      `;
+    }),
+  );
+
+/** Builds the persistent mimic control store over a shared Postgres client. */
+export const makePgControlStore = (sql: SqlClient.SqlClient): ControlStoreApi => {
+  const load = sql<ControlStateRow>`
+    SELECT state_json AS "state" FROM mimic_control_state WHERE id = 'default'
+  `.pipe(
+    Effect.map((rows) => (rows[0] ? decodeState(rows[0].state) : emptyState())),
+    Effect.orDie,
+  );
+
+  const save = (state: ControlState) => {
+    const json = JSON.stringify(state);
+    return sql`
+      INSERT INTO mimic_control_state (id, state_json)
+      VALUES ('default', ${json}::jsonb)
+      ON CONFLICT (id) DO UPDATE SET state_json = EXCLUDED.state_json
+    `.pipe(Effect.asVoid, Effect.orDie);
+  };
+
+  const update = (mutate: (state: ControlState) => void) =>
+    Effect.gen(function* () {
+      const state = yield* load;
+      mutate(state);
+      yield* save(state);
+    });
+
+  return {
+    createDatabase: (record) => update((state) => state.databases.push(record)),
+    findDatabaseById: (id) =>
+      load.pipe(Effect.map((state) => state.databases.find((row) => row.id === id))),
+    findDatabaseByName: (name) =>
+      load.pipe(Effect.map((state) => state.databases.find((row) => row.name === name))),
+    listDatabases: () => load.pipe(Effect.map((state) => state.databases)),
+    deleteDatabase: (id) => update((state) => removeBy(state.databases, (row) => row.id === id)),
+
+    createCollection: (record) => update((state) => state.collections.push(record)),
+    findCollectionById: (id) =>
+      load.pipe(Effect.map((state) => state.collections.find((row) => row.id === id))),
+    findCollectionByName: (databaseId, name) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.collections.find(
+            (row) => row.databaseId === databaseId && row.name === name,
+          ),
+        ),
+      ),
+    listCollectionsByDatabase: (databaseId) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.collections.filter((row) => row.databaseId === databaseId),
+        ),
+      ),
+    updateCollectionSchema: (collectionId, schemaJson, version) =>
+      update((state) => {
+        const row = state.collections.find((candidate) => candidate.id === collectionId);
+        if (row) {
+          replaceBy(
+            state.collections,
+            (candidate) => candidate.id === collectionId,
+            { ...row, schemaJson, schemaVersion: version },
+          );
+        }
+      }),
+    deleteCollection: (id) =>
+      update((state) => {
+        removeBy(state.collections, (row) => row.id === id);
+        removeBy(state.schemaVersions, (row) => row.collectionId === id);
+      }),
+
+    addSchemaVersion: (record) =>
+      update((state) =>
+        replaceBy(
+          state.schemaVersions,
+          (row) => row.collectionId === record.collectionId && row.version === record.version,
+          record,
+        ),
+      ),
+    findSchemaVersion: (collectionId, version) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.schemaVersions.find(
+            (row) => row.collectionId === collectionId && row.version === version,
+          ),
+        ),
+      ),
+    listSchemaVersions: (collectionId) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.schemaVersions
+            .filter((row) => row.collectionId === collectionId)
+            .sort((left, right) => left.version - right.version),
+        ),
+      ),
+
+    createUser: (record) => update((state) => state.users.push(record)),
+    findUserById: (id) =>
+      load.pipe(Effect.map((state) => state.users.find((row) => row.id === id))),
+    findUserByUsername: (username) =>
+      load.pipe(Effect.map((state) => state.users.find((row) => row.username === username))),
+    listUsers: () => load.pipe(Effect.map((state) => state.users)),
+    deleteUser: (id) => update((state) => removeBy(state.users, (row) => row.id === id)),
+    updateUserPasswordHash: (id, passwordHash) =>
+      update((state) => {
+        const row = state.users.find((candidate) => candidate.id === id);
+        if (row) {
+          replaceBy(state.users, (candidate) => candidate.id === id, { ...row, passwordHash });
+        }
+      }),
+
+    createGrant: (record) =>
+      update((state) =>
+        replaceBy(
+          state.grants,
+          (row) => row.userId === record.userId && row.databaseId === record.databaseId,
+          record,
+        ),
+      ),
+    findGrant: (userId, databaseId) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.grants.find(
+            (row) => row.userId === userId && row.databaseId === databaseId,
+          ),
+        ),
+      ),
+    removeGrant: (userId, databaseId) =>
+      update((state) =>
+        removeBy(
+          state.grants,
+          (row) => row.userId === userId && row.databaseId === databaseId,
+        ),
+      ),
+    listGrants: () => load.pipe(Effect.map((state) => state.grants)),
+    listGrantsByUser: (userId) =>
+      load.pipe(Effect.map((state) => state.grants.filter((row) => row.userId === userId))),
+
+    createToken: (record) => update((state) => state.tokens.push(record)),
+    findTokenByHash: (tokenHash) =>
+      load.pipe(Effect.map((state) => state.tokens.find((row) => row.tokenHash === tokenHash))),
+    markTokenUsed: (id, usedAt) =>
+      update((state) => {
+        const row = state.tokens.find((candidate) => candidate.id === id);
+        if (row) replaceBy(state.tokens, (candidate) => candidate.id === id, { ...row, usedAt });
+      }),
+
+    registerDocument: (documentId, collectionId) =>
+      update((state) =>
+        replaceBy(
+          state.documents,
+          (row) => row.documentId === documentId,
+          { documentId, collectionId, deletedAt: null },
+        ),
+      ),
+    findDocumentIndex: (documentId) =>
+      load.pipe(
+        Effect.map((state) => state.documents.find((row) => row.documentId === documentId)),
+      ),
+    listDocumentsByCollection: (collectionId) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.documents.filter(
+            (row) => row.collectionId === collectionId && row.deletedAt === null,
+          ),
+        ),
+      ),
+    markDocumentDeleted: (documentId, deletedAt) =>
+      update((state) => {
+        const row = state.documents.find((candidate) => candidate.documentId === documentId);
+        if (row) {
+          replaceBy(
+            state.documents,
+            (candidate) => candidate.documentId === documentId,
+            { ...row, deletedAt },
+          );
+        }
+      }),
+
+    upsertMigration: (record) =>
+      update((state) =>
+        replaceBy(
+          state.migrations,
+          (row) => row.databaseId === record.databaseId && row.version === record.version,
+          record,
+        ),
+      ),
+    findMigration: (databaseId, version) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.migrations.find(
+            (row) => row.databaseId === databaseId && row.version === version,
+          ),
+        ),
+      ),
+    listMigrations: (databaseId) =>
+      load.pipe(
+        Effect.map((state) =>
+          state.migrations
+            .filter((row) => row.databaseId === databaseId)
+            .sort((left, right) => left.version - right.version),
+        ),
+      ),
+  };
+};
+
+/** Persistent Postgres control-store layer for the single-node mimic host. */
+export const PgControlStoreLive = (
+  config: PgDurableEntityConfig,
+): Layer.Layer<ControlStore> =>
+  Layer.effect(
+    ControlStore,
+    Effect.gen(function* () {
+      const sql = yield* SqlClient.SqlClient;
+      yield* ensureTable(sql);
+      return makePgControlStore(sql);
+    }),
+  ).pipe(
+    Layer.provide(
+      PgClient.layer({
+        host: config.host,
+        port: config.port,
+        database: config.database,
+        username: config.username,
+        password: config.password,
+        ssl: config.ssl,
+      }),
+    ),
+    Layer.orDie,
+  );
diff --git a/selfhost/entry/src/mimic/config.ts b/selfhost/entry/src/mimic/config.ts
new file mode 100644
index 000000000..760e2c052
--- /dev/null
+++ b/selfhost/entry/src/mimic/config.ts
@@ -0,0 +1,40 @@
+import type { PgDocumentConfig } from "@voidhash/mimic-db/core/pg-store";
+import type { PgDurableEntityConfig } from "@voidhash/platform-node/DurableEntity";
+import { Redacted } from "effect";
+
+import type { MimicNodeConfig } from "./MimicNode.ts";
+
+const numberFromEnv = (name: string, fallback: number): number => {
+  const value = process.env[name]?.trim();
+  if (!value) return fallback;
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed <= 0) {
+    throw new Error(`${name} must be a positive integer`);
+  }
+  return parsed;
+};
+
+/** Reads the self-host mimic database configuration from environment variables. */
+export const getMimicNodeConfig = (): MimicNodeConfig => {
+  const host = process.env.DATABASE_HOST?.trim() || "127.0.0.1";
+  const port = numberFromEnv("DATABASE_PORT", 5432);
+  const database = process.env.DATABASE_NAME?.trim() || "voidhash";
+  const username = process.env.DATABASE_USERNAME?.trim() || "voidhash";
+  const passwordValue = process.env.DATABASE_PASSWORD ?? "password";
+  const password = Redacted.make(passwordValue);
+  const databaseConfig: PgDurableEntityConfig = {
+    host,
+    port,
+    database,
+    username,
+    password,
+  };
+  const documents: PgDocumentConfig = {
+    host,
+    port,
+    database,
+    username,
+    password,
+  };
+  return { database: databaseConfig, documents };
+};
diff --git a/selfhost/entry/src/mimic/main.ts b/selfhost/entry/src/mimic/main.ts
new file mode 100644
index 000000000..f999dc9b1
--- /dev/null
+++ b/selfhost/entry/src/mimic/main.ts
@@ -0,0 +1,79 @@
+import { createServer } from "node:http";
+
+import { NodeHttpServer, NodeRuntime } from "@effect/platform-node";
+import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
+import { getConfig } from "@voidhash/mimic-db/config";
+import { makeRoutesLive } from "@voidhash/mimic-db/http/rpc-app";
+import { DurableEntityHost } from "@voidhash/platform/DurableEntity";
+import {
+  NodeDurableEntityControl,
+} from "@voidhash/platform-node/DurableEntity";
+import { NodePlatformRuntimeLive } from "@voidhash/platform-node/PlatformRuntime";
+import { PgQueueLive } from "@voidhash/platform-node/Queue";
+import { Context, Effect, Layer } from "effect";
+import { HttpRouter } from "effect/unstable/http";
+
+import { getMimicNodeConfig } from "./config.ts";
+import { makeSelfhostMimicDocumentIdlePublisher } from "./MimicDocumentIdleQueue.ts";
+import { makeMimicNodeHostLive } from "./MimicNode.ts";
+import { installMimicNodeWebSocketServer } from "./MimicNodeWebSocket.ts";
+
+const port = Number(process.env.PORT ?? "5001");
+const config = getMimicNodeConfig();
+const hostLayer = makeMimicNodeHostLive(config);
+
+NodeRuntime.runMain(
+  Effect.scoped(
+    Effect.gen(function* () {
+      const hostContext = yield* Layer.build(hostLayer);
+      const host = Context.get(hostContext, HostServiceTag);
+      const entities = Context.get(hostContext, DurableEntityHost);
+      const entityControl = Context.get(hostContext, NodeDurableEntityControl);
+      const queueContext = yield* Layer.build(
+        Layer.merge(PgQueueLive(config.database), NodePlatformRuntimeLive),
+      );
+      const publishIdleDocument = yield* makeSelfhostMimicDocumentIdlePublisher.pipe(
+        Effect.provide(queueContext),
+      );
+      const server = createServer();
+      const httpEffect = yield* makeRoutesLive(Layer.succeed(HostServiceTag, host)).pipe(
+        Layer.provide(NodeHttpServer.layerHttpServices),
+        HttpRouter.toHttpEffect,
+      );
+      const scope = yield* Effect.scope;
+      const handler = yield* NodeHttpServer.makeHandler(httpEffect, { scope });
+      server.on("request", handler);
+      const closeWebSockets = installMimicNodeWebSocketServer(
+        server,
+        host,
+        entities,
+        {
+          control: entityControl,
+          debounceMs: getConfig().idleNotifyDebounceMs,
+          publish: publishIdleDocument,
+        },
+      );
+      yield* Effect.acquireRelease(
+        Effect.callback<void, Error>((resume) => {
+          const onError = (error: Error) => resume(Effect.fail(error));
+          server.once("error", onError);
+          server.listen(port, "0.0.0.0", () => {
+            server.off("error", onError);
+            resume(Effect.void);
+          });
+        }),
+        () =>
+          Effect.callback<void>((resume) => {
+            if (!server.listening) {
+              resume(Effect.void);
+              return;
+            }
+            server.close(() => resume(Effect.void));
+          }),
+      );
+      yield* Effect.addFinalizer(() => Effect.sync(closeWebSockets));
+      yield* Effect.logInfo(`Listening on http://0.0.0.0:${port}`);
+      yield* Effect.never;
+    }),
+  ) as never,
+);
diff --git a/selfhost/entry/src/release-smoke.ts b/selfhost/entry/src/release-smoke.ts
new file mode 100644
index 000000000..a9f57ee83
--- /dev/null
+++ b/selfhost/entry/src/release-smoke.ts
@@ -0,0 +1,106 @@
+import { NodeRuntime } from "@effect/platform-node";
+import { BackendSnapshotHtmlRendererLive } from "@voidhash/backend/src/PaywallSnapshotHtmlRenderer.ts";
+import type { AnyAuthSession } from "@voidhash/core/domain/auth/Auth";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  AuditLogPort,
+  PaywallReleaseService,
+} from "@voidhash/core/services";
+import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
+import { Context, Effect, Layer } from "effect";
+
+import {
+  makeBackendInfrastructureLive,
+  makeSelfhostWorkosLive,
+} from "./backend/Backend.ts";
+import { getSelfhostRuntimeConfig } from "./config.ts";
+import { makeMimicNodeHostLive } from "./mimic/MimicNode.ts";
+import { getMimicNodeConfig } from "./mimic/config.ts";
+
+const resultPrefix = "SELFHOST_RELEASE_RESULT ";
+
+const requiredEnv = (name: string): string => {
+  const value = process.env[name]?.trim();
+  if (!value) throw new Error(`${name} is required`);
+  return value;
+};
+
+const makeSession = (projectId: string, userId: string): AnyAuthSession => {
+  const now = new Date();
+  return {
+    cookie: null,
+    method: "user",
+    name: "selfhost-release-smoke",
+    organizations: [],
+    person: null,
+    projects: [
+      {
+        id: projectId,
+        logo: null,
+        name: "Self-host release smoke",
+        organizationId: `organization_${projectId}`,
+        permissions: ["project:all"],
+        slug: "selfhost-release-smoke",
+      },
+    ],
+    user: {
+      createdAt: now,
+      email: "release-smoke@voidhash.local",
+      emailVerified: true,
+      id: userId,
+      image: null,
+      name: "Self-host Release Smoke",
+      role: null,
+      updatedAt: now,
+      workosUserId: null,
+    },
+  };
+};
+
+NodeRuntime.runMain(
+  Effect.scoped(
+    Effect.gen(function* () {
+      const paywallId = requiredEnv("SELFHOST_RELEASE_PAYWALL_ID");
+      const projectId = requiredEnv("SELFHOST_RELEASE_PROJECT_ID");
+      const userId = requiredEnv("SELFHOST_RELEASE_USER_ID");
+      const config = getSelfhostRuntimeConfig();
+      const hostContext = yield* Layer.build(
+        makeMimicNodeHostLive(getMimicNodeConfig()),
+      );
+      const hostLayer = Layer.succeed(
+        HostServiceTag,
+        Context.get(hostContext, HostServiceTag),
+      );
+      const workos = makeSelfhostWorkosLive(config.workos);
+      const infrastructure = makeBackendInfrastructureLive(config, workos).pipe(
+        Layer.provide(hostLayer),
+      );
+      const dependencies = Layer.mergeAll(
+        infrastructure,
+        AuditLogPort.noop,
+        BackendSnapshotHtmlRendererLive,
+      );
+      const releaseLayer = PaywallReleaseService.layer.pipe(
+        Layer.provide(dependencies),
+      );
+
+      const result = yield* Effect.gen(function* () {
+        const releases = yield* PaywallReleaseService;
+        const draft = yield* releases.createRelease(paywallId);
+        const loadedDraft = yield* releases.getDraftRelease(paywallId);
+        if (loadedDraft?.releaseId !== draft.releaseId) {
+          return yield* Effect.die("Draft release lookup returned a different release");
+        }
+        const published = yield* releases.publishRelease(draft.releaseId);
+        return { draft, published };
+      }).pipe(
+        Effect.provide(releaseLayer),
+        Effect.provideService(AuthSession, makeSession(projectId, userId)),
+      );
+
+      yield* Effect.sync(() => {
+        process.stdout.write(`${resultPrefix}${JSON.stringify(result)}\n`);
+      });
+    }),
+  ) as never,
+);
diff --git a/selfhost/entry/src/www/Www.ts b/selfhost/entry/src/www/Www.ts
new file mode 100644
index 000000000..339efee9e
--- /dev/null
+++ b/selfhost/entry/src/www/Www.ts
@@ -0,0 +1,166 @@
+import { createReadStream } from "node:fs";
+import { stat } from "node:fs/promises";
+import type { IncomingMessage, ServerResponse } from "node:http";
+import { extname, resolve, sep } from "node:path";
+import { pathToFileURL } from "node:url";
+
+import { NodeRequest, sendNodeResponse } from "srvx/node";
+
+const contentTypes: Readonly<Record<string, string>> = {
+  ".css": "text/css; charset=utf-8",
+  ".html": "text/html; charset=utf-8",
+  ".ico": "image/x-icon",
+  ".jpeg": "image/jpeg",
+  ".jpg": "image/jpeg",
+  ".js": "text/javascript; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".map": "application/json; charset=utf-8",
+  ".png": "image/png",
+  ".svg": "image/svg+xml",
+  ".txt": "text/plain; charset=utf-8",
+  ".wasm": "application/wasm",
+  ".webmanifest": "application/manifest+json",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+};
+
+type WwwFetch = (request: Request) => Response | Promise<Response>;
+
+export type WwwRequestHandler = (
+  request: IncomingMessage,
+  response: ServerResponse,
+) => Promise<void>;
+
+export interface WwwHandlerOptions {
+  readonly clientDirectory: string;
+  readonly fetch: WwwFetch;
+}
+
+const isWithinDirectory = (directory: string, candidate: string): boolean =>
+  candidate === directory || candidate.startsWith(`${directory}${sep}`);
+
+const serveStaticFile = async (
+  clientDirectory: string,
+  request: IncomingMessage,
+  response: ServerResponse,
+): Promise<boolean> => {
+  if (request.method !== "GET" && request.method !== "HEAD") {
+    return false;
+  }
+
+  let pathname: string;
+  try {
+    pathname = decodeURIComponent(new URL(request.url ?? "/", "http://selfhost.local").pathname);
+  } catch {
+    return false;
+  }
+
+  const directory = resolve(clientDirectory);
+  const candidate = resolve(directory, `.${pathname}`);
+  if (!isWithinDirectory(directory, candidate)) {
+    return false;
+  }
+
+  let metadata;
+  try {
+    metadata = await stat(candidate);
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") {
+      return false;
+    }
+    throw error;
+  }
+
+  if (!metadata.isFile()) {
+    return false;
+  }
+
+  response.statusCode = 200;
+  response.setHeader(
+    "Cache-Control",
+    pathname.startsWith("/assets/")
+      ? "public, max-age=31536000, immutable"
+      : "public, max-age=3600",
+  );
+  response.setHeader("Content-Length", metadata.size);
+  response.setHeader(
+    "Content-Type",
+    contentTypes[extname(candidate).toLowerCase()] ?? "application/octet-stream",
+  );
+  response.setHeader("X-Content-Type-Options", "nosniff");
+
+  if (request.method === "HEAD") {
+    response.end();
+    return true;
+  }
+
+  await new Promise<void>((resolveStream, rejectStream) => {
+    const stream = createReadStream(candidate);
+    stream.once("error", rejectStream);
+    response.once("finish", resolveStream);
+    response.once("error", rejectStream);
+    stream.pipe(response);
+  });
+  return true;
+};
+
+/**
+ * Creates a Node HTTP handler for the built TanStack Start application and its client assets.
+ */
+export const makeWwwRequestHandler = ({
+  clientDirectory,
+  fetch,
+}: WwwHandlerOptions): WwwRequestHandler =>
+  async (request, response) => {
+    if (await serveStaticFile(clientDirectory, request, response)) {
+      return;
+    }
+
+    const webResponse = await fetch(new NodeRequest({ req: request, res: response }));
+    response.setHeaders(webResponse.headers);
+    response.writeHead(webResponse.status, webResponse.statusText);
+    await sendNodeResponse(response, webResponse);
+  };
+
+/** Loads the built TanStack Start server entry and returns its Node HTTP handler. */
+export const loadWwwRequestHandler = async (
+  serverEntry: string,
+  clientDirectory: string,
+): Promise<WwwRequestHandler> => {
+  const loaded = (await import(pathToFileURL(resolve(serverEntry)).href)) as {
+    readonly default?: { readonly fetch?: WwwFetch };
+  };
+  const fetch = loaded.default?.fetch;
+  if (fetch === undefined) {
+    throw new Error(`WWW server entry does not export a default fetch handler: ${serverEntry}`);
+  }
+
+  return makeWwwRequestHandler({ clientDirectory, fetch: fetch.bind(loaded.default) });
+};
+
+/** Returns whether the request belongs to the WWW surface rather than a backend route. */
+export const isWwwRequest = (url: string | undefined): boolean => {
+  const pathname = new URL(url ?? "/", "http://selfhost.local").pathname;
+
+  if (
+    pathname === "/health" ||
+    pathname === "/rpc" ||
+    pathname.startsWith("/rpc/") ||
+    pathname === "/i" ||
+    pathname.startsWith("/i/") ||
+    pathname === "/files" ||
+    pathname.startsWith("/files/") ||
+    pathname === "/p" ||
+    pathname.startsWith("/p/") ||
+    pathname === "/c" ||
+    pathname.startsWith("/c/")
+  ) {
+    return false;
+  }
+
+  if (pathname === "/api" || pathname.startsWith("/api/")) {
+    return pathname === "/api/auth" || pathname.startsWith("/api/auth/");
+  }
+
+  return true;
+};
diff --git a/selfhost/entry/tests/Analytics.integration.test.ts b/selfhost/entry/tests/Analytics.integration.test.ts
new file mode 100644
index 000000000..8c007d1cf
--- /dev/null
+++ b/selfhost/entry/tests/Analytics.integration.test.ts
@@ -0,0 +1,105 @@
+import { EventCaptureService } from "@voidhash/core/services/analyticsIngest/EventCaptureService";
+import {
+  Db,
+  apiKeys,
+  eq,
+  personIdentities,
+  persons,
+  projects,
+  sql,
+} from "@voidhash/db";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  makeSelfhostAnalyticsRuntimeLive,
+  runSelfhostAnalyticsConsumers,
+} from "../src/backend/Analytics.ts";
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+
+const describePg = process.env.SELFHOST_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("self-host analytics queue", () => {
+  it("captures, processes, and acknowledges an event without ClickHouse", async () => {
+    const config = getSelfhostRuntimeConfig();
+    const suffix = crypto.randomUUID();
+    const projectId = `project_capture_${suffix}`;
+    const token = `vh_pk_capture_${suffix.replaceAll("-", "")}`;
+    const database = Db.layer(config.database);
+    const program = Effect.scoped(
+      Effect.gen(function* () {
+        const db = yield* Db;
+        yield* db.insert(projects).values({
+          id: projectId,
+          name: "Capture integration",
+          organizationId: `organization_${suffix}`,
+          slug: `capture-${suffix}`,
+        });
+        yield* db.insert(apiKeys).values({
+          end: token.slice(-4),
+          id: `apiKey_capture_${suffix}`,
+          isPublic: true,
+          key: token,
+          name: "Capture integration",
+          prefix: "vh_pk_",
+          projectId,
+        });
+
+        yield* Effect.forkScoped(runSelfhostAnalyticsConsumers(config));
+        const capture = yield* EventCaptureService;
+        const result = yield* capture.captureEvents({
+          events: [
+            {
+              context: {},
+              distinct_id: `person_${suffix}`,
+              event: "selfhost_integration",
+              properties: { plan: "pro" },
+              uuid: `event_${suffix}`,
+            },
+          ],
+          request: {
+            headers: {},
+            path: "/i/v1/capture",
+            receivedAt: new Date(),
+            requestId: `request_${suffix}`,
+            sentAt: new Date(),
+            token,
+          },
+        });
+        expect(result).toEqual({ accepted: 1, rejected: 0 });
+
+        const deadline = Date.now() + 10_000;
+        while (Date.now() < deadline) {
+          const rows = yield* db.query.persons.findMany({ where: { projectId } });
+          if (rows.length > 0) return rows.length;
+          yield* Effect.sleep("25 millis");
+        }
+        return yield* Effect.die("analytics queue did not process the captured event");
+      }).pipe(
+        Effect.provide(database),
+        Effect.provide(makeSelfhostAnalyticsRuntimeLive(config)),
+      ),
+    );
+
+    let count = 0;
+    try {
+      count = await Effect.runPromise(program);
+    } finally {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.delete(apiKeys).where(eq(apiKeys.projectId, projectId));
+          yield* db.delete(personIdentities).where(eq(personIdentities.projectId, projectId));
+          yield* db.delete(persons).where(eq(persons.projectId, projectId));
+          yield* db.delete(projects).where(eq(projects.id, projectId));
+          yield* db.execute(sql`
+            DELETE FROM platform_queue_messages
+            WHERE body_json -> 'envelope' ->> 'projectId' = ${projectId}
+          `);
+        }).pipe(Effect.provide(database)),
+      );
+    }
+
+    expect(count).toBe(1);
+  });
+});
diff --git a/selfhost/entry/tests/BackendAdapters.test.ts b/selfhost/entry/tests/BackendAdapters.test.ts
new file mode 100644
index 000000000..4950c17e2
--- /dev/null
+++ b/selfhost/entry/tests/BackendAdapters.test.ts
@@ -0,0 +1,126 @@
+import { ProjectSchemaCache } from "@voidhash/core/services";
+import { Effect, Redacted } from "effect";
+import { afterEach, describe, expect, it } from "vitest";
+
+import { MemoryProjectSchemaCacheLive } from "../src/backend/ProjectSchemaCache.ts";
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+
+const originalEnvironment = { ...process.env };
+
+afterEach(() => {
+  process.env = { ...originalEnvironment };
+});
+
+describe("self-host runtime configuration", () => {
+  it("uses local development defaults", () => {
+    delete process.env.NODE_ENV;
+    delete process.env.CLICKHOUSE_URL;
+    delete process.env.PUBLIC_BASE_URL;
+    delete process.env.S3_ENDPOINT;
+    delete process.env.SMTP_FROM_ADDRESS;
+    delete process.env.SMTP_FROM_NAME;
+    delete process.env.SMTP_HOST;
+    delete process.env.SMTP_PASSWORD;
+    delete process.env.SMTP_PORT;
+    delete process.env.SMTP_REQUIRE_TLS;
+    delete process.env.SMTP_SECURE;
+    delete process.env.SMTP_TLS_REJECT_UNAUTHORIZED;
+    delete process.env.SMTP_USERNAME;
+    delete process.env.SMTP_VERIFY_ON_START;
+    delete process.env.WORKOS_API_KEY;
+    delete process.env.WORKOS_CLIENT_ID;
+    delete process.env.WORKOS_COOKIE_PASSWORD;
+    delete process.env.WORKOS_WEBHOOK_SECRET;
+
+    const config = getSelfhostRuntimeConfig();
+
+    expect(config.clickhouse).toBeUndefined();
+    expect(config.publicBaseUrl).toBe("http://localhost:5001");
+    expect(config.publicObjectStore.endpoint).toBe("http://127.0.0.1:9000");
+    expect(config.mailer).toMatchObject({
+      defaultFrom: { address: "noreply@voidhash.local", name: "Voidhash" },
+      host: "127.0.0.1",
+      port: 1025,
+      verifyOnStart: false,
+    });
+    expect(config.workos.clientId).toBe("client_selfhost_not_configured");
+  });
+
+  it("reads authenticated TLS SMTP settings", () => {
+    process.env.SMTP_HOST = "smtp.example.com";
+    process.env.SMTP_PORT = "465";
+    process.env.SMTP_SECURE = "true";
+    process.env.SMTP_REQUIRE_TLS = "true";
+    process.env.SMTP_USERNAME = "mailer";
+    process.env.SMTP_PASSWORD = "secret";
+    process.env.SMTP_FROM_ADDRESS = "notifications@example.com";
+    process.env.SMTP_FROM_NAME = "Example";
+    process.env.SMTP_TLS_REJECT_UNAUTHORIZED = "false";
+    process.env.SMTP_VERIFY_ON_START = "true";
+
+    const mailer = getSelfhostRuntimeConfig().mailer;
+
+    expect(mailer).toMatchObject({
+      defaultFrom: { address: "notifications@example.com", name: "Example" },
+      host: "smtp.example.com",
+      port: 465,
+      requireTls: true,
+      secure: true,
+      tlsRejectUnauthorized: false,
+      username: "mailer",
+      verifyOnStart: true,
+    });
+    expect(Redacted.value(mailer.password!)).toBe("secret");
+  });
+
+  it("requires BYO WorkOS credentials in production", () => {
+    process.env.NODE_ENV = "production";
+    delete process.env.WORKOS_API_KEY;
+
+    expect(() => getSelfhostRuntimeConfig()).toThrow("WORKOS_API_KEY is required in production");
+  });
+
+  it("supports an explicit plaintext connection for an internal Compose database", () => {
+    process.env.DATABASE_HOST = "postgres";
+    process.env.DATABASE_SSL = "false";
+
+    expect(getSelfhostRuntimeConfig().database).toMatchObject({ host: "postgres", ssl: false });
+  });
+
+  it("enables ClickHouse only when its URL is configured", () => {
+    process.env.CLICKHOUSE_URL = "http://clickhouse:8123";
+    process.env.CLICKHOUSE_DATABASE = "analytics";
+    delete process.env.CLICKHOUSE_ADMIN_USERNAME;
+    delete process.env.CLICKHOUSE_ANALYTICS_QUERY_USERNAME;
+    delete process.env.CLICKHOUSE_RO_USERNAME;
+    delete process.env.CLICKHOUSE_USERNAME;
+
+    expect(getSelfhostRuntimeConfig().clickhouse).toMatchObject({
+      admin: { database: "analytics", username: "voidhash_admin" },
+      analyticsQuery: { username: "voidhash_query" },
+      readOnly: { username: "voidhash_ro" },
+      readWrite: { username: "voidhash_app" },
+    });
+  });
+
+});
+
+describe("memory project schema cache", () => {
+  it("stores, invalidates, and expires project schemas", async () => {
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const cache = yield* ProjectSchemaCache;
+        const project = cache.getByName("project-1");
+
+        expect(yield* project.get()).toBeUndefined();
+        yield* project.set({ version: 1 }, 10_000);
+        expect(yield* project.get()).toEqual({ version: 1 });
+        yield* project.invalidate();
+        expect(yield* project.get()).toBeUndefined();
+
+        yield* project.set({ version: 2 }, 0);
+        expect(yield* project.get()).toBeUndefined();
+      }).pipe(Effect.provide(MemoryProjectSchemaCacheLive)),
+    );
+  });
+});
diff --git a/selfhost/entry/tests/Background.integration.test.ts b/selfhost/entry/tests/Background.integration.test.ts
new file mode 100644
index 000000000..489084de1
--- /dev/null
+++ b/selfhost/entry/tests/Background.integration.test.ts
@@ -0,0 +1,68 @@
+import { Db, sql } from "@voidhash/db";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeSelfhostAnalyticsRuntimeLive } from "../src/backend/Analytics.ts";
+import { runSelfhostCronJobs } from "../src/backend/Background.ts";
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+
+const describePg = process.env.SELFHOST_PG_TEST === "1" ? describe : describe.skip;
+const requiredJobNames = [
+  "app-store-expire-parked-notifications",
+  "purchase-ledger-drain",
+] as const;
+
+describePg("self-host scheduled jobs", () => {
+  it("registers persistent schedule state for the required background jobs", async () => {
+    const config = getSelfhostRuntimeConfig();
+    const database = Db.layer(config.database);
+    let names: ReadonlyArray<string> = [];
+
+    try {
+      names = await Effect.runPromise(
+        Effect.scoped(
+          Effect.gen(function* () {
+            const db = yield* Db;
+            yield* Effect.forkScoped(runSelfhostCronJobs(config));
+            const deadline = Date.now() + 10_000;
+            while (Date.now() < deadline) {
+              const rows = yield* db
+                .execute(sql`
+                  SELECT job_name AS "jobName"
+                  FROM platform_cron_state
+                  WHERE job_name IN (
+                    'app-store-expire-parked-notifications',
+                    'purchase-ledger-drain'
+                  )
+                  ORDER BY job_name
+                `)
+                .pipe(Effect.catch(() => Effect.succeed([])));
+              const registered = rows.map((row) => String(row.jobName));
+              if (registered.length === requiredJobNames.length) return registered;
+              yield* Effect.sleep("25 millis");
+            }
+            return [];
+          }).pipe(
+            Effect.provide(database),
+            Effect.provide(makeSelfhostAnalyticsRuntimeLive(config)),
+          ),
+        ),
+      );
+    } finally {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.execute(sql`
+            DELETE FROM platform_cron_state
+            WHERE job_name IN (
+              'app-store-expire-parked-notifications',
+              'purchase-ledger-drain'
+            )
+          `);
+        }).pipe(Effect.provide(database)),
+      );
+    }
+
+    expect(names).toEqual(requiredJobNames);
+  });
+});
diff --git a/selfhost/entry/tests/Clickhouse.integration.test.ts b/selfhost/entry/tests/Clickhouse.integration.test.ts
new file mode 100644
index 000000000..ca117ce1b
--- /dev/null
+++ b/selfhost/entry/tests/Clickhouse.integration.test.ts
@@ -0,0 +1,178 @@
+import {
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+} from "@voidhash/clickhouse-db/analytics/schema";
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { EventCaptureService } from "@voidhash/core/services/analyticsIngest/EventCaptureService";
+import {
+  apiKeys,
+  Db,
+  eq,
+  personIdentities,
+  persons,
+  projects,
+  sql as pgSql,
+} from "@voidhash/db";
+import { Context, Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  makeSelfhostAnalyticsRuntimeLive,
+  runSelfhostAnalyticsConsumers,
+} from "../src/backend/Analytics.ts";
+import {
+  makeSelfhostClickhouseLayers,
+  migrateSelfhostClickhouse,
+} from "../src/backend/Clickhouse.ts";
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+
+const describeClickhouse =
+  process.env.SELFHOST_CLICKHOUSE_TEST === "1" ? describe : describe.skip;
+
+const analyticsTables = [
+  CLICKHOUSE_EVENTS_TABLE,
+  CLICKHOUSE_PERSONS_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_OVERRIDES_TABLE,
+  CLICKHOUSE_PERSON_IDENTITY_PENDING_OVERRIDES_V2_TABLE,
+] as const;
+
+const countEvents = (
+  layer: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>,
+  projectId: string,
+  organizationId?: string,
+) =>
+  Effect.runPromise(
+    Effect.gen(function* () {
+      const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+      const query = ch<{ readonly total: string }>`
+        SELECT count() AS total
+        FROM ${ch.literal(CLICKHOUSE_EVENTS_TABLE)}
+        WHERE project_id = ${ch.param("String", projectId)}
+      `;
+      const rows = yield* organizationId
+        ? ch.withClickhouseSettings(query, { SQL_organization_id: organizationId })
+        : query;
+      return Number(rows[0]?.total ?? 0);
+    }).pipe(Effect.provide(layer), Effect.scoped),
+  );
+
+describeClickhouse("self-host ClickHouse analytics", () => {
+  it("writes captured events and enforces the runtime access split", async () => {
+    const config = getSelfhostRuntimeConfig();
+    if (!config.clickhouse) throw new Error("CLICKHOUSE_URL is required for this test");
+    await Effect.runPromise(migrateSelfhostClickhouse(config.clickhouse));
+    const clickhouse = makeSelfhostClickhouseLayers(config.clickhouse);
+    const database = Db.layer(config.database);
+    const suffix = crypto.randomUUID();
+    const projectId = `project_clickhouse_${suffix}`;
+    const organizationId = `organization_clickhouse_${suffix}`;
+    const token = `vh_pk_clickhouse_${suffix.replaceAll("-", "")}`;
+
+    try {
+      const written = await Effect.runPromise(
+        Effect.scoped(
+          Effect.gen(function* () {
+            const db = yield* Db;
+            yield* db.insert(projects).values({
+              id: projectId,
+              name: "ClickHouse integration",
+              organizationId,
+              slug: `clickhouse-${suffix}`,
+            });
+            yield* db.insert(apiKeys).values({
+              end: token.slice(-4),
+              id: `apiKey_clickhouse_${suffix}`,
+              isPublic: true,
+              key: token,
+              name: "ClickHouse integration",
+              prefix: "vh_pk_",
+              projectId,
+            });
+
+            yield* Effect.forkScoped(
+              runSelfhostAnalyticsConsumers(config, clickhouse.readWrite),
+            );
+            const capture = yield* EventCaptureService;
+            yield* capture.captureEvents({
+              events: [
+                {
+                  context: {},
+                  distinct_id: `person_${suffix}`,
+                  event: "selfhost_clickhouse_integration",
+                  properties: { plan: "pro" },
+                  uuid: `event_${suffix}`,
+                },
+              ],
+              request: {
+                headers: {},
+                path: "/i/v1/capture",
+                receivedAt: new Date(),
+                requestId: `request_${suffix}`,
+                sentAt: new Date(),
+                token,
+              },
+            });
+
+            const readWriteContext = yield* Layer.build(clickhouse.readWrite);
+            const ch = Context.get(
+              readWriteContext,
+              ClickhouseWebClient.ClickhouseWebClient,
+            );
+            const deadline = Date.now() + 10_000;
+            while (Date.now() < deadline) {
+              const rows = yield* ch<{ readonly total: string }>`
+                SELECT count() AS total
+                FROM ${ch.literal(CLICKHOUSE_EVENTS_TABLE)}
+                WHERE project_id = ${ch.param("String", projectId)}
+              `;
+              if (Number(rows[0]?.total ?? 0) > 0) return Number(rows[0]?.total);
+              yield* Effect.sleep("25 millis");
+            }
+            return yield* Effect.die("analytics event did not land in ClickHouse");
+          }).pipe(
+            Effect.provide(database),
+            Effect.provide(makeSelfhostAnalyticsRuntimeLive(config)),
+            Effect.provide(clickhouse.readOnly),
+          ),
+        ),
+      );
+
+      expect(written).toBe(1);
+      expect(await countEvents(clickhouse.readOnly, projectId, organizationId)).toBe(1);
+      expect(await countEvents(clickhouse.readOnly, projectId, "another-organization")).toBe(0);
+      expect(await countEvents(clickhouse.analyticsQuery, projectId)).toBe(1);
+    } finally {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+          yield* Effect.forEach(
+            analyticsTables,
+            (table) =>
+              ch.asCommand(ch`
+                ALTER TABLE ${ch(table)} DELETE
+                WHERE project_id = ${projectId}
+              `),
+            { discard: true },
+          );
+        }).pipe(Effect.provide(clickhouse.readWrite), Effect.scoped),
+      );
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.delete(apiKeys).where(eq(apiKeys.projectId, projectId));
+          yield* db.delete(personIdentities).where(eq(personIdentities.projectId, projectId));
+          yield* db.delete(persons).where(eq(persons.projectId, projectId));
+          yield* db.delete(projects).where(eq(projects.id, projectId));
+          yield* db.execute(pgSql`
+            DELETE FROM platform_queue_messages
+            WHERE body_json -> 'envelope' ->> 'projectId' = ${projectId}
+          `);
+        }).pipe(Effect.provide(database)),
+      );
+    }
+  }, 30_000);
+});
diff --git a/selfhost/entry/tests/Compiler.test.ts b/selfhost/entry/tests/Compiler.test.ts
new file mode 100644
index 000000000..0139f6edd
--- /dev/null
+++ b/selfhost/entry/tests/Compiler.test.ts
@@ -0,0 +1,40 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeNodeComponentCompiler } from "../src/compiler/CompilerCore.ts";
+
+const compiler = makeNodeComponentCompiler();
+
+const validComponent = `
+  import { defineComponent } from "@voidhash/paywalls";
+  export default defineComponent({
+    title: "Hero",
+    props: (p) => ({ heading: p.string().default("Go Pro") }),
+    actions: () => ({}),
+    previews: { default: {} },
+    render: () => null,
+  });
+`;
+
+describe("self-host component compiler", () => {
+  it("compiles and extracts a component manifest", async () => {
+    const result = await Effect.runPromise(compiler.compileAndExtract(validComponent));
+
+    expect(result.status).toBe("ready");
+    if (result.status === "ready") {
+      expect(result.manifest).toMatchObject({ manifestVersion: 2, title: "Hero" });
+    }
+  });
+
+  it("classifies source and runtime failures without escaping", async () => {
+    const compile = await Effect.runPromise(
+      compiler.compileAndExtract("export default function Hero() { return <View>; }"),
+    );
+    const runtime = await Effect.runPromise(
+      compiler.compileAndExtract('throw new Error("boom"); export default {};'),
+    );
+
+    expect(compile).toMatchObject({ phase: "compile", status: "error" });
+    expect(runtime).toMatchObject({ phase: "runtime", status: "error" });
+  });
+});
diff --git a/selfhost/entry/tests/CompilerClient.integration.test.ts b/selfhost/entry/tests/CompilerClient.integration.test.ts
new file mode 100644
index 000000000..9e15f8cd0
--- /dev/null
+++ b/selfhost/entry/tests/CompilerClient.integration.test.ts
@@ -0,0 +1,33 @@
+import { ComponentCompiler } from "@voidhash/core/services/paywallWorkspace/ComponentCompiler";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeHttpComponentCompilerLive } from "../src/compiler/CompilerClient.ts";
+
+const compilerUrl = process.env.SELFHOST_COMPILER_URL;
+const describeCompiler = compilerUrl ? describe : describe.skip;
+
+describeCompiler("self-host component compiler client", () => {
+  it("round-trips compile and extraction results through HTTP", async () => {
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const compiler = yield* ComponentCompiler;
+        return yield* compiler.compileAndExtract(`
+          import { defineComponent } from "@voidhash/paywalls";
+          export default defineComponent({
+            title: "Client Card",
+            props: () => ({}),
+            actions: () => ({}),
+            previews: { default: {} },
+            render: () => null,
+          });
+        `);
+      }).pipe(Effect.provide(makeHttpComponentCompilerLive(compilerUrl ?? ""))),
+    );
+
+    expect(result.status).toBe("ready");
+    if (result.status === "ready") {
+      expect(result.manifest).toMatchObject({ manifestVersion: 2, title: "Client Card" });
+    }
+  });
+});
diff --git a/selfhost/entry/tests/MimicDocumentIdle.test.ts b/selfhost/entry/tests/MimicDocumentIdle.test.ts
new file mode 100644
index 000000000..7acda3ceb
--- /dev/null
+++ b/selfhost/entry/tests/MimicDocumentIdle.test.ts
@@ -0,0 +1,111 @@
+import {
+  IDLE_DIRTY_SEQ_KEY,
+  IDLE_NOTIFIED_SEQ_KEY,
+  type MimicDocumentIdleMessageType,
+} from "@voidhash/mimic-db/ws/idle-notify";
+import { makeDurableEntityAddress } from "@voidhash/platform/DurableEntity";
+import type { NodeDurableEntityControlShape } from "@voidhash/platform-node/DurableEntity";
+import { makeMemoryDurableEntityHost } from "@voidhash/platform-node/MemoryDurableEntity";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { dispatchMimicDocumentIdleAlarms } from "../src/mimic/MimicNodeWebSocket.ts";
+
+const address = makeDurableEntityAddress(
+  "mimic-document",
+  "collection-1:document-1",
+);
+
+const control: NodeDurableEntityControlShape = {
+  listDueAlarms: () => Effect.succeed([{ address, scheduledTime: 0 }]),
+};
+
+describe("Mimic Node idle alarm dispatch", () => {
+  it("publishes and records a persisted dirty revision", async () => {
+    const entities = makeMemoryDurableEntityHost();
+    const published: MimicDocumentIdleMessageType[] = [];
+    await Effect.runPromise(
+      entities.run(address, (entity) =>
+        Effect.gen(function* () {
+          yield* entity.keyValue.put(IDLE_DIRTY_SEQ_KEY, 7);
+          yield* entity.keyValue.put(IDLE_NOTIFIED_SEQ_KEY, 4);
+          yield* entity.alarm.set(0);
+        }),
+      ),
+    );
+
+    await Effect.runPromise(
+      dispatchMimicDocumentIdleAlarms(
+        entities,
+        {
+          control,
+          debounceMs: 1,
+          publish: (message) =>
+            Effect.sync(() => {
+              published.push(message);
+            }),
+        },
+        () => 0,
+      ),
+    );
+
+    expect(published).toEqual([
+      { collectionId: "collection-1", documentId: "document-1", seq: 7 },
+    ]);
+    expect(
+      await Effect.runPromise(
+        entities.run(address, (entity) =>
+          entity.keyValue.get(IDLE_NOTIFIED_SEQ_KEY),
+        ),
+      ),
+    ).toBe(7);
+    expect(
+      await Effect.runPromise(
+        entities.run(address, (entity) => entity.alarm.get),
+      ),
+    ).toBeUndefined();
+  });
+
+  it("consumes the alarm without publishing when a collaborator reconnected", async () => {
+    const entities = makeMemoryDurableEntityHost();
+    const published: MimicDocumentIdleMessageType[] = [];
+    await Effect.runPromise(
+      entities.run(address, (entity) =>
+        Effect.gen(function* () {
+          yield* entity.keyValue.put(IDLE_DIRTY_SEQ_KEY, 8);
+          yield* entity.keyValue.put(IDLE_NOTIFIED_SEQ_KEY, 7);
+          yield* entity.alarm.set(0);
+        }),
+      ),
+    );
+
+    await Effect.runPromise(
+      dispatchMimicDocumentIdleAlarms(
+        entities,
+        {
+          control,
+          debounceMs: 1,
+          publish: (message) =>
+            Effect.sync(() => {
+              published.push(message);
+            }),
+        },
+        () => 1,
+      ),
+    );
+
+    expect(published).toEqual([]);
+    expect(
+      await Effect.runPromise(
+        entities.run(address, (entity) =>
+          entity.keyValue.get(IDLE_NOTIFIED_SEQ_KEY),
+        ),
+      ),
+    ).toBe(7);
+    expect(
+      await Effect.runPromise(
+        entities.run(address, (entity) => entity.alarm.get),
+      ),
+    ).toBeUndefined();
+  });
+});
diff --git a/selfhost/entry/tests/MimicNode.integration.test.ts b/selfhost/entry/tests/MimicNode.integration.test.ts
new file mode 100644
index 000000000..fe821bab9
--- /dev/null
+++ b/selfhost/entry/tests/MimicNode.integration.test.ts
@@ -0,0 +1,190 @@
+import { createServer } from "node:http";
+import type { AddressInfo } from "node:net";
+
+import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
+import type { SchemaObject, Value } from "@voidhash/mimic-core";
+import {
+  DurableEntityHost,
+  makeDurableEntityAddress,
+} from "@voidhash/platform/DurableEntity";
+import { NodeDurableEntityControl } from "@voidhash/platform-node/DurableEntity";
+import { Effect, ManagedRuntime, Redacted } from "effect";
+import { describe, expect, it } from "vitest";
+import WebSocket from "ws";
+
+import { makeMimicNodeHostLive, type MimicNodeConfig } from "../src/mimic/MimicNode.ts";
+import { installMimicNodeWebSocketServer } from "../src/mimic/MimicNodeWebSocket.ts";
+
+const config: MimicNodeConfig = {
+  database: {
+    host: process.env.SELFHOST_PG_HOST ?? "127.0.0.1",
+    port: Number(process.env.SELFHOST_PG_PORT ?? "5432"),
+    database: process.env.SELFHOST_PG_DATABASE ?? "voidhash",
+    username: process.env.SELFHOST_PG_USERNAME ?? "voidhash",
+    password: Redacted.make(process.env.SELFHOST_PG_PASSWORD ?? "password"),
+  },
+  documents: {
+    host: process.env.SELFHOST_PG_HOST ?? "127.0.0.1",
+    port: Number(process.env.SELFHOST_PG_PORT ?? "5432"),
+    database: process.env.SELFHOST_PG_DATABASE ?? "voidhash",
+    username: process.env.SELFHOST_PG_USERNAME ?? "voidhash",
+    password: Redacted.make(process.env.SELFHOST_PG_PASSWORD ?? "password"),
+  },
+};
+
+const schema: SchemaObject = {
+  kind: "object",
+  fields: {
+    title: { kind: "string", default: { kind: "string", value: "" } },
+  },
+};
+const value: Value = {
+  kind: "object",
+  fields: { title: { kind: "string", value: "persistent" } },
+};
+
+const describePg = process.env.SELFHOST_PG_TEST === "1" ? describe : describe.skip;
+
+const runHost = <A, E>(program: Effect.Effect<A, E, any>): Promise<A> =>
+  Effect.runPromise(
+    program.pipe(Effect.provide(makeMimicNodeHostLive(config))) as Effect.Effect<A, E>,
+  );
+
+const runStandalone = <A, E>(program: Effect.Effect<A, E, any>): Promise<A> =>
+  Effect.runPromise(program as Effect.Effect<A, E>);
+
+describePg("self-host mimic Node composition", () => {
+  it("restores control and document state after the host layer restarts", async () => {
+    const suffix = crypto.randomUUID();
+    const created = await runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const database = yield* host.createDatabase(`restart-${suffix}`, "integration");
+        const collection = yield* host.createCollection(database.id, "documents", schema);
+        const document = yield* host.createDocument(collection.id, undefined, value);
+        return { database, collection, document };
+      }),
+    );
+
+    const restored = await runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        return yield* host.getDocument(created.collection.id, created.document.id);
+      }),
+    );
+
+    expect(restored).toEqual(created.document);
+
+    await runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        yield* host.deleteDocument(created.collection.id, created.document.id);
+        yield* host.deleteCollection(created.collection.id);
+        yield* host.deleteDatabase(created.database.id);
+      }),
+    );
+  });
+
+  it("serves the document auth and snapshot protocol over a real Node WebSocket", async () => {
+    const runtime = ManagedRuntime.make(makeMimicNodeHostLive(config));
+    const host = await runtime.runPromise(HostServiceTag);
+    const entities = await runtime.runPromise(DurableEntityHost);
+    const entityControl = await runtime.runPromise(NodeDurableEntityControl);
+    const server = createServer();
+    const closeWebSockets = installMimicNodeWebSocketServer(server, host, entities, {
+      control: entityControl,
+      debounceMs: 15_000,
+      pollIntervalMs: 60_000,
+      publish: () => Effect.void,
+    });
+    await new Promise<void>((resolve, reject) => {
+      server.once("error", reject);
+      server.listen(0, "127.0.0.1", resolve);
+    });
+
+    const suffix = crypto.randomUUID();
+    const documentId = `ws-${suffix.slice(0, 20)}`;
+    let databaseId: string | undefined;
+    let collectionId: string | undefined;
+    try {
+      const created = await runStandalone(
+        Effect.gen(function* () {
+          const database = yield* host.createDatabase(`ws-${suffix}`, "integration");
+          const collection = yield* host.createCollection(database.id, "documents", schema);
+          const document = yield* host.createDocument(collection.id, documentId, value);
+          const auth = yield* host.createDocumentAuthToken(
+            collection.id,
+            document.id,
+            "write",
+            [],
+            60,
+          );
+          return { database, collection, document, auth };
+        }),
+      );
+      databaseId = created.database.id;
+      collectionId = created.collection.id;
+      const address = server.address() as AddressInfo;
+      const socket = new WebSocket(
+        `ws://127.0.0.1:${address.port}/ws/v1/databases/${databaseId}/collections/${collectionId}/documents/${documentId}`,
+      );
+      const messages = await new Promise<unknown[]>((resolve, reject) => {
+        const received: unknown[] = [];
+        const timeout = setTimeout(() => reject(new Error("timed out waiting for snapshot")), 5_000);
+        socket.once("error", reject);
+        socket.once("open", () =>
+          socket.send(JSON.stringify({ type: "auth", token: created.auth.token })),
+        );
+        socket.on("message", (data) => {
+          const message = JSON.parse(data.toString()) as { readonly type?: string };
+          received.push(message);
+          if (message.type === "snapshot") {
+            clearTimeout(timeout);
+            resolve(received);
+          }
+        });
+      });
+      expect(messages).toContainEqual(
+        expect.objectContaining({ type: "auth_result", success: true, permission: "write" }),
+      );
+      expect(messages).toContainEqual(
+        expect.objectContaining({ type: "snapshot", value, version: 1 }),
+      );
+      const entityAddress = makeDurableEntityAddress(
+        "mimic-document",
+        `${collectionId}:${documentId}`,
+      );
+      const attached = await Effect.runPromise(
+        entities.run(entityAddress, (entity) => entity.sessions.list),
+      );
+      expect(attached).toHaveLength(1);
+
+      const closed = new Promise<void>((resolve) => socket.once("close", () => resolve()));
+      socket.close(1000, "done");
+      await closed;
+      let remaining = attached;
+      for (let attempt = 0; attempt < 20 && remaining.length > 0; attempt += 1) {
+        await new Promise((resolve) => setTimeout(resolve, 10));
+        remaining = await Effect.runPromise(
+          entities.run(entityAddress, (entity) => entity.sessions.list),
+        );
+      }
+      expect(remaining).toHaveLength(0);
+    } finally {
+      if (databaseId && collectionId) {
+        const cleanupDatabaseId = databaseId;
+        const cleanupCollectionId = collectionId;
+        await runStandalone(
+          Effect.gen(function* () {
+            yield* host.deleteDocument(cleanupCollectionId, documentId);
+            yield* host.deleteCollection(cleanupCollectionId);
+            yield* host.deleteDatabase(cleanupDatabaseId);
+          }),
+        );
+      }
+      closeWebSockets();
+      await new Promise<void>((resolve) => server.close(() => resolve()));
+      await runtime.dispose();
+    }
+  });
+});
diff --git a/selfhost/entry/tests/PaywallRelease.integration.test.ts b/selfhost/entry/tests/PaywallRelease.integration.test.ts
new file mode 100644
index 000000000..ae790a539
--- /dev/null
+++ b/selfhost/entry/tests/PaywallRelease.integration.test.ts
@@ -0,0 +1,155 @@
+import {
+  AuditLogPort,
+  MimicHost,
+  PaywallArtifactStore,
+  PaywallReleaseService,
+  SnapshotHtmlRenderer,
+} from "@voidhash/core/services";
+import type { AnyAuthSession } from "@voidhash/core/domain/auth/Auth";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { PaywallAssetConfig } from "@voidhash/core/services/paywallLocations/PaywallAssetConfig";
+import { Db, ReleaseStatus, eq, paywallReleases, paywalls } from "@voidhash/db";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+
+const describePg = process.env.SELFHOST_PG_TEST === "1" ? describe : describe.skip;
+
+const makeSession = (projectId: string, userId: string): AnyAuthSession => {
+  const now = new Date();
+  return {
+    cookie: null,
+    method: "user",
+    name: "selfhost-release-test",
+    organizations: [],
+    person: null,
+    projects: [
+      {
+        id: projectId,
+        logo: null,
+        name: "Self-host release project",
+        organizationId: "organization_selfhost_release",
+        permissions: ["project:all"],
+        slug: "selfhost-release",
+      },
+    ],
+    user: {
+      createdAt: now,
+      email: "release-test@example.test",
+      emailVerified: true,
+      id: userId,
+      image: null,
+      name: "Release Test",
+      role: null,
+      updatedAt: now,
+      workosUserId: null,
+    },
+  };
+};
+
+describePg("self-host paywall releases", () => {
+  it("creates, publishes, and advances a visual paywall release", async () => {
+    const config = getSelfhostRuntimeConfig();
+    const suffix = crypto.randomUUID();
+    const paywallId = `paywall_${suffix}`;
+    const projectId = `project_${suffix}`;
+    const userId = `user_${suffix}`;
+    const objects = new Map<string, Uint8Array>();
+    const database = Db.layer(config.database);
+    const dependencies = Layer.mergeAll(
+      database,
+      AuditLogPort.noop,
+      Layer.succeed(MimicHost, {
+        createPaywallEditToken: () => Effect.die("unused"),
+        ensurePaywallDocument: () => Effect.void,
+        getPaywallDocument: () => Effect.die("unused"),
+        getPaywallSnapshot: () => Effect.succeed({ id: "root", type: "root" }),
+        submitPaywallTransaction: () => Effect.die("unused"),
+      }),
+      Layer.succeed(PaywallArtifactStore, {
+        bucketName: "selfhost-release-test",
+        getObject: (key) =>
+          Effect.sync(() => {
+            const body = objects.get(key);
+            return body === undefined ? null : { body, contentType: "text/html; charset=utf-8" };
+          }),
+        head: (key) =>
+          Effect.succeed(objects.has(key) ? { size: objects.get(key)?.length ?? 0 } : null),
+        putObject: ({ body, key }) =>
+          Effect.sync(() => {
+            objects.set(key, body);
+          }),
+      }),
+      Layer.succeed(PaywallAssetConfig, {
+        cdnUrl: "http://localhost:5001",
+        publicBaseUrl: "http://localhost:5001",
+      }),
+      Layer.succeed(SnapshotHtmlRenderer, {
+        render: ({ metadata }) =>
+          Effect.succeed(`<html><body>release ${metadata.version}</body></html>`),
+      }),
+    );
+    const releaseLayer = PaywallReleaseService.layer.pipe(Layer.provide(dependencies));
+
+    try {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.insert(paywalls).values({
+            id: paywallId,
+            name: "Self-host release",
+            projectId,
+            slug: `selfhost-release-${suffix}`,
+          });
+        }).pipe(Effect.provide(database)),
+      );
+
+      const result = await Effect.runPromise(
+        Effect.gen(function* () {
+          const releases = yield* PaywallReleaseService;
+          const firstDraft = yield* releases.createRelease(paywallId);
+          const draft = yield* releases.getDraftRelease(paywallId);
+          const firstPublished = yield* releases.publishRelease(firstDraft.releaseId);
+          const secondDraft = yield* releases.createRelease(paywallId);
+          const secondPublished = yield* releases.publishRelease(secondDraft.releaseId);
+          return { draft, firstDraft, firstPublished, secondDraft, secondPublished };
+        }).pipe(
+          Effect.provide(releaseLayer),
+          Effect.provideService(AuthSession, makeSession(projectId, userId)),
+        ),
+      );
+
+      const rows = await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          return yield* db.query.paywallReleases.findMany({
+            orderBy: { version: "asc" },
+            where: { paywallId },
+          });
+        }).pipe(Effect.provide(database)),
+      );
+
+      expect(result.draft?.releaseId).toBe(result.firstDraft.releaseId);
+      expect(result.firstPublished.version).toBe(1);
+      expect(result.secondDraft.version).toBe(2);
+      expect(result.secondPublished.version).toBe(2);
+      expect(objects.size).toBe(2);
+      expect(rows.filter((row) => row.status === ReleaseStatus.released)).toHaveLength(2);
+      expect(
+        rows.find((row) => row.version === 1 && row.status === ReleaseStatus.released)?.isActive,
+      ).toBe(false);
+      expect(
+        rows.find((row) => row.version === 2 && row.status === ReleaseStatus.released)?.isActive,
+      ).toBe(true);
+    } finally {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.delete(paywallReleases).where(eq(paywallReleases.paywallId, paywallId));
+          yield* db.delete(paywalls).where(eq(paywalls.id, paywallId));
+        }).pipe(Effect.provide(database)),
+      );
+    }
+  });
+});
diff --git a/selfhost/entry/tests/Push.integration.test.ts b/selfhost/entry/tests/Push.integration.test.ts
new file mode 100644
index 000000000..4465d7c22
--- /dev/null
+++ b/selfhost/entry/tests/Push.integration.test.ts
@@ -0,0 +1,62 @@
+import { PushDeliveryDispatch } from "@voidhash/core/services/notifications/PushDeliveryDispatch";
+import { Db, sql } from "@voidhash/db";
+import { Context, Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeSelfhostAnalyticsRuntimeLive } from "../src/backend/Analytics.ts";
+import {
+  runSelfhostPushDeliveryConsumers,
+  SelfhostPushDeliveryDispatchLive,
+} from "../src/backend/Push.ts";
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+
+const describePg = process.env.SELFHOST_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("self-host push-delivery queue", () => {
+  it("dispatches and acknowledges a delivery pointer through the consumer", async () => {
+    const config = getSelfhostRuntimeConfig();
+    const deliveryId = `pushDelivery_${crypto.randomUUID()}`;
+    const database = Db.layer(config.database);
+
+    const remaining = await Effect.runPromise(
+      Effect.scoped(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.execute(sql`
+            DELETE FROM platform_queue_messages
+            WHERE body_json ->> 'pushNotificationDeliveryId' = ${deliveryId}
+          `);
+          const dispatchContext = yield* Layer.build(SelfhostPushDeliveryDispatchLive);
+          const dispatch = Context.get(dispatchContext, PushDeliveryDispatch);
+          yield* Effect.forkScoped(runSelfhostPushDeliveryConsumers(config));
+          yield* dispatch.dispatch([
+            {
+              projectId: "project_push_integration",
+              provider: "fcm",
+              pushNotificationDeliveryId: deliveryId,
+              pushNotificationSendId: "pushSend_integration",
+            },
+          ]);
+
+          const deadline = Date.now() + 10_000;
+          while (Date.now() < deadline) {
+            const rows = yield* db.execute(sql`
+              SELECT COUNT(*)::integer AS total
+              FROM platform_queue_messages
+              WHERE body_json ->> 'pushNotificationDeliveryId' = ${deliveryId}
+            `);
+            const total = Number((rows[0] as { readonly total?: number } | undefined)?.total ?? 0);
+            if (total === 0) return total;
+            yield* Effect.sleep("25 millis");
+          }
+          return 1;
+        }).pipe(
+          Effect.provide(database),
+          Effect.provide(makeSelfhostAnalyticsRuntimeLive(config)),
+        ),
+      ),
+    );
+
+    expect(remaining).toBe(0);
+  });
+});
diff --git a/selfhost/entry/tests/ThumbnailQueue.integration.test.ts b/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
new file mode 100644
index 000000000..17db9221e
--- /dev/null
+++ b/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
@@ -0,0 +1,62 @@
+import { PaywallThumbnailService } from "@voidhash/core/services/paywallThumbnails/PaywallThumbnailService";
+import { Db, sql } from "@voidhash/db";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeSelfhostAnalyticsRuntimeLive } from "../src/backend/Analytics.ts";
+import { runSelfhostPaywallThumbnailConsumer } from "../src/backend/Thumbnails.ts";
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+import {
+  makeSelfhostMimicDocumentIdlePublisher,
+  mimicDocumentIdleQueueName,
+} from "../src/mimic/MimicDocumentIdleQueue.ts";
+
+const describePg = process.env.SELFHOST_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("self-host thumbnail queue", () => {
+  it("delivers and acknowledges an idle-document revision", async () => {
+    const config = getSelfhostRuntimeConfig();
+    const documentId = `thumbnail-${crypto.randomUUID()}`;
+    const handled: Array<{ readonly documentId: string; readonly seq: number }> = [];
+
+    try {
+      await Effect.runPromise(
+        Effect.scoped(
+          Effect.gen(function* () {
+            const publish = yield* makeSelfhostMimicDocumentIdlePublisher;
+            const service = PaywallThumbnailService.of({
+              handleDocumentIdle: (input) =>
+                Effect.sync(() => {
+                  handled.push(input);
+                }),
+            });
+            yield* Effect.forkScoped(
+              runSelfhostPaywallThumbnailConsumer.pipe(
+                Effect.provideService(PaywallThumbnailService, service),
+              ),
+            );
+            yield* publish({ collectionId: "collection-1", documentId, seq: 17 });
+
+            const deadline = Date.now() + 10_000;
+            while (handled.length === 0 && Date.now() < deadline) {
+              yield* Effect.sleep("25 millis");
+            }
+          }),
+        ).pipe(Effect.provide(makeSelfhostAnalyticsRuntimeLive(config))),
+      );
+    } finally {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.execute(sql`
+            DELETE FROM platform_queue_messages
+            WHERE queue_name = ${mimicDocumentIdleQueueName}
+              AND body_json ->> 'documentId' = ${documentId}
+          `);
+        }).pipe(Effect.provide(Db.layer(config.database))),
+      );
+    }
+
+    expect(handled).toEqual([{ documentId, seq: 17 }]);
+  });
+});
diff --git a/selfhost/entry/tests/Thumbnails.test.ts b/selfhost/entry/tests/Thumbnails.test.ts
new file mode 100644
index 000000000..76683c256
--- /dev/null
+++ b/selfhost/entry/tests/Thumbnails.test.ts
@@ -0,0 +1,54 @@
+import { HtmlScreenshot } from "@voidhash/core/services/paywallThumbnails/HtmlScreenshot";
+import { SnapshotImageRenderer } from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { SelfhostSnapshotImageRendererLive } from "../src/backend/Thumbnails.ts";
+
+describe("self-host paywall thumbnail renderer", () => {
+  it("renders static paywall HTML through the screenshot port", async () => {
+    const screenshots: string[] = [];
+    const png = new Uint8Array([137, 80, 78, 71]);
+    const screenshot = Layer.succeed(
+      HtmlScreenshot,
+      HtmlScreenshot.of({
+        screenshot: (options) =>
+          Effect.sync(() => {
+            screenshots.push(options.html);
+            return png;
+          }),
+      }),
+    );
+
+    const rendered = await Effect.runPromise(
+      Effect.gen(function* () {
+        const renderer = yield* SnapshotImageRenderer;
+        return yield* renderer.render({
+          componentTrees: {},
+          deviceScaleFactor: 2,
+          height: 812,
+          snapshot: {
+            type: "root",
+            id: "root",
+            parentId: null,
+            pos: "a0",
+            data: { name: "Paywall" },
+            children: [],
+          },
+          width: 375,
+        });
+      }).pipe(
+        Effect.provide(
+          SelfhostSnapshotImageRendererLive.pipe(
+            Layer.provide(screenshot),
+          ),
+        ),
+      ),
+    );
+
+    expect(rendered).toEqual(png);
+    expect(screenshots).toHaveLength(1);
+    expect(screenshots[0]).toContain('id="paywall-root"');
+    expect(screenshots[0]).not.toContain("__VOIDHASH_PAYWALL__");
+  });
+});
diff --git a/selfhost/entry/tests/WorkflowComposition.integration.test.ts b/selfhost/entry/tests/WorkflowComposition.integration.test.ts
new file mode 100644
index 000000000..30a6e2f56
--- /dev/null
+++ b/selfhost/entry/tests/WorkflowComposition.integration.test.ts
@@ -0,0 +1,149 @@
+import { createServer } from "node:http";
+import type { AddressInfo } from "node:net";
+
+import { WebhookDeliveryWorkflow } from "@voidhash/core/services/webhookDispatch/WebhookDeliveryWorkflow";
+import {
+  Db,
+  WebhookDeliveryStatus,
+  eq,
+  sql,
+  webhookDeliveries,
+  webhookDeliveryAttempts,
+  webhookEndpoints,
+} from "@voidhash/db";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  makeSelfhostWorkflowRuntimeLive,
+  registerSelfhostWorkflows,
+} from "../src/backend/WorkflowPorts.ts";
+import { getSelfhostRuntimeConfig } from "../src/config.ts";
+
+const describePg = process.env.SELFHOST_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("self-host workflow composition", () => {
+  it("delivers a webhook through the durable Postgres runner", async () => {
+    const receivedBodies: string[] = [];
+    const server = createServer((request, response) => {
+      const chunks: Buffer[] = [];
+      request.on("data", (chunk: Buffer) => chunks.push(chunk));
+      request.on("end", () => {
+        receivedBodies.push(Buffer.concat(chunks).toString("utf8"));
+        response.writeHead(204).end();
+      });
+    });
+    await new Promise<void>((resolve, reject) => {
+      server.once("error", reject);
+      server.listen(0, "127.0.0.1", resolve);
+    });
+
+    const config = getSelfhostRuntimeConfig();
+    const address = server.address() as AddressInfo;
+    const suffix = crypto.randomUUID();
+    const endpointId = `webhookEndpoint_${suffix}`;
+    const deliveryId = `webhookDelivery_${suffix}`;
+    const database = Db.layer(config.database);
+
+    try {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db.insert(webhookEndpoints).values({
+            events: ["person.created"],
+            id: endpointId,
+            name: "workflow integration",
+            projectId: `project_${suffix}`,
+            secret: "whsec_integration",
+            url: `http://127.0.0.1:${address.port}/webhook`,
+          });
+          yield* db.insert(webhookDeliveries).values({
+            eventOccurredAt: new Date(),
+            eventType: "person.created",
+            id: deliveryId,
+            payload: { deliveryId },
+            projectId: `project_${suffix}`,
+            webhookEndpointId: endpointId,
+          });
+        }).pipe(Effect.provide(database)),
+      );
+
+      const attempts = await Effect.runPromise(
+        Effect.scoped(
+          Effect.gen(function* () {
+            yield* registerSelfhostWorkflows(config);
+            const delivery = yield* WebhookDeliveryWorkflow;
+            yield* delivery.dispatch({
+              attemptNumber: 1,
+              deliveryId,
+              endpointId,
+              eventType: "person.created",
+              payload: { deliveryId },
+              secret: "whsec_integration",
+              url: `http://127.0.0.1:${address.port}/webhook`,
+            });
+
+            const db = yield* Db;
+            const deadline = Date.now() + 10_000;
+            while (Date.now() < deadline) {
+              const row = yield* db.query.webhookDeliveries.findFirst({
+                where: { id: deliveryId },
+              });
+              if (row?.status === WebhookDeliveryStatus.Succeeded) {
+                return yield* db.query.webhookDeliveryAttempts.findMany({
+                  where: { webhookDeliveryId: deliveryId },
+                });
+              }
+              yield* Effect.sleep("25 millis");
+            }
+            return yield* Effect.die("webhook workflow timed out");
+          }).pipe(
+            Effect.provide(database),
+            Effect.provide(makeSelfhostWorkflowRuntimeLive(config)),
+          ),
+        ),
+      );
+
+      expect(receivedBodies).toEqual([JSON.stringify({ deliveryId })]);
+      expect(attempts).toHaveLength(1);
+      expect(attempts[0]).toMatchObject({ attemptNumber: 1, statusCode: 204, succeeded: true });
+    } finally {
+      await Effect.runPromise(
+        Effect.gen(function* () {
+          const db = yield* Db;
+          yield* db
+            .delete(webhookDeliveryAttempts)
+            .where(eq(webhookDeliveryAttempts.webhookDeliveryId, deliveryId));
+          yield* db.delete(webhookDeliveries).where(eq(webhookDeliveries.id, deliveryId));
+          yield* db.delete(webhookEndpoints).where(eq(webhookEndpoints.id, endpointId));
+          yield* db.execute(sql`
+            DELETE FROM platform_workflow_activity
+            WHERE execution_id IN (
+              SELECT execution_id FROM platform_workflow_execution
+              WHERE payload_json ->> 'deliveryId' = ${deliveryId}
+            )
+          `);
+          yield* db.execute(sql`
+            DELETE FROM platform_workflow_deferred
+            WHERE execution_id IN (
+              SELECT execution_id FROM platform_workflow_execution
+              WHERE payload_json ->> 'deliveryId' = ${deliveryId}
+            )
+          `);
+          yield* db.execute(sql`
+            DELETE FROM platform_workflow_clock
+            WHERE execution_id IN (
+              SELECT execution_id FROM platform_workflow_execution
+              WHERE payload_json ->> 'deliveryId' = ${deliveryId}
+            )
+          `);
+          yield* db.execute(sql`
+            DELETE FROM platform_workflow_execution
+            WHERE payload_json ->> 'deliveryId' = ${deliveryId}
+          `);
+        }).pipe(Effect.provide(database)),
+      );
+      await new Promise<void>((resolve) => server.close(() => resolve()));
+    }
+  });
+});
diff --git a/selfhost/entry/tests/Www.test.ts b/selfhost/entry/tests/Www.test.ts
new file mode 100644
index 000000000..6ea8f9d9c
--- /dev/null
+++ b/selfhost/entry/tests/Www.test.ts
@@ -0,0 +1,78 @@
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { createServer } from "node:http";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import { afterEach, describe, expect, it } from "vitest";
+
+import { isWwwRequest, makeWwwRequestHandler } from "../src/www/Www.ts";
+
+const cleanups: Array<() => Promise<void>> = [];
+
+afterEach(async () => {
+  await Promise.all(cleanups.splice(0).map((cleanup) => cleanup()));
+});
+
+const startTestServer = async (clientDirectory: string) => {
+  const handler = makeWwwRequestHandler({
+    clientDirectory,
+    fetch: (request) => new Response(`SSR ${new URL(request.url).pathname}`, {
+      headers: { "content-type": "text/plain" },
+    }),
+  });
+  const server = createServer((request, response) => {
+    handler(request, response).catch((error) => {
+      response.statusCode = 500;
+      response.end(String(error));
+    });
+  });
+  await new Promise<void>((resolveListen) => server.listen(0, "127.0.0.1", resolveListen));
+  cleanups.push(() => new Promise<void>((resolveClose) => server.close(() => resolveClose())));
+  const address = server.address();
+  if (address === null || typeof address === "string") {
+    throw new Error("Test server did not expose a TCP address");
+  }
+  return `http://127.0.0.1:${address.port}`;
+};
+
+describe("WWW Node handler", () => {
+  it("serves built assets and falls back to SSR", async () => {
+    const root = await mkdtemp(join(tmpdir(), "voidhash-www-"));
+    cleanups.push(() => rm(root, { force: true, recursive: true }));
+    await mkdir(join(root, "assets"));
+    await writeFile(join(root, "assets", "app.js"), "export const ready = true;");
+    const origin = await startTestServer(root);
+
+    const asset = await fetch(`${origin}/assets/app.js`);
+    expect(asset.status).toBe(200);
+    expect(asset.headers.get("cache-control")).toContain("immutable");
+    expect(asset.headers.get("content-type")).toBe("text/javascript; charset=utf-8");
+    expect(await asset.text()).toBe("export const ready = true;");
+
+    const page = await fetch(`${origin}/studio`);
+    expect(page.status).toBe(200);
+    expect(await page.text()).toBe("SSR /studio");
+  });
+});
+
+describe("WWW route ownership", () => {
+  it.each(["/", "/studio", "/docs", "/_serverFn/abc", "/api/auth/callback"])(
+    "routes %s to WWW",
+    (pathname) => expect(isWwwRequest(pathname)).toBe(true),
+  );
+
+  it.each([
+    "/health",
+    "/rpc",
+    "/rpc/users",
+    "/i/v1/capture",
+    "/api/v1/users",
+    "/api/webhooks/workos",
+    "/files/avatar.png",
+    "/p/hash/index.html",
+    "/c/hash/runtime.js",
+  ])(
+    "routes %s to the backend",
+    (pathname) => expect(isWwwRequest(pathname)).toBe(false),
+  );
+});
diff --git a/selfhost/entry/tsconfig.json b/selfhost/entry/tsconfig.json
new file mode 100644
index 000000000..f040f8ac8
--- /dev/null
+++ b/selfhost/entry/tsconfig.json
@@ -0,0 +1,12 @@
+{
+  "extends": "@voidhash/tsconfig/typescript-6.json",
+  "compilerOptions": {
+    "types": ["node"],
+    "noEmit": true,
+    "strict": true,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitOverride": true
+  },
+  "include": ["src", "tests", "vitest.mts"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/selfhost/entry/vitest.mts b/selfhost/entry/vitest.mts
new file mode 100644
index 000000000..e3ed6a26b
--- /dev/null
+++ b/selfhost/entry/vitest.mts
@@ -0,0 +1,10 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    include: ["./tests/**/*.test.ts"],
+    exclude: ["./node_modules/**"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/selfhost/platform-node/package.json b/selfhost/platform-node/package.json
new file mode 100644
index 000000000..077a838ac
--- /dev/null
+++ b/selfhost/platform-node/package.json
@@ -0,0 +1,42 @@
+{
+  "name": "@voidhash/platform-node",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "license": "AGPL-3.0-only",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./CronScheduler": "./src/CronScheduler.ts",
+    "./DurableEntity": "./src/DurableEntity.ts",
+    "./KeyValueStore": "./src/KeyValueStore.ts",
+    "./Mailer": "./src/Mailer.ts",
+    "./MemoryDurableEntity": "./src/MemoryDurableEntity.ts",
+    "./NodeDurableEntitySession": "./src/NodeDurableEntitySession.ts",
+    "./ObjectStore": "./src/ObjectStore.ts",
+    "./PlatformRuntime": "./src/PlatformRuntime.ts",
+    "./Postgres": "./src/Postgres.ts",
+    "./PgWorkflowEngine": "./src/PgWorkflowEngine.ts",
+    "./Queue": "./src/Queue.ts",
+    "./Screenshot": "./src/Screenshot.ts",
+    "./Workflow": "./src/Workflow.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "vp test run -c vitest.mts"
+  },
+  "dependencies": {
+    "@effect-aws/client-s3": "catalog:",
+    "@effect/sql-pg": "catalog:",
+    "@voidhash/platform": "workspace:*",
+    "effect": "catalog:",
+    "nodemailer": "catalog:",
+    "playwright-core": "catalog:"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.12",
+    "@types/nodemailer": "catalog:",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:"
+  }
+}
diff --git a/selfhost/platform-node/src/CronScheduler.ts b/selfhost/platform-node/src/CronScheduler.ts
new file mode 100644
index 000000000..368682062
--- /dev/null
+++ b/selfhost/platform-node/src/CronScheduler.ts
@@ -0,0 +1,249 @@
+import {
+  type CronJob,
+  type CronRunOptions,
+  CronScheduler,
+  CronSchedulerError,
+  type CronSchedulerShape,
+} from "@voidhash/platform/CronScheduler";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { Cause, Cron, Duration, Effect, Layer, Result } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import { PgPlatformClientLive, type PgPlatformConfig } from "./Postgres.ts";
+
+interface ClaimedRunRow {
+  readonly leaseToken: string;
+  readonly scheduledTime: number | string;
+}
+
+interface ChangedRow {
+  readonly jobName: string;
+}
+
+const ensureTable = (sql: SqlClient.SqlClient) =>
+  sql.withTransaction(
+    Effect.gen(function* () {
+      yield* sql`SELECT pg_advisory_xact_lock(hashtext('voidhash_platform_cron_schema_v1'))`;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_cron_state (
+          job_name TEXT PRIMARY KEY,
+          expression TEXT NOT NULL,
+          time_zone TEXT,
+          last_scheduled_at_ms BIGINT,
+          next_scheduled_at_ms BIGINT NOT NULL,
+          lease_token TEXT,
+          leased_until_ms BIGINT,
+          updated_at_ms BIGINT NOT NULL
+        )
+      `;
+      yield* sql`
+        CREATE INDEX IF NOT EXISTS platform_cron_state_due_idx
+        ON platform_cron_state (next_scheduled_at_ms)
+      `;
+    }),
+  );
+
+const schedulerError = (jobName: string, operation: string, cause: unknown) =>
+  new CronSchedulerError({ jobName, operation, cause: String(cause) });
+
+const parseCron = (job: CronJob<unknown>) => {
+  const parsed = Cron.parse(job.expression, job.timeZone);
+  return Result.isSuccess(parsed)
+    ? Effect.succeed(parsed.success)
+    : Effect.fail(schedulerError(job.name, "parse", parsed.failure.message));
+};
+
+const leaseMillis = (job: CronJob<unknown>): number => {
+  const value = job.leaseMillis;
+  return typeof value === "number" && Number.isFinite(value) && value > 0
+    ? Math.floor(value)
+    : 300_000;
+};
+
+const claimRun = (
+  sql: SqlClient.SqlClient,
+  job: CronJob<unknown>,
+  cron: Cron.Cron,
+  now: number,
+) => {
+  const initialNext = Cron.next(cron, new Date(now - 1)).getTime();
+  const token = crypto.randomUUID();
+  const timeZone = job.timeZone ?? null;
+  return sql.withTransaction(
+    Effect.gen(function* () {
+      yield* sql`
+        INSERT INTO platform_cron_state (
+          job_name, expression, time_zone, next_scheduled_at_ms, updated_at_ms
+        ) VALUES (
+          ${job.name}, ${job.expression}, ${timeZone}, ${initialNext}, ${now}
+        )
+        ON CONFLICT (job_name)
+        DO UPDATE SET
+          next_scheduled_at_ms = EXCLUDED.next_scheduled_at_ms,
+          expression = EXCLUDED.expression,
+          time_zone = EXCLUDED.time_zone,
+          lease_token = NULL,
+          leased_until_ms = NULL,
+          updated_at_ms = EXCLUDED.updated_at_ms
+        WHERE platform_cron_state.expression IS DISTINCT FROM EXCLUDED.expression
+          OR platform_cron_state.time_zone IS DISTINCT FROM EXCLUDED.time_zone
+      `;
+      return yield* sql<ClaimedRunRow>`
+        WITH candidate AS (
+          SELECT job_name
+          FROM platform_cron_state
+          WHERE job_name = ${job.name}
+            AND next_scheduled_at_ms <= ${now}
+            AND (leased_until_ms IS NULL OR leased_until_ms <= ${now})
+          FOR UPDATE SKIP LOCKED
+        )
+        UPDATE platform_cron_state AS state
+        SET lease_token = ${token},
+            leased_until_ms = ${now + leaseMillis(job)},
+            updated_at_ms = ${now}
+        FROM candidate
+        WHERE state.job_name = candidate.job_name
+        RETURNING state.next_scheduled_at_ms AS "scheduledTime", state.lease_token AS "leaseToken"
+      `;
+    }),
+  );
+};
+
+const releaseRun = (
+  sql: SqlClient.SqlClient,
+  jobName: string,
+  leaseToken: string,
+  now: number,
+) =>
+  sql`
+    UPDATE platform_cron_state
+    SET lease_token = NULL, leased_until_ms = NULL, updated_at_ms = ${now}
+    WHERE job_name = ${jobName} AND lease_token = ${leaseToken}
+  `;
+
+const completeRun = (
+  sql: SqlClient.SqlClient,
+  jobName: string,
+  leaseToken: string,
+  scheduledTime: number,
+  nextScheduledTime: number,
+  now: number,
+) =>
+  sql<ChangedRow>`
+    UPDATE platform_cron_state
+    SET last_scheduled_at_ms = ${scheduledTime},
+        next_scheduled_at_ms = ${nextScheduledTime},
+        lease_token = NULL,
+        leased_until_ms = NULL,
+        updated_at_ms = ${now}
+    WHERE job_name = ${jobName} AND lease_token = ${leaseToken}
+    RETURNING job_name AS "jobName"
+  `;
+
+const tick = <R>(
+  sql: SqlClient.SqlClient,
+  job: CronJob<R>,
+  inputNow: Date | undefined,
+): Effect.Effect<boolean, CronSchedulerError, PlatformRuntime | R> =>
+  PlatformRuntime.pipe(
+    Effect.andThen(parseCron(job)),
+    Effect.flatMap((cron) =>
+      Effect.suspend(() => {
+        const now = inputNow?.getTime() ?? Date.now();
+        return claimRun(sql, job, cron, now).pipe(
+          Effect.mapError((cause) => schedulerError(job.name, "claim", cause)),
+          Effect.flatMap((rows) => {
+            const claimed = rows[0];
+            if (!claimed) return Effect.succeed(false);
+            const scheduledTime = Number(claimed.scheduledTime);
+            const nextScheduledTime = Cron.next(cron, new Date(scheduledTime)).getTime();
+            return job
+              .run({
+                scheduledTime: new Date(scheduledTime),
+                catchUp: scheduledTime < now,
+              })
+              .pipe(
+                Effect.matchCauseEffect({
+                  onFailure: (cause) =>
+                    releaseRun(sql, job.name, claimed.leaseToken, Date.now()).pipe(
+                      Effect.mapError((releaseCause) =>
+                        schedulerError(job.name, "release", releaseCause),
+                      ),
+                      Effect.andThen(
+                        Effect.fail(
+                          schedulerError(job.name, "run", Cause.pretty(cause)),
+                        ),
+                      ),
+                    ),
+                  onSuccess: () =>
+                    completeRun(
+                      sql,
+                      job.name,
+                      claimed.leaseToken,
+                      scheduledTime,
+                      nextScheduledTime,
+                      Date.now(),
+                    ).pipe(
+                      Effect.flatMap((changed) =>
+                        changed.length === 1
+                          ? Effect.succeed(true)
+                          : Effect.fail(
+                              schedulerError(
+                                job.name,
+                                "complete",
+                                "cron lease expired before completion",
+                              ),
+                            ),
+                      ),
+                      Effect.mapError((cause) =>
+                        cause instanceof CronSchedulerError
+                          ? cause
+                          : schedulerError(job.name, "complete", cause),
+                      ),
+                    ),
+                }),
+              );
+          }),
+        );
+      }),
+    ),
+  );
+
+const makeScheduler = (sql: SqlClient.SqlClient): CronSchedulerShape => ({
+  tick: (job, now) => tick(sql, job, now),
+  run: (job, options: CronRunOptions = {}) => {
+    const pollInterval =
+      typeof options.pollIntervalMillis === "number" &&
+      Number.isFinite(options.pollIntervalMillis) &&
+      options.pollIntervalMillis > 0
+        ? Math.floor(options.pollIntervalMillis)
+        : 1_000;
+    return Effect.forever(
+      tick(sql, job, undefined).pipe(
+        Effect.catch((error) =>
+          Effect.logError("scheduled job tick failed", {
+            jobName: job.name,
+            operation: error.operation,
+            cause: error.cause,
+          }).pipe(Effect.as(false)),
+        ),
+        Effect.flatMap((ran) =>
+          ran ? Effect.yieldNow : Effect.sleep(Duration.millis(pollInterval)),
+        ),
+      ),
+    );
+  },
+});
+
+/** Postgres-backed cron scheduler with persisted catch-up and execution leases. */
+export const PgCronSchedulerLive = (
+  config: PgPlatformConfig,
+): Layer.Layer<CronScheduler> =>
+  Layer.effect(
+    CronScheduler,
+    Effect.gen(function* () {
+      const sql = yield* SqlClient.SqlClient;
+      yield* ensureTable(sql);
+      return makeScheduler(sql);
+    }),
+  ).pipe(Layer.provide(PgPlatformClientLive(config)), Layer.orDie);
diff --git a/selfhost/platform-node/src/DurableEntity.ts b/selfhost/platform-node/src/DurableEntity.ts
new file mode 100644
index 000000000..89f026ed7
--- /dev/null
+++ b/selfhost/platform-node/src/DurableEntity.ts
@@ -0,0 +1,256 @@
+import {
+  DurableEntityHost,
+  type DurableEntityAddress,
+  type DurableEntityContext,
+  type DurableEntityHostShape,
+  type DurableEntitySession,
+} from "@voidhash/platform/DurableEntity";
+import { Context, Effect, Layer, Semaphore } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+import { createHash } from "node:crypto";
+
+import { PgPlatformClientLive, type PgPlatformConfig } from "./Postgres.ts";
+
+/** Postgres connection parameters for the single-node durable entity host. */
+export type PgDurableEntityConfig = PgPlatformConfig;
+
+/** A persisted entity alarm ready to be dispatched by the Node scheduler. */
+export interface DueDurableEntityAlarm {
+  readonly address: DurableEntityAddress;
+  readonly scheduledTime: number;
+}
+
+/** Adapter control plane used by the single-node alarm scheduler. */
+export interface NodeDurableEntityControlShape {
+  readonly listDueAlarms: (
+    now: number,
+    limit: number,
+  ) => Effect.Effect<ReadonlyArray<DueDurableEntityAlarm>>;
+}
+
+/** Exposes persisted alarms to the single-node scheduler. */
+export class NodeDurableEntityControl extends Context.Service<
+  NodeDurableEntityControl,
+  NodeDurableEntityControlShape
+>()("@voidhash/platform-node/NodeDurableEntityControl") {}
+
+interface EntityRuntimeState {
+  readonly lock: Semaphore.Semaphore;
+  readonly sessions: Map<string, DurableEntitySession>;
+}
+
+interface KeyValueRow {
+  readonly value: unknown;
+}
+
+interface AlarmRow {
+  readonly type: string;
+  readonly id: string;
+  readonly scheduledTime: number | string;
+}
+
+const runtimeKey = (address: DurableEntityAddress): string =>
+  `${address.type}\u0000${address.id}`;
+
+const schemaName = (address: DurableEntityAddress): string =>
+  `entity_${createHash("sha256").update(runtimeKey(address)).digest("hex").slice(0, 32)}`;
+
+const encodeJson = (value: unknown): string => {
+  const encoded = JSON.stringify(value);
+  if (encoded === undefined) {
+    throw new TypeError("Durable entity values must be JSON-serializable");
+  }
+  return encoded;
+};
+
+const ensureTables = (sql: SqlClient.SqlClient) =>
+  sql.withTransaction(
+    Effect.gen(function* () {
+      // PostgreSQL's IF NOT EXISTS DDL can still race in its catalog, so host
+      // processes serialize this tiny bootstrap migration with an advisory lock.
+      yield* sql`SELECT pg_advisory_xact_lock(hashtext('voidhash_platform_entity_schema_v1'))`;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_entity_kv (
+          entity_type TEXT NOT NULL,
+          entity_id TEXT NOT NULL,
+          key TEXT NOT NULL,
+          value_json JSONB NOT NULL,
+          PRIMARY KEY (entity_type, entity_id, key)
+        )
+      `;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_entity_alarms (
+          entity_type TEXT NOT NULL,
+          entity_id TEXT NOT NULL,
+          scheduled_time BIGINT NOT NULL,
+          PRIMARY KEY (entity_type, entity_id)
+        )
+      `;
+      yield* sql`
+        CREATE INDEX IF NOT EXISTS platform_entity_alarms_due_idx
+        ON platform_entity_alarms (scheduled_time)
+      `;
+    }),
+  );
+
+const makePgHost = (sql: SqlClient.SqlClient): DurableEntityHostShape => {
+  const runtimeStates = new Map<string, EntityRuntimeState>();
+  const runDb = <A>(effect: Effect.Effect<A, unknown>): Effect.Effect<A> =>
+    effect.pipe(Effect.orDie);
+
+  const stateFor = (address: DurableEntityAddress): EntityRuntimeState => {
+    const key = runtimeKey(address);
+    let state = runtimeStates.get(key);
+    if (!state) {
+      state = { lock: Semaphore.makeUnsafe(1), sessions: new Map() };
+      runtimeStates.set(key, state);
+    }
+    return state;
+  };
+
+  const contextFor = (
+    address: DurableEntityAddress,
+    state: EntityRuntimeState,
+  ): DurableEntityContext => ({
+    address,
+    keyValue: {
+      get: (key) =>
+        runDb(
+          sql<KeyValueRow>`
+            SELECT value_json AS "value"
+            FROM platform_entity_kv
+            WHERE entity_type = ${address.type}
+              AND entity_id = ${address.id}
+              AND key = ${key}
+          `.pipe(Effect.map((rows) => rows[0]?.value)),
+        ),
+      put: (key, value) =>
+        runDb(
+          Effect.suspend(() => {
+            const encoded = encodeJson(value);
+            return sql`
+              INSERT INTO platform_entity_kv (entity_type, entity_id, key, value_json)
+              VALUES (${address.type}, ${address.id}, ${key}, ${encoded}::jsonb)
+              ON CONFLICT (entity_type, entity_id, key)
+              DO UPDATE SET value_json = EXCLUDED.value_json
+            `.pipe(Effect.asVoid);
+          }),
+        ),
+      delete: (key) =>
+        runDb(
+          sql`
+            DELETE FROM platform_entity_kv
+            WHERE entity_type = ${address.type}
+              AND entity_id = ${address.id}
+              AND key = ${key}
+          `.pipe(Effect.asVoid),
+        ),
+    },
+    sql: {
+      execute: <Row extends Readonly<Record<string, unknown>>>(
+        statement: string,
+        bindings: ReadonlyArray<unknown> = [],
+      ) => {
+        const schema = schemaName(address);
+        return runDb(
+          sql.withTransaction(
+            Effect.gen(function* () {
+              yield* sql.unsafe(`CREATE SCHEMA IF NOT EXISTS ${schema}`);
+              yield* sql.unsafe(`SET LOCAL search_path TO ${schema}, public`);
+              return yield* sql.unsafe<Row>(statement, bindings);
+            }),
+          ),
+        );
+      },
+    },
+    alarm: {
+      get: runDb(
+        sql<AlarmRow>`
+          SELECT entity_type AS "type", entity_id AS "id", scheduled_time AS "scheduledTime"
+          FROM platform_entity_alarms
+          WHERE entity_type = ${address.type} AND entity_id = ${address.id}
+        `.pipe(Effect.map((rows) => (rows[0] ? Number(rows[0].scheduledTime) : undefined))),
+      ),
+      set: (scheduledTime) =>
+        runDb(
+          sql`
+            INSERT INTO platform_entity_alarms (entity_type, entity_id, scheduled_time)
+            VALUES (${address.type}, ${address.id}, ${scheduledTime})
+            ON CONFLICT (entity_type, entity_id)
+            DO UPDATE SET scheduled_time = EXCLUDED.scheduled_time
+          `.pipe(Effect.asVoid),
+        ),
+      delete: runDb(
+        sql`
+          DELETE FROM platform_entity_alarms
+          WHERE entity_type = ${address.type} AND entity_id = ${address.id}
+        `.pipe(Effect.asVoid),
+      ),
+    },
+    sessions: {
+      get: (sessionId) => Effect.sync(() => state.sessions.get(sessionId)),
+      list: Effect.sync(() => [...state.sessions.values()]),
+      attach: (session) =>
+        Effect.sync(() => void state.sessions.set(session.id, session)),
+      remove: (sessionId) => Effect.sync(() => void state.sessions.delete(sessionId)),
+    },
+  });
+
+  return DurableEntityHost.of({
+    run: (address, operation) =>
+      Effect.suspend(() => {
+        const state = stateFor(address);
+        return state.lock.withPermit(
+          Effect.suspend(() => operation(contextFor(address, state))),
+        );
+      }),
+  });
+};
+
+const makeControl = (sql: SqlClient.SqlClient): NodeDurableEntityControlShape => ({
+  listDueAlarms: (now, limit) =>
+    sql<AlarmRow>`
+      SELECT entity_type AS "type", entity_id AS "id", scheduled_time AS "scheduledTime"
+      FROM platform_entity_alarms
+      WHERE scheduled_time <= ${now}
+      ORDER BY scheduled_time ASC, entity_type ASC, entity_id ASC
+      LIMIT ${Math.max(0, Math.floor(limit))}
+    `.pipe(
+      Effect.map((rows) =>
+        rows.map((row) => ({
+          address: { type: row.type, id: row.id },
+          scheduledTime: Number(row.scheduledTime),
+        })),
+      ),
+      Effect.orDie,
+    ),
+});
+
+/**
+ * Postgres-backed single-node entity layer. Database state and alarms survive
+ * process restarts; execution locks and active WebSocket sessions are local to
+ * the one Node process.
+ */
+export const PgDurableEntityHostLive = (
+  config: PgDurableEntityConfig,
+): Layer.Layer<DurableEntityHost | NodeDurableEntityControl> =>
+  Layer.effect(
+    DurableEntityHost,
+    Effect.gen(function* () {
+      const sql = yield* SqlClient.SqlClient;
+      yield* ensureTables(sql);
+      return makePgHost(sql);
+    }),
+  ).pipe(
+    Layer.merge(
+      Layer.effect(
+        NodeDurableEntityControl,
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          return makeControl(sql);
+        }),
+      ),
+    ),
+    Layer.provide(PgPlatformClientLive(config)),
+    Layer.orDie,
+  );
diff --git a/selfhost/platform-node/src/KeyValueStore.ts b/selfhost/platform-node/src/KeyValueStore.ts
new file mode 100644
index 000000000..af3f3d367
--- /dev/null
+++ b/selfhost/platform-node/src/KeyValueStore.ts
@@ -0,0 +1,252 @@
+import {
+  type KeyValuePutOptions,
+  KeyValueStore,
+  KeyValueStoreError,
+  type KeyValueStoreShape,
+} from "@voidhash/platform/KeyValueStore";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { Effect, Layer, Option, SchemaParser } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import { PgPlatformClientLive, type PgPlatformConfig } from "./Postgres.ts";
+
+interface ValueRow {
+  readonly value: unknown;
+}
+
+interface KeyRow {
+  readonly key: string;
+}
+
+const ensureTable = (sql: SqlClient.SqlClient) =>
+  sql.withTransaction(
+    Effect.gen(function* () {
+      yield* sql`SELECT pg_advisory_xact_lock(hashtext('voidhash_platform_kv_schema_v1'))`;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_key_value (
+          namespace TEXT NOT NULL,
+          key TEXT NOT NULL,
+          value_json JSONB NOT NULL,
+          expires_at_ms BIGINT,
+          updated_at_ms BIGINT NOT NULL,
+          PRIMARY KEY (namespace, key)
+        )
+      `;
+      yield* sql`
+        CREATE INDEX IF NOT EXISTS platform_key_value_expiry_idx
+        ON platform_key_value (expires_at_ms)
+        WHERE expires_at_ms IS NOT NULL
+      `;
+    }),
+  );
+
+const expiry = (now: number, options: KeyValuePutOptions | undefined): number | null => {
+  const ttl = options?.ttlMillis;
+  return typeof ttl === "number" && Number.isFinite(ttl) && ttl > 0
+    ? now + Math.floor(ttl)
+    : null;
+};
+
+const encodeJson = (value: unknown): Effect.Effect<string, unknown> =>
+  Effect.try({
+    try: () => {
+      const encoded = JSON.stringify(value);
+      if (encoded === undefined) {
+        throw new TypeError("Key-value entries must be JSON-serializable");
+      }
+      return encoded;
+    },
+    catch: (cause) => cause,
+  });
+
+const storeError = (namespace: string, operation: string, cause: unknown) =>
+  new KeyValueStoreError({ namespace, operation, cause: String(cause) });
+
+const makeStore = (sql: SqlClient.SqlClient): KeyValueStoreShape => ({
+  get: (namespace, key, schema) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(
+        Effect.suspend(() => {
+          const now = Date.now();
+          return sql<ValueRow>`
+            SELECT value_json AS "value"
+            FROM platform_key_value
+            WHERE namespace = ${namespace}
+              AND key = ${key}
+              AND (expires_at_ms IS NULL OR expires_at_ms > ${now})
+          `;
+        }),
+      ),
+      Effect.flatMap((rows) =>
+        rows[0]
+          ? SchemaParser.decodeUnknownEffect(schema)(rows[0].value).pipe(Effect.map(Option.some))
+          : Effect.succeedNone,
+      ),
+      Effect.mapError((cause) => storeError(namespace, "get", cause)),
+    ),
+  put: (namespace, key, value, schema, options) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(SchemaParser.encodeUnknownEffect(schema)(value)),
+      Effect.flatMap(encodeJson),
+      Effect.flatMap((encoded) => {
+        const now = Date.now();
+        const expiresAt = expiry(now, options);
+        return sql`
+          INSERT INTO platform_key_value (
+            namespace, key, value_json, expires_at_ms, updated_at_ms
+          ) VALUES (
+            ${namespace}, ${key}, ${encoded}::jsonb, ${expiresAt}, ${now}
+          )
+          ON CONFLICT (namespace, key)
+          DO UPDATE SET value_json = EXCLUDED.value_json,
+                        expires_at_ms = EXCLUDED.expires_at_ms,
+                        updated_at_ms = EXCLUDED.updated_at_ms
+        `;
+      }),
+      Effect.asVoid,
+      Effect.mapError((cause) => storeError(namespace, "put", cause)),
+    ),
+  putMany: (namespace, entries, schema, options) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(
+        Effect.forEach(entries, ({ key, value }) =>
+          SchemaParser.encodeUnknownEffect(schema)(value).pipe(
+            Effect.flatMap(encodeJson),
+            Effect.map((encoded) => ({ key, encoded })),
+          ),
+        ),
+      ),
+      Effect.flatMap((encodedEntries) => {
+        const now = Date.now();
+        const expiresAt = expiry(now, options);
+        return sql.withTransaction(
+          Effect.forEach(
+            encodedEntries,
+            ({ key, encoded }) =>
+              sql`
+                INSERT INTO platform_key_value (
+                  namespace, key, value_json, expires_at_ms, updated_at_ms
+                ) VALUES (
+                  ${namespace}, ${key}, ${encoded}::jsonb, ${expiresAt}, ${now}
+                )
+                ON CONFLICT (namespace, key)
+                DO UPDATE SET value_json = EXCLUDED.value_json,
+                              expires_at_ms = EXCLUDED.expires_at_ms,
+                              updated_at_ms = EXCLUDED.updated_at_ms
+              `,
+            { discard: true },
+          ),
+        );
+      }),
+      Effect.mapError((cause) => storeError(namespace, "putMany", cause)),
+    ),
+  existingKeys: (namespace, keys) => {
+    if (keys.length === 0) return Effect.succeed(new Set<string>());
+    return PlatformRuntime.pipe(
+      Effect.andThen(
+        Effect.suspend(() => {
+          const now = Date.now();
+          return sql<KeyRow>`
+            SELECT key
+            FROM platform_key_value
+            WHERE namespace = ${namespace}
+              AND ${sql.in("key", keys)}
+              AND (expires_at_ms IS NULL OR expires_at_ms > ${now})
+          `;
+        }),
+      ),
+      Effect.map((rows) => new Set(rows.map(({ key }) => key))),
+      Effect.mapError((cause) => storeError(namespace, "existingKeys", cause)),
+    );
+  },
+  delete: (namespace, key) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(sql`DELETE FROM platform_key_value WHERE namespace = ${namespace} AND key = ${key}`),
+      Effect.asVoid,
+      Effect.mapError((cause) => storeError(namespace, "delete", cause)),
+    ),
+  deleteMany: (namespace, keys) => {
+    if (keys.length === 0) return Effect.void;
+    return PlatformRuntime.pipe(
+      Effect.andThen(
+        sql`
+          DELETE FROM platform_key_value
+          WHERE namespace = ${namespace} AND ${sql.in("key", keys)}
+        `,
+      ),
+      Effect.asVoid,
+      Effect.mapError((cause) => storeError(namespace, "deleteMany", cause)),
+    );
+  },
+  increment: (namespace, key, options) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(
+        Effect.suspend(() => {
+          const now = Date.now();
+          const expiresAt = expiry(now, options);
+          return sql<ValueRow>`
+            INSERT INTO platform_key_value (
+              namespace, key, value_json, expires_at_ms, updated_at_ms
+            ) VALUES (
+              ${namespace}, ${key}, '1'::jsonb, ${expiresAt}, ${now}
+            )
+            ON CONFLICT (namespace, key)
+            DO UPDATE SET
+              value_json = to_jsonb(
+                CASE
+                  WHEN platform_key_value.expires_at_ms IS NOT NULL
+                    AND platform_key_value.expires_at_ms <= ${now}
+                    THEN 1
+                  WHEN jsonb_typeof(platform_key_value.value_json) = 'number'
+                    THEN (platform_key_value.value_json #>> '{}')::BIGINT + 1
+                  ELSE 1
+                END
+              ),
+              expires_at_ms = EXCLUDED.expires_at_ms,
+              updated_at_ms = EXCLUDED.updated_at_ms
+            RETURNING value_json AS "value"
+          `;
+        }),
+      ),
+      Effect.map((rows) => Number(rows[0]?.value ?? 0)),
+      Effect.mapError((cause) => storeError(namespace, "increment", cause)),
+    ),
+  pruneExpired: (limit) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(
+        Effect.suspend(() => {
+          const now = Date.now();
+          const rowLimit = Number.isFinite(limit) && limit > 0 ? Math.floor(limit) : 0;
+          return sql<KeyRow>`
+            WITH expired AS (
+              SELECT namespace, key
+              FROM platform_key_value
+              WHERE expires_at_ms IS NOT NULL AND expires_at_ms <= ${now}
+              ORDER BY expires_at_ms ASC
+              LIMIT ${rowLimit}
+              FOR UPDATE SKIP LOCKED
+            )
+            DELETE FROM platform_key_value AS value
+            USING expired
+            WHERE value.namespace = expired.namespace AND value.key = expired.key
+            RETURNING value.key
+          `;
+        }),
+      ),
+      Effect.map((rows) => rows.length),
+      Effect.mapError((cause) => storeError("*", "pruneExpired", cause)),
+    ),
+});
+
+/** Postgres-backed typed key-value store with TTL and atomic counters. */
+export const PgKeyValueStoreLive = (
+  config: PgPlatformConfig,
+): Layer.Layer<KeyValueStore> =>
+  Layer.effect(
+    KeyValueStore,
+    Effect.gen(function* () {
+      const sql = yield* SqlClient.SqlClient;
+      yield* ensureTable(sql);
+      return makeStore(sql);
+    }),
+  ).pipe(Layer.provide(PgPlatformClientLive(config)), Layer.orDie);
diff --git a/selfhost/platform-node/src/Mailer.ts b/selfhost/platform-node/src/Mailer.ts
new file mode 100644
index 000000000..d47999046
--- /dev/null
+++ b/selfhost/platform-node/src/Mailer.ts
@@ -0,0 +1,144 @@
+import {
+  type MailAddress,
+  type MailDeliveryResult,
+  Mailer,
+  MailerError,
+  type MailerShape,
+  type MailMessage,
+} from "@voidhash/platform/Mailer";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { Effect, Layer, Redacted } from "effect";
+import nodemailer, { type Transporter } from "nodemailer";
+
+/** SMTP connection, authentication, and sender defaults. */
+export interface SmtpMailerConfig {
+  readonly host: string;
+  readonly port: number;
+  readonly secure?: boolean;
+  readonly requireTls?: boolean;
+  readonly username?: string;
+  readonly password?: Redacted.Redacted<string>;
+  readonly defaultFrom?: MailAddress;
+  readonly connectionTimeoutMillis?: number;
+  readonly greetingTimeoutMillis?: number;
+  readonly tlsRejectUnauthorized?: boolean;
+  readonly verifyOnStart?: boolean;
+}
+
+const mailerError = (operation: string, cause: unknown) =>
+  new MailerError({ operation, cause: String(cause) });
+
+const mailbox = ({ address, name }: MailAddress) => ({ address, name });
+
+const resultAddress = (value: unknown): string => {
+  if (typeof value === "string") return value;
+  if (typeof value === "object" && value !== null && "address" in value) {
+    const address = (value as { readonly address?: unknown }).address;
+    if (typeof address === "string") return address;
+  }
+  return String(value);
+};
+
+const validateMessage = (
+  config: SmtpMailerConfig,
+  message: MailMessage,
+): Effect.Effect<MailAddress, MailerError> => {
+  const from = message.from ?? config.defaultFrom;
+  if (!from) return Effect.fail(mailerError("validate", "sender is required"));
+  if (message.to.length === 0) {
+    return Effect.fail(mailerError("validate", "at least one recipient is required"));
+  }
+  if (message.text === undefined && message.html === undefined) {
+    return Effect.fail(mailerError("validate", "text or html content is required"));
+  }
+  return Effect.succeed(from);
+};
+
+const send = (
+  transporter: Transporter,
+  config: SmtpMailerConfig,
+  message: MailMessage,
+): Effect.Effect<MailDeliveryResult, MailerError, PlatformRuntime> =>
+  PlatformRuntime.pipe(
+    Effect.andThen(validateMessage(config, message)),
+    Effect.flatMap((from) =>
+      Effect.tryPromise({
+        try: () =>
+          transporter.sendMail({
+            from: mailbox(from),
+            to: message.to.map(mailbox),
+            cc: message.cc?.map(mailbox),
+            bcc: message.bcc?.map(mailbox),
+            replyTo: message.replyTo ? mailbox(message.replyTo) : undefined,
+            subject: message.subject,
+            text: message.text,
+            html: message.html,
+            headers: message.headers,
+          }),
+        catch: (cause) => mailerError("send", cause),
+      }),
+    ),
+    Effect.map((info) => ({
+      messageId: info.messageId,
+      accepted: (info.accepted as ReadonlyArray<unknown>).map(resultAddress),
+      rejected: (info.rejected as ReadonlyArray<unknown>).map(resultAddress),
+    })),
+  );
+
+const makeMailer = (
+  transporter: Transporter,
+  config: SmtpMailerConfig,
+): MailerShape => ({
+  send: (message) => send(transporter, config, message),
+});
+
+const makeTransporter = (
+  config: SmtpMailerConfig,
+): Effect.Effect<Transporter, MailerError> => {
+  if ((config.username === undefined) !== (config.password === undefined)) {
+    return Effect.fail(
+      mailerError("configure", "SMTP username and password must be provided together"),
+    );
+  }
+  return Effect.succeed(
+    nodemailer.createTransport({
+      host: config.host,
+      port: config.port,
+      secure: config.secure ?? false,
+      requireTLS: config.requireTls ?? false,
+      auth:
+        config.username && config.password
+          ? {
+              user: config.username,
+              pass: Redacted.value(config.password),
+            }
+          : undefined,
+      connectionTimeout: config.connectionTimeoutMillis ?? 10_000,
+      greetingTimeout: config.greetingTimeoutMillis ?? 10_000,
+      tls: {
+        rejectUnauthorized: config.tlsRejectUnauthorized ?? true,
+      },
+    }),
+  );
+};
+
+/** SMTP-backed mailer with optional authenticated TLS and startup verification. */
+export const SmtpMailerLive = (
+  config: SmtpMailerConfig,
+): Layer.Layer<Mailer, MailerError> =>
+  Layer.effect(
+    Mailer,
+    Effect.acquireRelease(
+      makeTransporter(config).pipe(
+        Effect.tap((transporter) =>
+          config.verifyOnStart
+            ? Effect.tryPromise({
+                try: () => transporter.verify(),
+                catch: (cause) => mailerError("verify", cause),
+              }).pipe(Effect.asVoid)
+            : Effect.void,
+        ),
+      ),
+      (transporter) => Effect.sync(() => transporter.close()),
+    ).pipe(Effect.map((transporter) => makeMailer(transporter, config))),
+  );
diff --git a/selfhost/platform-node/src/MemoryDurableEntity.ts b/selfhost/platform-node/src/MemoryDurableEntity.ts
new file mode 100644
index 000000000..4e69ee10d
--- /dev/null
+++ b/selfhost/platform-node/src/MemoryDurableEntity.ts
@@ -0,0 +1,73 @@
+import {
+  DurableEntityHost,
+  type DurableEntityContext,
+  type DurableEntityHostShape,
+  type DurableEntitySession,
+} from "@voidhash/platform/DurableEntity";
+import { Effect, Layer, Semaphore } from "effect";
+
+interface MemoryEntityState {
+  readonly lock: Semaphore.Semaphore;
+  readonly values: Map<string, unknown>;
+  readonly sessions: Map<string, DurableEntitySession>;
+  alarm: number | undefined;
+}
+
+const entityKey = (type: string, id: string): string => `${type}\u0000${id}`;
+
+/**
+ * Builds an isolated in-memory durable entity host. Operations for one address
+ * are FIFO-serialized; different addresses may run concurrently.
+ */
+export const makeMemoryDurableEntityHost = (): DurableEntityHostShape => {
+  const states = new Map<string, MemoryEntityState>();
+
+  const stateFor = (type: string, id: string): MemoryEntityState => {
+    const key = entityKey(type, id);
+    let state = states.get(key);
+    if (!state) {
+      state = {
+        lock: Semaphore.makeUnsafe(1),
+        values: new Map(),
+        sessions: new Map(),
+        alarm: undefined,
+      };
+      states.set(key, state);
+    }
+    return state;
+  };
+
+  return DurableEntityHost.of({
+    run: (address, operation) =>
+      Effect.suspend(() => {
+        const state = stateFor(address.type, address.id);
+        const context: DurableEntityContext = {
+          address,
+          keyValue: {
+            get: (key) => Effect.sync(() => state.values.get(key)),
+            put: (key, value) => Effect.sync(() => void state.values.set(key, value)),
+            delete: (key) => Effect.sync(() => void state.values.delete(key)),
+          },
+          alarm: {
+            get: Effect.sync(() => state.alarm),
+            set: (scheduledTime) => Effect.sync(() => void (state.alarm = scheduledTime)),
+            delete: Effect.sync(() => void (state.alarm = undefined)),
+          },
+          sessions: {
+            get: (sessionId) => Effect.sync(() => state.sessions.get(sessionId)),
+            list: Effect.sync(() => [...state.sessions.values()]),
+            attach: (session) =>
+              Effect.sync(() => void state.sessions.set(session.id, session)),
+            remove: (sessionId) => Effect.sync(() => void state.sessions.delete(sessionId)),
+          },
+        };
+        return state.lock.withPermit(Effect.suspend(() => operation(context)));
+      }),
+  });
+};
+
+/** In-memory entity host layer for tests and ephemeral local development. */
+export const MemoryDurableEntityHostLive: Layer.Layer<DurableEntityHost> = Layer.sync(
+  DurableEntityHost,
+  makeMemoryDurableEntityHost,
+);
diff --git a/selfhost/platform-node/src/NodeDurableEntitySession.ts b/selfhost/platform-node/src/NodeDurableEntitySession.ts
new file mode 100644
index 000000000..5a2493ea4
--- /dev/null
+++ b/selfhost/platform-node/src/NodeDurableEntitySession.ts
@@ -0,0 +1,36 @@
+import type { DurableEntitySession } from "@voidhash/platform/DurableEntity";
+import { Effect } from "effect";
+
+/** Minimal server-side WebSocket surface needed by the entity session adapter. */
+export interface NodeWebSocketLike {
+  readonly send: (message: string | Uint8Array) => unknown;
+  readonly close: (code?: number, reason?: string) => unknown;
+}
+
+/**
+ * Wraps a Node WebSocket connection as a runtime-neutral durable entity
+ * session. Attachments remain in memory for the connection lifetime.
+ */
+export const makeNodeDurableEntitySession = (
+  id: string,
+  socket: NodeWebSocketLike,
+  initialAttachment?: unknown,
+): DurableEntitySession => {
+  let attachment = initialAttachment;
+  return {
+    id,
+    send: (message) =>
+      Effect.sync(() => {
+        socket.send(message);
+      }),
+    close: (code, reason) =>
+      Effect.sync(() => {
+        socket.close(code, reason);
+      }),
+    getAttachment: Effect.sync(() => attachment),
+    setAttachment: (nextAttachment) =>
+      Effect.sync(() => {
+        attachment = nextAttachment;
+      }),
+  };
+};
diff --git a/selfhost/platform-node/src/ObjectStore.ts b/selfhost/platform-node/src/ObjectStore.ts
new file mode 100644
index 000000000..104db594a
--- /dev/null
+++ b/selfhost/platform-node/src/ObjectStore.ts
@@ -0,0 +1,142 @@
+import { S3 } from "@effect-aws/client-s3";
+import {
+  ObjectStore,
+  ObjectStoreError,
+  type ObjectStoreShape,
+} from "@voidhash/platform/ObjectStore";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { Effect, Layer, Option, Redacted } from "effect";
+
+/** S3-compatible connection and bucket parameters. */
+export interface S3ObjectStoreConfig {
+  readonly bucketName: string;
+  readonly region: string;
+  readonly endpoint?: string;
+  readonly accessKeyId: string;
+  readonly secretAccessKey: Redacted.Redacted<string>;
+  readonly forcePathStyle?: boolean;
+}
+
+const storeError = (
+  config: S3ObjectStoreConfig,
+  key: string,
+  operation: string,
+  cause: unknown,
+) =>
+  new ObjectStoreError({
+    bucketName: config.bucketName,
+    key,
+    operation,
+    cause: String(cause),
+  });
+
+const isNotFound = (error: unknown): boolean => {
+  if (typeof error !== "object" || error === null) return false;
+  const tagged = error as { readonly _tag?: unknown };
+  return tagged._tag === "NoSuchKey" || tagged._tag === "NotFound";
+};
+
+const makeStore = (
+  config: S3ObjectStoreConfig,
+  client: S3.Type,
+): ObjectStoreShape => ({
+  bucketName: config.bucketName,
+  put: ({ key, body, contentType, cacheControl }) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(
+        client.putObject({
+          Bucket: config.bucketName,
+          Key: key,
+          Body: body,
+          ContentType: contentType,
+          CacheControl: cacheControl,
+        }),
+      ),
+      Effect.asVoid,
+      Effect.mapError((cause) => storeError(config, key, "put", cause)),
+    ),
+  get: (key) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(client.getObject({ Bucket: config.bucketName, Key: key })),
+      Effect.flatMap((output) => {
+        const stream = output.Body;
+        if (!stream) {
+          return Effect.fail(storeError(config, key, "get", "response body is missing"));
+        }
+        return Effect.tryPromise({
+          try: () => stream.transformToByteArray(),
+          catch: (cause) => storeError(config, key, "get", cause),
+        }).pipe(
+          Effect.map((body) =>
+            Option.some({
+              body,
+              contentType: output.ContentType ?? null,
+              etag: output.ETag ?? null,
+              size: output.ContentLength ?? body.byteLength,
+            }),
+          ),
+        );
+      }),
+      Effect.catch((cause) =>
+        isNotFound(cause)
+          ? Effect.succeedNone
+          : Effect.fail(
+              cause instanceof ObjectStoreError
+                ? cause
+                : storeError(config, key, "get", cause),
+            ),
+      ),
+    ),
+  head: (key) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(client.headObject({ Bucket: config.bucketName, Key: key })),
+      Effect.map((output) =>
+        Option.some({
+          contentType: output.ContentType ?? null,
+          etag: output.ETag ?? null,
+          size: output.ContentLength ?? 0,
+        }),
+      ),
+      Effect.catch((cause) =>
+        isNotFound(cause)
+          ? Effect.succeedNone
+          : Effect.fail(storeError(config, key, "head", cause)),
+      ),
+    ),
+  delete: (key) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(client.deleteObject({ Bucket: config.bucketName, Key: key })),
+      Effect.asVoid,
+      Effect.mapError((cause) => storeError(config, key, "delete", cause)),
+    ),
+});
+
+/** S3-compatible object store layer for AWS S3, MinIO, Garage, or R2. */
+export const S3ObjectStoreLive = (
+  config: S3ObjectStoreConfig,
+): Layer.Layer<ObjectStore> =>
+  Layer.effect(
+    ObjectStore,
+    Effect.map(S3, (client) => makeStore(config, client)),
+  ).pipe(
+    Layer.provide(
+      S3.layer({
+        region: config.region,
+        endpoint: config.endpoint,
+        forcePathStyle: config.forcePathStyle ?? config.endpoint !== undefined,
+        // AWS SDK v3 enables CRC32 checksums by default. Some S3-compatible
+        // stores reject those optional headers, so custom endpoints use the
+        // compatibility mode while native AWS S3 retains its stronger default.
+        ...(config.endpoint === undefined
+          ? {}
+          : {
+              requestChecksumCalculation: "WHEN_REQUIRED" as const,
+              responseChecksumValidation: "WHEN_REQUIRED" as const,
+            }),
+        credentials: {
+          accessKeyId: config.accessKeyId,
+          secretAccessKey: Redacted.value(config.secretAccessKey),
+        },
+      }),
+    ),
+  );
diff --git a/selfhost/platform-node/src/PgWorkflowEngine.ts b/selfhost/platform-node/src/PgWorkflowEngine.ts
new file mode 100644
index 000000000..70d342bba
--- /dev/null
+++ b/selfhost/platform-node/src/PgWorkflowEngine.ts
@@ -0,0 +1,710 @@
+import { Duration, Effect, Exit, Fiber, Layer, Option, Schema, Scope } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+import { Workflow, WorkflowEngine } from "effect/unstable/workflow";
+
+import { PgPlatformClientLive, type PgPlatformConfig } from "./Postgres.ts";
+
+interface RegisteredWorkflow {
+  readonly workflow: Workflow.Any;
+  readonly execute: (
+    payload: object,
+    executionId: string,
+  ) => Effect.Effect<unknown, unknown, WorkflowEngine.WorkflowInstance | WorkflowEngine.WorkflowEngine>;
+  readonly scope: Scope.Scope;
+}
+
+interface ClaimedExecutionRow {
+  readonly executionId: string;
+  readonly interrupted: boolean;
+  readonly leaseToken: string;
+  readonly parentExecutionId: string | null;
+  readonly payload: unknown;
+  readonly workflowName: string;
+}
+
+interface ExecutionResultRow {
+  readonly result: unknown;
+}
+
+interface ExecutionIdRow {
+  readonly executionId: string;
+}
+
+interface ActivityResultRow {
+  readonly result: unknown;
+}
+
+interface DeferredResultRow {
+  readonly exit: unknown;
+}
+
+interface DueClockRow {
+  readonly deferredName: string;
+  readonly executionId: string;
+  readonly exit: unknown;
+  readonly workflowName: string;
+}
+
+interface ActiveExecution {
+  readonly instance: WorkflowEngine.WorkflowInstance["Service"];
+  interrupt: Effect.Effect<void>;
+}
+
+const activityResultCodec = Schema.toCodecJson(
+  Workflow.Result({ success: Schema.Any, error: Schema.Any }),
+);
+
+type JsonCodec = Schema.Codec<unknown, Schema.Json, never>;
+
+const jsonCodec = (schema: Schema.Top): JsonCodec =>
+  Schema.toCodecJson(schema) as JsonCodec;
+
+const encodeJson = (value: unknown): Effect.Effect<string, unknown> =>
+  Effect.try({
+    try: () => {
+      const encoded = JSON.stringify(value);
+      if (encoded === undefined) throw new TypeError("Workflow state must be JSON-serializable");
+      return encoded;
+    },
+    catch: (cause) => cause,
+  });
+
+const ensureTables = (sql: SqlClient.SqlClient) =>
+  sql.withTransaction(
+    Effect.gen(function* () {
+      yield* sql`SELECT pg_advisory_xact_lock(hashtext('voidhash_platform_workflow_schema_v1'))`;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_workflow_execution (
+          execution_id TEXT PRIMARY KEY,
+          workflow_name TEXT NOT NULL,
+          payload_json JSONB NOT NULL,
+          parent_execution_id TEXT,
+          status TEXT NOT NULL,
+          result_json JSONB,
+          interrupted BOOLEAN NOT NULL DEFAULT FALSE,
+          resume_requested BOOLEAN NOT NULL DEFAULT FALSE,
+          lease_token TEXT,
+          leased_until_ms BIGINT,
+          created_at_ms BIGINT NOT NULL,
+          updated_at_ms BIGINT NOT NULL
+        )
+      `;
+      yield* sql`
+        ALTER TABLE platform_workflow_execution
+        ADD COLUMN IF NOT EXISTS resume_requested BOOLEAN NOT NULL DEFAULT FALSE
+      `;
+      yield* sql`
+        CREATE INDEX IF NOT EXISTS platform_workflow_execution_claim_idx
+        ON platform_workflow_execution (status, leased_until_ms, updated_at_ms)
+      `;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_workflow_activity (
+          execution_id TEXT NOT NULL,
+          activity_name TEXT NOT NULL,
+          attempt INTEGER NOT NULL,
+          result_json JSONB NOT NULL,
+          updated_at_ms BIGINT NOT NULL,
+          PRIMARY KEY (execution_id, activity_name, attempt)
+        )
+      `;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_workflow_deferred (
+          execution_id TEXT NOT NULL,
+          deferred_name TEXT NOT NULL,
+          exit_json JSONB NOT NULL,
+          updated_at_ms BIGINT NOT NULL,
+          PRIMARY KEY (execution_id, deferred_name)
+        )
+      `;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_workflow_clock (
+          execution_id TEXT NOT NULL,
+          workflow_name TEXT NOT NULL,
+          deferred_name TEXT NOT NULL,
+          due_at_ms BIGINT NOT NULL,
+          exit_json JSONB NOT NULL,
+          created_at_ms BIGINT NOT NULL,
+          PRIMARY KEY (execution_id, deferred_name)
+        )
+      `;
+      yield* sql`
+        CREATE INDEX IF NOT EXISTS platform_workflow_clock_due_idx
+        ON platform_workflow_clock (due_at_ms)
+      `;
+    }),
+  );
+
+const workflowResultCodec = (workflow: Workflow.Any) =>
+  Schema.toCodecJson(
+    Workflow.Result({
+      success: workflow.successSchema,
+      error: workflow.errorSchema,
+    }),
+  ) as JsonCodec;
+
+const encodePayload = (workflow: Workflow.Any, payload: object) =>
+  Schema.encodeEffect(jsonCodec(workflow.payloadSchema))(payload).pipe(
+    Effect.flatMap(encodeJson),
+  );
+
+const decodePayload = (workflow: Workflow.Any, payload: unknown) =>
+  Schema.decodeEffect(jsonCodec(workflow.payloadSchema))(payload as Schema.Json);
+
+const encodeWorkflowResult = (
+  workflow: Workflow.Any,
+  result: Workflow.Result<unknown, unknown>,
+) => Schema.encodeEffect(workflowResultCodec(workflow))(result).pipe(Effect.flatMap(encodeJson));
+
+const decodeWorkflowResult = (workflow: Workflow.Any, result: unknown) =>
+  Schema.decodeEffect(workflowResultCodec(workflow))(result as Schema.Json) as Effect.Effect<
+    Workflow.Result<unknown, unknown>
+  >;
+
+const encodeActivityResult = (result: Workflow.Result<unknown, unknown>) =>
+  Schema.encodeEffect(activityResultCodec)(result).pipe(Effect.flatMap(encodeJson));
+
+const decodeActivityResult = (result: unknown) =>
+  Schema.decodeEffect(activityResultCodec)(result as Schema.Json);
+
+const makePgEngine = (sql: SqlClient.SqlClient) =>
+  Effect.gen(function* () {
+    const scope = yield* Effect.scope;
+    const registered = new Map<string, RegisteredWorkflow>();
+    const active = new Map<string, ActiveExecution>();
+    const leaseMillis = 30_000;
+
+    let engine: WorkflowEngine.WorkflowEngine["Service"];
+
+    const claimExecution = (executionId: string) =>
+      Effect.suspend(() => {
+        const now = Date.now();
+        const token = crypto.randomUUID();
+        return sql<ClaimedExecutionRow>`
+          WITH candidate AS (
+            SELECT execution_id
+            FROM platform_workflow_execution
+            WHERE execution_id = ${executionId}
+              AND status IN ('pending', 'running')
+              AND (leased_until_ms IS NULL OR leased_until_ms <= ${now})
+            FOR UPDATE SKIP LOCKED
+          )
+          UPDATE platform_workflow_execution AS execution
+          SET status = 'running',
+              result_json = NULL,
+              resume_requested = FALSE,
+              lease_token = ${token},
+              leased_until_ms = ${now + leaseMillis},
+              updated_at_ms = ${now}
+          FROM candidate
+          WHERE execution.execution_id = candidate.execution_id
+          RETURNING execution.execution_id AS "executionId",
+                    execution.workflow_name AS "workflowName",
+                    execution.payload_json AS "payload",
+                    execution.parent_execution_id AS "parentExecutionId",
+                    execution.interrupted,
+                    execution.lease_token AS "leaseToken"
+        `;
+      });
+
+    const releaseUnregistered = (executionId: string, leaseToken: string) =>
+      Effect.suspend(() => {
+        const now = Date.now();
+        return sql`
+          UPDATE platform_workflow_execution
+          SET status = 'pending', lease_token = NULL, leased_until_ms = NULL, updated_at_ms = ${now}
+          WHERE execution_id = ${executionId} AND lease_token = ${leaseToken}
+        `;
+      });
+
+    const releaseFailedExecution = (executionId: string, leaseToken: string) =>
+      Effect.suspend(() => {
+        const now = Date.now();
+        return sql`
+          UPDATE platform_workflow_execution
+          SET status = 'pending', lease_token = NULL, leased_until_ms = NULL, updated_at_ms = ${now}
+          WHERE execution_id = ${executionId} AND lease_token = ${leaseToken}
+        `;
+      });
+
+    const persistExecutionResult = (
+      row: ClaimedExecutionRow,
+      workflow: Workflow.Any,
+      result: Workflow.Result<unknown, unknown>,
+    ) =>
+      Effect.gen(function* () {
+        const encoded = yield* encodeWorkflowResult(workflow, result);
+        const now = Date.now();
+        const suspended = result._tag === "Suspended";
+        const changed = yield* sql<ExecutionIdRow>`
+          UPDATE platform_workflow_execution
+          SET status = CASE
+                WHEN ${suspended} AND resume_requested THEN 'pending'
+                ELSE ${suspended ? "suspended" : "complete"}
+              END,
+              result_json = CASE
+                WHEN ${suspended} AND resume_requested THEN NULL
+                ELSE ${encoded}::jsonb
+              END,
+              resume_requested = FALSE,
+              lease_token = NULL,
+              leased_until_ms = NULL,
+              updated_at_ms = ${now}
+          WHERE execution_id = ${row.executionId} AND lease_token = ${row.leaseToken}
+          RETURNING execution_id AS "executionId"
+        `;
+        return changed.length === 1;
+      });
+
+    const heartbeatLease = (row: ClaimedExecutionRow) =>
+      Effect.forever(
+        Effect.sleep(leaseMillis / 3).pipe(
+          Effect.andThen(
+            Effect.suspend(() => {
+              const now = Date.now();
+              return sql`
+                UPDATE platform_workflow_execution
+                SET leased_until_ms = ${now + leaseMillis}, updated_at_ms = ${now}
+                WHERE execution_id = ${row.executionId}
+                  AND lease_token = ${row.leaseToken}
+                  AND status = 'running'
+              `;
+            }),
+          ),
+          Effect.catchCause((cause) =>
+            Effect.logError("workflow execution lease heartbeat failed", {
+              executionId: row.executionId,
+              workflowName: row.workflowName,
+              cause: String(cause),
+            }),
+          ),
+        ),
+      );
+
+    const runClaimedExecution = (
+      row: ClaimedExecutionRow,
+      entry: RegisteredWorkflow,
+      instance: WorkflowEngine.WorkflowInstance["Service"],
+    ) =>
+      Effect.scoped(Effect.gen(function* () {
+        yield* heartbeatLease(row).pipe(Effect.forkScoped);
+        const payload = yield* decodePayload(entry.workflow, row.payload);
+        const execution = instance.interrupted
+          ? Effect.interrupt
+          : entry.execute(payload as object, row.executionId);
+        const result = yield* execution.pipe(
+          Workflow.intoResult,
+          Effect.provideService(WorkflowEngine.WorkflowInstance, instance),
+          Effect.provideService(WorkflowEngine.WorkflowEngine, engine),
+        );
+        const persisted = yield* persistExecutionResult(row, entry.workflow, result);
+        if (persisted && result._tag === "Complete" && row.parentExecutionId) {
+          yield* sql`
+            UPDATE platform_workflow_execution
+            SET resume_requested = TRUE,
+                status = CASE WHEN status = 'suspended' THEN 'pending' ELSE status END,
+                result_json = CASE WHEN status = 'suspended' THEN NULL ELSE result_json END,
+                lease_token = CASE WHEN status = 'suspended' THEN NULL ELSE lease_token END,
+                leased_until_ms = CASE
+                  WHEN status = 'suspended' THEN NULL
+                  ELSE leased_until_ms
+                END,
+                updated_at_ms = ${Date.now()}
+            WHERE execution_id = ${row.parentExecutionId}
+              AND status IN ('running', 'suspended')
+          `;
+          yield* startExecution(row.parentExecutionId);
+        }
+      })).pipe(
+        Effect.onExit((exit) =>
+          Exit.isFailure(exit)
+            ? releaseFailedExecution(row.executionId, row.leaseToken).pipe(
+                Effect.tap(() =>
+                  Effect.logError("workflow execution failed before producing a result", {
+                    executionId: row.executionId,
+                    workflowName: row.workflowName,
+                    cause: String(exit.cause),
+                  }),
+                ),
+              )
+            : Effect.void,
+        ),
+      );
+
+    function startExecution(executionId: string): Effect.Effect<void, unknown> {
+      if (active.has(executionId)) return Effect.void;
+      return Effect.gen(function* () {
+        if (active.has(executionId)) return;
+        const rows = yield* claimExecution(executionId);
+        const row = rows[0];
+        if (!row) return;
+        const entry = registered.get(row.workflowName);
+        if (!entry) {
+          yield* releaseUnregistered(executionId, row.leaseToken);
+          return;
+        }
+
+        const instance = WorkflowEngine.WorkflowInstance.initial(
+          entry.workflow,
+          executionId,
+        );
+        instance.interrupted = row.interrupted;
+        const activeExecution: ActiveExecution = { instance, interrupt: Effect.void };
+        active.set(executionId, activeExecution);
+        const fiber = yield* runClaimedExecution(row, entry, instance).pipe(
+          Effect.ensuring(
+            Effect.sync(() => {
+              active.delete(executionId);
+            }),
+          ),
+          Effect.forkIn(entry.scope),
+        );
+        activeExecution.interrupt = Fiber.interrupt(fiber);
+      });
+    }
+
+    const pollResult = (workflow: Workflow.Any, executionId: string) =>
+      sql<ExecutionResultRow>`
+        SELECT result_json AS "result"
+        FROM platform_workflow_execution
+        WHERE execution_id = ${executionId} AND result_json IS NOT NULL
+      `.pipe(
+        Effect.flatMap((rows) =>
+          rows[0]
+            ? decodeWorkflowResult(workflow, rows[0].result).pipe(Effect.map(Option.some))
+            : Effect.succeedNone,
+        ),
+      );
+
+    function waitForResult(
+      workflow: Workflow.Any,
+      executionId: string,
+    ): Effect.Effect<Workflow.Result<unknown, unknown>, unknown> {
+      return pollResult(workflow, executionId).pipe(
+        Effect.flatMap((result) =>
+          Option.isSome(result)
+            ? Effect.succeed(result.value)
+            : Effect.sleep("20 millis").pipe(
+                Effect.andThen(waitForResult(workflow, executionId)),
+              ),
+        ),
+      );
+    }
+
+    const ensureExecution = (
+      workflow: Workflow.Any,
+      executionId: string,
+      payload: object,
+      parent: WorkflowEngine.WorkflowInstance["Service"] | undefined,
+    ) =>
+      Effect.gen(function* () {
+        const encoded = yield* encodePayload(workflow, payload);
+        const now = Date.now();
+        yield* sql`
+          INSERT INTO platform_workflow_execution (
+            execution_id, workflow_name, payload_json, parent_execution_id,
+            status, created_at_ms, updated_at_ms
+          ) VALUES (
+            ${executionId}, ${workflow._tag}, ${encoded}::jsonb,
+            ${parent?.executionId ?? null}, 'pending', ${now}, ${now}
+          )
+          ON CONFLICT (execution_id) DO NOTHING
+        `;
+      });
+
+    const processDueClocks = Effect.gen(function* () {
+      const now = Date.now();
+      const rows = yield* sql.withTransaction(
+        Effect.gen(function* () {
+          const due = yield* sql<DueClockRow>`
+            SELECT execution_id AS "executionId", workflow_name AS "workflowName",
+                   deferred_name AS "deferredName", exit_json AS "exit"
+            FROM platform_workflow_clock
+            WHERE due_at_ms <= ${now}
+            ORDER BY due_at_ms ASC
+            LIMIT 50
+            FOR UPDATE SKIP LOCKED
+          `;
+          yield* Effect.forEach(
+            due,
+            (clock) =>
+              Effect.gen(function* () {
+                const encoded = yield* encodeJson(clock.exit);
+                yield* sql`
+                  INSERT INTO platform_workflow_deferred (
+                    execution_id, deferred_name, exit_json, updated_at_ms
+                  ) VALUES (
+                    ${clock.executionId}, ${clock.deferredName}, ${encoded}::jsonb, ${now}
+                  )
+                  ON CONFLICT (execution_id, deferred_name) DO NOTHING
+                `;
+                yield* sql`
+                  UPDATE platform_workflow_execution
+                  SET resume_requested = TRUE,
+                      status = CASE WHEN status = 'suspended' THEN 'pending' ELSE status END,
+                      result_json = CASE
+                        WHEN status = 'suspended' THEN NULL
+                        ELSE result_json
+                      END,
+                      lease_token = CASE
+                        WHEN status = 'suspended' THEN NULL
+                        ELSE lease_token
+                      END,
+                      leased_until_ms = CASE
+                        WHEN status = 'suspended' THEN NULL
+                        ELSE leased_until_ms
+                      END,
+                      updated_at_ms = ${now}
+                  WHERE execution_id = ${clock.executionId}
+                    AND status IN ('running', 'suspended')
+                `;
+                yield* sql`
+                  DELETE FROM platform_workflow_clock
+                  WHERE execution_id = ${clock.executionId}
+                    AND deferred_name = ${clock.deferredName}
+                `;
+              }),
+            { discard: true },
+          );
+          return due;
+        }),
+      );
+      yield* Effect.forEach(rows, (row) => startExecution(row.executionId), {
+        discard: true,
+      });
+    });
+
+    const recoverExecutions = Effect.gen(function* () {
+      const workflowNames = [...registered.keys()];
+      if (workflowNames.length === 0) return;
+      const now = Date.now();
+      const rows = yield* sql<ExecutionIdRow>`
+        SELECT execution_id AS "executionId"
+        FROM platform_workflow_execution
+        WHERE ${sql.in("workflow_name", workflowNames)}
+          AND status IN ('pending', 'running')
+          AND (leased_until_ms IS NULL OR leased_until_ms <= ${now})
+        ORDER BY updated_at_ms ASC
+        LIMIT 50
+      `;
+      yield* Effect.forEach(rows, (row) => startExecution(row.executionId), {
+        discard: true,
+      });
+    });
+
+    const tick = processDueClocks.pipe(Effect.andThen(recoverExecutions));
+
+    const executeWorkflow = <const Discard extends boolean>(
+      workflow: Workflow.Any,
+      options: {
+        readonly executionId: string;
+        readonly payload: object;
+        readonly discard: Discard;
+        readonly parent?: WorkflowEngine.WorkflowInstance["Service"] | undefined;
+      },
+    ): Effect.Effect<
+      Discard extends true ? void : Workflow.Result<unknown, unknown>
+    > =>
+      Effect.gen(function* () {
+        yield* ensureExecution(
+          workflow,
+          options.executionId,
+          options.payload,
+          options.parent,
+        );
+        yield* startExecution(options.executionId);
+        if (options.discard) return;
+        return yield* waitForResult(workflow, options.executionId);
+      }).pipe(Effect.orDie) as Effect.Effect<
+        Discard extends true ? void : Workflow.Result<unknown, unknown>
+      >;
+
+    engine = WorkflowEngine.makeUnsafe({
+      register: (workflow, execute) =>
+        Effect.gen(function* () {
+          registered.set(workflow._tag, {
+            workflow,
+            execute,
+            scope: yield* Effect.scope,
+          });
+          yield* recoverExecutions;
+        }).pipe(Effect.orDie),
+      execute: executeWorkflow,
+      poll: (workflow, executionId) => pollResult(workflow, executionId).pipe(Effect.orDie),
+      interrupt: (_workflow, executionId) =>
+        Effect.gen(function* () {
+          yield* sql`
+            UPDATE platform_workflow_execution
+            SET interrupted = TRUE, resume_requested = FALSE,
+                status = 'pending', result_json = NULL,
+                lease_token = NULL, leased_until_ms = NULL, updated_at_ms = ${Date.now()}
+            WHERE execution_id = ${executionId} AND status <> 'complete'
+          `;
+          const running = active.get(executionId);
+          if (running) {
+            running.instance.interrupted = true;
+            yield* running.interrupt;
+          } else {
+            yield* startExecution(executionId);
+          }
+        }).pipe(Effect.orDie),
+      interruptUnsafe: (_workflow, executionId) =>
+        Effect.gen(function* () {
+          yield* sql`
+            UPDATE platform_workflow_execution
+            SET interrupted = TRUE, resume_requested = FALSE,
+                status = 'pending', result_json = NULL,
+                lease_token = NULL, leased_until_ms = NULL, updated_at_ms = ${Date.now()}
+            WHERE execution_id = ${executionId} AND status <> 'complete'
+          `;
+          const running = active.get(executionId);
+          if (running) {
+            running.instance.interrupted = true;
+            yield* running.interrupt;
+          } else {
+            yield* startExecution(executionId);
+          }
+        }).pipe(Effect.orDie),
+      resume: (_workflow, executionId) =>
+        Effect.gen(function* () {
+          yield* sql`
+            UPDATE platform_workflow_execution
+            SET interrupted = FALSE, resume_requested = FALSE,
+                status = 'pending', result_json = NULL,
+                lease_token = NULL, leased_until_ms = NULL, updated_at_ms = ${Date.now()}
+            WHERE execution_id = ${executionId} AND status <> 'complete'
+          `;
+          yield* startExecution(executionId);
+        }).pipe(Effect.orDie),
+      activityExecute: (activity, attempt) =>
+        Effect.gen(function* () {
+          const parent = yield* WorkflowEngine.WorkflowInstance;
+          const rows = yield* sql<ActivityResultRow>`
+            SELECT result_json AS "result"
+            FROM platform_workflow_activity
+            WHERE execution_id = ${parent.executionId}
+              AND activity_name = ${activity.name}
+              AND attempt = ${attempt}
+          `;
+          if (rows[0]) {
+            const stored = yield* decodeActivityResult(rows[0].result);
+            if (stored._tag === "Complete") return stored;
+            yield* sql`
+              DELETE FROM platform_workflow_activity
+              WHERE execution_id = ${parent.executionId}
+                AND activity_name = ${activity.name}
+                AND attempt = ${attempt}
+            `;
+          }
+
+          const instance = WorkflowEngine.WorkflowInstance.initial(
+            parent.workflow,
+            parent.executionId,
+          );
+          instance.interrupted = parent.interrupted;
+          const result = yield* activity.executeEncoded.pipe(
+            Workflow.intoResult,
+            Effect.provideService(WorkflowEngine.WorkflowInstance, instance),
+          );
+          const encoded = yield* encodeActivityResult(result);
+          yield* sql`
+            INSERT INTO platform_workflow_activity (
+              execution_id, activity_name, attempt, result_json, updated_at_ms
+            ) VALUES (
+              ${parent.executionId}, ${activity.name}, ${attempt}, ${encoded}::jsonb,
+              ${Date.now()}
+            )
+            ON CONFLICT (execution_id, activity_name, attempt)
+            DO NOTHING
+          `;
+          return result;
+        }).pipe(Effect.orDie),
+      deferredResult: (deferred) =>
+        Effect.gen(function* () {
+          const instance = yield* WorkflowEngine.WorkflowInstance;
+          const rows = yield* sql<DeferredResultRow>`
+            SELECT exit_json AS "exit"
+            FROM platform_workflow_deferred
+            WHERE execution_id = ${instance.executionId}
+              AND deferred_name = ${deferred.name}
+          `;
+          return rows[0]
+            ? Option.some(rows[0].exit as Exit.Exit<unknown, unknown>)
+            : Option.none();
+        }).pipe(Effect.orDie),
+      deferredDone: (options) =>
+        Effect.gen(function* () {
+          const encoded = yield* encodeJson(options.exit);
+          const now = Date.now();
+          yield* sql`
+            INSERT INTO platform_workflow_deferred (
+              execution_id, deferred_name, exit_json, updated_at_ms
+            ) VALUES (
+              ${options.executionId}, ${options.deferredName}, ${encoded}::jsonb, ${now}
+            )
+            ON CONFLICT (execution_id, deferred_name) DO NOTHING
+          `;
+          yield* sql`
+            UPDATE platform_workflow_execution
+            SET resume_requested = TRUE,
+                status = CASE WHEN status = 'suspended' THEN 'pending' ELSE status END,
+                result_json = CASE WHEN status = 'suspended' THEN NULL ELSE result_json END,
+                lease_token = CASE WHEN status = 'suspended' THEN NULL ELSE lease_token END,
+                leased_until_ms = CASE
+                  WHEN status = 'suspended' THEN NULL
+                  ELSE leased_until_ms
+                END,
+                updated_at_ms = ${now}
+            WHERE execution_id = ${options.executionId}
+              AND status IN ('running', 'suspended')
+          `;
+          yield* startExecution(options.executionId);
+        }).pipe(Effect.orDie),
+      scheduleClock: (workflow, options) =>
+        Effect.gen(function* () {
+          const exitCodec = options.clock.deferred.exitSchema as unknown as Schema.Codec<
+            Exit.Exit<unknown, unknown>,
+            Schema.Json,
+            never
+          >;
+          const encodedExit = yield* Schema.encodeEffect(exitCodec)(Exit.void).pipe(
+            Effect.flatMap(encodeJson),
+          );
+          const now = Date.now();
+          const dueAt = now + Duration.toMillis(options.clock.duration);
+          yield* sql`
+            INSERT INTO platform_workflow_clock (
+              execution_id, workflow_name, deferred_name, due_at_ms,
+              exit_json, created_at_ms
+            ) VALUES (
+              ${options.executionId}, ${workflow._tag}, ${options.clock.deferred.name},
+              ${dueAt}, ${encodedExit}::jsonb, ${now}
+            )
+            ON CONFLICT (execution_id, deferred_name) DO NOTHING
+          `;
+        }).pipe(Effect.orDie),
+    });
+
+    yield* Effect.forever(
+      tick.pipe(
+        Effect.catchCause((cause) =>
+          Effect.logError("workflow runner tick failed", { cause: String(cause) }),
+        ),
+        Effect.andThen(Effect.sleep("100 millis")),
+      ),
+    ).pipe(Effect.forkIn(scope));
+
+    return engine;
+  });
+
+/** Postgres-backed Effect workflow engine with durable activities and clocks. */
+export const PgWorkflowEngineLive = (
+  config: PgPlatformConfig,
+): Layer.Layer<WorkflowEngine.WorkflowEngine> =>
+  Layer.effect(
+    WorkflowEngine.WorkflowEngine,
+    Effect.gen(function* () {
+      const sql = yield* SqlClient.SqlClient;
+      yield* ensureTables(sql);
+      return yield* makePgEngine(sql);
+    }),
+  ).pipe(Layer.provide(PgPlatformClientLive(config)), Layer.orDie);
diff --git a/selfhost/platform-node/src/PlatformRuntime.ts b/selfhost/platform-node/src/PlatformRuntime.ts
new file mode 100644
index 000000000..3647bd6fc
--- /dev/null
+++ b/selfhost/platform-node/src/PlatformRuntime.ts
@@ -0,0 +1,6 @@
+import { Layer } from "effect";
+
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+
+/** Platform runtime marker for the single-process Node composition. */
+export const NodePlatformRuntimeLive = Layer.succeed(PlatformRuntime, PlatformRuntime.of({}));
diff --git a/selfhost/platform-node/src/Postgres.ts b/selfhost/platform-node/src/Postgres.ts
new file mode 100644
index 000000000..daacb7bc1
--- /dev/null
+++ b/selfhost/platform-node/src/Postgres.ts
@@ -0,0 +1,24 @@
+import * as PgClient from "@effect/sql-pg/PgClient";
+import type { Redacted } from "effect";
+import type { ConnectionOptions } from "node:tls";
+
+/** Postgres connection parameters shared by single-node platform adapters. */
+export interface PgPlatformConfig {
+  readonly host: string;
+  readonly port: number;
+  readonly database: string;
+  readonly username: string;
+  readonly password: Redacted.Redacted<string>;
+  readonly ssl?: boolean | ConnectionOptions;
+}
+
+/** Builds a Postgres client layer for a single-node platform adapter. */
+export const PgPlatformClientLive = (config: PgPlatformConfig) =>
+  PgClient.layer({
+    host: config.host,
+    port: config.port,
+    database: config.database,
+    username: config.username,
+    password: config.password,
+    ssl: config.ssl,
+  });
diff --git a/selfhost/platform-node/src/Queue.ts b/selfhost/platform-node/src/Queue.ts
new file mode 100644
index 000000000..3932e058c
--- /dev/null
+++ b/selfhost/platform-node/src/Queue.ts
@@ -0,0 +1,342 @@
+import {
+  QueueConsumerError,
+  type QueueConsumerOptions,
+  QueueDriver,
+  type QueueDriverShape,
+  QueueProducerError,
+  type QueueProducer,
+} from "@voidhash/platform/Queue";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { Cause, Duration, Effect, Layer, Schema, SchemaParser } from "effect";
+import { SqlClient } from "effect/unstable/sql";
+
+import { PgPlatformClientLive, type PgPlatformConfig } from "./Postgres.ts";
+
+interface QueueRow {
+  readonly id: string;
+  readonly body: unknown;
+  readonly attempt: number | string;
+  readonly sequence: number | string;
+}
+
+interface DecodedQueueRow<A> {
+  readonly row: QueueRow;
+  readonly message: A;
+}
+
+const defaultOptions = {
+  batchSize: 10,
+  maxRetries: 3,
+  retryDelayMillis: 1_000,
+  visibilityTimeoutMillis: 30_000,
+  pollIntervalMillis: 250,
+} as const;
+
+const positiveInteger = (value: number | undefined, fallback: number): number =>
+  value === undefined || !Number.isFinite(value) || value <= 0
+    ? fallback
+    : Math.floor(value);
+
+const nonNegativeInteger = (value: number | undefined, fallback: number): number =>
+  value === undefined || !Number.isFinite(value) || value < 0
+    ? fallback
+    : Math.floor(value);
+
+const resolvedOptions = (options: QueueConsumerOptions | undefined) => ({
+  batchSize: positiveInteger(options?.batchSize, defaultOptions.batchSize),
+  maxRetries: nonNegativeInteger(options?.maxRetries, defaultOptions.maxRetries),
+  retryDelayMillis: nonNegativeInteger(
+    options?.retryDelayMillis,
+    defaultOptions.retryDelayMillis,
+  ),
+  visibilityTimeoutMillis: positiveInteger(
+    options?.visibilityTimeoutMillis,
+    defaultOptions.visibilityTimeoutMillis,
+  ),
+  pollIntervalMillis: positiveInteger(
+    options?.pollIntervalMillis,
+    defaultOptions.pollIntervalMillis,
+  ),
+  deadLetterQueue: options?.deadLetterQueue,
+});
+
+const encodeJson = (value: unknown): Effect.Effect<string, unknown> =>
+  Effect.try({
+    try: () => {
+      const encoded = JSON.stringify(value);
+      if (encoded === undefined) throw new TypeError("Queue messages must be JSON-serializable");
+      return encoded;
+    },
+    catch: (cause) => cause,
+  });
+
+const ensureTable = (sql: SqlClient.SqlClient) =>
+  sql.withTransaction(
+    Effect.gen(function* () {
+      yield* sql`SELECT pg_advisory_xact_lock(hashtext('voidhash_platform_queue_schema_v1'))`;
+      yield* sql`
+        CREATE TABLE IF NOT EXISTS platform_queue_messages (
+          id TEXT PRIMARY KEY,
+          queue_name TEXT NOT NULL,
+          body_json JSONB NOT NULL,
+          attempt INTEGER NOT NULL DEFAULT 0,
+          available_at_ms BIGINT NOT NULL,
+          leased_until_ms BIGINT,
+          created_at_ms BIGINT NOT NULL,
+          last_error TEXT,
+          sequence BIGSERIAL NOT NULL
+        )
+      `;
+      yield* sql`
+        ALTER TABLE platform_queue_messages
+        ADD COLUMN IF NOT EXISTS sequence BIGSERIAL
+      `;
+      yield* sql`
+        CREATE INDEX IF NOT EXISTS platform_queue_messages_claim_v2_idx
+        ON platform_queue_messages (queue_name, available_at_ms, sequence)
+      `;
+    }),
+  );
+
+const producerError = (queueName: string, cause: unknown) =>
+  new QueueProducerError({ queueName, cause: String(cause) });
+
+const consumerError = (queueName: string, cause: unknown) =>
+  new QueueConsumerError({ queueName, cause: String(cause) });
+
+const makeProducer = <A, I>(
+  sql: SqlClient.SqlClient,
+  queueName: string,
+  schema: Schema.Codec<A, I>,
+): QueueProducer<A> => {
+  const encode = SchemaParser.encodeUnknownEffect(schema);
+
+  const publishEncoded = (encoded: unknown) =>
+    Effect.gen(function* () {
+      const body = yield* encodeJson(encoded);
+      const now = Date.now();
+      yield* sql`
+        INSERT INTO platform_queue_messages (
+          id, queue_name, body_json, available_at_ms, created_at_ms
+        ) VALUES (
+          ${crypto.randomUUID()}, ${queueName}, ${body}::jsonb, ${now}, ${now}
+        )
+      `;
+    });
+
+  const publish = (message: A) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(encode(message)),
+      Effect.flatMap(publishEncoded),
+      Effect.mapError((cause) => producerError(queueName, cause)),
+    );
+
+  const publishBatch = (messages: ReadonlyArray<A>) =>
+    PlatformRuntime.pipe(
+      Effect.andThen(Effect.forEach(messages, (message) => encode(message))),
+      Effect.flatMap((encoded) =>
+        sql.withTransaction(Effect.forEach(encoded, publishEncoded, { discard: true })),
+      ),
+      Effect.mapError((cause) => producerError(queueName, cause)),
+    );
+
+  return { publish, publishBatch };
+};
+
+const claimBatch = (
+  sql: SqlClient.SqlClient,
+  queueName: string,
+  options: ReturnType<typeof resolvedOptions>,
+) =>
+  Effect.suspend(() => {
+    const now = Date.now();
+    return sql<QueueRow>`
+      WITH claimed AS (
+        SELECT id
+        FROM platform_queue_messages
+        WHERE queue_name = ${queueName}
+          AND available_at_ms <= ${now}
+          AND (leased_until_ms IS NULL OR leased_until_ms <= ${now})
+        ORDER BY sequence ASC
+        FOR UPDATE SKIP LOCKED
+        LIMIT ${options.batchSize}
+      )
+      UPDATE platform_queue_messages AS message
+      SET attempt = message.attempt + 1,
+          leased_until_ms = ${now + options.visibilityTimeoutMillis}
+      FROM claimed
+      WHERE message.id = claimed.id
+      RETURNING message.id, message.body_json AS "body", message.attempt, message.sequence
+    `.pipe(
+      Effect.map((rows) =>
+        [...rows].sort((left, right) => Number(left.sequence) - Number(right.sequence)),
+      ),
+    );
+  });
+
+const deleteRows = (sql: SqlClient.SqlClient, rows: ReadonlyArray<QueueRow>) =>
+  sql.withTransaction(
+    Effect.forEach(
+      rows,
+      (row) =>
+        sql`
+          DELETE FROM platform_queue_messages
+          WHERE id = ${row.id}
+        `,
+      { discard: true },
+    ),
+  );
+
+const retryRows = (
+  sql: SqlClient.SqlClient,
+  rows: ReadonlyArray<QueueRow>,
+  queueName: string,
+  options: ReturnType<typeof resolvedOptions>,
+  cause: Cause.Cause<unknown>,
+) => {
+  const now = Date.now();
+  const maxAttempts = options.maxRetries + 1;
+  const error = Cause.pretty(cause);
+  return sql.withTransaction(
+    Effect.forEach(
+      rows,
+      (row) => {
+        if (Number(row.attempt) < maxAttempts) {
+          return sql`
+            UPDATE platform_queue_messages
+            SET available_at_ms = ${now + options.retryDelayMillis},
+                leased_until_ms = NULL,
+                last_error = ${error}
+            WHERE id = ${row.id}
+          `;
+        }
+        if (options.deadLetterQueue) {
+          return Effect.gen(function* () {
+            const body = yield* encodeJson(row.body);
+            yield* sql`
+              INSERT INTO platform_queue_messages (
+                id, queue_name, body_json, available_at_ms, created_at_ms, last_error
+              ) VALUES (
+                ${crypto.randomUUID()}, ${options.deadLetterQueue}, ${body}::jsonb,
+                ${now}, ${now}, ${error}
+              )
+            `;
+            yield* sql`
+              DELETE FROM platform_queue_messages
+              WHERE id = ${row.id}
+            `;
+          });
+        }
+        return sql`
+          DELETE FROM platform_queue_messages
+          WHERE id = ${row.id}
+        `;
+      },
+      { discard: true },
+    ),
+  ).pipe(
+    Effect.tap(() =>
+      Effect.logWarning("queue batch failed; delivery state updated", {
+        queueName,
+        messageCount: rows.length,
+        cause: error,
+      }),
+    ),
+  );
+};
+
+const processBatch = <A, I, R>(
+  sql: SqlClient.SqlClient,
+  queueName: string,
+  schema: Schema.Codec<A, I>,
+  handleBatch: (messages: ReadonlyArray<A>) => Effect.Effect<void, unknown, R>,
+  inputOptions: QueueConsumerOptions | undefined,
+): Effect.Effect<number, QueueConsumerError, PlatformRuntime | R> => {
+  const options = resolvedOptions(inputOptions);
+  const decode = SchemaParser.decodeUnknownEffect(schema);
+
+  return PlatformRuntime.pipe(
+    Effect.andThen(claimBatch(sql, queueName, options)),
+    Effect.flatMap((rows) =>
+      Effect.gen(function* () {
+        if (rows.length === 0) return 0;
+
+        const decoded: Array<DecodedQueueRow<A>> = [];
+        const poison: Array<QueueRow> = [];
+        yield* Effect.forEach(
+          rows,
+          (row) =>
+            decode(row.body).pipe(
+              Effect.matchCauseEffect({
+                onFailure: (cause) =>
+                  Effect.logWarning("queue payload decode failed; acking poison message", {
+                    queueName,
+                    messageId: row.id,
+                    cause: Cause.pretty(cause),
+                  }).pipe(
+                    Effect.tap(() =>
+                      Effect.sync(() => {
+                        poison.push(row);
+                      }),
+                    ),
+                  ),
+                onSuccess: (message) =>
+                  Effect.sync(() => {
+                    decoded.push({ row, message });
+                  }),
+              }),
+            ),
+          { discard: true },
+        );
+
+        if (poison.length > 0) yield* deleteRows(sql, poison);
+        if (decoded.length === 0) return rows.length;
+
+        yield* handleBatch(decoded.map(({ message }) => message)).pipe(
+          Effect.matchCauseEffect({
+            onFailure: (cause) =>
+              retryRows(
+                sql,
+                decoded.map(({ row }) => row),
+                queueName,
+                options,
+                cause,
+              ),
+            onSuccess: () => deleteRows(sql, decoded.map(({ row }) => row)),
+          }),
+        );
+        return rows.length;
+      }),
+    ),
+    Effect.mapError((cause) => consumerError(queueName, cause)),
+  );
+};
+
+const makeQueueDriver = (sql: SqlClient.SqlClient): QueueDriverShape => ({
+  producer: (queueName, schema) => makeProducer(sql, queueName, schema),
+  processBatch: (queueName, schema, handleBatch, options) =>
+    processBatch(sql, queueName, schema, handleBatch, options),
+  consumeBatch: (queueName, schema, handleBatch, options) => {
+    const resolved = resolvedOptions(options);
+    return Effect.forever(
+      processBatch(sql, queueName, schema, handleBatch, options).pipe(
+        Effect.flatMap((count) =>
+          count === 0
+            ? Effect.sleep(Duration.millis(resolved.pollIntervalMillis))
+            : Effect.void,
+        ),
+      ),
+    );
+  },
+});
+
+/** Postgres-backed queue driver with durable leases, retries, and dead letters. */
+export const PgQueueLive = (config: PgPlatformConfig): Layer.Layer<QueueDriver> =>
+  Layer.effect(
+    QueueDriver,
+    Effect.gen(function* () {
+      const sql = yield* SqlClient.SqlClient;
+      yield* ensureTable(sql);
+      return makeQueueDriver(sql);
+    }),
+  ).pipe(Layer.provide(PgPlatformClientLive(config)), Layer.orDie);
diff --git a/selfhost/platform-node/src/Screenshot.ts b/selfhost/platform-node/src/Screenshot.ts
new file mode 100644
index 000000000..c48d1f39b
--- /dev/null
+++ b/selfhost/platform-node/src/Screenshot.ts
@@ -0,0 +1,146 @@
+import {
+  Screenshot,
+  ScreenshotError,
+  type ScreenshotOptions,
+  type ScreenshotShape,
+} from "@voidhash/platform/Screenshot";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { Effect, Layer } from "effect";
+import { chromium, type Browser } from "playwright-core";
+
+/** Headless Chromium launch and resource limits. */
+export interface ChromiumScreenshotConfig {
+  readonly executablePath?: string;
+  readonly disableSandbox?: boolean;
+  readonly timeoutMillis?: number;
+  readonly maxWidth?: number;
+  readonly maxHeight?: number;
+  readonly maxDeviceScaleFactor?: number;
+}
+
+const screenshotError = (operation: string, cause: unknown) =>
+  new ScreenshotError({ operation, cause: String(cause) });
+
+const positiveInteger = (value: number, maximum: number): boolean =>
+  Number.isInteger(value) && value > 0 && value <= maximum;
+
+const validateOptions = (
+  options: ScreenshotOptions,
+  config: ChromiumScreenshotConfig,
+): Effect.Effect<void, ScreenshotError> => {
+  const maxWidth = config.maxWidth ?? 4_096;
+  const maxHeight = config.maxHeight ?? 4_096;
+  const maxScale = config.maxDeviceScaleFactor ?? 4;
+  if (!positiveInteger(options.width, maxWidth)) {
+    return Effect.fail(
+      screenshotError("validate", `width must be between 1 and ${maxWidth}`),
+    );
+  }
+  if (!positiveInteger(options.height, maxHeight)) {
+    return Effect.fail(
+      screenshotError("validate", `height must be between 1 and ${maxHeight}`),
+    );
+  }
+  if (
+    !Number.isFinite(options.deviceScaleFactor) ||
+    options.deviceScaleFactor < 1 ||
+    options.deviceScaleFactor > maxScale
+  ) {
+    return Effect.fail(
+      screenshotError(
+        "validate",
+        `deviceScaleFactor must be between 1 and ${maxScale}`,
+      ),
+    );
+  }
+  return Effect.void;
+};
+
+const render = (
+  browser: Browser,
+  config: ChromiumScreenshotConfig,
+  options: ScreenshotOptions,
+) =>
+  validateOptions(options, config).pipe(
+    Effect.andThen(
+      Effect.acquireUseRelease(
+        Effect.tryPromise({
+          try: () =>
+            browser.newContext({
+              viewport: { width: Math.floor(options.width), height: Math.floor(options.height) },
+              deviceScaleFactor: options.deviceScaleFactor,
+              javaScriptEnabled: false,
+            }),
+          catch: (cause) => screenshotError("openContext", cause),
+        }),
+        (context) =>
+          Effect.tryPromise({
+            try: async () => {
+              const page = await context.newPage();
+              await page.route("http://**/*", (route) => route.abort("blockedbyclient"));
+              await page.route("https://**/*", (route) => route.abort("blockedbyclient"));
+              await page.setContent(options.html, {
+                waitUntil: "load",
+                timeout: config.timeoutMillis ?? 15_000,
+              });
+              return new Uint8Array(
+                await page.screenshot({
+                  type: "png",
+                  fullPage: false,
+                  animations: "disabled",
+                  timeout: config.timeoutMillis ?? 15_000,
+                }),
+              );
+            },
+            catch: (cause) => screenshotError("render", cause),
+          }),
+        (context) =>
+          Effect.promise(() => context.close()).pipe(
+            Effect.catchCause((cause) =>
+              Effect.logWarning("failed to close screenshot browser context", {
+                cause: String(cause),
+              }),
+            ),
+          ),
+      ),
+    ),
+  );
+
+const makeRenderer = (
+  browser: Browser,
+  config: ChromiumScreenshotConfig,
+): ScreenshotShape => ({
+  renderPng: (options) =>
+    PlatformRuntime.pipe(Effect.andThen(render(browser, config, options))),
+});
+
+/** Chromium-backed PNG screenshot layer with network and JavaScript disabled. */
+export const ChromiumScreenshotLive = (
+  config: ChromiumScreenshotConfig = {},
+): Layer.Layer<Screenshot, ScreenshotError> =>
+  Layer.effect(
+    Screenshot,
+    Effect.acquireRelease(
+      Effect.tryPromise({
+        try: () =>
+          chromium.launch({
+            executablePath:
+              config.executablePath ?? process.env.CHROMIUM_EXECUTABLE_PATH,
+            headless: true,
+            args: [
+              "--disable-dev-shm-usage",
+              ...(config.disableSandbox ? ["--no-sandbox"] : []),
+            ],
+          }),
+        catch: (cause) => screenshotError("launch", cause),
+      }),
+      (browser) =>
+        Effect.promise(() => browser.close()).pipe(
+          Effect.catchCause((cause) =>
+            Effect.logWarning("failed to close screenshot browser", {
+              cause: String(cause),
+            }),
+          ),
+        ),
+    ).pipe(Effect.map((browser) => makeRenderer(browser, config))),
+  );
diff --git a/selfhost/platform-node/src/Workflow.ts b/selfhost/platform-node/src/Workflow.ts
new file mode 100644
index 000000000..bd8871160
--- /dev/null
+++ b/selfhost/platform-node/src/Workflow.ts
@@ -0,0 +1,233 @@
+import {
+  type WorkflowDefinition,
+  type WorkflowExecutionResult,
+  type WorkflowHandlerContext,
+  WorkflowRunner,
+  WorkflowRunnerError,
+  type WorkflowRunnerShape,
+  type WorkflowStepOptions,
+} from "@voidhash/platform/Workflow";
+import { PlatformRuntime } from "@voidhash/platform/PlatformRuntime";
+import { Cause, Effect, Exit, Layer, Option, Schema } from "effect";
+import {
+  Activity,
+  DurableClock,
+  Workflow,
+  WorkflowEngine,
+} from "effect/unstable/workflow";
+
+import { PgWorkflowEngineLive } from "./PgWorkflowEngine.ts";
+import type { PgPlatformConfig } from "./Postgres.ts";
+
+const runnerError = (workflowName: string, operation: string, cause: unknown) =>
+  new WorkflowRunnerError({ workflowName, operation, cause: String(cause) });
+
+const catchRunnerCause = <A, E, R>(
+  effect: Effect.Effect<A, E, R>,
+  workflowName: string,
+  operation: string,
+): Effect.Effect<A, WorkflowRunnerError, R> =>
+  effect.pipe(
+    Effect.catchCause((cause) => {
+      const squashed = Cause.squash(cause);
+      return Effect.fail(
+        squashed instanceof WorkflowRunnerError
+          ? squashed
+          : runnerError(workflowName, operation, Cause.pretty(cause)),
+      );
+    }),
+  );
+
+const toNativeWorkflow = <
+  const Name extends string,
+  Payload extends Schema.Struct.Fields,
+  Success extends Schema.Top,
+>(workflow: WorkflowDefinition<Name, Payload, Success>) =>
+  Workflow.make(workflow.name, {
+    payload: workflow.payload,
+    success: workflow.success,
+    error: WorkflowRunnerError,
+    idempotencyKey: workflow.idempotencyKey,
+  });
+
+const executionResult = <A>(
+  result: Workflow.Result<A, WorkflowRunnerError>,
+): Effect.Effect<WorkflowExecutionResult<A>> => {
+  if (result._tag === "Suspended") {
+    return Effect.succeed({ status: "suspended" });
+  }
+  return Effect.succeed(
+    Exit.match(result.exit, {
+      onFailure: (cause) => {
+        if (Cause.hasInterrupts(cause)) {
+          return { status: "interrupted" as const };
+        }
+        const error = Cause.squash(cause);
+        return {
+          status: "failed" as const,
+          error:
+            error instanceof WorkflowRunnerError
+              ? error
+              : runnerError("unknown", "poll", error),
+        };
+      },
+      onSuccess: (value) => ({ status: "succeeded" as const, value }),
+    }),
+  );
+};
+
+const makeStep = <Success extends Schema.Top, R>(
+  workflowName: string,
+  options: WorkflowStepOptions<Success, R>,
+): Effect.Effect<Success["Type"], WorkflowRunnerError, PlatformRuntime | R> =>
+  Activity.make({
+    name: options.name,
+    success: options.success,
+    error: WorkflowRunnerError,
+    execute: catchRunnerCause(
+      PlatformRuntime.pipe(Effect.andThen(options.execute)),
+      workflowName,
+      `step:${options.name}`,
+    ),
+  }) as unknown as Effect.Effect<
+    Success["Type"],
+    WorkflowRunnerError,
+    PlatformRuntime | R
+  >;
+
+const sleepUntil = (
+  workflowName: string,
+  name: string,
+  scheduledTime: Date,
+): Effect.Effect<void, WorkflowRunnerError, PlatformRuntime> =>
+  catchRunnerCause(
+    PlatformRuntime.pipe(
+      Effect.andThen(
+        Effect.suspend(() => {
+          const delay = scheduledTime.getTime() - Date.now();
+          return delay <= 0
+            ? Effect.void
+            : DurableClock.sleep({
+                name,
+                duration: delay,
+                inMemoryThreshold: 1,
+              });
+        }),
+      ),
+    ),
+    workflowName,
+    `sleep:${name}`,
+  ) as unknown as Effect.Effect<void, WorkflowRunnerError, PlatformRuntime>;
+
+type AnyWorkflowDefinition = WorkflowDefinition<
+  string,
+  Schema.Struct.Fields,
+  Schema.Top
+>;
+
+type AnyWorkflowHandler = (
+  payload: Schema.Struct.Type<Schema.Struct.Fields>,
+  context: WorkflowHandlerContext,
+) => Effect.Effect<unknown, unknown, unknown>;
+
+const makeRunner = (
+  engine: WorkflowEngine.WorkflowEngine["Service"],
+): WorkflowRunnerShape =>
+  ({
+    register: (workflow: AnyWorkflowDefinition, handler: AnyWorkflowHandler) => {
+      const native = toNativeWorkflow(workflow);
+      return catchRunnerCause(
+        engine.register(native, (payload, executionId) => {
+          const context: WorkflowHandlerContext = {
+            executionId,
+            step: (options) => makeStep(workflow.name, options),
+            sleepUntil: (name, scheduledTime) =>
+              sleepUntil(workflow.name, name, scheduledTime),
+          };
+          return catchRunnerCause(
+            PlatformRuntime.pipe(Effect.andThen(handler(payload, context))),
+            workflow.name,
+            "run",
+          );
+        }),
+        workflow.name,
+        "register",
+      );
+    },
+    dispatch: (
+      workflow: AnyWorkflowDefinition,
+      payload: Schema.Struct.Type<Schema.Struct.Fields>,
+    ) => {
+      const native = toNativeWorkflow(workflow);
+      return catchRunnerCause(
+        PlatformRuntime.pipe(
+          Effect.andThen(native.execute(payload, { discard: true })),
+          Effect.provideService(WorkflowEngine.WorkflowEngine, engine),
+        ),
+        workflow.name,
+        "dispatch",
+      );
+    },
+    execute: (
+      workflow: AnyWorkflowDefinition,
+      payload: Schema.Struct.Type<Schema.Struct.Fields>,
+    ) => {
+      const native = toNativeWorkflow(workflow);
+      return catchRunnerCause(
+        PlatformRuntime.pipe(
+          Effect.andThen(native.execute(payload)),
+          Effect.provideService(WorkflowEngine.WorkflowEngine, engine),
+        ),
+        workflow.name,
+        "execute",
+      );
+    },
+    poll: (workflow: AnyWorkflowDefinition, executionId: string) => {
+      const native = toNativeWorkflow(workflow);
+      return catchRunnerCause(
+        PlatformRuntime.pipe(
+          Effect.andThen(native.poll(executionId)),
+          Effect.provideService(WorkflowEngine.WorkflowEngine, engine),
+          Effect.flatMap(
+            Option.match({
+              onNone: () => Effect.succeedNone,
+              onSome: (result) => executionResult(result).pipe(Effect.map(Option.some)),
+            }),
+          ),
+        ),
+        workflow.name,
+        "poll",
+      );
+    },
+    resume: (workflow: AnyWorkflowDefinition, executionId: string) => {
+      const native = toNativeWorkflow(workflow);
+      return catchRunnerCause(
+        PlatformRuntime.pipe(
+          Effect.andThen(native.resume(executionId)),
+          Effect.provideService(WorkflowEngine.WorkflowEngine, engine),
+        ),
+        workflow.name,
+        "resume",
+      );
+    },
+    interrupt: (workflow: AnyWorkflowDefinition, executionId: string) => {
+      const native = toNativeWorkflow(workflow);
+      return catchRunnerCause(
+        PlatformRuntime.pipe(
+          Effect.andThen(native.interrupt(executionId)),
+          Effect.provideService(WorkflowEngine.WorkflowEngine, engine),
+        ),
+        workflow.name,
+        "interrupt",
+      );
+    },
+  } as unknown as WorkflowRunnerShape);
+
+/** Postgres-backed provider-neutral workflow runner. */
+export const PgWorkflowRunnerLive = (
+  config: PgPlatformConfig,
+): Layer.Layer<WorkflowRunner> =>
+  Layer.effect(
+    WorkflowRunner,
+    Effect.map(WorkflowEngine.WorkflowEngine, makeRunner),
+  ).pipe(Layer.provide(PgWorkflowEngineLive(config)));
diff --git a/selfhost/platform-node/src/index.ts b/selfhost/platform-node/src/index.ts
new file mode 100644
index 000000000..40e177321
--- /dev/null
+++ b/selfhost/platform-node/src/index.ts
@@ -0,0 +1,28 @@
+export { PgCronSchedulerLive } from "./CronScheduler.ts";
+export { SmtpMailerLive, type SmtpMailerConfig } from "./Mailer.ts";
+export { S3ObjectStoreLive, type S3ObjectStoreConfig } from "./ObjectStore.ts";
+export {
+  ChromiumScreenshotLive,
+  type ChromiumScreenshotConfig,
+} from "./Screenshot.ts";
+export { PgWorkflowEngineLive } from "./PgWorkflowEngine.ts";
+export { PgWorkflowRunnerLive } from "./Workflow.ts";
+export {
+  type DueDurableEntityAlarm,
+  NodeDurableEntityControl,
+  type NodeDurableEntityControlShape,
+  type PgDurableEntityConfig,
+  PgDurableEntityHostLive,
+} from "./DurableEntity.ts";
+export { PgKeyValueStoreLive } from "./KeyValueStore.ts";
+export {
+  makeMemoryDurableEntityHost,
+  MemoryDurableEntityHostLive,
+} from "./MemoryDurableEntity.ts";
+export {
+  makeNodeDurableEntitySession,
+  type NodeWebSocketLike,
+} from "./NodeDurableEntitySession.ts";
+export { NodePlatformRuntimeLive } from "./PlatformRuntime.ts";
+export { PgPlatformClientLive, type PgPlatformConfig } from "./Postgres.ts";
+export { PgQueueLive } from "./Queue.ts";
diff --git a/selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts b/selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts
new file mode 100644
index 000000000..f59c09ccc
--- /dev/null
+++ b/selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts
@@ -0,0 +1,92 @@
+import { Screenshot, ScreenshotError } from "@voidhash/platform/Screenshot";
+import { Effect, Layer } from "effect";
+import { createServer } from "node:http";
+import { describe, expect, it } from "vitest";
+
+import { NodePlatformRuntimeLive } from "../src/PlatformRuntime.ts";
+import { ChromiumScreenshotLive } from "../src/Screenshot.ts";
+
+const executablePath =
+  process.env.PLATFORM_NODE_CHROMIUM_EXECUTABLE_PATH ??
+  "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome";
+const screenshotLayer = () =>
+  Layer.merge(ChromiumScreenshotLive({ executablePath }), NodePlatformRuntimeLive);
+const describeChromium =
+  process.env.PLATFORM_NODE_CHROMIUM_TEST === "1" ? describe : describe.skip;
+
+const pngDimensions = (png: Uint8Array) => {
+  const view = new DataView(png.buffer, png.byteOffset, png.byteLength);
+  return { width: view.getUint32(16), height: view.getUint32(20) };
+};
+
+describeChromium("Chromium screenshot renderer", () => {
+  it("renders a viewport PNG at the requested device scale", async () => {
+    const png = await Effect.runPromise(
+      Effect.gen(function* () {
+        const screenshot = yield* Screenshot;
+        return yield* screenshot.renderPng({
+          html: "<!doctype html><style>html,body{margin:0;background:#123456}</style>",
+          width: 160,
+          height: 90,
+          deviceScaleFactor: 2,
+        });
+      }).pipe(Effect.provide(screenshotLayer())),
+    );
+
+    expect(Array.from(png.subarray(0, 8))).toEqual([137, 80, 78, 71, 13, 10, 26, 10]);
+    expect(pngDimensions(png)).toEqual({ width: 320, height: 180 });
+  });
+
+  it("rejects external requests from rendered documents", async () => {
+    let requestCount = 0;
+    const server = createServer((_request, response) => {
+      requestCount += 1;
+      response.writeHead(200, { "content-type": "image/png" });
+      response.end();
+    });
+    await new Promise<void>((resolve, reject) => {
+      server.once("error", reject);
+      server.listen(0, "127.0.0.1", resolve);
+    });
+    const address = server.address();
+    if (address === null || typeof address === "string") {
+      throw new Error("test server did not expose a TCP port");
+    }
+
+    try {
+      const url = `http://127.0.0.1:${address.port}/blocked.png`;
+      const png = await Effect.runPromise(
+        Effect.gen(function* () {
+          const screenshot = yield* Screenshot;
+          return yield* screenshot.renderPng({
+            html: `<!doctype html><img src="${url}"><script>fetch("${url}")</script>`,
+            width: 40,
+            height: 30,
+            deviceScaleFactor: 1,
+          });
+        }).pipe(Effect.provide(screenshotLayer())),
+      );
+
+      expect(pngDimensions(png)).toEqual({ width: 40, height: 30 });
+      expect(requestCount).toBe(0);
+    } finally {
+      await new Promise<void>((resolve, reject) => {
+        server.close((error) => (error ? reject(error) : resolve()));
+      });
+    }
+  });
+
+  it("validates viewport limits through the stable error channel", async () => {
+    const error = await Effect.runPromise(
+      Effect.gen(function* () {
+        const screenshot = yield* Screenshot;
+        return yield* screenshot
+          .renderPng({ html: "", width: 0, height: 30, deviceScaleFactor: 1 })
+          .pipe(Effect.flip);
+      }).pipe(Effect.provide(screenshotLayer())),
+    );
+
+    expect(error).toBeInstanceOf(ScreenshotError);
+    expect(error.operation).toBe("validate");
+  });
+});
diff --git a/selfhost/platform-node/tests/MemoryDurableEntity.test.ts b/selfhost/platform-node/tests/MemoryDurableEntity.test.ts
new file mode 100644
index 000000000..2626d585d
--- /dev/null
+++ b/selfhost/platform-node/tests/MemoryDurableEntity.test.ts
@@ -0,0 +1,73 @@
+import { makeDurableEntityAddress } from "@voidhash/platform/DurableEntity";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeMemoryDurableEntityHost } from "../src/MemoryDurableEntity.ts";
+
+describe("memory durable entity host", () => {
+  it("serializes one address while allowing different addresses to overlap", async () => {
+    const host = makeMemoryDurableEntityHost();
+    const first = makeDurableEntityAddress("document", "first");
+    const second = makeDurableEntityAddress("document", "second");
+    const events: string[] = [];
+
+    await Effect.runPromise(
+      Effect.all(
+        [
+          host.run(first, () =>
+            Effect.gen(function* () {
+              events.push("first:start");
+              yield* Effect.sleep("30 millis");
+              events.push("first:end");
+            }),
+          ),
+          host.run(first, () => Effect.sync(() => void events.push("first:next"))),
+          host.run(second, () =>
+            Effect.gen(function* () {
+              events.push("second:start");
+              yield* Effect.sleep("5 millis");
+              events.push("second:end");
+            }),
+          ),
+        ],
+        { concurrency: "unbounded" },
+      ),
+    );
+
+    expect(events.indexOf("second:end")).toBeLessThan(events.indexOf("first:end"));
+    expect(events.indexOf("first:end")).toBeLessThan(events.indexOf("first:next"));
+  });
+
+  it("retains entity-local KV, alarm, and session state", async () => {
+    const host = makeMemoryDurableEntityHost();
+    const address = makeDurableEntityAddress("document", "stateful");
+    const session = {
+      id: "session-1",
+      send: () => Effect.void,
+      close: () => Effect.void,
+      getAttachment: Effect.succeed(undefined),
+      setAttachment: () => Effect.void,
+    };
+
+    await Effect.runPromise(
+      host.run(address, (entity) =>
+        Effect.gen(function* () {
+          yield* entity.keyValue.put("value", { count: 1 });
+          yield* entity.alarm.set(1234);
+          yield* entity.sessions.attach(session);
+        }),
+      ),
+    );
+
+    const state = await Effect.runPromise(
+      host.run(address, (entity) =>
+        Effect.all({
+          value: entity.keyValue.get("value"),
+          alarm: entity.alarm.get,
+          sessions: entity.sessions.list,
+        }),
+      ),
+    );
+    expect(state).toEqual({ value: { count: 1 }, alarm: 1234, sessions: [session] });
+  });
+});
diff --git a/selfhost/platform-node/tests/NodeDurableEntitySession.test.ts b/selfhost/platform-node/tests/NodeDurableEntitySession.test.ts
new file mode 100644
index 000000000..7d003317c
--- /dev/null
+++ b/selfhost/platform-node/tests/NodeDurableEntitySession.test.ts
@@ -0,0 +1,27 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeNodeDurableEntitySession } from "../src/NodeDurableEntitySession.ts";
+
+describe("Node durable entity session", () => {
+  it("forwards socket operations and keeps attachments", async () => {
+    const sent: Array<string | Uint8Array> = [];
+    const closed: Array<readonly [number | undefined, string | undefined]> = [];
+    const session = makeNodeDurableEntitySession(
+      "session-1",
+      {
+        send: (message) => void sent.push(message),
+        close: (code, reason) => void closed.push([code, reason]),
+      },
+      { authenticated: false },
+    );
+
+    await Effect.runPromise(session.send("hello"));
+    await Effect.runPromise(session.setAttachment({ authenticated: true }));
+    await Effect.runPromise(session.close(1000, "done"));
+
+    expect(sent).toEqual(["hello"]);
+    expect(await Effect.runPromise(session.getAttachment)).toEqual({ authenticated: true });
+    expect(closed).toEqual([[1000, "done"]]);
+  });
+});
diff --git a/selfhost/platform-node/tests/PgCronScheduler.integration.test.ts b/selfhost/platform-node/tests/PgCronScheduler.integration.test.ts
new file mode 100644
index 000000000..6554557c8
--- /dev/null
+++ b/selfhost/platform-node/tests/PgCronScheduler.integration.test.ts
@@ -0,0 +1,215 @@
+import {
+  type CronJobContext,
+  CronScheduler,
+  CronSchedulerError,
+} from "@voidhash/platform/CronScheduler";
+import { Effect, Layer, Redacted } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { PgCronSchedulerLive } from "../src/CronScheduler.ts";
+import { NodePlatformRuntimeLive } from "../src/PlatformRuntime.ts";
+import type { PgPlatformConfig } from "../src/Postgres.ts";
+
+const config: PgPlatformConfig = {
+  host: process.env.PLATFORM_NODE_PG_HOST ?? "127.0.0.1",
+  port: Number(process.env.PLATFORM_NODE_PG_PORT ?? "5432"),
+  database: process.env.PLATFORM_NODE_PG_DATABASE ?? "voidhash",
+  username: process.env.PLATFORM_NODE_PG_USERNAME ?? "voidhash",
+  password: Redacted.make(process.env.PLATFORM_NODE_PG_PASSWORD ?? "password"),
+};
+
+const schedulerLayer = () => Layer.merge(PgCronSchedulerLive(config), NodePlatformRuntimeLive);
+const describePg = process.env.PLATFORM_NODE_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("Postgres cron scheduler", () => {
+  it("persists schedule progress and catches up missed slots after restart", async () => {
+    const name = `cron-catch-up-${crypto.randomUUID()}`;
+    const runs: Array<CronJobContext> = [];
+    const job = {
+      name,
+      expression: "* * * * *",
+      timeZone: "UTC",
+      run: (context: CronJobContext) =>
+        Effect.sync(() => {
+          runs.push(context);
+        }),
+    };
+    const initialTime = new Date("2026-07-10T12:00:30.000Z");
+
+    const initialized = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        return yield* scheduler.tick(job, initialTime);
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+    expect(initialized).toBe(false);
+
+    const first = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        return yield* scheduler.tick(job, new Date("2026-07-10T12:01:00.000Z"));
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+    expect(first).toBe(true);
+
+    const catchUp = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        return yield* Effect.all([
+          scheduler.tick(job, new Date("2026-07-10T12:03:30.000Z")),
+          scheduler.tick(job, new Date("2026-07-10T12:03:30.000Z")),
+          scheduler.tick(job, new Date("2026-07-10T12:03:30.000Z")),
+        ]);
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+
+    expect(catchUp).toEqual([true, true, false]);
+    expect(runs).toEqual([
+      { scheduledTime: new Date("2026-07-10T12:01:00.000Z"), catchUp: false },
+      { scheduledTime: new Date("2026-07-10T12:02:00.000Z"), catchUp: true },
+      { scheduledTime: new Date("2026-07-10T12:03:00.000Z"), catchUp: true },
+    ]);
+  });
+
+  it("leases one schedule slot across concurrent ticks", async () => {
+    const name = `cron-concurrent-${crypto.randomUUID()}`;
+    let runCount = 0;
+    const job = {
+      name,
+      expression: "* * * * *",
+      timeZone: "UTC",
+      run: () =>
+        Effect.sync(() => {
+          runCount += 1;
+        }).pipe(Effect.andThen(Effect.sleep("30 millis"))),
+    };
+
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        yield* scheduler.tick(job, new Date("2026-07-10T12:00:30.000Z"));
+        return yield* Effect.all(
+          [
+            scheduler.tick(job, new Date("2026-07-10T12:01:00.000Z")),
+            scheduler.tick(job, new Date("2026-07-10T12:01:00.000Z")),
+          ],
+          { concurrency: "unbounded" },
+        );
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+
+    expect([...result].sort()).toEqual([false, true]);
+    expect(runCount).toBe(1);
+  });
+
+  it("releases a failed slot so the same scheduled run can retry", async () => {
+    const name = `cron-retry-${crypto.randomUUID()}`;
+    const initialTime = new Date("2026-07-10T12:00:30.000Z");
+    const dueTime = new Date("2026-07-10T12:01:00.000Z");
+
+    const failure = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        const failingJob = {
+          name,
+          expression: "* * * * *",
+          timeZone: "UTC",
+          run: () => Effect.fail("job failed"),
+        };
+        yield* scheduler.tick(failingJob, initialTime);
+        return yield* scheduler.tick(failingJob, dueTime).pipe(Effect.flip);
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+
+    expect(failure).toBeInstanceOf(CronSchedulerError);
+    expect(failure.operation).toBe("run");
+
+    const retried: Array<Date> = [];
+    const success = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        return yield* scheduler.tick(
+          {
+            name,
+            expression: "* * * * *",
+            timeZone: "UTC",
+            run: ({ scheduledTime }) =>
+              Effect.sync(() => {
+                retried.push(scheduledTime);
+              }),
+          },
+          dueTime,
+        );
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+
+    expect(success).toBe(true);
+    expect(retried).toEqual([dueTime]);
+  });
+
+  it("rejects an invalid expression through the stable error channel", async () => {
+    const error = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        return yield* scheduler
+          .tick({
+            name: `cron-invalid-${crypto.randomUUID()}`,
+            expression: "not a cron",
+            run: () => Effect.void,
+          })
+          .pipe(Effect.flip);
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+
+    expect(error).toBeInstanceOf(CronSchedulerError);
+    expect(error.operation).toBe("parse");
+  });
+
+  it("resets future scheduling when a job definition changes", async () => {
+    const name = `cron-definition-${crypto.randomUUID()}`;
+    const runs: Array<Date> = [];
+
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const scheduler = yield* CronScheduler;
+        yield* scheduler.tick(
+          {
+            name,
+            expression: "* * * * *",
+            timeZone: "UTC",
+            run: () => Effect.void,
+          },
+          new Date("2026-07-10T12:00:30.000Z"),
+        );
+        const oldSlot = yield* scheduler.tick(
+          {
+            name,
+            expression: "0 * * * *",
+            timeZone: "UTC",
+            run: ({ scheduledTime }) =>
+              Effect.sync(() => {
+                runs.push(scheduledTime);
+              }),
+          },
+          new Date("2026-07-10T12:01:00.000Z"),
+        );
+        const newSlot = yield* scheduler.tick(
+          {
+            name,
+            expression: "0 * * * *",
+            timeZone: "UTC",
+            run: ({ scheduledTime }) =>
+              Effect.sync(() => {
+                runs.push(scheduledTime);
+              }),
+          },
+          new Date("2026-07-10T13:00:00.000Z"),
+        );
+        return { oldSlot, newSlot };
+      }).pipe(Effect.provide(schedulerLayer())),
+    );
+
+    expect(result).toEqual({ oldSlot: false, newSlot: true });
+    expect(runs).toEqual([new Date("2026-07-10T13:00:00.000Z")]);
+  });
+});
diff --git a/selfhost/platform-node/tests/PgDurableEntity.integration.test.ts b/selfhost/platform-node/tests/PgDurableEntity.integration.test.ts
new file mode 100644
index 000000000..2454959aa
--- /dev/null
+++ b/selfhost/platform-node/tests/PgDurableEntity.integration.test.ts
@@ -0,0 +1,127 @@
+import {
+  DurableEntityHost,
+  makeDurableEntityAddress,
+} from "@voidhash/platform/DurableEntity";
+import { Effect, Redacted } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  NodeDurableEntityControl,
+  PgDurableEntityHostLive,
+  type PgDurableEntityConfig,
+} from "../src/DurableEntity.ts";
+
+const config: PgDurableEntityConfig = {
+  host: process.env.PLATFORM_NODE_PG_HOST ?? "127.0.0.1",
+  port: Number(process.env.PLATFORM_NODE_PG_PORT ?? "5432"),
+  database: process.env.PLATFORM_NODE_PG_DATABASE ?? "voidhash",
+  username: process.env.PLATFORM_NODE_PG_USERNAME ?? "voidhash",
+  password: Redacted.make(process.env.PLATFORM_NODE_PG_PASSWORD ?? "password"),
+};
+
+const describePg = process.env.PLATFORM_NODE_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("Postgres durable entity host", () => {
+  it("boots concurrent host layers without racing the schema migration", async () => {
+    const addresses = [
+      makeDurableEntityAddress("integration", crypto.randomUUID()),
+      makeDurableEntityAddress("integration", crypto.randomUUID()),
+    ] as const;
+
+    await Effect.runPromise(
+      Effect.all(
+        addresses.map((address) =>
+          Effect.gen(function* () {
+            const host = yield* DurableEntityHost;
+            yield* host.run(address, (entity) => entity.keyValue.put("booted", true));
+          }).pipe(Effect.provide(PgDurableEntityHostLive(config))),
+        ),
+        { concurrency: "unbounded" },
+      ),
+    );
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const host = yield* DurableEntityHost;
+        yield* Effect.forEach(
+          addresses,
+          (address) => host.run(address, (entity) => entity.keyValue.delete("booted")),
+          { discard: true },
+        );
+      }).pipe(Effect.provide(PgDurableEntityHostLive(config))),
+    );
+  });
+
+  it("persists KV, entity-local SQL, and alarms across layer restarts", async () => {
+    const address = makeDurableEntityAddress("integration", crypto.randomUUID());
+    const otherAddress = makeDurableEntityAddress("integration", crypto.randomUUID());
+    const scheduledTime = Date.now() - 1;
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const host = yield* DurableEntityHost;
+        yield* host.run(address, (entity) =>
+          Effect.gen(function* () {
+            yield* entity.keyValue.put("profile", { name: "node" });
+            yield* entity.keyValue.put("label", "node-string");
+            yield* entity.alarm.set(scheduledTime);
+            yield* entity.sql!.execute("CREATE TABLE counter (value INTEGER NOT NULL)");
+            yield* entity.sql!.execute("INSERT INTO counter (value) VALUES ($1)", [7]);
+          }),
+        );
+        yield* host.run(otherAddress, (entity) =>
+          Effect.gen(function* () {
+            yield* entity.sql!.execute("CREATE TABLE counter (value INTEGER NOT NULL)");
+            yield* entity.sql!.execute("INSERT INTO counter (value) VALUES ($1)", [9]);
+          }),
+        );
+      }).pipe(Effect.provide(PgDurableEntityHostLive(config))),
+    );
+
+    const restored = await Effect.runPromise(
+      Effect.gen(function* () {
+        const host = yield* DurableEntityHost;
+        const control = yield* NodeDurableEntityControl;
+        const state = yield* host.run(address, (entity) =>
+          Effect.all({
+            profile: entity.keyValue.get("profile"),
+            label: entity.keyValue.get("label"),
+            alarm: entity.alarm.get,
+            rows: entity.sql!.execute<{ readonly value: number }>(
+              "SELECT value FROM counter",
+            ),
+          }),
+        );
+        const otherRows = yield* host.run(otherAddress, (entity) =>
+          entity.sql!.execute<{ readonly value: number }>("SELECT value FROM counter"),
+        );
+        const due = yield* control.listDueAlarms(Date.now(), 100);
+        return { state, otherRows, due };
+      }).pipe(Effect.provide(PgDurableEntityHostLive(config))),
+    );
+
+    expect(restored.state).toEqual({
+      profile: { name: "node" },
+      label: "node-string",
+      alarm: scheduledTime,
+      rows: [{ value: 7 }],
+    });
+    expect(restored.otherRows).toEqual([{ value: 9 }]);
+    expect(restored.due).toContainEqual({ address, scheduledTime });
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const host = yield* DurableEntityHost;
+        yield* host.run(address, (entity) =>
+          Effect.gen(function* () {
+            yield* entity.keyValue.delete("profile");
+            yield* entity.keyValue.delete("label");
+            yield* entity.alarm.delete;
+            yield* entity.sql!.execute("DROP TABLE counter");
+          }),
+        );
+        yield* host.run(otherAddress, (entity) => entity.sql!.execute("DROP TABLE counter"));
+      }).pipe(Effect.provide(PgDurableEntityHostLive(config))),
+    );
+  });
+});
diff --git a/selfhost/platform-node/tests/PgKeyValueStore.integration.test.ts b/selfhost/platform-node/tests/PgKeyValueStore.integration.test.ts
new file mode 100644
index 000000000..df189d153
--- /dev/null
+++ b/selfhost/platform-node/tests/PgKeyValueStore.integration.test.ts
@@ -0,0 +1,140 @@
+import { KeyValueStore, KeyValueStoreError } from "@voidhash/platform/KeyValueStore";
+import { Effect, Layer, Option, Redacted, Schema } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { PgKeyValueStoreLive } from "../src/KeyValueStore.ts";
+import { NodePlatformRuntimeLive } from "../src/PlatformRuntime.ts";
+import type { PgPlatformConfig } from "../src/Postgres.ts";
+
+const config: PgPlatformConfig = {
+  host: process.env.PLATFORM_NODE_PG_HOST ?? "127.0.0.1",
+  port: Number(process.env.PLATFORM_NODE_PG_PORT ?? "5432"),
+  database: process.env.PLATFORM_NODE_PG_DATABASE ?? "voidhash",
+  username: process.env.PLATFORM_NODE_PG_USERNAME ?? "voidhash",
+  password: Redacted.make(process.env.PLATFORM_NODE_PG_PASSWORD ?? "password"),
+};
+
+const storeLayer = () => Layer.merge(PgKeyValueStoreLive(config), NodePlatformRuntimeLive);
+const describePg = process.env.PLATFORM_NODE_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("Postgres key-value store", () => {
+  it("persists typed object and string values across layer restarts", async () => {
+    const namespace = `kv-persistence-${crypto.randomUUID()}`;
+    const profileSchema = Schema.Struct({ name: Schema.String, version: Schema.Number });
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* KeyValueStore;
+        yield* store.put(
+          namespace,
+          "profile",
+          { name: "node", version: 1 },
+          profileSchema,
+        );
+        yield* store.put(namespace, "label", "node-string", Schema.String);
+      }).pipe(Effect.provide(storeLayer())),
+    );
+
+    const restored = await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* KeyValueStore;
+        const values = yield* Effect.all({
+          profile: store.get(namespace, "profile", profileSchema),
+          label: store.get(namespace, "label", Schema.String),
+        });
+        yield* store.deleteMany(namespace, ["profile", "label"]);
+        return values;
+      }).pipe(Effect.provide(storeLayer())),
+    );
+
+    expect(Option.getOrThrow(restored.profile)).toEqual({ name: "node", version: 1 });
+    expect(Option.getOrThrow(restored.label)).toBe("node-string");
+  });
+
+  it("supports bulk existence checks and expiry pruning", async () => {
+    const namespace = `kv-expiry-${crypto.randomUUID()}`;
+
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* KeyValueStore;
+        yield* store.putMany(
+          namespace,
+          [
+            { key: "one", value: 1 },
+            { key: "two", value: 2 },
+            { key: "three", value: 3 },
+          ],
+          Schema.Number,
+          { ttlMillis: 20 },
+        );
+        const before = yield* store.existingKeys(namespace, ["one", "two", "three", "missing"]);
+        yield* Effect.sleep("40 millis");
+        const after = yield* store.existingKeys(namespace, ["one", "two", "three"]);
+        const pruned = yield* store.pruneExpired(10_000);
+        return { before, after, pruned };
+      }).pipe(Effect.provide(storeLayer())),
+    );
+
+    expect(result.before).toEqual(new Set(["one", "two", "three"]));
+    expect(result.after.size).toBe(0);
+    expect(result.pruned).toBeGreaterThanOrEqual(3);
+  });
+
+  it("increments counters atomically under concurrency", async () => {
+    const namespace = `kv-counter-${crypto.randomUUID()}`;
+    const key = "requests";
+
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* KeyValueStore;
+        const increments = yield* Effect.all(
+          Array.from({ length: 50 }, () => store.increment(namespace, key)),
+          { concurrency: "unbounded" },
+        );
+        const stored = yield* store.get(namespace, key, Schema.Number);
+        yield* store.delete(namespace, key);
+        return { increments, stored };
+      }).pipe(Effect.provide(storeLayer())),
+    );
+
+    expect([...result.increments].sort((left, right) => left - right)).toEqual(
+      Array.from({ length: 50 }, (_, index) => index + 1),
+    );
+    expect(Option.getOrThrow(result.stored)).toBe(50);
+  });
+
+  it("restarts an expired counter at one", async () => {
+    const namespace = `kv-counter-expiry-${crypto.randomUUID()}`;
+    const key = "events";
+
+    const values = await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* KeyValueStore;
+        const first = yield* store.increment(namespace, key, { ttlMillis: 20 });
+        yield* Effect.sleep("40 millis");
+        const reset = yield* store.increment(namespace, key, { ttlMillis: 20 });
+        yield* store.delete(namespace, key);
+        return { first, reset };
+      }).pipe(Effect.provide(storeLayer())),
+    );
+
+    expect(values).toEqual({ first: 1, reset: 1 });
+  });
+
+  it("maps schema mismatches to the stable store error", async () => {
+    const namespace = `kv-schema-${crypto.randomUUID()}`;
+
+    const error = await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* KeyValueStore;
+        yield* store.put(namespace, "value", "text", Schema.String);
+        const failure = yield* store.get(namespace, "value", Schema.Number).pipe(Effect.flip);
+        yield* store.delete(namespace, "value");
+        return failure;
+      }).pipe(Effect.provide(storeLayer())),
+    );
+
+    expect(error).toBeInstanceOf(KeyValueStoreError);
+    expect(error.operation).toBe("get");
+  });
+});
diff --git a/selfhost/platform-node/tests/PgQueue.integration.test.ts b/selfhost/platform-node/tests/PgQueue.integration.test.ts
new file mode 100644
index 000000000..b29166915
--- /dev/null
+++ b/selfhost/platform-node/tests/PgQueue.integration.test.ts
@@ -0,0 +1,200 @@
+import { QueueDriver } from "@voidhash/platform/Queue";
+import { Deferred, Effect, Fiber, Layer, Option, Redacted, Schema } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { NodePlatformRuntimeLive } from "../src/PlatformRuntime.ts";
+import type { PgPlatformConfig } from "../src/Postgres.ts";
+import { PgQueueLive } from "../src/Queue.ts";
+
+const config: PgPlatformConfig = {
+  host: process.env.PLATFORM_NODE_PG_HOST ?? "127.0.0.1",
+  port: Number(process.env.PLATFORM_NODE_PG_PORT ?? "5432"),
+  database: process.env.PLATFORM_NODE_PG_DATABASE ?? "voidhash",
+  username: process.env.PLATFORM_NODE_PG_USERNAME ?? "voidhash",
+  password: Redacted.make(process.env.PLATFORM_NODE_PG_PASSWORD ?? "password"),
+};
+
+const messageSchema = Schema.Struct({ sequence: Schema.Number });
+const queueLayer = () => Layer.merge(PgQueueLive(config), NodePlatformRuntimeLive);
+const describePg = process.env.PLATFORM_NODE_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("Postgres queue driver", () => {
+  it("persists FIFO messages across layer restarts", async () => {
+    const queueName = `queue-persistence-${crypto.randomUUID()}`;
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const queues = yield* QueueDriver;
+        yield* queues.producer(queueName, messageSchema).publishBatch([
+          { sequence: 1 },
+          { sequence: 2 },
+          { sequence: 3 },
+        ]);
+      }).pipe(Effect.provide(queueLayer())),
+    );
+
+    const messages: Array<number> = [];
+    const processed = await Effect.runPromise(
+      Effect.gen(function* () {
+        const queues = yield* QueueDriver;
+        return yield* queues.processBatch(
+          queueName,
+          messageSchema,
+          (batch) =>
+            Effect.sync(() => {
+              messages.push(...batch.map(({ sequence }) => sequence));
+            }),
+          { batchSize: 10 },
+        );
+      }).pipe(Effect.provide(queueLayer())),
+    );
+
+    expect(processed).toBe(3);
+    expect(messages).toEqual([1, 2, 3]);
+  });
+
+  it("retries failed deliveries before moving them to a dead-letter queue", async () => {
+    const queueName = `queue-retry-${crypto.randomUUID()}`;
+    const deadLetterQueue = `${queueName}-dlq`;
+    const options = { maxRetries: 1, retryDelayMillis: 0, deadLetterQueue } as const;
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const queues = yield* QueueDriver;
+        yield* queues.producer(queueName, messageSchema).publish({ sequence: 7 });
+        yield* queues.processBatch(
+          queueName,
+          messageSchema,
+          () => Effect.fail("first failure"),
+          options,
+        );
+        yield* queues.processBatch(
+          queueName,
+          messageSchema,
+          () => Effect.fail("second failure"),
+          options,
+        );
+      }).pipe(Effect.provide(queueLayer())),
+    );
+
+    const deadLetters: Array<number> = [];
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const queues = yield* QueueDriver;
+        const originalCount = yield* queues.processBatch(
+          queueName,
+          messageSchema,
+          () => Effect.void,
+          options,
+        );
+        const deadLetterCount = yield* queues.processBatch(
+          deadLetterQueue,
+          messageSchema,
+          (batch) =>
+            Effect.sync(() => {
+              deadLetters.push(...batch.map(({ sequence }) => sequence));
+            }),
+        );
+        return { originalCount, deadLetterCount };
+      }).pipe(Effect.provide(queueLayer())),
+    );
+
+    expect(result).toEqual({ originalCount: 0, deadLetterCount: 1 });
+    expect(deadLetters).toEqual([7]);
+  });
+
+  it("acks poison messages without invoking the handler", async () => {
+    const queueName = `queue-poison-${crypto.randomUUID()}`;
+    let handled = false;
+
+    const counts = await Effect.runPromise(
+      Effect.gen(function* () {
+        const queues = yield* QueueDriver;
+        yield* queues.producer(queueName, Schema.Unknown).publish("not-a-message");
+        const first = yield* queues.processBatch(queueName, messageSchema, () =>
+          Effect.sync(() => {
+            handled = true;
+          }),
+        );
+        const second = yield* queues.processBatch(queueName, messageSchema, () => Effect.void);
+        return [first, second] as const;
+      }).pipe(Effect.provide(queueLayer())),
+    );
+
+    expect(counts).toEqual([1, 0]);
+    expect(handled).toBe(false);
+  });
+
+  it("claims each message at most once across concurrent consumers", async () => {
+    const queueName = `queue-concurrency-${crypto.randomUUID()}`;
+    const messages = Array.from({ length: 40 }, (_, sequence) => ({ sequence }));
+    const handled: Array<number> = [];
+
+    const counts = await Effect.runPromise(
+      Effect.gen(function* () {
+        const queues = yield* QueueDriver;
+        yield* queues.producer(queueName, messageSchema).publishBatch(messages);
+        return yield* Effect.all(
+          [
+            queues.processBatch(
+              queueName,
+              messageSchema,
+              (batch) =>
+                Effect.sync(() => {
+                  handled.push(...batch.map(({ sequence }) => sequence));
+                }),
+              { batchSize: 40 },
+            ),
+            queues.processBatch(
+              queueName,
+              messageSchema,
+              (batch) =>
+                Effect.sync(() => {
+                  handled.push(...batch.map(({ sequence }) => sequence));
+                }),
+              { batchSize: 40 },
+            ),
+          ],
+          { concurrency: "unbounded" },
+        );
+      }).pipe(Effect.provide(queueLayer())),
+    );
+
+    expect(counts[0] + counts[1]).toBe(40);
+    expect([...handled].sort((left, right) => left - right)).toEqual(
+      messages.map(({ sequence }) => sequence),
+    );
+    expect(new Set(handled).size).toBe(40);
+  });
+
+  it("runs a polling consumer until its scope closes", async () => {
+    const queueName = `queue-poll-${crypto.randomUUID()}`;
+    const delivered = Deferred.makeUnsafe<ReadonlyArray<{ readonly sequence: number }>>();
+
+    const received = await Effect.runPromise(
+      Effect.gen(function* () {
+        const queues = yield* QueueDriver;
+        const consumer = yield* Effect.forkChild(
+          queues.consumeBatch(
+            queueName,
+            messageSchema,
+            (batch): Effect.Effect<void> =>
+              Deferred.succeed(delivered, batch).pipe(Effect.asVoid),
+            { pollIntervalMillis: 5 },
+          ),
+        );
+        yield* Effect.yieldNow;
+        yield* queues.producer(queueName, messageSchema).publish({ sequence: 42 });
+        const result = yield* Deferred.await(delivered).pipe(Effect.timeoutOption("2 seconds"));
+        const consumerExit = Option.fromNullishOr(consumer.pollUnsafe());
+        yield* Fiber.interrupt(consumer);
+        if (Option.isNone(result) && Option.isSome(consumerExit)) {
+          throw new Error(`Polling consumer exited before delivery: ${String(consumerExit.value)}`);
+        }
+        return result;
+      }).pipe(Effect.provide(queueLayer())),
+    );
+
+    expect(Option.getOrThrow(received)).toEqual([{ sequence: 42 }]);
+  });
+});
diff --git a/selfhost/platform-node/tests/PgWorkflowRunner.integration.test.ts b/selfhost/platform-node/tests/PgWorkflowRunner.integration.test.ts
new file mode 100644
index 000000000..bc18cda0f
--- /dev/null
+++ b/selfhost/platform-node/tests/PgWorkflowRunner.integration.test.ts
@@ -0,0 +1,217 @@
+import {
+  defineWorkflow,
+  type WorkflowDefinition,
+  type WorkflowExecutionResult,
+  type WorkflowHandlerContext,
+  WorkflowRunner,
+  WorkflowRunnerError,
+} from "@voidhash/platform/Workflow";
+import { Effect, Layer, Option, Redacted, Schema } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { NodePlatformRuntimeLive } from "../src/PlatformRuntime.ts";
+import type { PgPlatformConfig } from "../src/Postgres.ts";
+import { PgWorkflowRunnerLive } from "../src/Workflow.ts";
+
+const config: PgPlatformConfig = {
+  host: process.env.PLATFORM_NODE_PG_HOST ?? "127.0.0.1",
+  port: Number(process.env.PLATFORM_NODE_PG_PORT ?? "5432"),
+  database: process.env.PLATFORM_NODE_PG_DATABASE ?? "voidhash",
+  username: process.env.PLATFORM_NODE_PG_USERNAME ?? "voidhash",
+  password: Redacted.make(process.env.PLATFORM_NODE_PG_PASSWORD ?? "password"),
+};
+
+const runnerLayer = () => Layer.merge(PgWorkflowRunnerLive(config), NodePlatformRuntimeLive);
+const describePg = process.env.PLATFORM_NODE_PG_TEST === "1" ? describe : describe.skip;
+
+const awaitResult = <
+  Name extends string,
+  Payload extends Schema.Struct.Fields,
+  Success extends Schema.Top,
+>(
+  runner: WorkflowRunner["Service"],
+  workflow: WorkflowDefinition<Name, Payload, Success>,
+  executionId: string,
+  predicate: (result: WorkflowExecutionResult<Success["Type"]>) => boolean,
+) =>
+  Effect.gen(function* () {
+    const deadline = Date.now() + 5_000;
+    while (Date.now() < deadline) {
+      const result = yield* runner.poll(workflow, executionId);
+      if (Option.isSome(result) && predicate(result.value)) {
+        return result.value;
+      }
+      yield* Effect.sleep("20 millis");
+    }
+    return yield* Effect.die("workflow result timed out");
+  });
+
+describePg("Postgres workflow runner", () => {
+  it("replays completed steps and resumes a durable clock after restart", async () => {
+    const name = `workflow-restart-${crypto.randomUUID()}`;
+    const workflow = defineWorkflow({
+      name,
+      payload: { value: Schema.Number },
+      success: Schema.Number,
+      idempotencyKey: ({ value }) => String(value),
+    });
+    let firstStepRuns = 0;
+    let secondStepRuns = 0;
+    const wakeAt = new Date(Date.now() + 300);
+    const handler = (payload: { readonly value: number }, context: WorkflowHandlerContext) =>
+      Effect.gen(function* () {
+        const first = yield* context.step({
+          name: "first",
+          success: Schema.Number,
+          execute: Effect.sync(() => {
+            firstStepRuns += 1;
+            return payload.value + 1;
+          }),
+        });
+        yield* context.sleepUntil("restart-clock", wakeAt);
+        return yield* context.step({
+          name: "second",
+          success: Schema.Number,
+          execute: Effect.sync(() => {
+            secondStepRuns += 1;
+            return first + 1;
+          }),
+        });
+      });
+
+    const executionId = await Effect.runPromise(
+      Effect.scoped(
+        Effect.gen(function* () {
+          const runner = yield* WorkflowRunner;
+          yield* runner.register(workflow, handler);
+          const id = yield* runner.dispatch(workflow, { value: 40 });
+          yield* awaitResult(
+            runner,
+            workflow,
+            id,
+            (result) => result.status === "suspended",
+          );
+          return id;
+        }).pipe(Effect.provide(runnerLayer())),
+      ),
+    );
+
+    await new Promise((resolve) => setTimeout(resolve, 350));
+
+    const value = await Effect.runPromise(
+      Effect.scoped(
+        Effect.gen(function* () {
+          const runner = yield* WorkflowRunner;
+          yield* runner.register(workflow, handler);
+          return yield* runner.execute(workflow, { value: 40 });
+        }).pipe(Effect.provide(runnerLayer())),
+      ),
+    );
+
+    expect(executionId).toBeTypeOf("string");
+    expect(value).toBe(42);
+    expect(firstStepRuns).toBe(1);
+    expect(secondStepRuns).toBe(1);
+  });
+
+  it("deduplicates concurrent executions and reuses the persisted result", async () => {
+    const workflow = defineWorkflow({
+      name: `workflow-concurrent-${crypto.randomUUID()}`,
+      payload: { value: Schema.Number },
+      success: Schema.Number,
+      idempotencyKey: ({ value }) => String(value),
+    });
+    let runs = 0;
+
+    const execute = () =>
+      Effect.scoped(
+        Effect.gen(function* () {
+          const runner = yield* WorkflowRunner;
+          yield* runner.register(workflow, (payload, context) =>
+            context.step({
+              name: "only-step",
+              success: Schema.Number,
+              execute: Effect.sync(() => {
+                runs += 1;
+                return payload.value * 2;
+              }).pipe(Effect.andThen(Effect.sleep("30 millis")), Effect.as(payload.value * 2)),
+            }),
+          );
+          return yield* runner.execute(workflow, { value: 21 });
+        }).pipe(Effect.provide(runnerLayer())),
+      );
+
+    const values = await Effect.runPromise(
+      Effect.all([execute(), execute()], { concurrency: "unbounded" }),
+    );
+
+    expect(values).toEqual([42, 42]);
+    expect(runs).toBe(1);
+  });
+
+  it("persists a failed step through the stable workflow error channel", async () => {
+    const workflow = defineWorkflow({
+      name: `workflow-failure-${crypto.randomUUID()}`,
+      payload: { value: Schema.Number },
+      success: Schema.Number,
+      idempotencyKey: ({ value }) => String(value),
+    });
+
+    const error = await Effect.runPromise(
+      Effect.scoped(
+        Effect.gen(function* () {
+          const runner = yield* WorkflowRunner;
+          yield* runner.register(workflow, (_payload, context) =>
+            context.step({
+              name: "failing-step",
+              success: Schema.Number,
+              execute: Effect.fail("expected failure"),
+            }),
+          );
+          return yield* runner.execute(workflow, { value: 1 }).pipe(Effect.flip);
+        }).pipe(Effect.provide(runnerLayer())),
+      ),
+    );
+
+    expect(error).toBeInstanceOf(WorkflowRunnerError);
+    expect(error.operation).toBe("step:failing-step");
+  });
+
+  it("persists interruption of a suspended execution", async () => {
+    const workflow = defineWorkflow({
+      name: `workflow-interrupt-${crypto.randomUUID()}`,
+      payload: { value: Schema.Number },
+      success: Schema.Number,
+      idempotencyKey: ({ value }) => String(value),
+    });
+
+    const result = await Effect.runPromise(
+      Effect.scoped(
+        Effect.gen(function* () {
+          const runner = yield* WorkflowRunner;
+          yield* runner.register(workflow, (payload, context) =>
+            context
+              .sleepUntil("long-clock", new Date(Date.now() + 60_000))
+              .pipe(Effect.as(payload.value)),
+          );
+          const executionId = yield* runner.dispatch(workflow, { value: 1 });
+          yield* awaitResult(
+            runner,
+            workflow,
+            executionId,
+            (state) => state.status === "suspended",
+          );
+          yield* runner.interrupt(workflow, executionId);
+          return yield* awaitResult(
+            runner,
+            workflow,
+            executionId,
+            (state) => state.status === "interrupted",
+          );
+        }).pipe(Effect.provide(runnerLayer())),
+      ),
+    );
+
+    expect(result).toEqual({ status: "interrupted" });
+  });
+});
diff --git a/selfhost/platform-node/tests/S3ObjectStore.integration.test.ts b/selfhost/platform-node/tests/S3ObjectStore.integration.test.ts
new file mode 100644
index 000000000..c47a118b9
--- /dev/null
+++ b/selfhost/platform-node/tests/S3ObjectStore.integration.test.ts
@@ -0,0 +1,83 @@
+import { ObjectStore, ObjectStoreError } from "@voidhash/platform/ObjectStore";
+import { Effect, Layer, Option, Redacted } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { S3ObjectStoreLive, type S3ObjectStoreConfig } from "../src/ObjectStore.ts";
+import { NodePlatformRuntimeLive } from "../src/PlatformRuntime.ts";
+
+const config: S3ObjectStoreConfig = {
+  bucketName: process.env.PLATFORM_NODE_S3_BUCKET ?? "voidhash-public",
+  region: process.env.PLATFORM_NODE_S3_REGION ?? "us-east-1",
+  endpoint: process.env.PLATFORM_NODE_S3_ENDPOINT ?? "http://127.0.0.1:9000",
+  accessKeyId: process.env.PLATFORM_NODE_S3_ACCESS_KEY_ID ?? "voidhash",
+  secretAccessKey: Redacted.make(
+    process.env.PLATFORM_NODE_S3_SECRET_ACCESS_KEY ?? "password",
+  ),
+  forcePathStyle: true,
+};
+
+const storeLayer = (input: S3ObjectStoreConfig = config) =>
+  Layer.merge(S3ObjectStoreLive(input), NodePlatformRuntimeLive);
+const describeS3 = process.env.PLATFORM_NODE_S3_TEST === "1" ? describe : describe.skip;
+
+describeS3("S3-compatible object store", () => {
+  it("writes, reads, heads, overwrites, and deletes objects", async () => {
+    const key = `tests/${crypto.randomUUID()}.txt`;
+    const initial = new TextEncoder().encode("first value");
+    const replacement = new TextEncoder().encode("replacement value");
+
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* ObjectStore;
+        const missing = yield* store.get(key);
+        yield* store.put({ key, body: initial, contentType: "text/plain" });
+        const stored = yield* store.get(key);
+        const head = yield* store.head(key);
+        yield* store.put({ key, body: replacement, contentType: "text/custom" });
+        const overwritten = yield* store.get(key);
+        yield* store.delete(key);
+        yield* store.delete(key);
+        const deleted = yield* store.head(key);
+        return { missing, stored, head, overwritten, deleted };
+      }).pipe(Effect.provide(storeLayer())),
+    );
+
+    expect(Option.isNone(result.missing)).toBe(true);
+    expect(Option.getOrThrow(result.stored)).toMatchObject({
+      body: initial,
+      contentType: "text/plain",
+      size: initial.byteLength,
+    });
+    expect(Option.getOrThrow(result.head)).toMatchObject({
+      contentType: "text/plain",
+      size: initial.byteLength,
+    });
+    expect(Option.getOrThrow(result.overwritten)).toMatchObject({
+      body: replacement,
+      contentType: "text/custom",
+      size: replacement.byteLength,
+    });
+    expect(Option.isNone(result.deleted)).toBe(true);
+  });
+
+  it("maps bucket failures to the stable object-store error", async () => {
+    const missingBucket = `${config.bucketName}-missing-${crypto.randomUUID()}`;
+    const error = await Effect.runPromise(
+      Effect.gen(function* () {
+        const store = yield* ObjectStore;
+        return yield* store.get("missing").pipe(Effect.flip);
+      }).pipe(
+        Effect.provide(
+          storeLayer({
+            ...config,
+            bucketName: missingBucket,
+          }),
+        ),
+      ),
+    );
+
+    expect(error).toBeInstanceOf(ObjectStoreError);
+    expect(error.bucketName).toBe(missingBucket);
+    expect(error.operation).toBe("get");
+  });
+});
diff --git a/selfhost/platform-node/tests/SmtpMailer.integration.test.ts b/selfhost/platform-node/tests/SmtpMailer.integration.test.ts
new file mode 100644
index 000000000..132270f12
--- /dev/null
+++ b/selfhost/platform-node/tests/SmtpMailer.integration.test.ts
@@ -0,0 +1,134 @@
+import { Mailer, MailerError } from "@voidhash/platform/Mailer";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { SmtpMailerLive, type SmtpMailerConfig } from "../src/Mailer.ts";
+import { NodePlatformRuntimeLive } from "../src/PlatformRuntime.ts";
+
+const config: SmtpMailerConfig = {
+  host: process.env.PLATFORM_NODE_SMTP_HOST ?? "127.0.0.1",
+  port: Number(process.env.PLATFORM_NODE_SMTP_PORT ?? "1025"),
+  defaultFrom: { address: "noreply@voidhash.local", name: "Voidhash" },
+  verifyOnStart: true,
+};
+
+const mailerLayer = (input: SmtpMailerConfig = config) =>
+  Layer.merge(SmtpMailerLive(input), NodePlatformRuntimeLive);
+const describeSmtp = process.env.PLATFORM_NODE_SMTP_TEST === "1" ? describe : describe.skip;
+const mailpitApi = process.env.PLATFORM_NODE_MAILPIT_API ?? "http://127.0.0.1:8025";
+
+interface MailpitMessageSummary {
+  readonly ID: string;
+  readonly Subject: string;
+}
+
+interface MailpitMessages {
+  readonly messages: ReadonlyArray<MailpitMessageSummary>;
+}
+
+interface MailpitMessage {
+  readonly From: { readonly Address: string };
+  readonly To: ReadonlyArray<{ readonly Address: string }>;
+  readonly ReplyTo: ReadonlyArray<{ readonly Address: string }>;
+  readonly Text: string;
+  readonly HTML: string;
+}
+
+describeSmtp("SMTP mailer", () => {
+  it("delivers structured text and HTML through SMTP", async () => {
+    const subject = `SMTP integration ${crypto.randomUUID()}`;
+    const delivery = await Effect.runPromise(
+      Effect.gen(function* () {
+        const mailer = yield* Mailer;
+        return yield* mailer.send({
+          to: [{ address: "person@example.com", name: "Example Person" }],
+          replyTo: { address: "support@voidhash.local", name: "Support" },
+          subject,
+          text: "Plain body",
+          html: "<strong>HTML body</strong>",
+          headers: { "X-Voidhash-Test": "smtp" },
+        });
+      }).pipe(Effect.provide(mailerLayer())),
+    );
+
+    expect(delivery.messageId).toBeTypeOf("string");
+    expect(delivery.accepted).toContain("person@example.com");
+    expect(delivery.rejected).toEqual([]);
+
+    const messagesResponse = await fetch(`${mailpitApi}/api/v1/messages`);
+    expect(messagesResponse.ok).toBe(true);
+    const messages = (await messagesResponse.json()) as MailpitMessages;
+    const messageId = messages.messages.find((message) => message.Subject === subject)?.ID;
+    expect(messageId).toBeTypeOf("string");
+
+    const [messageResponse, headersResponse] = await Promise.all([
+      fetch(`${mailpitApi}/api/v1/message/${messageId}`),
+      fetch(`${mailpitApi}/api/v1/message/${messageId}/headers`),
+    ]);
+    expect(messageResponse.ok).toBe(true);
+    expect(headersResponse.ok).toBe(true);
+
+    const message = (await messageResponse.json()) as MailpitMessage;
+    const headers = (await headersResponse.json()) as Record<string, ReadonlyArray<string>>;
+    expect(message.From.Address).toBe("noreply@voidhash.local");
+    expect(message.To.map(({ Address }) => Address)).toEqual(["person@example.com"]);
+    expect(message.ReplyTo.map(({ Address }) => Address)).toEqual(["support@voidhash.local"]);
+    expect(message.Text).toBe("Plain body");
+    expect(message.HTML).toBe("<strong>HTML body</strong>");
+    expect(headers["X-Voidhash-Test"]).toEqual(["smtp"]);
+  });
+
+  it("validates message content through the stable error channel", async () => {
+    const error = await Effect.runPromise(
+      Effect.gen(function* () {
+        const mailer = yield* Mailer;
+        return yield* mailer
+          .send({ to: [], subject: "invalid" })
+          .pipe(Effect.flip);
+      }).pipe(Effect.provide(mailerLayer({ ...config, verifyOnStart: false }))),
+    );
+
+    expect(error).toBeInstanceOf(MailerError);
+    expect(error.operation).toBe("validate");
+  });
+
+  it("maps SMTP connection failures during startup verification", async () => {
+    const error = await Effect.runPromise(
+      Effect.gen(function* () {
+        return yield* Mailer;
+      }).pipe(
+        Effect.provide(
+          mailerLayer({
+            ...config,
+            port: 1,
+            connectionTimeoutMillis: 200,
+          }),
+        ),
+        Effect.flip,
+      ),
+    );
+
+    expect(error).toBeInstanceOf(MailerError);
+    expect(error.operation).toBe("verify");
+  });
+
+  it("rejects incomplete SMTP authentication configuration", async () => {
+    const error = await Effect.runPromise(
+      Effect.gen(function* () {
+        return yield* Mailer;
+      }).pipe(
+        Effect.provide(
+          mailerLayer({
+            ...config,
+            username: "user",
+            password: undefined,
+          }),
+        ),
+        Effect.flip,
+      ),
+    );
+
+    expect(error).toBeInstanceOf(MailerError);
+    expect(error.operation).toBe("configure");
+  });
+});
diff --git a/selfhost/platform-node/tsconfig.json b/selfhost/platform-node/tsconfig.json
new file mode 100644
index 000000000..f040f8ac8
--- /dev/null
+++ b/selfhost/platform-node/tsconfig.json
@@ -0,0 +1,12 @@
+{
+  "extends": "@voidhash/tsconfig/typescript-6.json",
+  "compilerOptions": {
+    "types": ["node"],
+    "noEmit": true,
+    "strict": true,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitOverride": true
+  },
+  "include": ["src", "tests", "vitest.mts"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/selfhost/platform-node/vitest.mts b/selfhost/platform-node/vitest.mts
new file mode 100644
index 000000000..e3ed6a26b
--- /dev/null
+++ b/selfhost/platform-node/vitest.mts
@@ -0,0 +1,10 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    include: ["./tests/**/*.test.ts"],
+    exclude: ["./node_modules/**"],
+    reporters: ["verbose"],
+  },
+});
diff --git a/selfhost/release-smoke.mts b/selfhost/release-smoke.mts
new file mode 100644
index 000000000..bcd46876c
--- /dev/null
+++ b/selfhost/release-smoke.mts
@@ -0,0 +1,404 @@
+import { execFileSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+
+import { CLICKHOUSE_EVENTS_TABLE } from "../packages/clickhouse-db/src/analytics/schema.ts";
+import {
+  createInitialPaywallDocumentInput,
+  PaywallDesignerDocument,
+} from "../packages/mimic-schema/src/index.ts";
+import { MimicSDK } from "../packages/mimic-server/src/index.ts";
+import WebSocket from "ws";
+
+const url = process.env.MIMIC_URL ?? "http://127.0.0.1:5001";
+const username = process.env.MIMIC_ROOT_USERNAME ?? "root";
+const password = process.env.MIMIC_ROOT_PASSWORD ?? "password";
+const databaseUsername = process.env.DATABASE_USERNAME ?? "voidhash";
+const databaseName = process.env.DATABASE_NAME ?? "voidhash";
+const composeFile = fileURLToPath(new URL("./docker-compose.yml", import.meta.url));
+const suffix = crypto.randomUUID();
+const projectId = `project_release_smoke_${suffix}`;
+const paywallId = suffix;
+const apiKeyId = `api_key_release_smoke_${suffix}`;
+const apiKey = `vh_pk_${suffix.replaceAll("-", "")}`;
+const locationId = `location_release_smoke_${suffix}`;
+const locationSlug = `release-smoke-${suffix}`;
+const showingId = `showing_release_smoke_${suffix}`;
+const releaseUserId = `user_release_smoke_${suffix}`;
+
+const quoteSql = (value: string): string => `'${value.replaceAll("'", "''")}'`;
+
+const runPostgres = (sql: string, tuplesOnly = false): string =>
+  execFileSync(
+    "docker",
+    [
+      "compose",
+      "-f",
+      composeFile,
+      "exec",
+      "-T",
+      "postgres",
+      "psql",
+      "-X",
+      "-v",
+      "ON_ERROR_STOP=1",
+      ...(tuplesOnly ? ["-A", "-t"] : []),
+      "-U",
+      databaseUsername,
+      "-d",
+      databaseName,
+      "-c",
+      sql,
+    ],
+    { encoding: "utf8" },
+  ).trim();
+
+interface PublishedReleaseResult {
+  readonly draft: {
+    readonly releaseId: string;
+    readonly version: number;
+  };
+  readonly published: {
+    readonly htmlUrl: string;
+    readonly releaseId: string;
+    readonly version: number;
+  };
+}
+
+const publishRelease = (): PublishedReleaseResult => {
+  const output = execFileSync(
+    "docker",
+    [
+      "compose",
+      "-f",
+      composeFile,
+      "exec",
+      "-T",
+      "-e",
+      `SELFHOST_RELEASE_PAYWALL_ID=${paywallId}`,
+      "-e",
+      `SELFHOST_RELEASE_PROJECT_ID=${projectId}`,
+      "-e",
+      `SELFHOST_RELEASE_USER_ID=${releaseUserId}`,
+      "app",
+      "./node_modules/.bin/tsx",
+      "src/release-smoke.ts",
+    ],
+    { encoding: "utf8" },
+  );
+  const prefix = "SELFHOST_RELEASE_RESULT ";
+  const resultLine = output
+    .split(/\r?\n/)
+    .find((line) => line.startsWith(prefix));
+  if (!resultLine) {
+    throw new Error(`Release publisher returned no result: ${output}`);
+  }
+  return JSON.parse(resultLine.slice(prefix.length)) as PublishedReleaseResult;
+};
+
+const resolvePaywallThroughSdk = async (): Promise<PublishedReleaseResult["published"]> => {
+  const response = await fetch(`${url}/api/v1/sdk/resolve-paywall`, {
+    body: JSON.stringify({ locationSlug }),
+    headers: {
+      "content-type": "application/json",
+      "x-client-bundle-id": "com.voidhash.selfhost-release-smoke",
+      "x-distinct-id": `person_release_smoke_${suffix}`,
+      "x-is-backgrounded": "false",
+      "x-is-debug-build": "true",
+      "x-observer-mode": "false",
+      "x-platform": "ios",
+      "x-platform-flavor": "native",
+      "x-publishable-key": apiKey,
+      "x-sdk": "react-native",
+      "x-sdk-version": "selfhost-release-smoke",
+    },
+    method: "POST",
+  });
+  const body = await response.text();
+  if (!response.ok) {
+    throw new Error(`SDK paywall resolve returned ${response.status}: ${body}`);
+  }
+  const resolved = JSON.parse(body) as {
+    readonly location?: { readonly slug?: string };
+    readonly showing?: {
+      readonly paywallRelease?: PublishedReleaseResult["published"] | null;
+    };
+  } | null;
+  const published = resolved?.showing?.paywallRelease;
+  if (resolved?.location?.slug !== locationSlug || !published) {
+    throw new Error(`SDK resolved an unexpected paywall: ${body}`);
+  }
+  return published;
+};
+
+const waitFor = async <A,>(
+  load: () => Promise<A | undefined>,
+  message: string,
+  timeoutMs = 30_000,
+): Promise<A> => {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const value = await load();
+    if (value !== undefined) return value;
+    await new Promise((resolve) => setTimeout(resolve, 250));
+  }
+  throw new Error(message);
+};
+
+const submitEdit = (
+  socketUrl: string,
+  token: string,
+  value: unknown,
+): Promise<void> =>
+  new Promise((resolve, reject) => {
+    const socket = new WebSocket(socketUrl);
+    const transactionId = `release-smoke-${crypto.randomUUID()}`;
+    const timeout = setTimeout(
+      () => reject(new Error("Timed out waiting for the paywall transaction")),
+      10_000,
+    );
+    socket.once("error", reject);
+    socket.once("open", () => socket.send(JSON.stringify({ type: "auth", token })));
+    socket.on("message", (data) => {
+      const message = JSON.parse(data.toString()) as {
+        readonly type?: string;
+        readonly version?: number;
+      };
+      if (message.type === "snapshot") {
+        socket.send(
+          JSON.stringify({
+            type: "submit",
+            transaction: {
+              id: transactionId,
+              baseVersion: message.version ?? 1,
+              commands: [{ kind: "value.set", path: [], value }],
+            },
+          }),
+        );
+      }
+      if (message.type === "transaction") {
+        clearTimeout(timeout);
+        socket.close(1000, "release smoke edit complete");
+        resolve();
+      }
+    });
+  });
+
+const countCapturedEvents = async (): Promise<number> => {
+  const clickhouseUrl = new URL(
+    process.env.CLICKHOUSE_PUBLIC_URL ??
+      `http://127.0.0.1:${process.env.CLICKHOUSE_HTTP_PORT ?? "8123"}`,
+  );
+  clickhouseUrl.searchParams.set("database", process.env.CLICKHOUSE_DATABASE ?? "voidhash");
+  const credentials = Buffer.from(
+    `${process.env.CLICKHOUSE_ADMIN_USERNAME ?? "voidhash_admin"}:${
+      process.env.CLICKHOUSE_ADMIN_PASSWORD ?? "password"
+    }`,
+  ).toString("base64");
+  const response = await fetch(clickhouseUrl, {
+    body: `SELECT count() AS total FROM ${CLICKHOUSE_EVENTS_TABLE} WHERE project_id = ${quoteSql(
+      projectId,
+    )} FORMAT JSONEachRow`,
+    headers: {
+      authorization: `Basic ${credentials}`,
+      "content-type": "text/plain",
+    },
+    method: "POST",
+  });
+  if (!response.ok) {
+    throw new Error(`ClickHouse query returned ${response.status}: ${await response.text()}`);
+  }
+  const body = (await response.text()).trim();
+  if (!body) return 0;
+  return Number((JSON.parse(body) as { readonly total: string }).total);
+};
+
+const sdk = new MimicSDK({ url, username, password });
+let paywallDocumentCreated = false;
+
+try {
+  runPostgres(`
+    INSERT INTO project (id, name, organization_id, slug)
+    VALUES (${quoteSql(projectId)}, 'Release smoke', ${quoteSql(
+      `organization_release_smoke_${suffix}`,
+    )}, ${quoteSql(`release-smoke-${suffix}`)});
+    INSERT INTO paywall (id, name, project_id, slug)
+    VALUES (${quoteSql(paywallId)}, 'Release smoke paywall', ${quoteSql(
+      projectId,
+    )}, ${quoteSql(`release-smoke-${suffix}`)});
+    INSERT INTO api_key (id, name, "end", key, prefix, is_public, project_id)
+    VALUES (${quoteSql(apiKeyId)}, 'Release smoke', ${quoteSql(
+      apiKey.slice(-4),
+    )}, ${quoteSql(apiKey)}, 'vh_pk_', true, ${quoteSql(projectId)});
+  `);
+
+  const databaseInfo = (await sdk.listDatabases()).find(
+    (database) => database.name === "voidhash",
+  );
+  const database = databaseInfo
+    ? sdk.database(databaseInfo.id, databaseInfo.name, databaseInfo.description)
+    : await sdk.createDatabase({
+        description: "Voidhash paywall documents",
+        name: "voidhash",
+      });
+  const collectionInfo = (await database.listCollections()).find(
+    (collection) => collection.name === "paywalls",
+  );
+  const collection = collectionInfo
+    ? database.collection(collectionInfo.id, PaywallDesignerDocument)
+    : await database.createCollection("paywalls", PaywallDesignerDocument);
+  const initial = createInitialPaywallDocumentInput();
+  await collection.create(initial, { id: paywallId });
+  paywallDocumentCreated = true;
+  const authentication = await collection.setupDocumentAuthentication({
+    documentId: paywallId,
+    expiresInSeconds: 60,
+    origins: [],
+    permission: "write",
+  });
+  await submitEdit(
+    authentication.url,
+    authentication.token,
+    PaywallDesignerDocument.encode([
+      {
+        ...initial[0],
+        name: "Release smoke paywall — edited live",
+      },
+    ]),
+  );
+
+  const thumbnailUrl = await waitFor(
+    async () => {
+      const value = runPostgres(
+        `SELECT thumbnail_url FROM paywall WHERE id = ${quoteSql(paywallId)};`,
+        true,
+      );
+      return value || undefined;
+    },
+    "Timed out waiting for the paywall thumbnail",
+    45_000,
+  );
+  const thumbnail = await fetch(thumbnailUrl);
+  if (!thumbnail.ok) {
+    throw new Error(`Paywall thumbnail returned ${thumbnail.status}`);
+  }
+  if (thumbnail.headers.get("content-type") !== "image/png") {
+    throw new Error(`Unexpected thumbnail content type: ${thumbnail.headers.get("content-type")}`);
+  }
+  const png = new Uint8Array(await thumbnail.arrayBuffer());
+  if (
+    png.length < 8 ||
+    ![137, 80, 78, 71, 13, 10, 26, 10].every((byte, index) => png[index] === byte)
+  ) {
+    throw new Error("Paywall thumbnail is not a PNG");
+  }
+
+  const release = publishRelease();
+  if (
+    release.draft.releaseId === release.published.releaseId ||
+    release.draft.version !== 1 ||
+    release.published.version !== 1
+  ) {
+    throw new Error(`Unexpected release result: ${JSON.stringify(release)}`);
+  }
+  runPostgres(`
+    INSERT INTO paywall_location (id, project_id, slug, name)
+    VALUES (${quoteSql(locationId)}, ${quoteSql(projectId)}, ${quoteSql(
+      locationSlug,
+    )}, 'Release smoke location');
+    INSERT INTO paywall_location_showing (
+      id, project_id, paywall_location_id, type, paywall_id,
+      paywall_release_id, started_at, created_by_user_id
+    ) VALUES (
+      ${quoteSql(showingId)}, ${quoteSql(projectId)}, ${quoteSql(locationId)}, 1,
+      ${quoteSql(paywallId)}, ${quoteSql(release.published.releaseId)}, NOW(),
+      ${quoteSql(releaseUserId)}
+    );
+  `);
+  const sdkRelease = await resolvePaywallThroughSdk();
+  if (
+    sdkRelease.releaseId !== release.published.releaseId ||
+    sdkRelease.htmlUrl !== release.published.htmlUrl ||
+    sdkRelease.version !== release.published.version
+  ) {
+    throw new Error(
+      `SDK release did not match the published release: ${JSON.stringify(sdkRelease)}`,
+    );
+  }
+  const publishedHtml = await fetch(sdkRelease.htmlUrl);
+  const publishedBody = await publishedHtml.text();
+  if (!publishedHtml.ok) {
+    throw new Error(`Published paywall returned ${publishedHtml.status}: ${publishedBody}`);
+  }
+  if (!publishedBody.includes("Release smoke paywall — edited live")) {
+    throw new Error("Published paywall did not contain the live-edited document");
+  }
+
+  const sentAt = new Date().toISOString();
+  const capture = await fetch(`${url}/i/v1/capture`, {
+    body: JSON.stringify({
+      context: { runtime: "selfhost" },
+      distinct_id: `person_release_smoke_${suffix}`,
+      event: "selfhost_release_smoke",
+      properties: { paywall_id: paywallId },
+      sent_at: sentAt,
+      timestamp: sentAt,
+      token: apiKey,
+      uuid: `event_release_smoke_${suffix}`,
+    }),
+    headers: { "content-type": "application/json" },
+    method: "POST",
+  });
+  const captureBody = await capture.text();
+  if (capture.status !== 202) {
+    throw new Error(`Event capture returned ${capture.status}: ${captureBody}`);
+  }
+  const result = JSON.parse(captureBody) as {
+    readonly accepted: number;
+    readonly rejected: number;
+  };
+  if (result.accepted !== 1 || result.rejected !== 0) {
+    throw new Error(`Unexpected event capture response: ${captureBody}`);
+  }
+  await waitFor(
+    async () => ((await countCapturedEvents()) > 0 ? true : undefined),
+    "Timed out waiting for the analytics event in ClickHouse",
+  );
+
+  console.log("Self-host release smoke passed");
+} finally {
+  try {
+    if (paywallDocumentCreated) {
+      const databaseInfo = (await sdk.listDatabases()).find(
+        (database) => database.name === "voidhash",
+      );
+      if (databaseInfo) {
+        const database = sdk.database(
+          databaseInfo.id,
+          databaseInfo.name,
+          databaseInfo.description,
+        );
+        const collectionInfo = (await database.listCollections()).find(
+          (collection) => collection.name === "paywalls",
+        );
+        if (collectionInfo) {
+          await database.collectionRaw(collectionInfo.id).deleteDocument(paywallId);
+        }
+      }
+    }
+  } finally {
+    await sdk.dispose();
+    runPostgres(`
+      DELETE FROM paywall_location_showing WHERE id = ${quoteSql(showingId)};
+      DELETE FROM paywall_location WHERE id = ${quoteSql(locationId)};
+      DELETE FROM paywall_release WHERE paywall_id = ${quoteSql(paywallId)};
+      DELETE FROM api_key WHERE id = ${quoteSql(apiKeyId)};
+      DELETE FROM person_identity WHERE project_id = ${quoteSql(projectId)};
+      DELETE FROM person WHERE project_id = ${quoteSql(projectId)};
+      DELETE FROM paywall WHERE id = ${quoteSql(paywallId)};
+      DELETE FROM project WHERE id = ${quoteSql(projectId)};
+      DELETE FROM platform_queue_messages
+      WHERE body_json -> 'envelope' ->> 'projectId' = ${quoteSql(projectId)}
+         OR body_json ->> 'documentId' = ${quoteSql(paywallId)};
+    `);
+  }
+}
diff --git a/selfhost/smoke.mts b/selfhost/smoke.mts
new file mode 100644
index 000000000..947652f4f
--- /dev/null
+++ b/selfhost/smoke.mts
@@ -0,0 +1,146 @@
+import { Primitive } from "../packages/mimic-core/src/index.ts";
+import { MimicSDK } from "../packages/mimic-server/src/index.ts";
+import WebSocket from "ws";
+
+const url = process.env.MIMIC_URL ?? "http://127.0.0.1:5001";
+const username = process.env.MIMIC_ROOT_USERNAME ?? "root";
+const password = process.env.MIMIC_ROOT_PASSWORD ?? "password";
+
+const waitForHealth = async (): Promise<void> => {
+  const deadline = Date.now() + 60_000;
+  while (Date.now() < deadline) {
+    try {
+      const response = await fetch(`${url}/health`);
+      if (response.ok) return;
+    } catch {
+      // The compose service may still be starting.
+    }
+    await new Promise((resolve) => setTimeout(resolve, 500));
+  }
+  throw new Error(`Timed out waiting for ${url}/health`);
+};
+
+const assertApplicationSurface = async (): Promise<void> => {
+  const capabilitiesResponse = await fetch(`${url}/api/runtime-capabilities`);
+  if (!capabilitiesResponse.ok) {
+    throw new Error(`Runtime capabilities returned ${capabilitiesResponse.status}`);
+  }
+  const capabilities = await capabilitiesResponse.json();
+  if (
+    JSON.stringify(capabilities) !==
+    JSON.stringify({ enterprise: { auditLogs: false, billing: false } })
+  ) {
+    throw new Error(`Unexpected Community capabilities: ${JSON.stringify(capabilities)}`);
+  }
+
+  const wwwResponse = await fetch(`${url}/`);
+  if (!wwwResponse.ok) {
+    throw new Error(`WWW returned ${wwwResponse.status}`);
+  }
+};
+
+const authenticateSocket = (socketUrl: string, token: string): Promise<unknown[]> =>
+  new Promise((resolve, reject) => {
+    const socket = new WebSocket(socketUrl);
+    const messages: unknown[] = [];
+    const transactionId = `smoke-${crypto.randomUUID()}`;
+    const timeout = setTimeout(
+      () => reject(new Error("Timed out waiting for the WebSocket transaction")),
+      10_000,
+    );
+    socket.once("error", reject);
+    socket.once("open", () => socket.send(JSON.stringify({ type: "auth", token })));
+    socket.on("message", (data) => {
+      const message = JSON.parse(data.toString()) as { readonly type?: string };
+      messages.push(message);
+      if (message.type === "snapshot") {
+        const version =
+          "version" in message && typeof message.version === "number"
+            ? message.version
+            : 1;
+        const value = "value" in message ? message.value : undefined;
+        socket.send(
+          JSON.stringify({
+            type: "submit",
+            transaction: {
+              id: transactionId,
+              baseVersion: version,
+              commands: [{ kind: "value.set", path: [], value }],
+            },
+          }),
+        );
+      }
+      if (message.type === "transaction") {
+        clearTimeout(timeout);
+        socket.close(1000, "smoke complete");
+        resolve(messages);
+      }
+    });
+  });
+
+await waitForHealth();
+await assertApplicationSurface();
+const sdk = new MimicSDK({ url, username, password });
+const database = await sdk.createDatabase({
+  name: `compose-smoke-${crypto.randomUUID()}`,
+  description: "self-host compose smoke",
+});
+let collectionId: string | undefined;
+let documentId: string | undefined;
+
+try {
+  const collection = await database.createCollection(
+    "documents",
+    Primitive.Struct({ title: Primitive.String().required() }),
+  );
+  collectionId = collection.id;
+  const document = await collection.create({ title: "compose is live" });
+  documentId = document.id;
+  const authentication = await collection.setupDocumentAuthentication({
+    documentId: document.id,
+    permission: "write",
+    origins: [],
+    expiresInSeconds: 60,
+  });
+  const messages = await authenticateSocket(authentication.url, authentication.token);
+  const authenticated = messages.some(
+    (message) =>
+      typeof message === "object" &&
+      message !== null &&
+      "type" in message &&
+      message.type === "auth_result" &&
+      "success" in message &&
+      message.success === true,
+  );
+  const snapshot = messages.some(
+    (message) =>
+      typeof message === "object" &&
+      message !== null &&
+      "type" in message &&
+      message.type === "snapshot",
+  );
+  const transaction = messages.some(
+    (message) =>
+      typeof message === "object" &&
+      message !== null &&
+      "type" in message &&
+      message.type === "transaction",
+  );
+  if (!authenticated || !snapshot || !transaction) {
+    throw new Error(
+      "WebSocket authentication, snapshot, or transaction message was missing",
+    );
+  }
+  console.log("Self-host compose smoke passed");
+} finally {
+  if (collectionId) {
+    const collection = database.collection(
+      collectionId,
+      Primitive.Struct({ title: Primitive.String().required() }),
+    );
+    if (documentId) await collection.delete(documentId);
+    await database.deleteCollection(collectionId);
+  }
+  await sdk.deleteDatabase(database.id);
+  await sdk.dispose();
+}

From 0511b8ed2195c6ea455e016dd862e6fcccc71269 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 23:25:11 +0200
Subject: [PATCH 057/129] ci: align preview package toolchain

---
 .github/workflows/pr-packages.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pr-packages.yml b/.github/workflows/pr-packages.yml
index 4cf23b8e2..8b5ac1661 100644
--- a/.github/workflows/pr-packages.yml
+++ b/.github/workflows/pr-packages.yml
@@ -69,12 +69,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.19.0
+          version: 11.1.3
           run_install: false
 
       - name: Install dependencies

From 8af952719a0ddc4e33f97a0de5eb812a81a45472 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sat, 11 Jul 2026 23:55:14 +0200
Subject: [PATCH 058/129] security: harden open-source publication boundary

---
 SECURITY.md                                 |  22 +-
 apps/studio/package.json                    |   2 +-
 docs/security/backend-threat-model.md       | 288 ++++++++++++++++++++
 pnpm-lock.yaml                              |   2 +-
 selfhost/docker-compose.yml                 |  17 ++
 selfhost/entry/src/compiler/CompilerCore.ts |  20 +-
 selfhost/entry/tests/Compiler.test.ts       |  18 ++
 7 files changed, 363 insertions(+), 6 deletions(-)
 create mode 100644 docs/security/backend-threat-model.md

diff --git a/SECURITY.md b/SECURITY.md
index 1a6e72b72..d15e04a76 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,7 +1,25 @@
 # Security Policy
 
+## Supported Versions
+
+Voidhash is currently in private alpha and is not yet supported for production
+use. Security fixes are applied to the latest `preview` branch. Older commits,
+preview builds, and unpublished alpha artifacts are not supported.
+
+This policy will be updated with a version support table before the first
+public release.
+
 ## Reporting a Vulnerability
 
-If you discover a security vulnerability within Chiron, please send an e-mail to security@chiron.sh.
+Please report suspected vulnerabilities privately to
+[security@voidhash.com](mailto:security@voidhash.com). Do not open a public
+issue, discussion, or pull request for a vulnerability.
+
+Include the affected component, reproduction steps, expected impact, and any
+suggested mitigation. We will acknowledge the report, investigate it, and
+coordinate remediation and disclosure with the reporter. Please avoid
+accessing data that is not yours, disrupting services, or exploiting a finding
+beyond what is necessary to demonstrate it.
 
-All reports will be promptly addressed, and you'll be credited accordingly.
+The current backend threat model and publication risks are documented in
+[`docs/security/backend-threat-model.md`](docs/security/backend-threat-model.md).
diff --git a/apps/studio/package.json b/apps/studio/package.json
index de29cb21f..587c36231 100644
--- a/apps/studio/package.json
+++ b/apps/studio/package.json
@@ -29,7 +29,7 @@
     "react": "catalog:",
     "react-dom": "catalog:",
     "tailwindcss": "^4.1.13",
-    "vite": "7.3.5"
+    "vite": "catalog:"
   },
   "devDependencies": {
     "@types/react": "catalog:",
diff --git a/docs/security/backend-threat-model.md b/docs/security/backend-threat-model.md
new file mode 100644
index 000000000..5d3df0601
--- /dev/null
+++ b/docs/security/backend-threat-model.md
@@ -0,0 +1,288 @@
+# Backend Threat Model
+
+Status: alpha review draft  
+Last updated: 2026-07-11  
+Scope: `apps/backend`, `apps/mimic-db`, `apps/www`, `packages/core`, and
+`selfhost`
+
+This document records the security analysis required before the repository can
+be made public. It describes current controls and known gaps; it is not a claim
+that the system is vulnerability-free. The beta traffic review and independent
+review required by the publication plan have not happened yet.
+
+## Security objectives
+
+- A caller can act only as the user, project, organization, or SDK identity
+  established by an authenticated session or key.
+- One tenant cannot read or mutate another tenant's product or analytics data.
+- Provider and identity webhooks are accepted only after authenticity checks,
+  and duplicate delivery cannot duplicate financial state transitions.
+- Secrets, unpublished paywalls, private objects, and operator data do not cross
+  public boundaries.
+- Tenant-authored code and HTML cannot gain API-origin authority or escape the
+  compiler isolation boundary.
+- Malformed or excessive input fails within bounded memory, time, and retry
+  budgets.
+
+Availability of the managed service against volumetric denial of service is an
+operational objective, but not a guarantee made by the Community Edition.
+
+## Assets and actors
+
+Protected assets include WorkOS sessions, user and project API keys, payment
+provider credentials, webhook signing secrets, tenant database rows,
+ClickHouse events, Mimic documents and document tokens, unpublished paywall
+artifacts, object-store credentials, and compiler/container integrity.
+
+Relevant actors are anonymous internet clients, SDK clients holding a
+publishable key, users holding a WorkOS session or user API key, server
+integrations holding a project secret key, tenant administrators, payment and
+identity providers, self-host operators, and a malicious authenticated tenant
+submitting component source.
+
+## Trust boundaries
+
+1. Internet to WWW/backend HTTP and WebSocket surfaces.
+2. Authentication middleware to request-scoped `AuthSession`.
+3. Tenant-scoped services to PostgreSQL and ClickHouse adapters.
+4. Provider webhook ingress to provider verification and idempotent ledgers.
+5. Backend to queues, workflows, object stores, SMTP, and screenshot services.
+6. Backend to the component compiler container/sidecar.
+7. Public, content-addressed artifact serving to browsers and SDKs.
+8. Self-host operator configuration to the Compose network and persistent
+   stores.
+
+The cloud and self-host compositions use the same application services. Their
+infrastructure boundaries differ: Cloudflare Workers, Durable Objects, Queues,
+Workflows, R2, Hyperdrive, and an isolated compiler container in cloud; a Node
+process, PostgreSQL-backed primitives, S3-compatible storage, and a separate
+compiler sidecar in self-host.
+
+## Authentication and sessions
+
+Threats include session forgery or fixation, credential confusion between
+supported authentication methods, stale membership, secret leakage through
+logs, and an unauthenticated request reaching a privileged handler.
+
+Current controls:
+
+- `ApiMiddlewares.ts` selects exactly one authentication method and resolves it
+  to a typed user, secret-key, or publishable-key session before API handlers
+  run.
+- WorkOS session cookies are authenticated by the WorkOS adapter; local access
+  is loaded from server-side membership state.
+- Project secret keys establish a session containing only their project.
+  Publishable keys establish an SDK identity with no management permissions.
+- MCP accepts only a Bearer project secret key and constructs the same
+  project-scoped session used by the HTTP API.
+- Authentication failures collapse to non-authenticated or generic internal
+  errors rather than returning stored credential details.
+
+Evidence includes API-key integration tests for disabled/expired keys and
+forbidden mutation, RPC smoke coverage, MCP protocol/dispatch tests, and WorkOS
+signature tests.
+
+Residual work:
+
+- Beta must add explicit cookie fixation, malformed-cookie, revoked-membership,
+  and authentication-method-confusion tests.
+- Deployments that change `WORKOS_COOKIE_NAME` must verify that middleware
+  method selection and the WorkOS adapter use the same configured name.
+
+## API keys and credential storage
+
+Threats include database disclosure of reusable secrets, guessing, use after
+revocation/expiry, cross-project key management, and accidental telemetry
+capture.
+
+Current controls:
+
+- User and project secret keys are generated with cryptographic randomness and
+  stored as hashes. The raw value is returned only at creation/rotation.
+- Publishable keys are intentionally public and confer no management
+  permissions.
+- Validation rejects disabled and expired records. Mutations check project or
+  user ownership and emit audit events through the audit port.
+- Telemetry annotates key identifiers, public status, prefix, and suffix—not the
+  raw key.
+
+Residual work: independently review key entropy, hash construction,
+constant-time comparison, rotation races, log redaction, and every endpoint
+that accepts a publishable key before beta publication.
+
+## Tenant isolation
+
+Threats include insecure direct object references, accepting a caller-supplied
+project ID without checking the session, cross-tenant joins, and analytics
+queries without a mandatory tenant predicate.
+
+Current controls:
+
+- Core service methods call project/organization permission checks before
+  tenant reads and writes; key-derived sessions contain only the resolved
+  project.
+- Foreign keys and unique constraints preserve project ownership and
+  idempotency invariants.
+- Cloud analytics queries use dedicated least-privilege users and compiler-
+  injected project predicates. Self-host creates separate read-write,
+  read-only, and analytics-query users when ClickHouse is enabled.
+- The private operations plane and staff authorization are absent from this
+  repository and from the product backend.
+- Integration suites exercise forbidden access across API keys, paywalls,
+  locations, perks, persons, feature flags, analytics, and AI workspace tools.
+
+Residual work: produce an endpoint-to-authorization matrix and run a beta
+cross-tenant test for every management RPC and HTTP route, including nested
+resource IDs whose project is loaded only after the first lookup.
+
+## Webhooks and payment verification
+
+Threats include forged provider messages, replay, timestamp bypass, wrong-app
+or wrong-project events, duplicate financial transitions, and retry behavior
+that loses or amplifies events.
+
+Current controls:
+
+- Stripe verifies the signature over the exact raw body and enforces its
+  timestamp tolerance. Tests reject wrong signatures, stale timestamps, and
+  malformed signature headers.
+- WorkOS verifies its signed raw body and timestamp, records the external event
+  ID under a uniqueness constraint, and treats processed redelivery as a no-op.
+- Apple verifies signed JWS data and application identity through the App Store
+  SDK. Google Play re-fetches authoritative purchase state before applying an
+  RTDN.
+- Purchase-ledger and notification tables use idempotency/uniqueness keys, and
+  provider engines test duplicate delivery behavior.
+- Terminal verification/business failures are acknowledged while transient
+  infrastructure failures return retryable status codes.
+
+Open publication blocker:
+
+- The Google Play RTDN route currently validates the payload and authoritative
+  Play state but does not authenticate the Pub/Sub push caller. Before public
+  beta, require and verify Pub/Sub OIDC identity (or an equivalently strong
+  per-subscription secret) and add missing, malformed, wrong-audience, and
+  replay tests.
+
+Beta must also close the deferred Apple signed-JWS negative and replay cases
+that currently require provider fixtures or a verification seam.
+
+## Object storage and public artifacts
+
+Threats include object-key traversal, overwrite of another tenant's object,
+active content under the authenticated API origin, content-type confusion, and
+leaking private object-store credentials.
+
+Current controls:
+
+- Released paywall/component artifacts are immutable and addressed by a
+  validated SHA-256 content hash. Serving rejects empty and traversal-like key
+  segments.
+- Tenant-authored paywall HTML is returned with CSP
+  `sandbox allow-scripts allow-forms`, `nosniff`, and `no-referrer`, giving it
+  an opaque origin without API cookies.
+- Public image files are content-addressed; avatar inputs validate supported
+  image type, magic bytes, non-empty content, and size before storage.
+- Artifact and public buckets are separate platform services. Credentials are
+  supplied only to the backend runtime, not the compiler.
+
+Residual work: verify bucket IAM, overwrite policy, maximum object sizes, SVG
+handling, cache poisoning resistance, and browser behavior for every served
+content type in both cloud and self-host deployments.
+
+## Analytics ingest
+
+Threats include forged project tokens, oversized batches, reserved financial
+events from untrusted clients, quota bypass, duplicate/replayed events,
+cross-tenant query access, and poison messages causing unbounded retries.
+
+Current controls:
+
+- Capture validates publishable token format and project resolution before
+  queue publication, applies per-project request/event policy, and returns
+  bounded retry guidance.
+- Public-key capture rejects reserved revenue event names. Processing validates
+  route/lane, target project, schema, and policy; rejected events go to a DLQ.
+- Writer and read paths deduplicate event IDs, while queue consumers have batch,
+  retry, and dead-letter limits.
+- Tests cover malformed tokens, disabled ingest, request limits, reserved
+  events, project mismatch, invalid lanes/schema, DLQ replay, and duplicate
+  event IDs.
+
+Residual work: fuzz batch/body limits and timestamps, verify client-IP trust at
+every reverse proxy, load-test quota atomicity, and independently review the
+compiled analytics-query tenant predicate.
+
+## SSR, rendering, and browser automation
+
+Threats include server-side request forgery, XSS under a privileged origin,
+cookie leakage, unbounded rendering work, and Chromium compromise.
+
+Current controls:
+
+- Public paywall HTML uses an opaque CSP sandbox and immutable content hashes.
+- Rendering and screenshot capabilities are platform ports, keeping privileged
+  infrastructure adapters outside tenant application code.
+- Paywall manifests and preview trees are schema-validated before release.
+- The runtime runs as an unprivileged user in the self-host image.
+
+Residual work: enumerate every URL Chromium may navigate to, deny private and
+link-local address ranges, apply navigation/time/resource budgets, and test
+redirect/DNS-rebinding cases. Chromium currently runs with its sandbox disabled
+inside the container, so container isolation and image patching are part of the
+security boundary and require independent review.
+
+## Component compiler sandbox
+
+Tenant component modules execute during manifest extraction, so the compiler
+container—not Node's VM API—is the confidentiality and host-integrity boundary.
+
+Current controls:
+
+- Only modules in the explicit paywall sandbox registry can be imported.
+- Module evaluation runs in a VM context with string/Wasm code generation
+  disabled and a 500 ms synchronous execution budget.
+- Request bodies are capped at 1 MiB and compiler concurrency is limited.
+- Self-host runs the compiler as an unprivileged user with a read-only root
+  filesystem, dropped Linux capabilities, `no-new-privileges`, a PID limit, and
+  a private internal Docker network shared only with the application. It does
+  not receive database, object-store, WorkOS, or payment credentials.
+- Cloud invokes a dedicated container through a Durable Object boundary and
+  bounds the caller's compile round trip.
+
+Residual work: independently test container escape resistance, host-object VM
+escape attempts, memory bombs, asynchronous work, file reads, internal-service
+SSRF, crash/restart behavior, and concurrent denial of service. Apply explicit
+memory/CPU quotas in each production deployment and keep the compiler image and
+Node runtime patched.
+
+## Self-host operator boundary
+
+The sample Compose defaults are for loopback evaluation only. They include
+known passwords and placeholder WorkOS credentials. Exposing that composition
+unchanged would compromise all stored data.
+
+Before any non-local deployment, the operator must replace every example
+password, configure HTTPS at the reverse proxy, restrict MinIO/Mailpit/
+ClickHouse host ports, configure CORS and public URLs, use real WorkOS and SMTP
+credentials, back up persistent volumes, and apply host/container updates.
+
+Open publication blocker: add a production mode that refuses known example
+credentials and insecure public URLs, while retaining an explicit opt-in local
+evaluation mode for the documented quick start.
+
+## Publication risk register
+
+| ID | Severity | Status | Required evidence |
+| --- | --- | --- | --- |
+| VH-TM-001 | High | Open | Authenticate Google Pub/Sub push and pass negative/replay tests. |
+| VH-TM-002 | High | Open | Refuse self-host example credentials outside explicit local evaluation mode. |
+| VH-TM-003 | High | Mitigated, review pending | Compiler VM budget and container/network hardening pass adversarial and independent review. |
+| VH-TM-004 | High | Open | Chromium navigation/SSRF policy and resource budgets pass redirect and private-network tests. |
+| VH-TM-005 | High | Open | Endpoint authorization matrix has complete cross-tenant negative coverage. |
+| VH-TM-006 | Process gate | Open | Real beta traffic and security-log/incident review completed. |
+| VH-TM-007 | Process gate | Open | Independent reviewer signs off and residual risks have owners/deadlines. |
+
+Repository visibility must not change while a High item is open. Accepted
+residual risk must be recorded with an owner, deadline, and rationale in this
+table; changing a severity or closing an item requires review evidence.
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ca8b29211..295222551 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -594,7 +594,7 @@ importers:
         specifier: ^4.1.13
         version: 4.3.0
       vite:
-        specifier: 7.3.5
+        specifier: 'catalog:'
         version: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     devDependencies:
       '@types/react':
diff --git a/selfhost/docker-compose.yml b/selfhost/docker-compose.yml
index f7b173f7e..60e5b1866 100644
--- a/selfhost/docker-compose.yml
+++ b/selfhost/docker-compose.yml
@@ -134,9 +134,19 @@ services:
   compiler:
     <<: *entry-image
     command: ["./node_modules/.bin/tsx", "src/compiler/main.ts"]
+    cap_drop:
+      - ALL
     environment:
       COMPILER_HOST: 0.0.0.0
       COMPILER_PORT: 5002
+    networks:
+      - compiler
+    pids_limit: 128
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    tmpfs:
+      - /tmp:size=64m,mode=1777
     expose:
       - "5002"
     restart: unless-stopped
@@ -191,6 +201,9 @@ services:
       SMTP_VERIFY_ON_START: ${SMTP_VERIFY_ON_START:-true}
     ports:
       - "${MIMIC_PORT:-5001}:5001"
+    networks:
+      - default
+      - compiler
     depends_on:
       migrate:
         condition: service_completed_successfully
@@ -217,3 +230,7 @@ volumes:
   mailpit_data:
   minio_data:
   postgres_data:
+
+networks:
+  compiler:
+    internal: true
diff --git a/selfhost/entry/src/compiler/CompilerCore.ts b/selfhost/entry/src/compiler/CompilerCore.ts
index ee6de2b14..e697dec2f 100644
--- a/selfhost/entry/src/compiler/CompilerCore.ts
+++ b/selfhost/entry/src/compiler/CompilerCore.ts
@@ -6,6 +6,9 @@ import {
   type CompileExtractResult,
 } from "@voidhash/core/services/paywallWorkspace/ComponentCompiler";
 import { Effect } from "effect";
+import { createContext, Script } from "node:vm";
+
+const manifestEvaluationTimeoutMs = 500;
 
 interface EsbuildFailure {
   readonly errors?: ReadonlyArray<{
@@ -53,8 +56,21 @@ const evaluateAndExtractManifest = (
     return module;
   };
   const moduleObject: { exports: Record<string, unknown> } = { exports: {} };
-  const factory = new Function("require", "module", "exports", compiledCode);
-  factory(requireShim, moduleObject, moduleObject.exports);
+  const context = createContext(
+    {
+      exports: moduleObject.exports,
+      module: moduleObject,
+      require: requireShim,
+    },
+    {
+      codeGeneration: { strings: false, wasm: false },
+      microtaskMode: "afterEvaluate",
+      name: "voidhash-component-manifest",
+    },
+  );
+  new Script(compiledCode, { filename: "component.cjs" }).runInContext(context, {
+    timeout: manifestEvaluationTimeoutMs,
+  });
   const definition = moduleObject.exports.default ?? moduleObject.exports.definition;
   if (
     definition === undefined ||
diff --git a/selfhost/entry/tests/Compiler.test.ts b/selfhost/entry/tests/Compiler.test.ts
index 0139f6edd..3a4da03c3 100644
--- a/selfhost/entry/tests/Compiler.test.ts
+++ b/selfhost/entry/tests/Compiler.test.ts
@@ -37,4 +37,22 @@ describe("self-host component compiler", () => {
     expect(compile).toMatchObject({ phase: "compile", status: "error" });
     expect(runtime).toMatchObject({ phase: "runtime", status: "error" });
   });
+
+  it("bounds evaluation and disables dynamic code generation", async () => {
+    const loop = await Effect.runPromise(
+      compiler.compileAndExtract("while (true) {} export default {};"),
+    );
+    const dynamicCode = await Effect.runPromise(
+      compiler.compileAndExtract('Function("return 1")(); export default {};'),
+    );
+
+    expect(loop).toMatchObject({ phase: "runtime", status: "error" });
+    expect(dynamicCode).toMatchObject({ phase: "runtime", status: "error" });
+    if (loop.status === "error") {
+      expect(loop.diagnostics[0]?.message).toContain("timed out");
+    }
+    if (dynamicCode.status === "error") {
+      expect(dynamicCode.diagnostics[0]?.message).toContain("Code generation from strings disallowed");
+    }
+  });
 });

From 9c51c07a806b756a50fddf5f5c1ee9e0e611b1f6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 00:12:47 +0200
Subject: [PATCH 059/129] test: allow CLI generation on slower runners

---
 apps/mimic-cli/tests/generate.test.ts | 34 +++++++++++++++------------
 1 file changed, 19 insertions(+), 15 deletions(-)

diff --git a/apps/mimic-cli/tests/generate.test.ts b/apps/mimic-cli/tests/generate.test.ts
index a906d28dc..701aa6094 100644
--- a/apps/mimic-cli/tests/generate.test.ts
+++ b/apps/mimic-cli/tests/generate.test.ts
@@ -27,21 +27,25 @@ afterEach(() => {
 });
 
 describe("mimic generate", () => {
-  it("creates the next zero-padded migration file", () => {
-    const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-generate-"));
-    try {
-      fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
-      fs.writeFileSync(path.join(cwd, "migrations/00001_initial.ts"), "");
+  it(
+    "creates the next zero-padded migration file",
+    () => {
+      const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-generate-"));
+      try {
+        fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
+        fs.writeFileSync(path.join(cwd, "migrations/00001_initial.ts"), "");
 
-      runGenerate(cwd, "Add slug");
+        runGenerate(cwd, "Add slug");
 
-      const created = path.join(cwd, "migrations/00002_add-slug.ts");
-      expect(fs.existsSync(created)).toBe(true);
-      expect(fs.readFileSync(created, "utf8")).toContain(
-        "export default mimicConfig.defineMigrations((migration) => [",
-      );
-    } finally {
-      fs.rmSync(cwd, { recursive: true, force: true });
-    }
-  });
+        const created = path.join(cwd, "migrations/00002_add-slug.ts");
+        expect(fs.existsSync(created)).toBe(true);
+        expect(fs.readFileSync(created, "utf8")).toContain(
+          "export default mimicConfig.defineMigrations((migration) => [",
+        );
+      } finally {
+        fs.rmSync(cwd, { recursive: true, force: true });
+      }
+    },
+    30_000,
+  );
 });

From 35959ae94808a206dffec0619417e59740190878 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 00:16:54 +0200
Subject: [PATCH 060/129] build: use portable Studio toolchain

---
 apps/studio/package.json |   9 ++-
 pnpm-lock.yaml           | 160 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 165 insertions(+), 4 deletions(-)

diff --git a/apps/studio/package.json b/apps/studio/package.json
index 587c36231..1db409aa1 100644
--- a/apps/studio/package.json
+++ b/apps/studio/package.json
@@ -17,9 +17,9 @@
     }
   },
   "scripts": {
-    "dev": "vite",
-    "build": "vite build",
-    "preview": "vite preview",
+    "dev": "vp dev",
+    "build": "vp build",
+    "preview": "vp preview",
     "typecheck": "tsgo --noEmit"
   },
   "dependencies": {
@@ -35,6 +35,7 @@
     "@types/react": "catalog:",
     "@types/react-dom": "catalog:",
     "@voidhash/tsconfig": "workspace:*",
-    "typescript": "5.6.3"
+    "typescript": "5.6.3",
+    "vite-plus": "catalog:"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 295222551..4fc1429eb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -609,6 +609,9 @@ importers:
       typescript:
         specifier: 5.6.3
         version: 5.6.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   apps/www:
     dependencies:
@@ -21964,6 +21967,23 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
+  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 24.10.4
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.7.0
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 5.6.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
   '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
@@ -22198,6 +22218,47 @@ snapshots:
       - utf-8-validate
       - yaml
 
+  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.1
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.1.0
+      tinybench: 2.9.0
+      tinyexec: 1.0.2
+      tinyglobby: 0.2.15
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@types/node': 24.10.4
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
   '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
@@ -27961,6 +28022,31 @@ snapshots:
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
       vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
+  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
@@ -28189,6 +28275,30 @@ snapshots:
       oxlint-tsgolint: 0.23.0
       vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
   oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
@@ -31226,6 +31336,56 @@ snapshots:
       - vite
       - yaml
 
+  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
   vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0

From 8fad906c5a05a1157885311af6e1c0dbadc3c61d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 00:29:36 +0200
Subject: [PATCH 061/129] test: allow reconcile fuzzing on slower runners

---
 .../src/reconcile/reconcile.test.ts           | Bin 14195 -> 14248 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/packages/mimic-schema/src/reconcile/reconcile.test.ts b/packages/mimic-schema/src/reconcile/reconcile.test.ts
index 7b9eeb6a60865c8387426a652ccf0057561c6ada..e1d2c2a4acbc1aabef6b22b8308d26d221528af9 100644
GIT binary patch
delta 146
zcmeyIw<3ST853461t6Gw#>9&s%+k<Qu(eaD2C^s1o0?4yHq{nZP{>Si&M(a?Ni9;a
zRWPsy$@Q8VOb!$jo_x+!X!1Q%i^(EpT9ZHV8ca?!lAPRZraAeuh{WVWW{Q&^ngva6
hHW8leVy+CdrWR~PtqzznHi$PcFaWVNt+{G}7yzK8DaQZ+

delta 105
zcmV-v0G9u#Z}V=j%rukHG)j|F4HJ|3GaHjnH4&4SBNUT2G%%B@H6)W$5fKbxVRL0k
zZg6#UDLV?2?=?J=v=0-LKsFVVS2i${Wil0$o;E3y^%NG9-!>tW0yj{Tg)|Y9Wj7;}
Lyfg>|eJMK%Tcjnu


From fa35db977b58e68a5b4f63e263da33fa646c42df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 00:33:04 +0200
Subject: [PATCH 062/129] ci: remove inert local API workflow

---
 .github/workflows/job_test_api_local.yml | 61 ------------------------
 1 file changed, 61 deletions(-)
 delete mode 100644 .github/workflows/job_test_api_local.yml

diff --git a/.github/workflows/job_test_api_local.yml b/.github/workflows/job_test_api_local.yml
deleted file mode 100644
index 976a4600b..000000000
--- a/.github/workflows/job_test_api_local.yml
+++ /dev/null
@@ -1,61 +0,0 @@
-# name: Test API Local
-# on:
-#   workflow_call:
-
-# jobs:
-#   test:
-#     name: API Test Local
-#     timeout-minutes: 60
-#     runs-on: blacksmith-2vcpu-ubuntu-2404
-#     steps:
-#       - uses: actions/checkout@v4
-
-#       - name: Delete huge unnecessary tools folder
-#         run: rm -rf /opt/hostedtoolcache
-
-#       - name: Run containers
-#         run: docker compose -f ./deployment/docker-compose.yaml up -d
-
-#       - name: Install
-#         uses: ./.github/actions/install
-#         with:
-#           ts: true
-#           go: true
-
-#       - name: Build
-#         run: pnpm turbo run build --filter=./apps/api...
-
-#       - name: Load Schema into MySQL
-#         run: pnpm drizzle-kit push
-#         working-directory: internal/db
-#         env:
-#           DRIZZLE_DATABASE_URL: "mysql://unkey:password@localhost:3306/unkey"
-
-#       - name: Migrate ClickHouse
-#         run: goose up
-#         env:
-#           GOOSE_DRIVER: clickhouse
-#           GOOSE_DBSTRING: "tcp://default:password@127.0.0.1:9000"
-#           GOOSE_MIGRATION_DIR: ./internal/clickhouse/schema
-
-#       - name: Test
-#         run: pnpm vitest run -c vitest.integration.ts
-#         working-directory: apps/api
-#         env:
-#           UNKEY_BASE_URL: http://localhost:8787
-#           DATABASE_HOST: localhost:3900
-#           DATABASE_USERNAME: unkey
-#           DATABASE_PASSWORD: password
-#           TEST_LOCAL: true
-
-#       - name: Dump logs
-#         if: always()
-#         run: docker compose -f ./deployment/docker-compose.yaml logs --no-color > ./docker.logs
-
-#       - name: Upload logs
-#         uses: actions/upload-artifact@v4
-#         if: always()
-#         with:
-#           name: ${{github.run_id}}-${{github.run_number}}-api.logs
-#           path: docker.logs
-#           retention-days: 7

From 90da61468e1b0c66bda03e5e0360b62f5883c0d8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 00:44:45 +0200
Subject: [PATCH 063/129] test: allow paywall builds on slower runners

---
 packages/paywall-build/src/build.test.ts      | 60 ++++++++++---------
 .../src/probe-buildwire-serialization.test.ts | 50 +++++++++-------
 2 files changed, 59 insertions(+), 51 deletions(-)

diff --git a/packages/paywall-build/src/build.test.ts b/packages/paywall-build/src/build.test.ts
index 43e75992d..3f5612722 100644
--- a/packages/paywall-build/src/build.test.ts
+++ b/packages/paywall-build/src/build.test.ts
@@ -47,34 +47,38 @@ function makeMapCache(seed?: Map<string, CachedManifest>): {
 }
 
 describe("buildPaywall — green path", () => {
-  it("builds a realistic multi-file fork to ok artifacts", async () => {
-    const result = await buildFromFiles(greenFork(), makeNodeCapabilities());
-
-    expect(result.ok).toBe(true);
-    expect(errorsOf(result)).toHaveLength(0);
-    expect(result.artifacts).toBeDefined();
-
-    const { components } = result.artifacts!;
-    // Both components are ready with v2 manifests, ordered by canonical path.
-    expect(components.map((c) => c.path)).toEqual([
-      "components/heading.tsx",
-      "components/pricing-option.tsx",
-    ]);
-    for (const component of components) {
-      expect(component.status).toBe("ready");
-      expect(component.manifest?.manifestVersion).toBe(2);
-      expect(component.sourceHash).toMatch(/^[0-9a-f]{64}$/);
-    }
-    // The pricing-option manifest carries its declared props + action + slot.
-    const pricing = components.find((c) => c.path === "components/pricing-option.tsx")!;
-    expect(Object.keys(pricing.manifest!.props).sort()).toEqual([
-      "highlighted",
-      "label",
-      "price",
-    ]);
-    expect(Object.keys(pricing.manifest!.actions)).toEqual(["onSelect"]);
-    expect(pricing.manifest!.slot).toBe(true);
-  });
+  it(
+    "builds a realistic multi-file fork to ok artifacts",
+    async () => {
+      const result = await buildFromFiles(greenFork(), makeNodeCapabilities());
+
+      expect(result.ok).toBe(true);
+      expect(errorsOf(result)).toHaveLength(0);
+      expect(result.artifacts).toBeDefined();
+
+      const { components } = result.artifacts!;
+      // Both components are ready with v2 manifests, ordered by canonical path.
+      expect(components.map((c) => c.path)).toEqual([
+        "components/heading.tsx",
+        "components/pricing-option.tsx",
+      ]);
+      for (const component of components) {
+        expect(component.status).toBe("ready");
+        expect(component.manifest?.manifestVersion).toBe(2);
+        expect(component.sourceHash).toMatch(/^[0-9a-f]{64}$/);
+      }
+      // The pricing-option manifest carries its declared props + action + slot.
+      const pricing = components.find((c) => c.path === "components/pricing-option.tsx")!;
+      expect(Object.keys(pricing.manifest!.props).sort()).toEqual([
+        "highlighted",
+        "label",
+        "price",
+      ]);
+      expect(Object.keys(pricing.manifest!.actions)).toEqual(["onSelect"]);
+      expect(pricing.manifest!.slot).toBe(true);
+    },
+    30_000,
+  );
 
   it("stable sourceHash matches hashSource(source)", async () => {
     const result = await buildFromFiles(greenFork(), makeNodeCapabilities());
diff --git a/packages/paywall-build/src/probe-buildwire-serialization.test.ts b/packages/paywall-build/src/probe-buildwire-serialization.test.ts
index 279f79e69..9a273c4bc 100644
--- a/packages/paywall-build/src/probe-buildwire-serialization.test.ts
+++ b/packages/paywall-build/src/probe-buildwire-serialization.test.ts
@@ -93,33 +93,37 @@ function jsonUnsafePaths(value: unknown, path = "$", seen = new Set<unknown>()):
 }
 
 describe("PROBE — BuildWire (BuildResult) is structuredClone + JSON safe", () => {
-  it("a rich component's whole BuildResult round-trips structuredClone AND JSON with no loss", async () => {
-    const result = await buildFromFiles(
-      { "/paywall.tsx": COMPOSITION, "/components/rich.tsx": HEADING },
-      makeNodeCapabilities(),
-    );
+  it(
+    "a rich component's whole BuildResult round-trips structuredClone AND JSON with no loss",
+    async () => {
+      const result = await buildFromFiles(
+        { "/paywall.tsx": COMPOSITION, "/components/rich.tsx": HEADING },
+        makeNodeCapabilities(),
+      );
 
-    // The build must succeed with a ready component + manifest (otherwise the
-    // probe is vacuous — there's no manifest to test for safety).
-    expect(result.ok, JSON.stringify(result.diagnostics, null, 2)).toBe(true);
-    if (!result.ok || result.artifacts === undefined) return;
-    const rich = result.artifacts.components.find((c) => c.path === "components/rich.tsx");
-    expect(rich?.status).toBe("ready");
-    expect(rich?.manifest, "expected a non-null extracted manifest").not.toBeNull();
+      // The build must succeed with a ready component + manifest (otherwise the
+      // probe is vacuous — there's no manifest to test for safety).
+      expect(result.ok, JSON.stringify(result.diagnostics, null, 2)).toBe(true);
+      if (!result.ok || result.artifacts === undefined) return;
+      const rich = result.artifacts.components.find((c) => c.path === "components/rich.tsx");
+      expect(rich?.status).toBe("ready");
+      expect(rich?.manifest, "expected a non-null extracted manifest").not.toBeNull();
 
-    // 1. No JSON-unsafe leaf anywhere in the BuildResult (functions, Map/Set,
-    //    symbol, bigint, circular).
-    const offenders = jsonUnsafePaths(result);
-    expect(offenders, `JSON-unsafe values in BuildResult: ${offenders.join(", ")}`).toEqual([]);
+      // 1. No JSON-unsafe leaf anywhere in the BuildResult (functions, Map/Set,
+      //    symbol, bigint, circular).
+      const offenders = jsonUnsafePaths(result);
+      expect(offenders, `JSON-unsafe values in BuildResult: ${offenders.join(", ")}`).toEqual([]);
 
-    // 2. structuredClone is the exact mechanism the Container/DO RPC uses; it
-    //    THROWS (DataCloneError) on a function/symbol. It must not throw.
-    expect(() => structuredClone(result)).not.toThrow();
+      // 2. structuredClone is the exact mechanism the Container/DO RPC uses; it
+      //    THROWS (DataCloneError) on a function/symbol. It must not throw.
+      expect(() => structuredClone(result)).not.toThrow();
 
-    // 3. A JSON round-trip must be lossless (the manifest cache JSON-encodes it).
-    const cloned = JSON.parse(JSON.stringify(result));
-    expect(cloned).toEqual(result);
-  });
+      // 3. A JSON round-trip must be lossless (the manifest cache JSON-encodes it).
+      const cloned = JSON.parse(JSON.stringify(result));
+      expect(cloned).toEqual(result);
+    },
+    30_000,
+  );
 
   it("a manifest cannot smuggle a function even if user source attaches one to the definition", async () => {
     // A component that assigns a stray function-valued property onto the exported

From ac603b5bf6e55f60e73637fc6b5fc75b060d8bdd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 00:55:39 +0200
Subject: [PATCH 064/129] test: allow CLI typechecking on slower runners

---
 .../domain/services/paywall-typecheck.test.ts | 107 ++++++++++--------
 1 file changed, 62 insertions(+), 45 deletions(-)

diff --git a/apps/cli/tests/domain/services/paywall-typecheck.test.ts b/apps/cli/tests/domain/services/paywall-typecheck.test.ts
index 99d61964e..20d2b3771 100644
--- a/apps/cli/tests/domain/services/paywall-typecheck.test.ts
+++ b/apps/cli/tests/domain/services/paywall-typecheck.test.ts
@@ -12,6 +12,7 @@ import {
 } from "../../../src/domain/services/paywall-typecheck";
 
 let projectRoot: string;
+const compilerTestTimeout = 60_000;
 
 const writeSource = async (relPath: string, contents: string) => {
   const abs = join(projectRoot, relPath);
@@ -29,56 +30,72 @@ afterAll(async () => {
 });
 
 describe("typecheckPaywallSources", () => {
-  it("passes a source importing a .png via the injected asset declarations", async () => {
-    const entry = await writeSource(
-      ".voidhash/paywalls/with-asset.ts",
-      ['import hero from "./hero.png";', "export const heroUrl: string = hero;", ""].join("\n"),
-    );
+  it(
+    "passes a source importing a .png via the injected asset declarations",
+    async () => {
+      const entry = await writeSource(
+        ".voidhash/paywalls/with-asset.ts",
+        ['import hero from "./hero.png";', "export const heroUrl: string = hero;", ""].join("\n"),
+      );
 
-    await expect(
-      Effect.runPromise(typecheckPaywallSources({ files: [entry], projectRoot })),
-    ).resolves.toBeUndefined();
-  });
+      await expect(
+        Effect.runPromise(typecheckPaywallSources({ files: [entry], projectRoot })),
+      ).resolves.toBeUndefined();
+    },
+    compilerTestTimeout,
+  );
 
-  it("covers every esbuild-supported asset extension", async () => {
-    const imports = PAYWALL_ASSET_EXTENSIONS.map(
-      (ext, i) => `import asset${i} from "./asset.${ext}";`,
-    );
-    const uses = PAYWALL_ASSET_EXTENSIONS.map(
-      (_, i) => `export const url${i}: string = asset${i};`,
-    );
-    const entry = await writeSource(
-      ".voidhash/paywalls/all-assets.ts",
-      [...imports, ...uses, ""].join("\n"),
-    );
+  it(
+    "covers every esbuild-supported asset extension",
+    async () => {
+      const imports = PAYWALL_ASSET_EXTENSIONS.map(
+        (ext, i) => `import asset${i} from "./asset.${ext}";`,
+      );
+      const uses = PAYWALL_ASSET_EXTENSIONS.map(
+        (_, i) => `export const url${i}: string = asset${i};`,
+      );
+      const entry = await writeSource(
+        ".voidhash/paywalls/all-assets.ts",
+        [...imports, ...uses, ""].join("\n"),
+      );
 
-    await expect(
-      Effect.runPromise(typecheckPaywallSources({ files: [entry], projectRoot })),
-    ).resolves.toBeUndefined();
-  });
+      await expect(
+        Effect.runPromise(typecheckPaywallSources({ files: [entry], projectRoot })),
+      ).resolves.toBeUndefined();
+    },
+    compilerTestTimeout,
+  );
 
-  it("still fails a genuinely type-broken source", async () => {
-    const entry = await writeSource(
-      ".voidhash/paywalls/broken.ts",
-      ['import hero from "./hero.png";', "export const broken: number = hero;", ""].join("\n"),
-    );
+  it(
+    "still fails a genuinely type-broken source",
+    async () => {
+      const entry = await writeSource(
+        ".voidhash/paywalls/broken.ts",
+        ['import hero from "./hero.png";', "export const broken: number = hero;", ""].join("\n"),
+      );
 
-    const error = await Effect.runPromise(
-      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(Effect.flip),
-    );
-    expect(error).toBeInstanceOf(PaywallTypecheckError);
-    expect(error.message).toContain("broken.ts");
-  });
+      const error = await Effect.runPromise(
+        typecheckPaywallSources({ files: [entry], projectRoot }).pipe(Effect.flip),
+      );
+      expect(error).toBeInstanceOf(PaywallTypecheckError);
+      expect(error.message).toContain("broken.ts");
+    },
+    compilerTestTimeout,
+  );
 
-  it("still fails an import of an undeclared module kind", async () => {
-    const entry = await writeSource(
-      ".voidhash/paywalls/bad-import.ts",
-      ['import data from "./data.bin";', "export const d = data;", ""].join("\n"),
-    );
+  it(
+    "still fails an import of an undeclared module kind",
+    async () => {
+      const entry = await writeSource(
+        ".voidhash/paywalls/bad-import.ts",
+        ['import data from "./data.bin";', "export const d = data;", ""].join("\n"),
+      );
 
-    const error = await Effect.runPromise(
-      typecheckPaywallSources({ files: [entry], projectRoot }).pipe(Effect.flip),
-    );
-    expect(error).toBeInstanceOf(PaywallTypecheckError);
-  });
+      const error = await Effect.runPromise(
+        typecheckPaywallSources({ files: [entry], projectRoot }).pipe(Effect.flip),
+      );
+      expect(error).toBeInstanceOf(PaywallTypecheckError);
+    },
+    compilerTestTimeout,
+  );
 });

From 4ec12fa3eba2f4d63c7ac1165cea3e0d07bfe469 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 01:07:37 +0200
Subject: [PATCH 065/129] test: allow reconcile no-op fuzzing on slower runners

---
 .../src/reconcile/reconcile.test.ts           | Bin 14248 -> 14287 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/packages/mimic-schema/src/reconcile/reconcile.test.ts b/packages/mimic-schema/src/reconcile/reconcile.test.ts
index e1d2c2a4acbc1aabef6b22b8308d26d221528af9..475eaa24e1ba5a57b88d33133296c13fcd208b35 100644
GIT binary patch
delta 60
zcmZ3He?EW1d}CHF1t6F_-`IV!w5bVivO!u}YO1C}tu;`5vb>4z<Ze^>$>}C?lbcN}
OCwG|3Y(8T0gb4syQxpCG

delta 54
zcmX?~zaoFbeB;SWjNK;(@d{6lHkF<%Z^A!$y0XaRxu&9%w*YaGiOS>|Cg!ZQTnY-c
Kn_rkbX95632oxaz


From d91bb9148b4a1e4918a4e5500b82c26080bcbc61 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 01:08:21 +0200
Subject: [PATCH 066/129] ci: bound public validation concurrency

---
 .github/workflows/ci.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7ce9018f3..80790f516 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,10 +35,10 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Build
-        run: pnpm build
+        run: pnpm build --concurrency=2
 
       - name: Typecheck
-        run: pnpm typecheck
+        run: pnpm typecheck --concurrency=2
 
       - name: Test
-        run: pnpm test
+        run: pnpm test --concurrency=2

From 224f6d36c1b572658be83643aaccf663e5a90de7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 02:26:58 +0200
Subject: [PATCH 067/129] security: harden publication boundaries

---
 apps/backend/package.json                     |   1 +
 apps/backend/src/BackendApp.ts                |  44 ++--
 .../src/GooglePubSubPushVerifier.test.ts      | 103 ++++++++++
 apps/backend/src/GooglePubSubPushVerifier.ts  | 106 ++++++++++
 .../google-play-rtdn.test.ts                  | 126 ++++++++++++
 .../webhook-endpoints/google-play-rtdn.ts     |  19 ++
 .../src/security/authorization-matrix.test.ts |  39 ++++
 docs/security/backend-threat-model.md         |  76 ++++---
 .../security/endpoint-authorization-matrix.md | 119 +++++++++++
 ...tService.authorization.integration.test.ts | 177 ++++++++++++++++
 ...ficationsAuthorization.integration.test.ts | 190 ++++++++++++++++++
 pnpm-lock.yaml                                |   3 +
 selfhost/.env.example                         |   4 +
 selfhost/README.md                            |  21 ++
 selfhost/docker-compose.yml                   |   3 +
 selfhost/entry/src/config.ts                  |  87 +++++++-
 selfhost/entry/src/migrate.ts                 |   7 +-
 selfhost/entry/tests/BackendAdapters.test.ts  |  10 +-
 selfhost/entry/tests/SecurityConfig.test.ts   |  93 +++++++++
 selfhost/platform-node/src/Screenshot.ts      |  59 +++---
 .../ChromiumScreenshot.integration.test.ts    |  14 +-
 .../platform-node/tests/Screenshot.test.ts    |  42 ++++
 22 files changed, 1237 insertions(+), 106 deletions(-)
 create mode 100644 apps/backend/src/GooglePubSubPushVerifier.test.ts
 create mode 100644 apps/backend/src/GooglePubSubPushVerifier.ts
 create mode 100644 apps/backend/src/routes/webhook-endpoints/google-play-rtdn.test.ts
 create mode 100644 apps/backend/src/security/authorization-matrix.test.ts
 create mode 100644 docs/security/endpoint-authorization-matrix.md
 create mode 100644 packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
 create mode 100644 packages/core/test/services/notifications/NotificationsAuthorization.integration.test.ts
 create mode 100644 selfhost/entry/tests/SecurityConfig.test.ts
 create mode 100644 selfhost/platform-node/tests/Screenshot.test.ts

diff --git a/apps/backend/package.json b/apps/backend/package.json
index db2ed9eb6..ae01601c0 100644
--- a/apps/backend/package.json
+++ b/apps/backend/package.json
@@ -26,6 +26,7 @@
     "@workos-inc/node": "9.2.0",
     "ai": "^7.0.0",
     "effect": "catalog:",
+    "jose": "catalog:",
     "preact": "^10.25.4",
     "workers-ai-provider": "^3.0.0",
     "zod": "catalog:"
diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
index 417a40257..75e929805 100644
--- a/apps/backend/src/BackendApp.ts
+++ b/apps/backend/src/BackendApp.ts
@@ -76,10 +76,7 @@ import {
   WorkosOrgPort,
 } from "@voidhash/core/services";
 import { AnalyticsWriterService } from "@voidhash/core/services/analyticsIngest/AnalyticsWriterService";
-import {
-  createInitialPaywallDocumentInput,
-  PaywallDesignerDocument,
-} from "@voidhash/mimic-schema";
+import { createInitialPaywallDocumentInput, PaywallDesignerDocument } from "@voidhash/mimic-schema";
 import { AuthMiddleware } from "@voidhash/rpc";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
@@ -96,6 +93,7 @@ import { RpcSerialization } from "effect/unstable/rpc";
 import * as RpcServer from "effect/unstable/rpc/RpcServer";
 
 import { BackendRpcGroups as RpcGroups } from "./BackendRpcGroups.ts";
+import { GooglePubSubPushVerifierLive } from "./GooglePubSubPushVerifier.ts";
 import { BackendSnapshotHtmlRendererLive } from "./PaywallSnapshotHtmlRenderer.ts";
 
 import { AuthMiddlewareLive } from "./ApiMiddlewares.ts";
@@ -827,10 +825,7 @@ const buildBackendServiceGraph = <
   };
 };
 
-export type BackendServiceGraph<
-  RInfrastructure = never,
-  RFeatureServices = never,
-> = ReturnType<
+export type BackendServiceGraph<RInfrastructure = never, RFeatureServices = never> = ReturnType<
   typeof buildBackendServiceGraph<RInfrastructure, never, RFeatureServices>
 >;
 
@@ -847,10 +842,7 @@ export interface BackendRpcExtension<RExtensionRpcs extends Rpc.Any> {
 }
 
 /** Product feature bundle that supplies core ports, RPCs, routes, and UI capabilities. */
-export interface BackendFeatureComposition<
-  RFeatureRpcs extends Rpc.Any,
-  RFeatureServices,
-> {
+export interface BackendFeatureComposition<RFeatureRpcs extends Rpc.Any, RFeatureServices> {
   readonly group: RpcGroup.RpcGroup<RFeatureRpcs>;
   readonly runtimeCapabilities: BackendRuntimeCapabilities;
   readonly routes: <RInfrastructure>(
@@ -907,12 +899,7 @@ export const buildBackendRpcServices = <
   RExtensionRpcs extends Rpc.Any = never,
 >(
   layers: Pick<
-    BackendRuntimeLayers<
-      RInfrastructure,
-      RFeatureRpcs,
-      RFeatureServices,
-      RExtensionRpcs
-    >,
+    BackendRuntimeLayers<RInfrastructure, RFeatureRpcs, RFeatureServices, RExtensionRpcs>,
     | "auth"
     | "features"
     | "infrastructure"
@@ -931,10 +918,7 @@ export const buildBackendRpcServices = <
     FeatureServicesLayer,
     ExtensionServicesLayer,
     layers.auth,
-  ).pipe(
-    Layer.provide(DomainServicesLayer),
-    Layer.provide(SupportServicesLayer),
-  );
+  ).pipe(Layer.provide(DomainServicesLayer), Layer.provide(SupportServicesLayer));
 };
 
 /**
@@ -950,12 +934,7 @@ export const buildBackendFetch = <
   RFeatureServices = never,
   RExtensionRpcs extends Rpc.Any = never,
 >(
-  layers: BackendRuntimeLayers<
-    RInfrastructure,
-    RFeatureRpcs,
-    RFeatureServices,
-    RExtensionRpcs
-  >,
+  layers: BackendRuntimeLayers<RInfrastructure, RFeatureRpcs, RFeatureServices, RExtensionRpcs>,
 ) => {
   const graph = buildBackendServiceGraph(layers);
   const { DomainServicesLayer, RpcHandlersLayer, SupportServicesLayer } = graph;
@@ -1030,14 +1009,19 @@ export const buildBackendFetch = <
   // `HttpRouter.provideRequest` is the combinator that satisfies these
   // request-scoped requirements. The Autumn webhook handler resolves `Db` +
   // `BillingService` at request time (both part of the merged graph below);
-  // the Apple handler resolves the live public App Store service the same way.
+  // the Apple handler resolves the live public App Store service the same way;
+  // the Google handler additionally resolves its Pub/Sub OIDC verifier.
   const WebhookRoutesLayer = Layer.mergeAll(
     AppleServerToServerNotificationRouteLayer,
     GooglePlayRtdnNotificationRouteLayer,
     StripeWebhookNotificationRouteLayer,
     WorkosWebhookRouteLayer,
     layers.features.routes(graph),
-  ).pipe(HttpRouter.provideRequest(Layer.mergeAll(SupportServicesLayer, DomainServicesLayer)));
+  ).pipe(
+    HttpRouter.provideRequest(
+      Layer.mergeAll(GooglePubSubPushVerifierLive, SupportServicesLayer, DomainServicesLayer),
+    ),
+  );
 
   // Public, unauthenticated serving of code-deployed paywall artifacts
   // (deploy contract §5). A raw route like the webhooks, so its request-time
diff --git a/apps/backend/src/GooglePubSubPushVerifier.test.ts b/apps/backend/src/GooglePubSubPushVerifier.test.ts
new file mode 100644
index 000000000..0f172d777
--- /dev/null
+++ b/apps/backend/src/GooglePubSubPushVerifier.test.ts
@@ -0,0 +1,103 @@
+import { Effect } from "effect";
+import { createLocalJWKSet, exportJWK, generateKeyPair, SignJWT, type JWTPayload } from "jose";
+import { beforeAll, describe, expect, it } from "vite-plus/test";
+
+import {
+  GooglePubSubPushVerificationError,
+  makeGooglePubSubPushVerifier,
+  type GooglePubSubPushVerifierShape,
+} from "./GooglePubSubPushVerifier.ts";
+
+const audience = "https://api.example.test/google-pubsub";
+const serviceAccountEmail = "pubsub-push@example-project.iam.gserviceaccount.com";
+
+let privateKey: Awaited<ReturnType<typeof generateKeyPair>>["privateKey"];
+let verifier: GooglePubSubPushVerifierShape;
+
+beforeAll(async () => {
+  const keyPair = await generateKeyPair("RS256", { extractable: true });
+  privateKey = keyPair.privateKey;
+  const publicJwk = await exportJWK(keyPair.publicKey);
+  publicJwk.alg = "RS256";
+  publicJwk.kid = "test-key";
+  publicJwk.use = "sig";
+  verifier = makeGooglePubSubPushVerifier({
+    audience,
+    jwks: createLocalJWKSet({ keys: [publicJwk] }),
+    serviceAccountEmail,
+  });
+});
+
+const token = (claims: Partial<JWTPayload> & { email?: string; email_verified?: boolean } = {}) => {
+  const now = Math.floor(Date.now() / 1000);
+  return new SignJWT({
+    email: serviceAccountEmail,
+    email_verified: true,
+    ...claims,
+  })
+    .setProtectedHeader({ alg: "RS256", kid: "test-key", typ: "JWT" })
+    .setIssuer(claims.iss ?? "https://accounts.google.com")
+    .setAudience(claims.aud ?? audience)
+    .setSubject(claims.sub ?? "1234567890")
+    .setIssuedAt(claims.iat ?? now)
+    .setExpirationTime(claims.exp ?? now + 300)
+    .sign(privateKey);
+};
+
+const expectUnauthorized = async (authorizationHeader: string | undefined) => {
+  const error = await Effect.runPromise(verifier.verify(authorizationHeader).pipe(Effect.flip));
+  expect(error).toBeInstanceOf(GooglePubSubPushVerificationError);
+  expect(error.kind).toBe("unauthorized");
+};
+
+describe("GooglePubSubPushVerifier", () => {
+  it("accepts a Google-signed token bound to the configured audience and service account", async () => {
+    await expect(
+      Effect.runPromise(verifier.verify(`Bearer ${await token()}`)),
+    ).resolves.toBeUndefined();
+  });
+
+  it("rejects a missing or malformed bearer token", async () => {
+    await expectUnauthorized(undefined);
+    await expectUnauthorized("Basic credentials");
+    await expectUnauthorized("Bearer token with spaces");
+  });
+
+  it("rejects a token for a different audience", async () => {
+    await expectUnauthorized(`Bearer ${await token({ aud: "https://wrong.example.test" })}`);
+  });
+
+  it("rejects a token with a tampered signature", async () => {
+    const signedToken = await token();
+    const [header, payload, signature] = signedToken.split(".");
+    const tamperedSignature = `${signature?.startsWith("a") ? "b" : "a"}${signature?.slice(1)}`;
+    const tamperedToken = `${header}.${payload}.${tamperedSignature}`;
+    await expectUnauthorized(`Bearer ${tamperedToken}`);
+  });
+
+  it("rejects a token from a different issuer", async () => {
+    await expectUnauthorized(`Bearer ${await token({ iss: "https://issuer.example.test" })}`);
+  });
+
+  it("rejects a token for a different or unverified service account", async () => {
+    await expectUnauthorized(`Bearer ${await token({ email: "attacker@example.test" })}`);
+    await expectUnauthorized(`Bearer ${await token({ email_verified: false })}`);
+  });
+
+  it("rejects an expired token", async () => {
+    const now = Math.floor(Date.now() / 1000);
+    await expectUnauthorized(`Bearer ${await token({ exp: now - 1, iat: now - 600 })}`);
+  });
+
+  it("fails closed when authenticated push settings are absent", async () => {
+    const unconfigured = makeGooglePubSubPushVerifier({
+      audience: "",
+      jwks: createLocalJWKSet({ keys: [] }),
+      serviceAccountEmail: "",
+    });
+    const error = await Effect.runPromise(
+      unconfigured.verify(`Bearer ${await token()}`).pipe(Effect.flip),
+    );
+    expect(error.kind).toBe("misconfigured");
+  });
+});
diff --git a/apps/backend/src/GooglePubSubPushVerifier.ts b/apps/backend/src/GooglePubSubPushVerifier.ts
new file mode 100644
index 000000000..bd44bfab2
--- /dev/null
+++ b/apps/backend/src/GooglePubSubPushVerifier.ts
@@ -0,0 +1,106 @@
+import { Context, Data, Effect, Layer, Schema } from "effect";
+import { createRemoteJWKSet, jwtVerify, type JWTVerifyGetKey } from "jose";
+
+const GooglePubSubClaimsSchema = Schema.Struct({
+  email: Schema.String,
+  email_verified: Schema.Boolean,
+});
+
+const GOOGLE_OIDC_ISSUERS = ["accounts.google.com", "https://accounts.google.com"] as const;
+const GOOGLE_OIDC_JWKS_URL = new URL("https://www.googleapis.com/oauth2/v3/certs");
+
+export class GooglePubSubPushVerificationError extends Data.TaggedError(
+  "GooglePubSubPushVerificationError",
+)<{
+  readonly kind: "misconfigured" | "unauthorized";
+  readonly message: string;
+}> {}
+
+export interface GooglePubSubPushVerifierShape {
+  /** Verifies the authenticated Pub/Sub push bearer token and its bound identity. */
+  readonly verify: (
+    authorizationHeader: string | undefined,
+  ) => Effect.Effect<void, GooglePubSubPushVerificationError>;
+}
+
+/** Authenticates Google Pub/Sub push requests before their payload is processed. */
+export class GooglePubSubPushVerifier extends Context.Service<
+  GooglePubSubPushVerifier,
+  GooglePubSubPushVerifierShape
+>()("@voidhash/backend/GooglePubSubPushVerifier") {}
+
+export interface GooglePubSubPushVerifierOptions {
+  readonly audience: string;
+  readonly serviceAccountEmail: string;
+  readonly jwks: JWTVerifyGetKey;
+}
+
+/** Builds a verifier around an explicit JWK source for production and deterministic tests. */
+export const makeGooglePubSubPushVerifier = (
+  options: GooglePubSubPushVerifierOptions,
+): GooglePubSubPushVerifierShape => ({
+  verify: (authorizationHeader) =>
+    Effect.gen(function* () {
+      const audience = options.audience.trim();
+      const serviceAccountEmail = options.serviceAccountEmail.trim();
+      if (!audience || !serviceAccountEmail) {
+        return yield* new GooglePubSubPushVerificationError({
+          kind: "misconfigured",
+          message:
+            "Google Pub/Sub push authentication requires an audience and service-account email",
+        });
+      }
+
+      const bearerMatch = authorizationHeader?.match(/^Bearer\s+(\S+)$/i);
+      if (!bearerMatch) {
+        return yield* new GooglePubSubPushVerificationError({
+          kind: "unauthorized",
+          message: "Missing or malformed Pub/Sub bearer token",
+        });
+      }
+
+      const verification = yield* Effect.tryPromise({
+        try: () =>
+          jwtVerify(bearerMatch[1]!, options.jwks, {
+            algorithms: ["RS256"],
+            audience,
+            issuer: [...GOOGLE_OIDC_ISSUERS],
+          }),
+        catch: () =>
+          new GooglePubSubPushVerificationError({
+            kind: "unauthorized",
+            message: "Invalid Pub/Sub identity token",
+          }),
+      });
+
+      const claims = yield* Schema.decodeUnknownEffect(GooglePubSubClaimsSchema)(
+        verification.payload,
+      ).pipe(
+        Effect.mapError(
+          () =>
+            new GooglePubSubPushVerificationError({
+              kind: "unauthorized",
+              message: "Pub/Sub identity token is missing required claims",
+            }),
+        ),
+      );
+
+      if (!claims.email_verified || claims.email !== serviceAccountEmail) {
+        return yield* new GooglePubSubPushVerificationError({
+          kind: "unauthorized",
+          message: "Pub/Sub identity token does not match the configured service account",
+        });
+      }
+    }),
+});
+
+const googleOidcJwks = createRemoteJWKSet(GOOGLE_OIDC_JWKS_URL);
+
+/** Production verifier configured by the authenticated push subscription settings. */
+export const GooglePubSubPushVerifierLive = Layer.sync(GooglePubSubPushVerifier, () =>
+  makeGooglePubSubPushVerifier({
+    audience: process.env.GOOGLE_PUBSUB_PUSH_AUDIENCE ?? "",
+    jwks: googleOidcJwks,
+    serviceAccountEmail: process.env.GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL ?? "",
+  }),
+);
diff --git a/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.test.ts b/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.test.ts
new file mode 100644
index 000000000..99061e0f0
--- /dev/null
+++ b/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.test.ts
@@ -0,0 +1,126 @@
+import {
+  GooglePlayPaymentProviderService,
+  type GooglePlayPaymentProviderServiceShape,
+} from "@voidhash/core/services";
+import { Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  GooglePubSubPushVerificationError,
+  GooglePubSubPushVerifier,
+  type GooglePubSubPushVerifierShape,
+} from "../../GooglePubSubPushVerifier.ts";
+import { GooglePlayRtdnNotificationRouteLayer } from "./google-play-rtdn.ts";
+
+const path = "/api/v1/webhook-endpoints/google-play-rtdn/config-1";
+const body = {
+  message: {
+    data: btoa(JSON.stringify({ packageName: "com.example", testNotification: {} })),
+    messageId: "message-1",
+  },
+};
+
+const serve = (
+  authorization: string | undefined,
+  verifier: GooglePubSubPushVerifierShape,
+  onAccept: () => void,
+) =>
+  Effect.gen(function* () {
+    const paymentProvider: GooglePlayPaymentProviderServiceShape = {
+      acceptRtdnNotification: (input) =>
+        Effect.sync(() => {
+          onAccept();
+          expect(input.paymentProviderConfigurationId).toBe("config-1");
+          expect(input.pubsubBody).toEqual(body);
+          return {
+            accepted: true,
+            handled: true,
+            notificationType: "TEST",
+            notificationUUID: undefined,
+            subtype: undefined,
+          };
+        }),
+      processSdkTransaction: () => Effect.die("not used"),
+    };
+    const dependencies = Layer.mergeAll(
+      Layer.succeed(GooglePubSubPushVerifier, verifier),
+      Layer.succeed(GooglePlayPaymentProviderService, paymentProvider),
+    );
+    const handler = yield* HttpRouter.toHttpEffect(
+      GooglePlayRtdnNotificationRouteLayer.pipe(HttpRouter.provideRequest(dependencies)),
+    );
+    const headers = new Headers({ "content-type": "application/json" });
+    if (authorization) {
+      headers.set("authorization", authorization);
+    }
+    const response = yield* handler.pipe(
+      Effect.provideService(
+        HttpServerRequest.HttpServerRequest,
+        HttpServerRequest.fromWeb(
+          new Request(`http://localhost${path}`, {
+            body: JSON.stringify(body),
+            headers,
+            method: "POST",
+          }),
+        ),
+      ),
+    );
+    return HttpServerResponse.toWeb(response);
+  }).pipe(Effect.scoped, Effect.runPromise);
+
+describe("Google Play RTDN route authentication", () => {
+  it("rejects an unauthenticated request before processing its body", async () => {
+    let acceptCalls = 0;
+    const response = await serve(
+      undefined,
+      {
+        verify: () =>
+          Effect.fail(
+            new GooglePubSubPushVerificationError({
+              kind: "unauthorized",
+              message: "missing token",
+            }),
+          ),
+      },
+      () => {
+        acceptCalls += 1;
+      },
+    );
+
+    expect(response.status).toBe(401);
+    expect(acceptCalls).toBe(0);
+  });
+
+  it("returns a retryable error when authenticated push is not configured", async () => {
+    let acceptCalls = 0;
+    const response = await serve(
+      "Bearer token",
+      {
+        verify: () =>
+          Effect.fail(
+            new GooglePubSubPushVerificationError({
+              kind: "misconfigured",
+              message: "missing configuration",
+            }),
+          ),
+      },
+      () => {
+        acceptCalls += 1;
+      },
+    );
+
+    expect(response.status).toBe(503);
+    expect(acceptCalls).toBe(0);
+  });
+
+  it("processes a request only after caller authentication succeeds", async () => {
+    let acceptCalls = 0;
+    const response = await serve("Bearer signed-token", { verify: () => Effect.void }, () => {
+      acceptCalls += 1;
+    });
+
+    expect(response.status).toBe(200);
+    expect(acceptCalls).toBe(1);
+  });
+});
diff --git a/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts b/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts
index ed3086db2..25fd65081 100644
--- a/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts
+++ b/apps/backend/src/routes/webhook-endpoints/google-play-rtdn.ts
@@ -21,6 +21,8 @@ import {
 import { Effect, Layer, Schema } from "effect";
 import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
 
+import { GooglePubSubPushVerifier } from "../../GooglePubSubPushVerifier.ts";
+
 const GooglePlayRtdnPathParamsSchema = Schema.Struct({
   paymentProviderConfigurationId: Schema.String,
 });
@@ -46,6 +48,23 @@ const registerGooglePlayRtdnNotificationRoute = Effect.gen(function* () {
         return yield* invalidPayloadResponse;
       }
 
+      const pubSubPushVerifier = yield* GooglePubSubPushVerifier;
+      const authenticationResult = yield* Effect.result(
+        pubSubPushVerifier.verify(request.headers.authorization),
+      );
+      if (authenticationResult._tag === "Failure") {
+        const error = authenticationResult.failure;
+        const status = error.kind === "misconfigured" ? 503 : 401;
+        yield* Effect.logWarning("Google Play RTDN caller authentication failed", {
+          kind: error.kind,
+          paymentProviderConfigurationId: pathParamsResult.success.paymentProviderConfigurationId,
+        });
+        return yield* HttpServerResponse.json(
+          { error: "Google Play RTDN caller authentication failed", received: false },
+          { status },
+        );
+      }
+
       // The Pub/Sub envelope shape is validated inside the service (it owns the
       // base64/RTDN decode); here we only need the parsed JSON body.
       const bodyResult = yield* Effect.result(request.json);
diff --git a/apps/backend/src/security/authorization-matrix.test.ts b/apps/backend/src/security/authorization-matrix.test.ts
new file mode 100644
index 000000000..5e15a0a0a
--- /dev/null
+++ b/apps/backend/src/security/authorization-matrix.test.ts
@@ -0,0 +1,39 @@
+import { VoidhashV1Api } from "@voidhash/api-contracts";
+import { RpcGroups } from "@voidhash/rpc";
+import { readFileSync } from "node:fs";
+import { describe, expect, it } from "vite-plus/test";
+
+const matrix = readFileSync(
+  new URL("../../../../docs/security/endpoint-authorization-matrix.md", import.meta.url),
+  "utf8",
+);
+
+const markedBlock = (name: "HTTP" | "RPC") => {
+  const start = `<!-- ${name}_OPERATIONS_START -->`;
+  const end = `<!-- ${name}_OPERATIONS_END -->`;
+  const startIndex = matrix.indexOf(start);
+  const endIndex = matrix.indexOf(end);
+  if (startIndex === -1 || endIndex === -1 || endIndex <= startIndex) {
+    throw new Error(`Missing ${name} operation markers in authorization matrix`);
+  }
+  return matrix.slice(startIndex + start.length, endIndex);
+};
+
+const codeSpans = (input: string) =>
+  [...input.matchAll(/`([^`]+)`/g)].map((match) => match[1]!).sort();
+
+describe("endpoint authorization matrix", () => {
+  it("lists every HTTP API contract operation exactly once", () => {
+    const contractOperations = Object.entries(VoidhashV1Api.groups)
+      .flatMap(([groupName, group]) =>
+        Object.keys(group.endpoints).map((endpointName) => `${groupName}.${endpointName}`),
+      )
+      .sort();
+    expect(codeSpans(markedBlock("HTTP"))).toEqual(contractOperations);
+  });
+
+  it("lists every RPC contract operation exactly once", () => {
+    const contractOperations = [...RpcGroups.requests.keys()].sort();
+    expect(codeSpans(markedBlock("RPC"))).toEqual(contractOperations);
+  });
+});
diff --git a/docs/security/backend-threat-model.md b/docs/security/backend-threat-model.md
index 5d3df0601..e03129ec3 100644
--- a/docs/security/backend-threat-model.md
+++ b/docs/security/backend-threat-model.md
@@ -1,7 +1,7 @@
 # Backend Threat Model
 
 Status: alpha review draft  
-Last updated: 2026-07-11  
+Last updated: 2026-07-12<br>
 Scope: `apps/backend`, `apps/mimic-db`, `apps/www`, `packages/core`, and
 `selfhost`
 
@@ -131,9 +131,13 @@ Current controls:
 - Integration suites exercise forbidden access across API keys, paywalls,
   locations, perks, persons, feature flags, analytics, and AI workspace tools.
 
-Residual work: produce an endpoint-to-authorization matrix and run a beta
-cross-tenant test for every management RPC and HTTP route, including nested
-resource IDs whose project is loaded only after the first lookup.
+The machine-checked `endpoint-authorization-matrix.md` inventories every HTTP
+and RPC contract operation plus raw routes and maps each group to its principal,
+stored-resource authorization boundary, and evidence. Contract drift fails a
+backend test. Database-backed suites now exercise every experiment and push-
+notification configuration/history operation, including nested foreign IDs and
+no-mutation assertions. Remaining publication work is explicit in the matrix:
+add database-backed cross-tenant negatives for the rows still marked Unit.
 
 ## Webhooks and payment verification
 
@@ -149,20 +153,23 @@ Current controls:
 - WorkOS verifies its signed raw body and timestamp, records the external event
   ID under a uniqueness constraint, and treats processed redelivery as a no-op.
 - Apple verifies signed JWS data and application identity through the App Store
-  SDK. Google Play re-fetches authoritative purchase state before applying an
-  RTDN.
+  SDK. Google Play RTDN verifies the Pub/Sub OIDC signature, issuer, lifetime,
+  configured audience, verified email claim, and configured push service
+  account before parsing the envelope, then re-fetches authoritative purchase
+  state before applying a notification.
 - Purchase-ledger and notification tables use idempotency/uniqueness keys, and
   provider engines test duplicate delivery behavior.
 - Terminal verification/business failures are acknowledged while transient
   infrastructure failures return retryable status codes.
 
-Open publication blocker:
-
-- The Google Play RTDN route currently validates the payload and authoritative
-  Play state but does not authenticate the Pub/Sub push caller. Before public
-  beta, require and verify Pub/Sub OIDC identity (or an equivalently strong
-  per-subscription secret) and add missing, malformed, wrong-audience, and
-  replay tests.
+The Google RTDN route fails closed with a retryable response when authenticated
+push settings are absent. Verifier tests cover missing/malformed authorization,
+tampered signatures, wrong issuer/audience/service account, unverified email,
+and expired tokens. Route tests prove rejected requests cannot reach payload
+processing. Existing Google payment-provider integration tests exercise
+message-level duplicate delivery against the notification/ledger uniqueness
+gates; OIDC tokens themselves are intentionally reusable during their short
+lifetime.
 
 Beta must also close the deferred Apple signed-JWS negative and replay cases
 that currently require provider fixtures or a verification seam.
@@ -225,12 +232,22 @@ Current controls:
   infrastructure adapters outside tenant application code.
 - Paywall manifests and preview trees are schema-validated before release.
 - The runtime runs as an unprivileged user in the self-host image.
-
-Residual work: enumerate every URL Chromium may navigate to, deny private and
-link-local address ranges, apply navigation/time/resource budgets, and test
-redirect/DNS-rebinding cases. Chromium currently runs with its sandbox disabled
-inside the container, so container isolation and image patching are part of the
-security boundary and require independent review.
+- Self-host Chromium disables JavaScript, blocks service workers, switches each
+  fresh context offline, and aborts every document/resource request before
+  setting inline HTML. The Cloudflare Browser Run request rejects every external
+  request pattern. Because no outbound navigation is permitted, redirects and
+  DNS rebinding cannot reach private or link-local services.
+- Both screenshot adapters cap HTML at 4 MiB, viewport edges at 4,096 pixels,
+  scale at 4, and the rendered output at 16,777,216 pixels. Browser operations
+  have a 15-second timeout and self-host thumbnail consumption is serialized
+  with a bounded retry count.
+
+Budget unit tests cover normal and oversized inputs. The real-Chromium test
+attempts resource loads and a meta-refresh through a local redirect to the cloud
+metadata address and verifies that the test server receives no request.
+Chromium currently runs with its sandbox disabled inside the container, so
+container isolation and image patching remain part of the security boundary and
+require independent review.
 
 ## Component compiler sandbox
 
@@ -259,7 +276,8 @@ Node runtime patched.
 ## Self-host operator boundary
 
 The sample Compose defaults are for loopback evaluation only. They include
-known passwords and placeholder WorkOS credentials. Exposing that composition
+known passwords and placeholder WorkOS credentials. Compose explicitly marks
+the no-env quick start as `local-evaluation`; exposing that composition
 unchanged would compromise all stored data.
 
 Before any non-local deployment, the operator must replace every example
@@ -267,19 +285,23 @@ password, configure HTTPS at the reverse proxy, restrict MinIO/Mailpit/
 ClickHouse host ports, configure CORS and public URLs, use real WorkOS and SMTP
 credentials, back up persistent volumes, and apply host/container updates.
 
-Open publication blocker: add a production mode that refuses known example
-credentials and insecure public URLs, while retaining an explicit opt-in local
-evaluation mode for the documented quick start.
+Production mode validates configuration before migrations or the application
+start. It refuses missing and known example database, object-store, Mimic,
+WorkOS, and enabled ClickHouse credentials, and requires HTTPS for every public,
+file, Mimic, and WorkOS redirect URL. Tests cover explicit mode selection, every
+credential class, optional ClickHouse, and every URL boundary. Independent
+review must still confirm the list remains complete as new infrastructure is
+added.
 
 ## Publication risk register
 
 | ID | Severity | Status | Required evidence |
 | --- | --- | --- | --- |
-| VH-TM-001 | High | Open | Authenticate Google Pub/Sub push and pass negative/replay tests. |
-| VH-TM-002 | High | Open | Refuse self-host example credentials outside explicit local evaluation mode. |
+| VH-TM-001 | High | Mitigated, review pending | Pub/Sub OIDC negative tests and payment-ledger duplicate-delivery tests pass; deployment settings and implementation require independent review. |
+| VH-TM-002 | High | Mitigated, review pending | Production startup refuses known example credentials and insecure public URLs; configuration coverage requires independent review. |
 | VH-TM-003 | High | Mitigated, review pending | Compiler VM budget and container/network hardening pass adversarial and independent review. |
-| VH-TM-004 | High | Open | Chromium navigation/SSRF policy and resource budgets pass redirect and private-network tests. |
-| VH-TM-005 | High | Open | Endpoint authorization matrix has complete cross-tenant negative coverage. |
+| VH-TM-004 | High | Mitigated, review pending | Cloud and self-host browsers deny outbound requests and enforce time/input/output budgets; real-browser redirect/private-network coverage requires independent review. |
+| VH-TM-005 | High | Open; inventory complete | Machine-checked endpoint matrix is complete; all rows marked Unit or Gap need database-backed cross-tenant negatives. |
 | VH-TM-006 | Process gate | Open | Real beta traffic and security-log/incident review completed. |
 | VH-TM-007 | Process gate | Open | Independent reviewer signs off and residual risks have owners/deadlines. |
 
diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
new file mode 100644
index 000000000..de4d2feb5
--- /dev/null
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -0,0 +1,119 @@
+# Endpoint Authorization Matrix
+
+Status: alpha coverage inventory<br>
+Last updated: 2026-07-12
+
+This inventory covers every Community HTTP API and RPC operation plus the raw
+routes mounted by `BackendApp`. A test compares the marked operation lists with
+the live API contracts, so adding or removing a contract operation requires an
+explicit authorization review here.
+
+All management HTTP and RPC operations first require a server-established
+`AuthSession`. Resource services then authorize the organization/project loaded
+from storage; callers do not gain scope merely by supplying an ID. “Integrated”
+means the service has database-backed forbidden/cross-tenant evidence. “Unit”
+means the boundary is tested with controlled collaborators but still needs a
+database-backed cross-tenant case. “Gap” is a publication blocker.
+
+## HTTP API contract
+
+<!-- HTTP_OPERATIONS_START -->
+| Group | Operations |
+| --- | --- |
+| auth | `auth.session` |
+| api_keys | `api_keys.createSecretKey`, `api_keys.listApiKeys`, `api_keys.getApiKeyById`, `api_keys.rotateSecretKey`, `api_keys.deleteApiKey` |
+| persons | `persons.createPerson`, `persons.listPersons`, `persons.getPersonById`, `persons.getPersonByDistinctId` |
+| notifications | `notifications.sendNotification` |
+| organizations | `organizations.createOrganization` |
+| perks | `perks.listPerks` |
+| paywall_deploys | `paywall_deploys.createDeploy`, `paywall_deploys.uploadBlob`, `paywall_deploys.finalizeDeploy` |
+| paywall_locations | `paywall_locations.listPaywallLocations` |
+| schema | `schema.getSchema`, `schema.getSchemaVersion` |
+| projects | `projects.createProject`, `projects.listProjects` |
+| products | `products.listProducts` |
+| product_perks | `product_perks.listProductPerksByProductId` |
+| sdk | `sdk.getPerson`, `sdk.identifyPerson`, `sdk.syncPersonAttributes`, `sdk.syncTransaction`, `sdk.evaluateFeatureFlags`, `sdk.resolvePaywall`, `sdk.getSchema`, `sdk.registerDevice`, `sdk.refreshDevice`, `sdk.unregisterDevice` |
+| users | `users.getUser` |
+| payment_provider_configurations | `payment_provider_configurations.listPaymentProviderConfigurations` |
+| payment_provider_products | `payment_provider_products.listPaymentProviderProducts` |
+| webhooks | `webhooks.createWebhookEndpoint`, `webhooks.listWebhookEndpoints`, `webhooks.getWebhookEndpoint`, `webhooks.updateWebhookEndpoint`, `webhooks.deleteWebhookEndpoint`, `webhooks.rotateWebhookSecret`, `webhooks.testWebhookEndpoint`, `webhooks.listWebhookDeliveries`, `webhooks.getWebhookDelivery`, `webhooks.retryWebhookDelivery` |
+<!-- HTTP_OPERATIONS_END -->
+
+| Groups | Principal and authorization boundary | Evidence | Status |
+| --- | --- | --- | --- |
+| auth, users | User session; identity comes from the authenticated session, not request IDs. | `LocalUserSessionService.integration.test.ts`, `UserService.test.ts` | Unit |
+| api_keys | User/project session plus project permission; key IDs are reloaded and ownership checked. | `ApiKeyService.integration.test.ts` | Integrated |
+| persons | Project-scoped session; person/distinct IDs are resolved and checked against that project. | `PersonService.integration.test.ts` | Integrated |
+| notifications | Project ID is derived from a non-publishable authenticated session; downstream audience lookups stay project-scoped. | Notification authorization integration suite plus person/token service isolation tests | Integrated |
+| organizations, projects | User membership plus organization/project permissions. | `OrganizationService.integration.test.ts`, `ProjectService.integration.test.ts` | Integrated |
+| perks, products, product_perks | Project permission plus stored ownership of nested product/perk IDs. | `PerkService.integration.test.ts`, `ProductService.integration.test.ts`, `ProductPerkService.integration.test.ts` | Integrated |
+| paywall_deploys, paywall_locations | Project permission plus stored paywall/release/location ownership. | `PaywallDeployService.integration.test.ts`, `PaywallLocationService.integration.test.ts` | Integrated |
+| schema | Project permission before schema assembly/cache access. | `SchemaService.integration.test.ts` | Integrated |
+| sdk | Publishable-key session elevated only to its resolved project/person; submitted IDs cannot select another project. | `SdkService.integration.test.ts`, `FeatureFlagService.integration.test.ts`, purchase-processing integration suites | Integrated |
+| payment provider groups | Project permission plus stored configuration/product ownership. | Payment-provider configuration/product integration suites | Integrated |
+| webhooks | Project permission plus stored endpoint/delivery ownership. | `WebhookManagerService.integration.test.ts`, webhook delivery/dispatch integration suites | Integrated |
+
+## RPC contract
+
+<!-- RPC_OPERATIONS_START -->
+| Group | Operations |
+| --- | --- |
+| AiChat | `SaveAiChat`, `ListAiChats`, `GetAiChat`, `DeleteAiChat`, `UploadAiChatAttachment`, `RevertAiChatCheckpoint`, `CaptureAiCheckpoint` |
+| Analytics | `ListRecentAnalyticsEvents`, `QueryAnalyticsInsights` |
+| ApiKey | `CreateSecretKey`, `ListApiKeys`, `GetApiKeyById`, `RotateSecretKey`, `DeleteApiKey`, `CreateUserApiKey`, `ListUserApiKeys`, `RevokeUserApiKey` |
+| Person | `CreatePerson`, `ListPersons`, `GetPersonById`, `GetPersonByDistinctId` |
+| Experiment | `ListExperiments`, `GetExperiment`, `CreateExperiment`, `UpdateExperiment`, `ReplaceExperimentVariants`, `UpsertExperimentTreatment`, `RemoveExperimentTreatment`, `StartExperiment`, `PauseExperiment`, `ConcludeExperiment`, `ArchiveExperiment`, `RestoreExperiment`, `GetExperimentResults` |
+| FeatureFlag | `ListFeatureFlags`, `GetFeatureFlag`, `CreateFeatureFlag`, `UpdateFeatureFlag`, `ArchiveFeatureFlag`, `RestoreFeatureFlag`, `UpsertFeatureFlagOverride`, `ArchiveFeatureFlagOverride`, `ListFeatureFlagOverridesByFlag`, `ListFeatureFlagOverridesByPerson`, `UpsertFeatureFlagTarget`, `ArchiveFeatureFlagTarget`, `UpdateFeatureFlagVariants` |
+| Feedback | `SubmitFeedback` |
+| Organization | `CreateOrganization`, `UpdateOrganization`, `DeleteOrganization`, `SetOrganizationAvatar`, `RemoveOrganizationAvatar` |
+| PaymentProviderConfiguration | `ListPaymentProviderConfigurations`, `GetPaymentProviderConfiguration`, `CreatePaymentProviderConfiguration`, `UpdatePaymentProviderConfiguration`, `DeletePaymentProviderConfiguration` |
+| PaymentProviderProduct | `ListProviderProductsByProductId`, `CreatePaymentProviderProduct`, `UpdatePaymentProviderProduct`, `DeletePaymentProviderProduct`, `SetActivePaymentProviderProduct` |
+| PushNotificationConfiguration | `ListPushNotificationConfigurations`, `GetPushNotificationConfiguration`, `CreatePushNotificationConfiguration`, `UpdatePushNotificationConfiguration`, `DeletePushNotificationConfiguration` |
+| PushNotificationSend | `ListPushNotificationSends`, `GetPushNotificationSendDeliveries` |
+| PaywallAsset | `UploadPaywallAsset`, `ListPaywallAssets`, `RenamePaywallAsset`, `DeletePaywallAsset` |
+| PaywallComponent | `ListPaywallComponents`, `GetPaywallComponentVersions` |
+| PaywallDeploy | `ListPaywallDeploys`, `SetActivePaywallRelease` |
+| PaywallLocation | `ListPaywallLocations`, `CreatePaywallLocation`, `UpdatePaywallLocation`, `ArchivePaywallLocation`, `AssignPaywallLocationShowing`, `ClearPaywallLocationShowing`, `ListPaywallLocationShowings` |
+| Paywall | `ListPaywalls`, `CreatePaywall`, `RenamePaywall`, `ArchivePaywall`, `RestorePaywall`, `DeletePaywall`, `RequestPaywallEditToken`, `CreatePaywallRelease`, `PublishPaywallRelease`, `GetPaywallDraftRelease` |
+| PaywallWorkspace | `ListWorkspacePaywalls`, `ReadPaywallDocument`, `RecordComponentManifest` |
+| Perk | `ListPerks`, `CreatePerk`, `DeletePerk` |
+| ProductPerk | `ListProductPerksByProductId`, `CreateProductPerk`, `DeleteProductPerk` |
+| Product | `ListProducts`, `GetProduct`, `CreateProduct`, `UpdateProduct`, `DeleteProduct` |
+| Project | `CreateProject`, `ListProjects`, `UpdateProject`, `DeleteProject`, `SetProjectAvatar`, `RemoveProjectAvatar` |
+| User | `CurrentUser`, `SetUserAvatar`, `RemoveUserAvatar` |
+| VoidQl | `RunVoidQlQuery`, `ValidateVoidQlQuery`, `GetVoidQlSchema`, `SaveVoidQlInsight` |
+| Webhook | `ListWebhookEndpoints`, `GetWebhookEndpoint`, `CreateWebhookEndpoint`, `UpdateWebhookEndpoint`, `DeleteWebhookEndpoint`, `RotateWebhookSecret`, `TestWebhookEndpoint`, `ListWebhookDeliveries`, `GetWebhookDelivery`, `RetryWebhookDelivery` |
+<!-- RPC_OPERATIONS_END -->
+
+| RPC groups | Authorization boundary | Evidence | Status |
+| --- | --- | --- | --- |
+| Analytics, VoidQl | Project permission before query compilation/execution; compiled SQL carries a bound tenant predicate. | Analytics integration suite and VoidQL compiler/substrate tests | Integrated |
+| ApiKey, Person, Organization, PaymentProviderConfiguration, PaymentProviderProduct, PaywallDeploy, PaywallLocation, Paywall, Perk, ProductPerk, Product, Project, Webhook, FeatureFlag | Project/organization permission followed by stored ownership checks for nested IDs. | Corresponding database-backed core service integration suites | Integrated |
+| PaywallComponent | Delegates to the project-authorized deploy service. | Paywall deploy integration suite | Integrated |
+| AiChat, PaywallAsset, PaywallWorkspace | Project membership/permission and stored parent ownership are covered with controlled service tests. | AI chat, asset, workspace service and RPC tests | Unit |
+| User, Feedback | Acting user comes only from the authenticated session; no caller-selected tenant. | User and feedback service tests | Unit |
+| Experiment | Project permission is checked on the stored experiment before every aggregate, variant, treatment, and lifecycle mutation. | `ExperimentService.authorization.integration.test.ts` covers every management operation and verifies no mutation. | Integrated |
+| PushNotificationConfiguration, PushNotificationSend | Project permission plus stored configuration/send ownership; delivery lookup binds both project and parent send ID. | `NotificationsAuthorization.integration.test.ts` covers every configuration/history operation and a nested foreign send ID. | Integrated |
+
+## Raw routes
+
+| Surface | Principal or capability | Authorization/authenticity boundary | Status |
+| --- | --- | --- | --- |
+| `/rpc` | User API key, project secret key, or WorkOS session | Shared auth middleware creates the session consumed by every RPC. | Covered by RPC smoke and service evidence above |
+| `/api/mcp` | Bearer project secret key | Key lookup creates a single-project session; workspace services re-check the requested paywall/project. | Unit; cross-project AI workspace cases covered |
+| `/api/ai/chat` | Authenticated user/session token | Token verifier and project-scoped chat/workspace services. | Unit |
+| `/i/v1/capture`, `/i/v1/batch` | Publishable project token | Token resolves the project; processing rejects route/project mismatch and reserved events. | Integrated |
+| Stripe webhook | Provider signature over exact raw body and timestamp | Configuration lookup is tied to the route ID; ledger IDs deduplicate. | Integrated |
+| WorkOS webhook | Provider signature over exact raw body and timestamp | External event ID uniqueness and membership sync rules. | Integrated |
+| Apple webhook | Signed JWS and application identity | Provider configuration and purchase ledger. | Negative provider-fixture gap remains |
+| Google Play RTDN | Google OIDC signature, issuer, lifetime, audience, verified service-account email | Provider configuration, authoritative Play API re-fetch, notification/ledger uniqueness. | Integrated; independent review pending |
+| `/p/*`, `/c/*`, `/files/*` | Public content hash/object key | Only immutable public artifacts; traversal rejected and active HTML sandboxed. | Unit and release-smoke covered |
+| `/health`, `/api/health`, OpenAPI | Public | No tenant data or mutation. | Smoke covered |
+
+## Publication gaps
+
+The inventory is complete, but cross-tenant evidence is not. Before changing
+repository visibility, add database-backed negative suites for the rows still
+marked Unit, especially AI chat, paywall assets, and paywall workspace nested
+resource IDs. Apple provider-fixture negatives and the independent review remain
+separate gates in the threat model.
diff --git a/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts b/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
new file mode 100644
index 000000000..e185f04d3
--- /dev/null
+++ b/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
@@ -0,0 +1,177 @@
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { ExperimentService, FeatureFlagService } from "@voidhash/core/services";
+import {
+  Db,
+  ExperimentStatus,
+  auditLogs,
+  eq,
+  experimentTreatments,
+  experimentVariants,
+  experiments,
+} from "@voidhash/db";
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import { Effect, Layer } from "effect";
+import { expect } from "vitest";
+
+const { test } = CoreIntegrationTestHarness.make();
+
+const ServiceUnderTest = ExperimentService.layer.pipe(Layer.provide(FeatureFlagService.layer));
+const suffix = `${Date.now()}-${crypto.randomUUID()}`;
+const experimentId = `it_experiment_auth_${suffix}`;
+const controlId = `it_experiment_variant_control_${suffix}`;
+const treatmentId = `it_experiment_treatment_${suffix}`;
+const unauthorizedCreateKey = `it-experiment-create-forbidden-${suffix}`;
+
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+test(
+  "every experiment management operation rejects a cross-tenant caller before mutation",
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const service = yield* ExperimentService;
+
+    yield* db.insert(experiments).values({
+      featureFlagId: `it_feature_flag_auth_${suffix}`,
+      id: experimentId,
+      key: `it-experiment-auth-${suffix}`,
+      name: "Original experiment",
+      primaryMetricEventName: "purchase",
+      projectId: CoreTestFixture.projectId,
+      status: ExperimentStatus.draft,
+      version: 1,
+    });
+    yield* db.insert(experimentVariants).values([
+      {
+        experimentId,
+        id: controlId,
+        isControl: true,
+        key: "control",
+        name: "Control",
+        weightBps: 5_000,
+      },
+      {
+        experimentId,
+        id: `it_experiment_variant_treatment_${suffix}`,
+        isControl: false,
+        key: "treatment",
+        name: "Treatment",
+        weightBps: 5_000,
+      },
+    ]);
+    yield* db.insert(experimentTreatments).values({
+      config: {
+        paywallId: "foreign-paywall",
+        paywallLocationId: "foreign-location",
+        paywallReleaseId: "foreign-release",
+      },
+      experimentId,
+      id: treatmentId,
+      treatmentType: "paywall_location",
+      variantId: controlId,
+    });
+
+    const expectForbidden = <A, E, R>(operation: Effect.Effect<A, E, R>) =>
+      Effect.gen(function* () {
+        const error = yield* asUnauthorized(operation).pipe(Effect.flip);
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      });
+
+    yield* expectForbidden(
+      service.createExperiment({
+        key: unauthorizedCreateKey,
+        name: "Forbidden create",
+        primaryMetricEventName: "purchase",
+        projectId: CoreTestFixture.projectId,
+      }),
+    );
+    yield* expectForbidden(service.listExperiments({ projectId: CoreTestFixture.projectId }));
+    yield* expectForbidden(service.getExperiment({ id: experimentId }));
+    yield* expectForbidden(service.updateExperiment({ id: experimentId, name: "Compromised" }));
+    yield* expectForbidden(
+      service.replaceVariants({
+        experimentId,
+        variants: [{ isControl: true, key: "control", name: "Control", weightBps: 10_000 }],
+      }),
+    );
+    yield* expectForbidden(
+      service.upsertTreatment({
+        config: {
+          paywallId: "attacker-paywall",
+          paywallLocationId: "attacker-location",
+          paywallReleaseId: "attacker-release",
+        },
+        experimentId,
+        treatmentType: "paywall_location",
+        variantId: controlId,
+      }),
+    );
+    yield* expectForbidden(service.removeTreatment({ id: treatmentId }));
+    yield* expectForbidden(service.startExperiment({ id: experimentId }));
+    yield* expectForbidden(service.pauseExperiment({ id: experimentId }));
+    yield* expectForbidden(service.concludeExperiment({ id: experimentId }));
+    yield* expectForbidden(service.archiveExperiment({ id: experimentId }));
+    yield* expectForbidden(service.restoreExperiment({ id: experimentId }));
+
+    const experiment = yield* db.query.experiments.findFirst({ where: { id: experimentId } });
+    const variants = yield* db.query.experimentVariants.findMany({ where: { experimentId } });
+    const treatment = yield* db.query.experimentTreatments.findFirst({
+      where: { id: treatmentId },
+    });
+    const forbiddenCreate = yield* db.query.experiments.findFirst({
+      where: { key: unauthorizedCreateKey, projectId: CoreTestFixture.projectId },
+    });
+    expect(experiment).toMatchObject({
+      archivedAt: null,
+      name: "Original experiment",
+      status: ExperimentStatus.draft,
+    });
+    expect(variants).toHaveLength(2);
+    expect(treatment?.id).toBe(treatmentId);
+    expect(forbiddenCreate).toBeUndefined();
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        const db = yield* Db;
+        yield* db
+          .delete(auditLogs)
+          .where(eq(auditLogs.parentEntityId, experimentId))
+          .pipe(Effect.ignore);
+        yield* db.delete(auditLogs).where(eq(auditLogs.entityId, experimentId)).pipe(Effect.ignore);
+        yield* db
+          .delete(experimentTreatments)
+          .where(eq(experimentTreatments.experimentId, experimentId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(experimentVariants)
+          .where(eq(experimentVariants.experimentId, experimentId))
+          .pipe(Effect.ignore);
+        yield* db.delete(experiments).where(eq(experiments.id, experimentId)).pipe(Effect.ignore);
+      }),
+    ),
+    Effect.provide(ServiceUnderTest),
+    CoreAuthSession.authenticate(),
+  ),
+);
diff --git a/packages/core/test/services/notifications/NotificationsAuthorization.integration.test.ts b/packages/core/test/services/notifications/NotificationsAuthorization.integration.test.ts
new file mode 100644
index 000000000..168e4662e
--- /dev/null
+++ b/packages/core/test/services/notifications/NotificationsAuthorization.integration.test.ts
@@ -0,0 +1,190 @@
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import {
+  ApplePushNotificationService,
+  FirebaseCloudMessagingService,
+  NotificationsConfigurationService,
+  PushNotificationSendNotFoundError,
+  PushNotificationSendService,
+  type PushDeliveryProviderShape,
+} from "@voidhash/core/services";
+import {
+  Db,
+  PushNotificationDeliveryStatus,
+  PushNotificationSendStatus,
+  auditLogs,
+  eq,
+  pushNotificationConfigs,
+  pushNotificationDeliveries,
+  pushNotificationSends,
+} from "@voidhash/db";
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import { Effect, Layer } from "effect";
+import { expect } from "vitest";
+
+const { test } = CoreIntegrationTestHarness.make();
+const suffix = `${Date.now()}-${crypto.randomUUID()}`;
+const configurationId = `it_push_config_auth_${suffix}`;
+const sendId = `it_push_send_auth_${suffix}`;
+const deliveryId = `it_push_delivery_auth_${suffix}`;
+const foreignProjectId = `it_project_push_auth_${suffix}`;
+
+const provider = <TKind extends "fcm" | "apns">(id: TKind): PushDeliveryProviderShape<TKind> => ({
+  defaultGlobalConfiguration: () => Effect.succeed({}),
+  deliver: () => Effect.die("not used"),
+  hasPlaintextSecret: () => false,
+  id,
+  title: id,
+  toReadDto: () => ({}),
+  validateGlobalConfiguration: (configuration) =>
+    Effect.succeed({ parsedConfiguration: configuration, pushProviderKey: id }),
+});
+
+const ProviderStubs = Layer.merge(
+  Layer.succeed(FirebaseCloudMessagingService, provider("fcm")),
+  Layer.succeed(ApplePushNotificationService, provider("apns")),
+);
+const ConfigurationServiceUnderTest = NotificationsConfigurationService.layer({
+  requireEncryption: Effect.succeed(false),
+}).pipe(Layer.provide(ProviderStubs));
+const ServicesUnderTest = Layer.merge(
+  ConfigurationServiceUnderTest,
+  PushNotificationSendService.layer,
+);
+
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+test(
+  "push configuration and send-history operations enforce project ownership",
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const configurations = yield* NotificationsConfigurationService;
+    const sends = yield* PushNotificationSendService;
+
+    yield* db.insert(pushNotificationConfigs).values({
+      configuration: { secret: "must-not-leak" },
+      enabled: false,
+      id: configurationId,
+      name: "Original configuration",
+      projectId: CoreTestFixture.projectId,
+      providerId: "test",
+      pushProviderKey: `test-provider-key-${suffix}`,
+    });
+    yield* db.insert(pushNotificationSends).values({
+      deviceCount: 1,
+      failedCount: 0,
+      id: sendId,
+      message: { body: "private", title: "Private" },
+      projectId: foreignProjectId,
+      requestedDistinctIds: [],
+      requestedPersonIds: ["foreign-person"],
+      skippedCount: 0,
+      status: PushNotificationSendStatus.Pending,
+      succeededCount: 0,
+      unresolvedDistinctIds: [],
+    });
+    yield* db.insert(pushNotificationDeliveries).values({
+      attemptCount: 0,
+      id: deliveryId,
+      maxAttempts: 5,
+      personId: "foreign-person",
+      projectId: foreignProjectId,
+      provider: "fcm",
+      pushDeviceTokenId: `it_push_token_auth_${suffix}`,
+      pushNotificationSendId: sendId,
+      status: PushNotificationDeliveryStatus.Pending,
+    });
+
+    const expectForbidden = <A, E, R>(operation: Effect.Effect<A, E, R>) =>
+      Effect.gen(function* () {
+        const error = yield* asUnauthorized(operation).pipe(Effect.flip);
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      });
+
+    yield* expectForbidden(
+      configurations.getPushNotificationConfigurations(CoreTestFixture.projectId),
+    );
+    yield* expectForbidden(configurations.getPushNotificationConfigurationById(configurationId));
+    yield* expectForbidden(
+      configurations.createPushNotificationConfiguration({
+        projectId: CoreTestFixture.projectId,
+        providerId: "fcm",
+      }),
+    );
+    yield* expectForbidden(
+      configurations.updatePushNotificationConfiguration({
+        configuration: { secret: "attacker" },
+        enabled: false,
+        id: configurationId,
+        name: "Compromised",
+      }),
+    );
+    yield* expectForbidden(
+      configurations.deletePushNotificationConfiguration({
+        pushNotificationConfigurationId: configurationId,
+      }),
+    );
+    yield* expectForbidden(sends.listSends({ projectId: foreignProjectId }));
+    yield* expectForbidden(sends.getSendDeliveries({ projectId: foreignProjectId, sendId }));
+
+    const nestedLookupError = yield* sends
+      .getSendDeliveries({ projectId: CoreTestFixture.projectId, sendId })
+      .pipe(Effect.flip);
+    expect(nestedLookupError).toBeInstanceOf(PushNotificationSendNotFoundError);
+
+    const configuration = yield* db.query.pushNotificationConfigs.findFirst({
+      where: { id: configurationId },
+    });
+    expect(configuration).toMatchObject({
+      deletedAt: null,
+      enabled: false,
+      name: "Original configuration",
+    });
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        const db = yield* Db;
+        yield* db
+          .delete(pushNotificationDeliveries)
+          .where(eq(pushNotificationDeliveries.id, deliveryId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(pushNotificationSends)
+          .where(eq(pushNotificationSends.id, sendId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(auditLogs)
+          .where(eq(auditLogs.entityId, configurationId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(pushNotificationConfigs)
+          .where(eq(pushNotificationConfigs.id, configurationId))
+          .pipe(Effect.ignore);
+      }),
+    ),
+    Effect.provide(ServicesUnderTest),
+    CoreAuthSession.authenticate(),
+  ),
+);
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4fc1429eb..e01f258a1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -288,6 +288,9 @@ importers:
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
+      jose:
+        specifier: 'catalog:'
+        version: 6.1.3
       preact:
         specifier: ^10.25.4
         version: 10.29.2
diff --git a/selfhost/.env.example b/selfhost/.env.example
index 713d9b105..052459d42 100644
--- a/selfhost/.env.example
+++ b/selfhost/.env.example
@@ -1,3 +1,4 @@
+SELFHOST_MODE=production
 DATABASE_USERNAME=voidhash
 DATABASE_PASSWORD=replace-with-a-random-password
 DATABASE_NAME=voidhash
@@ -27,6 +28,9 @@ WORKOS_COOKIE_NAME=wos-session
 WORKOS_COOKIE_PASSWORD=replace-with-at-least-32-random-characters
 WORKOS_REDIRECT_URI=http://localhost:5001/api/auth/callback
 WORKOS_WEBHOOK_SECRET=whsec_replace-me
+# Required when Google Play RTDN is enabled. These must match the Pub/Sub push subscription.
+GOOGLE_PUBSUB_PUSH_AUDIENCE=
+GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL=
 # Optional offline Enterprise activation; configure the token and issuer verification key together.
 VOIDHASH_LICENSE_KEY=
 VOIDHASH_LICENSE_PUBLIC_KEY=
diff --git a/selfhost/README.md b/selfhost/README.md
index 3f6bee161..b68288445 100644
--- a/selfhost/README.md
+++ b/selfhost/README.md
@@ -26,6 +26,14 @@ credentials, replace every example password, and run the same command with
 the placeholder defaults only keep the unauthenticated API, health checks, and
 Mimic operator path available for evaluation.
 
+The no-env quick start explicitly selects `SELFHOST_MODE=local-evaluation`
+inside Compose and is safe only on loopback. `selfhost/.env.example` selects
+`SELFHOST_MODE=production`; in that mode the migration and application refuse
+to start if database, object-store, Mimic, WorkOS, or enabled ClickHouse
+credentials are missing or still use known examples. Production mode also
+requires HTTPS public, file, Mimic, and WorkOS redirect URLs. Keep production
+mode enabled for every network-accessible deployment.
+
 To enable durable analytics, start the optional profile and tell the application
 to use its private-network HTTP endpoint:
 
@@ -53,6 +61,19 @@ When running the Node entry outside its image, set `CHROMIUM_EXECUTABLE_PATH` to
 a compatible Chromium executable to enable paywall thumbnails; the remaining
 runtime stays available when it is unset.
 
+### Google Play RTDN
+
+Google Play Real-time developer notifications must use an authenticated Pub/Sub
+push subscription. Configure its push authentication service account and token
+audience, then set `GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL` and
+`GOOGLE_PUBSUB_PUSH_AUDIENCE` to those exact values in `selfhost/.env`. The push
+endpoint is
+`/api/v1/webhook-endpoints/google-play-rtdn/{paymentProviderConfigurationId}`.
+The backend verifies Google's signature, issuer, expiration, audience, verified
+email claim, and service-account identity before reading the Pub/Sub envelope;
+missing authentication is rejected and missing server configuration fails
+closed with a retryable response.
+
 ## Smoke test
 
 From a workspace checkout with dependencies installed:
diff --git a/selfhost/docker-compose.yml b/selfhost/docker-compose.yml
index 60e5b1866..6281abc99 100644
--- a/selfhost/docker-compose.yml
+++ b/selfhost/docker-compose.yml
@@ -106,6 +106,7 @@ services:
     <<: *entry-image
     command: ["./node_modules/.bin/tsx", "src/migrate.ts"]
     environment: &database-environment
+      SELFHOST_MODE: ${SELFHOST_MODE:-local-evaluation}
       DATABASE_HOST: postgres
       DATABASE_PORT: 5432
       DATABASE_USERNAME: ${DATABASE_USERNAME:-voidhash}
@@ -185,6 +186,8 @@ services:
       WORKOS_COOKIE_PASSWORD: ${WORKOS_COOKIE_PASSWORD:-selfhost-development-cookie-password-change-me}
       WORKOS_REDIRECT_URI: ${WORKOS_REDIRECT_URI:-http://localhost:5001/api/auth/callback}
       WORKOS_WEBHOOK_SECRET: ${WORKOS_WEBHOOK_SECRET:-whsec_selfhost_not_configured}
+      GOOGLE_PUBSUB_PUSH_AUDIENCE: ${GOOGLE_PUBSUB_PUSH_AUDIENCE:-}
+      GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL: ${GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL:-}
       ENCRYPTION_KEY: ${ENCRYPTION_KEY:-}
       APNS_DELIVERY_ENABLED: ${APNS_DELIVERY_ENABLED:-false}
       EXCHANGE_RATE_API_KEY: ${EXCHANGE_RATE_API_KEY:-}
diff --git a/selfhost/entry/src/config.ts b/selfhost/entry/src/config.ts
index 510a06706..39c4dec36 100644
--- a/selfhost/entry/src/config.ts
+++ b/selfhost/entry/src/config.ts
@@ -24,12 +24,85 @@ const optionalBooleanFromEnv = (name: string): boolean | undefined => {
 const requiredInProduction = (name: string, developmentFallback: string): string => {
   const value = process.env[name]?.trim();
   if (value) return value;
-  if (process.env.NODE_ENV === "production") {
+  if (readSelfhostMode() === "production") {
     throw new Error(`${name} is required in production`);
   }
   return developmentFallback;
 };
 
+export type SelfhostMode = "local-evaluation" | "production";
+
+const readSelfhostMode = (): SelfhostMode => {
+  const mode = process.env.SELFHOST_MODE?.trim();
+  if (mode === "local-evaluation" || mode === "production") return mode;
+  throw new Error("SELFHOST_MODE must be explicitly set to local-evaluation or production");
+};
+
+const isExampleSecret = (value: string | undefined): boolean => {
+  const normalized = value?.trim().toLowerCase();
+  return (
+    !normalized ||
+    normalized === "password" ||
+    normalized.includes("not_configured") ||
+    normalized.includes("change-me") ||
+    normalized.includes("replace-me") ||
+    normalized.startsWith("replace-with-")
+  );
+};
+
+const isHttpsUrl = (value: string | undefined): boolean => {
+  if (!value) return false;
+  try {
+    return new URL(value).protocol === "https:";
+  } catch {
+    return false;
+  }
+};
+
+/** Refuses evaluation credentials and insecure public URLs in production mode. */
+export const validateSelfhostSecurityConfig = (): SelfhostMode => {
+  const mode = readSelfhostMode();
+  if (mode === "local-evaluation") return mode;
+
+  const unsafeSettings: Array<string> = [];
+  const requiredSecrets = [
+    "DATABASE_PASSWORD",
+    "MIMIC_ROOT_PASSWORD",
+    "S3_SECRET_ACCESS_KEY",
+    "WORKOS_API_KEY",
+    "WORKOS_CLIENT_ID",
+    "WORKOS_COOKIE_PASSWORD",
+    "WORKOS_WEBHOOK_SECRET",
+  ];
+  if (process.env.CLICKHOUSE_URL?.trim()) {
+    requiredSecrets.push(
+      "CLICKHOUSE_ADMIN_PASSWORD",
+      "CLICKHOUSE_PASSWORD",
+      "CLICKHOUSE_RO_PASSWORD",
+      "CLICKHOUSE_ANALYTICS_QUERY_PASSWORD",
+    );
+  }
+  for (const name of requiredSecrets) {
+    if (isExampleSecret(process.env[name])) unsafeSettings.push(name);
+  }
+
+  for (const name of [
+    "PUBLIC_BASE_URL",
+    "PUBLIC_FILES_BASE_URL",
+    "MIMIC_PUBLIC_BASE_URL",
+    "WORKOS_REDIRECT_URI",
+  ]) {
+    if (!isHttpsUrl(process.env[name])) unsafeSettings.push(name);
+  }
+
+  if (unsafeSettings.length > 0) {
+    throw new Error(
+      `Production self-host security validation failed for: ${unsafeSettings.join(", ")}`,
+    );
+  }
+  return mode;
+};
+
 /** WorkOS credentials supplied by a Community Edition operator. */
 export interface SelfhostWorkosConfig {
   readonly apiKey: string;
@@ -127,8 +200,7 @@ export const getSelfhostSmtpConfig = (): SmtpMailerConfig => {
     port: positiveIntegerFromEnv("SMTP_PORT", 1025),
     requireTls: optionalBooleanFromEnv("SMTP_REQUIRE_TLS") ?? false,
     secure: optionalBooleanFromEnv("SMTP_SECURE") ?? false,
-    tlsRejectUnauthorized:
-      optionalBooleanFromEnv("SMTP_TLS_REJECT_UNAUTHORIZED") ?? true,
+    tlsRejectUnauthorized: optionalBooleanFromEnv("SMTP_TLS_REJECT_UNAUTHORIZED") ?? true,
     verifyOnStart: optionalBooleanFromEnv("SMTP_VERIFY_ON_START") ?? false,
     ...(username === undefined ? {} : { username }),
     ...(password === undefined ? {} : { password: Redacted.make(password) }),
@@ -137,6 +209,7 @@ export const getSelfhostSmtpConfig = (): SmtpMailerConfig => {
 
 /** Reads and validates the complete single-process runtime configuration. */
 export const getSelfhostRuntimeConfig = (): SelfhostRuntimeConfig => {
+  validateSelfhostSecurityConfig();
   const publicBaseUrl = process.env.PUBLIC_BASE_URL?.trim() || "http://localhost:5001";
   const endpoint = process.env.S3_ENDPOINT?.trim() || "http://127.0.0.1:9000";
   const region = process.env.S3_REGION?.trim() || "us-east-1";
@@ -158,8 +231,7 @@ export const getSelfhostRuntimeConfig = (): SelfhostRuntimeConfig => {
     },
     database: getSelfhostDatabaseConfig(),
     ...(clickhouse === undefined ? {} : { clickhouse }),
-    componentCompilerUrl:
-      process.env.COMPONENT_COMPILER_URL?.trim() || "http://127.0.0.1:5002",
+    componentCompilerUrl: process.env.COMPONENT_COMPILER_URL?.trim() || "http://127.0.0.1:5002",
     host: process.env.HOST?.trim() || "0.0.0.0",
     mailer: getSelfhostSmtpConfig(),
     port: positiveIntegerFromEnv("PORT", 5001),
@@ -177,10 +249,7 @@ export const getSelfhostRuntimeConfig = (): SelfhostRuntimeConfig => {
         "WORKOS_COOKIE_PASSWORD",
         "selfhost-development-cookie-password-change-me",
       ),
-      webhookSecret: requiredInProduction(
-        "WORKOS_WEBHOOK_SECRET",
-        "whsec_selfhost_not_configured",
-      ),
+      webhookSecret: requiredInProduction("WORKOS_WEBHOOK_SECRET", "whsec_selfhost_not_configured"),
     },
   };
 };
diff --git a/selfhost/entry/src/migrate.ts b/selfhost/entry/src/migrate.ts
index ad54e2492..2ef712035 100644
--- a/selfhost/entry/src/migrate.ts
+++ b/selfhost/entry/src/migrate.ts
@@ -3,13 +3,18 @@ import { runAppDatabaseMigrations } from "@voidhash/db/migrations";
 import { Effect, Layer } from "effect";
 
 import { migrateSelfhostClickhouse } from "./backend/Clickhouse.ts";
-import { getSelfhostClickhouseConfig, getSelfhostDatabaseConfig } from "./config.ts";
+import {
+  getSelfhostClickhouseConfig,
+  getSelfhostDatabaseConfig,
+  validateSelfhostSecurityConfig,
+} from "./config.ts";
 import { getMimicNodeConfig } from "./mimic/config.ts";
 import { makeMimicNodeHostLive } from "./mimic/MimicNode.ts";
 
 NodeRuntime.runMain(
   Effect.scoped(
     Effect.gen(function* () {
+      validateSelfhostSecurityConfig();
       const result = yield* runAppDatabaseMigrations(getSelfhostDatabaseConfig());
       yield* Layer.build(makeMimicNodeHostLive(getMimicNodeConfig()));
       yield* migrateSelfhostClickhouse(getSelfhostClickhouseConfig());
diff --git a/selfhost/entry/tests/BackendAdapters.test.ts b/selfhost/entry/tests/BackendAdapters.test.ts
index 4950c17e2..d65ae834b 100644
--- a/selfhost/entry/tests/BackendAdapters.test.ts
+++ b/selfhost/entry/tests/BackendAdapters.test.ts
@@ -1,6 +1,6 @@
 import { ProjectSchemaCache } from "@voidhash/core/services";
 import { Effect, Redacted } from "effect";
-import { afterEach, describe, expect, it } from "vitest";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
 
 import { MemoryProjectSchemaCacheLive } from "../src/backend/ProjectSchemaCache.ts";
 import { getSelfhostRuntimeConfig } from "../src/config.ts";
@@ -11,6 +11,10 @@ afterEach(() => {
   process.env = { ...originalEnvironment };
 });
 
+beforeEach(() => {
+  process.env.SELFHOST_MODE = "local-evaluation";
+});
+
 describe("self-host runtime configuration", () => {
   it("uses local development defaults", () => {
     delete process.env.NODE_ENV;
@@ -75,9 +79,10 @@ describe("self-host runtime configuration", () => {
 
   it("requires BYO WorkOS credentials in production", () => {
     process.env.NODE_ENV = "production";
+    process.env.SELFHOST_MODE = "production";
     delete process.env.WORKOS_API_KEY;
 
-    expect(() => getSelfhostRuntimeConfig()).toThrow("WORKOS_API_KEY is required in production");
+    expect(() => getSelfhostRuntimeConfig()).toThrow("WORKOS_API_KEY");
   });
 
   it("supports an explicit plaintext connection for an internal Compose database", () => {
@@ -102,7 +107,6 @@ describe("self-host runtime configuration", () => {
       readWrite: { username: "voidhash_app" },
     });
   });
-
 });
 
 describe("memory project schema cache", () => {
diff --git a/selfhost/entry/tests/SecurityConfig.test.ts b/selfhost/entry/tests/SecurityConfig.test.ts
new file mode 100644
index 000000000..ac9f1f104
--- /dev/null
+++ b/selfhost/entry/tests/SecurityConfig.test.ts
@@ -0,0 +1,93 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { validateSelfhostSecurityConfig } from "../src/config.ts";
+
+const validProductionEnvironment = {
+  CLICKHOUSE_URL: "",
+  DATABASE_PASSWORD: "database-secret",
+  MIMIC_PUBLIC_BASE_URL: "https://mimic.example.test",
+  MIMIC_ROOT_PASSWORD: "mimic-secret",
+  PUBLIC_BASE_URL: "https://app.example.test",
+  PUBLIC_FILES_BASE_URL: "https://files.example.test",
+  S3_SECRET_ACCESS_KEY: "object-store-secret",
+  SELFHOST_MODE: "production",
+  WORKOS_API_KEY: "sk_test_configured",
+  WORKOS_CLIENT_ID: "client_configured",
+  WORKOS_COOKIE_PASSWORD: "cookie-secret-with-sufficient-entropy",
+  WORKOS_REDIRECT_URI: "https://app.example.test/api/auth/callback",
+  WORKOS_WEBHOOK_SECRET: "whsec_configured",
+} as const;
+
+const stubEnvironment = (environment: Record<string, string>) => {
+  for (const [name, value] of Object.entries(environment)) {
+    vi.stubEnv(name, value);
+  }
+};
+
+afterEach(() => {
+  vi.unstubAllEnvs();
+});
+
+describe("validateSelfhostSecurityConfig", () => {
+  it("requires operators to select a mode explicitly", () => {
+    vi.stubEnv("SELFHOST_MODE", "");
+    expect(() => validateSelfhostSecurityConfig()).toThrow(/SELFHOST_MODE/);
+  });
+
+  it("allows the documented local evaluation defaults only in evaluation mode", () => {
+    vi.stubEnv("SELFHOST_MODE", "local-evaluation");
+    expect(validateSelfhostSecurityConfig()).toBe("local-evaluation");
+  });
+
+  it("treats local evaluation as authoritative when NODE_ENV is production", () => {
+    vi.stubEnv("NODE_ENV", "production");
+    vi.stubEnv("SELFHOST_MODE", "local-evaluation");
+    expect(validateSelfhostSecurityConfig()).toBe("local-evaluation");
+  });
+
+  it("accepts non-example credentials and HTTPS URLs in production mode", () => {
+    stubEnvironment(validProductionEnvironment);
+    expect(validateSelfhostSecurityConfig()).toBe("production");
+  });
+
+  it.each([
+    "DATABASE_PASSWORD",
+    "MIMIC_ROOT_PASSWORD",
+    "S3_SECRET_ACCESS_KEY",
+    "WORKOS_API_KEY",
+    "WORKOS_CLIENT_ID",
+    "WORKOS_COOKIE_PASSWORD",
+    "WORKOS_WEBHOOK_SECRET",
+  ])("rejects an absent or example %s in production mode", (name) => {
+    stubEnvironment(validProductionEnvironment);
+    vi.stubEnv(name, "password");
+    expect(() => validateSelfhostSecurityConfig()).toThrow(name);
+  });
+
+  it("rejects the local-evaluation cookie placeholder in production mode", () => {
+    stubEnvironment(validProductionEnvironment);
+    vi.stubEnv("WORKOS_COOKIE_PASSWORD", "selfhost-development-cookie-password-change-me");
+    expect(() => validateSelfhostSecurityConfig()).toThrow("WORKOS_COOKIE_PASSWORD");
+  });
+
+  it("requires every enabled ClickHouse role to have a non-example password", () => {
+    stubEnvironment(validProductionEnvironment);
+    vi.stubEnv("CLICKHOUSE_URL", "http://clickhouse:8123");
+    vi.stubEnv("CLICKHOUSE_ADMIN_PASSWORD", "configured");
+    vi.stubEnv("CLICKHOUSE_PASSWORD", "configured");
+    vi.stubEnv("CLICKHOUSE_RO_PASSWORD", "configured");
+    vi.stubEnv("CLICKHOUSE_ANALYTICS_QUERY_PASSWORD", "password");
+    expect(() => validateSelfhostSecurityConfig()).toThrow("CLICKHOUSE_ANALYTICS_QUERY_PASSWORD");
+  });
+
+  it.each([
+    "PUBLIC_BASE_URL",
+    "PUBLIC_FILES_BASE_URL",
+    "MIMIC_PUBLIC_BASE_URL",
+    "WORKOS_REDIRECT_URI",
+  ])("rejects a non-HTTPS %s in production mode", (name) => {
+    stubEnvironment(validProductionEnvironment);
+    vi.stubEnv(name, "http://localhost:5001");
+    expect(() => validateSelfhostSecurityConfig()).toThrow(name);
+  });
+});
diff --git a/selfhost/platform-node/src/Screenshot.ts b/selfhost/platform-node/src/Screenshot.ts
index c48d1f39b..7e5be28f6 100644
--- a/selfhost/platform-node/src/Screenshot.ts
+++ b/selfhost/platform-node/src/Screenshot.ts
@@ -16,6 +16,8 @@ export interface ChromiumScreenshotConfig {
   readonly maxWidth?: number;
   readonly maxHeight?: number;
   readonly maxDeviceScaleFactor?: number;
+  readonly maxHtmlBytes?: number;
+  readonly maxRenderedPixels?: number;
 }
 
 const screenshotError = (operation: string, cause: unknown) =>
@@ -24,22 +26,21 @@ const screenshotError = (operation: string, cause: unknown) =>
 const positiveInteger = (value: number, maximum: number): boolean =>
   Number.isInteger(value) && value > 0 && value <= maximum;
 
-const validateOptions = (
+/** Validates screenshot memory and viewport budgets before Chromium is invoked. */
+export const validateChromiumScreenshotOptions = (
   options: ScreenshotOptions,
   config: ChromiumScreenshotConfig,
 ): Effect.Effect<void, ScreenshotError> => {
   const maxWidth = config.maxWidth ?? 4_096;
   const maxHeight = config.maxHeight ?? 4_096;
   const maxScale = config.maxDeviceScaleFactor ?? 4;
+  const maxHtmlBytes = config.maxHtmlBytes ?? 4 * 1_024 * 1_024;
+  const maxRenderedPixels = config.maxRenderedPixels ?? 16_777_216;
   if (!positiveInteger(options.width, maxWidth)) {
-    return Effect.fail(
-      screenshotError("validate", `width must be between 1 and ${maxWidth}`),
-    );
+    return Effect.fail(screenshotError("validate", `width must be between 1 and ${maxWidth}`));
   }
   if (!positiveInteger(options.height, maxHeight)) {
-    return Effect.fail(
-      screenshotError("validate", `height must be between 1 and ${maxHeight}`),
-    );
+    return Effect.fail(screenshotError("validate", `height must be between 1 and ${maxHeight}`));
   }
   if (
     !Number.isFinite(options.deviceScaleFactor) ||
@@ -47,21 +48,24 @@ const validateOptions = (
     options.deviceScaleFactor > maxScale
   ) {
     return Effect.fail(
-      screenshotError(
-        "validate",
-        `deviceScaleFactor must be between 1 and ${maxScale}`,
-      ),
+      screenshotError("validate", `deviceScaleFactor must be between 1 and ${maxScale}`),
+    );
+  }
+  if (new TextEncoder().encode(options.html).byteLength > maxHtmlBytes) {
+    return Effect.fail(screenshotError("validate", `html must be at most ${maxHtmlBytes} bytes`));
+  }
+  const renderedPixels =
+    options.width * options.height * options.deviceScaleFactor * options.deviceScaleFactor;
+  if (renderedPixels > maxRenderedPixels) {
+    return Effect.fail(
+      screenshotError("validate", `rendered image must be at most ${maxRenderedPixels} pixels`),
     );
   }
   return Effect.void;
 };
 
-const render = (
-  browser: Browser,
-  config: ChromiumScreenshotConfig,
-  options: ScreenshotOptions,
-) =>
-  validateOptions(options, config).pipe(
+const render = (browser: Browser, config: ChromiumScreenshotConfig, options: ScreenshotOptions) =>
+  validateChromiumScreenshotOptions(options, config).pipe(
     Effect.andThen(
       Effect.acquireUseRelease(
         Effect.tryPromise({
@@ -70,15 +74,16 @@ const render = (
               viewport: { width: Math.floor(options.width), height: Math.floor(options.height) },
               deviceScaleFactor: options.deviceScaleFactor,
               javaScriptEnabled: false,
+              serviceWorkers: "block",
             }),
           catch: (cause) => screenshotError("openContext", cause),
         }),
         (context) =>
           Effect.tryPromise({
             try: async () => {
+              await context.setOffline(true);
               const page = await context.newPage();
-              await page.route("http://**/*", (route) => route.abort("blockedbyclient"));
-              await page.route("https://**/*", (route) => route.abort("blockedbyclient"));
+              await page.route("**/*", (route) => route.abort("blockedbyclient"));
               await page.setContent(options.html, {
                 waitUntil: "load",
                 timeout: config.timeoutMillis ?? 15_000,
@@ -106,12 +111,8 @@ const render = (
     ),
   );
 
-const makeRenderer = (
-  browser: Browser,
-  config: ChromiumScreenshotConfig,
-): ScreenshotShape => ({
-  renderPng: (options) =>
-    PlatformRuntime.pipe(Effect.andThen(render(browser, config, options))),
+const makeRenderer = (browser: Browser, config: ChromiumScreenshotConfig): ScreenshotShape => ({
+  renderPng: (options) => PlatformRuntime.pipe(Effect.andThen(render(browser, config, options))),
 });
 
 /** Chromium-backed PNG screenshot layer with network and JavaScript disabled. */
@@ -124,13 +125,9 @@ export const ChromiumScreenshotLive = (
       Effect.tryPromise({
         try: () =>
           chromium.launch({
-            executablePath:
-              config.executablePath ?? process.env.CHROMIUM_EXECUTABLE_PATH,
+            executablePath: config.executablePath ?? process.env.CHROMIUM_EXECUTABLE_PATH,
             headless: true,
-            args: [
-              "--disable-dev-shm-usage",
-              ...(config.disableSandbox ? ["--no-sandbox"] : []),
-            ],
+            args: ["--disable-dev-shm-usage", ...(config.disableSandbox ? ["--no-sandbox"] : [])],
           }),
         catch: (cause) => screenshotError("launch", cause),
       }),
diff --git a/selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts b/selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts
index f59c09ccc..3a14b15e4 100644
--- a/selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts
+++ b/selfhost/platform-node/tests/ChromiumScreenshot.integration.test.ts
@@ -11,8 +11,7 @@ const executablePath =
   "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome";
 const screenshotLayer = () =>
   Layer.merge(ChromiumScreenshotLive({ executablePath }), NodePlatformRuntimeLive);
-const describeChromium =
-  process.env.PLATFORM_NODE_CHROMIUM_TEST === "1" ? describe : describe.skip;
+const describeChromium = process.env.PLATFORM_NODE_CHROMIUM_TEST === "1" ? describe : describe.skip;
 
 const pngDimensions = (png: Uint8Array) => {
   const view = new DataView(png.buffer, png.byteOffset, png.byteLength);
@@ -37,11 +36,11 @@ describeChromium("Chromium screenshot renderer", () => {
     expect(pngDimensions(png)).toEqual({ width: 320, height: 180 });
   });
 
-  it("rejects external requests from rendered documents", async () => {
+  it("blocks resource loads and redirecting navigation before any network access", async () => {
     let requestCount = 0;
     const server = createServer((_request, response) => {
       requestCount += 1;
-      response.writeHead(200, { "content-type": "image/png" });
+      response.writeHead(302, { location: "http://169.254.169.254/latest/meta-data/" });
       response.end();
     });
     await new Promise<void>((resolve, reject) => {
@@ -59,7 +58,12 @@ describeChromium("Chromium screenshot renderer", () => {
         Effect.gen(function* () {
           const screenshot = yield* Screenshot;
           return yield* screenshot.renderPng({
-            html: `<!doctype html><img src="${url}"><script>fetch("${url}")</script>`,
+            html: `<!doctype html>
+              <meta http-equiv="refresh" content="0;url=${url}">
+              <style>@import url("${url}");</style>
+              <img src="${url}">
+              <iframe src="${url}"></iframe>
+              <script>fetch("${url}")</script>`,
             width: 40,
             height: 30,
             deviceScaleFactor: 1,
diff --git a/selfhost/platform-node/tests/Screenshot.test.ts b/selfhost/platform-node/tests/Screenshot.test.ts
new file mode 100644
index 000000000..56a24f295
--- /dev/null
+++ b/selfhost/platform-node/tests/Screenshot.test.ts
@@ -0,0 +1,42 @@
+import { ScreenshotError } from "@voidhash/platform/Screenshot";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { validateChromiumScreenshotOptions } from "../src/Screenshot.ts";
+
+const normalScreenshot = {
+  deviceScaleFactor: 2,
+  height: 812,
+  html: "<!doctype html><p>Paywall</p>",
+  width: 375,
+};
+
+describe("Chromium screenshot budgets", () => {
+  it("accepts a normal phone-sized render", async () => {
+    await expect(
+      Effect.runPromise(validateChromiumScreenshotOptions(normalScreenshot, {})),
+    ).resolves.toBeUndefined();
+  });
+
+  it("rejects HTML over the configured byte budget", async () => {
+    const error = await Effect.runPromise(
+      validateChromiumScreenshotOptions(
+        { ...normalScreenshot, html: "12345" },
+        { maxHtmlBytes: 4 },
+      ).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(ScreenshotError);
+    expect(error.operation).toBe("validate");
+  });
+
+  it("rejects a viewport and scale combination over the pixel budget", async () => {
+    const error = await Effect.runPromise(
+      validateChromiumScreenshotOptions(
+        { ...normalScreenshot, deviceScaleFactor: 4, height: 4_096, width: 4_096 },
+        {},
+      ).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(ScreenshotError);
+    expect(error.operation).toBe("validate");
+  });
+});

From 1d1ba2b9fdb2f1c4e2e33cb2796ed6e1cdc23e07 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 02:37:29 +0200
Subject: [PATCH 068/129] ci: remove secret-scan false positives

---
 docs/security/endpoint-authorization-matrix.md | 2 +-
 selfhost/entry/tests/SecurityConfig.test.ts    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index de4d2feb5..cfd1b0277 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -106,7 +106,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Stripe webhook | Provider signature over exact raw body and timestamp | Configuration lookup is tied to the route ID; ledger IDs deduplicate. | Integrated |
 | WorkOS webhook | Provider signature over exact raw body and timestamp | External event ID uniqueness and membership sync rules. | Integrated |
 | Apple webhook | Signed JWS and application identity | Provider configuration and purchase ledger. | Negative provider-fixture gap remains |
-| Google Play RTDN | Google OIDC signature, issuer, lifetime, audience, verified service-account email | Provider configuration, authoritative Play API re-fetch, notification/ledger uniqueness. | Integrated; independent review pending |
+| Google Play RTDN | Google OIDC signature, issuer, lifetime, audience, verified service-account email | Provider configuration, authoritative Google Play state re-fetch, notification/ledger uniqueness. | Integrated; independent review pending |
 | `/p/*`, `/c/*`, `/files/*` | Public content hash/object key | Only immutable public artifacts; traversal rejected and active HTML sandboxed. | Unit and release-smoke covered |
 | `/health`, `/api/health`, OpenAPI | Public | No tenant data or mutation. | Smoke covered |
 
diff --git a/selfhost/entry/tests/SecurityConfig.test.ts b/selfhost/entry/tests/SecurityConfig.test.ts
index ac9f1f104..d9810e8a2 100644
--- a/selfhost/entry/tests/SecurityConfig.test.ts
+++ b/selfhost/entry/tests/SecurityConfig.test.ts
@@ -11,7 +11,7 @@ const validProductionEnvironment = {
   PUBLIC_FILES_BASE_URL: "https://files.example.test",
   S3_SECRET_ACCESS_KEY: "object-store-secret",
   SELFHOST_MODE: "production",
-  WORKOS_API_KEY: "sk_test_configured",
+  WORKOS_API_KEY: "configured-workos-key",
   WORKOS_CLIENT_ID: "client_configured",
   WORKOS_COOKIE_PASSWORD: "cookie-secret-with-sufficient-entropy",
   WORKOS_REDIRECT_URI: "https://app.example.test/api/auth/callback",

From 5e83e3c5ef32381b3c5c05fa06edcb0c17c0ab64 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 03:39:59 +0200
Subject: [PATCH 069/129] harden tenant authorization boundaries

---
 apps/backend/src/rpcs/ai-chat-rpcs.ts         |   8 +-
 .../src/rpcs/paywall-workspace-rpcs.test.ts   |  17 +-
 docs/security/backend-threat-model.md         |  12 +-
 .../security/endpoint-authorization-matrix.md |  25 ++-
 .../core/src/services/aiChat/AiChatService.ts | 129 ++++++++++++----
 .../src/services/feedback/FeedbackService.ts  |  10 +-
 .../PaywallWorkspaceService.test.ts           |  73 +++++----
 .../PaywallWorkspaceService.ts                |  20 +--
 .../AiChatAuthorization.integration.test.ts   | 145 ++++++++++++++++++
 .../FeedbackAuthorization.integration.test.ts |  79 ++++++++++
 ...wallAssetAuthorization.integration.test.ts | 108 +++++++++++++
 ...WorkspaceAuthorization.integration.test.ts | 125 +++++++++++++++
 .../UserAuthorization.integration.test.ts     | 102 ++++++++++++
 13 files changed, 748 insertions(+), 105 deletions(-)
 create mode 100644 packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts
 create mode 100644 packages/core/test/services/feedback/FeedbackAuthorization.integration.test.ts
 create mode 100644 packages/core/test/services/paywallAssets/PaywallAssetAuthorization.integration.test.ts
 create mode 100644 packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts
 create mode 100644 packages/core/test/services/users/UserAuthorization.integration.test.ts

diff --git a/apps/backend/src/rpcs/ai-chat-rpcs.ts b/apps/backend/src/rpcs/ai-chat-rpcs.ts
index 6f761bd18..c0f2c1e33 100644
--- a/apps/backend/src/rpcs/ai-chat-rpcs.ts
+++ b/apps/backend/src/rpcs/ai-chat-rpcs.ts
@@ -118,6 +118,12 @@ export const AiChatRpcsLive = AiChatRpcsDef.toLayer(
               Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
             AiChatServiceError: (error) =>
               Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallNotFoundError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcAiChatServiceError({ message: error.cause })),
             PaywallWorkspaceServiceError: (error) =>
               Effect.fail(new RpcAiChatServiceError({ message: error.message })),
             WorkspaceWriteRejectedError: (error) =>
@@ -133,7 +139,7 @@ export const AiChatRpcsLive = AiChatRpcsDef.toLayer(
        * so a later {@link RevertAiChatCheckpoint} can restore the pre-turn state.
        *
        * Scoping (anti-cross-project): `get` asserts the caller is a member of the
-       * chat's organization; `getPaywallById` asserts project permission on the
+       * chat's project; `getPaywallById` asserts project permission on the
        * paywall; and the paywall must belong to the SAME project as the chat (an
        * org member cannot checkpoint a paywall from another of the org's projects
        * into this chat). Then the live tree is read and captured first-write-wins —
diff --git a/apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts b/apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts
index 006081b44..22abf27ed 100644
--- a/apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts
+++ b/apps/backend/src/rpcs/paywall-workspace-rpcs.test.ts
@@ -7,10 +7,7 @@
  * `ReadPaywallDocument` read seam (slug resolution + whole-document clean) is
  * exercised end to end without an HTTP transport or a live document.
  */
-import {
-  ComponentManifestCacheService,
-  PaywallWorkspaceService,
-} from "@voidhash/core/services";
+import { ComponentManifestCacheService, PaywallWorkspaceService } from "@voidhash/core/services";
 import { MimicHost } from "@voidhash/core/services/paywalls/MimicHost";
 import { PaywallService } from "@voidhash/core/services/paywalls/PaywallService";
 import { ScreenNode, TextNode } from "@voidhash/mimic-schema";
@@ -58,6 +55,7 @@ const USER_SESSION = { method: "user", user: { id: "user_1" } };
 const buildHandlerLayer = (fakes: Fakes) => {
   const paywallLayer = Layer.succeed(PaywallService, {
     getPaywalls: () => Effect.succeed([paywallRow()]),
+    getPaywallById: () => Effect.succeed(paywallRow()),
   } as unknown as PaywallService["Service"]);
 
   const mimicLayer = Layer.succeed(MimicHost, {
@@ -67,8 +65,7 @@ const buildHandlerLayer = (fakes: Fakes) => {
       Effect.sync(() => ({ tree: emptyDoc(), version: 1, root: fakes.root ?? null })),
     submitPaywallTransaction: (_id: string, input: { baseVersion: number }) =>
       Effect.succeed({ accepted: true, version: input.baseVersion + 1 }),
-    createPaywallEditToken: () =>
-      Effect.succeed({ token: "", url: "", expiresAt: new Date() }),
+    createPaywallEditToken: () => Effect.succeed({ token: "", url: "", expiresAt: new Date() }),
   } as unknown as MimicHost["Service"]);
 
   const cacheLayer = Layer.succeed(ComponentManifestCacheService, {
@@ -87,9 +84,7 @@ const buildHandlerLayer = (fakes: Fakes) => {
   );
 
   return Layer.mergeAll(
-    PaywallWorkspaceRpcsLive.pipe(
-      Layer.provide(Layer.mergeAll(workspaceLayer, cacheLayer)),
-    ),
+    PaywallWorkspaceRpcsLive.pipe(Layer.provide(Layer.mergeAll(workspaceLayer, cacheLayer))),
     authMiddlewareLayer,
   );
 };
@@ -116,7 +111,9 @@ interface WorkspaceClient {
 const dispatch = <A>(fakes: Fakes, f: (client: WorkspaceClient) => Effect.Effect<A, unknown>) =>
   Effect.runPromiseExit(
     Effect.gen(function* () {
-      const client = (yield* RpcTest.makeClient(PaywallWorkspaceRpcsDef)) as unknown as WorkspaceClient;
+      const client = (yield* RpcTest.makeClient(
+        PaywallWorkspaceRpcsDef,
+      )) as unknown as WorkspaceClient;
       return yield* f(client);
     }).pipe(Effect.provide(buildHandlerLayer(fakes)), Effect.scoped),
   );
diff --git a/docs/security/backend-threat-model.md b/docs/security/backend-threat-model.md
index e03129ec3..d4263682e 100644
--- a/docs/security/backend-threat-model.md
+++ b/docs/security/backend-threat-model.md
@@ -171,8 +171,14 @@ message-level duplicate delivery against the notification/ledger uniqueness
 gates; OIDC tokens themselves are intentionally reusable during their short
 lifetime.
 
-Beta must also close the deferred Apple signed-JWS negative and replay cases
-that currently require provider fixtures or a verification seam.
+Apple's cryptographic negative coverage runs signed fixtures through the real
+certificate-chain and WebCrypto verification path, then rejects tampered
+signatures/payloads, wrong bundle IDs, wrong environments, malformed JWS data,
+and invalid chains (`verification.test.ts`, `jws-signature-tamper.test.ts`).
+Database integration tests prove duplicate notification UUIDs are insert-once
+and duplicate logical purchase events are ledger-idempotent. Beta still must
+observe and review real Apple sandbox delivery/retry behavior as part of the
+general real-traffic gate; it is no longer an untested automated-code gap.
 
 ## Object storage and public artifacts
 
@@ -301,7 +307,7 @@ added.
 | VH-TM-002 | High | Mitigated, review pending | Production startup refuses known example credentials and insecure public URLs; configuration coverage requires independent review. |
 | VH-TM-003 | High | Mitigated, review pending | Compiler VM budget and container/network hardening pass adversarial and independent review. |
 | VH-TM-004 | High | Mitigated, review pending | Cloud and self-host browsers deny outbound requests and enforce time/input/output budgets; real-browser redirect/private-network coverage requires independent review. |
-| VH-TM-005 | High | Open; inventory complete | Machine-checked endpoint matrix is complete; all rows marked Unit or Gap need database-backed cross-tenant negatives. |
+| VH-TM-005 | High | Mitigated, review pending | Machine-checked endpoint matrix is complete; database-backed negatives cover every tenant-selectable service group, including persisted chat-ID collisions and raw paywall IDs. |
 | VH-TM-006 | Process gate | Open | Real beta traffic and security-log/incident review completed. |
 | VH-TM-007 | Process gate | Open | Independent reviewer signs off and residual risks have owners/deadlines. |
 
diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index cfd1b0277..494cb91bb 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -41,7 +41,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 
 | Groups | Principal and authorization boundary | Evidence | Status |
 | --- | --- | --- | --- |
-| auth, users | User session; identity comes from the authenticated session, not request IDs. | `LocalUserSessionService.integration.test.ts`, `UserService.test.ts` | Unit |
+| auth, users | User session; identity comes from the authenticated session, not request IDs. | `LocalUserSessionService.integration.test.ts`, `UserAuthorization.integration.test.ts`, `UserService.test.ts` | Integrated |
 | api_keys | User/project session plus project permission; key IDs are reloaded and ownership checked. | `ApiKeyService.integration.test.ts` | Integrated |
 | persons | Project-scoped session; person/distinct IDs are resolved and checked against that project. | `PersonService.integration.test.ts` | Integrated |
 | notifications | Project ID is derived from a non-publishable authenticated session; downstream audience lookups stay project-scoped. | Notification authorization integration suite plus person/token service isolation tests | Integrated |
@@ -90,8 +90,8 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Analytics, VoidQl | Project permission before query compilation/execution; compiled SQL carries a bound tenant predicate. | Analytics integration suite and VoidQL compiler/substrate tests | Integrated |
 | ApiKey, Person, Organization, PaymentProviderConfiguration, PaymentProviderProduct, PaywallDeploy, PaywallLocation, Paywall, Perk, ProductPerk, Product, Project, Webhook, FeatureFlag | Project/organization permission followed by stored ownership checks for nested IDs. | Corresponding database-backed core service integration suites | Integrated |
 | PaywallComponent | Delegates to the project-authorized deploy service. | Paywall deploy integration suite | Integrated |
-| AiChat, PaywallAsset, PaywallWorkspace | Project membership/permission and stored parent ownership are covered with controlled service tests. | AI chat, asset, workspace service and RPC tests | Unit |
-| User, Feedback | Acting user comes only from the authenticated session; no caller-selected tenant. | User and feedback service tests | Unit |
+| AiChat, PaywallAsset, PaywallWorkspace | Project membership/permission and stored parent ownership are checked before every read or mutation. Client-minted chat ID collisions are bound to the persisted scope. | `AiChatAuthorization.integration.test.ts`, `PaywallAssetAuthorization.integration.test.ts`, `PaywallWorkspaceAuthorization.integration.test.ts`, plus service and RPC unit tests | Integrated |
+| User, Feedback | Acting user comes only from the authenticated session; feedback project context derives its organization from the same session project. | `UserAuthorization.integration.test.ts`, `FeedbackAuthorization.integration.test.ts`, plus service tests | Integrated |
 | Experiment | Project permission is checked on the stored experiment before every aggregate, variant, treatment, and lifecycle mutation. | `ExperimentService.authorization.integration.test.ts` covers every management operation and verifies no mutation. | Integrated |
 | PushNotificationConfiguration, PushNotificationSend | Project permission plus stored configuration/send ownership; delivery lookup binds both project and parent send ID. | `NotificationsAuthorization.integration.test.ts` covers every configuration/history operation and a nested foreign send ID. | Integrated |
 
@@ -100,20 +100,19 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Surface | Principal or capability | Authorization/authenticity boundary | Status |
 | --- | --- | --- | --- |
 | `/rpc` | User API key, project secret key, or WorkOS session | Shared auth middleware creates the session consumed by every RPC. | Covered by RPC smoke and service evidence above |
-| `/api/mcp` | Bearer project secret key | Key lookup creates a single-project session; workspace services re-check the requested paywall/project. | Unit; cross-project AI workspace cases covered |
-| `/api/ai/chat` | Authenticated user/session token | Token verifier and project-scoped chat/workspace services. | Unit |
+| `/api/mcp` | Bearer project secret key | Key lookup creates a single-project session; workspace services re-check the requested paywall/project. | Route/protocol tests plus integrated cross-project workspace evidence |
+| `/api/ai/chat` | Authenticated user/session token | Token verifier and project-scoped chat/workspace services. | Route/tool tests plus integrated chat/workspace evidence |
 | `/i/v1/capture`, `/i/v1/batch` | Publishable project token | Token resolves the project; processing rejects route/project mismatch and reserved events. | Integrated |
 | Stripe webhook | Provider signature over exact raw body and timestamp | Configuration lookup is tied to the route ID; ledger IDs deduplicate. | Integrated |
 | WorkOS webhook | Provider signature over exact raw body and timestamp | External event ID uniqueness and membership sync rules. | Integrated |
-| Apple webhook | Signed JWS and application identity | Provider configuration and purchase ledger. | Negative provider-fixture gap remains |
+| Apple webhook | Signed JWS and application identity | Provider configuration, full signature/certificate verification, notification UUID uniqueness, and purchase-ledger idempotency. | Integrated cryptographic fixtures and database replay/dedup evidence; independent review pending |
 | Google Play RTDN | Google OIDC signature, issuer, lifetime, audience, verified service-account email | Provider configuration, authoritative Google Play state re-fetch, notification/ledger uniqueness. | Integrated; independent review pending |
-| `/p/*`, `/c/*`, `/files/*` | Public content hash/object key | Only immutable public artifacts; traversal rejected and active HTML sandboxed. | Unit and release-smoke covered |
+| `/p/*`, `/c/*`, `/files/*` | Public content hash/object key | Only immutable public artifacts; traversal rejected and active HTML sandboxed. | Boundary tests and release smoke covered |
 | `/health`, `/api/health`, OpenAPI | Public | No tenant data or mutation. | Smoke covered |
 
-## Publication gaps
+## Publication gates
 
-The inventory is complete, but cross-tenant evidence is not. Before changing
-repository visibility, add database-backed negative suites for the rows still
-marked Unit, especially AI chat, paywall assets, and paywall workspace nested
-resource IDs. Apple provider-fixture negatives and the independent review remain
-separate gates in the threat model.
+The endpoint inventory and automated cross-tenant evidence are complete. The
+remaining publication gates are the real beta traffic/security-log review and
+independent security review recorded in the threat model. Repository visibility
+must remain private until those process gates are complete.
diff --git a/packages/core/src/services/aiChat/AiChatService.ts b/packages/core/src/services/aiChat/AiChatService.ts
index 6b9d6b255..83c28d4ee 100644
--- a/packages/core/src/services/aiChat/AiChatService.ts
+++ b/packages/core/src/services/aiChat/AiChatService.ts
@@ -154,7 +154,7 @@ export interface AiChatServiceShape {
   /**
    * Load the pre-images of a chat's MOST RECENT turn (the turn of its newest
    * checkpoint row), or an empty list when the chat has no checkpoints. Requires
-   * org membership on the owning chat (revert is a user-facing action).
+   * project membership on the owning chat (revert is a user-facing action).
    */
   readonly getLastTurnCheckpoints: (input: {
     readonly chatId: string;
@@ -169,11 +169,11 @@ export interface AiChatServiceShape {
  * chat id is minted client-side so an attachment can be stored under the chat
  * before its first turn is saved; `save` therefore upserts by id.
  *
- * Authorization mirrors {@link PaywallAssetService}: a plain membership check on
- * the authenticated {@link AuthSession}. Reads/deletes require org membership;
- * writes additionally require the caller to have access to the target project
- * under that org (anti-spoof, never trusting the project from the body alone).
- * `Db` and `PublicFileStore` are provided by the application root.
+ * Authorization binds every persisted chat operation to the stored project and
+ * organization. A pre-save attachment has no row yet, so it is limited to an
+ * organization the caller belongs to; once the chat exists its stored project
+ * is authoritative. `Db` and `PublicFileStore` are provided by the application
+ * root.
  */
 export class AiChatService extends Context.Service<AiChatService>()("AiChatService", {
   make: Effect.gen(function* () {
@@ -226,50 +226,97 @@ export class AiChatService extends Context.Service<AiChatService>()("AiChatServi
       messages: row.messages,
     });
 
-    /** Load a row by id or fail not-found. */
-    const findRow = (chatId: string) =>
+    /** Load a row by id when present. */
+    const findOptionalRow = (chatId: string) =>
       Effect.gen(function* () {
         const rows = yield* db
           .select()
           .from(voidhashAiChat)
           .where(eq(voidhashAiChat.id, chatId))
           .limit(1);
-        const row = rows[0];
+        return rows[0];
+      });
+
+    /** Load a row by id or fail not-found. */
+    const findRow = (chatId: string) =>
+      Effect.gen(function* () {
+        const row = yield* findOptionalRow(chatId);
         if (!row) {
           return yield* Effect.fail(new AiChatNotFoundError({ chatId }));
         }
         return row;
       });
 
+    const assertSameChatScope = (
+      row: typeof voidhashAiChat.$inferSelect,
+      input: Pick<AiChatSaveInput, "organizationId" | "projectId">,
+    ) =>
+      row.organizationId === input.organizationId && row.projectId === input.projectId
+        ? Effect.void
+        : Effect.fail(
+            new AiChatForbiddenError({
+              message: `Chat ${row.id} belongs to a different organization or project.`,
+            }),
+          );
+
     const save = Effect.fn("saveAiChat")(
       function* (input: AiChatSaveInput) {
         yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
         yield* assertProjectMember(input.projectId, input.organizationId);
-        const userId = yield* currentUserId;
-
         const title = input.title.slice(0, 255);
         const now = new Date();
-        const inserted = yield* db
-          .insert(voidhashAiChat)
-          .values({
-            id: input.id,
-            organizationId: input.organizationId,
-            projectId: input.projectId,
-            surface: input.surface,
-            chatType: input.chatType,
-            paywallId: input.paywallId ?? null,
-            userId,
-            title,
-            messages: input.messages,
-          })
-          .onConflictDoUpdate({
-            target: voidhashAiChat.id,
-            // Only mutable fields — never reassign org/project/owner on replace.
-            set: { title, messages: input.messages, updatedAt: now },
-          })
-          .returning();
+        let existing = yield* findOptionalRow(input.id);
+        if (existing === undefined) {
+          const userId = yield* currentUserId;
+          const inserted = yield* db
+            .insert(voidhashAiChat)
+            .values({
+              id: input.id,
+              organizationId: input.organizationId,
+              projectId: input.projectId,
+              surface: input.surface,
+              chatType: input.chatType,
+              paywallId: input.paywallId ?? null,
+              userId,
+              title,
+              messages: input.messages,
+            })
+            .onConflictDoNothing({ target: voidhashAiChat.id })
+            .returning();
+          if (inserted[0] !== undefined) {
+            return rowToSummary(inserted[0]);
+          }
+          // Another request inserted this client-minted id after our read. Its
+          // persisted scope is authoritative before any update is allowed.
+          existing = yield* findOptionalRow(input.id);
+          if (existing === undefined) {
+            return yield* Effect.fail(
+              new AiChatServiceError({
+                message: `Chat ${input.id} disappeared while resolving a concurrent save.`,
+              }),
+            );
+          }
+        }
 
-        return rowToSummary(inserted[0]!);
+        yield* assertSameChatScope(existing, input);
+        yield* assertProjectMember(existing.projectId, existing.organizationId);
+        const updated = yield* db
+          .update(voidhashAiChat)
+          .set({ title, messages: input.messages, updatedAt: now })
+          .where(
+            and(
+              eq(voidhashAiChat.id, input.id),
+              eq(voidhashAiChat.organizationId, existing.organizationId),
+              eq(voidhashAiChat.projectId, existing.projectId),
+            ),
+          )
+          .returning();
+        if (updated[0] === undefined) {
+          return yield* Effect.fail(
+            new AiChatForbiddenError({ message: `Chat ${input.id} changed scope or was removed.` }),
+          );
+        }
+        return rowToSummary(updated[0]);
       },
       (effect) =>
         effect.pipe(
@@ -308,7 +355,7 @@ export class AiChatService extends Context.Service<AiChatService>()("AiChatServi
     const get = Effect.fn("getAiChat")(
       function* (input: { readonly chatId: string }) {
         const row = yield* findRow(input.chatId);
-        yield* assertOrgMember(row.organizationId);
+        yield* assertProjectMember(row.projectId, row.organizationId);
         return rowToChat(row);
       },
       (effect) =>
@@ -323,7 +370,7 @@ export class AiChatService extends Context.Service<AiChatService>()("AiChatServi
     const remove = Effect.fn("deleteAiChat")(
       function* (input: { readonly chatId: string }) {
         const row = yield* findRow(input.chatId);
-        yield* assertOrgMember(row.organizationId);
+        yield* assertProjectMember(row.projectId, row.organizationId);
         yield* db.delete(voidhashAiChat).where(eq(voidhashAiChat.id, input.chatId));
       },
       (effect) =>
@@ -338,7 +385,19 @@ export class AiChatService extends Context.Service<AiChatService>()("AiChatServi
     const uploadAttachment = Effect.fn("uploadAiChatAttachment")(
       function* (input: AiChatAttachmentUploadInput) {
         yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
-        yield* assertOrgMember(input.organizationId);
+        const existing = yield* findOptionalRow(input.chatId);
+        if (existing !== undefined) {
+          yield* assertProjectMember(existing.projectId, existing.organizationId);
+          if (existing.organizationId !== input.organizationId) {
+            return yield* Effect.fail(
+              new AiChatForbiddenError({
+                message: `Chat ${input.chatId} belongs to a different organization.`,
+              }),
+            );
+          }
+        } else {
+          yield* assertOrgMember(input.organizationId);
+        }
 
         const { bytes, ext } = yield* validateAndDecodePaywallAsset({
           imageBase64: input.dataBase64,
@@ -361,6 +420,8 @@ export class AiChatService extends Context.Service<AiChatService>()("AiChatServi
       (effect) =>
         effect.pipe(
           Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
             PublicFileStoreError: (error) =>
               Effect.fail(new AiChatServiceError({ message: error.cause })),
             PaywallAssetValidationError: (error: PaywallAssetValidationError) =>
diff --git a/packages/core/src/services/feedback/FeedbackService.ts b/packages/core/src/services/feedback/FeedbackService.ts
index cb8930c83..133c399a4 100644
--- a/packages/core/src/services/feedback/FeedbackService.ts
+++ b/packages/core/src/services/feedback/FeedbackService.ts
@@ -103,12 +103,16 @@ const make = Effect.gen(function* () {
       const user = session.user;
       yield* Effect.annotateCurrentSpan("voidhash.user.id", user.id);
 
-      const organization = input.organizationId
-        ? (session.organizations.find((o) => o.id === input.organizationId) ?? null)
-        : null;
       const project = input.projectId
         ? (session.projects.find((p) => p.id === input.projectId) ?? null)
         : null;
+      // A project determines its organization. This prevents a user who belongs
+      // to multiple tenants from persisting a mismatched org/project snapshot.
+      const organization = project
+        ? (session.organizations.find((o) => o.id === project.organizationId) ?? null)
+        : input.organizationId
+          ? (session.organizations.find((o) => o.id === input.organizationId) ?? null)
+          : null;
 
       const id = generateId("voidhashFeedback");
       yield* db.insert(voidhashFeedback).values({
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
index 1e74ef411..8f36fca69 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
@@ -46,6 +46,11 @@ const encodeTree = (roots: unknown): unknown => encodePaywallDocument(roots);
 const testLayer = (fakes: Fakes) => {
   const paywallLayer = Layer.succeed(PaywallService, {
     getPaywalls: () => Effect.succeed(fakes.paywalls ?? [paywallRow()]),
+    getPaywallById: (paywallId: string) =>
+      Effect.succeed(
+        (fakes.paywalls ?? [paywallRow()]).find((paywall) => paywall.id === paywallId) ??
+          paywallRow({ id: paywallId }),
+      ),
   } as unknown as PaywallService["Service"]);
 
   // Read cursor over `fakes.documents` (each getPaywallDocument returns the next
@@ -236,10 +241,13 @@ describe("PaywallWorkspaceService", () => {
     const captures: Array<{ paywallId: string; version: number }> = [];
     const exit = await useWs(
       (ws) =>
-        ws.moveComponentFile("proj_1", "trial", "hero.tsx", "hero-banner.tsx", ({
-          paywallId,
-          version,
-        }) => Effect.sync(() => captures.push({ paywallId, version }))),
+        ws.moveComponentFile(
+          "proj_1",
+          "trial",
+          "hero.tsx",
+          "hero-banner.tsx",
+          ({ paywallId, version }) => Effect.sync(() => captures.push({ paywallId, version })),
+        ),
       {
         paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
         // Two reads: first conflicts (version 5), retry succeeds (version 6). The
@@ -265,10 +273,13 @@ describe("PaywallWorkspaceService", () => {
     const exit = await useWs(
       (ws) =>
         // Unknown source component → the lowering rejects before any submit.
-        ws.moveComponentFile("proj_1", "trial", "ghost.tsx", "phantom.tsx", ({
-          paywallId,
-          version,
-        }) => Effect.sync(() => captures.push({ paywallId, version }))),
+        ws.moveComponentFile(
+          "proj_1",
+          "trial",
+          "ghost.tsx",
+          "phantom.tsx",
+          ({ paywallId, version }) => Effect.sync(() => captures.push({ paywallId, version })),
+        ),
       {
         paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
         documents: [{ tree: docTreeWithComponent("export const Hero = () => null;"), version: 3 }],
@@ -284,10 +295,9 @@ describe("PaywallWorkspaceService", () => {
     const captures: Array<{ paywallId: string; version: number }> = [];
     const exit = await useWs(
       (ws) =>
-        ws.moveComponentFile("proj_1", "trial", "hero.tsx", "hero.tsx", ({
-          paywallId,
-          version,
-        }) => Effect.sync(() => captures.push({ paywallId, version }))),
+        ws.moveComponentFile("proj_1", "trial", "hero.tsx", "hero.tsx", ({ paywallId, version }) =>
+          Effect.sync(() => captures.push({ paywallId, version })),
+        ),
       {
         paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
         documents: [{ tree: docTreeWithComponent("export const Hero = () => null;"), version: 4 }],
@@ -366,9 +376,9 @@ describe("PaywallWorkspaceService", () => {
   it("editDocument inserts a subtree, submits, and returns real minted ids", async () => {
     // Resolve the live screen id so the insert targets a real parent.
     const live = docTreeWithScreen();
-    const screenId = (live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
-      (node) => node.value.fields.type?.value === "screen",
-    )!.id;
+    const screenId = (
+      live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }
+    ).nodes.find((node) => node.value.fields.type?.value === "screen")!.id;
 
     const exit = await useWs(
       (ws) =>
@@ -395,13 +405,16 @@ describe("PaywallWorkspaceService", () => {
 
   it("editDocument no-op (commandCount 0) reports empty minted ids", async () => {
     const live = docTreeWithScreen();
-    const screenId = (live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
-      (node) => node.value.fields.type?.value === "screen",
-    )!.id;
+    const screenId = (
+      live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }
+    ).nodes.find((node) => node.value.fields.type?.value === "screen")!.id;
 
     const exit = await useWs(
       // Setting the screen name to its CURRENT value reconciles to zero commands.
-      (ws) => ws.editDocument("proj_1", "trial", [{ op: "update", nodeId: screenId, set: { name: "Main" } }]),
+      (ws) =>
+        ws.editDocument("proj_1", "trial", [
+          { op: "update", nodeId: screenId, set: { name: "Main" } },
+        ]),
       {
         paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
         documents: [{ tree: live, version: 4 }],
@@ -420,9 +433,9 @@ describe("PaywallWorkspaceService", () => {
 
   it("editDocument conflict-then-accept re-derives the target and reports the accepted version", async () => {
     const live = docTreeWithScreen();
-    const screenId = (live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }).nodes.find(
-      (node) => node.value.fields.type?.value === "screen",
-    )!.id;
+    const screenId = (
+      live as { nodes: { id: string; value: { fields: { type?: { value?: string } } } }[] }
+    ).nodes.find((node) => node.value.fields.type?.value === "screen")!.id;
 
     const exit = await useWs(
       (ws) =>
@@ -483,7 +496,11 @@ describe("PaywallWorkspaceService", () => {
           {
             type: "library",
             children: [
-              { type: "codeComponent", path: "components/hero.tsx", source: "export const Old = 1;" },
+              {
+                type: "codeComponent",
+                path: "components/hero.tsx",
+                source: "export const Old = 1;",
+              },
             ],
           },
         ],
@@ -491,12 +508,7 @@ describe("PaywallWorkspaceService", () => {
     ]);
     const exit = await useWs(
       (ws) =>
-        ws.writeComponentSource(
-          "proj_1",
-          "trial",
-          "components/hero.tsx",
-          "export const New = 2;",
-        ),
+        ws.writeComponentSource("proj_1", "trial", "components/hero.tsx", "export const New = 2;"),
       {
         paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
         documents: [{ tree: withComponent, version: 5 }],
@@ -513,8 +525,7 @@ describe("PaywallWorkspaceService", () => {
 
   it("writeComponentSource rejects an invalid component file name", async () => {
     const exit = await useWs(
-      (ws) =>
-        ws.writeComponentSource("proj_1", "trial", "components/../evil.tsx", "x"),
+      (ws) => ws.writeComponentSource("proj_1", "trial", "components/../evil.tsx", "x"),
       {
         paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
         documents: [{ tree: docTreeWithScreen(), version: 1 }],
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
index 9651cd4a3..9ba437c87 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
@@ -15,7 +15,7 @@ import {
 import { PaywallNotFoundError } from "../../domain/paywall/Paywall.ts";
 import { MimicHost } from "../paywalls/MimicHost.ts";
 import { PaywallService } from "../paywalls/PaywallService.ts";
-import { ComponentManifestCacheError, ComponentManifestCacheService } from "./ComponentManifestCacheService.ts";
+import { ComponentManifestCacheError } from "./ComponentManifestCacheService.ts";
 
 /**
  * Catch-all error raised by {@link PaywallWorkspaceService} public methods —
@@ -186,15 +186,14 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
        * cleans for the model), and the optimistic-concurrency `version`, all from
        * ONE consistent read (see {@link MimicHostShape.getPaywallDocument}).
        *
-       * A thin, authorization-free read over the {@link MimicHost} port —
-       * mirroring {@link revertDocument}, the CALLER owns authorization (it
-       * resolves the `paywallId` it passes; e.g. a chat-scoped checkpoint capture,
-       * or a slug already resolved within its project). Used by the AI
-       * `CaptureAiCheckpoint` path (reads `tree`) and by {@link readDocument}
-       * (reads `root`).
+       * The stored paywall is loaded first through {@link PaywallService}, so
+       * direct callers cannot bypass project authorization by supplying a raw
+       * mimic document id. Used by the AI `CaptureAiCheckpoint` path (reads
+       * `tree`) and by {@link readDocument} (reads `root`).
        */
       const readDocumentTree = (paywallId: string) =>
         Effect.gen(function* () {
+          yield* paywallService.getPaywallById(paywallId);
           yield* mimicHost.ensurePaywallDocument(paywallId);
           const document = yield* mimicHost.getPaywallDocument(paywallId);
           return {
@@ -529,12 +528,13 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
        * the reverted state. Returns the committed `{version, commandCount}`; a
        * `commandCount` of `0` means the document already matched the checkpoint.
        *
-       * Authorization is the caller's — the caller resolves the paywall id it owns
-       * (checkpoint rows are chat-scoped, and the chat is project-scoped); this
-       * method submits against that id.
+       * The stored paywall is authorized again before the root mimic transaction,
+       * so a forged or stale checkpoint cannot turn this raw-id operation into a
+       * project-boundary bypass.
        */
       const revertDocument = (paywallId: string, capturedTree: unknown) =>
         Effect.gen(function* () {
+          yield* paywallService.getPaywallById(paywallId);
           yield* mimicHost.ensurePaywallDocument(paywallId);
           const outcome = yield* submitLoop(paywallId, (current) =>
             Effect.succeed(reconcileToTree({ current, target: capturedTree })),
diff --git a/packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts b/packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts
new file mode 100644
index 000000000..a285df6ec
--- /dev/null
+++ b/packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts
@@ -0,0 +1,145 @@
+import { type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { AiChatForbiddenError, AiChatService } from "@voidhash/core/services";
+import { Db, eq, voidhashAiChat } from "@voidhash/db";
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import { Effect, Layer } from "effect";
+import { expect } from "vitest";
+
+import { PublicFileStore } from "../../../src/services/storage/PublicFileStore.ts";
+
+const { test } = CoreIntegrationTestHarness.make();
+const suffix = crypto.randomUUID();
+const chatId = `it_chat_auth_${suffix}`;
+const attackerProjectId = `it_project_attacker_${suffix}`;
+const objectWrites: string[] = [];
+
+const PublicFileStoreTest = Layer.succeed(PublicFileStore, {
+  publicBaseUrl: "https://files.example.test",
+  publicUrl: (key: string) => `https://files.example.test/files/${key}`,
+  putObject: ({ key }: { readonly key: string }) =>
+    Effect.sync(() => {
+      objectWrites.push(key);
+    }),
+  getObject: () => Effect.succeed(null),
+  deleteObject: () => Effect.void,
+});
+
+const ServiceUnderTest = AiChatService.layer.pipe(Layer.provide(PublicFileStoreTest));
+
+const attackerSession = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:all"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: null,
+  projects: [
+    {
+      id: attackerProjectId,
+      logo: null,
+      name: "Attacker project",
+      organizationId: CoreTestFixture.organizationId,
+      permissions: ["project:all"],
+      slug: `attacker-${suffix}`,
+    },
+  ],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+const asAttacker = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(attackerSession()));
+
+test(
+  "every persisted AI chat operation binds authorization to the stored project",
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const service = yield* AiChatService;
+    objectWrites.length = 0;
+
+    yield* db.insert(voidhashAiChat).values({
+      chatType: "persistent",
+      id: chatId,
+      messages: '[{"role":"user","content":"private"}]',
+      organizationId: CoreTestFixture.organizationId,
+      paywallId: null,
+      projectId: CoreTestFixture.projectId,
+      surface: "designer",
+      title: "Victim chat",
+      userId: CoreTestFixture.userId,
+    });
+
+    const expectForbidden = <A, E, R>(operation: Effect.Effect<A, E, R>) =>
+      Effect.gen(function* () {
+        const error = yield* asAttacker(operation).pipe(Effect.flip);
+        expect(error).toBeInstanceOf(AiChatForbiddenError);
+      });
+
+    yield* expectForbidden(
+      service.save({
+        chatType: "persistent",
+        id: chatId,
+        messages: "[]",
+        organizationId: CoreTestFixture.organizationId,
+        projectId: attackerProjectId,
+        surface: "designer",
+        title: "Compromised",
+      }),
+    );
+    yield* expectForbidden(
+      service.list({
+        organizationId: CoreTestFixture.organizationId,
+        projectId: CoreTestFixture.projectId,
+        surface: "designer",
+      }),
+    );
+    yield* expectForbidden(service.get({ chatId }));
+    yield* expectForbidden(service.delete({ chatId }));
+    yield* expectForbidden(
+      service.uploadAttachment({
+        chatId,
+        contentType: "image/png",
+        dataBase64: "iVBORw0KGgo=",
+        name: "attacker.png",
+        organizationId: CoreTestFixture.organizationId,
+      }),
+    );
+    yield* expectForbidden(service.getLastTurnCheckpoints({ chatId }));
+
+    const row = yield* db.query.voidhashAiChat.findFirst({ where: { id: chatId } });
+    expect(row).toMatchObject({
+      messages: '[{"role":"user","content":"private"}]',
+      projectId: CoreTestFixture.projectId,
+      title: "Victim chat",
+    });
+    expect(objectWrites).toEqual([]);
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        const db = yield* Db;
+        yield* db.delete(voidhashAiChat).where(eq(voidhashAiChat.id, chatId)).pipe(Effect.ignore);
+      }),
+    ),
+    Effect.provide(ServiceUnderTest),
+    CoreAuthSession.authenticate(),
+  ),
+);
diff --git a/packages/core/test/services/feedback/FeedbackAuthorization.integration.test.ts b/packages/core/test/services/feedback/FeedbackAuthorization.integration.test.ts
new file mode 100644
index 000000000..70ca2076c
--- /dev/null
+++ b/packages/core/test/services/feedback/FeedbackAuthorization.integration.test.ts
@@ -0,0 +1,79 @@
+import { FeedbackService, FeedbackServiceLive } from "@voidhash/core/services";
+import { Db, inArray, voidhashFeedback } from "@voidhash/db";
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import { Effect } from "effect";
+import { expect } from "vitest";
+
+const { test } = CoreIntegrationTestHarness.make();
+const createdIds: string[] = [];
+
+test(
+  "feedback identity and tenant attribution come only from the authenticated session",
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const service = yield* FeedbackService;
+
+    const derived = yield* service.submit({
+      message: "Project context",
+      organizationId: "forged-organization",
+      pathname: "/studio",
+      projectId: CoreTestFixture.projectId,
+      sentiment: null,
+      topic: "other",
+      userAgent: null,
+    });
+    createdIds.push(derived.id);
+
+    const rejected = yield* service.submit({
+      message: "Forged context",
+      organizationId: "forged-organization",
+      pathname: null,
+      projectId: "forged-project",
+      sentiment: null,
+      topic: "other",
+      userAgent: null,
+    });
+    createdIds.push(rejected.id);
+
+    const rows = yield* db
+      .select()
+      .from(voidhashFeedback)
+      .where(inArray(voidhashFeedback.id, [derived.id, rejected.id]));
+    const derivedRow = rows.find((row) => row.id === derived.id);
+    const rejectedRow = rows.find((row) => row.id === rejected.id);
+
+    expect(derivedRow).toMatchObject({
+      organizationId: CoreTestFixture.organizationId,
+      projectId: CoreTestFixture.projectId,
+      userEmail: CoreTestFixture.userEmail,
+      userId: CoreTestFixture.userId,
+      userName: CoreTestFixture.userName,
+    });
+    expect(rejectedRow).toMatchObject({
+      organizationId: null,
+      projectId: null,
+      userEmail: CoreTestFixture.userEmail,
+      userId: CoreTestFixture.userId,
+      userName: CoreTestFixture.userName,
+    });
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        if (createdIds.length === 0) return;
+        const db = yield* Db;
+        yield* db
+          .delete(voidhashFeedback)
+          .where(inArray(voidhashFeedback.id, createdIds))
+          .pipe(Effect.ignore);
+      }),
+    ),
+    Effect.provide(
+      FeedbackServiceLive({
+        botToken: Effect.succeed(""),
+      }),
+    ),
+    CoreAuthSession.authenticate(),
+  ),
+);
diff --git a/packages/core/test/services/paywallAssets/PaywallAssetAuthorization.integration.test.ts b/packages/core/test/services/paywallAssets/PaywallAssetAuthorization.integration.test.ts
new file mode 100644
index 000000000..d68da5d14
--- /dev/null
+++ b/packages/core/test/services/paywallAssets/PaywallAssetAuthorization.integration.test.ts
@@ -0,0 +1,108 @@
+import { type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { PaywallAssetForbiddenError, PaywallAssetService } from "@voidhash/core/services";
+import { Db, eq, paywallAsset } from "@voidhash/db";
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import { Effect, Layer } from "effect";
+import { expect } from "vitest";
+
+import { PublicFileStore } from "../../../src/services/storage/PublicFileStore.ts";
+
+const { test } = CoreIntegrationTestHarness.make();
+const suffix = crypto.randomUUID();
+const assetId = suffix;
+const assetKey = `paywall-assets/${CoreTestFixture.organizationId}/${suffix}.png`;
+const objectMutations: string[] = [];
+
+const PublicFileStoreTest = Layer.succeed(PublicFileStore, {
+  publicBaseUrl: "https://files.example.test",
+  publicUrl: (key: string) => `https://files.example.test/files/${key}`,
+  putObject: ({ key }: { readonly key: string }) =>
+    Effect.sync(() => {
+      objectMutations.push(`put:${key}`);
+    }),
+  getObject: () => Effect.succeed(null),
+  deleteObject: (key: string) =>
+    Effect.sync(() => {
+      objectMutations.push(`delete:${key}`);
+    }),
+});
+
+const ServiceUnderTest = PaywallAssetService.layer.pipe(Layer.provide(PublicFileStoreTest));
+
+const sessionWithoutOrganizationAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutOrganizationAccess()));
+
+test(
+  "every paywall asset operation rejects a cross-organization caller before mutation",
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const service = yield* PaywallAssetService;
+    objectMutations.length = 0;
+
+    yield* db.insert(paywallAsset).values({
+      contentType: "image/png",
+      id: assetId,
+      key: assetKey,
+      name: "Victim asset",
+      organizationId: CoreTestFixture.organizationId,
+      sizeBytes: 8,
+      url: `https://files.example.test/files/${assetKey}`,
+    });
+
+    const expectForbidden = <A, E, R>(operation: Effect.Effect<A, E, R>) =>
+      Effect.gen(function* () {
+        const error = yield* asUnauthorized(operation).pipe(Effect.flip);
+        expect(error).toBeInstanceOf(PaywallAssetForbiddenError);
+      });
+
+    yield* expectForbidden(
+      service.upload({
+        contentType: "image/png",
+        imageBase64: "iVBORw0KGgo=",
+        name: "attacker.png",
+        organizationId: CoreTestFixture.organizationId,
+      }),
+    );
+    yield* expectForbidden(service.list({ organizationId: CoreTestFixture.organizationId }));
+    yield* expectForbidden(service.rename({ assetId, name: "Compromised" }));
+    yield* expectForbidden(service.delete({ assetId }));
+
+    const row = yield* db.query.paywallAsset.findFirst({ where: { id: assetId } });
+    expect(row).toMatchObject({
+      name: "Victim asset",
+      organizationId: CoreTestFixture.organizationId,
+    });
+    expect(objectMutations).toEqual([]);
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        const db = yield* Db;
+        yield* db.delete(paywallAsset).where(eq(paywallAsset.id, assetId)).pipe(Effect.ignore);
+      }),
+    ),
+    Effect.provide(ServiceUnderTest),
+    CoreAuthSession.authenticate(),
+  ),
+);
diff --git a/packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts b/packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts
new file mode 100644
index 000000000..6738404b2
--- /dev/null
+++ b/packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts
@@ -0,0 +1,125 @@
+import { ActionForbiddenError, type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { MimicHost, PaywallService, PaywallWorkspaceService } from "@voidhash/core/services";
+import { Db, eq, paywalls } from "@voidhash/db";
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import { Effect, Layer } from "effect";
+import { expect } from "vitest";
+
+const { test } = CoreIntegrationTestHarness.make();
+const suffix = crypto.randomUUID();
+const paywallId = `it_workspace_auth_${suffix}`;
+const paywallSlug = `workspace-auth-${suffix}`;
+const mimicCalls: string[] = [];
+
+const MimicHostTest = Layer.succeed(MimicHost, {
+  ensurePaywallDocument: (id: string) =>
+    Effect.sync(() => {
+      mimicCalls.push(`ensure:${id}`);
+    }),
+  createPaywallEditToken: () =>
+    Effect.succeed({ expiresAt: new Date(0), token: "unused", url: "ws://unused" }),
+  getPaywallSnapshot: (id: string) =>
+    Effect.sync(() => {
+      mimicCalls.push(`snapshot:${id}`);
+      return null;
+    }),
+  getPaywallDocument: (id: string) =>
+    Effect.sync(() => {
+      mimicCalls.push(`document:${id}`);
+      return { root: null, tree: { kind: "tree", nodes: [] }, version: 1 };
+    }),
+  submitPaywallTransaction: (id: string) =>
+    Effect.sync(() => {
+      mimicCalls.push(`submit:${id}`);
+      return { accepted: true, version: 2 };
+    }),
+});
+
+const ServiceUnderTest = PaywallWorkspaceService.layer.pipe(
+  Layer.provide(Layer.merge(PaywallService.layer, MimicHostTest)),
+);
+
+const sessionWithoutProjectAccess = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: CoreTestFixture.userEmail,
+    emailVerified: true,
+    id: CoreTestFixture.userId,
+    image: null,
+    name: CoreTestFixture.userName,
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: CoreTestFixture.workosUserId,
+  },
+});
+
+const asUnauthorized = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
+  effect.pipe(CoreAuthSession.authenticate(sessionWithoutProjectAccess()));
+
+test(
+  "workspace reads and mutations authorize stored paywalls before touching Mimic",
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const workspace = yield* PaywallWorkspaceService;
+    mimicCalls.length = 0;
+
+    yield* db.insert(paywalls).values({
+      id: paywallId,
+      name: "Victim workspace",
+      projectId: CoreTestFixture.projectId,
+      slug: paywallSlug,
+    });
+
+    const expectForbidden = <A, E, R>(operation: Effect.Effect<A, E, R>) =>
+      Effect.gen(function* () {
+        const error = yield* asUnauthorized(operation).pipe(Effect.flip);
+        expect(error).toBeInstanceOf(ActionForbiddenError);
+      });
+
+    yield* expectForbidden(workspace.listPaywalls(CoreTestFixture.projectId));
+    yield* expectForbidden(workspace.readDocument(CoreTestFixture.projectId, paywallSlug));
+    yield* expectForbidden(workspace.readDocumentTree(paywallId));
+    yield* expectForbidden(workspace.editDocument(CoreTestFixture.projectId, paywallSlug, []));
+    yield* expectForbidden(
+      workspace.writeComponentSource(
+        CoreTestFixture.projectId,
+        paywallSlug,
+        "components/attacker.tsx",
+        "export default () => null",
+      ),
+    );
+    yield* expectForbidden(
+      workspace.moveComponentFile(
+        CoreTestFixture.projectId,
+        paywallSlug,
+        "victim.tsx",
+        "attacker.tsx",
+      ),
+    );
+    yield* expectForbidden(
+      workspace.deleteComponentFile(CoreTestFixture.projectId, paywallSlug, "victim.tsx"),
+    );
+    yield* expectForbidden(workspace.revertDocument(paywallId, { kind: "tree", nodes: [] }));
+
+    const row = yield* db.query.paywalls.findFirst({ where: { id: paywallId } });
+    expect(row).toMatchObject({ projectId: CoreTestFixture.projectId, slug: paywallSlug });
+    expect(mimicCalls).toEqual([]);
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        const db = yield* Db;
+        yield* db.delete(paywalls).where(eq(paywalls.id, paywallId)).pipe(Effect.ignore);
+      }),
+    ),
+    Effect.provide(ServiceUnderTest),
+    CoreAuthSession.authenticate(),
+  ),
+);
diff --git a/packages/core/test/services/users/UserAuthorization.integration.test.ts b/packages/core/test/services/users/UserAuthorization.integration.test.ts
new file mode 100644
index 000000000..ad0e8a669
--- /dev/null
+++ b/packages/core/test/services/users/UserAuthorization.integration.test.ts
@@ -0,0 +1,102 @@
+import { type UserSession } from "@voidhash/core/domain/auth/Auth";
+import { PublicFileStore, UserService } from "@voidhash/core/services";
+import { Db, eq, user } from "@voidhash/db";
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import { Effect, Layer } from "effect";
+import { expect } from "vitest";
+
+const { test } = CoreIntegrationTestHarness.make();
+const actorId = crypto.randomUUID();
+const actorEmail = `avatar-${actorId}@voidhash.test`;
+const objectMutations: string[] = [];
+
+const PublicFileStoreTest = Layer.succeed(PublicFileStore, {
+  publicBaseUrl: "https://files.example.test",
+  publicUrl: (key: string) => `https://files.example.test/files/${key}`,
+  putObject: ({ key }: { readonly key: string }) =>
+    Effect.sync(() => {
+      objectMutations.push(`put:${key}`);
+    }),
+  getObject: () => Effect.succeed(null),
+  deleteObject: (key: string) =>
+    Effect.sync(() => {
+      objectMutations.push(`delete:${key}`);
+    }),
+});
+
+const ServiceUnderTest = Layer.merge(UserService.layer, PublicFileStoreTest);
+
+const actorSession = (): UserSession => ({
+  cookie: null,
+  method: "user",
+  name: `Avatar Actor <${actorEmail}>`,
+  organizations: [],
+  person: null,
+  projects: [],
+  user: {
+    createdAt: new Date(0),
+    email: actorEmail,
+    emailVerified: true,
+    id: actorId,
+    image: null,
+    name: "Avatar Actor",
+    role: null,
+    updatedAt: new Date(0),
+    workosUserId: null,
+  },
+});
+
+test(
+  "avatar mutations can only target the authenticated user row",
+  Effect.gen(function* () {
+    const db = yield* Db;
+    const service = yield* UserService;
+    objectMutations.length = 0;
+
+    yield* db.insert(user).values({
+      email: actorEmail,
+      emailVerified: true,
+      id: actorId,
+      name: "Avatar Actor",
+    });
+
+    const victimBefore = yield* db.query.user.findFirst({
+      where: { id: CoreTestFixture.userId },
+    });
+    const result = yield* service.setAvatar({
+      contentType: "image/png",
+      imageBase64: "iVBORw0KGgo=",
+    });
+
+    const actorAfterSet = yield* db.query.user.findFirst({ where: { id: actorId } });
+    const victimAfterSet = yield* db.query.user.findFirst({
+      where: { id: CoreTestFixture.userId },
+    });
+    expect(actorAfterSet?.customImageUrl).toBe(result.imageUrl);
+    expect(victimAfterSet?.customImageUrl).toBe(victimBefore?.customImageUrl);
+    expect(result.imageUrl).toContain(`/avatars/user/${actorId}/`);
+
+    yield* service.removeAvatar();
+    const actorAfterRemove = yield* db.query.user.findFirst({ where: { id: actorId } });
+    const victimAfterRemove = yield* db.query.user.findFirst({
+      where: { id: CoreTestFixture.userId },
+    });
+    expect(actorAfterRemove?.customImageUrl).toBeNull();
+    expect(victimAfterRemove?.customImageUrl).toBe(victimBefore?.customImageUrl);
+    expect(objectMutations.some((mutation) => mutation.startsWith("put:avatars/user/"))).toBe(true);
+    expect(objectMutations.some((mutation) => mutation.startsWith("delete:avatars/user/"))).toBe(
+      true,
+    );
+  }).pipe(
+    Effect.ensuring(
+      Effect.gen(function* () {
+        const db = yield* Db;
+        yield* db.delete(user).where(eq(user.id, actorId)).pipe(Effect.ignore);
+      }),
+    ),
+    Effect.provide(ServiceUnderTest),
+    CoreAuthSession.authenticate(actorSession()),
+  ),
+);

From c18f2d8cd2e0984ae065b552366bc2bd06186fe3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 04:10:37 +0200
Subject: [PATCH 070/129] harden publication dependencies and docs

---
 .github/workflows/osv-scanner.yml             |   25 +
 CONTRIBUTING.md                               |   46 +-
 LICENSE.md                                    |   25 +-
 README.md                                     |   26 +-
 apps/mimic-admin/package.json                 |    2 +-
 apps/mimic-cli/package.json                   |    2 +-
 examples/mimic-example/package.json           |    2 +-
 packages/ai-shared/package.json               |    2 +-
 packages/app-store-server-sdk/package.json    |    2 +-
 packages/emails/package.json                  |    4 +-
 packages/google-play-server-sdk/package.json  |    2 +-
 packages/mimic-core/package.json              |    2 +-
 packages/mimic-schema/package.json            |    2 +-
 packages/mimic-server/package.json            |    2 +-
 packages/mimic/package.json                   |    2 +-
 packages/paywall-build/package.json           |    2 +-
 packages/paywall-builtins/package.json        |    2 +-
 packages/paywall-renderer-preact/package.json |    2 +-
 .../paywall-renderer-web-core/package.json    |    2 +-
 packages/paywall-workspace/package.json       |    2 +-
 pnpm-lock.yaml                                | 4785 +++++++++--------
 pnpm-workspace.yaml                           |    8 +-
 22 files changed, 2631 insertions(+), 2318 deletions(-)
 create mode 100644 .github/workflows/osv-scanner.yml

diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
new file mode 100644
index 000000000..0f25b45c4
--- /dev/null
+++ b/.github/workflows/osv-scanner.yml
@@ -0,0 +1,25 @@
+name: OSV Scanner
+
+on:
+  pull_request:
+  push:
+    branches: [main, preview, oss]
+  schedule:
+    - cron: "30 12 * * 1"
+  workflow_dispatch:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  scan-pr:
+    if: github.event_name == 'pull_request'
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.8
+
+  scan-full:
+    if: github.event_name != 'pull_request'
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.8
+    with:
+      fail-on-vuln: false
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index d2ef5d058..3a7e741d3 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -11,25 +11,47 @@ process for the [Contributor License Agreement](CONTRIBUTOR_LICENSE_AGREEMENT.md
 Every external contributor will need to accept that agreement before a
 contribution can be merged.
 
-Please refer to the [getting-started documentation](https://voidhash.com/docs/contribute/getting-started) specific to contributing for more information.
+## Security issues
 
-## Security Issues
+Report suspected vulnerabilities privately to
+[security@voidhash.com](mailto:security@voidhash.com). Do not open a public
+issue or pull request for a vulnerability. See the [Security Policy](SECURITY.md)
+for reporting guidance.
 
-If you see any security issue we prefer you to disclose it via an email (security@voidhash.com). All reports will be promptly addressed, and you'll be credited accordingly.
-
-Learn more about our [security issues documentation](https://voidhash.com/docs/contribute/security-issues).
-
-## A Few Guidelines to keep in mind
+## Guidelines
 
 - Rather than extensive configurations, focus instead on providing opinionated, best-practice defaults.
-- Try to make a consistent and predictable API across all supported frameworks
-- Everything should be type-safe and embrace typescript magic when necessary.
+- Keep APIs consistent and predictable across supported frameworks.
+- Preserve end-to-end type safety.
+- Add JSDoc to public functions and keep existing documentation current.
+- Keep infrastructure adapters behind the platform interfaces used by product code.
 
 ## Development
 
-Read more about development in the [getting-started documentation](https://voidhash.com/docs/contribute/getting-started#development-setup).
-...TODO
+Voidhash uses Node.js 22 and pnpm 11. From the repository root:
+
+```sh
+corepack enable
+corepack prepare pnpm@11.1.3 --activate
+pnpm install --frozen-lockfile
+pnpm typecheck
+pnpm test
+```
+
+Use `pnpm lint` to check formatting and lint rules. The
+[self-hosting guide](selfhost/README.md) documents the local Compose environment
+and its smoke tests.
 
 ## Testing
 
-Read more about testing in the [testing guide](https://voidhash.com/docs/contribute/testing).
+Run the smallest relevant package tests while iterating, then run the repository
+typecheck and test graph before requesting review. Changes to the Node runtime
+or Compose configuration should also pass both self-host smoke tests documented
+in [selfhost/README.md](selfhost/README.md#smoke-test).
+
+## License zones
+
+By contributing, you agree that your contribution is licensed under the license
+that applies to the files you change. See [LICENSE.md](LICENSE.md) for the MIT
+and AGPL zones. The Contributor License Agreement is an additional requirement
+once external contributions reopen.
diff --git a/LICENSE.md b/LICENSE.md
index 9f2b38794..ef10301cb 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -7,25 +7,24 @@ closest license notice in its directory, the package metadata, or an SPDX
 license identifier in the file. A more specific notice takes precedence over
 this repository-level map.
 
-## Current public code
+## MIT code
 
-The code currently published in this repository is licensed under the MIT
-License unless a more specific license notice says otherwise. This includes the
-SDKs and other customer-facing packages in `libraries/`, `packages/`, `apps/`,
-and `examples/`.
+SDKs, client libraries, the CLI, Studio, examples, and supporting packages that
+declare `MIT` in their package metadata or carry a local MIT license notice are
+licensed under the MIT License.
 
 The full MIT License is in [LICENSES/MIT.txt](LICENSES/MIT.txt).
 
-## Future service code
+## AGPL service code
 
-Voidhash service and self-hosting code will be licensed under the GNU Affero
-General Public License, version 3 only (`AGPL-3.0-only`), when that code is
-published in this repository. The full license is in
-[LICENSES/AGPL-3.0-only.txt](LICENSES/AGPL-3.0-only.txt).
+The backend, dashboard, service packages, and self-hosting code that declare
+`AGPL-3.0-only` in their package metadata or carry a local AGPL notice are
+licensed under the GNU Affero General Public License, version 3 only. The full
+license is in [LICENSES/AGPL-3.0-only.txt](LICENSES/AGPL-3.0-only.txt).
 
-Backend packages are not part of the public repository yet. They remain planned
-for publication under `AGPL-3.0-only` after the alpha and beta security gates
-described in the open-source unification plan are complete.
+Repository visibility does not change these license grants. The complete code
+is being validated privately before the repository's publication gate, but the
+MIT and AGPL terms identified here already apply to their respective zones.
 
 ## Enterprise code
 
diff --git a/README.md b/README.md
index 2552c92d3..27afd0022 100644
--- a/README.md
+++ b/README.md
@@ -30,11 +30,10 @@
 </p>
 
 > [!IMPORTANT]
-> This repository currently contains the open-source SDKs, CLI, Studio, and
-> integration packages. The backend is not public yet. It remains planned for
-> publication under AGPL-3.0-only after alpha and beta security validation; the
-> repository must not be described as the fully open or self-hostable platform
-> until that publication is complete.
+> This private validation branch contains the complete Community platform,
+> including the backend and self-hosting composition. The repository remains
+> private through alpha and beta security validation and must not be described
+> as publicly launched until the publication gate is complete.
 
 ## ✨ Features
 
@@ -57,19 +56,22 @@ voidhash-cli init
 
 ## 📚 Documentation
 
-For detailed documentation, visit [voidhash.com](https://voidhash.com/docs)
+For product documentation, visit [voidhash.com](https://voidhash.com/docs). To
+run the Community platform locally, see the [self-hosting guide](selfhost/README.md).
 
 ## 🤝 Contributing
 
-We welcome contributions! Please see our [Contributing Guide](CONTRIBUTING.md) for details.
+External pull requests are closed during private validation. Issues and private
+security reports remain welcome; see the [Contributing Guide](CONTRIBUTING.md)
+and [Security Policy](SECURITY.md).
 
 ## 📄 License
 
-This repository uses explicit license zones. The code currently published here
-is MIT-licensed unless a more specific notice says otherwise. Future service
-and self-hosting code will use AGPL-3.0-only, and future `ee/` code will have a
-separate source-available enterprise license. See [LICENSE.md](LICENSE.md) for
-the authoritative map and full texts.
+This repository uses explicit license zones. SDKs and client libraries are
+MIT-licensed; the backend, dashboard, service packages, and self-hosting code
+are AGPL-3.0-only. Any future `ee/` code will carry a separate source-available
+enterprise license. See [LICENSE.md](LICENSE.md) for the authoritative map and
+full texts.
 
 ## 🔗 Links
 
diff --git a/apps/mimic-admin/package.json b/apps/mimic-admin/package.json
index db3d20691..23e072d21 100644
--- a/apps/mimic-admin/package.json
+++ b/apps/mimic-admin/package.json
@@ -60,6 +60,6 @@
     "tw-animate-css": "^1.3.4",
     "typescript": "6.0.3",
     "vite": "catalog:",
-    "vite-plus": "0.1.23"
+    "vite-plus": "catalog:"
   }
 }
diff --git a/apps/mimic-cli/package.json b/apps/mimic-cli/package.json
index 9b3d70a9a..c8295506a 100644
--- a/apps/mimic-cli/package.json
+++ b/apps/mimic-cli/package.json
@@ -56,7 +56,7 @@
     "tsup": "^8.5.0",
     "tsx": "^4.19.3",
     "typescript": "5.8.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7"
   }
 }
diff --git a/examples/mimic-example/package.json b/examples/mimic-example/package.json
index 239fb9606..9eabd669c 100644
--- a/examples/mimic-example/package.json
+++ b/examples/mimic-example/package.json
@@ -49,6 +49,6 @@
     "tsx": "^4.19.3",
     "typescript": "5.8.3",
     "vite": "catalog:",
-    "vite-plus": "0.1.23"
+    "vite-plus": "catalog:"
   }
 }
diff --git a/packages/ai-shared/package.json b/packages/ai-shared/package.json
index 98578e7c8..7997a40b1 100644
--- a/packages/ai-shared/package.json
+++ b/packages/ai-shared/package.json
@@ -38,7 +38,7 @@
   "devDependencies": {
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "6.0.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.2.7"
   }
diff --git a/packages/app-store-server-sdk/package.json b/packages/app-store-server-sdk/package.json
index 73d0e6727..9d1bd289d 100644
--- a/packages/app-store-server-sdk/package.json
+++ b/packages/app-store-server-sdk/package.json
@@ -33,7 +33,7 @@
   "devDependencies": {
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "5.9.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7"
   },
   "peerDependencies": {
diff --git a/packages/emails/package.json b/packages/emails/package.json
index e146157ee..4061624c5 100644
--- a/packages/emails/package.json
+++ b/packages/emails/package.json
@@ -14,12 +14,12 @@
     "typecheck-go": "tsgo --noEmit"
   },
   "dependencies": {
-    "@react-email/components": "0.0.34"
+    "@react-email/components": "1.0.12"
   },
   "devDependencies": {
     "@types/react": "^19.1.5",
     "@types/react-dom": "^19.1.5",
-    "react-email": "3.0.7",
+    "react-email": "6.7.0",
     "typescript": "catalog:"
   },
   "peerDependencies": {
diff --git a/packages/google-play-server-sdk/package.json b/packages/google-play-server-sdk/package.json
index b9d5de3b4..468ead654 100644
--- a/packages/google-play-server-sdk/package.json
+++ b/packages/google-play-server-sdk/package.json
@@ -27,7 +27,7 @@
   "devDependencies": {
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "5.9.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7"
   },
   "peerDependencies": {
diff --git a/packages/mimic-core/package.json b/packages/mimic-core/package.json
index d6845fae0..60b74c376 100644
--- a/packages/mimic-core/package.json
+++ b/packages/mimic-core/package.json
@@ -30,7 +30,7 @@
   "devDependencies": {
     "tsdown": "^0.18.2",
     "typescript": "5.8.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7"
   }
 }
diff --git a/packages/mimic-schema/package.json b/packages/mimic-schema/package.json
index db783d36a..ffaed67ae 100644
--- a/packages/mimic-schema/package.json
+++ b/packages/mimic-schema/package.json
@@ -26,7 +26,7 @@
     "@voidhash/mimic": "workspace:*",
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "6.0.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.2.7"
   }
diff --git a/packages/mimic-server/package.json b/packages/mimic-server/package.json
index ac0d47987..b84a06c59 100644
--- a/packages/mimic-server/package.json
+++ b/packages/mimic-server/package.json
@@ -49,7 +49,7 @@
   "devDependencies": {
     "tsdown": "^0.18.2",
     "typescript": "5.8.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7"
   }
 }
diff --git a/packages/mimic/package.json b/packages/mimic/package.json
index 0412ed44e..e85b0b5cc 100644
--- a/packages/mimic/package.json
+++ b/packages/mimic/package.json
@@ -55,7 +55,7 @@
     "react-dom": "catalog:",
     "tsdown": "^0.18.2",
     "typescript": "5.8.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7",
     "zustand": "^5.0.9"
   },
diff --git a/packages/paywall-build/package.json b/packages/paywall-build/package.json
index e8156e371..6036b20cf 100644
--- a/packages/paywall-build/package.json
+++ b/packages/paywall-build/package.json
@@ -40,7 +40,7 @@
     "@voidhash/tsconfig": "workspace:*",
     "esbuild": "^0.25.10",
     "tsx": "^4.19.2",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.2.7"
   }
diff --git a/packages/paywall-builtins/package.json b/packages/paywall-builtins/package.json
index 8ef639eb6..004ff5ebb 100644
--- a/packages/paywall-builtins/package.json
+++ b/packages/paywall-builtins/package.json
@@ -37,7 +37,7 @@
     "@types/node": "^20",
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "6.0.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.2.7"
   }
diff --git a/packages/paywall-renderer-preact/package.json b/packages/paywall-renderer-preact/package.json
index d5a5e0ffe..8c0a2bb28 100644
--- a/packages/paywall-renderer-preact/package.json
+++ b/packages/paywall-renderer-preact/package.json
@@ -44,7 +44,7 @@
     "esbuild": "0.25.12",
     "typescript": "6.0.3",
     "vite": "catalog:",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7"
   }
 }
diff --git a/packages/paywall-renderer-web-core/package.json b/packages/paywall-renderer-web-core/package.json
index 587582904..19d5c47cb 100644
--- a/packages/paywall-renderer-web-core/package.json
+++ b/packages/paywall-renderer-web-core/package.json
@@ -36,7 +36,7 @@
   "devDependencies": {
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "6.0.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vitest": "^3.2.7"
   }
 }
diff --git a/packages/paywall-workspace/package.json b/packages/paywall-workspace/package.json
index d4728aa14..377b23ed0 100644
--- a/packages/paywall-workspace/package.json
+++ b/packages/paywall-workspace/package.json
@@ -38,7 +38,7 @@
     "@types/node": "^20",
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "6.0.3",
-    "vite-plus": "0.1.23",
+    "vite-plus": "catalog:",
     "vite-tsconfig-paths": "^5.1.4",
     "vitest": "^3.2.7"
   }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e01f258a1..aaa4246e1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -130,14 +130,14 @@ catalogs:
       specifier: ^7.3.5
       version: 7.3.5
     vite-plus:
-      specifier: 0.1.23
-      version: 0.1.23
+      specifier: 0.1.24
+      version: 0.1.24
     vite-tsconfig-paths:
       specifier: ^5.1.4
       version: 5.1.4
     vitest:
-      specifier: npm:@voidzero-dev/vite-plus-test@0.1.23
-      version: 0.1.23
+      specifier: npm:@voidzero-dev/vite-plus-test@0.1.24
+      version: 0.1.24
     zod:
       specifier: ^4.1.13
       version: 4.3.6
@@ -153,9 +153,12 @@ overrides:
   '@tanstack/react-start@>=1.0.0 <1.167.30': 1.167.30
   '@tootallnate/once@<2.0.1': 2.0.1
   '@xmldom/xmldom@<0.8.13': 0.8.13
+  '@srsholmes/vitest-react-native>esbuild': 0.28.1
+  ajv@<7: 6.14.0
   ajv@>=7.0.0-alpha.0 <8.18.0: 8.18.0
   brace-expansion@<1.1.13: 1.1.13
   brace-expansion@>=2.0.0 <2.0.3: 2.0.3
+  bundle-require>esbuild: 0.28.1
   defu@<=6.1.4: 6.1.7
   drizzle-orm@<0.45.2: 0.45.2
   effect: 4.0.0-beta.84
@@ -180,6 +183,7 @@ overrides:
   rollup@>=4 <4.59.0: 4.59.0
   shell-quote@>=1.1.0 <=1.8.3: 1.10.0
   tar@>=7 <7.5.11: 7.5.19
+  tsup>esbuild: 0.28.1
   undici@>=6 <6.27.0: 6.27.0
   vite@>=7 <=7.3.4: 7.3.5
   vite>esbuild: 0.28.1
@@ -327,22 +331,22 @@ importers:
         version: link:../../packages/tsconfig
       alchemy:
         specifier: 'catalog:'
-        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0)
+        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0)
       typescript:
         specifier: 'catalog:'
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   apps/cli:
     dependencies:
       '@better-auth/api-key':
         specifier: 'catalog:'
-        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
+        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
       '@effect/platform-node':
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -357,7 +361,7 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -379,7 +383,7 @@ importers:
         version: 0.86.6
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
@@ -394,10 +398,10 @@ importers:
         version: 4.21.0
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   apps/mimic-admin:
     dependencies:
@@ -470,7 +474,7 @@ importers:
     devDependencies:
       '@tailwindcss/vite':
         specifier: ^4.1.8
-        version: 4.3.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.3.0(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@types/react':
         specifier: 19.1.17
         version: 19.1.17
@@ -479,7 +483,7 @@ importers:
         version: 19.1.9(@types/react@19.1.17)
       '@vitejs/plugin-react':
         specifier: ^4.5.2
-        version: 4.7.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.7.0(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       tailwindcss:
         specifier: ^4.1.8
         version: 4.3.0
@@ -491,10 +495,10 @@ importers:
         version: 6.0.3
       vite:
         specifier: 'catalog:'
-        version: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   apps/mimic-cli:
     dependencies:
@@ -530,11 +534,11 @@ importers:
         specifier: 5.8.3
         version: 5.8.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   apps/mimic-db:
     dependencies:
@@ -571,19 +575,19 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   apps/studio:
     dependencies:
       '@tailwindcss/vite':
         specifier: ^4.1.13
-        version: 4.3.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 4.3.0(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitejs/plugin-react':
         specifier: ^5.2.0
-        version: 5.2.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.2.0(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -598,7 +602,7 @@ importers:
         version: 4.3.0
       vite:
         specifier: 'catalog:'
-        version: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
@@ -614,7 +618,7 @@ importers:
         version: 5.6.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   apps/www:
     dependencies:
@@ -897,7 +901,7 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 'catalog:'
-        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@tailwindcss/vite':
         specifier: 'catalog:'
         version: 4.3.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -918,7 +922,7 @@ importers:
         version: 5.2.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/ui':
         specifier: 4.1.0
-        version: 4.1.0(@voidzero-dev/vite-plus-test@0.1.23)
+        version: 4.1.0(@voidzero-dev/vite-plus-test@0.1.24)
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
@@ -942,10 +946,10 @@ importers:
         version: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   examples/mimic-example:
     dependencies:
@@ -1032,8 +1036,8 @@ importers:
         specifier: 'catalog:'
         version: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   examples/react-native-example:
     dependencies:
@@ -1066,7 +1070,7 @@ importers:
         version: 17.0.8(expo@54.0.33)(react@19.1.0)
       expo-router:
         specifier: ~6.0.23
-        version: 6.0.23(70ed454dc246c77d537ead71b0fe3992)
+        version: 6.0.23(dfbe19aec38065222a79f30aa387d0a8)
       expo-splash-screen:
         specifier: ~31.0.11
         version: 31.0.13(expo@54.0.33)
@@ -1149,10 +1153,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/paywalls:
     dependencies:
@@ -1189,7 +1193,7 @@ importers:
         version: 5.6.3
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   libraries/react-native:
     dependencies:
@@ -1208,10 +1212,10 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 0.1.5(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
@@ -1232,7 +1236,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -1256,7 +1260,7 @@ importers:
         version: 5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   libraries/web:
     dependencies:
@@ -1296,10 +1300,10 @@ importers:
         version: 5.6.3
       vite-tsconfig-paths:
         specifier: 'catalog:'
-        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/ai-shared:
     dependencies:
@@ -1323,14 +1327,14 @@ importers:
         specifier: 6.0.3
         version: 6.0.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
-        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/api-contracts:
     dependencies:
@@ -1367,11 +1371,11 @@ importers:
         specifier: 5.9.3
         version: 5.9.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/clickhouse-db:
     dependencies:
@@ -1448,7 +1452,7 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 'catalog:'
-        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -1460,10 +1464,10 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   packages/db:
     dependencies:
@@ -1497,22 +1501,22 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   packages/emails:
     dependencies:
       '@react-email/components':
-        specifier: 0.0.34
-        version: 0.0.34(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        specifier: 1.0.12
+        version: 1.0.12(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       react:
         specifier: ^19.1.0
-        version: 19.1.0
+        version: 19.2.7
       react-dom:
         specifier: ^19.1.0
-        version: 19.1.1(react@19.1.0)
+        version: 19.1.1(react@19.2.7)
     devDependencies:
       '@types/react':
         specifier: ^19.1.5
@@ -1521,8 +1525,8 @@ importers:
         specifier: ^19.1.5
         version: 19.1.9(@types/react@19.1.17)
       react-email:
-        specifier: 3.0.7
-        version: 3.0.7(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        specifier: 6.7.0
+        version: 6.7.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       typescript:
         specifier: 'catalog:'
         version: 6.0.3
@@ -1556,11 +1560,11 @@ importers:
         specifier: 5.9.3
         version: 5.9.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/lib:
     dependencies:
@@ -1606,11 +1610,11 @@ importers:
         specifier: 5.8.3
         version: 5.8.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       zustand:
         specifier: ^5.0.9
         version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
@@ -1624,11 +1628,11 @@ importers:
         specifier: 5.8.3
         version: 5.8.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/mimic-schema:
     dependencies:
@@ -1649,8 +1653,8 @@ importers:
         specifier: 6.0.3
         version: 6.0.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1674,11 +1678,11 @@ importers:
         specifier: 5.8.3
         version: 5.8.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-build:
     dependencies:
@@ -1702,8 +1706,8 @@ importers:
         specifier: ^4.19.2
         version: 4.21.0
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1730,8 +1734,8 @@ importers:
         specifier: 6.0.3
         version: 6.0.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1771,13 +1775,13 @@ importers:
         version: 6.0.3
       vite:
         specifier: 'catalog:'
-        version: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-renderer-web-core:
     dependencies:
@@ -1798,11 +1802,11 @@ importers:
         specifier: 6.0.3
         version: 6.0.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   packages/paywall-workspace:
     dependencies:
@@ -1829,8 +1833,8 @@ importers:
         specifier: 6.0.3
         version: 6.0.3
       vite-plus:
-        specifier: 0.1.23
-        version: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        specifier: 'catalog:'
+        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1882,13 +1886,13 @@ importers:
     dependencies:
       '@base-ui/react':
         specifier: ^1.1.0
-        version: 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       '@hookform/resolvers':
         specifier: ^5.1.1
-        version: 5.4.0(react-hook-form@7.81.0(react@19.1.0))
+        version: 5.4.0(react-hook-form@7.81.0(react@19.2.7))
       '@shadcn/react':
         specifier: ^0.2.0
-        version: 0.2.1(@types/react@19.1.17)(react@19.1.0)
+        version: 0.2.1(@types/react@19.1.17)(react@19.2.7)
       class-variance-authority:
         specifier: ^0.7.1
         version: 0.7.1
@@ -1897,7 +1901,7 @@ importers:
         version: 2.1.1
       cmdk:
         specifier: 1.1.1
-        version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       color-hash:
         specifier: ^2.0.2
         version: 2.0.2
@@ -1906,40 +1910,40 @@ importers:
         version: 4.4.0
       embla-carousel-react:
         specifier: ^8.5.2
-        version: 8.6.0(react@19.1.0)
+        version: 8.6.0(react@19.2.7)
       input-otp:
         specifier: ^1.4.2
-        version: 1.4.2(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 1.4.2(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       lucide-react:
         specifier: ^0.555.0
-        version: 0.555.0(react@19.1.0)
+        version: 0.555.0(react@19.2.7)
       next-themes:
         specifier: ^0.4.6
-        version: 0.4.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 0.4.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       radix-ui:
         specifier: ^1.4.2
-        version: 1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       react:
         specifier: ^19.1.0
-        version: 19.1.0
+        version: 19.2.7
       react-day-picker:
         specifier: 8.10.1
-        version: 8.10.1(date-fns@4.4.0)(react@19.1.0)
+        version: 8.10.1(date-fns@4.4.0)(react@19.2.7)
       react-dom:
         specifier: ^19.1.0
-        version: 19.1.1(react@19.1.0)
+        version: 19.1.1(react@19.2.7)
       react-hook-form:
         specifier: ^7.60.0
-        version: 7.81.0(react@19.1.0)
+        version: 7.81.0(react@19.2.7)
       react-resizable-panels:
         specifier: ^3.0.3
-        version: 3.0.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 3.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       recharts:
         specifier: ^2.15.4
-        version: 2.15.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 2.15.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       sonner:
         specifier: ^2.0.1
-        version: 2.0.7(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 2.0.7(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       tailwind-merge:
         specifier: ^3.0.2
         version: 3.6.0
@@ -1948,10 +1952,10 @@ importers:
         version: 1.4.0
       use-debounce:
         specifier: ^10.0.4
-        version: 10.1.1(react@19.1.0)
+        version: 10.1.1(react@19.2.7)
       vaul:
         specifier: ^1.1.2
-        version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+        version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       zod:
         specifier: ^4.1.13
         version: 4.3.6
@@ -2061,7 +2065,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   selfhost/platform-node:
     dependencies:
@@ -2098,7 +2102,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
 packages:
 
@@ -2314,6 +2318,10 @@ packages:
     resolution: {integrity: sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-annotate-as-pure@7.29.7':
+    resolution: {integrity: sha512-OoK6239jHPuSQOoS0kfTVKn0b/rVTk0seKq4Gd2UMLtmOVLjDC0ki3e+c90Trqv2gMfvJFqkiljrr568+qddiw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-compilation-targets@7.28.6':
     resolution: {integrity: sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==}
     engines: {node: '>=6.9.0'}
@@ -2324,8 +2332,8 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
-  '@babel/helper-create-class-features-plugin@7.28.6':
-    resolution: {integrity: sha512-dTOdvsjnG3xNT9Y0AUg1wAl38y+4Rl4sf9caSQZOXdNqVn+H+HbbJ4IyyHaIqNR6SW9oJpA/RuRjsjCw2IdIow==}
+  '@babel/helper-create-class-features-plugin@7.29.7':
+    resolution: {integrity: sha512-IY3ZD9Tmooqr3TUhc3DUWxiuo8xx1DWLhd5M7hQ+ZWJamqM2BbalrBJb2MisSLoYorOj75U03qULCxQTY9r3hg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': 7.29.6
@@ -2345,10 +2353,18 @@ packages:
     resolution: {integrity: sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-globals@7.29.7':
+    resolution: {integrity: sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-member-expression-to-functions@7.28.5':
     resolution: {integrity: sha512-cwM7SBRZcPCLgl8a7cY0soT1SptSzAlMH39vwiRpOQkJlh53r5hdHwLSCZpQdVLT39sZt+CRpNwYG4Y2v77atg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-member-expression-to-functions@7.29.7':
+    resolution: {integrity: sha512-j+7JYmk1JYDtACIGj0QJqqWZjoUpMoEikQGADMaHgCMCSDqd2+P32rfcibUNrGOMWrlzK1WJBdxrB3JJQZwWtg==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-module-imports@7.27.1':
     resolution: {integrity: sha512-0gSFWUPNXNopqtIPQvlD5WgXYI5GY2kP2cCvoT8kczjbfcfuIljTbcWrulD1CIPIX2gt1wghbDy08yE1p+/r3w==}
     engines: {node: '>=6.9.0'}
@@ -2357,16 +2373,30 @@ packages:
     resolution: {integrity: sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-module-imports@7.29.7':
+    resolution: {integrity: sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-module-transforms@7.28.6':
     resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': 7.29.6
 
+  '@babel/helper-module-transforms@7.29.7':
+    resolution: {integrity: sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': 7.29.6
+
   '@babel/helper-optimise-call-expression@7.27.1':
     resolution: {integrity: sha512-URMGH08NzYFhubNSGJrpUEphGKQwMQYBySzat5cAByY1/YgIRkULnIy3tAMeszlL/so2HbeilYloUmSpd7GdVw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-optimise-call-expression@7.29.7':
+    resolution: {integrity: sha512-+kmGVjcT9RGYzoDwdwEqEvGgKe3BYq+O1iGzjFubaNgZHwYHP6lsF2Yghf4kEuv9BV7tYDZ913aBW9am6YKong==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-plugin-utils@7.27.1':
     resolution: {integrity: sha512-1gn1Up5YXka3YYAHGKpbideQ5Yjf1tDa9qYcgysz+cNCXukyLl6DjPXhD3VRwSb8c0J9tA4b2+rHEZtc6R0tlw==}
     engines: {node: '>=6.9.0'}
@@ -2375,6 +2405,10 @@ packages:
     resolution: {integrity: sha512-S9gzZ/bz83GRysI7gAD4wPT/AI3uCnY+9xn+Mx/KPs2JwHJIz1W8PZkg2cqyt3RNOBM8ejcXhV6y8Og7ly/Dug==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-plugin-utils@7.29.7':
+    resolution: {integrity: sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-remap-async-to-generator@7.27.1':
     resolution: {integrity: sha512-7fiA521aVw8lSPeI4ZOD3vRFkoqkJcS+z4hFo82bFSH/2tNd6eJ5qCVMS5OzDmZh/kaHQeBaeyxK6wljcPtveA==}
     engines: {node: '>=6.9.0'}
@@ -2387,8 +2421,8 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
-  '@babel/helper-replace-supers@7.28.6':
-    resolution: {integrity: sha512-mq8e+laIk94/yFec3DxSjCRD2Z0TAjhVbEJY3UQrlwVo15Lmt7C2wAUbK4bjnTs4APkwsYLTahXRraQXhb1WCg==}
+  '@babel/helper-replace-supers@7.29.7':
+    resolution: {integrity: sha512-atfGXWSeCiF4DnKZIfmJfQRkSw9b9gNNXR1kqKjbhG4pGYCOnkp8OcTB8E3NXjBu8NpheSnOeNKz8KT7UNFTmQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': 7.29.6
@@ -2397,6 +2431,10 @@ packages:
     resolution: {integrity: sha512-Tub4ZKEXqbPjXgWLl2+3JpQAYBJ8+ikpQ2Ocj/q/r0LwE3UhENh7EUabyHjz2kCEsrRY83ew2DQdHluuiDQFzg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-skip-transparent-expression-wrappers@7.29.7':
+    resolution: {integrity: sha512-brcMGQaVzIeUb+6/bs1Av0f8YuNNjKY2JyvfRCsFuFsdKccEQ5Ges2y74D74NZ1Rz8lKJ9ksJkfqwQFJ/iNEyQ==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-string-parser@7.29.7':
     resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
     engines: {node: '>=6.9.0'}
@@ -2409,6 +2447,10 @@ packages:
     resolution: {integrity: sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-validator-option@7.29.7':
+    resolution: {integrity: sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-wrap-function@7.28.3':
     resolution: {integrity: sha512-zdf983tNfLZFletc0RRXYrHrucBEg95NIFMkn6K9dbeMYnsgHaSBGcQqdsCSStG2PYwRre0Qc2NNSCXbG+xc6g==}
     engines: {node: '>=6.9.0'}
@@ -2421,8 +2463,8 @@ packages:
     resolution: {integrity: sha512-llL88JShoCsth8fF8R4SJnIn+WLvR6ccFxu1H3FlMhDontdcmZWf2HgIZ7AIqV3Xcck1idlohrN4EUBQz6klbw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/parser@7.24.5':
-    resolution: {integrity: sha512-EOv5IK8arwh3LI47dz1b0tKUb/1uhHAnHJOrjgtQMIpu1uXd9mlFrJg9IUgGUgZ41Ch0K8REPTYpO7B76b4vJg==}
+  '@babel/parser@7.27.0':
+    resolution: {integrity: sha512-iaepho73/2Pz7w2eMS0Q5f83+0RKI7i4xmiYeBmDzfRVbQtTOG7Ts0S4HzJVsTMGI9keU8rNfuZr8DKfSt7Yyg==}
     engines: {node: '>=6.0.0'}
     hasBin: true
 
@@ -2562,6 +2604,12 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
+  '@babel/plugin-syntax-jsx@7.29.7':
+    resolution: {integrity: sha512-TSu8+mHCoEaaCDEZ0I3+6mvTBYR4PCxQwf2z9/r5Tbztv6NaLR3B9thGTTxX2WGuGHJqRiAbKPeGTJ5XWXVg6A==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': 7.29.6
+
   '@babel/plugin-syntax-logical-assignment-operators@7.10.4':
     resolution: {integrity: sha512-d8waShlpFDinQ5MtvGU9xDAOzKH47+FFoney2baFIoMr952hKOLp1HR7VszoZvOsV/4+RRszNY7D17ba0te0ig==}
     peerDependencies:
@@ -2610,6 +2658,12 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
+  '@babel/plugin-syntax-typescript@7.29.7':
+    resolution: {integrity: sha512-ngr+82Sh0xMz25TPCZi+nC2iTzjfCdWS2ONXTp/PtSCHCgaCNBpdMqgvJ2ccdLlClVZ7sisIgB914j/JFe+RZA==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': 7.29.6
+
   '@babel/plugin-syntax-unicode-sets-regex@7.18.6':
     resolution: {integrity: sha512-727YkEAPwSIQTv5im8QHz3upqp92JTWhidIC81Tdx4VJYIte/VndKf1qKrfnnhPLiPghStWfvC/iFaMCQu7Nqg==}
     engines: {node: '>=6.9.0'}
@@ -2772,8 +2826,8 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
-  '@babel/plugin-transform-modules-commonjs@7.28.6':
-    resolution: {integrity: sha512-jppVbf8IV9iWWwWTQIxJMAJCWBuuKx71475wHwYytrRGQ2CWiDvYlADQno3tcYpS/T2UUWFQp3nVtYfK/YBQrA==}
+  '@babel/plugin-transform-modules-commonjs@7.29.7':
+    resolution: {integrity: sha512-j0vCldybPC5b5dwCQOJ21uKtHzt7hxLygJTg9eF1ScfaikEDNfzn94XoW5Fi+seBR0nCyL23xaBFFkq7dTM8XQ==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': 7.29.6
@@ -2964,8 +3018,8 @@ packages:
     peerDependencies:
       '@babel/core': 7.29.6
 
-  '@babel/plugin-transform-typescript@7.28.6':
-    resolution: {integrity: sha512-0YWL2RFxOqEm9Efk5PvreamxPME8OyY0wM5wh5lHjF+VtVhdneCWGzZeSqzOfiobVqQaNCd2z0tQvnI9DaPWPw==}
+  '@babel/plugin-transform-typescript@7.29.7':
+    resolution: {integrity: sha512-jK52h8LaLc7JarhQV2ofeFMts4H7vnOXnqZNA6fYglBTZewRBE51KWt3BUltW1P+KoPsYkHoJeXePuz4zo2LMw==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': 7.29.6
@@ -3039,10 +3093,18 @@ packages:
     resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/traverse@7.27.0':
+    resolution: {integrity: sha512-19lYZFzYVQkkHkl4Cy4WrAVcqBkgvV2YM2TU3xG6DIwO7O3ecbDPfW3yM3bjAGcqcQHi+CCtjMR3dIEHxsd6bA==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/traverse@7.29.0':
     resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/traverse@7.29.7':
+    resolution: {integrity: sha512-EhlfNQtZ+NK22w5BM61ciuiq1m58ed33Wr1Xan//ZRTy6hgjnwyCffRYwzsGXdASJSUJ1guZILsErh1eQcl+zw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/types@7.29.7':
     resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
     engines: {node: '>=6.9.0'}
@@ -3488,12 +3550,6 @@ packages:
   '@emnapi/wasi-threads@1.2.1':
     resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
 
-  '@esbuild/aix-ppc64@0.23.0':
-    resolution: {integrity: sha512-3sG8Zwa5fMcA9bgqB8AfWPQ+HFke6uD3h1s3RIwUNK8EG7a4buxvuFTs3j1IMs2NXAk9F30C/FF4vxRgQCcmoQ==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
   '@esbuild/aix-ppc64@0.25.12':
     resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
     engines: {node: '>=18'}
@@ -3506,24 +3562,12 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/aix-ppc64@0.27.7':
-    resolution: {integrity: sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
   '@esbuild/aix-ppc64@0.28.1':
     resolution: {integrity: sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/android-arm64@0.23.0':
-    resolution: {integrity: sha512-EuHFUYkAVfU4qBdyivULuu03FhJO4IJN9PGuABGrFy4vUuzk91P2d+npxHcFdpUnfYKy0PuV+n6bKIpHOB3prQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
   '@esbuild/android-arm64@0.25.12':
     resolution: {integrity: sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==}
     engines: {node: '>=18'}
@@ -3536,24 +3580,12 @@ packages:
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm64@0.27.7':
-    resolution: {integrity: sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
   '@esbuild/android-arm64@0.28.1':
     resolution: {integrity: sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm@0.23.0':
-    resolution: {integrity: sha512-+KuOHTKKyIKgEEqKbGTK8W7mPp+hKinbMBeEnNzjJGyFcWsfrXjSTNluJHCY1RqhxFurdD8uNXQDei7qDlR6+g==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
   '@esbuild/android-arm@0.25.12':
     resolution: {integrity: sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==}
     engines: {node: '>=18'}
@@ -3566,24 +3598,12 @@ packages:
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-arm@0.27.7':
-    resolution: {integrity: sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
   '@esbuild/android-arm@0.28.1':
     resolution: {integrity: sha512-0k2F129Xdio1TdJfzJ8sy1Q47vUD2NnwdhiAf7drUN1EBTfPf4hsFCtmMgu/6m8JSzsBrlmVjudMBQqOfG8usQ==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-x64@0.23.0':
-    resolution: {integrity: sha512-WRrmKidLoKDl56LsbBMhzTTBxrsVwTKdNbKDalbEZr0tcsBgCLbEtoNthOW6PX942YiYq8HzEnb4yWQMLQuipQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
   '@esbuild/android-x64@0.25.12':
     resolution: {integrity: sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==}
     engines: {node: '>=18'}
@@ -3596,24 +3616,12 @@ packages:
     cpu: [x64]
     os: [android]
 
-  '@esbuild/android-x64@0.27.7':
-    resolution: {integrity: sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
   '@esbuild/android-x64@0.28.1':
     resolution: {integrity: sha512-dbwY7ltSMDWsRatcRpCnES4F+im88OCUgGZjy52shC7GqHRE/cYlxNbB4Z4UpJswpcc4Qxd2oE/ufM0p61IKng==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [android]
 
-  '@esbuild/darwin-arm64@0.23.0':
-    resolution: {integrity: sha512-YLntie/IdS31H54Ogdn+v50NuoWF5BDkEUFpiOChVa9UnKpftgwzZRrI4J132ETIi+D8n6xh9IviFV3eXdxfow==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
   '@esbuild/darwin-arm64@0.25.12':
     resolution: {integrity: sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==}
     engines: {node: '>=18'}
@@ -3626,24 +3634,12 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-arm64@0.27.7':
-    resolution: {integrity: sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
   '@esbuild/darwin-arm64@0.28.1':
     resolution: {integrity: sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.23.0':
-    resolution: {integrity: sha512-IMQ6eme4AfznElesHUPDZ+teuGwoRmVuuixu7sv92ZkdQcPbsNHzutd+rAfaBKo8YK3IrBEi9SLLKWJdEvJniQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
   '@esbuild/darwin-x64@0.25.12':
     resolution: {integrity: sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==}
     engines: {node: '>=18'}
@@ -3656,24 +3652,12 @@ packages:
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.27.7':
-    resolution: {integrity: sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
   '@esbuild/darwin-x64@0.28.1':
     resolution: {integrity: sha512-zfdzgK9ACBNZLI/CyHTOx81SyNbM6YXn7rxSgX97VjyiPl9W1i4Ka4fgKECEoFCKGpvBj5qArWIGgQjOwkgskQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/freebsd-arm64@0.23.0':
-    resolution: {integrity: sha512-0muYWCng5vqaxobq6LB3YNtevDFSAZGlgtLoAc81PjUfiFz36n4KMpwhtAd4he8ToSI3TGyuhyx5xmiWNYZFyw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
   '@esbuild/freebsd-arm64@0.25.12':
     resolution: {integrity: sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==}
     engines: {node: '>=18'}
@@ -3686,24 +3670,12 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-arm64@0.27.7':
-    resolution: {integrity: sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
   '@esbuild/freebsd-arm64@0.28.1':
     resolution: {integrity: sha512-wG2EA8ENdEI0qhkSZMjfqrdY+ziCYCPMmtZjjIwOmXFjmyzEHn+UUxk5of+SYsjtfs3VpnlC7QLzSI5hY/rOAw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.23.0':
-    resolution: {integrity: sha512-XKDVu8IsD0/q3foBzsXGt/KjD/yTKBCIwOHE1XwiXmrRwrX6Hbnd5Eqn/WvDekddK21tfszBSrE/WMaZh+1buQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
   '@esbuild/freebsd-x64@0.25.12':
     resolution: {integrity: sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==}
     engines: {node: '>=18'}
@@ -3716,24 +3688,12 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.27.7':
-    resolution: {integrity: sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
   '@esbuild/freebsd-x64@0.28.1':
     resolution: {integrity: sha512-i7dZ9vQgnvSCzi/rYCXNgtF/U+eKZNJBzu3eTQbRgHnM7tNSizLOkRFAl3qzVc/Op/u5YkHHa4pf/3DOYHthLQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/linux-arm64@0.23.0':
-    resolution: {integrity: sha512-j1t5iG8jE7BhonbsEg5d9qOYcVZv/Rv6tghaXM/Ug9xahM0nX/H2gfu6X6z11QRTMT6+aywOMA8TDkhPo8aCGw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
   '@esbuild/linux-arm64@0.25.12':
     resolution: {integrity: sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==}
     engines: {node: '>=18'}
@@ -3746,24 +3706,12 @@ packages:
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm64@0.27.7':
-    resolution: {integrity: sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
   '@esbuild/linux-arm64@0.28.1':
     resolution: {integrity: sha512-yHs+0uc8+nvEAfAfxrWQKK5peSNzBc4PegcMO0EJ2hT71uA7vB8Ihg2e77R2P7SG5uYjPbHlLLmve4LLLRCf0g==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm@0.23.0':
-    resolution: {integrity: sha512-SEELSTEtOFu5LPykzA395Mc+54RMg1EUgXP+iw2SJ72+ooMwVsgfuwXo5Fn0wXNgWZsTVHwY2cg4Vi/bOD88qw==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
   '@esbuild/linux-arm@0.25.12':
     resolution: {integrity: sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==}
     engines: {node: '>=18'}
@@ -3776,24 +3724,12 @@ packages:
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-arm@0.27.7':
-    resolution: {integrity: sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
   '@esbuild/linux-arm@0.28.1':
     resolution: {integrity: sha512-qVXBOHQS+d5Y722GwJzJUtOLlX7km3CraOaGormF1pDtPd2C/l1SHRPgjLunLGe51Sh5YYWKMFDyV4SxgMQYTQ==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.23.0':
-    resolution: {integrity: sha512-P7O5Tkh2NbgIm2R6x1zGJJsnacDzTFcRWZyTTMgFdVit6E98LTxO+v8LCCLWRvPrjdzXHx9FEOA8oAZPyApWUA==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
   '@esbuild/linux-ia32@0.25.12':
     resolution: {integrity: sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==}
     engines: {node: '>=18'}
@@ -3806,24 +3742,12 @@ packages:
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.27.7':
-    resolution: {integrity: sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
   '@esbuild/linux-ia32@0.28.1':
     resolution: {integrity: sha512-d1z4ZuP0ajrfz/FhGT4vv278rX8KnPPJx8i5+AtK7TYbx9Le9F1hyzurZpkEyjkGa9dUGhQow4C1NmeGvqxN2w==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.23.0':
-    resolution: {integrity: sha512-InQwepswq6urikQiIC/kkx412fqUZudBO4SYKu0N+tGhXRWUqAx+Q+341tFV6QdBifpjYgUndV1hhMq3WeJi7A==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
   '@esbuild/linux-loong64@0.25.12':
     resolution: {integrity: sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==}
     engines: {node: '>=18'}
@@ -3836,24 +3760,12 @@ packages:
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.27.7':
-    resolution: {integrity: sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
   '@esbuild/linux-loong64@0.28.1':
     resolution: {integrity: sha512-M5sRjUVZrkm1OAPR3dlOYzNmN+loZKGVi1VUQGrwuqLcbR6qeAz+famMhjASeH3YVKvZz+zT1jlh/keC3Rj/lg==}
     engines: {node: '>=18'}
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.23.0':
-    resolution: {integrity: sha512-J9rflLtqdYrxHv2FqXE2i1ELgNjT+JFURt/uDMoPQLcjWQA5wDKgQA4t/dTqGa88ZVECKaD0TctwsUfHbVoi4w==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
   '@esbuild/linux-mips64el@0.25.12':
     resolution: {integrity: sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==}
     engines: {node: '>=18'}
@@ -3866,24 +3778,12 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.27.7':
-    resolution: {integrity: sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
   '@esbuild/linux-mips64el@0.28.1':
     resolution: {integrity: sha512-mRObBZeHh2OxcBFPWE/FjylkRgZdYuiTR3vaTozquCGOH14iP9oN4x4Ge81CoIDYQrXmIxpFumJBu5MtZpnQJQ==}
     engines: {node: '>=18'}
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.23.0':
-    resolution: {integrity: sha512-cShCXtEOVc5GxU0fM+dsFD10qZ5UpcQ8AM22bYj0u/yaAykWnqXJDpd77ublcX6vdDsWLuweeuSNZk4yUxZwtw==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
   '@esbuild/linux-ppc64@0.25.12':
     resolution: {integrity: sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==}
     engines: {node: '>=18'}
@@ -3896,24 +3796,12 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.27.7':
-    resolution: {integrity: sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
   '@esbuild/linux-ppc64@0.28.1':
     resolution: {integrity: sha512-slScBsMAb3GFDcdrCgLwZtPYRoH2H/youv10QiZyRjmsP48fznoveWytSgCI/R0ZcUgpc0ZhIUEx6LHts8yrfQ==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.23.0':
-    resolution: {integrity: sha512-HEtaN7Y5UB4tZPeQmgz/UhzoEyYftbMXrBCUjINGjh3uil+rB/QzzpMshz3cNUxqXN7Vr93zzVtpIDL99t9aRw==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
   '@esbuild/linux-riscv64@0.25.12':
     resolution: {integrity: sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==}
     engines: {node: '>=18'}
@@ -3926,24 +3814,12 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.27.7':
-    resolution: {integrity: sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
   '@esbuild/linux-riscv64@0.28.1':
     resolution: {integrity: sha512-kw0owk1o0GFETUJyW0jc0G4Yzs0BHZn0JDZ8JRT088vjJYX777BAs1fDGxAC+q831qOs2DTC96mNsG2opdfyyQ==}
     engines: {node: '>=18'}
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.23.0':
-    resolution: {integrity: sha512-WDi3+NVAuyjg/Wxi+o5KPqRbZY0QhI9TjrEEm+8dmpY9Xir8+HE/HNx2JoLckhKbFopW0RdO2D72w8trZOV+Wg==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
   '@esbuild/linux-s390x@0.25.12':
     resolution: {integrity: sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==}
     engines: {node: '>=18'}
@@ -3956,24 +3832,12 @@ packages:
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.27.7':
-    resolution: {integrity: sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
   '@esbuild/linux-s390x@0.28.1':
     resolution: {integrity: sha512-/lAIjX8aYFRByhh6L5rYtPEDRqa9de/4V/juOXcta5frjvzXO4/sqEtyytse0g3zZFuWu5cDN0MkLz2qRDD2Ag==}
     engines: {node: '>=18'}
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-x64@0.23.0':
-    resolution: {integrity: sha512-a3pMQhUEJkITgAw6e0bWA+F+vFtCciMjW/LPtoj99MhVt+Mfb6bbL9hu2wmTZgNd994qTAEw+U/r6k3qHWWaOQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
   '@esbuild/linux-x64@0.25.12':
     resolution: {integrity: sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==}
     engines: {node: '>=18'}
@@ -3986,12 +3850,6 @@ packages:
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/linux-x64@0.27.7':
-    resolution: {integrity: sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
   '@esbuild/linux-x64@0.28.1':
     resolution: {integrity: sha512-u/anNYF2mmVOEDwLtnQ1wOr3EZ9sTNGLWrsYGYwHWzGA3Si84IOkHXlbWTD1NB+9/1lcnweYKO54uhxZydNzfA==}
     engines: {node: '>=18'}
@@ -4010,24 +3868,12 @@ packages:
     cpu: [arm64]
     os: [netbsd]
 
-  '@esbuild/netbsd-arm64@0.27.7':
-    resolution: {integrity: sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
   '@esbuild/netbsd-arm64@0.28.1':
     resolution: {integrity: sha512-oks0DYbLwWMmaakTsCb+zL4E+aHRVLom9IJZOAthMQEPiQmydXHkziYEsGYRx0uNV/IjEKGAV941JzH02pflqw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.23.0':
-    resolution: {integrity: sha512-cRK+YDem7lFTs2Q5nEv/HHc4LnrfBCbH5+JHu6wm2eP+d8OZNoSMYgPZJq78vqQ9g+9+nMuIsAO7skzphRXHyw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
   '@esbuild/netbsd-x64@0.25.12':
     resolution: {integrity: sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==}
     engines: {node: '>=18'}
@@ -4040,24 +3886,12 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.27.7':
-    resolution: {integrity: sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
   '@esbuild/netbsd-x64@0.28.1':
     resolution: {integrity: sha512-aeL6lAnN89Hz43Mlh1G8ARasbuoYvSITDEx0tHh5b7jJnHcssqgjy9Yx430GDpmCa6OyrKoS0aNRjKundRizGg==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/openbsd-arm64@0.23.0':
-    resolution: {integrity: sha512-suXjq53gERueVWu0OKxzWqk7NxiUWSUlrxoZK7usiF50C6ipColGR5qie2496iKGYNLhDZkPxBI3erbnYkU0rQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
   '@esbuild/openbsd-arm64@0.25.12':
     resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
     engines: {node: '>=18'}
@@ -4070,24 +3904,12 @@ packages:
     cpu: [arm64]
     os: [openbsd]
 
-  '@esbuild/openbsd-arm64@0.27.7':
-    resolution: {integrity: sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
   '@esbuild/openbsd-arm64@0.28.1':
     resolution: {integrity: sha512-MEFJe5C3R8pwXdZ5Y21oo6m7ePiS0d9pWucn99O/wvyJZChoIQKrQDxKrGeW8F5+T0okTHesAmDeiHDTIq0V/Q==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.23.0':
-    resolution: {integrity: sha512-6p3nHpby0DM/v15IFKMjAaayFhqnXV52aEmv1whZHX56pdkK+MEaLoQWj+H42ssFarP1PcomVhbsR4pkz09qBg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
   '@esbuild/openbsd-x64@0.25.12':
     resolution: {integrity: sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==}
     engines: {node: '>=18'}
@@ -4100,12 +3922,6 @@ packages:
     cpu: [x64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.27.7':
-    resolution: {integrity: sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
   '@esbuild/openbsd-x64@0.28.1':
     resolution: {integrity: sha512-i/ZLIOafE0Z8cI/XANJAixoJL/uRAoS2xOA3rb0xN+KK0K177cMAsQYkzHtBrtMXAKuAc7HGgcWiZ/sRC1Nxgw==}
     engines: {node: '>=18'}
@@ -4124,24 +3940,12 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
-  '@esbuild/openharmony-arm64@0.27.7':
-    resolution: {integrity: sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-
   '@esbuild/openharmony-arm64@0.28.1':
     resolution: {integrity: sha512-ge+Z7EXFNt2BO1oAMsVpiQ8EwndV9i1xXerAeTIK7AtPs3bKFXQM7nlRxDSIUIMeueR1CNXxqztLzdNeReKBJg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openharmony]
 
-  '@esbuild/sunos-x64@0.23.0':
-    resolution: {integrity: sha512-BFelBGfrBwk6LVrmFzCq1u1dZbG4zy/Kp93w2+y83Q5UGYF1d8sCzeLI9NXjKyujjBBniQa8R8PzLFAUrSM9OA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
   '@esbuild/sunos-x64@0.25.12':
     resolution: {integrity: sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==}
     engines: {node: '>=18'}
@@ -4154,24 +3958,12 @@ packages:
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/sunos-x64@0.27.7':
-    resolution: {integrity: sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
   '@esbuild/sunos-x64@0.28.1':
     resolution: {integrity: sha512-BEjgtECkL3vY+SaSQ6nzVfiALUeFxpawyp8Jmf5PtYhf1Ug40N1h/hxlhts+f1FvSvarEigdxS3BlSMI2PJLcQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/win32-arm64@0.23.0':
-    resolution: {integrity: sha512-lY6AC8p4Cnb7xYHuIxQ6iYPe6MfO2CC43XXKo9nBXDb35krYt7KGhQnOkRGar5psxYkircpCqfbNDB4uJbS2jQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
   '@esbuild/win32-arm64@0.25.12':
     resolution: {integrity: sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==}
     engines: {node: '>=18'}
@@ -4184,24 +3976,12 @@ packages:
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-arm64@0.27.7':
-    resolution: {integrity: sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
   '@esbuild/win32-arm64@0.28.1':
     resolution: {integrity: sha512-lCv9eK/H6ZJWbE7bh2nw54CZ9M2nupBxJcTsdk/QQnWkdSjKGuxmmH8/GWrlT1eMmZfn4dGcCjRte397WqfQXA==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.23.0':
-    resolution: {integrity: sha512-7L1bHlOTcO4ByvI7OXVI5pNN6HSu6pUQq9yodga8izeuB1KcT2UkHaH6118QJwopExPn0rMHIseCTx1CRo/uNA==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
   '@esbuild/win32-ia32@0.25.12':
     resolution: {integrity: sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==}
     engines: {node: '>=18'}
@@ -4214,24 +3994,12 @@ packages:
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.27.7':
-    resolution: {integrity: sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
   '@esbuild/win32-ia32@0.28.1':
     resolution: {integrity: sha512-zvb/mB2bSCoJOpoCBgYKKpX6YM6mJBlBUVUtVj41DlZJVEB6/0CKlRYxP5wWl1C1ILiCoAU5wZZ4q1P3qeS6Eg==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-x64@0.23.0':
-    resolution: {integrity: sha512-Arm+WgUFLUATuoxCJcahGuk6Yj9Pzxd6l11Zb/2aAuv5kWWvvfhLFo2fni4uSK5vzlUdCGZ/BdV5tH8klj8p8g==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
   '@esbuild/win32-x64@0.25.12':
     resolution: {integrity: sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==}
     engines: {node: '>=18'}
@@ -4244,14 +4012,8 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@esbuild/win32-x64@0.27.7':
-    resolution: {integrity: sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
-  '@esbuild/win32-x64@0.28.1':
-    resolution: {integrity: sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==}
+  '@esbuild/win32-x64@0.28.1':
+    resolution: {integrity: sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [win32]
@@ -4475,130 +4237,9 @@ packages:
   '@iconify/utils@3.1.4':
     resolution: {integrity: sha512-b1S7B1k9ohZ+iNTi2ATxbRYG9fTrJmUT0rc46bvVnNxqNRGW7dyo/vRREwyniI5IRN2RSJHDcm+s3BjWrSAjHw==}
 
-  '@img/sharp-darwin-arm64@0.33.5':
-    resolution: {integrity: sha512-UT4p+iz/2H4twwAoLCqfA9UH5pI6DggwKEGuaPy7nCVQ8ZsiY5PIcrRvD1DzuY3qYL07NtIQcWnBSY/heikIFQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-darwin-x64@0.33.5':
-    resolution: {integrity: sha512-fyHac4jIc1ANYGRDxtiqelIbdWkIuQaI84Mv45KvGRRxSAa7o7d1ZKAOBaYbnepLC1WqxfpimdeWfvqqSGwR2Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-libvips-darwin-arm64@1.0.4':
-    resolution: {integrity: sha512-XblONe153h0O2zuFfTAbQYAX2JhYmDHeWikp1LM9Hul9gVPjFY427k6dFEcOL72O01QxQsWi761svJ/ev9xEDg==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-libvips-darwin-x64@1.0.4':
-    resolution: {integrity: sha512-xnGR8YuZYfJGmWPvmlunFaWJsb9T/AO2ykoP3Fz/0X5XV2aoYBPkX6xqCQvUTKKiLddarLaxpzNe+b1hjeWHAQ==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-libvips-linux-arm64@1.0.4':
-    resolution: {integrity: sha512-9B+taZ8DlyyqzZQnoeIvDVR/2F4EbMepXMc/NdVbkzsJbzkUjhXv/70GQJ7tdLA4YJgNP25zukcxpX2/SueNrA==}
-    cpu: [arm64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-arm@1.0.5':
-    resolution: {integrity: sha512-gvcC4ACAOPRNATg/ov8/MnbxFDJqf/pDePbBnuBDcjsI8PssmjoKMAz4LtLaVi+OnSb5FK/yIOamqDwGmXW32g==}
-    cpu: [arm]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-s390x@1.0.4':
-    resolution: {integrity: sha512-u7Wz6ntiSSgGSGcjZ55im6uvTrOxSIS8/dgoVMoiGE9I6JAfU50yH5BoDlYA1tcuGS7g/QNtetJnxA6QEsCVTA==}
-    cpu: [s390x]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linux-x64@1.0.4':
-    resolution: {integrity: sha512-MmWmQ3iPFZr0Iev+BAgVMb3ZyC4KeFc3jFxnNbEPas60e1cIfevbtuyf9nDGIzOaW9PdnDciJm+wFFaTlj5xYw==}
-    cpu: [x64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
-    resolution: {integrity: sha512-9Ti+BbTYDcsbp4wfYib8Ctm1ilkugkA/uscUn6UXK1ldpC1JjiXbLfFZtRlBhjPZ5o1NCLiDbg8fhUPKStHoTA==}
-    cpu: [arm64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
-    resolution: {integrity: sha512-viYN1KX9m+/hGkJtvYYp+CCLgnJXwiQB39damAO7WMdKWlIhmYTfHjwSbQeUK/20vY154mwezd9HflVFM1wVSw==}
-    cpu: [x64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-linux-arm64@0.33.5':
-    resolution: {integrity: sha512-JMVv+AMRyGOHtO1RFBiJy/MBsgz0x4AWrT6QoEVVTyh1E39TrCUpTRI7mx9VksGX4awWASxqCYLCV4wBZHAYxA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-arm@0.33.5':
-    resolution: {integrity: sha512-JTS1eldqZbJxjvKaAkxhZmBqPRGmxgu+qFKSInv8moZ2AmT5Yib3EQ1c6gp493HvrvV8QgdOXdyaIBrhvFhBMQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-s390x@0.33.5':
-    resolution: {integrity: sha512-y/5PCd+mP4CA/sPDKl2961b+C9d+vPAveS33s6Z3zfASk2j5upL6fXVPZi7ztePZ5CuH+1kW8JtvxgbuXHRa4Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [s390x]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linux-x64@0.33.5':
-    resolution: {integrity: sha512-opC+Ok5pRNAzuvq1AG0ar+1owsu842/Ab+4qvU879ippJBHvyY5n2mxF1izXqkPYlGuP/M556uh53jRLJmzTWA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-    libc: [glibc]
-
-  '@img/sharp-linuxmusl-arm64@0.33.5':
-    resolution: {integrity: sha512-XrHMZwGQGvJg2V/oRSUfSAfjfPxO+4DkiRh6p2AFjLQztWUuY/o8Mq0eMQVIY7HJ1CDQUJlxGGZRw1a5bqmd1g==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-linuxmusl-x64@0.33.5':
-    resolution: {integrity: sha512-WT+d/cgqKkkKySYmqoZ8y3pxx7lx9vVejxW/W4DOFMYVSkErR+w7mf2u8m/y4+xHe7yY9DAXQMWQhpnMuFfScw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-    libc: [musl]
-
-  '@img/sharp-wasm32@0.33.5':
-    resolution: {integrity: sha512-ykUW4LVGaMcU9lu9thv85CbRMAwfeadCJHRsg2GmeRa/cJxsVY9Rbd57JcMxBkKHag5U/x7TSBpScF4U8ElVzg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [wasm32]
-
-  '@img/sharp-win32-ia32@0.33.5':
-    resolution: {integrity: sha512-T36PblLaTwuVJ/zw/LaH0PdZkRz5rd3SmMHX8GSmR7vtNSP5Z6bQkExdSK7xGWyxLw4sUknBuugTelgw2faBbQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [ia32]
-    os: [win32]
-
-  '@img/sharp-win32-x64@0.33.5':
-    resolution: {integrity: sha512-MpY/o8/8kj+EcnxwvrP4aTJSWw/aZ7JIGR4aBeZkZw5B7/Jn+tY9/VNwtcoGmdT7GfggGIU4kygOMSbYnOrAbg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [win32]
-
   '@ioredis/commands@1.5.0':
     resolution: {integrity: sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==}
 
-  '@isaacs/cliui@8.0.2':
-    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
-    engines: {node: '>=12'}
-
   '@isaacs/fs-minipass@4.0.1':
     resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
     engines: {node: '>=18.0.0'}
@@ -4615,6 +4256,10 @@ packages:
     resolution: {integrity: sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==}
     engines: {node: '>=8'}
 
+  '@istanbuljs/schema@0.1.6':
+    resolution: {integrity: sha512-+Sg6GCR/wy1oSmQDFq4LQDAhm3ETKnorxN+y5nbLULOR3P0c14f2Wurzj3/xqPXtasLFfHd5iRFQ7AJt4KH2cw==}
+    engines: {node: '>=8'}
+
   '@jest/console@29.7.0':
     resolution: {integrity: sha512-5Ni4CU7XHQi32IJ398EEP4RrB8eV09sXP2ROqD4bksHrnTree52PsxvX8tpL8LvTZ3pFzXyPbNQReSN41CAhOg==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -4843,61 +4488,6 @@ packages:
   '@neon-rs/load@0.0.4':
     resolution: {integrity: sha512-kTPhdZyTQxB+2wpiRcFWrDcejc4JI6tkPuS7UZCG4l6Zvc5kU/gGQ/ozvHTh1XR5tS+UlfAfGuPajjzQjCiHCw==}
 
-  '@next/env@15.1.2':
-    resolution: {integrity: sha512-Hm3jIGsoUl6RLB1vzY+dZeqb+/kWPZ+h34yiWxW0dV87l8Im/eMOwpOA+a0L78U0HM04syEjXuRlCozqpwuojQ==}
-
-  '@next/swc-darwin-arm64@15.1.2':
-    resolution: {integrity: sha512-b9TN7q+j5/7+rGLhFAVZiKJGIASuo8tWvInGfAd8wsULjB1uNGRCj1z1WZwwPWzVQbIKWFYqc+9L7W09qwt52w==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@next/swc-darwin-x64@15.1.2':
-    resolution: {integrity: sha512-caR62jNDUCU+qobStO6YJ05p9E+LR0EoXh1EEmyU69cYydsAy7drMcOlUlRtQihM6K6QfvNwJuLhsHcCzNpqtA==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@next/swc-linux-arm64-gnu@15.1.2':
-    resolution: {integrity: sha512-fHHXBusURjBmN6VBUtu6/5s7cCeEkuGAb/ZZiGHBLVBXMBy4D5QpM8P33Or8JD1nlOjm/ZT9sEE5HouQ0F+hUA==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-    libc: [glibc]
-
-  '@next/swc-linux-arm64-musl@15.1.2':
-    resolution: {integrity: sha512-9CF1Pnivij7+M3G74lxr+e9h6o2YNIe7QtExWq1KUK4hsOLTBv6FJikEwCaC3NeYTflzrm69E5UfwEAbV2U9/g==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-    libc: [musl]
-
-  '@next/swc-linux-x64-gnu@15.1.2':
-    resolution: {integrity: sha512-tINV7WmcTUf4oM/eN3Yuu/f8jQ5C6AkueZPKeALs/qfdfX57eNv4Ij7rt0SA6iZ8+fMobVfcFVv664Op0caCCg==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-    libc: [glibc]
-
-  '@next/swc-linux-x64-musl@15.1.2':
-    resolution: {integrity: sha512-jf2IseC4WRsGkzeUw/cK3wci9pxR53GlLAt30+y+B+2qAQxMw6WAC3QrANIKxkcoPU3JFh/10uFfmoMDF9JXKg==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-    libc: [musl]
-
-  '@next/swc-win32-arm64-msvc@15.1.2':
-    resolution: {integrity: sha512-wvg7MlfnaociP7k8lxLX4s2iBJm4BrNiNFhVUY+Yur5yhAJHfkS8qPPeDEUH8rQiY0PX3u/P7Q/wcg6Mv6GSAA==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@next/swc-win32-x64-msvc@15.1.2':
-    resolution: {integrity: sha512-D3cNA8NoT3aWISWmo7HF5Eyko/0OdOO+VagkoJuiTk7pyX3P/b+n8XA/MYvyR+xSVcbKn68B1rY9fgqjNISqzQ==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [win32]
-
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
     resolution: {integrity: sha512-s88O1aVtXftvp5bCPB7WnmXc5IwOZZ7YPuwNPt+GtOOXpPvad1LfbmjYv+qII7zP6RU2QGnqve27dnLycEnyEQ==}
 
@@ -5392,10 +4982,6 @@ packages:
     peerDependencies:
       pixi.js: ^8.6.2
 
-  '@pkgjs/parseargs@0.11.0':
-    resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
-    engines: {node: '>=14'}
-
   '@pkgr/core@0.2.9':
     resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
@@ -6154,154 +5740,195 @@ packages:
   '@radix-ui/rect@1.1.2':
     resolution: {integrity: sha512-xnXE7wG13PI+cxieVssYXlQJuYVRhH9NBoxt3KNwzghDIA69GMm7d4wXRouHIYjE+KvS6U/MsMO73NdS2MH9ZA==}
 
-  '@react-email/body@0.0.11':
-    resolution: {integrity: sha512-ZSD2SxVSgUjHGrB0Wi+4tu3MEpB4fYSbezsFNEJk2xCWDBkFiOeEsjTmR5dvi+CxTK691hQTQlHv0XWuP7ENTg==}
+  '@react-email/body@0.3.0':
+    resolution: {integrity: sha512-uGo0BOOzjbMUo3lu+BIDWayvn5o6Xyfmnlla5VGf05n8gHMvO1ll7U4FtzWe3hxMLwt53pmc4iE0M+B5slG+Ug==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/button@0.0.19':
-    resolution: {integrity: sha512-HYHrhyVGt7rdM/ls6FuuD6XE7fa7bjZTJqB2byn6/oGsfiEZaogY77OtoLL/mrQHjHjZiJadtAMSik9XLcm7+A==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/button@0.2.1':
+    resolution: {integrity: sha512-qXyj7RZLE7POy9BMKSoqQ00tOXThjOZSUnI2Yu9i29IHngPlmrNayIWBoVKtElES7OWwypUcpiajwi1mUWx6/A==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/code-block@0.0.11':
-    resolution: {integrity: sha512-4D43p+LIMjDzm66gTDrZch0Flkip5je91mAT7iGs6+SbPyalHgIA+lFQoQwhz/VzHHLxuD0LV6gwmU/WUQ2WEg==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/code-block@0.2.1':
+    resolution: {integrity: sha512-M3B7JpVH4ytgn83/ujRR1k1DQHvTeABiDM61OvAbjLRPhC/5KLHU5KkzIbbuGIrjWwxAbL1kSQzU8MhLEtSxyw==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/code-inline@0.0.5':
-    resolution: {integrity: sha512-MmAsOzdJpzsnY2cZoPHFPk6uDO/Ncpb4Kh1hAt9UZc1xOW3fIzpe1Pi9y9p6wwUmpaeeDalJxAxH6/fnTquinA==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/code-inline@0.0.6':
+    resolution: {integrity: sha512-jfhebvv3dVsp3OdPgKXnk8+e2pBiDVZejDOBFzBa/IblrAJ9cQDkN6rBD5IyEg8hTOxwbw3iaI/yZFmDmIguIA==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/column@0.0.13':
-    resolution: {integrity: sha512-Lqq17l7ShzJG/d3b1w/+lVO+gp2FM05ZUo/nW0rjxB8xBICXOVv6PqjDnn3FXKssvhO5qAV20lHM6S+spRhEwQ==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/column@0.0.14':
+    resolution: {integrity: sha512-f+W+Bk2AjNO77zynE33rHuQhyqVICx4RYtGX9NKsGUg0wWjdGP0qAuIkhx9Rnmk4/hFMo1fUrtYNqca9fwJdHg==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/components@0.0.34':
-    resolution: {integrity: sha512-9aUJJ4Yu5Cd5++2GHwdkmOHCghi0vPP/aZwMCGNNTovBTDCI3mc8YIUrDR7JfscrdkPK4s/E9AoD5lX6d/zITA==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/components@1.0.12':
+    resolution: {integrity: sha512-tH18JhPDWgE+3jnYkzyB6ZrZdfNnEsFe4PwmuXmlOw4NGIysP8wPY5aXZg++pTG9qUabXg1nzX/FGHGkObH8xQ==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/container@0.0.15':
-    resolution: {integrity: sha512-Qo2IQo0ru2kZq47REmHW3iXjAQaKu4tpeq/M8m1zHIVwKduL2vYOBQWbC2oDnMtWPmkBjej6XxgtZByxM6cCFg==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/container@0.0.16':
+    resolution: {integrity: sha512-QWBB56RkkU0AJ9h+qy33gfT5iuZknPC7Un/IjZv9B0QmMIK+WWacc0cH6y2SV5Cv/b99hU94fjEMOOO4enpkbQ==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/font@0.0.9':
-    resolution: {integrity: sha512-4zjq23oT9APXkerqeslPH3OZWuh5X4crHK6nx82mVHV2SrLba8+8dPEnWbaACWTNjOCbcLIzaC9unk7Wq2MIXw==}
+  '@react-email/font@0.0.10':
+    resolution: {integrity: sha512-0urVSgCmQIfx5r7Xc586miBnQUVnGp3OTYUm8m5pwtQRdTRO5XrTtEfNJ3JhYhSOruV0nD8fd+dXtKXobum6tA==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/head@0.0.12':
-    resolution: {integrity: sha512-X2Ii6dDFMF+D4niNwMAHbTkeCjlYYnMsd7edXOsi0JByxt9wNyZ9EnhFiBoQdqkE+SMDcu8TlNNttMrf5sJeMA==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/head@0.0.13':
+    resolution: {integrity: sha512-AJg6le/08Gz4tm+6MtKXqtNNyKHzmooOCdmtqmWxD7FxoAdU1eVcizhtQ0gcnVaY6ethEyE/hnEzQxt1zu5Kog==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/heading@0.0.15':
-    resolution: {integrity: sha512-xF2GqsvBrp/HbRHWEfOgSfRFX+Q8I5KBEIG5+Lv3Vb2R/NYr0s8A5JhHHGf2pWBMJdbP4B2WHgj/VUrhy8dkIg==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/heading@0.0.16':
+    resolution: {integrity: sha512-jmsKnQm1ykpBzw4hCYHwBkt5pW2jScXffPeEH5ZRF5tZeF5b1pvlFTO9han7C0pCkZYo1kEvWiRtx69yfCIwuw==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/hr@0.0.11':
-    resolution: {integrity: sha512-S1gZHVhwOsd1Iad5IFhpfICwNPMGPJidG/Uysy1AwmspyoAP5a4Iw3OWEpINFdgh9MHladbxcLKO2AJO+cA9Lw==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/hr@0.0.12':
+    resolution: {integrity: sha512-TwmOmBDibavUQpXBxpmZYi2Iks/yeZOzFYh+di9EltMSnEabH8dMZXrl+pxNXzCgZ2XE8HY7VmUL65Lenfu5PA==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/html@0.0.11':
-    resolution: {integrity: sha512-qJhbOQy5VW5qzU74AimjAR9FRFQfrMa7dn4gkEXKMB/S9xZN8e1yC1uA9C15jkXI/PzmJ0muDIWmFwatm5/+VA==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/html@0.0.12':
+    resolution: {integrity: sha512-KTShZesan+UsreU7PDUV90afrZwU5TLwYlALuCSU0OT+/U8lULNNbAUekg+tGwCnOfIKYtpDPKkAMRdYlqUznw==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/img@0.0.11':
-    resolution: {integrity: sha512-aGc8Y6U5C3igoMaqAJKsCpkbm1XjguQ09Acd+YcTKwjnC2+0w3yGUJkjWB2vTx4tN8dCqQCXO8FmdJpMfOA9EQ==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/img@0.0.12':
+    resolution: {integrity: sha512-sRCpEARNVTf3FQhZOC+JTvu5r6ubiYWkT0ucYXg8ctkyi4G8QG+jgYPiNUqVeTLA2STOfmPM/nrk1nb84y6CPQ==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/link@0.0.12':
-    resolution: {integrity: sha512-vF+xxQk2fGS1CN7UPQDbzvcBGfffr+GjTPNiWM38fhBfsLv6A/YUfaqxWlmL7zLzVmo0K2cvvV9wxlSyNba1aQ==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/link@0.0.13':
+    resolution: {integrity: sha512-lkWc/NjOcefRZMkQoSDDbuKBEBDES9aXnFEOuPH845wD3TxPwh+QTf0fStuzjoRLUZWpHnio4z7qGGRYusn/sw==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/markdown@0.0.14':
-    resolution: {integrity: sha512-5IsobCyPkb4XwnQO8uFfGcNOxnsg3311GRXhJ3uKv51P7Jxme4ycC/MITnwIZ10w2zx7HIyTiqVzTj4XbuIHbg==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/markdown@0.0.18':
+    resolution: {integrity: sha512-gSuYK5fsMbGk87jDebqQ6fa2fKcWlkf2Dkva8kMONqLgGCq8/0d+ZQYMEJsdidIeBo3kmsnHZPrwdFB4HgjUXg==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/preview@0.0.12':
-    resolution: {integrity: sha512-g/H5fa9PQPDK6WUEG7iTlC19sAktI23qyoiJtMLqQiXFCfWeQMhqjLGKeLSKkfzszqmfJCjZtpSiKtBoOdxp3Q==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/preview@0.0.14':
+    resolution: {integrity: sha512-aYK8q0IPkBXyMsbpMXgxazwHxYJxTrXrV95GFuu2HbEiIToMwSyUgb8HDFYwPqqfV03/jbwqlsXmFxsOd+VNaw==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/render@1.0.5':
-    resolution: {integrity: sha512-CA69HYXPk21HhtAXATIr+9JJwpDNmAFCvdMUjWmeoD1+KhJ9NAxusMRxKNeibdZdslmq3edaeOKGbdQ9qjK8LQ==}
+  '@react-email/render@1.1.2':
+    resolution: {integrity: sha512-RnRehYN3v9gVlNMehHPHhyp2RQo7+pSkHDtXPvg3s0GbzM9SQMW4Qrf8GRNvtpLC4gsI+Wt0VatNRUFqjvevbw==}
     engines: {node: '>=18.0.0'}
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
       react-dom: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/render@1.1.2':
-    resolution: {integrity: sha512-RnRehYN3v9gVlNMehHPHhyp2RQo7+pSkHDtXPvg3s0GbzM9SQMW4Qrf8GRNvtpLC4gsI+Wt0VatNRUFqjvevbw==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/render@2.0.6':
+    resolution: {integrity: sha512-xOzaYkH3jLZKqN5MqrTXYnmqBYUnZSVbkxdb5PGGmDcK6sKDVMliaDiSwfXajRC9JtSHTcGc2tmGLHWuCgVpog==}
+    engines: {node: '>=20.0.0'}
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
       react-dom: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/row@0.0.12':
-    resolution: {integrity: sha512-HkCdnEjvK3o+n0y0tZKXYhIXUNPDx+2vq1dJTmqappVHXS5tXS6W5JOPZr5j+eoZ8gY3PShI2LWj5rWF7ZEtIQ==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/render@2.1.0':
+    resolution: {integrity: sha512-F+zE3O6d6sW6Aj2UjvZAA17R7tJKM7kcq2mgV6k4HCT8jeLLFaVP2txMtH1lgqYFRMZ0Gxsd37q2PRyiXLXXxA==}
+    engines: {node: '>=20.0.0'}
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^18.0 || ^19.0 || ^19.0.0-rc
+
+  '@react-email/row@0.0.13':
+    resolution: {integrity: sha512-bYnOac40vIKCId7IkwuLAAsa3fKfSfqCvv6epJKmPE0JBuu5qI4FHFCl9o9dVpIIS08s/ub+Y/txoMt0dYziGw==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/section@0.0.16':
-    resolution: {integrity: sha512-FjqF9xQ8FoeUZYKSdt8sMIKvoT9XF8BrzhT3xiFKdEMwYNbsDflcjfErJe3jb7Wj/es/lKTbV5QR1dnLzGpL3w==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/section@0.0.17':
+    resolution: {integrity: sha512-qNl65ye3W0Rd5udhdORzTV9ezjb+GFqQQSae03NDzXtmJq6sqVXNWNiVolAjvJNypim+zGXmv6J9TcV5aNtE/w==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
 
-  '@react-email/tailwind@1.0.4':
-    resolution: {integrity: sha512-tJdcusncdqgvTUYZIuhNC6LYTfL9vNTSQpwWdTCQhQ1lsrNCEE4OKCSdzSV3S9F32pi0i0xQ+YPJHKIzGjdTSA==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/tailwind@2.0.7':
+    resolution: {integrity: sha512-kGw80weVFXikcnCXbigTGXGWQ0MRCSYNCudcdkWxebkWYd0FG6/NPoN3V1p/u68/4+NxZwYPVi2fhnp0x23HdA==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
+      '@react-email/body': '>=0'
+      '@react-email/button': '>=0'
+      '@react-email/code-block': '>=0'
+      '@react-email/code-inline': '>=0'
+      '@react-email/container': '>=0'
+      '@react-email/heading': '>=0'
+      '@react-email/hr': '>=0'
+      '@react-email/img': '>=0'
+      '@react-email/link': '>=0'
+      '@react-email/preview': '>=0'
+      '@react-email/text': '>=0'
       react: ^18.0 || ^19.0 || ^19.0.0-rc
+    peerDependenciesMeta:
+      '@react-email/body':
+        optional: true
+      '@react-email/button':
+        optional: true
+      '@react-email/code-block':
+        optional: true
+      '@react-email/code-inline':
+        optional: true
+      '@react-email/container':
+        optional: true
+      '@react-email/heading':
+        optional: true
+      '@react-email/hr':
+        optional: true
+      '@react-email/img':
+        optional: true
+      '@react-email/link':
+        optional: true
+      '@react-email/preview':
+        optional: true
 
-  '@react-email/text@0.1.0':
-    resolution: {integrity: sha512-LG+gEuxpoIiOojkv40iktP8UVjkJVZ+ksEEuf7zRvrcwLcVuzYyirlWdkGr4Vu/AhsD4FDRoxDWlWvLTx+WHUg==}
-    engines: {node: '>=18.0.0'}
+  '@react-email/text@0.1.6':
+    resolution: {integrity: sha512-TYqkioRS45wTR5il3dYk/SbUjjEdhSwh9BtRNB99qNH1pXAwA45H7rAuxehiu8iJQJH0IyIr+6n62gBz9ezmsw==}
+    engines: {node: '>=20.0.0'}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     peerDependencies:
       react: ^18.0 || ^19.0 || ^19.0.0-rc
@@ -7017,12 +6644,6 @@ packages:
   '@standard-schema/utils@0.3.0':
     resolution: {integrity: sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g==}
 
-  '@swc/counter@0.1.3':
-    resolution: {integrity: sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==}
-
-  '@swc/helpers@0.5.15':
-    resolution: {integrity: sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==}
-
   '@t3-oss/env-core@0.13.11':
     resolution: {integrity: sha512-sM7GYY+KL7H/Hl0BE0inWfk3nRHZOLhmVn7sHGxaZt9FAR6KqREXAE+6TqKfiavfXmpRxO/OZ2QgKRd+oiBYRQ==}
     peerDependencies:
@@ -7774,6 +7395,9 @@ packages:
   '@types/node@24.10.4':
     resolution: {integrity: sha512-vnDVpYPMzs4wunl27jHrfmwojOGKya0xyM3sH+UE5iv5uPS6vX7UIoh6m+vQc5LGBq52HBKPIn/zcSZVzeDEZg==}
 
+  '@types/node@26.1.1':
+    resolution: {integrity: sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==}
+
   '@types/nodemailer@8.0.1':
     resolution: {integrity: sha512-PxpaInm8V1JQDd4j0ds5HfvWQk8JupS1C0Picb96QJsrrRDjBH+DlK7L4ZdNSqNULhiZRQHc40nLVShaGxXAMw==}
 
@@ -8114,13 +7738,13 @@ packages:
   '@vitest/utils@4.1.0':
     resolution: {integrity: sha512-XfPXT6a8TZY3dcGY8EdwsBulFCIw+BeeX0RZn2x/BtiY/75YGh8FeWGG8QISN/WhaqSrE2OrlDgtF8q5uhOTmw==}
 
-  '@voidzero-dev/vite-plus-core@0.1.23':
-    resolution: {integrity: sha512-Twi+95cq1pObzkNR4u6lP7z4gPhtS0/vxeBAdbTvAeA12qlyyFED7mQZnAgaVIN3k1C1ve0997F3/ncUBAwQ8w==}
+  '@voidzero-dev/vite-plus-core@0.1.24':
+    resolution: {integrity: sha512-iXPGBABnQnrDMx89H6MOCGcTZp+QW+3rY4YMVKdE6ydchSvPk2O3MI2vgaRVfOtWJ2IjnxSnf1n2yjP67ZBRFQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     peerDependencies:
       '@arethetypeswrong/core': ^0.18.1
-      '@tsdown/css': 0.22.0
-      '@tsdown/exe': 0.22.0
+      '@tsdown/css': 0.22.1
+      '@tsdown/exe': 0.22.1
       '@types/node': ^20.19.0 || >=22.12.0
       '@vitejs/devtools': ^0.1.18
       esbuild: ^0.27.0 || ^0.28.0
@@ -8177,56 +7801,56 @@ packages:
       yaml:
         optional: true
 
-  '@voidzero-dev/vite-plus-darwin-arm64@0.1.23':
-    resolution: {integrity: sha512-5tRAYzVHE6X+QK7MVE2URyubL5d9+wbXhepImVEwkdOhGThxsTiCchxzJrjeqVSFf0GT8eFC3URBuKTzWBD9NA==}
+  '@voidzero-dev/vite-plus-darwin-arm64@0.1.24':
+    resolution: {integrity: sha512-Hpo9W9piSFlEsJzGkwzfDXhJGrnYByxHXF7NVQZ7g+SLOprddtlfTeM8t+gq9dxcuq0RzM8ddMAhDQP/K3fZQA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [darwin]
 
-  '@voidzero-dev/vite-plus-darwin-x64@0.1.23':
-    resolution: {integrity: sha512-05qpV7lqe9iiyCIWKhdlwEiMG4NYPt/9FZa+fBvXo0YOV4JTC1yTUMWr1X4edzYJg7Y1Jdx06u3Tu2AJvGKwSw==}
+  '@voidzero-dev/vite-plus-darwin-x64@0.1.24':
+    resolution: {integrity: sha512-SwnnnZrEFBiU5iKlh/CZAVwn0RFt/Udrvt3kFLtdRxMtN5bKaqTFVA2H8Y/FPCWp1QX9bs4V9ZIAeXAk06zLkw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [darwin]
 
-  '@voidzero-dev/vite-plus-linux-arm64-gnu@0.1.23':
-    resolution: {integrity: sha512-qb5gUpBJovwfkDjHZKHy8LTh+69kQIKlIXVYLe8wVAw6+cEI4WNWPf6YHJdnPIKtOYsGNZ5vllFHbtT3i6uOfA==}
+  '@voidzero-dev/vite-plus-linux-arm64-gnu@0.1.24':
+    resolution: {integrity: sha512-ImM3eqDki4DpRuHjW6dEh4St8zvbcfOMR7KQZJX42ArriCLQ/QdaYhDRRbcDi27XsOBqRxm2eqUUEymPrYIHpA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@voidzero-dev/vite-plus-linux-arm64-musl@0.1.23':
-    resolution: {integrity: sha512-mvB3XYltfUn55WdgRYZHDY+bgeOwrwsMhdftXDC8T7tIUglIxcuo3+xMOZOrbFFjJXNPelUjvU1R9ItAR8rY1w==}
+  '@voidzero-dev/vite-plus-linux-arm64-musl@0.1.24':
+    resolution: {integrity: sha512-gj4mzbob/ls8Zs7iTuF9Gr0EFFF7tdpDiPxDPBkH8tJP5OkHABlzWUwJhU+9xxcUbTaXqpHDw68Mil7jm5dpMg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@voidzero-dev/vite-plus-linux-x64-gnu@0.1.23':
-    resolution: {integrity: sha512-Hf7phM8L2wUdLloQHbylRzmJEv9PIUCC5Yvdo1UycWyiEl99CUgAlrSmZyfkKxPh+MSFaa+xNwfXdf9zwXM8mg==}
+  '@voidzero-dev/vite-plus-linux-x64-gnu@0.1.24':
+    resolution: {integrity: sha512-x7IYK7lI+WuF1n3jSzEYU6FgJxPX/R0rDmTTsOutooGGCU7uShZvfZqIoiTXK0eFnJU5ij5BfBgenenUfsaT/A==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
-    resolution: {integrity: sha512-YJ+OT7tddkUshfojk1jIyJcQHA3h5cMKSpCVVJcJwTCZNb9z9zRcjZCxGbwwTOqrV4PzP8TVy50aEEl0jP1lTg==}
+  '@voidzero-dev/vite-plus-linux-x64-musl@0.1.24':
+    resolution: {integrity: sha512-JCy2w0eSVUlWQlggK5T47MnL+j0o4EY7hLskINVI8gi+aixQF4xnYBDobz0lbxkqz3/IfiLyXUx6TcU3thcsGQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@voidzero-dev/vite-plus-test@0.1.23':
-    resolution: {integrity: sha512-50NmnIMHsES5f+4iScEwqAR6LlsE1oP7n1HBxaYVX839tjMWCYHRUiBlBZFU+OoWwuFNq0I1ap0j0vamvJsYGg==}
+  '@voidzero-dev/vite-plus-test@0.1.24':
+    resolution: {integrity: sha512-9NiG6UadG0iOaPL1AMsO5sDKkx6MADHw4/mMOmHWZUhhUwqzfVtnnptMK37vD71e6KyR7yAscx19FrtOWWtjvA==}
     engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
     peerDependencies:
       '@edge-runtime/vm': '*'
       '@opentelemetry/api': ^1.9.0
       '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
-      '@vitest/coverage-istanbul': 4.1.7
-      '@vitest/coverage-v8': 4.1.7
-      '@vitest/ui': 4.1.7
+      '@vitest/coverage-istanbul': 4.1.8
+      '@vitest/coverage-v8': 4.1.8
+      '@vitest/ui': 4.1.8
       happy-dom: '*'
       jsdom: '*'
       vite: 7.3.5
@@ -8248,14 +7872,14 @@ packages:
       jsdom:
         optional: true
 
-  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.23':
-    resolution: {integrity: sha512-/y2Yz5/kbDv4VlgGHiCXNTZ2ZeIPjSo5iogytb3kX2skxaQi7JqAwxjYjfjSD6q6e6lFIyxNEX81BSbcbIFVXw==}
+  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.24':
+    resolution: {integrity: sha512-G+/lhLKVjyn3FmgXX8jeWgq7RcE5O1kdR7QyFayQOdlMX/ZRkvUwQD7bFaqhKzgJM6Oj3a1FH3HQPYk5QOYuCQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [win32]
 
-  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.23':
-    resolution: {integrity: sha512-YoHCatW5TBhQvIJU0ewA4TVGvznTfhLgjqHY8Pn3HVFNWhNO9DCOsP4ihpvKzYFS7F9dx0xmmAYXOH/suArDFQ==}
+  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.24':
+    resolution: {integrity: sha512-b0e5XohEV1w/RdzAtv8/Hm6tvHPXouPtBNsljjW/lDJZq3NCLND5s6lqe8H4IenrgmKSoqakHWtlqJqM36cFbw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [win32]
@@ -8341,8 +7965,16 @@ packages:
     peerDependencies:
       zod: ^3.25.76 || ^4.1.8
 
-  ajv@6.12.6:
-    resolution: {integrity: sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==}
+  ajv-formats@3.0.1:
+    resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
+    peerDependencies:
+      ajv: 8.18.0
+    peerDependenciesMeta:
+      ajv:
+        optional: true
+
+  ajv@6.14.0:
+    resolution: {integrity: sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==}
 
   ajv@8.18.0:
     resolution: {integrity: sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==}
@@ -8520,6 +8152,9 @@ packages:
     resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
     engines: {node: '>=8.0.0'}
 
+  atomically@2.1.1:
+    resolution: {integrity: sha512-P4w9o2dqARji6P7MHprklbfiArZAWvo07yW7qs3pdljb3BWr12FIB7W+p0zJiuiVsUpRO0iZn1kFFcpPegg0tQ==}
+
   auto-bind@5.0.1:
     resolution: {integrity: sha512-ooviqdwwgfIfNmDwo94wlshcdzfO64XV0Cg6oDsDYBJfITDz1EngD2z7DkbvCWn+XIMsIqW27sEVF6qcpJrRcg==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -8727,9 +8362,6 @@ packages:
   birpc@4.0.0:
     resolution: {integrity: sha512-LShSxJP0KTmd101b6DRyGBj57LZxSDYWKitQNW/mi8GRMvZb078Uf9+pveax1DrVL89vm7mWe+TovdI/UDOuPw==}
 
-  bl@4.1.0:
-    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
-
   boolbase@1.0.0:
     resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
 
@@ -8794,11 +8426,7 @@ packages:
     resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
     peerDependencies:
-      esbuild: '>=0.18'
-
-  busboy@1.6.0:
-    resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==}
-    engines: {node: '>=10.16.0'}
+      esbuild: 0.28.1
 
   bytes@3.1.2:
     resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
@@ -8940,6 +8568,9 @@ packages:
   citty@0.1.6:
     resolution: {integrity: sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ==}
 
+  citty@0.2.2:
+    resolution: {integrity: sha512-+6vJA3L98yv+IdfKGZHBNiGW5KHn22e/JwID0Strsz8h4S/csAu/OuICwxrg44k5MRiZHWIo8XXuJgQTriRP4w==}
+
   cjs-module-lexer@1.4.3:
     resolution: {integrity: sha512-9z8TZaGM1pfswYeXrUpzPrkx8UnWYdhJclsiYMm6x/w5+nN+8Tf/LnAgfLGQCm59qAOxU8WwHEq2vNwF6i4j+Q==}
 
@@ -8954,10 +8585,6 @@ packages:
     resolution: {integrity: sha512-8lgKz8LmCRYZZQDpRyT2m5rKJ08TnU4tR9FFFW2rxpxR1FzWi4PQ/NfyODchAatHaUgnSPVcx/R5w6NuTBzFiw==}
     engines: {node: '>=4'}
 
-  cli-cursor@3.1.0:
-    resolution: {integrity: sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==}
-    engines: {node: '>=8'}
-
   cli-cursor@4.0.0:
     resolution: {integrity: sha512-VGtlMu3x/4DOtIUwEkRezxUZ2lBacNJCHash0N0WeZDBS+7Ux1dm3XWAgWYxLJFMMdOeXMHXorshEFhbMSGelg==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -9042,14 +8669,14 @@ packages:
   comma-separated-tokens@2.0.3:
     resolution: {integrity: sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==}
 
-  commander@11.1.0:
-    resolution: {integrity: sha512-yPVavfyCcRhmorC7rWlkHn15b4wDVgVmBA7kV4QVBsF7kv/9TKJAbAXVTxvTnwP8HHKjRCJDClKbciiYS7p0DQ==}
-    engines: {node: '>=16'}
-
   commander@12.1.0:
     resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==}
     engines: {node: '>=18'}
 
+  commander@13.1.0:
+    resolution: {integrity: sha512-/rFeCpNJQbhSZjGVwO9RFV3xPqbnERS8MmIQzCtD/zl6gpJuV/bMLuN92oG3F7d8oDEHHRrujSXNUr8fpjntKw==}
+    engines: {node: '>=18'}
+
   commander@14.0.2:
     resolution: {integrity: sha512-TywoWNNRbhoD0BXs1P3ZEScW8W5iKrnbithIl0YH+uCmBd0QpPOA8yc82DS3BIE5Ma6FnBVUsJ7wVUDz4dvOWQ==}
     engines: {node: '>=20'}
@@ -9087,6 +8714,10 @@ packages:
   concat-map@0.0.1:
     resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
 
+  conf@15.1.0:
+    resolution: {integrity: sha512-Uy5YN9KEu0WWDaZAVJ5FAmZoaJt9rdK6kH+utItPyGsCqCgaTKkrmZx3zoE0/3q6S3bcp3Ihkk+ZqPxWxFK5og==}
+    engines: {node: '>=20'}
+
   confbox@0.1.8:
     resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
 
@@ -9166,6 +8797,10 @@ packages:
     resolution: {integrity: sha512-tRpdppF7TRazZrjJ6v3stzv93qxRcSsFmW6cX0Zm2NVKpxE1WV1HblnghVv9TreireHkqI/VDEsfolRF1p6y7Q==}
     engines: {node: '>=8.0.0'}
 
+  css-tree@3.2.1:
+    resolution: {integrity: sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==}
+    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}
+
   css-what@6.2.2:
     resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
     engines: {node: '>= 6'}
@@ -9374,8 +9009,12 @@ packages:
   dayjs@1.11.21:
     resolution: {integrity: sha512-98IT+HOahAisibz/yjKbzuOBwYcjJ7BCLPzARyHiyEBmRz4fatF+KPJszEHXsGYjUG234aH/cOjW1wwTbKUZlA==}
 
-  debounce@2.0.0:
-    resolution: {integrity: sha512-xRetU6gL1VJbs85Mc4FoEGSjQxzpdxRyFhe3lmWFyy2EzydIcD4xzUvRJMD+NPDfMwKNhxa3PvsIOU32luIWeA==}
+  debounce-fn@6.0.0:
+    resolution: {integrity: sha512-rBMW+F2TXryBwB54Q0d8drNEI+TfoS9JpNTAoVpukbWEhjXQq4rySFYLaqXMFXwdv61Zb2OHtj5bviSoimqxRQ==}
+    engines: {node: '>=18'}
+
+  debounce@2.2.0:
+    resolution: {integrity: sha512-Xks6RUDLZFdz8LIdR6q0MTH44k7FikOmnh5xkSjMig6ch45afc8sjTjRQf3P6ax8dMgcQrYO/AR2RGWURrruqw==}
     engines: {node: '>=18'}
 
   debug@2.6.9:
@@ -9394,15 +9033,6 @@ packages:
       supports-color:
         optional: true
 
-  debug@4.3.7:
-    resolution: {integrity: sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==}
-    engines: {node: '>=6.0'}
-    peerDependencies:
-      supports-color: '*'
-    peerDependenciesMeta:
-      supports-color:
-        optional: true
-
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
     engines: {node: '>=6.0'}
@@ -9425,8 +9055,8 @@ packages:
     resolution: {integrity: sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==}
     engines: {node: '>=0.10'}
 
-  dedent@1.7.1:
-    resolution: {integrity: sha512-9JmrhGZpOlEgOLdQgSm0zxFaYoQon408V1v49aqTWuXENVlnCuY9JBZcXZiCsZQWDjTm5Qf/nIvAy77mXDAjEg==}
+  dedent@1.7.2:
+    resolution: {integrity: sha512-WzMx3mW98SN+zn3hgemf4OzdmyNhhhKz5Ay0pUfQiMQ3e1g+xmTJWp/pKdwKVXhdSkAEGIIzqeuWrL3mV/AXbA==}
     peerDependencies:
       babel-plugin-macros: ^3.1.0
     peerDependenciesMeta:
@@ -9552,6 +9182,10 @@ packages:
   domutils@3.2.2:
     resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
 
+  dot-prop@10.1.0:
+    resolution: {integrity: sha512-MVUtAugQMOff5RnBy2d9N31iG0lNwg1qAoAOn7pOK5wf94WIaE3My2p3uwTQuvS2AcqchkcR3bHByjaM0mmi7Q==}
+    engines: {node: '>=20'}
+
   dotenv-cli@10.0.0:
     resolution: {integrity: sha512-lnOnttzfrzkRx2echxJHQRB6vOAMSCzzZg79IxpC00tU42wZPuZkQxNNrrwVAxaQZIIh001l4PxVlCrBxngBzA==}
     hasBin: true
@@ -9723,9 +9357,6 @@ packages:
   earcut@3.2.3:
     resolution: {integrity: sha512-vnS4AVwp1KHAF13i1vp1/2D5evWy3k5u/iW/B81QVsUZtV8cv2tU0b2VNFlqvh4kYwrFMDdjPCfAmfyJW9y14Q==}
 
-  eastasianwidth@0.2.0:
-    resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
-
   ecdsa-sig-formatter@1.0.11:
     resolution: {integrity: sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==}
 
@@ -9768,9 +9399,6 @@ packages:
   emoji-regex@8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
 
-  emoji-regex@9.2.2:
-    resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
-
   empathic@2.0.1:
     resolution: {integrity: sha512-YGRs8knHhKHVShLkFET/rWAU8kmHbOV5LwN938RHI0pljAJ1Gf6SzXsSmRaEzcXTtOOmVqJ5+WtQPL5uigY50Q==}
     engines: {node: '>=14'}
@@ -9818,6 +9446,10 @@ packages:
     resolution: {integrity: sha512-ObFo8v4rQJAE59M69QzwloxPZtd33TpYEIjtKD1rrFDcM1Gd7IkDxEBU+HriziN6HSHQnBJi8Dmy+JWkav5HKA==}
     engines: {node: '>=8'}
 
+  env-paths@3.0.0:
+    resolution: {integrity: sha512-dtJUTepzMW3Lm/NPxRf3wP4642UWhjL2sQxc+ym2YMj1m/H2zDNQOlezafzkHwn6sMstjHTwG6iQQsctDW/b1A==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   environment@1.1.0:
     resolution: {integrity: sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==}
     engines: {node: '>=18'}
@@ -9885,11 +9517,6 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  esbuild@0.23.0:
-    resolution: {integrity: sha512-1lvV17H2bMYda/WaFb2jLPeHU3zml2k4/yagNMG8Q/YtfMjCwEUZa2eXXMgZTVSL5q1n4H7sQ0X6CdJDqqeCFA==}
-    engines: {node: '>=18'}
-    hasBin: true
-
   esbuild@0.25.12:
     resolution: {integrity: sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==}
     engines: {node: '>=18'}
@@ -9900,11 +9527,6 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  esbuild@0.27.7:
-    resolution: {integrity: sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w==}
-    engines: {node: '>=18'}
-    hasBin: true
-
   esbuild@0.28.1:
     resolution: {integrity: sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==}
     engines: {node: '>=18'}
@@ -10482,10 +10104,6 @@ packages:
     resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==}
     engines: {node: '>= 0.4'}
 
-  foreground-child@3.3.1:
-    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
-    engines: {node: '>=14'}
-
   form-data@4.0.6:
     resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
     engines: {node: '>= 6'}
@@ -10680,16 +10298,14 @@ packages:
     resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==}
     engines: {node: '>=10.13.0'}
 
-  glob@10.3.4:
-    resolution: {integrity: sha512-6LFElP3A+i/Q8XQKEvZjkEWEOTgAIALR9AO2rwT8bgPhDd1anmqDJDZ6lLddI4ehxxxR1S5RIqKe1uapMQfYaQ==}
-    engines: {node: '>=16 || 14 >=14.17'}
-    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
-    hasBin: true
-
   glob@13.0.0:
     resolution: {integrity: sha512-tvZgpqk6fz4BaNZ66ZsRaZnbHvP/jG3uKJvAZOwEVUL4RTA5nJeeLYfyN9/VA8NX/V3IBG+hkeuGpKjvELkVhA==}
     engines: {node: 20 || >=22}
 
+  glob@13.0.6:
+    resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==}
+    engines: {node: 18 || 20 || >=22}
+
   glob@7.2.3:
     resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
     deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
@@ -10698,6 +10314,10 @@ packages:
     resolution: {integrity: sha512-NknMLn7F2J7aflwFOlGdNIuCDpN3VGoSoB+aap3KABFWbHVn1TCgFC+np23J8W2BiZbjfEw3BFBycSMv1AFblg==}
     engines: {node: '>=4'}
 
+  globals@11.12.0:
+    resolution: {integrity: sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA==}
+    engines: {node: '>=4'}
+
   globals@14.0.0:
     resolution: {integrity: sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==}
     engines: {node: '>=18'}
@@ -10862,6 +10482,9 @@ packages:
   html-void-elements@3.0.0:
     resolution: {integrity: sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==}
 
+  html5parser@3.0.0:
+    resolution: {integrity: sha512-iNpSopa+4YHX50UOk825tBy7MghmXHo/ZpLskBYN0kAr1xhH8GlIMk5bLRXcZlfP3AnLUcSuFMu8C4MdOUxA8A==}
+
   htmlparser2@10.1.0:
     resolution: {integrity: sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==}
 
@@ -11055,6 +10678,10 @@ packages:
     resolution: {integrity: sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==}
     engines: {node: '>= 0.4'}
 
+  is-core-module@2.16.2:
+    resolution: {integrity: sha512-evOr8xfXKxE6qSR0hSXL2r3sd7ALj8+7jQEUvPYcm5sgZFdJ+AYzT6yNmJenvIYQBgIGwfwz08sL8zoL7yq2BA==}
+    engines: {node: '>= 0.4'}
+
   is-data-view@1.0.2:
     resolution: {integrity: sha512-RKtWF8pGmS87i2D6gqQu/l7EYRlVdfzemCJN/P3UOs//x1QE7mfhvzHIApBTRf7axvT6DMGwSwBXYCT0nfB9xw==}
     engines: {node: '>= 0.4'}
@@ -11107,10 +10734,6 @@ packages:
     engines: {node: '>=20'}
     hasBin: true
 
-  is-interactive@1.0.0:
-    resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
-    engines: {node: '>=8'}
-
   is-map@2.0.3:
     resolution: {integrity: sha512-1Qed0/Hr2m+YqxnM09CjA2d/i6YZNfF6R2oRAOj36eUdS6qIV/huPJNSEpKbupewFs+ZsJlxsjjPbc0/afW6Lw==}
     engines: {node: '>= 0.4'}
@@ -11172,9 +10795,9 @@ packages:
     resolution: {integrity: sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==}
     engines: {node: '>= 0.4'}
 
-  is-unicode-supported@0.1.0:
-    resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
-    engines: {node: '>=10'}
+  is-unicode-supported@2.1.0:
+    resolution: {integrity: sha512-mE00Gnza5EEB3Ds0HfMyllZzbBrmLOX3vfWoj9A9PEnTfratQ/BcaJOuMhnkhjXvb2+FkY3VuHqtAGpTPmglFQ==}
+    engines: {node: '>=18'}
 
   is-unsafe@2.0.0:
     resolution: {integrity: sha512-2LdV822R+wmI86unXA93WCFpL6g+av8ynWk0nrHyJqGop5VoocYsSLFgN8jrfalT6iGeLNM4KXuVSsULP53kEA==}
@@ -11247,10 +10870,6 @@ packages:
     peerDependencies:
       react: ^19.0.0
 
-  jackspeak@2.3.6:
-    resolution: {integrity: sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==}
-    engines: {node: '>=14'}
-
   jest-changed-files@29.7.0:
     resolution: {integrity: sha512-fEArFiwf1BpQ+4bXSprcDc3/x4HSzL4al2tozwVpDFpsxALjLYdyiIK4e5Vz66GQJIbXJ82+35PtysofptNX2w==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
@@ -11420,6 +11039,10 @@ packages:
   jimp-compact@0.16.1:
     resolution: {integrity: sha512-dZ6Ra7u1G8c4Letq/B5EzAxj4tLFHL+cGtdpR+PVm4yzPDj+lCk+AbivWt1eOM+ikzkowtyV7qSqX6qr3t71Ww==}
 
+  jiti@2.4.2:
+    resolution: {integrity: sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A==}
+    hasBin: true
+
   jiti@2.6.1:
     resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
     hasBin: true
@@ -11496,6 +11119,9 @@ packages:
   json-schema-traverse@1.0.0:
     resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
 
+  json-schema-typed@8.0.2:
+    resolution: {integrity: sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==}
+
   json-schema@0.4.0:
     resolution: {integrity: sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==}
 
@@ -11744,9 +11370,9 @@ packages:
     resolution: {integrity: sha512-VeIAFslyIerEJLXHziedo2basKbMKtTw3vfn5IzG0XTjhAVEJyNHnL2p7vc+wBDSdQuUpNw3M2u6xb9QsAY5Eg==}
     engines: {node: '>=4'}
 
-  log-symbols@4.1.0:
-    resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
-    engines: {node: '>=10'}
+  log-symbols@7.0.1:
+    resolution: {integrity: sha512-ja1E3yCr9i/0hmBVaM0bfwDjnGy8I/s6PP4DFp+yP+a+mrHO4Rm7DtmnqROTUkHIkqffC84YY7AeqX6oFk0WFg==}
+    engines: {node: '>=18'}
 
   long@5.3.2:
     resolution: {integrity: sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==}
@@ -11768,6 +11394,10 @@ packages:
     resolution: {integrity: sha512-B5Y16Jr9LB9dHVkh6ZevG+vAbOsNOYCX+sXvFWFu7B3Iz5mijW3zdbMyhsh8ANd2mSWBYdJgnqi+mL7/LrOPYg==}
     engines: {node: 20 || >=22}
 
+  lru-cache@11.5.2:
+    resolution: {integrity: sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g==}
+    engines: {node: 20 || >=22}
+
   lru-cache@5.1.1:
     resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
 
@@ -11828,6 +11458,11 @@ packages:
   markdown-table@3.0.4:
     resolution: {integrity: sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==}
 
+  marked@15.0.12:
+    resolution: {integrity: sha512-8dD6FusOQSrpv9Z1rdNMdlSgQOIP880DHqnohobOmYLElGEqAL/JvxvuxZO16r4HtjTlfPRDC1hbvxC9dPN2nA==}
+    engines: {node: '>= 18'}
+    hasBin: true
+
   marked@16.4.2:
     resolution: {integrity: sha512-TI3V8YYWvkVf3KJe1dRkpnjs68JUPyEa5vjKrp1XEEJUAOaQc+Qj+L1qWbPd0SJuAdQkFU0h73sXXqwDYxsiDA==}
     engines: {node: '>= 20'}
@@ -11838,11 +11473,6 @@ packages:
     engines: {node: '>= 20'}
     hasBin: true
 
-  marked@7.0.4:
-    resolution: {integrity: sha512-t8eP0dXRJMtMvBojtkcsA7n48BkauktUKzfkPSCq85ZMTJ0v76Rke4DYz01omYpPTUh4p/f7HePgRo3ebG8+QQ==}
-    engines: {node: '>= 16'}
-    hasBin: true
-
   marky@1.3.0:
     resolution: {integrity: sha512-ocnPZQLNpvbedwTy9kNrQEsknEfgvcLMvOtz3sFeWApDq1MXH1TqkCIx58xlpESsfwQOnuBO9beyQuNGzVvuhQ==}
 
@@ -11850,11 +11480,6 @@ packages:
     resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
     engines: {node: '>= 0.4'}
 
-  md-to-react-email@5.0.5:
-    resolution: {integrity: sha512-OvAXqwq57uOk+WZqFFNCMZz8yDp8BD3WazW1wAKHUrPbbdr89K9DWS6JXY09vd9xNdPNeurI8DU/X4flcfaD8A==}
-    peerDependencies:
-      react: ^18.0 || ^19.0
-
   mdast-util-find-and-replace@3.0.2:
     resolution: {integrity: sha512-Tmd1Vg/m3Xz43afeNxDIhWRtFZgM2VLyaf4vSTYwudTyeuTneoL3qtWMA5jeLyz/O1vDJmmV4QuScFCA2tBPwg==}
 
@@ -11906,6 +11531,9 @@ packages:
   mdn-data@2.0.14:
     resolution: {integrity: sha512-dn6wd0uw5GsdswPFfsgMp5NSB0/aDe6fK94YJV/AJDYXL6HVLWBsxeq7js7Ad+mU2K9LAlwpk6kN2D5mwCPVow==}
 
+  mdn-data@2.27.1:
+    resolution: {integrity: sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==}
+
   memoize-one@5.2.1:
     resolution: {integrity: sha512-zYiwtZUcYyXKo/np96AGZAckk+FWWsUdJ3cHGGmld7+AhvcWmQyGCYUh1hc4Q/pkOhb65dQR/pqCyK0cOaHz4Q==}
 
@@ -12110,7 +11738,11 @@ packages:
     resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
     engines: {node: '>= 0.6'}
 
-  mime@1.6.0:
+  mime-types@3.0.2:
+    resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
+    engines: {node: '>=18'}
+
+  mime@1.6.0:
     resolution: {integrity: sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==}
     engines: {node: '>=4'}
     hasBin: true
@@ -12128,6 +11760,10 @@ packages:
     resolution: {integrity: sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==}
     engines: {node: '>=6'}
 
+  mimic-function@5.0.1:
+    resolution: {integrity: sha512-VP79XUPxV2CigYP3jWwAUFSku2aKqBH7uTAapFWCBqutsbmDo96KY5o8uh6U+/YSIn5OxJnXp73beVkpqMIGhA==}
+    engines: {node: '>=18'}
+
   min-indent@1.0.1:
     resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
     engines: {node: '>=4'}
@@ -12150,6 +11786,10 @@ packages:
     resolution: {integrity: sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==}
     engines: {node: '>=16 || 14 >=14.17'}
 
+  minipass@7.1.3:
+    resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
   minizlib@3.1.0:
     resolution: {integrity: sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==}
     engines: {node: '>= 18'}
@@ -12265,28 +11905,6 @@ packages:
       react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
       react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
 
-  next@15.1.2:
-    resolution: {integrity: sha512-nLJDV7peNy+0oHlmY2JZjzMfJ8Aj0/dd3jCwSZS8ZiO5nkQfcZRqDrRN3U5rJtqVTQneIOGZzb6LCNrk7trMCQ==}
-    engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}
-    deprecated: This version has a security vulnerability. Please upgrade to a patched version. See https://nextjs.org/blog/CVE-2025-66478 for more details.
-    hasBin: true
-    peerDependencies:
-      '@opentelemetry/api': ^1.1.0
-      '@playwright/test': ^1.41.2
-      babel-plugin-react-compiler: '*'
-      react: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
-      react-dom: ^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0
-      sass: ^1.3.0
-    peerDependenciesMeta:
-      '@opentelemetry/api':
-        optional: true
-      '@playwright/test':
-        optional: true
-      babel-plugin-react-compiler:
-        optional: true
-      sass:
-        optional: true
-
   nitro-codegen@0.26.4:
     resolution: {integrity: sha512-qTOvyfE6+kz0wuqPpRlKc6F6ZNOI3elK7ltOTvxMZSG3Y8tt43UrV5xkp4XgL9Jc1P90iBLU6mDYRiNqoNA2+g==}
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
@@ -12359,6 +11977,11 @@ packages:
     engines: {node: ^14.16.0 || >=16.10.0}
     hasBin: true
 
+  nypm@0.6.6:
+    resolution: {integrity: sha512-vRyr0r4cbBapw07Xw8xrj9Teq3o7MUD35rSaTcanDbW+aK2XHDgJFiU6ZTj2GBw7Q12ysdsyFss+Vdz4hQ0Y6Q==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   ob1@0.83.3:
     resolution: {integrity: sha512-egUxXCDwoWG06NGCS5s5AdcpnumHKJlfd3HH06P3m9TEMwwScfcY35wpQxbm9oHof+dM/lVH9Rfyu1elTVelSA==}
     engines: {node: '>=20.19.4'}
@@ -12401,6 +12024,10 @@ packages:
   obug@2.1.1:
     resolution: {integrity: sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==}
 
+  obug@2.1.3:
+    resolution: {integrity: sha512-9miFgM2OFba7hB+pRgvtV84pYTBaoTHohvmIgiRt6dRIzbwEOIaNaP+dIlGs2fNFoB0SeISs0Jz5WFVRid6Xyg==}
+    engines: {node: '>=12.20.0'}
+
   ofetch@1.5.1:
     resolution: {integrity: sha512-2W4oUZlVaqAPAil6FUg/difl6YhqhUR7x2eZY4bQCko22UXg3hptq9KLQdqFClV+Wu85UX7hNtdGTngi/1BxcA==}
 
@@ -12456,10 +12083,6 @@ packages:
     resolution: {integrity: sha512-eNwHudNbO1folBP3JsZ19v9azXWtQZjICdr3Q0TDPIaeBQ3mXLrh54wM+er0+hSp+dWKf+Z8KM58CYzEyIYxYg==}
     engines: {node: '>=6'}
 
-  ora@5.4.1:
-    resolution: {integrity: sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==}
-    engines: {node: '>=10'}
-
   own-keys@1.0.1:
     resolution: {integrity: sha512-qFOyK5PjiWZd+QQIh+1jhdb9LpxTF0qs7Pm8o5QHYZ0M3vKqSqzsZaEB6oWlxZ+q2sJBMI/Ktgd2N5ZwQoRHfg==}
     engines: {node: '>= 0.4'}
@@ -12586,14 +12209,14 @@ packages:
   path-parse@1.0.7:
     resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==}
 
-  path-scurry@1.11.1:
-    resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
-    engines: {node: '>=16 || 14 >=14.18'}
-
   path-scurry@2.0.1:
     resolution: {integrity: sha512-oWyT4gICAu+kaA7QWk/jvCHWarMKNs6pXOGWKDTr7cw4IGcUbW+PeTfbaQiLGheFRpjo6O9J0PmyMfQPjH71oA==}
     engines: {node: 20 || >=22}
 
+  path-scurry@2.0.2:
+    resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
+    engines: {node: 18 || 20 || >=22}
+
   path-to-regexp@8.4.2:
     resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
 
@@ -12675,6 +12298,14 @@ packages:
     resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
     engines: {node: '>=12'}
 
+  picomatch@4.0.5:
+    resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
+    engines: {node: '>=12'}
+
+  picospinner@3.0.0:
+    resolution: {integrity: sha512-lGA1TNsmy2bxvRsTI2cV01kfTwKzZjnZSDmF9llYNyMHMrU4sP87lQ5taiIKm88L3cbswjl008nwyGc3WpNvzg==}
+    engines: {node: '>=18.0.0'}
+
   pify@4.0.1:
     resolution: {integrity: sha512-uB80kBFb/tfd68bVleG9T5GGsGPjJrLAUpR5PZIrhBnIaRTQRjqdJSsIKkOP6OAIFbj7GOrcudc5pNjZ+geV2g==}
     engines: {node: '>=6'}
@@ -12847,13 +12478,13 @@ packages:
     engines: {node: '>=10.13.0'}
     hasBin: true
 
-  prettier@3.4.2:
-    resolution: {integrity: sha512-e9MewbtFo+Fevyuxn/4rrcDAaq0IYxPGLvObpQjiZBMAzB9IGmzlnG9RZy3FFas+eBMu2vA0CszMeduow5dIuQ==}
+  prettier@3.8.1:
+    resolution: {integrity: sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg==}
     engines: {node: '>=14'}
     hasBin: true
 
-  prettier@3.8.1:
-    resolution: {integrity: sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg==}
+  prettier@3.9.5:
+    resolution: {integrity: sha512-/FVl766LpUfB5vXgCYOYa0MeV/441Ia99AeICQIQFTY/Nw0roZwULcXpku5i1/m5kt/baz+s4Zogspd839HSMg==}
     engines: {node: '>=14'}
     hasBin: true
 
@@ -12873,8 +12504,8 @@ packages:
     resolution: {integrity: sha512-9uBdv/B4EefsuAL+pWqueZyZS2Ba+LxfFeQ9DN14HU4bN8bhaxKdkpjpB6fs9+pSjIBu+FXQHImEg8j/Lw0+vA==}
     engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
 
-  prismjs@1.29.0:
-    resolution: {integrity: sha512-Kx/1w86q/epKcmte75LNrEoT+lX8pBpavuAbvJWRXar7Hz8jrtF+e3vY751p0R8H9HdArwaCTNDDzHg/ScJK1Q==}
+  prismjs@1.30.0:
+    resolution: {integrity: sha512-DEvV2ZF2r2/63V+tK8hQvrR2ZGn10srHbXviTlcv7Kpzw8jWiNTqbVgjO3IY8RxrrOUF8VPMQQFysYYYv0YZxw==}
     engines: {node: '>=6'}
 
   proc-log@4.2.0:
@@ -13013,10 +12644,13 @@ packages:
       react: '>=16.4.0'
       react-dom: '>=16.4.0'
 
-  react-email@3.0.7:
-    resolution: {integrity: sha512-lX9dFCPtTG+79aP9uTdx763byshptPYbOi0KXwxn6nPJoDP/Ty/G1W5fx1lbrmec+pk38MTDZPrzJ/UYIxgP/Q==}
-    engines: {node: '>=18.0.0'}
+  react-email@6.7.0:
+    resolution: {integrity: sha512-lJFdxPB7A1bLgTFYSzGWxNYyP63IbJsCSe+2EOl51lSQzKCs95+dBgiJdmW+wk7+Oix7UdkWhyJMMvbdQt9HJQ==}
+    engines: {node: '>=20.0.0'}
     hasBin: true
+    peerDependencies:
+      react: ^18.0 || ^19.0 || ^19.0.0-rc
+      react-dom: ^18.0 || ^19.0 || ^19.0.0-rc
 
   react-fast-compare@3.2.2:
     resolution: {integrity: sha512-nsO+KSNgo1SbJqJEYRE9ERzo7YtYbou/OqjSQKxV7jcKox7+usiUVZOAC+XnDOABXggQTno0Y1CpVnuWEc1boQ==}
@@ -13213,10 +12847,6 @@ packages:
   readable-stream@2.3.8:
     resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
 
-  readable-stream@3.6.2:
-    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
-    engines: {node: '>= 6'}
-
   readable-stream@4.7.0:
     resolution: {integrity: sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -13415,6 +13045,11 @@ packages:
     engines: {node: '>= 0.4'}
     hasBin: true
 
+  resolve@1.22.12:
+    resolution: {integrity: sha512-TyeJ1zif53BPfHootBGwPRYT1RUt6oGWsaQr8UyZW/eAm9bKoijtvruSDEmZHm92CwS9nj7/fWttqPCgzep8CA==}
+    engines: {node: '>= 0.4'}
+    hasBin: true
+
   resolve@1.7.1:
     resolution: {integrity: sha512-c7rwLofp8g1U+h1KNyHL/jicrKg1Ek4q+Lr33AL65uZTinUZHe30D5HlyN5V9NW0JX1D5dXQ4jqW5l7Sy/kGfw==}
 
@@ -13426,10 +13061,6 @@ packages:
     resolution: {integrity: sha512-6IzJLuGi4+R14vwagDHX+JrXmPVtPpn4mffDJ1UdR7/Edm87fl6yi8mMBIVvFtJaNTUvjughmW4hwLhRG7gC1Q==}
     engines: {node: '>=4'}
 
-  restore-cursor@3.1.0:
-    resolution: {integrity: sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==}
-    engines: {node: '>=8'}
-
   restore-cursor@4.0.0:
     resolution: {integrity: sha512-I9fPXU9geO9bHOt9pHHOhOkYerIMsmVaWB0rA2AI9ERh/+x/i7MV5HKBNrg+ljO5eoPVgCcnFuRjJ9uH6I/3eg==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -13581,6 +13212,11 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
+  semver@7.8.5:
+    resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
   send@0.19.2:
     resolution: {integrity: sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==}
     engines: {node: '>= 0.8.0'}
@@ -13637,10 +13273,6 @@ packages:
   shallowequal@1.1.0:
     resolution: {integrity: sha512-y0m1JoUZSlPAjXVtPPW70aZWfIL/dSP7AFkRnniLCrK/8MDKog3TySTBmckD+RObVxH0v4Tox67+F14PdED2oQ==}
 
-  sharp@0.33.5:
-    resolution: {integrity: sha512-haPVm1EkS9pgvHrQ/F3Xy+hgcuMV0Wm9vfIBSiwZ05k+xgb0PkBQpGsAA/oWdDobNaZTH5ppvHtzCFbnSEwHVw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -13686,10 +13318,6 @@ packages:
   signal-exit@3.0.7:
     resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
 
-  signal-exit@4.1.0:
-    resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
-    engines: {node: '>=14'}
-
   simple-git-hooks@2.13.1:
     resolution: {integrity: sha512-WszCLXwT4h2k1ufIXAgsbiTOazqqevFCIncOuUBZJ91DdvWcC5+OFkluWRQPrcuSYd8fjq+o2y1QfWqYMoAToQ==}
     hasBin: true
@@ -13738,8 +13366,8 @@ packages:
     resolution: {integrity: sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==}
     engines: {node: '>=10.0.0'}
 
-  socket.io@4.8.1:
-    resolution: {integrity: sha512-oZ7iUCxph8WYRHHcjBEc9unw3adt5CmSNlppj/5Q4k2RIrhl8Z5yY2Xr4j9zj0+wzVZ0bxmYoGSzKJnRl6A4yg==}
+  socket.io@4.8.3:
+    resolution: {integrity: sha512-2Dd78bqzzjE6KPkD5fHZmDAKRNe3J15q+YHDrIsy9WEkqttc7GY+kT9OBLSMaPbQaEd0x1BjcmtMtXkfpc+T5A==}
     engines: {node: '>=10.2.0'}
 
   sonic-boom@4.2.1:
@@ -13852,8 +13480,8 @@ packages:
   std-env@3.10.0:
     resolution: {integrity: sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==}
 
-  std-env@4.1.0:
-    resolution: {integrity: sha512-Rq7ybcX2RuC55r9oaPVEW7/xu3tj8u4GeBYHBWCychFtzMIr86A7e3PPEBPT37sHStKX3+TiX/Fr/ACmJLVlLQ==}
+  std-env@4.2.0:
+    resolution: {integrity: sha512-oCUKSupKTHX53EyjDtuZQ64pjLJ6yYCtpmEw0goYxtjG9KpbRe8KAsl2tBUGU9DyMcJ0RwJ8GqJAFzMXcXW1Rw==}
 
   stop-iteration-iterator@1.1.0:
     resolution: {integrity: sha512-eLoXW/DHyl62zxY4SCaIgnRhuMr6ri4juEYARS8E6sCEqzKpOiE521Ucofdx+KnDZl5xmvGYaaKCk5FEOxJCoQ==}
@@ -13869,10 +13497,6 @@ packages:
       react: ^18.0.0 || ^19.0.0
       react-dom: ^18.0.0 || ^19.0.0
 
-  streamsearch@1.1.0:
-    resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
-    engines: {node: '>=10.0.0'}
-
   strict-uri-encode@2.0.0:
     resolution: {integrity: sha512-QwiXZgpRcKkhTj2Scnn++4PKtWsH0kpzZ62L2R6c/LUVYv7hVnZqcg2+sMuT6R7Jusu1vviK/MFsu6kNJfWlEQ==}
     engines: {node: '>=4'}
@@ -13889,10 +13513,6 @@ packages:
     resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
     engines: {node: '>=8'}
 
-  string-width@5.1.2:
-    resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
-    engines: {node: '>=12'}
-
   string-width@7.2.0:
     resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
     engines: {node: '>=18'}
@@ -13983,25 +13603,18 @@ packages:
   structured-headers@0.4.1:
     resolution: {integrity: sha512-0MP/Cxx5SzeeZ10p/bZI0S6MpgD+yxAhi1BOQ34jgnMXsCq3j1t6tQnZu+KdlL7dvJTLT3g9xN8tl10TqgFMcg==}
 
+  stubborn-fs@2.0.0:
+    resolution: {integrity: sha512-Y0AvSwDw8y+nlSNFXMm2g6L51rBGdAQT20J3YSOqxC53Lo3bjWRtr2BKcfYoAf352WYpsZSTURrA0tqhfgudPA==}
+
+  stubborn-utils@1.0.2:
+    resolution: {integrity: sha512-zOh9jPYI+xrNOyisSelgym4tolKTJCQd5GBhK0+0xJvcYDcwlOoxF/rnFKQ2KRZknXSG9jWAp66fwP6AxN9STg==}
+
   style-to-js@1.1.21:
     resolution: {integrity: sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ==}
 
   style-to-object@1.0.14:
     resolution: {integrity: sha512-LIN7rULI0jBscWQYaSswptyderlarFkjQ+t79nzty8tcIAceVomEVlLzH5VP4Cmsv6MtKhs7qaAiwlcp+Mgaxw==}
 
-  styled-jsx@5.1.6:
-    resolution: {integrity: sha512-qSVyDTeMotdvQYoHWLNGwRFJHC+i+ZvdBRYosOFgC+Wg1vx4frN2/RG/NA7SYqqvKNLf39P2LSRA2pu6n0XYZA==}
-    engines: {node: '>= 12.0.0'}
-    peerDependencies:
-      '@babel/core': '*'
-      babel-plugin-macros: '*'
-      react: '>= 16.8.0 || 17.x.x || ^18.0.0-0 || ^19.0.0-0'
-    peerDependenciesMeta:
-      '@babel/core':
-        optional: true
-      babel-plugin-macros:
-        optional: true
-
   stylis@4.4.0:
     resolution: {integrity: sha512-5Z9ZpRzfuH6l/UAvCPAPUo3665Nk2wLaZU3x+TLHKVzIz33+sbJqbtrYoC3KD4/uVOr2Zp+L0LySezP9OHV9yA==}
 
@@ -14143,10 +13756,18 @@ packages:
     resolution: {integrity: sha512-W/KYk+NFhkmsYpuHq5JykngiOCnxeVL8v8dFnqxSD8qEEdRfXk1SDM6JzNqcERbcGYj9tMrDQBYV9cjgnunFIg==}
     engines: {node: '>=18'}
 
+  tinyexec@1.2.4:
+    resolution: {integrity: sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==}
+    engines: {node: '>=18'}
+
   tinyglobby@0.2.15:
     resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==}
     engines: {node: '>=12.0.0'}
 
+  tinyglobby@0.2.17:
+    resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
+    engines: {node: '>=12.0.0'}
+
   tinypool@1.1.1:
     resolution: {integrity: sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==}
     engines: {node: ^18.0.0 || >=20.0.0}
@@ -14291,6 +13912,10 @@ packages:
   tsconfig-paths@3.15.0:
     resolution: {integrity: sha512-2Ac2RgzDe/cn48GvOe3M+o82pEFewD3UPbyoUHHdKasHwJKjds4fLXWf/Ux5kATBKN20oaFGu+jbElp1pos0mg==}
 
+  tsconfig-paths@4.2.0:
+    resolution: {integrity: sha512-NoZ4roiN7LnbKn9QqE1amc9DJfzvZXxF4xDavcOWt1BPkdx+m+0gJuPM+S0vCe7zTJMYUP0R8pO2XMr+Y8oLIg==}
+    engines: {node: '>=6'}
+
   tsdown@0.18.4:
     resolution: {integrity: sha512-J/tRS6hsZTkvqmt4+xdELUCkQYDuUCXgBv0fw3ImV09WPGbEKfsPD65E+WUjSu3E7Z6tji9XZ1iWs8rbGqB/ZA==}
     engines: {node: '>=20.19.0'}
@@ -14452,6 +14077,9 @@ packages:
   undici-types@7.16.0:
     resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
 
+  undici-types@8.3.0:
+    resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==}
+
   undici@6.27.0:
     resolution: {integrity: sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==}
     engines: {node: '>=18.17'}
@@ -14679,8 +14307,8 @@ packages:
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
     hasBin: true
 
-  vite-plus@0.1.23:
-    resolution: {integrity: sha512-4VCb0L6uaN3dTvBD6u4Wk0MqhXIKvi2InyCRw+RkOQ0NEt7bgcF4xD9aJRakH0r0EW9MQKLUGjIUH25dtGjncA==}
+  vite-plus@0.1.24:
+    resolution: {integrity: sha512-b3fr6WtCiEhetjuzW/4KcEMOAMuZxoxZATWaXKmPzOLf1upG+pzKJOFZTb94D6wiPBlwcjxoaUtF7C3uAN+VjQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
 
@@ -14853,6 +14481,9 @@ packages:
   whatwg-url@5.0.0:
     resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
 
+  when-exit@2.1.5:
+    resolution: {integrity: sha512-VGkKJ564kzt6Ms1dbgPP/yuIoQCrsFAnRbptpC5wOEsDaNsbCB2bnfnaA8i/vRs5tjUSEOtIuvl9/MyVsvQZCg==}
+
   which-boxed-primitive@1.1.1:
     resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
     engines: {node: '>= 0.4'}
@@ -14915,10 +14546,6 @@ packages:
     resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
     engines: {node: '>=10'}
 
-  wrap-ansi@8.1.0:
-    resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
-    engines: {node: '>=12'}
-
   wrap-ansi@9.0.2:
     resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
     engines: {node: '>=18'}
@@ -15039,6 +14666,10 @@ packages:
     resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==}
     engines: {node: '>=12'}
 
+  yargs@17.7.3:
+    resolution: {integrity: sha512-GZtjxm/J/4TSxuL3FNYjCmLktBTnIw/rVmKSIyKeYAZpmJB2ig9VauCC5xsa82GNKVKDAqpOn3KVzNt0zmrU0g==}
+    engines: {node: '>=12'}
+
   yjs@13.6.31:
     resolution: {integrity: sha512-Eq+5BRfbeGyqGVrTJL3bEcr8gKkxPuyuoHmAwpk52fDb8kOVMrfVSTRPd6yiGgX5Fskb96qCRjzjbRjrL4YEnw==}
     engines: {node: '>=16.0.0', npm: '>=8.0.0'}
@@ -15047,6 +14678,10 @@ packages:
     resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
     engines: {node: '>=10'}
 
+  yoctocolors@2.1.2:
+    resolution: {integrity: sha512-CzhO+pFNo8ajLM2d2IW/R93ipy99LWjtwblvC1RsoSUMZgyLbYFr221TnSNT7GjGdYui6P459mw9JH/g/zW2ug==}
+    engines: {node: '>=18'}
+
   yoga-layout@3.2.1:
     resolution: {integrity: sha512-0LPOt3AxKqMdFBZA3HBAt/t/8vIKq7VaQYbuA8WxCgung+p9TVyKRYdpvCb80HcdTN2NkbIKbhNwKUfm3tQywQ==}
 
@@ -15496,6 +15131,10 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.7
 
+  '@babel/helper-annotate-as-pure@7.29.7':
+    dependencies:
+      '@babel/types': 7.29.7
+
   '@babel/helper-compilation-targets@7.28.6':
     dependencies:
       '@babel/compat-data': 7.29.0
@@ -15517,15 +15156,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-create-class-features-plugin@7.28.6(@babel/core@7.29.6)':
+  '@babel/helper-create-class-features-plugin@7.29.7(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-member-expression-to-functions': 7.28.5
-      '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/helper-replace-supers': 7.28.6(@babel/core@7.29.6)
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/traverse': 7.29.0
+      '@babel/helper-annotate-as-pure': 7.29.7
+      '@babel/helper-member-expression-to-functions': 7.29.7
+      '@babel/helper-optimise-call-expression': 7.29.7
+      '@babel/helper-replace-supers': 7.29.7(@babel/core@7.29.6)
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7
+      '@babel/traverse': 7.29.7
       semver: 6.3.1
     transitivePeerDependencies:
       - supports-color
@@ -15550,6 +15189,8 @@ snapshots:
 
   '@babel/helper-globals@7.28.0': {}
 
+  '@babel/helper-globals@7.29.7': {}
+
   '@babel/helper-member-expression-to-functions@7.28.5':
     dependencies:
       '@babel/traverse': 7.29.0
@@ -15557,6 +15198,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-member-expression-to-functions@7.29.7':
+    dependencies:
+      '@babel/traverse': 7.29.7
+      '@babel/types': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-module-imports@7.27.1':
     dependencies:
       '@babel/traverse': 7.29.0
@@ -15571,6 +15219,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-module-imports@7.29.7':
+    dependencies:
+      '@babel/traverse': 7.29.7
+      '@babel/types': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
@@ -15580,14 +15235,29 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-module-transforms@7.29.7(@babel/core@7.29.6)':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/helper-module-imports': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
+      '@babel/traverse': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-optimise-call-expression@7.27.1':
     dependencies:
       '@babel/types': 7.29.7
 
+  '@babel/helper-optimise-call-expression@7.29.7':
+    dependencies:
+      '@babel/types': 7.29.7
+
   '@babel/helper-plugin-utils@7.27.1': {}
 
   '@babel/helper-plugin-utils@7.28.6': {}
 
+  '@babel/helper-plugin-utils@7.29.7': {}
+
   '@babel/helper-remap-async-to-generator@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
@@ -15606,12 +15276,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/helper-replace-supers@7.28.6(@babel/core@7.29.6)':
+  '@babel/helper-replace-supers@7.29.7(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-member-expression-to-functions': 7.28.5
-      '@babel/helper-optimise-call-expression': 7.27.1
-      '@babel/traverse': 7.29.0
+      '@babel/helper-member-expression-to-functions': 7.29.7
+      '@babel/helper-optimise-call-expression': 7.29.7
+      '@babel/traverse': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
@@ -15622,12 +15292,21 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-skip-transparent-expression-wrappers@7.29.7':
+    dependencies:
+      '@babel/traverse': 7.29.7
+      '@babel/types': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-string-parser@7.29.7': {}
 
   '@babel/helper-validator-identifier@7.29.7': {}
 
   '@babel/helper-validator-option@7.27.1': {}
 
+  '@babel/helper-validator-option@7.29.7': {}
+
   '@babel/helper-wrap-function@7.28.3':
     dependencies:
       '@babel/template': 7.29.7
@@ -15648,7 +15327,7 @@ snapshots:
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
-  '@babel/parser@7.24.5':
+  '@babel/parser@7.27.0':
     dependencies:
       '@babel/types': 7.29.7
 
@@ -15783,6 +15462,11 @@ snapshots:
       '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
+  '@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.6)':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-syntax-logical-assignment-operators@7.10.4(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
@@ -15828,6 +15512,11 @@ snapshots:
       '@babel/core': 7.29.6
       '@babel/helper-plugin-utils': 7.28.6
 
+  '@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.6)':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-syntax-unicode-sets-regex@7.18.6(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
@@ -16008,11 +15697,11 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-modules-commonjs@7.28.6(@babel/core@7.29.6)':
+  '@babel/plugin-transform-modules-commonjs@7.29.7(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.28.6
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@7.29.6)
+      '@babel/helper-plugin-utils': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
@@ -16082,8 +15771,8 @@ snapshots:
   '@babel/plugin-transform-optional-chaining@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.28.6
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7
     transitivePeerDependencies:
       - supports-color
 
@@ -16228,14 +15917,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/plugin-transform-typescript@7.28.6(@babel/core@7.29.6)':
+  '@babel/plugin-transform-typescript@7.29.7(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-create-class-features-plugin': 7.28.6(@babel/core@7.29.6)
-      '@babel/helper-plugin-utils': 7.28.6
-      '@babel/helper-skip-transparent-expression-wrappers': 7.27.1
-      '@babel/plugin-syntax-typescript': 7.28.6(@babel/core@7.29.6)
+      '@babel/helper-annotate-as-pure': 7.29.7
+      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@7.29.6)
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7
+      '@babel/plugin-syntax-typescript': 7.29.7(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
@@ -16360,11 +16049,11 @@ snapshots:
   '@babel/preset-typescript@7.27.1(@babel/core@7.29.6)':
     dependencies:
       '@babel/core': 7.29.6
-      '@babel/helper-plugin-utils': 7.28.6
-      '@babel/helper-validator-option': 7.27.1
-      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
-      '@babel/plugin-transform-modules-commonjs': 7.28.6(@babel/core@7.29.6)
-      '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.29.6)
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-validator-option': 7.29.7
+      '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.6)
+      '@babel/plugin-transform-modules-commonjs': 7.29.7(@babel/core@7.29.6)
+      '@babel/plugin-transform-typescript': 7.29.7(@babel/core@7.29.6)
     transitivePeerDependencies:
       - supports-color
 
@@ -16395,6 +16084,18 @@ snapshots:
       '@babel/parser': 7.29.7
       '@babel/types': 7.29.7
 
+  '@babel/traverse@7.27.0':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.7
+      '@babel/parser': 7.27.0
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.7
+      debug: 4.4.3
+      globals: 11.12.0
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/traverse@7.29.0':
     dependencies:
       '@babel/code-frame': 7.29.0
@@ -16407,32 +16108,44 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/traverse@7.29.7':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.7
+      '@babel/helper-globals': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.7
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/types@7.29.7':
     dependencies:
       '@babel/helper-string-parser': 7.29.7
       '@babel/helper-validator-identifier': 7.29.7
 
-  '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@babel/runtime': 7.29.7
-      '@base-ui/utils': 0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@base-ui/utils': 0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       '@floating-ui/utils': 0.2.12
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      use-sync-external-store: 1.6.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      use-sync-external-store: 1.6.0(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       date-fns: 4.4.0
 
-  '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@babel/runtime': 7.29.7
       '@floating-ui/utils': 0.2.12
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
       reselect: 5.2.0
-      use-sync-external-store: 1.6.0(react@19.1.0)
+      use-sync-external-store: 1.6.0(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
 
@@ -16445,11 +16158,11 @@ snapshots:
 
   '@bcoe/v8-coverage@0.2.3': {}
 
-  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
+  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
-      better-auth: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      better-auth: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       better-call: 1.3.7(zod@4.3.6)
       zod: 4.3.6
 
@@ -16796,25 +16509,25 @@ snapshots:
     transitivePeerDependencies:
       - pg-native
 
-  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   '@emnapi/core@1.10.0':
     dependencies:
@@ -16832,258 +16545,156 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@esbuild/aix-ppc64@0.23.0':
-    optional: true
-
   '@esbuild/aix-ppc64@0.25.12':
     optional: true
 
   '@esbuild/aix-ppc64@0.27.2':
     optional: true
 
-  '@esbuild/aix-ppc64@0.27.7':
-    optional: true
-
   '@esbuild/aix-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm64@0.23.0':
-    optional: true
-
   '@esbuild/android-arm64@0.25.12':
     optional: true
 
   '@esbuild/android-arm64@0.27.2':
     optional: true
 
-  '@esbuild/android-arm64@0.27.7':
-    optional: true
-
   '@esbuild/android-arm64@0.28.1':
     optional: true
 
-  '@esbuild/android-arm@0.23.0':
-    optional: true
-
   '@esbuild/android-arm@0.25.12':
     optional: true
 
   '@esbuild/android-arm@0.27.2':
     optional: true
 
-  '@esbuild/android-arm@0.27.7':
-    optional: true
-
   '@esbuild/android-arm@0.28.1':
     optional: true
 
-  '@esbuild/android-x64@0.23.0':
-    optional: true
-
   '@esbuild/android-x64@0.25.12':
     optional: true
 
   '@esbuild/android-x64@0.27.2':
     optional: true
 
-  '@esbuild/android-x64@0.27.7':
-    optional: true
-
   '@esbuild/android-x64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-arm64@0.23.0':
-    optional: true
-
   '@esbuild/darwin-arm64@0.25.12':
     optional: true
 
   '@esbuild/darwin-arm64@0.27.2':
     optional: true
 
-  '@esbuild/darwin-arm64@0.27.7':
-    optional: true
-
   '@esbuild/darwin-arm64@0.28.1':
     optional: true
 
-  '@esbuild/darwin-x64@0.23.0':
-    optional: true
-
   '@esbuild/darwin-x64@0.25.12':
     optional: true
 
   '@esbuild/darwin-x64@0.27.2':
     optional: true
 
-  '@esbuild/darwin-x64@0.27.7':
-    optional: true
-
   '@esbuild/darwin-x64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.23.0':
-    optional: true
-
   '@esbuild/freebsd-arm64@0.25.12':
     optional: true
 
   '@esbuild/freebsd-arm64@0.27.2':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.27.7':
-    optional: true
-
   '@esbuild/freebsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/freebsd-x64@0.23.0':
-    optional: true
-
   '@esbuild/freebsd-x64@0.25.12':
     optional: true
 
   '@esbuild/freebsd-x64@0.27.2':
     optional: true
 
-  '@esbuild/freebsd-x64@0.27.7':
-    optional: true
-
   '@esbuild/freebsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm64@0.23.0':
-    optional: true
-
   '@esbuild/linux-arm64@0.25.12':
     optional: true
 
   '@esbuild/linux-arm64@0.27.2':
     optional: true
 
-  '@esbuild/linux-arm64@0.27.7':
-    optional: true
-
   '@esbuild/linux-arm64@0.28.1':
     optional: true
 
-  '@esbuild/linux-arm@0.23.0':
-    optional: true
-
   '@esbuild/linux-arm@0.25.12':
     optional: true
 
   '@esbuild/linux-arm@0.27.2':
     optional: true
 
-  '@esbuild/linux-arm@0.27.7':
-    optional: true
-
   '@esbuild/linux-arm@0.28.1':
     optional: true
 
-  '@esbuild/linux-ia32@0.23.0':
-    optional: true
-
   '@esbuild/linux-ia32@0.25.12':
     optional: true
 
   '@esbuild/linux-ia32@0.27.2':
     optional: true
 
-  '@esbuild/linux-ia32@0.27.7':
-    optional: true
-
   '@esbuild/linux-ia32@0.28.1':
     optional: true
 
-  '@esbuild/linux-loong64@0.23.0':
-    optional: true
-
   '@esbuild/linux-loong64@0.25.12':
     optional: true
 
   '@esbuild/linux-loong64@0.27.2':
     optional: true
 
-  '@esbuild/linux-loong64@0.27.7':
-    optional: true
-
   '@esbuild/linux-loong64@0.28.1':
     optional: true
 
-  '@esbuild/linux-mips64el@0.23.0':
-    optional: true
-
   '@esbuild/linux-mips64el@0.25.12':
     optional: true
 
   '@esbuild/linux-mips64el@0.27.2':
     optional: true
 
-  '@esbuild/linux-mips64el@0.27.7':
-    optional: true
-
   '@esbuild/linux-mips64el@0.28.1':
     optional: true
 
-  '@esbuild/linux-ppc64@0.23.0':
-    optional: true
-
   '@esbuild/linux-ppc64@0.25.12':
     optional: true
 
   '@esbuild/linux-ppc64@0.27.2':
     optional: true
 
-  '@esbuild/linux-ppc64@0.27.7':
-    optional: true
-
   '@esbuild/linux-ppc64@0.28.1':
     optional: true
 
-  '@esbuild/linux-riscv64@0.23.0':
-    optional: true
-
   '@esbuild/linux-riscv64@0.25.12':
     optional: true
 
   '@esbuild/linux-riscv64@0.27.2':
     optional: true
 
-  '@esbuild/linux-riscv64@0.27.7':
-    optional: true
-
   '@esbuild/linux-riscv64@0.28.1':
     optional: true
 
-  '@esbuild/linux-s390x@0.23.0':
-    optional: true
-
   '@esbuild/linux-s390x@0.25.12':
     optional: true
 
   '@esbuild/linux-s390x@0.27.2':
     optional: true
 
-  '@esbuild/linux-s390x@0.27.7':
-    optional: true
-
   '@esbuild/linux-s390x@0.28.1':
     optional: true
 
-  '@esbuild/linux-x64@0.23.0':
-    optional: true
-
   '@esbuild/linux-x64@0.25.12':
     optional: true
 
   '@esbuild/linux-x64@0.27.2':
     optional: true
 
-  '@esbuild/linux-x64@0.27.7':
-    optional: true
-
   '@esbuild/linux-x64@0.28.1':
     optional: true
 
@@ -17093,54 +16704,33 @@ snapshots:
   '@esbuild/netbsd-arm64@0.27.2':
     optional: true
 
-  '@esbuild/netbsd-arm64@0.27.7':
-    optional: true
-
   '@esbuild/netbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/netbsd-x64@0.23.0':
-    optional: true
-
   '@esbuild/netbsd-x64@0.25.12':
     optional: true
 
   '@esbuild/netbsd-x64@0.27.2':
     optional: true
 
-  '@esbuild/netbsd-x64@0.27.7':
-    optional: true
-
   '@esbuild/netbsd-x64@0.28.1':
     optional: true
 
-  '@esbuild/openbsd-arm64@0.23.0':
-    optional: true
-
   '@esbuild/openbsd-arm64@0.25.12':
     optional: true
 
   '@esbuild/openbsd-arm64@0.27.2':
     optional: true
 
-  '@esbuild/openbsd-arm64@0.27.7':
-    optional: true
-
   '@esbuild/openbsd-arm64@0.28.1':
     optional: true
 
-  '@esbuild/openbsd-x64@0.23.0':
-    optional: true
-
   '@esbuild/openbsd-x64@0.25.12':
     optional: true
 
   '@esbuild/openbsd-x64@0.27.2':
     optional: true
 
-  '@esbuild/openbsd-x64@0.27.7':
-    optional: true
-
   '@esbuild/openbsd-x64@0.28.1':
     optional: true
 
@@ -17150,69 +16740,42 @@ snapshots:
   '@esbuild/openharmony-arm64@0.27.2':
     optional: true
 
-  '@esbuild/openharmony-arm64@0.27.7':
-    optional: true
-
   '@esbuild/openharmony-arm64@0.28.1':
     optional: true
 
-  '@esbuild/sunos-x64@0.23.0':
-    optional: true
-
   '@esbuild/sunos-x64@0.25.12':
     optional: true
 
   '@esbuild/sunos-x64@0.27.2':
     optional: true
 
-  '@esbuild/sunos-x64@0.27.7':
-    optional: true
-
   '@esbuild/sunos-x64@0.28.1':
     optional: true
 
-  '@esbuild/win32-arm64@0.23.0':
-    optional: true
-
   '@esbuild/win32-arm64@0.25.12':
     optional: true
 
   '@esbuild/win32-arm64@0.27.2':
     optional: true
 
-  '@esbuild/win32-arm64@0.27.7':
-    optional: true
-
   '@esbuild/win32-arm64@0.28.1':
     optional: true
 
-  '@esbuild/win32-ia32@0.23.0':
-    optional: true
-
   '@esbuild/win32-ia32@0.25.12':
     optional: true
 
   '@esbuild/win32-ia32@0.27.2':
     optional: true
 
-  '@esbuild/win32-ia32@0.27.7':
-    optional: true
-
   '@esbuild/win32-ia32@0.28.1':
     optional: true
 
-  '@esbuild/win32-x64@0.23.0':
-    optional: true
-
   '@esbuild/win32-x64@0.25.12':
     optional: true
 
   '@esbuild/win32-x64@0.27.2':
     optional: true
 
-  '@esbuild/win32-x64@0.27.7':
-    optional: true
-
   '@esbuild/win32-x64@0.28.1':
     optional: true
 
@@ -17241,7 +16804,7 @@ snapshots:
 
   '@eslint/eslintrc@3.3.3':
     dependencies:
-      ajv: 6.12.6
+      ajv: 6.14.0
       debug: 4.4.3
       espree: 10.4.0
       globals: 14.0.0
@@ -17600,6 +17163,12 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
 
+  '@floating-ui/react-dom@2.1.9(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@floating-ui/dom': 1.8.0
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+
   '@floating-ui/utils@0.2.12': {}
 
   '@fontsource-variable/geist-mono@5.2.8': {}
@@ -17623,6 +17192,11 @@ snapshots:
       '@standard-schema/utils': 0.3.0
       react-hook-form: 7.81.0(react@19.1.0)
 
+  '@hookform/resolvers@5.4.0(react-hook-form@7.81.0(react@19.2.7))':
+    dependencies:
+      '@standard-schema/utils': 0.3.0
+      react-hook-form: 7.81.0(react@19.2.7)
+
   '@humanfs/core@0.19.1': {}
 
   '@humanfs/node@0.16.7':
@@ -17642,92 +17216,8 @@ snapshots:
       '@iconify/types': 2.0.0
       import-meta-resolve: 4.2.0
 
-  '@img/sharp-darwin-arm64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.0.4
-    optional: true
-
-  '@img/sharp-darwin-x64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.0.4
-    optional: true
-
-  '@img/sharp-libvips-darwin-arm64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-darwin-x64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm@1.0.5':
-    optional: true
-
-  '@img/sharp-libvips-linux-s390x@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-x64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
-    optional: true
-
-  '@img/sharp-linux-arm64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.0.4
-    optional: true
-
-  '@img/sharp-linux-arm@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.0.5
-    optional: true
-
-  '@img/sharp-linux-s390x@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.0.4
-    optional: true
-
-  '@img/sharp-linux-x64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.0.4
-    optional: true
-
-  '@img/sharp-linuxmusl-arm64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
-    optional: true
-
-  '@img/sharp-linuxmusl-x64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
-    optional: true
-
-  '@img/sharp-wasm32@0.33.5':
-    dependencies:
-      '@emnapi/runtime': 1.10.0
-    optional: true
-
-  '@img/sharp-win32-ia32@0.33.5':
-    optional: true
-
-  '@img/sharp-win32-x64@0.33.5':
-    optional: true
-
   '@ioredis/commands@1.5.0': {}
 
-  '@isaacs/cliui@8.0.2':
-    dependencies:
-      string-width: 5.1.2
-      string-width-cjs: string-width@4.2.3
-      strip-ansi: 7.1.2
-      strip-ansi-cjs: strip-ansi@6.0.1
-      wrap-ansi: 8.1.0
-      wrap-ansi-cjs: wrap-ansi@7.0.0
-
   '@isaacs/fs-minipass@4.0.1':
     dependencies:
       minipass: 7.1.2
@@ -17744,6 +17234,8 @@ snapshots:
 
   '@istanbuljs/schema@0.1.3': {}
 
+  '@istanbuljs/schema@0.1.6': {}
+
   '@jest/console@29.7.0':
     dependencies:
       '@jest/types': 29.6.3
@@ -18090,32 +17582,6 @@ snapshots:
 
   '@neon-rs/load@0.0.4': {}
 
-  '@next/env@15.1.2': {}
-
-  '@next/swc-darwin-arm64@15.1.2':
-    optional: true
-
-  '@next/swc-darwin-x64@15.1.2':
-    optional: true
-
-  '@next/swc-linux-arm64-gnu@15.1.2':
-    optional: true
-
-  '@next/swc-linux-arm64-musl@15.1.2':
-    optional: true
-
-  '@next/swc-linux-x64-gnu@15.1.2':
-    optional: true
-
-  '@next/swc-linux-x64-musl@15.1.2':
-    optional: true
-
-  '@next/swc-win32-arm64-msvc@15.1.2':
-    optional: true
-
-  '@next/swc-win32-x64-msvc@15.1.2':
-    optional: true
-
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
     optional: true
 
@@ -18520,9 +17986,6 @@ snapshots:
       tweedle.js: 2.1.0
       typed-signals: 2.5.0
 
-  '@pkgjs/parseargs@0.11.0':
-    optional: true
-
   '@pkgr/core@0.2.9': {}
 
   '@polka/url@1.0.0-next.29': {}
@@ -18535,11 +17998,11 @@ snapshots:
 
   '@radix-ui/primitive@1.1.5': {}
 
-  '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18561,19 +18024,19 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18591,15 +18054,15 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18622,49 +18085,49 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-aspect-ratio@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-aspect-ratio@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-avatar@1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-avatar@1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-checkbox@1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-checkbox@1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18685,18 +18148,18 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18737,27 +18200,51 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@radix-ui/react-compose-refs@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-compose-refs@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-compose-refs@1.1.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-context-menu@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-compose-refs@1.1.3(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@radix-ui/react-context-menu@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18768,6 +18255,12 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-context@1.2.0(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -18834,12 +18327,40 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      aria-hidden: 1.2.6
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@radix-ui/react-direction@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-direction@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -18879,6 +18400,19 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -18894,17 +18428,17 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18915,6 +18449,12 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-focus-guards@1.1.4(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
@@ -18948,41 +18488,52 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-form@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-form@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-hover-card@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-hover-card@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-id@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-id@1.1.1(@types/react@19.1.17)(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
+      '@radix-ui/react-use-layout-effect': 1.1.1(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
     optionalDependencies:
       '@types/react': 19.1.17
 
@@ -18993,6 +18544,13 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-id@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-label@2.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
@@ -19002,11 +18560,11 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19037,46 +18595,46 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       aria-hidden: 1.2.6
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-menubar@1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-menubar@1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19103,60 +18661,60 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-one-time-password-field@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-one-time-password-field@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-password-toggle-field@0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-password-toggle-field@0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19184,25 +18742,25 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       aria-hidden: 1.2.6
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19243,20 +18801,20 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/rect': 1.1.2
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19291,6 +18849,16 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@radix-ui/react-presence@1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
@@ -19318,11 +18886,20 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19354,30 +18931,39 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-radio-group@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
+  '@radix-ui/react-radio-group@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19439,6 +19025,25 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+
   '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/number': 1.1.2
@@ -19473,19 +19078,19 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19520,32 +19125,32 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       aria-hidden: 1.2.6
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19559,30 +19164,30 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-slider@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-slider@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19594,10 +19199,10 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-slot@1.2.3(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-slot@1.2.3(@types/react@19.1.17)(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
     optionalDependencies:
       '@types/react': 19.1.17
 
@@ -19608,17 +19213,24 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-switch@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-slot@1.3.0(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@radix-ui/react-switch@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19671,103 +19283,119 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toggle-group@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toggle@1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toggle-group@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toolbar@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toggle@1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-toolbar@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+      '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19778,6 +19406,12 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-use-callback-ref@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-use-controllable-state@1.2.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
@@ -19786,6 +19420,14 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-use-controllable-state@1.2.3(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-use-effect-event@0.0.3(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
@@ -19793,10 +19435,17 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-escape-keydown@1.1.3(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-effect-event@0.0.3(@types/react@19.1.17)(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@radix-ui/react-use-escape-keydown@1.1.3(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
     optionalDependencies:
       '@types/react': 19.1.17
 
@@ -19806,9 +19455,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-use-layout-effect@1.1.1(@types/react@19.1.17)(react@19.1.0)':
+  '@radix-ui/react-use-is-hydrated@0.1.1(@types/react@19.1.17)(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@radix-ui/react-use-layout-effect@1.1.1(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
     optionalDependencies:
       '@types/react': 19.1.17
 
@@ -19818,12 +19473,24 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-use-layout-effect@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-use-previous@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-use-previous@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-use-rect@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/rect': 1.1.2
@@ -19831,6 +19498,13 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-use-rect@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      '@radix-ui/rect': 1.1.2
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-use-size@1.1.2(@types/react@19.1.17)(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
@@ -19838,6 +19512,13 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@radix-ui/react-use-size@1.1.2(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
@@ -19856,112 +19537,104 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
   '@radix-ui/rect@1.1.2': {}
 
-  '@react-email/body@0.0.11(react@19.1.0)':
+  '@react-email/body@0.3.0(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/button@0.0.19(react@19.1.0)':
+  '@react-email/button@0.2.1(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/code-block@0.0.11(react@19.1.0)':
+  '@react-email/code-block@0.2.1(react@19.2.7)':
     dependencies:
-      prismjs: 1.29.0
-      react: 19.1.0
+      prismjs: 1.30.0
+      react: 19.2.7
 
-  '@react-email/code-inline@0.0.5(react@19.1.0)':
+  '@react-email/code-inline@0.0.6(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/column@0.0.13(react@19.1.0)':
+  '@react-email/column@0.0.14(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/components@0.0.34(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@react-email/body': 0.0.11(react@19.1.0)
-      '@react-email/button': 0.0.19(react@19.1.0)
-      '@react-email/code-block': 0.0.11(react@19.1.0)
-      '@react-email/code-inline': 0.0.5(react@19.1.0)
-      '@react-email/column': 0.0.13(react@19.1.0)
-      '@react-email/container': 0.0.15(react@19.1.0)
-      '@react-email/font': 0.0.9(react@19.1.0)
-      '@react-email/head': 0.0.12(react@19.1.0)
-      '@react-email/heading': 0.0.15(react@19.1.0)
-      '@react-email/hr': 0.0.11(react@19.1.0)
-      '@react-email/html': 0.0.11(react@19.1.0)
-      '@react-email/img': 0.0.11(react@19.1.0)
-      '@react-email/link': 0.0.12(react@19.1.0)
-      '@react-email/markdown': 0.0.14(react@19.1.0)
-      '@react-email/preview': 0.0.12(react@19.1.0)
-      '@react-email/render': 1.0.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@react-email/row': 0.0.12(react@19.1.0)
-      '@react-email/section': 0.0.16(react@19.1.0)
-      '@react-email/tailwind': 1.0.4(react@19.1.0)
-      '@react-email/text': 0.1.0(react@19.1.0)
-      react: 19.1.0
+  '@react-email/components@1.0.12(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@react-email/body': 0.3.0(react@19.2.7)
+      '@react-email/button': 0.2.1(react@19.2.7)
+      '@react-email/code-block': 0.2.1(react@19.2.7)
+      '@react-email/code-inline': 0.0.6(react@19.2.7)
+      '@react-email/column': 0.0.14(react@19.2.7)
+      '@react-email/container': 0.0.16(react@19.2.7)
+      '@react-email/font': 0.0.10(react@19.2.7)
+      '@react-email/head': 0.0.13(react@19.2.7)
+      '@react-email/heading': 0.0.16(react@19.2.7)
+      '@react-email/hr': 0.0.12(react@19.2.7)
+      '@react-email/html': 0.0.12(react@19.2.7)
+      '@react-email/img': 0.0.12(react@19.2.7)
+      '@react-email/link': 0.0.13(react@19.2.7)
+      '@react-email/markdown': 0.0.18(react@19.2.7)
+      '@react-email/preview': 0.0.14(react@19.2.7)
+      '@react-email/render': 2.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@react-email/row': 0.0.13(react@19.2.7)
+      '@react-email/section': 0.0.17(react@19.2.7)
+      '@react-email/tailwind': 2.0.7(@react-email/body@0.3.0(react@19.2.7))(@react-email/button@0.2.1(react@19.2.7))(@react-email/code-block@0.2.1(react@19.2.7))(@react-email/code-inline@0.0.6(react@19.2.7))(@react-email/container@0.0.16(react@19.2.7))(@react-email/heading@0.0.16(react@19.2.7))(@react-email/hr@0.0.12(react@19.2.7))(@react-email/img@0.0.12(react@19.2.7))(@react-email/link@0.0.13(react@19.2.7))(@react-email/preview@0.0.14(react@19.2.7))(@react-email/text@0.1.6(react@19.2.7))(react@19.2.7)
+      '@react-email/text': 0.1.6(react@19.2.7)
+      react: 19.2.7
     transitivePeerDependencies:
       - react-dom
 
-  '@react-email/container@0.0.15(react@19.1.0)':
-    dependencies:
-      react: 19.1.0
-
-  '@react-email/font@0.0.9(react@19.1.0)':
+  '@react-email/container@0.0.16(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/head@0.0.12(react@19.1.0)':
+  '@react-email/font@0.0.10(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/heading@0.0.15(react@19.1.0)':
+  '@react-email/head@0.0.13(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/hr@0.0.11(react@19.1.0)':
+  '@react-email/heading@0.0.16(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/html@0.0.11(react@19.1.0)':
+  '@react-email/hr@0.0.12(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/img@0.0.11(react@19.1.0)':
+  '@react-email/html@0.0.12(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/link@0.0.12(react@19.1.0)':
+  '@react-email/img@0.0.12(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/markdown@0.0.14(react@19.1.0)':
+  '@react-email/link@0.0.13(react@19.2.7)':
     dependencies:
-      md-to-react-email: 5.0.5(react@19.1.0)
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/preview@0.0.12(react@19.1.0)':
+  '@react-email/markdown@0.0.18(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      marked: 15.0.12
+      react: 19.2.7
 
-  '@react-email/render@1.0.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@react-email/preview@0.0.14(react@19.2.7)':
     dependencies:
-      html-to-text: 9.0.5
-      prettier: 3.4.2
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      react-promise-suspense: 0.3.4
+      react: 19.2.7
 
   '@react-email/render@1.1.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -19971,21 +19644,50 @@ snapshots:
       react-dom: 19.1.0(react@19.1.0)
       react-promise-suspense: 0.3.4
 
-  '@react-email/row@0.0.12(react@19.1.0)':
+  '@react-email/render@2.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      html-to-text: 9.0.5
+      prettier: 3.9.5
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
 
-  '@react-email/section@0.0.16(react@19.1.0)':
+  '@react-email/render@2.1.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      entities: 4.5.0
+      html-to-text: 9.0.5
+      html5parser: 3.0.0
+      prettier: 3.9.5
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
 
-  '@react-email/tailwind@1.0.4(react@19.1.0)':
+  '@react-email/row@0.0.13(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  '@react-email/text@0.1.0(react@19.1.0)':
+  '@react-email/section@0.0.17(react@19.2.7)':
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
+
+  '@react-email/tailwind@2.0.7(@react-email/body@0.3.0(react@19.2.7))(@react-email/button@0.2.1(react@19.2.7))(@react-email/code-block@0.2.1(react@19.2.7))(@react-email/code-inline@0.0.6(react@19.2.7))(@react-email/container@0.0.16(react@19.2.7))(@react-email/heading@0.0.16(react@19.2.7))(@react-email/hr@0.0.12(react@19.2.7))(@react-email/img@0.0.12(react@19.2.7))(@react-email/link@0.0.13(react@19.2.7))(@react-email/preview@0.0.14(react@19.2.7))(@react-email/text@0.1.6(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@react-email/text': 0.1.6(react@19.2.7)
+      react: 19.2.7
+      tailwindcss: 4.3.2
+    optionalDependencies:
+      '@react-email/body': 0.3.0(react@19.2.7)
+      '@react-email/button': 0.2.1(react@19.2.7)
+      '@react-email/code-block': 0.2.1(react@19.2.7)
+      '@react-email/code-inline': 0.0.6(react@19.2.7)
+      '@react-email/container': 0.0.16(react@19.2.7)
+      '@react-email/heading': 0.0.16(react@19.2.7)
+      '@react-email/hr': 0.0.12(react@19.2.7)
+      '@react-email/img': 0.0.12(react@19.2.7)
+      '@react-email/link': 0.0.13(react@19.2.7)
+      '@react-email/preview': 0.0.14(react@19.2.7)
+
+  '@react-email/text@0.1.6(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
 
   '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))':
     dependencies:
@@ -20478,10 +20180,10 @@ snapshots:
       domhandler: 5.0.3
       selderee: 0.11.0
 
-  '@shadcn/react@0.2.1(@types/react@19.1.17)(react@19.1.0)':
+  '@shadcn/react@0.2.1(@types/react@19.1.17)(react@19.2.7)':
     optionalDependencies:
       '@types/react': 19.1.17
-      react: 19.1.0
+      react: 19.2.7
 
   '@shikijs/core@3.23.0':
     dependencies:
@@ -20617,28 +20319,22 @@ snapshots:
 
   '@socket.io/component-emitter@3.1.2': {}
 
-  '@srsholmes/vitest-react-native@0.1.5(@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@srsholmes/vitest-react-native@0.1.5(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@react-native/polyfills': 2.0.0
-      esbuild: 0.27.7
+      esbuild: 0.28.1
       flow-remove-types: 2.313.0
       pirates: 4.0.7
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   '@standard-schema/spec@1.1.0': {}
 
   '@standard-schema/utils@0.3.0': {}
 
-  '@swc/counter@0.1.3': {}
-
-  '@swc/helpers@0.5.15':
-    dependencies:
-      tslib: 2.8.1
-
   '@t3-oss/env-core@0.13.11(typescript@6.0.3)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)':
     optionalDependencies:
       typescript: 6.0.3
@@ -20782,12 +20478,12 @@ snapshots:
       tailwindcss: 4.3.0
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
-  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@tailwindcss/node': 4.3.0
       '@tailwindcss/oxide': 4.3.0
       tailwindcss: 4.3.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
   '@tanstack/history@1.161.4': {}
 
@@ -21216,6 +20912,19 @@ snapshots:
     optionalDependencies:
       jest: 29.7.0(@types/node@24.10.4)
 
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@26.1.1))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+    dependencies:
+      jest-matcher-utils: 30.2.0
+      picocolors: 1.1.1
+      pretty-format: 30.2.0
+      react: 19.1.0
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react-test-renderer: 19.1.0(react@19.1.0)
+      redent: 3.0.0
+    optionalDependencies:
+      jest: 29.7.0(@types/node@26.1.1)
+    optional: true
+
   '@testing-library/react@16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@babel/runtime': 7.29.7
@@ -21302,7 +21011,7 @@ snapshots:
 
   '@types/cors@2.8.19':
     dependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
 
   '@types/d3-array@3.2.2': {}
 
@@ -21504,6 +21213,10 @@ snapshots:
     dependencies:
       undici-types: 7.16.0
 
+  '@types/node@26.1.1':
+    dependencies:
+      undici-types: 8.3.0
+
   '@types/nodemailer@8.0.1':
     dependencies:
       '@types/node': 24.10.4
@@ -21787,7 +21500,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
@@ -21795,7 +21508,7 @@ snapshots:
       '@rolldown/pluginutils': 1.0.0-beta.27
       '@types/babel__core': 7.20.5
       react-refresh: 0.17.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
@@ -21823,6 +21536,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@vitejs/plugin-react@5.2.0(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.6)
+      '@rolldown/pluginutils': 1.0.0-rc.3
+      '@types/babel__core': 7.20.5
+      react-refresh: 0.18.0
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - supports-color
+
   '@vitest/expect@3.2.7':
     dependencies:
       '@types/chai': 5.2.3
@@ -21855,6 +21580,14 @@ snapshots:
     optionalDependencies:
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  '@vitest/mocker@3.2.7(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+    dependencies:
+      '@vitest/spy': 3.2.7
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+    optionalDependencies:
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+
   '@vitest/pretty-format@3.2.7':
     dependencies:
       tinyrainbow: 2.0.0
@@ -21879,7 +21612,7 @@ snapshots:
     dependencies:
       tinyspy: 4.0.4
 
-  '@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23)':
+  '@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24)':
     dependencies:
       '@vitest/utils': 4.1.0
       fflate: 0.8.3
@@ -21888,7 +21621,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.1.0
-      vitest: '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   '@vitest/utils@3.2.7':
     dependencies:
@@ -21902,7 +21635,7 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.0
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -21919,7 +21652,7 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -21936,7 +21669,7 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -21953,7 +21686,7 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -21970,7 +21703,7 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -21983,11 +21716,11 @@ snapshots:
       jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
-      typescript: 5.6.3
+      typescript: 5.9.3
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
@@ -22000,18 +21733,69 @@ snapshots:
       jiti: 2.7.0
       terser: 5.44.1
       tsx: 4.21.0
+      typescript: 6.0.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 26.1.1
+      esbuild: 0.25.12
+      fsevents: 2.3.3
+      jiti: 2.7.0
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 6.0.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 26.1.1
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.7.0
+      terser: 5.44.1
+      tsx: 4.21.0
+      typescript: 5.6.3
+      unrun: 0.2.39(synckit@0.11.11)
+      yaml: 2.8.3
+
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+    dependencies:
+      '@oxc-project/runtime': 0.133.0
+      '@oxc-project/types': 0.133.0
+      lightningcss: 1.32.0
+      postcss: 8.5.10
+    optionalDependencies:
+      '@types/node': 26.1.1
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.7.0
+      terser: 5.44.1
+      tsx: 4.21.0
       typescript: 5.8.3
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
       postcss: 8.5.10
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
       esbuild: 0.28.1
       fsevents: 2.3.3
       jiti: 2.7.0
@@ -22021,14 +21805,14 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-core@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-core@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)':
     dependencies:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
       postcss: 8.5.10
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
       esbuild: 0.28.1
       fsevents: 2.3.3
       jiti: 2.7.0
@@ -22038,43 +21822,125 @@ snapshots:
       unrun: 0.2.39(synckit@0.11.11)
       yaml: 2.8.3
 
-  '@voidzero-dev/vite-plus-darwin-arm64@0.1.23':
+  '@voidzero-dev/vite-plus-darwin-arm64@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-darwin-x64@0.1.23':
+  '@voidzero-dev/vite-plus-darwin-x64@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-linux-arm64-gnu@0.1.23':
+  '@voidzero-dev/vite-plus-linux-arm64-gnu@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-linux-arm64-musl@0.1.23':
+  '@voidzero-dev/vite-plus-linux-arm64-musl@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-linux-x64-gnu@0.1.23':
+  '@voidzero-dev/vite-plus-linux-x64-gnu@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-linux-x64-musl@0.1.23':
+  '@voidzero-dev/vite-plus-linux-x64-musl@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@types/node': 20.19.43
+      '@vitest/ui': 4.1.0(@voidzero-dev/vite-plus-test@0.1.24)
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@types/node': 20.19.43
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@types/node': 20.19.43
-      '@vitest/ui': 4.1.0(@voidzero-dev/vite-plus-test@0.1.23)
+      '@types/node': 22.20.1
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -22098,24 +21964,24 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@types/node': 20.19.43
+      '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -22139,24 +22005,24 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@types/node': 22.20.1
+      '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -22180,20 +22046,20 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
@@ -22221,24 +22087,24 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -22262,24 +22128,24 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -22303,24 +22169,24 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -22344,24 +22210,65 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       es-module-lexer: 1.7.0
-      obug: 2.1.1
+      obug: 2.1.3
       pixelmatch: 7.2.0
       pngjs: 7.0.0
       sirv: 3.0.2
-      std-env: 4.1.0
+      std-env: 4.2.0
       tinybench: 2.9.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
@@ -22385,10 +22292,10 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.23':
+  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.23':
+  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.24':
     optional: true
 
   '@webgpu/types@0.1.71': {}
@@ -22472,7 +22379,11 @@ snapshots:
       '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
       zod: 4.3.6
 
-  ajv@6.12.6:
+  ajv-formats@3.0.1(ajv@8.18.0):
+    optionalDependencies:
+      ajv: 8.18.0
+
+  ajv@6.14.0:
     dependencies:
       fast-deep-equal: 3.1.3
       fast-json-stable-stringify: 2.1.0
@@ -22486,7 +22397,7 @@ snapshots:
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
-  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0):
+  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0):
     dependencies:
       '@alchemy.run/node-utils': 0.0.5
       '@aws-sdk/credential-providers': 3.1081.0
@@ -22500,7 +22411,7 @@ snapshots:
       '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/neon': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/planetscale': 0.26.1(effect@4.0.0-beta.84)
-      '@effect/vitest': 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
+      '@effect/vitest': 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@libsql/client': 0.17.4
       '@octokit/rest': 22.0.1
       '@octokit/webhooks': 14.2.0
@@ -22696,6 +22607,11 @@ snapshots:
 
   atomic-sleep@1.0.0: {}
 
+  atomically@2.1.1:
+    dependencies:
+      stubborn-fs: 2.0.0
+      when-exit: 2.1.5
+
   auto-bind@5.0.1: {}
 
   available-typed-arrays@1.0.7:
@@ -22930,7 +22846,7 @@ snapshots:
 
   before-after-hook@4.0.0: {}
 
-  better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
@@ -22955,7 +22871,7 @@ snapshots:
       pg: 8.22.0
       react: 19.2.7
       react-dom: 19.1.1(react@19.2.7)
-      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vitest: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@cloudflare/workers-types'
       - '@opentelemetry/api'
@@ -22985,12 +22901,6 @@ snapshots:
 
   birpc@4.0.0: {}
 
-  bl@4.1.0:
-    dependencies:
-      buffer: 5.7.1
-      inherits: 2.0.4
-      readable-stream: 3.6.2
-
   boolbase@1.0.0: {}
 
   bowser@2.14.1: {}
@@ -23075,15 +22985,11 @@ snapshots:
       esbuild: 0.25.12
       load-tsconfig: 0.2.5
 
-  bundle-require@5.1.0(esbuild@0.27.7):
+  bundle-require@5.1.0(esbuild@0.28.1):
     dependencies:
-      esbuild: 0.27.7
+      esbuild: 0.28.1
       load-tsconfig: 0.2.5
 
-  busboy@1.6.0:
-    dependencies:
-      streamsearch: 1.1.0
-
   bytes@3.1.2: {}
 
   c12@3.3.3:
@@ -23249,6 +23155,8 @@ snapshots:
     dependencies:
       consola: 3.4.2
 
+  citty@0.2.2: {}
+
   cjs-module-lexer@1.4.3: {}
 
   class-variance-authority@0.7.1:
@@ -23261,10 +23169,6 @@ snapshots:
     dependencies:
       restore-cursor: 2.0.0
 
-  cli-cursor@3.1.0:
-    dependencies:
-      restore-cursor: 3.1.0
-
   cli-cursor@4.0.0:
     dependencies:
       restore-cursor: 4.0.0
@@ -23290,14 +23194,14 @@ snapshots:
 
   cluster-key-slot@1.1.2: {}
 
-  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - '@types/react-dom'
@@ -23344,10 +23248,10 @@ snapshots:
 
   comma-separated-tokens@2.0.3: {}
 
-  commander@11.1.0: {}
-
   commander@12.1.0: {}
 
+  commander@13.1.0: {}
+
   commander@14.0.2: {}
 
   commander@2.20.3: {}
@@ -23380,6 +23284,18 @@ snapshots:
 
   concat-map@0.0.1: {}
 
+  conf@15.1.0:
+    dependencies:
+      ajv: 8.18.0
+      ajv-formats: 3.0.1(ajv@8.18.0)
+      atomically: 2.1.1
+      debounce-fn: 6.0.0
+      dot-prop: 10.1.0
+      env-paths: 3.0.0
+      json-schema-typed: 8.0.2
+      semver: 7.8.5
+      uint8array-extras: 1.5.0
+
   confbox@0.1.8: {}
 
   confbox@0.2.2: {}
@@ -23457,6 +23373,22 @@ snapshots:
       - supports-color
       - ts-node
 
+  create-jest@29.7.0(@types/node@26.1.1):
+    dependencies:
+      '@jest/types': 29.6.3
+      chalk: 4.1.2
+      exit: 0.1.2
+      graceful-fs: 4.2.11
+      jest-config: 29.7.0(@types/node@26.1.1)
+      jest-util: 29.7.0
+      prompts: 2.4.2
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
+    optional: true
+
   cross-env@7.0.3:
     dependencies:
       cross-spawn: 7.0.6
@@ -23488,6 +23420,11 @@ snapshots:
       mdn-data: 2.0.14
       source-map: 0.6.1
 
+  css-tree@3.2.1:
+    dependencies:
+      mdn-data: 2.27.1
+      source-map-js: 1.2.1
+
   css-what@6.2.2: {}
 
   cssesc@3.0.0: {}
@@ -23724,7 +23661,11 @@ snapshots:
 
   dayjs@1.11.21: {}
 
-  debounce@2.0.0: {}
+  debounce-fn@6.0.0:
+    dependencies:
+      mimic-function: 5.0.1
+
+  debounce@2.2.0: {}
 
   debug@2.6.9:
     dependencies:
@@ -23734,10 +23675,6 @@ snapshots:
     dependencies:
       ms: 2.1.3
 
-  debug@4.3.7:
-    dependencies:
-      ms: 2.1.3
-
   debug@4.4.3:
     dependencies:
       ms: 2.1.3
@@ -23752,7 +23689,7 @@ snapshots:
 
   decode-uri-component@0.2.2: {}
 
-  dedent@1.7.1: {}
+  dedent@1.7.2: {}
 
   deep-eql@5.0.2: {}
 
@@ -23855,6 +23792,10 @@ snapshots:
       domelementtype: 2.3.0
       domhandler: 5.0.3
 
+  dot-prop@10.1.0:
+    dependencies:
+      type-fest: 5.8.0
+
   dotenv-cli@10.0.0:
     dependencies:
       cross-spawn: 7.0.6
@@ -23935,8 +23876,6 @@ snapshots:
 
   earcut@3.2.3: {}
 
-  eastasianwidth@0.2.0: {}
-
   ecdsa-sig-formatter@1.0.11:
     dependencies:
       safe-buffer: 5.2.1
@@ -23964,11 +23903,11 @@ snapshots:
 
   electron-to-chromium@1.5.267: {}
 
-  embla-carousel-react@8.6.0(react@19.1.0):
+  embla-carousel-react@8.6.0(react@19.2.7):
     dependencies:
       embla-carousel: 8.6.0
       embla-carousel-reactive-utils: 8.6.0(embla-carousel@8.6.0)
-      react: 19.1.0
+      react: 19.2.7
 
   embla-carousel-reactive-utils@8.6.0(embla-carousel@8.6.0):
     dependencies:
@@ -23982,8 +23921,6 @@ snapshots:
 
   emoji-regex@8.0.0: {}
 
-  emoji-regex@9.2.2: {}
-
   empathic@2.0.1: {}
 
   encodeurl@1.0.2: {}
@@ -24000,7 +23937,7 @@ snapshots:
   engine.io@6.6.9:
     dependencies:
       '@types/cors': 2.8.19
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
       '@types/ws': 8.18.1
       accepts: 1.3.8
       base64id: 2.0.0
@@ -24032,6 +23969,8 @@ snapshots:
 
   env-editor@0.4.2: {}
 
+  env-paths@3.0.0: {}
+
   environment@1.1.0: {}
 
   error-causes@3.0.2: {}
@@ -24179,33 +24118,6 @@ snapshots:
 
   esbuild-wasm@0.25.12: {}
 
-  esbuild@0.23.0:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.23.0
-      '@esbuild/android-arm': 0.23.0
-      '@esbuild/android-arm64': 0.23.0
-      '@esbuild/android-x64': 0.23.0
-      '@esbuild/darwin-arm64': 0.23.0
-      '@esbuild/darwin-x64': 0.23.0
-      '@esbuild/freebsd-arm64': 0.23.0
-      '@esbuild/freebsd-x64': 0.23.0
-      '@esbuild/linux-arm': 0.23.0
-      '@esbuild/linux-arm64': 0.23.0
-      '@esbuild/linux-ia32': 0.23.0
-      '@esbuild/linux-loong64': 0.23.0
-      '@esbuild/linux-mips64el': 0.23.0
-      '@esbuild/linux-ppc64': 0.23.0
-      '@esbuild/linux-riscv64': 0.23.0
-      '@esbuild/linux-s390x': 0.23.0
-      '@esbuild/linux-x64': 0.23.0
-      '@esbuild/netbsd-x64': 0.23.0
-      '@esbuild/openbsd-arm64': 0.23.0
-      '@esbuild/openbsd-x64': 0.23.0
-      '@esbuild/sunos-x64': 0.23.0
-      '@esbuild/win32-arm64': 0.23.0
-      '@esbuild/win32-ia32': 0.23.0
-      '@esbuild/win32-x64': 0.23.0
-
   esbuild@0.25.12:
     optionalDependencies:
       '@esbuild/aix-ppc64': 0.25.12
@@ -24264,35 +24176,6 @@ snapshots:
       '@esbuild/win32-ia32': 0.27.2
       '@esbuild/win32-x64': 0.27.2
 
-  esbuild@0.27.7:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.27.7
-      '@esbuild/android-arm': 0.27.7
-      '@esbuild/android-arm64': 0.27.7
-      '@esbuild/android-x64': 0.27.7
-      '@esbuild/darwin-arm64': 0.27.7
-      '@esbuild/darwin-x64': 0.27.7
-      '@esbuild/freebsd-arm64': 0.27.7
-      '@esbuild/freebsd-x64': 0.27.7
-      '@esbuild/linux-arm': 0.27.7
-      '@esbuild/linux-arm64': 0.27.7
-      '@esbuild/linux-ia32': 0.27.7
-      '@esbuild/linux-loong64': 0.27.7
-      '@esbuild/linux-mips64el': 0.27.7
-      '@esbuild/linux-ppc64': 0.27.7
-      '@esbuild/linux-riscv64': 0.27.7
-      '@esbuild/linux-s390x': 0.27.7
-      '@esbuild/linux-x64': 0.27.7
-      '@esbuild/netbsd-arm64': 0.27.7
-      '@esbuild/netbsd-x64': 0.27.7
-      '@esbuild/openbsd-arm64': 0.27.7
-      '@esbuild/openbsd-x64': 0.27.7
-      '@esbuild/openharmony-arm64': 0.27.7
-      '@esbuild/sunos-x64': 0.27.7
-      '@esbuild/win32-arm64': 0.27.7
-      '@esbuild/win32-ia32': 0.27.7
-      '@esbuild/win32-x64': 0.27.7
-
   esbuild@0.28.1:
     optionalDependencies:
       '@esbuild/aix-ppc64': 0.28.1
@@ -24368,7 +24251,7 @@ snapshots:
     dependencies:
       eslint: 9.39.2(jiti@2.7.0)
 
-  eslint-config-universe@15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1)(typescript@5.9.3):
+  eslint-config-universe@15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.9.5)(typescript@5.9.3):
     dependencies:
       '@typescript-eslint/eslint-plugin': 8.50.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       '@typescript-eslint/parser': 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
@@ -24377,12 +24260,12 @@ snapshots:
       eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.2(jiti@2.7.0))
       eslint-plugin-n: 17.23.1(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       eslint-plugin-node: 11.1.0(eslint@9.39.2(jiti@2.7.0))
-      eslint-plugin-prettier: 5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.7.0)))(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1)
+      eslint-plugin-prettier: 5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.7.0)))(eslint@9.39.2(jiti@2.7.0))(prettier@3.9.5)
       eslint-plugin-react: 7.37.5(eslint@9.39.2(jiti@2.7.0))
       eslint-plugin-react-hooks: 5.2.0(eslint@9.39.2(jiti@2.7.0))
       globals: 16.5.0
     optionalDependencies:
-      prettier: 3.8.1
+      prettier: 3.9.5
     transitivePeerDependencies:
       - '@types/eslint'
       - eslint-import-resolver-typescript
@@ -24500,10 +24383,10 @@ snapshots:
       resolve: 1.22.11
       semver: 6.3.1
 
-  eslint-plugin-prettier@5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.7.0)))(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1):
+  eslint-plugin-prettier@5.5.4(eslint-config-prettier@9.1.2(eslint@9.39.2(jiti@2.7.0)))(eslint@9.39.2(jiti@2.7.0))(prettier@3.9.5):
     dependencies:
       eslint: 9.39.2(jiti@2.7.0)
-      prettier: 3.8.1
+      prettier: 3.9.5
       prettier-linter-helpers: 1.0.0
       synckit: 0.11.11
     optionalDependencies:
@@ -24564,7 +24447,7 @@ snapshots:
       '@humanwhocodes/module-importer': 1.0.1
       '@humanwhocodes/retry': 0.4.3
       '@types/estree': 1.0.8
-      ajv: 6.12.6
+      ajv: 6.14.0
       chalk: 4.1.2
       cross-spawn: 7.0.6
       debug: 4.4.3
@@ -24777,7 +24660,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.8.1)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.6)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
@@ -24790,7 +24673,7 @@ snapshots:
       babel-plugin-dynamic-import-node: 2.3.3
       babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
-      eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.8.1)(typescript@5.9.3)
+      eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.9.5)(typescript@5.9.3)
       glob: 13.0.0
       jest-expo: 54.0.17(@babel/core@7.29.6)(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       jest-snapshot-prettier: prettier@2.8.8
@@ -24835,12 +24718,12 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  expo-router@6.0.23(70ed454dc246c77d537ead71b0fe3992):
+  expo-router@6.0.23(c4aa449b816283cc936b8db4e0abcefc):
     dependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/schema-utils': 0.1.8
       '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
       '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -24866,23 +24749,24 @@ snapshots:
       sf-symbols-typescript: 2.2.0
       shallowequal: 1.1.0
       use-latest-callback: 0.2.6(react@19.1.0)
-      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
     optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
-      react-dom: 19.1.1(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      react-dom: 19.1.0(react@19.1.0)
       react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
       - '@types/react'
       - '@types/react-dom'
       - supports-color
+    optional: true
 
-  expo-router@6.0.23(c4aa449b816283cc936b8db4e0abcefc):
+  expo-router@6.0.23(dfbe19aec38065222a79f30aa387d0a8):
     dependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/schema-utils': 0.1.8
       '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
       '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -24908,17 +24792,16 @@ snapshots:
       sf-symbols-typescript: 2.2.0
       shallowequal: 1.1.0
       use-latest-callback: 0.2.6(react@19.1.0)
-      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
     optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
-      react-dom: 19.1.0(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@26.1.1))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
       - '@types/react'
       - '@types/react-dom'
       - supports-color
-    optional: true
 
   expo-server@1.0.5: {}
 
@@ -25043,6 +24926,10 @@ snapshots:
     optionalDependencies:
       picomatch: 4.0.4
 
+  fdir@6.5.0(picomatch@4.0.5):
+    optionalDependencies:
+      picomatch: 4.0.5
+
   fetch-retry@6.0.0: {}
 
   fetchdts@0.1.7: {}
@@ -25112,11 +24999,6 @@ snapshots:
     dependencies:
       is-callable: 1.2.7
 
-  foreground-child@3.3.1:
-    dependencies:
-      cross-spawn: 7.0.6
-      signal-exit: 4.1.0
-
   form-data@4.0.6:
     dependencies:
       asynckit: 0.4.0
@@ -25325,20 +25207,18 @@ snapshots:
     dependencies:
       is-glob: 4.0.3
 
-  glob@10.3.4:
-    dependencies:
-      foreground-child: 3.3.1
-      jackspeak: 2.3.6
-      minimatch: 9.0.7
-      minipass: 7.1.2
-      path-scurry: 1.11.1
-
   glob@13.0.0:
     dependencies:
       minimatch: 10.2.3
       minipass: 7.1.2
       path-scurry: 2.0.1
 
+  glob@13.0.6:
+    dependencies:
+      minimatch: 10.2.3
+      minipass: 7.1.3
+      path-scurry: 2.0.2
+
   glob@7.2.3:
     dependencies:
       fs.realpath: 1.0.0
@@ -25352,6 +25232,8 @@ snapshots:
     dependencies:
       ini: 1.3.8
 
+  globals@11.12.0: {}
+
   globals@14.0.0: {}
 
   globals@15.15.0: {}
@@ -25576,6 +25458,8 @@ snapshots:
 
   html-void-elements@3.0.0: {}
 
+  html5parser@3.0.0: {}
+
   htmlparser2@10.1.0:
     dependencies:
       domelementtype: 2.3.0
@@ -25730,10 +25614,10 @@ snapshots:
 
   inline-style-parser@0.2.7: {}
 
-  input-otp@1.4.2(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  input-otp@1.4.2(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
 
   internal-slot@1.1.0:
     dependencies:
@@ -25815,6 +25699,10 @@ snapshots:
     dependencies:
       hasown: 2.0.2
 
+  is-core-module@2.16.2:
+    dependencies:
+      hasown: 2.0.4
+
   is-data-view@1.0.2:
     dependencies:
       call-bound: 1.0.4
@@ -25860,8 +25748,6 @@ snapshots:
 
   is-in-ci@2.0.0: {}
 
-  is-interactive@1.0.0: {}
-
   is-map@2.0.3: {}
 
   is-negative-zero@2.0.3: {}
@@ -25913,7 +25799,7 @@ snapshots:
     dependencies:
       which-typed-array: 1.1.19
 
-  is-unicode-supported@0.1.0: {}
+  is-unicode-supported@2.1.0: {}
 
   is-unsafe@2.0.0: {}
 
@@ -25960,9 +25846,9 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.6
       '@babel/parser': 7.29.7
-      '@istanbuljs/schema': 0.1.3
+      '@istanbuljs/schema': 0.1.6
       istanbul-lib-coverage: 3.2.2
-      semver: 7.7.4
+      semver: 7.8.5
     transitivePeerDependencies:
       - supports-color
 
@@ -26001,12 +25887,6 @@ snapshots:
     transitivePeerDependencies:
       - '@types/react'
 
-  jackspeak@2.3.6:
-    dependencies:
-      '@isaacs/cliui': 8.0.2
-    optionalDependencies:
-      '@pkgjs/parseargs': 0.11.0
-
   jest-changed-files@29.7.0:
     dependencies:
       execa: 5.1.1
@@ -26022,7 +25902,7 @@ snapshots:
       '@types/node': 24.10.4
       chalk: 4.1.2
       co: 4.6.0
-      dedent: 1.7.1
+      dedent: 1.7.2
       is-generator-fn: 2.1.0
       jest-each: 29.7.0
       jest-matcher-utils: 29.7.0
@@ -26051,7 +25931,7 @@ snapshots:
       jest-config: 29.7.0(@types/node@20.19.43)
       jest-util: 29.7.0
       jest-validate: 29.7.0
-      yargs: 17.7.2
+      yargs: 17.7.3
     transitivePeerDependencies:
       - '@types/node'
       - babel-plugin-macros
@@ -26071,14 +25951,65 @@ snapshots:
       jest-config: 29.7.0(@types/node@24.10.4)
       jest-util: 29.7.0
       jest-validate: 29.7.0
-      yargs: 17.7.2
+      yargs: 17.7.3
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
+
+  jest-cli@29.7.0(@types/node@26.1.1):
+    dependencies:
+      '@jest/core': 29.7.0
+      '@jest/test-result': 29.7.0
+      '@jest/types': 29.6.3
+      chalk: 4.1.2
+      create-jest: 29.7.0(@types/node@26.1.1)
+      exit: 0.1.2
+      import-local: 3.2.0
+      jest-config: 29.7.0(@types/node@26.1.1)
+      jest-util: 29.7.0
+      jest-validate: 29.7.0
+      yargs: 17.7.3
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
+    optional: true
+
+  jest-config@29.7.0(@types/node@20.19.43):
+    dependencies:
+      '@babel/core': 7.29.6
+      '@jest/test-sequencer': 29.7.0
+      '@jest/types': 29.6.3
+      babel-jest: 29.7.0(@babel/core@7.29.6)
+      chalk: 4.1.2
+      ci-info: 3.9.0
+      deepmerge: 4.3.1
+      glob: 7.2.3
+      graceful-fs: 4.2.11
+      jest-circus: 29.7.0
+      jest-environment-node: 29.7.0
+      jest-get-type: 29.6.3
+      jest-regex-util: 29.6.3
+      jest-resolve: 29.7.0
+      jest-runner: 29.7.0
+      jest-util: 29.7.0
+      jest-validate: 29.7.0
+      micromatch: 4.0.8
+      parse-json: 5.2.0
+      pretty-format: 29.7.0
+      slash: 3.0.0
+      strip-json-comments: 3.1.1
+    optionalDependencies:
+      '@types/node': 20.19.43
     transitivePeerDependencies:
-      - '@types/node'
       - babel-plugin-macros
       - supports-color
-      - ts-node
+    optional: true
 
-  jest-config@29.7.0(@types/node@20.19.43):
+  jest-config@29.7.0(@types/node@24.10.4):
     dependencies:
       '@babel/core': 7.29.6
       '@jest/test-sequencer': 29.7.0
@@ -26103,13 +26034,12 @@ snapshots:
       slash: 3.0.0
       strip-json-comments: 3.1.1
     optionalDependencies:
-      '@types/node': 20.19.43
+      '@types/node': 24.10.4
     transitivePeerDependencies:
       - babel-plugin-macros
       - supports-color
-    optional: true
 
-  jest-config@29.7.0(@types/node@24.10.4):
+  jest-config@29.7.0(@types/node@26.1.1):
     dependencies:
       '@babel/core': 7.29.6
       '@jest/test-sequencer': 29.7.0
@@ -26134,10 +26064,11 @@ snapshots:
       slash: 3.0.0
       strip-json-comments: 3.1.1
     optionalDependencies:
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
     transitivePeerDependencies:
       - babel-plugin-macros
       - supports-color
+    optional: true
 
   jest-diff@29.7.0:
     dependencies:
@@ -26292,7 +26223,7 @@ snapshots:
       jest-pnp-resolver: 1.2.3(jest-resolve@29.7.0)
       jest-util: 29.7.0
       jest-validate: 29.7.0
-      resolve: 1.22.11
+      resolve: 1.22.12
       resolve.exports: 2.0.3
       slash: 3.0.0
 
@@ -26452,8 +26383,23 @@ snapshots:
       - supports-color
       - ts-node
 
+  jest@29.7.0(@types/node@26.1.1):
+    dependencies:
+      '@jest/core': 29.7.0
+      '@jest/types': 29.6.3
+      import-local: 3.2.0
+      jest-cli: 29.7.0(@types/node@26.1.1)
+    transitivePeerDependencies:
+      - '@types/node'
+      - babel-plugin-macros
+      - supports-color
+      - ts-node
+    optional: true
+
   jimp-compact@0.16.1: {}
 
+  jiti@2.4.2: {}
+
   jiti@2.6.1: {}
 
   jiti@2.7.0: {}
@@ -26553,6 +26499,8 @@ snapshots:
 
   json-schema-traverse@1.0.0: {}
 
+  json-schema-typed@8.0.2: {}
+
   json-schema@0.4.0: {}
 
   json-stable-stringify-without-jsonify@1.0.1: {}
@@ -26771,10 +26719,10 @@ snapshots:
     dependencies:
       chalk: 2.4.2
 
-  log-symbols@4.1.0:
+  log-symbols@7.0.1:
     dependencies:
-      chalk: 4.1.2
-      is-unicode-supported: 0.1.0
+      is-unicode-supported: 2.1.0
+      yoctocolors: 2.1.2
 
   long@5.3.2: {}
 
@@ -26790,6 +26738,8 @@ snapshots:
 
   lru-cache@11.2.4: {}
 
+  lru-cache@11.5.2: {}
+
   lru-cache@5.1.1:
     dependencies:
       yallist: 3.1.1
@@ -26804,6 +26754,10 @@ snapshots:
     dependencies:
       react: 19.1.0
 
+  lucide-react@0.555.0(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+
   lucide-static@0.555.0: {}
 
   lz-string@1.5.0: {}
@@ -26829,7 +26783,7 @@ snapshots:
 
   make-dir@4.0.0:
     dependencies:
-      semver: 7.7.4
+      semver: 7.8.5
 
   make-error@1.3.6: {}
 
@@ -26841,21 +26795,16 @@ snapshots:
 
   markdown-table@3.0.4: {}
 
+  marked@15.0.12: {}
+
   marked@16.4.2: {}
 
   marked@17.0.6: {}
 
-  marked@7.0.4: {}
-
   marky@1.3.0: {}
 
   math-intrinsics@1.1.0: {}
 
-  md-to-react-email@5.0.5(react@19.1.0):
-    dependencies:
-      marked: 7.0.4
-      react: 19.1.0
-
   mdast-util-find-and-replace@3.0.2:
     dependencies:
       '@types/mdast': 4.0.4
@@ -27021,6 +26970,8 @@ snapshots:
 
   mdn-data@2.0.14: {}
 
+  mdn-data@2.27.1: {}
+
   memoize-one@5.2.1: {}
 
   merge-options@3.0.4:
@@ -27135,7 +27086,7 @@ snapshots:
   metro-source-map@0.83.3:
     dependencies:
       '@babel/traverse': 7.29.0
-      '@babel/traverse--for-generate-function-map': '@babel/traverse@7.29.0'
+      '@babel/traverse--for-generate-function-map': '@babel/traverse@7.29.7'
       '@babel/types': 7.29.7
       flow-enums-runtime: 0.0.6
       invariant: 2.2.4
@@ -27513,6 +27464,10 @@ snapshots:
     dependencies:
       mime-db: 1.52.0
 
+  mime-types@3.0.2:
+    dependencies:
+      mime-db: 1.54.0
+
   mime@1.6.0: {}
 
   mime@4.1.0: {}
@@ -27521,6 +27476,8 @@ snapshots:
 
   mimic-fn@2.1.0: {}
 
+  mimic-function@5.0.1: {}
+
   min-indent@1.0.1: {}
 
   minimatch@10.2.3:
@@ -27539,6 +27496,8 @@ snapshots:
 
   minipass@7.1.2: {}
 
+  minipass@7.1.3: {}
+
   minizlib@3.1.0:
     dependencies:
       minipass: 7.1.2
@@ -27642,36 +27601,10 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
-  next-themes@0.4.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-
-  next@15.1.2(@babel/core@7.29.6)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  next-themes@0.4.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@next/env': 15.1.2
-      '@swc/counter': 0.1.3
-      '@swc/helpers': 0.5.15
-      busboy: 1.6.0
-      caniuse-lite: 1.0.30001761
-      postcss: 8.5.10
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      styled-jsx: 5.1.6(@babel/core@7.29.6)(react@19.1.0)
-    optionalDependencies:
-      '@next/swc-darwin-arm64': 15.1.2
-      '@next/swc-darwin-x64': 15.1.2
-      '@next/swc-linux-arm64-gnu': 15.1.2
-      '@next/swc-linux-arm64-musl': 15.1.2
-      '@next/swc-linux-x64-gnu': 15.1.2
-      '@next/swc-linux-x64-musl': 15.1.2
-      '@next/swc-win32-arm64-msvc': 15.1.2
-      '@next/swc-win32-x64-msvc': 15.1.2
-      babel-plugin-react-compiler: 1.0.0
-      sharp: 0.33.5
-    transitivePeerDependencies:
-      - '@babel/core'
-      - babel-plugin-macros
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
 
   nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
@@ -27738,6 +27671,12 @@ snapshots:
       pkg-types: 2.3.0
       tinyexec: 1.0.2
 
+  nypm@0.6.6:
+    dependencies:
+      citty: 0.2.2
+      pathe: 2.0.3
+      tinyexec: 1.2.4
+
   ob1@0.83.3:
     dependencies:
       flow-enums-runtime: 0.0.6
@@ -27788,6 +27727,8 @@ snapshots:
 
   obug@2.1.1: {}
 
+  obug@2.1.3: {}
+
   ofetch@1.5.1:
     dependencies:
       destr: 2.0.5
@@ -27857,25 +27798,63 @@ snapshots:
       strip-ansi: 5.2.0
       wcwidth: 1.0.1
 
-  ora@5.4.1:
-    dependencies:
-      bl: 4.1.0
-      chalk: 4.1.2
-      cli-cursor: 3.1.0
-      cli-spinners: 2.9.2
-      is-interactive: 1.0.0
-      is-unicode-supported: 0.1.0
-      log-symbols: 4.1.0
-      strip-ansi: 6.0.1
-      wcwidth: 1.0.1
-
   own-keys@1.0.1:
     dependencies:
       get-intrinsic: 1.3.0
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    dependencies:
+      tinypool: 2.1.0
+    optionalDependencies:
+      '@oxfmt/binding-android-arm-eabi': 0.52.0
+      '@oxfmt/binding-android-arm64': 0.52.0
+      '@oxfmt/binding-darwin-arm64': 0.52.0
+      '@oxfmt/binding-darwin-x64': 0.52.0
+      '@oxfmt/binding-freebsd-x64': 0.52.0
+      '@oxfmt/binding-linux-arm-gnueabihf': 0.52.0
+      '@oxfmt/binding-linux-arm-musleabihf': 0.52.0
+      '@oxfmt/binding-linux-arm64-gnu': 0.52.0
+      '@oxfmt/binding-linux-arm64-musl': 0.52.0
+      '@oxfmt/binding-linux-ppc64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-gnu': 0.52.0
+      '@oxfmt/binding-linux-riscv64-musl': 0.52.0
+      '@oxfmt/binding-linux-s390x-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-gnu': 0.52.0
+      '@oxfmt/binding-linux-x64-musl': 0.52.0
+      '@oxfmt/binding-openharmony-arm64': 0.52.0
+      '@oxfmt/binding-win32-arm64-msvc': 0.52.0
+      '@oxfmt/binding-win32-ia32-msvc': 0.52.0
+      '@oxfmt/binding-win32-x64-msvc': 0.52.0
+      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27898,9 +27877,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27923,9 +27902,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27948,9 +27927,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27973,9 +27952,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27998,9 +27977,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28023,9 +28002,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28048,9 +28027,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28073,9 +28052,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28098,9 +28077,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28123,7 +28102,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   oxlint-tsgolint@0.23.0:
     optionalDependencies:
@@ -28134,7 +28113,55 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+    optionalDependencies:
+      '@oxlint/binding-android-arm-eabi': 1.67.0
+      '@oxlint/binding-android-arm64': 1.67.0
+      '@oxlint/binding-darwin-arm64': 1.67.0
+      '@oxlint/binding-darwin-x64': 1.67.0
+      '@oxlint/binding-freebsd-x64': 1.67.0
+      '@oxlint/binding-linux-arm-gnueabihf': 1.67.0
+      '@oxlint/binding-linux-arm-musleabihf': 1.67.0
+      '@oxlint/binding-linux-arm64-gnu': 1.67.0
+      '@oxlint/binding-linux-arm64-musl': 1.67.0
+      '@oxlint/binding-linux-ppc64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-gnu': 1.67.0
+      '@oxlint/binding-linux-riscv64-musl': 1.67.0
+      '@oxlint/binding-linux-s390x-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-gnu': 1.67.0
+      '@oxlint/binding-linux-x64-musl': 1.67.0
+      '@oxlint/binding-openharmony-arm64': 1.67.0
+      '@oxlint/binding-win32-arm64-msvc': 1.67.0
+      '@oxlint/binding-win32-ia32-msvc': 1.67.0
+      '@oxlint/binding-win32-x64-msvc': 1.67.0
+      oxlint-tsgolint: 0.23.0
+      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28156,9 +28183,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28180,9 +28207,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28204,9 +28231,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28228,9 +28255,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28252,9 +28279,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28276,9 +28303,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28300,9 +28327,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28324,9 +28351,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28348,9 +28375,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28372,7 +28399,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   p-limit@2.3.0:
     dependencies:
@@ -28463,16 +28490,16 @@ snapshots:
 
   path-parse@1.0.7: {}
 
-  path-scurry@1.11.1:
-    dependencies:
-      lru-cache: 10.4.3
-      minipass: 7.1.2
-
   path-scurry@2.0.1:
     dependencies:
       lru-cache: 11.2.4
       minipass: 7.1.2
 
+  path-scurry@2.0.2:
+    dependencies:
+      lru-cache: 11.5.2
+      minipass: 7.1.3
+
   path-to-regexp@8.4.2: {}
 
   pathe@2.0.3: {}
@@ -28544,6 +28571,10 @@ snapshots:
 
   picomatch@4.0.4: {}
 
+  picomatch@4.0.5: {}
+
+  picospinner@3.0.0: {}
+
   pify@4.0.1: {}
 
   pino-abstract-transport@1.2.0:
@@ -28705,10 +28736,10 @@ snapshots:
 
   prettier@2.8.8: {}
 
-  prettier@3.4.2: {}
-
   prettier@3.8.1: {}
 
+  prettier@3.9.5: {}
+
   pretty-bytes@5.6.0: {}
 
   pretty-format@27.5.1:
@@ -28729,7 +28760,7 @@ snapshots:
       ansi-styles: 5.2.0
       react-is: 18.3.1
 
-  prismjs@1.29.0: {}
+  prismjs@1.30.0: {}
 
   proc-log@4.2.0: {}
 
@@ -28809,65 +28840,65 @@ snapshots:
 
   quick-format-unescaped@4.0.4: {}
 
-  radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-accessible-icon': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-alert-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-aspect-ratio': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-avatar': 1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-checkbox': 1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context-menu': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-dropdown-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-form': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-hover-card': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-menubar': 1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-one-time-password-field': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-password-toggle-field': 0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-progress': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-radio-group': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-select': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slider': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-switch': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toast': 1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-toolbar': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-tooltip': 1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-escape-keydown': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      '@radix-ui/react-accessible-icon': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-alert-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-aspect-ratio': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-avatar': 1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-checkbox': 1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context-menu': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dropdown-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-form': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-hover-card': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-menubar': 1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-one-time-password-field': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-password-toggle-field': 0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-progress': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-radio-group': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-select': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slider': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-switch': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toast': 1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toolbar': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-tooltip': 1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-escape-keydown': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -28886,10 +28917,10 @@ snapshots:
       minimist: 1.2.8
       strip-json-comments: 2.0.1
 
-  react-day-picker@8.10.1(date-fns@4.4.0)(react@19.1.0):
+  react-day-picker@8.10.1(date-fns@4.4.0)(react@19.2.7):
     dependencies:
       date-fns: 4.4.0
-      react: 19.1.0
+      react: 19.2.7
 
   react-devtools-core@6.1.5:
     dependencies:
@@ -28913,7 +28944,6 @@ snapshots:
     dependencies:
       react: 19.2.7
       scheduler: 0.26.0
-    optional: true
 
   react-easy-crop@6.2.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
@@ -28921,31 +28951,34 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
-  react-email@3.0.7(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  react-email@6.7.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@babel/core': 7.29.6
-      '@babel/parser': 7.24.5
-      chalk: 4.1.2
+      '@babel/parser': 7.27.0
+      '@babel/traverse': 7.27.0
+      '@react-email/render': 2.1.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       chokidar: 4.0.3
-      commander: 11.1.0
-      debounce: 2.0.0
-      esbuild: 0.23.0
-      glob: 10.3.4
-      log-symbols: 4.1.0
-      mime-types: 2.1.35
-      next: 15.1.2(@babel/core@7.29.6)(babel-plugin-react-compiler@1.0.0)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      commander: 13.1.0
+      conf: 15.1.0
+      css-tree: 3.2.1
+      debounce: 2.2.0
+      esbuild: 0.28.1
+      glob: 13.0.6
+      jiti: 2.4.2
+      log-symbols: 7.0.1
+      marked: 15.0.12
+      mime-types: 3.0.2
       normalize-path: 3.0.0
-      ora: 5.4.1
-      socket.io: 4.8.1
+      nypm: 0.6.6
+      picospinner: 3.0.0
+      prismjs: 1.30.0
+      prompts: 2.4.2
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      socket.io: 4.8.3
+      tailwindcss: 4.3.2
+      tsconfig-paths: 4.2.0
     transitivePeerDependencies:
-      - '@opentelemetry/api'
-      - '@playwright/test'
-      - babel-plugin-macros
-      - babel-plugin-react-compiler
       - bufferutil
-      - react
-      - react-dom
-      - sass
       - supports-color
       - utf-8-validate
 
@@ -28959,6 +28992,10 @@ snapshots:
     dependencies:
       react: 19.1.0
 
+  react-hook-form@7.81.0(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+
   react-is@16.13.1: {}
 
   react-is@17.0.2: {}
@@ -29111,6 +29148,14 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  react-remove-scroll-bar@2.3.8(@types/react@19.1.17)(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-style-singleton: 2.2.3(@types/react@19.1.17)(react@19.2.7)
+      tslib: 2.8.1
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   react-remove-scroll@2.7.2(@types/react@19.1.17)(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -29122,10 +29167,21 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  react-resizable-panels@3.0.6(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  react-remove-scroll@2.7.2(@types/react@19.1.17)(react@19.2.7):
     dependencies:
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react: 19.2.7
+      react-remove-scroll-bar: 2.3.8(@types/react@19.1.17)(react@19.2.7)
+      react-style-singleton: 2.2.3(@types/react@19.1.17)(react@19.2.7)
+      tslib: 2.8.1
+      use-callback-ref: 1.3.3(@types/react@19.1.17)(react@19.2.7)
+      use-sidecar: 1.1.3(@types/react@19.1.17)(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  react-resizable-panels@3.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
 
   react-smooth@4.0.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
@@ -29135,13 +29191,13 @@ snapshots:
       react-dom: 19.1.0(react@19.1.0)
       react-transition-group: 4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
 
-  react-smooth@4.0.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  react-smooth@4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       fast-equals: 5.4.1
       prop-types: 15.8.1
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      react-transition-group: 4.4.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      react-transition-group: 4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
 
   react-style-singleton@2.2.3(@types/react@19.1.17)(react@19.1.0):
     dependencies:
@@ -29151,6 +29207,14 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  react-style-singleton@2.2.3(@types/react@19.1.17)(react@19.2.7):
+    dependencies:
+      get-nonce: 1.0.1
+      react: 19.2.7
+      tslib: 2.8.1
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   react-test-renderer@19.1.0(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -29166,14 +29230,14 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
-  react-transition-group@4.4.5(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  react-transition-group@4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       '@babel/runtime': 7.29.7
       dom-helpers: 5.2.1
       loose-envify: 1.4.0
       prop-types: 15.8.1
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
 
   react-use-measure@2.1.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
@@ -29190,15 +29254,9 @@ snapshots:
       core-util-is: 1.0.3
       inherits: 2.0.4
       isarray: 1.0.0
-      process-nextick-args: 2.0.1
-      safe-buffer: 5.1.2
-      string_decoder: 1.1.1
-      util-deprecate: 1.0.2
-
-  readable-stream@3.6.2:
-    dependencies:
-      inherits: 2.0.4
-      string_decoder: 1.3.0
+      process-nextick-args: 2.0.1
+      safe-buffer: 5.1.2
+      string_decoder: 1.1.1
       util-deprecate: 1.0.2
 
   readable-stream@4.7.0:
@@ -29244,15 +29302,15 @@ snapshots:
       tiny-invariant: 1.3.3
       victory-vendor: 36.9.2
 
-  recharts@2.15.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  recharts@2.15.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       clsx: 2.1.1
       eventemitter3: 4.0.7
       lodash: 4.18.0
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
       react-is: 18.3.1
-      react-smooth: 4.0.4(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      react-smooth: 4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       recharts-scale: 0.4.5
       tiny-invariant: 1.3.3
       victory-vendor: 36.9.2
@@ -29478,6 +29536,13 @@ snapshots:
       path-parse: 1.0.7
       supports-preserve-symlinks-flag: 1.0.0
 
+  resolve@1.22.12:
+    dependencies:
+      es-errors: 1.3.0
+      is-core-module: 2.16.2
+      path-parse: 1.0.7
+      supports-preserve-symlinks-flag: 1.0.0
+
   resolve@1.7.1:
     dependencies:
       path-parse: 1.0.7
@@ -29493,11 +29558,6 @@ snapshots:
       onetime: 2.0.1
       signal-exit: 3.0.7
 
-  restore-cursor@3.1.0:
-    dependencies:
-      onetime: 5.1.2
-      signal-exit: 3.0.7
-
   restore-cursor@4.0.0:
     dependencies:
       onetime: 5.1.2
@@ -29703,6 +29763,8 @@ snapshots:
 
   semver@7.7.4: {}
 
+  semver@7.8.5: {}
+
   send@0.19.2:
     dependencies:
       debug: 2.6.9
@@ -29774,33 +29836,6 @@ snapshots:
 
   shallowequal@1.1.0: {}
 
-  sharp@0.33.5:
-    dependencies:
-      color: 4.2.3
-      detect-libc: 2.1.2
-      semver: 7.7.4
-    optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.33.5
-      '@img/sharp-darwin-x64': 0.33.5
-      '@img/sharp-libvips-darwin-arm64': 1.0.4
-      '@img/sharp-libvips-darwin-x64': 1.0.4
-      '@img/sharp-libvips-linux-arm': 1.0.5
-      '@img/sharp-libvips-linux-arm64': 1.0.4
-      '@img/sharp-libvips-linux-s390x': 1.0.4
-      '@img/sharp-libvips-linux-x64': 1.0.4
-      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
-      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
-      '@img/sharp-linux-arm': 0.33.5
-      '@img/sharp-linux-arm64': 0.33.5
-      '@img/sharp-linux-s390x': 0.33.5
-      '@img/sharp-linux-x64': 0.33.5
-      '@img/sharp-linuxmusl-arm64': 0.33.5
-      '@img/sharp-linuxmusl-x64': 0.33.5
-      '@img/sharp-wasm32': 0.33.5
-      '@img/sharp-win32-ia32': 0.33.5
-      '@img/sharp-win32-x64': 0.33.5
-    optional: true
-
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
@@ -29865,8 +29900,6 @@ snapshots:
 
   signal-exit@3.0.7: {}
 
-  signal-exit@4.1.0: {}
-
   simple-git-hooks@2.13.1: {}
 
   simple-plist@1.3.1:
@@ -29918,12 +29951,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  socket.io@4.8.1:
+  socket.io@4.8.3:
     dependencies:
       accepts: 1.3.8
       base64id: 2.0.0
       cors: 2.8.6
-      debug: 4.3.7
+      debug: 4.4.3
       engine.io: 6.6.9
       socket.io-adapter: 2.5.8
       socket.io-parser: 4.2.6
@@ -29946,6 +29979,11 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
 
+  sonner@2.0.7(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.13:
@@ -30024,7 +30062,7 @@ snapshots:
 
   std-env@3.10.0: {}
 
-  std-env@4.1.0: {}
+  std-env@4.2.0: {}
 
   stop-iteration-iterator@1.1.0:
     dependencies:
@@ -30056,8 +30094,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  streamsearch@1.1.0: {}
-
   strict-uri-encode@2.0.0: {}
 
   string-length@4.0.2:
@@ -30076,12 +30112,6 @@ snapshots:
       is-fullwidth-code-point: 3.0.0
       strip-ansi: 6.0.1
 
-  string-width@5.1.2:
-    dependencies:
-      eastasianwidth: 0.2.0
-      emoji-regex: 9.2.2
-      strip-ansi: 7.1.2
-
   string-width@7.2.0:
     dependencies:
       emoji-regex: 10.6.0
@@ -30192,6 +30222,12 @@ snapshots:
 
   structured-headers@0.4.1: {}
 
+  stubborn-fs@2.0.0:
+    dependencies:
+      stubborn-utils: 1.0.2
+
+  stubborn-utils@1.0.2: {}
+
   style-to-js@1.1.21:
     dependencies:
       style-to-object: 1.0.14
@@ -30200,13 +30236,6 @@ snapshots:
     dependencies:
       inline-style-parser: 0.2.7
 
-  styled-jsx@5.1.6(@babel/core@7.29.6)(react@19.1.0):
-    dependencies:
-      client-only: 0.0.1
-      react: 19.1.0
-    optionalDependencies:
-      '@babel/core': 7.29.6
-
   stylis@4.4.0: {}
 
   sucrase@3.35.1:
@@ -30350,11 +30379,18 @@ snapshots:
 
   tinyexec@1.0.2: {}
 
+  tinyexec@1.2.4: {}
+
   tinyglobby@0.2.15:
     dependencies:
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
 
+  tinyglobby@0.2.17:
+    dependencies:
+      fdir: 6.5.0(picomatch@4.0.5)
+      picomatch: 4.0.5
+
   tinypool@1.1.1: {}
 
   tinypool@2.1.0: {}
@@ -30479,6 +30515,12 @@ snapshots:
       minimist: 1.2.8
       strip-bom: 3.0.0
 
+  tsconfig-paths@4.2.0:
+    dependencies:
+      json5: 2.2.3
+      minimist: 1.2.8
+      strip-bom: 3.0.0
+
   tsdown@0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3):
     dependencies:
       ansis: 4.2.0
@@ -30512,12 +30554,12 @@ snapshots:
 
   tsup@8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
     dependencies:
-      bundle-require: 5.1.0(esbuild@0.27.7)
+      bundle-require: 5.1.0(esbuild@0.28.1)
       cac: 6.7.14
       chokidar: 4.0.3
       consola: 3.4.2
       debug: 4.4.3
-      esbuild: 0.27.7
+      esbuild: 0.28.1
       fix-dts-default-cjs-exports: 1.0.1
       joycon: 3.1.1
       picocolors: 1.1.1
@@ -30540,12 +30582,12 @@ snapshots:
 
   tsup@8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.8.3)(yaml@2.8.3):
     dependencies:
-      bundle-require: 5.1.0(esbuild@0.27.7)
+      bundle-require: 5.1.0(esbuild@0.28.1)
       cac: 6.7.14
       chokidar: 4.0.3
       consola: 3.4.2
       debug: 4.4.3
-      esbuild: 0.27.7
+      esbuild: 0.28.1
       fix-dts-default-cjs-exports: 1.0.1
       joycon: 3.1.1
       picocolors: 1.1.1
@@ -30743,6 +30785,8 @@ snapshots:
 
   undici-types@7.16.0: {}
 
+  undici-types@8.3.0: {}
+
   undici@6.27.0: {}
 
   undici@7.28.0: {}
@@ -30881,9 +30925,16 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  use-debounce@10.1.1(react@19.1.0):
+  use-callback-ref@1.3.3(@types/react@19.1.17)(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
+      tslib: 2.8.1
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  use-debounce@10.1.1(react@19.2.7):
+    dependencies:
+      react: 19.2.7
 
   use-latest-callback@0.2.6(react@19.1.0):
     dependencies:
@@ -30897,10 +30948,22 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  use-sidecar@1.1.3(@types/react@19.1.17)(react@19.2.7):
+    dependencies:
+      detect-node-es: 1.1.0
+      react: 19.2.7
+      tslib: 2.8.1
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   use-sync-external-store@1.6.0(react@19.1.0):
     dependencies:
       react: 19.1.0
 
+  use-sync-external-store@1.6.0(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+
   util-deprecate@1.0.2: {}
 
   utility-types@3.11.0: {}
@@ -30944,6 +31007,15 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
+  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+    dependencies:
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    transitivePeerDependencies:
+      - '@types/react'
+      - '@types/react-dom'
+
   vfile-location@5.0.3:
     dependencies:
       '@types/unist': 3.0.3
@@ -31039,24 +31111,145 @@ snapshots:
       - tsx
       - yaml
 
-  vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-node@3.2.4(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      cac: 6.7.14
+      debug: 4.4.3
+      es-module-lexer: 1.7.0
+      pathe: 2.0.3
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+    transitivePeerDependencies:
+      - '@types/node'
+      - jiti
+      - less
+      - lightningcss
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
+  vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
+  vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+    dependencies:
+      '@oxc-project/types': 0.133.0
+      '@oxlint/plugins': 1.61.0
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint-tsgolint: 0.23.0
+    optionalDependencies:
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@edge-runtime/vm'
+      - '@opentelemetry/api'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - '@vitest/coverage-istanbul'
+      - '@vitest/coverage-v8'
+      - '@vitest/ui'
+      - bufferutil
+      - esbuild
+      - happy-dom
+      - jiti
+      - jsdom
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - svelte
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - vite
+      - yaml
+
+  vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31089,24 +31282,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31139,24 +31332,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31189,24 +31382,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.23))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31239,24 +31432,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31289,24 +31482,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31339,24 +31532,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31389,24 +31582,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31439,24 +31632,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31489,24 +31682,24 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
-      '@voidzero-dev/vite-plus-core': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.23(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
-      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.23
-      '@voidzero-dev/vite-plus-darwin-x64': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.23
-      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.23
-      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.23
-      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.23
+      '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
+      '@voidzero-dev/vite-plus-darwin-x64': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 0.1.24
+      '@voidzero-dev/vite-plus-linux-x64-musl': 0.1.24
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.1.24
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 0.1.24
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@edge-runtime/vm'
@@ -31539,13 +31732,13 @@ snapshots:
       - vite
       - yaml
 
-  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-tsconfig-paths@5.1.4(typescript@5.6.3)(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.6.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -31572,13 +31765,13 @@ snapshots:
       - supports-color
       - typescript
 
-  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  vite-tsconfig-paths@5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@6.0.3)
     optionalDependencies:
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
       - typescript
@@ -31634,6 +31827,23 @@ snapshots:
       tsx: 4.21.0
       yaml: 2.8.3
 
+  vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      esbuild: 0.28.1
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
+      postcss: 8.5.10
+      rollup: 4.59.0
+      tinyglobby: 0.2.15
+    optionalDependencies:
+      '@types/node': 26.1.1
+      fsevents: 2.3.3
+      jiti: 2.7.0
+      lightningcss: 1.32.0
+      terser: 5.44.1
+      tsx: 4.21.0
+      yaml: 2.8.3
+
   vitefu@1.1.3(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     optionalDependencies:
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -31681,7 +31891,7 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
@@ -31709,7 +31919,7 @@ snapshots:
     optionalDependencies:
       '@types/debug': 4.1.12
       '@types/node': 24.10.4
-      jsdom: 20.0.3
+      jsdom: 26.1.0
     transitivePeerDependencies:
       - jiti
       - less
@@ -31724,11 +31934,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)(tsx@4.21.0):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(tsx@4.21.0))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -31747,7 +31957,7 @@ snapshots:
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@24.10.4)(tsx@4.21.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
@@ -31767,11 +31977,11 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@3.2.7(@types/debug@4.1.12)(@types/node@24.10.4)(jsdom@26.1.0)(tsx@4.21.0):
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       '@types/chai': 5.2.3
       '@vitest/expect': 3.2.7
-      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@24.10.4)(tsx@4.21.0))
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@vitest/pretty-format': 3.2.7
       '@vitest/runner': 3.2.7
       '@vitest/snapshot': 3.2.7
@@ -31789,12 +31999,55 @@ snapshots:
       tinyglobby: 0.2.15
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vite-node: 3.2.4(@types/node@24.10.4)(tsx@4.21.0)
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/debug': 4.1.12
-      '@types/node': 24.10.4
+      '@types/node': 26.1.1
+      jsdom: 20.0.3
+    transitivePeerDependencies:
+      - jiti
+      - less
+      - lightningcss
+      - msw
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - yaml
+
+  vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3):
+    dependencies:
+      '@types/chai': 5.2.3
+      '@vitest/expect': 3.2.7
+      '@vitest/mocker': 3.2.7(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@vitest/pretty-format': 3.2.7
+      '@vitest/runner': 3.2.7
+      '@vitest/snapshot': 3.2.7
+      '@vitest/spy': 3.2.7
+      '@vitest/utils': 3.2.7
+      chai: 5.3.3
+      debug: 4.4.3
+      expect-type: 1.3.0
+      magic-string: 0.30.21
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      std-env: 3.10.0
+      tinybench: 2.9.0
+      tinyexec: 0.3.2
+      tinyglobby: 0.2.15
+      tinypool: 1.1.1
+      tinyrainbow: 2.0.0
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vite-node: 3.2.4(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      why-is-node-running: 2.3.0
+    optionalDependencies:
+      '@types/debug': 4.1.12
+      '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
       - jiti
@@ -31887,6 +32140,8 @@ snapshots:
       tr46: 0.0.3
       webidl-conversions: 3.0.1
 
+  when-exit@2.1.5: {}
+
   which-boxed-primitive@1.1.1:
     dependencies:
       is-bigint: 1.1.0
@@ -31964,12 +32219,6 @@ snapshots:
       string-width: 4.2.3
       strip-ansi: 6.0.1
 
-  wrap-ansi@8.1.0:
-    dependencies:
-      ansi-styles: 6.2.3
-      string-width: 5.1.2
-      strip-ansi: 7.1.2
-
   wrap-ansi@9.0.2:
     dependencies:
       ansi-styles: 6.2.3
@@ -32049,12 +32298,24 @@ snapshots:
       y18n: 5.0.8
       yargs-parser: 21.1.1
 
+  yargs@17.7.3:
+    dependencies:
+      cliui: 8.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      require-directory: 2.1.1
+      string-width: 4.2.3
+      y18n: 5.0.8
+      yargs-parser: 21.1.1
+
   yjs@13.6.31:
     dependencies:
       lib0: 0.2.117
 
   yocto-queue@0.1.0: {}
 
+  yoctocolors@2.1.2: {}
+
   yoga-layout@3.2.1: {}
 
   zod-openapi@5.4.6(zod@4.3.6):
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 6404f07ef..be202030d 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -76,8 +76,8 @@ catalog:
   reflect-metadata: ^0.2.2
 
   # Test and runtime tooling
-  vitest: npm:@voidzero-dev/vite-plus-test@0.1.23
-  vite-plus: 0.1.23
+  vitest: npm:@voidzero-dev/vite-plus-test@0.1.24
+  vite-plus: 0.1.24
   playwright-core: 1.61.1
   nodemailer: 9.0.3
   "@types/nodemailer": 8.0.1
@@ -96,9 +96,12 @@ overrides:
   "@tanstack/react-start@>=1.0.0 <1.167.30": 1.167.30
   "@tootallnate/once@<2.0.1": 2.0.1
   "@xmldom/xmldom@<0.8.13": 0.8.13
+  "@srsholmes/vitest-react-native>esbuild": 0.28.1
+  "ajv@<7": 6.14.0
   "ajv@>=7.0.0-alpha.0 <8.18.0": 8.18.0
   "brace-expansion@<1.1.13": 1.1.13
   "brace-expansion@>=2.0.0 <2.0.3": 2.0.3
+  "bundle-require>esbuild": 0.28.1
   "defu@<=6.1.4": 6.1.7
   "drizzle-orm@<0.45.2": 0.45.2
   effect: 4.0.0-beta.84
@@ -123,6 +126,7 @@ overrides:
   "rollup@>=4 <4.59.0": 4.59.0
   "shell-quote@>=1.1.0 <=1.8.3": 1.10.0
   "tar@>=7 <7.5.11": 7.5.19
+  "tsup>esbuild": 0.28.1
   "undici@>=6 <6.27.0": 6.27.0
   "vite@>=7 <=7.3.4": 7.3.5
   "vite>esbuild": 0.28.1

From d58014883abbdd802ada3e87b232ed616cce6b9a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 04:32:34 +0200
Subject: [PATCH 071/129] enforce publication boundary and license coverage

---
 .github/workflows/ci.yml                 |   3 +
 CONTRIBUTING.md                          |   6 +-
 LICENSE.md                               |   9 +-
 apps/studio/LICENSE.md                   |  21 ++++
 examples/react-native-example/LICENSE.md |  21 ++++
 libraries/node/LICENSE.md                |  21 ++++
 libraries/paywalls/LICENSE.md            |  21 ++++
 libraries/react-native/LICENSE.md        |  21 ++++
 libraries/web/LICENSE.md                 |  21 ++++
 package.json                             |   1 +
 packages/generated-clients/LICENSE.md    |  21 ++++
 packages/tsconfig/LICENSE.md             |  21 ++++
 scripts/check-publication-boundary.mjs   | 143 +++++++++++++++++++++++
 13 files changed, 323 insertions(+), 7 deletions(-)
 create mode 100644 apps/studio/LICENSE.md
 create mode 100644 examples/react-native-example/LICENSE.md
 create mode 100644 libraries/node/LICENSE.md
 create mode 100644 libraries/paywalls/LICENSE.md
 create mode 100644 libraries/react-native/LICENSE.md
 create mode 100644 libraries/web/LICENSE.md
 create mode 100644 packages/generated-clients/LICENSE.md
 create mode 100644 packages/tsconfig/LICENSE.md
 create mode 100644 scripts/check-publication-boundary.mjs

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 80790f516..33168e203 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,6 +25,9 @@ jobs:
         with:
           node-version: 22
 
+      - name: Check publication boundary
+        run: node scripts/check-publication-boundary.mjs
+
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
         with:
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 3a7e741d3..87569c154 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -38,9 +38,9 @@ pnpm typecheck
 pnpm test
 ```
 
-Use `pnpm lint` to check formatting and lint rules. The
-[self-hosting guide](selfhost/README.md) documents the local Compose environment
-and its smoke tests.
+Use `pnpm check:publication` to validate license metadata and the public/private
+repository boundary. The [self-hosting guide](selfhost/README.md) documents the
+local Compose environment and its smoke tests.
 
 ## Testing
 
diff --git a/LICENSE.md b/LICENSE.md
index ef10301cb..dc7eb5e42 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -28,10 +28,11 @@ MIT and AGPL terms identified here already apply to their respective zones.
 
 ## Enterprise code
 
-Any future `ee/` directory will be source-available and will not be open source.
-It will be governed by the
-[Voidhash Enterprise License](LICENSES/Voidhash-Enterprise.md), but that license
-does not apply to any code unless a file or directory expressly says so.
+Enterprise code is not included in this repository and remains in Voidhash's
+private cloud repository. The
+[Voidhash Enterprise License](LICENSES/Voidhash-Enterprise.md) is retained here
+as the canonical text for any separately distributed Enterprise Software, but
+it does not apply to code unless a file or directory expressly says so.
 
 Third-party components remain under their respective licenses. Their notices
 take precedence for those components.
diff --git a/apps/studio/LICENSE.md b/apps/studio/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/apps/studio/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/examples/react-native-example/LICENSE.md b/examples/react-native-example/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/examples/react-native-example/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/libraries/node/LICENSE.md b/libraries/node/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/libraries/node/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/libraries/paywalls/LICENSE.md b/libraries/paywalls/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/libraries/paywalls/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/libraries/react-native/LICENSE.md b/libraries/react-native/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/libraries/react-native/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/libraries/web/LICENSE.md b/libraries/web/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/libraries/web/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/package.json b/package.json
index 472ff6264..2b016a140 100644
--- a/package.json
+++ b/package.json
@@ -47,6 +47,7 @@
     "openapi:generate:prod": "pnpm openapi:generate -- api.voidhash.com",
     "db:generate": "node ./scripts/db-generate.mjs",
     "db:migrate": "node ./scripts/db-migrate-local.mjs",
+    "check:publication": "node ./scripts/check-publication-boundary.mjs",
     "selfhost:smoke": "tsx selfhost/smoke.mts",
     "selfhost:release-smoke": "tsx selfhost/release-smoke.mts",
     "test": "turbo test",
diff --git a/packages/generated-clients/LICENSE.md b/packages/generated-clients/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/packages/generated-clients/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/packages/tsconfig/LICENSE.md b/packages/tsconfig/LICENSE.md
new file mode 100644
index 000000000..f44bb5bdf
--- /dev/null
+++ b/packages/tsconfig/LICENSE.md
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-present Voidhash s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/scripts/check-publication-boundary.mjs b/scripts/check-publication-boundary.mjs
new file mode 100644
index 000000000..6782bb880
--- /dev/null
+++ b/scripts/check-publication-boundary.mjs
@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const repoRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const tracked = execFileSync("git", ["ls-files", "-z"], {
+  cwd: repoRoot,
+  encoding: "utf8",
+})
+  .split("\0")
+  .filter(Boolean);
+const trackedSet = new Set(tracked);
+const failures = [];
+
+const requiredFiles = [
+  "CONTRIBUTING.md",
+  "CONTRIBUTOR_LICENSE_AGREEMENT.md",
+  "LICENSE.md",
+  "LICENSES/AGPL-3.0-only.txt",
+  "LICENSES/MIT.txt",
+  "SECURITY.md",
+  "scripts/check-publication-boundary.mjs",
+];
+for (const path of requiredFiles) {
+  if (!tracked.includes(path)) {
+    failures.push(`required publication file is missing: ${path}`);
+  }
+}
+
+const privateRoots = [
+  "ee/",
+  "internal/",
+  "stacks/",
+  "apps/overwatch/",
+  "apps/overwatch-backend/",
+  "packages/alchemy-vitest/",
+  "packages/testing/",
+];
+for (const path of tracked) {
+  if (privateRoots.some((prefix) => path.startsWith(prefix))) {
+    failures.push(`private-only path is tracked in the OSS repository: ${path}`);
+  }
+  if (
+    path.split("/").some((part) => part.startsWith(".env")) &&
+    !path.endsWith(".env.example")
+  ) {
+    failures.push(`non-example environment file is tracked: ${path}`);
+  }
+}
+
+const privateSpecifiers = ["@voidhash-mono", "@voidhash-internal"];
+const sourceLike = /\.(?:[cm]?[jt]sx?|json|ya?ml)$/;
+for (const path of tracked.filter(
+  (path) => sourceLike.test(path) && path !== "scripts/check-publication-boundary.mjs",
+)) {
+  const source = readFileSync(join(repoRoot, path), "utf8");
+  for (const specifier of privateSpecifiers) {
+    if (source.includes(specifier)) {
+      failures.push(`private package scope ${specifier} appears in ${path}`);
+    }
+  }
+}
+
+const forbiddenAdminPaths = [
+  "packages/core/src/services/admin/",
+  "packages/rpc/src/groups/admin/",
+  "apps/backend/src/rpc/groups/admin/",
+];
+for (const path of tracked) {
+  if (forbiddenAdminPaths.some((prefix) => path.startsWith(prefix))) {
+    failures.push(`private operations-plane code appears in Community: ${path}`);
+  }
+}
+
+const findPackageLicense = (packagePath) => {
+  let current = resolve(repoRoot, dirname(packagePath));
+  while (current !== repoRoot) {
+    for (const name of ["LICENSE", "LICENSE.md"]) {
+      const candidate = join(current, name);
+      if (existsSync(candidate) && trackedSet.has(relative(repoRoot, candidate))) {
+        return candidate;
+      }
+    }
+    current = dirname(current);
+  }
+  return;
+};
+
+for (const packagePath of tracked.filter(
+  (path) => path === "package.json" || path.endsWith("/package.json"),
+)) {
+  const manifest = JSON.parse(readFileSync(join(repoRoot, packagePath), "utf8"));
+  if (packagePath === "package.json") {
+    if (manifest.license !== "SEE LICENSE IN LICENSE.md") {
+      failures.push("root package.json must point to LICENSE.md");
+    }
+    continue;
+  }
+
+  if (!manifest.name) {
+    failures.push(`${packagePath} has no package name`);
+  }
+  if (privateSpecifiers.some((scope) => manifest.name?.startsWith(`${scope}/`))) {
+    failures.push(`${packagePath} uses a private package scope: ${manifest.name}`);
+  }
+  if (!new Set(["MIT", "AGPL-3.0-only"]).has(manifest.license)) {
+    failures.push(`${packagePath} has an invalid or missing license: ${manifest.license}`);
+    continue;
+  }
+
+  const licensePath = findPackageLicense(packagePath);
+  if (!licensePath) {
+    failures.push(`${packagePath} has no package or package-zone license file`);
+    continue;
+  }
+  const license = readFileSync(licensePath, "utf8");
+  if (manifest.license === "MIT" && !license.includes("MIT License")) {
+    failures.push(`${packagePath} does not resolve to the MIT license text`);
+  }
+  if (
+    manifest.license === "AGPL-3.0-only" &&
+    !license.includes("GNU AFFERO GENERAL PUBLIC LICENSE")
+  ) {
+    failures.push(`${packagePath} does not resolve to the AGPL-3.0 license text`);
+  }
+}
+
+if (failures.length > 0) {
+  process.stderr.write("Publication boundary check failed:\n\n");
+  for (const failure of failures) {
+    process.stderr.write(`- ${failure}\n`);
+  }
+  process.exit(1);
+}
+
+process.stdout.write(
+  `Publication boundary OK — ${tracked.length} tracked files and ${
+    tracked.filter((path) => path === "package.json" || path.endsWith("/package.json"))
+      .length - 1
+  } workspace packages checked.\n`,
+);

From a6b8589bc05658871da9c767d12eead8f67a78df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 04:44:15 +0200
Subject: [PATCH 072/129] prepare open-source launch documentation

---
 .github/ISSUE_TEMPLATE/bug_report.yml      | 75 +++++++++++++++++++++
 .github/ISSUE_TEMPLATE/config.yml          |  8 +++
 .github/ISSUE_TEMPLATE/feature_request.yml | 42 ++++++++++++
 .github/pull_request_template.md           | 22 ++++++
 README.md                                  | 10 ++-
 docs/architecture.md                       | 76 +++++++++++++++++++++
 docs/launch-announcement-draft.md          | 40 +++++++++++
 docs/licensing-and-self-hosting-faq.md     | 78 ++++++++++++++++++++++
 scripts/check-publication-boundary.mjs     |  6 ++
 9 files changed, 354 insertions(+), 3 deletions(-)
 create mode 100644 .github/ISSUE_TEMPLATE/bug_report.yml
 create mode 100644 .github/ISSUE_TEMPLATE/config.yml
 create mode 100644 .github/ISSUE_TEMPLATE/feature_request.yml
 create mode 100644 .github/pull_request_template.md
 create mode 100644 docs/architecture.md
 create mode 100644 docs/launch-announcement-draft.md
 create mode 100644 docs/licensing-and-self-hosting-faq.md

diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
new file mode 100644
index 000000000..c6d043880
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -0,0 +1,75 @@
+name: Bug report
+description: Report a reproducible Community product or self-hosting defect.
+title: "bug: "
+labels:
+  - bug
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not report security vulnerabilities here. Follow SECURITY.md and use the private reporting channel.
+        Voidhash is currently in private alpha; older commits and unpublished artifacts are unsupported.
+  - type: dropdown
+    id: area
+    attributes:
+      label: Affected area
+      options:
+        - Self-host runtime
+        - Backend API
+        - Dashboard or designer
+        - React Native SDK
+        - Web or Node SDK
+        - CLI or Studio
+        - Mimic
+        - Documentation
+        - Other Community package
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction
+      description: Provide the smallest reproducible sequence, project, or repository.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+    validations:
+      required: true
+  - type: input
+    id: revision
+    attributes:
+      label: Voidhash revision or package version
+      placeholder: Commit SHA or exact package version
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Include OS, Node, pnpm, Docker, SDK platform, and relevant provider versions.
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs or diagnostics
+      description: Remove credentials, personal data, API keys, and customer content.
+      render: shell
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Checklist
+      options:
+        - label: I reproduced this on the latest preview revision.
+          required: true
+        - label: This report does not contain a vulnerability or sensitive data.
+          required: true
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
new file mode 100644
index 000000000..cbe773c91
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/voidhashcom/voidhash/security/policy
+    about: Report vulnerabilities privately; never disclose them in a public issue.
+  - name: Product documentation
+    url: https://voidhash.com/docs
+    about: Read the product and SDK documentation.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
new file mode 100644
index 000000000..b2a6e91ad
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -0,0 +1,42 @@
+name: Feature request
+description: Propose an improvement to the Community product or self-hosting experience.
+title: "feature: "
+labels:
+  - enhancement
+body:
+  - type: markdown
+    attributes:
+      value: External pull-request intake is currently closed, but well-scoped product proposals are welcome.
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: Explain the user problem or operational limitation without prescribing an implementation.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed outcome
+      description: Describe the observable behavior and who benefits.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+  - type: dropdown
+    id: edition
+    attributes:
+      label: Intended edition
+      options:
+        - Community
+        - Cloud operations
+        - Enterprise
+        - Unsure
+    validations:
+      required: true
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 000000000..52a319b63
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,22 @@
+## Summary
+
+<!-- External pull-request intake is closed during private alpha and beta. -->
+
+## Validation
+
+- [ ] I ran the smallest relevant tests.
+- [ ] I ran `pnpm typecheck` and `pnpm test`, or documented why they do not apply.
+- [ ] Self-host or runtime changes pass the relevant Compose smoke suites.
+- [ ] I updated public JSDoc and user-facing documentation where behavior changed.
+
+## Publication boundary
+
+- [ ] `pnpm check:publication` passes.
+- [ ] Community code uses only `@voidhash/*` scopes and provider-neutral platform interfaces.
+- [ ] Every changed package retains the correct MIT or AGPL license metadata and license text.
+- [ ] The change contains no credentials, customer data, internal hostnames, or private operations/Enterprise code.
+
+## Security
+
+- [ ] I considered tenant isolation, authentication, replay/idempotency, storage ownership, and untrusted input where relevant.
+- [ ] I did not disclose a suspected vulnerability in this pull request.
diff --git a/README.md b/README.md
index 27afd0022..a6d7b17df 100644
--- a/README.md
+++ b/README.md
@@ -58,6 +58,10 @@ voidhash-cli init
 
 For product documentation, visit [voidhash.com](https://voidhash.com/docs). To
 run the Community platform locally, see the [self-hosting guide](selfhost/README.md).
+The [architecture overview](docs/architecture.md) explains the Community,
+Cloud, and Enterprise composition boundaries, and the
+[licensing and self-hosting FAQ](docs/licensing-and-self-hosting-faq.md) covers
+AGPL and the current BYO WorkOS requirement.
 
 ## 🤝 Contributing
 
@@ -69,9 +73,9 @@ and [Security Policy](SECURITY.md).
 
 This repository uses explicit license zones. SDKs and client libraries are
 MIT-licensed; the backend, dashboard, service packages, and self-hosting code
-are AGPL-3.0-only. Any future `ee/` code will carry a separate source-available
-enterprise license. See [LICENSE.md](LICENSE.md) for the authoritative map and
-full texts.
+are AGPL-3.0-only. Closed Enterprise implementation remains in the private
+cloud repository and is not included here. See [LICENSE.md](LICENSE.md) for the
+authoritative map and full texts.
 
 ## 🔗 Links
 
diff --git a/docs/architecture.md b/docs/architecture.md
new file mode 100644
index 000000000..94f87202b
--- /dev/null
+++ b/docs/architecture.md
@@ -0,0 +1,76 @@
+# Voidhash architecture
+
+Voidhash has one canonical Community codebase and two runtime compositions.
+This repository contains every MIT and AGPL Community component. The private
+cloud repository pins it as a submodule and adds Cloudflare infrastructure,
+closed Enterprise packages, the Overwatch operations plane, and cloud-only
+integration tests. Community source is never mirrored back into the private
+repository.
+
+```mermaid
+flowchart TD
+  Community["voidhash Community codebase<br/>MIT SDKs + AGPL services"]
+  Platform["@voidhash/platform<br/>provider-neutral contracts"]
+  Node["Community self-host<br/>Node + PostgreSQL + MinIO + optional ClickHouse"]
+  Cloud["Managed Cloud<br/>Cloudflare + PlanetScale adapters"]
+  Private["Private composition<br/>Enterprise + Overwatch + deployment graph"]
+
+  Community --> Platform
+  Platform --> Node
+  Platform --> Cloud
+  Community --> Private
+  Cloud --> Private
+```
+
+## Community packages
+
+- `libraries/` contains MIT SDKs embedded in customer applications.
+- `apps/backend`, `apps/www`, and `apps/mimic-db` are the AGPL service entry
+  points.
+- `packages/platform` defines provider-neutral Effect services for durable
+  entities, queues, workflows, key-value storage, object storage, screenshots,
+  mail, auth, and telemetry.
+- `packages/core`, `packages/db`, `packages/rpc`, and the remaining service
+  packages own portable application and domain behavior.
+- `selfhost/platform-node` implements the platform contracts for a single Node
+  deployment. `selfhost/entry` composes the Community application.
+
+The publication-boundary check rejects private package scopes, infrastructure
+directories, Enterprise code, operations-plane code, and incomplete package
+license metadata from this repository.
+
+## Self-host composition
+
+The self-host runtime is a modular monolith. One Node process serves the API
+and dashboard and runs Mimic entities, queue consumers, workflows, and cron
+fibers. PostgreSQL provides transactional state and durable scheduling; MinIO
+provides S3-compatible objects; the compiler is isolated in a private-network
+sidecar; Chromium renders paywall artifacts. ClickHouse is an optional
+analytics profile. Community v1 uses operator-supplied WorkOS credentials.
+
+See [the self-hosting guide](../selfhost/README.md) for the supported Compose
+path and operational requirements.
+
+## Managed cloud composition
+
+The private repository supplies Cloudflare and PlanetScale implementations of
+the same platform contracts and owns deployment state, environments, secrets,
+and cloud-only integration tests. Product services continue to import
+provider-neutral interfaces; a zero-baseline seam check rejects new Cloudflare
+or Alchemy imports from application code.
+
+## Enterprise and operations boundaries
+
+Enterprise packages and Overwatch are private. Enterprise features mount
+through explicit Community extension points; the Community application boots
+and passes its tests with the private packages absent. Staff authentication,
+admin RPC groups, impersonation, support tooling, and license issuance exist
+only in the private operations plane.
+
+## Security boundaries
+
+The [backend threat model](security/backend-threat-model.md) covers tenant
+isolation, credentials, provider webhooks, storage, analytics, rendering, and
+compiler sandboxing. The
+[endpoint authorization matrix](security/endpoint-authorization-matrix.md)
+records authentication and ownership evidence for the HTTP and RPC surfaces.
diff --git a/docs/launch-announcement-draft.md b/docs/launch-announcement-draft.md
new file mode 100644
index 000000000..64283eaee
--- /dev/null
+++ b/docs/launch-announcement-draft.md
@@ -0,0 +1,40 @@
+# Draft: Voidhash Community is open source
+
+> Publication draft. Do not publish or describe the platform as publicly
+> launched until the alpha/beta security gate and repository-visibility
+> checkpoint are complete.
+
+Today we are publishing the complete Voidhash Community platform: the mobile
+and web SDKs, paywall designer and renderer, backend, purchase integrations,
+analytics pipeline, Mimic collaboration engine, and a self-hosted Docker
+composition.
+
+The SDK and integration surface is MIT licensed. The service platform and
+self-host runtime are AGPL-3.0-only, which allows commercial self-hosting while
+requiring operators of modified network services to follow the AGPL's source
+availability terms. Closed Enterprise features and our internal operations and
+deployment systems are not part of the Community repository.
+
+The self-host composition runs the same application services as Voidhash Cloud
+through provider-neutral platform contracts. It uses Node, PostgreSQL, MinIO,
+an isolated component compiler, Chromium, SMTP, and optional ClickHouse.
+Community v1 uses your own WorkOS and provider credentials. Cloud remains the
+zero-operations path; pricing is not being announced with this release.
+
+We assembled and tested the complete repository privately before publication,
+including tenant-boundary tests, provider-signature and replay tests, secret
+and dependency scanning, clean Compose builds, release-level self-host smokes,
+and a real cloud deployment. The security policy and threat model are included
+in the repository, and vulnerabilities can be reported privately to
+security@voidhash.com.
+
+External patch intake will remain closed initially while we finish the CLA
+acceptance workflow. Issues and responsible security reports are welcome.
+
+Suggested launch links:
+
+- Repository: https://github.com/voidhashcom/voidhash
+- Self-hosting guide: `selfhost/README.md`
+- Architecture: `docs/architecture.md`
+- Licensing FAQ: `docs/licensing-and-self-hosting-faq.md`
+- Security policy: `SECURITY.md`
diff --git a/docs/licensing-and-self-hosting-faq.md b/docs/licensing-and-self-hosting-faq.md
new file mode 100644
index 000000000..b3a6766c5
--- /dev/null
+++ b/docs/licensing-and-self-hosting-faq.md
@@ -0,0 +1,78 @@
+# Licensing and self-hosting FAQ
+
+This FAQ explains the repository's intended license boundaries. It is not
+legal advice; organizations with specific compliance questions should consult
+their counsel. The authoritative terms are the license texts linked from
+[LICENSE.md](../LICENSE.md).
+
+## Which code is MIT licensed?
+
+SDKs and other code embedded in a customer's application are MIT licensed.
+That includes the React Native, web, Node, and paywall libraries, the CLI and
+Studio, examples, generated clients, API contracts, and the App Store and
+Google Play server SDKs. Each package declares `MIT` and resolves to the full
+MIT text.
+
+## Which code is AGPL-3.0-only?
+
+The backend, dashboard, Mimic services and tooling, service packages, paywall
+build/render pipeline, and self-host runtime are AGPL-3.0-only. Operators may
+modify and self-host that code, including commercially, subject to the AGPL's
+terms. In particular, the AGPL contains source-availability obligations for
+modified versions used to provide network services.
+
+## Does AGPL apply to an application using a Voidhash SDK?
+
+The customer-facing SDK packages are MIT licensed specifically so applications
+can link and ship them without importing the AGPL service license. Check the
+nearest package license and its `package.json`; do not infer a package's license
+from the repository name alone.
+
+## Is Enterprise code included?
+
+No. Closed Enterprise implementation remains in the private cloud repository.
+It composes over explicit Community extension points and is not copied into
+this repository or the Community image. Any separately distributed Enterprise
+Software is governed only by terms that expressly identify it.
+
+## Is self-hosting production supported today?
+
+Not yet. The repository is in private alpha and the latest `preview` branch is
+the only security-maintained line. The supported path for evaluation is the
+documented Docker Compose configuration. A production support matrix and
+version table will replace this answer before the first public release.
+
+## Why does Community v1 require WorkOS?
+
+The application already isolates authentication behind a platform port, but
+the first Community composition uses operator-supplied WorkOS credentials so
+the complete product can ship without weakening authentication during the
+open-source migration. Use a WorkOS staging environment for local evaluation
+and your own production environment for any network-accessible deployment. A
+bundled authentication adapter remains a public roadmap item.
+
+## Is analytics required?
+
+No. ClickHouse is an optional Compose profile. Without it, the platform still
+boots, purchase and identity state remains durable in PostgreSQL, and analytics
+queries degrade to empty results. Enable the profile for durable event capture
+and dashboards.
+
+## Are pricing or trademark terms defined here?
+
+No. Cloud and Enterprise pricing is intentionally undecided. Voidhash does not
+currently claim a registered trademark, and this repository does not define a
+separate trademark policy.
+
+## Can I contribute a patch?
+
+External pull-request intake is closed during private alpha and beta. Issues
+and private security reports are welcome. Before external contributions are
+accepted, Voidhash will enable the approved Contributor License Agreement
+acceptance process and make its check merge-blocking.
+
+## How do I report a vulnerability?
+
+Email [security@voidhash.com](mailto:security@voidhash.com) and follow
+[SECURITY.md](../SECURITY.md). Do not disclose suspected vulnerabilities in a
+public issue or pull request.
diff --git a/scripts/check-publication-boundary.mjs b/scripts/check-publication-boundary.mjs
index 6782bb880..aeb06af32 100644
--- a/scripts/check-publication-boundary.mjs
+++ b/scripts/check-publication-boundary.mjs
@@ -21,6 +21,12 @@ const requiredFiles = [
   "LICENSES/AGPL-3.0-only.txt",
   "LICENSES/MIT.txt",
   "SECURITY.md",
+  "docs/architecture.md",
+  "docs/licensing-and-self-hosting-faq.md",
+  ".github/ISSUE_TEMPLATE/bug_report.yml",
+  ".github/ISSUE_TEMPLATE/config.yml",
+  ".github/ISSUE_TEMPLATE/feature_request.yml",
+  ".github/pull_request_template.md",
   "scripts/check-publication-boundary.mjs",
 ];
 for (const path of requiredFiles) {

From 904f9c0fab0cc6a177ee583593787087c46680b8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 10:45:09 +0200
Subject: [PATCH 073/129] ci: reduce hosted actions usage

---
 .github/workflows/ci.yml                    | 40 +++++++++++++++------
 .github/workflows/osv-scanner.yml           | 22 +++++++++++-
 .github/workflows/pr-packages.yml           |  5 +--
 .github/workflows/secret-scanning.yml       | 23 +++++-------
 .github/workflows/security-audit.yml        |  6 +++-
 .github/workflows/selfhost.yml              | 20 +++++++----
 .github/workflows/semantic-pull-request.yml |  1 -
 .github/workflows/tinybird-cd.yml           | 22 ------------
 .github/workflows/tinybird-ci.yml           | 36 -------------------
 9 files changed, 82 insertions(+), 93 deletions(-)
 delete mode 100644 .github/workflows/tinybird-cd.yml
 delete mode 100644 .github/workflows/tinybird-ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 33168e203..755a942e9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,46 +2,66 @@ name: Repository CI
 
 on:
   push:
-    branches: [main, preview, oss]
+    branches: [main, preview]
   pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
+  workflow_dispatch:
 
 permissions:
   contents: read
 
 concurrency:
-  group: repository-ci-${{ github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+  group: repository-ci-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
 
 jobs:
   validate:
     name: Validate
     runs-on: ubuntu-latest
+    timeout-minutes: 45
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - name: Setup pnpm
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
+        uses: pnpm/action-setup@v4
         with:
-          node-version: 22
+          version: 11.1.3
+          run_install: false
 
       - name: Check publication boundary
         run: node scripts/check-publication-boundary.mjs
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+      - name: Setup Node.js
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
+        uses: actions/setup-node@v4
         with:
-          version: 11.1.3
-          run_install: false
+          node-version: 22
+          cache: pnpm
+          cache-dependency-path: pnpm-lock.yaml
+
+      - name: Restore Turborepo cache
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
+        uses: actions/cache@v4
+        with:
+          path: .turbo
+          key: turbo-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.sha }}
+          restore-keys: |
+            turbo-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}-
 
       - name: Install dependencies
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
         run: pnpm install --frozen-lockfile
 
       - name: Build
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
         run: pnpm build --concurrency=2
 
       - name: Typecheck
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
         run: pnpm typecheck --concurrency=2
 
       - name: Test
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
         run: pnpm test --concurrency=2
diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index 0f25b45c4..d40a753b2 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -2,8 +2,28 @@ name: OSV Scanner
 
 on:
   pull_request:
+    paths:
+      - package.json
+      - pnpm-lock.yaml
+      - pnpm-workspace.yaml
+      - apps/**/package.json
+      - examples/**/package.json
+      - libraries/**/package.json
+      - packages/**/package.json
+      - selfhost/**/package.json
+      - .github/workflows/osv-scanner.yml
   push:
-    branches: [main, preview, oss]
+    branches: [main, preview]
+    paths:
+      - package.json
+      - pnpm-lock.yaml
+      - pnpm-workspace.yaml
+      - apps/**/package.json
+      - examples/**/package.json
+      - libraries/**/package.json
+      - packages/**/package.json
+      - selfhost/**/package.json
+      - .github/workflows/osv-scanner.yml
   schedule:
     - cron: "30 12 * * 1"
   workflow_dispatch:
diff --git a/.github/workflows/pr-packages.yml b/.github/workflows/pr-packages.yml
index 8b5ac1661..5bcb6fc1a 100644
--- a/.github/workflows/pr-packages.yml
+++ b/.github/workflows/pr-packages.yml
@@ -32,7 +32,7 @@ on:
       - .github/workflows/pr-packages.yml
       - scripts/publish-pr-packages.mjs
   pull_request:
-    types: [opened, synchronize, reopened]
+    types: [opened, synchronize, reopened, ready_for_review]
     paths:
       - packages/generated-clients/**
       - packages/shared/**
@@ -60,7 +60,8 @@ jobs:
     # Fork PRs can't access PR_PACKAGE_TOKEN — skip them entirely.
     if: >-
       github.event_name == 'push' ||
-      github.event.pull_request.head.repo.full_name == github.repository
+      (github.event.pull_request.draft == false &&
+        github.event.pull_request.head.repo.full_name == github.repository)
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout
diff --git a/.github/workflows/secret-scanning.yml b/.github/workflows/secret-scanning.yml
index a23bf7c92..77f3b2636 100644
--- a/.github/workflows/secret-scanning.yml
+++ b/.github/workflows/secret-scanning.yml
@@ -2,20 +2,24 @@ name: Secret scanning
 
 on:
   push:
-    branches: [main, preview, oss]
+    branches: [main, preview]
   pull_request:
+  schedule:
+    - cron: "15 11 * * 1"
+  workflow_dispatch:
 
 permissions:
   contents: read
 
 concurrency:
-  group: secret-scanning-${{ github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+  group: secret-scanning-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
 
 jobs:
-  gitleaks:
-    name: Gitleaks
+  scan:
+    name: Secret scanners
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: Checkout full history
         uses: actions/checkout@v4
@@ -29,15 +33,6 @@ jobs:
           ghcr.io/gitleaks/gitleaks@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f
           dir /repo --config /repo/.gitleaks.toml --redact --no-banner --exit-code 1
 
-  trufflehog:
-    name: TruffleHog
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout full history
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
       - name: Scan verified secrets in published history
         run: >-
           docker run --rm
diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
index 4b2b9eca3..9d2d5060e 100644
--- a/.github/workflows/security-audit.yml
+++ b/.github/workflows/security-audit.yml
@@ -2,7 +2,7 @@ name: Security audit
 
 on:
   push:
-    branches: [main, preview, oss]
+    branches: [main, preview]
     paths:
       - package.json
       - pnpm-lock.yaml
@@ -28,6 +28,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: security-audit-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   production-dependencies:
     name: Production dependencies
diff --git a/.github/workflows/selfhost.yml b/.github/workflows/selfhost.yml
index d741d33f6..ba96f6926 100644
--- a/.github/workflows/selfhost.yml
+++ b/.github/workflows/selfhost.yml
@@ -2,18 +2,18 @@ name: Self-host Compose
 
 on:
   pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
   push:
     branches:
       - main
       - preview
-      - oss
   workflow_dispatch:
 
 permissions:
   contents: read
 
 concurrency:
-  group: selfhost-compose-${{ github.workflow }}-${{ github.ref }}
+  group: selfhost-compose-${{ github.head_ref || github.ref }}
   cancel-in-progress: true
 
 env:
@@ -21,17 +21,25 @@ env:
 
 jobs:
   smoke:
+    if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
     runs-on: ubuntu-latest
     timeout-minutes: 40
     steps:
       - uses: actions/checkout@v4
 
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 11.1.3
+          run_install: false
+
       - uses: actions/setup-node@v4
         with:
           node-version: 22
+          cache: pnpm
+          cache-dependency-path: pnpm-lock.yaml
 
       - name: Install workspace dependencies
-        run: corepack pnpm@11.1.3 install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - name: Start stateful stores
         run: docker compose -f selfhost/docker-compose.yml --profile analytics up -d clickhouse minio --wait --wait-timeout 180
@@ -43,7 +51,7 @@ jobs:
         env:
           PLATFORM_NODE_S3_ENDPOINT: http://127.0.0.1:9000
           PLATFORM_NODE_S3_TEST: 1
-        run: corepack pnpm@11.1.3 --filter @voidhash/platform-node exec vp test run -c vitest.mts tests/S3ObjectStore.integration.test.ts
+        run: pnpm --filter @voidhash/platform-node exec vp test run -c vitest.mts tests/S3ObjectStore.integration.test.ts
 
       - name: Build and start Community Compose
         env:
@@ -55,10 +63,10 @@ jobs:
         run: docker builder prune --all --force
 
       - name: Run self-host smoke
-        run: corepack pnpm@11.1.3 exec tsx selfhost/smoke.mts
+        run: pnpm exec tsx selfhost/smoke.mts
 
       - name: Run self-host release smoke
-        run: corepack pnpm@11.1.3 exec tsx selfhost/release-smoke.mts
+        run: pnpm exec tsx selfhost/release-smoke.mts
 
       - name: Show Compose diagnostics
         if: always()
diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml
index 9a53c189c..aa7191d3e 100644
--- a/.github/workflows/semantic-pull-request.yml
+++ b/.github/workflows/semantic-pull-request.yml
@@ -6,7 +6,6 @@ on:
       - opened
       - reopened
       - edited
-      - synchronize
 
 permissions:
   pull-requests: write
diff --git a/.github/workflows/tinybird-cd.yml b/.github/workflows/tinybird-cd.yml
deleted file mode 100644
index 5f40c3361..000000000
--- a/.github/workflows/tinybird-cd.yml
+++ /dev/null
@@ -1,22 +0,0 @@
-name: Tinybird - CD Workflow
-
-on:
-  push:
-    branches:
-      - main
-
-concurrency: ${{ github.workflow }}-${{ github.event.ref }}
-
-env:
-  TINYBIRD_HOST: ${{ secrets.TINYBIRD_HOST }}
-  TINYBIRD_TOKEN: ${{ secrets.TINYBIRD_TOKEN }}
-
-jobs:
-  cd:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - uses: actions/checkout@v3
-      - name: Install Tinybird CLI
-        run: curl https://tinybird.co | sh
-      - name: Deploy project
-        run: tb --cloud --host ${{ env.TINYBIRD_HOST }} --token ${{ env.TINYBIRD_TOKEN }} deploy
diff --git a/.github/workflows/tinybird-ci.yml b/.github/workflows/tinybird-ci.yml
deleted file mode 100644
index 76ee177c6..000000000
--- a/.github/workflows/tinybird-ci.yml
+++ /dev/null
@@ -1,36 +0,0 @@
-name: Tinybird - CI Workflow
-
-on:
-  workflow_dispatch:
-  pull_request:
-    branches:
-      - main
-    types: [opened, reopened, labeled, unlabeled, synchronize]
-
-concurrency: ${{ github.workflow }}-${{ github.event.pull_request.number }}
-
-env:
-  TINYBIRD_HOST: ${{ secrets.TINYBIRD_HOST }}
-  TINYBIRD_TOKEN: ${{ secrets.TINYBIRD_TOKEN }}
-
-jobs:
-  ci:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    defaults:
-      run:
-        working-directory: "."
-    services:
-      tinybird:
-        image: tinybirdco/tinybird-local:latest
-        ports:
-          - 7181:7181
-    steps:
-      - uses: actions/checkout@v3
-      - name: Install Tinybird CLI
-        run: curl https://tinybird.co | sh
-      - name: Build project
-        run: tb build
-      - name: Test project
-        run: tb test run
-      - name: Deployment check
-        run: tb --cloud --host ${{ env.TINYBIRD_HOST }} --token ${{ env.TINYBIRD_TOKEN }} deploy --check

From 771e3287c81f80c06619f90e73bf361eee9c139d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 10:47:43 +0200
Subject: [PATCH 074/129] ci: disable unavailable OSV code scanning upload

---
 .github/workflows/osv-scanner.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index d40a753b2..e8783d5e1 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -37,9 +37,12 @@ jobs:
   scan-pr:
     if: github.event_name == 'pull_request'
     uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.8
+    with:
+      upload-sarif: false
 
   scan-full:
     if: github.event_name != 'pull_request'
     uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.8
     with:
       fail-on-vuln: false
+      upload-sarif: false

From 52266a56d3d252283cd21b6b6b01b0d96811036a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 10:49:47 +0200
Subject: [PATCH 075/129] ci: streamline dependency security checks

---
 .github/workflows/osv-scanner.yml    | 28 +++++++++++++++-------------
 .github/workflows/security-audit.yml |  2 ++
 2 files changed, 17 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index e8783d5e1..10f7135ca 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -29,20 +29,22 @@ on:
   workflow_dispatch:
 
 permissions:
-  actions: read
   contents: read
-  security-events: write
+
+concurrency:
+  group: osv-scanner-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
 
 jobs:
-  scan-pr:
-    if: github.event_name == 'pull_request'
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.8
-    with:
-      upload-sarif: false
+  scan:
+    name: Production lockfile
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
 
-  scan-full:
-    if: github.event_name != 'pull_request'
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.8
-    with:
-      fail-on-vuln: false
-      upload-sarif: false
+      - name: Reject known vulnerabilities
+        uses: google/osv-scanner-action/osv-scanner-action@8dc09193bb540e09b23da07ad7e30bd33bf87018
+        with:
+          scan-args: |-
+            --lockfile=pnpm-lock.yaml
diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
index 9d2d5060e..08c803a2f 100644
--- a/.github/workflows/security-audit.yml
+++ b/.github/workflows/security-audit.yml
@@ -14,6 +14,7 @@ on:
       - selfhost/**/package.json
       - .github/workflows/security-audit.yml
   pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
     paths:
       - package.json
       - pnpm-lock.yaml
@@ -35,6 +36,7 @@ concurrency:
 jobs:
   production-dependencies:
     name: Production dependencies
+    if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
     runs-on: ubuntu-latest
     steps:
       - name: Checkout

From fcea3a0186b73558d3564ca808d88b745f656883 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 11:03:19 +0200
Subject: [PATCH 076/129] fix(www): remove hidden mono type dependencies

---
 apps/www/src/features/studio/lib/nextjs.ts                 | 7 -------
 .../studio/organizations/projects/projects-page.tsx        | 4 ++--
 apps/www/src/features/studio/perks/perks-page.tsx          | 4 ++--
 .../src/features/studio/persons/persons-detail-page.tsx    | 4 ++--
 apps/www/src/features/studio/persons/persons-page.tsx      | 4 ++--
 .../src/features/studio/products/product-detail-page.tsx   | 4 ++--
 apps/www/src/features/studio/products/products-page.tsx    | 4 ++--
 .../settings/general/project-settings-general-page.tsx     | 4 ++--
 .../payment-providers/payment-provider-detail-page.tsx     | 4 ++--
 .../settings/payment-providers/payment-providers-page.tsx  | 5 ++---
 apps/www/tsconfig.json                                     | 2 +-
 11 files changed, 19 insertions(+), 27 deletions(-)
 delete mode 100644 apps/www/src/features/studio/lib/nextjs.ts

diff --git a/apps/www/src/features/studio/lib/nextjs.ts b/apps/www/src/features/studio/lib/nextjs.ts
deleted file mode 100644
index c45963f12..000000000
--- a/apps/www/src/features/studio/lib/nextjs.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-import type { useRouter } from "next/navigation";
-
-export function nextRenderRedirect(router: ReturnType<typeof useRouter>, path: string) {
-  setTimeout(() => {
-    router.push(path);
-  }, 1);
-}
diff --git a/apps/www/src/features/studio/organizations/projects/projects-page.tsx b/apps/www/src/features/studio/organizations/projects/projects-page.tsx
index 35d26c450..2aa1161cb 100644
--- a/apps/www/src/features/studio/organizations/projects/projects-page.tsx
+++ b/apps/www/src/features/studio/organizations/projects/projects-page.tsx
@@ -1,11 +1,11 @@
 "use client";
-import { useParams } from "next/navigation";
+import { useParams } from "@tanstack/react-router";
 import { Page } from "@/features/studio/shell";
 
 import { ProjectsList } from "./projects-list";
 
 export function ProjectsPage() {
-  const { organizationSlug } = useParams();
+  const { organizationSlug } = useParams({ strict: false });
   return (
     <Page>
       <div className="mx-auto max-w-4xl">
diff --git a/apps/www/src/features/studio/perks/perks-page.tsx b/apps/www/src/features/studio/perks/perks-page.tsx
index fcc57620d..e524ddb19 100644
--- a/apps/www/src/features/studio/perks/perks-page.tsx
+++ b/apps/www/src/features/studio/perks/perks-page.tsx
@@ -1,8 +1,8 @@
 "use client";
 
 import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
 import { Card } from "@voidhash/ui";
-import { useParams } from "next/navigation";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import { listPerksOptions } from "@/features/studio/lib/tanstack-query/perks";
@@ -14,7 +14,7 @@ import { PerksPageEmptyState } from "./perks-page-empty-state";
 import { PerksPageSkeleton } from "./perks-page-skeleton";
 
 export const PerksPage = () => {
-  const { organizationSlug, projectSlug } = useParams();
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
   const { user } = useAuth();
   const project = CurrentUser.getProjectBySlugs(
     user,
diff --git a/apps/www/src/features/studio/persons/persons-detail-page.tsx b/apps/www/src/features/studio/persons/persons-detail-page.tsx
index db22fbdf9..6be258ea5 100644
--- a/apps/www/src/features/studio/persons/persons-detail-page.tsx
+++ b/apps/www/src/features/studio/persons/persons-detail-page.tsx
@@ -1,10 +1,10 @@
 "use client";
 
 import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
 import { Card, CardContent, CardHeader, CardTitle } from "@voidhash/ui";
 import { format } from "date-fns";
 import { Clock4Icon } from "lucide-react";
-import { useParams } from "next/navigation";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { getPersonByDistinctIdOptions } from "@/features/studio/lib/tanstack-query/persons";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
@@ -13,7 +13,7 @@ import { Page } from "../shell";
 import { VoidhashErrorCard } from "../shell/components/voidhash-error-card";
 
 export const PersonDetailPage = () => {
-  const { id: distinctId, organizationSlug, projectSlug } = useParams();
+  const { id: distinctId, organizationSlug, projectSlug } = useParams({ strict: false });
   const { user } = useAuth();
   const project = CurrentUser.getProjectBySlugs(
     user,
diff --git a/apps/www/src/features/studio/persons/persons-page.tsx b/apps/www/src/features/studio/persons/persons-page.tsx
index b7c9c6dec..cde09bc1a 100644
--- a/apps/www/src/features/studio/persons/persons-page.tsx
+++ b/apps/www/src/features/studio/persons/persons-page.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import { useParams } from "next/navigation";
+import { useParams } from "@tanstack/react-router";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
@@ -10,7 +10,7 @@ import { CreatePersonButton } from "./create-person-button";
 import { PersonsTable } from "./persons-table";
 
 export const PersonsPage = () => {
-  const { organizationSlug, projectSlug } = useParams();
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
   const { user } = useAuth();
 
   const project = CurrentUser.getProjectBySlugs(
diff --git a/apps/www/src/features/studio/products/product-detail-page.tsx b/apps/www/src/features/studio/products/product-detail-page.tsx
index 2b53831fa..72362b74a 100644
--- a/apps/www/src/features/studio/products/product-detail-page.tsx
+++ b/apps/www/src/features/studio/products/product-detail-page.tsx
@@ -1,8 +1,8 @@
 "use client";
 
 import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
 import { Card, CardContent, CardFooter, CardHeader, CardTitle } from "@voidhash/ui";
-import { useParams } from "next/navigation";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { Page } from "@/features/studio/shell";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
@@ -25,7 +25,7 @@ import { ProductDetailPerkRecord } from "./product-detail-product-perk-record";
 import { ProductDetailProviderProductRecord } from "./product-detail-provider-product-record";
 
 export const ProductDetailPage = () => {
-  const params = useParams();
+  const params = useParams({ strict: false });
   const organizationSlug = params.organizationSlug as string;
   const projectSlug = params.projectSlug as string;
   const id = params.id as string;
diff --git a/apps/www/src/features/studio/products/products-page.tsx b/apps/www/src/features/studio/products/products-page.tsx
index b622a9be0..c833405d4 100644
--- a/apps/www/src/features/studio/products/products-page.tsx
+++ b/apps/www/src/features/studio/products/products-page.tsx
@@ -1,8 +1,8 @@
 "use client";
 
 import { useQuery } from "@tanstack/react-query";
+import { useParams } from "@tanstack/react-router";
 import { Card } from "@voidhash/ui";
-import { useParams } from "next/navigation";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { Page } from "@/features/studio/shell";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
@@ -16,7 +16,7 @@ import { ProductsPageEmptyState } from "./products-page-empty-state";
 import { ProductsPageSkeleton } from "./products-page-skeleton";
 
 export const ProductsPage = () => {
-  const { organizationSlug, projectSlug } = useParams();
+  const { organizationSlug, projectSlug } = useParams({ strict: false });
   const { user } = useAuth();
   const project = CurrentUser.getProjectBySlugs(
     user,
diff --git a/apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx b/apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx
index daae62295..3b4ea0df1 100644
--- a/apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx
+++ b/apps/www/src/features/studio/projects/settings/general/project-settings-general-page.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import { useParams } from "next/navigation";
+import { useParams } from "@tanstack/react-router";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
@@ -9,7 +9,7 @@ import { ProjectNameForm } from "./project-name";
 import { ProjectSettingsGeneralLayout } from "./project-settings-general-layout";
 
 export function ProjectSettingsGeneralPage() {
-  const { projectSlug } = useParams();
+  const { projectSlug } = useParams({ strict: false });
   const { user } = useAuth();
 
   const project = user.projects.find((p) => p.slug === projectSlug);
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx
index 3264dab2d..01533fda6 100644
--- a/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-provider-detail-page.tsx
@@ -1,7 +1,7 @@
 "use client";
 
 import { useQuery } from "@tanstack/react-query";
-import { useParams } from "next/navigation";
+import { useParams } from "@tanstack/react-router";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { Page } from "@/features/studio/shell";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
@@ -11,7 +11,7 @@ import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 import { PaymentProviderDetailRouter } from "./payment-provider-detail-router";
 
 export const PaymentProviderDetailPage = () => {
-  const params = useParams();
+  const params = useParams({ strict: false });
   const organizationSlug = params.organizationSlug as string;
   const projectSlug = params.projectSlug as string;
   const paymentProviderConfigurationId = params.paymentProviderConfigurationId as string;
diff --git a/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx
index 6e9a6c0cd..db2ca93f2 100644
--- a/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx
+++ b/apps/www/src/features/studio/projects/settings/payment-providers/payment-providers-page.tsx
@@ -1,10 +1,9 @@
 "use client";
 
 import { useQuery } from "@tanstack/react-query";
-import { Link } from "@tanstack/react-router";
+import { Link, useParams } from "@tanstack/react-router";
 import { Badge, Card, CardHeader, CardTitle, cn } from "@voidhash/ui";
 import { ChevronRightIcon } from "lucide-react";
-import { useParams } from "next/navigation";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { Page } from "@/features/studio/shell";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
@@ -17,7 +16,7 @@ import { PaymentProvidersNewStoreDropdown } from "./payment-providers-new-store-
 import { SetupPaymentProviderButton } from "./setup-payment-provider-button";
 
 export const PaymentProvidersPage = () => {
-  const params = useParams();
+  const params = useParams({ strict: false });
   const organizationSlug = params.organizationSlug as string;
   const projectSlug = params.projectSlug as string;
 
diff --git a/apps/www/tsconfig.json b/apps/www/tsconfig.json
index 19e07ac5d..519ece360 100644
--- a/apps/www/tsconfig.json
+++ b/apps/www/tsconfig.json
@@ -16,7 +16,7 @@
     "isolatedModules": true,
     "jsx": "react-jsx",
     "incremental": true,
-    "types": ["vite/client"],
+    "types": ["node", "vite/client"],
     "paths": {
       "@/*": ["./src/*"],
       "@generated/design": ["./design.generated.ts"],

From 880c15ed86bffa494690e477ffbce643732002f8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 14:45:23 +0200
Subject: [PATCH 077/129] refactor(mimic): simplify embedded document
 migrations

---
 .../src/components/app-sidebar.tsx            |   3 +-
 apps/mimic-admin/src/lib/queries.ts           | 146 +--
 apps/mimic-admin/src/routeTree.gen.ts         |  21 -
 .../collections/$collectionId/schema.tsx      |  67 +-
 .../src/routes/_app/_layout/migrations.tsx    | 905 ------------------
 apps/mimic-cli/LICENSE.md                     | 661 -------------
 apps/mimic-cli/README.md                      |   5 -
 apps/mimic-cli/build.ts                       |  78 --
 apps/mimic-cli/package.json                   |  62 --
 apps/mimic-cli/src/cli/commands/generate.ts   |  58 --
 apps/mimic-cli/src/cli/commands/init.ts       |  47 -
 apps/mimic-cli/src/cli/commands/migrate.ts    | 391 --------
 apps/mimic-cli/src/cli/index.ts               |  48 -
 apps/mimic-cli/src/index.ts                   | 133 ---
 apps/mimic-cli/src/services/ConfigLoader.ts   |  65 --
 .../src/services/MigrationBundler.ts          | 162 ----
 .../mimic-cli/src/services/MigrationLoader.ts | 178 ----
 apps/mimic-cli/src/utils/error-formatter.ts   |  23 -
 apps/mimic-cli/src/utils/js-loading/_es5.ts   |   1 -
 .../src/utils/js-loading/config-loader.ts     |  71 --
 apps/mimic-cli/src/utils/package-root.ts      |   6 -
 apps/mimic-cli/tests/config-loader.test.ts    |  62 --
 apps/mimic-cli/tests/generate.test.ts         |  51 -
 apps/mimic-cli/tests/migration-loader.test.ts | 128 ---
 apps/mimic-cli/tsconfig.json                  |  24 -
 apps/mimic-cli/vitest.mts                     |   7 -
 apps/mimic-db/MIGRATIONS.md                   |  30 +
 apps/mimic-db/src/api/handlers/collections.ts |  12 -
 apps/mimic-db/src/api/handlers/index.ts       |   2 -
 apps/mimic-db/src/api/handlers/migrations.ts  |  80 --
 apps/mimic-db/src/app/hostService.ts          |  96 +-
 apps/mimic-db/src/core/control-engine.ts      | 244 +----
 apps/mimic-db/src/core/document-engine.ts     | 106 +-
 apps/mimic-db/src/core/local-host-service.ts  |  49 +-
 apps/mimic-db/src/core/memory-store.ts        |  47 +-
 apps/mimic-db/src/core/migration-executor.ts  |  96 --
 apps/mimic-db/src/core/migration-registry.ts  | 115 +++
 apps/mimic-db/src/core/pg-store.ts            |  55 +-
 apps/mimic-db/src/core/schema-provider.ts     |   9 +-
 apps/mimic-db/src/core/store.ts               |  38 +-
 apps/mimic-db/src/document/transaction.ts     |   7 -
 apps/mimic-db/src/index.ts                    |   2 +-
 .../src/worker/durable-host-service.ts        |  16 +-
 apps/mimic-db/tests/helpers.ts                |  30 +-
 .../tests/integration/host-flow.test.ts       |  78 +-
 .../tests/migrate-with-mimic-cli.test.ts      | 156 ---
 .../tests/unit/direct-migration.test.ts       | 218 +++++
 .../tests/unit/migration-executor.test.ts     |  56 --
 .../tests/unit/migration-registry.test.ts     | 118 +++
 .../migration.sql                             |   1 +
 .../migration.sql                             |   2 +
 packages/mimic-schema/package.json            |   3 +-
 packages/mimic-schema/src/document.ts         |   7 +-
 packages/mimic-schema/src/index.ts            |   1 +
 .../src/migrations/00000_baseline.ts          |   8 +
 packages/mimic-schema/src/migrations/index.ts |  17 +
 .../mimic-server/src/effect/DatabaseHandle.ts |  85 +-
 packages/mimic-server/src/effect/index.ts     |   2 -
 packages/mimic-server/src/effect/types.ts     |  12 +-
 packages/mimic-server/src/index.ts            |   2 -
 .../src/migrate/migration/definition.ts       | 111 +++
 .../src/migrate/migration/index.ts            |   2 +
 .../mimic-server/src/migrate/migration/run.ts |  59 ++
 packages/mimic-server/src/promise/MimicSDK.ts |  43 -
 packages/mimic-server/src/rpc/group.ts        |   2 -
 .../src/rpc/groups/collections.ts             |  12 -
 .../mimic-server/src/rpc/groups/migrations.ts |  72 --
 packages/mimic-server/src/rpc/index.ts        |  26 -
 packages/mimic-server/src/rpc/schemas.ts      |  98 +-
 .../tests/migrate/migration/direct.test.ts    | 145 +++
 .../mimic-server/tests/rpc/contracts.test.ts  |   4 -
 .../mimic-server/tests/rpc/schemas.test.ts    |  44 +-
 .../tests/sdk/effect/migrations.test.ts       | 146 ---
 pnpm-lock.yaml                                |  78 +-
 selfhost/entry/src/backend/MimicHost.ts       | 115 +--
 selfhost/entry/src/mimic/MimicNode.ts         |  14 +-
 selfhost/entry/src/mimic/PgControlStore.ts    |  98 +-
 77 files changed, 1206 insertions(+), 5066 deletions(-)
 delete mode 100644 apps/mimic-admin/src/routes/_app/_layout/migrations.tsx
 delete mode 100644 apps/mimic-cli/LICENSE.md
 delete mode 100644 apps/mimic-cli/README.md
 delete mode 100644 apps/mimic-cli/build.ts
 delete mode 100644 apps/mimic-cli/package.json
 delete mode 100644 apps/mimic-cli/src/cli/commands/generate.ts
 delete mode 100644 apps/mimic-cli/src/cli/commands/init.ts
 delete mode 100644 apps/mimic-cli/src/cli/commands/migrate.ts
 delete mode 100644 apps/mimic-cli/src/cli/index.ts
 delete mode 100644 apps/mimic-cli/src/index.ts
 delete mode 100644 apps/mimic-cli/src/services/ConfigLoader.ts
 delete mode 100644 apps/mimic-cli/src/services/MigrationBundler.ts
 delete mode 100644 apps/mimic-cli/src/services/MigrationLoader.ts
 delete mode 100644 apps/mimic-cli/src/utils/error-formatter.ts
 delete mode 100644 apps/mimic-cli/src/utils/js-loading/_es5.ts
 delete mode 100644 apps/mimic-cli/src/utils/js-loading/config-loader.ts
 delete mode 100644 apps/mimic-cli/src/utils/package-root.ts
 delete mode 100644 apps/mimic-cli/tests/config-loader.test.ts
 delete mode 100644 apps/mimic-cli/tests/generate.test.ts
 delete mode 100644 apps/mimic-cli/tests/migration-loader.test.ts
 delete mode 100644 apps/mimic-cli/tsconfig.json
 delete mode 100644 apps/mimic-cli/vitest.mts
 create mode 100644 apps/mimic-db/MIGRATIONS.md
 delete mode 100644 apps/mimic-db/src/api/handlers/migrations.ts
 delete mode 100644 apps/mimic-db/src/core/migration-executor.ts
 create mode 100644 apps/mimic-db/src/core/migration-registry.ts
 delete mode 100644 apps/mimic-db/tests/migrate-with-mimic-cli.test.ts
 create mode 100644 apps/mimic-db/tests/unit/direct-migration.test.ts
 delete mode 100644 apps/mimic-db/tests/unit/migration-executor.test.ts
 create mode 100644 apps/mimic-db/tests/unit/migration-registry.test.ts
 create mode 100644 packages/db/src/alchemy-migrations/20260712120000_mimic_migration_version/migration.sql
 create mode 100644 packages/mimic-schema/src/migrations/00000_baseline.ts
 create mode 100644 packages/mimic-schema/src/migrations/index.ts
 create mode 100644 packages/mimic-server/src/migrate/migration/definition.ts
 create mode 100644 packages/mimic-server/src/migrate/migration/run.ts
 delete mode 100644 packages/mimic-server/src/rpc/groups/migrations.ts
 create mode 100644 packages/mimic-server/tests/migrate/migration/direct.test.ts
 delete mode 100644 packages/mimic-server/tests/sdk/effect/migrations.test.ts

diff --git a/apps/mimic-admin/src/components/app-sidebar.tsx b/apps/mimic-admin/src/components/app-sidebar.tsx
index 8e3e1d318..ba2431180 100644
--- a/apps/mimic-admin/src/components/app-sidebar.tsx
+++ b/apps/mimic-admin/src/components/app-sidebar.tsx
@@ -1,6 +1,6 @@
 import { useQuery } from "@tanstack/react-query";
 import { Link, useMatchRoute } from "@tanstack/react-router";
-import { Database, FileText, Activity, Workflow, Users, LogOut } from "lucide-react";
+import { Activity, Database, FileText, LogOut, Users } from "lucide-react";
 
 import { useAuth } from "@/components/auth-context";
 import { useDatabase } from "@/components/database-context";
@@ -28,7 +28,6 @@ export function AppSidebar() {
 
   const navItems = [
     { to: "/databases" as const, label: "Databases", icon: Database },
-    { to: "/migrations" as const, label: "Migrations", icon: Workflow },
     { to: "/users" as const, label: "Users", icon: Users },
     { to: "/observability" as const, label: "Observability", icon: Activity },
   ];
diff --git a/apps/mimic-admin/src/lib/queries.ts b/apps/mimic-admin/src/lib/queries.ts
index 8ea82825b..6751cec1d 100644
--- a/apps/mimic-admin/src/lib/queries.ts
+++ b/apps/mimic-admin/src/lib/queries.ts
@@ -23,6 +23,7 @@ interface UiCollectionInfo {
   readonly name: string;
   readonly schemaJson: unknown;
   readonly schemaVersion: number;
+  readonly migrationVersion: number | null;
 }
 
 const mapCollection = (collection: {
@@ -31,98 +32,16 @@ const mapCollection = (collection: {
   readonly name: string;
   readonly schema: unknown;
   readonly schemaVersion: number;
+  readonly migrationVersion: number | null;
 }): UiCollectionInfo => ({
   id: collection.id,
   databaseId: collection.databaseId,
   name: collection.name,
   schemaJson: collection.schema,
   schemaVersion: collection.schemaVersion,
+  migrationVersion: collection.migrationVersion,
 });
 
-export interface UiMigrationChange {
-  readonly type: "create" | "update";
-  readonly collection: string;
-  readonly schemaJson: unknown;
-  readonly oldSchemaJson?: unknown;
-  readonly skipIfExists?: boolean;
-  readonly dataMigrationSource?: string;
-}
-
-const mapMigrationChange = (change: {
-  readonly type: "create" | "update";
-  readonly collection: string;
-  readonly schema: unknown;
-  readonly oldSchema?: unknown;
-  readonly skipIfExists?: boolean;
-  readonly dataMigrationSource?: string;
-}): UiMigrationChange =>
-  change.type === "create"
-    ? {
-        type: "create",
-        collection: change.collection,
-        schemaJson: change.schema,
-        skipIfExists: change.skipIfExists,
-      }
-    : {
-        type: "update",
-        collection: change.collection,
-        schemaJson: change.schema,
-        oldSchemaJson: change.oldSchema,
-        dataMigrationSource: change.dataMigrationSource,
-      };
-
-export type MigrationRunState = "running" | "succeeded" | "failed" | "replaced" | "unknown";
-
-export interface UiDatabaseMigration {
-  readonly version: number;
-  readonly name: string;
-  readonly checksum: string;
-  readonly appliedAt?: string;
-  readonly state: MigrationRunState;
-  readonly totalDocuments: number;
-  readonly succeededDocuments: number;
-  readonly failedDocuments: number;
-  readonly changes?: ReadonlyArray<UiMigrationChange>;
-}
-
-export interface UiMigrationStatus {
-  readonly databaseId: string;
-  readonly version: number;
-  readonly state: MigrationRunState;
-  readonly checksum?: string;
-  readonly summary: {
-    readonly pending: number;
-    readonly running: number;
-    readonly succeeded: number;
-    readonly failed: number;
-    readonly skipped: number;
-  };
-  readonly failures: ReadonlyArray<{
-    readonly documentId: string;
-    readonly collectionId: string;
-    readonly attempt: number;
-    readonly errorCode?: string;
-    readonly errorMessage?: string;
-  }>;
-}
-
-export interface UiMigrationRunReport {
-  readonly databaseId: string;
-  readonly version: number;
-  readonly state: "succeeded" | "failed";
-  readonly succeeded: number;
-  readonly failed: number;
-  readonly skipped: number;
-  readonly perDocument: ReadonlyArray<{
-    readonly collectionId: string;
-    readonly documentId: string;
-    readonly status: "succeeded" | "failed" | "skipped";
-    readonly errorCode?: string;
-    readonly errorMessage?: string;
-  }>;
-  readonly dryRun: boolean;
-}
-
 export const databasesQuery = (sdk: MimicSDK) =>
   queryOptions({
     queryKey: ["databases"],
@@ -140,65 +59,6 @@ export const collectionsQuery = (sdk: MimicSDK, databaseId: string) =>
     enabled: !!databaseId,
   });
 
-export const databaseMigrationsQuery = (sdk: MimicSDK, databaseId: string) =>
-  queryOptions({
-    queryKey: ["database-migrations", databaseId],
-    queryFn: () =>
-      sdk
-        .database(databaseId)
-        .listMigrations()
-        .then((migrations) =>
-          migrations.map(
-            (migration): UiDatabaseMigration => ({
-              version: migration.version,
-              name: migration.name,
-              checksum: migration.checksum,
-              appliedAt: migration.appliedAt,
-              // Older server versions may not return state/counts; fall
-              // back to "succeeded" / 0 so the UI stays well-typed.
-              state: (migration.state ?? "succeeded") as MigrationRunState,
-              totalDocuments: migration.totalDocuments ?? 0,
-              succeededDocuments: migration.succeededDocuments ?? 0,
-              failedDocuments: migration.failedDocuments ?? 0,
-              changes: migration.changes?.map(mapMigrationChange),
-            }),
-          ),
-        ),
-    enabled: !!databaseId,
-  });
-
-export const migrationStatusQuery = (sdk: MimicSDK, databaseId: string, version: number | null) =>
-  queryOptions({
-    queryKey: ["migration-status", databaseId, version],
-    queryFn: () =>
-      sdk
-        .database(databaseId)
-        .getMigrationStatus(version!)
-        .then(
-          (status): UiMigrationStatus => ({
-            databaseId: status.databaseId,
-            version: status.version,
-            state: status.state as MigrationRunState,
-            checksum: status.checksum,
-            summary: {
-              pending: status.summary.pending,
-              running: status.summary.running,
-              succeeded: status.summary.succeeded,
-              failed: status.summary.failed,
-              skipped: status.summary.skipped,
-            },
-            failures: status.failures.map((failure) => ({
-              documentId: failure.documentId,
-              collectionId: failure.collectionId,
-              attempt: failure.attempt,
-              errorCode: failure.errorCode,
-              errorMessage: failure.errorMessage,
-            })),
-          }),
-        ),
-    enabled: !!databaseId && version !== null,
-  });
-
 export const documentsQuery = (sdk: MimicSDK, collectionId: string) =>
   queryOptions({
     queryKey: ["documents", collectionId],
diff --git a/apps/mimic-admin/src/routeTree.gen.ts b/apps/mimic-admin/src/routeTree.gen.ts
index 078d9b836..e1e5f2a07 100644
--- a/apps/mimic-admin/src/routeTree.gen.ts
+++ b/apps/mimic-admin/src/routeTree.gen.ts
@@ -13,7 +13,6 @@ import { Route as LoginRouteImport } from "./routes/login";
 import { Route as AppRouteRouteImport } from "./routes/_app/route";
 import { Route as AppLayoutRouteRouteImport } from "./routes/_app/_layout/route";
 import { Route as AppLayoutIndexRouteImport } from "./routes/_app/_layout/index";
-import { Route as AppLayoutMigrationsRouteImport } from "./routes/_app/_layout/migrations";
 import { Route as AppLayoutUsersRouteImport } from "./routes/_app/_layout/users";
 import { Route as AppLayoutObservabilityRouteImport } from "./routes/_app/_layout/observability";
 import { Route as AppLayoutDatabasesRouteImport } from "./routes/_app/_layout/databases";
@@ -39,11 +38,6 @@ const AppLayoutIndexRoute = AppLayoutIndexRouteImport.update({
   path: "/",
   getParentRoute: () => AppLayoutRouteRoute,
 } as any);
-const AppLayoutMigrationsRoute = AppLayoutMigrationsRouteImport.update({
-  id: "/migrations",
-  path: "/migrations",
-  getParentRoute: () => AppLayoutRouteRoute,
-} as any);
 const AppLayoutUsersRoute = AppLayoutUsersRouteImport.update({
   id: "/users",
   path: "/users",
@@ -82,7 +76,6 @@ export interface FileRoutesByFullPath {
   "/": typeof AppLayoutIndexRoute;
   "/login": typeof LoginRoute;
   "/databases": typeof AppLayoutDatabasesRoute;
-  "/migrations": typeof AppLayoutMigrationsRoute;
   "/observability": typeof AppLayoutObservabilityRoute;
   "/users": typeof AppLayoutUsersRoute;
   "/collections/$collectionId/schema": typeof AppLayoutCollectionsCollectionIdSchemaRoute;
@@ -93,7 +86,6 @@ export interface FileRoutesByTo {
   "/": typeof AppLayoutIndexRoute;
   "/login": typeof LoginRoute;
   "/databases": typeof AppLayoutDatabasesRoute;
-  "/migrations": typeof AppLayoutMigrationsRoute;
   "/observability": typeof AppLayoutObservabilityRoute;
   "/users": typeof AppLayoutUsersRoute;
   "/collections/$collectionId/schema": typeof AppLayoutCollectionsCollectionIdSchemaRoute;
@@ -106,7 +98,6 @@ export interface FileRoutesById {
   "/login": typeof LoginRoute;
   "/_app/_layout": typeof AppLayoutRouteRouteWithChildren;
   "/_app/_layout/databases": typeof AppLayoutDatabasesRoute;
-  "/_app/_layout/migrations": typeof AppLayoutMigrationsRoute;
   "/_app/_layout/observability": typeof AppLayoutObservabilityRoute;
   "/_app/_layout/users": typeof AppLayoutUsersRoute;
   "/_app/_layout/": typeof AppLayoutIndexRoute;
@@ -120,7 +111,6 @@ export interface FileRouteTypes {
     | "/"
     | "/login"
     | "/databases"
-    | "/migrations"
     | "/observability"
     | "/users"
     | "/collections/$collectionId/schema"
@@ -131,7 +121,6 @@ export interface FileRouteTypes {
     | "/"
     | "/login"
     | "/databases"
-    | "/migrations"
     | "/observability"
     | "/users"
     | "/collections/$collectionId/schema"
@@ -143,7 +132,6 @@ export interface FileRouteTypes {
     | "/login"
     | "/_app/_layout"
     | "/_app/_layout/databases"
-    | "/_app/_layout/migrations"
     | "/_app/_layout/observability"
     | "/_app/_layout/users"
     | "/_app/_layout/"
@@ -194,13 +182,6 @@ declare module "@tanstack/react-router" {
       preLoaderRoute: typeof AppLayoutUsersRouteImport;
       parentRoute: typeof AppLayoutRouteRoute;
     };
-    "/_app/_layout/migrations": {
-      id: "/_app/_layout/migrations";
-      path: "/migrations";
-      fullPath: "/migrations";
-      preLoaderRoute: typeof AppLayoutMigrationsRouteImport;
-      parentRoute: typeof AppLayoutRouteRoute;
-    };
     "/_app/_layout/observability": {
       id: "/_app/_layout/observability";
       path: "/observability";
@@ -241,7 +222,6 @@ declare module "@tanstack/react-router" {
 
 interface AppLayoutRouteRouteChildren {
   AppLayoutDatabasesRoute: typeof AppLayoutDatabasesRoute;
-  AppLayoutMigrationsRoute: typeof AppLayoutMigrationsRoute;
   AppLayoutObservabilityRoute: typeof AppLayoutObservabilityRoute;
   AppLayoutUsersRoute: typeof AppLayoutUsersRoute;
   AppLayoutIndexRoute: typeof AppLayoutIndexRoute;
@@ -252,7 +232,6 @@ interface AppLayoutRouteRouteChildren {
 
 const AppLayoutRouteRouteChildren: AppLayoutRouteRouteChildren = {
   AppLayoutDatabasesRoute: AppLayoutDatabasesRoute,
-  AppLayoutMigrationsRoute: AppLayoutMigrationsRoute,
   AppLayoutObservabilityRoute: AppLayoutObservabilityRoute,
   AppLayoutUsersRoute: AppLayoutUsersRoute,
   AppLayoutIndexRoute: AppLayoutIndexRoute,
diff --git a/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx
index 7ca124214..e8dbf778f 100644
--- a/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx
+++ b/apps/mimic-admin/src/routes/_app/_layout/collections/$collectionId/schema.tsx
@@ -1,14 +1,9 @@
-import { useEffect, useState } from "react";
-import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { useQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
-import { toast } from "sonner";
 
 import { useMimicSdk } from "@/components/sdk-context";
 import { useDatabase } from "@/components/database-context";
-import { Button } from "@/components/ui/button";
 import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { Label } from "@/components/ui/label";
-import { Textarea } from "@/components/ui/textarea";
 import { collectionsQuery } from "@/lib/queries";
 
 export const Route = createFileRoute("/_app/_layout/collections/$collectionId/schema")({
@@ -19,36 +14,13 @@ function SchemaPage() {
   const { collectionId } = Route.useParams();
   const sdk = useMimicSdk();
   const { selectedDatabaseId } = useDatabase();
-  const queryClient = useQueryClient();
   const { data: collections } = useQuery({
     ...collectionsQuery(sdk, selectedDatabaseId ?? ""),
     enabled: !!selectedDatabaseId,
   });
 
-  const [schemaJson, setSchemaJson] = useState("{}");
   const collection = collections?.find((entry) => entry.id === collectionId);
 
-  useEffect(() => {
-    if (!collection) {
-      return;
-    }
-    setSchemaJson(JSON.stringify(collection.schemaJson, null, 2));
-  }, [collection]);
-
-  const updateMutation = useMutation({
-    mutationFn: () => {
-      const parsed = JSON.parse(schemaJson);
-      return sdk.database(selectedDatabaseId ?? "").updateCollectionSchemaRaw(collectionId, parsed);
-    },
-    onSuccess: (result) => {
-      queryClient.invalidateQueries({
-        queryKey: ["collections"],
-      });
-      toast.success(`Schema updated to version ${result.schemaVersion}`);
-    },
-    onError: (err) => toast.error(`Failed to update schema: ${err.message}`),
-  });
-
   return (
     <div className="space-y-6">
       <div>
@@ -58,33 +30,18 @@ function SchemaPage() {
 
       <Card>
         <CardHeader>
-          <CardTitle>Update Schema</CardTitle>
+          <CardTitle>Managed Schema</CardTitle>
         </CardHeader>
-        <CardContent>
-          <form
-            onSubmit={(e) => {
-              e.preventDefault();
-              try {
-                JSON.parse(schemaJson);
-                updateMutation.mutate();
-              } catch {
-                toast.error("Invalid JSON");
-              }
-            }}
-            className="grid gap-4"
-          >
-            <div className="grid gap-2">
-              <Label>Schema JSON</Label>
-              <Textarea
-                value={schemaJson}
-                onChange={(e) => setSchemaJson(e.target.value)}
-                className="min-h-[300px] font-mono text-sm"
-              />
-            </div>
-            <Button type="submit" disabled={updateMutation.isPending} className="w-fit">
-              {updateMutation.isPending ? "Updating..." : "Update Schema"}
-            </Button>
-          </form>
+        <CardContent className="space-y-4">
+          <p className="text-sm text-muted-foreground">
+            This schema is managed by deployed migrations and is read-only here.
+          </p>
+          <p className="text-sm">
+            Migration version: {collection?.migrationVersion ?? "unmanaged"}
+          </p>
+          <pre className="max-h-[500px] overflow-auto rounded-md bg-muted p-4 text-xs">
+            {JSON.stringify(collection?.schemaJson ?? {}, null, 2)}
+          </pre>
         </CardContent>
       </Card>
     </div>
diff --git a/apps/mimic-admin/src/routes/_app/_layout/migrations.tsx b/apps/mimic-admin/src/routes/_app/_layout/migrations.tsx
deleted file mode 100644
index 3b152bbac..000000000
--- a/apps/mimic-admin/src/routes/_app/_layout/migrations.tsx
+++ /dev/null
@@ -1,905 +0,0 @@
-import { useEffect, useState } from "react";
-import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
-import { createFileRoute } from "@tanstack/react-router";
-import {
-  AlertCircle,
-  Braces,
-  CheckCircle2,
-  Code2,
-  DatabaseZap,
-  FlaskConical,
-  PlayCircle,
-  RefreshCw,
-  Replace,
-  Wrench,
-} from "lucide-react";
-import { toast } from "sonner";
-
-import { useMimicSdk } from "@/components/sdk-context";
-import { useDatabase } from "@/components/database-context";
-import { Badge } from "@/components/ui/badge";
-import { Button } from "@/components/ui/button";
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@/components/ui/card";
-import {
-  Dialog,
-  DialogClose,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  DialogTrigger,
-} from "@/components/ui/dialog";
-import { Input } from "@/components/ui/input";
-import { Label } from "@/components/ui/label";
-import { ScrollArea } from "@/components/ui/scroll-area";
-import { Separator } from "@/components/ui/separator";
-import {
-  Table,
-  TableBody,
-  TableCell,
-  TableHead,
-  TableHeader,
-  TableRow,
-} from "@/components/ui/table";
-import { Textarea } from "@/components/ui/textarea";
-import {
-  databaseMigrationsQuery,
-  databasesQuery,
-  migrationStatusQuery,
-  type MigrationRunState,
-  type UiDatabaseMigration,
-  type UiMigrationChange,
-  type UiMigrationRunReport,
-} from "@/lib/queries";
-
-export const Route = createFileRoute("/_app/_layout/migrations")({
-  component: MigrationsPage,
-});
-
-function formatMigrationVersion(version: number) {
-  return String(version).padStart(5, "0");
-}
-
-function getMigrationSourcePath(migration: { version: number; name: string }) {
-  return `migrations/${formatMigrationVersion(migration.version)}_${migration.name}.ts`;
-}
-
-function formatAppliedAt(value?: string) {
-  if (!value) {
-    return "Unknown";
-  }
-
-  return new Intl.DateTimeFormat(undefined, {
-    dateStyle: "medium",
-    timeStyle: "short",
-  }).format(new Date(value));
-}
-
-function formatChangeTitle(change: UiMigrationChange) {
-  if (change.type === "create") {
-    return change.skipIfExists
-      ? `Create ${change.collection} if missing`
-      : `Create ${change.collection}`;
-  }
-
-  return `Update ${change.collection}`;
-}
-
-function stateBadge(state: MigrationRunState) {
-  const props = (() => {
-    switch (state) {
-      case "succeeded":
-        return { label: "Succeeded", variant: "default" as const };
-      case "running":
-        return { label: "Running", variant: "secondary" as const };
-      case "failed":
-        return { label: "Failed", variant: "destructive" as const };
-      case "replaced":
-        return { label: "Replaced", variant: "outline" as const };
-      default:
-        return { label: "Unknown", variant: "outline" as const };
-    }
-  })();
-  return <Badge variant={props.variant}>{props.label}</Badge>;
-}
-
-// Convert UI shape back to the wire shape the server expects. The runner
-// normalizes everything internally; we just need the JSON-ish fields named
-// the way the wire wants them (`schema`, `oldSchema` instead of
-// `schemaJson`, `oldSchemaJson`).
-function uiChangeToWire(change: UiMigrationChange) {
-  if (change.type === "create") {
-    return {
-      type: "create" as const,
-      collection: change.collection,
-      schema: change.schemaJson,
-      skipIfExists: change.skipIfExists,
-    };
-  }
-  return {
-    type: "update" as const,
-    collection: change.collection,
-    schema: change.schemaJson,
-    oldSchema: change.oldSchemaJson,
-    dataMigrationSource: change.dataMigrationSource,
-  };
-}
-
-function MigrationsPage() {
-  const sdk = useMimicSdk();
-  const queryClient = useQueryClient();
-  const { selectedDatabaseId } = useDatabase();
-  const [selectedVersion, setSelectedVersion] = useState<number | null>(null);
-  const [lastReport, setLastReport] = useState<UiMigrationRunReport | null>(null);
-  const [dryRunSampleLimit, setDryRunSampleLimit] = useState<string>("10");
-  const [dryRunSamplePercent, setDryRunSamplePercent] = useState<string>("");
-  const [batchSize, setBatchSize] = useState<string>("");
-
-  const { data: databases } = useQuery(databasesQuery(sdk));
-  const {
-    data: migrations,
-    isLoading,
-    isError,
-    error,
-  } = useQuery({
-    ...databaseMigrationsQuery(sdk, selectedDatabaseId ?? ""),
-    enabled: !!selectedDatabaseId,
-  });
-
-  const selectedDatabase = databases?.find((database) => database.id === selectedDatabaseId);
-  const typedMigrations = (migrations ?? []) as ReadonlyArray<UiDatabaseMigration>;
-
-  useEffect(() => {
-    if (typedMigrations.length === 0) {
-      setSelectedVersion(null);
-      return;
-    }
-
-    setSelectedVersion((current) =>
-      current !== null && typedMigrations.some((migration) => migration.version === current)
-        ? current
-        : typedMigrations[typedMigrations.length - 1]!.version,
-    );
-  }, [typedMigrations]);
-
-  const selectedMigration =
-    typedMigrations.find((migration) => migration.version === selectedVersion) ??
-    typedMigrations[typedMigrations.length - 1];
-
-  const { data: status, isFetching: statusFetching } = useQuery({
-    ...migrationStatusQuery(sdk, selectedDatabaseId ?? "", selectedMigration?.version ?? null),
-    enabled: !!selectedDatabaseId && !!selectedMigration,
-  });
-
-  const refresh = () => {
-    if (!selectedDatabaseId) {
-      return;
-    }
-    queryClient.invalidateQueries({
-      queryKey: ["database-migrations", selectedDatabaseId],
-    });
-    queryClient.invalidateQueries({
-      queryKey: ["migration-status", selectedDatabaseId],
-    });
-  };
-
-  const parsedBatchSize = batchSize.trim() === "" ? undefined : Number(batchSize);
-  const parsedSampleLimit = dryRunSampleLimit.trim() === "" ? undefined : Number(dryRunSampleLimit);
-  const parsedSamplePercent =
-    dryRunSamplePercent.trim() === "" ? undefined : Number(dryRunSamplePercent);
-
-  const rerunMutation = useMutation({
-    mutationFn: async () => {
-      if (!selectedDatabaseId || !selectedMigration?.changes) {
-        throw new Error("No selected migration with changes");
-      }
-      const handle = sdk.database(selectedDatabaseId);
-      return handle.applyMigration({
-        version: selectedMigration.version,
-        name: selectedMigration.name,
-        checksum: selectedMigration.checksum,
-        changes: selectedMigration.changes.map(uiChangeToWire),
-        mode: "rerun",
-        batchSize: parsedBatchSize,
-      });
-    },
-    onSuccess: (report) => {
-      setLastReport(report as unknown as UiMigrationRunReport);
-      refresh();
-      if (report.state === "succeeded") {
-        toast.success(`Rerun succeeded (${report.succeeded} migrated, ${report.skipped} skipped).`);
-      } else {
-        toast.error(`Rerun finished with ${report.failed} failure(s). See report below.`);
-      }
-    },
-    onError: (err: Error) => toast.error(`Rerun failed: ${err.message}`),
-  });
-
-  const dryRunMutation = useMutation({
-    mutationFn: async () => {
-      if (!selectedDatabaseId || !selectedMigration?.changes) {
-        throw new Error("No selected migration with changes");
-      }
-      const handle = sdk.database(selectedDatabaseId);
-      return handle.applyMigration({
-        version: selectedMigration.version,
-        name: selectedMigration.name,
-        checksum: selectedMigration.checksum,
-        changes: selectedMigration.changes.map(uiChangeToWire),
-        mode: "apply",
-        dryRun: {
-          limit: parsedSampleLimit,
-          samplePercent: parsedSamplePercent,
-        },
-        batchSize: parsedBatchSize,
-      });
-    },
-    onSuccess: (report) => {
-      setLastReport(report as unknown as UiMigrationRunReport);
-      if (report.state === "succeeded") {
-        toast.success(
-          `Dry run succeeded against ${report.succeeded + report.failed + report.skipped} sampled doc(s).`,
-        );
-      } else {
-        toast.error(`Dry run reported ${report.failed} failure(s). See report below.`);
-      }
-    },
-    onError: (err: Error) => toast.error(`Dry run failed: ${err.message}`),
-  });
-
-  if (!selectedDatabaseId) {
-    return (
-      <div className="space-y-6">
-        <h2 className="text-2xl font-bold">Migrations</h2>
-        <Card>
-          <CardHeader>
-            <CardTitle>Select a database</CardTitle>
-            <CardDescription>
-              Migrations are database-specific. Pick a database from the sidebar to inspect its
-              applied migrations.
-            </CardDescription>
-          </CardHeader>
-        </Card>
-      </div>
-    );
-  }
-
-  return (
-    <div className="space-y-6">
-      <div className="flex flex-col gap-3 md:flex-row md:items-end md:justify-between">
-        <div className="space-y-1">
-          <h2 className="text-2xl font-bold">Migrations</h2>
-          <p className="text-sm text-muted-foreground">
-            Inspect, retry, dry-run, and replace migrations for{" "}
-            <span className="font-medium text-foreground">
-              {selectedDatabase?.name ?? selectedDatabaseId}
-            </span>
-            .
-          </p>
-        </div>
-        <div className="flex items-center gap-2">
-          <Button variant="outline" size="sm" onClick={refresh}>
-            <RefreshCw className="mr-2 h-4 w-4" /> Refresh
-          </Button>
-          <Badge variant="secondary">
-            {typedMigrations.length} migration
-            {typedMigrations.length === 1 ? "" : "s"}
-          </Badge>
-        </div>
-      </div>
-
-      {isLoading ? (
-        <p className="text-muted-foreground">Loading migrations...</p>
-      ) : isError ? (
-        <p className="text-destructive">Failed to load migrations: {error.message}</p>
-      ) : typedMigrations.length === 0 ? (
-        <Card>
-          <CardHeader>
-            <CardTitle>No applied migrations</CardTitle>
-            <CardDescription>
-              This database does not have any applied migrations yet.
-            </CardDescription>
-          </CardHeader>
-        </Card>
-      ) : (
-        <div className="grid gap-6 xl:grid-cols-[320px_minmax(0,1fr)]">
-          <Card>
-            <CardHeader>
-              <CardTitle>Applied Migrations</CardTitle>
-              <CardDescription>
-                Select a migration to inspect its run state and stored payload.
-              </CardDescription>
-            </CardHeader>
-            <CardContent className="space-y-2">
-              {typedMigrations.map((migration) => {
-                const isActive = migration.version === selectedMigration?.version;
-                return (
-                  <Button
-                    key={migration.version}
-                    type="button"
-                    variant={isActive ? "secondary" : "ghost"}
-                    className="h-auto w-full justify-start px-3 py-3 text-left"
-                    onClick={() => setSelectedVersion(migration.version)}
-                  >
-                    <div className="space-y-1 w-full">
-                      <div className="flex items-center justify-between">
-                        <div className="font-mono text-xs text-muted-foreground">
-                          {formatMigrationVersion(migration.version)}
-                        </div>
-                        {stateBadge(migration.state)}
-                      </div>
-                      <div className="font-medium">{migration.name}</div>
-                      <div className="text-xs text-muted-foreground">
-                        {formatAppliedAt(migration.appliedAt)}
-                      </div>
-                      {migration.totalDocuments > 0 ? (
-                        <div className="text-xs text-muted-foreground">
-                          {migration.succeededDocuments}/{migration.totalDocuments} docs
-                          {migration.failedDocuments > 0
-                            ? ` · ${migration.failedDocuments} failed`
-                            : ""}
-                        </div>
-                      ) : null}
-                    </div>
-                  </Button>
-                );
-              })}
-            </CardContent>
-          </Card>
-
-          {selectedMigration ? (
-            <div className="space-y-6">
-              <Card>
-                <CardHeader>
-                  <CardTitle className="flex items-center gap-2">
-                    <DatabaseZap className="h-5 w-5" />
-                    {formatMigrationVersion(selectedMigration.version)}_{selectedMigration.name}
-                  </CardTitle>
-                  <CardDescription>Stored migration record and run state.</CardDescription>
-                </CardHeader>
-                <CardContent className="grid gap-4 md:grid-cols-2">
-                  <div className="space-y-1">
-                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                      State
-                    </div>
-                    <div className="text-sm">{stateBadge(selectedMigration.state)}</div>
-                  </div>
-                  <div className="space-y-1">
-                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                      Documents
-                    </div>
-                    <div className="text-sm">
-                      {selectedMigration.succeededDocuments}/{selectedMigration.totalDocuments}{" "}
-                      succeeded
-                      {selectedMigration.failedDocuments > 0
-                        ? ` · ${selectedMigration.failedDocuments} failed`
-                        : ""}
-                    </div>
-                  </div>
-                  <div className="space-y-1">
-                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                      Source file
-                    </div>
-                    <div className="font-mono text-sm">
-                      {getMigrationSourcePath(selectedMigration)}
-                    </div>
-                  </div>
-                  <div className="space-y-1">
-                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                      Applied at
-                    </div>
-                    <div className="text-sm">{formatAppliedAt(selectedMigration.appliedAt)}</div>
-                  </div>
-                  <div className="space-y-1 md:col-span-2">
-                    <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                      Checksum
-                    </div>
-                    <div className="break-all font-mono text-xs text-muted-foreground">
-                      {selectedMigration.checksum}
-                    </div>
-                  </div>
-                </CardContent>
-              </Card>
-
-              <Card>
-                <CardHeader>
-                  <CardTitle className="flex items-center gap-2">
-                    <Wrench className="h-5 w-5" />
-                    Run Actions
-                  </CardTitle>
-                  <CardDescription>
-                    Re-run failed/pending docs, simulate against a sample, or install a fixed
-                    version under a new checksum.
-                  </CardDescription>
-                </CardHeader>
-                <CardContent className="space-y-4">
-                  <div className="grid gap-3 sm:grid-cols-3">
-                    <div className="space-y-1">
-                      <Label htmlFor="batch-size">Batch size</Label>
-                      <Input
-                        id="batch-size"
-                        type="number"
-                        min={1}
-                        placeholder="default"
-                        value={batchSize}
-                        onChange={(event) => setBatchSize(event.target.value)}
-                      />
-                    </div>
-                    <div className="space-y-1">
-                      <Label htmlFor="sample-limit">Dry-run sample limit</Label>
-                      <Input
-                        id="sample-limit"
-                        type="number"
-                        min={0}
-                        placeholder="e.g. 10"
-                        value={dryRunSampleLimit}
-                        onChange={(event) => setDryRunSampleLimit(event.target.value)}
-                      />
-                    </div>
-                    <div className="space-y-1">
-                      <Label htmlFor="sample-percent">Dry-run sample percent</Label>
-                      <Input
-                        id="sample-percent"
-                        type="number"
-                        min={0}
-                        max={100}
-                        placeholder="e.g. 25"
-                        value={dryRunSamplePercent}
-                        onChange={(event) => setDryRunSamplePercent(event.target.value)}
-                      />
-                    </div>
-                  </div>
-
-                  <div className="flex flex-wrap gap-2">
-                    <Button
-                      variant="default"
-                      disabled={!selectedMigration.changes || rerunMutation.isPending}
-                      onClick={() => rerunMutation.mutate()}
-                    >
-                      <PlayCircle className="mr-2 h-4 w-4" />
-                      {rerunMutation.isPending ? "Rerunning..." : "Rerun"}
-                    </Button>
-                    <Button
-                      variant="outline"
-                      disabled={!selectedMigration.changes || dryRunMutation.isPending}
-                      onClick={() => dryRunMutation.mutate()}
-                    >
-                      <FlaskConical className="mr-2 h-4 w-4" />
-                      {dryRunMutation.isPending ? "Running..." : "Dry-run on sample"}
-                    </Button>
-                    <ReplaceMigrationDialog
-                      selectedDatabaseId={selectedDatabaseId}
-                      selectedMigration={selectedMigration}
-                      parsedBatchSize={parsedBatchSize}
-                      onCompleted={(report) => {
-                        setLastReport(report);
-                        refresh();
-                      }}
-                    />
-                  </div>
-
-                  {!selectedMigration.changes ? (
-                    <p className="text-xs text-muted-foreground">
-                      This migration was applied before the server stored the change payload. Rerun
-                      and dry-run are unavailable.
-                    </p>
-                  ) : null}
-                </CardContent>
-              </Card>
-
-              <MigrationStatusCard status={status ?? null} isFetching={statusFetching} />
-
-              {lastReport ? <RunReportCard report={lastReport} /> : null}
-
-              <Card>
-                <CardHeader>
-                  <CardTitle className="flex items-center gap-2">
-                    <Braces className="h-5 w-5" />
-                    Applied Change Payload
-                  </CardTitle>
-                  <CardDescription>
-                    Raw stored migration changes returned by the server.
-                  </CardDescription>
-                </CardHeader>
-                <CardContent>
-                  <ScrollArea className="h-80 rounded-md border">
-                    <pre className="p-4 text-xs">
-                      {JSON.stringify(selectedMigration.changes ?? null, null, 2)}
-                    </pre>
-                  </ScrollArea>
-                </CardContent>
-              </Card>
-
-              {selectedMigration.changes?.map((change, index) => (
-                <Card key={`${selectedMigration.version}-${change.collection}-${index}`}>
-                  <CardHeader>
-                    <CardTitle>{formatChangeTitle(change)}</CardTitle>
-                    <CardDescription>
-                      Collection <span className="font-mono">{change.collection}</span>
-                    </CardDescription>
-                  </CardHeader>
-                  <CardContent className="space-y-4">
-                    <div className="grid gap-4 lg:grid-cols-2">
-                      <div className="space-y-2">
-                        <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                          New schema JSON
-                        </div>
-                        <ScrollArea className="h-64 rounded-md border">
-                          <pre className="p-4 text-xs">
-                            {JSON.stringify(change.schemaJson, null, 2)}
-                          </pre>
-                        </ScrollArea>
-                      </div>
-
-                      {"oldSchemaJson" in change && change.oldSchemaJson !== undefined ? (
-                        <div className="space-y-2">
-                          <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                            Previous schema JSON
-                          </div>
-                          <ScrollArea className="h-64 rounded-md border">
-                            <pre className="p-4 text-xs">
-                              {JSON.stringify(change.oldSchemaJson, null, 2)}
-                            </pre>
-                          </ScrollArea>
-                        </div>
-                      ) : null}
-                    </div>
-
-                    {"dataMigrationSource" in change ? (
-                      change.dataMigrationSource ? (
-                        <div className="space-y-2">
-                          <div className="flex items-center gap-2 text-xs uppercase tracking-wide text-muted-foreground">
-                            <Code2 className="h-4 w-4" />
-                            Bundled data migration source
-                          </div>
-                          <ScrollArea className="h-96 rounded-md border bg-muted/30">
-                            <pre className="p-4 text-xs">{change.dataMigrationSource}</pre>
-                          </ScrollArea>
-                        </div>
-                      ) : (
-                        <p className="text-sm text-muted-foreground">
-                          This schema update did not include a bundled data migration source.
-                        </p>
-                      )
-                    ) : null}
-                  </CardContent>
-                </Card>
-              ))}
-
-              {!selectedMigration.changes && (
-                <Card>
-                  <CardHeader>
-                    <CardTitle>Bundled source unavailable</CardTitle>
-                    <CardDescription>
-                      This migration was applied before the server started storing applied change
-                      payloads.
-                    </CardDescription>
-                  </CardHeader>
-                </Card>
-              )}
-            </div>
-          ) : null}
-        </div>
-      )}
-    </div>
-  );
-}
-
-function MigrationStatusCard({
-  status,
-  isFetching,
-}: {
-  status: import("@/lib/queries").UiMigrationStatus | null;
-  isFetching: boolean;
-}) {
-  return (
-    <Card>
-      <CardHeader>
-        <CardTitle className="flex items-center gap-2">
-          <CheckCircle2 className="h-5 w-5" />
-          Per-Document Status
-        </CardTitle>
-        <CardDescription>
-          Live counts and failure list pulled from{" "}
-          <code className="font-mono">getMigrationStatus</code>.
-        </CardDescription>
-      </CardHeader>
-      <CardContent className="space-y-4">
-        {isFetching && !status ? (
-          <p className="text-sm text-muted-foreground">Loading status...</p>
-        ) : status ? (
-          <>
-            <div className="flex flex-wrap gap-2">
-              <StatusChip label="Succeeded" value={status.summary.succeeded} tone="success" />
-              <StatusChip label="Failed" value={status.summary.failed} tone="destructive" />
-              <StatusChip label="Pending" value={status.summary.pending} />
-              <StatusChip label="Running" value={status.summary.running} />
-              <StatusChip label="Skipped" value={status.summary.skipped} />
-            </div>
-            <Separator />
-            {status.failures.length === 0 ? (
-              <p className="text-sm text-muted-foreground">No failed documents.</p>
-            ) : (
-              <div className="space-y-2">
-                <div className="text-xs uppercase tracking-wide text-muted-foreground">
-                  Failures ({status.failures.length})
-                </div>
-                <Table>
-                  <TableHeader>
-                    <TableRow>
-                      <TableHead>Document</TableHead>
-                      <TableHead>Attempt</TableHead>
-                      <TableHead>Code</TableHead>
-                      <TableHead>Message</TableHead>
-                    </TableRow>
-                  </TableHeader>
-                  <TableBody>
-                    {status.failures.map((failure) => (
-                      <TableRow key={failure.documentId}>
-                        <TableCell className="font-mono text-xs">{failure.documentId}</TableCell>
-                        <TableCell>{failure.attempt}</TableCell>
-                        <TableCell className="font-mono text-xs">
-                          {failure.errorCode ?? "-"}
-                        </TableCell>
-                        <TableCell className="text-xs text-destructive">
-                          {failure.errorMessage ?? "-"}
-                        </TableCell>
-                      </TableRow>
-                    ))}
-                  </TableBody>
-                </Table>
-              </div>
-            )}
-          </>
-        ) : (
-          <p className="text-sm text-muted-foreground">Status not available.</p>
-        )}
-      </CardContent>
-    </Card>
-  );
-}
-
-function StatusChip({
-  label,
-  value,
-  tone,
-}: {
-  label: string;
-  value: number;
-  tone?: "success" | "destructive";
-}) {
-  const variant: "default" | "destructive" | "outline" =
-    tone === "success"
-      ? value > 0
-        ? "default"
-        : "outline"
-      : tone === "destructive"
-        ? value > 0
-          ? "destructive"
-          : "outline"
-        : "outline";
-  return (
-    <Badge variant={variant}>
-      {label}: {value}
-    </Badge>
-  );
-}
-
-function RunReportCard({ report }: { report: UiMigrationRunReport }) {
-  return (
-    <Card>
-      <CardHeader>
-        <CardTitle className="flex items-center gap-2">
-          {report.state === "succeeded" ? (
-            <CheckCircle2 className="h-5 w-5" />
-          ) : (
-            <AlertCircle className="h-5 w-5" />
-          )}
-          Last Run Report{report.dryRun ? " (dry-run)" : ""}
-        </CardTitle>
-        <CardDescription>Outcome of the most-recent rerun, dry-run, or replace.</CardDescription>
-      </CardHeader>
-      <CardContent className="space-y-4">
-        <div className="flex flex-wrap gap-2">
-          <Badge variant={report.state === "succeeded" ? "default" : "destructive"}>
-            {report.state}
-          </Badge>
-          <StatusChip label="Succeeded" value={report.succeeded} tone="success" />
-          <StatusChip label="Failed" value={report.failed} tone="destructive" />
-          <StatusChip label="Skipped" value={report.skipped} />
-        </div>
-        {report.perDocument.some((entry) => entry.status === "failed") ? (
-          <div className="space-y-2">
-            <div className="text-xs uppercase tracking-wide text-muted-foreground">
-              Failed in this run
-            </div>
-            <Table>
-              <TableHeader>
-                <TableRow>
-                  <TableHead>Document</TableHead>
-                  <TableHead>Code</TableHead>
-                  <TableHead>Message</TableHead>
-                </TableRow>
-              </TableHeader>
-              <TableBody>
-                {report.perDocument
-                  .filter((entry) => entry.status === "failed")
-                  .map((entry) => (
-                    <TableRow key={`${entry.collectionId}:${entry.documentId}`}>
-                      <TableCell className="font-mono text-xs">{entry.documentId}</TableCell>
-                      <TableCell className="font-mono text-xs">{entry.errorCode ?? "-"}</TableCell>
-                      <TableCell className="text-xs text-destructive">
-                        {entry.errorMessage ?? "-"}
-                      </TableCell>
-                    </TableRow>
-                  ))}
-              </TableBody>
-            </Table>
-          </div>
-        ) : null}
-      </CardContent>
-    </Card>
-  );
-}
-
-function ReplaceMigrationDialog({
-  selectedDatabaseId,
-  selectedMigration,
-  parsedBatchSize,
-  onCompleted,
-}: {
-  selectedDatabaseId: string;
-  selectedMigration: UiDatabaseMigration;
-  parsedBatchSize: number | undefined;
-  onCompleted: (report: UiMigrationRunReport) => void;
-}) {
-  const sdk = useMimicSdk();
-  const [open, setOpen] = useState(false);
-  const [newName, setNewName] = useState(selectedMigration.name);
-  const [newChecksum, setNewChecksum] = useState("");
-  const [redoSucceeded, setRedoSucceeded] = useState(false);
-  const [changesJson, setChangesJson] = useState("");
-
-  useEffect(() => {
-    if (!open) {
-      return;
-    }
-    setNewName(selectedMigration.name);
-    setNewChecksum("");
-    setRedoSucceeded(false);
-    setChangesJson(
-      JSON.stringify(
-        selectedMigration.changes?.map((change) => uiChangeToWire(change)) ?? [],
-        null,
-        2,
-      ),
-    );
-  }, [open, selectedMigration]);
-
-  const replaceMutation = useMutation({
-    mutationFn: async () => {
-      let parsed: unknown;
-      try {
-        parsed = JSON.parse(changesJson);
-      } catch (err) {
-        throw new Error(
-          `Changes JSON is not valid: ${err instanceof Error ? err.message : String(err)}`,
-        );
-      }
-      if (!Array.isArray(parsed)) {
-        throw new Error("Changes JSON must be an array.");
-      }
-      if (newChecksum.trim() === "") {
-        throw new Error("New checksum is required.");
-      }
-      if (newChecksum === selectedMigration.checksum) {
-        throw new Error("New checksum must differ from the current migration checksum.");
-      }
-      return sdk.database(selectedDatabaseId).applyMigration({
-        version: selectedMigration.version,
-        name: newName,
-        checksum: newChecksum,
-        changes: parsed as never,
-        mode: "replace",
-        batchSize: parsedBatchSize,
-        redoSucceededOnReplace: redoSucceeded,
-      });
-    },
-    onSuccess: (report) => {
-      onCompleted(report as unknown as UiMigrationRunReport);
-      setOpen(false);
-      if (report.state === "succeeded") {
-        toast.success(
-          `Replace succeeded (${report.succeeded} migrated, ${report.skipped} skipped).`,
-        );
-      } else {
-        toast.error(`Replace finished with ${report.failed} failure(s). See report below.`);
-      }
-    },
-    onError: (err: Error) => toast.error(`Replace failed: ${err.message}`),
-  });
-
-  return (
-    <Dialog open={open} onOpenChange={setOpen}>
-      <DialogTrigger asChild>
-        <Button variant="outline" disabled={!selectedMigration.changes}>
-          <Replace className="mr-2 h-4 w-4" />
-          Replace...
-        </Button>
-      </DialogTrigger>
-      <DialogContent className="max-w-3xl">
-        <DialogHeader>
-          <DialogTitle>
-            Replace migration {formatMigrationVersion(selectedMigration.version)}
-          </DialogTitle>
-          <DialogDescription>
-            Install a fixed version of this migration under a new checksum. Failed and pending docs
-            are reset and re-applied. Toggle <em>redo succeeded</em> to also re-process docs that
-            already completed under the old checksum.
-          </DialogDescription>
-        </DialogHeader>
-        <form
-          className="grid gap-4"
-          onSubmit={(event) => {
-            event.preventDefault();
-            replaceMutation.mutate();
-          }}
-        >
-          <div className="grid gap-2">
-            <Label htmlFor="replace-name">Name</Label>
-            <Input
-              id="replace-name"
-              value={newName}
-              onChange={(event) => setNewName(event.target.value)}
-              required
-            />
-          </div>
-          <div className="grid gap-2">
-            <Label htmlFor="replace-checksum">New checksum</Label>
-            <Input
-              id="replace-checksum"
-              value={newChecksum}
-              placeholder={`differ from ${selectedMigration.checksum}`}
-              onChange={(event) => setNewChecksum(event.target.value)}
-              required
-            />
-          </div>
-          <div className="grid gap-2">
-            <Label htmlFor="replace-changes">Changes JSON</Label>
-            <Textarea
-              id="replace-changes"
-              className="font-mono text-xs"
-              rows={14}
-              value={changesJson}
-              onChange={(event) => setChangesJson(event.target.value)}
-              required
-            />
-            <p className="text-xs text-muted-foreground">
-              Wire format. The migration runner normalizes server-side. Pre-filled with the existing
-              change payload.
-            </p>
-          </div>
-          <label className="flex items-center gap-2 text-sm">
-            <input
-              type="checkbox"
-              checked={redoSucceeded}
-              onChange={(event) => setRedoSucceeded(event.target.checked)}
-            />
-            <span>Redo already-succeeded documents</span>
-          </label>
-          <DialogFooter>
-            <DialogClose asChild>
-              <Button type="button" variant="outline">
-                Cancel
-              </Button>
-            </DialogClose>
-            <Button type="submit" disabled={replaceMutation.isPending}>
-              {replaceMutation.isPending ? "Replacing..." : "Replace"}
-            </Button>
-          </DialogFooter>
-        </form>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/apps/mimic-cli/LICENSE.md b/apps/mimic-cli/LICENSE.md
deleted file mode 100644
index be3f7b28e..000000000
--- a/apps/mimic-cli/LICENSE.md
+++ /dev/null
@@ -1,661 +0,0 @@
-                    GNU AFFERO GENERAL PUBLIC LICENSE
-                       Version 3, 19 November 2007
-
- Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-                            Preamble
-
-  The GNU Affero General Public License is a free, copyleft license for
-software and other kinds of works, specifically designed to ensure
-cooperation with the community in the case of network server software.
-
-  The licenses for most software and other practical works are designed
-to take away your freedom to share and change the works.  By contrast,
-our General Public Licenses are intended to guarantee your freedom to
-share and change all versions of a program--to make sure it remains free
-software for all its users.
-
-  When we speak of free software, we are referring to freedom, not
-price.  Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-them if you wish), that you receive source code or can get it if you
-want it, that you can change the software or use pieces of it in new
-free programs, and that you know you can do these things.
-
-  Developers that use our General Public Licenses protect your rights
-with two steps: (1) assert copyright on the software, and (2) offer
-you this License which gives you legal permission to copy, distribute
-and/or modify the software.
-
-  A secondary benefit of defending all users' freedom is that
-improvements made in alternate versions of the program, if they
-receive widespread use, become available for other developers to
-incorporate.  Many developers of free software are heartened and
-encouraged by the resulting cooperation.  However, in the case of
-software used on network servers, this result may fail to come about.
-The GNU General Public License permits making a modified version and
-letting the public access it on a server without ever releasing its
-source code to the public.
-
-  The GNU Affero General Public License is designed specifically to
-ensure that, in such cases, the modified source code becomes available
-to the community.  It requires the operator of a network server to
-provide the source code of the modified version running there to the
-users of that server.  Therefore, public use of a modified version, on
-a publicly accessible server, gives the public access to the source
-code of the modified version.
-
-  An older license, called the Affero General Public License and
-published by Affero, was designed to accomplish similar goals.  This is
-a different license, not a version of the Affero GPL, but Affero has
-released a new version of the Affero GPL which permits relicensing under
-this license.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.
-
-                       TERMS AND CONDITIONS
-
-  0. Definitions.
-
-  "This License" refers to version 3 of the GNU Affero General Public License.
-
-  "Copyright" also means copyright-like laws that apply to other kinds of
-works, such as semiconductor masks.
-
-  "The Program" refers to any copyrightable work licensed under this
-License.  Each licensee is addressed as "you".  "Licensees" and
-"recipients" may be individuals or organizations.
-
-  To "modify" a work means to copy from or adapt all or part of the work
-in a fashion requiring copyright permission, other than the making of an
-exact copy.  The resulting work is called a "modified version" of the
-earlier work or a work "based on" the earlier work.
-
-  A "covered work" means either the unmodified Program or a work based
-on the Program.
-
-  To "propagate" a work means to do anything with it that, without
-permission, would make you directly or secondarily liable for
-infringement under applicable copyright law, except executing it on a
-computer or modifying a private copy.  Propagation includes copying,
-distribution (with or without modification), making available to the
-public, and in some countries other activities as well.
-
-  To "convey" a work means any kind of propagation that enables other
-parties to make or receive copies.  Mere interaction with a user through
-a computer network, with no transfer of a copy, is not conveying.
-
-  An interactive user interface displays "Appropriate Legal Notices"
-to the extent that it includes a convenient and prominently visible
-feature that (1) displays an appropriate copyright notice, and (2)
-tells the user that there is no warranty for the work (except to the
-extent that warranties are provided), that licensees may convey the
-work under this License, and how to view a copy of this License.  If
-the interface presents a list of user commands or options, such as a
-menu, a prominent item in the list meets this criterion.
-
-  1. Source Code.
-
-  The "source code" for a work means the preferred form of the work
-for making modifications to it.  "Object code" means any non-source
-form of a work.
-
-  A "Standard Interface" means an interface that either is an official
-standard defined by a recognized standards body, or, in the case of
-interfaces specified for a particular programming language, one that
-is widely used among developers working in that language.
-
-  The "System Libraries" of an executable work include anything, other
-than the work as a whole, that (a) is included in the normal form of
-packaging a Major Component, but which is not part of that Major
-Component, and (b) serves only to enable use of the work with that
-Major Component, or to implement a Standard Interface for which an
-implementation is available to the public in source code form.  A
-"Major Component", in this context, means a major essential component
-(kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to
-produce the work, or an object code interpreter used to run it.
-
-  The "Corresponding Source" for a work in object code form means all
-the source code needed to generate, install, and (for an executable
-work) run the object code and to modify the work, including scripts to
-control those activities.  However, it does not include the work's
-System Libraries, or general-purpose tools or generally available free
-programs which are used unmodified in performing those activities but
-which are not part of the work.  For example, Corresponding Source
-includes interface definition files associated with source files for
-the work, and the source code for shared libraries and dynamically
-linked subprograms that the work is specifically designed to require,
-such as by intimate data communication or control flow between those
-subprograms and other parts of the work.
-
-  The Corresponding Source need not include anything that users
-can regenerate automatically from other parts of the Corresponding
-Source.
-
-  The Corresponding Source for a work in source code form is that
-same work.
-
-  2. Basic Permissions.
-
-  All rights granted under this License are granted for the term of
-copyright on the Program, and are irrevocable provided the stated
-conditions are met.  This License explicitly affirms your unlimited
-permission to run the unmodified Program.  The output from running a
-covered work is covered by this License only if the output, given its
-content, constitutes a covered work.  This License acknowledges your
-rights of fair use or other equivalent, as provided by copyright law.
-
-  You may make, run and propagate covered works that you do not
-convey, without conditions so long as your license otherwise remains
-in force.  You may convey covered works to others for the sole purpose
-of having them make modifications exclusively for you, or provide you
-with facilities for running those works, provided that you comply with
-the terms of this License in conveying all material for which you do
-not control copyright.  Those thus making or running the covered works
-for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of
-your copyrighted material outside their relationship with you.
-
-  Conveying under any other circumstances is permitted solely under
-the conditions stated below.  Sublicensing is not allowed; section 10
-makes it unnecessary.
-
-  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
-  No covered work shall be deemed part of an effective technological
-measure under any applicable law fulfilling obligations under article
-11 of the WIPO copyright treaty adopted on 20 December 1996, or
-similar laws prohibiting or restricting circumvention of such
-measures.
-
-  When you convey a covered work, you waive any legal power to forbid
-circumvention of technological measures to the extent such circumvention
-is effected by exercising rights under this License with respect to
-the covered work, and you disclaim any intention to limit operation or
-modification of the work as a means of enforcing, against the work's
-users, your or third parties' legal rights to forbid circumvention of
-technological measures.
-
-  4. Conveying Verbatim Copies.
-
-  You may convey verbatim copies of the Program's source code as you
-receive it, in any medium, provided that you conspicuously and
-appropriately publish on each copy an appropriate copyright notice;
-keep intact all notices stating that this License and any
-non-permissive terms added in accord with section 7 apply to the code;
-keep intact all notices of the absence of any warranty; and give all
-recipients a copy of this License along with the Program.
-
-  You may charge any price or no price for each copy that you convey,
-and you may offer support or warranty protection for a fee.
-
-  5. Conveying Modified Source Versions.
-
-  You may convey a work based on the Program, or the modifications to
-produce it from the Program, in the form of source code under the
-terms of section 4, provided that you also meet all of these conditions:
-
-    a) The work must carry prominent notices stating that you modified
-    it, and giving a relevant date.
-
-    b) The work must carry prominent notices stating that it is
-    released under this License and any conditions added under section
-    7.  This requirement modifies the requirement in section 4 to
-    "keep intact all notices".
-
-    c) You must license the entire work, as a whole, under this
-    License to anyone who comes into possession of a copy.  This
-    License will therefore apply, along with any applicable section 7
-    additional terms, to the whole of the work, and all its parts,
-    regardless of how they are packaged.  This License gives no
-    permission to license the work in any other way, but it does not
-    invalidate such permission if you have separately received it.
-
-    d) If the work has interactive user interfaces, each must display
-    Appropriate Legal Notices; however, if the Program has interactive
-    interfaces that do not display Appropriate Legal Notices, your
-    work need not make them do so.
-
-  A compilation of a covered work with other separate and independent
-works, which are not by their nature extensions of the covered work,
-and which are not combined with it such as to form a larger program,
-in or on a volume of a storage or distribution medium, is called an
-"aggregate" if the compilation and its resulting copyright are not
-used to limit the access or legal rights of the compilation's users
-beyond what the individual works permit.  Inclusion of a covered work
-in an aggregate does not cause this License to apply to the other
-parts of the aggregate.
-
-  6. Conveying Non-Source Forms.
-
-  You may convey a covered work in object code form under the terms
-of sections 4 and 5, provided that you also convey the
-machine-readable Corresponding Source under the terms of this License,
-in one of these ways:
-
-    a) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by the
-    Corresponding Source fixed on a durable physical medium
-    customarily used for software interchange.
-
-    b) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by a
-    written offer, valid for at least three years and valid for as
-    long as you offer spare parts or customer support for that product
-    model, to give anyone who possesses the object code either (1) a
-    copy of the Corresponding Source for all the software in the
-    product that is covered by this License, on a durable physical
-    medium customarily used for software interchange, for a price no
-    more than your reasonable cost of physically performing this
-    conveying of source, or (2) access to copy the
-    Corresponding Source from a network server at no charge.
-
-    c) Convey individual copies of the object code with a copy of the
-    written offer to provide the Corresponding Source.  This
-    alternative is allowed only occasionally and noncommercially, and
-    only if you received the object code with such an offer, in accord
-    with subsection 6b.
-
-    d) Convey the object code by offering access from a designated
-    place (gratis or for a charge), and offer equivalent access to the
-    Corresponding Source in the same way through the same place at no
-    further charge.  You need not require recipients to copy the
-    Corresponding Source along with the object code.  If the place to
-    copy the object code is a network server, the Corresponding Source
-    may be on a different server (operated by you or a third party)
-    that supports equivalent copying facilities, provided you maintain
-    clear directions next to the object code saying where to find the
-    Corresponding Source.  Regardless of what server hosts the
-    Corresponding Source, you remain obligated to ensure that it is
-    available for as long as needed to satisfy these requirements.
-
-    e) Convey the object code using peer-to-peer transmission, provided
-    you inform other peers where the object code and Corresponding
-    Source of the work are being offered to the general public at no
-    charge under subsection 6d.
-
-  A separable portion of the object code, whose source code is excluded
-from the Corresponding Source as a System Library, need not be
-included in conveying the object code work.
-
-  A "User Product" is either (1) a "consumer product", which means any
-tangible personal property which is normally used for personal, family,
-or household purposes, or (2) anything designed or sold for incorporation
-into a dwelling.  In determining whether a product is a consumer product,
-doubtful cases shall be resolved in favor of coverage.  For a particular
-product received by a particular user, "normally used" refers to a
-typical or common use of that class of product, regardless of the status
-of the particular user or of the way in which the particular user
-actually uses, or expects or is expected to use, the product.  A product
-is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent
-the only significant mode of use of the product.
-
-  "Installation Information" for a User Product means any methods,
-procedures, authorization keys, or other information required to install
-and execute modified versions of a covered work in that User Product from
-a modified version of its Corresponding Source.  The information must
-suffice to ensure that the continued functioning of the modified object
-code is in no case prevented or interfered with solely because
-modification has been made.
-
-  If you convey an object code work under this section in, or with, or
-specifically for use in, a User Product, and the conveying occurs as
-part of a transaction in which the right of possession and use of the
-User Product is transferred to the recipient in perpetuity or for a
-fixed term (regardless of how the transaction is characterized), the
-Corresponding Source conveyed under this section must be accompanied
-by the Installation Information.  But this requirement does not apply
-if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has
-been installed in ROM).
-
-  The requirement to provide Installation Information does not include a
-requirement to continue to provide support service, warranty, or updates
-for a work that has been modified or installed by the recipient, or for
-the User Product in which it has been modified or installed.  Access to a
-network may be denied when the modification itself materially and
-adversely affects the operation of the network or violates the rules and
-protocols for communication across the network.
-
-  Corresponding Source conveyed, and Installation Information provided,
-in accord with this section must be in a format that is publicly
-documented (and with an implementation available to the public in
-source code form), and must require no special password or key for
-unpacking, reading or copying.
-
-  7. Additional Terms.
-
-  "Additional permissions" are terms that supplement the terms of this
-License by making exceptions from one or more of its conditions.
-Additional permissions that are applicable to the entire Program shall
-be treated as though they were included in this License, to the extent
-that they are valid under applicable law.  If additional permissions
-apply only to part of the Program, that part may be used separately
-under those permissions, but the entire Program remains governed by
-this License without regard to the additional permissions.
-
-  When you convey a copy of a covered work, you may at your option
-remove any additional permissions from that copy, or from any part of
-it.  (Additional permissions may be written to require their own
-removal in certain cases when you modify the work.)  You may place
-additional permissions on material, added by you to a covered work,
-for which you have or can give appropriate copyright permission.
-
-  Notwithstanding any other provision of this License, for material you
-add to a covered work, you may (if authorized by the copyright holders of
-that material) supplement the terms of this License with terms:
-
-    a) Disclaiming warranty or limiting liability differently from the
-    terms of sections 15 and 16 of this License; or
-
-    b) Requiring preservation of specified reasonable legal notices or
-    author attributions in that material or in the Appropriate Legal
-    Notices displayed by works containing it; or
-
-    c) Prohibiting misrepresentation of the origin of that material, or
-    requiring that modified versions of such material be marked in
-    reasonable ways as different from the original version; or
-
-    d) Limiting the use for publicity purposes of names of licensors or
-    authors of the material; or
-
-    e) Declining to grant rights under trademark law for use of some
-    trade names, trademarks, or service marks; or
-
-    f) Requiring indemnification of licensors and authors of that
-    material by anyone who conveys the material (or modified versions of
-    it) with contractual assumptions of liability to the recipient, for
-    any liability that these contractual assumptions directly impose on
-    those licensors and authors.
-
-  All other non-permissive additional terms are considered "further
-restrictions" within the meaning of section 10.  If the Program as you
-received it, or any part of it, contains a notice stating that it is
-governed by this License along with a term that is a further
-restriction, you may remove that term.  If a license document contains
-a further restriction but permits relicensing or conveying under this
-License, you may add to a covered work material governed by the terms
-of that license document, provided that the further restriction does
-not survive such relicensing or conveying.
-
-  If you add terms to a covered work in accord with this section, you
-must place, in the relevant source files, a statement of the
-additional terms that apply to those files, or a notice indicating
-where to find the applicable terms.
-
-  Additional terms, permissive or non-permissive, may be stated in the
-form of a separately written license, or stated as exceptions;
-the above requirements apply either way.
-
-  8. Termination.
-
-  You may not propagate or modify a covered work except as expressly
-provided under this License.  Any attempt otherwise to propagate or
-modify it is void, and will automatically terminate your rights under
-this License (including any patent licenses granted under the third
-paragraph of section 11).
-
-  However, if you cease all violation of this License, then your
-license from a particular copyright holder is reinstated (a)
-provisionally, unless and until the copyright holder explicitly and
-finally terminates your license, and (b) permanently, if the copyright
-holder fails to notify you of the violation by some reasonable means
-prior to 60 days after the cessation.
-
-  Moreover, your license from a particular copyright holder is
-reinstated permanently if the copyright holder notifies you of the
-violation by some reasonable means, this is the first time you have
-received notice of violation of this License (for any work) from that
-copyright holder, and you cure the violation prior to 30 days after
-your receipt of the notice.
-
-  Termination of your rights under this section does not terminate the
-licenses of parties who have received copies or rights from you under
-this License.  If your rights have been terminated and not permanently
-reinstated, you do not qualify to receive new licenses for the same
-material under section 10.
-
-  9. Acceptance Not Required for Having Copies.
-
-  You are not required to accept this License in order to receive or
-run a copy of the Program.  Ancillary propagation of a covered work
-occurring solely as a consequence of using peer-to-peer transmission
-to receive a copy likewise does not require acceptance.  However,
-nothing other than this License grants you permission to propagate or
-modify any covered work.  These actions infringe copyright if you do
-not accept this License.  Therefore, by modifying or propagating a
-covered work, you indicate your acceptance of this License to do so.
-
-  10. Automatic Licensing of Downstream Recipients.
-
-  Each time you convey a covered work, the recipient automatically
-receives a license from the original licensors, to run, modify and
-propagate that work, subject to this License.  You are not responsible
-for enforcing compliance by third parties with this License.
-
-  An "entity transaction" is a transaction transferring control of an
-organization, or substantially all assets of one, or subdividing an
-organization, or merging organizations.  If propagation of a covered
-work results from an entity transaction, each party to that
-transaction who receives a copy of the work also receives whatever
-licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the
-Corresponding Source of the work from the predecessor in interest, if
-the predecessor has it or can get it with reasonable efforts.
-
-  You may not impose any further restrictions on the exercise of the
-rights granted or affirmed under this License.  For example, you may
-not impose a license fee, royalty, or other charge for exercise of
-rights granted under this License, and you may not initiate litigation
-(including a cross-claim or counterclaim in a lawsuit) alleging that
-any patent claim is infringed by making, using, selling, offering for
-sale, or importing the Program or any portion of it.
-
-  11. Patents.
-
-  A "contributor" is a copyright holder who authorizes use under this
-License of the Program or a work on which the Program is based.  The
-work thus licensed is called the contributor's "contributor version".
-
-  A contributor's "essential patent claims" are all patent claims
-owned or controlled by the contributor, whether already acquired or
-hereafter acquired, that would be infringed by some manner, permitted
-by this License, of making, using, or selling its contributor version,
-but do not include claims that would be infringed only as a
-consequence of further modification of the contributor version.  For
-purposes of this definition, "control" includes the right to grant
-patent sublicenses in a manner consistent with the requirements of
-this License.
-
-  Each contributor grants you a non-exclusive, worldwide, royalty-free
-patent license under the contributor's essential patent claims, to
-make, use, sell, offer for sale, import and otherwise run, modify and
-propagate the contents of its contributor version.
-
-  In the following three paragraphs, a "patent license" is any express
-agreement or commitment, however denominated, not to enforce a patent
-(such as an express permission to practice a patent or covenant not to
-sue for patent infringement).  To "grant" such a patent license to a
-party means to make such an agreement or commitment not to enforce a
-patent against the party.
-
-  If you convey a covered work, knowingly relying on a patent license,
-and the Corresponding Source of the work is not available for anyone
-to copy, free of charge and under the terms of this License, through a
-publicly available network server or other readily accessible means,
-then you must either (1) cause the Corresponding Source to be so
-available, or (2) arrange to deprive yourself of the benefit of the
-patent license for this particular work, or (3) arrange, in a manner
-consistent with the requirements of this License, to extend the patent
-license to downstream recipients.  "Knowingly relying" means you have
-actual knowledge that, but for the patent license, your conveying the
-covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that
-country that you have reason to believe are valid.
-
-  If, pursuant to or in connection with a single transaction or
-arrangement, you convey, or propagate by procuring conveyance of, a
-covered work, and grant a patent license to some of the parties
-receiving the covered work authorizing them to use, propagate, modify
-or convey a specific copy of the covered work, then the patent license
-you grant is automatically extended to all recipients of the covered
-work and works based on it.
-
-  A patent license is "discriminatory" if it does not include within
-the scope of its coverage, prohibits the exercise of, or is
-conditioned on the non-exercise of one or more of the rights that are
-specifically granted under this License.  You may not convey a covered
-work if you are a party to an arrangement with a third party that is
-in the business of distributing software, under which you make payment
-to the third party based on the extent of your activity of conveying
-the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory
-patent license (a) in connection with copies of the covered work
-conveyed by you (or copies made from those copies), or (b) primarily
-for and in connection with specific products or compilations that
-contain the covered work, unless you entered into that arrangement,
-or that patent license was granted, prior to 28 March 2007.
-
-  Nothing in this License shall be construed as excluding or limiting
-any implied license or other defenses to infringement that may
-otherwise be available to you under applicable patent law.
-
-  12. No Surrender of Others' Freedom.
-
-  If conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot convey a
-covered work so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you may
-not convey it at all.  For example, if you agree to terms that obligate you
-to collect a royalty for further conveying from those to whom you convey
-the Program, the only way you could satisfy both those terms and this
-License would be to refrain entirely from conveying the Program.
-
-  13. Remote Network Interaction; Use with the GNU General Public License.
-
-  Notwithstanding any other provision of this License, if you modify the
-Program, your modified version must prominently offer all users
-interacting with it remotely through a computer network (if your version
-supports such interaction) an opportunity to receive the Corresponding
-Source of your version by providing access to the Corresponding Source
-from a network server at no charge, through some standard or customary
-means of facilitating copying of software.  This Corresponding Source
-shall include the Corresponding Source for any work covered by version 3
-of the GNU General Public License that is incorporated pursuant to the
-following paragraph.
-
-  Notwithstanding any other provision of this License, you have
-permission to link or combine any covered work with a work licensed
-under version 3 of the GNU General Public License into a single
-combined work, and to convey the resulting work.  The terms of this
-License will continue to apply to the part which is the covered work,
-but the work with which it is combined will remain governed by version
-3 of the GNU General Public License.
-
-  14. Revised Versions of this License.
-
-  The Free Software Foundation may publish revised and/or new versions of
-the GNU Affero General Public License from time to time.  Such new versions
-will be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-  Each version is given a distinguishing version number.  If the
-Program specifies that a certain numbered version of the GNU Affero General
-Public License "or any later version" applies to it, you have the
-option of following the terms and conditions either of that numbered
-version or of any later version published by the Free Software
-Foundation.  If the Program does not specify a version number of the
-GNU Affero General Public License, you may choose any version ever published
-by the Free Software Foundation.
-
-  If the Program specifies that a proxy can decide which future
-versions of the GNU Affero General Public License can be used, that proxy's
-public statement of acceptance of a version permanently authorizes you
-to choose that version for the Program.
-
-  Later license versions may give you additional or different
-permissions.  However, no additional obligations are imposed on any
-author or copyright holder as a result of your choosing to follow a
-later version.
-
-  15. Disclaimer of Warranty.
-
-  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
-  16. Limitation of Liability.
-
-  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.
-
-  17. Interpretation of Sections 15 and 16.
-
-  If the disclaimer of warranty and limitation of liability provided
-above cannot be given local legal effect according to their terms,
-reviewing courts shall apply local law that most closely approximates
-an absolute waiver of all civil liability in connection with the
-Program, unless a warranty or assumption of liability accompanies a
-copy of the Program in return for a fee.
-
-                     END OF TERMS AND CONDITIONS
-
-            How to Apply These Terms to Your New Programs
-
-  If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
-  To do so, attach the following notices to the program.  It is safest
-to attach them to the start of each source file to most effectively
-state the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-    <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
-
-    This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Affero General Public License as published by
-    the Free Software Foundation, either version 3 of the License, or
-    (at your option) any later version.
-
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU Affero General Public License for more details.
-
-    You should have received a copy of the GNU Affero General Public License
-    along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-Also add information on how to contact you by electronic and paper mail.
-
-  If your software can interact with users remotely through a computer
-network, you should also make sure that it provides a way for users to
-get its source.  For example, if your program is a web application, its
-interface could display a "Source" link that leads users to an archive
-of the code.  There are many ways you could offer source, and different
-solutions will be better for different programs; see section 13 for the
-specific requirements.
-
-  You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU AGPL, see
-<https://www.gnu.org/licenses/>.
diff --git a/apps/mimic-cli/README.md b/apps/mimic-cli/README.md
deleted file mode 100644
index e1d3c3353..000000000
--- a/apps/mimic-cli/README.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# @voidhash/mimic-cli
-
-Command-line tooling for defining Mimic projects, loading configuration, and bundling database migrations.
-
-Registry publication remains disabled while the open-source repository is unified.
diff --git a/apps/mimic-cli/build.ts b/apps/mimic-cli/build.ts
deleted file mode 100644
index 9d221d946..000000000
--- a/apps/mimic-cli/build.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import * as path from "node:path";
-import { fileURLToPath } from "node:url";
-import * as esbuild from "esbuild";
-import * as tsup from "tsup";
-import pkg from "./package.json" with { type: "json" };
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-
-const workspaceSourcePlugin: esbuild.Plugin = {
-  name: "workspace-source",
-  setup(build) {
-    const workspacePackages: Record<string, string> = {
-      "@voidhash/mimic-cli": "./src/index.ts",
-      "@voidhash/mimic-core": "../../packages/mimic-core/src/index.ts",
-      "@voidhash/mimic-server": "../../packages/mimic-server/src/index.ts",
-      "@voidhash/mimic-server/effect":
-        "../../packages/mimic-server/src/effect/index.ts",
-      "@voidhash/mimic-server/migrate":
-        "../../packages/mimic-server/src/migrate/index.ts",
-    };
-
-    const externals = new Set(build.initialOptions.external ?? []);
-
-    build.onResolve({ filter: /^@voidhash\// }, (args) => {
-      if (externals.has(args.path)) {
-        return { path: args.path, external: true };
-      }
-      const mapped = workspacePackages[args.path];
-      if (mapped) {
-        return { path: path.resolve(__dirname, mapped) };
-      }
-      return undefined;
-    });
-  },
-};
-
-const main = async () => {
-  await esbuild.build({
-    banner: { js: "#!/usr/bin/env node" },
-    bundle: true,
-    define: {
-      "import.meta.dirname": "__dirname",
-      "process.env.MIMIC_CLI_VERSION": `"${pkg.version}"`,
-    },
-    entryPoints: ["./src/cli/index.ts"],
-    external: [
-      "esbuild",
-      "effect",
-      "effect/*",
-      "@voidhash/mimic-core",
-      "@voidhash/mimic-server",
-      "@voidhash/mimic-server/*",
-    ],
-    format: "cjs",
-    outfile: "dist/bin.cjs",
-    platform: "node",
-    plugins: [workspaceSourcePlugin],
-    target: "node20",
-  });
-
-  await tsup.build({
-    dts: true,
-    entryPoints: ["./src/index.ts"],
-    external: ["esbuild", "@voidhash/mimic-core", "@voidhash/mimic-server"],
-    format: ["cjs", "esm"],
-    outDir: "./dist",
-    outExtension: (ctx) => {
-      if (ctx.format === "cjs") return { dts: ".d.ts", js: ".js" };
-      return { dts: ".d.mts", js: ".mjs" };
-    },
-    splitting: false,
-  });
-};
-
-main().catch((error) => {
-  console.error(error);
-  process.exit(1);
-});
diff --git a/apps/mimic-cli/package.json b/apps/mimic-cli/package.json
deleted file mode 100644
index c8295506a..000000000
--- a/apps/mimic-cli/package.json
+++ /dev/null
@@ -1,62 +0,0 @@
-{
-  "name": "@voidhash/mimic-cli",
-  "version": "1.0.0-beta.19",
-  "private": true,
-  "description": "Command-line tooling for configuring and migrating Mimic databases.",
-  "keywords": [
-    "cli",
-    "database",
-    "mimic",
-    "voidhash"
-  ],
-  "homepage": "https://voidhash.com/docs",
-  "bugs": {
-    "url": "https://github.com/voidhashcom/voidhash/issues"
-  },
-  "license": "AGPL-3.0-only",
-  "author": "Voidhash (https://voidhash.com)",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/voidhashcom/voidhash",
-    "directory": "apps/mimic-cli"
-  },
-  "bin": {
-    "mimic": "./dist/bin.cjs"
-  },
-  "type": "module",
-  "main": "./src/index.ts",
-  "exports": {
-    ".": {
-      "import": {
-        "types": "./src/index.ts",
-        "default": "./dist/index.mjs"
-      },
-      "require": {
-        "types": "./src/index.ts",
-        "default": "./dist/index.js"
-      }
-    }
-  },
-  "scripts": {
-    "build": "rm -rf ./dist && tsx build.ts && chmod +x ./dist/bin.cjs",
-    "typecheck": "tsc --noEmit -p tsconfig.json",
-    "test": "vp test run -c vitest.mts",
-    "test:watch": "vp test -c vitest.mts"
-  },
-  "dependencies": {
-    "@effect/platform-node-shared": "4.0.0-beta.84",
-    "@voidhash/mimic-core": "workspace:*",
-    "@voidhash/mimic-server": "workspace:*",
-    "dotenv": "^16.4.7",
-    "effect": "4.0.0-beta.84",
-    "esbuild-register": "^3.6.0"
-  },
-  "devDependencies": {
-    "esbuild": "0.28.1",
-    "tsup": "^8.5.0",
-    "tsx": "^4.19.3",
-    "typescript": "5.8.3",
-    "vite-plus": "catalog:",
-    "vitest": "^3.2.7"
-  }
-}
diff --git a/apps/mimic-cli/src/cli/commands/generate.ts b/apps/mimic-cli/src/cli/commands/generate.ts
deleted file mode 100644
index 40cac82d7..000000000
--- a/apps/mimic-cli/src/cli/commands/generate.ts
+++ /dev/null
@@ -1,58 +0,0 @@
-import { Console, Effect } from "effect";
-import { Argument, Command } from "effect/unstable/cli";
-import * as fs from "node:fs";
-import * as path from "node:path";
-
-const MIGRATIONS_DIR = "migrations";
-const MIGRATION_FILE_PATTERN = /^(\d+)_.*\.(?:[cm]?[jt]s)$/;
-
-const slugify = (value: string): string =>
-  value
-    .trim()
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "") || "migration";
-
-const nextVersion = (cwd: string): number => {
-  const migrationsDir = path.join(cwd, MIGRATIONS_DIR);
-  if (!fs.existsSync(migrationsDir)) {
-    return 1;
-  }
-
-  const versions = fs
-    .readdirSync(migrationsDir, { withFileTypes: true })
-    .filter((entry) => entry.isFile() && MIGRATION_FILE_PATTERN.test(entry.name))
-    .map((entry) => Number.parseInt(entry.name.match(MIGRATION_FILE_PATTERN)![1]!, 10));
-
-  return (versions.length === 0 ? 0 : Math.max(...versions)) + 1;
-};
-
-const renderTemplate = (): string => `import mimicConfig from "../mimic.config";
-
-export default mimicConfig.defineMigrations((migration) => [
-]);
-`;
-
-export const generateCommand = Command.make(
-  "generate",
-  {
-    name: Argument.string("name"),
-  },
-  ({ name }) =>
-    Effect.gen(function* () {
-      const cwd = process.cwd();
-      const migrationsDir = path.join(cwd, MIGRATIONS_DIR);
-      const version = nextVersion(cwd);
-      const fileName = `${String(version).padStart(5, "0")}_${slugify(name)}.ts`;
-      const filePath = path.join(migrationsDir, fileName);
-
-      if (fs.existsSync(filePath)) {
-        return yield* Effect.fail(new Error(`Migration file "${fileName}" already exists.`));
-      }
-
-      fs.mkdirSync(migrationsDir, { recursive: true });
-      fs.writeFileSync(filePath, renderTemplate());
-
-      yield* Console.log(`Created ${path.relative(cwd, filePath)}`);
-    }),
-).pipe(Command.withDescription("Create a new empty migration file"));
diff --git a/apps/mimic-cli/src/cli/commands/init.ts b/apps/mimic-cli/src/cli/commands/init.ts
deleted file mode 100644
index 7be16bf4e..000000000
--- a/apps/mimic-cli/src/cli/commands/init.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import { Console, Effect } from "effect";
-import { Command } from "effect/unstable/cli";
-import * as fs from "node:fs";
-import * as path from "node:path";
-
-const CONFIG_TEMPLATE = `import { defineConfig, env } from "@voidhash/mimic-cli";
-
-export default defineConfig({
-  url: env.MIMIC_URL,
-  username: env.MIMIC_USERNAME,
-  password: env.MIMIC_PASSWORD,
-  database: "my-database",
-});
-`;
-
-const ENV_TEMPLATE = `MIMIC_URL=http://localhost:3000
-MIMIC_USERNAME=root
-MIMIC_PASSWORD=changeme
-`;
-
-export const initCommand = Command.make("init", {}, () =>
-  Effect.gen(function* () {
-    const cwd = process.cwd();
-    const configPath = path.join(cwd, "mimic.config.ts");
-    const envPath = path.join(cwd, ".env");
-
-    if (fs.existsSync(configPath)) {
-      return yield* Effect.fail(new Error("mimic.config.ts already exists in this directory."));
-    }
-
-    fs.writeFileSync(configPath, CONFIG_TEMPLATE);
-    yield* Console.log("Created mimic.config.ts");
-
-    if (!fs.existsSync(envPath)) {
-      fs.writeFileSync(envPath, ENV_TEMPLATE);
-      yield* Console.log("Created .env");
-    } else {
-      yield* Console.log(".env already exists, skipping.");
-    }
-
-    yield* Console.log("\nNext steps:");
-    yield* Console.log("  1. Update .env with your server credentials");
-    yield* Console.log("  2. Run 'mimic generate initial' to create your first migration");
-    yield* Console.log("  3. Define collections in migrations/");
-    yield* Console.log("  4. Run 'mimic migrate' to apply migrations to the server");
-  }),
-).pipe(Command.withDescription("Scaffold a new mimic.config.ts file"));
diff --git a/apps/mimic-cli/src/cli/commands/migrate.ts b/apps/mimic-cli/src/cli/commands/migrate.ts
deleted file mode 100644
index 45ae48feb..000000000
--- a/apps/mimic-cli/src/cli/commands/migrate.ts
+++ /dev/null
@@ -1,391 +0,0 @@
-import { Console, Effect, Option } from "effect";
-import { Command, Flag } from "effect/unstable/cli";
-import { parseSchema, serializeSchema, type SchemaObject } from "@voidhash/mimic-core";
-import { analyzeMigration } from "@voidhash/mimic-server/migrate";
-import { MimicSDK } from "@voidhash/mimic-server/effect";
-import * as readline from "node:readline";
-
-import { ConfigLoader } from "../../services/ConfigLoader.js";
-import type {
-  CompiledMigrationChange,
-  CompiledMigrationFile,
-  CompiledUpdateMigrationChange,
-} from "../../services/MigrationLoader.js";
-import { MigrationBundler } from "../../services/MigrationBundler.js";
-import { MigrationLoader } from "../../services/MigrationLoader.js";
-
-const confirm = (message: string): Effect.Effect<boolean> =>
-  Effect.callback<boolean>((resume) => {
-    const rl = readline.createInterface({
-      input: process.stdin,
-      output: process.stdout,
-    });
-    rl.question(`${message} (y/N) `, (answer) => {
-      rl.close();
-      resume(Effect.succeed(answer.trim().toLowerCase() === "y"));
-    });
-  });
-
-const schemasEqual = (left: SchemaObject | undefined, right: SchemaObject | undefined): boolean =>
-  JSON.stringify(left) === JSON.stringify(right);
-
-const assertValidVersionSequence = (
-  migrations: readonly CompiledMigrationFile[],
-): Effect.Effect<void, Error> =>
-  Effect.sync(() => {
-    let expected = 1;
-    for (const migration of migrations) {
-      if (migration.version !== expected) {
-        throw new Error(
-          `Expected migration version ${expected}, found ${migration.version} in "${migration.filePath}".`,
-        );
-      }
-      expected += 1;
-    }
-  });
-
-const canUseCustomMigration = (change: CompiledUpdateMigrationChange): boolean =>
-  change.dataMigrationSource !== undefined;
-
-const validateLocalMigrations = (
-  migrations: readonly CompiledMigrationFile[],
-): Effect.Effect<void, Error> =>
-  Effect.gen(function* () {
-    yield* assertValidVersionSequence(migrations);
-
-    const state = new Map<
-      string,
-      { readonly schema: SchemaObject; readonly parsedSchema: ReturnType<typeof parseSchema> }
-    >();
-
-    for (const migration of migrations) {
-      for (const change of migration.changes) {
-        if (change.type === "create") {
-          if (state.has(change.collection)) {
-            return yield* Effect.fail(
-              new Error(
-                `Migration ${migration.version} tries to create collection "${change.collection}" twice.`,
-              ),
-            );
-          }
-          const schema = serializeSchema(parseSchema(change.schema));
-          state.set(change.collection, {
-            schema,
-            parsedSchema: parseSchema(schema),
-          });
-          continue;
-        }
-
-        const current = state.get(change.collection);
-        if (!current) {
-          return yield* Effect.fail(
-            new Error(
-              `Migration ${migration.version} updates unknown collection "${change.collection}".`,
-            ),
-          );
-        }
-
-        const normalizedNext = serializeSchema(parseSchema(change.schema));
-        const normalizedOld = change.oldSchema
-          ? serializeSchema(parseSchema(change.oldSchema))
-          : undefined;
-
-        if (normalizedOld !== undefined && !schemasEqual(normalizedOld, current.schema)) {
-          return yield* Effect.fail(
-            new Error(
-              `Migration ${migration.version} declared an old schema for "${change.collection}" that does not match the previous migration state.`,
-            ),
-          );
-        }
-
-        const issues = analyzeMigration({
-          oldSchema: current.parsedSchema,
-          newSchema: parseSchema(normalizedNext),
-        });
-        if (issues.length > 0 && !canUseCustomMigration(change)) {
-          const issue = issues[0]!;
-          return yield* Effect.fail(
-            new Error(
-              `Migration ${migration.version} has an incompatible schema change for "${change.collection}" at ${issue.path}: ${issue.message}`,
-            ),
-          );
-        }
-
-        state.set(change.collection, {
-          schema: normalizedNext,
-          parsedSchema: parseSchema(normalizedNext),
-        });
-      }
-    }
-  });
-
-const assertRemotePrefix = (
-  localMigrations: readonly CompiledMigrationFile[],
-  appliedMigrations: ReadonlyArray<{
-    readonly version: number;
-    readonly name: string;
-    readonly checksum: string;
-  }>,
-): Effect.Effect<number, Error> =>
-  Effect.sync(() => {
-    if (appliedMigrations.length > localMigrations.length) {
-      throw new Error(
-        "The server has more applied migrations than exist locally. Refusing to continue.",
-      );
-    }
-
-    for (const [index, applied] of appliedMigrations.entries()) {
-      const local = localMigrations[index];
-      if (!local || local.version !== applied.version) {
-        throw new Error(`Local migrations diverge from the server at version ${applied.version}.`);
-      }
-      if (local.checksum !== applied.checksum) {
-        throw new Error(`Checksum mismatch for migration ${applied.version} (${local.filePath}).`);
-      }
-    }
-
-    return appliedMigrations[appliedMigrations.length - 1]?.version ?? 0;
-  });
-
-const formatChange = (change: CompiledMigrationChange): string =>
-  change.type === "create"
-    ? change.skipIfExists === true
-      ? `create collection "${change.collection}" if missing`
-      : `create collection "${change.collection}"`
-    : `update collection "${change.collection}"`;
-
-export const migrateCommand = Command.make(
-  "migrate",
-  {
-    dryRun: Flag.boolean("dry-run").pipe(
-      Flag.withDescription("Plan-only: show what would be done without contacting the server"),
-      Flag.withDefault(false),
-    ),
-    dryRunData: Flag.boolean("dry-run-data").pipe(
-      Flag.withDescription(
-        "Run the migration on a sample of documents without persisting changes (uses --sample-limit / --sample-percent)",
-      ),
-      Flag.withDefault(false),
-    ),
-    sampleLimit: Flag.integer("sample-limit").pipe(
-      Flag.withDescription("Cap the number of documents per collection in --dry-run-data"),
-      Flag.optional,
-    ),
-    samplePercent: Flag.integer("sample-percent").pipe(
-      Flag.withDescription(
-        "Sample percentage [0..100] of documents per collection in --dry-run-data",
-      ),
-      Flag.optional,
-    ),
-    rerun: Flag.boolean("rerun").pipe(
-      Flag.withDescription("Re-run a previous migration (only retries failed/pending docs)"),
-      Flag.withDefault(false),
-    ),
-    replace: Flag.boolean("replace").pipe(
-      Flag.withDescription(
-        "Install a fixed version of a previously-applied migration with a new checksum",
-      ),
-      Flag.withDefault(false),
-    ),
-    redoSucceeded: Flag.boolean("redo-succeeded").pipe(
-      Flag.withDescription(
-        "With --replace, also re-process docs that already succeeded under the old version",
-      ),
-      Flag.withDefault(false),
-    ),
-    version: Flag.integer("version").pipe(
-      Flag.withDescription(
-        "Target a specific migration version (required with --rerun / --replace / --dry-run-data)",
-      ),
-      Flag.optional,
-    ),
-    batchSize: Flag.integer("batch-size").pipe(
-      Flag.withDescription("Documents migrated in parallel per batch"),
-      Flag.optional,
-    ),
-    yes: Flag.boolean("yes").pipe(
-      Flag.withAlias("y"),
-      Flag.withDescription("Skip confirmation prompt"),
-      Flag.withDefault(false),
-    ),
-  },
-  ({
-    dryRun,
-    dryRunData,
-    sampleLimit,
-    samplePercent,
-    rerun,
-    replace,
-    redoSucceeded,
-    version,
-    batchSize,
-    yes,
-  }) =>
-    Effect.gen(function* () {
-      const configLoader = yield* ConfigLoader;
-      const migrationLoader = yield* MigrationLoader;
-      const config = yield* configLoader.load();
-      const localMigrations = yield* migrationLoader.load();
-
-      yield* validateLocalMigrations(localMigrations);
-      yield* Console.log(`Connecting to ${config.url}...`);
-
-      const client = new MimicSDK({
-        url: config.url,
-        username: config.username,
-        password: config.password,
-      });
-
-      const databases = yield* client.listDatabases();
-      let database = databases.find((entry) => entry.name === config.database);
-
-      if (!database && localMigrations.length > 0 && !rerun && !replace) {
-        yield* Console.log(`Database "${config.database}" not found.`);
-        if (!yes) {
-          const createDb = yield* confirm(`Create database "${config.database}"?`);
-          if (!createDb) {
-            yield* Console.log("Aborted.");
-            return;
-          }
-        }
-
-        database = yield* client.createDatabase({
-          name: config.database,
-          description: "",
-        });
-        yield* Console.log(`Database "${config.database}" created.`);
-      }
-
-      if (!database) {
-        yield* Console.log("No migrations to apply.");
-        return;
-      }
-
-      const db = client.database(database.id, database.name, database.description);
-
-      // Single-version targeted modes (rerun / replace / dry-run-data with a
-      // specific version) execute against just that migration and bypass the
-      // "pending migrations" loop entirely.
-      const versionValue = Option.getOrUndefined(version);
-      const sampleLimitValue = Option.getOrUndefined(sampleLimit);
-      const samplePercentValue = Option.getOrUndefined(samplePercent);
-      const batchSizeValue = Option.getOrUndefined(batchSize);
-      const targetedMode = rerun || replace || (dryRunData && versionValue !== undefined);
-      if (targetedMode) {
-        if (versionValue === undefined) {
-          yield* Console.log("--version is required with --rerun, --replace, or --dry-run-data.");
-          return;
-        }
-        const local = localMigrations.find((entry) => entry.version === versionValue);
-        if (!local) {
-          yield* Console.log(`Migration version ${versionValue} not found locally.`);
-          return;
-        }
-        const dryRunPayload = dryRunData
-          ? {
-              limit: sampleLimitValue,
-              samplePercent: samplePercentValue,
-            }
-          : undefined;
-        const mode = replace ? "replace" : rerun ? "rerun" : "apply";
-        yield* Console.log(
-          `\n${mode.toUpperCase()} migration ${String(versionValue).padStart(5, "0")}_${local.name}${dryRunData ? " (dry-run)" : ""}`,
-        );
-        if (!yes && !dryRunData) {
-          const confirmed = yield* confirm(`Proceed with ${mode}?`);
-          if (!confirmed) {
-            yield* Console.log("Aborted.");
-            return;
-          }
-        }
-        const report = yield* db.applyMigration({
-          version: local.version,
-          name: local.name,
-          checksum: local.checksum,
-          changes: local.changes,
-          mode,
-          dryRun: dryRunPayload,
-          batchSize: batchSizeValue,
-          redoSucceededOnReplace: redoSucceeded,
-        });
-        yield* Console.log(
-          `\n  → ${report.state} (succeeded=${report.succeeded} failed=${report.failed} skipped=${report.skipped})`,
-        );
-        if (report.failed > 0) {
-          for (const entry of report.perDocument) {
-            if (entry.status === "failed") {
-              yield* Console.log(
-                `    ✗ ${entry.documentId} ${entry.errorCode ?? ""}: ${entry.errorMessage ?? ""}`,
-              );
-            }
-          }
-        }
-        return;
-      }
-
-      const appliedMigrations = yield* db.listMigrations();
-      const highestAppliedVersion = yield* assertRemotePrefix(localMigrations, appliedMigrations);
-      const pendingMigrations = localMigrations.filter(
-        (migration) => migration.version > highestAppliedVersion,
-      );
-
-      if (pendingMigrations.length === 0) {
-        yield* Console.log("No migrations to apply.");
-        return;
-      }
-
-      yield* Console.log("\nPlan:");
-      for (const migration of pendingMigrations) {
-        yield* Console.log(`  ~ ${String(migration.version).padStart(5, "0")}_${migration.name}`);
-        for (const change of migration.changes) {
-          yield* Console.log(`    - ${formatChange(change)}`);
-        }
-      }
-      yield* Console.log("");
-
-      if (dryRun) {
-        yield* Console.log("Dry run complete. No changes applied.");
-        return;
-      }
-
-      if (!yes) {
-        const confirmed = yield* confirm("Apply these migrations?");
-        if (!confirmed) {
-          yield* Console.log("Aborted.");
-          return;
-        }
-      }
-
-      for (const migration of pendingMigrations) {
-        const report = yield* db.applyMigration({
-          version: migration.version,
-          name: migration.name,
-          checksum: migration.checksum,
-          changes: migration.changes,
-          batchSize: batchSizeValue,
-        });
-        if (report.state === "succeeded") {
-          yield* Console.log(
-            `  ~ applied ${String(migration.version).padStart(5, "0")}_${migration.name} (succeeded=${report.succeeded} skipped=${report.skipped})`,
-          );
-        } else {
-          yield* Console.log(
-            `  ✗ migration ${String(migration.version).padStart(5, "0")}_${migration.name} failed: ${report.failed}/${report.succeeded + report.failed + report.skipped} document(s) failed.`,
-          );
-          for (const entry of report.perDocument) {
-            if (entry.status === "failed") {
-              yield* Console.log(
-                `      ✗ ${entry.documentId} ${entry.errorCode ?? ""}: ${entry.errorMessage ?? ""}`,
-              );
-            }
-          }
-          yield* Console.log(
-            `      Re-run with --rerun --version=${migration.version} once the inputs are fixed.`,
-          );
-          return;
-        }
-      }
-
-      yield* Console.log(`\nDone. Applied ${pendingMigrations.length} migration(s).`);
-    }).pipe(Effect.provide(MigrationBundler.Default)),
-).pipe(Command.withDescription("Apply local migrations to the Mimic server"));
diff --git a/apps/mimic-cli/src/cli/index.ts b/apps/mimic-cli/src/cli/index.ts
deleted file mode 100644
index d737b1ac1..000000000
--- a/apps/mimic-cli/src/cli/index.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-import { Effect, Layer, Logger } from "effect";
-import { Command } from "effect/unstable/cli";
-import { layer as NodeChildProcessSpawnerLayer } from "@effect/platform-node-shared/NodeChildProcessSpawner";
-import { layer as NodeFileSystemLayer } from "@effect/platform-node-shared/NodeFileSystem";
-import { layer as NodePathLayer } from "@effect/platform-node-shared/NodePath";
-import { layer as NodeStdioLayer } from "@effect/platform-node-shared/NodeStdio";
-import { layer as NodeTerminalLayer } from "@effect/platform-node-shared/NodeTerminal";
-
-import { ConfigLoader } from "../services/ConfigLoader.js";
-import { MigrationBundler } from "../services/MigrationBundler.js";
-import { MigrationLoader } from "../services/MigrationLoader.js";
-import { isDebugMode, withErrorHandler } from "../utils/error-formatter.js";
-import { generateCommand } from "./commands/generate.js";
-import { initCommand } from "./commands/init.js";
-import { migrateCommand } from "./commands/migrate.js";
-
-const command = Command.make("mimic").pipe(
-  Command.withDescription("Mimic CLI - manage your Mimic migrations"),
-  Command.withSubcommands([initCommand, generateCommand, migrateCommand]),
-);
-
-const cliEffect = Command.run(command, {
-  version: process.env.MIMIC_CLI_VERSION ?? "1.0.0-beta.19",
-}).pipe(isDebugMode() ? Effect.withLogger(Logger.consolePretty()) : (effect) => effect);
-
-const NodeEnvLayer = Layer.mergeAll(
-  NodeFileSystemLayer,
-  NodePathLayer,
-  NodeStdioLayer,
-  NodeTerminalLayer,
-  NodeChildProcessSpawnerLayer.pipe(
-    Layer.provide(Layer.mergeAll(NodeFileSystemLayer, NodePathLayer)),
-  ),
-);
-
-const MainLayer = Layer.mergeAll(
-  ConfigLoader.Default,
-  MigrationLoader.Default,
-  MigrationBundler.Default,
-  NodeEnvLayer,
-);
-
-cliEffect
-  .pipe(Effect.provide(MainLayer), withErrorHandler, Effect.runPromise)
-  .catch((error: unknown) => {
-    console.error(error);
-    process.exit(1);
-  });
diff --git a/apps/mimic-cli/src/index.ts b/apps/mimic-cli/src/index.ts
deleted file mode 100644
index 3410643f7..000000000
--- a/apps/mimic-cli/src/index.ts
+++ /dev/null
@@ -1,133 +0,0 @@
-import { Primitive } from "@voidhash/mimic-core";
-
-export const m = Primitive;
-
-export interface MimicMigrationContext<TSchema extends Primitive.AnyPrimitive> {
-  readonly root: Primitive.InferProxy<TSchema>;
-}
-
-export interface MimicMigrationContextWithOldSchema<
-  TOldSchema extends Primitive.AnyPrimitive,
-  TSchema extends Primitive.AnyPrimitive,
-> extends MimicMigrationContext<TSchema> {
-  readonly oldRoot: Primitive.InferProxy<TOldSchema>;
-}
-
-export interface MimicCreateMigrationDefinition<
-  TCollectionName extends string = string,
-  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-> {
-  readonly kind: "create";
-  readonly collection: TCollectionName;
-  readonly schema: TSchema;
-  readonly skipIfExists?: boolean;
-}
-
-export interface MimicUpdateMigrationDefinitionWithoutOldSchema<
-  TCollectionName extends string = string,
-  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-> {
-  readonly kind: "update";
-  readonly collection: TCollectionName;
-  readonly oldSchema?: never;
-  readonly schema: TSchema;
-  readonly execute?: (ctx: MimicMigrationContext<TSchema>) => void;
-}
-
-export interface MimicUpdateMigrationDefinitionWithOldSchema<
-  TCollectionName extends string = string,
-  TOldSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-> {
-  readonly kind: "update";
-  readonly collection: TCollectionName;
-  readonly oldSchema: TOldSchema;
-  readonly schema: TSchema;
-  readonly execute?: (ctx: MimicMigrationContextWithOldSchema<TOldSchema, TSchema>) => void;
-}
-
-export type MimicUpdateMigrationDefinition<
-  TCollectionName extends string = string,
-  TOldSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-> =
-  | MimicUpdateMigrationDefinitionWithoutOldSchema<TCollectionName, TSchema>
-  | MimicUpdateMigrationDefinitionWithOldSchema<TCollectionName, TOldSchema, TSchema>;
-
-export type MimicMigrationDefinition<
-  TCollectionName extends string = string,
-  TOldSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-  TSchema extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
-> =
-  | MimicCreateMigrationDefinition<TCollectionName, TSchema>
-  | MimicUpdateMigrationDefinition<TCollectionName, TOldSchema, TSchema>;
-
-export interface MimicMigrationBuilder {
-  readonly create: <
-    TCollectionName extends string,
-    TSchema extends Primitive.AnyPrimitive,
-  >(migration: {
-    readonly collection: TCollectionName;
-    readonly schema: TSchema;
-    readonly skipIfExists?: boolean;
-  }) => MimicCreateMigrationDefinition<TCollectionName, TSchema>;
-  readonly update: {
-    <TCollectionName extends string, TSchema extends Primitive.AnyPrimitive>(migration: {
-      readonly collection: TCollectionName;
-      readonly oldSchema?: never;
-      readonly schema: TSchema;
-      readonly execute?: (ctx: MimicMigrationContext<TSchema>) => void;
-    }): MimicUpdateMigrationDefinitionWithoutOldSchema<TCollectionName, TSchema>;
-    <
-      TCollectionName extends string,
-      TOldSchema extends Primitive.AnyPrimitive,
-      TSchema extends Primitive.AnyPrimitive,
-    >(migration: {
-      readonly collection: TCollectionName;
-      readonly oldSchema: TOldSchema;
-      readonly schema: TSchema;
-      readonly execute?: (ctx: MimicMigrationContextWithOldSchema<TOldSchema, TSchema>) => void;
-    }): MimicUpdateMigrationDefinitionWithOldSchema<TCollectionName, TOldSchema, TSchema>;
-  };
-}
-
-export interface MimicConfigShape {
-  readonly url: string;
-  readonly username: string;
-  readonly password: string;
-  readonly database: string;
-}
-
-export type MimicConfig = MimicConfigShape & {
-  defineMigrations: <TMigrations extends readonly MimicMigrationDefinition[]>(
-    builder: (migration: MimicMigrationBuilder) => TMigrations,
-  ) => TMigrations;
-};
-
-const migrationBuilder: MimicMigrationBuilder = {
-  create: (migration) => ({
-    kind: "create",
-    ...migration,
-  }),
-  update: ((migration: object) => ({
-    kind: "update",
-    ...migration,
-  })) as MimicMigrationBuilder["update"],
-};
-
-export const defineConfig = (config: MimicConfigShape): MimicConfig => ({
-  ...config,
-  defineMigrations: (builder) => builder(migrationBuilder),
-});
-
-export const env: Record<string, string> = new Proxy({} as Record<string, string>, {
-  get(_, key: string) {
-    const value = process.env[key];
-    if (value === undefined) {
-      throw new Error(
-        `Environment variable ${key} is not set. Add it to your .env file or set it in your shell.`,
-      );
-    }
-    return value;
-  },
-});
diff --git a/apps/mimic-cli/src/services/ConfigLoader.ts b/apps/mimic-cli/src/services/ConfigLoader.ts
deleted file mode 100644
index 0efe7c131..000000000
--- a/apps/mimic-cli/src/services/ConfigLoader.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-import { Effect, Layer, Schema, Context } from "effect";
-import * as path from "node:path";
-import * as fs from "node:fs";
-
-import { loadConfigFile } from "../utils/js-loading/config-loader.js";
-
-const CONFIG_FILE_NAMES = [
-  "mimic.config.ts",
-  "mimic.config.js",
-  "mimic.config.cjs",
-  "mimic.config.mjs",
-];
-
-const MimicConfigSchema = Schema.Struct({
-  url: Schema.String,
-  username: Schema.String,
-  password: Schema.String,
-  database: Schema.String,
-});
-
-export interface ConfigLoaderShape {
-  readonly load: () => Effect.Effect<typeof MimicConfigSchema.Type, Error>;
-}
-
-export class ConfigLoader extends Context.Service<ConfigLoader, ConfigLoaderShape>()(
-  "@voidhash/mimic-cli/ConfigLoader",
-) {
-  static Default = Layer.succeed(ConfigLoader, {
-    load: () =>
-      Effect.gen(function* () {
-        yield* Effect.tryPromise({
-          try: async () => {
-            const dotenv = await import("dotenv");
-            dotenv.config({ path: path.resolve(process.cwd(), ".env") });
-          },
-          catch: () => undefined,
-        }).pipe(Effect.ignore);
-
-        const cwd = process.cwd();
-        let configPath: string | undefined;
-        for (const name of CONFIG_FILE_NAMES) {
-          const candidate = path.resolve(cwd, name);
-          if (fs.existsSync(candidate)) {
-            configPath = candidate;
-            break;
-          }
-        }
-
-        if (!configPath) {
-          return yield* Effect.fail(
-            new Error(`No mimic config file found. Create one of: ${CONFIG_FILE_NAMES.join(", ")}`),
-          );
-        }
-
-        const rawConfig = yield* loadConfigFile(configPath).pipe(
-          Effect.mapError((error) => new Error(`Failed to load config: ${error.message}`)),
-        );
-
-        return yield* Effect.try({
-          try: () => Schema.decodeUnknownSync(MimicConfigSchema)(rawConfig),
-          catch: (error) => new Error(`Invalid mimic config:\n${String(error)}`),
-        });
-      }),
-  });
-}
diff --git a/apps/mimic-cli/src/services/MigrationBundler.ts b/apps/mimic-cli/src/services/MigrationBundler.ts
deleted file mode 100644
index 19c4c6dd9..000000000
--- a/apps/mimic-cli/src/services/MigrationBundler.ts
+++ /dev/null
@@ -1,162 +0,0 @@
-import { build, type Plugin } from "esbuild";
-import { Effect, Layer, Context } from "effect";
-import * as path from "node:path";
-import { PACKAGE_ROOT } from "../utils/package-root.js";
-
-const MIGRATION_RUNNER_GLOBAL = "__MIMIC_RUN_MIGRATION__";
-const PUBLIC_ROOT = path.resolve(PACKAGE_ROOT, "../..");
-
-const workspaceSourcePlugin: Plugin = {
-  name: "workspace-source",
-  setup(buildContext) {
-    const mappings: Record<string, string> = {
-      "@voidhash/mimic-cli": path.resolve(PACKAGE_ROOT, "src/index.ts"),
-      "@voidhash/mimic-core": path.resolve(
-        PUBLIC_ROOT,
-        "packages/mimic-core/src/index.ts",
-      ),
-      "@voidhash/mimic-server/migrate": path.resolve(
-        PUBLIC_ROOT,
-        "packages/mimic-server/src/migrate/index.ts",
-      ),
-    };
-
-    buildContext.onResolve({ filter: /^@voidhash\// }, (args) => {
-      const mapped = mappings[args.path];
-      if (mapped) {
-        return { path: mapped };
-      }
-      return undefined;
-    });
-  },
-};
-
-const renderEntrySource = (filePath: string, index: number): string => `
-  import migrations from ${JSON.stringify(filePath)};
-  import {
-    applyBatch,
-    createGenerator,
-    validate as validateSchema,
-    validateValue,
-  } from "@voidhash/mimic-core";
-  import { reconcileMigrationValue } from "@voidhash/mimic-server/migrate";
-
-  const definition = migrations[${index}];
-
-  globalThis.${MIGRATION_RUNNER_GLOBAL} = (input) => {
-    if (!definition || definition.kind !== "update" || typeof definition.execute !== "function") {
-      throw new Error("Migration definition is not executable");
-    }
-
-    validateValue(input.oldValue);
-
-    const oldPrimitive = "oldSchema" in definition ? definition.oldSchema : undefined;
-    const newPrimitive = definition.schema;
-
-    let currentValue = input.oldValue;
-
-    try {
-      if (oldPrimitive) {
-        const reconciled = reconcileMigrationValue({
-          oldSchema: oldPrimitive.schema,
-          newSchema: newPrimitive.schema,
-          value: input.oldValue,
-        });
-        if (reconciled.ok && reconciled.value !== undefined) {
-          currentValue = reconciled.value;
-        }
-      } else {
-        const sanitized = validateSchema(newPrimitive.schema, input.oldValue);
-        if (sanitized !== undefined) {
-          currentValue = sanitized;
-        }
-      }
-    } catch {}
-
-    const generator = createGenerator();
-    const staged = [];
-    const session = {
-      current: () => currentValue,
-      emit: (commands) => {
-        if (commands.length === 0) {
-          return;
-        }
-        staged.push(...commands);
-        currentValue = applyBatch(currentValue, commands);
-      },
-      generator: {
-        nextArrayItemId: () => globalThis.crypto.randomUUID(),
-        nextTreeNodeId: () => globalThis.crypto.randomUUID(),
-        between: (lower, upper) => generator.between(lower, upper),
-      },
-    };
-
-    const readOnlySession = {
-      current: () => input.oldValue,
-      emit: () => {
-        throw new Error("oldRoot is read-only");
-      },
-      generator: session.generator,
-    };
-
-    const ctx = {
-      root: newPrimitive.createProxy(session, []),
-    };
-
-    if (oldPrimitive) {
-      ctx.oldRoot = oldPrimitive.createProxy(readOnlySession, []);
-    }
-
-    definition.execute(ctx);
-
-    const sanitized = validateSchema(newPrimitive.schema, currentValue);
-    if (sanitized === undefined) {
-      throw new Error("Migration produced an undefined root value");
-    }
-
-    return { value: sanitized };
-  };
-`;
-
-export interface MigrationBundlerShape {
-  readonly bundle: (filePath: string, index: number) => Effect.Effect<string, Error>;
-}
-
-export class MigrationBundler extends Context.Service<MigrationBundler, MigrationBundlerShape>()(
-  "@voidhash/mimic-cli/MigrationBundler",
-) {
-  static Default = Layer.succeed(MigrationBundler, {
-    bundle: (filePath, index) =>
-      Effect.tryPromise({
-        try: async () => {
-          const result = await build({
-            absWorkingDir: process.cwd(),
-            bundle: true,
-            format: "iife",
-            minify: true,
-            platform: "browser",
-            target: "es2022",
-            write: false,
-            plugins: [workspaceSourcePlugin],
-            stdin: {
-              contents: renderEntrySource(filePath, index),
-              loader: "ts",
-              resolveDir: path.dirname(filePath),
-              sourcefile: `${path.basename(filePath)}.generated.ts`,
-            },
-          });
-
-          const output = result.outputFiles[0]?.text;
-          if (!output) {
-            throw new Error(`Failed to build migration bundle for "${filePath}".`);
-          }
-          return output;
-        },
-        catch: (error) => (error instanceof Error ? error : new Error(String(error))),
-      }),
-  });
-}
-
-export const MigrationBundlerRuntime = {
-  globalName: MIGRATION_RUNNER_GLOBAL,
-};
diff --git a/apps/mimic-cli/src/services/MigrationLoader.ts b/apps/mimic-cli/src/services/MigrationLoader.ts
deleted file mode 100644
index 7a6359ed7..000000000
--- a/apps/mimic-cli/src/services/MigrationLoader.ts
+++ /dev/null
@@ -1,178 +0,0 @@
-import { createHash } from "node:crypto";
-import { Effect, Layer, Context } from "effect";
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { Primitive, serializeSchema, type SchemaObject } from "@voidhash/mimic-core";
-
-import type {
-  MimicCreateMigrationDefinition,
-  MimicMigrationDefinition,
-  MimicUpdateMigrationDefinition,
-  MimicUpdateMigrationDefinitionWithOldSchema,
-} from "../index.js";
-import { loadConfigFile } from "../utils/js-loading/config-loader.js";
-import { MigrationBundler } from "./MigrationBundler.js";
-
-const MIGRATIONS_DIR_NAME = "migrations";
-const MIGRATION_FILE_PATTERN = /^(\d+)_([^.]+)\.(?:[cm]?[jt]s)$/;
-
-export interface CompiledCreateMigrationChange {
-  readonly type: "create";
-  readonly collection: string;
-  readonly schema: SchemaObject;
-  readonly skipIfExists?: boolean;
-}
-
-export interface CompiledUpdateMigrationChange {
-  readonly type: "update";
-  readonly collection: string;
-  readonly schema: SchemaObject;
-  readonly oldSchema?: SchemaObject;
-  readonly dataMigrationSource?: string;
-}
-
-export type CompiledMigrationChange = CompiledCreateMigrationChange | CompiledUpdateMigrationChange;
-
-export interface CompiledMigrationFile {
-  readonly version: number;
-  readonly name: string;
-  readonly filePath: string;
-  readonly checksum: string;
-  readonly changes: readonly CompiledMigrationChange[];
-}
-
-const parseMigrationFileName = (
-  fileName: string,
-): { readonly version: number; readonly name: string } => {
-  const match = fileName.match(MIGRATION_FILE_PATTERN);
-  if (!match) {
-    throw new Error(`Invalid migration filename "${fileName}". Expected "<version>_name.ts".`);
-  }
-
-  return {
-    version: Number.parseInt(match[1]!, 10),
-    name: match[2]!,
-  };
-};
-
-const computeChecksum = (contents: string): string =>
-  createHash("sha256").update(contents).digest("hex");
-
-const loadMigrationDefinitions = (
-  filePath: string,
-): Effect.Effect<readonly MimicMigrationDefinition[], Error> =>
-  loadConfigFile(filePath).pipe(
-    Effect.mapError((error) => (error instanceof Error ? error : new Error(String(error)))),
-    Effect.flatMap((value) =>
-      Effect.try({
-        try: () => {
-          if (!Array.isArray(value)) {
-            throw new Error(`Migration file "${filePath}" must export a default array.`);
-          }
-          return value as readonly MimicMigrationDefinition[];
-        },
-        catch: (error) => (error instanceof Error ? error : new Error(String(error))),
-      }),
-    ),
-  );
-
-const compileCreateChange = (
-  definition: MimicCreateMigrationDefinition,
-): CompiledCreateMigrationChange => ({
-  type: "create",
-  collection: definition.collection,
-  schema: serializeSchema(definition.schema.schema),
-  skipIfExists: definition.skipIfExists,
-});
-
-const hasOldSchema = (
-  definition: MimicUpdateMigrationDefinition,
-): definition is MimicUpdateMigrationDefinitionWithOldSchema => "oldSchema" in definition;
-
-const compileUpdateChange = (
-  definition: MimicUpdateMigrationDefinition,
-  bundler: MigrationBundlerShape,
-  filePath: string,
-  index: number,
-): Effect.Effect<CompiledUpdateMigrationChange, Error> =>
-  Effect.gen(function* () {
-    return {
-      type: "update",
-      collection: definition.collection,
-      schema: serializeSchema(definition.schema.schema),
-      oldSchema: hasOldSchema(definition)
-        ? serializeSchema(definition.oldSchema.schema)
-        : undefined,
-      dataMigrationSource: definition.execute ? yield* bundler.bundle(filePath, index) : undefined,
-    };
-  });
-
-type MigrationBundlerShape = {
-  readonly bundle: (filePath: string, index: number) => Effect.Effect<string, Error>;
-};
-
-const compileMigrationFile = (
-  bundler: MigrationBundlerShape,
-  filePath: string,
-): Effect.Effect<CompiledMigrationFile, Error> =>
-  Effect.gen(function* () {
-    const fileName = path.basename(filePath);
-    const { version, name } = parseMigrationFileName(fileName);
-    const source = yield* Effect.try({
-      try: () => fs.readFileSync(filePath, "utf8"),
-      catch: (error) => (error instanceof Error ? error : new Error(String(error))),
-    });
-    const definitions = yield* loadMigrationDefinitions(filePath);
-    const changes: CompiledMigrationChange[] = [];
-
-    for (const [index, definition] of definitions.entries()) {
-      if (definition.kind === "create") {
-        changes.push(compileCreateChange(definition));
-      } else {
-        changes.push(yield* compileUpdateChange(definition, bundler, filePath, index));
-      }
-    }
-
-    return {
-      version,
-      name,
-      filePath,
-      checksum: computeChecksum(source),
-      changes,
-    };
-  });
-
-export interface MigrationLoaderShape {
-  readonly load: () => Effect.Effect<readonly CompiledMigrationFile[], Error, MigrationBundler>;
-}
-
-export class MigrationLoader extends Context.Service<MigrationLoader, MigrationLoaderShape>()(
-  "@voidhash/mimic-cli/MigrationLoader",
-) {
-  static Default = Layer.succeed(MigrationLoader, {
-    load: () =>
-      Effect.gen(function* () {
-        const bundler = yield* MigrationBundler;
-        const migrationsDir = path.resolve(process.cwd(), MIGRATIONS_DIR_NAME);
-        if (!fs.existsSync(migrationsDir)) {
-          return [] as const;
-        }
-
-        const filePaths = yield* Effect.try({
-          try: () =>
-            fs
-              .readdirSync(migrationsDir, { withFileTypes: true })
-              .filter((entry) => entry.isFile() && MIGRATION_FILE_PATTERN.test(entry.name))
-              .map((entry) => path.join(migrationsDir, entry.name))
-              .sort(),
-          catch: (error) => (error instanceof Error ? error : new Error(String(error))),
-        });
-
-        const compiled: CompiledMigrationFile[] = [];
-        for (const filePath of filePaths) {
-          compiled.push(yield* compileMigrationFile(bundler, filePath));
-        }
-        return compiled;
-      }),
-  });
-}
diff --git a/apps/mimic-cli/src/utils/error-formatter.ts b/apps/mimic-cli/src/utils/error-formatter.ts
deleted file mode 100644
index 2c4e6d722..000000000
--- a/apps/mimic-cli/src/utils/error-formatter.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { Cause, Console, Effect } from "effect";
-
-export const isDebugMode = (): boolean =>
-  process.argv.includes("--debug") || process.argv.includes("-d");
-
-export const withErrorHandler = <A, E, R>(
-  effect: Effect.Effect<A, E, R>,
-): Effect.Effect<A | void, never, R> =>
-  effect.pipe(
-    Effect.catchCause((cause) => {
-      if (isDebugMode()) {
-        return Console.error("\n--- Debug Trace ---").pipe(
-          Effect.andThen(Console.error(Cause.pretty(cause))),
-          Effect.andThen(Console.error("--- End Debug Trace ---\n")),
-          Effect.andThen(Effect.sync(() => process.exit(1))),
-        );
-      }
-      const error = Cause.squash(cause);
-      return Console.error(`Error: ${error instanceof Error ? error.message : String(error)}`).pipe(
-        Effect.andThen(Effect.sync(() => process.exit(1))),
-      );
-    }),
-  );
diff --git a/apps/mimic-cli/src/utils/js-loading/_es5.ts b/apps/mimic-cli/src/utils/js-loading/_es5.ts
deleted file mode 100644
index ff8b4c563..000000000
--- a/apps/mimic-cli/src/utils/js-loading/_es5.ts
+++ /dev/null
@@ -1 +0,0 @@
-export default {};
diff --git a/apps/mimic-cli/src/utils/js-loading/config-loader.ts b/apps/mimic-cli/src/utils/js-loading/config-loader.ts
deleted file mode 100644
index b54faa610..000000000
--- a/apps/mimic-cli/src/utils/js-loading/config-loader.ts
+++ /dev/null
@@ -1,71 +0,0 @@
-import { build, type Plugin } from "esbuild";
-import { Effect } from "effect";
-import { createRequire } from "node:module";
-import * as path from "node:path";
-import { PACKAGE_ROOT } from "../package-root.js";
-
-const PUBLIC_ROOT = path.resolve(PACKAGE_ROOT, "../..");
-
-const workspaceSourcePlugin: Plugin = {
-  name: "workspace-source",
-  setup(buildContext) {
-    const mappings: Record<string, string> = {
-      "@voidhash/mimic-cli": path.resolve(PACKAGE_ROOT, "src/index.ts"),
-      "@voidhash/mimic-core": path.resolve(
-        PUBLIC_ROOT,
-        "packages/mimic-core/src/index.ts",
-      ),
-    };
-
-    buildContext.onResolve({ filter: /^@voidhash\// }, (args) => {
-      const mapped = mappings[args.path];
-      if (mapped) {
-        return { path: mapped };
-      }
-      return undefined;
-    });
-  },
-};
-
-export class FailedToLoadConfigFileError extends Error {
-  constructor(
-    message: string,
-    override readonly cause?: unknown,
-  ) {
-    super(message);
-    this.name = "FailedToLoadConfigFileError";
-  }
-}
-
-const evaluateBundledModule = (filePath: string, source: string): unknown => {
-  const localRequire = createRequire(filePath);
-  const module = { exports: {} as unknown };
-  const evaluate = new Function("require", "module", "exports", source);
-  evaluate(localRequire, module, module.exports);
-  return (module.exports as { readonly default?: unknown }).default ?? module.exports;
-};
-
-export const loadConfigFile = (filePath: string) =>
-  Effect.tryPromise({
-    try: async () => {
-      const result = await build({
-        absWorkingDir: process.cwd(),
-        bundle: true,
-        entryPoints: [filePath],
-        format: "cjs",
-        platform: "node",
-        target: "node20",
-        write: false,
-        plugins: [workspaceSourcePlugin],
-      });
-
-      const source = result.outputFiles[0]?.text;
-      if (!source) {
-        throw new Error(`No bundled output was produced for "${filePath}".`);
-      }
-
-      return evaluateBundledModule(filePath, source);
-    },
-    catch: (error) =>
-      new FailedToLoadConfigFileError(`Failed to load config file: ${filePath}`, error),
-  });
diff --git a/apps/mimic-cli/src/utils/package-root.ts b/apps/mimic-cli/src/utils/package-root.ts
deleted file mode 100644
index b4fd64207..000000000
--- a/apps/mimic-cli/src/utils/package-root.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-import * as path from "node:path";
-
-export const PACKAGE_ROOT = path.resolve(
-  import.meta.dirname,
-  path.basename(import.meta.dirname) === "dist" ? ".." : "../..",
-);
diff --git a/apps/mimic-cli/tests/config-loader.test.ts b/apps/mimic-cli/tests/config-loader.test.ts
deleted file mode 100644
index 4d4b67798..000000000
--- a/apps/mimic-cli/tests/config-loader.test.ts
+++ /dev/null
@@ -1,62 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { Effect } from "effect";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-
-import { ConfigLoader } from "../src/services/ConfigLoader.js";
-
-const originalCwd = process.cwd();
-const cliIndexPath = path.resolve(import.meta.dirname, "../src/index.ts");
-
-const withTempCwd = async (fn: (cwd: string) => Promise<void>) => {
-  const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-config-"));
-  process.chdir(cwd);
-  try {
-    await fn(cwd);
-  } finally {
-    process.chdir(originalCwd);
-    fs.rmSync(cwd, { recursive: true, force: true });
-  }
-};
-
-afterEach(() => {
-  process.chdir(originalCwd);
-});
-
-describe("ConfigLoader", () => {
-  it("loads .env before evaluating mimic.config.ts", async () => {
-    await withTempCwd(async (cwd) => {
-      fs.writeFileSync(
-        path.join(cwd, ".env"),
-        "MIMIC_URL=http://localhost:3000\nMIMIC_USERNAME=root\nMIMIC_PASSWORD=secret\n",
-      );
-      fs.writeFileSync(
-        path.join(cwd, "mimic.config.ts"),
-        `import { defineConfig, env } from ${JSON.stringify(cliIndexPath)};
-
-export default defineConfig({
-  url: env.MIMIC_URL,
-  username: env.MIMIC_USERNAME,
-  password: env.MIMIC_PASSWORD,
-  database: "todos",
-});
-`,
-      );
-
-      const config = await Effect.runPromise(
-        Effect.gen(function* () {
-          const loader = yield* ConfigLoader;
-          return yield* loader.load();
-        }).pipe(Effect.provide(ConfigLoader.Default)),
-      );
-
-      expect(config).toEqual({
-        url: "http://localhost:3000",
-        username: "root",
-        password: "secret",
-        database: "todos",
-      });
-    });
-  });
-});
diff --git a/apps/mimic-cli/tests/generate.test.ts b/apps/mimic-cli/tests/generate.test.ts
deleted file mode 100644
index 701aa6094..000000000
--- a/apps/mimic-cli/tests/generate.test.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { execFileSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-
-const appRoot = path.resolve(import.meta.dirname, "..");
-const cliEntry = path.join(appRoot, "src/cli/index.ts");
-// Under `nodeLinker: hoisted` the tsx bin lives at the workspace root rather than the
-// package-local node_modules; probe both, then fall back to PATH resolution.
-const tsxBin =
-  [
-    path.join(appRoot, "node_modules/.bin/tsx"),
-    path.join(appRoot, "../../node_modules/.bin/tsx"),
-  ].find((candidate) => fs.existsSync(candidate)) ?? "tsx";
-const originalCwd = process.cwd();
-
-const runGenerate = (cwd: string, name: string): void => {
-  execFileSync(tsxBin, [cliEntry, "generate", name], {
-    cwd,
-    stdio: "pipe",
-  });
-};
-
-afterEach(() => {
-  process.chdir(originalCwd);
-});
-
-describe("mimic generate", () => {
-  it(
-    "creates the next zero-padded migration file",
-    () => {
-      const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-generate-"));
-      try {
-        fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
-        fs.writeFileSync(path.join(cwd, "migrations/00001_initial.ts"), "");
-
-        runGenerate(cwd, "Add slug");
-
-        const created = path.join(cwd, "migrations/00002_add-slug.ts");
-        expect(fs.existsSync(created)).toBe(true);
-        expect(fs.readFileSync(created, "utf8")).toContain(
-          "export default mimicConfig.defineMigrations((migration) => [",
-        );
-      } finally {
-        fs.rmSync(cwd, { recursive: true, force: true });
-      }
-    },
-    30_000,
-  );
-});
diff --git a/apps/mimic-cli/tests/migration-loader.test.ts b/apps/mimic-cli/tests/migration-loader.test.ts
deleted file mode 100644
index c396b9d70..000000000
--- a/apps/mimic-cli/tests/migration-loader.test.ts
+++ /dev/null
@@ -1,128 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { Effect } from "effect";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-
-import { MigrationBundler } from "../src/services/MigrationBundler.js";
-import { MigrationLoader } from "../src/services/MigrationLoader.js";
-
-const originalCwd = process.cwd();
-const cliIndexPath = path.resolve(import.meta.dirname, "../src/index.ts");
-
-afterEach(() => {
-  process.chdir(originalCwd);
-});
-
-describe("MigrationLoader", () => {
-  it("serializes primitive schemas and bundles execute migrations", async () => {
-    const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-loader-"));
-    process.chdir(cwd);
-
-    try {
-      fs.writeFileSync(
-        path.join(cwd, "mimic.config.ts"),
-        `import { defineConfig } from ${JSON.stringify(cliIndexPath)};
-
-export default defineConfig({
-  url: "http://localhost:3000",
-  username: "root",
-  password: "secret",
-  database: "todos",
-});
-`,
-      );
-      fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
-      fs.writeFileSync(
-        path.join(cwd, "migrations/00001_todos.ts"),
-        `import mimicConfig from "../mimic.config";
-import { m } from ${JSON.stringify(cliIndexPath)};
-
-const OldTodo = m.Struct({
-  title: m.String().required(),
-});
-
-const NewTodo = m.Struct({
-  title: m.String().required(),
-  slug: m.String().required(),
-});
-
-export default mimicConfig.defineMigrations((migration) => [
-  migration.create({
-    collection: "todos",
-    schema: OldTodo,
-  }),
-  migration.update({
-    collection: "todos",
-    oldSchema: OldTodo,
-    schema: NewTodo,
-    execute: (ctx) => {
-      const title = ctx.oldRoot.title.get();
-      if (title) {
-        ctx.root.slug.set(title.toLowerCase());
-      }
-    },
-  }),
-]);
-`,
-      );
-
-      const migrations = await Effect.runPromise(
-        Effect.gen(function* () {
-          const loader = yield* MigrationLoader;
-          return yield* loader.load();
-        }).pipe(Effect.provide(MigrationLoader.Default), Effect.provide(MigrationBundler.Default)),
-      );
-
-      expect(migrations).toHaveLength(1);
-      expect(migrations[0]?.changes).toHaveLength(2);
-      const updateChange = migrations[0]?.changes[1];
-      expect(migrations[0]?.changes[0]).toEqual({
-        type: "create",
-        collection: "todos",
-        schema: {
-          kind: "object",
-          fields: {
-            title: {
-              kind: "string",
-              required: true,
-            },
-          },
-        },
-      });
-      expect(updateChange).toMatchObject({
-        type: "update",
-        collection: "todos",
-        oldSchema: {
-          kind: "object",
-          fields: {
-            title: {
-              kind: "string",
-              required: true,
-            },
-          },
-        },
-        schema: {
-          kind: "object",
-          fields: {
-            title: {
-              kind: "string",
-              required: true,
-            },
-            slug: {
-              kind: "string",
-              required: true,
-            },
-          },
-        },
-      });
-      expect(updateChange?.type).toBe("update");
-      if (updateChange?.type === "update") {
-        expect(typeof updateChange.dataMigrationSource).toBe("string");
-        expect(updateChange.dataMigrationSource).toContain("__MIMIC_RUN_MIGRATION__");
-      }
-    } finally {
-      fs.rmSync(cwd, { recursive: true, force: true });
-    }
-  });
-});
diff --git a/apps/mimic-cli/tsconfig.json b/apps/mimic-cli/tsconfig.json
deleted file mode 100644
index de4410e9a..000000000
--- a/apps/mimic-cli/tsconfig.json
+++ /dev/null
@@ -1,24 +0,0 @@
-{
-  "compilerOptions": {
-    "lib": ["ESNext"],
-    "target": "ESNext",
-    "module": "Preserve",
-    "moduleDetection": "force",
-    "jsx": "react-jsx",
-    "allowJs": true,
-    "moduleResolution": "bundler",
-    "allowImportingTsExtensions": true,
-    "verbatimModuleSyntax": true,
-    "noEmit": true,
-    "strict": true,
-    "skipLibCheck": true,
-    "noFallthroughCasesInSwitch": true,
-    "noUncheckedIndexedAccess": true,
-    "noImplicitOverride": true,
-    "noUnusedLocals": false,
-    "noUnusedParameters": false,
-    "noPropertyAccessFromIndexSignature": false
-  },
-  "include": ["src", "tests"],
-  "exclude": ["**/node_modules/**"]
-}
diff --git a/apps/mimic-cli/vitest.mts b/apps/mimic-cli/vitest.mts
deleted file mode 100644
index c60fa8c34..000000000
--- a/apps/mimic-cli/vitest.mts
+++ /dev/null
@@ -1,7 +0,0 @@
-import { defineConfig } from "vite-plus";
-
-export default defineConfig({
-  test: {
-    environment: "node",
-  },
-});
diff --git a/apps/mimic-db/MIGRATIONS.md b/apps/mimic-db/MIGRATIONS.md
new file mode 100644
index 000000000..92833033d
--- /dev/null
+++ b/apps/mimic-db/MIGRATIONS.md
@@ -0,0 +1,30 @@
+# Document migrations
+
+Mimic document migrations are ordinary deployed TypeScript modules. A host
+injects a `MigrationRegistry` when it composes the control and document
+engines; no migration source is uploaded, bundled, or evaluated at runtime.
+
+Each registry-owned collection defines a version-0 baseline primitive and an
+ordered list of immutable migration steps. Versions start at 1 and are
+contiguous. Registry construction rejects duplicate collection addresses,
+gaps, and adjacent schema mismatches.
+
+Opening a document always rebuilds its current value before migration. The
+engine first reconciles any source-free legacy schema history to the baseline,
+then directly invokes each pending code migration and validates the value
+against its target primitive. A single atomic store operation persists the
+resulting snapshot and version metadata. Failed migrations leave persisted
+state unchanged.
+
+Reads, lists, submissions, and WebSocket session promotion all depend on this
+load path. A document cannot be observed or joined until its migration commit
+succeeds. Documents with a migration version newer than the deployed registry
+are refused.
+
+Registry bootstrap creates missing databases and collections, records the
+code-managed migration version, and publishes the latest schema for new
+documents. Registry-owned schemas are read-only through public APIs.
+
+Legacy schema history remains compatibility data only. Stored executable
+migration source is never evaluated; a document that still requires it fails
+explicitly.
diff --git a/apps/mimic-db/src/api/handlers/collections.ts b/apps/mimic-db/src/api/handlers/collections.ts
index 64129ffbc..a46b56cfd 100644
--- a/apps/mimic-db/src/api/handlers/collections.ts
+++ b/apps/mimic-db/src/api/handlers/collections.ts
@@ -24,18 +24,6 @@ export const CollectionsHandlersLive = CollectionsRpcs.toLayer(
           yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "read");
           return yield* host.listCollections(databaseId);
         }),
-      UpdateCollectionSchema: ({ collectionId, schema, dataMigrationSource }) =>
-        Effect.gen(function* () {
-          const user = yield* CurrentUser;
-          const databaseId = yield* host.databaseIdForCollection(collectionId);
-          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
-          // Note: today's host method ignores dataMigrationSource for ad-hoc
-          // schema updates — `applyMigration` is the only path that consumes
-          // bundled data-migration sources. Preserve that behavior.
-          void dataMigrationSource;
-          const updated = yield* host.updateCollectionSchema(collectionId, schema);
-          return { id: updated.id, schemaVersion: updated.schemaVersion };
-        }),
       DeleteCollection: ({ collectionId }) =>
         Effect.gen(function* () {
           const user = yield* CurrentUser;
diff --git a/apps/mimic-db/src/api/handlers/index.ts b/apps/mimic-db/src/api/handlers/index.ts
index e408e6998..7804788e0 100644
--- a/apps/mimic-db/src/api/handlers/index.ts
+++ b/apps/mimic-db/src/api/handlers/index.ts
@@ -2,7 +2,6 @@ import { Layer } from "effect";
 
 import { DatabasesHandlersLive } from "./databases.ts";
 import { CollectionsHandlersLive } from "./collections.ts";
-import { MigrationsHandlersLive } from "./migrations.ts";
 import { UsersHandlersLive } from "./users.ts";
 import { GrantsHandlersLive } from "./grants.ts";
 import { DocumentsHandlersLive } from "./documents.ts";
@@ -11,7 +10,6 @@ import { DocumentAuthHandlersLive } from "./document-auth.ts";
 export const ApiHandlersLive = Layer.mergeAll(
   DatabasesHandlersLive,
   CollectionsHandlersLive,
-  MigrationsHandlersLive,
   UsersHandlersLive,
   GrantsHandlersLive,
   DocumentsHandlersLive,
diff --git a/apps/mimic-db/src/api/handlers/migrations.ts b/apps/mimic-db/src/api/handlers/migrations.ts
deleted file mode 100644
index 6b8d428b3..000000000
--- a/apps/mimic-db/src/api/handlers/migrations.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import { Effect } from "effect";
-import { CurrentUser, MigrationsRpcs } from "@voidhash/mimic-server/rpc";
-
-import {
-  HostServiceTag,
-  type ApplyMigrationOptions,
-  type MigrationChange as HostMigrationChange,
-} from "../../app/hostService.ts";
-
-export const MigrationsHandlersLive = MigrationsRpcs.toLayer(
-  Effect.gen(function* () {
-    const host = yield* HostServiceTag;
-    return {
-      ListDatabaseMigrations: ({ databaseId }) =>
-        Effect.gen(function* () {
-          const user = yield* CurrentUser;
-          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
-          return yield* host.listMigrations(databaseId);
-        }),
-      ApplyDatabaseMigration: ({
-        databaseId,
-        version,
-        name,
-        checksum,
-        changes,
-        mode,
-        dryRun,
-        batchSize,
-        redoSucceededOnReplace,
-      }) =>
-        Effect.gen(function* () {
-          const user = yield* CurrentUser;
-          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
-
-          const options: ApplyMigrationOptions = {
-            batchSize,
-            dryRun: dryRun ? { ...dryRun } : false,
-          };
-
-          // Wire schema is `unknown` for `changes`; cast to the host's
-          // typed shape — the host normalizes/validates each change as it
-          // processes them.
-          const hostChanges = changes as ReadonlyArray<HostMigrationChange>;
-
-          const resolvedMode = mode ?? "apply";
-
-          if (resolvedMode === "rerun") {
-            return yield* host.rerunMigration(
-              databaseId,
-              version,
-              name,
-              checksum,
-              hostChanges,
-              options,
-            );
-          }
-          if (resolvedMode === "replace") {
-            return yield* host.replaceMigration(databaseId, version, name, checksum, hostChanges, {
-              ...options,
-              redoSucceeded: redoSucceededOnReplace,
-            });
-          }
-          return yield* host.applyMigration(
-            databaseId,
-            version,
-            name,
-            checksum,
-            hostChanges,
-            options,
-          );
-        }),
-      GetMigrationStatus: ({ databaseId, version }) =>
-        Effect.gen(function* () {
-          const user = yield* CurrentUser;
-          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "admin");
-          return yield* host.getMigrationStatus(databaseId, version);
-        }),
-    };
-  }),
-);
diff --git a/apps/mimic-db/src/app/hostService.ts b/apps/mimic-db/src/app/hostService.ts
index 5fb20bc80..56431c2c7 100644
--- a/apps/mimic-db/src/app/hostService.ts
+++ b/apps/mimic-db/src/app/hostService.ts
@@ -1,9 +1,4 @@
 import { type SchemaObject, type Value } from "@voidhash/mimic-core";
-import type {
-  MigrationDryRunOptions,
-  MigrationRunReport,
-  MigrationStatus,
-} from "@voidhash/mimic-server/rpc";
 import { Context, type Effect, Schema } from "effect";
 
 import type { DocumentSnapshotResponse } from "../document/snapshot.ts";
@@ -12,28 +7,6 @@ import type { SubmitTransactionResponse, TransactionEnvelope } from "../document
 export type DatabasePermission = "read" | "write" | "admin";
 export type DocumentPermission = "read" | "write";
 
-export interface MigrationChangeCreate {
-  readonly type: "create";
-  readonly collection: string;
-  readonly schema: SchemaObject;
-  readonly skipIfExists?: boolean;
-}
-
-export interface MigrationChangeUpdate {
-  readonly type: "update";
-  readonly collection: string;
-  readonly schema: SchemaObject;
-  readonly oldSchema?: SchemaObject;
-  readonly dataMigrationSource?: string;
-}
-
-export type MigrationChange = MigrationChangeCreate | MigrationChangeUpdate;
-
-export interface ApplyMigrationOptions {
-  readonly batchSize?: number;
-  readonly dryRun?: false | MigrationDryRunOptions;
-}
-
 export interface PresenceEntry {
   readonly data: Value;
   readonly userId?: string;
@@ -61,10 +34,7 @@ export interface HostService {
     collectionId: string,
     documentId: string,
     origin: string | null,
-  ) => Effect.Effect<
-    { readonly tokenId: string; readonly permission: DocumentPermission },
-    any
-  >;
+  ) => Effect.Effect<{ readonly tokenId: string; readonly permission: DocumentPermission }, any>;
   readonly createDatabase: (
     name: string,
     description: string,
@@ -88,6 +58,7 @@ export interface HostService {
       readonly name: string;
       readonly schema: SchemaObject;
       readonly schemaVersion: number;
+      readonly migrationVersion: number | null;
     },
     any
   >;
@@ -98,67 +69,11 @@ export interface HostService {
       readonly name: string;
       readonly schema: SchemaObject;
       readonly schemaVersion: number;
+      readonly migrationVersion: number | null;
     }[],
     any
   >;
-  readonly updateCollectionSchema: (
-    collectionId: string,
-    schemaInput: unknown,
-    dataMigrationSource?: string,
-  ) => Effect.Effect<
-    {
-      readonly id: string;
-      readonly databaseId: string;
-      readonly name: string;
-      readonly schema: SchemaObject;
-      readonly schemaVersion: number;
-    },
-    any
-  >;
   readonly deleteCollection: (collectionId: string) => Effect.Effect<void, any>;
-  readonly listMigrations: (databaseId: string) => Effect.Effect<
-    readonly {
-      readonly databaseId: string;
-      readonly version: number;
-      readonly name: string;
-      readonly checksum: string;
-      readonly appliedAt: string;
-      readonly state: "running" | "succeeded" | "failed" | "replaced";
-      readonly totalDocuments: number;
-      readonly succeededDocuments: number;
-      readonly failedDocuments: number;
-      readonly changes?: readonly MigrationChange[];
-    }[],
-    any
-  >;
-  readonly applyMigration: (
-    databaseId: string,
-    version: number,
-    name: string,
-    checksum: string,
-    changes: readonly MigrationChange[],
-    options?: ApplyMigrationOptions,
-  ) => Effect.Effect<MigrationRunReport, any>;
-  readonly rerunMigration: (
-    databaseId: string,
-    version: number,
-    name: string,
-    checksum: string,
-    changes: readonly MigrationChange[],
-    options?: ApplyMigrationOptions,
-  ) => Effect.Effect<MigrationRunReport, any>;
-  readonly replaceMigration: (
-    databaseId: string,
-    version: number,
-    name: string,
-    checksum: string,
-    changes: readonly MigrationChange[],
-    options?: ApplyMigrationOptions & { readonly redoSucceeded?: boolean },
-  ) => Effect.Effect<MigrationRunReport, any>;
-  readonly getMigrationStatus: (
-    databaseId: string,
-    version: number,
-  ) => Effect.Effect<MigrationStatus, any>;
   readonly createUser: (
     username: string,
     password: string,
@@ -205,10 +120,7 @@ export interface HostService {
   readonly listDocuments: (
     collectionId: string,
   ) => Effect.Effect<readonly DocumentSnapshotResponse[], any>;
-  readonly deleteDocument: (
-    collectionId: string,
-    documentId: string,
-  ) => Effect.Effect<void, any>;
+  readonly deleteDocument: (collectionId: string, documentId: string) => Effect.Effect<void, any>;
   readonly submitTransaction: (
     collectionId: string,
     documentId: string,
diff --git a/apps/mimic-db/src/core/control-engine.ts b/apps/mimic-db/src/core/control-engine.ts
index 2b1aa1a66..c16704e56 100644
--- a/apps/mimic-db/src/core/control-engine.ts
+++ b/apps/mimic-db/src/core/control-engine.ts
@@ -1,4 +1,5 @@
 import type { SchemaObject, Value } from "@voidhash/mimic-core";
+import type { MigrationRegistry } from "@voidhash/mimic-server/migrate";
 import {
   ConflictError,
   ForbiddenError,
@@ -6,15 +7,13 @@ import {
   UnauthorizedError,
   type DatabasePermission,
   type DocumentPermission,
-  type MigrationRunReport,
-  type MigrationStatus,
 } from "@voidhash/mimic-server/rpc";
 import { Effect } from "effect";
 
-import type { ApplyMigrationOptions, MigrationChange } from "../app/hostService.ts";
 import { normalizeSchemaObject, sanitizeValueForSchema } from "../document/schema.ts";
 import { hashHex, randomId } from "./ids.ts";
-import type { CollectionRecord, ControlStoreApi, MigrationState } from "./store.ts";
+import { EmptyMigrationRegistry, isRegistryCollection } from "./migration-registry.ts";
+import type { CollectionRecord, ControlStoreApi } from "./store.ts";
 
 const notFound = (message: string): NotFoundError =>
   new NotFoundError({ code: "not_found", message });
@@ -34,6 +33,7 @@ interface CollectionView {
   readonly name: string;
   readonly schema: SchemaObject;
   readonly schemaVersion: number;
+  readonly migrationVersion: number | null;
 }
 
 const toCollectionView = (record: CollectionRecord): CollectionView => ({
@@ -42,6 +42,7 @@ const toCollectionView = (record: CollectionRecord): CollectionView => ({
   name: record.name,
   schema: record.schemaJson,
   schemaVersion: record.schemaVersion,
+  migrationVersion: record.migrationVersion,
 });
 
 export interface ControlEngineApi {
@@ -70,45 +71,18 @@ export interface ControlEngineApi {
   readonly listDatabases: () => Effect.Effect<
     readonly { readonly id: string; readonly name: string; readonly description: string }[]
   >;
-  readonly deleteDatabase: (databaseId: string) => Effect.Effect<void, NotFoundError>;
+  readonly deleteDatabase: (
+    databaseId: string,
+  ) => Effect.Effect<void, NotFoundError | ConflictError>;
   readonly createCollection: (
     databaseId: string,
     name: string,
     schemaInput: unknown,
   ) => Effect.Effect<CollectionView, NotFoundError | ConflictError>;
   readonly listCollections: (databaseId: string) => Effect.Effect<readonly CollectionView[]>;
-  readonly updateCollectionSchema: (
+  readonly deleteCollection: (
     collectionId: string,
-    schemaInput: unknown,
-  ) => Effect.Effect<CollectionView, NotFoundError>;
-  readonly deleteCollection: (collectionId: string) => Effect.Effect<void, NotFoundError>;
-  readonly listMigrations: (databaseId: string) => Effect.Effect<
-    readonly {
-      readonly databaseId: string;
-      readonly version: number;
-      readonly name: string;
-      readonly checksum: string;
-      readonly appliedAt: string;
-      readonly state: MigrationState;
-      readonly totalDocuments: number;
-      readonly succeededDocuments: number;
-      readonly failedDocuments: number;
-      readonly changes?: readonly MigrationChange[];
-    }[]
-  >;
-  readonly applyMigration: (
-    databaseId: string,
-    version: number,
-    name: string,
-    checksum: string,
-    changes: readonly MigrationChange[],
-    mode: "apply" | "rerun" | "replace",
-    options?: ApplyMigrationOptions,
-  ) => Effect.Effect<MigrationRunReport, NotFoundError | ConflictError>;
-  readonly getMigrationStatus: (
-    databaseId: string,
-    version: number,
-  ) => Effect.Effect<MigrationStatus>;
+  ) => Effect.Effect<void, NotFoundError | ConflictError>;
   readonly createUser: (
     username: string,
     password: string,
@@ -170,7 +144,12 @@ export interface ControlEngineApi {
     value: unknown,
     isMaterialized?: (documentId: string) => Effect.Effect<boolean>,
   ) => Effect.Effect<
-    { readonly documentId: string; readonly value: Value; readonly schemaVersion: number },
+    {
+      readonly documentId: string;
+      readonly value: Value;
+      readonly schemaVersion: number;
+      readonly migrationVersion: number | null;
+    },
     NotFoundError | ConflictError
   >;
   readonly findCollection: (collectionId: string) => Effect.Effect<CollectionRecord, NotFoundError>;
@@ -194,11 +173,12 @@ type ControlStoreThrows<A> = (
  * Control-plane logic over a `ControlStore`. Runs inside one serialized control
  * entity in production and in-process (over `makeMemoryControlStore`) for dev/test.
  *
- * Migrations follow the lazy model: `applyMigration` publishes the new schema
- * version(s) and records the migration; documents migrate themselves on load
- * (see `document-engine.ts`). There is no eager per-document "push" here.
+ * Registry-owned schemas are immutable through the public control API.
  */
-export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
+export const makeControlEngine = (
+  store: ControlStoreApi,
+  registry: MigrationRegistry = EmptyMigrationRegistry,
+): ControlEngineApi => {
   const findCollection: ControlEngineApi["findCollection"] = (collectionId) =>
     store
       .findCollectionById(collectionId)
@@ -210,48 +190,6 @@ export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
         ),
       );
 
-  const findCollectionByName = (databaseId: string, name: string) =>
-    store.findCollectionByName(databaseId, name);
-
-  const applySingleChange = (databaseId: string, change: MigrationChange) =>
-    Effect.gen(function* () {
-      const schema = normalizeSchemaObject(change.schema);
-      const existing = yield* findCollectionByName(databaseId, change.collection);
-      if (change.type === "create") {
-        if (existing) {
-          if (change.skipIfExists) return;
-          return yield* Effect.fail(conflict(`Collection '${change.collection}' already exists`));
-        }
-        const id = randomId();
-        yield* store.createCollection({
-          id,
-          databaseId,
-          name: change.collection,
-          schemaJson: schema,
-          schemaVersion: 1,
-        });
-        yield* store.addSchemaVersion({
-          collectionId: id,
-          version: 1,
-          schemaJson: schema,
-          dataMigrationSource: null,
-        });
-        return;
-      }
-      // update
-      if (!existing) {
-        return yield* Effect.fail(notFound(`Collection not found: ${change.collection}`));
-      }
-      const nextVersion = existing.schemaVersion + 1;
-      yield* store.updateCollectionSchema(existing.id, schema, nextVersion);
-      yield* store.addSchemaVersion({
-        collectionId: existing.id,
-        version: nextVersion,
-        schemaJson: schema,
-        dataMigrationSource: change.dataMigrationSource ?? null,
-      });
-    });
-
   return {
     store,
     findCollection,
@@ -318,15 +256,16 @@ export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
         ),
 
     deleteDatabase: (databaseId) =>
-      store
-        .findDatabaseById(databaseId)
-        .pipe(
-          Effect.flatMap((record) =>
-            record
-              ? store.deleteDatabase(databaseId)
-              : Effect.fail(notFound(`Database not found: ${databaseId}`)),
-          ),
-        ),
+      Effect.gen(function* () {
+        const record = yield* store.findDatabaseById(databaseId);
+        if (!record) return yield* Effect.fail(notFound(`Database not found: ${databaseId}`));
+        if (registry.collections.some((entry) => entry.database === record.name)) {
+          return yield* Effect.fail(
+            conflict(`Database '${record.name}' is managed by the deployed migration registry`),
+          );
+        }
+        yield* store.deleteDatabase(databaseId);
+      }),
 
     createCollection: (databaseId, name, schemaInput) =>
       Effect.gen(function* () {
@@ -342,6 +281,7 @@ export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
           name,
           schemaJson: schema,
           schemaVersion: 1,
+          migrationVersion: null,
         });
         yield* store.addSchemaVersion({
           collectionId: id,
@@ -349,7 +289,7 @@ export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
           schemaJson: schema,
           dataMigrationSource: null,
         });
-        return { id, databaseId, name, schema, schemaVersion: 1 };
+        return { id, databaseId, name, schema, schemaVersion: 1, migrationVersion: null };
       }),
 
     listCollections: (databaseId) =>
@@ -357,117 +297,20 @@ export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
         .listCollectionsByDatabase(databaseId)
         .pipe(Effect.map((rows) => rows.map(toCollectionView))),
 
-    updateCollectionSchema: (collectionId, schemaInput) =>
-      Effect.gen(function* () {
-        const collection = yield* findCollection(collectionId);
-        const schema = normalizeSchemaObject(schemaInput);
-        const nextVersion = collection.schemaVersion + 1;
-        yield* store.updateCollectionSchema(collectionId, schema, nextVersion);
-        yield* store.addSchemaVersion({
-          collectionId,
-          version: nextVersion,
-          schemaJson: schema,
-          dataMigrationSource: null,
-        });
-        return { ...toCollectionView(collection), schema, schemaVersion: nextVersion };
-      }),
-
     deleteCollection: (collectionId) =>
-      findCollection(collectionId).pipe(Effect.flatMap(() => store.deleteCollection(collectionId))),
-
-    listMigrations: (databaseId) =>
-      store.listMigrations(databaseId).pipe(
-        Effect.map((rows) =>
-          rows.map((row) => ({
-            databaseId: row.databaseId,
-            version: row.version,
-            name: row.name,
-            checksum: row.checksum,
-            appliedAt: new Date(row.appliedAtMs).toISOString(),
-            state: row.state,
-            totalDocuments: row.totalDocuments,
-            succeededDocuments: row.succeededDocuments,
-            failedDocuments: row.failedDocuments,
-            changes: (row.changesJson ?? undefined) as readonly MigrationChange[] | undefined,
-          })),
-        ),
-      ),
-
-    applyMigration: (databaseId, version, name, checksum, changes, mode, options) =>
       Effect.gen(function* () {
-        const database = yield* store.findDatabaseById(databaseId);
-        if (!database) return yield* Effect.fail(notFound(`Database not found: ${databaseId}`));
-
-        const isDryRun = options?.dryRun !== undefined && options?.dryRun !== false;
-        const existing = yield* store.findMigration(databaseId, version);
-
-        if (mode === "apply" && existing && existing.checksum === checksum) {
-          // Idempotent re-apply of an identical migration.
-          return {
-            databaseId,
-            version,
-            state: "succeeded",
-            succeeded: 0,
-            failed: 0,
-            skipped: 0,
-            perDocument: [],
-            dryRun: isDryRun,
-          };
-        }
-        if (mode === "apply" && existing && existing.checksum !== checksum) {
+        const collection = yield* findCollection(collectionId);
+        const database = yield* store.findDatabaseById(collection.databaseId);
+        if (database && isRegistryCollection(registry, database.name, collection.name)) {
           return yield* Effect.fail(
-            conflict(`Migration version ${version} already applied with a different checksum`),
+            conflict(
+              `Collection '${collection.name}' is managed by the deployed migration registry`,
+            ),
           );
         }
-
-        if (!isDryRun) {
-          for (const change of changes) {
-            yield* applySingleChange(databaseId, change);
-          }
-          yield* store.upsertMigration({
-            databaseId,
-            version,
-            name,
-            checksum,
-            appliedAtMs: Date.now(),
-            state: "succeeded",
-            totalDocuments: 0,
-            succeededDocuments: 0,
-            failedDocuments: 0,
-            changesJson: changes as readonly unknown[],
-          });
-        }
-
-        return {
-          databaseId,
-          version,
-          state: "succeeded",
-          succeeded: 0,
-          failed: 0,
-          skipped: 0,
-          perDocument: [],
-          dryRun: isDryRun,
-        };
+        yield* store.deleteCollection(collectionId);
       }),
 
-    getMigrationStatus: (databaseId, version) =>
-      store.findMigration(databaseId, version).pipe(
-        Effect.map((record) => ({
-          databaseId,
-          version,
-          state: (record?.state ?? "unknown") as MigrationStatus["state"],
-          ...(record ? { checksum: record.checksum } : {}),
-          summary: {
-            pending: 0,
-            running: 0,
-            succeeded: record?.succeededDocuments ?? 0,
-            failed: record?.failedDocuments ?? 0,
-            skipped: 0,
-          },
-          failures: [],
-        })),
-      ),
-
     createUser: (username, password) =>
       Effect.gen(function* () {
         const existing = yield* store.findUserByUsername(username);
@@ -612,7 +455,12 @@ export const makeControlEngine = (store: ControlStoreApi): ControlEngineApi => {
         }
         const sanitized = sanitizeValueForSchema(collection.schemaJson, value);
         yield* store.registerDocument(documentId, collectionId);
-        return { documentId, value: sanitized, schemaVersion: collection.schemaVersion };
+        return {
+          documentId,
+          value: sanitized,
+          schemaVersion: collection.schemaVersion,
+          migrationVersion: collection.migrationVersion,
+        };
       }),
 
     findDocument: (collectionId, documentId) =>
diff --git a/apps/mimic-db/src/core/document-engine.ts b/apps/mimic-db/src/core/document-engine.ts
index 48c207e44..fd5e765ca 100644
--- a/apps/mimic-db/src/core/document-engine.ts
+++ b/apps/mimic-db/src/core/document-engine.ts
@@ -7,18 +7,21 @@ import {
   type Value,
 } from "@voidhash/mimic-core";
 import { MigrationFailedError, NotFoundError } from "@voidhash/mimic-server/rpc";
-import { reconcileMigrationValue } from "@voidhash/mimic-server/migrate";
+import {
+  reconcileMigrationValue,
+  runDirectMigration,
+  type MigrationRegistry,
+} from "@voidhash/mimic-server/migrate";
 import { Effect, Result } from "effect";
 
 import { sanitizeValueForSchema } from "../document/schema.ts";
 import type { SubmitTransactionResponse, TransactionEnvelope } from "../document/transaction.ts";
-import type { MigrationExecutorApi } from "./migration-executor.ts";
 import type { CollectionContext, SchemaProviderApi } from "./schema-provider.ts";
 import type { DocumentStoreApi } from "./store.ts";
 
 export interface DocumentEngineDeps {
   readonly store: DocumentStoreApi;
-  readonly executor: MigrationExecutorApi;
+  readonly migrations: MigrationRegistry;
   readonly schema: SchemaProviderApi;
   readonly snapshotEveryCommands: number;
 }
@@ -29,6 +32,7 @@ export interface LoadedDocument {
   readonly currentSeq: number;
   readonly snapshotSeq: number;
   readonly schemaVersion: number;
+  readonly migrationVersion: number | null;
   readonly collectionId: string;
 }
 
@@ -37,6 +41,7 @@ export interface DocumentEngineApi {
     collectionId: string,
     value: Value,
     schemaVersion: number,
+    migrationVersion: number | null,
   ) => Effect.Effect<void>;
   readonly load: () => Effect.Effect<LoadedDocument, NotFoundError | MigrationFailedError>;
   readonly submit: (
@@ -53,20 +58,23 @@ const migrationFailed = (message: string): MigrationFailedError =>
 
 /**
  * The logic that runs inside a single document entity. Constructed over a
- * per-document `DocumentStore`, the `MigrationExecutor`, and a `SchemaProvider`
- * (which reads collection schema chains from the control plane). The same
- * factory is used in-process for dev/test via `makeMemoryDocumentStore`.
+ * per-document `DocumentStore`, a deployed migration registry, and a
+ * `SchemaProvider`. The same factory is used in-process for tests.
  */
 export const makeDocumentEngine = (deps: DocumentEngineDeps): DocumentEngineApi => {
-  const { store, executor, schema, snapshotEveryCommands } = deps;
+  const { store, migrations, schema, snapshotEveryCommands } = deps;
 
-  const create: DocumentEngineApi["create"] = (collectionId, value, schemaVersion) =>
-    store.initialize(collectionId, value, schemaVersion);
+  const create: DocumentEngineApi["create"] = (
+    collectionId,
+    value,
+    schemaVersion,
+    migrationVersion,
+  ) => store.initialize(collectionId, value, schemaVersion, migrationVersion);
 
   /**
    * Advance `value` from `fromVersion` up to the collection's latest schema by
-   * applying each intervening version's migration — bundled data migration if
-   * present, otherwise a schema reconcile against the previous version.
+   * reconciling each persisted source-free schema version. Stored executable
+   * migration source is rejected and never evaluated.
    */
   const migrateUp = (
     value: Value,
@@ -82,25 +90,25 @@ export const makeDocumentEngine = (deps: DocumentEngineDeps): DocumentEngineApi
             migrationFailed(`Missing schema version ${version} for collection ${ctx.collectionId}`),
           );
         }
-        if (target.dataMigrationSource) {
-          // The bundle reconciles old→new and runs the user migration itself.
-          current = yield* executor.run(target.dataMigrationSource, current);
-        } else {
-          const previous = ctx.versions.find((entry) => entry.version === version - 1);
-          const result = reconcileMigrationValue({
-            oldSchema: parseSchema(previous?.schemaJson ?? target.schemaJson),
-            newSchema: parseSchema(target.schemaJson),
-            value: current,
-          });
-          if (!result.ok || result.value === undefined) {
-            return yield* Effect.fail(
-              migrationFailed(
-                result.ok ? "Migration produced an empty value" : result.error.message,
-              ),
-            );
-          }
-          current = result.value;
+        if (target.dataMigrationSource !== null) {
+          return yield* Effect.fail(
+            migrationFailed(
+              `Legacy schema version ${version} requires executable source, which is no longer supported`,
+            ),
+          );
+        }
+        const previous = ctx.versions.find((entry) => entry.version === version - 1);
+        const result = reconcileMigrationValue({
+          oldSchema: parseSchema(previous?.schemaJson ?? target.schemaJson),
+          newSchema: parseSchema(target.schemaJson),
+          value: current,
+        });
+        if (!result.ok || result.value === undefined) {
+          return yield* Effect.fail(
+            migrationFailed(result.ok ? "Migration produced an empty value" : result.error.message),
+          );
         }
+        current = result.value;
         current = yield* sanitize(target.schemaJson, current);
       }
       return current;
@@ -134,16 +142,47 @@ export const makeDocumentEngine = (deps: DocumentEngineDeps): DocumentEngineApi
         );
       }
       let schemaVersion = meta.schemaVersion;
+      let migrationVersion = meta.migrationVersion;
       let snapshotSeq = meta.snapshotSeq;
+      let changed = false;
 
       const ctx = yield* schema.getCollectionContext(meta.collectionId);
       if (ctx && schemaVersion < ctx.schemaVersion) {
-        // Lazy migration: bring the document onto the latest schema on load,
-        // then durably snapshot the result so the work is done once.
         value = yield* migrateUp(value, schemaVersion, ctx);
         schemaVersion = ctx.schemaVersion;
-        yield* store.writeSnapshot(meta.currentSeq, value, schemaVersion);
-        yield* store.setMeta({ schemaVersion, snapshotSeq: meta.currentSeq });
+        changed = true;
+      }
+
+      if (ctx) {
+        const definition = migrations.find(ctx.databaseName, ctx.collectionName);
+        if (definition) {
+          const currentMigrationVersion = migrationVersion ?? 0;
+          const latestMigrationVersion = definition.migrations.length;
+          if (currentMigrationVersion > latestMigrationVersion) {
+            return yield* Effect.fail(
+              migrationFailed(
+                `Document migration version ${currentMigrationVersion} is newer than deployed version ${latestMigrationVersion}`,
+              ),
+            );
+          }
+          for (const migration of definition.migrations.slice(currentMigrationVersion)) {
+            value = yield* Effect.try({
+              try: () => runDirectMigration(migration, value),
+              catch: (error) =>
+                migrationFailed(error instanceof Error ? error.message : String(error)),
+            });
+            migrationVersion = migration.version;
+            changed = true;
+          }
+          if (migrationVersion === null) {
+            migrationVersion = 0;
+            changed = true;
+          }
+        }
+      }
+
+      if (changed) {
+        yield* store.commitMigration(meta.currentSeq, value, schemaVersion, migrationVersion);
         snapshotSeq = meta.currentSeq;
       }
 
@@ -153,6 +192,7 @@ export const makeDocumentEngine = (deps: DocumentEngineDeps): DocumentEngineApi
         currentSeq: meta.currentSeq,
         snapshotSeq,
         schemaVersion,
+        migrationVersion,
         collectionId: meta.collectionId,
       };
     });
diff --git a/apps/mimic-db/src/core/local-host-service.ts b/apps/mimic-db/src/core/local-host-service.ts
index 23a3e02ab..3538dfe8b 100644
--- a/apps/mimic-db/src/core/local-host-service.ts
+++ b/apps/mimic-db/src/core/local-host-service.ts
@@ -1,5 +1,6 @@
 import { DurableEntityHost, makeDurableEntityAddress } from "@voidhash/platform/DurableEntity";
 import { Effect, Layer } from "effect";
+import type { MigrationRegistry } from "@voidhash/mimic-server/migrate";
 
 import { HostServiceTag, type HostService, type PresenceEntry } from "../app/hostService.ts";
 import { getConfig, type MimicConfig } from "../config.ts";
@@ -12,10 +13,10 @@ import {
 } from "./document-store-factory.ts";
 import { MemoryControlStoreLive } from "./memory-store.ts";
 import {
-  LocalMigrationExecutorLive,
-  MigrationExecutor,
-  type MigrationExecutorApi,
-} from "./migration-executor.ts";
+  EmptyMigrationRegistryLive,
+  ensureMigrationRegistry,
+  MigrationRegistryService,
+} from "./migration-registry.ts";
 import { makeControlStoreSchemaProvider } from "./schema-provider.ts";
 import { ControlStore } from "./store.ts";
 import { MemoryDurableEntityHostLive } from "./local-entity-host.ts";
@@ -27,7 +28,7 @@ const docKeyOf = (collectionId: string, documentId: string): string =>
 export interface LocalHostServiceDeps {
   readonly control: ControlEngineApi;
   readonly entities: DurableEntityHost["Service"];
-  readonly executor: MigrationExecutorApi;
+  readonly migrations: MigrationRegistry;
   readonly documentStores: DocumentStoreFactoryShape;
   readonly config: MimicConfig;
 }
@@ -38,7 +39,7 @@ export interface LocalHostServiceDeps {
  * own serialized `DocumentEngine` over a runtime-selected persistence store.
  */
 export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService => {
-  const { control, entities, executor, documentStores, config } = deps;
+  const { control, entities, migrations, documentStores, config } = deps;
   const schema = makeControlStoreSchemaProvider(control.store);
   const documents = new Map<string, DocumentEngineApi>();
   const presence = new Map<string, Map<string, PresenceEntry>>();
@@ -49,7 +50,7 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
     if (!engine) {
       engine = makeDocumentEngine({
         store: documentStores.make(collectionId, documentId),
-        executor,
+        migrations,
         schema,
         snapshotEveryCommands: config.snapshotEveryCommands,
       });
@@ -100,24 +101,7 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
     createCollection: (databaseId, name, schemaInput) =>
       runControl(() => control.createCollection(databaseId, name, schemaInput)),
     listCollections: (databaseId) => runControl(() => control.listCollections(databaseId)),
-    updateCollectionSchema: (collectionId, schemaInput) =>
-      runControl(() => control.updateCollectionSchema(collectionId, schemaInput)),
     deleteCollection: (collectionId) => runControl(() => control.deleteCollection(collectionId)),
-    listMigrations: (databaseId) => runControl(() => control.listMigrations(databaseId)),
-    applyMigration: (databaseId, version, name, checksum, changes, options) =>
-      runControl(() =>
-        control.applyMigration(databaseId, version, name, checksum, changes, "apply", options),
-      ),
-    rerunMigration: (databaseId, version, name, checksum, changes, options) =>
-      runControl(() =>
-        control.applyMigration(databaseId, version, name, checksum, changes, "rerun", options),
-      ),
-    replaceMigration: (databaseId, version, name, checksum, changes, options) =>
-      runControl(() =>
-        control.applyMigration(databaseId, version, name, checksum, changes, "replace", options),
-      ),
-    getMigrationStatus: (databaseId, version) =>
-      runControl(() => control.getMigrationStatus(databaseId, version)),
     createUser: (username, password) => runControl(() => control.createUser(username, password)),
     listUsers: () => runControl(control.listUsers),
     deleteUser: (userId) => runControl(() => control.deleteUser(userId)),
@@ -164,6 +148,7 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
               collectionId,
               prepared.value,
               prepared.schemaVersion,
+              prepared.migrationVersion,
             );
             return {
               id: prepared.documentId,
@@ -263,29 +248,31 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
 };
 
 /**
- * Builds `HostService` from a `ControlStore` + `MigrationExecutor` in context
- * and bootstraps the root user. Defaults below provide the in-memory backend.
+ * Builds `HostService` from the configured stores and migration registry.
  */
 export const LocalHostServiceLive = Layer.effect(
   HostServiceTag,
   Effect.gen(function* () {
     const controlStore = yield* ControlStore;
     const entities = yield* DurableEntityHost;
-    const executor = yield* MigrationExecutor;
+    const migrations = yield* MigrationRegistryService;
     const documentStores = yield* DocumentStoreFactory;
     const config = getConfig();
-    const control = makeControlEngine(controlStore);
+    const control = makeControlEngine(controlStore, migrations);
     yield* entities.run(makeDurableEntityAddress("mimic-control", "default"), () =>
-      control.ensureRootUser(config.rootUsername, config.rootPassword),
+      Effect.gen(function* () {
+        yield* ensureMigrationRegistry(controlStore, migrations);
+        yield* control.ensureRootUser(config.rootUsername, config.rootPassword);
+      }),
     );
-    return makeLocalHostService({ control, entities, executor, documentStores, config });
+    return makeLocalHostService({ control, entities, migrations, documentStores, config });
   }),
 );
 
 /** In-memory default composition for dev + tests. */
 export const LocalHostServiceDefault = LocalHostServiceLive.pipe(
   Layer.provide(MemoryControlStoreLive),
-  Layer.provide(LocalMigrationExecutorLive),
+  Layer.provide(EmptyMigrationRegistryLive),
   Layer.provide(MemoryDurableEntityHostLive),
   Layer.provide(MemoryDocumentStoreFactoryLive),
 );
diff --git a/apps/mimic-db/src/core/memory-store.ts b/apps/mimic-db/src/core/memory-store.ts
index 803d64ef4..271ac1f93 100644
--- a/apps/mimic-db/src/core/memory-store.ts
+++ b/apps/mimic-db/src/core/memory-store.ts
@@ -10,7 +10,6 @@ import {
   type DocumentMeta,
   type DocumentStoreApi,
   type GrantRecord,
-  type MigrationRecord,
   type SchemaVersionRecord,
   type SnapshotRow,
   type CommandRow,
@@ -29,7 +28,6 @@ export const makeMemoryControlStore = (): ControlStoreApi => {
   const grants = new Map<string, GrantRecord>(); // key `${userId}:${databaseId}`
   const tokens = new Map<string, TokenRecord>();
   const documents = new Map<string, DocumentIndexRecord>();
-  const migrations = new Map<string, MigrationRecord>(); // key `${databaseId}:${version}`
 
   return {
     createDatabase: (record) => sync(() => void databases.set(record.id, record)),
@@ -54,10 +52,17 @@ export const makeMemoryControlStore = (): ControlStoreApi => {
           collections.set(collectionId, { ...existing, schemaJson, schemaVersion: version });
         }
       }),
+    updateCollectionMigration: (collectionId, schemaJson, migrationVersion) =>
+      sync(() => {
+        const existing = collections.get(collectionId);
+        if (existing) {
+          collections.set(collectionId, { ...existing, schemaJson, migrationVersion });
+        }
+      }),
     deleteCollection: (id) =>
       sync(() => {
         collections.delete(id);
-        for (const key of [...schemaVersions.keys()]) {
+        for (const key of schemaVersions.keys()) {
           if (key.startsWith(`${id}:`)) schemaVersions.delete(key);
         }
       }),
@@ -116,16 +121,6 @@ export const makeMemoryControlStore = (): ControlStoreApi => {
         const existing = documents.get(documentId);
         if (existing) documents.set(documentId, { ...existing, deletedAt });
       }),
-
-    upsertMigration: (record) =>
-      sync(() => void migrations.set(`${record.databaseId}:${record.version}`, record)),
-    findMigration: (databaseId, version) => sync(() => migrations.get(`${databaseId}:${version}`)),
-    listMigrations: (databaseId) =>
-      sync(() =>
-        [...migrations.values()]
-          .filter((row) => row.databaseId === databaseId)
-          .sort((a, b) => a.version - b.version),
-      ),
   };
 };
 
@@ -139,9 +134,16 @@ export const makeMemoryDocumentStore = (): DocumentStoreApi => {
 
   return {
     readMeta: () => sync(() => meta),
-    initialize: (collectionId, value, schemaVersion) =>
+    initialize: (collectionId, value, schemaVersion, migrationVersion) =>
       sync(() => {
-        meta = { collectionId, schemaVersion, currentSeq: 0, snapshotSeq: 0, deletedAt: null };
+        meta = {
+          collectionId,
+          schemaVersion,
+          migrationVersion,
+          currentSeq: 0,
+          snapshotSeq: 0,
+          deletedAt: null,
+        };
         snapshots.length = 0;
         commands.length = 0;
         snapshots.push({ seq: 0, value: cloneValue(value), schemaVersion });
@@ -162,6 +164,21 @@ export const makeMemoryDocumentStore = (): DocumentStoreApi => {
       }),
     writeSnapshot: (seq, value, schemaVersion) =>
       sync(() => void snapshots.push({ seq, value: cloneValue(value), schemaVersion })),
+    commitMigration: (seq, value, schemaVersion, migrationVersion) =>
+      sync(() => {
+        const index = snapshots.findIndex((row) => row.seq === seq);
+        const snapshot = { seq, value: cloneValue(value), schemaVersion };
+        if (index === -1) snapshots.push(snapshot);
+        else snapshots[index] = snapshot;
+        if (meta) {
+          meta = {
+            ...meta,
+            schemaVersion,
+            migrationVersion,
+            snapshotSeq: seq,
+          };
+        }
+      }),
     setMeta: (patch) =>
       sync(() => {
         if (meta) meta = { ...meta, ...patch };
diff --git a/apps/mimic-db/src/core/migration-executor.ts b/apps/mimic-db/src/core/migration-executor.ts
deleted file mode 100644
index 1e0f0ec09..000000000
--- a/apps/mimic-db/src/core/migration-executor.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import { cloneValue, validateValue, type Value } from "@voidhash/mimic-core";
-import { MigrationFailedError } from "@voidhash/mimic-server/rpc";
-import { Context, Effect, Layer } from "effect";
-
-/** Global the bundled migration registers its runner under. */
-export const MigrationRunnerGlobal = "__MIMIC_RUN_MIGRATION__";
-
-interface MigrationRunnerOutput {
-  readonly value: Value;
-}
-
-const isRunnerOutput = (value: unknown): value is MigrationRunnerOutput =>
-  typeof value === "object" && value !== null && "value" in value;
-
-const migrationFailed = (message: string, cause?: unknown): MigrationFailedError =>
-  new MigrationFailedError({
-    code: "migration_failed",
-    message,
-    ...(cause === undefined ? {} : { details: { cause: String(cause) } }),
-  });
-
-/**
- * Evaluate a bundled data-migration against a document value.
- *
- * The bundle (produced by `mimic-cli`'s `MigrationBundler`) is a self-contained
- * IIFE that assigns a runner to `globalThis.__MIMIC_RUN_MIGRATION__`. We run it
- * via `new Function` with `globalThis`/`crypto` passed as parameters so the
- * bundle's `globalThis.__MIMIC_RUN_MIGRATION__ = …` assignment lands on a fresh
- * scope object instead of the host realm — **no `node:vm` / quickjs**, so it
- * runs unchanged on the Cloudflare Workers runtime.
- *
- * In production this evaluation happens inside the isolated
- * `MimicMigrationSandbox` container; in dev/test it runs in-process.
- */
-export const evaluateBundledMigration = (source: string, oldValue: Value): Value => {
-  validateValue(oldValue);
-  const scope: Record<string, unknown> = {};
-  scope.globalThis = scope;
-  scope.crypto = globalThis.crypto;
-  const factory = new Function(
-    "globalThis",
-    "crypto",
-    `${source}\nreturn globalThis.${MigrationRunnerGlobal};`,
-  );
-  const runner = factory(scope, globalThis.crypto) as
-    | ((input: { readonly oldValue: Value }) => unknown)
-    | undefined;
-  if (typeof runner !== "function") {
-    throw migrationFailed("Migration bundle did not register a runner");
-  }
-  const output = runner({ oldValue: cloneValue(oldValue) });
-  if (!isRunnerOutput(output)) {
-    throw migrationFailed("Migration bundle returned an invalid result");
-  }
-  validateValue(output.value);
-  return output.value;
-};
-
-export interface MigrationExecutorApi {
-  /**
-   * Transform `oldValue` by running the bundled migration `source`, yielding
-   * the migrated value. Fails with `MigrationFailedError` on any error.
-   */
-  readonly run: (source: string, oldValue: Value) => Effect.Effect<Value, MigrationFailedError>;
-}
-
-export class MigrationExecutor extends Context.Service<MigrationExecutor, MigrationExecutorApi>()(
-  "@voidhash/mimic-db/MigrationExecutor",
-) {}
-
-/** Wrap a raw evaluator into the executor contract with consistent error mapping. */
-export const makeMigrationExecutor = (
-  evaluate: (source: string, oldValue: Value) => Effect.Effect<Value, unknown>,
-): MigrationExecutorApi => ({
-  run: (source, oldValue) =>
-    evaluate(source, oldValue).pipe(
-      Effect.catch((error) =>
-        error instanceof MigrationFailedError
-          ? Effect.fail(error)
-          : Effect.fail(
-              migrationFailed(error instanceof Error ? error.message : String(error), error),
-            ),
-      ),
-    ),
-});
-
-/** In-process executor (dev, tests, and the local standalone backend). */
-export const LocalMigrationExecutorLive = Layer.succeed(
-  MigrationExecutor,
-  makeMigrationExecutor((source, oldValue) =>
-    Effect.try({
-      try: () => evaluateBundledMigration(source, oldValue),
-      catch: (error) => error,
-    }),
-  ),
-);
diff --git a/apps/mimic-db/src/core/migration-registry.ts b/apps/mimic-db/src/core/migration-registry.ts
new file mode 100644
index 000000000..01555b095
--- /dev/null
+++ b/apps/mimic-db/src/core/migration-registry.ts
@@ -0,0 +1,115 @@
+import { serializeSchema } from "@voidhash/mimic-core";
+import {
+  defineMigrationRegistry,
+  latestMigrationPrimitive,
+  type MigrationRegistry,
+} from "@voidhash/mimic-server/migrate";
+import { Context, Effect, Layer } from "effect";
+
+import { randomId } from "./ids.ts";
+import type { ControlStoreApi } from "./store.ts";
+
+export class MigrationRegistryService extends Context.Service<
+  MigrationRegistryService,
+  MigrationRegistry
+>()("@voidhash/mimic-db/MigrationRegistry") {}
+
+export const EmptyMigrationRegistry = defineMigrationRegistry([]);
+
+export const EmptyMigrationRegistryLive = Layer.succeed(
+  MigrationRegistryService,
+  EmptyMigrationRegistry,
+);
+
+const canonicalize = (value: unknown): unknown => {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (typeof value !== "object" || value === null) return value;
+  return Object.fromEntries(
+    Object.entries(value)
+      .sort(([left], [right]) => left.localeCompare(right))
+      .map(([key, entry]) => [key, canonicalize(entry)]),
+  );
+};
+
+const schemasEqual = (left: unknown, right: unknown): boolean =>
+  JSON.stringify(canonicalize(left)) === JSON.stringify(canonicalize(right));
+
+/** Ensures every registry-owned database and collection is present and current. */
+export const ensureMigrationRegistry = (
+  store: ControlStoreApi,
+  registry: MigrationRegistry,
+): Effect.Effect<void> =>
+  Effect.gen(function* () {
+    for (const definition of registry.collections) {
+      let database = yield* store.findDatabaseByName(definition.database);
+      if (!database) {
+        database = {
+          id: randomId(),
+          name: definition.database,
+          description: definition.databaseDescription ?? "",
+        };
+        yield* store.createDatabase(database);
+      }
+
+      const baselineSchema = serializeSchema(definition.baseline.schema);
+      let collection = yield* store.findCollectionByName(database.id, definition.collection);
+      if (!collection) {
+        collection = {
+          id: randomId(),
+          databaseId: database.id,
+          name: definition.collection,
+          schemaJson: baselineSchema,
+          schemaVersion: 1,
+          migrationVersion: 0,
+        };
+        yield* store.createCollection(collection);
+        yield* store.addSchemaVersion({
+          collectionId: collection.id,
+          version: 1,
+          schemaJson: baselineSchema,
+          dataMigrationSource: null,
+        });
+      } else if (collection.migrationVersion === null) {
+        if (!schemasEqual(collection.schemaJson, baselineSchema)) {
+          const baselineVersion = collection.schemaVersion + 1;
+          yield* store.updateCollectionSchema(collection.id, baselineSchema, baselineVersion);
+          yield* store.addSchemaVersion({
+            collectionId: collection.id,
+            version: baselineVersion,
+            schemaJson: baselineSchema,
+            dataMigrationSource: null,
+          });
+          collection = {
+            ...collection,
+            schemaJson: baselineSchema,
+            schemaVersion: baselineVersion,
+          };
+        }
+        yield* store.updateCollectionMigration(collection.id, baselineSchema, 0);
+        collection = { ...collection, schemaJson: baselineSchema, migrationVersion: 0 };
+      }
+
+      const latest = latestMigrationPrimitive(definition);
+      const latestSchema = serializeSchema(latest.schema);
+      const latestVersion = definition.migrations.length;
+      if (collection.migrationVersion !== null && collection.migrationVersion > latestVersion) {
+        return yield* Effect.die(
+          new Error(
+            `Collection ${definition.database}/${definition.collection} has migration version ${collection.migrationVersion}, newer than deployed version ${latestVersion}`,
+          ),
+        );
+      }
+      if (
+        collection.migrationVersion !== latestVersion ||
+        !schemasEqual(collection.schemaJson, latestSchema)
+      ) {
+        yield* store.updateCollectionMigration(collection.id, latestSchema, latestVersion);
+      }
+    }
+  });
+
+export const isRegistryCollection = (
+  registry: MigrationRegistry,
+  database: string,
+  collection: string,
+): boolean => registry.find(database, collection) !== undefined;
diff --git a/apps/mimic-db/src/core/pg-store.ts b/apps/mimic-db/src/core/pg-store.ts
index 729b8de12..5bd5808cf 100644
--- a/apps/mimic-db/src/core/pg-store.ts
+++ b/apps/mimic-db/src/core/pg-store.ts
@@ -37,6 +37,7 @@ const decodeCommand = (input: unknown): Command =>
 interface MetaSqlRow {
   readonly collectionId: string;
   readonly schemaVersion: number;
+  readonly migrationVersion: number | null;
   readonly currentSeq: number | string;
   readonly snapshotSeq: number | string;
   readonly deletedAt: number | string | null;
@@ -54,6 +55,8 @@ interface CommandSqlRow {
 
 /** Postgres SQLSTATE for `undefined_table`. */
 const UNDEFINED_TABLE = "42P01";
+/** Postgres SQLSTATE for `undefined_column`. */
+const UNDEFINED_COLUMN = "42703";
 /** Postgres SQLSTATE for `insufficient_privilege`. */
 const INSUFFICIENT_PRIVILEGE = "42501";
 
@@ -64,6 +67,9 @@ const sqlErrorCauseProperty = (error: SqlError.SqlError, property: string): unkn
 export const isMissingTableError = (error: SqlError.SqlError): boolean =>
   sqlErrorCauseProperty(error, "code") === UNDEFINED_TABLE;
 
+const isMissingColumnError = (error: SqlError.SqlError): boolean =>
+  sqlErrorCauseProperty(error, "code") === UNDEFINED_COLUMN;
+
 /**
  * Whether a `SqlError` is Postgres denying DDL to the connected role (SQLSTATE
  * 42501, `insufficient_privilege`). A PlanetScale Postgres role that inherits
@@ -129,12 +135,31 @@ export const ensureDocumentTables = (config: PgDocumentConfig): Effect.Effect<vo
           id VARCHAR(36) NOT NULL PRIMARY KEY,
           collection_id VARCHAR(36) NOT NULL,
           schema_version INTEGER NOT NULL DEFAULT 1,
+          migration_version INTEGER,
           current_seq BIGINT NOT NULL DEFAULT 0,
           snapshot_seq BIGINT NOT NULL DEFAULT 0,
           deleted_at BIGINT
         )
       `,
     );
+    yield* sql`SELECT migration_version FROM mimic_documents LIMIT 1`.pipe(
+      Effect.asVoid,
+      Effect.catch((error) => {
+        if (!isMissingColumnError(error)) return Effect.fail(error);
+        return sql`ALTER TABLE mimic_documents ADD COLUMN migration_version INTEGER`.pipe(
+          Effect.asVoid,
+          Effect.catch((alterError) =>
+            isDdlDeniedError(alterError)
+              ? Effect.die(
+                  new Error(
+                    "mimic_documents.migration_version is missing and the database denies runtime DDL. Apply the current database migrations before serving traffic.",
+                  ),
+                )
+              : Effect.fail(alterError),
+          ),
+        );
+      }),
+    );
     yield* ensure(
       "mimic_document_snapshots",
       sql`SELECT 1 FROM mimic_document_snapshots LIMIT 1`,
@@ -200,6 +225,7 @@ export const makePgDocumentStore = (
           const sql = yield* SqlClient.SqlClient;
           const rows = yield* sql<MetaSqlRow>`
             SELECT collection_id AS "collectionId", schema_version AS "schemaVersion",
+                   migration_version AS "migrationVersion",
                    current_seq AS "currentSeq", snapshot_seq AS "snapshotSeq", deleted_at AS "deletedAt"
             FROM mimic_documents WHERE id = ${documentId}
           `;
@@ -208,6 +234,7 @@ export const makePgDocumentStore = (
           return {
             collectionId: row.collectionId,
             schemaVersion: row.schemaVersion,
+            migrationVersion: row.migrationVersion,
             currentSeq: Number(row.currentSeq),
             snapshotSeq: Number(row.snapshotSeq),
             deletedAt: row.deletedAt === null ? null : Number(row.deletedAt),
@@ -215,7 +242,7 @@ export const makePgDocumentStore = (
         }),
       ),
 
-    initialize: (collectionId, value, schemaVersion) =>
+    initialize: (collectionId, value, schemaVersion, migrationVersion) =>
       run(
         Effect.gen(function* () {
           const sql = yield* SqlClient.SqlClient;
@@ -223,8 +250,8 @@ export const makePgDocumentStore = (
           yield* sql`DELETE FROM mimic_document_snapshots WHERE document_id = ${documentId}`;
           yield* sql`DELETE FROM mimic_documents WHERE id = ${documentId}`;
           yield* sql`
-            INSERT INTO mimic_documents (id, collection_id, schema_version, current_seq, snapshot_seq, deleted_at)
-            VALUES (${documentId}, ${collectionId}, ${schemaVersion}, 0, 0, NULL)
+            INSERT INTO mimic_documents (id, collection_id, schema_version, migration_version, current_seq, snapshot_seq, deleted_at)
+            VALUES (${documentId}, ${collectionId}, ${schemaVersion}, ${migrationVersion}, 0, 0, NULL)
           `;
           yield* sql`
             INSERT INTO mimic_document_snapshots (document_id, seq, schema_version, state_json)
@@ -304,6 +331,28 @@ export const makePgDocumentStore = (
         }),
       ),
 
+    commitMigration: (seq, value, schemaVersion, migrationVersion) =>
+      run(
+        Effect.gen(function* () {
+          const sql = yield* SqlClient.SqlClient;
+          yield* sql.withTransaction(
+            Effect.gen(function* () {
+              yield* sql`
+                INSERT INTO mimic_document_snapshots (document_id, seq, schema_version, state_json)
+                VALUES (${documentId}, ${seq}, ${schemaVersion}, ${JSON.stringify(value)}::jsonb)
+                ON CONFLICT (document_id, seq)
+                DO UPDATE SET state_json = EXCLUDED.state_json, schema_version = EXCLUDED.schema_version
+              `;
+              yield* sql`
+                UPDATE mimic_documents
+                SET schema_version = ${schemaVersion}, migration_version = ${migrationVersion}, snapshot_seq = ${seq}
+                WHERE id = ${documentId}
+              `;
+            }),
+          );
+        }),
+      ),
+
     setMeta: (patch) =>
       run(
         Effect.gen(function* () {
diff --git a/apps/mimic-db/src/core/schema-provider.ts b/apps/mimic-db/src/core/schema-provider.ts
index beb593f41..ca9af461a 100644
--- a/apps/mimic-db/src/core/schema-provider.ts
+++ b/apps/mimic-db/src/core/schema-provider.ts
@@ -6,10 +6,13 @@ import type { ControlStoreApi, SchemaVersionRecord } from "./store.ts";
 /**
  * Everything a document needs to migrate itself to the collection's latest
  * schema on load: the latest schema + version plus the full ordered version
- * history (each with its optional bundled data-migration source).
+ * history. Legacy source fields are retained only so unsupported executable
+ * migrations can be detected and rejected.
  */
 export interface CollectionContext {
   readonly collectionId: string;
+  readonly databaseName: string;
+  readonly collectionName: string;
   readonly schemaJson: SchemaObject;
   readonly schemaVersion: number;
   readonly versions: readonly SchemaVersionRecord[];
@@ -27,9 +30,13 @@ export const makeControlStoreSchemaProvider = (control: ControlStoreApi): Schema
     Effect.gen(function* () {
       const collection = yield* control.findCollectionById(collectionId);
       if (!collection) return undefined;
+      const database = yield* control.findDatabaseById(collection.databaseId);
+      if (!database) return undefined;
       const versions = yield* control.listSchemaVersions(collectionId);
       return {
         collectionId,
+        databaseName: database.name,
+        collectionName: collection.name,
         schemaJson: collection.schemaJson,
         schemaVersion: collection.schemaVersion,
         versions,
diff --git a/apps/mimic-db/src/core/store.ts b/apps/mimic-db/src/core/store.ts
index 5a1d921e3..3b8333bb0 100644
--- a/apps/mimic-db/src/core/store.ts
+++ b/apps/mimic-db/src/core/store.ts
@@ -18,9 +18,10 @@ export interface CollectionRecord {
   readonly name: string;
   readonly schemaJson: SchemaObject;
   readonly schemaVersion: number;
+  readonly migrationVersion: number | null;
 }
 
-/** A published schema version, with the optional bundled data-migration source. */
+/** A persisted legacy schema version retained for source-free reconciliation. */
 export interface SchemaVersionRecord {
   readonly collectionId: string;
   readonly version: number;
@@ -60,21 +61,6 @@ export interface DocumentIndexRecord {
   readonly deletedAt: number | null;
 }
 
-export type MigrationState = "running" | "succeeded" | "failed" | "replaced";
-
-export interface MigrationRecord {
-  readonly databaseId: string;
-  readonly version: number;
-  readonly name: string;
-  readonly checksum: string;
-  readonly appliedAtMs: number;
-  readonly state: MigrationState;
-  readonly totalDocuments: number;
-  readonly succeededDocuments: number;
-  readonly failedDocuments: number;
-  readonly changesJson: readonly unknown[] | null;
-}
-
 /**
  * Control-plane persistence contract. Platform adapters provide SQL or
  * in-memory implementations. Methods do not declare a typed error channel;
@@ -103,6 +89,11 @@ export interface ControlStoreApi {
     schemaJson: SchemaObject,
     version: number,
   ) => Effect.Effect<void>;
+  readonly updateCollectionMigration: (
+    collectionId: string,
+    schemaJson: SchemaObject,
+    migrationVersion: number,
+  ) => Effect.Effect<void>;
   readonly deleteCollection: (id: string) => Effect.Effect<void>;
   // schema versions
   readonly addSchemaVersion: (record: SchemaVersionRecord) => Effect.Effect<void>;
@@ -142,13 +133,6 @@ export interface ControlStoreApi {
     collectionId: string,
   ) => Effect.Effect<readonly DocumentIndexRecord[]>;
   readonly markDocumentDeleted: (documentId: string, deletedAt: number) => Effect.Effect<void>;
-  // migrations
-  readonly upsertMigration: (record: MigrationRecord) => Effect.Effect<void>;
-  readonly findMigration: (
-    databaseId: string,
-    version: number,
-  ) => Effect.Effect<MigrationRecord | undefined>;
-  readonly listMigrations: (databaseId: string) => Effect.Effect<readonly MigrationRecord[]>;
 }
 
 export class ControlStore extends Context.Service<ControlStore, ControlStoreApi>()(
@@ -162,6 +146,7 @@ export class ControlStore extends Context.Service<ControlStore, ControlStoreApi>
 export interface DocumentMeta {
   readonly collectionId: string;
   readonly schemaVersion: number;
+  readonly migrationVersion: number | null;
   readonly currentSeq: number;
   readonly snapshotSeq: number;
   readonly deletedAt: number | null;
@@ -189,6 +174,7 @@ export interface DocumentStoreApi {
     collectionId: string,
     value: Value,
     schemaVersion: number,
+    migrationVersion: number | null,
   ) => Effect.Effect<void>;
   readonly loadLatestSnapshot: () => Effect.Effect<SnapshotRow | undefined>;
   readonly listCommandsAfter: (seq: number) => Effect.Effect<readonly CommandRow[]>;
@@ -198,6 +184,12 @@ export interface DocumentStoreApi {
     txId: string,
   ) => Effect.Effect<void>;
   readonly writeSnapshot: (seq: number, value: Value, schemaVersion: number) => Effect.Effect<void>;
+  readonly commitMigration: (
+    seq: number,
+    value: Value,
+    schemaVersion: number,
+    migrationVersion: number | null,
+  ) => Effect.Effect<void>;
   readonly setMeta: (
     patch: Partial<
       Pick<DocumentMeta, "currentSeq" | "snapshotSeq" | "schemaVersion" | "deletedAt">
diff --git a/apps/mimic-db/src/document/transaction.ts b/apps/mimic-db/src/document/transaction.ts
index 4e34f1b91..7fa58ef40 100644
--- a/apps/mimic-db/src/document/transaction.ts
+++ b/apps/mimic-db/src/document/transaction.ts
@@ -12,12 +12,6 @@ export interface TransactionEnvelope {
   readonly commands: readonly Command[];
   readonly submittedAt?: string;
   readonly actor?: TransactionActor;
-  /**
-   * Optional. When present, the entity records the resulting snapshot at
-   * this `schema_version`. Used by the migration runner so a per-document
-   * migration transaction advances the document onto the new schema.
-   */
-  readonly schemaVersion?: number;
 }
 
 export interface SubmitTransactionResponse {
@@ -38,7 +32,6 @@ export const TransactionEnvelopeSchema = Schema.Struct({
       connectionId: Schema.optional(Schema.String),
     }),
   ),
-  schemaVersion: Schema.optional(Schema.Number),
 });
 
 export const SubmitTransactionResponseSchema = Schema.Struct({
diff --git a/apps/mimic-db/src/index.ts b/apps/mimic-db/src/index.ts
index ee6ab2922..0d7b10c0c 100644
--- a/apps/mimic-db/src/index.ts
+++ b/apps/mimic-db/src/index.ts
@@ -7,7 +7,7 @@ export * from "./ws/protocol.ts";
 
 export * from "./core/store.ts";
 export * from "./core/memory-store.ts";
-export * from "./core/migration-executor.ts";
+export * from "./core/migration-registry.ts";
 export * from "./core/schema-provider.ts";
 export * from "./core/control-engine.ts";
 export * from "./core/document-engine.ts";
diff --git a/apps/mimic-db/src/worker/durable-host-service.ts b/apps/mimic-db/src/worker/durable-host-service.ts
index 7d6261f66..ef9598449 100644
--- a/apps/mimic-db/src/worker/durable-host-service.ts
+++ b/apps/mimic-db/src/worker/durable-host-service.ts
@@ -1,4 +1,5 @@
 import type { Value } from "@voidhash/mimic-core";
+import type { MigrationRegistry } from "@voidhash/mimic-server/migrate";
 import { NotFoundError } from "@voidhash/mimic-server/rpc";
 import { Effect } from "effect";
 
@@ -18,6 +19,7 @@ export interface DocumentStub {
     collectionId: string,
     value: Value,
     schemaVersion: number,
+    migrationVersion: number | null,
   ) => Effect.Effect<void, any>;
   readonly getSnapshot: () => Effect.Effect<
     { found: true; value: Value; version: number } | { found: false; error?: string },
@@ -32,6 +34,7 @@ export interface DocumentStub {
 export interface DurableHostServiceDeps {
   /** The single control-entity stub, viewed as the control store. */
   readonly controlStore: ControlStoreApi;
+  readonly migrations: MigrationRegistry;
   /** Resolve a document-entity stub for a document. */
   readonly docStub: (collectionId: string, documentId: string) => DocumentStub;
 }
@@ -52,7 +55,7 @@ const isSubmitResponse = (
  */
 export const makeDurableHostService = (deps: DurableHostServiceDeps): HostService => {
   const { docStub } = deps;
-  const control = makeControlEngine(deps.controlStore);
+  const control = makeControlEngine(deps.controlStore, deps.migrations);
 
   return {
     authenticateBasic: control.authenticateBasic,
@@ -62,17 +65,7 @@ export const makeDurableHostService = (deps: DurableHostServiceDeps): HostServic
     deleteDatabase: control.deleteDatabase,
     createCollection: control.createCollection,
     listCollections: control.listCollections,
-    updateCollectionSchema: (collectionId, schemaInput) =>
-      control.updateCollectionSchema(collectionId, schemaInput),
     deleteCollection: control.deleteCollection,
-    listMigrations: control.listMigrations,
-    applyMigration: (databaseId, version, name, checksum, changes, options) =>
-      control.applyMigration(databaseId, version, name, checksum, changes, "apply", options),
-    rerunMigration: (databaseId, version, name, checksum, changes, options) =>
-      control.applyMigration(databaseId, version, name, checksum, changes, "rerun", options),
-    replaceMigration: (databaseId, version, name, checksum, changes, options) =>
-      control.applyMigration(databaseId, version, name, checksum, changes, "replace", options),
-    getMigrationStatus: control.getMigrationStatus,
     createUser: control.createUser,
     listUsers: control.listUsers,
     deleteUser: control.deleteUser,
@@ -108,6 +101,7 @@ export const makeDurableHostService = (deps: DurableHostServiceDeps): HostServic
           collectionId,
           prepared.value,
           prepared.schemaVersion,
+          prepared.migrationVersion,
         );
         return { id: prepared.documentId, collectionId, value: prepared.value, version: 1 };
       }),
diff --git a/apps/mimic-db/tests/helpers.ts b/apps/mimic-db/tests/helpers.ts
index 5d3073a8f..dc28affe8 100644
--- a/apps/mimic-db/tests/helpers.ts
+++ b/apps/mimic-db/tests/helpers.ts
@@ -1,4 +1,5 @@
 import { Effect } from "effect";
+import type { MigrationRegistry } from "@voidhash/mimic-server/migrate";
 
 import type { HostService } from "../src/app/hostService.ts";
 import { getConfig } from "../src/config.ts";
@@ -10,7 +11,7 @@ import {
 import { LocalHostServiceDefault, makeLocalHostService } from "../src/core/local-host-service.ts";
 import { makeMemoryDurableEntityHost } from "../src/core/local-entity-host.ts";
 import { makeMemoryControlStore } from "../src/core/memory-store.ts";
-import { makeMigrationExecutor } from "../src/core/migration-executor.ts";
+import { EmptyMigrationRegistry, ensureMigrationRegistry } from "../src/core/migration-registry.ts";
 
 /**
  * Run a program that depends on `HostServiceTag` against a fresh in-memory
@@ -37,13 +38,12 @@ export const runHostWithControl = <A, E>(
     Effect.gen(function* () {
       const control = makeControlEngine(makeMemoryControlStore());
       const config = getConfig();
-      const executor = makeMigrationExecutor((_, oldValue) => Effect.succeed(oldValue));
       const documentStores = yield* DocumentStoreFactory;
       yield* control.ensureRootUser(config.rootUsername, config.rootPassword);
       const host = makeLocalHostService({
         control,
         entities: makeMemoryDurableEntityHost(),
-        executor,
+        migrations: EmptyMigrationRegistry,
         documentStores,
         config,
       });
@@ -51,6 +51,30 @@ export const runHostWithControl = <A, E>(
     }).pipe(Effect.provide(MemoryDocumentStoreFactoryLive)) as Effect.Effect<A, E>,
   );
 
+/** Runs a program against an in-memory host configured with deployed migrations. */
+export const runHostWithRegistry = <A, E>(
+  migrations: MigrationRegistry,
+  program: (host: HostService) => Effect.Effect<A, E, any>,
+): Promise<A> =>
+  Effect.runPromise(
+    Effect.gen(function* () {
+      const store = makeMemoryControlStore();
+      const control = makeControlEngine(store, migrations);
+      const config = getConfig();
+      const documentStores = yield* DocumentStoreFactory;
+      yield* ensureMigrationRegistry(store, migrations);
+      yield* control.ensureRootUser(config.rootUsername, config.rootPassword);
+      const host = makeLocalHostService({
+        control,
+        entities: makeMemoryDurableEntityHost(),
+        migrations,
+        documentStores,
+        config,
+      });
+      return yield* program(host);
+    }).pipe(Effect.provide(MemoryDocumentStoreFactoryLive)) as Effect.Effect<A, E>,
+  );
+
 /** A minimal mimic-core object schema with a single string field. */
 export const titleSchema = {
   kind: "object" as const,
diff --git a/apps/mimic-db/tests/integration/host-flow.test.ts b/apps/mimic-db/tests/integration/host-flow.test.ts
index a47001e37..b8fcfa17f 100644
--- a/apps/mimic-db/tests/integration/host-flow.test.ts
+++ b/apps/mimic-db/tests/integration/host-flow.test.ts
@@ -3,27 +3,7 @@ import { describe, expect, it } from "vitest";
 
 import { HostServiceTag } from "../../src/app/hostService.ts";
 import type { TransactionEnvelope } from "../../src/document/transaction.ts";
-import {
-  numberValue,
-  objectValue,
-  runHost,
-  runHostWithControl,
-  stringValue,
-  titleCountSchema,
-  titleSchema,
-} from "../helpers.ts";
-
-// A self-contained migration bundle that adds a `count: 7` field.
-const ADD_COUNT_BUNDLE = `
-globalThis.__MIMIC_RUN_MIGRATION__ = function (input) {
-  return {
-    value: {
-      kind: "object",
-      fields: Object.assign({}, input.oldValue.fields, { count: { kind: "number", value: 7 } }),
-    },
-  };
-};
-`;
+import { objectValue, runHost, runHostWithControl, stringValue, titleSchema } from "../helpers.ts";
 
 describe("mimic-db host flow (durable-entity engine, in-memory)", () => {
   it("bootstraps the root user and authenticates", () =>
@@ -201,62 +181,6 @@ describe("mimic-db host flow (durable-entity engine, in-memory)", () => {
       }),
     ));
 
-  it("migrates a document on load via schema reconcile (no data migration source)", () =>
-    runHost(
-      Effect.gen(function* () {
-        const host = yield* HostServiceTag;
-        const db = yield* host.createDatabase("voidhash", "test");
-        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
-        yield* host.createDocument(
-          collection.id,
-          "doc-1",
-          objectValue({ title: stringValue("Hello") }),
-        );
-
-        // Publish v2 (adds a defaulted `count`). No eager push — the document
-        // migrates itself on the next load.
-        const updated = yield* host.updateCollectionSchema(collection.id, titleCountSchema);
-        expect(updated.schemaVersion).toBe(2);
-
-        const fetched = yield* host.getDocument(collection.id, "doc-1");
-        expect((fetched.value as any).fields.title.value).toBe("Hello");
-        expect((fetched.value as any).fields.count).toEqual(numberValue(0));
-      }),
-    ));
-
-  it("migrates a document on load via a bundled data migration (Sandbox-shaped executor)", () =>
-    runHost(
-      Effect.gen(function* () {
-        const host = yield* HostServiceTag;
-        const db = yield* host.createDatabase("voidhash", "test");
-        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
-        yield* host.createDocument(
-          collection.id,
-          "doc-1",
-          objectValue({ title: stringValue("Hello") }),
-        );
-
-        // applyMigration publishes the new schema version with a bundled data
-        // migration source; documents run it lazily on load.
-        const report = yield* host.applyMigration(db.id, 2, "add-count", "checksum-v2", [
-          {
-            type: "update",
-            collection: "paywalls",
-            schema: titleCountSchema as any,
-            dataMigrationSource: ADD_COUNT_BUNDLE,
-          },
-        ]);
-        expect(report.state).toBe("succeeded");
-
-        const fetched = yield* host.getDocument(collection.id, "doc-1");
-        expect((fetched.value as any).fields.count).toEqual(numberValue(7));
-
-        const migrations = yield* host.listMigrations(db.id);
-        expect(migrations).toHaveLength(1);
-        expect(migrations[0]!.version).toBe(2);
-      }),
-    ));
-
   it("mints and validates a single-use document token", () =>
     runHost(
       Effect.gen(function* () {
diff --git a/apps/mimic-db/tests/migrate-with-mimic-cli.test.ts b/apps/mimic-db/tests/migrate-with-mimic-cli.test.ts
deleted file mode 100644
index f9ab1d5cd..000000000
--- a/apps/mimic-db/tests/migrate-with-mimic-cli.test.ts
+++ /dev/null
@@ -1,156 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { Effect } from "effect";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-
-import { HostServiceTag } from "../src/app/hostService.js";
-import { LocalHostServiceDefault } from "../src/core/local-host-service.js";
-import { MigrationBundler } from "../../mimic-cli/src/services/MigrationBundler.js";
-import { MigrationLoader } from "../../mimic-cli/src/services/MigrationLoader.js";
-
-const originalCwd = process.cwd();
-const cliIndexPath = path.resolve(
-  import.meta.dirname,
-  "../../mimic-cli/src/index.ts",
-);
-
-afterEach(() => {
-  process.chdir(originalCwd);
-});
-
-describe("mimic-cli integration with mimic-db", () => {
-  it("compiles execute migrations that mimic-db can apply atomically", async () => {
-    const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "mimic-cli-integration-"));
-    process.chdir(cwd);
-
-    try {
-      fs.writeFileSync(
-        path.join(cwd, "mimic.config.ts"),
-        `import { defineConfig } from ${JSON.stringify(cliIndexPath)};
-
-export default defineConfig({
-  url: "http://localhost:3000",
-  username: "root",
-  password: "secret",
-  database: "todos",
-});
-`,
-      );
-      fs.mkdirSync(path.join(cwd, "migrations"), { recursive: true });
-      fs.writeFileSync(
-        path.join(cwd, "migrations/00001_create.ts"),
-        `import mimicConfig from "../mimic.config";
-import { m } from ${JSON.stringify(cliIndexPath)};
-
-const Todo = m.Struct({
-  title: m.String().required(),
-});
-
-export default mimicConfig.defineMigrations((migration) => [
-  migration.create({
-    collection: "todos",
-    schema: Todo,
-  }),
-]);
-`,
-      );
-      fs.writeFileSync(
-        path.join(cwd, "migrations/00002_add-slug.ts"),
-        `import mimicConfig from "../mimic.config";
-import { m } from ${JSON.stringify(cliIndexPath)};
-
-const OldTodo = m.Struct({
-  title: m.String().required(),
-});
-
-const Todo = m.Struct({
-  title: m.String().required(),
-  slug: m.String().required(),
-});
-
-export default mimicConfig.defineMigrations((migration) => [
-  migration.update({
-    collection: "todos",
-    oldSchema: OldTodo,
-    schema: Todo,
-    execute: (ctx) => {
-      const title = ctx.oldRoot.title.get();
-      if (title) {
-        ctx.root.update({
-          title,
-          slug: title.toLowerCase().replace(/\\s+/g, "-"),
-        });
-      }
-    },
-  }),
-]);
-`,
-      );
-
-      const program = Effect.gen(function* () {
-        const loader = yield* MigrationLoader;
-        const host = yield* HostServiceTag;
-        const migrations = yield* loader.load();
-        const database = yield* host.createDatabase("todos", "");
-
-        yield* host.applyMigration(
-          database.id,
-          migrations[0]!.version,
-          migrations[0]!.name,
-          migrations[0]!.checksum,
-          migrations[0]!.changes,
-        );
-
-        const collectionsAfterCreate = yield* host.listCollections(database.id);
-        const collection = collectionsAfterCreate[0]!;
-        const document = yield* host.createDocument(collection.id, "doc-1", {
-          kind: "object",
-          fields: {
-            title: {
-              kind: "string",
-              value: "Write Tests",
-            },
-          },
-        });
-
-        yield* host.applyMigration(
-          database.id,
-          migrations[1]!.version,
-          migrations[1]!.name,
-          migrations[1]!.checksum,
-          migrations[1]!.changes,
-        );
-
-        const collectionsAfterUpdate = yield* host.listCollections(database.id);
-        expect(collectionsAfterUpdate[0]?.schemaVersion).toBe(2);
-
-        const updated = yield* host.getDocument(collection.id, document.id);
-        expect(updated.value).toEqual({
-          kind: "object",
-          fields: {
-            title: {
-              kind: "string",
-              value: "Write Tests",
-            },
-            slug: {
-              kind: "string",
-              value: "write-tests",
-            },
-          },
-        });
-
-        const applied = yield* host.listMigrations(database.id);
-        expect(applied.map((entry) => entry.version)).toEqual([1, 2]);
-      }).pipe(
-        Effect.provide(MigrationLoader.Default),
-        Effect.provide(MigrationBundler.Default),
-        Effect.provide(LocalHostServiceDefault),
-      );
-
-      await Effect.runPromise(program as any);
-    } finally {
-      fs.rmSync(cwd, { recursive: true, force: true });
-    }
-  });
-});
diff --git a/apps/mimic-db/tests/unit/direct-migration.test.ts b/apps/mimic-db/tests/unit/direct-migration.test.ts
new file mode 100644
index 000000000..2af9647cc
--- /dev/null
+++ b/apps/mimic-db/tests/unit/direct-migration.test.ts
@@ -0,0 +1,218 @@
+import { Primitive, serializeSchema } from "@voidhash/mimic-core";
+import {
+  defineMigration,
+  defineMigrationRegistry,
+  type AnyDirectMigration,
+} from "@voidhash/mimic-server/migrate";
+import { makeDurableEntityAddress } from "@voidhash/platform/DurableEntity";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeDocumentEngine } from "../../src/core/document-engine.ts";
+import { makeMemoryDurableEntityHost } from "../../src/core/local-entity-host.ts";
+import { makeMemoryDocumentStore } from "../../src/core/memory-store.ts";
+import { EmptyMigrationRegistry } from "../../src/core/migration-registry.ts";
+
+const Original = Primitive.Struct({
+  title: Primitive.String().required(),
+});
+
+const Current = Primitive.Struct({
+  title: Primitive.String().required(),
+  count: Primitive.Number().required(),
+});
+
+const registryWith = (migrate: () => AnyDirectMigration) =>
+  defineMigrationRegistry([
+    {
+      database: "example",
+      collection: "documents",
+      baseline: Original,
+      migrations: [migrate()],
+    },
+  ]);
+
+const addCount = () =>
+  defineMigration({
+    version: 1,
+    name: "add-count",
+    from: Original,
+    to: Current,
+    migrate: ({ oldRoot, root }) => root.update({ title: oldRoot.title.get(), count: 7 }),
+  });
+
+const schema = {
+  getCollectionContext: () =>
+    Effect.succeed({
+      collectionId: "collection-1",
+      databaseName: "example",
+      collectionName: "documents",
+      schemaJson: serializeSchema(Current.schema),
+      schemaVersion: 1,
+      versions: [
+        {
+          collectionId: "collection-1",
+          version: 1,
+          schemaJson: serializeSchema(Original.schema),
+          dataMigrationSource: null,
+        },
+      ],
+    }),
+};
+
+describe("document direct migrations", () => {
+  it("commits a pending migration once before returning the document", async () => {
+    const store = makeMemoryDocumentStore();
+    let commits = 0;
+    const trackedStore = {
+      ...store,
+      commitMigration: (...args: Parameters<typeof store.commitMigration>) => {
+        commits += 1;
+        return store.commitMigration(...args);
+      },
+    };
+    const engine = makeDocumentEngine({
+      store: trackedStore,
+      migrations: registryWith(addCount),
+      schema,
+      snapshotEveryCommands: 100,
+    });
+
+    await Effect.runPromise(
+      engine.create("collection-1", Original.encode({ title: "Hello" }), 1, 0),
+    );
+    const first = await Effect.runPromise(engine.load());
+    const second = await Effect.runPromise(engine.load());
+
+    expect(Current.decode(first.value)).toEqual({ title: "Hello", count: 7 });
+    expect(Current.decode(second.value)).toEqual({ title: "Hello", count: 7 });
+    expect(first.migrationVersion).toBe(1);
+    expect(commits).toBe(1);
+  });
+
+  it("leaves persistence unchanged when migration code fails", async () => {
+    const store = makeMemoryDocumentStore();
+    const failing = registryWith(() =>
+      defineMigration({
+        version: 1,
+        name: "fail",
+        from: Original,
+        to: Current,
+        migrate: () => {
+          throw new Error("boom");
+        },
+      }),
+    );
+    const failingEngine = makeDocumentEngine({
+      store,
+      migrations: failing,
+      schema,
+      snapshotEveryCommands: 100,
+    });
+    await Effect.runPromise(
+      failingEngine.create("collection-1", Original.encode({ title: "Hello" }), 1, 0),
+    );
+
+    await expect(Effect.runPromise(failingEngine.load())).rejects.toThrow("boom");
+
+    const fixedEngine = makeDocumentEngine({
+      store,
+      migrations: registryWith(addCount),
+      schema,
+      snapshotEveryCommands: 100,
+    });
+    const loaded = await Effect.runPromise(fixedEngine.load());
+    expect(Current.decode(loaded.value)).toEqual({ title: "Hello", count: 7 });
+  });
+
+  it("serializes concurrent opens so a migration commits once", async () => {
+    const store = makeMemoryDocumentStore();
+    let commits = 0;
+    const engine = makeDocumentEngine({
+      store: {
+        ...store,
+        commitMigration: (...args: Parameters<typeof store.commitMigration>) => {
+          commits += 1;
+          return store.commitMigration(...args);
+        },
+      },
+      migrations: registryWith(addCount),
+      schema,
+      snapshotEveryCommands: 100,
+    });
+    await Effect.runPromise(
+      engine.create("collection-1", Original.encode({ title: "Hello" }), 1, 0),
+    );
+
+    const entities = makeMemoryDurableEntityHost();
+    const address = makeDurableEntityAddress("mimic-document", "doc-1");
+    const [first, second] = await Promise.all([
+      Effect.runPromise(entities.run(address, engine.load)),
+      Effect.runPromise(entities.run(address, engine.load)),
+    ]);
+
+    expect(Current.decode(first.value)).toEqual({ title: "Hello", count: 7 });
+    expect(Current.decode(second.value)).toEqual({ title: "Hello", count: 7 });
+    expect(commits).toBe(1);
+  });
+
+  it("rejects legacy executable source without changing persistence", async () => {
+    const store = makeMemoryDocumentStore();
+    const engine = makeDocumentEngine({
+      store,
+      migrations: EmptyMigrationRegistry,
+      schema: {
+        getCollectionContext: () =>
+          Effect.succeed({
+            collectionId: "collection-1",
+            databaseName: "example",
+            collectionName: "documents",
+            schemaJson: serializeSchema(Current.schema),
+            schemaVersion: 2,
+            versions: [
+              {
+                collectionId: "collection-1",
+                version: 1,
+                schemaJson: serializeSchema(Original.schema),
+                dataMigrationSource: null,
+              },
+              {
+                collectionId: "collection-1",
+                version: 2,
+                schemaJson: serializeSchema(Current.schema),
+                dataMigrationSource: "return value",
+              },
+            ],
+          }),
+      },
+      snapshotEveryCommands: 100,
+    });
+    const original = Original.encode({ title: "Hello" });
+    await Effect.runPromise(engine.create("collection-1", original, 1, null));
+
+    await expect(Effect.runPromise(engine.load())).rejects.toThrow(
+      "executable source, which is no longer supported",
+    );
+
+    const meta = await Effect.runPromise(store.readMeta());
+    const snapshot = await Effect.runPromise(store.loadLatestSnapshot());
+    expect(meta?.schemaVersion).toBe(1);
+    expect(meta?.migrationVersion).toBeNull();
+    expect(snapshot?.value).toEqual(original);
+  });
+
+  it("rejects documents newer than the deployed migration registry", async () => {
+    const store = makeMemoryDocumentStore();
+    const engine = makeDocumentEngine({
+      store,
+      migrations: registryWith(addCount),
+      schema,
+      snapshotEveryCommands: 100,
+    });
+    await Effect.runPromise(
+      engine.create("collection-1", Current.encode({ title: "Hello", count: 7 }), 1, 2),
+    );
+
+    await expect(Effect.runPromise(engine.load())).rejects.toThrow("newer than deployed version");
+  });
+});
diff --git a/apps/mimic-db/tests/unit/migration-executor.test.ts b/apps/mimic-db/tests/unit/migration-executor.test.ts
deleted file mode 100644
index 87b69d831..000000000
--- a/apps/mimic-db/tests/unit/migration-executor.test.ts
+++ /dev/null
@@ -1,56 +0,0 @@
-import type { Value } from "@voidhash/mimic-core";
-import { Effect } from "effect";
-import { describe, expect, it } from "vitest";
-
-import {
-  evaluateBundledMigration,
-  LocalMigrationExecutorLive,
-  MigrationExecutor,
-} from "../../src/core/migration-executor.ts";
-
-// A migration "bundle" of the shape `MigrationBundler` emits: a self-contained
-// script that registers a runner on `globalThis`. We exercise the QuickJS/vm
-// replacement directly — it must run with no `node:vm`.
-const ADD_COUNT_BUNDLE = `
-globalThis.__MIMIC_RUN_MIGRATION__ = function (input) {
-  var fields = Object.assign({}, input.oldValue.fields, {
-    count: { kind: "number", value: 42 },
-  });
-  return { value: { kind: "object", fields: fields } };
-};
-`;
-
-const oldValue: Value = {
-  kind: "object",
-  fields: { title: { kind: "string", value: "Hello" } },
-};
-
-describe("migration executor (node:vm / quickjs replacement)", () => {
-  it("evaluates a bundled migration in an isolated scope", () => {
-    const result = evaluateBundledMigration(ADD_COUNT_BUNDLE, oldValue);
-    expect((result as any).fields.count).toEqual({ kind: "number", value: 42 });
-    expect((result as any).fields.title).toEqual({ kind: "string", value: "Hello" });
-    // The host realm must be untouched by the bundle's globalThis assignment.
-    expect((globalThis as any).__MIMIC_RUN_MIGRATION__).toBeUndefined();
-  });
-
-  it("runs through the MigrationExecutor service", async () => {
-    const value = await Effect.runPromise(
-      Effect.gen(function* () {
-        const executor = yield* MigrationExecutor;
-        return yield* executor.run(ADD_COUNT_BUNDLE, oldValue);
-      }).pipe(Effect.provide(LocalMigrationExecutorLive)),
-    );
-    expect((value as any).fields.count).toEqual({ kind: "number", value: 42 });
-  });
-
-  it("fails with MigrationFailedError when the bundle registers no runner", async () => {
-    const exit = await Effect.runPromiseExit(
-      Effect.gen(function* () {
-        const executor = yield* MigrationExecutor;
-        return yield* executor.run("// no runner", oldValue);
-      }).pipe(Effect.provide(LocalMigrationExecutorLive)),
-    );
-    expect(exit._tag).toBe("Failure");
-  });
-});
diff --git a/apps/mimic-db/tests/unit/migration-registry.test.ts b/apps/mimic-db/tests/unit/migration-registry.test.ts
new file mode 100644
index 000000000..202641435
--- /dev/null
+++ b/apps/mimic-db/tests/unit/migration-registry.test.ts
@@ -0,0 +1,118 @@
+import { Primitive, serializeSchema } from "@voidhash/mimic-core";
+import { defineMigration, defineMigrationRegistry } from "@voidhash/mimic-server/migrate";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeControlEngine } from "../../src/core/control-engine.ts";
+import { makeMemoryControlStore } from "../../src/core/memory-store.ts";
+import { ensureMigrationRegistry } from "../../src/core/migration-registry.ts";
+
+const Baseline = Primitive.Struct({ title: Primitive.String().required() });
+const Current = Primitive.Struct({
+  title: Primitive.String().required(),
+  count: Primitive.Number().default(0),
+});
+
+const registry = defineMigrationRegistry([
+  {
+    database: "example",
+    collection: "documents",
+    baseline: Baseline,
+    migrations: [
+      defineMigration({
+        version: 1,
+        name: "add-count",
+        from: Baseline,
+        to: Current,
+      }),
+    ],
+  },
+]);
+
+describe("migration registry provisioning", () => {
+  it("creates registry resources directly at the latest deployed version", async () => {
+    const store = makeMemoryControlStore();
+    await Effect.runPromise(ensureMigrationRegistry(store, registry));
+
+    const database = await Effect.runPromise(store.findDatabaseByName("example"));
+    const collection = await Effect.runPromise(
+      store.findCollectionByName(database!.id, "documents"),
+    );
+
+    expect(collection?.schemaJson).toEqual(serializeSchema(Current.schema));
+    expect(collection?.schemaVersion).toBe(1);
+    expect(collection?.migrationVersion).toBe(1);
+  });
+
+  it("captures a final source-free baseline for an existing collection", async () => {
+    const store = makeMemoryControlStore();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        yield* store.createDatabase({ id: "db", name: "example", description: "" });
+        yield* store.createCollection({
+          id: "collection",
+          databaseId: "db",
+          name: "documents",
+          schemaJson: { kind: "object", fields: {} },
+          schemaVersion: 4,
+          migrationVersion: null,
+        });
+        yield* store.addSchemaVersion({
+          collectionId: "collection",
+          version: 4,
+          schemaJson: { kind: "object", fields: {} },
+          dataMigrationSource: null,
+        });
+        yield* ensureMigrationRegistry(store, registry);
+      }),
+    );
+
+    const collection = await Effect.runPromise(store.findCollectionById("collection"));
+    const baseline = await Effect.runPromise(store.findSchemaVersion("collection", 5));
+    expect(collection?.schemaVersion).toBe(5);
+    expect(collection?.migrationVersion).toBe(1);
+    expect(baseline?.schemaJson).toEqual(serializeSchema(Baseline.schema));
+    expect(baseline?.dataMigrationSource).toBeNull();
+  });
+
+  it("prevents public deletion of registry-owned resources", async () => {
+    const store = makeMemoryControlStore();
+    await Effect.runPromise(ensureMigrationRegistry(store, registry));
+    const database = await Effect.runPromise(store.findDatabaseByName("example"));
+    const collection = await Effect.runPromise(
+      store.findCollectionByName(database!.id, "documents"),
+    );
+    const control = makeControlEngine(store, registry);
+
+    const databaseResult = await Effect.runPromise(
+      Effect.result(control.deleteDatabase(database!.id)),
+    );
+    const collectionResult = await Effect.runPromise(
+      Effect.result(control.deleteCollection(collection!.id)),
+    );
+
+    expect(databaseResult._tag).toBe("Failure");
+    expect(collectionResult._tag).toBe("Failure");
+  });
+
+  it("refuses to bootstrap with an older deployed registry", async () => {
+    const store = makeMemoryControlStore();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        yield* store.createDatabase({ id: "db", name: "example", description: "" });
+        yield* store.createCollection({
+          id: "collection",
+          databaseId: "db",
+          name: "documents",
+          schemaJson: serializeSchema(Current.schema),
+          schemaVersion: 1,
+          migrationVersion: 2,
+        });
+      }),
+    );
+
+    await expect(Effect.runPromise(ensureMigrationRegistry(store, registry))).rejects.toThrow(
+      "newer than deployed version",
+    );
+  });
+});
diff --git a/packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql b/packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql
index a900eecdd..7cbe32308 100644
--- a/packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql
+++ b/packages/db/src/alchemy-migrations/20260624151149_mimic_document_tables/migration.sql
@@ -10,6 +10,7 @@ CREATE TABLE IF NOT EXISTS mimic_documents (
 	id VARCHAR(36) NOT NULL PRIMARY KEY,
 	collection_id VARCHAR(36) NOT NULL,
 	schema_version INTEGER NOT NULL DEFAULT 1,
+	migration_version INTEGER,
 	current_seq BIGINT NOT NULL DEFAULT 0,
 	snapshot_seq BIGINT NOT NULL DEFAULT 0,
 	deleted_at BIGINT
diff --git a/packages/db/src/alchemy-migrations/20260712120000_mimic_migration_version/migration.sql b/packages/db/src/alchemy-migrations/20260712120000_mimic_migration_version/migration.sql
new file mode 100644
index 000000000..cb7648476
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260712120000_mimic_migration_version/migration.sql
@@ -0,0 +1,2 @@
+ALTER TABLE mimic_documents
+ADD COLUMN IF NOT EXISTS migration_version INTEGER;
diff --git a/packages/mimic-schema/package.json b/packages/mimic-schema/package.json
index ffaed67ae..de958b0d0 100644
--- a/packages/mimic-schema/package.json
+++ b/packages/mimic-schema/package.json
@@ -19,7 +19,8 @@
     "test": "vp test run -c vitest.mts"
   },
   "dependencies": {
-    "@voidhash/mimic-core": "workspace:*"
+    "@voidhash/mimic-core": "workspace:*",
+    "@voidhash/mimic-server": "workspace:*"
   },
   "devDependencies": {
     "@types/node": "^20",
diff --git a/packages/mimic-schema/src/document.ts b/packages/mimic-schema/src/document.ts
index 315463e6a..348ec455c 100644
--- a/packages/mimic-schema/src/document.ts
+++ b/packages/mimic-schema/src/document.ts
@@ -1,10 +1,7 @@
 import { Primitive } from "@voidhash/mimic-core";
+import { PaywallDocumentBaseline } from "./migrations/00000_baseline.ts";
 
-import { RootNode } from "./nodes/index.ts";
-
-export const PaywallDesignerDocument = Primitive.Tree({
-  root: RootNode,
-});
+export const PaywallDesignerDocument: typeof PaywallDocumentBaseline = PaywallDocumentBaseline;
 
 /** Encode/insert input for the document tree — an explicit array of root nodes. */
 export type PaywallDesignerDocumentInput = NonNullable<
diff --git a/packages/mimic-schema/src/index.ts b/packages/mimic-schema/src/index.ts
index 2b2908b25..60e41cad4 100644
--- a/packages/mimic-schema/src/index.ts
+++ b/packages/mimic-schema/src/index.ts
@@ -7,6 +7,7 @@ export * from "./component-bindings/index.ts";
 export * from "./document.ts";
 export * from "./interactions/index.ts";
 export * from "./locales/index.ts";
+export * from "./migrations/index.ts";
 export * from "./nodes/index.ts";
 export * from "./presence.ts";
 export * from "./reconcile/index.ts";
diff --git a/packages/mimic-schema/src/migrations/00000_baseline.ts b/packages/mimic-schema/src/migrations/00000_baseline.ts
new file mode 100644
index 000000000..b8aeb032c
--- /dev/null
+++ b/packages/mimic-schema/src/migrations/00000_baseline.ts
@@ -0,0 +1,8 @@
+import { Primitive } from "@voidhash/mimic-core";
+
+import { RootNode } from "../nodes/index.ts";
+
+/** Document schema at the direct-migration cutover. */
+export const PaywallDocumentBaseline = Primitive.Tree({
+  root: RootNode,
+});
diff --git a/packages/mimic-schema/src/migrations/index.ts b/packages/mimic-schema/src/migrations/index.ts
new file mode 100644
index 000000000..4316cea8b
--- /dev/null
+++ b/packages/mimic-schema/src/migrations/index.ts
@@ -0,0 +1,17 @@
+import { defineMigrationRegistry } from "@voidhash/mimic-server/migrate";
+
+import { PaywallDocumentBaseline } from "./00000_baseline.ts";
+
+export const MIMIC_DATABASE_NAME = "voidhash";
+export const MIMIC_PAYWALLS_COLLECTION_NAME = "paywalls";
+
+/** Deployed document migrations shared by the supported server runtimes. */
+export const PaywallMigrationRegistry = defineMigrationRegistry([
+  {
+    database: MIMIC_DATABASE_NAME,
+    databaseDescription: "Voidhash paywall documents",
+    collection: MIMIC_PAYWALLS_COLLECTION_NAME,
+    baseline: PaywallDocumentBaseline,
+    migrations: [],
+  },
+]);
diff --git a/packages/mimic-server/src/effect/DatabaseHandle.ts b/packages/mimic-server/src/effect/DatabaseHandle.ts
index 1589f3fc1..1b95a6614 100644
--- a/packages/mimic-server/src/effect/DatabaseHandle.ts
+++ b/packages/mimic-server/src/effect/DatabaseHandle.ts
@@ -4,7 +4,7 @@ import { Primitive, serializeSchema } from "@voidhash/mimic-core";
 import { CollectionHandle } from "./CollectionHandle.ts";
 import { RawCollectionHandle } from "./RawCollectionHandle.ts";
 import type { MimicSDK } from "./MimicSDK.ts";
-import type { CollectionInfo, DatabaseMigrationChange, DatabaseMigrationInfo } from "./types.ts";
+import type { CollectionInfo } from "./types.ts";
 
 /**
  * Typed handle for a database. Methods that depend on a known schema use
@@ -71,27 +71,6 @@ export class DatabaseHandle {
     return new CollectionHandle(id, this.id, primitive, this.sdk);
   }
 
-  /**
-   * Update a collection's schema by passing in a typed `Primitive`. Note:
-   * the `dataMigrationSource` parameter is preserved on the wire but the
-   * server's ad-hoc `updateCollectionSchema` path doesn't apply bundled
-   * data migrations — `applyMigration` is the only path that does. This
-   * mirrors the previous SDK behavior.
-   */
-  updateCollectionSchema<TPrimitive extends Primitive.AnyPrimitive>(
-    collectionId: string,
-    primitive: TPrimitive,
-    dataMigrationSource?: string,
-  ) {
-    return this.sdk.runEffect((client) =>
-      client.UpdateCollectionSchema({
-        collectionId,
-        schema: serializeSchema(primitive.schema),
-        dataMigrationSource,
-      }),
-    );
-  }
-
   // ---------------------------------------------------------------------
   // Raw helpers — for consumers that work with dynamic JSON values
   // (admin app, tooling). These bypass `Primitive` encode/decode.
@@ -110,66 +89,4 @@ export class DatabaseHandle {
   collectionRaw(collectionId: string): RawCollectionHandle {
     return new RawCollectionHandle(collectionId, this.id, this.sdk);
   }
-
-  /**
-   * Update a collection's schema using raw schema JSON. Identical wire shape
-   * as `updateCollectionSchema` but skips `Primitive`-based serialization.
-   */
-  updateCollectionSchemaRaw(collectionId: string, schema: unknown, dataMigrationSource?: string) {
-    return this.sdk.runEffect((client) =>
-      client.UpdateCollectionSchema({
-        collectionId,
-        schema,
-        dataMigrationSource,
-      }),
-    );
-  }
-
-  // ---------------------------------------------------------------------
-  // Migrations
-  // ---------------------------------------------------------------------
-
-  listMigrations() {
-    return this.sdk.runEffect(
-      (client) =>
-        client.ListDatabaseMigrations({ databaseId: this.id }) as Effect.Effect<
-          readonly DatabaseMigrationInfo[],
-          unknown
-        >,
-    );
-  }
-
-  applyMigration(options: {
-    readonly version: number;
-    readonly name: string;
-    readonly checksum: string;
-    readonly changes: readonly DatabaseMigrationChange[];
-    readonly mode?: "apply" | "rerun" | "replace";
-    readonly dryRun?: { readonly limit?: number; readonly samplePercent?: number };
-    readonly batchSize?: number;
-    readonly redoSucceededOnReplace?: boolean;
-  }) {
-    return this.sdk.runEffect((client) =>
-      client.ApplyDatabaseMigration({
-        databaseId: this.id,
-        version: options.version,
-        name: options.name,
-        checksum: options.checksum,
-        changes: options.changes,
-        mode: options.mode,
-        dryRun: options.dryRun,
-        batchSize: options.batchSize,
-        redoSucceededOnReplace: options.redoSucceededOnReplace,
-      }),
-    );
-  }
-
-  getMigrationStatus(version: number) {
-    return this.sdk.runEffect((client) =>
-      client.GetMigrationStatus({
-        databaseId: this.id,
-        version,
-      }),
-    );
-  }
 }
diff --git a/packages/mimic-server/src/effect/index.ts b/packages/mimic-server/src/effect/index.ts
index 7acedbd36..2701464ad 100644
--- a/packages/mimic-server/src/effect/index.ts
+++ b/packages/mimic-server/src/effect/index.ts
@@ -7,8 +7,6 @@ export type {
   CollectionInfo,
   CreateUserResult,
   DatabaseInfo,
-  DatabaseMigrationChange,
-  DatabaseMigrationInfo,
   DocumentAuthenticationSetup,
   DocumentSnapshot,
   RawDocumentSnapshot,
diff --git a/packages/mimic-server/src/effect/types.ts b/packages/mimic-server/src/effect/types.ts
index c734059ef..3d6b129b1 100644
--- a/packages/mimic-server/src/effect/types.ts
+++ b/packages/mimic-server/src/effect/types.ts
@@ -3,13 +3,8 @@ import type {
   Collection,
   CreateUserResponse,
   Database,
-  DatabaseMigration,
   DocumentAuthenticationSetup as RpcDocumentAuthenticationSetup,
   DocumentSnapshotResponse,
-  MigrationChange,
-  MigrationDryRunOptions,
-  MigrationRunReport,
-  MigrationStatus,
 } from "../rpc/index.ts";
 
 // Re-export wire types under the legacy SDK names so consumers don't have
@@ -17,13 +12,8 @@ import type {
 export type DatabaseInfo = Database;
 export type CollectionInfo = Collection;
 export type CreateUserResult = CreateUserResponse;
-export type DatabaseMigrationChange = MigrationChange;
-export type DatabaseMigrationInfo = DatabaseMigration;
 export type DocumentAuthenticationSetup = RpcDocumentAuthenticationSetup;
 export type RawDocumentSnapshot = DocumentSnapshotResponse;
-export type DatabaseMigrationRunReport = MigrationRunReport;
-export type DatabaseMigrationStatus = MigrationStatus;
-export type DatabaseMigrationDryRunOptions = MigrationDryRunOptions;
 
 export interface DocumentSnapshot<TSnapshot = unknown> {
   readonly id: string;
@@ -44,5 +34,5 @@ export type SnapshotFor<TPrimitive extends Primitive.AnyPrimitive> =
   Primitive.InferSnapshot<TPrimitive>;
 
 // Re-export for downstream consumers that build SchemaObject values
-// (e.g. mimic-cli, mimic-example-server). The type comes from mimic-core.
+// dynamic schema consumers. The type comes from mimic-core.
 export type { SchemaObject };
diff --git a/packages/mimic-server/src/index.ts b/packages/mimic-server/src/index.ts
index 304af1690..d9af44bd9 100644
--- a/packages/mimic-server/src/index.ts
+++ b/packages/mimic-server/src/index.ts
@@ -8,8 +8,6 @@ export type {
   CollectionInfo,
   CreateUserResult,
   DatabaseInfo,
-  DatabaseMigrationChange,
-  DatabaseMigrationInfo,
   DocumentAuthenticationSetup,
   DocumentSnapshot,
   RawDocumentSnapshot,
diff --git a/packages/mimic-server/src/migrate/migration/definition.ts b/packages/mimic-server/src/migrate/migration/definition.ts
new file mode 100644
index 000000000..f2eed9dc5
--- /dev/null
+++ b/packages/mimic-server/src/migrate/migration/definition.ts
@@ -0,0 +1,111 @@
+import { Primitive, serializeSchema } from "@voidhash/mimic-core";
+
+export interface DirectMigrationContext<TTo extends Primitive.AnyPrimitive> {
+  readonly root: Primitive.InferProxy<TTo>;
+}
+
+export interface DirectMigrationContextWithOld<
+  TFrom extends Primitive.AnyPrimitive,
+  TTo extends Primitive.AnyPrimitive,
+> extends DirectMigrationContext<TTo> {
+  readonly oldRoot: Primitive.InferProxy<TFrom>;
+}
+
+export interface DirectMigration<
+  TFrom extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+  TTo extends Primitive.AnyPrimitive = Primitive.AnyPrimitive,
+> {
+  readonly version: number;
+  readonly name: string;
+  readonly from: TFrom;
+  readonly to: TTo;
+  readonly migrate?: (context: DirectMigrationContextWithOld<TFrom, TTo>) => void;
+}
+
+export type AnyDirectMigration = DirectMigration<any, any>;
+
+export interface MigrationCollectionDefinition {
+  readonly database: string;
+  readonly databaseDescription?: string;
+  readonly collection: string;
+  readonly baseline: Primitive.AnyPrimitive;
+  readonly migrations: readonly AnyDirectMigration[];
+}
+
+export interface MigrationRegistry {
+  readonly collections: readonly MigrationCollectionDefinition[];
+  readonly find: (
+    database: string,
+    collection: string,
+  ) => MigrationCollectionDefinition | undefined;
+}
+
+/** Defines one synchronous, directly invoked document migration. */
+export const defineMigration = <
+  TFrom extends Primitive.AnyPrimitive,
+  TTo extends Primitive.AnyPrimitive,
+>(
+  migration: DirectMigration<TFrom, TTo>,
+): DirectMigration<TFrom, TTo> => migration;
+
+const canonicalize = (value: unknown): unknown => {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (typeof value !== "object" || value === null) return value;
+  return Object.fromEntries(
+    Object.entries(value)
+      .sort(([left], [right]) => left.localeCompare(right))
+      .map(([key, entry]) => [key, canonicalize(entry)]),
+  );
+};
+
+const schemaKey = (primitive: Primitive.AnyPrimitive): string =>
+  JSON.stringify(canonicalize(serializeSchema(primitive.schema)));
+
+/**
+ * Defines and validates the complete deployed migration registry.
+ *
+ * Migration versions are collection-local and must be contiguous from one.
+ */
+export const defineMigrationRegistry = (
+  collections: readonly MigrationCollectionDefinition[],
+): MigrationRegistry => {
+  const byAddress = new Map<string, MigrationCollectionDefinition>();
+
+  for (const definition of collections) {
+    const address = `${definition.database}\u0000${definition.collection}`;
+    if (byAddress.has(address)) {
+      throw new Error(
+        `Duplicate migration collection ${definition.database}/${definition.collection}`,
+      );
+    }
+
+    let previous = definition.baseline;
+    for (const [index, migration] of definition.migrations.entries()) {
+      const expectedVersion = index + 1;
+      if (!Number.isSafeInteger(migration.version) || migration.version !== expectedVersion) {
+        throw new Error(
+          `Expected migration version ${expectedVersion} for ${definition.database}/${definition.collection}, received ${migration.version}`,
+        );
+      }
+      if (schemaKey(previous) !== schemaKey(migration.from)) {
+        throw new Error(
+          `Migration ${migration.version} (${migration.name}) does not start from the previous schema`,
+        );
+      }
+      previous = migration.to;
+    }
+
+    byAddress.set(address, definition);
+  }
+
+  return {
+    collections: [...collections],
+    find: (database, collection) => byAddress.get(`${database}\u0000${collection}`),
+  };
+};
+
+/** Returns the target primitive for a registry-owned collection. */
+export const latestMigrationPrimitive = (
+  definition: MigrationCollectionDefinition,
+): Primitive.AnyPrimitive =>
+  definition.migrations[definition.migrations.length - 1]?.to ?? definition.baseline;
diff --git a/packages/mimic-server/src/migrate/migration/index.ts b/packages/mimic-server/src/migrate/migration/index.ts
index 035171fe0..eb8ece601 100644
--- a/packages/mimic-server/src/migrate/migration/index.ts
+++ b/packages/mimic-server/src/migrate/migration/index.ts
@@ -1,3 +1,5 @@
 export * from "./analyze.ts";
+export * from "./definition.ts";
 export * from "./reconcile.ts";
+export * from "./run.ts";
 export * from "./types.ts";
diff --git a/packages/mimic-server/src/migrate/migration/run.ts b/packages/mimic-server/src/migrate/migration/run.ts
new file mode 100644
index 000000000..4704d2503
--- /dev/null
+++ b/packages/mimic-server/src/migrate/migration/run.ts
@@ -0,0 +1,59 @@
+import {
+  applyBatch,
+  cloneValue,
+  createGenerator,
+  validate,
+  validateValue,
+  type Value,
+} from "@voidhash/mimic-core";
+
+import { reconcileMigrationValue } from "./reconcile.ts";
+import type { AnyDirectMigration } from "./definition.ts";
+
+/** Runs a deployed migration directly without evaluating generated source. */
+export const runDirectMigration = (migration: AnyDirectMigration, oldValue: Value): Value => {
+  validateValue(oldValue);
+  const original = cloneValue(oldValue);
+  let current = cloneValue(oldValue);
+
+  const reconciled = reconcileMigrationValue({
+    oldSchema: migration.from.schema,
+    newSchema: migration.to.schema,
+    value: current,
+  });
+  if (reconciled.ok && reconciled.value !== undefined) {
+    current = reconciled.value;
+  }
+
+  const generator = createGenerator();
+  const session = {
+    current: () => current,
+    emit: (commands: Parameters<typeof applyBatch>[1]) => {
+      if (commands.length > 0) current = applyBatch(current, commands);
+    },
+    generator: {
+      nextArrayItemId: () => globalThis.crypto.randomUUID(),
+      nextTreeNodeId: () => globalThis.crypto.randomUUID(),
+      between: (lower: string | undefined, upper: string | undefined) =>
+        generator.between(lower, upper),
+    },
+  };
+  const readOnlySession = {
+    current: () => original,
+    emit: () => {
+      throw new Error("oldRoot is read-only");
+    },
+    generator: session.generator,
+  };
+
+  migration.migrate?.({
+    root: migration.to.createProxy(session, []),
+    oldRoot: migration.from.createProxy(readOnlySession, []),
+  });
+
+  const validated = validate(migration.to.schema, current);
+  if (validated === undefined) {
+    throw new Error(`Migration ${migration.version} (${migration.name}) produced an empty root`);
+  }
+  return validated;
+};
diff --git a/packages/mimic-server/src/promise/MimicSDK.ts b/packages/mimic-server/src/promise/MimicSDK.ts
index f177f4549..dec74fd05 100644
--- a/packages/mimic-server/src/promise/MimicSDK.ts
+++ b/packages/mimic-server/src/promise/MimicSDK.ts
@@ -10,8 +10,6 @@ import type {
   CollectionInfo,
   CreateUserResult,
   DatabaseInfo,
-  DatabaseMigrationChange,
-  DatabaseMigrationInfo,
   DocumentSnapshot,
   RawDocumentSnapshot,
   SetupDocumentAuthenticationOptions,
@@ -166,16 +164,6 @@ export class DatabaseHandle {
     return new CollectionHandle(this.effect.collection(id, primitive));
   }
 
-  updateCollectionSchema<TPrimitive extends Primitive.AnyPrimitive>(
-    collectionId: string,
-    primitive: TPrimitive,
-    dataMigrationSource?: string,
-  ): Promise<{ readonly id: string; readonly schemaVersion: number }> {
-    return this.effect.sdk.runtime.runPromise(
-      this.effect.updateCollectionSchema(collectionId, primitive, dataMigrationSource),
-    );
-  }
-
   // Raw helpers — for dynamic JSON consumers.
 
   listCollectionsRaw(): Promise<readonly CollectionInfo[]> {
@@ -185,37 +173,6 @@ export class DatabaseHandle {
   collectionRaw(collectionId: string): RawCollectionHandle {
     return new RawCollectionHandle(this.effect.collectionRaw(collectionId));
   }
-
-  updateCollectionSchemaRaw(
-    collectionId: string,
-    schema: unknown,
-    dataMigrationSource?: string,
-  ): Promise<{ readonly id: string; readonly schemaVersion: number }> {
-    return this.effect.sdk.runtime.runPromise(
-      this.effect.updateCollectionSchemaRaw(collectionId, schema, dataMigrationSource),
-    );
-  }
-
-  listMigrations(): Promise<readonly DatabaseMigrationInfo[]> {
-    return this.effect.sdk.runtime.runPromise(this.effect.listMigrations());
-  }
-
-  applyMigration(options: {
-    readonly version: number;
-    readonly name: string;
-    readonly checksum: string;
-    readonly changes: readonly DatabaseMigrationChange[];
-    readonly mode?: "apply" | "rerun" | "replace";
-    readonly dryRun?: { readonly limit?: number; readonly samplePercent?: number };
-    readonly batchSize?: number;
-    readonly redoSucceededOnReplace?: boolean;
-  }) {
-    return this.effect.sdk.runtime.runPromise(this.effect.applyMigration(options));
-  }
-
-  getMigrationStatus(version: number) {
-    return this.effect.sdk.runtime.runPromise(this.effect.getMigrationStatus(version));
-  }
 }
 
 /**
diff --git a/packages/mimic-server/src/rpc/group.ts b/packages/mimic-server/src/rpc/group.ts
index e2686bc12..f66ef2913 100644
--- a/packages/mimic-server/src/rpc/group.ts
+++ b/packages/mimic-server/src/rpc/group.ts
@@ -3,7 +3,6 @@ import { DatabasesRpcs } from "./groups/databases.ts";
 import { DocumentAuthRpcs } from "./groups/document-auth.ts";
 import { DocumentsRpcs } from "./groups/documents.ts";
 import { GrantsRpcs } from "./groups/grants.ts";
-import { MigrationsRpcs } from "./groups/migrations.ts";
 import { UsersRpcs } from "./groups/users.ts";
 
 /**
@@ -24,6 +23,5 @@ export const MimicRpcGroup = DatabasesRpcs.merge(
   DocumentsRpcs,
   UsersRpcs,
   GrantsRpcs,
-  MigrationsRpcs,
   DocumentAuthRpcs,
 );
diff --git a/packages/mimic-server/src/rpc/groups/collections.ts b/packages/mimic-server/src/rpc/groups/collections.ts
index ef916a984..47f6a84eb 100644
--- a/packages/mimic-server/src/rpc/groups/collections.ts
+++ b/packages/mimic-server/src/rpc/groups/collections.ts
@@ -7,7 +7,6 @@ import {
   CollectionSchema,
   CreateCollectionResponseSchema,
   SchemaObjectRpcSchema,
-  UpdateCollectionSchemaResponseSchema,
 } from "../schemas.ts";
 
 export const CreateCollection = Rpc.make("CreateCollection", {
@@ -28,16 +27,6 @@ export const ListCollections = Rpc.make("ListCollections", {
   error: Schema.Union([NotFoundError, ForbiddenError]),
 });
 
-export const UpdateCollectionSchema = Rpc.make("UpdateCollectionSchema", {
-  payload: Schema.Struct({
-    collectionId: Schema.String,
-    schema: SchemaObjectRpcSchema,
-    dataMigrationSource: Schema.optional(Schema.String),
-  }),
-  success: UpdateCollectionSchemaResponseSchema,
-  error: Schema.Union([NotFoundError, InvalidSchemaError, ForbiddenError]),
-});
-
 export const DeleteCollection = Rpc.make("DeleteCollection", {
   payload: Schema.Struct({
     collectionId: Schema.String,
@@ -49,6 +38,5 @@ export const DeleteCollection = Rpc.make("DeleteCollection", {
 export const CollectionsRpcs = RpcGroup.make(
   CreateCollection,
   ListCollections,
-  UpdateCollectionSchema,
   DeleteCollection,
 ).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/groups/migrations.ts b/packages/mimic-server/src/rpc/groups/migrations.ts
deleted file mode 100644
index 58634191b..000000000
--- a/packages/mimic-server/src/rpc/groups/migrations.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-import { Schema } from "effect";
-import { Rpc, RpcGroup } from "effect/unstable/rpc";
-
-import {
-  ConflictError,
-  ForbiddenError,
-  InvalidSchemaError,
-  MigrationFailedError,
-  NotFoundError,
-} from "../errors.ts";
-import { AuthMiddleware } from "../middleware.ts";
-import {
-  DatabaseMigrationSchema,
-  MigrationChangeSchema,
-  MigrationDryRunOptionsSchema,
-  MigrationRunReportSchema,
-  MigrationStatusSchema,
-} from "../schemas.ts";
-
-export const ListDatabaseMigrations = Rpc.make("ListDatabaseMigrations", {
-  payload: Schema.Struct({
-    databaseId: Schema.String,
-  }),
-  success: Schema.Array(DatabaseMigrationSchema),
-  error: Schema.Union([NotFoundError, ForbiddenError]),
-});
-
-const ApplyDatabaseMigrationPayload = Schema.Struct({
-  databaseId: Schema.String,
-  version: Schema.Number,
-  name: Schema.String,
-  checksum: Schema.String,
-  changes: Schema.Array(MigrationChangeSchema),
-  /**
-   * `apply` (default when undefined): apply a fresh migration; recover a
-   * partially-failed one by submitting the same checksum. `rerun`:
-   * re-target only failed/pending docs of an existing migration; same
-   * checksum required. `replace`: install new code under the same version
-   * with a different checksum, optionally redoing already-succeeded docs.
-   */
-  mode: Schema.optional(Schema.Literals(["apply", "rerun", "replace"])),
-  dryRun: Schema.optional(MigrationDryRunOptionsSchema),
-  batchSize: Schema.optional(Schema.Number),
-  redoSucceededOnReplace: Schema.optional(Schema.Boolean),
-});
-
-export const ApplyDatabaseMigration = Rpc.make("ApplyDatabaseMigration", {
-  payload: ApplyDatabaseMigrationPayload,
-  success: MigrationRunReportSchema,
-  error: Schema.Union([
-    NotFoundError,
-    ConflictError,
-    InvalidSchemaError,
-    MigrationFailedError,
-    ForbiddenError,
-  ]),
-});
-
-export const GetMigrationStatus = Rpc.make("GetMigrationStatus", {
-  payload: Schema.Struct({
-    databaseId: Schema.String,
-    version: Schema.Number,
-  }),
-  success: MigrationStatusSchema,
-  error: Schema.Union([NotFoundError, ForbiddenError]),
-});
-
-export const MigrationsRpcs = RpcGroup.make(
-  ListDatabaseMigrations,
-  ApplyDatabaseMigration,
-  GetMigrationStatus,
-).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/index.ts b/packages/mimic-server/src/rpc/index.ts
index acf1fbe7c..1e8ab0973 100644
--- a/packages/mimic-server/src/rpc/index.ts
+++ b/packages/mimic-server/src/rpc/index.ts
@@ -17,24 +17,15 @@ export {
   CollectionSchema,
   CreateCollectionResponseSchema,
   CreateUserResponseSchema,
-  DatabaseMigrationSchema,
   DatabasePermissionSchema,
   DatabaseSchema,
   DocumentAuthenticationSetupSchema,
-  DocumentMigrationStateSummarySchema,
   DocumentPermissionSchema,
-  DocumentRunReportSchema,
-  DocumentRunStatusSchema,
   DocumentSnapshotResponseSchema,
   GrantSchema,
-  MigrationChangeSchema,
-  MigrationDryRunOptionsSchema,
-  MigrationRunReportSchema,
-  MigrationStatusSchema,
   SchemaObjectRpcSchema,
   SubmitTransactionResponseSchema,
   TransactionEnvelopeSchema,
-  UpdateCollectionSchemaResponseSchema,
   UserSchema,
   ValueRpcSchema,
 } from "./schemas.ts";
@@ -44,22 +35,13 @@ export type {
   CreateCollectionResponse,
   CreateUserResponse,
   Database,
-  DatabaseMigration,
   DatabasePermission,
   DocumentAuthenticationSetup,
-  DocumentMigrationStateSummary,
   DocumentPermission,
-  DocumentRunReport,
-  DocumentRunStatus,
   DocumentSnapshotResponse,
   Grant,
-  MigrationChange,
-  MigrationDryRunOptions,
-  MigrationRunReport,
-  MigrationStatus,
   SubmitTransactionResponse,
   TransactionEnvelope,
-  UpdateCollectionSchemaResponse,
   User,
 } from "./schemas.ts";
 
@@ -77,7 +59,6 @@ export {
   CreateCollection,
   DeleteCollection,
   ListCollections,
-  UpdateCollectionSchema,
 } from "./groups/collections.ts";
 
 export {
@@ -93,13 +74,6 @@ export { CreateUser, DeleteUser, ListUsers, UsersRpcs } from "./groups/users.ts"
 
 export { GrantPermission, GrantsRpcs, ListGrants, RevokePermission } from "./groups/grants.ts";
 
-export {
-  ApplyDatabaseMigration,
-  GetMigrationStatus,
-  ListDatabaseMigrations,
-  MigrationsRpcs,
-} from "./groups/migrations.ts";
-
 export { DocumentAuthRpcs, SetupDocumentAuthentication } from "./groups/document-auth.ts";
 
 export { MimicRpcGroup } from "./group.ts";
diff --git a/packages/mimic-server/src/rpc/schemas.ts b/packages/mimic-server/src/rpc/schemas.ts
index 8b2929ccb..c3c5bc4b4 100644
--- a/packages/mimic-server/src/rpc/schemas.ts
+++ b/packages/mimic-server/src/rpc/schemas.ts
@@ -30,6 +30,7 @@ export const CollectionSchema = Schema.Struct({
   name: Schema.String,
   schema: SchemaObjectRpcSchema,
   schemaVersion: Schema.Number,
+  migrationVersion: Schema.NullOr(Schema.Number),
 });
 
 export const CreateCollectionResponseSchema = Schema.Struct({
@@ -38,11 +39,6 @@ export const CreateCollectionResponseSchema = Schema.Struct({
   name: Schema.String,
 });
 
-export const UpdateCollectionSchemaResponseSchema = Schema.Struct({
-  id: Schema.String,
-  schemaVersion: Schema.Number,
-});
-
 export const UserSchema = Schema.Struct({
   id: Schema.String,
   username: Schema.String,
@@ -88,85 +84,6 @@ export const SubmitTransactionResponseSchema = Schema.Struct({
   reason: Schema.optional(Schema.String),
 });
 
-export const MigrationChangeSchema = Schema.Union([
-  Schema.Struct({
-    type: Schema.Literal("create"),
-    collection: Schema.String,
-    schema: SchemaObjectRpcSchema,
-    skipIfExists: Schema.optional(Schema.Boolean),
-  }),
-  Schema.Struct({
-    type: Schema.Literal("update"),
-    collection: Schema.String,
-    schema: SchemaObjectRpcSchema,
-    oldSchema: Schema.optional(SchemaObjectRpcSchema),
-    dataMigrationSource: Schema.optional(Schema.String),
-  }),
-]);
-
-export const DatabaseMigrationSchema = Schema.Struct({
-  version: Schema.Number,
-  name: Schema.String,
-  checksum: Schema.String,
-  appliedAt: Schema.optional(Schema.String),
-  state: Schema.optional(Schema.Literals(["running", "succeeded", "failed", "replaced"])),
-  totalDocuments: Schema.optional(Schema.Number),
-  succeededDocuments: Schema.optional(Schema.Number),
-  failedDocuments: Schema.optional(Schema.Number),
-  changes: Schema.optional(Schema.Array(MigrationChangeSchema)),
-});
-
-export const MigrationDryRunOptionsSchema = Schema.Struct({
-  limit: Schema.optional(Schema.Number),
-  samplePercent: Schema.optional(Schema.Number),
-});
-
-export const DocumentRunStatusSchema = Schema.Literals(["succeeded", "failed", "skipped"]);
-
-export const DocumentRunReportSchema = Schema.Struct({
-  collectionId: Schema.String,
-  documentId: Schema.String,
-  status: DocumentRunStatusSchema,
-  errorCode: Schema.optional(Schema.String),
-  errorMessage: Schema.optional(Schema.String),
-});
-
-export const MigrationRunReportSchema = Schema.Struct({
-  databaseId: Schema.String,
-  version: Schema.Number,
-  state: Schema.Literals(["succeeded", "failed"]),
-  succeeded: Schema.Number,
-  failed: Schema.Number,
-  skipped: Schema.Number,
-  perDocument: Schema.Array(DocumentRunReportSchema),
-  dryRun: Schema.Boolean,
-});
-
-export const DocumentMigrationStateSummarySchema = Schema.Struct({
-  pending: Schema.Number,
-  running: Schema.Number,
-  succeeded: Schema.Number,
-  failed: Schema.Number,
-  skipped: Schema.Number,
-});
-
-export const MigrationStatusSchema = Schema.Struct({
-  databaseId: Schema.String,
-  version: Schema.Number,
-  state: Schema.Literals(["running", "succeeded", "failed", "replaced", "unknown"]),
-  checksum: Schema.optional(Schema.String),
-  summary: DocumentMigrationStateSummarySchema,
-  failures: Schema.Array(
-    Schema.Struct({
-      documentId: Schema.String,
-      collectionId: Schema.String,
-      attempt: Schema.Number,
-      errorCode: Schema.optional(Schema.String),
-      errorMessage: Schema.optional(Schema.String),
-    }),
-  ),
-});
-
 export const DocumentAuthenticationSetupSchema = Schema.Struct({
   token: Schema.String,
   url: Schema.String,
@@ -177,25 +94,12 @@ export const DocumentAuthenticationSetupSchema = Schema.Struct({
 export type Database = Schema.Schema.Type<typeof DatabaseSchema>;
 export type Collection = Schema.Schema.Type<typeof CollectionSchema>;
 export type CreateCollectionResponse = Schema.Schema.Type<typeof CreateCollectionResponseSchema>;
-export type UpdateCollectionSchemaResponse = Schema.Schema.Type<
-  typeof UpdateCollectionSchemaResponseSchema
->;
 export type User = Schema.Schema.Type<typeof UserSchema>;
 export type CreateUserResponse = Schema.Schema.Type<typeof CreateUserResponseSchema>;
 export type Grant = Schema.Schema.Type<typeof GrantSchema>;
 export type DocumentSnapshotResponse = Schema.Schema.Type<typeof DocumentSnapshotResponseSchema>;
 export type TransactionEnvelope = Schema.Schema.Type<typeof TransactionEnvelopeSchema>;
 export type SubmitTransactionResponse = Schema.Schema.Type<typeof SubmitTransactionResponseSchema>;
-export type MigrationChange = Schema.Schema.Type<typeof MigrationChangeSchema>;
-export type DatabaseMigration = Schema.Schema.Type<typeof DatabaseMigrationSchema>;
-export type MigrationDryRunOptions = Schema.Schema.Type<typeof MigrationDryRunOptionsSchema>;
-export type DocumentRunStatus = Schema.Schema.Type<typeof DocumentRunStatusSchema>;
-export type DocumentRunReport = Schema.Schema.Type<typeof DocumentRunReportSchema>;
-export type MigrationRunReport = Schema.Schema.Type<typeof MigrationRunReportSchema>;
-export type DocumentMigrationStateSummary = Schema.Schema.Type<
-  typeof DocumentMigrationStateSummarySchema
->;
-export type MigrationStatus = Schema.Schema.Type<typeof MigrationStatusSchema>;
 export type DocumentAuthenticationSetup = Schema.Schema.Type<
   typeof DocumentAuthenticationSetupSchema
 >;
diff --git a/packages/mimic-server/tests/migrate/migration/direct.test.ts b/packages/mimic-server/tests/migrate/migration/direct.test.ts
new file mode 100644
index 000000000..cef21e99b
--- /dev/null
+++ b/packages/mimic-server/tests/migrate/migration/direct.test.ts
@@ -0,0 +1,145 @@
+import { Primitive } from "@voidhash/mimic-core";
+import { describe, expect, it } from "vitest";
+
+import {
+  defineMigration,
+  defineMigrationRegistry,
+  runDirectMigration,
+} from "../../../src/migrate/index.ts";
+
+const Original = Primitive.Struct({
+  title: Primitive.String().required(),
+});
+
+const WithSlug = Primitive.Struct({
+  title: Primitive.String().required(),
+  slug: Primitive.String().required(),
+});
+
+const WithSlugAndCount = Primitive.Struct({
+  title: Primitive.String().required(),
+  slug: Primitive.String().required(),
+  count: Primitive.Number().required(),
+});
+
+const addSlug = defineMigration({
+  version: 1,
+  name: "add-slug",
+  from: Original,
+  to: WithSlug,
+  migrate: ({ oldRoot, root }) => {
+    const title = oldRoot.title.get();
+    root.update({ title, slug: title.toLowerCase().replaceAll(" ", "-") });
+  },
+});
+
+const addCount = defineMigration({
+  version: 2,
+  name: "add-count",
+  from: WithSlug,
+  to: WithSlugAndCount,
+  migrate: ({ oldRoot, root }) =>
+    root.update({
+      title: oldRoot.title.get(),
+      slug: oldRoot.slug.get(),
+      count: 1,
+    }),
+});
+
+describe("direct migrations", () => {
+  it("runs a typed migration without mutating the input", () => {
+    const input = Original.encode({ title: "Write Tests" });
+    const output = runDirectMigration(addSlug, input);
+
+    expect(WithSlug.decode(output)).toEqual({ title: "Write Tests", slug: "write-tests" });
+    expect(Original.decode(input)).toEqual({ title: "Write Tests" });
+  });
+
+  it("rejects writes through oldRoot", () => {
+    const invalid = defineMigration({
+      version: 1,
+      name: "invalid",
+      from: Original,
+      to: Original,
+      migrate: ({ oldRoot }) => oldRoot.update({ title: "changed" }),
+    });
+
+    expect(() => runDirectMigration(invalid, Original.encode({ title: "Original" }))).toThrow(
+      "oldRoot is read-only",
+    );
+  });
+
+  it("runs an ordered multi-step registry", () => {
+    const registry = defineMigrationRegistry([
+      {
+        database: "example",
+        collection: "documents",
+        baseline: Original,
+        migrations: [addSlug, addCount],
+      },
+    ]);
+
+    const value = registry.collections[0]!.migrations.reduce(
+      (current, migration) => runDirectMigration(migration, current),
+      Original.encode({ title: "Hello" }),
+    );
+
+    expect(WithSlugAndCount.decode(value)).toEqual({
+      title: "Hello",
+      slug: "hello",
+      count: 1,
+    });
+  });
+
+  it("rejects a result that does not satisfy the target primitive", () => {
+    const invalid = defineMigration({
+      version: 1,
+      name: "missing-required-field",
+      from: Original,
+      to: WithSlug,
+    });
+
+    expect(() => runDirectMigration(invalid, Original.encode({ title: "Hello" }))).toThrow();
+  });
+
+  it("validates contiguous versions and adjacent schemas", () => {
+    expect(() =>
+      defineMigrationRegistry([
+        {
+          database: "example",
+          collection: "documents",
+          baseline: Original,
+          migrations: [{ ...addSlug, version: 2 }],
+        },
+      ]),
+    ).toThrow("Expected migration version 1");
+
+    expect(() =>
+      defineMigrationRegistry([
+        {
+          database: "example",
+          collection: "documents",
+          baseline: WithSlug,
+          migrations: [addSlug],
+        },
+      ]),
+    ).toThrow("does not start from the previous schema");
+
+    expect(() =>
+      defineMigrationRegistry([
+        {
+          database: "example",
+          collection: "documents",
+          baseline: Original,
+          migrations: [],
+        },
+        {
+          database: "example",
+          collection: "documents",
+          baseline: Original,
+          migrations: [],
+        },
+      ]),
+    ).toThrow("Duplicate migration collection");
+  });
+});
diff --git a/packages/mimic-server/tests/rpc/contracts.test.ts b/packages/mimic-server/tests/rpc/contracts.test.ts
index 2fc312a94..1a4611f02 100644
--- a/packages/mimic-server/tests/rpc/contracts.test.ts
+++ b/packages/mimic-server/tests/rpc/contracts.test.ts
@@ -6,7 +6,6 @@ describe("MimicRpcGroup", () => {
   it("exposes the expected procedure tags", () => {
     const tags = [...MimicRpcGroup.requests.keys()].sort();
     expect(tags).toEqual([
-      "ApplyDatabaseMigration",
       "CreateCollection",
       "CreateDatabase",
       "CreateDocument",
@@ -16,10 +15,8 @@ describe("MimicRpcGroup", () => {
       "DeleteDocument",
       "DeleteUser",
       "GetDocument",
-      "GetMigrationStatus",
       "GrantPermission",
       "ListCollections",
-      "ListDatabaseMigrations",
       "ListDatabases",
       "ListDocuments",
       "ListGrants",
@@ -27,7 +24,6 @@ describe("MimicRpcGroup", () => {
       "RevokePermission",
       "SetupDocumentAuthentication",
       "SubmitTransaction",
-      "UpdateCollectionSchema",
     ]);
   });
 
diff --git a/packages/mimic-server/tests/rpc/schemas.test.ts b/packages/mimic-server/tests/rpc/schemas.test.ts
index 95c9b8cdc..2f8b38fa6 100644
--- a/packages/mimic-server/tests/rpc/schemas.test.ts
+++ b/packages/mimic-server/tests/rpc/schemas.test.ts
@@ -1,12 +1,7 @@
 import { Schema } from "effect";
 import { describe, expect, it } from "vitest";
 
-import {
-  DatabaseMigrationSchema,
-  DocumentSnapshotResponseSchema,
-  MigrationChangeSchema,
-  TransactionEnvelopeSchema,
-} from "../../src/rpc/index.js";
+import { DocumentSnapshotResponseSchema, TransactionEnvelopeSchema } from "../../src/rpc/index.js";
 
 describe("schemas", () => {
   it("round-trips a TransactionEnvelope through encode/decode", () => {
@@ -27,43 +22,6 @@ describe("schemas", () => {
     expect(decoded).toEqual(envelope);
   });
 
-  it("round-trips both MigrationChange variants", () => {
-    const create = {
-      type: "create" as const,
-      collection: "todos",
-      schema: { kind: "object", fields: { title: { kind: "string", required: true } } },
-      skipIfExists: true,
-    };
-    const update = {
-      type: "update" as const,
-      collection: "todos",
-      schema: { kind: "object", fields: { title: { kind: "string", required: true } } },
-      oldSchema: { kind: "object", fields: {} },
-      dataMigrationSource: "globalThis.x = 1;",
-    };
-
-    expect(Schema.decodeUnknownSync(MigrationChangeSchema)(create)).toEqual(create);
-    expect(Schema.decodeUnknownSync(MigrationChangeSchema)(update)).toEqual(update);
-  });
-
-  it("round-trips a DatabaseMigration with optional changes", () => {
-    const migration = {
-      version: 3,
-      name: "add-slug",
-      checksum: "abc",
-      appliedAt: "2026-05-03T12:00:00.000Z",
-      changes: [
-        {
-          type: "create" as const,
-          collection: "todos",
-          schema: { kind: "object", fields: {} },
-        },
-      ],
-    };
-
-    expect(Schema.decodeUnknownSync(DatabaseMigrationSchema)(migration)).toEqual(migration);
-  });
-
   it("round-trips a DocumentSnapshot", () => {
     const snapshot = {
       id: "doc-1",
diff --git a/packages/mimic-server/tests/sdk/effect/migrations.test.ts b/packages/mimic-server/tests/sdk/effect/migrations.test.ts
deleted file mode 100644
index 661a45d8a..000000000
--- a/packages/mimic-server/tests/sdk/effect/migrations.test.ts
+++ /dev/null
@@ -1,146 +0,0 @@
-import { Effect, Layer } from "effect";
-import { RpcTest } from "effect/unstable/rpc";
-import {
-  AuthMiddleware,
-  CurrentUser,
-  MimicRpcGroup,
-  type MigrationChange,
-} from "@voidhash/mimic-server/rpc";
-import { describe, expect, it } from "vitest";
-
-interface ApplyCall {
-  readonly databaseId: string;
-  readonly version: number;
-  readonly name: string;
-  readonly checksum: string;
-  readonly changes: ReadonlyArray<MigrationChange>;
-}
-
-interface ListCall {
-  readonly databaseId: string;
-}
-
-const makeTestEnv = () => {
-  const applyCalls: ApplyCall[] = [];
-  const listCalls: ListCall[] = [];
-  const cannedMigrations: ReadonlyArray<{
-    readonly version: number;
-    readonly name: string;
-    readonly checksum: string;
-  }> = [
-    { version: 1, name: "init", checksum: "abc" },
-    { version: 2, name: "add-slug", checksum: "def" },
-  ];
-
-  // The full group requires every procedure to be implemented; we only
-  // care about the migration ones for these tests, so the rest are stubs
-  // that fail with a tagged error.
-  const HandlersLive = MimicRpcGroup.toLayer(
-    Effect.succeed({
-      ListDatabaseMigrations: ({ databaseId }) =>
-        Effect.sync(() => {
-          listCalls.push({ databaseId });
-          return cannedMigrations;
-        }),
-      ApplyDatabaseMigration: ({ databaseId, version, name, checksum, changes }) =>
-        Effect.sync(() => {
-          applyCalls.push({ databaseId, version, name, checksum, changes });
-        }),
-      // Stub everything else.
-      CreateDatabase: () => Effect.die("unused in this test"),
-      ListDatabases: () => Effect.die("unused in this test"),
-      DeleteDatabase: () => Effect.die("unused in this test"),
-      CreateCollection: () => Effect.die("unused in this test"),
-      ListCollections: () => Effect.die("unused in this test"),
-      UpdateCollectionSchema: () => Effect.die("unused in this test"),
-      DeleteCollection: () => Effect.die("unused in this test"),
-      CreateDocument: () => Effect.die("unused in this test"),
-      GetDocument: () => Effect.die("unused in this test"),
-      ListDocuments: () => Effect.die("unused in this test"),
-      SubmitTransaction: () => Effect.die("unused in this test"),
-      DeleteDocument: () => Effect.die("unused in this test"),
-      CreateUser: () => Effect.die("unused in this test"),
-      ListUsers: () => Effect.die("unused in this test"),
-      DeleteUser: () => Effect.die("unused in this test"),
-      GrantPermission: () => Effect.die("unused in this test"),
-      RevokePermission: () => Effect.die("unused in this test"),
-      ListGrants: () => Effect.die("unused in this test"),
-      SetupDocumentAuthentication: () => Effect.die("unused in this test"),
-    }),
-  );
-
-  const StubAuthLive = Layer.effect(AuthMiddleware)(
-    Effect.succeed((effect, _options) =>
-      Effect.provideService(effect, CurrentUser, {
-        userId: "test-user",
-        username: "test",
-        isSuperuser: true,
-      }),
-    ),
-  );
-
-  return {
-    applyCalls,
-    listCalls,
-    cannedMigrations,
-    layer: Layer.mergeAll(HandlersLive, StubAuthLive),
-  };
-};
-
-describe("MimicRpcGroup migrations RPCs", () => {
-  it("returns the canned migration list and records the requested databaseId", async () => {
-    const env = makeTestEnv();
-    const program = Effect.gen(function* () {
-      const client = yield* RpcTest.makeClient(MimicRpcGroup);
-      return yield* client.ListDatabaseMigrations({ databaseId: "db-1" });
-    });
-
-    const response = await Effect.runPromise(
-      Effect.scoped(program).pipe(Effect.provide(env.layer)),
-    );
-
-    expect(response).toEqual(env.cannedMigrations);
-    expect(env.listCalls).toEqual([{ databaseId: "db-1" }]);
-  });
-
-  it("encodes a typed migration change payload across the wire", async () => {
-    const env = makeTestEnv();
-    const change: MigrationChange = {
-      type: "update",
-      collection: "todos",
-      schema: {
-        kind: "object",
-        fields: {
-          title: { kind: "string", required: true },
-          slug: { kind: "string", required: true },
-        },
-      },
-      oldSchema: {
-        kind: "object",
-        fields: { title: { kind: "string", required: true } },
-      },
-      dataMigrationSource: "globalThis.__MIMIC_RUN_MIGRATION__ = () => ({ value: undefined });",
-    };
-
-    const program = Effect.gen(function* () {
-      const client = yield* RpcTest.makeClient(MimicRpcGroup);
-      yield* client.ApplyDatabaseMigration({
-        databaseId: "db-1",
-        version: 2,
-        name: "add-slug",
-        checksum: "checksum-2",
-        changes: [change],
-      });
-    });
-
-    await Effect.runPromise(Effect.scoped(program).pipe(Effect.provide(env.layer)));
-
-    expect(env.applyCalls).toHaveLength(1);
-    const call = env.applyCalls[0]!;
-    expect(call.databaseId).toBe("db-1");
-    expect(call.version).toBe(2);
-    expect(call.name).toBe("add-slug");
-    expect(call.checksum).toBe("checksum-2");
-    expect(call.changes).toEqual([change]);
-  });
-});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index aaa4246e1..8170cdd4f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -500,46 +500,6 @@ importers:
         specifier: 'catalog:'
         version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  apps/mimic-cli:
-    dependencies:
-      '@effect/platform-node-shared':
-        specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(effect@4.0.0-beta.84)
-      '@voidhash/mimic-core':
-        specifier: workspace:*
-        version: link:../../packages/mimic-core
-      '@voidhash/mimic-server':
-        specifier: workspace:*
-        version: link:../../packages/mimic-server
-      dotenv:
-        specifier: ^16.4.7
-        version: 16.6.1
-      effect:
-        specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84
-      esbuild-register:
-        specifier: ^3.6.0
-        version: 3.6.0(esbuild@0.28.1)
-    devDependencies:
-      esbuild:
-        specifier: 0.28.1
-        version: 0.28.1
-      tsup:
-        specifier: ^8.5.0
-        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.8.3)(yaml@2.8.3)
-      tsx:
-        specifier: ^4.19.3
-        version: 4.21.0
-      typescript:
-        specifier: 5.8.3
-        version: 5.8.3
-      vite-plus:
-        specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      vitest:
-        specifier: ^3.2.7
-        version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-
   apps/mimic-db:
     dependencies:
       '@effect/platform-node':
@@ -1639,6 +1599,9 @@ importers:
       '@voidhash/mimic-core':
         specifier: workspace:*
         version: link:../mimic-core
+      '@voidhash/mimic-server':
+        specifier: workspace:*
+        version: link:../mimic-server
     devDependencies:
       '@types/node':
         specifier: ^20
@@ -24109,13 +24072,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  esbuild-register@3.6.0(esbuild@0.28.1):
-    dependencies:
-      debug: 4.4.3
-      esbuild: 0.28.1
-    transitivePeerDependencies:
-      - supports-color
-
   esbuild-wasm@0.25.12: {}
 
   esbuild@0.25.12:
@@ -30580,34 +30536,6 @@ snapshots:
       - tsx
       - yaml
 
-  tsup@8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.8.3)(yaml@2.8.3):
-    dependencies:
-      bundle-require: 5.1.0(esbuild@0.28.1)
-      cac: 6.7.14
-      chokidar: 4.0.3
-      consola: 3.4.2
-      debug: 4.4.3
-      esbuild: 0.28.1
-      fix-dts-default-cjs-exports: 1.0.1
-      joycon: 3.1.1
-      picocolors: 1.1.1
-      postcss-load-config: 6.0.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3)
-      resolve-from: 5.0.0
-      rollup: 4.59.0
-      source-map: 0.7.6
-      sucrase: 3.35.1
-      tinyexec: 0.3.2
-      tinyglobby: 0.2.15
-      tree-kill: 1.2.2
-    optionalDependencies:
-      postcss: 8.5.10
-      typescript: 5.8.3
-    transitivePeerDependencies:
-      - jiti
-      - supports-color
-      - tsx
-      - yaml
-
   tsx@4.21.0:
     dependencies:
       esbuild: 0.27.2
diff --git a/selfhost/entry/src/backend/MimicHost.ts b/selfhost/entry/src/backend/MimicHost.ts
index 516df9db1..33bd9fc5f 100644
--- a/selfhost/entry/src/backend/MimicHost.ts
+++ b/selfhost/entry/src/backend/MimicHost.ts
@@ -3,20 +3,16 @@ import {
   MimicHostError,
   type MimicHostShape,
 } from "@voidhash/core/services/paywalls/MimicHost";
-import {
-  HostServiceTag,
-  type HostService,
-} from "@voidhash/mimic-db/app/hostService";
+import { HostServiceTag, type HostService } from "@voidhash/mimic-db/app/hostService";
 import { decodeTransactionEnvelope } from "@voidhash/mimic-db/document/transaction";
-import { serializeSchema } from "@voidhash/mimic-core";
 import {
   createInitialPaywallDocumentInput,
+  MIMIC_DATABASE_NAME,
+  MIMIC_PAYWALLS_COLLECTION_NAME,
   PaywallDesignerDocument,
 } from "@voidhash/mimic-schema";
 import { Effect, Layer, Semaphore } from "effect";
 
-const databaseName = "voidhash";
-const collectionName = "paywalls";
 const editTokenTtlSeconds = 300;
 
 interface ProvisioningIds {
@@ -31,31 +27,12 @@ const hostError = (message: string, cause: unknown) =>
   });
 
 const errorTag = (cause: unknown): string | undefined =>
-  typeof cause === "object" && cause !== null && "_tag" in cause
-    ? String(cause._tag)
-    : undefined;
+  typeof cause === "object" && cause !== null && "_tag" in cause ? String(cause._tag) : undefined;
 
 const isNotFound = (cause: unknown): boolean => errorTag(cause) === "NotFoundError";
 const isConflict = (cause: unknown): boolean => errorTag(cause) === "ConflictError";
 
-const canonicalize = (value: unknown): unknown => {
-  if (Array.isArray(value)) return value.map(canonicalize);
-  if (typeof value !== "object" || value === null) return value;
-  return Object.fromEntries(
-    Object.entries(value)
-      .sort(([left], [right]) => left.localeCompare(right))
-      .map(([key, entry]) => [key, canonicalize(entry)]),
-  );
-};
-
-const schemaEquals = (left: unknown, right: unknown): boolean =>
-  JSON.stringify(canonicalize(left)) === JSON.stringify(canonicalize(right));
-
-const connectionUrl = (
-  publicBaseUrl: string,
-  ids: ProvisioningIds,
-  paywallId: string,
-): string => {
+const connectionUrl = (publicBaseUrl: string, ids: ProvisioningIds, paywallId: string): string => {
   const base = new URL(publicBaseUrl);
   base.protocol = base.protocol === "https:" ? "wss:" : "ws:";
   base.pathname = `/ws/v1/databases/${encodeURIComponent(
@@ -69,58 +46,28 @@ const connectionUrl = (
 };
 
 const makeMimicHost = (host: HostService, publicBaseUrl: string): MimicHostShape => {
-  const schema = serializeSchema(PaywallDesignerDocument.schema);
   const provisioningLock = Semaphore.makeUnsafe(1);
   let cachedIds: ProvisioningIds | undefined;
 
   const resolveDatabase = Effect.gen(function* () {
     const listed = yield* host.listDatabases();
-    const existing = listed.find((database) => database.name === databaseName);
-    if (existing) return existing.id;
-    return yield* host.createDatabase(databaseName, "Voidhash paywall documents").pipe(
-      Effect.map((database) => database.id),
-      Effect.catch((cause) =>
-        isConflict(cause)
-          ? host.listDatabases().pipe(
-              Effect.flatMap((databases) => {
-                const database = databases.find((candidate) => candidate.name === databaseName);
-                return database
-                  ? Effect.succeed(database.id)
-                  : Effect.fail(cause);
-              }),
-            )
-          : Effect.fail(cause),
-      ),
-    );
+    const existing = listed.find((database) => database.name === MIMIC_DATABASE_NAME);
+    return existing
+      ? existing.id
+      : yield* Effect.fail(new Error(`Missing registry database ${MIMIC_DATABASE_NAME}`));
   });
 
   const resolveCollection = (databaseId: string) =>
     Effect.gen(function* () {
       const listed = yield* host.listCollections(databaseId);
-      const existing = listed.find((collection) => collection.name === collectionName);
-      if (existing) {
-        if (!schemaEquals(existing.schema, schema)) {
-          yield* host.updateCollectionSchema(existing.id, schema);
-        }
-        return existing.id;
-      }
-      return yield* host.createCollection(databaseId, collectionName, schema).pipe(
-        Effect.map((collection) => collection.id),
-        Effect.catch((cause) =>
-          isConflict(cause)
-            ? host.listCollections(databaseId).pipe(
-                Effect.flatMap((collections) => {
-                  const collection = collections.find(
-                    (candidate) => candidate.name === collectionName,
-                  );
-                  return collection
-                    ? Effect.succeed(collection.id)
-                    : Effect.fail(cause);
-                }),
-              )
-            : Effect.fail(cause),
-        ),
+      const existing = listed.find(
+        (collection) => collection.name === MIMIC_PAYWALLS_COLLECTION_NAME,
       );
+      return existing
+        ? existing.id
+        : yield* Effect.fail(
+            new Error(`Missing registry collection ${MIMIC_PAYWALLS_COLLECTION_NAME}`),
+          );
     });
 
   const provision = provisioningLock.withPermit(
@@ -152,11 +99,11 @@ const makeMimicHost = (host: HostService, publicBaseUrl: string): MimicHostShape
                     PaywallDesignerDocument.encode(createInitialPaywallDocumentInput()),
                   )
                   .pipe(
-                  Effect.asVoid,
-                  Effect.catch((createCause) =>
-                    isConflict(createCause) ? Effect.void : Effect.fail(createCause),
-                  ),
-                )
+                    Effect.asVoid,
+                    Effect.catch((createCause) =>
+                      isConflict(createCause) ? Effect.void : Effect.fail(createCause),
+                    ),
+                  )
               : Effect.fail(cause),
           ),
         ),
@@ -179,20 +126,14 @@ const makeMimicHost = (host: HostService, publicBaseUrl: string): MimicHostShape
       provision.pipe(
         Effect.flatMap((ids) =>
           host
-            .createDocumentAuthToken(
-              ids.collectionId,
-              paywallId,
-              "write",
-              [],
-              editTokenTtlSeconds,
-            )
+            .createDocumentAuthToken(ids.collectionId, paywallId, "write", [], editTokenTtlSeconds)
             .pipe(
-            Effect.map(({ token }) => ({
-              expiresAt: new Date(Date.now() + editTokenTtlSeconds * 1000),
-              token,
-              url: connectionUrl(publicBaseUrl, ids, paywallId),
-            })),
-          ),
+              Effect.map(({ token }) => ({
+                expiresAt: new Date(Date.now() + editTokenTtlSeconds * 1000),
+                token,
+                url: connectionUrl(publicBaseUrl, ids, paywallId),
+              })),
+            ),
         ),
         Effect.mapError((cause) => hostError(`Failed to mint a token for ${paywallId}`, cause)),
       ),
diff --git a/selfhost/entry/src/mimic/MimicNode.ts b/selfhost/entry/src/mimic/MimicNode.ts
index eec9fd1eb..3fad3cf4f 100644
--- a/selfhost/entry/src/mimic/MimicNode.ts
+++ b/selfhost/entry/src/mimic/MimicNode.ts
@@ -3,12 +3,9 @@ import {
   DocumentStoreFactory,
   type DocumentStoreFactoryShape,
 } from "@voidhash/mimic-db/core/document-store-factory";
-import {
-  LocalHostServiceLive,
-} from "@voidhash/mimic-db/core/local-host-service";
-import {
-  LocalMigrationExecutorLive,
-} from "@voidhash/mimic-db/core/migration-executor";
+import { LocalHostServiceLive } from "@voidhash/mimic-db/core/local-host-service";
+import { MigrationRegistryService } from "@voidhash/mimic-db/core/migration-registry";
+import { PaywallMigrationRegistry } from "@voidhash/mimic-schema";
 import {
   ensureDocumentTables,
   makePgDocumentStore,
@@ -42,8 +39,7 @@ export const makeMimicNodeHostLive = (
     ensureDocumentTables(config.documents).pipe(
       Effect.as(
         DocumentStoreFactory.of({
-          make: (_collectionId, documentId) =>
-            makePgDocumentStore(config.documents, documentId),
+          make: (_collectionId, documentId) => makePgDocumentStore(config.documents, documentId),
         } satisfies DocumentStoreFactoryShape),
       ),
     ),
@@ -54,7 +50,7 @@ export const makeMimicNodeHostLive = (
     Layer.provide(PgControlStoreLive(config.database)),
     Layer.provide(entities),
     Layer.provide(documentStores),
-    Layer.provide(LocalMigrationExecutorLive),
+    Layer.provide(Layer.succeed(MigrationRegistryService, PaywallMigrationRegistry)),
   );
   return Layer.merge(host, entities);
 };
diff --git a/selfhost/entry/src/mimic/PgControlStore.ts b/selfhost/entry/src/mimic/PgControlStore.ts
index 9a7dcc692..d7bac066e 100644
--- a/selfhost/entry/src/mimic/PgControlStore.ts
+++ b/selfhost/entry/src/mimic/PgControlStore.ts
@@ -5,7 +5,6 @@ import type {
   DatabaseRecord,
   DocumentIndexRecord,
   GrantRecord,
-  MigrationRecord,
   SchemaVersionRecord,
   TokenRecord,
   UserRecord,
@@ -23,7 +22,6 @@ interface ControlState {
   grants: GrantRecord[];
   tokens: TokenRecord[];
   documents: DocumentIndexRecord[];
-  migrations: MigrationRecord[];
 }
 
 interface ControlStateRow {
@@ -38,7 +36,6 @@ const emptyState = (): ControlState => ({
   grants: [],
   tokens: [],
   documents: [],
-  migrations: [],
 });
 
 const decodeState = (value: unknown): ControlState => {
@@ -46,13 +43,18 @@ const decodeState = (value: unknown): ControlState => {
   const state = value as Partial<ControlState>;
   return {
     databases: Array.isArray(state.databases) ? state.databases : [],
-    collections: Array.isArray(state.collections) ? state.collections : [],
+    collections: Array.isArray(state.collections)
+      ? state.collections.map((collection) => ({
+          ...collection,
+          migrationVersion:
+            typeof collection.migrationVersion === "number" ? collection.migrationVersion : null,
+        }))
+      : [],
     schemaVersions: Array.isArray(state.schemaVersions) ? state.schemaVersions : [],
     users: Array.isArray(state.users) ? state.users : [],
     grants: Array.isArray(state.grants) ? state.grants : [],
     tokens: Array.isArray(state.tokens) ? state.tokens : [],
     documents: Array.isArray(state.documents) ? state.documents : [],
-    migrations: Array.isArray(state.migrations) ? state.migrations : [],
   };
 };
 
@@ -120,26 +122,33 @@ export const makePgControlStore = (sql: SqlClient.SqlClient): ControlStoreApi =>
     findCollectionByName: (databaseId, name) =>
       load.pipe(
         Effect.map((state) =>
-          state.collections.find(
-            (row) => row.databaseId === databaseId && row.name === name,
-          ),
+          state.collections.find((row) => row.databaseId === databaseId && row.name === name),
         ),
       ),
     listCollectionsByDatabase: (databaseId) =>
       load.pipe(
-        Effect.map((state) =>
-          state.collections.filter((row) => row.databaseId === databaseId),
-        ),
+        Effect.map((state) => state.collections.filter((row) => row.databaseId === databaseId)),
       ),
     updateCollectionSchema: (collectionId, schemaJson, version) =>
       update((state) => {
         const row = state.collections.find((candidate) => candidate.id === collectionId);
         if (row) {
-          replaceBy(
-            state.collections,
-            (candidate) => candidate.id === collectionId,
-            { ...row, schemaJson, schemaVersion: version },
-          );
+          replaceBy(state.collections, (candidate) => candidate.id === collectionId, {
+            ...row,
+            schemaJson,
+            schemaVersion: version,
+          });
+        }
+      }),
+    updateCollectionMigration: (collectionId, schemaJson, migrationVersion) =>
+      update((state) => {
+        const row = state.collections.find((candidate) => candidate.id === collectionId);
+        if (row) {
+          replaceBy(state.collections, (candidate) => candidate.id === collectionId, {
+            ...row,
+            schemaJson,
+            migrationVersion,
+          });
         }
       }),
     deleteCollection: (id) =>
@@ -199,17 +208,12 @@ export const makePgControlStore = (sql: SqlClient.SqlClient): ControlStoreApi =>
     findGrant: (userId, databaseId) =>
       load.pipe(
         Effect.map((state) =>
-          state.grants.find(
-            (row) => row.userId === userId && row.databaseId === databaseId,
-          ),
+          state.grants.find((row) => row.userId === userId && row.databaseId === databaseId),
         ),
       ),
     removeGrant: (userId, databaseId) =>
       update((state) =>
-        removeBy(
-          state.grants,
-          (row) => row.userId === userId && row.databaseId === databaseId,
-        ),
+        removeBy(state.grants, (row) => row.userId === userId && row.databaseId === databaseId),
       ),
     listGrants: () => load.pipe(Effect.map((state) => state.grants)),
     listGrantsByUser: (userId) =>
@@ -226,11 +230,11 @@ export const makePgControlStore = (sql: SqlClient.SqlClient): ControlStoreApi =>
 
     registerDocument: (documentId, collectionId) =>
       update((state) =>
-        replaceBy(
-          state.documents,
-          (row) => row.documentId === documentId,
-          { documentId, collectionId, deletedAt: null },
-        ),
+        replaceBy(state.documents, (row) => row.documentId === documentId, {
+          documentId,
+          collectionId,
+          deletedAt: null,
+        }),
       ),
     findDocumentIndex: (documentId) =>
       load.pipe(
@@ -248,45 +252,17 @@ export const makePgControlStore = (sql: SqlClient.SqlClient): ControlStoreApi =>
       update((state) => {
         const row = state.documents.find((candidate) => candidate.documentId === documentId);
         if (row) {
-          replaceBy(
-            state.documents,
-            (candidate) => candidate.documentId === documentId,
-            { ...row, deletedAt },
-          );
+          replaceBy(state.documents, (candidate) => candidate.documentId === documentId, {
+            ...row,
+            deletedAt,
+          });
         }
       }),
-
-    upsertMigration: (record) =>
-      update((state) =>
-        replaceBy(
-          state.migrations,
-          (row) => row.databaseId === record.databaseId && row.version === record.version,
-          record,
-        ),
-      ),
-    findMigration: (databaseId, version) =>
-      load.pipe(
-        Effect.map((state) =>
-          state.migrations.find(
-            (row) => row.databaseId === databaseId && row.version === version,
-          ),
-        ),
-      ),
-    listMigrations: (databaseId) =>
-      load.pipe(
-        Effect.map((state) =>
-          state.migrations
-            .filter((row) => row.databaseId === databaseId)
-            .sort((left, right) => left.version - right.version),
-        ),
-      ),
   };
 };
 
 /** Persistent Postgres control-store layer for the single-node mimic host. */
-export const PgControlStoreLive = (
-  config: PgDurableEntityConfig,
-): Layer.Layer<ControlStore> =>
+export const PgControlStoreLive = (config: PgDurableEntityConfig): Layer.Layer<ControlStore> =>
   Layer.effect(
     ControlStore,
     Effect.gen(function* () {

From 43a58c864e1677947b9b4a34148b267f63df07f8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 09:10:02 +0200
Subject: [PATCH 078/129] feat: add safe ClickHouse query compatibility to
 VoidQL

* Add safe ClickHouse query compatibility to VoidQL

* docs: document pull request title convention

* build: refresh generated paywall runtime
---
 AGENTS.md                                     |   2 +
 CLAUDE.md                                     |   2 +
 .../core/src/services/voidql/ast/VoidQlAst.ts |  74 ++-
 .../core/src/services/voidql/catalog/index.ts |   7 +-
 packages/core/src/services/voidql/compiler.ts | 275 +++++++++-
 .../core/src/services/voidql/functions.ts     |  59 +-
 packages/core/src/services/voidql/lexer.ts    |  49 +-
 packages/core/src/services/voidql/parser.ts   | 284 +++++++++-
 .../test/services/voidql/compiler.test.ts     |  26 +-
 .../voidql/query-compatibility.test.ts        | 519 ++++++++++++++++++
 .../src/templates/runtime-bundle.generated.ts |   2 +-
 11 files changed, 1205 insertions(+), 94 deletions(-)
 create mode 100644 packages/core/test/services/voidql/query-compatibility.test.ts

diff --git a/AGENTS.md b/AGENTS.md
index 7cc0a3b53..a85510b12 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,3 +1,5 @@
 You have access to read-only clones of some key dependencies we use and get inspired by in ./resources
 
 - /effect-smol - Effect v4 codebase. Great to find all primitives available in Effect.
+
+Pull request titles must follow Conventional Commits (for example, `feat: add query aliases` or `fix: preserve tenant scope`) because CI validates the title.
diff --git a/CLAUDE.md b/CLAUDE.md
index f918c6961..46317f28e 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -3,3 +3,5 @@ You have access to read-only clones of some key dependencies we use and get insp
 - /effect-smol - Effect v4 codebase. Great to find all primitives available in Effect.
 
 Avoid adding unneccessary comments. Add jsdoc comments to public functions and explaination comments if doing something unorthodox / uncommon.
+
+Pull request titles must follow Conventional Commits (for example, `feat: add query aliases` or `fix: preserve tenant scope`) because CI validates the title.
diff --git a/packages/core/src/services/voidql/ast/VoidQlAst.ts b/packages/core/src/services/voidql/ast/VoidQlAst.ts
index ec65e733c..9fe48d065 100644
--- a/packages/core/src/services/voidql/ast/VoidQlAst.ts
+++ b/packages/core/src/services/voidql/ast/VoidQlAst.ts
@@ -87,6 +87,22 @@ export interface FnCall extends Node {
   readonly args: readonly Expr[];
 }
 
+export type WindowFrameBound = "unboundedPreceding" | "currentRow" | "unboundedFollowing";
+
+export interface WindowFrame {
+  readonly unit: "rows" | "range";
+  readonly start: WindowFrameBound;
+  readonly end?: WindowFrameBound;
+}
+
+export interface WindowExpr extends Node {
+  readonly _tag: "WindowExpr";
+  readonly fn: FnCall;
+  readonly partitionBy: readonly Expr[];
+  readonly orderBy: readonly OrderItem[];
+  readonly frame?: WindowFrame;
+}
+
 export type BinaryOp =
   | "or"
   | "and"
@@ -98,6 +114,8 @@ export type BinaryOp =
   | "gte"
   | "like"
   | "notLike"
+  | "ilike"
+  | "notIlike"
   | "add"
   | "sub"
   | "mul"
@@ -120,10 +138,21 @@ export interface Unary extends Node {
 export interface InExpr extends Node {
   readonly _tag: "InExpr";
   readonly expr: Expr;
-  readonly list: readonly Expr[];
+  readonly list?: readonly [Expr, ...Expr[]];
+  readonly query?: Query;
   readonly negated: boolean;
 }
 
+export interface ExistsExpr extends Node {
+  readonly _tag: "ExistsExpr";
+  readonly query: Query;
+}
+
+export interface SubqueryExpr extends Node {
+  readonly _tag: "SubqueryExpr";
+  readonly query: Query;
+}
+
 export interface Between extends Node {
   readonly _tag: "Between";
   readonly expr: Expr;
@@ -163,9 +192,12 @@ export type Expr =
   | ColumnRef
   | StarRef
   | FnCall
+  | WindowExpr
   | Binary
   | Unary
   | InExpr
+  | ExistsExpr
+  | SubqueryExpr
   | Between
   | IsNull
   | CaseExpr
@@ -193,7 +225,7 @@ export interface NamedTable extends Node {
 /** A subquery source. Subqueries MUST be aliased (the parser enforces it). */
 export interface SubquerySource extends Node {
   readonly _tag: "SubquerySource";
-  readonly query: Select;
+  readonly query: Query;
   readonly alias: string;
 }
 
@@ -201,38 +233,60 @@ export type TableSource = NamedTable | SubquerySource;
 
 export interface Join extends Node {
   readonly _tag: "Join";
-  readonly kind: "inner" | "left";
+  readonly kind: "inner" | "left" | "right" | "full" | "cross";
   readonly source: TableSource;
-  readonly on: Expr;
+  readonly on?: Expr;
+  readonly using?: readonly [string, ...string[]];
 }
 
 export interface OrderItem extends Node {
   readonly _tag: "OrderItem";
   readonly expr: Expr;
   readonly dir: "asc" | "desc";
+  readonly nulls?: "first" | "last";
 }
 
 export interface Cte extends Node {
   readonly _tag: "Cte";
   readonly name: string;
-  readonly query: Select;
+  readonly query: Query;
+}
+
+export interface LimitBy {
+  readonly limit: number;
+  readonly offset?: number;
+  readonly by: readonly [Expr, ...Expr[]];
 }
 
 export interface Select extends Node {
   readonly _tag: "Select";
   readonly with: readonly Cte[];
+  readonly distinct: boolean;
+  readonly distinctOn: readonly Expr[];
   readonly columns: readonly [SelectItem, ...SelectItem[]];
-  readonly from: TableSource;
+  readonly from?: TableSource;
   readonly joins: readonly Join[];
+  readonly prewhere?: Expr;
   readonly where?: Expr;
   readonly groupBy: readonly Expr[];
+  readonly groupByModifier?: "rollup" | "cube";
+  readonly withTotals: boolean;
   readonly having?: Expr;
+  readonly qualify?: Expr;
   readonly orderBy: readonly OrderItem[];
+  readonly limitBy?: LimitBy;
   readonly limit?: number;
   readonly offset?: number;
+  readonly withTies: boolean;
+}
+
+export type SetOperator = "UNION ALL" | "UNION DISTINCT" | "INTERSECT" | "EXCEPT";
+
+export interface SetQuery extends Node {
+  readonly _tag: "SetQuery";
+  readonly selects: readonly [Select, Select, ...Select[]];
+  readonly operators: readonly [SetOperator, ...SetOperator[]];
 }
 
-// `UNION ALL` (`SetQuery`) is a deferred construct — removed from the grammar
-// until it lands behind its own Security-Review Gate (§11). Until then a single
-// `Select` is the whole statement surface.
-export type Statement = Select;
+export type Query = Select | SetQuery;
+export type Statement = Query;
diff --git a/packages/core/src/services/voidql/catalog/index.ts b/packages/core/src/services/voidql/catalog/index.ts
index 2ff467da4..19e983503 100644
--- a/packages/core/src/services/voidql/catalog/index.ts
+++ b/packages/core/src/services/voidql/catalog/index.ts
@@ -22,7 +22,12 @@ export const CATALOG: Readonly<Record<string, CatalogTable>> = {
 };
 
 /** Reserved internal aliases the substitution injects; not bindable by users (§9). */
-export const RESERVED_INTERNAL_ALIASES = new Set(["events", "persons", "pending_overrides"]);
+export const RESERVED_INTERNAL_ALIASES = new Set([
+  "events",
+  "persons",
+  "pending_overrides",
+  "voidql_union",
+]);
 
 export const getCatalogTable = (name: string): CatalogTable | undefined => CATALOG[name];
 
diff --git a/packages/core/src/services/voidql/compiler.ts b/packages/core/src/services/voidql/compiler.ts
index 45d6af9a2..aa100197e 100644
--- a/packages/core/src/services/voidql/compiler.ts
+++ b/packages/core/src/services/voidql/compiler.ts
@@ -23,6 +23,7 @@ import type {
   FnCall,
   InExpr,
   OrderItem,
+  Query,
   Select,
   SelectItem,
   TableSource,
@@ -68,6 +69,7 @@ type ResolvedRelation =
 interface Frame {
   readonly relations: ResolvedRelation[];
   readonly cteShapes: Map<string, readonly ColumnSpec[]>;
+  readonly aliases: Map<string, VoidQLType>;
   readonly parent?: Frame;
 }
 
@@ -149,7 +151,7 @@ export class Compiler {
     if (source._tag === "SubquerySource") {
       this.assertBindableAlias(source.alias);
       this.assertUniqueAlias(frame, source.alias);
-      const sub = this.printSelect(source.query, frame);
+      const sub = this.printQuery(source.query, frame);
       frame.relations.push({
         kind: "derived",
         alias: source.alias,
@@ -159,7 +161,7 @@ export class Compiler {
     }
 
     const nameLower = source.name.toLowerCase();
-    const cteShape = frame.cteShapes.get(nameLower);
+    const cteShape = this.findCteShape(frame, nameLower);
     if (cteShape) {
       const alias = source.alias ?? source.name;
       if (source.alias) this.assertBindableAlias(source.alias);
@@ -198,9 +200,20 @@ export class Compiler {
     }
   }
 
-  private findRelation(frame: Frame | undefined, aliasLower: string): ResolvedRelation | undefined {
+  private findRelation(frame: Frame, aliasLower: string): ResolvedRelation | undefined {
+    return frame.relations.find((relation) => relation.alias.toLowerCase() === aliasLower);
+  }
+
+  private findExpressionAlias(frame: Frame, aliasLower: string): VoidQLType | undefined {
+    return frame.aliases.get(aliasLower);
+  }
+
+  private findCteShape(
+    frame: Frame | undefined,
+    nameLower: string,
+  ): readonly ColumnSpec[] | undefined {
     for (let f = frame; f; f = f.parent) {
-      const match = f.relations.find((r) => r.alias.toLowerCase() === aliasLower);
+      const match = f.cteShapes.get(nameLower);
       if (match) return match;
     }
     return undefined;
@@ -342,6 +355,10 @@ export class Compiler {
         suggestion: "",
       });
     }
+    const aliasType = this.findExpressionAlias(frame, name.toLowerCase());
+    if (aliasType) {
+      return { pieces: [lit(this.id(name))], type: aliasType };
+    }
     const allCols = this.currentRelations(frame).flatMap((r) => this.relationColumnNames(r));
     if (this.findNamespaceRelation(frame, name)) {
       throw new VoidQlUnknownFieldError({
@@ -427,6 +444,23 @@ export class Compiler {
         return this.printBinary(expr, frame);
       case "InExpr":
         return this.printIn(expr, frame);
+      case "ExistsExpr": {
+        const query = this.printQuery(expr.query, frame);
+        return { pieces: [lit("EXISTS ( "), ...query.pieces, lit(" )")], type: "Bool" };
+      }
+      case "SubqueryExpr": {
+        const query = this.printQuery(expr.query, frame);
+        if (query.shape.length !== 1) {
+          throw new VoidQlUnsupportedError({
+            message: "A scalar subquery must return exactly one column.",
+            hint: "Select one expression in the scalar subquery.",
+          });
+        }
+        return {
+          pieces: [lit("( "), ...query.pieces, lit(" )")],
+          type: query.shape[0]!.type,
+        };
+      }
       case "Between": {
         const target = this.printExpr(expr.expr, frame);
         const low = this.printExpr(expr.low, frame, target.type);
@@ -455,6 +489,47 @@ export class Compiler {
         return this.printCase(expr, frame);
       case "FnCall":
         return this.printFnCall(expr, frame);
+      case "WindowExpr": {
+        const fn = this.printFnCall(expr.fn, frame, true);
+        const pieces: SqlPiece[] = [...fn.pieces, lit(" OVER (")];
+        if (expr.partitionBy.length > 0) {
+          pieces.push(lit("PARTITION BY "));
+          expr.partitionBy.forEach((partition, index) => {
+            if (index > 0) pieces.push(lit(", "));
+            pieces.push(...this.printExpr(partition, frame).pieces);
+          });
+        }
+        if (expr.orderBy.length > 0) {
+          if (expr.partitionBy.length > 0) pieces.push(lit(" "));
+          pieces.push(lit("ORDER BY "));
+          expr.orderBy.forEach((order, index) => {
+            if (index > 0) pieces.push(lit(", "));
+            pieces.push(
+              ...this.printExpr(order.expr, frame).pieces,
+              lit(order.dir === "desc" ? " DESC" : " ASC"),
+            );
+            if (order.nulls) {
+              pieces.push(lit(order.nulls === "first" ? " NULLS FIRST" : " NULLS LAST"));
+            }
+          });
+        }
+        if (expr.frame) {
+          if (expr.partitionBy.length > 0 || expr.orderBy.length > 0) pieces.push(lit(" "));
+          const bound = (value: typeof expr.frame.start): string => {
+            if (value === "unboundedPreceding") return "UNBOUNDED PRECEDING";
+            if (value === "unboundedFollowing") return "UNBOUNDED FOLLOWING";
+            return "CURRENT ROW";
+          };
+          pieces.push(lit(expr.frame.unit === "rows" ? "ROWS " : "RANGE "));
+          if (expr.frame.end) {
+            pieces.push(lit(`BETWEEN ${bound(expr.frame.start)} AND ${bound(expr.frame.end)}`));
+          } else {
+            pieces.push(lit(bound(expr.frame.start)));
+          }
+        }
+        pieces.push(lit(")"));
+        return { pieces, type: fn.type };
+      }
     }
   }
 
@@ -470,6 +545,8 @@ export class Compiler {
       gte: " >= ",
       like: " LIKE ",
       notLike: " NOT LIKE ",
+      ilike: " ILIKE ",
+      notIlike: " NOT ILIKE ",
       add: " + ",
       sub: " - ",
       mul: " * ",
@@ -485,12 +562,17 @@ export class Compiler {
     // compared to a DateTime column binds as DateTime (partition pruning, §18 #9).
     const rhsExpected = isComparison
       ? left.type
-      : expr.op === "like" || expr.op === "notLike"
+      : expr.op === "like" || expr.op === "notLike" || expr.op === "ilike" || expr.op === "notIlike"
         ? "String"
         : undefined;
     const right = this.printExpr(expr.right, frame, rhsExpected);
     const type: VoidQLType =
-      isComparison || isLogical || expr.op === "like" || expr.op === "notLike"
+      isComparison ||
+      isLogical ||
+      expr.op === "like" ||
+      expr.op === "notLike" ||
+      expr.op === "ilike" ||
+      expr.op === "notIlike"
         ? "Bool"
         : isArith
           ? "Float64"
@@ -508,10 +590,21 @@ export class Compiler {
       ...target.pieces,
       lit(expr.negated ? " NOT IN (" : " IN ("),
     ];
-    expr.list.forEach((item, i) => {
-      if (i > 0) pieces.push(lit(", "));
-      pieces.push(...this.printExpr(item, frame, target.type).pieces);
-    });
+    if (expr.query) {
+      const query = this.printQuery(expr.query, frame);
+      if (query.shape.length !== 1) {
+        throw new VoidQlUnsupportedError({
+          message: "An IN subquery must return exactly one column.",
+          hint: "Select one expression in the IN subquery.",
+        });
+      }
+      pieces.push(...query.pieces);
+    } else {
+      expr.list?.forEach((item, i) => {
+        if (i > 0) pieces.push(lit(", "));
+        pieces.push(...this.printExpr(item, frame, target.type).pieces);
+      });
+    }
     pieces.push(lit("))"));
     return { pieces, type: "Bool" };
   }
@@ -535,7 +628,7 @@ export class Compiler {
     return { pieces, type: resultType };
   }
 
-  private printFnCall(expr: FnCall, frame: Frame): PrintedExpr {
+  private printFnCall(expr: FnCall, frame: Frame, inWindow = false): PrintedExpr {
     const spec = lookupFunction(expr.name);
     if (!spec) {
       throw new VoidQlUnsupportedError({
@@ -549,6 +642,12 @@ export class Compiler {
         hint: "",
       });
     }
+    if (spec.windowOnly && !inWindow) {
+      throw new VoidQlUnsupportedError({
+        message: `Function '${expr.name}' requires an OVER clause.`,
+        hint: "Add OVER (...) to make this a window expression.",
+      });
+    }
 
     // count(*) is the only place a bare star is admissible.
     if (spec.allowStar && expr.args.length === 1 && expr.args[0]!._tag === "StarRef") {
@@ -589,8 +688,42 @@ export class Compiler {
 
   // ── select ──────────────────────────────────────────────────────────────
 
+  printQuery(query: Query, parent?: Frame): CompiledSelect {
+    if (query._tag === "Select") return this.printSelect(query, parent);
+
+    const compiled = query.selects.map((select) => this.printSelect(select, parent));
+    const shape = compiled[0]!.shape;
+    for (const arm of compiled.slice(1)) {
+      const compatible =
+        arm.shape.length === shape.length &&
+        arm.shape.every((column, index) => column.type === shape[index]!.type);
+      if (!compatible) {
+        throw new VoidQlUnsupportedError({
+          message: "Set-query arms must return the same number of columns with matching types.",
+          hint: "Align each SELECT projection before combining them.",
+        });
+      }
+    }
+    const unionPieces: SqlPiece[] = [];
+    compiled.forEach((arm, index) => {
+      if (index > 0) unionPieces.push(lit(` ${query.operators[index - 1]} `));
+      unionPieces.push(...arm.pieces);
+    });
+    const pieces: SqlPiece[] = [lit("SELECT ")];
+    shape.forEach((column, index) => {
+      if (index > 0) pieces.push(lit(", "));
+      pieces.push(lit(`${this.qualified("voidql_union", column.name)} AS ${this.id(column.name)}`));
+    });
+    pieces.push(
+      lit(" FROM ( "),
+      ...unionPieces,
+      lit(` ) AS voidql_union LIMIT ${MAX_RESULT_ROWS}`),
+    );
+    return { pieces, shape, injected: [] };
+  }
+
   printSelect(select: Select, parent?: Frame): CompiledSelect {
-    const frame: Frame = { relations: [], cteShapes: new Map(), parent };
+    const frame: Frame = { relations: [], cteShapes: new Map(), aliases: new Map(), parent };
 
     const ctePieces: SqlPiece[] = [];
     select.with.forEach((cte, i) => {
@@ -605,7 +738,7 @@ export class Compiler {
       if (frame.cteShapes.has(nameLower)) {
         throw new VoidQlUnsupportedError({ message: `Duplicate CTE '${cte.name}'.`, hint: "" });
       }
-      const compiled = this.printSelect(cte.query, frame);
+      const compiled = this.printQuery(cte.query, frame);
       frame.cteShapes.set(nameLower, compiled.shape);
       ctePieces.push(
         lit(i === 0 ? "WITH " : ", "),
@@ -617,32 +750,73 @@ export class Compiler {
     if (ctePieces.length > 0) ctePieces.push(lit(" "));
 
     // FROM + JOINs build the relation frame before any expression is resolved.
-    const fromPieces = this.resolveSource(select.from, frame);
+    const fromPieces = select.from ? this.resolveSource(select.from, frame) : [];
     const joinPieces: SqlPiece[] = [];
     for (const join of select.joins) {
+      const relationCountBeforeJoin = frame.relations.length;
       const sourcePieces = this.resolveSource(join.source, frame);
-      const on = this.printExpr(join.on, frame, "Bool");
-      joinPieces.push(
-        lit(join.kind === "left" ? " LEFT JOIN " : " INNER JOIN "),
-        ...sourcePieces,
-        lit(" ON "),
-        ...on.pieces,
-      );
+      const kindSql =
+        join.kind === "left"
+          ? " LEFT JOIN "
+          : join.kind === "right"
+            ? " RIGHT JOIN "
+            : join.kind === "full"
+              ? " FULL JOIN "
+              : join.kind === "cross"
+                ? " CROSS JOIN "
+                : " INNER JOIN ";
+      joinPieces.push(lit(kindSql), ...sourcePieces);
+      if (join.on) {
+        joinPieces.push(lit(" ON "), ...this.printExpr(join.on, frame, "Bool").pieces);
+      } else if (join.using) {
+        for (const column of join.using) {
+          const leftMatches = frame.relations
+            .slice(0, relationCountBeforeJoin)
+            .filter((relation) => this.relationColumnNames(relation).includes(column));
+          const rightMatches = frame.relations
+            .slice(relationCountBeforeJoin)
+            .filter((relation) => this.relationColumnNames(relation).includes(column));
+          if (leftMatches.length === 0 || rightMatches.length === 0) {
+            throw new VoidQlUnknownFieldError({
+              field: column,
+              message: `USING column '${column}' must exist on both sides of the join.`,
+              suggestion: "",
+            });
+          }
+          [...leftMatches, ...rightMatches].forEach((relation) => this.columnOf(relation, column));
+        }
+        joinPieces.push(lit(` USING (${join.using.map((column) => this.id(column)).join(", ")})`));
+      }
     }
 
     const { columnPieces, shape } = this.printColumns(select.columns, frame);
 
     const pieces: SqlPiece[] = [
       ...ctePieces,
-      lit("SELECT "),
+      lit(select.distinct ? "SELECT DISTINCT" : "SELECT"),
+      ...(select.distinctOn.length > 0
+        ? [
+            lit(" ON ("),
+            ...select.distinctOn.flatMap((expr, index) => [
+              ...(index > 0 ? [lit(", ")] : []),
+              ...this.printExpr(expr, frame).pieces,
+            ]),
+            lit(")"),
+          ]
+        : []),
+      lit(" "),
       ...columnPieces,
-      lit(" FROM "),
-      ...fromPieces,
+      ...(select.from ? [lit(" FROM "), ...fromPieces] : []),
       ...joinPieces,
     ];
 
-    if (select.where) {
-      pieces.push(lit(" WHERE "), ...this.printExpr(select.where, frame, "Bool").pieces);
+    if (select.prewhere || select.where) {
+      pieces.push(lit(" WHERE "));
+      if (select.prewhere) {
+        pieces.push(...this.printExpr(select.prewhere, frame, "Bool").pieces);
+      }
+      if (select.prewhere && select.where) pieces.push(lit(" AND "));
+      if (select.where) pieces.push(...this.printExpr(select.where, frame, "Bool").pieces);
     }
     if (select.groupBy.length > 0) {
       pieces.push(lit(" GROUP BY "));
@@ -650,10 +824,17 @@ export class Compiler {
         if (i > 0) pieces.push(lit(", "));
         pieces.push(...this.printExpr(g, frame).pieces);
       });
+      if (select.groupByModifier) {
+        pieces.push(lit(select.groupByModifier === "rollup" ? " WITH ROLLUP" : " WITH CUBE"));
+      }
+      if (select.withTotals) pieces.push(lit(" WITH TOTALS"));
     }
     if (select.having) {
       pieces.push(lit(" HAVING "), ...this.printExpr(select.having, frame, "Bool").pieces);
     }
+    if (select.qualify) {
+      pieces.push(lit(" QUALIFY "), ...this.printExpr(select.qualify, frame, "Bool").pieces);
+    }
     if (select.orderBy.length > 0) {
       pieces.push(lit(" ORDER BY "));
       select.orderBy.forEach((o: OrderItem, i) => {
@@ -662,6 +843,19 @@ export class Compiler {
           ...this.printExpr(o.expr, frame).pieces,
           lit(o.dir === "desc" ? " DESC" : " ASC"),
         );
+        if (o.nulls) pieces.push(lit(o.nulls === "first" ? " NULLS FIRST" : " NULLS LAST"));
+      });
+    }
+
+    if (select.limitBy) {
+      pieces.push(lit(` LIMIT ${select.limitBy.limit}`));
+      if (select.limitBy.offset && select.limitBy.offset > 0) {
+        pieces.push(lit(` OFFSET ${select.limitBy.offset}`));
+      }
+      pieces.push(lit(" BY "));
+      select.limitBy.by.forEach((expr, index) => {
+        if (index > 0) pieces.push(lit(", "));
+        pieces.push(...this.printExpr(expr, frame).pieces);
       });
     }
 
@@ -669,6 +863,15 @@ export class Compiler {
     const limit = Math.min(select.limit ?? MAX_RESULT_ROWS, MAX_RESULT_ROWS);
     pieces.push(lit(` LIMIT ${limit}`));
     if (select.offset && select.offset > 0) pieces.push(lit(` OFFSET ${select.offset}`));
+    if (select.withTies) {
+      if (select.orderBy.length === 0) {
+        throw new VoidQlUnsupportedError({
+          message: "LIMIT WITH TIES requires ORDER BY.",
+          hint: "Add ORDER BY before LIMIT WITH TIES.",
+        });
+      }
+      pieces.push(lit(" WITH TIES"));
+    }
 
     return { pieces, shape, injected: [] };
   }
@@ -679,6 +882,7 @@ export class Compiler {
   ): { readonly columnPieces: readonly SqlPiece[]; readonly shape: readonly ColumnSpec[] } {
     const columnPieces: SqlPiece[] = [];
     const shape: ColumnSpec[] = [];
+    const outputNames = new Set<string>();
     let emitted = 0;
 
     const emitSep = () => {
@@ -689,6 +893,13 @@ export class Compiler {
     columns.forEach((item, index) => {
       if (item.expr._tag === "StarRef") {
         this.expandStar(item.expr.qualifier, frame).forEach((entry) => {
+          if (outputNames.has(entry.col.toLowerCase())) {
+            throw new VoidQlUnsupportedError({
+              message: `Duplicate output column '${entry.col}'.`,
+              hint: "Select and alias columns explicitly when relations share names.",
+            });
+          }
+          outputNames.add(entry.col.toLowerCase());
           emitSep();
           columnPieces.push(lit(this.qualified(entry.alias, entry.col)));
           shape.push({ name: entry.col, type: entry.type });
@@ -711,8 +922,16 @@ export class Compiler {
       ) {
         throw new VoidQlUnsupportedError({ message: `Invalid column alias '${name}'.`, hint: "" });
       }
+      if (outputNames.has(name.toLowerCase())) {
+        throw new VoidQlUnsupportedError({
+          message: `Duplicate output column '${name}'.`,
+          hint: "Give every selected expression a unique alias.",
+        });
+      }
+      outputNames.add(name.toLowerCase());
       columnPieces.push(lit(` AS ${name}`));
       shape.push({ name, type: printed.type });
+      frame.aliases.set(name.toLowerCase(), printed.type);
     });
 
     return { columnPieces, shape };
@@ -759,11 +978,11 @@ export class Compiler {
  * `VoidQlPiiError`, `VoidQlUnsupportedError`).
  */
 export const compileSelect = (
-  select: Select,
+  select: Query,
   scope: AuthorizedScope,
   capabilities: ReadonlySet<Capability>,
 ): CompiledSelect => {
   const compiler = new Compiler(scope, capabilities);
-  const result = compiler.printSelect(select);
+  const result = compiler.printQuery(select);
   return { pieces: result.pieces, shape: result.shape, injected: compiler.injected };
 };
diff --git a/packages/core/src/services/voidql/functions.ts b/packages/core/src/services/voidql/functions.ts
index d990a51a4..4aeed415f 100644
--- a/packages/core/src/services/voidql/functions.ts
+++ b/packages/core/src/services/voidql/functions.ts
@@ -6,9 +6,10 @@
  * is rejected with {@link VoidQlUnsupportedError}. The registry fails *closed* on
  * everything new — the inverse of a blocklist, which fails open on every release.
  *
- * Deferred families (lambdas/higher-order array fns, window fns, `arrayJoin`,
- * parametric aggregates) are simply absent until they land behind a Security-Review
- * Gate.
+ * Deferred families (lambdas/higher-order array functions, `arrayJoin`, and
+ * parametric aggregates) are absent until they land behind a Security-Review Gate.
+ * Window syntax composes with registry functions; window-only functions still need
+ * an explicit row here.
  */
 import type { VoidQLType } from "./catalog/types.ts";
 
@@ -24,6 +25,8 @@ export interface FnSpec {
   readonly aggregate: boolean;
   /** Whether a bare `*` is an acceptable sole argument (only `count(*)`). */
   readonly allowStar?: boolean;
+  /** Whether the function is only valid when immediately followed by `OVER`. */
+  readonly windowOnly?: boolean;
 }
 
 const REGISTRY: Readonly<Record<string, FnSpec>> = {
@@ -52,6 +55,30 @@ const REGISTRY: Readonly<Record<string, FnSpec>> = {
   any: { chName: "any", minArgs: 1, maxArgs: 1, returns: { arg: 0 }, aggregate: true },
   argmin: { chName: "argMin", minArgs: 2, maxArgs: 2, returns: { arg: 0 }, aggregate: true },
   argmax: { chName: "argMax", minArgs: 2, maxArgs: 2, returns: { arg: 0 }, aggregate: true },
+  rownumber: {
+    chName: "row_number",
+    minArgs: 0,
+    maxArgs: 0,
+    returns: "UInt64",
+    aggregate: false,
+    windowOnly: true,
+  },
+  rank: {
+    chName: "rank",
+    minArgs: 0,
+    maxArgs: 0,
+    returns: "UInt64",
+    aggregate: false,
+    windowOnly: true,
+  },
+  denserank: {
+    chName: "dense_rank",
+    minArgs: 0,
+    maxArgs: 0,
+    returns: "UInt64",
+    aggregate: false,
+    windowOnly: true,
+  },
 
   // ── conditional / null handling (pure scalar control flow) ──
   if: { chName: "if", minArgs: 3, maxArgs: 3, returns: { arg: 1 }, aggregate: false },
@@ -65,9 +92,14 @@ const REGISTRY: Readonly<Record<string, FnSpec>> = {
   // ── string / hash (pure) ──
   lower: { chName: "lower", minArgs: 1, maxArgs: 1, returns: "String", aggregate: false },
   upper: { chName: "upper", minArgs: 1, maxArgs: 1, returns: "String", aggregate: false },
+  length: { chName: "length", minArgs: 1, maxArgs: 1, returns: "UInt64", aggregate: false },
+  trim: { chName: "trim", minArgs: 1, maxArgs: 1, returns: "String", aggregate: false },
   concat: { chName: "concat", minArgs: 2, maxArgs: 99, returns: "String", aggregate: false },
   substring: { chName: "substring", minArgs: 2, maxArgs: 3, returns: "String", aggregate: false },
   startswith: { chName: "startsWith", minArgs: 2, maxArgs: 2, returns: "Bool", aggregate: false },
+  endswith: { chName: "endsWith", minArgs: 2, maxArgs: 2, returns: "Bool", aggregate: false },
+  position: { chName: "position", minArgs: 2, maxArgs: 2, returns: "UInt64", aggregate: false },
+  replaceall: { chName: "replaceAll", minArgs: 3, maxArgs: 3, returns: "String", aggregate: false },
   // regex allowed but the query is cost-capped (ReDoS → bounded-time abort, §11).
   match: { chName: "match", minArgs: 2, maxArgs: 2, returns: "Bool", aggregate: false },
   replaceregexpall: {
@@ -93,6 +125,13 @@ const REGISTRY: Readonly<Record<string, FnSpec>> = {
     returns: "DateTime",
     aggregate: false,
   },
+  tostartofminute: {
+    chName: "toStartOfMinute",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "DateTime",
+    aggregate: false,
+  },
   tostartofday: {
     chName: "toStartOfDay",
     minArgs: 1,
@@ -130,9 +169,23 @@ const REGISTRY: Readonly<Record<string, FnSpec>> = {
   },
   todate: { chName: "toDate", minArgs: 1, maxArgs: 1, returns: "DateTime", aggregate: false },
   datediff: { chName: "dateDiff", minArgs: 3, maxArgs: 3, returns: "Int64", aggregate: false },
+  toyear: { chName: "toYear", minArgs: 1, maxArgs: 1, returns: "UInt64", aggregate: false },
+  tomonth: { chName: "toMonth", minArgs: 1, maxArgs: 1, returns: "UInt64", aggregate: false },
+  todayofweek: {
+    chName: "toDayOfWeek",
+    minArgs: 1,
+    maxArgs: 1,
+    returns: "UInt64",
+    aggregate: false,
+  },
   round: { chName: "round", minArgs: 1, maxArgs: 2, returns: "Float64", aggregate: false },
   floor: { chName: "floor", minArgs: 1, maxArgs: 2, returns: "Float64", aggregate: false },
+  ceil: { chName: "ceil", minArgs: 1, maxArgs: 2, returns: "Float64", aggregate: false },
   abs: { chName: "abs", minArgs: 1, maxArgs: 1, returns: { arg: 0 }, aggregate: false },
+  sqrt: { chName: "sqrt", minArgs: 1, maxArgs: 1, returns: "Float64", aggregate: false },
+  pow: { chName: "pow", minArgs: 2, maxArgs: 2, returns: "Float64", aggregate: false },
+  exp: { chName: "exp", minArgs: 1, maxArgs: 1, returns: "Float64", aggregate: false },
+  log: { chName: "log", minArgs: 1, maxArgs: 1, returns: "Float64", aggregate: false },
   // only the null-safe casts (HogQL's leading-underscore rule) — never throwing casts
   tofloat64ornull: {
     chName: "toFloat64OrNull",
diff --git a/packages/core/src/services/voidql/lexer.ts b/packages/core/src/services/voidql/lexer.ts
index 5da151473..c5e12cf9d 100644
--- a/packages/core/src/services/voidql/lexer.ts
+++ b/packages/core/src/services/voidql/lexer.ts
@@ -7,7 +7,7 @@
  * Comments (`-- …`, `/* … *​/`) are dropped here, so the canonical re-print can
  * never carry smuggled bytes (T9).
  *
- * Reserved words — including the deferred/denied ones (`SETTINGS`, `UNION`, …) —
+ * Reserved words — including deferred/denied ones (`SETTINGS`, `ARRAY JOIN`, …) —
  * tokenise as keywords so the parser can raise a teachable error rather than
  * mis-parsing them as identifiers, and so they can never be used as aliases.
  */
@@ -28,25 +28,53 @@ export interface Token {
   readonly numType?: "Int64" | "UInt64" | "Float64";
 }
 
-/** Structural keywords that have a grammar production in v1. */
+/** Structural keywords with a grammar production in the supported query surface. */
 const ALLOWED_KEYWORDS = new Set([
   "select",
+  "distinct",
+  "all",
   "from",
+  "prewhere",
   "where",
   "group",
   "by",
+  "rollup",
+  "cube",
+  "totals",
   "having",
+  "qualify",
   "order",
   "asc",
   "desc",
+  "nulls",
+  "first",
+  "last",
   "limit",
   "offset",
+  "ties",
   "join",
   "inner",
   "left",
+  "right",
+  "full",
+  "outer",
+  "cross",
+  "using",
   "on",
   "as",
   "with",
+  "partition",
+  "over",
+  "rows",
+  "range",
+  "unbounded",
+  "preceding",
+  "following",
+  "current",
+  "row",
+  "union",
+  "intersect",
+  "except",
   "and",
   "or",
   "not",
@@ -62,10 +90,12 @@ const ALLOWED_KEYWORDS = new Set([
   "else",
   "end",
   "like",
+  "ilike",
+  "exists",
 ]);
 
 /**
- * Reserved words with **no v1 production** — deferred constructs and permanently
+ * Reserved words with **no production** — deferred constructs and permanently
  * denied statements. Tokenised so the parser fails closed with a teachable error
  * (a parse error, not a parse-then-reject — §8.1, §11, §18 gap #8).
  */
@@ -85,16 +115,7 @@ const FORBIDDEN_KEYWORDS = new Set([
   "system",
   "final",
   "sample",
-  "union",
-  "distinct",
-  "all",
-  "over",
-  "right",
-  "full",
-  "outer",
-  "cross",
-  "using",
-  "prewhere",
+  "window",
   "array",
   "arrayjoin",
   "interval",
@@ -279,7 +300,7 @@ export const lex = (text: string): readonly Token[] => {
       push({ kind: "op", text: two === "<>" ? "!=" : two, start, end: pos() });
       continue;
     }
-    if ("=<>+-*/%(),.".includes(c)) {
+    if ("=<>+-*/%(),.;".includes(c)) {
       advance();
       push({ kind: "op", text: c, start, end: pos() });
       continue;
diff --git a/packages/core/src/services/voidql/parser.ts b/packages/core/src/services/voidql/parser.ts
index 3d8f741f9..3fc2e7db2 100644
--- a/packages/core/src/services/voidql/parser.ts
+++ b/packages/core/src/services/voidql/parser.ts
@@ -9,8 +9,9 @@
  * Depth / node / join / subquery caps live **in the cursor**, checked *before*
  * recursion, so a 10⁵-deep input is a typed {@link VoidQlComplexityError}, not a
  * JS-stack blow-up (§18 gap #6). Deferred and denied constructs (`SETTINGS`,
- * `UNION`, `DISTINCT`, …) have no production at all — they are parse errors, never
- * parse-then-reject, so the highest-risk surface never has a validator to bypass.
+ * `ARRAY JOIN`, named windows, …) have no production at all — they are parse
+ * errors, never parse-then-reject, so the highest-risk surface never has a
+ * validator to bypass.
  */
 import type {
   Binary,
@@ -21,11 +22,15 @@ import type {
   Join,
   OrderItem,
   Pos,
+  Query,
   Select,
   SelectItem,
+  SetOperator,
   Span,
   Statement,
   TableSource,
+  WindowFrame,
+  WindowFrameBound,
 } from "./ast/VoidQlAst.ts";
 import { VoidQlComplexityError, VoidQlSyntaxError, VoidQlUnsupportedError } from "./errors.ts";
 import { isForbiddenKeyword, lex, type Token } from "./lexer.ts";
@@ -160,15 +165,50 @@ class Cursor {
   // ── statement ──────────────────────────────────────────────────────────────
 
   parseStatement(): Statement {
-    const select = this.parseSelect();
+    const query = this.parseQuery();
+    this.eatOp(";");
     const tail = this.peek();
     if (tail.kind !== "eof") {
       // A trailing token after a complete SELECT is almost always a denied clause
-      // (e.g. `… SETTINGS x=1`, `… UNION …`, `… FORMAT JSON`).
+      // (e.g. `… SETTINGS x=1` or `… FORMAT JSON`).
       this.guardForbidden();
       this.fail(tail, `Unexpected '${tail.text || tail.kind}' after end of query.`);
     }
-    return select;
+    return query;
+  }
+
+  private parseQuery(): Query {
+    const first = this.parseSelect();
+    const selects: Select[] = [first];
+    const operators: SetOperator[] = [];
+    while (this.isKw("union") || this.isKw("intersect") || this.isKw("except")) {
+      if (this.eatKw("union")) {
+        if (this.eatKw("all")) operators.push("UNION ALL");
+        else if (this.eatKw("distinct")) operators.push("UNION DISTINCT");
+        else {
+          throw new VoidQlUnsupportedError({
+            message: `line ${this.peek().start.line}, col ${this.peek().start.col}: UNION requires ALL or DISTINCT.`,
+            hint: "Specify UNION ALL or UNION DISTINCT explicitly.",
+          });
+        }
+      } else if (this.eatKw("intersect")) {
+        this.eatKw("distinct");
+        operators.push("INTERSECT");
+      } else {
+        this.expectKw("except");
+        this.eatKw("distinct");
+        operators.push("EXCEPT");
+      }
+      selects.push(this.parseSelect());
+    }
+    if (selects.length === 1) return first;
+    this.count();
+    return {
+      _tag: "SetQuery",
+      selects: selects as [Select, Select, ...Select[]],
+      operators: operators as [SetOperator, ...SetOperator[]],
+      span: { start: first.span.start, end: selects[selects.length - 1]!.span.end },
+    };
   }
 
   private parseSelect(): Select {
@@ -182,7 +222,7 @@ class Cursor {
         const name = this.expectIdent("a CTE name");
         this.expectKw("as");
         this.expectOp("(");
-        const query = this.parseSelect();
+        const query = this.parseQuery();
         this.expectOp(")");
         this.count();
         ctes.push({ _tag: "Cte", name, query, span: this.span(cteStart) });
@@ -191,24 +231,36 @@ class Cursor {
 
     this.guardForbidden(); // a leading denied keyword (DROP/INSERT/…) → teachable error
     this.expectKw("select");
-    this.guardForbidden(); // catches `SELECT DISTINCT …`
+    const distinct = this.eatKw("distinct");
+    const distinctOn: Expr[] = [];
+    if (distinct && this.eatKw("on")) {
+      this.expectOp("(");
+      distinctOn.push(this.parseExpr(0));
+      while (this.eatOp(",")) distinctOn.push(this.parseExpr(0));
+      this.expectOp(")");
+    } else if (!distinct) {
+      this.eatKw("all");
+    }
+    this.guardForbidden();
 
     const columns: SelectItem[] = [this.parseSelectItem()];
     while (this.eatOp(",")) columns.push(this.parseSelectItem());
 
-    this.expectKw("from");
-    const from = this.parseTableSource();
+    const from = this.eatKw("from") ? this.parseTableSource() : undefined;
 
     const joins: Join[] = [];
-    for (;;) {
-      const join = this.tryParseJoin();
-      if (!join) break;
-      if (joins.length >= LIMITS.maxJoins) {
-        throw new VoidQlComplexityError({ message: "Query has too many joins." });
+    if (from) {
+      for (;;) {
+        const join = this.tryParseJoin();
+        if (!join) break;
+        if (joins.length >= LIMITS.maxJoins) {
+          throw new VoidQlComplexityError({ message: "Query has too many joins." });
+        }
+        joins.push(join);
       }
-      joins.push(join);
     }
 
+    const prewhere = this.eatKw("prewhere") ? this.parseExpr(0) : undefined;
     const where = this.eatKw("where") ? this.parseExpr(0) : undefined;
 
     const groupBy: Expr[] = [];
@@ -217,8 +269,19 @@ class Cursor {
       groupBy.push(this.parseExpr(0));
       while (this.eatOp(",")) groupBy.push(this.parseExpr(0));
     }
+    let groupByModifier: Select["groupByModifier"];
+    let withTotals = false;
+    if (groupBy.length > 0) {
+      while (this.eatKw("with")) {
+        if (this.eatKw("rollup")) groupByModifier = "rollup";
+        else if (this.eatKw("cube")) groupByModifier = "cube";
+        else if (this.eatKw("totals")) withTotals = true;
+        else this.fail(this.peek(), "Expected ROLLUP, CUBE, or TOTALS after WITH.");
+      }
+    }
 
     const having = this.eatKw("having") ? this.parseExpr(0) : undefined;
+    const qualify = this.eatKw("qualify") ? this.parseExpr(0) : undefined;
 
     const orderBy: OrderItem[] = [];
     if (this.eatKw("order")) {
@@ -227,11 +290,44 @@ class Cursor {
       while (this.eatOp(",")) orderBy.push(this.parseOrderItem());
     }
 
+    let limitBy: Select["limitBy"];
     let limit: number | undefined;
     let offset: number | undefined;
+    let withTies = false;
     if (this.eatKw("limit")) {
-      limit = this.parseUintLiteral("a LIMIT count");
-      if (this.eatKw("offset")) offset = this.parseUintLiteral("an OFFSET count");
+      const first = this.parseUintLiteral("a LIMIT count");
+      const second = this.eatOp(",")
+        ? this.parseUintLiteral("a LIMIT count after the offset")
+        : undefined;
+      if (this.eatKw("by")) {
+        const by: Expr[] = [this.parseExpr(0)];
+        while (this.eatOp(",")) by.push(this.parseExpr(0));
+        limitBy = {
+          limit: second ?? first,
+          offset: second === undefined ? undefined : first,
+          by: by as [Expr, ...Expr[]],
+        };
+        if (this.eatKw("limit")) {
+          const finalFirst = this.parseUintLiteral("a LIMIT count");
+          if (this.eatOp(",")) {
+            offset = finalFirst;
+            limit = this.parseUintLiteral("a LIMIT count after the offset");
+          } else {
+            limit = finalFirst;
+            if (this.eatKw("offset")) offset = this.parseUintLiteral("an OFFSET count");
+          }
+        }
+      } else if (second !== undefined) {
+        offset = first;
+        limit = second;
+      } else {
+        limit = first;
+        if (this.eatKw("offset")) offset = this.parseUintLiteral("an OFFSET count");
+      }
+    }
+    if (limit !== undefined && this.eatKw("with")) {
+      this.expectKw("ties");
+      withTies = true;
     }
 
     this.count();
@@ -239,15 +335,23 @@ class Cursor {
     return {
       _tag: "Select",
       with: ctes,
+      distinct,
+      distinctOn,
       columns: columns as [SelectItem, ...SelectItem[]],
       from,
       joins,
+      prewhere,
       where,
       groupBy,
+      groupByModifier,
+      withTotals,
       having,
+      qualify,
       orderBy,
+      limitBy,
       limit,
       offset,
+      withTies,
       span: this.span(start),
     };
   }
@@ -280,12 +384,18 @@ class Cursor {
     let dir: "asc" | "desc" = "asc";
     if (this.eatKw("asc")) dir = "asc";
     else if (this.eatKw("desc")) dir = "desc";
+    let nulls: OrderItem["nulls"];
+    if (this.eatKw("nulls")) {
+      if (this.eatKw("first")) nulls = "first";
+      else if (this.eatKw("last")) nulls = "last";
+      else this.fail(this.peek(), "Expected FIRST or LAST after NULLS.");
+    }
     this.count();
-    return { _tag: "OrderItem", expr, dir, span: this.span(start) };
+    return { _tag: "OrderItem", expr, dir, nulls, span: this.span(start) };
   }
 
   private tryParseJoin(): Join | undefined {
-    let kind: "inner" | "left";
+    let kind: Join["kind"];
     if (this.isKw("inner")) {
       this.next();
       kind = "inner";
@@ -293,6 +403,21 @@ class Cursor {
     } else if (this.isKw("left")) {
       this.next();
       kind = "left";
+      this.eatKw("outer");
+      this.expectKw("join");
+    } else if (this.isKw("right")) {
+      this.next();
+      kind = "right";
+      this.eatKw("outer");
+      this.expectKw("join");
+    } else if (this.isKw("full")) {
+      this.next();
+      kind = "full";
+      this.eatKw("outer");
+      this.expectKw("join");
+    } else if (this.isKw("cross")) {
+      this.next();
+      kind = "cross";
       this.expectKw("join");
     } else if (this.isKw("join")) {
       this.next();
@@ -302,10 +427,29 @@ class Cursor {
     }
     const start = this.prev().start;
     const source = this.parseTableSource();
-    this.expectKw("on");
-    const on = this.parseExpr(0);
+    let on: Expr | undefined;
+    let using: string[] | undefined;
+    if (kind !== "cross") {
+      if (this.eatKw("on")) {
+        on = this.parseExpr(0);
+      } else if (this.eatKw("using")) {
+        const parenthesized = this.eatOp("(");
+        using = [this.expectIdent("a column name in USING")];
+        while (this.eatOp(",")) using.push(this.expectIdent("a column name in USING"));
+        if (parenthesized) this.expectOp(")");
+      } else {
+        this.fail(this.peek(), "Expected 'ON' or 'USING' after JOIN source.");
+      }
+    }
     this.count();
-    return { _tag: "Join", kind, source, on, span: this.span(start) };
+    return {
+      _tag: "Join",
+      kind,
+      source,
+      on,
+      using: using as [string, ...string[]] | undefined,
+      span: this.span(start),
+    };
   }
 
   private parseTableSource(): TableSource {
@@ -317,7 +461,7 @@ class Cursor {
       if (!this.isKw("select") && !this.isKw("with")) {
         this.fail(this.peek(), "Expected a subquery (SELECT …) after '('.");
       }
-      const query = this.parseSelect();
+      const query = this.parseQuery();
       this.expectOp(")");
       this.eatKw("as");
       const alias = this.expectIdent("an alias for the subquery (subqueries must be aliased)");
@@ -371,6 +515,10 @@ class Cursor {
         this.next();
         return this.mkBinary("like", left, this.parseExpr(3), start);
       }
+      if (t.text === "ilike") {
+        this.next();
+        return this.mkBinary("ilike", left, this.parseExpr(3), start);
+      }
       if (t.text === "is") {
         this.next();
         const negated = this.eatKw("not");
@@ -395,6 +543,11 @@ class Cursor {
           this.next();
           return this.mkBinary("notLike", left, this.parseExpr(3), start);
         }
+        if (follow === "ilike") {
+          this.next();
+          this.next();
+          return this.mkBinary("notIlike", left, this.parseExpr(3), start);
+        }
       }
     }
 
@@ -437,16 +590,22 @@ class Cursor {
   private parseInTail(left: Expr, negated: boolean, start: Pos): Expr {
     this.expectOp("(");
     if (this.isKw("select") || this.isKw("with")) {
-      this.fail(
-        this.peek(),
-        "Subqueries in IN are not supported in VoidQL v1; use a JOIN instead.",
-      );
+      const query = this.parseQuery();
+      this.expectOp(")");
+      this.count();
+      return { _tag: "InExpr", expr: left, query, negated, span: this.span(start) };
     }
     const list: Expr[] = [this.parseExpr(0)];
     while (this.eatOp(",")) list.push(this.parseExpr(0));
     this.expectOp(")");
     this.count();
-    return { _tag: "InExpr", expr: left, list, negated, span: this.span(start) };
+    return {
+      _tag: "InExpr",
+      expr: left,
+      list: list as [Expr, ...Expr[]],
+      negated,
+      span: this.span(start),
+    };
   }
 
   private parseBetweenTail(left: Expr, negated: boolean, start: Pos): Expr {
@@ -479,6 +638,17 @@ class Cursor {
           return { _tag: "NullLit", span: this.span(start) };
         case "case":
           return this.parseCase();
+        case "exists": {
+          this.next();
+          this.expectOp("(");
+          if (!this.isKw("select") && !this.isKw("with")) {
+            this.fail(this.peek(), "EXISTS requires a SELECT subquery.");
+          }
+          const query = this.parseQuery();
+          this.expectOp(")");
+          this.count();
+          return { _tag: "ExistsExpr", query, span: this.span(start) };
+        }
         default:
           this.fail(t, `Unexpected keyword '${t.text.toUpperCase()}'.`);
       }
@@ -500,7 +670,10 @@ class Cursor {
       if (t.text === "(") {
         this.next();
         if (this.isKw("select") || this.isKw("with")) {
-          this.fail(t, "Scalar subqueries are not supported in VoidQL v1.");
+          const query = this.parseQuery();
+          this.expectOp(")");
+          this.count();
+          return { _tag: "SubqueryExpr", query, span: this.span(start) };
         }
         const expr = this.parseExpr(0);
         this.expectOp(")");
@@ -554,7 +727,58 @@ class Cursor {
     }
     this.expectOp(")");
     this.count();
-    return { _tag: "FnCall", name, args, span: this.span(start) };
+    const fn = { _tag: "FnCall", name, args, span: this.span(start) } as const;
+    if (!this.eatKw("over")) return fn;
+
+    this.expectOp("(");
+    const partitionBy: Expr[] = [];
+    if (this.eatKw("partition")) {
+      this.expectKw("by");
+      partitionBy.push(this.parseExpr(0));
+      while (this.eatOp(",")) partitionBy.push(this.parseExpr(0));
+    }
+    const orderBy: OrderItem[] = [];
+    if (this.eatKw("order")) {
+      this.expectKw("by");
+      orderBy.push(this.parseOrderItem());
+      while (this.eatOp(",")) orderBy.push(this.parseOrderItem());
+    }
+    let frame: WindowFrame | undefined;
+    if (this.isKw("rows") || this.isKw("range")) {
+      const unit = this.next().text as WindowFrame["unit"];
+      if (this.eatKw("between")) {
+        const frameStart = this.parseWindowFrameBound();
+        this.expectKw("and");
+        frame = { unit, start: frameStart, end: this.parseWindowFrameBound() };
+      } else {
+        frame = { unit, start: this.parseWindowFrameBound() };
+      }
+    }
+    this.expectOp(")");
+    this.count();
+    return {
+      _tag: "WindowExpr",
+      fn,
+      partitionBy,
+      orderBy,
+      frame,
+      span: this.span(start),
+    };
+  }
+
+  private parseWindowFrameBound(): WindowFrameBound {
+    if (this.eatKw("current")) {
+      this.expectKw("row");
+      return "currentRow";
+    }
+    if (this.eatKw("unbounded")) {
+      if (this.eatKw("preceding")) return "unboundedPreceding";
+      if (this.eatKw("following")) return "unboundedFollowing";
+    }
+    throw new VoidQlUnsupportedError({
+      message: `line ${this.peek().start.line}, col ${this.peek().start.col}: Unsupported window frame bound.`,
+      hint: "Use UNBOUNDED PRECEDING, CURRENT ROW, or UNBOUNDED FOLLOWING.",
+    });
   }
 
   private parseColumnRef(): Expr {
diff --git a/packages/core/test/services/voidql/compiler.test.ts b/packages/core/test/services/voidql/compiler.test.ts
index cb6ee625b..a88e6ab8b 100644
--- a/packages/core/test/services/voidql/compiler.test.ts
+++ b/packages/core/test/services/voidql/compiler.test.ts
@@ -94,6 +94,13 @@ describe("VoidQL compiler — golden mapping", () => {
     expect(sql).not.toContain("999999999");
   });
 
+  it("applies one global result cap around UNION ALL arms", () => {
+    const { sql } = compile(
+      "SELECT event_id AS id FROM events UNION ALL SELECT person_id AS id FROM persons",
+    );
+    expect(sql.trimEnd().endsWith("AS voidql_union LIMIT 100000")).toBe(true);
+  });
+
   it("expands SELECT * to in-star catalog columns only (never physical *)", () => {
     const { sql, columns } = compile("SELECT * FROM persons", PII);
     expect(sql).not.toMatch(/SELECT \*/);
@@ -159,7 +166,7 @@ describe("VoidQL compiler — tenant isolation invariant", () => {
     );
   });
 
-  it("CTEs and correlated subqueries inject scope at every depth", () => {
+  it("CTEs inject scope at every depth", () => {
     const { injected, sql } = compile(
       "WITH recent AS ( SELECT event_id, distinct_id FROM events ) " +
         "SELECT count() AS n FROM recent",
@@ -196,20 +203,25 @@ describe("VoidQL compiler — forbidden + unsupported constructs", () => {
     );
   });
 
-  it("rejects UNION, DISTINCT, and DDL", () => {
+  it("rejects ambiguous set syntax and DDL", () => {
     expectTag(
-      () => compile("SELECT count() AS n FROM events UNION ALL SELECT 1"),
+      () => compile("SELECT count() AS n FROM events UNION SELECT count() FROM events"),
       "VoidQlUnsupportedError",
     );
-    expectTag(() => compile("SELECT DISTINCT event_name FROM events"), "VoidQlUnsupportedError");
     expectTag(() => compile("DROP TABLE events"), "VoidQlUnsupportedError");
   });
 
-  it("rejects subqueries in IN (use a JOIN instead)", () => {
+  it("rejects multi-column scalar and IN subqueries", () => {
+    expectTag(
+      () => compile("SELECT (SELECT event_id, person_id FROM events) AS invalid"),
+      "VoidQlUnsupportedError",
+    );
     expectTag(
       () =>
-        compile("SELECT count() AS n FROM events WHERE event_id IN (SELECT event_id FROM events)"),
-      "VoidQlSyntaxError",
+        compile(
+          "SELECT count() AS n FROM events WHERE event_id IN (SELECT event_id, person_id FROM events)",
+        ),
+      "VoidQlUnsupportedError",
     );
   });
 
diff --git a/packages/core/test/services/voidql/query-compatibility.test.ts b/packages/core/test/services/voidql/query-compatibility.test.ts
new file mode 100644
index 000000000..42b13de73
--- /dev/null
+++ b/packages/core/test/services/voidql/query-compatibility.test.ts
@@ -0,0 +1,519 @@
+/**
+ * The supported VoidQL query corpus. Every accepted query is compiled through the
+ * tenant verifier, so adding syntax here also proves that all newly reachable base
+ * relations remain scoped. Keep this file exhaustive for the intentionally exposed
+ * ClickHouse SELECT surface; administrative, mutating, external-source, and
+ * settings/output clauses belong in the permanent rejection corpus below.
+ */
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { Effect } from "effect";
+import * as Reactivity from "effect/unstable/reactivity/Reactivity";
+
+import { describe, expect, it } from "../../../src/testing/effect-vitest.ts";
+
+import type { Capability } from "../../../src/services/voidql/catalog/types.ts";
+import { compileToIr } from "../../../src/services/voidql/compile.ts";
+import { registeredFunctionNames } from "../../../src/services/voidql/functions.ts";
+import { renderDebugSql, toStatement } from "../../../src/services/voidql/ir.ts";
+import { makeAuthorizedScope } from "../../../src/services/voidql/scope.ts";
+import { verify } from "../../../src/services/voidql/verify.ts";
+
+const SCOPE = makeAuthorizedScope({
+  organizationId: "org_compatibility",
+  availableProjectIds: ["project_a", "project_b"],
+});
+const CAPABILITIES = new Set<Capability>(["pii"]);
+
+interface SupportedQuery {
+  readonly name: string;
+  readonly sql: string;
+  readonly baseReferences: number;
+  readonly contains?: readonly string[];
+  readonly boundValues?: readonly unknown[];
+}
+
+const SUPPORTED_QUERIES: readonly SupportedQuery[] = [
+  {
+    name: "constant SELECT without FROM",
+    sql: "SELECT 1 AS one, true AS enabled, NULL AS missing",
+    baseReferences: 0,
+  },
+  {
+    name: "explicit and implicit projection aliases",
+    sql: "SELECT event_name AS explicit_name, project_id implicit_project FROM events",
+    baseReferences: 1,
+    contains: ["AS explicit_name", "AS implicit_project"],
+  },
+  {
+    name: "expression alias reused by a later projection",
+    sql: "SELECT upper(event_name) AS normalized, length(normalized) AS normalized_length FROM events",
+    baseReferences: 1,
+    contains: ["upper(", "length(normalized)"],
+  },
+  {
+    name: "projection alias reused in WHERE",
+    sql: "SELECT lower(event_name) AS normalized FROM events WHERE normalized LIKE 'purchase%'",
+    baseReferences: 1,
+    contains: ["WHERE (normalized LIKE"],
+    boundValues: ["purchase%"],
+  },
+  {
+    name: "projection aliases reused in GROUP BY, HAVING, and ORDER BY",
+    sql: "SELECT toStartOfDay(event_ts) AS day, count() AS total FROM events GROUP BY day HAVING total > 1 ORDER BY total DESC",
+    baseReferences: 1,
+    contains: ["GROUP BY day", "HAVING (total >", "ORDER BY total DESC"],
+  },
+  {
+    name: "explicit table alias",
+    sql: "SELECT e.event_id FROM events AS e",
+    baseReferences: 1,
+    contains: ["AS e", "e.event_id"],
+  },
+  {
+    name: "implicit table alias",
+    sql: "SELECT e.event_id FROM events e",
+    baseReferences: 1,
+    contains: ["AS e", "e.event_id"],
+  },
+  {
+    name: "SELECT ALL",
+    sql: "SELECT ALL event_name FROM events",
+    baseReferences: 1,
+  },
+  {
+    name: "SELECT DISTINCT",
+    sql: "SELECT DISTINCT event_name FROM events",
+    baseReferences: 1,
+    contains: ["SELECT DISTINCT"],
+  },
+  {
+    name: "SELECT DISTINCT ON",
+    sql: "SELECT DISTINCT ON (person_id) person_id, event_ts FROM events ORDER BY event_ts DESC",
+    baseReferences: 1,
+    contains: ["SELECT DISTINCT ON (", "ORDER BY"],
+  },
+  {
+    name: "arithmetic precedence and unary negation",
+    sql: "SELECT -(1 + 2 * 3) AS result FROM events LIMIT 1",
+    baseReferences: 1,
+  },
+  {
+    name: "boolean comparison precedence",
+    sql: "SELECT event_id FROM events WHERE event_name = 'a' OR event_name = 'b' AND project_id != 'c'",
+    baseReferences: 1,
+    boundValues: ["a", "b", "c"],
+  },
+  {
+    name: "LIKE and NOT LIKE",
+    sql: "SELECT event_id FROM events WHERE event_name LIKE 'a%' AND event_name NOT LIKE '%bot%'",
+    baseReferences: 1,
+    boundValues: ["a%", "%bot%"],
+  },
+  {
+    name: "ILIKE and NOT ILIKE",
+    sql: "SELECT event_id FROM events WHERE event_name ILIKE 'a%' AND event_name NOT ILIKE '%bot%'",
+    baseReferences: 1,
+    contains: [" ILIKE ", " NOT ILIKE "],
+    boundValues: ["a%", "%bot%"],
+  },
+  {
+    name: "IN and NOT IN literal lists",
+    sql: "SELECT event_id FROM events WHERE event_name IN ('a', 'b') AND project_id NOT IN ('x', 'y')",
+    baseReferences: 1,
+    boundValues: ["a", "b", "x", "y"],
+  },
+  {
+    name: "BETWEEN and NOT BETWEEN",
+    sql: "SELECT event_id FROM events WHERE event_ts BETWEEN '2026-01-01' AND '2026-01-31' AND event_name NOT BETWEEN 'a' AND 'z'",
+    baseReferences: 1,
+  },
+  {
+    name: "IS NULL and IS NOT NULL",
+    sql: "SELECT event_id FROM events WHERE person_id IS NULL OR distinct_id IS NOT NULL",
+    baseReferences: 1,
+  },
+  {
+    name: "searched and simple CASE",
+    sql: "SELECT CASE WHEN event_name = 'a' THEN 'first' ELSE 'other' END AS searched, CASE event_name WHEN 'b' THEN 'second' ELSE 'other' END AS simple FROM events",
+    baseReferences: 1,
+    boundValues: ["a", "first", "b", "second", "other"],
+  },
+  {
+    name: "PREWHERE lowered safely ahead of WHERE",
+    sql: "SELECT event_id FROM events PREWHERE event_ts >= '2026-01-01' WHERE event_name = 'signup'",
+    baseReferences: 1,
+    contains: [" WHERE ", " AND "],
+    boundValues: ["signup"],
+  },
+  {
+    name: "GROUP BY and HAVING",
+    sql: "SELECT event_name, count() AS total FROM events GROUP BY event_name HAVING count() > 10",
+    baseReferences: 1,
+    contains: ["GROUP BY", "HAVING"],
+  },
+  {
+    name: "GROUP BY WITH ROLLUP and TOTALS",
+    sql: "SELECT event_name, count() AS total FROM events GROUP BY event_name WITH ROLLUP WITH TOTALS",
+    baseReferences: 1,
+    contains: ["WITH ROLLUP", "WITH TOTALS"],
+  },
+  {
+    name: "GROUP BY WITH CUBE",
+    sql: "SELECT event_name, project_id, count() AS total FROM events GROUP BY event_name, project_id WITH CUBE",
+    baseReferences: 1,
+    contains: ["WITH CUBE"],
+  },
+  {
+    name: "multi-column ORDER BY",
+    sql: "SELECT event_name, event_ts FROM events ORDER BY event_name ASC, event_ts DESC",
+    baseReferences: 1,
+    contains: ["ORDER BY", " ASC", " DESC"],
+  },
+  {
+    name: "ORDER BY NULLS FIRST and NULLS LAST",
+    sql: "SELECT event_name, event_ts FROM events ORDER BY event_name ASC NULLS FIRST, event_ts DESC NULLS LAST",
+    baseReferences: 1,
+    contains: ["NULLS FIRST", "NULLS LAST"],
+  },
+  {
+    name: "row-number window with partition and ordering",
+    sql: "SELECT event_id, rowNumber() OVER (PARTITION BY person_id ORDER BY event_ts DESC) AS row_num FROM events",
+    baseReferences: 1,
+    contains: ["row_number() OVER (PARTITION BY", "ORDER BY"],
+  },
+  {
+    name: "aggregate window with an unbounded frame",
+    sql: "SELECT event_id, sum(1) OVER (PARTITION BY person_id ORDER BY event_ts ROWS BETWEEN UNBOUNDED PRECEDING AND CURRENT ROW) AS running_total FROM events",
+    baseReferences: 1,
+    contains: ["ROWS BETWEEN UNBOUNDED PRECEDING AND CURRENT ROW"],
+  },
+  {
+    name: "QUALIFY over a window alias",
+    sql: "SELECT event_id, rowNumber() OVER (PARTITION BY person_id ORDER BY event_ts DESC) AS row_num FROM events QUALIFY row_num = 1",
+    baseReferences: 1,
+    contains: [" QUALIFY (row_num ="],
+  },
+  {
+    name: "LIMIT count OFFSET offset",
+    sql: "SELECT event_id FROM events LIMIT 10 OFFSET 5",
+    baseReferences: 1,
+    contains: ["LIMIT 10 OFFSET 5"],
+  },
+  {
+    name: "LIMIT offset, count",
+    sql: "SELECT event_id FROM events LIMIT 5, 10",
+    baseReferences: 1,
+    contains: ["LIMIT 10 OFFSET 5"],
+  },
+  {
+    name: "LIMIT WITH TIES",
+    sql: "SELECT event_name FROM events ORDER BY event_name LIMIT 10 WITH TIES",
+    baseReferences: 1,
+    contains: ["LIMIT 10 WITH TIES"],
+  },
+  {
+    name: "LIMIT BY plus result LIMIT",
+    sql: "SELECT event_name, event_ts FROM events ORDER BY event_ts DESC LIMIT 2 BY event_name LIMIT 10",
+    baseReferences: 1,
+    contains: ["LIMIT 2 BY", "LIMIT 10"],
+  },
+  {
+    name: "INNER JOIN with ON",
+    sql: "SELECT e.event_id FROM events AS e INNER JOIN persons AS p ON p.person_id = e.person_id",
+    baseReferences: 2,
+    contains: ["INNER JOIN", " ON "],
+  },
+  {
+    name: "LEFT OUTER JOIN",
+    sql: "SELECT e.event_id FROM events AS e LEFT OUTER JOIN persons AS p ON p.person_id = e.person_id",
+    baseReferences: 2,
+    contains: ["LEFT JOIN"],
+  },
+  {
+    name: "RIGHT OUTER JOIN",
+    sql: "SELECT e.event_id FROM events AS e RIGHT OUTER JOIN persons AS p ON p.person_id = e.person_id",
+    baseReferences: 2,
+    contains: ["RIGHT JOIN"],
+  },
+  {
+    name: "FULL OUTER JOIN",
+    sql: "SELECT e.event_id FROM events AS e FULL OUTER JOIN persons AS p ON p.person_id = e.person_id",
+    baseReferences: 2,
+    contains: ["FULL JOIN"],
+  },
+  {
+    name: "CROSS JOIN",
+    sql: "SELECT count() AS combinations FROM events AS e CROSS JOIN persons AS p",
+    baseReferences: 2,
+    contains: ["CROSS JOIN"],
+  },
+  {
+    name: "JOIN USING",
+    sql: "SELECT e.event_name FROM events AS e JOIN persons AS p USING (project_id)",
+    baseReferences: 2,
+    contains: ["USING (project_id)"],
+  },
+  {
+    name: "derived-table subquery",
+    sql: "SELECT recent.event_id FROM (SELECT event_id FROM events WHERE event_ts >= '2026-01-01') AS recent",
+    baseReferences: 1,
+  },
+  {
+    name: "scalar subquery",
+    sql: "SELECT (SELECT count() FROM persons) AS person_count",
+    baseReferences: 1,
+    contains: ["( SELECT count()"],
+  },
+  {
+    name: "IN subquery",
+    sql: "SELECT event_id FROM events WHERE event_id IN (SELECT event_id FROM events WHERE event_name = 'signup')",
+    baseReferences: 2,
+    boundValues: ["signup"],
+  },
+  {
+    name: "EXISTS subquery",
+    sql: "SELECT e.event_id FROM events AS e WHERE EXISTS (SELECT p.person_id FROM persons AS p WHERE p.project_id = 'project_a')",
+    baseReferences: 2,
+    contains: ["EXISTS ( SELECT"],
+    boundValues: ["project_a"],
+  },
+  {
+    name: "NOT EXISTS subquery",
+    sql: "SELECT e.event_id FROM events AS e WHERE NOT EXISTS (SELECT p.person_id FROM persons AS p WHERE p.project_id = 'project_a')",
+    baseReferences: 2,
+    contains: ["NOT EXISTS"],
+    boundValues: ["project_a"],
+  },
+  {
+    name: "single CTE",
+    sql: "WITH recent AS (SELECT event_id FROM events WHERE event_ts >= '2026-01-01') SELECT count() AS total FROM recent",
+    baseReferences: 1,
+    contains: ["WITH recent AS"],
+  },
+  {
+    name: "dependent CTEs",
+    sql: "WITH base AS (SELECT event_id FROM events), copied AS (SELECT event_id FROM base) SELECT count() AS total FROM copied",
+    baseReferences: 1,
+    contains: ["WITH base AS", ", copied AS"],
+  },
+  {
+    name: "UNION ALL",
+    sql: "SELECT event_id AS id FROM events UNION ALL SELECT person_id AS id FROM persons",
+    baseReferences: 2,
+    contains: [" UNION ALL ", ") AS voidql_union LIMIT 100000"],
+  },
+  {
+    name: "three UNION ALL arms",
+    sql: "SELECT event_id AS id FROM events UNION ALL SELECT person_id AS id FROM persons UNION ALL SELECT event_id AS id FROM revenue",
+    baseReferences: 3,
+    contains: [" UNION ALL "],
+  },
+  {
+    name: "UNION DISTINCT",
+    sql: "SELECT event_id AS id FROM events UNION DISTINCT SELECT person_id AS id FROM persons",
+    baseReferences: 2,
+    contains: [" UNION DISTINCT "],
+  },
+  {
+    name: "INTERSECT",
+    sql: "SELECT project_id FROM events INTERSECT SELECT project_id FROM persons",
+    baseReferences: 2,
+    contains: [" INTERSECT "],
+  },
+  {
+    name: "EXCEPT",
+    sql: "SELECT project_id FROM events EXCEPT SELECT project_id FROM persons",
+    baseReferences: 2,
+    contains: [" EXCEPT "],
+  },
+  {
+    name: "UNION ALL inside a CTE",
+    sql: "WITH ids AS (SELECT event_id AS id FROM events UNION ALL SELECT person_id AS id FROM persons) SELECT count() AS total FROM ids",
+    baseReferences: 2,
+  },
+  {
+    name: "aggregate function family",
+    sql: "SELECT count(), countIf(event_name = 'a'), countDistinct(person_id), sum(1), sumIf(1, event_name = 'a'), avg(1), min(event_ts), max(event_ts), any(event_name), argMin(event_name, event_ts), argMax(event_name, event_ts) FROM events",
+    baseReferences: 1,
+  },
+  {
+    name: "conditional function family",
+    sql: "SELECT if(event_name = 'a', 'yes', 'no'), multiIf(event_name = 'a', 'a', event_name = 'b', 'b', 'other'), coalesce(person_id, distinct_id), nullIf(person_id, ''), ifNull(person_id, ''), greatest(1, 2), least(1, 2) FROM events",
+    baseReferences: 1,
+  },
+  {
+    name: "string function family",
+    sql: "SELECT lower(event_name), upper(event_name), length(event_name), trim(event_name), concat(event_name, project_id), substring(event_name, 1, 3), startsWith(event_name, 'a'), endsWith(event_name, 'z'), position(event_name, 'x'), replaceAll(event_name, 'a', 'b'), match(event_name, '^a'), replaceRegexpAll(event_name, 'a', 'b'), cityHash64(event_id) FROM events",
+    baseReferences: 1,
+  },
+  {
+    name: "date function family",
+    sql: "SELECT toStartOfMinute(event_ts), toStartOfHour(event_ts), toStartOfDay(event_ts), toStartOfWeek(event_ts), toStartOfMonth(event_ts), toStartOfQuarter(event_ts), toStartOfYear(event_ts), toDate(event_ts), dateDiff('day', event_ts, event_ts), toYear(event_ts), toMonth(event_ts), toDayOfWeek(event_ts) FROM events",
+    baseReferences: 1,
+  },
+  {
+    name: "math and safe cast function family",
+    sql: "SELECT round(amount_usd, 2), floor(amount_usd), ceil(amount_usd), abs(amount_usd), sqrt(amount_usd), pow(amount_usd, 2), exp(amount_usd), log(amount_usd), toFloat64OrNull(properties.amount), toInt64OrNull(properties.quantity), toDateOrNull(properties.date) FROM revenue",
+    baseReferences: 1,
+  },
+  {
+    name: "JSON property namespaces",
+    sql: "SELECT properties.plan, context.locale FROM events WHERE properties.plan = 'pro'",
+    baseReferences: 1,
+    boundValues: ["plan", "locale", "pro"],
+  },
+  {
+    name: "PII columns and traits with capability",
+    sql: "SELECT email, name, traits.plan FROM persons WHERE traits.plan = 'pro'",
+    baseReferences: 1,
+    boundValues: ["plan", "pro"],
+  },
+  {
+    name: "qualified catalog star",
+    sql: "SELECT e.* FROM events AS e",
+    baseReferences: 1,
+  },
+  {
+    name: "comments and trailing semicolon",
+    sql: "/* leading */ SELECT event_id -- projection\nFROM events;",
+    baseReferences: 1,
+  },
+];
+
+describe("VoidQL supported ClickHouse SELECT compatibility corpus", () => {
+  for (const testCase of SUPPORTED_QUERIES) {
+    it(testCase.name, () => {
+      const compiled = compileToIr(testCase.sql, SCOPE, CAPABILITIES);
+      verify(compiled.pieces, compiled.injected, SCOPE);
+      const rendered = renderDebugSql(compiled.pieces);
+
+      expect(compiled.injected).toHaveLength(testCase.baseReferences);
+      expect(rendered.sql).not.toMatch(/\bSETTINGS\b|\bFORMAT\b/i);
+      for (const fragment of testCase.contains ?? []) expect(rendered.sql).toContain(fragment);
+      for (const value of testCase.boundValues ?? []) expect(rendered.binds).toContainEqual(value);
+    });
+  }
+});
+
+const describeClickhouse = process.env.VOIDQL_CLICKHOUSE_TEST === "1" ? describe : describe.skip;
+
+describeClickhouse("VoidQL live ClickHouse compatibility", () => {
+  it("executes every supported query through the real parameter substrate", async () => {
+    const ch = await Effect.runPromise(
+      ClickhouseWebClient.makeUnchecked(() => ({
+        url: process.env.CLICKHOUSE_URL ?? "http://127.0.0.1:8123",
+        database: process.env.CLICKHOUSE_DATABASE ?? "voidhash",
+        username: process.env.CLICKHOUSE_ANALYTICS_QUERY_USERNAME ?? "voidhash_query",
+        password: process.env.CLICKHOUSE_ANALYTICS_QUERY_PASSWORD ?? "password",
+      })).pipe(Effect.provide(Reactivity.layer)),
+    );
+
+    for (const testCase of SUPPORTED_QUERIES) {
+      const compiled = compileToIr(testCase.sql, SCOPE, CAPABILITIES);
+      await Effect.runPromise(
+        toStatement(ch, compiled.pieces).pipe(
+          Effect.mapError(
+            (cause) =>
+              new Error(`ClickHouse rejected compatibility case '${testCase.name}'.`, {
+                cause,
+              }),
+          ),
+        ),
+      );
+    }
+  });
+});
+
+describe("VoidQL function allowlist snapshot", () => {
+  it("lists every callable function intentionally", () => {
+    expect([...registeredFunctionNames()].sort()).toEqual(
+      [
+        "abs",
+        "any",
+        "argmax",
+        "argmin",
+        "avg",
+        "ceil",
+        "cityhash64",
+        "coalesce",
+        "concat",
+        "count",
+        "countdistinct",
+        "countif",
+        "datediff",
+        "denserank",
+        "endswith",
+        "exp",
+        "floor",
+        "greatest",
+        "if",
+        "ifnull",
+        "least",
+        "length",
+        "log",
+        "lower",
+        "match",
+        "max",
+        "min",
+        "multiif",
+        "nullif",
+        "position",
+        "pow",
+        "replaceall",
+        "replaceregexpall",
+        "rank",
+        "round",
+        "rownumber",
+        "sqrt",
+        "startswith",
+        "substring",
+        "sum",
+        "sumif",
+        "todateornull",
+        "todate",
+        "tofloat64ornull",
+        "toint64ornull",
+        "tomonth",
+        "tostartofday",
+        "tostartofhour",
+        "tostartofminute",
+        "tostartofmonth",
+        "tostartofquarter",
+        "tostartofweek",
+        "tostartofyear",
+        "todayofweek",
+        "toyear",
+        "trim",
+        "upper",
+      ].sort(),
+    );
+  });
+});
+
+const PERMANENTLY_REJECTED = [
+  "SELECT event_id FROM events SETTINGS max_threads = 1",
+  "SELECT event_id FROM events FORMAT JSON",
+  "SELECT event_id FROM events INTO OUTFILE 'result.csv'",
+  "SELECT * FROM url('https://example.com/data.csv')",
+  "SELECT * FROM system.tables",
+  "SELECT currentUser() AS user",
+  "SELECT event_id FROM events FINAL",
+  "SELECT event_id FROM events SAMPLE 0.1",
+  "INSERT INTO events VALUES (1)",
+  "UPDATE events SET event_name = 'x'",
+  "DELETE FROM events WHERE true",
+  "DROP TABLE events",
+  "SELECT event_id FROM events UNION SELECT event_id FROM events",
+  "SELECT e.event_id FROM events AS e WHERE EXISTS (SELECT p.person_id FROM persons AS p WHERE p.person_id = e.person_id)",
+  "SELECT sum(1) OVER (ORDER BY event_ts ROWS BETWEEN 2 PRECEDING AND CURRENT ROW) FROM events",
+  "SELECT rowNumber() FROM events",
+  "SELECT e.*, p.* FROM events AS e JOIN persons AS p ON e.person_id = p.person_id",
+] as const;
+
+describe("VoidQL permanent security boundary", () => {
+  for (const sql of PERMANENTLY_REJECTED) {
+    it(`rejects ${sql}`, () => {
+      expect(() => compileToIr(sql, SCOPE, CAPABILITIES)).toThrow();
+    });
+  }
+});
diff --git a/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
index 24fb8af44..469e5efae 100644
--- a/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
+++ b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
@@ -1,2 +1,2 @@
 /** Generated by scripts/generate-runtime-bundle.mjs. */
-export const PAYWALL_RUNTIME_BUNDLE = "(()=>{var $n=Object.defineProperty;var wa=(e,t,r)=>t in e?$n(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Pa=(e,t)=>{for(var r in t)$n(e,r,{get:t[r],enumerable:!0})};var p=(e,t,r)=>wa(e,typeof t!=\"symbol\"?t+\"\":t,r);var $t,_,Yn,Va,Ne,Wn,Xn,Jn,Ur,jt,Ct,Zn,Kr,Fr,zr,Qn,Ut={},Ft=[],Na=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Wt=Array.isArray;function be(e,t){for(var r in t)e[r]=t[r];return e}function Gr(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function _a(e,t,r){var n,o,a,d={};for(a in t)a==\"key\"?n=t[a]:a==\"ref\"?o=t[a]:d[a]=t[a];if(arguments.length>2&&(d.children=arguments.length>3?$t.call(arguments,2):r),typeof e==\"function\"&&e.defaultProps!=null)for(a in e.defaultProps)d[a]===void 0&&(d[a]=e.defaultProps[a]);return Bt(e,d,n,o,null)}function Bt(e,t,r,n,o){var a={type:e,props:t,key:r,ref:n,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:o??++Yn,__i:-1,__u:0};return o==null&&_.vnode!=null&&_.vnode(a),a}function Q(e){return e.children}function Ht(e,t){this.props=e,this.context=t}function tt(e,t){if(t==null)return e.__?tt(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if((r=e.__k[t])!=null&&r.__e!=null)return r.__e;return typeof e.type==\"function\"?tt(e):null}function ka(e){if(e.__P&&e.__d){var t=e.__v,r=t.__e,n=[],o=[],a=be({},t);a.__v=t.__v+1,_.vnode&&_.vnode(a),Yr(e.__P,a,t,e.__n,e.__P.namespaceURI,32&t.__u?[r]:null,n,r??tt(t),!!(32&t.__u),o),a.__v=t.__v,a.__.__k[a.__i]=a,no(n,a,o),t.__e=t.__=null,a.__e!=r&&eo(a)}}function eo(e){if((e=e.__)!=null&&e.__c!=null)return e.__e=e.__c.base=null,e.__k.some(function(t){if(t!=null&&t.__e!=null)return e.__e=e.__c.base=t.__e}),eo(e)}function $r(e){(!e.__d&&(e.__d=!0)&&Ne.push(e)&&!zt.__r++||Wn!=_.debounceRendering)&&((Wn=_.debounceRendering)||Xn)(zt)}function zt(){try{for(var e,t=1;Ne.length;)Ne.length>t&&Ne.sort(Jn),e=Ne.shift(),t=Ne.length,ka(e)}finally{Ne.length=zt.__r=0}}function to(e,t,r,n,o,a,d,l,s,u,f){var c,m,y,N,R,w,P,V=n&&n.__k||Ft,L=t.length;for(s=Ia(r,t,V,s,L),c=0;c<L;c++)(y=r.__k[c])!=null&&(m=y.__i!=-1&&V[y.__i]||Ut,y.__i=c,w=Yr(e,y,m,o,a,d,l,s,u,f),N=y.__e,y.ref&&m.ref!=y.ref&&(m.ref&&Xr(m.ref,null,y),f.push(y.ref,y.__c||N,y)),R==null&&N!=null&&(R=N),(P=!!(4&y.__u))||m.__k===y.__k?(s=ro(y,s,e,P),P&&m.__e&&(m.__e=null)):typeof y.type==\"function\"&&w!==void 0?s=w:N&&(s=N.nextSibling),y.__u&=-7);return r.__e=R,s}function Ia(e,t,r,n,o){var a,d,l,s,u,f=r.length,c=f,m=0;for(e.__k=new Array(o),a=0;a<o;a++)(d=t[a])!=null&&typeof d!=\"boolean\"&&typeof d!=\"function\"?(typeof d==\"string\"||typeof d==\"number\"||typeof d==\"bigint\"||d.constructor==String?d=e.__k[a]=Bt(null,d,null,null,null):Wt(d)?d=e.__k[a]=Bt(Q,{children:d},null,null,null):d.constructor===void 0&&d.__b>0?d=e.__k[a]=Bt(d.type,d.props,d.key,d.ref?d.ref:null,d.__v):e.__k[a]=d,s=a+m,d.__=e,d.__b=e.__b+1,l=null,(u=d.__i=Aa(d,r,s,c))!=-1&&(c--,(l=r[u])&&(l.__u|=2)),l==null||l.__v==null?(u==-1&&(o>f?m--:o<f&&m++),typeof d.type!=\"function\"&&(d.__u|=4)):u!=s&&(u==s-1?m--:u==s+1?m++:(u>s?m--:m++,d.__u|=4))):e.__k[a]=null;if(c)for(a=0;a<f;a++)(l=r[a])!=null&&(2&l.__u)==0&&(l.__e==n&&(n=tt(l)),io(l,l));return n}function ro(e,t,r,n){var o,a;if(typeof e.type==\"function\"){for(o=e.__k,a=0;o&&a<o.length;a++)o[a]&&(o[a].__=e,t=ro(o[a],t,r,n));return t}e.__e!=t&&(n&&(t&&e.type&&!t.parentNode&&(t=tt(e)),r.insertBefore(e.__e,t||null)),t=e.__e);do t=t&&t.nextSibling;while(t!=null&&t.nodeType==8);return t}function Aa(e,t,r,n){var o,a,d,l=e.key,s=e.type,u=t[r],f=u!=null&&(2&u.__u)==0;if(u===null&&l==null||f&&l==u.key&&s==u.type)return r;if(n>(f?1:0)){for(o=r-1,a=r+1;o>=0||a<t.length;)if((u=t[d=o>=0?o--:a++])!=null&&(2&u.__u)==0&&l==u.key&&s==u.type)return d}return-1}function Kn(e,t,r){t[0]==\"-\"?e.setProperty(t,r??\"\"):e[t]=r==null?\"\":typeof r!=\"number\"||Na.test(t)?r:r+\"px\"}function Mt(e,t,r,n,o){var a,d;e:if(t==\"style\")if(typeof r==\"string\")e.style.cssText=r;else{if(typeof n==\"string\"&&(e.style.cssText=n=\"\"),n)for(t in n)r&&t in r||Kn(e.style,t,\"\");if(r)for(t in r)n&&r[t]==n[t]||Kn(e.style,t,r[t])}else if(t[0]==\"o\"&&t[1]==\"n\")a=t!=(t=t.replace(Zn,\"$1\")),d=t.toLowerCase(),t=d in e||t==\"onFocusOut\"||t==\"onFocusIn\"?d.slice(2):t.slice(2),e.l||(e.l={}),e.l[t+a]=r,r?n?r[Ct]=n[Ct]:(r[Ct]=Kr,e.addEventListener(t,a?zr:Fr,a)):e.removeEventListener(t,a?zr:Fr,a);else{if(o==\"http://www.w3.org/2000/svg\")t=t.replace(/xlink(H|:h)/,\"h\").replace(/sName$/,\"s\");else if(t!=\"width\"&&t!=\"height\"&&t!=\"href\"&&t!=\"list\"&&t!=\"form\"&&t!=\"tabIndex\"&&t!=\"download\"&&t!=\"rowSpan\"&&t!=\"colSpan\"&&t!=\"role\"&&t!=\"popover\"&&t in e)try{e[t]=r??\"\";break e}catch{}typeof r==\"function\"||(r==null||r===!1&&t[4]!=\"-\"?e.removeAttribute(t):e.setAttribute(t,t==\"popover\"&&r==1?\"\":r))}}function Gn(e){return function(t){if(this.l){var r=this.l[t.type+e];if(t[jt]==null)t[jt]=Kr++;else if(t[jt]<r[Ct])return;return r(_.event?_.event(t):t)}}}function Yr(e,t,r,n,o,a,d,l,s,u){var f,c,m,y,N,R,w,P,V,L,z,Pe,Qe,Rt,et,M=t.type;if(t.constructor!==void 0)return null;128&r.__u&&(s=!!(32&r.__u),a=[l=t.__e=r.__e]),(f=_.__b)&&f(t);e:if(typeof M==\"function\")try{if(P=t.props,V=M.prototype&&M.prototype.render,L=(f=M.contextType)&&n[f.__c],z=f?L?L.props.value:f.__:n,r.__c?w=(c=t.__c=r.__c).__=c.__E:(V?t.__c=c=new M(P,z):(t.__c=c=new Ht(P,z),c.constructor=M,c.render=Ca),L&&L.sub(c),c.state||(c.state={}),c.__n=n,m=c.__d=!0,c.__h=[],c._sb=[]),V&&c.__s==null&&(c.__s=c.state),V&&M.getDerivedStateFromProps!=null&&(c.__s==c.state&&(c.__s=be({},c.__s)),be(c.__s,M.getDerivedStateFromProps(P,c.__s))),y=c.props,N=c.state,c.__v=t,m)V&&M.getDerivedStateFromProps==null&&c.componentWillMount!=null&&c.componentWillMount(),V&&c.componentDidMount!=null&&c.__h.push(c.componentDidMount);else{if(V&&M.getDerivedStateFromProps==null&&P!==y&&c.componentWillReceiveProps!=null&&c.componentWillReceiveProps(P,z),t.__v==r.__v||!c.__e&&c.shouldComponentUpdate!=null&&c.shouldComponentUpdate(P,c.__s,z)===!1){t.__v!=r.__v&&(c.props=P,c.state=c.__s,c.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(Ve){Ve&&(Ve.__=t)}),Ft.push.apply(c.__h,c._sb),c._sb=[],c.__h.length&&d.push(c);break e}c.componentWillUpdate!=null&&c.componentWillUpdate(P,c.__s,z),V&&c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(y,N,R)})}if(c.context=z,c.props=P,c.__P=e,c.__e=!1,Pe=_.__r,Qe=0,V)c.state=c.__s,c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),Ft.push.apply(c.__h,c._sb),c._sb=[];else do c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),c.state=c.__s;while(c.__d&&++Qe<25);c.state=c.__s,c.getChildContext!=null&&(n=be(be({},n),c.getChildContext())),V&&!m&&c.getSnapshotBeforeUpdate!=null&&(R=c.getSnapshotBeforeUpdate(y,N)),Rt=f!=null&&f.type===Q&&f.key==null?oo(f.props.children):f,l=to(e,Wt(Rt)?Rt:[Rt],t,r,n,o,a,d,l,s,u),c.base=t.__e,t.__u&=-161,c.__h.length&&d.push(c),w&&(c.__E=c.__=null)}catch(Ve){if(t.__v=null,s||a!=null)if(Ve.then){for(t.__u|=s?160:128;l&&l.nodeType==8&&l.nextSibling;)l=l.nextSibling;a[a.indexOf(l)]=null,t.__e=l}else{for(et=a.length;et--;)Gr(a[et]);Wr(t)}else t.__e=r.__e,t.__k=r.__k,Ve.then||Wr(t);_.__e(Ve,t,r)}else a==null&&t.__v==r.__v?(t.__k=r.__k,t.__e=r.__e):l=t.__e=Ra(r.__e,t,r,n,o,a,d,s,u);return(f=_.diffed)&&f(t),128&t.__u?void 0:l}function Wr(e){e&&(e.__c&&(e.__c.__e=!0),e.__k&&e.__k.some(Wr))}function no(e,t,r){for(var n=0;n<r.length;n++)Xr(r[n],r[++n],r[++n]);_.__c&&_.__c(t,e),e.some(function(o){try{e=o.__h,o.__h=[],e.some(function(a){a.call(o)})}catch(a){_.__e(a,o.__v)}})}function oo(e){return typeof e!=\"object\"||e==null||e.__b>0?e:Wt(e)?e.map(oo):e.constructor!==void 0?null:be({},e)}function Ra(e,t,r,n,o,a,d,l,s){var u,f,c,m,y,N,R,w=r.props||Ut,P=t.props,V=t.type;if(V==\"svg\"?o=\"http://www.w3.org/2000/svg\":V==\"math\"?o=\"http://www.w3.org/1998/Math/MathML\":o||(o=\"http://www.w3.org/1999/xhtml\"),a!=null){for(u=0;u<a.length;u++)if((y=a[u])&&\"setAttribute\"in y==!!V&&(V?y.localName==V:y.nodeType==3)){e=y,a[u]=null;break}}if(e==null){if(V==null)return document.createTextNode(P);e=document.createElementNS(o,V,P.is&&P),l&&(_.__m&&_.__m(t,a),l=!1),a=null}if(V==null)w===P||l&&e.data==P||(e.data=P);else{if(a=V==\"textarea\"&&P.defaultValue!=null?null:a&&$t.call(e.childNodes),!l&&a!=null)for(w={},u=0;u<e.attributes.length;u++)w[(y=e.attributes[u]).name]=y.value;for(u in w)y=w[u],u==\"dangerouslySetInnerHTML\"?c=y:u==\"children\"||u in P||u==\"value\"&&\"defaultValue\"in P||u==\"checked\"&&\"defaultChecked\"in P||Mt(e,u,null,y,o);for(u in P)y=P[u],u==\"children\"?m=y:u==\"dangerouslySetInnerHTML\"?f=y:u==\"value\"?N=y:u==\"checked\"?R=y:l&&typeof y!=\"function\"||w[u]===y||Mt(e,u,y,w[u],o);if(f)l||c&&(f.__html==c.__html||f.__html==e.innerHTML)||(e.innerHTML=f.__html),t.__k=[];else if(c&&(e.innerHTML=\"\"),to(t.type==\"template\"?e.content:e,Wt(m)?m:[m],t,r,n,V==\"foreignObject\"?\"http://www.w3.org/1999/xhtml\":o,a,d,a?a[0]:r.__k&&tt(r,0),l,s),a!=null)for(u=a.length;u--;)Gr(a[u]);l&&V!=\"textarea\"||(u=\"value\",V==\"progress\"&&N==null?e.removeAttribute(\"value\"):N!=null&&(N!==e[u]||V==\"progress\"&&!N||V==\"option\"&&N!=w[u])&&Mt(e,u,N,w[u],o),u=\"checked\",R!=null&&R!=e[u]&&Mt(e,u,R,w[u],o))}return e}function Xr(e,t,r){try{if(typeof e==\"function\"){var n=typeof e.__u==\"function\";n&&e.__u(),n&&t==null||(e.__u=e(t))}else e.current=t}catch(o){_.__e(o,r)}}function io(e,t,r){var n,o;if(_.unmount&&_.unmount(e),(n=e.ref)&&(n.current&&n.current!=e.__e||Xr(n,null,t)),(n=e.__c)!=null){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(a){_.__e(a,t)}n.base=n.__P=null}if(n=e.__k)for(o=0;o<n.length;o++)n[o]&&io(n[o],t,r||typeof e.type!=\"function\");r||Gr(e.__e),e.__c=e.__=e.__e=void 0}function Ca(e,t,r){return this.constructor(e,r)}function ao(e,t,r){var n,o,a,d;t==document&&(t=document.documentElement),_.__&&_.__(e,t),o=(n=typeof r==\"function\")?null:r&&r.__k||t.__k,a=[],d=[],Yr(t,e=(!n&&r||t).__k=_a(Q,null,[e]),o||Ut,Ut,t.namespaceURI,!n&&r?[r]:o?null:t.firstChild?$t.call(t.childNodes):null,a,!n&&r?r:o?o.__e:t.firstChild,n,d),no(a,e,d)}function lo(e){function t(r){var n,o;return this.getChildContext||(n=new Set,(o={})[t.__c]=this,this.getChildContext=function(){return o},this.componentWillUnmount=function(){n=null},this.shouldComponentUpdate=function(a){this.props.value!=a.value&&n.forEach(function(d){d.__e=!0,$r(d)})},this.sub=function(a){n.add(a);var d=a.componentWillUnmount;a.componentWillUnmount=function(){n&&n.delete(a),d&&d.call(a)}}),r.children}return t.__c=\"__cC\"+Qn++,t.__=e,t.Provider=t.__l=(t.Consumer=function(r,n){return r.children(n)}).contextType=t,t}$t=Ft.slice,_={__e:function(e,t,r,n){for(var o,a,d;t=t.__;)if((o=t.__c)&&!o.__)try{if((a=o.constructor)&&a.getDerivedStateFromError!=null&&(o.setState(a.getDerivedStateFromError(e)),d=o.__d),o.componentDidCatch!=null&&(o.componentDidCatch(e,n||{}),d=o.__d),d)return o.__E=o}catch(l){e=l}throw e}},Yn=0,Va=function(e){return e!=null&&e.constructor===void 0},Ht.prototype.setState=function(e,t){var r;r=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=be({},this.state),typeof e==\"function\"&&(e=e(be({},r),this.props)),e&&be(r,e),e!=null&&this.__v&&(t&&this._sb.push(t),$r(this))},Ht.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),$r(this))},Ht.prototype.render=Q,Ne=[],Xn=typeof Promise==\"function\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,Jn=function(e,t){return e.__v.__b-t.__v.__b},zt.__r=0,Ur=Math.random().toString(8),jt=\"__d\"+Ur,Ct=\"__a\"+Ur,Zn=/(PointerCapture)$|Capture$/i,Kr=0,Fr=Gn(!1),zr=Gn(!0),Qn=0;function so(e){if(e==null)return;let t=\"value\"in e&&typeof e.value==\"object\"?e.value:e;if(!(t==null||typeof t.color!=\"string\"))return{color:t.color,position:t.position??0}}var uo={center:\"auto\",contain:\"contain\",cover:\"cover\",stretch:\"100% 100%\"};function co(e,t){let r=t.map(o=>`<stop offset='${o.position}' stop-color='${o.color}'/>`).join(\"\");return`<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${e.kind===\"radial\"?(()=>{let o=Math.hypot(e.endX-e.startX,e.endY-e.startY);return`<radialGradient id='g' cx='${e.startX}' cy='${e.startY}' r='${o}'>${r}</radialGradient>`})():`<linearGradient id='g' x1='${e.startX}' y1='${e.startY}' x2='${e.endX}' y2='${e.endY}'>${r}</linearGradient>`}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`}function rt(e){if(!e.backgroundEnabled)return{backgroundColor:\"transparent\"};let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(so).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let o=co(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(o)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:uo[n]}}return{backgroundColor:e.backgroundColor}}function Kt(e){let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(so).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let o=co(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(o)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:uo[n]}}return e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor}}function g(e){return e===0?\"0\":`${e}px`}function $e(e){return e===\"auto\"||e===void 0?\"auto\":g(e)}function nt(e){let t={alignItems:e.alignItems,boxSizing:\"border-box\",display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:$e(e.height),justifyContent:e.justifyContent,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),position:e.position??\"relative\",width:$e(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),Object.assign(t,rt(e)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),t.borderTopLeftRadius=g(e.borderTopLeftRadius??0),t.borderTopRightRadius=g(e.borderTopRightRadius??0),t.borderBottomRightRadius=g(e.borderBottomRightRadius??0),t.borderBottomLeftRadius=g(e.borderBottomLeftRadius??0),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Gt(e,{horizontal:t,showsScrollIndicator:r}){let n=nt(e);return n.minHeight??(n.minHeight=0),n.minWidth??(n.minWidth=0),n.WebkitOverflowScrolling=\"touch\",t?(n.flexDirection=\"row\",n.overflowX=\"auto\",n.overflowY=\"hidden\"):(n.overflowX=\"hidden\",n.overflowY=\"auto\"),r||(n.scrollbarWidth=\"none\"),n}function Yt(e){return{fill:e.fillEnabled?e.fillColor:\"none\",fillRule:e.fillRule,fillOpacity:e.fillOpacity,stroke:e.strokeEnabled?e.strokeColor:\"none\",strokeWidth:e.strokeWidth,strokeOpacity:e.strokeOpacity,strokeLinecap:e.strokeLinecap,strokeLinejoin:e.strokeLinejoin,opacity:e.opacity}}function Xt(e){let t={boxSizing:\"border-box\",height:\"100vh\",overflow:\"hidden\",width:\"100vw\"};return Object.assign(t,rt(e)),t}function Jt(e){return{alignItems:e.alignItems,display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:\"100vh\",justifyContent:e.justifyContent,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),width:\"100vw\"}}function Zt(e){let t={boxSizing:\"border-box\",display:e.display===\"none\"?\"none\":\"block\",height:$e(e.height),marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,position:\"relative\",width:$e(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Qt(e){let t={color:e.color,display:e.display,fontSize:g(e.fontSize),fontWeight:e.fontWeight,letterSpacing:g(e.letterSpacing),lineHeight:e.lineHeight,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,position:e.position??\"relative\",textAlign:e.textAlign};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Jr(e){let t={stores:new Map,parents:new Map};return fo(e,null,t),t}function fo(e,t,r){r.parents.set(e.id,t),po(e,r.stores);for(let n of e.children)fo(n,e.id,r)}function er(e,t,r,n){let o=new Set,a=r;for(;a!==null&&!o.has(a);){if(o.add(a),t(a)?.has(n))return a;a=e.get(a)??null}}function Zr(e,t,r){return{get:n=>{let o=er(e,t,r,n);if(o!==void 0)return t(o)?.get(n)}}}function po(e,t){let r=e.data;if(r!==void 0&&\"localVariables\"in r&&r.localVariables.length>0){let n=new Map,o=new Map;for(let a of r.localVariables){let d=a.value;d?.id===void 0||d.value===void 0||(n.set(d.id,d.value),n.set(a.id,d.value),o.set(a.id,d.id),o.set(d.id,a.id))}n.size>0&&t.set(e.id,{store:n,aliases:o})}for(let n of e.children)po(n,t)}function ho(e){if(e)return typeof e==\"object\"&&e!==null&&\"id\"in e&&\"value\"in e&&!(\"type\"in e)?e.value:e}function tr(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.some(r=>{let n=ho(r);return n?qa(n,t):!1})}function qa(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.every(r=>{let n=ho(r);return n?Ea(n,t):!1})}function mo(e,t){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}function yo(e){switch(e.key){case\"boolean\":return e.value??!1;case\"number\":return e.value??0;case\"string\":return e.value??\"\";case\"product\":return e.value?.productId??\"\";default:return\"\"}}function Ea(e,t){if(!e?.value?.left||!e?.value?.right)return!1;let r=mo(e.value.left,t),n=mo(e.value.right,t);if(r===void 0||n===void 0)return!1;let o=yo(r),a=yo(n);switch(e.type){case\"equals\":return o===a;case\"not-equals\":return o!==a;case\"greater-than\":return o>a;case\"greater-than-or-equal\":return o>=a;case\"less-than\":return o<a;case\"less-than-or-equal\":return o<=a;default:return!1}}function Qr(e,t,r){let n={...e};for(let o of t){let a=o.value;if(!(!a?.condition||!a.overrides)&&tr(a.condition,r)){let d=a.overrides.style;if(d)for(let l of Object.keys(d))d[l]!==void 0&&(n[l]=d[l])}}return n}function en(e,t,r){let n;for(let o of t){let a=o.value;if(!(!a?.condition||!a.overrides)&&tr(a.condition,r)){let d=\"actions\"in a.overrides?a.overrides.actions:void 0;if(d)for(let l of d){let s=\"value\"in l?l.value:l;s&&s.interactionId===e&&(n=s.action)}}}return n}function Da(e,t){if(e?.type){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}}function La(e,t){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(!e.variableId)return;let r=t.get(e.variableId);if(r?.key===\"product\")return r.value?.productId}function tn(e,t,r){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let n=e.payload;if(!n?.newValue||!n.variableId)break;let o=Da(n.newValue,t);o!==void 0&&r.onSetVariable(n.variableId,o);break}case\"close-paywall\":r.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let n=La(e.payload,t);n!==void 0&&r.onPurchaseProduct(n);break}}}function Oa(e,t){switch(t.key){case\"string\":return typeof e==\"string\"?{key:\"string\",value:e}:void 0;case\"number\":return typeof e==\"number\"?{key:\"number\",value:e}:void 0;case\"boolean\":return typeof e==\"boolean\"?{key:\"boolean\",value:e}:void 0;case\"product\":return typeof e==\"string\"||typeof e==\"number\"||typeof e==\"boolean\"?{key:\"product\",value:{productId:String(e)}}:void 0;default:return}}function Ma(e,t,r,n){if(!e?.type)return;if(e.type===\"literal\")return e.value;if(e.type===\"variable-reference\")return!e.value||!(\"id\"in e.value)||!e.value.id?void 0:r.get(e.value.id);if(!e.value||!(\"field\"in e.value)||!e.value.field)return;let o=t?.[e.value.field];if(o===void 0)return;let a=r.get(n);if(a!==void 0)return Oa(o,a)}function ja(e,t,r){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(e.type===\"variable-reference\"){if(!e.variableId)return;let o=r.get(e.variableId);return o?.key===\"product\"?o.value?.productId:void 0}if(!e.field)return;let n=t?.[e.field];return typeof n==\"string\"?n:void 0}function rn(e,t,r,n){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let o=e.payload;if(!o?.newValue||!o.variableId)break;let a=Ma(o.newValue,t,r,o.variableId);a!==void 0&&n.onSetVariable(o.variableId,a);break}case\"close-paywall\":n.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let o=ja(e.payload,t,r);o!==void 0&&n.onPurchaseProduct(o);break}}}var nn={alignItems:\"stretch\",boxSizing:\"border-box\",display:\"flex\",flexBasis:\"auto\",flexDirection:\"column\",flexShrink:0,margin:0,minHeight:0,minWidth:0,padding:0,position:\"relative\"},Ba={boxSizing:\"border-box\",display:\"block\",margin:0,padding:0,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"},Ha={boxSizing:\"border-box\",display:\"block\"},Ua={...nn,cursor:\"pointer\",touchAction:\"manipulation\",userSelect:\"none\"},Fa={...nn,overflowX:\"hidden\",overflowY:\"auto\",WebkitOverflowScrolling:\"touch\"},za={image:Ha,pressable:Ua,scroll:Fa,text:Ba,view:nn},bo=[\"flex\",\"gap\"],$a=[\"backgroundType\",\"backgroundGradient\",\"backgroundImage\"],Wa=new Set([...bo,...$a]),Ka=new Set([\"aspectRatio\",\"flex\",\"flexGrow\",\"flexShrink\",\"fontWeight\",\"opacity\",\"zIndex\"]);function go(e,t){return typeof t==\"number\"&&!Ka.has(e)?t===0?0:`${t}px`:t}var Ga={center:\"none\",contain:\"contain\",cover:\"cover\",stretch:\"fill\"};function rr(e){return Ga[e??\"cover\"]}function on(e){if(!e)return{};let t=[];return(e.x!==void 0||e.y!==void 0)&&t.push(`translate3d(${e.x??0}px, ${e.y??0}px, 0)`),e.rotate!==void 0&&t.push(`rotate(${e.rotate}deg)`),e.scale!==void 0&&t.push(`scale(${e.scale})`),e.scaleX!==void 0&&t.push(`scaleX(${e.scaleX})`),e.scaleY!==void 0&&t.push(`scaleY(${e.scaleY})`),{...e.opacity===void 0?{}:{opacity:e.opacity},...e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor},...t.length===0?{}:{transform:t.join(\" \")},...e.transformOrigin===void 0?{}:{transformOrigin:`${e.transformOrigin.x*100}% ${e.transformOrigin.y*100}%`}}}function nr(e,t,r){let n={...za[t]},o=(d,l)=>{delete n[d],n[d]=go(d,l)};for(let d of bo){let l=e[d];l!==void 0&&(n[d]=go(d,l))}for(let[d,l]of Object.entries(e))l===void 0||Wa.has(d)||typeof l!=\"string\"&&typeof l!=\"number\"||o(d,l);return(e.borderTopWidth!==void 0||e.borderRightWidth!==void 0||e.borderBottomWidth!==void 0||e.borderLeftWidth!==void 0||e.borderColor!==void 0)&&e.borderStyle===void 0&&(n.borderStyle=\"solid\"),(e.backgroundType===\"gradient\"||e.backgroundType===\"image\")&&(delete n.backgroundColor,Object.assign(n,Kt({backgroundColor:typeof e.backgroundColor==\"string\"?e.backgroundColor:void 0,backgroundType:e.backgroundType,backgroundGradient:e.backgroundGradient,backgroundImage:e.backgroundImage}))),Object.assign(n,on(r)),n}var qt,A,an,vo,ir=0,_o=[],C=_,So=C.__b,To=C.__r,xo=C.diffed,wo=C.__c,Po=C.unmount,Vo=C.__;function ln(e,t){C.__h&&C.__h(A,e,ir||t),ir=0;var r=A.__H||(A.__H={__:[],__h:[]});return e>=r.__.length&&r.__.push({}),r.__[e]}function ko(e){return ir=1,Ya(Ao,e)}function Ya(e,t,r){var n=ln(qt++,2);if(n.t=e,!n.__c&&(n.__=[r?r(t):Ao(void 0,t),function(l){var s=n.__N?n.__N[0]:n.__[0],u=n.t(s,l);s!==u&&(n.__N=[u,n.__[1]],n.__c.setState({}))}],n.__c=A,!A.__f)){var o=function(l,s,u){if(!n.__c.__H)return!0;var f=n.__c.__H.__.filter(function(m){return m.__c});if(f.every(function(m){return!m.__N}))return!a||a.call(this,l,s,u);var c=n.__c.props!==l;return f.some(function(m){if(m.__N){var y=m.__[0];m.__=m.__N,m.__N=void 0,y!==m.__[0]&&(c=!0)}}),a&&a.call(this,l,s,u)||c};A.__f=!0;var a=A.shouldComponentUpdate,d=A.componentWillUpdate;A.componentWillUpdate=function(l,s,u){if(this.__e){var f=a;a=void 0,o(l,s,u),a=f}d&&d.call(this,l,s,u)},A.shouldComponentUpdate=o}return n.__N||n.__}function j(e,t){var r=ln(qt++,7);return Za(r.__H,t)&&(r.__=e(),r.__H=t,r.__h=e),r.__}function ee(e,t){return ir=8,j(function(){return e},t)}function Io(e){var t=A.context[e.__c],r=ln(qt++,9);return r.c=e,t?(r.__==null&&(r.__=!0,t.sub(A)),t.props.value):e.__}function Xa(){for(var e;e=_o.shift();){var t=e.__H;if(e.__P&&t)try{t.__h.some(or),t.__h.some(dn),t.__h=[]}catch(r){t.__h=[],C.__e(r,e.__v)}}}C.__b=function(e){A=null,So&&So(e)},C.__=function(e,t){e&&t.__k&&t.__k.__m&&(e.__m=t.__k.__m),Vo&&Vo(e,t)},C.__r=function(e){To&&To(e),qt=0;var t=(A=e.__c).__H;t&&(an===A?(t.__h=[],A.__h=[],t.__.some(function(r){r.__N&&(r.__=r.__N),r.u=r.__N=void 0})):(t.__h.some(or),t.__h.some(dn),t.__h=[],qt=0)),an=A},C.diffed=function(e){xo&&xo(e);var t=e.__c;t&&t.__H&&(t.__H.__h.length&&(_o.push(t)!==1&&vo===C.requestAnimationFrame||((vo=C.requestAnimationFrame)||Ja)(Xa)),t.__H.__.some(function(r){r.u&&(r.__H=r.u),r.u=void 0})),an=A=null},C.__c=function(e,t){t.some(function(r){try{r.__h.some(or),r.__h=r.__h.filter(function(n){return!n.__||dn(n)})}catch(n){t.some(function(o){o.__h&&(o.__h=[])}),t=[],C.__e(n,r.__v)}}),wo&&wo(e,t)},C.unmount=function(e){Po&&Po(e);var t,r=e.__c;r&&r.__H&&(r.__H.__.some(function(n){try{or(n)}catch(o){t=o}}),r.__H=void 0,t&&C.__e(t,r.__v))};var No=typeof requestAnimationFrame==\"function\";function Ja(e){var t,r=function(){clearTimeout(n),No&&cancelAnimationFrame(t),setTimeout(e)},n=setTimeout(r,35);No&&(t=requestAnimationFrame(r))}function or(e){var t=A,r=e.__c;typeof r==\"function\"&&(e.__c=void 0,r()),A=t}function dn(e){var t=A;e.__c=e.__(),A=t}function Za(e,t){return!e||e.length!==t.length||t.some(function(r,n){return r!==e[n]})}function Ao(e,t){return typeof t==\"function\"?t(e):t}var Qa=0;function b(e,t,r,n,o,a){t||(t={});var d,l,s=t;if(\"ref\"in s)for(l in s={},t)l==\"ref\"?d=t[l]:s[l]=t[l];var u={type:e,props:s,key:r,ref:d,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:--Qa,__i:-1,__u:0,__source:o,__self:a};if(typeof e==\"function\"&&(d=e.defaultProps))for(l in d)s[l]===void 0&&(s[l]=d[l]);return _.vnode&&_.vnode(u),u}var ed=new Map,Co=lo(null);function Ro(e){let t=JSON.stringify(e);window.ReactNativeWebView?window.ReactNativeWebView.postMessage(t):window.parent.postMessage(e,\"*\")}function qo({snapshot:e,componentArtifacts:t,locale:r,children:n}){let o=j(()=>Jr(e),[e]),a=(e.type===\"root\"?e.data.localization?.defaultLocale:void 0)??\"en\",[d,l]=ko(()=>{let w=new Map;for(let[P,{store:V}]of o.stores)w.set(P,V);return w}),s=j(()=>new Map,[o,d]),u=ee(w=>{let P=s.get(w);if(P)return P;let V=Zr(o.parents,L=>d.get(L),w);return s.set(w,V),V},[s,d,o]),f=ee((w,P,V)=>{l(L=>{let z=er(o.parents,Ve=>L.get(Ve),w,P);if(z===void 0)return L;let Pe=L.get(z);if(!Pe)return L;let Qe=new Map(Pe);Qe.set(P,V);let et=o.stores.get(z)?.aliases?.get(P);et&&Qe.set(et,V);let M=new Map(L);return M.set(z,Qe),M})},[o]),c=ee(()=>{Ro({type:\"paywall:close\"})},[]),m=ee(w=>{Ro({type:\"paywall:purchase\",productId:w})},[]),y=ee((w,P)=>{console.warn(`onSetVariable called directly for \"${w}\" without node context. Use the scoped callback from useInteractions instead.`)},[]),N=j(()=>({onClosePaywall:c,onPurchaseProduct:m,onSetVariable:y}),[c,m,y]),R=j(()=>({getNodeVariables:u,setNodeVariable:f,callbacks:N,componentArtifacts:t,locale:r,defaultLocale:a}),[u,f,N,t,r,a]);return b(Co.Provider,{value:R,children:n})}function te(){let e=Io(Co);return e||{getNodeVariables:()=>ed,setNodeVariable:()=>{},callbacks:{onClosePaywall:()=>{},onPurchaseProduct:()=>{},onSetVariable:()=>{}},componentArtifacts:void 0,locale:void 0,defaultLocale:\"en\"}}var td={alignSelf:\"flex-start\",backgroundColor:\"#18181b\",borderRadius:\"999px\",boxSizing:\"border-box\",color:\"#fafafa\",display:\"inline-flex\",fontFamily:\"inherit\",fontSize:\"11px\",fontWeight:600,lineHeight:\"16px\",padding:\"2px 8px\"};function Eo({props:e}){let t=typeof e.label==\"string\"?e.label:\"New\";return b(\"span\",{style:td,children:t})}var Do={\"sample-badge\":Eo};function Lo(e,t){let r={};for(let n of e){let o=n.value;if(!o?.name)continue;let a=o.value;if(a?.type){if(a.type===\"literal\"){a.value&&(r[o.name]=a.value.value);continue}if(a.type===\"variable-reference\"){if(!a.value||!(\"id\"in a.value)||!a.value.id)continue;let d=t.get(a.value.id);d!==void 0&&(r[o.name]=d.value)}}}return r}var sn={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontFamily:\"inherit\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",position:\"relative\",textAlign:\"center\"};function ar(e,t,r){return{...nr(e,t,r)}}function rd(e,t){if(!e)return;for(let n of[t,\"default\"]){let o=e[n];if(o)return o}let r=Object.keys(e)[0];return r===void 0?void 0:e[r]}function un({node:e,slot:t,fireAction:r}){switch(e.type){case\"view\":case\"scroll\":return b(\"div\",{style:ar(e.style,e.type,e.motion),children:e.children.map((n,o)=>b(un,{fireAction:r,node:n,slot:t},o))});case\"pressable\":{let n=e.action;return b(\"div\",{onClick:n===void 0?void 0:()=>r(n),style:ar(e.style,\"pressable\",e.motion),children:e.children.map((a,d)=>b(un,{fireAction:r,node:a,slot:t},d))})}case\"text\":return b(\"div\",{style:ar(e.style,\"text\",e.motion),children:e.text});case\"image\":return b(\"img\",{alt:\"\",src:e.src,style:{...ar(e.style,\"image\",e.motion),objectFit:rr(e.resizeMode)??\"cover\"}});case\"slot\":return b(Q,{children:t});case\"placeholder\":return b(\"div\",{style:sn,children:e.reason});default:return null}}function Oo({node:e,children:t}){let{getNodeVariables:r,setNodeVariable:n,callbacks:o,componentArtifacts:a}=te(),d=r(e.id),l=j(()=>({...o,onSetVariable:(m,y)=>{n(e.id,m,y)}}),[o,e.id,n]),s=ee((m,y)=>{let R=e.data.actionBindings.find(w=>w.value?.name===m)?.value?.action;R&&rn(R,y,d,l)},[e.data.actionBindings,d,l]);if(e.data.componentSource===\"builtin\"){let m=Do[e.data.componentSlug];if(!m)return b(\"div\",{\"data-node-id\":e.id,style:sn,children:`Component \"${e.data.componentSlug}\" preview unavailable`});let y=Lo(e.data.props,d);return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(m,{fireAction:s,props:y,children:t})})}let u=e.data.componentSource===\"local\"&&e.data.componentPath!==\"\",f=u?a?.localTrees?.[e.data.componentPath]:a?.trees[e.data.contentHash],c=rd(f,e.data.previewState);if(!c){let m=u?e.data.componentPath:e.data.componentSlug;return b(\"div\",{\"data-node-id\":e.id,style:sn,children:`Component \"${m}\" preview unavailable`})}return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(un,{fireAction:s,node:c.root,slot:t})})}function $(e,t,r){let{getNodeVariables:n}=te(),o=n(e);return j(()=>Qr(t,r,o),[t,r,o])}function Mo({node:e}){let t=$(e.id,e.data.style,e.data.states),r=Yt(t);return b(\"path\",{d:e.data.d,fill:r.fill,fillOpacity:r.fillOpacity,fillRule:r.fillRule,opacity:r.opacity,stroke:r.stroke,strokeLinecap:r.strokeLinecap,strokeLinejoin:r.strokeLinejoin,strokeOpacity:r.strokeOpacity,strokeWidth:r.strokeWidth,transform:e.data.transform,vectorEffect:\"non-scaling-stroke\"})}var v={InvalidCommand:\"invalid_command\",InvalidPath:\"invalid_path\",TypeMismatch:\"type_mismatch\",MissingField:\"missing_field\",MissingArrayItem:\"missing_array_item\",MissingTreeNode:\"missing_tree_node\",DuplicateArrayItemId:\"duplicate_array_item_id\",DuplicateArrayPos:\"duplicate_array_pos\",DuplicateTreeNodeId:\"duplicate_tree_node_id\",DuplicateTreePos:\"duplicate_tree_pos\",InvalidTreeParent:\"invalid_tree_parent\",TreeCycle:\"tree_cycle\",TreeNodeValueMustBeObject:\"tree_node_value_must_be_object\",ReservedIdentifier:\"reserved_identifier\"},cn=class extends Error{constructor(r,n=\"\"){super(n?`${r}: ${n}`:r);p(this,\"code\");this.name=\"CoreError\",this.code=r}},S=(e,t)=>new cn(e,t);var I=\"$root\";var re=e=>({kind:\"string\",value:e}),ot=e=>({kind:\"number\",value:e}),it=e=>({kind:\"boolean\",value:e}),ne=(e={})=>({kind:\"object\",fields:e}),fn=(e=[])=>({kind:\"array\",items:e}),pn=(e=[])=>({kind:\"tree\",nodes:e}),jo=e=>e?[...e]:[],k=e=>{switch(e.kind){case\"string\":case\"number\":case\"boolean\":return{...e};case\"object\":{let t={};for(let[r,n]of Object.entries(e.fields))t[r]=k(n);return{kind:\"object\",fields:t}}case\"array\":return{kind:\"array\",items:e.items.map(t=>({id:t.id,pos:t.pos,value:k(t.value)}))};case\"tree\":return{kind:\"tree\",nodes:e.nodes.map(t=>({id:t.id,parent:t.parent,pos:t.pos,value:k(t.value)}))}}};var dr=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,Bo=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,mn=(e,t)=>e.parent<t.parent?-1:e.parent>t.parent?1:Bo(e,t);var J=e=>{switch(e.kind){case\"string\":case\"boolean\":return;case\"number\":if(Number.isNaN(e.value)||!Number.isFinite(e.value))throw S(v.InvalidCommand,\"number must be finite\");return;case\"object\":for(let t of Object.values(e.fields))J(t);return;case\"array\":{let t=new Set,r=new Set;for(let n of e.items){if(t.has(n.id))throw S(v.DuplicateArrayItemId,\"duplicate array item id\");if(r.has(n.pos))throw S(v.DuplicateArrayPos,\"duplicate array position\");t.add(n.id),r.add(n.pos),J(n.value)}return}case\"tree\":{let t=new Set,r=new Map,n=new Map;for(let s of e.nodes){if(s.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(s.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(t.has(s.id))throw S(v.DuplicateTreeNodeId,\"duplicate tree node id\");t.add(s.id),r.set(s.id,s);let u=n.get(s.parent)??new Set;if(u.has(s.pos))throw S(v.DuplicateTreePos,\"duplicate tree position\");u.add(s.pos),n.set(s.parent,u),J(s.value)}for(let s of e.nodes)if(s.parent!==I&&!r.has(s.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");let o=new Set,a=new Set,d=s=>{if(o.has(s))throw S(v.TreeCycle,\"tree contains cycle\");if(a.has(s))return;o.add(s);let u=r.get(s);u&&u.parent!==I&&d(u.parent),o.delete(s),a.add(s)},l=[...r.keys()].sort();for(let s of l)d(s);return}}};var Uo=(e,t)=>{J(e);let r=k(e);for(let n of t)nd(r,{...n,path:jo(n.path)});return J(r),r},nd=(e,t)=>{switch(t.kind){case\"value.set\":od(e,t.path,t.value);return;case\"object.set\":id(e,t.path,t.key,t.value);return;case\"object.delete\":ad(e,t.path,t.key);return;case\"array.insert\":dd(e,t.path,t.item);return;case\"array.move\":ld(e,t.path,t.id,t.pos);return;case\"array.delete\":sd(e,t.path,t.id);return;case\"tree.insert\":ud(e,t.path,t.node);return;case\"tree.move\":cd(e,t.path,t.id,t.parent,t.pos);return;case\"tree.delete\":fd(e,t.path,t.id);return}},od=(e,t,r)=>{if(t.length===0){Ho(e,k(r));return}W(e,t,n=>{Ho(n,k(r))})},id=(e,t,r,n)=>{if(!r)throw S(v.InvalidCommand,\"object.set requires key and value\");W(e,t,o=>{if(o.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");o.fields[r]=k(n)})},ad=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"object.delete requires key\");W(e,t,n=>{if(n.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");if(!Object.hasOwn(n.fields,r))throw S(v.MissingField,\"object field does not exist\");delete n.fields[r]})},dd=(e,t,r)=>{W(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");for(let o of n.items){if(o.id===r.id)throw S(v.DuplicateArrayItemId,\"array item id already exists\");if(o.pos===r.pos)throw S(v.DuplicateArrayPos,\"array item position already exists\")}n.items.push({id:r.id,pos:r.pos,value:k(r.value)}),n.items.sort(dr)})},ld=(e,t,r,n)=>{if(!r||!n)throw S(v.InvalidCommand,\"array.move requires id and pos\");W(e,t,o=>{if(o.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let a=-1;for(let d=0;d<o.items.length;d+=1){let l=o.items[d];if(l?.id===r){a=d;continue}if(l?.pos===n)throw S(v.DuplicateArrayPos,\"array item position already exists\")}if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");o.items[a]={...o.items[a],pos:n},o.items.sort(dr)})},sd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"array.delete requires id\");W(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let o=Fo(n.items,r);if(o===-1)throw S(v.MissingArrayItem,\"array item does not exist\");n.items.splice(o,1)})},ud=(e,t,r)=>{W(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(r.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(r.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(Et(n.nodes,r.id)!==-1)throw S(v.DuplicateTreeNodeId,\"tree node id already exists\");if(!zo(n.nodes,r.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if($o(n.nodes,r.parent,r.pos,\"\"))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");n.nodes.push({id:r.id,parent:r.parent,pos:r.pos,value:k(r.value)}),n.nodes.sort(mn)})},cd=(e,t,r,n,o)=>{if(!r||!n||!o)throw S(v.InvalidCommand,\"tree.move requires id, parent, and pos\");W(e,t,a=>{if(a.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");let d=Et(a.nodes,r);if(d===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");if(!zo(a.nodes,n))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(n===r||pd(a.nodes,n,r))throw S(v.TreeCycle,\"tree move would create cycle\");if($o(a.nodes,n,o,r))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");a.nodes[d]={...a.nodes[d],parent:n,pos:o},a.nodes.sort(mn)})},fd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"tree.delete requires id\");W(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(Et(n.nodes,r)===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");let o=new Set([r]),a=!0;for(;a;){a=!1;for(let l of n.nodes)o.has(l.parent)&&!o.has(l.id)&&(o.add(l.id),a=!0)}let d=n.nodes.filter(l=>!o.has(l.id));n.nodes.splice(0,n.nodes.length,...d)})},W=(e,t,r)=>{if(t.length===0){r(e);return}let n=t[0],o=t.slice(1);switch(n.kind){case\"field\":if(e.kind!==\"object\")throw S(v.TypeMismatch,\"field path requires object\");if(!Object.hasOwn(e.fields,n.key))throw S(v.MissingField,\"field does not exist\");W(e.fields[n.key],o,r);return;case\"item\":if(e.kind!==\"array\")throw S(v.TypeMismatch,\"item path requires array\");{let a=Fo(e.items,n.id);if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");W(e.items[a].value,o,r)}return;case\"node\":if(e.kind!==\"tree\")throw S(v.TypeMismatch,\"node path requires tree\");{let a=Et(e.nodes,n.id);if(a===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");W(e.nodes[a].value,o,r)}return}},Ho=(e,t)=>{for(let r of Object.keys(e))delete e[r];Object.assign(e,t)},Fo=(e,t)=>e.findIndex(r=>r.id===t),Et=(e,t)=>e.findIndex(r=>r.id===t),zo=(e,t)=>t===I||Et(e,t)!==-1,$o=(e,t,r,n)=>e.some(o=>o.parent===t&&o.id!==n&&o.pos===r),pd=(e,t,r)=>{if(t===I)return!1;let n=new Map(e.map(a=>[a.id,a])),o=t;for(;;){let a=n.get(o);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;o=a.parent}};var yn=class{next(){let t=globalThis.crypto;if(t?.getRandomValues){let r=new Uint32Array(2);t.getRandomValues(r);let n=r[0]>>>5,o=r[1]>>>6;return(n*67108864+o)/9007199254740992}return Math.random()}},hn=class{constructor(t){p(this,\"charset\");p(this,\"random\");p(this,\"useJitter\");this.charset=t?.charset??Go(),this.random=t?.random,this.useJitter=t?.useJitter??!0}between(t,r){return this.useJitter?gd(t,r,this.charset,this.random??new yn):Yo(t,r,this.charset)}},md=e=>{if(e.chars.length<7)throw new Error(\"charSet must be at least 7 characters long\");if([...e.chars].sort().join(\"\")!==e.chars)throw new Error(\"charSet must be sorted\");let r={},n={};for(let s=0;s<e.chars.length;s+=1){let u=e.chars[s];r[u]=s,n[s]=u}let o=r[e.firstPositive],a=r[e.mostPositive],d=r[e.mostNegative];if(o===void 0)throw new Error(\"invalid firstPositive\");if(a===void 0)throw new Error(\"invalid mostPositive\");if(d===void 0)throw new Error(\"invalid mostNegative\");if(a-o<3)throw new Error(\"mostPositive must be at least 3 characters away from neutral\");if(o-d<3)throw new Error(\"mostNegative must be at least 3 characters away from neutral\");let l=e.jitterRange??Math.floor(Tn(e.chars.length,3)/5);return{chars:e.chars,byChar:r,byCode:n,length:e.chars.length,first:n[0],last:n[e.chars.length-1],firstPositive:e.firstPositive,mostPositive:e.mostPositive,firstNegative:n[o-1],mostNegative:e.mostNegative,jitterRange:l,paddingDict:Vd(l,e.chars.length)}},yd=md({chars:\"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\",firstPositive:\"a\",mostPositive:\"z\",mostNegative:\"A\"}),Go=()=>yd;var We=()=>new hn({charset:Go()});var hd=e=>`${e.firstPositive}${e.byCode[0]}`,Wo=(e,t)=>{lr(e,t)},Yo=(e,t,r)=>{if(e!==void 0&&Wo(e,r),t!==void 0&&Wo(t,r),e===void 0&&t===void 0)return hd(r);if(e===void 0)return bd(lr(t,r),r);if(t===void 0)return Xo(lr(e,r),r);if(e>=t)throw new Error(`${e} >= ${t}`);return vd(e,t,r)};var gd=(e,t,r,n)=>{let o=Yo(e,t,r),a=Td(o,t,r);return a>0?Sd(o,a,r,n):Jo(o,r,n)};var lr=(e,t)=>{let r=Zo(e,t),n=vn(r,t);if(n>e.length)throw new Error(`invalid order key length: ${e}`);return e.slice(0,n)},Xo=(e,t)=>{Qo(e,t);let[r,n]=ei(e,t),o=t.byCode[t.length-1];return[...n].some(a=>a!==o)?`${r}${oi(n,t)}`:ti(xd(r,t),\"lower\",t)},bd=(e,t)=>{Qo(e,t);let[r,n]=ei(e,t),o=t.byCode[0];return[...n].some(a=>a!==o)?`${r}${gn(n,t,!1)}`:ti(wd(r,t),\"upper\",t)},vd=(e,t,r)=>{let[n,o]=ur(e,t,\"end\",r.first),a=bn(n,o,r);a===1&&(n=`${n}${r.first}`,a=r.length);let d=ri(Math.floor(a/2),r);return Sn(n,d,r)},Jo=(e,t,r)=>{let n=r.next();if(n<0||n>=1)throw new Error(`random value out of range: ${n}`);return Sn(e,ri(Math.floor(n*t.jitterRange),t),t)},Sd=(e,t,r,n)=>Jo(`${e}${r.first.repeat(t)}`,r,n),Ko=(e,t)=>{let r=t.jitterRange-e;for(let[n,o]of Object.entries(t.paddingDict))if(o>r)return Number(n);return 0},Td=(e,t,r)=>{let n=lr(e,r),o=Xo(n,r),a=0;if(t!==void 0){let l=bn(e,t,r);l<r.jitterRange+1&&(a=Math.max(a,Ko(l,r)))}let d=bn(e,o,r);return d<r.jitterRange+1&&(a=Math.max(a,Ko(d,r))),a},Zo=(e,t)=>{if(e.length===0)return\"\";let r=0;if(e[0]===t.mostPositive)for(;r<e.length&&e[r]===t.mostPositive;)r+=1;if(e[0]===t.mostNegative)for(;r<e.length&&e[r]===t.mostNegative;)r+=1;return r>=e.length?e:e.slice(0,r+1)},sr=(e,t,r)=>{if(e.length===0)return 0;let n=e[0];if(n>r.mostPositive||n<r.mostNegative)throw new Error(\"invalid firstChar on key\");return n===r.mostPositive&&t===\"positive\"?_e(n,r.mostNegative,r)+1+sr(e.slice(1),t,r):n===r.mostNegative&&t===\"negative\"?_e(n,r.mostPositive,r)+1+sr(e.slice(1),t,r):t===\"positive\"?_e(n,r.mostNegative,r)+2:_e(n,r.mostPositive,r)+2},vn=(e,t)=>{if(e.length===0)throw new Error(\"head cannot be empty\");let r=e[0];if(r>t.mostPositive||r<t.mostNegative)throw new Error(\"invalid firstChar on key\");return r===t.mostPositive?_e(r,t.firstPositive,t)+1+sr(e.slice(1),\"positive\",t):r===t.mostNegative?_e(r,t.firstNegative,t)+1+sr(e.slice(1),\"negative\",t):r>=t.firstPositive?_e(r,t.firstPositive,t)+2:_e(r,t.firstNegative,t)+2},Qo=(e,t)=>{if(vn(e,t)!==e.length)throw new Error(`invalid integer length: ${e}`)},ei=(e,t)=>{let r=Zo(e,t);return[r,e.slice(r.length)]},xd=(e,t)=>{let r=e>=t.firstPositive,n=oi(e,t),o=e.at(-1)===t.mostPositive,a=n.at(-1)===t.mostPositive;return r&&a?`${n}${t.mostNegative}`:!r&&o?e.slice(0,-1):n},wd=(e,t)=>{let r=e>=t.firstPositive,n=e.at(-1)===t.mostNegative;return r&&n?gn(e.slice(0,-1),t,!1):!r&&n?`${e}${t.mostPositive}`:gn(e,t,!1)},ti=(e,t,r)=>{let n=vn(e,r),o=t===\"upper\"?r.last:r.first;return`${e}${o.repeat(n-e.length)}`},_e=(e,t,r)=>{let n=r.byChar[e],o=r.byChar[t];if(n===void 0||o===void 0)throw new Error(\"invalid character in distance calculation\");return Math.abs(n-o)},ur=(e,t,r,n)=>{let o=Math.max(e.length,t.length);return r===\"start\"?[n.repeat(o-e.length)+e,n.repeat(o-t.length)+t]:[e+n.repeat(o-e.length),t+n.repeat(o-t.length)]},ri=(e,t)=>{if(e===0)return t.byCode[0];let r=\"\",n=e;for(;n>0;)r=`${t.byCode[n%t.length]}${r}`,n=Math.floor(n/t.length);return r},Pd=(e,t)=>{let r=0;for(let n=0;n<e.length;n+=1){let o=e.length-n-1;r+=t.byChar[e[n]]*Tn(t.length,o)}return r},Sn=(e,t,r)=>{let[n,o]=ur(e,t,\"start\",r.first),a=[],d=0;for(let l=n.length-1;l>=0;l-=1){let s=r.byChar[n[l]]+r.byChar[o[l]]+d;d=Math.floor(s/r.length),a.push(r.byCode[s%r.length])}return d>0&&a.push(r.byCode[d]),a.reverse().join(\"\")},ni=(e,t,r,n)=>{let[o,a]=ur(e,t,\"start\",r.first),d=[],l=0;for(let u=o.length-1;u>=0;u-=1){let f=r.byChar[o[u]],c=r.byChar[a[u]]+l;f<c?(l=1,f+=r.length):l=0,d.push(r.byCode[f-c])}if(l>0)throw new Error(\"subtraction result is negative\");let s=d.reverse().join(\"\");return n?s.replace(new RegExp(`^${r.first}+`),\"\")||r.first:s},oi=(e,t)=>Sn(e,t.byCode[1],t),gn=(e,t,r)=>ni(e,t.byCode[1],t,r),bn=(e,t,r)=>{let[n,o]=ur(e,t,\"end\",r.first),[a,d]=n>o?[o,n]:[n,o];return Pd(ni(d,a,r,!0),r)};function Vd(e,t){let r={};for(let n=0;n<100;n+=1){let o=Tn(t,n);if(r[n]=o,o>e)break}return r}function Tn(e,t){let r=1;for(let n=0;n<t;n+=1)r*=e;return r}var T={InvalidSchema:\"invalid_schema\",MissingRequired:\"missing_required\",TypeMismatch:\"type_mismatch\",LiteralMismatch:\"literal_mismatch\",ValidatorFailed:\"validator_failed\",UnionNoMatch:\"union_no_match\",EitherNoMatch:\"either_no_match\",TreeInvalidRootType:\"tree_invalid_root_type\",TreeInvalidChildType:\"tree_invalid_child_type\",TreeUnknownVariant:\"tree_unknown_variant\"},cr=class extends Error{constructor(r,n=\"\",o){super(n?`${r}: ${n}`:r);p(this,\"code\");p(this,\"valuePath\");p(this,\"schemaPath\");this.name=\"SchemaError\",this.code=r,this.valuePath=o?.valuePath??[],this.schemaPath=o?.schemaPath??[]}},x=(e,t,r)=>new cr(e,t,r),ii=e=>e instanceof cr;var B=(e,t)=>x(T.InvalidSchema,t,{valuePath:[],schemaPath:e}),Z=(e,t,r)=>{if(typeof e!=\"object\"||e===null||Array.isArray(e))throw B(t,r);return e},ve=(e,t,r)=>{if(typeof e!=\"string\")throw B(t,r);return e},xn=(e,t)=>{if(typeof e!=\"number\"||Number.isNaN(e)||!Number.isFinite(e))throw B(t,\"validator value must be a finite number\");return e};var _d=(e,t)=>{if(e!==void 0){if(typeof e!=\"string\")throw B(t,\"value must be a string\");return e}},ai=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw B(t,\"string validators must be an array\");return e.map((r,n)=>kd(r,[...t,n]))}},di=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw B(t,\"number validators must be an array\");return e.map((r,n)=>Id(r,[...t,n]))}},li=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw B(t,\"array validators must be an array\");return e.map((r,n)=>Ad(r,[...t,n]))}},kd=(e,t)=>{let r=Z(e,t,\"string validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":case\"length\":return{kind:n,value:xn(r.value,[...t,\"value\"])};case\"regex\":return{kind:n,pattern:ve(r.pattern,[...t,\"pattern\"],\"regex pattern must be a string\"),flags:_d(r.flags,[...t,\"flags\"])};case\"email\":case\"url\":return{kind:n};default:throw B(t,`unknown string validator ${n}`)}},Id=(e,t)=>{let r=Z(e,t,\"number validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"min\":case\"max\":return{kind:n,value:xn(r.value,[...t,\"value\"])};case\"positive\":case\"negative\":case\"int\":return{kind:n};default:throw B(t,`unknown number validator ${n}`)}},Ad=(e,t)=>{let r=Z(e,t,\"array validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":return{kind:n,value:xn(r.value,[...t,\"value\"])};default:throw B(t,`unknown array validator ${n}`)}};var Dt=(e,t,r,n,o)=>{if(r.kind!==t)throw x(T.TypeMismatch,`expected ${e}, got ${r.kind}`,{valuePath:n,schemaPath:o})},fr=(e,t,r,n)=>(Dt(e,\"string\",t,r,n),t),pr=(e,t,r,n)=>(Dt(e,\"number\",t,r,n),t),mr=(e,t,r,n)=>(Dt(e,\"boolean\",t,r,n),t),yr=(e,t,r,n)=>(Dt(e,\"object\",t,r,n),t),si=(e,t,r,n)=>(Dt(e,\"array\",t,r,n),t);var O=(e,t,r)=>x(T.ValidatorFailed,e,{valuePath:t,schemaPath:r}),q=e=>e===void 0?e:k(e),E=e=>e?{required:!0}:{};var ui={kind:\"array\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,element:r.parseSchema(e.element,[...n,\"element\"]),validators:li(e.validators,[...n,\"validators\"])},e.default,n),serialize:(e,t)=>({kind:\"array\",element:t(e.element),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(r=>({...r}))}:{}}),validate:(e,t,r,n,o)=>{let d=si(e.kind,t,n,o).items.map(l=>{let s=r.validate(e.element,l.value,[...n,{kind:\"item\",id:l.id}],[...o,\"element\"]);if(s===void 0)throw x(T.TypeMismatch,\"array item cannot sanitize to undefined\",{valuePath:[...n,{kind:\"item\",id:l.id}],schemaPath:o});return{id:l.id,pos:l.pos,value:s}});for(let l of e.validators??[])switch(l.kind){case\"minLength\":if(d.length<l.value)throw O(\"array shorter than minLength\",n,o);break;case\"maxLength\":if(d.length>l.value)throw O(\"array longer than maxLength\",n,o);break}return{kind:\"array\",items:d}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var ci={kind:\"boolean\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required},e.default,n),serialize:e=>({kind:\"boolean\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,o)=>k(mr(\"boolean\",t,n,o)),materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var fi={kind:\"either\",parse:(e,t,r,n)=>{if(!Array.isArray(e.variants))throw x(T.InvalidSchema,\"either variants must be an array\",{schemaPath:[...n,\"variants\"]});return r.normalizeDefault({kind:t.kind,required:t.required,variants:e.variants.map((o,a)=>r.parseSchema(o,[...n,\"variants\",a]))},e.default,n)},serialize:(e,t)=>({kind:\"either\",variants:e.variants.map(r=>t(r)),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,o)=>{let a=[];for(let d=0;d<e.variants.length;d+=1)try{let l=r.validate(e.variants[d],t,n,[...o,\"variants\",d]);if(l!==void 0)return l}catch(l){l instanceof Error&&a.push(l)}throw x(T.EitherNoMatch,a[0]?.message??\"no either variant matched\",{valuePath:n,schemaPath:o})},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var pi={kind:\"literal\",parse:(e,t,r,n)=>{let o=e.value;if(typeof o!=\"string\"&&typeof o!=\"number\"&&typeof o!=\"boolean\")throw B([...n,\"value\"],\"literal value must be string, number, or boolean\");return r.normalizeDefault({kind:t.kind,required:t.required,value:o},e.default,n)},serialize:e=>({kind:\"literal\",value:e.value,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,o)=>{let a=typeof e.value==\"string\"?\"string\":typeof e.value==\"number\"?\"number\":\"boolean\",d=a===\"string\"?fr(e.kind,t,n,o):a===\"number\"?pr(e.kind,t,n,o):mr(e.kind,t,n,o);if(d.value!==e.value)throw x(T.LiteralMismatch,\"literal value does not match schema\",{valuePath:n,schemaPath:o});return k(d)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var mi={kind:\"number\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:di(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"number\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,o)=>{let a=pr(e.kind,t,n,o);for(let d of e.validators??[])switch(d.kind){case\"min\":if(a.value<d.value)throw O(\"number smaller than min\",n,o);break;case\"max\":if(a.value>d.value)throw O(\"number larger than max\",n,o);break;case\"positive\":if(a.value<=0)throw O(\"number is not positive\",n,o);break;case\"negative\":if(a.value>=0)throw O(\"number is not negative\",n,o);break;case\"int\":if(!Number.isInteger(a.value))throw O(\"number is not an integer\",n,o);break}return k(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var yi={kind:\"object\",parse:(e,t,r,n)=>{let o=Z(e.fields,[...n,\"fields\"],\"object schema fields must be an object\"),a={};for(let[d,l]of Object.entries(o))a[d]=r.parseSchema(l,[...n,\"fields\",d]);return r.normalizeDefault({kind:t.kind,required:t.required,fields:a},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,o]of Object.entries(e.fields))r[n]=t(o);return{kind:\"object\",fields:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,o)=>{let a=yr(e.kind,t,n,o),d={};for(let[l,s]of Object.entries(e.fields)){let u=r.validate(s,a.fields[l],[...n,{kind:\"field\",key:l}],[...o,\"fields\",l]);u!==void 0&&(d[l]=u)}return ne(d)},materializeDefault:(e,t,r,n)=>{let o={},a=!1;for(let[d,l]of Object.entries(e.fields)){let s;try{s=t.materializeDefault(l,[...r,{kind:\"field\",key:d}],[...n,\"fields\",d])}catch(u){if(!e.required&&ii(u)&&u.code===T.MissingRequired)return;throw u}s!==void 0&&(o[d]=s,a=!0)}if(a)return ne(o);if(e.required)throw x(T.MissingRequired,\"required object has no defaultable fields\",{valuePath:r,schemaPath:n})}};var hi={kind:\"string\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:ai(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"string\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,o)=>{let a=fr(e.kind,t,n,o);for(let d of e.validators??[])switch(d.kind){case\"minLength\":if(a.value.length<d.value)throw O(\"string shorter than minLength\",n,o);break;case\"maxLength\":if(a.value.length>d.value)throw O(\"string longer than maxLength\",n,o);break;case\"length\":if(a.value.length!==d.value)throw O(\"string length mismatch\",n,o);break;case\"regex\":if(!new RegExp(d.pattern,d.flags).test(a.value))throw O(\"string does not match regex\",n,o);break;case\"email\":if(!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(a.value))throw O(\"invalid email\",n,o);break;case\"url\":try{new URL(a.value)}catch{throw O(\"invalid url\",n,o)}break}return k(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var gi={kind:\"tree\",parse:(e,t,r,n)=>{let o=ve(e.discriminator,[...n,\"discriminator\"],\"tree discriminator must be a string\"),a=e.roots;if(!Array.isArray(a)||!a.every(s=>typeof s==\"string\"))throw x(T.InvalidSchema,\"tree roots must be a string array\",{schemaPath:[...n,\"roots\"]});let d=Z(e.variants,[...n,\"variants\"],\"tree variants must be an object\"),l={};for(let[s,u]of Object.entries(d)){let f=Z(u,[...n,\"variants\",s],\"tree variant must be an object\"),c=r.parseSchema(f.schema,[...n,\"variants\",s,\"schema\"]);if(c.kind!==\"object\")throw x(T.InvalidSchema,\"tree variant schema must be an object schema\",{schemaPath:[...n,\"variants\",s,\"schema\"]});let m=c.fields[o];if(m?.kind!==\"literal\"||m.value!==s)throw x(T.InvalidSchema,\"tree discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",s,\"schema\",\"fields\",o]});let y=f.children;if(!Array.isArray(y)||!y.every(N=>typeof N==\"string\"))throw x(T.InvalidSchema,\"tree variant children must be a string array\",{schemaPath:[...n,\"variants\",s,\"children\"]});l[s]={schema:c,children:[...y]}}for(let s of a)if(!Object.hasOwn(l,s))throw x(T.InvalidSchema,`unknown tree root variant ${s}`,{schemaPath:[...n,\"roots\"]});for(let[s,u]of Object.entries(l))for(let f of u.children)if(!Object.hasOwn(l,f))throw x(T.InvalidSchema,`unknown tree child variant ${f}`,{schemaPath:[...n,\"variants\",s,\"children\"]});return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:o,roots:[...a],variants:l},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,o]of Object.entries(e.variants))r[n]={schema:t(o.schema),children:[...o.children]};return{kind:\"tree\",discriminator:e.discriminator,roots:[...e.roots],variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,o)=>{let a=(()=>{if(t.kind!==\"tree\")throw x(T.TypeMismatch,`expected ${e.kind}, got ${t.kind}`,{valuePath:n,schemaPath:o});return t})(),d=new Map,l=a.nodes.map(s=>{let u=s.value.fields[e.discriminator];if(u===void 0||u.kind!==\"string\")throw x(T.TreeUnknownVariant,\"tree node discriminator is missing or invalid\",{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"discriminator\"]});let f=e.variants[u.value];if(!f)throw x(T.TreeUnknownVariant,`unknown tree variant ${u.value}`,{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"variants\"]});let c=r.validate(f.schema,s.value,[...n,{kind:\"node\",id:s.id}],[...o,\"variants\",u.value,\"schema\"]);return d.set(s.id,u.value),{id:s.id,parent:s.parent,pos:s.pos,value:c}});for(let s of l){let u=d.get(s.id);if(s.parent===I){if(!e.roots.includes(u))throw x(T.TreeInvalidRootType,`tree root type ${u} is not allowed`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...o,\"roots\"]});continue}let f=d.get(s.parent);if(!f)throw x(T.TreeUnknownVariant,\"tree parent variant is missing\",{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:o});if(!e.variants[f].children.includes(u))throw x(T.TreeInvalidChildType,`tree child type ${u} is not allowed under ${f}`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...o,\"variants\",f,\"children\"]})}return{kind:\"tree\",nodes:l}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var bi={kind:\"union\",parse:(e,t,r,n)=>{let o=ve(e.discriminator,[...n,\"discriminator\"],\"union discriminator must be a string\"),a=Z(e.variants,[...n,\"variants\"],\"union variants must be an object\"),d={};for(let[l,s]of Object.entries(a)){let u=r.parseSchema(s,[...n,\"variants\",l]);if(u.kind!==\"object\")throw x(T.InvalidSchema,\"union variants must be object schemas\",{schemaPath:[...n,\"variants\",l]});let f=u.fields[o];if(f?.kind!==\"literal\"||f.value!==l)throw x(T.InvalidSchema,\"union discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",l,\"fields\",o]});d[l]=u}return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:o,variants:d},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,o]of Object.entries(e.variants))r[n]=t(o);return{kind:\"union\",discriminator:e.discriminator,variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,o)=>{let a=yr(e.kind,t,n,o),d=a.fields[e.discriminator];if(d===void 0||d.kind!==\"string\")throw x(T.UnionNoMatch,\"union discriminator is missing or invalid\",{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"discriminator\"]});let l=e.variants[d.value];if(!l)throw x(T.UnionNoMatch,`unknown union discriminator ${d.value}`,{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...o,\"variants\"]});return r.validate(l,a,n,[...o,\"variants\",d.value])},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var Rd={string:hi,number:mi,boolean:ci,literal:pi,object:yi,array:ui,union:bi,either:fi,tree:gi};var at=e=>Rd[e];var wn=(e,t,r)=>vi(e,t,r),vi=(e,t,r)=>\"default\"in e&&e.default!==void 0?k(e.default):at(e.kind).materializeDefault(e,Cd,t,r),Cd={materializeDefault:vi};var Pn=(e,t)=>(t!==void 0&&J(t),Si(e,t,[],[])),Si=(e,t,r,n)=>t===void 0?wn(e,r,n):at(e.kind).validate(e,t,qd,r,n),qd={validate:Si,materializeDefault:wn};var i={};Pa(i,{Array:()=>zd,ArrayPrimitive:()=>wr,Boolean:()=>Bd,BooleanPrimitive:()=>Sr,Either:()=>$d,EitherPrimitive:()=>Pr,Lazy:()=>Qd,LazyPrimitive:()=>Ir,Literal:()=>Hd,LiteralPrimitive:()=>Tr,Number:()=>jd,NumberPrimitive:()=>vr,PrimitiveError:()=>h,String:()=>Md,StringPrimitive:()=>br,Struct:()=>Fd,StructPrimitive:()=>xr,Tree:()=>Jd,TreeNode:()=>Yd,TreeNodePrimitive:()=>Nr,TreeNodeSelf:()=>Kd,TreePrimitive:()=>kr,Union:()=>Wd,UnionPrimitive:()=>Vr,commands:()=>Od,expectDefined:()=>Ed,hasOwn:()=>Dd,randomUuid:()=>dt,shortId:()=>Ke});var h=class extends Error{constructor(t){super(t),this.name=\"PrimitiveError\"}},Ed=(e,t)=>{if(e===void 0)throw new h(t);return e},Dd=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),dt=()=>{let e=globalThis.crypto?.randomUUID?.();if(typeof e==\"string\")return e;throw new h(\"crypto.randomUUID is not available in this runtime\")},Ti=\"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ\",Ld=10,Ke=(e=Ld)=>{let t=globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);if(!t)throw new h(\"crypto.getRandomValues is not available in this runtime\");let r=Ti.length,n=Math.floor(256/r)*r,o=\"\",a=new Uint8Array(e);for(;o.length<e;){t(a);for(let d=0;d<a.length&&o.length<e;d+=1){let l=a[d];l<n&&(o+=Ti[l%r])}}return o};var Od=(e,t,r)=>{J(t);let n=Pn(e.schema,t);if(n===void 0)throw new Error(\"Primitive root snapshot cannot be undefined\");let o=[],a=n,d=We(),l={current:()=>a,emit:s=>{s.length!==0&&(o.push(...s),a=Uo(n,o))},generator:{nextArrayItemId:()=>dt(),nextTreeNodeId:()=>Ke(),between:(s,u)=>d.between(s,u)}};return r(e.createProxy(l,[])),o};var D=(e,t)=>{let r=e;for(let n of t){if(r===void 0)return;switch(n.kind){case\"field\":if(r.kind!==\"object\")return;r=r.fields[n.key];break;case\"item\":if(r.kind!==\"array\")return;r=r.items.find(o=>o.id===n.id)?.value;break;case\"node\":if(r.kind!==\"tree\")return;r=r.nodes.find(o=>o.id===n.id)?.value;break}}return r},hr=(e,t)=>{let r=D(e,t);return r?.kind===\"object\"?r:void 0},H=(e,t)=>{let r=D(e,t);return r?.kind===\"array\"?r:void 0},K=(e,t)=>{let r=D(e,t);return r?.kind===\"tree\"?r:void 0},Se=e=>e?[...e.items].sort((t,r)=>t.pos.localeCompare(r.pos)):[],gr=(e,t)=>e?.items.find(r=>r.id===t),Vn=(e,t)=>{let r=Se(e),n=Lt(t,r.length);return n===void 0?void 0:r[n]},Nn=(e,t)=>e?.nodes.find(r=>r.id===t),ke=(e,t)=>e?e.nodes.filter(r=>r.parent===t).sort((r,n)=>r.pos.localeCompare(n.pos)):[];var Lt=(e,t)=>{let r=e<0?t+e:e;if(!(r<0||r>=t))return r},lt=(e,t)=>{if(t<0||t>e.length)throw new h(`Index ${t} is out of range`);return{lower:t===0?void 0:e[t-1],upper:t===e.length?void 0:e[t]}};var _n=(e,t,r)=>{if(!e||t===I)return!1;let n=new Map(e.nodes.map(a=>[a.id,a])),o=t;for(;;){let a=n.get(o);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;o=a.parent}},kn=(e,t)=>[...e,{kind:\"node\",id:t}];var br=class e{constructor(t){p(this,\"_tag\",\"StringPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"string\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:re(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}length(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"length\",value:t}]})}regex(t,r){return new e({...this.state,validators:[...this.state.validators,{kind:\"regex\",pattern:t.source,flags:t.flags}]})}email(){return new e({...this.state,validators:[...this.state.validators,{kind:\"email\"}]})}url(){return new e({...this.state,validators:[...this.state.validators,{kind:\"url\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"String value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return re(this.state.defaultValue);if(this.state.required)throw new h(\"String value is required\");return}if(typeof t!=\"string\")throw new h(\"Expected string input\");return re(t)}decode(t){return t?.kind===\"string\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Md=()=>new br({required:!1,defaultValue:void 0,validators:[]});var vr=class e{constructor(t){p(this,\"_tag\",\"NumberPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"number\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:ot(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"min\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"max\",value:t}]})}positive(){return new e({...this.state,validators:[...this.state.validators,{kind:\"positive\"}]})}negative(){return new e({...this.state,validators:[...this.state.validators,{kind:\"negative\"}]})}int(){return new e({...this.state,validators:[...this.state.validators,{kind:\"int\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Number value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return ot(this.state.defaultValue);if(this.state.required)throw new h(\"Number value is required\");return}if(typeof t!=\"number\"||globalThis.Number.isNaN(t)||!globalThis.Number.isFinite(t))throw new h(\"Expected finite number input\");return ot(t)}decode(t){return t?.kind===\"number\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},jd=()=>new vr({required:!1,defaultValue:void 0,validators:[]});var Sr=class e{constructor(t){p(this,\"_tag\",\"BooleanPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"boolean\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:it(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Boolean value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return it(this.state.defaultValue);if(this.state.required)throw new h(\"Boolean value is required\");return}if(typeof t!=\"boolean\")throw new h(\"Expected boolean input\");return it(t)}decode(t){return t?.kind===\"boolean\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Bd=()=>new Sr({required:!1,defaultValue:void 0});var In=e=>{switch(typeof e){case\"string\":return re(e);case\"number\":return ot(e);case\"boolean\":return it(e);default:throw new h(`Unsupported scalar value type: ${typeof e}`)}};var Tr=class e{constructor(t){p(this,\"_tag\",\"LiteralPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get literal(){return this.state.literal}get schema(){return{kind:\"literal\",value:this.state.literal,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:In(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){if(t!==this.state.literal)throw new h(\"Literal default must equal the literal value\");return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Literal value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Literal value is required\");return}if(r!==this.state.literal)throw new h(\"Input does not match the literal value\");return In(this.state.literal)}decode(t){if(t!==void 0&&\"value\"in t&&t.value===this.state.literal)return this.state.literal}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Hd=e=>new Tr({required:!1,defaultValue:void 0,literal:e});var xr=class e{constructor(t){p(this,\"_tag\",\"StructPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get fields(){return this.state.fields}get schema(){let t={};for(let[r,n]of Object.entries(this.state.fields))t[r]=n.schema;return{kind:\"object\",fields:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}extend(t){return new e({required:this.state.required,defaultValue:void 0,fields:{...this.state.fields,...t}})}partial(t){let r=t?.stripDefaults??!1,n={};for(let[o,a]of Object.entries(this.state.fields))n[o]=xi(a,r);return new e({required:this.state.required,defaultValue:void 0,fields:n})}optional(t){let r=t?Object.fromEntries(Object.entries(this.state.fields).map(([n,o])=>[n,xi(o,!0)])):this.state.fields;return new e({required:!1,defaultValue:t?void 0:this.state.defaultValue,fields:r})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Struct value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return this.encode(this.state.defaultValue);if(this.state.required)throw new h(\"Struct value is required\");return}if(typeof t!=\"object\"||t===null||Array.isArray(t))throw new h(\"Expected object input\");let r=t,n={};for(let[o,a]of Object.entries(this.state.fields)){let d=a.encodeOptional(r[o]);d!==void 0&&(n[o]=d)}return ne(n)}decode(t){if(t?.kind!==\"object\")return;let r={};for(let[n,o]of Object.entries(this.state.fields)){let a=o.decode(t.fields[n]);a!==void 0&&(r[n]=a)}return r}createProxy(t,r){let n={get:()=>this.decode(D(t.current(),r)),set:o=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(o)}])},update:o=>{Ud(this.state.fields,t,r,o)}};for(let[o,a]of Object.entries(this.state.fields))n[o]=a.createProxy(t,[...r,{kind:\"field\",key:o}]);return n}},Ud=(e,t,r,n)=>{for(let[o,a]of Object.entries(n)){let d=e[o];if(d){if(a===void 0){hr(t.current(),r)?.fields[o]!==void 0&&t.emit([{kind:\"object.delete\",path:r,key:o}]);continue}if(d._tag===\"StructPrimitive\"&&typeof a==\"object\"&&a!==null&&!Array.isArray(a)){d.createProxy(t,[...r,{kind:\"field\",key:o}]).update(a);continue}t.emit([{kind:\"object.set\",path:r,key:o,value:d.encode(a)}])}}},xi=(e,t)=>{let r=e.optional;return typeof r==\"function\"?r.call(e,t):e},Fd=e=>new xr({required:!1,defaultValue:void 0,fields:e});var wr=class e{constructor(t){p(this,\"_tag\",\"ArrayPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");p(this,\"encodedDefaultCache\");this.state=t}encodedDefault(){return this.encodedDefaultCache===void 0&&(this.encodedDefaultCache={value:this.state.defaultValue===void 0?void 0:this.encodeEntries(this.state.defaultValue)}),this.encodedDefaultCache.value}get element(){return this.state.element}get schema(){let t=this.encodedDefault();return{kind:\"array\",element:this.state.element.schema,...this.state.required?{required:!0}:{},...t!==void 0?{default:k(t)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}minLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}maxLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Array value is undefined\");return r}encodeOptional(t){if(t===void 0){let r=this.encodedDefault();if(r!==void 0)return k(r);if(this.state.required)throw new h(\"Array value is required\");return}if(!globalThis.Array.isArray(t))throw new h(\"Expected array input\");return this.encodeEntries(t)}decode(t){if(t?.kind===\"array\")return Se(t).map(r=>({id:r.id,pos:r.pos,value:this.state.element.decode(r.value)}))}createProxy(t,r){let n=d=>({get id(){return d},get pos(){return gr(H(t.current(),r),d)?.pos??\"\"},get value(){return a.state.element.createProxy(t,[...r,{kind:\"item\",id:d}])},get:()=>{let l=gr(H(t.current(),r),d);return this.state.element.decode(l?.value)},remove:()=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:l=>{wi(t,r,d,l)},moveToPos:l=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])}}),o=()=>Se(H(t.current(),r)).map(d=>n(d.id)),a=this;return{get length(){return Se(H(t.current(),r)).length},get:()=>this.decode(H(t.current(),r)),set:d=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(d)}])},push:d=>{let l=Se(H(t.current(),r)),s=l.length===0?void 0:l[l.length-1]?.pos,u=t.generator.nextArrayItemId(r),f=t.generator.between(s,void 0);return t.emit([{kind:\"array.insert\",path:r,item:{id:u,pos:f,value:this.state.element.encode(d)}}]),n(u)},insertAt:(d,l)=>{let s=Se(H(t.current(),r)),u=lt(s.map(m=>m.pos),d),f=t.generator.nextArrayItemId(r),c=t.generator.between(u.lower,u.upper);return t.emit([{kind:\"array.insert\",path:r,item:{id:f,pos:c,value:this.state.element.encode(l)}}]),n(f)},insertAtPos:(d,l)=>{let s=t.generator.nextArrayItemId(r);return t.emit([{kind:\"array.insert\",path:r,item:{id:s,pos:d,value:this.state.element.encode(l)}}]),n(s)},remove:d=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:(d,l)=>{wi(t,r,d,l)},moveToPos:(d,l)=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])},at:d=>{let l=Vn(H(t.current(),r),d);return l?n(l.id):void 0},first:()=>{let d=Vn(H(t.current(),r),0);return d?n(d.id):void 0},last:()=>{let d=Se(H(t.current(),r)),l=d[d.length-1];return l?n(l.id):void 0},findById:d=>{let l=gr(H(t.current(),r),d);return l?n(l.id):void 0},find:d=>o().find((s,u,f)=>d(s,u,f)),findIndex:d=>o().findIndex((s,u,f)=>d(s,u,f)),map:d=>o().map((s,u,f)=>d(s,u,f)),filter:d=>o().filter((s,u,f)=>d(s,u,f)),some:d=>o().some((s,u,f)=>d(s,u,f)),every:d=>o().every((s,u,f)=>d(s,u,f)),forEach:d=>{o().forEach((s,u,f)=>d(s,u,f))},[Symbol.iterator]:()=>o()[Symbol.iterator]()}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encodeEntries(t){let r=We(),n=new Set,o,a=t.map(d=>{let l=r.between(o,void 0);o=l;let s=dt();for(;n.has(s);)s=dt();return n.add(s),{id:s,pos:l,value:this.state.element.encode(d)}});return fn(a)}},wi=(e,t,r,n)=>{let o=Se(H(e.current(),t));if(o.findIndex(c=>c.id===r)===-1)throw new h(`Array item \"${r}\" does not exist`);let d=o.filter(c=>c.id!==r),l=Lt(n,d.length+1);if(l===void 0&&n!==d.length)throw new h(`Index ${n} is out of range`);let s=l??d.length,u=lt(d.map(c=>c.pos),s),f=e.generator.between(u.lower,u.upper);e.emit([{kind:\"array.move\",path:t,id:r,pos:f}])},zd=e=>new wr({required:!1,defaultValue:void 0,element:e,validators:[]});var Pr=class e{constructor(t){p(this,\"_tag\",\"EitherPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");if(this.state=t,t.variants.length===0)throw new h(\"Either requires at least one variant\")}get schema(){return{kind:\"either\",variants:this.state.variants.map(t=>t.schema),...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Either value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Either value is required\");return}for(let n of this.state.variants)try{let o=n.encodeOptional(r);if(o!==void 0)return o}catch{}throw new h(\"Either input did not match any variant\")}decode(t){for(let r of this.state.variants){let n=r.decode(t);if(n!==void 0)return n}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}},$d=(...e)=>new Pr({required:!1,defaultValue:void 0,variants:e});var Vr=class e{constructor(t){p(this,\"_tag\",\"UnionPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get discriminator(){return this.state.discriminator}get variants(){return this.state.variants}get schema(){let t={};for(let[r,n]of Object.entries(this.state.variants)){let o=n.schema;if(o.kind!==\"object\")throw new h(\"Union variants must compile to object schemas\");let a={...o.fields,[this.state.discriminator]:{kind:\"literal\",value:r}};t[r]={kind:\"object\",fields:a}}return{kind:\"union\",discriminator:this.state.discriminator,variants:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Union value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Union value is required\");return}if(typeof r!=\"object\"||r===null||Array.isArray(r))throw new h(\"Expected union input object\");let n=this.resolveVariantKey(r),o=this.state.variants[n];if(!o)throw new h(`Unknown union variant \"${String(n)}\"`);let a=o.encode(r);if(a.kind!==\"object\")throw new h(\"Union variant must encode to an object value\");return ne({...a.fields,[this.state.discriminator]:re(String(n))})}decode(t){if(t?.kind!==\"object\")return;let r=this.resolveVariantKeyFromObject(t);if(!r)return;let o=this.state.variants[r]?.decode(t);if(o!==void 0)return{...o,[this.state.discriminator]:r}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},as:n=>{let o=this.state.variants[String(n)];if(!o)throw new h(`Unknown union variant \"${String(n)}\"`);return o.createProxy(t,r)},match:n=>{let o=hr(t.current(),r),a=o?this.resolveVariantKeyFromObject(o):void 0;if(!a)return;let d=n[a];if(d)return d(this.state.variants[a].createProxy(t,r))}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}resolveVariantKey(t){let r=t[this.state.discriminator];if(typeof r==\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r))return r;let n=Object.entries(this.state.variants).filter(([,o])=>{let a=Object.keys(o.fields);return Object.keys(t).every(d=>d===this.state.discriminator||a.includes(d))}).map(([o])=>o);if(n.length===1)return n[0];throw new h(\"Unable to resolve union variant from input\")}resolveVariantKeyFromObject(t){let r=t.fields[this.state.discriminator];if(r?.kind===\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r.value))return r.value}},Wd=(e,t)=>new Vr({required:!1,defaultValue:void 0,discriminator:t?.discriminator??\"type\",variants:e});var Pi=Symbol.for(\"TreeNode.Self\"),Kd={_tag:\"TreeNodeSelf\",_brand:Pi},Gd=e=>typeof e==\"object\"&&e!==null&&\"_brand\"in e&&e._brand===Pi,Nr=class{constructor(t,r,n){p(this,\"_tag\",\"TreeNodePrimitive\");p(this,\"_Type\");p(this,\"_Data\");p(this,\"_Children\");p(this,\"TSetInput\");p(this,\"type\");p(this,\"data\");p(this,\"childrenInput\");p(this,\"resolvedChildren\");this.type=t,this.data=r,this.childrenInput=n}get children(){if(this.resolvedChildren===void 0){let t=typeof this.childrenInput==\"function\"?this.childrenInput():this.childrenInput;this.resolvedChildren=t.map(r=>Gd(r)?this:r)}return this.resolvedChildren}isChildAllowed(t){return this.children.some(r=>r.type===t)}},Yd=(e,t)=>new Nr(e,t.data,t.children);var kr=class e{constructor(t){p(this,\"_tag\",\"TreePrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){let t=Xd(this.state.root);return{kind:\"tree\",discriminator:\"type\",roots:[this.state.root.type],variants:t,...this.state.required?{required:!0}:{},...this.state.encodedDefault!==void 0?{default:k(this.state.encodedDefault)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t,encodedDefault:this.encodeRoots(t)})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Tree value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.encodedDefault!==void 0)return k(this.state.encodedDefault);if(this.state.required)throw new h(\"Tree value is required\");return}if(!Array.isArray(t))throw new h(\"Expected tree root input array\");return this.encodeRoots(t)}encodeRoots(t){let r=[],n=_r(this.state.root),o=new Set([I]),a,d=We(),l=(s,u,f,c)=>{let m=n.get(s.type);if(!m)throw new h(`Unknown tree node type \"${s.type}\"`);if(!f.some(w=>w.type===m.type))throw new h(`Node type \"${s.type}\" is not allowed here`);let y=s.id??Zd(o);if(o.has(y))throw new h(`Duplicate tree node id \"${y}\" in encoded input`);o.add(y);let N=d.between(c,void 0);r.push({id:y,parent:u,pos:N,value:An(m,s)});let R;for(let w of s.children??[])R=l(w,y,m.children,R);return N};for(let s of t)a=l(s,I,[this.state.root],a);return pn(r)}decode(t){if(t?.kind!==\"tree\")return;let r=_r(this.state.root);return _i(t,I,r)}createProxy(t,r){let n=_r(this.state.root);return{get:()=>this.decode(K(t.current(),r)),set:o=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(o)}])},findByIdAcrossTree:o=>{let a=K(t.current(),r),d=Nn(a,o);if(!d)return;let l=d.value.fields.type,s=n.get(l?.kind===\"string\"?l.value:\"\");return s?Ge(t,r,n,s,o):void 0},children:Ni(t,r,n,I,[this.state.root])}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue,encodedDefault:t?void 0:this.state.encodedDefault})}},Ni=(e,t,r,n,o)=>{let a=()=>ke(K(e.current(),t),n).filter(l=>o.some(s=>s.type===oe(l))).map(l=>Ge(e,t,r,r.get(oe(l)),l.id)),d={__parentId:n,get length(){return a().length},at:l=>{let s=ke(K(e.current(),t),n).filter(c=>o.some(m=>m.type===oe(c))),u=Lt(l,s.length),f=u===void 0?void 0:s[u];return f?Ge(e,t,r,r.get(oe(f)),f.id):void 0},first:()=>d.at(0),last:()=>{let l=a();return l[l.length-1]},findById:l=>{let s=ke(K(e.current(),t),n).find(f=>f.id===l);if(!s)return;let u=r.get(oe(s));return u?Ge(e,t,r,u,s.id):void 0},insertAt:(l,s)=>{let u=K(e.current(),t),f=ke(u,n).filter(w=>o.some(P=>P.type===oe(w))),c=lt(f.map(w=>w.pos),l),m=Vi(o,s.type),y=s.id??e.generator.nextTreeNodeId(t),N=e.generator.between(c.lower,c.upper),R={id:y,parent:n,pos:N,value:An(m,s)};return e.emit([{kind:\"tree.insert\",path:t,node:R}]),Ge(e,t,r,m,y)},insertLast:l=>{let s=ke(K(e.current(),t),n).filter(u=>o.some(f=>f.type===oe(u)));return d.insertAt(s.length,l)},insertAtPos:(l,s)=>{let u=Vi(o,s.type),f=s.id??e.generator.nextTreeNodeId(t),c={id:f,parent:n,pos:l,value:An(u,s)};return e.emit([{kind:\"tree.insert\",path:t,node:c}]),Ge(e,t,r,u,f)},find:l=>a().find((u,f,c)=>l(u,f,c)),findIndex:l=>a().findIndex((u,f,c)=>l(u,f,c)),map:l=>a().map((u,f,c)=>l(u,f,c)),filter:l=>a().filter((u,f,c)=>l(u,f,c)),some:l=>a().some((u,f,c)=>l(u,f,c)),every:l=>a().every((u,f,c)=>l(u,f,c)),forEach:l=>{a().forEach((u,f,c)=>l(u,f,c))},[Symbol.iterator]:()=>a()[Symbol.iterator]()};return d},Ge=(e,t,r,n,o)=>{let a=()=>Nn(K(e.current(),t),o),d=()=>{let l=a();return l?r.get(oe(l))??n:n};return{get id(){return o},get type(){return d().type},get pos(){return a()?.pos??\"\"},get parentId(){let l=a()?.parent;return l===I?null:l??null},get data(){return d().data.createProxy(e,kn(t,o))},get children(){return Ni(e,t,r,o,d().children)},get:()=>{let l=a();if(l)return ki(l,K(e.current(),t),r)},update:l=>{d().data.createProxy(e,kn(t,o)).update(l)},remove:()=>{e.emit([{kind:\"tree.delete\",path:t,id:o}])},moveTo:(l,s)=>{let u=l.__parentId;if(!u)throw new h(\"Target children collection is not movable\");let f=K(e.current(),t);if(_n(f,u,o))throw new h(\"Tree move would create a cycle\");let c=ke(f,u).filter(N=>N.id!==o),m=lt(c.map(N=>N.pos),s),y=e.generator.between(m.lower,m.upper);e.emit([{kind:\"tree.move\",path:t,id:o,parent:u,pos:y}])},moveToPos:(l,s)=>{let u=K(e.current(),t);if(_n(u,l,o))throw new h(\"Tree move would create a cycle\");e.emit([{kind:\"tree.move\",path:t,id:o,parent:l,pos:s}])},as:l=>{if(d().type!==l.type)throw new h(`Expected node type \"${l.type}\", got \"${d().type}\"`);return Ge(e,t,r,l,o)}}},Xd=e=>{let t=_r(e),r={};for(let n of t.values()){let o=n.data.schema;if(o.kind!==\"object\")throw new h(\"Tree node data must compile to an object schema\");r[n.type]={schema:{kind:\"object\",fields:{...o.fields,type:{kind:\"literal\",value:n.type}}},children:n.children.map(a=>a.type)}}return r},_r=e=>{let t=new Map,r=n=>{let o=t.get(n.type);if(o&&o!==n)throw new h(`Duplicate tree node type \"${n.type}\"`);if(!o){t.set(n.type,n);for(let a of n.children)r(a)}};return r(e),t},An=(e,t)=>{let r=e.data.encode(t);if(r.kind!==\"object\")throw new h(\"Tree node data must encode to an object\");return ne({...r.fields,type:re(e.type)})},oe=e=>{let t=e.value.fields.type;if(t?.kind!==\"string\")throw new h(`Tree node \"${e.id}\" is missing its type discriminator`);return t.value},_i=(e,t,r)=>ke(e,t).map(n=>ki(n,e,r)),ki=(e,t,r)=>{let n=r.get(oe(e));if(!n)throw new h(`Unknown tree node type \"${oe(e)}\"`);return{id:e.id,type:n.type,parentId:e.parent===I?null:e.parent,pos:e.pos,data:n.data.decode(e.value),children:_i(t,e.id,r)}},Vi=(e,t)=>{let r=e.find(n=>n.type===t);if(!r)throw new h(`Tree node type \"${t}\" is not allowed in this collection`);return r},Jd=e=>new kr({required:!1,defaultValue:void 0,encodedDefault:void 0,root:e.root}),Zd=e=>{let t=Ke();for(;e.has(t);)t=Ke();return t};var Ir=class{constructor(t){p(this,\"_tag\",\"LazyPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"thunk\");p(this,\"resolved\");this.thunk=t}get schema(){return this.resolve().schema}encode(t){return this.resolve().encode(t)}encodeOptional(t){return this.resolve().encodeOptional(t)}decode(t){return this.resolve().decode(t)}createProxy(t,r){return this.resolve().createProxy(t,r)}resolve(){return this.resolved===void 0&&(this.resolved=this.thunk()),this.resolved}},Qd=e=>new Ir(e);var Ii=i.Struct({type:i.Literal(\"click\").required()}),Ai=i.Union({click:Ii}),Ar=i.Union({boolean:i.Struct({key:i.Literal(\"boolean\").required(),value:i.Boolean().required()}),number:i.Struct({key:i.Literal(\"number\").required(),value:i.Number().required()}),string:i.Struct({key:i.Literal(\"string\").required(),value:i.String().required()}),product:i.Struct({key:i.Literal(\"product\").required(),value:i.Struct({productId:i.String()}).required()})},{discriminator:\"key\"}),Ri=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),value:Ar.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:i.Struct({id:i.String().required()}).required()})}),Ci=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),productId:i.String().required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),variableId:i.String().required()})}),qi=i.Struct({type:i.Literal(\"none\").required()}),Ei=i.Struct({type:i.Literal(\"set-variable\").required(),payload:i.Struct({variableId:i.String().required(),newValue:Ri.required()}).required()}),Di=i.Struct({type:i.Literal(\"close-paywall\").required()}),Li=i.Struct({type:i.Literal(\"purchase-product\").required(),payload:Ci.required()}),Rr=i.Union({\"close-paywall\":Di,none:qi,\"purchase-product\":Li,\"set-variable\":Ei}),Oi=i.Struct({id:i.String().required(),trigger:Ai.required(),action:Rr.required()}),Ot=i.Array(Oi).default([]);var Mi=i.Struct({key:i.Literal(\"string\").required(),value:i.String().default(\"\")}),ji=i.Struct({key:i.Literal(\"number\").required(),value:i.Number().default(0)}),Bi=i.Struct({key:i.Literal(\"boolean\").required(),value:i.Boolean().default(!1)}),Hi=i.Struct({key:i.Literal(\"product\").required(),value:i.Struct({productId:i.String()}).default({})}),Cr=i.Union({boolean:Bi,number:ji,product:Hi,string:Mi},{discriminator:\"key\"}),Ui=i.Struct({id:i.String().required(),name:i.String().required(),value:Cr.required()}),qr=i.Struct({id:i.String().required()});var Er=i.Union({boolean:i.Struct({key:i.Literal(\"boolean\").required(),value:i.Boolean().required()}),\"boolean-array\":i.Struct({key:i.Literal(\"boolean-array\").required(),value:i.Array(i.Boolean()).required()}),number:i.Struct({key:i.Literal(\"number\").required(),value:i.Number().required()}),\"number-array\":i.Struct({key:i.Literal(\"number-array\").required(),value:i.Array(i.Number()).required()}),product:i.Struct({key:i.Literal(\"product\").required(),value:i.Struct({productId:i.String()}).required()}),string:i.Struct({key:i.Literal(\"string\").required(),value:i.String().required()}),\"string-array\":i.Struct({key:i.Literal(\"string-array\").required(),value:i.Array(i.String()).required()})},{discriminator:\"key\"}),Rn=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),value:Er.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:qr.required()})}),Fi=i.Union({\"action-payload\":i.Struct({type:i.Literal(\"action-payload\").required(),value:i.Struct({field:i.String().required()}).required()}),literal:i.Struct({type:i.Literal(\"literal\").required(),value:Ar.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:i.Struct({id:i.String().required()}).required()})}),zi=i.Union({\"action-payload\":i.Struct({type:i.Literal(\"action-payload\").required(),field:i.String().required()}),literal:i.Struct({type:i.Literal(\"literal\").required(),productId:i.String().required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),variableId:i.String().required()})}),Cn=i.Union({\"close-paywall\":i.Struct({type:i.Literal(\"close-paywall\").required()}),none:i.Struct({type:i.Literal(\"none\").required()}),\"purchase-product\":i.Struct({type:i.Literal(\"purchase-product\").required(),payload:zi.required()}),\"set-variable\":i.Struct({type:i.Literal(\"set-variable\").required(),payload:i.Struct({variableId:i.String().required(),newValue:Fi.required()}).required()})});var U=i.Array(Ui).default([]),F=i.Array(i.Struct({name:i.String().required(),nodeId:i.String().required()})).default([]);var el=i.Struct({path:i.String().required(),source:i.String().default(\"\")}).required(),qn=i.TreeNode(\"codeComponent\",{children:[],data:el});var G=i.Union({literal:i.Struct({type:i.Literal(\"literal\").required(),value:Cr.required()}),\"variable-reference\":i.Struct({type:i.Literal(\"variable-reference\").required(),value:qr.required()})}),tl=i.Struct({type:i.Literal(\"equals\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),rl=i.Struct({type:i.Literal(\"not-equals\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),nl=i.Struct({type:i.Literal(\"greater-than\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),ol=i.Struct({type:i.Literal(\"greater-than-or-equal\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),il=i.Struct({type:i.Literal(\"less-than\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),al=i.Struct({type:i.Literal(\"less-than-or-equal\").required(),value:i.Struct({left:G.required(),right:G.required()}).required()}),dl=i.Union({equals:tl,\"greater-than\":nl,\"greater-than-or-equal\":ol,\"less-than\":il,\"less-than-or-equal\":al,\"not-equals\":rl}),ll=i.Struct({type:i.Literal(\"and\").required(),value:i.Array(dl).minLength(1).required()}),$i=i.Struct({type:i.Literal(\"or\").required(),value:i.Array(ll).minLength(1).required()}),sl=i.Struct({action:Rr.required(),interactionId:i.String().required()});function Ie(e){return i.Struct({condition:$i.required(),id:i.String().required(),name:i.String().required(),overrides:i.Struct({style:e}).default({})})}function Dr(e){return i.Struct({condition:$i.required(),id:i.String().required(),name:i.String().required(),overrides:i.Struct({actions:i.Array(sl).default([]),style:e}).default({})})}var Ye=/^rgba\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d*\\.?\\d+)\\s*\\)$/i,st=i.Number().default(0),ut=i.Number().default(0),ct=i.Number().default(0),ft=i.Number().default(0),ie=i.Number().default(0),ae=i.Number().default(0),de=i.Number().default(0),le=i.Number().default(0),pt=i.Number().default(0),mt=i.Either(i.Literal(\"flex-start\"),i.Literal(\"center\"),i.Literal(\"flex-end\"),i.Literal(\"space-between\"),i.Literal(\"space-around\"),i.Literal(\"space-evenly\")).default(\"flex-start\"),yt=i.Either(i.Literal(\"flex-start\"),i.Literal(\"center\"),i.Literal(\"flex-end\"),i.Literal(\"stretch\"),i.Literal(\"baseline\")).default(\"stretch\"),ht=i.Either(i.Literal(\"row\"),i.Literal(\"column\")).default(\"column\"),se=i.Number(),ue=i.Number().default(0),ce=i.Number().default(1),fe=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),pe=i.Either(i.Literal(\"auto\"),i.Literal(\"flex-start\"),i.Literal(\"center\"),i.Literal(\"flex-end\"),i.Literal(\"stretch\"),i.Literal(\"baseline\")).default(\"auto\"),gt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),bt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),me=i.Number(),ye=i.Number(),he=i.Number(),ge=i.Number(),Wi=i.Number().default(0),Ki=i.Number().default(0),vt=i.Either(i.Literal(\"absolute\"),i.Literal(\"relative\")).default(\"relative\"),St=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),Tt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),xt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),wt=i.Either(i.Number(),i.Literal(\"auto\")).default(\"auto\"),Pt=i.String().default(\"rgba(255, 255, 255, 1)\").regex(Ye,\"Invalid RGBA color format\"),Vt=i.Boolean().default(!1),Nt=i.Either(i.Literal(\"solid\"),i.Literal(\"gradient\"),i.Literal(\"image\")).default(\"solid\"),_t=i.Struct({kind:i.Either(i.Literal(\"linear\"),i.Literal(\"radial\")).default(\"linear\"),startX:i.Number().default(.5),startY:i.Number().default(0),endX:i.Number().default(.5),endY:i.Number().default(1),stops:i.Array(i.Struct({color:i.String().default(\"rgba(255, 255, 255, 1)\").regex(Ye,\"Invalid RGBA color format\"),position:i.Number().default(0)})).default([{color:\"rgba(255, 255, 255, 1)\",position:0},{color:\"rgba(255, 255, 255, 0)\",position:1}])}).default({}),Te=i.Struct({url:i.String().default(\"\"),resizeMode:i.Either(i.Literal(\"cover\"),i.Literal(\"contain\"),i.Literal(\"stretch\"),i.Literal(\"center\")).default(\"cover\")}).default({}),Ae=i.Number().default(0),Re=i.Number().default(0),Ce=i.Number().default(0),qe=i.Number().default(0),Ee=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),De=i.Either(i.Literal(\"solid\"),i.Literal(\"dashed\"),i.Literal(\"dotted\")).default(\"solid\"),Lr=i.Number().default(0),Or=i.Number().default(0),Mr=i.Number().default(0),jr=i.Number().default(0),Le=i.Boolean().default(!1),Y=i.Number().default(1),Oe=i.Either(i.Literal(\"visible\"),i.Literal(\"hidden\"),i.Literal(\"scroll\")).default(\"visible\"),Me=i.Number().default(0),X=i.Either(i.Literal(\"flex\"),i.Literal(\"none\")).default(\"flex\"),je=i.Boolean().default(!1),Be=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),He=i.Number().default(0),Ue=i.Number().default(0),Fe=i.Number().default(0),ze=i.Number().default(1),Gi=i.Number().default(16).min(1),Yi=i.Either(i.Literal(\"100\"),i.Literal(\"200\"),i.Literal(\"300\"),i.Literal(\"400\"),i.Literal(\"500\"),i.Literal(\"600\"),i.Literal(\"700\"),i.Literal(\"800\"),i.Literal(\"900\")).default(\"400\"),Xi=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),Ji=i.Either(i.Literal(\"left\"),i.Literal(\"center\"),i.Literal(\"right\"),i.Literal(\"justify\")).default(\"left\"),Zi=i.Number().default(1.5),Qi=i.Number().default(0),kt=i.Boolean().default(!1),It=i.Boolean().default(!1),ea=i.String().default(\"rgba(255, 255, 255, 1)\").regex(Ye,\"Invalid RGBA color format\"),ta=i.Boolean().default(!1),ra=i.Either(i.Literal(\"nonzero\"),i.Literal(\"evenodd\")).default(\"nonzero\"),na=i.Number().default(1),oa=i.String().default(\"rgba(0, 0, 0, 1)\").regex(Ye,\"Invalid RGBA color format\"),ia=i.Boolean().default(!1),aa=i.Number().default(0),da=i.Number().default(1),la=i.Either(i.Literal(\"butt\"),i.Literal(\"round\"),i.Literal(\"square\")).default(\"butt\"),sa=i.Either(i.Literal(\"miter\"),i.Literal(\"round\"),i.Literal(\"bevel\")).default(\"miter\");var En=i.Struct({fillColor:ea,fillEnabled:ta,fillRule:ra,fillOpacity:na,strokeColor:oa,strokeEnabled:ia,strokeWidth:aa,strokeOpacity:da,strokeLinecap:la,strokeLinejoin:sa,opacity:Y,display:X}).default({}),ul=Ie(En.partial({stripDefaults:!0}).default({})),cl=i.Array(ul).default([]),Dn=i.TreeNode(\"path\",{children:[],data:i.Struct({linkedVariables:F,localVariables:U,name:i.String().default(\"Path\"),states:cl,d:i.String().default(\"\"),transform:i.String(),style:En}).required()});var fl=i.Either(i.Literal(\"none\"),i.Literal(\"xMidYMid meet\"),i.Literal(\"xMidYMid slice\")).default(\"xMidYMid meet\"),pl=i.Struct({minX:i.Number().default(0),minY:i.Number().default(0),width:i.Number().default(24),height:i.Number().default(24)}).default({}),Ln=i.Struct({width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,opacity:Y,display:X,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\"),preserveAspectRatio:fl}).default({}),ml=Ie(Ln.partial({stripDefaults:!0}).default({})),yl=i.Array(ml).default([]),xe=i.TreeNode(\"shape\",{children:[Dn],data:i.Struct({linkedVariables:F,localVariables:U,name:i.String().default(\"Shape\"),states:yl,svgSource:i.String(),viewBox:pl,style:Ln}).required()});var On=i.Struct({marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,fontSize:Gi,fontWeight:Yi,color:Xi,textAlign:Ji,lineHeight:Zi,letterSpacing:Qi,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,opacity:Y,overflow:Oe,zIndex:Me,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),hl=Ie(On.partial({stripDefaults:!0}).default({})),gl=i.Array(hl).default([]),bl=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({text:i.String()}).default({})})).default([]),we=i.TreeNode(\"text\",{children:[],data:i.Struct({linkedVariables:F,localVariables:U,localized:bl,name:i.String().default(\"Text\"),states:gl,style:On,text:i.String().default(\"New Text\")}).required()});var Mn=i.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,borderTopLeftRadius:Lr,borderTopRightRadius:Or,borderBottomRightRadius:Mr,borderBottomLeftRadius:jr,opacity:Y,overflow:Oe,zIndex:Me,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),vl=Dr(Mn.partial({stripDefaults:!0}).default({})),Sl=i.Array(vl).default([]),Tl=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Xe=i.TreeNode(\"view\",{children:()=>[i.TreeNodeSelf,Je,we,xe,Ze],data:i.Struct({interactions:Ot,linkedVariables:F,localVariables:U,localized:Tl,name:i.String().default(\"View\"),states:Sl,style:Mn}).required()});var jn=i.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,borderTopLeftRadius:Lr,borderTopRightRadius:Or,borderBottomRightRadius:Mr,borderBottomLeftRadius:jr,opacity:Y,overflow:Oe,zIndex:Me,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),xl=Dr(jn.partial({stripDefaults:!0}).default({})),wl=i.Array(xl).default([]),Pl=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Vl=i.Struct({horizontal:i.Boolean().default(!1),interactions:Ot,linkedVariables:F,localVariables:U,localized:Pl,name:i.String().default(\"ScrollView\"),showsScrollIndicator:i.Boolean().default(!0),states:wl,style:jn}).required(),Je=i.TreeNode(\"scrollView\",{children:()=>[Xe,i.TreeNodeSelf,we,xe,Ze],data:Vl});var Nl=i.Struct({actionBindings:i.Array(i.Struct({action:Cn.required(),name:i.String().required()})).default([]),componentSource:i.String().default(\"catalog\"),componentPath:i.String().default(\"\"),componentSlug:i.String().default(\"\"),componentVersion:i.Number().default(0),contentHash:i.String().default(\"\"),name:i.String().default(\"Component\"),previewState:i.String().default(\"default\"),props:i.Array(i.Struct({name:i.String().required(),value:Rn.required(),localizedValues:i.Array(i.Struct({locale:i.String().required(),value:Er.required()})).default([])})).default([])}).required(),Ze=i.TreeNode(\"component\",{children:()=>[Xe,Je,we,xe,i.TreeNodeSelf],data:Nl});var Bn=i.TreeNode(\"library\",{children:()=>[qn],data:i.Struct({}).required()});var Hn=i.Struct({x:Wi,y:Ki,width:i.Number().default(375),height:i.Number().default(812),minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:ie,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,backgroundColor:Pt.default(\"rgba(255, 255, 255, 1)\"),backgroundEnabled:Vt.default(!0),backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Ae,borderRightWidth:Re,borderBottomWidth:Ce,borderLeftWidth:qe,borderColor:Ee,borderStyle:De,borderEnabled:Le,opacity:Y,overflow:Oe,zIndex:Me,display:X,shadowEnabled:je,shadowColor:Be,shadowOffsetX:He,shadowOffsetY:Ue,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),_l=Ie(Hn.partial({stripDefaults:!0}).default({})),kl=i.Array(_l).default([]),Il=i.Array(i.Struct({locale:i.String().required(),overrides:i.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Un=i.TreeNode(\"screen\",{children:()=>[Xe,Je,we,xe,Ze],data:i.Struct({linkedVariables:F,localVariables:U,localized:Il,name:i.String().default(\"Screen\"),states:kl,style:Hn}).required()});var Al=i.Struct({defaultLocale:i.String().default(\"en\"),locales:i.Array(i.Struct({tag:i.String().required()})).default([])}).default({}),Fn=i.TreeNode(\"root\",{children:()=>[Un,Bn],data:i.Struct({localization:Al,name:i.String()}).required()});var My=i.Tree({root:Fn});function Br(e){return e!==null&&typeof e==\"object\"&&\"id\"in e&&\"pos\"in e&&\"value\"in e?e.value:e}function zn(e){let t=e.indexOf(\"-\");return t===-1?e:e.slice(0,t)}function ua(e,t,r){let n=e.text,o=e.localized;if(t==null||t===r||o===void 0||o.length===0)return n;let a=t.toLowerCase(),d=zn(a),l;for(let s of o){let u=Br(s);if(u===void 0)continue;let f=u.overrides?.text;if(f===void 0||f===\"\")continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}function ca(e,t,r){let n=e.style.backgroundImage,o=e.localized;if(t==null||t===r||o===void 0||o.length===0)return n;let a=t.toLowerCase(),d=zn(a),l;for(let s of o){let u=Br(s);if(u===void 0)continue;let f=u.overrides?.backgroundImage;if(f===void 0)continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}var eh=i.Struct({cursor:i.Struct({x:i.Number().required(),y:i.Number().required()}),name:i.String(),selectedNodeIds:i.Array(i.String()).default([]),user:i.Struct({color:i.String().required(),name:i.String().required()}).required()});function At(e){let{locale:t,defaultLocale:r}=te();return ca(e,t,r)}function fa({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=At(e.data),o=Xt(n===e.data.style.backgroundImage?r:{...r,backgroundImage:n}),a=Jt(r);return b(\"div\",{\"data-node-id\":e.id,style:o,children:b(\"div\",{style:a,children:t})})}function Hr(e,t,r){let{getNodeVariables:n,setNodeVariable:o,callbacks:a}=te(),d=n(e),l=j(()=>({...a,onSetVariable:(f,c)=>{o(e,f,c)}}),[a,e,o]),s=j(()=>t.filter(f=>f.value?.trigger?.type===\"click\"),[t]),u=ee(()=>{for(let f of s){let c=f.value;if(!c?.action)continue;let m=f.id??c.id;if(!m)continue;let N=en(m,r,d)??c.action;tn(N,d,l)}},[s,r,d,l]);if(s.length!==0)return u}function pa({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=Hr(e.id,e.data.interactions,e.data.states),o=At(e.data),a=Gt(o===e.data.style.backgroundImage?r:{...r,backgroundImage:o},{horizontal:e.data.horizontal,showsScrollIndicator:e.data.showsScrollIndicator});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function ma({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=Zt(r),o=e.data.viewBox,a=`${o.minX} ${o.minY} ${o.width} ${o.height}`;return b(\"div\",{\"data-node-id\":e.id,style:n,children:b(\"svg\",{height:\"100%\",preserveAspectRatio:r.preserveAspectRatio,style:{display:\"block\"},viewBox:a,width:\"100%\",children:t})})}function ya({node:e}){let t=$(e.id,e.data.style,e.data.states),r=Qt(t),{locale:n,defaultLocale:o}=te();return b(\"span\",{\"data-node-id\":e.id,style:r,children:ua(e.data,n,o)})}function ha({node:e,children:t}){let r=$(e.id,e.data.style,e.data.states),n=Hr(e.id,e.data.interactions,e.data.states),o=At(e.data),a=nt(o===e.data.style.backgroundImage?r:{...r,backgroundImage:o});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function ga({snapshot:e,componentArtifacts:t,locale:r}){return b(qo,{componentArtifacts:t,locale:r,snapshot:e,children:b(ba,{node:e})})}var Rl={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",textAlign:\"center\"};function Cl({node:e}){return b(\"div\",{style:Rl,children:`Unsupported node type: ${String(e.type)}`})}function ba({node:e}){let t=(e.children??[]).map(r=>b(ba,{node:r},r.id));switch(e.type){case\"root\":return b(Q,{children:t});case\"screen\":return b(fa,{node:e,children:t});case\"view\":return b(ha,{node:e,children:t});case\"scrollView\":return b(pa,{node:e,children:t});case\"text\":return b(ya,{node:e});case\"shape\":return b(ma,{node:e,children:t});case\"path\":return b(Mo,{node:e});case\"component\":return b(Oo,{node:e,children:t});case\"library\":case\"codeComponent\":return null;default:return b(Cl,{node:e})}}var ql=\"__VOIDHASH_PAYWALL__\",va={products:[],variables:{}},El=e=>({products:e?.products??[],variables:e?.variables??{},locale:e?.locale,platform:e?.platform,defaultSelectedProductId:e?.defaultSelectedProductId}),Sa=()=>{if(typeof window>\"u\")return va;let e=window[ql];return e?El(e):va};function Ta(e){return Sa().locale??e}function Dl(e){let t;try{t=JSON.parse(e)}catch{return}if(!(typeof t!=\"object\"||t===null)){if(\"type\"in t)return{componentArtifacts:void 0,locale:void 0,snapshot:t};if(\"snapshot\"in t){let r=t;return{componentArtifacts:r.componentArtifacts,locale:r.locale,snapshot:r.snapshot}}}}function xa(){let e=document.getElementById(\"__PAYWALL_DATA__\");if(!e?.textContent)return;let t=document.getElementById(\"paywall-root\");if(!t)return;let r=Dl(e.textContent);r&&ao(b(ga,{componentArtifacts:r.componentArtifacts,locale:Ta(r.locale),snapshot:r.snapshot}),t)}document.readyState===\"loading\"?document.addEventListener(\"DOMContentLoaded\",xa):xa();})();\n";
+export const PAYWALL_RUNTIME_BUNDLE = "(()=>{var Yn=Object.defineProperty;var Ia=(e,t,r)=>t in e?Yn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Aa=(e,t)=>{for(var r in t)Yn(e,r,{get:t[r],enumerable:!0})};var p=(e,t,r)=>Ia(e,typeof t!=\"symbol\"?t+\"\":t,r);var Wt,k,Qn,Ra,Ne,Xn,ei,ti,$r,Bt,Ct,ri,Gr,Fr,zr,ni,$t={},Ft=[],Ca=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Kt=Array.isArray;function be(e,t){for(var r in t)e[r]=t[r];return e}function Yr(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function qa(e,t,r){var n,i,a,d={};for(a in t)a==\"key\"?n=t[a]:a==\"ref\"?i=t[a]:d[a]=t[a];if(arguments.length>2&&(d.children=arguments.length>3?Wt.call(arguments,2):r),typeof e==\"function\"&&e.defaultProps!=null)for(a in e.defaultProps)d[a]===void 0&&(d[a]=e.defaultProps[a]);return Ht(e,d,n,i,null)}function Ht(e,t,r,n,i){var a={type:e,props:t,key:r,ref:n,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:i??++Qn,__i:-1,__u:0};return i==null&&k.vnode!=null&&k.vnode(a),a}function Q(e){return e.children}function Ut(e,t){this.props=e,this.context=t}function rt(e,t){if(t==null)return e.__?rt(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if((r=e.__k[t])!=null&&r.__e!=null)return r.__e;return typeof e.type==\"function\"?rt(e):null}function Ea(e){if(e.__P&&e.__d){var t=e.__v,r=t.__e,n=[],i=[],a=be({},t);a.__v=t.__v+1,k.vnode&&k.vnode(a),Xr(e.__P,a,t,e.__n,e.__P.namespaceURI,32&t.__u?[r]:null,n,r??rt(t),!!(32&t.__u),i),a.__v=t.__v,a.__.__k[a.__i]=a,di(n,a,i),t.__e=t.__=null,a.__e!=r&&ii(a)}}function ii(e){if((e=e.__)!=null&&e.__c!=null)return e.__e=e.__c.base=null,e.__k.some(function(t){if(t!=null&&t.__e!=null)return e.__e=e.__c.base=t.__e}),ii(e)}function Wr(e){(!e.__d&&(e.__d=!0)&&Ne.push(e)&&!zt.__r++||Xn!=k.debounceRendering)&&((Xn=k.debounceRendering)||ei)(zt)}function zt(){try{for(var e,t=1;Ne.length;)Ne.length>t&&Ne.sort(ti),e=Ne.shift(),t=Ne.length,Ea(e)}finally{Ne.length=zt.__r=0}}function oi(e,t,r,n,i,a,d,l,s,u,f){var c,m,y,N,R,w,P,V=n&&n.__k||Ft,L=t.length;for(s=Da(r,t,V,s,L),c=0;c<L;c++)(y=r.__k[c])!=null&&(m=y.__i!=-1&&V[y.__i]||$t,y.__i=c,w=Xr(e,y,m,i,a,d,l,s,u,f),N=y.__e,y.ref&&m.ref!=y.ref&&(m.ref&&Jr(m.ref,null,y),f.push(y.ref,y.__c||N,y)),R==null&&N!=null&&(R=N),(P=!!(4&y.__u))||m.__k===y.__k?(s=ai(y,s,e,P),P&&m.__e&&(m.__e=null)):typeof y.type==\"function\"&&w!==void 0?s=w:N&&(s=N.nextSibling),y.__u&=-7);return r.__e=R,s}function Da(e,t,r,n,i){var a,d,l,s,u,f=r.length,c=f,m=0;for(e.__k=new Array(i),a=0;a<i;a++)(d=t[a])!=null&&typeof d!=\"boolean\"&&typeof d!=\"function\"?(typeof d==\"string\"||typeof d==\"number\"||typeof d==\"bigint\"||d.constructor==String?d=e.__k[a]=Ht(null,d,null,null,null):Kt(d)?d=e.__k[a]=Ht(Q,{children:d},null,null,null):d.constructor===void 0&&d.__b>0?d=e.__k[a]=Ht(d.type,d.props,d.key,d.ref?d.ref:null,d.__v):e.__k[a]=d,s=a+m,d.__=e,d.__b=e.__b+1,l=null,(u=d.__i=La(d,r,s,c))!=-1&&(c--,(l=r[u])&&(l.__u|=2)),l==null||l.__v==null?(u==-1&&(i>f?m--:i<f&&m++),typeof d.type!=\"function\"&&(d.__u|=4)):u!=s&&(u==s-1?m--:u==s+1?m++:(u>s?m--:m++,d.__u|=4))):e.__k[a]=null;if(c)for(a=0;a<f;a++)(l=r[a])!=null&&(2&l.__u)==0&&(l.__e==n&&(n=rt(l)),si(l,l));return n}function ai(e,t,r,n){var i,a;if(typeof e.type==\"function\"){for(i=e.__k,a=0;i&&a<i.length;a++)i[a]&&(i[a].__=e,t=ai(i[a],t,r,n));return t}e.__e!=t&&(n&&(t&&e.type&&!t.parentNode&&(t=rt(e)),r.insertBefore(e.__e,t||null)),t=e.__e);do t=t&&t.nextSibling;while(t!=null&&t.nodeType==8);return t}function La(e,t,r,n){var i,a,d,l=e.key,s=e.type,u=t[r],f=u!=null&&(2&u.__u)==0;if(u===null&&l==null||f&&l==u.key&&s==u.type)return r;if(n>(f?1:0)){for(i=r-1,a=r+1;i>=0||a<t.length;)if((u=t[d=i>=0?i--:a++])!=null&&(2&u.__u)==0&&l==u.key&&s==u.type)return d}return-1}function Jn(e,t,r){t[0]==\"-\"?e.setProperty(t,r??\"\"):e[t]=r==null?\"\":typeof r!=\"number\"||Ca.test(t)?r:r+\"px\"}function jt(e,t,r,n,i){var a,d;e:if(t==\"style\")if(typeof r==\"string\")e.style.cssText=r;else{if(typeof n==\"string\"&&(e.style.cssText=n=\"\"),n)for(t in n)r&&t in r||Jn(e.style,t,\"\");if(r)for(t in r)n&&r[t]==n[t]||Jn(e.style,t,r[t])}else if(t[0]==\"o\"&&t[1]==\"n\")a=t!=(t=t.replace(ri,\"$1\")),d=t.toLowerCase(),t=d in e||t==\"onFocusOut\"||t==\"onFocusIn\"?d.slice(2):t.slice(2),e.l||(e.l={}),e.l[t+a]=r,r?n?r[Ct]=n[Ct]:(r[Ct]=Gr,e.addEventListener(t,a?zr:Fr,a)):e.removeEventListener(t,a?zr:Fr,a);else{if(i==\"http://www.w3.org/2000/svg\")t=t.replace(/xlink(H|:h)/,\"h\").replace(/sName$/,\"s\");else if(t!=\"width\"&&t!=\"height\"&&t!=\"href\"&&t!=\"list\"&&t!=\"form\"&&t!=\"tabIndex\"&&t!=\"download\"&&t!=\"rowSpan\"&&t!=\"colSpan\"&&t!=\"role\"&&t!=\"popover\"&&t in e)try{e[t]=r??\"\";break e}catch{}typeof r==\"function\"||(r==null||r===!1&&t[4]!=\"-\"?e.removeAttribute(t):e.setAttribute(t,t==\"popover\"&&r==1?\"\":r))}}function Zn(e){return function(t){if(this.l){var r=this.l[t.type+e];if(t[Bt]==null)t[Bt]=Gr++;else if(t[Bt]<r[Ct])return;return r(k.event?k.event(t):t)}}}function Xr(e,t,r,n,i,a,d,l,s,u){var f,c,m,y,N,R,w,P,V,L,z,Pe,et,Rt,tt,M=t.type;if(t.constructor!==void 0)return null;128&r.__u&&(s=!!(32&r.__u),a=[l=t.__e=r.__e]),(f=k.__b)&&f(t);e:if(typeof M==\"function\")try{if(P=t.props,V=M.prototype&&M.prototype.render,L=(f=M.contextType)&&n[f.__c],z=f?L?L.props.value:f.__:n,r.__c?w=(c=t.__c=r.__c).__=c.__E:(V?t.__c=c=new M(P,z):(t.__c=c=new Ut(P,z),c.constructor=M,c.render=Ma),L&&L.sub(c),c.state||(c.state={}),c.__n=n,m=c.__d=!0,c.__h=[],c._sb=[]),V&&c.__s==null&&(c.__s=c.state),V&&M.getDerivedStateFromProps!=null&&(c.__s==c.state&&(c.__s=be({},c.__s)),be(c.__s,M.getDerivedStateFromProps(P,c.__s))),y=c.props,N=c.state,c.__v=t,m)V&&M.getDerivedStateFromProps==null&&c.componentWillMount!=null&&c.componentWillMount(),V&&c.componentDidMount!=null&&c.__h.push(c.componentDidMount);else{if(V&&M.getDerivedStateFromProps==null&&P!==y&&c.componentWillReceiveProps!=null&&c.componentWillReceiveProps(P,z),t.__v==r.__v||!c.__e&&c.shouldComponentUpdate!=null&&c.shouldComponentUpdate(P,c.__s,z)===!1){t.__v!=r.__v&&(c.props=P,c.state=c.__s,c.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(Ve){Ve&&(Ve.__=t)}),Ft.push.apply(c.__h,c._sb),c._sb=[],c.__h.length&&d.push(c);break e}c.componentWillUpdate!=null&&c.componentWillUpdate(P,c.__s,z),V&&c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(y,N,R)})}if(c.context=z,c.props=P,c.__P=e,c.__e=!1,Pe=k.__r,et=0,V)c.state=c.__s,c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),Ft.push.apply(c.__h,c._sb),c._sb=[];else do c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),c.state=c.__s;while(c.__d&&++et<25);c.state=c.__s,c.getChildContext!=null&&(n=be(be({},n),c.getChildContext())),V&&!m&&c.getSnapshotBeforeUpdate!=null&&(R=c.getSnapshotBeforeUpdate(y,N)),Rt=f!=null&&f.type===Q&&f.key==null?li(f.props.children):f,l=oi(e,Kt(Rt)?Rt:[Rt],t,r,n,i,a,d,l,s,u),c.base=t.__e,t.__u&=-161,c.__h.length&&d.push(c),w&&(c.__E=c.__=null)}catch(Ve){if(t.__v=null,s||a!=null)if(Ve.then){for(t.__u|=s?160:128;l&&l.nodeType==8&&l.nextSibling;)l=l.nextSibling;a[a.indexOf(l)]=null,t.__e=l}else{for(tt=a.length;tt--;)Yr(a[tt]);Kr(t)}else t.__e=r.__e,t.__k=r.__k,Ve.then||Kr(t);k.__e(Ve,t,r)}else a==null&&t.__v==r.__v?(t.__k=r.__k,t.__e=r.__e):l=t.__e=Oa(r.__e,t,r,n,i,a,d,s,u);return(f=k.diffed)&&f(t),128&t.__u?void 0:l}function Kr(e){e&&(e.__c&&(e.__c.__e=!0),e.__k&&e.__k.some(Kr))}function di(e,t,r){for(var n=0;n<r.length;n++)Jr(r[n],r[++n],r[++n]);k.__c&&k.__c(t,e),e.some(function(i){try{e=i.__h,i.__h=[],e.some(function(a){a.call(i)})}catch(a){k.__e(a,i.__v)}})}function li(e){return typeof e!=\"object\"||e==null||e.__b>0?e:Kt(e)?e.map(li):e.constructor!==void 0?null:be({},e)}function Oa(e,t,r,n,i,a,d,l,s){var u,f,c,m,y,N,R,w=r.props||$t,P=t.props,V=t.type;if(V==\"svg\"?i=\"http://www.w3.org/2000/svg\":V==\"math\"?i=\"http://www.w3.org/1998/Math/MathML\":i||(i=\"http://www.w3.org/1999/xhtml\"),a!=null){for(u=0;u<a.length;u++)if((y=a[u])&&\"setAttribute\"in y==!!V&&(V?y.localName==V:y.nodeType==3)){e=y,a[u]=null;break}}if(e==null){if(V==null)return document.createTextNode(P);e=document.createElementNS(i,V,P.is&&P),l&&(k.__m&&k.__m(t,a),l=!1),a=null}if(V==null)w===P||l&&e.data==P||(e.data=P);else{if(a=V==\"textarea\"&&P.defaultValue!=null?null:a&&Wt.call(e.childNodes),!l&&a!=null)for(w={},u=0;u<e.attributes.length;u++)w[(y=e.attributes[u]).name]=y.value;for(u in w)y=w[u],u==\"dangerouslySetInnerHTML\"?c=y:u==\"children\"||u in P||u==\"value\"&&\"defaultValue\"in P||u==\"checked\"&&\"defaultChecked\"in P||jt(e,u,null,y,i);for(u in P)y=P[u],u==\"children\"?m=y:u==\"dangerouslySetInnerHTML\"?f=y:u==\"value\"?N=y:u==\"checked\"?R=y:l&&typeof y!=\"function\"||w[u]===y||jt(e,u,y,w[u],i);if(f)l||c&&(f.__html==c.__html||f.__html==e.innerHTML)||(e.innerHTML=f.__html),t.__k=[];else if(c&&(e.innerHTML=\"\"),oi(t.type==\"template\"?e.content:e,Kt(m)?m:[m],t,r,n,V==\"foreignObject\"?\"http://www.w3.org/1999/xhtml\":i,a,d,a?a[0]:r.__k&&rt(r,0),l,s),a!=null)for(u=a.length;u--;)Yr(a[u]);l&&V!=\"textarea\"||(u=\"value\",V==\"progress\"&&N==null?e.removeAttribute(\"value\"):N!=null&&(N!==e[u]||V==\"progress\"&&!N||V==\"option\"&&N!=w[u])&&jt(e,u,N,w[u],i),u=\"checked\",R!=null&&R!=e[u]&&jt(e,u,R,w[u],i))}return e}function Jr(e,t,r){try{if(typeof e==\"function\"){var n=typeof e.__u==\"function\";n&&e.__u(),n&&t==null||(e.__u=e(t))}else e.current=t}catch(i){k.__e(i,r)}}function si(e,t,r){var n,i;if(k.unmount&&k.unmount(e),(n=e.ref)&&(n.current&&n.current!=e.__e||Jr(n,null,t)),(n=e.__c)!=null){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(a){k.__e(a,t)}n.base=n.__P=null}if(n=e.__k)for(i=0;i<n.length;i++)n[i]&&si(n[i],t,r||typeof e.type!=\"function\");r||Yr(e.__e),e.__c=e.__=e.__e=void 0}function Ma(e,t,r){return this.constructor(e,r)}function ui(e,t,r){var n,i,a,d;t==document&&(t=document.documentElement),k.__&&k.__(e,t),i=(n=typeof r==\"function\")?null:r&&r.__k||t.__k,a=[],d=[],Xr(t,e=(!n&&r||t).__k=qa(Q,null,[e]),i||$t,$t,t.namespaceURI,!n&&r?[r]:i?null:t.firstChild?Wt.call(t.childNodes):null,a,!n&&r?r:i?i.__e:t.firstChild,n,d),di(a,e,d)}function ci(e){function t(r){var n,i;return this.getChildContext||(n=new Set,(i={})[t.__c]=this,this.getChildContext=function(){return i},this.componentWillUnmount=function(){n=null},this.shouldComponentUpdate=function(a){this.props.value!=a.value&&n.forEach(function(d){d.__e=!0,Wr(d)})},this.sub=function(a){n.add(a);var d=a.componentWillUnmount;a.componentWillUnmount=function(){n&&n.delete(a),d&&d.call(a)}}),r.children}return t.__c=\"__cC\"+ni++,t.__=e,t.Provider=t.__l=(t.Consumer=function(r,n){return r.children(n)}).contextType=t,t}Wt=Ft.slice,k={__e:function(e,t,r,n){for(var i,a,d;t=t.__;)if((i=t.__c)&&!i.__)try{if((a=i.constructor)&&a.getDerivedStateFromError!=null&&(i.setState(a.getDerivedStateFromError(e)),d=i.__d),i.componentDidCatch!=null&&(i.componentDidCatch(e,n||{}),d=i.__d),d)return i.__E=i}catch(l){e=l}throw e}},Qn=0,Ra=function(e){return e!=null&&e.constructor===void 0},Ut.prototype.setState=function(e,t){var r;r=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=be({},this.state),typeof e==\"function\"&&(e=e(be({},r),this.props)),e&&be(r,e),e!=null&&this.__v&&(t&&this._sb.push(t),Wr(this))},Ut.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),Wr(this))},Ut.prototype.render=Q,Ne=[],ei=typeof Promise==\"function\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,ti=function(e,t){return e.__v.__b-t.__v.__b},zt.__r=0,$r=Math.random().toString(8),Bt=\"__d\"+$r,Ct=\"__a\"+$r,ri=/(PointerCapture)$|Capture$/i,Gr=0,Fr=Zn(!1),zr=Zn(!0),ni=0;function fi(e){if(e==null)return;let t=\"value\"in e&&typeof e.value==\"object\"?e.value:e;if(!(t==null||typeof t.color!=\"string\"))return{color:t.color,position:t.position??0}}var pi={center:\"auto\",contain:\"contain\",cover:\"cover\",stretch:\"100% 100%\"};function mi(e,t){let r=t.map(i=>`<stop offset='${i.position}' stop-color='${i.color}'/>`).join(\"\");return`<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${e.kind===\"radial\"?(()=>{let i=Math.hypot(e.endX-e.startX,e.endY-e.startY);return`<radialGradient id='g' cx='${e.startX}' cy='${e.startY}' r='${i}'>${r}</radialGradient>`})():`<linearGradient id='g' x1='${e.startX}' y1='${e.startY}' x2='${e.endX}' y2='${e.endY}'>${r}</linearGradient>`}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`}function nt(e){if(!e.backgroundEnabled)return{backgroundColor:\"transparent\"};let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return{backgroundColor:e.backgroundColor}}function Gt(e){let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor}}function g(e){return e===0?\"0\":`${e}px`}function We(e){return e===\"auto\"||e===void 0?\"auto\":g(e)}function it(e){let t={alignItems:e.alignItems,boxSizing:\"border-box\",display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:We(e.height),justifyContent:e.justifyContent,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),position:e.position??\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),Object.assign(t,nt(e)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),t.borderTopLeftRadius=g(e.borderTopLeftRadius??0),t.borderTopRightRadius=g(e.borderTopRightRadius??0),t.borderBottomRightRadius=g(e.borderBottomRightRadius??0),t.borderBottomLeftRadius=g(e.borderBottomLeftRadius??0),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Yt(e,{horizontal:t,showsScrollIndicator:r}){let n=it(e);return n.minHeight??(n.minHeight=0),n.minWidth??(n.minWidth=0),n.WebkitOverflowScrolling=\"touch\",t?(n.flexDirection=\"row\",n.overflowX=\"auto\",n.overflowY=\"hidden\"):(n.overflowX=\"hidden\",n.overflowY=\"auto\"),r||(n.scrollbarWidth=\"none\"),n}function Xt(e){return{fill:e.fillEnabled?e.fillColor:\"none\",fillRule:e.fillRule,fillOpacity:e.fillOpacity,stroke:e.strokeEnabled?e.strokeColor:\"none\",strokeWidth:e.strokeWidth,strokeOpacity:e.strokeOpacity,strokeLinecap:e.strokeLinecap,strokeLinejoin:e.strokeLinejoin,opacity:e.opacity}}function Jt(e){let t={boxSizing:\"border-box\",height:\"100vh\",overflow:\"hidden\",width:\"100vw\"};return Object.assign(t,nt(e)),t}function Zt(e){return{alignItems:e.alignItems,display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:\"100vh\",justifyContent:e.justifyContent,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),width:\"100vw\"}}function Qt(e){let t={boxSizing:\"border-box\",display:e.display===\"none\"?\"none\":\"block\",height:We(e.height),marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,position:\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function er(e){let t={color:e.color,display:e.display,fontSize:g(e.fontSize),fontWeight:e.fontWeight,letterSpacing:g(e.letterSpacing),lineHeight:e.lineHeight,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,position:e.position??\"relative\",textAlign:e.textAlign};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Zr(e){let t={stores:new Map,parents:new Map};return yi(e,null,t),t}function yi(e,t,r){r.parents.set(e.id,t),hi(e,r.stores);for(let n of e.children)yi(n,e.id,r)}function tr(e,t,r,n){let i=new Set,a=r;for(;a!==null&&!i.has(a);){if(i.add(a),t(a)?.has(n))return a;a=e.get(a)??null}}function Qr(e,t,r){return{get:n=>{let i=tr(e,t,r,n);if(i!==void 0)return t(i)?.get(n)}}}function hi(e,t){let r=e.data;if(r!==void 0&&\"localVariables\"in r&&r.localVariables.length>0){let n=new Map,i=new Map;for(let a of r.localVariables){let d=a.value;d?.id===void 0||d.value===void 0||(n.set(d.id,d.value),n.set(a.id,d.value),i.set(a.id,d.id),i.set(d.id,a.id))}n.size>0&&t.set(e.id,{store:n,aliases:i})}for(let n of e.children)hi(n,t)}function vi(e){if(e)return typeof e==\"object\"&&e!==null&&\"id\"in e&&\"value\"in e&&!(\"type\"in e)?e.value:e}function rr(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.some(r=>{let n=vi(r);return n?ja(n,t):!1})}function ja(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.every(r=>{let n=vi(r);return n?Ba(n,t):!1})}function gi(e,t){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}function bi(e){switch(e.key){case\"boolean\":return e.value??!1;case\"number\":return e.value??0;case\"string\":return e.value??\"\";case\"product\":return e.value?.productId??\"\";default:return\"\"}}function Ba(e,t){if(!e?.value?.left||!e?.value?.right)return!1;let r=gi(e.value.left,t),n=gi(e.value.right,t);if(r===void 0||n===void 0)return!1;let i=bi(r),a=bi(n);switch(e.type){case\"equals\":return i===a;case\"not-equals\":return i!==a;case\"greater-than\":return i>a;case\"greater-than-or-equal\":return i>=a;case\"less-than\":return i<a;case\"less-than-or-equal\":return i<=a;default:return!1}}function en(e,t,r){let n={...e};for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=a.overrides.style;if(d)for(let l of Object.keys(d))d[l]!==void 0&&(n[l]=d[l])}}return n}function tn(e,t,r){let n;for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=\"actions\"in a.overrides?a.overrides.actions:void 0;if(d)for(let l of d){let s=\"value\"in l?l.value:l;s&&s.interactionId===e&&(n=s.action)}}}return n}function Ha(e,t){if(e?.type){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}}function Ua(e,t){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(!e.variableId)return;let r=t.get(e.variableId);if(r?.key===\"product\")return r.value?.productId}function rn(e,t,r){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let n=e.payload;if(!n?.newValue||!n.variableId)break;let i=Ha(n.newValue,t);i!==void 0&&r.onSetVariable(n.variableId,i);break}case\"close-paywall\":r.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let n=Ua(e.payload,t);n!==void 0&&r.onPurchaseProduct(n);break}}}function $a(e,t){switch(t.key){case\"string\":return typeof e==\"string\"?{key:\"string\",value:e}:void 0;case\"number\":return typeof e==\"number\"?{key:\"number\",value:e}:void 0;case\"boolean\":return typeof e==\"boolean\"?{key:\"boolean\",value:e}:void 0;case\"product\":return typeof e==\"string\"||typeof e==\"number\"||typeof e==\"boolean\"?{key:\"product\",value:{productId:String(e)}}:void 0;default:return}}function Fa(e,t,r,n){if(!e?.type)return;if(e.type===\"literal\")return e.value;if(e.type===\"variable-reference\")return!e.value||!(\"id\"in e.value)||!e.value.id?void 0:r.get(e.value.id);if(!e.value||!(\"field\"in e.value)||!e.value.field)return;let i=t?.[e.value.field];if(i===void 0)return;let a=r.get(n);if(a!==void 0)return $a(i,a)}function za(e,t,r){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(e.type===\"variable-reference\"){if(!e.variableId)return;let i=r.get(e.variableId);return i?.key===\"product\"?i.value?.productId:void 0}if(!e.field)return;let n=t?.[e.field];return typeof n==\"string\"?n:void 0}function nn(e,t,r,n){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let i=e.payload;if(!i?.newValue||!i.variableId)break;let a=Fa(i.newValue,t,r,i.variableId);a!==void 0&&n.onSetVariable(i.variableId,a);break}case\"close-paywall\":n.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let i=za(e.payload,t,r);i!==void 0&&n.onPurchaseProduct(i);break}}}var on={alignItems:\"stretch\",boxSizing:\"border-box\",display:\"flex\",flexBasis:\"auto\",flexDirection:\"column\",flexShrink:0,margin:0,minHeight:0,minWidth:0,padding:0,position:\"relative\"},Wa={boxSizing:\"border-box\",display:\"block\",margin:0,padding:0,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"},Ka={boxSizing:\"border-box\",display:\"block\"},Ga={...on,cursor:\"pointer\",touchAction:\"manipulation\",userSelect:\"none\"},Ya={...on,overflowX:\"hidden\",overflowY:\"auto\",WebkitOverflowScrolling:\"touch\"},Xa={image:Ka,pressable:Ga,scroll:Ya,text:Wa,view:on},Ti=[\"flex\",\"gap\"],Ja=[\"backgroundType\",\"backgroundGradient\",\"backgroundImage\"],Za=new Set([...Ti,...Ja]),Qa=new Set([\"aspectRatio\",\"flex\",\"flexGrow\",\"flexShrink\",\"fontWeight\",\"opacity\",\"zIndex\"]);function Si(e,t){return typeof t==\"number\"&&!Qa.has(e)?t===0?0:`${t}px`:t}var ed={center:\"none\",contain:\"contain\",cover:\"cover\",stretch:\"fill\"};function nr(e){return ed[e??\"cover\"]}function an(e){if(!e)return{};let t=[];return(e.x!==void 0||e.y!==void 0)&&t.push(`translate3d(${e.x??0}px, ${e.y??0}px, 0)`),e.rotate!==void 0&&t.push(`rotate(${e.rotate}deg)`),e.scale!==void 0&&t.push(`scale(${e.scale})`),e.scaleX!==void 0&&t.push(`scaleX(${e.scaleX})`),e.scaleY!==void 0&&t.push(`scaleY(${e.scaleY})`),{...e.opacity===void 0?{}:{opacity:e.opacity},...e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor},...t.length===0?{}:{transform:t.join(\" \")},...e.transformOrigin===void 0?{}:{transformOrigin:`${e.transformOrigin.x*100}% ${e.transformOrigin.y*100}%`}}}function ir(e,t,r){let n={...Xa[t]},i=(d,l)=>{delete n[d],n[d]=Si(d,l)};for(let d of Ti){let l=e[d];l!==void 0&&(n[d]=Si(d,l))}for(let[d,l]of Object.entries(e))l===void 0||Za.has(d)||typeof l!=\"string\"&&typeof l!=\"number\"||i(d,l);return(e.borderTopWidth!==void 0||e.borderRightWidth!==void 0||e.borderBottomWidth!==void 0||e.borderLeftWidth!==void 0||e.borderColor!==void 0)&&e.borderStyle===void 0&&(n.borderStyle=\"solid\"),(e.backgroundType===\"gradient\"||e.backgroundType===\"image\")&&(delete n.backgroundColor,Object.assign(n,Gt({backgroundColor:typeof e.backgroundColor==\"string\"?e.backgroundColor:void 0,backgroundType:e.backgroundType,backgroundGradient:e.backgroundGradient,backgroundImage:e.backgroundImage}))),Object.assign(n,an(r)),n}var qt,A,dn,xi,ar=0,Ai=[],C=k,wi=C.__b,Pi=C.__r,Vi=C.diffed,Ni=C.__c,_i=C.unmount,ki=C.__;function sn(e,t){C.__h&&C.__h(A,e,ar||t),ar=0;var r=A.__H||(A.__H={__:[],__h:[]});return e>=r.__.length&&r.__.push({}),r.__[e]}function Ri(e){return ar=1,td(qi,e)}function td(e,t,r){var n=sn(qt++,2);if(n.t=e,!n.__c&&(n.__=[r?r(t):qi(void 0,t),function(l){var s=n.__N?n.__N[0]:n.__[0],u=n.t(s,l);s!==u&&(n.__N=[u,n.__[1]],n.__c.setState({}))}],n.__c=A,!A.__f)){var i=function(l,s,u){if(!n.__c.__H)return!0;var f=n.__c.__H.__.filter(function(m){return m.__c});if(f.every(function(m){return!m.__N}))return!a||a.call(this,l,s,u);var c=n.__c.props!==l;return f.some(function(m){if(m.__N){var y=m.__[0];m.__=m.__N,m.__N=void 0,y!==m.__[0]&&(c=!0)}}),a&&a.call(this,l,s,u)||c};A.__f=!0;var a=A.shouldComponentUpdate,d=A.componentWillUpdate;A.componentWillUpdate=function(l,s,u){if(this.__e){var f=a;a=void 0,i(l,s,u),a=f}d&&d.call(this,l,s,u)},A.shouldComponentUpdate=i}return n.__N||n.__}function j(e,t){var r=sn(qt++,7);return id(r.__H,t)&&(r.__=e(),r.__H=t,r.__h=e),r.__}function ee(e,t){return ar=8,j(function(){return e},t)}function Ci(e){var t=A.context[e.__c],r=sn(qt++,9);return r.c=e,t?(r.__==null&&(r.__=!0,t.sub(A)),t.props.value):e.__}function rd(){for(var e;e=Ai.shift();){var t=e.__H;if(e.__P&&t)try{t.__h.some(or),t.__h.some(ln),t.__h=[]}catch(r){t.__h=[],C.__e(r,e.__v)}}}C.__b=function(e){A=null,wi&&wi(e)},C.__=function(e,t){e&&t.__k&&t.__k.__m&&(e.__m=t.__k.__m),ki&&ki(e,t)},C.__r=function(e){Pi&&Pi(e),qt=0;var t=(A=e.__c).__H;t&&(dn===A?(t.__h=[],A.__h=[],t.__.some(function(r){r.__N&&(r.__=r.__N),r.u=r.__N=void 0})):(t.__h.some(or),t.__h.some(ln),t.__h=[],qt=0)),dn=A},C.diffed=function(e){Vi&&Vi(e);var t=e.__c;t&&t.__H&&(t.__H.__h.length&&(Ai.push(t)!==1&&xi===C.requestAnimationFrame||((xi=C.requestAnimationFrame)||nd)(rd)),t.__H.__.some(function(r){r.u&&(r.__H=r.u),r.u=void 0})),dn=A=null},C.__c=function(e,t){t.some(function(r){try{r.__h.some(or),r.__h=r.__h.filter(function(n){return!n.__||ln(n)})}catch(n){t.some(function(i){i.__h&&(i.__h=[])}),t=[],C.__e(n,r.__v)}}),Ni&&Ni(e,t)},C.unmount=function(e){_i&&_i(e);var t,r=e.__c;r&&r.__H&&(r.__H.__.some(function(n){try{or(n)}catch(i){t=i}}),r.__H=void 0,t&&C.__e(t,r.__v))};var Ii=typeof requestAnimationFrame==\"function\";function nd(e){var t,r=function(){clearTimeout(n),Ii&&cancelAnimationFrame(t),setTimeout(e)},n=setTimeout(r,35);Ii&&(t=requestAnimationFrame(r))}function or(e){var t=A,r=e.__c;typeof r==\"function\"&&(e.__c=void 0,r()),A=t}function ln(e){var t=A;e.__c=e.__(),A=t}function id(e,t){return!e||e.length!==t.length||t.some(function(r,n){return r!==e[n]})}function qi(e,t){return typeof t==\"function\"?t(e):t}var od=0;function b(e,t,r,n,i,a){t||(t={});var d,l,s=t;if(\"ref\"in s)for(l in s={},t)l==\"ref\"?d=t[l]:s[l]=t[l];var u={type:e,props:s,key:r,ref:d,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:--od,__i:-1,__u:0,__source:i,__self:a};if(typeof e==\"function\"&&(d=e.defaultProps))for(l in d)s[l]===void 0&&(s[l]=d[l]);return k.vnode&&k.vnode(u),u}var ad=new Map,Di=ci(null);function Ei(e){let t=JSON.stringify(e);window.ReactNativeWebView?window.ReactNativeWebView.postMessage(t):window.parent.postMessage(e,\"*\")}function Li({snapshot:e,componentArtifacts:t,locale:r,children:n}){let i=j(()=>Zr(e),[e]),a=(e.type===\"root\"?e.data.localization?.defaultLocale:void 0)??\"en\",[d,l]=Ri(()=>{let w=new Map;for(let[P,{store:V}]of i.stores)w.set(P,V);return w}),s=j(()=>new Map,[i,d]),u=ee(w=>{let P=s.get(w);if(P)return P;let V=Qr(i.parents,L=>d.get(L),w);return s.set(w,V),V},[s,d,i]),f=ee((w,P,V)=>{l(L=>{let z=tr(i.parents,Ve=>L.get(Ve),w,P);if(z===void 0)return L;let Pe=L.get(z);if(!Pe)return L;let et=new Map(Pe);et.set(P,V);let tt=i.stores.get(z)?.aliases?.get(P);tt&&et.set(tt,V);let M=new Map(L);return M.set(z,et),M})},[i]),c=ee(()=>{Ei({type:\"paywall:close\"})},[]),m=ee(w=>{Ei({type:\"paywall:purchase\",productId:w})},[]),y=ee((w,P)=>{console.warn(`onSetVariable called directly for \"${w}\" without node context. Use the scoped callback from useInteractions instead.`)},[]),N=j(()=>({onClosePaywall:c,onPurchaseProduct:m,onSetVariable:y}),[c,m,y]),R=j(()=>({getNodeVariables:u,setNodeVariable:f,callbacks:N,componentArtifacts:t,locale:r,defaultLocale:a}),[u,f,N,t,r,a]);return b(Di.Provider,{value:R,children:n})}function te(){let e=Ci(Di);return e||{getNodeVariables:()=>ad,setNodeVariable:()=>{},callbacks:{onClosePaywall:()=>{},onPurchaseProduct:()=>{},onSetVariable:()=>{}},componentArtifacts:void 0,locale:void 0,defaultLocale:\"en\"}}var dd={alignSelf:\"flex-start\",backgroundColor:\"#18181b\",borderRadius:\"999px\",boxSizing:\"border-box\",color:\"#fafafa\",display:\"inline-flex\",fontFamily:\"inherit\",fontSize:\"11px\",fontWeight:600,lineHeight:\"16px\",padding:\"2px 8px\"};function Oi({props:e}){let t=typeof e.label==\"string\"?e.label:\"New\";return b(\"span\",{style:dd,children:t})}var Mi={\"sample-badge\":Oi};function ji(e,t){let r={};for(let n of e){let i=n.value;if(!i?.name)continue;let a=i.value;if(a?.type){if(a.type===\"literal\"){a.value&&(r[i.name]=a.value.value);continue}if(a.type===\"variable-reference\"){if(!a.value||!(\"id\"in a.value)||!a.value.id)continue;let d=t.get(a.value.id);d!==void 0&&(r[i.name]=d.value)}}}return r}var un={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontFamily:\"inherit\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",position:\"relative\",textAlign:\"center\"};function dr(e,t,r){return{...ir(e,t,r)}}function ld(e,t){if(!e)return;for(let n of[t,\"default\"]){let i=e[n];if(i)return i}let r=Object.keys(e)[0];return r===void 0?void 0:e[r]}function cn({node:e,slot:t,fireAction:r}){switch(e.type){case\"view\":case\"scroll\":return b(\"div\",{style:dr(e.style,e.type,e.motion),children:e.children.map((n,i)=>b(cn,{fireAction:r,node:n,slot:t},i))});case\"pressable\":{let n=e.action;return b(\"div\",{onClick:n===void 0?void 0:()=>r(n),style:dr(e.style,\"pressable\",e.motion),children:e.children.map((a,d)=>b(cn,{fireAction:r,node:a,slot:t},d))})}case\"text\":return b(\"div\",{style:dr(e.style,\"text\",e.motion),children:e.text});case\"image\":return b(\"img\",{alt:\"\",src:e.src,style:{...dr(e.style,\"image\",e.motion),objectFit:nr(e.resizeMode)??\"cover\"}});case\"slot\":return b(Q,{children:t});case\"placeholder\":return b(\"div\",{style:un,children:e.reason});default:return null}}function Bi({node:e,children:t}){let{getNodeVariables:r,setNodeVariable:n,callbacks:i,componentArtifacts:a}=te(),d=r(e.id),l=j(()=>({...i,onSetVariable:(m,y)=>{n(e.id,m,y)}}),[i,e.id,n]),s=ee((m,y)=>{let R=e.data.actionBindings.find(w=>w.value?.name===m)?.value?.action;R&&nn(R,y,d,l)},[e.data.actionBindings,d,l]);if(e.data.componentSource===\"builtin\"){let m=Mi[e.data.componentSlug];if(!m)return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${e.data.componentSlug}\" preview unavailable`});let y=ji(e.data.props,d);return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(m,{fireAction:s,props:y,children:t})})}let u=e.data.componentSource===\"local\"&&e.data.componentPath!==\"\",f=u?a?.localTrees?.[e.data.componentPath]:a?.trees[e.data.contentHash],c=ld(f,e.data.previewState);if(!c){let m=u?e.data.componentPath:e.data.componentSlug;return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${m}\" preview unavailable`})}return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(cn,{fireAction:s,node:c.root,slot:t})})}function W(e,t,r){let{getNodeVariables:n}=te(),i=n(e);return j(()=>en(t,r,i),[t,r,i])}function Hi({node:e}){let t=W(e.id,e.data.style,e.data.states),r=Xt(t);return b(\"path\",{d:e.data.d,fill:r.fill,fillOpacity:r.fillOpacity,fillRule:r.fillRule,opacity:r.opacity,stroke:r.stroke,strokeLinecap:r.strokeLinecap,strokeLinejoin:r.strokeLinejoin,strokeOpacity:r.strokeOpacity,strokeWidth:r.strokeWidth,transform:e.data.transform,vectorEffect:\"non-scaling-stroke\"})}var v={InvalidCommand:\"invalid_command\",InvalidPath:\"invalid_path\",TypeMismatch:\"type_mismatch\",MissingField:\"missing_field\",MissingArrayItem:\"missing_array_item\",MissingTreeNode:\"missing_tree_node\",DuplicateArrayItemId:\"duplicate_array_item_id\",DuplicateArrayPos:\"duplicate_array_pos\",DuplicateTreeNodeId:\"duplicate_tree_node_id\",DuplicateTreePos:\"duplicate_tree_pos\",InvalidTreeParent:\"invalid_tree_parent\",TreeCycle:\"tree_cycle\",TreeNodeValueMustBeObject:\"tree_node_value_must_be_object\",ReservedIdentifier:\"reserved_identifier\"},fn=class extends Error{constructor(r,n=\"\"){super(n?`${r}: ${n}`:r);p(this,\"code\");this.name=\"CoreError\",this.code=r}},S=(e,t)=>new fn(e,t);var I=\"$root\";var re=e=>({kind:\"string\",value:e}),ot=e=>({kind:\"number\",value:e}),at=e=>({kind:\"boolean\",value:e}),ne=(e={})=>({kind:\"object\",fields:e}),pn=(e=[])=>({kind:\"array\",items:e}),mn=(e=[])=>({kind:\"tree\",nodes:e}),Ui=e=>e?[...e]:[],_=e=>{switch(e.kind){case\"string\":case\"number\":case\"boolean\":return{...e};case\"object\":{let t={};for(let[r,n]of Object.entries(e.fields))t[r]=_(n);return{kind:\"object\",fields:t}}case\"array\":return{kind:\"array\",items:e.items.map(t=>({id:t.id,pos:t.pos,value:_(t.value)}))};case\"tree\":return{kind:\"tree\",nodes:e.nodes.map(t=>({id:t.id,parent:t.parent,pos:t.pos,value:_(t.value)}))}}};var lr=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,$i=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,yn=(e,t)=>e.parent<t.parent?-1:e.parent>t.parent?1:$i(e,t);var B=e=>{switch(e.kind){case\"string\":case\"boolean\":return;case\"number\":if(Number.isNaN(e.value)||!Number.isFinite(e.value))throw S(v.InvalidCommand,\"number must be finite\");return;case\"object\":for(let t of Object.values(e.fields))B(t);return;case\"array\":{let t=new Set,r=new Set;for(let n of e.items){if(t.has(n.id))throw S(v.DuplicateArrayItemId,\"duplicate array item id\");if(r.has(n.pos))throw S(v.DuplicateArrayPos,\"duplicate array position\");t.add(n.id),r.add(n.pos),B(n.value)}return}case\"tree\":{let t=new Set,r=new Map,n=new Map;for(let s of e.nodes){if(s.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(s.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(t.has(s.id))throw S(v.DuplicateTreeNodeId,\"duplicate tree node id\");t.add(s.id),r.set(s.id,s);let u=n.get(s.parent)??new Set;if(u.has(s.pos))throw S(v.DuplicateTreePos,\"duplicate tree position\");u.add(s.pos),n.set(s.parent,u),B(s.value)}for(let s of e.nodes)if(s.parent!==I&&!r.has(s.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");let i=new Set,a=new Set,d=s=>{if(i.has(s))throw S(v.TreeCycle,\"tree contains cycle\");if(a.has(s))return;i.add(s);let u=r.get(s);u&&u.parent!==I&&d(u.parent),i.delete(s),a.add(s)},l=[...r.keys()].sort();for(let s of l)d(s);return}}};var hn=(e,t)=>{B(e);let r=_(e);for(let n of t)sd(r,{...n,path:Ui(n.path)});return B(r),r},sd=(e,t)=>{switch(t.kind){case\"value.set\":ud(e,t.path,t.value);return;case\"object.set\":cd(e,t.path,t.key,t.value);return;case\"object.delete\":fd(e,t.path,t.key);return;case\"array.insert\":pd(e,t.path,t.item);return;case\"array.move\":md(e,t.path,t.id,t.pos);return;case\"array.delete\":yd(e,t.path,t.id);return;case\"tree.insert\":hd(e,t.path,t.node);return;case\"tree.move\":gd(e,t.path,t.id,t.parent,t.pos);return;case\"tree.delete\":bd(e,t.path,t.id);return}},ud=(e,t,r)=>{if(t.length===0){Fi(e,_(r));return}K(e,t,n=>{Fi(n,_(r))})},cd=(e,t,r,n)=>{if(!r)throw S(v.InvalidCommand,\"object.set requires key and value\");K(e,t,i=>{if(i.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");i.fields[r]=_(n)})},fd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"object.delete requires key\");K(e,t,n=>{if(n.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");if(!Object.hasOwn(n.fields,r))throw S(v.MissingField,\"object field does not exist\");delete n.fields[r]})},pd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");for(let i of n.items){if(i.id===r.id)throw S(v.DuplicateArrayItemId,\"array item id already exists\");if(i.pos===r.pos)throw S(v.DuplicateArrayPos,\"array item position already exists\")}n.items.push({id:r.id,pos:r.pos,value:_(r.value)}),n.items.sort(lr)})},md=(e,t,r,n)=>{if(!r||!n)throw S(v.InvalidCommand,\"array.move requires id and pos\");K(e,t,i=>{if(i.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let a=-1;for(let d=0;d<i.items.length;d+=1){let l=i.items[d];if(l?.id===r){a=d;continue}if(l?.pos===n)throw S(v.DuplicateArrayPos,\"array item position already exists\")}if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");i.items[a]={...i.items[a],pos:n},i.items.sort(lr)})},yd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"array.delete requires id\");K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let i=zi(n.items,r);if(i===-1)throw S(v.MissingArrayItem,\"array item does not exist\");n.items.splice(i,1)})},hd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(r.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(r.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(Et(n.nodes,r.id)!==-1)throw S(v.DuplicateTreeNodeId,\"tree node id already exists\");if(!Wi(n.nodes,r.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(Ki(n.nodes,r.parent,r.pos,\"\"))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");n.nodes.push({id:r.id,parent:r.parent,pos:r.pos,value:_(r.value)}),n.nodes.sort(yn)})},gd=(e,t,r,n,i)=>{if(!r||!n||!i)throw S(v.InvalidCommand,\"tree.move requires id, parent, and pos\");K(e,t,a=>{if(a.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");let d=Et(a.nodes,r);if(d===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");if(!Wi(a.nodes,n))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(n===r||vd(a.nodes,n,r))throw S(v.TreeCycle,\"tree move would create cycle\");if(Ki(a.nodes,n,i,r))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");a.nodes[d]={...a.nodes[d],parent:n,pos:i},a.nodes.sort(yn)})},bd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"tree.delete requires id\");K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(Et(n.nodes,r)===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");let i=new Set([r]),a=!0;for(;a;){a=!1;for(let l of n.nodes)i.has(l.parent)&&!i.has(l.id)&&(i.add(l.id),a=!0)}let d=n.nodes.filter(l=>!i.has(l.id));n.nodes.splice(0,n.nodes.length,...d)})},K=(e,t,r)=>{if(t.length===0){r(e);return}let n=t[0],i=t.slice(1);switch(n.kind){case\"field\":if(e.kind!==\"object\")throw S(v.TypeMismatch,\"field path requires object\");if(!Object.hasOwn(e.fields,n.key))throw S(v.MissingField,\"field does not exist\");K(e.fields[n.key],i,r);return;case\"item\":if(e.kind!==\"array\")throw S(v.TypeMismatch,\"item path requires array\");{let a=zi(e.items,n.id);if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");K(e.items[a].value,i,r)}return;case\"node\":if(e.kind!==\"tree\")throw S(v.TypeMismatch,\"node path requires tree\");{let a=Et(e.nodes,n.id);if(a===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");K(e.nodes[a].value,i,r)}return}},Fi=(e,t)=>{for(let r of Object.keys(e))delete e[r];Object.assign(e,t)},zi=(e,t)=>e.findIndex(r=>r.id===t),Et=(e,t)=>e.findIndex(r=>r.id===t),Wi=(e,t)=>t===I||Et(e,t)!==-1,Ki=(e,t,r,n)=>e.some(i=>i.parent===t&&i.id!==n&&i.pos===r),vd=(e,t,r)=>{if(t===I)return!1;let n=new Map(e.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}};var gn=class{next(){let t=globalThis.crypto;if(t?.getRandomValues){let r=new Uint32Array(2);t.getRandomValues(r);let n=r[0]>>>5,i=r[1]>>>6;return(n*67108864+i)/9007199254740992}return Math.random()}},bn=class{constructor(t){p(this,\"charset\");p(this,\"random\");p(this,\"useJitter\");this.charset=t?.charset??Xi(),this.random=t?.random,this.useJitter=t?.useJitter??!0}between(t,r){return this.useJitter?wd(t,r,this.charset,this.random??new gn):Ji(t,r,this.charset)}},Sd=e=>{if(e.chars.length<7)throw new Error(\"charSet must be at least 7 characters long\");if([...e.chars].sort().join(\"\")!==e.chars)throw new Error(\"charSet must be sorted\");let r={},n={};for(let s=0;s<e.chars.length;s+=1){let u=e.chars[s];r[u]=s,n[s]=u}let i=r[e.firstPositive],a=r[e.mostPositive],d=r[e.mostNegative];if(i===void 0)throw new Error(\"invalid firstPositive\");if(a===void 0)throw new Error(\"invalid mostPositive\");if(d===void 0)throw new Error(\"invalid mostNegative\");if(a-i<3)throw new Error(\"mostPositive must be at least 3 characters away from neutral\");if(i-d<3)throw new Error(\"mostNegative must be at least 3 characters away from neutral\");let l=e.jitterRange??Math.floor(wn(e.chars.length,3)/5);return{chars:e.chars,byChar:r,byCode:n,length:e.chars.length,first:n[0],last:n[e.chars.length-1],firstPositive:e.firstPositive,mostPositive:e.mostPositive,firstNegative:n[i-1],mostNegative:e.mostNegative,jitterRange:l,paddingDict:Rd(l,e.chars.length)}},Td=Sd({chars:\"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\",firstPositive:\"a\",mostPositive:\"z\",mostNegative:\"A\"}),Xi=()=>Td;var ke=()=>new bn({charset:Xi()});var xd=e=>`${e.firstPositive}${e.byCode[0]}`,Gi=(e,t)=>{sr(e,t)},Ji=(e,t,r)=>{if(e!==void 0&&Gi(e,r),t!==void 0&&Gi(t,r),e===void 0&&t===void 0)return xd(r);if(e===void 0)return Pd(sr(t,r),r);if(t===void 0)return Zi(sr(e,r),r);if(e>=t)throw new Error(`${e} >= ${t}`);return Vd(e,t,r)};var wd=(e,t,r,n)=>{let i=Ji(e,t,r),a=_d(i,t,r);return a>0?Nd(i,a,r,n):Qi(i,r,n)};var sr=(e,t)=>{let r=eo(e,t),n=Tn(r,t);if(n>e.length)throw new Error(`invalid order key length: ${e}`);return e.slice(0,n)},Zi=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[t.length-1];return[...n].some(a=>a!==i)?`${r}${ao(n,t)}`:no(kd(r,t),\"lower\",t)},Pd=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[0];return[...n].some(a=>a!==i)?`${r}${vn(n,t,!1)}`:no(Id(r,t),\"upper\",t)},Vd=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),a=Sn(n,i,r);a===1&&(n=`${n}${r.first}`,a=r.length);let d=io(Math.floor(a/2),r);return xn(n,d,r)},Qi=(e,t,r)=>{let n=r.next();if(n<0||n>=1)throw new Error(`random value out of range: ${n}`);return xn(e,io(Math.floor(n*t.jitterRange),t),t)},Nd=(e,t,r,n)=>Qi(`${e}${r.first.repeat(t)}`,r,n),Yi=(e,t)=>{let r=t.jitterRange-e;for(let[n,i]of Object.entries(t.paddingDict))if(i>r)return Number(n);return 0},_d=(e,t,r)=>{let n=sr(e,r),i=Zi(n,r),a=0;if(t!==void 0){let l=Sn(e,t,r);l<r.jitterRange+1&&(a=Math.max(a,Yi(l,r)))}let d=Sn(e,i,r);return d<r.jitterRange+1&&(a=Math.max(a,Yi(d,r))),a},eo=(e,t)=>{if(e.length===0)return\"\";let r=0;if(e[0]===t.mostPositive)for(;r<e.length&&e[r]===t.mostPositive;)r+=1;if(e[0]===t.mostNegative)for(;r<e.length&&e[r]===t.mostNegative;)r+=1;return r>=e.length?e:e.slice(0,r+1)},ur=(e,t,r)=>{if(e.length===0)return 0;let n=e[0];if(n>r.mostPositive||n<r.mostNegative)throw new Error(\"invalid firstChar on key\");return n===r.mostPositive&&t===\"positive\"?_e(n,r.mostNegative,r)+1+ur(e.slice(1),t,r):n===r.mostNegative&&t===\"negative\"?_e(n,r.mostPositive,r)+1+ur(e.slice(1),t,r):t===\"positive\"?_e(n,r.mostNegative,r)+2:_e(n,r.mostPositive,r)+2},Tn=(e,t)=>{if(e.length===0)throw new Error(\"head cannot be empty\");let r=e[0];if(r>t.mostPositive||r<t.mostNegative)throw new Error(\"invalid firstChar on key\");return r===t.mostPositive?_e(r,t.firstPositive,t)+1+ur(e.slice(1),\"positive\",t):r===t.mostNegative?_e(r,t.firstNegative,t)+1+ur(e.slice(1),\"negative\",t):r>=t.firstPositive?_e(r,t.firstPositive,t)+2:_e(r,t.firstNegative,t)+2},to=(e,t)=>{if(Tn(e,t)!==e.length)throw new Error(`invalid integer length: ${e}`)},ro=(e,t)=>{let r=eo(e,t);return[r,e.slice(r.length)]},kd=(e,t)=>{let r=e>=t.firstPositive,n=ao(e,t),i=e.at(-1)===t.mostPositive,a=n.at(-1)===t.mostPositive;return r&&a?`${n}${t.mostNegative}`:!r&&i?e.slice(0,-1):n},Id=(e,t)=>{let r=e>=t.firstPositive,n=e.at(-1)===t.mostNegative;return r&&n?vn(e.slice(0,-1),t,!1):!r&&n?`${e}${t.mostPositive}`:vn(e,t,!1)},no=(e,t,r)=>{let n=Tn(e,r),i=t===\"upper\"?r.last:r.first;return`${e}${i.repeat(n-e.length)}`},_e=(e,t,r)=>{let n=r.byChar[e],i=r.byChar[t];if(n===void 0||i===void 0)throw new Error(\"invalid character in distance calculation\");return Math.abs(n-i)},cr=(e,t,r,n)=>{let i=Math.max(e.length,t.length);return r===\"start\"?[n.repeat(i-e.length)+e,n.repeat(i-t.length)+t]:[e+n.repeat(i-e.length),t+n.repeat(i-t.length)]},io=(e,t)=>{if(e===0)return t.byCode[0];let r=\"\",n=e;for(;n>0;)r=`${t.byCode[n%t.length]}${r}`,n=Math.floor(n/t.length);return r},Ad=(e,t)=>{let r=0;for(let n=0;n<e.length;n+=1){let i=e.length-n-1;r+=t.byChar[e[n]]*wn(t.length,i)}return r},xn=(e,t,r)=>{let[n,i]=cr(e,t,\"start\",r.first),a=[],d=0;for(let l=n.length-1;l>=0;l-=1){let s=r.byChar[n[l]]+r.byChar[i[l]]+d;d=Math.floor(s/r.length),a.push(r.byCode[s%r.length])}return d>0&&a.push(r.byCode[d]),a.reverse().join(\"\")},oo=(e,t,r,n)=>{let[i,a]=cr(e,t,\"start\",r.first),d=[],l=0;for(let u=i.length-1;u>=0;u-=1){let f=r.byChar[i[u]],c=r.byChar[a[u]]+l;f<c?(l=1,f+=r.length):l=0,d.push(r.byCode[f-c])}if(l>0)throw new Error(\"subtraction result is negative\");let s=d.reverse().join(\"\");return n?s.replace(new RegExp(`^${r.first}+`),\"\")||r.first:s},ao=(e,t)=>xn(e,t.byCode[1],t),vn=(e,t,r)=>oo(e,t.byCode[1],t,r),Sn=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),[a,d]=n>i?[i,n]:[n,i];return Ad(oo(d,a,r,!0),r)};function Rd(e,t){let r={};for(let n=0;n<100;n+=1){let i=wn(t,n);if(r[n]=i,i>e)break}return r}function wn(e,t){let r=1;for(let n=0;n<t;n+=1)r*=e;return r}var T={InvalidSchema:\"invalid_schema\",MissingRequired:\"missing_required\",TypeMismatch:\"type_mismatch\",LiteralMismatch:\"literal_mismatch\",ValidatorFailed:\"validator_failed\",UnionNoMatch:\"union_no_match\",EitherNoMatch:\"either_no_match\",TreeInvalidRootType:\"tree_invalid_root_type\",TreeInvalidChildType:\"tree_invalid_child_type\",TreeUnknownVariant:\"tree_unknown_variant\"},fr=class extends Error{constructor(r,n=\"\",i){super(n?`${r}: ${n}`:r);p(this,\"code\");p(this,\"valuePath\");p(this,\"schemaPath\");this.name=\"SchemaError\",this.code=r,this.valuePath=i?.valuePath??[],this.schemaPath=i?.schemaPath??[]}},x=(e,t,r)=>new fr(e,t,r),Pn=e=>e instanceof fr;var H=(e,t)=>x(T.InvalidSchema,t,{valuePath:[],schemaPath:e}),Z=(e,t,r)=>{if(typeof e!=\"object\"||e===null||Array.isArray(e))throw H(t,r);return e},ve=(e,t,r)=>{if(typeof e!=\"string\")throw H(t,r);return e},Vn=(e,t)=>{if(typeof e!=\"number\"||Number.isNaN(e)||!Number.isFinite(e))throw H(t,\"validator value must be a finite number\");return e};var qd=(e,t)=>{if(e!==void 0){if(typeof e!=\"string\")throw H(t,\"value must be a string\");return e}},lo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"string validators must be an array\");return e.map((r,n)=>Ed(r,[...t,n]))}},so=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"number validators must be an array\");return e.map((r,n)=>Dd(r,[...t,n]))}},uo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"array validators must be an array\");return e.map((r,n)=>Ld(r,[...t,n]))}},Ed=(e,t)=>{let r=Z(e,t,\"string validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":case\"length\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"regex\":return{kind:n,pattern:ve(r.pattern,[...t,\"pattern\"],\"regex pattern must be a string\"),flags:qd(r.flags,[...t,\"flags\"])};case\"email\":case\"url\":return{kind:n};default:throw H(t,`unknown string validator ${n}`)}},Dd=(e,t)=>{let r=Z(e,t,\"number validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"min\":case\"max\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"positive\":case\"negative\":case\"int\":return{kind:n};default:throw H(t,`unknown number validator ${n}`)}},Ld=(e,t)=>{let r=Z(e,t,\"array validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};default:throw H(t,`unknown array validator ${n}`)}};var Dt=(e,t,r,n,i)=>{if(r.kind!==t)throw x(T.TypeMismatch,`expected ${e}, got ${r.kind}`,{valuePath:n,schemaPath:i})},pr=(e,t,r,n)=>(Dt(e,\"string\",t,r,n),t),mr=(e,t,r,n)=>(Dt(e,\"number\",t,r,n),t),yr=(e,t,r,n)=>(Dt(e,\"boolean\",t,r,n),t),hr=(e,t,r,n)=>(Dt(e,\"object\",t,r,n),t),co=(e,t,r,n)=>(Dt(e,\"array\",t,r,n),t);var O=(e,t,r)=>x(T.ValidatorFailed,e,{valuePath:t,schemaPath:r}),q=e=>e===void 0?e:_(e),E=e=>e?{required:!0}:{};var fo={kind:\"array\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,element:r.parseSchema(e.element,[...n,\"element\"]),validators:uo(e.validators,[...n,\"validators\"])},e.default,n),serialize:(e,t)=>({kind:\"array\",element:t(e.element),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(r=>({...r}))}:{}}),validate:(e,t,r,n,i)=>{let d=co(e.kind,t,n,i).items.map(l=>{let s=r.validate(e.element,l.value,[...n,{kind:\"item\",id:l.id}],[...i,\"element\"]);if(s===void 0)throw x(T.TypeMismatch,\"array item cannot sanitize to undefined\",{valuePath:[...n,{kind:\"item\",id:l.id}],schemaPath:i});return{id:l.id,pos:l.pos,value:s}});for(let l of e.validators??[])switch(l.kind){case\"minLength\":if(d.length<l.value)throw O(\"array shorter than minLength\",n,i);break;case\"maxLength\":if(d.length>l.value)throw O(\"array longer than maxLength\",n,i);break}return{kind:\"array\",items:d}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var po={kind:\"boolean\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required},e.default,n),serialize:e=>({kind:\"boolean\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>_(yr(\"boolean\",t,n,i)),materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var mo={kind:\"either\",parse:(e,t,r,n)=>{if(!Array.isArray(e.variants))throw x(T.InvalidSchema,\"either variants must be an array\",{schemaPath:[...n,\"variants\"]});return r.normalizeDefault({kind:t.kind,required:t.required,variants:e.variants.map((i,a)=>r.parseSchema(i,[...n,\"variants\",a]))},e.default,n)},serialize:(e,t)=>({kind:\"either\",variants:e.variants.map(r=>t(r)),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=[];for(let d=0;d<e.variants.length;d+=1)try{let l=r.validate(e.variants[d],t,n,[...i,\"variants\",d]);if(l!==void 0)return l}catch(l){l instanceof Error&&a.push(l)}throw x(T.EitherNoMatch,a[0]?.message??\"no either variant matched\",{valuePath:n,schemaPath:i})},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var yo={kind:\"literal\",parse:(e,t,r,n)=>{let i=e.value;if(typeof i!=\"string\"&&typeof i!=\"number\"&&typeof i!=\"boolean\")throw H([...n,\"value\"],\"literal value must be string, number, or boolean\");return r.normalizeDefault({kind:t.kind,required:t.required,value:i},e.default,n)},serialize:e=>({kind:\"literal\",value:e.value,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=typeof e.value==\"string\"?\"string\":typeof e.value==\"number\"?\"number\":\"boolean\",d=a===\"string\"?pr(e.kind,t,n,i):a===\"number\"?mr(e.kind,t,n,i):yr(e.kind,t,n,i);if(d.value!==e.value)throw x(T.LiteralMismatch,\"literal value does not match schema\",{valuePath:n,schemaPath:i});return _(d)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var ho={kind:\"number\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:so(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"number\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=mr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"min\":if(a.value<d.value)throw O(\"number smaller than min\",n,i);break;case\"max\":if(a.value>d.value)throw O(\"number larger than max\",n,i);break;case\"positive\":if(a.value<=0)throw O(\"number is not positive\",n,i);break;case\"negative\":if(a.value>=0)throw O(\"number is not negative\",n,i);break;case\"int\":if(!Number.isInteger(a.value))throw O(\"number is not an integer\",n,i);break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var go={kind:\"object\",parse:(e,t,r,n)=>{let i=Z(e.fields,[...n,\"fields\"],\"object schema fields must be an object\"),a={};for(let[d,l]of Object.entries(i))a[d]=r.parseSchema(l,[...n,\"fields\",d]);return r.normalizeDefault({kind:t.kind,required:t.required,fields:a},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.fields))r[n]=t(i);return{kind:\"object\",fields:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d={};for(let[l,s]of Object.entries(e.fields)){let u=r.validate(s,a.fields[l],[...n,{kind:\"field\",key:l}],[...i,\"fields\",l]);u!==void 0&&(d[l]=u)}return ne(d)},materializeDefault:(e,t,r,n)=>{let i={},a=!1;for(let[d,l]of Object.entries(e.fields)){let s;try{s=t.materializeDefault(l,[...r,{kind:\"field\",key:d}],[...n,\"fields\",d])}catch(u){if(!e.required&&Pn(u)&&u.code===T.MissingRequired)return;throw u}s!==void 0&&(i[d]=s,a=!0)}if(a)return ne(i);if(e.required)throw x(T.MissingRequired,\"required object has no defaultable fields\",{valuePath:r,schemaPath:n})}};var bo={kind:\"string\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:lo(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"string\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=pr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"minLength\":if(a.value.length<d.value)throw O(\"string shorter than minLength\",n,i);break;case\"maxLength\":if(a.value.length>d.value)throw O(\"string longer than maxLength\",n,i);break;case\"length\":if(a.value.length!==d.value)throw O(\"string length mismatch\",n,i);break;case\"regex\":if(!new RegExp(d.pattern,d.flags).test(a.value))throw O(\"string does not match regex\",n,i);break;case\"email\":if(!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(a.value))throw O(\"invalid email\",n,i);break;case\"url\":try{new URL(a.value)}catch{throw O(\"invalid url\",n,i)}break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var vo={kind:\"tree\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"tree discriminator must be a string\"),a=e.roots;if(!Array.isArray(a)||!a.every(s=>typeof s==\"string\"))throw x(T.InvalidSchema,\"tree roots must be a string array\",{schemaPath:[...n,\"roots\"]});let d=Z(e.variants,[...n,\"variants\"],\"tree variants must be an object\"),l={};for(let[s,u]of Object.entries(d)){let f=Z(u,[...n,\"variants\",s],\"tree variant must be an object\"),c=r.parseSchema(f.schema,[...n,\"variants\",s,\"schema\"]);if(c.kind!==\"object\")throw x(T.InvalidSchema,\"tree variant schema must be an object schema\",{schemaPath:[...n,\"variants\",s,\"schema\"]});let m=c.fields[i];if(m?.kind!==\"literal\"||m.value!==s)throw x(T.InvalidSchema,\"tree discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",s,\"schema\",\"fields\",i]});let y=f.children;if(!Array.isArray(y)||!y.every(N=>typeof N==\"string\"))throw x(T.InvalidSchema,\"tree variant children must be a string array\",{schemaPath:[...n,\"variants\",s,\"children\"]});l[s]={schema:c,children:[...y]}}for(let s of a)if(!Object.hasOwn(l,s))throw x(T.InvalidSchema,`unknown tree root variant ${s}`,{schemaPath:[...n,\"roots\"]});for(let[s,u]of Object.entries(l))for(let f of u.children)if(!Object.hasOwn(l,f))throw x(T.InvalidSchema,`unknown tree child variant ${f}`,{schemaPath:[...n,\"variants\",s,\"children\"]});return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,roots:[...a],variants:l},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]={schema:t(i.schema),children:[...i.children]};return{kind:\"tree\",discriminator:e.discriminator,roots:[...e.roots],variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=(()=>{if(t.kind!==\"tree\")throw x(T.TypeMismatch,`expected ${e.kind}, got ${t.kind}`,{valuePath:n,schemaPath:i});return t})(),d=new Map,l=a.nodes.map(s=>{let u=s.value.fields[e.discriminator];if(u===void 0||u.kind!==\"string\")throw x(T.TreeUnknownVariant,\"tree node discriminator is missing or invalid\",{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let f=e.variants[u.value];if(!f)throw x(T.TreeUnknownVariant,`unknown tree variant ${u.value}`,{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});let c=r.validate(f.schema,s.value,[...n,{kind:\"node\",id:s.id}],[...i,\"variants\",u.value,\"schema\"]);return d.set(s.id,u.value),{id:s.id,parent:s.parent,pos:s.pos,value:c}});for(let s of l){let u=d.get(s.id);if(s.parent===I){if(!e.roots.includes(u))throw x(T.TreeInvalidRootType,`tree root type ${u} is not allowed`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"roots\"]});continue}let f=d.get(s.parent);if(!f)throw x(T.TreeUnknownVariant,\"tree parent variant is missing\",{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:i});if(!e.variants[f].children.includes(u))throw x(T.TreeInvalidChildType,`tree child type ${u} is not allowed under ${f}`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"variants\",f,\"children\"]})}return{kind:\"tree\",nodes:l}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var So={kind:\"union\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"union discriminator must be a string\"),a=Z(e.variants,[...n,\"variants\"],\"union variants must be an object\"),d={};for(let[l,s]of Object.entries(a)){let u=r.parseSchema(s,[...n,\"variants\",l]);if(u.kind!==\"object\")throw x(T.InvalidSchema,\"union variants must be object schemas\",{schemaPath:[...n,\"variants\",l]});let f=u.fields[i];if(f?.kind!==\"literal\"||f.value!==l)throw x(T.InvalidSchema,\"union discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",l,\"fields\",i]});d[l]=u}return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,variants:d},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]=t(i);return{kind:\"union\",discriminator:e.discriminator,variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d=a.fields[e.discriminator];if(d===void 0||d.kind!==\"string\")throw x(T.UnionNoMatch,\"union discriminator is missing or invalid\",{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let l=e.variants[d.value];if(!l)throw x(T.UnionNoMatch,`unknown union discriminator ${d.value}`,{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});return r.validate(l,a,n,[...i,\"variants\",d.value])},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var Od={string:bo,number:ho,boolean:po,literal:yo,object:go,array:fo,union:So,either:mo,tree:vo};var Ke=e=>Od[e];var Nn=(e,t,r)=>To(e,t,r),To=(e,t,r)=>\"default\"in e&&e.default!==void 0?_(e.default):Ke(e.kind).materializeDefault(e,Md,t,r),Md={materializeDefault:To};var Lt=(e,t)=>(t!==void 0&&B(t),xo(e,t,[],[])),xo=(e,t,r,n)=>t===void 0?Nn(e,r,n):Ke(e.kind).validate(e,t,jd,r,n),jd={validate:xo,materializeDefault:Nn};var wo=e=>Po(e),Po=e=>Ke(e.kind).serialize(e,Po);var o={};Aa(o,{Array:()=>Xd,ArrayPrimitive:()=>Pr,Boolean:()=>Wd,BooleanPrimitive:()=>Tr,Either:()=>Jd,EitherPrimitive:()=>Vr,Lazy:()=>ol,LazyPrimitive:()=>Ar,Literal:()=>Kd,LiteralPrimitive:()=>xr,Number:()=>zd,NumberPrimitive:()=>Sr,PrimitiveError:()=>h,String:()=>Fd,StringPrimitive:()=>vr,Struct:()=>Yd,StructPrimitive:()=>wr,Tree:()=>nl,TreeNode:()=>tl,TreeNodePrimitive:()=>_r,TreeNodeSelf:()=>Qd,TreePrimitive:()=>Ir,Union:()=>Zd,UnionPrimitive:()=>Nr,commands:()=>$d,expectDefined:()=>Bd,hasOwn:()=>Hd,randomUuid:()=>dt,shortId:()=>Ge});var h=class extends Error{constructor(t){super(t),this.name=\"PrimitiveError\"}},Bd=(e,t)=>{if(e===void 0)throw new h(t);return e},Hd=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),dt=()=>{let e=globalThis.crypto?.randomUUID?.();if(typeof e==\"string\")return e;throw new h(\"crypto.randomUUID is not available in this runtime\")},Vo=\"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ\",Ud=10,Ge=(e=Ud)=>{let t=globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);if(!t)throw new h(\"crypto.getRandomValues is not available in this runtime\");let r=Vo.length,n=Math.floor(256/r)*r,i=\"\",a=new Uint8Array(e);for(;i.length<e;){t(a);for(let d=0;d<a.length&&i.length<e;d+=1){let l=a[d];l<n&&(i+=Vo[l%r])}}return i};var $d=(e,t,r)=>{B(t);let n=Lt(e.schema,t);if(n===void 0)throw new Error(\"Primitive root snapshot cannot be undefined\");let i=[],a=n,d=ke(),l={current:()=>a,emit:s=>{s.length!==0&&(i.push(...s),a=hn(n,i))},generator:{nextArrayItemId:()=>dt(),nextTreeNodeId:()=>Ge(),between:(s,u)=>d.between(s,u)}};return r(e.createProxy(l,[])),i};var D=(e,t)=>{let r=e;for(let n of t){if(r===void 0)return;switch(n.kind){case\"field\":if(r.kind!==\"object\")return;r=r.fields[n.key];break;case\"item\":if(r.kind!==\"array\")return;r=r.items.find(i=>i.id===n.id)?.value;break;case\"node\":if(r.kind!==\"tree\")return;r=r.nodes.find(i=>i.id===n.id)?.value;break}}return r},gr=(e,t)=>{let r=D(e,t);return r?.kind===\"object\"?r:void 0},U=(e,t)=>{let r=D(e,t);return r?.kind===\"array\"?r:void 0},G=(e,t)=>{let r=D(e,t);return r?.kind===\"tree\"?r:void 0},Se=e=>e?[...e.items].sort((t,r)=>t.pos.localeCompare(r.pos)):[],br=(e,t)=>e?.items.find(r=>r.id===t),_n=(e,t)=>{let r=Se(e),n=Ot(t,r.length);return n===void 0?void 0:r[n]},kn=(e,t)=>e?.nodes.find(r=>r.id===t),Ie=(e,t)=>e?e.nodes.filter(r=>r.parent===t).sort((r,n)=>r.pos.localeCompare(n.pos)):[];var Ot=(e,t)=>{let r=e<0?t+e:e;if(!(r<0||r>=t))return r},lt=(e,t)=>{if(t<0||t>e.length)throw new h(`Index ${t} is out of range`);return{lower:t===0?void 0:e[t-1],upper:t===e.length?void 0:e[t]}};var In=(e,t,r)=>{if(!e||t===I)return!1;let n=new Map(e.nodes.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}},An=(e,t)=>[...e,{kind:\"node\",id:t}];var vr=class e{constructor(t){p(this,\"_tag\",\"StringPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"string\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:re(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}length(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"length\",value:t}]})}regex(t,r){return new e({...this.state,validators:[...this.state.validators,{kind:\"regex\",pattern:t.source,flags:t.flags}]})}email(){return new e({...this.state,validators:[...this.state.validators,{kind:\"email\"}]})}url(){return new e({...this.state,validators:[...this.state.validators,{kind:\"url\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"String value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return re(this.state.defaultValue);if(this.state.required)throw new h(\"String value is required\");return}if(typeof t!=\"string\")throw new h(\"Expected string input\");return re(t)}decode(t){return t?.kind===\"string\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Fd=()=>new vr({required:!1,defaultValue:void 0,validators:[]});var Sr=class e{constructor(t){p(this,\"_tag\",\"NumberPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"number\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:ot(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"min\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"max\",value:t}]})}positive(){return new e({...this.state,validators:[...this.state.validators,{kind:\"positive\"}]})}negative(){return new e({...this.state,validators:[...this.state.validators,{kind:\"negative\"}]})}int(){return new e({...this.state,validators:[...this.state.validators,{kind:\"int\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Number value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return ot(this.state.defaultValue);if(this.state.required)throw new h(\"Number value is required\");return}if(typeof t!=\"number\"||globalThis.Number.isNaN(t)||!globalThis.Number.isFinite(t))throw new h(\"Expected finite number input\");return ot(t)}decode(t){return t?.kind===\"number\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},zd=()=>new Sr({required:!1,defaultValue:void 0,validators:[]});var Tr=class e{constructor(t){p(this,\"_tag\",\"BooleanPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"boolean\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:at(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Boolean value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return at(this.state.defaultValue);if(this.state.required)throw new h(\"Boolean value is required\");return}if(typeof t!=\"boolean\")throw new h(\"Expected boolean input\");return at(t)}decode(t){return t?.kind===\"boolean\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Wd=()=>new Tr({required:!1,defaultValue:void 0});var Rn=e=>{switch(typeof e){case\"string\":return re(e);case\"number\":return ot(e);case\"boolean\":return at(e);default:throw new h(`Unsupported scalar value type: ${typeof e}`)}};var xr=class e{constructor(t){p(this,\"_tag\",\"LiteralPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get literal(){return this.state.literal}get schema(){return{kind:\"literal\",value:this.state.literal,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:Rn(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){if(t!==this.state.literal)throw new h(\"Literal default must equal the literal value\");return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Literal value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Literal value is required\");return}if(r!==this.state.literal)throw new h(\"Input does not match the literal value\");return Rn(this.state.literal)}decode(t){if(t!==void 0&&\"value\"in t&&t.value===this.state.literal)return this.state.literal}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Kd=e=>new xr({required:!1,defaultValue:void 0,literal:e});var wr=class e{constructor(t){p(this,\"_tag\",\"StructPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get fields(){return this.state.fields}get schema(){let t={};for(let[r,n]of Object.entries(this.state.fields))t[r]=n.schema;return{kind:\"object\",fields:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}extend(t){return new e({required:this.state.required,defaultValue:void 0,fields:{...this.state.fields,...t}})}partial(t){let r=t?.stripDefaults??!1,n={};for(let[i,a]of Object.entries(this.state.fields))n[i]=No(a,r);return new e({required:this.state.required,defaultValue:void 0,fields:n})}optional(t){let r=t?Object.fromEntries(Object.entries(this.state.fields).map(([n,i])=>[n,No(i,!0)])):this.state.fields;return new e({required:!1,defaultValue:t?void 0:this.state.defaultValue,fields:r})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Struct value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return this.encode(this.state.defaultValue);if(this.state.required)throw new h(\"Struct value is required\");return}if(typeof t!=\"object\"||t===null||Array.isArray(t))throw new h(\"Expected object input\");let r=t,n={};for(let[i,a]of Object.entries(this.state.fields)){let d=a.encodeOptional(r[i]);d!==void 0&&(n[i]=d)}return ne(n)}decode(t){if(t?.kind!==\"object\")return;let r={};for(let[n,i]of Object.entries(this.state.fields)){let a=i.decode(t.fields[n]);a!==void 0&&(r[n]=a)}return r}createProxy(t,r){let n={get:()=>this.decode(D(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},update:i=>{Gd(this.state.fields,t,r,i)}};for(let[i,a]of Object.entries(this.state.fields))n[i]=a.createProxy(t,[...r,{kind:\"field\",key:i}]);return n}},Gd=(e,t,r,n)=>{for(let[i,a]of Object.entries(n)){let d=e[i];if(d){if(a===void 0){gr(t.current(),r)?.fields[i]!==void 0&&t.emit([{kind:\"object.delete\",path:r,key:i}]);continue}if(d._tag===\"StructPrimitive\"&&typeof a==\"object\"&&a!==null&&!Array.isArray(a)){d.createProxy(t,[...r,{kind:\"field\",key:i}]).update(a);continue}t.emit([{kind:\"object.set\",path:r,key:i,value:d.encode(a)}])}}},No=(e,t)=>{let r=e.optional;return typeof r==\"function\"?r.call(e,t):e},Yd=e=>new wr({required:!1,defaultValue:void 0,fields:e});var Pr=class e{constructor(t){p(this,\"_tag\",\"ArrayPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");p(this,\"encodedDefaultCache\");this.state=t}encodedDefault(){return this.encodedDefaultCache===void 0&&(this.encodedDefaultCache={value:this.state.defaultValue===void 0?void 0:this.encodeEntries(this.state.defaultValue)}),this.encodedDefaultCache.value}get element(){return this.state.element}get schema(){let t=this.encodedDefault();return{kind:\"array\",element:this.state.element.schema,...this.state.required?{required:!0}:{},...t!==void 0?{default:_(t)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}minLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}maxLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Array value is undefined\");return r}encodeOptional(t){if(t===void 0){let r=this.encodedDefault();if(r!==void 0)return _(r);if(this.state.required)throw new h(\"Array value is required\");return}if(!globalThis.Array.isArray(t))throw new h(\"Expected array input\");return this.encodeEntries(t)}decode(t){if(t?.kind===\"array\")return Se(t).map(r=>({id:r.id,pos:r.pos,value:this.state.element.decode(r.value)}))}createProxy(t,r){let n=d=>({get id(){return d},get pos(){return br(U(t.current(),r),d)?.pos??\"\"},get value(){return a.state.element.createProxy(t,[...r,{kind:\"item\",id:d}])},get:()=>{let l=br(U(t.current(),r),d);return this.state.element.decode(l?.value)},remove:()=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:l=>{_o(t,r,d,l)},moveToPos:l=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])}}),i=()=>Se(U(t.current(),r)).map(d=>n(d.id)),a=this;return{get length(){return Se(U(t.current(),r)).length},get:()=>this.decode(U(t.current(),r)),set:d=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(d)}])},push:d=>{let l=Se(U(t.current(),r)),s=l.length===0?void 0:l[l.length-1]?.pos,u=t.generator.nextArrayItemId(r),f=t.generator.between(s,void 0);return t.emit([{kind:\"array.insert\",path:r,item:{id:u,pos:f,value:this.state.element.encode(d)}}]),n(u)},insertAt:(d,l)=>{let s=Se(U(t.current(),r)),u=lt(s.map(m=>m.pos),d),f=t.generator.nextArrayItemId(r),c=t.generator.between(u.lower,u.upper);return t.emit([{kind:\"array.insert\",path:r,item:{id:f,pos:c,value:this.state.element.encode(l)}}]),n(f)},insertAtPos:(d,l)=>{let s=t.generator.nextArrayItemId(r);return t.emit([{kind:\"array.insert\",path:r,item:{id:s,pos:d,value:this.state.element.encode(l)}}]),n(s)},remove:d=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:(d,l)=>{_o(t,r,d,l)},moveToPos:(d,l)=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])},at:d=>{let l=_n(U(t.current(),r),d);return l?n(l.id):void 0},first:()=>{let d=_n(U(t.current(),r),0);return d?n(d.id):void 0},last:()=>{let d=Se(U(t.current(),r)),l=d[d.length-1];return l?n(l.id):void 0},findById:d=>{let l=br(U(t.current(),r),d);return l?n(l.id):void 0},find:d=>i().find((s,u,f)=>d(s,u,f)),findIndex:d=>i().findIndex((s,u,f)=>d(s,u,f)),map:d=>i().map((s,u,f)=>d(s,u,f)),filter:d=>i().filter((s,u,f)=>d(s,u,f)),some:d=>i().some((s,u,f)=>d(s,u,f)),every:d=>i().every((s,u,f)=>d(s,u,f)),forEach:d=>{i().forEach((s,u,f)=>d(s,u,f))},[Symbol.iterator]:()=>i()[Symbol.iterator]()}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encodeEntries(t){let r=ke(),n=new Set,i,a=t.map(d=>{let l=r.between(i,void 0);i=l;let s=dt();for(;n.has(s);)s=dt();return n.add(s),{id:s,pos:l,value:this.state.element.encode(d)}});return pn(a)}},_o=(e,t,r,n)=>{let i=Se(U(e.current(),t));if(i.findIndex(c=>c.id===r)===-1)throw new h(`Array item \"${r}\" does not exist`);let d=i.filter(c=>c.id!==r),l=Ot(n,d.length+1);if(l===void 0&&n!==d.length)throw new h(`Index ${n} is out of range`);let s=l??d.length,u=lt(d.map(c=>c.pos),s),f=e.generator.between(u.lower,u.upper);e.emit([{kind:\"array.move\",path:t,id:r,pos:f}])},Xd=e=>new Pr({required:!1,defaultValue:void 0,element:e,validators:[]});var Vr=class e{constructor(t){p(this,\"_tag\",\"EitherPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");if(this.state=t,t.variants.length===0)throw new h(\"Either requires at least one variant\")}get schema(){return{kind:\"either\",variants:this.state.variants.map(t=>t.schema),...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Either value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Either value is required\");return}for(let n of this.state.variants)try{let i=n.encodeOptional(r);if(i!==void 0)return i}catch{}throw new h(\"Either input did not match any variant\")}decode(t){for(let r of this.state.variants){let n=r.decode(t);if(n!==void 0)return n}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}},Jd=(...e)=>new Vr({required:!1,defaultValue:void 0,variants:e});var Nr=class e{constructor(t){p(this,\"_tag\",\"UnionPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get discriminator(){return this.state.discriminator}get variants(){return this.state.variants}get schema(){let t={};for(let[r,n]of Object.entries(this.state.variants)){let i=n.schema;if(i.kind!==\"object\")throw new h(\"Union variants must compile to object schemas\");let a={...i.fields,[this.state.discriminator]:{kind:\"literal\",value:r}};t[r]={kind:\"object\",fields:a}}return{kind:\"union\",discriminator:this.state.discriminator,variants:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Union value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Union value is required\");return}if(typeof r!=\"object\"||r===null||Array.isArray(r))throw new h(\"Expected union input object\");let n=this.resolveVariantKey(r),i=this.state.variants[n];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);let a=i.encode(r);if(a.kind!==\"object\")throw new h(\"Union variant must encode to an object value\");return ne({...a.fields,[this.state.discriminator]:re(String(n))})}decode(t){if(t?.kind!==\"object\")return;let r=this.resolveVariantKeyFromObject(t);if(!r)return;let i=this.state.variants[r]?.decode(t);if(i!==void 0)return{...i,[this.state.discriminator]:r}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},as:n=>{let i=this.state.variants[String(n)];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);return i.createProxy(t,r)},match:n=>{let i=gr(t.current(),r),a=i?this.resolveVariantKeyFromObject(i):void 0;if(!a)return;let d=n[a];if(d)return d(this.state.variants[a].createProxy(t,r))}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}resolveVariantKey(t){let r=t[this.state.discriminator];if(typeof r==\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r))return r;let n=Object.entries(this.state.variants).filter(([,i])=>{let a=Object.keys(i.fields);return Object.keys(t).every(d=>d===this.state.discriminator||a.includes(d))}).map(([i])=>i);if(n.length===1)return n[0];throw new h(\"Unable to resolve union variant from input\")}resolveVariantKeyFromObject(t){let r=t.fields[this.state.discriminator];if(r?.kind===\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r.value))return r.value}},Zd=(e,t)=>new Nr({required:!1,defaultValue:void 0,discriminator:t?.discriminator??\"type\",variants:e});var ko=Symbol.for(\"TreeNode.Self\"),Qd={_tag:\"TreeNodeSelf\",_brand:ko},el=e=>typeof e==\"object\"&&e!==null&&\"_brand\"in e&&e._brand===ko,_r=class{constructor(t,r,n){p(this,\"_tag\",\"TreeNodePrimitive\");p(this,\"_Type\");p(this,\"_Data\");p(this,\"_Children\");p(this,\"TSetInput\");p(this,\"type\");p(this,\"data\");p(this,\"childrenInput\");p(this,\"resolvedChildren\");this.type=t,this.data=r,this.childrenInput=n}get children(){if(this.resolvedChildren===void 0){let t=typeof this.childrenInput==\"function\"?this.childrenInput():this.childrenInput;this.resolvedChildren=t.map(r=>el(r)?this:r)}return this.resolvedChildren}isChildAllowed(t){return this.children.some(r=>r.type===t)}},tl=(e,t)=>new _r(e,t.data,t.children);var Ir=class e{constructor(t){p(this,\"_tag\",\"TreePrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){let t=rl(this.state.root);return{kind:\"tree\",discriminator:\"type\",roots:[this.state.root.type],variants:t,...this.state.required?{required:!0}:{},...this.state.encodedDefault!==void 0?{default:_(this.state.encodedDefault)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t,encodedDefault:this.encodeRoots(t)})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Tree value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.encodedDefault!==void 0)return _(this.state.encodedDefault);if(this.state.required)throw new h(\"Tree value is required\");return}if(!Array.isArray(t))throw new h(\"Expected tree root input array\");return this.encodeRoots(t)}encodeRoots(t){let r=[],n=kr(this.state.root),i=new Set([I]),a,d=ke(),l=(s,u,f,c)=>{let m=n.get(s.type);if(!m)throw new h(`Unknown tree node type \"${s.type}\"`);if(!f.some(w=>w.type===m.type))throw new h(`Node type \"${s.type}\" is not allowed here`);let y=s.id??il(i);if(i.has(y))throw new h(`Duplicate tree node id \"${y}\" in encoded input`);i.add(y);let N=d.between(c,void 0);r.push({id:y,parent:u,pos:N,value:Cn(m,s)});let R;for(let w of s.children??[])R=l(w,y,m.children,R);return N};for(let s of t)a=l(s,I,[this.state.root],a);return mn(r)}decode(t){if(t?.kind!==\"tree\")return;let r=kr(this.state.root);return Ro(t,I,r)}createProxy(t,r){let n=kr(this.state.root);return{get:()=>this.decode(G(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},findByIdAcrossTree:i=>{let a=G(t.current(),r),d=kn(a,i);if(!d)return;let l=d.value.fields.type,s=n.get(l?.kind===\"string\"?l.value:\"\");return s?Ye(t,r,n,s,i):void 0},children:Ao(t,r,n,I,[this.state.root])}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue,encodedDefault:t?void 0:this.state.encodedDefault})}},Ao=(e,t,r,n,i)=>{let a=()=>Ie(G(e.current(),t),n).filter(l=>i.some(s=>s.type===ie(l))).map(l=>Ye(e,t,r,r.get(ie(l)),l.id)),d={__parentId:n,get length(){return a().length},at:l=>{let s=Ie(G(e.current(),t),n).filter(c=>i.some(m=>m.type===ie(c))),u=Ot(l,s.length),f=u===void 0?void 0:s[u];return f?Ye(e,t,r,r.get(ie(f)),f.id):void 0},first:()=>d.at(0),last:()=>{let l=a();return l[l.length-1]},findById:l=>{let s=Ie(G(e.current(),t),n).find(f=>f.id===l);if(!s)return;let u=r.get(ie(s));return u?Ye(e,t,r,u,s.id):void 0},insertAt:(l,s)=>{let u=G(e.current(),t),f=Ie(u,n).filter(w=>i.some(P=>P.type===ie(w))),c=lt(f.map(w=>w.pos),l),m=Io(i,s.type),y=s.id??e.generator.nextTreeNodeId(t),N=e.generator.between(c.lower,c.upper),R={id:y,parent:n,pos:N,value:Cn(m,s)};return e.emit([{kind:\"tree.insert\",path:t,node:R}]),Ye(e,t,r,m,y)},insertLast:l=>{let s=Ie(G(e.current(),t),n).filter(u=>i.some(f=>f.type===ie(u)));return d.insertAt(s.length,l)},insertAtPos:(l,s)=>{let u=Io(i,s.type),f=s.id??e.generator.nextTreeNodeId(t),c={id:f,parent:n,pos:l,value:Cn(u,s)};return e.emit([{kind:\"tree.insert\",path:t,node:c}]),Ye(e,t,r,u,f)},find:l=>a().find((u,f,c)=>l(u,f,c)),findIndex:l=>a().findIndex((u,f,c)=>l(u,f,c)),map:l=>a().map((u,f,c)=>l(u,f,c)),filter:l=>a().filter((u,f,c)=>l(u,f,c)),some:l=>a().some((u,f,c)=>l(u,f,c)),every:l=>a().every((u,f,c)=>l(u,f,c)),forEach:l=>{a().forEach((u,f,c)=>l(u,f,c))},[Symbol.iterator]:()=>a()[Symbol.iterator]()};return d},Ye=(e,t,r,n,i)=>{let a=()=>kn(G(e.current(),t),i),d=()=>{let l=a();return l?r.get(ie(l))??n:n};return{get id(){return i},get type(){return d().type},get pos(){return a()?.pos??\"\"},get parentId(){let l=a()?.parent;return l===I?null:l??null},get data(){return d().data.createProxy(e,An(t,i))},get children(){return Ao(e,t,r,i,d().children)},get:()=>{let l=a();if(l)return Co(l,G(e.current(),t),r)},update:l=>{d().data.createProxy(e,An(t,i)).update(l)},remove:()=>{e.emit([{kind:\"tree.delete\",path:t,id:i}])},moveTo:(l,s)=>{let u=l.__parentId;if(!u)throw new h(\"Target children collection is not movable\");let f=G(e.current(),t);if(In(f,u,i))throw new h(\"Tree move would create a cycle\");let c=Ie(f,u).filter(N=>N.id!==i),m=lt(c.map(N=>N.pos),s),y=e.generator.between(m.lower,m.upper);e.emit([{kind:\"tree.move\",path:t,id:i,parent:u,pos:y}])},moveToPos:(l,s)=>{let u=G(e.current(),t);if(In(u,l,i))throw new h(\"Tree move would create a cycle\");e.emit([{kind:\"tree.move\",path:t,id:i,parent:l,pos:s}])},as:l=>{if(d().type!==l.type)throw new h(`Expected node type \"${l.type}\", got \"${d().type}\"`);return Ye(e,t,r,l,i)}}},rl=e=>{let t=kr(e),r={};for(let n of t.values()){let i=n.data.schema;if(i.kind!==\"object\")throw new h(\"Tree node data must compile to an object schema\");r[n.type]={schema:{kind:\"object\",fields:{...i.fields,type:{kind:\"literal\",value:n.type}}},children:n.children.map(a=>a.type)}}return r},kr=e=>{let t=new Map,r=n=>{let i=t.get(n.type);if(i&&i!==n)throw new h(`Duplicate tree node type \"${n.type}\"`);if(!i){t.set(n.type,n);for(let a of n.children)r(a)}};return r(e),t},Cn=(e,t)=>{let r=e.data.encode(t);if(r.kind!==\"object\")throw new h(\"Tree node data must encode to an object\");return ne({...r.fields,type:re(e.type)})},ie=e=>{let t=e.value.fields.type;if(t?.kind!==\"string\")throw new h(`Tree node \"${e.id}\" is missing its type discriminator`);return t.value},Ro=(e,t,r)=>Ie(e,t).map(n=>Co(n,e,r)),Co=(e,t,r)=>{let n=r.get(ie(e));if(!n)throw new h(`Unknown tree node type \"${ie(e)}\"`);return{id:e.id,type:n.type,parentId:e.parent===I?null:e.parent,pos:e.pos,data:n.data.decode(e.value),children:Ro(t,e.id,r)}},Io=(e,t)=>{let r=e.find(n=>n.type===t);if(!r)throw new h(`Tree node type \"${t}\" is not allowed in this collection`);return r},nl=e=>new Ir({required:!1,defaultValue:void 0,encodedDefault:void 0,root:e.root}),il=e=>{let t=Ge();for(;e.has(t);)t=Ge();return t};var Ar=class{constructor(t){p(this,\"_tag\",\"LazyPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"thunk\");p(this,\"resolved\");this.thunk=t}get schema(){return this.resolve().schema}encode(t){return this.resolve().encode(t)}encodeOptional(t){return this.resolve().encodeOptional(t)}decode(t){return this.resolve().decode(t)}createProxy(t,r){return this.resolve().createProxy(t,r)}resolve(){return this.resolved===void 0&&(this.resolved=this.thunk()),this.resolved}},ol=e=>new Ar(e);var qo=o.Struct({type:o.Literal(\"click\").required()}),Eo=o.Union({click:qo}),Rr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()})},{discriminator:\"key\"}),Do=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Lo=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),Oo=o.Struct({type:o.Literal(\"none\").required()}),Mo=o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Do.required()}).required()}),jo=o.Struct({type:o.Literal(\"close-paywall\").required()}),Bo=o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Lo.required()}),Cr=o.Union({\"close-paywall\":jo,none:Oo,\"purchase-product\":Bo,\"set-variable\":Mo}),Ho=o.Struct({id:o.String().required(),trigger:Eo.required(),action:Cr.required()}),Mt=o.Array(Ho).default([]);var Uo=o.Struct({key:o.Literal(\"string\").required(),value:o.String().default(\"\")}),$o=o.Struct({key:o.Literal(\"number\").required(),value:o.Number().default(0)}),Fo=o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().default(!1)}),zo=o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).default({})}),qr=o.Union({boolean:Fo,number:$o,product:zo,string:Uo},{discriminator:\"key\"}),Wo=o.Struct({id:o.String().required(),name:o.String().required(),value:qr.required()}),Er=o.Struct({id:o.String().required()});var Dr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),\"boolean-array\":o.Struct({key:o.Literal(\"boolean-array\").required(),value:o.Array(o.Boolean()).required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),\"number-array\":o.Struct({key:o.Literal(\"number-array\").required(),value:o.Array(o.Number()).required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),\"string-array\":o.Struct({key:o.Literal(\"string-array\").required(),value:o.Array(o.String()).required()})},{discriminator:\"key\"}),qn=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Dr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),Ko=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),value:o.Struct({field:o.String().required()}).required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Go=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),field:o.String().required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),En=o.Union({\"close-paywall\":o.Struct({type:o.Literal(\"close-paywall\").required()}),none:o.Struct({type:o.Literal(\"none\").required()}),\"purchase-product\":o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Go.required()}),\"set-variable\":o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Ko.required()}).required()})});var $=o.Array(Wo).default([]),F=o.Array(o.Struct({name:o.String().required(),nodeId:o.String().required()})).default([]);var al=o.Struct({path:o.String().required(),source:o.String().default(\"\")}).required(),Dn=o.TreeNode(\"codeComponent\",{children:[],data:al});var Y=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:qr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),dl=o.Struct({type:o.Literal(\"equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ll=o.Struct({type:o.Literal(\"not-equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),sl=o.Struct({type:o.Literal(\"greater-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ul=o.Struct({type:o.Literal(\"greater-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),cl=o.Struct({type:o.Literal(\"less-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),fl=o.Struct({type:o.Literal(\"less-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),pl=o.Union({equals:dl,\"greater-than\":sl,\"greater-than-or-equal\":ul,\"less-than\":cl,\"less-than-or-equal\":fl,\"not-equals\":ll}),ml=o.Struct({type:o.Literal(\"and\").required(),value:o.Array(pl).minLength(1).required()}),Yo=o.Struct({type:o.Literal(\"or\").required(),value:o.Array(ml).minLength(1).required()}),yl=o.Struct({action:Cr.required(),interactionId:o.String().required()});function Ae(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({style:e}).default({})})}function Lr(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({actions:o.Array(yl).default([]),style:e}).default({})})}var Xe=/^rgba\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d*\\.?\\d+)\\s*\\)$/i,st=o.Number().default(0),ut=o.Number().default(0),ct=o.Number().default(0),ft=o.Number().default(0),oe=o.Number().default(0),ae=o.Number().default(0),de=o.Number().default(0),le=o.Number().default(0),pt=o.Number().default(0),mt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"space-between\"),o.Literal(\"space-around\"),o.Literal(\"space-evenly\")).default(\"flex-start\"),yt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"stretch\"),ht=o.Either(o.Literal(\"row\"),o.Literal(\"column\")).default(\"column\"),se=o.Number(),ue=o.Number().default(0),ce=o.Number().default(1),fe=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),pe=o.Either(o.Literal(\"auto\"),o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"auto\"),gt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),bt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),me=o.Number(),ye=o.Number(),he=o.Number(),ge=o.Number(),Xo=o.Number().default(0),Jo=o.Number().default(0),vt=o.Either(o.Literal(\"absolute\"),o.Literal(\"relative\")).default(\"relative\"),St=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Tt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),xt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),wt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Pt=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),Vt=o.Boolean().default(!1),Nt=o.Either(o.Literal(\"solid\"),o.Literal(\"gradient\"),o.Literal(\"image\")).default(\"solid\"),_t=o.Struct({kind:o.Either(o.Literal(\"linear\"),o.Literal(\"radial\")).default(\"linear\"),startX:o.Number().default(.5),startY:o.Number().default(0),endX:o.Number().default(.5),endY:o.Number().default(1),stops:o.Array(o.Struct({color:o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),position:o.Number().default(0)})).default([{color:\"rgba(255, 255, 255, 1)\",position:0},{color:\"rgba(255, 255, 255, 0)\",position:1}])}).default({}),Te=o.Struct({url:o.String().default(\"\"),resizeMode:o.Either(o.Literal(\"cover\"),o.Literal(\"contain\"),o.Literal(\"stretch\"),o.Literal(\"center\")).default(\"cover\")}).default({}),Re=o.Number().default(0),Ce=o.Number().default(0),qe=o.Number().default(0),Ee=o.Number().default(0),De=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Le=o.Either(o.Literal(\"solid\"),o.Literal(\"dashed\"),o.Literal(\"dotted\")).default(\"solid\"),Or=o.Number().default(0),Mr=o.Number().default(0),jr=o.Number().default(0),Br=o.Number().default(0),Oe=o.Boolean().default(!1),X=o.Number().default(1),Me=o.Either(o.Literal(\"visible\"),o.Literal(\"hidden\"),o.Literal(\"scroll\")).default(\"visible\"),je=o.Number().default(0),J=o.Either(o.Literal(\"flex\"),o.Literal(\"none\")).default(\"flex\"),Be=o.Boolean().default(!1),He=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Ue=o.Number().default(0),$e=o.Number().default(0),Fe=o.Number().default(0),ze=o.Number().default(1),Zo=o.Number().default(16).min(1),Qo=o.Either(o.Literal(\"100\"),o.Literal(\"200\"),o.Literal(\"300\"),o.Literal(\"400\"),o.Literal(\"500\"),o.Literal(\"600\"),o.Literal(\"700\"),o.Literal(\"800\"),o.Literal(\"900\")).default(\"400\"),ea=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),ta=o.Either(o.Literal(\"left\"),o.Literal(\"center\"),o.Literal(\"right\"),o.Literal(\"justify\")).default(\"left\"),ra=o.Number().default(1.5),na=o.Number().default(0),kt=o.Boolean().default(!1),It=o.Boolean().default(!1),ia=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),oa=o.Boolean().default(!1),aa=o.Either(o.Literal(\"nonzero\"),o.Literal(\"evenodd\")).default(\"nonzero\"),da=o.Number().default(1),la=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),sa=o.Boolean().default(!1),ua=o.Number().default(0),ca=o.Number().default(1),fa=o.Either(o.Literal(\"butt\"),o.Literal(\"round\"),o.Literal(\"square\")).default(\"butt\"),pa=o.Either(o.Literal(\"miter\"),o.Literal(\"round\"),o.Literal(\"bevel\")).default(\"miter\");var Ln=o.Struct({fillColor:ia,fillEnabled:oa,fillRule:aa,fillOpacity:da,strokeColor:la,strokeEnabled:sa,strokeWidth:ua,strokeOpacity:ca,strokeLinecap:fa,strokeLinejoin:pa,opacity:X,display:J}).default({}),hl=Ae(Ln.partial({stripDefaults:!0}).default({})),gl=o.Array(hl).default([]),On=o.TreeNode(\"path\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Path\"),states:gl,d:o.String().default(\"\"),transform:o.String(),style:Ln}).required()});var bl=o.Either(o.Literal(\"none\"),o.Literal(\"xMidYMid meet\"),o.Literal(\"xMidYMid slice\")).default(\"xMidYMid meet\"),vl=o.Struct({minX:o.Number().default(0),minY:o.Number().default(0),width:o.Number().default(24),height:o.Number().default(24)}).default({}),Mn=o.Struct({width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,opacity:X,display:J,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\"),preserveAspectRatio:bl}).default({}),Sl=Ae(Mn.partial({stripDefaults:!0}).default({})),Tl=o.Array(Sl).default([]),xe=o.TreeNode(\"shape\",{children:[On],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Shape\"),states:Tl,svgSource:o.String(),viewBox:vl,style:Mn}).required()});var jn=o.Struct({marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,fontSize:Zo,fontWeight:Qo,color:ea,textAlign:ta,lineHeight:ra,letterSpacing:na,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),xl=Ae(jn.partial({stripDefaults:!0}).default({})),wl=o.Array(xl).default([]),Pl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({text:o.String()}).default({})})).default([]),we=o.TreeNode(\"text\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,localized:Pl,name:o.String().default(\"Text\"),states:wl,style:jn,text:o.String().default(\"New Text\")}).required()});var Bn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),Vl=Lr(Bn.partial({stripDefaults:!0}).default({})),Nl=o.Array(Vl).default([]),_l=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Je=o.TreeNode(\"view\",{children:()=>[o.TreeNodeSelf,Ze,we,xe,Qe],data:o.Struct({interactions:Mt,linkedVariables:F,localVariables:$,localized:_l,name:o.String().default(\"View\"),states:Nl,style:Bn}).required()});var Hn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),kl=Lr(Hn.partial({stripDefaults:!0}).default({})),Il=o.Array(kl).default([]),Al=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Rl=o.Struct({horizontal:o.Boolean().default(!1),interactions:Mt,linkedVariables:F,localVariables:$,localized:Al,name:o.String().default(\"ScrollView\"),showsScrollIndicator:o.Boolean().default(!0),states:Il,style:Hn}).required(),Ze=o.TreeNode(\"scrollView\",{children:()=>[Je,o.TreeNodeSelf,we,xe,Qe],data:Rl});var Cl=o.Struct({actionBindings:o.Array(o.Struct({action:En.required(),name:o.String().required()})).default([]),componentSource:o.String().default(\"catalog\"),componentPath:o.String().default(\"\"),componentSlug:o.String().default(\"\"),componentVersion:o.Number().default(0),contentHash:o.String().default(\"\"),name:o.String().default(\"Component\"),previewState:o.String().default(\"default\"),props:o.Array(o.Struct({name:o.String().required(),value:qn.required(),localizedValues:o.Array(o.Struct({locale:o.String().required(),value:Dr.required()})).default([])})).default([])}).required(),Qe=o.TreeNode(\"component\",{children:()=>[Je,Ze,we,xe,o.TreeNodeSelf],data:Cl});var Un=o.TreeNode(\"library\",{children:()=>[Dn],data:o.Struct({}).required()});var $n=o.Struct({x:Xo,y:Jo,width:o.Number().default(375),height:o.Number().default(812),minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,backgroundColor:Pt.default(\"rgba(255, 255, 255, 1)\"),backgroundEnabled:Vt.default(!0),backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),ql=Ae($n.partial({stripDefaults:!0}).default({})),El=o.Array(ql).default([]),Dl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Fn=o.TreeNode(\"screen\",{children:()=>[Je,Ze,we,xe,Qe],data:o.Struct({linkedVariables:F,localVariables:$,localized:Dl,name:o.String().default(\"Screen\"),states:El,style:$n}).required()});var Ll=o.Struct({defaultLocale:o.String().default(\"en\"),locales:o.Array(o.Struct({tag:o.String().required()})).default([])}).default({}),zn=o.TreeNode(\"root\",{children:()=>[Fn,Un],data:o.Struct({localization:Ll,name:o.String()}).required()});var Wn=o.Tree({root:zn});function Hr(e){return e!==null&&typeof e==\"object\"&&\"id\"in e&&\"pos\"in e&&\"value\"in e?e.value:e}function Kn(e){let t=e.indexOf(\"-\");return t===-1?e:e.slice(0,t)}function ma(e,t,r){let n=e.text,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.text;if(f===void 0||f===\"\")continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}function ya(e,t,r){let n=e.style.backgroundImage,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.backgroundImage;if(f===void 0)continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}var Gn=e=>Array.isArray(e)?e.map(Gn):typeof e!=\"object\"||e===null?e:Object.fromEntries(Object.entries(e).sort(([t],[r])=>t.localeCompare(r)).map(([t,r])=>[t,Gn(r)])),ha=e=>JSON.stringify(Gn(wo(e.schema))),ga=e=>{let t=new Map;for(let r of e){let n=`${r.database}\\0${r.collection}`;if(t.has(n))throw new Error(`Duplicate migration collection ${r.database}/${r.collection}`);let i=r.baseline;for(let[a,d]of r.migrations.entries()){let l=a+1;if(!Number.isSafeInteger(d.version)||d.version!==l)throw new Error(`Expected migration version ${l} for ${r.database}/${r.collection}, received ${d.version}`);if(ha(i)!==ha(d.from))throw new Error(`Migration ${d.version} (${d.name}) does not start from the previous schema`);i=d.to}t.set(n,r)}return{collections:[...e],find:(r,n)=>t.get(`${r}\\0${n}`)}};var Ol=\"voidhash\",Ml=\"paywalls\",Ch=ga([{database:Ol,databaseDescription:\"Voidhash paywall documents\",collection:Ml,baseline:Wn,migrations:[]}]);var Dh=o.Struct({cursor:o.Struct({x:o.Number().required(),y:o.Number().required()}),name:o.String(),selectedNodeIds:o.Array(o.String()).default([]),user:o.Struct({color:o.String().required(),name:o.String().required()}).required()});function At(e){let{locale:t,defaultLocale:r}=te();return ya(e,t,r)}function ba({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=At(e.data),i=Jt(n===e.data.style.backgroundImage?r:{...r,backgroundImage:n}),a=Zt(r);return b(\"div\",{\"data-node-id\":e.id,style:i,children:b(\"div\",{style:a,children:t})})}function Ur(e,t,r){let{getNodeVariables:n,setNodeVariable:i,callbacks:a}=te(),d=n(e),l=j(()=>({...a,onSetVariable:(f,c)=>{i(e,f,c)}}),[a,e,i]),s=j(()=>t.filter(f=>f.value?.trigger?.type===\"click\"),[t]),u=ee(()=>{for(let f of s){let c=f.value;if(!c?.action)continue;let m=f.id??c.id;if(!m)continue;let N=tn(m,r,d)??c.action;rn(N,d,l)}},[s,r,d,l]);if(s.length!==0)return u}function va({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=Yt(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i},{horizontal:e.data.horizontal,showsScrollIndicator:e.data.showsScrollIndicator});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function Sa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Qt(r),i=e.data.viewBox,a=`${i.minX} ${i.minY} ${i.width} ${i.height}`;return b(\"div\",{\"data-node-id\":e.id,style:n,children:b(\"svg\",{height:\"100%\",preserveAspectRatio:r.preserveAspectRatio,style:{display:\"block\"},viewBox:a,width:\"100%\",children:t})})}function Ta({node:e}){let t=W(e.id,e.data.style,e.data.states),r=er(t),{locale:n,defaultLocale:i}=te();return b(\"span\",{\"data-node-id\":e.id,style:r,children:ma(e.data,n,i)})}function xa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=it(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function wa({snapshot:e,componentArtifacts:t,locale:r}){return b(Li,{componentArtifacts:t,locale:r,snapshot:e,children:b(Pa,{node:e})})}var jl={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",textAlign:\"center\"};function Bl({node:e}){return b(\"div\",{style:jl,children:`Unsupported node type: ${String(e.type)}`})}function Pa({node:e}){let t=(e.children??[]).map(r=>b(Pa,{node:r},r.id));switch(e.type){case\"root\":return b(Q,{children:t});case\"screen\":return b(ba,{node:e,children:t});case\"view\":return b(xa,{node:e,children:t});case\"scrollView\":return b(va,{node:e,children:t});case\"text\":return b(Ta,{node:e});case\"shape\":return b(Sa,{node:e,children:t});case\"path\":return b(Hi,{node:e});case\"component\":return b(Bi,{node:e,children:t});case\"library\":case\"codeComponent\":return null;default:return b(Bl,{node:e})}}var Hl=\"__VOIDHASH_PAYWALL__\",Va={products:[],variables:{}},Ul=e=>({products:e?.products??[],variables:e?.variables??{},locale:e?.locale,platform:e?.platform,defaultSelectedProductId:e?.defaultSelectedProductId}),Na=()=>{if(typeof window>\"u\")return Va;let e=window[Hl];return e?Ul(e):Va};function _a(e){return Na().locale??e}function $l(e){let t;try{t=JSON.parse(e)}catch{return}if(!(typeof t!=\"object\"||t===null)){if(\"type\"in t)return{componentArtifacts:void 0,locale:void 0,snapshot:t};if(\"snapshot\"in t){let r=t;return{componentArtifacts:r.componentArtifacts,locale:r.locale,snapshot:r.snapshot}}}}function ka(){let e=document.getElementById(\"__PAYWALL_DATA__\");if(!e?.textContent)return;let t=document.getElementById(\"paywall-root\");if(!t)return;let r=$l(e.textContent);r&&ui(b(wa,{componentArtifacts:r.componentArtifacts,locale:_a(r.locale),snapshot:r.snapshot}),t)}document.readyState===\"loading\"?document.addEventListener(\"DOMContentLoaded\",ka):ka();})();\n";

From 2a4ab34543886105cf8b16979102b336170461e9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 12 Jul 2026 15:06:47 +0200
Subject: [PATCH 079/129] test purchases and restores end to end

---
 .github/workflows/ci.yml                      |  27 +
 .gitignore                                    |   4 +
 apps/backend/src/BackendApp.ts                |  10 +
 apps/backend/src/routes/v1/sdk.test.ts        |  56 ++
 apps/backend/src/routes/v1/sdk.ts             |  41 +-
 .../src/testing/PurchaseSdkHttpHarness.ts     |  61 +++
 .../src/domain/schema/normalized-schema.ts    |   2 +-
 .../react-native-example/app/menu/paywall.tsx |  74 ++-
 libraries/react-native/Package.swift          |  35 ++
 .../coordinator-tests/build.gradle.kts        |  22 +
 .../coordinator-tests/settings.gradle.kts     |   8 +
 .../PurchaseOperationCoordinatorTest.kt       |  73 +++
 .../nitro/voidhash/HybridGoogleBilling.kt     | 109 +++-
 .../HybridGoogleBillingBuyItemByTypeParams.kt |  18 -
 .../nitro/voidhash/HybridPaywallWebView.kt    |  25 +-
 .../voidhash/PurchaseOperationCoordinator.kt  |  58 ++
 .../ios-storekit-tests/App/Info.plist         |  26 +
 .../App/StoreKitTestHostApp.swift             |  10 +
 .../Resources/PurchaseValidation.storekit     |  93 ++++
 .../ios-storekit-tests/Tests/Info.plist       |  22 +
 .../Tests/StoreKitPurchaseFlowTests.swift     |  93 ++++
 .../project.pbxproj                           | 421 +++++++++++++++
 .../xcschemes/StoreKitPurchaseTests.xcscheme  | 123 +++++
 .../ios-storekit-tests/project.yml            |  48 ++
 .../ios-storekit-tests/run-tests.sh           |  66 +++
 .../TransactionRetentionStoreTests.swift      |  37 ++
 .../react-native/ios/HybridStorekit.swift     |  38 +-
 .../ios/TransactionRetentionStore.swift       |  37 ++
 .../android/c++/JHybridGoogleBillingSpec.cpp  |  16 +
 .../android/c++/JHybridGoogleBillingSpec.hpp  |   1 +
 .../nitro/voidhash/HybridGoogleBillingSpec.kt |   8 +-
 .../shared/c++/HybridGoogleBillingSpec.cpp    |   1 +
 .../shared/c++/HybridGoogleBillingSpec.hpp    |   1 +
 libraries/react-native/package.json           |   4 +
 libraries/react-native/src/client-effect.ts   |   4 +-
 libraries/react-native/src/client.tsx         |   4 +-
 .../react-native/src/core/entities/product.ts |  18 +-
 .../src/core/entities/transaction.ts          |   6 +
 .../src/core/networking/api-client.ts         |   5 +-
 .../payment-adapters/app-store-adapter.ts     |   8 +-
 .../payment-adapters/google-play-adapter.ts   |  84 ++-
 .../core/payment-adapters/payment-adapter.ts  |   7 +-
 .../core/paywalls/paywall-runtime-config.ts   |   8 +-
 .../src/core/products/product-service.ts      |   8 +-
 .../react-native/src/core/schema/runtime.ts   |   2 +-
 .../src/core/testing/payment-adapter.ts       |   7 +-
 .../src/core/transactions/errors.ts           |  12 +
 .../core/transactions/transaction-service.ts  | 215 ++++++--
 .../src/core/utils/account-token.ts           |  41 ++
 .../react/hooks/use-paywall-by-location.ts    |   8 +-
 .../src/react/hooks/use-products.ts           |  16 +-
 .../src/react/hooks/use-purchase.ts           |   4 +-
 .../src/specs/android/GoogleBilling.nitro.ts  |   3 +-
 .../tests/core/account-token.test.ts          |  42 ++
 .../tests/core/app-store-adapter.test.ts      | 102 ++++
 .../tests/core/client-effect.test.ts          | 382 +++++++++++++-
 .../core/generated-client-transaction.test.ts |  73 +++
 .../tests/core/google-play-adapter.test.ts    | 221 ++++++++
 .../core/native-purchase-contract.test.ts     |  47 ++
 .../tests/helpers/effect-test-harness.ts      |  35 +-
 .../react-native/tests/helpers/test-schema.ts |  12 +
 package.json                                  |   2 +
 packages/api-contracts/src/Schema.ts          |  13 +-
 packages/core/package.json                    |   3 +
 packages/core/src/domain/schema/Schema.ts     |   3 +-
 packages/core/src/services/index.ts           |   2 +
 .../appStore/payment-provider-service.ts      |  28 +-
 .../appStore/transaction-verifier.ts          |  66 +++
 .../googlePlay/payment-provider-service.ts    |  25 +-
 .../googlePlay/purchase-verifier.ts           |  59 +++
 .../src/services/paymentProviders/index.ts    |   2 +
 .../core/src/services/schema/SchemaService.ts |   4 +-
 packages/core/src/services/schema/helpers.ts  |   2 +-
 ...PaymentProviderService.integration.test.ts | 497 ++++++++++++++----
 ...PaymentProviderService.integration.test.ts | 411 +++++++++++++++
 .../schema/SchemaService.integration.test.ts  |  19 +-
 .../sdk/SdkService.integration.test.ts        | 110 ++--
 packages/generated-clients/openapi/core.json  |  12 +-
 .../generated-clients/src/core/generated.ts   |  18 +-
 pnpm-lock.yaml                                |  12 +
 80 files changed, 3910 insertions(+), 420 deletions(-)
 create mode 100644 apps/backend/src/routes/v1/sdk.test.ts
 create mode 100644 apps/backend/src/testing/PurchaseSdkHttpHarness.ts
 create mode 100644 libraries/react-native/Package.swift
 create mode 100644 libraries/react-native/android/coordinator-tests/build.gradle.kts
 create mode 100644 libraries/react-native/android/coordinator-tests/settings.gradle.kts
 create mode 100644 libraries/react-native/android/coordinator-tests/src/test/kotlin/com/margelo/nitro/voidhash/PurchaseOperationCoordinatorTest.kt
 delete mode 100644 libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBillingBuyItemByTypeParams.kt
 create mode 100644 libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/PurchaseOperationCoordinator.kt
 create mode 100644 libraries/react-native/ios-storekit-tests/App/Info.plist
 create mode 100644 libraries/react-native/ios-storekit-tests/App/StoreKitTestHostApp.swift
 create mode 100644 libraries/react-native/ios-storekit-tests/Resources/PurchaseValidation.storekit
 create mode 100644 libraries/react-native/ios-storekit-tests/Tests/Info.plist
 create mode 100644 libraries/react-native/ios-storekit-tests/Tests/StoreKitPurchaseFlowTests.swift
 create mode 100644 libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/project.pbxproj
 create mode 100644 libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/xcshareddata/xcschemes/StoreKitPurchaseTests.xcscheme
 create mode 100644 libraries/react-native/ios-storekit-tests/project.yml
 create mode 100755 libraries/react-native/ios-storekit-tests/run-tests.sh
 create mode 100644 libraries/react-native/ios-tests/TransactionRetentionStoreTests.swift
 create mode 100644 libraries/react-native/ios/TransactionRetentionStore.swift
 create mode 100644 libraries/react-native/src/core/transactions/errors.ts
 create mode 100644 libraries/react-native/src/core/utils/account-token.ts
 create mode 100644 libraries/react-native/tests/core/account-token.test.ts
 create mode 100644 libraries/react-native/tests/core/app-store-adapter.test.ts
 create mode 100644 libraries/react-native/tests/core/generated-client-transaction.test.ts
 create mode 100644 libraries/react-native/tests/core/google-play-adapter.test.ts
 create mode 100644 libraries/react-native/tests/core/native-purchase-contract.test.ts
 create mode 100644 packages/core/src/services/paymentProviders/appStore/transaction-verifier.ts
 create mode 100644 packages/core/src/services/paymentProviders/googlePlay/purchase-verifier.ts
 create mode 100644 packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProviderService.integration.test.ts

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 755a942e9..31d0c5c62 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,6 +54,10 @@ jobs:
         if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
         run: pnpm install --frozen-lockfile
 
+      - name: Validate purchase and restore contracts
+        if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
+        run: pnpm test:purchase-restore
+
       - name: Build
         if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
         run: pnpm build --concurrency=2
@@ -65,3 +69,26 @@ jobs:
       - name: Test
         if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
         run: pnpm test --concurrency=2
+
+  storekit-purchase-validation:
+    name: StoreKit purchase validation
+    if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
+    runs-on: macos-15
+    timeout-minutes: 15
+    env:
+      DEVELOPER_DIR: /Applications/Xcode_16.4.app/Contents/Developer
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Test StoreKit transaction retention
+        run: swift test --package-path libraries/react-native
+
+      - name: Test StoreKit purchase and restore
+        working-directory: libraries/react-native
+        run: bash ios-storekit-tests/run-tests.sh
diff --git a/.gitignore b/.gitignore
index 4201fc010..609b886d6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,6 +13,10 @@ lerna-debug.log*
 # Caches
 
 .cache
+.build/
+.gradle/
+.kotlin/
+.swiftpm/
 
 # Diagnostic reports (https://nodejs.org/api/report.html)
 
diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
index 75e929805..fd9bb303e 100644
--- a/apps/backend/src/BackendApp.ts
+++ b/apps/backend/src/BackendApp.ts
@@ -11,18 +11,22 @@ import {
   AuditLogPort,
   AuthTokenVerifier,
   AppStorePaymentProvider,
+  AppStorePaymentProviderEngine,
   ApplePushNotificationServiceConfigLive,
   AiChatService,
   AppStorePaymentProviderConfigLive,
   AppStorePaymentProviderServiceLive,
+  AppStoreTransactionVerifier,
   ExperimentService,
   FeatureFlagService,
   FeedbackServiceLive,
   FirebaseCloudMessagingServiceConfigLive,
   FxRateService,
   GooglePlayPaymentProvider,
+  GooglePlayPaymentProviderEngine,
   GooglePlayPaymentProviderConfigLive,
   GooglePlayPaymentProviderServiceLive,
+  GooglePlayPurchaseVerifier,
   GooglePlayServerApi,
   IdentityProjectionPublisher,
   InternalFeatureFlagService,
@@ -323,6 +327,9 @@ export const BackendFeedbackServiceLive = FeedbackServiceLive({
  * services graph.
  */
 export const BackendAppStorePaymentProviderServiceLive = AppStorePaymentProviderServiceLive.pipe(
+  Layer.provide(
+    AppStoreTransactionVerifier.layer.pipe(Layer.provide(AppStorePaymentProviderEngine.layer)),
+  ),
   Layer.provide(AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer))),
   Layer.provide(
     FxRateService.layer({
@@ -349,6 +356,9 @@ export const BackendAppStorePaymentProviderServiceLive = AppStorePaymentProvider
  */
 export const BackendGooglePlayPaymentProviderServiceLive =
   GooglePlayPaymentProviderServiceLive.pipe(
+    Layer.provide(
+      GooglePlayPurchaseVerifier.layer.pipe(Layer.provide(GooglePlayPaymentProviderEngine.layer)),
+    ),
     Layer.provide(GooglePlayServerApi.layer.pipe(Layer.provide(FetchHttpClient.layer))),
     Layer.provide(
       FxRateService.layer({
diff --git a/apps/backend/src/routes/v1/sdk.test.ts b/apps/backend/src/routes/v1/sdk.test.ts
new file mode 100644
index 000000000..8e694688a
--- /dev/null
+++ b/apps/backend/src/routes/v1/sdk.test.ts
@@ -0,0 +1,56 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { mapSdkTransactionSubmission } from "./sdk.ts";
+
+describe("SDK transaction route mapping", () => {
+  it("forwards the Android native product id as the Google Play product hint", () => {
+    expect(
+      mapSdkTransactionSubmission(
+        {
+          platform: "android",
+          providerProductId: "com.voidhash.yearly.android",
+          productSlug: "yearly_sub",
+          purchaseToken: "purchase-token",
+          transactionId: "order-id",
+        },
+        "com.voidhash.test",
+      ),
+    ).toEqual({
+      packageName: "com.voidhash.test",
+      productId: "com.voidhash.yearly.android",
+      providerId: "google-play",
+      purchaseToken: "purchase-token",
+    });
+  });
+
+  it("falls back to the product slug for older Android SDK payloads", () => {
+    expect(
+      mapSdkTransactionSubmission(
+        {
+          platform: "android",
+          productSlug: "legacy-play-product-id",
+          purchaseToken: "purchase-token",
+          transactionId: "order-id",
+        },
+        "com.voidhash.test",
+      ),
+    ).toMatchObject({ productId: "legacy-play-product-id" });
+  });
+
+  it("maps iOS to the App Store transaction and bundle identifiers", () => {
+    expect(
+      mapSdkTransactionSubmission(
+        {
+          platform: "ios",
+          productSlug: "monthly_sub",
+          transactionId: "transaction-id",
+        },
+        "com.voidhash.test",
+      ),
+    ).toEqual({
+      bundleId: "com.voidhash.test",
+      providerId: "apple-app-store",
+      transactionId: "transaction-id",
+    });
+  });
+});
diff --git a/apps/backend/src/routes/v1/sdk.ts b/apps/backend/src/routes/v1/sdk.ts
index cb445441f..1dabc7bb6 100644
--- a/apps/backend/src/routes/v1/sdk.ts
+++ b/apps/backend/src/routes/v1/sdk.ts
@@ -114,6 +114,30 @@ const toSdkPerson = (snapshot: SdkPersonSnapshot) =>
     },
   });
 
+/** Maps the public SDK transaction payload to the provider-specific service input. */
+export const mapSdkTransactionSubmission = (
+  payload: {
+    readonly platform: "ios" | "android";
+    readonly providerProductId?: string;
+    readonly productSlug: string;
+    readonly purchaseToken?: string;
+    readonly transactionId: string;
+  },
+  clientBundleId: string,
+) =>
+  payload.platform === "android"
+    ? {
+        packageName: clientBundleId,
+        productId: payload.providerProductId ?? payload.productSlug,
+        providerId: "google-play" as const,
+        purchaseToken: payload.purchaseToken,
+      }
+    : {
+        bundleId: clientBundleId,
+        providerId: "apple-app-store" as const,
+        transactionId: payload.transactionId,
+      };
+
 export const SdkGroupLive = HttpApiBuilder.group(VoidhashV1Api, "sdk", (handlers) =>
   Effect.gen(function* () {
     const sdkService = yield* SdkService;
@@ -239,25 +263,14 @@ export const SdkGroupLive = HttpApiBuilder.group(VoidhashV1Api, "sdk", (handlers
             const parsedHeaders = yield* Schema.decodeUnknownEffect(SdkHeaders)(req.headers).pipe(
               Effect.mapError((error) => new ApiSdkValidationError({ message: error.message })),
             );
-            // The Android package name equals the client bundle id; the verified
-            // product id is derived server-side from the purchase token.
+            // The Android package name equals the client bundle id.
             const clientBundleId = parsedHeaders["x-client-bundle-id"];
 
             // `submitPurchaseTransaction`'s `Effect.fn` wrapper widens the error
             // channel; cast to a concrete `Effect` so the outer `catchTags`
             // matches the underlying tags.
-            yield* (
-              payload.platform === "android"
-                ? sdkService.submitPurchaseTransaction({
-                    packageName: clientBundleId,
-                    providerId: "google-play",
-                    purchaseToken: payload.purchaseToken,
-                  })
-                : sdkService.submitPurchaseTransaction({
-                    bundleId: clientBundleId,
-                    providerId: "apple-app-store",
-                    transactionId: payload.transactionId,
-                  })
+            yield* sdkService.submitPurchaseTransaction(
+              mapSdkTransactionSubmission(payload, clientBundleId),
             ) as Effect.Effect<
               unknown,
               AuthenticationError | SdkValidationError | SdkServiceError,
diff --git a/apps/backend/src/testing/PurchaseSdkHttpHarness.ts b/apps/backend/src/testing/PurchaseSdkHttpHarness.ts
new file mode 100644
index 000000000..da65abcec
--- /dev/null
+++ b/apps/backend/src/testing/PurchaseSdkHttpHarness.ts
@@ -0,0 +1,61 @@
+import {
+  ApiAuthSession,
+  AuthMiddleware,
+  VoidhashV1Api,
+  type ApiPublishableKeySession,
+} from "@voidhash/api-contracts";
+import {
+  FeatureFlagService,
+  InternalFeatureFlagService,
+  NotificationTokenService,
+  PaywallLocationService,
+  PersonIdentityService,
+  SchemaService,
+  SdkService,
+} from "@voidhash/core/services";
+import { Db } from "@voidhash/db";
+import { Context, Effect, Layer } from "effect";
+import { HttpRouter, HttpServer } from "effect/unstable/http";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+
+import { SdkGroupLive } from "../routes/v1/sdk.ts";
+
+const unusedApiGroups: Layer.Layer<any> = Layer.effectContext(
+  Effect.sync(() =>
+    Context.makeUnsafe(
+      new Map(
+        Object.values(VoidhashV1Api.groups)
+          .filter((group) => group.identifier !== "sdk")
+          .map((group) => [group.key, { handlers: new Map(), routes: [] }]),
+      ),
+    ),
+  ),
+);
+
+const unusedSdkRouteServices = Layer.mergeAll(
+  Layer.succeed(FeatureFlagService, {} as never),
+  Layer.succeed(InternalFeatureFlagService, {} as never),
+  Layer.succeed(NotificationTokenService, {} as never),
+  Layer.succeed(PaywallLocationService, {} as never),
+  Layer.succeed(SchemaService, {} as never),
+);
+
+/** Builds an in-process Web handler for the real SDK `HttpApi` group. */
+export const makePurchaseSdkHttpHandler = (
+  sdkLayer: Layer.Layer<SdkService | PersonIdentityService | Db, never, never>,
+  session: ApiPublishableKeySession,
+) => {
+  const authentication = Layer.succeed(
+    AuthMiddleware,
+    AuthMiddleware.of((effect) => Effect.provideService(effect, ApiAuthSession, session)),
+  );
+  const routes = HttpApiBuilder.layer(VoidhashV1Api).pipe(
+    Layer.provide(Layer.mergeAll(SdkGroupLive, unusedApiGroups)),
+    Layer.provide(authentication),
+    Layer.provide(unusedSdkRouteServices),
+    Layer.provide(sdkLayer),
+    Layer.provide(HttpServer.layerServices),
+  );
+
+  return HttpRouter.toWebHandler(routes, { disableLogger: true });
+};
diff --git a/apps/cli/src/domain/schema/normalized-schema.ts b/apps/cli/src/domain/schema/normalized-schema.ts
index 8d8bef20a..0b57d1a10 100644
--- a/apps/cli/src/domain/schema/normalized-schema.ts
+++ b/apps/cli/src/domain/schema/normalized-schema.ts
@@ -36,7 +36,7 @@ export const NormalizedProductSchema = Schema.Struct({
   perks: Schema.Array(Schema.String), // perk slugs
   providers: Schema.Array(ProductProviderConfigSchema),
   slug: Schema.String,
-  type: Schema.Literal("subscription"), // Extensible later
+  type: Schema.Literals(["subscription", "one-time", "one-time-consumable"]),
 });
 export type NormalizedProduct = typeof NormalizedProductSchema.Type;
 
diff --git a/examples/react-native-example/app/menu/paywall.tsx b/examples/react-native-example/app/menu/paywall.tsx
index 30562313a..db5792422 100644
--- a/examples/react-native-example/app/menu/paywall.tsx
+++ b/examples/react-native-example/app/menu/paywall.tsx
@@ -1,7 +1,7 @@
 import type { UsePaywallByLocationOptions } from "@voidhash/react-native";
 import { Button } from "components/button";
-import { useMemo, useState } from "react";
-import { StyleSheet, Text, View } from "react-native";
+import { useCallback, useMemo, useState } from "react";
+import { ScrollView, StyleSheet, Text, View } from "react-native";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
 import { voidhash } from "utils/voidhash/client";
 
@@ -9,22 +9,36 @@ const PAYWALL_LOCATION_SLUG = "example-paywall";
 
 export default function PaywallScreen() {
   const insets = useSafeAreaInsets();
+  const { client } = voidhash.useVoidhash();
   const [isOpening, setIsOpening] = useState(false);
+  const [isReconciling, setIsReconciling] = useState(false);
   const [statusMessage, setStatusMessage] = useState<string | null>(null);
 
+  const refreshBackendEvidence = useCallback(
+    async (operation: string) => {
+      const snapshot = await client.getCurrentPerson(true);
+      setStatusMessage(`${operation}\nBackend snapshot: ${JSON.stringify(snapshot, null, 2)}`);
+    },
+    [client],
+  );
+
   const paywallOptions = useMemo<UsePaywallByLocationOptions>(
     () => ({
       onError: (error, context) => {
         setStatusMessage(`Paywall ${context.action} failed: ${error.message}`);
       },
       onPurchase: ({ productId }) => {
-        setStatusMessage(`Purchase completed: ${productId}`);
+        void refreshBackendEvidence(`Purchase completed: ${productId}`).catch((error) => {
+          setStatusMessage(`Purchase completed, but backend refresh failed: ${String(error)}`);
+        });
       },
       onRestore: () => {
-        setStatusMessage("Restore completed");
+        void refreshBackendEvidence("Restore completed").catch((error) => {
+          setStatusMessage(`Restore completed, but backend refresh failed: ${String(error)}`);
+        });
       },
     }),
-    [],
+    [refreshBackendEvidence],
   );
 
   const { show } = voidhash.usePaywallByLocation(PAYWALL_LOCATION_SLUG, paywallOptions);
@@ -39,6 +53,30 @@ export default function PaywallScreen() {
     }
   };
 
+  const handleRestore = async () => {
+    setIsReconciling(true);
+    try {
+      await client.restorePurchases();
+      await refreshBackendEvidence("Direct restore completed");
+    } catch (error) {
+      setStatusMessage(`Direct restore failed: ${String(error)}`);
+    } finally {
+      setIsReconciling(false);
+    }
+  };
+
+  const handleInspectProducts = async () => {
+    setIsReconciling(true);
+    try {
+      const products = await client.getProducts();
+      setStatusMessage(`Native products: ${JSON.stringify(products, null, 2)}`);
+    } catch (error) {
+      setStatusMessage(`Product query failed: ${String(error)}`);
+    } finally {
+      setIsReconciling(false);
+    }
+  };
+
   const containerStyle = [
     styles.container,
     {
@@ -48,7 +86,7 @@ export default function PaywallScreen() {
   ];
 
   return (
-    <View style={containerStyle}>
+    <ScrollView contentContainerStyle={containerStyle}>
       <View>
         <Text style={styles.title}>Native Paywall</Text>
         <Text style={styles.subtitle}>
@@ -61,15 +99,31 @@ export default function PaywallScreen() {
         </Text>
 
         <Button
-          disabled={isOpening}
+          disabled={isOpening || isReconciling}
           onPress={() => {
             void handleShowPaywall();
           }}
           style={styles.actionButton}
           title={isOpening ? "Opening..." : "Open paywall"}
         />
+        <Button
+          disabled={isOpening || isReconciling}
+          onPress={() => {
+            void handleRestore();
+          }}
+          style={styles.secondaryButton}
+          title={isReconciling ? "Working..." : "Restore and verify backend"}
+        />
+        <Button
+          disabled={isOpening || isReconciling}
+          onPress={() => {
+            void handleInspectProducts();
+          }}
+          style={styles.secondaryButton}
+          title="Inspect native products"
+        />
       </View>
-    </View>
+    </ScrollView>
   );
 }
 
@@ -108,4 +162,8 @@ const styles = StyleSheet.create({
   actionButton: {
     marginTop: 16,
   },
+  secondaryButton: {
+    backgroundColor: "#27272a",
+    marginTop: 12,
+  },
 });
diff --git a/libraries/react-native/Package.swift b/libraries/react-native/Package.swift
new file mode 100644
index 000000000..7ec625fec
--- /dev/null
+++ b/libraries/react-native/Package.swift
@@ -0,0 +1,35 @@
+// swift-tools-version: 6.0
+import PackageDescription
+
+let package = Package(
+    name: "VoidhashPurchaseCoordinators",
+    platforms: [.iOS(.v15), .macOS(.v13)],
+    products: [
+        .library(name: "VoidhashPurchaseCoordinators", targets: ["VoidhashPurchaseCoordinators"])
+    ],
+    targets: [
+        .target(
+            name: "VoidhashPurchaseCoordinators",
+            path: "ios",
+            exclude: [
+                "HybridPaywallPresenter.swift",
+                "HybridPaywallWebView.swift",
+                "HybridPurchasedItem.swift",
+                "HybridStorekit.swift",
+                "HybridStorekitProduct.swift",
+                "HybridStorekitProductOffer.swift",
+                "HybridStorekitProductSubscription.swift",
+                "HybridStorekitProductSubscriptionPeriod.swift",
+                "HybridStorekitTransaction.swift",
+                "HybridVoidhash.swift",
+                "ProductStore.swift",
+            ],
+            sources: ["TransactionRetentionStore.swift"]
+        ),
+        .testTarget(
+            name: "VoidhashPurchaseCoordinatorTests",
+            dependencies: ["VoidhashPurchaseCoordinators"],
+            path: "ios-tests"
+        ),
+    ]
+)
diff --git a/libraries/react-native/android/coordinator-tests/build.gradle.kts b/libraries/react-native/android/coordinator-tests/build.gradle.kts
new file mode 100644
index 000000000..31c1ad509
--- /dev/null
+++ b/libraries/react-native/android/coordinator-tests/build.gradle.kts
@@ -0,0 +1,22 @@
+plugins {
+    kotlin("jvm") version "2.1.20"
+}
+
+repositories {
+    mavenCentral()
+}
+
+sourceSets {
+    main {
+        kotlin.srcDir("../src/main/java")
+        kotlin.include("com/margelo/nitro/voidhash/PurchaseOperationCoordinator.kt")
+    }
+}
+
+dependencies {
+    testImplementation(kotlin("test"))
+}
+
+tasks.test {
+    useJUnitPlatform()
+}
diff --git a/libraries/react-native/android/coordinator-tests/settings.gradle.kts b/libraries/react-native/android/coordinator-tests/settings.gradle.kts
new file mode 100644
index 000000000..a04c3eeeb
--- /dev/null
+++ b/libraries/react-native/android/coordinator-tests/settings.gradle.kts
@@ -0,0 +1,8 @@
+pluginManagement {
+    repositories {
+        gradlePluginPortal()
+        mavenCentral()
+    }
+}
+
+rootProject.name = "voidhash-google-billing-coordinator-tests"
diff --git a/libraries/react-native/android/coordinator-tests/src/test/kotlin/com/margelo/nitro/voidhash/PurchaseOperationCoordinatorTest.kt b/libraries/react-native/android/coordinator-tests/src/test/kotlin/com/margelo/nitro/voidhash/PurchaseOperationCoordinatorTest.kt
new file mode 100644
index 000000000..d0725fe92
--- /dev/null
+++ b/libraries/react-native/android/coordinator-tests/src/test/kotlin/com/margelo/nitro/voidhash/PurchaseOperationCoordinatorTest.kt
@@ -0,0 +1,73 @@
+package com.margelo.nitro.voidhash
+
+import kotlin.test.Test
+import kotlin.test.assertEquals
+import kotlin.test.assertFailsWith
+import kotlin.test.assertFalse
+import kotlin.test.assertTrue
+
+class PurchaseOperationCoordinatorTest {
+    @Test
+    fun `success completes the pending purchase exactly once`() {
+        val coordinator = PurchaseOperationCoordinator<String>()
+        val results = mutableListOf<Result<Array<String>>>()
+        coordinator.begin(results::add)
+
+        assertTrue(coordinator.succeed(arrayOf("purchase")))
+        assertFalse(coordinator.succeed(arrayOf("duplicate")))
+        assertEquals(listOf("purchase"), results.single().getOrThrow().toList())
+        assertFalse(coordinator.hasPendingOperation())
+    }
+
+    @Test
+    fun `provider failure clears the operation so purchase can retry`() {
+        val coordinator = PurchaseOperationCoordinator<String>()
+        val failures = mutableListOf<String>()
+        coordinator.begin { result -> failures += result.exceptionOrNull()?.message.orEmpty() }
+
+        assertTrue(coordinator.fail(IllegalStateException("provider failed")))
+        coordinator.begin { result -> failures += result.getOrThrow().single() }
+        assertTrue(coordinator.succeed(arrayOf("retry succeeded")))
+        assertEquals(listOf("provider failed", "retry succeeded"), failures)
+    }
+
+    @Test
+    fun `a second purchase is rejected while the first is pending`() {
+        val coordinator = PurchaseOperationCoordinator<String>()
+        coordinator.begin {}
+
+        val error = assertFailsWith<IllegalStateException> { coordinator.begin {} }
+        assertTrue(error.message.orEmpty().startsWith("PURCHASE_IN_PROGRESS"))
+    }
+
+    @Test
+    fun `stale cancellation cannot clear a newer purchase`() {
+        val coordinator = PurchaseOperationCoordinator<String>()
+        val first = coordinator.begin {}
+        coordinator.cancel(first)
+        val second = coordinator.begin {}
+
+        coordinator.cancel(first)
+        assertTrue(coordinator.hasPendingOperation())
+        coordinator.cancel(second)
+        assertFalse(coordinator.hasPendingOperation())
+    }
+
+    @Test
+    fun `an unrelated listener callback does not complete the pending purchase`() {
+        val coordinator = PurchaseOperationCoordinator<String>()
+        val results = mutableListOf<String>()
+        coordinator.begin(
+            accepts = { purchases -> "expected" in purchases },
+            complete = { result -> results += result.getOrThrow().single() },
+        )
+
+        assertFalse(coordinator.succeed(arrayOf("unrelated")))
+        assertTrue(coordinator.hasPendingOperation())
+        assertTrue(results.isEmpty())
+
+        assertTrue(coordinator.succeed(arrayOf("expected")))
+        assertEquals(listOf("expected"), results)
+        assertFalse(coordinator.hasPendingOperation())
+    }
+}
diff --git a/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBilling.kt b/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBilling.kt
index a87dc3353..be8302eb8 100644
--- a/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBilling.kt
+++ b/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBilling.kt
@@ -8,6 +8,7 @@ import com.android.billingclient.api.BillingClientStateListener
 import com.android.billingclient.api.BillingFlowParams
 import com.android.billingclient.api.BillingFlowParams.SubscriptionUpdateParams
 import com.android.billingclient.api.BillingResult
+import com.android.billingclient.api.ConsumeParams
 import com.android.billingclient.api.PendingPurchasesParams
 import com.android.billingclient.api.ProductDetails
 import com.android.billingclient.api.Purchase
@@ -36,6 +37,7 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
     private var context: Context? = null
     private var currentActivity: android.app.Activity? = null
     private var onPurchaseCallback: ((HybridGoogleBillingPurchaseSpec) -> Unit)? = null
+    private val purchaseCoordinator = PurchaseOperationCoordinator<HybridGoogleBillingPurchaseSpec>()
 
     fun setContext(ctx: Context) {
         context = ctx
@@ -60,6 +62,7 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
             billingClientCache = null
             skus.clear()
             onPurchaseCallback = null
+            purchaseCoordinator.fail(Error("CONNECTION_ENDED: Google Billing connection ended"))
             return@async true
         }
     }
@@ -160,18 +163,44 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
 
             obfuscatedAccountId?.let { builder.setObfuscatedAccountId(it) }
             obfuscatedProfileId?.let { builder.setObfuscatedProfileId(it) }
+            val expectedProductIds = skuArr.toSet()
+
+            return@async suspendCancellableCoroutine { continuation ->
+                val handle = try {
+                    purchaseCoordinator.begin(
+                        accepts = { purchases ->
+                            purchases
+                                .flatMap { purchase -> purchase.ids.asIterable() }
+                                .toSet()
+                                .containsAll(expectedProductIds)
+                        },
+                        complete = { result ->
+                            result.fold(
+                                onSuccess = continuation::resume,
+                                onFailure = continuation::resumeWithException,
+                            )
+                        },
+                    )
+                } catch (error: Throwable) {
+                    continuation.resumeWithException(error)
+                    return@suspendCancellableCoroutine
+                }
+                continuation.invokeOnCancellation {
+                    purchaseCoordinator.cancel(handle)
+                }
 
-            val flowParams = builder.build()
-            val billingResult = billingClient.launchBillingFlow(currentActivity!!, flowParams)
-
-            if (billingResult.responseCode != BillingClient.BillingResponseCode.OK) {
-                val errorMessage = billingResult.debugMessage
-                throw Error("BILLING_ERROR: Google Billing operation failed - $errorMessage")
+                val billingResult = try {
+                    billingClient.launchBillingFlow(currentActivity!!, builder.build())
+                } catch (error: Throwable) {
+                    purchaseCoordinator.fail(error)
+                    return@suspendCancellableCoroutine
+                }
+                if (billingResult.responseCode != BillingClient.BillingResponseCode.OK) {
+                    purchaseCoordinator.fail(
+                        Error("BILLING_ERROR: Google Billing operation failed - ${billingResult.debugMessage}")
+                    )
+                }
             }
-
-            // The actual purchase result will be handled in onPurchasesUpdated
-            // For now, return empty array as the purchase is pending
-            return@async emptyArray()
         }
     }
 
@@ -196,6 +225,25 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
         }
     }
 
+    override fun consumeProduct(token: String): Promise<HybridGoogleBillingAcknowledgeResultSpec> {
+        return Promise.async {
+            val billingClient = ensureBillingClient()
+            val consumeParams = ConsumeParams
+                .newBuilder()
+                .setPurchaseToken(token)
+                .build()
+
+            val result = consumeProductAsync(billingClient, consumeParams)
+
+            return@async HybridGoogleBillingAcknowledgeResult(
+                responseCode = result.responseCode.toDouble(),
+                debugMessage = result.debugMessage,
+                code = getBillingResponseCode(result.responseCode),
+                message = getBillingResponseMessage(result.responseCode)
+            )
+        }
+    }
+
     override fun getAvailableItemsByType(type: GoogleBillingProductType): Promise<Array<HybridGoogleBillingPurchaseSpec>> {
         return Promise.async {
             val billingClient = ensureBillingClient()
@@ -235,13 +283,19 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
         val responseCode = billingResult.responseCode
         if (responseCode != BillingClient.BillingResponseCode.OK) {
             Log.e(TAG, "Purchase failed with response code: $responseCode, message: ${billingResult.debugMessage}")
+            val errorCode = when (responseCode) {
+                BillingClient.BillingResponseCode.USER_CANCELED -> "USER_CANCELLED"
+                BillingClient.BillingResponseCode.ITEM_UNAVAILABLE -> "SKU_NOT_FOUND"
+                else -> "BILLING_ERROR"
+            }
+            purchaseCoordinator.fail(
+                Error("$errorCode: ${billingResult.debugMessage}")
+            )
             return
         }
 
-        purchases?.forEach { purchase ->
+        val hybridPurchases = purchases.orEmpty().map<Purchase, HybridGoogleBillingPurchaseSpec> { purchase ->
             Log.i(TAG, "Purchase successful: ${purchase.products.firstOrNull()}")
-            
-            // Create HybridGoogleBillingPurchase object and call the callback
             val hybridPurchase = HybridGoogleBillingPurchase(
                 id = purchase.products.firstOrNull() ?: "",
                 ids = purchase.products.toTypedArray(),
@@ -258,8 +312,20 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
                 obfuscatedAccountId = purchase.accountIdentifiers?.obfuscatedAccountId,
                 obfuscatedProfileId = purchase.accountIdentifiers?.obfuscatedProfileId
             )
-            
-            onPurchaseCallback?.invoke(hybridPurchase)
+            try {
+                onPurchaseCallback?.invoke(hybridPurchase)
+            } catch (error: Throwable) {
+                Log.e(TAG, "Purchase observer callback failed", error)
+            }
+            hybridPurchase
+        }.toTypedArray()
+
+        if (hybridPurchases.isEmpty()) {
+            purchaseCoordinator.fail(
+                Error("PURCHASE_EMPTY: Google Billing returned no purchases")
+            )
+        } else {
+            purchaseCoordinator.succeed(hybridPurchases)
         }
     }
 
@@ -402,6 +468,17 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
         }
     }
 
+    private suspend fun consumeProductAsync(
+        billingClient: BillingClient,
+        params: ConsumeParams
+    ): BillingResult {
+        return suspendCancellableCoroutine { continuation ->
+            billingClient.consumeAsync(params) { billingResult: BillingResult, _: String ->
+                continuation.resume(billingResult)
+            }
+        }
+    }
+
     private fun getBillingResponseCode(responseCode: Int): String {
         return when (responseCode) {
             BillingClient.BillingResponseCode.OK -> "OK"
@@ -431,4 +508,4 @@ class HybridGoogleBilling : HybridGoogleBillingSpec(), PurchasesUpdatedListener
             else -> "Unknown error"
         }
     }
-}
\ No newline at end of file
+}
diff --git a/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBillingBuyItemByTypeParams.kt b/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBillingBuyItemByTypeParams.kt
deleted file mode 100644
index 55804e1a3..000000000
--- a/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBillingBuyItemByTypeParams.kt
+++ /dev/null
@@ -1,18 +0,0 @@
-package com.margelo.nitro.voidhash
-
-import androidx.annotation.Keep
-import com.facebook.proguard.annotations.DoNotStrip
-
-@Keep
-@DoNotStrip
-class HybridGoogleBillingBuyItemByTypeParams(
-    override val type: GoogleBillingProductType,
-    override val skuArr: Array<String>,
-    override val purchaseToken: String?,
-    override val replacementMode: Double?,
-    override val obfuscatedAccountId: String?,
-    override val obfuscatedProfileId: String?,
-    override val offerTokenArr: Array<String>?,
-    override val isOfferPersonalized: Boolean?
-
-) : HybridGoogleBillingBuyItemByTypeParamsSpec()
\ No newline at end of file
diff --git a/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridPaywallWebView.kt b/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridPaywallWebView.kt
index 43b95adb9..1b7693d78 100644
--- a/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridPaywallWebView.kt
+++ b/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/HybridPaywallWebView.kt
@@ -4,6 +4,7 @@ import android.annotation.SuppressLint
 import android.graphics.Bitmap
 import android.util.Base64
 import android.view.View
+import android.view.ViewGroup
 import android.webkit.CookieManager
 import android.webkit.DownloadListener
 import android.webkit.JavascriptInterface
@@ -239,9 +240,9 @@ class HybridPaywallWebView(
     init {
         refreshLayout.addView(
             webView,
-            SwipeRefreshLayout.LayoutParams(
-                SwipeRefreshLayout.LayoutParams.MATCH_PARENT,
-                SwipeRefreshLayout.LayoutParams.MATCH_PARENT,
+            ViewGroup.LayoutParams(
+                ViewGroup.LayoutParams.MATCH_PARENT,
+                ViewGroup.LayoutParams.MATCH_PARENT,
             ),
         )
 
@@ -318,7 +319,7 @@ class HybridPaywallWebView(
                     navigationType = PaywallWebViewNavigationType.OTHER,
                     mainDocumentURL = request.url.toString(),
                     url = request.url.toString(),
-                    loading = view.isLoading,
+                    loading = view.progress < 100,
                     title = view.title ?: "",
                     canGoBack = view.canGoBack(),
                     canGoForward = view.canGoForward(),
@@ -337,7 +338,7 @@ class HybridPaywallWebView(
                     navigationType = PaywallWebViewNavigationType.OTHER,
                     mainDocumentURL = url,
                     url = url,
-                    loading = view.isLoading,
+                    loading = view.progress < 100,
                     title = view.title ?: "",
                     canGoBack = view.canGoBack(),
                     canGoForward = view.canGoForward(),
@@ -359,7 +360,7 @@ class HybridPaywallWebView(
                         code = error.errorCode.toDouble(),
                         description = error.description.toString(),
                         url = request.url.toString(),
-                        loading = view.isLoading,
+                        loading = view.progress < 100,
                         title = view.title ?: "",
                         canGoBack = view.canGoBack(),
                         canGoForward = view.canGoForward(),
@@ -379,7 +380,7 @@ class HybridPaywallWebView(
                         description = errorResponse.reasonPhrase ?: "HTTP Error",
                         statusCode = errorResponse.statusCode.toDouble(),
                         url = request.url.toString(),
-                        loading = view.isLoading,
+                        loading = view.progress < 100,
                         title = view.title ?: "",
                         canGoBack = view.canGoBack(),
                         canGoForward = view.canGoForward(),
@@ -589,7 +590,7 @@ class HybridPaywallWebView(
                             description = reasonPhrase,
                             statusCode = statusCode.toDouble(),
                             url = pendingRequest.uri,
-                            loading = webView.isLoading,
+                            loading = webView.progress < 100,
                             title = webView.title ?: "",
                             canGoBack = webView.canGoBack(),
                             canGoForward = webView.canGoForward(),
@@ -636,7 +637,7 @@ class HybridPaywallWebView(
             navigationType = navigationType,
             mainDocumentURL = url,
             url = url.orEmpty(),
-            loading = webView.isLoading,
+            loading = webView.progress < 100,
             title = webView.title ?: "",
             canGoBack = webView.canGoBack(),
             canGoForward = webView.canGoForward(),
@@ -648,7 +649,7 @@ class HybridPaywallWebView(
         return PaywallWebViewProgressEvent(
             progress = progress,
             url = url.orEmpty(),
-            loading = webView.isLoading,
+            loading = webView.progress < 100,
             title = webView.title ?: "",
             canGoBack = webView.canGoBack(),
             canGoForward = webView.canGoForward(),
@@ -659,7 +660,7 @@ class HybridPaywallWebView(
     private fun createBaseEvent(url: String?): PaywallWebViewBaseEvent {
         return PaywallWebViewBaseEvent(
             url = url.orEmpty(),
-            loading = webView.isLoading,
+            loading = webView.progress < 100,
             title = webView.title ?: "",
             canGoBack = webView.canGoBack(),
             canGoForward = webView.canGoForward(),
@@ -673,7 +674,7 @@ class HybridPaywallWebView(
             val event = PaywallWebViewMessageEvent(
                 data = data,
                 url = webView.url.orEmpty(),
-                loading = webView.isLoading,
+                loading = webView.progress < 100,
                 title = webView.title ?: "",
                 canGoBack = webView.canGoBack(),
                 canGoForward = webView.canGoForward(),
diff --git a/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/PurchaseOperationCoordinator.kt b/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/PurchaseOperationCoordinator.kt
new file mode 100644
index 000000000..83b1b109f
--- /dev/null
+++ b/libraries/react-native/android/src/main/java/com/margelo/nitro/voidhash/PurchaseOperationCoordinator.kt
@@ -0,0 +1,58 @@
+package com.margelo.nitro.voidhash
+
+internal class PurchaseOperationCoordinator<T> {
+    internal data class Handle(val id: Long)
+
+    private data class Pending<T>(
+        val handle: Handle,
+        val accepts: (Array<T>) -> Boolean,
+        val complete: (Result<Array<T>>) -> Unit,
+    )
+
+    private var nextId = 0L
+    private var pending: Pending<T>? = null
+
+    fun begin(complete: (Result<Array<T>>) -> Unit): Handle =
+        begin(accepts = { true }, complete = complete)
+
+    @Synchronized
+    fun begin(
+        accepts: (Array<T>) -> Boolean,
+        complete: (Result<Array<T>>) -> Unit,
+    ): Handle {
+        check(pending == null) { "PURCHASE_IN_PROGRESS: Another Google Billing purchase is already active" }
+        val handle = Handle(++nextId)
+        pending = Pending(handle, accepts, complete)
+        return handle
+    }
+
+    @Synchronized
+    fun cancel(handle: Handle) {
+        if (pending?.handle == handle) {
+            pending = null
+        }
+    }
+
+    fun fail(error: Throwable): Boolean = complete(Result.failure(error))
+
+    fun succeed(purchases: Array<T>): Boolean {
+        val accepted = synchronized(this) {
+            val current = pending ?: return false
+            current.accepts(purchases)
+        }
+        return accepted && complete(Result.success(purchases))
+    }
+
+    @Synchronized
+    fun hasPendingOperation(): Boolean = pending != null
+
+    private fun complete(result: Result<Array<T>>): Boolean {
+        val operation = synchronized(this) {
+            val current = pending ?: return false
+            pending = null
+            current
+        }
+        operation.complete(result)
+        return true
+    }
+}
diff --git a/libraries/react-native/ios-storekit-tests/App/Info.plist b/libraries/react-native/ios-storekit-tests/App/Info.plist
new file mode 100644
index 000000000..21aecfecc
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/App/Info.plist
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleDisplayName</key>
+	<string>Voidhash StoreKit Tests</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.0</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+	<key>UILaunchScreen</key>
+	<dict/>
+</dict>
+</plist>
diff --git a/libraries/react-native/ios-storekit-tests/App/StoreKitTestHostApp.swift b/libraries/react-native/ios-storekit-tests/App/StoreKitTestHostApp.swift
new file mode 100644
index 000000000..f5abe63cd
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/App/StoreKitTestHostApp.swift
@@ -0,0 +1,10 @@
+import SwiftUI
+
+@main
+struct StoreKitTestHostApp: App {
+    var body: some Scene {
+        WindowGroup {
+            Text("Voidhash StoreKit Test Host")
+        }
+    }
+}
diff --git a/libraries/react-native/ios-storekit-tests/Resources/PurchaseValidation.storekit b/libraries/react-native/ios-storekit-tests/Resources/PurchaseValidation.storekit
new file mode 100644
index 000000000..65702f7df
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/Resources/PurchaseValidation.storekit
@@ -0,0 +1,93 @@
+{
+  "identifier" : "2AE9854E-40D9-49B9-B6DD-CB2A367C3FA8",
+  "nonRenewingSubscriptions" : [
+
+  ],
+  "products" : [
+    {
+      "displayPrice" : "4.99",
+      "familyShareable" : false,
+      "internalID" : "1",
+      "localizations" : [
+        {
+          "description" : "A durable entitlement",
+          "displayName" : "Lifetime Access",
+          "locale" : "en_US"
+        }
+      ],
+      "productID" : "com.voidhash.test.lifetime",
+      "referenceName" : "Lifetime Access",
+      "type" : "NonConsumable"
+    },
+    {
+      "displayPrice" : "0.99",
+      "familyShareable" : false,
+      "internalID" : "2",
+      "localizations" : [
+        {
+          "description" : "A consumable credit pack",
+          "displayName" : "Credits",
+          "locale" : "en_US"
+        }
+      ],
+      "productID" : "com.voidhash.test.credits",
+      "referenceName" : "Credits",
+      "type" : "Consumable"
+    }
+  ],
+  "settings" : {
+    "_applicationInternalID" : "1234567890",
+    "_developerTeamID" : "",
+    "_failTransactionsEnabled" : false,
+    "_lastSynchronizedDate" : 0,
+    "_locale" : "en_US",
+    "_storefront" : "USA",
+    "_storeKitErrors" : [
+
+    ],
+    "_timeRate" : 0
+  },
+  "subscriptionGroups" : [
+    {
+      "id" : "EB93E4E8-8B1C-4C51-A266-EE4B48714FCA",
+      "localizations" : [
+
+      ],
+      "name" : "Voidhash Test Subscription",
+      "subscriptions" : [
+        {
+          "adHocOffers" : [
+
+          ],
+          "codeOffers" : [
+
+          ],
+          "displayPrice" : "6.99",
+          "familyShareable" : false,
+          "groupNumber" : 1,
+          "internalID" : "3",
+          "introductoryOffer" : null,
+          "localizations" : [
+            {
+              "description" : "A renewable monthly entitlement",
+              "displayName" : "Monthly Access",
+              "locale" : "en_US"
+            }
+          ],
+          "productID" : "com.voidhash.test.monthly",
+          "referenceName" : "Monthly Access",
+          "recurringSubscriptionPeriod" : "P1M",
+          "subscriptionGroupID" : "EB93E4E8-8B1C-4C51-A266-EE4B48714FCA",
+          "type" : "RecurringSubscription",
+          "winbackOffers" : [
+
+          ]
+        }
+      ]
+    }
+  ],
+  "version" : {
+    "major" : 4,
+    "minor" : 0
+  }
+}
diff --git a/libraries/react-native/ios-storekit-tests/Tests/Info.plist b/libraries/react-native/ios-storekit-tests/Tests/Info.plist
new file mode 100644
index 000000000..6c40a6cd0
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/Tests/Info.plist
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>BNDL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.0</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+</dict>
+</plist>
diff --git a/libraries/react-native/ios-storekit-tests/Tests/StoreKitPurchaseFlowTests.swift b/libraries/react-native/ios-storekit-tests/Tests/StoreKitPurchaseFlowTests.swift
new file mode 100644
index 000000000..fbf293735
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/Tests/StoreKitPurchaseFlowTests.swift
@@ -0,0 +1,93 @@
+import StoreKit
+import StoreKitTest
+import XCTest
+
+@available(iOS 17.0, *)
+final class StoreKitPurchaseFlowTests: XCTestCase {
+    private var session: SKTestSession!
+
+    override func setUpWithError() throws {
+        session = try SKTestSession(configurationFileNamed: "PurchaseValidation")
+        session.disableDialogs = true
+        session.askToBuyEnabled = false
+        session.clearTransactions()
+    }
+
+    override func tearDownWithError() throws {
+        session?.clearTransactions()
+        session = nil
+    }
+
+    private func buyProductOrSkip(identifier: String) async throws -> Transaction {
+        do {
+            return try await session.buyProduct(identifier: identifier)
+        } catch StoreKitError.notEntitled {
+            throw XCTSkip("SKTestSession purchase hit the acknowledged simulator regression")
+        } catch let error as NSError
+            where error.domain == "SKInternalErrorDomain" && error.code == 3
+        {
+            throw XCTSkip("SKTestSession purchase hit the acknowledged simulator regression")
+        }
+    }
+
+    func testNonConsumablePurchaseFinishesAndRestoresAfterLocalReset() async throws {
+        let productID = "com.voidhash.test.lifetime"
+        let purchasedTransaction = try await buyProductOrSkip(identifier: productID)
+
+        let retained = TransactionRetentionStore<Transaction>()
+        let transactionID = String(purchasedTransaction.id)
+        retained.retain(id: transactionID, value: purchasedTransaction)
+        XCTAssertNotNil(retained.value(for: transactionID))
+
+        await purchasedTransaction.finish()
+        retained.remove(id: transactionID)
+        XCTAssertNil(retained.value(for: transactionID))
+
+        let restored = TransactionRetentionStore<Transaction>()
+        for await verification in Transaction.currentEntitlements {
+            guard case .verified(let transaction) = verification,
+                  transaction.productID == productID
+            else { continue }
+            restored.retain(id: String(transaction.id), value: transaction)
+        }
+
+        XCTAssertEqual(restored.values().map(\.productID), [productID])
+    }
+
+    func testConsumableIsNotReturnedAsCurrentEntitlement() async throws {
+        let productID = "com.voidhash.test.credits"
+        let transaction = try await buyProductOrSkip(identifier: productID)
+        await transaction.finish()
+
+        var activeProductIDs: [String] = []
+        for await verification in Transaction.currentEntitlements {
+            guard case .verified(let current) = verification else { continue }
+            activeProductIDs.append(current.productID)
+        }
+
+        XCTAssertFalse(activeProductIDs.contains(productID))
+    }
+
+    func testSubscriptionPurchaseRestoresAfterLocalReset() async throws {
+        let productID = "com.voidhash.test.monthly"
+        let transaction = try await buyProductOrSkip(identifier: productID)
+
+        var restoredProductIDs: [String] = []
+        for await verification in Transaction.currentEntitlements {
+            guard case .verified(let current) = verification else { continue }
+            restoredProductIDs.append(current.productID)
+        }
+        XCTAssertTrue(restoredProductIDs.contains(productID))
+
+        await transaction.finish()
+    }
+
+    func testMissingProductDoesNotCreateTransaction() async throws {
+        do {
+            _ = try await session.buyProduct(identifier: "com.voidhash.test.missing")
+            XCTFail("Expected StoreKit to reject the missing product")
+        } catch {
+            XCTAssertTrue(session.allTransactions().isEmpty)
+        }
+    }
+}
diff --git a/libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/project.pbxproj b/libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/project.pbxproj
new file mode 100644
index 000000000..2834ad0bd
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/project.pbxproj
@@ -0,0 +1,421 @@
+// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	classes = {
+	};
+	objectVersion = 54;
+	objects = {
+
+/* Begin PBXBuildFile section */
+		1C9C52645137E6FF2D9364FF /* TransactionRetentionStore.swift in Sources */ = {isa = PBXBuildFile; fileRef = 7E9B9D18D3BD416ED8CBC364 /* TransactionRetentionStore.swift */; };
+		71743E1162D84E418730624A /* PurchaseValidation.storekit in Resources */ = {isa = PBXBuildFile; fileRef = 1AC31EFFF8867D406EAE8C74 /* PurchaseValidation.storekit */; };
+		98E4F468CE60067C5DD26566 /* StoreKitPurchaseFlowTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 5789F03E119B0FF77F34647D /* StoreKitPurchaseFlowTests.swift */; };
+		FBF55D4DFA2DF08FAD6E140A /* StoreKitTestHostApp.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6EC96AC732D5E2AE9EBEDCBA /* StoreKitTestHostApp.swift */; };
+/* End PBXBuildFile section */
+
+/* Begin PBXContainerItemProxy section */
+		E43D293A98BF98D7A514964D /* PBXContainerItemProxy */ = {
+			isa = PBXContainerItemProxy;
+			containerPortal = FBD4E49A27AEFF0B42A14386 /* Project object */;
+			proxyType = 1;
+			remoteGlobalIDString = 271346F0A3E8EA48F8504037;
+			remoteInfo = StoreKitTestHost;
+		};
+/* End PBXContainerItemProxy section */
+
+/* Begin PBXFileReference section */
+		06DC0DC54F27D7AADB7314A2 /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist; path = Info.plist; sourceTree = "<group>"; };
+		1AC31EFFF8867D406EAE8C74 /* PurchaseValidation.storekit */ = {isa = PBXFileReference; path = PurchaseValidation.storekit; sourceTree = "<group>"; };
+		3594AB4FF78F38B6BF818B4C /* StoreKitTestHost.app */ = {isa = PBXFileReference; includeInIndex = 0; lastKnownFileType = wrapper.application; path = StoreKitTestHost.app; sourceTree = BUILT_PRODUCTS_DIR; };
+		4D6F996A7330DF6D235205D1 /* StoreKitPurchaseTests.xctest */ = {isa = PBXFileReference; includeInIndex = 0; lastKnownFileType = wrapper.cfbundle; path = StoreKitPurchaseTests.xctest; sourceTree = BUILT_PRODUCTS_DIR; };
+		5121A5FFFDFDCBCC7C38AAF0 /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist; path = Info.plist; sourceTree = "<group>"; };
+		5789F03E119B0FF77F34647D /* StoreKitPurchaseFlowTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = StoreKitPurchaseFlowTests.swift; sourceTree = "<group>"; };
+		6EC96AC732D5E2AE9EBEDCBA /* StoreKitTestHostApp.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = StoreKitTestHostApp.swift; sourceTree = "<group>"; };
+		7E9B9D18D3BD416ED8CBC364 /* TransactionRetentionStore.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = TransactionRetentionStore.swift; sourceTree = "<group>"; };
+/* End PBXFileReference section */
+
+/* Begin PBXGroup section */
+		24D45DB545B792AE98FCA790 /* Products */ = {
+			isa = PBXGroup;
+			children = (
+				4D6F996A7330DF6D235205D1 /* StoreKitPurchaseTests.xctest */,
+				3594AB4FF78F38B6BF818B4C /* StoreKitTestHost.app */,
+			);
+			name = Products;
+			sourceTree = "<group>";
+		};
+		2DD93207646CF33AA9AAF24A /* Tests */ = {
+			isa = PBXGroup;
+			children = (
+				06DC0DC54F27D7AADB7314A2 /* Info.plist */,
+				5789F03E119B0FF77F34647D /* StoreKitPurchaseFlowTests.swift */,
+			);
+			path = Tests;
+			sourceTree = "<group>";
+		};
+		5053C5A0EA9DFB6BF9FF4E46 /* ios */ = {
+			isa = PBXGroup;
+			children = (
+				7E9B9D18D3BD416ED8CBC364 /* TransactionRetentionStore.swift */,
+			);
+			name = ios;
+			path = ../ios;
+			sourceTree = "<group>";
+		};
+		7AFCDDEE6121D38D72AC68A2 /* Resources */ = {
+			isa = PBXGroup;
+			children = (
+				1AC31EFFF8867D406EAE8C74 /* PurchaseValidation.storekit */,
+			);
+			path = Resources;
+			sourceTree = "<group>";
+		};
+		8C21C3C7614B1B562227F5F6 = {
+			isa = PBXGroup;
+			children = (
+				CB68E4A96D58BA5280F82D7C /* App */,
+				5053C5A0EA9DFB6BF9FF4E46 /* ios */,
+				7AFCDDEE6121D38D72AC68A2 /* Resources */,
+				2DD93207646CF33AA9AAF24A /* Tests */,
+				24D45DB545B792AE98FCA790 /* Products */,
+			);
+			sourceTree = "<group>";
+		};
+		CB68E4A96D58BA5280F82D7C /* App */ = {
+			isa = PBXGroup;
+			children = (
+				5121A5FFFDFDCBCC7C38AAF0 /* Info.plist */,
+				6EC96AC732D5E2AE9EBEDCBA /* StoreKitTestHostApp.swift */,
+			);
+			path = App;
+			sourceTree = "<group>";
+		};
+/* End PBXGroup section */
+
+/* Begin PBXNativeTarget section */
+		271346F0A3E8EA48F8504037 /* StoreKitTestHost */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = F884ECBCE04D15632A58D338 /* Build configuration list for PBXNativeTarget "StoreKitTestHost" */;
+			buildPhases = (
+				E1CA40D83AA79231C982DE5D /* Sources */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+			);
+			name = StoreKitTestHost;
+			packageProductDependencies = (
+			);
+			productName = StoreKitTestHost;
+			productReference = 3594AB4FF78F38B6BF818B4C /* StoreKitTestHost.app */;
+			productType = "com.apple.product-type.application";
+		};
+		AF8D7E339BBF86B8988638AA /* StoreKitPurchaseTests */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = 9F1E1CAE767DDE3E56ED741D /* Build configuration list for PBXNativeTarget "StoreKitPurchaseTests" */;
+			buildPhases = (
+				49617E58476F3B156809EE60 /* Sources */,
+				63995F2A70CFF0718FD064A1 /* Resources */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+				497BFB92BB7DB682DD4F2F53 /* PBXTargetDependency */,
+			);
+			name = StoreKitPurchaseTests;
+			packageProductDependencies = (
+			);
+			productName = StoreKitPurchaseTests;
+			productReference = 4D6F996A7330DF6D235205D1 /* StoreKitPurchaseTests.xctest */;
+			productType = "com.apple.product-type.bundle.unit-test";
+		};
+/* End PBXNativeTarget section */
+
+/* Begin PBXProject section */
+		FBD4E49A27AEFF0B42A14386 /* Project object */ = {
+			isa = PBXProject;
+			attributes = {
+				BuildIndependentTargetsInParallel = YES;
+				LastUpgradeCheck = 1430;
+				TargetAttributes = {
+				};
+			};
+			buildConfigurationList = 938E6578C1ED87D70BFA70A2 /* Build configuration list for PBXProject "VoidhashStoreKitTests" */;
+			compatibilityVersion = "Xcode 14.0";
+			developmentRegion = en;
+			hasScannedForEncodings = 0;
+			knownRegions = (
+				Base,
+				en,
+			);
+			mainGroup = 8C21C3C7614B1B562227F5F6;
+			minimizedProjectReferenceProxies = 1;
+			preferredProjectObjectVersion = 54;
+			projectDirPath = "";
+			projectRoot = "";
+			targets = (
+				AF8D7E339BBF86B8988638AA /* StoreKitPurchaseTests */,
+				271346F0A3E8EA48F8504037 /* StoreKitTestHost */,
+			);
+		};
+/* End PBXProject section */
+
+/* Begin PBXResourcesBuildPhase section */
+		63995F2A70CFF0718FD064A1 /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				71743E1162D84E418730624A /* PurchaseValidation.storekit in Resources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
+/* Begin PBXSourcesBuildPhase section */
+		49617E58476F3B156809EE60 /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				98E4F468CE60067C5DD26566 /* StoreKitPurchaseFlowTests.swift in Sources */,
+				1C9C52645137E6FF2D9364FF /* TransactionRetentionStore.swift in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+		E1CA40D83AA79231C982DE5D /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				FBF55D4DFA2DF08FAD6E140A /* StoreKitTestHostApp.swift in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXSourcesBuildPhase section */
+
+/* Begin PBXTargetDependency section */
+		497BFB92BB7DB682DD4F2F53 /* PBXTargetDependency */ = {
+			isa = PBXTargetDependency;
+			target = 271346F0A3E8EA48F8504037 /* StoreKitTestHost */;
+			targetProxy = E43D293A98BF98D7A514964D /* PBXContainerItemProxy */;
+		};
+/* End PBXTargetDependency section */
+
+/* Begin XCBuildConfiguration section */
+		0A9F0F9FF437C1D9EF478A76 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				BUNDLE_LOADER = "$(TEST_HOST)";
+				INFOPLIST_FILE = Tests/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+					"@loader_path/Frameworks",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.voidhash.tests.StoreKitPurchaseTests;
+				SDKROOT = iphoneos;
+				TARGETED_DEVICE_FAMILY = "1,2";
+				TEST_HOST = "$(BUILT_PRODUCTS_DIR)/StoreKitTestHost.app/StoreKitTestHost";
+			};
+			name = Debug;
+		};
+		1F13584BAAFE649397EC66EC /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = dwarf;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				ENABLE_TESTABILITY = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_DYNAMIC_NO_PIC = NO;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_OPTIMIZATION_LEVEL = 0;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"$(inherited)",
+					"DEBUG=1",
+				);
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 17.0;
+				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
+				MTL_FAST_MATH = YES;
+				ONLY_ACTIVE_ARCH = YES;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SDKROOT = iphoneos;
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG;
+				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
+				SWIFT_VERSION = 6.0;
+			};
+			name = Debug;
+		};
+		3066712202F420F303776692 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				BUNDLE_LOADER = "$(TEST_HOST)";
+				INFOPLIST_FILE = Tests/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+					"@loader_path/Frameworks",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.voidhash.tests.StoreKitPurchaseTests;
+				SDKROOT = iphoneos;
+				TARGETED_DEVICE_FAMILY = "1,2";
+				TEST_HOST = "$(BUILT_PRODUCTS_DIR)/StoreKitTestHost.app/StoreKitTestHost";
+			};
+			name = Release;
+		};
+		A751E88263B9BAE62D19669C /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_IDENTITY = "iPhone Developer";
+				INFOPLIST_FILE = App/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.voidhash.tests.StoreKitTestHost;
+				SDKROOT = iphoneos;
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Release;
+		};
+		B0FA7472C27B4088F6B9FDF8 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_IDENTITY = "iPhone Developer";
+				INFOPLIST_FILE = App/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.voidhash.tests.StoreKitTestHost;
+				SDKROOT = iphoneos;
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Debug;
+		};
+		DC480F57128A2F5945ED1F46 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				ENABLE_NS_ASSERTIONS = NO;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 17.0;
+				MTL_ENABLE_DEBUG_INFO = NO;
+				MTL_FAST_MATH = YES;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SDKROOT = iphoneos;
+				SWIFT_COMPILATION_MODE = wholemodule;
+				SWIFT_OPTIMIZATION_LEVEL = "-O";
+				SWIFT_VERSION = 6.0;
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+
+/* Begin XCConfigurationList section */
+		938E6578C1ED87D70BFA70A2 /* Build configuration list for PBXProject "VoidhashStoreKitTests" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				1F13584BAAFE649397EC66EC /* Debug */,
+				DC480F57128A2F5945ED1F46 /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Debug;
+		};
+		9F1E1CAE767DDE3E56ED741D /* Build configuration list for PBXNativeTarget "StoreKitPurchaseTests" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				0A9F0F9FF437C1D9EF478A76 /* Debug */,
+				3066712202F420F303776692 /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Debug;
+		};
+		F884ECBCE04D15632A58D338 /* Build configuration list for PBXNativeTarget "StoreKitTestHost" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				B0FA7472C27B4088F6B9FDF8 /* Debug */,
+				A751E88263B9BAE62D19669C /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Debug;
+		};
+/* End XCConfigurationList section */
+	};
+	rootObject = FBD4E49A27AEFF0B42A14386 /* Project object */;
+}
diff --git a/libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/xcshareddata/xcschemes/StoreKitPurchaseTests.xcscheme b/libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/xcshareddata/xcschemes/StoreKitPurchaseTests.xcscheme
new file mode 100644
index 000000000..8d90d4113
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/VoidhashStoreKitTests.xcodeproj/xcshareddata/xcschemes/StoreKitPurchaseTests.xcscheme
@@ -0,0 +1,123 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "1430"
+   version = "1.7">
+   <BuildAction
+      parallelizeBuildables = "YES"
+      buildImplicitDependencies = "YES"
+      runPostActionsOnFailure = "NO">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "NO"
+            buildForProfiling = "NO"
+            buildForArchiving = "NO"
+            buildForAnalyzing = "NO">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "AF8D7E339BBF86B8988638AA"
+               BuildableName = "StoreKitPurchaseTests.xctest"
+               BlueprintName = "StoreKitPurchaseTests"
+               ReferencedContainer = "container:VoidhashStoreKitTests.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "271346F0A3E8EA48F8504037"
+               BuildableName = "StoreKitTestHost.app"
+               BlueprintName = "StoreKitTestHost"
+               ReferencedContainer = "container:VoidhashStoreKitTests.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      onlyGenerateCoverageForSpecifiedTargets = "NO">
+      <StoreKitConfigurationFileReference
+         identifier = "../../../Resources/PurchaseValidation.storekit">
+      </StoreKitConfigurationFileReference>
+      <MacroExpansion>
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "271346F0A3E8EA48F8504037"
+            BuildableName = "StoreKitTestHost.app"
+            BlueprintName = "StoreKitTestHost"
+            ReferencedContainer = "container:VoidhashStoreKitTests.xcodeproj">
+         </BuildableReference>
+      </MacroExpansion>
+      <Testables>
+         <TestableReference
+            skipped = "NO">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "AF8D7E339BBF86B8988638AA"
+               BuildableName = "StoreKitPurchaseTests.xctest"
+               BlueprintName = "StoreKitPurchaseTests"
+               ReferencedContainer = "container:VoidhashStoreKitTests.xcodeproj">
+            </BuildableReference>
+         </TestableReference>
+      </Testables>
+      <CommandLineArguments>
+      </CommandLineArguments>
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "271346F0A3E8EA48F8504037"
+            BuildableName = "StoreKitTestHost.app"
+            BlueprintName = "StoreKitTestHost"
+            ReferencedContainer = "container:VoidhashStoreKitTests.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+      <CommandLineArguments>
+      </CommandLineArguments>
+      <StoreKitConfigurationFileReference
+         identifier = "../../../Resources/PurchaseValidation.storekit">
+      </StoreKitConfigurationFileReference>
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "Release"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "271346F0A3E8EA48F8504037"
+            BuildableName = "StoreKitTestHost.app"
+            BlueprintName = "StoreKitTestHost"
+            ReferencedContainer = "container:VoidhashStoreKitTests.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "Debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "Release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>
diff --git a/libraries/react-native/ios-storekit-tests/project.yml b/libraries/react-native/ios-storekit-tests/project.yml
new file mode 100644
index 000000000..4aff5a7c9
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/project.yml
@@ -0,0 +1,48 @@
+name: VoidhashStoreKitTests
+options:
+  bundleIdPrefix: com.voidhash.tests
+  deploymentTarget:
+    iOS: "17.0"
+  schemePathPrefix: ../../../
+settings:
+  base:
+    SWIFT_VERSION: "6.0"
+targets:
+  StoreKitTestHost:
+    type: application
+    platform: iOS
+    sources:
+      - App
+    info:
+      path: App/Info.plist
+      properties:
+        CFBundleDisplayName: Voidhash StoreKit Tests
+        UILaunchScreen: {}
+  StoreKitPurchaseTests:
+    type: bundle.unit-test
+    platform: iOS
+    info:
+      path: Tests/Info.plist
+    sources:
+      - Tests
+      - path: ../ios/TransactionRetentionStore.swift
+      - path: Resources/PurchaseValidation.storekit
+        buildPhase: resources
+    dependencies:
+      - target: StoreKitTestHost
+    settings:
+      base:
+        BUNDLE_LOADER: $(TEST_HOST)
+        TEST_HOST: $(BUILT_PRODUCTS_DIR)/StoreKitTestHost.app/StoreKitTestHost
+schemes:
+  StoreKitPurchaseTests:
+    build:
+      targets:
+        StoreKitTestHost: all
+        StoreKitPurchaseTests: [test]
+    test:
+      targets:
+        - StoreKitPurchaseTests
+    run:
+      config: Debug
+      storeKitConfiguration: Resources/PurchaseValidation.storekit
diff --git a/libraries/react-native/ios-storekit-tests/run-tests.sh b/libraries/react-native/ios-storekit-tests/run-tests.sh
new file mode 100755
index 000000000..f94f16202
--- /dev/null
+++ b/libraries/react-native/ios-storekit-tests/run-tests.sh
@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+destination="${STOREKIT_SIMULATOR_DESTINATION:-platform=iOS Simulator,OS=18.5,name=iPhone 16 Pro}"
+result_directory="$(mktemp -d "${TMPDIR:-/tmp}/voidhash-storekit-tests.XXXXXX")"
+trap 'rm -rf "$result_directory"' EXIT
+
+set +e
+xcodebuild test \
+  -project ios-storekit-tests/VoidhashStoreKitTests.xcodeproj \
+  -scheme StoreKitPurchaseTests \
+  -destination "$destination" \
+  -derivedDataPath .build/xcode-storekit-host \
+  -resultBundlePath "$result_directory/result.xcresult" \
+  -quiet
+xcode_status=$?
+set -e
+
+if [[ ! -d "$result_directory/result.xcresult" ]]; then
+  exit "$xcode_status"
+fi
+
+set +e
+xcrun xcresulttool get test-results summary \
+  --path "$result_directory/result.xcresult" \
+  --format json | node -e '
+let input = ""
+process.stdin.on("data", (chunk) => { input += chunk })
+process.stdin.on("end", () => {
+  const summary = JSON.parse(input)
+  const passed = summary.passedTests ?? 0
+  const failed = summary.failedTests ?? 0
+  const skipped = summary.skippedTests ?? 0
+  console.log(`StoreKit simulator result: ${passed} passed, ${failed} failed, ${skipped} skipped`)
+  if (failed > 0 || skipped > 0 || passed === 0) {
+    console.error("StoreKit simulator validation requires every discovered test to execute and pass")
+    process.exit(1)
+  }
+})
+'
+summary_status=$?
+set -e
+
+if ((xcode_status != 0 || summary_status != 0)); then
+  xcrun xcresulttool get test-results tests \
+    --path "$result_directory/result.xcresult" \
+    --compact | node -e '
+let input = ""
+process.stdin.on("data", (chunk) => { input += chunk })
+process.stdin.on("end", () => {
+  const report = JSON.parse(input)
+  const visit = (node) => {
+    if (node.nodeType === "Test Case" && node.result !== "Passed") {
+      const messages = (node.children ?? [])
+        .filter((child) => child.nodeType === "Failure Message")
+        .map((child) => child.name)
+      console.error(`${node.name}: ${node.result}${messages.length ? ` — ${messages.join("; ")}` : ""}`)
+    }
+    for (const child of node.children ?? []) visit(child)
+  }
+  for (const node of report.testNodes ?? []) visit(node)
+})
+'
+  exit 1
+fi
diff --git a/libraries/react-native/ios-tests/TransactionRetentionStoreTests.swift b/libraries/react-native/ios-tests/TransactionRetentionStoreTests.swift
new file mode 100644
index 000000000..ccbcf8627
--- /dev/null
+++ b/libraries/react-native/ios-tests/TransactionRetentionStoreTests.swift
@@ -0,0 +1,37 @@
+import Testing
+@testable import VoidhashPurchaseCoordinators
+
+@Suite("StoreKit transaction retention")
+struct TransactionRetentionStoreTests {
+    @Test("purchase and restore transactions remain available for finish")
+    func retainsTransactionsUntilFinish() {
+        let store = TransactionRetentionStore<String>()
+        store.retain(id: "purchase", value: "purchase-value")
+        store.retain(id: "restore", value: "restore-value")
+
+        #expect(store.value(for: "purchase") == "purchase-value")
+        #expect(store.value(for: "restore") == "restore-value")
+        #expect(Set(store.values()) == Set(["purchase-value", "restore-value"]))
+    }
+
+    @Test("successful finish removes only the matching transaction")
+    func removesFinishedTransaction() {
+        let store = TransactionRetentionStore<String>()
+        store.retain(id: "first", value: "first-value")
+        store.retain(id: "second", value: "second-value")
+
+        #expect(store.remove(id: "first") == "first-value")
+        #expect(store.value(for: "first") == nil)
+        #expect(store.value(for: "second") == "second-value")
+    }
+
+    @Test("connection teardown clears retained transactions")
+    func clearsTransactions() {
+        let store = TransactionRetentionStore<String>()
+        store.retain(id: "transaction", value: "value")
+
+        store.removeAll()
+
+        #expect(store.values().isEmpty)
+    }
+}
diff --git a/libraries/react-native/ios/HybridStorekit.swift b/libraries/react-native/ios/HybridStorekit.swift
index 45dfb103c..2b08d445a 100644
--- a/libraries/react-native/ios/HybridStorekit.swift
+++ b/libraries/react-native/ios/HybridStorekit.swift
@@ -4,7 +4,7 @@ import StoreKit
 import UIKit
 
 class HybridStorekit: HybridStorekitSpec {
-    private var transactions: [String: Transaction] = [:]
+    private let transactions = TransactionRetentionStore<Transaction>()
     private var productStore: ProductStore?
     private var onTransactionListener: ((any HybridStorekitTransactionSpec) -> Void)?
     private var subscriptionPollingTask: Task<Void, Error>?
@@ -62,6 +62,7 @@ class HybridStorekit: HybridStorekitSpec {
             var purchasedItems: [any HybridStorekitTransactionSpec] = []
 
             func addTransaction(transaction: Transaction) {
+                self.transactions.retain(id: String(transaction.id), value: transaction)
                 let hybridTransaction = HybridStorekitTransaction(transaction: transaction)
                 purchasedItems.append(hybridTransaction)
 
@@ -78,25 +79,25 @@ class HybridStorekit: HybridStorekitSpec {
                     let transaction = try self.checkVerified(verification)
 
                     if !onlyIncludeActiveItems {
-                        addTransaction(transaction: transaction)
+                        if transaction.productType != .consumable {
+                            addTransaction(transaction: transaction)
+                        }
                         continue
                     }
 
                     switch transaction.productType {
-                    case .nonConsumable, .autoRenewable, .consumable:
-                        if await productStore.getProduct(productID: transaction.productID) != nil {
-                            addTransaction(transaction: transaction)
-                        }
+                    case .nonConsumable, .autoRenewable:
+                        addTransaction(transaction: transaction)
+                    case .consumable:
+                        continue
                     case .nonRenewable:
-                        if await productStore.getProduct(productID: transaction.productID) != nil {
-                            let currentDate = Date()
-                            let expirationDate = Calendar(identifier: .gregorian).date(
-                                byAdding: DateComponents(year: 1),
-                                to: transaction.purchaseDate
-                            )!
-                            if currentDate < expirationDate {
-                                addTransaction(transaction: transaction)
-                            }
+                        let currentDate = Date()
+                        let expirationDate = Calendar(identifier: .gregorian).date(
+                            byAdding: DateComponents(year: 1),
+                            to: transaction.purchaseDate
+                        )!
+                        if currentDate < expirationDate {
+                            addTransaction(transaction: transaction)
                         }
                     default:
                         break
@@ -161,6 +162,7 @@ class HybridStorekit: HybridStorekitSpec {
                 switch result {
                 case .success(let verification):
                     let transaction = try self.checkVerified(verification)
+                    self.transactions.retain(id: String(transaction.id), value: transaction)
                     let hybridTransaction = HybridStorekitTransaction(transaction: transaction)
                     self.onTransactionListener?(hybridTransaction)
                     return hybridTransaction
@@ -191,19 +193,19 @@ class HybridStorekit: HybridStorekitSpec {
 
     func finishTransaction(transactionId: String) throws -> Promise<Void> {
         return Promise.async {
-            guard let transaction = self.transactions[transactionId] else {
+            guard let transaction = self.transactions.value(for: transactionId) else {
                 throw RuntimeError.error(
                     withMessage: "TRANSACTION_NOT_FOUND: Transaction not found")
             }
 
             await transaction.finish()
-            self.transactions.removeValue(forKey: transactionId)
+            self.transactions.remove(id: transactionId)
             return
         }
     }
 
     func getPendingTransactions() throws -> [any HybridStorekitTransactionSpec] {
-        return self.transactions.values.map { HybridStorekitTransaction(transaction: $0) }
+        return self.transactions.values().map { HybridStorekitTransaction(transaction: $0) }
     }
 
     func presentCodeRedemptionSheet() throws {
diff --git a/libraries/react-native/ios/TransactionRetentionStore.swift b/libraries/react-native/ios/TransactionRetentionStore.swift
new file mode 100644
index 000000000..0feea200c
--- /dev/null
+++ b/libraries/react-native/ios/TransactionRetentionStore.swift
@@ -0,0 +1,37 @@
+import Foundation
+
+final class TransactionRetentionStore<Value>: @unchecked Sendable {
+    private let lock = NSLock()
+    private var retained: [String: Value] = [:]
+
+    func retain(id: String, value: Value) {
+        lock.withLock {
+            retained[id] = value
+        }
+    }
+
+    func value(for id: String) -> Value? {
+        lock.withLock {
+            retained[id]
+        }
+    }
+
+    @discardableResult
+    func remove(id: String) -> Value? {
+        lock.withLock {
+            retained.removeValue(forKey: id)
+        }
+    }
+
+    func removeAll() {
+        lock.withLock {
+            retained.removeAll()
+        }
+    }
+
+    func values() -> [Value] {
+        lock.withLock {
+            Array(retained.values)
+        }
+    }
+}
diff --git a/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.cpp b/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.cpp
index bfd4b4cdb..7799a3711 100644
--- a/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.cpp
+++ b/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.cpp
@@ -165,6 +165,22 @@ namespace margelo::nitro::voidhash {
       return __promise;
     }();
   }
+  std::shared_ptr<Promise<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingAcknowledgeResultSpec>>> JHybridGoogleBillingSpec::consumeProduct(const std::string& token) {
+    static const auto method = javaClassStatic()->getMethod<jni::local_ref<JPromise::javaobject>(jni::alias_ref<jni::JString> /* token */)>("consumeProduct");
+    auto __result = method(_javaPart, jni::make_jstring(token));
+    return [&]() {
+      auto __promise = Promise<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingAcknowledgeResultSpec>>::create();
+      __result->cthis()->addOnResolvedListener([=](const jni::alias_ref<jni::JObject>& __boxedResult) {
+        auto __result = jni::static_ref_cast<JHybridGoogleBillingAcknowledgeResultSpec::javaobject>(__boxedResult);
+        __promise->resolve(JNISharedPtr::make_shared_from_jni<JHybridGoogleBillingAcknowledgeResultSpec>(jni::make_global(__result)));
+      });
+      __result->cthis()->addOnRejectedListener([=](const jni::alias_ref<jni::JThrowable>& __throwable) {
+        jni::JniException __jniError(__throwable);
+        __promise->reject(std::make_exception_ptr(__jniError));
+      });
+      return __promise;
+    }();
+  }
   std::shared_ptr<Promise<std::vector<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingPurchaseSpec>>>> JHybridGoogleBillingSpec::getAvailableItemsByType(GoogleBillingProductType type) {
     static const auto method = javaClassStatic()->getMethod<jni::local_ref<JPromise::javaobject>(jni::alias_ref<JGoogleBillingProductType> /* type */)>("getAvailableItemsByType");
     auto __result = method(_javaPart, JGoogleBillingProductType::fromCpp(type));
diff --git a/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.hpp b/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.hpp
index a41d71539..eeaec6711 100644
--- a/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.hpp
+++ b/libraries/react-native/nitrogen/generated/android/c++/JHybridGoogleBillingSpec.hpp
@@ -56,6 +56,7 @@ namespace margelo::nitro::voidhash {
     std::shared_ptr<Promise<std::vector<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingProductDetailSpec>>>> getItemsByType(GoogleBillingProductType type, const std::vector<std::string>& skus) override;
     std::shared_ptr<Promise<std::vector<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingPurchaseSpec>>>> buyItemByType(const GoogleBillingBuyItemByTypeParams& params) override;
     std::shared_ptr<Promise<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingAcknowledgeResultSpec>>> acknowledgePurchase(const std::string& token) override;
+    std::shared_ptr<Promise<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingAcknowledgeResultSpec>>> consumeProduct(const std::string& token) override;
     std::shared_ptr<Promise<std::vector<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingPurchaseSpec>>>> getAvailableItemsByType(GoogleBillingProductType type) override;
 
   private:
diff --git a/libraries/react-native/nitrogen/generated/android/kotlin/com/margelo/nitro/voidhash/HybridGoogleBillingSpec.kt b/libraries/react-native/nitrogen/generated/android/kotlin/com/margelo/nitro/voidhash/HybridGoogleBillingSpec.kt
index f1da79258..835b96795 100644
--- a/libraries/react-native/nitrogen/generated/android/kotlin/com/margelo/nitro/voidhash/HybridGoogleBillingSpec.kt
+++ b/libraries/react-native/nitrogen/generated/android/kotlin/com/margelo/nitro/voidhash/HybridGoogleBillingSpec.kt
@@ -37,7 +37,7 @@ abstract class HybridGoogleBillingSpec: HybridObject() {
   }
 
   // Properties
-  
+
 
   // Methods
   abstract fun initConnection(onPurchase: ((purchase: HybridGoogleBillingPurchaseSpec) -> Unit)?): Promise<Boolean>
@@ -64,7 +64,11 @@ abstract class HybridGoogleBillingSpec: HybridObject() {
   @DoNotStrip
   @Keep
   abstract fun acknowledgePurchase(token: String): Promise<HybridGoogleBillingAcknowledgeResultSpec>
-  
+
+  @DoNotStrip
+  @Keep
+  abstract fun consumeProduct(token: String): Promise<HybridGoogleBillingAcknowledgeResultSpec>
+
   @DoNotStrip
   @Keep
   abstract fun getAvailableItemsByType(type: GoogleBillingProductType): Promise<Array<HybridGoogleBillingPurchaseSpec>>
diff --git a/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.cpp b/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.cpp
index 1adcced0c..e80e12fba 100644
--- a/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.cpp
+++ b/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.cpp
@@ -19,6 +19,7 @@ namespace margelo::nitro::voidhash {
       prototype.registerHybridMethod("getItemsByType", &HybridGoogleBillingSpec::getItemsByType);
       prototype.registerHybridMethod("buyItemByType", &HybridGoogleBillingSpec::buyItemByType);
       prototype.registerHybridMethod("acknowledgePurchase", &HybridGoogleBillingSpec::acknowledgePurchase);
+      prototype.registerHybridMethod("consumeProduct", &HybridGoogleBillingSpec::consumeProduct);
       prototype.registerHybridMethod("getAvailableItemsByType", &HybridGoogleBillingSpec::getAvailableItemsByType);
     });
   }
diff --git a/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.hpp b/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.hpp
index 69e0ef623..d2e4dc365 100644
--- a/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.hpp
+++ b/libraries/react-native/nitrogen/generated/shared/c++/HybridGoogleBillingSpec.hpp
@@ -72,6 +72,7 @@ namespace margelo::nitro::voidhash {
       virtual std::shared_ptr<Promise<std::vector<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingProductDetailSpec>>>> getItemsByType(GoogleBillingProductType type, const std::vector<std::string>& skus) = 0;
       virtual std::shared_ptr<Promise<std::vector<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingPurchaseSpec>>>> buyItemByType(const GoogleBillingBuyItemByTypeParams& params) = 0;
       virtual std::shared_ptr<Promise<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingAcknowledgeResultSpec>>> acknowledgePurchase(const std::string& token) = 0;
+      virtual std::shared_ptr<Promise<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingAcknowledgeResultSpec>>> consumeProduct(const std::string& token) = 0;
       virtual std::shared_ptr<Promise<std::vector<std::shared_ptr<margelo::nitro::voidhash::HybridGoogleBillingPurchaseSpec>>>> getAvailableItemsByType(GoogleBillingProductType type) = 0;
 
     protected:
diff --git a/libraries/react-native/package.json b/libraries/react-native/package.json
index 5a4084730..51713c7e2 100644
--- a/libraries/react-native/package.json
+++ b/libraries/react-native/package.json
@@ -62,6 +62,9 @@
     "typecheck": "tsgo --noEmit -p tsconfig.test.json",
     "build": "expo-module build",
     "test": "vitest --config vitest.unit.mts run",
+    "test:android-purchase-coordinator": "../../node_modules/@react-native/gradle-plugin/gradlew -p android/coordinator-tests test --no-daemon",
+    "test:storekit-purchase-coordinator": "swift test --package-path .",
+    "test:storekit-simulator": "bash ios-storekit-tests/run-tests.sh",
     "clean": "rm -rf android/build node_modules/**/android/build lib",
     "lint": "biome check .",
     "lint-ci": "biome check .",
@@ -70,6 +73,7 @@
     "specs": "pnpm run typescript && nitro-codegen --logLevel=\"debug\""
   },
   "dependencies": {
+    "@noble/hashes": "^2.2.0",
     "@voidhash/generated-clients": "workspace:*"
   },
   "devDependencies": {
diff --git a/libraries/react-native/src/client-effect.ts b/libraries/react-native/src/client-effect.ts
index 851f0d8b1..06460dcc8 100644
--- a/libraries/react-native/src/client-effect.ts
+++ b/libraries/react-native/src/client-effect.ts
@@ -4,7 +4,7 @@ import { AtomRegistry } from "effect/unstable/reactivity";
 import { AUTOMATIC_EVENTS } from "./core/analytics/constants";
 import { AnalyticsService } from "./core/analytics/service";
 import type { AnalyticsIngestEvent } from "./core/analytics/types";
-import type { SubscriptionProduct } from "./core/entities/product";
+import type { Product } from "./core/entities/product";
 import type { Transaction } from "./core/entities/transaction";
 import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
 import {
@@ -292,7 +292,7 @@ const makeInitializedClient = (options: { schema: RuntimeSchema }) =>
         }),
 
       purchase: (
-        product: SubscriptionProduct,
+        product: Product,
         _options: {
           method?: "native";
         },
diff --git a/libraries/react-native/src/client.tsx b/libraries/react-native/src/client.tsx
index 4279852c6..5484e6fc7 100644
--- a/libraries/react-native/src/client.tsx
+++ b/libraries/react-native/src/client.tsx
@@ -6,7 +6,7 @@ import { VoidhashEffectClient } from "./client-effect";
 import { AnalyticsService } from "./core/analytics/service";
 import { AsyncStorageCacheAdapter } from "./core/caching/async-storage-cache";
 import { CacheManager } from "./core/caching/cache-manager";
-import type { SubscriptionProduct } from "./core/entities/product";
+import type { Product } from "./core/entities/product";
 import { FeatureFlagService } from "./core/feature-flags/feature-flag-service";
 import {
   type PersonAttributes,
@@ -387,7 +387,7 @@ export class VoidhashClient {
    * Purchases a product.
    */
   async purchase(
-    product: SubscriptionProduct,
+    product: Product,
     _options: {
       method?: "native";
     },
diff --git a/libraries/react-native/src/core/entities/product.ts b/libraries/react-native/src/core/entities/product.ts
index 9fa0d57c4..a7859ab79 100644
--- a/libraries/react-native/src/core/entities/product.ts
+++ b/libraries/react-native/src/core/entities/product.ts
@@ -9,6 +9,7 @@ export class Product {
   readonly currency: string;
   readonly type: string;
   readonly platform: "ios" | "android";
+  readonly googlePlayOfferToken?: string;
 
   constructor(
     id: string,
@@ -21,6 +22,7 @@ export class Product {
     currency: string,
     type: string,
     platform: "ios" | "android",
+    options?: { googlePlayOfferToken?: string },
   ) {
     this.id = id;
     this.slug = slug;
@@ -32,6 +34,7 @@ export class Product {
     this.currency = currency;
     this.type = type;
     this.platform = platform;
+    this.googlePlayOfferToken = options?.googlePlayOfferToken;
   }
 }
 
@@ -50,8 +53,21 @@ export class SubscriptionProduct extends Product {
     type: string,
     platform: "ios" | "android",
     interval: string,
+    options?: { googlePlayOfferToken?: string },
   ) {
-    super(id, slug, name, description, displayName, displayPrice, price, currency, type, platform);
+    super(
+      id,
+      slug,
+      name,
+      description,
+      displayName,
+      displayPrice,
+      price,
+      currency,
+      type,
+      platform,
+      options,
+    );
     this.interval = interval;
   }
 }
diff --git a/libraries/react-native/src/core/entities/transaction.ts b/libraries/react-native/src/core/entities/transaction.ts
index 58d4ec708..bc158f71e 100644
--- a/libraries/react-native/src/core/entities/transaction.ts
+++ b/libraries/react-native/src/core/entities/transaction.ts
@@ -14,6 +14,8 @@ export class Transaction {
   readonly receipt?: string;
   readonly price?: number;
   readonly currency?: string;
+  readonly appAccountToken?: string;
+  readonly purchaseState: "purchased" | "pending" | "unspecified";
 
   constructor(
     id: string,
@@ -32,6 +34,8 @@ export class Transaction {
       receipt?: string;
       price?: number;
       currency?: string;
+      appAccountToken?: string;
+      purchaseState?: "purchased" | "pending" | "unspecified";
     },
   ) {
     this.id = id;
@@ -49,5 +53,7 @@ export class Transaction {
     this.receipt = options?.receipt;
     this.price = options?.price;
     this.currency = options?.currency;
+    this.appAccountToken = options?.appAccountToken;
+    this.purchaseState = options?.purchaseState ?? "purchased";
   }
 }
diff --git a/libraries/react-native/src/core/networking/api-client.ts b/libraries/react-native/src/core/networking/api-client.ts
index 5b344ceff..8be3ba76e 100644
--- a/libraries/react-native/src/core/networking/api-client.ts
+++ b/libraries/react-native/src/core/networking/api-client.ts
@@ -30,7 +30,9 @@ export interface ReactNativeFeatureFlagsResponse {
 }
 
 export interface ReactNativeSyncTransactionRequest {
+  readonly appAccountToken?: string | undefined;
   readonly platform: "android" | "ios";
+  readonly providerProductId?: string | undefined;
   readonly productSlug: string;
   readonly purchaseDate: number;
   readonly quantity: number;
@@ -72,7 +74,8 @@ const normalizeFeatureFlagsResponse = (
   })),
 });
 
-const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
+/** Binds the generated core client to the React Native SDK request surface. */
+export const bindReactNativeSdkClient = (client: VoidhashCoreClient) => ({
   sdk: {
     /**
      * Fetch the project's schema from the server. Called once on `Provider`
diff --git a/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts b/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
index 9ff5384ef..9d166a035 100644
--- a/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/app-store-adapter.ts
@@ -5,7 +5,7 @@ import { Effect, Layer } from "effect";
 import { Storekit } from "../../nitro";
 import type { StorekitProduct } from "../../specs/ios/StorekitProduct.nitro";
 import type { StorekitTransaction } from "../../specs/ios/StorekitTransaction.nitro";
-import { Product, type SubscriptionProduct } from "../entities/product";
+import { Product } from "../entities/product";
 import { Transaction } from "../entities/transaction";
 import type { RuntimeProductDefinition } from "../schema/runtime";
 import {
@@ -28,6 +28,7 @@ import { PaymentAdapter } from "./payment-adapter";
 export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
   acknowledgePurchase(
     transaction: Transaction,
+    _productType?: RuntimeProductDefinition["type"],
   ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never> {
     return Effect.gen(function* acknowledgePurchase() {
       if (!Storekit) {
@@ -58,8 +59,8 @@ export const AppStoreAdapter = Layer.succeed(PaymentAdapter, {
     });
   },
 
-  buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
-    product: TSubscriptionProduct,
+  buyProduct<TProduct extends Product>(
+    product: TProduct,
     quantity = 1,
     appAccountToken?: string,
   ): Effect.Effect<
@@ -399,6 +400,7 @@ function mapStorekitTransactionToTransaction(nativeTransaction: StorekitTransact
     "ios",
     {
       currency: nativeTransaction.currencyIos,
+      appAccountToken: nativeTransaction.appAccountToken ?? undefined,
       expirationDate: nativeTransaction.expirationDateIos ?? undefined,
       originalPurchaseDate: nativeTransaction.originalTransactionDateIos,
       originalTransactionId: nativeTransaction.originalTransactionIdentifierIos,
diff --git a/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts b/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
index 09c405a39..10768a2ca 100644
--- a/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/google-play-adapter.ts
@@ -5,7 +5,7 @@ import { Effect, Layer } from "effect";
 import { GoogleBilling } from "../../nitro";
 import type { GoogleBillingProductDetail } from "../../specs/android/GoogleBillingProductDetail.nitro";
 import type { GoogleBillingPurchase } from "../../specs/android/GoogleBillingPurchase.nitro";
-import { Product, type SubscriptionProduct } from "../entities/product";
+import { Product } from "../entities/product";
 import { Transaction } from "../entities/transaction";
 import type { RuntimeProductDefinition } from "../schema/runtime";
 import {
@@ -26,6 +26,7 @@ import { PaymentAdapter } from "./payment-adapter";
 export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
   acknowledgePurchase(
     transaction: Transaction,
+    productType?: RuntimeProductDefinition["type"],
   ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never> {
     return Effect.gen(function* acknowledgePurchase() {
       if (!GoogleBilling) {
@@ -54,7 +55,10 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
             cause: error,
             message: "Failed to acknowledge purchase",
           }),
-        try: () => GoogleBilling!.acknowledgePurchase(transaction.purchaseToken!),
+        try: () =>
+          productType === "one-time-consumable"
+            ? GoogleBilling!.consumeProduct(transaction.purchaseToken!)
+            : GoogleBilling!.acknowledgePurchase(transaction.purchaseToken!),
       });
 
       if (result.responseCode !== 0) {
@@ -73,8 +77,8 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
     });
   },
 
-  buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
-    product: TSubscriptionProduct,
+  buyProduct<TProduct extends Product>(
+    product: TProduct,
     _quantity = 1,
     appAccountToken?: string,
   ): Effect.Effect<
@@ -98,7 +102,15 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
       Effect.logDebug("Attempting to buy product", { productId: product.id });
 
       // Determine product type based on the product's type field
-      const productType: "inapp" | "subs" = product.type === "subs" ? "subs" : "inapp";
+      const productType: "inapp" | "subs" =
+        product.type === "subs" || product.type === "subscription" ? "subs" : "inapp";
+      if (productType === "subs" && !product.googlePlayOfferToken) {
+        return yield* Effect.fail(
+          new FailedToBuyProductError({
+            message: "Google Play subscription has no configured offer token",
+          }),
+        );
+      }
 
       const nativePurchases = yield* Effect.tryPromise({
         catch: (error) => {
@@ -138,7 +150,10 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
             isOfferPersonalized: false,
             obfuscatedAccountId: appAccountToken,
             obfuscatedProfileId: undefined,
-            offerTokenArr: undefined,
+            offerTokenArr:
+              productType === "subs" && product.googlePlayOfferToken
+                ? [product.googlePlayOfferToken]
+                : undefined,
             purchaseToken: undefined,
             replacementMode: undefined,
             skuArr: [product.id],
@@ -155,6 +170,14 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
       }
 
       const transaction = mapGoogleBillingPurchaseToTransaction(nativePurchases[0]);
+      if (transaction.purchaseState === "pending") {
+        return yield* Effect.fail(new PurchasePendingError({ message: "Purchase is pending" }));
+      }
+      if (transaction.purchaseState !== "purchased") {
+        return yield* Effect.fail(
+          new FailedToBuyProductError({ message: "Google Billing returned an unknown state" }),
+        );
+      }
       Effect.logDebug("Purchase successful", {
         transactionId: transaction.id,
       });
@@ -229,12 +252,13 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
 
       const allProducts = [...inappProducts, ...subsProducts];
       return yield* Effect.succeed(
-        allProducts.map((nativeProduct) =>
-          mapGoogleBillingProductToProduct(
-            productIds.find((pair) => pair.id === nativeProduct.id)?.slug ?? "",
-            nativeProduct,
-          ),
-        ),
+        allProducts.map((nativeProduct) => {
+          const productDefinition = Object.values(productDefinitions).find(
+            (definition) =>
+              definition.configuration.providers.googlePlay?.productId === nativeProduct.id,
+          );
+          return mapGoogleBillingProductToProduct(productDefinition, nativeProduct);
+        }),
       );
     });
   },
@@ -271,16 +295,15 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
         try: () => GoogleBilling!.getAvailableItemsByType("subs"),
       });
 
-      const allPurchases = [...inappPurchases, ...subsPurchases];
-      const transactions = allPurchases.map((purchase) =>
-        mapGoogleBillingPurchaseToTransaction(purchase),
-      );
+      const inappTransactions = inappPurchases.map(mapGoogleBillingPurchaseToTransaction);
+      const subscriptionTransactions = subsPurchases.map(mapGoogleBillingPurchaseToTransaction);
+      const transactions = [...inappTransactions, ...subscriptionTransactions];
 
       if (onlyIncludeActiveItems) {
-        const activeTransactions = transactions.filter(
-          // TODO: Check if this is the correct way to do this
-          (t) => t.isAutoRenewing || t.productId.includes("inapp"),
-        );
+        const activeTransactions = [
+          ...inappTransactions,
+          ...subscriptionTransactions.filter((transaction) => transaction.isAutoRenewing),
+        ];
         Effect.logDebug("Filtered active transactions", {
           count: activeTransactions.length,
         });
@@ -329,13 +352,20 @@ export const GooglePlayAdapter = Layer.succeed(PaymentAdapter, {
 
 // Helper functions for mapping Google Billing objects to our domain objects
 function mapGoogleBillingProductToProduct(
-  slug: string,
+  productDefinition: RuntimeProductDefinition | undefined,
   nativeProduct: GoogleBillingProductDetail,
 ): Product {
+  const googlePlayConfiguration = productDefinition?.configuration.providers.googlePlay;
+  const selectedOffer = nativeProduct.subscriptionOfferDetails?.find(
+    (offer) =>
+      !googlePlayConfiguration?.basePlanId ||
+      offer.basePlanId === googlePlayConfiguration.basePlanId,
+  );
+
   return new Product(
     nativeProduct.id,
-    slug,
-    nativeProduct.title,
+    productDefinition?.slug ?? "",
+    productDefinition?.properties.name ?? nativeProduct.title,
     nativeProduct.description,
     nativeProduct.displayName,
     nativeProduct.displayPrice,
@@ -343,6 +373,7 @@ function mapGoogleBillingProductToProduct(
     nativeProduct.currency,
     nativeProduct.type,
     "android",
+    { googlePlayOfferToken: selectedOffer?.offerToken },
   );
 }
 
@@ -357,6 +388,13 @@ function mapGoogleBillingPurchaseToTransaction(nativePurchase: GoogleBillingPurc
     "android",
     {
       isAutoRenewing: nativePurchase.isAutoRenewing,
+      appAccountToken: nativePurchase.obfuscatedAccountId,
+      purchaseState:
+        nativePurchase.purchaseState === 1
+          ? "purchased"
+          : nativePurchase.purchaseState === 2
+            ? "pending"
+            : "unspecified",
       purchaseToken: nativePurchase.purchaseToken,
       receipt: nativePurchase.originalJson,
     },
diff --git a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
index a783800ef..9a288ade8 100644
--- a/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
+++ b/libraries/react-native/src/core/payment-adapters/payment-adapter.ts
@@ -1,6 +1,6 @@
 import { Context, type Effect } from "effect";
 
-import type { Product, SubscriptionProduct } from "../entities/product";
+import type { Product } from "../entities/product";
 import type { Transaction } from "../entities/transaction";
 import type { RuntimeProductDefinition } from "../schema/runtime";
 import type {
@@ -38,8 +38,8 @@ export class PaymentAdapter extends Context.Service<
       productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
     ): Effect.Effect<Product[], NativeAdapterNotInitializedError | FailedToGetProductsError, never>;
 
-    buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
-      product: TSubscriptionProduct,
+    buyProduct<TProduct extends Product>(
+      product: TProduct,
       quantity?: number,
       appAccountToken?: string,
     ): Effect.Effect<
@@ -54,6 +54,7 @@ export class PaymentAdapter extends Context.Service<
 
     acknowledgePurchase(
       transaction: Transaction,
+      productType?: RuntimeProductDefinition["type"],
     ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never>;
 
     getPurchaseHistory(
diff --git a/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts b/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
index d7192ce20..ddf375796 100644
--- a/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
+++ b/libraries/react-native/src/core/paywalls/paywall-runtime-config.ts
@@ -3,7 +3,7 @@ import type {
   PaywallRuntimeConfigProduct,
   PaywallRuntimeConfigProductPeriod,
 } from "../../internal/paywall-bridge/protocol";
-import type { SubscriptionProduct } from "../entities/product";
+import type { Product, SubscriptionProduct } from "../entities/product";
 import type { PaywallReleaseRuntime } from "./paywall-service";
 
 const PERIOD_BY_NORMALIZED_INTERVAL: Readonly<Record<string, PaywallRuntimeConfigProductPeriod>> = {
@@ -38,9 +38,7 @@ export function mapStoreIntervalToPeriod(
   return PERIOD_BY_NORMALIZED_INTERVAL[interval.trim().toLowerCase()];
 }
 
-function mapProductToRuntimeConfigProduct(
-  product: SubscriptionProduct,
-): PaywallRuntimeConfigProduct {
+function mapProductToRuntimeConfigProduct(product: Product): PaywallRuntimeConfigProduct {
   return {
     id: product.id,
     slug: product.slug,
@@ -65,7 +63,7 @@ function mapProductToRuntimeConfigProduct(
  */
 export function buildPaywallRuntimeConfig(options: {
   runtime: PaywallReleaseRuntime;
-  productsBySlug: Readonly<Record<string, SubscriptionProduct | null>>;
+  productsBySlug: Readonly<Record<string, Product | null>>;
   platform: "ios" | "android" | "unknown";
   locale: string | undefined;
   onSkippedProductSlug?: (slug: string) => void;
diff --git a/libraries/react-native/src/core/products/product-service.ts b/libraries/react-native/src/core/products/product-service.ts
index 1cfa1728c..3fd3097f4 100644
--- a/libraries/react-native/src/core/products/product-service.ts
+++ b/libraries/react-native/src/core/products/product-service.ts
@@ -1,7 +1,7 @@
 import { Effect, Layer, Context } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
-import type { Product, SubscriptionProduct } from "../entities/product";
+import type { Product } from "../entities/product";
 import { PaymentAdapter } from "../payment-adapters/payment-adapter";
 import type { ProductSlug } from "../schema/registry";
 import type { RuntimeProductDefinition, RuntimeSchema } from "../schema/runtime";
@@ -11,7 +11,7 @@ import type { RuntimeProductDefinition, RuntimeSchema } from "../schema/runtime"
  * when the underlying store SDK doesn't know about that product on this
  * platform).
  */
-export type ProductsBySlug = Record<ProductSlug, SubscriptionProduct | null>;
+export type ProductsBySlug = Record<ProductSlug, Product | null>;
 
 const NATIVE_PRODUCTS_CACHE_TTL_MS = 1000 * 60 * 60 * 24;
 
@@ -23,11 +23,11 @@ const mapNativeProductsToProductMap = (
   productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
   nativeProducts: Product[],
 ): ProductsBySlug => {
-  const productMap = {} as Record<string, SubscriptionProduct | null>;
+  const productMap = {} as Record<string, Product | null>;
 
   for (const slug of Object.keys(productDefinitions)) {
     const nativeProduct = nativeProducts.find((candidate) => candidate.slug === slug);
-    productMap[slug] = (nativeProduct as SubscriptionProduct | undefined) ?? null;
+    productMap[slug] = nativeProduct ?? null;
   }
 
   return productMap as ProductsBySlug;
diff --git a/libraries/react-native/src/core/schema/runtime.ts b/libraries/react-native/src/core/schema/runtime.ts
index 23c24ddc8..21a74af72 100644
--- a/libraries/react-native/src/core/schema/runtime.ts
+++ b/libraries/react-native/src/core/schema/runtime.ts
@@ -24,7 +24,7 @@ export interface RuntimeProductProviders {
 
 export interface RuntimeProductDefinition {
   readonly slug: string;
-  readonly type: "subscription";
+  readonly type: "subscription" | "one-time" | "one-time-consumable";
   readonly properties: { readonly name: string };
   readonly configuration: {
     readonly providers: RuntimeProductProviders;
diff --git a/libraries/react-native/src/core/testing/payment-adapter.ts b/libraries/react-native/src/core/testing/payment-adapter.ts
index a02c192d2..a455bc163 100644
--- a/libraries/react-native/src/core/testing/payment-adapter.ts
+++ b/libraries/react-native/src/core/testing/payment-adapter.ts
@@ -1,6 +1,6 @@
 import { Effect, Layer } from "effect";
 
-import { Product, type SubscriptionProduct } from "../entities/product";
+import { Product } from "../entities/product";
 import { Transaction } from "../entities/transaction";
 import type {
   FailedToAcknowledgePurchaseError,
@@ -23,6 +23,7 @@ import type { RuntimeProductDefinition } from "../schema/runtime";
 export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
   acknowledgePurchase(
     transaction: Transaction,
+    _productType?: RuntimeProductDefinition["type"],
   ): Effect.Effect<void, FailedToAcknowledgePurchaseError, never> {
     Effect.logDebug("TestPaymentAdapter: Acknowledging purchase", {
       transactionId: transaction.id,
@@ -30,8 +31,8 @@ export const TestPaymentAdapter = Layer.succeed(PaymentAdapter, {
     return Effect.void;
   },
 
-  buyProduct<TSubscriptionProduct extends SubscriptionProduct>(
-    product: TSubscriptionProduct,
+  buyProduct<TProduct extends Product>(
+    product: TProduct,
     quantity = 1,
     _appAccountToken?: string,
   ): Effect.Effect<
diff --git a/libraries/react-native/src/core/transactions/errors.ts b/libraries/react-native/src/core/transactions/errors.ts
new file mode 100644
index 000000000..d9a35e625
--- /dev/null
+++ b/libraries/react-native/src/core/transactions/errors.ts
@@ -0,0 +1,12 @@
+import { Data } from "effect";
+
+export interface TransactionReconciliationFailure {
+  readonly error: unknown;
+  readonly transactionId: string;
+}
+
+/** Reports every transaction that failed during a reconciliation pass. */
+export class ReconcileTransactionsError extends Data.TaggedError("ReconcileTransactionsError")<{
+  readonly failures: ReadonlyArray<TransactionReconciliationFailure>;
+  readonly message: string;
+}> {}
diff --git a/libraries/react-native/src/core/transactions/transaction-service.ts b/libraries/react-native/src/core/transactions/transaction-service.ts
index d8480ff89..1531e5117 100644
--- a/libraries/react-native/src/core/transactions/transaction-service.ts
+++ b/libraries/react-native/src/core/transactions/transaction-service.ts
@@ -1,7 +1,7 @@
-import { Effect, Layer, Context } from "effect";
+import { Cause, Context, Deferred, Effect, Exit, Layer } from "effect";
 
 import { CacheManager } from "../caching/cache-manager";
-import type { SubscriptionProduct } from "../entities/product";
+import type { Product } from "../entities/product";
 import type { Transaction } from "../entities/transaction";
 import { PersonInfoManager } from "../identity/person-info-manager";
 import { IdentityManager } from "../identity/identity-manager";
@@ -10,9 +10,16 @@ import { PaymentAdapter } from "../payment-adapters/payment-adapter";
 import type { RuntimeProductDefinition, RuntimeSchema } from "../schema/runtime";
 import { SdkConfiguration } from "../sdk-configuration";
 import { getCommonSdkHeaders } from "../utils/get-common-sdk-headers";
+import { deriveAccountToken } from "../utils/account-token";
+import { ReconcileTransactionsError } from "./errors";
 
 const PROCESSED_TRANSACTION_TTL_MS = 1000 * 60 * 30;
 
+interface TransactionProcessingState {
+  readonly backendAccepted: boolean;
+  readonly storeFinalized: boolean;
+}
+
 const buildTransactionProcessingKey = (transaction: Transaction) =>
   `${transaction.platform}:${transaction.transactionId}:${transaction.purchaseDate}`;
 
@@ -39,6 +46,21 @@ const resolveTransactionProductSlug = (
   return matchedProduct?.slug ?? transaction.productId;
 };
 
+const resolveTransactionProductDefinition = (
+  transaction: Transaction,
+  productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
+) =>
+  Object.values(productDefinitions).find((productDefinition) => {
+    if (productDefinition.slug === transaction.productId) {
+      return true;
+    }
+    const provider =
+      transaction.platform === "ios"
+        ? productDefinition.configuration.providers.appleAppStore
+        : productDefinition.configuration.providers.googlePlay;
+    return provider?.productId === transaction.productId;
+  });
+
 const mapTransactionToSyncPayload = (
   transaction: Transaction,
   productDefinitions: Readonly<Record<string, RuntimeProductDefinition>>,
@@ -47,7 +69,9 @@ const mapTransactionToSyncPayload = (
 
   if (transaction.platform === "ios") {
     return {
+      appAccountToken: transaction.appAccountToken,
       platform: "ios" as const,
+      providerProductId: transaction.productId,
       productSlug,
       purchaseDate: transaction.purchaseDate,
       quantity: transaction.quantity,
@@ -57,7 +81,9 @@ const mapTransactionToSyncPayload = (
   }
 
   return {
+    appAccountToken: transaction.appAccountToken,
     platform: "android" as const,
+    providerProductId: transaction.productId,
     productSlug,
     purchaseDate: transaction.purchaseDate,
     purchaseToken: transaction.purchaseToken ?? "",
@@ -85,54 +111,107 @@ export class TransactionService extends Context.Service<TransactionService>()(
       const paymentAdapter = yield* PaymentAdapter;
       const sdkConfiguration = yield* SdkConfiguration;
 
-      const inFlightKeys = new Set<string>();
+      const inFlightTransactions = new Map<string, Deferred.Deferred<void, unknown>>();
 
-      const processObservedTransaction = (transaction: Transaction, schema: RuntimeSchema) =>
-        Effect.gen(function* () {
-          const transactionProcessingKey = buildTransactionProcessingKey(transaction);
-          if (inFlightKeys.has(transactionProcessingKey)) {
-            return;
+      const refreshPerson = Effect.gen(function* () {
+        const distinctId = yield* identityManager.getDistinctId();
+        yield* personInfoManager.getPerson(distinctId, "fetch");
+      });
+
+      const processTransaction = (transaction: Transaction, schema: RuntimeSchema) =>
+        Effect.suspend(() => {
+          if (transaction.purchaseState !== "purchased") {
+            return Effect.logDebug("Skipping transaction that is not purchased", {
+              purchaseState: transaction.purchaseState,
+              transactionId: transaction.transactionId,
+            });
           }
 
-          const processedCacheKey = getProcessedTransactionCacheKey(transactionProcessingKey);
-          const cachedTransaction = yield* cacheManager.get<boolean>(processedCacheKey);
-          if (cachedTransaction && !cachedTransaction.isExpired && cachedTransaction.value) {
-            return;
+          const transactionProcessingKey = buildTransactionProcessingKey(transaction);
+          const existing = inFlightTransactions.get(transactionProcessingKey);
+          if (existing) {
+            return Deferred.await(existing);
           }
 
-          if (transaction.platform === "android" && !transaction.purchaseToken) {
-            yield* Effect.logWarning(
-              "Skipping observed Android transaction without purchase token",
-              {
-                transactionId: transaction.transactionId,
-              },
+          const deferred = Deferred.makeUnsafe<void, unknown>();
+          inFlightTransactions.set(transactionProcessingKey, deferred);
+
+          const execution = Effect.gen(function* () {
+            const processedCacheKey = getProcessedTransactionCacheKey(transactionProcessingKey);
+            const cachedTransaction = yield* cacheManager.get<boolean | TransactionProcessingState>(
+              processedCacheKey,
             );
-            return;
-          }
+            const cachedState =
+              cachedTransaction && !cachedTransaction.isExpired
+                ? cachedTransaction.value === true
+                  ? { backendAccepted: true, storeFinalized: true }
+                  : cachedTransaction.value === false
+                    ? undefined
+                    : cachedTransaction.value
+                : undefined;
 
-          inFlightKeys.add(transactionProcessingKey);
-          try {
-            const commonHeaders = yield* getCommonSdkHeaders();
-            const distinctId = yield* identityManager.getDistinctId();
-
-            yield* apiClient.sdk.syncTransaction({
-              headers: {
-                ...commonHeaders,
-                "x-distinct-id": distinctId,
-              },
-              payload: mapTransactionToSyncPayload(transaction, schema.products),
-            });
+            if (cachedState?.storeFinalized) {
+              return;
+            }
 
-            yield* cacheManager.set(processedCacheKey, true, {
-              ttl: PROCESSED_TRANSACTION_TTL_MS,
-            });
+            if (transaction.platform === "android" && !transaction.purchaseToken) {
+              yield* Effect.logWarning(
+                "Skipping observed Android transaction without purchase token",
+                {
+                  transactionId: transaction.transactionId,
+                },
+              );
+              return;
+            }
 
-            if (!sdkConfiguration.readOnly) {
-              yield* paymentAdapter.acknowledgePurchase(transaction);
+            if (!cachedState?.backendAccepted) {
+              const commonHeaders = yield* getCommonSdkHeaders();
+              const distinctId = yield* identityManager.getDistinctId();
+
+              yield* apiClient.sdk.syncTransaction({
+                headers: {
+                  ...commonHeaders,
+                  "x-distinct-id": distinctId,
+                },
+                payload: mapTransactionToSyncPayload(transaction, schema.products),
+              });
+
+              yield* cacheManager.set(
+                processedCacheKey,
+                { backendAccepted: true, storeFinalized: transaction.isAcknowledged },
+                { ttl: PROCESSED_TRANSACTION_TTL_MS },
+              );
             }
-          } finally {
-            inFlightKeys.delete(transactionProcessingKey);
-          }
+
+            if (sdkConfiguration.readOnly) {
+              return;
+            }
+
+            if (!transaction.isAcknowledged) {
+              yield* paymentAdapter.acknowledgePurchase(
+                transaction,
+                resolveTransactionProductDefinition(transaction, schema.products)?.type,
+              );
+            }
+
+            yield* cacheManager.set(
+              processedCacheKey,
+              { backendAccepted: true, storeFinalized: true },
+              { ttl: PROCESSED_TRANSACTION_TTL_MS },
+            );
+          });
+
+          return Effect.exit(execution).pipe(
+            Effect.tap((exit) => Deferred.done(deferred, exit)),
+            Effect.flatMap((exit) =>
+              Exit.isSuccess(exit) ? Effect.succeed(exit.value) : Effect.failCause(exit.cause),
+            ),
+            Effect.ensuring(
+              Effect.sync(() => {
+                inFlightTransactions.delete(transactionProcessingKey);
+              }),
+            ),
+          );
         });
 
       const reconcileObservedTransactions = (schema: RuntimeSchema) =>
@@ -147,31 +226,61 @@ export class TransactionService extends Context.Service<TransactionService>()(
             observedTransactionsByKey.set(buildTransactionProcessingKey(transaction), transaction);
           }
 
+          const failures = [];
           for (const transaction of observedTransactionsByKey.values()) {
-            yield* processObservedTransaction(transaction, schema).pipe(
-              Effect.catch((error) =>
-                Effect.logWarning("Failed to process observed transaction", {
-                  error,
-                  transactionId: transaction.transactionId,
-                }),
-              ),
+            if (
+              resolveTransactionProductDefinition(transaction, schema.products)?.type ===
+              "one-time-consumable"
+            ) {
+              continue;
+            }
+            const exit = yield* Effect.exit(processTransaction(transaction, schema));
+            if (Exit.isFailure(exit)) {
+              const error = Cause.squash(exit.cause);
+              failures.push({ error, transactionId: transaction.transactionId });
+              yield* Effect.logWarning("Failed to process observed transaction", {
+                error,
+                transactionId: transaction.transactionId,
+              });
+            }
+          }
+
+          if (failures.length > 0) {
+            return yield* Effect.fail(
+              new ReconcileTransactionsError({
+                failures,
+                message: `Failed to restore ${failures.length} transactions`,
+              }),
             );
           }
         });
 
-      const purchase = (product: SubscriptionProduct, schema: RuntimeSchema) =>
+      const processObservedTransaction = (transaction: Transaction, schema: RuntimeSchema) =>
         Effect.gen(function* () {
-          const transaction = yield* paymentAdapter.buyProduct(product);
-          yield* processObservedTransaction(transaction, schema);
+          yield* processTransaction(transaction, schema);
+          yield* refreshPerson;
         });
 
-      const restorePurchases = (schema: RuntimeSchema) =>
+      const reconcileObservedTransactionsAndRefresh = (schema: RuntimeSchema) =>
         Effect.gen(function* () {
           yield* reconcileObservedTransactions(schema);
+          yield* refreshPerson;
+        });
+
+      const purchase = (product: Product, schema: RuntimeSchema) =>
+        Effect.gen(function* () {
           const distinctId = yield* identityManager.getDistinctId();
-          yield* personInfoManager.getPerson(distinctId, "fetch");
+          const transaction = yield* paymentAdapter.buyProduct(
+            product,
+            undefined,
+            deriveAccountToken(distinctId),
+          );
+          yield* processTransaction(transaction, schema);
+          yield* refreshPerson;
         });
 
+      const restorePurchases = reconcileObservedTransactionsAndRefresh;
+
       const startTransactionObserver = (onPurchase?: (transaction: Transaction) => void) =>
         paymentAdapter.initConnection(onPurchase);
 
@@ -181,7 +290,7 @@ export class TransactionService extends Context.Service<TransactionService>()(
         endConnection,
         processObservedTransaction,
         purchase,
-        reconcileObservedTransactions,
+        reconcileObservedTransactions: reconcileObservedTransactionsAndRefresh,
         restorePurchases,
         startTransactionObserver,
       } as const;
diff --git a/libraries/react-native/src/core/utils/account-token.ts b/libraries/react-native/src/core/utils/account-token.ts
new file mode 100644
index 000000000..3090f2691
--- /dev/null
+++ b/libraries/react-native/src/core/utils/account-token.ts
@@ -0,0 +1,41 @@
+import { sha1 } from "@noble/hashes/legacy.js";
+import { utf8ToBytes } from "@noble/hashes/utils.js";
+
+/** Shared UUIDv5 namespace for StoreKit and Google Play account identifiers. */
+export const VOIDHASH_ACCOUNT_TOKEN_NAMESPACE = "3919eb4e-3466-593c-8c1e-84554e13a0a6";
+
+const uuidToBytes = (uuid: string): Uint8Array => {
+  const hex = uuid.replaceAll("-", "");
+  if (!/^[0-9a-fA-F]{32}$/.test(hex)) {
+    throw new TypeError(`Invalid UUID namespace: ${uuid}`);
+  }
+
+  const bytes = new Uint8Array(16);
+  for (let index = 0; index < bytes.length; index += 1) {
+    bytes[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
+  }
+  return bytes;
+};
+
+const bytesToUuid = (bytes: Uint8Array): string => {
+  const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+};
+
+/** Derives an RFC 4122 UUIDv5 from a namespace UUID and UTF-8 name. */
+export const uuidV5 = (namespaceUuid: string, name: string): string => {
+  const namespaceBytes = uuidToBytes(namespaceUuid);
+  const nameBytes = utf8ToBytes(name);
+  const input = new Uint8Array(namespaceBytes.length + nameBytes.length);
+  input.set(namespaceBytes);
+  input.set(nameBytes, namespaceBytes.length);
+
+  const bytes = sha1(input).slice(0, 16);
+  bytes[6] = ((bytes[6] as number) & 0x0f) | 0x50;
+  bytes[8] = ((bytes[8] as number) & 0x3f) | 0x80;
+  return bytesToUuid(bytes);
+};
+
+/** Derives the deterministic account token supplied to StoreKit and Google Play. */
+export const deriveAccountToken = (distinctId: string): string =>
+  uuidV5(VOIDHASH_ACCOUNT_TOKEN_NAMESPACE, distinctId);
diff --git a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
index c1ef1becd..1a83b5300 100644
--- a/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
+++ b/libraries/react-native/src/react/hooks/use-paywall-by-location.ts
@@ -2,7 +2,7 @@ import React, { useCallback, useEffect } from "react";
 import { AppState, Linking, Platform } from "react-native";
 
 import type { VoidhashClient } from "../../client";
-import type { SubscriptionProduct } from "../../core/entities/product";
+import type { Product } from "../../core/entities/product";
 import type { PaywallReleaseRuntime } from "../../core/paywalls/paywall-service";
 import type { LocationSlug } from "../../core/schema/registry";
 import { parsePaywallBridgeEnvelope } from "../../internal/paywall-bridge/parser";
@@ -91,11 +91,11 @@ function getErrorPayload(error: unknown): { code: string; message: string } {
 }
 
 function findProductByBridgeProductId(
-  products: Record<string, SubscriptionProduct | null>,
+  products: Record<string, Product | null>,
   productId: string,
-): SubscriptionProduct | null {
+): Product | null {
   const productList = Object.values(products).filter(
-    (product): product is SubscriptionProduct => product !== null,
+    (product): product is Product => product !== null,
   );
 
   const byId = productList.find((product) => product.id === productId);
diff --git a/libraries/react-native/src/react/hooks/use-products.ts b/libraries/react-native/src/react/hooks/use-products.ts
index 78fcae3af..608be4873 100644
--- a/libraries/react-native/src/react/hooks/use-products.ts
+++ b/libraries/react-native/src/react/hooks/use-products.ts
@@ -1,7 +1,7 @@
 import React, { useCallback, useMemo } from "react";
 
 import type { VoidhashClient } from "../../client";
-import type { SubscriptionProduct } from "../../core/entities/product";
+import type { Product } from "../../core/entities/product";
 import type { ProductSlug } from "../../core/schema/registry";
 import type { VoidhashContext } from "../components/provider";
 import useAsyncFunction from "./use-async-function";
@@ -24,23 +24,21 @@ export function productsHookFactory(
     });
 
     const getProduct = useCallback(
-      (productSlug: ProductSlug): SubscriptionProduct | null => {
+      (productSlug: ProductSlug): Product | null => {
         if (!products) {
           return null;
         }
         // ProductSlug is `string` at runtime; the index access is safe.
-        return (
-          (products as Record<string, SubscriptionProduct | null>)[String(productSlug)] ?? null
-        );
+        return (products as Record<string, Product | null>)[String(productSlug)] ?? null;
       },
       [products],
     );
 
     const toList = useCallback(
-      (): SubscriptionProduct[] =>
+      (): Product[] =>
         products
-          ? (Object.values(products) as Array<SubscriptionProduct | null>).filter(
-              (product): product is SubscriptionProduct => product !== null,
+          ? (Object.values(products) as Array<Product | null>).filter(
+              (product): product is Product => product !== null,
             )
           : [],
       [products],
@@ -56,7 +54,7 @@ export function productsHookFactory(
     );
 
     return {
-      data: data as Record<ProductSlug, SubscriptionProduct | null> & {
+      data: data as Record<ProductSlug, Product | null> & {
         get: typeof getProduct;
         toList: typeof toList;
       },
diff --git a/libraries/react-native/src/react/hooks/use-purchase.ts b/libraries/react-native/src/react/hooks/use-purchase.ts
index 2d22f22ba..976584808 100644
--- a/libraries/react-native/src/react/hooks/use-purchase.ts
+++ b/libraries/react-native/src/react/hooks/use-purchase.ts
@@ -1,7 +1,7 @@
 import { useCallback, useState } from "react";
 
 import type { VoidhashClient } from "../../client";
-import type { SubscriptionProduct } from "../../core/entities/product";
+import type { Product } from "../../core/entities/product";
 
 export interface UsePurchaseOptions {
   method?: "native";
@@ -17,7 +17,7 @@ export function purchaseHookFactory(client: VoidhashClient) {
 
     const purchase = useCallback(
       (
-        product: SubscriptionProduct,
+        product: Product,
         options?: {
           method?: "native";
           onSuccess?: () => void;
diff --git a/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts b/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts
index ea4402ff2..94817a4e0 100644
--- a/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts
+++ b/libraries/react-native/src/specs/android/GoogleBilling.nitro.ts
@@ -35,9 +35,8 @@ export interface GoogleBilling extends HybridObject<{ android: "kotlin" }> {
   ): Promise<GoogleBillingProductDetail[]>;
   buyItemByType(params: GoogleBillingBuyItemByTypeParams): Promise<GoogleBillingPurchase[]>;
   acknowledgePurchase(token: string): Promise<GoogleBillingAcknowledgeResult>;
+  consumeProduct(token: string): Promise<GoogleBillingAcknowledgeResult>;
   getAvailableItemsByType(type: GoogleBillingProductType): Promise<GoogleBillingPurchase[]>;
-  // Consume a product (for consumable items)
-  // consumeProduct(token: string): Promise<GoogleBillingConsumeResult>;
 
   // Get storefront/country code
   // getStorefront(): Promise<string>;
diff --git a/libraries/react-native/tests/core/account-token.test.ts b/libraries/react-native/tests/core/account-token.test.ts
new file mode 100644
index 000000000..90b999d7b
--- /dev/null
+++ b/libraries/react-native/tests/core/account-token.test.ts
@@ -0,0 +1,42 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  deriveAccountToken,
+  uuidV5,
+  VOIDHASH_ACCOUNT_TOKEN_NAMESPACE,
+} from "../../src/core/utils/account-token";
+
+const DNS_NAMESPACE = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
+
+const vectors = [
+  ["user-123", "3501e751-7582-58f9-9c1d-533c7466049f"],
+  ["USER-123", "c6eb5cb5-739d-52a9-9a32-6a0fb4be71cc"],
+  ["vh:anon:k2j4h5g6f7", "22c4cde2-2c40-5266-9699-35f7d271e1a8"],
+  ["naïve@exämple.com", "84080bfc-8e5a-5daf-9ec4-c2221ea8d948"],
+] as const;
+
+describe("account token derivation", () => {
+  it("reproduces the RFC 4122 UUIDv5 sanity anchor", () => {
+    expect(uuidV5(DNS_NAMESPACE, "www.example.com")).toBe("2ed6657d-e927-568b-95e1-2665a8aea6a2");
+  });
+
+  it("pins the shared namespace", () => {
+    expect(uuidV5(DNS_NAMESPACE, "appaccounttoken.voidhash.com")).toBe(
+      VOIDHASH_ACCOUNT_TOKEN_NAMESPACE,
+    );
+  });
+
+  for (const [distinctId, expected] of vectors) {
+    it(`matches the backend vector for ${JSON.stringify(distinctId)}`, () => {
+      expect(deriveAccountToken(distinctId)).toBe(expected);
+    });
+  }
+
+  it("is deterministic and lowercase for long inputs", () => {
+    const distinctId = "person:".repeat(200);
+    const first = deriveAccountToken(distinctId);
+
+    expect(deriveAccountToken(distinctId)).toBe(first);
+    expect(first).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-5[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/);
+  });
+});
diff --git a/libraries/react-native/tests/core/app-store-adapter.test.ts b/libraries/react-native/tests/core/app-store-adapter.test.ts
new file mode 100644
index 000000000..bce640eb4
--- /dev/null
+++ b/libraries/react-native/tests/core/app-store-adapter.test.ts
@@ -0,0 +1,102 @@
+import { Effect } from "effect";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const storekit = vi.hoisted(() => ({
+  buyProduct: vi.fn(),
+  endConnection: vi.fn(),
+  finishTransaction: vi.fn(),
+  getItems: vi.fn(),
+  getPendingTransactions: vi.fn(),
+  getPurchasedItems: vi.fn(),
+  initConnection: vi.fn(),
+  presentCodeRedemptionSheet: vi.fn(),
+  showManageSubscriptions: vi.fn(),
+}));
+
+vi.mock("../../src/nitro", () => ({ Storekit: storekit }));
+
+import type { SubscriptionProduct } from "../../src/core/entities/product";
+import { AppStoreAdapter } from "../../src/core/payment-adapters/app-store-adapter";
+import { PaymentAdapter } from "../../src/core/payment-adapters/payment-adapter";
+
+const nativeTransaction = (overrides: Record<string, unknown> = {}) => ({
+  appAccountToken: "3501e751-7582-58f9-9c1d-533c7466049f",
+  appBundleIdIos: "com.voidhash.test",
+  currencyIos: "USD",
+  id: "com.voidhash.monthly.ios",
+  ids: ["com.voidhash.monthly.ios"],
+  originalTransactionDateIos: 1_700_000_000_000,
+  originalTransactionIdentifierIos: "original-1",
+  ownershipTypeIos: "purchased",
+  productTypeIos: "autoRenewable",
+  quantityIos: 1,
+  transactionDate: 1_700_000_000_000,
+  transactionId: "transaction-1",
+  transactionReceipt: "signed-transaction",
+  ...overrides,
+});
+
+const product = {
+  id: "com.voidhash.monthly.ios",
+  slug: "monthly_sub",
+  type: "subscription",
+} as SubscriptionProduct;
+
+const runWithAdapter = <A>(effect: Effect.Effect<A, unknown, PaymentAdapter>) =>
+  Effect.runPromise(effect.pipe(Effect.provide(AppStoreAdapter)));
+
+describe("AppStoreAdapter", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    storekit.buyProduct.mockResolvedValue(nativeTransaction());
+    storekit.endConnection.mockResolvedValue(true);
+    storekit.finishTransaction.mockResolvedValue(undefined);
+    storekit.getItems.mockResolvedValue([]);
+    storekit.getPendingTransactions.mockReturnValue([]);
+    storekit.getPurchasedItems.mockResolvedValue([]);
+    storekit.initConnection.mockResolvedValue(true);
+    storekit.showManageSubscriptions.mockResolvedValue(undefined);
+  });
+
+  it("passes and preserves the app account token across purchase mapping", async () => {
+    const transaction = await runWithAdapter(
+      Effect.gen(function* () {
+        const adapter = yield* PaymentAdapter;
+        return yield* adapter.buyProduct(product, 1, "3501e751-7582-58f9-9c1d-533c7466049f");
+      }),
+    );
+
+    expect(storekit.buyProduct).toHaveBeenCalledWith(
+      "com.voidhash.monthly.ios",
+      "3501e751-7582-58f9-9c1d-533c7466049f",
+      1,
+    );
+    expect(transaction.appAccountToken).toBe("3501e751-7582-58f9-9c1d-533c7466049f");
+  });
+
+  it("finishes the exact transaction returned by StoreKit", async () => {
+    await runWithAdapter(
+      Effect.gen(function* () {
+        const adapter = yield* PaymentAdapter;
+        const transaction = yield* adapter.buyProduct(product);
+        yield* adapter.acknowledgePurchase(transaction);
+      }),
+    );
+
+    expect(storekit.finishTransaction).toHaveBeenCalledWith("transaction-1");
+  });
+
+  it("restores transactions without requiring a prior product fetch", async () => {
+    storekit.getPurchasedItems.mockResolvedValue([nativeTransaction()]);
+
+    const transactions = await runWithAdapter(
+      Effect.gen(function* () {
+        const adapter = yield* PaymentAdapter;
+        return yield* adapter.getPurchaseHistory(true);
+      }),
+    );
+
+    expect(storekit.getItems).not.toHaveBeenCalled();
+    expect(transactions.map((transaction) => transaction.transactionId)).toEqual(["transaction-1"]);
+  });
+});
diff --git a/libraries/react-native/tests/core/client-effect.test.ts b/libraries/react-native/tests/core/client-effect.test.ts
index ad3bb1598..fe65b4344 100644
--- a/libraries/react-native/tests/core/client-effect.test.ts
+++ b/libraries/react-native/tests/core/client-effect.test.ts
@@ -608,9 +608,94 @@ describe("VoidhashEffectClient", () => {
       );
 
       expect(paymentDouble.state.buyProductCalls).toHaveLength(1);
-      expect(paymentDouble.state.buyProductCalls[0]?.slug).toBe("monthly_sub");
+      expect(paymentDouble.state.buyProductCalls[0]?.product.slug).toBe("monthly_sub");
       expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
       expect(paymentDouble.state.acknowledgePurchaseCalls).toHaveLength(1);
+      expect(apiDouble.state.getPersonCalls).toHaveLength(1);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("purchases a non-consumable one-time product through the same lifecycle", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble();
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const product = new Product(
+      "lifetime-id",
+      "lifetime",
+      "Lifetime",
+      "Lifetime access",
+      "Lifetime",
+      "$49.99",
+      4999,
+      "USD",
+      "one-time",
+      "ios",
+    );
+
+    try {
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema }),
+      );
+      await harness.runtime.runPromise(initializedClient.purchase(product, { method: "native" }));
+
+      expect(paymentDouble.state.buyProductCalls[0]?.product).toBe(product);
+      expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
+      expect(paymentDouble.state.acknowledgePurchaseCalls).toHaveLength(1);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("purchase passes the deterministic account token to the native store", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble();
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const monthlyProduct = new SubscriptionProduct(
+      "monthly-id",
+      "monthly_sub",
+      "Monthly",
+      "Monthly plan",
+      "Monthly",
+      "$9.99",
+      999,
+      "USD",
+      "subscription",
+      "ios",
+      "month",
+    );
+
+    try {
+      await harness.runtime.runPromise(
+        Effect.flatMap(CacheManager, (manager) => manager.set("distinctId", "user-123")),
+      );
+      const initializedClient = await harness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema }),
+      );
+
+      await harness.runtime.runPromise(
+        initializedClient.purchase(monthlyProduct, { method: "native" }),
+      );
+
+      expect(paymentDouble.state.buyProductCalls[0]?.appAccountToken).toBe(
+        "3501e751-7582-58f9-9c1d-533c7466049f",
+      );
+      expect(apiDouble.state.syncTransactionCalls[0]?.payload?.appAccountToken).toBe(
+        "3501e751-7582-58f9-9c1d-533c7466049f",
+      );
     } finally {
       await harness.runtime.dispose();
     }
@@ -707,6 +792,301 @@ describe("VoidhashEffectClient", () => {
     }
   });
 
+  it("retries native acknowledgement without resubmitting an accepted transaction", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble();
+    const paymentDouble = createPaymentAdapterDouble({
+      acknowledgePurchaseShouldFailTimes: 1,
+    });
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema }),
+    );
+    const transaction = new Transaction(
+      "tx-ack-retry",
+      "tx-ack-retry",
+      "monthly-id",
+      1_700_000_000_000,
+      1,
+      false,
+      "ios",
+    );
+
+    try {
+      await expect(
+        harness.runtime.runPromise(initializedClient.processObservedTransaction(transaction)),
+      ).rejects.toThrow("acknowledgePurchase failed");
+      await harness.runtime.runPromise(initializedClient.processObservedTransaction(transaction));
+
+      expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
+      expect(paymentDouble.state.acknowledgePurchaseCalls).toHaveLength(2);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("resumes native finalization from persistent state after a runtime restart", async () => {
+    const schema = createTestSchema();
+    const cache = createInMemoryCacheAdapter();
+    const firstApi = createApiClientDouble();
+    const firstPayment = createPaymentAdapterDouble({
+      acknowledgePurchaseShouldFailTimes: 1,
+    });
+    const firstHarness = createEffectTestHarness({
+      apiClient: firstApi.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: firstPayment.paymentAdapter,
+    });
+    const transaction = new Transaction(
+      "tx-runtime-restart",
+      "tx-runtime-restart",
+      "monthly-id",
+      1_700_000_000_000,
+      1,
+      false,
+      "ios",
+    );
+
+    const firstClient = await firstHarness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema }),
+    );
+    await expect(
+      firstHarness.runtime.runPromise(firstClient.processObservedTransaction(transaction)),
+    ).rejects.toThrow("acknowledgePurchase failed");
+    await firstHarness.runtime.dispose();
+
+    const secondApi = createApiClientDouble();
+    const secondPayment = createPaymentAdapterDouble();
+    const secondHarness = createEffectTestHarness({
+      apiClient: secondApi.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: secondPayment.paymentAdapter,
+    });
+
+    try {
+      const secondClient = await secondHarness.runtime.runPromise(
+        VoidhashEffectClient.makeInitializedClient({ schema }),
+      );
+      await secondHarness.runtime.runPromise(secondClient.processObservedTransaction(transaction));
+
+      expect(firstApi.state.syncTransactionCalls).toHaveLength(1);
+      expect(secondApi.state.syncTransactionCalls).toHaveLength(0);
+      expect(secondPayment.state.acknowledgePurchaseCalls).toHaveLength(1);
+    } finally {
+      await secondHarness.runtime.dispose();
+    }
+  });
+
+  it("finalizes a consumable transaction with its schema product type", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble();
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema }),
+    );
+    const transaction = new Transaction(
+      "tx-consumable",
+      "tx-consumable",
+      "com.voidhash.coins.android",
+      1_700_000_000_000,
+      1,
+      false,
+      "android",
+      { purchaseToken: "consumable-token" },
+    );
+
+    try {
+      await harness.runtime.runPromise(initializedClient.processObservedTransaction(transaction));
+
+      expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
+      expect(paymentDouble.state.acknowledgePurchaseProductTypes).toEqual(["one-time-consumable"]);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("joins concurrent duplicate processing and shares the failure", async () => {
+    let rejectSync!: (reason: Error) => void;
+    const syncGate = new Promise<{ accepted: boolean }>((_resolve, reject) => {
+      rejectSync = reject;
+    });
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble({
+      syncTransactionEffect: () =>
+        Effect.tryPromise({
+          catch: () => new Error("gated sync failed"),
+          try: () => syncGate,
+        }),
+    });
+    const paymentDouble = createPaymentAdapterDouble();
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema }),
+    );
+    const transaction = new Transaction(
+      "tx-concurrent",
+      "tx-concurrent",
+      "monthly-id",
+      1_700_000_000_000,
+      1,
+      false,
+      "ios",
+    );
+
+    try {
+      const first = harness.runtime.runPromise(
+        initializedClient.processObservedTransaction(transaction),
+      );
+      while (apiDouble.state.syncTransactionCalls.length === 0) {
+        await Promise.resolve();
+      }
+      const second = harness.runtime.runPromise(
+        initializedClient.processObservedTransaction(transaction),
+      );
+      rejectSync(new Error("release"));
+
+      const results = await Promise.allSettled([first, second]);
+      expect(results.map((result) => result.status)).toEqual(["rejected", "rejected"]);
+      expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("skips pending store transactions until the store reports them purchased", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble();
+    const transaction = new Transaction(
+      "tx-pending",
+      "tx-pending",
+      "monthly-id",
+      1_700_000_000_000,
+      1,
+      false,
+      "android",
+      { purchaseState: "pending", purchaseToken: "pending-token" },
+    );
+    const paymentDouble = createPaymentAdapterDouble({ pendingTransactions: [transaction] });
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema }),
+    );
+
+    try {
+      await harness.runtime.runPromise(initializedClient.reconcileObservedTransactions());
+
+      expect(apiDouble.state.syncTransactionCalls).toHaveLength(0);
+      expect(paymentDouble.state.acknowledgePurchaseCalls).toHaveLength(0);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("attempts every restore transaction and reports an aggregate failure", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble({ syncTransactionShouldFail: true });
+    const transactions = ["tx-restore-1", "tx-restore-2"].map(
+      (transactionId, index) =>
+        new Transaction(
+          transactionId,
+          transactionId,
+          "monthly-id",
+          1_700_000_000_000 + index,
+          1,
+          false,
+          "ios",
+        ),
+    );
+    const paymentDouble = createPaymentAdapterDouble({ purchaseHistory: transactions });
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema }),
+    );
+
+    try {
+      await expect(
+        harness.runtime.runPromise(initializedClient.restorePurchases()),
+      ).rejects.toThrow("Failed to restore 2 transactions");
+      expect(apiDouble.state.syncTransactionCalls).toHaveLength(2);
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
+  it("does not restore consumable one-time purchases", async () => {
+    const schema = createTestSchema();
+    const apiDouble = createApiClientDouble();
+    const paymentDouble = createPaymentAdapterDouble({
+      purchaseHistory: [
+        new Transaction(
+          "tx-sub",
+          "tx-sub",
+          "com.voidhash.monthly.ios",
+          1_700_000_000_000,
+          1,
+          false,
+          "ios",
+        ),
+        new Transaction(
+          "tx-coins",
+          "tx-coins",
+          "com.voidhash.coins.ios",
+          1_700_000_000_001,
+          1,
+          false,
+          "ios",
+        ),
+      ],
+    });
+    const cache = createInMemoryCacheAdapter();
+    const harness = createEffectTestHarness({
+      apiClient: apiDouble.apiClient,
+      cacheAdapter: cache.adapter,
+      paymentAdapter: paymentDouble.paymentAdapter,
+    });
+    const initializedClient = await harness.runtime.runPromise(
+      VoidhashEffectClient.makeInitializedClient({ schema }),
+    );
+
+    try {
+      await harness.runtime.runPromise(initializedClient.restorePurchases());
+
+      expect(apiDouble.state.syncTransactionCalls).toHaveLength(1);
+      expect(apiDouble.state.syncTransactionCalls[0]?.payload?.productSlug).toBe("monthly_sub");
+      expect(apiDouble.state.syncTransactionCalls[0]?.payload?.providerProductId).toBe(
+        "com.voidhash.monthly.ios",
+      );
+    } finally {
+      await harness.runtime.dispose();
+    }
+  });
+
   it("reconcileObservedTransactions merges pending and history with dedupe", async () => {
     const schema = createTestSchema();
     const apiDouble = createApiClientDouble();
diff --git a/libraries/react-native/tests/core/generated-client-transaction.test.ts b/libraries/react-native/tests/core/generated-client-transaction.test.ts
new file mode 100644
index 000000000..23e211575
--- /dev/null
+++ b/libraries/react-native/tests/core/generated-client-transaction.test.ts
@@ -0,0 +1,73 @@
+import { Effect } from "effect";
+import { HttpClient, HttpClientRequest, HttpClientResponse } from "effect/unstable/http";
+import { describe, expect, it } from "vitest";
+
+import { make } from "@voidhash/generated-clients";
+
+describe("generated SDK transaction client", () => {
+  it("serializes the complete iOS correlation payload to the backend endpoint", async () => {
+    let capturedRequest: Request | undefined;
+    const httpClient = HttpClient.make((request) =>
+      Effect.gen(function* () {
+        capturedRequest = yield* HttpClientRequest.toWeb(request).pipe(Effect.orDie);
+        return HttpClientResponse.fromWeb(
+          request,
+          new Response('{"accepted":true}', {
+            headers: { "content-type": "application/json" },
+            status: 200,
+          }),
+        );
+      }),
+    );
+    const client = make(httpClient, {
+      transformClient: (baseClient) =>
+        Effect.succeed(
+          baseClient.pipe(
+            HttpClient.mapRequest((request) =>
+              HttpClientRequest.prependUrl(request, "https://api.voidhash.test"),
+            ),
+          ),
+        ),
+    });
+
+    const result = await Effect.runPromise(
+      client.sdkSyncTransaction({
+        params: {
+          "x-client-bundle-id": "com.voidhash.test",
+          "x-distinct-id": "user-123",
+          "x-is-backgrounded": "false",
+          "x-is-debug-build": "true",
+          "x-observer-mode": "false",
+          "x-platform": "ios",
+          "x-platform-flavor": "native",
+          "x-publishable-key": "pk_test",
+          "x-sdk": "react-native",
+          "x-sdk-version": "0.0.1",
+        },
+        payload: {
+          appAccountToken: "3501e751-7582-58f9-9c1d-533c7466049f",
+          platform: "ios",
+          providerProductId: "com.voidhash.monthly.ios",
+          productSlug: "monthly_sub",
+          purchaseDate: 1_700_000_000_000,
+          quantity: 1,
+          receipt: "signed-transaction",
+          transactionId: "transaction-1",
+        },
+      }),
+    );
+
+    expect(result).toEqual({ accepted: true });
+    expect(capturedRequest?.url).toBe("https://api.voidhash.test/api/v1/sdk/sync-transaction");
+    expect(await capturedRequest?.json()).toEqual({
+      appAccountToken: "3501e751-7582-58f9-9c1d-533c7466049f",
+      platform: "ios",
+      providerProductId: "com.voidhash.monthly.ios",
+      productSlug: "monthly_sub",
+      purchaseDate: 1_700_000_000_000,
+      quantity: 1,
+      receipt: "signed-transaction",
+      transactionId: "transaction-1",
+    });
+  });
+});
diff --git a/libraries/react-native/tests/core/google-play-adapter.test.ts b/libraries/react-native/tests/core/google-play-adapter.test.ts
new file mode 100644
index 000000000..a7cf4521c
--- /dev/null
+++ b/libraries/react-native/tests/core/google-play-adapter.test.ts
@@ -0,0 +1,221 @@
+import { Effect } from "effect";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const googleBilling = vi.hoisted(() => ({
+  acknowledgePurchase: vi.fn(),
+  buyItemByType: vi.fn(),
+  consumeProduct: vi.fn(),
+  endConnection: vi.fn(),
+  getAvailableItemsByType: vi.fn(),
+  getItemsByType: vi.fn(),
+  initConnection: vi.fn(),
+}));
+
+vi.mock("../../src/nitro", () => ({ GoogleBilling: googleBilling }));
+
+import type { SubscriptionProduct } from "../../src/core/entities/product";
+import { Transaction } from "../../src/core/entities/transaction";
+import { GooglePlayAdapter } from "../../src/core/payment-adapters/google-play-adapter";
+import { PaymentAdapter } from "../../src/core/payment-adapters/payment-adapter";
+import { createTestSchema } from "../helpers/test-schema";
+
+const purchase = (overrides: Record<string, unknown> = {}) => ({
+  developerPayload: "",
+  id: "com.voidhash.yearly.android",
+  ids: ["com.voidhash.yearly.android"],
+  isAcknowledged: false,
+  isAutoRenewing: true,
+  orderId: "order-1",
+  originalJson: "{}",
+  packageName: "com.voidhash.test",
+  purchaseState: 1,
+  purchaseTime: 1_700_000_000_000,
+  purchaseToken: "purchase-token",
+  signature: "signature",
+  ...overrides,
+});
+
+const runWithAdapter = <A>(effect: Effect.Effect<A, unknown, PaymentAdapter>) =>
+  Effect.runPromise(effect.pipe(Effect.provide(GooglePlayAdapter)));
+
+describe("GooglePlayAdapter", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    googleBilling.acknowledgePurchase.mockResolvedValue({ message: "OK", responseCode: 0 });
+    googleBilling.buyItemByType.mockResolvedValue([purchase()]);
+    googleBilling.consumeProduct.mockResolvedValue({ message: "OK", responseCode: 0 });
+    googleBilling.endConnection.mockResolvedValue(true);
+    googleBilling.getAvailableItemsByType.mockResolvedValue([]);
+    googleBilling.getItemsByType.mockResolvedValue([]);
+    googleBilling.initConnection.mockResolvedValue(true);
+  });
+
+  it("consumes consumable products and acknowledges durable products", async () => {
+    const transaction = new Transaction(
+      "order-1",
+      "purchase-token",
+      "coins",
+      Date.now(),
+      1,
+      false,
+      "android",
+      { purchaseToken: "purchase-token" },
+    );
+
+    await runWithAdapter(
+      Effect.gen(function* () {
+        const adapter = yield* PaymentAdapter;
+        yield* adapter.acknowledgePurchase(transaction, "one-time-consumable");
+        yield* adapter.acknowledgePurchase(transaction, "one-time");
+      }),
+    );
+
+    expect(googleBilling.consumeProduct).toHaveBeenCalledWith("purchase-token");
+    expect(googleBilling.acknowledgePurchase).toHaveBeenCalledWith("purchase-token");
+  });
+
+  it("selects the configured base-plan offer token and sends the account token", async () => {
+    googleBilling.getItemsByType.mockImplementation(async (type: string) =>
+      type === "subs"
+        ? [
+            {
+              currency: "USD",
+              description: "Yearly plan",
+              displayName: "Yearly",
+              displayPrice: "$99.99",
+              id: "com.voidhash.yearly.android",
+              platform: "android",
+              subscriptionOfferDetails: [
+                {
+                  basePlanId: "other-base",
+                  offerTags: [],
+                  offerToken: "wrong-offer-token",
+                  pricingPhases: { pricingPhaseList: [] },
+                },
+                {
+                  basePlanId: "yearly-base",
+                  offerTags: [],
+                  offerToken: "yearly-offer-token",
+                  pricingPhases: { pricingPhaseList: [] },
+                },
+              ],
+              title: "Yearly",
+              type: "subs",
+            },
+          ]
+        : [],
+    );
+
+    await runWithAdapter(
+      Effect.gen(function* () {
+        const adapter = yield* PaymentAdapter;
+        const products = yield* adapter.getProducts(createTestSchema().products);
+        const yearly = products.find((product) => product.slug === "yearly_sub");
+        expect(yearly?.googlePlayOfferToken).toBe("yearly-offer-token");
+
+        yield* adapter.buyProduct(
+          yearly as SubscriptionProduct,
+          1,
+          "3501e751-7582-58f9-9c1d-533c7466049f",
+        );
+      }),
+    );
+
+    expect(googleBilling.buyItemByType).toHaveBeenCalledWith(
+      expect.objectContaining({
+        obfuscatedAccountId: "3501e751-7582-58f9-9c1d-533c7466049f",
+        offerTokenArr: ["yearly-offer-token"],
+        type: "subs",
+      }),
+    );
+  });
+
+  it("maps Google purchase state and obfuscated account id", async () => {
+    googleBilling.getAvailableItemsByType.mockImplementation(async (type: string) =>
+      type === "inapp"
+        ? [
+            purchase({
+              obfuscatedAccountId: "account-token",
+              purchaseState: 2,
+            }),
+          ]
+        : [],
+    );
+
+    const [transaction] = await runWithAdapter(
+      Effect.gen(function* () {
+        const adapter = yield* PaymentAdapter;
+        return yield* adapter.getPurchaseHistory(false);
+      }),
+    );
+
+    expect(transaction?.appAccountToken).toBe("account-token");
+    expect(transaction?.purchaseState).toBe("pending");
+  });
+
+  it("reports a pending Google purchase without granting purchase success", async () => {
+    googleBilling.buyItemByType.mockResolvedValue([
+      purchase({
+        obfuscatedAccountId: "account-token",
+        purchaseState: 2,
+      }),
+    ]);
+
+    await expect(
+      runWithAdapter(
+        Effect.gen(function* () {
+          const adapter = yield* PaymentAdapter;
+          return yield* adapter.buyProduct(
+            {
+              googlePlayOfferToken: "offer-token",
+              id: "com.voidhash.yearly.android",
+              slug: "yearly_sub",
+              type: "subscription",
+            } as SubscriptionProduct,
+            1,
+            "account-token",
+          );
+        }),
+      ),
+    ).rejects.toThrow("Purchase is pending");
+  });
+
+  it("rejects a subscription before native launch when no offer token was resolved", async () => {
+    await expect(
+      runWithAdapter(
+        Effect.gen(function* () {
+          const adapter = yield* PaymentAdapter;
+          return yield* adapter.buyProduct({
+            id: "com.voidhash.yearly.android",
+            slug: "yearly_sub",
+            type: "subscription",
+          } as SubscriptionProduct);
+        }),
+      ),
+    ).rejects.toThrow("Google Play subscription has no configured offer token");
+    expect(googleBilling.buyItemByType).not.toHaveBeenCalled();
+  });
+
+  it("keeps purchased one-time items active without relying on their product id", async () => {
+    googleBilling.getAvailableItemsByType.mockImplementation(async (type: string) =>
+      type === "inapp"
+        ? [purchase({ id: "coins_forever", ids: ["coins_forever"], isAutoRenewing: undefined })]
+        : [
+            purchase({ id: "active-sub", ids: ["active-sub"], isAutoRenewing: true }),
+            purchase({ id: "expired-sub", ids: ["expired-sub"], isAutoRenewing: false }),
+          ],
+    );
+
+    const transactions = await runWithAdapter(
+      Effect.gen(function* () {
+        const adapter = yield* PaymentAdapter;
+        return yield* adapter.getPurchaseHistory(true);
+      }),
+    );
+
+    expect(transactions.map((transaction) => transaction.productId)).toEqual([
+      "coins_forever",
+      "active-sub",
+    ]);
+  });
+});
diff --git a/libraries/react-native/tests/core/native-purchase-contract.test.ts b/libraries/react-native/tests/core/native-purchase-contract.test.ts
new file mode 100644
index 000000000..3bad5971a
--- /dev/null
+++ b/libraries/react-native/tests/core/native-purchase-contract.test.ts
@@ -0,0 +1,47 @@
+import { readFileSync } from "node:fs";
+
+import { describe, expect, it } from "vitest";
+
+const androidSource = readFileSync(
+  new URL(
+    "../../android/src/main/java/com/margelo/nitro/voidhash/HybridGoogleBilling.kt",
+    import.meta.url,
+  ),
+  "utf8",
+);
+const storekitSource = readFileSync(
+  new URL("../../ios/HybridStorekit.swift", import.meta.url),
+  "utf8",
+);
+
+describe("native purchase bridge invariants", () => {
+  it("resolves Android purchase promises from PurchasesUpdatedListener", () => {
+    expect(androidSource).toContain("purchaseCoordinator.begin");
+    expect(androidSource).toContain("purchaseCoordinator.succeed(hybridPurchases)");
+    expect(androidSource).toContain("purchaseCoordinator.fail(");
+    expect(androidSource).not.toContain("return@async emptyArray()");
+  });
+
+  it("uses the Google Play consume API for consumable products", () => {
+    expect(androidSource).toContain("override fun consumeProduct");
+    expect(androidSource).toContain("billingClient.consumeAsync(params)");
+  });
+
+  it("retains StoreKit transactions before returning them for finish", () => {
+    expect(storekitSource).toContain(
+      "self.transactions.retain(id: String(transaction.id), value: transaction)",
+    );
+    expect(storekitSource).toContain(
+      "guard let transaction = self.transactions.value(for: transactionId)",
+    );
+  });
+
+  it("does not require a prior StoreKit product fetch to restore current entitlements", () => {
+    const historyBody = storekitSource.slice(
+      storekitSource.indexOf("func getPurchasedItems"),
+      storekitSource.indexOf("func buyProduct"),
+    );
+    expect(historyBody).not.toContain("getProduct(productID:");
+    expect(historyBody).toContain("transaction.productType != .consumable");
+  });
+});
diff --git a/libraries/react-native/tests/helpers/effect-test-harness.ts b/libraries/react-native/tests/helpers/effect-test-harness.ts
index 443d50b54..4363fdae2 100644
--- a/libraries/react-native/tests/helpers/effect-test-harness.ts
+++ b/libraries/react-native/tests/helpers/effect-test-harness.ts
@@ -5,7 +5,7 @@ import { AtomRegistry } from "effect/unstable/reactivity";
 
 import { CacheAdapter } from "../../src/core/caching/cache-adapter";
 import { CacheManager } from "../../src/core/caching/cache-manager";
-import { Product, type SubscriptionProduct } from "../../src/core/entities/product";
+import { Product } from "../../src/core/entities/product";
 import { Transaction } from "../../src/core/entities/transaction";
 import { PersonAttributeManager } from "../../src/core/identity/person-attribute-manager";
 import { PersonInfoManager } from "../../src/core/identity/person-info-manager";
@@ -20,6 +20,7 @@ import { PaymentAdapter } from "../../src/core/payment-adapters/payment-adapter"
 import type { PlatformInfo } from "../../src/core/platform/platform-provider";
 import { PlatformProvider } from "../../src/core/platform/platform-provider";
 import { ProductService } from "../../src/core/products/product-service";
+import type { RuntimeProductDefinition } from "../../src/core/schema/runtime";
 import { SchemaManager } from "../../src/core/schema/schema-manager";
 import { SdkConfiguration } from "../../src/core/sdk-configuration";
 import { TransactionService } from "../../src/core/transactions/transaction-service";
@@ -60,6 +61,7 @@ export interface ApiClientDoubleOptions {
   getSchemaShouldFail?: boolean;
   identifyResult?: SdkPerson;
   syncPersonAttributesResult?: SdkPerson;
+  syncTransactionEffect?: (request: ApiSdkCall) => Effect.Effect<{ accepted: boolean }, Error>;
   syncTransactionShouldFail?: boolean;
 }
 
@@ -133,6 +135,9 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
       },
       syncTransaction: (request: ApiSdkCall) => {
         state.syncTransactionCalls.push(request);
+        if (options.syncTransactionEffect) {
+          return options.syncTransactionEffect(request);
+        }
         if (options.syncTransactionShouldFail) {
           return Effect.fail(new Error("syncTransaction failed"));
         }
@@ -149,7 +154,12 @@ export function createApiClientDouble(options: ApiClientDoubleOptions = {}) {
 
 export interface PaymentAdapterDoubleState {
   acknowledgePurchaseCalls: Transaction[];
-  buyProductCalls: SubscriptionProduct[];
+  acknowledgePurchaseProductTypes: Array<RuntimeProductDefinition["type"] | undefined>;
+  buyProductCalls: Array<{
+    appAccountToken?: string;
+    product: Product;
+    quantity?: number;
+  }>;
   endConnectionCalls: number;
   getProductsCalls: number;
   initConnectionCalls: number;
@@ -157,6 +167,7 @@ export interface PaymentAdapterDoubleState {
 }
 
 export interface PaymentAdapterDoubleOptions {
+  acknowledgePurchaseShouldFailTimes?: number;
   buyProductTransaction?: Transaction;
   listenerTransaction?: Transaction;
   pendingTransactions?: Transaction[];
@@ -165,8 +176,10 @@ export interface PaymentAdapterDoubleOptions {
 }
 
 export function createPaymentAdapterDouble(options: PaymentAdapterDoubleOptions = {}) {
+  let remainingAcknowledgeFailures = options.acknowledgePurchaseShouldFailTimes ?? 0;
   const state: PaymentAdapterDoubleState = {
     acknowledgePurchaseCalls: [],
+    acknowledgePurchaseProductTypes: [],
     buyProductCalls: [],
     endConnectionCalls: 0,
     getProductsCalls: 0,
@@ -175,15 +188,25 @@ export function createPaymentAdapterDouble(options: PaymentAdapterDoubleOptions
   };
 
   const paymentAdapter = {
-    acknowledgePurchase: (transaction: Transaction) => {
+    acknowledgePurchase: (
+      transaction: Transaction,
+      productType?: RuntimeProductDefinition["type"],
+    ) => {
       state.acknowledgePurchaseCalls.push(transaction);
+      state.acknowledgePurchaseProductTypes.push(productType);
+      if (remainingAcknowledgeFailures > 0) {
+        remainingAcknowledgeFailures -= 1;
+        return Effect.fail(new Error("acknowledgePurchase failed"));
+      }
       return Effect.void;
     },
-    buyProduct: (product: SubscriptionProduct) => {
-      state.buyProductCalls.push(product);
+    buyProduct: (product: Product, quantity?: number, appAccountToken?: string) => {
+      state.buyProductCalls.push({ appAccountToken, product, quantity });
       return Effect.succeed(
         options.buyProductTransaction ??
-          new Transaction("tx-id", "tx-id", product.slug, Date.now(), 1, false, "ios"),
+          new Transaction("tx-id", "tx-id", product.slug, Date.now(), 1, false, "ios", {
+            appAccountToken,
+          }),
       );
     },
     endConnection: () => {
diff --git a/libraries/react-native/tests/helpers/test-schema.ts b/libraries/react-native/tests/helpers/test-schema.ts
index b441e7da7..236bdcafa 100644
--- a/libraries/react-native/tests/helpers/test-schema.ts
+++ b/libraries/react-native/tests/helpers/test-schema.ts
@@ -40,6 +40,18 @@ export function createTestSchema(): RuntimeSchema {
           },
         },
       },
+      coins: {
+        slug: "coins",
+        type: "one-time-consumable",
+        properties: { name: "Coins" },
+        configuration: {
+          perks: {},
+          providers: {
+            appleAppStore: { productId: "com.voidhash.coins.ios" },
+            googlePlay: { productId: "com.voidhash.coins.android" },
+          },
+        },
+      },
     },
   };
 }
diff --git a/package.json b/package.json
index 2b016a140..4c1c2abbb 100644
--- a/package.json
+++ b/package.json
@@ -51,6 +51,8 @@
     "selfhost:smoke": "tsx selfhost/smoke.mts",
     "selfhost:release-smoke": "tsx selfhost/release-smoke.mts",
     "test": "turbo test",
+    "test:purchase-restore": "pnpm --filter @voidhash/paywalls build && pnpm --filter @voidhash/react-native specs && pnpm --filter @voidhash/react-native typecheck && pnpm --filter @voidhash/react-native test && pnpm --filter @voidhash/react-native test:android-purchase-coordinator && pnpm test:android-native-compile && pnpm --filter @voidhash/generated-clients typecheck && pnpm --filter @voidhash/api-contracts typecheck && pnpm --filter @voidhash/backend typecheck && pnpm --filter @voidhash/backend test",
+    "test:android-native-compile": "pnpm --filter @voidhash/react-native-voidhash-example exec expo prebuild --platform android --no-install && examples/react-native-example/android/gradlew -p examples/react-native-example/android :voidhash_react-native:compileDebugKotlin --no-daemon",
     "typecheck": "turbo typecheck",
     "lines-of-code": "npx cloc . --exclude-dir=.next,node_modules,.vercel,.turbo,.git,meta,.github,.expo,build,.expo-shared,nitrogen --vcs git --not-match-f=pnpm-lock.yaml,meta.json --exclude-ext=yaml,md"
   },
diff --git a/packages/api-contracts/src/Schema.ts b/packages/api-contracts/src/Schema.ts
index e0ced8e14..909386fc1 100644
--- a/packages/api-contracts/src/Schema.ts
+++ b/packages/api-contracts/src/Schema.ts
@@ -343,6 +343,9 @@ export const SdkSyncTransactionBody = Schema.Struct({
   // so this is observability/diagnostics, never trusted for authorization.
   appAccountToken: Schema.optional(Schema.String),
   platform: Schema.Literals(["ios", "android"]),
+  // Native store identifier used for canonical verification. Kept separate
+  // from the Voidhash product slug because they are not generally equal.
+  providerProductId: Schema.optional(Schema.String),
   productSlug: Schema.String,
   purchaseDate: Schema.Number,
   purchaseToken: Schema.optional(Schema.String),
@@ -489,13 +492,7 @@ export class SchemaProduct extends Schema.Class<SchemaProduct>("SchemaProduct")(
   /** Per-provider mappings, sorted by `providerId`. */
   providers: Schema.Array(SchemaProductProvider),
   slug: Schema.String,
-  /**
-   * Today always `"subscription"` (matches the CLI's
-   * `NormalizedProductSchema`). Kept extensible at the TypeScript
-   * boundary so server-side widening doesn't immediately break clients
-   * — see the spec note in `feat/move-to-server-first`.
-   */
-  type: Schema.Literal("subscription"),
+  type: Schema.Literals(["subscription", "one-time", "one-time-consumable"]),
 }) {}
 
 /**
@@ -566,7 +563,7 @@ export class SdkSchemaProduct extends Schema.Class<SdkSchemaProduct>("SdkSchemaP
   configuration: SdkSchemaProductConfiguration,
   properties: SdkSchemaProductProperties,
   slug: Schema.String,
-  type: Schema.Literal("subscription"),
+  type: Schema.Literals(["subscription", "one-time", "one-time-consumable"]),
 }) {}
 
 export class SdkSchemaPerk extends Schema.Class<SdkSchemaPerk>("SdkSchemaPerk")({
diff --git a/packages/core/package.json b/packages/core/package.json
index 8cc9217bb..77c847843 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -36,10 +36,12 @@
     "./services/personIdentity/IdentityMutationService": "./src/services/personIdentity/IdentityMutationService.ts",
     "./services/paymentProviders/appStore/payment-provider": "./src/services/paymentProviders/appStore/payment-provider.ts",
     "./services/paymentProviders/appStore/payment-provider-service-queries": "./src/services/paymentProviders/appStore/payment-provider-service-queries.ts",
+    "./services/paymentProviders/appStore/transaction-verifier": "./src/services/paymentProviders/appStore/transaction-verifier.ts",
     "./services/paymentProviders/appStore/app-store-reconciliation-service": "./src/services/paymentProviders/appStore/app-store-reconciliation-service.ts",
     "./services/paymentProviders/appStore/app-store-webhook-handler-service": "./src/services/paymentProviders/appStore/app-store-webhook-handler-service.ts",
     "./services/paymentProviders/googlePlay/payment-provider": "./src/services/paymentProviders/googlePlay/payment-provider.ts",
     "./services/paymentProviders/googlePlay/payment-provider-service-queries": "./src/services/paymentProviders/googlePlay/payment-provider-service-queries.ts",
+    "./services/paymentProviders/googlePlay/purchase-verifier": "./src/services/paymentProviders/googlePlay/purchase-verifier.ts",
     "./services/paymentProviders/googlePlay/webhook-handler-service": "./src/services/paymentProviders/googlePlay/webhook-handler-service.ts",
     "./services/paymentProviders/googlePlay/sdk-context": "./src/services/paymentProviders/googlePlay/sdk-context.ts",
     "./domain/analytics/Analytics": "./src/domain/analytics/Analytics.ts",
@@ -162,6 +164,7 @@
   },
   "devDependencies": {
     "@effect/vitest": "catalog:",
+    "@voidhash/generated-clients": "workspace:*",
     "@voidhash/paywalls": "workspace:*",
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "catalog:",
diff --git a/packages/core/src/domain/schema/Schema.ts b/packages/core/src/domain/schema/Schema.ts
index a71500e61..004bd4fd0 100644
--- a/packages/core/src/domain/schema/Schema.ts
+++ b/packages/core/src/domain/schema/Schema.ts
@@ -39,8 +39,7 @@ export class SchemaProductProvider extends Schema.Class<SchemaProductProvider>(
 export class SchemaProduct extends Schema.Class<SchemaProduct>("SchemaProduct")({
   slug: Schema.String,
   name: Schema.String,
-  /** Today always `"subscription"` — schema only surfaces subscription products. */
-  type: Schema.Literal("subscription"),
+  type: Schema.Literals(["subscription", "one-time", "one-time-consumable"]),
   /** Perk slugs, ascending. */
   perks: Schema.Array(Schema.String),
   /** Per-provider mappings, sorted by `providerId`. */
diff --git a/packages/core/src/services/index.ts b/packages/core/src/services/index.ts
index 5a3dd0ab8..72bc5e936 100644
--- a/packages/core/src/services/index.ts
+++ b/packages/core/src/services/index.ts
@@ -32,10 +32,12 @@ export * from "./paymentProviders/appStore/payment-provider-service.ts";
 export * from "./paymentProviders/appStore/app-store-reconciliation-service.ts";
 export * from "./paymentProviders/appStore/app-store-webhook-handler-service.ts";
 export * from "./paymentProviders/appStore/payment-provider-service-queries.ts";
+export * from "./paymentProviders/appStore/transaction-verifier.ts";
 export * from "./paymentProviders/GooglePlayPaymentProviderService.ts";
 export * from "./paymentProviders/googlePlay/payment-provider-service.ts";
 export * from "./paymentProviders/googlePlay/webhook-handler-service.ts";
 export * from "./paymentProviders/googlePlay/payment-provider-service-queries.ts";
+export * from "./paymentProviders/googlePlay/purchase-verifier.ts";
 export { GooglePlayServerApi } from "./paymentProviders/googlePlay/sdk-context.ts";
 export {
   type AppStoreConfigProvider,
diff --git a/packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts b/packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts
index 2bb3618f2..791edf077 100644
--- a/packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts
+++ b/packages/core/src/services/paymentProviders/appStore/payment-provider-service.ts
@@ -20,8 +20,6 @@
  *      fire-and-forget (awaited `create` + log-on-failure, never `forkDetach`),
  *      and the synchronous record path does not depend on their completion.
  */
-import { Environment } from "@voidhash/app-store-server-sdk";
-import { ProviderEnvironment } from "@voidhash/db";
 import { Effect, Layer, Option, Schema } from "effect";
 
 import {
@@ -35,6 +33,7 @@ import { AppStoreWebhookHandlerService } from "./app-store-webhook-handler-servi
 import { getActiveAppStorePaymentProviderConfiguration } from "./helpers.ts";
 import { AppStorePaymentProvider, globalConfigurationSchema } from "./payment-provider.ts";
 import { AppStorePaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import { AppStoreTransactionVerifier } from "./transaction-verifier.ts";
 
 /**
  * Best-effort extraction of a human-readable cause from any upstream failure
@@ -76,6 +75,7 @@ const toServiceError = (error: unknown): AppStorePaymentProviderServiceError =>
 export const AppStorePaymentProviderServiceLive = Layer.effect(AppStorePaymentProviderService)(
   Effect.gen(function* () {
     const appStorePaymentProvider = yield* AppStorePaymentProvider;
+    const transactionVerifier = yield* AppStoreTransactionVerifier;
     const appStoreWebhookHandlerService = yield* AppStoreWebhookHandlerService;
     const queries = yield* AppStorePaymentProviderServiceQueries;
 
@@ -110,26 +110,10 @@ export const AppStorePaymentProviderServiceLive = Layer.effect(AppStorePaymentPr
           return yield* Effect.die(`Project ${input.projectId} not found`);
         }
 
-        const sdkContext =
-          yield* appStorePaymentProvider.buildSdkContextFromConfiguration(configuration);
-        const transactionInfoResult = yield* sdkContext.getTransactionInfo(input.transactionId);
-        const signedTransactionInfo = Option.getOrUndefined(
-          transactionInfoResult.transactionInfo.signedTransactionInfo,
-        );
-        if (!signedTransactionInfo) {
-          return yield* new AppStorePaymentProviderServiceError({
-            cause: "Signed transaction info is not found",
-          });
-        }
-
-        const decodedTransaction = yield* sdkContext.decodeSignedTransaction(
-          signedTransactionInfo,
-          transactionInfoResult.environment,
-        );
-        const providerEnvironment =
-          transactionInfoResult.environment === Environment.SANDBOX
-            ? ProviderEnvironment.Sandbox
-            : ProviderEnvironment.Production;
+        const { decodedTransaction, providerEnvironment } = yield* transactionVerifier.verify({
+          configuration,
+          transactionId: input.transactionId,
+        });
 
         // Decide first-seen reconciliation BEFORE `recordPurchase` writes the
         // subscription/transaction row — afterwards the existence check below is
diff --git a/packages/core/src/services/paymentProviders/appStore/transaction-verifier.ts b/packages/core/src/services/paymentProviders/appStore/transaction-verifier.ts
new file mode 100644
index 000000000..35e1f0e13
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/appStore/transaction-verifier.ts
@@ -0,0 +1,66 @@
+import type { JWSTransactionDecodedPayload } from "@voidhash/app-store-server-sdk";
+import { Environment } from "@voidhash/app-store-server-sdk";
+import type {
+  PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  ProviderEnvironmentValue,
+} from "@voidhash/db";
+import { ProviderEnvironment } from "@voidhash/db";
+import { Context, Effect, Layer, Option } from "effect";
+
+import { AppStorePaymentProvider } from "./payment-provider.ts";
+
+/** Canonical App Store transaction data accepted by the record engine. */
+export interface AppStoreVerifiedTransaction {
+  readonly decodedTransaction: JWSTransactionDecodedPayload;
+  readonly providerEnvironment: ProviderEnvironmentValue;
+}
+
+/** External App Store fetch-and-verification boundary. */
+export interface AppStoreTransactionVerifierShape {
+  readonly verify: (input: {
+    readonly configuration: DbPaymentProviderConfiguration;
+    readonly transactionId: string;
+  }) => Effect.Effect<AppStoreVerifiedTransaction, unknown>;
+}
+
+/** Verifies SDK-submitted transaction ids against canonical App Store state. */
+export class AppStoreTransactionVerifier extends Context.Service<
+  AppStoreTransactionVerifier,
+  AppStoreTransactionVerifierShape
+>()("core/AppStoreTransactionVerifier") {
+  static readonly layer = Layer.effect(
+    AppStoreTransactionVerifier,
+    Effect.gen(function* () {
+      const provider = yield* AppStorePaymentProvider;
+
+      return AppStoreTransactionVerifier.of({
+        verify: (input) =>
+          Effect.gen(function* () {
+            const sdkContext = yield* provider.buildSdkContextFromConfiguration(
+              input.configuration,
+            );
+            const transactionInfoResult = yield* sdkContext.getTransactionInfo(input.transactionId);
+            const signedTransactionInfo = Option.getOrUndefined(
+              transactionInfoResult.transactionInfo.signedTransactionInfo,
+            );
+            if (!signedTransactionInfo) {
+              return yield* Effect.fail(new Error("Signed transaction info is not found"));
+            }
+
+            const decodedTransaction = yield* sdkContext.decodeSignedTransaction(
+              signedTransactionInfo,
+              transactionInfoResult.environment,
+            );
+
+            return {
+              decodedTransaction,
+              providerEnvironment:
+                transactionInfoResult.environment === Environment.SANDBOX
+                  ? ProviderEnvironment.Sandbox
+                  : ProviderEnvironment.Production,
+            };
+          }),
+      });
+    }),
+  );
+}
diff --git a/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts b/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts
index 68a718bea..b10b0d3a1 100644
--- a/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts
+++ b/packages/core/src/services/paymentProviders/googlePlay/payment-provider-service.ts
@@ -16,6 +16,7 @@ import { GooglePlayPaymentProviderServiceError } from "./errors.ts";
 import { getActiveGooglePlayPaymentProviderConfiguration } from "./helpers.ts";
 import { GooglePlayPaymentProvider } from "./payment-provider.ts";
 import { GooglePlayPaymentProviderServiceQueries } from "./payment-provider-service-queries.ts";
+import { GooglePlayPurchaseVerifier } from "./purchase-verifier.ts";
 import { GooglePlayWebhookHandlerService } from "./webhook-handler-service.ts";
 
 /**
@@ -43,6 +44,7 @@ const toServiceError = (error: unknown): GooglePlayPaymentProviderServiceError =
 export const GooglePlayPaymentProviderServiceLive = Layer.effect(GooglePlayPaymentProviderService)(
   Effect.gen(function* () {
     const googlePlayPaymentProvider = yield* GooglePlayPaymentProvider;
+    const purchaseVerifier = yield* GooglePlayPurchaseVerifier;
     const googlePlayWebhookHandlerService = yield* GooglePlayWebhookHandlerService;
     const queries = yield* GooglePlayPaymentProviderServiceQueries;
 
@@ -83,24 +85,11 @@ export const GooglePlayPaymentProviderServiceLive = Layer.effect(GooglePlayPayme
           return yield* Effect.die(`Project ${input.projectId} not found`);
         }
 
-        const sdkContext =
-          yield* googlePlayPaymentProvider.buildSdkContextFromConfiguration(configuration);
-
-        // Try subscription first; fall back to one-time product when the token
-        // isn't a subscription.
-        const fetched = yield* googlePlayPaymentProvider
-          .fetchAndNormalizeSubscription(sdkContext, {
-            purchaseToken: input.purchaseToken,
-            subscriptionId: input.productId,
-          })
-          .pipe(
-            Effect.catchTag("GooglePlayPurchaseNotFoundError", () =>
-              googlePlayPaymentProvider.fetchAndNormalizeProduct(sdkContext, {
-                purchaseToken: input.purchaseToken,
-                sku: input.productId,
-              }),
-            ),
-          );
+        const fetched = yield* purchaseVerifier.verify({
+          configuration,
+          productId: input.productId,
+          purchaseToken: input.purchaseToken,
+        });
 
         const result = yield* googlePlayPaymentProvider.recordPurchase({
           configuration,
diff --git a/packages/core/src/services/paymentProviders/googlePlay/purchase-verifier.ts b/packages/core/src/services/paymentProviders/googlePlay/purchase-verifier.ts
new file mode 100644
index 000000000..a9ec9cbec
--- /dev/null
+++ b/packages/core/src/services/paymentProviders/googlePlay/purchase-verifier.ts
@@ -0,0 +1,59 @@
+import type {
+  PaymentProviderConfiguration as DbPaymentProviderConfiguration,
+  ProviderEnvironmentValue,
+} from "@voidhash/db";
+import { Context, Effect, Layer } from "effect";
+
+import type { GooglePlayNormalizedPurchase } from "./helpers.ts";
+import { GooglePlayPaymentProvider } from "./payment-provider.ts";
+
+/** Canonical Google Play purchase data accepted by the record engine. */
+export interface GooglePlayVerifiedPurchase {
+  readonly providerEnvironment: ProviderEnvironmentValue;
+  readonly purchase: GooglePlayNormalizedPurchase;
+}
+
+/** External Google Play fetch-and-normalization boundary. */
+export interface GooglePlayPurchaseVerifierShape {
+  readonly verify: (input: {
+    readonly configuration: DbPaymentProviderConfiguration;
+    readonly productId: string;
+    readonly purchaseToken: string;
+  }) => Effect.Effect<GooglePlayVerifiedPurchase, unknown>;
+}
+
+/** Fetches canonical purchase state for SDK-submitted Google Play tokens. */
+export class GooglePlayPurchaseVerifier extends Context.Service<
+  GooglePlayPurchaseVerifier,
+  GooglePlayPurchaseVerifierShape
+>()("core/GooglePlayPurchaseVerifier") {
+  static readonly layer = Layer.effect(
+    GooglePlayPurchaseVerifier,
+    Effect.gen(function* () {
+      const provider = yield* GooglePlayPaymentProvider;
+
+      return GooglePlayPurchaseVerifier.of({
+        verify: (input) =>
+          Effect.gen(function* () {
+            const sdkContext = yield* provider.buildSdkContextFromConfiguration(
+              input.configuration,
+            );
+
+            return yield* provider
+              .fetchAndNormalizeSubscription(sdkContext, {
+                purchaseToken: input.purchaseToken,
+                subscriptionId: input.productId,
+              })
+              .pipe(
+                Effect.catchTag("GooglePlayPurchaseNotFoundError", () =>
+                  provider.fetchAndNormalizeProduct(sdkContext, {
+                    purchaseToken: input.purchaseToken,
+                    sku: input.productId,
+                  }),
+                ),
+              );
+          }),
+      });
+    }),
+  );
+}
diff --git a/packages/core/src/services/paymentProviders/index.ts b/packages/core/src/services/paymentProviders/index.ts
index f7b986202..2eaa5b047 100644
--- a/packages/core/src/services/paymentProviders/index.ts
+++ b/packages/core/src/services/paymentProviders/index.ts
@@ -1,5 +1,7 @@
 export * from "./AppStorePaymentProviderService.ts";
 export * from "./GooglePlayPaymentProviderService.ts";
+export * from "./appStore/transaction-verifier.ts";
+export * from "./googlePlay/purchase-verifier.ts";
 export * from "./PaymentProvider.ts";
 export * from "./PaymentProviderConfigurationService.ts";
 export * from "./PaymentProviderProductService.ts";
diff --git a/packages/core/src/services/schema/SchemaService.ts b/packages/core/src/services/schema/SchemaService.ts
index 0c1f3c2e6..63641080b 100644
--- a/packages/core/src/services/schema/SchemaService.ts
+++ b/packages/core/src/services/schema/SchemaService.ts
@@ -1,4 +1,5 @@
 import { Context, Effect, Layer, Schema } from "effect";
+import type { ProductTypeValue } from "@voidhash/lib";
 
 import { AuthSession } from "../../domain/auth/Auth.ts";
 import {
@@ -27,6 +28,7 @@ import {
   computeSchemaVersion,
   mapDbProviderIdToSchemaProviderId,
 } from "./helpers.ts";
+import { dbProductTypeToLabel } from "../products/helpers.ts";
 
 export interface ProjectSchemaCacheStub {
   readonly get: () => Effect.Effect<unknown>;
@@ -256,7 +258,7 @@ export class SchemaService extends Context.Service<SchemaService>()("SchemaServi
               perks: perksForProduct,
               providers: providersForProduct,
               slug: product.slug,
-              type: "subscription" as const,
+              type: dbProductTypeToLabel(product.type as ProductTypeValue),
             };
           })
           .sort((a, b) => a.slug.localeCompare(b.slug));
diff --git a/packages/core/src/services/schema/helpers.ts b/packages/core/src/services/schema/helpers.ts
index d186ce770..a87f78258 100644
--- a/packages/core/src/services/schema/helpers.ts
+++ b/packages/core/src/services/schema/helpers.ts
@@ -18,7 +18,7 @@ export interface SchemaProjection {
   readonly products: ReadonlyArray<{
     readonly slug: string;
     readonly name: string;
-    readonly type: "subscription";
+    readonly type: "subscription" | "one-time" | "one-time-consumable";
     readonly perks: ReadonlyArray<string>;
     readonly providers: ReadonlyArray<{
       readonly providerId: SchemaProviderId;
diff --git a/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts
index 403087eff..4959cd4fa 100644
--- a/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts
+++ b/packages/core/test/services/paymentProviders/appStore/AppStorePaymentProviderService.integration.test.ts
@@ -8,58 +8,35 @@
  *   1. resolve the enabled configuration for `input.bundleId` under
  *      `input.projectId` (DB read + pure key match),
  *   2. resolve the project from `input.projectId` (DB read),
- *   3. build the per-tenant Apple SDK context and call
- *      `getTransactionInfo` (live Apple HTTPS) + `decodeSignedTransaction`
- *      (JWS verification against Apple root certs),
+ *   3. verify the transaction through `AppStoreTransactionVerifier`,
  *   4. forward the decoded transaction to `AppStorePaymentProvider.recordPurchase`.
  *
- * STAGE 3 IS THE HARD WALL. Once a configuration resolves, the method calls
- * `appStorePaymentProvider.buildSdkContextFromConfiguration(configuration)`,
- * which builds a *real* `AppStoreServerSdkClient` + `SignedDataVerifier` (see
- * `appStore/sdk-context.ts`), then calls `sdkContext.getTransactionInfo(...)` —
- * a live HTTPS request to Apple's App Store Server API — and
- * `sdkContext.decodeSignedTransaction(...)` — real X.509 chain + JWS signature
- * verification against Apple's root certificates. The SDK context is built
- * *internally*; there is no override seam to inject a fake context, and the
- * testing brief defers any path that needs an Apple-signed JWS payload or an
- * external provider sandbox to `test.todo` rather than hand-rolling a double.
- * So every happy-path case and every post-configuration error case (missing
- * `signedTransactionInfo`, SDK/verification error, `recordPurchase` failure) is
- * deferred — they cannot run in-process against real infrastructure.
- *
- * STAGE 1 (configuration-not-found), HOWEVER, RUNS FULLY IN-PROCESS and is
- * implemented below as a real harness test. The live layer *can* be built
- * against harness `Db` + `AuthSession`: `AppStorePaymentProviderServiceLive`
- * provides `AppStoreWebhookHandlerService.layer` (which merges
- * `AppStorePaymentProvider.layer`), and its residual deps
- * (`PurchaseProcessingService`, `PersonIdentityService`, `FxRateService`,
- * `PaymentConfigSecretCrypto`, `AppStoreServerSdk`) all bottom out at the
- * harness `Db` once given the same leaf stubs the sibling
- * `AppStorePaymentProvider.integration.test.ts` already uses (which exercises
- * `recordPurchase` end-to-end — there is NO ambient `Cloudflare.Worker`
- * requirement on the record path; the `as unknown as` cast in the source only
- * erases the *service-shape* `R` for the public contract, it does not gate
- * layer construction). With no enabled configuration for the input `bundleId`,
- * `getActiveAppStorePaymentProviderConfiguration` fails *before* the SDK
- * boundary is reached, and `processSdkTransaction`'s `toServiceError` wrapper
- * collapses that into the public {@link AppStorePaymentProviderServiceError}.
- *
- * See the sibling suite `AppStorePaymentProvider.integration.test.ts` for the
- * record-engine layer idiom and `appStore/sdk-context.test.ts` for the SDK
- * boundary todos.
+ * The success case replaces only the external verifier and keeps configuration
+ * lookup, project lookup, product mapping, identity binding, purchase
+ * processing, and database writes live. Production supplies a verifier backed
+ * by Apple's REST client and signed-data verifier.
  */
 import { Effect, Layer } from "effect";
 import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+import { HttpClient, HttpClientRequest, HttpClientResponse } from "effect/unstable/http";
 import { describe, expect, test as vitestTest } from "vitest";
 
-import { AppStoreServerSdk } from "@voidhash/app-store-server-sdk";
+import {
+  AppStoreServerSdk,
+  Type as AppleTransactionType,
+  decodeJWSTransactionDecodedPayload,
+} from "@voidhash/app-store-server-sdk";
 import {
   FxRateService,
+  GooglePlayPaymentProviderService,
   IdentityProjectionPublisher,
   PerkGrantService,
   PersonIdentityService,
   PurchaseProcessingService,
+  PurchaseService,
+  SdkService,
 } from "@voidhash/core/services";
+import type { PublishableKeySession } from "@voidhash/core/domain/auth/Auth";
 import { AppStorePaymentProvider } from "@voidhash/core/services/paymentProviders/appStore/payment-provider";
 import {
   AppStorePaymentProviderService,
@@ -69,19 +46,43 @@ import {
   // `appStore/errors.ts` shares the `_tag` string but is a DISTINCT runtime
   // class, so `toBeInstanceOf` against it fails even when the tag matches.
   AppStorePaymentProviderServiceError,
+  AppStoreTransactionVerifier,
 } from "@voidhash/core/services";
 import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
 import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { deriveAccountToken } from "@voidhash/core/utils/crypto/account-token";
+import { generateId } from "@voidhash/core/utils";
+import { make as makeGeneratedClient } from "@voidhash/generated-clients";
+import {
+  Db,
+  ProviderEnvironment,
+  eq,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  products,
+  purchaseLedger,
+  purchases,
+  transactions,
+} from "@voidhash/db";
 // The live layer has no public package subpath, so it is imported by relative
 // path into `src` (the App-Store unit-test convention used by the sibling
 // engine suite for the error classes).
 import { AppStorePaymentProviderServiceLive } from "../../../../src/services/paymentProviders/appStore/payment-provider-service.ts";
 
 import { CoreAuthSession } from "@testing/CoreAuthSession";
-import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
+import { PurchaseIntegrationTestHarness } from "@testing/PurchaseIntegrationTestHarness";
 import { CoreTestFixture } from "@testing/CoreTestFixture";
+import {
+  makeReactNativePurchaseHarness,
+  type RuntimeSchema,
+  Transaction as ReactNativeTransaction,
+} from "@testing/ReactNativePurchaseHarness";
+import { makePurchaseSdkHttpHandler } from "../../../../../../apps/backend/src/testing/PurchaseSdkHttpHarness.ts";
 
-const { test } = CoreIntegrationTestHarness.make();
+const { test } = PurchaseIntegrationTestHarness.make();
 
 const projectId = CoreTestFixture.projectId;
 
@@ -100,37 +101,378 @@ const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflo
   dispatch: () => Effect.void,
 });
 
+const googlePlayStub = Layer.succeed(GooglePlayPaymentProviderService, {
+  acceptRtdnNotification: () => Effect.die("Google Play webhook must not run"),
+  processSdkTransaction: () => Effect.die("Google Play purchase must not run"),
+});
+
+const sdkSession = (distinctId: string): PublishableKeySession => ({
+  cookie: null,
+  method: "publishable-key",
+  name: "Purchase integration SDK",
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:read"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: { distinctId },
+  projects: [
+    {
+      id: projectId,
+      logo: null,
+      name: CoreTestFixture.projectName,
+      organizationId: CoreTestFixture.organizationId,
+      permissions: ["project:read"],
+      slug: CoreTestFixture.projectSlug,
+    },
+  ],
+  user: null,
+});
+
 /**
  * Full dependency graph for `AppStorePaymentProviderServiceLive`. Mirrors the
  * sibling engine suite's `AppStoreEngineLive`: every node is either a real
  * `Db`-backed service or a leaf stub with no infrastructure of its own, so the
  * only requirements that escape are the harness `Db` and the per-test
- * `AuthSession` supplied by `CoreAuthSession.authenticate`.
+ * authentication session supplied by the in-process SDK HTTP harness.
  */
+const AppStoreEngineLive = AppStorePaymentProvider.layer.pipe(
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PurchaseProcessingService.layer,
+      PersonIdentityService.layer,
+      FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
+      PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
+      AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer)),
+    ),
+  ),
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PerkGrantService.layer,
+      IdentityProjectionPublisher.noop,
+      CompletionWorkflowStub,
+    ),
+  ),
+);
+
 const AppStoreServiceLive = AppStorePaymentProviderServiceLive.pipe(
   Layer.provide(
-    AppStorePaymentProvider.layer.pipe(
-      Layer.provideMerge(
-        Layer.mergeAll(
-          PurchaseProcessingService.layer,
-          PersonIdentityService.layer,
-          FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
-          PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
-          AppStoreServerSdk.layer.pipe(Layer.provide(FetchHttpClient.layer)),
-        ),
-      ),
-      Layer.provideMerge(
-        Layer.mergeAll(
-          PerkGrantService.layer,
-          IdentityProjectionPublisher.noop,
-          CompletionWorkflowStub,
-        ),
-      ),
-    ),
+    Layer.succeed(AppStoreTransactionVerifier, {
+      verify: () => Effect.fail(new Error("App Store verifier must not run in this test")),
+    }),
   ),
+  Layer.provide(AppStoreEngineLive),
 );
 
 describe("AppStorePaymentProviderService.processSdkTransaction", () => {
+  test(
+    "runs purchase, retry, restore, verification, and persistence end to end",
+    Effect.gen(function* () {
+      const db = yield* Db;
+      const distinctId = uniq("person");
+      const accountToken = yield* deriveAccountToken(distinctId);
+      const bundleId = `com.voidhash.${uniq("bundle").replaceAll("-", "")}`;
+      const providerProductKey = uniq("lifetime");
+      const productSlug = uniq("lifetime-slug");
+      const transactionId = uniq("transaction");
+      const configurationId = generateId("paymentProviderConfiguration");
+      const providerProductId = generateId("paymentProviderProduct");
+      const productId = generateId("product");
+      const purchasedAt = Date.now();
+      const receivedAt = new Date(purchasedAt);
+      const idempotencyKey = `apple:${transactionId}:purchase:${purchasedAt}`;
+      let personId: string | undefined;
+      let disposeHttp: (() => Promise<void>) | undefined;
+      const disposeReactNative: Array<() => Promise<void>> = [];
+
+      const cleanup = Effect.gen(function* () {
+        for (const dispose of disposeReactNative) {
+          yield* Effect.promise(dispose);
+        }
+        if (disposeHttp) {
+          yield* Effect.promise(disposeHttp);
+        }
+        yield* db
+          .delete(purchaseLedger)
+          .where(eq(purchaseLedger.idempotencyKey, idempotencyKey))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(transactions)
+          .where(eq(transactions.paymentProviderConfigurationProductId, providerProductId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(purchases)
+          .where(eq(purchases.paymentProviderConfigurationProductId, providerProductId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(paymentProviderConfigurationProducts)
+          .where(eq(paymentProviderConfigurationProducts.id, providerProductId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(paymentProviderConfigurations)
+          .where(eq(paymentProviderConfigurations.id, configurationId))
+          .pipe(Effect.ignore);
+        yield* db.delete(products).where(eq(products.id, productId)).pipe(Effect.ignore);
+        if (personId) {
+          yield* db
+            .delete(personExternalIdentifiers)
+            .where(eq(personExternalIdentifiers.personId, personId))
+            .pipe(Effect.ignore);
+          yield* db
+            .delete(personIdentities)
+            .where(eq(personIdentities.personId, personId))
+            .pipe(Effect.ignore);
+          yield* db.delete(persons).where(eq(persons.id, personId)).pipe(Effect.ignore);
+        }
+      });
+
+      yield* Effect.gen(function* () {
+        yield* db.insert(products).values({
+          id: productId,
+          name: "Hermetic App Store lifetime",
+          projectId,
+          slug: productSlug,
+        });
+        yield* db.insert(paymentProviderConfigurations).values({
+          configuration: {
+            appAppleId: "1234567890",
+            appStoreConnectApiIssuerId: "unused",
+            appStoreConnectApiKeyId: "unused",
+            appStoreConnectApiVendorNumber: "unused",
+            appleServerNotificationForwardingUrl: "",
+            appleSmallBusinessProgramHasEndDate: false,
+            bundleId,
+            inAppPurchaseKeyId: "unused",
+            inAppPurchaseKeyIssuerId: "unused",
+            inAppPurchasePrivateKey: "unused-by-hermetic-verifier",
+            trackNewPurchasesFromAppleServerNotifications: true,
+          },
+          enabled: true,
+          id: configurationId,
+          name: "Hermetic App Store",
+          paymentProviderKey: bundleId,
+          projectId,
+          providerId: "apple-app-store",
+        });
+        yield* db.insert(paymentProviderConfigurationProducts).values({
+          configuration: { productId: providerProductKey },
+          id: providerProductId,
+          isActive: true,
+          paymentProviderConfigurationId: configurationId,
+          productId,
+          providerProductKey,
+        });
+
+        const decodedTransaction = yield* decodeJWSTransactionDecodedPayload({
+          appAccountToken: accountToken,
+          bundleId,
+          currency: "USD",
+          environment: "Sandbox",
+          originalPurchaseDate: purchasedAt,
+          originalTransactionId: transactionId,
+          price: 4990,
+          productId: providerProductKey,
+          purchaseDate: purchasedAt,
+          signedDate: purchasedAt,
+          storefront: "USA",
+          transactionId,
+          type: AppleTransactionType.NON_CONSUMABLE,
+        });
+        const verifierCalls: Array<{
+          configurationId: string;
+          transactionId: string;
+        }> = [];
+        const verifier = Layer.succeed(AppStoreTransactionVerifier, {
+          verify: (input) => {
+            verifierCalls.push({
+              configurationId: input.configuration.id,
+              transactionId: input.transactionId,
+            });
+            return Effect.succeed({
+              decodedTransaction,
+              providerEnvironment: ProviderEnvironment.Sandbox,
+            });
+          },
+        });
+        const serviceLayer = AppStorePaymentProviderServiceLive.pipe(
+          Layer.provide(verifier),
+          Layer.provide(AppStoreEngineLive),
+        );
+        const sdkLayer = SdkService.layer.pipe(
+          Layer.provideMerge(
+            Layer.mergeAll(
+              PerkGrantService.layer,
+              PurchaseService.layer,
+              PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
+              IdentityProjectionPublisher.noop,
+              serviceLayer,
+              googlePlayStub,
+              CompletionWorkflowStub,
+            ),
+          ),
+        );
+
+        const httpApp = makePurchaseSdkHttpHandler(
+          sdkLayer.pipe(Layer.provideMerge(Layer.succeed(Db, db))),
+          sdkSession(distinctId),
+        );
+        disposeHttp = httpApp.dispose;
+        const httpClient = HttpClient.make((request) =>
+          Effect.gen(function* () {
+            const webRequest = yield* HttpClientRequest.toWeb(request);
+            const webResponse = yield* Effect.promise(() => httpApp.handler(webRequest));
+            return HttpClientResponse.fromWeb(request, webResponse);
+          }),
+        );
+        const generatedClient = makeGeneratedClient(httpClient, {
+          transformClient: (client) =>
+            Effect.succeed(
+              client.pipe(
+                HttpClient.mapRequest((request) =>
+                  HttpClientRequest.prependUrl(request, "https://api.voidhash.test"),
+                ),
+              ),
+            ),
+        });
+        const schema = {
+          locations: {},
+          perks: {},
+          products: {
+            [productSlug]: {
+              configuration: {
+                perks: {},
+                providers: { appleAppStore: { productId: providerProductKey } },
+              },
+              properties: { name: "Hermetic App Store lifetime" },
+              slug: productSlug,
+              type: "one-time-non-consumable",
+            },
+          },
+          version: "purchase-integration",
+        } satisfies RuntimeSchema;
+        const transaction = new ReactNativeTransaction(
+          transactionId,
+          transactionId,
+          providerProductKey,
+          purchasedAt,
+          1,
+          false,
+          "ios",
+          { appAccountToken: accountToken },
+        );
+        const assertPersistedBeforeFinish = () =>
+          Effect.gen(function* () {
+            const rows = yield* db
+              .select()
+              .from(purchaseLedger)
+              .where(eq(purchaseLedger.idempotencyKey, idempotencyKey));
+            expect(rows).toHaveLength(1);
+          });
+        let remainingNativeFailures = 1;
+        const purchaseHarness = makeReactNativePurchaseHarness({
+          client: generatedClient,
+          distinctId,
+          onAcknowledge: (_transaction, productType) =>
+            Effect.gen(function* () {
+              expect(productType).toBe("one-time-non-consumable");
+              yield* assertPersistedBeforeFinish();
+              if (remainingNativeFailures > 0) {
+                remainingNativeFailures -= 1;
+                return yield* Effect.fail(new Error("Simulated StoreKit finish failure"));
+              }
+            }),
+          platform: { bundleId, platform: "ios" },
+          syncTransactionShouldFailTimes: 1,
+        });
+        disposeReactNative.push(purchaseHarness.dispose);
+        yield* Effect.promise(async () => {
+          await purchaseHarness.initialize;
+          await expect(purchaseHarness.process(transaction, schema)).rejects.toThrow(
+            "Simulated SDK transport failure",
+          );
+          expect(purchaseHarness.state.syncTransactionAttempts).toBe(1);
+          expect(purchaseHarness.acknowledgedTransactions).toHaveLength(0);
+          expect(verifierCalls).toHaveLength(0);
+
+          const finalizationAttempts = await Promise.allSettled([
+            purchaseHarness.process(transaction, schema),
+            purchaseHarness.process(transaction, schema),
+          ]);
+          expect(finalizationAttempts.map((result) => result.status)).toEqual([
+            "rejected",
+            "rejected",
+          ]);
+          expect(purchaseHarness.state.syncTransactionAttempts).toBe(2);
+          expect(purchaseHarness.acknowledgedTransactions).toHaveLength(1);
+          expect(verifierCalls).toHaveLength(1);
+
+          await purchaseHarness.process(transaction, schema);
+        });
+        expect(purchaseHarness.state.syncTransactionAttempts).toBe(2);
+        expect(purchaseHarness.state.personRefreshAttempts).toBe(1);
+        expect(purchaseHarness.acknowledgedTransactions).toHaveLength(2);
+        expect(verifierCalls).toHaveLength(1);
+
+        const restoreHarness = makeReactNativePurchaseHarness({
+          client: generatedClient,
+          distinctId,
+          onAcknowledge: (_transaction, productType) =>
+            Effect.gen(function* () {
+              expect(productType).toBe("one-time-non-consumable");
+              yield* assertPersistedBeforeFinish();
+            }),
+          platform: { bundleId, platform: "ios" },
+          purchaseHistory: [transaction],
+        });
+        disposeReactNative.push(restoreHarness.dispose);
+        yield* Effect.promise(async () => {
+          await restoreHarness.initialize;
+          await restoreHarness.restore(schema);
+        });
+        expect(restoreHarness.acknowledgedTransactions).toHaveLength(1);
+        expect(restoreHarness.state.personRefreshAttempts).toBe(1);
+        expect(verifierCalls).toEqual([
+          { configurationId, transactionId },
+          { configurationId, transactionId },
+        ]);
+
+        const purchaseRows = yield* db
+          .select()
+          .from(purchases)
+          .where(eq(purchases.paymentProviderConfigurationProductId, providerProductId));
+        const ledgerRows = yield* db
+          .select()
+          .from(purchaseLedger)
+          .where(eq(purchaseLedger.idempotencyKey, idempotencyKey));
+        const accountBinding = yield* db.query.personExternalIdentifiers.findFirst({
+          where: {
+            identifier: accountToken,
+            projectId,
+            serviceId: "voidhash-account-token",
+          },
+        });
+        const identity = yield* db.query.personIdentities.findFirst({
+          where: { distinctId, projectId },
+        });
+        personId = identity?.personId;
+
+        expect(purchaseRows).toHaveLength(1);
+        expect(personId).toBeDefined();
+        expect(purchaseRows[0]?.personId).toBe(personId);
+        expect(purchaseRows[0]?.providerEnvironment).toBe(ProviderEnvironment.Sandbox);
+        expect(ledgerRows).toHaveLength(1);
+        expect(ledgerRows[0]?.source).toBe("sdk");
+        expect(accountBinding?.personId).toBe(personId);
+        expect(identity?.personId).toBe(personId);
+      }).pipe(Effect.ensuring(cleanup));
+    }).pipe(CoreAuthSession.authenticate()),
+  );
+
   // --- Error aggregation: configuration-not-found (RUNNABLE, pre-SDK) ---------
   // The cheapest and only in-process-reachable branch: with no enabled
   // configuration for the input bundleId,
@@ -163,43 +505,6 @@ describe("AppStorePaymentProviderService.processSdkTransaction", () => {
     }).pipe(Effect.provide(AppStoreServiceLive), CoreAuthSession.authenticate()),
   );
 
-  // --- Happy-path orchestration (needs a live Apple call + JWS) ---------------
-  // Each step below resolves a real configuration, then reaches the SDK
-  // boundary (live Apple REST `getTransactionInfo` + JWS verification against
-  // Apple root certs) which cannot run in-process. The SDK context is built
-  // internally by `buildSdkContextFromConfiguration` with no stub seam, and the
-  // testing brief disallows faking the Apple response. Implement once an
-  // in-process seam exists to inject a well-formed decoded transaction WITHOUT
-  // a live Apple call.
-
-  vitestTest.todo(
-    "resolves the enabled configuration for the input bundleId before calling the SDK — deferred: the success path continues into the SDK boundary (live Apple getTransactionInfo + JWS verification) which cannot run in-process; only the configuration-not-found short-circuit (above) is reachable",
-  );
-
-  vitestTest.todo(
-    "fetches transaction info from the per-tenant Apple SDK context (getTransactionInfo) — deferred: needs a live Apple App Store Server API call; the SDK context is built internally and has no stub seam, and faking the Apple response is disallowed",
-  );
-
-  vitestTest.todo(
-    "decodes signedTransactionInfo from the SDK response (decodeSignedTransaction) — deferred: needs a real Apple-signed JWS verified against Apple root certificates; cannot be faked per the testing brief",
-  );
-
-  vitestTest.todo(
-    "routes the decoded transaction to recordPurchase with source='sdk' and persists the purchase/subscription rows — deferred: reaching recordPurchase requires the upstream live Apple getTransactionInfo + JWS decode to succeed first, which cannot run in-process (recordPurchase itself IS exercised directly in the sibling AppStorePaymentProvider engine suite)",
-  );
-
-  vitestTest.todo(
-    "includes the input distinctId in the recordPurchase input so the purchase binds to the SDK person — deferred: blocked by the same upstream SDK getTransactionInfo + JWS decode boundary as the recordPurchase routing case",
-  );
-
-  vitestTest.todo(
-    "resolves the project from input.projectId and propagates it into recordPurchase — deferred: project is read after configuration resolution and before the unrunnable live-Apple SDK fetch, so the success path cannot be reached in-process",
-  );
-
-  vitestTest.todo(
-    "returns { personId } from recordPurchase on success — deferred: success requires a real Apple-signed transaction fetched + decoded via the live SDK boundary",
-  );
-
   // --- Error aggregation to AppStorePaymentProviderServiceError (post-SDK) ----
   // These branches all fire at or after the SDK call, so they require driving
   // the live Apple REST / JWS verification path.
diff --git a/packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProviderService.integration.test.ts b/packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProviderService.integration.test.ts
new file mode 100644
index 000000000..9cf08045a
--- /dev/null
+++ b/packages/core/test/services/paymentProviders/googlePlay/GooglePlayPaymentProviderService.integration.test.ts
@@ -0,0 +1,411 @@
+import { Effect, Layer, Option } from "effect";
+import { HttpClient, HttpClientRequest, HttpClientResponse } from "effect/unstable/http";
+import { describe, expect } from "vitest";
+
+import {
+  AppStorePaymentProviderService,
+  FxRateService,
+  GooglePlayPaymentProviderServiceLive,
+  GooglePlayPurchaseVerifier,
+  IdentityProjectionPublisher,
+  PerkGrantService,
+  PersonIdentityService,
+  PurchaseProcessingService,
+  PurchaseService,
+  SdkService,
+} from "@voidhash/core/services";
+import type { PublishableKeySession } from "@voidhash/core/domain/auth/Auth";
+import { GooglePlayPaymentProvider } from "@voidhash/core/services/paymentProviders/googlePlay/payment-provider";
+import { GooglePlayServerApi } from "@voidhash/core/services/paymentProviders/googlePlay/sdk-context";
+import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
+import { PaymentConfigSecretCrypto } from "@voidhash/core/utils/crypto/PaymentConfigSecretCrypto";
+import { deriveAccountToken } from "@voidhash/core/utils/crypto/account-token";
+import { generateId } from "@voidhash/core/utils";
+import { make as makeGeneratedClient } from "@voidhash/generated-clients";
+import {
+  Db,
+  ProviderEnvironment,
+  eq,
+  paymentProviderConfigurationProducts,
+  paymentProviderConfigurations,
+  personExternalIdentifiers,
+  personIdentities,
+  persons,
+  products,
+  purchaseLedger,
+  purchases,
+  transactions,
+} from "@voidhash/db";
+
+import { CoreAuthSession } from "@testing/CoreAuthSession";
+import { PurchaseIntegrationTestHarness } from "@testing/PurchaseIntegrationTestHarness";
+import { CoreTestFixture } from "@testing/CoreTestFixture";
+import {
+  makeReactNativePurchaseHarness,
+  type RuntimeSchema,
+  Transaction as ReactNativeTransaction,
+} from "@testing/ReactNativePurchaseHarness";
+import { makePurchaseSdkHttpHandler } from "../../../../../../apps/backend/src/testing/PurchaseSdkHttpHarness.ts";
+
+const { test } = PurchaseIntegrationTestHarness.make();
+const projectId = CoreTestFixture.projectId;
+let sequence = 0;
+const unique = (label: string) => `it-gp-sdk-${label}-${Date.now()}-${sequence++}`;
+
+const CompletionWorkflowStub = Layer.succeed(IdentifyDistinctIdCompletionWorkflow, {
+  dispatch: () => Effect.void,
+});
+
+const appStoreStub = Layer.succeed(AppStorePaymentProviderService, {
+  acceptServerNotification: () => Effect.die("App Store webhook must not run"),
+  processSdkTransaction: () => Effect.die("App Store purchase must not run"),
+});
+
+const sdkSession = (distinctId: string): PublishableKeySession => ({
+  cookie: null,
+  method: "publishable-key",
+  name: "Purchase integration SDK",
+  organizations: [
+    {
+      id: CoreTestFixture.organizationId,
+      logo: null,
+      name: CoreTestFixture.organizationName,
+      permissions: ["organization:read"],
+      slug: CoreTestFixture.organizationSlug,
+      workosOrganizationId: CoreTestFixture.workosOrganizationId,
+    },
+  ],
+  person: { distinctId },
+  projects: [
+    {
+      id: projectId,
+      logo: null,
+      name: CoreTestFixture.projectName,
+      organizationId: CoreTestFixture.organizationId,
+      permissions: ["project:read"],
+      slug: CoreTestFixture.projectSlug,
+    },
+  ],
+  user: null,
+});
+
+const GooglePlayEngineLive = GooglePlayPaymentProvider.layer.pipe(
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PurchaseProcessingService.layer,
+      PersonIdentityService.layer,
+      FxRateService.layer({ apiKey: Effect.succeed("test-fx-key") }),
+      PaymentConfigSecretCrypto.layer({ key: Effect.succeed("") }),
+      GooglePlayServerApi.layer,
+    ),
+  ),
+  Layer.provideMerge(
+    Layer.mergeAll(
+      PerkGrantService.layer,
+      IdentityProjectionPublisher.noop,
+      CompletionWorkflowStub,
+    ),
+  ),
+);
+
+describe("GooglePlayPaymentProviderService.processSdkTransaction", () => {
+  test(
+    "runs purchase, retry, restore, verification, and persistence end to end",
+    Effect.gen(function* () {
+      const db = yield* Db;
+      const distinctId = unique("person");
+      const accountToken = yield* deriveAccountToken(distinctId);
+      const packageName = `com.voidhash.${unique("package").replaceAll("-", "")}`;
+      const providerProductKey = unique("coins");
+      const productSlug = unique("coins-slug");
+      const purchaseToken = unique("token");
+      const orderId = unique("order");
+      const configurationId = generateId("paymentProviderConfiguration");
+      const providerProductId = generateId("paymentProviderProduct");
+      const productId = generateId("product");
+      const receivedAt = new Date();
+      let personId: string | undefined;
+      let disposeHttp: (() => Promise<void>) | undefined;
+      const disposeReactNative: Array<() => Promise<void>> = [];
+
+      const cleanup = Effect.gen(function* () {
+        for (const dispose of disposeReactNative) {
+          yield* Effect.promise(dispose);
+        }
+        if (disposeHttp) {
+          yield* Effect.promise(disposeHttp);
+        }
+        yield* db
+          .delete(purchaseLedger)
+          .where(eq(purchaseLedger.idempotencyKey, `google:${orderId}:one_time_purchase`))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(transactions)
+          .where(eq(transactions.paymentProviderConfigurationProductId, providerProductId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(purchases)
+          .where(eq(purchases.paymentProviderConfigurationProductId, providerProductId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(paymentProviderConfigurationProducts)
+          .where(eq(paymentProviderConfigurationProducts.id, providerProductId))
+          .pipe(Effect.ignore);
+        yield* db
+          .delete(paymentProviderConfigurations)
+          .where(eq(paymentProviderConfigurations.id, configurationId))
+          .pipe(Effect.ignore);
+        yield* db.delete(products).where(eq(products.id, productId)).pipe(Effect.ignore);
+        if (personId) {
+          yield* db
+            .delete(personExternalIdentifiers)
+            .where(eq(personExternalIdentifiers.personId, personId))
+            .pipe(Effect.ignore);
+          yield* db
+            .delete(personIdentities)
+            .where(eq(personIdentities.personId, personId))
+            .pipe(Effect.ignore);
+          yield* db.delete(persons).where(eq(persons.id, personId)).pipe(Effect.ignore);
+        }
+      });
+
+      yield* Effect.gen(function* () {
+        yield* db.insert(products).values({
+          id: productId,
+          name: "Hermetic Google Play coins",
+          projectId,
+          slug: productSlug,
+        });
+        yield* db.insert(paymentProviderConfigurations).values({
+          configuration: {
+            googleRealTimeDeveloperNotificationForwardingUrl: "",
+            googleRealTimeDeveloperNotificationTopicName: "",
+            packageName,
+            serviceAccountKey: "unused-by-hermetic-verifier",
+          },
+          enabled: true,
+          id: configurationId,
+          name: "Hermetic Google Play",
+          paymentProviderKey: packageName,
+          projectId,
+          providerId: "google-play",
+        });
+        yield* db.insert(paymentProviderConfigurationProducts).values({
+          configuration: { productId: providerProductKey },
+          id: providerProductId,
+          isActive: true,
+          paymentProviderConfigurationId: configurationId,
+          productId,
+          providerProductKey,
+        });
+
+        const verifierCalls: Array<{
+          configurationId: string;
+          productId: string;
+          purchaseToken: string;
+        }> = [];
+        const verifier = Layer.succeed(GooglePlayPurchaseVerifier, {
+          verify: (input) => {
+            verifierCalls.push({
+              configurationId: input.configuration.id,
+              productId: input.productId,
+              purchaseToken: input.purchaseToken,
+            });
+            return Effect.succeed({
+              providerEnvironment: ProviderEnvironment.Sandbox,
+              purchase: {
+                acknowledgementState: Option.some("ACKNOWLEDGEMENT_STATE_PENDING"),
+                autoRenewEnabled: false,
+                basePlanId: Option.none(),
+                currency: Option.none(),
+                expiryTime: Option.none(),
+                isTrial: false,
+                kind: "product" as const,
+                linkedPurchaseToken: Option.none(),
+                obfuscatedExternalAccountId: Option.some(accountToken),
+                offerId: Option.none(),
+                orderId: Option.some(orderId),
+                priceMinorUnits: Option.none(),
+                productId: providerProductKey,
+                purchaseToken,
+                startTime: Option.some(receivedAt),
+                storefront: Option.some("US"),
+                subscriptionState: Option.none(),
+              },
+            });
+          },
+        });
+        const serviceLayer = GooglePlayPaymentProviderServiceLive.pipe(
+          Layer.provide(verifier),
+          Layer.provide(GooglePlayEngineLive),
+        );
+        const sdkLayer = SdkService.layer.pipe(
+          Layer.provideMerge(
+            Layer.mergeAll(
+              PerkGrantService.layer,
+              PurchaseService.layer,
+              PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
+              IdentityProjectionPublisher.noop,
+              serviceLayer,
+              appStoreStub,
+              CompletionWorkflowStub,
+            ),
+          ),
+        );
+
+        const httpApp = makePurchaseSdkHttpHandler(
+          sdkLayer.pipe(Layer.provideMerge(Layer.succeed(Db, db))),
+          sdkSession(distinctId),
+        );
+        disposeHttp = httpApp.dispose;
+        const httpClient = HttpClient.make((request) =>
+          Effect.gen(function* () {
+            const webRequest = yield* HttpClientRequest.toWeb(request);
+            const webResponse = yield* Effect.promise(() => httpApp.handler(webRequest));
+            return HttpClientResponse.fromWeb(request, webResponse);
+          }),
+        );
+        const generatedClient = makeGeneratedClient(httpClient, {
+          transformClient: (client) =>
+            Effect.succeed(
+              client.pipe(
+                HttpClient.mapRequest((request) =>
+                  HttpClientRequest.prependUrl(request, "https://api.voidhash.test"),
+                ),
+              ),
+            ),
+        });
+        const schema = {
+          locations: {},
+          perks: {},
+          products: {
+            [productSlug]: {
+              configuration: {
+                perks: {},
+                providers: { googlePlay: { productId: providerProductKey } },
+              },
+              properties: { name: "Hermetic Google Play lifetime" },
+              slug: productSlug,
+              type: "one-time-non-consumable",
+            },
+          },
+          version: "purchase-integration",
+        } satisfies RuntimeSchema;
+        const transaction = new ReactNativeTransaction(
+          purchaseToken,
+          orderId,
+          providerProductKey,
+          receivedAt.getTime(),
+          1,
+          false,
+          "android",
+          { appAccountToken: accountToken, purchaseToken },
+        );
+        const assertPersistedBeforeAcknowledge = () =>
+          Effect.gen(function* () {
+            const rows = yield* db
+              .select()
+              .from(purchaseLedger)
+              .where(eq(purchaseLedger.idempotencyKey, `google:${orderId}:one_time_purchase`));
+            expect(rows).toHaveLength(1);
+          });
+        let remainingNativeFailures = 1;
+        const purchaseHarness = makeReactNativePurchaseHarness({
+          client: generatedClient,
+          distinctId,
+          onAcknowledge: (_transaction, productType) =>
+            Effect.gen(function* () {
+              expect(productType).toBe("one-time-non-consumable");
+              yield* assertPersistedBeforeAcknowledge();
+              if (remainingNativeFailures > 0) {
+                remainingNativeFailures -= 1;
+                return yield* Effect.fail(new Error("Simulated Google acknowledgement failure"));
+              }
+            }),
+          platform: { bundleId: packageName, platform: "android" },
+          syncTransactionShouldFailTimes: 1,
+        });
+        disposeReactNative.push(purchaseHarness.dispose);
+        yield* Effect.promise(async () => {
+          await purchaseHarness.initialize;
+          await expect(purchaseHarness.process(transaction, schema)).rejects.toThrow(
+            "Simulated SDK transport failure",
+          );
+          expect(purchaseHarness.state.syncTransactionAttempts).toBe(1);
+          expect(purchaseHarness.acknowledgedTransactions).toHaveLength(0);
+          expect(verifierCalls).toHaveLength(0);
+
+          const finalizationAttempts = await Promise.allSettled([
+            purchaseHarness.process(transaction, schema),
+            purchaseHarness.process(transaction, schema),
+          ]);
+          expect(finalizationAttempts.map((result) => result.status)).toEqual([
+            "rejected",
+            "rejected",
+          ]);
+          expect(purchaseHarness.state.syncTransactionAttempts).toBe(2);
+          expect(purchaseHarness.acknowledgedTransactions).toHaveLength(1);
+          expect(verifierCalls).toHaveLength(1);
+
+          await purchaseHarness.process(transaction, schema);
+        });
+        expect(purchaseHarness.state.syncTransactionAttempts).toBe(2);
+        expect(purchaseHarness.state.personRefreshAttempts).toBe(1);
+        expect(purchaseHarness.acknowledgedTransactions).toHaveLength(2);
+        expect(verifierCalls).toHaveLength(1);
+
+        const restoreHarness = makeReactNativePurchaseHarness({
+          client: generatedClient,
+          distinctId,
+          onAcknowledge: (_transaction, productType) =>
+            Effect.gen(function* () {
+              expect(productType).toBe("one-time-non-consumable");
+              yield* assertPersistedBeforeAcknowledge();
+            }),
+          platform: { bundleId: packageName, platform: "android" },
+          purchaseHistory: [transaction],
+        });
+        disposeReactNative.push(restoreHarness.dispose);
+        yield* Effect.promise(async () => {
+          await restoreHarness.initialize;
+          await restoreHarness.restore(schema);
+        });
+        expect(restoreHarness.acknowledgedTransactions).toHaveLength(1);
+        expect(restoreHarness.state.personRefreshAttempts).toBe(1);
+        expect(verifierCalls).toEqual([
+          { configurationId, productId: providerProductKey, purchaseToken },
+          { configurationId, productId: providerProductKey, purchaseToken },
+        ]);
+
+        const purchaseRows = yield* db
+          .select()
+          .from(purchases)
+          .where(eq(purchases.paymentProviderConfigurationProductId, providerProductId));
+        const ledgerRows = yield* db
+          .select()
+          .from(purchaseLedger)
+          .where(eq(purchaseLedger.idempotencyKey, `google:${orderId}:one_time_purchase`));
+        const accountBinding = yield* db.query.personExternalIdentifiers.findFirst({
+          where: {
+            identifier: accountToken,
+            projectId,
+            serviceId: "voidhash-account-token",
+          },
+        });
+        const identity = yield* db.query.personIdentities.findFirst({
+          where: { distinctId, projectId },
+        });
+        personId = identity?.personId;
+
+        expect(purchaseRows).toHaveLength(1);
+        expect(personId).toBeDefined();
+        expect(purchaseRows[0]?.personId).toBe(personId);
+        expect(purchaseRows[0]?.providerEnvironment).toBe(ProviderEnvironment.Sandbox);
+        expect(ledgerRows).toHaveLength(1);
+        expect(ledgerRows[0]?.source).toBe("sdk");
+        expect(accountBinding?.personId).toBe(personId);
+        expect(identity?.personId).toBe(personId);
+      }).pipe(Effect.ensuring(cleanup));
+    }).pipe(CoreAuthSession.authenticate()),
+  );
+});
diff --git a/packages/core/test/services/schema/SchemaService.integration.test.ts b/packages/core/test/services/schema/SchemaService.integration.test.ts
index c434992ce..508b322f0 100644
--- a/packages/core/test/services/schema/SchemaService.integration.test.ts
+++ b/packages/core/test/services/schema/SchemaService.integration.test.ts
@@ -32,6 +32,7 @@
  *    narrowing the swapped error with `instanceof`.
  */
 import { Effect } from "effect";
+import { ProductType, type ProductTypeValue } from "@voidhash/lib";
 import { subtle } from "uncrypto";
 import { describe, expect, test as vitestTest } from "vitest";
 
@@ -163,12 +164,17 @@ const insertPerk = (track: Tracker, input: { name: string; slug: string }) =>
     return id;
   });
 
-const insertProduct = (track: Tracker, input: { name: string; slug: string }) =>
+const insertProduct = (
+  track: Tracker,
+  input: { name: string; slug: string; type?: ProductTypeValue },
+) =>
   Effect.gen(function* () {
     const db = yield* Db;
     const id = generateId("product");
     track.product(id);
-    yield* db.insert(products).values({ id, name: input.name, projectId, slug: input.slug });
+    yield* db
+      .insert(products)
+      .values({ id, name: input.name, projectId, slug: input.slug, type: input.type });
     return id;
   });
 
@@ -364,10 +370,16 @@ describe("SchemaService.getProjectSchema", () => {
 
         const perkSlug = uniqueSlug("miss-perk");
         const productSlug = uniqueSlug("miss-product");
+        const consumableSlug = uniqueSlug("miss-consumable");
         const locationSlug = uniqueSlug("miss-location");
 
         const perkId = yield* insertPerk(track, { name: "Miss Perk", slug: perkSlug });
         const productId = yield* insertProduct(track, { name: "Miss Product", slug: productSlug });
+        yield* insertProduct(track, {
+          name: "Miss Consumable",
+          slug: consumableSlug,
+          type: ProductType.OneTimeConsumable,
+        });
         yield* insertProductPerkLink(track, { productId, perkId });
         yield* insertLocation(track, {
           name: "Miss Location",
@@ -400,6 +412,9 @@ describe("SchemaService.getProjectSchema", () => {
         expect(seededProduct?.type).toBe("subscription");
         expect(seededProduct?.perks).toContain(perkSlug);
         expect(seededProduct?.providers.some((pr) => pr.providerId === "appleAppStore")).toBe(true);
+        expect(schema.products.find((product) => product.slug === consumableSlug)?.type).toBe(
+          "one-time-consumable",
+        );
         expect(
           seededProduct?.providers.find((pr) => pr.providerId === "appleAppStore")?.configuration,
         ).toEqual({ foo: "bar" });
diff --git a/packages/core/test/services/sdk/SdkService.integration.test.ts b/packages/core/test/services/sdk/SdkService.integration.test.ts
index d5063bdbd..24018bc9d 100644
--- a/packages/core/test/services/sdk/SdkService.integration.test.ts
+++ b/packages/core/test/services/sdk/SdkService.integration.test.ts
@@ -49,10 +49,7 @@ import {
 } from "@voidhash/core/services/paymentProviders/AppStorePaymentProviderService";
 import { GooglePlayPaymentProviderService } from "@voidhash/core/services/paymentProviders/GooglePlayPaymentProviderService";
 import { IdentifyDistinctIdCompletionWorkflow } from "@voidhash/core/services/personIdentity/IdentifyDistinctIdCompletionWorkflow";
-import {
-  AuthenticationError,
-  type PublishableKeySession,
-} from "@voidhash/core/domain/auth/Auth";
+import { AuthenticationError, type PublishableKeySession } from "@voidhash/core/domain/auth/Auth";
 import {
   SdkPersonNotFoundError,
   SdkValidationError,
@@ -846,51 +843,72 @@ describe("SdkService.submitPurchaseTransaction", () => {
 
   test(
     "submits a valid Google Play transaction and returns the resulting person snapshot",
-    withCleanup((track) =>
-      Effect.gen(function* () {
-        track.person(submitGooglePersonId);
-        track.distinctId(submitGoogleDistinctId);
-        yield* insertPerson(submitGooglePersonId, { name: "Android Buyer" });
-        yield* insertIdentity({
-          distinctId: submitGoogleDistinctId,
-          id: `person_dist_${submitGoogleDistinctId}`,
-          kind: PersonIdentityKind.Identified,
-          personId: submitGooglePersonId,
-        });
-
-        const sdk = yield* SdkService;
-        const snapshot = yield* sdk.submitPurchaseTransaction({
-          packageName: "com.voidhash.test",
-          providerId: "google-play",
-          purchaseToken: "token_123",
-        });
-        expect(snapshot.personId).toBe(submitGooglePersonId);
-        expect(snapshot.distinctId).toBe(submitGoogleDistinctId);
-      }),
-    ).pipe(
-      // Google Play stub resolves to the seeded person id; App Store stub must
-      // not be called on the Android path.
-      Effect.provide(
-        SdkService.layer.pipe(
-          Layer.provideMerge(
-            Layer.mergeAll(
-              PerkGrantService.layer,
-              PurchaseService.layer,
-              PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
-              IdentityProjectionPublisher.noop,
-              appStoreStub(() => Effect.die(new Error("App Store stub must not be called"))),
-              Layer.succeed(GooglePlayPaymentProviderService, {
-                acceptRtdnNotification: () =>
-                  Effect.die(new Error("acceptRtdnNotification not used in SdkService tests")),
-                processSdkTransaction: () => Effect.succeed({ personId: submitGooglePersonId }),
-              }),
-              CompletionWorkflowStub,
+    (() => {
+      let capturedInput:
+        | {
+            distinctId: string;
+            packageName: string;
+            productId: string;
+            projectId: string;
+            purchaseToken: string;
+          }
+        | undefined;
+      return withCleanup((track) =>
+        Effect.gen(function* () {
+          track.person(submitGooglePersonId);
+          track.distinctId(submitGoogleDistinctId);
+          yield* insertPerson(submitGooglePersonId, { name: "Android Buyer" });
+          yield* insertIdentity({
+            distinctId: submitGoogleDistinctId,
+            id: `person_dist_${submitGoogleDistinctId}`,
+            kind: PersonIdentityKind.Identified,
+            personId: submitGooglePersonId,
+          });
+
+          const sdk = yield* SdkService;
+          const snapshot = yield* sdk.submitPurchaseTransaction({
+            packageName: "com.voidhash.test",
+            productId: "yearly_sub",
+            providerId: "google-play",
+            purchaseToken: "token_123",
+          });
+          expect(snapshot.personId).toBe(submitGooglePersonId);
+          expect(snapshot.distinctId).toBe(submitGoogleDistinctId);
+          expect(capturedInput).toMatchObject({
+            distinctId: submitGoogleDistinctId,
+            packageName: "com.voidhash.test",
+            productId: "yearly_sub",
+            purchaseToken: "token_123",
+          });
+        }),
+      ).pipe(
+        // Google Play stub resolves to the seeded person id; App Store stub must
+        // not be called on the Android path.
+        Effect.provide(
+          SdkService.layer.pipe(
+            Layer.provideMerge(
+              Layer.mergeAll(
+                PerkGrantService.layer,
+                PurchaseService.layer,
+                PersonIdentityService.layer.pipe(Layer.provide(IdentityProjectionPublisher.noop)),
+                IdentityProjectionPublisher.noop,
+                appStoreStub(() => Effect.die(new Error("App Store stub must not be called"))),
+                Layer.succeed(GooglePlayPaymentProviderService, {
+                  acceptRtdnNotification: () =>
+                    Effect.die(new Error("acceptRtdnNotification not used in SdkService tests")),
+                  processSdkTransaction: (input) => {
+                    capturedInput = input;
+                    return Effect.succeed({ personId: submitGooglePersonId });
+                  },
+                }),
+                CompletionWorkflowStub,
+              ),
             ),
           ),
         ),
-      ),
-      CoreAuthSession.authenticate(sdkSession(submitGoogleDistinctId)),
-    ),
+        CoreAuthSession.authenticate(sdkSession(submitGoogleDistinctId)),
+      );
+    })(),
   );
 
   test(
diff --git a/packages/generated-clients/openapi/core.json b/packages/generated-clients/openapi/core.json
index 1155fae19..ddba1820c 100644
--- a/packages/generated-clients/openapi/core.json
+++ b/packages/generated-clients/openapi/core.json
@@ -1873,12 +1873,14 @@
               "schema": {
                 "type": "object",
                 "properties": {
+                  "appAccountToken": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
                   "platform": {
                     "anyOf": [
                       { "type": "string", "enum": ["ios"] },
                       { "type": "string", "enum": ["android"] }
                     ]
                   },
+                  "providerProductId": { "anyOf": [{ "type": "string" }, { "type": "null" }] },
                   "productSlug": { "type": "string" },
                   "purchaseDate": {
                     "anyOf": [
@@ -3478,7 +3480,10 @@
             "items": { "$ref": "#/components/schemas/SchemaProductProvider" }
           },
           "slug": { "type": "string" },
-          "type": { "type": "string", "enum": ["subscription"] }
+          "type": {
+            "type": "string",
+            "enum": ["subscription", "one-time", "one-time-consumable"]
+          }
         },
         "required": ["name", "perks", "providers", "slug", "type"],
         "additionalProperties": false
@@ -4057,7 +4062,10 @@
             "additionalProperties": false
           },
           "slug": { "type": "string" },
-          "type": { "type": "string", "enum": ["subscription"] }
+          "type": {
+            "type": "string",
+            "enum": ["subscription", "one-time", "one-time-consumable"]
+          }
         },
         "required": ["configuration", "properties", "slug", "type"],
         "additionalProperties": false
diff --git a/packages/generated-clients/src/core/generated.ts b/packages/generated-clients/src/core/generated.ts
index 6143fcd99..12a42e75b 100644
--- a/packages/generated-clients/src/core/generated.ts
+++ b/packages/generated-clients/src/core/generated.ts
@@ -254,14 +254,14 @@ export interface SchemaPerk {
   readonly slug: string;
 }
 
-export type SchemaProductProviderProviderIdEnum = "googlePlay";
+export type SchemaProductProviderProviderIdEnum = "appleAppStore" | "googlePlay";
 
 export interface SchemaProductProvider {
   readonly configuration: Record<string, unknown>;
   readonly providerId: SchemaProductProviderProviderIdEnum | SchemaProductProviderProviderIdEnum;
 }
 
-export type SchemaProductType = "subscription";
+export type SchemaProductType = "one-time" | "one-time-consumable" | "subscription";
 
 export interface SchemaProduct {
   readonly name: string;
@@ -650,15 +650,15 @@ export type SdkSyncPersonAttributes500 =
   | ApiAuthenticationError
   | ApiNotAuthenticatedError;
 
-export type SdkSyncTransactionParamsXIsBackgrounded = "false";
+export type SdkSyncTransactionParamsXIsBackgrounded = "false" | "true";
 
-export type SdkSyncTransactionParamsXIsDebugBuildEnum = "false";
+export type SdkSyncTransactionParamsXIsDebugBuildEnum = "false" | "true";
 
-export type SdkSyncTransactionParamsXObserverModeEnum = "false";
+export type SdkSyncTransactionParamsXObserverModeEnum = "false" | "true";
 
-export type SdkSyncTransactionParamsXPlatformFlavorEnum = "browser";
+export type SdkSyncTransactionParamsXPlatformFlavorEnum = "browser" | "native";
 
-export type SdkSyncTransactionParamsXSdkEnum = "web";
+export type SdkSyncTransactionParamsXSdkEnum = "react-native" | "web";
 
 export interface SdkSyncTransactionParams {
   readonly "x-distinct-id": string;
@@ -688,14 +688,16 @@ export interface SdkSyncTransactionParams {
   readonly "x-storefront"?: string | null | undefined;
 }
 
-export type SdkSyncTransactionRequestPlatformEnum = "android";
+export type SdkSyncTransactionRequestPlatformEnum = "android" | "ios";
 
 export type SdkSyncTransactionRequestPurchaseDateEnum = "-Infinity";
 
 export type SdkSyncTransactionRequestQuantityEnum = "-Infinity";
 
 export interface SdkSyncTransactionRequest {
+  readonly appAccountToken?: string | null | undefined;
   readonly platform: SdkSyncTransactionRequestPlatformEnum | SdkSyncTransactionRequestPlatformEnum;
+  readonly providerProductId?: string | null | undefined;
   readonly productSlug: string;
   readonly purchaseDate:
     | number
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8170cdd4f..774ce110e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1157,6 +1157,9 @@ importers:
 
   libraries/react-native:
     dependencies:
+      '@noble/hashes':
+        specifier: ^2.2.0
+        version: 2.2.0
       '@react-native-async-storage/async-storage':
         specifier: ^1.24.0 || ^2.0.0
         version: 2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
@@ -1413,6 +1416,9 @@ importers:
       '@effect/vitest':
         specifier: 'catalog:'
         version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
+      '@voidhash/generated-clients':
+        specifier: workspace:*
+        version: link:../generated-clients
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -4466,6 +4472,10 @@ packages:
     resolution: {integrity: sha512-XlOlEbQcE9fmuXxrVTXCTlG2nlRXa9Rj3rr5Ue/+tX+nmkgbX720YHh0VR3hBF9xDvwnb8D2shVGOwNx+ulArw==}
     engines: {node: '>= 20.19.0'}
 
+  '@noble/hashes@2.2.0':
+    resolution: {integrity: sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==}
+    engines: {node: '>= 20.19.0'}
+
   '@nodable/entities@2.2.0':
     resolution: {integrity: sha512-9uGyhaQavEUMC8AIddIjau4NsnsXhou+j5sBAGojCM1oxmQpVKTWR/9JxABD6UAv12vpIms55fPZKFQEhG6uBg==}
 
@@ -17554,6 +17564,8 @@ snapshots:
 
   '@noble/hashes@2.0.1': {}
 
+  '@noble/hashes@2.2.0': {}
+
   '@nodable/entities@2.2.0': {}
 
   '@nodelib/fs.scandir@2.1.5':

From 34aa16c2981949ca1075445fdbdcff2337981cdd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 10:14:01 +0200
Subject: [PATCH 080/129] ci: allowlist SDK UUID fixtures

---
 .gitleaks.toml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/.gitleaks.toml b/.gitleaks.toml
index 57d508160..bf430e3b7 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -2,12 +2,15 @@
 useDefault = true
 
 [[allowlists]]
-description = "UUID-shaped App Store SDK test tokens"
+description = "UUID-shaped App Store and React Native SDK test tokens"
 condition = "AND"
 targetRules = ["generic-api-key"]
 regexTarget = "secret"
 regexes = ['''(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$''']
-paths = ['''(?:^|/)packages/app-store-server-sdk/tests/''']
+paths = [
+  '''(?:^|/)libraries/react-native/tests/''',
+  '''(?:^|/)packages/app-store-server-sdk/tests/''',
+]
 
 [[allowlists]]
 description = "Synthetic Stripe credentials used by config-provider tests"
@@ -23,7 +26,10 @@ condition = "AND"
 targetRules = ["generic-api-key"]
 regexTarget = "secret"
 regexes = ['''^3919eb4e-3466-593c-8c1e-84554e13a0a6$''']
-paths = ['''(?:^|/)packages/core/src/utils/crypto/account-token\.ts$''']
+paths = [
+  '''(?:^|/)libraries/react-native/src/core/utils/account-token\.ts$''',
+  '''(?:^|/)packages/core/src/utils/crypto/account-token\.ts$''',
+]
 
 [[allowlists]]
 description = "Throwaway private keys used only by crypto unit tests"

From a25ccd8ea500fc6b0c91ccc6badca40ffb95ee02 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 12:26:33 +0200
Subject: [PATCH 081/129] feat: add custom analytics insights and dashboards

---
 apps/backend/src/BackendApp.ts                |     2 +
 apps/backend/src/rpcs/analytics-rpcs.ts       |    82 +-
 apps/backend/src/rpcs/voidql-rpcs.ts          |    66 +
 apps/backend/src/testing/rpc-smoke-cases.ts   |    21 +
 .../analytics/custom-dashboards-page.tsx      |  1154 ++
 .../studio/analytics/custom-insights-page.tsx |  3390 ++++
 .../studio/lib/tanstack-query/analytics.ts    |   179 +-
 .../studio/lib/tanstack-query/query-keys.ts   |    16 +-
 .../studio/lib/tanstack-query/voidql.ts       |    31 +
 .../components/sidebar/project-sidebar.tsx    |    18 +-
 apps/www/src/routeTree.gen.ts                 |    52 +
 .../$projectSlug/analytics.dashboards.tsx     |    14 +
 .../$projectSlug/analytics.insights.tsx       |    14 +
 .../$projectSlug/analytics.query.tsx          |    73 +-
 packages/core/package.json                    |     1 +
 .../analytics/CustomAnalyticsService.ts       |  2556 +++
 .../services/analytics/clickhouse-accessor.ts |  1111 ++
 packages/core/src/services/index.ts           |     1 +
 .../core/src/services/voidql/VoidQlService.ts |   134 +-
 packages/core/src/utils/generate-id.ts        |     5 +
 .../domain/analytics/custom-insights.test.ts  |   666 +
 .../clickhouse-accessor.integration.test.ts   |   827 +-
 .../migration.sql                             |    42 +
 .../snapshot.json                             | 15374 +++++++++++++++
 .../migration.sql                             |    23 +
 .../snapshot.json                             | 15673 +++++++++++++++
 .../migration.sql                             |     5 +
 .../snapshot.json                             | 15695 ++++++++++++++++
 packages/db/src/schema.ts                     |   119 +
 packages/rpc/src/groups/AnalyticsRpcsDef.ts   |   663 +-
 packages/rpc/src/groups/VoidQlRpcsDef.ts      |    31 +
 31 files changed, 58016 insertions(+), 22 deletions(-)
 create mode 100644 apps/www/src/features/studio/analytics/custom-dashboards-page.tsx
 create mode 100644 apps/www/src/features/studio/analytics/custom-insights-page.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx
 create mode 100644 packages/core/src/services/analytics/CustomAnalyticsService.ts
 create mode 100644 packages/core/test/domain/analytics/custom-insights.test.ts
 create mode 100644 packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/snapshot.json
 create mode 100644 packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/snapshot.json

diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
index fd9bb303e..ea95e7f19 100644
--- a/apps/backend/src/BackendApp.ts
+++ b/apps/backend/src/BackendApp.ts
@@ -53,6 +53,7 @@ import {
   PaywallWorkspaceService,
   ComponentCompiler,
   ComponentManifestCacheService,
+  CustomAnalyticsService,
   PerkGrantService,
   PerkService,
   PersonIdentityService,
@@ -745,6 +746,7 @@ const buildBackendServiceGraph = <
   const BaseDomainServicesLayer = Layer.mergeAll(
     AiChatService.layer,
     AnalyticsService.layer,
+    CustomAnalyticsService.layer,
     ApiKeyService.layer,
     BackendFeedbackServiceLive,
     BackendAppStorePaymentProviderServiceLive,
diff --git a/apps/backend/src/rpcs/analytics-rpcs.ts b/apps/backend/src/rpcs/analytics-rpcs.ts
index 4c0d38791..e254b7960 100644
--- a/apps/backend/src/rpcs/analytics-rpcs.ts
+++ b/apps/backend/src/rpcs/analytics-rpcs.ts
@@ -1,9 +1,4 @@
-import { AnalyticsService } from "@voidhash/core/services";
-// Imported so the inferred `AnalyticsRpcsLive` layer type (whose requirements
-// include the analytics read path's `ClickhouseWebClient`) is nameable in the
-// emitted declarations — the client is re-exported as a namespace, which TS
-// cannot otherwise reference portably (TS2883).
-import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import { AnalyticsService, CustomAnalyticsService } from "@voidhash/core/services";
 import {
   AnalyticsRpcsDef,
   RpcActionForbiddenError,
@@ -19,6 +14,19 @@ import { Effect } from "effect";
 export const AnalyticsRpcsLive = AnalyticsRpcsDef.toLayer(
   Effect.gen(function* AnalyticsRpcsLive() {
     const analyticsService = yield* AnalyticsService;
+    const customAnalyticsService = yield* CustomAnalyticsService;
+
+    const commonErrors = {
+      ActionForbiddenError: (error: { readonly message: string }) =>
+        Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+      AnalyticsServiceError: (error: { readonly cause: string; readonly message: string }) =>
+        Effect.fail(
+          new RpcAnalyticsServiceError({
+            cause: error.cause,
+            message: error.message,
+          }),
+        ),
+    };
 
     return {
       ListRecentAnalyticsEvents: ({ projectId, limit }) =>
@@ -33,7 +41,10 @@ export const AnalyticsRpcsLive = AnalyticsRpcsDef.toLayer(
                 Effect.fail(new RpcActionForbiddenError({ message: error.message })),
               AnalyticsServiceError: (error) =>
                 Effect.fail(
-                  new RpcAnalyticsServiceError({ cause: error.cause, message: error.message }),
+                  new RpcAnalyticsServiceError({
+                    cause: error.cause,
+                    message: error.message,
+                  }),
                 ),
             }),
           ),
@@ -51,7 +62,10 @@ export const AnalyticsRpcsLive = AnalyticsRpcsDef.toLayer(
                 Effect.fail(new RpcActionForbiddenError({ message: error.message })),
               AnalyticsServiceError: (error) =>
                 Effect.fail(
-                  new RpcAnalyticsServiceError({ cause: error.cause, message: error.message }),
+                  new RpcAnalyticsServiceError({
+                    cause: error.cause,
+                    message: error.message,
+                  }),
                 ),
               InvalidAnalyticsQueryError: (error) =>
                 Effect.fail(new RpcInvalidAnalyticsQueryError({ message: error.message })),
@@ -80,6 +94,58 @@ export const AnalyticsRpcsLive = AnalyticsRpcsDef.toLayer(
                 ),
             }),
           ),
+      QueryCustomAnalyticsInsight: (input) =>
+        customAnalyticsService.queryInsight(input).pipe(
+          Effect.catchTags({
+            ...commonErrors,
+            InvalidAnalyticsQueryError: (error) =>
+              Effect.fail(new RpcInvalidAnalyticsQueryError({ message: error.message })),
+            InvalidTimeRangeError: (error) =>
+              Effect.fail(new RpcInvalidTimeRangeError({ message: error.message })),
+          }),
+        ),
+      QueryCustomAnalyticsPersons: (input) =>
+        customAnalyticsService.queryPersons(input).pipe(
+          Effect.catchTags({
+            ...commonErrors,
+            InvalidAnalyticsQueryError: (error) =>
+              Effect.fail(new RpcInvalidAnalyticsQueryError({ message: error.message })),
+            InvalidTimeRangeError: (error) =>
+              Effect.fail(new RpcInvalidTimeRangeError({ message: error.message })),
+          }),
+        ),
+      ListAnalyticsInsights: (input) =>
+        customAnalyticsService.listInsights(input).pipe(Effect.catchTags(commonErrors)),
+      CreateAnalyticsInsight: (input) =>
+        customAnalyticsService.createInsight(input).pipe(Effect.catchTags(commonErrors)),
+      UpdateAnalyticsInsight: (input) =>
+        customAnalyticsService.updateInsight(input).pipe(Effect.catchTags(commonErrors)),
+      DeleteAnalyticsInsight: (input) =>
+        customAnalyticsService.deleteInsight(input).pipe(Effect.catchTags(commonErrors)),
+      ListAnalyticsCohorts: (input) =>
+        customAnalyticsService.listCohorts(input).pipe(Effect.catchTags(commonErrors)),
+      CreateAnalyticsCohort: (input) =>
+        customAnalyticsService.createCohort(input).pipe(Effect.catchTags(commonErrors)),
+      UpdateAnalyticsCohort: (input) =>
+        customAnalyticsService.updateCohort(input).pipe(Effect.catchTags(commonErrors)),
+      DeleteAnalyticsCohort: (input) =>
+        customAnalyticsService.deleteCohort(input).pipe(Effect.catchTags(commonErrors)),
+      ListAnalyticsDashboards: (input) =>
+        customAnalyticsService.listDashboards(input).pipe(Effect.catchTags(commonErrors)),
+      CreateAnalyticsDashboard: (input) =>
+        customAnalyticsService.createDashboard(input).pipe(Effect.catchTags(commonErrors)),
+      DuplicateAnalyticsDashboard: (input) =>
+        customAnalyticsService.duplicateDashboard(input).pipe(Effect.catchTags(commonErrors)),
+      UpdateAnalyticsDashboard: (input) =>
+        customAnalyticsService.updateDashboard(input).pipe(Effect.catchTags(commonErrors)),
+      DeleteAnalyticsDashboard: (input) =>
+        customAnalyticsService.deleteDashboard(input).pipe(Effect.catchTags(commonErrors)),
+      PutAnalyticsDashboardItem: (input) =>
+        customAnalyticsService.putDashboardItem(input).pipe(Effect.catchTags(commonErrors)),
+      ReorderAnalyticsDashboardItems: (input) =>
+        customAnalyticsService.reorderDashboardItems(input).pipe(Effect.catchTags(commonErrors)),
+      RemoveAnalyticsDashboardItem: (input) =>
+        customAnalyticsService.removeDashboardItem(input).pipe(Effect.catchTags(commonErrors)),
     };
   }),
 );
diff --git a/apps/backend/src/rpcs/voidql-rpcs.ts b/apps/backend/src/rpcs/voidql-rpcs.ts
index bece3394e..95f9fd6d8 100644
--- a/apps/backend/src/rpcs/voidql-rpcs.ts
+++ b/apps/backend/src/rpcs/voidql-rpcs.ts
@@ -138,6 +138,72 @@ export const VoidQlRpcsLive = VoidQlRpcsDef.toLayer(
               ),
           }),
         ),
+      ListVoidQlInsights: (input) =>
+        voidql.listInsights(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            VoidQlExecutionError: (error) =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+      RunSavedVoidQlInsight: ({ id }) =>
+        Effect.gen(function* () {
+          const session = yield* AuthSession;
+          return yield* voidql.runSavedInsight({
+            id,
+            principal: { kind: "user", id: session?.user?.id ?? "api-key" },
+          });
+        }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            VoidQlSyntaxError: (error) =>
+              Effect.fail(new RpcVoidQlSyntaxError({ message: error.message, hint: error.hint })),
+            VoidQlUnsupportedError: (error) =>
+              Effect.fail(
+                new RpcVoidQlUnsupportedError({ message: error.message, hint: error.hint }),
+              ),
+            VoidQlSchemaError: (error) =>
+              Effect.fail(new RpcVoidQlSchemaError({ message: error.message })),
+            VoidQlUnknownFieldError: (error) =>
+              Effect.fail(
+                new RpcVoidQlUnknownFieldError({
+                  field: error.field,
+                  message: error.message,
+                  suggestion: error.suggestion,
+                }),
+              ),
+            VoidQlPiiError: (error) =>
+              Effect.fail(new RpcVoidQlPiiError({ message: error.message })),
+            VoidQlComplexityError: (error) =>
+              Effect.fail(new RpcVoidQlComplexityError({ message: error.message })),
+            VoidQlIsolationError: () =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({
+                  cause: "internal",
+                  message: "The query could not be executed.",
+                }),
+              ),
+            VoidQlExecutionError: (error) =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
+      DeleteVoidQlInsight: (input) =>
+        voidql.deleteInsight(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            VoidQlExecutionError: (error) =>
+              Effect.fail(
+                new RpcVoidQlExecutionError({ cause: error.cause, message: error.message }),
+              ),
+          }),
+        ),
     };
   }),
 );
diff --git a/apps/backend/src/testing/rpc-smoke-cases.ts b/apps/backend/src/testing/rpc-smoke-cases.ts
index 433c30d7d..33637736b 100644
--- a/apps/backend/src/testing/rpc-smoke-cases.ts
+++ b/apps/backend/src/testing/rpc-smoke-cases.ts
@@ -828,6 +828,27 @@ const knownMissingRpcSmokeTags = new Set([
   "ValidateVoidQlQuery",
   "GetVoidQlSchema",
   "SaveVoidQlInsight",
+  "ListVoidQlInsights",
+  "RunSavedVoidQlInsight",
+  "DeleteVoidQlInsight",
+  "QueryCustomAnalyticsInsight",
+  "QueryCustomAnalyticsPersons",
+  "ListAnalyticsInsights",
+  "CreateAnalyticsInsight",
+  "UpdateAnalyticsInsight",
+  "DeleteAnalyticsInsight",
+  "ListAnalyticsCohorts",
+  "CreateAnalyticsCohort",
+  "UpdateAnalyticsCohort",
+  "DeleteAnalyticsCohort",
+  "ListAnalyticsDashboards",
+  "CreateAnalyticsDashboard",
+  "UpdateAnalyticsDashboard",
+  "DeleteAnalyticsDashboard",
+  "DuplicateAnalyticsDashboard",
+  "PutAnalyticsDashboardItem",
+  "ReorderAnalyticsDashboardItems",
+  "RemoveAnalyticsDashboardItem",
 ]);
 
 /**
diff --git a/apps/www/src/features/studio/analytics/custom-dashboards-page.tsx b/apps/www/src/features/studio/analytics/custom-dashboards-page.tsx
new file mode 100644
index 000000000..d735258b1
--- /dev/null
+++ b/apps/www/src/features/studio/analytics/custom-dashboards-page.tsx
@@ -0,0 +1,1154 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type {
+  AnalyticsDashboardType,
+  QueryCustomAnalyticsInsightResponseType,
+  SavedAnalyticsInsightType,
+} from "@voidhash/rpc";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  Input,
+  Label,
+  Page,
+  PageHeader,
+  PageHeaderTitle,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+  Textarea,
+} from "@voidhash/ui";
+import {
+  ArrowDown,
+  ArrowLeft,
+  ArrowUp,
+  ChartSpline,
+  Columns2,
+  Copy,
+  LayoutDashboard,
+  Pencil,
+  Plus,
+  Rows3,
+  RefreshCw,
+  SlidersHorizontal,
+  Save,
+  Trash2,
+} from "lucide-react";
+import { useState } from "react";
+import { Area, AreaChart, Bar, BarChart, Line, LineChart, XAxis, YAxis } from "recharts";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import {
+  createAnalyticsDashboardOptions,
+  customAnalyticsInsightQueryOptions,
+  deleteAnalyticsDashboardOptions,
+  duplicateAnalyticsDashboardOptions,
+  listAnalyticsDashboardsOptions,
+  listAnalyticsInsightsOptions,
+  listVoidQlInsightsOptions,
+  putAnalyticsDashboardItemOptions,
+  queryKeys,
+  reorderAnalyticsDashboardItemsOptions,
+  removeAnalyticsDashboardItemOptions,
+  runSavedVoidQlInsightOptions,
+  updateAnalyticsDashboardOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+interface CustomDashboardsPageProps {
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+/** Render project dashboards and their saved insight cards. */
+export function CustomDashboardsPage({ organizationSlug, projectSlug }: CustomDashboardsPageProps) {
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug);
+  const queryClient = useQueryClient();
+  const [creating, setCreating] = useState(false);
+  const [selectedDashboardId, setSelectedDashboardId] = useState<string>();
+  const [name, setName] = useState("Mobile product overview");
+  const [description, setDescription] = useState("");
+  const createDashboard = useMutation(createAnalyticsDashboardOptions());
+  const dashboards = useQuery({
+    ...listAnalyticsDashboardsOptions({ projectId: project?.id ?? "missing-project" }),
+    enabled: project !== undefined,
+  });
+
+  if (!project) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Project not found" }} />;
+  }
+
+  const selectedDashboard = dashboards.data?.dashboards.find(
+    (dashboard) => dashboard.id === selectedDashboardId,
+  );
+  const onCreate = () => {
+    createDashboard.mutate(
+      {
+        description: description.trim() || undefined,
+        name: name.trim(),
+        projectId: project.id,
+      },
+      {
+        onSuccess: async (dashboard) => {
+          await queryClient.invalidateQueries({
+            queryKey: queryKeys.analytics.dashboards({ projectId: project.id }),
+          });
+          setCreating(false);
+          setDescription("");
+          setSelectedDashboardId(dashboard.id);
+        },
+      },
+    );
+  };
+
+  if (selectedDashboard) {
+    return (
+      <DashboardEditor
+        dashboard={selectedDashboard}
+        onBack={() => setSelectedDashboardId(undefined)}
+        organizationId={project.organizationId}
+        projectId={project.id}
+      />
+    );
+  }
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={
+          <Button onClick={() => setCreating((value) => !value)}>
+            <Plus />
+            New dashboard
+          </Button>
+        }
+      >
+        <PageHeaderTitle>Dashboards</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-7xl space-y-6 px-4 py-6">
+        <div>
+          <h2 className="font-medium text-2xl tracking-tight">Analytics dashboards</h2>
+          <p className="mt-1 text-muted-foreground text-sm">
+            Arrange reusable insights into focused views for product, growth, and release health.
+          </p>
+        </div>
+
+        {creating ? (
+          <Card className="max-w-2xl border-primary/30">
+            <CardHeader>
+              <CardTitle>Create dashboard</CardTitle>
+              <CardDescription>
+                Start empty, then add saved insights as they become useful.
+              </CardDescription>
+            </CardHeader>
+            <CardContent className="space-y-4">
+              <div className="space-y-2">
+                <Label htmlFor="dashboard-name">Name</Label>
+                <Input
+                  id="dashboard-name"
+                  onChange={(event) => setName(event.target.value)}
+                  value={name}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="dashboard-description">Description</Label>
+                <Textarea
+                  id="dashboard-description"
+                  onChange={(event) => setDescription(event.target.value)}
+                  placeholder="Who is this dashboard for?"
+                  value={description}
+                />
+              </div>
+              <div className="flex justify-end gap-2">
+                <Button onClick={() => setCreating(false)} variant="ghost">
+                  Cancel
+                </Button>
+                <Button disabled={!name.trim() || createDashboard.isPending} onClick={onCreate}>
+                  {createDashboard.isPending ? "Creating…" : "Create dashboard"}
+                </Button>
+              </div>
+            </CardContent>
+          </Card>
+        ) : null}
+
+        {dashboards.data?.dashboards.length ? (
+          <div className="grid gap-4 md:grid-cols-2 xl:grid-cols-3">
+            {dashboards.data.dashboards.map((dashboard) => (
+              <button
+                className="text-left"
+                key={dashboard.id}
+                onClick={() => setSelectedDashboardId(dashboard.id)}
+                type="button"
+              >
+                <Card className="min-h-48 transition-colors hover:border-foreground/20">
+                  <CardHeader>
+                    <div className="mb-3 w-fit rounded-lg bg-primary/10 p-2 text-primary">
+                      <LayoutDashboard />
+                    </div>
+                    <CardTitle>{dashboard.name}</CardTitle>
+                    <CardDescription>
+                      {dashboard.description || "A custom analytics workspace."}
+                    </CardDescription>
+                  </CardHeader>
+                  <CardContent className="text-muted-foreground text-sm">
+                    {dashboard.items.length} insight{dashboard.items.length === 1 ? "" : "s"}
+                  </CardContent>
+                </Card>
+              </button>
+            ))}
+          </div>
+        ) : !creating ? (
+          <button
+            className="flex w-full flex-col items-center rounded-xl border border-dashed px-6 py-14 text-center transition-colors hover:border-foreground/30 hover:bg-muted/30"
+            onClick={() => setCreating(true)}
+            type="button"
+          >
+            <div className="rounded-full bg-primary/10 p-3 text-primary">
+              <LayoutDashboard />
+            </div>
+            <span className="mt-4 font-medium">Create your first dashboard</span>
+            <span className="mt-1 max-w-md text-muted-foreground text-sm">
+              Group product insights around a release, funnel, or feature area.
+            </span>
+          </button>
+        ) : null}
+      </div>
+    </Page>
+  );
+}
+
+function DashboardEditor({
+  dashboard,
+  onBack,
+  organizationId,
+  projectId,
+}: {
+  dashboard: AnalyticsDashboardType;
+  onBack: () => void;
+  organizationId: string;
+  projectId: string;
+}) {
+  const queryClient = useQueryClient();
+  const voidQlEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidqlQuery.key);
+  const insights = useQuery(listAnalyticsInsightsOptions({ projectId }));
+  const savedQueries = useQuery({
+    ...listVoidQlInsightsOptions({ organizationId }),
+    enabled: voidQlEnabled,
+  });
+  const [sourceValue, setSourceValue] = useState("");
+  const [editingLayout, setEditingLayout] = useState(false);
+  const [editingMetadata, setEditingMetadata] = useState(false);
+  const [dashboardName, setDashboardName] = useState(dashboard.name);
+  const [dashboardDescription, setDashboardDescription] = useState(dashboard.description ?? "");
+  const [confirmingDelete, setConfirmingDelete] = useState(false);
+  const putItem = useMutation(putAnalyticsDashboardItemOptions());
+  const reorderItems = useMutation(reorderAnalyticsDashboardItemsOptions());
+  const removeItem = useMutation(removeAnalyticsDashboardItemOptions());
+  const updateDashboard = useMutation(updateAnalyticsDashboardOptions());
+  const deleteDashboard = useMutation(deleteAnalyticsDashboardOptions());
+  const duplicateDashboard = useMutation(duplicateAnalyticsDashboardOptions());
+  const availableInsights =
+    insights.data?.insights.filter(
+      (insight) =>
+        !dashboard.items.some((item) => item.kind === "insight" && item.insight.id === insight.id),
+    ) ?? [];
+  const availableQueries =
+    savedQueries.data?.insights.filter(
+      (query) =>
+        !dashboard.items.some((item) => item.kind === "voidql" && item.query.id === query.id),
+    ) ?? [];
+  const refresh = () =>
+    queryClient.invalidateQueries({ queryKey: queryKeys.analytics.dashboards({ projectId }) });
+  const refreshCards = async () => {
+    await Promise.all([
+      queryClient.invalidateQueries({ queryKey: queryKeys.analytics.all }),
+      queryClient.invalidateQueries({ queryKey: ["runSavedVoidQlInsight"] }),
+    ]);
+  };
+
+  const addInsight = () => {
+    const [kind, id] = sourceValue.split(":", 2);
+    if (!id || (kind !== "insight" && kind !== "voidql")) return;
+    putItem.mutate(
+      {
+        dashboardId: dashboard.id,
+        layout: { height: 1, width: 1, x: dashboard.items.length % 2, y: dashboard.items.length },
+        position: dashboard.items.length,
+        source: { id, kind },
+      },
+      {
+        onSuccess: async () => {
+          setSourceValue("");
+          await refresh();
+        },
+      },
+    );
+  };
+  const removeInsight = (itemId: string) =>
+    removeItem.mutate({ dashboardId: dashboard.id, itemId }, { onSuccess: refresh });
+  const updateItem = (
+    item: AnalyticsDashboardType["items"][number],
+    layout: AnalyticsDashboardType["items"][number]["layout"],
+  ) =>
+    putItem.mutate(
+      {
+        dashboardId: dashboard.id,
+        layout,
+        position: item.position,
+        source: {
+          id: item.kind === "insight" ? item.insight.id : item.query.id,
+          kind: item.kind,
+        },
+      },
+      { onSuccess: refresh },
+    );
+  const moveItem = (index: number, direction: -1 | 1) => {
+    const targetIndex = index + direction;
+    if (!dashboard.items[index] || !dashboard.items[targetIndex]) return;
+    const itemIds = dashboard.items.map((item) => item.id);
+    [itemIds[index], itemIds[targetIndex]] = [itemIds[targetIndex], itemIds[index]];
+    const firstItemId = itemIds[0];
+    if (!firstItemId) return;
+    reorderItems.mutate(
+      { dashboardId: dashboard.id, itemIds: [firstItemId, ...itemIds.slice(1)] },
+      { onSuccess: refresh },
+    );
+  };
+  const saveDashboard = () =>
+    updateDashboard.mutate(
+      {
+        description: dashboardDescription.trim() || null,
+        id: dashboard.id,
+        name: dashboardName.trim(),
+      },
+      {
+        onSuccess: async () => {
+          await refresh();
+          setEditingMetadata(false);
+        },
+      },
+    );
+  const requestDeleteDashboard = () => {
+    if (!confirmingDelete) {
+      setConfirmingDelete(true);
+      return;
+    }
+    deleteDashboard.mutate(
+      { id: dashboard.id },
+      {
+        onSuccess: async () => {
+          await refresh();
+          onBack();
+        },
+      },
+    );
+  };
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={
+          <div className="flex min-w-80 gap-2">
+            <Button
+              disabled={duplicateDashboard.isPending}
+              onClick={() =>
+                duplicateDashboard.mutate({ id: dashboard.id }, { onSuccess: () => void refresh() })
+              }
+              variant="outline"
+            >
+              <Copy /> {duplicateDashboard.isPending ? "Duplicating…" : "Duplicate"}
+            </Button>
+            <Button onClick={() => void refreshCards()} variant="outline">
+              <RefreshCw /> Refresh
+            </Button>
+            <Button onClick={() => setEditingMetadata((current) => !current)} variant="outline">
+              <Pencil />
+              Details
+            </Button>
+            <Button
+              aria-pressed={editingLayout}
+              onClick={() => setEditingLayout((current) => !current)}
+              variant={editingLayout ? "default" : "outline"}
+            >
+              <SlidersHorizontal />
+              {editingLayout ? "Done" : "Edit layout"}
+            </Button>
+            <Select onValueChange={setSourceValue} value={sourceValue}>
+              <SelectTrigger>
+                <SelectValue placeholder="Choose a saved insight" />
+              </SelectTrigger>
+              <SelectContent>
+                {availableInsights.map((insight) => (
+                  <SelectItem key={insight.id} value={`insight:${insight.id}`}>
+                    {insight.name}
+                  </SelectItem>
+                ))}
+                {voidQlEnabled
+                  ? availableQueries.map((query) => (
+                      <SelectItem key={query.id} value={`voidql:${query.id}`}>
+                        Query · {query.name}
+                      </SelectItem>
+                    ))
+                  : null}
+              </SelectContent>
+            </Select>
+            <Button disabled={!sourceValue || putItem.isPending} onClick={addInsight}>
+              <Plus /> Add
+            </Button>
+          </div>
+        }
+      >
+        <div className="flex items-center gap-3">
+          <Button aria-label="Back to dashboards" onClick={onBack} size="icon" variant="ghost">
+            <ArrowLeft />
+          </Button>
+          <div>
+            <PageHeaderTitle>{dashboard.name}</PageHeaderTitle>
+            {dashboard.description ? (
+              <p className="text-muted-foreground text-xs">{dashboard.description}</p>
+            ) : null}
+          </div>
+        </div>
+      </PageHeader>
+      {editingMetadata ? (
+        <div className="border-b bg-muted/20 px-4 py-4">
+          <Card className="mx-auto max-w-3xl">
+            <CardHeader>
+              <CardTitle>Dashboard details</CardTitle>
+              <CardDescription>Rename, describe, or delete this dashboard.</CardDescription>
+            </CardHeader>
+            <CardContent className="space-y-4">
+              <div className="space-y-2">
+                <Label htmlFor="edit-dashboard-name">Name</Label>
+                <Input
+                  id="edit-dashboard-name"
+                  onChange={(event) => setDashboardName(event.target.value)}
+                  value={dashboardName}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="edit-dashboard-description">Description</Label>
+                <Textarea
+                  id="edit-dashboard-description"
+                  onChange={(event) => setDashboardDescription(event.target.value)}
+                  value={dashboardDescription}
+                />
+              </div>
+              <div className="flex flex-wrap items-center justify-between gap-3">
+                <Button
+                  disabled={deleteDashboard.isPending}
+                  onClick={requestDeleteDashboard}
+                  variant="destructive"
+                >
+                  <Trash2 />
+                  {deleteDashboard.isPending
+                    ? "Deleting…"
+                    : confirmingDelete
+                      ? "Confirm delete"
+                      : "Delete dashboard"}
+                </Button>
+                <div className="flex gap-2">
+                  <Button
+                    onClick={() => {
+                      setEditingMetadata(false);
+                      setConfirmingDelete(false);
+                    }}
+                    variant="ghost"
+                  >
+                    Cancel
+                  </Button>
+                  <Button
+                    disabled={!dashboardName.trim() || updateDashboard.isPending}
+                    onClick={saveDashboard}
+                  >
+                    <Save /> {updateDashboard.isPending ? "Saving…" : "Save details"}
+                  </Button>
+                </div>
+              </div>
+            </CardContent>
+          </Card>
+        </div>
+      ) : null}
+      <div className="mx-auto grid w-full max-w-7xl gap-4 px-4 py-6 md:grid-cols-2">
+        {dashboard.items.length ? (
+          dashboard.items.map((item, index) => (
+            <div
+              className={item.layout.width >= 2 ? "md:col-span-2" : "md:col-span-1"}
+              key={item.id}
+            >
+              {item.kind === "insight" ? (
+                <DashboardInsightCard
+                  canMoveDown={index < dashboard.items.length - 1}
+                  canMoveUp={index > 0}
+                  editingLayout={editingLayout}
+                  insight={item.insight}
+                  layout={item.layout}
+                  onMoveDown={() => moveItem(index, 1)}
+                  onMoveUp={() => moveItem(index, -1)}
+                  onRemove={() => removeInsight(item.id)}
+                  onResize={(layout) => updateItem(item, layout)}
+                  projectId={projectId}
+                />
+              ) : (
+                <DashboardVoidQlCard
+                  canMoveDown={index < dashboard.items.length - 1}
+                  canMoveUp={index > 0}
+                  editingLayout={editingLayout}
+                  item={item}
+                  onMoveDown={() => moveItem(index, 1)}
+                  onMoveUp={() => moveItem(index, -1)}
+                  onRemove={() => removeInsight(item.id)}
+                  onResize={(layout) => updateItem(item, layout)}
+                  queryEnabled={voidQlEnabled}
+                />
+              )}
+            </div>
+          ))
+        ) : (
+          <div className="col-span-full rounded-xl border border-dashed px-6 py-16 text-center">
+            <LayoutDashboard className="mx-auto text-muted-foreground" />
+            <p className="mt-3 font-medium">This dashboard is empty</p>
+            <p className="mt-1 text-muted-foreground text-sm">
+              Choose a saved insight above to add the first card.
+            </p>
+          </div>
+        )}
+      </div>
+    </Page>
+  );
+}
+
+function DashboardVoidQlCard({
+  canMoveDown,
+  canMoveUp,
+  editingLayout,
+  item,
+  onMoveDown,
+  onMoveUp,
+  onRemove,
+  onResize,
+  queryEnabled,
+}: {
+  canMoveDown: boolean;
+  canMoveUp: boolean;
+  editingLayout: boolean;
+  item: Extract<AnalyticsDashboardType["items"][number], { readonly kind: "voidql" }>;
+  onMoveDown: () => void;
+  onMoveUp: () => void;
+  onRemove: () => void;
+  onResize: (layout: AnalyticsDashboardType["items"][number]["layout"]) => void;
+  queryEnabled: boolean;
+}) {
+  const result = useQuery({
+    ...runSavedVoidQlInsightOptions({ id: item.query.id }),
+    enabled: queryEnabled,
+  });
+  const name = item.query.name;
+  return (
+    <Card className={item.layout.height >= 2 ? "min-h-[40rem]" : "min-h-80"}>
+      <CardHeader className="flex-row items-start justify-between space-y-0">
+        <div>
+          <CardTitle>{name}</CardTitle>
+          <CardDescription>VoidQL query</CardDescription>
+        </div>
+        <div className="flex items-center gap-1">
+          {editingLayout ? (
+            <>
+              <Button
+                aria-label={`Move ${name} up`}
+                disabled={!canMoveUp}
+                onClick={onMoveUp}
+                size="icon"
+                variant="ghost"
+              >
+                <ArrowUp size={16} />
+              </Button>
+              <Button
+                aria-label={`Move ${name} down`}
+                disabled={!canMoveDown}
+                onClick={onMoveDown}
+                size="icon"
+                variant="ghost"
+              >
+                <ArrowDown size={16} />
+              </Button>
+              <Button
+                aria-label={`Resize ${name} width`}
+                onClick={() => onResize({ ...item.layout, width: item.layout.width >= 2 ? 1 : 2 })}
+                size="icon"
+                variant="ghost"
+              >
+                <Columns2 size={16} />
+              </Button>
+              <Button
+                aria-label={`Resize ${name} height`}
+                onClick={() =>
+                  onResize({ ...item.layout, height: item.layout.height >= 2 ? 1 : 2 })
+                }
+                size="icon"
+                variant="ghost"
+              >
+                <Rows3 size={16} />
+              </Button>
+            </>
+          ) : null}
+          <Button aria-label={`Remove ${name}`} onClick={onRemove} size="icon" variant="ghost">
+            <Trash2 size={16} />
+          </Button>
+        </div>
+      </CardHeader>
+      <CardContent>
+        {!queryEnabled ? (
+          <div className="flex h-52 items-center justify-center rounded-lg border border-dashed text-muted-foreground text-sm">
+            VoidQL is not enabled for this workspace.
+          </div>
+        ) : result.data ? (
+          <div className="max-h-80 overflow-auto rounded-md border">
+            <Table>
+              <TableHeader>
+                <TableRow>
+                  {result.data.columns.map((column) => (
+                    <TableHead key={column.name}>{column.name}</TableHead>
+                  ))}
+                </TableRow>
+              </TableHeader>
+              <TableBody>
+                {result.data.rows.slice(0, item.layout.height >= 2 ? 50 : 10).map((row, index) => (
+                  <TableRow key={index}>
+                    {result.data.columns.map((column) => (
+                      <TableCell className="font-mono text-xs" key={column.name}>
+                        {formatVoidQlCell(row[column.name])}
+                      </TableCell>
+                    ))}
+                  </TableRow>
+                ))}
+              </TableBody>
+            </Table>
+          </div>
+        ) : (
+          <div className="flex h-52 items-center justify-center rounded-lg border border-dashed text-muted-foreground text-sm">
+            {result.isLoading ? "Running saved query…" : "The saved query could not be rendered."}
+          </div>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
+
+function formatVoidQlCell(value: unknown): string {
+  if (value === null || value === undefined) return "";
+  return typeof value === "object" ? JSON.stringify(value) : String(value);
+}
+
+function DashboardInsightCard({
+  canMoveDown,
+  canMoveUp,
+  editingLayout,
+  insight,
+  layout,
+  onMoveDown,
+  onMoveUp,
+  onRemove,
+  onResize,
+  projectId,
+}: {
+  canMoveDown: boolean;
+  canMoveUp: boolean;
+  editingLayout: boolean;
+  insight: SavedAnalyticsInsightType;
+  layout: AnalyticsDashboardType["items"][number]["layout"];
+  onMoveDown: () => void;
+  onMoveUp: () => void;
+  onRemove: () => void;
+  onResize: (layout: AnalyticsDashboardType["items"][number]["layout"]) => void;
+  projectId: string;
+}) {
+  const query = useQuery({
+    ...customAnalyticsInsightQueryOptions({ definition: insight.definition, projectId }),
+    enabled:
+      insight.kind === "trends" ||
+      insight.kind === "funnels" ||
+      insight.kind === "retention" ||
+      insight.kind === "paths" ||
+      insight.kind === "stickiness" ||
+      insight.kind === "lifecycle",
+  });
+  const trendsResult = query.data?.kind === "trends" ? query.data : undefined;
+  const funnelResult = query.data?.kind === "funnels" ? query.data : undefined;
+  const retentionResult = query.data?.kind === "retention" ? query.data : undefined;
+  const pathsResult = query.data?.kind === "paths" ? query.data : undefined;
+  const stickinessResult = query.data?.kind === "stickiness" ? query.data : undefined;
+  const lifecycleResult = query.data?.kind === "lifecycle" ? query.data : undefined;
+  const stickinessDisplay =
+    insight.definition.kind === "stickiness" ? (insight.definition.display ?? "bar") : "bar";
+  const trendsDisplay = insight.definition.kind === "trends" ? insight.definition.display : "line";
+  const trendPalette = [
+    "var(--chart-1)",
+    "var(--chart-2)",
+    "var(--chart-3)",
+    "var(--chart-4)",
+    "var(--chart-5)",
+  ];
+  const trendPointsByDate = new Map<string, Record<string, number | string>>();
+  const trendColorByBaseKey = new Map<string, string>();
+  const trendSeriesColors = new Map<string, string>();
+  for (const series of trendsResult?.series ?? []) {
+    const baseKey = series.key.split(":comparison:")[0] ?? series.key;
+    const color =
+      trendColorByBaseKey.get(baseKey) ??
+      trendPalette[trendColorByBaseKey.size % trendPalette.length] ??
+      "var(--chart-1)";
+    trendColorByBaseKey.set(baseKey, color);
+    trendSeriesColors.set(series.key, color);
+    for (const point of series.points) {
+      const date = point.timestamp.toISOString();
+      const row = trendPointsByDate.get(date) ?? { date };
+      row[series.key] = point.value;
+      trendPointsByDate.set(date, row);
+    }
+  }
+  const trendPoints = [...trendPointsByDate.values()].sort((left, right) =>
+    String(left.date).localeCompare(String(right.date)),
+  );
+  const formatTrendDate = (value: string) =>
+    new Date(value).toLocaleDateString(undefined, { day: "numeric", month: "short" });
+  const trendChartConfig = Object.fromEntries(
+    (trendsResult?.series ?? []).map((series) => [
+      series.key,
+      {
+        color: trendSeriesColors.get(series.key) ?? "var(--chart-1)",
+        label: series.label,
+      },
+    ]),
+  ) satisfies ChartConfig;
+
+  return (
+    <Card className={layout.height >= 2 ? "min-h-[40rem]" : "min-h-80"}>
+      <CardHeader className="flex-row items-start justify-between space-y-0">
+        <div>
+          <CardTitle>{insight.name}</CardTitle>
+          <CardDescription>{insight.description || insight.kind}</CardDescription>
+        </div>
+        <div className="flex items-center gap-1">
+          {editingLayout ? (
+            <>
+              <Button
+                aria-label={`Move ${insight.name} up`}
+                disabled={!canMoveUp}
+                onClick={onMoveUp}
+                size="icon"
+                title="Move up"
+                variant="ghost"
+              >
+                <ArrowUp size={16} />
+              </Button>
+              <Button
+                aria-label={`Move ${insight.name} down`}
+                disabled={!canMoveDown}
+                onClick={onMoveDown}
+                size="icon"
+                title="Move down"
+                variant="ghost"
+              >
+                <ArrowDown size={16} />
+              </Button>
+              <Button
+                aria-label={`${layout.width >= 2 ? "Make" : "Expand"} ${insight.name} ${layout.width >= 2 ? "half width" : "to full width"}`}
+                onClick={() => onResize({ ...layout, width: layout.width >= 2 ? 1 : 2 })}
+                size="icon"
+                title={layout.width >= 2 ? "Half width" : "Full width"}
+                variant="ghost"
+              >
+                <Columns2 size={16} />
+              </Button>
+              <Button
+                aria-label={`${layout.height >= 2 ? "Reduce" : "Increase"} ${insight.name} height`}
+                onClick={() => onResize({ ...layout, height: layout.height >= 2 ? 1 : 2 })}
+                size="icon"
+                title={layout.height >= 2 ? "Standard height" : "Tall card"}
+                variant="ghost"
+              >
+                <Rows3 size={16} />
+              </Button>
+            </>
+          ) : null}
+          <Button
+            aria-label={`Remove ${insight.name}`}
+            onClick={onRemove}
+            size="icon"
+            variant="ghost"
+          >
+            <Trash2 size={16} />
+          </Button>
+        </div>
+      </CardHeader>
+      <CardContent>
+        {lifecycleResult ? (
+          <LifecycleDashboardPreview
+            display={
+              insight.definition.kind === "lifecycle"
+                ? (insight.definition.display ?? "stacked_area")
+                : "stacked_area"
+            }
+            result={lifecycleResult}
+            valueMode={
+              insight.definition.kind === "lifecycle"
+                ? (insight.definition.valueMode ?? "count")
+                : "count"
+            }
+          />
+        ) : stickinessResult ? (
+          <StickinessDashboardPreview display={stickinessDisplay} result={stickinessResult} />
+        ) : pathsResult ? (
+          <div className="space-y-2">
+            {pathsResult.links.slice(0, 7).map((link) => {
+              const maximum = Math.max(1, ...pathsResult.links.map((candidate) => candidate.count));
+              return (
+                <div
+                  className="relative overflow-hidden rounded-lg border px-3 py-2"
+                  key={`${link.sourceStep}:${link.source}:${link.targetStep}:${link.target}`}
+                >
+                  <div
+                    className="absolute inset-y-0 left-0 bg-emerald-500/10"
+                    style={{ width: `${Math.max(4, (link.count / maximum) * 100)}%` }}
+                  />
+                  <div className="relative flex items-center justify-between gap-3 text-sm">
+                    <span className="min-w-0 truncate">
+                      {link.source} <span className="text-muted-foreground">→</span> {link.target}
+                    </span>
+                    <span className="shrink-0 font-medium tabular-nums">
+                      {link.count.toLocaleString()}
+                    </span>
+                  </div>
+                </div>
+              );
+            })}
+          </div>
+        ) : retentionResult ? (
+          <div className="space-y-1 overflow-x-auto">
+            {retentionResult.cohorts.slice(-5).map((cohort) => (
+              <div className="flex min-w-max gap-1" key={cohort.cohortStart.toISOString()}>
+                <span className="w-20 truncate text-muted-foreground text-xs">
+                  {cohort.cohortStart.toLocaleDateString(undefined, {
+                    day: "numeric",
+                    month: "short",
+                  })}
+                </span>
+                {cohort.cells.slice(0, 6).map((cell) => (
+                  <span
+                    className="flex h-8 w-12 items-center justify-center rounded text-[10px] tabular-nums"
+                    key={cell.interval}
+                    style={{ backgroundColor: `rgba(14, 165, 233, ${Math.max(0.08, cell.rate)})` }}
+                  >
+                    {(cell.rate * 100).toFixed(0)}%
+                  </span>
+                ))}
+              </div>
+            ))}
+          </div>
+        ) : funnelResult ? (
+          <div className="space-y-2">
+            {funnelResult.steps.map((step) => (
+              <div className="rounded-lg border p-3" key={step.key}>
+                <div className="flex justify-between gap-3 text-sm">
+                  <span className="truncate">
+                    {step.step}. {step.label}
+                  </span>
+                  <span className="font-medium tabular-nums">
+                    {(step.conversionRate * 100).toFixed(1)}%
+                  </span>
+                </div>
+                <div className="mt-2 h-2 overflow-hidden rounded-full bg-muted">
+                  <div
+                    className="h-full rounded-full bg-violet-500"
+                    style={{ width: `${Math.max(1, step.conversionRate * 100)}%` }}
+                  />
+                </div>
+              </div>
+            ))}
+          </div>
+        ) : trendsDisplay === "number" &&
+          trendsResult?.series.some((series) => series.points.length) ? (
+          <div className="grid gap-2 sm:grid-cols-2">
+            {trendsResult.series.map((series) => (
+              <div className="rounded-lg border bg-muted/20 p-4" key={series.key}>
+                <p className="truncate text-muted-foreground text-xs">{series.label}</p>
+                <p className="mt-1 font-semibold text-2xl tabular-nums tracking-tight">
+                  {(series.points[0]?.value ?? 0).toLocaleString(undefined, {
+                    maximumFractionDigits: 2,
+                  })}
+                </p>
+              </div>
+            ))}
+          </div>
+        ) : trendPoints.length ? (
+          <ChartContainer className="h-52 w-full" config={trendChartConfig}>
+            {trendsDisplay === "bar" ? (
+              <BarChart data={trendPoints}>
+                <XAxis
+                  axisLine={false}
+                  dataKey="date"
+                  tickFormatter={formatTrendDate}
+                  tickLine={false}
+                />
+                <YAxis axisLine={false} tickLine={false} width={36} />
+                {(trendsResult?.series ?? []).map((series) => (
+                  <Bar
+                    dataKey={series.key}
+                    fill={trendSeriesColors.get(series.key) ?? "var(--chart-1)"}
+                    fillOpacity={series.comparison && series.comparison !== "current" ? 0.4 : 0.85}
+                    key={series.key}
+                    radius={3}
+                  />
+                ))}
+              </BarChart>
+            ) : trendsDisplay === "area" ? (
+              <AreaChart data={trendPoints}>
+                <XAxis
+                  axisLine={false}
+                  dataKey="date"
+                  tickFormatter={formatTrendDate}
+                  tickLine={false}
+                />
+                <YAxis axisLine={false} tickLine={false} width={36} />
+                {(trendsResult?.series ?? []).map((series) => (
+                  <Area
+                    dataKey={series.key}
+                    fill={trendSeriesColors.get(series.key) ?? "var(--chart-1)"}
+                    fillOpacity={series.comparison && series.comparison !== "current" ? 0.08 : 0.18}
+                    key={series.key}
+                    stroke={trendSeriesColors.get(series.key) ?? "var(--chart-1)"}
+                    strokeDasharray={
+                      series.comparison && series.comparison !== "current" ? "6 5" : undefined
+                    }
+                    strokeWidth={2}
+                    type="monotone"
+                  />
+                ))}
+              </AreaChart>
+            ) : (
+              <LineChart data={trendPoints}>
+                <XAxis
+                  axisLine={false}
+                  dataKey="date"
+                  tickFormatter={formatTrendDate}
+                  tickLine={false}
+                />
+                <YAxis axisLine={false} tickLine={false} width={36} />
+                {(trendsResult?.series ?? []).map((series) => (
+                  <Line
+                    dataKey={series.key}
+                    dot={false}
+                    key={series.key}
+                    stroke={trendSeriesColors.get(series.key) ?? "var(--chart-1)"}
+                    strokeDasharray={
+                      series.comparison && series.comparison !== "current" ? "6 5" : undefined
+                    }
+                    strokeWidth={2}
+                    type="monotone"
+                  />
+                ))}
+              </LineChart>
+            )}
+          </ChartContainer>
+        ) : (
+          <div className="flex h-52 items-center justify-center rounded-lg border border-dashed bg-muted/20 text-center text-muted-foreground text-sm">
+            <div>
+              <ChartSpline className="mx-auto mb-2" />
+              {insight.kind === "trends" ||
+              insight.kind === "funnels" ||
+              insight.kind === "retention" ||
+              insight.kind === "paths" ||
+              insight.kind === "stickiness" ||
+              insight.kind === "lifecycle"
+                ? query.isLoading
+                  ? "Loading insight…"
+                  : "No values in this range"
+                : `${insight.kind} execution is coming next`}
+            </div>
+          </div>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
+
+type LifecycleResult = Extract<
+  QueryCustomAnalyticsInsightResponseType,
+  { readonly kind: "lifecycle" }
+>;
+
+function LifecycleDashboardPreview({
+  display,
+  result,
+  valueMode,
+}: {
+  display: "line" | "stacked_area";
+  result: LifecycleResult;
+  valueMode: "count" | "percentage";
+}) {
+  const colors = {
+    dormant: "var(--chart-5)",
+    new: "var(--chart-2)",
+    resurrecting: "var(--chart-3)",
+    returning: "var(--chart-1)",
+  } as const;
+  const rows = new Map<string, Record<string, number | string>>();
+  for (const series of result.series) {
+    for (const point of series.points) {
+      const date = point.timestamp.toLocaleDateString(undefined, {
+        day: "numeric",
+        month: "short",
+      });
+      const row = rows.get(date) ?? { date };
+      row[series.status] = series.status === "dormant" ? -point.count : point.count;
+      rows.set(date, row);
+    }
+  }
+  const config = Object.fromEntries(
+    result.series.map((series) => [
+      series.status,
+      { color: colors[series.status], label: series.status },
+    ]),
+  ) satisfies ChartConfig;
+  const data = [...rows.values()].map((row) => {
+    if (valueMode === "count") return row;
+    const total = result.series.reduce((sum, series) => {
+      const value = row[series.status];
+      return sum + Math.abs(typeof value === "number" ? value : 0);
+    }, 0);
+    return Object.fromEntries(
+      Object.entries(row).map(([key, value]) => [
+        key,
+        key === "date" || typeof value !== "number" || total === 0 ? value : (value / total) * 100,
+      ]),
+    );
+  });
+
+  return (
+    <ChartContainer className="h-52 w-full" config={config}>
+      {display === "line" ? (
+        <LineChart data={data}>
+          <XAxis axisLine={false} dataKey="date" tickLine={false} />
+          <YAxis axisLine={false} allowDecimals={false} tickLine={false} width={36} />
+          {result.series.map((series) => (
+            <Line
+              dataKey={series.status}
+              dot={false}
+              key={series.status}
+              stroke={colors[series.status]}
+              strokeWidth={2}
+              type="monotone"
+            />
+          ))}
+        </LineChart>
+      ) : (
+        <AreaChart data={data} stackOffset="sign">
+          <XAxis axisLine={false} dataKey="date" tickLine={false} />
+          <YAxis axisLine={false} allowDecimals={false} tickLine={false} width={36} />
+          {result.series.map((series) => (
+            <Area
+              dataKey={series.status}
+              fill={colors[series.status]}
+              fillOpacity={0.28}
+              key={series.status}
+              stackId="lifecycle"
+              stroke={colors[series.status]}
+              type="monotone"
+            />
+          ))}
+        </AreaChart>
+      )}
+    </ChartContainer>
+  );
+}
+
+type StickinessResult = Extract<
+  QueryCustomAnalyticsInsightResponseType,
+  { readonly kind: "stickiness" }
+>;
+
+function StickinessDashboardPreview({
+  display,
+  result,
+}: {
+  display: "bar" | "line";
+  result: StickinessResult;
+}) {
+  const palette = ["var(--chart-1)", "var(--chart-2)", "var(--chart-3)", "var(--chart-4)"];
+  if (display === "line") {
+    const rows = new Map<number, Record<string, number>>();
+    for (const series of result.series) {
+      for (const bucket of series.buckets) {
+        const row = rows.get(bucket.intervals) ?? { intervals: bucket.intervals };
+        row[series.key] = bucket.count;
+        rows.set(bucket.intervals, row);
+      }
+    }
+    const config = Object.fromEntries(
+      result.series.map((series, index) => [
+        series.key,
+        { color: palette[index % palette.length] ?? "var(--chart-1)", label: series.label },
+      ]),
+    ) satisfies ChartConfig;
+    return (
+      <ChartContainer className="h-52 w-full" config={config}>
+        <LineChart
+          data={[...rows.values()].sort((left, right) => left.intervals - right.intervals)}
+        >
+          <XAxis axisLine={false} dataKey="intervals" tickLine={false} />
+          <YAxis axisLine={false} allowDecimals={false} tickLine={false} width={36} />
+          {result.series.map((series, index) => (
+            <Line
+              dataKey={series.key}
+              dot={false}
+              key={series.key}
+              stroke={palette[index % palette.length] ?? "var(--chart-1)"}
+              strokeWidth={2}
+              type="monotone"
+            />
+          ))}
+        </LineChart>
+      </ChartContainer>
+    );
+  }
+
+  return (
+    <div className="space-y-4">
+      {result.series.map((series) => {
+        const maximum = Math.max(1, ...series.buckets.map((bucket) => bucket.count));
+        return (
+          <div key={series.key}>
+            <p className="mb-2 truncate text-muted-foreground text-xs">{series.label}</p>
+            <div className="flex h-32 items-end gap-1">
+              {series.buckets.slice(0, 20).map((bucket) => (
+                <div
+                  className="min-w-2 flex-1 rounded-t bg-amber-500"
+                  key={bucket.intervals}
+                  style={{ height: `${Math.max(3, (bucket.count / maximum) * 100)}%` }}
+                  title={`${bucket.intervals}: ${bucket.count.toLocaleString()}`}
+                />
+              ))}
+            </div>
+          </div>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/analytics/custom-insights-page.tsx b/apps/www/src/features/studio/analytics/custom-insights-page.tsx
new file mode 100644
index 000000000..83aa659e3
--- /dev/null
+++ b/apps/www/src/features/studio/analytics/custom-insights-page.tsx
@@ -0,0 +1,3390 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type {
+  AnalyticsEventSeriesType,
+  AnalyticsTimeRangeType,
+  AnalyticsTrendsComparisonType,
+  CustomAnalyticsInsightKindType,
+  CustomAnalyticsInsightQueryType,
+  FunnelsInsightQueryType,
+  QueryCustomAnalyticsInsightResponseType,
+  QueryCustomAnalyticsPersonsResponseType,
+} from "@voidhash/rpc";
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+  Checkbox,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  Input,
+  Label,
+  Page,
+  PageHeader,
+  PageHeaderTitle,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Textarea,
+} from "@voidhash/ui";
+import {
+  Activity,
+  ArrowLeft,
+  ChartNoAxesCombined,
+  ChartSpline,
+  Filter,
+  GitBranch,
+  Layers3,
+  Pencil,
+  Plus,
+  Repeat2,
+  Save,
+  Trash2,
+} from "lucide-react";
+import { useMemo, useState } from "react";
+import {
+  Area,
+  AreaChart,
+  Bar,
+  BarChart,
+  CartesianGrid,
+  Line,
+  LineChart,
+  XAxis,
+  YAxis,
+} from "recharts";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import {
+  createAnalyticsCohortOptions,
+  createAnalyticsInsightOptions,
+  deleteAnalyticsCohortOptions,
+  deleteAnalyticsInsightOptions,
+  listAnalyticsCohortsOptions,
+  listAnalyticsInsightsOptions,
+  listPersonsOptions,
+  queryCustomAnalyticsInsightOptions,
+  queryCustomAnalyticsPersonsOptions,
+  queryKeys,
+  updateAnalyticsCohortOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+const insightTypes: ReadonlyArray<{
+  color: string;
+  description: string;
+  icon: typeof ChartSpline;
+  kind: CustomAnalyticsInsightKindType;
+  label: string;
+  live: boolean;
+}> = [
+  {
+    color: "text-sky-500",
+    description: "Track event volume and unique users over time.",
+    icon: ChartSpline,
+    kind: "trends",
+    label: "Trends",
+    live: true,
+  },
+  {
+    color: "text-violet-500",
+    description: "Measure conversion through ordered mobile flows.",
+    icon: Filter,
+    kind: "funnels",
+    label: "Funnels",
+    live: true,
+  },
+  {
+    color: "text-rose-500",
+    description: "See who returns after a starting behavior.",
+    icon: Repeat2,
+    kind: "retention",
+    label: "Retention",
+    live: true,
+  },
+  {
+    color: "text-emerald-500",
+    description: "Explore the routes users take between events.",
+    icon: GitBranch,
+    kind: "paths",
+    label: "User paths",
+    live: true,
+  },
+  {
+    color: "text-amber-500",
+    description: "Understand how frequently users repeat behavior.",
+    icon: Activity,
+    kind: "stickiness",
+    label: "Stickiness",
+    live: true,
+  },
+  {
+    color: "text-cyan-500",
+    description: "Separate new, returning, resurrected, and dormant users.",
+    icon: Layers3,
+    kind: "lifecycle",
+    label: "Lifecycle",
+    live: true,
+  },
+];
+
+interface CustomInsightsPageProps {
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+interface AuthoringSeries {
+  aggregation: AnalyticsEventSeriesType["aggregation"];
+  eventName: string;
+  key: string;
+  mathProperty?: string;
+}
+
+interface AuthoringFormula {
+  expression: string;
+  key: string;
+  label: string;
+}
+
+interface AuthoringFunnelStep {
+  eventName: string;
+  key: string;
+}
+
+/** Render the saved insight library and mobile analytics insight builder. */
+export function CustomInsightsPage({ organizationSlug, projectSlug }: CustomInsightsPageProps) {
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(user, organizationSlug, projectSlug);
+  const [authoring, setAuthoring] = useState(false);
+
+  if (!project) {
+    return <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "Project not found" }} />;
+  }
+
+  return authoring ? (
+    <InsightBuilder onClose={() => setAuthoring(false)} projectId={project.id} />
+  ) : (
+    <InsightLibrary onCreate={() => setAuthoring(true)} projectId={project.id} />
+  );
+}
+
+function InsightLibrary({ onCreate, projectId }: { onCreate: () => void; projectId: string }) {
+  const queryClient = useQueryClient();
+  const insights = useQuery(listAnalyticsInsightsOptions({ projectId }));
+  const deleteInsight = useMutation(deleteAnalyticsInsightOptions());
+  const [confirmingDeleteId, setConfirmingDeleteId] = useState<string>();
+  const removeInsight = (id: string) => {
+    if (confirmingDeleteId !== id) {
+      setConfirmingDeleteId(id);
+      return;
+    }
+    deleteInsight.mutate(
+      { id },
+      {
+        onSuccess: async () => {
+          setConfirmingDeleteId(undefined);
+          await queryClient.invalidateQueries({
+            queryKey: queryKeys.analytics.insights({ projectId }),
+          });
+          await queryClient.invalidateQueries({
+            queryKey: queryKeys.analytics.dashboards({ projectId }),
+          });
+        },
+      },
+    );
+  };
+
+  return (
+    <Page>
+      <PageHeader
+        rightActions={
+          <Button onClick={onCreate}>
+            <Plus />
+            New insight
+          </Button>
+        }
+      >
+        <PageHeaderTitle>Insights</PageHeaderTitle>
+      </PageHeader>
+      <div className="mx-auto w-full max-w-7xl space-y-6 px-4 py-6">
+        <div>
+          <h2 className="font-medium text-2xl tracking-tight">Product insights</h2>
+          <p className="mt-1 text-muted-foreground text-sm">
+            Build reusable analysis around the events that matter in your mobile app.
+          </p>
+        </div>
+        {insights.isLoading ? (
+          <div className="rounded-xl border border-dashed p-10 text-center text-muted-foreground">
+            Loading insights…
+          </div>
+        ) : insights.data?.insights.length ? (
+          <div className="grid gap-3 md:grid-cols-2 xl:grid-cols-3">
+            {insights.data.insights.map((insight) => {
+              const type = insightTypes.find((candidate) => candidate.kind === insight.kind);
+              const Icon = type?.icon ?? ChartNoAxesCombined;
+              return (
+                <Card className="transition-colors hover:border-foreground/20" key={insight.id}>
+                  <CardHeader>
+                    <div className="flex items-start justify-between gap-4">
+                      <div className="rounded-lg bg-muted p-2">
+                        <Icon className={type?.color} />
+                      </div>
+                      <div className="flex items-center gap-1">
+                        <span className="rounded-full bg-muted px-2 py-1 text-muted-foreground text-xs">
+                          {type?.label ?? insight.kind}
+                        </span>
+                        <Button
+                          aria-label={`${confirmingDeleteId === insight.id ? "Confirm deleting" : "Delete"} ${insight.name}`}
+                          disabled={deleteInsight.isPending}
+                          onClick={() => removeInsight(insight.id)}
+                          size="icon"
+                          title={
+                            confirmingDeleteId === insight.id ? "Click again to confirm" : "Delete"
+                          }
+                          variant={confirmingDeleteId === insight.id ? "destructive" : "ghost"}
+                        >
+                          <Trash2 size={15} />
+                        </Button>
+                      </div>
+                    </div>
+                    <CardTitle className="pt-3">{insight.name}</CardTitle>
+                    <CardDescription>{insight.description || type?.description}</CardDescription>
+                  </CardHeader>
+                </Card>
+              );
+            })}
+          </div>
+        ) : (
+          <button
+            className="flex w-full flex-col items-center rounded-xl border border-dashed px-6 py-14 text-center transition-colors hover:border-foreground/30 hover:bg-muted/30"
+            onClick={onCreate}
+            type="button"
+          >
+            <div className="rounded-full bg-primary/10 p-3 text-primary">
+              <ChartSpline />
+            </div>
+            <span className="mt-4 font-medium">Create your first insight</span>
+            <span className="mt-1 max-w-md text-muted-foreground text-sm">
+              Start with a trend to understand event volume or active users over time.
+            </span>
+          </button>
+        )}
+        <CohortManager projectId={projectId} />
+      </div>
+    </Page>
+  );
+}
+
+function CohortManager({ projectId }: { projectId: string }) {
+  const queryClient = useQueryClient();
+  const cohorts = useQuery(listAnalyticsCohortsOptions({ projectId }));
+  const people = useQuery(listPersonsOptions({ projectId }));
+  const createCohort = useMutation(createAnalyticsCohortOptions());
+  const deleteCohort = useMutation(deleteAnalyticsCohortOptions());
+  const updateCohort = useMutation(updateAnalyticsCohortOptions());
+  const [editingCohortId, setEditingCohortId] = useState<string>();
+  const [name, setName] = useState("");
+  const [description, setDescription] = useState("");
+  const [memberPersonIds, setMemberPersonIds] = useState<string[]>([]);
+
+  const refresh = () =>
+    queryClient.invalidateQueries({ queryKey: queryKeys.analytics.cohorts({ projectId }) });
+
+  const resetForm = () => {
+    setDescription("");
+    setEditingCohortId(undefined);
+    setMemberPersonIds([]);
+    setName("");
+  };
+
+  const saveCohort = () => {
+    const onSuccess = async () => {
+      resetForm();
+      await refresh();
+    };
+    if (editingCohortId) {
+      updateCohort.mutate(
+        {
+          description: description.trim() || null,
+          id: editingCohortId,
+          memberPersonIds,
+          name: name.trim(),
+        },
+        { onSuccess },
+      );
+      return;
+    }
+    createCohort.mutate(
+      {
+        description: description.trim() || undefined,
+        memberPersonIds,
+        name: name.trim(),
+        projectId,
+      },
+      { onSuccess },
+    );
+  };
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Static cohorts</CardTitle>
+        <CardDescription>
+          Save a reusable set of people, then apply it to any insight from the audience bar.
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="grid gap-6 lg:grid-cols-[minmax(0,1fr)_minmax(320px,0.8fr)]">
+        <div className="space-y-3">
+          {cohorts.data?.cohorts.length ? (
+            cohorts.data.cohorts.map((cohort) => (
+              <div
+                className="flex items-center justify-between gap-4 rounded-lg border p-3"
+                key={cohort.id}
+              >
+                <div className="min-w-0">
+                  <p className="truncate font-medium text-sm">{cohort.name}</p>
+                  <p className="text-muted-foreground text-xs">
+                    {cohort.memberCount.toLocaleString()} people
+                    {cohort.description ? ` · ${cohort.description}` : ""}
+                  </p>
+                </div>
+                <div className="flex items-center gap-1">
+                  <Button
+                    aria-label={`Edit ${cohort.name}`}
+                    onClick={() => {
+                      setDescription(cohort.description ?? "");
+                      setEditingCohortId(cohort.id);
+                      setMemberPersonIds([...cohort.memberPersonIds]);
+                      setName(cohort.name);
+                    }}
+                    size="icon"
+                    variant="ghost"
+                  >
+                    <Pencil size={15} />
+                  </Button>
+                  <Button
+                    aria-label={`Delete ${cohort.name}`}
+                    disabled={deleteCohort.isPending}
+                    onClick={() =>
+                      deleteCohort.mutate(
+                        { id: cohort.id },
+                        {
+                          onSuccess: async () => {
+                            if (editingCohortId === cohort.id) resetForm();
+                            await refresh();
+                          },
+                        },
+                      )
+                    }
+                    size="icon"
+                    variant="ghost"
+                  >
+                    <Trash2 size={15} />
+                  </Button>
+                </div>
+              </div>
+            ))
+          ) : (
+            <div className="rounded-lg border border-dashed p-6 text-center text-muted-foreground text-sm">
+              No saved cohorts.
+            </div>
+          )}
+        </div>
+        <div className="space-y-3 rounded-lg border p-4">
+          <div className="space-y-1.5">
+            <Label htmlFor="cohort-name">Cohort name</Label>
+            <Input
+              id="cohort-name"
+              onChange={(event) => setName(event.target.value)}
+              placeholder="Beta testers"
+              value={name}
+            />
+          </div>
+          <div className="space-y-1.5">
+            <Label htmlFor="cohort-description">Description</Label>
+            <Input
+              id="cohort-description"
+              onChange={(event) => setDescription(event.target.value)}
+              placeholder="Optional"
+              value={description}
+            />
+          </div>
+          <div className="space-y-1.5">
+            <Label>Members</Label>
+            <div className="max-h-48 space-y-1 overflow-y-auto rounded-md border p-2">
+              {people.data?.length ? (
+                people.data.map((person) => (
+                  <label
+                    className="flex items-center gap-2 rounded px-2 py-1.5 text-sm hover:bg-muted"
+                    key={person.personId}
+                  >
+                    <Checkbox
+                      checked={memberPersonIds.includes(person.personId)}
+                      onCheckedChange={(checked) =>
+                        setMemberPersonIds((current) =>
+                          checked === true
+                            ? [...new Set([...current, person.personId])]
+                            : current.filter((id) => id !== person.personId),
+                        )
+                      }
+                    />
+                    <span className="truncate">
+                      {person.name || person.email || person.distinctId}
+                    </span>
+                  </label>
+                ))
+              ) : (
+                <p className="p-2 text-muted-foreground text-sm">No known people yet.</p>
+              )}
+            </div>
+          </div>
+          <div className="flex justify-end gap-2">
+            {editingCohortId ? (
+              <Button onClick={resetForm} variant="ghost">
+                Cancel
+              </Button>
+            ) : null}
+            <Button
+              disabled={!name.trim() || createCohort.isPending || updateCohort.isPending}
+              onClick={saveCohort}
+            >
+              {editingCohortId ? <Save /> : <Plus />}
+              {updateCohort.isPending
+                ? "Saving…"
+                : createCohort.isPending
+                  ? "Creating…"
+                  : editingCohortId
+                    ? "Save cohort"
+                    : "Create cohort"}
+            </Button>
+          </div>
+        </div>
+      </CardContent>
+    </Card>
+  );
+}
+
+function InsightBuilder({ onClose, projectId }: { onClose: () => void; projectId: string }) {
+  const queryClient = useQueryClient();
+  const [kind, setKind] = useState<CustomAnalyticsInsightKindType>("trends");
+  const [name, setName] = useState("Untitled insight");
+  const [description, setDescription] = useState("");
+  const [actorKind, setActorKind] = useState<"group" | "person">("person");
+  const [groupProperty, setGroupProperty] = useState("organization_id");
+  const [selectedCohortIds, setSelectedCohortIds] = useState<string[]>([]);
+  const [series, setSeries] = useState<AuthoringSeries[]>([
+    { aggregation: "unique_users", eventName: "$screen", key: "A" },
+  ]);
+  const [filterProperty, setFilterProperty] = useState("");
+  const [filterOperator, setFilterOperator] = useState<"contains" | "eq" | "neq">("eq");
+  const [filterValue, setFilterValue] = useState("");
+  const [breakdownMode, setBreakdownMode] = useState<
+    "event.name" | "none" | "person.id" | "property"
+  >("none");
+  const [breakdownProperty, setBreakdownProperty] = useState("");
+  const [trendsComparison, setTrendsComparison] = useState<"none" | AnalyticsTrendsComparisonType>(
+    "none",
+  );
+  const [trendsFormulaEnabled, setTrendsFormulaEnabled] = useState(false);
+  const [trendsFormulas, setTrendsFormulas] = useState<AuthoringFormula[]>([
+    { expression: "A", key: "formula-1", label: "" },
+  ]);
+  const [trendsDisplay, setTrendsDisplay] = useState<"area" | "bar" | "line" | "number">("line");
+  const [trendsCumulative, setTrendsCumulative] = useState(false);
+  const [trendsHideWeekends, setTrendsHideWeekends] = useState(false);
+  const [trendsSmoothingWindow, setTrendsSmoothingWindow] = useState<1 | 7 | 14 | 28>(1);
+  const [funnelSteps, setFunnelSteps] = useState<AuthoringFunnelStep[]>([
+    { eventName: "paywall_viewed", key: "A" },
+    { eventName: "purchase_completed", key: "B" },
+  ]);
+  const [funnelOrder, setFunnelOrder] = useState<FunnelsInsightQueryType["order"]>("sequential");
+  const [funnelWindowDays, setFunnelWindowDays] = useState<1 | 7 | 14 | 30>(7);
+  const [funnelBreakdownAttributionStep, setFunnelBreakdownAttributionStep] = useState(1);
+  const [retentionStartEvent, setRetentionStartEvent] = useState("session_started");
+  const [retentionReturningEvent, setRetentionReturningEvent] = useState("session_started");
+  const [retentionType, setRetentionType] = useState<"first_time" | "recurring">("recurring");
+  const [retentionPeriod, setRetentionPeriod] = useState<"day" | "month" | "week">("week");
+  const [retentionIntervals, setRetentionIntervals] = useState<7 | 11 | 14>(11);
+  const [retentionCumulative, setRetentionCumulative] = useState(false);
+  const [retentionReference, setRetentionReference] = useState<"cohort" | "previous">("cohort");
+  const [pathItem, setPathItem] = useState<"event_name" | "screen_name">("screen_name");
+  const [pathEvents, setPathEvents] = useState("$screen");
+  const [pathExcludedEvents, setPathExcludedEvents] = useState("");
+  const [pathStart, setPathStart] = useState("");
+  const [pathEnd, setPathEnd] = useState("");
+  const [pathDepth, setPathDepth] = useState<3 | 5 | 8 | 12>(5);
+  const [pathSessionMinutes, setPathSessionMinutes] = useState<15 | 30 | 60>(30);
+  const [pathMinCount, setPathMinCount] = useState("");
+  const [pathMaxCount, setPathMaxCount] = useState("");
+  const [pathCollapseRepeated, setPathCollapseRepeated] = useState(true);
+  const [stickinessComputation, setStickinessComputation] = useState<"cumulative" | "exact">(
+    "exact",
+  );
+  const [stickinessDisplay, setStickinessDisplay] = useState<"bar" | "line">("bar");
+  const [stickinessInterval, setStickinessInterval] = useState<"day" | "hour" | "month" | "week">(
+    "day",
+  );
+  const [stickinessOccurrenceOperator, setStickinessOccurrenceOperator] = useState<
+    "exact" | "gte" | "lte"
+  >("gte");
+  const [stickinessMinimum, setStickinessMinimum] = useState(1);
+  const [lifecycleEvent, setLifecycleEvent] = useState("session_started");
+  const [lifecycleDisplay, setLifecycleDisplay] = useState<"line" | "stacked_area">("stacked_area");
+  const [lifecycleValueMode, setLifecycleValueMode] = useState<"count" | "percentage">("count");
+  const [lifecycleStatuses, setLifecycleStatuses] = useState<
+    Array<"dormant" | "new" | "resurrecting" | "returning">
+  >(["new", "returning", "resurrecting", "dormant"]);
+  const [granularity, setGranularity] = useState<"hour" | "day" | "week" | "month">("day");
+  const [timeRange, setTimeRange] = useState<"last_7d" | "last_30d" | "last_90d">("last_7d");
+  const runInsight = useMutation(queryCustomAnalyticsInsightOptions());
+  const queryPeople = useMutation(queryCustomAnalyticsPersonsOptions());
+  const [peopleDrilldownTitle, setPeopleDrilldownTitle] = useState("");
+  const createInsight = useMutation(createAnalyticsInsightOptions());
+  const cohorts = useQuery(listAnalyticsCohortsOptions({ projectId }));
+
+  const definition = useMemo<CustomAnalyticsInsightQueryType>(() => {
+    const audience = {
+      ...(actorKind === "group"
+        ? { actor: { kind: "group" as const, property: groupProperty.trim() } }
+        : { actor: { kind: "person" as const } }),
+      ...(selectedCohortIds.length ? { cohortIds: selectedCohortIds } : {}),
+    };
+    if (kind === "retention") {
+      return {
+        ...audience,
+        cumulative: retentionCumulative,
+        intervals: retentionIntervals,
+        kind: "retention",
+        period: retentionPeriod,
+        reference: retentionReference,
+        retentionType,
+        returning: {
+          aggregation: "unique_users",
+          eventNames: [retentionReturningEvent.trim() || "session_started"],
+          key: "returning",
+          label: retentionReturningEvent.trim() || "session_started",
+        },
+        start: {
+          aggregation: "unique_users",
+          eventNames: [retentionStartEvent.trim() || "session_started"],
+          key: "start",
+          label: retentionStartEvent.trim() || "session_started",
+        },
+        timeRange: { preset: timeRange },
+      };
+    }
+    if (kind === "funnels") {
+      const funnelBreakdownField =
+        breakdownMode === "property"
+          ? breakdownProperty.trim()
+            ? `event.properties.${breakdownProperty.trim()}`
+            : undefined
+          : breakdownMode === "none"
+            ? undefined
+            : breakdownMode;
+      const [firstStep, ...remainingSteps] = funnelSteps;
+      const toStep = (step: AuthoringFunnelStep) => ({
+        eventNames: [step.eventName.trim() || "unnamed_event"] as [string, ...string[]],
+        key: step.key,
+        label: step.eventName.trim() || "Unnamed event",
+      });
+      return {
+        ...audience,
+        ...(funnelBreakdownField
+          ? {
+              breakdown: { field: funnelBreakdownField, limit: 10, order: "desc" as const },
+              breakdownAttributionStep: Math.min(
+                funnelBreakdownAttributionStep,
+                funnelSteps.length,
+              ),
+            }
+          : {}),
+        conversionWindowSeconds: funnelWindowDays * 86_400,
+        kind: "funnels",
+        order: funnelOrder,
+        steps: [
+          toStep(firstStep ?? { eventName: "paywall_viewed", key: "A" }),
+          ...remainingSteps.map(toStep),
+        ],
+        timeRange: { preset: timeRange },
+      };
+    }
+    const filterField = filterProperty.trim();
+    const breakdownField =
+      breakdownMode === "property"
+        ? breakdownProperty.trim()
+          ? `event.properties.${breakdownProperty.trim()}`
+          : undefined
+        : breakdownMode === "none"
+          ? undefined
+          : breakdownMode;
+    const toDefinitionSeries = (item: AuthoringSeries): AnalyticsEventSeriesType => ({
+      aggregation: item.aggregation,
+      eventNames: [item.eventName.trim() || "$screen"],
+      ...(filterField && filterValue
+        ? {
+            filters: {
+              field: `event.properties.${filterField}`,
+              op: filterOperator,
+              type: "predicate" as const,
+              value: filterValue,
+            },
+          }
+        : {}),
+      key: item.key,
+      label: item.eventName.trim() || "$screen",
+      ...(item.aggregation.startsWith("property_") && item.mathProperty?.trim()
+        ? { mathProperty: item.mathProperty.trim() }
+        : {}),
+    });
+    const [firstSeries, ...remainingSeries] = series;
+    const definitionSeries: [AnalyticsEventSeriesType, ...AnalyticsEventSeriesType[]] = [
+      toDefinitionSeries(
+        firstSeries ?? { aggregation: "unique_users", eventName: "$screen", key: "A" },
+      ),
+      ...remainingSeries.map(toDefinitionSeries),
+    ];
+    if (kind === "paths") {
+      const eventNames = pathEvents
+        .split(",")
+        .map((eventName) => eventName.trim())
+        .filter(Boolean);
+      const excludeEventNames = pathExcludedEvents
+        .split(",")
+        .map((eventName) => eventName.trim())
+        .filter(Boolean);
+      const minimum = Number(pathMinCount);
+      const maximum = Number(pathMaxCount);
+      return {
+        ...audience,
+        collapseRepeated: pathCollapseRepeated,
+        edgeLimit: 50,
+        ...(pathEnd.trim() ? { endEventName: pathEnd.trim() } : {}),
+        eventNames,
+        ...(excludeEventNames.length ? { excludeEventNames } : {}),
+        ...(filterField && filterValue
+          ? {
+              filters: {
+                field: `event.properties.${filterField}`,
+                op: filterOperator,
+                type: "predicate" as const,
+                value: filterValue,
+              },
+            }
+          : {}),
+        kind: "paths",
+        maxDepth: pathDepth,
+        ...(Number.isSafeInteger(maximum) && maximum > 0 ? { maxEdgeCount: maximum } : {}),
+        ...(Number.isSafeInteger(minimum) && minimum > 0 ? { minEdgeCount: minimum } : {}),
+        pathItem,
+        sessionGapSeconds: pathSessionMinutes * 60,
+        ...(pathStart.trim() ? { startEventName: pathStart.trim() } : {}),
+        timeRange: { preset: timeRange },
+      };
+    }
+    if (kind === "stickiness") {
+      return {
+        ...audience,
+        computation: stickinessComputation,
+        display: stickinessDisplay,
+        interval: stickinessInterval,
+        kind: "stickiness",
+        occurrenceCriteria: {
+          operator: stickinessOccurrenceOperator,
+          value: stickinessMinimum,
+        },
+        series: definitionSeries.map((item) => ({
+          ...item,
+          aggregation: "unique_users" as const,
+        })) as [AnalyticsEventSeriesType, ...AnalyticsEventSeriesType[]],
+        timeRange: { preset: timeRange },
+      };
+    }
+    if (kind === "lifecycle") {
+      return {
+        ...audience,
+        display: lifecycleDisplay,
+        granularity,
+        kind: "lifecycle",
+        series: {
+          aggregation: "unique_users",
+          eventNames: [lifecycleEvent.trim() || "session_started"],
+          ...(filterField && filterValue
+            ? {
+                filters: {
+                  field: `event.properties.${filterField}`,
+                  op: filterOperator,
+                  type: "predicate" as const,
+                  value: filterValue,
+                },
+              }
+            : {}),
+          key: "lifecycle",
+          label: lifecycleEvent.trim() || "session_started",
+        },
+        statuses: (lifecycleStatuses.length ? lifecycleStatuses : ["new"]) as [
+          "dormant" | "new" | "resurrecting" | "returning",
+          ...Array<"dormant" | "new" | "resurrecting" | "returning">,
+        ],
+        timeRange: { preset: timeRange },
+        valueMode: lifecycleValueMode,
+      };
+    }
+    return {
+      ...audience,
+      ...(breakdownField
+        ? { breakdown: { field: breakdownField, limit: 10, order: "desc" as const } }
+        : {}),
+      ...(trendsDisplay !== "number" && trendsCumulative ? { cumulative: true } : {}),
+      display: trendsDisplay,
+      ...(trendsFormulaEnabled
+        ? {
+            formulas: trendsFormulas.map((formula) => ({
+              expression: formula.expression.trim() || "A",
+              key: formula.key,
+              ...(formula.label.trim() ? { label: formula.label.trim() } : {}),
+            })),
+          }
+        : {}),
+      granularity,
+      ...(trendsDisplay !== "number" && granularity === "day" && trendsHideWeekends
+        ? { hideWeekends: true }
+        : {}),
+      kind: "trends",
+      series: definitionSeries,
+      ...(trendsDisplay !== "number" && granularity === "day" && trendsSmoothingWindow > 1
+        ? { smoothingWindow: trendsSmoothingWindow }
+        : {}),
+      timeRange: { preset: timeRange },
+      ...(trendsComparison === "none" ? {} : { comparison: trendsComparison }),
+    };
+  }, [
+    actorKind,
+    breakdownMode,
+    breakdownProperty,
+    filterOperator,
+    filterProperty,
+    filterValue,
+    funnelBreakdownAttributionStep,
+    funnelOrder,
+    funnelSteps,
+    funnelWindowDays,
+    granularity,
+    groupProperty,
+    kind,
+    lifecycleDisplay,
+    lifecycleEvent,
+    lifecycleStatuses,
+    lifecycleValueMode,
+    pathCollapseRepeated,
+    pathDepth,
+    pathEnd,
+    pathEvents,
+    pathExcludedEvents,
+    pathItem,
+    pathMaxCount,
+    pathMinCount,
+    pathSessionMinutes,
+    pathStart,
+    retentionCumulative,
+    retentionIntervals,
+    retentionPeriod,
+    retentionReference,
+    retentionReturningEvent,
+    retentionStartEvent,
+    retentionType,
+    series,
+    selectedCohortIds,
+    stickinessComputation,
+    stickinessDisplay,
+    stickinessInterval,
+    stickinessMinimum,
+    stickinessOccurrenceOperator,
+    timeRange,
+    trendsComparison,
+    trendsCumulative,
+    trendsDisplay,
+    trendsFormulaEnabled,
+    trendsFormulas,
+    trendsHideWeekends,
+    trendsSmoothingWindow,
+  ]);
+
+  const updateSeries = (key: string, update: Partial<AuthoringSeries>) =>
+    setSeries((current) =>
+      current.map((item) => (item.key === key ? { ...item, ...update } : item)),
+    );
+
+  const openPeopleDrilldown = (input: {
+    eventNames: readonly string[];
+    filters?: AnalyticsEventSeriesType["filters"];
+    group?: { property: string; value: string };
+    label: string;
+    range?: AnalyticsTimeRangeType;
+  }) => {
+    setPeopleDrilldownTitle(input.label);
+    queryPeople.mutate({
+      ...(definition.cohortIds ? { cohortIds: [...definition.cohortIds] } : {}),
+      eventNames: [...input.eventNames] as [string, ...string[]],
+      ...(input.filters ? { filters: input.filters } : {}),
+      ...(input.group ? { group: input.group } : {}),
+      limit: 50,
+      projectId,
+      timeRange: input.range ?? definition.timeRange,
+    });
+  };
+
+  const updateFormula = (key: string, update: Partial<AuthoringFormula>) =>
+    setTrendsFormulas((current) =>
+      current.map((formula) => (formula.key === key ? { ...formula, ...update } : formula)),
+    );
+
+  const addFormula = () =>
+    setTrendsFormulas((current) => {
+      const index = Array.from({ length: 8 }, (_, candidate) => candidate + 1).find(
+        (candidate) => !current.some((formula) => formula.key === `formula-${candidate}`),
+      );
+      return index
+        ? [...current, { expression: "A", key: `formula-${index}`, label: "" }]
+        : current;
+    });
+
+  const addSeries = () =>
+    setSeries((current) => {
+      const key = [..."ABCDEFGH"].find(
+        (candidate) => !current.some((item) => item.key === candidate),
+      );
+      return key ? [...current, { aggregation: "unique_users", eventName: "", key }] : current;
+    });
+
+  const updateFunnelStep = (key: string, eventName: string) =>
+    setFunnelSteps((current) =>
+      current.map((step) => (step.key === key ? { ...step, eventName } : step)),
+    );
+
+  const addFunnelStep = () =>
+    setFunnelSteps((current) => {
+      const key = [..."ABCDEFGH"].find(
+        (candidate) => !current.some((step) => step.key === candidate),
+      );
+      return key ? [...current, { eventName: "", key }] : current;
+    });
+
+  const onSave = () => {
+    if (
+      kind !== "trends" &&
+      kind !== "funnels" &&
+      kind !== "retention" &&
+      kind !== "paths" &&
+      kind !== "stickiness" &&
+      kind !== "lifecycle"
+    )
+      return;
+    createInsight.mutate(
+      {
+        definition,
+        description: description.trim() || undefined,
+        name: name.trim(),
+        projectId,
+      },
+      {
+        onSuccess: async () => {
+          await queryClient.invalidateQueries({
+            queryKey: queryKeys.analytics.insights({ projectId }),
+          });
+          onClose();
+        },
+      },
+    );
+  };
+
+  const executable =
+    (actorKind === "person" || groupProperty.trim().length > 0) &&
+    (kind === "trends" ||
+      kind === "funnels" ||
+      kind === "retention" ||
+      kind === "paths" ||
+      kind === "stickiness" ||
+      kind === "lifecycle");
+
+  return (
+    <Page className="flex h-[calc(100svh-var(--header-height))] flex-col overflow-hidden">
+      <PageHeader
+        rightActions={
+          <div className="flex gap-2">
+            <Button
+              disabled={!executable || runInsight.isPending}
+              onClick={() => runInsight.mutate({ definition, projectId })}
+              variant="outline"
+            >
+              {runInsight.isPending ? "Running…" : "Run"}
+            </Button>
+            <Button
+              disabled={!executable || !name.trim() || createInsight.isPending}
+              onClick={onSave}
+            >
+              <Save />
+              {createInsight.isPending ? "Saving…" : "Save"}
+            </Button>
+          </div>
+        }
+      >
+        <div className="flex items-center gap-3">
+          <Button aria-label="Back to insights" onClick={onClose} size="icon" variant="ghost">
+            <ArrowLeft />
+          </Button>
+          <PageHeaderTitle>New insight</PageHeaderTitle>
+        </div>
+      </PageHeader>
+
+      <div className="border-b px-4 py-3">
+        <div className="mx-auto flex max-w-7xl gap-2 overflow-x-auto">
+          {insightTypes.map((type) => {
+            const Icon = type.icon;
+            return (
+              <button
+                className={`flex min-w-fit items-center gap-2 rounded-lg border px-3 py-2 text-sm transition-colors ${kind === type.kind ? "border-primary bg-primary/5 text-foreground" : "border-transparent text-muted-foreground hover:bg-muted"}`}
+                key={type.kind}
+                onClick={() => setKind(type.kind)}
+                type="button"
+              >
+                <Icon className={type.color} size={16} />
+                {type.label}
+                {!type.live ? (
+                  <span className="rounded bg-muted px-1.5 py-0.5 text-[10px]">Next</span>
+                ) : null}
+              </button>
+            );
+          })}
+        </div>
+      </div>
+
+      <div className="border-b bg-muted/10 px-4 py-3">
+        <div className="mx-auto flex max-w-7xl flex-wrap items-end gap-4">
+          <div className="min-w-44 space-y-1.5">
+            <Label>Aggregate by</Label>
+            <Select
+              onValueChange={(value) => setActorKind(value as "group" | "person")}
+              value={actorKind}
+            >
+              <SelectTrigger>
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectItem value="person">People</SelectItem>
+                <SelectItem value="group">Mobile app group</SelectItem>
+              </SelectContent>
+            </Select>
+          </div>
+          {actorKind === "group" ? (
+            <div className="min-w-56 space-y-1.5">
+              <Label htmlFor="analytics-group-property">Group property</Label>
+              <Input
+                id="analytics-group-property"
+                onChange={(event) => setGroupProperty(event.target.value)}
+                placeholder="organization_id or workspace_id"
+                value={groupProperty}
+              />
+            </div>
+          ) : null}
+          <div className="min-w-64 flex-1 space-y-1.5">
+            <Label>Static cohort filter</Label>
+            <div className="flex min-h-9 flex-wrap items-center gap-2 rounded-md border bg-background px-3 py-2">
+              {cohorts.data?.cohorts.length ? (
+                cohorts.data.cohorts.map((cohort) => (
+                  <label className="flex items-center gap-2 text-sm" key={cohort.id}>
+                    <Checkbox
+                      checked={selectedCohortIds.includes(cohort.id)}
+                      onCheckedChange={(checked) =>
+                        setSelectedCohortIds((current) =>
+                          checked === true
+                            ? [...new Set([...current, cohort.id])]
+                            : current.filter((id) => id !== cohort.id),
+                        )
+                      }
+                    />
+                    <span>{cohort.name}</span>
+                    <span className="text-muted-foreground text-xs">
+                      {cohort.memberCount.toLocaleString()}
+                    </span>
+                  </label>
+                ))
+              ) : (
+                <span className="text-muted-foreground text-sm">
+                  No cohorts yet. Create one from the insight library.
+                </span>
+              )}
+            </div>
+          </div>
+        </div>
+      </div>
+
+      {kind === "trends" ? (
+        <div className="grid min-h-0 flex-1 lg:grid-cols-[360px_minmax(0,1fr)]">
+          <aside className="overflow-y-auto border-r bg-muted/20 p-4">
+            <div className="space-y-5">
+              <div className="space-y-2">
+                <Label htmlFor="insight-name">Name</Label>
+                <Input
+                  id="insight-name"
+                  onChange={(event) => setName(event.target.value)}
+                  value={name}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="insight-description">Description</Label>
+                <Textarea
+                  id="insight-description"
+                  onChange={(event) => setDescription(event.target.value)}
+                  placeholder="What question does this answer?"
+                  value={description}
+                />
+              </div>
+              {series.map((item) => (
+                <Card key={item.key}>
+                  <CardHeader className="flex-row items-center justify-between space-y-0 pb-3">
+                    <CardTitle className="text-sm">Series {item.key}</CardTitle>
+                    {series.length > 1 ? (
+                      <Button
+                        aria-label={`Remove series ${item.key}`}
+                        onClick={() =>
+                          setSeries((current) =>
+                            current.filter((seriesItem) => seriesItem !== item),
+                          )
+                        }
+                        size="icon"
+                        variant="ghost"
+                      >
+                        <Trash2 size={15} />
+                      </Button>
+                    ) : null}
+                  </CardHeader>
+                  <CardContent className="space-y-4">
+                    <div className="space-y-2">
+                      <Label htmlFor={`event-name-${item.key}`}>Event name</Label>
+                      <Input
+                        id={`event-name-${item.key}`}
+                        onChange={(event) =>
+                          updateSeries(item.key, { eventName: event.target.value })
+                        }
+                        placeholder="$screen or checkout_started"
+                        value={item.eventName}
+                      />
+                    </div>
+                    <div className="space-y-2">
+                      <Label>Measure</Label>
+                      <Select
+                        onValueChange={(value) =>
+                          updateSeries(item.key, {
+                            aggregation: value as AuthoringSeries["aggregation"],
+                            ...(value.startsWith("property_") && !item.mathProperty
+                              ? { mathProperty: "value" }
+                              : {}),
+                          })
+                        }
+                        value={item.aggregation}
+                      >
+                        <SelectTrigger>
+                          <SelectValue />
+                        </SelectTrigger>
+                        <SelectContent>
+                          <SelectItem value="unique_users">Unique users</SelectItem>
+                          <SelectItem value="total_events">Total events</SelectItem>
+                          <SelectItem value="property_sum">Property sum</SelectItem>
+                          <SelectItem value="property_average">Property average</SelectItem>
+                          <SelectItem value="property_minimum">Property minimum</SelectItem>
+                          <SelectItem value="property_maximum">Property maximum</SelectItem>
+                          <SelectItem value="property_median">Property median</SelectItem>
+                          <SelectItem value="property_p75">Property 75th percentile</SelectItem>
+                          <SelectItem value="property_p90">Property 90th percentile</SelectItem>
+                          <SelectItem value="property_p95">Property 95th percentile</SelectItem>
+                          <SelectItem value="property_p99">Property 99th percentile</SelectItem>
+                        </SelectContent>
+                      </Select>
+                    </div>
+                    {item.aggregation.startsWith("property_") ? (
+                      <div className="space-y-2">
+                        <Label htmlFor={`math-property-${item.key}`}>Numeric event property</Label>
+                        <Input
+                          id={`math-property-${item.key}`}
+                          onChange={(event) =>
+                            updateSeries(item.key, { mathProperty: event.target.value })
+                          }
+                          placeholder="duration_ms or revenue"
+                          value={item.mathProperty ?? ""}
+                        />
+                      </div>
+                    ) : null}
+                  </CardContent>
+                </Card>
+              ))}
+              <Button disabled={series.length >= 8} onClick={addSeries} variant="outline">
+                <Plus />
+                Add series
+              </Button>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Formula mode</CardTitle>
+                  <CardDescription>
+                    Derive a metric from series keys with safe arithmetic.
+                  </CardDescription>
+                </CardHeader>
+                <CardContent className="space-y-3">
+                  <label className="flex items-start gap-3 text-sm">
+                    <Checkbox
+                      checked={trendsFormulaEnabled}
+                      onCheckedChange={(checked) => setTrendsFormulaEnabled(checked === true)}
+                    />
+                    <span>
+                      <span className="block font-medium">Show formula result</span>
+                      <span className="text-muted-foreground text-xs">
+                        Source series remain query inputs but the chart displays the derived series.
+                      </span>
+                    </span>
+                  </label>
+                  {trendsFormulaEnabled ? (
+                    <>
+                      {trendsFormulas.map((formula, index) => (
+                        <div className="space-y-3 rounded-lg border p-3" key={formula.key}>
+                          <div className="flex items-center justify-between gap-2">
+                            <span className="font-medium text-sm">Formula {index + 1}</span>
+                            {trendsFormulas.length > 1 ? (
+                              <Button
+                                aria-label={`Remove formula ${index + 1}`}
+                                onClick={() =>
+                                  setTrendsFormulas((current) =>
+                                    current.filter((candidate) => candidate.key !== formula.key),
+                                  )
+                                }
+                                size="icon"
+                                variant="ghost"
+                              >
+                                <Trash2 size={15} />
+                              </Button>
+                            ) : null}
+                          </div>
+                          <div className="space-y-2">
+                            <Label htmlFor={`trends-formula-${formula.key}`}>Expression</Label>
+                            <Input
+                              id={`trends-formula-${formula.key}`}
+                              onChange={(event) =>
+                                updateFormula(formula.key, { expression: event.target.value })
+                              }
+                              placeholder="A / B * 100"
+                              value={formula.expression}
+                            />
+                          </div>
+                          <div className="space-y-2">
+                            <Label htmlFor={`trends-formula-label-${formula.key}`}>Label</Label>
+                            <Input
+                              id={`trends-formula-label-${formula.key}`}
+                              onChange={(event) =>
+                                updateFormula(formula.key, { label: event.target.value })
+                              }
+                              placeholder="Conversion rate"
+                              value={formula.label}
+                            />
+                          </div>
+                        </div>
+                      ))}
+                      <Button
+                        disabled={trendsFormulas.length >= 8}
+                        onClick={addFormula}
+                        variant="outline"
+                      >
+                        <Plus /> Add formula
+                      </Button>
+                      <p className="text-muted-foreground text-xs">
+                        Supports +, −, ×, ÷, %, powers, and parentheses. Division by zero returns 0.
+                      </p>
+                    </>
+                  ) : null}
+                </CardContent>
+              </Card>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Event property filter</CardTitle>
+                  <CardDescription>
+                    Applied to every series when both fields are set.
+                  </CardDescription>
+                </CardHeader>
+                <CardContent className="space-y-3">
+                  <Input
+                    onChange={(event) => setFilterProperty(event.target.value)}
+                    placeholder="Property, e.g. plan"
+                    value={filterProperty}
+                  />
+                  <div className="grid grid-cols-[120px_minmax(0,1fr)] gap-2">
+                    <Select
+                      onValueChange={(value) => setFilterOperator(value as typeof filterOperator)}
+                      value={filterOperator}
+                    >
+                      <SelectTrigger>
+                        <SelectValue />
+                      </SelectTrigger>
+                      <SelectContent>
+                        <SelectItem value="eq">Equals</SelectItem>
+                        <SelectItem value="neq">Not equal</SelectItem>
+                        <SelectItem value="contains">Contains</SelectItem>
+                      </SelectContent>
+                    </Select>
+                    <Input
+                      onChange={(event) => setFilterValue(event.target.value)}
+                      placeholder="Value"
+                      value={filterValue}
+                    />
+                  </div>
+                </CardContent>
+              </Card>
+              <div className="space-y-2">
+                <Label>Break down by</Label>
+                <Select
+                  onValueChange={(value) => setBreakdownMode(value as typeof breakdownMode)}
+                  value={breakdownMode}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="none">No breakdown</SelectItem>
+                    <SelectItem value="event.name">Event name</SelectItem>
+                    <SelectItem value="person.id">Person</SelectItem>
+                    <SelectItem value="property">Event property</SelectItem>
+                  </SelectContent>
+                </Select>
+                {breakdownMode === "property" ? (
+                  <Input
+                    onChange={(event) => setBreakdownProperty(event.target.value)}
+                    placeholder="Property, e.g. country"
+                    value={breakdownProperty}
+                  />
+                ) : null}
+              </div>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label>Range</Label>
+                  <Select
+                    onValueChange={(value) => setTimeRange(value as typeof timeRange)}
+                    value={timeRange}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="last_7d">Last 7 days</SelectItem>
+                      <SelectItem value="last_30d">Last 30 days</SelectItem>
+                      <SelectItem value="last_90d">Last 90 days</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+                <div className="space-y-2">
+                  <Label>Grouped by</Label>
+                  <Select
+                    onValueChange={(value) => setGranularity(value as typeof granularity)}
+                    value={granularity}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="hour">Hour</SelectItem>
+                      <SelectItem value="day">Day</SelectItem>
+                      <SelectItem value="week">Week</SelectItem>
+                      <SelectItem value="month">Month</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+              </div>
+              <div className="space-y-2">
+                <Label>Visualization</Label>
+                <Select
+                  onValueChange={(value) => setTrendsDisplay(value as typeof trendsDisplay)}
+                  value={trendsDisplay}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="line">Line</SelectItem>
+                    <SelectItem value="bar">Bar</SelectItem>
+                    <SelectItem value="area">Area</SelectItem>
+                    <SelectItem value="number">Total value</SelectItem>
+                  </SelectContent>
+                </Select>
+                {trendsDisplay === "number" ? (
+                  <p className="text-muted-foreground text-xs">
+                    Aggregates each series across the full selected range.
+                  </p>
+                ) : null}
+              </div>
+              {trendsDisplay !== "number" ? (
+                <Card>
+                  <CardHeader className="pb-3">
+                    <CardTitle className="text-sm">Time-series options</CardTitle>
+                  </CardHeader>
+                  <CardContent className="space-y-4">
+                    <label className="flex items-start gap-3 text-sm">
+                      <Checkbox
+                        checked={trendsCumulative}
+                        onCheckedChange={(checked) => setTrendsCumulative(checked === true)}
+                      />
+                      <span>
+                        <span className="block font-medium">Cumulative</span>
+                        <span className="text-muted-foreground text-xs">
+                          Add each bucket to the running total.
+                        </span>
+                      </span>
+                    </label>
+                    {granularity === "day" ? (
+                      <>
+                        <label className="flex items-start gap-3 text-sm">
+                          <Checkbox
+                            checked={trendsHideWeekends}
+                            onCheckedChange={(checked) => setTrendsHideWeekends(checked === true)}
+                          />
+                          <span>
+                            <span className="block font-medium">Hide weekends</span>
+                            <span className="text-muted-foreground text-xs">
+                              Remove Saturday and Sunday buckets after calculations.
+                            </span>
+                          </span>
+                        </label>
+                        <div className="space-y-2">
+                          <Label>Smoothing</Label>
+                          <Select
+                            onValueChange={(value) =>
+                              setTrendsSmoothingWindow(
+                                Number(value) as typeof trendsSmoothingWindow,
+                              )
+                            }
+                            value={String(trendsSmoothingWindow)}
+                          >
+                            <SelectTrigger>
+                              <SelectValue />
+                            </SelectTrigger>
+                            <SelectContent>
+                              <SelectItem value="1">None</SelectItem>
+                              <SelectItem value="7">7-day trailing average</SelectItem>
+                              <SelectItem value="14">14-day trailing average</SelectItem>
+                              <SelectItem value="28">28-day trailing average</SelectItem>
+                            </SelectContent>
+                          </Select>
+                        </div>
+                      </>
+                    ) : null}
+                  </CardContent>
+                </Card>
+              ) : null}
+              <div className="space-y-2">
+                <Label>Compare with</Label>
+                <Select
+                  onValueChange={(value) => setTrendsComparison(value as typeof trendsComparison)}
+                  value={trendsComparison}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="none">No comparison</SelectItem>
+                    <SelectItem value="previous_period">Previous period</SelectItem>
+                    <SelectItem value="previous_year">Previous year</SelectItem>
+                  </SelectContent>
+                </Select>
+                <p className="text-muted-foreground text-xs">
+                  Overlay an equal historical window on the current timeline.
+                </p>
+              </div>
+            </div>
+          </aside>
+          <InsightPreview
+            display={trendsDisplay}
+            onDrilldown={(seriesKey) => {
+              if (definition.kind !== "trends") return;
+              const selected = definition.series.find((item) => item.key === seriesKey);
+              if (!selected) return;
+              openPeopleDrilldown({
+                eventNames: selected.eventNames,
+                filters: selected.filters,
+                label: selected.label ?? selected.eventNames.join(" or "),
+              });
+            }}
+            people={queryPeople.data}
+            peopleError={queryPeople.error}
+            peoplePending={queryPeople.isPending}
+            peopleTitle={peopleDrilldownTitle}
+            result={runInsight.data}
+            sourceSeriesKeys={
+              definition.kind === "trends" ? definition.series.map((item) => item.key) : []
+            }
+          />
+        </div>
+      ) : kind === "funnels" ? (
+        <div className="grid min-h-0 flex-1 lg:grid-cols-[380px_minmax(0,1fr)]">
+          <aside className="overflow-y-auto border-r bg-muted/20 p-4">
+            <div className="space-y-5">
+              <div className="space-y-2">
+                <Label htmlFor="funnel-name">Name</Label>
+                <Input
+                  id="funnel-name"
+                  onChange={(event) => setName(event.target.value)}
+                  value={name}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="funnel-description">Description</Label>
+                <Textarea
+                  id="funnel-description"
+                  onChange={(event) => setDescription(event.target.value)}
+                  placeholder="Which mobile flow does this measure?"
+                  value={description}
+                />
+              </div>
+              <div className="space-y-3">
+                {funnelSteps.map((step, index) => (
+                  <Card key={step.key}>
+                    <CardHeader className="flex-row items-center justify-between space-y-0 pb-3">
+                      <CardTitle className="text-sm">Step {index + 1}</CardTitle>
+                      {funnelSteps.length > 2 ? (
+                        <Button
+                          aria-label={`Remove funnel step ${index + 1}`}
+                          onClick={() =>
+                            setFunnelSteps((current) =>
+                              current.filter((candidate) => candidate !== step),
+                            )
+                          }
+                          size="icon"
+                          variant="ghost"
+                        >
+                          <Trash2 size={15} />
+                        </Button>
+                      ) : null}
+                    </CardHeader>
+                    <CardContent>
+                      <Input
+                        aria-label={`Event for funnel step ${index + 1}`}
+                        onChange={(event) => updateFunnelStep(step.key, event.target.value)}
+                        placeholder="Event name"
+                        value={step.eventName}
+                      />
+                    </CardContent>
+                  </Card>
+                ))}
+                <Button
+                  disabled={funnelSteps.length >= 8}
+                  onClick={addFunnelStep}
+                  variant="outline"
+                >
+                  <Plus /> Add step
+                </Button>
+              </div>
+              <div className="space-y-2">
+                <Label>Step order</Label>
+                <Select
+                  onValueChange={(value) => setFunnelOrder(value as typeof funnelOrder)}
+                  value={funnelOrder}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="sequential">Sequential</SelectItem>
+                    <SelectItem value="strict">Strict adjacency</SelectItem>
+                    <SelectItem value="any">Any order</SelectItem>
+                  </SelectContent>
+                </Select>
+                <p className="text-muted-foreground text-xs">
+                  {funnelOrder === "strict"
+                    ? "Each step must be the next event the person performs."
+                    : funnelOrder === "any"
+                      ? "Steps may happen in any sequence within the window."
+                      : "Steps stay ordered, while unrelated events may happen between them."}
+                </p>
+              </div>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Breakdown attribution</CardTitle>
+                  <CardDescription>
+                    Compare funnels by the earliest value seen at a selected step.
+                  </CardDescription>
+                </CardHeader>
+                <CardContent className="space-y-3">
+                  <Select
+                    onValueChange={(value) => setBreakdownMode(value as typeof breakdownMode)}
+                    value={breakdownMode}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="none">No breakdown</SelectItem>
+                      <SelectItem value="event.name">Event name</SelectItem>
+                      <SelectItem value="person.id">Person identity</SelectItem>
+                      <SelectItem value="property">Event property</SelectItem>
+                    </SelectContent>
+                  </Select>
+                  {breakdownMode === "property" ? (
+                    <Input
+                      onChange={(event) => setBreakdownProperty(event.target.value)}
+                      placeholder="Property, e.g. platform"
+                      value={breakdownProperty}
+                    />
+                  ) : null}
+                  {breakdownMode !== "none" ? (
+                    <div className="space-y-2">
+                      <Label>Attribute from step</Label>
+                      <Select
+                        onValueChange={(value) => setFunnelBreakdownAttributionStep(Number(value))}
+                        value={String(Math.min(funnelBreakdownAttributionStep, funnelSteps.length))}
+                      >
+                        <SelectTrigger>
+                          <SelectValue />
+                        </SelectTrigger>
+                        <SelectContent>
+                          {funnelSteps.map((step, index) => (
+                            <SelectItem key={step.key} value={String(index + 1)}>
+                              Step {index + 1}: {step.eventName || "Unnamed event"}
+                            </SelectItem>
+                          ))}
+                        </SelectContent>
+                      </Select>
+                    </div>
+                  ) : null}
+                </CardContent>
+              </Card>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label>Conversion window</Label>
+                  <Select
+                    onValueChange={(value) =>
+                      setFunnelWindowDays(Number(value) as typeof funnelWindowDays)
+                    }
+                    value={String(funnelWindowDays)}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="1">1 day</SelectItem>
+                      <SelectItem value="7">7 days</SelectItem>
+                      <SelectItem value="14">14 days</SelectItem>
+                      <SelectItem value="30">30 days</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+                <div className="space-y-2">
+                  <Label>Range</Label>
+                  <Select
+                    onValueChange={(value) => setTimeRange(value as typeof timeRange)}
+                    value={timeRange}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="last_7d">Last 7 days</SelectItem>
+                      <SelectItem value="last_30d">Last 30 days</SelectItem>
+                      <SelectItem value="last_90d">Last 90 days</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+              </div>
+            </div>
+          </aside>
+          <FunnelPreview
+            onDrilldown={(stepIndex, breakdownValue) => {
+              if (definition.kind !== "funnels") return;
+              const selected = definition.steps[stepIndex];
+              if (!selected) return;
+              const breakdownField = definition.breakdown?.field;
+              openPeopleDrilldown({
+                eventNames: selected.eventNames,
+                filters: selected.filters,
+                ...(breakdownValue !== undefined && breakdownField?.startsWith("event.properties.")
+                  ? {
+                      group: {
+                        property: breakdownField.slice("event.properties.".length),
+                        value: breakdownValue,
+                      },
+                    }
+                  : {}),
+                label: `${selected.label ?? selected.eventNames.join(" or ")} · funnel step ${stepIndex + 1}`,
+              });
+            }}
+            people={queryPeople.data}
+            peopleError={queryPeople.error}
+            peoplePending={queryPeople.isPending}
+            peopleTitle={peopleDrilldownTitle}
+            result={runInsight.data}
+          />
+        </div>
+      ) : kind === "retention" ? (
+        <div className="grid min-h-0 flex-1 lg:grid-cols-[380px_minmax(0,1fr)]">
+          <aside className="overflow-y-auto border-r bg-muted/20 p-4">
+            <div className="space-y-5">
+              <div className="space-y-2">
+                <Label htmlFor="retention-name">Name</Label>
+                <Input
+                  id="retention-name"
+                  onChange={(event) => setName(event.target.value)}
+                  value={name}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="retention-description">Description</Label>
+                <Textarea
+                  id="retention-description"
+                  onChange={(event) => setDescription(event.target.value)}
+                  placeholder="Which returning behavior does this measure?"
+                  value={description}
+                />
+              </div>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Cohort event</CardTitle>
+                </CardHeader>
+                <CardContent>
+                  <Input
+                    onChange={(event) => setRetentionStartEvent(event.target.value)}
+                    placeholder="session_started"
+                    value={retentionStartEvent}
+                  />
+                </CardContent>
+              </Card>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Returning event</CardTitle>
+                </CardHeader>
+                <CardContent>
+                  <Input
+                    onChange={(event) => setRetentionReturningEvent(event.target.value)}
+                    placeholder="session_started"
+                    value={retentionReturningEvent}
+                  />
+                </CardContent>
+              </Card>
+              <div className="space-y-2">
+                <Label>Cohort membership</Label>
+                <Select
+                  onValueChange={(value) => setRetentionType(value as typeof retentionType)}
+                  value={retentionType}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="recurring">Recurring</SelectItem>
+                    <SelectItem value="first_time">First time</SelectItem>
+                  </SelectContent>
+                </Select>
+                <p className="text-muted-foreground text-xs">
+                  {retentionType === "first_time"
+                    ? "A person joins only the cohort of their first matching event."
+                    : "A person can join every period in which they perform the cohort event."}
+                </p>
+              </div>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label>Period</Label>
+                  <Select
+                    onValueChange={(value) => setRetentionPeriod(value as typeof retentionPeriod)}
+                    value={retentionPeriod}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="day">Day</SelectItem>
+                      <SelectItem value="week">Week</SelectItem>
+                      <SelectItem value="month">Month</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+                <div className="space-y-2">
+                  <Label>Intervals</Label>
+                  <Select
+                    onValueChange={(value) =>
+                      setRetentionIntervals(Number(value) as typeof retentionIntervals)
+                    }
+                    value={String(retentionIntervals)}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="7">7</SelectItem>
+                      <SelectItem value="11">11</SelectItem>
+                      <SelectItem value="14">14</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+              </div>
+              <div className="space-y-2">
+                <Label>Rate reference</Label>
+                <Select
+                  onValueChange={(value) =>
+                    setRetentionReference(value as typeof retentionReference)
+                  }
+                  value={retentionReference}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="cohort">Initial cohort</SelectItem>
+                    <SelectItem value="previous">Previous period</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+              <label className="flex items-start gap-3 rounded-lg border p-3 text-sm">
+                <Checkbox
+                  checked={retentionCumulative}
+                  onCheckedChange={(checked) => setRetentionCumulative(checked === true)}
+                />
+                <span>
+                  <span className="block font-medium">Rolling retention</span>
+                  <span className="text-muted-foreground text-xs">
+                    A later return also counts toward earlier intervals.
+                  </span>
+                </span>
+              </label>
+              <div className="space-y-2">
+                <Label>Range</Label>
+                <Select
+                  onValueChange={(value) => setTimeRange(value as typeof timeRange)}
+                  value={timeRange}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="last_7d">Last 7 days</SelectItem>
+                    <SelectItem value="last_30d">Last 30 days</SelectItem>
+                    <SelectItem value="last_90d">Last 90 days</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+            </div>
+          </aside>
+          <RetentionPreview
+            onDrilldown={(interval) => {
+              if (definition.kind !== "retention") return;
+              const selected = interval === 0 ? definition.start : definition.returning;
+              openPeopleDrilldown({
+                eventNames: selected.eventNames,
+                filters: selected.filters,
+                label: `${selected.label ?? selected.eventNames.join(" or ")} · retention interval ${interval}`,
+              });
+            }}
+            people={queryPeople.data}
+            peopleError={queryPeople.error}
+            peoplePending={queryPeople.isPending}
+            peopleTitle={peopleDrilldownTitle}
+            result={runInsight.data}
+          />
+        </div>
+      ) : kind === "paths" ? (
+        <div className="grid min-h-0 flex-1 lg:grid-cols-[380px_minmax(0,1fr)]">
+          <aside className="overflow-y-auto border-r bg-muted/20 p-4">
+            <div className="space-y-5">
+              <div className="space-y-2">
+                <Label htmlFor="paths-name">Name</Label>
+                <Input
+                  id="paths-name"
+                  onChange={(event) => setName(event.target.value)}
+                  value={name}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="paths-description">Description</Label>
+                <Textarea
+                  id="paths-description"
+                  onChange={(event) => setDescription(event.target.value)}
+                  placeholder="Which journey through the app are you exploring?"
+                  value={description}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label>Path steps</Label>
+                <Select
+                  onValueChange={(value) => setPathItem(value as typeof pathItem)}
+                  value={pathItem}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="screen_name">Mobile screen names</SelectItem>
+                    <SelectItem value="event_name">Event names</SelectItem>
+                  </SelectContent>
+                </Select>
+                <p className="text-muted-foreground text-xs">
+                  Screen paths read $screen_name, while event paths use the captured event name.
+                </p>
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="paths-events">Included event names</Label>
+                <Input
+                  id="paths-events"
+                  onChange={(event) => setPathEvents(event.target.value)}
+                  placeholder="$screen, checkout_started (blank means all)"
+                  value={pathEvents}
+                />
+                <p className="text-muted-foreground text-xs">
+                  Separate multiple events with commas.
+                </p>
+              </div>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label htmlFor="paths-start">Start at</Label>
+                  <Input
+                    id="paths-start"
+                    onChange={(event) => setPathStart(event.target.value)}
+                    placeholder="Any step"
+                    value={pathStart}
+                  />
+                </div>
+                <div className="space-y-2">
+                  <Label htmlFor="paths-end">End at</Label>
+                  <Input
+                    id="paths-end"
+                    onChange={(event) => setPathEnd(event.target.value)}
+                    placeholder="Any step"
+                    value={pathEnd}
+                  />
+                </div>
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="paths-excluded">Excluded path items</Label>
+                <Input
+                  id="paths-excluded"
+                  onChange={(event) => setPathExcludedEvents(event.target.value)}
+                  placeholder="app_backgrounded, heartbeat"
+                  value={pathExcludedEvents}
+                />
+              </div>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Event property filter</CardTitle>
+                </CardHeader>
+                <CardContent className="space-y-3">
+                  <Input
+                    onChange={(event) => setFilterProperty(event.target.value)}
+                    placeholder="Property, e.g. platform"
+                    value={filterProperty}
+                  />
+                  <div className="grid grid-cols-[120px_minmax(0,1fr)] gap-2">
+                    <Select
+                      onValueChange={(value) => setFilterOperator(value as typeof filterOperator)}
+                      value={filterOperator}
+                    >
+                      <SelectTrigger>
+                        <SelectValue />
+                      </SelectTrigger>
+                      <SelectContent>
+                        <SelectItem value="eq">Equals</SelectItem>
+                        <SelectItem value="neq">Not equal</SelectItem>
+                        <SelectItem value="contains">Contains</SelectItem>
+                      </SelectContent>
+                    </Select>
+                    <Input
+                      onChange={(event) => setFilterValue(event.target.value)}
+                      placeholder="Value"
+                      value={filterValue}
+                    />
+                  </div>
+                </CardContent>
+              </Card>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label>Visible steps</Label>
+                  <Select
+                    onValueChange={(value) => setPathDepth(Number(value) as typeof pathDepth)}
+                    value={String(pathDepth)}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="3">3 steps</SelectItem>
+                      <SelectItem value="5">5 steps</SelectItem>
+                      <SelectItem value="8">8 steps</SelectItem>
+                      <SelectItem value="12">12 steps</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+                <div className="space-y-2">
+                  <Label>Session gap</Label>
+                  <Select
+                    onValueChange={(value) =>
+                      setPathSessionMinutes(Number(value) as typeof pathSessionMinutes)
+                    }
+                    value={String(pathSessionMinutes)}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="15">15 minutes</SelectItem>
+                      <SelectItem value="30">30 minutes</SelectItem>
+                      <SelectItem value="60">60 minutes</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+              </div>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label htmlFor="paths-min-count">Minimum transitions</Label>
+                  <Input
+                    id="paths-min-count"
+                    min={1}
+                    onChange={(event) => setPathMinCount(event.target.value)}
+                    placeholder="Any"
+                    type="number"
+                    value={pathMinCount}
+                  />
+                </div>
+                <div className="space-y-2">
+                  <Label htmlFor="paths-max-count">Maximum transitions</Label>
+                  <Input
+                    id="paths-max-count"
+                    min={1}
+                    onChange={(event) => setPathMaxCount(event.target.value)}
+                    placeholder="Any"
+                    type="number"
+                    value={pathMaxCount}
+                  />
+                </div>
+              </div>
+              <label className="flex items-start gap-3 rounded-lg border p-3 text-sm">
+                <Checkbox
+                  checked={pathCollapseRepeated}
+                  onCheckedChange={(checked) => setPathCollapseRepeated(checked === true)}
+                />
+                <span>
+                  <span className="block font-medium">Collapse repeated steps</span>
+                  <span className="text-muted-foreground text-xs">
+                    Consecutive visits to the same screen or event become one step.
+                  </span>
+                </span>
+              </label>
+              <div className="space-y-2">
+                <Label>Range</Label>
+                <Select
+                  onValueChange={(value) => setTimeRange(value as typeof timeRange)}
+                  value={timeRange}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="last_7d">Last 7 days</SelectItem>
+                    <SelectItem value="last_30d">Last 30 days</SelectItem>
+                    <SelectItem value="last_90d">Last 90 days</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+            </div>
+          </aside>
+          <PathsPreview
+            onDrilldown={(pathItem) => {
+              if (definition.kind !== "paths") return;
+              const screenFilter: AnalyticsEventSeriesType["filters"] = {
+                field: "event.properties.$screen_name",
+                op: "eq",
+                type: "predicate",
+                value: pathItem,
+              };
+              openPeopleDrilldown({
+                eventNames:
+                  definition.pathItem === "event_name"
+                    ? [pathItem]
+                    : definition.eventNames.length
+                      ? definition.eventNames
+                      : ["$screen"],
+                filters:
+                  definition.pathItem === "event_name"
+                    ? definition.filters
+                    : definition.filters
+                      ? { filters: [definition.filters, screenFilter], type: "and" }
+                      : screenFilter,
+                label: `${pathItem} · path step`,
+              });
+            }}
+            people={queryPeople.data}
+            peopleError={queryPeople.error}
+            peoplePending={queryPeople.isPending}
+            peopleTitle={peopleDrilldownTitle}
+            result={runInsight.data}
+          />
+        </div>
+      ) : kind === "stickiness" ? (
+        <div className="grid min-h-0 flex-1 lg:grid-cols-[380px_minmax(0,1fr)]">
+          <aside className="overflow-y-auto border-r bg-muted/20 p-4">
+            <div className="space-y-5">
+              <div className="space-y-2">
+                <Label htmlFor="stickiness-name">Name</Label>
+                <Input
+                  id="stickiness-name"
+                  onChange={(event) => setName(event.target.value)}
+                  value={name}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="stickiness-description">Description</Label>
+                <Textarea
+                  id="stickiness-description"
+                  onChange={(event) => setDescription(event.target.value)}
+                  placeholder="Which habit or repeated behavior does this measure?"
+                  value={description}
+                />
+              </div>
+              {series.map((item) => (
+                <Card key={item.key}>
+                  <CardHeader className="flex-row items-center justify-between space-y-0 pb-3">
+                    <CardTitle className="text-sm">Series {item.key}</CardTitle>
+                    {series.length > 1 ? (
+                      <Button
+                        aria-label={`Remove series ${item.key}`}
+                        onClick={() =>
+                          setSeries((current) => current.filter((candidate) => candidate !== item))
+                        }
+                        size="icon"
+                        variant="ghost"
+                      >
+                        <Trash2 size={15} />
+                      </Button>
+                    ) : null}
+                  </CardHeader>
+                  <CardContent>
+                    <Input
+                      onChange={(event) =>
+                        updateSeries(item.key, { eventName: event.target.value })
+                      }
+                      placeholder="$screen or session_started"
+                      value={item.eventName}
+                    />
+                  </CardContent>
+                </Card>
+              ))}
+              <Button disabled={series.length >= 8} onClick={addSeries} variant="outline">
+                <Plus /> Add series
+              </Button>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Event property filter</CardTitle>
+                </CardHeader>
+                <CardContent className="space-y-3">
+                  <Input
+                    onChange={(event) => setFilterProperty(event.target.value)}
+                    placeholder="Property, e.g. screen"
+                    value={filterProperty}
+                  />
+                  <div className="grid grid-cols-[120px_minmax(0,1fr)] gap-2">
+                    <Select
+                      onValueChange={(value) => setFilterOperator(value as typeof filterOperator)}
+                      value={filterOperator}
+                    >
+                      <SelectTrigger>
+                        <SelectValue />
+                      </SelectTrigger>
+                      <SelectContent>
+                        <SelectItem value="eq">Equals</SelectItem>
+                        <SelectItem value="neq">Not equal</SelectItem>
+                        <SelectItem value="contains">Contains</SelectItem>
+                      </SelectContent>
+                    </Select>
+                    <Input
+                      onChange={(event) => setFilterValue(event.target.value)}
+                      placeholder="Value"
+                      value={filterValue}
+                    />
+                  </div>
+                </CardContent>
+              </Card>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label>Frequency</Label>
+                  <Select
+                    onValueChange={(value) =>
+                      setStickinessComputation(value as typeof stickinessComputation)
+                    }
+                    value={stickinessComputation}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="exact">Exactly N intervals</SelectItem>
+                      <SelectItem value="cumulative">At least N intervals</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+                <div className="space-y-2">
+                  <Label>Interval</Label>
+                  <Select
+                    onValueChange={(value) =>
+                      setStickinessInterval(value as typeof stickinessInterval)
+                    }
+                    value={stickinessInterval}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="hour">Hour</SelectItem>
+                      <SelectItem value="day">Day</SelectItem>
+                      <SelectItem value="week">Week</SelectItem>
+                      <SelectItem value="month">Month</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="stickiness-minimum">Events per interval</Label>
+                <div className="grid grid-cols-[140px_minmax(0,1fr)] gap-2">
+                  <Select
+                    onValueChange={(value) =>
+                      setStickinessOccurrenceOperator(value as typeof stickinessOccurrenceOperator)
+                    }
+                    value={stickinessOccurrenceOperator}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="gte">At least</SelectItem>
+                      <SelectItem value="exact">Exactly</SelectItem>
+                      <SelectItem value="lte">At most</SelectItem>
+                    </SelectContent>
+                  </Select>
+                  <Input
+                    id="stickiness-minimum"
+                    min={1}
+                    onChange={(event) =>
+                      setStickinessMinimum(Math.max(1, Number(event.target.value) || 1))
+                    }
+                    type="number"
+                    value={stickinessMinimum}
+                  />
+                </div>
+                <p className="text-muted-foreground text-xs">
+                  Count an interval only when the person&apos;s event volume matches this rule.
+                </p>
+              </div>
+              <div className="space-y-2">
+                <Label>Visualization</Label>
+                <Select
+                  onValueChange={(value) => setStickinessDisplay(value as typeof stickinessDisplay)}
+                  value={stickinessDisplay}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="bar">Bar chart</SelectItem>
+                    <SelectItem value="line">Line chart</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+              <div className="space-y-2">
+                <Label>Range</Label>
+                <Select
+                  onValueChange={(value) => setTimeRange(value as typeof timeRange)}
+                  value={timeRange}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="last_7d">Last 7 days</SelectItem>
+                    <SelectItem value="last_30d">Last 30 days</SelectItem>
+                    <SelectItem value="last_90d">Last 90 days</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+            </div>
+          </aside>
+          <StickinessPreview
+            display={stickinessDisplay}
+            onDrilldown={(seriesKey) => {
+              if (definition.kind !== "stickiness") return;
+              const selected = definition.series.find((item) => item.key === seriesKey);
+              if (!selected) return;
+              openPeopleDrilldown({
+                eventNames: selected.eventNames,
+                filters: selected.filters,
+                label: `${selected.label ?? selected.eventNames.join(" or ")} · stickiness`,
+              });
+            }}
+            people={queryPeople.data}
+            peopleError={queryPeople.error}
+            peoplePending={queryPeople.isPending}
+            peopleTitle={peopleDrilldownTitle}
+            result={runInsight.data}
+          />
+        </div>
+      ) : kind === "lifecycle" ? (
+        <div className="grid min-h-0 flex-1 lg:grid-cols-[380px_minmax(0,1fr)]">
+          <aside className="overflow-y-auto border-r bg-muted/20 p-4">
+            <div className="space-y-5">
+              <div className="space-y-2">
+                <Label htmlFor="lifecycle-name">Name</Label>
+                <Input
+                  id="lifecycle-name"
+                  onChange={(event) => setName(event.target.value)}
+                  value={name}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="lifecycle-description">Description</Label>
+                <Textarea
+                  id="lifecycle-description"
+                  onChange={(event) => setDescription(event.target.value)}
+                  placeholder="How is this behavior's active audience changing?"
+                  value={description}
+                />
+              </div>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Lifecycle event</CardTitle>
+                  <CardDescription>
+                    People are classified from their activity for this event.
+                  </CardDescription>
+                </CardHeader>
+                <CardContent>
+                  <Input
+                    onChange={(event) => setLifecycleEvent(event.target.value)}
+                    placeholder="session_started"
+                    value={lifecycleEvent}
+                  />
+                </CardContent>
+              </Card>
+              <div className="grid grid-cols-2 gap-3">
+                <div className="space-y-2">
+                  <Label>Period</Label>
+                  <Select
+                    onValueChange={(value) => setGranularity(value as typeof granularity)}
+                    value={granularity}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="hour">Hour</SelectItem>
+                      <SelectItem value="day">Day</SelectItem>
+                      <SelectItem value="week">Week</SelectItem>
+                      <SelectItem value="month">Month</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+                <div className="space-y-2">
+                  <Label>Visualization</Label>
+                  <Select
+                    onValueChange={(value) => setLifecycleDisplay(value as typeof lifecycleDisplay)}
+                    value={lifecycleDisplay}
+                  >
+                    <SelectTrigger>
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="stacked_area">Stacked area</SelectItem>
+                      <SelectItem value="line">Lines</SelectItem>
+                    </SelectContent>
+                  </Select>
+                </div>
+              </div>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Visible groups</CardTitle>
+                </CardHeader>
+                <CardContent className="grid grid-cols-2 gap-3">
+                  {(["new", "returning", "resurrecting", "dormant"] as const).map((status) => (
+                    <label className="flex items-center gap-2 text-sm capitalize" key={status}>
+                      <Checkbox
+                        checked={lifecycleStatuses.includes(status)}
+                        onCheckedChange={(checked) =>
+                          setLifecycleStatuses((current) =>
+                            checked === true
+                              ? current.includes(status)
+                                ? current
+                                : [...current, status]
+                              : current.length > 1
+                                ? current.filter((candidate) => candidate !== status)
+                                : current,
+                          )
+                        }
+                      />
+                      {status}
+                    </label>
+                  ))}
+                </CardContent>
+              </Card>
+              <div className="space-y-2">
+                <Label>Values</Label>
+                <Select
+                  onValueChange={(value) =>
+                    setLifecycleValueMode(value as typeof lifecycleValueMode)
+                  }
+                  value={lifecycleValueMode}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="count">People</SelectItem>
+                    <SelectItem value="percentage">Percentage of lifecycle movement</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+              <Card>
+                <CardHeader className="pb-3">
+                  <CardTitle className="text-sm">Event property filter</CardTitle>
+                </CardHeader>
+                <CardContent className="space-y-3">
+                  <Input
+                    onChange={(event) => setFilterProperty(event.target.value)}
+                    placeholder="Property, e.g. platform"
+                    value={filterProperty}
+                  />
+                  <div className="grid grid-cols-[120px_minmax(0,1fr)] gap-2">
+                    <Select
+                      onValueChange={(value) => setFilterOperator(value as typeof filterOperator)}
+                      value={filterOperator}
+                    >
+                      <SelectTrigger>
+                        <SelectValue />
+                      </SelectTrigger>
+                      <SelectContent>
+                        <SelectItem value="eq">Equals</SelectItem>
+                        <SelectItem value="neq">Not equal</SelectItem>
+                        <SelectItem value="contains">Contains</SelectItem>
+                      </SelectContent>
+                    </Select>
+                    <Input
+                      onChange={(event) => setFilterValue(event.target.value)}
+                      placeholder="Value"
+                      value={filterValue}
+                    />
+                  </div>
+                </CardContent>
+              </Card>
+              <div className="space-y-2">
+                <Label>Range</Label>
+                <Select
+                  onValueChange={(value) => setTimeRange(value as typeof timeRange)}
+                  value={timeRange}
+                >
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="last_7d">Last 7 days</SelectItem>
+                    <SelectItem value="last_30d">Last 30 days</SelectItem>
+                    <SelectItem value="last_90d">Last 90 days</SelectItem>
+                  </SelectContent>
+                </Select>
+              </div>
+            </div>
+          </aside>
+          <LifecyclePreview
+            display={lifecycleDisplay}
+            onDrilldown={() => {
+              if (definition.kind !== "lifecycle") return;
+              openPeopleDrilldown({
+                eventNames: definition.series.eventNames,
+                filters: definition.series.filters,
+                label: definition.series.label ?? definition.series.eventNames.join(" or "),
+              });
+            }}
+            people={queryPeople.data}
+            peopleError={queryPeople.error}
+            peoplePending={queryPeople.isPending}
+            peopleTitle={peopleDrilldownTitle}
+            result={runInsight.data}
+            valueMode={lifecycleValueMode}
+          />
+        </div>
+      ) : (
+        <div className="flex flex-1 items-center justify-center p-8">
+          <Card className="max-w-xl">
+            <CardHeader>
+              <CardTitle>{insightTypes.find((type) => type.kind === kind)?.label}</CardTitle>
+              <CardDescription>
+                The typed definition and persistence model for this insight are in place. Query
+                execution and its dedicated mobile-first controls are the next implementation slice.
+              </CardDescription>
+            </CardHeader>
+          </Card>
+        </div>
+      )}
+    </Page>
+  );
+}
+
+function PeopleDrilldown({
+  error,
+  pending,
+  result,
+  title,
+}: {
+  error: unknown;
+  pending: boolean;
+  result?: QueryCustomAnalyticsPersonsResponseType;
+  title: string;
+}) {
+  if (!pending && !error && !result) return null;
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>People · {title || "selected result"}</CardTitle>
+        <CardDescription>
+          {pending
+            ? "Loading matching people…"
+            : result
+              ? `${result.people.length} matching people shown, ordered by recent activity.`
+              : "The people drilldown could not be loaded."}
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        {error ? (
+          <div className="rounded-lg border border-destructive/30 bg-destructive/5 p-3 text-destructive text-sm">
+            {error instanceof Error ? error.message : "Unable to query matching people"}
+          </div>
+        ) : result?.people.length ? (
+          <div className="divide-y rounded-lg border">
+            {result.people.map((person) => (
+              <div
+                className="grid gap-1 px-3 py-2 text-sm sm:grid-cols-[minmax(0,1fr)_auto_auto] sm:items-center sm:gap-4"
+                key={person.personId}
+              >
+                <div className="min-w-0">
+                  <p className="truncate font-medium">
+                    {person.name || person.email || person.personId}
+                  </p>
+                  <p className="truncate text-muted-foreground text-xs">{person.personId}</p>
+                </div>
+                <span className="text-muted-foreground tabular-nums">
+                  {person.eventCount.toLocaleString()} events
+                </span>
+                <span className="text-muted-foreground text-xs">
+                  {person.lastSeenAt.toLocaleString()}
+                </span>
+              </div>
+            ))}
+          </div>
+        ) : pending ? null : (
+          <div className="rounded-lg border border-dashed p-6 text-center text-muted-foreground text-sm">
+            No identified people matched this segment.
+          </div>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
+
+function InsightPreview({
+  display,
+  onDrilldown,
+  people,
+  peopleError,
+  peoplePending,
+  peopleTitle,
+  result,
+  sourceSeriesKeys,
+}: {
+  display: "area" | "bar" | "line" | "number";
+  onDrilldown: (seriesKey: string) => void;
+  people?: QueryCustomAnalyticsPersonsResponseType;
+  peopleError: unknown;
+  peoplePending: boolean;
+  peopleTitle: string;
+  result?: QueryCustomAnalyticsInsightResponseType;
+  sourceSeriesKeys: readonly string[];
+}) {
+  const trendsResult = result?.kind === "trends" ? result : undefined;
+  const palette = [
+    "var(--chart-1)",
+    "var(--chart-2)",
+    "var(--chart-3)",
+    "var(--chart-4)",
+    "var(--chart-5)",
+  ];
+  const pointsByDate = new Map<string, Record<string, number | string>>();
+  for (const series of trendsResult?.series ?? []) {
+    for (const point of series.points) {
+      const date = point.timestamp.toISOString();
+      const row = pointsByDate.get(date) ?? { date };
+      row[series.key] = point.value;
+      pointsByDate.set(date, row);
+    }
+  }
+  const points = [...pointsByDate.values()].sort((left, right) =>
+    String(left.date).localeCompare(String(right.date)),
+  );
+  const colorByBaseKey = new Map<string, string>();
+  const seriesColors = new Map<string, string>();
+  for (const series of trendsResult?.series ?? []) {
+    const baseKey = series.key.split(":comparison:")[0] ?? series.key;
+    const color =
+      colorByBaseKey.get(baseKey) ??
+      palette[colorByBaseKey.size % palette.length] ??
+      "var(--chart-1)";
+    colorByBaseKey.set(baseKey, color);
+    seriesColors.set(series.key, color);
+  }
+  const config = Object.fromEntries(
+    (trendsResult?.series ?? []).map((series) => [
+      series.key,
+      { color: seriesColors.get(series.key) ?? "var(--chart-1)", label: series.label },
+    ]),
+  ) satisfies ChartConfig;
+
+  return (
+    <main className="min-w-0 space-y-4 overflow-y-auto p-4 lg:p-6">
+      <Card className="min-h-[480px]">
+        <CardHeader>
+          <CardTitle>Trend preview</CardTitle>
+          <CardDescription>
+            {trendsResult
+              ? display === "number"
+                ? `${trendsResult.series.length} total value${trendsResult.series.length === 1 ? "" : "s"} returned`
+                : `${points.length} time buckets returned${trendsResult.comparisonTimeRange ? " with a comparison overlay" : ""}`
+              : "Run the insight to preview real project data."}
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          {display === "number" && trendsResult?.series.some((series) => series.points.length) ? (
+            <div className="grid gap-3 sm:grid-cols-2 xl:grid-cols-3">
+              {trendsResult.series.map((series) => (
+                <div className="rounded-xl border bg-muted/20 p-5" key={series.key}>
+                  <p className="truncate text-muted-foreground text-sm">{series.label}</p>
+                  <p className="mt-2 font-semibold text-3xl tabular-nums tracking-tight">
+                    {(series.points[0]?.value ?? 0).toLocaleString(undefined, {
+                      maximumFractionDigits: 2,
+                    })}
+                  </p>
+                </div>
+              ))}
+            </div>
+          ) : points.length ? (
+            <ChartContainer className="h-[360px] w-full" config={config}>
+              {display === "bar" ? (
+                <BarChart accessibilityLayer data={points} margin={{ left: 8, right: 20 }}>
+                  <CartesianGrid vertical={false} />
+                  <XAxis
+                    axisLine={false}
+                    dataKey="date"
+                    tickFormatter={(value: string) =>
+                      new Date(value).toLocaleDateString(undefined, {
+                        day: "numeric",
+                        month: "short",
+                      })
+                    }
+                    tickLine={false}
+                    tickMargin={10}
+                  />
+                  <YAxis axisLine={false} tickLine={false} width={42} />
+                  <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+                  {(trendsResult?.series ?? []).map((series) => (
+                    <Bar
+                      dataKey={series.key}
+                      fill={seriesColors.get(series.key) ?? "var(--chart-1)"}
+                      fillOpacity={
+                        series.comparison && series.comparison !== "current" ? 0.4 : 0.85
+                      }
+                      key={series.key}
+                      radius={3}
+                    />
+                  ))}
+                </BarChart>
+              ) : display === "area" ? (
+                <AreaChart accessibilityLayer data={points} margin={{ left: 8, right: 20 }}>
+                  <CartesianGrid vertical={false} />
+                  <XAxis
+                    axisLine={false}
+                    dataKey="date"
+                    tickFormatter={(value: string) =>
+                      new Date(value).toLocaleDateString(undefined, {
+                        day: "numeric",
+                        month: "short",
+                      })
+                    }
+                    tickLine={false}
+                    tickMargin={10}
+                  />
+                  <YAxis axisLine={false} tickLine={false} width={42} />
+                  <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+                  {(trendsResult?.series ?? []).map((series) => (
+                    <Area
+                      dataKey={series.key}
+                      fill={seriesColors.get(series.key) ?? "var(--chart-1)"}
+                      fillOpacity={
+                        series.comparison && series.comparison !== "current" ? 0.08 : 0.18
+                      }
+                      key={series.key}
+                      stroke={seriesColors.get(series.key) ?? "var(--chart-1)"}
+                      strokeDasharray={
+                        series.comparison && series.comparison !== "current" ? "6 5" : undefined
+                      }
+                      strokeWidth={2}
+                      type="monotone"
+                    />
+                  ))}
+                </AreaChart>
+              ) : (
+                <LineChart accessibilityLayer data={points} margin={{ left: 8, right: 20 }}>
+                  <CartesianGrid vertical={false} />
+                  <XAxis
+                    axisLine={false}
+                    dataKey="date"
+                    tickFormatter={(value: string) =>
+                      new Date(value).toLocaleDateString(undefined, {
+                        day: "numeric",
+                        month: "short",
+                      })
+                    }
+                    tickLine={false}
+                    tickMargin={10}
+                  />
+                  <YAxis axisLine={false} tickLine={false} width={42} />
+                  <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+                  {(trendsResult?.series ?? []).map((series) => (
+                    <Line
+                      dataKey={series.key}
+                      dot={false}
+                      key={series.key}
+                      stroke={seriesColors.get(series.key) ?? "var(--chart-1)"}
+                      strokeDasharray={
+                        series.comparison && series.comparison !== "current" ? "6 5" : undefined
+                      }
+                      strokeWidth={2.5}
+                      type="monotone"
+                    />
+                  ))}
+                </LineChart>
+              )}
+            </ChartContainer>
+          ) : (
+            <div className="flex h-[360px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+              <div>
+                <ChartSpline className="mx-auto text-muted-foreground" />
+                <p className="mt-3 text-sm">Your trend will appear here</p>
+              </div>
+            </div>
+          )}
+          {trendsResult ? (
+            <div className="mt-4 flex flex-wrap gap-2 border-t pt-4">
+              {sourceSeriesKeys.map((key) => {
+                const selected = trendsResult.series.find(
+                  (item) => item.key === key && (!item.comparison || item.comparison === "current"),
+                );
+                return (
+                  <Button key={key} onClick={() => onDrilldown(key)} size="sm" variant="outline">
+                    View people · {selected?.label ?? key}
+                  </Button>
+                );
+              })}
+            </div>
+          ) : null}
+        </CardContent>
+      </Card>
+      <PeopleDrilldown
+        error={peopleError}
+        pending={peoplePending}
+        result={people}
+        title={peopleTitle}
+      />
+    </main>
+  );
+}
+
+function FunnelPreview({
+  onDrilldown,
+  people,
+  peopleError,
+  peoplePending,
+  peopleTitle,
+  result,
+}: {
+  onDrilldown: (stepIndex: number, breakdownValue?: string) => void;
+  people?: QueryCustomAnalyticsPersonsResponseType;
+  peopleError: unknown;
+  peoplePending: boolean;
+  peopleTitle: string;
+  result?: QueryCustomAnalyticsInsightResponseType;
+}) {
+  const funnelResult = result?.kind === "funnels" ? result : undefined;
+  const [selectedBreakdownKey, setSelectedBreakdownKey] = useState("overall");
+  const selectedBreakdown = funnelResult?.breakdowns?.find(
+    (group) => `group:${group.breakdownValue}` === selectedBreakdownKey,
+  );
+  const displayedSteps = selectedBreakdown?.steps ?? funnelResult?.steps;
+  const displayedConversionRate =
+    selectedBreakdown?.totalConversionRate ?? funnelResult?.totalConversionRate;
+  return (
+    <main className="min-w-0 space-y-4 overflow-y-auto p-4 lg:p-6">
+      <Card className="min-h-[480px]">
+        <CardHeader>
+          <CardTitle>Funnel preview</CardTitle>
+          <CardDescription>
+            {funnelResult
+              ? `${((displayedConversionRate ?? 0) * 100).toFixed(1)}% completed every step`
+              : "Run the funnel to measure conversion and drop-off."}
+          </CardDescription>
+        </CardHeader>
+        <CardContent className="space-y-3">
+          {funnelResult?.breakdowns?.length ? (
+            <div className="mb-4 grid gap-3 md:grid-cols-[minmax(0,280px)_1fr] md:items-end">
+              <div className="space-y-2">
+                <Label>Breakdown group</Label>
+                <Select onValueChange={setSelectedBreakdownKey} value={selectedBreakdownKey}>
+                  <SelectTrigger>
+                    <SelectValue />
+                  </SelectTrigger>
+                  <SelectContent>
+                    <SelectItem value="overall">All people</SelectItem>
+                    {funnelResult.breakdowns.map((group) => (
+                      <SelectItem
+                        key={group.breakdownValue}
+                        value={`group:${group.breakdownValue}`}
+                      >
+                        {group.breakdownValue || "(empty)"}
+                      </SelectItem>
+                    ))}
+                  </SelectContent>
+                </Select>
+              </div>
+              <div className="grid grid-cols-2 gap-2 text-sm">
+                {funnelResult.breakdowns.slice(0, 4).map((group) => (
+                  <button
+                    className="rounded-lg border px-3 py-2 text-left hover:bg-muted/40"
+                    key={group.breakdownValue}
+                    onClick={() => setSelectedBreakdownKey(`group:${group.breakdownValue}`)}
+                    type="button"
+                  >
+                    <span className="block truncate text-muted-foreground text-xs">
+                      {group.breakdownValue || "(empty)"}
+                    </span>
+                    <span className="font-medium tabular-nums">
+                      {(group.totalConversionRate * 100).toFixed(1)}%
+                    </span>
+                  </button>
+                ))}
+              </div>
+            </div>
+          ) : null}
+          {displayedSteps?.length ? (
+            displayedSteps.map((step) => (
+              <div className="rounded-xl border p-4" key={step.key}>
+                <div className="mb-3 flex items-start justify-between gap-4">
+                  <div>
+                    <p className="font-medium text-sm">
+                      {step.step}. {step.label}
+                    </p>
+                    <p className="mt-1 text-muted-foreground text-xs">
+                      {step.count.toLocaleString()} people reached this step
+                    </p>
+                  </div>
+                  <span className="font-semibold text-lg tabular-nums">
+                    {(step.conversionRate * 100).toFixed(1)}%
+                  </span>
+                  <Button
+                    onClick={() => onDrilldown(step.step - 1, selectedBreakdown?.breakdownValue)}
+                    size="sm"
+                    variant="outline"
+                  >
+                    View people
+                  </Button>
+                </div>
+                <div className="h-3 overflow-hidden rounded-full bg-muted">
+                  <div
+                    className="h-full rounded-full bg-violet-500 transition-[width]"
+                    style={{ width: `${Math.max(1, step.conversionRate * 100)}%` }}
+                  />
+                </div>
+                {step.step > 1 ? (
+                  <p className="mt-2 text-muted-foreground text-xs">
+                    {step.dropoffCount.toLocaleString()} dropped off (
+                    {(step.dropoffRate * 100).toFixed(1)}% from the previous step)
+                  </p>
+                ) : null}
+              </div>
+            ))
+          ) : (
+            <div className="flex h-[360px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+              <div>
+                <Filter className="mx-auto text-muted-foreground" />
+                <p className="mt-3 text-sm">Your conversion funnel will appear here</p>
+              </div>
+            </div>
+          )}
+        </CardContent>
+      </Card>
+      <PeopleDrilldown
+        error={peopleError}
+        pending={peoplePending}
+        result={people}
+        title={peopleTitle}
+      />
+    </main>
+  );
+}
+
+function RetentionPreview({
+  onDrilldown,
+  people,
+  peopleError,
+  peoplePending,
+  peopleTitle,
+  result,
+}: {
+  onDrilldown: (interval: number) => void;
+  people?: QueryCustomAnalyticsPersonsResponseType;
+  peopleError: unknown;
+  peoplePending: boolean;
+  peopleTitle: string;
+  result?: QueryCustomAnalyticsInsightResponseType;
+}) {
+  const retentionResult = result?.kind === "retention" ? result : undefined;
+  const intervals = retentionResult?.cohorts[0]?.cells.map((cell) => cell.interval) ?? [];
+  return (
+    <main className="min-w-0 space-y-4 overflow-y-auto p-4 lg:p-6">
+      <Card className="min-h-[480px]">
+        <CardHeader>
+          <CardTitle>Retention cohorts</CardTitle>
+          <CardDescription>
+            {retentionResult
+              ? `${retentionResult.cohorts.length} cohorts grouped by ${retentionResult.period}`
+              : "Run retention to see how people return after joining a cohort."}
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          {retentionResult?.cohorts.length ? (
+            <div className="overflow-x-auto">
+              <div className="min-w-max">
+                <div className="mb-2 grid grid-flow-col grid-cols-[140px_90px] auto-cols-[76px] gap-1 text-center text-muted-foreground text-xs">
+                  <span className="text-left">Cohort</span>
+                  <span>People</span>
+                  {intervals.map((interval) => (
+                    <span key={interval}>{interval}</span>
+                  ))}
+                </div>
+                <div className="space-y-1">
+                  {retentionResult.cohorts.map((cohort) => (
+                    <div
+                      className="grid grid-flow-col grid-cols-[140px_90px] auto-cols-[76px] gap-1"
+                      key={cohort.cohortStart.toISOString()}
+                    >
+                      <div className="flex items-center text-sm">
+                        {cohort.cohortStart.toLocaleDateString(undefined, {
+                          day: "numeric",
+                          month: "short",
+                          year: "numeric",
+                        })}
+                      </div>
+                      <div className="flex items-center justify-center rounded-md bg-muted px-2 text-sm tabular-nums">
+                        {cohort.cohortSize.toLocaleString()}
+                      </div>
+                      {cohort.cells.map((cell) => (
+                        <button
+                          className={`flex h-12 items-center justify-center rounded-md text-xs font-medium tabular-nums ${cell.rate > 0.55 ? "text-white" : "text-foreground"}`}
+                          key={cell.interval}
+                          onClick={() => onDrilldown(cell.interval)}
+                          style={{
+                            backgroundColor: `rgba(14, 165, 233, ${Math.max(0.08, cell.rate)})`,
+                          }}
+                          title={`${cell.count.toLocaleString()} people`}
+                          type="button"
+                        >
+                          {(cell.rate * 100).toFixed(1)}%
+                        </button>
+                      ))}
+                    </div>
+                  ))}
+                </div>
+              </div>
+            </div>
+          ) : (
+            <div className="flex h-[360px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+              <div>
+                <Repeat2 className="mx-auto text-muted-foreground" />
+                <p className="mt-3 text-sm">Your retention matrix will appear here</p>
+              </div>
+            </div>
+          )}
+        </CardContent>
+      </Card>
+      <PeopleDrilldown
+        error={peopleError}
+        pending={peoplePending}
+        result={people}
+        title={peopleTitle}
+      />
+    </main>
+  );
+}
+
+function PathsPreview({
+  onDrilldown,
+  people,
+  peopleError,
+  peoplePending,
+  peopleTitle,
+  result,
+}: {
+  onDrilldown: (pathItem: string) => void;
+  people?: QueryCustomAnalyticsPersonsResponseType;
+  peopleError: unknown;
+  peoplePending: boolean;
+  peopleTitle: string;
+  result?: QueryCustomAnalyticsInsightResponseType;
+}) {
+  const pathsResult = result?.kind === "paths" ? result : undefined;
+  const nodes = new Map<
+    string,
+    { incoming: number; label: string; outgoing: number; step: number }
+  >();
+  for (const link of pathsResult?.links ?? []) {
+    const sourceKey = `${link.sourceStep}:${link.source}`;
+    const source = nodes.get(sourceKey) ?? {
+      incoming: 0,
+      label: link.source,
+      outgoing: 0,
+      step: link.sourceStep,
+    };
+    source.outgoing += link.count;
+    nodes.set(sourceKey, source);
+    const targetKey = `${link.targetStep}:${link.target}`;
+    const target = nodes.get(targetKey) ?? {
+      incoming: 0,
+      label: link.target,
+      outgoing: 0,
+      step: link.targetStep,
+    };
+    target.incoming += link.count;
+    nodes.set(targetKey, target);
+  }
+  const steps = [...new Set([...nodes.values()].map((node) => node.step))].sort(
+    (left, right) => left - right,
+  );
+  const maxCount = Math.max(
+    1,
+    ...[...nodes.values()].map((node) => Math.max(node.incoming, node.outgoing)),
+  );
+  const formatSeconds = (seconds: number) =>
+    seconds < 60
+      ? `${seconds.toFixed(seconds < 10 ? 1 : 0)}s`
+      : seconds < 3_600
+        ? `${(seconds / 60).toFixed(1)}m`
+        : `${(seconds / 3_600).toFixed(1)}h`;
+
+  return (
+    <main className="min-w-0 space-y-4 overflow-y-auto p-4 lg:p-6">
+      <Card className="min-h-[480px]">
+        <CardHeader>
+          <CardTitle>User journey paths</CardTitle>
+          <CardDescription>
+            {pathsResult
+              ? `${pathsResult.links.length} common transitions across ${steps.length} visible steps`
+              : "Run Paths to discover the routes people take through your app."}
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          {pathsResult?.links.length ? (
+            <div className="space-y-8">
+              <div className="overflow-x-auto pb-2">
+                <div className="flex min-w-max items-start gap-5">
+                  {steps.map((step, stepIndex) => (
+                    <div className="flex items-start gap-5" key={step}>
+                      <div className="w-52 space-y-2">
+                        <p className="px-1 font-medium text-muted-foreground text-xs uppercase tracking-wide">
+                          Step {step}
+                        </p>
+                        {[...nodes.values()]
+                          .filter((node) => node.step === step)
+                          .sort(
+                            (left, right) =>
+                              Math.max(right.incoming, right.outgoing) -
+                              Math.max(left.incoming, left.outgoing),
+                          )
+                          .map((node) => {
+                            const count = Math.max(node.incoming, node.outgoing);
+                            return (
+                              <button
+                                className="relative block w-full overflow-hidden rounded-lg border bg-background p-3 text-left hover:border-foreground/30"
+                                key={`${node.step}:${node.label}`}
+                                onClick={() => onDrilldown(node.label)}
+                                type="button"
+                              >
+                                <div
+                                  className="absolute inset-y-0 left-0 bg-emerald-500/10"
+                                  style={{ width: `${Math.max(4, (count / maxCount) * 100)}%` }}
+                                />
+                                <div className="relative flex items-center justify-between gap-3">
+                                  <span className="truncate font-medium text-sm" title={node.label}>
+                                    {node.label}
+                                  </span>
+                                  <span className="shrink-0 text-muted-foreground text-xs tabular-nums">
+                                    {count.toLocaleString()}
+                                  </span>
+                                </div>
+                              </button>
+                            );
+                          })}
+                      </div>
+                      {stepIndex < steps.length - 1 ? (
+                        <GitBranch className="mt-12 text-emerald-500/50" size={18} />
+                      ) : null}
+                    </div>
+                  ))}
+                </div>
+              </div>
+              <div>
+                <h3 className="mb-3 font-medium text-sm">Top transitions</h3>
+                <div className="grid gap-2 xl:grid-cols-2">
+                  {pathsResult.links.slice(0, 12).map((link) => (
+                    <div
+                      className="flex items-center justify-between gap-4 rounded-lg border px-3 py-2"
+                      key={`${link.sourceStep}:${link.source}:${link.targetStep}:${link.target}`}
+                    >
+                      <div className="min-w-0 text-sm">
+                        <span className="font-medium">{link.source}</span>
+                        <span className="px-2 text-muted-foreground">→</span>
+                        <span className="font-medium">{link.target}</span>
+                        <p className="mt-0.5 text-muted-foreground text-xs">
+                          Average {formatSeconds(link.averageTransitionSeconds)}
+                        </p>
+                      </div>
+                      <span className="shrink-0 font-semibold tabular-nums">
+                        {link.count.toLocaleString()}
+                      </span>
+                    </div>
+                  ))}
+                </div>
+              </div>
+            </div>
+          ) : (
+            <div className="flex h-[360px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+              <div>
+                <GitBranch className="mx-auto text-muted-foreground" />
+                <p className="mt-3 text-sm">Your most common user journeys will appear here</p>
+              </div>
+            </div>
+          )}
+        </CardContent>
+      </Card>
+      <PeopleDrilldown
+        error={peopleError}
+        pending={peoplePending}
+        result={people}
+        title={peopleTitle}
+      />
+    </main>
+  );
+}
+
+function StickinessPreview({
+  display,
+  onDrilldown,
+  people,
+  peopleError,
+  peoplePending,
+  peopleTitle,
+  result,
+}: {
+  display: "bar" | "line";
+  onDrilldown: (seriesKey: string) => void;
+  people?: QueryCustomAnalyticsPersonsResponseType;
+  peopleError: unknown;
+  peoplePending: boolean;
+  peopleTitle: string;
+  result?: QueryCustomAnalyticsInsightResponseType;
+}) {
+  const stickinessResult = result?.kind === "stickiness" ? result : undefined;
+  const palette = ["var(--chart-1)", "var(--chart-2)", "var(--chart-3)", "var(--chart-4)"];
+  const rows = new Map<number, Record<string, number>>();
+  for (const series of stickinessResult?.series ?? []) {
+    for (const bucket of series.buckets) {
+      const row = rows.get(bucket.intervals) ?? { intervals: bucket.intervals };
+      row[series.key] = bucket.count;
+      rows.set(bucket.intervals, row);
+    }
+  }
+  const data = [...rows.values()].sort((left, right) => left.intervals - right.intervals);
+  const config = Object.fromEntries(
+    (stickinessResult?.series ?? []).map((series, index) => [
+      series.key,
+      { color: palette[index % palette.length] ?? "var(--chart-1)", label: series.label },
+    ]),
+  ) satisfies ChartConfig;
+
+  return (
+    <main className="min-w-0 space-y-4 overflow-y-auto p-4 lg:p-6">
+      <Card className="min-h-[480px]">
+        <CardHeader>
+          <CardTitle>Stickiness distribution</CardTitle>
+          <CardDescription>
+            {stickinessResult
+              ? `${stickinessResult.computation === "cumulative" ? "People active in at least" : "People active in exactly"} N ${stickinessResult.interval} intervals`
+              : "Run Stickiness to see how frequently people repeat the selected behavior."}
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          {data.length ? (
+            <ChartContainer className="h-[360px] w-full" config={config}>
+              {display === "line" ? (
+                <LineChart accessibilityLayer data={data} margin={{ left: 8, right: 20 }}>
+                  <CartesianGrid vertical={false} />
+                  <XAxis axisLine={false} dataKey="intervals" tickLine={false} tickMargin={10} />
+                  <YAxis axisLine={false} allowDecimals={false} tickLine={false} width={42} />
+                  <ChartTooltip content={<ChartTooltipContent />} cursor={false} />
+                  {(stickinessResult?.series ?? []).map((series, index) => (
+                    <Line
+                      dataKey={series.key}
+                      dot={false}
+                      key={series.key}
+                      stroke={palette[index % palette.length] ?? "var(--chart-1)"}
+                      strokeWidth={2.5}
+                      type="monotone"
+                    />
+                  ))}
+                </LineChart>
+              ) : (
+                <BarChart accessibilityLayer data={data} margin={{ left: 8, right: 20 }}>
+                  <CartesianGrid vertical={false} />
+                  <XAxis axisLine={false} dataKey="intervals" tickLine={false} tickMargin={10} />
+                  <YAxis axisLine={false} allowDecimals={false} tickLine={false} width={42} />
+                  <ChartTooltip content={<ChartTooltipContent />} cursor={false} />
+                  {(stickinessResult?.series ?? []).map((series, index) => (
+                    <Bar
+                      dataKey={series.key}
+                      fill={palette[index % palette.length] ?? "var(--chart-1)"}
+                      key={series.key}
+                      radius={[4, 4, 0, 0]}
+                    />
+                  ))}
+                </BarChart>
+              )}
+            </ChartContainer>
+          ) : (
+            <div className="flex h-[360px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+              <div>
+                <Activity className="mx-auto text-muted-foreground" />
+                <p className="mt-3 text-sm">Your frequency distribution will appear here</p>
+              </div>
+            </div>
+          )}
+          {stickinessResult ? (
+            <div className="mt-4 flex flex-wrap gap-2 border-t pt-4">
+              {stickinessResult.series.map((series) => (
+                <Button
+                  key={series.key}
+                  onClick={() => onDrilldown(series.key)}
+                  size="sm"
+                  variant="outline"
+                >
+                  View people · {series.label}
+                </Button>
+              ))}
+            </div>
+          ) : null}
+        </CardContent>
+      </Card>
+      <PeopleDrilldown
+        error={peopleError}
+        pending={peoplePending}
+        result={people}
+        title={peopleTitle}
+      />
+    </main>
+  );
+}
+
+function LifecyclePreview({
+  display,
+  onDrilldown,
+  people,
+  peopleError,
+  peoplePending,
+  peopleTitle,
+  result,
+  valueMode,
+}: {
+  display: "line" | "stacked_area";
+  onDrilldown: () => void;
+  people?: QueryCustomAnalyticsPersonsResponseType;
+  peopleError: unknown;
+  peoplePending: boolean;
+  peopleTitle: string;
+  result?: QueryCustomAnalyticsInsightResponseType;
+  valueMode: "count" | "percentage";
+}) {
+  const lifecycleResult = result?.kind === "lifecycle" ? result : undefined;
+  const colors = {
+    dormant: "var(--chart-5)",
+    new: "var(--chart-2)",
+    resurrecting: "var(--chart-3)",
+    returning: "var(--chart-1)",
+  } as const;
+  const rows = new Map<string, Record<string, number | string>>();
+  for (const series of lifecycleResult?.series ?? []) {
+    for (const point of series.points) {
+      const date = point.timestamp.toISOString();
+      const row = rows.get(date) ?? { date };
+      row[series.status] = series.status === "dormant" ? -point.count : point.count;
+      rows.set(date, row);
+    }
+  }
+  const data = [...rows.values()]
+    .sort((left, right) => String(left.date).localeCompare(String(right.date)))
+    .map((row) => {
+      if (valueMode === "count") return row;
+      const statuses = lifecycleResult?.series.map((series) => series.status) ?? [];
+      const total = statuses.reduce((sum, status) => {
+        const value = row[status];
+        return sum + Math.abs(typeof value === "number" ? value : 0);
+      }, 0);
+      return Object.fromEntries(
+        Object.entries(row).map(([key, value]) => [
+          key,
+          key === "date" || typeof value !== "number" || total === 0
+            ? value
+            : (value / total) * 100,
+        ]),
+      );
+    });
+  const config = Object.fromEntries(
+    (lifecycleResult?.series ?? []).map((series) => [
+      series.status,
+      { color: colors[series.status], label: series.status },
+    ]),
+  ) satisfies ChartConfig;
+
+  return (
+    <main className="min-w-0 space-y-4 overflow-y-auto p-4 lg:p-6">
+      <Card className="min-h-[480px]">
+        <CardHeader>
+          <CardTitle>Behavior lifecycle</CardTitle>
+          <CardDescription>
+            {lifecycleResult
+              ? `Audience movement grouped by ${lifecycleResult.granularity}`
+              : "Run Lifecycle to separate growth, engagement, resurrection, and dormancy."}
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          {data.length ? (
+            <ChartContainer className="h-[360px] w-full" config={config}>
+              {display === "line" ? (
+                <LineChart accessibilityLayer data={data} margin={{ left: 8, right: 20 }}>
+                  <CartesianGrid vertical={false} />
+                  <XAxis
+                    axisLine={false}
+                    dataKey="date"
+                    tickFormatter={(value: string) =>
+                      new Date(value).toLocaleDateString(undefined, {
+                        day: "numeric",
+                        month: "short",
+                      })
+                    }
+                    tickLine={false}
+                    tickMargin={10}
+                  />
+                  <YAxis
+                    axisLine={false}
+                    allowDecimals={valueMode === "percentage"}
+                    tickFormatter={(value: number) =>
+                      valueMode === "percentage" ? `${value}%` : String(value)
+                    }
+                    tickLine={false}
+                    width={48}
+                  />
+                  <ChartTooltip content={<ChartTooltipContent />} cursor={false} />
+                  {(lifecycleResult?.series ?? []).map((series) => (
+                    <Line
+                      dataKey={series.status}
+                      dot={false}
+                      key={series.status}
+                      stroke={colors[series.status]}
+                      strokeWidth={2.5}
+                      type="monotone"
+                    />
+                  ))}
+                </LineChart>
+              ) : (
+                <AreaChart
+                  accessibilityLayer
+                  data={data}
+                  margin={{ left: 8, right: 20 }}
+                  stackOffset="sign"
+                >
+                  <CartesianGrid vertical={false} />
+                  <XAxis
+                    axisLine={false}
+                    dataKey="date"
+                    tickFormatter={(value: string) =>
+                      new Date(value).toLocaleDateString(undefined, {
+                        day: "numeric",
+                        month: "short",
+                      })
+                    }
+                    tickLine={false}
+                    tickMargin={10}
+                  />
+                  <YAxis
+                    axisLine={false}
+                    allowDecimals={valueMode === "percentage"}
+                    tickFormatter={(value: number) =>
+                      valueMode === "percentage" ? `${value}%` : String(value)
+                    }
+                    tickLine={false}
+                    width={48}
+                  />
+                  <ChartTooltip content={<ChartTooltipContent />} cursor={false} />
+                  {(lifecycleResult?.series ?? []).map((series) => (
+                    <Area
+                      dataKey={series.status}
+                      fill={colors[series.status]}
+                      fillOpacity={0.28}
+                      key={series.status}
+                      stackId="lifecycle"
+                      stroke={colors[series.status]}
+                      strokeWidth={2}
+                      type="monotone"
+                    />
+                  ))}
+                </AreaChart>
+              )}
+            </ChartContainer>
+          ) : (
+            <div className="flex h-[360px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+              <div>
+                <Layers3 className="mx-auto text-muted-foreground" />
+                <p className="mt-3 text-sm">Your lifecycle chart will appear here</p>
+              </div>
+            </div>
+          )}
+          {lifecycleResult ? (
+            <div className="mt-4 border-t pt-4">
+              <Button onClick={onDrilldown} size="sm" variant="outline">
+                View matching people
+              </Button>
+            </div>
+          ) : null}
+        </CardContent>
+      </Card>
+      <PeopleDrilldown
+        error={peopleError}
+        pending={peoplePending}
+        result={people}
+        title={peopleTitle}
+      />
+    </main>
+  );
+}
diff --git a/apps/www/src/features/studio/lib/tanstack-query/analytics.ts b/apps/www/src/features/studio/lib/tanstack-query/analytics.ts
index 27a3efe9e..cae9d1d1d 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/analytics.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/analytics.ts
@@ -1,9 +1,14 @@
 import { Effect } from "effect";
-import type { QueryAnalyticsInsightsRequestType } from "@voidhash/rpc";
+import type {
+  CustomAnalyticsInsightQueryType,
+  QueryAnalyticsInsightsRequestType,
+  QueryCustomAnalyticsPersonsRequestType,
+} from "@voidhash/rpc";
 
 import { VoidhashRpc, eq } from "../effect-query";
 import { queryKeys } from "./query-keys";
 
+/** Build query options for the built-in analytics insight batch endpoint. */
 export const queryAnalyticsInsightsOptions = (options: QueryAnalyticsInsightsRequestType) =>
   eq.queryOptions({
     queryFn: (() =>
@@ -14,6 +19,7 @@ export const queryAnalyticsInsightsOptions = (options: QueryAnalyticsInsightsReq
     queryKey: queryKeys.analytics.query(options),
   });
 
+/** Build query options for a project's recent event stream. */
 export const listRecentAnalyticsEventsOptions = (options: { projectId: string; limit: number }) =>
   eq.queryOptions({
     queryFn: () =>
@@ -25,3 +31,174 @@ export const listRecentAnalyticsEventsOptions = (options: { projectId: string; l
       ),
     queryKey: queryKeys.analytics.recentEvents(options),
   });
+
+/** Build query options for the project's saved custom insights. */
+export const listAnalyticsInsightsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListAnalyticsInsights(options)),
+    queryKey: queryKeys.analytics.insights(options),
+  });
+
+/** Build mutation options for saving a custom insight. */
+export const createAnalyticsInsightOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      definition: CustomAnalyticsInsightQueryType;
+      description?: string;
+      name: string;
+      projectId: string;
+    }) => VoidhashRpc.request((rpc) => rpc.CreateAnalyticsInsight(variables)),
+    mutationKey: ["createAnalyticsInsight"],
+  });
+
+/** Build mutation options for updating a saved custom insight. */
+export const updateAnalyticsInsightOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      definition?: CustomAnalyticsInsightQueryType;
+      description?: null | string;
+      id: string;
+      name?: string;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdateAnalyticsInsight(variables)),
+    mutationKey: ["updateAnalyticsInsight"],
+  });
+
+/** Build mutation options for deleting a saved custom insight. */
+export const deleteAnalyticsInsightOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteAnalyticsInsight(variables)),
+    mutationKey: ["deleteAnalyticsInsight"],
+  });
+
+/** Build query options for reusable project cohorts. */
+export const listAnalyticsCohortsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListAnalyticsCohorts(options)),
+    queryKey: queryKeys.analytics.cohorts(options),
+  });
+
+/** Build mutation options for creating a static analytics cohort. */
+export const createAnalyticsCohortOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      description?: string;
+      memberPersonIds: string[];
+      name: string;
+      projectId: string;
+    }) => VoidhashRpc.request((rpc) => rpc.CreateAnalyticsCohort(variables)),
+    mutationKey: ["createAnalyticsCohort"],
+  });
+
+/** Build mutation options for updating cohort metadata or membership. */
+export const updateAnalyticsCohortOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      description?: null | string;
+      id: string;
+      memberPersonIds?: string[];
+      name?: string;
+    }) => VoidhashRpc.request((rpc) => rpc.UpdateAnalyticsCohort(variables)),
+    mutationKey: ["updateAnalyticsCohort"],
+  });
+
+/** Build mutation options for deleting a static cohort. */
+export const deleteAnalyticsCohortOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteAnalyticsCohort(variables)),
+    mutationKey: ["deleteAnalyticsCohort"],
+  });
+
+/** Build mutation options for running an ad hoc custom insight definition. */
+export const queryCustomAnalyticsInsightOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { definition: CustomAnalyticsInsightQueryType; projectId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.QueryCustomAnalyticsInsight(variables)),
+    mutationKey: ["queryCustomAnalyticsInsight"],
+  });
+
+/** Build mutation options for listing people behind a selected insight segment. */
+export const queryCustomAnalyticsPersonsOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: QueryCustomAnalyticsPersonsRequestType) =>
+      VoidhashRpc.request((rpc) => rpc.QueryCustomAnalyticsPersons(variables)),
+    mutationKey: ["queryCustomAnalyticsPersons"],
+  });
+
+/** Build cacheable query options for a saved insight card. */
+export const customAnalyticsInsightQueryOptions = (variables: {
+  definition: CustomAnalyticsInsightQueryType;
+  projectId: string;
+}) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.QueryCustomAnalyticsInsight(variables)),
+    queryKey: queryKeys.analytics.customInsight(variables),
+  });
+
+/** Build query options for project dashboards and their insight placements. */
+export const listAnalyticsDashboardsOptions = (options: { projectId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListAnalyticsDashboards(options)),
+    queryKey: queryKeys.analytics.dashboards(options),
+  });
+
+/** Build mutation options for creating an analytics dashboard. */
+export const createAnalyticsDashboardOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { description?: string; name: string; projectId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateAnalyticsDashboard(variables)),
+    mutationKey: ["createAnalyticsDashboard"],
+  });
+
+/** Build mutation options for duplicating a dashboard and its card layout. */
+export const duplicateAnalyticsDashboardOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string; name?: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DuplicateAnalyticsDashboard(variables)),
+    mutationKey: ["duplicateAnalyticsDashboard"],
+  });
+
+/** Build mutation options for updating dashboard metadata. */
+export const updateAnalyticsDashboardOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { description?: null | string; id: string; name?: string }) =>
+      VoidhashRpc.request((rpc) => rpc.UpdateAnalyticsDashboard(variables)),
+    mutationKey: ["updateAnalyticsDashboard"],
+  });
+
+/** Build mutation options for deleting a dashboard. */
+export const deleteAnalyticsDashboardOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteAnalyticsDashboard(variables)),
+    mutationKey: ["deleteAnalyticsDashboard"],
+  });
+
+/** Build mutation options for adding or repositioning a dashboard card. */
+export const putAnalyticsDashboardItemOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      dashboardId: string;
+      layout: { height: number; width: number; x: number; y: number };
+      position: number;
+      source: { id: string; kind: "insight" | "voidql" };
+    }) => VoidhashRpc.request((rpc) => rpc.PutAnalyticsDashboardItem(variables)),
+    mutationKey: ["putAnalyticsDashboardItem"],
+  });
+
+/** Build mutation options for atomically reordering all dashboard cards. */
+export const reorderAnalyticsDashboardItemsOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { dashboardId: string; itemIds: [string, ...string[]] }) =>
+      VoidhashRpc.request((rpc) => rpc.ReorderAnalyticsDashboardItems(variables)),
+    mutationKey: ["reorderAnalyticsDashboardItems"],
+  });
+
+/** Build mutation options for removing a card from a dashboard. */
+export const removeAnalyticsDashboardItemOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { dashboardId: string; itemId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RemoveAnalyticsDashboardItem(variables)),
+    mutationKey: ["removeAnalyticsDashboardItem"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
index cfdb65f53..4c5096a9a 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
@@ -57,7 +57,11 @@ const paymentProviderConfigurationKeys = {
 const pushNotificationConfigurationKeys = {
   all: ["pushNotificationConfigurations"] as const,
   getPushNotificationConfiguration: (options: { id: string }) =>
-    [...pushNotificationConfigurationKeys.all, "getPushNotificationConfiguration", options] as const,
+    [
+      ...pushNotificationConfigurationKeys.all,
+      "getPushNotificationConfiguration",
+      options,
+    ] as const,
   list: (options: { projectId: string }) =>
     [...pushNotificationConfigurationKeys.all, "list", options] as const,
 };
@@ -111,7 +115,6 @@ const paywallAssetKeys = {
     [...paywallAssetKeys.all, "list", options] as const,
 };
 
-
 const aiChatKeys = {
   all: ["aiChats"] as const,
   list: (options: {
@@ -151,9 +154,18 @@ const experimentKeys = {
 
 const analyticsKeys = {
   all: ["analytics"] as const,
+  cohorts: (options: { projectId: string }) => [...analyticsKeys.all, "cohorts", options] as const,
+  dashboards: (options: { projectId: string }) =>
+    [...analyticsKeys.all, "dashboards", options] as const,
+  customInsight: (options: { definition: unknown; projectId: string }) =>
+    [...analyticsKeys.all, "custom-insight", options] as const,
+  insights: (options: { projectId: string }) =>
+    [...analyticsKeys.all, "insights", options] as const,
   query: (options: unknown) => [...analyticsKeys.all, "query", options] as const,
   recentEvents: (options: { projectId: string; limit: number }) =>
     [...analyticsKeys.all, "recentEvents", options] as const,
+  voidQlInsights: (options: { organizationId: string }) =>
+    [...analyticsKeys.all, "voidql-insights", options] as const,
 };
 
 export const queryKeys = {
diff --git a/apps/www/src/features/studio/lib/tanstack-query/voidql.ts b/apps/www/src/features/studio/lib/tanstack-query/voidql.ts
index 8dcd9ad67..98184abe8 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/voidql.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/voidql.ts
@@ -1,4 +1,5 @@
 import { VoidhashRpc, eq } from "../effect-query";
+import { queryKeys } from "./query-keys";
 
 /**
  * Execute a VoidQL query. Modelled as a mutation (not a query) because it is
@@ -11,3 +12,33 @@ export const runVoidQlQueryOptions = () =>
       VoidhashRpc.request((rpc) => rpc.RunVoidQlQuery(variables)),
     mutationKey: ["runVoidQlQuery"],
   });
+
+/** Save a validated VoidQL query for reuse. */
+export const saveVoidQlInsightOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { name: string; organizationId: string; text: string }) =>
+      VoidhashRpc.request((rpc) => rpc.SaveVoidQlInsight(variables)),
+    mutationKey: ["saveVoidQlInsight"],
+  });
+
+/** List saved VoidQL queries for an organization. */
+export const listVoidQlInsightsOptions = (options: { organizationId: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListVoidQlInsights(options)),
+    queryKey: queryKeys.analytics.voidQlInsights(options),
+  });
+
+/** Execute a saved query after recompiling it against the current catalog. */
+export const runSavedVoidQlInsightOptions = (variables: { id: string }) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.RunSavedVoidQlInsight(variables)),
+    queryKey: ["runSavedVoidQlInsight", variables] as const,
+  });
+
+/** Delete a saved VoidQL query. */
+export const deleteVoidQlInsightOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { id: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteVoidQlInsight(variables)),
+    mutationKey: ["deleteVoidQlInsight"],
+  });
diff --git a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
index de97295b7..d18ce810f 100644
--- a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
+++ b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
@@ -63,8 +63,24 @@ export function ProjectSidebar({
                 `/studio/${organizationSlug}/${projectSlug}/analytics`,
               ),
             title: "Analytics",
-            url: `/studio/${organizationSlug}/${projectSlug}/analytics/revenue`,
+            url: `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
             items: [
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
+                  ),
+                title: "Insights",
+                url: `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
+              },
+              {
+                isActive: () =>
+                  pathname.startsWith(
+                    `/studio/${organizationSlug}/${projectSlug}/analytics/dashboards`,
+                  ),
+                title: "Dashboards",
+                url: `/studio/${organizationSlug}/${projectSlug}/analytics/dashboards`,
+              },
               {
                 isActive: () =>
                   `/studio/${organizationSlug}/${projectSlug}/analytics/revenue` ===
diff --git a/apps/www/src/routeTree.gen.ts b/apps/www/src/routeTree.gen.ts
index eebdb2669..5d4900532 100644
--- a/apps/www/src/routeTree.gen.ts
+++ b/apps/www/src/routeTree.gen.ts
@@ -68,6 +68,8 @@ import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlug
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.revenue'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.churn'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.sent-notifications'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.events'
@@ -478,6 +480,24 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQue
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRouteImport.update(
+    {
+      id: '/analytics/insights',
+      path: '/analytics/insights',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRouteImport.update(
+    {
+      id: '/analytics/dashboards',
+      path: '/analytics/dashboards',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRouteImport.update(
     {
@@ -610,6 +630,8 @@ export interface FileRoutesByFullPath {
   '/studio/$organizationSlug/$projectSlug/activity/events': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
   '/studio/$organizationSlug/$projectSlug/activity/sent-notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
   '/studio/$organizationSlug/$projectSlug/analytics/churn': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/dashboards': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/insights': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute
   '/studio/$organizationSlug/$projectSlug/analytics/query': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
   '/studio/$organizationSlug/$projectSlug/analytics/revenue': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
   '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
@@ -672,6 +694,8 @@ export interface FileRoutesByTo {
   '/studio/$organizationSlug/$projectSlug/activity/events': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
   '/studio/$organizationSlug/$projectSlug/activity/sent-notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
   '/studio/$organizationSlug/$projectSlug/analytics/churn': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/dashboards': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute
+  '/studio/$organizationSlug/$projectSlug/analytics/insights': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute
   '/studio/$organizationSlug/$projectSlug/analytics/query': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
   '/studio/$organizationSlug/$projectSlug/analytics/revenue': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
   '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
@@ -744,6 +768,8 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/events': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/sent-notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/dashboards': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/insights': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/query': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/revenue': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
@@ -814,6 +840,8 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/activity/events'
     | '/studio/$organizationSlug/$projectSlug/activity/sent-notifications'
     | '/studio/$organizationSlug/$projectSlug/analytics/churn'
+    | '/studio/$organizationSlug/$projectSlug/analytics/dashboards'
+    | '/studio/$organizationSlug/$projectSlug/analytics/insights'
     | '/studio/$organizationSlug/$projectSlug/analytics/query'
     | '/studio/$organizationSlug/$projectSlug/analytics/revenue'
     | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
@@ -876,6 +904,8 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/activity/events'
     | '/studio/$organizationSlug/$projectSlug/activity/sent-notifications'
     | '/studio/$organizationSlug/$projectSlug/analytics/churn'
+    | '/studio/$organizationSlug/$projectSlug/analytics/dashboards'
+    | '/studio/$organizationSlug/$projectSlug/analytics/insights'
     | '/studio/$organizationSlug/$projectSlug/analytics/query'
     | '/studio/$organizationSlug/$projectSlug/analytics/revenue'
     | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
@@ -947,6 +977,8 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/events'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity/sent-notifications'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/dashboards'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/insights'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/query'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/revenue'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers'
@@ -1407,6 +1439,20 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/insights': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/insights'
+      path: '/analytics/insights'
+      fullPath: '/studio/$organizationSlug/$projectSlug/analytics/insights'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/dashboards': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/dashboards'
+      path: '/analytics/dashboards'
+      fullPath: '/studio/$organizationSlug/$projectSlug/analytics/dashboards'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/churn'
       path: '/analytics/churn'
@@ -1575,6 +1621,8 @@ interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRou
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
@@ -1616,6 +1664,10 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteCh
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsChurnRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsDashboardsRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsInsightsRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsQueryRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsRevenueRoute:
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx
new file mode 100644
index 000000000..d3c91588b
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx
@@ -0,0 +1,14 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { CustomDashboardsPage } from "@/features/studio/analytics/custom-dashboards-page";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/dashboards",
+)({
+  component: DashboardsRoute,
+});
+
+function DashboardsRoute() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  return <CustomDashboardsPage organizationSlug={organizationSlug} projectSlug={projectSlug} />;
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx
new file mode 100644
index 000000000..7afb887cb
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx
@@ -0,0 +1,14 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { CustomInsightsPage } from "@/features/studio/analytics/custom-insights-page";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/insights",
+)({
+  component: InsightsRoute,
+});
+
+function InsightsRoute() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  return <CustomInsightsPage organizationSlug={organizationSlug} projectSlug={projectSlug} />;
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx
index 8feaba84a..36e8d8474 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.query.tsx
@@ -1,7 +1,8 @@
-import { useMutation } from "@tanstack/react-query";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
 import {
   Button,
+  Input,
   Page,
   PageHeader,
   PageHeaderTitle,
@@ -14,11 +15,18 @@ import {
   Textarea,
 } from "@voidhash/ui";
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { Save, Trash2 } from "lucide-react";
 import { useState } from "react";
 
 import { useAuth } from "@/features/studio/components/auth-context";
 import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
-import { runVoidQlQueryOptions } from "@/features/studio/lib/tanstack-query";
+import {
+  deleteVoidQlInsightOptions,
+  listVoidQlInsightsOptions,
+  queryKeys,
+  runVoidQlQueryOptions,
+  saveVoidQlInsightOptions,
+} from "@/features/studio/lib/tanstack-query";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
@@ -57,6 +65,8 @@ function QueryPage() {
   // Gated behind an internal feature flag (unreleased) — also hides direct URL access.
   const queryEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidqlQuery.key);
   const [text, setText] = useState(EXAMPLE_QUERY);
+  const [name, setName] = useState("Untitled query");
+  const queryClient = useQueryClient();
 
   const project = CurrentUser.getProjectBySlugs(
     user,
@@ -65,6 +75,12 @@ function QueryPage() {
   );
 
   const runQuery = useMutation(runVoidQlQueryOptions());
+  const saveQuery = useMutation(saveVoidQlInsightOptions());
+  const deleteQuery = useMutation(deleteVoidQlInsightOptions());
+  const savedQueries = useQuery({
+    ...listVoidQlInsightsOptions({ organizationId: project?.organizationId ?? "missing-org" }),
+    enabled: project !== undefined && queryEnabled,
+  });
 
   if (!queryEnabled) {
     return (
@@ -98,6 +114,10 @@ function QueryPage() {
 
   const result = runQuery.data;
   const error = runQuery.isError ? errorMessage(runQuery.error) : null;
+  const refreshSaved = () =>
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.analytics.voidQlInsights({ organizationId: project.organizationId }),
+    });
 
   return (
     <Page className="flex h-[calc(100svh-var(--header-height))] flex-col overflow-hidden">
@@ -115,7 +135,7 @@ function QueryPage() {
             spellCheck={false}
             value={text}
           />
-          <div className="flex items-center gap-3">
+          <div className="flex flex-wrap items-center gap-3">
             <Button disabled={runQuery.isPending || text.trim().length === 0} onClick={onRun}>
               {runQuery.isPending ? "Running…" : "Run"}
             </Button>
@@ -124,9 +144,56 @@ function QueryPage() {
                 {result.rows.length} row{result.rows.length === 1 ? "" : "s"}
               </span>
             ) : null}
+            <Input
+              aria-label="Saved query name"
+              className="ml-auto max-w-64"
+              onChange={(event) => setName(event.target.value)}
+              value={name}
+            />
+            <Button
+              disabled={!name.trim() || !text.trim() || saveQuery.isPending}
+              onClick={() =>
+                saveQuery.mutate(
+                  { name: name.trim(), organizationId: project.organizationId, text: text.trim() },
+                  { onSuccess: () => void refreshSaved() },
+                )
+              }
+              variant="outline"
+            >
+              <Save /> {saveQuery.isPending ? "Saving…" : "Save query"}
+            </Button>
           </div>
         </div>
 
+        {savedQueries.data?.insights.length ? (
+          <div className="flex flex-wrap gap-2 rounded-md border p-3">
+            {savedQueries.data.insights.map((insight) => (
+              <div className="flex items-center rounded-md border bg-background" key={insight.id}>
+                <button
+                  className="px-3 py-2 text-left text-sm hover:bg-muted"
+                  onClick={() => {
+                    setName(insight.name);
+                    setText(insight.text);
+                  }}
+                  type="button"
+                >
+                  {insight.name}
+                </button>
+                <Button
+                  aria-label={`Delete ${insight.name}`}
+                  onClick={() =>
+                    deleteQuery.mutate({ id: insight.id }, { onSuccess: () => void refreshSaved() })
+                  }
+                  size="icon"
+                  variant="ghost"
+                >
+                  <Trash2 size={14} />
+                </Button>
+              </div>
+            ))}
+          </div>
+        ) : null}
+
         {error ? (
           <div className="rounded-md border border-destructive/40 bg-destructive/5 px-3 py-2 text-destructive text-sm">
             <p className="font-medium">{error.message}</p>
diff --git a/packages/core/package.json b/packages/core/package.json
index 77c847843..13bd006e3 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -48,6 +48,7 @@
     "./domain/analyticsIngest/AnalyticsIngest": "./src/domain/analyticsIngest/AnalyticsIngest.ts",
     "./services": "./src/services/index.ts",
     "./services/analytics/AnalyticsService": "./src/services/analytics/AnalyticsService.ts",
+    "./services/analytics/CustomAnalyticsService": "./src/services/analytics/CustomAnalyticsService.ts",
     "./services/analyticsIngest/AnalyticsDispatchService": "./src/services/analyticsIngest/AnalyticsDispatchService.ts",
     "./services/analyticsIngest/AnalyticsIngestDlqService": "./src/services/analyticsIngest/AnalyticsIngestDlqService.ts",
     "./services/analyticsIngest/AnalyticsJanitorService": "./src/services/analyticsIngest/AnalyticsJanitorService.ts",
diff --git a/packages/core/src/services/analytics/CustomAnalyticsService.ts b/packages/core/src/services/analytics/CustomAnalyticsService.ts
new file mode 100644
index 000000000..59b7affdb
--- /dev/null
+++ b/packages/core/src/services/analytics/CustomAnalyticsService.ts
@@ -0,0 +1,2556 @@
+import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import {
+  Db,
+  analyticsCohortMembers,
+  analyticsCohorts,
+  analyticsDashboardItems,
+  analyticsDashboards,
+  analyticsInsights,
+  analyticsSavedQuery,
+  and,
+  asc,
+  desc,
+  eq,
+  inArray,
+  isNull,
+  persons,
+} from "@voidhash/db";
+import type {
+  AnalyticsCohortType,
+  AnalyticsDashboardItemLayoutType,
+  AnalyticsDashboardType,
+  AnalyticsFilterType,
+  AnalyticsTrendsComparisonType,
+  AnalyticsTrendsFormulaType,
+  CustomAnalyticsInsightQueryType,
+  QueryCustomAnalyticsInsightResponseType,
+  SavedAnalyticsInsightType,
+  SavedVoidQlInsightType,
+} from "@voidhash/rpc";
+import { Context, Effect, Layer, Option } from "effect";
+
+import { InvalidAnalyticsQueryError, resolveTimeRange } from "../../domain/analytics/Analytics.ts";
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { checkProjectPermission } from "../../utils/permissions.ts";
+import { AnalyticsServiceError } from "./AnalyticsService.ts";
+import {
+  type EventLifecyclePoint,
+  type EventPathLink,
+  type EventRetentionCohort,
+  type EventStickinessBucket,
+  getEventFunnelBreakdownCounts,
+  getEventFunnelCounts,
+  getEventLifecyclePoints,
+  getEventPathLinks,
+  getEventPersonDrilldown,
+  getEventRetentionCohorts,
+  getEventStickinessBuckets,
+  getEventTrendSeries,
+} from "./clickhouse-accessor.ts";
+
+type AnalyticsInsightRow = typeof analyticsInsights.$inferSelect;
+type AnalyticsDashboardRow = typeof analyticsDashboards.$inferSelect;
+type AnalyticsCohortRow = typeof analyticsCohorts.$inferSelect;
+type AnalyticsSavedQueryRow = typeof analyticsSavedQuery.$inferSelect;
+
+const toSavedInsight = (row: AnalyticsInsightRow): SavedAnalyticsInsightType => {
+  const definition = row.definition as CustomAnalyticsInsightQueryType;
+  return {
+    createdAt: row.createdAt,
+    createdBy: row.createdBy,
+    definition,
+    description: row.description,
+    id: row.id,
+    kind: definition.kind,
+    name: row.name,
+    organizationId: row.organizationId,
+    projectId: row.projectId,
+    updatedAt: row.updatedAt,
+  };
+};
+
+const toSavedVoidQlInsight = (row: AnalyticsSavedQueryRow): SavedVoidQlInsightType => ({
+  createdAt: row.createdAt,
+  createdBy: row.createdBy,
+  id: row.id,
+  name: row.name,
+  organizationId: row.organizationId,
+  schemaVersion: row.schemaVersion,
+  text: row.voidqlText,
+  updatedAt: row.updatedAt,
+});
+
+export type ExecutableTrendsDefinition = Extract<
+  CustomAnalyticsInsightQueryType,
+  { readonly kind: "trends" }
+>;
+export type ExecutableFunnelsDefinition = Extract<
+  CustomAnalyticsInsightQueryType,
+  { readonly kind: "funnels" }
+>;
+export type ExecutableRetentionDefinition = Extract<
+  CustomAnalyticsInsightQueryType,
+  { readonly kind: "retention" }
+>;
+export type ExecutablePathsDefinition = Extract<
+  CustomAnalyticsInsightQueryType,
+  { readonly kind: "paths" }
+>;
+export type ExecutableStickinessDefinition = Extract<
+  CustomAnalyticsInsightQueryType,
+  { readonly kind: "stickiness" }
+>;
+export type ExecutableLifecycleDefinition = Extract<
+  CustomAnalyticsInsightQueryType,
+  { readonly kind: "lifecycle" }
+>;
+
+type TrendsInsightResult = Extract<
+  QueryCustomAnalyticsInsightResponseType,
+  { readonly kind: "trends" }
+>;
+type ResolvedTrendsTimeRange = TrendsInsightResult["resolvedTimeRange"];
+
+const shiftUtcYear = (value: Date, years: number): Date => {
+  const targetYear = value.getUTCFullYear() + years;
+  const lastDay = new Date(Date.UTC(targetYear, value.getUTCMonth() + 1, 0)).getUTCDate();
+  return new Date(
+    Date.UTC(
+      targetYear,
+      value.getUTCMonth(),
+      Math.min(value.getUTCDate(), lastDay),
+      value.getUTCHours(),
+      value.getUTCMinutes(),
+      value.getUTCSeconds(),
+    ),
+  );
+};
+
+/** Resolve the date window used for a Trends comparison. */
+export const resolveTrendsComparisonTimeRange = (
+  comparison: AnalyticsTrendsComparisonType,
+  current: ResolvedTrendsTimeRange,
+): ResolvedTrendsTimeRange => {
+  if (comparison === "previous_year") {
+    return { end: shiftUtcYear(current.end, -1), start: shiftUtcYear(current.start, -1) };
+  }
+
+  const duration = current.end.getTime() - current.start.getTime();
+  return {
+    end: new Date(current.start.getTime() - 1_000),
+    start: new Date(current.start.getTime() - duration),
+  };
+};
+
+const startOfTrendsBucket = (
+  value: Date,
+  granularity: ExecutableTrendsDefinition["granularity"],
+): Date => {
+  const bucket = new Date(value);
+  bucket.setUTCMilliseconds(0);
+  if (granularity === "hour") bucket.setUTCMinutes(0, 0, 0);
+  else {
+    bucket.setUTCHours(0, 0, 0, 0);
+    if (granularity === "week") {
+      bucket.setUTCDate(bucket.getUTCDate() - ((bucket.getUTCDay() + 6) % 7));
+    } else if (granularity === "month") bucket.setUTCDate(1);
+    else if (granularity === "quarter") {
+      bucket.setUTCMonth(Math.floor(bucket.getUTCMonth() / 3) * 3, 1);
+    } else if (granularity === "year") bucket.setUTCMonth(0, 1);
+  }
+  return bucket;
+};
+
+const nextTrendsBucket = (
+  value: Date,
+  granularity: ExecutableTrendsDefinition["granularity"],
+): Date => {
+  const next = new Date(value);
+  if (granularity === "hour") next.setUTCHours(next.getUTCHours() + 1);
+  else if (granularity === "day") next.setUTCDate(next.getUTCDate() + 1);
+  else if (granularity === "week") next.setUTCDate(next.getUTCDate() + 7);
+  else if (granularity === "month") next.setUTCMonth(next.getUTCMonth() + 1);
+  else if (granularity === "quarter") next.setUTCMonth(next.getUTCMonth() + 3);
+  else next.setUTCFullYear(next.getUTCFullYear() + 1);
+  return next;
+};
+
+const trendsBuckets = (
+  range: ResolvedTrendsTimeRange,
+  granularity: ExecutableTrendsDefinition["granularity"],
+): Date[] => {
+  const buckets: Date[] = [];
+  let cursor = startOfTrendsBucket(range.start, granularity);
+  while (cursor <= range.end && buckets.length < 20_000) {
+    buckets.push(cursor);
+    cursor = nextTrendsBucket(cursor, granularity);
+  }
+  return buckets;
+};
+
+/** Align comparison points to the current x-axis by bucket position. */
+export const alignTrendsComparisonPoints = (
+  points: TrendsInsightResult["series"][number]["points"],
+  current: ResolvedTrendsTimeRange,
+  comparison: ResolvedTrendsTimeRange,
+  granularity: ExecutableTrendsDefinition["granularity"],
+): TrendsInsightResult["series"][number]["points"] => {
+  const currentBuckets = trendsBuckets(current, granularity);
+  const comparisonBuckets = trendsBuckets(comparison, granularity);
+  const currentByComparisonTimestamp = new Map(
+    comparisonBuckets.map((bucket, index) => [bucket.getTime(), currentBuckets[index]]),
+  );
+  return points.flatMap((point) => {
+    const timestamp = currentByComparisonTimestamp.get(point.timestamp.getTime());
+    return timestamp ? [{ ...point, timestamp }] : [];
+  });
+};
+
+/** Fill absent Trends buckets with zero so charts and formulas share a complete time axis. */
+export const fillTrendsSeriesPoints = (
+  points: TrendsInsightResult["series"][number]["points"],
+  range: ResolvedTrendsTimeRange,
+  granularity: ExecutableTrendsDefinition["granularity"],
+): TrendsInsightResult["series"][number]["points"] => {
+  const values = new Map(points.map((point) => [point.timestamp.getTime(), point.value]));
+  return trendsBuckets(range, granularity).map((timestamp) => ({
+    timestamp,
+    value: values.get(timestamp.getTime()) ?? 0,
+  }));
+};
+
+/** Apply trailing smoothing, cumulative values, and weekend removal to a complete Trends series. */
+export const applyTrendsPresentation = (
+  points: TrendsInsightResult["series"][number]["points"],
+  options: {
+    readonly cumulative?: boolean;
+    readonly hideWeekends?: boolean;
+    readonly smoothingWindow?: number;
+  },
+): TrendsInsightResult["series"][number]["points"] => {
+  const smoothingWindow = Math.max(1, options.smoothingWindow ?? 1);
+  let presented = points.map((point, index) => {
+    if (smoothingWindow === 1) return point;
+    const window = points.slice(Math.max(0, index - smoothingWindow + 1), index + 1);
+    return {
+      ...point,
+      value: window.reduce((sum, candidate) => sum + candidate.value, 0) / window.length,
+    };
+  });
+  if (options.cumulative) {
+    let total = 0;
+    presented = presented.map((point) => {
+      total += point.value;
+      return { ...point, value: total };
+    });
+  }
+  return options.hideWeekends
+    ? presented.filter((point) => ![0, 6].includes(point.timestamp.getUTCDay()))
+    : presented;
+};
+
+type TrendsFormulaNode =
+  | { readonly kind: "number"; readonly value: number }
+  | { readonly key: string; readonly kind: "series" }
+  | {
+      readonly kind: "unary";
+      readonly operand: TrendsFormulaNode;
+      readonly operator: "+" | "-";
+    }
+  | {
+      readonly kind: "binary";
+      readonly left: TrendsFormulaNode;
+      readonly operator: "+" | "-" | "*" | "/" | "%" | "**";
+      readonly right: TrendsFormulaNode;
+    };
+
+type TrendsFormulaToken =
+  | { readonly kind: "identifier"; readonly value: string }
+  | { readonly kind: "number"; readonly value: number }
+  | { readonly kind: "operator"; readonly value: "+" | "-" | "*" | "/" | "%" | "**" }
+  | { readonly kind: "left_parenthesis" | "right_parenthesis" };
+
+const tokenizeTrendsFormula = (source: string): TrendsFormulaToken[] => {
+  const tokens: TrendsFormulaToken[] = [];
+  let offset = 0;
+  while (offset < source.length) {
+    const character = source[offset];
+    if (character && /\s/u.test(character)) {
+      offset += 1;
+      continue;
+    }
+    const remainder = source.slice(offset);
+    const number = /^(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?/iu.exec(remainder)?.[0];
+    if (number) {
+      const value = Number(number);
+      if (!Number.isFinite(value)) throw new Error("Formula numbers must be finite");
+      tokens.push({ kind: "number", value });
+      offset += number.length;
+    } else {
+      const identifier = /^[a-z][a-z0-9_]*/iu.exec(remainder)?.[0];
+      if (identifier) {
+        tokens.push({ kind: "identifier", value: identifier.toLowerCase() });
+        offset += identifier.length;
+      } else if (remainder.startsWith("**")) {
+        tokens.push({ kind: "operator", value: "**" });
+        offset += 2;
+      } else if (character && "+-*/%".includes(character)) {
+        tokens.push({
+          kind: "operator",
+          value: character as "+" | "-" | "*" | "/" | "%",
+        });
+        offset += 1;
+      } else if (character === "(") {
+        tokens.push({ kind: "left_parenthesis" });
+        offset += 1;
+      } else if (character === ")") {
+        tokens.push({ kind: "right_parenthesis" });
+        offset += 1;
+      } else {
+        throw new Error(`Unexpected character at position ${offset + 1}`);
+      }
+    }
+    if (tokens.length > 128) throw new Error("Formula is too complex");
+  }
+  return tokens;
+};
+
+class TrendsFormulaParser {
+  private offset = 0;
+  private readonly tokens: ReadonlyArray<TrendsFormulaToken>;
+
+  constructor(tokens: ReadonlyArray<TrendsFormulaToken>) {
+    this.tokens = tokens;
+  }
+
+  parse(): TrendsFormulaNode {
+    if (this.tokens.length === 0) throw new Error("Formula cannot be empty");
+    const expression = this.parseAdditive();
+    if (this.current()) throw new Error("Unexpected token after formula");
+    return expression;
+  }
+
+  private current(): TrendsFormulaToken | undefined {
+    return this.tokens[this.offset];
+  }
+
+  private consume(): TrendsFormulaToken {
+    const token = this.current();
+    if (!token) throw new Error("Formula ended unexpectedly");
+    this.offset += 1;
+    return token;
+  }
+
+  private parseAdditive(): TrendsFormulaNode {
+    let left = this.parseMultiplicative();
+    while (true) {
+      const operator = this.current();
+      if (operator?.kind !== "operator" || (operator.value !== "+" && operator.value !== "-")) {
+        break;
+      }
+      this.consume();
+      const right = this.parseMultiplicative();
+      left = {
+        kind: "binary",
+        left,
+        operator: operator.value,
+        right,
+      };
+    }
+    return left;
+  }
+
+  private parseMultiplicative(): TrendsFormulaNode {
+    let left = this.parseUnary();
+    while (true) {
+      const operator = this.current();
+      if (
+        operator?.kind !== "operator" ||
+        (operator.value !== "*" && operator.value !== "/" && operator.value !== "%")
+      ) {
+        break;
+      }
+      this.consume();
+      const right = this.parseUnary();
+      left = {
+        kind: "binary",
+        left,
+        operator: operator.value,
+        right,
+      };
+    }
+    return left;
+  }
+
+  private parseUnary(): TrendsFormulaNode {
+    const token = this.current();
+    if (token?.kind === "operator" && (token.value === "+" || token.value === "-")) {
+      this.consume();
+      return { kind: "unary", operand: this.parseUnary(), operator: token.value };
+    }
+    return this.parsePower();
+  }
+
+  private parsePower(): TrendsFormulaNode {
+    const left = this.parsePrimary();
+    const token = this.current();
+    if (token?.kind === "operator" && token.value === "**") {
+      this.consume();
+      return { kind: "binary", left, operator: "**", right: this.parseUnary() };
+    }
+    return left;
+  }
+
+  private parsePrimary(): TrendsFormulaNode {
+    const token = this.consume();
+    if (token.kind === "number") return { kind: "number", value: token.value };
+    if (token.kind === "identifier") return { key: token.value, kind: "series" };
+    if (token.kind === "left_parenthesis") {
+      const expression = this.parseAdditive();
+      if (this.consume().kind !== "right_parenthesis") {
+        throw new Error("Formula has an unmatched parenthesis");
+      }
+      return expression;
+    }
+    throw new Error("Expected a number, series, or parenthesized expression");
+  }
+}
+
+const collectTrendsFormulaReferences = (node: TrendsFormulaNode, references: Set<string>): void => {
+  if (node.kind === "series") references.add(node.key);
+  else if (node.kind === "unary") collectTrendsFormulaReferences(node.operand, references);
+  else if (node.kind === "binary") {
+    collectTrendsFormulaReferences(node.left, references);
+    collectTrendsFormulaReferences(node.right, references);
+  }
+};
+
+const evaluateTrendsFormulaNode = (
+  node: TrendsFormulaNode,
+  values: ReadonlyMap<string, number>,
+): number => {
+  if (node.kind === "number") return node.value;
+  if (node.kind === "series") return values.get(node.key) ?? 0;
+  if (node.kind === "unary") {
+    const value = evaluateTrendsFormulaNode(node.operand, values);
+    return node.operator === "-" ? -value : value;
+  }
+  const left = evaluateTrendsFormulaNode(node.left, values);
+  const right = evaluateTrendsFormulaNode(node.right, values);
+  let result: number;
+  if (node.operator === "+") result = left + right;
+  else if (node.operator === "-") result = left - right;
+  else if (node.operator === "*") result = left * right;
+  else if (node.operator === "/") result = right === 0 ? 0 : left / right;
+  else if (node.operator === "%") result = right === 0 ? 0 : left % right;
+  else result = left ** right;
+  return Number.isFinite(result) ? result : 0;
+};
+
+const compileTrendsFormula = (
+  formula: AnalyticsTrendsFormulaType,
+  allowedSeries: ReadonlySet<string>,
+): Effect.Effect<TrendsFormulaNode, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    const node = yield* Effect.try({
+      catch: (cause) =>
+        new InvalidAnalyticsQueryError({
+          message: `Invalid Trends formula ${formula.key}: ${cause instanceof Error ? cause.message : String(cause)}`,
+        }),
+      try: () => new TrendsFormulaParser(tokenizeTrendsFormula(formula.expression)).parse(),
+    });
+    const references = new Set<string>();
+    collectTrendsFormulaReferences(node, references);
+    const missing = [...references].filter((reference) => !allowedSeries.has(reference));
+    if (missing.length > 0) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `Trends formula ${formula.key} references unknown series: ${missing.join(", ")}`,
+        }),
+      );
+    }
+    return node;
+  });
+
+const CUSTOM_PROPERTY_PREFIX = "event.properties.";
+const CUSTOM_EVENT_FIELDS = new Set(["event.name", "person.id"]);
+const PROPERTY_AGGREGATIONS = new Set([
+  "property_sum",
+  "property_average",
+  "property_minimum",
+  "property_maximum",
+  "property_median",
+  "property_p75",
+  "property_p90",
+  "property_p95",
+  "property_p99",
+]);
+
+const validateCustomEventField = (
+  field: string,
+): Effect.Effect<void, InvalidAnalyticsQueryError> => {
+  if (CUSTOM_EVENT_FIELDS.has(field)) return Effect.void;
+  if (
+    field.startsWith(CUSTOM_PROPERTY_PREFIX) &&
+    field.length > CUSTOM_PROPERTY_PREFIX.length &&
+    field.length <= CUSTOM_PROPERTY_PREFIX.length + 128 &&
+    !Array.from(field).some((character) => character.charCodeAt(0) < 32)
+  ) {
+    return Effect.void;
+  }
+  return Effect.fail(
+    new InvalidAnalyticsQueryError({
+      message: `Unsupported custom analytics field: ${field}`,
+    }),
+  );
+};
+
+const validateCustomEventFilter = (
+  filter: AnalyticsFilterType,
+  depth = 0,
+): Effect.Effect<number, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (depth > 8) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Custom analytics filters are nested too deeply",
+        }),
+      );
+    }
+    if (filter.type === "and" || filter.type === "or") {
+      if (filter.filters.length === 0) {
+        return yield* Effect.fail(
+          new InvalidAnalyticsQueryError({
+            message: "Custom analytics filter groups cannot be empty",
+          }),
+        );
+      }
+      const counts = yield* Effect.all(
+        filter.filters.map((child) => validateCustomEventFilter(child, depth + 1)),
+      );
+      return counts.reduce((total, count) => total + count, 0);
+    }
+    if (filter.type === "not") return yield* validateCustomEventFilter(filter.filter, depth + 1);
+
+    const predicate = filter as Extract<AnalyticsFilterType, { readonly type: "predicate" }>;
+    yield* validateCustomEventField(predicate.field);
+    if (["gt", "gte", "lt", "lte"].includes(predicate.op)) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `Custom analytics does not yet support the ${predicate.op} property operator`,
+        }),
+      );
+    }
+    if (predicate.op === "exists") return 1;
+    if ((predicate.op === "in" || predicate.op === "not_in") && !Array.isArray(predicate.value)) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `${predicate.op} requires an array value`,
+        }),
+      );
+    }
+    if (predicate.value === undefined || predicate.value === null) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: `${predicate.op} requires a value` }),
+      );
+    }
+    return 1;
+  });
+
+/** Validate the currently executable subset of custom analytics definitions. */
+export const validateExecutableTrendsDefinition = (
+  definition: CustomAnalyticsInsightQueryType,
+): Effect.Effect<ExecutableTrendsDefinition, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (definition.kind !== "trends") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `${definition.kind} execution is not available yet`,
+        }),
+      );
+    }
+    if (definition.breakdown) yield* validateCustomEventField(definition.breakdown.field);
+    if (
+      definition.smoothingWindow !== undefined &&
+      (!Number.isSafeInteger(definition.smoothingWindow) || definition.granularity !== "day")
+    ) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Trends smoothing requires a whole-day window between 1 and 28",
+        }),
+      );
+    }
+    if (definition.hideWeekends && definition.granularity !== "day") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Weekend hiding requires daily granularity" }),
+      );
+    }
+    if (
+      definition.display === "number" &&
+      (definition.cumulative || definition.hideWeekends || (definition.smoothingWindow ?? 1) > 1)
+    ) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Total-value Trends do not support time-series presentation options",
+        }),
+      );
+    }
+    const seriesKeys = new Set(definition.series.map((series) => series.key.toLowerCase()));
+    if (seriesKeys.size !== definition.series.length) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Trends series keys must be unique" }),
+      );
+    }
+    if (definition.formulas) {
+      if (definition.formulas.length === 0 || definition.formulas.length > 8) {
+        return yield* Effect.fail(
+          new InvalidAnalyticsQueryError({ message: "Trends supports between 1 and 8 formulas" }),
+        );
+      }
+      const formulaKeys = new Set(definition.formulas.map((formula) => formula.key.toLowerCase()));
+      if (
+        formulaKeys.size !== definition.formulas.length ||
+        [...formulaKeys].some((key) => seriesKeys.has(key))
+      ) {
+        return yield* Effect.fail(
+          new InvalidAnalyticsQueryError({
+            message: "Trends formula keys must be unique and distinct from series keys",
+          }),
+        );
+      }
+      yield* Effect.all(
+        definition.formulas.map((formula) => compileTrendsFormula(formula, seriesKeys)),
+        { concurrency: 4 },
+      );
+    }
+    let predicateCount = 0;
+    for (const series of definition.series) {
+      if (PROPERTY_AGGREGATIONS.has(series.aggregation)) {
+        if (!series.mathProperty?.trim()) {
+          return yield* Effect.fail(
+            new InvalidAnalyticsQueryError({
+              message: `${series.aggregation} requires an event property`,
+            }),
+          );
+        }
+        yield* validateCustomEventField(`${CUSTOM_PROPERTY_PREFIX}${series.mathProperty.trim()}`);
+      } else if (series.mathProperty !== undefined) {
+        return yield* Effect.fail(
+          new InvalidAnalyticsQueryError({
+            message: `${series.aggregation} does not use an event property`,
+          }),
+        );
+      }
+      if (series.filters) predicateCount += yield* validateCustomEventFilter(series.filters);
+    }
+    if (predicateCount > 20) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Custom Trends supports at most 20 predicates" }),
+      );
+    }
+    return definition;
+  });
+
+interface TrendsFormulaGroup {
+  readonly breakdownValue?: string;
+  readonly comparison: "current" | AnalyticsTrendsComparisonType;
+  readonly series: Map<string, Map<number, number>>;
+}
+
+/** Build formula-only Trends series from the queried source series and their aligned buckets. */
+export const buildTrendsFormulaSeries = (
+  definition: ExecutableTrendsDefinition,
+  sourceSeries: ReadonlyArray<TrendsInsightResult["series"][number]>,
+): Effect.Effect<TrendsInsightResult["series"], InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (!definition.formulas?.length) return [...sourceSeries];
+    const allowedSeries = new Set(definition.series.map((series) => series.key.toLowerCase()));
+    const compiled = yield* Effect.all(
+      definition.formulas.map((formula) => compileTrendsFormula(formula, allowedSeries)),
+      { concurrency: 4 },
+    );
+    const definitionsBySpecificity = [...definition.series].sort(
+      (left, right) => right.key.length - left.key.length,
+    );
+    const groups = new Map<string, TrendsFormulaGroup>();
+
+    for (const source of sourceSeries) {
+      const comparison = source.comparison ?? "current";
+      const comparisonSuffix = comparison === "current" ? "" : `:comparison:${comparison}`;
+      const sourceKey = comparisonSuffix
+        ? source.key.slice(0, -comparisonSuffix.length)
+        : source.key;
+      const definitionSeries = definitionsBySpecificity.find(
+        (candidate) => sourceKey === candidate.key || sourceKey.startsWith(`${candidate.key}:`),
+      );
+      if (!definitionSeries) continue;
+      const breakdownValue =
+        sourceKey === definitionSeries.key
+          ? undefined
+          : sourceKey.slice(definitionSeries.key.length + 1);
+      const groupKey = `${comparison}\u0000${breakdownValue ?? ""}`;
+      const group = groups.get(groupKey) ?? {
+        ...(breakdownValue === undefined ? {} : { breakdownValue }),
+        comparison,
+        series: new Map<string, Map<number, number>>(),
+      };
+      group.series.set(
+        definitionSeries.key.toLowerCase(),
+        new Map(source.points.map((point) => [point.timestamp.getTime(), point.value])),
+      );
+      groups.set(groupKey, group);
+    }
+
+    const result: Array<TrendsInsightResult["series"][number]> = [];
+    for (const group of groups.values()) {
+      const timestamps = new Set<number>();
+      for (const points of group.series.values()) {
+        for (const timestamp of points.keys()) timestamps.add(timestamp);
+      }
+      const sortedTimestamps = [...timestamps].sort((left, right) => left - right);
+      for (const [index, formula] of definition.formulas.entries()) {
+        const node = compiled[index];
+        if (!node) continue;
+        const comparisonLabel =
+          group.comparison === "previous_period"
+            ? "previous period"
+            : group.comparison === "previous_year"
+              ? "previous year"
+              : undefined;
+        const breakdownSuffix =
+          group.breakdownValue === undefined ? "" : ` · ${group.breakdownValue || "(empty)"}`;
+        const comparisonKeySuffix =
+          group.comparison === "current" ? "" : `:comparison:${group.comparison}`;
+        result.push({
+          comparison: group.comparison,
+          key: `${formula.key}${group.breakdownValue === undefined ? "" : `:${group.breakdownValue}`}${comparisonKeySuffix}`,
+          label: `${formula.label ?? `Formula (${formula.expression})`}${breakdownSuffix}${comparisonLabel ? ` (${comparisonLabel})` : ""}`,
+          points: sortedTimestamps.map((timestamp) => {
+            const values = new Map<string, number>();
+            for (const seriesKey of allowedSeries) {
+              values.set(seriesKey, group.series.get(seriesKey)?.get(timestamp) ?? 0);
+            }
+            return {
+              timestamp: new Date(timestamp),
+              value: evaluateTrendsFormulaNode(node, values),
+            };
+          }),
+        });
+      }
+    }
+    return result;
+  });
+
+/** Validate a funnel definition before lowering it to ClickHouse. */
+export const validateExecutableFunnelsDefinition = (
+  definition: CustomAnalyticsInsightQueryType,
+): Effect.Effect<ExecutableFunnelsDefinition, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (definition.kind !== "funnels") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `${definition.kind} is not a funnel definition`,
+        }),
+      );
+    }
+    if (definition.steps.length < 2 || definition.steps.length > 20) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Funnels require between 2 and 20 steps" }),
+      );
+    }
+    if (
+      !Number.isSafeInteger(definition.conversionWindowSeconds) ||
+      definition.conversionWindowSeconds < 1 ||
+      definition.conversionWindowSeconds > 31_536_000
+    ) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Funnel conversion windows must be whole seconds between 1 second and 365 days",
+        }),
+      );
+    }
+    if (definition.breakdown) {
+      yield* validateCustomEventField(definition.breakdown.field);
+      const attributionStep = definition.breakdownAttributionStep ?? 1;
+      if (!Number.isSafeInteger(attributionStep) || attributionStep > definition.steps.length) {
+        return yield* Effect.fail(
+          new InvalidAnalyticsQueryError({
+            message: "Funnel breakdown attribution must reference an existing step",
+          }),
+        );
+      }
+    } else if (definition.breakdownAttributionStep !== undefined) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Funnel breakdown attribution requires a breakdown field",
+        }),
+      );
+    }
+    let predicateCount = 0;
+    for (const step of definition.steps) {
+      if (step.filters) predicateCount += yield* validateCustomEventFilter(step.filters);
+    }
+    if (predicateCount > 20) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Funnels support at most 20 predicates" }),
+      );
+    }
+    return definition;
+  });
+
+type FunnelsInsightResult = Extract<
+  QueryCustomAnalyticsInsightResponseType,
+  { readonly kind: "funnels" }
+>;
+
+/** Convert monotonic funnel reach counts into display-ready step metrics. */
+export const buildFunnelStepResults = (
+  definition: ExecutableFunnelsDefinition,
+  counts: ReadonlyArray<number>,
+): FunnelsInsightResult["steps"] => {
+  const entryCount = counts[0] ?? 0;
+  return definition.steps.map((step, index) => {
+    const count = counts[index] ?? 0;
+    const previousCount = counts[index - 1] ?? count;
+    const dropoffCount = index === 0 ? 0 : Math.max(0, previousCount - count);
+    return {
+      conversionRate: entryCount === 0 ? 0 : count / entryCount,
+      count,
+      dropoffCount,
+      dropoffRate: index === 0 || previousCount === 0 ? 0 : dropoffCount / previousCount,
+      key: step.key,
+      label: step.label ?? step.eventNames.join(" or "),
+      step: index + 1,
+    };
+  });
+};
+
+/** Validate a retention definition before lowering it to ClickHouse. */
+export const validateExecutableRetentionDefinition = (
+  definition: CustomAnalyticsInsightQueryType,
+): Effect.Effect<ExecutableRetentionDefinition, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (definition.kind !== "retention") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `${definition.kind} is not a retention definition`,
+        }),
+      );
+    }
+    const intervals = definition.intervals ?? 11;
+    if (!Number.isSafeInteger(intervals) || intervals < 1 || intervals > 24) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Retention supports between 1 and 24 intervals",
+        }),
+      );
+    }
+    let predicateCount = 0;
+    if (definition.start.filters) {
+      predicateCount += yield* validateCustomEventFilter(definition.start.filters);
+    }
+    if (definition.returning.filters) {
+      predicateCount += yield* validateCustomEventFilter(definition.returning.filters);
+    }
+    if (predicateCount > 20) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Retention supports at most 20 predicates" }),
+      );
+    }
+    return definition;
+  });
+
+type RetentionInsightResult = Extract<
+  QueryCustomAnalyticsInsightResponseType,
+  { readonly kind: "retention" }
+>;
+
+/** Convert retention counts into cohort- or previous-period-relative cells. */
+export const buildRetentionCohortResults = (
+  definition: ExecutableRetentionDefinition,
+  cohorts: ReadonlyArray<EventRetentionCohort>,
+): RetentionInsightResult["cohorts"] =>
+  cohorts.map((cohort) => ({
+    cells: cohort.counts.map((count, interval) => {
+      const denominator =
+        definition.reference === "previous" && interval > 0
+          ? (cohort.counts[interval - 1] ?? 0)
+          : cohort.cohortSize;
+      return {
+        count,
+        interval,
+        rate: denominator === 0 ? 0 : count / denominator,
+      };
+    }),
+    cohortSize: cohort.cohortSize,
+    cohortStart: cohort.cohortStart,
+  }));
+
+/** Validate a paths definition before lowering it to ClickHouse. */
+export const validateExecutablePathsDefinition = (
+  definition: CustomAnalyticsInsightQueryType,
+): Effect.Effect<ExecutablePathsDefinition, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (definition.kind !== "paths") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `${definition.kind} is not a paths definition`,
+        }),
+      );
+    }
+    if (
+      !Number.isSafeInteger(definition.maxDepth) ||
+      definition.maxDepth < 2 ||
+      definition.maxDepth > 20
+    ) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Paths require between 2 and 20 steps" }),
+      );
+    }
+    if (definition.startEventName !== undefined && definition.startEventName.trim().length === 0) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Paths start event cannot be empty",
+        }),
+      );
+    }
+    if (definition.endEventName !== undefined && definition.endEventName.trim().length === 0) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Paths end event cannot be empty",
+        }),
+      );
+    }
+    const sessionGapSeconds = definition.sessionGapSeconds ?? 1_800;
+    if (
+      !Number.isSafeInteger(sessionGapSeconds) ||
+      sessionGapSeconds < 60 ||
+      sessionGapSeconds > 86_400
+    ) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Path session gaps must be whole seconds between 1 minute and 24 hours",
+        }),
+      );
+    }
+    const edgeLimit = definition.edgeLimit ?? 50;
+    if (!Number.isSafeInteger(edgeLimit) || edgeLimit < 1 || edgeLimit > 200) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Paths support between 1 and 200 links" }),
+      );
+    }
+    if (
+      definition.minEdgeCount !== undefined &&
+      definition.maxEdgeCount !== undefined &&
+      definition.minEdgeCount > definition.maxEdgeCount
+    ) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Path minimum link count cannot exceed the maximum",
+        }),
+      );
+    }
+    if (definition.eventNames.length > 200 || (definition.excludeEventNames?.length ?? 0) > 200) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Paths support at most 200 event selectors" }),
+      );
+    }
+    if (definition.filters && (yield* validateCustomEventFilter(definition.filters)) > 20) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Paths support at most 20 predicates" }),
+      );
+    }
+    return definition;
+  });
+
+type PathsInsightResult = Extract<
+  QueryCustomAnalyticsInsightResponseType,
+  { readonly kind: "paths" }
+>;
+
+/** Normalize ClickHouse path links into the public insight result. */
+export const buildPathsLinkResults = (
+  links: ReadonlyArray<EventPathLink>,
+): PathsInsightResult["links"] =>
+  links.map((link) => ({
+    averageTransitionSeconds: link.averageTransitionSeconds,
+    count: link.count,
+    source: link.source,
+    sourceStep: link.sourceStep,
+    target: link.target,
+    targetStep: link.targetStep,
+  }));
+
+/** Validate a stickiness definition before lowering it to ClickHouse. */
+export const validateExecutableStickinessDefinition = (
+  definition: CustomAnalyticsInsightQueryType,
+): Effect.Effect<ExecutableStickinessDefinition, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (definition.kind !== "stickiness") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `${definition.kind} is not a stickiness definition`,
+        }),
+      );
+    }
+    if (definition.series.length > 8) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Stickiness supports at most 8 series" }),
+      );
+    }
+    const occurrenceCriteria = definition.occurrenceCriteria ?? { operator: "gte", value: 1 };
+    if (
+      !Number.isSafeInteger(occurrenceCriteria.value) ||
+      occurrenceCriteria.value < 1 ||
+      occurrenceCriteria.value > 10_000
+    ) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: "Stickiness minimum occurrences must be a whole number between 1 and 10,000",
+        }),
+      );
+    }
+    let predicateCount = 0;
+    for (const series of definition.series) {
+      if (series.aggregation !== "unique_users") {
+        return yield* Effect.fail(
+          new InvalidAnalyticsQueryError({
+            message: "Stickiness series must use unique users",
+          }),
+        );
+      }
+      if (series.filters) predicateCount += yield* validateCustomEventFilter(series.filters);
+    }
+    if (predicateCount > 20) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Stickiness supports at most 20 predicates" }),
+      );
+    }
+    return definition;
+  });
+
+const startOfStickinessInterval = (
+  date: Date,
+  interval: ExecutableStickinessDefinition["interval"],
+): Date => {
+  const value = new Date(date);
+  value.setUTCMinutes(0, 0, 0);
+  if (interval === "hour") return value;
+  value.setUTCHours(0);
+  if (interval === "day") return value;
+  if (interval === "week") {
+    value.setUTCDate(value.getUTCDate() - ((value.getUTCDay() + 6) % 7));
+    return value;
+  }
+  value.setUTCDate(1);
+  return value;
+};
+
+/** Count inclusive activity intervals represented by a resolved time range. */
+export const countStickinessIntervals = (
+  start: Date,
+  end: Date,
+  interval: ExecutableStickinessDefinition["interval"],
+): number => {
+  const from = startOfStickinessInterval(start, interval);
+  const to = startOfStickinessInterval(end, interval);
+  if (interval === "month") {
+    return (
+      (to.getUTCFullYear() - from.getUTCFullYear()) * 12 + to.getUTCMonth() - from.getUTCMonth() + 1
+    );
+  }
+  const milliseconds =
+    interval === "hour" ? 3_600_000 : interval === "week" ? 604_800_000 : 86_400_000;
+  return Math.floor((to.getTime() - from.getTime()) / milliseconds) + 1;
+};
+
+/** Fill sparse frequency counts and optionally convert them to at-least-N counts. */
+export const buildStickinessBuckets = (
+  raw: ReadonlyArray<EventStickinessBucket>,
+  computation: "cumulative" | "exact",
+  maximumIntervals: number,
+): EventStickinessBucket[] => {
+  const counts = new Map(raw.map((bucket) => [bucket.intervals, bucket.count]));
+  return Array.from({ length: maximumIntervals }, (_, offset) => {
+    const intervals = offset + 1;
+    return {
+      count:
+        computation === "cumulative"
+          ? raw.reduce(
+              (total, bucket) => total + (bucket.intervals >= intervals ? bucket.count : 0),
+              0,
+            )
+          : (counts.get(intervals) ?? 0),
+      intervals,
+    };
+  });
+};
+
+/** Validate a lifecycle definition before lowering it to ClickHouse. */
+export const validateExecutableLifecycleDefinition = (
+  definition: CustomAnalyticsInsightQueryType,
+): Effect.Effect<ExecutableLifecycleDefinition, InvalidAnalyticsQueryError> =>
+  Effect.gen(function* () {
+    if (definition.kind !== "lifecycle") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({
+          message: `${definition.kind} is not a lifecycle definition`,
+        }),
+      );
+    }
+    if (definition.series.aggregation !== "unique_users") {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Lifecycle must use unique users" }),
+      );
+    }
+    if (definition.series.filters) {
+      const predicateCount = yield* validateCustomEventFilter(definition.series.filters);
+      if (predicateCount > 20) {
+        return yield* Effect.fail(
+          new InvalidAnalyticsQueryError({ message: "Lifecycle supports at most 20 predicates" }),
+        );
+      }
+    }
+    if (definition.statuses && new Set(definition.statuses).size !== definition.statuses.length) {
+      return yield* Effect.fail(
+        new InvalidAnalyticsQueryError({ message: "Lifecycle statuses cannot be duplicated" }),
+      );
+    }
+    return definition;
+  });
+
+type LifecycleInsightResult = Extract<
+  QueryCustomAnalyticsInsightResponseType,
+  { readonly kind: "lifecycle" }
+>;
+
+const nextLifecycleInterval = (
+  value: Date,
+  granularity: ExecutableLifecycleDefinition["granularity"],
+): Date => {
+  const next = new Date(value);
+  if (granularity === "hour") next.setUTCHours(next.getUTCHours() + 1);
+  else if (granularity === "day") next.setUTCDate(next.getUTCDate() + 1);
+  else if (granularity === "week") next.setUTCDate(next.getUTCDate() + 7);
+  else next.setUTCMonth(next.getUTCMonth() + 1);
+  return next;
+};
+
+/** Fill every selected lifecycle status across the inclusive resolved time range. */
+export const buildLifecycleSeries = (
+  points: ReadonlyArray<EventLifecyclePoint>,
+  statuses: ReadonlyArray<EventLifecyclePoint["status"]>,
+  start: Date,
+  end: Date,
+  granularity: ExecutableLifecycleDefinition["granularity"],
+): LifecycleInsightResult["series"] => {
+  const from = startOfStickinessInterval(start, granularity);
+  const to = startOfStickinessInterval(end, granularity);
+  const periods: Date[] = [];
+  for (let period = from; period <= to; period = nextLifecycleInterval(period, granularity)) {
+    periods.push(period);
+  }
+  const counts = new Map(
+    points.map((point) => [`${point.status}:${point.timestamp.getTime()}`, point.count]),
+  );
+  return statuses.map((status) => ({
+    points: periods.map((timestamp) => ({
+      count: counts.get(`${status}:${timestamp.getTime()}`) ?? 0,
+      timestamp,
+    })),
+    status,
+  }));
+};
+
+/** Saved custom insight and dashboard authoring plus executable insight queries. */
+export class CustomAnalyticsService extends Context.Service<CustomAnalyticsService>()(
+  "CustomAnalyticsService",
+  {
+    make: Effect.gen(function* () {
+      const ch = Option.getOrUndefined(
+        yield* Effect.serviceOption(ClickhouseWebClient.ClickhouseWebClient),
+      );
+      const db = yield* Db;
+
+      const getProject = Effect.fn("customAnalytics.getProject")(function* (projectId: string) {
+        yield* checkProjectPermission(
+          projectId,
+          "project:all",
+          `Not authorized to access analytics for project ${projectId}`,
+        );
+        const project = yield* db.query.projects.findFirst({
+          where: { id: projectId },
+        });
+        if (!project) {
+          return yield* Effect.fail(
+            new AnalyticsServiceError({
+              cause: projectId,
+              message: "Analytics project not found",
+            }),
+          );
+        }
+        return project;
+      });
+
+      const loadCohortRow = Effect.fn("customAnalytics.loadCohort")(function* (id: string) {
+        const [cohort] = yield* db
+          .select()
+          .from(analyticsCohorts)
+          .where(and(eq(analyticsCohorts.id, id), isNull(analyticsCohorts.deletedAt)))
+          .limit(1);
+        if (!cohort) {
+          return yield* Effect.fail(
+            new AnalyticsServiceError({ cause: id, message: "Analytics cohort not found" }),
+          );
+        }
+        yield* getProject(cohort.projectId);
+        return cohort;
+      });
+
+      const hydrateCohort = Effect.fn("customAnalytics.hydrateCohort")(function* (
+        cohort: AnalyticsCohortRow,
+      ) {
+        const members = yield* db
+          .select({ personId: analyticsCohortMembers.personId })
+          .from(analyticsCohortMembers)
+          .where(eq(analyticsCohortMembers.cohortId, cohort.id));
+        return {
+          createdAt: cohort.createdAt,
+          createdBy: cohort.createdBy,
+          description: cohort.description,
+          id: cohort.id,
+          memberCount: members.length,
+          memberPersonIds: members.map((member) => member.personId),
+          name: cohort.name,
+          organizationId: cohort.organizationId,
+          projectId: cohort.projectId,
+          updatedAt: cohort.updatedAt,
+        } satisfies AnalyticsCohortType;
+      });
+
+      const validateCohortMembers = Effect.fn("customAnalytics.validateCohortMembers")(function* (
+        projectId: string,
+        personIds: ReadonlyArray<string>,
+      ) {
+        const normalized = [...new Set(personIds.map((id) => id.trim()).filter(Boolean))];
+        if (normalized.length === 0) return normalized;
+        const matching = yield* db
+          .select({ id: persons.id })
+          .from(persons)
+          .where(
+            and(
+              eq(persons.projectId, projectId),
+              inArray(persons.id, normalized),
+              isNull(persons.archivedAt),
+              isNull(persons.deletedAt),
+              isNull(persons.mergedIntoPersonId),
+            ),
+          );
+        if (matching.length !== normalized.length) {
+          return yield* Effect.fail(
+            new AnalyticsServiceError({
+              cause: projectId,
+              message: "Every cohort member must be an active person in the cohort project",
+            }),
+          );
+        }
+        return normalized;
+      });
+
+      const resolveCohortPersonIds = Effect.fn("customAnalytics.resolveCohortPersonIds")(function* (
+        projectId: string,
+        cohortIds: ReadonlyArray<string> | undefined,
+      ) {
+        if (cohortIds === undefined) return undefined;
+        const uniqueCohortIds = [...new Set(cohortIds)];
+        if (uniqueCohortIds.length === 0) {
+          return yield* Effect.fail(
+            new InvalidAnalyticsQueryError({ message: "Cohort filters cannot be empty" }),
+          );
+        }
+        for (const cohortId of uniqueCohortIds) {
+          const cohort = yield* loadCohortRow(cohortId);
+          if (cohort.projectId !== projectId) {
+            return yield* Effect.fail(
+              new AnalyticsServiceError({
+                cause: cohortId,
+                message: "Analytics cohort belongs to a different project",
+              }),
+            );
+          }
+        }
+        const members = yield* db
+          .select({ personId: analyticsCohortMembers.personId })
+          .from(analyticsCohortMembers)
+          .where(inArray(analyticsCohortMembers.cohortId, uniqueCohortIds));
+        return [...new Set(members.map((member) => member.personId))];
+      });
+
+      const loadInsightRow = Effect.fn("customAnalytics.loadInsight")(function* (id: string) {
+        const [insight] = yield* db
+          .select()
+          .from(analyticsInsights)
+          .where(and(eq(analyticsInsights.id, id), isNull(analyticsInsights.deletedAt)))
+          .limit(1);
+        if (!insight) {
+          return yield* Effect.fail(
+            new AnalyticsServiceError({
+              cause: id,
+              message: "Analytics insight not found",
+            }),
+          );
+        }
+        yield* getProject(insight.projectId);
+        return insight;
+      });
+
+      const hydrateDashboard = Effect.fn("customAnalytics.hydrateDashboard")(function* (
+        dashboard: AnalyticsDashboardRow,
+      ) {
+        const itemRows = yield* db
+          .select()
+          .from(analyticsDashboardItems)
+          .where(eq(analyticsDashboardItems.dashboardId, dashboard.id))
+          .orderBy(asc(analyticsDashboardItems.position));
+        const items: Array<AnalyticsDashboardType["items"][number]> = [];
+        for (const item of itemRows) {
+          if (item.sourceType === "insight") {
+            const [insight] = yield* db
+              .select()
+              .from(analyticsInsights)
+              .where(
+                and(
+                  eq(analyticsInsights.id, item.sourceId),
+                  eq(analyticsInsights.projectId, dashboard.projectId),
+                  isNull(analyticsInsights.deletedAt),
+                ),
+              )
+              .limit(1);
+            if (insight) {
+              items.push({
+                id: item.id,
+                insight: toSavedInsight(insight),
+                kind: "insight",
+                layout: item.layout,
+                position: item.position,
+              });
+            }
+          } else if (item.sourceType === "voidql") {
+            const [query] = yield* db
+              .select()
+              .from(analyticsSavedQuery)
+              .where(
+                and(
+                  eq(analyticsSavedQuery.id, item.sourceId),
+                  eq(analyticsSavedQuery.organizationId, dashboard.organizationId),
+                ),
+              )
+              .limit(1);
+            if (query) {
+              items.push({
+                id: item.id,
+                kind: "voidql",
+                layout: item.layout,
+                position: item.position,
+                query: toSavedVoidQlInsight(query),
+              });
+            }
+          }
+        }
+        return {
+          createdAt: dashboard.createdAt,
+          createdBy: dashboard.createdBy,
+          description: dashboard.description,
+          id: dashboard.id,
+          items,
+          name: dashboard.name,
+          organizationId: dashboard.organizationId,
+          projectId: dashboard.projectId,
+          updatedAt: dashboard.updatedAt,
+        } satisfies AnalyticsDashboardType;
+      });
+
+      const loadDashboardRow = Effect.fn("customAnalytics.loadDashboard")(function* (id: string) {
+        const [dashboard] = yield* db
+          .select()
+          .from(analyticsDashboards)
+          .where(and(eq(analyticsDashboards.id, id), isNull(analyticsDashboards.deletedAt)))
+          .limit(1);
+        if (!dashboard) {
+          return yield* Effect.fail(
+            new AnalyticsServiceError({
+              cause: id,
+              message: "Analytics dashboard not found",
+            }),
+          );
+        }
+        yield* getProject(dashboard.projectId);
+        return dashboard;
+      });
+
+      /** Execute a supported custom insight definition. */
+      const queryInsight = Effect.fn("customAnalytics.queryInsight")(
+        function* (input: {
+          readonly definition: CustomAnalyticsInsightQueryType;
+          readonly projectId: string;
+        }) {
+          const project = yield* getProject(input.projectId);
+          if (input.definition.actor?.kind === "group") {
+            yield* validateCustomEventField(
+              `${CUSTOM_PROPERTY_PREFIX}${input.definition.actor.property}`,
+            );
+          }
+          const cohortPersonIds = yield* resolveCohortPersonIds(
+            input.projectId,
+            input.definition.cohortIds,
+          );
+          const actorScope = {
+            ...(input.definition.actor ? { actor: input.definition.actor } : {}),
+            ...(cohortPersonIds === undefined ? {} : { cohortPersonIds }),
+          };
+          if (input.definition.kind === "trends") {
+            const definition = yield* validateExecutableTrendsDefinition(input.definition);
+            const resolvedTimeRange = yield* resolveTimeRange(definition.timeRange);
+            const comparisonTimeRange = definition.comparison
+              ? resolveTrendsComparisonTimeRange(definition.comparison, resolvedTimeRange)
+              : undefined;
+            const queryPeriod = (
+              range: ResolvedTrendsTimeRange,
+              comparison: "current" | AnalyticsTrendsComparisonType,
+            ) =>
+              Effect.all(
+                definition.series.map((seriesDefinition) =>
+                  Effect.gen(function* () {
+                    const groups =
+                      ch === undefined
+                        ? []
+                        : yield* getEventTrendSeries({
+                            ...actorScope,
+                            aggregation: seriesDefinition.aggregation,
+                            aggregateOverRange: definition.display === "number",
+                            breakdown: definition.breakdown,
+                            eventNames: seriesDefinition.eventNames,
+                            filters: { projectIds: [input.projectId] },
+                            mathProperty: seriesDefinition.mathProperty,
+                            organizationId: project.organizationId,
+                            params: {
+                              endDate: range.end,
+                              granularity: definition.granularity,
+                              startDate: range.start,
+                            },
+                            propertyFilter: seriesDefinition.filters,
+                          }).pipe(
+                            Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch),
+                          );
+                    const baseLabel =
+                      seriesDefinition.label ?? seriesDefinition.eventNames.join(" or ");
+                    const effectiveGroups =
+                      groups.length === 0 && !definition.breakdown ? [{ points: [] }] : groups;
+                    return effectiveGroups.map((group) => {
+                      const breakdownKey =
+                        group.breakdownValue === undefined
+                          ? seriesDefinition.key
+                          : `${seriesDefinition.key}:${group.breakdownValue}`;
+                      const breakdownLabel =
+                        group.breakdownValue === undefined
+                          ? baseLabel
+                          : `${baseLabel} · ${group.breakdownValue || "(empty)"}`;
+                      const suffix =
+                        comparison === "previous_period"
+                          ? "previous period"
+                          : comparison === "previous_year"
+                            ? "previous year"
+                            : undefined;
+                      return {
+                        comparison,
+                        key: suffix ? `${breakdownKey}:comparison:${comparison}` : breakdownKey,
+                        label: suffix ? `${breakdownLabel} (${suffix})` : breakdownLabel,
+                        points:
+                          comparisonTimeRange && comparison !== "current"
+                            ? alignTrendsComparisonPoints(
+                                group.points,
+                                resolvedTimeRange,
+                                comparisonTimeRange,
+                                definition.granularity,
+                              )
+                            : group.points,
+                      };
+                    });
+                  }),
+                ),
+                { concurrency: 4 },
+              );
+            const periodSeries = yield* Effect.all(
+              [
+                queryPeriod(resolvedTimeRange, "current"),
+                ...(comparisonTimeRange && definition.comparison
+                  ? [queryPeriod(comparisonTimeRange, definition.comparison)]
+                  : []),
+              ],
+              { concurrency: 2 },
+            );
+            const queriedSeries = periodSeries.flat(2).map((series) => ({
+              ...series,
+              points:
+                definition.display === "number"
+                  ? series.points
+                  : fillTrendsSeriesPoints(
+                      series.points,
+                      resolvedTimeRange,
+                      definition.granularity,
+                    ),
+            }));
+            const resultSeries = definition.formulas?.length
+              ? yield* buildTrendsFormulaSeries(definition, queriedSeries)
+              : queriedSeries;
+            const presentedSeries = resultSeries.map((series) => ({
+              ...series,
+              points: applyTrendsPresentation(series.points, definition),
+            }));
+            return {
+              ...(comparisonTimeRange ? { comparisonTimeRange } : {}),
+              kind: "trends" as const,
+              resolvedTimeRange,
+              series: presentedSeries,
+            };
+          }
+          if (input.definition.kind === "funnels") {
+            const definition = yield* validateExecutableFunnelsDefinition(input.definition);
+            const resolvedTimeRange = yield* resolveTimeRange(definition.timeRange);
+            const funnelInput = {
+              ...actorScope,
+              ...(definition.breakdown
+                ? {
+                    breakdown: definition.breakdown,
+                    breakdownAttributionStep: definition.breakdownAttributionStep ?? 1,
+                  }
+                : {}),
+              conversionWindowSeconds: definition.conversionWindowSeconds,
+              filters: { projectIds: [input.projectId] },
+              order: definition.order,
+              organizationId: project.organizationId,
+              params: {
+                endDate: resolvedTimeRange.end,
+                startDate: resolvedTimeRange.start,
+              },
+              steps: definition.steps,
+            };
+            const [counts, breakdownCounts] =
+              ch === undefined
+                ? ([definition.steps.map(() => 0), []] as const)
+                : yield* Effect.all(
+                    [getEventFunnelCounts(funnelInput), getEventFunnelBreakdownCounts(funnelInput)],
+                    { concurrency: 2 },
+                  ).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch));
+            const steps = buildFunnelStepResults(definition, counts);
+            const entryCount = steps[0]?.count ?? 0;
+            return {
+              ...(definition.breakdown
+                ? {
+                    breakdowns: breakdownCounts.map((group) => {
+                      const groupSteps = buildFunnelStepResults(definition, group.counts);
+                      const groupEntryCount = groupSteps[0]?.count ?? 0;
+                      return {
+                        breakdownValue: group.breakdownValue,
+                        steps: groupSteps,
+                        totalConversionRate:
+                          groupEntryCount === 0
+                            ? 0
+                            : (groupSteps.at(-1)?.count ?? 0) / groupEntryCount,
+                      };
+                    }),
+                  }
+                : {}),
+              kind: "funnels" as const,
+              resolvedTimeRange,
+              steps,
+              totalConversionRate: entryCount === 0 ? 0 : (steps.at(-1)?.count ?? 0) / entryCount,
+            };
+          }
+          if (input.definition.kind === "retention") {
+            const definition = yield* validateExecutableRetentionDefinition(input.definition);
+            const resolvedTimeRange = yield* resolveTimeRange(definition.timeRange);
+            const cohorts =
+              ch === undefined
+                ? []
+                : yield* getEventRetentionCohorts({
+                    ...actorScope,
+                    cumulative: definition.cumulative ?? false,
+                    filters: { projectIds: [input.projectId] },
+                    intervals: definition.intervals ?? 11,
+                    organizationId: project.organizationId,
+                    params: {
+                      endDate: resolvedTimeRange.end,
+                      startDate: resolvedTimeRange.start,
+                    },
+                    period: definition.period,
+                    retentionType: definition.retentionType ?? "recurring",
+                    returning: definition.returning,
+                    start: definition.start,
+                  }).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch));
+            return {
+              cohorts: buildRetentionCohortResults(definition, cohorts),
+              kind: "retention" as const,
+              period: definition.period,
+              resolvedTimeRange,
+            };
+          }
+          if (input.definition.kind === "paths") {
+            const definition = yield* validateExecutablePathsDefinition(input.definition);
+            const resolvedTimeRange = yield* resolveTimeRange(definition.timeRange);
+            const sessionGapSeconds = definition.sessionGapSeconds ?? 1_800;
+            const links =
+              ch === undefined
+                ? []
+                : yield* getEventPathLinks({
+                    ...actorScope,
+                    definition,
+                    filters: { projectIds: [input.projectId] },
+                    organizationId: project.organizationId,
+                    params: {
+                      endDate: resolvedTimeRange.end,
+                      startDate: resolvedTimeRange.start,
+                    },
+                  }).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch));
+            return {
+              kind: "paths" as const,
+              links: buildPathsLinkResults(links),
+              maxDepth: definition.maxDepth,
+              resolvedTimeRange,
+              sessionGapSeconds,
+            };
+          }
+          if (input.definition.kind === "stickiness") {
+            const definition = yield* validateExecutableStickinessDefinition(input.definition);
+            const resolvedTimeRange = yield* resolveTimeRange(definition.timeRange);
+            const computation = definition.computation ?? "exact";
+            const occurrenceCriteria = definition.occurrenceCriteria ?? {
+              operator: "gte" as const,
+              value: 1,
+            };
+            const maximumIntervals = countStickinessIntervals(
+              resolvedTimeRange.start,
+              resolvedTimeRange.end,
+              definition.interval,
+            );
+            if (maximumIntervals > 10_000) {
+              return yield* Effect.fail(
+                new InvalidAnalyticsQueryError({
+                  message: "Stickiness time ranges support at most 10,000 intervals",
+                }),
+              );
+            }
+            const series = yield* Effect.all(
+              definition.series.map((seriesDefinition) =>
+                Effect.gen(function* () {
+                  const raw =
+                    ch === undefined
+                      ? []
+                      : yield* getEventStickinessBuckets({
+                          ...actorScope,
+                          filters: { projectIds: [input.projectId] },
+                          interval: definition.interval,
+                          occurrenceCriteria,
+                          organizationId: project.organizationId,
+                          params: {
+                            endDate: resolvedTimeRange.end,
+                            startDate: resolvedTimeRange.start,
+                          },
+                          series: seriesDefinition,
+                        }).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch));
+                  return {
+                    buckets: buildStickinessBuckets(raw, computation, maximumIntervals),
+                    key: seriesDefinition.key,
+                    label: seriesDefinition.label ?? seriesDefinition.eventNames.join(" or "),
+                  };
+                }),
+              ),
+              { concurrency: 4 },
+            );
+            return {
+              computation,
+              interval: definition.interval,
+              kind: "stickiness" as const,
+              resolvedTimeRange,
+              series,
+            };
+          }
+          if (input.definition.kind === "lifecycle") {
+            const definition = yield* validateExecutableLifecycleDefinition(input.definition);
+            const resolvedTimeRange = yield* resolveTimeRange(definition.timeRange);
+            const points =
+              ch === undefined
+                ? []
+                : yield* getEventLifecyclePoints({
+                    ...actorScope,
+                    filters: { projectIds: [input.projectId] },
+                    granularity: definition.granularity,
+                    organizationId: project.organizationId,
+                    params: {
+                      endDate: resolvedTimeRange.end,
+                      startDate: resolvedTimeRange.start,
+                    },
+                    series: definition.series,
+                  }).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch));
+            const statuses = definition.statuses ?? [
+              "new" as const,
+              "returning" as const,
+              "resurrecting" as const,
+              "dormant" as const,
+            ];
+            return {
+              granularity: definition.granularity,
+              kind: "lifecycle" as const,
+              resolvedTimeRange,
+              series: buildLifecycleSeries(
+                points,
+                statuses,
+                resolvedTimeRange.start,
+                resolvedTimeRange.end,
+                definition.granularity,
+              ),
+            };
+          }
+          return yield* Effect.die("Unhandled custom analytics insight kind");
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to query the custom analytics insight",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to query the custom analytics insight",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** List people behind a selected custom-insight event segment. */
+      const queryPersons = Effect.fn("customAnalytics.queryPersons")(
+        function* (input: {
+          readonly cohortIds?: ReadonlyArray<string>;
+          readonly eventNames: ReadonlyArray<string>;
+          readonly filters?: AnalyticsFilterType;
+          readonly group?: { readonly property: string; readonly value: string };
+          readonly limit?: number;
+          readonly projectId: string;
+          readonly timeRange: CustomAnalyticsInsightQueryType["timeRange"];
+        }) {
+          const project = yield* getProject(input.projectId);
+          const eventNames = [
+            ...new Set(input.eventNames.map((name) => name.trim()).filter(Boolean)),
+          ];
+          if (eventNames.length === 0) {
+            return yield* Effect.fail(
+              new InvalidAnalyticsQueryError({
+                message: "Person drilldowns require at least one event name",
+              }),
+            );
+          }
+          if (input.filters) yield* validateCustomEventFilter(input.filters);
+          if (input.group) {
+            yield* validateCustomEventField(`${CUSTOM_PROPERTY_PREFIX}${input.group.property}`);
+          }
+          const resolvedTimeRange = yield* resolveTimeRange(input.timeRange);
+          const cohortPersonIds = yield* resolveCohortPersonIds(input.projectId, input.cohortIds);
+          const rows =
+            ch === undefined
+              ? []
+              : yield* getEventPersonDrilldown({
+                  ...(cohortPersonIds === undefined ? {} : { cohortPersonIds }),
+                  eventNames,
+                  ...(input.filters ? { filters: input.filters } : {}),
+                  ...(input.group ? { group: input.group } : {}),
+                  limit: Math.min(Math.max(input.limit ?? 50, 1), 100),
+                  organizationId: project.organizationId,
+                  params: {
+                    endDate: resolvedTimeRange.end,
+                    startDate: resolvedTimeRange.start,
+                  },
+                  projectId: project.id,
+                }).pipe(Effect.provideService(ClickhouseWebClient.ClickhouseWebClient, ch));
+          if (rows.length === 0) return { people: [], resolvedTimeRange };
+          const personRows = yield* db
+            .select({ email: persons.email, id: persons.id, name: persons.name })
+            .from(persons)
+            .where(
+              and(
+                eq(persons.projectId, project.id),
+                inArray(
+                  persons.id,
+                  rows.map((row) => row.personId),
+                ),
+                isNull(persons.archivedAt),
+                isNull(persons.deletedAt),
+                isNull(persons.mergedIntoPersonId),
+              ),
+            );
+          const personById = new Map(personRows.map((person) => [person.id, person]));
+          return {
+            people: rows.flatMap((row) => {
+              const person = personById.get(row.personId);
+              return person
+                ? [
+                    {
+                      email: person.email,
+                      eventCount: row.eventCount,
+                      lastSeenAt: row.lastSeenAt,
+                      name: person.name,
+                      personId: row.personId,
+                    },
+                  ]
+                : [];
+            }),
+            resolvedTimeRange,
+          };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to query custom analytics people",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to query custom analytics people",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** List saved insights for a project. */
+      const listInsights = Effect.fn("customAnalytics.listInsights")(
+        function* (input: { readonly projectId: string }) {
+          yield* getProject(input.projectId);
+          const rows = yield* db
+            .select()
+            .from(analyticsInsights)
+            .where(
+              and(
+                eq(analyticsInsights.projectId, input.projectId),
+                isNull(analyticsInsights.deletedAt),
+              ),
+            )
+            .orderBy(desc(analyticsInsights.updatedAt));
+          return { insights: rows.map(toSavedInsight) };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to list analytics insights",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Persist a new project insight definition. */
+      const createInsight = Effect.fn("customAnalytics.createInsight")(
+        function* (input: {
+          readonly definition: CustomAnalyticsInsightQueryType;
+          readonly description?: string;
+          readonly name: string;
+          readonly projectId: string;
+        }) {
+          const project = yield* getProject(input.projectId);
+          const session = yield* AuthSession;
+          const id = generateId("analyticsInsight");
+          yield* db.insert(analyticsInsights).values({
+            createdBy: session?.user?.id ?? "system",
+            definition: input.definition,
+            description: input.description,
+            id,
+            kind: input.definition.kind,
+            name: input.name,
+            organizationId: project.organizationId,
+            projectId: project.id,
+          });
+          return toSavedInsight(yield* loadInsightRow(id));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to create analytics insight",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Update a saved insight's metadata or definition. */
+      const updateInsight = Effect.fn("customAnalytics.updateInsight")(
+        function* (input: {
+          readonly definition?: CustomAnalyticsInsightQueryType;
+          readonly description?: string | null;
+          readonly id: string;
+          readonly name?: string;
+        }) {
+          yield* loadInsightRow(input.id);
+          yield* db
+            .update(analyticsInsights)
+            .set({
+              ...(input.definition === undefined
+                ? {}
+                : {
+                    definition: input.definition,
+                    kind: input.definition.kind,
+                  }),
+              ...(input.description === undefined ? {} : { description: input.description }),
+              ...(input.name === undefined ? {} : { name: input.name }),
+              updatedAt: new Date(),
+            })
+            .where(eq(analyticsInsights.id, input.id));
+          return toSavedInsight(yield* loadInsightRow(input.id));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to update analytics insight",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Soft-delete a saved insight and remove it from dashboards. */
+      const deleteInsight = Effect.fn("customAnalytics.deleteInsight")(
+        function* (input: { readonly id: string }) {
+          yield* loadInsightRow(input.id);
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(analyticsInsights)
+                .set({ deletedAt: new Date(), updatedAt: new Date() })
+                .where(eq(analyticsInsights.id, input.id));
+              yield* tx
+                .delete(analyticsDashboardItems)
+                .where(
+                  and(
+                    eq(analyticsDashboardItems.sourceType, "insight"),
+                    eq(analyticsDashboardItems.sourceId, input.id),
+                  ),
+                );
+            }),
+          );
+          return { deleted: true };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to delete analytics insight",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to delete analytics insight",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** List reusable static cohorts for a project. */
+      const listCohorts = Effect.fn("customAnalytics.listCohorts")(
+        function* (input: { readonly projectId: string }) {
+          yield* getProject(input.projectId);
+          const rows = yield* db
+            .select()
+            .from(analyticsCohorts)
+            .where(
+              and(
+                eq(analyticsCohorts.projectId, input.projectId),
+                isNull(analyticsCohorts.deletedAt),
+              ),
+            )
+            .orderBy(desc(analyticsCohorts.updatedAt));
+          return { cohorts: yield* Effect.forEach(rows, hydrateCohort) };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to list analytics cohorts",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Create a reusable static cohort from canonical project people. */
+      const createCohort = Effect.fn("customAnalytics.createCohort")(
+        function* (input: {
+          readonly description?: string;
+          readonly memberPersonIds: ReadonlyArray<string>;
+          readonly name: string;
+          readonly projectId: string;
+        }) {
+          const project = yield* getProject(input.projectId);
+          const session = yield* AuthSession;
+          const memberPersonIds = yield* validateCohortMembers(project.id, input.memberPersonIds);
+          const id = generateId("analyticsCohort");
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx.insert(analyticsCohorts).values({
+                createdBy: session?.user?.id ?? "system",
+                description: input.description,
+                id,
+                name: input.name,
+                organizationId: project.organizationId,
+                projectId: project.id,
+              });
+              if (memberPersonIds.length > 0) {
+                yield* tx.insert(analyticsCohortMembers).values(
+                  memberPersonIds.map((personId) => ({
+                    cohortId: id,
+                    id: generateId("analyticsCohortMember"),
+                    personId,
+                  })),
+                );
+              }
+            }),
+          );
+          return yield* hydrateCohort(yield* loadCohortRow(id));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to create analytics cohort",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to create analytics cohort",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** Update cohort metadata or atomically replace its static membership. */
+      const updateCohort = Effect.fn("customAnalytics.updateCohort")(
+        function* (input: {
+          readonly description?: string | null;
+          readonly id: string;
+          readonly memberPersonIds?: ReadonlyArray<string>;
+          readonly name?: string;
+        }) {
+          const cohort = yield* loadCohortRow(input.id);
+          const memberPersonIds =
+            input.memberPersonIds === undefined
+              ? undefined
+              : yield* validateCohortMembers(cohort.projectId, input.memberPersonIds);
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(analyticsCohorts)
+                .set({
+                  ...(input.description === undefined ? {} : { description: input.description }),
+                  ...(input.name === undefined ? {} : { name: input.name }),
+                  updatedAt: new Date(),
+                })
+                .where(eq(analyticsCohorts.id, cohort.id));
+              if (memberPersonIds !== undefined) {
+                yield* tx
+                  .delete(analyticsCohortMembers)
+                  .where(eq(analyticsCohortMembers.cohortId, cohort.id));
+                if (memberPersonIds.length > 0) {
+                  yield* tx.insert(analyticsCohortMembers).values(
+                    memberPersonIds.map((personId) => ({
+                      cohortId: cohort.id,
+                      id: generateId("analyticsCohortMember"),
+                      personId,
+                    })),
+                  );
+                }
+              }
+            }),
+          );
+          return yield* hydrateCohort(yield* loadCohortRow(cohort.id));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to update analytics cohort",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to update analytics cohort",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** Soft-delete a cohort and remove its materialized membership. */
+      const deleteCohort = Effect.fn("customAnalytics.deleteCohort")(
+        function* (input: { readonly id: string }) {
+          const cohort = yield* loadCohortRow(input.id);
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(analyticsCohorts)
+                .set({ deletedAt: new Date(), updatedAt: new Date() })
+                .where(eq(analyticsCohorts.id, cohort.id));
+              yield* tx
+                .delete(analyticsCohortMembers)
+                .where(eq(analyticsCohortMembers.cohortId, cohort.id));
+            }),
+          );
+          return { deleted: true };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to delete analytics cohort",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to delete analytics cohort",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** List dashboards and their ordered insight placements. */
+      const listDashboards = Effect.fn("customAnalytics.listDashboards")(
+        function* (input: { readonly projectId: string }) {
+          yield* getProject(input.projectId);
+          const rows = yield* db
+            .select()
+            .from(analyticsDashboards)
+            .where(
+              and(
+                eq(analyticsDashboards.projectId, input.projectId),
+                isNull(analyticsDashboards.deletedAt),
+              ),
+            )
+            .orderBy(desc(analyticsDashboards.updatedAt));
+          return { dashboards: yield* Effect.forEach(rows, hydrateDashboard) };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to list analytics dashboards",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Create an empty dashboard for a project. */
+      const createDashboard = Effect.fn("customAnalytics.createDashboard")(
+        function* (input: {
+          readonly description?: string;
+          readonly name: string;
+          readonly projectId: string;
+        }) {
+          const project = yield* getProject(input.projectId);
+          const session = yield* AuthSession;
+          const id = generateId("analyticsDashboard");
+          yield* db.insert(analyticsDashboards).values({
+            createdBy: session?.user?.id ?? "system",
+            description: input.description,
+            id,
+            name: input.name,
+            organizationId: project.organizationId,
+            projectId: project.id,
+          });
+          return yield* hydrateDashboard(yield* loadDashboardRow(id));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to create analytics dashboard",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Duplicate a dashboard and preserve its ordered card layout. */
+      const duplicateDashboard = Effect.fn("customAnalytics.duplicateDashboard")(
+        function* (input: { readonly id: string; readonly name?: string }) {
+          const source = yield* loadDashboardRow(input.id);
+          const sourceItems = yield* db
+            .select()
+            .from(analyticsDashboardItems)
+            .where(eq(analyticsDashboardItems.dashboardId, source.id))
+            .orderBy(asc(analyticsDashboardItems.position));
+          const session = yield* AuthSession;
+          const id = generateId("analyticsDashboard");
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx.insert(analyticsDashboards).values({
+                createdBy: session?.user?.id ?? "system",
+                description: source.description,
+                id,
+                name: input.name?.trim() || `${source.name} copy`,
+                organizationId: source.organizationId,
+                projectId: source.projectId,
+              });
+              if (sourceItems.length > 0) {
+                yield* tx.insert(analyticsDashboardItems).values(
+                  sourceItems.map((item) => ({
+                    dashboardId: id,
+                    id: generateId("analyticsDashboardItem"),
+                    layout: item.layout,
+                    position: item.position,
+                    sourceId: item.sourceId,
+                    sourceType: item.sourceType,
+                  })),
+                );
+              }
+            }),
+          );
+          return yield* hydrateDashboard(yield* loadDashboardRow(id));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to duplicate analytics dashboard",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to duplicate analytics dashboard",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** Update dashboard metadata. */
+      const updateDashboard = Effect.fn("customAnalytics.updateDashboard")(
+        function* (input: {
+          readonly description?: string | null;
+          readonly id: string;
+          readonly name?: string;
+        }) {
+          yield* loadDashboardRow(input.id);
+          yield* db
+            .update(analyticsDashboards)
+            .set({
+              ...(input.description === undefined ? {} : { description: input.description }),
+              ...(input.name === undefined ? {} : { name: input.name }),
+              updatedAt: new Date(),
+            })
+            .where(eq(analyticsDashboards.id, input.id));
+          return yield* hydrateDashboard(yield* loadDashboardRow(input.id));
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to update analytics dashboard",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Soft-delete a dashboard and its placements. */
+      const deleteDashboard = Effect.fn("customAnalytics.deleteDashboard")(
+        function* (input: { readonly id: string }) {
+          yield* loadDashboardRow(input.id);
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .update(analyticsDashboards)
+                .set({ deletedAt: new Date(), updatedAt: new Date() })
+                .where(eq(analyticsDashboards.id, input.id));
+              yield* tx
+                .delete(analyticsDashboardItems)
+                .where(eq(analyticsDashboardItems.dashboardId, input.id));
+            }),
+          );
+          return { deleted: true };
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to delete analytics dashboard",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to delete analytics dashboard",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** Add or move a saved insight or VoidQL query on a dashboard. */
+      const putDashboardItem = Effect.fn("customAnalytics.putDashboardItem")(
+        function* (input: {
+          readonly dashboardId: string;
+          readonly layout: AnalyticsDashboardItemLayoutType;
+          readonly position: number;
+          readonly source:
+            | { readonly id: string; readonly kind: "insight" }
+            | { readonly id: string; readonly kind: "voidql" };
+        }) {
+          const dashboard = yield* loadDashboardRow(input.dashboardId);
+          if (input.source.kind === "insight") {
+            const insight = yield* loadInsightRow(input.source.id);
+            if (dashboard.projectId !== insight.projectId) {
+              return yield* Effect.fail(
+                new AnalyticsServiceError({
+                  cause: input.source.id,
+                  message: "Dashboard and insight must belong to the same project",
+                }),
+              );
+            }
+          } else {
+            const [query] = yield* db
+              .select({ organizationId: analyticsSavedQuery.organizationId })
+              .from(analyticsSavedQuery)
+              .where(eq(analyticsSavedQuery.id, input.source.id))
+              .limit(1);
+            if (!query || query.organizationId !== dashboard.organizationId) {
+              return yield* Effect.fail(
+                new AnalyticsServiceError({
+                  cause: input.source.id,
+                  message: "Dashboard and saved query must belong to the same organization",
+                }),
+              );
+            }
+          }
+          const [existing] = yield* db
+            .select()
+            .from(analyticsDashboardItems)
+            .where(
+              and(
+                eq(analyticsDashboardItems.dashboardId, input.dashboardId),
+                eq(analyticsDashboardItems.sourceType, input.source.kind),
+                eq(analyticsDashboardItems.sourceId, input.source.id),
+              ),
+            )
+            .limit(1);
+          if (existing) {
+            yield* db
+              .update(analyticsDashboardItems)
+              .set({
+                layout: input.layout,
+                position: input.position,
+                updatedAt: new Date(),
+              })
+              .where(eq(analyticsDashboardItems.id, existing.id));
+          } else {
+            yield* db.insert(analyticsDashboardItems).values({
+              dashboardId: input.dashboardId,
+              id: generateId("analyticsDashboardItem"),
+              layout: input.layout,
+              position: input.position,
+              sourceId: input.source.id,
+              sourceType: input.source.kind,
+            });
+          }
+          return yield* hydrateDashboard(dashboard);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to update analytics dashboard item",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      /** Atomically replace the display order for every card on a dashboard. */
+      const reorderDashboardItems = Effect.fn("customAnalytics.reorderDashboardItems")(
+        function* (input: {
+          readonly dashboardId: string;
+          readonly itemIds: ReadonlyArray<string>;
+        }) {
+          const dashboard = yield* loadDashboardRow(input.dashboardId);
+          const itemRows = yield* db
+            .select({ id: analyticsDashboardItems.id })
+            .from(analyticsDashboardItems)
+            .where(eq(analyticsDashboardItems.dashboardId, input.dashboardId));
+          const itemIds = [...new Set(input.itemIds)];
+          const existingIds = new Set(itemRows.map((item) => item.id));
+          if (
+            itemIds.length !== input.itemIds.length ||
+            itemIds.length !== existingIds.size ||
+            itemIds.some((id) => !existingIds.has(id))
+          ) {
+            return yield* Effect.fail(
+              new AnalyticsServiceError({
+                cause: input.dashboardId,
+                message: "Dashboard card order must include every card exactly once",
+              }),
+            );
+          }
+          yield* db.transaction((tx) =>
+            Effect.forEach(
+              itemIds,
+              (id, position) =>
+                tx
+                  .update(analyticsDashboardItems)
+                  .set({ position, updatedAt: new Date() })
+                  .where(
+                    and(
+                      eq(analyticsDashboardItems.dashboardId, input.dashboardId),
+                      eq(analyticsDashboardItems.id, id),
+                    ),
+                  ),
+              { discard: true },
+            ),
+          );
+          return yield* hydrateDashboard(dashboard);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: String(error.cause),
+                    message: "Failed to reorder analytics dashboard cards",
+                  }),
+                ),
+              SqlError: (error) =>
+                Effect.fail(
+                  new AnalyticsServiceError({
+                    cause: error.message,
+                    message: "Failed to reorder analytics dashboard cards",
+                  }),
+                ),
+            }),
+          ),
+      );
+
+      /** Remove a saved analytics card from a dashboard. */
+      const removeDashboardItem = Effect.fn("customAnalytics.removeDashboardItem")(
+        function* (input: { readonly dashboardId: string; readonly itemId: string }) {
+          const dashboard = yield* loadDashboardRow(input.dashboardId);
+          yield* db
+            .delete(analyticsDashboardItems)
+            .where(
+              and(
+                eq(analyticsDashboardItems.dashboardId, input.dashboardId),
+                eq(analyticsDashboardItems.id, input.itemId),
+              ),
+            );
+          return yield* hydrateDashboard(dashboard);
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTag("EffectDrizzleQueryError", (error) =>
+              Effect.fail(
+                new AnalyticsServiceError({
+                  cause: String(error.cause),
+                  message: "Failed to remove analytics dashboard item",
+                }),
+              ),
+            ),
+          ),
+      );
+
+      return {
+        createCohort,
+        createDashboard,
+        createInsight,
+        deleteCohort,
+        deleteDashboard,
+        deleteInsight,
+        duplicateDashboard,
+        listCohorts,
+        listDashboards,
+        listInsights,
+        putDashboardItem,
+        queryInsight,
+        queryPersons,
+        reorderDashboardItems,
+        removeDashboardItem,
+        updateDashboard,
+        updateCohort,
+        updateInsight,
+      } as const;
+    }),
+  },
+) {
+  static layer: Layer.Layer<CustomAnalyticsService, never, Db> = Layer.effect(
+    CustomAnalyticsService,
+  )(CustomAnalyticsService.make);
+}
diff --git a/packages/core/src/services/analytics/clickhouse-accessor.ts b/packages/core/src/services/analytics/clickhouse-accessor.ts
index 1492960d0..b50d46df9 100644
--- a/packages/core/src/services/analytics/clickhouse-accessor.ts
+++ b/packages/core/src/services/analytics/clickhouse-accessor.ts
@@ -13,6 +13,17 @@ import type {
   TimeRangeParams,
 } from "../../domain/analytics/Analytics.ts";
 import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
+import type {
+  AnalyticsActorType,
+  AnalyticsBreakdownType,
+  AnalyticsEventSeriesType,
+  AnalyticsFilterType,
+  FunnelsInsightQueryType,
+  LifecycleInsightQueryType,
+  PathsInsightQueryType,
+  RetentionInsightQueryType,
+  StickinessInsightQueryType,
+} from "@voidhash/rpc";
 import type { SqlError } from "effect/unstable/sql/SqlError";
 
 // Unqualified table names — the runtime Clickhouse client connects with the
@@ -293,6 +304,1106 @@ const eventMetric = (input: EventMetricInput) =>
     return parseRowsToDataPoints(rows);
   });
 
+export interface EventTrendQueryInput extends AnalyticsActorQueryInput {
+  readonly aggregation: AnalyticsEventSeriesType["aggregation"];
+  readonly aggregateOverRange?: boolean;
+  readonly breakdown?: AnalyticsBreakdownType;
+  readonly eventNames: readonly string[];
+  readonly filters: CompiledAnalyticsFilter;
+  readonly mathProperty?: string;
+  readonly propertyFilter?: AnalyticsFilterType;
+  readonly organizationId: string;
+  readonly params: TimeRangeParams;
+}
+
+export interface EventTrendSeriesGroup {
+  readonly breakdownValue?: string;
+  readonly points: AnalyticsDataPoint[];
+}
+
+interface AnalyticsActorQueryInput {
+  readonly actor?: AnalyticsActorType;
+  readonly cohortPersonIds?: readonly string[];
+}
+
+interface EventTrendRow extends AnalyticsRow {
+  breakdown: string;
+}
+
+const customEventField = (
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  field: string,
+): ReturnType<typeof buildEventFilters> => {
+  if (field === "event.name") return ch`${ch.literal(`${EVENT_ALIAS}.event_name`)}`;
+  if (field === "person.id") {
+    return ch`${ch.literal(
+      `coalesce(${effectivePersonIdExpression}, ${effectiveDistinctIdExpression})`,
+    )}`;
+  }
+  return ch`JSONExtractString(
+    ${ch.literal(EVENT_PROPERTIES)},
+    ${ch.param("String", field.slice("event.properties.".length))}
+  )`;
+};
+
+const analyticsActorKey = (
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  actor: AnalyticsActorType | undefined,
+): ReturnType<typeof buildEventFilters> =>
+  actor?.kind === "group"
+    ? ch`nullIf(JSONExtractString(
+        ${ch.literal(EVENT_PROPERTIES)},
+        ${ch.param("String", actor.property)}
+      ), '')`
+    : ch`${ch.literal(
+        `coalesce(${effectivePersonIdExpression}, ${effectiveDistinctIdExpression})`,
+      )}`;
+
+const analyticsActorFilter = (
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  input: AnalyticsActorQueryInput,
+): ReturnType<typeof buildEventFilters> => {
+  const actorKey = analyticsActorKey(ch, input.actor);
+  const cohortFilter =
+    input.cohortPersonIds === undefined
+      ? ch`1 = 1`
+      : input.cohortPersonIds.length === 0
+        ? ch`0 = 1`
+        : ch`${ch.literal(effectivePersonIdExpression)} IN ${ch.param(
+            "Array(String)",
+            input.cohortPersonIds,
+          )}`;
+  return ch`notEmpty(toString(${actorKey})) AND ${cohortFilter}`;
+};
+
+const stringFilterValue = (value: unknown): string => String(value ?? "");
+
+const buildCustomEventFilter = (
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  filter: AnalyticsFilterType,
+): ReturnType<typeof buildEventFilters> => {
+  if (filter.type === "and" || filter.type === "or") {
+    const operator = filter.type === "and" ? "AND" : "OR";
+    return filter.filters
+      .reduce(
+        (acc, child, index) =>
+          index === 0
+            ? ch`(${buildCustomEventFilter(ch, child)}`
+            : ch`${acc} ${ch.literal(operator)} ${buildCustomEventFilter(ch, child)}`,
+        ch``,
+      )
+      .pipe((fragment) => ch`${fragment})`);
+  }
+  if (filter.type === "not") {
+    return ch`NOT (${buildCustomEventFilter(ch, filter.filter)})`;
+  }
+
+  const predicate = filter as Extract<AnalyticsFilterType, { readonly type: "predicate" }>;
+  const expression = customEventField(ch, predicate.field);
+  switch (predicate.op) {
+    case "eq":
+      return ch`${expression} = ${ch.param("String", stringFilterValue(predicate.value))}`;
+    case "neq":
+      return ch`${expression} != ${ch.param("String", stringFilterValue(predicate.value))}`;
+    case "in":
+      return ch`${expression} IN ${ch.param(
+        "Array(String)",
+        Array.isArray(predicate.value) ? predicate.value.map(stringFilterValue) : [],
+      )}`;
+    case "not_in":
+      return ch`${expression} NOT IN ${ch.param(
+        "Array(String)",
+        Array.isArray(predicate.value) ? predicate.value.map(stringFilterValue) : [],
+      )}`;
+    case "contains":
+      return ch`positionCaseInsensitive(
+        ${expression},
+        ${ch.param("String", stringFilterValue(predicate.value))}
+      ) > 0`;
+    case "exists":
+      return ch`notEmpty(${expression})`;
+    case "gt":
+    case "gte":
+    case "lt":
+    case "lte":
+      return ch`0 = 1`;
+  }
+  return ch`0 = 1`;
+};
+
+/**
+ * Query a custom event series using the identity-stitched analytics event view.
+ * Number displays can aggregate the whole range into one point without summing per-bucket users.
+ */
+export const getEventTrendSeries = (input: EventTrendQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const actorKey = analyticsActorKey(ch, input.actor);
+    const actorFilter = analyticsActorFilter(ch, input);
+    const period = input.aggregateOverRange
+      ? "toDateTime('1970-01-01 00:00:00')"
+      : getDateTruncExpression(EVENT_TS, input.params.granularity);
+    const propertyExpression = ch`toFloat64OrNull(JSONExtractRaw(
+      ${ch.literal(EVENT_PROPERTIES)},
+      ${ch.param("String", input.mathProperty ?? "")}
+    ))`;
+    const aggregateExpression =
+      input.aggregation === "unique_users"
+        ? ch`countDistinct(${actorKey})`
+        : input.aggregation === "property_sum"
+          ? ch`sum(${propertyExpression})`
+          : input.aggregation === "property_average"
+            ? ch`avg(${propertyExpression})`
+            : input.aggregation === "property_minimum"
+              ? ch`min(${propertyExpression})`
+              : input.aggregation === "property_maximum"
+                ? ch`max(${propertyExpression})`
+                : input.aggregation === "property_median"
+                  ? ch`quantileExact(0.5)(${propertyExpression})`
+                  : input.aggregation === "property_p75"
+                    ? ch`quantileExact(0.75)(${propertyExpression})`
+                    : input.aggregation === "property_p90"
+                      ? ch`quantileExact(0.9)(${propertyExpression})`
+                      : input.aggregation === "property_p95"
+                        ? ch`quantileExact(0.95)(${propertyExpression})`
+                        : input.aggregation === "property_p99"
+                          ? ch`quantileExact(0.99)(${propertyExpression})`
+                          : ch`count()`;
+    const breakdownExpression = input.breakdown
+      ? customEventField(ch, input.breakdown.field)
+      : ch`${ch.param("String", "")}`;
+    const customFilter = input.propertyFilter
+      ? buildCustomEventFilter(ch, input.propertyFilter)
+      : ch`1 = 1`;
+    const perPeriodLimit = input.breakdown ? Math.min((input.breakdown.limit ?? 10) * 4, 400) : 1;
+    const dedupedEvents = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          AND event_ts >= ${ch.param("DateTime", toClickhouseDateTime(input.params.startDate))}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          AND event_name IN ${ch.param("Array(String)", input.eventNames)}`,
+    );
+    const rows = yield* ch.withClickhouseSettings(
+      ch<EventTrendRow>`
+        SELECT
+          ${ch.literal(period)} AS period,
+          ${breakdownExpression} AS breakdown,
+          ${aggregateExpression} AS total
+        ${dedupedEvents}
+        ${ch.literal(RESOLVED_EVENTS_JOIN)}
+        WHERE ${customFilter}
+          AND ${actorFilter}
+        GROUP BY period, breakdown
+        ORDER BY period ASC, total DESC
+        LIMIT ${ch.param("UInt32", perPeriodLimit)} BY period
+      `,
+      tenantSettings(input.organizationId),
+    );
+
+    const grouped = new Map<string, AnalyticsDataPoint[]>();
+    for (const row of rows) {
+      const points = parseRowsToDataPoints([row]);
+      if (points.length === 0) continue;
+      const key = input.breakdown ? row.breakdown : "";
+      const existing = grouped.get(key);
+      if (existing) existing.push(points[0]);
+      else grouped.set(key, points);
+    }
+
+    const groups = [...grouped.entries()].map(([breakdownValue, points]) => ({
+      ...(input.breakdown ? { breakdownValue } : {}),
+      points,
+    }));
+    if (!input.breakdown) return groups;
+
+    const direction = input.breakdown.order === "asc" ? 1 : -1;
+    return groups
+      .sort(
+        (left, right) =>
+          direction *
+          (left.points.reduce((sum, point) => sum + point.value, 0) -
+            right.points.reduce((sum, point) => sum + point.value, 0)),
+      )
+      .slice(0, input.breakdown.limit ?? 10);
+  });
+
+export interface EventPersonDrilldownQueryInput {
+  readonly cohortPersonIds?: readonly string[];
+  readonly eventNames: readonly string[];
+  readonly filters?: AnalyticsFilterType;
+  readonly group?: { readonly property: string; readonly value: string };
+  readonly limit: number;
+  readonly organizationId: string;
+  readonly params: Pick<TimeRangeParams, "endDate" | "startDate">;
+  readonly projectId: string;
+}
+
+export interface EventPersonDrilldownRow {
+  readonly eventCount: number;
+  readonly lastSeenAt: Date;
+  readonly personId: string;
+}
+
+interface EventPersonDrilldownSqlRow {
+  event_count: number | string;
+  last_seen_at: Date | string;
+  person_id: string;
+}
+
+/** Query people who performed a selected event series in a bounded insight window. */
+export const getEventPersonDrilldown = (input: EventPersonDrilldownQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const propertyFilter = input.filters ? buildCustomEventFilter(ch, input.filters) : ch`1 = 1`;
+    const cohortFilter = analyticsActorFilter(ch, {
+      actor: { kind: "person" },
+      cohortPersonIds: input.cohortPersonIds,
+    });
+    const groupFilter = input.group
+      ? ch`${customEventField(ch, `event.properties.${input.group.property}`)} = ${ch.param(
+          "String",
+          input.group.value,
+        )}`
+      : ch`1 = 1`;
+    const dedupedEvents = resolvedEventsFrom(
+      ch,
+      ch`project_id = ${ch.param("String", input.projectId)}
+          AND event_ts >= ${ch.param("DateTime", toClickhouseDateTime(input.params.startDate))}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          AND event_name IN ${ch.param("Array(String)", input.eventNames)}`,
+    );
+    const rows = yield* ch.withClickhouseSettings(
+      ch<EventPersonDrilldownSqlRow>`
+        SELECT
+          ${ch.literal(effectivePersonIdExpression)} AS person_id,
+          count() AS event_count,
+          max(${ch.literal(EVENT_TS)}) AS last_seen_at
+        ${dedupedEvents}
+        ${ch.literal(RESOLVED_EVENTS_JOIN)}
+        WHERE notEmpty(person_id)
+          AND ${propertyFilter}
+          AND ${cohortFilter}
+          AND ${groupFilter}
+        GROUP BY person_id
+        ORDER BY last_seen_at DESC, event_count DESC, person_id ASC
+        LIMIT ${ch.param("UInt8", input.limit)}
+      `,
+      tenantSettings(input.organizationId),
+    );
+
+    return rows.flatMap((row) => {
+      const lastSeenAt = parsePeriod(row.last_seen_at);
+      return lastSeenAt
+        ? [{ eventCount: Number(row.event_count ?? 0), lastSeenAt, personId: row.person_id }]
+        : [];
+    });
+  });
+
+export interface EventFunnelQueryInput extends AnalyticsActorQueryInput {
+  readonly breakdown?: AnalyticsBreakdownType;
+  readonly breakdownAttributionStep?: number;
+  readonly conversionWindowSeconds: number;
+  readonly filters: CompiledAnalyticsFilter;
+  readonly order: FunnelsInsightQueryType["order"];
+  readonly organizationId: string;
+  readonly params: Pick<TimeRangeParams, "endDate" | "startDate">;
+  readonly steps: FunnelsInsightQueryType["steps"];
+}
+
+const joinSqlFragments = (
+  ch: ClickhouseWebClient.ClickhouseWebClient,
+  fragments: ReadonlyArray<ReturnType<typeof buildEventFilters>>,
+  separator = ", ",
+): ReturnType<typeof buildEventFilters> =>
+  fragments.reduce(
+    (acc, fragment, index) =>
+      index === 0 ? fragment : ch`${acc}${ch.literal(separator)}${fragment}`,
+    ch``,
+  );
+
+interface EventFunnelBreakdownCounts {
+  readonly breakdownValue: string;
+  readonly counts: number[];
+}
+
+const queryEventFunnelRows = (
+  input: EventFunnelQueryInput,
+  withBreakdown: boolean,
+): Effect.Effect<
+  ReadonlyArray<Record<string, string | number>>,
+  SqlError,
+  ClickhouseWebClient.ClickhouseWebClient
+> =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const breakdown = withBreakdown ? input.breakdown : undefined;
+    const conversionWindowMilliseconds = input.conversionWindowSeconds * 1_000;
+    const allEventNames = [...new Set(input.steps.flatMap((step) => [...step.eventNames]))];
+    const eventNameScope =
+      input.order === "strict"
+        ? ch``
+        : ch`AND event_name IN ${ch.param("Array(String)", allEventNames)}`;
+    const dedupedEvents = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          AND event_ts >= ${ch.param("DateTime", toClickhouseDateTime(input.params.startDate))}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          ${eventNameScope}`,
+    );
+    const actorKey = analyticsActorKey(ch, input.actor);
+    const actorFilter = analyticsActorFilter(ch, input);
+    const stepConditions = input.steps.map((step) => {
+      const propertyFilter = step.filters ? buildCustomEventFilter(ch, step.filters) : ch`1 = 1`;
+      return ch`(
+        ${ch.literal(`${EVENT_ALIAS}.event_name`)} IN ${ch.param("Array(String)", step.eventNames)}
+        AND ${propertyFilter}
+      )`;
+    });
+    const attributionIndex = Math.min(
+      Math.max((input.breakdownAttributionStep ?? 1) - 1, 0),
+      input.steps.length - 1,
+    );
+    const attributionCondition = stepConditions[attributionIndex] ?? ch`0 = 1`;
+    const breakdownAggregate = breakdown
+      ? ch`argMinIf(
+          toString(${customEventField(ch, breakdown.field)}),
+          ${ch.literal(EVENT_TS)},
+          ${attributionCondition}
+        )`
+      : undefined;
+    const breakdownProjection = breakdownAggregate
+      ? ch`, ${breakdownAggregate} AS breakdown_value`
+      : ch``;
+    const breakdownSelect = breakdown ? ch`breakdown_value,` : ch``;
+    const breakdownGrouping = breakdown
+      ? ch`GROUP BY breakdown_value
+          ORDER BY ${ch.literal(`step_${input.steps.length - 1}`)}
+            ${ch.literal(breakdown.order === "asc" ? "ASC" : "DESC")},
+            breakdown_value ASC
+          LIMIT ${ch.param("UInt32", breakdown.limit ?? 10)}`
+      : ch``;
+
+    if (input.order === "any") {
+      const timeArrays = stepConditions.map(
+        (condition, index) =>
+          ch`groupArrayIf(
+            toUInt64(toUnixTimestamp64Milli(${ch.literal(EVENT_TS)})),
+            ${condition}
+          ) AS ${ch.literal(`times_${index}`)}`,
+      );
+      const counts = input.steps.map((_, stepIndex) => {
+        const aliases = Array.from({ length: stepIndex + 1 }, (_, index) => `times_${index}`);
+        if (stepIndex === 0) {
+          return ch`countIf(notEmpty(${ch.literal(aliases[0] ?? "times_0")})) AS ${ch.literal(
+            "step_0",
+          )}`;
+        }
+        const candidates = joinSqlFragments(
+          ch,
+          aliases.map((alias) => ch`${ch.literal(alias)}`),
+        );
+        const windowChecks = joinSqlFragments(
+          ch,
+          aliases.map(
+            (alias) =>
+              ch`arrayExists(
+                candidate -> candidate >= window_start
+                  AND candidate <= window_start + ${ch.param("UInt64", conversionWindowMilliseconds)},
+                ${ch.literal(alias)}
+              )`,
+          ),
+          " AND ",
+        );
+        return ch`countIf(
+          arrayExists(
+            window_start -> (${windowChecks}),
+            arrayConcat(${candidates})
+          )
+        ) AS ${ch.literal(`step_${stepIndex}`)}`;
+      });
+      return yield* ch.withClickhouseSettings(
+        ch<Record<string, string | number>>`
+          SELECT ${breakdownSelect} ${joinSqlFragments(ch, counts)}
+          FROM (
+            SELECT
+              ${actorKey} AS person_key,
+              ${joinSqlFragments(ch, timeArrays)}
+              ${breakdownProjection}
+            ${dedupedEvents}
+            ${ch.literal(RESOLVED_EVENTS_JOIN)}
+            WHERE ${actorFilter}
+            GROUP BY person_key
+          )
+          ${breakdownGrouping}
+        `,
+        tenantSettings(input.organizationId),
+      );
+    }
+
+    const modes =
+      input.order === "strict"
+        ? ch`${ch.param("UInt64", conversionWindowMilliseconds)}, 'strict_deduplication', 'strict_order'`
+        : ch`${ch.param("UInt64", conversionWindowMilliseconds)}, 'strict_deduplication'`;
+    const funnelLevel = ch`windowFunnel(${modes})(
+      toUInt64(toUnixTimestamp64Milli(${ch.literal(EVENT_TS)})),
+      ${joinSqlFragments(ch, stepConditions)}
+    )`;
+    const counts = input.steps.map(
+      (_, index) =>
+        ch`countIf(level >= ${ch.param("UInt8", index + 1)}) AS ${ch.literal(`step_${index}`)}`,
+    );
+    return yield* ch.withClickhouseSettings(
+      ch<Record<string, string | number>>`
+        SELECT ${breakdownSelect} ${joinSqlFragments(ch, counts)}
+        FROM (
+          SELECT
+            ${actorKey} AS person_key,
+            ${funnelLevel} AS level
+            ${breakdownProjection}
+          ${dedupedEvents}
+          ${ch.literal(RESOLVED_EVENTS_JOIN)}
+          WHERE ${actorFilter}
+          GROUP BY person_key
+        )
+        ${breakdownGrouping}
+      `,
+      tenantSettings(input.organizationId),
+    );
+  });
+
+const funnelCountsFromRow = (
+  row: Record<string, string | number> | undefined,
+  stepCount: number,
+): number[] => Array.from({ length: stepCount }, (_, index) => Number(row?.[`step_${index}`] ?? 0));
+
+/** Query overall step reach counts for an identity-stitched event funnel. */
+export const getEventFunnelCounts = (input: EventFunnelQueryInput) =>
+  queryEventFunnelRows(input, false).pipe(
+    Effect.map((rows) => funnelCountsFromRow(rows[0], input.steps.length)),
+  );
+
+/** Query attributed step reach counts for the top funnel breakdown values. */
+export const getEventFunnelBreakdownCounts = (
+  input: EventFunnelQueryInput,
+): Effect.Effect<
+  ReadonlyArray<EventFunnelBreakdownCounts>,
+  SqlError,
+  ClickhouseWebClient.ClickhouseWebClient
+> =>
+  input.breakdown
+    ? queryEventFunnelRows(input, true).pipe(
+        Effect.map((rows) =>
+          rows.map((row) => ({
+            breakdownValue: String(row.breakdown_value ?? ""),
+            counts: funnelCountsFromRow(row, input.steps.length),
+          })),
+        ),
+      )
+    : Effect.succeed([]);
+
+export interface EventRetentionQueryInput extends AnalyticsActorQueryInput {
+  readonly cumulative: boolean;
+  readonly filters: CompiledAnalyticsFilter;
+  readonly intervals: number;
+  readonly organizationId: string;
+  readonly params: Pick<TimeRangeParams, "endDate" | "startDate">;
+  readonly period: RetentionInsightQueryType["period"];
+  readonly retentionType: "first_time" | "recurring";
+  readonly returning: RetentionInsightQueryType["returning"];
+  readonly start: RetentionInsightQueryType["start"];
+}
+
+export interface EventRetentionCohort {
+  readonly cohortSize: number;
+  readonly cohortStart: Date;
+  readonly counts: number[];
+}
+
+interface EventRetentionRow extends Record<string, string | number | Date> {
+  cohort_size: string | number;
+  cohort_start: string | Date;
+}
+
+/** Query recurring or first-time identity-stitched retention cohorts. */
+export const getEventRetentionCohorts = (input: EventRetentionQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const periodExpression = getDateTruncExpression(EVENT_TS, input.period);
+    const actorKey = analyticsActorKey(ch, input.actor);
+    const actorFilter = analyticsActorFilter(ch, input);
+    const startFilter = input.start.filters
+      ? buildCustomEventFilter(ch, input.start.filters)
+      : ch`1 = 1`;
+    const returningFilter = input.returning.filters
+      ? buildCustomEventFilter(ch, input.returning.filters)
+      : ch`1 = 1`;
+    const startFrom = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          ${
+            input.retentionType === "recurring"
+              ? ch`AND event_ts >= ${ch.param(
+                  "DateTime",
+                  toClickhouseDateTime(input.params.startDate),
+                )}`
+              : ch``
+          }
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          AND event_name IN ${ch.param("Array(String)", [...input.start.eventNames])}`,
+    );
+    const returningFrom = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          AND event_ts >= ${ch.param("DateTime", toClickhouseDateTime(input.params.startDate))}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          AND event_name IN ${ch.param("Array(String)", [...input.returning.eventNames])}`,
+    );
+    const starts =
+      input.retentionType === "recurring"
+        ? ch`
+            SELECT
+              ${actorKey} AS person_key,
+              ${ch.literal(periodExpression)} AS cohort_start
+            ${startFrom}
+            ${ch.literal(RESOLVED_EVENTS_JOIN)}
+            WHERE ${startFilter} AND ${actorFilter}
+            GROUP BY person_key, cohort_start
+          `
+        : ch`
+            SELECT
+              ${actorKey} AS person_key,
+              min(${ch.literal(periodExpression)}) AS cohort_start
+            ${startFrom}
+            ${ch.literal(RESOLVED_EVENTS_JOIN)}
+            WHERE ${startFilter} AND ${actorFilter}
+            GROUP BY person_key
+            HAVING cohort_start >= ${ch.param(
+              "DateTime",
+              toClickhouseDateTime(input.params.startDate),
+            )}
+          `;
+    const returns = ch`
+      SELECT
+        ${actorKey} AS person_key,
+        ${ch.literal(periodExpression)} AS return_period
+      ${returningFrom}
+      ${ch.literal(RESOLVED_EVENTS_JOIN)}
+      WHERE ${returningFilter} AND ${actorFilter}
+      GROUP BY person_key, return_period
+    `;
+    const intervalCounts = Array.from({ length: input.intervals }, (_, interval) => {
+      const intervalCondition =
+        input.cumulative && interval > 0
+          ? ch`dateDiff(${ch.param("String", input.period)}, starts.cohort_start, returns.return_period)
+                >= ${ch.param("UInt8", interval)}`
+          : ch`dateDiff(${ch.param("String", input.period)}, starts.cohort_start, returns.return_period)
+                = ${ch.param("UInt8", interval)}`;
+      return ch`uniqExactIf(
+        starts.person_key,
+        notEmpty(returns.person_key) AND ${intervalCondition}
+      ) AS ${ch.literal(`interval_${interval}`)}`;
+    });
+    const rows = yield* ch.withClickhouseSettings(
+      ch<EventRetentionRow>`
+        WITH
+          starts AS (${starts}),
+          returns AS (${returns})
+        SELECT
+          starts.cohort_start AS cohort_start,
+          uniqExact(starts.person_key) AS cohort_size,
+          ${joinSqlFragments(ch, intervalCounts)}
+        FROM starts
+        LEFT JOIN returns
+          ON returns.person_key = starts.person_key
+          AND returns.return_period >= starts.cohort_start
+          AND dateDiff(
+            ${ch.param("String", input.period)},
+            starts.cohort_start,
+            returns.return_period
+          ) < ${ch.param("UInt8", input.intervals)}
+        GROUP BY cohort_start
+        ORDER BY cohort_start ASC
+      `,
+      tenantSettings(input.organizationId),
+    );
+
+    return rows.flatMap((row) => {
+      const cohortStart = parsePeriod(row.cohort_start);
+      if (!cohortStart) return [];
+      return [
+        {
+          cohortSize: Number(row.cohort_size ?? 0),
+          cohortStart,
+          counts: Array.from({ length: input.intervals }, (_, interval) =>
+            Number(row[`interval_${interval}`] ?? 0),
+          ),
+        },
+      ];
+    });
+  });
+
+export interface EventPathsQueryInput extends AnalyticsActorQueryInput {
+  readonly definition: PathsInsightQueryType;
+  readonly filters: CompiledAnalyticsFilter;
+  readonly organizationId: string;
+  readonly params: Pick<TimeRangeParams, "endDate" | "startDate">;
+}
+
+export interface EventPathLink {
+  readonly averageTransitionSeconds: number;
+  readonly count: number;
+  readonly source: string;
+  readonly sourceStep: number;
+  readonly target: string;
+  readonly targetStep: number;
+}
+
+interface EventPathRow {
+  average_transition_seconds: string | number;
+  count: string | number;
+  source: string;
+  source_step: string | number;
+  target: string;
+  target_step: string | number;
+}
+
+/** Query adjacent event transitions from bounded, identity-stitched user sessions. */
+export const getEventPathLinks = (input: EventPathsQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const definition = input.definition;
+    const includeEvents =
+      definition.eventNames.length > 0
+        ? ch`AND event_name IN ${ch.param("Array(String)", [...definition.eventNames])}`
+        : ch``;
+    const dedupedEvents = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          AND event_ts >= ${ch.param("DateTime", toClickhouseDateTime(input.params.startDate))}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          ${includeEvents}`,
+    );
+    const actorKey = analyticsActorKey(ch, input.actor);
+    const actorFilter = analyticsActorFilter(ch, input);
+    const pathItem =
+      definition.pathItem === "screen_name"
+        ? ch`${ch.literal(jsonString("$screen_name", "screen_name", "screenName"))}`
+        : ch`${ch.literal(`${EVENT_ALIAS}.event_name`)}`;
+    const propertyFilter = definition.filters
+      ? buildCustomEventFilter(ch, definition.filters)
+      : ch`1 = 1`;
+    const excludePathItems =
+      definition.excludeEventNames && definition.excludeEventNames.length > 0
+        ? ch`AND ${pathItem} NOT IN ${ch.param("Array(String)", [...definition.excludeEventNames])}`
+        : ch``;
+    const sessionGapSeconds = definition.sessionGapSeconds ?? 1_800;
+    const orderedEvents = ch`
+      SELECT
+        ${actorKey} AS person_key,
+        ${pathItem} AS path_item,
+        ${ch.literal(EVENT_TS)} AS path_time,
+        ${ch.literal(`${EVENT_ALIAS}.event_id`)} AS event_id
+      ${dedupedEvents}
+      ${ch.literal(RESOLVED_EVENTS_JOIN)}
+      WHERE ${propertyFilter} AND ${actorFilter} ${excludePathItems}
+      ORDER BY person_key ASC, path_time ASC, event_id ASC
+    `;
+    const sessions = ch`
+      SELECT
+        person_key,
+        arraySplit(
+          item -> item.3 > ${ch.param("UInt32", sessionGapSeconds)},
+          arrayZip(
+            path_items,
+            path_times,
+            arrayDifference(arrayMap(value -> toUInt64(toUnixTimestamp(value)), path_times))
+          )
+        ) AS sessions
+      FROM (
+        SELECT
+          person_key,
+          groupArray(path_item) AS path_items,
+          groupArray(path_time) AS path_times
+        FROM (${orderedEvents})
+        WHERE notEmpty(path_item)
+        GROUP BY person_key
+      )
+    `;
+    const compactPath =
+      definition.collapseRepeated === false
+        ? ch`session`
+        : ch`arrayFilter(
+            (item, item_index) -> item_index = 1
+              OR tupleElement(item, 1) != tupleElement(session[item_index - 1], 1),
+            session,
+            arrayEnumerate(session)
+          )`;
+    const compactedPaths = ch`
+      SELECT
+        person_key,
+        ${compactPath} AS compact_path
+      FROM (${sessions})
+      ARRAY JOIN sessions AS session
+      WHERE length(session) >= 2
+    `;
+    const startIndex = definition.startEventName
+      ? ch`indexOf(path_names, ${ch.param("String", definition.startEventName)})`
+      : ch`1`;
+    const endIndex = definition.endEventName
+      ? definition.startEventName
+        ? ch`if(
+            indexOf(
+              arraySlice(path_names, start_index),
+              ${ch.param("String", definition.endEventName)}
+            ) > 0,
+            indexOf(
+              arraySlice(path_names, start_index),
+              ${ch.param("String", definition.endEventName)}
+            ) + start_index - 1,
+            0
+          )`
+        : ch`indexOf(path_names, ${ch.param("String", definition.endEventName)})`
+      : ch`length(path_names)`;
+    const prefixSteps = Math.ceil((definition.maxDepth - 1) / 2);
+    const suffixSteps = Math.floor((definition.maxDepth - 1) / 2);
+    const selectedPath =
+      definition.startEventName && definition.endEventName
+        ? ch`if(
+            end_index - start_index + 1 <= ${ch.param("UInt8", definition.maxDepth)},
+            arraySlice(compact_path, start_index, end_index - start_index + 1),
+            arrayConcat(
+              arraySlice(compact_path, start_index, ${ch.param("UInt8", prefixSteps)}),
+              [tuple(
+                '…',
+                tupleElement(compact_path[end_index - ${ch.param("UInt8", suffixSteps)} + 1], 2),
+                toInt64(0)
+              )],
+              arraySlice(
+                compact_path,
+                end_index - ${ch.param("UInt8", suffixSteps)} + 1,
+                ${ch.param("UInt8", suffixSteps)}
+              )
+            )
+          )`
+        : definition.startEventName
+          ? ch`arraySlice(compact_path, start_index, ${ch.param("UInt8", definition.maxDepth)})`
+          : definition.endEventName
+            ? ch`arraySlice(
+                compact_path,
+                greatest(1, end_index - ${ch.param("UInt8", definition.maxDepth)} + 1),
+                least(${ch.param("UInt8", definition.maxDepth)}, end_index)
+              )`
+            : ch`arraySlice(compact_path, 1, ${ch.param("UInt8", definition.maxDepth)})`;
+    const endpointConditions = [
+      ...(definition.startEventName ? [ch`start_index > 0`] : []),
+      ...(definition.endEventName ? [ch`end_index > 0`] : []),
+      ...(definition.startEventName && definition.endEventName
+        ? [ch`end_index >= start_index`]
+        : []),
+    ];
+    const endpointWhere =
+      endpointConditions.length > 0 ? joinSqlFragments(ch, endpointConditions, " AND ") : ch`1 = 1`;
+    const selectedPaths = ch`
+      SELECT
+        person_key,
+        ${selectedPath} AS selected_path
+      FROM (
+        SELECT
+          person_key,
+          compact_path,
+          arrayMap(item -> item.1, compact_path) AS path_names,
+          ${startIndex} AS start_index,
+          ${endIndex} AS end_index
+        FROM (${compactedPaths})
+      )
+      WHERE ${endpointWhere}
+    `;
+    const edgeRows = ch`
+      SELECT
+        tupleElement(selected_path[target_step - 1], 1) AS source,
+        target_step - 1 AS source_step,
+        tupleElement(selected_path[target_step], 1) AS target,
+        target_step AS target_step,
+        dateDiff(
+          'second',
+          tupleElement(selected_path[target_step - 1], 2),
+          tupleElement(selected_path[target_step], 2)
+        ) AS transition_seconds
+      FROM (${selectedPaths})
+      ARRAY JOIN arrayEnumerate(selected_path) AS target_step
+      WHERE target_step > 1
+    `;
+    const edgeConditions = [
+      ...(definition.minEdgeCount
+        ? [ch`count() >= ${ch.param("UInt32", definition.minEdgeCount)}`]
+        : []),
+      ...(definition.maxEdgeCount
+        ? [ch`count() <= ${ch.param("UInt32", definition.maxEdgeCount)}`]
+        : []),
+    ];
+    const edgeHaving =
+      edgeConditions.length > 0
+        ? ch`HAVING ${joinSqlFragments(ch, edgeConditions, " AND ")}`
+        : ch``;
+    const rows = yield* ch.withClickhouseSettings(
+      ch<EventPathRow>`
+        SELECT
+          source,
+          source_step,
+          target,
+          target_step,
+          count() AS count,
+          avg(transition_seconds) AS average_transition_seconds
+        FROM (${edgeRows})
+        GROUP BY source, source_step, target, target_step
+        ${edgeHaving}
+        ORDER BY count DESC, source_step ASC, source ASC, target ASC
+        LIMIT ${ch.param("UInt16", definition.edgeLimit ?? 50)}
+      `,
+      tenantSettings(input.organizationId),
+    );
+
+    return rows.map((row) => ({
+      averageTransitionSeconds: Number(row.average_transition_seconds ?? 0),
+      count: Number(row.count ?? 0),
+      source: row.source,
+      sourceStep: Number(row.source_step),
+      target: row.target,
+      targetStep: Number(row.target_step),
+    }));
+  });
+
+export interface EventStickinessQueryInput extends AnalyticsActorQueryInput {
+  readonly filters: CompiledAnalyticsFilter;
+  readonly interval: StickinessInsightQueryType["interval"];
+  readonly occurrenceCriteria: NonNullable<StickinessInsightQueryType["occurrenceCriteria"]>;
+  readonly organizationId: string;
+  readonly params: Pick<TimeRangeParams, "endDate" | "startDate">;
+  readonly series: StickinessInsightQueryType["series"][number];
+}
+
+export interface EventStickinessBucket {
+  readonly count: number;
+  readonly intervals: number;
+}
+
+interface EventStickinessRow {
+  active_intervals: string | number;
+  actor_count: string | number;
+}
+
+/** Query the exact activity-frequency distribution for an identity-stitched event series. */
+export const getEventStickinessBuckets = (input: EventStickinessQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const periodExpression = getDateTruncExpression(EVENT_TS, input.interval);
+    const actorKey = analyticsActorKey(ch, input.actor);
+    const actorFilter = analyticsActorFilter(ch, input);
+    const propertyFilter = input.series.filters
+      ? buildCustomEventFilter(ch, input.series.filters)
+      : ch`1 = 1`;
+    const occurrenceCondition =
+      input.occurrenceCriteria.operator === "exact"
+        ? ch`count() = ${ch.param("UInt16", input.occurrenceCriteria.value)}`
+        : input.occurrenceCriteria.operator === "lte"
+          ? ch`count() <= ${ch.param("UInt16", input.occurrenceCriteria.value)}`
+          : ch`count() >= ${ch.param("UInt16", input.occurrenceCriteria.value)}`;
+    const dedupedEvents = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          AND event_ts >= ${ch.param("DateTime", toClickhouseDateTime(input.params.startDate))}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}
+          AND event_name IN ${ch.param("Array(String)", [...input.series.eventNames])}`,
+    );
+    const rows = yield* ch.withClickhouseSettings(
+      ch<EventStickinessRow>`
+        SELECT
+          active_intervals,
+          count() AS actor_count
+        FROM (
+          SELECT
+            person_key,
+            count() AS active_intervals
+          FROM (
+            SELECT
+              ${actorKey} AS person_key,
+              ${ch.literal(periodExpression)} AS active_period
+            ${dedupedEvents}
+            ${ch.literal(RESOLVED_EVENTS_JOIN)}
+            WHERE ${propertyFilter} AND ${actorFilter}
+            GROUP BY person_key, active_period
+            HAVING ${occurrenceCondition}
+          )
+          GROUP BY person_key
+        )
+        GROUP BY active_intervals
+        ORDER BY active_intervals ASC
+      `,
+      tenantSettings(input.organizationId),
+    );
+
+    return rows.flatMap((row) => {
+      const intervals = Number(row.active_intervals);
+      const count = Number(row.actor_count);
+      return Number.isSafeInteger(intervals) && intervals > 0 && Number.isFinite(count)
+        ? [{ count, intervals }]
+        : [];
+    });
+  });
+
+export interface EventLifecycleQueryInput extends AnalyticsActorQueryInput {
+  readonly filters: CompiledAnalyticsFilter;
+  readonly granularity: LifecycleInsightQueryType["granularity"];
+  readonly organizationId: string;
+  readonly params: Pick<TimeRangeParams, "endDate" | "startDate">;
+  readonly series: LifecycleInsightQueryType["series"];
+}
+
+export interface EventLifecyclePoint {
+  readonly count: number;
+  readonly status: "dormant" | "new" | "resurrecting" | "returning";
+  readonly timestamp: Date;
+}
+
+interface EventLifecycleRow {
+  count: string | number;
+  period: string | Date;
+  status: EventLifecyclePoint["status"];
+}
+
+const startOfLifecycleInterval = (
+  date: Date,
+  granularity: EventLifecycleQueryInput["granularity"],
+): Date => {
+  const value = new Date(date);
+  value.setUTCMinutes(0, 0, 0);
+  if (granularity === "hour") return value;
+  value.setUTCHours(0);
+  if (granularity === "day") return value;
+  if (granularity === "week") {
+    value.setUTCDate(value.getUTCDate() - ((value.getUTCDay() + 6) % 7));
+    return value;
+  }
+  value.setUTCDate(1);
+  return value;
+};
+
+/** Query new, returning, resurrecting, and dormant people for an event series. */
+export const getEventLifecyclePoints = (input: EventLifecycleQueryInput) =>
+  Effect.gen(function* () {
+    const ch = yield* ClickhouseWebClient.ClickhouseWebClient;
+    const periodExpression = getDateTruncExpression(EVENT_TS, input.granularity);
+    const actorKey =
+      input.actor?.kind === "group"
+        ? analyticsActorKey(ch, input.actor)
+        : ch`${ch.literal(effectivePersonIdExpression)}`;
+    const actorFilter =
+      input.actor?.kind === "group"
+        ? analyticsActorFilter(ch, input)
+        : ch`${analyticsActorFilter(ch, input)}
+            AND notEmpty(${ch.literal(effectivePersonIdExpression)})`;
+    const propertyFilter = input.series.filters
+      ? buildCustomEventFilter(ch, input.series.filters)
+      : ch`1 = 1`;
+    const matchingActivity = ch`(
+      ${ch.literal(`${EVENT_ALIAS}.event_name`)} IN ${ch.param("Array(String)", [
+        ...input.series.eventNames,
+      ])}
+      AND ${propertyFilter}
+    )`;
+    const dedupedEvents = resolvedEventsFrom(
+      ch,
+      ch`project_id IN ${ch.param("Array(String)", input.filters.projectIds)}
+          AND event_ts <= ${ch.param("DateTime", toClickhouseDateTime(input.params.endDate))}`,
+    );
+    const actorActivity = ch`
+      SELECT
+        ${actorKey} AS person_key,
+        min(${ch.literal(periodExpression)}) AS first_seen_period,
+        arraySort(
+          groupUniqArrayIf(${ch.literal(periodExpression)}, ${matchingActivity})
+        ) AS activity_periods
+      ${dedupedEvents}
+      ${ch.literal(RESOLVED_EVENTS_JOIN)}
+      WHERE ${actorFilter}
+      GROUP BY person_key
+      HAVING notEmpty(activity_periods)
+    `;
+    const activeRows = ch`
+      SELECT
+        person_key,
+        activity_periods[activity_index] AS period,
+        multiIf(
+          period = first_seen_period,
+          'new',
+          activity_index > 1 AND dateDiff(
+            ${ch.param("String", input.granularity)},
+            activity_periods[activity_index - 1],
+            period
+          ) = 1,
+          'returning',
+          'resurrecting'
+        ) AS status
+      FROM (${actorActivity})
+      ARRAY JOIN arrayEnumerate(activity_periods) AS activity_index
+    `;
+    const addIntervalExpression =
+      input.granularity === "hour"
+        ? "addHours(current_period, 1)"
+        : input.granularity === "day"
+          ? "addDays(current_period, 1)"
+          : input.granularity === "week"
+            ? "addWeeks(current_period, 1)"
+            : "addMonths(current_period, 1)";
+    const dormantRows = ch`
+      SELECT
+        person_key,
+        ${ch.literal(addIntervalExpression)} AS period,
+        'dormant' AS status
+      FROM (
+        SELECT
+          person_key,
+          activity_periods,
+          activity_index,
+          activity_periods[activity_index] AS current_period
+        FROM (${actorActivity})
+        ARRAY JOIN arrayEnumerate(activity_periods) AS activity_index
+      )
+      WHERE activity_index = length(activity_periods)
+        OR dateDiff(
+          ${ch.param("String", input.granularity)},
+          current_period,
+          activity_periods[activity_index + 1]
+        ) > 1
+    `;
+    const rangeStart = startOfLifecycleInterval(input.params.startDate, input.granularity);
+    const rangeEnd = startOfLifecycleInterval(input.params.endDate, input.granularity);
+    const rows = yield* ch.withClickhouseSettings(
+      ch<EventLifecycleRow>`
+        SELECT
+          period,
+          status,
+          uniqExact(person_key) AS count
+        FROM (
+          ${activeRows}
+          UNION ALL
+          ${dormantRows}
+        )
+        WHERE period >= ${ch.param("DateTime", toClickhouseDateTime(rangeStart))}
+          AND period <= ${ch.param("DateTime", toClickhouseDateTime(rangeEnd))}
+        GROUP BY period, status
+        ORDER BY period ASC, status ASC
+      `,
+      tenantSettings(input.organizationId),
+    );
+
+    return rows.flatMap((row) => {
+      const timestamp = parsePeriod(row.period);
+      if (!timestamp) return [];
+      return [{ count: Number(row.count ?? 0), status: row.status, timestamp }];
+    });
+  });
+
 export interface AnalyticsQueryInput {
   filters: CompiledAnalyticsFilter;
   organizationId: string;
diff --git a/packages/core/src/services/index.ts b/packages/core/src/services/index.ts
index 72bc5e936..84571dc8a 100644
--- a/packages/core/src/services/index.ts
+++ b/packages/core/src/services/index.ts
@@ -1,4 +1,5 @@
 export * from "./analytics/AnalyticsService.ts";
+export * from "./analytics/CustomAnalyticsService.ts";
 export * from "./voidql/VoidQlService.ts";
 export * from "./analyticsIngest/AnalyticsDispatchService.ts";
 export * from "./analyticsIngest/AnalyticsIngestDlqService.ts";
diff --git a/packages/core/src/services/voidql/VoidQlService.ts b/packages/core/src/services/voidql/VoidQlService.ts
index 3bfffff4f..2dd18cc30 100644
--- a/packages/core/src/services/voidql/VoidQlService.ts
+++ b/packages/core/src/services/voidql/VoidQlService.ts
@@ -19,7 +19,7 @@
  * remain available.
  */
 import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
-import { Db, analyticsSavedQuery } from "@voidhash/db";
+import { Db, analyticsDashboardItems, analyticsSavedQuery, and, desc, eq } from "@voidhash/db";
 import { Context, Effect, Layer, Option } from "effect";
 
 import { AuthSession } from "../../domain/auth/Auth.ts";
@@ -79,6 +79,19 @@ export interface SchemaDescriptor {
   readonly functions: readonly string[];
 }
 
+type AnalyticsSavedQueryRow = typeof analyticsSavedQuery.$inferSelect;
+
+const toSavedInsight = (row: AnalyticsSavedQueryRow) => ({
+  createdAt: row.createdAt,
+  createdBy: row.createdBy,
+  id: row.id,
+  name: row.name,
+  organizationId: row.organizationId,
+  schemaVersion: row.schemaVersion,
+  text: row.voidqlText,
+  updatedAt: row.updatedAt,
+});
+
 const DIALECT_REFERENCE =
   "VoidQL is a read-only SQL subset over events|persons|revenue. " +
   "SELECT … FROM … [JOIN … ON …] [WHERE] [GROUP BY] [HAVING] [ORDER BY] [LIMIT]; CTEs and subqueries supported. " +
@@ -141,6 +154,24 @@ export class VoidQlService extends Context.Service<VoidQlService>()("VoidQlServi
       // AI agents never get `pii` by default (§9, §14); authorized users do.
       new Set<Capability>(principal.kind === "user" ? ["pii"] : []);
 
+    const loadSavedInsight = Effect.fn("voidql.loadSavedInsight")(function* (id: string) {
+      const [insight] = yield* db
+        .select()
+        .from(analyticsSavedQuery)
+        .where(eq(analyticsSavedQuery.id, id))
+        .limit(1);
+      if (!insight) {
+        return yield* Effect.fail(
+          new VoidQlExecutionError({
+            cause: "not_found",
+            message: "The saved query was not found.",
+          }),
+        );
+      }
+      yield* buildAuthorizedScope(insight.organizationId);
+      return insight;
+    });
+
     const auditRun = (
       input: RunQueryInput,
       scope: AuthorizedScope,
@@ -238,9 +269,7 @@ export class VoidQlService extends Context.Service<VoidQlService>()("VoidQlServi
         ),
     );
 
-    const getSchema = Effect.fn("voidql.getSchema")(() =>
-      Effect.succeed(buildSchemaDescriptor()),
-    );
+    const getSchema = Effect.fn("voidql.getSchema")(() => Effect.succeed(buildSchemaDescriptor()));
 
     const saveInsight = Effect.fn("voidql.saveInsight")(
       function* (input: {
@@ -277,7 +306,102 @@ export class VoidQlService extends Context.Service<VoidQlService>()("VoidQlServi
         ),
     );
 
-    return { runQuery, validateQuery, getSchema, saveInsight } as const;
+    /** List saved VoidQL insights visible in an organization. */
+    const listInsights = Effect.fn("voidql.listInsights")(
+      function* (input: { readonly organizationId: string }) {
+        yield* buildAuthorizedScope(input.organizationId);
+        const rows = yield* db
+          .select()
+          .from(analyticsSavedQuery)
+          .where(eq(analyticsSavedQuery.organizationId, input.organizationId))
+          .orderBy(desc(analyticsSavedQuery.updatedAt));
+        return { insights: rows.map(toSavedInsight) };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTag("EffectDrizzleQueryError", () =>
+            Effect.fail(
+              new VoidQlExecutionError({
+                cause: "database",
+                message: "The saved queries could not be listed.",
+              }),
+            ),
+          ),
+        ),
+    );
+
+    /** Recompile and execute a saved VoidQL insight under the current authorization scope. */
+    const runSavedInsight = Effect.fn("voidql.runSavedInsight")(
+      function* (input: { readonly id: string; readonly principal: VoidQlPrincipal }) {
+        const insight = yield* loadSavedInsight(input.id);
+        return yield* runQuery({
+          organizationId: insight.organizationId,
+          principal: input.principal,
+          text: insight.voidqlText,
+        });
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTag("EffectDrizzleQueryError", () =>
+            Effect.fail(
+              new VoidQlExecutionError({
+                cause: "database",
+                message: "The saved query could not be executed.",
+              }),
+            ),
+          ),
+        ),
+    );
+
+    /** Delete an authorized saved VoidQL insight. */
+    const deleteInsight = Effect.fn("voidql.deleteInsight")(
+      function* (input: { readonly id: string }) {
+        const insight = yield* loadSavedInsight(input.id);
+        yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            yield* tx.delete(analyticsSavedQuery).where(eq(analyticsSavedQuery.id, insight.id));
+            yield* tx
+              .delete(analyticsDashboardItems)
+              .where(
+                and(
+                  eq(analyticsDashboardItems.sourceType, "voidql"),
+                  eq(analyticsDashboardItems.sourceId, insight.id),
+                ),
+              );
+          }),
+        );
+        return { deleted: true };
+      },
+      (effect) =>
+        effect.pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: () =>
+              Effect.fail(
+                new VoidQlExecutionError({
+                  cause: "database",
+                  message: "The saved query could not be deleted.",
+                }),
+              ),
+            SqlError: () =>
+              Effect.fail(
+                new VoidQlExecutionError({
+                  cause: "database",
+                  message: "The saved query could not be deleted.",
+                }),
+              ),
+          }),
+        ),
+    );
+
+    return {
+      deleteInsight,
+      getSchema,
+      listInsights,
+      runQuery,
+      runSavedInsight,
+      saveInsight,
+      validateQuery,
+    } as const;
   }),
 }) {
   static layer: Layer.Layer<VoidQlService, never, Db> = Layer.effect(VoidQlService)(
diff --git a/packages/core/src/utils/generate-id.ts b/packages/core/src/utils/generate-id.ts
index 1d1381bfd..451748e1e 100644
--- a/packages/core/src/utils/generate-id.ts
+++ b/packages/core/src/utils/generate-id.ts
@@ -83,6 +83,11 @@ const prefixes = {
   voidhashFeedback: "vh_fb",
   // VoidQL analytics
   analyticsSavedQuery: "an_sq",
+  analyticsCohort: "an_cohort",
+  analyticsCohortMember: "an_cohort_member",
+  analyticsInsight: "an_ins",
+  analyticsDashboard: "an_dash",
+  analyticsDashboardItem: "an_dash_item",
   // Push notifications (push_ namespace avoids the entrenched ppn webhook domain)
   pushNotificationConfig: "push_conf",
   pushDeviceToken: "push_tok",
diff --git a/packages/core/test/domain/analytics/custom-insights.test.ts b/packages/core/test/domain/analytics/custom-insights.test.ts
new file mode 100644
index 000000000..1207fa668
--- /dev/null
+++ b/packages/core/test/domain/analytics/custom-insights.test.ts
@@ -0,0 +1,666 @@
+import { CustomAnalyticsInsightQuery } from "@voidhash/rpc";
+import { Effect, Schema } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import { InvalidAnalyticsQueryError } from "../../../src/domain/analytics/Analytics.ts";
+import {
+  alignTrendsComparisonPoints,
+  applyTrendsPresentation,
+  buildFunnelStepResults,
+  buildLifecycleSeries,
+  buildPathsLinkResults,
+  buildRetentionCohortResults,
+  buildStickinessBuckets,
+  buildTrendsFormulaSeries,
+  countStickinessIntervals,
+  fillTrendsSeriesPoints,
+  resolveTrendsComparisonTimeRange,
+  validateExecutableFunnelsDefinition,
+  validateExecutableLifecycleDefinition,
+  validateExecutablePathsDefinition,
+  validateExecutableRetentionDefinition,
+  validateExecutableStickinessDefinition,
+  validateExecutableTrendsDefinition,
+} from "../../../src/services/analytics/CustomAnalyticsService.ts";
+
+const eventSeries = {
+  aggregation: "unique_users" as const,
+  eventNames: ["$screen"] as const,
+  key: "A",
+};
+
+const timeRange = { preset: "last_7d" as const };
+
+const fixtures = [
+  {
+    comparison: "previous_period",
+    display: "line",
+    granularity: "day",
+    kind: "trends",
+    series: [eventSeries],
+    timeRange,
+  },
+  {
+    conversionWindowSeconds: 86_400,
+    kind: "funnels",
+    order: "sequential",
+    steps: [
+      { eventNames: ["paywall_viewed"], key: "A" },
+      { eventNames: ["purchase_completed"], key: "B" },
+    ],
+    timeRange,
+  },
+  {
+    kind: "retention",
+    period: "week",
+    returning: { ...eventSeries, eventNames: ["session_started"], key: "B" },
+    start: eventSeries,
+    timeRange,
+  },
+  {
+    eventNames: ["$screen", "button_pressed"],
+    kind: "paths",
+    maxDepth: 8,
+    timeRange,
+  },
+  {
+    interval: "day",
+    kind: "stickiness",
+    series: [eventSeries],
+    timeRange,
+  },
+  {
+    granularity: "week",
+    kind: "lifecycle",
+    series: eventSeries,
+    timeRange,
+  },
+] as const;
+
+describe("CustomAnalyticsInsightQuery", () => {
+  it("decodes every supported insight family", async () => {
+    for (const fixture of fixtures) {
+      const decoded = await Effect.runPromise(
+        Schema.decodeUnknownEffect(CustomAnalyticsInsightQuery)(fixture),
+      );
+      expect(decoded.kind).toBe(fixture.kind);
+    }
+  });
+
+  it("rejects a trends definition without a series", async () => {
+    const error = await Effect.runPromise(
+      Schema.decodeUnknownEffect(CustomAnalyticsInsightQuery)({
+        display: "line",
+        granularity: "day",
+        kind: "trends",
+        series: [],
+        timeRange,
+      }).pipe(Effect.flip),
+    );
+    expect(error).toBeDefined();
+  });
+});
+
+describe("validateExecutableTrendsDefinition", () => {
+  it("accepts the first live trends subset", async () => {
+    const definition = await Effect.runPromise(validateExecutableTrendsDefinition(fixtures[0]));
+    expect(definition.kind).toBe("trends");
+    expect(definition.comparison).toBe("previous_period");
+    expect(definition.series[0].aggregation).toBe("unique_users");
+  });
+
+  it("fails with a typed error for a future query family", async () => {
+    const error = await Effect.runPromise(
+      validateExecutableTrendsDefinition(fixtures[1]).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(InvalidAnalyticsQueryError);
+    expect(error.message).toContain("funnels");
+  });
+
+  it("accepts custom property filters and breakdowns", async () => {
+    const definition = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        breakdown: { field: "event.properties.country", limit: 8 },
+        series: [
+          {
+            ...eventSeries,
+            filters: {
+              field: "event.properties.plan",
+              op: "eq",
+              type: "predicate",
+              value: "pro",
+            },
+          },
+        ],
+      }),
+    );
+    expect(definition.breakdown?.field).toBe("event.properties.country");
+    expect(definition.series[0].filters).toBeDefined();
+  });
+
+  it("rejects fields that cannot be lowered safely", async () => {
+    const error = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        breakdown: { field: "context.device.secret" },
+      }).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(InvalidAnalyticsQueryError);
+    expect(error.message).toContain("Unsupported custom analytics field");
+  });
+
+  it("resolves and aligns an equal previous-period window", () => {
+    const current = {
+      end: new Date("2026-07-13T12:00:00.000Z"),
+      start: new Date("2026-07-06T12:00:00.000Z"),
+    };
+    const comparison = resolveTrendsComparisonTimeRange("previous_period", current);
+
+    expect(comparison).toEqual({
+      end: new Date("2026-07-06T11:59:59.000Z"),
+      start: new Date("2026-06-29T12:00:00.000Z"),
+    });
+    expect(
+      alignTrendsComparisonPoints(
+        [{ timestamp: new Date("2026-06-30T00:00:00.000Z"), value: 12 }],
+        current,
+        comparison,
+        "day",
+      ),
+    ).toEqual([{ timestamp: new Date("2026-07-07T00:00:00.000Z"), value: 12 }]);
+  });
+
+  it("clamps leap day when resolving a previous-year comparison", () => {
+    const comparison = resolveTrendsComparisonTimeRange("previous_year", {
+      end: new Date("2024-03-01T08:30:00.000Z"),
+      start: new Date("2024-02-29T08:30:00.000Z"),
+    });
+
+    expect(comparison).toEqual({
+      end: new Date("2023-03-01T08:30:00.000Z"),
+      start: new Date("2023-02-28T08:30:00.000Z"),
+    });
+  });
+
+  it("aligns weekly comparisons by bucket position and fills sparse buckets", () => {
+    const current = {
+      end: new Date("2026-07-31T00:00:00.000Z"),
+      start: new Date("2026-07-01T00:00:00.000Z"),
+    };
+    const comparison = resolveTrendsComparisonTimeRange("previous_period", current);
+    expect(
+      alignTrendsComparisonPoints(
+        [{ timestamp: new Date("2026-06-08T00:00:00.000Z"), value: 7 }],
+        current,
+        comparison,
+        "week",
+      ),
+    ).toEqual([{ timestamp: new Date("2026-07-06T00:00:00.000Z"), value: 7 }]);
+
+    expect(
+      fillTrendsSeriesPoints(
+        [{ timestamp: new Date("2026-07-07T00:00:00.000Z"), value: 3 }],
+        {
+          end: new Date("2026-07-08T12:00:00.000Z"),
+          start: new Date("2026-07-06T12:00:00.000Z"),
+        },
+        "day",
+      ),
+    ).toEqual([
+      { timestamp: new Date("2026-07-06T00:00:00.000Z"), value: 0 },
+      { timestamp: new Date("2026-07-07T00:00:00.000Z"), value: 3 },
+      { timestamp: new Date("2026-07-08T00:00:00.000Z"), value: 0 },
+    ]);
+  });
+
+  it("smooths, accumulates, and removes weekend buckets in presentation order", () => {
+    const points = [
+      { timestamp: new Date("2026-07-10T00:00:00.000Z"), value: 2 },
+      { timestamp: new Date("2026-07-11T00:00:00.000Z"), value: 4 },
+      { timestamp: new Date("2026-07-12T00:00:00.000Z"), value: 6 },
+      { timestamp: new Date("2026-07-13T00:00:00.000Z"), value: 8 },
+    ];
+
+    expect(
+      applyTrendsPresentation(points, {
+        cumulative: true,
+        hideWeekends: true,
+        smoothingWindow: 2,
+      }),
+    ).toEqual([
+      { timestamp: new Date("2026-07-10T00:00:00.000Z"), value: 2 },
+      { timestamp: new Date("2026-07-13T00:00:00.000Z"), value: 17 },
+    ]);
+  });
+
+  it("rejects time-series presentation options on incompatible Trends definitions", async () => {
+    const smoothingError = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        granularity: "week",
+        smoothingWindow: 7,
+      }).pipe(Effect.flip),
+    );
+    expect(smoothingError.message).toContain("whole-day window");
+
+    const numberError = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        cumulative: true,
+        display: "number",
+      }).pipe(Effect.flip),
+    );
+    expect(numberError.message).toContain("do not support time-series");
+  });
+
+  it("validates formula syntax and series references", async () => {
+    const definition = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        formulas: [{ expression: "(A + 2) ** 2", key: "calculated" }],
+      }),
+    );
+    expect(definition.formulas?.[0]?.expression).toBe("(A + 2) ** 2");
+
+    const unknownSeries = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        formulas: [{ expression: "A / B", key: "calculated" }],
+      }).pipe(Effect.flip),
+    );
+    expect(unknownSeries.message).toContain("unknown series: b");
+
+    const unsafeSyntax = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        formulas: [{ expression: "globalThis.process", key: "calculated" }],
+      }).pipe(Effect.flip),
+    );
+    expect(unsafeSyntax.message).toContain("Unexpected character");
+  });
+
+  it("requires a safe numeric event property for property aggregations", async () => {
+    const definition = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        series: [{ ...eventSeries, aggregation: "property_average", mathProperty: "duration_ms" }],
+      }),
+    );
+    expect(definition.series[0].mathProperty).toBe("duration_ms");
+
+    const missingProperty = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        series: [{ ...eventSeries, aggregation: "property_sum" }],
+      }).pipe(Effect.flip),
+    );
+    expect(missingProperty.message).toContain("requires an event property");
+
+    const unusedProperty = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        series: [{ ...eventSeries, mathProperty: "duration_ms" }],
+      }).pipe(Effect.flip),
+    );
+    expect(unusedProperty.message).toContain("does not use an event property");
+  });
+
+  it("builds formula series with sparse buckets and aligned comparisons", async () => {
+    const definition = await Effect.runPromise(
+      validateExecutableTrendsDefinition({
+        ...fixtures[0],
+        formulas: [{ expression: "A / B * 100", key: "rate", label: "Activation rate" }],
+        series: [eventSeries, { ...eventSeries, eventNames: ["activated"], key: "B" }],
+      }),
+    );
+    const first = new Date("2026-07-06T00:00:00.000Z");
+    const second = new Date("2026-07-07T00:00:00.000Z");
+    const result = await Effect.runPromise(
+      buildTrendsFormulaSeries(definition, [
+        {
+          comparison: "current",
+          key: "A",
+          label: "A",
+          points: [
+            { timestamp: first, value: 10 },
+            { timestamp: second, value: 5 },
+          ],
+        },
+        {
+          comparison: "current",
+          key: "B",
+          label: "B",
+          points: [{ timestamp: first, value: 20 }],
+        },
+        {
+          comparison: "previous_period",
+          key: "A:comparison:previous_period",
+          label: "A (previous period)",
+          points: [{ timestamp: first, value: 4 }],
+        },
+        {
+          comparison: "previous_period",
+          key: "B:comparison:previous_period",
+          label: "B (previous period)",
+          points: [{ timestamp: first, value: 8 }],
+        },
+      ]),
+    );
+
+    expect(result).toHaveLength(2);
+    expect(result[0]).toMatchObject({
+      comparison: "current",
+      key: "rate",
+      label: "Activation rate",
+      points: [
+        { timestamp: first, value: 50 },
+        { timestamp: second, value: 0 },
+      ],
+    });
+    expect(result[1]).toMatchObject({
+      comparison: "previous_period",
+      key: "rate:comparison:previous_period",
+      label: "Activation rate (previous period)",
+      points: [{ timestamp: first, value: 50 }],
+    });
+  });
+});
+
+describe("executable funnels", () => {
+  it("accepts sequential, strict, and any-order funnels", async () => {
+    for (const order of ["sequential", "strict", "any"] as const) {
+      const definition = await Effect.runPromise(
+        validateExecutableFunnelsDefinition({ ...fixtures[1], order }),
+      );
+      expect(definition.order).toBe(order);
+    }
+  });
+
+  it("accepts a validated breakdown attribution step", async () => {
+    const definition = await Effect.runPromise(
+      validateExecutableFunnelsDefinition({
+        ...fixtures[1],
+        breakdown: { field: "event.properties.platform", limit: 5 },
+        breakdownAttributionStep: 2,
+      }),
+    );
+    expect(definition.breakdown?.field).toBe("event.properties.platform");
+    expect(definition.breakdownAttributionStep).toBe(2);
+
+    const error = await Effect.runPromise(
+      validateExecutableFunnelsDefinition({
+        ...fixtures[1],
+        breakdown: { field: "event.properties.platform" },
+        breakdownAttributionStep: 3,
+      }).pipe(Effect.flip),
+    );
+    expect(error.message).toContain("existing step");
+  });
+
+  it("rejects one-step funnels and unsafe conversion windows", async () => {
+    const oneStepError = await Effect.runPromise(
+      validateExecutableFunnelsDefinition({
+        ...fixtures[1],
+        steps: [fixtures[1].steps[0]],
+      }).pipe(Effect.flip),
+    );
+    expect(oneStepError).toBeInstanceOf(InvalidAnalyticsQueryError);
+
+    const windowError = await Effect.runPromise(
+      validateExecutableFunnelsDefinition({
+        ...fixtures[1],
+        conversionWindowSeconds: 31_536_001,
+      }).pipe(Effect.flip),
+    );
+    expect(windowError.message).toContain("365 days");
+  });
+
+  it("derives conversion and drop-off metrics from reach counts", async () => {
+    const definition = await Effect.runPromise(validateExecutableFunnelsDefinition(fixtures[1]));
+    const steps = buildFunnelStepResults(definition, [100, 64]);
+
+    expect(steps[0]).toMatchObject({ conversionRate: 1, count: 100, dropoffCount: 0 });
+    expect(steps[1]).toMatchObject({
+      conversionRate: 0.64,
+      count: 64,
+      dropoffCount: 36,
+      dropoffRate: 0.36,
+    });
+  });
+});
+
+describe("executable retention", () => {
+  it("accepts recurring and first-time cohort definitions", async () => {
+    for (const retentionType of ["recurring", "first_time"] as const) {
+      const definition = await Effect.runPromise(
+        validateExecutableRetentionDefinition({
+          ...fixtures[2],
+          cumulative: true,
+          intervals: 8,
+          reference: "cohort",
+          retentionType,
+        }),
+      );
+      expect(definition.retentionType).toBe(retentionType);
+    }
+  });
+
+  it("rejects invalid interval counts", async () => {
+    const error = await Effect.runPromise(
+      validateExecutableRetentionDefinition({
+        ...fixtures[2],
+        intervals: 25,
+      }).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(InvalidAnalyticsQueryError);
+    expect(error.message).toContain("24 intervals");
+  });
+
+  it("calculates cohort-relative and previous-period rates", async () => {
+    const base = await Effect.runPromise(
+      validateExecutableRetentionDefinition({ ...fixtures[2], intervals: 3 }),
+    );
+    const raw = [
+      {
+        cohortSize: 100,
+        cohortStart: new Date("2026-07-01T00:00:00.000Z"),
+        counts: [80, 40, 20],
+      },
+    ];
+    expect(buildRetentionCohortResults(base, raw)[0]?.cells.map((cell) => cell.rate)).toEqual([
+      0.8, 0.4, 0.2,
+    ]);
+    expect(
+      buildRetentionCohortResults({ ...base, reference: "previous" }, raw)[0]?.cells.map(
+        (cell) => cell.rate,
+      ),
+    ).toEqual([0.8, 0.5, 0.5]);
+  });
+});
+
+describe("executable paths", () => {
+  it("accepts mobile screen paths with session and density controls", async () => {
+    const definition = await Effect.runPromise(
+      validateExecutablePathsDefinition({
+        ...fixtures[3],
+        collapseRepeated: true,
+        edgeLimit: 80,
+        filters: {
+          field: "event.properties.platform",
+          op: "eq",
+          type: "predicate",
+          value: "ios",
+        },
+        pathItem: "screen_name",
+        sessionGapSeconds: 1_800,
+      }),
+    );
+    expect(definition.pathItem).toBe("screen_name");
+    expect(definition.sessionGapSeconds).toBe(1_800);
+  });
+
+  it("rejects empty endpoints and inverted edge-density controls", async () => {
+    const endpointError = await Effect.runPromise(
+      validateExecutablePathsDefinition({
+        ...fixtures[3],
+        startEventName: "",
+      }).pipe(Effect.flip),
+    );
+    expect(endpointError).toBeInstanceOf(InvalidAnalyticsQueryError);
+    expect(endpointError.message).toContain("cannot be empty");
+
+    const densityError = await Effect.runPromise(
+      validateExecutablePathsDefinition({
+        ...fixtures[3],
+        maxEdgeCount: 4,
+        minEdgeCount: 5,
+      }).pipe(Effect.flip),
+    );
+    expect(densityError.message).toContain("minimum link count");
+  });
+
+  it("normalizes path links without changing transition-frequency semantics", () => {
+    expect(
+      buildPathsLinkResults([
+        {
+          averageTransitionSeconds: 12.5,
+          count: 7,
+          source: "Home",
+          sourceStep: 1,
+          target: "Paywall",
+          targetStep: 2,
+        },
+      ]),
+    ).toEqual([
+      {
+        averageTransitionSeconds: 12.5,
+        count: 7,
+        source: "Home",
+        sourceStep: 1,
+        target: "Paywall",
+        targetStep: 2,
+      },
+    ]);
+  });
+});
+
+describe("executable stickiness", () => {
+  it("accepts exact and cumulative frequency definitions", async () => {
+    for (const computation of ["exact", "cumulative"] as const) {
+      const definition = await Effect.runPromise(
+        validateExecutableStickinessDefinition({
+          ...fixtures[4],
+          computation,
+          occurrenceCriteria: { operator: "gte", value: 2 },
+        }),
+      );
+      expect(definition.computation).toBe(computation);
+    }
+  });
+
+  it("rejects more than eight series", async () => {
+    const error = await Effect.runPromise(
+      validateExecutableStickinessDefinition({
+        ...fixtures[4],
+        series: Array.from({ length: 9 }, (_, index) => ({
+          ...eventSeries,
+          key: String(index),
+        })) as [typeof eventSeries, ...(typeof eventSeries)[]],
+      }).pipe(Effect.flip),
+    );
+    expect(error).toBeInstanceOf(InvalidAnalyticsQueryError);
+    expect(error.message).toContain("8 series");
+  });
+
+  it("fills exact gaps and builds at-least-N cumulative buckets", () => {
+    const raw = [
+      { count: 5, intervals: 1 },
+      { count: 2, intervals: 3 },
+    ];
+    expect(buildStickinessBuckets(raw, "exact", 4)).toEqual([
+      { count: 5, intervals: 1 },
+      { count: 0, intervals: 2 },
+      { count: 2, intervals: 3 },
+      { count: 0, intervals: 4 },
+    ]);
+    expect(buildStickinessBuckets(raw, "cumulative", 4)).toEqual([
+      { count: 7, intervals: 1 },
+      { count: 2, intervals: 2 },
+      { count: 2, intervals: 3 },
+      { count: 0, intervals: 4 },
+    ]);
+  });
+
+  it("counts inclusive hourly, weekly, and monthly buckets", () => {
+    expect(
+      countStickinessIntervals(
+        new Date("2026-07-13T10:30:00Z"),
+        new Date("2026-07-13T12:00:00Z"),
+        "hour",
+      ),
+    ).toBe(3);
+    expect(
+      countStickinessIntervals(
+        new Date("2026-07-12T00:00:00Z"),
+        new Date("2026-07-13T00:00:00Z"),
+        "week",
+      ),
+    ).toBe(2);
+    expect(
+      countStickinessIntervals(
+        new Date("2025-12-31T00:00:00Z"),
+        new Date("2026-02-01T00:00:00Z"),
+        "month",
+      ),
+    ).toBe(3);
+  });
+
+  it("rejects event-count aggregation", async () => {
+    const error = await Effect.runPromise(
+      validateExecutableStickinessDefinition({
+        ...fixtures[4],
+        series: [{ ...eventSeries, aggregation: "total_events" }],
+      }).pipe(Effect.flip),
+    );
+    expect(error.message).toContain("unique users");
+  });
+});
+
+describe("executable lifecycle", () => {
+  it("accepts selected lifecycle statuses and rejects event aggregation", async () => {
+    const definition = await Effect.runPromise(
+      validateExecutableLifecycleDefinition({
+        ...fixtures[5],
+        display: "stacked_area",
+        statuses: ["new", "returning", "dormant"],
+      }),
+    );
+    expect(definition.statuses).toEqual(["new", "returning", "dormant"]);
+
+    const error = await Effect.runPromise(
+      validateExecutableLifecycleDefinition({
+        ...fixtures[5],
+        series: { ...eventSeries, aggregation: "total_events" },
+      }).pipe(Effect.flip),
+    );
+    expect(error.message).toContain("unique users");
+  });
+
+  it("fills every selected status across the inclusive range", () => {
+    const series = buildLifecycleSeries(
+      [
+        { count: 2, status: "returning", timestamp: new Date("2026-07-02T00:00:00Z") },
+        { count: 1, status: "dormant", timestamp: new Date("2026-07-03T00:00:00Z") },
+      ],
+      ["returning", "dormant"],
+      new Date("2026-07-01T12:00:00Z"),
+      new Date("2026-07-03T18:00:00Z"),
+      "day",
+    );
+    expect(series.map((item) => [item.status, item.points.map((point) => point.count)])).toEqual([
+      ["returning", [0, 2, 0]],
+      ["dormant", [0, 0, 1]],
+    ]);
+  });
+});
diff --git a/packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts b/packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts
index 11434e046..d81640d7c 100644
--- a/packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts
+++ b/packages/core/test/services/analytics/clickhouse-accessor.integration.test.ts
@@ -48,6 +48,14 @@ import { CoreTestFixture } from "@testing/CoreTestFixture";
 import {
   type AnalyticsQueryInput,
   analyticsAccessor,
+  getEventFunnelBreakdownCounts,
+  getEventFunnelCounts,
+  getEventLifecyclePoints,
+  getEventPathLinks,
+  getEventPersonDrilldown,
+  getEventRetentionCohorts,
+  getEventStickinessBuckets,
+  getEventTrendSeries,
 } from "../../../src/services/analytics/clickhouse-accessor.ts";
 
 const { test } = CoreIntegrationTestHarness.make();
@@ -913,7 +921,824 @@ describe("analyticsAccessor — read-side dedup by event_id (latest processed_ts
   );
 });
 
-// Deferred: the harness binds the ClickHouse *read-write* user, which is NOT
+describe("getEventTrendSeries", () => {
+  test(
+    "aggregates total events and unique users across the full range for number charts",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-trends-total"));
+        yield* seedEvents(ns, [
+          {
+            eventName: "screen_viewed",
+            eventTs: new Date("2021-01-15T12:00:00.000Z"),
+            distinctId: `${ns}-one`,
+            properties: { duration_ms: 10 },
+          },
+          {
+            eventName: "screen_viewed",
+            eventTs: new Date("2021-01-16T12:00:00.000Z"),
+            distinctId: `${ns}-one`,
+            properties: { duration_ms: 30 },
+          },
+          {
+            eventName: "screen_viewed",
+            eventTs: new Date("2021-01-17T12:00:00.000Z"),
+            distinctId: `${ns}-one`,
+          },
+        ]);
+        const input = {
+          aggregateOverRange: true,
+          eventNames: ["screen_viewed"],
+          filters: filtersFor(),
+          organizationId,
+          params: { endDate, granularity: "day" as const, startDate },
+        };
+
+        const totals = yield* getEventTrendSeries({ ...input, aggregation: "total_events" });
+        const uniqueUsers = yield* getEventTrendSeries({
+          ...input,
+          aggregation: "unique_users",
+        });
+        const propertySum = yield* getEventTrendSeries({
+          ...input,
+          aggregation: "property_sum",
+          mathProperty: "duration_ms",
+        });
+        const propertyAverage = yield* getEventTrendSeries({
+          ...input,
+          aggregation: "property_average",
+          mathProperty: "duration_ms",
+        });
+
+        expect(totals[0]?.points.map((point) => point.value)).toEqual([3]);
+        expect(uniqueUsers[0]?.points.map((point) => point.value)).toEqual([1]);
+        expect(propertySum[0]?.points.map((point) => point.value)).toEqual([40]);
+        expect(propertyAverage[0]?.points.map((point) => point.value)).toEqual([20]);
+      }),
+    ),
+  );
+
+  test(
+    "counts unique group actors and applies person-cohort scope before aggregation",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-trends-groups"));
+        yield* seedEvents(ns, [
+          {
+            eventName: "opened",
+            eventTs: new Date("2021-01-15T12:00:00.000Z"),
+            distinctId: `${ns}-one-distinct`,
+            personId: `${ns}-one`,
+            properties: { account_id: "account-a" },
+          },
+          {
+            eventName: "opened",
+            eventTs: new Date("2021-01-16T12:00:00.000Z"),
+            distinctId: `${ns}-two-distinct`,
+            personId: `${ns}-two`,
+            properties: { account_id: "account-a" },
+          },
+          {
+            eventName: "opened",
+            eventTs: new Date("2021-01-17T12:00:00.000Z"),
+            distinctId: `${ns}-three-distinct`,
+            personId: `${ns}-three`,
+            properties: { account_id: "account-b" },
+          },
+        ]);
+        const input = {
+          actor: { kind: "group" as const, property: "account_id" },
+          aggregateOverRange: true,
+          aggregation: "unique_users" as const,
+          eventNames: ["opened"],
+          filters: filtersFor(),
+          organizationId,
+          params: { endDate, granularity: "day" as const, startDate },
+        };
+
+        const allGroups = yield* getEventTrendSeries(input);
+        const cohortGroups = yield* getEventTrendSeries({
+          ...input,
+          cohortPersonIds: [`${ns}-one`, `${ns}-two`],
+        });
+
+        expect(allGroups[0]?.points[0]?.value).toBe(2);
+        expect(cohortGroups[0]?.points[0]?.value).toBe(1);
+      }),
+    ),
+  );
+});
+
+describe("getEventPersonDrilldown", () => {
+  test(
+    "returns identified people scoped by cohort membership and group property",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-person-drilldown"));
+        yield* seedEvents(ns, [
+          {
+            eventName: "screen_viewed",
+            eventTs: new Date("2021-01-15T12:00:00.000Z"),
+            distinctId: `${ns}-one-distinct`,
+            personId: `${ns}-one`,
+            properties: { workspace_id: "mobile" },
+          },
+          {
+            eventName: "screen_viewed",
+            eventTs: new Date("2021-01-16T12:00:00.000Z"),
+            distinctId: `${ns}-one-distinct`,
+            personId: `${ns}-one`,
+            properties: { workspace_id: "mobile" },
+          },
+          {
+            eventName: "screen_viewed",
+            eventTs: new Date("2021-01-17T12:00:00.000Z"),
+            distinctId: `${ns}-two-distinct`,
+            personId: `${ns}-two`,
+            properties: { workspace_id: "web" },
+          },
+          {
+            eventName: "screen_viewed",
+            eventTs: new Date("2021-01-18T12:00:00.000Z"),
+            distinctId: `${ns}-three-distinct`,
+            personId: `${ns}-three`,
+            properties: { workspace_id: "mobile" },
+          },
+        ]);
+
+        const people = yield* getEventPersonDrilldown({
+          cohortPersonIds: [`${ns}-one`, `${ns}-two`],
+          eventNames: ["screen_viewed"],
+          group: { property: "workspace_id", value: "mobile" },
+          limit: 50,
+          organizationId,
+          params: { endDate, startDate },
+          projectId: ns,
+        });
+
+        expect(people).toEqual([
+          {
+            eventCount: 2,
+            lastSeenAt: new Date("2021-01-16T12:00:00.000Z"),
+            personId: `${ns}-one`,
+          },
+        ]);
+      }),
+    ),
+  );
+});
+
+describe("getEventFunnelCounts", () => {
+  test(
+    "distinguishes sequential, strict-adjacency, and any-order funnels",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-funnel-orders"));
+        const at = (seconds: number) => new Date(baseTs.getTime() + seconds * 1000);
+        yield* seedEvents(ns, [
+          {
+            eventName: "step_a",
+            eventTs: at(1),
+            distinctId: `${ns}-sequential`,
+            properties: { platform: "ios" },
+          },
+          { eventName: "unrelated", eventTs: at(2), distinctId: `${ns}-sequential` },
+          { eventName: "step_b", eventTs: at(3), distinctId: `${ns}-sequential` },
+          {
+            eventName: "step_a",
+            eventTs: at(4),
+            distinctId: `${ns}-strict`,
+            properties: { platform: "android" },
+          },
+          { eventName: "step_b", eventTs: at(5), distinctId: `${ns}-strict` },
+          { eventName: "step_b", eventTs: at(6), distinctId: `${ns}-reverse` },
+          {
+            eventName: "step_a",
+            eventTs: at(7),
+            distinctId: `${ns}-reverse`,
+            properties: { platform: "ios" },
+          },
+        ]);
+        const input = {
+          conversionWindowSeconds: 3_600,
+          filters: filtersFor(),
+          organizationId,
+          params: { endDate, startDate },
+          steps: [
+            { eventNames: ["step_a"] as const, key: "A" },
+            { eventNames: ["step_b"] as const, key: "B" },
+          ] as const,
+        };
+
+        const sequential = yield* getEventFunnelCounts({ ...input, order: "sequential" });
+        const strict = yield* getEventFunnelCounts({ ...input, order: "strict" });
+        const any = yield* getEventFunnelCounts({ ...input, order: "any" });
+
+        expect(sequential).toEqual([3, 2]);
+        expect(strict).toEqual([3, 1]);
+        expect(any).toEqual([3, 3]);
+
+        const breakdowns = yield* getEventFunnelBreakdownCounts({
+          ...input,
+          breakdown: { field: "event.properties.platform", limit: 5 },
+          breakdownAttributionStep: 1,
+          order: "sequential",
+        });
+        expect(breakdowns).toEqual([
+          { breakdownValue: "android", counts: [1, 1] },
+          { breakdownValue: "ios", counts: [2, 1] },
+        ]);
+      }),
+    ),
+  );
+});
+
+describe("getEventRetentionCohorts", () => {
+  test(
+    "distinguishes recurring and first-time cohorts and keeps rolling counts unique",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-retention"));
+        const day = (offset: number, hour = 12) =>
+          new Date(
+            `2021-01-${String(15 + offset).padStart(2, "0")}T${String(hour).padStart(2, "0")}:00:00.000Z`,
+          );
+        yield* seedEvents(ns, [
+          { eventName: "activated", eventTs: day(0), distinctId: `${ns}-one` },
+          { eventName: "activated", eventTs: day(1), distinctId: `${ns}-one` },
+          { eventName: "opened", eventTs: day(1, 14), distinctId: `${ns}-one` },
+          { eventName: "opened", eventTs: day(3), distinctId: `${ns}-one` },
+          { eventName: "activated", eventTs: day(0), distinctId: `${ns}-two` },
+          { eventName: "opened", eventTs: day(2), distinctId: `${ns}-two` },
+          { eventName: "activated", eventTs: day(1), distinctId: `${ns}-three` },
+          { eventName: "opened", eventTs: day(3), distinctId: `${ns}-three` },
+        ]);
+        const input = {
+          cumulative: false,
+          filters: filtersFor(),
+          intervals: 4,
+          organizationId,
+          params: { endDate, startDate },
+          period: "day" as const,
+          returning: {
+            aggregation: "unique_users" as const,
+            eventNames: ["opened"] as const,
+            key: "returning",
+          },
+          start: {
+            aggregation: "unique_users" as const,
+            eventNames: ["activated"] as const,
+            key: "start",
+          },
+        };
+
+        const recurring = yield* getEventRetentionCohorts({
+          ...input,
+          retentionType: "recurring",
+        });
+        const firstTime = yield* getEventRetentionCohorts({
+          ...input,
+          retentionType: "first_time",
+        });
+        const rolling = yield* getEventRetentionCohorts({
+          ...input,
+          cumulative: true,
+          retentionType: "first_time",
+        });
+
+        expect(recurring.map((cohort) => [cohort.cohortSize, cohort.counts])).toEqual([
+          [2, [0, 1, 1, 1]],
+          [2, [1, 0, 2, 0]],
+        ]);
+        expect(firstTime.map((cohort) => [cohort.cohortSize, cohort.counts])).toEqual([
+          [2, [0, 1, 1, 1]],
+          [1, [0, 0, 1, 0]],
+        ]);
+        expect(rolling[0]?.counts).toEqual([0, 2, 2, 1]);
+      }),
+    ),
+  );
+});
+
+describe("getEventLifecyclePoints", () => {
+  test(
+    "classifies new, returning, resurrecting, and dormant identities by period",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-lifecycle"));
+        const day = (offset: number, hour = 12) =>
+          new Date(
+            `2021-01-${String(15 + offset).padStart(2, "0")}T${String(hour).padStart(2, "0")}:00:00.000Z`,
+          );
+        yield* seedEvents(ns, [
+          {
+            eventName: "opened",
+            eventTs: day(0),
+            distinctId: `${ns}-returning`,
+            personId: `${ns}-returning-person`,
+          },
+          {
+            eventName: "opened",
+            eventTs: day(1),
+            distinctId: `${ns}-returning`,
+            personId: `${ns}-returning-person`,
+          },
+          {
+            eventName: "installed",
+            eventTs: day(-2),
+            distinctId: `${ns}-existing`,
+            personId: `${ns}-existing-person`,
+          },
+          {
+            eventName: "opened",
+            eventTs: day(0),
+            distinctId: `${ns}-existing`,
+            personId: `${ns}-existing-person`,
+          },
+          {
+            eventName: "opened",
+            eventTs: day(0),
+            distinctId: `${ns}-gap`,
+            personId: `${ns}-gap-person`,
+          },
+          {
+            eventName: "opened",
+            eventTs: day(2),
+            distinctId: `${ns}-gap`,
+            personId: `${ns}-gap-person`,
+          },
+          { eventName: "opened", eventTs: day(0), distinctId: `vh:anon:${ns}` },
+        ]);
+
+        const points = yield* getEventLifecyclePoints({
+          filters: filtersFor(),
+          granularity: "day",
+          organizationId,
+          params: { endDate: day(3, 23), startDate: day(0, 0) },
+          series: {
+            aggregation: "unique_users",
+            eventNames: ["opened"],
+            key: "A",
+          },
+        });
+
+        expect(
+          points.map((point) => [
+            point.timestamp.toISOString().slice(0, 10),
+            point.status,
+            point.count,
+          ]),
+        ).toEqual([
+          ["2021-01-15", "new", 2],
+          ["2021-01-15", "resurrecting", 1],
+          ["2021-01-16", "dormant", 2],
+          ["2021-01-16", "returning", 1],
+          ["2021-01-17", "dormant", 1],
+          ["2021-01-17", "resurrecting", 1],
+          ["2021-01-18", "dormant", 1],
+        ]);
+      }),
+    ),
+  );
+});
+
+describe("getEventPathLinks", () => {
+  test(
+    "counts adjacent session transitions, collapses repeats, and maps mobile screen names",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-paths"));
+        const at = (minutes: number) => new Date(baseTs.getTime() + minutes * 60_000);
+        yield* seedEvents(ns, [
+          { eventName: "home", eventTs: at(0), distinctId: `${ns}-one` },
+          { eventName: "home", eventTs: at(1), distinctId: `${ns}-one` },
+          { eventName: "search", eventTs: at(2), distinctId: `${ns}-one` },
+          { eventName: "purchase", eventTs: at(3), distinctId: `${ns}-one` },
+          { eventName: "settings", eventTs: at(34), distinctId: `${ns}-one` },
+          { eventName: "home", eventTs: at(0), distinctId: `${ns}-two` },
+          { eventName: "search", eventTs: at(4), distinctId: `${ns}-two` },
+          { eventName: "purchase", eventTs: at(5), distinctId: `${ns}-two` },
+          {
+            eventName: "$screen",
+            eventTs: at(10),
+            distinctId: `${ns}-screen`,
+            properties: { $screen_name: "Welcome" },
+          },
+          {
+            eventName: "$screen",
+            eventTs: at(11),
+            distinctId: `${ns}-screen`,
+            properties: { $screen_name: "Paywall" },
+          },
+          {
+            eventName: "$screen",
+            eventTs: at(12),
+            distinctId: `${ns}-screen`,
+            properties: { $screen_name: "Done" },
+          },
+          { eventName: "long_home", eventTs: at(15), distinctId: `${ns}-long` },
+          { eventName: "long_middle_a", eventTs: at(16), distinctId: `${ns}-long` },
+          { eventName: "long_middle_b", eventTs: at(17), distinctId: `${ns}-long` },
+          { eventName: "long_purchase", eventTs: at(18), distinctId: `${ns}-long` },
+        ]);
+
+        const eventLinks = yield* getEventPathLinks({
+          definition: {
+            collapseRepeated: true,
+            eventNames: ["home", "search", "purchase", "settings"],
+            kind: "paths",
+            maxDepth: 5,
+            sessionGapSeconds: 1_800,
+            timeRange: { preset: "last_30d" },
+          },
+          filters: filtersFor(),
+          organizationId,
+          params: { endDate, startDate },
+        });
+        const screenLinks = yield* getEventPathLinks({
+          definition: {
+            eventNames: ["$screen"],
+            kind: "paths",
+            maxDepth: 5,
+            pathItem: "screen_name",
+            timeRange: { preset: "last_30d" },
+          },
+          filters: filtersFor(),
+          organizationId,
+          params: { endDate, startDate },
+        });
+        const screenLinksWithExclusion = yield* getEventPathLinks({
+          definition: {
+            eventNames: ["$screen"],
+            excludeEventNames: ["Paywall"],
+            kind: "paths",
+            maxDepth: 5,
+            pathItem: "screen_name",
+            timeRange: { preset: "last_30d" },
+          },
+          filters: filtersFor(),
+          organizationId,
+          params: { endDate, startDate },
+        });
+        const collapsedEndpointLinks = yield* getEventPathLinks({
+          definition: {
+            endEventName: "long_purchase",
+            eventNames: ["long_home", "long_middle_a", "long_middle_b", "long_purchase"],
+            kind: "paths",
+            maxDepth: 3,
+            startEventName: "long_home",
+            timeRange: { preset: "last_30d" },
+          },
+          filters: filtersFor(),
+          organizationId,
+          params: { endDate, startDate },
+        });
+
+        expect(eventLinks).toEqual([
+          {
+            averageTransitionSeconds: 180,
+            count: 2,
+            source: "home",
+            sourceStep: 1,
+            target: "search",
+            targetStep: 2,
+          },
+          {
+            averageTransitionSeconds: 60,
+            count: 2,
+            source: "search",
+            sourceStep: 2,
+            target: "purchase",
+            targetStep: 3,
+          },
+        ]);
+        expect(screenLinks).toEqual([
+          {
+            averageTransitionSeconds: 60,
+            count: 1,
+            source: "Welcome",
+            sourceStep: 1,
+            target: "Paywall",
+            targetStep: 2,
+          },
+          {
+            averageTransitionSeconds: 60,
+            count: 1,
+            source: "Paywall",
+            sourceStep: 2,
+            target: "Done",
+            targetStep: 3,
+          },
+        ]);
+        expect(screenLinksWithExclusion).toEqual([
+          {
+            averageTransitionSeconds: 120,
+            count: 1,
+            source: "Welcome",
+            sourceStep: 1,
+            target: "Done",
+            targetStep: 2,
+          },
+        ]);
+        expect(collapsedEndpointLinks.map((link) => [link.source, link.target])).toEqual([
+          ["long_home", "…"],
+          ["…", "long_purchase"],
+        ]);
+      }),
+    ),
+  );
+});
+
+describe("getEventStickinessBuckets", () => {
+  test(
+    "stitches identities and applies minimum event occurrences inside each interval",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-stickiness"));
+        const activeAt = (dayOffset: number, hour: number) =>
+          new Date(
+            `2021-01-${String(15 + dayOffset).padStart(2, "0")}T${String(hour).padStart(2, "0")}:00:00.000Z`,
+          );
+        yield* seedEvents(ns, [
+          { eventName: "opened", eventTs: activeAt(0, 9), distinctId: `${ns}-three-days` },
+          { eventName: "opened", eventTs: activeAt(0, 12), distinctId: `${ns}-three-days` },
+          { eventName: "opened", eventTs: activeAt(1, 9), distinctId: `${ns}-three-days` },
+          { eventName: "opened", eventTs: activeAt(2, 9), distinctId: `${ns}-three-days` },
+          { eventName: "opened", eventTs: activeAt(0, 10), distinctId: `${ns}-two-days` },
+          { eventName: "opened", eventTs: activeAt(2, 10), distinctId: `${ns}-two-days` },
+          { eventName: "opened", eventTs: activeAt(1, 11), distinctId: `${ns}-one-day` },
+          {
+            eventName: "opened",
+            eventTs: activeAt(0, 14),
+            distinctId: `${ns}-stitched-a`,
+            personId: `${ns}-stitched-person`,
+          },
+          {
+            eventName: "opened",
+            eventTs: activeAt(1, 14),
+            distinctId: `${ns}-stitched-b`,
+            personId: `${ns}-stitched-person`,
+          },
+        ]);
+        const input = {
+          filters: filtersFor(),
+          interval: "day" as const,
+          organizationId,
+          params: { endDate, startDate },
+          series: {
+            aggregation: "unique_users" as const,
+            eventNames: ["opened"] as const,
+            key: "A",
+          },
+        };
+
+        const all = yield* getEventStickinessBuckets({
+          ...input,
+          occurrenceCriteria: { operator: "gte", value: 1 },
+        });
+        const repeated = yield* getEventStickinessBuckets({
+          ...input,
+          occurrenceCriteria: { operator: "gte", value: 2 },
+        });
+
+        expect(all).toEqual([
+          { count: 1, intervals: 1 },
+          { count: 2, intervals: 2 },
+          { count: 1, intervals: 3 },
+        ]);
+        expect(repeated).toEqual([{ count: 1, intervals: 1 }]);
+      }),
+    ),
+  );
+});
+
+describe("custom insight actor scope", () => {
+  test(
+    "applies group aggregation and person-cohort membership across every behavioral engine",
+    withEventCleanup((track) =>
+      Effect.gen(function* () {
+        const ns = track(uniqueNs("custom-group-cohort-engines"));
+        const at = (dayOffset: number, minutes: number) =>
+          new Date(Date.UTC(2021, 0, 15 + dayOffset, 9, minutes));
+        const personOne = `${ns}-person-one`;
+        const personTwo = `${ns}-person-two`;
+        const personThree = `${ns}-person-three`;
+        const group = (accountId: string) => ({ account_id: accountId });
+        yield* seedEvents(ns, [
+          {
+            distinctId: `${ns}-one`,
+            eventName: "funnel_start",
+            eventTs: at(0, 0),
+            personId: personOne,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-one`,
+            eventName: "funnel_finish",
+            eventTs: at(0, 1),
+            personId: personOne,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "funnel_start",
+            eventTs: at(0, 2),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "funnel_finish",
+            eventTs: at(0, 3),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+          {
+            distinctId: `${ns}-one`,
+            eventName: "retention_start",
+            eventTs: at(0, 5),
+            personId: personOne,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-two`,
+            eventName: "retention_return",
+            eventTs: at(1, 5),
+            personId: personTwo,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "retention_start",
+            eventTs: at(0, 6),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "retention_return",
+            eventTs: at(1, 6),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+          {
+            distinctId: `${ns}-one`,
+            eventName: "path_home",
+            eventTs: at(0, 10),
+            personId: personOne,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-two`,
+            eventName: "path_paywall",
+            eventTs: at(0, 11),
+            personId: personTwo,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "path_home",
+            eventTs: at(0, 12),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "path_paywall",
+            eventTs: at(0, 13),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+          {
+            distinctId: `${ns}-one`,
+            eventName: "opened",
+            eventTs: at(0, 20),
+            personId: personOne,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-two`,
+            eventName: "opened",
+            eventTs: at(1, 20),
+            personId: personTwo,
+            properties: group("account-a"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "opened",
+            eventTs: at(0, 21),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+          {
+            distinctId: `${ns}-three`,
+            eventName: "opened",
+            eventTs: at(1, 21),
+            personId: personThree,
+            properties: group("account-b"),
+          },
+        ]);
+
+        const actor = { kind: "group" as const, property: "account_id" };
+        const cohortPersonIds = [personOne, personTwo];
+        const scope = {
+          actor,
+          cohortPersonIds,
+          filters: filtersFor(),
+          organizationId,
+        };
+        const funnel = yield* getEventFunnelCounts({
+          ...scope,
+          conversionWindowSeconds: 3_600,
+          order: "sequential",
+          params: { endDate, startDate },
+          steps: [
+            { eventNames: ["funnel_start"], key: "A" },
+            { eventNames: ["funnel_finish"], key: "B" },
+          ],
+        });
+        const retention = yield* getEventRetentionCohorts({
+          ...scope,
+          cumulative: false,
+          intervals: 3,
+          params: { endDate: at(2, 59), startDate: at(0, 0) },
+          period: "day",
+          retentionType: "recurring",
+          returning: {
+            aggregation: "unique_users",
+            eventNames: ["retention_return"],
+            key: "returning",
+          },
+          start: {
+            aggregation: "unique_users",
+            eventNames: ["retention_start"],
+            key: "start",
+          },
+        });
+        const paths = yield* getEventPathLinks({
+          ...scope,
+          definition: {
+            eventNames: ["path_home", "path_paywall"],
+            kind: "paths",
+            maxDepth: 3,
+            timeRange: { preset: "last_30d" },
+          },
+          params: { endDate, startDate },
+        });
+        const stickiness = yield* getEventStickinessBuckets({
+          ...scope,
+          interval: "day",
+          occurrenceCriteria: { operator: "gte", value: 1 },
+          params: { endDate, startDate },
+          series: {
+            aggregation: "unique_users",
+            eventNames: ["opened"],
+            key: "A",
+          },
+        });
+        const lifecycle = yield* getEventLifecyclePoints({
+          ...scope,
+          granularity: "day",
+          params: { endDate: at(2, 59), startDate: at(0, 0) },
+          series: {
+            aggregation: "unique_users",
+            eventNames: ["opened"],
+            key: "A",
+          },
+        });
+
+        expect(funnel).toEqual([1, 1]);
+        expect(retention.map((cohort) => [cohort.cohortSize, cohort.counts])).toEqual([
+          [1, [0, 1, 0]],
+        ]);
+        expect(paths).toEqual([
+          {
+            averageTransitionSeconds: 60,
+            count: 1,
+            source: "path_home",
+            sourceStep: 1,
+            target: "path_paywall",
+            targetStep: 2,
+          },
+        ]);
+        expect(stickiness).toEqual([{ count: 1, intervals: 2 }]);
+        expect(
+          lifecycle.map((point) => [
+            point.timestamp.toISOString().slice(0, 10),
+            point.status,
+            point.count,
+          ]),
+        ).toEqual([
+          ["2021-01-15", "new", 1],
+          ["2021-01-16", "returning", 1],
+          ["2021-01-17", "dormant", 1],
+        ]);
+      }),
+    ),
+  );
+});
+
+// Deferred: the harness binds the ClickHouse *read-write* user, which is not
 // subject to the readonly role's row policy, so the `SQL_organization_id`
 // per-query setting the accessor passes is inert in-process — a row from
 // organization A is still visible when querying as organization B. Verifying
diff --git a/packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/migration.sql b/packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/migration.sql
new file mode 100644
index 000000000..6b1ed41c0
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/migration.sql
@@ -0,0 +1,42 @@
+CREATE TABLE "analytics_dashboard_item" (
+	"id" varchar(255) PRIMARY KEY,
+	"dashboard_id" varchar(255) NOT NULL,
+	"insight_id" varchar(255) NOT NULL,
+	"position" integer NOT NULL,
+	"layout" jsonb NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "analytics_dashboard" (
+	"id" varchar(255) PRIMARY KEY,
+	"organization_id" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"description" text,
+	"created_by" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "analytics_insight" (
+	"id" varchar(255) PRIMARY KEY,
+	"organization_id" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"description" text,
+	"kind" varchar(32) NOT NULL,
+	"definition" jsonb NOT NULL,
+	"created_by" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "analytics_dashboard_item_insight_idx" ON "analytics_dashboard_item" ("dashboard_id","insight_id");--> statement-breakpoint
+CREATE INDEX "analytics_dashboard_item_position_idx" ON "analytics_dashboard_item" ("dashboard_id","position");--> statement-breakpoint
+CREATE INDEX "analytics_dashboard_project_idx" ON "analytics_dashboard" ("project_id","updated_at");--> statement-breakpoint
+CREATE INDEX "analytics_dashboard_organization_idx" ON "analytics_dashboard" ("organization_id");--> statement-breakpoint
+CREATE INDEX "analytics_insight_project_idx" ON "analytics_insight" ("project_id","updated_at");--> statement-breakpoint
+CREATE INDEX "analytics_insight_organization_idx" ON "analytics_insight" ("organization_id");
diff --git a/packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/snapshot.json b/packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/snapshot.json
new file mode 100644
index 000000000..19e074caa
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260713072915_add_custom_analytics/snapshot.json
@@ -0,0 +1,15374 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "bd1fb283-f8f4-4944-ae33-bafa36318f7b",
+  "prevIds": [
+    "2a809b27-bc87-477e-8049-c2d441bb30ed"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard_item",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_insight",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_manifest",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_checkpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dashboard_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "insight_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "position",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "layout",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "definition",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "diagnostics",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "turn_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tree",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "insight_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_insight_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "position",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_position_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "turn_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_turn_doc_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_chat_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "chat_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "voidhash_ai_chat",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_checkpoint_chat_id_voidhash_ai_chat_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_item_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard_item",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_insight_pkey",
+      "schema": "public",
+      "table": "analytics_insight",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "source_hash"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_manifest_pkey",
+      "schema": "public",
+      "table": "paywall_component_manifest",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_checkpoint_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/migration.sql b/packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/migration.sql
new file mode 100644
index 000000000..d6da9c586
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/migration.sql
@@ -0,0 +1,23 @@
+CREATE TABLE "analytics_cohort_member" (
+	"id" varchar(255) PRIMARY KEY,
+	"cohort_id" varchar(255) NOT NULL,
+	"person_id" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "analytics_cohort" (
+	"id" varchar(255) PRIMARY KEY,
+	"organization_id" varchar(255) NOT NULL,
+	"project_id" varchar(255) NOT NULL,
+	"name" varchar(255) NOT NULL,
+	"description" text,
+	"created_by" varchar(255) NOT NULL,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "analytics_cohort_member_person_idx" ON "analytics_cohort_member" ("cohort_id","person_id");--> statement-breakpoint
+CREATE INDEX "analytics_cohort_member_cohort_idx" ON "analytics_cohort_member" ("cohort_id");--> statement-breakpoint
+CREATE INDEX "analytics_cohort_project_idx" ON "analytics_cohort" ("project_id","updated_at");--> statement-breakpoint
+CREATE INDEX "analytics_cohort_organization_idx" ON "analytics_cohort" ("organization_id");
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/snapshot.json b/packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/snapshot.json
new file mode 100644
index 000000000..5e2143ac0
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260713093958_add_analytics_cohorts/snapshot.json
@@ -0,0 +1,15673 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "d8944377-1138-4174-964a-509f8668caed",
+  "prevIds": [
+    "bd1fb283-f8f4-4944-ae33-bafa36318f7b"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_cohort_member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_cohort",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard_item",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_insight",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_manifest",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_checkpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cohort_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dashboard_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "insight_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "position",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "layout",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "definition",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "diagnostics",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "turn_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tree",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "cohort_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_member_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "cohort_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_member_cohort_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "insight_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_insight_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "position",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_position_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "turn_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_turn_doc_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_chat_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "chat_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "voidhash_ai_chat",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_checkpoint_chat_id_voidhash_ai_chat_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_cohort_member_pkey",
+      "schema": "public",
+      "table": "analytics_cohort_member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_cohort_pkey",
+      "schema": "public",
+      "table": "analytics_cohort",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_item_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard_item",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_insight_pkey",
+      "schema": "public",
+      "table": "analytics_insight",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "source_hash"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_manifest_pkey",
+      "schema": "public",
+      "table": "paywall_component_manifest",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_checkpoint_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/migration.sql b/packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/migration.sql
new file mode 100644
index 000000000..e1dfd53a5
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/migration.sql
@@ -0,0 +1,5 @@
+ALTER TABLE "analytics_dashboard_item" RENAME COLUMN "insight_id" TO "source_id";--> statement-breakpoint
+DROP INDEX "analytics_dashboard_item_insight_idx";--> statement-breakpoint
+ALTER TABLE "analytics_dashboard_item" ADD COLUMN "source_type" varchar(32) DEFAULT 'insight' NOT NULL;--> statement-breakpoint
+ALTER TABLE "analytics_dashboard_item" ALTER COLUMN "source_type" DROP DEFAULT;--> statement-breakpoint
+CREATE UNIQUE INDEX "analytics_dashboard_item_source_idx" ON "analytics_dashboard_item" ("dashboard_id","source_type","source_id");
diff --git a/packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/snapshot.json b/packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/snapshot.json
new file mode 100644
index 000000000..47899e441
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260713094531_glamorous_bushwacker/snapshot.json
@@ -0,0 +1,15695 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "c496b548-cd40-4842-bb6a-02bd8fa34da2",
+  "prevIds": [
+    "d8944377-1138-4174-964a-509f8668caed"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_cohort_member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_cohort",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard_item",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_insight",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_manifest",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_checkpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cohort_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dashboard_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "position",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "layout",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "definition",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "diagnostics",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "turn_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tree",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "cohort_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_member_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "cohort_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_member_cohort_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "source_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "source_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_source_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "position",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_position_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "turn_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_turn_doc_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_chat_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "chat_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "voidhash_ai_chat",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_checkpoint_chat_id_voidhash_ai_chat_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_cohort_member_pkey",
+      "schema": "public",
+      "table": "analytics_cohort_member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_cohort_pkey",
+      "schema": "public",
+      "table": "analytics_cohort",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_item_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard_item",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_insight_pkey",
+      "schema": "public",
+      "table": "analytics_insight",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "source_hash"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_manifest_pkey",
+      "schema": "public",
+      "table": "paywall_component_manifest",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_checkpoint_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": [
+    "public.analytics_dashboard_item.insight_id->public.analytics_dashboard_item.source_id"
+  ]
+}
\ No newline at end of file
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index 3c974eaaf..7837e787c 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -2625,6 +2625,125 @@ export const analyticsSavedQuery = pgTable(
   (table) => [index("analytics_saved_query_org_idx").on(table.organizationId)],
 );
 
+/** A project-scoped saved product-analytics insight definition. */
+export const analyticsInsights = pgTable(
+  "analytics_insight",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    description: text("description"),
+    kind: varchar("kind", { length: 32 }).notNull(),
+    definition: jsonb("definition").$type<unknown>().notNull(),
+    createdBy: varchar("created_by", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    index("analytics_insight_project_idx").on(table.projectId, table.updatedAt),
+    index("analytics_insight_organization_idx").on(table.organizationId),
+  ],
+);
+
+/** A reusable, project-scoped set of analytics people. */
+export const analyticsCohorts = pgTable(
+  "analytics_cohort",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    description: text("description"),
+    createdBy: varchar("created_by", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    index("analytics_cohort_project_idx").on(table.projectId, table.updatedAt),
+    index("analytics_cohort_organization_idx").on(table.organizationId),
+  ],
+);
+
+/** Static person membership for a reusable analytics cohort. */
+export const analyticsCohortMembers = pgTable(
+  "analytics_cohort_member",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    cohortId: varchar("cohort_id", { length: 255 }).notNull(),
+    personId: varchar("person_id", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+  },
+  (table) => [
+    uniqueIndex("analytics_cohort_member_person_idx").on(table.cohortId, table.personId),
+    index("analytics_cohort_member_cohort_idx").on(table.cohortId),
+  ],
+);
+
+/** A project-scoped dashboard that arranges saved analytics insights. */
+export const analyticsDashboards = pgTable(
+  "analytics_dashboard",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 255 }).notNull(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    name: varchar("name", { length: 255 }).notNull(),
+    description: text("description"),
+    createdBy: varchar("created_by", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    index("analytics_dashboard_project_idx").on(table.projectId, table.updatedAt),
+    index("analytics_dashboard_organization_idx").on(table.organizationId),
+  ],
+);
+
+export interface AnalyticsDashboardItemLayout {
+  readonly height: number;
+  readonly width: number;
+  readonly x: number;
+  readonly y: number;
+}
+
+/** A saved analytics insight or VoidQL query placement on a dashboard. */
+export const analyticsDashboardItems = pgTable(
+  "analytics_dashboard_item",
+  {
+    id: varchar("id", { length: 255 }).primaryKey(),
+    dashboardId: varchar("dashboard_id", { length: 255 }).notNull(),
+    sourceType: varchar("source_type", { length: 32 }).notNull(),
+    sourceId: varchar("source_id", { length: 255 }).notNull(),
+    position: integer("position").notNull(),
+    layout: jsonb("layout").$type<AnalyticsDashboardItemLayout>().notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+  },
+  (table) => [
+    uniqueIndex("analytics_dashboard_item_source_idx").on(
+      table.dashboardId,
+      table.sourceType,
+      table.sourceId,
+    ),
+    index("analytics_dashboard_item_position_idx").on(table.dashboardId, table.position),
+  ],
+);
+
 /* ──────────────────────────────────────────────────────────────────────────
  * Push notifications
  *
diff --git a/packages/rpc/src/groups/AnalyticsRpcsDef.ts b/packages/rpc/src/groups/AnalyticsRpcsDef.ts
index aaa62f87d..4f9b9d41e 100644
--- a/packages/rpc/src/groups/AnalyticsRpcsDef.ts
+++ b/packages/rpc/src/groups/AnalyticsRpcsDef.ts
@@ -11,6 +11,7 @@ import {
 } from "../errors/analytics.ts";
 import { RpcActionForbiddenError } from "../errors/common.ts";
 import { AuthMiddleware } from "../middlewares.ts";
+import { SavedVoidQlInsight } from "./VoidQlRpcsDef.ts";
 
 export const AnalyticsContext = Schema.Struct({
   organizationId: Schema.String,
@@ -118,11 +119,568 @@ export const AnalyticsFilter: AnalyticsFilterCodec = Schema.Union([
 
 export const AnalyticsBreakdown = Schema.Struct({
   field: AnalyticsFieldRef,
-  limit: Schema.optional(Schema.Number),
+  limit: Schema.optional(
+    Schema.Number.check(Schema.isGreaterThanOrEqualTo(1), Schema.isLessThanOrEqualTo(100)),
+  ),
   order: Schema.optional(Schema.Union([Schema.Literal("asc"), Schema.Literal("desc")])),
 });
 export type AnalyticsBreakdownType = typeof AnalyticsBreakdown.Type;
 
+export const AnalyticsActor = Schema.Union([
+  Schema.Struct({ kind: Schema.Literal("person") }),
+  Schema.Struct({
+    kind: Schema.Literal("group"),
+    property: Schema.String.check(Schema.isMaxLength(128)),
+  }),
+]);
+export type AnalyticsActorType = typeof AnalyticsActor.Type;
+
+const AnalyticsCohortIds = Schema.Array(Schema.String).check(Schema.isMaxLength(20));
+
+export const CustomAnalyticsInsightKind = Schema.Union([
+  Schema.Literal("trends"),
+  Schema.Literal("funnels"),
+  Schema.Literal("retention"),
+  Schema.Literal("paths"),
+  Schema.Literal("stickiness"),
+  Schema.Literal("lifecycle"),
+]);
+export type CustomAnalyticsInsightKindType = typeof CustomAnalyticsInsightKind.Type;
+
+export const AnalyticsEventSeries = Schema.Struct({
+  aggregation: Schema.Union([
+    Schema.Literal("total_events"),
+    Schema.Literal("unique_users"),
+    Schema.Literal("property_sum"),
+    Schema.Literal("property_average"),
+    Schema.Literal("property_minimum"),
+    Schema.Literal("property_maximum"),
+    Schema.Literal("property_median"),
+    Schema.Literal("property_p75"),
+    Schema.Literal("property_p90"),
+    Schema.Literal("property_p95"),
+    Schema.Literal("property_p99"),
+  ]),
+  eventNames: Schema.NonEmptyArray(Schema.String.check(Schema.isMaxLength(255))),
+  filters: Schema.optional(AnalyticsFilter),
+  key: Schema.String.check(Schema.isMaxLength(64)),
+  label: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+  mathProperty: Schema.optional(Schema.String.check(Schema.isMaxLength(128))),
+});
+export type AnalyticsEventSeriesType = typeof AnalyticsEventSeries.Type;
+
+export const AnalyticsTrendsComparison = Schema.Union([
+  Schema.Literal("previous_period"),
+  Schema.Literal("previous_year"),
+]);
+export type AnalyticsTrendsComparisonType = typeof AnalyticsTrendsComparison.Type;
+
+export const AnalyticsTrendsFormula = Schema.Struct({
+  expression: Schema.String.check(Schema.isMaxLength(512)),
+  key: Schema.String.check(Schema.isMaxLength(64)),
+  label: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+});
+export type AnalyticsTrendsFormulaType = typeof AnalyticsTrendsFormula.Type;
+
+export const TrendsInsightQuery = Schema.Struct({
+  actor: Schema.optional(AnalyticsActor),
+  breakdown: Schema.optional(AnalyticsBreakdown),
+  cohortIds: Schema.optional(AnalyticsCohortIds),
+  comparison: Schema.optional(AnalyticsTrendsComparison),
+  cumulative: Schema.optional(Schema.Boolean),
+  display: Schema.Union([
+    Schema.Literal("line"),
+    Schema.Literal("bar"),
+    Schema.Literal("area"),
+    Schema.Literal("number"),
+  ]),
+  formulas: Schema.optional(Schema.Array(AnalyticsTrendsFormula)),
+  granularity: AnalyticsGranularity,
+  kind: Schema.Literal("trends"),
+  hideWeekends: Schema.optional(Schema.Boolean),
+  series: Schema.NonEmptyArray(AnalyticsEventSeries),
+  smoothingWindow: Schema.optional(
+    Schema.Number.check(Schema.isGreaterThanOrEqualTo(1), Schema.isLessThanOrEqualTo(28)),
+  ),
+  timeRange: AnalyticsTimeRange,
+});
+export type TrendsInsightQueryType = typeof TrendsInsightQuery.Type;
+
+export const FunnelStep = Schema.Struct({
+  eventNames: Schema.NonEmptyArray(Schema.String.check(Schema.isMaxLength(255))),
+  filters: Schema.optional(AnalyticsFilter),
+  key: Schema.String.check(Schema.isMaxLength(64)),
+  label: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+});
+
+export const FunnelsInsightQuery = Schema.Struct({
+  actor: Schema.optional(AnalyticsActor),
+  breakdown: Schema.optional(AnalyticsBreakdown),
+  breakdownAttributionStep: Schema.optional(
+    Schema.Number.check(Schema.isGreaterThanOrEqualTo(1), Schema.isLessThanOrEqualTo(20)),
+  ),
+  conversionWindowSeconds: Schema.Number.check(Schema.isGreaterThan(0)),
+  cohortIds: Schema.optional(AnalyticsCohortIds),
+  kind: Schema.Literal("funnels"),
+  order: Schema.Union([
+    Schema.Literal("sequential"),
+    Schema.Literal("strict"),
+    Schema.Literal("any"),
+  ]),
+  steps: Schema.NonEmptyArray(FunnelStep),
+  timeRange: AnalyticsTimeRange,
+});
+export type FunnelsInsightQueryType = typeof FunnelsInsightQuery.Type;
+
+export const RetentionInsightQuery = Schema.Struct({
+  actor: Schema.optional(AnalyticsActor),
+  cohortIds: Schema.optional(AnalyticsCohortIds),
+  cumulative: Schema.optional(Schema.Boolean),
+  intervals: Schema.optional(
+    Schema.Number.check(Schema.isGreaterThanOrEqualTo(1), Schema.isLessThanOrEqualTo(24)),
+  ),
+  kind: Schema.Literal("retention"),
+  period: Schema.Union([Schema.Literal("day"), Schema.Literal("week"), Schema.Literal("month")]),
+  reference: Schema.optional(Schema.Union([Schema.Literal("cohort"), Schema.Literal("previous")])),
+  returning: AnalyticsEventSeries,
+  retentionType: Schema.optional(
+    Schema.Union([Schema.Literal("recurring"), Schema.Literal("first_time")]),
+  ),
+  start: AnalyticsEventSeries,
+  timeRange: AnalyticsTimeRange,
+});
+export type RetentionInsightQueryType = typeof RetentionInsightQuery.Type;
+
+export const PathsInsightQuery = Schema.Struct({
+  actor: Schema.optional(AnalyticsActor),
+  collapseRepeated: Schema.optional(Schema.Boolean),
+  cohortIds: Schema.optional(AnalyticsCohortIds),
+  edgeLimit: Schema.optional(
+    Schema.Number.check(Schema.isGreaterThanOrEqualTo(1), Schema.isLessThanOrEqualTo(200)),
+  ),
+  endEventName: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+  eventNames: Schema.Array(Schema.String.check(Schema.isMaxLength(255))),
+  excludeEventNames: Schema.optional(Schema.Array(Schema.String.check(Schema.isMaxLength(255)))),
+  filters: Schema.optional(AnalyticsFilter),
+  kind: Schema.Literal("paths"),
+  maxDepth: Schema.Number.check(Schema.isGreaterThanOrEqualTo(2), Schema.isLessThanOrEqualTo(20)),
+  maxEdgeCount: Schema.optional(Schema.Number.check(Schema.isGreaterThanOrEqualTo(1))),
+  minEdgeCount: Schema.optional(Schema.Number.check(Schema.isGreaterThanOrEqualTo(1))),
+  pathItem: Schema.optional(
+    Schema.Union([Schema.Literal("event_name"), Schema.Literal("screen_name")]),
+  ),
+  sessionGapSeconds: Schema.optional(
+    Schema.Number.check(Schema.isGreaterThanOrEqualTo(60), Schema.isLessThanOrEqualTo(86_400)),
+  ),
+  startEventName: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+  timeRange: AnalyticsTimeRange,
+});
+export type PathsInsightQueryType = typeof PathsInsightQuery.Type;
+
+export const StickinessInsightQuery = Schema.Struct({
+  actor: Schema.optional(AnalyticsActor),
+  cohortIds: Schema.optional(AnalyticsCohortIds),
+  computation: Schema.optional(
+    Schema.Union([Schema.Literal("exact"), Schema.Literal("cumulative")]),
+  ),
+  display: Schema.optional(Schema.Union([Schema.Literal("line"), Schema.Literal("bar")])),
+  interval: Schema.Union([
+    Schema.Literal("hour"),
+    Schema.Literal("day"),
+    Schema.Literal("week"),
+    Schema.Literal("month"),
+  ]),
+  kind: Schema.Literal("stickiness"),
+  occurrenceCriteria: Schema.optional(
+    Schema.Struct({
+      operator: Schema.Union([
+        Schema.Literal("exact"),
+        Schema.Literal("gte"),
+        Schema.Literal("lte"),
+      ]),
+      value: Schema.Number.check(
+        Schema.isGreaterThanOrEqualTo(1),
+        Schema.isLessThanOrEqualTo(10_000),
+      ),
+    }),
+  ),
+  series: Schema.NonEmptyArray(AnalyticsEventSeries),
+  timeRange: AnalyticsTimeRange,
+});
+export type StickinessInsightQueryType = typeof StickinessInsightQuery.Type;
+
+export const LifecycleInsightQuery = Schema.Struct({
+  actor: Schema.optional(AnalyticsActor),
+  cohortIds: Schema.optional(AnalyticsCohortIds),
+  display: Schema.optional(Schema.Union([Schema.Literal("stacked_area"), Schema.Literal("line")])),
+  granularity: Schema.Union([
+    Schema.Literal("hour"),
+    Schema.Literal("day"),
+    Schema.Literal("week"),
+    Schema.Literal("month"),
+  ]),
+  kind: Schema.Literal("lifecycle"),
+  series: AnalyticsEventSeries,
+  statuses: Schema.optional(
+    Schema.NonEmptyArray(
+      Schema.Union([
+        Schema.Literal("new"),
+        Schema.Literal("returning"),
+        Schema.Literal("resurrecting"),
+        Schema.Literal("dormant"),
+      ]),
+    ),
+  ),
+  timeRange: AnalyticsTimeRange,
+  valueMode: Schema.optional(Schema.Union([Schema.Literal("count"), Schema.Literal("percentage")])),
+});
+export type LifecycleInsightQueryType = typeof LifecycleInsightQuery.Type;
+
+export const CustomAnalyticsInsightQuery = Schema.Union([
+  TrendsInsightQuery,
+  FunnelsInsightQuery,
+  RetentionInsightQuery,
+  PathsInsightQuery,
+  StickinessInsightQuery,
+  LifecycleInsightQuery,
+]);
+export type CustomAnalyticsInsightQueryType = typeof CustomAnalyticsInsightQuery.Type;
+
+export const SavedAnalyticsInsight = Schema.Struct({
+  createdAt: Schema.Date,
+  createdBy: Schema.String,
+  definition: CustomAnalyticsInsightQuery,
+  description: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  kind: CustomAnalyticsInsightKind,
+  name: Schema.String,
+  organizationId: Schema.String,
+  projectId: Schema.String,
+  updatedAt: Schema.Date,
+});
+export type SavedAnalyticsInsightType = typeof SavedAnalyticsInsight.Type;
+
+export const AnalyticsTrendSeriesResult = Schema.Struct({
+  comparison: Schema.optional(
+    Schema.Union([
+      Schema.Literal("current"),
+      Schema.Literal("previous_period"),
+      Schema.Literal("previous_year"),
+    ]),
+  ),
+  key: Schema.String,
+  label: Schema.String,
+  points: Schema.Array(
+    Schema.Struct({
+      timestamp: Schema.Date,
+      value: Schema.Number,
+    }),
+  ),
+});
+
+export const QueryCustomAnalyticsInsightRequest = Schema.Struct({
+  definition: CustomAnalyticsInsightQuery,
+  projectId: Schema.String,
+});
+export type QueryCustomAnalyticsInsightRequestType = typeof QueryCustomAnalyticsInsightRequest.Type;
+
+export const QueryCustomAnalyticsPersonsRequest = Schema.Struct({
+  cohortIds: Schema.optional(AnalyticsCohortIds),
+  eventNames: Schema.NonEmptyArray(Schema.String).check(Schema.isMaxLength(20)),
+  filters: Schema.optional(AnalyticsFilter),
+  group: Schema.optional(
+    Schema.Struct({
+      property: Schema.String.check(Schema.isMaxLength(128)),
+      value: Schema.String.check(Schema.isMaxLength(512)),
+    }),
+  ),
+  limit: Schema.optional(
+    Schema.Number.check(Schema.isGreaterThanOrEqualTo(1), Schema.isLessThanOrEqualTo(100)),
+  ),
+  projectId: Schema.String,
+  timeRange: AnalyticsTimeRange,
+});
+export type QueryCustomAnalyticsPersonsRequestType = typeof QueryCustomAnalyticsPersonsRequest.Type;
+
+export const AnalyticsDrilldownPerson = Schema.Struct({
+  email: Schema.NullOr(Schema.String),
+  eventCount: Schema.Number,
+  lastSeenAt: Schema.Date,
+  name: Schema.NullOr(Schema.String),
+  personId: Schema.String,
+});
+
+export const QueryCustomAnalyticsPersonsResponse = Schema.Struct({
+  people: Schema.Array(AnalyticsDrilldownPerson),
+  resolvedTimeRange: Schema.Struct({ end: Schema.Date, start: Schema.Date }),
+});
+export type QueryCustomAnalyticsPersonsResponseType =
+  typeof QueryCustomAnalyticsPersonsResponse.Type;
+
+export const AnalyticsTrendsInsightResult = Schema.Struct({
+  comparisonTimeRange: Schema.optional(Schema.Struct({ end: Schema.Date, start: Schema.Date })),
+  kind: Schema.Literal("trends"),
+  resolvedTimeRange: Schema.Struct({ end: Schema.Date, start: Schema.Date }),
+  series: Schema.Array(AnalyticsTrendSeriesResult),
+});
+
+export const AnalyticsFunnelStepResult = Schema.Struct({
+  conversionRate: Schema.Number,
+  count: Schema.Number,
+  dropoffCount: Schema.Number,
+  dropoffRate: Schema.Number,
+  key: Schema.String,
+  label: Schema.String,
+  step: Schema.Number,
+});
+
+export const AnalyticsFunnelBreakdownResult = Schema.Struct({
+  breakdownValue: Schema.String,
+  steps: Schema.Array(AnalyticsFunnelStepResult),
+  totalConversionRate: Schema.Number,
+});
+
+export const AnalyticsFunnelsInsightResult = Schema.Struct({
+  breakdowns: Schema.optional(Schema.Array(AnalyticsFunnelBreakdownResult)),
+  kind: Schema.Literal("funnels"),
+  resolvedTimeRange: Schema.Struct({ end: Schema.Date, start: Schema.Date }),
+  steps: Schema.Array(AnalyticsFunnelStepResult),
+  totalConversionRate: Schema.Number,
+});
+
+export const AnalyticsRetentionCell = Schema.Struct({
+  count: Schema.Number,
+  interval: Schema.Number,
+  rate: Schema.Number,
+});
+
+export const AnalyticsRetentionCohort = Schema.Struct({
+  cells: Schema.Array(AnalyticsRetentionCell),
+  cohortSize: Schema.Number,
+  cohortStart: Schema.Date,
+});
+
+export const AnalyticsRetentionInsightResult = Schema.Struct({
+  cohorts: Schema.Array(AnalyticsRetentionCohort),
+  kind: Schema.Literal("retention"),
+  period: Schema.Union([Schema.Literal("day"), Schema.Literal("week"), Schema.Literal("month")]),
+  resolvedTimeRange: Schema.Struct({ end: Schema.Date, start: Schema.Date }),
+});
+
+export const AnalyticsStickinessBucket = Schema.Struct({
+  count: Schema.Number,
+  intervals: Schema.Number,
+});
+
+export const AnalyticsStickinessSeriesResult = Schema.Struct({
+  buckets: Schema.Array(AnalyticsStickinessBucket),
+  key: Schema.String,
+  label: Schema.String,
+});
+
+export const AnalyticsStickinessInsightResult = Schema.Struct({
+  computation: Schema.Union([Schema.Literal("exact"), Schema.Literal("cumulative")]),
+  interval: Schema.Union([
+    Schema.Literal("hour"),
+    Schema.Literal("day"),
+    Schema.Literal("week"),
+    Schema.Literal("month"),
+  ]),
+  kind: Schema.Literal("stickiness"),
+  resolvedTimeRange: Schema.Struct({ end: Schema.Date, start: Schema.Date }),
+  series: Schema.Array(AnalyticsStickinessSeriesResult),
+});
+
+export const AnalyticsPathsLink = Schema.Struct({
+  averageTransitionSeconds: Schema.Number,
+  count: Schema.Number,
+  source: Schema.String,
+  sourceStep: Schema.Number,
+  target: Schema.String,
+  targetStep: Schema.Number,
+});
+
+export const AnalyticsPathsInsightResult = Schema.Struct({
+  kind: Schema.Literal("paths"),
+  links: Schema.Array(AnalyticsPathsLink),
+  maxDepth: Schema.Number,
+  resolvedTimeRange: Schema.Struct({ end: Schema.Date, start: Schema.Date }),
+  sessionGapSeconds: Schema.Number,
+});
+
+export const AnalyticsLifecycleStatusSeries = Schema.Struct({
+  points: Schema.Array(
+    Schema.Struct({
+      count: Schema.Number,
+      timestamp: Schema.Date,
+    }),
+  ),
+  status: Schema.Union([
+    Schema.Literal("new"),
+    Schema.Literal("returning"),
+    Schema.Literal("resurrecting"),
+    Schema.Literal("dormant"),
+  ]),
+});
+
+export const AnalyticsLifecycleInsightResult = Schema.Struct({
+  granularity: Schema.Union([
+    Schema.Literal("hour"),
+    Schema.Literal("day"),
+    Schema.Literal("week"),
+    Schema.Literal("month"),
+  ]),
+  kind: Schema.Literal("lifecycle"),
+  resolvedTimeRange: Schema.Struct({ end: Schema.Date, start: Schema.Date }),
+  series: Schema.Array(AnalyticsLifecycleStatusSeries),
+});
+
+export const QueryCustomAnalyticsInsightResponse = Schema.Union([
+  AnalyticsTrendsInsightResult,
+  AnalyticsFunnelsInsightResult,
+  AnalyticsRetentionInsightResult,
+  AnalyticsPathsInsightResult,
+  AnalyticsStickinessInsightResult,
+  AnalyticsLifecycleInsightResult,
+]);
+export type QueryCustomAnalyticsInsightResponseType =
+  typeof QueryCustomAnalyticsInsightResponse.Type;
+
+export const ListAnalyticsInsightsRequest = Schema.Struct({
+  projectId: Schema.String,
+});
+export const ListAnalyticsInsightsResponse = Schema.Struct({
+  insights: Schema.Array(SavedAnalyticsInsight),
+});
+
+export const CreateAnalyticsInsightRequest = Schema.Struct({
+  definition: CustomAnalyticsInsightQuery,
+  description: Schema.optional(Schema.String.check(Schema.isMaxLength(4000))),
+  name: Schema.String.check(Schema.isMaxLength(255)),
+  projectId: Schema.String,
+});
+
+export const UpdateAnalyticsInsightRequest = Schema.Struct({
+  definition: Schema.optional(CustomAnalyticsInsightQuery),
+  description: Schema.optional(Schema.NullOr(Schema.String.check(Schema.isMaxLength(4000)))),
+  id: Schema.String,
+  name: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+});
+
+export const AnalyticsDashboardItemLayout = Schema.Struct({
+  height: Schema.Number.check(Schema.isGreaterThan(0)),
+  width: Schema.Number.check(Schema.isGreaterThan(0)),
+  x: Schema.Number.check(Schema.isGreaterThanOrEqualTo(0)),
+  y: Schema.Number.check(Schema.isGreaterThanOrEqualTo(0)),
+});
+export type AnalyticsDashboardItemLayoutType = typeof AnalyticsDashboardItemLayout.Type;
+
+export const AnalyticsInsightDashboardItem = Schema.Struct({
+  id: Schema.String,
+  kind: Schema.Literal("insight"),
+  insight: SavedAnalyticsInsight,
+  layout: AnalyticsDashboardItemLayout,
+  position: Schema.Number,
+});
+
+export const AnalyticsVoidQlDashboardItem = Schema.Struct({
+  id: Schema.String,
+  kind: Schema.Literal("voidql"),
+  layout: AnalyticsDashboardItemLayout,
+  position: Schema.Number,
+  query: SavedVoidQlInsight,
+});
+
+export const AnalyticsDashboardItem = Schema.Union([
+  AnalyticsInsightDashboardItem,
+  AnalyticsVoidQlDashboardItem,
+]);
+
+export const AnalyticsDashboard = Schema.Struct({
+  createdAt: Schema.Date,
+  createdBy: Schema.String,
+  description: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  items: Schema.Array(AnalyticsDashboardItem),
+  name: Schema.String,
+  organizationId: Schema.String,
+  projectId: Schema.String,
+  updatedAt: Schema.Date,
+});
+export type AnalyticsDashboardType = typeof AnalyticsDashboard.Type;
+
+export const ListAnalyticsDashboardsRequest = Schema.Struct({
+  projectId: Schema.String,
+});
+export const ListAnalyticsDashboardsResponse = Schema.Struct({
+  dashboards: Schema.Array(AnalyticsDashboard),
+});
+
+export const CreateAnalyticsDashboardRequest = Schema.Struct({
+  description: Schema.optional(Schema.String.check(Schema.isMaxLength(4000))),
+  name: Schema.String.check(Schema.isMaxLength(255)),
+  projectId: Schema.String,
+});
+
+export const DuplicateAnalyticsDashboardRequest = Schema.Struct({
+  id: Schema.String,
+  name: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+});
+
+export const UpdateAnalyticsDashboardRequest = Schema.Struct({
+  description: Schema.optional(Schema.NullOr(Schema.String.check(Schema.isMaxLength(4000)))),
+  id: Schema.String,
+  name: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+});
+
+export const PutAnalyticsDashboardItemRequest = Schema.Struct({
+  dashboardId: Schema.String,
+  layout: AnalyticsDashboardItemLayout,
+  position: Schema.Number.check(Schema.isGreaterThanOrEqualTo(0)),
+  source: Schema.Union([
+    Schema.Struct({ id: Schema.String, kind: Schema.Literal("insight") }),
+    Schema.Struct({ id: Schema.String, kind: Schema.Literal("voidql") }),
+  ]),
+});
+
+export const ReorderAnalyticsDashboardItemsRequest = Schema.Struct({
+  dashboardId: Schema.String,
+  itemIds: Schema.NonEmptyArray(Schema.String).check(Schema.isMaxLength(100)),
+});
+
+export const AnalyticsCohort = Schema.Struct({
+  createdAt: Schema.Date,
+  createdBy: Schema.String,
+  description: Schema.NullOr(Schema.String),
+  id: Schema.String,
+  memberCount: Schema.Number,
+  memberPersonIds: Schema.Array(Schema.String),
+  name: Schema.String,
+  organizationId: Schema.String,
+  projectId: Schema.String,
+  updatedAt: Schema.Date,
+});
+export type AnalyticsCohortType = typeof AnalyticsCohort.Type;
+
+export const ListAnalyticsCohortsRequest = Schema.Struct({ projectId: Schema.String });
+export const ListAnalyticsCohortsResponse = Schema.Struct({
+  cohorts: Schema.Array(AnalyticsCohort),
+});
+
+export const CreateAnalyticsCohortRequest = Schema.Struct({
+  description: Schema.optional(Schema.String.check(Schema.isMaxLength(4000))),
+  memberPersonIds: Schema.Array(Schema.String).check(Schema.isMaxLength(10_000)),
+  name: Schema.String.check(Schema.isMaxLength(255)),
+  projectId: Schema.String,
+});
+
+export const UpdateAnalyticsCohortRequest = Schema.Struct({
+  description: Schema.optional(Schema.NullOr(Schema.String.check(Schema.isMaxLength(4000)))),
+  id: Schema.String,
+  memberPersonIds: Schema.optional(Schema.Array(Schema.String).check(Schema.isMaxLength(10_000))),
+  name: Schema.optional(Schema.String.check(Schema.isMaxLength(255))),
+});
+
 export const BuiltInInsightId = Schema.Union([
   Schema.Literal("builtin/revenue"),
   Schema.Literal("builtin/mrr"),
@@ -272,4 +830,107 @@ export class AnalyticsRpcsDef extends RpcGroup.make(
     payload: QueryAnalyticsInsightsRequest,
     success: QueryAnalyticsInsightsResponse,
   }),
+  Rpc.make("QueryCustomAnalyticsInsight", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcAnalyticsServiceError,
+      RpcInvalidAnalyticsQueryError,
+      RpcInvalidTimeRangeError,
+    ]),
+    payload: QueryCustomAnalyticsInsightRequest,
+    success: QueryCustomAnalyticsInsightResponse,
+  }),
+  Rpc.make("QueryCustomAnalyticsPersons", {
+    error: Schema.Union([
+      RpcActionForbiddenError,
+      RpcAnalyticsServiceError,
+      RpcInvalidAnalyticsQueryError,
+      RpcInvalidTimeRangeError,
+    ]),
+    payload: QueryCustomAnalyticsPersonsRequest,
+    success: QueryCustomAnalyticsPersonsResponse,
+  }),
+  Rpc.make("ListAnalyticsInsights", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: ListAnalyticsInsightsRequest,
+    success: ListAnalyticsInsightsResponse,
+  }),
+  Rpc.make("CreateAnalyticsInsight", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: CreateAnalyticsInsightRequest,
+    success: SavedAnalyticsInsight,
+  }),
+  Rpc.make("UpdateAnalyticsInsight", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: UpdateAnalyticsInsightRequest,
+    success: SavedAnalyticsInsight,
+  }),
+  Rpc.make("DeleteAnalyticsInsight", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: Schema.Struct({ id: Schema.String }),
+    success: Schema.Struct({ deleted: Schema.Boolean }),
+  }),
+  Rpc.make("ListAnalyticsCohorts", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: ListAnalyticsCohortsRequest,
+    success: ListAnalyticsCohortsResponse,
+  }),
+  Rpc.make("CreateAnalyticsCohort", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: CreateAnalyticsCohortRequest,
+    success: AnalyticsCohort,
+  }),
+  Rpc.make("UpdateAnalyticsCohort", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: UpdateAnalyticsCohortRequest,
+    success: AnalyticsCohort,
+  }),
+  Rpc.make("DeleteAnalyticsCohort", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: Schema.Struct({ id: Schema.String }),
+    success: Schema.Struct({ deleted: Schema.Boolean }),
+  }),
+  Rpc.make("ListAnalyticsDashboards", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: ListAnalyticsDashboardsRequest,
+    success: ListAnalyticsDashboardsResponse,
+  }),
+  Rpc.make("CreateAnalyticsDashboard", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: CreateAnalyticsDashboardRequest,
+    success: AnalyticsDashboard,
+  }),
+  Rpc.make("DuplicateAnalyticsDashboard", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: DuplicateAnalyticsDashboardRequest,
+    success: AnalyticsDashboard,
+  }),
+  Rpc.make("UpdateAnalyticsDashboard", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: UpdateAnalyticsDashboardRequest,
+    success: AnalyticsDashboard,
+  }),
+  Rpc.make("DeleteAnalyticsDashboard", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: Schema.Struct({ id: Schema.String }),
+    success: Schema.Struct({ deleted: Schema.Boolean }),
+  }),
+  Rpc.make("PutAnalyticsDashboardItem", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: PutAnalyticsDashboardItemRequest,
+    success: AnalyticsDashboard,
+  }),
+  Rpc.make("ReorderAnalyticsDashboardItems", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: ReorderAnalyticsDashboardItemsRequest,
+    success: AnalyticsDashboard,
+  }),
+  Rpc.make("RemoveAnalyticsDashboardItem", {
+    error: Schema.Union([RpcActionForbiddenError, RpcAnalyticsServiceError]),
+    payload: Schema.Struct({
+      dashboardId: Schema.String,
+      itemId: Schema.String,
+    }),
+    success: AnalyticsDashboard,
+  }),
 ).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/VoidQlRpcsDef.ts b/packages/rpc/src/groups/VoidQlRpcsDef.ts
index 09d00ef5e..43aa180a8 100644
--- a/packages/rpc/src/groups/VoidQlRpcsDef.ts
+++ b/packages/rpc/src/groups/VoidQlRpcsDef.ts
@@ -90,6 +90,22 @@ export const SaveVoidQlInsightRequest = Schema.Struct({
 
 export const SaveVoidQlInsightResponse = Schema.Struct({ id: Schema.String });
 
+export const SavedVoidQlInsight = Schema.Struct({
+  createdAt: Schema.Date,
+  createdBy: Schema.String,
+  id: Schema.String,
+  name: Schema.String,
+  organizationId: Schema.String,
+  schemaVersion: Schema.Number,
+  text: VoidQlQueryText,
+  updatedAt: Schema.Date,
+});
+export type SavedVoidQlInsightType = typeof SavedVoidQlInsight.Type;
+
+export const ListVoidQlInsightsResponse = Schema.Struct({
+  insights: Schema.Array(SavedVoidQlInsight),
+});
+
 /** The compile-error union shared by the run + save surfaces. */
 const COMPILE_ERRORS = [
   RpcActionForbiddenError,
@@ -123,4 +139,19 @@ export class VoidQlRpcsDef extends RpcGroup.make(
     payload: SaveVoidQlInsightRequest,
     success: SaveVoidQlInsightResponse,
   }),
+  Rpc.make("ListVoidQlInsights", {
+    error: Schema.Union([RpcActionForbiddenError, RpcVoidQlExecutionError]),
+    payload: Schema.Struct({ organizationId: Schema.String }),
+    success: ListVoidQlInsightsResponse,
+  }),
+  Rpc.make("RunSavedVoidQlInsight", {
+    error: Schema.Union([...COMPILE_ERRORS]),
+    payload: Schema.Struct({ id: Schema.String }),
+    success: RunVoidQlQueryResponse,
+  }),
+  Rpc.make("DeleteVoidQlInsight", {
+    error: Schema.Union([RpcActionForbiddenError, RpcVoidQlExecutionError]),
+    payload: Schema.Struct({ id: Schema.String }),
+    success: Schema.Struct({ deleted: Schema.Boolean }),
+  }),
 ).middleware(AuthMiddleware) {}

From b32f770eecf75f52d00c759d99671b62a5790c87 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 12:40:15 +0200
Subject: [PATCH 082/129] fix: use an app-local server entry

---
 apps/www/src/server.ts  | 5 +++++
 apps/www/vite.config.ts | 3 +++
 2 files changed, 8 insertions(+)
 create mode 100644 apps/www/src/server.ts

diff --git a/apps/www/src/server.ts b/apps/www/src/server.ts
new file mode 100644
index 000000000..867392c09
--- /dev/null
+++ b/apps/www/src/server.ts
@@ -0,0 +1,5 @@
+import { createStartHandler, defaultStreamHandler } from "@tanstack/react-start/server";
+
+const fetch = createStartHandler(defaultStreamHandler);
+
+export default { fetch };
diff --git a/apps/www/vite.config.ts b/apps/www/vite.config.ts
index 577c3f5b7..83d5e3dc4 100644
--- a/apps/www/vite.config.ts
+++ b/apps/www/vite.config.ts
@@ -117,6 +117,9 @@ export default defineConfig(() => ({
     tailwindcss(),
     tanstackStart({
       srcDirectory: "src",
+      server: {
+        entry: "server.ts",
+      },
       prerender: {
         enabled: false,
       },

From 85302d21b8b7c5a8ec13a881b1a333d373a31a94 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 12:52:35 +0200
Subject: [PATCH 083/129] fix: allow hoisted font assets in development

---
 apps/www/vite.config.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/apps/www/vite.config.ts b/apps/www/vite.config.ts
index 83d5e3dc4..56e7227b3 100644
--- a/apps/www/vite.config.ts
+++ b/apps/www/vite.config.ts
@@ -5,6 +5,7 @@ import { paywallRuntimeBundlePlugin } from "@voidhash/paywall-renderer-preact/vi
 import mdx from "fumadocs-mdx/vite";
 import { defineConfig, type PluginOption } from "vite";
 import { createRequire } from "node:module";
+import { dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 
 import * as designSourceConfig from "./src/features/design/source.config.ts";
@@ -13,7 +14,12 @@ import * as docsSourceConfig from "./src/features/docs/source.config.ts";
 const devPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : 3000;
 const devHost = process.env.HOST ?? true;
 const appSrcPath = fileURLToPath(new URL("./src", import.meta.url));
-const tslibPath = createRequire(import.meta.url).resolve("tslib/tslib.es6.mjs");
+const workspacePath = fileURLToPath(new URL("../..", import.meta.url));
+const require = createRequire(import.meta.url);
+const tslibPath = require.resolve("tslib/tslib.es6.mjs");
+const fontSourcePaths = ["@fontsource-variable/geist", "@fontsource-variable/geist-mono"].map(
+  (packageName) => dirname(require.resolve(packageName)),
+);
 // The self-host image uses an isolated runtime tree, so its SSR output cannot
 // rely on transitive packages being hoisted beside the application.
 const bundleServerDependencies = process.env.VOIDHASH_SELFHOST_BUNDLE === "true";
@@ -140,6 +146,9 @@ export default defineConfig(() => ({
       credentials: true,
       origin: true,
     },
+    fs: {
+      allow: [workspacePath, ...fontSourcePaths],
+    },
     host: devHost,
     port: devPort,
   },

From 4caca4ae6f725c1b60af6b1e38e0768db5fb63d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 22:39:37 +0200
Subject: [PATCH 084/129] fix(www): avoid spacing for disabled AI panel

---
 .../designer/ai-panel/use-ai-panel-offset.ts     | 16 ++++++++++++++++
 .../designer/code-mode/code-mode-workspace.tsx   |  6 ++----
 .../paywalls/designer/panels/left-panel.tsx      |  6 +++---
 .../translation-mode-workspace.tsx               |  6 ++----
 4 files changed, 23 insertions(+), 11 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts

diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts
new file mode 100644
index 000000000..69a4431d4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts
@@ -0,0 +1,16 @@
+"use client";
+
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+import { useStore } from "zustand/react";
+
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+
+import { usePaywallDesignerStore } from "../state/designer-store";
+
+/** Return the AI panel width only when the feature is enabled and the panel is open. */
+export function useAiPanelOffset(): number {
+  const store = usePaywallDesignerStore();
+  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAi.key);
+
+  return useStore(store, (state) => (enabled && state.ai.panelOpen ? state.ai.width : 0));
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
index bda1f2488..2e92ec94c 100644
--- a/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
@@ -10,6 +10,7 @@ import {
 import { lazy, Suspense, useMemo } from "react";
 import { useStore } from "zustand/react";
 
+import { useAiPanelOffset } from "../ai-panel/use-ai-panel-offset";
 import { PANEL_DIMENSIONS } from "../panels/constants";
 import { usePaywallDesignerStore } from "../state/designer-store";
 import {
@@ -64,10 +65,7 @@ function definitionForTabKey(
  */
 export function CodeModeWorkspace() {
   const store = usePaywallDesignerStore();
-
-  const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
-  const aiWidth = useStore(store, (state) => state.ai.width);
-  const aiOffset = aiPanelOpen ? aiWidth : 0;
+  const aiOffset = useAiPanelOffset();
 
   const openTabs = useStore(store, (state) => state.codeComponents.openTabs);
   const activeTabPath = useStore(store, (state) => state.codeComponents.activeTabPath);
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
index 0f8c40ff7..85edbbe7c 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
@@ -5,6 +5,7 @@ import { useStore } from "zustand/react";
 
 import { Panel } from "@/features/studio/paywalls/designer/components/ui/panel";
 
+import { useAiPanelOffset } from "../ai-panel/use-ai-panel-offset";
 import { usePaywallDesignerStore } from "../state/designer-store";
 import { PANEL_DIMENSIONS } from "./constants";
 import { CodeFileTree } from "./left-panel/code-file-tree";
@@ -13,11 +14,10 @@ import { LayersSection } from "./left-panel/layers-section";
 export function LeftPanel() {
   const store = usePaywallDesignerStore();
   const mode = useStore(store, (state) => state.mode);
-  const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
-  const aiWidth = useStore(store, (state) => state.ai.width);
+  const visibleAiOffset = useAiPanelOffset();
   const isPreviewMode = mode === "preview";
   const isCodeMode = mode === "code";
-  const aiOffset = aiPanelOpen && !isPreviewMode ? aiWidth : 0;
+  const aiOffset = isPreviewMode ? 0 : visibleAiOffset;
 
   return (
     <div
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
index ad2cc285e..c160888b5 100644
--- a/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
@@ -3,6 +3,7 @@
 import { useMemo, useState } from "react";
 import { useStore } from "zustand/react";
 
+import { useAiPanelOffset } from "../ai-panel/use-ai-panel-offset";
 import { useGetLocalizableProps } from "../hooks/use-localizable-props";
 import { PANEL_DIMENSIONS } from "../panels/constants";
 import { setActiveLocale } from "../state/actions";
@@ -47,10 +48,7 @@ const INITIAL_FILTER: TranslationFilterState = {
 export function TranslationModeWorkspace() {
   const store = usePaywallDesignerStore();
   const dispatch = usePaywallDesignerActions();
-
-  const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
-  const aiWidth = useStore(store, (state) => state.ai.width);
-  const aiOffset = aiPanelOpen ? aiWidth : 0;
+  const aiOffset = useAiPanelOffset();
 
   // Draft-aware live snapshot: rows and the preview follow the document as
   // collaborators edit; a node deleted mid-edit simply drops its row.

From 7519be6a3b2cc15b1921fb14001983eb8c9b48c5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 23:05:02 +0200
Subject: [PATCH 085/129] fix: hydrate Studio in development

---
 apps/www/vite.config.ts | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/apps/www/vite.config.ts b/apps/www/vite.config.ts
index 56e7227b3..008529e1d 100644
--- a/apps/www/vite.config.ts
+++ b/apps/www/vite.config.ts
@@ -70,6 +70,28 @@ function corsMiddleware() {
   };
 }
 
+function tanstackClientEntryMiddleware() {
+  return {
+    name: "tanstack-client-entry-middleware",
+    configureServer(server: {
+      middlewares: {
+        use: (fn: (req: unknown, res: unknown, next: () => void) => void) => void;
+      };
+    }) {
+      server.middlewares.use((req, _res, next) => {
+        const request = req as { url?: string };
+
+        // The development HTML emits the raw virtual ID while Vite serves its canonical NUL form.
+        if (request.url?.startsWith("/@id/virtual:tanstack-start-client-entry")) {
+          request.url = request.url.replace("/@id/virtual:", "/@id/__x00__virtual:");
+        }
+
+        next();
+      });
+    },
+  };
+}
+
 function scopedMdxPlugin(plugin: PluginOption, scopeFragment: string) {
   const vitePlugin = plugin as {
     transform?: (this: unknown, code: string, id: string) => unknown;
@@ -118,6 +140,7 @@ export default defineConfig(() => ({
       }),
       "/src/features/design/content/docs/",
     ),
+    tanstackClientEntryMiddleware(),
     corsMiddleware(),
     paywallRuntimeBundlePlugin(),
     tailwindcss(),

From 8bdf4f99c674cedd497cd8e274083a99c1c1f511 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 13 Jul 2026 23:05:08 +0200
Subject: [PATCH 086/129] feat: gate custom analytics surfaces

---
 .../components/sidebar/project-sidebar.tsx    | 43 +++++++++++--------
 .../$projectSlug/analytics.dashboards.tsx     | 11 +++++
 .../$projectSlug/analytics.insights.tsx       | 11 +++++
 packages/rpc/src/internalFeatureFlags.ts      |  6 +++
 4 files changed, 54 insertions(+), 17 deletions(-)

diff --git a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
index d18ce810f..48bc93530 100644
--- a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
+++ b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
@@ -38,6 +38,9 @@ export function ProjectSidebar({
   });
   // The VoidQL Query page is gated behind an internal feature flag (unreleased).
   const queryEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidqlQuery.key);
+  const customAnalyticsEnabled = useInternalFeatureFlag(
+    INTERNAL_FEATURE_FLAGS.customAnalytics.key,
+  );
   const notificationsEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.notifications.key);
 
   const experimentationEnabled = useInternalFeatureFlag(
@@ -63,24 +66,30 @@ export function ProjectSidebar({
                 `/studio/${organizationSlug}/${projectSlug}/analytics`,
               ),
             title: "Analytics",
-            url: `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
+            url: customAnalyticsEnabled
+              ? `/studio/${organizationSlug}/${projectSlug}/analytics/insights`
+              : `/studio/${organizationSlug}/${projectSlug}/analytics/revenue`,
             items: [
-              {
-                isActive: () =>
-                  pathname.startsWith(
-                    `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
-                  ),
-                title: "Insights",
-                url: `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
-              },
-              {
-                isActive: () =>
-                  pathname.startsWith(
-                    `/studio/${organizationSlug}/${projectSlug}/analytics/dashboards`,
-                  ),
-                title: "Dashboards",
-                url: `/studio/${organizationSlug}/${projectSlug}/analytics/dashboards`,
-              },
+              ...(customAnalyticsEnabled
+                ? [
+                    {
+                      isActive: () =>
+                        pathname.startsWith(
+                          `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
+                        ),
+                      title: "Insights",
+                      url: `/studio/${organizationSlug}/${projectSlug}/analytics/insights`,
+                    },
+                    {
+                      isActive: () =>
+                        pathname.startsWith(
+                          `/studio/${organizationSlug}/${projectSlug}/analytics/dashboards`,
+                        ),
+                      title: "Dashboards",
+                      url: `/studio/${organizationSlug}/${projectSlug}/analytics/dashboards`,
+                    },
+                  ]
+                : []),
               {
                 isActive: () =>
                   `/studio/${organizationSlug}/${projectSlug}/analytics/revenue` ===
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx
index d3c91588b..4278caa84 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.dashboards.tsx
@@ -1,6 +1,9 @@
 import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
 
 import { CustomDashboardsPage } from "@/features/studio/analytics/custom-dashboards-page";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/dashboards",
@@ -9,6 +12,14 @@ export const Route = createFileRoute(
 });
 
 function DashboardsRoute() {
+  const customAnalyticsEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.customAnalytics.key);
   const { organizationSlug, projectSlug } = Route.useParams();
+
+  if (!customAnalyticsEnabled) {
+    return (
+      <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "This page is not available." }} />
+    );
+  }
+
   return <CustomDashboardsPage organizationSlug={organizationSlug} projectSlug={projectSlug} />;
 }
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx
index 7afb887cb..47c3d6f7e 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.insights.tsx
@@ -1,6 +1,9 @@
 import { createFileRoute } from "@tanstack/react-router";
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
 
 import { CustomInsightsPage } from "@/features/studio/analytics/custom-insights-page";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/insights",
@@ -9,6 +12,14 @@ export const Route = createFileRoute(
 });
 
 function InsightsRoute() {
+  const customAnalyticsEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.customAnalytics.key);
   const { organizationSlug, projectSlug } = Route.useParams();
+
+  if (!customAnalyticsEnabled) {
+    return (
+      <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "This page is not available." }} />
+    );
+  }
+
   return <CustomInsightsPage organizationSlug={organizationSlug} projectSlug={projectSlug} />;
 }
diff --git a/packages/rpc/src/internalFeatureFlags.ts b/packages/rpc/src/internalFeatureFlags.ts
index 782c62795..80083738c 100644
--- a/packages/rpc/src/internalFeatureFlags.ts
+++ b/packages/rpc/src/internalFeatureFlags.ts
@@ -52,6 +52,12 @@ export const INTERNAL_FEATURE_FLAGS = {
       "The analytics → Query page: run read-only VoidQL queries against the project's analytics.",
     defaultEnabled: false,
   },
+  customAnalytics: {
+    key: "custom_analytics",
+    name: "Custom Analytics",
+    description: "Enable custom analytics insights, dashboards, and cohorts in Studio.",
+    defaultEnabled: false,
+  },
   experimentation: {
     key: "experimentation",
     name: "Experimentation",

From c2cd8b0ed4fe3a89d2023a9ecd34368ea63cbe04 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 09:35:31 +0200
Subject: [PATCH 087/129] feat(ai): add visual paywall review workflow

---
 apps/backend/src/ai/VoidhashAiService.ts      | 158 ++++---
 .../src/ai/skills/paywall-authoring.test.ts   |  25 +-
 .../src/ai/skills/paywall-authoring.ts        |  54 ++-
 apps/backend/src/ai/surfaces.test.ts          |   5 +
 apps/backend/src/ai/surfaces.ts               |   8 +-
 apps/www/src/features/studio/ai/contract.ts   |  23 +-
 .../features/studio/ai/use-surface-chat.ts    |  12 +-
 .../designer/ai-panel/canvas-capture.ts       | 231 ++++++++++
 .../designer/ai-panel/tool-executor.test.ts   | 231 +++++++++-
 .../designer/ai-panel/tool-executor.ts        | 398 ++++++++++++++++--
 .../designer/ai-panel/use-designer-agent.ts   |  35 +-
 .../paywalls/designer/canvas/canvas.tsx       |   3 +
 .../canvas/helpers/selectable.test.tsx        |  32 +-
 .../designer/canvas/helpers/selectable.tsx    |  16 +-
 .../canvas/overlay/agent-working-overlay.tsx  | 104 +++++
 .../state/actions/ai-panel-actions.ts         |  23 +
 .../paywalls/designer/state/actions/index.ts  |   7 +-
 .../designer/state/designer-store-state.tsx   |  11 +
 .../designer/state/designer-store.tsx         |  20 +-
 packages/ai-shared/src/models.test.ts         |  43 ++
 packages/ai-shared/src/models.ts              |  52 ++-
 packages/ai-shared/src/surfaces.test.ts       |  26 ++
 packages/ai-shared/src/surfaces.ts            | 120 +++++-
 23 files changed, 1451 insertions(+), 186 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/overlay/agent-working-overlay.tsx
 create mode 100644 packages/ai-shared/src/models.test.ts
 create mode 100644 packages/ai-shared/src/surfaces.test.ts

diff --git a/apps/backend/src/ai/VoidhashAiService.ts b/apps/backend/src/ai/VoidhashAiService.ts
index 09539bacd..5e53bb70f 100644
--- a/apps/backend/src/ai/VoidhashAiService.ts
+++ b/apps/backend/src/ai/VoidhashAiService.ts
@@ -1,19 +1,14 @@
 import {
   designerToolDescriptions,
+  designerToolOutputSchemas,
   designerToolSchemas,
   modelForTurn,
+  previewScreenshotToolResultSchema,
   type Surface,
 } from "@voidhash/ai-shared";
-import {
-  AiChatService,
-  PaywallService,
-  PaywallWorkspaceService,
-} from "@voidhash/core/services";
+import { AiChatService, PaywallService, PaywallWorkspaceService } from "@voidhash/core/services";
 import { AuthSession } from "@voidhash/core/domain/auth/Auth";
-import {
-  fileNameFromDocRelative,
-  readComponentDefinitions,
-} from "@voidhash/paywall-workspace";
+import { fileNameFromDocRelative, readComponentDefinitions } from "@voidhash/paywall-workspace";
 import { Context, Effect, Layer, Schema } from "effect";
 import {
   convertToModelMessages,
@@ -22,7 +17,9 @@ import {
   stepCountIs,
   streamText,
   tool,
+  type InferUITools,
   type ToolSet,
+  type UIDataTypes,
   type UIMessage,
   validateUIMessages,
 } from "ai";
@@ -167,47 +164,100 @@ const deriveTitle = (messages: ReadonlyArray<UIMessage>): string => {
  * `ai-shared` definitions the browser executor imports, so declaration and
  * execution stay in lockstep.
  *
- * The declaration list is exactly the shared vocabulary (`get_document`,
- * `get_components`, `read_component`, `read_paywall`, `edit_document`,
- * `write_component`, `rename_component`, `delete_component`). Each entry keys
- * straight off `designerToolSchemas`/`designerToolDescriptions`, so a rename in
- * the shared package fails this file at compile time rather than drifting. (Built
- * per-tool rather than mapped so the AI SDK infers each concrete input schema.)
+ * The declaration list is exactly the shared vocabulary, including rendered
+ * inspection/screenshot review, document/component writes, subtree duplication,
+ * and the final design gate. Each entry keys straight off
+ * `designerToolSchemas`/`designerToolDescriptions`, so a rename in the shared
+ * package fails this file at compile time rather than drifting. (Built per-tool
+ * rather than mapped so the AI SDK infers each concrete input/output schema.)
  */
-export const designerTools = (): ToolSet => ({
-  get_document: tool({
-    description: designerToolDescriptions.get_document,
-    inputSchema: designerToolSchemas.get_document,
-  }),
-  get_components: tool({
-    description: designerToolDescriptions.get_components,
-    inputSchema: designerToolSchemas.get_components,
-  }),
-  read_component: tool({
-    description: designerToolDescriptions.read_component,
-    inputSchema: designerToolSchemas.read_component,
-  }),
-  read_paywall: tool({
-    description: designerToolDescriptions.read_paywall,
-    inputSchema: designerToolSchemas.read_paywall,
-  }),
-  edit_document: tool({
-    description: designerToolDescriptions.edit_document,
-    inputSchema: designerToolSchemas.edit_document,
-  }),
-  write_component: tool({
-    description: designerToolDescriptions.write_component,
-    inputSchema: designerToolSchemas.write_component,
-  }),
-  rename_component: tool({
-    description: designerToolDescriptions.rename_component,
-    inputSchema: designerToolSchemas.rename_component,
-  }),
-  delete_component: tool({
-    description: designerToolDescriptions.delete_component,
-    inputSchema: designerToolSchemas.delete_component,
-  }),
-});
+export const designerTools = () =>
+  ({
+    get_document: tool({
+      description: designerToolDescriptions.get_document,
+      inputSchema: designerToolSchemas.get_document,
+      outputSchema: designerToolOutputSchemas.get_document,
+    }),
+    get_rendered_layout: tool({
+      description: designerToolDescriptions.get_rendered_layout,
+      inputSchema: designerToolSchemas.get_rendered_layout,
+      outputSchema: designerToolOutputSchemas.get_rendered_layout,
+    }),
+  get_preview_screenshot: tool({
+    description: designerToolDescriptions.get_preview_screenshot,
+    inputSchema: designerToolSchemas.get_preview_screenshot,
+    outputSchema: previewScreenshotToolResultSchema,
+    toModelOutput: ({ output }) =>
+      typeof output === "string"
+        ? { type: "text", value: output }
+        : {
+            type: "content",
+            value: [
+              {
+                type: "text",
+                text: `${output.message}\nDocument signature: ${output.documentSignature}\nRendered at ${output.width}×${output.height}px (${output.scale}x).`,
+              },
+              {
+                type: "file",
+                data: { type: "data", data: output.dataBase64 },
+                filename: "paywall-preview.png",
+                mediaType: output.mediaType,
+              },
+            ],
+          },
+    }),
+    get_components: tool({
+      description: designerToolDescriptions.get_components,
+      inputSchema: designerToolSchemas.get_components,
+      outputSchema: designerToolOutputSchemas.get_components,
+    }),
+    read_component: tool({
+      description: designerToolDescriptions.read_component,
+      inputSchema: designerToolSchemas.read_component,
+      outputSchema: designerToolOutputSchemas.read_component,
+    }),
+    read_paywall: tool({
+      description: designerToolDescriptions.read_paywall,
+      inputSchema: designerToolSchemas.read_paywall,
+      outputSchema: designerToolOutputSchemas.read_paywall,
+    }),
+    edit_document: tool({
+      description: designerToolDescriptions.edit_document,
+      inputSchema: designerToolSchemas.edit_document,
+      outputSchema: designerToolOutputSchemas.edit_document,
+    }),
+    duplicate_subtree: tool({
+      description: designerToolDescriptions.duplicate_subtree,
+      inputSchema: designerToolSchemas.duplicate_subtree,
+      outputSchema: designerToolOutputSchemas.duplicate_subtree,
+    }),
+    write_component: tool({
+      description: designerToolDescriptions.write_component,
+      inputSchema: designerToolSchemas.write_component,
+      outputSchema: designerToolOutputSchemas.write_component,
+    }),
+    rename_component: tool({
+      description: designerToolDescriptions.rename_component,
+      inputSchema: designerToolSchemas.rename_component,
+      outputSchema: designerToolOutputSchemas.rename_component,
+    }),
+    delete_component: tool({
+      description: designerToolDescriptions.delete_component,
+      inputSchema: designerToolSchemas.delete_component,
+      outputSchema: designerToolOutputSchemas.delete_component,
+    }),
+    finish_design: tool({
+      description: designerToolDescriptions.finish_design,
+      inputSchema: designerToolSchemas.finish_design,
+      outputSchema: designerToolOutputSchemas.finish_design,
+    }),
+  }) satisfies ToolSet;
+
+type DesignerUIMessage = UIMessage<
+  unknown,
+  UIDataTypes,
+  InferUITools<ReturnType<typeof designerTools>>
+>;
 
 /**
  * Component file names (`<basename>.tsx`) of a paywall document, read from its
@@ -299,8 +349,12 @@ const make = (handle: AiGatewayHandle): VoidhashAiServiceShape => {
             message: cause instanceof Error ? cause.message : String(cause),
           }),
         try: async (): Promise<Response> => {
-          const uiMessages = await validateUIMessages({ messages: input.messages });
-          const modelMessages = await convertToModelMessages(uiMessages);
+          const tools = designerTools();
+          const uiMessages = await validateUIMessages<DesignerUIMessage>({
+            messages: input.messages,
+            tools,
+          });
+          const modelMessages = await convertToModelMessages(uiMessages, { tools });
           const turnId = turnIdFromMessages(uiMessages);
           const designerContext = await buildDesignerContext(context, input);
 
@@ -308,7 +362,7 @@ const make = (handle: AiGatewayHandle): VoidhashAiServiceShape => {
             model: workersai(modelForTurn(input.surface, input.messages)),
             system: designerSystemPrompt(designerContext),
             messages: modelMessages,
-            tools: designerTools(),
+            tools,
             stopWhen: stepCountIs(MAX_TOOL_STEPS),
           });
 
diff --git a/apps/backend/src/ai/skills/paywall-authoring.test.ts b/apps/backend/src/ai/skills/paywall-authoring.test.ts
index 1bf40e1d3..72cebe165 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.test.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.test.ts
@@ -1,7 +1,4 @@
-import {
-  ALLOWED_CHILDREN_BY_NODE_TYPE,
-  type NodeType,
-} from "@voidhash/mimic-schema";
+import { ALLOWED_CHILDREN_BY_NODE_TYPE, type NodeType } from "@voidhash/mimic-schema";
 import { nodeStyleFields } from "@voidhash/ai-shared";
 import { describe, expect, it } from "vite-plus/test";
 
@@ -56,12 +53,8 @@ describe("paywallAuthoringSkill — generated style reference", () => {
     // The AI edit path derives these flags, so the reference tells the model it
     // only ever writes them to hide a group (explicit `false`).
     expect(skill).toContain("AUTO-MANAGED");
-    expect(skill).toContain(
-      "set to true automatically when you set any background field",
-    );
-    expect(skill).toContain(
-      "set to true automatically when you set any fill field",
-    );
+    expect(skill).toContain("set to true automatically when you set any background field");
+    expect(skill).toContain("set to true automatically when you set any fill field");
   });
 });
 
@@ -94,3 +87,15 @@ describe("paywallAuthoringSkill — generated containment reference", () => {
     expect(skill).not.toContain("`codeComponent` may contain");
   });
 });
+
+describe("paywallAuthoringSkill — visual review discipline", () => {
+  it("documents rendered inspection, screenshot checkpoints, and gated completion", () => {
+    expect(skill).toContain("`get_rendered_layout` measures reality");
+    expect(skill).toContain("`get_preview_screenshot` is the visual checkpoint");
+    expect(skill).toContain("`finish_design` is the completion gate");
+    expect(skill).toContain("Hierarchy and story");
+    expect(skill).toContain("Offer clarity");
+    expect(skill).toContain("Viewport fit");
+    expect(skill).toContain("Purchase affordances");
+  });
+});
diff --git a/apps/backend/src/ai/skills/paywall-authoring.ts b/apps/backend/src/ai/skills/paywall-authoring.ts
index f520fa9ce..31fc7c2d2 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.ts
@@ -1,8 +1,4 @@
-import {
-  ALLOWED_CHILDREN_BY_NODE_TYPE,
-  NODE_TYPES,
-  type NodeType,
-} from "@voidhash/mimic-schema";
+import { ALLOWED_CHILDREN_BY_NODE_TYPE, NODE_TYPES, type NodeType } from "@voidhash/mimic-schema";
 import {
   acceptanceOf,
   nodeDefaultData,
@@ -70,9 +66,7 @@ function autoManagedAnnotation(flagField: string): string {
 /** The schema default for one style field of a node type, or `undefined` if it has none. */
 function styleFieldDefault(type: NodeType, field: string): unknown {
   const style = nodeDefaultData(type)["style"];
-  return style && typeof style === "object"
-    ? (style as Record<string, unknown>)[field]
-    : undefined;
+  return style && typeof style === "object" ? (style as Record<string, unknown>)[field] : undefined;
 }
 
 /**
@@ -259,6 +253,50 @@ Layout is flexbox, exactly like CSS / React Native:
   ids.
 - **Selection ids are directly addressable.** When the context block lists
   selected node ids, use them straight in ops (no need to re-locate them).
+- **\`duplicate_subtree\` preserves visual systems.** Prefer it over rebuilding a
+  repeated benefit, product option, card, or control from scratch. Fresh ids are
+  returned, so immediately tailor the clone's content/state with focused updates.
+- **\`get_rendered_layout\` measures reality.** Use it when declared styles are not
+  enough to judge alignment, spacing, clipping, overflow, safe-area fit, or
+  above-the-fold placement. It reports browser geometry and resolved styles.
+- **\`get_preview_screenshot\` is the visual checkpoint.** Capture the screen after
+  each meaningful visual section and after every correction pass. Inspect the
+  pixels; do not infer visual quality from the document tree alone.
+- **\`finish_design\` is the completion gate.** It accepts only the exact signature
+  of the latest screenshot while the document is unchanged and
+  \`unresolvedIssues\` is empty. Any post-review edit requires a new screenshot.
+
+## Visual design and review workflow
+
+For broad design work, decide on one coherent direction before editing: audience
+and offer, visual mood, a restrained palette, typography scale, spacing rhythm,
+content hierarchy, and CTA treatment. Build one meaningful visual group at a
+time, then review it in the live screenshot. Prefer purposeful hierarchy and
+consistent systems over adding decoration.
+
+At every screenshot checkpoint, critique the rendered paywall against this
+rubric and correct visible issues with focused edits:
+
+- **Hierarchy and story:** the value proposition reads first, supporting proof
+  and benefits scan naturally, and the primary CTA is unmistakably dominant.
+- **Offer clarity:** product options, price/period, trial or billing terms, savings,
+  and the selected state are understandable without guesswork.
+- **Composition:** margins, gaps, alignment, radii, and repeated structures follow
+  a consistent rhythm; no section feels accidentally crowded or empty.
+- **Typography and color:** the type scale has clear roles, copy wraps cleanly,
+  contrast is legible, and accents are reserved for meaningful emphasis.
+- **Viewport fit:** no unintended clipping or horizontal overflow; safe areas are
+  respected; the CTA and essential offer information are reachable and sensibly
+  placed on the 375×812 screen.
+- **Purchase affordances:** selectable options look selectable, the CTA looks
+  tappable, and close, restore, legal, and subscription-term affordances are
+  present when appropriate.
+- **Polish:** imagery, icons, borders, shadows, and states render cleanly with no
+  placeholders, awkward truncation, inconsistent styling, or accidental defaults.
+
+Do not merely describe a problem found in the screenshot. Fix it, capture a new
+screenshot, and repeat until the review has no unresolved issues. Then call
+\`finish_design\` with the final screenshot's document signature.
 
 ### Op cheatsheet
 
diff --git a/apps/backend/src/ai/surfaces.test.ts b/apps/backend/src/ai/surfaces.test.ts
index 3f30370d0..f67fe1a6f 100644
--- a/apps/backend/src/ai/surfaces.test.ts
+++ b/apps/backend/src/ai/surfaces.test.ts
@@ -33,6 +33,11 @@ describe("designerSystemPrompt", () => {
   it("carries the agentic How-to-work discipline in the base prompt", () => {
     expect(base).toContain("How to work:");
     expect(base).toContain("Keep going until the user's request is fully handled");
+    expect(base).toContain("compact visual direction");
+    expect(base).toContain("get_rendered_layout");
+    expect(base).toContain("get_preview_screenshot");
+    expect(base).toContain("finish_design");
+    expect(base).toContain("Never claim completion without a successful");
   });
 
   it("lists every paywall with its display name and code components", () => {
diff --git a/apps/backend/src/ai/surfaces.ts b/apps/backend/src/ai/surfaces.ts
index 3dcf42be7..5300a1fdd 100644
--- a/apps/backend/src/ai/surfaces.ts
+++ b/apps/backend/src/ai/surfaces.ts
@@ -20,14 +20,16 @@ Attachments:
 Rules:
 - Read before you write. Call \`get_document\` (root, or a subtree with \`nodeId\`/\`depth\` for economy) to learn the current structure and ids before editing — explore, don't guess. Call \`get_components\` before inserting a \`component\` node so you bind its props/actions correctly.
 - Trust the validator. Field/value errors from \`edit_document\` name the allowed fields and values for that node type — iterate on them rather than guessing style keys.
-- Prefer the smallest change. Update only the fields you mean to change (\`update\` merges \`style\` per field). Reuse existing components rather than duplicating them. Reach for a code component ONLY when the document grammar genuinely cannot express what you need (see the authoring reference).
+- For broad creation or redesign requests, establish a compact visual direction before editing: audience and offer, mood, palette, typography scale, spacing rhythm, content hierarchy, and primary CTA treatment. Make decisive, coherent design choices when the user has not specified them.
+- Prefer the smallest change. Update only the fields you mean to change (\`update\` merges \`style\` per field). Reuse existing components and use \`duplicate_subtree\` for repeated visual groups. Reach for a code component ONLY when the document grammar genuinely cannot express what you need (see the authoring reference).
 - Keep your prose responses concise. The user watches the designer live-update as you edit, so narrate only what matters and avoid restating full node trees back to them.
 
 How to work:
 - Understand the request first, then \`get_document\` to see the current tree and ids. Read a sibling paywall with \`read_paywall\` when it is a useful reference.
-- Plan multi-step work. When a request needs several changes (new components, structural edits), lay out the steps and make them in order — batch related ops into one \`edit_document\` call where it is coherent (they apply atomically).
+- Plan multi-step work. When a request needs several changes (new components, structural edits), lay out the steps and make them in order — batch related ops into one \`edit_document\` call where it is coherent (they apply atomically). Work one meaningful visual group at a time so each checkpoint is easy to assess and correct.
 - Edit step by step; after each \`edit_document\`, read the returned minted ids / errors and correct before continuing. Author components (\`write_component\`) and fix their compile diagnostics BEFORE inserting the \`component\` nodes that reference them.
-- Verify the end state: \`get_document\` the affected subtree to confirm it is what the user asked for.
+- Verify structure with \`get_document\` and rendered geometry with \`get_rendered_layout\`. After every meaningful visual section, call \`get_preview_screenshot\`, inspect the actual render, state a short internal verdict, and make targeted corrections for visible issues before moving on.
+- Completion is gated by visual QA. After the final edit, capture a fresh full-screen \`get_preview_screenshot\`, review it against the paywall rubric in the authoring reference, make and re-review any fixes, then call \`finish_design\` with that screenshot's exact document signature and no unresolved issues. Never claim completion without a successful \`finish_design\`.
 - Keep going until the user's request is fully handled. Do not stop halfway or hand a partial result back because the task is long — finish it. Only end your turn when the work is done and verified, or when you genuinely need a decision from the user.`;
 
 /**
diff --git a/apps/www/src/features/studio/ai/contract.ts b/apps/www/src/features/studio/ai/contract.ts
index 334f380fa..80fa18b6e 100644
--- a/apps/www/src/features/studio/ai/contract.ts
+++ b/apps/www/src/features/studio/ai/contract.ts
@@ -1,4 +1,4 @@
-import type { Surface } from "@voidhash/ai-shared";
+import type { PreviewScreenshotToolOutput, Surface } from "@voidhash/ai-shared";
 
 /** Whether a chat is listed in the history UI, or stored-but-hidden. */
 export type AiChatType = "persistent" | "single_use";
@@ -8,8 +8,8 @@ export type AiChatType = "persistent" | "single_use";
  * seam. `input` is the model's raw argument object (the executor validates it
  * against the shared tool schema); `toolName` selects the tool. `chatId` +
  * `turnId` (the id of the current user turn — the last user message) identify the
- * chat turn the designer's `apply_changes` threads to the server for checkpoint
- * capture.
+ * chat turn the designer's first mutating tool threads to the server for
+ * checkpoint capture.
  */
 export interface SurfaceToolCall {
   toolName: string;
@@ -20,16 +20,19 @@ export interface SurfaceToolCall {
 }
 
 /**
- * The result an executor folds every tool call into — a model-facing string plus
- * whether it represents an error. Executors NEVER throw into the AI SDK: a failure
- * is folded into `{ output, isError: true }` so the model sees a readable message
- * and can recover.
+ * The result an executor folds every tool call into: model-facing text or the
+ * structured screenshot payload, plus whether it represents an error. Executors
+ * NEVER throw into the AI SDK: a failure is folded into
+ * `{ output, isError: true }` so the model sees a readable message and can recover.
  */
 export interface SurfaceToolResult {
-  output: string;
+  output: string | PreviewScreenshotToolOutput;
   isError: boolean;
 }
 
+/** Coarse chat activity exposed to a host surface for ambient progress UI. */
+export type SurfaceAgentActivity = { kind: "thinking"; label: string } | { kind: "idle" };
+
 /**
  * How a surface's chats are persisted. `persistent` chats appear in the history
  * dropdown and can be reopened; `single_use` chats are still stored (for
@@ -47,7 +50,7 @@ export interface SurfaceChatPersistence {
  *
  * The designer surface's tools are CLIENT-EXECUTED: the backend declares them
  * schema-only, so the model calling a tool ends the SSE stream; the browser runs
- * {@link SurfaceAgent.executeTool} against the local fork and the chat
+ * {@link SurfaceAgent.executeTool} against the live local document and the chat
  * auto-continues (AI SDK v5 client-tool round-trip). A surface with no client
  * tools omits `executeTool` and remains a pure chat UI.
  */
@@ -79,6 +82,8 @@ export interface SurfaceAgent {
    * must not block the message). Omit if the surface has none.
    */
   beforeSend?: () => Promise<void> | void;
+  /** Receives coarse turn activity so the host can visualize agent progress outside chat. */
+  onActivityChange?: (activity: SurfaceAgentActivity) => void;
   /** Persistence policy for this surface's chats. Defaults to `single_use`. */
   persistence?: SurfaceChatPersistence;
 }
diff --git a/apps/www/src/features/studio/ai/use-surface-chat.ts b/apps/www/src/features/studio/ai/use-surface-chat.ts
index be0244f50..10acd32d7 100644
--- a/apps/www/src/features/studio/ai/use-surface-chat.ts
+++ b/apps/www/src/features/studio/ai/use-surface-chat.ts
@@ -1,7 +1,7 @@
 import { useChat } from "@ai-sdk/react";
 import { useQueryClient } from "@tanstack/react-query";
 import { lastAssistantMessageIsCompleteWithToolCalls, type UIMessage } from "ai";
-import { useMemo, useRef } from "react";
+import { useEffect, useMemo, useRef } from "react";
 
 import { queryKeys } from "@/features/studio/lib/tanstack-query";
 
@@ -123,6 +123,16 @@ export function useSurfaceChat(agent: SurfaceAgent, session: SurfaceChatSession)
     regenerate: rawRegenerate,
   } = chat;
 
+  const onActivityChange = agent.onActivityChange;
+  useEffect(() => {
+    onActivityChange?.(
+      status === "submitted" || status === "streaming"
+        ? { kind: "thinking", label: "Thinking about the paywall" }
+        : { kind: "idle" },
+    );
+    return () => onActivityChange?.({ kind: "idle" });
+  }, [onActivityChange, status]);
+
   // Wrap `sendMessage` so a fresh USER turn resets the auto-continuation budget
   // (the cap bounds one agentic turn, not the whole chat).
   const sendMessage = useMemo(
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts
new file mode 100644
index 000000000..8f82224c5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts
@@ -0,0 +1,231 @@
+const NODE_SELECTOR = "[data-paywall-node-id]";
+
+/** Raster output captured from one live designer canvas node. */
+export interface DesignerNodeScreenshot {
+  dataBase64: string;
+  width: number;
+  height: number;
+  scale: 1 | 2;
+}
+
+/** Exact rendered measurements returned to the design agent. */
+export interface RenderedNodeLayout {
+  nodeId: string;
+  bounds: { x: number; y: number; width: number; height: number };
+  scroll: { width: number; height: number };
+  overflow: { x: string; y: string };
+  typography: {
+    fontFamily: string;
+    fontSize: string;
+    fontWeight: string;
+    letterSpacing: string;
+    lineHeight: string;
+    color: string;
+  };
+  clipped: { x: boolean; y: boolean };
+}
+
+/** Find the rendered element carrying a document node's stable id. */
+export function findDesignerNodeElement(nodeId: string): HTMLElement | SVGElement | null {
+  for (const element of document.querySelectorAll<HTMLElement | SVGElement>(NODE_SELECTOR)) {
+    if (element.getAttribute("data-paywall-node-id") === nodeId) {
+      return element;
+    }
+  }
+  return null;
+}
+
+const blobAsDataUrl = (blob: Blob): Promise<string> =>
+  new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onload = () => resolve(String(reader.result));
+    reader.onerror = () => reject(reader.error ?? new Error("Could not read image asset"));
+    reader.readAsDataURL(blob);
+  });
+
+async function assetAsDataUrl(url: string): Promise<string | null> {
+  if (url.startsWith("data:")) {
+    return url;
+  }
+  try {
+    const response = await fetch(url, { credentials: "include" });
+    if (!response.ok) {
+      return null;
+    }
+    return await blobAsDataUrl(await response.blob());
+  } catch {
+    return null;
+  }
+}
+
+async function inlineBackgroundImages(value: string): Promise<string> {
+  const matches = [...value.matchAll(/url\(["']?([^"')]+)["']?\)/g)];
+  let result = value;
+  for (const match of matches) {
+    const source = match[1];
+    if (!source) continue;
+    const dataUrl = await assetAsDataUrl(source);
+    result = result.replace(match[0], dataUrl === null ? "none" : `url("${dataUrl}")`);
+  }
+  return result;
+}
+
+async function copyRenderedTree(sourceRoot: Element, cloneRoot: Element): Promise<void> {
+  const sources = [sourceRoot, ...sourceRoot.querySelectorAll("*")];
+  const clones = [cloneRoot, ...cloneRoot.querySelectorAll("*")];
+
+  await Promise.all(
+    sources.map(async (source, index) => {
+      const clone = clones[index];
+      if (!(clone instanceof HTMLElement || clone instanceof SVGElement)) return;
+
+      const computed = window.getComputedStyle(source);
+      for (const property of computed) {
+        clone.style.setProperty(
+          property,
+          computed.getPropertyValue(property),
+          computed.getPropertyPriority(property),
+        );
+      }
+      if (computed.backgroundImage !== "none") {
+        clone.style.backgroundImage = await inlineBackgroundImages(computed.backgroundImage);
+      }
+
+      if (source instanceof HTMLImageElement && clone instanceof HTMLImageElement) {
+        const dataUrl = await assetAsDataUrl(source.currentSrc || source.src);
+        if (dataUrl === null) {
+          clone.removeAttribute("src");
+        } else {
+          clone.src = dataUrl;
+          clone.removeAttribute("srcset");
+        }
+      } else if (source instanceof HTMLInputElement && clone instanceof HTMLInputElement) {
+        clone.setAttribute("value", source.value);
+      } else if (source instanceof HTMLTextAreaElement && clone instanceof HTMLTextAreaElement) {
+        clone.textContent = source.value;
+      } else if (source instanceof HTMLCanvasElement && clone instanceof HTMLCanvasElement) {
+        const image = document.createElement("img");
+        image.src = source.toDataURL("image/png");
+        image.style.cssText = clone.style.cssText;
+        clone.replaceWith(image);
+      }
+    }),
+  );
+}
+
+const loadSvgImage = (url: string): Promise<HTMLImageElement> =>
+  new Promise((resolve, reject) => {
+    const image = new Image();
+    image.onload = () => resolve(image);
+    image.onerror = () => reject(new Error("The browser could not rasterize the canvas node"));
+    image.src = url;
+  });
+
+/**
+ * Capture one currently rendered designer node as PNG using an SVG
+ * `foreignObject`. Computed styles and fetchable image assets are inlined first,
+ * so the result reflects the live canvas rather than a stale server thumbnail.
+ */
+export async function captureDesignerNodeScreenshot(
+  nodeId: string,
+  scale: 1 | 2,
+): Promise<DesignerNodeScreenshot> {
+  const source = findDesignerNodeElement(nodeId);
+  if (source === null) {
+    throw new Error(
+      `Node "${nodeId}" is not mounted on the design canvas. Open Design mode and try again.`,
+    );
+  }
+
+  const computed = window.getComputedStyle(source);
+  const width = Math.max(
+    1,
+    Math.round(
+      source.clientWidth ||
+        Number.parseFloat(computed.width) ||
+        source.getBoundingClientRect().width,
+    ),
+  );
+  const height = Math.max(
+    1,
+    Math.round(
+      source.clientHeight ||
+        Number.parseFloat(computed.height) ||
+        source.getBoundingClientRect().height,
+    ),
+  );
+  const clone = source.cloneNode(true) as Element;
+  await copyRenderedTree(source, clone);
+
+  const serialized = new XMLSerializer().serializeToString(clone);
+  const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${width}" height="${height}" viewBox="0 0 ${width} ${height}"><foreignObject width="100%" height="100%"><div xmlns="http://www.w3.org/1999/xhtml" style="width:${width}px;height:${height}px;overflow:hidden">${serialized}</div></foreignObject></svg>`;
+  const svgUrl = URL.createObjectURL(new Blob([svg], { type: "image/svg+xml;charset=utf-8" }));
+
+  try {
+    const image = await loadSvgImage(svgUrl);
+    const canvas = document.createElement("canvas");
+    canvas.width = width * scale;
+    canvas.height = height * scale;
+    const context = canvas.getContext("2d");
+    if (context === null) {
+      throw new Error("Canvas 2D rendering is unavailable");
+    }
+    context.scale(scale, scale);
+    context.drawImage(image, 0, 0, width, height);
+    const dataUrl = canvas.toDataURL("image/png");
+    return {
+      dataBase64: dataUrl.slice(dataUrl.indexOf(",") + 1),
+      height: canvas.height,
+      scale,
+      width: canvas.width,
+    };
+  } finally {
+    URL.revokeObjectURL(svgUrl);
+  }
+}
+
+/** Measure actual browser layout for the requested rendered document nodes. */
+export function inspectRenderedNodeLayouts(
+  nodeIds: readonly string[],
+  screenId: string,
+  canvasScale: number,
+): RenderedNodeLayout[] {
+  const screen = findDesignerNodeElement(screenId);
+  if (screen === null) {
+    throw new Error("The paywall screen is not mounted on the design canvas.");
+  }
+  const screenRect = screen.getBoundingClientRect();
+  const scale = canvasScale > 0 ? canvasScale : 1;
+
+  return nodeIds.flatMap((nodeId) => {
+    const element = findDesignerNodeElement(nodeId);
+    if (element === null) return [];
+    const rect = element.getBoundingClientRect();
+    const style = window.getComputedStyle(element);
+    const clippedX = element.scrollWidth > element.clientWidth + 1 && style.overflowX === "hidden";
+    const clippedY =
+      element.scrollHeight > element.clientHeight + 1 && style.overflowY === "hidden";
+    return [
+      {
+        nodeId,
+        bounds: {
+          x: (rect.left - screenRect.left) / scale,
+          y: (rect.top - screenRect.top) / scale,
+          width: rect.width / scale,
+          height: rect.height / scale,
+        },
+        scroll: { width: element.scrollWidth, height: element.scrollHeight },
+        overflow: { x: style.overflowX, y: style.overflowY },
+        typography: {
+          color: style.color,
+          fontFamily: style.fontFamily,
+          fontSize: style.fontSize,
+          fontWeight: style.fontWeight,
+          letterSpacing: style.letterSpacing,
+          lineHeight: style.lineHeight,
+        },
+        clipped: { x: clippedX, y: clippedY },
+      },
+    ];
+  });
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
index e9cde483f..4c648438a 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
@@ -1,7 +1,7 @@
 import type { PipelineResult } from "../code-mode/compile-pipeline";
 import { describe, expect, test } from "vite-plus/test";
 
-import type { SurfaceToolCall } from "@/features/studio/ai";
+import type { SurfaceToolCall, SurfaceToolResult } from "@/features/studio/ai";
 
 import type { CodeEditorHandle } from "../code-mode/code-editor-context";
 import type { PaywallCodeTarget } from "../hooks/use-paywall-code-target";
@@ -12,11 +12,7 @@ import {
   type OfflineDesignerDocument,
 } from "../state/testing/offline-document";
 import { insertCodeComponent } from "../state/utils/code-component-writes";
-import {
-  renderCompileDiagnostics,
-  runDesignerTool,
-  type DesignerToolDeps,
-} from "./tool-executor";
+import { renderCompileDiagnostics, runDesignerTool, type DesignerToolDeps } from "./tool-executor";
 
 const PAYWALL_ID = "pw-1";
 const PAYWALL_SLUG = "checkout";
@@ -110,6 +106,14 @@ function makeDeps(
       hasPanel: false,
     }),
     readPaywallDocument: async () => ({ slug: "", name: "", paywallId: "", document: null }),
+    captureNodeScreenshot: async (_nodeId, scale) => ({
+      dataBase64: "cG5n",
+      width: 375 * scale,
+      height: 812 * scale,
+      scale,
+    }),
+    inspectRenderedLayouts: () => [],
+    reviewState: {},
     captureCheckpoint: async (input) => {
       checkpoints.push(input);
       return { captured: true };
@@ -120,6 +124,14 @@ function makeDeps(
   } as DesignerToolDeps & { handle: FakeHandle; checkpoints: CheckpointCall[] };
 }
 
+/** Narrow a string-producing tool result for JSON/prose assertions. */
+function textOutput(result: SurfaceToolResult): string {
+  if (typeof result.output !== "string") {
+    throw new Error("expected a text tool result");
+  }
+  return result.output;
+}
+
 /** A minimal snapshot node: `{ id, type, data: { style }, children }`. */
 interface SnapshotNode {
   id: string;
@@ -169,7 +181,7 @@ describe("runDesignerTool — get_document", () => {
 
     const result = await runDesignerTool(deps, call("get_document", { nodeId: screenId }));
     expect(result.isError).toBe(false);
-    const parsed = JSON.parse(result.output) as { id: string; type: string };
+    const parsed = JSON.parse(textOutput(result)) as { id: string; type: string };
     expect(parsed.id).toBe(screenId);
     expect(parsed.type).toBe("screen");
   });
@@ -185,6 +197,119 @@ describe("runDesignerTool — get_document", () => {
   });
 });
 
+describe("runDesignerTool — rendered review", () => {
+  test("returns actual browser layout measurements for requested nodes", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const inspected: string[][] = [];
+    const deps = makeDeps(store, dispatch, {
+      inspectRenderedLayouts: (nodeIds, inspectedScreenId, canvasScale) => {
+        inspected.push([...nodeIds]);
+        expect(inspectedScreenId).toBe(screenId);
+        expect(canvasScale).toBe(store.getState().canvas.scale);
+        return [
+          {
+            nodeId: screenId,
+            bounds: { x: 0, y: 0, width: 375, height: 812 },
+            scroll: { width: 375, height: 812 },
+            overflow: { x: "hidden", y: "hidden" },
+            typography: {
+              fontFamily: "Inter",
+              fontSize: "16px",
+              fontWeight: "400",
+              letterSpacing: "normal",
+              lineHeight: "normal",
+              color: "rgb(0, 0, 0)",
+            },
+            clipped: { x: false, y: false },
+          },
+        ];
+      },
+    });
+
+    const result = await runDesignerTool(
+      deps,
+      call("get_rendered_layout", { nodeIds: [screenId] }),
+    );
+    expect(result.isError).toBe(false);
+    expect(inspected).toEqual([[screenId]]);
+    expect(JSON.parse(textOutput(result))).toMatchObject({
+      screenId,
+      layouts: [{ nodeId: screenId, clipped: { x: false, y: false } }],
+      missingNodeIds: [],
+    });
+  });
+
+  test("returns a multimodal screenshot and only finishes the exact reviewed document", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const captured: Array<{ nodeId: string; scale: 1 | 2 }> = [];
+    const deps = makeDeps(store, dispatch, {
+      captureNodeScreenshot: async (nodeId, scale) => {
+        captured.push({ nodeId, scale });
+        return { dataBase64: "cG5n", width: 750, height: 1624, scale };
+      },
+    });
+
+    const screenshot = await runDesignerTool(deps, call("get_preview_screenshot", { scale: 2 }));
+    expect(screenshot.isError).toBe(false);
+    expect(captured).toEqual([{ nodeId: screenId, scale: 2 }]);
+    expect(screenshot.output).toMatchObject({
+      kind: "preview-screenshot",
+      mediaType: "image/png",
+      dataBase64: "cG5n",
+      width: 750,
+      height: 1624,
+      scale: 2,
+    });
+    if (typeof screenshot.output === "string") {
+      throw new Error("expected a screenshot tool result");
+    }
+    const signature = screenshot.output.documentSignature;
+
+    const unresolved = await runDesignerTool(
+      deps,
+      call("finish_design", {
+        reviewedDocumentSignature: signature,
+        verdict: "Hierarchy is clear, but the legal copy still clips.",
+        unresolvedIssues: ["Legal copy clips"],
+      }),
+    );
+    expect(unresolved.isError).toBe(true);
+
+    const finished = await runDesignerTool(
+      deps,
+      call("finish_design", {
+        reviewedDocumentSignature: signature,
+        verdict: "Hierarchy, spacing, contrast, fit, and purchase affordances are clear.",
+        unresolvedIssues: [],
+      }),
+    );
+    expect(finished.isError).toBe(false);
+
+    await runDesignerTool(
+      deps,
+      call(
+        "edit_document",
+        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
+        { turnId: "turn-after-review" },
+      ),
+    );
+    const stale = await runDesignerTool(
+      deps,
+      call("finish_design", {
+        reviewedDocumentSignature: signature,
+        verdict: "Previously reviewed.",
+        unresolvedIssues: [],
+      }),
+    );
+    expect(stale.isError).toBe(true);
+    expect(textOutput(stale)).toContain("changed after the final screenshot");
+  });
+});
+
 describe("runDesignerTool — edit_document", () => {
   test("a valid batch applies and returns minted ids", async () => {
     const doc = createOfflineDesignerDocument();
@@ -201,7 +326,10 @@ describe("runDesignerTool — edit_document", () => {
       ),
     );
     expect(result.isError).toBe(false);
-    const parsed = JSON.parse(result.output) as { ok: boolean; mintedIds: Record<string, string[]> };
+    const parsed = JSON.parse(textOutput(result)) as {
+      ok: boolean;
+      mintedIds: Record<string, string[]>;
+    };
     expect(parsed.ok).toBe(true);
     expect(parsed.mintedIds["0"]?.length).toBe(1);
   });
@@ -221,14 +349,22 @@ describe("runDesignerTool — edit_document", () => {
         { turnId: "turn-1" },
       ),
     );
-    const viewId = (JSON.parse(inserted.output) as { mintedIds: Record<string, string[]> })
+    const viewId = (JSON.parse(textOutput(inserted)) as { mintedIds: Record<string, string[]> })
       .mintedIds["0"]![0]!;
 
     const result = await runDesignerTool(
       deps,
       call(
         "edit_document",
-        { edits: [{ op: "update", nodeId: viewId, set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } } }] },
+        {
+          edits: [
+            {
+              op: "update",
+              nodeId: viewId,
+              set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } },
+            },
+          ],
+        },
         { turnId: "turn-2" },
       ),
     );
@@ -256,7 +392,7 @@ describe("runDesignerTool — edit_document", () => {
       ),
     );
     expect(result.isError).toBe(true);
-    const parsed = JSON.parse(result.output) as {
+    const parsed = JSON.parse(textOutput(result)) as {
       ok: boolean;
       errors: Array<{ code: string }>;
     };
@@ -307,6 +443,60 @@ describe("runDesignerTool — edit_document", () => {
     );
     expect(result.isError).toBe(false);
   });
+
+  test("duplicate_subtree preserves a visual group and mints fresh ids", async () => {
+    const doc = createOfflineDesignerDocument();
+    const { screenId } = seededIds(doc);
+    const { store, dispatch } = await makeStore(doc);
+    const deps = makeDeps(store, dispatch);
+    const inserted = await runDesignerTool(
+      deps,
+      call(
+        "edit_document",
+        {
+          edits: [
+            {
+              op: "insert",
+              parentId: screenId,
+              node: {
+                type: "view",
+                name: "Benefit",
+                style: { gap: 8 },
+                children: [{ type: "text", text: "Unlimited access" }],
+              },
+            },
+          ],
+        },
+        { turnId: "turn-insert" },
+      ),
+    );
+    const sourceId = (
+      JSON.parse(textOutput(inserted)) as {
+        mintedIds: Record<string, string[]>;
+      }
+    ).mintedIds["0"]![0]!;
+
+    const duplicated = await runDesignerTool(
+      deps,
+      call(
+        "duplicate_subtree",
+        { nodeId: sourceId, parentId: screenId, name: "Second benefit" },
+        { turnId: "turn-duplicate" },
+      ),
+    );
+    expect(duplicated.isError).toBe(false);
+    const duplicatedIds = (
+      JSON.parse(textOutput(duplicated)) as {
+        mintedIds: Record<string, string[]>;
+      }
+    ).mintedIds["0"];
+    expect(duplicatedIds).toHaveLength(2);
+
+    const screen = await runDesignerTool(deps, call("get_document", { nodeId: screenId }));
+    const output = textOutput(screen);
+    expect(output).toContain("Second benefit");
+    expect(output.match(/Unlimited access/g)).toHaveLength(2);
+  });
 });
 
 describe("runDesignerTool — components", () => {
@@ -392,7 +582,10 @@ describe("runDesignerTool — components", () => {
     const { store, dispatch } = await makeStore(doc);
     const deps = makeDeps(store, dispatch);
 
-    const result = await runDesignerTool(deps, call("read_component", { path: "components/widget.tsx" }));
+    const result = await runDesignerTool(
+      deps,
+      call("read_component", { path: "components/widget.tsx" }),
+    );
     expect(result).toEqual({ output: "// widget source", isError: false });
   });
 
@@ -439,7 +632,7 @@ describe("runDesignerTool — components", () => {
 
     const result = await runDesignerTool(deps, call("get_components", {}));
     expect(result.isError).toBe(false);
-    const parsed = JSON.parse(result.output) as {
+    const parsed = JSON.parse(textOutput(result)) as {
       catalog: unknown[];
       local: Array<{ path: string; note?: string }>;
     };
@@ -456,13 +649,21 @@ describe("runDesignerTool — read_paywall + guards", () => {
       readPaywallDocument: async (projectId, slug) => {
         expect(projectId).toBe("proj-1");
         expect(slug).toBe("other");
-        return { slug: "other", name: "Other", paywallId: "pw-2", document: { id: "root", type: "root" } };
+        return {
+          slug: "other",
+          name: "Other",
+          paywallId: "pw-2",
+          document: { id: "root", type: "root" },
+        };
       },
     });
 
     const result = await runDesignerTool(deps, call("read_paywall", { slug: "other" }));
     expect(result.isError).toBe(false);
-    const parsed = JSON.parse(result.output) as { slug: string; document: { type: string } };
+    const parsed = JSON.parse(textOutput(result)) as {
+      slug: string;
+      document: { type: string };
+    };
     expect(parsed.slug).toBe("other");
     expect(parsed.document.type).toBe("root");
   });
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
index 8b5dc5480..bfc2380bd 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
@@ -6,9 +6,12 @@ import {
   serializeDocument,
   type DesignerToolName,
   type DocumentEdit,
+  type NodeInput,
+  type PreviewScreenshotToolOutput,
 } from "@voidhash/ai-shared";
 import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
 import { listBuiltinComponents } from "@voidhash/paywall-builtins";
+import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
 import { docRelativeFromFileName, validateComponentFileName } from "@voidhash/paywall-workspace";
 import { useParams } from "@tanstack/react-router";
 import { useCallback, useEffect, useMemo, useRef } from "react";
@@ -22,7 +25,7 @@ import { CompilePipeline, type PipelineResult } from "../code-mode/compile-pipel
 import { hashSource } from "../code-mode/hash";
 import { uploadComponentManifest } from "../code-mode/manifest-upload";
 import { usePaywallCodeTarget, type PaywallCodeTarget } from "../hooks/use-paywall-code-target";
-import { closeTab } from "../state/actions";
+import { closeTab, finishAiCanvasOperation, startAiCanvasOperation } from "../state/actions";
 import {
   createCodeComponent,
   deleteCodeComponent,
@@ -36,6 +39,7 @@ import {
   type PaywallDesignerDispatch,
   type PaywallDesignerStoreType,
 } from "../state/designer-store";
+import type { AgentCanvasOperation } from "../state/designer-store-state";
 import {
   codeComponentDefinitions,
   componentFileName,
@@ -43,6 +47,13 @@ import {
   selectCodeComponentNodes,
 } from "../state/utils/code-components";
 import { selectDocumentRoot } from "../state/utils/document-root";
+import { findNodeById, flattenTree } from "../state/utils/tree";
+import {
+  captureDesignerNodeScreenshot,
+  inspectRenderedNodeLayouts,
+  type DesignerNodeScreenshot,
+  type RenderedNodeLayout,
+} from "./canvas-capture";
 
 /** Result of reading another paywall's cleaned document (`read_paywall`). */
 interface ReadPaywallDocumentResult {
@@ -56,11 +67,11 @@ interface ReadPaywallDocumentResult {
  * The seam {@link runDesignerTool} operates through — the designer store +
  * dispatch, the open-paywall target (or `null`), the route paywall id, the
  * optional Monaco handle (buffers only exist while code mode is open), a compile
- * pipeline for `write_component`, and the two RPC callbacks (`read_paywall` and
- * the per-turn checkpoint). `capturedTurns` tracks which turns already captured a
- * checkpoint so the runner (which is re-invoked per tool call) fires it at most
- * once per turn. Injected so the runner is a plain function testable against a
- * real store without React.
+ * pipeline for `write_component`, browser-render inspection/capture seams, and
+ * the two RPC callbacks (`read_paywall` and the per-turn checkpoint).
+ * `capturedTurns` tracks which turns already captured a checkpoint so the runner
+ * (which is re-invoked per tool call) fires it at most once per turn. Injected so
+ * the runner is a plain function testable against a real store without React.
  */
 export interface DesignerToolDeps {
   store: PaywallDesignerStoreType;
@@ -84,11 +95,22 @@ export interface DesignerToolDeps {
   }) => Promise<{ captured: boolean }>;
   /** Turn ids that already captured (or attempted) a checkpoint this session. */
   capturedTurns: Set<string>;
+  /** Captures one live rendered document node as a PNG. */
+  captureNodeScreenshot: (nodeId: string, scale: 1 | 2) => Promise<DesignerNodeScreenshot>;
+  /** Reads actual browser layout for rendered document nodes. */
+  inspectRenderedLayouts: (
+    nodeIds: readonly string[],
+    screenId: string,
+    canvasScale: number,
+  ) => RenderedNodeLayout[];
+  /** Last successful visual review in this executor session. */
+  reviewState: { lastScreenshot?: { documentSignature: string; nodeId: string } };
 }
 
 /** The mutating designer tools — the ones that take a pre-turn checkpoint. */
 const MUTATING_TOOLS: ReadonlySet<DesignerToolName> = new Set([
   "edit_document",
+  "duplicate_subtree",
   "write_component",
   "rename_component",
   "delete_component",
@@ -97,7 +119,9 @@ const MUTATING_TOOLS: ReadonlySet<DesignerToolName> = new Set([
 /**
  * Runs one validated designer client-tool call against the CURRENTLY OPEN paywall
  * (its mimic document + local components) and folds every outcome — success OR
- * failure — into a model-facing `{ output, isError }` string. NEVER throws.
+ * failure — into a model-facing `{ output, isError }` result. Screenshot review
+ * returns structured multimodal content; every other tool returns text. NEVER
+ * throws for an expected tool/runtime failure.
  *
  * Composition is authored as mimic document edits (`edit_document` → the
  * `applyDocumentEdits` store action); there is no code fork or apply step. Code
@@ -138,12 +162,32 @@ export async function runDesignerTool(
       const { nodeId, depth } = input as { nodeId?: string; depth?: number };
       return getDocument(nodeId, depth);
     }
+    case "get_rendered_layout":
+      return getRenderedLayout((input as { nodeIds?: readonly string[] }).nodeIds);
+    case "get_preview_screenshot": {
+      const { nodeId, scale = 1 } = input as { nodeId?: string; scale?: 1 | 2 };
+      return getPreviewScreenshot(nodeId, scale);
+    }
     case "get_components":
       return getComponents();
     case "read_component":
       return readComponent((input as { path: string }).path);
     case "edit_document":
       return editDocument((input as { edits: readonly DocumentEdit[] }).edits);
+    case "duplicate_subtree": {
+      const {
+        nodeId,
+        parentId,
+        index,
+        name: nextName,
+      } = input as {
+        nodeId: string;
+        parentId: string;
+        index?: number;
+        name?: string;
+      };
+      return duplicateSubtree(nodeId, parentId, index, nextName);
+    }
     case "write_component": {
       const { path, source } = input as { path: string; source: string };
       return writeComponent(path, source);
@@ -154,6 +198,14 @@ export async function runDesignerTool(
     }
     case "delete_component":
       return deleteComponent((input as { path: string }).path);
+    case "finish_design": {
+      const { reviewedDocumentSignature, unresolvedIssues, verdict } = input as {
+        reviewedDocumentSignature: string;
+        unresolvedIssues: readonly string[];
+        verdict: string;
+      };
+      return finishDesign(reviewedDocumentSignature, verdict, unresolvedIssues);
+    }
     default:
       return { output: `Unknown tool "${name}".`, isError: true };
   }
@@ -167,6 +219,84 @@ export async function runDesignerTool(
     return { output: JSON.stringify(cleaned), isError: false };
   }
 
+  function getRenderedLayout(nodeIds: readonly string[] | undefined): SurfaceToolResult {
+    const root = selectDocumentRoot(store.getState());
+    const screen = screenNode(root);
+    if (screen === null) {
+      return { output: "The open paywall has no screen to inspect.", isError: true };
+    }
+    const requested =
+      nodeIds ??
+      flattenTree<SnapshotNode>(root)
+        .filter((node) => isVisualNode(node))
+        .slice(0, 100)
+        .map((node) => node.id);
+    try {
+      const layouts = deps.inspectRenderedLayouts(
+        requested,
+        screen.id,
+        store.getState().canvas.scale,
+      );
+      const missing = requested.filter(
+        (nodeId) => !layouts.some((layout) => layout.nodeId === nodeId),
+      );
+      return {
+        output: JSON.stringify({ screenId: screen.id, layouts, missingNodeIds: missing }),
+        isError: false,
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      return { output: `Could not inspect the live paywall layout: ${message}`, isError: true };
+    }
+  }
+
+  async function getPreviewScreenshot(
+    requestedNodeId: string | undefined,
+    scale: 1 | 2,
+  ): Promise<SurfaceToolResult> {
+    const rootBefore = selectDocumentRoot(store.getState());
+    const nodeId = requestedNodeId ?? screenNode(rootBefore)?.id;
+    if (nodeId === undefined) {
+      return { output: "The open paywall has no screen to capture.", isError: true };
+    }
+    const targetNode = findNodeById<SnapshotNode>(rootBefore, nodeId);
+    if (targetNode === null) {
+      return { output: `No node "${nodeId}" in the document.`, isError: true };
+    }
+    if (!isVisualNode(targetNode)) {
+      return { output: `Node "${nodeId}" is not a visual canvas node.`, isError: true };
+    }
+    const signatureBefore = documentSignature(rootBefore);
+    let screenshot: DesignerNodeScreenshot;
+    try {
+      screenshot = await deps.captureNodeScreenshot(nodeId, scale);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      return { output: `Could not capture the live paywall preview: ${message}`, isError: true };
+    }
+    const signatureAfter = documentSignature(selectDocumentRoot(store.getState()));
+    if (signatureAfter !== signatureBefore) {
+      return {
+        output:
+          "The paywall changed while the screenshot was rendering. Capture it again before reviewing.",
+        isError: true,
+      };
+    }
+    deps.reviewState.lastScreenshot = { documentSignature: signatureAfter, nodeId };
+    const output: PreviewScreenshotToolOutput = {
+      kind: "preview-screenshot",
+      mediaType: "image/png",
+      dataBase64: screenshot.dataBase64,
+      width: screenshot.width,
+      height: screenshot.height,
+      scale: screenshot.scale,
+      documentSignature: signatureAfter,
+      message:
+        "Review this live paywall render, state a concise checkpoint verdict, and correct every visible issue before finishing.",
+    };
+    return { output, isError: false };
+  }
+
   function getComponents(): SurfaceToolResult {
     const state = store.getState();
     const catalog = Object.values(state.componentCatalog.components).map((entry) => ({
@@ -193,18 +323,18 @@ export async function runDesignerTool(
     const builtins = listBuiltinComponents()
       .filter((builtin) => builtin.manifest.slot !== true)
       .map((builtin) => ({
-      kind: "builtin" as const,
-      slug: builtin.slug,
-      name: builtin.name,
-      description: builtin.description,
-      props: builtin.manifest.props,
-      actions: builtin.manifest.actions,
-      previewStates: builtin.manifest.previewStates,
-      slot: builtin.manifest.slot ?? false,
-      // Builtins are first-party and UNPINNED: place them with these identity
-      // fields only — no componentVersion/contentHash/componentPath.
-      insertAs: { componentSource: "builtin", componentSlug: builtin.slug },
-    }));
+        kind: "builtin" as const,
+        slug: builtin.slug,
+        name: builtin.name,
+        description: builtin.description,
+        props: builtin.manifest.props,
+        actions: builtin.manifest.actions,
+        previewStates: builtin.manifest.previewStates,
+        slot: builtin.manifest.slot ?? false,
+        // Builtins are first-party and UNPINNED: place them with these identity
+        // fields only — no componentVersion/contentHash/componentPath.
+        insertAs: { componentSource: "builtin", componentSlug: builtin.slug },
+      }));
 
     return { output: JSON.stringify({ catalog, local, builtins }), isError: false };
   }
@@ -223,13 +353,79 @@ export async function runDesignerTool(
     // contract) so it can never drift from the type MCP/backend agree on. The
     // validator errors are the model-facing convergence signal — passed verbatim.
     const wire = editDocumentResultSchema.parse(
-      result.ok
-        ? { ok: true, mintedIds: result.mintedIds }
-        : { ok: false, errors: result.errors },
+      result.ok ? { ok: true, mintedIds: result.mintedIds } : { ok: false, errors: result.errors },
     );
     return { output: JSON.stringify(wire), isError: !result.ok };
   }
 
+  function duplicateSubtree(
+    nodeId: string,
+    parentId: string,
+    index: number | undefined,
+    nextName: string | undefined,
+  ): SurfaceToolResult {
+    const root = selectDocumentRoot(store.getState());
+    const source = findNodeById<SnapshotNode>(root, nodeId);
+    if (source === null) {
+      return { output: `No node "${nodeId}" in the document.`, isError: true };
+    }
+    if (!isVisualNode(source)) {
+      return {
+        output: `Cannot duplicate engine-managed ${source.type} node "${nodeId}".`,
+        isError: true,
+      };
+    }
+    const node = cloneNodeInput(source);
+    if (nextName !== undefined) {
+      node.name = nextName;
+    }
+    return editDocument([
+      { op: "insert", parentId, ...(index === undefined ? {} : { index }), node },
+    ]);
+  }
+
+  function finishDesign(
+    reviewedDocumentSignature: string,
+    verdict: string,
+    unresolvedIssues: readonly string[],
+  ): SurfaceToolResult {
+    if (unresolvedIssues.length > 0) {
+      return {
+        output: `Design review still has unresolved issues: ${unresolvedIssues.join("; ")}. Correct them and capture a new screenshot.`,
+        isError: true,
+      };
+    }
+    const review = deps.reviewState.lastScreenshot;
+    if (review === undefined || review.documentSignature !== reviewedDocumentSignature) {
+      return {
+        output:
+          "finish_design requires the exact signature from this session's latest successful get_preview_screenshot.",
+        isError: true,
+      };
+    }
+    const root = selectDocumentRoot(store.getState());
+    const screen = screenNode(root);
+    if (screen === null || review.nodeId !== screen.id) {
+      return {
+        output:
+          "The final review must use a full-screen get_preview_screenshot, not a subtree capture.",
+        isError: true,
+      };
+    }
+    const current = documentSignature(root);
+    if (current !== reviewedDocumentSignature) {
+      return {
+        output:
+          "The paywall changed after the final screenshot. Review the current render again before finishing.",
+        isError: true,
+      };
+    }
+    return {
+      output: `Visual review complete for document ${current}. Verdict: ${verdict}`,
+      isError: false,
+    };
+  }
+
   async function writeComponent(rawPath: string, source: string): Promise<SurfaceToolResult> {
     const fileName = componentFileName(rawPath.trim());
     const invalid = validateComponentFileName(fileName);
@@ -324,11 +520,145 @@ export async function runDesignerTool(
         isError: false,
       };
     } catch (error) {
-      return { output: `Could not read paywall "${readSlug}": ${unwrapRpcError(error)}`, isError: true };
+      return {
+        output: `Could not read paywall "${readSlug}": ${unwrapRpcError(error)}`,
+        isError: true,
+      };
     }
   }
 }
 
+type VisualSnapshotNode = Exclude<
+  SnapshotNode,
+  Extract<SnapshotNode, { type: "root" | "library" | "codeComponent" }>
+>;
+
+/** Whether a snapshot node is directly authorable/visible on the paywall canvas. */
+function isVisualNode(node: SnapshotNode): node is VisualSnapshotNode {
+  return node.type !== "root" && node.type !== "library" && node.type !== "codeComponent";
+}
+
+/** The first screen in a document root, or null for a malformed/empty document. */
+function screenNode(root: SnapshotNode): Extract<SnapshotNode, { type: "screen" }> | null {
+  const screen = flattenTree<SnapshotNode>(root).find((node) => node.type === "screen");
+  return screen?.type === "screen" ? screen : null;
+}
+
+/** Convert an existing visual snapshot subtree into an id-free insert payload. */
+function cloneNodeInput(node: VisualSnapshotNode): NodeInput {
+  const data = structuredClone(node.data) as Record<string, unknown>;
+  const children = node.children.filter(isVisualNode).map(cloneNodeInput);
+  return {
+    type: node.type,
+    ...data,
+    ...(children.length === 0 ? {} : { children }),
+  };
+}
+
+/** Stable, compact signature used to prove the final screenshot matches the document. */
+export function documentSignature(root: SnapshotNode): string {
+  const input = JSON.stringify(root);
+  let hash = 2_166_136_261;
+  for (let index = 0; index < input.length; index += 1) {
+    hash ^= input.charCodeAt(index);
+    hash = Math.imul(hash, 16_777_619);
+  }
+  return `doc-${(hash >>> 0).toString(16).padStart(8, "0")}`;
+}
+
+type AgentToolActivity = Pick<AgentCanvasOperation, "label" | "nodeIds" | "phase">;
+
+/** Describe a tool call for the live canvas indicator, including affected nodes. */
+export function describeDesignerToolActivity(
+  toolName: DesignerToolName,
+  input: unknown,
+  root: SnapshotNode,
+): AgentToolActivity {
+  const screenId = screenNode(root)?.id;
+  const withScreen = screenId === undefined ? [] : [screenId];
+  switch (toolName) {
+    case "get_document": {
+      const nodeId = (input as { nodeId?: string }).nodeId;
+      return {
+        label: "Inspecting document structure",
+        nodeIds: nodeId ? [nodeId] : withScreen,
+        phase: "inspecting",
+      };
+    }
+    case "get_rendered_layout": {
+      const nodeIds = (input as { nodeIds?: readonly string[] }).nodeIds;
+      return {
+        label: "Measuring rendered layout",
+        nodeIds: nodeIds ?? withScreen,
+        phase: "inspecting",
+      };
+    }
+    case "get_preview_screenshot": {
+      const nodeId = (input as { nodeId?: string }).nodeId;
+      return {
+        label: "Reviewing the live preview",
+        nodeIds: nodeId ? [nodeId] : withScreen,
+        phase: "reviewing",
+      };
+    }
+    case "get_components":
+      return { label: "Inspecting available components", nodeIds: [], phase: "inspecting" };
+    case "read_component":
+      return {
+        label: `Reading ${(input as { path: string }).path}`,
+        nodeIds: [],
+        phase: "inspecting",
+      };
+    case "read_paywall":
+      return {
+        label: `Comparing ${(input as { slug: string }).slug}`,
+        nodeIds: [],
+        phase: "inspecting",
+      };
+    case "edit_document": {
+      const edits = (input as { edits: readonly DocumentEdit[] }).edits;
+      const nodeIds = edits.flatMap((edit) => {
+        if (edit.op === "insert") return [edit.parentId];
+        if (edit.op === "move") return [edit.nodeId, edit.parentId];
+        return [edit.nodeId];
+      });
+      return { label: "Editing the paywall", nodeIds: [...new Set(nodeIds)], phase: "editing" };
+    }
+    case "duplicate_subtree": {
+      const { nodeId, parentId } = input as { nodeId: string; parentId: string };
+      return { label: "Duplicating a visual group", nodeIds: [nodeId, parentId], phase: "editing" };
+    }
+    case "write_component":
+    case "rename_component":
+    case "delete_component": {
+      const path =
+        toolName === "rename_component"
+          ? normalizeComponentPath((input as { fromPath: string }).fromPath)
+          : normalizeComponentPath((input as { path: string }).path);
+      const nodeIds = flattenTree<SnapshotNode>(root)
+        .filter(
+          (node) =>
+            node.type === "component" &&
+            node.data.componentSource === "local" &&
+            node.data.componentPath === path,
+        )
+        .map((node) => node.id);
+      return {
+        label:
+          toolName === "write_component"
+            ? `Building ${path}`
+            : toolName === "rename_component"
+              ? `Renaming ${path}`
+              : `Removing ${path}`,
+        nodeIds,
+        phase: "editing",
+      };
+    }
+    case "finish_design":
+      return { label: "Finishing visual review", nodeIds: withScreen, phase: "finishing" };
+  }
+}
+
 /**
  * Captures the per-turn pre-mutation checkpoint at most once per turn.
  * Best-effort: a missing `turnId` skips it (nothing to key on) and an RPC failure
@@ -402,7 +732,9 @@ export function renderCompileDiagnostics(
   return diagnostics
     .map((diagnostic) => {
       const at =
-        diagnostic.line !== undefined ? ` (line ${diagnostic.line}${diagnostic.column !== undefined ? `:${diagnostic.column}` : ""})` : "";
+        diagnostic.line !== undefined
+          ? ` (line ${diagnostic.line}${diagnostic.column !== undefined ? `:${diagnostic.column}` : ""})`
+          : "";
       return `  - [${diagnostic.phase}] ${diagnostic.message}${at}`;
     })
     .join("\n");
@@ -449,6 +781,7 @@ export function useDesignerToolExecutor(): (call: SurfaceToolCall) => Promise<Su
   // Turn ids that already captured a checkpoint this mount (survives the
   // per-call re-invocation of the pure runner).
   const capturedTurns = useRef<Set<string>>(new Set());
+  const reviewState = useRef<DesignerToolDeps["reviewState"]>({});
 
   return useCallback(
     async (call: SurfaceToolCall): Promise<SurfaceToolResult> => {
@@ -466,6 +799,14 @@ export function useDesignerToolExecutor(): (call: SurfaceToolCall) => Promise<Su
         return { output: `Invalid input for ${call.toolName}: ${message}`, isError: true };
       }
 
+      const activity = describeDesignerToolActivity(
+        call.toolName as DesignerToolName,
+        parsed.data,
+        selectDocumentRoot(store.getState()),
+      );
+      const startedAt = Date.now();
+      dispatch(startAiCanvasOperation)({ id: call.toolCallId, startedAt, ...activity });
+
       const deps: DesignerToolDeps = {
         store,
         dispatch,
@@ -473,6 +814,9 @@ export function useDesignerToolExecutor(): (call: SurfaceToolCall) => Promise<Su
         paywallId,
         handle,
         capturedTurns: capturedTurns.current,
+        reviewState: reviewState.current,
+        captureNodeScreenshot: captureDesignerNodeScreenshot,
+        inspectRenderedLayouts: inspectRenderedNodeLayouts,
         compile: (source) => pipeline.compile(source),
         readPaywallDocument: (projectId, slug) =>
           managedRuntime.runPromise(
@@ -488,6 +832,12 @@ export function useDesignerToolExecutor(): (call: SurfaceToolCall) => Promise<Su
       } catch (error) {
         const message = error instanceof Error ? error.message : String(error);
         return { output: `${call.toolName} failed: ${message}`, isError: true };
+      } finally {
+        const remaining = 500 - (Date.now() - startedAt);
+        if (remaining > 0) {
+          await new Promise<void>((resolve) => window.setTimeout(resolve, remaining));
+        }
+        dispatch(finishAiCanvasOperation)({ id: call.toolCallId });
       }
     },
     [dispatch, handle, paywallId, pipeline, store, target],
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
index 0bf0c8657..fd940e68d 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
@@ -8,7 +8,8 @@ import { useAuth } from "@/features/studio/components/auth-context";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 
 import { useCodeEditor } from "../code-mode/code-editor-context";
-import { usePaywallDesignerStore } from "../state/designer-store";
+import { finishAiCanvasOperation, startAiCanvasOperation } from "../state/actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
 import { selectedNodeIdsFromPresence } from "../state/utils/presence";
 import { useDesignerToolExecutor } from "./tool-executor";
 
@@ -26,11 +27,13 @@ import { useDesignerToolExecutor } from "./tool-executor";
  * `getDynamicContext` carries the current node selection with each send (read on
  * demand, not subscribed). `beforeSend` saves the open Monaco buffers to their
  * `codeComponent` nodes so the agent reads the user's latest committed code — a
- * purely local, synchronous operation.
+ * purely local, synchronous operation. `onActivityChange` mirrors coarse model
+ * activity into the same transient canvas overlay used by individual tools.
  */
 export function useDesignerAgent(): SurfaceAgent {
   const { user } = useAuth();
   const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
   const { handle } = useCodeEditor();
   const executeTool = useDesignerToolExecutor();
   const { organizationSlug, projectSlug, id: paywallId } = useParams({ strict: false });
@@ -49,6 +52,23 @@ export function useDesignerAgent(): SurfaceAgent {
     handle?.saveAll();
   }, [handle]);
 
+  const onActivityChange = useCallback<NonNullable<SurfaceAgent["onActivityChange"]>>(
+    (activity) => {
+      if (activity.kind === "thinking") {
+        dispatch(startAiCanvasOperation)({
+          id: "agent-thinking",
+          label: activity.label,
+          nodeIds: [],
+          phase: "thinking",
+          startedAt: Date.now(),
+        });
+        return;
+      }
+      dispatch(finishAiCanvasOperation)({ id: "agent-thinking" });
+    },
+    [dispatch],
+  );
+
   const organization = useMemo(
     () =>
       organizationSlug
@@ -77,10 +97,19 @@ export function useDesignerAgent(): SurfaceAgent {
       getDynamicContext,
       beforeSend,
       executeTool,
+      onActivityChange,
       // Designer chats are context-specific and resumable: scoped to the paywall
       // and listed in the panel's history dropdown.
       persistence: { chatType: "persistent" },
     }),
-    [organization?.id, projectId, paywallId, getDynamicContext, beforeSend, executeTool],
+    [
+      organization?.id,
+      projectId,
+      paywallId,
+      getDynamicContext,
+      beforeSend,
+      executeTool,
+      onActivityChange,
+    ],
   );
 }
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
index 76b5451a4..b0a317ccd 100644
--- a/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
@@ -17,6 +17,7 @@ import {
 import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
 import { BoundingBoxManagerProvider } from "./bounding-box-manager";
 import { NodeTreeRenderer } from "./node-tree-renderer";
+import { AgentWorkingOverlay } from "./overlay/agent-working-overlay";
 import { GradientOverlay } from "./overlay/gradient-overlay";
 import { SelectionOverlay } from "./overlay/selection-overlay";
 import { useViewport, Viewport, type ViewportTransform } from "./viewport";
@@ -239,6 +240,8 @@ export function Canvas() {
 
       {/* Gradient start/end point controls for the selected node */}
       <GradientOverlay containerRef={containerRef} />
+
+      <AgentWorkingOverlay />
     </div>
   );
 }
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx
index 27ed74b69..3d4d6e253 100644
--- a/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.test.tsx
@@ -4,10 +4,7 @@ import { TextNode, ViewNode } from "@voidhash/mimic-schema";
 import { act, cleanup, fireEvent, render } from "@testing-library/react";
 import { afterEach, describe, expect, test } from "vite-plus/test";
 
-import {
-  createOfflineDesignerDocument,
-  seededIds,
-} from "../../state/testing/offline-document";
+import { createOfflineDesignerDocument, seededIds } from "../../state/testing/offline-document";
 import { createDesignerStore, PaywallStoreContext } from "../../state/designer-store";
 import type { PaywallDesignerStoreType } from "../../state/designer-store";
 import { Viewport } from "../viewport";
@@ -26,7 +23,14 @@ function insertAbsoluteView(store: PaywallDesignerStoreType): string {
         screenId,
       );
       const view = (
-        screen as { children: { insertLast: (v: unknown) => { id: string; as: (n: unknown) => { data: { style: { update: (s: unknown) => void } } } } } }
+        screen as {
+          children: {
+            insertLast: (v: unknown) => {
+              id: string;
+              as: (n: unknown) => { data: { style: { update: (s: unknown) => void } } };
+            };
+          };
+        }
       ).children.insertLast({ type: "view" });
       viewId = view.id;
       view.as(ViewNode).data.style.update({ position: "absolute", left: 5, top: 5 });
@@ -46,7 +50,14 @@ function insertAbsoluteText(store: PaywallDesignerStoreType): string {
         screenId,
       );
       const text = (
-        screen as { children: { insertLast: (v: unknown) => { id: string; as: (n: unknown) => { data: { style: { update: (s: unknown) => void } } } } } }
+        screen as {
+          children: {
+            insertLast: (v: unknown) => {
+              id: string;
+              as: (n: unknown) => { data: { style: { update: (s: unknown) => void } } };
+            };
+          };
+        }
       ).children.insertLast({ type: "text" });
       textId = text.id;
       text.as(TextNode).data.style.update({ position: "absolute", left: 5, top: 5 });
@@ -89,6 +100,15 @@ function renderSelectable(store: PaywallDesignerStoreType, nodeId: string) {
   );
 }
 
+test("Selectable exposes the document node id on its rendered element", () => {
+  const doc = createOfflineDesignerDocument();
+  const store = createDesignerStore(doc as never);
+  const viewId = insertAbsoluteView(store);
+  const view = renderSelectable(store, viewId);
+
+  expect(view.getByTestId("target").getAttribute("data-paywall-node-id")).toBe(viewId);
+});
+
 describe("Selectable — unmount mid-drag cleanup", () => {
   test("unmounting during a drag removes listeners, restores the cursor, and cancels the move", () => {
     const doc = createOfflineDesignerDocument();
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx
index be16baf7e..e495a0933 100644
--- a/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/helpers/selectable.tsx
@@ -36,15 +36,7 @@ import { useViewport } from "../viewport";
 const MOVE_DRAG_THRESHOLD = 3;
 
 export interface SelectableProps {
-  children: ({
-    onContextMenu,
-    onDoubleClick,
-    onMouseDown,
-    onMouseEnter,
-    onMouseLeave,
-    onMouseOver,
-    role,
-  }: {
+  children: (props: {
     onContextMenu: (e: React.MouseEvent) => void;
     onDoubleClick: (e: React.MouseEvent) => void;
     onMouseDown: (e: React.MouseEvent) => void;
@@ -52,6 +44,7 @@ export interface SelectableProps {
     onMouseLeave: (e: React.MouseEvent) => void;
     onMouseOver: (e: React.MouseEvent) => void;
     role: string;
+    "data-paywall-node-id": string;
   }) => React.ReactNode;
   nodeId: string;
 }
@@ -60,9 +53,7 @@ export function Selectable({ children, nodeId }: SelectableProps) {
   const store = usePaywallDesignerStore();
   const isSelected = useStore(
     store,
-    useShallow((state) =>
-      selectedNodeIdsFromPresence(state.mimic.presence?.self).includes(nodeId),
-    ),
+    useShallow((state) => selectedNodeIdsFromPresence(state.mimic.presence?.self).includes(nodeId)),
   );
   const dispatch = usePaywallDesignerActions();
   const viewport = useViewport();
@@ -296,6 +287,7 @@ export function Selectable({ children, nodeId }: SelectableProps) {
   return (
     <DesignerContextMenu nodeId={nodeId} source="canvas">
       {children({
+        "data-paywall-node-id": nodeId,
         onContextMenu: handleContextMenu,
         onDoubleClick: handleDoubleClick,
         onMouseDown: handleMouseDown,
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/agent-working-overlay.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/agent-working-overlay.tsx
new file mode 100644
index 000000000..c7e616fe4
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/agent-working-overlay.tsx
@@ -0,0 +1,104 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { SparklesIcon } from "lucide-react";
+import { useMemo } from "react";
+import { useStore } from "zustand/react";
+
+import { PANEL_DIMENSIONS } from "../../panels/constants";
+import { usePaywallDesignerStore } from "../../state/designer-store";
+import type { AgentCanvasOperation } from "../../state/designer-store-state";
+
+const phaseClasses: Record<AgentCanvasOperation["phase"], string> = {
+  thinking: "border-violet-400/70 bg-violet-400/10 text-violet-700 dark:text-violet-200",
+  inspecting: "border-sky-400/80 bg-sky-400/10 text-sky-700 dark:text-sky-200",
+  editing: "border-violet-400/90 bg-violet-400/10 text-violet-700 dark:text-violet-200",
+  reviewing: "border-amber-400/90 bg-amber-400/10 text-amber-700 dark:text-amber-200",
+  finishing: "border-emerald-400/90 bg-emerald-400/10 text-emerald-700 dark:text-emerald-200",
+};
+
+const phaseOutlineClasses: Record<AgentCanvasOperation["phase"], string> = {
+  thinking: "border-violet-400/70 text-violet-700 dark:text-violet-200",
+  inspecting: "border-sky-400/80 text-sky-700 dark:text-sky-200",
+  editing: "border-violet-400/90 text-violet-700 dark:text-violet-200",
+  reviewing: "border-amber-400/90 text-amber-700 dark:text-amber-200",
+  finishing: "border-emerald-400/90 text-emerald-700 dark:text-emerald-200",
+};
+
+/**
+ * Visualizes the agent's current tool activity over the canvas. Targeted tools
+ * outline the document nodes they read or mutate; every active turn also gets a
+ * compact status pill so non-node work (thinking, component compilation, final
+ * review) remains visible.
+ */
+export function AgentWorkingOverlay() {
+  const store = usePaywallDesignerStore();
+  const operations = useStore(store, (state) => state.ai.operations);
+  const canvas = useStore(store, (state) => state.canvas);
+
+  const active = useMemo(
+    () => Object.values(operations).sort((a, b) => b.startedAt - a.startedAt),
+    [operations],
+  );
+  const primary = active.find((operation) => operation.phase !== "thinking") ?? active[0];
+
+  const targets = useMemo(() => {
+    const byId = new Map<string, AgentCanvasOperation>();
+    for (const operation of active) {
+      for (const nodeId of operation.nodeIds) {
+        if (!byId.has(nodeId)) {
+          byId.set(nodeId, operation);
+        }
+      }
+    }
+    return [...byId.entries()];
+  }, [active]);
+
+  if (!primary) {
+    return null;
+  }
+
+  return (
+    <div className="pointer-events-none absolute inset-0 z-20 overflow-hidden" aria-live="polite">
+      <div
+        className={cn(
+          "absolute left-1/2 flex -translate-x-1/2 items-center gap-2 rounded-full border bg-background/90 px-3 py-1.5 text-xs font-medium shadow-lg backdrop-blur-md",
+          phaseClasses[primary.phase],
+        )}
+        style={{ top: PANEL_DIMENSIONS.TOP_HEIGHT + 12 }}
+      >
+        <SparklesIcon className="size-3.5 animate-pulse" />
+        <span>{primary.label}</span>
+        {active.length > 1 ? (
+          <span className="rounded-full bg-current/10 px-1.5 tabular-nums">{active.length}</span>
+        ) : null}
+      </div>
+
+      {targets.map(([nodeId, operation]) => {
+        const box = canvas.boundingBoxes[nodeId];
+        if (!box) {
+          return null;
+        }
+        return (
+          <div
+            key={nodeId}
+            className={cn(
+              "absolute animate-pulse rounded-sm border-2 border-dashed bg-transparent shadow-lg",
+              phaseOutlineClasses[operation.phase],
+            )}
+            style={{
+              height: box.height * canvas.scale,
+              left: box.x * canvas.scale + canvas.x,
+              top: box.y * canvas.scale + canvas.y,
+              width: box.width * canvas.scale,
+            }}
+          >
+            <span className="absolute -top-6 left-0 max-w-52 truncate rounded-sm bg-background/95 px-1.5 py-0.5 text-[10px] font-medium shadow-sm">
+              {operation.label}
+            </span>
+          </div>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
index aade73362..c72318e41 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
@@ -6,6 +6,7 @@
 
 import { PANEL_DIMENSIONS } from "../../panels/constants";
 import { commander } from "../designer-commander";
+import type { AgentCanvasOperation } from "../designer-store-state";
 
 // =============================================================================
 // AI Panel Commands
@@ -42,3 +43,25 @@ export const setAiPanelWidth = commander.action<{ width: number }>((ctx, { width
     },
   });
 });
+
+/** Add or replace a transient operation shown by the canvas agent overlay. */
+export const startAiCanvasOperation = commander.action<AgentCanvasOperation>((ctx, operation) => {
+  const state = ctx.getState();
+  ctx.setState({
+    ai: {
+      ...state.ai,
+      operations: { ...state.ai.operations, [operation.id]: operation },
+    },
+  });
+});
+
+/** Remove one transient canvas operation if it is still active. */
+export const finishAiCanvasOperation = commander.action<{ id: string }>((ctx, { id }) => {
+  const state = ctx.getState();
+  if (!(id in state.ai.operations)) {
+    return;
+  }
+  const operations = { ...state.ai.operations };
+  delete operations[id];
+  ctx.setState({ ai: { ...state.ai, operations } });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
index 28b7057fa..6af889323 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
@@ -93,7 +93,12 @@ export { setShowGrid, toggleShowGrid } from "./debug-actions";
 // AI Panel Commands
 // =============================================================================
 
-export { setAiPanelWidth, toggleAiPanel } from "./ai-panel-actions";
+export {
+  finishAiCanvasOperation,
+  setAiPanelWidth,
+  startAiCanvasOperation,
+  toggleAiPanel,
+} from "./ai-panel-actions";
 
 // =============================================================================
 // Awareness Commands
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
index 4b1d56a46..4582d2736 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
@@ -33,6 +33,15 @@ export type AvailableTool = "cursor" | "text" | "rows" | "columns" | "scroll-vie
 
 export type DesignerMode = "design" | "preview" | "code" | "translation";
 
+/** One transient agent operation visualized over the canvas. */
+export interface AgentCanvasOperation {
+  id: string;
+  label: string;
+  nodeIds: readonly string[];
+  phase: "thinking" | "inspecting" | "editing" | "reviewing" | "finishing";
+  startedAt: number;
+}
+
 export type DevModeTab = "snapshot" | "presence" | "actions";
 
 /**
@@ -281,6 +290,8 @@ export type DesignerStoreState = {
     panelOpen: boolean;
     /** Current width of the AI chat panel in px (user-resizable). */
     width: number;
+    /** Active model/tool operations, keyed by tool-call id (browser-only). */
+    operations: Record<string, AgentCanvasOperation>;
   };
   stateOverrideSelection: StateOverrideSelection;
   /**
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
index dda24f7b3..ed1ab6761 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
@@ -1,10 +1,6 @@
 "use client";
 
-import {
-  createClientDocument,
-  TransportError,
-  WebSocketTransport,
-} from "@voidhash/mimic/client";
+import { createClientDocument, TransportError, WebSocketTransport } from "@voidhash/mimic/client";
 import { mimic } from "@voidhash/mimic/zustand";
 import { useCommander } from "@voidhash/mimic/zustand-commander";
 import {
@@ -12,7 +8,6 @@ import {
   PresenceSchema,
   type PresenceInput,
 } from "@voidhash/mimic-schema";
-import type { RootSnapshotNode } from "@voidhash/paywall-renderer-web-core";
 import { createContext, useCallback, useContext, useEffect, useRef, useState } from "react";
 import { create } from "zustand";
 
@@ -22,11 +17,11 @@ import { SHOW_GRID } from "../constants";
 import { PANEL_DIMENSIONS } from "../panels/constants";
 import { commander } from "./designer-commander";
 import type {
+  AgentCanvasOperation,
   CodeComponentsState,
   ComponentCatalog,
   ComponentPreviewStateSelection,
   DesignerMode,
-  DesignerStoreState,
   DevModeTab,
 } from "./designer-store-state";
 
@@ -159,6 +154,7 @@ function createDesignerLocalState() {
       activeTab: "snapshot" as DevModeTab,
     },
     ai: {
+      operations: {} as Record<string, AgentCanvasOperation>,
       panelOpen: true,
       width: PANEL_DIMENSIONS.AI_CHAT_WIDTH,
     },
@@ -176,9 +172,7 @@ export function createDesignerStore(document: PaywallDesignerDocumentInstance) {
   // The provider owns connect() so terminal auth failures surface as an
   // error state — the middleware's autoConnect would swallow the rejection.
   return create(
-    commander.middleware(
-      mimic(document, createDesignerLocalState, { autoConnect: false }),
-    ),
+    commander.middleware(mimic(document, createDesignerLocalState, { autoConnect: false })),
   );
 }
 
@@ -194,7 +188,11 @@ export type PaywallDesignerDispatch = ReturnType<typeof usePaywallDesignerAction
 // Store boundary selectors
 // ============================================================================
 
-export { documentRootFromSnapshot, selectDocumentRoot, selectRenderRoot } from "./utils/document-root";
+export {
+  documentRootFromSnapshot,
+  selectDocumentRoot,
+  selectRenderRoot,
+} from "./utils/document-root";
 
 // ============================================================================
 // React Context
diff --git a/packages/ai-shared/src/models.test.ts b/packages/ai-shared/src/models.test.ts
new file mode 100644
index 000000000..4973e4a7b
--- /dev/null
+++ b/packages/ai-shared/src/models.test.ts
@@ -0,0 +1,43 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { DEFAULT_AI_MODEL, messagesContainImage, modelForTurn, VISION_AI_MODEL } from "./models.ts";
+
+describe("modelForTurn", () => {
+  it("keeps text-only designer turns on the code model", () => {
+    const messages = [{ role: "user", parts: [{ type: "text", text: "Improve this" }] }];
+    expect(messagesContainImage(messages)).toBe(false);
+    expect(modelForTurn("designer", messages)).toBe(DEFAULT_AI_MODEL);
+  });
+
+  it("selects the vision model for a user image attachment", () => {
+    const messages = [
+      {
+        role: "user",
+        parts: [{ type: "file", mediaType: "image/png", url: "data:image/png;base64,cG5n" }],
+      },
+    ];
+    expect(messagesContainImage(messages)).toBe(true);
+    expect(modelForTurn("designer", messages)).toBe(VISION_AI_MODEL);
+  });
+
+  it("selects the vision model for a screenshot nested in a tool result", () => {
+    const messages = [
+      {
+        role: "assistant",
+        parts: [
+          {
+            type: "tool-get_preview_screenshot",
+            state: "output-available",
+            output: {
+              kind: "preview-screenshot",
+              mediaType: "image/png",
+              dataBase64: "cG5n",
+            },
+          },
+        ],
+      },
+    ];
+    expect(messagesContainImage(messages)).toBe(true);
+    expect(modelForTurn("designer", messages)).toBe(VISION_AI_MODEL);
+  });
+});
diff --git a/packages/ai-shared/src/models.ts b/packages/ai-shared/src/models.ts
index 6df24be4e..ebbcfe636 100644
--- a/packages/ai-shared/src/models.ts
+++ b/packages/ai-shared/src/models.ts
@@ -16,29 +16,41 @@ export const AI_MODEL_BY_SURFACE: Record<Surface, string> = {
   designer: DEFAULT_AI_MODEL,
 };
 
+/** Whether an arbitrary UI-message value contains an image attachment/tool result. */
+function containsImage(value: unknown, seen: Set<object>): boolean {
+  if (value === null || typeof value !== "object") {
+    return false;
+  }
+  if (seen.has(value)) {
+    return false;
+  }
+  seen.add(value);
+
+  if (!Array.isArray(value)) {
+    const candidate = value as { kind?: unknown; mediaType?: unknown; type?: unknown };
+    const isImageFile =
+      candidate.type === "file" &&
+      typeof candidate.mediaType === "string" &&
+      candidate.mediaType.startsWith("image/");
+    const isPreviewScreenshot =
+      candidate.kind === "preview-screenshot" && candidate.mediaType === "image/png";
+    if (isImageFile || isPreviewScreenshot) {
+      return true;
+    }
+  }
+
+  return Object.values(value).some((child) => containsImage(child, seen));
+}
+
 /**
- * Whether any message in the conversation carries an image attachment, i.e. an
- * AI SDK `file` part with an `image/*` media type. Operates on the raw JSON
- * shape (not the AI SDK types) so it can run before `validateUIMessages` and
- * without pulling the SDK into this shared package.
+ * Whether the conversation contains an image supplied by the user OR returned
+ * by a visual-review tool. The recursive walk is intentional: client tool
+ * outputs live inside an assistant tool part's `output`, not as top-level file
+ * parts. Detecting both keeps screenshot-driven continuations on the vision
+ * model while text-only turns continue using the code model.
  */
 export const messagesContainImage = (messages: ReadonlyArray<unknown>): boolean =>
-  messages.some((message) => {
-    if (message === null || typeof message !== "object") {
-      return false;
-    }
-    const parts = (message as { parts?: unknown }).parts;
-    if (!Array.isArray(parts)) {
-      return false;
-    }
-    return parts.some((part) => {
-      if (part === null || typeof part !== "object") {
-        return false;
-      }
-      const { type, mediaType } = part as { type?: unknown; mediaType?: unknown };
-      return type === "file" && typeof mediaType === "string" && mediaType.startsWith("image/");
-    });
-  });
+  containsImage(messages, new Set());
 
 /**
  * Picks the model for a chat turn: the vision model when the conversation
diff --git a/packages/ai-shared/src/surfaces.test.ts b/packages/ai-shared/src/surfaces.test.ts
new file mode 100644
index 000000000..09300e6ba
--- /dev/null
+++ b/packages/ai-shared/src/surfaces.test.ts
@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { previewScreenshotToolResultSchema } from "./surfaces.ts";
+
+describe("previewScreenshotToolResultSchema", () => {
+  it("accepts a successful multimodal screenshot payload", () => {
+    expect(
+      previewScreenshotToolResultSchema.safeParse({
+        kind: "preview-screenshot",
+        mediaType: "image/png",
+        dataBase64: "cG5n",
+        width: 375,
+        height: 812,
+        scale: 1,
+        documentSignature: "doc-12345678",
+        message: "Review this render.",
+      }).success,
+    ).toBe(true);
+  });
+
+  it("accepts a recoverable capture error for the next continuation", () => {
+    expect(
+      previewScreenshotToolResultSchema.safeParse("Could not capture the live preview.").success,
+    ).toBe(true);
+  });
+});
diff --git a/packages/ai-shared/src/surfaces.ts b/packages/ai-shared/src/surfaces.ts
index 8c5d0158b..d41a52e77 100644
--- a/packages/ai-shared/src/surfaces.ts
+++ b/packages/ai-shared/src/surfaces.ts
@@ -53,10 +53,7 @@ export const nodeInputSchema: z.ZodType<NodeInput> = z.lazy(() =>
         .describe(
           "Style fields as a flat `{ field: value }` object (e.g. `{ backgroundColor: 'rgba(0,0,0,1)', paddingTop: 16 }`). Allowed fields and value types depend on the node type and are validated on apply — an invalid field/value returns an error naming the allowed fields/values. Setting any background/border/shadow (or path fill/stroke) style field automatically sets the group's `*Enabled` flag to true; set it to `false` explicitly to hide the group non-destructively.",
         ),
-      children: z
-        .array(nodeInputSchema)
-        .optional()
-        .describe("Nested child nodes, in order."),
+      children: z.array(nodeInputSchema).optional().describe("Nested child nodes, in order."),
     })
     .passthrough(),
 );
@@ -104,7 +101,9 @@ export const documentEditSchema = z.discriminatedUnion("op", [
       nodeId: z.string().describe("Id of the node to move."),
       parentId: z
         .string()
-        .describe("Id of the new parent. Must legally contain the moved node type; may not be the node itself or a descendant (no cycles)."),
+        .describe(
+          "Id of the new parent. Must legally contain the moved node type; may not be the node itself or a descendant (no cycles).",
+        ),
       index: z
         .number()
         .int()
@@ -169,6 +168,27 @@ export const designerToolSchemas = {
         "Optional max depth from the root. Nodes past the limit render as stubs `{ id, type, name?, childCount }` you can expand with a follow-up get_document(nodeId).",
       ),
   }),
+  get_rendered_layout: z.object({
+    nodeIds: z
+      .array(z.string())
+      .max(100)
+      .optional()
+      .describe(
+        "Optional document node ids to inspect. Omit to inspect every rendered node in the open paywall (capped at 100). Returns actual browser geometry, resolved typography/overflow styles, and clipping signals.",
+      ),
+  }),
+  get_preview_screenshot: z.object({
+    nodeId: z
+      .string()
+      .optional()
+      .describe(
+        "Optional document node id to capture. Defaults to the paywall screen. Capture a subtree only when you need a closer review.",
+      ),
+    scale: z
+      .union([z.literal(1), z.literal(2)])
+      .optional()
+      .describe("Raster scale. Use 1 for layout review and 2 only for small text or fine details."),
+  }),
   get_components: z.object({}),
   read_component: z.object({
     path: z
@@ -193,6 +213,21 @@ export const designerToolSchemas = {
         "Ordered batch of document edits, applied ATOMICALLY (all-or-nothing). Returns minted ids for inserts, or per-edit structured errors naming the offending node/field/value.",
       ),
   }),
+  duplicate_subtree: z.object({
+    nodeId: z.string().describe("Id of the existing visual node subtree to duplicate."),
+    parentId: z
+      .string()
+      .describe("Id of the destination parent. It must legally contain the duplicated node type."),
+    index: z
+      .number()
+      .int()
+      .optional()
+      .describe("Optional 0-based destination index. Omit to append."),
+    name: z
+      .string()
+      .optional()
+      .describe("Optional display name override for the duplicated subtree root."),
+  }),
   write_component: z.object({
     path: z
       .string()
@@ -205,11 +240,33 @@ export const designerToolSchemas = {
     fromPath: z.string().describe("Existing component path (`components/<name>.tsx`)."),
     toPath: z
       .string()
-      .describe("New component path. Instances referencing the old path are re-pointed automatically."),
+      .describe(
+        "New component path. Instances referencing the old path are re-pointed automatically.",
+      ),
   }),
   delete_component: z.object({
     path: z.string().describe("Component path to delete (`components/<name>.tsx`)."),
   }),
+  finish_design: z.object({
+    reviewedDocumentSignature: z
+      .string()
+      .describe(
+        "The exact document signature returned by the final get_preview_screenshot call. Completion is rejected if the document changed after that review.",
+      ),
+    verdict: z
+      .string()
+      .min(1)
+      .max(1000)
+      .describe(
+        "Concise visual QA verdict covering hierarchy, spacing, typography/contrast, alignment, clipping/safe areas, and purchase affordances.",
+      ),
+    unresolvedIssues: z
+      .array(z.string())
+      .max(20)
+      .describe(
+        "Issues still visible in the reviewed screenshot. This must be empty to finish; otherwise correct them and review again.",
+      ),
+  }),
 } as const;
 
 export type DesignerToolName = keyof typeof designerToolSchemas;
@@ -224,20 +281,64 @@ export type DesignerToolName = keyof typeof designerToolSchemas;
 export const designerToolDescriptions: Record<DesignerToolName, string> = {
   get_document:
     "Return the open paywall's document as cleaned JSON: a nested tree of `{ id, type, name?, ...data, children }` nodes with schema-default fields stripped. Every node has a stable `id` you address in edit_document. Pass `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes come back as stubs you can expand). `codeComponent` definitions come back with their `path` and a `sourceLength` only — the TSX source is NOT inlined; read it with read_component. Call this before editing to learn the current structure and ids.",
+  get_rendered_layout:
+    "Inspect the ACTUAL browser-rendered layout of document nodes, not just their declared style data. Returns geometry relative to the screen, resolved overflow/typography styles, scroll dimensions, and clipping signals. Call this when spacing, alignment, overflow, safe-area fit, or above-the-fold placement needs exact measurements. Omit nodeIds to inspect the rendered paywall, or pass a focused set after a screenshot identifies a problem.",
+  get_preview_screenshot:
+    "Capture the current live paywall canvas as a PNG and return it as multimodal tool content for visual review. Defaults to the screen at 1x. Call after every meaningful visual section and ALWAYS after the final edit. Evaluate hierarchy, CTA dominance, spacing, typography, contrast, alignment, clipping, safe areas, product-option states, and close/restore/legal affordances; make targeted corrections before finishing. The result includes a document signature required by finish_design.",
   get_components:
-    "List every component available to place: CATALOG components (deployed, shared), LOCAL code components (defined in this paywall), AND first-party BUILTINS that ship with the renderer. Each entry carries its path/slug, description, props schema, action list, and preview states — everything you need to insert a `component` node and bind its props/actions correctly. Insert a catalog component with its `componentSlug`; a local one with `componentPath` + `componentSource: \"local\"`; a builtin with `componentSource: \"builtin\"` + its `componentSlug` (builtins are UNPINNED — no version/hash).",
+    'List every component available to place: CATALOG components (deployed, shared), LOCAL code components (defined in this paywall), AND first-party BUILTINS that ship with the renderer. Each entry carries its path/slug, description, props schema, action list, and preview states — everything you need to insert a `component` node and bind its props/actions correctly. Insert a catalog component with its `componentSlug`; a local one with `componentPath` + `componentSource: "local"`; a builtin with `componentSource: "builtin"` + its `componentSlug` (builtins are UNPINNED — no version/hash).',
   read_component:
     "Read a LOCAL code component's TSX source by its `components/<name>.tsx` path, reflecting your in-progress edits. Use get_components first to discover paths; use read_paywall to read a DIFFERENT paywall.",
   read_paywall:
     "Read ANOTHER paywall's document JSON by slug for reference (e.g. to match its design). Read-only — you can only EDIT the currently open paywall.",
   edit_document:
     "Apply an ATOMIC batch of edits to the open paywall document (all-or-nothing). Ops: `insert` (add a subtree under a parent at an index — ids are engine-minted and RETURNED so you can address the new nodes next), `update` (partial data change; `set.style` merges per style field, other objects merge per-field, arrays/scalars replace wholesale), `move` (reparent; cycles and illegal containment are rejected), `remove` (delete a subtree), `replaceChildren` (swap a node's whole child list). Address nodes by the ids from get_document or the current selection. Invalid fields/values are rejected with per-edit errors naming the offending node, the allowed fields (with a did-you-mean), and the allowed values — read them and correct your edit.",
+  duplicate_subtree:
+    "Deep-clone an existing visual document subtree under a destination parent. The clone preserves node data, styles, interactions, and descendants while the engine mints fresh node ids, which are returned for follow-up edits. Prefer this for repeated product rows, benefits, cards, and controls so spacing and structure remain consistent. Engine-managed root/library/codeComponent nodes cannot be duplicated.",
   write_component:
     "Create-or-replace a LOCAL code component at `components/<name>.tsx` (its path is its identity). On success the component is compiled and committed and becomes placeable via a `component` node; on failure you get compile diagnostics. Use for anything that is genuinely code (custom logic/layout), not for plain composition — compose visual structure with edit_document.",
   rename_component:
     "Rename a local component from one `components/<name>.tsx` path to another. Instances referencing the old path are re-pointed automatically (rename cascade).",
   delete_component:
     "Delete a local component by path. Existing instances of it degrade to placeholders (they are not cascade-deleted), so replace or remove them afterward.",
+  finish_design:
+    "Complete the visual editing task only after a final get_preview_screenshot. Pass its exact document signature, a concise visual QA verdict, and an empty unresolvedIssues list. The call is rejected if the document changed after the screenshot or if issues remain, forcing another correction-and-review cycle instead of ending on an unverified tree.",
+};
+
+/** Multimodal output produced by `get_preview_screenshot`. */
+export const previewScreenshotToolOutputSchema = z.object({
+  kind: z.literal("preview-screenshot"),
+  mediaType: z.literal("image/png"),
+  dataBase64: z.string(),
+  width: z.number().int().positive(),
+  height: z.number().int().positive(),
+  scale: z.union([z.literal(1), z.literal(2)]),
+  documentSignature: z.string(),
+  message: z.string(),
+});
+
+export type PreviewScreenshotToolOutput = z.infer<typeof previewScreenshotToolOutputSchema>;
+
+/** Successful screenshot payload or the executor's recoverable text error. */
+export const previewScreenshotToolResultSchema = z.union([
+  previewScreenshotToolOutputSchema,
+  z.string(),
+]);
+
+/** Model/client output schema for every designer tool. */
+export const designerToolOutputSchemas: Record<DesignerToolName, z.ZodTypeAny> = {
+  get_document: z.string(),
+  get_rendered_layout: z.string(),
+  get_preview_screenshot: previewScreenshotToolResultSchema,
+  get_components: z.string(),
+  read_component: z.string(),
+  read_paywall: z.string(),
+  edit_document: z.string(),
+  duplicate_subtree: z.string(),
+  write_component: z.string(),
+  rename_component: z.string(),
+  delete_component: z.string(),
+  finish_design: z.string(),
 };
 
 /** Tool input schemas for a surface. */
@@ -282,10 +383,7 @@ export type DocumentEditErrorResult = z.infer<typeof documentEditErrorSchema>;
  * list of ids minted for the nodes that op created (parents before children,
  * pre-order), so the model can address freshly-inserted nodes in a follow-up.
  */
-export const mintedIdsSchema = z.record(
-  z.string(),
-  z.array(z.string()),
-);
+export const mintedIdsSchema = z.record(z.string(), z.array(z.string()));
 
 export type MintedIds = z.infer<typeof mintedIdsSchema>;
 

From 75b7a8a9406ede6ab4454b2c358011efe934586d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 15:12:28 +0200
Subject: [PATCH 088/129] feat: add designer working indicator

---
 .../studio/ai/components/chat-shell.tsx       |  14 +
 .../paywalls/designer/ai-panel/ai-panel.tsx   |  10 +-
 .../paywalls/designer/canvas/canvas.tsx       |   3 +
 .../working-indicator-animation.test.ts       | 109 ++++
 .../overlay/working-indicator-animation.ts    | 491 ++++++++++++++++++
 .../overlay/working-indicator-overlay.tsx     | 152 ++++++
 .../state/actions/ai-panel-actions.ts         |  14 +
 .../paywalls/designer/state/actions/index.ts  |   1 +
 .../designer/state/designer-store-state.tsx   |   2 +
 .../designer/state/designer-store.tsx         |   1 +
 10 files changed, 796 insertions(+), 1 deletion(-)
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx

diff --git a/apps/www/src/features/studio/ai/components/chat-shell.tsx b/apps/www/src/features/studio/ai/components/chat-shell.tsx
index e0c606fb7..775a55fc0 100644
--- a/apps/www/src/features/studio/ai/components/chat-shell.tsx
+++ b/apps/www/src/features/studio/ai/components/chat-shell.tsx
@@ -51,6 +51,8 @@ interface ChatShellProps {
   emptyState?: ReactNode;
   /** Called right before each user message is sent (e.g. to open a checkpoint window). */
   onBeforeSend?: () => void;
+  /** Reports whether the assistant is submitting or streaming. */
+  onBusyChange?: (isBusy: boolean) => void;
   className?: string;
 }
 
@@ -163,6 +165,7 @@ export function ChatShell({
   initialMessages,
   emptyState,
   onBeforeSend,
+  onBusyChange,
   className,
 }: ChatShellProps) {
   const { messages, sendMessage, status, stop } = useSurfaceChat(agent, {
@@ -302,6 +305,17 @@ export function ChatShell({
   };
 
   const isBusy = status === "submitted" || status === "streaming";
+  useEffect(() => {
+    onBusyChange?.(isBusy);
+  }, [isBusy, onBusyChange]);
+
+  useEffect(
+    () => () => {
+      onBusyChange?.(false);
+    },
+    [onBusyChange],
+  );
+
   const lastMessage = messages[messages.length - 1];
   const showThinking =
     isBusy &&
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
index 78c9784b2..9e7af359c 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
@@ -11,7 +11,7 @@ import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeature
 
 import { Panel } from "../components/ui/panel";
 import { PANEL_DIMENSIONS } from "../panels/constants";
-import { setAiPanelWidth } from "../state/actions/ai-panel-actions";
+import { setAiPanelWidth, setAiWorking } from "../state/actions/ai-panel-actions";
 import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
 import { useDesignerAgent } from "./use-designer-agent";
 
@@ -73,6 +73,13 @@ export function AiPanel() {
     event.currentTarget.releasePointerCapture(event.pointerId);
   }, []);
 
+  const handleBusyChange = useCallback(
+    (isWorking: boolean) => {
+      dispatch(setAiWorking)({ isWorking });
+    },
+    [dispatch],
+  );
+
   if (!enabled) {
     return null;
   }
@@ -118,6 +125,7 @@ export function AiPanel() {
           agent={agent}
           chatId={session.chatId}
           initialMessages={session.initialMessages}
+          onBusyChange={handleBusyChange}
           className="min-h-0 flex-1"
         />
       </Panel>
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
index b0a317ccd..5f9bdf986 100644
--- a/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/canvas.tsx
@@ -20,6 +20,7 @@ import { NodeTreeRenderer } from "./node-tree-renderer";
 import { AgentWorkingOverlay } from "./overlay/agent-working-overlay";
 import { GradientOverlay } from "./overlay/gradient-overlay";
 import { SelectionOverlay } from "./overlay/selection-overlay";
+import { WorkingIndicatorOverlay } from "./overlay/working-indicator-overlay";
 import { useViewport, Viewport, type ViewportTransform } from "./viewport";
 
 // Minimum distance in pixels to consider it a drag vs click
@@ -235,6 +236,8 @@ export function Canvas() {
         </BoundingBoxManagerProvider>
       </Viewport>
 
+      <WorkingIndicatorOverlay containerRef={containerRef} />
+
       {/* Pixi overlay for selection visualization */}
       <SelectionOverlay containerRef={containerRef} />
 
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.test.ts b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.test.ts
new file mode 100644
index 000000000..a1ef872ae
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.test.ts
@@ -0,0 +1,109 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  advanceWorkingIndicator,
+  createWorkingIndicatorAnimation,
+  forEachWorkingIndicatorDot,
+  getWorkingIndicatorDotRadius,
+  setWorkingIndicatorActive,
+  syncWorkingIndicatorScreens,
+  updateWorkingIndicatorViewport,
+  type WorkingIndicatorAnimation,
+} from "./working-indicator-animation";
+
+const SCREEN = {
+  height: 844,
+  id: "screen-1",
+  width: 390,
+  x: 0,
+  y: 0,
+};
+
+const advanceTo = (animation: WorkingIndicatorAnimation, from: number, to: number) => {
+  for (let now = from; now <= to; now += 16) {
+    advanceWorkingIndicator(animation, now, 16);
+  }
+};
+
+const readDots = (animation: WorkingIndicatorAnimation) => {
+  const dots: Array<{
+    alpha: number;
+    depth: number;
+    displacement: number;
+    proximity: number;
+    radius: number;
+    sizeScale: number;
+    x: number;
+    y: number;
+  }> = [];
+  forEachWorkingIndicatorDot(animation, (dot, viewport) => {
+    const homeX = dot.hx * viewport.scale + viewport.x;
+    const homeY = dot.hy * viewport.scale + viewport.y;
+    dots.push({
+      alpha: dot.alpha,
+      depth: dot.depth,
+      displacement: Math.hypot(dot.x - homeX, dot.y - homeY),
+      proximity: dot.proximity,
+      radius: getWorkingIndicatorDotRadius(dot, viewport.scale),
+      sizeScale: dot.sizeScale,
+      x: dot.x,
+      y: dot.y,
+    });
+  });
+  return dots;
+};
+
+describe("working indicator animation", () => {
+  it("uses three rows that grow toward the screen", () => {
+    const animation = createWorkingIndicatorAnimation();
+    syncWorkingIndicatorScreens(animation, [SCREEN]);
+
+    const scalesByDepth = new Map(readDots(animation).map((dot) => [dot.depth, dot.sizeScale]));
+    expect([...scalesByDepth.keys()].sort()).toEqual([1, 2, 3]);
+    expect(scalesByDepth.get(1)).toBeCloseTo(1);
+    expect(scalesByDepth.get(2)).toBeCloseTo(2 / 3);
+    expect(scalesByDepth.get(3)).toBeCloseTo(1 / 3);
+  });
+
+  it("runs the magnetic wave while dots are entering and exiting", () => {
+    const animation = createWorkingIndicatorAnimation();
+    syncWorkingIndicatorScreens(animation, [SCREEN]);
+    setWorkingIndicatorActive(animation, true, 0);
+
+    advanceTo(animation, 0, 400);
+    const enteringDots = readDots(animation);
+    expect(animation.phase).toBe("starting");
+    expect(enteringDots.some((dot) => dot.alpha > 0)).toBe(true);
+    expect(enteringDots.some((dot) => dot.alpha > 0 && dot.proximity > 0)).toBe(true);
+
+    advanceTo(animation, 416, 2200);
+    expect(animation.phase).toBe("looping");
+    setWorkingIndicatorActive(animation, false, 2200);
+    advanceTo(animation, 2216, 2600);
+
+    const exitingDots = readDots(animation);
+    expect(animation.phase).toBe("ending");
+    expect(exitingDots.some((dot) => dot.alpha > 0 && dot.alpha < 1)).toBe(true);
+    expect(exitingDots.some((dot) => dot.alpha > 0 && dot.proximity > 0)).toBe(true);
+
+    advanceTo(animation, 2616, 4200);
+    expect(animation.phase).toBe("idle");
+    expect(readDots(animation).every((dot) => dot.alpha === 0)).toBe(true);
+  });
+
+  it("keeps in-flight dots aligned with viewport pan and zoom", () => {
+    const animation = createWorkingIndicatorAnimation();
+    syncWorkingIndicatorScreens(animation, [SCREEN]);
+    setWorkingIndicatorActive(animation, true, 0);
+    advanceTo(animation, 0, 400);
+    const before = readDots(animation)[0];
+    expect(before).toBeDefined();
+
+    updateWorkingIndicatorViewport(animation, { scale: 2, x: 50, y: 30 });
+    const after = readDots(animation)[0];
+    expect(after).toBeDefined();
+    expect(after?.x).toBeCloseTo((before?.x ?? 0) * 2 + 50);
+    expect(after?.y).toBeCloseTo((before?.y ?? 0) * 2 + 30);
+    expect(after?.radius).toBeCloseTo((before?.radius ?? 0) * 2);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.ts b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.ts
new file mode 100644
index 000000000..5a2fb0e82
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation.ts
@@ -0,0 +1,491 @@
+export type WorkingIndicatorPhase = "idle" | "starting" | "looping" | "ending";
+
+export interface WorkingIndicatorScreen {
+  id: string;
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+export interface WorkingIndicatorViewport {
+  scale: number;
+  x: number;
+  y: number;
+}
+
+interface AxisPoint {
+  depth: number;
+  value: number;
+}
+
+export interface WorkingIndicatorDot {
+  alpha: number;
+  delay: number;
+  depth: number;
+  hx: number;
+  hy: number;
+  proximity: number;
+  sizeScale: number;
+  sx: number;
+  sy: number;
+  vx: number;
+  vy: number;
+  x: number;
+  y: number;
+}
+
+interface WorkingIndicatorGrid {
+  diagonalMaximum: number;
+  diagonalMinimum: number;
+  dots: WorkingIndicatorDot[];
+  id: string;
+  maximumDelay: number;
+  signature: string;
+  spacing: number;
+}
+
+export interface WorkingIndicatorAnimation {
+  active: boolean;
+  grids: WorkingIndicatorGrid[];
+  loopStartedAt: number | null;
+  maximumDelay: number;
+  phase: WorkingIndicatorPhase;
+  phaseStartedAt: number;
+  viewport: WorkingIndicatorViewport;
+}
+
+export const WORKING_INDICATOR_DOT_SIZE = 3;
+
+const ROWS = 3;
+const DOT_COUNT = 41;
+const NEAR_PULL = 0.3;
+const ENTRY_DIAGONAL_STAGGER = 760;
+const ENTRY_DEPTH_STAGGER = 180;
+const ENTRY_FADE_DURATION = 360;
+const ENTRY_SETTLE_DURATION = 900;
+const EXIT_FADE_DURATION = 320;
+const EXIT_SETTLE_DURATION = 720;
+const LOOP_DURATION = 4200;
+const LOOP_START_DELAY = 220;
+const NORMAL_X = Math.SQRT1_2;
+const NORMAL_Y = -Math.SQRT1_2;
+
+/** Returns a dot's rendered radius at the current designer zoom. */
+export function getWorkingIndicatorDotRadius(
+  dot: WorkingIndicatorDot,
+  viewportScale: number,
+): number {
+  return (
+    (WORKING_INDICATOR_DOT_SIZE / 2) *
+    dot.sizeScale *
+    Math.max(0, viewportScale) *
+    (1 + dot.proximity * 0.18)
+  );
+}
+
+const clamp = (value: number, minimum: number, maximum: number) =>
+  Math.min(Math.max(value, minimum), maximum);
+
+const smoothstep = (value: number) => {
+  const progress = clamp(value, 0, 1);
+  return progress * progress * (3 - 2 * progress);
+};
+
+const toScreenX = (value: number, viewport: WorkingIndicatorViewport) =>
+  value * viewport.scale + viewport.x;
+
+const toScreenY = (value: number, viewport: WorkingIndicatorViewport) =>
+  value * viewport.scale + viewport.y;
+
+const buildInnerAxis = (start: number, end: number, count: number): AxisPoint[] => {
+  const pointCount = Math.max(2, Math.round(count));
+  const step = (end - start) / (pointCount - 1);
+  return Array.from({ length: pointCount }, (_, index) => ({
+    depth: 0,
+    value: start + step * index,
+  }));
+};
+
+const buildAxis = (
+  start: number,
+  end: number,
+  innerCount: number,
+  spacing: number,
+): AxisPoint[] => [
+  ...Array.from({ length: ROWS }, (_, index) => ({
+    depth: ROWS - index,
+    value: start - spacing * (ROWS - index),
+  })),
+  ...buildInnerAxis(start, end, innerCount),
+  ...Array.from({ length: ROWS }, (_, index) => ({
+    depth: index + 1,
+    value: end + spacing * (index + 1),
+  })),
+];
+
+const getStartPosition = (
+  hx: number,
+  hy: number,
+  screen: WorkingIndicatorScreen,
+  spacing: number,
+) => {
+  const right = screen.x + screen.width;
+  const bottom = screen.y + screen.height;
+  const horizontalDistance = hx < screen.x ? screen.x - hx : hx - right;
+  const verticalDistance = hy < screen.y ? screen.y - hy : hy - bottom;
+  const diagonalOffset = Math.min(
+    Math.max(horizontalDistance, verticalDistance) * 0.45,
+    spacing * 1.25,
+  );
+
+  if (horizontalDistance > 0 && (verticalDistance <= 0 || horizontalDistance <= verticalDistance)) {
+    return {
+      x: hx < screen.x ? screen.x : right,
+      y: hy + diagonalOffset,
+    };
+  }
+
+  return {
+    x: hx - diagonalOffset,
+    y: hy < screen.y ? screen.y : bottom,
+  };
+};
+
+const buildGrid = (
+  screen: WorkingIndicatorScreen,
+  phase: WorkingIndicatorPhase,
+  viewport: WorkingIndicatorViewport,
+): WorkingIndicatorGrid => {
+  const right = screen.x + screen.width;
+  const bottom = screen.y + screen.height;
+  const spacing = screen.width / Math.max(1, DOT_COUNT - 1);
+  const verticalCount = Math.max(2, Math.round(screen.height / spacing)) + 1;
+  const xAxis = buildAxis(screen.x, right, DOT_COUNT, spacing);
+  const yAxis = buildAxis(screen.y, bottom, verticalCount, spacing);
+  const dots: WorkingIndicatorDot[] = [];
+
+  for (const xPoint of xAxis) {
+    for (const yPoint of yAxis) {
+      if (xPoint.depth === 0 && yPoint.depth === 0) {
+        continue;
+      }
+
+      const start = getStartPosition(xPoint.value, yPoint.value, screen, spacing);
+      const atStart = phase === "starting";
+      const depth = Math.max(xPoint.depth, yPoint.depth);
+      dots.push({
+        alpha: phase === "idle" || atStart ? 0 : 1,
+        delay: 0,
+        depth,
+        hx: xPoint.value,
+        hy: yPoint.value,
+        proximity: 0,
+        sizeScale: (ROWS - depth + 1) / ROWS,
+        sx: start.x,
+        sy: start.y,
+        vx: 0,
+        vy: 0,
+        x: toScreenX(atStart ? start.x : xPoint.value, viewport),
+        y: toScreenY(atStart ? start.y : yPoint.value, viewport),
+      });
+    }
+  }
+
+  const diagonalMinimum = Math.min(...dots.map((dot) => dot.hx - dot.hy));
+  const diagonalMaximum = Math.max(...dots.map((dot) => dot.hx - dot.hy));
+  const diagonalRange = Math.max(1, diagonalMaximum - diagonalMinimum);
+
+  for (const dot of dots) {
+    const diagonalProgress = (dot.hx - dot.hy - diagonalMinimum) / diagonalRange;
+    const distanceFromEdge = Math.hypot(dot.hx - dot.sx, dot.hy - dot.sy);
+    const depthProgress = clamp(distanceFromEdge / (spacing * ROWS), 0, 1);
+    dot.delay = diagonalProgress * ENTRY_DIAGONAL_STAGGER + depthProgress * ENTRY_DEPTH_STAGGER;
+  }
+
+  return {
+    diagonalMaximum,
+    diagonalMinimum,
+    dots,
+    id: screen.id,
+    maximumDelay: Math.max(...dots.map((dot) => dot.delay)),
+    signature: `${screen.x}:${screen.y}:${screen.width}:${screen.height}`,
+    spacing,
+  };
+};
+
+const setPhase = (
+  animation: WorkingIndicatorAnimation,
+  phase: WorkingIndicatorPhase,
+  now: number,
+) => {
+  if (animation.phase === phase) {
+    return;
+  }
+
+  animation.phase = phase;
+  animation.phaseStartedAt = now;
+
+  if (phase === "starting") {
+    animation.loopStartedAt = now + LOOP_START_DELAY;
+    for (const grid of animation.grids) {
+      for (const dot of grid.dots) {
+        dot.alpha = 0;
+        dot.proximity = 0;
+        dot.vx = 0;
+        dot.vy = 0;
+        dot.x = toScreenX(dot.sx, animation.viewport);
+        dot.y = toScreenY(dot.sy, animation.viewport);
+      }
+    }
+  }
+
+  if (phase === "idle") {
+    animation.loopStartedAt = null;
+    for (const grid of animation.grids) {
+      for (const dot of grid.dots) {
+        dot.alpha = 0;
+        dot.proximity = 0;
+      }
+    }
+  }
+};
+
+const springTo = (
+  dot: WorkingIndicatorDot,
+  targetX: number,
+  targetY: number,
+  frameScale: number,
+) => {
+  dot.vx += (targetX - dot.x) * 0.11 * frameScale;
+  dot.vy += (targetY - dot.y) * 0.11 * frameScale;
+  const damping = 0.74 ** frameScale;
+  dot.vx *= damping;
+  dot.vy *= damping;
+  dot.x += dot.vx * frameScale;
+  dot.y += dot.vy * frameScale;
+};
+
+const springToMagneticTarget = (
+  animation: WorkingIndicatorAnimation,
+  dot: WorkingIndicatorDot,
+  baseX: number,
+  baseY: number,
+  linePosition: number | null,
+  attractionRadius: number,
+  physicsSpacing: number,
+  frameScale: number,
+) => {
+  const targetX = toScreenX(baseX, animation.viewport);
+  const targetY = toScreenY(baseY, animation.viewport);
+  if (linePosition === null) {
+    dot.proximity = 0;
+    springTo(dot, targetX, targetY, frameScale);
+    return;
+  }
+
+  const homeX = toScreenX(dot.hx, animation.viewport);
+  const homeY = toScreenY(dot.hy, animation.viewport);
+  const signedDistance = (homeX - homeY - linePosition) * Math.SQRT1_2;
+  const distance = Math.abs(signedDistance);
+  const proximity = smoothstep(1 - distance / attractionRadius);
+  const depthProgress = (dot.depth - 1) / (ROWS - 1);
+  const pullIntensity = NEAR_PULL + (1 - NEAR_PULL) * depthProgress;
+  const pull =
+    Math.sign(signedDistance) *
+    Math.min(distance * 0.66, physicsSpacing * 1.35) *
+    proximity *
+    pullIntensity;
+
+  dot.proximity = proximity;
+  springTo(dot, targetX - NORMAL_X * pull, targetY - NORMAL_Y * pull, frameScale);
+};
+
+/** Creates an idle working-indicator animation state. */
+export function createWorkingIndicatorAnimation(
+  viewport: WorkingIndicatorViewport = { scale: 1, x: 0, y: 0 },
+): WorkingIndicatorAnimation {
+  return {
+    active: false,
+    grids: [],
+    loopStartedAt: null,
+    maximumDelay: 0,
+    phase: "idle",
+    phaseStartedAt: 0,
+    viewport,
+  };
+}
+
+/** Reprojects in-flight dot positions when the designer viewport pans or zooms. */
+export function updateWorkingIndicatorViewport(
+  animation: WorkingIndicatorAnimation,
+  viewport: WorkingIndicatorViewport,
+): void {
+  const previous = animation.viewport;
+  if (previous.scale === viewport.scale && previous.x === viewport.x && previous.y === viewport.y) {
+    return;
+  }
+
+  const scaleRatio = viewport.scale / previous.scale;
+  for (const grid of animation.grids) {
+    for (const dot of grid.dots) {
+      const worldX = (dot.x - previous.x) / previous.scale;
+      const worldY = (dot.y - previous.y) / previous.scale;
+      dot.x = worldX * viewport.scale + viewport.x;
+      dot.y = worldY * viewport.scale + viewport.y;
+      dot.vx *= scaleRatio;
+      dot.vy *= scaleRatio;
+    }
+  }
+  animation.viewport = viewport;
+}
+
+/** Synchronizes one animated perimeter grid for each current designer screen. */
+export function syncWorkingIndicatorScreens(
+  animation: WorkingIndicatorAnimation,
+  screens: WorkingIndicatorScreen[],
+): void {
+  const current = new Map(animation.grids.map((grid) => [grid.id, grid]));
+  animation.grids = screens.flatMap((screen) => {
+    if (
+      !(
+        Number.isFinite(screen.x) &&
+        Number.isFinite(screen.y) &&
+        Number.isFinite(screen.width) &&
+        Number.isFinite(screen.height)
+      ) ||
+      screen.width <= 0 ||
+      screen.height <= 0
+    ) {
+      return [];
+    }
+
+    const signature = `${screen.x}:${screen.y}:${screen.width}:${screen.height}`;
+    const existing = current.get(screen.id);
+    return [
+      existing?.signature === signature
+        ? existing
+        : buildGrid(screen, animation.phase, animation.viewport),
+    ];
+  });
+  animation.maximumDelay = Math.max(0, ...animation.grids.map((grid) => grid.maximumDelay));
+}
+
+/** Starts or ends the indicator without interrupting the magnetic loop. */
+export function setWorkingIndicatorActive(
+  animation: WorkingIndicatorAnimation,
+  active: boolean,
+  now: number,
+): void {
+  animation.active = active;
+  if (active && (animation.phase === "idle" || animation.phase === "ending")) {
+    setPhase(animation, "starting", now);
+  } else if (!active && (animation.phase === "starting" || animation.phase === "looping")) {
+    setPhase(animation, "ending", now);
+  }
+}
+
+/** Advances spring physics, phase transitions, opacity, and magnetic proximity. */
+export function advanceWorkingIndicator(
+  animation: WorkingIndicatorAnimation,
+  now: number,
+  deltaMilliseconds: number,
+): void {
+  if (animation.phase === "idle") {
+    return;
+  }
+
+  const frameScale = Math.min(deltaMilliseconds / (1000 / 60), 2);
+  const loopElapsed = animation.loopStartedAt === null ? -1 : now - animation.loopStartedAt;
+
+  for (const grid of animation.grids) {
+    const physicsSpacing = Math.max(0.1, Math.min(grid.spacing * animation.viewport.scale, 24));
+    const attractionRadius = physicsSpacing * 3.2;
+    const sweepPadding = attractionRadius * Math.SQRT2;
+    const diagonalOffset = animation.viewport.x - animation.viewport.y;
+    const diagonalMinimum = grid.diagonalMinimum * animation.viewport.scale + diagonalOffset;
+    const diagonalMaximum = grid.diagonalMaximum * animation.viewport.scale + diagonalOffset;
+    const sweepProgress = ((loopElapsed % LOOP_DURATION) + LOOP_DURATION) % LOOP_DURATION;
+    const linePosition =
+      loopElapsed < 0
+        ? null
+        : diagonalMinimum -
+          sweepPadding +
+          (sweepProgress / LOOP_DURATION) * (diagonalMaximum - diagonalMinimum + sweepPadding * 2);
+
+    for (const dot of grid.dots) {
+      if (animation.phase === "starting") {
+        const localElapsed = now - animation.phaseStartedAt - dot.delay;
+        if (localElapsed < 0) {
+          continue;
+        }
+        springToMagneticTarget(
+          animation,
+          dot,
+          dot.hx,
+          dot.hy,
+          linePosition,
+          attractionRadius,
+          physicsSpacing,
+          frameScale,
+        );
+        dot.alpha = smoothstep(localElapsed / ENTRY_FADE_DURATION);
+      } else if (animation.phase === "looping") {
+        springToMagneticTarget(
+          animation,
+          dot,
+          dot.hx,
+          dot.hy,
+          linePosition,
+          attractionRadius,
+          physicsSpacing,
+          frameScale,
+        );
+        dot.alpha = 1;
+      } else if (animation.phase === "ending") {
+        const localElapsed = now - animation.phaseStartedAt - dot.delay;
+        const isExiting = localElapsed >= 0;
+        springToMagneticTarget(
+          animation,
+          dot,
+          isExiting ? dot.sx : dot.hx,
+          isExiting ? dot.sy : dot.hy,
+          linePosition,
+          attractionRadius,
+          physicsSpacing,
+          frameScale,
+        );
+        if (isExiting) {
+          dot.alpha = 1 - smoothstep(localElapsed / EXIT_FADE_DURATION);
+        }
+      }
+    }
+  }
+
+  if (
+    animation.phase === "starting" &&
+    now - animation.phaseStartedAt > animation.maximumDelay + ENTRY_SETTLE_DURATION
+  ) {
+    setPhase(animation, "looping", now);
+  } else if (
+    animation.phase === "ending" &&
+    now - animation.phaseStartedAt > animation.maximumDelay + EXIT_SETTLE_DURATION
+  ) {
+    setPhase(animation, "idle", now);
+  }
+}
+
+/** Visits the current screen-space render data without allocating a dot array each frame. */
+export function forEachWorkingIndicatorDot(
+  animation: WorkingIndicatorAnimation,
+  visitor: (
+    dot: Readonly<WorkingIndicatorDot>,
+    viewport: Readonly<WorkingIndicatorViewport>,
+  ) => void,
+): void {
+  for (const grid of animation.grids) {
+    for (const dot of grid.dots) {
+      visitor(dot, animation.viewport);
+    }
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx
new file mode 100644
index 000000000..415e8d687
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx
@@ -0,0 +1,152 @@
+"use client";
+
+import { Application, Graphics, type Ticker } from "pixi.js";
+import { useEffect, useRef } from "react";
+
+import { selectRenderRoot, usePaywallDesignerStore } from "../../state/designer-store";
+import type { DesignerStoreState } from "../../state/designer-store-state";
+import {
+  advanceWorkingIndicator,
+  createWorkingIndicatorAnimation,
+  forEachWorkingIndicatorDot,
+  getWorkingIndicatorDotRadius,
+  setWorkingIndicatorActive,
+  syncWorkingIndicatorScreens,
+  updateWorkingIndicatorViewport,
+  type WorkingIndicatorScreen,
+} from "./working-indicator-animation";
+
+const BLUE_RIBBON_600 = 0x06_73_ff;
+
+const readScreens = (state: DesignerStoreState): WorkingIndicatorScreen[] => {
+  const root = selectRenderRoot(state);
+  return root.children.flatMap((node) => {
+    if (node.type !== "screen") {
+      return [];
+    }
+    const bounds = state.canvas.boundingBoxes[node.id];
+    return bounds ? [{ id: node.id, ...bounds }] : [];
+  });
+};
+
+interface WorkingIndicatorOverlayProps {
+  containerRef: React.RefObject<HTMLDivElement | null>;
+}
+
+/** Renders the designer agent's working animation in a Pixi GPU overlay. */
+export function WorkingIndicatorOverlay({ containerRef }: WorkingIndicatorOverlayProps) {
+  const store = usePaywallDesignerStore();
+  const hostRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    const host = hostRef.current;
+    const resizeTarget = containerRef.current;
+    if (!host) {
+      return;
+    }
+
+    const app = new Application();
+    let initialized = false;
+    let mounted = true;
+    let unsubscribe: (() => void) | null = null;
+    let tick: ((ticker: Ticker) => void) | null = null;
+
+    const initialize = async () => {
+      await app.init({
+        antialias: true,
+        autoDensity: true,
+        backgroundAlpha: 0,
+        resizeTo: resizeTarget ?? undefined,
+        resolution: window.devicePixelRatio || 1,
+      });
+
+      if (!mounted) {
+        app.destroy(true, { children: true });
+        return;
+      }
+
+      initialized = true;
+      app.canvas.style.display = "block";
+      host.append(app.canvas);
+
+      const graphics = new Graphics();
+      graphics.eventMode = "none";
+      app.stage.addChild(graphics);
+      const animation = createWorkingIndicatorAnimation();
+
+      tick = (ticker) => {
+        const state = store.getState() as DesignerStoreState;
+        const viewport = state.canvas;
+        const now = performance.now();
+        updateWorkingIndicatorViewport(animation, {
+          scale: viewport.scale,
+          x: viewport.x,
+          y: viewport.y,
+        });
+        syncWorkingIndicatorScreens(animation, readScreens(state));
+        setWorkingIndicatorActive(animation, state.ai.isWorking, now);
+        advanceWorkingIndicator(animation, now, ticker.deltaMS);
+
+        graphics.clear();
+        forEachWorkingIndicatorDot(animation, (dot, viewport) => {
+          if (dot.alpha <= 0.001) {
+            return;
+          }
+
+          const radius = getWorkingIndicatorDotRadius(dot, viewport.scale);
+          graphics.circle(dot.x, dot.y, radius);
+          graphics.fill({ alpha: dot.alpha * 0.24, color: 0xff_ff_ff });
+          if (dot.proximity > 0.001) {
+            graphics.circle(dot.x, dot.y, radius);
+            graphics.fill({
+              alpha: dot.alpha * dot.proximity * 0.96,
+              color: BLUE_RIBBON_600,
+            });
+          }
+        });
+
+        if (animation.phase === "idle" && !state.ai.isWorking) {
+          app.stop();
+          app.render();
+        }
+      };
+
+      app.ticker.add(tick);
+      unsubscribe = store.subscribe((state, previousState) => {
+        if (state.ai.isWorking !== previousState.ai.isWorking) {
+          app.start();
+        }
+      });
+
+      if (store.getState().ai.isWorking) {
+        app.start();
+      } else {
+        app.stop();
+        app.render();
+      }
+    };
+
+    initialize();
+
+    return () => {
+      mounted = false;
+      unsubscribe?.();
+      if (!initialized) {
+        return;
+      }
+      if (tick) {
+        app.ticker.remove(tick);
+      }
+      app.destroy(true, { children: true });
+    };
+  }, [containerRef, store]);
+
+  return (
+    <div
+      aria-hidden="true"
+      className="pointer-events-none absolute inset-0"
+      ref={hostRef}
+      style={{ zIndex: 9 }}
+    />
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
index c72318e41..100799a6c 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
@@ -65,3 +65,17 @@ export const finishAiCanvasOperation = commander.action<{ id: string }>((ctx, {
   delete operations[id];
   ctx.setState({ ai: { ...state.ai, operations } });
 });
+
+/** Sets whether the designer agent is actively processing a turn. */
+export const setAiWorking = commander.action<{ isWorking: boolean }>((ctx, { isWorking }) => {
+  const state = ctx.getState();
+  if (state.ai.isWorking === isWorking) {
+    return;
+  }
+  ctx.setState({
+    ai: {
+      ...state.ai,
+      isWorking,
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
index 6af889323..00b45e621 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
@@ -96,6 +96,7 @@ export { setShowGrid, toggleShowGrid } from "./debug-actions";
 export {
   finishAiCanvasOperation,
   setAiPanelWidth,
+  setAiWorking,
   startAiCanvasOperation,
   toggleAiPanel,
 } from "./ai-panel-actions";
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
index 4582d2736..558d41dac 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
@@ -292,6 +292,8 @@ export type DesignerStoreState = {
     width: number;
     /** Active model/tool operations, keyed by tool-call id (browser-only). */
     operations: Record<string, AgentCanvasOperation>;
+    /** Whether the designer agent is submitting or streaming a turn. */
+    isWorking: boolean;
   };
   stateOverrideSelection: StateOverrideSelection;
   /**
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
index ed1ab6761..07d21925e 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
@@ -155,6 +155,7 @@ function createDesignerLocalState() {
     },
     ai: {
       operations: {} as Record<string, AgentCanvasOperation>,
+      isWorking: false,
       panelOpen: true,
       width: PANEL_DIMENSIONS.AI_CHAT_WIDTH,
     },

From 45300f8485d4836e975485af453505fdb3bae034 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 15:38:34 +0200
Subject: [PATCH 089/129] chore: add .env files to gitignore

---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitignore b/.gitignore
index 609b886d6..934547fdc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -109,6 +109,8 @@ web_modules/
 .env.test.local
 .env.production.local
 .env.local
+.env.prod
+.env.preview
 
 # parcel-bundler cache (https://parceljs.org/)
 

From 2f1623195ea6dd62c8da67d9e381fc4797930963 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 17:54:00 +0200
Subject: [PATCH 090/129] feat: add visual paywall authoring over MCP

---
 apps/backend/package.json                     |     1 +
 apps/backend/src/BackendApp.ts                |    39 +-
 .../src/ai/skills/paywall-authoring.ts        |     4 +-
 apps/backend/src/ai/tools.test.ts             |   294 +-
 apps/backend/src/ai/workspace-tools.ts        |   481 +-
 apps/backend/src/mcp/dispatch.test.ts         |    58 +-
 apps/backend/src/mcp/protocol.test.ts         |    66 +-
 apps/backend/src/mcp/protocol.ts              |   121 +-
 apps/backend/src/mcp/tool-manifest.test.ts    |    39 +-
 apps/backend/src/mcp/tool-manifest.ts         |   106 +-
 apps/backend/src/routes/mcp.test.ts           |    30 +
 apps/backend/src/routes/mcp.ts                |   167 +-
 .../backend/src/rpc-smoke.integration.test.ts |     9 +-
 apps/backend/src/testing/TestLayers.ts        |     2 +
 apps/cli/src/cli/commands/auth-token.ts       |    37 +
 apps/cli/src/cli/commands/auth.ts             |     3 +-
 apps/cli/tests/auth-token.test.ts             |    15 +
 docs/security/backend-threat-model.md         |     5 +-
 .../security/endpoint-authorization-matrix.md |     2 +-
 .../.claude-plugin/plugin.json                |    12 +
 .../claude-code/voidhash-paywalls/.mcp.json   |     9 +
 .../claude-code/voidhash-paywalls/README.md   |    32 +
 .../bin/voidhash-mcp-headers                  |     8 +
 .../skills/design-paywall/SKILL.md            |    30 +
 packages/core/src/services/index.ts           |     1 +
 .../PaywallThumbnailService.ts                |     1 +
 .../SnapshotImageRenderer.ts                  |     6 +-
 .../paywallWorkspace/ComponentCompiler.ts     |    50 +-
 .../PaywallEditChangeSetService.test.ts       |   162 +
 .../PaywallEditChangeSetService.ts            |   236 +
 .../PaywallWorkspaceService.ts                |    11 +-
 packages/core/src/utils/generate-id.ts        |     1 +
 .../migration.sql                             |    19 +
 .../snapshot.json                             | 15948 ++++++++++++++++
 packages/db/src/schema.ts                     |    42 +
 pnpm-lock.yaml                                |     3 +
 selfhost/entry/src/backend/Backend.ts         |     4 +
 selfhost/entry/src/backend/Thumbnails.ts      |    41 +-
 selfhost/entry/src/compiler/CompilerCore.ts   |    58 +-
 .../entry/src/compiler/CompilerProtocol.ts    |     6 +-
 selfhost/entry/src/main.ts                    |    19 +-
 selfhost/entry/tests/Compiler.test.ts         |    13 +-
 selfhost/entry/tests/Thumbnails.test.ts       |     1 +
 43 files changed, 17976 insertions(+), 216 deletions(-)
 create mode 100644 apps/backend/src/routes/mcp.test.ts
 create mode 100644 apps/cli/src/cli/commands/auth-token.ts
 create mode 100644 apps/cli/tests/auth-token.test.ts
 create mode 100644 integrations/claude-code/voidhash-paywalls/.claude-plugin/plugin.json
 create mode 100644 integrations/claude-code/voidhash-paywalls/.mcp.json
 create mode 100644 integrations/claude-code/voidhash-paywalls/README.md
 create mode 100755 integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers
 create mode 100644 integrations/claude-code/voidhash-paywalls/skills/design-paywall/SKILL.md
 create mode 100644 packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
 create mode 100644 packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/snapshot.json

diff --git a/apps/backend/package.json b/apps/backend/package.json
index ae01601c0..3217d39c3 100644
--- a/apps/backend/package.json
+++ b/apps/backend/package.json
@@ -20,6 +20,7 @@
     "@voidhash/db": "workspace:*",
     "@voidhash/google-play-server-sdk": "workspace:*",
     "@voidhash/mimic-schema": "workspace:*",
+    "@voidhash/paywall-builtins": "workspace:*",
     "@voidhash/paywall-renderer-preact": "workspace:*",
     "@voidhash/paywall-workspace": "workspace:*",
     "@voidhash/rpc": "workspace:*",
diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
index ea95e7f19..6fe1c1933 100644
--- a/apps/backend/src/BackendApp.ts
+++ b/apps/backend/src/BackendApp.ts
@@ -47,6 +47,7 @@ import {
   PaywallArtifactStore,
   PaywallArtifactStoreError,
   PaywallDeployService,
+  PaywallEditChangeSetService,
   PaywallLocationService,
   PaywallReleaseService,
   PaywallService,
@@ -64,6 +65,8 @@ import {
   ProjectService,
   PublicFileStore,
   PublicFileStoreError,
+  SnapshotImageRenderer,
+  SnapshotImageRenderError,
   PushDeliveryDispatch,
   PushNotificationSendService,
   PurchaseProcessingService,
@@ -179,6 +182,7 @@ export type InfraServices =
   | IdentityProjectionPublisher
   | MimicHost
   | ComponentCompiler
+  | SnapshotImageRenderer
   | ProjectSchemaCache;
 
 export interface BackendRuntimeLayers<
@@ -528,18 +532,27 @@ export const BackendMimicHostStubLive = Layer.succeed(MimicHost, {
 
 /**
  * Stub {@link ComponentCompiler} for harnesses that run the backend graph
- * outside a Node/container host: it reports `unavailable`, the same posture the
- * deployed workerd worker takes. Workspace diagnostics for component files then
- * degrade to cache-only (`unknown` on a miss); composition diagnostics still
- * validate purely. A Node-hosted harness that wants real compile diagnostics
- * provides the native-esbuild adapter instead
- * (`stacks/backend/infrastructure/ComponentCompilerNode.ts`).
+ * outside a Node/container host: it reports `unavailable`. Workspace diagnostics
+ * for component files then degrade to cache-only (`unknown` on a miss), while
+ * composition diagnostics still validate purely. Callers can provide a compiler
+ * implementation when executable code checks are available.
  */
 export const BackendComponentCompilerStubLive = Layer.succeed(ComponentCompiler, {
   compileCheck: () => Effect.succeed({ status: "unavailable" as const }),
   compileAndExtract: () => Effect.succeed({ status: "unavailable" as const }),
 });
 
+/** Renderer stub for backend harnesses without a headless browser binding. */
+export const BackendSnapshotImageRendererStubLive = Layer.succeed(SnapshotImageRenderer, {
+  render: () =>
+    Effect.fail(
+      new SnapshotImageRenderError({
+        cause: "headless browser is not configured",
+        message: "Paywall preview rendering is unavailable in this runtime",
+      }),
+    ),
+});
+
 export const BackendNoopIdentityProjectionPublisherLive = IdentityProjectionPublisher.noop;
 
 /**
@@ -743,6 +756,11 @@ const buildBackendServiceGraph = <
     ? VoidQlService.layer.pipe(Layer.provide(layers.analyticsQueryClient))
     : VoidQlService.layer;
 
+  const PaywallWorkspaceServiceLive = PaywallWorkspaceService.layer.pipe(
+    Layer.provide(PaywallService.layer),
+    Layer.provide(ComponentManifestCacheService.layer),
+  );
+
   const BaseDomainServicesLayer = Layer.mergeAll(
     AiChatService.layer,
     AnalyticsService.layer,
@@ -775,13 +793,10 @@ const buildBackendServiceGraph = <
     ComponentManifestCacheService.layer,
     // The workspace service needs PaywallService (authz + slug resolution) and
     // the manifest cache; `mergeAll` does not cross-wire siblings, so both are
-    // provided explicitly. MimicHost and ComponentCompiler (the headless compile
-    // phase — an `unavailable` adapter in the deployed worker) come from the
+    // provided explicitly. MimicHost and ComponentCompiler come from the
     // infrastructure layer.
-    PaywallWorkspaceService.layer.pipe(
-      Layer.provide(PaywallService.layer),
-      Layer.provide(ComponentManifestCacheService.layer),
-    ),
+    PaywallWorkspaceServiceLive,
+    PaywallEditChangeSetService.layer.pipe(Layer.provide(PaywallWorkspaceServiceLive)),
     PerkGrantService.layer,
     PerkService.layer,
     PersonService.layer,
diff --git a/apps/backend/src/ai/skills/paywall-authoring.ts b/apps/backend/src/ai/skills/paywall-authoring.ts
index 31fc7c2d2..e47cfd037 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.ts
@@ -570,8 +570,8 @@ All tools operate on the currently open paywall, except \`read_paywall\`.
 
 - \`get_document(nodeId?, depth?)\` — read the open paywall's document as cleaned
   JSON (subtree + depth for economy).
-- \`get_components()\` — list every placeable component (catalog + local) with
-  paths, props, actions, and preview states.
+- \`get_components()\` — list every placeable component (catalog + local +
+  builtin) with paths/slugs, props, actions, and preview states.
 - \`read_component(path)\` — read a LOCAL code component's TSX source.
 - \`read_paywall(slug)\` — read ANOTHER paywall's document JSON for reference
   (read-only).
diff --git a/apps/backend/src/ai/tools.test.ts b/apps/backend/src/ai/tools.test.ts
index c1764214b..aeac23f4a 100644
--- a/apps/backend/src/ai/tools.test.ts
+++ b/apps/backend/src/ai/tools.test.ts
@@ -1,8 +1,12 @@
 import {
   ComponentCompiler,
   ComponentManifestCacheService,
+  componentServingPreviewKey,
+  PaywallArtifactStore,
   PaywallDeployService,
+  PaywallEditChangeSetService,
   PaywallWorkspaceService,
+  SnapshotImageRenderer,
 } from "@voidhash/core/services";
 import { AuthSession } from "@voidhash/core/domain/auth/Auth";
 import { Context, Effect } from "effect";
@@ -18,6 +22,7 @@ import * as WorkspaceTools from "./workspace-tools.ts";
  */
 
 const SCOPE: WorkspaceTools.WorkspaceToolScope = { projectId: "proj_1" };
+const CHANGE_SET_ID = "pw_change_1";
 
 /** A decoded document root: root → screen → view(with a text), and a library with one component. */
 const documentRoot = {
@@ -41,7 +46,14 @@ const documentRoot = {
           pos: "a0",
           data: {},
           children: [
-            { id: "text1", type: "text", parentId: "view1", pos: "a0", data: { text: "Hi" }, children: [] },
+            {
+              id: "text1",
+              type: "text",
+              parentId: "view1",
+              pos: "a0",
+              data: { text: "Hi" },
+              children: [],
+            },
           ],
         },
       ],
@@ -70,8 +82,16 @@ const fakeWorkspace = (over: Partial<PaywallWorkspaceService["Service"]> = {}) =
   ({
     listPaywalls: () => Effect.succeed([{ slug: "trial", paywallId: "pw_1" }]),
     readDocument: (_p: string, slug: string) =>
-      Effect.succeed({ slug, name: "Trial", paywallId: "pw_1", root: documentRoot }),
-    editDocument: () => Effect.succeed({ version: 9, commandCount: 2, mintedIds: { "0": ["abc1234567"] } }),
+      Effect.succeed({
+        slug,
+        name: "Trial",
+        paywallId: "pw_1",
+        tree: { encoded: true },
+        root: documentRoot,
+        version: 8,
+      }),
+    editDocument: () =>
+      Effect.succeed({ version: 9, commandCount: 2, mintedIds: { "0": ["abc1234567"] } }),
     writeComponentSource: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
     moveComponentFile: () => Effect.succeed({ version: 9, commandCount: 2, diagnostics: [] }),
     deleteComponentFile: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
@@ -98,15 +118,51 @@ const fakeCompiler = (over: Partial<ComponentCompiler["Service"]> = {}) =>
     ...over,
   }) as unknown as ComponentCompiler["Service"];
 
+const fakeChangeSets = (over: Partial<PaywallEditChangeSetService["Service"]> = {}) =>
+  ({
+    begin: () =>
+      Effect.succeed({
+        id: CHANGE_SET_ID,
+        paywallId: "pw_1",
+        paywallSlug: "trial",
+        baselineVersion: 8,
+      }),
+    requireActive: () =>
+      Effect.succeed({
+        id: CHANGE_SET_ID,
+        projectId: "proj_1",
+        paywallId: "pw_1",
+        paywallSlug: "trial",
+        baselineVersion: 1,
+      }),
+    recordPreview: () => Effect.void,
+    finish: () => Effect.succeed({ id: CHANGE_SET_ID, status: "finished" as const }),
+    revert: () => Effect.succeed({ version: 9, commandCount: 2, paywallSlug: "trial" }),
+    ...over,
+  }) as unknown as PaywallEditChangeSetService["Service"];
+
+const fakeArtifactStore = () =>
+  ({ getObject: () => Effect.succeed(null) }) as unknown as PaywallArtifactStore["Service"];
+
+const fakeRenderer = () =>
+  ({ render: () => Effect.succeed(new Uint8Array([1, 2, 3])) }) as SnapshotImageRenderer["Service"];
+
 interface Fakes {
   readonly workspace?: PaywallWorkspaceService["Service"];
   readonly deploy?: PaywallDeployService["Service"];
   readonly manifestCache?: ComponentManifestCacheService["Service"];
   readonly compiler?: ComponentCompiler["Service"];
+  readonly changeSets?: PaywallEditChangeSetService["Service"];
+  readonly artifactStore?: PaywallArtifactStore["Service"];
+  readonly renderer?: SnapshotImageRenderer["Service"];
 }
 
 const run = (
-  effect: Effect.Effect<WorkspaceTools.WorkspaceToolResult, never, WorkspaceTools.WorkspaceToolDeps>,
+  effect: Effect.Effect<
+    WorkspaceTools.WorkspaceToolResult,
+    never,
+    WorkspaceTools.WorkspaceToolDeps
+  >,
   fakes: Fakes = {},
 ): Promise<WorkspaceTools.WorkspaceToolResult> =>
   Effect.runPromise(
@@ -117,6 +173,9 @@ const run = (
           Context.add(PaywallDeployService, fakes.deploy ?? fakeDeploy()),
           Context.add(ComponentManifestCacheService, fakes.manifestCache ?? fakeManifestCache()),
           Context.add(ComponentCompiler, fakes.compiler ?? fakeCompiler()),
+          Context.add(PaywallEditChangeSetService, fakes.changeSets ?? fakeChangeSets()),
+          Context.add(PaywallArtifactStore, fakes.artifactStore ?? fakeArtifactStore()),
+          Context.add(SnapshotImageRenderer, fakes.renderer ?? fakeRenderer()),
           Context.add(AuthSession, {} as never),
         ),
       ),
@@ -124,9 +183,16 @@ const run = (
   );
 
 describe("MCP workspace tools (document-first)", () => {
+  it("begin_paywall_edit returns the change-set capability and captured baseline", async () => {
+    const result = await run(WorkspaceTools.beginPaywallEdit(SCOPE, { slug: "trial" }));
+    expect(result.isError, result.output).toBe(false);
+    expect(result.output).toContain(CHANGE_SET_ID);
+    expect(JSON.parse(result.output)).toMatchObject({ baselineVersion: 8, slug: "trial" });
+  });
+
   it("list_paywalls formats the project's paywalls", async () => {
     const result = await run(WorkspaceTools.listPaywalls(SCOPE));
-    expect(result.isError).toBe(false);
+    expect(result.isError, result.output).toBe(false);
     expect(result.output).toContain("trial");
     expect(result.output).toContain("/paywalls/trial");
   });
@@ -174,6 +240,7 @@ describe("MCP workspace tools (document-first)", () => {
     expect(result.output).toContain("pricing");
     expect(result.output).toContain("components/hero.tsx");
     expect(result.output).toContain("manifest unavailable");
+    expect(result.output).toContain("Builtin components");
   });
 
   it("read_component returns the local component source", async () => {
@@ -196,6 +263,7 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
       }),
     );
@@ -212,7 +280,14 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
         slug: "trial",
-        edits: [{ op: "update", nodeId: "view1", set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } } }],
+        changeSetId: CHANGE_SET_ID,
+        edits: [
+          {
+            op: "update",
+            nodeId: "view1",
+            set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } },
+          },
+        ],
       }),
       {
         workspace: fakeWorkspace({
@@ -236,6 +311,7 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         // view cannot be a child of text → illegalChild
         edits: [{ op: "insert", parentId: "text1", node: { type: "view" } }],
       }),
@@ -250,6 +326,7 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         edits: [{ op: "update", nodeId: "text1", set: { text: "Bye" } }],
       }),
       {
@@ -265,6 +342,193 @@ describe("MCP workspace tools (document-first)", () => {
     expect(result.output).not.toContain("_tag");
   });
 
+  it("duplicate_subtree clones a visual subtree through an atomic edit", async () => {
+    let applied: unknown[] = [];
+    const result = await run(
+      WorkspaceTools.duplicateSubtree(SCOPE, {
+        slug: "trial",
+        changeSetId: CHANGE_SET_ID,
+        nodeId: "view1",
+        parentId: "screen1",
+        nextName: "Copied offer",
+      }),
+      {
+        workspace: fakeWorkspace({
+          editDocument: ((_projectId: string, _slug: string, edits: unknown[]) => {
+            applied = edits;
+            return Effect.succeed({ version: 10, commandCount: 1, mintedIds: {} });
+          }) as never,
+        }),
+      },
+    );
+    expect(result.isError).toBe(false);
+    expect(applied).toHaveLength(1);
+    expect(applied[0]).toMatchObject({
+      op: "insert",
+      parentId: "screen1",
+      node: { type: "view", name: "Copied offer", children: [{ type: "text", text: "Hi" }] },
+    });
+  });
+
+  it("get_paywall_preview returns image content and records its exact document version", async () => {
+    const recorded: unknown[] = [];
+    const rendered: unknown[] = [];
+    const catalogRoot = structuredClone(documentRoot);
+    const screen = catalogRoot.children[0]!;
+    (screen.children as unknown[]).push({
+      id: "component1",
+      type: "component",
+      parentId: "screen1",
+      pos: "a1",
+      data: {
+        componentSource: "catalog",
+        contentHash: "hash-1",
+        previewState: "compact",
+      },
+      children: [],
+    });
+    const artifact = (state: string) => ({
+      body: new TextEncoder().encode(JSON.stringify({ state, treeVersion: 2 })),
+      contentType: "application/json",
+    });
+    const result = await run(
+      WorkspaceTools.getPaywallPreview(SCOPE, {
+        slug: "trial",
+        changeSetId: CHANGE_SET_ID,
+        width: 375,
+        height: 812,
+        scale: 1,
+      }),
+      {
+        workspace: fakeWorkspace({
+          readDocument: (_projectId: string, slug: string) =>
+            Effect.succeed({
+              slug,
+              name: "Trial",
+              paywallId: "pw_1",
+              tree: { encoded: true },
+              root: catalogRoot,
+              version: 8,
+            }),
+        }),
+        changeSets: fakeChangeSets({
+          recordPreview: ((input: unknown) =>
+            Effect.sync(() => void recorded.push(input))) as never,
+        }),
+        compiler: fakeCompiler({
+          compileAndExtract: () =>
+            Effect.succeed({
+              status: "ready" as const,
+              manifest: {},
+              previewTrees: {
+                default: {
+                  treeVersion: 1,
+                  state: "default",
+                  root: { type: "text", text: "Hero", style: {} },
+                },
+              },
+            }),
+        }),
+        artifactStore: {
+          getObject: (key: string) =>
+            key === componentServingPreviewKey("hash-1", "default")
+              ? Effect.succeed(artifact("default") as never)
+              : key === componentServingPreviewKey("hash-1", "compact")
+                ? Effect.succeed(artifact("compact") as never)
+                : Effect.succeed(null),
+        } as unknown as PaywallArtifactStore["Service"],
+        renderer: {
+          render: (input) =>
+            Effect.sync(() => {
+              rendered.push(input);
+              return new Uint8Array([1, 2, 3]);
+            }),
+        },
+      },
+    );
+    expect(result.isError, result.output).toBe(false);
+    expect(result.content).toEqual([
+      { type: "text", text: expect.stringContaining('"documentVersion":8') },
+      { type: "image", data: "AQID", mimeType: "image/png" },
+    ]);
+    expect(recorded[0]).toMatchObject({ documentVersion: 8, paywallSlug: "trial" });
+    expect(rendered[0]).toMatchObject({
+      componentTrees: {
+        "hash-1": {
+          default: { state: "default", treeVersion: 2 },
+          compact: { state: "compact", treeVersion: 2 },
+        },
+      },
+      localComponentTrees: {
+        "components/hero.tsx": {
+          default: {
+            treeVersion: 1,
+            state: "default",
+            root: { type: "text", text: "Hero", style: {} },
+          },
+        },
+      },
+    });
+  });
+
+  it("finish_paywall_edit binds the verdict to the current document version and signature", async () => {
+    const finished: unknown[] = [];
+    const result = await run(
+      WorkspaceTools.finishPaywallEdit(SCOPE, {
+        slug: "trial",
+        changeSetId: CHANGE_SET_ID,
+        reviewedDocumentSignature: "doc-reviewed",
+        verdict: "Clear hierarchy and no clipping.",
+        unresolvedIssues: [],
+      }),
+      {
+        changeSets: fakeChangeSets({
+          finish: ((input: unknown) =>
+            Effect.sync(() => {
+              finished.push(input);
+              return { id: CHANGE_SET_ID, status: "finished" as const };
+            })) as never,
+        }),
+      },
+    );
+    expect(result.isError, result.output).toBe(false);
+    expect(finished[0]).toMatchObject({
+      currentDocumentVersion: 8,
+      reviewedDocumentSignature: "doc-reviewed",
+      verdict: "Clear hierarchy and no clipping.",
+    });
+    expect((finished[0] as { currentDocumentSignature: string }).currentDocumentSignature).toMatch(
+      /^doc-/,
+    );
+  });
+
+  it("finish_paywall_edit rejects unresolved visual issues without closing the change set", async () => {
+    const finish = () => {
+      throw new Error("must not finish with unresolved visual issues");
+    };
+    const result = await run(
+      WorkspaceTools.finishPaywallEdit(SCOPE, {
+        slug: "trial",
+        changeSetId: CHANGE_SET_ID,
+        reviewedDocumentSignature: "doc-reviewed",
+        verdict: "Needs another pass.",
+        unresolvedIssues: ["CTA is clipped"],
+      }),
+      { changeSets: fakeChangeSets({ finish: finish as never }) },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("CTA is clipped");
+  });
+
+  it("revert_paywall_edit restores the entire captured baseline", async () => {
+    const result = await run(
+      WorkspaceTools.revertPaywallEdit(SCOPE, { changeSetId: CHANGE_SET_ID }),
+    );
+    expect(result.isError, result.output).toBe(false);
+    expect(result.output).toContain("Reverted change set");
+    expect(result.output).toContain("2 commands");
+  });
+
   it("write_component rejects a broken component with diagnostics (commits nothing)", async () => {
     const writeComponentSource = () => {
       throw new Error("must not commit on a compile error");
@@ -272,6 +536,7 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         path: "components/broken.tsx",
         source: "export default (=> {",
       }),
@@ -296,6 +561,7 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         path: "components/card.tsx",
         source: "export default () => null;",
       }),
@@ -315,6 +581,7 @@ describe("MCP workspace tools (document-first)", () => {
                 previewStates: ["default"],
                 hostData: [],
               },
+              previewTrees: {},
             }),
         }),
       },
@@ -324,17 +591,18 @@ describe("MCP workspace tools (document-first)", () => {
     expect(recorded).toHaveLength(1);
   });
 
-  it("write_component commits unvalidated when the compiler is unavailable (degraded workerd)", async () => {
+  it("write_component rejects when headless compilation is unavailable", async () => {
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         path: "components/card.tsx",
         source: "export default () => null;",
       }),
       // default compiler is `unavailable`
     );
-    expect(result.isError).toBe(false);
-    expect(result.output).toContain("diagnostics unavailable");
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("headless component compilation is unavailable");
   });
 
   it("write_component rejects an invalid file name before compiling", async () => {
@@ -344,6 +612,7 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         path: "components/../evil.tsx",
         source: "export default () => null;",
       }),
@@ -357,6 +626,7 @@ describe("MCP workspace tools (document-first)", () => {
     const result = await run(
       WorkspaceTools.renameComponent(SCOPE, {
         slug: "trial",
+        changeSetId: CHANGE_SET_ID,
         fromPath: "components/hero.tsx",
         toPath: "components/banner.tsx",
       }),
@@ -367,7 +637,11 @@ describe("MCP workspace tools (document-first)", () => {
 
   it("delete_component removes a component and warns about placeholders", async () => {
     const result = await run(
-      WorkspaceTools.deleteComponent(SCOPE, { slug: "trial", path: "components/hero.tsx" }),
+      WorkspaceTools.deleteComponent(SCOPE, {
+        slug: "trial",
+        changeSetId: CHANGE_SET_ID,
+        path: "components/hero.tsx",
+      }),
     );
     expect(result.isError).toBe(false);
     expect(result.output).toContain("placeholders");
diff --git a/apps/backend/src/ai/workspace-tools.ts b/apps/backend/src/ai/workspace-tools.ts
index 93fb6748d..94cb6f31b 100644
--- a/apps/backend/src/ai/workspace-tools.ts
+++ b/apps/backend/src/ai/workspace-tools.ts
@@ -8,14 +8,19 @@
  * code components are managed by path:
  *
  * - `list_paywalls` — the project's paywall directories.
+ * - `begin_paywall_edit` / `finish_paywall_edit` / `revert_paywall_edit` — a
+ *   version- and preview-bound edit lifecycle.
  * - `get_paywall({ slug, nodeId?, depth? })` — cleaned document JSON.
- * - `get_components({ slug })` — catalog + local components (props/actions/etc.).
+ * - `get_components({ slug })` — catalog, local, and builtin components.
  * - `read_component({ slug, path })` — a local component's TSX source.
  * - `edit_paywall({ slug, edits })` — an ATOMIC batch of document ops against the
  *   LIVE document (schema-validated, then reconciled+submitted with retry).
+ * - `duplicate_subtree` — copy an existing visual subtree with fresh node ids.
  * - `write_component({ slug, path, source })` — server-VALIDATED (headless build)
  *   then committed; diagnostics commit nothing.
  * - `rename_component` / `delete_component` — path move / placeholder-degrade.
+ * - `get_paywall_preview` — a PNG plus the exact document version/signature it
+ *   represents, which must be supplied when finishing.
  *
  * Each tool is a function `(scope, input) → Effect<ToolResult, never, Deps>`: it
  * runs the matching workspace effect and folds the outcome into a client-facing
@@ -26,8 +31,12 @@
 import {
   ComponentCompiler,
   ComponentManifestCacheService,
+  componentServingPreviewKey,
+  PaywallArtifactStore,
   PaywallDeployService,
+  PaywallEditChangeSetService,
   PaywallWorkspaceService,
+  SnapshotImageRenderer,
   type CompileExtractResult,
 } from "@voidhash/core/services";
 import { AuthSession } from "@voidhash/core/domain/auth/Auth";
@@ -36,8 +45,10 @@ import {
   validateDocumentEdits,
   type DocumentEdit,
   type EditableDocumentNode,
+  type NodeInput,
   type SnapshotDocumentNode,
 } from "@voidhash/ai-shared";
+import { listBuiltinComponents } from "@voidhash/paywall-builtins";
 import {
   fileNameFromDocRelative,
   hashSource,
@@ -51,8 +62,15 @@ export type WorkspaceToolDeps =
   | PaywallDeployService
   | ComponentManifestCacheService
   | ComponentCompiler
+  | PaywallArtifactStore
+  | PaywallEditChangeSetService
+  | SnapshotImageRenderer
   | AuthSession;
 
+export type WorkspaceToolContent =
+  | { readonly type: "text"; readonly text: string }
+  | { readonly type: "image"; readonly data: string; readonly mimeType: "image/png" };
+
 /**
  * The result of running a workspace tool. `output` is the client-facing string
  * (a formatted success or a readable failure message). `isError` is `true` when
@@ -63,6 +81,7 @@ export type WorkspaceToolDeps =
 export interface WorkspaceToolResult {
   readonly output: string;
   readonly isError: boolean;
+  readonly content?: ReadonlyArray<WorkspaceToolContent>;
 }
 
 /**
@@ -73,7 +92,14 @@ export interface WorkspaceToolScope {
   readonly projectId: string;
 }
 
-const okResult = (output: string): WorkspaceToolResult => ({ output, isError: false });
+const okResult = (
+  output: string,
+  content?: ReadonlyArray<WorkspaceToolContent>,
+): WorkspaceToolResult => ({
+  output,
+  isError: false,
+  ...(content === undefined ? {} : { content }),
+});
 const errResult = (output: string): WorkspaceToolResult => ({ output, isError: true });
 
 /**
@@ -145,7 +171,11 @@ const failureMessage = (error: unknown): string => {
  */
 const runFolded = <A>(
   effect: Effect.Effect<A, unknown, WorkspaceToolDeps>,
-): Effect.Effect<{ ok: true; value: A } | { ok: false; message: string }, never, WorkspaceToolDeps> =>
+): Effect.Effect<
+  { ok: true; value: A } | { ok: false; message: string },
+  never,
+  WorkspaceToolDeps
+> =>
   effect.pipe(
     Effect.exit,
     Effect.map((exit) => {
@@ -165,6 +195,9 @@ const runFolded = <A>(
 
 /** Inputs for each workspace tool, matching the MCP tool schemas. */
 export interface ListPaywallsInput {}
+export interface BeginPaywallEditInput {
+  readonly slug: string;
+}
 export interface GetPaywallInput {
   readonly slug: string;
   readonly nodeId?: string;
@@ -179,22 +212,74 @@ export interface ReadComponentInput {
 }
 export interface EditPaywallInput {
   readonly slug: string;
+  readonly changeSetId: string;
   readonly edits: ReadonlyArray<DocumentEdit>;
 }
+export interface DuplicateSubtreeInput {
+  readonly slug: string;
+  readonly changeSetId: string;
+  readonly nodeId: string;
+  readonly parentId: string;
+  readonly index?: number;
+  readonly nextName?: string;
+}
 export interface WriteComponentInput {
   readonly slug: string;
+  readonly changeSetId: string;
   readonly path: string;
   readonly source: string;
 }
 export interface RenameComponentInput {
   readonly slug: string;
+  readonly changeSetId: string;
   readonly fromPath: string;
   readonly toPath: string;
 }
 export interface DeleteComponentInput {
   readonly slug: string;
+  readonly changeSetId: string;
   readonly path: string;
 }
+export interface GetPaywallPreviewInput {
+  readonly slug: string;
+  readonly changeSetId: string;
+  readonly width?: number;
+  readonly height?: number;
+  readonly scale?: 1 | 2;
+}
+export interface FinishPaywallEditInput {
+  readonly slug: string;
+  readonly changeSetId: string;
+  readonly reviewedDocumentSignature: string;
+  readonly verdict: string;
+  readonly unresolvedIssues: ReadonlyArray<string>;
+}
+export interface RevertPaywallEditInput {
+  readonly changeSetId: string;
+}
+
+/** `begin_paywall_edit` — capture the revert baseline and mint the write capability. */
+export const beginPaywallEdit = (
+  scope: WorkspaceToolScope,
+  input: BeginPaywallEditInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const changeSets = yield* PaywallEditChangeSetService;
+        return yield* changeSets.begin(scope.projectId, input.slug);
+      }),
+    );
+    return result.ok
+      ? okResult(
+          JSON.stringify({
+            changeSetId: result.value.id,
+            slug: result.value.paywallSlug,
+            baselineVersion: result.value.baselineVersion,
+          }),
+        )
+      : errResult(`begin_paywall_edit failed: ${result.message}`);
+  });
 
 /**
  * `list_paywalls` — the project's paywall directories (slug + path) as a list.
@@ -320,7 +405,9 @@ export const getComponents = (
         const catalog = yield* deploy.listComponents({ projectId: scope.projectId });
         const document = yield* ws.readDocument(scope.projectId, input.slug);
         const locals = localComponentsOf((document.root as SnapshotDocumentNode | null) ?? null);
-        const cached = yield* manifestCache.getMany(locals.map((local) => hashSource(local.source)));
+        const cached = yield* manifestCache.getMany(
+          locals.map((local) => hashSource(local.source)),
+        );
 
         return {
           catalog: catalog.map((component) => ({
@@ -337,13 +424,25 @@ export const getComponents = (
               manifest: row?.status === "ready" ? row.manifest : undefined,
             };
           }),
+          builtins: listBuiltinComponents()
+            .filter((builtin) => builtin.manifest.slot !== true)
+            .map((builtin) => ({
+              slug: builtin.slug,
+              name: builtin.name,
+              description: builtin.description,
+              props: builtin.manifest.props,
+              actions: builtin.manifest.actions,
+              previewStates: builtin.manifest.previewStates,
+              slot: builtin.manifest.slot ?? false,
+              insertAs: { componentSource: "builtin", componentSlug: builtin.slug },
+            })),
         } as const;
       }),
     );
     if (!result.ok) {
       return errResult(`get_components failed: ${result.message}`);
     }
-    const { catalog, locals } = result.value;
+    const { catalog, locals, builtins } = result.value;
     const sections: string[] = [];
     sections.push(
       catalog.length === 0
@@ -361,6 +460,11 @@ export const getComponents = (
             )
             .join("\n")}`,
     );
+    sections.push(
+      builtins.length === 0
+        ? "Builtin components: none."
+        : `Builtin components (${builtins.length}):\n${JSON.stringify(builtins, null, 2)}`,
+    );
     return okResult(sections.join("\n\n"));
   });
 
@@ -400,6 +504,20 @@ export const editPaywall = (
   input: EditPaywallInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
+    const changeSet = yield* runFolded(
+      Effect.gen(function* () {
+        const changeSets = yield* PaywallEditChangeSetService;
+        return yield* changeSets.requireActive({
+          projectId: scope.projectId,
+          changeSetId: input.changeSetId,
+          paywallSlug: input.slug,
+        });
+      }),
+    );
+    if (!changeSet.ok) {
+      return errResult(`edit_paywall rejected: ${changeSet.message}`);
+    }
+
     // Validate first (against a fresh read) so an invalid batch never opens a
     // transaction and returns the model-facing errors verbatim.
     const read = yield* readDocumentRoot(scope, input.slug);
@@ -441,6 +559,76 @@ export const editPaywall = (
     );
   });
 
+const isVisualNode = (node: SnapshotDocumentNode): boolean =>
+  node.type !== "root" && node.type !== "library" && node.type !== "codeComponent";
+
+/** Convert a visual snapshot subtree into an id-free document insert payload. */
+const cloneNodeInput = (node: SnapshotDocumentNode): NodeInput => {
+  const children = (node.children ?? []).filter(isVisualNode).map(cloneNodeInput);
+  return {
+    type: node.type,
+    ...structuredClone((node.data ?? {}) as Record<string, unknown>),
+    ...(children.length === 0 ? {} : { children }),
+  } as NodeInput;
+};
+
+const findSnapshotNode = (
+  root: SnapshotDocumentNode,
+  nodeId: string,
+): SnapshotDocumentNode | null => {
+  if (root.id === nodeId) {
+    return root;
+  }
+  for (const child of root.children ?? []) {
+    const found = findSnapshotNode(child, nodeId);
+    if (found !== null) {
+      return found;
+    }
+  }
+  return null;
+};
+
+/** `duplicate_subtree` — clone a visual subtree and insert it with fresh ids. */
+export const duplicateSubtree = (
+  scope: WorkspaceToolScope,
+  input: DuplicateSubtreeInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const read = yield* readDocumentRoot(scope, input.slug);
+    if (!read.ok) {
+      return errResult(`duplicate_subtree failed: ${read.message}`);
+    }
+    const root = read.value.root as SnapshotDocumentNode | null;
+    if (root === null) {
+      return errResult(`duplicate_subtree: paywall "${input.slug}" has no document.`);
+    }
+    const source = findSnapshotNode(root, input.nodeId);
+    if (source === null) {
+      return errResult(`duplicate_subtree: no node "${input.nodeId}" in the document.`);
+    }
+    if (!isVisualNode(source)) {
+      return errResult(
+        `duplicate_subtree: cannot duplicate engine-managed ${source.type} node "${input.nodeId}".`,
+      );
+    }
+    const node = cloneNodeInput(source);
+    if (input.nextName !== undefined) {
+      node.name = input.nextName;
+    }
+    return yield* editPaywall(scope, {
+      slug: input.slug,
+      changeSetId: input.changeSetId,
+      edits: [
+        {
+          op: "insert",
+          parentId: input.parentId,
+          ...(input.index === undefined ? {} : { index: input.index }),
+          node,
+        },
+      ],
+    });
+  });
+
 /** Render a compile/extract failure's diagnostics as `- ` lines. */
 const formatExtractDiagnostics = (
   result: Extract<CompileExtractResult, { status: "error" }>,
@@ -457,11 +645,11 @@ const formatExtractDiagnostics = (
 
 /**
  * `write_component` — server-VALIDATE the single component's source THEN commit:
- * run the headless {@link ComponentCompiler.compileAndExtract} (compile + static
- * manifest extract on the container/native adapter; `unavailable` on the
- * degraded workerd runtime, where the source is committed unvalidated and the
- * browser back-fills the manifest). On compile/runtime diagnostics NOTHING is
- * committed. On success the source is written to the `codeComponent` node
+ * run the headless {@link ComponentCompiler.compileAndExtract} (compile,
+ * manifest extraction, and preview-state rendering on the container/native
+ * adapter). An unavailable compiler or compile/runtime diagnostics commit
+ * NOTHING. On success the source is written
+ * to the `codeComponent` node
  * (created when the path is new) and, when a manifest was extracted, recorded in
  * the content-addressed cache so a later projection can resolve it.
  */
@@ -470,6 +658,19 @@ export const writeComponent = (
   input: WriteComponentInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
+    const active = yield* runFolded(
+      Effect.gen(function* () {
+        const changeSets = yield* PaywallEditChangeSetService;
+        return yield* changeSets.requireActive({
+          projectId: scope.projectId,
+          changeSetId: input.changeSetId,
+          paywallSlug: input.slug,
+        });
+      }),
+    );
+    if (!active.ok) {
+      return errResult(`write_component rejected: ${active.message}`);
+    }
     const nameError = validateComponentFileName(fileNameFromDocRelative(input.path));
     if (nameError !== undefined) {
       return errResult(`write_component rejected: ${nameError}`);
@@ -489,9 +690,14 @@ export const writeComponent = (
     if (build.status === "error") {
       return errResult(`write_component rejected: ${formatExtractDiagnostics(build)}`);
     }
+    if (build.status === "unavailable") {
+      return errResult(
+        "write_component rejected: headless component compilation is unavailable; no source was committed.",
+      );
+    }
 
     // Commit the source (create-or-replace the codeComponent node), then record
-    // the manifest when one was extracted (degraded workerd yields none).
+    // the manifest extracted by the required headless compile.
     const committed = yield* runFolded(
       Effect.gen(function* () {
         const ws = yield* PaywallWorkspaceService;
@@ -501,26 +707,20 @@ export const writeComponent = (
           input.path,
           input.source,
         );
-        if (build.status === "ready") {
-          const manifestCache = yield* ComponentManifestCacheService;
-          yield* manifestCache.record({
-            sourceHash: hashSource(input.source),
-            status: "ready",
-            manifest: build.manifest,
-          });
-        }
+        const manifestCache = yield* ComponentManifestCacheService;
+        yield* manifestCache.record({
+          sourceHash: hashSource(input.source),
+          status: "ready",
+          manifest: build.manifest,
+        });
         return result;
       }),
     );
     if (!committed.ok) {
       return errResult(`write_component rejected: ${committed.message}`);
     }
-    const buildNote =
-      build.status === "ready"
-        ? "compiled clean; manifest recorded"
-        : "committed (diagnostics unavailable in this runtime — the designer will validate on open)";
     return okResult(
-      `Wrote ${input.path} to "${input.slug}" at version ${committed.value.version} (${buildNote}).`,
+      `Wrote ${input.path} to "${input.slug}" at version ${committed.value.version} (compiled clean; manifest recorded).`,
     );
   });
 
@@ -534,6 +734,19 @@ export const renameComponent = (
   input: RenameComponentInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
+    const active = yield* runFolded(
+      Effect.gen(function* () {
+        const changeSets = yield* PaywallEditChangeSetService;
+        return yield* changeSets.requireActive({
+          projectId: scope.projectId,
+          changeSetId: input.changeSetId,
+          paywallSlug: input.slug,
+        });
+      }),
+    );
+    if (!active.ok) {
+      return errResult(`rename_component rejected: ${active.message}`);
+    }
     const result = yield* runFolded(
       Effect.gen(function* () {
         const ws = yield* PaywallWorkspaceService;
@@ -562,6 +775,19 @@ export const deleteComponent = (
   input: DeleteComponentInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
+    const active = yield* runFolded(
+      Effect.gen(function* () {
+        const changeSets = yield* PaywallEditChangeSetService;
+        return yield* changeSets.requireActive({
+          projectId: scope.projectId,
+          changeSetId: input.changeSetId,
+          paywallSlug: input.slug,
+        });
+      }),
+    );
+    if (!active.ok) {
+      return errResult(`delete_component rejected: ${active.message}`);
+    }
     const result = yield* runFolded(
       Effect.gen(function* () {
         const ws = yield* PaywallWorkspaceService;
@@ -578,3 +804,210 @@ export const deleteComponent = (
         )
       : errResult(`delete_component rejected: ${result.message}`);
   });
+
+const documentSignature = (root: unknown): string => `doc-${hashSource(JSON.stringify(root))}`;
+
+const pngBase64 = (png: Uint8Array): string => {
+  const chunks: string[] = [];
+  for (let offset = 0; offset < png.length; offset += 0x8000) {
+    chunks.push(String.fromCharCode(...png.subarray(offset, offset + 0x8000)));
+  }
+  return btoa(chunks.join(""));
+};
+
+const deployedComponentPreviewStates = (
+  root: SnapshotDocumentNode | null,
+): ReadonlyMap<string, ReadonlySet<string>> => {
+  const statesByHash = new Map<string, Set<string>>();
+  const visit = (node: SnapshotDocumentNode): void => {
+    if (node.type === "component") {
+      const data = (node.data ?? {}) as Record<string, unknown>;
+      const contentHash = data.contentHash;
+      if (data.componentSource !== "local" && typeof contentHash === "string" && contentHash) {
+        const states = statesByHash.get(contentHash) ?? new Set<string>();
+        states.add("default");
+        if (typeof data.previewState === "string" && data.previewState) {
+          states.add(data.previewState);
+        }
+        statesByHash.set(contentHash, states);
+      }
+    }
+    for (const child of node.children ?? []) {
+      visit(child);
+    }
+  };
+  if (root !== null) {
+    visit(root);
+  }
+  return statesByHash;
+};
+
+const fetchPreviewComponentTrees = (root: SnapshotDocumentNode | null) =>
+  Effect.gen(function* () {
+    const store = yield* PaywallArtifactStore;
+    const trees: Record<string, Record<string, unknown>> = {};
+    for (const [contentHash, states] of deployedComponentPreviewStates(root)) {
+      for (const state of states) {
+        const object = yield* store.getObject(componentServingPreviewKey(contentHash, state));
+        if (object === null) {
+          continue;
+        }
+        const tree = yield* Effect.try({
+          try: () => JSON.parse(new TextDecoder().decode(object.body)) as unknown,
+          catch: () => null,
+        }).pipe(Effect.orElseSucceed(() => null));
+        if (tree !== null) {
+          (trees[contentHash] ??= {})[state] = tree;
+        }
+      }
+    }
+    return trees;
+  });
+
+const compileLocalPreviewTrees = (root: SnapshotDocumentNode | null) =>
+  Effect.gen(function* () {
+    const compiler = yield* ComponentCompiler;
+    const trees: Record<string, Record<string, unknown>> = {};
+    for (const local of localComponentsOf(root)) {
+      const result = yield* compiler.compileAndExtract(local.source);
+      if (result.status === "unavailable") {
+        return yield* Effect.fail(
+          new Error(
+            `Headless compilation is unavailable for local component ${local.path}; preview was not rendered.`,
+          ),
+        );
+      }
+      if (result.status === "error") {
+        return yield* Effect.fail(
+          new Error(
+            `Local component ${local.path} cannot be previewed. ${formatExtractDiagnostics(result)}`,
+          ),
+        );
+      }
+      trees[local.path] = { ...result.previewTrees };
+    }
+    return trees;
+  });
+
+/** `get_paywall_preview` — render and return a version-bound PNG review image. */
+export const getPaywallPreview = (
+  scope: WorkspaceToolScope,
+  input: GetPaywallPreviewInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const width = input.width ?? 375;
+    const height = input.height ?? 812;
+    const scale = input.scale ?? 1;
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const changeSets = yield* PaywallEditChangeSetService;
+        yield* changeSets.requireActive({
+          projectId: scope.projectId,
+          changeSetId: input.changeSetId,
+          paywallSlug: input.slug,
+        });
+        const workspace = yield* PaywallWorkspaceService;
+        const before = yield* workspace.readDocument(scope.projectId, input.slug);
+        const signature = documentSignature(before.root);
+        const root = (before.root as SnapshotDocumentNode | null) ?? null;
+        const componentTrees = yield* fetchPreviewComponentTrees(root);
+        const localComponentTrees = yield* compileLocalPreviewTrees(root);
+        const renderer = yield* SnapshotImageRenderer;
+        const png = yield* renderer.render({
+          snapshot: before.root,
+          componentTrees,
+          localComponentTrees,
+          width,
+          height,
+          deviceScaleFactor: scale,
+        });
+        const after = yield* workspace.readDocument(scope.projectId, input.slug);
+        if (after.version !== before.version || documentSignature(after.root) !== signature) {
+          return yield* Effect.fail(
+            new Error(
+              "The paywall changed while its preview was rendering. Request a fresh preview.",
+            ),
+          );
+        }
+        yield* changeSets.recordPreview({
+          projectId: scope.projectId,
+          changeSetId: input.changeSetId,
+          paywallSlug: input.slug,
+          documentSignature: signature,
+          documentVersion: before.version,
+        });
+        return { png, signature, version: before.version };
+      }),
+    );
+    if (!result.ok) {
+      return errResult(`get_paywall_preview failed: ${result.message}`);
+    }
+    const data = pngBase64(result.value.png);
+    const metadata = JSON.stringify({
+      kind: "paywall-preview",
+      mediaType: "image/png",
+      width,
+      height,
+      scale,
+      documentVersion: result.value.version,
+      documentSignature: result.value.signature,
+      message: "Review this image visually before finishing the change set.",
+    });
+    return okResult(metadata, [
+      { type: "text", text: metadata },
+      { type: "image", data, mimeType: "image/png" },
+    ]);
+  });
+
+/** `finish_paywall_edit` — close a change set after reviewing its exact latest preview. */
+export const finishPaywallEdit = (
+  scope: WorkspaceToolScope,
+  input: FinishPaywallEditInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    if (input.unresolvedIssues.length > 0) {
+      return errResult(
+        `finish_paywall_edit rejected: unresolved issues remain: ${input.unresolvedIssues.join("; ")}. Correct them and render a new preview.`,
+      );
+    }
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const workspace = yield* PaywallWorkspaceService;
+        const document = yield* workspace.readDocument(scope.projectId, input.slug);
+        const changeSets = yield* PaywallEditChangeSetService;
+        return yield* changeSets.finish({
+          projectId: scope.projectId,
+          changeSetId: input.changeSetId,
+          paywallSlug: input.slug,
+          reviewedDocumentSignature: input.reviewedDocumentSignature,
+          currentDocumentSignature: documentSignature(document.root),
+          currentDocumentVersion: document.version,
+          verdict: input.verdict,
+        });
+      }),
+    );
+    return result.ok
+      ? okResult(
+          `Finished change set ${input.changeSetId} after visual review. Verdict: ${input.verdict}`,
+        )
+      : errResult(`finish_paywall_edit rejected: ${result.message}`);
+  });
+
+/** `revert_paywall_edit` — reconcile the live document to the captured baseline. */
+export const revertPaywallEdit = (
+  scope: WorkspaceToolScope,
+  input: RevertPaywallEditInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const result = yield* runFolded(
+      Effect.gen(function* () {
+        const changeSets = yield* PaywallEditChangeSetService;
+        return yield* changeSets.revert(scope.projectId, input.changeSetId);
+      }),
+    );
+    return result.ok
+      ? okResult(
+          `Reverted change set ${input.changeSetId} for "${result.value.paywallSlug}" at version ${result.value.version} (${result.value.commandCount} command${result.value.commandCount === 1 ? "" : "s"}).`,
+        )
+      : errResult(`revert_paywall_edit failed: ${result.message}`);
+  });
diff --git a/apps/backend/src/mcp/dispatch.test.ts b/apps/backend/src/mcp/dispatch.test.ts
index 9b3ebafa4..522aa5cfc 100644
--- a/apps/backend/src/mcp/dispatch.test.ts
+++ b/apps/backend/src/mcp/dispatch.test.ts
@@ -9,8 +9,11 @@
 import {
   ComponentCompiler,
   ComponentManifestCacheService,
+  PaywallArtifactStore,
   PaywallDeployService,
+  PaywallEditChangeSetService,
   PaywallWorkspaceService,
+  SnapshotImageRenderer,
 } from "@voidhash/core/services";
 import { AuthSession } from "@voidhash/core/domain/auth/Auth";
 import { Context, Effect } from "effect";
@@ -67,6 +70,18 @@ const fakeCompiler = (over: Partial<ComponentCompiler["Service"]> = {}) =>
     ...over,
   }) as unknown as ComponentCompiler["Service"];
 
+const fakeChangeSets = () =>
+  ({
+    requireActive: () =>
+      Effect.succeed({
+        id: "pw_change_1",
+        projectId: "proj_1",
+        paywallId: "pw_1",
+        paywallSlug: "trial",
+        baselineVersion: 1,
+      }),
+  }) as unknown as PaywallEditChangeSetService["Service"];
+
 interface Fakes {
   readonly workspace?: PaywallWorkspaceService["Service"];
   readonly deploy?: PaywallDeployService["Service"];
@@ -80,14 +95,17 @@ const contextWith = (fakes: Fakes) =>
     Context.add(PaywallDeployService, fakes.deploy ?? fakeDeploy()),
     Context.add(ComponentManifestCacheService, fakes.manifestCache ?? fakeManifestCache()),
     Context.add(ComponentCompiler, fakes.compiler ?? fakeCompiler()),
+    Context.add(PaywallEditChangeSetService, fakeChangeSets()),
+    Context.add(PaywallArtifactStore, {
+      getObject: () => Effect.succeed(null),
+    } as unknown as PaywallArtifactStore["Service"]),
+    Context.add(SnapshotImageRenderer, {
+      render: () => Effect.succeed(new Uint8Array([1])),
+    } as SnapshotImageRenderer["Service"]),
     Context.add(AuthSession, {} as never),
   );
 
-const dispatchWith = (
-  fakes: Fakes,
-  name: string,
-  args: unknown,
-): Promise<WorkspaceToolResult> => {
+const dispatchWith = (fakes: Fakes, name: string, args: unknown): Promise<WorkspaceToolResult> => {
   const tool = findMcpTool(name);
   if (tool === undefined) {
     throw new Error(`tool ${name} not found`);
@@ -118,6 +136,7 @@ describe("MCP tool dispatch", () => {
   it("edit_paywall validates then applies, reporting the new version", async () => {
     const result = await dispatch("edit_paywall", {
       slug: "trial",
+      changeSetId: "pw_change_1",
       edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
     });
     expect(result.isError).toBe(false);
@@ -132,7 +151,11 @@ describe("MCP tool dispatch", () => {
       { workspace: fakeWorkspace({ editDocument: editDocument as never }) },
       "edit_paywall",
       // Unknown parent id → validation rejects before any submit.
-      { slug: "trial", edits: [{ op: "insert", parentId: "ghost", node: { type: "view" } }] },
+      {
+        slug: "trial",
+        changeSetId: "pw_change_1",
+        edits: [{ op: "insert", parentId: "ghost", node: { type: "view" } }],
+      },
     );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("edit_paywall rejected");
@@ -156,7 +179,12 @@ describe("MCP tool dispatch", () => {
         }),
       },
       "write_component",
-      { slug: "trial", path: "components/hero.tsx", source: "export default (=> {" },
+      {
+        slug: "trial",
+        changeSetId: "pw_change_1",
+        path: "components/hero.tsx",
+        source: "export default (=> {",
+      },
     );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("write_component rejected");
@@ -179,11 +207,17 @@ describe("MCP tool dispatch", () => {
           record: ((input: unknown) => Effect.sync(() => void recorded.push(input))) as never,
         }),
         compiler: fakeCompiler({
-          compileAndExtract: () => Effect.succeed({ status: "ready" as const, manifest }),
+          compileAndExtract: () =>
+            Effect.succeed({ status: "ready" as const, manifest, previewTrees: {} }),
         }),
       },
       "write_component",
-      { slug: "trial", path: "components/hero.tsx", source: "export default () => null;" },
+      {
+        slug: "trial",
+        changeSetId: "pw_change_1",
+        path: "components/hero.tsx",
+        source: "export default () => null;",
+      },
     );
     expect(result.isError).toBe(false);
     expect(result.output).toContain("version 9");
@@ -209,7 +243,11 @@ describe("MCP tool dispatch", () => {
         }),
       },
       "edit_paywall",
-      { slug: "trial", edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }] },
+      {
+        slug: "trial",
+        changeSetId: "pw_change_1",
+        edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
+      },
     );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("edit_paywall rejected: lost the concurrency race");
diff --git a/apps/backend/src/mcp/protocol.test.ts b/apps/backend/src/mcp/protocol.test.ts
index a1f970891..7a71ac0b4 100644
--- a/apps/backend/src/mcp/protocol.test.ts
+++ b/apps/backend/src/mcp/protocol.test.ts
@@ -31,7 +31,11 @@ const run = (
 ): Promise<JsonRpcResponse | null> =>
   Effect.runPromise(handleMcpMessage(message, callTool) as Effect.Effect<JsonRpcResponse | null>);
 
-const msg = (method: string, params?: Record<string, unknown>, id: string | number = 1): JsonRpcMessage => ({
+const msg = (
+  method: string,
+  params?: Record<string, unknown>,
+  id: string | number = 1,
+): JsonRpcMessage => ({
   jsonrpc: "2.0",
   method,
   id,
@@ -67,7 +71,7 @@ describe("initialize", () => {
       expect(response && "result" in response).toBe(true);
       const result = (response as { result: Record<string, unknown> }).result;
       expect(result.protocolVersion).toBe(version);
-      expect(result.capabilities).toEqual({ tools: {} });
+      expect(result.capabilities).toEqual({ tools: {}, resources: {}, prompts: {} });
       expect((result.serverInfo as { name: string }).name).toBe("voidhash-paywall-workspace");
     }
   });
@@ -97,7 +101,7 @@ describe("tools/list", () => {
   it("returns the tool descriptors with JSON Schema inputs", async () => {
     const response = await run(msg("tools/list"));
     const result = (response as { result: { tools: Array<Record<string, unknown>> } }).result;
-    expect(result.tools.length).toBe(8);
+    expect(result.tools.length).toBe(13);
     const listPaywalls = result.tools[0];
     expect(listPaywalls.name).toBe("list_paywalls");
     expect((listPaywalls.inputSchema as { type: string }).type).toBe("object");
@@ -126,6 +130,18 @@ describe("tools/call", () => {
     expect(result.content).toEqual([{ type: "text", text: "apply_paywall rejected: bad" }]);
   });
 
+  it("preserves multimodal image content from preview tools", async () => {
+    const content = [
+      { type: "text" as const, text: '{"documentSignature":"doc-1"}' },
+      { type: "image" as const, data: "iVBORw0KGgo=", mimeType: "image/png" as const },
+    ];
+    const response = await run(
+      msg("tools/call", { name: "get_paywall_preview", arguments: {} }),
+      cannedCallTool({ output: "preview", isError: false, content }),
+    );
+    expect((response as { result: { content: unknown } }).result.content).toEqual(content);
+  });
+
   it("rejects a missing tool name with InvalidParams", async () => {
     const response = await run(msg("tools/call", { arguments: {} }));
     const error = (response as { error: { code: number } }).error;
@@ -133,12 +149,52 @@ describe("tools/call", () => {
   });
 });
 
+describe("resources", () => {
+  it("lists and reads the schema-derived authoring guide", async () => {
+    const listed = await run(msg("resources/list"));
+    const resources = (listed as { result: { resources: Array<{ uri: string }> } }).result
+      .resources;
+    expect(resources[0]?.uri).toBe("voidhash://paywall-authoring/reference");
+
+    const read = await run(
+      msg("resources/read", { uri: "voidhash://paywall-authoring/reference" }),
+    );
+    const text = (read as { result: { contents: Array<{ text: string }> } }).result.contents[0]
+      ?.text;
+    expect(text).toContain("begin_paywall_edit");
+    expect(text).toContain("Document model");
+  });
+});
+
+describe("prompts", () => {
+  it("offers a design prompt with the verified lifecycle", async () => {
+    const listed = await run(msg("prompts/list"));
+    expect(
+      (listed as { result: { prompts: Array<{ name: string }> } }).result.prompts[0]?.name,
+    ).toBe("design_paywall");
+    const response = await run(
+      msg("prompts/get", {
+        name: "design_paywall",
+        arguments: { slug: "trial", request: "Improve hierarchy" },
+      }),
+    );
+    const text = (
+      response as {
+        result: { messages: Array<{ content: { text: string } }> };
+      }
+    ).result.messages[0]?.content.text;
+    expect(text).toContain('paywall "trial"');
+    expect(text).toContain("get_paywall_preview");
+    expect(text).toContain("Improve hierarchy");
+  });
+});
+
 describe("unknown method", () => {
   it("returns method-not-found", async () => {
-    const response = await run(msg("resources/list"));
+    const response = await run(msg("completion/complete"));
     const error = (response as { error: { code: number; message: string } }).error;
     expect(error.code).toBe(JsonRpcErrorCode.MethodNotFound);
-    expect(error.message).toContain("resources/list");
+    expect(error.message).toContain("completion/complete");
   });
 
   it("accepts an unknown notification silently", async () => {
diff --git a/apps/backend/src/mcp/protocol.ts b/apps/backend/src/mcp/protocol.ts
index 01ba52838..7320f6895 100644
--- a/apps/backend/src/mcp/protocol.ts
+++ b/apps/backend/src/mcp/protocol.ts
@@ -12,14 +12,15 @@
  * error taxonomy live here so they can be unit-tested without a worker.
  *
  * Implemented methods: `initialize`, `notifications/initialized`, `tools/list`,
- * `tools/call`, `ping`. Unknown methods → JSON-RPC method-not-found. Tool errors
- * are `isError: true` content, never JSON-RPC errors (per MCP). Resources are not
- * offered this increment (tools cover the workflow).
+ * `tools/call`, `resources/list`, `resources/read`, `prompts/list`,
+ * `prompts/get`, and `ping`. Unknown methods → JSON-RPC method-not-found. Tool
+ * errors are `isError: true` content, never JSON-RPC errors (per MCP).
  */
 import { Effect } from "effect";
 
 import { mcpToolDescriptors } from "./tool-manifest.ts";
 import * as WorkspaceTools from "../ai/workspace-tools.ts";
+import { paywallAuthoringSkill } from "../ai/skills/paywall-authoring.ts";
 
 /** Protocol versions we speak, newest first (used to pick the negotiated version). */
 export const SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26"] as const;
@@ -27,6 +28,21 @@ const LATEST_PROTOCOL_VERSION = SUPPORTED_PROTOCOL_VERSIONS[0];
 
 /** Server identity advertised in the `initialize` result. */
 const SERVER_INFO = { name: "voidhash-paywall-workspace", version: "1.0.0" } as const;
+const AUTHORING_RESOURCE_URI = "voidhash://paywall-authoring/reference";
+const AUTHORING_RESOURCE_NAME = "paywall-authoring-reference";
+const DESIGN_PROMPT_NAME = "design_paywall";
+
+const mcpAuthoringGuide = (): string => `# MCP paywall workflow
+
+1. Discover paywalls with \`list_paywalls\`, then call \`begin_paywall_edit\`.
+2. Read structure and components before writing. Pass the returned \`changeSetId\` to every mutation.
+3. Use \`edit_paywall\` for document composition, \`duplicate_subtree\` for visual cloning, and component tools only for local TSX.
+4. Render \`get_paywall_preview\`, inspect the image, correct any visual issues, and render again.
+5. Call \`finish_paywall_edit\` with the exact latest document signature and an empty issue list, or \`revert_paywall_edit\` to restore the baseline.
+
+Tool-name mapping in the schema-derived reference below: \`get_document\` means \`get_paywall\`; \`edit_document\` means \`edit_paywall\`. MCP mutations additionally require \`slug\` and \`changeSetId\`.
+
+${paywallAuthoringSkill()}`;
 
 /** Standard JSON-RPC 2.0 error codes we emit. */
 export const JsonRpcErrorCode = {
@@ -70,7 +86,11 @@ const failure = (
   code: number,
   message: string,
   data?: unknown,
-): JsonRpcResponse => ({ jsonrpc: "2.0", id, error: data === undefined ? { code, message } : { code, message, data } });
+): JsonRpcResponse => ({
+  jsonrpc: "2.0",
+  id,
+  error: data === undefined ? { code, message } : { code, message, data },
+});
 
 /**
  * Validate an already-JSON-parsed value as a JSON-RPC 2.0 message. Returns the
@@ -115,13 +135,41 @@ const negotiateProtocolVersion = (requested: unknown): string =>
 /** The `initialize` result: negotiated version, tool capability, server identity. */
 const initializeResult = (params: Record<string, unknown> | undefined) => ({
   protocolVersion: negotiateProtocolVersion(params?.protocolVersion),
-  capabilities: { tools: {} },
+  capabilities: { tools: {}, resources: {}, prompts: {} },
   serverInfo: SERVER_INFO,
+  instructions:
+    "Begin a paywall edit change set before mutating. Review the final PNG preview and finish with its exact document signature, or revert the change set.",
 });
 
 /** The `tools/list` result: the advertised tool descriptors. */
 const toolsListResult = () => ({ tools: mcpToolDescriptors() });
 
+const resourcesListResult = () => ({
+  resources: [
+    {
+      uri: AUTHORING_RESOURCE_URI,
+      name: AUTHORING_RESOURCE_NAME,
+      title: "Voidhash paywall authoring reference",
+      description: "Schema-derived document, style, component, and MCP workflow guidance.",
+      mimeType: "text/markdown",
+    },
+  ],
+});
+
+const promptsListResult = () => ({
+  prompts: [
+    {
+      name: DESIGN_PROMPT_NAME,
+      title: "Design a paywall",
+      description: "Start a visually verified MCP paywall-authoring workflow.",
+      arguments: [
+        { name: "slug", description: "Paywall slug to edit.", required: true },
+        { name: "request", description: "What to change or create.", required: false },
+      ],
+    },
+  ],
+});
+
 /**
  * Handle a `tools/call`: read `name` + `arguments`, run the executor, and shape
  * the result as MCP content. A tool failure is `isError: true` content (never a
@@ -144,7 +192,7 @@ const handleToolsCall = (
   return callTool(name, args).pipe(
     Effect.map((result) =>
       success(id, {
-        content: [{ type: "text", text: result.output }],
+        content: result.content ?? [{ type: "text", text: result.output }],
         isError: result.isError,
       }),
     ),
@@ -183,6 +231,67 @@ export const handleMcpMessage = (
     case "tools/call":
       return handleToolsCall(id, message.params, callTool);
 
+    case "resources/list":
+      return Effect.succeed(success(id, resourcesListResult()));
+
+    case "resources/read": {
+      if (message.params?.uri !== AUTHORING_RESOURCE_URI) {
+        return Effect.succeed(
+          failure(id, JsonRpcErrorCode.InvalidParams, "Unknown paywall authoring resource URI"),
+        );
+      }
+      return Effect.succeed(
+        success(id, {
+          contents: [
+            {
+              uri: AUTHORING_RESOURCE_URI,
+              mimeType: "text/markdown",
+              text: mcpAuthoringGuide(),
+            },
+          ],
+        }),
+      );
+    }
+
+    case "prompts/list":
+      return Effect.succeed(success(id, promptsListResult()));
+
+    case "prompts/get": {
+      if (message.params?.name !== DESIGN_PROMPT_NAME) {
+        return Effect.succeed(
+          failure(id, JsonRpcErrorCode.InvalidParams, "Unknown paywall authoring prompt"),
+        );
+      }
+      const args =
+        message.params.arguments !== null && typeof message.params.arguments === "object"
+          ? (message.params.arguments as Record<string, unknown>)
+          : {};
+      const slug = args.slug;
+      if (typeof slug !== "string" || slug.length === 0) {
+        return Effect.succeed(
+          failure(id, JsonRpcErrorCode.InvalidParams, 'design_paywall requires a string "slug"'),
+        );
+      }
+      const request =
+        typeof args.request === "string" && args.request.length > 0
+          ? `\nRequested outcome: ${args.request}`
+          : "";
+      return Effect.succeed(
+        success(id, {
+          description: `Design paywall ${slug} with a visually verified change set.`,
+          messages: [
+            {
+              role: "user",
+              content: {
+                type: "text",
+                text: `Design paywall "${slug}" using the Voidhash MCP workflow.${request}\n\n${mcpAuthoringGuide()}`,
+              },
+            },
+          ],
+        }),
+      );
+    }
+
     default: {
       // Any other `notifications/*` is an id-less message we accept silently.
       if (message.method.startsWith("notifications/") && message.id === undefined) {
diff --git a/apps/backend/src/mcp/tool-manifest.test.ts b/apps/backend/src/mcp/tool-manifest.test.ts
index b616a66fd..8ff186952 100644
--- a/apps/backend/src/mcp/tool-manifest.test.ts
+++ b/apps/backend/src/mcp/tool-manifest.test.ts
@@ -13,19 +13,30 @@ describe("MCP tool manifest", () => {
     const names = mcpToolDescriptors().map((d) => d.name);
     expect(names).toEqual([
       "list_paywalls",
+      "begin_paywall_edit",
       "get_paywall",
       "get_components",
       "read_component",
       "edit_paywall",
+      "duplicate_subtree",
       "write_component",
       "rename_component",
       "delete_component",
+      "get_paywall_preview",
+      "finish_paywall_edit",
+      "revert_paywall_edit",
     ]);
   });
 
   it("no longer advertises the deleted stateless-build / bash tools", () => {
     const names = mcpToolDescriptors().map((d) => d.name);
-    for (const removed of ["bash", "read_file", "get_diagnostics", "validate_paywall", "apply_paywall"]) {
+    for (const removed of [
+      "bash",
+      "read_file",
+      "get_diagnostics",
+      "validate_paywall",
+      "apply_paywall",
+    ]) {
       expect(names).not.toContain(removed);
     }
   });
@@ -54,6 +65,7 @@ describe("MCP tool manifest", () => {
     const schema = findMcpTool("edit_paywall")!.descriptor.inputSchema;
     const required = (schema.required as string[] | undefined) ?? [];
     expect(required).toContain("slug");
+    expect(required).toContain("changeSetId");
     expect(required).toContain("edits");
     const edits = (schema.properties as Record<string, { type?: string }>).edits;
     expect(edits.type).toBe("array");
@@ -62,22 +74,37 @@ describe("MCP tool manifest", () => {
   it("write_component requires slug + path + source", () => {
     const schema = findMcpTool("write_component")!.descriptor.inputSchema;
     const required = ((schema.required as string[] | undefined) ?? []).sort();
-    expect(required).toEqual(["path", "slug", "source"]);
+    expect(required).toEqual(["changeSetId", "path", "slug", "source"]);
   });
 
   it("rename_component requires slug + fromPath + toPath", () => {
     const schema = findMcpTool("rename_component")!.descriptor.inputSchema;
     const required = ((schema.required as string[] | undefined) ?? []).sort();
-    expect(required).toEqual(["fromPath", "slug", "toPath"]);
+    expect(required).toEqual(["changeSetId", "fromPath", "slug", "toPath"]);
+  });
+
+  it("advertises the explicit preview-gated lifecycle", () => {
+    expect(findMcpTool("begin_paywall_edit")!.descriptor.inputSchema.required as string[]).toEqual([
+      "slug",
+    ]);
+    const previewRequired =
+      (findMcpTool("get_paywall_preview")!.descriptor.inputSchema.required as string[]) ?? [];
+    expect(previewRequired.sort()).toEqual(["changeSetId", "slug"]);
+    const finishRequired =
+      (findMcpTool("finish_paywall_edit")!.descriptor.inputSchema.required as string[]) ?? [];
+    expect(finishRequired).toEqual(
+      expect.arrayContaining(["slug", "changeSetId", "reviewedDocumentSignature", "verdict"]),
+    );
   });
 
   it("a validated tool folds invalid arguments into an isError result (no throw)", async () => {
     const tool = findMcpTool("edit_paywall")!;
     const result = await Effect.runPromise(
       // Missing required `edits` — the dispatcher validates and folds the failure.
-      tool.dispatch({ projectId: "proj_1" }, { slug: "trial" }) as Effect.Effect<
-        { output: string; isError: boolean }
-      >,
+      tool.dispatch({ projectId: "proj_1" }, { slug: "trial" }) as Effect.Effect<{
+        output: string;
+        isError: boolean;
+      }>,
     );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("invalid arguments");
diff --git a/apps/backend/src/mcp/tool-manifest.ts b/apps/backend/src/mcp/tool-manifest.ts
index ba6b9b560..bf7116211 100644
--- a/apps/backend/src/mcp/tool-manifest.ts
+++ b/apps/backend/src/mcp/tool-manifest.ts
@@ -6,9 +6,9 @@
  * MCP is STATELESS and DOCUMENT-FIRST now — there is no fork, no `paywall.tsx`,
  * no whole-target overwrite. Composition is read as cleaned document JSON and
  * edited with mimic DOCUMENT ops (`edit_paywall`); code components are read and
- * managed by their canonical `components/<name>.tsx` path. The tool set:
- * `list_paywalls`, `get_paywall`, `get_components`, `read_component`,
- * `edit_paywall`, `write_component`, `rename_component`, `delete_component`.
+ * managed by their canonical `components/<name>.tsx` path. Explicit change sets
+ * wrap all mutations, subtree duplication is first-class, and finishing is
+ * gated on inspecting a version-bound PNG preview.
  *
  * **Schema alignment**: each validated tool's `inputSchema` is derived at module
  * load from the SAME zod schema its dispatcher parses with, via `z.toJSONSchema`
@@ -63,6 +63,9 @@ const EMPTY_INPUT_SCHEMA: JsonSchema = {
  * `ai-shared`, so a batch validates against ONE definition on both surfaces.
  */
 const mcpToolSchemas = {
+  begin_paywall_edit: z.object({
+    slug: z.string().describe("Slug of the paywall to edit."),
+  }),
   get_paywall: z.object({
     slug: z.string().describe("Slug of the paywall to read (from list_paywalls)."),
     nodeId: z
@@ -90,6 +93,9 @@ const mcpToolSchemas = {
   }),
   edit_paywall: z.object({
     slug: z.string().describe("Slug of the paywall to edit."),
+    changeSetId: z
+      .string()
+      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
     edits: z
       .array(documentEditSchema)
       .min(1)
@@ -97,8 +103,21 @@ const mcpToolSchemas = {
         "Ordered batch of document edits, applied ATOMICALLY (all-or-nothing) against the LIVE document. Returns minted ids for inserts, or per-edit structured errors naming the offending node/field/value. Setting any background/border/shadow (or path fill/stroke) style field automatically sets the group's `*Enabled` flag to true; set it to `false` explicitly to hide the group non-destructively.",
       ),
   }),
+  duplicate_subtree: z.object({
+    slug: z.string().describe("Slug of the paywall to edit."),
+    changeSetId: z
+      .string()
+      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+    nodeId: z.string().describe("Id of the visual subtree to clone."),
+    parentId: z.string().describe("Id of the destination parent."),
+    index: z.number().int().optional().describe("Optional destination child index."),
+    nextName: z.string().optional().describe("Optional display name for the cloned root."),
+  }),
   write_component: z.object({
     slug: z.string().describe("Slug of the paywall to write the component into."),
+    changeSetId: z
+      .string()
+      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
     path: z
       .string()
       .describe(
@@ -108,15 +127,62 @@ const mcpToolSchemas = {
   }),
   rename_component: z.object({
     slug: z.string().describe("Slug of the paywall the component belongs to."),
+    changeSetId: z
+      .string()
+      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
     fromPath: z.string().describe("Existing component path (`components/<name>.tsx`)."),
     toPath: z
       .string()
-      .describe("New component path. Instances referencing the old path are re-pointed automatically."),
+      .describe(
+        "New component path. Instances referencing the old path are re-pointed automatically.",
+      ),
   }),
   delete_component: z.object({
     slug: z.string().describe("Slug of the paywall the component belongs to."),
+    changeSetId: z
+      .string()
+      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
     path: z.string().describe("Component path to delete (`components/<name>.tsx`)."),
   }),
+  get_paywall_preview: z.object({
+    slug: z.string().describe("Slug of the paywall to render."),
+    changeSetId: z
+      .string()
+      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+    width: z
+      .number()
+      .int()
+      .min(240)
+      .max(1440)
+      .optional()
+      .describe("Viewport width; defaults to 375."),
+    height: z
+      .number()
+      .int()
+      .min(240)
+      .max(1600)
+      .optional()
+      .describe("Viewport height; defaults to 812."),
+    scale: z
+      .union([z.literal(1), z.literal(2)])
+      .optional()
+      .describe("Device scale; defaults to 1."),
+  }),
+  finish_paywall_edit: z.object({
+    slug: z.string().describe("Slug of the paywall whose edit session should finish."),
+    changeSetId: z.string().describe("Active change-set id to finish."),
+    reviewedDocumentSignature: z
+      .string()
+      .describe("Exact documentSignature from the latest get_paywall_preview result."),
+    verdict: z.string().min(1).describe("Concise visual QA verdict based on the preview image."),
+    unresolvedIssues: z
+      .array(z.string())
+      .default([])
+      .describe("Any remaining visual issues. Must be empty to finish."),
+  }),
+  revert_paywall_edit: z.object({
+    changeSetId: z.string().describe("Change-set id whose complete edits should be reverted."),
+  }),
 } as const;
 
 /**
@@ -169,6 +235,12 @@ export const MCP_TOOLS: ReadonlyArray<McpTool> = [
     },
     dispatch: (scope) => WorkspaceTools.listPaywalls(scope),
   },
+  validatedTool(
+    "begin_paywall_edit",
+    "Begin an explicit edit session for one paywall. This captures a revert baseline and returns the changeSetId required by every mutation. Only one active change set is allowed per paywall; finish or revert it before starting another.",
+    mcpToolSchemas.begin_paywall_edit,
+    WorkspaceTools.beginPaywallEdit,
+  ),
   validatedTool(
     "get_paywall",
     "Read a paywall's LIVE document as cleaned JSON: a nested tree of `{ id, type, name?, ...data, children }` nodes with schema-default fields stripped. Every node has a stable `id` you address in edit_paywall. Pass `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes come back as stubs you can expand). `codeComponent` definitions come back with their `path` and a `sourceLength` only — the TSX source is NOT inlined; read it with read_component. Call this before editing to learn the current structure and ids.",
@@ -177,7 +249,7 @@ export const MCP_TOOLS: ReadonlyArray<McpTool> = [
   ),
   validatedTool(
     "get_components",
-    "List every component you can place in a paywall: CATALOG components (deployed, shared across the project) AND the paywall's LOCAL code components. Each entry carries its slug/path, version, and manifest (props schema, action list, preview states) — everything you need to insert a `component` node and bind its props/actions. A local component with no compiled manifest yet is listed with a note; read_component to see its source.",
+    "List every component you can place in a paywall: CATALOG components (deployed, shared across the project), the paywall's LOCAL code components, and BUILTIN primitives. Entries carry their slug/path and authoring contract (props, actions, preview states) plus the insertion identity. A local component with no compiled manifest yet is listed with a note; read_component to see its source.",
     mcpToolSchemas.get_components,
     WorkspaceTools.getComponents,
   ),
@@ -193,6 +265,12 @@ export const MCP_TOOLS: ReadonlyArray<McpTool> = [
     mcpToolSchemas.edit_paywall,
     WorkspaceTools.editPaywall,
   ),
+  validatedTool(
+    "duplicate_subtree",
+    "Duplicate an existing visual subtree under a destination parent. Engine-managed root/library/codeComponent nodes cannot be cloned. All cloned ids are freshly minted and returned by the underlying atomic edit.",
+    mcpToolSchemas.duplicate_subtree,
+    WorkspaceTools.duplicateSubtree,
+  ),
   validatedTool(
     "write_component",
     "Create-or-replace a LOCAL code component at `components/<name>.tsx` (its path is its identity). The source is COMPILED server-side first: on compile/runtime diagnostics nothing is committed and the diagnostics are returned — fix them and retry. On success the component is committed and becomes placeable via a `component` node (insert one with edit_paywall). Use for anything that is genuinely code (custom logic/layout), not for plain composition — compose visual structure with edit_paywall.",
@@ -211,6 +289,24 @@ export const MCP_TOOLS: ReadonlyArray<McpTool> = [
     mcpToolSchemas.delete_component,
     WorkspaceTools.deleteComponent,
   ),
+  validatedTool(
+    "get_paywall_preview",
+    "Render the current live paywall to a PNG and return it as MCP image content plus document version and signature. Visually inspect the image. A successful full preview is required before finish_paywall_edit, and any later document change invalidates it.",
+    mcpToolSchemas.get_paywall_preview,
+    WorkspaceTools.getPaywallPreview,
+  ),
+  validatedTool(
+    "finish_paywall_edit",
+    "Finish an active change set only after visual QA of its latest get_paywall_preview. Pass the exact document signature, a concise verdict, and an empty unresolvedIssues list. Stale or missing previews are rejected.",
+    mcpToolSchemas.finish_paywall_edit,
+    WorkspaceTools.finishPaywallEdit,
+  ),
+  validatedTool(
+    "revert_paywall_edit",
+    "Revert all edits in an active change set by reconciling the live paywall to the baseline captured by begin_paywall_edit, then mark the set reverted.",
+    mcpToolSchemas.revert_paywall_edit,
+    WorkspaceTools.revertPaywallEdit,
+  ),
 ];
 
 /** The advertised tool descriptors for `tools/list`. */
diff --git a/apps/backend/src/routes/mcp.test.ts b/apps/backend/src/routes/mcp.test.ts
new file mode 100644
index 000000000..4d21336d9
--- /dev/null
+++ b/apps/backend/src/routes/mcp.test.ts
@@ -0,0 +1,30 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { selectMcpProject } from "./mcp.ts";
+
+const projects = [
+  { id: "proj_1", slug: "alpha" },
+  { id: "proj_2", slug: "beta" },
+];
+
+describe("selectMcpProject", () => {
+  it("selects an authorized project by id or slug", () => {
+    expect(selectMcpProject(projects, "proj_2")).toEqual({ ok: true, project: projects[1] });
+    expect(selectMcpProject(projects, "alpha")).toEqual({ ok: true, project: projects[0] });
+  });
+
+  it("requires an explicit selector when a user has multiple projects", () => {
+    expect(selectMcpProject(projects, undefined)).toMatchObject({
+      ok: false,
+      status: 400,
+    });
+  });
+
+  it("defaults only when exactly one project is accessible", () => {
+    expect(selectMcpProject([projects[0]!], undefined)).toEqual({
+      ok: true,
+      project: projects[0],
+    });
+    expect(selectMcpProject([], undefined)).toMatchObject({ ok: false, status: 403 });
+  });
+});
diff --git a/apps/backend/src/routes/mcp.ts b/apps/backend/src/routes/mcp.ts
index e02966a2a..d5864ff4e 100644
--- a/apps/backend/src/routes/mcp.ts
+++ b/apps/backend/src/routes/mcp.ts
@@ -1,23 +1,17 @@
 /**
  * Model Context Protocol endpoint — `POST /api/mcp` (streamable HTTP, STATELESS).
  *
- * Exposes the paywall workspace to MCP clients (Claude Code, the voidhash CLI)
- * as JSON-RPC 2.0 `tools/*`: the stateless, document-first workspace tools
- * (`list_paywalls`, `get_paywall`, `get_components`, `read_component`,
- * `edit_paywall`, `write_component`, `rename_component`, `delete_component`)
- * from the shared tool core (`ai/workspace-tools.ts`).
+ * Exposes the paywall workspace to MCP clients as JSON-RPC 2.0 tools, resources,
+ * and prompts. The tools use the stateless, document-first implementation in
+ * `ai/workspace-tools.ts`; the authoring resource and prompt teach clients the
+ * same schema-derived workflow.
  *
- * **Auth (v1 API keys → service authz).** The endpoint authenticates with
- * `Authorization: Bearer <secret key>`, validated by the SAME
- * {@link ApiKeyService.validateSecretKey} the v1 API's `x-secret-key` path uses.
- * A voidhash secret key is already PROJECT-scoped, so the key alone determines
- * the workspace scope — MCP tools take no `projectId` argument. From the
- * validated `{ project }` we construct the exact {@link SecretKeySession} the v1
- * middleware builds for a secret key (a real {@link AuthSession} with that one
- * project), and provide it for the request. {@link PaywallWorkspaceService} then
- * runs its normal `PaywallService.getPaywalls(projectId)` project-membership
- * check against that session — no fake super-session, no authz bypass; the same
- * seam every v1 secret-key handler already uses.
+ * **Auth.** `Authorization: Bearer <token>` accepts either a project-scoped
+ * secret key or a CLI user key. A secret key selects its project directly. A
+ * user key uses `X-Voidhash-Project` (id or slug), unless the user can access
+ * exactly one project. Both paths construct a normal {@link AuthSession}, so
+ * `PaywallWorkspaceService` performs its ordinary membership checks and
+ * MCP tools never accept a caller-controlled `projectId` argument.
  *
  * **Stateless transport.** Each POST is answered with a single JSON response (or
  * 202 for a notification). No SSE stream, no session ids, no server-initiated
@@ -26,11 +20,9 @@
  * no stream to open and no session to terminate). Malformed JSON → 400; missing
  * or invalid bearer → 401 with a `WWW-Authenticate` header.
  *
- * Resources are not offered this increment (tools cover the workflow) — see the
- * architecture doc §3.6 follow-ups.
  */
-import { ApiKeyService, PaywallWorkspaceService } from "@voidhash/core/services";
-import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { ApiKeyService, LocalUserSessionService } from "@voidhash/core/services";
+import { AuthSession, type AnyAuthSession } from "@voidhash/core/domain/auth/Auth";
 import type { SecretKeySession } from "@voidhash/rpc";
 import { Cause, Effect, Layer, Result } from "effect";
 import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
@@ -64,6 +56,48 @@ const bearerToken = (headers: HttpHeaders.Headers): string | undefined => {
   return match ? match[1].trim() : undefined;
 };
 
+const headerValue = (headers: HttpHeaders.Headers, name: string): string | undefined => {
+  const value = HttpHeaders.get(headers, name);
+  return value._tag === "Some" && value.value.trim().length > 0 ? value.value.trim() : undefined;
+};
+
+/** Selects an authorized MCP project without allowing a user key to widen its session. */
+export const selectMcpProject = <Project extends { readonly id: string; readonly slug: string }>(
+  projects: ReadonlyArray<Project>,
+  selector: string | undefined,
+):
+  | { readonly ok: true; readonly project: Project }
+  | { readonly ok: false; readonly status: 400 | 403; readonly message: string } => {
+  if (selector !== undefined) {
+    const project = projects.find(
+      (candidate) => candidate.id === selector || candidate.slug === selector,
+    );
+    return project === undefined
+      ? {
+          ok: false,
+          status: 403,
+          message: `The authenticated user cannot access project "${selector}".`,
+        }
+      : { ok: true, project };
+  }
+  if (projects.length === 1) {
+    return { ok: true, project: projects[0]! };
+  }
+  if (projects.length === 0) {
+    return {
+      ok: false,
+      status: 403,
+      message: "The authenticated user has no accessible projects.",
+    };
+  }
+  return {
+    ok: false,
+    status: 400,
+    message:
+      "The authenticated user has multiple projects. Set the X-Voidhash-Project header to a project id or slug.",
+  };
+};
+
 /**
  * Construct the {@link SecretKeySession} for a validated project — byte-for-byte
  * the shape the v1 `authenticateSecretKey` middleware builds — so the workspace
@@ -114,43 +148,64 @@ const makeCallTool =
 const handlePost = Effect.gen(function* () {
   const request = yield* HttpServerRequest.HttpServerRequest;
 
-  // 1. Auth: require a Bearer secret key, validate it via the shared service.
+  // 1. Auth: require a Bearer project or user key, validated by the shared service.
   const token = bearerToken(request.headers);
   if (token === undefined) {
     return HttpServerResponse.setHeader(
-      yield* jsonRpcErrorResponse(
-        401,
-        JsonRpcErrorCode.InvalidRequest,
-        "Missing bearer token",
-      ),
+      yield* jsonRpcErrorResponse(401, JsonRpcErrorCode.InvalidRequest, "Missing bearer token"),
       "www-authenticate",
       WWW_AUTHENTICATE,
     );
   }
 
   const apiKeys = yield* ApiKeyService;
-  const validated = yield* Effect.result(apiKeys.validateSecretKey(token));
-  if (Result.isFailure(validated)) {
-    return HttpServerResponse.setHeader(
-      yield* jsonRpcErrorResponse(
-        401,
+  const validatedSecret = yield* Effect.result(apiKeys.validateSecretKey(token));
+  let session: AnyAuthSession;
+  let scope: WorkspaceToolScope;
+  if (Result.isSuccess(validatedSecret)) {
+    const record = validatedSecret.success;
+    session = secretKeySessionForProject({
+      id: record.project.id,
+      name: record.project.name,
+      organizationId: record.project.organizationId,
+      slug: record.project.slug,
+    });
+    scope = { projectId: record.project.id };
+  } else {
+    const validatedUser = yield* Effect.result(apiKeys.validateUserApiKey(token));
+    if (Result.isFailure(validatedUser)) {
+      return HttpServerResponse.setHeader(
+        yield* jsonRpcErrorResponse(
+          401,
+          JsonRpcErrorCode.InvalidRequest,
+          "Invalid or expired API key",
+        ),
+        "www-authenticate",
+        WWW_AUTHENTICATE,
+      );
+    }
+    const localUserSessions = yield* LocalUserSessionService;
+    const access = yield* localUserSessions.loadUserAccess(validatedUser.success.user.id);
+    const selection = selectMcpProject(
+      access.projects,
+      headerValue(request.headers, "x-voidhash-project"),
+    );
+    if (!selection.ok) {
+      return yield* jsonRpcErrorResponse(
+        selection.status,
         JsonRpcErrorCode.InvalidRequest,
-        "Invalid or expired API key",
-      ),
-      "www-authenticate",
-      WWW_AUTHENTICATE,
+        selection.message,
+      );
+    }
+    const userSession = localUserSessions.toUserSession(
+      validatedUser.success.user,
+      access,
+      null,
+      null,
     );
+    session = { ...userSession, projects: [selection.project] } as unknown as AnyAuthSession;
+    scope = { projectId: selection.project.id };
   }
-  const record = validated.success;
-  const session = secretKeySessionForProject({
-    id: record.project.id,
-    name: record.project.name,
-    organizationId: record.project.organizationId,
-    slug: record.project.slug,
-  });
-  // MCP is stateless and document-first — every tool reads/edits the LIVE
-  // document directly, so the scope is just the authenticated project.
-  const scope: WorkspaceToolScope = { projectId: record.project.id };
 
   // 2. Parse the JSON body → JSON-RPC message.
   const rawBody = yield* request.text;
@@ -174,7 +229,7 @@ const handlePost = Effect.gen(function* () {
   }
 
   // 3. Dispatch the message against the authenticated project scope. The tool
-  //    effects are AuthSession-bound; provide the constructed secret-key session.
+  //    effects are AuthSession-bound; provide the constructed scoped session.
   const response: JsonRpcResponse | null = yield* handleMcpMessage(
     parsed.message,
     makeCallTool(scope),
@@ -189,7 +244,11 @@ const handlePost = Effect.gen(function* () {
 
 /** `GET`/`DELETE` on the stateless endpoint: no stream, no session → 405. */
 const methodNotAllowed = HttpServerResponse.json(
-  { jsonrpc: "2.0", id: null, error: { code: JsonRpcErrorCode.InvalidRequest, message: "Method Not Allowed" } },
+  {
+    jsonrpc: "2.0",
+    id: null,
+    error: { code: JsonRpcErrorCode.InvalidRequest, message: "Method Not Allowed" },
+  },
   { status: 405, headers: { allow: "POST" } },
 );
 
@@ -202,11 +261,7 @@ const registerMcpRoute = Effect.gen(function* () {
       Effect.catchCause((cause) =>
         Effect.gen(function* () {
           yield* Effect.logError(`MCP request error: ${Cause.pretty(cause)}`);
-          return yield* jsonRpcErrorResponse(
-            500,
-            JsonRpcErrorCode.InternalError,
-            "Internal error",
-          );
+          return yield* jsonRpcErrorResponse(500, JsonRpcErrorCode.InternalError, "Internal error");
         }),
       ),
     ),
@@ -217,9 +272,9 @@ const registerMcpRoute = Effect.gen(function* () {
 
 /**
  * Registers `POST /api/mcp` (+ 405 on GET/DELETE). The request-scoped
- * requirements — {@link ApiKeyService}, {@link PaywallWorkspaceService}, `Db`
- * (for key validation) — are satisfied via `HttpRouter.provideRequest` by the
- * caller (`BackendApp`), mirroring the AI chat and webhook routes. `AuthSession`
- * is provided in-handler from the validated secret key.
+ * requirements — {@link ApiKeyService}, workspace services, and `Db` (for key
+ * validation) — are satisfied via `HttpRouter.provideRequest` by the caller
+ * (`BackendApp`), mirroring the AI chat and webhook routes. `AuthSession` is
+ * provided in-handler from the validated project or user key.
  */
 export const McpRouteLayer = Layer.effectDiscard(registerMcpRoute);
diff --git a/apps/backend/src/rpc-smoke.integration.test.ts b/apps/backend/src/rpc-smoke.integration.test.ts
index 0643e032b..8eda92f78 100644
--- a/apps/backend/src/rpc-smoke.integration.test.ts
+++ b/apps/backend/src/rpc-smoke.integration.test.ts
@@ -42,6 +42,7 @@ import {
   BackendPaywallArtifactStoreStubLive,
   BackendPaywallAssetConfigLive,
   BackendPublicFileStoreStubLive,
+  BackendSnapshotImageRendererStubLive,
   NoBackendFeatures,
   NoBackendRpcExtension,
   buildBackendFetch,
@@ -132,6 +133,7 @@ const makeRpcInfra = (tc: BackendTestConnections) =>
     TestWorkosOrgPortLive,
     BackendMimicHostStubLive,
     BackendComponentCompilerStubLive,
+    BackendSnapshotImageRendererStubLive,
     BackendPaymentProviderStubsLive,
     BackendPaywallAssetConfigLive,
     SmokePaywallArtifactStoreLive,
@@ -152,6 +154,7 @@ const makeWebhookInfra = (tc: BackendTestConnections) =>
     TestWorkosOrgPortLive,
     BackendMimicHostStubLive,
     BackendComponentCompilerStubLive,
+    BackendSnapshotImageRendererStubLive,
     BackendPaymentProviderStubsLive,
     BackendPaywallAssetConfigLive,
     BackendPaywallArtifactStoreStubLive,
@@ -367,11 +370,7 @@ const makeOrganizationMembershipCreatedEvent = (ids: ReturnType<typeof makeSmoke
  * built handler (provide the workflow-port no-ops to both the build and the
  * per-request handler).
  */
-const requestBackend = (
-  tc: BackendTestConnections,
-  path: string,
-  init: RequestInit,
-) =>
+const requestBackend = (tc: BackendTestConnections, path: string, init: RequestInit) =>
   Effect.scoped(
     Effect.gen(function* () {
       const handler = yield* buildBackendFetch({
diff --git a/apps/backend/src/testing/TestLayers.ts b/apps/backend/src/testing/TestLayers.ts
index ba60fc5b0..ee398b577 100644
--- a/apps/backend/src/testing/TestLayers.ts
+++ b/apps/backend/src/testing/TestLayers.ts
@@ -37,6 +37,7 @@ import {
   BackendPaywallArtifactStoreStubLive,
   BackendPaywallAssetConfigLive,
   BackendPublicFileStoreStubLive,
+  BackendSnapshotImageRendererStubLive,
 } from "../BackendApp.ts";
 import { smokeIdsFromEmail } from "./smoke-ids.ts";
 
@@ -537,6 +538,7 @@ export const TestBackendStubInfrastructureLive = Layer.mergeAll(
   TestWorkosOrgPortLive,
   BackendMimicHostStubLive,
   BackendComponentCompilerStubLive,
+  BackendSnapshotImageRendererStubLive,
   BackendPaywallAssetConfigLive,
   BackendPaywallArtifactStoreStubLive,
   BackendPublicFileStoreStubLive,
diff --git a/apps/cli/src/cli/commands/auth-token.ts b/apps/cli/src/cli/commands/auth-token.ts
new file mode 100644
index 000000000..ba595f36a
--- /dev/null
+++ b/apps/cli/src/cli/commands/auth-token.ts
@@ -0,0 +1,37 @@
+import { Console, Effect } from "effect";
+import { Command, Flag } from "effect/unstable/cli";
+
+import { CliConfig } from "../../domain/services/cli-config";
+import { userError } from "../../utils/error-formatter";
+
+const projectFlag = Flag.string("project").pipe(
+  Flag.withDescription("Project id or slug for MCP requests"),
+  Flag.withDefault(""),
+);
+
+/** Builds the JSON object expected from a Claude Code MCP headers helper. */
+export const buildMcpHeaders = (
+  apiKey: string,
+  project: string | undefined,
+): Record<string, string> => ({
+  Authorization: `Bearer ${apiKey}`,
+  ...(project === undefined || project.length === 0 ? {} : { "X-Voidhash-Project": project }),
+});
+
+/** Prints authenticated MCP request headers without exposing them as arguments. */
+export const authTokenCommand = Command.make("token", { project: projectFlag }, ({ project }) =>
+  Effect.gen(function* authTokenCommand() {
+    const cliConfig = yield* CliConfig;
+    const config = yield* cliConfig.readConfig();
+    if (config.api_key === null || config.api_key === undefined || config.api_key.length === 0) {
+      return yield* Effect.fail(
+        userError("You must be logged in. Run 'voidhash-cli auth login' first."),
+      );
+    }
+    const selectedProject =
+      project.trim() ||
+      process.env.CLAUDE_PLUGIN_OPTION_PROJECT?.trim() ||
+      process.env.VOIDHASH_PROJECT?.trim();
+    yield* Console.log(JSON.stringify(buildMcpHeaders(config.api_key, selectedProject)));
+  }),
+).pipe(Command.withDescription("Print MCP connection headers from the current CLI login."));
diff --git a/apps/cli/src/cli/commands/auth.ts b/apps/cli/src/cli/commands/auth.ts
index 3976fe4a8..f1ad08c4d 100644
--- a/apps/cli/src/cli/commands/auth.ts
+++ b/apps/cli/src/cli/commands/auth.ts
@@ -4,6 +4,7 @@ import { Effect } from "effect";
 import { loginCommand } from "./auth-login";
 import { logoutCommand } from "./auth-logout";
 import { authStatusCommand } from "./auth-status";
+import { authTokenCommand } from "./auth-token";
 
 export const authCommand = Command.make("auth", {}, () =>
   Effect.gen(function* authCommand() {
@@ -11,5 +12,5 @@ export const authCommand = Command.make("auth", {}, () =>
   }),
 ).pipe(
   Command.withDescription("Manage the Voidhash authentication."),
-  Command.withSubcommands([loginCommand, logoutCommand, authStatusCommand]),
+  Command.withSubcommands([loginCommand, logoutCommand, authStatusCommand, authTokenCommand]),
 );
diff --git a/apps/cli/tests/auth-token.test.ts b/apps/cli/tests/auth-token.test.ts
new file mode 100644
index 000000000..69f81bc92
--- /dev/null
+++ b/apps/cli/tests/auth-token.test.ts
@@ -0,0 +1,15 @@
+import { describe, expect, it } from "vitest";
+
+import { buildMcpHeaders } from "../src/cli/commands/auth-token";
+
+describe("buildMcpHeaders", () => {
+  it("emits bearer authorization and an optional project selector", () => {
+    expect(buildMcpHeaders("vh_cli_secret", "project-slug")).toEqual({
+      Authorization: "Bearer vh_cli_secret",
+      "X-Voidhash-Project": "project-slug",
+    });
+    expect(buildMcpHeaders("vh_cli_secret", undefined)).toEqual({
+      Authorization: "Bearer vh_cli_secret",
+    });
+  });
+});
diff --git a/docs/security/backend-threat-model.md b/docs/security/backend-threat-model.md
index d4263682e..6d74be2b4 100644
--- a/docs/security/backend-threat-model.md
+++ b/docs/security/backend-threat-model.md
@@ -73,8 +73,9 @@ Current controls:
   is loaded from server-side membership state.
 - Project secret keys establish a session containing only their project.
   Publishable keys establish an SDK identity with no management permissions.
-- MCP accepts only a Bearer project secret key and constructs the same
-  project-scoped session used by the HTTP API.
+- MCP accepts a Bearer project secret key or user API key and constructs the
+  corresponding project-scoped session used by the HTTP API. User-key project
+  selection is restricted to the key owner's current memberships.
 - Authentication failures collapse to non-authenticated or generic internal
   errors rather than returning stored credential details.
 
diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index 494cb91bb..606e1728e 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -100,7 +100,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Surface | Principal or capability | Authorization/authenticity boundary | Status |
 | --- | --- | --- | --- |
 | `/rpc` | User API key, project secret key, or WorkOS session | Shared auth middleware creates the session consumed by every RPC. | Covered by RPC smoke and service evidence above |
-| `/api/mcp` | Bearer project secret key | Key lookup creates a single-project session; workspace services re-check the requested paywall/project. | Route/protocol tests plus integrated cross-project workspace evidence |
+| `/api/mcp` | Bearer project secret key or user API key | Secret keys select their project directly. User keys select an accessible project by header, or default only when exactly one is accessible. Workspace services re-check the requested paywall/project. | Route/protocol tests plus integrated cross-project workspace evidence |
 | `/api/ai/chat` | Authenticated user/session token | Token verifier and project-scoped chat/workspace services. | Route/tool tests plus integrated chat/workspace evidence |
 | `/i/v1/capture`, `/i/v1/batch` | Publishable project token | Token resolves the project; processing rejects route/project mismatch and reserved events. | Integrated |
 | Stripe webhook | Provider signature over exact raw body and timestamp | Configuration lookup is tied to the route ID; ledger IDs deduplicate. | Integrated |
diff --git a/integrations/claude-code/voidhash-paywalls/.claude-plugin/plugin.json b/integrations/claude-code/voidhash-paywalls/.claude-plugin/plugin.json
new file mode 100644
index 000000000..99819a22c
--- /dev/null
+++ b/integrations/claude-code/voidhash-paywalls/.claude-plugin/plugin.json
@@ -0,0 +1,12 @@
+{
+  "name": "voidhash-paywalls",
+  "version": "0.1.0",
+  "description": "Design and visually verify Voidhash paywalls from Claude Code.",
+  "author": {
+    "name": "Voidhash"
+  },
+  "homepage": "https://voidhash.com",
+  "repository": "https://github.com/voidhashcom/voidhash",
+  "license": "MIT",
+  "keywords": ["paywalls", "design", "mcp"]
+}
diff --git a/integrations/claude-code/voidhash-paywalls/.mcp.json b/integrations/claude-code/voidhash-paywalls/.mcp.json
new file mode 100644
index 000000000..cd72593bf
--- /dev/null
+++ b/integrations/claude-code/voidhash-paywalls/.mcp.json
@@ -0,0 +1,9 @@
+{
+  "mcpServers": {
+    "voidhash-paywalls": {
+      "type": "http",
+      "url": "https://api.voidhash.com/api/mcp",
+      "headersHelper": "${CLAUDE_PLUGIN_ROOT}/bin/voidhash-mcp-headers"
+    }
+  }
+}
diff --git a/integrations/claude-code/voidhash-paywalls/README.md b/integrations/claude-code/voidhash-paywalls/README.md
new file mode 100644
index 000000000..71138b448
--- /dev/null
+++ b/integrations/claude-code/voidhash-paywalls/README.md
@@ -0,0 +1,32 @@
+# Voidhash paywalls for Claude Code
+
+This plugin connects Claude Code to the hosted Voidhash paywall MCP server and adds a visually verified authoring workflow.
+
+## Prerequisites
+
+Install `voidhash-cli` and authenticate once:
+
+```sh
+voidhash-cli auth login
+```
+
+If the account can access multiple projects, set the project id or slug before starting Claude Code:
+
+```sh
+export VOIDHASH_PROJECT=my-project
+```
+
+The plugin obtains request headers from `voidhash-cli auth token` whenever the MCP connection starts. It does not require a separate API key in plugin configuration.
+
+## Codex
+
+Codex can connect to the same streamable HTTP endpoint directly. Put the user API key in an environment variable, then add this to `~/.codex/config.toml` or a trusted project's `.codex/config.toml`:
+
+```toml
+[mcp_servers.voidhash_paywalls]
+url = "https://api.voidhash.com/api/mcp"
+bearer_token_env_var = "VOIDHASH_MCP_TOKEN"
+env_http_headers = { "X-Voidhash-Project" = "VOIDHASH_PROJECT" }
+```
+
+Set `VOIDHASH_MCP_TOKEN` to the authenticated user API key. Set `VOIDHASH_PROJECT` to a project id or slug when the account can access multiple projects; if it can access exactly one, the `env_http_headers` line may be omitted.
diff --git a/integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers b/integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers
new file mode 100755
index 000000000..095df2378
--- /dev/null
+++ b/integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers
@@ -0,0 +1,8 @@
+#!/usr/bin/env sh
+set -eu
+
+if [ -n "${CLAUDE_PLUGIN_OPTION_PROJECT:-}" ]; then
+  exec voidhash-cli auth token --project "${CLAUDE_PLUGIN_OPTION_PROJECT}"
+fi
+
+exec voidhash-cli auth token
diff --git a/integrations/claude-code/voidhash-paywalls/skills/design-paywall/SKILL.md b/integrations/claude-code/voidhash-paywalls/skills/design-paywall/SKILL.md
new file mode 100644
index 000000000..d5cdde045
--- /dev/null
+++ b/integrations/claude-code/voidhash-paywalls/skills/design-paywall/SKILL.md
@@ -0,0 +1,30 @@
+---
+name: design-paywall
+description: Design, edit, preview, visually review, finish, or revert a Voidhash paywall through the Voidhash MCP server.
+---
+
+# Design a Voidhash paywall
+
+Use the `voidhash-paywalls` MCP server for all paywall operations.
+
+Before editing:
+
+1. Read `voidhash://paywall-authoring/reference` for the schema-derived authoring rules.
+2. Call `list_paywalls`, then `begin_paywall_edit` for the selected slug.
+3. Keep the returned `changeSetId` and pass it to every mutation and preview call.
+4. Read the current structure with `get_paywall` and available catalog, local, and builtin components with `get_components`.
+5. If the user provides an inspiration URL and browser tools are available, inspect it for visual context before editing. Browser context is optional and must never block the MCP workflow.
+
+While editing:
+
+- Prefer `edit_paywall` for visual composition and atomic batches.
+- Use `duplicate_subtree` when an existing section is the right starting point.
+- Use local component tools only when custom TSX behavior is genuinely needed. A write is not committed unless server-side compilation succeeds.
+- After meaningful sections, call `get_paywall_preview` and inspect the returned image for hierarchy, spacing, clipping, legibility, and viewport fit.
+
+Before stopping:
+
+1. Render a final full preview and inspect the actual image.
+2. Fix every visible issue and render again after the last mutation.
+3. Call `finish_paywall_edit` with the exact latest `documentSignature`, a concise visual verdict, and an empty `unresolvedIssues` list.
+4. If the result should be discarded, call `revert_paywall_edit` instead. Never abandon an active change set.
diff --git a/packages/core/src/services/index.ts b/packages/core/src/services/index.ts
index 84571dc8a..4d62ad700 100644
--- a/packages/core/src/services/index.ts
+++ b/packages/core/src/services/index.ts
@@ -101,6 +101,7 @@ export * from "./paywalls/MimicHost.ts";
 export * from "./paywalls/PaywallService.ts";
 export * from "./paywallWorkspace/ComponentCompiler.ts";
 export * from "./paywallWorkspace/ComponentManifestCacheService.ts";
+export * from "./paywallWorkspace/PaywallEditChangeSetService.ts";
 export * from "./paywallWorkspace/PaywallWorkspaceService.ts";
 export * from "./perkGrants/PerkGrantService.ts";
 export * from "./perks/PerkService.ts";
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
index ab4244185..b762cd864 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
@@ -150,6 +150,7 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
 
           const png = yield* renderer.render({
             componentTrees,
+            localComponentTrees: {},
             deviceScaleFactor: THUMBNAIL_DEVICE_SCALE_FACTOR,
             height: THUMBNAIL_HEIGHT,
             snapshot,
diff --git a/packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts b/packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts
index 79bb9341b..6a5665061 100644
--- a/packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts
+++ b/packages/core/src/services/paywallThumbnails/SnapshotImageRenderer.ts
@@ -27,6 +27,8 @@ export interface SnapshotImageRenderInput {
    * expects. Component nodes without a matching tree render as placeholders.
    */
   readonly componentTrees: Record<string, Record<string, unknown>>;
+  /** Preview trees for local components, keyed by document-relative component path. */
+  readonly localComponentTrees: Record<string, Record<string, unknown>>;
   /** Viewport width in CSS pixels. */
   readonly width: number;
   /** Viewport height in CSS pixels. */
@@ -38,8 +40,8 @@ export interface SnapshotImageRenderInput {
 export interface SnapshotImageRendererShape {
   /**
    * Renders a paywall document snapshot to PNG bytes: composes the snapshot (and
-   * its component preview trees) into a self-contained, non-hydrated HTML
-   * document, then rasterizes it in a headless browser.
+   * its deployed and local component preview trees) into a self-contained,
+   * non-hydrated HTML document, then rasterizes it in a headless browser.
    */
   readonly render: (
     input: SnapshotImageRenderInput,
diff --git a/packages/core/src/services/paywallWorkspace/ComponentCompiler.ts b/packages/core/src/services/paywallWorkspace/ComponentCompiler.ts
index 87e264ba2..029df4714 100644
--- a/packages/core/src/services/paywallWorkspace/ComponentCompiler.ts
+++ b/packages/core/src/services/paywallWorkspace/ComponentCompiler.ts
@@ -32,9 +32,9 @@ export type ComponentCompileDiagnostic = ComponentManifestDiagnostic;
  *   `ready` compile-check therefore carries no manifest.
  * - `error` — the source failed to transform; `diagnostics` carries the
  *   line/col-mapped compile errors.
- * - `unavailable` — this runtime has no usable compiler (e.g. the deployed
- *   workerd worker, where esbuild-wasm has no wasm binding). Callers treat this
- *   as "diagnostics could not be computed here", distinct from "compiled clean".
+ * - `unavailable` — this runtime has no usable compiler or its isolated compiler
+ *   transport is unavailable. Callers treat this as "diagnostics could not be
+ *   computed here", distinct from "compiled clean".
  */
 export type CompileCheckResult =
   | { readonly status: "ready" }
@@ -47,9 +47,10 @@ export type CompileCheckResult =
  * TSX, evaluate the compiled CJS, then run `extractComponentManifest` over the
  * exported {@link ComponentDefinition}.
  *
- * - `ready` — the source compiled AND a manifest was extracted. `manifest` is
- *   the raw (unvalidated) `ComponentManifest` object; callers validate it
- *   against the core `ComponentManifestSchema` before persisting.
+ * - `ready` — the source compiled, a manifest was extracted, and every declared
+ *   preview state was rendered. `manifest` is the raw (unvalidated)
+ *   `ComponentManifest` object; `previewTrees` contains the renderer-ready tree
+ *   for each preview state.
  * - `error` — the pass failed; `phase` discriminates *where*: `"compile"` is a
  *   syntax/TS transform failure (identical to {@link CompileCheckResult}'s
  *   `error`), `"runtime"` is any throw during evaluation/extraction of the user
@@ -57,10 +58,14 @@ export type CompileCheckResult =
  *   `extractComponentManifest` assertion). `diagnostics` carries the mapped
  *   messages. User-code exceptions are ALWAYS captured here — they never escape
  *   onto the error channel.
- * - `unavailable` — this runtime has no compiler (the deployed workerd worker).
+ * - `unavailable` — this runtime has no usable compiler or compiler transport.
  */
 export type CompileExtractResult =
-  | { readonly status: "ready"; readonly manifest: unknown }
+  | {
+      readonly status: "ready";
+      readonly manifest: unknown;
+      readonly previewTrees: Readonly<Record<string, unknown>>;
+    }
   | {
       readonly status: "error";
       readonly phase: "compile" | "runtime";
@@ -69,26 +74,15 @@ export type CompileExtractResult =
   | { readonly status: "unavailable" };
 
 /**
- * Provider-agnostic port for the headless component compiler (§3.4 Compile
- * Service, Increment 3). It mirrors the *compile phase* of the browser's
- * `CompilePipeline` — the esbuild `transform` that reports syntax/TS
- * diagnostics — without any user-code execution.
- *
- * **This increment is the compile phase only.** Manifest extraction
- * (`extractComponentManifest`) evaluates untrusted user code and must run inside
- * an isolation boundary (a Cloudflare Container / WFP dispatch — §3.4 item 2, §8
- * open question 2); it is intentionally NOT part of this port yet. The port is
- * shaped so a future `extractManifest(source) → { manifest, diagnostics } |
- * unavailable` method can be added WITHOUT reshaping callers: `compileCheck`
- * already returns a discriminated result with an `unavailable` arm, so an
- * `extractManifest` returning the same three-way outcome slots in beside it.
+ * Provider-agnostic port for headless component compilation. It supports a
+ * transform-only diagnostic pass and a full pass that evaluates the compiled
+ * definition, extracts its manifest, and renders its preview states.
  *
  * Adapters (wired by the application root, keeping the toolchain out of
  * `packages/core`):
- * - a **native-esbuild** adapter for Node (tests, future CLI/container reuse);
- * - an **unavailable** adapter for the deployed workerd worker, which returns
- *   `{ status: "unavailable" }` so headless diagnostics degrade cleanly until
- *   the container-isolated service lands.
+ * - a **native-esbuild** adapter for Node and self-hosted runtimes;
+ * - a container-backed adapter for the deployed worker;
+ * - an **unavailable** adapter for runtimes without either toolchain.
  *
  * The seam is identical to callers regardless of which adapter is wired: a
  * caller never learns whether the compiler ran or was absent beyond the
@@ -115,9 +109,9 @@ export interface ComponentCompilerShape {
    * source: transform (same settings as {@link compileCheck}), evaluate the
    * compiled CJS through a module shim, locate the exported
    * `ComponentDefinition` and run `extractComponentManifest` over it. Returns a
-   * {@link CompileExtractResult}: `ready` with the raw manifest on success,
-   * `error` with a `phase` (`"compile"` vs `"runtime"`) on failure, or
-   * `unavailable` when this runtime has no compiler.
+   * {@link CompileExtractResult}: `ready` with the raw manifest and rendered
+   * preview trees on success, `error` with a `phase` (`"compile"` vs
+   * `"runtime"`) on failure, or `unavailable` when this runtime has no compiler.
    *
    * Unlike {@link compileCheck}, this evaluates untrusted user code; every
    * user-code exception (module-scope throw, missing/invalid export, extraction
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
new file mode 100644
index 000000000..c4a9fd08c
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
@@ -0,0 +1,162 @@
+import { Db, PaywallEditChangeSetStatus } from "@voidhash/db";
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  PaywallEditChangeSetService,
+  PaywallEditChangeSetConflictError,
+} from "./PaywallEditChangeSetService.ts";
+import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
+
+interface ChangeSetRow {
+  id: string;
+  projectId: string;
+  paywallId: string;
+  paywallSlug: string;
+  baselineTree: unknown;
+  baselineVersion: number;
+  status: "active" | "finished" | "reverted";
+  lastPreviewSignature: string | null;
+  lastPreviewVersion: number | null;
+  reviewVerdict: string | null;
+  finishedAt: Date | null;
+}
+
+const makeLayers = () => {
+  const rows: ChangeSetRow[] = [];
+  const reverted: unknown[] = [];
+  const db = {
+    query: {
+      paywallEditChangeSets: {
+        findFirst: ({ where }: { where: Partial<ChangeSetRow> }) =>
+          Effect.succeed(
+            rows.find((row) =>
+              Object.entries(where).every(([key, value]) =>
+                value === undefined ? true : row[key as keyof ChangeSetRow] === value,
+              ),
+            ),
+          ),
+      },
+    },
+    insert: () => ({
+      values: (
+        value: Omit<
+          ChangeSetRow,
+          "lastPreviewSignature" | "lastPreviewVersion" | "reviewVerdict" | "finishedAt"
+        >,
+      ) =>
+        Effect.sync(() => {
+          rows.push({
+            ...value,
+            lastPreviewSignature: null,
+            lastPreviewVersion: null,
+            reviewVerdict: null,
+            finishedAt: null,
+          });
+        }),
+    }),
+    update: () => ({
+      set: (patch: Partial<ChangeSetRow>) => ({
+        where: () =>
+          Effect.sync(() => {
+            Object.assign(rows[0]!, patch);
+          }),
+      }),
+    }),
+  };
+  const workspace = {
+    readDocument: () =>
+      Effect.succeed({
+        slug: "trial",
+        name: "Trial",
+        paywallId: "pw_1",
+        tree: { encoded: "baseline" },
+        root: { id: "root_1", type: "root", children: [] },
+        version: 4,
+      }),
+    revertDocument: (_paywallId: string, tree: unknown) =>
+      Effect.sync(() => {
+        reverted.push(tree);
+        return { version: 8, commandCount: 2 };
+      }),
+  } as unknown as PaywallWorkspaceService["Service"];
+  const layer = PaywallEditChangeSetService.layer.pipe(
+    Layer.provide(Layer.succeed(Db, db as never)),
+    Layer.provide(Layer.succeed(PaywallWorkspaceService, workspace)),
+    Layer.provideMerge(Layer.succeed(AuthSession, {} as never)),
+  );
+  return { layer, rows, reverted };
+};
+
+describe("PaywallEditChangeSetService", () => {
+  it("captures one active baseline and rejects a second begin", async () => {
+    const { layer, rows } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditChangeSetService;
+        const started = yield* service.begin("proj_1", "trial");
+        expect(started.baselineVersion).toBe(4);
+        expect(rows[0]?.baselineTree).toEqual({ encoded: "baseline" });
+        const conflict = yield* Effect.flip(service.begin("proj_1", "trial"));
+        expect(conflict).toBeInstanceOf(PaywallEditChangeSetConflictError);
+      }).pipe(Effect.provide(layer)),
+    );
+  });
+
+  it("finishes only when the latest preview matches the current document", async () => {
+    const { layer, rows } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditChangeSetService;
+        const started = yield* service.begin("proj_1", "trial");
+        yield* service.recordPreview({
+          projectId: "proj_1",
+          changeSetId: started.id,
+          paywallSlug: "trial",
+          documentSignature: "doc-current",
+          documentVersion: 7,
+        });
+        const stale = yield* Effect.flip(
+          service.finish({
+            projectId: "proj_1",
+            changeSetId: started.id,
+            paywallSlug: "trial",
+            reviewedDocumentSignature: "doc-current",
+            currentDocumentSignature: "doc-newer",
+            currentDocumentVersion: 8,
+            verdict: "Looks good",
+          }),
+        );
+        expect(stale).toBeInstanceOf(PaywallEditChangeSetConflictError);
+        yield* service.finish({
+          projectId: "proj_1",
+          changeSetId: started.id,
+          paywallSlug: "trial",
+          reviewedDocumentSignature: "doc-current",
+          currentDocumentSignature: "doc-current",
+          currentDocumentVersion: 7,
+          verdict: "Looks good",
+        });
+        expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.finished);
+        expect(rows[0]?.reviewVerdict).toBe("Looks good");
+        const revertFinished = yield* Effect.flip(service.revert("proj_1", started.id));
+        expect(revertFinished).toBeInstanceOf(PaywallEditChangeSetConflictError);
+      }).pipe(Effect.provide(layer)),
+    );
+  });
+
+  it("reconciles the captured baseline and marks the change set reverted", async () => {
+    const { layer, rows, reverted } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditChangeSetService;
+        const started = yield* service.begin("proj_1", "trial");
+        const result = yield* service.revert("proj_1", started.id);
+        expect(result).toMatchObject({ version: 8, commandCount: 2, paywallSlug: "trial" });
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(reverted).toEqual([{ encoded: "baseline" }]);
+    expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.reverted);
+  });
+});
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
new file mode 100644
index 000000000..1c8ee445c
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
@@ -0,0 +1,236 @@
+import { and, Db, eq, PaywallEditChangeSetStatus, paywallEditChangeSets } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { generateId } from "../../utils/generate-id.ts";
+import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
+
+/** A requested paywall edit change set does not exist in the authenticated project. */
+export class PaywallEditChangeSetNotFoundError extends Schema.TaggedErrorClass<PaywallEditChangeSetNotFoundError>(
+  "PaywallEditChangeSetNotFoundError",
+)("PaywallEditChangeSetNotFoundError", { message: Schema.String }) {}
+
+/** The requested change-set transition is invalid for its current state. */
+export class PaywallEditChangeSetConflictError extends Schema.TaggedErrorClass<PaywallEditChangeSetConflictError>(
+  "PaywallEditChangeSetConflictError",
+)("PaywallEditChangeSetConflictError", { message: Schema.String }) {}
+
+export interface ActivePaywallEditChangeSet {
+  readonly id: string;
+  readonly projectId: string;
+  readonly paywallId: string;
+  readonly paywallSlug: string;
+  readonly baselineVersion: number;
+}
+
+/**
+ * Persists MCP paywall edit sessions and enforces their begin/preview/finish or
+ * revert lifecycle across otherwise stateless HTTP requests.
+ */
+export class PaywallEditChangeSetService extends Context.Service<PaywallEditChangeSetService>()(
+  "PaywallEditChangeSetService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const workspace = yield* PaywallWorkspaceService;
+
+      const find = (projectId: string, changeSetId: string) =>
+        db.query.paywallEditChangeSets.findFirst({
+          where: { id: changeSetId, projectId },
+        });
+
+      const requireRow = (projectId: string, changeSetId: string) =>
+        Effect.gen(function* () {
+          const row = yield* find(projectId, changeSetId);
+          if (row === undefined) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetNotFoundError({
+                message: `No paywall edit change set "${changeSetId}" exists in this project.`,
+              }),
+            );
+          }
+          return row;
+        });
+
+      const requireActive = (input: {
+        readonly projectId: string;
+        readonly changeSetId: string;
+        readonly paywallSlug: string;
+      }) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(input.projectId, input.changeSetId);
+          if (row.paywallSlug !== input.paywallSlug) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetConflictError({
+                message: `Change set "${input.changeSetId}" belongs to paywall "${row.paywallSlug}", not "${input.paywallSlug}".`,
+              }),
+            );
+          }
+          if (row.status !== PaywallEditChangeSetStatus.active) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetConflictError({
+                message: `Change set "${input.changeSetId}" is ${row.status}; only active change sets can be edited.`,
+              }),
+            );
+          }
+          return {
+            id: row.id,
+            projectId: row.projectId,
+            paywallId: row.paywallId,
+            paywallSlug: row.paywallSlug,
+            baselineVersion: row.baselineVersion,
+          } satisfies ActivePaywallEditChangeSet;
+        });
+
+      const begin = (projectId: string, paywallSlug: string) =>
+        Effect.gen(function* () {
+          const document = yield* workspace.readDocument(projectId, paywallSlug);
+          const existing = yield* db.query.paywallEditChangeSets.findFirst({
+            where: {
+              projectId,
+              paywallId: document.paywallId,
+              status: PaywallEditChangeSetStatus.active,
+            },
+          });
+          if (existing !== undefined) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetConflictError({
+                message: `Paywall "${paywallSlug}" already has active change set "${existing.id}". Finish or revert it before beginning another.`,
+              }),
+            );
+          }
+
+          const id = generateId("paywallEditChangeSet");
+          yield* db.insert(paywallEditChangeSets).values({
+            id,
+            projectId,
+            paywallId: document.paywallId,
+            paywallSlug: document.slug,
+            baselineTree: document.tree,
+            baselineVersion: document.version,
+            status: PaywallEditChangeSetStatus.active,
+          });
+          return {
+            id,
+            paywallId: document.paywallId,
+            paywallSlug: document.slug,
+            baselineVersion: document.version,
+          };
+        });
+
+      const recordPreview = (input: {
+        readonly projectId: string;
+        readonly changeSetId: string;
+        readonly paywallSlug: string;
+        readonly documentSignature: string;
+        readonly documentVersion: number;
+      }) =>
+        Effect.gen(function* () {
+          yield* requireActive(input);
+          yield* db
+            .update(paywallEditChangeSets)
+            .set({
+              lastPreviewSignature: input.documentSignature,
+              lastPreviewVersion: input.documentVersion,
+            })
+            .where(
+              and(
+                eq(paywallEditChangeSets.id, input.changeSetId),
+                eq(paywallEditChangeSets.projectId, input.projectId),
+                eq(paywallEditChangeSets.status, PaywallEditChangeSetStatus.active),
+              ),
+            );
+        });
+
+      const finish = (input: {
+        readonly projectId: string;
+        readonly changeSetId: string;
+        readonly paywallSlug: string;
+        readonly reviewedDocumentSignature: string;
+        readonly currentDocumentSignature: string;
+        readonly currentDocumentVersion: number;
+        readonly verdict: string;
+      }) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(input.projectId, input.changeSetId);
+          if (row.paywallSlug !== input.paywallSlug) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetConflictError({
+                message: `Change set "${input.changeSetId}" belongs to paywall "${row.paywallSlug}", not "${input.paywallSlug}".`,
+              }),
+            );
+          }
+          if (row.status !== PaywallEditChangeSetStatus.active) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetConflictError({
+                message: `Change set "${input.changeSetId}" is already ${row.status}.`,
+              }),
+            );
+          }
+          if (
+            row.lastPreviewSignature === null ||
+            row.lastPreviewVersion === null ||
+            row.lastPreviewSignature !== input.reviewedDocumentSignature ||
+            row.lastPreviewSignature !== input.currentDocumentSignature ||
+            row.lastPreviewVersion !== input.currentDocumentVersion
+          ) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetConflictError({
+                message:
+                  "The reviewed preview is stale or missing. Render a new get_paywall_preview and finish with its documentSignature.",
+              }),
+            );
+          }
+          const now = new Date();
+          yield* db
+            .update(paywallEditChangeSets)
+            .set({
+              status: PaywallEditChangeSetStatus.finished,
+              reviewVerdict: input.verdict,
+              finishedAt: now,
+            })
+            .where(
+              and(
+                eq(paywallEditChangeSets.id, input.changeSetId),
+                eq(paywallEditChangeSets.projectId, input.projectId),
+                eq(paywallEditChangeSets.status, PaywallEditChangeSetStatus.active),
+              ),
+            );
+          return { id: row.id, status: PaywallEditChangeSetStatus.finished } as const;
+        });
+
+      const revert = (projectId: string, changeSetId: string) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(projectId, changeSetId);
+          if (row.status !== PaywallEditChangeSetStatus.active) {
+            return yield* Effect.fail(
+              new PaywallEditChangeSetConflictError({
+                message: `Change set "${changeSetId}" is ${row.status}; only active change sets can be reverted.`,
+              }),
+            );
+          }
+          const result = yield* workspace.revertDocument(row.paywallId, row.baselineTree);
+          yield* db
+            .update(paywallEditChangeSets)
+            .set({ status: PaywallEditChangeSetStatus.reverted, finishedAt: new Date() })
+            .where(
+              and(
+                eq(paywallEditChangeSets.id, changeSetId),
+                eq(paywallEditChangeSets.projectId, projectId),
+                eq(paywallEditChangeSets.status, PaywallEditChangeSetStatus.active),
+              ),
+            );
+          return { ...result, paywallSlug: row.paywallSlug };
+        });
+
+      return {
+        begin,
+        requireActive,
+        recordPreview,
+        finish,
+        revert,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaywallEditChangeSetService)(PaywallEditChangeSetService.make);
+}
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
index 9ba437c87..9f023a780 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
@@ -229,8 +229,17 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
             slug: paywall.slug,
             name: paywall.name,
             paywallId: paywall.id,
+            tree: document.tree,
             root: document.root,
-          } satisfies { slug: string; name: string; paywallId: string; root: unknown };
+            version: document.version,
+          } satisfies {
+            slug: string;
+            name: string;
+            paywallId: string;
+            tree: unknown;
+            root: unknown;
+            version: number;
+          };
         });
 
       /**
diff --git a/packages/core/src/utils/generate-id.ts b/packages/core/src/utils/generate-id.ts
index 451748e1e..4352247d7 100644
--- a/packages/core/src/utils/generate-id.ts
+++ b/packages/core/src/utils/generate-id.ts
@@ -17,6 +17,7 @@ const prefixes = {
   purchase: "pur",
   paywall: "pw",
   paywallEditToken: "pw_et",
+  paywallEditChangeSet: "pw_change",
   paywallProduct: "pw_prod",
   paywallRelease: "pw_pub",
   paymentProviderConfiguration: "pp_conf",
diff --git a/packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/migration.sql b/packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/migration.sql
new file mode 100644
index 000000000..3eb795881
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/migration.sql
@@ -0,0 +1,19 @@
+CREATE TABLE "paywall_edit_change_set" (
+	"id" varchar(64) PRIMARY KEY,
+	"project_id" varchar(255) NOT NULL,
+	"paywall_id" varchar(255) NOT NULL,
+	"paywall_slug" varchar(255) NOT NULL,
+	"baseline_tree" jsonb NOT NULL,
+	"baseline_version" integer NOT NULL,
+	"status" varchar(16) NOT NULL,
+	"last_preview_signature" varchar(80),
+	"last_preview_version" integer,
+	"review_verdict" text,
+	"created_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp(3) with time zone DEFAULT now() NOT NULL,
+	"finished_at" timestamp(3) with time zone
+);
+--> statement-breakpoint
+CREATE INDEX "paywall_edit_change_set_project_idx" ON "paywall_edit_change_set" ("project_id");--> statement-breakpoint
+CREATE INDEX "paywall_edit_change_set_paywall_idx" ON "paywall_edit_change_set" ("paywall_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "paywall_edit_change_set_active_idx" ON "paywall_edit_change_set" ("project_id","paywall_id") WHERE "status" = 'active';
\ No newline at end of file
diff --git a/packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/snapshot.json b/packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/snapshot.json
new file mode 100644
index 000000000..b0f1a2994
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260714150813_add_paywall_edit_change_sets/snapshot.json
@@ -0,0 +1,15948 @@
+{
+  "version": "8",
+  "dialect": "postgres",
+  "id": "79f97d80-ee63-4982-ba17-d491725861e1",
+  "prevIds": [
+    "c496b548-cd40-4842-bb6a-02bd8fa34da2"
+  ],
+  "ddl": [
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_cohort_member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_cohort",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard_item",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_dashboard",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_ingest_dlq",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_insight",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "analytics_saved_query",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "api_key",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "apikey",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "app_store_transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "audit_log",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_provider_meter",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "billing_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "capture_project_policy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "checkout_session",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_treatment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "experiment",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_target",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag_variant",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "feature_flag",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "fx_rate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "identity_assertion",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "internal_feature_flag_override",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "invitation",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "member",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "organization_billing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration_product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_configuration",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "payment_provider_notification_processed",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_asset",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_manifest",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component_version",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_component",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_blob",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy_file",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_deploy",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_edit_change_set",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location_showing",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_location",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall_release",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "paywall",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_deletion_request",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_external_identifier",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_identity_migration_job",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_personless_identity",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person_unlocked_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "person",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product_perk",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "product",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "project",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase_ledger",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "purchase",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_config",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_notification_send",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "push_person_device_token",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "subscription",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "transaction",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_aggregate",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "usage_record",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "user",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_chat",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_ai_checkpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "voidhash_feedback",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_delivery_attempt",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "webhook_endpoint",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "isRlsEnabled": false,
+      "name": "workos_webhook_event",
+      "entityType": "tables",
+      "schema": "public"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cohort_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dashboard_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "position",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "layout",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "capture_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "route_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_class",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "failure_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload_json",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_shard",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_sequence",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "replayed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "replay_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "definition",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "voidql_text",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_public",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_refill_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_request",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "permissions",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "prefix",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "10",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_max",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "86400000",
+      "generated": null,
+      "identity": null,
+      "name": "rate_limit_time_window",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refill_interval",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "remaining",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "request_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expire_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "in_app_ownership_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_upgraded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "2",
+      "generated": null,
+      "identity": null,
+      "name": "offer_discount_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "offer_period",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "offer_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "price",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchase_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "quantity",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "subscription_group_identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "transaction_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "web_order_line_item_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parent_entity_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "action",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "actor_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "actor_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "changes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_meter_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "ingest_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requests_per_minute",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_per_day",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "force_route",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "skip_enrichment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_person_processing_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'reject'",
+      "generated": null,
+      "identity": null,
+      "name": "processor_schema_mode",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_overflow",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "processor_allow_historical",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "48",
+      "generated": null,
+      "identity": null,
+      "name": "processor_historical_min_age_hours",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "error_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'LEGACY'",
+      "generated": null,
+      "identity": null,
+      "name": "success_callback_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "checkout_session"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "treatment_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "experiment_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_control",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(2000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "hypothesis",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_metric_event_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secondary_metric_event_names",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "winning_variant_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "forced_variant_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "list_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identity_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "weight_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "10000",
+      "generated": null,
+      "identity": null,
+      "name": "rollout_bps",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "salt",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "internal",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "owner_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "as_of_date",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "usd_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "fetched_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_a",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id_b",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_ts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "dedup_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "flag_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "inviter_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'pending'",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'member'",
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_membership_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "tier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'polar'",
+      "generated": null,
+      "identity": null,
+      "name": "billing_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_customer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "subscription_status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "current_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "true",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_uuid",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "notification_subtype",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_note",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_provider_product_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_until_original_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "parked_raw_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "size_bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "width",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "height",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "diagnostics",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_manifest"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "component_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bytes",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storage_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logical_path",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sha256",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cli_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "manifest",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "baseline_tree",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "baseline_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "varchar(16)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "varchar(80)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_preview_signature",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_preview_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "review_verdict",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "finished_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_location_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_release_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "feature_flag_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "started_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ended_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "s3_bucket",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "schema_version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deploy_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "content_hash",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "runtime_config",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_active",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "design_file_metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "thumbnail_seq",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "service_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "is_default",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "identifier",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "kind",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "version",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "previous_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "target_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "mapping_events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "requested_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_merged",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_purchase_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "unlocked_by_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "traits_meta",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "origin",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "merged_into_person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "primary_distinct_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "first_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_seen_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deletion_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "perk_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "created_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "logo",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "result_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "raw_provider_payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "source",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(1000)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_by",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "claimed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "published_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "platform_token",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "bundle_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "invalidation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'empty'",
+      "generated": null,
+      "identity": null,
+      "name": "push_provider_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "enabled",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'Unknown'",
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "configuration",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(50)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": {
+        "as": "(case when deleted_at is null then provider_id else null end)",
+        "type": "stored"
+      },
+      "identity": null,
+      "name": "active_provider_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_send_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(20)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_message_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_notification_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "provider_error_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "idempotency_key",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_person_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "requested_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "'[]'",
+      "generated": null,
+      "identity": null,
+      "name": "unresolved_distinct_ids",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "device_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "failed_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "skipped_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message_purged_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "push_device_token_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "deleted_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "initial_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "latest_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_subscription_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_configuration_product_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "is_trial",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "starts_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "purchased_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "cancel_at_period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "canceled_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "cancellation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "billing_retry_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "grace_period_expires_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "extended_to",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_price_effective_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pending_product_change_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "redeemed_offer_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "person_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "currency",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(3)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "storefront",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "gross_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_commission_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "proceeds_after_tax_amount_usd",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "exchange_rate",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payment_provider_product_configuration_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "provider_environment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "store_transaction_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refunded_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "refund_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revoked_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "revocation_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "total_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "limit_value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "warn_threshold",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metric_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "bigint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "value",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_start",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "period_end",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "synced_to_provider",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "synced_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sync_error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "metadata",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_expires",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "ban_reason",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "banned",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "custom_image_url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "email_verified",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "image",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "role",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "workos_user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(36)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "surface",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "title",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "messages",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "chat_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "turn_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(64)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "paywall_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "tree",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(32)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "topic",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "sentiment",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "text",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_email",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "organization_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_slug",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(1024)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "pathname",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(512)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "user_agent",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "read_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "archived_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_endpoint_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(100)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "attempt_count",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "5",
+      "generated": null,
+      "identity": null,
+      "name": "max_attempts",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "next_attempt_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_occurred_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "completed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "webhook_delivery_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "attempt_number",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "status_code",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "response_body",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error_message",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "duration_ms",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "boolean",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "false",
+      "generated": null,
+      "identity": null,
+      "name": "succeeded",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "project_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "name",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(2048)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "url",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "secret",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "smallint",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "1",
+      "generated": null,
+      "identity": null,
+      "name": "status",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "events",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "description",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "integer",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": "0",
+      "generated": null,
+      "identity": null,
+      "name": "consecutive_failures",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "last_success_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "updated_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(255)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "external_event_id",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(128)",
+      "typeSchema": null,
+      "notNull": true,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "event_type",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "jsonb",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "payload",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "processed_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "varchar(500)",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": null,
+      "generated": null,
+      "identity": null,
+      "name": "error",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "type": "timestamp(3) with time zone",
+      "typeSchema": null,
+      "notNull": false,
+      "dimensions": 0,
+      "default": "now()",
+      "generated": null,
+      "identity": null,
+      "name": "created_at",
+      "entityType": "columns",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "cohort_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_member_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "cohort_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_member_cohort_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort_member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_cohort_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_cohort"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "source_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "source_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_source_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "dashboard_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "position",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_item_position_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard_item"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_dashboard_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_dashboard"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "capture_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_capture_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "failure_class",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_project_failure_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "replay_status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_ingest_dlq_replay_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_ingest_dlq"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_insight_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_insight"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "analytics_saved_query_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "analytics_saved_query"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "api_key_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "api_key"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "apikey_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "app_store_transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_entity_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "entity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_project_entity_type_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "actor_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "audit_actor_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "audit_log"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_metric_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_provider_meter"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "billing_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "force_route",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "capture_project_policy_force_route_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "variant_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_treatment_variant_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_treatment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "experiment_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_variant_experiment_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_feature_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "experiment_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "experiment"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_override_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "list_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "identity_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identity_value",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_target_identity_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_target"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "feature_flag_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_variant_flag_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag_variant"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_key_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "ff_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "feature_flag"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "currency",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "as_of_date",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "fx_rate_currency_date_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "fx_rate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "dedup_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_a",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_a_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id_b",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "identity_assertion_project_b_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "flag_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "internal_feature_flag_override_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "email",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "invitation_email_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_organizationId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_userId_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_membership_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "member_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_slug_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_customer_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "external_customer_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "billing_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "billing_provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "organization_billing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_provider_configuration_ext_pk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration_product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "payment_provider_configuration_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_configuration"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "notification_uuid",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_uuid_uniq",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_provider_product_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_lookup_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "result",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "parked_until_original_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "notif_parked_sdk_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "payment_provider_notification_processed"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_key_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_asset_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_version_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "component_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_version_component_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component_version"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_component_project_id_slug_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_component"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "sha256",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_blob_project_id_sha256_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_blob"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "deploy_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_file_deploy_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy_file"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_created_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "manifest_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_deploy_project_id_manifest_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_deploy"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_edit_change_set_project_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_edit_change_set_paywall_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"status\" = 'active'",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_edit_change_set_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_edit_change_set"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "ended_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_location_ended_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_location_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "started_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_project_location_started_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_release_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_showing_release_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location_showing"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "archived_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_location_archived_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_location"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "version",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_version_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "content_hash",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_release_paywall_id_content_hash_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall_release"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "paywall_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "paywall"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "perk_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_deletion_request_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "service_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "identifier",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_external_identifier_project_service_identifier_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_project_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "previous_distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_previous_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_identity_migration_project_distinct_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "distinct_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_personless_identity_project_distinct_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person_unlocked_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "merged_into_person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_merged_into_person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "person"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "perk_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_id_perk_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product_perk"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "product_slug_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "product"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "organization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "slug",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "slug_oragnization_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "project"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_idempotency_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_poll_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider_event_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_ledger_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase_ledger"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "provider_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "provider_key_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "refunded_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "revoked_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "purchase_person_active_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "purchase"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "platform_token",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "coalesce(\"environment\", '')",
+          "isExpression": true,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_dedup_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "invalidated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_device_token_project_invalidated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "active_provider_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_config_project_active_provider_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_config"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_device_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_send_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_send_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_notification_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_delivery_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_project_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "idempotency_key",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": "\"idempotency_key\" is not null",
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_notification_send_idempotency_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_notification_send"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_person_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "push_device_token_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "deleted_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "push_person_device_token_token_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "push_person_device_token"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_configuration_product_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_subscription_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "subscription_store_subscription_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "starts_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "status_starts_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "canceled_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "canceled_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "person_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "person_id_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "subscription"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "payment_provider_product_configuration_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "store_transaction_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "transaction_provider_tx_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "occurred_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "occurred_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "transaction"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_aggregate"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "metric_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_start",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "period_end",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "org_metric_period_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "synced_to_provider",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "synced_to_provider_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "usage_record"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "workos_user_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "user_workos_id_uidx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "user"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_org_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "surface",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "chat_type",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_scope_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "updated_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_chat_updated_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "turn_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "paywall_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_turn_doc_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "chat_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_ai_checkpoint_chat_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_status_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "created_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_created_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "organization_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "voidhash_feedback_organization_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "voidhash_feedback"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_endpoint_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_endpoint_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "next_attempt_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_delivery_next_attempt_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "webhook_delivery_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_attempt_delivery_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_delivery_attempt"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "project_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        },
+        {
+          "value": "status",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "webhook_endpoint_project_status_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "webhook_endpoint"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "external_event_id",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": true,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_unique_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": true,
+      "columns": [
+        {
+          "value": "processed_at",
+          "isExpression": false,
+          "asc": true,
+          "nullsFirst": false,
+          "opclass": null
+        }
+      ],
+      "isUnique": false,
+      "where": null,
+      "with": "",
+      "method": "btree",
+      "concurrently": false,
+      "name": "workos_event_processed_at_idx",
+      "entityType": "indexes",
+      "schema": "public",
+      "table": "workos_webhook_event"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "apikey_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "apikey"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "capture_project_policy_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "capture_project_policy"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "identity_assertion_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "identity_assertion"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "internal_feature_flag_override_g0qsEev0tRHY_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "internal_feature_flag_override"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "inviter_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_inviter_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "invitation_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "invitation"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "user_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "user",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "member_user_id_user_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "member"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "paywall_asset_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "paywall_asset"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_deletion_request_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_deletion_request"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_external_identifier_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_external_identifier"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "target_person_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "person",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_identity_migration_job_target_person_id_person_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_identity_migration_job"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "project_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "project",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "person_personless_identity_project_id_project_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "person_personless_identity"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "organization_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "organization",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_chat_organization_id_organization_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_chat"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "chat_id"
+      ],
+      "schemaTo": "public",
+      "tableTo": "voidhash_ai_chat",
+      "columnsTo": [
+        "id"
+      ],
+      "onUpdate": "NO ACTION",
+      "onDelete": "CASCADE",
+      "name": "voidhash_ai_checkpoint_chat_id_voidhash_ai_chat_id_fkey",
+      "entityType": "fks",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_cohort_member_pkey",
+      "schema": "public",
+      "table": "analytics_cohort_member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_cohort_pkey",
+      "schema": "public",
+      "table": "analytics_cohort",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_item_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard_item",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_dashboard_pkey",
+      "schema": "public",
+      "table": "analytics_dashboard",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_ingest_dlq_pkey",
+      "schema": "public",
+      "table": "analytics_ingest_dlq",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_insight_pkey",
+      "schema": "public",
+      "table": "analytics_insight",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "analytics_saved_query_pkey",
+      "schema": "public",
+      "table": "analytics_saved_query",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "api_key_pkey",
+      "schema": "public",
+      "table": "api_key",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "apikey_pkey",
+      "schema": "public",
+      "table": "apikey",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "app_store_transaction_pkey",
+      "schema": "public",
+      "table": "app_store_transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "audit_log_pkey",
+      "schema": "public",
+      "table": "audit_log",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_provider_meter_pkey",
+      "schema": "public",
+      "table": "billing_provider_meter",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "billing_webhook_event_pkey",
+      "schema": "public",
+      "table": "billing_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "project_id"
+      ],
+      "nameExplicit": false,
+      "name": "capture_project_policy_pkey",
+      "schema": "public",
+      "table": "capture_project_policy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "checkout_session_pkey",
+      "schema": "public",
+      "table": "checkout_session",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_treatment_pkey",
+      "schema": "public",
+      "table": "experiment_treatment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_variant_pkey",
+      "schema": "public",
+      "table": "experiment_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "experiment_pkey",
+      "schema": "public",
+      "table": "experiment",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_override_pkey",
+      "schema": "public",
+      "table": "feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_target_pkey",
+      "schema": "public",
+      "table": "feature_flag_target",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_variant_pkey",
+      "schema": "public",
+      "table": "feature_flag_variant",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "feature_flag_pkey",
+      "schema": "public",
+      "table": "feature_flag",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "fx_rate_pkey",
+      "schema": "public",
+      "table": "fx_rate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "identity_assertion_pkey",
+      "schema": "public",
+      "table": "identity_assertion",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "internal_feature_flag_override_pkey",
+      "schema": "public",
+      "table": "internal_feature_flag_override",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "invitation_pkey",
+      "schema": "public",
+      "table": "invitation",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "member_pkey",
+      "schema": "public",
+      "table": "member",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_pkey",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "organization_billing_pkey",
+      "schema": "public",
+      "table": "organization_billing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_product_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration_product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_configuration_pkey",
+      "schema": "public",
+      "table": "payment_provider_configuration",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "payment_provider_notification_processed_pkey",
+      "schema": "public",
+      "table": "payment_provider_notification_processed",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_asset_pkey",
+      "schema": "public",
+      "table": "paywall_asset",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "source_hash"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_manifest_pkey",
+      "schema": "public",
+      "table": "paywall_component_manifest",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_version_pkey",
+      "schema": "public",
+      "table": "paywall_component_version",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_component_pkey",
+      "schema": "public",
+      "table": "paywall_component",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_blob_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_blob",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_file_pkey",
+      "schema": "public",
+      "table": "paywall_deploy_file",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_deploy_pkey",
+      "schema": "public",
+      "table": "paywall_deploy",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_edit_change_set_pkey",
+      "schema": "public",
+      "table": "paywall_edit_change_set",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_showing_pkey",
+      "schema": "public",
+      "table": "paywall_location_showing",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_location_pkey",
+      "schema": "public",
+      "table": "paywall_location",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_release_pkey",
+      "schema": "public",
+      "table": "paywall_release",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "paywall_pkey",
+      "schema": "public",
+      "table": "paywall",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "perk_pkey",
+      "schema": "public",
+      "table": "perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_deletion_request_pkey",
+      "schema": "public",
+      "table": "person_deletion_request",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_external_identifier_pkey",
+      "schema": "public",
+      "table": "person_external_identifier",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_pkey",
+      "schema": "public",
+      "table": "person_identity",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_identity_migration_job_pkey",
+      "schema": "public",
+      "table": "person_identity_migration_job",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_unlocked_perk_pkey",
+      "schema": "public",
+      "table": "person_unlocked_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "person_pkey",
+      "schema": "public",
+      "table": "person",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_perk_pkey",
+      "schema": "public",
+      "table": "product_perk",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "product_pkey",
+      "schema": "public",
+      "table": "product",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "project_pkey",
+      "schema": "public",
+      "table": "project",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_ledger_pkey",
+      "schema": "public",
+      "table": "purchase_ledger",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "purchase_pkey",
+      "schema": "public",
+      "table": "purchase",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_device_token_pkey",
+      "schema": "public",
+      "table": "push_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_config_pkey",
+      "schema": "public",
+      "table": "push_notification_config",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "push_notification_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_notification_send_pkey",
+      "schema": "public",
+      "table": "push_notification_send",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "push_person_device_token_pkey",
+      "schema": "public",
+      "table": "push_person_device_token",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "subscription_pkey",
+      "schema": "public",
+      "table": "subscription",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "transaction_pkey",
+      "schema": "public",
+      "table": "transaction",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_aggregate_pkey",
+      "schema": "public",
+      "table": "usage_aggregate",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "usage_record_pkey",
+      "schema": "public",
+      "table": "usage_record",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "user_pkey",
+      "schema": "public",
+      "table": "user",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_chat_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_chat",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_ai_checkpoint_pkey",
+      "schema": "public",
+      "table": "voidhash_ai_checkpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "voidhash_feedback_pkey",
+      "schema": "public",
+      "table": "voidhash_feedback",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_pkey",
+      "schema": "public",
+      "table": "webhook_delivery",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_delivery_attempt_pkey",
+      "schema": "public",
+      "table": "webhook_delivery_attempt",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "webhook_endpoint_pkey",
+      "schema": "public",
+      "table": "webhook_endpoint",
+      "entityType": "pks"
+    },
+    {
+      "columns": [
+        "id"
+      ],
+      "nameExplicit": false,
+      "name": "workos_webhook_event_pkey",
+      "schema": "public",
+      "table": "workos_webhook_event",
+      "entityType": "pks"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "slug"
+      ],
+      "nullsNotDistinct": false,
+      "name": "organization_slug_key",
+      "schema": "public",
+      "table": "organization",
+      "entityType": "uniques"
+    },
+    {
+      "nameExplicit": false,
+      "columns": [
+        "email"
+      ],
+      "nullsNotDistinct": false,
+      "name": "user_email_key",
+      "schema": "public",
+      "table": "user",
+      "entityType": "uniques"
+    }
+  ],
+  "renames": []
+}
\ No newline at end of file
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index 7837e787c..5dd7322eb 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -1329,6 +1329,48 @@ export const paywalls = pgTable(
   (table) => [uniqueIndex("paywall_slug_project_id_idx").on(table.slug, table.projectId)],
 );
 
+export const PaywallEditChangeSetStatus = {
+  active: "active",
+  finished: "finished",
+  reverted: "reverted",
+} as const;
+
+export type PaywallEditChangeSetStatusValue =
+  (typeof PaywallEditChangeSetStatus)[keyof typeof PaywallEditChangeSetStatus];
+
+/**
+ * An explicit MCP authoring session for one paywall. The baseline is captured
+ * when the session starts so the complete set of edits can be reverted later.
+ */
+export const paywallEditChangeSets = pgTable(
+  "paywall_edit_change_set",
+  {
+    id: varchar("id", { length: 64 }).primaryKey(),
+    projectId: varchar("project_id", { length: 255 }).notNull(),
+    paywallId: varchar("paywall_id", { length: 255 }).notNull(),
+    paywallSlug: varchar("paywall_slug", { length: 255 }).notNull(),
+    baselineTree: jsonb("baseline_tree").$type<unknown>().notNull(),
+    baselineVersion: integer("baseline_version").notNull(),
+    status: varchar("status", { length: 16 }).$type<PaywallEditChangeSetStatusValue>().notNull(),
+    lastPreviewSignature: varchar("last_preview_signature", { length: 80 }),
+    lastPreviewVersion: integer("last_preview_version"),
+    reviewVerdict: text("review_verdict"),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+    finishedAt: timestamp("finished_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    index("paywall_edit_change_set_project_idx").on(table.projectId),
+    index("paywall_edit_change_set_paywall_idx").on(table.paywallId),
+    uniqueIndex("paywall_edit_change_set_active_idx")
+      .on(table.projectId, table.paywallId)
+      .where(sql`${table.status} = 'active'`),
+  ],
+);
+
 /**
  * Status of a cached component compile: `ready` carries a validated manifest,
  * `error` carries diagnostics (and a null manifest).
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 774ce110e..369819838 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -274,6 +274,9 @@ importers:
       '@voidhash/mimic-schema':
         specifier: workspace:*
         version: link:../../packages/mimic-schema
+      '@voidhash/paywall-builtins':
+        specifier: workspace:*
+        version: link:../../packages/paywall-builtins
       '@voidhash/paywall-renderer-preact':
         specifier: workspace:*
         version: link:../../packages/paywall-renderer-preact
diff --git a/selfhost/entry/src/backend/Backend.ts b/selfhost/entry/src/backend/Backend.ts
index c229de738..df7046c51 100644
--- a/selfhost/entry/src/backend/Backend.ts
+++ b/selfhost/entry/src/backend/Backend.ts
@@ -1,10 +1,12 @@
 import {
   BackendNoopIdentityProjectionPublisherLive,
   BackendPaymentProviderStubsLive,
+  BackendSnapshotImageRendererStubLive,
   type InfraServices,
 } from "@voidhash/backend/src/BackendApp.ts";
 import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
 import { Workos } from "@voidhash/core/services/auth/Workos";
+import { SnapshotImageRenderer } from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
 import { PaywallAssetConfig } from "@voidhash/core/services/paywallLocations/PaywallAssetConfig";
 import { Db } from "@voidhash/db";
 import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
@@ -36,6 +38,7 @@ export const makeBackendInfrastructureLive = (
   config: SelfhostRuntimeConfig,
   workos: Layer.Layer<Workos>,
   clickhouse?: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>,
+  snapshotImageRenderer: Layer.Layer<SnapshotImageRenderer> = BackendSnapshotImageRendererStubLive,
 ): Layer.Layer<InfraServices, never, HostServiceTag> =>
   Layer.mergeAll(
     Db.layer(config.database),
@@ -55,6 +58,7 @@ export const makeBackendInfrastructureLive = (
     BackendNoopIdentityProjectionPublisherLive,
     makeBackendMimicHostLive(config.publicBaseUrl),
     makeHttpComponentCompilerLive(config.componentCompilerUrl),
+    snapshotImageRenderer,
     MemoryProjectSchemaCacheLive,
     clickhouse ?? Layer.empty,
   );
diff --git a/selfhost/entry/src/backend/Thumbnails.ts b/selfhost/entry/src/backend/Thumbnails.ts
index 131975e05..6cad029b5 100644
--- a/selfhost/entry/src/backend/Thumbnails.ts
+++ b/selfhost/entry/src/backend/Thumbnails.ts
@@ -65,7 +65,14 @@ export const SelfhostSnapshotImageRendererLive = Layer.effect(
     });
 
     return {
-      render: ({ snapshot, componentTrees, width, height, deviceScaleFactor }) =>
+      render: ({
+        snapshot,
+        componentTrees,
+        localComponentTrees,
+        width,
+        height,
+        deviceScaleFactor,
+      }) =>
         Effect.gen(function* () {
           const html = yield* Effect.try({
             try: () =>
@@ -75,6 +82,10 @@ export const SelfhostSnapshotImageRendererLive = Layer.effect(
                     string,
                     Record<string, PreviewTree>
                   >,
+                  localTrees: localComponentTrees as Record<
+                    string,
+                    Record<string, PreviewTree>
+                  >,
                 },
                 hydrate: false,
               }).html,
@@ -101,21 +112,29 @@ export const SelfhostSnapshotImageRendererLive = Layer.effect(
   }),
 );
 
-/** Builds the Chromium-backed thumbnail service for the self-host runtime. */
-export const makeSelfhostPaywallThumbnailServiceLive = (
+/** Builds the Chromium-backed snapshot renderer shared by MCP previews and thumbnails. */
+export const makeSelfhostSnapshotImageRendererLive = (
   screenshotConfig: ChromiumScreenshotConfig,
-) => {
-  const htmlScreenshot = SelfhostHtmlScreenshotLive.pipe(
+): Layer.Layer<SnapshotImageRenderer> =>
+  SelfhostSnapshotImageRendererLive.pipe(
     Layer.provide(
-      Layer.merge(
-        ChromiumScreenshotLive(screenshotConfig),
-        NodePlatformRuntimeLive,
+      SelfhostHtmlScreenshotLive.pipe(
+        Layer.provide(
+          Layer.merge(
+            ChromiumScreenshotLive(screenshotConfig),
+            NodePlatformRuntimeLive,
+          ),
+        ),
       ),
     ),
+    Layer.orDie,
   );
-  const renderer = SelfhostSnapshotImageRendererLive.pipe(
-    Layer.provide(htmlScreenshot),
-  );
+
+/** Builds the Chromium-backed thumbnail service for the self-host runtime. */
+export const makeSelfhostPaywallThumbnailServiceLive = (
+  screenshotConfig: ChromiumScreenshotConfig,
+) => {
+  const renderer = makeSelfhostSnapshotImageRendererLive(screenshotConfig);
   return PaywallThumbnailService.layer.pipe(Layer.provide(renderer));
 };
 
diff --git a/selfhost/entry/src/compiler/CompilerCore.ts b/selfhost/entry/src/compiler/CompilerCore.ts
index e697dec2f..e861fbff2 100644
--- a/selfhost/entry/src/compiler/CompilerCore.ts
+++ b/selfhost/entry/src/compiler/CompilerCore.ts
@@ -19,7 +19,9 @@ interface EsbuildFailure {
 
 interface SandboxSurface {
   readonly modules: Readonly<Record<string, unknown>>;
-  readonly describeComponent: typeof import("@voidhash/paywalls/sandbox")["describeComponent"];
+  readonly describeComponent: (typeof import("@voidhash/paywalls/sandbox"))["describeComponent"];
+  readonly defaultHostData: (typeof import("@voidhash/paywalls/sandbox"))["defaultHostData"];
+  readonly renderComponentToTree: (typeof import("@voidhash/paywalls/sandbox"))["renderComponentToTree"];
 }
 
 const toCompileDiagnostics = (error: unknown): ComponentCompileDiagnostic[] => {
@@ -46,10 +48,7 @@ const nodeTransform = async (source: string): Promise<string> => {
   return result.code;
 };
 
-const evaluateAndExtractManifest = (
-  compiledCode: string,
-  sandbox: SandboxSurface,
-): unknown => {
+const evaluateAndExtractManifest = (compiledCode: string, sandbox: SandboxSurface) => {
   const requireShim = (specifier: string): unknown => {
     const module = sandbox.modules[specifier];
     if (module === undefined) throw new Error(`Cannot find module '${specifier}'`);
@@ -79,9 +78,11 @@ const evaluateAndExtractManifest = (
   ) {
     throw new Error("Component must export a default defineComponent({ ... })");
   }
-  return sandbox.describeComponent(
-    definition as Parameters<SandboxSurface["describeComponent"]>[0],
-  ).manifest;
+  const typedDefinition = definition as Parameters<SandboxSurface["describeComponent"]>[0];
+  return {
+    definition: typedDefinition,
+    manifest: sandbox.describeComponent(typedDefinition).manifest,
+  };
 };
 
 const compileAndExtract = async (source: string): Promise<CompileExtractResult> => {
@@ -96,8 +97,20 @@ const compileAndExtract = async (source: string): Promise<CompileExtractResult>
 
   const sandbox = await import("@voidhash/paywalls/sandbox");
   try {
+    const { definition, manifest } = evaluateAndExtractManifest(compiledCode, sandbox);
+    const previewTrees: Record<string, unknown> = {};
+    const states = manifest.previewStates.length > 0 ? manifest.previewStates : ["default"];
+    for (const state of states) {
+      const fixture = definition.previews?.[state] ?? {};
+      previewTrees[state] = await sandbox.renderComponentToTree(definition, {
+        state,
+        props: fixture.props,
+        hostData: { ...sandbox.defaultHostData(), ...fixture.data },
+      });
+    }
     return {
-      manifest: evaluateAndExtractManifest(compiledCode, sandbox),
+      manifest,
+      previewTrees,
       status: "ready",
     };
   } catch (error) {
@@ -110,6 +123,7 @@ const compileAndExtract = async (source: string): Promise<CompileExtractResult>
 };
 
 /** Native compiler used exclusively inside the isolated self-host sidecar. */
+/** Builds the self-hosted compiler that validates source and renders preview trees. */
 export const makeNodeComponentCompiler = (): ComponentCompilerShape => ({
   compileCheck: (source) =>
     Effect.tryPromise(async (): Promise<CompileCheckResult> => {
@@ -122,18 +136,24 @@ export const makeNodeComponentCompiler = (): ComponentCompilerShape => ({
         return { diagnostics, status: "error" };
       }
     }).pipe(
-      Effect.mapError((error) => new ComponentCompilerError({
-        message: `esbuild transform failed: ${
-          error instanceof Error ? error.message : String(error)
-        }`,
-      })),
+      Effect.mapError(
+        (error) =>
+          new ComponentCompilerError({
+            message: `esbuild transform failed: ${
+              error instanceof Error ? error.message : String(error)
+            }`,
+          }),
+      ),
     ),
   compileAndExtract: (source) =>
     Effect.tryPromise(() => compileAndExtract(source)).pipe(
-      Effect.mapError((error) => new ComponentCompilerError({
-        message: `component extraction failed: ${
-          error instanceof Error ? error.message : String(error)
-        }`,
-      })),
+      Effect.mapError(
+        (error) =>
+          new ComponentCompilerError({
+            message: `component extraction failed: ${
+              error instanceof Error ? error.message : String(error)
+            }`,
+          }),
+      ),
     ),
 });
diff --git a/selfhost/entry/src/compiler/CompilerProtocol.ts b/selfhost/entry/src/compiler/CompilerProtocol.ts
index e13ee360f..620578c08 100644
--- a/selfhost/entry/src/compiler/CompilerProtocol.ts
+++ b/selfhost/entry/src/compiler/CompilerProtocol.ts
@@ -19,7 +19,11 @@ export const CompileCheckResponse = Schema.Union([
 ]);
 
 export const CompileExtractResponse = Schema.Union([
-  Schema.Struct({ manifest: Schema.Unknown, status: Schema.Literals(["ready"]) }),
+  Schema.Struct({
+    manifest: Schema.Unknown,
+    previewTrees: Schema.Record(Schema.String, Schema.Unknown),
+    status: Schema.Literals(["ready"]),
+  }),
   Schema.Struct({
     diagnostics: Schema.Array(Diagnostic),
     phase: Schema.Literals(["compile", "runtime"]),
diff --git a/selfhost/entry/src/main.ts b/selfhost/entry/src/main.ts
index 32e702142..1c76b791c 100644
--- a/selfhost/entry/src/main.ts
+++ b/selfhost/entry/src/main.ts
@@ -40,6 +40,7 @@ import {
 } from "./backend/Push.ts";
 import {
   makeSelfhostPaywallThumbnailServiceLive,
+  makeSelfhostSnapshotImageRendererLive,
   runSelfhostPaywallThumbnailConsumer,
 } from "./backend/Thumbnails.ts";
 import {
@@ -81,10 +82,20 @@ NodeRuntime.runMain(
       const clickhouse = config.clickhouse
         ? makeSelfhostClickhouseLayers(config.clickhouse)
         : undefined;
+      const chromiumExecutablePath = process.env.CHROMIUM_EXECUTABLE_PATH?.trim();
+      const chromiumConfig = chromiumExecutablePath
+        ? {
+            disableSandbox: process.env.CHROMIUM_DISABLE_SANDBOX === "true",
+            executablePath: chromiumExecutablePath,
+          }
+        : undefined;
       const infrastructure = makeBackendInfrastructureLive(
         config,
         workos,
         clickhouse?.readOnly,
+        chromiumConfig === undefined
+          ? undefined
+          : makeSelfhostSnapshotImageRendererLive(chromiumConfig),
       ).pipe(
         Layer.provide(hostLayer),
       );
@@ -128,13 +139,9 @@ NodeRuntime.runMain(
           Effect.provide(runtimeContext),
         ),
       );
-      const chromiumExecutablePath = process.env.CHROMIUM_EXECUTABLE_PATH?.trim();
-      if (chromiumExecutablePath) {
+      if (chromiumConfig !== undefined) {
         const thumbnailContext = yield* Layer.build(
-          makeSelfhostPaywallThumbnailServiceLive({
-            disableSandbox: process.env.CHROMIUM_DISABLE_SANDBOX === "true",
-            executablePath: chromiumExecutablePath,
-          }),
+          makeSelfhostPaywallThumbnailServiceLive(chromiumConfig),
         ).pipe(Effect.provide(runtimeContext));
         const thumbnailService = Context.get(
           thumbnailContext,
diff --git a/selfhost/entry/tests/Compiler.test.ts b/selfhost/entry/tests/Compiler.test.ts
index 3a4da03c3..2765d83d3 100644
--- a/selfhost/entry/tests/Compiler.test.ts
+++ b/selfhost/entry/tests/Compiler.test.ts
@@ -6,13 +6,13 @@ import { makeNodeComponentCompiler } from "../src/compiler/CompilerCore.ts";
 const compiler = makeNodeComponentCompiler();
 
 const validComponent = `
-  import { defineComponent } from "@voidhash/paywalls";
+  import { defineComponent, Text } from "@voidhash/paywalls";
   export default defineComponent({
     title: "Hero",
     props: (p) => ({ heading: p.string().default("Go Pro") }),
     actions: () => ({}),
     previews: { default: {} },
-    render: () => null,
+    render: ({ props }) => <Text>{props.heading}</Text>,
   });
 `;
 
@@ -23,6 +23,11 @@ describe("self-host component compiler", () => {
     expect(result.status).toBe("ready");
     if (result.status === "ready") {
       expect(result.manifest).toMatchObject({ manifestVersion: 2, title: "Hero" });
+      expect(result.previewTrees.default).toMatchObject({
+        treeVersion: 2,
+        state: "default",
+        root: { type: "text", text: "Go Pro", style: {} },
+      });
     }
   });
 
@@ -52,7 +57,9 @@ describe("self-host component compiler", () => {
       expect(loop.diagnostics[0]?.message).toContain("timed out");
     }
     if (dynamicCode.status === "error") {
-      expect(dynamicCode.diagnostics[0]?.message).toContain("Code generation from strings disallowed");
+      expect(dynamicCode.diagnostics[0]?.message).toContain(
+        "Code generation from strings disallowed",
+      );
     }
   });
 });
diff --git a/selfhost/entry/tests/Thumbnails.test.ts b/selfhost/entry/tests/Thumbnails.test.ts
index 76683c256..5dff354f7 100644
--- a/selfhost/entry/tests/Thumbnails.test.ts
+++ b/selfhost/entry/tests/Thumbnails.test.ts
@@ -25,6 +25,7 @@ describe("self-host paywall thumbnail renderer", () => {
         const renderer = yield* SnapshotImageRenderer;
         return yield* renderer.render({
           componentTrees: {},
+          localComponentTrees: {},
           deviceScaleFactor: 2,
           height: 812,
           snapshot: {

From a6f36783999297967ec10338943c35c31e15fdb1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 18:39:41 +0200
Subject: [PATCH 091/129] docs: update endpoint authorization matrix

---
 docs/security/endpoint-authorization-matrix.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index 494cb91bb..b87ccae78 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -1,7 +1,7 @@
 # Endpoint Authorization Matrix
 
 Status: alpha coverage inventory<br>
-Last updated: 2026-07-12
+Last updated: 2026-07-14
 
 This inventory covers every Community HTTP API and RPC operation plus the raw
 routes mounted by `BackendApp`. A test compares the marked operation lists with
@@ -59,7 +59,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Group | Operations |
 | --- | --- |
 | AiChat | `SaveAiChat`, `ListAiChats`, `GetAiChat`, `DeleteAiChat`, `UploadAiChatAttachment`, `RevertAiChatCheckpoint`, `CaptureAiCheckpoint` |
-| Analytics | `ListRecentAnalyticsEvents`, `QueryAnalyticsInsights` |
+| Analytics | `ListRecentAnalyticsEvents`, `QueryAnalyticsInsights`, `QueryCustomAnalyticsInsight`, `QueryCustomAnalyticsPersons`, `ListAnalyticsInsights`, `CreateAnalyticsInsight`, `UpdateAnalyticsInsight`, `DeleteAnalyticsInsight`, `ListAnalyticsCohorts`, `CreateAnalyticsCohort`, `UpdateAnalyticsCohort`, `DeleteAnalyticsCohort`, `ListAnalyticsDashboards`, `CreateAnalyticsDashboard`, `DuplicateAnalyticsDashboard`, `UpdateAnalyticsDashboard`, `DeleteAnalyticsDashboard`, `PutAnalyticsDashboardItem`, `ReorderAnalyticsDashboardItems`, `RemoveAnalyticsDashboardItem` |
 | ApiKey | `CreateSecretKey`, `ListApiKeys`, `GetApiKeyById`, `RotateSecretKey`, `DeleteApiKey`, `CreateUserApiKey`, `ListUserApiKeys`, `RevokeUserApiKey` |
 | Person | `CreatePerson`, `ListPersons`, `GetPersonById`, `GetPersonByDistinctId` |
 | Experiment | `ListExperiments`, `GetExperiment`, `CreateExperiment`, `UpdateExperiment`, `ReplaceExperimentVariants`, `UpsertExperimentTreatment`, `RemoveExperimentTreatment`, `StartExperiment`, `PauseExperiment`, `ConcludeExperiment`, `ArchiveExperiment`, `RestoreExperiment`, `GetExperimentResults` |
@@ -81,7 +81,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Product | `ListProducts`, `GetProduct`, `CreateProduct`, `UpdateProduct`, `DeleteProduct` |
 | Project | `CreateProject`, `ListProjects`, `UpdateProject`, `DeleteProject`, `SetProjectAvatar`, `RemoveProjectAvatar` |
 | User | `CurrentUser`, `SetUserAvatar`, `RemoveUserAvatar` |
-| VoidQl | `RunVoidQlQuery`, `ValidateVoidQlQuery`, `GetVoidQlSchema`, `SaveVoidQlInsight` |
+| VoidQl | `RunVoidQlQuery`, `ValidateVoidQlQuery`, `GetVoidQlSchema`, `SaveVoidQlInsight`, `ListVoidQlInsights`, `RunSavedVoidQlInsight`, `DeleteVoidQlInsight` |
 | Webhook | `ListWebhookEndpoints`, `GetWebhookEndpoint`, `CreateWebhookEndpoint`, `UpdateWebhookEndpoint`, `DeleteWebhookEndpoint`, `RotateWebhookSecret`, `TestWebhookEndpoint`, `ListWebhookDeliveries`, `GetWebhookDelivery`, `RetryWebhookDelivery` |
 <!-- RPC_OPERATIONS_END -->
 

From 0d61d6ff1f9e2a093b1634c653cc9d2148dd5796 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 18:48:25 +0200
Subject: [PATCH 092/129] feat: add AuthKit OAuth for MCP plugins

---
 .agents/plugins/marketplace.json              |  20 +++
 apps/backend/src/BackendApp.ts                |   8 +
 apps/backend/src/McpAuthKit.test.ts           |  65 ++++++++
 apps/backend/src/McpAuthKit.ts                | 123 +++++++++++++++
 apps/backend/src/routes/mcp-authkit.test.ts   |  46 ++++++
 apps/backend/src/routes/mcp-authkit.ts        |  57 +++++++
 apps/backend/src/routes/mcp.test.ts           |  10 +-
 apps/backend/src/routes/mcp.ts                | 149 +++++++++++++-----
 .../claude-code/voidhash-paywalls/.mcp.json   |   3 +-
 .../claude-code/voidhash-paywalls/README.md   |  27 +---
 .../bin/voidhash-mcp-headers                  |   8 -
 .../.codex-plugin/plugin.json                 |  24 +++
 plugins/voidhash-paywalls/.mcp.json           |   8 +
 plugins/voidhash-paywalls/README.md           |  24 +++
 .../skills/design-paywall/SKILL.md            |  30 ++++
 selfhost/.env.example                         |   1 +
 selfhost/docker-compose.yml                   |   1 +
 turbo.json                                    |   1 +
 18 files changed, 539 insertions(+), 66 deletions(-)
 create mode 100644 .agents/plugins/marketplace.json
 create mode 100644 apps/backend/src/McpAuthKit.test.ts
 create mode 100644 apps/backend/src/McpAuthKit.ts
 create mode 100644 apps/backend/src/routes/mcp-authkit.test.ts
 create mode 100644 apps/backend/src/routes/mcp-authkit.ts
 delete mode 100755 integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers
 create mode 100644 plugins/voidhash-paywalls/.codex-plugin/plugin.json
 create mode 100644 plugins/voidhash-paywalls/.mcp.json
 create mode 100644 plugins/voidhash-paywalls/README.md
 create mode 100644 plugins/voidhash-paywalls/skills/design-paywall/SKILL.md

diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json
new file mode 100644
index 000000000..a36c5ecf5
--- /dev/null
+++ b/.agents/plugins/marketplace.json
@@ -0,0 +1,20 @@
+{
+  "name": "voidhash",
+  "interface": {
+    "displayName": "Voidhash"
+  },
+  "plugins": [
+    {
+      "name": "voidhash-paywalls",
+      "source": {
+        "source": "local",
+        "path": "./plugins/voidhash-paywalls"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Productivity"
+    }
+  ]
+}
diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
index 6fe1c1933..76d6d1cf7 100644
--- a/apps/backend/src/BackendApp.ts
+++ b/apps/backend/src/BackendApp.ts
@@ -108,6 +108,8 @@ import { AuthMiddlewareLive } from "./ApiMiddlewares.ts";
 import { VoidhashAiError, VoidhashAiService } from "./ai/VoidhashAiService.ts";
 import { AiChatRouteLayer } from "./routes/ai/chat.ts";
 import { McpRouteLayer } from "./routes/mcp.ts";
+import { McpAuthKitRouteLayer } from "./routes/mcp-authkit.ts";
+import { McpAuthKit } from "./McpAuthKit.ts";
 import { withRequestId } from "./Telemetry.ts";
 import { ApiKeysGroupLive } from "./routes/v1/api-keys.ts";
 import { AuthGroupLive } from "./routes/v1/auth.ts";
@@ -773,6 +775,7 @@ const buildBackendServiceGraph = <
     ExperimentServiceLayer,
     FeatureFlagService.layer,
     InternalFeatureFlagService.layer,
+    McpAuthKit.layer,
     // Push notifications: the per-(project, provider) config CRUD consumes the
     // two delivery-provider tags (supplied by BackendPushProvidersLive below)
     // and reads PUSH_REQUIRE_ENCRYPTION so prod fails closed on plaintext secrets.
@@ -1097,6 +1100,10 @@ export const buildBackendFetch = <
     HttpRouter.provideRequest(Layer.mergeAll(DomainServicesLayer, SupportServicesLayer)),
   );
 
+  const McpAuthKitRoutesLayer = McpAuthKitRouteLayer.pipe(
+    HttpRouter.provideRequest(Layer.mergeAll(DomainServicesLayer, SupportServicesLayer)),
+  );
+
   const RoutesLayer = Layer.mergeAll(
     RpcRoutesLayer,
     V1ApiRoutes,
@@ -1105,6 +1112,7 @@ export const buildBackendFetch = <
     PublicFileServingLayer,
     AiRoutesLayer,
     McpRoutesLayer,
+    McpAuthKitRoutesLayer,
     HealthCheckRoute,
     RuntimeCapabilitiesRoute(layers.features.runtimeCapabilities),
     layers.routes ?? Layer.empty,
diff --git a/apps/backend/src/McpAuthKit.test.ts b/apps/backend/src/McpAuthKit.test.ts
new file mode 100644
index 000000000..a142d1992
--- /dev/null
+++ b/apps/backend/src/McpAuthKit.test.ts
@@ -0,0 +1,65 @@
+import { Effect } from "effect";
+import { SignJWT, createLocalJWKSet, exportJWK, generateKeyPair, type JWK } from "jose";
+import { describe, expect, it } from "vite-plus/test";
+
+import { makeMcpAuthKit, normalizeAuthKitDomain } from "./McpAuthKit.ts";
+
+const ISSUER = "https://example.authkit.app";
+const AUDIENCE = "https://api.example.com/api/mcp";
+
+const authKitFixture = async () => {
+  const { privateKey, publicKey } = await generateKeyPair("RS256");
+  const publicJwk: JWK = { ...(await exportJWK(publicKey)), alg: "RS256", kid: "test" };
+  const authKit = makeMcpAuthKit(ISSUER, createLocalJWKSet({ keys: [publicJwk] }));
+  const sign = (claims: Record<string, unknown>, audience = AUDIENCE) =>
+    new SignJWT(claims)
+      .setProtectedHeader({ alg: "RS256", kid: "test" })
+      .setIssuer(ISSUER)
+      .setAudience(audience)
+      .setSubject("user_123")
+      .setIssuedAt()
+      .setExpirationTime("5m")
+      .sign(privateKey);
+  return { authKit, sign };
+};
+
+describe("normalizeAuthKitDomain", () => {
+  it("accepts a bare HTTPS issuer and removes its trailing slash", () => {
+    expect(normalizeAuthKitDomain(" https://example.authkit.app/ ")).toBe(ISSUER);
+  });
+
+  it("rejects insecure or path-bearing issuer values", () => {
+    expect(normalizeAuthKitDomain("http://example.authkit.app")).toBeUndefined();
+    expect(normalizeAuthKitDomain("https://example.authkit.app/oauth2")).toBeUndefined();
+  });
+});
+
+describe("McpAuthKit.verifyAccessToken", () => {
+  it("verifies issuer and resource audience and returns the WorkOS identity", async () => {
+    const { authKit, sign } = await authKitFixture();
+    const token = await sign({ org_id: "org_123" });
+
+    await expect(Effect.runPromise(authKit.verifyAccessToken(token, AUDIENCE))).resolves.toEqual({
+      organizationId: "org_123",
+      subject: "user_123",
+    });
+  });
+
+  it("rejects a token issued for another MCP resource", async () => {
+    const { authKit, sign } = await authKitFixture();
+    const token = await sign({ org_id: "org_123" }, "https://other.example.com/api/mcp");
+
+    await expect(
+      Effect.runPromise(authKit.verifyAccessToken(token, AUDIENCE)),
+    ).rejects.toMatchObject({ kind: "invalid_token" });
+  });
+
+  it("requires the organization selected during AuthKit consent", async () => {
+    const { authKit, sign } = await authKitFixture();
+    const token = await sign({});
+
+    await expect(
+      Effect.runPromise(authKit.verifyAccessToken(token, AUDIENCE)),
+    ).rejects.toMatchObject({ kind: "invalid_token" });
+  });
+});
diff --git a/apps/backend/src/McpAuthKit.ts b/apps/backend/src/McpAuthKit.ts
new file mode 100644
index 000000000..551669a3b
--- /dev/null
+++ b/apps/backend/src/McpAuthKit.ts
@@ -0,0 +1,123 @@
+import { Context, Data, Effect, Layer } from "effect";
+import { createRemoteJWKSet, jwtVerify, type JWTVerifyGetKey } from "jose";
+
+export class McpAuthKitError extends Data.TaggedError("McpAuthKitError")<{
+  readonly kind: "invalid_token" | "misconfigured" | "upstream";
+  readonly message: string;
+  readonly cause?: unknown;
+}> {}
+
+export interface McpAuthKitClaims {
+  readonly organizationId: string;
+  readonly subject: string;
+}
+
+/** Normalizes the HTTPS AuthKit issuer configured for MCP OAuth discovery. */
+export const normalizeAuthKitDomain = (value: string | undefined): string | undefined => {
+  const trimmed = value?.trim();
+  if (!trimmed) return undefined;
+  try {
+    const url = new URL(trimmed);
+    if (
+      url.protocol !== "https:" ||
+      url.username ||
+      url.password ||
+      url.search ||
+      url.hash ||
+      (url.pathname !== "/" && url.pathname !== "")
+    ) {
+      return undefined;
+    }
+    return url.origin;
+  } catch {
+    return undefined;
+  }
+};
+
+/** Builds AuthKit MCP verification against the supplied issuer and JWKS resolver. */
+export const makeMcpAuthKit = (
+  authorizationServer: string | undefined,
+  jwks: JWTVerifyGetKey | undefined,
+) => {
+  const requireConfiguration = () =>
+    authorizationServer && jwks
+      ? Effect.succeed({ authorizationServer, jwks })
+      : Effect.fail(
+          new McpAuthKitError({
+            kind: "misconfigured",
+            message: "WORKOS_AUTHKIT_DOMAIN must be set to the HTTPS AuthKit issuer.",
+          }),
+        );
+
+  const verifyAccessToken = (token: string, audience: string) =>
+    Effect.gen(function* () {
+      const configured = yield* requireConfiguration();
+      const verified = yield* Effect.tryPromise({
+        try: () =>
+          jwtVerify(token, configured.jwks, {
+            audience,
+            issuer: configured.authorizationServer,
+          }),
+        catch: (cause) =>
+          new McpAuthKitError({
+            cause,
+            kind: "invalid_token",
+            message:
+              "The AuthKit access token is invalid, expired, or intended for another resource.",
+          }),
+      });
+      const subject = verified.payload.sub;
+      const organizationId = verified.payload.org_id;
+      if (typeof subject !== "string" || typeof organizationId !== "string") {
+        return yield* Effect.fail(
+          new McpAuthKitError({
+            kind: "invalid_token",
+            message: "The AuthKit access token is missing its subject or organization claim.",
+          }),
+        );
+      }
+      return { organizationId, subject } satisfies McpAuthKitClaims;
+    });
+
+  const fetchAuthorizationServerMetadata = () =>
+    Effect.gen(function* () {
+      const configured = yield* requireConfiguration();
+      return yield* Effect.tryPromise({
+        try: async () => {
+          const response = await fetch(
+            `${configured.authorizationServer}/.well-known/oauth-authorization-server`,
+          );
+          if (!response.ok) throw new Error(`AuthKit metadata returned HTTP ${response.status}`);
+          return (await response.json()) as unknown;
+        },
+        catch: (cause) =>
+          new McpAuthKitError({
+            cause,
+            kind: "upstream",
+            message: "Failed to load AuthKit authorization-server metadata.",
+          }),
+      });
+    });
+
+  return {
+    authorizationServer,
+    fetchAuthorizationServerMetadata,
+    verifyAccessToken,
+  } as const;
+};
+
+/** AuthKit MCP issuer discovery and resource-audience JWT verification. */
+export class McpAuthKit extends Context.Service<McpAuthKit>()("backend/McpAuthKit", {
+  make: Effect.sync(() => {
+    const authorizationServer = normalizeAuthKitDomain(process.env.WORKOS_AUTHKIT_DOMAIN);
+    const jwks = authorizationServer
+      ? createRemoteJWKSet(new URL(`${authorizationServer}/oauth2/jwks`), {
+          cacheMaxAge: 5 * 60_000,
+          cooldownDuration: 30_000,
+        })
+      : undefined;
+    return makeMcpAuthKit(authorizationServer, jwks);
+  }),
+}) {
+  static layer = Layer.effect(McpAuthKit)(McpAuthKit.make);
+}
diff --git a/apps/backend/src/routes/mcp-authkit.test.ts b/apps/backend/src/routes/mcp-authkit.test.ts
new file mode 100644
index 000000000..808a21544
--- /dev/null
+++ b/apps/backend/src/routes/mcp-authkit.test.ts
@@ -0,0 +1,46 @@
+import { Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { describe, expect, it } from "vite-plus/test";
+
+import { makeMcpAuthKit, McpAuthKit } from "../McpAuthKit.ts";
+import { McpAuthKitRouteLayer } from "./mcp-authkit.ts";
+
+const serve = (path: string, authorizationServer?: string) =>
+  Effect.gen(function* () {
+    const authKit = Layer.succeed(
+      McpAuthKit,
+      McpAuthKit.of(makeMcpAuthKit(authorizationServer, undefined)),
+    );
+    const handler = yield* HttpRouter.toHttpEffect(
+      McpAuthKitRouteLayer.pipe(HttpRouter.provideRequest(authKit)),
+    );
+    const response = yield* handler.pipe(
+      Effect.provideService(
+        HttpServerRequest.HttpServerRequest,
+        HttpServerRequest.fromWeb(new Request(`https://api.example.com${path}`)),
+      ),
+    );
+    return HttpServerResponse.toWeb(response);
+  }).pipe(Effect.scoped, Effect.runPromise);
+
+describe("MCP AuthKit metadata", () => {
+  it("points the protected resource at the configured AuthKit issuer", async () => {
+    const response = await serve(
+      "/.well-known/oauth-protected-resource/api/mcp",
+      "https://example.authkit.app",
+    );
+
+    expect(response.status).toBe(200);
+    expect(await response.json()).toEqual({
+      authorization_servers: ["https://example.authkit.app"],
+      bearer_methods_supported: ["header"],
+      resource: "https://api.example.com/api/mcp",
+    });
+  });
+
+  it("fails closed when no AuthKit issuer is configured", async () => {
+    const response = await serve("/.well-known/oauth-protected-resource");
+
+    expect(response.status).toBe(503);
+  });
+});
diff --git a/apps/backend/src/routes/mcp-authkit.ts b/apps/backend/src/routes/mcp-authkit.ts
new file mode 100644
index 000000000..5563f4079
--- /dev/null
+++ b/apps/backend/src/routes/mcp-authkit.ts
@@ -0,0 +1,57 @@
+import { Effect, Layer } from "effect";
+import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+
+import { McpAuthKit } from "../McpAuthKit.ts";
+
+const METADATA_HEADERS = { "cache-control": "public, max-age=300" } as const;
+
+const requestOrigin = (request: HttpServerRequest.HttpServerRequest): string => {
+  try {
+    return new URL(request.originalUrl).origin;
+  } catch {
+    const host = request.headers.host ?? "localhost";
+    const protocol = request.headers["x-forwarded-proto"] ?? "http";
+    return `${protocol}://${host}`;
+  }
+};
+
+const unavailable = HttpServerResponse.json(
+  { error: "MCP OAuth is not configured" },
+  { status: 503 },
+);
+
+const protectedResourceMetadata = Effect.gen(function* () {
+  const request = yield* HttpServerRequest.HttpServerRequest;
+  const authKit = yield* McpAuthKit;
+  if (!authKit.authorizationServer) return yield* unavailable;
+  return yield* HttpServerResponse.json(
+    {
+      authorization_servers: [authKit.authorizationServer],
+      bearer_methods_supported: ["header"],
+      resource: `${requestOrigin(request)}/api/mcp`,
+    },
+    { headers: METADATA_HEADERS },
+  );
+});
+
+const authorizationServerMetadata = Effect.gen(function* () {
+  const authKit = yield* McpAuthKit;
+  const result = yield* Effect.result(authKit.fetchAuthorizationServerMetadata());
+  return result._tag === "Success"
+    ? yield* HttpServerResponse.json(result.success, { headers: METADATA_HEADERS })
+    : yield* HttpServerResponse.json({ error: result.failure.message }, { status: 502 });
+});
+
+const registerMcpAuthKitRoutes = Effect.gen(function* () {
+  const router = yield* HttpRouter.HttpRouter;
+  yield* router.add("GET", "/.well-known/oauth-protected-resource", protectedResourceMetadata);
+  yield* router.add(
+    "GET",
+    "/.well-known/oauth-protected-resource/api/mcp",
+    protectedResourceMetadata,
+  );
+  yield* router.add("GET", "/.well-known/oauth-authorization-server", authorizationServerMetadata);
+});
+
+/** AuthKit-backed OAuth discovery endpoints for the MCP protected resource. */
+export const McpAuthKitRouteLayer = Layer.effectDiscard(registerMcpAuthKitRoutes);
diff --git a/apps/backend/src/routes/mcp.test.ts b/apps/backend/src/routes/mcp.test.ts
index 4d21336d9..ec2cf71f0 100644
--- a/apps/backend/src/routes/mcp.test.ts
+++ b/apps/backend/src/routes/mcp.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vite-plus/test";
 
-import { selectMcpProject } from "./mcp.ts";
+import { mcpBearerChallenge, selectMcpProject } from "./mcp.ts";
 
 const projects = [
   { id: "proj_1", slug: "alpha" },
@@ -28,3 +28,11 @@ describe("selectMcpProject", () => {
     expect(selectMcpProject([], undefined)).toMatchObject({ ok: false, status: 403 });
   });
 });
+
+describe("mcpBearerChallenge", () => {
+  it("advertises RFC 9728 discovery through the AuthKit challenge", () => {
+    expect(mcpBearerChallenge("https://api.example.com")).toBe(
+      'Bearer error="unauthorized", error_description="Authorization needed", resource_metadata="https://api.example.com/.well-known/oauth-protected-resource/api/mcp"',
+    );
+  });
+});
diff --git a/apps/backend/src/routes/mcp.ts b/apps/backend/src/routes/mcp.ts
index d5864ff4e..aeacc61fe 100644
--- a/apps/backend/src/routes/mcp.ts
+++ b/apps/backend/src/routes/mcp.ts
@@ -6,12 +6,11 @@
  * `ai/workspace-tools.ts`; the authoring resource and prompt teach clients the
  * same schema-derived workflow.
  *
- * **Auth.** `Authorization: Bearer <token>` accepts either a project-scoped
- * secret key or a CLI user key. A secret key selects its project directly. A
- * user key uses `X-Voidhash-Project` (id or slug), unless the user can access
- * exactly one project. Both paths construct a normal {@link AuthSession}, so
- * `PaywallWorkspaceService` performs its ordinary membership checks and
- * MCP tools never accept a caller-controlled `projectId` argument.
+ * **Auth.** AuthKit is the OAuth authorization server. Its access token carries
+ * the WorkOS user, selected organization, and MCP resource audience. Project-
+ * scoped secret keys and CLI user keys remain accepted for backwards
+ * compatibility. Every path constructs a normal {@link AuthSession}, so
+ * workspace authorization is still enforced by the domain services.
  *
  * **Stateless transport.** Each POST is answered with a single JSON response (or
  * 202 for a notification). No SSE stream, no session ids, no server-initiated
@@ -21,7 +20,7 @@
  * or invalid bearer → 401 with a `WWW-Authenticate` header.
  *
  */
-import { ApiKeyService, LocalUserSessionService } from "@voidhash/core/services";
+import { ApiKeyService, LocalUserSessionService, Workos } from "@voidhash/core/services";
 import { AuthSession, type AnyAuthSession } from "@voidhash/core/domain/auth/Auth";
 import type { SecretKeySession } from "@voidhash/rpc";
 import { Cause, Effect, Layer, Result } from "effect";
@@ -37,9 +36,25 @@ import {
 } from "../mcp/protocol.ts";
 import { findMcpTool } from "../mcp/tool-manifest.ts";
 import type { WorkspaceToolScope } from "../ai/workspace-tools.ts";
+import { McpAuthKit } from "../McpAuthKit.ts";
 
-/** `WWW-Authenticate` challenge returned on any 401 (bearer scheme). */
-const WWW_AUTHENTICATE = 'Bearer realm="voidhash-mcp"';
+const requestOrigin = (request: HttpServerRequest.HttpServerRequest): string => {
+  try {
+    return new URL(request.originalUrl).origin;
+  } catch {
+    const host = request.headers.host ?? "localhost";
+    const protocol = request.headers["x-forwarded-proto"] ?? "http";
+    return `${protocol}://${host}`;
+  }
+};
+
+/** AuthKit discovery challenge returned by the protected MCP resource. */
+export const mcpBearerChallenge = (origin: string): string =>
+  [
+    'Bearer error="unauthorized"',
+    'error_description="Authorization needed"',
+    `resource_metadata="${origin}/.well-known/oauth-protected-resource/api/mcp"`,
+  ].join(", ");
 
 /** A bare JSON-RPC error response (used for pre-dispatch failures with a null id). */
 const jsonRpcErrorResponse = (status: number, code: number, message: string) =>
@@ -147,47 +162,62 @@ const makeCallTool =
 /** Handle a single stateless `POST /api/mcp` JSON-RPC message. */
 const handlePost = Effect.gen(function* () {
   const request = yield* HttpServerRequest.HttpServerRequest;
+  const origin = requestOrigin(request);
+  const challenge = mcpBearerChallenge(origin);
+  const resource = `${origin}/api/mcp`;
 
-  // 1. Auth: require a Bearer project or user key, validated by the shared service.
+  // 1. Auth: prefer a resource-bound OAuth access token; retain API keys for
+  // existing clients during migration.
   const token = bearerToken(request.headers);
   if (token === undefined) {
     return HttpServerResponse.setHeader(
       yield* jsonRpcErrorResponse(401, JsonRpcErrorCode.InvalidRequest, "Missing bearer token"),
       "www-authenticate",
-      WWW_AUTHENTICATE,
+      challenge,
     );
   }
 
-  const apiKeys = yield* ApiKeyService;
-  const validatedSecret = yield* Effect.result(apiKeys.validateSecretKey(token));
   let session: AnyAuthSession;
   let scope: WorkspaceToolScope;
-  if (Result.isSuccess(validatedSecret)) {
-    const record = validatedSecret.success;
-    session = secretKeySessionForProject({
-      id: record.project.id,
-      name: record.project.name,
-      organizationId: record.project.organizationId,
-      slug: record.project.slug,
-    });
-    scope = { projectId: record.project.id };
-  } else {
-    const validatedUser = yield* Effect.result(apiKeys.validateUserApiKey(token));
-    if (Result.isFailure(validatedUser)) {
+  if (token.split(".").length === 3) {
+    const authKit = yield* McpAuthKit;
+    const validatedToken = yield* Effect.result(authKit.verifyAccessToken(token, resource));
+    if (Result.isFailure(validatedToken)) {
+      const status = validatedToken.failure.kind === "misconfigured" ? 503 : 401;
       return HttpServerResponse.setHeader(
         yield* jsonRpcErrorResponse(
-          401,
+          status,
           JsonRpcErrorCode.InvalidRequest,
-          "Invalid or expired API key",
+          status === 503
+            ? "MCP OAuth is not configured"
+            : "Invalid or expired AuthKit access token",
         ),
         "www-authenticate",
-        WWW_AUTHENTICATE,
+        challenge,
       );
     }
+
+    const claims = validatedToken.success;
     const localUserSessions = yield* LocalUserSessionService;
-    const access = yield* localUserSessions.loadUserAccess(validatedUser.success.user.id);
+    const workos = yield* Workos;
+    const workosUser = yield* workos.getUser(claims.subject);
+    const localUser = yield* localUserSessions.resolveLocalUser(workosUser);
+    const access = yield* localUserSessions.loadUserAccess(localUser.id);
+    const organization = access.organizations.find(
+      (candidate) => candidate.workosOrganizationId === claims.organizationId,
+    );
+    if (organization === undefined) {
+      return yield* jsonRpcErrorResponse(
+        403,
+        JsonRpcErrorCode.InvalidRequest,
+        "The AuthKit grant no longer has access to its selected organization",
+      );
+    }
+    const organizationProjects = access.projects.filter(
+      (candidate) => candidate.organizationId === organization.id,
+    );
     const selection = selectMcpProject(
-      access.projects,
+      organizationProjects,
       headerValue(request.headers, "x-voidhash-project"),
     );
     if (!selection.ok) {
@@ -198,13 +228,60 @@ const handlePost = Effect.gen(function* () {
       );
     }
     const userSession = localUserSessions.toUserSession(
-      validatedUser.success.user,
-      access,
-      null,
+      localUser,
+      { organizations: [organization], projects: [selection.project] },
       null,
+      workosUser.id,
     );
-    session = { ...userSession, projects: [selection.project] } as unknown as AnyAuthSession;
+    session = userSession as unknown as AnyAuthSession;
     scope = { projectId: selection.project.id };
+  } else {
+    const apiKeys = yield* ApiKeyService;
+    const validatedSecret = yield* Effect.result(apiKeys.validateSecretKey(token));
+    if (Result.isSuccess(validatedSecret)) {
+      const record = validatedSecret.success;
+      session = secretKeySessionForProject({
+        id: record.project.id,
+        name: record.project.name,
+        organizationId: record.project.organizationId,
+        slug: record.project.slug,
+      });
+      scope = { projectId: record.project.id };
+    } else {
+      const validatedUser = yield* Effect.result(apiKeys.validateUserApiKey(token));
+      if (Result.isFailure(validatedUser)) {
+        return HttpServerResponse.setHeader(
+          yield* jsonRpcErrorResponse(
+            401,
+            JsonRpcErrorCode.InvalidRequest,
+            "Invalid or expired API key",
+          ),
+          "www-authenticate",
+          challenge,
+        );
+      }
+      const localUserSessions = yield* LocalUserSessionService;
+      const access = yield* localUserSessions.loadUserAccess(validatedUser.success.user.id);
+      const selection = selectMcpProject(
+        access.projects,
+        headerValue(request.headers, "x-voidhash-project"),
+      );
+      if (!selection.ok) {
+        return yield* jsonRpcErrorResponse(
+          selection.status,
+          JsonRpcErrorCode.InvalidRequest,
+          selection.message,
+        );
+      }
+      const userSession = localUserSessions.toUserSession(
+        validatedUser.success.user,
+        access,
+        null,
+        null,
+      );
+      session = { ...userSession, projects: [selection.project] } as unknown as AnyAuthSession;
+      scope = { projectId: selection.project.id };
+    }
   }
 
   // 2. Parse the JSON body → JSON-RPC message.
@@ -272,8 +349,8 @@ const registerMcpRoute = Effect.gen(function* () {
 
 /**
  * Registers `POST /api/mcp` (+ 405 on GET/DELETE). The request-scoped
- * requirements — {@link ApiKeyService}, workspace services, and `Db` (for key
- * validation) — are satisfied via `HttpRouter.provideRequest` by the caller
+ * requirements — OAuth/API-key auth, workspace services, and `Db` — are
+ * satisfied via `HttpRouter.provideRequest` by the caller
  * (`BackendApp`), mirroring the AI chat and webhook routes. `AuthSession` is
  * provided in-handler from the validated project or user key.
  */
diff --git a/integrations/claude-code/voidhash-paywalls/.mcp.json b/integrations/claude-code/voidhash-paywalls/.mcp.json
index cd72593bf..bb6381b07 100644
--- a/integrations/claude-code/voidhash-paywalls/.mcp.json
+++ b/integrations/claude-code/voidhash-paywalls/.mcp.json
@@ -2,8 +2,7 @@
   "mcpServers": {
     "voidhash-paywalls": {
       "type": "http",
-      "url": "https://api.voidhash.com/api/mcp",
-      "headersHelper": "${CLAUDE_PLUGIN_ROOT}/bin/voidhash-mcp-headers"
+      "url": "https://api.voidhash.com/api/mcp"
     }
   }
 }
diff --git a/integrations/claude-code/voidhash-paywalls/README.md b/integrations/claude-code/voidhash-paywalls/README.md
index 71138b448..82c07047f 100644
--- a/integrations/claude-code/voidhash-paywalls/README.md
+++ b/integrations/claude-code/voidhash-paywalls/README.md
@@ -2,31 +2,20 @@
 
 This plugin connects Claude Code to the hosted Voidhash paywall MCP server and adds a visually verified authoring workflow.
 
-## Prerequisites
+Authentication uses OAuth in the browser. The plugin does not require `voidhash-cli`, an API key, or environment variables.
 
-Install `voidhash-cli` and authenticate once:
+## Test from this checkout
 
-```sh
-voidhash-cli auth login
-```
-
-If the account can access multiple projects, set the project id or slug before starting Claude Code:
+Start Claude Code with the local plugin:
 
 ```sh
-export VOIDHASH_PROJECT=my-project
+claude --plugin-dir ./integrations/claude-code/voidhash-paywalls
 ```
 
-The plugin obtains request headers from `voidhash-cli auth token` whenever the MCP connection starts. It does not require a separate API key in plugin configuration.
+Open `/mcp`, approve the `voidhash-paywalls` server if prompted, and choose **Authenticate**. You can also run `claude mcp login voidhash-paywalls`. Complete sign-in and organization selection in the browser.
 
-## Codex
+For this browser-only flow, test with an organization that contains one project. The server rejects ambiguous multi-project organizations instead of guessing which project an agent may edit.
 
-Codex can connect to the same streamable HTTP endpoint directly. Put the user API key in an environment variable, then add this to `~/.codex/config.toml` or a trusted project's `.codex/config.toml`:
-
-```toml
-[mcp_servers.voidhash_paywalls]
-url = "https://api.voidhash.com/api/mcp"
-bearer_token_env_var = "VOIDHASH_MCP_TOKEN"
-env_http_headers = { "X-Voidhash-Project" = "VOIDHASH_PROJECT" }
-```
+Then ask Claude:
 
-Set `VOIDHASH_MCP_TOKEN` to the authenticated user API key. Set `VOIDHASH_PROJECT` to a project id or slug when the account can access multiple projects; if it can access exactly one, the `env_http_headers` line may be omitted.
+> Use Voidhash Paywalls to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
diff --git a/integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers b/integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers
deleted file mode 100755
index 095df2378..000000000
--- a/integrations/claude-code/voidhash-paywalls/bin/voidhash-mcp-headers
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/usr/bin/env sh
-set -eu
-
-if [ -n "${CLAUDE_PLUGIN_OPTION_PROJECT:-}" ]; then
-  exec voidhash-cli auth token --project "${CLAUDE_PLUGIN_OPTION_PROJECT}"
-fi
-
-exec voidhash-cli auth token
diff --git a/plugins/voidhash-paywalls/.codex-plugin/plugin.json b/plugins/voidhash-paywalls/.codex-plugin/plugin.json
new file mode 100644
index 000000000..f042f6624
--- /dev/null
+++ b/plugins/voidhash-paywalls/.codex-plugin/plugin.json
@@ -0,0 +1,24 @@
+{
+  "name": "voidhash-paywalls",
+  "version": "0.1.0",
+  "description": "Design and visually verify Voidhash paywalls with OAuth-authenticated MCP tools.",
+  "author": {
+    "name": "Voidhash"
+  },
+  "homepage": "https://voidhash.com",
+  "repository": "https://github.com/voidhashcom/voidhash",
+  "license": "MIT",
+  "keywords": ["paywalls", "design", "mcp", "oauth"],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "Voidhash Paywalls",
+    "shortDescription": "Design Voidhash paywalls with visual verification.",
+    "longDescription": "Connect Codex to Voidhash through browser-based OAuth, edit paywalls with project-scoped MCP tools, and visually verify every result.",
+    "developerName": "Voidhash",
+    "category": "Productivity",
+    "capabilities": ["OAuth", "Paywall authoring", "Visual verification"],
+    "websiteURL": "https://voidhash.com",
+    "defaultPrompt": "Use Voidhash Paywalls to design and visually verify my paywall."
+  },
+  "mcpServers": "./.mcp.json"
+}
diff --git a/plugins/voidhash-paywalls/.mcp.json b/plugins/voidhash-paywalls/.mcp.json
new file mode 100644
index 000000000..bb6381b07
--- /dev/null
+++ b/plugins/voidhash-paywalls/.mcp.json
@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "voidhash-paywalls": {
+      "type": "http",
+      "url": "https://api.voidhash.com/api/mcp"
+    }
+  }
+}
diff --git a/plugins/voidhash-paywalls/README.md b/plugins/voidhash-paywalls/README.md
new file mode 100644
index 000000000..cb0f9f7c2
--- /dev/null
+++ b/plugins/voidhash-paywalls/README.md
@@ -0,0 +1,24 @@
+# Voidhash paywalls for Codex
+
+This plugin connects Codex to the hosted Voidhash paywall MCP server and adds a visually verified authoring workflow. Authentication uses OAuth in the browser; no CLI login, API key, or environment variable is required.
+
+## Install from this checkout
+
+From the repository root:
+
+```sh
+codex plugin marketplace add .
+codex plugin add voidhash-paywalls@voidhash
+```
+
+The plugin is also available in the Codex app's plugin directory when this repository is open. Choose the **Voidhash** marketplace and install **Voidhash Paywalls**.
+
+## Authenticate and test
+
+After installation, use the MCP authentication action in Codex. In the CLI, run `codex mcp list`, then pass the listed Voidhash server name to `codex mcp login`. A browser opens so you can sign in and choose the organization to authorize.
+
+For this browser-only flow, test with an organization that contains one project. The server rejects ambiguous multi-project organizations instead of guessing which project an agent may edit.
+
+Start a new task and ask:
+
+> Use Voidhash Paywalls to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
diff --git a/plugins/voidhash-paywalls/skills/design-paywall/SKILL.md b/plugins/voidhash-paywalls/skills/design-paywall/SKILL.md
new file mode 100644
index 000000000..d5cdde045
--- /dev/null
+++ b/plugins/voidhash-paywalls/skills/design-paywall/SKILL.md
@@ -0,0 +1,30 @@
+---
+name: design-paywall
+description: Design, edit, preview, visually review, finish, or revert a Voidhash paywall through the Voidhash MCP server.
+---
+
+# Design a Voidhash paywall
+
+Use the `voidhash-paywalls` MCP server for all paywall operations.
+
+Before editing:
+
+1. Read `voidhash://paywall-authoring/reference` for the schema-derived authoring rules.
+2. Call `list_paywalls`, then `begin_paywall_edit` for the selected slug.
+3. Keep the returned `changeSetId` and pass it to every mutation and preview call.
+4. Read the current structure with `get_paywall` and available catalog, local, and builtin components with `get_components`.
+5. If the user provides an inspiration URL and browser tools are available, inspect it for visual context before editing. Browser context is optional and must never block the MCP workflow.
+
+While editing:
+
+- Prefer `edit_paywall` for visual composition and atomic batches.
+- Use `duplicate_subtree` when an existing section is the right starting point.
+- Use local component tools only when custom TSX behavior is genuinely needed. A write is not committed unless server-side compilation succeeds.
+- After meaningful sections, call `get_paywall_preview` and inspect the returned image for hierarchy, spacing, clipping, legibility, and viewport fit.
+
+Before stopping:
+
+1. Render a final full preview and inspect the actual image.
+2. Fix every visible issue and render again after the last mutation.
+3. Call `finish_paywall_edit` with the exact latest `documentSignature`, a concise visual verdict, and an empty `unresolvedIssues` list.
+4. If the result should be discarded, call `revert_paywall_edit` instead. Never abandon an active change set.
diff --git a/selfhost/.env.example b/selfhost/.env.example
index 052459d42..26873ed84 100644
--- a/selfhost/.env.example
+++ b/selfhost/.env.example
@@ -23,6 +23,7 @@ MIMIC_CORS_ORIGINS=http://localhost:3000,http://localhost:3003
 MIMIC_DOCUMENT_IDLE_NOTIFY_DEBOUNCE_MS=15000
 MIMIC_PORT=5001
 WORKOS_API_KEY=sk_test_replace-me
+WORKOS_AUTHKIT_DOMAIN=https://your-subdomain.authkit.app
 WORKOS_CLIENT_ID=client_replace-me
 WORKOS_COOKIE_NAME=wos-session
 WORKOS_COOKIE_PASSWORD=replace-with-at-least-32-random-characters
diff --git a/selfhost/docker-compose.yml b/selfhost/docker-compose.yml
index 6281abc99..5823ea066 100644
--- a/selfhost/docker-compose.yml
+++ b/selfhost/docker-compose.yml
@@ -181,6 +181,7 @@ services:
       S3_PUBLIC_BUCKET: ${S3_PUBLIC_BUCKET:-voidhash-public}
       S3_ARTIFACT_BUCKET: ${S3_ARTIFACT_BUCKET:-voidhash-artifacts}
       WORKOS_API_KEY: ${WORKOS_API_KEY:-sk_test_selfhost_not_configured}
+      WORKOS_AUTHKIT_DOMAIN: ${WORKOS_AUTHKIT_DOMAIN:-}
       WORKOS_CLIENT_ID: ${WORKOS_CLIENT_ID:-client_selfhost_not_configured}
       WORKOS_COOKIE_NAME: ${WORKOS_COOKIE_NAME:-wos-session}
       WORKOS_COOKIE_PASSWORD: ${WORKOS_COOKIE_PASSWORD:-selfhost-development-cookie-password-change-me}
diff --git a/turbo.json b/turbo.json
index c2ce05444..226ab3161 100644
--- a/turbo.json
+++ b/turbo.json
@@ -21,6 +21,7 @@
         "POLAR_ACCESS_TOKEN",
         "GITHUB_CLIENT_ID",
         "GITHUB_CLIENT_SECRET",
+        "WORKOS_AUTHKIT_DOMAIN",
         "AXIOM_TOKEN",
         "AXIOM_LOGS_DATASET",
         "AXIOM_LOG_LEVEL"

From 266f016101332dc6ccf5d38b34eaca05273e2ddb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 18:58:27 +0200
Subject: [PATCH 093/129] refactor: rename MCP plugins to voidhash

---
 .agents/plugins/marketplace.json              |  4 +--
 .../claude-code/voidhash-paywalls/README.md   | 21 ------------
 .../.claude-plugin/plugin.json                |  6 ++--
 .../claude-code/voidhash}/.mcp.json           |  2 +-
 integrations/claude-code/voidhash/README.md   | 21 ++++++++++++
 .../voidhash}/skills/design-paywall/SKILL.md  |  2 +-
 .../.codex-plugin/plugin.json                 | 24 --------------
 plugins/voidhash/.codex-plugin/plugin.json    | 33 +++++++++++++++++++
 .../voidhash}/.mcp.json                       |  2 +-
 .../{voidhash-paywalls => voidhash}/README.md | 10 +++---
 .../voidhash}/skills/design-paywall/SKILL.md  |  2 +-
 11 files changed, 68 insertions(+), 59 deletions(-)
 delete mode 100644 integrations/claude-code/voidhash-paywalls/README.md
 rename integrations/claude-code/{voidhash-paywalls => voidhash}/.claude-plugin/plugin.json (52%)
 rename {plugins/voidhash-paywalls => integrations/claude-code/voidhash}/.mcp.json (79%)
 create mode 100644 integrations/claude-code/voidhash/README.md
 rename {plugins/voidhash-paywalls => integrations/claude-code/voidhash}/skills/design-paywall/SKILL.md (96%)
 delete mode 100644 plugins/voidhash-paywalls/.codex-plugin/plugin.json
 create mode 100644 plugins/voidhash/.codex-plugin/plugin.json
 rename {integrations/claude-code/voidhash-paywalls => plugins/voidhash}/.mcp.json (79%)
 rename plugins/{voidhash-paywalls => voidhash}/README.md (60%)
 rename {integrations/claude-code/voidhash-paywalls => plugins/voidhash}/skills/design-paywall/SKILL.md (96%)

diff --git a/.agents/plugins/marketplace.json b/.agents/plugins/marketplace.json
index a36c5ecf5..d0f47742c 100644
--- a/.agents/plugins/marketplace.json
+++ b/.agents/plugins/marketplace.json
@@ -5,10 +5,10 @@
   },
   "plugins": [
     {
-      "name": "voidhash-paywalls",
+      "name": "voidhash",
       "source": {
         "source": "local",
-        "path": "./plugins/voidhash-paywalls"
+        "path": "./plugins/voidhash"
       },
       "policy": {
         "installation": "AVAILABLE",
diff --git a/integrations/claude-code/voidhash-paywalls/README.md b/integrations/claude-code/voidhash-paywalls/README.md
deleted file mode 100644
index 82c07047f..000000000
--- a/integrations/claude-code/voidhash-paywalls/README.md
+++ /dev/null
@@ -1,21 +0,0 @@
-# Voidhash paywalls for Claude Code
-
-This plugin connects Claude Code to the hosted Voidhash paywall MCP server and adds a visually verified authoring workflow.
-
-Authentication uses OAuth in the browser. The plugin does not require `voidhash-cli`, an API key, or environment variables.
-
-## Test from this checkout
-
-Start Claude Code with the local plugin:
-
-```sh
-claude --plugin-dir ./integrations/claude-code/voidhash-paywalls
-```
-
-Open `/mcp`, approve the `voidhash-paywalls` server if prompted, and choose **Authenticate**. You can also run `claude mcp login voidhash-paywalls`. Complete sign-in and organization selection in the browser.
-
-For this browser-only flow, test with an organization that contains one project. The server rejects ambiguous multi-project organizations instead of guessing which project an agent may edit.
-
-Then ask Claude:
-
-> Use Voidhash Paywalls to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
diff --git a/integrations/claude-code/voidhash-paywalls/.claude-plugin/plugin.json b/integrations/claude-code/voidhash/.claude-plugin/plugin.json
similarity index 52%
rename from integrations/claude-code/voidhash-paywalls/.claude-plugin/plugin.json
rename to integrations/claude-code/voidhash/.claude-plugin/plugin.json
index 99819a22c..c4e7af09c 100644
--- a/integrations/claude-code/voidhash-paywalls/.claude-plugin/plugin.json
+++ b/integrations/claude-code/voidhash/.claude-plugin/plugin.json
@@ -1,12 +1,12 @@
 {
-  "name": "voidhash-paywalls",
+  "name": "voidhash",
   "version": "0.1.0",
-  "description": "Design and visually verify Voidhash paywalls from Claude Code.",
+  "description": "Control Voidhash with OAuth-authenticated MCP tools from Claude Code.",
   "author": {
     "name": "Voidhash"
   },
   "homepage": "https://voidhash.com",
   "repository": "https://github.com/voidhashcom/voidhash",
   "license": "MIT",
-  "keywords": ["paywalls", "design", "mcp"]
+  "keywords": ["voidhash", "mcp", "oauth", "paywalls"]
 }
diff --git a/plugins/voidhash-paywalls/.mcp.json b/integrations/claude-code/voidhash/.mcp.json
similarity index 79%
rename from plugins/voidhash-paywalls/.mcp.json
rename to integrations/claude-code/voidhash/.mcp.json
index bb6381b07..90bc68bf3 100644
--- a/plugins/voidhash-paywalls/.mcp.json
+++ b/integrations/claude-code/voidhash/.mcp.json
@@ -1,6 +1,6 @@
 {
   "mcpServers": {
-    "voidhash-paywalls": {
+    "voidhash": {
       "type": "http",
       "url": "https://api.voidhash.com/api/mcp"
     }
diff --git a/integrations/claude-code/voidhash/README.md b/integrations/claude-code/voidhash/README.md
new file mode 100644
index 000000000..96d4b9a97
--- /dev/null
+++ b/integrations/claude-code/voidhash/README.md
@@ -0,0 +1,21 @@
+# Voidhash for Claude Code
+
+This plugin connects Claude Code to the hosted Voidhash MCP server. It currently includes visually verified paywall authoring and can grow with additional platform tools.
+
+Authentication uses OAuth in the browser. The plugin does not require `voidhash-cli`, an API key, or environment variables.
+
+## Test from this checkout
+
+Start Claude Code with the local plugin:
+
+```sh
+claude --plugin-dir ./integrations/claude-code/voidhash
+```
+
+Open `/mcp`, approve the `voidhash` server if prompted, and choose **Authenticate**. You can also run `claude mcp login voidhash`. Complete sign-in and organization selection in the browser.
+
+For this browser-only flow, test with an organization that contains one project. The server rejects ambiguous multi-project organizations instead of guessing which project an agent may edit.
+
+Then ask Claude:
+
+> Use Voidhash to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
diff --git a/plugins/voidhash-paywalls/skills/design-paywall/SKILL.md b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
similarity index 96%
rename from plugins/voidhash-paywalls/skills/design-paywall/SKILL.md
rename to integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
index d5cdde045..3f7759dbc 100644
--- a/plugins/voidhash-paywalls/skills/design-paywall/SKILL.md
+++ b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
@@ -5,7 +5,7 @@ description: Design, edit, preview, visually review, finish, or revert a Voidhas
 
 # Design a Voidhash paywall
 
-Use the `voidhash-paywalls` MCP server for all paywall operations.
+Use the `voidhash` MCP server for all paywall operations.
 
 Before editing:
 
diff --git a/plugins/voidhash-paywalls/.codex-plugin/plugin.json b/plugins/voidhash-paywalls/.codex-plugin/plugin.json
deleted file mode 100644
index f042f6624..000000000
--- a/plugins/voidhash-paywalls/.codex-plugin/plugin.json
+++ /dev/null
@@ -1,24 +0,0 @@
-{
-  "name": "voidhash-paywalls",
-  "version": "0.1.0",
-  "description": "Design and visually verify Voidhash paywalls with OAuth-authenticated MCP tools.",
-  "author": {
-    "name": "Voidhash"
-  },
-  "homepage": "https://voidhash.com",
-  "repository": "https://github.com/voidhashcom/voidhash",
-  "license": "MIT",
-  "keywords": ["paywalls", "design", "mcp", "oauth"],
-  "skills": "./skills/",
-  "interface": {
-    "displayName": "Voidhash Paywalls",
-    "shortDescription": "Design Voidhash paywalls with visual verification.",
-    "longDescription": "Connect Codex to Voidhash through browser-based OAuth, edit paywalls with project-scoped MCP tools, and visually verify every result.",
-    "developerName": "Voidhash",
-    "category": "Productivity",
-    "capabilities": ["OAuth", "Paywall authoring", "Visual verification"],
-    "websiteURL": "https://voidhash.com",
-    "defaultPrompt": "Use Voidhash Paywalls to design and visually verify my paywall."
-  },
-  "mcpServers": "./.mcp.json"
-}
diff --git a/plugins/voidhash/.codex-plugin/plugin.json b/plugins/voidhash/.codex-plugin/plugin.json
new file mode 100644
index 000000000..e6e986c9c
--- /dev/null
+++ b/plugins/voidhash/.codex-plugin/plugin.json
@@ -0,0 +1,33 @@
+{
+  "name": "voidhash",
+  "version": "0.1.0+codex.20260714165709",
+  "description": "Control Voidhash with OAuth-authenticated MCP tools.",
+  "author": {
+    "name": "Voidhash"
+  },
+  "homepage": "https://voidhash.com",
+  "repository": "https://github.com/voidhashcom/voidhash",
+  "license": "MIT",
+  "keywords": [
+    "voidhash",
+    "mcp",
+    "oauth",
+    "paywalls"
+  ],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "Voidhash",
+    "shortDescription": "Work with Voidhash through OAuth-authenticated tools.",
+    "longDescription": "Connect Codex to Voidhash through browser-based OAuth and use platform tools, starting with visually verified paywall authoring.",
+    "developerName": "Voidhash",
+    "category": "Productivity",
+    "capabilities": [
+      "OAuth",
+      "Platform tools",
+      "Paywall authoring"
+    ],
+    "websiteURL": "https://voidhash.com",
+    "defaultPrompt": "Use Voidhash to design and visually verify my paywall."
+  },
+  "mcpServers": "./.mcp.json"
+}
diff --git a/integrations/claude-code/voidhash-paywalls/.mcp.json b/plugins/voidhash/.mcp.json
similarity index 79%
rename from integrations/claude-code/voidhash-paywalls/.mcp.json
rename to plugins/voidhash/.mcp.json
index bb6381b07..90bc68bf3 100644
--- a/integrations/claude-code/voidhash-paywalls/.mcp.json
+++ b/plugins/voidhash/.mcp.json
@@ -1,6 +1,6 @@
 {
   "mcpServers": {
-    "voidhash-paywalls": {
+    "voidhash": {
       "type": "http",
       "url": "https://api.voidhash.com/api/mcp"
     }
diff --git a/plugins/voidhash-paywalls/README.md b/plugins/voidhash/README.md
similarity index 60%
rename from plugins/voidhash-paywalls/README.md
rename to plugins/voidhash/README.md
index cb0f9f7c2..e535c7a50 100644
--- a/plugins/voidhash-paywalls/README.md
+++ b/plugins/voidhash/README.md
@@ -1,6 +1,6 @@
-# Voidhash paywalls for Codex
+# Voidhash for Codex
 
-This plugin connects Codex to the hosted Voidhash paywall MCP server and adds a visually verified authoring workflow. Authentication uses OAuth in the browser; no CLI login, API key, or environment variable is required.
+This plugin connects Codex to the hosted Voidhash MCP server. It currently includes visually verified paywall authoring and can grow with additional platform tools. Authentication uses OAuth in the browser; no CLI login, API key, or environment variable is required.
 
 ## Install from this checkout
 
@@ -8,10 +8,10 @@ From the repository root:
 
 ```sh
 codex plugin marketplace add .
-codex plugin add voidhash-paywalls@voidhash
+codex plugin add voidhash@voidhash
 ```
 
-The plugin is also available in the Codex app's plugin directory when this repository is open. Choose the **Voidhash** marketplace and install **Voidhash Paywalls**.
+The plugin is also available in the Codex app's plugin directory when this repository is open. Choose the **Voidhash** marketplace and install **Voidhash**.
 
 ## Authenticate and test
 
@@ -21,4 +21,4 @@ For this browser-only flow, test with an organization that contains one project.
 
 Start a new task and ask:
 
-> Use Voidhash Paywalls to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
+> Use Voidhash to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
diff --git a/integrations/claude-code/voidhash-paywalls/skills/design-paywall/SKILL.md b/plugins/voidhash/skills/design-paywall/SKILL.md
similarity index 96%
rename from integrations/claude-code/voidhash-paywalls/skills/design-paywall/SKILL.md
rename to plugins/voidhash/skills/design-paywall/SKILL.md
index d5cdde045..3f7759dbc 100644
--- a/integrations/claude-code/voidhash-paywalls/skills/design-paywall/SKILL.md
+++ b/plugins/voidhash/skills/design-paywall/SKILL.md
@@ -5,7 +5,7 @@ description: Design, edit, preview, visually review, finish, or revert a Voidhas
 
 # Design a Voidhash paywall
 
-Use the `voidhash-paywalls` MCP server for all paywall operations.
+Use the `voidhash` MCP server for all paywall operations.
 
 Before editing:
 

From e098973a60df7d1340c91872cb95fc3e26e04d6d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Tue, 14 Jul 2026 19:22:35 +0200
Subject: [PATCH 094/129] docs: explain no-code paywall dynamics

---
 .../src/ai/skills/paywall-authoring.test.ts   |  21 +++
 .../src/ai/skills/paywall-authoring.ts        | 160 ++++++++++++------
 apps/backend/src/mcp/protocol.test.ts         |   4 +
 apps/backend/src/mcp/protocol.ts              |  10 +-
 .../voidhash/skills/design-paywall/SKILL.md   |   2 +
 plugins/voidhash/.codex-plugin/plugin.json    |   2 +-
 .../voidhash/skills/design-paywall/SKILL.md   |   2 +
 7 files changed, 148 insertions(+), 53 deletions(-)

diff --git a/apps/backend/src/ai/skills/paywall-authoring.test.ts b/apps/backend/src/ai/skills/paywall-authoring.test.ts
index 72cebe165..8e612c14f 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.test.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.test.ts
@@ -99,3 +99,24 @@ describe("paywallAuthoringSkill — visual review discipline", () => {
     expect(skill).toContain("Purchase affordances");
   });
 });
+
+describe("paywallAuthoringSkill — dynamic no-code behavior", () => {
+  it("explains the variables → actions → states cycle and component action bindings", () => {
+    expect(skill).toContain("Variables, states, and actions");
+    expect(skill).toContain("declare variable → click action updates variable");
+    expect(skill).toContain("`localVariables`");
+    expect(skill).toContain("`set-variable`");
+    expect(skill).toContain("`purchase-product`");
+    expect(skill).toContain("`actionBindings`");
+    expect(skill).toContain("Later matching states win conflicting fields");
+    expect(skill).toContain("State style overrides do not auto-enable");
+    expect(skill).toContain('"backgroundEnabled": true');
+    expect(skill).toContain('"selected_product"');
+  });
+
+  it("keeps variable-driven states in the document-first path", () => {
+    expect(skill).toContain("document variables + states + actions");
+    expect(skill).toContain("simple conditional visibility via `display`");
+    expect(skill).toContain("document states are driven");
+  });
+});
diff --git a/apps/backend/src/ai/skills/paywall-authoring.ts b/apps/backend/src/ai/skills/paywall-authoring.ts
index e47cfd037..fe8e601d3 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.ts
@@ -147,7 +147,7 @@ by their engine-minted id. The node kinds you build with:
   document). Holds the whole layout; has a background, safe-area flags, and a
   fixed default size (375×812).
 - \`view\` — a flex container / row / column. The workhorse for layout, grouping,
-  cards, buttons (a \`view\` with an \`onPress\` interaction is a tappable surface —
+  cards, buttons (a \`view\` with a click interaction is a tappable surface —
   there is no separate button/pressable node).
 - \`scrollView\` — a \`view\` that SCROLLS. Same style/children as a \`view\`; use it
   for content taller than the screen. \`horizontal: true\` scrolls sideways and lays
@@ -182,12 +182,14 @@ Style is a per-node \`style\` object of RN-named fields (NO shorthands: write
 \`borderRadius\`). Colors are \`rgba(r, g, b, a)\` strings. Each node type accepts a
 different subset; a field not listed for a node type is rejected on it.
 
-**Group flags are AUTO-MANAGED.** Setting ANY background / border / shadow (or, on
-\`path\`, fill / stroke) field automatically turns that group's \`<group>Enabled\`
-flag on — just set \`backgroundColor\` and the background renders; you never write
-\`backgroundEnabled: true\`. The \`*Enabled\` flags below exist ONLY for non-destructive
-hiding: the sole reason to write one yourself is \`false\` (e.g.
-\`{ backgroundEnabled: false }\`) to hide a group while keeping its fields for later.
+**Group flags are AUTO-MANAGED in a node's base \`style\`.** Setting ANY background /
+border / shadow (or, on \`path\`, fill / stroke) field there automatically turns
+that group's \`<group>Enabled\` flag on — just set \`backgroundColor\` and the
+background renders. Inside \`states[].overrides.style\`, explicitly include the
+matching \`*Enabled: true\` flag when the base style has not already enabled that
+group. The flags also support non-destructive hiding: explicitly set one to
+\`false\` (e.g. \`{ backgroundEnabled: false }\`) to hide a group while keeping its
+fields for later.
 
 Set a style field via \`update\` with merge semantics: \`set: { style: { paddingTop: 8 } }\`
 changes ONLY \`paddingTop\` and leaves every other style field untouched. To insert
@@ -352,57 +354,117 @@ component) and follow the shapes the tool reports — do not assume field names.
 Bind a purchase to the component's declared action via the same interaction model
 as (d): a \`purchase-product\` action on the component's action slot.
 
-### (d) Variables and interactions (what the document supports)
-
-Variables and press interactions ARE first-class document data (on the node
-\`localVariables\` / \`interactions\` fields), so you can wire simple behavior WITHOUT
-a code component:
-
-- **Local variables** live on \`screen\`/\`view\`/\`text\` as \`localVariables\`: an array
-  of \`{ id, name, value }\` where \`value\` is a tagged union on \`key\`:
-  \`{ key: "string", value }\` | \`{ key: "number", value }\` |
-  \`{ key: "boolean", value }\` | \`{ key: "product", value: { productId? } }\`.
-- **Interactions** live on \`view\` as \`interactions\`: an array of
-  \`{ id, trigger, action }\`. The only trigger is \`{ type: "click" }\`. Actions:
-  - \`{ type: "none" }\` — no-op.
-  - \`{ type: "close-paywall" }\` — dismiss the paywall.
-  - \`{ type: "purchase-product", payload: <productSource> }\` — start a purchase,
-    where productSource is \`{ type: "literal", productId }\` or
-    \`{ type: "variable-reference", variableId }\`.
-  - \`{ type: "set-variable", payload: { variableId, newValue: <valueSource> } }\`
-    where valueSource is \`{ type: "literal", value: <tagged value> }\` or
-    \`{ type: "variable-reference", value: { id } }\`.
-
-Make a \`view\` a purchase button by giving it an \`interactions\` array with a click
-→ purchase-product action (set via \`update\`'s \`set: { interactions: [...] }\` —
-arrays replace wholesale, so send the complete list):
+### (d) Variables, states, and actions (dynamic behavior without code)
+
+These three first-class document fields form a small no-code state machine:
+
+1. **Variables hold runtime state.** Put \`localVariables\` on a common ancestor so
+   the node and its descendants can read them. Supported values are
+   \`{ key: "string", value }\`, \`{ key: "number", value }\`,
+   \`{ key: "boolean", value }\`, and
+   \`{ key: "product", value: { productId? } }\`. Variables may live on
+   \`screen\`, \`view\`, \`scrollView\`, \`text\`, \`shape\`, or \`path\`; lookup is
+   lexical (own node, then nearest ancestor). Declare shared state on the nearest
+   common ancestor and reference its stable \`id\`, never its display \`name\`.
+2. **Actions change state or call the host.** A \`view\` or \`scrollView\` has an
+   \`interactions\` array of \`{ id, trigger: { type: "click" }, action }\`. The
+   action is \`none\`, \`close-paywall\`, \`set-variable\`, or \`purchase-product\`.
+   Values/products can be literals or variable references. A \`component\` exposes
+   named outputs through \`actionBindings\`; bind those names (from
+   \`get_components\`) to the same actions, optionally reading a field from the
+   component's emitted payload with \`{ type: "action-payload", ... }\`.
+3. **States react to variables.** Stateful nodes have a \`states\` array. Each state
+   has \`{ id, name, condition, overrides }\`. A condition is DNF:
+   \`{ type: "or", value: [ { type: "and", value: [predicates...] } ] }\` — any
+   OR branch may match, while every predicate in an AND branch must match.
+   Predicates are \`equals\`, \`not-equals\`, \`greater-than\`,
+   \`greater-than-or-equal\`, \`less-than\`, or \`less-than-or-equal\`; each operand
+   is a typed literal or \`{ type: "variable-reference", value: { id } }\`.
+   Matching states merge \`overrides.style\` over the base style immediately after
+   a variable changes. Later matching states win conflicting fields. On \`view\`
+   and \`scrollView\`, a state may also replace an interaction's action through
+   \`overrides.actions\`; its \`interactionId\` must be the interaction array-entry
+   id returned by \`get_document\`. State style overrides do not auto-enable gated
+   groups, so include \`backgroundEnabled\`, \`borderEnabled\`, \`shadowEnabled\`,
+   \`fillEnabled\`, or \`strokeEnabled\` when an override first turns on that group.
+
+This is enough for product selection, toggles, conditional emphasis/visibility,
+multi-step sections, close buttons, and a CTA that purchases the selected product
+without TSX. Build the cycle as **declare variable → click action updates variable
+→ matching state changes appearance/behavior → CTA consumes variable**.
+
+Example: declare the selected product on the screen, make a yearly option select
+it and show its selected style, then have the CTA purchase the current selection.
+Repeat the option action/state for each other product id:
 
 \`\`\`json
 { "edits": [
+  { "op": "update", "nodeId": "scr_1", "set": { "localVariables": [
+    { "id": "selected_product", "name": "Selected product",
+      "value": { "key": "product", "value": { "productId": "yearly" } } }
+  ] } },
+  { "op": "update", "nodeId": "view_yearly", "set": {
+    "interactions": [
+      { "id": "select_yearly", "trigger": { "type": "click" },
+        "action": { "type": "set-variable", "payload": {
+          "variableId": "selected_product",
+          "newValue": { "type": "literal", "value": {
+            "key": "product", "value": { "productId": "yearly" }
+          } }
+        } }
+      }
+    ],
+    "states": [
+      { "id": "yearly_selected", "name": "Selected", "condition": {
+          "type": "or", "value": [
+            { "type": "and", "value": [
+              { "type": "equals", "value": {
+                "left": { "type": "variable-reference", "value": { "id": "selected_product" } },
+                "right": { "type": "literal", "value": {
+                  "key": "product", "value": { "productId": "yearly" }
+                } }
+              } }
+            ] }
+          ]
+        }, "overrides": { "style": {
+          "backgroundEnabled": true,
+          "backgroundColor": "rgba(99,102,241,0.16)",
+          "borderEnabled": true,
+          "borderColor": "rgba(99,102,241,1)",
+          "borderTopWidth": 2, "borderRightWidth": 2,
+          "borderBottomWidth": 2, "borderLeftWidth": 2
+        } }
+      }
+    ]
+  } },
   { "op": "update", "nodeId": "view_cta", "set": { "interactions": [
-      { "id": "int_1", "trigger": { "type": "click" },
-        "action": { "type": "purchase-product",
-          "payload": { "type": "literal", "productId": "yearly" } } }
+    { "id": "purchase_selected", "trigger": { "type": "click" },
+      "action": { "type": "purchase-product", "payload": {
+        "type": "variable-reference", "variableId": "selected_product"
+      } }
+    }
   ] } }
 ] }
 \`\`\`
 
-The \`id\` fields inside \`localVariables\`/\`interactions\`/gradient stops are your
-own logical ids for those sub-records (NOT node ids) — mint stable strings.
+Arrays replace wholesale on \`update\`, so preserve every existing variable,
+interaction, state, prop binding, or action binding you still need. The \`id\`
+fields inside these arrays are stable logical ids for sub-records, not node ids.
 
 ## Doctrine: build with the document, reach for code only when you must
 
 **The document (\`edit_document\`) is ALWAYS the primary way to build a paywall.**
-Static layout, styling, literal text, local variables, and click interactions all
-belong in the document. Write a code component ONLY when the document genuinely
-cannot express what you need:
+Static layout, styling, literal text, local variables, click/component actions,
+and variable-driven style/visibility states all belong in the document. Write a
+code component ONLY when the document genuinely cannot express what you need:
 
 - **Mapping/looping** — one row per product, or any list built by iterating over
   runtime data (\`usePaywallProducts()\`).
-- **Conditional / branching rendering** — element A vs B based on selection,
-  status, a variable, or product shape.
-- **Pressed / hover / focus visual states** — a button that changes color while
-  pressed.
+- **Structural branching** — different children/content that cannot be expressed
+  by a variable-driven style state (simple conditional visibility via \`display\`
+  belongs in document states).
+- **Transient pressed / hover / focus pseudo-states** — document states are driven
+  by variables, not pointer/gesture lifecycle.
 - **Animation.**
 - **Custom formatting logic** — deriving "$5/mo billed yearly", percent savings,
   trial copy.
@@ -412,12 +474,14 @@ cannot express what you need:
 ### Decision checklist
 
 1. Static layout + literal text? → **document** (\`screen\`/\`view\`/\`text\` nodes).
-2. Text needs runtime data (price, count, formatting)? → code component for that
+2. Selection, toggle, conditional styling/visibility, close, or purchase flow? →
+   **document variables + states + actions.**
+3. Text needs runtime data (price, count, formatting)? → code component for that
    text only.
-3. A list produced by iterating products/data? → code component (map).
-4. Branches on selection/status/variable? → code component.
-5. Pressed/hover/animated visuals? → code component.
-6. Otherwise → **document.** Prefer building with nodes.
+4. A list produced by iterating products/data? → code component (map).
+5. Structural branching not expressible with state style overrides? → code component.
+6. Pressed/hover/animated visuals? → code component.
+7. Otherwise → **document.** Prefer building with nodes.
 
 When a code component IS needed, keep it **as small as possible** — one focused
 interactive widget — then place it as a \`component\` node in the document.
diff --git a/apps/backend/src/mcp/protocol.test.ts b/apps/backend/src/mcp/protocol.test.ts
index 7a71ac0b4..b7f67f732 100644
--- a/apps/backend/src/mcp/protocol.test.ts
+++ b/apps/backend/src/mcp/protocol.test.ts
@@ -163,6 +163,8 @@ describe("resources", () => {
       ?.text;
     expect(text).toContain("begin_paywall_edit");
     expect(text).toContain("Document model");
+    expect(text).toContain("Variables, states, and actions");
+    expect(text).toContain("selected_product");
   });
 });
 
@@ -185,6 +187,8 @@ describe("prompts", () => {
     ).result.messages[0]?.content.text;
     expect(text).toContain('paywall "trial"');
     expect(text).toContain("get_paywall_preview");
+    expect(text).toContain("dynamic behavior without code");
+    expect(text).toContain("actionBindings");
     expect(text).toContain("Improve hierarchy");
   });
 });
diff --git a/apps/backend/src/mcp/protocol.ts b/apps/backend/src/mcp/protocol.ts
index 7320f6895..6bc31fa4c 100644
--- a/apps/backend/src/mcp/protocol.ts
+++ b/apps/backend/src/mcp/protocol.ts
@@ -36,7 +36,7 @@ const mcpAuthoringGuide = (): string => `# MCP paywall workflow
 
 1. Discover paywalls with \`list_paywalls\`, then call \`begin_paywall_edit\`.
 2. Read structure and components before writing. Pass the returned \`changeSetId\` to every mutation.
-3. Use \`edit_paywall\` for document composition, \`duplicate_subtree\` for visual cloning, and component tools only for local TSX.
+3. Build dynamic behavior without code using document \`localVariables\`, conditional \`states\`, click \`interactions\`, and component \`actionBindings\`. Use \`edit_paywall\` for composition, \`duplicate_subtree\` for visual cloning, and component tools only when the document model cannot express the behavior.
 4. Render \`get_paywall_preview\`, inspect the image, correct any visual issues, and render again.
 5. Call \`finish_paywall_edit\` with the exact latest document signature and an empty issue list, or \`revert_paywall_edit\` to restore the baseline.
 
@@ -138,7 +138,7 @@ const initializeResult = (params: Record<string, unknown> | undefined) => ({
   capabilities: { tools: {}, resources: {}, prompts: {} },
   serverInfo: SERVER_INFO,
   instructions:
-    "Begin a paywall edit change set before mutating. Review the final PNG preview and finish with its exact document signature, or revert the change set.",
+    "Begin a paywall edit change set before mutating. Prefer document variables, conditional states, and actions for dynamic behavior without code. Review the final PNG preview and finish with its exact document signature, or revert the change set.",
 });
 
 /** The `tools/list` result: the advertised tool descriptors. */
@@ -150,7 +150,8 @@ const resourcesListResult = () => ({
       uri: AUTHORING_RESOURCE_URI,
       name: AUTHORING_RESOURCE_NAME,
       title: "Voidhash paywall authoring reference",
-      description: "Schema-derived document, style, component, and MCP workflow guidance.",
+      description:
+        "Schema-derived document, style, no-code variable/state/action, component, and MCP workflow guidance.",
       mimeType: "text/markdown",
     },
   ],
@@ -161,7 +162,8 @@ const promptsListResult = () => ({
     {
       name: DESIGN_PROMPT_NAME,
       title: "Design a paywall",
-      description: "Start a visually verified MCP paywall-authoring workflow.",
+      description:
+        "Start a visually verified MCP paywall-authoring workflow with dynamic no-code behavior.",
       arguments: [
         { name: "slug", description: "Paywall slug to edit.", required: true },
         { name: "request", description: "What to change or create.", required: false },
diff --git a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
index 3f7759dbc..6b59bc89c 100644
--- a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
+++ b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
@@ -19,6 +19,8 @@ While editing:
 
 - Prefer `edit_paywall` for visual composition and atomic batches.
 - Use `duplicate_subtree` when an existing section is the right starting point.
+- Build dynamic behavior without code whenever the document can express it: declare typed `localVariables` on the nearest common ancestor, use `view`/`scrollView` click interactions or component `actionBindings` to run `set-variable`, `purchase-product`, or `close-paywall`, and use conditional `states` to override styles or actions when variables match. Preserve complete arrays when updating them.
+- Use the no-code cycle `variable → action changes variable → matching state changes appearance/behavior → CTA consumes variable` for product selection, toggles, conditional visibility, multi-step sections, and purchase flows.
 - Use local component tools only when custom TSX behavior is genuinely needed. A write is not committed unless server-side compilation succeeds.
 - After meaningful sections, call `get_paywall_preview` and inspect the returned image for hierarchy, spacing, clipping, legibility, and viewport fit.
 
diff --git a/plugins/voidhash/.codex-plugin/plugin.json b/plugins/voidhash/.codex-plugin/plugin.json
index e6e986c9c..3c97c9b90 100644
--- a/plugins/voidhash/.codex-plugin/plugin.json
+++ b/plugins/voidhash/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "voidhash",
-  "version": "0.1.0+codex.20260714165709",
+  "version": "0.1.0+codex.20260714172114",
   "description": "Control Voidhash with OAuth-authenticated MCP tools.",
   "author": {
     "name": "Voidhash"
diff --git a/plugins/voidhash/skills/design-paywall/SKILL.md b/plugins/voidhash/skills/design-paywall/SKILL.md
index 3f7759dbc..6b59bc89c 100644
--- a/plugins/voidhash/skills/design-paywall/SKILL.md
+++ b/plugins/voidhash/skills/design-paywall/SKILL.md
@@ -19,6 +19,8 @@ While editing:
 
 - Prefer `edit_paywall` for visual composition and atomic batches.
 - Use `duplicate_subtree` when an existing section is the right starting point.
+- Build dynamic behavior without code whenever the document can express it: declare typed `localVariables` on the nearest common ancestor, use `view`/`scrollView` click interactions or component `actionBindings` to run `set-variable`, `purchase-product`, or `close-paywall`, and use conditional `states` to override styles or actions when variables match. Preserve complete arrays when updating them.
+- Use the no-code cycle `variable → action changes variable → matching state changes appearance/behavior → CTA consumes variable` for product selection, toggles, conditional visibility, multi-step sections, and purchase flows.
 - Use local component tools only when custom TSX behavior is genuinely needed. A write is not committed unless server-side compilation succeeds.
 - After meaningful sections, call `get_paywall_preview` and inspect the returned image for hierarchy, spacing, clipping, legibility, and viewport fit.
 

From cf22ac496c0f7d4f54aaea8786f12f73125f1f9b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 15 Jul 2026 10:12:59 +0200
Subject: [PATCH 095/129] feat: ai agent redesign

---
 .pnpmfile.cjs                                 |   11 +
 LICENSE.md                                    |    4 -
 apps/backend/package.json                     |    3 +-
 apps/backend/src/BackendApp.ts                |   85 +-
 .../src/ai/AgentSessionIndexAdapter.test.ts   |   54 +
 .../src/ai/AgentSessionIndexAdapter.ts        |   26 +
 apps/backend/src/ai/DesignerContext.ts        |  108 ++
 apps/backend/src/ai/VoidhashAiService.ts      |  435 ------
 apps/backend/src/ai/WorkspaceAgentModels.ts   |   19 +
 apps/backend/src/ai/WorkspaceAgentServices.ts |   23 +
 .../ai/WorkspaceAgentSessionFactory.test.ts   |   97 ++
 .../src/ai/WorkspaceAgentSessionFactory.ts    |  153 ++
 .../src/ai/WorkspaceAgentTools.test.ts        |  132 ++
 apps/backend/src/ai/WorkspaceAgentTools.ts    |  214 +++
 .../src/ai/skills/paywall-authoring.test.ts   |    5 +-
 .../src/ai/skills/paywall-authoring.ts        |   79 +-
 apps/backend/src/ai/skills/registry.ts        |   41 +
 apps/backend/src/ai/surfaces.test.ts          |   33 +-
 apps/backend/src/ai/surfaces.ts               |  126 +-
 apps/backend/src/ai/workspace-tools.ts        |   21 +-
 apps/backend/src/mcp/protocol.test.ts         |    6 +-
 apps/backend/src/mcp/protocol.ts              |   52 +-
 apps/backend/src/mcp/tool-manifest.ts         |    6 +-
 apps/backend/src/routes/ai/chat.ts            |  118 --
 apps/backend/src/routes/mcp.ts                |   41 +-
 .../src/rpcs/agent-session-rpcs.test.ts       |  112 ++
 apps/backend/src/rpcs/agent-session-rpcs.ts   |   96 ++
 apps/backend/src/rpcs/ai-chat-rpcs.test.ts    |  225 ---
 apps/backend/src/rpcs/ai-chat-rpcs.ts         |  187 ---
 apps/backend/src/testing/rpc-smoke-cases.ts   |   12 +-
 apps/www/package.json                         |    8 +-
 .../src/features/studio/ai/agent-ui.test.ts   |  286 ++++
 apps/www/src/features/studio/ai/agent-ui.ts   |  379 +++++
 .../www/src/features/studio/ai/attachments.ts |   24 +-
 .../ai/components/chat-history-menu.tsx       |   51 +-
 .../studio/ai/components/chat-shell.tsx       |  170 +-
 .../studio/ai/components/prompt-input.tsx     |   33 +-
 .../studio/ai/components/tool-call.tsx        |   75 +-
 apps/www/src/features/studio/ai/contract.ts   |   91 +-
 apps/www/src/features/studio/ai/index.ts      |   23 +-
 .../src/features/studio/ai/transport.test.ts  |  181 ---
 apps/www/src/features/studio/ai/transport.ts  |  133 --
 .../features/studio/ai/use-agent-session.ts   |  230 +++
 .../features/studio/ai/use-surface-chat.ts    |  160 --
 .../lib/tanstack-query/agent-sessions.ts      |   46 +
 .../studio/lib/tanstack-query/ai-chats.ts     |   63 -
 .../studio/lib/tanstack-query/index.ts        |    2 +-
 .../studio/lib/tanstack-query/query-keys.ts   |    9 +-
 .../paywalls/designer/ai-panel/ai-panel.tsx   |   19 +-
 .../designer/ai-panel/canvas-capture.ts       |  231 ---
 .../designer/ai-panel/tool-executor.test.ts   |  703 ---------
 .../designer/ai-panel/tool-executor.ts        |  845 ----------
 .../designer/ai-panel/tool-paths.test.ts      |   81 -
 .../paywalls/designer/ai-panel/tool-paths.ts  |   92 --
 .../designer/ai-panel/use-ai-panel-offset.ts  |    2 +-
 .../designer/ai-panel/use-designer-agent.ts   |   61 +-
 .../paywalls/designer/panels/top-panel.tsx    |    3 +-
 .../actions/document-edit-actions.test.ts     |  285 ----
 .../state/actions/document-edit-actions.ts    |  427 -----
 .../paywalls/designer/state/actions/index.ts  |    1 -
 apps/www/vite.config.ts                       |    4 +
 .../security/endpoint-authorization-matrix.md |    6 +-
 .../voidhash/skills/design-paywall/SKILL.md   |  738 ++++++++-
 package.json                                  |    2 +
 packages/agent/LICENSE.md                     |    5 +
 packages/agent/package.json                   |   45 +
 packages/agent/src/AgentSessionCore.ts        |  560 +++++++
 packages/agent/src/AgentToolAdapter.ts        |   89 ++
 packages/agent/src/EffectRunner.ts            |   38 +
 packages/agent/src/Protocol.ts                |  109 ++
 packages/agent/src/SessionLog.ts              |  249 +++
 packages/agent/src/SkillSource.ts             |   61 +
 packages/agent/src/index.ts                   |   31 +
 .../miniflare-CacheObject/metadata.sqlite-shm |  Bin 0 -> 32768 bytes
 .../miniflare-CacheObject/metadata.sqlite-wal |  Bin 0 -> 8272 bytes
 ...e8be73b98386558c456d5701765676b.sqlite-shm |  Bin 0 -> 32768 bytes
 ...e8be73b98386558c456d5701765676b.sqlite-wal |  Bin 0 -> 107152 bytes
 .../metadata.sqlite-shm                       |  Bin 0 -> 32768 bytes
 .../metadata.sqlite-wal                       |  Bin 0 -> 16512 bytes
 packages/agent/tests/AgentSessionCore.test.ts |  299 ++++
 .../tests/AgentSessionPg.integration.test.ts  |  191 +++
 packages/agent/tests/AgentToolAdapter.test.ts |  108 ++
 packages/agent/tests/EffectRunner.test.ts     |   42 +
 packages/agent/tests/Protocol.test.ts         |   47 +
 packages/agent/tests/SessionLog.test.ts       |   63 +
 packages/agent/tests/SkillSource.test.ts      |   26 +
 packages/agent/tests/run-workerd-do-probe.mjs |  162 ++
 packages/agent/tests/workerd-do-probe.ts      |  267 ++++
 packages/agent/tests/workerd-probe.ts         |   93 ++
 packages/agent/tests/wrangler-do-probe.jsonc  |   11 +
 packages/agent/tsconfig.json                  |    8 +
 packages/agent/vitest.mts                     |    7 +
 packages/ai-shared/README.md                  |    4 +-
 packages/ai-shared/package.json               |    2 +-
 packages/ai-shared/src/chat-request.ts        |   42 -
 packages/ai-shared/src/document-edits.ts      |   43 +-
 packages/ai-shared/src/document-serializer.ts |    7 +-
 packages/ai-shared/src/index.ts               |    2 -
 packages/ai-shared/src/models.test.ts         |   43 -
 packages/ai-shared/src/models.ts              |   60 -
 packages/ai-shared/src/surfaces.test.ts       |   26 -
 packages/ai-shared/src/surfaces.ts            |  242 +--
 packages/core/src/domain/auth/Auth.test.ts    |   58 +
 packages/core/src/domain/auth/Auth.ts         |   78 +-
 .../AgentAttachmentService.test.ts            |  111 ++
 .../agentSession/AgentAttachmentService.ts    |  117 ++
 .../AgentSessionIndexService.test.ts          |  208 +++
 .../agentSession/AgentSessionIndexService.ts  |  264 ++++
 .../src/services/aiChat/AiChatService.test.ts |  320 ----
 .../core/src/services/aiChat/AiChatService.ts |  540 -------
 packages/core/src/services/index.ts           |    3 +-
 .../PaywallEditChangeSetService.test.ts       |   98 +-
 .../PaywallEditChangeSetService.ts            |   78 +-
 .../PaywallWorkspaceService.test.ts           |    6 +-
 .../PaywallWorkspaceService.ts                |   10 +-
 packages/core/src/utils/generate-id.ts        |    7 +-
 packages/core/src/utils/permissions.ts        |    2 +-
 .../AiChatAuthorization.integration.test.ts   |  145 --
 .../migration.sql                             |   18 +
 .../migration.sql                             |    3 +
 packages/db/src/schema.ts                     |   69 +-
 packages/rpc/src/errors/AgentSession.ts       |   16 +
 packages/rpc/src/errors/AiChat.ts             |   20 -
 packages/rpc/src/errors/index.ts              |    2 +-
 .../rpc/src/groups/AgentSessionRpcsDef.ts     |   87 ++
 packages/rpc/src/groups/AiChatRpcsDef.ts      |  139 --
 packages/rpc/src/index.ts                     |    6 +-
 packages/rpc/src/internalFeatureFlags.ts      |   10 +-
 patches/@earendil-works__pi-ai@0.80.7.patch   |   20 +
 .../voidhash/skills/design-paywall/SKILL.md   |  738 ++++++++-
 pnpm-lock.yaml                                | 1367 ++++++++++++-----
 pnpm-workspace.yaml                           |    2 +
 scripts/check-publication-boundary.mjs        |   22 +-
 scripts/sync-plugins.ts                       |   43 +
 selfhost/.env.example                         |    8 +
 selfhost/README.md                            |   18 +
 selfhost/docker-compose.yml                   |    7 +
 selfhost/entry/package.json                   |    5 +-
 selfhost/entry/src/DurableEntityAlarms.ts     |   27 +
 .../entry/src/agent/AgentNodeWebSocket.ts     |  289 ++++
 selfhost/entry/src/config.ts                  |   30 +
 selfhost/entry/src/main.ts                    |   77 +-
 .../entry/src/mimic/MimicNodeWebSocket.ts     |  155 +-
 .../AgentNodeWebSocket.integration.test.ts    |  277 ++++
 .../entry/tests/AgentNodeWebSocket.test.ts    |   43 +
 selfhost/entry/tests/BackendAdapters.test.ts  |   28 +
 selfhost/entry/tests/SecurityConfig.test.ts   |    1 +
 selfhost/smoke.mts                            |   66 +-
 148 files changed, 9653 insertions(+), 6955 deletions(-)
 create mode 100644 .pnpmfile.cjs
 create mode 100644 apps/backend/src/ai/AgentSessionIndexAdapter.test.ts
 create mode 100644 apps/backend/src/ai/AgentSessionIndexAdapter.ts
 create mode 100644 apps/backend/src/ai/DesignerContext.ts
 delete mode 100644 apps/backend/src/ai/VoidhashAiService.ts
 create mode 100644 apps/backend/src/ai/WorkspaceAgentModels.ts
 create mode 100644 apps/backend/src/ai/WorkspaceAgentServices.ts
 create mode 100644 apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts
 create mode 100644 apps/backend/src/ai/WorkspaceAgentSessionFactory.ts
 create mode 100644 apps/backend/src/ai/WorkspaceAgentTools.test.ts
 create mode 100644 apps/backend/src/ai/WorkspaceAgentTools.ts
 create mode 100644 apps/backend/src/ai/skills/registry.ts
 delete mode 100644 apps/backend/src/routes/ai/chat.ts
 create mode 100644 apps/backend/src/rpcs/agent-session-rpcs.test.ts
 create mode 100644 apps/backend/src/rpcs/agent-session-rpcs.ts
 delete mode 100644 apps/backend/src/rpcs/ai-chat-rpcs.test.ts
 delete mode 100644 apps/backend/src/rpcs/ai-chat-rpcs.ts
 create mode 100644 apps/www/src/features/studio/ai/agent-ui.test.ts
 create mode 100644 apps/www/src/features/studio/ai/agent-ui.ts
 delete mode 100644 apps/www/src/features/studio/ai/transport.test.ts
 delete mode 100644 apps/www/src/features/studio/ai/transport.ts
 create mode 100644 apps/www/src/features/studio/ai/use-agent-session.ts
 delete mode 100644 apps/www/src/features/studio/ai/use-surface-chat.ts
 create mode 100644 apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts
 delete mode 100644 apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts
 create mode 100644 packages/agent/LICENSE.md
 create mode 100644 packages/agent/package.json
 create mode 100644 packages/agent/src/AgentSessionCore.ts
 create mode 100644 packages/agent/src/AgentToolAdapter.ts
 create mode 100644 packages/agent/src/EffectRunner.ts
 create mode 100644 packages/agent/src/Protocol.ts
 create mode 100644 packages/agent/src/SessionLog.ts
 create mode 100644 packages/agent/src/SkillSource.ts
 create mode 100644 packages/agent/src/index.ts
 create mode 100644 packages/agent/tests/.wrangler/state/v3/cache/miniflare-CacheObject/metadata.sqlite-shm
 create mode 100644 packages/agent/tests/.wrangler/state/v3/cache/miniflare-CacheObject/metadata.sqlite-wal
 create mode 100644 packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/4df8fa06997dc48e2f312df9a86799476e8be73b98386558c456d5701765676b.sqlite-shm
 create mode 100644 packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/4df8fa06997dc48e2f312df9a86799476e8be73b98386558c456d5701765676b.sqlite-wal
 create mode 100644 packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/metadata.sqlite-shm
 create mode 100644 packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/metadata.sqlite-wal
 create mode 100644 packages/agent/tests/AgentSessionCore.test.ts
 create mode 100644 packages/agent/tests/AgentSessionPg.integration.test.ts
 create mode 100644 packages/agent/tests/AgentToolAdapter.test.ts
 create mode 100644 packages/agent/tests/EffectRunner.test.ts
 create mode 100644 packages/agent/tests/Protocol.test.ts
 create mode 100644 packages/agent/tests/SessionLog.test.ts
 create mode 100644 packages/agent/tests/SkillSource.test.ts
 create mode 100644 packages/agent/tests/run-workerd-do-probe.mjs
 create mode 100644 packages/agent/tests/workerd-do-probe.ts
 create mode 100644 packages/agent/tests/workerd-probe.ts
 create mode 100644 packages/agent/tests/wrangler-do-probe.jsonc
 create mode 100644 packages/agent/tsconfig.json
 create mode 100644 packages/agent/vitest.mts
 delete mode 100644 packages/ai-shared/src/chat-request.ts
 delete mode 100644 packages/ai-shared/src/models.test.ts
 delete mode 100644 packages/ai-shared/src/models.ts
 delete mode 100644 packages/ai-shared/src/surfaces.test.ts
 create mode 100644 packages/core/src/domain/auth/Auth.test.ts
 create mode 100644 packages/core/src/services/agentSession/AgentAttachmentService.test.ts
 create mode 100644 packages/core/src/services/agentSession/AgentAttachmentService.ts
 create mode 100644 packages/core/src/services/agentSession/AgentSessionIndexService.test.ts
 create mode 100644 packages/core/src/services/agentSession/AgentSessionIndexService.ts
 delete mode 100644 packages/core/src/services/aiChat/AiChatService.test.ts
 delete mode 100644 packages/core/src/services/aiChat/AiChatService.ts
 delete mode 100644 packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts
 create mode 100644 packages/db/src/alchemy-migrations/20260714222500_add_voidhash_agent_session/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260714230000_scope_agent_change_sets/migration.sql
 create mode 100644 packages/rpc/src/errors/AgentSession.ts
 delete mode 100644 packages/rpc/src/errors/AiChat.ts
 create mode 100644 packages/rpc/src/groups/AgentSessionRpcsDef.ts
 delete mode 100644 packages/rpc/src/groups/AiChatRpcsDef.ts
 create mode 100644 patches/@earendil-works__pi-ai@0.80.7.patch
 create mode 100644 scripts/sync-plugins.ts
 create mode 100644 selfhost/entry/src/DurableEntityAlarms.ts
 create mode 100644 selfhost/entry/src/agent/AgentNodeWebSocket.ts
 create mode 100644 selfhost/entry/tests/AgentNodeWebSocket.integration.test.ts
 create mode 100644 selfhost/entry/tests/AgentNodeWebSocket.test.ts

diff --git a/.pnpmfile.cjs b/.pnpmfile.cjs
new file mode 100644
index 000000000..fa68c4937
--- /dev/null
+++ b/.pnpmfile.cjs
@@ -0,0 +1,11 @@
+module.exports = {
+  hooks: {
+    readPackage(pkg) {
+      if (pkg.name !== "@earendil-works/pi-ai" || pkg.version !== "0.80.7") return pkg;
+      // Google is a lazily loaded provider and is not part of the supported host model set.
+      const dependencies = { ...pkg.dependencies };
+      delete dependencies["@google/genai"];
+      return { ...pkg, dependencies };
+    },
+  },
+};
diff --git a/LICENSE.md b/LICENSE.md
index dc7eb5e42..fcd140313 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -22,10 +22,6 @@ The backend, dashboard, service packages, and self-hosting code that declare
 licensed under the GNU Affero General Public License, version 3 only. The full
 license is in [LICENSES/AGPL-3.0-only.txt](LICENSES/AGPL-3.0-only.txt).
 
-Repository visibility does not change these license grants. The complete code
-is being validated privately before the repository's publication gate, but the
-MIT and AGPL terms identified here already apply to their respective zones.
-
 ## Enterprise code
 
 Enterprise code is not included in this repository and remains in Voidhash's
diff --git a/apps/backend/package.json b/apps/backend/package.json
index 3217d39c3..2ea099d84 100644
--- a/apps/backend/package.json
+++ b/apps/backend/package.json
@@ -12,6 +12,7 @@
     "format": "vp fmt ."
   },
   "dependencies": {
+    "@voidhash/agent": "workspace:*",
     "@voidhash/ai-shared": "workspace:*",
     "@voidhash/api-contracts": "workspace:*",
     "@voidhash/app-store-server-sdk": "workspace:*",
@@ -25,11 +26,9 @@
     "@voidhash/paywall-workspace": "workspace:*",
     "@voidhash/rpc": "workspace:*",
     "@workos-inc/node": "9.2.0",
-    "ai": "^7.0.0",
     "effect": "catalog:",
     "jose": "catalog:",
     "preact": "^10.25.4",
-    "workers-ai-provider": "^3.0.0",
     "zod": "catalog:"
   },
   "devDependencies": {
diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
index 76d6d1cf7..ed55f1bd6 100644
--- a/apps/backend/src/BackendApp.ts
+++ b/apps/backend/src/BackendApp.ts
@@ -9,11 +9,11 @@ import {
   AnalyticsService,
   ApiKeyService,
   AuditLogPort,
-  AuthTokenVerifier,
   AppStorePaymentProvider,
   AppStorePaymentProviderEngine,
   ApplePushNotificationServiceConfigLive,
-  AiChatService,
+  AgentSessionIndexService,
+  AgentAttachmentService,
   AppStorePaymentProviderConfigLive,
   AppStorePaymentProviderServiceLive,
   AppStoreTransactionVerifier,
@@ -105,8 +105,6 @@ import { GooglePubSubPushVerifierLive } from "./GooglePubSubPushVerifier.ts";
 import { BackendSnapshotHtmlRendererLive } from "./PaywallSnapshotHtmlRenderer.ts";
 
 import { AuthMiddlewareLive } from "./ApiMiddlewares.ts";
-import { VoidhashAiError, VoidhashAiService } from "./ai/VoidhashAiService.ts";
-import { AiChatRouteLayer } from "./routes/ai/chat.ts";
 import { McpRouteLayer } from "./routes/mcp.ts";
 import { McpAuthKitRouteLayer } from "./routes/mcp-authkit.ts";
 import { McpAuthKit } from "./McpAuthKit.ts";
@@ -144,7 +142,7 @@ import { PaymentProviderConfigurationRpcsLive } from "./rpcs/payment-provider-co
 import { PaymentProviderProductRpcsLive } from "./rpcs/payment-provider-product-rpcs.ts";
 import { PushNotificationConfigurationRpcsLive } from "./rpcs/push-notification-configuration-rpcs.ts";
 import { PushNotificationSendRpcsLive } from "./rpcs/push-notification-send-rpcs.ts";
-import { AiChatRpcsLive } from "./rpcs/ai-chat-rpcs.ts";
+import { AgentSessionRpcsLive } from "./rpcs/agent-session-rpcs.ts";
 import { PaywallAssetRpcsLive } from "./rpcs/paywall-asset-rpcs.ts";
 import { PaywallComponentRpcsLive } from "./rpcs/paywall-component-rpcs.ts";
 import { PaywallDeployRpcsLive } from "./rpcs/paywall-deploy-rpcs.ts";
@@ -213,17 +211,6 @@ export interface BackendRuntimeLayers<
    * overrides it with the `PushDeliveryQueue` producer bound at init.
    */
   readonly pushDeliveryDispatch?: Layer.Layer<PushDeliveryDispatch>;
-  /**
-   * Runtime AI service implementation. Optional so the RPC smoke / dev harness
-   * can omit it; platform entry points supply their provider-specific adapter.
-   */
-  readonly aiService?: Layer.Layer<VoidhashAiService>;
-  /**
-   * Token verifier used by the AI chat route (`POST /api/ai/chat`). Optional so
-   * harnesses that omit the route can skip it; production entry points adapt
-   * their runtime-specific token store to this port.
-   */
-  readonly authTokenVerifier?: AuthTokenVerifier["Service"];
   readonly rpcExtension: BackendRpcExtension<RExtensionRpcs>;
 }
 
@@ -557,17 +544,6 @@ export const BackendSnapshotImageRendererStubLive = Layer.succeed(SnapshotImageR
 
 export const BackendNoopIdentityProjectionPublisherLive = IdentityProjectionPublisher.noop;
 
-/**
- * Stub {@link VoidhashAiService} for harnesses (and dev/smoke stages) that run
- * the backend graph without an AI Gateway binding. Every `chat` call fails with
- * a stable {@link VoidhashAiError} so the route graph still builds and the
- * endpoint responds with a clear error instead of dying. Platform entry points
- * can supply a live {@link VoidhashAiService} layer.
- */
-export const BackendVoidhashAiStubLive = Layer.succeed(VoidhashAiService, {
-  chat: () => Effect.fail(new VoidhashAiError({ message: "AI gateway not configured" })),
-});
-
 const isAllowedCorsOrigin = (origin: string): boolean => {
   try {
     const url = new URL(origin);
@@ -700,7 +676,7 @@ const buildBackendServiceGraph = <
   >,
 ) => {
   const RpcHandlersLayer = Layer.mergeAll(
-    AiChatRpcsLive,
+    AgentSessionRpcsLive,
     AnalyticsRpcsLive,
     ApiKeyRpcsLive,
     ExperimentRpcsLive,
@@ -763,8 +739,10 @@ const buildBackendServiceGraph = <
     Layer.provide(ComponentManifestCacheService.layer),
   );
 
+  const AgentSessionIndexServiceLive = AgentSessionIndexService.layer;
   const BaseDomainServicesLayer = Layer.mergeAll(
-    AiChatService.layer,
+    AgentSessionIndexServiceLive,
+    AgentAttachmentService.layer.pipe(Layer.provide(AgentSessionIndexServiceLive)),
     AnalyticsService.layer,
     CustomAnalyticsService.layer,
     ApiKeyService.layer,
@@ -859,6 +837,29 @@ export type BackendServiceGraph<RInfrastructure = never, RFeatureServices = neve
   typeof buildBackendServiceGraph<RInfrastructure, never, RFeatureServices>
 >;
 
+/**
+ * Builds the support and domain services needed by long-lived agent hosts.
+ * Unlike the HTTP composition this returns the service context itself, allowing
+ * WebSocket runtimes to capture it once and execute workspace tools in-process.
+ */
+export const buildBackendAgentServices = <
+  RInfrastructure = never,
+  RFeatureRpcs extends Rpc.Any = never,
+  RFeatureServices = never,
+>(
+  layers: Pick<
+    BackendRuntimeLayers<RInfrastructure, RFeatureRpcs, RFeatureServices>,
+    | "features"
+    | "infrastructure"
+    | "webhookManager"
+    | "analyticsQueryClient"
+    | "pushDeliveryDispatch"
+  >,
+) => {
+  const graph = buildBackendServiceGraph(layers);
+  return graph.DomainServicesLayer.pipe(Layer.provideMerge(graph.SupportServicesLayer));
+};
+
 /** Private or enterprise RPC surface mounted by an application composition root. */
 export interface BackendRpcExtension<RExtensionRpcs extends Rpc.Any> {
   readonly group: RpcGroup.RpcGroup<RExtensionRpcs>;
@@ -1069,32 +1070,11 @@ export const buildBackendFetch = <
     HttpRouter.provideRequest(SupportServicesLayer),
   );
 
-  // Voidhash AI streaming chat route (`POST /api/ai/chat`). Registered only when
-  // a token verifier is available; the request-scoped requirements —
-  // `VoidhashAiService` (live when supplied, else the
-  // failing stub) plus `Db` / `Workos` / `LocalUserSessionService` from the
-  // domain graph for session resolution — are satisfied via `provideRequest`,
-  // like the webhook routes.
-  const VoidhashAiServiceLayer = layers.aiService ?? BackendVoidhashAiStubLive;
-
-  const AiRoutesLayer = layers.authTokenVerifier
-    ? AiChatRouteLayer(layers.authTokenVerifier).pipe(
-        // The server-executed agent tools reach the workspace/chat services via
-        // `VoidhashAiService.chat`; those (plus `Db`/`Workos`/session-resolution
-        // support) must be request-scoped. `AuthSession` is provided in-handler
-        // from the resolved session, so the domain graph here is session-free.
-        HttpRouter.provideRequest(
-          Layer.mergeAll(VoidhashAiServiceLayer, DomainServicesLayer, SupportServicesLayer),
-        ),
-      )
-    : Layer.empty;
-
   // MCP endpoint (`POST /api/mcp`, stateless streamable HTTP). Its request-scoped
   // requirements — `ApiKeyService` (secret-key auth) + `PaywallWorkspaceService`
-  // + `AiChatService` (the shared workspace tools' context) + `Db` (key
-  // validation) — are satisfied via `provideRequest` like the AI chat route.
+  // + `Db` (key validation) — are satisfied via `provideRequest`.
   // `AuthSession` is provided in-handler from the validated secret key. Unlike
-  // the AI chat route, MCP needs no JWT namespace (it authenticates with v1
+  // the agent-session route, MCP needs no JWT namespace (it authenticates with v1
   // secret keys), so it registers unconditionally.
   const McpRoutesLayer = McpRouteLayer.pipe(
     HttpRouter.provideRequest(Layer.mergeAll(DomainServicesLayer, SupportServicesLayer)),
@@ -1110,7 +1090,6 @@ export const buildBackendFetch = <
     WebhookRoutesLayer,
     PaywallServingLayer,
     PublicFileServingLayer,
-    AiRoutesLayer,
     McpRoutesLayer,
     McpAuthKitRoutesLayer,
     HealthCheckRoute,
diff --git a/apps/backend/src/ai/AgentSessionIndexAdapter.test.ts b/apps/backend/src/ai/AgentSessionIndexAdapter.test.ts
new file mode 100644
index 000000000..ddce09614
--- /dev/null
+++ b/apps/backend/src/ai/AgentSessionIndexAdapter.test.ts
@@ -0,0 +1,54 @@
+import { makeLayerEffectRunner } from "@voidhash/agent";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { AgentSessionIndexService } from "@voidhash/core/services";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import { makeAgentSessionIndex } from "./AgentSessionIndexAdapter.ts";
+
+describe("makeAgentSessionIndex", () => {
+  it("uses a fresh scoped index service after the previous operation is finalized", async () => {
+    let nextId = 0;
+    const used: number[] = [];
+    const released: number[] = [];
+    const IndexLive = Layer.effect(
+      AgentSessionIndexService,
+      Effect.acquireRelease(
+        Effect.sync(() => {
+          const id = ++nextId;
+          return {
+            id,
+            service: {
+              touch: () =>
+                Effect.sync(() => {
+                  if (released.includes(id)) throw new Error(`index lease ${id} was finalized`);
+                  used.push(id);
+                  return undefined as never;
+                }),
+            } as unknown as AgentSessionIndexService["Service"],
+          };
+        }),
+        ({ id }) => Effect.sync(() => released.push(id)),
+      ).pipe(Effect.map(({ service }) => service)),
+    );
+    const runEffect = makeLayerEffectRunner<void, AgentSessionIndexService | AuthSession>(() =>
+      Layer.merge(IndexLive, Layer.succeed(AuthSession, {} as AuthSession["Service"])),
+    );
+    const index = makeAgentSessionIndex(runEffect);
+    const input = {
+      sessionId: "session-1",
+      owner: {
+        organizationId: "organization-1",
+        projectId: "project-1",
+        userId: "user-1",
+      },
+      connectionData: undefined,
+    };
+
+    await index.touch(input);
+    await index.touch(input);
+
+    expect(used).toEqual([1, 2]);
+    expect(released).toEqual([1, 2]);
+  });
+});
diff --git a/apps/backend/src/ai/AgentSessionIndexAdapter.ts b/apps/backend/src/ai/AgentSessionIndexAdapter.ts
new file mode 100644
index 000000000..5a5b58492
--- /dev/null
+++ b/apps/backend/src/ai/AgentSessionIndexAdapter.ts
@@ -0,0 +1,26 @@
+import type { AgentSessionIndex, EffectRunner } from "@voidhash/agent";
+import { AgentSessionIndexService } from "@voidhash/core/services";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { Effect } from "effect";
+
+/** Adapts the database index service to the portable session-core hook. */
+export const makeAgentSessionIndex = <ConnectionData>(
+  runEffect: EffectRunner<ConnectionData, AgentSessionIndexService | AuthSession>,
+): AgentSessionIndex<ConnectionData> => ({
+  touch: (input) =>
+    runEffect(
+      input.connectionData,
+      Effect.gen(function* () {
+        const index = yield* AgentSessionIndexService;
+        yield* index.touch({
+          id: input.sessionId,
+          organizationId: input.owner.organizationId,
+          projectId: input.owner.projectId,
+          userId: input.owner.userId,
+          surface: input.metadata?.surface,
+          paywallId: input.metadata?.paywallId,
+          title: input.title,
+        });
+      }),
+    ),
+});
diff --git a/apps/backend/src/ai/DesignerContext.ts b/apps/backend/src/ai/DesignerContext.ts
new file mode 100644
index 000000000..d80613212
--- /dev/null
+++ b/apps/backend/src/ai/DesignerContext.ts
@@ -0,0 +1,108 @@
+import { PaywallService, PaywallWorkspaceService } from "@voidhash/core/services";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { fileNameFromDocRelative, readComponentDefinitions } from "@voidhash/paywall-workspace";
+import { Effect } from "effect";
+
+/** Server-resolved facts about the user's current designer workspace. */
+export interface DesignerContext {
+  readonly paywalls: ReadonlyArray<{
+    readonly slug: string;
+    readonly name: string;
+    readonly componentFileNames: ReadonlyArray<string>;
+  }>;
+  readonly openPaywall?: {
+    readonly slug: string;
+    readonly name: string;
+  };
+  readonly selectedNodeIds: ReadonlyArray<string>;
+}
+
+/** Identifiers used to resolve a fresh designer context before each model turn. */
+export interface DesignerContextInput {
+  readonly projectId: string;
+  readonly paywallId?: string;
+  readonly selectedNodeIds: ReadonlyArray<string>;
+}
+
+const componentFileNamesFromDocument = (root: unknown): ReadonlyArray<string> => {
+  const snapshot = (root != null ? [root] : []) as unknown as Parameters<
+    typeof readComponentDefinitions
+  >[0];
+  return readComponentDefinitions(snapshot).map((definition) =>
+    fileNameFromDocRelative(definition.path),
+  );
+};
+
+/**
+ * Resolves the live project/paywall/selection context. Resolution is
+ * best-effort so an unreadable sibling document never prevents an agent turn.
+ */
+export const buildDesignerContext = (
+  input: DesignerContextInput,
+): Effect.Effect<
+  DesignerContext | undefined,
+  never,
+  PaywallService | PaywallWorkspaceService | AuthSession
+> =>
+  Effect.gen(function* () {
+    const paywallService = yield* PaywallService;
+    const workspace = yield* PaywallWorkspaceService;
+    const rows = yield* paywallService.getPaywalls(input.projectId);
+    const paywalls = yield* Effect.forEach(
+      rows,
+      (row) =>
+        workspace.readDocument(input.projectId, row.slug).pipe(
+          Effect.map((resolved) => ({
+            slug: row.slug,
+            name: row.name,
+            componentFileNames: componentFileNamesFromDocument(resolved.root),
+          })),
+          Effect.catchCause(() =>
+            Effect.succeed({ slug: row.slug, name: row.name, componentFileNames: [] }),
+          ),
+        ),
+      { concurrency: 8 },
+    );
+    const openRow = rows.find((row) => row.id === input.paywallId);
+    return {
+      paywalls,
+      ...(openRow === undefined ? {} : { openPaywall: { slug: openRow.slug, name: openRow.name } }),
+      selectedNodeIds: input.selectedNodeIds,
+    };
+  }).pipe(Effect.catchCause(() => Effect.succeed(undefined)));
+
+const formatPaywallEntry = (paywall: DesignerContext["paywalls"][number]): string => {
+  const components =
+    paywall.componentFileNames.length > 0
+      ? `components: ${paywall.componentFileNames.map((fileName) => `components/${fileName}`).join(", ")}`
+      : "no code components";
+  return `- ${paywall.slug} ("${paywall.name}"): ${components}`;
+};
+
+/** Renders the dynamic designer facts appended to the agent system prompt. */
+export const renderDesignerContext = (context: DesignerContext): string => {
+  const sections: string[] = [];
+  if (context.paywalls.length > 0) {
+    sections.push(
+      `Paywalls in this project (slug, display name, code components):\n${context.paywalls.map(formatPaywallEntry).join("\n")}`,
+    );
+  }
+  if (context.openPaywall !== undefined) {
+    const { slug, name } = context.openPaywall;
+    const lines = [
+      `The user currently has the "${name}" paywall (slug "${slug}") open in the designer. Unqualified references like "this paywall", "the current screen", or "here" mean this one — edit it with \`edit_paywall\`.`,
+    ];
+    if (context.selectedNodeIds.length > 0) {
+      const plural = context.selectedNodeIds.length === 1 ? "node" : "nodes";
+      lines.push(
+        `The user currently has ${plural} with id ${context.selectedNodeIds.join(", ")} selected in the open paywall — these are document node ids you can target directly in \`edit_paywall\` ops (no need to re-locate them).`,
+      );
+    }
+    sections.push(lines.join("\n"));
+  } else {
+    sections.push(
+      "The user does not have a specific paywall open in the designer right now, so treat requests as project-wide unless they name a paywall.",
+    );
+  }
+  return sections.length === 0 ? "" : `\n\nCurrent context:\n${sections.join("\n\n")}`;
+};
diff --git a/apps/backend/src/ai/VoidhashAiService.ts b/apps/backend/src/ai/VoidhashAiService.ts
deleted file mode 100644
index 5e53bb70f..000000000
--- a/apps/backend/src/ai/VoidhashAiService.ts
+++ /dev/null
@@ -1,435 +0,0 @@
-import {
-  designerToolDescriptions,
-  designerToolOutputSchemas,
-  designerToolSchemas,
-  modelForTurn,
-  previewScreenshotToolResultSchema,
-  type Surface,
-} from "@voidhash/ai-shared";
-import { AiChatService, PaywallService, PaywallWorkspaceService } from "@voidhash/core/services";
-import { AuthSession } from "@voidhash/core/domain/auth/Auth";
-import { fileNameFromDocRelative, readComponentDefinitions } from "@voidhash/paywall-workspace";
-import { Context, Effect, Layer, Schema } from "effect";
-import {
-  convertToModelMessages,
-  createUIMessageStream,
-  createUIMessageStreamResponse,
-  stepCountIs,
-  streamText,
-  tool,
-  type InferUITools,
-  type ToolSet,
-  type UIDataTypes,
-  type UIMessage,
-  validateUIMessages,
-} from "ai";
-import { createWorkersAI, type WorkersAISettings } from "workers-ai-provider";
-
-import { type DesignerContext, designerSystemPrompt } from "./surfaces.ts";
-
-/** Runtime handle consumed by the Cloudflare Workers AI implementation. */
-export interface AiGatewayHandle {
-  readonly binding: Extract<WorkersAISettings, { binding: unknown }>["binding"];
-  readonly gatewayId: string;
-}
-
-/**
- * Server-side backstop on tool steps within ONE request — NOT a task budget.
- * With client-executed tools each request ends when the model calls tools
- * (finishReason `"tool-calls"`), the browser runs them, and the chat
- * auto-continues; this only bounds a within-request loop where the model calls
- * tools and immediately calls more without pause. Set generously so real
- * multi-step design work never hits it; a genuine runaway trips it. The
- * per-request cap is the SERVER's safety net; the browser also caps
- * auto-continuations.
- */
-const MAX_TOOL_STEPS = 128;
-
-/**
- * The provider truncated the model's output mid-message (`length`). Distinct
- * from `"tool-calls"`, which is the NORMAL end-of-request handoff to the browser
- * (the model asked to run client tools) — that is not truncation and gets no
- * notice. Only a genuine cut-off gets one.
- */
-const truncationNotice = (): string =>
-  "\n\n_I was cut off before finishing (the response hit the model's output limit). Ask me to continue and I can pick up where I left off._";
-
-/** Tagged error raised by {@link VoidhashAiService} public methods. */
-export class VoidhashAiError extends Schema.TaggedErrorClass<VoidhashAiError>("VoidhashAiError")(
-  "VoidhashAiError",
-  { message: Schema.String },
-) {}
-
-/** Everything the chat endpoint accepts. `messages` are UI messages from the AI SDK client. */
-export interface VoidhashAiChatInput {
-  readonly messages: ReadonlyArray<unknown>;
-  readonly surface: Surface;
-  /** Project the workspace tools operate over (anti-spoof-checked by the route). */
-  readonly projectId: string;
-  readonly organizationId: string;
-  /** The open paywall id — chat persistence scope only (tools reach any paywall). */
-  readonly paywallId: string;
-  /** Client-minted chat id — the key server-authoritative persistence upserts by. */
-  readonly chatId: string;
-  /**
-   * Mimic document node ids the user currently has selected in the open designer,
-   * sent fresh per turn (older clients / other surfaces omit it). Surfaced to the
-   * model in the designer context block — they are document node ids the model can
-   * address directly in `edit_document` ops (from `get_document` / the selection).
-   */
-  readonly selectedNodeIds?: ReadonlyArray<string>;
-}
-
-/**
- * Services `chat` closes over: the designer-context builder's workspace/paywall
- * services plus `AiChatService` for transcript persistence. Captured once in
- * {@link VoidhashAiServiceShape.chat} (where the request's `AuthSession` is in
- * context) so the best-effort context builder + the finish-persist can run the
- * `AuthSession`-bound effects (streamText is not Effect-aware).
- */
-type ChatContext = Context.Context<
-  PaywallWorkspaceService | PaywallService | AiChatService | AuthSession
->;
-
-/** Public {@link VoidhashAiService} surface. */
-export interface VoidhashAiServiceShape {
-  /**
-   * Runs one streaming chat turn for the given studio surface. The declared
-   * designer tools are SCHEMA-ONLY (no `execute`): the AI SDK ends the request
-   * when the model calls a tool (finishReason `"tool-calls"`), the BROWSER
-   * executes it against the local fork, and the chat auto-continues (AI SDK v5
-   * client-tool round-trip). On finish, the message list so far is persisted
-   * server-authoritatively via {@link AiChatService} (each continuation request
-   * re-persists the full transcript).
-   *
-   * Requires the request's per-request services in context (the route resolves
-   * the session and provides `AuthSession` + the workspace/chat services).
-   */
-  readonly chat: (
-    input: VoidhashAiChatInput,
-  ) => Effect.Effect<
-    Response,
-    VoidhashAiError,
-    PaywallWorkspaceService | PaywallService | AiChatService | AuthSession
-  >;
-}
-
-/** Service tag — the live layer is built by {@link VoidhashAiService.layer}. */
-export class VoidhashAiService extends Context.Service<VoidhashAiService, VoidhashAiServiceShape>()(
-  "VoidhashAiService",
-) {
-  /** Builds the live service around a runtime {@link AiGatewayHandle}. */
-  static readonly layer = (handle: AiGatewayHandle): Layer.Layer<VoidhashAiService> =>
-    Layer.succeed(VoidhashAiService, make(handle));
-}
-
-/**
- * The id of the last user message — the checkpoint turn identifier. Falls back
- * to a synthesized id when the messages carry none (defensive; UI messages
- * always have ids in practice).
- */
-const turnIdFromMessages = (messages: ReadonlyArray<UIMessage>): string => {
-  for (let i = messages.length - 1; i >= 0; i -= 1) {
-    const message = messages[i];
-    if (message?.role === "user" && typeof message.id === "string" && message.id.length > 0) {
-      return message.id;
-    }
-  }
-  return `turn_${Date.now()}`;
-};
-
-/** First non-empty user text, trimmed to a short title; falls back to "New chat". */
-const deriveTitle = (messages: ReadonlyArray<UIMessage>): string => {
-  for (const message of messages) {
-    if (message.role !== "user") {
-      continue;
-    }
-    const text = message.parts
-      .map((part) => (part.type === "text" ? part.text : ""))
-      .join("")
-      .trim();
-    if (text.length > 0) {
-      return text.length > 80 ? `${text.slice(0, 79)}…` : text;
-    }
-  }
-  return "New chat";
-};
-
-/**
- * Build the designer tool set as SCHEMA-ONLY declarations (no `execute`). With no
- * `execute`, the AI SDK ends the request when the model calls a tool
- * (finishReason `"tool-calls"`); the BROWSER runs the tool against the currently
- * open paywall document and the chat auto-continues (AI SDK v5 client-tool
- * round-trip). Each tool's `description` + `inputSchema` come from the shared
- * `ai-shared` definitions the browser executor imports, so declaration and
- * execution stay in lockstep.
- *
- * The declaration list is exactly the shared vocabulary, including rendered
- * inspection/screenshot review, document/component writes, subtree duplication,
- * and the final design gate. Each entry keys straight off
- * `designerToolSchemas`/`designerToolDescriptions`, so a rename in the shared
- * package fails this file at compile time rather than drifting. (Built per-tool
- * rather than mapped so the AI SDK infers each concrete input/output schema.)
- */
-export const designerTools = () =>
-  ({
-    get_document: tool({
-      description: designerToolDescriptions.get_document,
-      inputSchema: designerToolSchemas.get_document,
-      outputSchema: designerToolOutputSchemas.get_document,
-    }),
-    get_rendered_layout: tool({
-      description: designerToolDescriptions.get_rendered_layout,
-      inputSchema: designerToolSchemas.get_rendered_layout,
-      outputSchema: designerToolOutputSchemas.get_rendered_layout,
-    }),
-  get_preview_screenshot: tool({
-    description: designerToolDescriptions.get_preview_screenshot,
-    inputSchema: designerToolSchemas.get_preview_screenshot,
-    outputSchema: previewScreenshotToolResultSchema,
-    toModelOutput: ({ output }) =>
-      typeof output === "string"
-        ? { type: "text", value: output }
-        : {
-            type: "content",
-            value: [
-              {
-                type: "text",
-                text: `${output.message}\nDocument signature: ${output.documentSignature}\nRendered at ${output.width}×${output.height}px (${output.scale}x).`,
-              },
-              {
-                type: "file",
-                data: { type: "data", data: output.dataBase64 },
-                filename: "paywall-preview.png",
-                mediaType: output.mediaType,
-              },
-            ],
-          },
-    }),
-    get_components: tool({
-      description: designerToolDescriptions.get_components,
-      inputSchema: designerToolSchemas.get_components,
-      outputSchema: designerToolOutputSchemas.get_components,
-    }),
-    read_component: tool({
-      description: designerToolDescriptions.read_component,
-      inputSchema: designerToolSchemas.read_component,
-      outputSchema: designerToolOutputSchemas.read_component,
-    }),
-    read_paywall: tool({
-      description: designerToolDescriptions.read_paywall,
-      inputSchema: designerToolSchemas.read_paywall,
-      outputSchema: designerToolOutputSchemas.read_paywall,
-    }),
-    edit_document: tool({
-      description: designerToolDescriptions.edit_document,
-      inputSchema: designerToolSchemas.edit_document,
-      outputSchema: designerToolOutputSchemas.edit_document,
-    }),
-    duplicate_subtree: tool({
-      description: designerToolDescriptions.duplicate_subtree,
-      inputSchema: designerToolSchemas.duplicate_subtree,
-      outputSchema: designerToolOutputSchemas.duplicate_subtree,
-    }),
-    write_component: tool({
-      description: designerToolDescriptions.write_component,
-      inputSchema: designerToolSchemas.write_component,
-      outputSchema: designerToolOutputSchemas.write_component,
-    }),
-    rename_component: tool({
-      description: designerToolDescriptions.rename_component,
-      inputSchema: designerToolSchemas.rename_component,
-      outputSchema: designerToolOutputSchemas.rename_component,
-    }),
-    delete_component: tool({
-      description: designerToolDescriptions.delete_component,
-      inputSchema: designerToolSchemas.delete_component,
-      outputSchema: designerToolOutputSchemas.delete_component,
-    }),
-    finish_design: tool({
-      description: designerToolDescriptions.finish_design,
-      inputSchema: designerToolSchemas.finish_design,
-      outputSchema: designerToolOutputSchemas.finish_design,
-    }),
-  }) satisfies ToolSet;
-
-type DesignerUIMessage = UIMessage<
-  unknown,
-  UIDataTypes,
-  InferUITools<ReturnType<typeof designerTools>>
->;
-
-/**
- * Component file names (`<basename>.tsx`) of a paywall document, read from its
- * `codeComponent` definition nodes — a component's identity is its canonical
- * document-relative `path` (`components/<basename>.tsx`), which reduces to the
- * file name for display.
- */
-const componentFileNamesFromDocument = (root: unknown): ReadonlyArray<string> => {
-  // The decoded renderer root is the single `SnapshotNode` the pure reader walks;
-  // narrow the mimic-host `unknown` structurally (the renderer type package is not
-  // a backend dependency) via the reader's own parameter type.
-  const snapshot = (root != null ? [root] : []) as unknown as Parameters<
-    typeof readComponentDefinitions
-  >[0];
-  return readComponentDefinitions(snapshot).map((definition) =>
-    fileNameFromDocRelative(definition.path),
-  );
-};
-
-/**
- * Build the dynamic {@link DesignerContext} for the request — the project's
- * paywall listing (slug + display name + component file names), which paywall is
- * open (resolved from `input.paywallId`), and the current selection. Best-effort:
- * it reads each paywall's live document (no projection) and NEVER fails the chat —
- * any failure resolving the whole block, or an individual paywall's document,
- * degrades to omitting that part (`undefined` whole block, or an empty component
- * list for the paywall that failed).
- */
-const buildDesignerContext = (
-  context: ChatContext,
-  input: VoidhashAiChatInput,
-): Promise<DesignerContext | undefined> =>
-  Effect.runPromise(
-    Effect.gen(function* () {
-      const paywallService = yield* PaywallService;
-      const workspace = yield* PaywallWorkspaceService;
-      const rows = yield* paywallService.getPaywalls(input.projectId);
-
-      const paywalls = yield* Effect.forEach(
-        rows,
-        (row) =>
-          workspace.readDocument(input.projectId, row.slug).pipe(
-            Effect.map((resolved) => ({
-              slug: row.slug,
-              name: row.name,
-              componentFileNames: componentFileNamesFromDocument(resolved.root),
-            })),
-            // One unreadable/corrupt paywall must not sink the whole block — list
-            // it with no components rather than dropping the context entirely.
-            Effect.catch(() =>
-              Effect.succeed({ slug: row.slug, name: row.name, componentFileNames: [] }),
-            ),
-          ),
-        { concurrency: 8 },
-      );
-
-      const openRow = rows.find((row) => row.id === input.paywallId);
-      return {
-        paywalls,
-        openPaywall: openRow ? { slug: openRow.slug, name: openRow.name } : undefined,
-        selectedNodeIds: input.selectedNodeIds ?? [],
-      } satisfies DesignerContext;
-    }).pipe(
-      Effect.provide(context),
-      Effect.catch(() => Effect.succeed(undefined)),
-    ) as Effect.Effect<DesignerContext | undefined, never>,
-  );
-
-const make = (handle: AiGatewayHandle): VoidhashAiServiceShape => {
-  const workersai = createWorkersAI({
-    binding: handle.binding,
-    gateway: { id: handle.gatewayId },
-  });
-
-  const chat: VoidhashAiServiceShape["chat"] = (input) =>
-    Effect.gen(function* () {
-      // Capture the request context (AuthSession + workspace/paywall/chat
-      // services) so the best-effort designer-context builder and the
-      // finish-persist can run the AuthSession-bound effects (streamText is not
-      // Effect-aware). The designer tools are schema-only — the browser executes
-      // them — so no tool `execute` runs against this context.
-      const context = yield* Effect.context<
-        PaywallWorkspaceService | PaywallService | AiChatService | AuthSession
-      >();
-
-      return yield* Effect.tryPromise({
-        catch: (cause) =>
-          new VoidhashAiError({
-            message: cause instanceof Error ? cause.message : String(cause),
-          }),
-        try: async (): Promise<Response> => {
-          const tools = designerTools();
-          const uiMessages = await validateUIMessages<DesignerUIMessage>({
-            messages: input.messages,
-            tools,
-          });
-          const modelMessages = await convertToModelMessages(uiMessages, { tools });
-          const turnId = turnIdFromMessages(uiMessages);
-          const designerContext = await buildDesignerContext(context, input);
-
-          const result = streamText({
-            model: workersai(modelForTurn(input.surface, input.messages)),
-            system: designerSystemPrompt(designerContext),
-            messages: modelMessages,
-            tools,
-            stopWhen: stepCountIs(MAX_TOOL_STEPS),
-          });
-
-          // Merge the model's UI stream into our own stream so we can append a
-          // truncation notice ONLY when the provider truncated the output
-          // (`length`). finishReason `"tool-calls"` is the NORMAL handoff to the
-          // browser (client tools) — not truncation — so it gets no notice; the
-          // client runs the tools and auto-continues. `sendFinish: false` holds
-          // the finish event until after any notice is written.
-          const stream = createUIMessageStream<UIMessage>({
-            originalMessages: uiMessages,
-            execute: async ({ writer }) => {
-              writer.merge(result.toUIMessageStream({ sendFinish: false }));
-              const finishReason = await result.finishReason;
-              if (finishReason === "length") {
-                const id = `notice_${turnId}`;
-                writer.write({ type: "text-start", id });
-                writer.write({ type: "text-delta", id, delta: truncationNotice() });
-                writer.write({ type: "text-end", id });
-              }
-            },
-            // Server-authoritative persistence: `messages` is the fully assembled
-            // UI-message list (original + this turn's assistant + server-executed
-            // tool parts the client never re-sends, plus any truncation notice),
-            // upserted under the client-minted chat id. Skipped on an aborted stream.
-            onFinish: ({ messages, isAborted }) => {
-              if (!isAborted) {
-                void persistOnFinish(context, input, messages);
-              }
-            },
-          });
-          return createUIMessageStreamResponse({ stream });
-        },
-      });
-    });
-
-  return { chat };
-};
-
-/**
- * Persist the completed chat server-authoritatively. Best-effort: a persistence
- * failure must not fail an already-streamed turn, so failures are swallowed
- * (the client refetches the history list on stream finish regardless). The
- * response body carries the assistant + tool parts; we persist the input UI
- * messages plus rely on the client refetch for the freshest full transcript.
- */
-const persistOnFinish = async (
-  context: ChatContext,
-  input: VoidhashAiChatInput,
-  messages: ReadonlyArray<UIMessage>,
-): Promise<void> => {
-  await Effect.runPromiseExit(
-    Effect.gen(function* () {
-      const chats = yield* AiChatService;
-      yield* chats.save({
-        id: input.chatId,
-        organizationId: input.organizationId,
-        projectId: input.projectId,
-        surface: input.surface,
-        chatType: "persistent",
-        paywallId: input.paywallId,
-        title: deriveTitle(messages),
-        messages: JSON.stringify(messages),
-      });
-    }).pipe(
-      Effect.provide(context),
-      Effect.catch(() => Effect.void),
-    ) as Effect.Effect<void, never>,
-  );
-};
diff --git a/apps/backend/src/ai/WorkspaceAgentModels.ts b/apps/backend/src/ai/WorkspaceAgentModels.ts
new file mode 100644
index 000000000..774342572
--- /dev/null
+++ b/apps/backend/src/ai/WorkspaceAgentModels.ts
@@ -0,0 +1,19 @@
+import { getCatalogModel, type Model } from "@voidhash/agent";
+
+const requiredModel = (provider: string, modelId: string): Model<string> => {
+  const model = getCatalogModel(provider, modelId);
+  if (model === undefined) throw new Error(`Missing workspace model: ${provider}/${modelId}`);
+  return model;
+};
+
+/** Default production model for text-only workspace turns. */
+export const workspaceTextModel = requiredModel(
+  "cloudflare-workers-ai",
+  "@cf/moonshotai/kimi-k2.7-code",
+);
+
+/** Production vision model selected only when the current user turn has images. */
+export const workspaceVisionModel = requiredModel(
+  "cloudflare-workers-ai",
+  "@cf/meta/llama-4-scout-17b-16e-instruct",
+);
diff --git a/apps/backend/src/ai/WorkspaceAgentServices.ts b/apps/backend/src/ai/WorkspaceAgentServices.ts
new file mode 100644
index 000000000..33b180096
--- /dev/null
+++ b/apps/backend/src/ai/WorkspaceAgentServices.ts
@@ -0,0 +1,23 @@
+import {
+  ComponentManifestCacheService,
+  PaywallDeployService,
+  PaywallEditChangeSetService,
+  PaywallService,
+  PaywallWorkspaceService,
+} from "@voidhash/core/services";
+import { Layer } from "effect";
+
+const PaywallServiceLive = PaywallService.layer;
+const ComponentManifestCacheServiceLive = ComponentManifestCacheService.layer;
+const PaywallWorkspaceServiceLive = PaywallWorkspaceService.layer.pipe(
+  Layer.provide(PaywallServiceLive),
+);
+
+/** Builds only the domain services required by durable workspace agents. */
+export const WorkspaceAgentServicesLive = Layer.mergeAll(
+  PaywallServiceLive,
+  ComponentManifestCacheServiceLive,
+  PaywallDeployService.layer,
+  PaywallWorkspaceServiceLive,
+  PaywallEditChangeSetService.layer.pipe(Layer.provide(PaywallWorkspaceServiceLive)),
+);
diff --git a/apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts b/apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts
new file mode 100644
index 000000000..634694fc4
--- /dev/null
+++ b/apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts
@@ -0,0 +1,97 @@
+import { makeLayerEffectRunner } from "@voidhash/agent";
+import { Context, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import type { WorkspaceAgentDeps } from "./WorkspaceAgentSessionFactory.ts";
+import { makeWorkspaceAgentSessionFactory } from "./WorkspaceAgentSessionFactory.ts";
+import { workspaceTextModel, workspaceVisionModel } from "./WorkspaceAgentModels.ts";
+
+describe("makeWorkspaceAgentSessionFactory", () => {
+  it("uses progressive skill disclosure and switches to vision only for image turns", async () => {
+    const factory = makeWorkspaceAgentSessionFactory<void>({
+      defaultModel: workspaceTextModel,
+      visionModel: workspaceVisionModel,
+      runEffect: makeLayerEffectRunner<void, WorkspaceAgentDeps>(() =>
+        Layer.succeedContext(Context.empty() as Context.Context<WorkspaceAgentDeps>),
+      ),
+    });
+    const dynamicContext = { current: { selectedNodeIds: [] } };
+    const owner = {
+      organizationId: "organization-1",
+      projectId: "project-1",
+      userId: "user-1",
+    };
+    const agent = await factory.create({
+      sessionId: "session-1",
+      owner,
+      connectionData: undefined,
+      messages: [],
+      dynamicContext,
+    });
+
+    expect(agent.state.systemPrompt).toContain("<name>paywall-authoring</name>");
+    expect(agent.state.systemPrompt).not.toContain("Document model and authorable tree");
+    expect(agent.state.tools.map((tool) => tool.name)).toContain("read_skill");
+    expect(agent.state.tools.map((tool) => tool.name)).toContain("edit_paywall");
+    const editPaywall = agent.state.tools.find((tool) => tool.name === "edit_paywall");
+    expect(editPaywall?.parameters.properties).not.toHaveProperty("changeSetId");
+
+    await factory.preparePrompt?.({
+      agent,
+      sessionId: "session-1",
+      owner,
+      connectionData: undefined,
+      dynamicContext,
+      message: { role: "user", content: "text", timestamp: 1 },
+    });
+    expect(agent.state.model.id).toBe(workspaceTextModel.id);
+
+    await factory.preparePrompt?.({
+      agent,
+      sessionId: "session-1",
+      owner,
+      connectionData: undefined,
+      dynamicContext,
+      message: {
+        role: "user",
+        content: [{ type: "image", data: "image", mimeType: "image/png" }],
+        timestamp: 2,
+      },
+    });
+    expect(agent.state.model.id).toBe(workspaceVisionModel.id);
+
+    const selectedModel = { ...workspaceTextModel, id: "selected-model", name: "Selected" };
+    agent.state.model = selectedModel;
+    await factory.preparePrompt?.({
+      agent,
+      sessionId: "session-1",
+      owner,
+      connectionData: undefined,
+      dynamicContext,
+      message: { role: "user", content: "text", timestamp: 3 },
+    });
+    expect(agent.state.model.id).toBe(selectedModel.id);
+
+    await factory.preparePrompt?.({
+      agent,
+      sessionId: "session-1",
+      owner,
+      connectionData: undefined,
+      dynamicContext,
+      message: {
+        role: "user",
+        content: [{ type: "image", data: "image", mimeType: "image/png" }],
+        timestamp: 4,
+      },
+    });
+    await factory.preparePrompt?.({
+      agent,
+      sessionId: "session-1",
+      owner,
+      connectionData: undefined,
+      dynamicContext,
+      message: { role: "user", content: "text", timestamp: 5 },
+    });
+    expect(agent.state.model.id).toBe(selectedModel.id);
+  });
+});
diff --git a/apps/backend/src/ai/WorkspaceAgentSessionFactory.ts b/apps/backend/src/ai/WorkspaceAgentSessionFactory.ts
new file mode 100644
index 000000000..6d2406a93
--- /dev/null
+++ b/apps/backend/src/ai/WorkspaceAgentSessionFactory.ts
@@ -0,0 +1,153 @@
+import {
+  Agent,
+  bindEffectRunner,
+  effectAgentToolErrorOverride,
+  makeReadSkillTool,
+  renderSkillDisclosure,
+  type AgentMessage,
+  type AgentSessionFactory,
+  type AgentSessionFactoryInput,
+  type EffectRunner,
+  type Model,
+  type StreamFn,
+} from "@voidhash/agent";
+import { PaywallService } from "@voidhash/core/services";
+
+import { buildDesignerContext } from "./DesignerContext.ts";
+import { registeredSkillSource } from "./skills/registry.ts";
+import { designerAgentSystemPrompt } from "./surfaces.ts";
+import { AgentChangeSetTracker, makeWorkspaceAgentTools } from "./WorkspaceAgentTools.ts";
+import type { WorkspaceToolDeps } from "./workspace-tools.ts";
+
+/** Services resolved by the Pi agent's in-process tools. */
+export type WorkspaceAgentDeps = WorkspaceToolDeps | PaywallService;
+
+/** Model and runtime configuration for the shared workspace session factory. */
+export interface WorkspaceAgentSessionFactoryOptions<ConnectionData> {
+  readonly defaultModel: Model<string>;
+  readonly visionModel: Model<string>;
+  readonly streamFn?: StreamFn;
+  readonly getApiKey?: (provider: string) => Promise<string | undefined> | string | undefined;
+  readonly runEffect: EffectRunner<ConnectionData, WorkspaceAgentDeps>;
+  readonly resolveModel?: (
+    provider: string,
+    modelId: string,
+    connectionData: ConnectionData,
+  ) => Model<string> | undefined | Promise<Model<string> | undefined>;
+}
+
+const messageHasImage = (message: AgentMessage): boolean =>
+  message.role === "user" &&
+  Array.isArray(message.content) &&
+  message.content.some((content) => content.type === "image");
+
+const latestUserHasImage = (messages: ReadonlyArray<AgentMessage>): boolean => {
+  for (let index = messages.length - 1; index >= 0; index -= 1) {
+    const message = messages[index];
+    if (message?.role === "user") return messageHasImage(message);
+  }
+  return false;
+};
+
+const skillPrompt = (): string => {
+  const disclosure = renderSkillDisclosure(registeredSkillSource());
+  return disclosure.length === 0
+    ? ""
+    : `\n\nCall \`read_skill\` before work covered by a listed skill.\n${disclosure}`;
+};
+
+const contextSystemPrompt = async <ConnectionData>(
+  input: Pick<
+    AgentSessionFactoryInput<ConnectionData>,
+    "owner" | "connectionData" | "dynamicContext"
+  >,
+  runEffect: WorkspaceAgentSessionFactoryOptions<ConnectionData>["runEffect"],
+): Promise<string> => {
+  const resolved = await runEffect(
+    input.connectionData,
+    buildDesignerContext({
+      projectId: input.owner.projectId,
+      paywallId: input.dynamicContext.current.paywallId,
+      selectedNodeIds: input.dynamicContext.current.selectedNodeIds,
+    }),
+  );
+  return `${designerAgentSystemPrompt(resolved)}${skillPrompt()}`;
+};
+
+/**
+ * Creates Pi agents that run canonical workspace tools through the host Effect
+ * runner and refresh designer facts before every provider turn.
+ */
+export const makeWorkspaceAgentSessionFactory = <ConnectionData>(
+  options: WorkspaceAgentSessionFactoryOptions<ConnectionData>,
+): AgentSessionFactory<ConnectionData> => {
+  const preferredTextModels = new WeakMap<Agent, Model<string>>();
+  const isVisionModel = (model: Model<string>): boolean =>
+    model.provider === options.visionModel.provider && model.id === options.visionModel.id;
+  const preferredTextModel = (agent: Agent): Model<string> => {
+    if (!isVisionModel(agent.state.model)) {
+      preferredTextModels.set(agent, agent.state.model);
+    }
+    return preferredTextModels.get(agent) ?? options.defaultModel;
+  };
+
+  return {
+    create: async (input) => {
+      const changeSets = new AgentChangeSetTracker();
+      changeSets.rehydrate(input.messages);
+      const runEffect = bindEffectRunner(options.runEffect, input.connectionData);
+      const tools = [
+        ...makeWorkspaceAgentTools(
+          { projectId: input.owner.projectId, agentSessionId: input.sessionId },
+          runEffect,
+          changeSets,
+        ),
+        makeReadSkillTool(registeredSkillSource()),
+      ];
+      let agent: Agent;
+      agent = new Agent({
+        initialState: {
+          model: options.defaultModel,
+          messages: [...input.messages],
+          systemPrompt: await contextSystemPrompt(input, options.runEffect),
+          tools,
+        },
+        ...(options.streamFn === undefined ? {} : { streamFn: options.streamFn }),
+        ...(options.getApiKey === undefined ? {} : { getApiKey: options.getApiKey }),
+        sessionId: input.sessionId,
+        steeringMode: "all",
+        followUpMode: "all",
+        toolExecution: "sequential",
+        afterToolCall: async ({ result }) => effectAgentToolErrorOverride(result),
+        prepareNextTurnWithContext: async ({ context: piContext }) => {
+          const systemPrompt = await contextSystemPrompt(input, options.runEffect);
+          return {
+            context: { ...piContext, systemPrompt },
+            model: latestUserHasImage(piContext.messages)
+              ? options.visionModel
+              : preferredTextModel(agent),
+          };
+        },
+      });
+      preferredTextModels.set(agent, options.defaultModel);
+      return agent;
+    },
+    preparePrompt: async ({ agent, message, owner, connectionData, dynamicContext }) => {
+      agent.state.systemPrompt = await contextSystemPrompt(
+        { owner, connectionData, dynamicContext },
+        options.runEffect,
+      );
+      const textModel = preferredTextModel(agent);
+      agent.state.model = messageHasImage(message) ? options.visionModel : textModel;
+    },
+    resolveModel: (provider, modelId, connectionData) => {
+      if (provider === options.defaultModel.provider && modelId === options.defaultModel.id) {
+        return options.defaultModel;
+      }
+      if (provider === options.visionModel.provider && modelId === options.visionModel.id) {
+        return options.visionModel;
+      }
+      return options.resolveModel?.(provider, modelId, connectionData);
+    },
+  };
+};
diff --git a/apps/backend/src/ai/WorkspaceAgentTools.test.ts b/apps/backend/src/ai/WorkspaceAgentTools.test.ts
new file mode 100644
index 000000000..fc77b8638
--- /dev/null
+++ b/apps/backend/src/ai/WorkspaceAgentTools.test.ts
@@ -0,0 +1,132 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import { AgentChangeSetTracker } from "./WorkspaceAgentTools.ts";
+
+describe("AgentChangeSetTracker", () => {
+  it("opens once and injects the change set into subsequent lifecycle calls", async () => {
+    const tracker = new AgentChangeSetTracker();
+    let begins = 0;
+    const begin = (slug: string) => {
+      begins += 1;
+      return Effect.succeed({
+        output: JSON.stringify({ changeSetId: "change-1", slug }),
+        isError: false,
+      });
+    };
+
+    await expect(
+      Effect.runPromise(tracker.prepare("edit_paywall", { slug: "trial", edits: [] }, begin)),
+    ).resolves.toMatchObject({ changeSetId: "change-1" });
+    await expect(
+      Effect.runPromise(tracker.prepare("get_paywall_preview", { slug: "trial" }, begin)),
+    ).resolves.toEqual({ slug: "trial", changeSetId: "change-1" });
+    expect(begins).toBe(1);
+  });
+
+  it("overwrites model-supplied capabilities with the session-owned change set", async () => {
+    const tracker = new AgentChangeSetTracker();
+    let begins = 0;
+    const prepared = await Effect.runPromise(
+      tracker.prepare(
+        "edit_paywall",
+        { slug: "trial", changeSetId: "change-attacker", edits: [] },
+        (slug) => {
+          begins += 1;
+          return Effect.succeed({
+            output: JSON.stringify({ changeSetId: "change-owned", slug }),
+            isError: false,
+          });
+        },
+      ),
+    );
+
+    expect(prepared).toMatchObject({ changeSetId: "change-owned" });
+    expect(tracker.get("trial")).toBe("change-owned");
+    expect(begins).toBe(1);
+  });
+
+  it("clears the capability only after a successful finish or revert", async () => {
+    const tracker = new AgentChangeSetTracker();
+    tracker.observe(
+      "begin_paywall_edit",
+      { slug: "trial" },
+      {
+        output: JSON.stringify({ changeSetId: "change-1", slug: "trial" }),
+        isError: false,
+      },
+    );
+
+    tracker.observe("finish_paywall_edit", { slug: "trial" }, { output: "no", isError: true });
+    expect(tracker.get("trial")).toBe("change-1");
+    tracker.observe(
+      "revert_paywall_edit",
+      { changeSetId: "change-1" },
+      { output: "ok", isError: false },
+    );
+    expect(tracker.get("trial")).toBeUndefined();
+  });
+
+  it("rehydrates an unfinished capability from persisted Pi tool results", async () => {
+    const tracker = new AgentChangeSetTracker();
+    tracker.rehydrate([
+      {
+        role: "toolResult",
+        toolCallId: "call-1",
+        toolName: "edit_paywall",
+        content: [{ type: "text", text: "Updated" }],
+        details: {
+          toolName: "edit_paywall",
+          output: "Updated",
+          changeSetId: "change-1",
+          slug: "trial",
+        },
+        isError: true,
+        timestamp: 1,
+      },
+    ]);
+    let begins = 0;
+
+    await expect(
+      Effect.runPromise(
+        tracker.prepare("edit_paywall", { slug: "trial", edits: [] }, () => {
+          begins += 1;
+          return Effect.succeed({ output: "unexpected", isError: true });
+        }),
+      ),
+    ).resolves.toMatchObject({ changeSetId: "change-1" });
+    expect(begins).toBe(0);
+
+    tracker.rehydrate([
+      {
+        role: "toolResult",
+        toolCallId: "call-1",
+        toolName: "edit_paywall",
+        content: [{ type: "text", text: "Updated" }],
+        details: {
+          toolName: "edit_paywall",
+          output: "Updated",
+          changeSetId: "change-1",
+          slug: "trial",
+        },
+        isError: false,
+        timestamp: 1,
+      },
+      {
+        role: "toolResult",
+        toolCallId: "call-2",
+        toolName: "finish_paywall_edit",
+        content: [{ type: "text", text: "Finished" }],
+        details: {
+          toolName: "finish_paywall_edit",
+          output: "Finished",
+          changeSetId: "change-1",
+          slug: "trial",
+        },
+        isError: false,
+        timestamp: 2,
+      },
+    ]);
+    expect(tracker.get("trial")).toBeUndefined();
+  });
+});
diff --git a/apps/backend/src/ai/WorkspaceAgentTools.ts b/apps/backend/src/ai/WorkspaceAgentTools.ts
new file mode 100644
index 000000000..a7304e858
--- /dev/null
+++ b/apps/backend/src/ai/WorkspaceAgentTools.ts
@@ -0,0 +1,214 @@
+import {
+  makeEffectAgentToolWithRunner,
+  type BoundEffectRunner,
+  type AgentTool,
+  type AgentMessage,
+  type TSchema,
+} from "@voidhash/agent";
+import { Effect } from "effect";
+
+import { MCP_TOOLS } from "../mcp/tool-manifest.ts";
+import type {
+  WorkspaceToolDeps,
+  WorkspaceToolResult,
+  WorkspaceToolScope,
+} from "./workspace-tools.ts";
+
+const CHANGE_SET_TOOLS = new Set([
+  "edit_paywall",
+  "duplicate_subtree",
+  "write_component",
+  "rename_component",
+  "delete_component",
+  "get_paywall_preview",
+  "finish_paywall_edit",
+]);
+
+const inputRecord = (input: unknown): Record<string, unknown> | undefined =>
+  input !== null && typeof input === "object" && !Array.isArray(input)
+    ? (input as Record<string, unknown>)
+    : undefined;
+
+const decodedChangeSet = (
+  result: WorkspaceToolResult,
+): { readonly changeSetId: string; readonly slug: string } | undefined => {
+  if (result.isError) return undefined;
+  try {
+    const value = JSON.parse(result.output) as { changeSetId?: unknown; slug?: unknown };
+    return typeof value.changeSetId === "string" && typeof value.slug === "string"
+      ? { changeSetId: value.changeSetId, slug: value.slug }
+      : undefined;
+  } catch {
+    return undefined;
+  }
+};
+
+/** Tracks the server-managed edit capability used by an internal agent session. */
+export class AgentChangeSetTracker {
+  readonly #activeBySlug = new Map<string, string>();
+
+  /** Returns the active change-set id for a paywall, when one has been opened. */
+  readonly get = (slug: string): string | undefined => this.#activeBySlug.get(slug);
+
+  /** Rebuilds active capabilities from persisted Pi tool-result messages. */
+  readonly rehydrate = (messages: ReadonlyArray<AgentMessage>): void => {
+    this.#activeBySlug.clear();
+    for (const message of messages) {
+      if (message.role !== "toolResult") continue;
+      const details = inputRecord(message.details);
+      const toolName = typeof details?.toolName === "string" ? details.toolName : message.toolName;
+      const decoded =
+        typeof details?.output === "string"
+          ? decodedChangeSet({ output: details.output, isError: false })
+          : undefined;
+      const changeSetId =
+        typeof details?.changeSetId === "string" ? details.changeSetId : decoded?.changeSetId;
+      const slug = typeof details?.slug === "string" ? details.slug : decoded?.slug;
+      if (changeSetId !== undefined && slug !== undefined) {
+        this.#activeBySlug.set(slug, changeSetId);
+      }
+      if (message.isError) continue;
+      if (toolName === "finish_paywall_edit" && slug !== undefined) {
+        this.#activeBySlug.delete(slug);
+      } else if (toolName === "revert_paywall_edit" && changeSetId !== undefined) {
+        for (const [activeSlug, activeId] of this.#activeBySlug) {
+          if (activeId === changeSetId) this.#activeBySlug.delete(activeSlug);
+        }
+      }
+    }
+  };
+
+  /**
+   * Adds the active capability to a lifecycle tool call. The first mutating call
+   * for a paywall opens the change set through the same workspace implementation
+   * exposed to MCP.
+   */
+  readonly prepare = <R>(
+    toolName: string,
+    input: unknown,
+    begin: (slug: string) => Effect.Effect<WorkspaceToolResult, never, R>,
+  ): Effect.Effect<unknown, Error, R> => {
+    const record = inputRecord(input);
+    if (!CHANGE_SET_TOOLS.has(toolName) || record === undefined) {
+      return Effect.succeed(input);
+    }
+    const slug = record.slug;
+    if (typeof slug !== "string" || slug.length === 0) {
+      return Effect.succeed(input);
+    }
+    const active = this.#activeBySlug.get(slug);
+    if (active !== undefined) {
+      return Effect.succeed({ ...record, changeSetId: active });
+    }
+    return begin(slug).pipe(
+      Effect.flatMap((result) => {
+        const opened = decodedChangeSet(result);
+        if (opened === undefined) {
+          return Effect.fail(new Error(result.output));
+        }
+        this.#activeBySlug.set(opened.slug, opened.changeSetId);
+        return Effect.succeed({ ...record, changeSetId: opened.changeSetId });
+      }),
+    );
+  };
+
+  /** Updates tracked lifecycle state after a workspace tool completes. */
+  readonly observe = (toolName: string, input: unknown, result: WorkspaceToolResult): void => {
+    if (result.isError) return;
+    if (toolName === "begin_paywall_edit") {
+      const opened = decodedChangeSet(result);
+      if (opened !== undefined) this.#activeBySlug.set(opened.slug, opened.changeSetId);
+      return;
+    }
+    const record = inputRecord(input);
+    if (toolName === "finish_paywall_edit" && typeof record?.slug === "string") {
+      this.#activeBySlug.delete(record.slug);
+      return;
+    }
+    if (toolName === "revert_paywall_edit" && typeof record?.changeSetId === "string") {
+      for (const [slug, changeSetId] of this.#activeBySlug) {
+        if (changeSetId === record.changeSetId) this.#activeBySlug.delete(slug);
+      }
+    }
+  };
+}
+
+/** Structured metadata attached to each Pi workspace-tool result. */
+export interface WorkspaceAgentToolDetails {
+  readonly toolName: string;
+  readonly output: string;
+  readonly changeSetId?: string;
+  readonly slug?: string;
+}
+
+const internalParameters = (schema: Record<string, unknown>): TSchema => {
+  const cloned = structuredClone(schema);
+  const properties = inputRecord(cloned.properties);
+  if (properties !== undefined) delete properties.changeSetId;
+  const required = cloned.required;
+  if (Array.isArray(required)) {
+    cloned.required = required.filter((property) => property !== "changeSetId");
+  }
+  return cloned as unknown as TSchema;
+};
+
+const contentOf = (result: WorkspaceToolResult) =>
+  result.content === undefined
+    ? [{ type: "text" as const, text: result.output }]
+    : result.content.map((content) => ({ ...content }));
+
+/**
+ * Adapts every shared MCP workspace tool into a Pi tool that executes through
+ * the host's Effect runner. Tool names and schemas remain aligned with MCP while
+ * internal change-set capabilities are injected automatically.
+ */
+export const makeWorkspaceAgentTools = (
+  scope: WorkspaceToolScope,
+  runEffect: BoundEffectRunner<WorkspaceToolDeps>,
+  tracker = new AgentChangeSetTracker(),
+): ReadonlyArray<AgentTool> => {
+  const beginTool = MCP_TOOLS.find((tool) => tool.descriptor.name === "begin_paywall_edit");
+  if (beginTool === undefined) throw new Error("begin_paywall_edit is not registered");
+
+  return MCP_TOOLS.map((tool) =>
+    makeEffectAgentToolWithRunner<unknown, WorkspaceAgentToolDetails, Error, WorkspaceToolDeps>(
+      {
+        name: tool.descriptor.name,
+        label: tool.descriptor.name,
+        description: tool.descriptor.description,
+        parameters: internalParameters(tool.descriptor.inputSchema),
+        effectHandler: (input) =>
+          tracker
+            .prepare(tool.descriptor.name, input, (slug) => beginTool.dispatch(scope, { slug }))
+            .pipe(
+              Effect.flatMap((prepared) =>
+                tool.dispatch(scope, prepared).pipe(Effect.map((result) => ({ prepared, result }))),
+              ),
+              Effect.map(({ prepared, result }) => {
+                const record = inputRecord(prepared);
+                const slug = typeof record?.slug === "string" ? record.slug : undefined;
+                const suppliedChangeSetId = record?.changeSetId;
+                tracker.observe(tool.descriptor.name, prepared, result);
+                const changeSetId =
+                  typeof suppliedChangeSetId === "string"
+                    ? suppliedChangeSetId
+                    : slug === undefined
+                      ? undefined
+                      : tracker.get(slug);
+                return {
+                  content: contentOf(result),
+                  details: {
+                    toolName: tool.descriptor.name,
+                    output: result.output,
+                    ...(changeSetId === undefined ? {} : { changeSetId }),
+                    ...(slug === undefined ? {} : { slug }),
+                  },
+                  isError: result.isError,
+                };
+              }),
+            ),
+      },
+      runEffect,
+    ),
+  );
+};
diff --git a/apps/backend/src/ai/skills/paywall-authoring.test.ts b/apps/backend/src/ai/skills/paywall-authoring.test.ts
index 8e612c14f..f16a8a315 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.test.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.test.ts
@@ -90,9 +90,8 @@ describe("paywallAuthoringSkill — generated containment reference", () => {
 
 describe("paywallAuthoringSkill — visual review discipline", () => {
   it("documents rendered inspection, screenshot checkpoints, and gated completion", () => {
-    expect(skill).toContain("`get_rendered_layout` measures reality");
-    expect(skill).toContain("`get_preview_screenshot` is the visual checkpoint");
-    expect(skill).toContain("`finish_design` is the completion gate");
+    expect(skill).toContain("`get_paywall_preview` is the visual checkpoint");
+    expect(skill).toContain("`finish_paywall_edit` is the completion gate");
     expect(skill).toContain("Hierarchy and story");
     expect(skill).toContain("Offer clarity");
     expect(skill).toContain("Viewport fit");
diff --git a/apps/backend/src/ai/skills/paywall-authoring.ts b/apps/backend/src/ai/skills/paywall-authoring.ts
index fe8e601d3..6a3ace9a9 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.ts
@@ -132,14 +132,14 @@ let cachedSkill: string | undefined;
 export const paywallAuthoringSkill = (): string =>
   (cachedSkill ??= `# Paywall Authoring Reference
 
-This is the domain reference for building the open paywall as a mimic document
-with \`edit_document\`, plus code components for anything that needs real code.
+This is the domain reference for building a paywall as a mimic document
+with \`edit_paywall\`, plus code components for anything that needs real code.
 Read the document model and containment rules first — the style reference below is
 generated from the live schema, so it is always exact.
 
 ## Document model
 
-A paywall is a MIMIC DOCUMENT: a tree of nodes. You author it with \`edit_document\`
+A paywall is a MIMIC DOCUMENT: a tree of nodes. You author it with \`edit_paywall\`
 ops (\`insert\`, \`update\`, \`move\`, \`remove\`, \`replaceChildren\`), addressing nodes
 by their engine-minted id. The node kinds you build with:
 
@@ -164,7 +164,7 @@ by their engine-minted id. The node kinds you build with:
   \`get_components\` — builtins are UNPINNED (no version/hash) and take props like
   any component.
 
-Node ids are ADDRESSES: every node has a stable id. \`get_document\` returns the
+Node ids are ADDRESSES: every node has a stable id. \`get_paywall\` returns the
 tree with ids; the user's selection is a set of ids; inserts RETURN their minted
 ids. You never write an id yourself.
 
@@ -235,36 +235,38 @@ Layout is flexbox, exactly like CSS / React Native:
 
 ## Tool usage
 
-- **\`get_document\` first.** Learn the current tree and ids before editing. Pass
+- **Open one change set.** Discover the target with \`list_paywalls\`, then call
+  \`begin_paywall_edit({ slug })\`. Pass the returned \`changeSetId\` and the same
+  \`slug\` to every mutation and preview call. Finish it after visual QA, or
+  revert it; never abandon an active change set.
+- **\`get_paywall\` first.** Learn the current tree and ids before editing. Pass
   \`nodeId\` to root at a subtree and \`depth\` to cap the tree (deeper nodes return
   as \`{ id, type, name?, childCount }\` stubs you expand with a follow-up
-  \`get_document(nodeId)\`). Cheaper than pulling the whole document every turn.
-- **\`edit_document\` applies an ATOMIC batch.** Every op lands or none does. On
+  \`get_paywall({ slug, nodeId })\`). Cheaper than pulling the whole document every
+  turn.
+- **\`edit_paywall\` applies an ATOMIC batch.** Every op lands or none does. On
   success you get the minted ids for \`insert\`/\`replaceChildren\` ops (keyed by op
   index, parents-before-children) so you can address new nodes next. On failure
   you get per-op errors naming the node, the allowed fields (with a did-you-mean),
   and the allowed values — trust them and correct the batch. On a write conflict
   the batch is re-applied against the latest LIVE tree, so concurrent designer
-  edits MERGE rather than clobber — a follow-up \`get_document\` may show a tree
+  edits MERGE rather than clobber — a follow-up \`get_paywall\` may show a tree
   shifted by another editor's changes.
 - **Merge semantics on \`update\`.** \`set.style\` merges per style field; other
   objects merge per-field; arrays and scalars REPLACE wholesale. Send only the
   fields you want to change.
 - **Ids are minted.** Never supply an id on an inserted node. Target existing
-  nodes with ids from \`get_document\`, the selection, or a prior insert's returned
+  nodes with ids from \`get_paywall\`, the selection, or a prior insert's returned
   ids.
 - **Selection ids are directly addressable.** When the context block lists
   selected node ids, use them straight in ops (no need to re-locate them).
 - **\`duplicate_subtree\` preserves visual systems.** Prefer it over rebuilding a
   repeated benefit, product option, card, or control from scratch. Fresh ids are
   returned, so immediately tailor the clone's content/state with focused updates.
-- **\`get_rendered_layout\` measures reality.** Use it when declared styles are not
-  enough to judge alignment, spacing, clipping, overflow, safe-area fit, or
-  above-the-fold placement. It reports browser geometry and resolved styles.
-- **\`get_preview_screenshot\` is the visual checkpoint.** Capture the screen after
+- **\`get_paywall_preview\` is the visual checkpoint.** Capture the screen after
   each meaningful visual section and after every correction pass. Inspect the
   pixels; do not infer visual quality from the document tree alone.
-- **\`finish_design\` is the completion gate.** It accepts only the exact signature
+- **\`finish_paywall_edit\` is the completion gate.** It accepts only the exact signature
   of the latest screenshot while the document is unchanged and
   \`unresolvedIssues\` is empty. Any post-review edit requires a new screenshot.
 
@@ -298,7 +300,7 @@ rubric and correct visible issues with focused edits:
 
 Do not merely describe a problem found in the screenshot. Fix it, capture a new
 screenshot, and repeat until the review has no unresolved issues. Then call
-\`finish_design\` with the final screenshot's document signature.
+\`finish_paywall_edit\` with the final screenshot's document signature.
 
 ### Op cheatsheet
 
@@ -384,7 +386,7 @@ These three first-class document fields form a small no-code state machine:
    a variable changes. Later matching states win conflicting fields. On \`view\`
    and \`scrollView\`, a state may also replace an interaction's action through
    \`overrides.actions\`; its \`interactionId\` must be the interaction array-entry
-   id returned by \`get_document\`. State style overrides do not auto-enable gated
+   id returned by \`get_paywall\`. State style overrides do not auto-enable gated
    groups, so include \`backgroundEnabled\`, \`borderEnabled\`, \`shadowEnabled\`,
    \`fillEnabled\`, or \`strokeEnabled\` when an override first turns on that group.
 
@@ -453,7 +455,7 @@ fields inside these arrays are stable logical ids for sub-records, not node ids.
 
 ## Doctrine: build with the document, reach for code only when you must
 
-**The document (\`edit_document\`) is ALWAYS the primary way to build a paywall.**
+**The document (\`edit_paywall\`) is ALWAYS the primary way to build a paywall.**
 Static layout, styling, literal text, local variables, click/component actions,
 and variable-driven style/visibility states all belong in the document. Write a
 code component ONLY when the document genuinely cannot express what you need:
@@ -630,23 +632,30 @@ where \`period\` is \`"month" | "year" | "week" | "lifetime"\`.
 
 ## Tool vocabulary
 
-All tools operate on the currently open paywall, except \`read_paywall\`.
-
-- \`get_document(nodeId?, depth?)\` — read the open paywall's document as cleaned
-  JSON (subtree + depth for economy).
-- \`get_components()\` — list every placeable component (catalog + local +
-  builtin) with paths/slugs, props, actions, and preview states.
-- \`read_component(path)\` — read a LOCAL code component's TSX source.
-- \`read_paywall(slug)\` — read ANOTHER paywall's document JSON for reference
-  (read-only).
-- \`edit_document(edits)\` — apply an atomic batch of document ops (returns minted
-  ids or per-op errors).
-- \`write_component(path, source)\` — create-or-replace a code component (compiles;
-  returns diagnostics on failure).
-- \`rename_component(fromPath, toPath)\` — move a component (instances re-pointed).
-- \`delete_component(path)\` — delete a component (instances degrade to
-  placeholders).
-
-Read (\`get_document\`/\`get_components\`) before you write, use the minted ids the
+- \`list_paywalls()\` — discover paywall slugs in the project.
+- \`begin_paywall_edit({ slug })\` — capture the revert baseline and return a
+  \`changeSetId\`.
+- \`get_paywall({ slug, nodeId?, depth? })\` — read cleaned document JSON (subtree
+  + depth for economy).
+- \`get_components({ slug })\` — list every placeable catalog, local, and builtin
+  component with its authoring contract.
+- \`read_component({ slug, path })\` — read a local code component's TSX source.
+- \`edit_paywall({ slug, changeSetId, edits })\` — apply an atomic batch of document
+  ops (returns minted ids or per-op errors).
+- \`duplicate_subtree({ slug, changeSetId, nodeId, parentId, index? })\` — clone a
+  visual subtree with fresh ids.
+- \`write_component({ slug, changeSetId, path, source })\` — create or replace a
+  compiled code component.
+- \`rename_component({ slug, changeSetId, fromPath, toPath })\` — move a component
+  and re-point its instances.
+- \`delete_component({ slug, changeSetId, path })\` — delete a component; existing
+  instances degrade to placeholders.
+- \`get_paywall_preview({ slug, changeSetId })\` — render the version-bound PNG
+  used for visual QA.
+- \`finish_paywall_edit({ slug, changeSetId, reviewedDocumentSignature, verdict,
+  unresolvedIssues: [] })\` — accept a visually verified edit.
+- \`revert_paywall_edit({ changeSetId })\` — restore the captured baseline.
+
+Read (\`get_paywall\`/\`get_components\`) before you write, use the minted ids the
 edits return, and trust the field/value errors the validator gives you.
 `);
diff --git a/apps/backend/src/ai/skills/registry.ts b/apps/backend/src/ai/skills/registry.ts
new file mode 100644
index 000000000..38db49ff3
--- /dev/null
+++ b/apps/backend/src/ai/skills/registry.ts
@@ -0,0 +1,41 @@
+import type { SkillSource } from "@voidhash/agent/SkillSource";
+
+import { paywallAuthoringSkill } from "./paywall-authoring.ts";
+
+/** One lazily materialized skill delivered through every agent channel. */
+export interface SkillDefinition {
+  readonly name: string;
+  readonly description: string;
+  readonly body: () => string;
+}
+
+const definitions: ReadonlyArray<SkillDefinition> = [
+  {
+    name: "paywall-authoring",
+    description:
+      "Design, edit, preview, visually review, finish, or revert a Voidhash paywall with the shared workspace tools.",
+    body: paywallAuthoringSkill,
+  },
+];
+
+/** Lists every registered skill without evaluating its body. */
+export const listSkills = (): ReadonlyArray<SkillDefinition> => definitions;
+
+/** Looks up one registered skill by its stable name. */
+export const findSkill = (name: string): SkillDefinition | undefined =>
+  definitions.find((definition) => definition.name === name);
+
+/** Creates the non-filesystem skill source consumed by the Pi agent. */
+export const registeredSkillSource = (): SkillSource => ({
+  list: () => definitions.map(({ name, description }) => ({ name, description })),
+  read: (name) => findSkill(name)?.body(),
+});
+
+/** Stable MCP resource URI for one registered skill. */
+export const skillResourceUri = (name: string): string => `voidhash://skills/${name}`;
+
+/** Resolves a registered skill from its MCP resource URI. */
+export const skillFromResourceUri = (uri: string): SkillDefinition | undefined => {
+  const prefix = "voidhash://skills/";
+  return uri.startsWith(prefix) ? findSkill(uri.slice(prefix.length)) : undefined;
+};
diff --git a/apps/backend/src/ai/surfaces.test.ts b/apps/backend/src/ai/surfaces.test.ts
index f67fe1a6f..c3058c526 100644
--- a/apps/backend/src/ai/surfaces.test.ts
+++ b/apps/backend/src/ai/surfaces.test.ts
@@ -1,25 +1,25 @@
 import { describe, expect, it } from "vite-plus/test";
 
-import { designerSystemPrompt, systemPromptForSurface } from "./surfaces.ts";
+import { designerAgentSystemPrompt } from "./surfaces.ts";
 
 /**
  * Cover the dynamic designer context block appended to the system prompt: the
  * base prompt without context, the paywall listing (slug + name + code
  * components), the open-paywall block + selection (document node ids), and the
  * no-paywall-open degradation. The vocabulary is document-first — edits are live
- * `edit_document` ops, not a `paywall.tsx` fork/apply.
+ * `edit_paywall` ops, not a `paywall.tsx` fork/apply.
  */
-describe("designerSystemPrompt", () => {
-  const base = designerSystemPrompt();
+describe("designerAgentSystemPrompt", () => {
+  const base = designerAgentSystemPrompt();
 
   it("returns the base prompt unchanged when no context is supplied", () => {
     expect(base).toContain("You are Voidhash AI");
     expect(base).not.toContain("Current context:");
-    expect(systemPromptForSurface("designer")).toBe(base);
+    expect(base).not.toContain("Document model and authorable tree");
   });
 
   it("frames editing as live, undoable document transactions (no fork/apply)", () => {
-    expect(base).toContain("edit_document");
+    expect(base).toContain("edit_paywall");
     expect(base).toContain("live paywall");
     expect(base).toContain("UNDOABLE");
     // The old composition-as-a-file model is gone (no `paywall.tsx` grammar).
@@ -34,14 +34,13 @@ describe("designerSystemPrompt", () => {
     expect(base).toContain("How to work:");
     expect(base).toContain("Keep going until the user's request is fully handled");
     expect(base).toContain("compact visual direction");
-    expect(base).toContain("get_rendered_layout");
-    expect(base).toContain("get_preview_screenshot");
-    expect(base).toContain("finish_design");
+    expect(base).toContain("get_paywall_preview");
+    expect(base).toContain("finish_paywall_edit");
     expect(base).toContain("Never claim completion without a successful");
   });
 
   it("lists every paywall with its display name and code components", () => {
-    const prompt = designerSystemPrompt({
+    const prompt = designerAgentSystemPrompt({
       paywalls: [
         { slug: "trial", name: "Trial", componentFileNames: ["hero.tsx", "cta.tsx"] },
         { slug: "onboarding", name: "Onboarding", componentFileNames: [] },
@@ -55,31 +54,31 @@ describe("designerSystemPrompt", () => {
     expect(prompt).toContain('- onboarding ("Onboarding"): no code components');
   });
 
-  it("names the open paywall and points at edit_document for unqualified refs", () => {
-    const prompt = designerSystemPrompt({
+  it("names the open paywall and points at edit_paywall for unqualified refs", () => {
+    const prompt = designerAgentSystemPrompt({
       paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
       openPaywall: { slug: "trial", name: "Trial" },
       selectedNodeIds: [],
     });
     expect(prompt).toContain('has the "Trial" paywall (slug "trial") open');
-    expect(prompt).toContain("edit_document");
+    expect(prompt).toContain("edit_paywall");
     expect(prompt).toContain('"this paywall"');
     // No workspace path for the open paywall in the document-first model.
     expect(prompt).not.toContain("/paywalls/trial/paywall.tsx");
   });
 
   it("renders the selection as directly-addressable document node ids (plural)", () => {
-    const prompt = designerSystemPrompt({
+    const prompt = designerAgentSystemPrompt({
       paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
       openPaywall: { slug: "trial", name: "Trial" },
       selectedNodeIds: ["node_a", "node_b"],
     });
     expect(prompt).toContain("nodes with id node_a, node_b selected");
-    expect(prompt).toContain("edit_document");
+    expect(prompt).toContain("edit_paywall");
   });
 
   it("uses the singular for a single selected node", () => {
-    const prompt = designerSystemPrompt({
+    const prompt = designerAgentSystemPrompt({
       paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
       openPaywall: { slug: "trial", name: "Trial" },
       selectedNodeIds: ["node_a"],
@@ -88,7 +87,7 @@ describe("designerSystemPrompt", () => {
   });
 
   it("states no paywall is open when none matches", () => {
-    const prompt = designerSystemPrompt({
+    const prompt = designerAgentSystemPrompt({
       paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
       openPaywall: undefined,
       selectedNodeIds: [],
diff --git a/apps/backend/src/ai/surfaces.ts b/apps/backend/src/ai/surfaces.ts
index 5300a1fdd..1f523e6ee 100644
--- a/apps/backend/src/ai/surfaces.ts
+++ b/apps/backend/src/ai/surfaces.ts
@@ -1,130 +1,44 @@
-import type { Surface } from "@voidhash/ai-shared";
-import { paywallAuthoringSkill } from "./skills/paywall-authoring.ts";
+import { renderDesignerContext, type DesignerContext } from "./DesignerContext.ts";
 
 const DESIGNER_SYSTEM_PROMPT = `You are Voidhash AI, an autonomous design agent embedded in the Voidhash paywall designer. You help the user build and edit the paywall they currently have open. A paywall is a live MIMIC DOCUMENT — a tree of nodes (screen, view, text, shape, path, component) — that you author with document-edit operations, plus optional code components for anything that needs real code.
 
 Scope:
-- You edit ONLY the currently open paywall's document, with \`edit_document\`. You address nodes by their document node id (from \`get_document\` or the user's current selection).
+- You edit ONLY the currently open paywall's document, with \`edit_paywall\`. You address nodes by their document node id (from \`get_paywall\` or the user's current selection).
 - Code components are the escape hatch for genuine code (loops, conditionals, pressed states, runtime-data text). A component's identity is its path \`components/<name>.tsx\`: \`write_component\` creates-or-replaces it, \`rename_component\` moves it, \`delete_component\` removes it.
-- You can READ any other paywall in the project for reference with \`read_paywall\` (e.g. "make this paywall match the onboarding one" — read onboarding, then edit the open paywall). You CANNOT edit another paywall.
+- You can READ any other paywall in the project for reference with \`get_paywall\` (e.g. "make this paywall match the onboarding one" — read onboarding, then edit the open paywall). You CANNOT edit another paywall.
 
 Editing model — edits are LIVE:
-- Every \`edit_document\` batch and every component tool applies IMMEDIATELY to the live paywall as a mimic transaction. The user sees the change on the canvas at once, and it is UNDOABLE from their history. There is NO build/apply/publish step for composition — no fork, no \`apply_changes\`. You edit the document directly.
-- \`edit_document\` is ATOMIC per batch: either every op in the batch applies or none does. On success it returns the engine-minted ids of any inserted nodes (keyed by op index) so you can address the new nodes in a follow-up. On failure it returns per-op errors naming the offending node, the allowed fields (with a did-you-mean), and the allowed values — read them and correct the batch. Nothing partial lands.
-- Node ids are engine-minted. NEVER supply an id when inserting; use the returned minted ids (or ids from \`get_document\`/the selection) to target follow-up edits.
+- Every \`edit_paywall\` batch and every component tool applies IMMEDIATELY to the live paywall as a mimic transaction. The user sees the change on the canvas at once, and it is UNDOABLE from their history. There is NO build/apply/publish step for composition — no fork, no \`apply_changes\`. You edit the document directly.
+- \`edit_paywall\` is ATOMIC per batch: either every op in the batch applies or none does. On success it returns the engine-minted ids of any inserted nodes (keyed by op index) so you can address the new nodes in a follow-up. On failure it returns per-op errors naming the offending node, the allowed fields (with a did-you-mean), and the allowed values — read them and correct the batch. Nothing partial lands.
+- Node ids are engine-minted. NEVER supply an id when inserting; use the returned minted ids (or ids from \`get_paywall\`/the selection) to target follow-up edits.
 - \`write_component\` DOES have a compile step: on success the component compiles, commits, and becomes placeable as a \`component\` node; on failure you get compile diagnostics to fix. That loop is internal to \`write_component\` — it is the ONLY place a build gate exists.
 
 Attachments:
 - The user may attach images (e.g. a screenshot or mockup of the paywall they want) or paste content. When an image is attached, use it as the visual reference to reproduce. Match layout, colours, copy, and spacing as closely as the node/style system allows.
 
 Rules:
-- Read before you write. Call \`get_document\` (root, or a subtree with \`nodeId\`/\`depth\` for economy) to learn the current structure and ids before editing — explore, don't guess. Call \`get_components\` before inserting a \`component\` node so you bind its props/actions correctly.
-- Trust the validator. Field/value errors from \`edit_document\` name the allowed fields and values for that node type — iterate on them rather than guessing style keys.
+- Read before you write. Call \`get_paywall\` (root, or a subtree with \`nodeId\`/\`depth\` for economy) to learn the current structure and ids before editing — explore, don't guess. Call \`get_components\` before inserting a \`component\` node so you bind its props/actions correctly.
+- Trust the validator. Field/value errors from \`edit_paywall\` name the allowed fields and values for that node type — iterate on them rather than guessing style keys.
 - For broad creation or redesign requests, establish a compact visual direction before editing: audience and offer, mood, palette, typography scale, spacing rhythm, content hierarchy, and primary CTA treatment. Make decisive, coherent design choices when the user has not specified them.
 - Prefer the smallest change. Update only the fields you mean to change (\`update\` merges \`style\` per field). Reuse existing components and use \`duplicate_subtree\` for repeated visual groups. Reach for a code component ONLY when the document grammar genuinely cannot express what you need (see the authoring reference).
 - Keep your prose responses concise. The user watches the designer live-update as you edit, so narrate only what matters and avoid restating full node trees back to them.
 
 How to work:
-- Understand the request first, then \`get_document\` to see the current tree and ids. Read a sibling paywall with \`read_paywall\` when it is a useful reference.
-- Plan multi-step work. When a request needs several changes (new components, structural edits), lay out the steps and make them in order — batch related ops into one \`edit_document\` call where it is coherent (they apply atomically). Work one meaningful visual group at a time so each checkpoint is easy to assess and correct.
-- Edit step by step; after each \`edit_document\`, read the returned minted ids / errors and correct before continuing. Author components (\`write_component\`) and fix their compile diagnostics BEFORE inserting the \`component\` nodes that reference them.
-- Verify structure with \`get_document\` and rendered geometry with \`get_rendered_layout\`. After every meaningful visual section, call \`get_preview_screenshot\`, inspect the actual render, state a short internal verdict, and make targeted corrections for visible issues before moving on.
-- Completion is gated by visual QA. After the final edit, capture a fresh full-screen \`get_preview_screenshot\`, review it against the paywall rubric in the authoring reference, make and re-review any fixes, then call \`finish_design\` with that screenshot's exact document signature and no unresolved issues. Never claim completion without a successful \`finish_design\`.
+- Understand the request first, then \`get_paywall\` to see the current tree and ids. Read a sibling paywall with \`get_paywall\` when it is a useful reference.
+- Plan multi-step work. When a request needs several changes (new components, structural edits), lay out the steps and make them in order — batch related ops into one \`edit_paywall\` call where it is coherent (they apply atomically). Work one meaningful visual group at a time so each checkpoint is easy to assess and correct.
+- Edit step by step; after each \`edit_paywall\`, read the returned minted ids / errors and correct before continuing. Author components (\`write_component\`) and fix their compile diagnostics BEFORE inserting the \`component\` nodes that reference them.
+- Verify structure with \`get_paywall\`. After every meaningful visual section, call \`get_paywall_preview\`, inspect the actual render, state a short internal verdict, and make targeted corrections for visible issues before moving on.
+- Completion is gated by visual QA. After the final edit, capture a fresh full-screen \`get_paywall_preview\`, review it against the paywall rubric in the authoring reference, make and re-review any fixes, then call \`finish_paywall_edit\` with that screenshot's exact document signature and no unresolved issues. Never claim completion without a successful \`finish_paywall_edit\`.
 - Keep going until the user's request is fully handled. Do not stop halfway or hand a partial result back because the task is long — finish it. Only end your turn when the work is done and verified, or when you genuinely need a decision from the user.`;
 
 /**
- * Server-resolved facts about what the user has open in the designer, appended
- * to the system prompt as a context block. Built best-effort by the chat service
- * from the paywall workspace; a failure to resolve any part degrades to omitting
- * it (an absent `openPaywall` means no paywall is open).
+ * Compact Pi system prompt. Domain instructions are disclosed separately via
+ * the skill registry and `read_skill`, avoiding a large static prompt on every
+ * provider request.
  */
-export interface DesignerContext {
-  /** Every paywall in the project: its slug, display name, and component file names. */
-  readonly paywalls: ReadonlyArray<{
-    readonly slug: string;
-    readonly name: string;
-    readonly componentFileNames: ReadonlyArray<string>;
-  }>;
-  /** The paywall the user currently has open, resolved from the request's paywallId. */
-  readonly openPaywall?: {
-    readonly slug: string;
-    readonly name: string;
-  };
-  /** Mimic node ids the user currently has selected in the open paywall. */
-  readonly selectedNodeIds: ReadonlyArray<string>;
-}
-
-/** One paywall's entry in the workspace listing block. */
-const formatPaywallEntry = (paywall: DesignerContext["paywalls"][number]): string => {
-  const components =
-    paywall.componentFileNames.length > 0
-      ? `components: ${paywall.componentFileNames.map((fileName) => `components/${fileName}`).join(", ")}`
-      : "no code components";
-  return `- ${paywall.slug} ("${paywall.name}"): ${components}`;
-};
-
-/**
- * Render the dynamic designer context block appended to the system prompt: the
- * project's paywall listing (slug, name, code components), which paywall is open,
- * and the user's current selection. Returns an empty string when there is nothing
- * to say (no paywalls resolved and none open), so the caller can append it
- * unconditionally.
- */
-const renderDesignerContext = (context: DesignerContext): string => {
-  const sections: string[] = [];
-
-  if (context.paywalls.length > 0) {
-    const lines = context.paywalls.map(formatPaywallEntry).join("\n");
-    sections.push(`Paywalls in this project (slug, display name, code components):\n${lines}`);
-  }
-
-  if (context.openPaywall !== undefined) {
-    const { slug, name } = context.openPaywall;
-    const openLines = [
-      `The user currently has the "${name}" paywall (slug "${slug}") open in the designer. Unqualified references like "this paywall", "the current screen", or "here" mean this one — edit it with \`edit_document\`.`,
-    ];
-    if (context.selectedNodeIds.length > 0) {
-      const ids = context.selectedNodeIds.join(", ");
-      const plural = context.selectedNodeIds.length === 1 ? "node" : "nodes";
-      openLines.push(
-        `The user currently has ${plural} with id ${ids} selected in the open paywall — these are document node ids you can target directly in \`edit_document\` ops (no need to re-locate them).`,
-      );
-    }
-    sections.push(openLines.join("\n"));
-  } else {
-    sections.push(
-      "The user does not have a specific paywall open in the designer right now, so treat requests as project-wide unless they name a paywall.",
-    );
-  }
-
-  return sections.length > 0 ? `\n\nCurrent context:\n${sections.join("\n\n")}` : "";
-};
-
-let cachedPromptWithSkill: string | undefined;
-
-/**
- * Base designer prompt with the paywall-authoring domain reference appended.
- * Lazy + memoized because building the skill introspects the mimic schemas
- * (random-jittered encode), which workerd forbids in global scope.
- */
-const designerPromptWithSkill = (): string =>
-  (cachedPromptWithSkill ??= `${DESIGNER_SYSTEM_PROMPT}\n\n${paywallAuthoringSkill()}`);
-
-/**
- * System prompt for the designer surface: the base prompt, the paywall-authoring
- * skill, and — when `context` is supplied — the dynamic context block. Without a
- * context the static prompt is returned unchanged (used by callers that cannot
- * resolve request context).
- */
-export const designerSystemPrompt = (context?: DesignerContext): string =>
+export const designerAgentSystemPrompt = (context?: DesignerContext): string =>
   context === undefined
-    ? designerPromptWithSkill()
-    : `${designerPromptWithSkill()}${renderDesignerContext(context)}`;
+    ? DESIGNER_SYSTEM_PROMPT
+    : `${DESIGNER_SYSTEM_PROMPT}${renderDesignerContext(context)}`;
 
-/** System prompt for the Voidhash AI agent on a given studio surface. */
-export const systemPromptForSurface = (surface: Surface): string => {
-  switch (surface) {
-    case "designer":
-      return designerSystemPrompt();
-  }
-};
+export type { DesignerContext } from "./DesignerContext.ts";
diff --git a/apps/backend/src/ai/workspace-tools.ts b/apps/backend/src/ai/workspace-tools.ts
index 94cb6f31b..c59706fcb 100644
--- a/apps/backend/src/ai/workspace-tools.ts
+++ b/apps/backend/src/ai/workspace-tools.ts
@@ -86,10 +86,12 @@ export interface WorkspaceToolResult {
 
 /**
  * The scope a workspace tool operates over. `projectId` is authoritative — the
- * MCP frontend derives it from the API key.
+ * MCP frontend derives it from the API key. Internal durable sessions also
+ * supply their identity so newly opened change sets remain session-owned.
  */
 export interface WorkspaceToolScope {
   readonly projectId: string;
+  readonly agentSessionId?: string;
 }
 
 const okResult = (
@@ -267,7 +269,7 @@ export const beginPaywallEdit = (
     const result = yield* runFolded(
       Effect.gen(function* () {
         const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.begin(scope.projectId, input.slug);
+        return yield* changeSets.begin(scope.projectId, input.slug, scope.agentSessionId);
       }),
     );
     return result.ok
@@ -511,6 +513,7 @@ export const editPaywall = (
           projectId: scope.projectId,
           changeSetId: input.changeSetId,
           paywallSlug: input.slug,
+          agentSessionId: scope.agentSessionId,
         });
       }),
     );
@@ -665,6 +668,7 @@ export const writeComponent = (
           projectId: scope.projectId,
           changeSetId: input.changeSetId,
           paywallSlug: input.slug,
+          agentSessionId: scope.agentSessionId,
         });
       }),
     );
@@ -741,6 +745,7 @@ export const renameComponent = (
           projectId: scope.projectId,
           changeSetId: input.changeSetId,
           paywallSlug: input.slug,
+          agentSessionId: scope.agentSessionId,
         });
       }),
     );
@@ -782,6 +787,7 @@ export const deleteComponent = (
           projectId: scope.projectId,
           changeSetId: input.changeSetId,
           paywallSlug: input.slug,
+          agentSessionId: scope.agentSessionId,
         });
       }),
     );
@@ -905,6 +911,7 @@ export const getPaywallPreview = (
           projectId: scope.projectId,
           changeSetId: input.changeSetId,
           paywallSlug: input.slug,
+          agentSessionId: scope.agentSessionId,
         });
         const workspace = yield* PaywallWorkspaceService;
         const before = yield* workspace.readDocument(scope.projectId, input.slug);
@@ -933,6 +940,7 @@ export const getPaywallPreview = (
           projectId: scope.projectId,
           changeSetId: input.changeSetId,
           paywallSlug: input.slug,
+          agentSessionId: scope.agentSessionId,
           documentSignature: signature,
           documentVersion: before.version,
         });
@@ -979,6 +987,7 @@ export const finishPaywallEdit = (
           projectId: scope.projectId,
           changeSetId: input.changeSetId,
           paywallSlug: input.slug,
+          agentSessionId: scope.agentSessionId,
           reviewedDocumentSignature: input.reviewedDocumentSignature,
           currentDocumentSignature: documentSignature(document.root),
           currentDocumentVersion: document.version,
@@ -1002,7 +1011,13 @@ export const revertPaywallEdit = (
     const result = yield* runFolded(
       Effect.gen(function* () {
         const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.revert(scope.projectId, input.changeSetId);
+        return yield* scope.agentSessionId === undefined
+          ? changeSets.revert(scope.projectId, input.changeSetId)
+          : changeSets.revertForAgentSession(
+              scope.projectId,
+              input.changeSetId,
+              scope.agentSessionId,
+            );
       }),
     );
     return result.ok
diff --git a/apps/backend/src/mcp/protocol.test.ts b/apps/backend/src/mcp/protocol.test.ts
index b7f67f732..9079add24 100644
--- a/apps/backend/src/mcp/protocol.test.ts
+++ b/apps/backend/src/mcp/protocol.test.ts
@@ -154,11 +154,9 @@ describe("resources", () => {
     const listed = await run(msg("resources/list"));
     const resources = (listed as { result: { resources: Array<{ uri: string }> } }).result
       .resources;
-    expect(resources[0]?.uri).toBe("voidhash://paywall-authoring/reference");
+    expect(resources[0]?.uri).toBe("voidhash://skills/paywall-authoring");
 
-    const read = await run(
-      msg("resources/read", { uri: "voidhash://paywall-authoring/reference" }),
-    );
+    const read = await run(msg("resources/read", { uri: "voidhash://skills/paywall-authoring" }));
     const text = (read as { result: { contents: Array<{ text: string }> } }).result.contents[0]
       ?.text;
     expect(text).toContain("begin_paywall_edit");
diff --git a/apps/backend/src/mcp/protocol.ts b/apps/backend/src/mcp/protocol.ts
index 6bc31fa4c..9ccf0c6b4 100644
--- a/apps/backend/src/mcp/protocol.ts
+++ b/apps/backend/src/mcp/protocol.ts
@@ -20,7 +20,12 @@ import { Effect } from "effect";
 
 import { mcpToolDescriptors } from "./tool-manifest.ts";
 import * as WorkspaceTools from "../ai/workspace-tools.ts";
-import { paywallAuthoringSkill } from "../ai/skills/paywall-authoring.ts";
+import {
+  findSkill,
+  listSkills,
+  skillFromResourceUri,
+  skillResourceUri,
+} from "../ai/skills/registry.ts";
 
 /** Protocol versions we speak, newest first (used to pick the negotiated version). */
 export const SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26"] as const;
@@ -29,20 +34,9 @@ const LATEST_PROTOCOL_VERSION = SUPPORTED_PROTOCOL_VERSIONS[0];
 /** Server identity advertised in the `initialize` result. */
 const SERVER_INFO = { name: "voidhash-paywall-workspace", version: "1.0.0" } as const;
 const AUTHORING_RESOURCE_URI = "voidhash://paywall-authoring/reference";
-const AUTHORING_RESOURCE_NAME = "paywall-authoring-reference";
 const DESIGN_PROMPT_NAME = "design_paywall";
 
-const mcpAuthoringGuide = (): string => `# MCP paywall workflow
-
-1. Discover paywalls with \`list_paywalls\`, then call \`begin_paywall_edit\`.
-2. Read structure and components before writing. Pass the returned \`changeSetId\` to every mutation.
-3. Build dynamic behavior without code using document \`localVariables\`, conditional \`states\`, click \`interactions\`, and component \`actionBindings\`. Use \`edit_paywall\` for composition, \`duplicate_subtree\` for visual cloning, and component tools only when the document model cannot express the behavior.
-4. Render \`get_paywall_preview\`, inspect the image, correct any visual issues, and render again.
-5. Call \`finish_paywall_edit\` with the exact latest document signature and an empty issue list, or \`revert_paywall_edit\` to restore the baseline.
-
-Tool-name mapping in the schema-derived reference below: \`get_document\` means \`get_paywall\`; \`edit_document\` means \`edit_paywall\`. MCP mutations additionally require \`slug\` and \`changeSetId\`.
-
-${paywallAuthoringSkill()}`;
+const mcpAuthoringGuide = (): string => findSkill("paywall-authoring")?.body() ?? "";
 
 /** Standard JSON-RPC 2.0 error codes we emit. */
 export const JsonRpcErrorCode = {
@@ -145,16 +139,13 @@ const initializeResult = (params: Record<string, unknown> | undefined) => ({
 const toolsListResult = () => ({ tools: mcpToolDescriptors() });
 
 const resourcesListResult = () => ({
-  resources: [
-    {
-      uri: AUTHORING_RESOURCE_URI,
-      name: AUTHORING_RESOURCE_NAME,
-      title: "Voidhash paywall authoring reference",
-      description:
-        "Schema-derived document, style, no-code variable/state/action, component, and MCP workflow guidance.",
-      mimeType: "text/markdown",
-    },
-  ],
+  resources: listSkills().map((skill) => ({
+    uri: skillResourceUri(skill.name),
+    name: skill.name,
+    title: skill.name === "paywall-authoring" ? "Voidhash paywall authoring reference" : skill.name,
+    description: skill.description,
+    mimeType: "text/markdown",
+  })),
 });
 
 const promptsListResult = () => ({
@@ -237,18 +228,25 @@ export const handleMcpMessage = (
       return Effect.succeed(success(id, resourcesListResult()));
 
     case "resources/read": {
-      if (message.params?.uri !== AUTHORING_RESOURCE_URI) {
+      const requestedUri = message.params?.uri;
+      const skill =
+        requestedUri === AUTHORING_RESOURCE_URI
+          ? findSkill("paywall-authoring")
+          : typeof requestedUri === "string"
+            ? skillFromResourceUri(requestedUri)
+            : undefined;
+      if (skill === undefined || typeof requestedUri !== "string") {
         return Effect.succeed(
-          failure(id, JsonRpcErrorCode.InvalidParams, "Unknown paywall authoring resource URI"),
+          failure(id, JsonRpcErrorCode.InvalidParams, "Unknown skill resource URI"),
         );
       }
       return Effect.succeed(
         success(id, {
           contents: [
             {
-              uri: AUTHORING_RESOURCE_URI,
+              uri: requestedUri,
               mimeType: "text/markdown",
-              text: mcpAuthoringGuide(),
+              text: skill.body(),
             },
           ],
         }),
diff --git a/apps/backend/src/mcp/tool-manifest.ts b/apps/backend/src/mcp/tool-manifest.ts
index bf7116211..2ecf01bec 100644
--- a/apps/backend/src/mcp/tool-manifest.ts
+++ b/apps/backend/src/mcp/tool-manifest.ts
@@ -58,9 +58,9 @@ const EMPTY_INPUT_SCHEMA: JsonSchema = {
 };
 
 /**
- * MCP tool input schemas. These are MCP-specific but share the document-edit
- * vocabulary (`documentEditSchema`) with the browser designer tools in
- * `ai-shared`, so a batch validates against ONE definition on both surfaces.
+ * MCP tool input schemas. The internal Pi agent consumes this same manifest,
+ * and `documentEditSchema` remains the single validation vocabulary for every
+ * server-executed document batch.
  */
 const mcpToolSchemas = {
   begin_paywall_edit: z.object({
diff --git a/apps/backend/src/routes/ai/chat.ts b/apps/backend/src/routes/ai/chat.ts
deleted file mode 100644
index 80e965581..000000000
--- a/apps/backend/src/routes/ai/chat.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-/**
- * Voidhash AI streaming chat endpoint — `POST /api/ai/chat`.
- *
- * The studio surfaces (currently only the paywall designer) POST the running
- * UI-message history plus the surface + project scope. The handler authenticates
- * the WorkOS session, verifies the caller is a member of the target project
- * (anti-spoof: the project must appear in the session, never trusted from the
- * body alone), then streams the model's UI-message response straight back to the
- * client via {@link VoidhashAiService}. Tool calls are executed on the server
- * (the tools read and write the paywall workspace directly); the client only
- * renders the streamed results.
- *
- * - Unparseable / non-designer body → 400.
- * - Unauthenticated → 401.
- * - Caller not a member of `projectId` → 403.
- */
-import { type ChatRequestBody, chatRequestBodySchema } from "@voidhash/ai-shared";
-import { Db } from "@voidhash/db";
-import { AuthSession } from "@voidhash/core/domain/auth/Auth";
-import type { AuthTokenVerifier } from "@voidhash/core/services/auth/AuthTokenVerifier";
-import { LocalUserSessionService } from "@voidhash/core/services/auth/LocalUserSessionService";
-import { Workos } from "@voidhash/core/services/auth/Workos";
-import { Cause, Effect, Layer } from "effect";
-import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
-
-import { resolveWorkosSession } from "../../AuthSessionResolver.ts";
-import { VoidhashAiService } from "../../ai/VoidhashAiService.ts";
-
-/**
- * Decodes the parsed JSON body against the shared {@link chatRequestBodySchema}
- * wire contract (the same schema the studio transport builds its body to satisfy),
- * or returns null. Anti-spoof authz is enforced separately by the caller AFTER
- * decoding — this only validates shape.
- */
-const parseChatBody = (value: unknown): ChatRequestBody | null => {
-  const result = chatRequestBodySchema.safeParse(value);
-  return result.success ? result.data : null;
-};
-
-const handleChat = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
-  Effect.gen(function* () {
-    const ai = yield* VoidhashAiService;
-    const request = yield* HttpServerRequest.HttpServerRequest;
-
-    const rawBody = yield* request.text;
-    const parsed = yield* Effect.try({
-      catch: () => new Error("Invalid JSON body"),
-      try: () => JSON.parse(rawBody) as unknown,
-    }).pipe(Effect.catch(() => Effect.succeed(null)));
-
-    const body = parseChatBody(parsed);
-    if (!body) {
-      return yield* HttpServerResponse.json({ error: "Invalid request body" }, { status: 400 });
-    }
-
-    const sessionResult = yield* Effect.result(
-      resolveWorkosSession(request.headers, authTokenVerifier),
-    );
-    if (sessionResult._tag === "Failure") {
-      return yield* HttpServerResponse.json({ error: "Not authenticated" }, { status: 401 });
-    }
-    const session = sessionResult.success;
-
-    // Anti-spoof: the project must be one the authenticated user actually has
-    // access to (present in the session), never trusted from the body alone,
-    // and the claimed organization must be the project's owning organization.
-    const project = session.projects.find((p) => p.id === body.projectId);
-    if (!project || project.organizationId !== body.organizationId) {
-      return yield* HttpServerResponse.json({ error: "Access denied" }, { status: 403 });
-    }
-
-    // The server now executes the agent's tools over the workspace/chat services,
-    // which are AuthSession-bound (project-membership authz, chat ownership). The
-    // route resolved the session manually, so provide it as `AuthSession` for the
-    // duration of the streamed turn (the workspace/chat service layers are already
-    // in scope via the route's provideRequest).
-    const response = yield* ai
-      .chat({
-        messages: body.messages,
-        surface: body.surface,
-        projectId: body.projectId,
-        organizationId: body.organizationId,
-        paywallId: body.paywallId,
-        chatId: body.chatId,
-        selectedNodeIds: body.selectedNodeIds,
-      })
-      .pipe(Effect.provideService(AuthSession, session));
-    return HttpServerResponse.fromWeb(response);
-  });
-
-const registerAiChatRoute = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
-  Effect.gen(function* () {
-    const router = yield* HttpRouter.HttpRouter;
-    yield* router.add(
-      "POST",
-      "/api/ai/chat",
-      handleChat(authTokenVerifier).pipe(
-        Effect.catchCause((cause) =>
-          Effect.gen(function* () {
-            yield* Effect.logError(`AI chat error: ${Cause.pretty(cause)}`);
-            return yield* HttpServerResponse.json(
-              { error: "AI chat request failed" },
-              { status: 500 },
-            );
-          }),
-        ),
-      ),
-    );
-  });
-
-/**
- * Registers `POST /api/ai/chat`. The route resolves `VoidhashAiService`, `Db`,
- * `Workos` and `LocalUserSessionService` at request time (satisfied via
- * `HttpRouter.provideRequest` by the caller); token verification is injected as
- * a provider-neutral capability at build time, mirroring the RPC middlewares.
- */
-export const AiChatRouteLayer = (authTokenVerifier: AuthTokenVerifier["Service"]) =>
-  Layer.effectDiscard(registerAiChatRoute(authTokenVerifier));
diff --git a/apps/backend/src/routes/mcp.ts b/apps/backend/src/routes/mcp.ts
index aeacc61fe..f4e5af0e9 100644
--- a/apps/backend/src/routes/mcp.ts
+++ b/apps/backend/src/routes/mcp.ts
@@ -21,8 +21,11 @@
  *
  */
 import { ApiKeyService, LocalUserSessionService, Workos } from "@voidhash/core/services";
-import { AuthSession, type AnyAuthSession } from "@voidhash/core/domain/auth/Auth";
-import type { SecretKeySession } from "@voidhash/rpc";
+import {
+  AuthSession,
+  makeInternalProjectAuthSession,
+  type AnyAuthSession,
+} from "@voidhash/core/domain/auth/Auth";
 import { Cause, Effect, Layer, Result } from "effect";
 import { HttpRouter, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
 import * as HttpHeaders from "effect/unstable/http/Headers";
@@ -113,36 +116,6 @@ export const selectMcpProject = <Project extends { readonly id: string; readonly
   };
 };
 
-/**
- * Construct the {@link SecretKeySession} for a validated project — byte-for-byte
- * the shape the v1 `authenticateSecretKey` middleware builds — so the workspace
- * service's project-membership authz sees a genuine single-project secret-key
- * session.
- */
-const secretKeySessionForProject = (project: {
-  id: string;
-  name: string;
-  organizationId: string;
-  slug: string;
-}): SecretKeySession => ({
-  cookie: null,
-  method: "secret-key",
-  name: `${project.name} API Key`,
-  organizations: [],
-  person: null,
-  projects: [
-    {
-      id: project.id,
-      logo: null,
-      name: project.name,
-      organizationId: project.organizationId,
-      permissions: ["project:all"],
-      slug: project.slug,
-    },
-  ],
-  user: null,
-});
-
 /**
  * The dispatcher passed to {@link handleMcpMessage}: look up the tool by name,
  * run it against the authenticated `scope` — an unknown tool folds to an
@@ -240,7 +213,7 @@ const handlePost = Effect.gen(function* () {
     const validatedSecret = yield* Effect.result(apiKeys.validateSecretKey(token));
     if (Result.isSuccess(validatedSecret)) {
       const record = validatedSecret.success;
-      session = secretKeySessionForProject({
+      session = makeInternalProjectAuthSession({
         id: record.project.id,
         name: record.project.name,
         organizationId: record.project.organizationId,
@@ -351,7 +324,7 @@ const registerMcpRoute = Effect.gen(function* () {
  * Registers `POST /api/mcp` (+ 405 on GET/DELETE). The request-scoped
  * requirements — OAuth/API-key auth, workspace services, and `Db` — are
  * satisfied via `HttpRouter.provideRequest` by the caller
- * (`BackendApp`), mirroring the AI chat and webhook routes. `AuthSession` is
+ * (`BackendApp`), mirroring the agent-session and webhook routes. `AuthSession` is
  * provided in-handler from the validated project or user key.
  */
 export const McpRouteLayer = Layer.effectDiscard(registerMcpRoute);
diff --git a/apps/backend/src/rpcs/agent-session-rpcs.test.ts b/apps/backend/src/rpcs/agent-session-rpcs.test.ts
new file mode 100644
index 000000000..4a73c5ddb
--- /dev/null
+++ b/apps/backend/src/rpcs/agent-session-rpcs.test.ts
@@ -0,0 +1,112 @@
+import {
+  AgentAttachmentService,
+  AgentSessionIndexService,
+  PaywallEditChangeSetService,
+} from "@voidhash/core/services";
+import { AgentSessionRpcsDef, AuthMiddleware, AuthSession } from "@voidhash/rpc";
+import { Effect, Layer } from "effect";
+import { RpcTest } from "effect/unstable/rpc";
+import { describe, expect, it } from "vite-plus/test";
+
+import { AgentSessionRpcsLive } from "./agent-session-rpcs.ts";
+
+const summary = {
+  id: "agent_1",
+  organizationId: "org_1",
+  projectId: "project_1",
+  surface: "designer",
+  paywallId: "paywall_1",
+  userId: "user_1",
+  title: "Improve onboarding",
+  createdAt: new Date(0),
+  updatedAt: new Date(1),
+};
+
+const reverted: Array<{ changeSetId: string; sessionId: string }> = [];
+
+const handlers = Layer.mergeAll(
+  AgentSessionRpcsLive.pipe(
+    Layer.provide(
+      Layer.succeed(AgentSessionIndexService, {
+        list: () => Effect.succeed([summary]),
+        get: () => Effect.succeed(summary),
+        delete: () => Effect.void,
+      } as unknown as AgentSessionIndexService["Service"]),
+    ),
+    Layer.provide(
+      Layer.succeed(AgentAttachmentService, {
+        upload: ({ name, contentType }: { name: string; contentType: string }) =>
+          Effect.succeed({
+            url: "https://files.example.com/reference.png",
+            name,
+            contentType,
+            sizeBytes: 10,
+          }),
+      } as AgentAttachmentService["Service"]),
+    ),
+    Layer.provide(
+      Layer.succeed(PaywallEditChangeSetService, {
+        revertForAgentSession: (_projectId: string, changeSetId: string, sessionId: string) =>
+          Effect.sync(() => {
+            reverted.push({ changeSetId, sessionId });
+            return { version: 2, commandCount: 1, paywallSlug: "trial" };
+          }),
+      } as unknown as PaywallEditChangeSetService["Service"]),
+    ),
+  ),
+  Layer.succeed(
+    AuthMiddleware,
+    AuthMiddleware.of((effect) =>
+      Effect.provideService(effect, AuthSession, { method: "user" } as never),
+    ),
+  ),
+);
+
+describe("AgentSessionRpcs", () => {
+  it("lists indexed durable sessions", async () => {
+    const sessions = await Effect.runPromise(
+      Effect.gen(function* () {
+        const client = yield* RpcTest.makeClient(AgentSessionRpcsDef);
+        return yield* client.ListAgentSessions({
+          organizationId: "org_1",
+          projectId: "project_1",
+          surface: "designer",
+        });
+      }).pipe(Effect.provide(handlers), Effect.scoped),
+    );
+    expect(sessions).toEqual([summary]);
+  });
+
+  it("uploads a prompt attachment", async () => {
+    const attachment = await Effect.runPromise(
+      Effect.gen(function* () {
+        const client = yield* RpcTest.makeClient(AgentSessionRpcsDef);
+        return yield* client.UploadAgentAttachment({
+          sessionId: "agent_1",
+          organizationId: "org_1",
+          name: "reference.png",
+          contentType: "image/png",
+          dataBase64: "data:image/png;base64,AA==",
+        });
+      }).pipe(Effect.provide(handlers), Effect.scoped),
+    );
+    expect(attachment).toMatchObject({
+      name: "reference.png",
+      contentType: "image/png",
+    });
+  });
+
+  it("reverts a change set through its owning session scope", async () => {
+    reverted.length = 0;
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const client = yield* RpcTest.makeClient(AgentSessionRpcsDef);
+        yield* client.RevertAgentSessionChangeSet({
+          sessionId: "agent_1",
+          changeSetId: "change_1",
+        });
+      }).pipe(Effect.provide(handlers), Effect.scoped),
+    );
+    expect(reverted).toEqual([{ changeSetId: "change_1", sessionId: "agent_1" }]);
+  });
+});
diff --git a/apps/backend/src/rpcs/agent-session-rpcs.ts b/apps/backend/src/rpcs/agent-session-rpcs.ts
new file mode 100644
index 000000000..408d90f81
--- /dev/null
+++ b/apps/backend/src/rpcs/agent-session-rpcs.ts
@@ -0,0 +1,96 @@
+import {
+  AgentAttachmentService,
+  AgentSessionIndexService,
+  PaywallEditChangeSetService,
+} from "@voidhash/core/services";
+import {
+  AgentSessionRpcsDef,
+  RpcActionForbiddenError,
+  RpcAgentAttachmentValidationError,
+  RpcAgentSessionNotFoundError,
+  RpcAgentSessionServiceError,
+} from "@voidhash/rpc";
+import { Effect } from "effect";
+
+type RevertRpcError =
+  | RpcActionForbiddenError
+  | RpcAgentSessionNotFoundError
+  | RpcAgentSessionServiceError;
+
+const mapRevertError = (error: unknown): Effect.Effect<never, RevertRpcError> => {
+  const record =
+    typeof error === "object" && error !== null
+      ? (error as {
+          readonly _tag?: unknown;
+          readonly message?: unknown;
+          readonly sessionId?: unknown;
+        })
+      : undefined;
+  if (record?._tag === "AgentSessionForbiddenError" || record?._tag === "ActionForbiddenError") {
+    return Effect.fail(new RpcActionForbiddenError({ message: String(record.message) }));
+  }
+  if (record?._tag === "AgentSessionNotFoundError") {
+    return Effect.fail(new RpcAgentSessionNotFoundError({ sessionId: String(record.sessionId) }));
+  }
+  return Effect.fail(
+    new RpcAgentSessionServiceError({
+      message: record?.message === undefined ? "Could not revert changes." : String(record.message),
+    }),
+  );
+};
+
+/** RPC handlers for durable session history and prompt attachments. */
+export const AgentSessionRpcsLive = AgentSessionRpcsDef.toLayer(
+  Effect.gen(function* AgentSessionRpcsLive() {
+    const sessions = yield* AgentSessionIndexService;
+    const attachments = yield* AgentAttachmentService;
+    const changeSets = yield* PaywallEditChangeSetService;
+    const mapSessionErrors = {
+      AgentSessionForbiddenError: (error: { readonly message: string }) =>
+        Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+      AgentSessionIndexServiceError: (error: { readonly message: string }) =>
+        Effect.fail(new RpcAgentSessionServiceError({ message: error.message })),
+    } as const;
+    return {
+      ListAgentSessions: ({ organizationId, projectId, surface, paywallId }) =>
+        sessions
+          .list({ organizationId, projectId, surface, paywallId })
+          .pipe(Effect.catchTags(mapSessionErrors)),
+      GetAgentSession: ({ sessionId }) =>
+        sessions.get({ sessionId }).pipe(
+          Effect.catchTags({
+            ...mapSessionErrors,
+            AgentSessionNotFoundError: (error) =>
+              Effect.fail(new RpcAgentSessionNotFoundError({ sessionId: error.sessionId })),
+          }),
+        ),
+      DeleteAgentSession: ({ sessionId }) =>
+        sessions.delete({ sessionId }).pipe(
+          Effect.catchTags({
+            ...mapSessionErrors,
+            AgentSessionNotFoundError: (error) =>
+              Effect.fail(new RpcAgentSessionNotFoundError({ sessionId: error.sessionId })),
+          }),
+        ),
+      RevertAgentSessionChangeSet: ({ sessionId, changeSetId }) =>
+        sessions.get({ sessionId }).pipe(
+          Effect.flatMap((session) =>
+            changeSets.revertForAgentSession(session.projectId, changeSetId, session.id),
+          ),
+          Effect.catch(mapRevertError),
+          Effect.asVoid,
+        ),
+      UploadAgentAttachment: ({ sessionId, organizationId, name, contentType, dataBase64 }) =>
+        attachments.upload({ sessionId, organizationId, name, contentType, dataBase64 }).pipe(
+          Effect.catchTags({
+            AgentAttachmentForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            AgentAttachmentValidationError: (error) =>
+              Effect.fail(new RpcAgentAttachmentValidationError({ message: error.message })),
+            AgentAttachmentServiceError: (error) =>
+              Effect.fail(new RpcAgentSessionServiceError({ message: error.message })),
+          }),
+        ),
+    };
+  }),
+);
diff --git a/apps/backend/src/rpcs/ai-chat-rpcs.test.ts b/apps/backend/src/rpcs/ai-chat-rpcs.test.ts
deleted file mode 100644
index d424f507a..000000000
--- a/apps/backend/src/rpcs/ai-chat-rpcs.test.ts
+++ /dev/null
@@ -1,225 +0,0 @@
-/**
- * Unit tests for the AI-chat RPC handlers that touch paywall documents:
- * `CaptureAiCheckpoint`. They dispatch through `RpcTest.makeClient` against the
- * REAL {@link AiChatRpcsLive} handler graph fed by faked domain services
- * (AiChatService / PaywallService / PaywallWorkspaceService) plus a pass-through
- * `AuthMiddleware`, so the whole handler seam (chat resolution, paywall
- * cross-project scoping, live-tree read, first-write-wins capture reporting) runs
- * without an HTTP transport or a live document.
- */
-import {
-  AiChatForbiddenError,
-  AiChatNotFoundError,
-  AiChatService,
-  PaywallService,
-  PaywallWorkspaceService,
-} from "@voidhash/core/services";
-import { PaywallNotFoundError } from "@voidhash/core/domain/paywall/Paywall";
-import { ActionForbiddenError } from "@voidhash/core/domain/auth/Auth";
-import { AiChatRpcsDef, AuthMiddleware, AuthSession } from "@voidhash/rpc";
-import { Effect, Exit, Layer } from "effect";
-import { RpcTest } from "effect/unstable/rpc";
-import { describe, expect, it } from "vite-plus/test";
-
-import { AiChatRpcsLive } from "./ai-chat-rpcs.ts";
-
-// ── Fixtures ─────────────────────────────────────────────────────────────────
-
-const chatRow = (over: Partial<{ id: string; projectId: string; organizationId: string }> = {}) => ({
-  id: over.id ?? "chat_1",
-  organizationId: over.organizationId ?? "org_1",
-  projectId: over.projectId ?? "proj_1",
-  surface: "designer",
-  chatType: "persistent",
-  paywallId: "pw_1",
-  title: "Chat",
-  messages: "[]",
-  createdAt: new Date(),
-  updatedAt: new Date(),
-});
-
-const paywallRow = (over: Partial<{ id: string; projectId: string }> = {}) => ({
-  id: over.id ?? "pw_1",
-  slug: "trial",
-  projectId: over.projectId ?? "proj_1",
-  name: "Trial",
-  archivedAt: null,
-  createdAt: new Date(),
-  updatedAt: new Date(),
-  source: 1,
-  thumbnailUrl: null,
-  thumbnailSeq: null,
-  designFileMetadata: null,
-});
-
-interface CaptureCall {
-  readonly chatId: string;
-  readonly turnId: string;
-  readonly paywallId: string;
-  readonly tree: unknown;
-}
-
-interface Fakes {
-  /** Override `AiChatService.get`; default resolves `chatRow()`. */
-  readonly getChat?: () => Effect.Effect<ReturnType<typeof chatRow>, unknown>;
-  /** Override `PaywallService.getPaywallById`; default resolves `paywallRow()`. */
-  readonly getPaywall?: () => Effect.Effect<ReturnType<typeof paywallRow>, unknown>;
-  /** Whether the capture reports a fresh insert (`captured: true`) or a no-op. */
-  readonly captured?: boolean;
-  /** Raw document tree `readDocumentTree` returns. */
-  readonly tree?: unknown;
-  /** Collects each capture call so a test can assert what was captured. */
-  readonly captures?: CaptureCall[];
-}
-
-const buildHandlerLayer = (fakes: Fakes) => {
-  const chatLayer = Layer.succeed(AiChatService, {
-    get: fakes.getChat ?? (() => Effect.succeed(chatRow())),
-    captureCheckpointReporting: (input: CaptureCall) =>
-      Effect.sync(() => {
-        fakes.captures?.push(input);
-        return { captured: fakes.captured ?? true };
-      }),
-    // The revert handler is provided in the same group; stub the methods it uses
-    // so the layer is a complete AiChatService.
-    getLastTurnCheckpoints: () => Effect.succeed([]),
-  } as unknown as AiChatService["Service"]);
-
-  const paywallLayer = Layer.succeed(PaywallService, {
-    getPaywallById: fakes.getPaywall ?? (() => Effect.succeed(paywallRow())),
-  } as unknown as PaywallService["Service"]);
-
-  const workspaceLayer = Layer.succeed(PaywallWorkspaceService, {
-    readDocumentTree: () =>
-      Effect.succeed({ tree: fakes.tree ?? { kind: "tree" }, root: null, version: 3 }),
-    revertDocument: () => Effect.succeed({ version: 1, commandCount: 0 }),
-  } as unknown as PaywallWorkspaceService["Service"]);
-
-  const authMiddlewareLayer = Layer.succeed(
-    AuthMiddleware,
-    AuthMiddleware.of((effect) =>
-      Effect.provideService(effect, AuthSession, { method: "user", user: { id: "user_1" } } as never),
-    ),
-  );
-
-  return Layer.mergeAll(
-    AiChatRpcsLive.pipe(Layer.provide(Layer.mergeAll(chatLayer, paywallLayer, workspaceLayer))),
-    authMiddlewareLayer,
-  );
-};
-
-interface CaptureResult {
-  readonly captured: boolean;
-}
-
-interface AiChatClient {
-  CaptureAiCheckpoint: (payload: {
-    chatId: string;
-    turnId: string;
-    paywallId: string;
-  }) => Effect.Effect<CaptureResult, unknown>;
-}
-
-const dispatch = <A>(fakes: Fakes, f: (client: AiChatClient) => Effect.Effect<A, unknown>) =>
-  Effect.runPromiseExit(
-    Effect.gen(function* () {
-      const client = (yield* RpcTest.makeClient(AiChatRpcsDef)) as unknown as AiChatClient;
-      return yield* f(client);
-    }).pipe(Effect.provide(buildHandlerLayer(fakes)), Effect.scoped),
-  );
-
-// ── Tests ────────────────────────────────────────────────────────────────────
-
-describe("AiChatRpcs — CaptureAiCheckpoint", () => {
-  it("captures the current tree and reports captured: true", async () => {
-    const captures: CaptureCall[] = [];
-    const exit = await dispatch({ captures, tree: { kind: "tree", nodes: [] } }, (client) =>
-      client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
-    );
-    expect(Exit.isSuccess(exit)).toBe(true);
-    if (Exit.isSuccess(exit)) {
-      expect(exit.value.captured).toBe(true);
-    }
-    // The capture is keyed by (chat, turn, paywall) and carries the LIVE tree.
-    expect(captures).toEqual([
-      { chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1", tree: { kind: "tree", nodes: [] } },
-    ]);
-  });
-
-  it("reports captured: false on the first-write-wins no-op (checkpoint already exists)", async () => {
-    const exit = await dispatch({ captured: false }, (client) =>
-      client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
-    );
-    expect(Exit.isSuccess(exit)).toBe(true);
-    if (Exit.isSuccess(exit)) {
-      expect(exit.value.captured).toBe(false);
-    }
-  });
-
-  it("rejects a paywall from a DIFFERENT project than the chat (anti-cross-project)", async () => {
-    const captures: CaptureCall[] = [];
-    const exit = await dispatch(
-      {
-        captures,
-        getChat: () => Effect.succeed(chatRow({ projectId: "proj_1" })),
-        getPaywall: () => Effect.succeed(paywallRow({ projectId: "proj_2" })),
-      },
-      (client) =>
-        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
-    );
-    expect(Exit.isFailure(exit)).toBe(true);
-    if (Exit.isFailure(exit)) {
-      expect(JSON.stringify(exit.cause)).toContain("Rpc/ActionForbiddenError");
-    }
-    // No checkpoint may be taken when the paywall is out of the chat's project.
-    expect(captures).toEqual([]);
-  });
-
-  it("maps a missing chat to Rpc/AiChatNotFoundError", async () => {
-    const exit = await dispatch(
-      { getChat: () => Effect.fail(new AiChatNotFoundError({ chatId: "chat_1" })) },
-      (client) =>
-        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
-    );
-    expect(Exit.isFailure(exit)).toBe(true);
-    if (Exit.isFailure(exit)) {
-      expect(JSON.stringify(exit.cause)).toContain("Rpc/AiChatNotFoundError");
-    }
-  });
-
-  it("maps a chat-membership denial to Rpc/ActionForbiddenError", async () => {
-    const exit = await dispatch(
-      { getChat: () => Effect.fail(new AiChatForbiddenError({ message: "not a member" })) },
-      (client) =>
-        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
-    );
-    expect(Exit.isFailure(exit)).toBe(true);
-    if (Exit.isFailure(exit)) {
-      expect(JSON.stringify(exit.cause)).toContain("Rpc/ActionForbiddenError");
-    }
-  });
-
-  it("maps a missing paywall to Rpc/AiChatServiceError", async () => {
-    const exit = await dispatch(
-      { getPaywall: () => Effect.fail(new PaywallNotFoundError({ message: "gone" })) },
-      (client) =>
-        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
-    );
-    expect(Exit.isFailure(exit)).toBe(true);
-    if (Exit.isFailure(exit)) {
-      expect(JSON.stringify(exit.cause)).toContain("Rpc/AiChatServiceError");
-    }
-  });
-
-  it("maps a paywall permission denial to Rpc/ActionForbiddenError", async () => {
-    const exit = await dispatch(
-      { getPaywall: () => Effect.fail(new ActionForbiddenError({ message: "no access" })) },
-      (client) =>
-        client.CaptureAiCheckpoint({ chatId: "chat_1", turnId: "turn_1", paywallId: "pw_1" }),
-    );
-    expect(Exit.isFailure(exit)).toBe(true);
-    if (Exit.isFailure(exit)) {
-      expect(JSON.stringify(exit.cause)).toContain("Rpc/ActionForbiddenError");
-    }
-  });
-});
diff --git a/apps/backend/src/rpcs/ai-chat-rpcs.ts b/apps/backend/src/rpcs/ai-chat-rpcs.ts
deleted file mode 100644
index c0f2c1e33..000000000
--- a/apps/backend/src/rpcs/ai-chat-rpcs.ts
+++ /dev/null
@@ -1,187 +0,0 @@
-import {
-  AiChatService,
-  PaywallService,
-  PaywallWorkspaceService,
-  type AiChatType,
-} from "@voidhash/core/services";
-import {
-  AiChatRpcsDef,
-  RpcActionForbiddenError,
-  RpcAiChatAttachmentValidationError,
-  RpcAiChatNotFoundError,
-  RpcAiChatServiceError,
-} from "@voidhash/rpc";
-import { Effect } from "effect";
-
-export const AiChatRpcsLive = AiChatRpcsDef.toLayer(
-  Effect.gen(function* AiChatRpcsLive() {
-    const aiChatService = yield* AiChatService;
-    const workspace = yield* PaywallWorkspaceService;
-    const paywallService = yield* PaywallService;
-    return {
-      SaveAiChat: ({
-        id,
-        organizationId,
-        projectId,
-        surface,
-        chatType,
-        paywallId,
-        title,
-        messages,
-      }) =>
-        aiChatService
-          .save({
-            id,
-            organizationId,
-            projectId,
-            surface,
-            // Any non-"persistent" value is treated as single-use (stored, unlisted).
-            chatType: (chatType === "persistent"
-              ? "persistent"
-              : "single_use") satisfies AiChatType,
-            paywallId,
-            title,
-            messages,
-          })
-          .pipe(
-            Effect.catchTags({
-              AiChatForbiddenError: (error) =>
-                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-              AiChatServiceError: (error) =>
-                Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            }),
-          ),
-      ListAiChats: ({ organizationId, projectId, surface, paywallId }) =>
-        aiChatService.list({ organizationId, projectId, surface, paywallId }).pipe(
-          Effect.catchTags({
-            AiChatForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            AiChatServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-          }),
-        ),
-      GetAiChat: ({ chatId }) =>
-        aiChatService.get({ chatId }).pipe(
-          Effect.catchTags({
-            AiChatForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            AiChatNotFoundError: (error) =>
-              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
-            AiChatServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-          }),
-        ),
-      DeleteAiChat: ({ chatId }) =>
-        aiChatService.delete({ chatId }).pipe(
-          Effect.catchTags({
-            AiChatForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            AiChatNotFoundError: (error) =>
-              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
-            AiChatServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-          }),
-        ),
-      UploadAiChatAttachment: ({ chatId, organizationId, name, contentType, dataBase64 }) =>
-        aiChatService
-          .uploadAttachment({ chatId, organizationId, name, contentType, dataBase64 })
-          .pipe(
-            Effect.catchTags({
-              AiChatForbiddenError: (error) =>
-                Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-              AiChatAttachmentValidationError: (error) =>
-                Effect.fail(new RpcAiChatAttachmentValidationError({ message: error.message })),
-              AiChatServiceError: (error) =>
-                Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            }),
-          ),
-      /**
-       * Revert the chat's most recent AI turn: load that turn's captured
-       * pre-images (one per touched document) and reconcile each document back to
-       * its pre-turn tree through the workspace revert (submitted as a normal
-       * transaction, fanned out to any open designer over WS). Independent
-       * per-document transactions — no cross-document atomicity (§8 open q. 4).
-       */
-      RevertAiChatCheckpoint: ({ chatId }) =>
-        aiChatService.getLastTurnCheckpoints({ chatId }).pipe(
-          Effect.flatMap((preImages) =>
-            Effect.forEach(
-              preImages,
-              (preImage) => workspace.revertDocument(preImage.paywallId, preImage.tree),
-              { discard: true },
-            ).pipe(Effect.as({ revertedDocuments: preImages.length })),
-          ),
-          Effect.catchTags({
-            AiChatForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            AiChatNotFoundError: (error) =>
-              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
-            AiChatServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            ActionForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            PaywallNotFoundError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            PaywallServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.cause })),
-            PaywallWorkspaceServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            WorkspaceWriteRejectedError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            WorkspaceWriteConflictError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-          }),
-        ),
-      /**
-       * Capture the CURRENT document tree of `paywallId` as the pre-turn image for
-       * `(chatId, turnId)`. The document-first client calls this at the START of an
-       * AI turn that will mutate the paywall (before the first `edit_document` op),
-       * so a later {@link RevertAiChatCheckpoint} can restore the pre-turn state.
-       *
-       * Scoping (anti-cross-project): `get` asserts the caller is a member of the
-       * chat's project; `getPaywallById` asserts project permission on the
-       * paywall; and the paywall must belong to the SAME project as the chat (an
-       * org member cannot checkpoint a paywall from another of the org's projects
-       * into this chat). Then the live tree is read and captured first-write-wins —
-       * `captured: false` when a checkpoint already existed for the turn, so
-       * retries/reconnects are cheap idempotent no-ops.
-       */
-      CaptureAiCheckpoint: ({ chatId, turnId, paywallId }) =>
-        Effect.gen(function* () {
-          const chat = yield* aiChatService.get({ chatId });
-          const paywall = yield* paywallService.getPaywallById(paywallId);
-          if (paywall.projectId !== chat.projectId) {
-            return yield* Effect.fail(
-              new RpcActionForbiddenError({
-                message: `Paywall ${paywallId} does not belong to chat ${chatId}'s project.`,
-              }),
-            );
-          }
-          const document = yield* workspace.readDocumentTree(paywallId);
-          return yield* aiChatService.captureCheckpointReporting({
-            chatId,
-            turnId,
-            paywallId,
-            tree: document.tree,
-          });
-        }).pipe(
-          Effect.catchTags({
-            AiChatForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            AiChatNotFoundError: (error) =>
-              Effect.fail(new RpcAiChatNotFoundError({ chatId: error.chatId })),
-            AiChatServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            ActionForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            PaywallNotFoundError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-            PaywallServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.cause })),
-            PaywallWorkspaceServiceError: (error) =>
-              Effect.fail(new RpcAiChatServiceError({ message: error.message })),
-          }),
-        ),
-    };
-  }),
-);
diff --git a/apps/backend/src/testing/rpc-smoke-cases.ts b/apps/backend/src/testing/rpc-smoke-cases.ts
index 33637736b..3bf7e101a 100644
--- a/apps/backend/src/testing/rpc-smoke-cases.ts
+++ b/apps/backend/src/testing/rpc-smoke-cases.ts
@@ -778,13 +778,11 @@ export const rpcSmokeCases = [
 
 /** Existing RPC smoke coverage debt; entries may only be removed as cases are added. */
 const knownMissingRpcSmokeTags = new Set([
-  "SaveAiChat",
-  "ListAiChats",
-  "GetAiChat",
-  "DeleteAiChat",
-  "UploadAiChatAttachment",
-  "RevertAiChatCheckpoint",
-  "CaptureAiCheckpoint",
+  "ListAgentSessions",
+  "GetAgentSession",
+  "DeleteAgentSession",
+  "RevertAgentSessionChangeSet",
+  "UploadAgentAttachment",
   "ListExperiments",
   "GetExperiment",
   "CreateExperiment",
diff --git a/apps/www/package.json b/apps/www/package.json
index 9312ba662..8318c9092 100644
--- a/apps/www/package.json
+++ b/apps/www/package.json
@@ -36,16 +36,15 @@
     "@react-three/fiber": "^9.1.2",
     "@react-three/postprocessing": "^3.0.4",
     "@t3-oss/env-core": "^0.13.8",
-    "@tanstack/react-query": "catalog:",
     "@tanstack/query-core": "5.100.11",
+    "@tanstack/react-query": "catalog:",
     "@tanstack/react-query-devtools": "catalog:",
     "@tanstack/react-router": "catalog:",
     "@tanstack/react-router-ssr-query": "catalog:",
     "@tanstack/react-start": "catalog:",
     "@tanstack/react-table": "catalog:",
     "@tanstack/zod-adapter": "catalog:",
-    "@ai-sdk/react": "^4.0.0",
-    "@voidhash/ai-shared": "workspace:*",
+    "@voidhash/agent": "workspace:*",
     "@voidhash/api-contracts": "workspace:*",
     "@voidhash/core": "workspace:*",
     "@voidhash/lib": "workspace:*",
@@ -57,13 +56,12 @@
     "@voidhash/paywall-renderer-preact": "workspace:*",
     "@voidhash/paywall-renderer-web-core": "workspace:*",
     "@voidhash/paywall-workspace": "workspace:*",
+    "@voidhash/paywalls": "workspace:*",
     "@voidhash/rpc": "workspace:*",
     "@voidhash/ui": "workspace:*",
-    "@voidhash/paywalls": "workspace:*",
     "@workos-inc/node": "8.13.0",
     "@workos/authkit-session": "0.5.2",
     "@workos/authkit-tanstack-react-start": "0.8.2",
-    "ai": "^7.0.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cross-fetch": "catalog:",
diff --git a/apps/www/src/features/studio/ai/agent-ui.test.ts b/apps/www/src/features/studio/ai/agent-ui.test.ts
new file mode 100644
index 000000000..6d95f2eb1
--- /dev/null
+++ b/apps/www/src/features/studio/ai/agent-ui.test.ts
@@ -0,0 +1,286 @@
+import type { AgentServerMessage } from "@voidhash/agent/Protocol";
+import { describe, expect, it } from "vitest";
+
+import {
+  initialAgentUiState,
+  messagesFromAgentEntries,
+  reduceAgentServerMessage,
+} from "./agent-ui";
+
+const usage = {
+  input: 1,
+  output: 1,
+  cacheRead: 0,
+  cacheWrite: 0,
+  totalTokens: 2,
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+};
+
+describe("agent UI event fold", () => {
+  it("reconstructs user, assistant, and completed tool parts from session entries", () => {
+    const entries = [
+      {
+        type: "message",
+        id: "entry-1",
+        parentId: null,
+        timestamp: 1,
+        message: { role: "user", content: "Build a paywall", timestamp: 10 },
+      },
+      {
+        type: "message",
+        id: "entry-2",
+        parentId: "entry-1",
+        timestamp: 2,
+        message: {
+          role: "assistant",
+          content: [
+            { type: "text", text: "I’ll edit it." },
+            {
+              type: "toolCall",
+              id: "call-1",
+              name: "edit_paywall",
+              arguments: { slug: "onboarding" },
+            },
+          ],
+          api: "openai-completions",
+          provider: "cloudflare-workers-ai",
+          model: "model",
+          usage,
+          stopReason: "toolUse",
+          timestamp: 20,
+        },
+      },
+      {
+        type: "message",
+        id: "entry-3",
+        parentId: "entry-2",
+        timestamp: 3,
+        message: {
+          role: "toolResult",
+          toolCallId: "call-1",
+          toolName: "edit_paywall",
+          content: [{ type: "text", text: "Updated" }],
+          details: { changeSetId: "change-1" },
+          isError: false,
+          timestamp: 21,
+        },
+      },
+    ];
+
+    const messages = messagesFromAgentEntries(entries);
+    expect(messages).toHaveLength(2);
+    expect(messages[1]?.parts).toContainEqual(
+      expect.objectContaining({
+        type: "tool",
+        toolName: "edit_paywall",
+        state: "output-available",
+        output: "Updated",
+        details: { changeSetId: "change-1" },
+      }),
+    );
+  });
+
+  it("folds streamed text and tool execution lifecycle events", () => {
+    const assistant = {
+      role: "assistant" as const,
+      content: [
+        { type: "text" as const, text: "Working" },
+        {
+          type: "toolCall" as const,
+          id: "call-1",
+          name: "get_paywall",
+          arguments: { slug: "main" },
+        },
+      ],
+      api: "openai-completions",
+      provider: "cloudflare-workers-ai",
+      model: "model",
+      usage,
+      stopReason: "toolUse" as const,
+      timestamp: 30,
+    };
+    const frames = [
+      { v: 1, type: "event", event: { type: "agent_start" } },
+      {
+        v: 1,
+        type: "event",
+        event: {
+          type: "message_update",
+          message: assistant,
+          assistantMessageEvent: { type: "done", reason: "toolUse", message: assistant },
+        },
+      },
+      {
+        v: 1,
+        type: "event",
+        event: {
+          type: "tool_execution_start",
+          toolCallId: "call-1",
+          toolName: "get_paywall",
+          args: { slug: "main" },
+        },
+      },
+      {
+        v: 1,
+        type: "event",
+        event: {
+          type: "tool_execution_end",
+          toolCallId: "call-1",
+          toolName: "get_paywall",
+          result: { content: [{ type: "text", text: "Found" }] },
+          isError: false,
+        },
+      },
+      { v: 1, type: "event", event: { type: "agent_end", messages: [] } },
+    ] as unknown as AgentServerMessage[];
+
+    const state = frames.reduce(reduceAgentServerMessage, initialAgentUiState());
+    expect(state.status).toBe("ready");
+    expect(state.messages[0]?.parts).toEqual([
+      { type: "text", text: "Working" },
+      expect.objectContaining({
+        type: "tool",
+        state: "output-available",
+        output: "Found",
+      }),
+    ]);
+  });
+
+  it("preserves change-set details when a workspace tool reports an expected error", () => {
+    const assistant = {
+      role: "assistant" as const,
+      content: [
+        {
+          type: "toolCall" as const,
+          id: "call-1",
+          name: "edit_paywall",
+          arguments: { slug: "main" },
+        },
+      ],
+      api: "openai-completions",
+      provider: "cloudflare-workers-ai",
+      model: "model",
+      usage,
+      stopReason: "toolUse" as const,
+      timestamp: 30,
+    };
+    const frames = [
+      {
+        v: 1,
+        type: "event",
+        event: {
+          type: "message_update",
+          message: assistant,
+          assistantMessageEvent: { type: "done", reason: "toolUse", message: assistant },
+        },
+      },
+      {
+        v: 1,
+        type: "event",
+        event: {
+          type: "tool_execution_end",
+          toolCallId: "call-1",
+          toolName: "edit_paywall",
+          result: {
+            content: [{ type: "text", text: "The edit conflicted." }],
+            details: { changeSetId: "change-1" },
+          },
+          isError: true,
+        },
+      },
+    ] as unknown as AgentServerMessage[];
+
+    const state = frames.reduce(reduceAgentServerMessage, initialAgentUiState());
+    expect(state.messages[0]?.parts).toContainEqual(
+      expect.objectContaining({
+        type: "tool",
+        state: "output-error",
+        errorText: "The edit conflicted.",
+        details: { changeSetId: "change-1" },
+      }),
+    );
+  });
+
+  it("preserves image tool results for rendering", () => {
+    const entries = [
+      {
+        type: "message",
+        id: "entry-1",
+        parentId: null,
+        timestamp: 1,
+        message: {
+          role: "assistant",
+          content: [{ type: "toolCall", id: "call-1", name: "preview", arguments: {} }],
+          api: "openai-completions",
+          provider: "cloudflare-workers-ai",
+          model: "model",
+          usage,
+          stopReason: "toolUse",
+          timestamp: 20,
+        },
+      },
+      {
+        type: "message",
+        id: "entry-2",
+        parentId: "entry-1",
+        timestamp: 2,
+        message: {
+          role: "toolResult",
+          toolCallId: "call-1",
+          toolName: "preview",
+          content: [
+            { type: "text", text: "Rendered preview" },
+            { type: "image", data: "aW1hZ2U=", mimeType: "image/png" },
+          ],
+          isError: false,
+          timestamp: 21,
+        },
+      },
+    ];
+
+    const messages = messagesFromAgentEntries(entries);
+    expect(messages[0]?.parts).toContainEqual(
+      expect.objectContaining({
+        type: "tool",
+        state: "output-available",
+        output: [
+          { type: "text", text: "Rendered preview" },
+          { type: "image", data: "aW1hZ2U=", mimeType: "image/png" },
+        ],
+      }),
+    );
+  });
+
+  it("surfaces model failures and output truncation", () => {
+    const makeAssistant = (stopReason: "error" | "length", errorMessage?: string) => ({
+      type: "message",
+      id: stopReason,
+      parentId: null,
+      timestamp: 1,
+      message: {
+        role: "assistant",
+        content: [{ type: "text", text: "Partial" }],
+        api: "openai-completions",
+        provider: "cloudflare-workers-ai",
+        model: "model",
+        usage,
+        stopReason,
+        errorMessage,
+        timestamp: stopReason === "error" ? 20 : 21,
+      },
+    });
+
+    const messages = messagesFromAgentEntries([
+      makeAssistant("error", "Provider unavailable"),
+      makeAssistant("length"),
+    ]);
+    expect(messages[0]?.parts).toContainEqual({
+      type: "notice",
+      tone: "error",
+      text: "Provider unavailable",
+    });
+    expect(messages[1]?.parts).toContainEqual(
+      expect.objectContaining({ type: "notice", tone: "warning" }),
+    );
+  });
+});
diff --git a/apps/www/src/features/studio/ai/agent-ui.ts b/apps/www/src/features/studio/ai/agent-ui.ts
new file mode 100644
index 000000000..ae6ff8808
--- /dev/null
+++ b/apps/www/src/features/studio/ai/agent-ui.ts
@@ -0,0 +1,379 @@
+import type { AgentEvent, AgentMessage } from "@voidhash/agent";
+import type { AgentServerMessage } from "@voidhash/agent/Protocol";
+import type { SessionLogEntry } from "@voidhash/agent/SessionLog";
+
+export interface AgentUiTextPart {
+  readonly type: "text";
+  readonly text: string;
+}
+
+export interface AgentUiReasoningPart {
+  readonly type: "reasoning";
+  readonly text: string;
+}
+
+export interface AgentUiFilePart {
+  readonly type: "file";
+  readonly data?: string;
+  readonly filename?: string;
+  readonly mediaType: string;
+  readonly url: string;
+}
+
+export interface AgentUiNoticePart {
+  readonly type: "notice";
+  readonly tone: "error" | "warning";
+  readonly text: string;
+}
+
+export type AgentUiToolState =
+  | "input-streaming"
+  | "input-available"
+  | "running"
+  | "output-available"
+  | "output-error";
+
+export interface AgentUiToolPart {
+  readonly type: "tool";
+  readonly toolCallId: string;
+  readonly toolName: string;
+  readonly state: AgentUiToolState;
+  readonly input: unknown;
+  readonly output?: unknown;
+  readonly details?: unknown;
+  readonly errorText?: string;
+}
+
+export type AgentUiPart =
+  | AgentUiTextPart
+  | AgentUiReasoningPart
+  | AgentUiFilePart
+  | AgentUiNoticePart
+  | AgentUiToolPart;
+
+export interface AgentUiMessage {
+  readonly id: string;
+  readonly role: "user" | "assistant";
+  readonly timestamp: number;
+  readonly parts: ReadonlyArray<AgentUiPart>;
+}
+
+export type AgentUiStatus = "connecting" | "ready" | "submitted" | "streaming" | "error";
+
+export interface AgentUiState {
+  readonly messages: ReadonlyArray<AgentUiMessage>;
+  readonly status: AgentUiStatus;
+  readonly error?: Error;
+}
+
+/** Initial local state for a newly mounted durable agent session. */
+export const initialAgentUiState = (): AgentUiState => ({
+  messages: [],
+  status: "connecting",
+});
+
+const dataUrl = (mimeType: string, data: string): string =>
+  data.startsWith("data:") ? data : `data:${mimeType};base64,${data}`;
+
+const messageId = (message: { readonly role: string; readonly timestamp: number }): string =>
+  `${message.role}-${message.timestamp}`;
+
+const formatUnknown = (value: unknown): string => {
+  if (typeof value === "string") return value;
+  try {
+    return JSON.stringify(value) ?? String(value);
+  } catch {
+    return String(value);
+  }
+};
+
+const toolResultOutput = (value: unknown): unknown => {
+  if (typeof value !== "object" || value === null || !("content" in value)) return value;
+  const content = value.content;
+  if (!Array.isArray(content)) return value;
+  if (
+    content.some(
+      (item) =>
+        typeof item === "object" && item !== null && "type" in item && item.type === "image",
+    )
+  ) {
+    return content;
+  }
+  const text = content
+    .filter(
+      (item): item is { readonly type: "text"; readonly text: string } =>
+        typeof item === "object" &&
+        item !== null &&
+        item.type === "text" &&
+        typeof item.text === "string",
+    )
+    .map((item) => item.text)
+    .join("\n");
+  return text.length > 0 ? text : content;
+};
+
+const messageToUi = (message: AgentMessage): AgentUiMessage | undefined => {
+  if (message.role === "user") {
+    const content = Array.isArray(message.content)
+      ? message.content
+      : [{ type: "text" as const, text: message.content }];
+    return {
+      id: messageId(message),
+      role: "user",
+      timestamp: message.timestamp,
+      parts: content.map(
+        (part): AgentUiPart =>
+          part.type === "image"
+            ? {
+                type: "file",
+                data: part.data,
+                filename: "attachment",
+                mediaType: part.mimeType,
+                url: dataUrl(part.mimeType, part.data),
+              }
+            : { type: "text", text: part.text },
+      ),
+    };
+  }
+  if (message.role !== "assistant") return undefined;
+  const notice: AgentUiNoticePart | undefined =
+    message.stopReason === "error"
+      ? {
+          type: "notice",
+          tone: "error",
+          text: message.errorMessage ?? "The model failed before completing this response.",
+        }
+      : message.stopReason === "length"
+        ? {
+            type: "notice",
+            tone: "warning",
+            text: "The response was truncated because the model reached its output limit.",
+          }
+        : message.stopReason === "aborted"
+          ? { type: "notice", tone: "warning", text: "The response was stopped." }
+          : undefined;
+  return {
+    id: messageId(message),
+    role: "assistant",
+    timestamp: message.timestamp,
+    parts: [
+      ...message.content.map((part): AgentUiPart => {
+        if (part.type === "text") return { type: "text", text: part.text };
+        if (part.type === "thinking") return { type: "reasoning", text: part.thinking };
+        return {
+          type: "tool",
+          toolCallId: part.id,
+          toolName: part.name,
+          state: "input-available",
+          input: part.arguments,
+        };
+      }),
+      ...(notice === undefined ? [] : [notice]),
+    ],
+  };
+};
+
+const mergeMessage = (
+  existing: AgentUiMessage | undefined,
+  next: AgentUiMessage,
+): AgentUiMessage => {
+  if (existing === undefined || next.role !== "assistant") return next;
+  return {
+    ...next,
+    parts: next.parts.map((part) => {
+      if (part.type !== "tool") return part;
+      const prior = existing.parts.find(
+        (candidate): candidate is AgentUiToolPart =>
+          candidate.type === "tool" && candidate.toolCallId === part.toolCallId,
+      );
+      return prior === undefined
+        ? part
+        : {
+            ...part,
+            state: prior.state,
+            ...(prior.output === undefined ? {} : { output: prior.output }),
+            ...(prior.details === undefined ? {} : { details: prior.details }),
+            ...(prior.errorText === undefined ? {} : { errorText: prior.errorText }),
+          };
+    }),
+  };
+};
+
+const upsertMessage = (
+  messages: ReadonlyArray<AgentUiMessage>,
+  message: AgentUiMessage,
+): ReadonlyArray<AgentUiMessage> => {
+  const index = messages.findIndex((candidate) => candidate.id === message.id);
+  if (index < 0) return [...messages, message];
+  const copy = [...messages];
+  copy[index] = mergeMessage(copy[index], message);
+  return copy;
+};
+
+const updateTool = (
+  messages: ReadonlyArray<AgentUiMessage>,
+  toolCallId: string,
+  update: (part: AgentUiToolPart) => AgentUiToolPart,
+): ReadonlyArray<AgentUiMessage> => {
+  for (let messageIndex = messages.length - 1; messageIndex >= 0; messageIndex -= 1) {
+    const message = messages[messageIndex];
+    if (message?.role !== "assistant") continue;
+    const partIndex = message.parts.findIndex(
+      (part) => part.type === "tool" && part.toolCallId === toolCallId,
+    );
+    if (partIndex < 0) continue;
+    const part = message.parts[partIndex];
+    if (part?.type !== "tool") return messages;
+    const parts = [...message.parts];
+    parts[partIndex] = update(part);
+    const copy = [...messages];
+    copy[messageIndex] = { ...message, parts };
+    return copy;
+  }
+  return messages;
+};
+
+const applyToolResult = (
+  messages: ReadonlyArray<AgentUiMessage>,
+  result: {
+    readonly toolCallId: string;
+    readonly isError: boolean;
+    readonly content: unknown;
+    readonly details?: unknown;
+  },
+): ReadonlyArray<AgentUiMessage> =>
+  updateTool(messages, result.toolCallId, (part) => {
+    const output = toolResultOutput({ content: result.content });
+    return result.isError
+      ? {
+          ...part,
+          state: "output-error",
+          ...(result.details === undefined ? {} : { details: result.details }),
+          errorText: formatUnknown(output),
+        }
+      : {
+          ...part,
+          state: "output-available",
+          output,
+          ...(result.details === undefined ? {} : { details: result.details }),
+        };
+  });
+
+const reduceAgentEvent = (state: AgentUiState, event: AgentEvent): AgentUiState => {
+  switch (event.type) {
+    case "agent_start":
+    case "turn_start":
+      return { ...state, status: "streaming", error: undefined };
+    case "agent_end":
+      return { ...state, status: "ready" };
+    case "message_start":
+    case "message_update":
+    case "message_end": {
+      if (event.message.role === "toolResult") {
+        return { ...state, messages: applyToolResult(state.messages, event.message) };
+      }
+      const message = messageToUi(event.message);
+      return message === undefined
+        ? state
+        : { ...state, messages: upsertMessage(state.messages, message) };
+    }
+    case "tool_execution_start":
+      return {
+        ...state,
+        messages: updateTool(state.messages, event.toolCallId, (part) => ({
+          ...part,
+          input: event.args,
+          state: "running",
+        })),
+      };
+    case "tool_execution_update":
+      return {
+        ...state,
+        messages: updateTool(state.messages, event.toolCallId, (part) => ({
+          ...part,
+          output: toolResultOutput(event.partialResult),
+          state: "running",
+        })),
+      };
+    case "tool_execution_end":
+      return {
+        ...state,
+        messages: updateTool(state.messages, event.toolCallId, (part) => {
+          const output = toolResultOutput(event.result);
+          const details =
+            typeof event.result === "object" && event.result !== null && "details" in event.result
+              ? event.result.details
+              : undefined;
+          return event.isError
+            ? {
+                ...part,
+                state: "output-error",
+                ...(details === undefined ? {} : { details }),
+                errorText: formatUnknown(output),
+              }
+            : {
+                ...part,
+                state: "output-available",
+                output,
+                ...(details === undefined ? {} : { details }),
+              };
+        }),
+      };
+    case "turn_end": {
+      const message = messageToUi(event.message);
+      let messages =
+        message === undefined ? state.messages : upsertMessage(state.messages, message);
+      for (const result of event.toolResults) messages = applyToolResult(messages, result);
+      return { ...state, messages };
+    }
+  }
+};
+
+/** Reconstructs renderable chat messages from persisted Pi session entries. */
+export const messagesFromAgentEntries = (
+  entries: ReadonlyArray<unknown>,
+): ReadonlyArray<AgentUiMessage> => {
+  let messages: ReadonlyArray<AgentUiMessage> = [];
+  for (const value of entries) {
+    if (
+      typeof value !== "object" ||
+      value === null ||
+      !("type" in value) ||
+      value.type !== "message" ||
+      !("message" in value)
+    ) {
+      continue;
+    }
+    const entry = value as SessionLogEntry;
+    if (entry.type !== "message") continue;
+    if (entry.message.role === "toolResult") {
+      messages = applyToolResult(messages, entry.message);
+      continue;
+    }
+    const message = messageToUi(entry.message);
+    if (message !== undefined) messages = upsertMessage(messages, message);
+  }
+  return messages;
+};
+
+/** Folds one typed server frame into the transport-neutral chat view model. */
+export const reduceAgentServerMessage = (
+  state: AgentUiState,
+  message: AgentServerMessage,
+): AgentUiState => {
+  switch (message.type) {
+    case "event":
+      return reduceAgentEvent(state, message.event);
+    case "entries": {
+      let messages = messagesFromAgentEntries(message.entries);
+      for (const current of state.messages) messages = upsertMessage(messages, current);
+      return { ...state, messages };
+    }
+    case "state":
+      return { ...state, status: message.state.isStreaming ? "streaming" : "ready" };
+    case "error":
+      return { ...state, error: new Error(message.message), status: "error" };
+    case "ack":
+      return state;
+  }
+};
diff --git a/apps/www/src/features/studio/ai/attachments.ts b/apps/www/src/features/studio/ai/attachments.ts
index 2c3163521..9ebf7740a 100644
--- a/apps/www/src/features/studio/ai/attachments.ts
+++ b/apps/www/src/features/studio/ai/attachments.ts
@@ -1,12 +1,7 @@
-import type { FileUIPart } from "ai";
+import type { AgentUiFilePart } from "./agent-ui";
 
 /** Image types the server accepts (kept in sync with the server-side allow-list). */
-export const ACCEPTED_IMAGE_TYPES = [
-  "image/png",
-  "image/jpeg",
-  "image/webp",
-  "image/gif",
-] as const;
+export const ACCEPTED_IMAGE_TYPES = ["image/png", "image/jpeg", "image/webp", "image/gif"] as const;
 
 /** Text/code files are read client-side and inlined into the prompt; these extensions are offered. */
 const TEXT_ACCEPT = [
@@ -41,6 +36,8 @@ export interface PendingAttachment {
   status: "uploading" | "ready" | "error";
   /** Image: uploaded public URL (once ready). */
   url?: string;
+  /** Image: raw base64 payload sent to Pi for vision turns. */
+  data?: string;
   /** Image: local object URL for preview while uploading. */
   previewUrl?: string;
   /** Text: file contents inlined into the prompt (once read). */
@@ -91,27 +88,28 @@ export function formatBytes(bytes: number): string {
 
 /**
  * Builds the outgoing message payload from composer text plus ready
- * attachments: images become AI SDK `file` parts (pointing at their uploaded
- * URLs) and text/code files are inlined into the prompt as labelled fenced
- * blocks so the model sees their contents.
+ * attachments: images become durable agent image parts and text/code files are
+ * inlined into the prompt as labelled fenced blocks so the model sees their
+ * contents.
  */
 export function composeMessage(
   text: string,
   attachments: ReadonlyArray<PendingAttachment>,
-): { text: string; files: FileUIPart[] } {
-  const files: FileUIPart[] = [];
+): { text: string; files: AgentUiFilePart[] } {
+  const files: AgentUiFilePart[] = [];
   const inlined: string[] = [];
 
   for (const attachment of attachments) {
     if (attachment.status !== "ready") {
       continue;
     }
-    if (attachment.kind === "image" && attachment.url) {
+    if (attachment.kind === "image" && attachment.url && attachment.data) {
       files.push({
         type: "file",
         url: attachment.url,
         mediaType: attachment.contentType,
         filename: attachment.name,
+        data: attachment.data,
       });
     } else if (attachment.kind === "text" && attachment.text !== undefined) {
       inlined.push(`\`\`\`${attachment.name}\n${attachment.text}\n\`\`\``);
diff --git a/apps/www/src/features/studio/ai/components/chat-history-menu.tsx b/apps/www/src/features/studio/ai/components/chat-history-menu.tsx
index eed2ac438..34918052a 100644
--- a/apps/www/src/features/studio/ai/components/chat-history-menu.tsx
+++ b/apps/www/src/features/studio/ai/components/chat-history-menu.tsx
@@ -1,5 +1,4 @@
 import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
-import type { UIMessage } from "ai";
 import {
   Button,
   cn,
@@ -15,9 +14,8 @@ import { useState } from "react";
 import { toast } from "sonner";
 
 import {
-  deleteAiChatOptions,
-  getAiChatOptions,
-  listAiChatsOptions,
+  deleteAgentSessionOptions,
+  listAgentSessionsOptions,
   queryKeys,
 } from "@/features/studio/lib/tanstack-query";
 
@@ -29,8 +27,8 @@ interface ChatHistoryMenuProps {
   currentChatId: string;
   /** Start a fresh chat. */
   onNewChat: () => void;
-  /** Reopen a stored chat with its decoded messages. */
-  onSelectChat: (chatId: string, messages: UIMessage[]) => void;
+  /** Reopen a stored session; its transcript is loaded over the WebSocket. */
+  onSelectChat: (chatId: string) => void;
 }
 
 /** Short relative time (e.g. "just now", "3h ago", "2d ago"). */
@@ -54,7 +52,7 @@ function relativeTime(date: Date): string {
 /**
  * Panel-header controls for a persistent chat surface: a "new chat" button and a
  * "history" dropdown listing this surface/paywall's stored chats (newest first).
- * Selecting a row fetches its full messages and reopens it; the trash button
+ * Selecting a row reopens its WebSocket-backed transcript; the trash button
  * deletes it. The history dropdown only renders for a `persistent` surface.
  */
 export function ChatHistoryMenu({
@@ -65,41 +63,31 @@ export function ChatHistoryMenu({
 }: ChatHistoryMenuProps) {
   const queryClient = useQueryClient();
   const [open, setOpen] = useState(false);
-  const [loadingChatId, setLoadingChatId] = useState<string | null>(null);
 
   const { organizationId, projectId, paywallId } = agent.context;
   const surface = agent.surfaceId;
-  const isPersistent = agent.persistence?.chatType === "persistent";
+  const isPersistent = agent.persistence?.mode === "persistent";
   const hasScope = Boolean(organizationId && projectId);
   const scope = { organizationId, projectId, surface, paywallId };
 
   const chatsQuery = useQuery({
-    ...listAiChatsOptions(scope),
+    ...listAgentSessionsOptions(scope),
     enabled: open && isPersistent && hasScope,
   });
 
-  const deleteChat = useMutation(deleteAiChatOptions());
+  const deleteChat = useMutation(deleteAgentSessionOptions());
 
-  const handleSelect = async (chatId: string) => {
-    setLoadingChatId(chatId);
-    try {
-      const chat = await queryClient.fetchQuery(getAiChatOptions(chatId));
-      const parsed = JSON.parse(chat.messages) as UIMessage[];
-      onSelectChat(chatId, parsed);
-      setOpen(false);
-    } catch {
-      toast.error("Could not open that chat.");
-    } finally {
-      setLoadingChatId(null);
-    }
+  const handleSelect = (chatId: string) => {
+    onSelectChat(chatId);
+    setOpen(false);
   };
 
   const handleDelete = (chatId: string) => {
     deleteChat.mutate(
-      { chatId },
+      { sessionId: chatId },
       {
         onSuccess: () => {
-          void queryClient.invalidateQueries({ queryKey: queryKeys.aiChat.list(scope) });
+          void queryClient.invalidateQueries({ queryKey: queryKeys.agentSession.list(scope) });
           if (chatId === currentChatId) {
             onNewChat();
           }
@@ -113,7 +101,13 @@ export function ChatHistoryMenu({
 
   return (
     <div className="flex items-center gap-1">
-      <Button aria-label="New chat" onClick={onNewChat} size="icon-sm" title="New chat" variant="ghost">
+      <Button
+        aria-label="New chat"
+        onClick={onNewChat}
+        size="icon-sm"
+        title="New chat"
+        variant="ghost"
+      >
         <PlusIcon className="size-4" />
       </Button>
 
@@ -147,13 +141,12 @@ export function ChatHistoryMenu({
                   >
                     <button
                       className="flex min-w-0 flex-1 flex-col items-start text-left"
-                      disabled={loadingChatId !== null}
-                      onClick={() => void handleSelect(chat.id)}
+                      onClick={() => handleSelect(chat.id)}
                       type="button"
                     >
                       <span className="w-full truncate text-sm">{chat.title}</span>
                       <span className="text-xs text-muted-foreground">
-                        {loadingChatId === chat.id ? "Opening…" : relativeTime(chat.updatedAt)}
+                        {relativeTime(chat.updatedAt)}
                       </span>
                     </button>
                     <Button
diff --git a/apps/www/src/features/studio/ai/components/chat-shell.tsx b/apps/www/src/features/studio/ai/components/chat-shell.tsx
index 775a55fc0..92c2302e1 100644
--- a/apps/www/src/features/studio/ai/components/chat-shell.tsx
+++ b/apps/www/src/features/studio/ai/components/chat-shell.tsx
@@ -1,6 +1,4 @@
 import { useMutation } from "@tanstack/react-query";
-import type { UIMessage } from "ai";
-import { isToolUIPart } from "ai";
 import {
   Attachment,
   AttachmentContent,
@@ -9,6 +7,7 @@ import {
   AttachmentTitle,
   Bubble,
   BubbleContent,
+  Button,
   cn,
   Message,
   MessageContent,
@@ -19,12 +18,16 @@ import {
   MessageScrollerProvider,
   MessageScrollerViewport,
 } from "@voidhash/ui";
+import { RotateCcw } from "lucide-react";
 import type { ReactNode } from "react";
 import { useCallback, useEffect, useState } from "react";
 import { toast } from "sonner";
 import { Streamdown } from "streamdown";
 
-import { uploadAiChatAttachmentOptions } from "@/features/studio/lib/tanstack-query";
+import {
+  revertAgentSessionChangeSetOptions,
+  uploadAgentAttachmentOptions,
+} from "@/features/studio/lib/tanstack-query";
 
 import {
   composeMessage,
@@ -37,7 +40,8 @@ import {
   readAsText,
 } from "../attachments";
 import type { SurfaceAgent } from "../contract";
-import { useSurfaceChat } from "../use-surface-chat";
+import type { AgentUiMessage, AgentUiToolPart } from "../agent-ui";
+import { useAgentSession } from "../use-agent-session";
 import { PromptInput } from "./prompt-input";
 import { ToolCallView } from "./tool-call";
 
@@ -45,22 +49,16 @@ interface ChatShellProps {
   agent: SurfaceAgent;
   /** Identity of the chat being shown; hosts remount (keyed by this) to switch chats. */
   chatId: string;
-  /** Seed messages when reopening a stored chat. */
-  initialMessages?: UIMessage[];
   /** Rendered in the message area when there are no messages yet. */
   emptyState?: ReactNode;
-  /** Called right before each user message is sent (e.g. to open a checkpoint window). */
-  onBeforeSend?: () => void;
   /** Reports whether the assistant is submitting or streaming. */
   onBusyChange?: (isBusy: boolean) => void;
   className?: string;
 }
 
 /** Whether a message has any visible text content (used to gate the "thinking" marker). */
-function hasRenderedText(message: UIMessage): boolean {
-  return message.parts.some(
-    (part) => part.type === "text" && part.text.trim().length > 0,
-  );
+function hasRenderedText(message: AgentUiMessage): boolean {
+  return message.parts.some((part) => part.type === "text" && part.text.trim().length > 0);
 }
 
 /** Render a sent image `file` part as a vertical image-variant attachment card. */
@@ -79,7 +77,31 @@ function ImageAttachment({ url, name }: { url: string; name: string }) {
 }
 
 /** Render the parts of one assistant message: text via Streamdown, tool calls via ToolCallView. */
-function AssistantMessage({ message }: { message: UIMessage }) {
+const toolChangeSetId = (part: AgentUiToolPart): string | undefined => {
+  if (
+    (part.state !== "output-available" && part.state !== "output-error") ||
+    typeof part.details !== "object" ||
+    part.details === null ||
+    !("changeSetId" in part.details)
+  ) {
+    return undefined;
+  }
+  return typeof part.details.changeSetId === "string" ? part.details.changeSetId : undefined;
+};
+
+function AssistantMessage({
+  message,
+  onRevert,
+  revertAnchors,
+  reverting,
+  reverted,
+}: {
+  message: AgentUiMessage;
+  onRevert: (changeSetId: string) => void;
+  revertAnchors: ReadonlyMap<string, string>;
+  reverting: boolean;
+  reverted: ReadonlySet<string>;
+}) {
   return (
     <Message align="start">
       <MessageContent>
@@ -87,22 +109,49 @@ function AssistantMessage({ message }: { message: UIMessage }) {
           const key = `${message.id}-${index}`;
           if (part.type === "text") {
             return (
-              <Streamdown
-                key={key}
-                className="prose prose-sm dark:prose-invert max-w-none min-w-0"
-              >
+              <Streamdown key={key} className="prose prose-sm dark:prose-invert max-w-none min-w-0">
                 {part.text}
               </Streamdown>
             );
           }
-          if (part.type === "dynamic-tool" || isToolUIPart(part)) {
-            return <ToolCallView key={key} part={part} />;
+          if (part.type === "tool") {
+            const changeSetId = toolChangeSetId(part);
+            const isRevertAnchor =
+              changeSetId !== undefined && revertAnchors.get(changeSetId) === key;
+            return (
+              <div key={key} className="flex flex-wrap items-center gap-2">
+                <ToolCallView part={part} />
+                {changeSetId === undefined || !isRevertAnchor ? null : (
+                  <Button
+                    disabled={reverting || reverted.has(changeSetId)}
+                    onClick={() => onRevert(changeSetId)}
+                    size="sm"
+                    variant="outline"
+                  >
+                    <RotateCcw className="size-3.5" />
+                    {reverted.has(changeSetId) ? "Reverted" : "Revert changes"}
+                  </Button>
+                )}
+              </div>
+            );
           }
           if (part.type === "reasoning" && part.text.trim().length > 0) {
+            return (
+              <div key={key} className="text-xs text-muted-foreground italic wrap-break-word">
+                {part.text}
+              </div>
+            );
+          }
+          if (part.type === "notice") {
             return (
               <div
                 key={key}
-                className="text-xs text-muted-foreground italic wrap-break-word"
+                className={cn(
+                  "rounded-md border px-3 py-2 text-xs wrap-break-word",
+                  part.tone === "error"
+                    ? "border-destructive/40 bg-destructive/10 text-destructive"
+                    : "border-amber-500/40 bg-amber-500/10 text-amber-700 dark:text-amber-300",
+                )}
               >
                 {part.text}
               </div>
@@ -116,7 +165,7 @@ function AssistantMessage({ message }: { message: UIMessage }) {
 }
 
 /** Render one user message as an end-aligned bubble with its text and image attachments. */
-function UserMessage({ message }: { message: UIMessage }) {
+function UserMessage({ message }: { message: AgentUiMessage }) {
   const text = message.parts
     .filter((part) => part.type === "text")
     .map((part) => (part.type === "text" ? part.text : ""))
@@ -159,22 +208,32 @@ function UserMessage({ message }: { message: UIMessage }) {
  * and text/code files are read and inlined at send time. Contains no fixed
  * positioning — the host decides where the shell lives.
  */
-export function ChatShell({
-  agent,
-  chatId,
-  initialMessages,
-  emptyState,
-  onBeforeSend,
-  onBusyChange,
-  className,
-}: ChatShellProps) {
-  const { messages, sendMessage, status, stop } = useSurfaceChat(agent, {
-    chatId,
-    initialMessages,
+export function ChatShell({ agent, chatId, emptyState, onBusyChange, className }: ChatShellProps) {
+  const { messages, sendMessage, status, stop, error } = useAgentSession(agent, {
+    sessionId: chatId,
   });
 
-  const uploadAttachment = useMutation(uploadAiChatAttachmentOptions());
+  const uploadAttachment = useMutation(uploadAgentAttachmentOptions());
+  const revertChangeSet = useMutation(revertAgentSessionChangeSetOptions());
   const [attachments, setAttachments] = useState<PendingAttachment[]>([]);
+  const [revertedChangeSets, setRevertedChangeSets] = useState<ReadonlySet<string>>(
+    () => new Set(),
+  );
+
+  const handleRevert = useCallback(
+    (changeSetId: string) => {
+      void revertChangeSet
+        .mutateAsync({ sessionId: chatId, changeSetId })
+        .then(() => {
+          setRevertedChangeSets((current) => new Set(current).add(changeSetId));
+          toast.success("Agent changes reverted.");
+        })
+        .catch((cause: unknown) => {
+          toast.error(cause instanceof Error ? cause.message : "Could not revert agent changes.");
+        });
+    },
+    [chatId, revertChangeSet],
+  );
 
   const patch = useCallback((id: string, next: Partial<PendingAttachment>) => {
     setAttachments((prev) =>
@@ -208,14 +267,15 @@ export function ChatShell({
           void (async () => {
             try {
               const dataBase64 = await readAsDataUrl(file);
+              const data = dataBase64.slice(dataBase64.indexOf(",") + 1);
               const result = await uploadAttachment.mutateAsync({
-                chatId,
+                sessionId: chatId,
                 organizationId: agent.context.organizationId,
                 name: file.name,
                 contentType: file.type,
                 dataBase64,
               });
-              patch(id, { status: "ready", url: result.url });
+              patch(id, { status: "ready", url: result.url, data });
             } catch (error) {
               patch(id, {
                 status: "error",
@@ -288,14 +348,12 @@ export function ChatShell({
     if (text.length === 0 && files.length === 0) {
       return;
     }
-    onBeforeSend?.();
     if (text.length === 0) {
       void sendMessage({ files });
     } else {
       void sendMessage({ text, files });
     }
-    // Clear the queue (previews are freed on removal/unmount; the sent images
-    // now render from their uploaded URLs in the message list).
+    // Clear the queue; the session event carries its own embedded image data.
     for (const attachment of attachments) {
       if (attachment.previewUrl) {
         URL.revokeObjectURL(attachment.previewUrl);
@@ -318,10 +376,18 @@ export function ChatShell({
 
   const lastMessage = messages[messages.length - 1];
   const showThinking =
-    isBusy &&
-    (!lastMessage ||
-      lastMessage.role !== "assistant" ||
-      !hasRenderedText(lastMessage));
+    isBusy && (!lastMessage || lastMessage.role !== "assistant" || !hasRenderedText(lastMessage));
+  const revertAnchors = new Map<string, string>();
+  for (const message of messages) {
+    if (message.role !== "assistant") continue;
+    message.parts.forEach((part, index) => {
+      if (part.type !== "tool") return;
+      const changeSetId = toolChangeSetId(part);
+      if (changeSetId !== undefined) {
+        revertAnchors.set(changeSetId, `${message.id}-${index}`);
+      }
+    });
+  }
 
   return (
     <div className={cn("flex size-full min-h-0 flex-col", className)}>
@@ -340,15 +406,27 @@ export function ChatShell({
                   {message.role === "user" ? (
                     <UserMessage message={message} />
                   ) : (
-                    <AssistantMessage message={message} />
+                    <AssistantMessage
+                      message={message}
+                      onRevert={handleRevert}
+                      revertAnchors={revertAnchors}
+                      reverted={revertedChangeSets}
+                      reverting={isBusy || revertChangeSet.isPending}
+                    />
                   )}
                 </MessageScrollerItem>
               ))}
 
               {showThinking ? (
                 <MessageScrollerItem messageId="thinking" scrollAnchor>
-                  <div className="shimmer w-fit text-sm text-muted-foreground">
-                    Thinking…
+                  <div className="shimmer w-fit text-sm text-muted-foreground">Thinking…</div>
+                </MessageScrollerItem>
+              ) : null}
+
+              {error ? (
+                <MessageScrollerItem messageId="agent-error" scrollAnchor>
+                  <div className="rounded-md border border-destructive/40 bg-destructive/5 px-3 py-2 text-sm text-destructive">
+                    {error.message}
                   </div>
                 </MessageScrollerItem>
               ) : null}
diff --git a/apps/www/src/features/studio/ai/components/prompt-input.tsx b/apps/www/src/features/studio/ai/components/prompt-input.tsx
index 374ed92cb..7eb687c8a 100644
--- a/apps/www/src/features/studio/ai/components/prompt-input.tsx
+++ b/apps/www/src/features/studio/ai/components/prompt-input.tsx
@@ -18,7 +18,7 @@ import { useRef, useState } from "react";
 import { ATTACHMENT_ACCEPT, formatBytes, type PendingAttachment } from "../attachments";
 
 interface PromptInputProps {
-  /** Whether the assistant is currently generating (disables send, shows stop). */
+  /** Whether the assistant is currently generating (shows stop; sends become steering). */
   isStreaming: boolean;
   /** Submit the trimmed prompt text (attachments are composed in by the host). */
   onSubmit: (text: string) => void;
@@ -39,7 +39,8 @@ const attachmentState = (status: PendingAttachment["status"]) =>
 /**
  * Bottom composer for the chat shell: queued-attachment chips, an autosizing-ish
  * textarea, an attach button, and a send button. Enter submits; Shift+Enter
- * inserts a newline. While streaming the send button becomes a stop button.
+ * inserts a newline. While streaming, stop and send remain available so a new
+ * message can steer the active Pi run.
  * Send is disabled until every attachment has finished uploading, and requires
  * either some text or at least one ready attachment.
  */
@@ -58,7 +59,7 @@ export function PromptInput({
   const trimmed = value.trim();
   const isUploading = attachments.some((attachment) => attachment.status === "uploading");
   const hasReadyAttachment = attachments.some((attachment) => attachment.status === "ready");
-  const canSend = !isStreaming && !isUploading && (trimmed.length > 0 || hasReadyAttachment);
+  const canSend = !isUploading && (trimmed.length > 0 || hasReadyAttachment);
 
   const submit = () => {
     if (!canSend) {
@@ -76,10 +77,7 @@ export function PromptInput({
 
   return (
     <form
-      className={cn(
-        "flex flex-col gap-2 rounded-xl border border-border bg-card p-2",
-        className,
-      )}
+      className={cn("flex flex-col gap-2 rounded-xl border border-border bg-card p-2", className)}
       onSubmit={(event) => {
         event.preventDefault();
         submit();
@@ -170,17 +168,16 @@ export function PromptInput({
           >
             <Square className="size-3.5" />
           </Button>
-        ) : (
-          <Button
-            aria-label="Send"
-            className="ml-auto"
-            disabled={!canSend}
-            size="icon-sm"
-            type="submit"
-          >
-            <ArrowUp className="size-4" />
-          </Button>
-        )}
+        ) : null}
+        <Button
+          aria-label={isStreaming ? "Steer" : "Send"}
+          className={isStreaming ? undefined : "ml-auto"}
+          disabled={!canSend}
+          size="icon-sm"
+          type="submit"
+        >
+          <ArrowUp className="size-4" />
+        </Button>
       </div>
     </form>
   );
diff --git a/apps/www/src/features/studio/ai/components/tool-call.tsx b/apps/www/src/features/studio/ai/components/tool-call.tsx
index 10d961540..428e359b5 100644
--- a/apps/www/src/features/studio/ai/components/tool-call.tsx
+++ b/apps/www/src/features/studio/ai/components/tool-call.tsx
@@ -1,20 +1,7 @@
-import type { DynamicToolUIPart, ToolUIPart } from "ai";
-import {
-  Collapsible,
-  CollapsibleContent,
-  CollapsibleTrigger,
-  cn,
-  Spinner,
-} from "@voidhash/ui";
+import { Collapsible, CollapsibleContent, CollapsibleTrigger, cn, Spinner } from "@voidhash/ui";
 import { AlertCircle, ChevronRight, CheckCircle2, Wrench } from "lucide-react";
 
-/** Any tool invocation part — statically-typed or the dynamic (server-declared) shape. */
-type AnyToolPart = ToolUIPart | DynamicToolUIPart;
-
-/** Human-facing tool name for both dynamic and static tool parts. */
-function toolNameOf(part: AnyToolPart): string {
-  return part.type === "dynamic-tool" ? part.toolName : part.type.slice("tool-".length);
-}
+import type { AgentUiToolPart } from "../agent-ui";
 
 /** Stringify tool input/output for display; strings pass through, objects pretty-print. */
 function formatValue(value: unknown): string {
@@ -31,8 +18,40 @@ function formatValue(value: unknown): string {
   }
 }
 
+interface ToolOutputImage {
+  readonly type: "image";
+  readonly data: string;
+  readonly mimeType: string;
+}
+
+const isToolOutputImage = (value: unknown): value is ToolOutputImage =>
+  typeof value === "object" &&
+  value !== null &&
+  "type" in value &&
+  value.type === "image" &&
+  "data" in value &&
+  typeof value.data === "string" &&
+  "mimeType" in value &&
+  typeof value.mimeType === "string";
+
+const toolOutputText = (value: unknown): string => {
+  if (!Array.isArray(value) || !value.some(isToolOutputImage)) return formatValue(value);
+  return value
+    .filter(
+      (item): item is { readonly type: "text"; readonly text: string } =>
+        typeof item === "object" &&
+        item !== null &&
+        "type" in item &&
+        item.type === "text" &&
+        "text" in item &&
+        typeof item.text === "string",
+    )
+    .map((item) => item.text)
+    .join("\n");
+};
+
 /** Status icon for the tool's current lifecycle state. */
-function StatusIcon({ state }: { state: AnyToolPart["state"] }) {
+function StatusIcon({ state }: { state: AgentUiToolPart["state"] }) {
   if (state === "output-error") {
     return <AlertCircle className="size-3.5 text-destructive" />;
   }
@@ -48,14 +67,15 @@ function StatusIcon({ state }: { state: AnyToolPart["state"] }) {
  * tool name and a status icon; expanding reveals the pretty-printed input and,
  * when available, the tool output (or the error text). Closed by default.
  */
-export function ToolCallView({ part }: { part: AnyToolPart }) {
-  const name = toolNameOf(part);
+export function ToolCallView({ part }: { part: AgentUiToolPart }) {
+  const name = part.toolName;
   const input = formatValue(part.input);
+  const images = Array.isArray(part.output) ? part.output.filter(isToolOutputImage) : [];
   const output =
     part.state === "output-error"
       ? part.errorText
       : part.state === "output-available"
-        ? formatValue(part.output)
+        ? toolOutputText(part.output)
         : "";
 
   return (
@@ -95,6 +115,23 @@ export function ToolCallView({ part }: { part: AnyToolPart }) {
               </pre>
             </div>
           )}
+          {images.length > 0 ? (
+            <div className="grid max-w-xl grid-cols-2 gap-2">
+              {images.map((item, index) => (
+                // eslint-disable-next-line @next/next/no-img-element
+                <img
+                  key={`${part.toolCallId}-image-${index}`}
+                  alt={`${name} output ${index + 1}`}
+                  className="max-h-72 w-full rounded border border-border object-contain"
+                  src={
+                    item.data.startsWith("data:")
+                      ? item.data
+                      : `data:${item.mimeType};base64,${item.data}`
+                  }
+                />
+              ))}
+            </div>
+          ) : null}
         </div>
       </CollapsibleContent>
     </Collapsible>
diff --git a/apps/www/src/features/studio/ai/contract.ts b/apps/www/src/features/studio/ai/contract.ts
index 80fa18b6e..9d74632ff 100644
--- a/apps/www/src/features/studio/ai/contract.ts
+++ b/apps/www/src/features/studio/ai/contract.ts
@@ -1,89 +1,22 @@
-import type { PreviewScreenshotToolOutput, Surface } from "@voidhash/ai-shared";
+/** Whether a session is listed in the history UI, or stored-but-hidden. */
+export type AgentSessionPersistence = "persistent" | "single_use";
 
-/** Whether a chat is listed in the history UI, or stored-but-hidden. */
-export type AiChatType = "persistent" | "single_use";
-
-/**
- * One client-executed tool call handed to a {@link SurfaceAgent.executeTool}
- * seam. `input` is the model's raw argument object (the executor validates it
- * against the shared tool schema); `toolName` selects the tool. `chatId` +
- * `turnId` (the id of the current user turn — the last user message) identify the
- * chat turn the designer's first mutating tool threads to the server for
- * checkpoint capture.
- */
-export interface SurfaceToolCall {
-  toolName: string;
-  toolCallId: string;
-  input: unknown;
-  chatId: string;
-  turnId?: string;
-}
-
-/**
- * The result an executor folds every tool call into: model-facing text or the
- * structured screenshot payload, plus whether it represents an error. Executors
- * NEVER throw into the AI SDK: a failure is folded into
- * `{ output, isError: true }` so the model sees a readable message and can recover.
- */
-export interface SurfaceToolResult {
-  output: string | PreviewScreenshotToolOutput;
-  isError: boolean;
-}
+/** Agent surfaces currently supported by the studio session host. */
+export type AgentSurface = "designer";
 
 /** Coarse chat activity exposed to a host surface for ambient progress UI. */
 export type SurfaceAgentActivity = { kind: "thinking"; label: string } | { kind: "idle" };
 
-/**
- * How a surface's chats are persisted. `persistent` chats appear in the history
- * dropdown and can be reopened; `single_use` chats are still stored (for
- * audit/debug) but never listed. Omit to make a surface's chats ephemeral —
- * they are still saved as `single_use`.
- */
+/** Controls whether a surface exposes durable sessions in its history menu. */
 export interface SurfaceChatPersistence {
-  chatType: AiChatType;
+  mode: AgentSessionPersistence;
 }
 
-/**
- * Everything a chat surface contributes to the shared chat core: which surface
- * it is, the request context sent with every message, how its chats persist, and
- * (for surfaces with client tools) how to execute a tool call.
- *
- * The designer surface's tools are CLIENT-EXECUTED: the backend declares them
- * schema-only, so the model calling a tool ends the SSE stream; the browser runs
- * {@link SurfaceAgent.executeTool} against the live local document and the chat
- * auto-continues (AI SDK v5 client-tool round-trip). A surface with no client
- * tools omits `executeTool` and remains a pure chat UI.
- */
+/** Scope and live context contributed by a studio surface to a durable agent session. */
 export interface SurfaceAgent {
-  surfaceId: Surface;
-  /** Extra request context sent with each chat request. */
-  context: { organizationId: string; projectId: string; paywallId?: string };
-  /**
-   * Executes one client-side tool call and resolves a model-facing result. The
-   * chat core wires this to the AI SDK's `onToolCall` → `addToolResult` and
-   * auto-continues the conversation. Executors MUST NOT throw — a failure is
-   * folded into `{ output, isError: true }`. Omit for a surface with no client
-   * tools (server-only tools or none).
-   */
-  executeTool?: (call: SurfaceToolCall) => Promise<SurfaceToolResult>;
-  /**
-   * Extra request context resolved fresh at SEND time (merged into the body per
-   * turn, overriding {@link SurfaceAgent.context}). Use for live UI state that
-   * must reflect the moment the user hit send — e.g. the designer's current
-   * selection — rather than the values at hook-mount time. Omit if the surface
-   * has none.
-   */
-  getDynamicContext?: () => Record<string, unknown>;
-  /**
-   * Awaited immediately before each send's POST (inside the transport's
-   * `prepareSendMessagesRequest`). Use to flush live UI state the server must see
-   * with THIS turn — e.g. the designer draining its code-editor flush queue so the
-   * agent reads the user's latest code. Rejections are swallowed (a failed flush
-   * must not block the message). Omit if the surface has none.
-   */
-  beforeSend?: () => Promise<void> | void;
-  /** Receives coarse turn activity so the host can visualize agent progress outside chat. */
-  onActivityChange?: (activity: SurfaceAgentActivity) => void;
-  /** Persistence policy for this surface's chats. Defaults to `single_use`. */
-  persistence?: SurfaceChatPersistence;
+  readonly surfaceId: AgentSurface;
+  readonly context: { organizationId: string; projectId: string; paywallId?: string };
+  readonly getDynamicContext?: () => Record<string, unknown>;
+  readonly onActivityChange?: (activity: SurfaceAgentActivity) => void;
+  readonly persistence?: SurfaceChatPersistence;
 }
diff --git a/apps/www/src/features/studio/ai/index.ts b/apps/www/src/features/studio/ai/index.ts
index 8cffc87fb..e4e4b15fe 100644
--- a/apps/www/src/features/studio/ai/index.ts
+++ b/apps/www/src/features/studio/ai/index.ts
@@ -1,16 +1,21 @@
 export type {
-  AiChatType,
+  AgentSurface,
+  AgentSessionPersistence,
   SurfaceAgent,
   SurfaceChatPersistence,
-  SurfaceToolCall,
-  SurfaceToolResult,
 } from "./contract";
+export type {
+  AgentUiFilePart,
+  AgentUiMessage,
+  AgentUiNoticePart,
+  AgentUiPart,
+  AgentUiToolPart,
+} from "./agent-ui";
 export { ChatShell } from "./components/chat-shell";
 export { ChatHistoryMenu } from "./components/chat-history-menu";
 export {
-  newChatId,
-  useSurfaceChat,
-  type SurfaceChat,
-  type SurfaceChatSession,
-} from "./use-surface-chat";
-export { createVoidhashAiTransport } from "./transport";
+  newAgentSessionId,
+  useAgentSession,
+  type AgentSessionChat,
+  type AgentSessionIdentity,
+} from "./use-agent-session";
diff --git a/apps/www/src/features/studio/ai/transport.test.ts b/apps/www/src/features/studio/ai/transport.test.ts
deleted file mode 100644
index a1da3732f..000000000
--- a/apps/www/src/features/studio/ai/transport.test.ts
+++ /dev/null
@@ -1,181 +0,0 @@
-import { chatRequestBodySchema } from "@voidhash/ai-shared";
-import { describe, expect, it, vi } from "vite-plus/test";
-
-import type { SurfaceAgent } from "./contract";
-import { buildSendMessagesBody, createVoidhashAiTransport } from "./transport";
-
-const agent: SurfaceAgent = {
-  surfaceId: "designer",
-  context: { organizationId: "org_1", projectId: "proj_1", paywallId: "pw_1" },
-  persistence: { chatType: "persistent" },
-};
-
-/**
- * The server now executes the agent's tools and persists the chat
- * authoritatively, so the request body must carry the `chatId` (the client-minted
- * persistence key) alongside the surface + context. `body` is protected on the
- * AI SDK transport; the test reads it structurally.
- */
-describe("createVoidhashAiTransport", () => {
-  it("sends surface, chatId, and the request context on the body", () => {
-    const transport = createVoidhashAiTransport(agent, "ai_chat_abc");
-    const body = (transport as unknown as { body: Record<string, unknown> }).body;
-    expect(body).toMatchObject({
-      surface: "designer",
-      chatId: "ai_chat_abc",
-      organizationId: "org_1",
-      projectId: "proj_1",
-      paywallId: "pw_1",
-    });
-  });
-
-  it("scopes the chatId per session (distinct chat ids yield distinct bodies)", () => {
-    const a = createVoidhashAiTransport(agent, "chat_a");
-    const b = createVoidhashAiTransport(agent, "chat_b");
-    const bodyA = (a as unknown as { body: Record<string, unknown> }).body;
-    const bodyB = (b as unknown as { body: Record<string, unknown> }).body;
-    expect(bodyA.chatId).toBe("chat_a");
-    expect(bodyB.chatId).toBe("chat_b");
-  });
-});
-
-/**
- * Cross-package wire-contract test: the body the client transport builds for a
- * send must satisfy the shared `chatRequestBodySchema` the backend route decodes
- * with. This pins the regression where a custom `prepareSendMessagesRequest`
- * dropped the SDK's `messages` from the body (the SDK sends the returned body
- * verbatim), so the server rejected the POST with 400. Building the body via the
- * SAME `buildSendMessagesBody` the transport uses keeps the two sides from
- * drifting.
- */
-describe("chat request body ↔ server schema contract", () => {
-  const staticBody = {
-    surface: agent.surfaceId,
-    chatId: "ai_chat_abc",
-    ...agent.context,
-  };
-  const sdkFields = {
-    id: "ai_chat_abc",
-    messages: [{ id: "msg_1", role: "user", parts: [{ type: "text", text: "hi" }] }],
-    trigger: "submit-message" as const,
-    messageId: undefined,
-  };
-
-  it("carries messages and the surface/scope fields (the SDK does NOT re-inject them)", () => {
-    const body = buildSendMessagesBody(staticBody, sdkFields, {});
-    expect(Array.isArray(body.messages)).toBe(true);
-    expect(body.surface).toBe("designer");
-    expect(body.chatId).toBe("ai_chat_abc");
-    expect(body.paywallId).toBe("pw_1");
-  });
-
-  it("is accepted by the shared server schema for a designer send with selection", () => {
-    const body = buildSendMessagesBody(staticBody, sdkFields, {
-      selectedNodeIds: ["node_a", "node_b"],
-    });
-    const result = chatRequestBodySchema.safeParse(body);
-    expect(result.success).toBe(true);
-    if (result.success) {
-      expect(result.data.messages).toHaveLength(1);
-      expect(result.data.selectedNodeIds).toEqual(["node_a", "node_b"]);
-    }
-  });
-
-  it("is accepted with no dynamic context (selectedNodeIds omitted)", () => {
-    const body = buildSendMessagesBody(staticBody, sdkFields, {});
-    expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
-  });
-
-  it("is REJECTED when messages is dropped (the pre-fix bug that caused the 400)", () => {
-    const { messages: _dropped, ...withoutMessages } = buildSendMessagesBody(
-      staticBody,
-      sdkFields,
-      {},
-    );
-    expect(chatRequestBodySchema.safeParse(withoutMessages).success).toBe(false);
-  });
-
-  it("matches the full transport → send pipeline for a dynamic-context surface", async () => {
-    const dynamicAgent: SurfaceAgent = { ...agent, getDynamicContext: () => ({ selectedNodeIds: ["n1"] }) };
-    const transport = createVoidhashAiTransport(dynamicAgent, "ai_chat_abc");
-    const prepare = (
-      transport as unknown as {
-        prepareSendMessagesRequest: (opts: {
-          id: string;
-          messages: unknown;
-          trigger: "submit-message" | "regenerate-message";
-          messageId: string | undefined;
-        }) => Promise<{ body: Record<string, unknown> }>;
-      }
-    ).prepareSendMessagesRequest;
-    // `prepareSendMessagesRequest` is async now (it awaits the surface's `beforeSend`
-    // barrier before the POST), so the pipeline body is resolved.
-    const { body } = await prepare(sdkFields);
-    const result = chatRequestBodySchema.safeParse(body);
-    expect(result.success).toBe(true);
-    if (result.success) {
-      expect(result.data.selectedNodeIds).toEqual(["n1"]);
-      expect(result.data.messages).toHaveLength(1);
-    }
-  });
-
-  it("awaits `beforeSend` before building the body (flush barrier)", async () => {
-    const calls: string[] = [];
-    const barrierAgent: SurfaceAgent = {
-      ...agent,
-      beforeSend: async () => {
-        calls.push("beforeSend");
-      },
-    };
-    const transport = createVoidhashAiTransport(barrierAgent, "ai_chat_abc");
-    const prepare = (
-      transport as unknown as {
-        prepareSendMessagesRequest: (opts: typeof sdkFields) => Promise<{ body: Record<string, unknown> }>;
-      }
-    ).prepareSendMessagesRequest;
-    const { body } = await prepare(sdkFields);
-    expect(calls).toEqual(["beforeSend"]);
-    expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
-  });
-
-  it("sends the message even when `beforeSend` rejects (flush must not block)", async () => {
-    const failingAgent: SurfaceAgent = {
-      ...agent,
-      beforeSend: () => Promise.reject(new Error("flush failed")),
-    };
-    const transport = createVoidhashAiTransport(failingAgent, "ai_chat_abc");
-    const prepare = (
-      transport as unknown as {
-        prepareSendMessagesRequest: (opts: typeof sdkFields) => Promise<{ body: Record<string, unknown> }>;
-      }
-    ).prepareSendMessagesRequest;
-    const { body } = await prepare(sdkFields);
-    expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
-  });
-
-  it("sends the message even when `beforeSend` HANGS (flush barrier times out, not blocks forever)", async () => {
-    // The designer's `beforeSend` is a synchronous Monaco flush, but the transport
-    // still defends against a surface whose barrier never resolves by racing it
-    // against a timeout and proceeding. Fake timers keep the test instant.
-    vi.useFakeTimers();
-    try {
-      const hangingAgent: SurfaceAgent = {
-        ...agent,
-        beforeSend: () => new Promise<void>(() => {}), // never resolves
-      };
-      const transport = createVoidhashAiTransport(hangingAgent, "ai_chat_abc");
-      const prepare = (
-        transport as unknown as {
-          prepareSendMessagesRequest: (opts: typeof sdkFields) => Promise<{ body: Record<string, unknown> }>;
-        }
-      ).prepareSendMessagesRequest;
-      const pending = prepare(sdkFields);
-      // Advance past the barrier timeout so the send proceeds with the (stale) fork.
-      await vi.advanceTimersByTimeAsync(3000);
-      const { body } = await pending;
-      expect(chatRequestBodySchema.safeParse(body).success).toBe(true);
-    } finally {
-      vi.useRealTimers();
-    }
-  });
-});
diff --git a/apps/www/src/features/studio/ai/transport.ts b/apps/www/src/features/studio/ai/transport.ts
deleted file mode 100644
index 29923b5a2..000000000
--- a/apps/www/src/features/studio/ai/transport.ts
+++ /dev/null
@@ -1,133 +0,0 @@
-import { DefaultChatTransport } from "ai";
-
-import { env } from "@/lib/env";
-
-import type { SurfaceAgent } from "./contract";
-
-/** Backend chat endpoint base, with any trailing slashes trimmed. */
-const apiBaseUrl = env.VITE_APP_API_URL.replace(/\/+$/, "");
-
-/**
- * How long the `beforeSend` barrier may block a chat send before the send
- * proceeds anyway. The barrier flushes the code-editor Monaco buffers into the
- * store fork so the client tool executor reads the user's latest code; that is a
- * synchronous local operation, but the bounded race is kept defensively so a
- * surface whose `beforeSend` ever hangs cannot block every send indefinitely.
- */
-const BEFORE_SEND_TIMEOUT_MS = 3000;
-
-/**
- * Race `barrier` against a timeout so a hung flush cannot block the send forever.
- * Resolves when the barrier settles OR the timeout elapses, whichever is first;
- * the timer is always cleared. Never rejects — a barrier rejection is swallowed by
- * the caller, and a timeout is a normal "proceed anyway" outcome.
- */
-function raceBeforeSend(barrier: Promise<void>): Promise<void> {
-  return new Promise<void>((resolve) => {
-    const timer = setTimeout(resolve, BEFORE_SEND_TIMEOUT_MS);
-    const settle = () => {
-      clearTimeout(timer);
-      resolve();
-    };
-    barrier.then(settle, settle);
-  });
-}
-
-/**
- * The AI SDK fields a custom `prepareSendMessagesRequest` must forward onto the
- * body itself. When NO `prepareSendMessagesRequest` is given, the SDK appends
- * these to the body automatically; when one IS given, the SDK sends the returned
- * body VERBATIM (see `HttpChatTransport.sendMessages`), so a custom function must
- * re-include them or the POST loses its `messages` (server → 400) and turn ids.
- */
-interface AiSdkRequestFields {
-  readonly id: string;
-  readonly messages: unknown;
-  readonly trigger: "submit-message" | "regenerate-message";
-  readonly messageId: string | undefined;
-}
-
-/**
- * Build the request body for a send, merging the transport's static context, the
- * SDK's per-turn fields (`id`/`messages`/`trigger`/`messageId`), and any fresh
- * dynamic context. Extracted so the exact wire body can be asserted against the
- * server's chat-request schema in a contract test.
- */
-export function buildSendMessagesBody(
-  staticBody: Record<string, unknown>,
-  sdkFields: AiSdkRequestFields,
-  dynamicContext: Record<string, unknown>,
-): Record<string, unknown> {
-  return {
-    ...staticBody,
-    id: sdkFields.id,
-    messages: sdkFields.messages,
-    trigger: sdkFields.trigger,
-    messageId: sdkFields.messageId,
-    ...dynamicContext,
-  };
-}
-
-/**
- * Build the AI SDK transport for a surface agent. The transport POSTs to
- * `${VITE_APP_API_URL}/api/ai/chat` with cookie auth (`credentials: "include"`)
- * and merges the surface id, its request context, and the `chatId` into every
- * request body (the AI SDK appends `messages`/`id`/`trigger`).
- *
- * The designer's tools are CLIENT-EXECUTED (the backend declares them
- * schema-only and ends the stream at a tool call; the browser runs them and the
- * chat auto-continues), but the server still persists the chat authoritatively,
- * so it needs the `chatId` (the client-minted persistence key) on every turn's
- * body — including each auto-continuation request.
- *
- * When the agent exposes {@link SurfaceAgent.getDynamicContext}, its result is
- * merged into the body at SEND time via `prepareSendMessagesRequest`, so live UI
- * state (e.g. the designer's current selection) reflects the moment the user hit
- * send rather than when this transport was built.
- *
- * NOTE: a custom `prepareSendMessagesRequest` REPLACES the SDK's default body
- * assembly — the SDK sends the returned body verbatim and does NOT re-append
- * `messages`/`id`/`trigger`/`messageId`. {@link buildSendMessagesBody} therefore
- * re-includes them explicitly; dropping them loses `messages` and the server
- * rejects the request with 400.
- */
-export function createVoidhashAiTransport(agent: SurfaceAgent, chatId: string) {
-  const getDynamicContext = agent.getDynamicContext;
-  const beforeSend = agent.beforeSend;
-  const staticBody = {
-    surface: agent.surfaceId,
-    chatId,
-    ...agent.context,
-  };
-  // A custom `prepareSendMessagesRequest` is needed when the surface has dynamic
-  // context to merge OR a `beforeSend` barrier to await (the designer drains its
-  // code-editor flush queue here so the agent reads the user's latest code). It may
-  // be async — the SDK awaits it before the POST.
-  const needsPrepare = getDynamicContext !== undefined || beforeSend !== undefined;
-  return new DefaultChatTransport({
-    api: `${apiBaseUrl}/api/ai/chat`,
-    credentials: "include",
-    body: staticBody,
-    prepareSendMessagesRequest: needsPrepare
-      ? async ({ id, messages, trigger, messageId }) => {
-          if (beforeSend !== undefined) {
-            // A failed OR hung flush must not block the message: race the barrier
-            // against a bounded timeout (a hung flush would otherwise block every
-            // send forever) and swallow any rejection.
-            try {
-              await raceBeforeSend(Promise.resolve(beforeSend()));
-            } catch {
-              // swallow — send the message regardless.
-            }
-          }
-          return {
-            body: buildSendMessagesBody(
-              staticBody,
-              { id, messages, trigger, messageId },
-              getDynamicContext?.() ?? {},
-            ),
-          };
-        }
-      : undefined,
-  });
-}
diff --git a/apps/www/src/features/studio/ai/use-agent-session.ts b/apps/www/src/features/studio/ai/use-agent-session.ts
new file mode 100644
index 000000000..de552d33e
--- /dev/null
+++ b/apps/www/src/features/studio/ai/use-agent-session.ts
@@ -0,0 +1,230 @@
+import {
+  AGENT_PROTOCOL_VERSION,
+  type AgentClientMessage,
+  type AgentServerMessage,
+} from "@voidhash/agent/Protocol";
+import { useQueryClient } from "@tanstack/react-query";
+import { useCallback, useEffect, useMemo, useReducer, useRef } from "react";
+
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+import { env } from "@/lib/env";
+
+import type { SurfaceAgent } from "./contract";
+import {
+  initialAgentUiState,
+  reduceAgentServerMessage,
+  type AgentUiFilePart,
+  type AgentUiState,
+  type AgentUiStatus,
+} from "./agent-ui";
+
+export interface AgentSessionIdentity {
+  readonly sessionId: string;
+}
+
+type SessionAction =
+  | { readonly type: "server"; readonly message: AgentServerMessage }
+  | { readonly type: "status"; readonly status: AgentUiStatus; readonly error?: Error };
+
+const reducer = (state: AgentUiState, action: SessionAction): AgentUiState =>
+  action.type === "server"
+    ? reduceAgentServerMessage(state, action.message)
+    : {
+        ...state,
+        status: action.status,
+        ...(action.error === undefined ? { error: undefined } : { error: action.error }),
+      };
+
+const apiBaseUrl = env.VITE_APP_API_URL.replace(/\/+$/, "");
+
+/** Builds the authenticated WebSocket URL for a scoped durable agent session. */
+export const buildAgentWebSocketUrl = (
+  agent: Pick<SurfaceAgent, "surfaceId" | "context">,
+  sessionId: string,
+): string => {
+  const url = new URL(
+    `${apiBaseUrl}/api/agent/sessions/${encodeURIComponent(sessionId)}/ws`,
+    globalThis.location?.origin ?? "http://localhost",
+  );
+  url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+  url.searchParams.set("organizationId", agent.context.organizationId);
+  url.searchParams.set("projectId", agent.context.projectId);
+  url.searchParams.set("surface", agent.surfaceId);
+  if (agent.context.paywallId) url.searchParams.set("paywallId", agent.context.paywallId);
+  return url.toString();
+};
+
+/** Mints a portable durable-session id accepted by both runtime hosts. */
+export const newAgentSessionId = (): string => `agent_${crypto.randomUUID().replaceAll("-", "")}`;
+
+const requestId = (): string => crypto.randomUUID();
+
+const parseServerMessage = (data: unknown): AgentServerMessage | undefined => {
+  if (typeof data !== "string") return undefined;
+  try {
+    const parsed: unknown = JSON.parse(data);
+    return typeof parsed === "object" && parsed !== null && "type" in parsed && "v" in parsed
+      ? (parsed as AgentServerMessage)
+      : undefined;
+  } catch {
+    return undefined;
+  }
+};
+
+const dynamicContext = (agent: SurfaceAgent) => {
+  const dynamic = agent.getDynamicContext?.() ?? {};
+  const selectedNodeIds = Array.isArray(dynamic.selectedNodeIds)
+    ? dynamic.selectedNodeIds.filter((value): value is string => typeof value === "string")
+    : [];
+  return {
+    paywallId: typeof dynamic.paywallId === "string" ? dynamic.paywallId : agent.context.paywallId,
+    selectedNodeIds,
+  };
+};
+
+/** Connects the studio to one Pi session and exposes a small chat-compatible API. */
+export function useAgentSession(agent: SurfaceAgent, session: AgentSessionIdentity) {
+  const queryClient = useQueryClient();
+  const [state, dispatchState] = useReducer(reducer, undefined, initialAgentUiState);
+  const stateRef = useRef(state);
+  const socketRef = useRef<WebSocket | null>(null);
+  const pendingFrames = useRef<string[]>([]);
+  const url = useMemo(
+    () => buildAgentWebSocketUrl(agent, session.sessionId),
+    [agent, session.sessionId],
+  );
+
+  useEffect(() => {
+    stateRef.current = state;
+  }, [state]);
+
+  const dispatch = useCallback((action: SessionAction) => {
+    stateRef.current = reducer(stateRef.current, action);
+    dispatchState(action);
+  }, []);
+
+  const sendCommand = useCallback((command: AgentClientMessage) => {
+    const frame = JSON.stringify(command);
+    const socket = socketRef.current;
+    if (socket?.readyState === WebSocket.OPEN) socket.send(frame);
+    else pendingFrames.current.push(frame);
+  }, []);
+
+  useEffect(() => {
+    let disposed = false;
+    let retry: ReturnType<typeof setTimeout> | undefined;
+    let attempts = 0;
+
+    const connect = () => {
+      if (disposed) return;
+      dispatch({ type: "status", status: "connecting" });
+      const socket = new WebSocket(url);
+      socketRef.current = socket;
+      socket.addEventListener("open", () => {
+        if (disposed || socketRef.current !== socket) return;
+        attempts = 0;
+        dispatch({ type: "status", status: "ready" });
+        const context = dynamicContext(agent);
+        const initial: AgentClientMessage[] = [
+          { v: AGENT_PROTOCOL_VERSION, type: "get_entries", requestId: requestId() },
+          { v: AGENT_PROTOCOL_VERSION, type: "get_state", requestId: requestId() },
+          {
+            v: AGENT_PROTOCOL_VERSION,
+            type: "set_context",
+            requestId: requestId(),
+            selectedNodeIds: context.selectedNodeIds,
+            ...(context.paywallId === undefined ? {} : { paywallId: context.paywallId }),
+          },
+        ];
+        for (const command of initial) socket.send(JSON.stringify(command));
+        for (const frame of pendingFrames.current.splice(0)) socket.send(frame);
+      });
+      socket.addEventListener("message", (event) => {
+        const message = parseServerMessage(event.data);
+        if (message === undefined) return;
+        dispatch({ type: "server", message });
+        if (message.type === "event" && message.event.type === "agent_end") {
+          void queryClient.invalidateQueries({
+            queryKey: queryKeys.agentSession.list({
+              organizationId: agent.context.organizationId,
+              projectId: agent.context.projectId,
+              surface: agent.surfaceId,
+              paywallId: agent.context.paywallId,
+            }),
+          });
+        }
+      });
+      socket.addEventListener("close", () => {
+        if (socketRef.current === socket) socketRef.current = null;
+        if (disposed) return;
+        attempts += 1;
+        retry = setTimeout(connect, Math.min(5_000, 250 * 2 ** attempts));
+      });
+      socket.addEventListener("error", () => socket.close());
+    };
+
+    connect();
+    return () => {
+      disposed = true;
+      if (retry !== undefined) clearTimeout(retry);
+      socketRef.current?.close(1000, "Session unmounted");
+      socketRef.current = null;
+      pendingFrames.current = [];
+    };
+  }, [agent, dispatch, queryClient, url]);
+
+  const sendMessage = useCallback(
+    async (input: { readonly text?: string; readonly files?: ReadonlyArray<AgentUiFilePart> }) => {
+      const text = input.text?.trim() ?? "";
+      const images = (input.files ?? []).flatMap((file) =>
+        file.data === undefined
+          ? []
+          : [{ type: "image" as const, data: file.data, mimeType: file.mediaType }],
+      );
+      if (text.length === 0 && images.length === 0) return;
+
+      const context = dynamicContext(agent);
+      sendCommand({
+        v: AGENT_PROTOCOL_VERSION,
+        type: "set_context",
+        requestId: requestId(),
+        selectedNodeIds: context.selectedNodeIds,
+        ...(context.paywallId === undefined ? {} : { paywallId: context.paywallId }),
+      });
+      const isStreaming =
+        stateRef.current.status === "streaming" || stateRef.current.status === "submitted";
+      sendCommand({
+        v: AGENT_PROTOCOL_VERSION,
+        type: isStreaming ? "steer" : "prompt",
+        requestId: requestId(),
+        text,
+        ...(images.length === 0 ? {} : { images }),
+      });
+      if (!isStreaming) dispatch({ type: "status", status: "submitted" });
+    },
+    [agent, dispatch, sendCommand],
+  );
+
+  const stop = useCallback(() => {
+    sendCommand({ v: AGENT_PROTOCOL_VERSION, type: "abort", requestId: requestId() });
+  }, [sendCommand]);
+
+  const onActivityChange = agent.onActivityChange;
+  useEffect(() => {
+    const busy = state.status === "submitted" || state.status === "streaming";
+    onActivityChange?.(
+      busy ? { kind: "thinking", label: "Thinking about the paywall" } : { kind: "idle" },
+    );
+    return () => onActivityChange?.({ kind: "idle" });
+  }, [onActivityChange, state.status]);
+
+  return {
+    messages: state.messages,
+    status: state.status,
+    error: state.error,
+    sendMessage,
+    stop,
+  };
+}
+
+export type AgentSessionChat = ReturnType<typeof useAgentSession>;
diff --git a/apps/www/src/features/studio/ai/use-surface-chat.ts b/apps/www/src/features/studio/ai/use-surface-chat.ts
deleted file mode 100644
index 10acd32d7..000000000
--- a/apps/www/src/features/studio/ai/use-surface-chat.ts
+++ /dev/null
@@ -1,160 +0,0 @@
-import { useChat } from "@ai-sdk/react";
-import { useQueryClient } from "@tanstack/react-query";
-import { lastAssistantMessageIsCompleteWithToolCalls, type UIMessage } from "ai";
-import { useEffect, useMemo, useRef } from "react";
-
-import { queryKeys } from "@/features/studio/lib/tanstack-query";
-
-import type { SurfaceAgent } from "./contract";
-import { createVoidhashAiTransport } from "./transport";
-
-/** Identity for one chat session. The id is minted client-side so attachments can be uploaded before the first save. */
-export interface SurfaceChatSession {
-  readonly chatId: string;
-  /** Seed messages when reopening a stored chat; omit/empty for a new chat. */
-  readonly initialMessages?: UIMessage[];
-}
-
-/** Mint a fresh client-side chat id (fits the 64-char id column with room to spare). */
-export const newChatId = (): string => `ai_chat_${crypto.randomUUID().replace(/-/g, "")}`;
-
-/**
- * Safety cap on client-tool auto-continuations for a single user turn. The
- * backend already caps server steps with a `stepCountIs` backstop; this guards
- * the CLIENT loop so a model that keeps calling tools without ever producing a
- * final answer cannot round-trip forever. Reset when the user sends a new
- * message (the count only bounds an in-flight agentic turn).
- */
-const MAX_AUTO_CONTINUATIONS = 64;
-
-/**
- * Surface-agnostic chat hook. Wraps the AI SDK `useChat` with the Voidhash
- * transport.
- *
- * When the agent exposes {@link SurfaceAgent.executeTool}, its tools are
- * CLIENT-EXECUTED: the backend declares them schema-only, so the model calling a
- * tool ends the stream; this hook runs the executor via `onToolCall`, feeds the
- * result back with `addToolResult`, and auto-continues via
- * `sendAutomaticallyWhen: lastAssistantMessageIsCompleteWithToolCalls` (bounded by
- * {@link MAX_AUTO_CONTINUATIONS}). A surface with no `executeTool` is a pure chat
- * UI (server-only tools or none) and never auto-continues.
- *
- * Persistence is server-authoritative (the server upserts the full transcript in
- * the stream's `onFinish`), so this hook only invalidates the cached history on
- * finish so the dropdown refetches the server's freshly-persisted list/snapshot.
- *
- * A session is identified by `session.chatId`; hosts remount this hook (keyed by
- * chatId) to switch between a new chat and a reopened one.
- */
-export function useSurfaceChat(agent: SurfaceAgent, session: SurfaceChatSession) {
-  const queryClient = useQueryClient();
-  const { chatId } = session;
-
-  const transport = useMemo(() => createVoidhashAiTransport(agent, chatId), [agent, chatId]);
-
-  const { organizationId, projectId, paywallId } = agent.context;
-  const surface = agent.surfaceId;
-
-  const executeTool = agent.executeTool;
-  // Bound the client auto-continuation loop. A ref (not state) so it does not
-  // re-render; the `sendAutomaticallyWhen` closure reads the live count.
-  const continuationsRef = useRef(0);
-
-  const chat = useChat({
-    id: chatId,
-    messages: session.initialMessages,
-    transport,
-    // Execute a client tool call and feed its result back. The executor folds
-    // every failure into `{ output, isError }`, so this never throws into the SDK.
-    onToolCall:
-      executeTool === undefined
-        ? undefined
-        : async ({ toolCall }) => {
-            // The current user turn = the last user message; threaded so the
-            // designer's `apply_changes` can capture a per-turn server checkpoint.
-            const turnId = [...chat.messages].reverse().find((m) => m.role === "user")?.id;
-            const result = await executeTool({
-              toolName: toolCall.toolName,
-              toolCallId: toolCall.toolCallId,
-              input: toolCall.input,
-              chatId,
-              turnId,
-            });
-            chat.addToolResult({
-              tool: toolCall.toolName,
-              toolCallId: toolCall.toolCallId,
-              output: result.output,
-            });
-          },
-    // Auto-continue the conversation once the assistant's turn is complete with
-    // client tool results, bounded so a runaway tool loop cannot spin forever.
-    sendAutomaticallyWhen:
-      executeTool === undefined
-        ? undefined
-        : ({ messages }) => {
-            if (continuationsRef.current >= MAX_AUTO_CONTINUATIONS) {
-              return false;
-            }
-            if (!lastAssistantMessageIsCompleteWithToolCalls({ messages })) {
-              return false;
-            }
-            continuationsRef.current += 1;
-            return true;
-          },
-    onFinish: ({ isError, isAbort }) => {
-      // The server persisted the transcript authoritatively; just refresh the
-      // client history caches so the dropdown and any reopened snapshot are fresh.
-      if (isError || isAbort || !organizationId || !projectId) {
-        return;
-      }
-      void queryClient.invalidateQueries({
-        queryKey: queryKeys.aiChat.list({ organizationId, projectId, surface, paywallId }),
-      });
-      void queryClient.invalidateQueries({ queryKey: queryKeys.aiChat.get(chatId) });
-    },
-  });
-
-  const {
-    messages,
-    sendMessage: rawSendMessage,
-    status,
-    error,
-    stop,
-    regenerate: rawRegenerate,
-  } = chat;
-
-  const onActivityChange = agent.onActivityChange;
-  useEffect(() => {
-    onActivityChange?.(
-      status === "submitted" || status === "streaming"
-        ? { kind: "thinking", label: "Thinking about the paywall" }
-        : { kind: "idle" },
-    );
-    return () => onActivityChange?.({ kind: "idle" });
-  }, [onActivityChange, status]);
-
-  // Wrap `sendMessage` so a fresh USER turn resets the auto-continuation budget
-  // (the cap bounds one agentic turn, not the whole chat).
-  const sendMessage = useMemo(
-    () =>
-      ((...args: Parameters<typeof rawSendMessage>) => {
-        continuationsRef.current = 0;
-        return rawSendMessage(...args);
-      }) as typeof rawSendMessage,
-    [rawSendMessage],
-  );
-
-  // Regenerating a turn is a fresh agentic turn too, so reset the budget.
-  const regenerate = useMemo(
-    () =>
-      ((...args: Parameters<typeof rawRegenerate>) => {
-        continuationsRef.current = 0;
-        return rawRegenerate(...args);
-      }) as typeof rawRegenerate,
-    [rawRegenerate],
-  );
-
-  return { messages, sendMessage, status, error, stop, regenerate };
-}
-
-export type SurfaceChat = ReturnType<typeof useSurfaceChat>;
diff --git a/apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts b/apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts
new file mode 100644
index 000000000..ad961a599
--- /dev/null
+++ b/apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts
@@ -0,0 +1,46 @@
+import { queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { VoidhashRpc, eq } from "../effect-query";
+
+export interface AgentSessionScope {
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly surface: string;
+  readonly paywallId?: string;
+}
+
+/** Lists durable Pi sessions for one studio surface, newest first. */
+export const listAgentSessionsOptions = (scope: AgentSessionScope) =>
+  eq.queryOptions({
+    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListAgentSessions(scope)),
+    queryKey: queryKeys.agentSession.list(scope),
+  });
+
+/** Deletes one durable session index row owned by the authenticated user. */
+export const deleteAgentSessionOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { sessionId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.DeleteAgentSession(variables)),
+    mutationKey: ["deleteAgentSession"],
+  });
+
+/** Reverts the latest reviewed paywall change set owned by a durable session. */
+export const revertAgentSessionChangeSetOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { sessionId: string; changeSetId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RevertAgentSessionChangeSet(variables)),
+    mutationKey: ["revertAgentSessionChangeSet"],
+  });
+
+/** Uploads one image for a session prompt and returns its public URL. */
+export const uploadAgentAttachmentOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      sessionId: string;
+      organizationId: string;
+      name: string;
+      contentType: string;
+      dataBase64: string;
+    }) => VoidhashRpc.request((rpc) => rpc.UploadAgentAttachment(variables)),
+    mutationKey: ["uploadAgentAttachment"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts b/apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts
deleted file mode 100644
index 24dab32cb..000000000
--- a/apps/www/src/features/studio/lib/tanstack-query/ai-chats.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import { queryKeys } from "@/features/studio/lib/tanstack-query";
-
-import { VoidhashRpc, eq } from "../effect-query";
-
-// Queries
-
-/** List a paywall/surface's persistent chats (metadata only), newest first. */
-export const listAiChatsOptions = (options: {
-  organizationId: string;
-  projectId: string;
-  surface: string;
-  paywallId?: string;
-}) =>
-  eq.queryOptions({
-    queryFn: () => VoidhashRpc.request((rpc) => rpc.ListAiChats(options)),
-    queryKey: queryKeys.aiChat.list(options),
-  });
-
-/** Load one full chat (including its serialized messages). */
-export const getAiChatOptions = (chatId: string) =>
-  eq.queryOptions({
-    queryFn: () => VoidhashRpc.request((rpc) => rpc.GetAiChat({ chatId })),
-    queryKey: queryKeys.aiChat.get(chatId),
-  });
-
-// Mutations
-
-/** Upsert a chat by its (client-minted) id. */
-export const saveAiChatOptions = () =>
-  eq.mutationOptions({
-    mutationFn: (variables: {
-      id: string;
-      organizationId: string;
-      projectId: string;
-      surface: string;
-      chatType: string;
-      paywallId?: string;
-      title: string;
-      messages: string;
-    }) => VoidhashRpc.request((rpc) => rpc.SaveAiChat(variables)),
-    mutationKey: ["saveAiChat"],
-  });
-
-/** Delete one chat. */
-export const deleteAiChatOptions = () =>
-  eq.mutationOptions({
-    mutationFn: (variables: { chatId: string }) =>
-      VoidhashRpc.request((rpc) => rpc.DeleteAiChat(variables)),
-    mutationKey: ["deleteAiChat"],
-  });
-
-/** Upload an image attachment under a chat; returns its public URL. */
-export const uploadAiChatAttachmentOptions = () =>
-  eq.mutationOptions({
-    mutationFn: (variables: {
-      chatId: string;
-      organizationId: string;
-      name: string;
-      contentType: string;
-      dataBase64: string;
-    }) => VoidhashRpc.request((rpc) => rpc.UploadAiChatAttachment(variables)),
-    mutationKey: ["uploadAiChatAttachment"],
-  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/index.ts b/apps/www/src/features/studio/lib/tanstack-query/index.ts
index 37f8c27fa..295f75cbd 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/index.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/index.ts
@@ -1,4 +1,4 @@
-export * from "./ai-chats";
+export * from "./agent-sessions";
 export * from "./api-keys";
 export * from "./analytics";
 export * from "./persons";
diff --git a/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
index 4c5096a9a..af3132456 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
@@ -115,15 +115,14 @@ const paywallAssetKeys = {
     [...paywallAssetKeys.all, "list", options] as const,
 };
 
-const aiChatKeys = {
-  all: ["aiChats"] as const,
+const agentSessionKeys = {
+  all: ["agentSessions"] as const,
   list: (options: {
     organizationId: string;
     projectId: string;
     surface: string;
     paywallId?: string;
-  }) => [...aiChatKeys.all, "list", options] as const,
-  get: (chatId: string) => [...aiChatKeys.all, "get", { chatId }] as const,
+  }) => [...agentSessionKeys.all, "list", options] as const,
 };
 
 const webhookKeys = {
@@ -169,10 +168,10 @@ const analyticsKeys = {
 };
 
 export const queryKeys = {
+  agentSession: agentSessionKeys,
   analytics: analyticsKeys,
   apiKey: apiKeyKeys,
   person: personKeys,
-  aiChat: aiChatKeys,
   experiment: experimentKeys,
   featureFlag: featureFlagKeys,
   invalidateAll: () => [],
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
index 9e7af359c..25ba5566a 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
@@ -2,11 +2,10 @@
 
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
 import { cn } from "@voidhash/ui";
-import type { UIMessage } from "ai";
 import { useCallback, useRef, useState } from "react";
 import { useStore } from "zustand/react";
 
-import { ChatHistoryMenu, ChatShell, newChatId } from "@/features/studio/ai";
+import { ChatHistoryMenu, ChatShell, newAgentSessionId } from "@/features/studio/ai";
 import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
 
 import { Panel } from "../components/ui/panel";
@@ -17,14 +16,13 @@ import { useDesignerAgent } from "./use-designer-agent";
 
 interface ChatSession {
   chatId: string;
-  initialMessages?: UIMessage[];
 }
 
 /**
  * Fixed overlay panel hosting the Voidhash AI chat, anchored to the left edge
  * below the top panel. Visible in design and code modes; slides out (via
  * `-translate-x-full`) when closed or while in preview mode. Gated behind the
- * `voidhash_ai` internal feature flag so the store slice stays inert when off.
+ * `voidhash_ai_pi` internal feature flag so the store slice stays inert when off.
  *
  * The panel is closed from the top bar (its Sparkles toggle), so the header
  * carries only the "new chat" and history controls; document reverting is
@@ -35,14 +33,16 @@ export function AiPanel() {
   const dispatch = usePaywallDesignerActions();
   const agent = useDesignerAgent();
 
-  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAi.key);
+  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAiPi.key);
   const panelOpen = useStore(store, (state) => state.ai.panelOpen);
   const mode = useStore(store, (state) => state.mode);
   const width = useStore(store, (state) => state.ai.width);
   const isPreviewMode = mode === "preview";
 
-  // Current chat identity; changing chatId remounts the shell (fresh useChat).
-  const [session, setSession] = useState<ChatSession>(() => ({ chatId: newChatId() }));
+  // Current session identity; changing it remounts the WebSocket-backed shell.
+  const [session, setSession] = useState<ChatSession>(() => ({
+    chatId: newAgentSessionId(),
+  }));
 
   // Drag-to-resize: capture the pointer on the right-edge handle and translate
   // horizontal movement into width updates (clamped by the setter). Held in a
@@ -116,15 +116,14 @@ export function AiPanel() {
           <ChatHistoryMenu
             agent={agent}
             currentChatId={session.chatId}
-            onNewChat={() => setSession({ chatId: newChatId() })}
-            onSelectChat={(chatId, messages) => setSession({ chatId, initialMessages: messages })}
+            onNewChat={() => setSession({ chatId: newAgentSessionId() })}
+            onSelectChat={(chatId) => setSession({ chatId })}
           />
         </div>
         <ChatShell
           key={session.chatId}
           agent={agent}
           chatId={session.chatId}
-          initialMessages={session.initialMessages}
           onBusyChange={handleBusyChange}
           className="min-h-0 flex-1"
         />
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts
deleted file mode 100644
index 8f82224c5..000000000
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/canvas-capture.ts
+++ /dev/null
@@ -1,231 +0,0 @@
-const NODE_SELECTOR = "[data-paywall-node-id]";
-
-/** Raster output captured from one live designer canvas node. */
-export interface DesignerNodeScreenshot {
-  dataBase64: string;
-  width: number;
-  height: number;
-  scale: 1 | 2;
-}
-
-/** Exact rendered measurements returned to the design agent. */
-export interface RenderedNodeLayout {
-  nodeId: string;
-  bounds: { x: number; y: number; width: number; height: number };
-  scroll: { width: number; height: number };
-  overflow: { x: string; y: string };
-  typography: {
-    fontFamily: string;
-    fontSize: string;
-    fontWeight: string;
-    letterSpacing: string;
-    lineHeight: string;
-    color: string;
-  };
-  clipped: { x: boolean; y: boolean };
-}
-
-/** Find the rendered element carrying a document node's stable id. */
-export function findDesignerNodeElement(nodeId: string): HTMLElement | SVGElement | null {
-  for (const element of document.querySelectorAll<HTMLElement | SVGElement>(NODE_SELECTOR)) {
-    if (element.getAttribute("data-paywall-node-id") === nodeId) {
-      return element;
-    }
-  }
-  return null;
-}
-
-const blobAsDataUrl = (blob: Blob): Promise<string> =>
-  new Promise((resolve, reject) => {
-    const reader = new FileReader();
-    reader.onload = () => resolve(String(reader.result));
-    reader.onerror = () => reject(reader.error ?? new Error("Could not read image asset"));
-    reader.readAsDataURL(blob);
-  });
-
-async function assetAsDataUrl(url: string): Promise<string | null> {
-  if (url.startsWith("data:")) {
-    return url;
-  }
-  try {
-    const response = await fetch(url, { credentials: "include" });
-    if (!response.ok) {
-      return null;
-    }
-    return await blobAsDataUrl(await response.blob());
-  } catch {
-    return null;
-  }
-}
-
-async function inlineBackgroundImages(value: string): Promise<string> {
-  const matches = [...value.matchAll(/url\(["']?([^"')]+)["']?\)/g)];
-  let result = value;
-  for (const match of matches) {
-    const source = match[1];
-    if (!source) continue;
-    const dataUrl = await assetAsDataUrl(source);
-    result = result.replace(match[0], dataUrl === null ? "none" : `url("${dataUrl}")`);
-  }
-  return result;
-}
-
-async function copyRenderedTree(sourceRoot: Element, cloneRoot: Element): Promise<void> {
-  const sources = [sourceRoot, ...sourceRoot.querySelectorAll("*")];
-  const clones = [cloneRoot, ...cloneRoot.querySelectorAll("*")];
-
-  await Promise.all(
-    sources.map(async (source, index) => {
-      const clone = clones[index];
-      if (!(clone instanceof HTMLElement || clone instanceof SVGElement)) return;
-
-      const computed = window.getComputedStyle(source);
-      for (const property of computed) {
-        clone.style.setProperty(
-          property,
-          computed.getPropertyValue(property),
-          computed.getPropertyPriority(property),
-        );
-      }
-      if (computed.backgroundImage !== "none") {
-        clone.style.backgroundImage = await inlineBackgroundImages(computed.backgroundImage);
-      }
-
-      if (source instanceof HTMLImageElement && clone instanceof HTMLImageElement) {
-        const dataUrl = await assetAsDataUrl(source.currentSrc || source.src);
-        if (dataUrl === null) {
-          clone.removeAttribute("src");
-        } else {
-          clone.src = dataUrl;
-          clone.removeAttribute("srcset");
-        }
-      } else if (source instanceof HTMLInputElement && clone instanceof HTMLInputElement) {
-        clone.setAttribute("value", source.value);
-      } else if (source instanceof HTMLTextAreaElement && clone instanceof HTMLTextAreaElement) {
-        clone.textContent = source.value;
-      } else if (source instanceof HTMLCanvasElement && clone instanceof HTMLCanvasElement) {
-        const image = document.createElement("img");
-        image.src = source.toDataURL("image/png");
-        image.style.cssText = clone.style.cssText;
-        clone.replaceWith(image);
-      }
-    }),
-  );
-}
-
-const loadSvgImage = (url: string): Promise<HTMLImageElement> =>
-  new Promise((resolve, reject) => {
-    const image = new Image();
-    image.onload = () => resolve(image);
-    image.onerror = () => reject(new Error("The browser could not rasterize the canvas node"));
-    image.src = url;
-  });
-
-/**
- * Capture one currently rendered designer node as PNG using an SVG
- * `foreignObject`. Computed styles and fetchable image assets are inlined first,
- * so the result reflects the live canvas rather than a stale server thumbnail.
- */
-export async function captureDesignerNodeScreenshot(
-  nodeId: string,
-  scale: 1 | 2,
-): Promise<DesignerNodeScreenshot> {
-  const source = findDesignerNodeElement(nodeId);
-  if (source === null) {
-    throw new Error(
-      `Node "${nodeId}" is not mounted on the design canvas. Open Design mode and try again.`,
-    );
-  }
-
-  const computed = window.getComputedStyle(source);
-  const width = Math.max(
-    1,
-    Math.round(
-      source.clientWidth ||
-        Number.parseFloat(computed.width) ||
-        source.getBoundingClientRect().width,
-    ),
-  );
-  const height = Math.max(
-    1,
-    Math.round(
-      source.clientHeight ||
-        Number.parseFloat(computed.height) ||
-        source.getBoundingClientRect().height,
-    ),
-  );
-  const clone = source.cloneNode(true) as Element;
-  await copyRenderedTree(source, clone);
-
-  const serialized = new XMLSerializer().serializeToString(clone);
-  const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${width}" height="${height}" viewBox="0 0 ${width} ${height}"><foreignObject width="100%" height="100%"><div xmlns="http://www.w3.org/1999/xhtml" style="width:${width}px;height:${height}px;overflow:hidden">${serialized}</div></foreignObject></svg>`;
-  const svgUrl = URL.createObjectURL(new Blob([svg], { type: "image/svg+xml;charset=utf-8" }));
-
-  try {
-    const image = await loadSvgImage(svgUrl);
-    const canvas = document.createElement("canvas");
-    canvas.width = width * scale;
-    canvas.height = height * scale;
-    const context = canvas.getContext("2d");
-    if (context === null) {
-      throw new Error("Canvas 2D rendering is unavailable");
-    }
-    context.scale(scale, scale);
-    context.drawImage(image, 0, 0, width, height);
-    const dataUrl = canvas.toDataURL("image/png");
-    return {
-      dataBase64: dataUrl.slice(dataUrl.indexOf(",") + 1),
-      height: canvas.height,
-      scale,
-      width: canvas.width,
-    };
-  } finally {
-    URL.revokeObjectURL(svgUrl);
-  }
-}
-
-/** Measure actual browser layout for the requested rendered document nodes. */
-export function inspectRenderedNodeLayouts(
-  nodeIds: readonly string[],
-  screenId: string,
-  canvasScale: number,
-): RenderedNodeLayout[] {
-  const screen = findDesignerNodeElement(screenId);
-  if (screen === null) {
-    throw new Error("The paywall screen is not mounted on the design canvas.");
-  }
-  const screenRect = screen.getBoundingClientRect();
-  const scale = canvasScale > 0 ? canvasScale : 1;
-
-  return nodeIds.flatMap((nodeId) => {
-    const element = findDesignerNodeElement(nodeId);
-    if (element === null) return [];
-    const rect = element.getBoundingClientRect();
-    const style = window.getComputedStyle(element);
-    const clippedX = element.scrollWidth > element.clientWidth + 1 && style.overflowX === "hidden";
-    const clippedY =
-      element.scrollHeight > element.clientHeight + 1 && style.overflowY === "hidden";
-    return [
-      {
-        nodeId,
-        bounds: {
-          x: (rect.left - screenRect.left) / scale,
-          y: (rect.top - screenRect.top) / scale,
-          width: rect.width / scale,
-          height: rect.height / scale,
-        },
-        scroll: { width: element.scrollWidth, height: element.scrollHeight },
-        overflow: { x: style.overflowX, y: style.overflowY },
-        typography: {
-          color: style.color,
-          fontFamily: style.fontFamily,
-          fontSize: style.fontSize,
-          fontWeight: style.fontWeight,
-          letterSpacing: style.letterSpacing,
-          lineHeight: style.lineHeight,
-        },
-        clipped: { x: clippedX, y: clippedY },
-      },
-    ];
-  });
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
deleted file mode 100644
index 4c648438a..000000000
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.test.ts
+++ /dev/null
@@ -1,703 +0,0 @@
-import type { PipelineResult } from "../code-mode/compile-pipeline";
-import { describe, expect, test } from "vite-plus/test";
-
-import type { SurfaceToolCall, SurfaceToolResult } from "@/features/studio/ai";
-
-import type { CodeEditorHandle } from "../code-mode/code-editor-context";
-import type { PaywallCodeTarget } from "../hooks/use-paywall-code-target";
-import { createDesignerStore, type PaywallDesignerStoreType } from "../state/designer-store";
-import {
-  createOfflineDesignerDocument,
-  seededIds,
-  type OfflineDesignerDocument,
-} from "../state/testing/offline-document";
-import { insertCodeComponent } from "../state/utils/code-component-writes";
-import { renderCompileDiagnostics, runDesignerTool, type DesignerToolDeps } from "./tool-executor";
-
-const PAYWALL_ID = "pw-1";
-const PAYWALL_SLUG = "checkout";
-const target: PaywallCodeTarget = { projectId: "proj-1", paywallSlug: PAYWALL_SLUG };
-
-/** Records every reseed/rename the executor drives on Monaco. */
-interface FakeHandle extends CodeEditorHandle {
-  reseeds: Array<{ key: string; source: string }>;
-  renames: Array<{ from: string; to: string }>;
-}
-
-function makeFakeHandle(): FakeHandle {
-  const handle: FakeHandle = {
-    reseeds: [],
-    renames: [],
-    undo() {},
-    redo() {},
-    setBufferContent(key, source) {
-      handle.reseeds.push({ key, source });
-    },
-    saveBuffer() {
-      return false;
-    },
-    saveAll() {},
-    renameModel(from, to) {
-      handle.renames.push({ from, to });
-    },
-  };
-  return handle;
-}
-
-/** A real designer store over an offline document + a production-shaped dispatch. */
-async function makeStore(
-  doc: OfflineDesignerDocument,
-): Promise<{ store: PaywallDesignerStoreType; dispatch: DesignerToolDeps["dispatch"] }> {
-  await doc.connect();
-  const store = createDesignerStore(doc as unknown as Parameters<typeof createDesignerStore>[0]);
-  const storeApi = store as unknown as {
-    getState: () => unknown;
-    setState: (partial: unknown) => void;
-  };
-  const dispatch = ((command: { fn: (ctx: unknown, params: unknown) => unknown }) =>
-    (params: unknown) => {
-      const ctx = {
-        getState: storeApi.getState,
-        setState: storeApi.setState,
-        dispatch,
-        transaction: <R>(fn: (root: unknown) => R): R => doc.transaction(fn as never) as R,
-        get root() {
-          return doc.root;
-        },
-      };
-      return command.fn(ctx, params);
-    }) as unknown as DesignerToolDeps["dispatch"];
-  return { store, dispatch };
-}
-
-/** Inserts a code-component definition into the document (a local component file). */
-function insertComponent(doc: OfflineDesignerDocument, path: string, source: string): void {
-  doc.transaction((root) => {
-    if (insertCodeComponent(root, { path, source }) === null) {
-      throw new Error("failed to insert code component");
-    }
-  });
-}
-
-interface CheckpointCall {
-  chatId: string;
-  turnId: string;
-  paywallId: string;
-}
-
-/** Deps for the runner: real store + injectable compile/read/checkpoint seams. */
-function makeDeps(
-  store: PaywallDesignerStoreType,
-  dispatch: DesignerToolDeps["dispatch"],
-  overrides: Partial<DesignerToolDeps> = {},
-): DesignerToolDeps & { handle: FakeHandle; checkpoints: CheckpointCall[] } {
-  const handle = (overrides.handle as FakeHandle | undefined) ?? makeFakeHandle();
-  const checkpoints: CheckpointCall[] = [];
-  return {
-    store,
-    dispatch,
-    target,
-    paywallId: PAYWALL_ID,
-    capturedTurns: new Set<string>(),
-    compile: async (): Promise<PipelineResult> => ({
-      ok: true,
-      manifest: { manifestVersion: 2, props: {} },
-      previewTrees: {},
-      hasPanel: false,
-    }),
-    readPaywallDocument: async () => ({ slug: "", name: "", paywallId: "", document: null }),
-    captureNodeScreenshot: async (_nodeId, scale) => ({
-      dataBase64: "cG5n",
-      width: 375 * scale,
-      height: 812 * scale,
-      scale,
-    }),
-    inspectRenderedLayouts: () => [],
-    reviewState: {},
-    captureCheckpoint: async (input) => {
-      checkpoints.push(input);
-      return { captured: true };
-    },
-    ...overrides,
-    handle,
-    checkpoints,
-  } as DesignerToolDeps & { handle: FakeHandle; checkpoints: CheckpointCall[] };
-}
-
-/** Narrow a string-producing tool result for JSON/prose assertions. */
-function textOutput(result: SurfaceToolResult): string {
-  if (typeof result.output !== "string") {
-    throw new Error("expected a text tool result");
-  }
-  return result.output;
-}
-
-/** A minimal snapshot node: `{ id, type, data: { style }, children }`. */
-interface SnapshotNode {
-  id: string;
-  data?: { style?: Record<string, unknown> };
-  children?: readonly SnapshotNode[];
-}
-
-/** Find a node by id in the engine snapshot roots and return its `data.style`. */
-function findNodeStyle(
-  snapshot: readonly SnapshotNode[] | undefined,
-  id: string,
-): Record<string, unknown> | undefined {
-  const walk = (node: SnapshotNode): Record<string, unknown> | undefined => {
-    if (node.id === id) return node.data?.style;
-    for (const child of node.children ?? []) {
-      const found = walk(child);
-      if (found !== undefined) return found;
-    }
-    return undefined;
-  };
-  for (const root of snapshot ?? []) {
-    const found = walk(root);
-    if (found !== undefined) return found;
-  }
-  return undefined;
-}
-
-/** Build a `SurfaceToolCall` (input is assumed already schema-valid). */
-const call = (
-  toolName: string,
-  input: unknown,
-  extra: Partial<SurfaceToolCall> = {},
-): SurfaceToolCall => ({
-  toolName,
-  toolCallId: "call-1",
-  input,
-  chatId: "ai_chat_1",
-  ...extra,
-});
-
-describe("runDesignerTool — get_document", () => {
-  test("serializes the open document as cleaned JSON, scoped by nodeId", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(deps, call("get_document", { nodeId: screenId }));
-    expect(result.isError).toBe(false);
-    const parsed = JSON.parse(textOutput(result)) as { id: string; type: string };
-    expect(parsed.id).toBe(screenId);
-    expect(parsed.type).toBe("screen");
-  });
-
-  test("an unknown nodeId folds into a readable error", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(deps, call("get_document", { nodeId: "ghost" }));
-    expect(result.isError).toBe(true);
-    expect(result.output).toContain("ghost");
-  });
-});
-
-describe("runDesignerTool — rendered review", () => {
-  test("returns actual browser layout measurements for requested nodes", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const inspected: string[][] = [];
-    const deps = makeDeps(store, dispatch, {
-      inspectRenderedLayouts: (nodeIds, inspectedScreenId, canvasScale) => {
-        inspected.push([...nodeIds]);
-        expect(inspectedScreenId).toBe(screenId);
-        expect(canvasScale).toBe(store.getState().canvas.scale);
-        return [
-          {
-            nodeId: screenId,
-            bounds: { x: 0, y: 0, width: 375, height: 812 },
-            scroll: { width: 375, height: 812 },
-            overflow: { x: "hidden", y: "hidden" },
-            typography: {
-              fontFamily: "Inter",
-              fontSize: "16px",
-              fontWeight: "400",
-              letterSpacing: "normal",
-              lineHeight: "normal",
-              color: "rgb(0, 0, 0)",
-            },
-            clipped: { x: false, y: false },
-          },
-        ];
-      },
-    });
-
-    const result = await runDesignerTool(
-      deps,
-      call("get_rendered_layout", { nodeIds: [screenId] }),
-    );
-    expect(result.isError).toBe(false);
-    expect(inspected).toEqual([[screenId]]);
-    expect(JSON.parse(textOutput(result))).toMatchObject({
-      screenId,
-      layouts: [{ nodeId: screenId, clipped: { x: false, y: false } }],
-      missingNodeIds: [],
-    });
-  });
-
-  test("returns a multimodal screenshot and only finishes the exact reviewed document", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const captured: Array<{ nodeId: string; scale: 1 | 2 }> = [];
-    const deps = makeDeps(store, dispatch, {
-      captureNodeScreenshot: async (nodeId, scale) => {
-        captured.push({ nodeId, scale });
-        return { dataBase64: "cG5n", width: 750, height: 1624, scale };
-      },
-    });
-
-    const screenshot = await runDesignerTool(deps, call("get_preview_screenshot", { scale: 2 }));
-    expect(screenshot.isError).toBe(false);
-    expect(captured).toEqual([{ nodeId: screenId, scale: 2 }]);
-    expect(screenshot.output).toMatchObject({
-      kind: "preview-screenshot",
-      mediaType: "image/png",
-      dataBase64: "cG5n",
-      width: 750,
-      height: 1624,
-      scale: 2,
-    });
-    if (typeof screenshot.output === "string") {
-      throw new Error("expected a screenshot tool result");
-    }
-    const signature = screenshot.output.documentSignature;
-
-    const unresolved = await runDesignerTool(
-      deps,
-      call("finish_design", {
-        reviewedDocumentSignature: signature,
-        verdict: "Hierarchy is clear, but the legal copy still clips.",
-        unresolvedIssues: ["Legal copy clips"],
-      }),
-    );
-    expect(unresolved.isError).toBe(true);
-
-    const finished = await runDesignerTool(
-      deps,
-      call("finish_design", {
-        reviewedDocumentSignature: signature,
-        verdict: "Hierarchy, spacing, contrast, fit, and purchase affordances are clear.",
-        unresolvedIssues: [],
-      }),
-    );
-    expect(finished.isError).toBe(false);
-
-    await runDesignerTool(
-      deps,
-      call(
-        "edit_document",
-        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
-        { turnId: "turn-after-review" },
-      ),
-    );
-    const stale = await runDesignerTool(
-      deps,
-      call("finish_design", {
-        reviewedDocumentSignature: signature,
-        verdict: "Previously reviewed.",
-        unresolvedIssues: [],
-      }),
-    );
-    expect(stale.isError).toBe(true);
-    expect(textOutput(stale)).toContain("changed after the final screenshot");
-  });
-});
-
-describe("runDesignerTool — edit_document", () => {
-  test("a valid batch applies and returns minted ids", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "edit_document",
-        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
-        { turnId: "turn-1" },
-      ),
-    );
-    expect(result.isError).toBe(false);
-    const parsed = JSON.parse(textOutput(result)) as {
-      ok: boolean;
-      mintedIds: Record<string, string[]>;
-    };
-    expect(parsed.ok).toBe(true);
-    expect(parsed.mintedIds["0"]?.length).toBe(1);
-  });
-
-  test("a lone backgroundColor update auto-enables the background in the store", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    // Insert a fresh view (defaults backgroundEnabled=false), then set only its color.
-    const inserted = await runDesignerTool(
-      deps,
-      call(
-        "edit_document",
-        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
-        { turnId: "turn-1" },
-      ),
-    );
-    const viewId = (JSON.parse(textOutput(inserted)) as { mintedIds: Record<string, string[]> })
-      .mintedIds["0"]![0]!;
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "edit_document",
-        {
-          edits: [
-            {
-              op: "update",
-              nodeId: viewId,
-              set: { style: { backgroundColor: "rgba(1, 2, 3, 1)" } },
-            },
-          ],
-        },
-        { turnId: "turn-2" },
-      ),
-    );
-    expect(result.isError).toBe(false);
-
-    const style = findNodeStyle(
-      store.getState().mimic.snapshot as unknown as readonly SnapshotNode[],
-      viewId,
-    );
-    expect(style?.backgroundEnabled).toBe(true);
-    expect(style?.backgroundColor).toBe("rgba(1, 2, 3, 1)");
-  });
-
-  test("a validation error is returned verbatim (isError) and applies nothing", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "edit_document",
-        { edits: [{ op: "insert", parentId: "nope", node: { type: "view" } }] },
-        { turnId: "turn-1" },
-      ),
-    );
-    expect(result.isError).toBe(true);
-    const parsed = JSON.parse(textOutput(result)) as {
-      ok: boolean;
-      errors: Array<{ code: string }>;
-    };
-    expect(parsed.ok).toBe(false);
-    expect(parsed.errors[0]?.code).toBe("unknownParent");
-  });
-
-  test("captures a pre-turn checkpoint exactly once per turn", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const editCall = () =>
-      runDesignerTool(
-        deps,
-        call(
-          "edit_document",
-          { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
-          { turnId: "turn-42" },
-        ),
-      );
-    await editCall();
-    await editCall();
-
-    expect(deps.checkpoints).toEqual([
-      { chatId: "ai_chat_1", turnId: "turn-42", paywallId: PAYWALL_ID },
-    ]);
-  });
-
-  test("a checkpoint RPC failure is swallowed and the edit still applies", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch, {
-      captureCheckpoint: async () => {
-        throw new Error("offline");
-      },
-    });
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "edit_document",
-        { edits: [{ op: "insert", parentId: screenId, node: { type: "view" } }] },
-        { turnId: "turn-1" },
-      ),
-    );
-    expect(result.isError).toBe(false);
-  });
-
-  test("duplicate_subtree preserves a visual group and mints fresh ids", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-    const inserted = await runDesignerTool(
-      deps,
-      call(
-        "edit_document",
-        {
-          edits: [
-            {
-              op: "insert",
-              parentId: screenId,
-              node: {
-                type: "view",
-                name: "Benefit",
-                style: { gap: 8 },
-                children: [{ type: "text", text: "Unlimited access" }],
-              },
-            },
-          ],
-        },
-        { turnId: "turn-insert" },
-      ),
-    );
-    const sourceId = (
-      JSON.parse(textOutput(inserted)) as {
-        mintedIds: Record<string, string[]>;
-      }
-    ).mintedIds["0"]![0]!;
-
-    const duplicated = await runDesignerTool(
-      deps,
-      call(
-        "duplicate_subtree",
-        { nodeId: sourceId, parentId: screenId, name: "Second benefit" },
-        { turnId: "turn-duplicate" },
-      ),
-    );
-    expect(duplicated.isError).toBe(false);
-    const duplicatedIds = (
-      JSON.parse(textOutput(duplicated)) as {
-        mintedIds: Record<string, string[]>;
-      }
-    ).mintedIds["0"];
-    expect(duplicatedIds).toHaveLength(2);
-
-    const screen = await runDesignerTool(deps, call("get_document", { nodeId: screenId }));
-    const output = textOutput(screen);
-    expect(output).toContain("Second benefit");
-    expect(output.match(/Unlimited access/g)).toHaveLength(2);
-  });
-});
-
-describe("runDesignerTool — components", () => {
-  test("write_component compiles then creates a new local component", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "write_component",
-        { path: "components/hero.tsx", source: "export default () => null;" },
-        { turnId: "turn-1" },
-      ),
-    );
-    expect(result.isError).toBe(false);
-    expect(result.output).toContain("Created");
-    // Reseeds the open Monaco buffer for the canonical path.
-    expect(deps.handle.reseeds).toEqual([
-      { key: "components/hero.tsx", source: "export default () => null;" },
-    ]);
-    // The definition landed in the document library.
-    const nodes = store.getState().mimic.snapshot;
-    expect(JSON.stringify(nodes)).toContain("components/hero.tsx");
-  });
-
-  test("write_component UPDATES an existing component's source (via the undoable save)", async () => {
-    const doc = createOfflineDesignerDocument();
-    insertComponent(doc, "components/hero.tsx", "export const Old = 1;");
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "write_component",
-        { path: "components/hero.tsx", source: "export const New = 2;" },
-        { turnId: "turn-1" },
-      ),
-    );
-    expect(result.isError).toBe(false);
-    // Existing path → "Updated", not "Created".
-    expect(result.output).toContain("Updated");
-    const snapshot = JSON.stringify(store.getState().mimic.snapshot);
-    expect(snapshot).toContain("export const New = 2;");
-    expect(snapshot).not.toContain("export const Old = 1;");
-    // The open Monaco buffer is reseeded with the new source.
-    expect(deps.handle.reseeds).toEqual([
-      { key: "components/hero.tsx", source: "export const New = 2;" },
-    ]);
-  });
-
-  test("write_component compile failure commits NOTHING", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch, {
-      compile: async (): Promise<PipelineResult> => ({
-        ok: false,
-        diagnostics: [{ message: "Unexpected token", phase: "compile", line: 1 }],
-      }),
-    });
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "write_component",
-        { path: "components/broken.tsx", source: "export default (" },
-        { turnId: "turn-1" },
-      ),
-    );
-    expect(result.isError).toBe(true);
-    expect(result.output).toContain("did not compile");
-    expect(result.output).toContain("Unexpected token");
-    // No definition created, no buffer reseeded.
-    expect(JSON.stringify(store.getState().mimic.snapshot)).not.toContain("components/broken.tsx");
-    expect(deps.handle.reseeds).toEqual([]);
-  });
-
-  test("read_component returns the local source by path", async () => {
-    const doc = createOfflineDesignerDocument();
-    insertComponent(doc, "components/widget.tsx", "// widget source");
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(
-      deps,
-      call("read_component", { path: "components/widget.tsx" }),
-    );
-    expect(result).toEqual({ output: "// widget source", isError: false });
-  });
-
-  test("rename_component renames the definition and drives a Monaco rename", async () => {
-    const doc = createOfflineDesignerDocument();
-    insertComponent(doc, "components/widget.tsx", "// widget");
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(
-      deps,
-      call(
-        "rename_component",
-        { fromPath: "components/widget.tsx", toPath: "components/hero.tsx" },
-        { turnId: "turn-1" },
-      ),
-    );
-    expect(result.isError).toBe(false);
-    expect(deps.handle.renames).toEqual([
-      { from: "components/widget.tsx", to: "components/hero.tsx" },
-    ]);
-    expect(JSON.stringify(store.getState().mimic.snapshot)).toContain("components/hero.tsx");
-  });
-
-  test("delete_component removes the definition", async () => {
-    const doc = createOfflineDesignerDocument();
-    insertComponent(doc, "components/widget.tsx", "// widget");
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(
-      deps,
-      call("delete_component", { path: "components/widget.tsx" }, { turnId: "turn-1" }),
-    );
-    expect(result.isError).toBe(false);
-    expect(JSON.stringify(store.getState().mimic.snapshot)).not.toContain("components/widget.tsx");
-  });
-
-  test("get_components lists local components (manifest note when un-compiled)", async () => {
-    const doc = createOfflineDesignerDocument();
-    insertComponent(doc, "components/widget.tsx", "// widget");
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch);
-
-    const result = await runDesignerTool(deps, call("get_components", {}));
-    expect(result.isError).toBe(false);
-    const parsed = JSON.parse(textOutput(result)) as {
-      catalog: unknown[];
-      local: Array<{ path: string; note?: string }>;
-    };
-    expect(parsed.local[0]?.path).toBe("components/widget.tsx");
-    expect(parsed.local[0]?.note).toContain("not compiled");
-  });
-});
-
-describe("runDesignerTool — read_paywall + guards", () => {
-  test("read_paywall returns the other paywall's cleaned document JSON", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch, {
-      readPaywallDocument: async (projectId, slug) => {
-        expect(projectId).toBe("proj-1");
-        expect(slug).toBe("other");
-        return {
-          slug: "other",
-          name: "Other",
-          paywallId: "pw-2",
-          document: { id: "root", type: "root" },
-        };
-      },
-    });
-
-    const result = await runDesignerTool(deps, call("read_paywall", { slug: "other" }));
-    expect(result.isError).toBe(false);
-    const parsed = JSON.parse(textOutput(result)) as {
-      slug: string;
-      document: { type: string };
-    };
-    expect(parsed.slug).toBe("other");
-    expect(parsed.document.type).toBe("root");
-  });
-
-  test("read_paywall folds an RPC failure into an error string", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch, {
-      readPaywallDocument: async () => {
-        throw new Error("not found");
-      },
-    });
-
-    const result = await runDesignerTool(deps, call("read_paywall", { slug: "ghost" }));
-    expect(result.isError).toBe(true);
-    expect(result.output).toContain("not found");
-  });
-
-  test("no open paywall (null target) folds a mutating tool into an error", async () => {
-    const doc = createOfflineDesignerDocument();
-    const { store, dispatch } = await makeStore(doc);
-    const deps = makeDeps(store, dispatch, { target: null });
-
-    const result = await runDesignerTool(deps, call("get_document", {}));
-    expect(result).toEqual({ output: "No paywall is open to edit.", isError: true });
-  });
-});
-
-describe("renderCompileDiagnostics", () => {
-  test("renders phase, message, and location", () => {
-    const rendered = renderCompileDiagnostics([
-      { message: "boom", phase: "compile", line: 3, column: 5 },
-    ]);
-    expect(rendered).toContain("[compile] boom");
-    expect(rendered).toContain("line 3:5");
-  });
-});
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
deleted file mode 100644
index bfc2380bd..000000000
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-executor.ts
+++ /dev/null
@@ -1,845 +0,0 @@
-"use client";
-
-import {
-  designerToolSchemas,
-  editDocumentResultSchema,
-  serializeDocument,
-  type DesignerToolName,
-  type DocumentEdit,
-  type NodeInput,
-  type PreviewScreenshotToolOutput,
-} from "@voidhash/ai-shared";
-import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
-import { listBuiltinComponents } from "@voidhash/paywall-builtins";
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { docRelativeFromFileName, validateComponentFileName } from "@voidhash/paywall-workspace";
-import { useParams } from "@tanstack/react-router";
-import { useCallback, useEffect, useMemo, useRef } from "react";
-import type { z } from "zod";
-
-import type { SurfaceToolCall, SurfaceToolResult } from "@/features/studio/ai";
-import { managedRuntime, VoidhashRpc } from "@/features/studio/lib/effect-query";
-
-import { useCodeEditor, type CodeEditorHandle } from "../code-mode/code-editor-context";
-import { CompilePipeline, type PipelineResult } from "../code-mode/compile-pipeline";
-import { hashSource } from "../code-mode/hash";
-import { uploadComponentManifest } from "../code-mode/manifest-upload";
-import { usePaywallCodeTarget, type PaywallCodeTarget } from "../hooks/use-paywall-code-target";
-import { closeTab, finishAiCanvasOperation, startAiCanvasOperation } from "../state/actions";
-import {
-  createCodeComponent,
-  deleteCodeComponent,
-  renameComponentFile,
-  saveCodeComponentSource,
-} from "../state/actions/code-component-actions";
-import { applyDocumentEdits } from "../state/actions/document-edit-actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-  type PaywallDesignerDispatch,
-  type PaywallDesignerStoreType,
-} from "../state/designer-store";
-import type { AgentCanvasOperation } from "../state/designer-store-state";
-import {
-  codeComponentDefinitions,
-  componentFileName,
-  definitionForComponentPath,
-  selectCodeComponentNodes,
-} from "../state/utils/code-components";
-import { selectDocumentRoot } from "../state/utils/document-root";
-import { findNodeById, flattenTree } from "../state/utils/tree";
-import {
-  captureDesignerNodeScreenshot,
-  inspectRenderedNodeLayouts,
-  type DesignerNodeScreenshot,
-  type RenderedNodeLayout,
-} from "./canvas-capture";
-
-/** Result of reading another paywall's cleaned document (`read_paywall`). */
-interface ReadPaywallDocumentResult {
-  slug: string;
-  name: string;
-  paywallId: string;
-  document: unknown;
-}
-
-/**
- * The seam {@link runDesignerTool} operates through — the designer store +
- * dispatch, the open-paywall target (or `null`), the route paywall id, the
- * optional Monaco handle (buffers only exist while code mode is open), a compile
- * pipeline for `write_component`, browser-render inspection/capture seams, and
- * the two RPC callbacks (`read_paywall` and the per-turn checkpoint).
- * `capturedTurns` tracks which turns already captured a checkpoint so the runner
- * (which is re-invoked per tool call) fires it at most once per turn. Injected so
- * the runner is a plain function testable against a real store without React.
- */
-export interface DesignerToolDeps {
-  store: PaywallDesignerStoreType;
-  dispatch: PaywallDesignerDispatch;
-  target: PaywallCodeTarget | null;
-  paywallId: string | null;
-  /** The open Monaco editor handle, or `null` when code mode is not mounted. */
-  handle: CodeEditorHandle | null;
-  /** Compiles a component's TSX to a manifest/preview trees (or diagnostics). */
-  compile: (source: string) => Promise<PipelineResult>;
-  /** Reads ANOTHER paywall's cleaned document JSON for reference (`read_paywall`). */
-  readPaywallDocument: (projectId: string, slug: string) => Promise<ReadPaywallDocumentResult>;
-  /**
-   * Captures the pre-turn document checkpoint for a mutating turn (best-effort;
-   * server is first-write-wins). Rejects only on a genuine RPC failure.
-   */
-  captureCheckpoint: (input: {
-    chatId: string;
-    turnId: string;
-    paywallId: string;
-  }) => Promise<{ captured: boolean }>;
-  /** Turn ids that already captured (or attempted) a checkpoint this session. */
-  capturedTurns: Set<string>;
-  /** Captures one live rendered document node as a PNG. */
-  captureNodeScreenshot: (nodeId: string, scale: 1 | 2) => Promise<DesignerNodeScreenshot>;
-  /** Reads actual browser layout for rendered document nodes. */
-  inspectRenderedLayouts: (
-    nodeIds: readonly string[],
-    screenId: string,
-    canvasScale: number,
-  ) => RenderedNodeLayout[];
-  /** Last successful visual review in this executor session. */
-  reviewState: { lastScreenshot?: { documentSignature: string; nodeId: string } };
-}
-
-/** The mutating designer tools — the ones that take a pre-turn checkpoint. */
-const MUTATING_TOOLS: ReadonlySet<DesignerToolName> = new Set([
-  "edit_document",
-  "duplicate_subtree",
-  "write_component",
-  "rename_component",
-  "delete_component",
-]);
-
-/**
- * Runs one validated designer client-tool call against the CURRENTLY OPEN paywall
- * (its mimic document + local components) and folds every outcome — success OR
- * failure — into a model-facing `{ output, isError }` result. Screenshot review
- * returns structured multimodal content; every other tool returns text. NEVER
- * throws for an expected tool/runtime failure.
- *
- * Composition is authored as mimic document edits (`edit_document` → the
- * `applyDocumentEdits` store action); there is no code fork or apply step. Code
- * components are compiled in-browser and written straight to the document. Before
- * the FIRST mutating tool call of a turn a pre-turn server checkpoint is captured
- * (best-effort — an RPC failure is logged and the tool proceeds). `read_paywall`
- * is the only cross-paywall (read-only) tool.
- *
- * Input is validated by the caller ({@link useDesignerToolExecutor}); this runner
- * assumes `call.input` already matches the tool's schema.
- */
-export async function runDesignerTool(
-  deps: DesignerToolDeps,
-  call: SurfaceToolCall,
-): Promise<SurfaceToolResult> {
-  const { store, dispatch, target, paywallId, handle } = deps;
-  const name = call.toolName as DesignerToolName;
-  const input = call.input;
-
-  // `read_paywall` reads ANOTHER paywall's document — no open paywall needed
-  // beyond the project the route resolves.
-  if (name === "read_paywall") {
-    return readPaywall((input as { slug: string }).slug);
-  }
-
-  // `get_document` / `get_components` / `read_component` need the open document
-  // but not a checkpoint (read-only). The mutating tools additionally checkpoint.
-  if (target === null || paywallId === null) {
-    return { output: "No paywall is open to edit.", isError: true };
-  }
-
-  if (MUTATING_TOOLS.has(name)) {
-    await ensureCheckpoint(deps, call.chatId, call.turnId, paywallId);
-  }
-
-  switch (name) {
-    case "get_document": {
-      const { nodeId, depth } = input as { nodeId?: string; depth?: number };
-      return getDocument(nodeId, depth);
-    }
-    case "get_rendered_layout":
-      return getRenderedLayout((input as { nodeIds?: readonly string[] }).nodeIds);
-    case "get_preview_screenshot": {
-      const { nodeId, scale = 1 } = input as { nodeId?: string; scale?: 1 | 2 };
-      return getPreviewScreenshot(nodeId, scale);
-    }
-    case "get_components":
-      return getComponents();
-    case "read_component":
-      return readComponent((input as { path: string }).path);
-    case "edit_document":
-      return editDocument((input as { edits: readonly DocumentEdit[] }).edits);
-    case "duplicate_subtree": {
-      const {
-        nodeId,
-        parentId,
-        index,
-        name: nextName,
-      } = input as {
-        nodeId: string;
-        parentId: string;
-        index?: number;
-        name?: string;
-      };
-      return duplicateSubtree(nodeId, parentId, index, nextName);
-    }
-    case "write_component": {
-      const { path, source } = input as { path: string; source: string };
-      return writeComponent(path, source);
-    }
-    case "rename_component": {
-      const { fromPath, toPath } = input as { fromPath: string; toPath: string };
-      return renameComponent(fromPath, toPath);
-    }
-    case "delete_component":
-      return deleteComponent((input as { path: string }).path);
-    case "finish_design": {
-      const { reviewedDocumentSignature, unresolvedIssues, verdict } = input as {
-        reviewedDocumentSignature: string;
-        unresolvedIssues: readonly string[];
-        verdict: string;
-      };
-      return finishDesign(reviewedDocumentSignature, verdict, unresolvedIssues);
-    }
-    default:
-      return { output: `Unknown tool "${name}".`, isError: true };
-  }
-
-  function getDocument(nodeId: string | undefined, depth: number | undefined): SurfaceToolResult {
-    const root = selectDocumentRoot(store.getState());
-    const cleaned = serializeDocument([root], { nodeId, depth });
-    if (cleaned === null) {
-      return { output: `No node "${nodeId}" in the document.`, isError: true };
-    }
-    return { output: JSON.stringify(cleaned), isError: false };
-  }
-
-  function getRenderedLayout(nodeIds: readonly string[] | undefined): SurfaceToolResult {
-    const root = selectDocumentRoot(store.getState());
-    const screen = screenNode(root);
-    if (screen === null) {
-      return { output: "The open paywall has no screen to inspect.", isError: true };
-    }
-    const requested =
-      nodeIds ??
-      flattenTree<SnapshotNode>(root)
-        .filter((node) => isVisualNode(node))
-        .slice(0, 100)
-        .map((node) => node.id);
-    try {
-      const layouts = deps.inspectRenderedLayouts(
-        requested,
-        screen.id,
-        store.getState().canvas.scale,
-      );
-      const missing = requested.filter(
-        (nodeId) => !layouts.some((layout) => layout.nodeId === nodeId),
-      );
-      return {
-        output: JSON.stringify({ screenId: screen.id, layouts, missingNodeIds: missing }),
-        isError: false,
-      };
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      return { output: `Could not inspect the live paywall layout: ${message}`, isError: true };
-    }
-  }
-
-  async function getPreviewScreenshot(
-    requestedNodeId: string | undefined,
-    scale: 1 | 2,
-  ): Promise<SurfaceToolResult> {
-    const rootBefore = selectDocumentRoot(store.getState());
-    const nodeId = requestedNodeId ?? screenNode(rootBefore)?.id;
-    if (nodeId === undefined) {
-      return { output: "The open paywall has no screen to capture.", isError: true };
-    }
-    const targetNode = findNodeById<SnapshotNode>(rootBefore, nodeId);
-    if (targetNode === null) {
-      return { output: `No node "${nodeId}" in the document.`, isError: true };
-    }
-    if (!isVisualNode(targetNode)) {
-      return { output: `Node "${nodeId}" is not a visual canvas node.`, isError: true };
-    }
-    const signatureBefore = documentSignature(rootBefore);
-    let screenshot: DesignerNodeScreenshot;
-    try {
-      screenshot = await deps.captureNodeScreenshot(nodeId, scale);
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      return { output: `Could not capture the live paywall preview: ${message}`, isError: true };
-    }
-    const signatureAfter = documentSignature(selectDocumentRoot(store.getState()));
-    if (signatureAfter !== signatureBefore) {
-      return {
-        output:
-          "The paywall changed while the screenshot was rendering. Capture it again before reviewing.",
-        isError: true,
-      };
-    }
-    deps.reviewState.lastScreenshot = { documentSignature: signatureAfter, nodeId };
-    const output: PreviewScreenshotToolOutput = {
-      kind: "preview-screenshot",
-      mediaType: "image/png",
-      dataBase64: screenshot.dataBase64,
-      width: screenshot.width,
-      height: screenshot.height,
-      scale: screenshot.scale,
-      documentSignature: signatureAfter,
-      message:
-        "Review this live paywall render, state a concise checkpoint verdict, and correct every visible issue before finishing.",
-    };
-    return { output, isError: false };
-  }
-
-  function getComponents(): SurfaceToolResult {
-    const state = store.getState();
-    const catalog = Object.values(state.componentCatalog.components).map((entry) => ({
-      kind: "catalog" as const,
-      slug: entry.slug,
-      title: entry.title,
-      version: entry.latestVersion,
-      description: entry.latest.manifest.description,
-      props: entry.latest.manifest.props,
-      actions: entry.latest.manifest.actions,
-      previewStates: entry.latest.previewStates,
-      slot: entry.latest.manifest.slot ?? false,
-    }));
-
-    const localDefinitions = codeComponentDefinitions(selectCodeComponentNodes(state));
-    const local = localDefinitions.map((definition) => {
-      const manifest = state.codeComponents.compiled[definition.id]?.artifact?.manifest;
-      return manifestSummary(definition.path, manifest);
-    });
-
-    // Slot builtins are hidden for now — the edit canvas cannot mount document
-    // children inside the builtin preact island yet (matches the add-component
-    // dialog's filter).
-    const builtins = listBuiltinComponents()
-      .filter((builtin) => builtin.manifest.slot !== true)
-      .map((builtin) => ({
-        kind: "builtin" as const,
-        slug: builtin.slug,
-        name: builtin.name,
-        description: builtin.description,
-        props: builtin.manifest.props,
-        actions: builtin.manifest.actions,
-        previewStates: builtin.manifest.previewStates,
-        slot: builtin.manifest.slot ?? false,
-        // Builtins are first-party and UNPINNED: place them with these identity
-        // fields only — no componentVersion/contentHash/componentPath.
-        insertAs: { componentSource: "builtin", componentSlug: builtin.slug },
-      }));
-
-    return { output: JSON.stringify({ catalog, local, builtins }), isError: false };
-  }
-
-  function readComponent(path: string): SurfaceToolResult {
-    const definition = definitionForComponentPath(store.getState(), path);
-    if (definition === undefined) {
-      return { output: `No local component "${path}".`, isError: true };
-    }
-    return { output: definition.source, isError: false };
-  }
-
-  function editDocument(edits: readonly DocumentEdit[]): SurfaceToolResult {
-    const { result } = dispatch(applyDocumentEdits)({ edits });
-    // Build the wire result through the shared schema (the designer-surface wire
-    // contract) so it can never drift from the type MCP/backend agree on. The
-    // validator errors are the model-facing convergence signal — passed verbatim.
-    const wire = editDocumentResultSchema.parse(
-      result.ok ? { ok: true, mintedIds: result.mintedIds } : { ok: false, errors: result.errors },
-    );
-    return { output: JSON.stringify(wire), isError: !result.ok };
-  }
-
-  function duplicateSubtree(
-    nodeId: string,
-    parentId: string,
-    index: number | undefined,
-    nextName: string | undefined,
-  ): SurfaceToolResult {
-    const root = selectDocumentRoot(store.getState());
-    const source = findNodeById<SnapshotNode>(root, nodeId);
-    if (source === null) {
-      return { output: `No node "${nodeId}" in the document.`, isError: true };
-    }
-    if (!isVisualNode(source)) {
-      return {
-        output: `Cannot duplicate engine-managed ${source.type} node "${nodeId}".`,
-        isError: true,
-      };
-    }
-    const node = cloneNodeInput(source);
-    if (nextName !== undefined) {
-      node.name = nextName;
-    }
-    return editDocument([
-      { op: "insert", parentId, ...(index === undefined ? {} : { index }), node },
-    ]);
-  }
-
-  function finishDesign(
-    reviewedDocumentSignature: string,
-    verdict: string,
-    unresolvedIssues: readonly string[],
-  ): SurfaceToolResult {
-    if (unresolvedIssues.length > 0) {
-      return {
-        output: `Design review still has unresolved issues: ${unresolvedIssues.join("; ")}. Correct them and capture a new screenshot.`,
-        isError: true,
-      };
-    }
-    const review = deps.reviewState.lastScreenshot;
-    if (review === undefined || review.documentSignature !== reviewedDocumentSignature) {
-      return {
-        output:
-          "finish_design requires the exact signature from this session's latest successful get_preview_screenshot.",
-        isError: true,
-      };
-    }
-    const root = selectDocumentRoot(store.getState());
-    const screen = screenNode(root);
-    if (screen === null || review.nodeId !== screen.id) {
-      return {
-        output:
-          "The final review must use a full-screen get_preview_screenshot, not a subtree capture.",
-        isError: true,
-      };
-    }
-    const current = documentSignature(root);
-    if (current !== reviewedDocumentSignature) {
-      return {
-        output:
-          "The paywall changed after the final screenshot. Review the current render again before finishing.",
-        isError: true,
-      };
-    }
-    return {
-      output: `Visual review complete for document ${current}. Verdict: ${verdict}`,
-      isError: false,
-    };
-  }
-
-  async function writeComponent(rawPath: string, source: string): Promise<SurfaceToolResult> {
-    const fileName = componentFileName(rawPath.trim());
-    const invalid = validateComponentFileName(fileName);
-    if (invalid !== undefined) {
-      return { output: `Cannot write "${rawPath}": ${invalid}`, isError: true };
-    }
-    const path = docRelativeFromFileName(fileName);
-
-    // Compile FIRST — commit nothing on a compile/runtime error.
-    const compiled = await deps.compile(source);
-    if (!compiled.ok) {
-      return {
-        output: `Component did not compile — nothing was written:\n${renderCompileDiagnostics(
-          compiled.diagnostics,
-        )}`,
-        isError: true,
-      };
-    }
-
-    const existing = existingDefinitionId(path);
-    if (existing !== undefined) {
-      // Route the update through the undoable save action (the same path Monaco's
-      // manual save uses) — one save, one undo entry — not a raw transaction.
-      dispatch(saveCodeComponentSource)({ nodeId: existing, source });
-    } else {
-      dispatch(createCodeComponent)({ fileName, source });
-    }
-
-    uploadComponentManifest(hashSource(source), compiled);
-    // Reseed the open Monaco buffer (if any) so the editor mirrors the write.
-    handle?.setBufferContent(path, source);
-
-    return {
-      output: `${existing !== undefined ? "Updated" : "Created"} component ${path}.`,
-      isError: false,
-    };
-  }
-
-  function renameComponent(fromPath: string, toPath: string): SurfaceToolResult {
-    const definitionId = existingDefinitionId(normalizeComponentPath(fromPath));
-    if (definitionId === undefined) {
-      return { output: `No local component "${fromPath}" to rename.`, isError: true };
-    }
-    const toFileName = componentFileName(toPath.trim());
-    const invalid = validateComponentFileName(toFileName);
-    if (invalid !== undefined) {
-      return { output: `Cannot rename to "${toPath}": ${invalid}`, isError: true };
-    }
-
-    const result = dispatch(renameComponentFile)({ id: definitionId, fileName: toFileName });
-    if (result.previousPath === null || result.nextPath === null) {
-      return {
-        output: `Could not rename "${fromPath}" to "${toPath}" (name collision or invalid name).`,
-        isError: true,
-      };
-    }
-    // Follow the move in Monaco (preserve text/view state) so open tabs update.
-    handle?.renameModel(result.previousPath, result.nextPath);
-    return { output: `Renamed ${result.previousPath} to ${result.nextPath}.`, isError: false };
-  }
-
-  function deleteComponent(rawPath: string): SurfaceToolResult {
-    const path = normalizeComponentPath(rawPath);
-    const definitionId = existingDefinitionId(path);
-    if (definitionId === undefined) {
-      return { output: `No local component "${rawPath}" to delete.`, isError: true };
-    }
-    dispatch(deleteCodeComponent)({ id: definitionId });
-    // Close any open tab for the deleted component's file.
-    if (store.getState().codeComponents.openTabs.includes(path)) {
-      dispatch(closeTab)({ path });
-    }
-    return {
-      output: `Deleted component ${path}. Existing instances now render a placeholder — replace or remove them.`,
-      isError: false,
-    };
-  }
-
-  /** Resolves a component path (any accepted form) to its definition node id, if present. */
-  function existingDefinitionId(path: string): string | undefined {
-    return definitionForComponentPath(store.getState(), path)?.id;
-  }
-
-  async function readPaywall(readSlug: string): Promise<SurfaceToolResult> {
-    if (target === null) {
-      return { output: "No project is open.", isError: true };
-    }
-    try {
-      const result = await deps.readPaywallDocument(target.projectId, readSlug);
-      return {
-        output: JSON.stringify({ slug: result.slug, name: result.name, document: result.document }),
-        isError: false,
-      };
-    } catch (error) {
-      return {
-        output: `Could not read paywall "${readSlug}": ${unwrapRpcError(error)}`,
-        isError: true,
-      };
-    }
-  }
-}
-
-type VisualSnapshotNode = Exclude<
-  SnapshotNode,
-  Extract<SnapshotNode, { type: "root" | "library" | "codeComponent" }>
->;
-
-/** Whether a snapshot node is directly authorable/visible on the paywall canvas. */
-function isVisualNode(node: SnapshotNode): node is VisualSnapshotNode {
-  return node.type !== "root" && node.type !== "library" && node.type !== "codeComponent";
-}
-
-/** The first screen in a document root, or null for a malformed/empty document. */
-function screenNode(root: SnapshotNode): Extract<SnapshotNode, { type: "screen" }> | null {
-  const screen = flattenTree<SnapshotNode>(root).find((node) => node.type === "screen");
-  return screen?.type === "screen" ? screen : null;
-}
-
-/** Convert an existing visual snapshot subtree into an id-free insert payload. */
-function cloneNodeInput(node: VisualSnapshotNode): NodeInput {
-  const data = structuredClone(node.data) as Record<string, unknown>;
-  const children = node.children.filter(isVisualNode).map(cloneNodeInput);
-  return {
-    type: node.type,
-    ...data,
-    ...(children.length === 0 ? {} : { children }),
-  };
-}
-
-/** Stable, compact signature used to prove the final screenshot matches the document. */
-export function documentSignature(root: SnapshotNode): string {
-  const input = JSON.stringify(root);
-  let hash = 2_166_136_261;
-  for (let index = 0; index < input.length; index += 1) {
-    hash ^= input.charCodeAt(index);
-    hash = Math.imul(hash, 16_777_619);
-  }
-  return `doc-${(hash >>> 0).toString(16).padStart(8, "0")}`;
-}
-
-type AgentToolActivity = Pick<AgentCanvasOperation, "label" | "nodeIds" | "phase">;
-
-/** Describe a tool call for the live canvas indicator, including affected nodes. */
-export function describeDesignerToolActivity(
-  toolName: DesignerToolName,
-  input: unknown,
-  root: SnapshotNode,
-): AgentToolActivity {
-  const screenId = screenNode(root)?.id;
-  const withScreen = screenId === undefined ? [] : [screenId];
-  switch (toolName) {
-    case "get_document": {
-      const nodeId = (input as { nodeId?: string }).nodeId;
-      return {
-        label: "Inspecting document structure",
-        nodeIds: nodeId ? [nodeId] : withScreen,
-        phase: "inspecting",
-      };
-    }
-    case "get_rendered_layout": {
-      const nodeIds = (input as { nodeIds?: readonly string[] }).nodeIds;
-      return {
-        label: "Measuring rendered layout",
-        nodeIds: nodeIds ?? withScreen,
-        phase: "inspecting",
-      };
-    }
-    case "get_preview_screenshot": {
-      const nodeId = (input as { nodeId?: string }).nodeId;
-      return {
-        label: "Reviewing the live preview",
-        nodeIds: nodeId ? [nodeId] : withScreen,
-        phase: "reviewing",
-      };
-    }
-    case "get_components":
-      return { label: "Inspecting available components", nodeIds: [], phase: "inspecting" };
-    case "read_component":
-      return {
-        label: `Reading ${(input as { path: string }).path}`,
-        nodeIds: [],
-        phase: "inspecting",
-      };
-    case "read_paywall":
-      return {
-        label: `Comparing ${(input as { slug: string }).slug}`,
-        nodeIds: [],
-        phase: "inspecting",
-      };
-    case "edit_document": {
-      const edits = (input as { edits: readonly DocumentEdit[] }).edits;
-      const nodeIds = edits.flatMap((edit) => {
-        if (edit.op === "insert") return [edit.parentId];
-        if (edit.op === "move") return [edit.nodeId, edit.parentId];
-        return [edit.nodeId];
-      });
-      return { label: "Editing the paywall", nodeIds: [...new Set(nodeIds)], phase: "editing" };
-    }
-    case "duplicate_subtree": {
-      const { nodeId, parentId } = input as { nodeId: string; parentId: string };
-      return { label: "Duplicating a visual group", nodeIds: [nodeId, parentId], phase: "editing" };
-    }
-    case "write_component":
-    case "rename_component":
-    case "delete_component": {
-      const path =
-        toolName === "rename_component"
-          ? normalizeComponentPath((input as { fromPath: string }).fromPath)
-          : normalizeComponentPath((input as { path: string }).path);
-      const nodeIds = flattenTree<SnapshotNode>(root)
-        .filter(
-          (node) =>
-            node.type === "component" &&
-            node.data.componentSource === "local" &&
-            node.data.componentPath === path,
-        )
-        .map((node) => node.id);
-      return {
-        label:
-          toolName === "write_component"
-            ? `Building ${path}`
-            : toolName === "rename_component"
-              ? `Renaming ${path}`
-              : `Removing ${path}`,
-        nodeIds,
-        phase: "editing",
-      };
-    }
-    case "finish_design":
-      return { label: "Finishing visual review", nodeIds: withScreen, phase: "finishing" };
-  }
-}
-
-/**
- * Captures the per-turn pre-mutation checkpoint at most once per turn.
- * Best-effort: a missing `turnId` skips it (nothing to key on) and an RPC failure
- * is logged and swallowed (the server is first-write-wins, so a later retry is
- * safe and a failed capture must not block the edit).
- */
-async function ensureCheckpoint(
-  deps: DesignerToolDeps,
-  chatId: string,
-  turnId: string | undefined,
-  paywallId: string,
-): Promise<void> {
-  if (turnId === undefined || deps.capturedTurns.has(turnId)) {
-    return;
-  }
-  deps.capturedTurns.add(turnId);
-  try {
-    await deps.captureCheckpoint({ chatId, turnId, paywallId });
-  } catch (error) {
-    console.warn("[designer-ai] checkpoint capture failed; proceeding", error);
-  }
-}
-
-/**
- * Normalizes a model-supplied component path to the canonical
- * `components/<name>.tsx` document-relative form used as the definition identity.
- */
-function normalizeComponentPath(rawPath: string): string {
-  return docRelativeFromFileName(componentFileName(rawPath.trim()));
-}
-
-/** A `get_components` entry for a local component, degrading gracefully when un-compiled. */
-function manifestSummary(
-  path: string,
-  manifest: ComponentManifest | undefined,
-):
-  | {
-      kind: "local";
-      path: string;
-      title?: string;
-      description?: string;
-      props: ComponentManifest["props"];
-      actions: ComponentManifest["actions"];
-      previewStates?: readonly string[];
-      slot: boolean;
-    }
-  | { kind: "local"; path: string; note: string } {
-  if (manifest === undefined) {
-    return {
-      kind: "local",
-      path,
-      note: "manifest unavailable (component not compiled yet — open it in code mode or write it to compile).",
-    };
-  }
-  return {
-    kind: "local",
-    path,
-    title: manifest.title,
-    description: manifest.description,
-    props: manifest.props,
-    actions: manifest.actions,
-    previewStates: manifest.previewStates,
-    slot: manifest.slot ?? false,
-  };
-}
-
-/** Renders compile diagnostics into a readable block for the model. */
-export function renderCompileDiagnostics(
-  diagnostics: readonly { message: string; line?: number; column?: number; phase: string }[],
-): string {
-  return diagnostics
-    .map((diagnostic) => {
-      const at =
-        diagnostic.line !== undefined
-          ? ` (line ${diagnostic.line}${diagnostic.column !== undefined ? `:${diagnostic.column}` : ""})`
-          : "";
-      return `  - [${diagnostic.phase}] ${diagnostic.message}${at}`;
-    })
-    .join("\n");
-}
-
-/**
- * Unwraps an effect-query RPC failure to a readable message. effect-query wraps
- * the RPC error (a tagged failure under a `Rpc/`-tagged cause / a `.failure`
- * field); we surface the innermost human message when present, else the raw one.
- */
-function unwrapRpcError(error: unknown): string {
-  if (error !== null && typeof error === "object") {
-    const failure = (error as { failure?: unknown }).failure;
-    if (failure !== null && typeof failure === "object" && "message" in failure) {
-      return String((failure as { message: unknown }).message);
-    }
-    if ("message" in error) {
-      return String((error as { message: unknown }).message);
-    }
-  }
-  return String(error);
-}
-
-/**
- * The designer client-tool executor hook. Returns an `executeTool` function
- * matching {@link @/features/studio/ai#SurfaceAgent.executeTool}: it validates
- * each call's input against the shared {@link designerToolSchemas} and delegates
- * to {@link runDesignerTool} against the open paywall's mimic document + local
- * components. A schema failure or an unknown tool is folded into a readable error
- * result; the executor NEVER throws into the AI SDK.
- */
-export function useDesignerToolExecutor(): (call: SurfaceToolCall) => Promise<SurfaceToolResult> {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { handle } = useCodeEditor();
-  const target = usePaywallCodeTarget();
-  const { id: paywallId = null } = useParams({ strict: false });
-
-  // One compile pipeline per executor mount (owns an esbuild worker + sandbox);
-  // destroyed on unmount.
-  const pipeline = useMemo(() => new CompilePipeline(), []);
-  useEffect(() => () => pipeline.destroy(), [pipeline]);
-
-  // Turn ids that already captured a checkpoint this mount (survives the
-  // per-call re-invocation of the pure runner).
-  const capturedTurns = useRef<Set<string>>(new Set());
-  const reviewState = useRef<DesignerToolDeps["reviewState"]>({});
-
-  return useCallback(
-    async (call: SurfaceToolCall): Promise<SurfaceToolResult> => {
-      const schema = designerToolSchemas[call.toolName as DesignerToolName] as
-        | z.ZodTypeAny
-        | undefined;
-      if (schema === undefined) {
-        return { output: `Unknown tool "${call.toolName}".`, isError: true };
-      }
-      const parsed = schema.safeParse(call.input);
-      if (!parsed.success) {
-        const message = parsed.error.issues
-          .map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`)
-          .join("; ");
-        return { output: `Invalid input for ${call.toolName}: ${message}`, isError: true };
-      }
-
-      const activity = describeDesignerToolActivity(
-        call.toolName as DesignerToolName,
-        parsed.data,
-        selectDocumentRoot(store.getState()),
-      );
-      const startedAt = Date.now();
-      dispatch(startAiCanvasOperation)({ id: call.toolCallId, startedAt, ...activity });
-
-      const deps: DesignerToolDeps = {
-        store,
-        dispatch,
-        target,
-        paywallId,
-        handle,
-        capturedTurns: capturedTurns.current,
-        reviewState: reviewState.current,
-        captureNodeScreenshot: captureDesignerNodeScreenshot,
-        inspectRenderedLayouts: inspectRenderedNodeLayouts,
-        compile: (source) => pipeline.compile(source),
-        readPaywallDocument: (projectId, slug) =>
-          managedRuntime.runPromise(
-            VoidhashRpc.request((rpc) => rpc.ReadPaywallDocument({ projectId, slug })),
-          ),
-        captureCheckpoint: (checkpoint) =>
-          managedRuntime.runPromise(
-            VoidhashRpc.request((rpc) => rpc.CaptureAiCheckpoint(checkpoint)),
-          ),
-      };
-      try {
-        return await runDesignerTool(deps, { ...call, input: parsed.data });
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        return { output: `${call.toolName} failed: ${message}`, isError: true };
-      } finally {
-        const remaining = 500 - (Date.now() - startedAt);
-        if (remaining > 0) {
-          await new Promise<void>((resolve) => window.setTimeout(resolve, remaining));
-        }
-        dispatch(finishAiCanvasOperation)({ id: call.toolCallId });
-      }
-    },
-    [dispatch, handle, paywallId, pipeline, store, target],
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts
deleted file mode 100644
index 2cacdc7c1..000000000
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.test.ts
+++ /dev/null
@@ -1,81 +0,0 @@
-import { formatComponentPath, formatCompositionPath } from "@voidhash/paywall-workspace";
-import { describe, expect, test } from "vite-plus/test";
-
-import { displayToolPath, resolveToolPath } from "./tool-paths";
-
-const SLUG = "checkout";
-
-describe("resolveToolPath", () => {
-  test("resolves the composition by its bare name", () => {
-    expect(resolveToolPath(SLUG, "paywall.tsx")).toEqual({
-      ok: true,
-      path: formatCompositionPath(SLUG),
-    });
-  });
-
-  test("resolves a component by its relative name", () => {
-    expect(resolveToolPath(SLUG, "components/hero.tsx")).toEqual({
-      ok: true,
-      path: formatComponentPath(SLUG, "hero.tsx"),
-    });
-  });
-
-  test("strips a leading ./", () => {
-    expect(resolveToolPath(SLUG, "./paywall.tsx")).toEqual({
-      ok: true,
-      path: formatCompositionPath(SLUG),
-    });
-  });
-
-  test("accepts an already-absolute path for THIS paywall", () => {
-    const absolute = formatComponentPath(SLUG, "hero.tsx");
-    expect(resolveToolPath(SLUG, absolute)).toEqual({ ok: true, path: absolute });
-  });
-
-  test("rejects an absolute path for a DIFFERENT paywall", () => {
-    const result = resolveToolPath(SLUG, formatComponentPath("other", "hero.tsx"));
-    expect(result.ok).toBe(false);
-    if (!result.ok) {
-      expect(result.reason).toContain("open paywall");
-    }
-  });
-
-  test("rejects the reserved /components/* namespace", () => {
-    const result = resolveToolPath(SLUG, "/components/shared.tsx");
-    expect(result.ok).toBe(false);
-  });
-
-  test("rejects a component name without .tsx", () => {
-    const result = resolveToolPath(SLUG, "components/hero");
-    expect(result.ok).toBe(false);
-    if (!result.ok) {
-      expect(result.reason).toContain(".tsx");
-    }
-  });
-
-  test("rejects a nested component path", () => {
-    expect(resolveToolPath(SLUG, "components/nested/hero.tsx").ok).toBe(false);
-  });
-
-  test("rejects an unknown top-level name", () => {
-    expect(resolveToolPath(SLUG, "index.ts").ok).toBe(false);
-  });
-
-  test("rejects an empty path", () => {
-    expect(resolveToolPath(SLUG, "   ").ok).toBe(false);
-  });
-});
-
-describe("displayToolPath", () => {
-  test("shows the composition as paywall.tsx", () => {
-    expect(displayToolPath(formatCompositionPath(SLUG))).toBe("paywall.tsx");
-  });
-
-  test("shows a component as components/<name>.tsx", () => {
-    expect(displayToolPath(formatComponentPath(SLUG, "hero.tsx"))).toBe("components/hero.tsx");
-  });
-
-  test("returns the raw path for an unrecognized input", () => {
-    expect(displayToolPath("/weird/path")).toBe("/weird/path");
-  });
-});
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts
deleted file mode 100644
index fe42cbbd9..000000000
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/tool-paths.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import {
-  COMPOSITION_FILENAME,
-  formatComponentPath,
-  formatCompositionPath,
-  parseWorkspacePath,
-} from "@voidhash/paywall-workspace";
-
-/**
- * Resolve a model-supplied file name to a workspace-absolute path within the
- * OPEN paywall (`paywallSlug`). The AI tools address files by their name within
- * the open paywall — `paywall.tsx` (the composition) or `components/<name>.tsx`
- * (a component) — so this scopes every write/read to that one paywall: the agent
- * cannot reach another paywall's files even by passing an absolute path.
- *
- * Accepts either the bare paywall-relative form (`paywall.tsx`,
- * `components/hero.tsx`) OR the already workspace-absolute form for THIS paywall
- * (`/paywalls/<slug>/…`). A path that resolves to a component file must end in
- * `.tsx`. Returns `{ ok: false, reason }` for anything else (a foreign paywall,
- * the reserved top-level `/components/*`, or a malformed name) so the executor
- * can fold it into a readable tool error.
- */
-export type ResolveToolPathResult =
-  | { readonly ok: true; readonly path: string }
-  | { readonly ok: false; readonly reason: string };
-
-export function resolveToolPath(paywallSlug: string, rawPath: string): ResolveToolPathResult {
-  const trimmed = rawPath.trim();
-  if (trimmed.length === 0) {
-    return { ok: false, reason: "path is empty" };
-  }
-
-  // Already workspace-absolute: accept only when it names a file in THIS paywall.
-  if (trimmed.startsWith("/")) {
-    const parsed = parseWorkspacePath(trimmed);
-    if (!parsed.ok) {
-      return { ok: false, reason: parsed.error.reason };
-    }
-    if (parsed.path.paywallSlug !== paywallSlug) {
-      return {
-        ok: false,
-        reason: `"${trimmed}" is not a file of the open paywall — you can only edit the open paywall.`,
-      };
-    }
-    return { ok: true, path: trimmed };
-  }
-
-  // Strip a leading `./` for convenience.
-  const relative = trimmed.startsWith("./") ? trimmed.slice(2) : trimmed;
-
-  if (relative === COMPOSITION_FILENAME) {
-    return { ok: true, path: formatCompositionPath(paywallSlug) };
-  }
-
-  const componentsPrefix = "components/";
-  if (relative.startsWith(componentsPrefix)) {
-    const fileName = relative.slice(componentsPrefix.length);
-    if (fileName.length === 0 || fileName.includes("/")) {
-      return { ok: false, reason: `invalid component file name in "${rawPath}"` };
-    }
-    if (!fileName.endsWith(".tsx")) {
-      return { ok: false, reason: `component file must end with ".tsx": "${rawPath}"` };
-    }
-    // Validate the assembled path through the canonical parser.
-    const candidate = formatComponentPath(paywallSlug, fileName);
-    const parsed = parseWorkspacePath(candidate);
-    if (!parsed.ok) {
-      return { ok: false, reason: parsed.error.reason };
-    }
-    return { ok: true, path: candidate };
-  }
-
-  return {
-    ok: false,
-    reason: `"${rawPath}" is not a file of the open paywall — use "paywall.tsx" or "components/<name>.tsx".`,
-  };
-}
-
-/**
- * The model-facing display name for a workspace-absolute path within the open
- * paywall — the inverse of {@link resolveToolPath}. `paywall.tsx` for the
- * composition, `components/<name>.tsx` for a component, or the raw path as a
- * fallback.
- */
-export function displayToolPath(workspacePath: string): string {
-  const parsed = parseWorkspacePath(workspacePath);
-  if (!parsed.ok) {
-    return workspacePath;
-  }
-  return parsed.path.kind === "composition"
-    ? COMPOSITION_FILENAME
-    : `components/${parsed.path.fileName}`;
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts
index 69a4431d4..911b406e6 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-ai-panel-offset.ts
@@ -10,7 +10,7 @@ import { usePaywallDesignerStore } from "../state/designer-store";
 /** Return the AI panel width only when the feature is enabled and the panel is open. */
 export function useAiPanelOffset(): number {
   const store = usePaywallDesignerStore();
-  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAi.key);
+  const enabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAiPi.key);
 
   return useStore(store, (state) => (enabled && state.ai.panelOpen ? state.ai.width : 0));
 }
diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
index fd940e68d..f55df3cde 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/use-designer-agent.ts
@@ -7,35 +7,21 @@ import type { SurfaceAgent } from "@/features/studio/ai";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 
-import { useCodeEditor } from "../code-mode/code-editor-context";
-import { finishAiCanvasOperation, startAiCanvasOperation } from "../state/actions";
-import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
+import { usePaywallDesignerStore } from "../state/designer-store";
 import { selectedNodeIdsFromPresence } from "../state/utils/presence";
-import { useDesignerToolExecutor } from "./tool-executor";
 
 /**
  * Assembles the designer {@link SurfaceAgent} consumed by the AI panel: its
  * surface id, the request context (organization / project / paywall ids resolved
- * from the route + the authenticated user), the client tool executor, and the
- * per-send hooks.
- *
- * The agent's tools are CLIENT-EXECUTED (the backend declares them schema-only
- * and ends the stream at a tool call; the chat auto-continues after the browser
- * runs the tool). {@link useDesignerToolExecutor} runs each tool directly against
- * the open paywall's mimic document.
+ * from the route + the authenticated user) and its live selection context.
  *
  * `getDynamicContext` carries the current node selection with each send (read on
- * demand, not subscribed). `beforeSend` saves the open Monaco buffers to their
- * `codeComponent` nodes so the agent reads the user's latest committed code — a
- * purely local, synchronous operation. `onActivityChange` mirrors coarse model
- * activity into the same transient canvas overlay used by individual tools.
+ * demand, not subscribed). All tools execute on the server against the same
+ * mimic document observed by the canvas.
  */
 export function useDesignerAgent(): SurfaceAgent {
   const { user } = useAuth();
   const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { handle } = useCodeEditor();
-  const executeTool = useDesignerToolExecutor();
   const { organizationSlug, projectSlug, id: paywallId } = useParams({ strict: false });
 
   const getDynamicContext = useCallback(
@@ -45,30 +31,6 @@ export function useDesignerAgent(): SurfaceAgent {
     [store],
   );
 
-  // Save the open Monaco buffers to their `codeComponent` nodes before each send
-  // so the client tool executor reads the user's latest committed code (a no-op
-  // when code mode is not open / nothing is dirty). Purely local + synchronous.
-  const beforeSend = useCallback(() => {
-    handle?.saveAll();
-  }, [handle]);
-
-  const onActivityChange = useCallback<NonNullable<SurfaceAgent["onActivityChange"]>>(
-    (activity) => {
-      if (activity.kind === "thinking") {
-        dispatch(startAiCanvasOperation)({
-          id: "agent-thinking",
-          label: activity.label,
-          nodeIds: [],
-          phase: "thinking",
-          startedAt: Date.now(),
-        });
-        return;
-      }
-      dispatch(finishAiCanvasOperation)({ id: "agent-thinking" });
-    },
-    [dispatch],
-  );
-
   const organization = useMemo(
     () =>
       organizationSlug
@@ -95,21 +57,10 @@ export function useDesignerAgent(): SurfaceAgent {
         paywallId,
       },
       getDynamicContext,
-      beforeSend,
-      executeTool,
-      onActivityChange,
       // Designer chats are context-specific and resumable: scoped to the paywall
       // and listed in the panel's history dropdown.
-      persistence: { chatType: "persistent" },
+      persistence: { mode: "persistent" },
     }),
-    [
-      organization?.id,
-      projectId,
-      paywallId,
-      getDynamicContext,
-      beforeSend,
-      executeTool,
-      onActivityChange,
-    ],
+    [organization?.id, projectId, paywallId, getDynamicContext],
   );
 }
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
index 76c5ff27d..0c0e51704 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
@@ -17,7 +17,6 @@ import {
   Loader2Icon,
   PanelLeftClose,
   PanelLeftOpen,
-  SparklesIcon,
 } from "lucide-react";
 import { useState } from "react";
 import { toast } from "sonner";
@@ -75,7 +74,7 @@ export function TopPanel() {
   const dispatch = usePaywallDesignerActions();
   const devModeEnabled = useStore(store, (state) => state.devMode.enabled);
   const aiPanelOpen = useStore(store, (state) => state.ai.panelOpen);
-  const aiEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAi.key);
+  const aiEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.voidhashAiPi.key);
 
   const [showPublishDialog, setShowPublishDialog] = useState(false);
   const [releaseInfo, setReleaseInfo] = useState<
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts
deleted file mode 100644
index aa899a3d2..000000000
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.test.ts
+++ /dev/null
@@ -1,285 +0,0 @@
-import type { DocumentEdit } from "@voidhash/ai-shared";
-import { describe, expect, test } from "vite-plus/test";
-
-import {
-  createOfflineDesignerDocument,
-  seededIds,
-  type OfflineDesignerDocument,
-} from "../testing/offline-document";
-import { selectDocumentRoot } from "../utils/document-root";
-import { unwrapEntriesDeep } from "../utils/replay";
-import { applyDocumentEdits } from "./document-edit-actions";
-
-/**
- * A minimal command context over an offline document, faithful enough for
- * `applyDocumentEdits`: `getState` exposes the live mimic snapshot (so
- * `selectDocumentRoot` + the validator read the current tree), `transaction`
- * runs against the document. Undo is exercised by calling `.revert` directly
- * with the captured do-result (mirroring how the commander replays it).
- */
-function makeCtx(doc: OfflineDesignerDocument) {
-  const ctx = {
-    dispatch:
-      <TParams, TReturn>(command: { fn: (c: unknown, p: TParams) => TReturn }) =>
-      (params: TParams): TReturn =>
-        command.fn(ctx, params),
-    getState: () => ({
-      mimic: {
-        document: doc,
-        snapshot: doc.getSnapshot(),
-      },
-    }),
-  };
-  return ctx;
-}
-
-/** Runs the do-fn and returns its `{ inverses, result }` payload. */
-function run(doc: OfflineDesignerDocument, edits: readonly DocumentEdit[]) {
-  const ctx = makeCtx(doc);
-  return applyDocumentEdits.fn(ctx as never, { edits });
-}
-
-/** Replays the undo (revert) for a previously run batch. */
-function undo(
-  doc: OfflineDesignerDocument,
-  edits: readonly DocumentEdit[],
-  result: ReturnType<typeof run>,
-) {
-  const ctx = makeCtx(doc);
-  applyDocumentEdits.revert(ctx as never, { edits }, result);
-}
-
-/** The current children ids of a node in the committed snapshot. */
-function childIds(doc: OfflineDesignerDocument, nodeId: string): string[] {
-  const find = (node: { id: string; children: readonly { id: string }[] }): {
-    id: string;
-    children: readonly { id: string }[];
-  } | null => {
-    if (node.id === nodeId) return node;
-    for (const child of node.children) {
-      const found = find(child as never);
-      if (found) return found;
-    }
-    return null;
-  };
-  const root = selectDocumentRoot({ mimic: { snapshot: doc.getSnapshot() } as never });
-  const node = find(root as never);
-  return node ? node.children.map((child) => child.id) : [];
-}
-
-/** The unwrapped `data` of a node in the committed snapshot. */
-function nodeData(doc: OfflineDesignerDocument, nodeId: string): Record<string, unknown> | null {
-  const proxy = doc.root.findByIdAcrossTree(nodeId);
-  return (proxy?.get()?.data as Record<string, unknown> | undefined) ?? null;
-}
-
-describe("applyDocumentEdits — validation", () => {
-  test("an invalid batch returns structured errors and opens no transaction", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const childrenBefore = childIds(doc, screenId);
-
-    const { inverses, result } = run(doc, [
-      { op: "insert", parentId: "does-not-exist", node: { type: "view" } },
-    ]);
-
-    expect(result.ok).toBe(false);
-    if (!result.ok) {
-      expect(result.errors[0]?.code).toBe("unknownParent");
-    }
-    // No inverse captured → no undo entry would be pushed; the document is untouched.
-    expect(inverses).toEqual([]);
-    expect(childIds(doc, screenId)).toEqual(childrenBefore);
-  });
-});
-
-describe("applyDocumentEdits — insert + undo", () => {
-  test("insert mints an id, returns it, and undo removes exactly the inserted subtree", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-
-    const edits: DocumentEdit[] = [
-      { op: "insert", parentId: screenId, node: { type: "view", children: [{ type: "text", text: "hi" }] } },
-    ];
-    const outcome = run(doc, edits);
-    expect(outcome.result.ok).toBe(true);
-    if (!outcome.result.ok) return;
-
-    const mintedForOp = outcome.result.mintedIds["0"];
-    // The whole subtree is minted, parent-first (view, then its text child).
-    expect(mintedForOp && mintedForOp.length).toBe(2);
-    const insertedId = mintedForOp![0]!;
-    expect(childIds(doc, screenId)).toContain(insertedId);
-
-    undo(doc, edits, outcome);
-    expect(childIds(doc, screenId)).not.toContain(insertedId);
-    expect(doc.root.findByIdAcrossTree(insertedId)).toBeUndefined();
-  });
-});
-
-describe("applyDocumentEdits — update merge + undo", () => {
-  test("style merge sets one field without wiping sibling fields, undo restores exactly", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-
-    // Seed a view with two style fields.
-    const seed = run(doc, [
-      {
-        op: "insert",
-        parentId: screenId,
-        node: { type: "view", style: { paddingTop: 10, paddingLeft: 4 } },
-      },
-    ]);
-    if (!seed.result.ok) throw new Error("seed failed");
-    const viewId = seed.result.mintedIds["0"]![0]!;
-
-    // Update ONLY paddingTop.
-    const edits: DocumentEdit[] = [{ op: "update", nodeId: viewId, set: { style: { paddingTop: 99 } } }];
-    const outcome = run(doc, edits);
-    expect(outcome.result.ok).toBe(true);
-
-    const style = nodeData(doc, viewId)?.style as Record<string, unknown>;
-    expect(style["paddingTop"]).toBe(99);
-    // Sibling field untouched by the per-key merge.
-    expect(style["paddingLeft"]).toBe(4);
-
-    // Undo restores the previous value exactly.
-    undo(doc, edits, outcome);
-    const restored = nodeData(doc, viewId)?.style as Record<string, unknown>;
-    expect(restored["paddingTop"]).toBe(10);
-    expect(restored["paddingLeft"]).toBe(4);
-  });
-
-  test("undo of an update that ADDED a field removes it again", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const seed = run(doc, [{ op: "insert", parentId: screenId, node: { type: "text", text: "hello" } }]);
-    if (!seed.result.ok) throw new Error("seed failed");
-    const textId = seed.result.mintedIds["0"]![0]!;
-    const before = nodeData(doc, textId)?.text;
-
-    const edits: DocumentEdit[] = [{ op: "update", nodeId: textId, set: { text: "changed" } }];
-    const outcome = run(doc, edits);
-    expect(nodeData(doc, textId)?.text).toBe("changed");
-
-    undo(doc, edits, outcome);
-    expect(nodeData(doc, textId)?.text).toBe(before);
-  });
-
-  test("undo of an update to a nested style sub-key restores the object EXACTLY", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const seed = run(doc, [
-      { op: "insert", parentId: screenId, node: { type: "view", style: { paddingTop: 10 } } },
-    ]);
-    if (!seed.result.ok) throw new Error("seed failed");
-    const viewId = seed.result.mintedIds["0"]![0]!;
-    // Snapshot the exact pre-edit style by LOGICAL value (CRDT array envelopes on
-    // e.g. gradient stops carry churny ids/pos — compare unwrapped).
-    const beforeStyle = unwrapEntriesDeep(nodeData(doc, viewId)?.style) as Record<string, unknown>;
-    expect(beforeStyle["shadowRadius"]).toBe(0);
-
-    const edits: DocumentEdit[] = [{ op: "update", nodeId: viewId, set: { style: { shadowRadius: 5 } } }];
-    const outcome = run(doc, edits);
-    const afterStyle = nodeData(doc, viewId)?.style as Record<string, unknown>;
-    expect(afterStyle["shadowRadius"]).toBe(5);
-    expect(afterStyle["paddingTop"]).toBe(10);
-
-    undo(doc, edits, outcome);
-    const restored = unwrapEntriesDeep(nodeData(doc, viewId)?.style) as Record<string, unknown>;
-    // The whole style returns to its prior LOGICAL value — shadowRadius back to
-    // its default, no leftover, every sibling untouched.
-    expect(restored).toEqual(beforeStyle);
-    expect(restored["shadowRadius"]).toBe(0);
-    expect(restored["paddingTop"]).toBe(10);
-  });
-});
-
-describe("applyDocumentEdits — overlapping batches are rejected (no transaction, no undo)", () => {
-  test("mutate-then-remove the SAME node is rejected before any write", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const seed = run(doc, [{ op: "insert", parentId: screenId, node: { type: "view" } }]);
-    if (!seed.result.ok) throw new Error("seed failed");
-    const viewId = seed.result.mintedIds["0"]![0]!;
-    const childrenBefore = childIds(doc, screenId);
-
-    const { inverses, result } = run(doc, [
-      { op: "update", nodeId: viewId, set: { name: "X" } },
-      { op: "remove", nodeId: viewId },
-    ]);
-
-    expect(result.ok).toBe(false);
-    if (!result.ok) {
-      expect(result.errors.some((e) => e.code === "overlappingEdits")).toBe(true);
-    }
-    // No inverse captured → no undo entry; the document is untouched.
-    expect(inverses).toEqual([]);
-    expect(childIds(doc, screenId)).toEqual(childrenBefore);
-  });
-
-  test("nested removes (child inside removed parent) are rejected before any write", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const seed = run(doc, [
-      { op: "insert", parentId: screenId, node: { type: "view", children: [{ type: "text", text: "hi" }] } },
-    ]);
-    if (!seed.result.ok) throw new Error("seed failed");
-    const viewId = seed.result.mintedIds["0"]![0]!;
-    const textId = seed.result.mintedIds["0"]![1]!;
-    const childrenBefore = childIds(doc, screenId);
-
-    const { inverses, result } = run(doc, [
-      { op: "remove", nodeId: viewId },
-      { op: "remove", nodeId: textId },
-    ]);
-
-    expect(result.ok).toBe(false);
-    if (!result.ok) {
-      expect(result.errors.some((e) => e.code === "overlappingEdits")).toBe(true);
-    }
-    expect(inverses).toEqual([]);
-    expect(childIds(doc, screenId)).toEqual(childrenBefore);
-  });
-});
-
-describe("applyDocumentEdits — batch atomicity + undo", () => {
-  test("a multi-op batch undoes to the exact prior tree in one revert", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const beforeChildren = childIds(doc, screenId);
-
-    const edits: DocumentEdit[] = [
-      { op: "insert", parentId: screenId, node: { type: "view" } },
-      { op: "insert", parentId: screenId, node: { type: "text", text: "a" } },
-    ];
-    const outcome = run(doc, edits);
-    expect(outcome.result.ok).toBe(true);
-    expect(childIds(doc, screenId).length).toBe(beforeChildren.length + 2);
-
-    undo(doc, edits, outcome);
-    expect(childIds(doc, screenId)).toEqual(beforeChildren);
-  });
-
-  test("remove captures the subtree and undo re-inserts it at its original index", () => {
-    const doc = createOfflineDesignerDocument();
-    const { screenId } = seededIds(doc);
-    const seed = run(doc, [
-      { op: "insert", parentId: screenId, node: { type: "view" } },
-      { op: "insert", parentId: screenId, node: { type: "text", text: "keep" } },
-    ]);
-    if (!seed.result.ok) throw new Error("seed failed");
-    const viewId = seed.result.mintedIds["0"]![0]!;
-    const orderBefore = childIds(doc, screenId);
-
-    const edits: DocumentEdit[] = [{ op: "remove", nodeId: viewId }];
-    const outcome = run(doc, edits);
-    expect(childIds(doc, screenId)).not.toContain(viewId);
-
-    undo(doc, edits, outcome);
-    // The subtree is restored at the same index (re-minted id, same position).
-    const orderAfter = childIds(doc, screenId);
-    expect(orderAfter.length).toBe(orderBefore.length);
-    expect(orderAfter.indexOf(orderAfter[0]!)).toBe(0);
-  });
-});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts
deleted file mode 100644
index ef599b2ea..000000000
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/document-edit-actions.ts
+++ /dev/null
@@ -1,427 +0,0 @@
-/**
- * The document-JSON edit action behind the AI `edit_document` tool.
- *
- * A single generic undoable action that applies a validated batch of
- * {@link DocumentEdit} ops (insert / update / move / remove / replaceChildren)
- * to the open paywall through ONE mimic transaction, with ONE undo entry for the
- * whole batch. The AI edit vocabulary and its schema-derived validator live in
- * `@voidhash/ai-shared`; this action is the browser-side apply that runs the
- * ops against the designer store's mimic document and captures a per-op inverse
- * so the batch is atomically undoable.
- */
-
-import {
-  validateDocumentEdits,
-  type DocumentEdit,
-  type DocumentEditErrorResult,
-  type EditableDocumentNode,
-  type MintedIds,
-  type NodeInput,
-} from "@voidhash/ai-shared";
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-
-import { commander } from "../designer-commander";
-import { selectDocumentRoot } from "../utils/document-root";
-import type { DesignerDocumentRoot } from "../utils/node-proxies";
-import { unwrapEntriesDeep } from "../utils/replay";
-
-// =============================================================================
-// Public result
-// =============================================================================
-
-/**
- * The outcome of an {@link applyDocumentEdits} dispatch, matching ai-shared's
- * `EditDocumentResult`: on success the minted-id map (insert/replaceChildren op
- * index → the ids the engine minted, root-first), on failure the collected
- * per-edit validation errors (nothing was applied — no transaction opened, no
- * undo entry pushed).
- */
-export type ApplyDocumentEditsResult =
-  | { readonly ok: true; readonly mintedIds: MintedIds }
-  | { readonly ok: false; readonly errors: readonly DocumentEditErrorResult[] };
-
-// =============================================================================
-// Snapshot → EditableDocumentNode adapter
-// =============================================================================
-
-/**
- * Adapts a decoded designer snapshot subtree to the validator's minimal
- * {@link EditableDocumentNode} shape. `data` is passed through verbatim: the
- * validator only reads the scalar/enum leaves it addresses (envelope unwrapping
- * is not required — see the ai-shared validator docs).
- */
-function toEditableNode(node: SnapshotNode): EditableDocumentNode {
-  return {
-    id: node.id,
-    type: node.type,
-    data: node.data as Record<string, unknown>,
-    children: node.children.map(toEditableNode),
-  };
-}
-
-// =============================================================================
-// Insert (NodeInput → minted ids)
-// =============================================================================
-
-/**
- * Inserts a {@link NodeInput} subtree under `parentId` at `index`, recursing
- * into children. Every node's id is engine-minted; the minted ids are collected
- * pre-order (parent before children) into `minted`. Returns the root minted id
- * (or `null` when the insert is rejected — e.g. an illegal parent/child combo the
- * transaction throws on).
- */
-function insertNodeInput(
-  root: DesignerDocumentRoot,
-  parentId: string,
-  node: NodeInput,
-  index: number | undefined,
-  minted: string[],
-): string | null {
-  const parent = root.findByIdAcrossTree(parentId);
-  if (parent === undefined) {
-    return null;
-  }
-  const input = nodeInputToData(node) as Parameters<typeof parent.children.insertLast>[0];
-  const inserted =
-    index === undefined
-      ? parent.children.insertLast(input)
-      : parent.children.insertAt(index, input);
-  minted.push(inserted.id);
-  for (const child of node.children ?? []) {
-    insertNodeInput(root, inserted.id, child, undefined, minted);
-  }
-  return inserted.id;
-}
-
-/**
- * Flattens a {@link NodeInput} to the `{ type, name?, ...data }` write input the
- * mimic `children.insert*` primitive accepts — `children` is stripped (inserted
- * recursively) and every other field (style, text, component identity, …) is
- * spread at the top level.
- */
-function nodeInputToData(node: NodeInput): Record<string, unknown> {
-  const input: Record<string, unknown> = { type: node.type };
-  for (const [key, value] of Object.entries(node)) {
-    if (key === "type" || key === "children") continue;
-    input[key] = value;
-  }
-  return input;
-}
-
-// =============================================================================
-// Serialize (for remove / replaceChildren undo)
-// =============================================================================
-
-interface SerializedSubtree {
-  type: string;
-  data: Record<string, unknown>;
-  children: SerializedSubtree[];
-}
-
-/**
- * Serializes a snapshot subtree into plain write-input shape (CRDT `{id,pos,value}`
- * array envelopes unwrapped) so undo can replay it through the insert primitive.
- * Node ids are intentionally dropped — the engine re-mints them on restore.
- */
-function serializeSubtree(node: SnapshotNode): SerializedSubtree {
-  const data: Record<string, unknown> = {};
-  for (const [key, value] of Object.entries(node.data)) {
-    data[key] = unwrapEntriesDeep(value);
-  }
-  return {
-    type: node.type,
-    data,
-    children: node.children.map(serializeSubtree),
-  };
-}
-
-/** Re-inserts a serialized subtree under `parentId` at `index` (undo of remove). */
-function restoreSubtree(
-  root: DesignerDocumentRoot,
-  parentId: string,
-  subtree: SerializedSubtree,
-  index: number | undefined,
-): void {
-  const parent = root.findByIdAcrossTree(parentId);
-  if (parent === undefined) {
-    return;
-  }
-  try {
-    const input = { ...subtree.data, type: subtree.type } as Parameters<
-      typeof parent.children.insertLast
-    >[0];
-    const node =
-      index === undefined
-        ? parent.children.insertLast(input)
-        : parent.children.insertAt(index, input);
-    for (const child of subtree.children) {
-      restoreSubtree(root, node.id, child, undefined);
-    }
-  } catch {
-    // Illegal parent/child combination on restore — drop the subtree rather than
-    // throw out of the undo transaction.
-  }
-}
-
-// =============================================================================
-// Per-op inverse capture
-// =============================================================================
-
-/** The captured inverse of one applied op, replayed (in reverse) on undo. */
-type OpInverse =
-  | { kind: "remove-minted"; ids: string[] }
-  | { kind: "restore-data"; nodeId: string; previous: Record<string, unknown> }
-  | { kind: "move-back"; nodeId: string; parentId: string; index: number }
-  | { kind: "restore-subtree"; parentId: string; subtree: SerializedSubtree; index: number }
-  | {
-      kind: "restore-children";
-      nodeId: string;
-      previous: SerializedSubtree[];
-      mintedIds: string[];
-    };
-
-/**
- * Captures the RESTORE PATCH that `node.update(...)` replays on undo to return
- * every top-level `data` key an `update.set` touched to its exact prior value.
- *
- * `node.update` merges per-key (mimic `emitStructUpdate` never deletes a key the
- * patch omits), so a naive "replay the previous object" leaves behind any sub-key
- * the forward edit ADDED (e.g. `style.shadowRadius` on a style that lacked it).
- * The patch therefore pairs the envelope-unwrapped previous value with explicit
- * `undefined` markers for every key the incoming `set` value added but the
- * previous value did not have — recursively for nested objects — so the merge
- * DELETES the additions and the field ends up exactly as it was. A key absent
- * from the current data maps to `undefined` (a whole-field delete).
- */
-function capturePreviousData(
-  current: SnapshotNode | undefined,
-  set: Record<string, unknown>,
-): Record<string, unknown> {
-  const previous: Record<string, unknown> = {};
-  const data = (current?.data ?? {}) as Record<string, unknown>;
-  for (const [key, incoming] of Object.entries(set)) {
-    if (!(key in data)) {
-      // The field did not exist → undo deletes it wholesale.
-      previous[key] = undefined;
-      continue;
-    }
-    previous[key] = restorePatchFor(unwrapEntriesDeep(data[key]), incoming);
-  }
-  return previous;
-}
-
-/**
- * The value `node.update` must merge to restore `prev` after a forward merge of
- * `incoming` overwrote it. For two plain objects it returns `prev`'s keys PLUS an
- * `undefined` for each key `incoming` introduced that `prev` lacked (recursing
- * into shared object keys), so the merge deletes the additions. For every other
- * shape (arrays, scalars, an object replacing a non-object) `prev` replaces
- * wholesale, so it is returned verbatim.
- */
-function restorePatchFor(prev: unknown, incoming: unknown): unknown {
-  if (!isPlainObject(prev) || !isPlainObject(incoming)) {
-    return prev;
-  }
-  const patch: Record<string, unknown> = {};
-  for (const [key, prevValue] of Object.entries(prev)) {
-    patch[key] = key in incoming ? restorePatchFor(prevValue, incoming[key]) : prevValue;
-  }
-  // Keys the forward edit ADDED (present in `incoming`, absent from `prev`) must
-  // be deleted on undo — merge an explicit `undefined`.
-  for (const key of Object.keys(incoming)) {
-    if (!(key in prev)) {
-      patch[key] = undefined;
-    }
-  }
-  return patch;
-}
-
-/** Whether a value is a plain (non-array, non-null) object. */
-function isPlainObject(value: unknown): value is Record<string, unknown> {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-
-/** The current sibling index of `nodeId` under `parentNode`, or 0 when absent. */
-function indexInParent(parentNode: SnapshotNode | undefined, nodeId: string): number {
-  if (parentNode === undefined) return 0;
-  const idx = parentNode.children.findIndex((child) => child.id === nodeId);
-  return idx === -1 ? 0 : idx;
-}
-
-// =============================================================================
-// Action
-// =============================================================================
-
-/**
- * Applies a validated batch of document edits to the open paywall in one
- * transaction, capturing a per-op inverse for a single atomic undo entry.
- *
- * The batch is first re-validated against the committed tree via
- * {@link validateDocumentEdits} (the same schema-derived validator the AI tool
- * ran); on failure NO transaction opens and NO undo entry is pushed — the action
- * returns the structured errors so the model can converge. On success every op is
- * applied in order and its inverse recorded:
- *
- * - `insert` / `replaceChildren` — remove the minted root ids (restore the prior
- *   children for `replaceChildren`).
- * - `update` — a restore patch reconstructing each touched `set` key's prior
- *   value (`undefined` = the field was absent → restored as a delete). Because
- *   `node.update`'s merge never deletes an omitted key, the patch pairs the prior
- *   value with explicit `undefined` markers for sub-keys the edit ADDED (e.g.
- *   `style.shadowRadius` on a style that lacked it), so undo removes them and the
- *   object returns EXACTLY to its prior shape. `set` itself is applied verbatim
- *   through `node.update` (objects like `style` merge per field; arrays/scalars
- *   replace wholesale — the tool's contract).
- * - `move` — the previous parent + sibling index (moved back preserving the id).
- * - `remove` — the serialized subtree + its position (re-inserted on undo).
- *
- * @returns `{ ok: true, mintedIds }` mapping each insert/replaceChildren op index
- *   to its minted ids, or `{ ok: false, errors }` when the batch is invalid.
- */
-export const applyDocumentEdits = commander.undoableAction<
-  { edits: readonly DocumentEdit[] },
-  { inverses: OpInverse[]; result: ApplyDocumentEditsResult }
->(
-  (ctx, params) => {
-    const state = ctx.getState();
-    const { mimic } = state;
-
-    const validation = validateDocumentEdits(params.edits, toEditableNode(selectDocumentRoot(state)));
-    if (!validation.ok) {
-      // Bail before opening a transaction so no undo entry is recorded.
-      return { inverses: [], result: { ok: false, errors: validation.errors } };
-    }
-
-    const inverses: OpInverse[] = [];
-    const mintedIds: MintedIds = {};
-
-    mimic.document.transaction((root) => {
-      validation.edits.forEach((edit, editIndex) => {
-        switch (edit.op) {
-          case "insert": {
-            const minted: string[] = [];
-            insertNodeInput(root, edit.parentId, edit.node, edit.index, minted);
-            if (minted.length > 0) {
-              mintedIds[String(editIndex)] = minted;
-              inverses.push({ kind: "remove-minted", ids: [minted[0] as string] });
-            }
-            break;
-          }
-          case "update": {
-            const current = root.findByIdAcrossTree(edit.nodeId)?.get() as SnapshotNode | undefined;
-            const previous = capturePreviousData(current, edit.set);
-            const node = root.findByIdAcrossTree(edit.nodeId);
-            if (node !== undefined) {
-              node.update(edit.set);
-              inverses.push({ kind: "restore-data", nodeId: edit.nodeId, previous });
-            }
-            break;
-          }
-          case "move": {
-            const node = root.findByIdAcrossTree(edit.nodeId);
-            const parent = root.findByIdAcrossTree(edit.parentId);
-            if (node === undefined || parent === undefined) break;
-            const snapshot = node.get() as SnapshotNode | undefined;
-            const previousParentId = snapshot?.parentId;
-            if (typeof previousParentId === "string") {
-              const previousParent = root.findByIdAcrossTree(previousParentId)?.get() as
-                | SnapshotNode
-                | undefined;
-              inverses.push({
-                kind: "move-back",
-                nodeId: edit.nodeId,
-                parentId: previousParentId,
-                index: indexInParent(previousParent, edit.nodeId),
-              });
-            }
-            node.moveTo(parent.children, edit.index);
-            break;
-          }
-          case "remove": {
-            const node = root.findByIdAcrossTree(edit.nodeId);
-            const snapshot = node?.get() as SnapshotNode | undefined;
-            if (node === undefined || snapshot === undefined) break;
-            const parentId = snapshot.parentId;
-            if (typeof parentId === "string") {
-              const parent = root.findByIdAcrossTree(parentId)?.get() as SnapshotNode | undefined;
-              inverses.push({
-                kind: "restore-subtree",
-                parentId,
-                subtree: serializeSubtree(snapshot),
-                index: indexInParent(parent, edit.nodeId),
-              });
-            }
-            node.remove();
-            break;
-          }
-          case "replaceChildren": {
-            const node = root.findByIdAcrossTree(edit.nodeId);
-            const snapshot = node?.get() as SnapshotNode | undefined;
-            if (node === undefined || snapshot === undefined) break;
-            const previous = snapshot.children.map(serializeSubtree);
-            for (const child of [...snapshot.children]) {
-              root.findByIdAcrossTree(child.id)?.remove();
-            }
-            const minted: string[] = [];
-            for (const child of edit.children) {
-              insertNodeInput(root, edit.nodeId, child, undefined, minted);
-            }
-            mintedIds[String(editIndex)] = minted;
-            inverses.push({ kind: "restore-children", nodeId: edit.nodeId, previous, mintedIds: minted });
-            break;
-          }
-        }
-      });
-    });
-
-    return { inverses, result: { ok: true, mintedIds } };
-  },
-  (ctx, _params, result) => {
-    if (result.inverses.length === 0) {
-      return;
-    }
-    const { mimic } = ctx.getState();
-
-    // Replay inverses in reverse application order so indices/positions line up.
-    mimic.document.transaction((root) => {
-      for (let i = result.inverses.length - 1; i >= 0; i--) {
-        const inverse = result.inverses[i];
-        if (inverse === undefined) continue;
-        switch (inverse.kind) {
-          case "remove-minted": {
-            for (const id of inverse.ids) {
-              root.findByIdAcrossTree(id)?.remove();
-            }
-            break;
-          }
-          case "restore-data": {
-            root.findByIdAcrossTree(inverse.nodeId)?.update(inverse.previous);
-            break;
-          }
-          case "move-back": {
-            const node = root.findByIdAcrossTree(inverse.nodeId);
-            const parent = root.findByIdAcrossTree(inverse.parentId);
-            if (node !== undefined && parent !== undefined) {
-              node.moveTo(parent.children, inverse.index);
-            }
-            break;
-          }
-          case "restore-subtree": {
-            restoreSubtree(root, inverse.parentId, inverse.subtree, inverse.index);
-            break;
-          }
-          case "restore-children": {
-            // Remove the replacement children, then restore the originals in order.
-            for (const id of inverse.mintedIds) {
-              root.findByIdAcrossTree(id)?.remove();
-            }
-            inverse.previous.forEach((subtree, index) => {
-              restoreSubtree(root, inverse.nodeId, subtree, index);
-            });
-            break;
-          }
-        }
-      }
-    });
-  },
-);
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
index 00b45e621..84a013fe3 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/index.ts
@@ -118,7 +118,6 @@ export { moveNode, moveNodeBefore, moveNodeAfter } from "./layer-actions";
 // =============================================================================
 
 export { deleteNodes, copyNodes, cutNodes, pasteNodes } from "./node-actions";
-export { applyDocumentEdits, type ApplyDocumentEditsResult } from "./document-edit-actions";
 
 // =============================================================================
 // View Node Commands
diff --git a/apps/www/vite.config.ts b/apps/www/vite.config.ts
index 008529e1d..dd61ca81e 100644
--- a/apps/www/vite.config.ts
+++ b/apps/www/vite.config.ts
@@ -13,6 +13,7 @@ import * as docsSourceConfig from "./src/features/docs/source.config.ts";
 
 const devPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : 3000;
 const devHost = process.env.HOST ?? true;
+const appRootPath = fileURLToPath(new URL(".", import.meta.url));
 const appSrcPath = fileURLToPath(new URL("./src", import.meta.url));
 const workspacePath = fileURLToPath(new URL("../..", import.meta.url));
 const require = createRequire(import.meta.url);
@@ -115,6 +116,7 @@ function scopedMdxPlugin(plugin: PluginOption, scopeFragment: string) {
 }
 
 export default defineConfig(() => ({
+  root: appRootPath,
   build: {
     minify: "esbuild",
   },
@@ -162,6 +164,8 @@ export default defineConfig(() => ({
       "@generated/docs": fileURLToPath(new URL("./docs.generated.ts", import.meta.url)),
       tslib: tslibPath,
     },
+    // TanStack's server-function compiler must transform WorkOS-owned createServerFn calls.
+    noExternal: ["@workos/authkit-tanstack-react-start"],
     tsconfigPaths: true,
   },
   server: {
diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index e8e1741d6..ecabaf471 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -58,7 +58,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 <!-- RPC_OPERATIONS_START -->
 | Group | Operations |
 | --- | --- |
-| AiChat | `SaveAiChat`, `ListAiChats`, `GetAiChat`, `DeleteAiChat`, `UploadAiChatAttachment`, `RevertAiChatCheckpoint`, `CaptureAiCheckpoint` |
+| AgentSession | `ListAgentSessions`, `GetAgentSession`, `DeleteAgentSession`, `RevertAgentSessionChangeSet`, `UploadAgentAttachment` |
 | Analytics | `ListRecentAnalyticsEvents`, `QueryAnalyticsInsights`, `QueryCustomAnalyticsInsight`, `QueryCustomAnalyticsPersons`, `ListAnalyticsInsights`, `CreateAnalyticsInsight`, `UpdateAnalyticsInsight`, `DeleteAnalyticsInsight`, `ListAnalyticsCohorts`, `CreateAnalyticsCohort`, `UpdateAnalyticsCohort`, `DeleteAnalyticsCohort`, `ListAnalyticsDashboards`, `CreateAnalyticsDashboard`, `DuplicateAnalyticsDashboard`, `UpdateAnalyticsDashboard`, `DeleteAnalyticsDashboard`, `PutAnalyticsDashboardItem`, `ReorderAnalyticsDashboardItems`, `RemoveAnalyticsDashboardItem` |
 | ApiKey | `CreateSecretKey`, `ListApiKeys`, `GetApiKeyById`, `RotateSecretKey`, `DeleteApiKey`, `CreateUserApiKey`, `ListUserApiKeys`, `RevokeUserApiKey` |
 | Person | `CreatePerson`, `ListPersons`, `GetPersonById`, `GetPersonByDistinctId` |
@@ -90,7 +90,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Analytics, VoidQl | Project permission before query compilation/execution; compiled SQL carries a bound tenant predicate. | Analytics integration suite and VoidQL compiler/substrate tests | Integrated |
 | ApiKey, Person, Organization, PaymentProviderConfiguration, PaymentProviderProduct, PaywallDeploy, PaywallLocation, Paywall, Perk, ProductPerk, Product, Project, Webhook, FeatureFlag | Project/organization permission followed by stored ownership checks for nested IDs. | Corresponding database-backed core service integration suites | Integrated |
 | PaywallComponent | Delegates to the project-authorized deploy service. | Paywall deploy integration suite | Integrated |
-| AiChat, PaywallAsset, PaywallWorkspace | Project membership/permission and stored parent ownership are checked before every read or mutation. Client-minted chat ID collisions are bound to the persisted scope. | `AiChatAuthorization.integration.test.ts`, `PaywallAssetAuthorization.integration.test.ts`, `PaywallWorkspaceAuthorization.integration.test.ts`, plus service and RPC unit tests | Integrated |
+| AgentSession, PaywallAsset, PaywallWorkspace | Project membership/permission and stored parent ownership are checked before every read or mutation. Client-minted session ID collisions are bound to the persisted user and project scope. | `AgentSessionIndexService.test.ts`, `agent-session-rpcs.test.ts`, `PaywallAssetAuthorization.integration.test.ts`, `PaywallWorkspaceAuthorization.integration.test.ts`, plus service and RPC unit tests | Integrated |
 | User, Feedback | Acting user comes only from the authenticated session; feedback project context derives its organization from the same session project. | `UserAuthorization.integration.test.ts`, `FeedbackAuthorization.integration.test.ts`, plus service tests | Integrated |
 | Experiment | Project permission is checked on the stored experiment before every aggregate, variant, treatment, and lifecycle mutation. | `ExperimentService.authorization.integration.test.ts` covers every management operation and verifies no mutation. | Integrated |
 | PushNotificationConfiguration, PushNotificationSend | Project permission plus stored configuration/send ownership; delivery lookup binds both project and parent send ID. | `NotificationsAuthorization.integration.test.ts` covers every configuration/history operation and a nested foreign send ID. | Integrated |
@@ -101,7 +101,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | --- | --- | --- | --- |
 | `/rpc` | User API key, project secret key, or WorkOS session | Shared auth middleware creates the session consumed by every RPC. | Covered by RPC smoke and service evidence above |
 | `/api/mcp` | Bearer project secret key or user API key | Secret keys select their project directly. User keys select an accessible project by header, or default only when exactly one is accessible. Workspace services re-check the requested paywall/project. | Route/protocol tests plus integrated cross-project workspace evidence |
-| `/api/ai/chat` | Authenticated user/session token | Token verifier and project-scoped chat/workspace services. | Route/tool tests plus integrated chat/workspace evidence |
+| `/api/agent/sessions/:id/ws` | Authenticated user/session token | The upgrade route verifies organization/project membership, then durable ownership binds the session ID to that user and project. | Node WebSocket integration tests, workerd Durable Object probe, and session-core ownership tests |
 | `/i/v1/capture`, `/i/v1/batch` | Publishable project token | Token resolves the project; processing rejects route/project mismatch and reserved events. | Integrated |
 | Stripe webhook | Provider signature over exact raw body and timestamp | Configuration lookup is tied to the route ID; ledger IDs deduplicate. | Integrated |
 | WorkOS webhook | Provider signature over exact raw body and timestamp | External event ID uniqueness and membership sync rules. | Integrated |
diff --git a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
index 6b59bc89c..dd53b58f5 100644
--- a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
+++ b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
@@ -1,32 +1,728 @@
 ---
 name: design-paywall
-description: Design, edit, preview, visually review, finish, or revert a Voidhash paywall through the Voidhash MCP server.
+description: Design, edit, preview, visually review, finish, or revert a Voidhash paywall with the shared workspace tools.
 ---
 
-# Design a Voidhash paywall
+# Paywall Authoring Reference
 
-Use the `voidhash` MCP server for all paywall operations.
+This is the domain reference for building a paywall as a mimic document
+with `edit_paywall`, plus code components for anything that needs real code.
+Read the document model and containment rules first — the style reference below is
+generated from the live schema, so it is always exact.
 
-Before editing:
+## Document model
 
-1. Read `voidhash://paywall-authoring/reference` for the schema-derived authoring rules.
-2. Call `list_paywalls`, then `begin_paywall_edit` for the selected slug.
-3. Keep the returned `changeSetId` and pass it to every mutation and preview call.
-4. Read the current structure with `get_paywall` and available catalog, local, and builtin components with `get_components`.
-5. If the user provides an inspiration URL and browser tools are available, inspect it for visual context before editing. Browser context is optional and must never block the MCP workflow.
+A paywall is a MIMIC DOCUMENT: a tree of nodes. You author it with `edit_paywall`
+ops (`insert`, `update`, `move`, `remove`, `replaceChildren`), addressing nodes
+by their engine-minted id. The node kinds you build with:
 
-While editing:
+- `screen` — the paywall's root visual frame (the top-level node under the
+  document). Holds the whole layout; has a background, safe-area flags, and a
+  fixed default size (375×812).
+- `view` — a flex container / row / column. The workhorse for layout, grouping,
+  cards, buttons (a `view` with a click interaction is a tappable surface —
+  there is no separate button/pressable node).
+- `scrollView` — a `view` that SCROLLS. Same style/children as a `view`; use it
+  for content taller than the screen. `horizontal: true` scrolls sideways and lays
+  its children out in a row (forces row flow, like RN); `showsScrollIndicator: false`
+  hides the scrollbar.
+- `text` — a text leaf. Its `text` data field is the literal string it renders.
+- `shape` — a vector container that holds `path` nodes (for icons / custom
+  vector art).
+- `path` — a single vector path inside a `shape`.
+- `component` — an INSTANCE of a catalog component, a local code component, or a
+  first-party BUILTIN that ships with the renderer. Insert one to place a reusable
+  widget; bind its props/actions (discover them with `get_components`). Insert a
+  builtin with `componentSource: "builtin"` and its `componentSlug` from
+  `get_components` — builtins are UNPINNED (no version/hash) and take props like
+  any component.
 
-- Prefer `edit_paywall` for visual composition and atomic batches.
-- Use `duplicate_subtree` when an existing section is the right starting point.
-- Build dynamic behavior without code whenever the document can express it: declare typed `localVariables` on the nearest common ancestor, use `view`/`scrollView` click interactions or component `actionBindings` to run `set-variable`, `purchase-product`, or `close-paywall`, and use conditional `states` to override styles or actions when variables match. Preserve complete arrays when updating them.
-- Use the no-code cycle `variable → action changes variable → matching state changes appearance/behavior → CTA consumes variable` for product selection, toggles, conditional visibility, multi-step sections, and purchase flows.
-- Use local component tools only when custom TSX behavior is genuinely needed. A write is not committed unless server-side compilation succeeds.
-- After meaningful sections, call `get_paywall_preview` and inspect the returned image for hierarchy, spacing, clipping, legibility, and viewport fit.
+Node ids are ADDRESSES: every node has a stable id. `get_paywall` returns the
+tree with ids; the user's selection is a set of ids; inserts RETURN their minted
+ids. You never write an id yourself.
 
-Before stopping:
+### Containment (which node may hold which)
 
-1. Render a final full preview and inspect the actual image.
-2. Fix every visible issue and render again after the last mutation.
-3. Call `finish_paywall_edit` with the exact latest `documentSignature`, a concise visual verdict, and an empty `unresolvedIssues` list.
-4. If the result should be discarded, call `revert_paywall_edit` instead. Never abandon an active change set.
+An `insert`/`move` into a parent that cannot contain the node type is rejected.
+The legal parent → child rules (generated from the schema):
+
+- `screen` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+- `view` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+- `scrollView` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+- `text` is a leaf (no child nodes).
+- `shape` may contain: `path`
+- `path` is a leaf (no child nodes).
+- `component` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+
+## Style reference (generated from the schema)
+
+Style is a per-node `style` object of RN-named fields (NO shorthands: write
+`paddingTop`/`paddingRight`/… never `padding`; `borderTopLeftRadius`/… never
+`borderRadius`). Colors are `rgba(r, g, b, a)` strings. Each node type accepts a
+different subset; a field not listed for a node type is rejected on it.
+
+**Group flags are AUTO-MANAGED in a node's base `style`.** Setting ANY background /
+border / shadow (or, on `path`, fill / stroke) field there automatically turns
+that group's `<group>Enabled` flag on — just set `backgroundColor` and the
+background renders. Inside `states[].overrides.style`, explicitly include the
+matching `*Enabled: true` flag when the base style has not already enabled that
+group. The flags also support non-destructive hiding: explicitly set one to
+`false` (e.g. `{ backgroundEnabled: false }`) to hide a group while keeping its
+fields for later.
+
+Set a style field via `update` with merge semantics: `set: { style: { paddingTop: 8 } }`
+changes ONLY `paddingTop` and leaves every other style field untouched. To insert
+a node with styles, put the `style` object on the inserted node.
+
+### `screen` style fields
+
+- `x`: number (default 0)
+- `y`: number (default 0)
+- `width`: number (default 375)
+- `height`: number (default 812)
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `paddingTop`: number (default 0)
+- `paddingRight`: number (default 0)
+- `paddingBottom`: number (default 0)
+- `paddingLeft`: number (default 0)
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `gap`: number (default 0)
+- `justifyContent`: "flex-start" | "center" | "flex-end" | "space-between" | "space-around" | "space-evenly" (default "flex-start")
+- `alignItems`: "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "stretch")
+- `flexDirection`: "row" | "column" (default "column")
+- `backgroundColor`: color (rgba) (default "rgba(255, 255, 255, 1)")
+- `backgroundEnabled`: boolean (default true) — AUTO-MANAGED: set to true automatically when you set any background field; write `false` explicitly to hide the background without deleting its fields.
+- `backgroundType`: "solid" | "gradient" | "image" (default "solid")
+- `backgroundGradient`: object (default {"kind":"linear","startX":0.5,"startY":0,"endX":0.5,"endY":1,"stops":[{"color":"rgba(255, 255, 255, 1)","position":0},{"color":"rgba(255, 255, 255, 0)","position":1}]})
+- `backgroundImage`: object (default {"url":"","resizeMode":"cover"})
+- `borderTopWidth`: number (default 0)
+- `borderRightWidth`: number (default 0)
+- `borderBottomWidth`: number (default 0)
+- `borderLeftWidth`: number (default 0)
+- `borderColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `borderStyle`: "solid" | "dashed" | "dotted" (default "solid")
+- `borderEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any border field; write `false` explicitly to hide the border without deleting its fields.
+- `opacity`: number (default 1)
+- `overflow`: "visible" | "hidden" | "scroll" (default "visible")
+- `zIndex`: number (default 0)
+- `display`: "flex" | "none" (default "flex")
+- `shadowEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any shadow field; write `false` explicitly to hide the shadow without deleting its fields.
+- `shadowColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `shadowOffsetX`: number (default 0)
+- `shadowOffsetY`: number (default 0)
+- `shadowRadius`: number (default 0)
+- `shadowOpacity`: number (default 1)
+- `safeAreaTop`: boolean (default false)
+- `safeAreaBottom`: boolean (default false)
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+
+### `view` style fields
+
+- `paddingTop`: number (default 0)
+- `paddingRight`: number (default 0)
+- `paddingBottom`: number (default 0)
+- `paddingLeft`: number (default 0)
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `gap`: number (default 0)
+- `justifyContent`: "flex-start" | "center" | "flex-end" | "space-between" | "space-around" | "space-evenly" (default "flex-start")
+- `alignItems`: "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "stretch")
+- `flexDirection`: "row" | "column" (default "column")
+- `width`: number (default "auto")
+- `height`: number (default "auto")
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `backgroundColor`: color (rgba) (default "rgba(255, 255, 255, 1)")
+- `backgroundEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any background field; write `false` explicitly to hide the background without deleting its fields.
+- `backgroundType`: "solid" | "gradient" | "image" (default "solid")
+- `backgroundGradient`: object (default {"kind":"linear","startX":0.5,"startY":0,"endX":0.5,"endY":1,"stops":[{"color":"rgba(255, 255, 255, 1)","position":0},{"color":"rgba(255, 255, 255, 0)","position":1}]})
+- `backgroundImage`: object (default {"url":"","resizeMode":"cover"})
+- `borderTopWidth`: number (default 0)
+- `borderRightWidth`: number (default 0)
+- `borderBottomWidth`: number (default 0)
+- `borderLeftWidth`: number (default 0)
+- `borderColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `borderStyle`: "solid" | "dashed" | "dotted" (default "solid")
+- `borderEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any border field; write `false` explicitly to hide the border without deleting its fields.
+- `borderTopLeftRadius`: number (default 0)
+- `borderTopRightRadius`: number (default 0)
+- `borderBottomRightRadius`: number (default 0)
+- `borderBottomLeftRadius`: number (default 0)
+- `opacity`: number (default 1)
+- `overflow`: "visible" | "hidden" | "scroll" (default "visible")
+- `zIndex`: number (default 0)
+- `position`: "absolute" | "relative" (default "relative")
+- `left`: number (default "auto")
+- `top`: number (default "auto")
+- `right`: number (default "auto")
+- `bottom`: number (default "auto")
+- `display`: "flex" | "none" (default "flex")
+- `shadowEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any shadow field; write `false` explicitly to hide the shadow without deleting its fields.
+- `shadowColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `shadowOffsetX`: number (default 0)
+- `shadowOffsetY`: number (default 0)
+- `shadowRadius`: number (default 0)
+- `shadowOpacity`: number (default 1)
+- `safeAreaTop`: boolean (default false)
+- `safeAreaBottom`: boolean (default false)
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+
+### `text` style fields
+
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `fontSize`: number (default 16)
+- `fontWeight`: "100" | "200" | "300" | "400" | "500" | "600" | "700" | "800" | "900" (default "400")
+- `color`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `textAlign`: "left" | "center" | "right" | "justify" (default "left")
+- `lineHeight`: number (default 1.5)
+- `letterSpacing`: number (default 0)
+- `borderTopWidth`: number (default 0)
+- `borderRightWidth`: number (default 0)
+- `borderBottomWidth`: number (default 0)
+- `borderLeftWidth`: number (default 0)
+- `borderColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `borderStyle`: "solid" | "dashed" | "dotted" (default "solid")
+- `borderEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any border field; write `false` explicitly to hide the border without deleting its fields.
+- `opacity`: number (default 1)
+- `overflow`: "visible" | "hidden" | "scroll" (default "visible")
+- `zIndex`: number (default 0)
+- `position`: "absolute" | "relative" (default "relative")
+- `left`: number (default "auto")
+- `top`: number (default "auto")
+- `right`: number (default "auto")
+- `bottom`: number (default "auto")
+- `display`: "flex" | "none" (default "flex")
+- `shadowEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any shadow field; write `false` explicitly to hide the shadow without deleting its fields.
+- `shadowColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `shadowOffsetX`: number (default 0)
+- `shadowOffsetY`: number (default 0)
+- `shadowRadius`: number (default 0)
+- `shadowOpacity`: number (default 1)
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+
+### `shape` style fields
+
+- `width`: number (default "auto")
+- `height`: number (default "auto")
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `opacity`: number (default 1)
+- `display`: "flex" | "none" (default "flex")
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+- `preserveAspectRatio`: "none" | "xMidYMid meet" | "xMidYMid slice" (default "xMidYMid meet")
+
+### `path` style fields
+
+- `fillColor`: color (rgba) (default "rgba(255, 255, 255, 1)")
+- `fillEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any fill field; write `false` explicitly to hide the fill without deleting its fields.
+- `fillRule`: "nonzero" | "evenodd" (default "nonzero")
+- `fillOpacity`: number (default 1)
+- `strokeColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `strokeEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any stroke field; write `false` explicitly to hide the stroke without deleting its fields.
+- `strokeWidth`: number (default 0)
+- `strokeOpacity`: number (default 1)
+- `strokeLinecap`: "butt" | "round" | "square" (default "butt")
+- `strokeLinejoin`: "miter" | "round" | "bevel" (default "miter")
+- `opacity`: number (default 1)
+- `display`: "flex" | "none" (default "flex")
+
+### Flex layout (defaults match CSS)
+
+Layout is flexbox, exactly like CSS / React Native:
+
+- Views **hug their content** by default: `width` and `height` default to
+  `"auto"`. Do NOT set a numeric `width`/`height` just to "make it fit" — omit
+  them and let flex size the node. Set a number only for a genuinely fixed size.
+- A container **stretches its children on the CROSS axis** by default
+  (`alignItems` defaults to `"stretch"`). So a child of a `column` fills the
+  container's width, and a child of a `row` fills its height, automatically —
+  you do not need `alignSelf` or a width/height for that.
+- To make a child **fill the MAIN axis** (grow to share leftover space), give it
+  `flex: 1` (e.g. a spacer, or two side-by-side cards that split a row).
+- Cross-axis fill is automatic UNLESS the child opts out — either a numeric size
+  on that axis (a fixed size defeats stretch) or a non-`stretch` `alignSelf`
+  (`"flex-start"`/`"center"`/`"flex-end"`). Set `alignSelf` only to deviate from
+  the container's alignment.
+- Prefer omitting `width`/`height` and reaching for `flexDirection`, `gap`,
+  `justifyContent` (main axis), `alignItems` (cross axis), and `flex` to compose
+  layout — the same tools you would use in CSS.
+
+### Structured style values (gradient / image backgrounds)
+
+`backgroundGradient` and `backgroundImage` are objects. Set
+`backgroundType: "gradient"` (or `"image"`) for the chosen fill to render
+(`backgroundEnabled` is turned on automatically for you).
+
+```json
+// backgroundGradient
+{ "kind": "linear", "startX": 0.5, "startY": 0, "endX": 0.5, "endY": 1,
+  "stops": [ { "color": "rgba(255,255,255,1)", "position": 0 },
+             { "color": "rgba(255,255,255,0)", "position": 1 } ] }
+// backgroundImage
+{ "url": "https://…", "resizeMode": "cover" }  // cover | contain | stretch | center
+```
+
+## Tool usage
+
+- **Open one change set.** Discover the target with `list_paywalls`, then call
+  `begin_paywall_edit({ slug })`. Pass the returned `changeSetId` and the same
+  `slug` to every mutation and preview call. Finish it after visual QA, or
+  revert it; never abandon an active change set.
+- **`get_paywall` first.** Learn the current tree and ids before editing. Pass
+  `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes return
+  as `{ id, type, name?, childCount }` stubs you expand with a follow-up
+  `get_paywall({ slug, nodeId })`). Cheaper than pulling the whole document every
+  turn.
+- **`edit_paywall` applies an ATOMIC batch.** Every op lands or none does. On
+  success you get the minted ids for `insert`/`replaceChildren` ops (keyed by op
+  index, parents-before-children) so you can address new nodes next. On failure
+  you get per-op errors naming the node, the allowed fields (with a did-you-mean),
+  and the allowed values — trust them and correct the batch. On a write conflict
+  the batch is re-applied against the latest LIVE tree, so concurrent designer
+  edits MERGE rather than clobber — a follow-up `get_paywall` may show a tree
+  shifted by another editor's changes.
+- **Merge semantics on `update`.** `set.style` merges per style field; other
+  objects merge per-field; arrays and scalars REPLACE wholesale. Send only the
+  fields you want to change.
+- **Ids are minted.** Never supply an id on an inserted node. Target existing
+  nodes with ids from `get_paywall`, the selection, or a prior insert's returned
+  ids.
+- **Selection ids are directly addressable.** When the context block lists
+  selected node ids, use them straight in ops (no need to re-locate them).
+- **`duplicate_subtree` preserves visual systems.** Prefer it over rebuilding a
+  repeated benefit, product option, card, or control from scratch. Fresh ids are
+  returned, so immediately tailor the clone's content/state with focused updates.
+- **`get_paywall_preview` is the visual checkpoint.** Capture the screen after
+  each meaningful visual section and after every correction pass. Inspect the
+  pixels; do not infer visual quality from the document tree alone.
+- **`finish_paywall_edit` is the completion gate.** It accepts only the exact signature
+  of the latest screenshot while the document is unchanged and
+  `unresolvedIssues` is empty. Any post-review edit requires a new screenshot.
+
+## Visual design and review workflow
+
+For broad design work, decide on one coherent direction before editing: audience
+and offer, visual mood, a restrained palette, typography scale, spacing rhythm,
+content hierarchy, and CTA treatment. Build one meaningful visual group at a
+time, then review it in the live screenshot. Prefer purposeful hierarchy and
+consistent systems over adding decoration.
+
+At every screenshot checkpoint, critique the rendered paywall against this
+rubric and correct visible issues with focused edits:
+
+- **Hierarchy and story:** the value proposition reads first, supporting proof
+  and benefits scan naturally, and the primary CTA is unmistakably dominant.
+- **Offer clarity:** product options, price/period, trial or billing terms, savings,
+  and the selected state are understandable without guesswork.
+- **Composition:** margins, gaps, alignment, radii, and repeated structures follow
+  a consistent rhythm; no section feels accidentally crowded or empty.
+- **Typography and color:** the type scale has clear roles, copy wraps cleanly,
+  contrast is legible, and accents are reserved for meaningful emphasis.
+- **Viewport fit:** no unintended clipping or horizontal overflow; safe areas are
+  respected; the CTA and essential offer information are reachable and sensibly
+  placed on the 375×812 screen.
+- **Purchase affordances:** selectable options look selectable, the CTA looks
+  tappable, and close, restore, legal, and subscription-term affordances are
+  present when appropriate.
+- **Polish:** imagery, icons, borders, shadows, and states render cleanly with no
+  placeholders, awkward truncation, inconsistent styling, or accidental defaults.
+
+Do not merely describe a problem found in the screenshot. Fix it, capture a new
+screenshot, and repeat until the review has no unresolved issues. Then call
+`finish_paywall_edit` with the final screenshot's document signature.
+
+### Op cheatsheet
+
+- `insert` — add a subtree under `parentId` at `index` (append if omitted).
+- `update` — partial data change on `nodeId` (`set`, merge semantics above).
+- `move` — reparent `nodeId` under `parentId` at `index` (cycles/illegal
+  containment rejected).
+- `remove` — delete `nodeId` and its subtree.
+- `replaceChildren` — swap `nodeId`'s whole child list for a new ordered one.
+
+## Worked examples
+
+### (a) Insert a screen's content in one batch
+
+Add a header row and a title inside the screen `scr_1` (ids returned are used
+implicitly by nesting the `children` inline):
+
+```json
+{ "edits": [
+  { "op": "insert", "parentId": "scr_1", "node": {
+      "type": "view", "name": "Header",
+      "style": { "flexDirection": "row", "justifyContent": "space-between", "alignItems": "center", "paddingTop": 16, "paddingBottom": 16 },
+      "children": [
+        { "type": "text", "name": "Title", "text": "Unlock Pro",
+          "style": { "fontSize": 28, "fontWeight": "700", "color": "rgba(255,255,255,1)" } }
+      ]
+  } }
+] }
+```
+
+### (b) Restyle the selected node
+
+The user has `view_9` selected and asks for a rounded indigo card. Change only
+the fields you mean to (style merges per field):
+
+```json
+{ "edits": [
+  { "op": "update", "nodeId": "view_9", "set": { "style": {
+      "backgroundColor": "rgba(99,102,241,1)",
+      "borderTopLeftRadius": 12, "borderTopRightRadius": 12,
+      "borderBottomRightRadius": 12, "borderBottomLeftRadius": 12,
+      "paddingTop": 16, "paddingRight": 16, "paddingBottom": 16, "paddingLeft": 16 } } }
+] }
+```
+
+### (c) Insert a component instance and bind it
+
+First `get_components` to read the component's path/slug, props, and actions.
+Then insert a `component` node. A `component` node's identity fields select which
+component to place; `props` binds its inputs and interactions/actions wire its
+outputs. Read the exact prop/action names from `get_components` (they differ per
+component) and follow the shapes the tool reports — do not assume field names.
+Bind a purchase to the component's declared action via the same interaction model
+as (d): a `purchase-product` action on the component's action slot.
+
+### (d) Variables, states, and actions (dynamic behavior without code)
+
+These three first-class document fields form a small no-code state machine:
+
+1. **Variables hold runtime state.** Put `localVariables` on a common ancestor so
+   the node and its descendants can read them. Supported values are
+   `{ key: "string", value }`, `{ key: "number", value }`,
+   `{ key: "boolean", value }`, and
+   `{ key: "product", value: { productId? } }`. Variables may live on
+   `screen`, `view`, `scrollView`, `text`, `shape`, or `path`; lookup is
+   lexical (own node, then nearest ancestor). Declare shared state on the nearest
+   common ancestor and reference its stable `id`, never its display `name`.
+2. **Actions change state or call the host.** A `view` or `scrollView` has an
+   `interactions` array of `{ id, trigger: { type: "click" }, action }`. The
+   action is `none`, `close-paywall`, `set-variable`, or `purchase-product`.
+   Values/products can be literals or variable references. A `component` exposes
+   named outputs through `actionBindings`; bind those names (from
+   `get_components`) to the same actions, optionally reading a field from the
+   component's emitted payload with `{ type: "action-payload", ... }`.
+3. **States react to variables.** Stateful nodes have a `states` array. Each state
+   has `{ id, name, condition, overrides }`. A condition is DNF:
+   `{ type: "or", value: [ { type: "and", value: [predicates...] } ] }` — any
+   OR branch may match, while every predicate in an AND branch must match.
+   Predicates are `equals`, `not-equals`, `greater-than`,
+   `greater-than-or-equal`, `less-than`, or `less-than-or-equal`; each operand
+   is a typed literal or `{ type: "variable-reference", value: { id } }`.
+   Matching states merge `overrides.style` over the base style immediately after
+   a variable changes. Later matching states win conflicting fields. On `view`
+   and `scrollView`, a state may also replace an interaction's action through
+   `overrides.actions`; its `interactionId` must be the interaction array-entry
+   id returned by `get_paywall`. State style overrides do not auto-enable gated
+   groups, so include `backgroundEnabled`, `borderEnabled`, `shadowEnabled`,
+   `fillEnabled`, or `strokeEnabled` when an override first turns on that group.
+
+This is enough for product selection, toggles, conditional emphasis/visibility,
+multi-step sections, close buttons, and a CTA that purchases the selected product
+without TSX. Build the cycle as **declare variable → click action updates variable
+→ matching state changes appearance/behavior → CTA consumes variable**.
+
+Example: declare the selected product on the screen, make a yearly option select
+it and show its selected style, then have the CTA purchase the current selection.
+Repeat the option action/state for each other product id:
+
+```json
+{ "edits": [
+  { "op": "update", "nodeId": "scr_1", "set": { "localVariables": [
+    { "id": "selected_product", "name": "Selected product",
+      "value": { "key": "product", "value": { "productId": "yearly" } } }
+  ] } },
+  { "op": "update", "nodeId": "view_yearly", "set": {
+    "interactions": [
+      { "id": "select_yearly", "trigger": { "type": "click" },
+        "action": { "type": "set-variable", "payload": {
+          "variableId": "selected_product",
+          "newValue": { "type": "literal", "value": {
+            "key": "product", "value": { "productId": "yearly" }
+          } }
+        } }
+      }
+    ],
+    "states": [
+      { "id": "yearly_selected", "name": "Selected", "condition": {
+          "type": "or", "value": [
+            { "type": "and", "value": [
+              { "type": "equals", "value": {
+                "left": { "type": "variable-reference", "value": { "id": "selected_product" } },
+                "right": { "type": "literal", "value": {
+                  "key": "product", "value": { "productId": "yearly" }
+                } }
+              } }
+            ] }
+          ]
+        }, "overrides": { "style": {
+          "backgroundEnabled": true,
+          "backgroundColor": "rgba(99,102,241,0.16)",
+          "borderEnabled": true,
+          "borderColor": "rgba(99,102,241,1)",
+          "borderTopWidth": 2, "borderRightWidth": 2,
+          "borderBottomWidth": 2, "borderLeftWidth": 2
+        } }
+      }
+    ]
+  } },
+  { "op": "update", "nodeId": "view_cta", "set": { "interactions": [
+    { "id": "purchase_selected", "trigger": { "type": "click" },
+      "action": { "type": "purchase-product", "payload": {
+        "type": "variable-reference", "variableId": "selected_product"
+      } }
+    }
+  ] } }
+] }
+```
+
+Arrays replace wholesale on `update`, so preserve every existing variable,
+interaction, state, prop binding, or action binding you still need. The `id`
+fields inside these arrays are stable logical ids for sub-records, not node ids.
+
+## Doctrine: build with the document, reach for code only when you must
+
+**The document (`edit_paywall`) is ALWAYS the primary way to build a paywall.**
+Static layout, styling, literal text, local variables, click/component actions,
+and variable-driven style/visibility states all belong in the document. Write a
+code component ONLY when the document genuinely cannot express what you need:
+
+- **Mapping/looping** — one row per product, or any list built by iterating over
+  runtime data (`usePaywallProducts()`).
+- **Structural branching** — different children/content that cannot be expressed
+  by a variable-driven style state (simple conditional visibility via `display`
+  belongs in document states).
+- **Transient pressed / hover / focus pseudo-states** — document states are driven
+  by variables, not pointer/gesture lifecycle.
+- **Animation.**
+- **Custom formatting logic** — deriving "$5/mo billed yearly", percent savings,
+  trial copy.
+- **Runtime-data-bound text** — a `text` node renders a LITERAL string; it cannot
+  interpolate a product price or a variable. Data-driven text needs a component.
+
+### Decision checklist
+
+1. Static layout + literal text? → **document** (`screen`/`view`/`text` nodes).
+2. Selection, toggle, conditional styling/visibility, close, or purchase flow? →
+   **document variables + states + actions.**
+3. Text needs runtime data (price, count, formatting)? → code component for that
+   text only.
+4. A list produced by iterating products/data? → code component (map).
+5. Structural branching not expressible with state style overrides? → code component.
+6. Pressed/hover/animated visuals? → code component.
+7. Otherwise → **document.** Prefer building with nodes.
+
+When a code component IS needed, keep it **as small as possible** — one focused
+interactive widget — then place it as a `component` node in the document.
+
+## Code-component authoring (`components/<name>.tsx`)
+
+A code component is a normal React component defined with `defineComponent` from
+`@voidhash/paywalls`. Its identity is its path; a `component` node references it by
+that path. Primitives, hooks, and full `StyleProp` arrays are all available here
+(this is the escape hatch — real JS is allowed). Author it with `write_component`;
+on success it compiles and becomes placeable, on failure you get compile
+diagnostics to fix (the compile loop is internal to `write_component`).
+
+```tsx
+import {
+  defineComponent,
+  View,
+  Text,
+  Pressable,
+  Slot,
+  useSelectedProduct,
+} from "@voidhash/paywalls";
+import type { PaywallProduct } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Product Option",
+  description: "A selectable pricing row.",
+  props: (p) => ({
+    product: p.ref("product"),
+    accentColor: p.string().editor("color").default("rgba(99, 102, 241, 1)"),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ product: a.string() }),
+  }),
+  previews: {
+    default: {
+      data: {
+        products: [
+          {
+            id: "yearly",
+            slug: "yearly",
+            displayName: "Yearly",
+            priceString: "$59.99",
+            period: "year",
+          },
+        ],
+      },
+    },
+  },
+  render: ({ props, actions }) => {
+    const { selectedProductId } = useSelectedProduct();
+    const isSelected = selectedProductId === props.product.id;
+    return (
+      <Pressable onPress={() => actions.onSelect({ product: props.product.id })}>
+        <View
+          style={[
+            { paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16, borderTopLeftRadius: 12, borderTopRightRadius: 12, borderBottomLeftRadius: 12, borderBottomRightRadius: 12, borderTopWidth: 1, borderRightWidth: 1, borderBottomWidth: 1, borderLeftWidth: 1, borderColor: "rgba(255, 255, 255, 0.15)" },
+            isSelected && { borderColor: props.accentColor },
+          ]}
+        >
+          <Text style={{ fontSize: 16, fontWeight: "600", color: "rgba(255, 255, 255, 1)" }}>
+            {props.product.displayName}
+          </Text>
+          <Text style={{ fontSize: 14, color: "rgba(200, 200, 210, 1)" }}>
+            {props.product.priceString}
+          </Text>
+          <Slot />
+        </View>
+      </Pressable>
+    );
+  },
+});
+```
+
+### `defineComponent` shape
+
+`defineComponent({ title?, description?, props?, actions?, previews?, panel?, render })`.
+There is **NO `id`** — a component is identified by its FILE PATH
+(`components/<name>.tsx`), which is the path a `component` node references.
+
+- `render: ({ props, actions }) => ReactNode` — the template. `props` has
+  defaults filled and `.optional()` props typed `T | undefined`; `actions` are
+  typed callbacks.
+- The file MUST default-export the `defineComponent({ … })` definition itself —
+  `export default defineComponent({ … })`. Do NOT export a `.component` property or
+  any other shape — only the `defineComponent(...)` result is valid.
+
+### Prop builders (`p`)
+
+Chainable, immutable: `.label(str)`, `.default(value)`, `.optional()`, and
+`.editor("color")` (string props only).
+
+- `p.string()` — string. `p.number()`, `p.boolean()`.
+- `p.select([...] as const)` — a string constrained to the options.
+- `p.image()` — an image URL/asset reference (string).
+- `p.ref("product")` — a product reference; the template receives a
+  `PaywallProduct`.
+- `p.component()` — a nested element the editor fills; the template receives a
+  `ReactNode`.
+- `p.array(item)` — a homogeneous list; `item` must be a non-array builder.
+
+### Action builders (`a`)
+
+- `a.action()` — a payload-free action; template callback is `() => void`.
+- `a.action({ field: a.string() })` — a typed payload; template callback is
+  `(payload) => void`. Payload fields are scalars: `a.string()`, `a.number()`,
+  `a.boolean()`.
+
+### Primitives (`@voidhash/paywalls`)
+
+`View`, `Text`, `Pressable`, `ScrollView`, `Image`, `Slot`. `style` accepts a
+`StyleProp` — a single object OR an array with falsy entries ignored
+(`style={[base, cond && override]}`) — using the SAME RN style vocabulary as the
+document (plus text-only `textTransform`/`textDecorationLine`/`fontStyle`/`fontFamily`).
+
+- `<Pressable onPress={…}>` — the tap surface. Pass a declared action directly
+  (`onPress={actions.onSelect}`) or wrap it (`onPress={() => actions.onSelect({…})}`).
+- `<Image source={"…" | { uri }} resizeMode="cover" />`.
+- `<Slot />` renders children the document passed into the component instance;
+  `<Slot fallback={…} />` renders fallback when none were passed.
+
+### Runtime hooks (`@voidhash/paywalls`)
+
+- `usePaywallProducts(): readonly PaywallProduct[]` — the available products
+  (map over these to render a list).
+- `useSelectedProduct(): { selectedProduct, selectedProductId, selectProduct }`.
+- `usePaywallVariables(): Record<string, string | number | boolean>`.
+- `usePaywallActions(): { purchase, restore, close, openUrl, track, selectProduct }`.
+- `usePaywallStatus(): { status, productId?, error? }` —
+  `idle`/`purchasing`/`purchased`/`restoring`/`restored`/`failed`.
+- `usePaywallConfig(): PaywallRuntimeConfig` (products, variables, locale,
+  platform).
+
+`PaywallProduct`:
+`{ id, slug, displayName, description?, price?, priceString, currencyCode?, period?, trialPeriod? }`
+where `period` is `"month" | "year" | "week" | "lifetime"`.
+
+### Renaming and deleting components
+
+- `rename_component(fromPath, toPath)` — moves the component. Instances
+  referencing the old path are RE-POINTED automatically (rename cascade), so the
+  `component` nodes keep working.
+- `delete_component(path)` — removes the component. Existing instances degrade to
+  placeholders (they are NOT cascade-deleted), so replace or remove those
+  `component` nodes afterward.
+
+## Tool vocabulary
+
+- `list_paywalls()` — discover paywall slugs in the project.
+- `begin_paywall_edit({ slug })` — capture the revert baseline and return a
+  `changeSetId`.
+- `get_paywall({ slug, nodeId?, depth? })` — read cleaned document JSON (subtree
+  + depth for economy).
+- `get_components({ slug })` — list every placeable catalog, local, and builtin
+  component with its authoring contract.
+- `read_component({ slug, path })` — read a local code component's TSX source.
+- `edit_paywall({ slug, changeSetId, edits })` — apply an atomic batch of document
+  ops (returns minted ids or per-op errors).
+- `duplicate_subtree({ slug, changeSetId, nodeId, parentId, index? })` — clone a
+  visual subtree with fresh ids.
+- `write_component({ slug, changeSetId, path, source })` — create or replace a
+  compiled code component.
+- `rename_component({ slug, changeSetId, fromPath, toPath })` — move a component
+  and re-point its instances.
+- `delete_component({ slug, changeSetId, path })` — delete a component; existing
+  instances degrade to placeholders.
+- `get_paywall_preview({ slug, changeSetId })` — render the version-bound PNG
+  used for visual QA.
+- `finish_paywall_edit({ slug, changeSetId, reviewedDocumentSignature, verdict,
+  unresolvedIssues: [] })` — accept a visually verified edit.
+- `revert_paywall_edit({ changeSetId })` — restore the captured baseline.
+
+Read (`get_paywall`/`get_components`) before you write, use the minted ids the
+edits return, and trust the field/value errors the validator gives you.
diff --git a/package.json b/package.json
index 4c1c2abbb..8c2026335 100644
--- a/package.json
+++ b/package.json
@@ -47,6 +47,8 @@
     "openapi:generate:prod": "pnpm openapi:generate -- api.voidhash.com",
     "db:generate": "node ./scripts/db-generate.mjs",
     "db:migrate": "node ./scripts/db-migrate-local.mjs",
+    "sync:plugins": "tsx ./scripts/sync-plugins.ts",
+    "sync:plugins:check": "tsx ./scripts/sync-plugins.ts --check",
     "check:publication": "node ./scripts/check-publication-boundary.mjs",
     "selfhost:smoke": "tsx selfhost/smoke.mts",
     "selfhost:release-smoke": "tsx selfhost/release-smoke.mts",
diff --git a/packages/agent/LICENSE.md b/packages/agent/LICENSE.md
new file mode 100644
index 000000000..fcc6030aa
--- /dev/null
+++ b/packages/agent/LICENSE.md
@@ -0,0 +1,5 @@
+# License
+
+`@voidhash/agent` is licensed under the GNU AFFERO GENERAL PUBLIC LICENSE, Version 3 only.
+
+The complete license text is available at [`../../LICENSES/AGPL-3.0-only.txt`](../../LICENSES/AGPL-3.0-only.txt).
diff --git a/packages/agent/package.json b/packages/agent/package.json
new file mode 100644
index 000000000..a7e5529bd
--- /dev/null
+++ b/packages/agent/package.json
@@ -0,0 +1,45 @@
+{
+  "name": "@voidhash/agent",
+  "version": "0.0.1-alpha.1",
+  "private": true,
+  "description": "Portable durable agent sessions for Voidhash runtimes.",
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/voidhashcom/voidhash",
+    "directory": "packages/agent"
+  },
+  "type": "module",
+  "main": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts",
+    "./AgentSessionCore": "./src/AgentSessionCore.ts",
+    "./AgentToolAdapter": "./src/AgentToolAdapter.ts",
+    "./EffectRunner": "./src/EffectRunner.ts",
+    "./Protocol": "./src/Protocol.ts",
+    "./SessionLog": "./src/SessionLog.ts",
+    "./SkillSource": "./src/SkillSource.ts"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "typecheck-go": "tsgo --noEmit",
+    "test": "vp test run -c vitest.mts",
+    "test:workerd": "pnpm test:workerd:bundle && pnpm test:workerd:do",
+    "test:workerd:bundle": "wrangler deploy tests/workerd-probe.ts --name voidhash-agent-workerd-probe --dry-run --outdir .cache/workerd --compatibility-date 2026-03-17 --compatibility-flags nodejs_compat",
+    "test:workerd:do": "node tests/run-workerd-do-probe.mjs"
+  },
+  "dependencies": {
+    "@earendil-works/pi-agent-core": "0.80.7",
+    "@earendil-works/pi-ai": "0.80.7",
+    "@voidhash/platform": "workspace:*",
+    "effect": "catalog:",
+    "typebox": "1.1.38"
+  },
+  "devDependencies": {
+    "@voidhash/platform-node": "workspace:*",
+    "@voidhash/tsconfig": "workspace:*",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:",
+    "wrangler": "^4.0.0"
+  }
+}
diff --git a/packages/agent/src/AgentSessionCore.ts b/packages/agent/src/AgentSessionCore.ts
new file mode 100644
index 000000000..2b28bdc3f
--- /dev/null
+++ b/packages/agent/src/AgentSessionCore.ts
@@ -0,0 +1,560 @@
+import { Agent, type AgentEvent, type AgentMessage } from "@earendil-works/pi-agent-core";
+import type { Model } from "@earendil-works/pi-ai";
+import {
+  type DurableEntityAddress,
+  type DurableEntityHostShape,
+  type DurableEntitySession,
+  makeDurableEntityAddress,
+} from "@voidhash/platform/DurableEntity";
+import { Effect, Semaphore } from "effect";
+
+import {
+  AGENT_PROTOCOL_VERSION,
+  type AgentClientMessage,
+  type AgentServerMessage,
+  type AgentSessionDynamicContext,
+  type AgentSessionOwner,
+  decodeAgentClientMessage,
+  encodeAgentServerMessage,
+  promptImages,
+} from "./Protocol.ts";
+import {
+  appendSessionLog,
+  ensureSessionOwner,
+  messagesFromSessionLog,
+  readSessionLog,
+  readSessionLogCount,
+  type SessionLogEntry,
+  type SessionLogEntryInput,
+} from "./SessionLog.ts";
+
+/** Durable-entity type used for every agent session. */
+export const AGENT_SESSION_ENTITY_TYPE = "agent-session";
+
+/** Creates the stable durable-entity address for one agent session. */
+export const agentSessionAddress = (sessionId: string): DurableEntityAddress =>
+  makeDurableEntityAddress(AGENT_SESSION_ENTITY_TYPE, sessionId);
+
+/** Runtime input supplied by an authenticated host when a socket connects. */
+export interface AgentSessionConnection<ConnectionData = unknown> {
+  readonly sessionId: string;
+  readonly owner: AgentSessionOwner;
+  readonly session: DurableEntitySession;
+  readonly data: ConnectionData;
+  readonly metadata?: AgentSessionMetadata;
+}
+
+/** Searchable metadata maintained outside the durable transcript. */
+export interface AgentSessionMetadata {
+  readonly surface: string;
+  readonly paywallId?: string | null;
+}
+
+/** Mutable references made available while the host constructs a Pi agent. */
+export interface AgentSessionFactoryInput<ConnectionData> {
+  readonly sessionId: string;
+  readonly owner: AgentSessionOwner;
+  readonly connectionData: ConnectionData;
+  readonly messages: ReadonlyArray<AgentMessage>;
+  readonly dynamicContext: { current: AgentSessionDynamicContext };
+  readonly metadata?: AgentSessionMetadata;
+}
+
+/** Host-specific Pi agent and model construction boundary. */
+export interface AgentSessionFactory<ConnectionData = unknown> {
+  readonly create: (input: AgentSessionFactoryInput<ConnectionData>) => Promise<Agent> | Agent;
+  readonly preparePrompt?: (input: {
+    readonly agent: Agent;
+    readonly message: AgentMessage;
+    readonly sessionId: string;
+    readonly owner: AgentSessionOwner;
+    readonly connectionData: ConnectionData;
+    readonly dynamicContext: { current: AgentSessionDynamicContext };
+  }) => Promise<void> | void;
+  readonly resolveModel: (
+    provider: string,
+    modelId: string,
+    connectionData: ConnectionData,
+  ) => Promise<Model<string> | undefined> | Model<string> | undefined;
+}
+
+/** Optional persistence hook for the Postgres session index. */
+export interface AgentSessionIndex<ConnectionData = unknown> {
+  readonly touch: (input: {
+    readonly sessionId: string;
+    readonly owner: AgentSessionOwner;
+    readonly title?: string;
+    readonly metadata?: AgentSessionMetadata;
+    readonly connectionData: ConnectionData;
+  }) => Promise<void>;
+}
+
+/** Configuration for {@link AgentSessionCore}. */
+export interface AgentSessionCoreOptions<ConnectionData> {
+  readonly host: DurableEntityHostShape;
+  readonly factory: AgentSessionFactory<ConnectionData>;
+  readonly idleTimeoutMs?: number;
+  readonly now?: () => number;
+  readonly index?: AgentSessionIndex<ConnectionData>;
+}
+
+interface LiveAgentSession<ConnectionData> {
+  readonly agent: Agent;
+  readonly owner: AgentSessionOwner;
+  readonly connectionData: ConnectionData;
+  readonly dynamicContext: { current: AgentSessionDynamicContext };
+  metadata: AgentSessionMetadata | undefined;
+  readonly unsubscribe: () => void;
+}
+
+const sameOwner = (left: AgentSessionOwner, right: AgentSessionOwner): boolean =>
+  left.organizationId === right.organizationId &&
+  left.projectId === right.projectId &&
+  left.userId === right.userId;
+
+const userMessage = (
+  text: string,
+  images: ReadonlyArray<{ type: "image"; data: string; mimeType: string }>,
+): AgentMessage => ({
+  role: "user",
+  content: images.length === 0 ? text : [{ type: "text", text }, ...images],
+  timestamp: Date.now(),
+});
+
+const errorMessage = (cause: unknown): string =>
+  cause instanceof Error ? cause.message : typeof cause === "string" ? cause : String(cause);
+
+const titleFromText = (text: string): string => {
+  const title = text.trim() || "New chat";
+  return title.length > 80 ? `${title.slice(0, 79)}…` : title;
+};
+
+/**
+ * Portable per-session Pi harness. Long-running prompts execute directly
+ * against the in-memory registry; entity turns are used only for short storage,
+ * session-list, and alarm operations.
+ */
+export class AgentSessionCore<ConnectionData = unknown> {
+  readonly #host: DurableEntityHostShape;
+  readonly #factory: AgentSessionFactory<ConnectionData>;
+  readonly #idleTimeoutMs: number;
+  readonly #now: () => number;
+  readonly #index: AgentSessionIndex<ConnectionData> | undefined;
+  readonly #sessions = new Map<string, LiveAgentSession<ConnectionData>>();
+  readonly #creating = new Map<string, Promise<LiveAgentSession<ConnectionData>>>();
+  readonly #commandLocks = new Map<string, Semaphore.Semaphore>();
+
+  constructor(options: AgentSessionCoreOptions<ConnectionData>) {
+    this.#host = options.host;
+    this.#factory = options.factory;
+    this.#idleTimeoutMs = options.idleTimeoutMs ?? 5 * 60_000;
+    this.#now = options.now ?? Date.now;
+    this.#index = options.index;
+  }
+
+  /** Attaches an authenticated WebSocket and verifies immutable session ownership. */
+  readonly connect = (
+    connection: AgentSessionConnection<ConnectionData>,
+  ): Effect.Effect<boolean> => {
+    const address = agentSessionAddress(connection.sessionId);
+    const host = this.#host;
+    const index = this.#index;
+    return Effect.gen(function* () {
+      const authorized = yield* ensureSessionOwner(host, address, connection.owner, sameOwner);
+      if (!authorized) return false;
+      yield* Effect.promise(
+        () =>
+          index?.touch({
+            sessionId: connection.sessionId,
+            owner: connection.owner,
+            metadata: connection.metadata,
+            connectionData: connection.data,
+          }) ?? Promise.resolve(),
+      );
+      yield* host.run(address, (entity) =>
+        Effect.gen(function* () {
+          yield* entity.sessions.attach(connection.session);
+          yield* entity.alarm.delete;
+        }),
+      );
+      return true;
+    });
+  };
+
+  /** Detaches a socket and schedules idle eviction when it was the final client. */
+  readonly disconnect = (sessionId: string, connectionId: string): Effect.Effect<void> => {
+    const address = agentSessionAddress(sessionId);
+    const now = this.#now;
+    const idleTimeoutMs = this.#idleTimeoutMs;
+    return this.#host.run(address, (entity) =>
+      Effect.gen(function* () {
+        yield* entity.sessions.remove(connectionId);
+        const remaining = yield* entity.sessions.list;
+        if (remaining.length === 0) {
+          yield* entity.alarm.set(now() + idleTimeoutMs);
+        }
+      }),
+    );
+  };
+
+  /** Handles one command without holding the durable entity's serialized turn. */
+  readonly handleMessage = (
+    connection: AgentSessionConnection<ConnectionData>,
+    frame: string | Uint8Array,
+  ): Effect.Effect<void> => {
+    let lock = this.#commandLocks.get(connection.sessionId);
+    if (lock === undefined) {
+      lock = Semaphore.makeUnsafe(1);
+      this.#commandLocks.set(connection.sessionId, lock);
+    }
+    return lock.withPermit(this.#handleMessageNow(connection, frame));
+  };
+
+  readonly #handleMessageNow = (
+    connection: AgentSessionConnection<ConnectionData>,
+    frame: string | Uint8Array,
+  ): Effect.Effect<void> => {
+    const host = this.#host;
+    const factory = this.#factory;
+    const index = this.#index;
+    const sessions = this.#sessions;
+    const getOrCreate = () => this.#getOrCreate(connection);
+    const send = (message: AgentServerMessage) => this.#send(connection.session, message);
+    const ack = (command: AgentClientMessage) => this.#ack(connection.session, command);
+    const broadcastError = (requestId: string, message: string) =>
+      this.#broadcastError(connection.sessionId, requestId, message);
+    return Effect.gen(function* () {
+      if (typeof frame !== "string") {
+        yield* send({
+          v: AGENT_PROTOCOL_VERSION,
+          type: "error",
+          message: "Agent commands must be UTF-8 JSON text frames",
+        });
+        return;
+      }
+      let command: AgentClientMessage;
+      try {
+        command = decodeAgentClientMessage(frame);
+      } catch (cause) {
+        yield* send({
+          v: AGENT_PROTOCOL_VERSION,
+          type: "error",
+          message: `Invalid agent command: ${errorMessage(cause)}`,
+        });
+        return;
+      }
+
+      switch (command.type) {
+        case "get_entries": {
+          const entries = yield* readSessionLog(host, agentSessionAddress(connection.sessionId));
+          yield* send({
+            v: AGENT_PROTOCOL_VERSION,
+            type: "entries",
+            requestId: command.requestId,
+            entries,
+          });
+          return;
+        }
+        case "get_state": {
+          const live = yield* Effect.promise(getOrCreate);
+          const entryCount = yield* readSessionLogCount(
+            host,
+            agentSessionAddress(connection.sessionId),
+          );
+          yield* send({
+            v: AGENT_PROTOCOL_VERSION,
+            type: "state",
+            requestId: command.requestId,
+            state: {
+              sessionId: connection.sessionId,
+              isStreaming: live.agent.state.isStreaming,
+              model: {
+                provider: live.agent.state.model.provider,
+                id: live.agent.state.model.id,
+              },
+              entryCount,
+              context: live.dynamicContext.current,
+            },
+          });
+          return;
+        }
+        case "set_context": {
+          const live = yield* Effect.promise(getOrCreate);
+          live.dynamicContext.current = {
+            ...(command.paywallId === undefined ? {} : { paywallId: command.paywallId }),
+            selectedNodeIds: command.selectedNodeIds,
+          };
+          live.metadata = {
+            surface: live.metadata?.surface ?? "designer",
+            paywallId: command.paywallId ?? null,
+          };
+          yield* Effect.promise(
+            () =>
+              index?.touch({
+                sessionId: connection.sessionId,
+                owner: connection.owner,
+                metadata: live.metadata,
+                connectionData: live.connectionData,
+              }) ?? Promise.resolve(),
+          );
+          yield* ack(command);
+          return;
+        }
+        case "set_model": {
+          const live = yield* Effect.promise(getOrCreate);
+          const model = yield* Effect.promise(() =>
+            Promise.resolve(
+              factory.resolveModel(command.provider, command.modelId, live.connectionData),
+            ),
+          );
+          if (model === undefined) {
+            yield* send({
+              v: AGENT_PROTOCOL_VERSION,
+              type: "error",
+              requestId: command.requestId,
+              message: `Unknown model: ${command.provider}/${command.modelId}`,
+            });
+            return;
+          }
+          live.agent.state.model = model;
+          yield* appendSessionLog(host, agentSessionAddress(connection.sessionId), [
+            { type: "model_change", provider: model.provider, modelId: model.id },
+          ]);
+          yield* ack(command);
+          return;
+        }
+        case "abort": {
+          sessions.get(connection.sessionId)?.agent.abort();
+          yield* ack(command);
+          return;
+        }
+        case "prompt":
+        case "steer":
+        case "follow_up": {
+          const live = yield* Effect.promise(getOrCreate);
+          const images = promptImages(command);
+          const message = userMessage(command.text, images);
+          if (command.type === "prompt") {
+            if (live.agent.state.isStreaming) {
+              yield* send({
+                v: AGENT_PROTOCOL_VERSION,
+                type: "error",
+                requestId: command.requestId,
+                message: "Agent is already running; use steer or follow_up",
+              });
+              return;
+            }
+            yield* Effect.promise(() =>
+              Promise.resolve(
+                factory.preparePrompt?.({
+                  agent: live.agent,
+                  message,
+                  sessionId: connection.sessionId,
+                  owner: connection.owner,
+                  connectionData: live.connectionData,
+                  dynamicContext: live.dynamicContext,
+                }),
+              ),
+            );
+            void live.agent
+              .prompt(message)
+              .catch((cause) =>
+                Effect.runPromise(broadcastError(command.requestId, errorMessage(cause))),
+              );
+            yield* Effect.promise(
+              () =>
+                index?.touch({
+                  sessionId: connection.sessionId,
+                  owner: connection.owner,
+                  title: titleFromText(command.text),
+                  metadata: live.metadata,
+                  connectionData: live.connectionData,
+                }) ?? Promise.resolve(),
+            );
+          } else if (command.type === "steer") {
+            live.agent.steer(message);
+          } else {
+            live.agent.followUp(message);
+          }
+          yield* ack(command);
+        }
+      }
+    });
+  };
+
+  /** Fires one persisted idle alarm and evicts the in-memory Pi agent if unused. */
+  readonly onAlarm = (sessionId: string): Effect.Effect<boolean> => {
+    const address = agentSessionAddress(sessionId);
+    const host = this.#host;
+    const now = this.#now;
+    const idleTimeoutMs = this.#idleTimeoutMs;
+    const liveSessions = this.#sessions;
+    const commandLocks = this.#commandLocks;
+    return host.run(address, (entity) =>
+      Effect.gen(function* () {
+        const scheduledTime = yield* entity.alarm.get;
+        if (scheduledTime === undefined || scheduledTime > now()) return false;
+        const sessions = yield* entity.sessions.list;
+        if (sessions.length > 0) {
+          yield* entity.alarm.delete;
+          return false;
+        }
+        const live = liveSessions.get(sessionId);
+        if (live?.agent.state.isStreaming) {
+          yield* entity.alarm.set(now() + idleTimeoutMs);
+          return false;
+        }
+        yield* entity.alarm.delete;
+        live?.unsubscribe();
+        liveSessions.delete(sessionId);
+        commandLocks.delete(sessionId);
+        return true;
+      }),
+    );
+  };
+
+  /** Returns whether this process currently holds a live Pi agent for the session. */
+  readonly hasLiveSession = (sessionId: string): boolean => this.#sessions.has(sessionId);
+
+  async #getOrCreate(
+    connection: AgentSessionConnection<ConnectionData>,
+  ): Promise<LiveAgentSession<ConnectionData>> {
+    const existing = this.#sessions.get(connection.sessionId);
+    if (existing) {
+      if (!sameOwner(existing.owner, connection.owner)) throw new Error("Session access denied");
+      return existing;
+    }
+    const pending = this.#creating.get(connection.sessionId);
+    if (pending) return pending;
+
+    const creating = this.#create(connection).finally(() =>
+      this.#creating.delete(connection.sessionId),
+    );
+    this.#creating.set(connection.sessionId, creating);
+    return creating;
+  }
+
+  async #create(
+    connection: AgentSessionConnection<ConnectionData>,
+  ): Promise<LiveAgentSession<ConnectionData>> {
+    const entries = await Effect.runPromise(
+      readSessionLog(this.#host, agentSessionAddress(connection.sessionId)),
+    );
+    const dynamicContext = {
+      current: {
+        ...(typeof connection.metadata?.paywallId === "string"
+          ? { paywallId: connection.metadata.paywallId }
+          : {}),
+        selectedNodeIds: [],
+      } satisfies AgentSessionDynamicContext,
+    };
+    const agent = await this.#factory.create({
+      sessionId: connection.sessionId,
+      owner: connection.owner,
+      connectionData: connection.data,
+      messages: messagesFromSessionLog(entries),
+      dynamicContext,
+      metadata: connection.metadata,
+    });
+    const modelChange = entries.findLast(
+      (entry): entry is Extract<SessionLogEntry, { readonly type: "model_change" }> =>
+        entry.type === "model_change",
+    );
+    if (modelChange !== undefined) {
+      const model = await this.#factory.resolveModel(
+        modelChange.provider,
+        modelChange.modelId,
+        connection.data,
+      );
+      if (model !== undefined) agent.state.model = model;
+    }
+    const unsubscribe = agent.subscribe((event) => this.#onAgentEvent(connection.sessionId, event));
+    const live = {
+      agent,
+      owner: connection.owner,
+      connectionData: connection.data,
+      dynamicContext,
+      metadata: connection.metadata,
+      unsubscribe,
+    };
+    this.#sessions.set(connection.sessionId, live);
+    return live;
+  }
+
+  async #onAgentEvent(sessionId: string, event: AgentEvent): Promise<void> {
+    await Effect.runPromise(
+      this.#broadcast(sessionId, {
+        v: AGENT_PROTOCOL_VERSION,
+        type: "event",
+        event,
+      }),
+    );
+    const inputs: SessionLogEntryInput[] = [];
+    if (event.type === "message_end" && event.message.role === "user") {
+      inputs.push({ type: "message", message: event.message });
+    }
+    if (event.type === "turn_end") {
+      inputs.push({ type: "message", message: event.message });
+      inputs.push(
+        ...event.toolResults.map((message) => ({
+          type: "message" as const,
+          message,
+        })),
+      );
+    }
+    if (inputs.length > 0) {
+      await Effect.runPromise(appendSessionLog(this.#host, agentSessionAddress(sessionId), inputs));
+    }
+    if (event.type === "turn_end") {
+      const live = this.#sessions.get(sessionId);
+      if (live) {
+        await this.#index?.touch({
+          sessionId,
+          owner: live.owner,
+          metadata: live.metadata,
+          connectionData: live.connectionData,
+        });
+      }
+    }
+  }
+
+  #ack(session: DurableEntitySession, command: AgentClientMessage): Effect.Effect<void> {
+    return this.#send(session, {
+      v: AGENT_PROTOCOL_VERSION,
+      type: "ack",
+      requestId: command.requestId,
+      command: command.type,
+    });
+  }
+
+  #send(session: DurableEntitySession, message: AgentServerMessage): Effect.Effect<void> {
+    return session.send(encodeAgentServerMessage(message));
+  }
+
+  #broadcast(sessionId: string, message: AgentServerMessage): Effect.Effect<void> {
+    return this.#host.run(agentSessionAddress(sessionId), (entity) =>
+      entity.sessions.list.pipe(
+        Effect.flatMap((sessions) =>
+          Effect.forEach(sessions, (session) => this.#send(session, message), {
+            discard: true,
+            concurrency: "unbounded",
+          }),
+        ),
+      ),
+    );
+  }
+
+  #broadcastError(sessionId: string, requestId: string, message: string): Effect.Effect<void> {
+    return this.#broadcast(sessionId, {
+      v: AGENT_PROTOCOL_VERSION,
+      type: "error",
+      requestId,
+      message,
+    });
+  }
+}
+
+/** Extracts structural session entries for API responses without mutable arrays. */
+export const readonlySessionEntries = (
+  entries: ReadonlyArray<SessionLogEntry>,
+): ReadonlyArray<SessionLogEntry> => entries;
diff --git a/packages/agent/src/AgentToolAdapter.ts b/packages/agent/src/AgentToolAdapter.ts
new file mode 100644
index 000000000..6ffa2cc88
--- /dev/null
+++ b/packages/agent/src/AgentToolAdapter.ts
@@ -0,0 +1,89 @@
+import type {
+  AfterToolCallResult,
+  AgentTool,
+  AgentToolResult,
+} from "@earendil-works/pi-agent-core";
+import type { ImageContent, TextContent } from "@earendil-works/pi-ai";
+import { Effect, type Context } from "effect";
+import type { TSchema } from "typebox";
+
+import type { BoundEffectRunner } from "./EffectRunner.ts";
+
+const EffectToolError = Symbol("@voidhash/agent/EffectToolError");
+
+type MarkedAgentToolResult<Details> = AgentToolResult<Details> & {
+  readonly [EffectToolError]?: true;
+};
+
+/** Normalized result shared by Effect-backed tools and Pi. */
+export interface EffectAgentToolResult<Details = unknown> {
+  readonly content: ReadonlyArray<TextContent | ImageContent>;
+  readonly details: Details;
+  readonly isError?: boolean;
+}
+
+/** Definition accepted by {@link makeEffectAgentTool}. */
+export interface EffectAgentToolDefinition<Params, Details, E, R> {
+  readonly name: string;
+  readonly label?: string;
+  readonly description: string;
+  readonly parameters: TSchema;
+  readonly effectHandler: (
+    params: Params,
+    signal: AbortSignal | undefined,
+  ) => Effect.Effect<EffectAgentToolResult<Details>, E, R>;
+}
+
+/** Adapts one Effect handler to a Pi tool using a lazy Effect runner. */
+export const makeEffectAgentToolWithRunner = <Params, Details, E, R>(
+  definition: EffectAgentToolDefinition<Params, Details, E, R>,
+  runEffect: BoundEffectRunner<R>,
+): AgentTool<TSchema, Details> => ({
+  name: definition.name,
+  label: definition.label ?? definition.name,
+  description: definition.description,
+  parameters: definition.parameters,
+  execute: async (_toolCallId, params, signal) => {
+    const effect = definition
+      .effectHandler(params as Params, signal)
+      .pipe(Effect.mapError(toError));
+    const result = await runEffect(effect, signal);
+    const output: MarkedAgentToolResult<Details> = {
+      content: [...result.content],
+      details: result.details,
+    };
+    if (result.isError) {
+      Object.defineProperty(output, EffectToolError, { value: true });
+    }
+    return output;
+  },
+});
+
+/**
+ * Adapts one Effect handler to a Pi tool while preserving the Effect context
+ * captured when the agent session was created.
+ */
+export const makeEffectAgentTool = <Params, Details, E, R>(
+  definition: EffectAgentToolDefinition<Params, Details, E, R>,
+  context: Context.Context<R>,
+): AgentTool<TSchema, Details> =>
+  makeEffectAgentToolWithRunner(definition, (effect, signal) =>
+    Effect.runPromise(
+      effect.pipe(Effect.provide(context)),
+      signal === undefined ? undefined : { signal },
+    ),
+  );
+
+/**
+ * Pi `afterToolCall` override that preserves structured Effect-tool details
+ * while marking a folded workspace failure as an error result.
+ */
+export const effectAgentToolErrorOverride = (
+  result: AgentToolResult<unknown>,
+): AfterToolCallResult | undefined =>
+  (result as MarkedAgentToolResult<unknown>)[EffectToolError] === true
+    ? { isError: true }
+    : undefined;
+
+const toError = (cause: unknown): Error =>
+  cause instanceof Error ? cause : new Error(typeof cause === "string" ? cause : String(cause));
diff --git a/packages/agent/src/EffectRunner.ts b/packages/agent/src/EffectRunner.ts
new file mode 100644
index 000000000..89e51c5f8
--- /dev/null
+++ b/packages/agent/src/EffectRunner.ts
@@ -0,0 +1,38 @@
+import { Effect, Layer } from "effect";
+
+/** Executes an Effect against services selected by connection-specific input. */
+export interface EffectRunner<ConnectionData, R> {
+  <A, E>(
+    connectionData: ConnectionData,
+    effect: Effect.Effect<A, E, R>,
+    signal?: AbortSignal,
+  ): Promise<A>;
+}
+
+/** Executes an Effect after its connection-specific input has been bound. */
+export interface BoundEffectRunner<R> {
+  <A, E>(effect: Effect.Effect<A, E, R>, signal?: AbortSignal): Promise<A>;
+}
+
+/** Binds connection data to an Effect runner without acquiring any services yet. */
+export const bindEffectRunner =
+  <ConnectionData, R>(
+    runner: EffectRunner<ConnectionData, R>,
+    connectionData: ConnectionData,
+  ): BoundEffectRunner<R> =>
+  (effect, signal) =>
+    runner(connectionData, effect, signal);
+
+/**
+ * Builds a fresh scoped Layer for every execution and releases it only after
+ * the supplied Effect completes.
+ */
+export const makeLayerEffectRunner =
+  <ConnectionData, R>(
+    layerFor: (connectionData: ConnectionData) => Layer.Layer<R>,
+  ): EffectRunner<ConnectionData, R> =>
+  (connectionData, effect, signal) =>
+    Effect.runPromise(
+      effect.pipe(Effect.provide(layerFor(connectionData))),
+      signal === undefined ? undefined : { signal },
+    );
diff --git a/packages/agent/src/Protocol.ts b/packages/agent/src/Protocol.ts
new file mode 100644
index 000000000..3d56d705b
--- /dev/null
+++ b/packages/agent/src/Protocol.ts
@@ -0,0 +1,109 @@
+import type { AgentEvent } from "@earendil-works/pi-agent-core";
+import type { ImageContent } from "@earendil-works/pi-ai";
+import { Schema } from "effect";
+
+/** Current WebSocket protocol version. */
+export const AGENT_PROTOCOL_VERSION = 1 as const;
+
+const Version = Schema.Literal(AGENT_PROTOCOL_VERSION);
+const RequestId = Schema.String;
+const Image = Schema.Struct({
+  type: Schema.Literal("image"),
+  data: Schema.String,
+  mimeType: Schema.String,
+});
+const TextCommand = {
+  v: Version,
+  requestId: RequestId,
+  text: Schema.String,
+  images: Schema.optional(Schema.Array(Image)),
+} as const;
+
+/** Commands accepted by an agent-session WebSocket. */
+export const AgentClientMessageSchema = Schema.Union([
+  Schema.Struct({ ...TextCommand, type: Schema.Literal("prompt") }),
+  Schema.Struct({ ...TextCommand, type: Schema.Literal("steer") }),
+  Schema.Struct({ ...TextCommand, type: Schema.Literal("follow_up") }),
+  Schema.Struct({ v: Version, requestId: RequestId, type: Schema.Literal("abort") }),
+  Schema.Struct({ v: Version, requestId: RequestId, type: Schema.Literal("get_state") }),
+  Schema.Struct({ v: Version, requestId: RequestId, type: Schema.Literal("get_entries") }),
+  Schema.Struct({
+    v: Version,
+    requestId: RequestId,
+    type: Schema.Literal("set_model"),
+    provider: Schema.String,
+    modelId: Schema.String,
+  }),
+  Schema.Struct({
+    v: Version,
+    requestId: RequestId,
+    type: Schema.Literal("set_context"),
+    paywallId: Schema.optional(Schema.String),
+    selectedNodeIds: Schema.Array(Schema.String),
+  }),
+]);
+
+export type AgentClientMessage = typeof AgentClientMessageSchema.Type;
+
+/** Portable session owner stored with the transcript. */
+export interface AgentSessionOwner {
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly userId: string;
+}
+
+/** Mutable designer context supplied to the next model turn. */
+export interface AgentSessionDynamicContext {
+  readonly paywallId?: string;
+  readonly selectedNodeIds: ReadonlyArray<string>;
+}
+
+/** State snapshot returned by `get_state`. */
+export interface AgentSessionState {
+  readonly sessionId: string;
+  readonly isStreaming: boolean;
+  readonly model: { readonly provider: string; readonly id: string };
+  readonly entryCount: number;
+  readonly context: AgentSessionDynamicContext;
+}
+
+/** Frames emitted by an agent-session WebSocket. */
+export type AgentServerMessage =
+  | { readonly v: 1; readonly type: "event"; readonly event: AgentEvent }
+  | {
+      readonly v: 1;
+      readonly type: "ack";
+      readonly requestId: string;
+      readonly command: AgentClientMessage["type"];
+    }
+  | {
+      readonly v: 1;
+      readonly type: "error";
+      readonly requestId?: string;
+      readonly message: string;
+    }
+  | {
+      readonly v: 1;
+      readonly type: "state";
+      readonly requestId: string;
+      readonly state: AgentSessionState;
+    }
+  | {
+      readonly v: 1;
+      readonly type: "entries";
+      readonly requestId: string;
+      readonly entries: ReadonlyArray<unknown>;
+    };
+
+/** Decodes and validates one text WebSocket command. */
+export const decodeAgentClientMessage = (frame: string): AgentClientMessage =>
+  Schema.decodeUnknownSync(AgentClientMessageSchema)(JSON.parse(frame));
+
+/** JSON-encodes one server frame. */
+export const encodeAgentServerMessage = (message: AgentServerMessage): string =>
+  JSON.stringify(message);
+
+/** Converts prompt wire content into the Pi image content shape. */
+export const promptImages = (
+  message: Extract<AgentClientMessage, { readonly type: "prompt" | "steer" | "follow_up" }>,
+): ReadonlyArray<ImageContent> => message.images ?? [];
diff --git a/packages/agent/src/SessionLog.ts b/packages/agent/src/SessionLog.ts
new file mode 100644
index 000000000..2c04f1b6f
--- /dev/null
+++ b/packages/agent/src/SessionLog.ts
@@ -0,0 +1,249 @@
+import type { AgentMessage } from "@earendil-works/pi-agent-core";
+import type {
+  DurableEntityAddress,
+  DurableEntityContext,
+  DurableEntityHostShape,
+} from "@voidhash/platform/DurableEntity";
+import { Effect } from "effect";
+
+const LOG_META_KEY = "agent-session/log/meta";
+const LOG_ENTRY_PREFIX = "agent-session/log/entry/";
+const OWNER_KEY = "agent-session/owner";
+
+/** Maximum UTF-8 payload stored in one durable key-value value. */
+export const SESSION_LOG_CHUNK_BYTES = 120 * 1024;
+
+interface SessionLogMeta {
+  readonly count: number;
+  readonly headId?: string;
+}
+
+interface StoredEntryMeta {
+  readonly chunks: number;
+}
+
+interface SessionLogEntryBase {
+  readonly id: string;
+  readonly parentId: string | null;
+  readonly timestamp: number;
+}
+
+/** Append-only Pi-compatible transcript and structural entry. */
+export type SessionLogEntry =
+  | (SessionLogEntryBase & {
+      readonly type: "message";
+      readonly message: AgentMessage;
+    })
+  | (SessionLogEntryBase & {
+      readonly type: "model_change";
+      readonly provider: string;
+      readonly modelId: string;
+    })
+  | (SessionLogEntryBase & {
+      readonly type: "compaction";
+      readonly summary: string;
+      readonly firstKeptEntryId: string;
+    })
+  | (SessionLogEntryBase & {
+      readonly type: "branch_summary";
+      readonly summary: string;
+      readonly fromEntryId: string;
+    })
+  | (SessionLogEntryBase & {
+      readonly type: "label";
+      readonly label: string;
+    });
+
+/** Entry data supplied before ids, parent links, and timestamps are assigned. */
+export type SessionLogEntryInput =
+  | { readonly type: "message"; readonly message: AgentMessage }
+  | { readonly type: "model_change"; readonly provider: string; readonly modelId: string }
+  | {
+      readonly type: "compaction";
+      readonly summary: string;
+      readonly firstKeptEntryId: string;
+    }
+  | {
+      readonly type: "branch_summary";
+      readonly summary: string;
+      readonly fromEntryId: string;
+    }
+  | { readonly type: "label"; readonly label: string };
+
+/** Options for deterministic session-log tests. */
+export interface SessionLogOptions {
+  readonly id: () => string;
+  readonly now: () => number;
+}
+
+const defaultOptions: SessionLogOptions = {
+  id: () => globalThis.crypto.randomUUID(),
+  now: Date.now,
+};
+
+const entryPrefix = (index: number): string =>
+  `${LOG_ENTRY_PREFIX}${index.toString().padStart(12, "0")}/`;
+
+const entryMetaKey = (index: number): string => `${entryPrefix(index)}meta`;
+
+const entryChunkKey = (index: number, chunk: number): string =>
+  `${entryPrefix(index)}chunk/${chunk.toString().padStart(6, "0")}`;
+
+const parseMeta = (value: unknown): SessionLogMeta => {
+  if (
+    typeof value === "object" &&
+    value !== null &&
+    "count" in value &&
+    typeof value.count === "number" &&
+    Number.isSafeInteger(value.count) &&
+    value.count >= 0
+  ) {
+    return value as SessionLogMeta;
+  }
+  return { count: 0 };
+};
+
+const parseEntryMeta = (value: unknown, index: number): StoredEntryMeta => {
+  if (
+    typeof value === "object" &&
+    value !== null &&
+    "chunks" in value &&
+    typeof value.chunks === "number" &&
+    Number.isSafeInteger(value.chunks) &&
+    value.chunks > 0
+  ) {
+    return value as StoredEntryMeta;
+  }
+  throw new Error(`Agent session log entry ${index} has invalid metadata`);
+};
+
+const serializeEntry = (entry: SessionLogEntry): ReadonlyArray<string> => {
+  const bytes = new TextEncoder().encode(JSON.stringify(entry));
+  const decoder = new TextDecoder();
+  const chunks: string[] = [];
+  let offset = 0;
+  while (offset < bytes.length) {
+    let end = Math.min(offset + SESSION_LOG_CHUNK_BYTES, bytes.length);
+    while (end < bytes.length && (bytes[end] & 0xc0) === 0x80) end -= 1;
+    chunks.push(decoder.decode(bytes.subarray(offset, end)));
+    offset = end;
+  }
+  return chunks;
+};
+
+const readEntry = (entity: DurableEntityContext, index: number) =>
+  Effect.gen(function* () {
+    const meta = parseEntryMeta(yield* entity.keyValue.get(entryMetaKey(index)), index);
+    const chunks = yield* Effect.forEach(
+      Array.from({ length: meta.chunks }, (_, chunk) => chunk),
+      (chunk) => entity.keyValue.get(entryChunkKey(index, chunk)),
+      { concurrency: 16 },
+    );
+    if (!chunks.every((chunk): chunk is string => typeof chunk === "string")) {
+      return yield* Effect.die(
+        new Error(`Agent session log entry ${index} is missing a storage chunk`),
+      );
+    }
+    return JSON.parse(chunks.join("")) as SessionLogEntry;
+  });
+
+const readEntries = (entity: DurableEntityContext) =>
+  Effect.gen(function* () {
+    const meta = parseMeta(yield* entity.keyValue.get(LOG_META_KEY));
+    return yield* Effect.forEach(
+      Array.from({ length: meta.count }, (_, index) => index),
+      (index) => readEntry(entity, index),
+      { concurrency: 8 },
+    );
+  });
+
+/** Reads every persisted session entry in append order. */
+export const readSessionLog = (
+  host: DurableEntityHostShape,
+  address: DurableEntityAddress,
+): Effect.Effect<ReadonlyArray<SessionLogEntry>> => host.run(address, readEntries);
+
+/** Reads the persisted number of entries without loading transcript pages. */
+export const readSessionLogCount = (
+  host: DurableEntityHostShape,
+  address: DurableEntityAddress,
+): Effect.Effect<number> =>
+  host.run(address, (entity) =>
+    entity.keyValue.get(LOG_META_KEY).pipe(Effect.map((value) => parseMeta(value).count)),
+  );
+
+/**
+ * Appends entries in one serialized entity transaction and links each entry to
+ * the preceding head, preserving Pi's session-tree shape.
+ */
+export const appendSessionLog = (
+  host: DurableEntityHostShape,
+  address: DurableEntityAddress,
+  inputs: ReadonlyArray<SessionLogEntryInput>,
+  options: SessionLogOptions = defaultOptions,
+): Effect.Effect<ReadonlyArray<SessionLogEntry>> =>
+  inputs.length === 0
+    ? Effect.succeed([])
+    : host.run(address, (entity) =>
+        Effect.gen(function* () {
+          let meta = parseMeta(yield* entity.keyValue.get(LOG_META_KEY));
+          const appended: SessionLogEntry[] = [];
+
+          for (const input of inputs) {
+            const entry = {
+              ...input,
+              id: options.id(),
+              parentId: meta.headId ?? null,
+              timestamp: options.now(),
+            } as SessionLogEntry;
+            const entryIndex = meta.count;
+            const chunks = serializeEntry(entry);
+            yield* Effect.forEach(
+              chunks,
+              (chunk, chunkIndex) =>
+                entity.keyValue.put(entryChunkKey(entryIndex, chunkIndex), chunk),
+              { discard: true },
+            );
+            yield* entity.keyValue.put(entryMetaKey(entryIndex), { chunks: chunks.length });
+            appended.push(entry);
+            meta = {
+              count: meta.count + 1,
+              headId: entry.id,
+            };
+          }
+
+          yield* entity.keyValue.put(LOG_META_KEY, meta);
+          return appended;
+        }),
+      );
+
+/** Loads the persisted session owner, if this session has been initialized. */
+export const readSessionOwner = <Owner>(
+  host: DurableEntityHostShape,
+  address: DurableEntityAddress,
+): Effect.Effect<Owner | undefined> =>
+  host.run(address, (entity) =>
+    entity.keyValue.get(OWNER_KEY).pipe(Effect.map((value) => value as Owner | undefined)),
+  );
+
+/** Atomically initializes a session owner or verifies that it matches. */
+export const ensureSessionOwner = <Owner>(
+  host: DurableEntityHostShape,
+  address: DurableEntityAddress,
+  owner: Owner,
+  equals: (left: Owner, right: Owner) => boolean,
+): Effect.Effect<boolean> =>
+  host.run(address, (entity) =>
+    Effect.gen(function* () {
+      const existing = (yield* entity.keyValue.get(OWNER_KEY)) as Owner | undefined;
+      if (existing !== undefined) return equals(existing, owner);
+      yield* entity.keyValue.put(OWNER_KEY, owner);
+      return true;
+    }),
+  );
+
+/** Rehydrates the Pi message context from append-only session entries. */
+export const messagesFromSessionLog = (
+  entries: ReadonlyArray<SessionLogEntry>,
+): ReadonlyArray<AgentMessage> =>
+  entries.flatMap((entry) => (entry.type === "message" ? [entry.message] : []));
diff --git a/packages/agent/src/SkillSource.ts b/packages/agent/src/SkillSource.ts
new file mode 100644
index 000000000..e5ed39b8d
--- /dev/null
+++ b/packages/agent/src/SkillSource.ts
@@ -0,0 +1,61 @@
+import type { AgentTool } from "@earendil-works/pi-agent-core";
+import { Type } from "typebox";
+
+/** Metadata disclosed to an agent before a skill body is loaded. */
+export interface SkillMetadata {
+  readonly name: string;
+  readonly description: string;
+}
+
+/** Runtime-neutral source of progressively disclosed agent skills. */
+export interface SkillSource {
+  readonly list: () => ReadonlyArray<SkillMetadata>;
+  readonly read: (name: string) => string | undefined;
+}
+
+/** Renders Pi-compatible skill metadata for inclusion in a system prompt. */
+export const renderSkillDisclosure = (source: SkillSource): string => {
+  const skills = source.list();
+  if (skills.length === 0) return "";
+  const entries = skills
+    .map(
+      ({ name, description }) =>
+        `<skill>\n<name>${escapeXml(name)}</name>\n<description>${escapeXml(description)}</description>\n</skill>`,
+    )
+    .join("\n");
+  return `<available_skills>\n${entries}\n</available_skills>`;
+};
+
+const ReadSkillParameters = Type.Object(
+  { name: Type.String({ description: "Skill name from the available_skills list." }) },
+  { additionalProperties: false },
+);
+
+/** Creates the progressive-disclosure tool backed by a non-filesystem skill source. */
+export const makeReadSkillTool = (
+  source: SkillSource,
+): AgentTool<typeof ReadSkillParameters, { readonly name: string }> => ({
+  name: "read_skill",
+  label: "Read skill",
+  description:
+    "Read the complete instructions for one available skill. Call this before using a relevant skill.",
+  parameters: ReadSkillParameters,
+  execute: async (_toolCallId, input) => {
+    const body = source.read(input.name);
+    if (body === undefined) {
+      throw new Error(`Unknown skill: ${input.name}`);
+    }
+    return {
+      content: [{ type: "text", text: body }],
+      details: { name: input.name },
+    };
+  },
+});
+
+const escapeXml = (value: string): string =>
+  value
+    .replaceAll("&", "&amp;")
+    .replaceAll("<", "&lt;")
+    .replaceAll(">", "&gt;")
+    .replaceAll('"', "&quot;")
+    .replaceAll("'", "&apos;");
diff --git a/packages/agent/src/index.ts b/packages/agent/src/index.ts
new file mode 100644
index 000000000..3f24438cf
--- /dev/null
+++ b/packages/agent/src/index.ts
@@ -0,0 +1,31 @@
+export { Agent } from "@earendil-works/pi-agent-core";
+import type { Model } from "@earendil-works/pi-ai";
+import { ANTHROPIC_MODELS } from "@earendil-works/pi-ai/providers/anthropic.models";
+import { CLOUDFLARE_WORKERS_AI_MODELS } from "@earendil-works/pi-ai/providers/cloudflare-workers-ai.models";
+import { OPENAI_MODELS } from "@earendil-works/pi-ai/providers/openai.models";
+export { createAssistantMessageEventStream } from "@earendil-works/pi-ai";
+export type { AssistantMessage, ToolCall } from "@earendil-works/pi-ai";
+export type { AgentEvent, AgentMessage, AgentTool, StreamFn } from "@earendil-works/pi-agent-core";
+export type { AssistantMessageEventStream, Model } from "@earendil-works/pi-ai";
+export { Type } from "typebox";
+export type { TSchema } from "typebox";
+
+/** Looks up a model in Pi's built-in catalog from runtime provider settings. */
+export const getCatalogModel = (provider: string, modelId: string): Model<string> | undefined => {
+  const catalog =
+    provider === "openai"
+      ? OPENAI_MODELS
+      : provider === "anthropic"
+        ? ANTHROPIC_MODELS
+        : provider === "cloudflare-workers-ai"
+          ? CLOUDFLARE_WORKERS_AI_MODELS
+          : undefined;
+  return catalog?.[modelId as keyof typeof catalog] as Model<string> | undefined;
+};
+
+export * from "./AgentSessionCore.ts";
+export * from "./AgentToolAdapter.ts";
+export * from "./EffectRunner.ts";
+export * from "./Protocol.ts";
+export * from "./SessionLog.ts";
+export * from "./SkillSource.ts";
diff --git a/packages/agent/tests/.wrangler/state/v3/cache/miniflare-CacheObject/metadata.sqlite-shm b/packages/agent/tests/.wrangler/state/v3/cache/miniflare-CacheObject/metadata.sqlite-shm
new file mode 100644
index 0000000000000000000000000000000000000000..b9bced8a486b2c7b9fcb77e835fb9f5e65a24ef1
GIT binary patch
literal 32768
zcmeI)u?fOJ6b9haBCVEzq;LT@a0M4|3$eFLM#uo-4mS1{)`E2$MDv7$w01(iAC9|w
z9Phz5z?J<v<;+rA&WB5^#reA5t+uzm+q8${>v<}wOY^wb<&W=k@96m+Wn7Q*F#9_<
z*X;xd5FkK+009C72oNAZfB*pk1PBlyK!5-N0t5&UAV7cs0RjXF5FkK+009C72oNAZ
zfB*pk1PBlyK!5-N0t5&UAV7cs0RmGHh+ij!z%&KoPZl9SfB*pk1PBlyK!5-N0t5&U
zAV7cs0RjXF5FkK+009C72oNAZfB*pk1PBlyK!5-N0t5&UAV7cs0RjXF5cn^F51bJu
Al>h($

literal 0
HcmV?d00001

diff --git a/packages/agent/tests/.wrangler/state/v3/cache/miniflare-CacheObject/metadata.sqlite-wal b/packages/agent/tests/.wrangler/state/v3/cache/miniflare-CacheObject/metadata.sqlite-wal
new file mode 100644
index 0000000000000000000000000000000000000000..a0edab2841448200c956c71944100630d22d0bb9
GIT binary patch
literal 8272
zcmXr7XKP~6eI&uaAiw|ukEYqQ71uq!5v@G)>+5$Pc!5HU$l`lme7rt;)+>?VK%dN#
zRE4zsqTIw11!JIYCME_41qGm5CMX7J0|AhJ7BCA!fXzeVV`DNg=+#AlE$5GA0HRSa
z8UmvsFd71*Aut*OqaiRF0;3@?8UmvsFd71*Aut*O!!HCH6&TsY<>eWh_)8L#a#G`y
z)8ZX{9D{t}3?}CwSH}=ng%C$4A6Esqu!07c0vIGFm*f}4XQn8GxJHC11O$2dItE25
zc)LdGKot}xXQZZ-=A@>?mt^LqDtP*ZxVpOr!DJ!Y^AdqFAOpa9G!?=<Lp=OLLllDi
z!#!Pqfe!BH!^R5=_blN*?yC^R1&R&GP{Qzwmr);$hQMeDjE2By2#kinXb6mkz-S1J
VhQMeDjE2By2#kinXb6Bq006<hQ_KJW

literal 0
HcmV?d00001

diff --git a/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/4df8fa06997dc48e2f312df9a86799476e8be73b98386558c456d5701765676b.sqlite-shm b/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/4df8fa06997dc48e2f312df9a86799476e8be73b98386558c456d5701765676b.sqlite-shm
new file mode 100644
index 0000000000000000000000000000000000000000..95ecf19575179c3baf82e4a94d5583a448a258f6
GIT binary patch
literal 32768
zcmeI)IZgvH6b9gzkd0vrYX*8sY6^<b<r;_s&_%gOj**H(P*ZRMdbk4EC`A;Bg2IxK
zz9(6p#q<2ncL2BVH<7ECMkiu?mF7_zv+H<zd3#=dOjh@I&HQ0DUEDUWkDu)y*QZuL
zmHU2e)cSE8t}oKw(M==II~#M()&J!_KhNK6zaMO^&-cSL@_#7;1PBlyK!5-N0t5&U
zAV7cs0RjXF5FkK+009C72oNAZfB*pk1PBlyK!5-N0t5&UAV7cs0RjXF5FkK+009C7
z2oNAZfB=D-1Ul)giGJ+HK^(_<O~GU#P+XuJN5%KB0f9ONdNGJ5PU51@cv2B4C@_q@
zIE_ic9keD;tH3Ds)5&w=TI0z@prF86v<16sO`v9h%bLT<MxdxbK8IHkAV7cs0RjXF
p5FkK+009C72oNAZfB*pk1PBlyK!5-N0t5&UAV7cs0RsP9;2VefB-H=_

literal 0
HcmV?d00001

diff --git a/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/4df8fa06997dc48e2f312df9a86799476e8be73b98386558c456d5701765676b.sqlite-wal b/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/4df8fa06997dc48e2f312df9a86799476e8be73b98386558c456d5701765676b.sqlite-wal
new file mode 100644
index 0000000000000000000000000000000000000000..27ac223dd947e141ccbb5b04a249ef8088fa095f
GIT binary patch
literal 107152
zcmeI5eQX=|dB-V=q-05!)NQq$^#$y~DeRzE^LR(z-Le-+j+zmEjjF^k0*t<w-`R{w
zo<<(yI$D!C2I4>3Ay}MsY4%40wA~+Fx}_^RwEqlk2W;KCVndcchOB#uu?+(XuP_F5
z>udHLdFQ*6j^atSY{~kbEsFe|c)a`E^W*)V=bq>Llb_8!m*TJOOQoh$?s9$aYcmgy
zb<Vu|>U&cB_kZ$l)HD=s|C3Mc`HwTte)%&WedK7(VR_4LH8dwL(!0~?)J#54f1CDx
z+_$-l`~FP#S?{5{z0m8pr|Hy(pLu*Ytr?oSlA`}uKmY_l00ck)1V8`;KmY_l00cl_
zClk0ZG_qF|hc3O_(eyg2RvWcu&8llHRyFNvQ)|REr4KL6&o0jA7iZ^=&gWy^lRr>1
z^OfU^^AFE2<WDYCj?FHd&L5dS{h_?O#r)#@<BJCgde_hQ;{{j#`Cb3|!@oQIM9*ix
zk(#=(lTQnd9RxrC1V8`;KmY_l00ck)1V8`;?lA(phlW!hXmsjMjdwb&CLLWQU*M;E
zek2`xx$^e|@&$%NRNT12hVuo|Q`3|$Ko3|z00ck)1V8`;KmY_l00ck)1VCU55a^^w
z_TG2j(53m_jeEnY9(k<VeH@P7p6|Bh4~*r#<vhFCy#pV)F@JOIQ(C>l@^eQ|%y~@*
z^QS6{zkcG;#r(pFQ<aDAX1;*y;}84!0?*Cwk?#M8#?diq9GZG1MgOsY00@8p2!H?x
zfB*=900@8p2!H?x+;IXdBVIb7on=jjZ?ks0W;YMn7n-c~&Xmnf+O4x%v-Y&+P;<rP
zb}hARo$=J#eflIb9BSR&Yo$lGfy;H;tVPXZy=M2-vKteK<O}@LZ!CPV`G5b*56BnD
z()-*T0r$Pg7a#~&KmY_l00ck)1V8`;KmY_l00iz00y{Kc;HDm-{m1|H^lz&79T=N@
zBQ-p6IW^guxQv{Ed&9PI6d(WsAOHd&00JNY0wA!334C&I=E(0m(L1Ac`|P15YC2T#
zmUpJKOeJM=8Ry~><3<{E2bEUed_pT)cAaq<_bw<mV%SZGZnSb^R;|@`@@^qDx67%~
zyBw{tbUZbEb?Sj1T%21T=F&Bj+po!jQIHg!m$j10OJzypRoM{uvZxAzu4`phmblR+
zl7VZ|eb_?mrm~gvz`fh0(S2Xq1==%z7qy|_s74*zt{>Lw_3mCx^ls}K^qLpAj4Kt#
z_1db;vfLZMyR_EXPJ{NTZFAXfraG5%50w{|hn6!lLqpuKwp8P$FW9Z~tYz}1&3Cs+
zhtjg2s+mM;^}1}sHd#GxMaLyhpHyoub)4hAL2)^|<3t*E8Jcm9Eilat{%EY*c8cDV
zt!C6qdsd(A26Hs`R(RI1J4AVu%blYw(CzL0qHZZ=CNjRHswG~MO~&hzrSc`&vLs8C
z6jM~WtZOapO1gUo{9Dg0tp0!%<}^Dr@O0fpW7?k@x?}kQU2Oorj^J;<`JIoy_12Xa
z{L|a_d{<K38Yj9%lNkhOKkL|zR<ER%v&%VdtnJuKWF2k0$&I)c|7e><dQ{%)oTI(Y
zDXB~}ijvM3#InUpdQs&yW)*lvk;;Z77_?FdI%mSp9R4ym>3v?dk{M_cW9|+wur}#4
zaNXx_cO@f@cGhl3KEArc`kg+oy^O;?=Fpd#`{?)GG@X2I#H9XEt5eU;G2@)g%$uue
zU9COeYT2!iM6mgXG19}vj6y-th?6ABGJU7%7WEok=M7z@f4U^;njXfM2y-m9nc=Y7
zgl{<b4FVtl0w4eaAOHd&00JNY0wAzm2)H!?SwAlDjq-b+cu(%?x80qOI``vU=YG*X
z&zfxt3S<nM9Q<2~5=FO<;6X3i=LZkM5yRN<fgAYSM&W}>ZeY|UCT<!ZLK!#g#!{U*
z%%m7-H;%G-5m2&qFZ3A+h0zNy*y)-vy;@iQh-@kdpoO*=H1_Qn88^Zf8yoUMYKbDM
zH{;#h{zS2)_}EY;tUS71zWK19AOHd&00JNY0w4eaAOHeBfr!4qv(_iS{^Z>CR}<(9
zxbXz&3-}cA8w5ZA1V8`;KmY_l00ck)1VG@PAh6T*1)k6T#h-otHRU1b3)~atjDr9H
z5C8!X009sH0T2Lz?Ly$?6PY8gn*$5Nwb7swANm5@R$m~KOkZF+&==53%oNI`Dxfhz
z;w7P2;B`@EyeTV;6@-#mRAlH2Y<xa~h`zut|H=oSxU~B#Kkt5dMDzUDl_wo!K|_R~
zrx~(t5dzc^xDqk_C`2m>wxX8G7U?}(sMw$~I<S&tg`~@Pn~_wIxmqCT<fkJ7LB)cu
zXeL#a=$cyOrJ^bDYPqQM#iC@;rJ`h+DhrEgBr33o6ij%Zm#vHqJcgKRn6MT1R}m_%
zPerJ>RaJzxh~>wM*PQWAq*rMp2$Dn!QUb3RG*XsQ^%AeiC50~=<wDssN){^?!-kW{
z(87k}e_pmSG0<?5h}Y2GxDq#Oh}VQ|ZFT)waXGzK{TbO*ANd;pKs@;x)f8l_Nb)tR
zsv5kcFojo$A<vl1%DQT~(l%jmi9pALn;Zx(rpFDeKO+#Xjt}b3T)j2_<a)g#(TF=#
zf0oD?Vo&bO=;(HFQ?Z{Q00JPeV+cg_1s*Vdclxax-+RbE`oO_QT)<T-y>sG(Yme`!
ztbVQW9Vw6Y8Q<MCdBTn93-qIaxIonV+72QFJ2x&6cqz9xDzH;Mn;q)%2WAxO@UNv;
zy9FKonUN8Hl!4zM00JNY0w4eaTZBMFU*M<zdGgBD7f(zj&=>G`-&LaztB!TI=dbMZ
zJDvLQGmr14mBW)Srlzh;P17$dAOHd&00JNY0w4eaAOHd&00JOD1b%CHWbgg=4_$iD
z(eyg28dmk#{Nn6Gvx~Fg=h?#x^RtWd`Ni3}qx1Rjn*4#WytkZZ7xR_li}Mf9FXT@y
zRF2IqoX#JaKmDPbf6$%WF+X?o#GKc3a0luOMDhim{lvH5uAaa0i0iWtP5n=b{`Z#k
z>8%H82B;%I9YHVAVng#0AYY*0oUh0i2qqd%l-?ame7)0k1i_77<O^)t{I)BSp%Z1U
zhioE|4aFuy-?0*bz>JVD;0;Ug3j{y_1V8`;K;V`Lj1LW`a{Ipdksp2WzhC-o+ESW+
zZq8HqwI}cUgWvnwcOUJ=1#YCKZrsvm;msfb0w4eaAOHd&00JNY0w4eaAOHeeiNJ1(
z3Vfi^sXH~^>9m@(Ymt0`H^2XOsrJUH%e}b3k5f}W_I4im0uMl6fZH#rOf-s;&KJb8
z#Y=ioB{@)%pHdX5Y)FDZD+MlmSIyTm$U<L0t1sH;S+iY9aT&vIJ2scCHJ3V0kX)0q
zJ5HqG*0XJ(JGcdO2ZI~E$QMAqfGZq$SgY4pNYM_K6b#G=`2t&MOoe>`0T2KI5CDPg
zOTf<;7^Vn;yF~N_jL&}V%=^AteQ^za0ry=w`f)V{-1lxoUtk#e0z?iA2!H?xfB*=9
z00@8p2!H?xfItiZ=nJrFwNY!<th&}>Rnx9EwMJZ1Ix4ZS`aSsrH8WOUA@6Q6zc~N+
z;z2qA-RQvey|2wYIMzAy>aTs}{m=hR>W{`I-$)IQUrSB4#;;Ai5_6i+1Ogxc0w4ea
zAOHd&00JPejR<@`mpSs+3))$l44QAVcDrUb57q6nhnA@6P{CW?nbIaIseu!Pu9#kU
z%&N88&g$8Pr>{n47uICKC`gLV%UX#hi7iVSugZqNmqk^e$z!!LD@(y#r-euws=ujh
zB|UKOVx}<-%U1PI;S<(3aWG8+ww%F~*?p(Rik(F$@7e@)n_M-cUfQ$T92?Bh-kGA*
zTEp%%oytBgcaCW$rP}Q`WKk{@B#T$dqQpz4q4A2PtGrq?nJg5GMXe}tS=XG~mGrXf
z<$mkA!S){H<c&0_SJ1mT{|Omd%dRu-E?PTHIm9yJr2|n;_Jt;ExsWF9)>*Atds=g-
zHxr{>OD$VxJhgV8KFJJ+T6gza>CtWAa-BA7QS(@@*?rZe)tyVgj|)6@{*gbw{@pKp
z)c=ADa-1<wA?gTFN3hX6|GU<EP)D!@>IjkzLyGGghS1b=7>1;{^$kPreR0CDt;Lob
ztTn&w7M#woGI^^5|1gEn{I<p3RKLU8QjMFwV7Jb*mdTqo-yI&2Khm<Fs+p`6vo71P
zO;(Rv(QyZox3fNM3tcx>bRDh4OrdNtsv{I=SS}O`ye`U&H)Vyff>1JxiX3=#+<w&*
zWUELehpMU?yreLNSM-9$GbXdLu3Cy_MO{Dt^RkucffkT(sDARL7rND;!(6)NdKOwq
zE6bwBm!*PCMUlEphhP{yGs<RBH8is*Dd9s%bjaZ%$|djfvX!43cnC4xYv7~w_g%&H
zT{J}ZqJimcof<iPj@DQ@p7PJpXwN3}0@GzdHhEdn$xKa4B5#w-R4h}?tW0JrMr|UI
z4TWvu^_w>F3j=Lp%q=-vU~MY<=DN>g%FjfuYaGYvRxdZv{qCwV%W@sQ5yNge6!r<s
zDEv*BbIZtiaXG!#^tNO!edarV)jN!l9ya<SC>g3)<Q1);@RBOiw?Vm}^Ci6?n<jbb
zibi#EOLV83oO|kei7>}vn;9SXom2eYOag9AK+cZ~eBpin{)v6x`|?-a4<x;Bud^ho
zDi59YM3KPoSr4kvGq<I)2m?FI+QTQIH)a?yDOy#lw{0%RjB_?Kxn6Ig$Y7uD;vb0D
zU6@fQxEDNL5@ovbly!^O>H5PPx=R0aNzyev++7lZjt2+1f0XZY8Rz0s5a1jX=^Sq}
zx^$SU1N$dG9SQ6wl4=ii|2r-BAMVTjM^JFPLrNC6E?f~C{rAW6-gV<1oD(2yYpaJ@
zp0C;Ox&gNvZa34~c9UBju3gb}68WH^?_9XuYhU_e-0pB!?tj_Xh~tf$#_NmL-uu3J
z*w$8GHpn|)D_Xk+z4OYRfqq&{kBg5`gkrT`m}2u{wWRIkiFnboU=Tzv#te<7{yODO
z^F^=L6_1T<D!7v#+G5byw_~inBKQ#`Z!nc8KO%HRNEE6G`;z|WWoITP$o-G#3p{`9
zbB`I<{_2SV`U0bFEP;O9xeTB$KoGEi00@8p2!H?xfB*=900@8p2;43L&=-gk6Nr%<
z*c5$%2Zn$0@n^38%g?&{0uz@>Utr=g^aXC0ZDTti00JNY0w4eaAOHeej=&$<nIqrX
zAFbbwE4$x~vioS(`Yx??w$q?AamudEKBd(=EJ&{1P`%riel>IC+T7qXF^w~^$!CIU
z)VWQqouY4nOfr3ee4sB-5H-DQSS7xo6sY1uRA_26Q7%#;lcuPGCCY+eL0{lD=?mCD
zY`poie>(grI#Z)=N=1+Wv98RD;B7&!M$opt1dG^&)vjCx3LW|-tfJ5X39J1QR{c^J
zFFh$y(tjvDDN$)mI6cY#yliE3VD8z9I#ColI9%WH7W4&Nrvmx{E2>G?&R9jEgWXuF
zGl!Wx^aa-HJ*(4NQRtAUwj+G$^Yi03s4o!i$|!WWLlZm4x*Pt9^u|nys^ddrrfncX
z5Vp0QTj<b_LbTLj2b2lX$jYq;Ncs8#$KPfzSeO4%a@%NeYYaxZ&(>FQ5ySux7l@s#
z8UhG0LZ2}eNeMctrv<TjHA#Und!<Q1Lt^W`Yf-h;<2&C^M_hpMB~>l)l1%DZx@4(*
zNwzG>B4r^{R3q}ozTiT(GBz-_F~ExZ5AYy>00D$SDpMrh<Z4l^p)%F)8?&d3gSY_V
z0^z$o>nL|cTmW%_9U!=gxB#hCv5z_4<4t+O9U*|w@8Y==;{sj3-;WD?Y3>Iv|IX0C
zsv8Rk+@JN`;9u>E_=*O1TtT6-Z{RRK=`G4vUx{ehYDQ6$NM)0kG+Czyi=;SZOXf`y
zvDFG?RWTG&3JnA}6RAdoW6iI7pO>xt;=p5waYX`&kN%E`v_36c30k&o7I7E-bL82z
zDzY-u$r1$eD|yK%h?Ln>l=%{~WL?oUr6d|*n@D6s@iy_^fi{su%a*1A8sKFFX0-ZZ
zA+4=tOXku?oYTkViF1m&TB0;CgV(GQ^(R#(aZamDI>1FiP)xxrDU=Wv>Pm?)$6}kA
zn(78Q@c;rK00JNY0w4eaAOHd&u!4ZAAvo&C1)8b*AAadi-~3DWZx9y<I~Ut5E)b4<
z-QLK+4#=X}sO87Tntd<$-VGjvZ7nu@uvV;j3x*FW?;jX-Su+wBW)O-rdvTP_OKc%s
z-0dT_>xDhNUXiF+Fccd~6iW(!efzyIJ2O4K;sS`5AOHd&00JNY0w4easnq`iIv}4j

literal 0
HcmV?d00001

diff --git a/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/metadata.sqlite-shm b/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/metadata.sqlite-shm
new file mode 100644
index 0000000000000000000000000000000000000000..417a13234835772a7f330985d7177d3a2763820b
GIT binary patch
literal 32768
zcmeI)Ar8Vo5CzauYH-MM2o8Y5V@j$ChHGH)9H5rV;NS*WGy(-X&?Z<MDeotf-Ry2=
zlXrkAFVieCc-Oc{Yo6-9KAcw9UDGW0RlPah7R7cln$OPVm+w=nSEBFZBkgfEY&Y?L
z{M%J`ZzVv0009C72oNAZfB*pk1PBlyK!5-N0t5&UAV7cs0RjXF5FkK+009C72oNAZ
zfB*pk1PBlyK!5-N0t5&UAV7cs0RjXF5a_c&Oq~z{|0$5C=_@gpMF<ceK!5-N0t5&U
zAV7cs0RjXF5FkK+009C72oNAZfB*pk1PBlyK!5-N0t5&UAV7cs0RjXF5FkK+009C7
Hen;R51JEV`

literal 0
HcmV?d00001

diff --git a/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/metadata.sqlite-wal b/packages/agent/tests/.wrangler/state/v3/do/voidhash-agent-do-probe-ProbeSession/metadata.sqlite-wal
new file mode 100644
index 0000000000000000000000000000000000000000..c5e7ef78723d8b5f309785ad27b8e7766b102e99
GIT binary patch
literal 16512
zcmeI&%}d*090%|u%x(zM-Sp<Ofow7rZJM{+qGq<N^(Bq81xrZt;sR}jE`@>MrU%ax
zy!Nug=tb}^@F488%h>(_@#@$~5BB7f^o16@4ne*@lJMkto?pWAc~1Ee>2vIWnZ2A~
znCDCw&5fh=ob&T$>XUK$=grp^?P3S}|NeNny8Eie=Qc8a;1X}AUbO<k(`=4o-V#FR
za@{jb3nR>b616&)=y?P8_cb|YZm%##N7#6Yp$7s25P$##AOHafKmY;|fB*y_@c0Dw
z3Hx+>a*{oW2UfY_nzm=E8CB2r8{CqvsfI=jbupunem8kNN}{mrV5e^S4l%TXLDuzj
zR@IB-y;hv*PWWhlaGgfQb<Du8x+J}7Xe*lD8||dmEIJZCAj+90`LvN*+cb#2mQOEJ
z^yoXkS1&l*ewO&=Z&gRb-RP7O9^bxTMG$}h1Rwwb2tWV=5P$##AOHaf^aO_L0>$?A
zVeZ#ODy$2z@fJf51Oy-e0SG_<0uX=z1Rwwb2tWV=4=j)$*&mC&NIIVES@WWzNRFM9
z-Gs+4Bpgq%WKmL-q$Ij>*_HURBJ;8+2(q0NL`RV37bH;-C9ynl{;qxU@Ayl#Q3?Fn
zpi!^UWewE@et$P_n}=7W-v0uq3q0_~<Mj}L00bZa0SG_<0uX=z1RwwbD)7JR0(a4A
BnCbuk

literal 0
HcmV?d00001

diff --git a/packages/agent/tests/AgentSessionCore.test.ts b/packages/agent/tests/AgentSessionCore.test.ts
new file mode 100644
index 000000000..4164d1706
--- /dev/null
+++ b/packages/agent/tests/AgentSessionCore.test.ts
@@ -0,0 +1,299 @@
+import { Agent, type StreamFn } from "@earendil-works/pi-agent-core";
+import {
+  createAssistantMessageEventStream,
+  type AssistantMessage,
+  type Context as PiContext,
+  type Model,
+} from "@earendil-works/pi-ai";
+import { makeMemoryDurableEntityHost } from "@voidhash/platform-node/MemoryDurableEntity";
+import { makeNodeDurableEntitySession } from "@voidhash/platform-node/NodeDurableEntitySession";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  AgentSessionCore,
+  agentSessionAddress,
+  type AgentSessionConnection,
+} from "../src/AgentSessionCore.ts";
+import { readSessionLog } from "../src/SessionLog.ts";
+
+const model: Model<string> = {
+  id: "test-model",
+  name: "Test model",
+  api: "test",
+  provider: "test-provider",
+  baseUrl: "https://example.invalid",
+  reasoning: false,
+  input: ["text", "image"],
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+  contextWindow: 10_000,
+  maxTokens: 1_000,
+};
+
+const alternateModel: Model<string> = {
+  ...model,
+  id: "alternate-model",
+  name: "Alternate model",
+};
+
+const usage = {
+  input: 0,
+  output: 0,
+  cacheRead: 0,
+  cacheWrite: 0,
+  totalTokens: 0,
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+};
+
+const assistantMessage = (text: string): AssistantMessage => ({
+  role: "assistant",
+  content: [{ type: "text", text }],
+  api: model.api,
+  provider: model.provider,
+  model: model.id,
+  usage,
+  stopReason: "stop",
+  timestamp: Date.now(),
+});
+
+const waitFor = async (predicate: () => boolean): Promise<void> => {
+  for (let attempt = 0; attempt < 100; attempt += 1) {
+    if (predicate()) return;
+    await new Promise((resolve) => setTimeout(resolve, 5));
+  }
+  throw new Error("Timed out waiting for condition");
+};
+
+interface TestConnectionData {
+  readonly token: string;
+}
+
+const owner = { organizationId: "org", projectId: "project", userId: "user" };
+
+describe("AgentSessionCore", () => {
+  it("streams, persists, rehydrates, and accepts steering while a turn is active", async () => {
+    const host = makeMemoryDurableEntityHost();
+    const frames: string[] = [];
+    let releaseFirst!: () => void;
+    const firstGate = new Promise<void>((resolve) => void (releaseFirst = resolve));
+    const contexts: PiContext[] = [];
+    let streamCalls = 0;
+
+    const streamFn: StreamFn = (_model, context) => {
+      contexts.push(context);
+      streamCalls += 1;
+      const call = streamCalls;
+      const stream = createAssistantMessageEventStream();
+      void (async () => {
+        if (call === 1) await firstGate;
+        const message = assistantMessage(call === 1 ? "first" : "steered");
+        stream.push({ type: "start", partial: { ...message, content: [] } });
+        stream.push({
+          type: "text_start",
+          contentIndex: 0,
+          partial: { ...message, content: [{ type: "text", text: "" }] },
+        });
+        stream.push({
+          type: "text_delta",
+          contentIndex: 0,
+          delta: message.content[0]?.type === "text" ? message.content[0].text : "",
+          partial: message,
+        });
+        stream.push({
+          type: "text_end",
+          contentIndex: 0,
+          content: message.content[0]?.type === "text" ? message.content[0].text : "",
+          partial: message,
+        });
+        stream.push({ type: "done", reason: "stop", message });
+      })();
+      return stream;
+    };
+
+    const core = new AgentSessionCore<TestConnectionData>({
+      host,
+      idleTimeoutMs: 100,
+      factory: {
+        create: ({ messages }) =>
+          new Agent({
+            initialState: {
+              model,
+              messages: [...messages],
+              systemPrompt: "test",
+              tools: [],
+            },
+            streamFn,
+          }),
+        resolveModel: (provider, modelId) =>
+          provider === model.provider && modelId === model.id ? model : undefined,
+      },
+    });
+    const durableSession = makeNodeDurableEntitySession("connection-1", {
+      send: (frame) => frames.push(String(frame)),
+      close: () => undefined,
+    });
+    const connection: AgentSessionConnection<TestConnectionData> = {
+      sessionId: "session-1",
+      owner,
+      session: durableSession,
+      data: { token: "private" },
+    };
+
+    await expect(Effect.runPromise(core.connect(connection))).resolves.toBe(true);
+    await Effect.runPromise(
+      core.handleMessage(
+        connection,
+        JSON.stringify({
+          v: 1,
+          requestId: "prompt-1",
+          type: "prompt",
+          text: "initial",
+        }),
+      ),
+    );
+    await waitFor(() => streamCalls === 1);
+
+    await Effect.runPromise(
+      core.handleMessage(
+        connection,
+        JSON.stringify({
+          v: 1,
+          requestId: "steer-1",
+          type: "steer",
+          text: "change direction",
+        }),
+      ),
+    );
+    expect(frames.some((frame) => frame.includes('"requestId":"steer-1"'))).toBe(true);
+    releaseFirst();
+    await waitFor(() => frames.some((frame) => frame.includes('"type":"agent_end"')));
+    await waitFor(() => streamCalls === 2);
+
+    expect(contexts[1]?.messages.some((message) => message.role === "user")).toBe(true);
+    const entries = await Effect.runPromise(
+      readSessionLog(host, agentSessionAddress(connection.sessionId)),
+    );
+    const messages = entries.flatMap((entry) => (entry.type === "message" ? [entry.message] : []));
+    expect(messages.map((message) => message.role)).toEqual([
+      "user",
+      "assistant",
+      "user",
+      "assistant",
+    ]);
+
+    await Effect.runPromise(core.disconnect(connection.sessionId, durableSession.id));
+  });
+
+  it("rejects a different owner and evicts idle in-memory agents", async () => {
+    const host = makeMemoryDurableEntityHost();
+    let now = 1_000;
+    const core = new AgentSessionCore<TestConnectionData>({
+      host,
+      idleTimeoutMs: 50,
+      now: () => now,
+      factory: {
+        create: ({ messages }) =>
+          new Agent({ initialState: { model, messages: [...messages], tools: [] } }),
+        resolveModel: () => model,
+      },
+    });
+    const session = makeNodeDurableEntitySession("connection-1", {
+      send: () => undefined,
+      close: () => undefined,
+    });
+    const connection: AgentSessionConnection<TestConnectionData> = {
+      sessionId: "session-2",
+      owner,
+      session,
+      data: { token: "private" },
+    };
+    await expect(Effect.runPromise(core.connect(connection))).resolves.toBe(true);
+    await Effect.runPromise(
+      core.handleMessage(
+        connection,
+        JSON.stringify({ v: 1, requestId: "state-1", type: "get_state" }),
+      ),
+    );
+    expect(core.hasLiveSession(connection.sessionId)).toBe(true);
+
+    const intruder = {
+      ...connection,
+      session: makeNodeDurableEntitySession("connection-2", {
+        send: () => undefined,
+        close: () => undefined,
+      }),
+      owner: { ...owner, userId: "other" },
+    };
+    await expect(Effect.runPromise(core.connect(intruder))).resolves.toBe(false);
+
+    await Effect.runPromise(core.disconnect(connection.sessionId, session.id));
+    now += 51;
+    await expect(Effect.runPromise(core.onAlarm(connection.sessionId))).resolves.toBe(true);
+    expect(core.hasLiveSession(connection.sessionId)).toBe(false);
+  });
+
+  it("rehydrates the latest persisted model selection after idle eviction", async () => {
+    const host = makeMemoryDurableEntityHost();
+    let now = 1_000;
+    const core = new AgentSessionCore<TestConnectionData>({
+      host,
+      idleTimeoutMs: 50,
+      now: () => now,
+      factory: {
+        create: ({ messages }) =>
+          new Agent({ initialState: { model, messages: [...messages], tools: [] } }),
+        resolveModel: (provider, modelId) =>
+          provider === alternateModel.provider && modelId === alternateModel.id
+            ? alternateModel
+            : undefined,
+      },
+    });
+    const frames: string[] = [];
+    const firstSession = makeNodeDurableEntitySession("connection-model-1", {
+      send: () => undefined,
+      close: () => undefined,
+    });
+    const firstConnection: AgentSessionConnection<TestConnectionData> = {
+      sessionId: "session-model",
+      owner,
+      session: firstSession,
+      data: { token: "private" },
+    };
+    await Effect.runPromise(core.connect(firstConnection));
+    await Effect.runPromise(
+      core.handleMessage(
+        firstConnection,
+        JSON.stringify({
+          v: 1,
+          requestId: "model-1",
+          type: "set_model",
+          provider: alternateModel.provider,
+          modelId: alternateModel.id,
+        }),
+      ),
+    );
+    await Effect.runPromise(core.disconnect(firstConnection.sessionId, firstSession.id));
+    now += 51;
+    await Effect.runPromise(core.onAlarm(firstConnection.sessionId));
+
+    const secondSession = makeNodeDurableEntitySession("connection-model-2", {
+      send: (frame) => frames.push(String(frame)),
+      close: () => undefined,
+    });
+    const secondConnection = { ...firstConnection, session: secondSession };
+    await Effect.runPromise(core.connect(secondConnection));
+    await Effect.runPromise(
+      core.handleMessage(
+        secondConnection,
+        JSON.stringify({ v: 1, requestId: "state-model", type: "get_state" }),
+      ),
+    );
+    expect(
+      frames.some(
+        (frame) =>
+          frame.includes('"requestId":"state-model"') && frame.includes('"id":"alternate-model"'),
+      ),
+    ).toBe(true);
+    await Effect.runPromise(core.disconnect(secondConnection.sessionId, secondSession.id));
+  });
+});
diff --git a/packages/agent/tests/AgentSessionPg.integration.test.ts b/packages/agent/tests/AgentSessionPg.integration.test.ts
new file mode 100644
index 000000000..e7ac9e86c
--- /dev/null
+++ b/packages/agent/tests/AgentSessionPg.integration.test.ts
@@ -0,0 +1,191 @@
+import { Agent, type AgentMessage, type StreamFn } from "@earendil-works/pi-agent-core";
+import {
+  createAssistantMessageEventStream,
+  type AssistantMessage,
+  type Model,
+} from "@earendil-works/pi-ai";
+import { DurableEntityHost } from "@voidhash/platform/DurableEntity";
+import { makeNodeDurableEntitySession } from "@voidhash/platform-node/NodeDurableEntitySession";
+import {
+  PgDurableEntityHostLive,
+  type PgDurableEntityConfig,
+} from "@voidhash/platform-node/DurableEntity";
+import { Effect, ManagedRuntime, Redacted } from "effect";
+import { describe, expect, it } from "vitest";
+
+import {
+  AgentSessionCore,
+  agentSessionAddress,
+  type AgentSessionConnection,
+} from "../src/AgentSessionCore.ts";
+import { readSessionLogCount } from "../src/SessionLog.ts";
+
+const config: PgDurableEntityConfig = {
+  host: process.env.PLATFORM_NODE_PG_HOST ?? "127.0.0.1",
+  port: Number(process.env.PLATFORM_NODE_PG_PORT ?? "5432"),
+  database: process.env.PLATFORM_NODE_PG_DATABASE ?? "voidhash",
+  username: process.env.PLATFORM_NODE_PG_USERNAME ?? "voidhash",
+  password: Redacted.make(process.env.PLATFORM_NODE_PG_PASSWORD ?? "password"),
+};
+
+const model: Model<string> = {
+  id: "pg-test-model",
+  name: "Postgres test model",
+  api: "test",
+  provider: "test-provider",
+  baseUrl: "https://example.invalid",
+  reasoning: false,
+  input: ["text"],
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+  contextWindow: 10_000,
+  maxTokens: 1_000,
+};
+
+const assistantMessage = (): AssistantMessage => ({
+  role: "assistant",
+  content: [{ type: "text", text: "postgres-host-ok" }],
+  api: model.api,
+  provider: model.provider,
+  model: model.id,
+  usage: {
+    input: 0,
+    output: 0,
+    cacheRead: 0,
+    cacheWrite: 0,
+    totalTokens: 0,
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+  },
+  stopReason: "stop",
+  timestamp: Date.now(),
+});
+
+const streamFn: StreamFn = () => {
+  const stream = createAssistantMessageEventStream();
+  const message = assistantMessage();
+  queueMicrotask(() => {
+    stream.push({ type: "start", partial: { ...message, content: [] } });
+    stream.push({
+      type: "text_start",
+      contentIndex: 0,
+      partial: { ...message, content: [{ type: "text", text: "" }] },
+    });
+    stream.push({
+      type: "text_delta",
+      contentIndex: 0,
+      delta: "postgres-host-ok",
+      partial: message,
+    });
+    stream.push({
+      type: "text_end",
+      contentIndex: 0,
+      content: "postgres-host-ok",
+      partial: message,
+    });
+    stream.push({ type: "done", reason: "stop", message });
+  });
+  return stream;
+};
+
+const waitFor = async (predicate: () => Promise<boolean> | boolean): Promise<void> => {
+  for (let attempt = 0; attempt < 200; attempt += 1) {
+    if (await predicate()) return;
+    await new Promise((resolve) => setTimeout(resolve, 10));
+  }
+  throw new Error("Timed out waiting for the Postgres agent session");
+};
+
+const describePg = process.env.PLATFORM_NODE_PG_TEST === "1" ? describe : describe.skip;
+
+describePg("AgentSessionCore on PgDurableEntityHostLive", () => {
+  it("persists a turn and rehydrates it after the host runtime restarts", async () => {
+    const sessionId = `agent-pg-${crypto.randomUUID()}`;
+    const owner = {
+      organizationId: "organization-pg",
+      projectId: "project-pg",
+      userId: "user-pg",
+    };
+    const firstRuntime = ManagedRuntime.make(PgDurableEntityHostLive(config));
+    const firstHost = await firstRuntime.runPromise(DurableEntityHost);
+    const frames: string[] = [];
+    const firstConnection: AgentSessionConnection = {
+      sessionId,
+      owner,
+      data: undefined,
+      session: makeNodeDurableEntitySession("connection-1", {
+        send: (frame) => frames.push(String(frame)),
+        close: () => undefined,
+      }),
+    };
+    const firstCore = new AgentSessionCore({
+      host: firstHost,
+      factory: {
+        create: ({ messages }) =>
+          new Agent({
+            initialState: { model, messages: [...messages], tools: [] },
+            streamFn,
+          }),
+        resolveModel: () => model,
+      },
+    });
+
+    try {
+      await expect(Effect.runPromise(firstCore.connect(firstConnection))).resolves.toBe(true);
+      await Effect.runPromise(
+        firstCore.handleMessage(
+          firstConnection,
+          JSON.stringify({
+            v: 1,
+            type: "prompt",
+            requestId: "prompt-pg",
+            text: "persist this turn",
+          }),
+        ),
+      );
+      await waitFor(
+        async () =>
+          (await Effect.runPromise(
+            readSessionLogCount(firstHost, agentSessionAddress(sessionId)),
+          )) === 2,
+      );
+    } finally {
+      await firstRuntime.dispose();
+    }
+
+    const secondRuntime = ManagedRuntime.make(PgDurableEntityHostLive(config));
+    const secondHost = await secondRuntime.runPromise(DurableEntityHost);
+    let restoredMessages: ReadonlyArray<AgentMessage> = [];
+    const secondConnection: AgentSessionConnection = {
+      sessionId,
+      owner,
+      data: undefined,
+      session: makeNodeDurableEntitySession("connection-2", {
+        send: () => undefined,
+        close: () => undefined,
+      }),
+    };
+    const secondCore = new AgentSessionCore({
+      host: secondHost,
+      factory: {
+        create: ({ messages }) => {
+          restoredMessages = messages;
+          return new Agent({ initialState: { model, messages: [...messages], tools: [] } });
+        },
+        resolveModel: () => model,
+      },
+    });
+
+    try {
+      await expect(Effect.runPromise(secondCore.connect(secondConnection))).resolves.toBe(true);
+      await Effect.runPromise(
+        secondCore.handleMessage(
+          secondConnection,
+          JSON.stringify({ v: 1, type: "get_state", requestId: "state-pg" }),
+        ),
+      );
+      expect(restoredMessages.map((message) => message.role)).toEqual(["user", "assistant"]);
+      expect(frames.some((frame) => frame.includes("postgres-host-ok"))).toBe(true);
+    } finally {
+      await secondRuntime.dispose();
+    }
+  });
+});
diff --git a/packages/agent/tests/AgentToolAdapter.test.ts b/packages/agent/tests/AgentToolAdapter.test.ts
new file mode 100644
index 000000000..c210c21ab
--- /dev/null
+++ b/packages/agent/tests/AgentToolAdapter.test.ts
@@ -0,0 +1,108 @@
+import { Context, Effect } from "effect";
+import { Type } from "typebox";
+import { describe, expect, it } from "vitest";
+
+import {
+  effectAgentToolErrorOverride,
+  makeEffectAgentTool,
+  makeEffectAgentToolWithRunner,
+} from "../src/AgentToolAdapter.ts";
+
+class PrefixService extends Context.Service<PrefixService, { readonly prefix: string }>()(
+  "test/PrefixService",
+) {}
+const Parameters = Type.Object({ value: Type.String() });
+
+describe("makeEffectAgentTool", () => {
+  it("runs a handler against the captured Effect context", async () => {
+    const context = Context.make(PrefixService, { prefix: "captured:" });
+    const tool = makeEffectAgentTool<
+      { readonly value: string },
+      { readonly length: number },
+      never,
+      PrefixService
+    >(
+      {
+        name: "echo",
+        description: "Echo a value",
+        parameters: Parameters,
+        effectHandler: ({ value }) =>
+          Effect.gen(function* () {
+            const service = yield* PrefixService;
+            const text = `${service.prefix}${value}`;
+            return {
+              content: [{ type: "text", text }],
+              details: { length: text.length },
+            };
+          }),
+      },
+      context,
+    );
+
+    await expect(tool.execute("call-1", { value: "ok" })).resolves.toEqual({
+      content: [{ type: "text", text: "captured:ok" }],
+      details: { length: 11 },
+    });
+  });
+
+  it("preserves structured error details for Pi's after-tool hook", async () => {
+    const tool = makeEffectAgentTool<{ readonly value: string }, never, never, never>(
+      {
+        name: "fail",
+        description: "Fail",
+        parameters: Parameters,
+        effectHandler: () =>
+          Effect.succeed({
+            content: [{ type: "text", text: "workspace rejected the edit" }],
+            details: undefined as never,
+            isError: true,
+          }),
+      },
+      Context.empty(),
+    );
+
+    const result = await tool.execute("call-1", { value: "bad" });
+    expect(result).toEqual({
+      content: [{ type: "text", text: "workspace rejected the edit" }],
+      details: undefined,
+    });
+    expect(effectAgentToolErrorOverride(result)).toEqual({ isError: true });
+  });
+
+  it("acquires the Effect context lazily for each tool execution", async () => {
+    let execution = 0;
+    const tool = makeEffectAgentToolWithRunner<
+      { readonly value: string },
+      never,
+      never,
+      PrefixService
+    >(
+      {
+        name: "echo",
+        description: "Echo a value",
+        parameters: Parameters,
+        effectHandler: ({ value }) =>
+          Effect.gen(function* () {
+            const service = yield* PrefixService;
+            return {
+              content: [{ type: "text" as const, text: `${service.prefix}${value}` }],
+              details: undefined as never,
+            };
+          }),
+      },
+      (effect) => {
+        execution += 1;
+        return Effect.runPromise(
+          effect.pipe(Effect.provide(Context.make(PrefixService, { prefix: `${execution}:` }))),
+        );
+      },
+    );
+
+    await expect(tool.execute("call-1", { value: "first" })).resolves.toMatchObject({
+      content: [{ type: "text", text: "1:first" }],
+    });
+    await expect(tool.execute("call-2", { value: "second" })).resolves.toMatchObject({
+      content: [{ type: "text", text: "2:second" }],
+    });
+  });
+});
diff --git a/packages/agent/tests/EffectRunner.test.ts b/packages/agent/tests/EffectRunner.test.ts
new file mode 100644
index 000000000..908dd3df3
--- /dev/null
+++ b/packages/agent/tests/EffectRunner.test.ts
@@ -0,0 +1,42 @@
+import { Context, Effect, Layer } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { makeLayerEffectRunner } from "../src/EffectRunner.ts";
+
+class Lease extends Context.Service<Lease, { readonly id: number; readonly use: () => number }>()(
+  "test/Lease",
+) {}
+
+describe("makeLayerEffectRunner", () => {
+  it("acquires and releases a fresh scoped layer for every execution", async () => {
+    let nextId = 0;
+    const released = new Set<number>();
+    const runner = makeLayerEffectRunner<void, Lease>(() =>
+      Layer.effect(
+        Lease,
+        Effect.acquireRelease(
+          Effect.sync(() => {
+            const id = ++nextId;
+            return {
+              id,
+              use: () => {
+                if (released.has(id)) throw new Error(`lease ${id} was already released`);
+                return id;
+              },
+            };
+          }),
+          (lease) => Effect.sync(() => released.add(lease.id)),
+        ),
+      ),
+    );
+    const useLease = Effect.gen(function* () {
+      const lease = yield* Lease;
+      return lease.use();
+    });
+
+    await expect(runner(undefined, useLease)).resolves.toBe(1);
+    expect(released).toEqual(new Set([1]));
+    await expect(runner(undefined, useLease)).resolves.toBe(2);
+    expect(released).toEqual(new Set([1, 2]));
+  });
+});
diff --git a/packages/agent/tests/Protocol.test.ts b/packages/agent/tests/Protocol.test.ts
new file mode 100644
index 000000000..5443119bb
--- /dev/null
+++ b/packages/agent/tests/Protocol.test.ts
@@ -0,0 +1,47 @@
+import { describe, expect, it } from "vitest";
+
+import { decodeAgentClientMessage, encodeAgentServerMessage } from "../src/Protocol.ts";
+
+describe("agent session protocol", () => {
+  it("decodes versioned prompt messages with images", () => {
+    const message = decodeAgentClientMessage(
+      JSON.stringify({
+        v: 1,
+        requestId: "request-1",
+        type: "prompt",
+        text: "Review this",
+        images: [{ type: "image", data: "aGVsbG8=", mimeType: "image/png" }],
+      }),
+    );
+
+    expect(message).toEqual({
+      v: 1,
+      requestId: "request-1",
+      type: "prompt",
+      text: "Review this",
+      images: [{ type: "image", data: "aGVsbG8=", mimeType: "image/png" }],
+    });
+  });
+
+  it("rejects unknown versions and malformed commands", () => {
+    expect(() =>
+      decodeAgentClientMessage(JSON.stringify({ v: 2, requestId: "request-1", type: "abort" })),
+    ).toThrow();
+    expect(() =>
+      decodeAgentClientMessage(JSON.stringify({ v: 1, requestId: "request-1", type: "prompt" })),
+    ).toThrow();
+  });
+
+  it("encodes server events as JSON", () => {
+    expect(
+      JSON.parse(
+        encodeAgentServerMessage({
+          v: 1,
+          type: "ack",
+          requestId: "request-1",
+          command: "abort",
+        }),
+      ),
+    ).toEqual({ v: 1, type: "ack", requestId: "request-1", command: "abort" });
+  });
+});
diff --git a/packages/agent/tests/SessionLog.test.ts b/packages/agent/tests/SessionLog.test.ts
new file mode 100644
index 000000000..6bcec0153
--- /dev/null
+++ b/packages/agent/tests/SessionLog.test.ts
@@ -0,0 +1,63 @@
+import { makeMemoryDurableEntityHost } from "@voidhash/platform-node/MemoryDurableEntity";
+import { Effect } from "effect";
+import { describe, expect, it } from "vitest";
+
+import { agentSessionAddress } from "../src/AgentSessionCore.ts";
+import {
+  SESSION_LOG_CHUNK_BYTES,
+  appendSessionLog,
+  ensureSessionOwner,
+  messagesFromSessionLog,
+  readSessionLog,
+} from "../src/SessionLog.ts";
+
+describe("session log", () => {
+  it("links entries into an append-only tree across size-bounded storage chunks", async () => {
+    const host = makeMemoryDurableEntityHost();
+    const address = agentSessionAddress("session-1");
+    let id = 0;
+    let now = 100;
+    const largeText = "🙂".repeat(Math.ceil(SESSION_LOG_CHUNK_BYTES / 4) + 100);
+    const entries = [
+      {
+        type: "message" as const,
+        message: { role: "user" as const, content: largeText, timestamp: 1 },
+      },
+      {
+        type: "message" as const,
+        message: { role: "user" as const, content: "second", timestamp: 2 },
+      },
+    ];
+
+    await Effect.runPromise(
+      appendSessionLog(host, address, entries, {
+        id: () => `entry-${++id}`,
+        now: () => ++now,
+      }),
+    );
+    const persisted = await Effect.runPromise(readSessionLog(host, address));
+
+    expect(persisted).toHaveLength(2);
+    expect(persisted[0]).toMatchObject({ id: "entry-1", parentId: null, timestamp: 101 });
+    expect(persisted[0]).toMatchObject({
+      message: { role: "user", content: largeText },
+    });
+    expect(persisted.at(-1)).toMatchObject({ id: "entry-2", parentId: "entry-1" });
+    expect(messagesFromSessionLog(persisted)).toHaveLength(2);
+  });
+
+  it("atomically initializes and verifies immutable ownership", async () => {
+    const host = makeMemoryDurableEntityHost();
+    const address = agentSessionAddress("session-owner");
+    const owner = { organizationId: "org", projectId: "project", userId: "user" };
+    const equals = (left: typeof owner, right: typeof owner) =>
+      JSON.stringify(left) === JSON.stringify(right);
+
+    await expect(Effect.runPromise(ensureSessionOwner(host, address, owner, equals))).resolves.toBe(
+      true,
+    );
+    await expect(
+      Effect.runPromise(ensureSessionOwner(host, address, { ...owner, userId: "other" }, equals)),
+    ).resolves.toBe(false);
+  });
+});
diff --git a/packages/agent/tests/SkillSource.test.ts b/packages/agent/tests/SkillSource.test.ts
new file mode 100644
index 000000000..2414f3438
--- /dev/null
+++ b/packages/agent/tests/SkillSource.test.ts
@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vitest";
+
+import { makeReadSkillTool, renderSkillDisclosure, type SkillSource } from "../src/SkillSource.ts";
+
+const source: SkillSource = {
+  list: () => [{ name: "design-paywall", description: "Use <care> & precision" }],
+  read: (name) => (name === "design-paywall" ? "# Design Paywall\n\nFull body." : undefined),
+};
+
+describe("SkillSource", () => {
+  it("renders escaped progressive-disclosure metadata", () => {
+    expect(renderSkillDisclosure(source)).toContain("<name>design-paywall</name>");
+    expect(renderSkillDisclosure(source)).toContain("Use &lt;care&gt; &amp; precision");
+  });
+
+  it("reads complete bodies through the Pi tool", async () => {
+    const tool = makeReadSkillTool(source);
+    await expect(tool.execute("call-1", { name: "design-paywall" })).resolves.toEqual({
+      content: [{ type: "text", text: "# Design Paywall\n\nFull body." }],
+      details: { name: "design-paywall" },
+    });
+    await expect(tool.execute("call-2", { name: "missing" })).rejects.toThrow(
+      "Unknown skill: missing",
+    );
+  });
+});
diff --git a/packages/agent/tests/run-workerd-do-probe.mjs b/packages/agent/tests/run-workerd-do-probe.mjs
new file mode 100644
index 000000000..52b719506
--- /dev/null
+++ b/packages/agent/tests/run-workerd-do-probe.mjs
@@ -0,0 +1,162 @@
+import { spawn } from "node:child_process";
+import { once } from "node:events";
+import { mkdtemp, rm } from "node:fs/promises";
+import { createServer } from "node:net";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+const freePort = async () => {
+  const server = createServer();
+  server.listen(0, "127.0.0.1");
+  await once(server, "listening");
+  const address = server.address();
+  if (address === null || typeof address === "string") throw new Error("Could not allocate a port");
+  const { port } = address;
+  server.close();
+  await once(server, "close");
+  return port;
+};
+
+const waitFor = async (predicate, message, attempts = 150) => {
+  for (let attempt = 0; attempt < attempts; attempt += 1) {
+    if (await predicate()) return;
+    await new Promise((resolve) => setTimeout(resolve, 100));
+  }
+  throw new Error(message);
+};
+
+const port = await freePort();
+const origin = `http://127.0.0.1:${port}`;
+const output = [];
+const persistTo = await mkdtemp(join(tmpdir(), "voidhash-agent-workerd-"));
+const wrangler = spawn(
+  "pnpm",
+  [
+    "exec",
+    "wrangler",
+    "dev",
+    "--config",
+    "tests/wrangler-do-probe.jsonc",
+    "--ip",
+    "127.0.0.1",
+    "--port",
+    String(port),
+    "--persist-to",
+    persistTo,
+  ],
+  { cwd: new URL("..", import.meta.url), stdio: ["ignore", "pipe", "pipe"] },
+);
+wrangler.stdout.on("data", (chunk) => output.push(String(chunk)));
+wrangler.stderr.on("data", (chunk) => output.push(String(chunk)));
+
+try {
+  await waitFor(
+    async () => {
+      if (wrangler.exitCode !== null) {
+        throw new Error(`wrangler exited early:\n${output.join("")}`);
+      }
+      try {
+        return (await fetch(origin)).status === 426;
+      } catch {
+        return false;
+      }
+    },
+    `Timed out starting workerd:\n${output.join("")}`,
+  );
+
+  const frames = [];
+  const socket = new WebSocket(origin.replace("http", "ws"));
+  socket.addEventListener("message", (event) => frames.push(JSON.parse(String(event.data))));
+  await once(socket, "open");
+
+  const prompt = (requestId, text) =>
+    socket.send(JSON.stringify({ v: 1, type: "prompt", requestId, text }));
+  prompt("turn-1", `first turn ${"🙂".repeat(45_000)}`);
+  await waitFor(
+    () => frames.some((frame) => frame.type === "event" && frame.event.type === "agent_start"),
+    "Durable Object agent did not start streaming",
+  );
+  socket.send(JSON.stringify({ v: 1, type: "get_state", requestId: "streaming-state" }));
+  await waitFor(
+    () =>
+      frames.some(
+        (frame) =>
+          frame.type === "state" &&
+          frame.requestId === "streaming-state" &&
+          frame.state.isStreaming === true,
+      ),
+    "Durable Object did not serve state while the agent stream was active",
+  );
+  socket.send(
+    JSON.stringify({ v: 1, type: "steer", requestId: "steer-1", text: "change direction" }),
+  );
+  await waitFor(
+    () =>
+      frames.some(
+        (frame) =>
+          frame.type === "ack" && frame.requestId === "steer-1" && frame.command === "steer",
+      ),
+    "Durable Object did not accept steering while the agent stream was active",
+  );
+  await waitFor(
+    () =>
+      frames.filter((frame) => frame.type === "event" && frame.event.type === "agent_end").length >=
+      1,
+    "First Durable Object agent turn did not finish",
+  );
+  prompt("turn-2", "second turn");
+  await waitFor(
+    () =>
+      frames.filter((frame) => frame.type === "event" && frame.event.type === "agent_end").length >=
+      2,
+    "Second Durable Object agent turn did not finish",
+  );
+
+  socket.send(JSON.stringify({ v: 1, type: "get_entries", requestId: "entries" }));
+  await waitFor(
+    () => frames.some((frame) => frame.type === "entries" && frame.requestId === "entries"),
+    "Durable Object session entries were not returned",
+  );
+
+  const toolEnds = frames.filter(
+    (frame) => frame.type === "event" && frame.event.type === "tool_execution_end",
+  );
+  if (toolEnds.length < 2) {
+    throw new Error(`Expected at least two Effect tool executions, received ${toolEnds.length}`);
+  }
+  const completed = frames
+    .filter((frame) => frame.type === "event" && frame.event.type === "message_end")
+    .flatMap((frame) => frame.event.message?.content ?? [])
+    .filter((content) => content.type === "text")
+    .map((content) => content.text);
+  if (completed.length < 2) {
+    throw new Error(`Missing multi-turn assistant output: ${JSON.stringify(completed)}`);
+  }
+  const entries = frames.find((frame) => frame.type === "entries" && frame.requestId === "entries");
+  if (!Array.isArray(entries?.entries) || entries.entries.length < 6) {
+    throw new Error("Durable Object transcript did not persist both tool-calling turns");
+  }
+  const persistedUserText = entries.entries
+    .filter((entry) => entry.type === "message" && entry.message?.role === "user")
+    .flatMap((entry) => {
+      const content = entry.message.content;
+      if (typeof content === "string") return [content];
+      if (!Array.isArray(content)) return [];
+      return content.filter((part) => part.type === "text").map((part) => part.text);
+    });
+  if (!persistedUserText.includes("change direction")) {
+    throw new Error("Durable Object transcript did not persist the in-stream steering message");
+  }
+  socket.close();
+  process.stdout.write(
+    `workerd Durable Object probe passed (${toolEnds.length} tool calls, ${entries.entries.length} entries)\n`,
+  );
+} finally {
+  wrangler.kill("SIGTERM");
+  await Promise.race([
+    once(wrangler, "exit"),
+    new Promise((resolve) => setTimeout(resolve, 2_000)),
+  ]);
+  if (wrangler.exitCode === null) wrangler.kill("SIGKILL");
+  await rm(persistTo, { force: true, recursive: true });
+}
diff --git a/packages/agent/tests/workerd-do-probe.ts b/packages/agent/tests/workerd-do-probe.ts
new file mode 100644
index 000000000..258b7d657
--- /dev/null
+++ b/packages/agent/tests/workerd-do-probe.ts
@@ -0,0 +1,267 @@
+import {
+  Agent,
+  AgentSessionCore,
+  agentSessionAddress,
+  createAssistantMessageEventStream,
+  makeEffectAgentTool,
+  Type,
+  type AgentSessionConnection,
+  type AssistantMessage,
+  type Model,
+  type StreamFn,
+} from "@voidhash/agent";
+import type {
+  DurableEntityHostShape,
+  DurableEntitySession,
+} from "@voidhash/platform/DurableEntity";
+import { Context, Effect, Semaphore } from "effect";
+
+declare class WebSocketPair {
+  readonly 0: WebSocket;
+  readonly 1: WebSocket;
+}
+
+interface ProbeEnvironment {
+  readonly PROBE_SESSION: {
+    idFromName(name: string): unknown;
+    get(id: unknown): { fetch(request: Request): Promise<Response> };
+  };
+}
+
+interface ProbeState {
+  readonly id: { readonly name?: string };
+  readonly storage: {
+    get(key: string): Promise<unknown | undefined>;
+    put(key: string, value: unknown): Promise<void>;
+    delete(key: string): Promise<boolean>;
+    getAlarm(): Promise<number | null>;
+    setAlarm(scheduledTime: number): Promise<void>;
+    deleteAlarm(): Promise<void>;
+  };
+  acceptWebSocket(socket: WebSocket): void;
+}
+
+interface ProbeSocket extends WebSocket {
+  deserializeAttachment<T>(): T | null;
+  serializeAttachment(value: unknown): void;
+}
+
+const model: Model<string> = {
+  id: "workerd-do-probe",
+  name: "Workerd DO probe",
+  api: "workerd-do-probe",
+  provider: "workerd-do-probe",
+  baseUrl: "",
+  reasoning: false,
+  input: ["text"],
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+  contextWindow: 1_000,
+  maxTokens: 100,
+};
+
+const usage = {
+  input: 0,
+  output: 0,
+  cacheRead: 0,
+  cacheWrite: 0,
+  totalTokens: 0,
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+};
+
+const response = (
+  content: AssistantMessage["content"],
+  stopReason: "stop" | "toolUse",
+): AssistantMessage => ({
+  role: "assistant",
+  content,
+  api: model.api,
+  provider: model.provider,
+  model: model.id,
+  usage,
+  stopReason,
+  timestamp: Date.now(),
+});
+
+const streamFn: StreamFn = (_model, context) => {
+  const stream = createAssistantMessageEventStream();
+  const userCount = context.messages.filter((message) => message.role === "user").length;
+  const latest = context.messages.at(-1);
+  const message =
+    latest?.role === "toolResult"
+      ? response([{ type: "text", text: `completed-${userCount}` }], "stop")
+      : response(
+          [
+            {
+              type: "toolCall",
+              id: `probe-call-${userCount}`,
+              name: "probe_effect",
+              arguments: { value: `turn-${userCount}` },
+            },
+          ],
+          "toolUse",
+        );
+  void (async () => {
+    if (userCount === 1 && latest?.role === "user") {
+      await new Promise((resolve) => setTimeout(resolve, 150));
+    }
+    stream.push({ type: "start", partial: { ...message, content: [] } });
+    stream.push({
+      type: "done",
+      reason: message.stopReason as "stop" | "toolUse",
+      message,
+    });
+  })();
+  return stream;
+};
+
+const probeTool = makeEffectAgentTool<
+  { readonly value: string },
+  { readonly echoed: string },
+  never,
+  never
+>(
+  {
+    name: "probe_effect",
+    label: "Effect probe",
+    description: "Returns its input through an Effect-backed Pi tool.",
+    parameters: Type.Object({ value: Type.String() }),
+    effectHandler: ({ value }) =>
+      Effect.succeed({
+        content: [{ type: "text", text: value }],
+        details: { echoed: value },
+      }),
+  },
+  Context.empty(),
+);
+
+const makeSession = (id: string, socket: ProbeSocket): DurableEntitySession => ({
+  id,
+  send: (message) =>
+    Effect.sync(() =>
+      socket.send(typeof message === "string" ? message : (message.slice().buffer as ArrayBuffer)),
+    ),
+  close: (code = 1000, reason = "") => Effect.sync(() => socket.close(code, reason)),
+  getAttachment: Effect.sync(() => socket.deserializeAttachment() ?? undefined),
+  setAttachment: (attachment) => Effect.sync(() => socket.serializeAttachment(attachment)),
+});
+
+const owner = { organizationId: "probe-org", projectId: "probe-project", userId: "probe-user" };
+
+export class ProbeSession {
+  readonly #sessionId: string;
+  readonly #sessions = new Map<string, DurableEntitySession>();
+  readonly #core: AgentSessionCore<void>;
+
+  constructor(readonly state: ProbeState) {
+    this.#sessionId = state.id.name ?? "probe";
+    const address = agentSessionAddress(this.#sessionId);
+    const lock = Semaphore.makeUnsafe(1);
+    const host: DurableEntityHostShape = {
+      run: (requested, operation) => {
+        if (requested.type !== address.type || requested.id !== address.id) {
+          return Effect.die(new Error("Probe Durable Object received a foreign address"));
+        }
+        return lock.withPermit(
+          operation({
+            address,
+            keyValue: {
+              get: (key) => Effect.promise(() => state.storage.get(key)),
+              put: (key, value) =>
+                Effect.promise(async () => {
+                  await state.storage.put(key, value);
+                }),
+              delete: (key) =>
+                Effect.promise(async () => {
+                  await state.storage.delete(key);
+                }),
+            },
+            alarm: {
+              get: Effect.promise(async () => (await state.storage.getAlarm()) ?? undefined),
+              set: (scheduledTime) =>
+                Effect.promise(async () => {
+                  await state.storage.setAlarm(scheduledTime);
+                }),
+              delete: Effect.promise(() => state.storage.deleteAlarm()),
+            },
+            sessions: {
+              get: (id) => Effect.succeed(this.#sessions.get(id)),
+              list: Effect.sync(() => [...this.#sessions.values()]),
+              attach: (session) =>
+                Effect.sync(() => {
+                  this.#sessions.set(session.id, session);
+                }),
+              remove: (id) =>
+                Effect.sync(() => {
+                  this.#sessions.delete(id);
+                }),
+            },
+          }),
+        );
+      },
+    };
+    this.#core = new AgentSessionCore({
+      host,
+      factory: {
+        create: ({ messages }) =>
+          new Agent({
+            initialState: {
+              model,
+              messages: [...messages],
+              systemPrompt: "Run the probe tool once per request.",
+              tools: [probeTool],
+            },
+            streamFn,
+          }),
+        resolveModel: () => model,
+      },
+    });
+  }
+
+  #connection(socket: ProbeSocket): AgentSessionConnection<void> {
+    const attachment = socket.deserializeAttachment<{ readonly connectionId: string }>();
+    if (attachment === null) throw new Error("Missing probe socket attachment");
+    const session =
+      this.#sessions.get(attachment.connectionId) ?? makeSession(attachment.connectionId, socket);
+    this.#sessions.set(attachment.connectionId, session);
+    return { sessionId: this.#sessionId, owner, session, data: undefined };
+  }
+
+  async fetch(request: Request): Promise<Response> {
+    if (request.headers.get("upgrade")?.toLowerCase() !== "websocket") {
+      return new Response("Expected Upgrade: websocket", { status: 426 });
+    }
+    const pair = new WebSocketPair();
+    const client = pair[0];
+    const server = pair[1] as ProbeSocket;
+    const connectionId = crypto.randomUUID();
+    server.serializeAttachment({ connectionId });
+    this.state.acceptWebSocket(server);
+    const connection = this.#connection(server);
+    await Effect.runPromise(this.#core.connect(connection));
+    return new Response(null, { status: 101, webSocket: client } as ResponseInit);
+  }
+
+  async webSocketMessage(socket: ProbeSocket, message: string | ArrayBuffer): Promise<void> {
+    const frame = typeof message === "string" ? message : new Uint8Array(message);
+    await Effect.runPromise(this.#core.handleMessage(this.#connection(socket), frame));
+  }
+
+  async webSocketClose(socket: ProbeSocket): Promise<void> {
+    const attachment = socket.deserializeAttachment<{ readonly connectionId: string }>();
+    if (attachment !== null) {
+      this.#sessions.delete(attachment.connectionId);
+      await Effect.runPromise(this.#core.disconnect(this.#sessionId, attachment.connectionId));
+    }
+  }
+
+  async alarm(): Promise<void> {
+    await Effect.runPromise(this.#core.onAlarm(this.#sessionId));
+  }
+}
+
+export default {
+  fetch(request: Request, env: ProbeEnvironment): Promise<Response> {
+    const id = env.PROBE_SESSION.idFromName("multi-turn");
+    return env.PROBE_SESSION.get(id).fetch(request);
+  },
+};
diff --git a/packages/agent/tests/workerd-probe.ts b/packages/agent/tests/workerd-probe.ts
new file mode 100644
index 000000000..f1059c3ea
--- /dev/null
+++ b/packages/agent/tests/workerd-probe.ts
@@ -0,0 +1,93 @@
+import { Agent, type AgentTool, type StreamFn } from "@earendil-works/pi-agent-core";
+import {
+  createAssistantMessageEventStream,
+  type AssistantMessage,
+  type Model,
+} from "@earendil-works/pi-ai";
+import { Type } from "typebox";
+
+const model: Model<string> = {
+  id: "workerd-probe",
+  name: "workerd-probe",
+  api: "workerd-probe",
+  provider: "workerd-probe",
+  baseUrl: "",
+  reasoning: false,
+  input: ["text"],
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+  contextWindow: 1_000,
+  maxTokens: 100,
+};
+
+const usage = {
+  input: 0,
+  output: 0,
+  cacheRead: 0,
+  cacheWrite: 0,
+  totalTokens: 0,
+  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+};
+
+const response = (content: AssistantMessage["content"], stopReason: "stop" | "toolUse") => ({
+  role: "assistant" as const,
+  content,
+  api: model.api,
+  provider: model.provider,
+  model: model.id,
+  usage,
+  stopReason,
+  timestamp: Date.now(),
+});
+
+const streamFn: StreamFn = (_model, context) => {
+  const stream = createAssistantMessageEventStream();
+  const hasToolResult = context.messages.some((message) => message.role === "toolResult");
+  const message = hasToolResult
+    ? response([{ type: "text", text: "workerd-compatible" }], "stop")
+    : response(
+        [
+          {
+            type: "toolCall",
+            id: "probe-call",
+            name: "probe",
+            arguments: { value: "ok" },
+          },
+        ],
+        "toolUse",
+      );
+  queueMicrotask(() => {
+    stream.push({ type: "start", partial: { ...message, content: [] } });
+    stream.push({ type: "done", reason: message.stopReason, message });
+  });
+  return stream;
+};
+
+const Parameters = Type.Object({ value: Type.String() });
+const tool: AgentTool<typeof Parameters> = {
+  name: "probe",
+  label: "Probe",
+  description: "Workerd tool probe",
+  parameters: Parameters,
+  execute: async (_toolCallId, input) => ({
+    content: [{ type: "text", text: input.value }],
+    details: { value: input.value },
+  }),
+};
+
+export default {
+  async fetch(): Promise<Response> {
+    const agent = new Agent({
+      initialState: { model, systemPrompt: "probe", tools: [tool] },
+      streamFn,
+    });
+    await agent.prompt("run");
+    const compatible = agent.state.messages.some(
+      (message) =>
+        message.role === "assistant" &&
+        message.content.some(
+          (content) => content.type === "text" && content.text === "workerd-compatible",
+        ),
+    );
+    return Response.json({ compatible, messageCount: agent.state.messages.length });
+  },
+};
diff --git a/packages/agent/tests/wrangler-do-probe.jsonc b/packages/agent/tests/wrangler-do-probe.jsonc
new file mode 100644
index 000000000..ce2d9ceea
--- /dev/null
+++ b/packages/agent/tests/wrangler-do-probe.jsonc
@@ -0,0 +1,11 @@
+{
+  "$schema": "../../../node_modules/wrangler/config-schema.json",
+  "name": "voidhash-agent-do-probe",
+  "main": "workerd-do-probe.ts",
+  "compatibility_date": "2026-03-17",
+  "compatibility_flags": ["nodejs_compat"],
+  "durable_objects": {
+    "bindings": [{ "name": "PROBE_SESSION", "class_name": "ProbeSession" }],
+  },
+  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["ProbeSession"] }],
+}
diff --git a/packages/agent/tsconfig.json b/packages/agent/tsconfig.json
new file mode 100644
index 000000000..42a983a34
--- /dev/null
+++ b/packages/agent/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "@voidhash/tsconfig/internal-package-typescript-6.json",
+  "compilerOptions": {
+    "noEmit": true
+  },
+  "include": ["src", "tests", "vitest.mts"],
+  "exclude": ["**/node_modules/**"]
+}
diff --git a/packages/agent/vitest.mts b/packages/agent/vitest.mts
new file mode 100644
index 000000000..f7f3ccc15
--- /dev/null
+++ b/packages/agent/vitest.mts
@@ -0,0 +1,7 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  test: {
+    include: ["tests/**/*.test.ts"],
+  },
+});
diff --git a/packages/ai-shared/README.md b/packages/ai-shared/README.md
index 2526b591f..846ea72c6 100644
--- a/packages/ai-shared/README.md
+++ b/packages/ai-shared/README.md
@@ -1,7 +1,7 @@
 # @voidhash/ai-shared
 
-Shared schemas and pure document-editing contracts used by Voidhash AI authoring clients and services.
+Shared document-editing schemas, validators, and pure authoring utilities.
 
 ```typescript
-import { chatRequestBodySchema } from "@voidhash/ai-shared";
+import { documentEditSchema, validateDocumentEdits } from "@voidhash/ai-shared";
 ```
diff --git a/packages/ai-shared/package.json b/packages/ai-shared/package.json
index 7997a40b1..522adfc6e 100644
--- a/packages/ai-shared/package.json
+++ b/packages/ai-shared/package.json
@@ -2,7 +2,7 @@
   "name": "@voidhash/ai-shared",
   "version": "0.0.1-alpha.1",
   "private": true,
-  "description": "Shared AI request, document-edit, and authoring contracts for Voidhash clients and services.",
+  "description": "Shared document-edit validation and authoring contracts for Voidhash services.",
   "keywords": [
     "ai",
     "paywalls",
diff --git a/packages/ai-shared/src/chat-request.ts b/packages/ai-shared/src/chat-request.ts
deleted file mode 100644
index dad5e164e..000000000
--- a/packages/ai-shared/src/chat-request.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-import { z } from "zod";
-
-/**
- * The wire contract for `POST /api/ai/chat`: the request body the studio chat
- * transport sends and the backend route decodes. Shared here so the client
- * transport (apps/www) and the server route (apps/backend) validate against ONE
- * schema and cannot silently drift.
- *
- * The AI SDK appends the running message history plus per-turn control fields
- * (`id`/`trigger`/`messageId`) to the body; the transport merges in the surface,
- * chat scope, and any live dynamic context. This schema is intentionally lenient
- * about the SDK-owned fields (passthrough — the server only reads what it needs)
- * and strict about the fields the server relies on.
- *
- * `messages` is validated only as an array here; the server further validates it
- * with the AI SDK's `validateUIMessages`. The route separately enforces
- * anti-spoof authz (the project must be in the caller's session) AFTER decoding —
- * that check is NOT part of this schema.
- */
-export const chatRequestBodySchema = z
-  .object({
-    /** UI-message history from the AI SDK client. */
-    messages: z.array(z.unknown()),
-    /** Studio surface — currently only the paywall designer. */
-    surface: z.literal("designer"),
-    organizationId: z.string(),
-    /** Project the workspace tools operate over (anti-spoof-checked by the route). */
-    projectId: z.string(),
-    /** The open paywall id — chat persistence scope only. */
-    paywallId: z.string(),
-    /** Client-minted chat id — the persistence upsert key. */
-    chatId: z.string(),
-    /**
-     * Mimic node ids the user currently has selected in the open designer, sent
-     * fresh per turn. Optional — older clients / non-designer surfaces omit it.
-     */
-    selectedNodeIds: z.array(z.string()).optional(),
-  })
-  .passthrough();
-
-/** The decoded chat request body (the server-relevant fields; SDK extras are dropped by callers). */
-export type ChatRequestBody = z.infer<typeof chatRequestBodySchema>;
diff --git a/packages/ai-shared/src/document-edits.ts b/packages/ai-shared/src/document-edits.ts
index 568c2c3b4..6bf4f146b 100644
--- a/packages/ai-shared/src/document-edits.ts
+++ b/packages/ai-shared/src/document-edits.ts
@@ -15,10 +15,7 @@ import {
   nodeStyleSchema,
   type SerializedSchema,
 } from "./mimic-introspection.ts";
-import {
-  deriveEnabledFlagsForNodeInput,
-  deriveEnabledFlagsForSet,
-} from "./style-group-flags.ts";
+import { deriveEnabledFlagsForNodeInput, deriveEnabledFlagsForSet } from "./style-group-flags.ts";
 import type { DocumentEdit, NodeInput } from "./surfaces.ts";
 
 /**
@@ -99,7 +96,7 @@ export type ValidateEditsResult =
  *   else it is a dead placeholder;
  * - a `NodeInput.type` must be a real editable node type — `root` may never be
  *   inserted, and `library` / `codeComponent` are managed by the component tools,
- *   not `edit_document`;
+ *   not `edit_paywall`;
  * - every field of an `update.set` / `NodeInput` is validated against the node
  *   type's mimic schema: unknown fields yield a did-you-mean suggestion + the
  *   allowed field list, bad enum values name the allowed values, and wrong scalar
@@ -137,7 +134,7 @@ export function validateDocumentEdits(
         {
           editIndex: 0,
           code: "emptyBatch",
-          message: "edit_document was called with an empty `edits` array — provide at least one op.",
+          message: "edit_paywall was called with an empty `edits` array — provide at least one op.",
         },
       ],
     };
@@ -225,7 +222,7 @@ export function validateDocumentEdits(
 // ---------------------------------------------------------------------------
 
 /**
- * The node types `edit_document` may never structurally mutate (remove / move /
+ * The node types `edit_paywall` may never structurally mutate (remove / move /
  * replaceChildren): the singleton `root`/`library` scaffolding and `codeComponent`
  * definitions, which the component tools own. A `move` additionally cannot target
  * the root. Returns `true` when the target is mutable (the caller may continue).
@@ -251,7 +248,7 @@ function validateMutableTarget(
       editIndex,
       code: "protectedTarget",
       nodeId: node.id,
-      message: `Cannot ${op} the \`${node.type}\` node \`${node.id}\` — component definitions are managed by the component tools. Use delete_component to remove a component definition (its instances degrade to placeholders), not edit_document.`,
+      message: `Cannot ${op} the \`${node.type}\` node \`${node.id}\` — component definitions are managed by the component tools. Use delete_component to remove a component definition (its instances degrade to placeholders), not edit_paywall.`,
     });
     return false;
   }
@@ -293,7 +290,7 @@ function validateNonOverlapping(
       editIndex,
       code: "overlappingEdits",
       nodeId: target,
-      message: `Edit ${editIndex} and edit ${firstIndex} both target node \`${target}\`. Overlapping edits on one node make the atomic undo ambiguous — merge them into one edit, or split them into separate edit_document calls.`,
+      message: `Edit ${editIndex} and edit ${firstIndex} both target node \`${target}\`. Overlapping edits on one node make the atomic undo ambiguous — merge them into one edit, or split them into separate edit_paywall calls.`,
     });
   });
 
@@ -321,7 +318,7 @@ function validateNonOverlapping(
           nodeId: target,
           message: `Edit ${editIndex} targets node \`${target}\`, which is inside the subtree edit ${otherIndex} ${
             other.op === "remove" ? "removes" : "replaces"
-          } (\`${otherTarget}\`). Removal already includes descendants, so this overlap is redundant and makes undo ambiguous — drop the inner edit, or split them into separate edit_document calls.`,
+          } (\`${otherTarget}\`). Removal already includes descendants, so this overlap is redundant and makes undo ambiguous — drop the inner edit, or split them into separate edit_paywall calls.`,
         });
       }
     }
@@ -365,7 +362,7 @@ function requireNode(
     editIndex,
     code,
     nodeId: id,
-    message: `${code === "unknownParent" ? "Parent node" : "Node"} \`${id}\` does not exist in the document. Node ids come from get_document or the current selection.`,
+    message: `${code === "unknownParent" ? "Parent node" : "Node"} \`${id}\` does not exist in the document. Node ids come from get_paywall or the current selection.`,
   });
   return null;
 }
@@ -416,8 +413,16 @@ function validateChildType(
 // Node type + field validation
 // ---------------------------------------------------------------------------
 
-/** Node types the AI may create via `edit_document` (root/library/codeComponent are excluded). */
-const INSERTABLE_NODE_TYPES: readonly NodeType[] = ["screen", "view", "scrollView", "text", "shape", "path", "component"];
+/** Node types the AI may create via `edit_paywall` (root/library/codeComponent are excluded). */
+const INSERTABLE_NODE_TYPES: readonly NodeType[] = [
+  "screen",
+  "view",
+  "scrollView",
+  "text",
+  "shape",
+  "path",
+  "component",
+];
 
 /**
  * Validate a `NodeInput` (from `insert` / `replaceChildren`): its `type` must be
@@ -511,7 +516,7 @@ function validateComponentIdentity(
     code: "missingComponentIdentity",
     field: `${path}`,
     message:
-      "A `component` node must name which component to place. Provide `componentSlug` (a catalog component from get_components), OR both `componentPath` (a local `components/<name>.tsx`) and `componentSource: \"local\"`, OR `componentSource: \"builtin\"` with a builtin `componentSlug` from get_components. Without one it inserts a dead placeholder.",
+      'A `component` node must name which component to place. Provide `componentSlug` (a catalog component from get_components), OR both `componentPath` (a local `components/<name>.tsx`) and `componentSource: "local"`, OR `componentSource: "builtin"` with a builtin `componentSlug` from get_components. Without one it inserts a dead placeholder.',
   });
 }
 
@@ -762,7 +767,7 @@ function invalidNodeTypeMessage(type: string): string {
     return `Cannot insert a \`root\` node — the document root already exists and is unique.`;
   }
   if (type === "library" || type === "codeComponent") {
-    return `Node type \`${type}\` is managed by the component tools (write_component / rename_component / delete_component), not edit_document.`;
+    return `Node type \`${type}\` is managed by the component tools (write_component / rename_component / delete_component), not edit_paywall.`;
   }
   const suggestion = nearestField(type, INSERTABLE_NODE_TYPES);
   const didYouMean = suggestion ? ` Did you mean \`${suggestion}\`?` : "";
@@ -822,17 +827,13 @@ function nearestField(key: string, candidates: readonly string[]): string | unde
 function levenshtein(a: string, b: string): number {
   const rows = a.length + 1;
   const cols = b.length + 1;
-  const dist: number[] = new Array(cols);
-  for (let j = 0; j < cols; j++) dist[j] = j;
+  const dist = Array.from({ length: cols }, (_, index) => index);
   for (let i = 1; i < rows; i++) {
     let prev = dist[0]!;
     dist[0] = i;
     for (let j = 1; j < cols; j++) {
       const temp = dist[j]!;
-      dist[j] =
-        a[i - 1] === b[j - 1]
-          ? prev
-          : 1 + Math.min(prev, dist[j]!, dist[j - 1]!);
+      dist[j] = a[i - 1] === b[j - 1] ? prev : 1 + Math.min(prev, dist[j]!, dist[j - 1]!);
       prev = temp;
     }
   }
diff --git a/packages/ai-shared/src/document-serializer.ts b/packages/ai-shared/src/document-serializer.ts
index b0b99f4d2..e8679ae22 100644
--- a/packages/ai-shared/src/document-serializer.ts
+++ b/packages/ai-shared/src/document-serializer.ts
@@ -56,7 +56,7 @@ export interface SerializeOptions {
  * `{id, pos, value}` array envelopes recursively, and strips every data field
  * whose value equals that node type's schema default (so the model sees only what
  * was actually authored). It keeps `id` (the model addresses nodes by id in
- * `edit_document`), `type`, `name`, and the remaining data.
+ * `edit_paywall`), `type`, `name`, and the remaining data.
  *
  * A `codeComponent` node is emitted WITHOUT its `source` (the full TSX would blow
  * up a whole-document read): only its `path` and a `sourceLength` stub ship — the
@@ -79,10 +79,7 @@ export function serializeDocument(
 }
 
 /** Depth-first search for a node by id across a decoded forest. */
-function findNode(
-  nodes: readonly SnapshotDocumentNode[],
-  id: string,
-): SnapshotDocumentNode | null {
+function findNode(nodes: readonly SnapshotDocumentNode[], id: string): SnapshotDocumentNode | null {
   for (const node of nodes) {
     if (node.id === id) return node;
     const found = findNode(node.children ?? [], id);
diff --git a/packages/ai-shared/src/index.ts b/packages/ai-shared/src/index.ts
index 7b93420a9..70a3e961e 100644
--- a/packages/ai-shared/src/index.ts
+++ b/packages/ai-shared/src/index.ts
@@ -1,8 +1,6 @@
 export * from "./apply-document-edits.ts";
-export * from "./chat-request.ts";
 export * from "./document-edits.ts";
 export * from "./document-serializer.ts";
 export * from "./mimic-introspection.ts";
-export * from "./models.ts";
 export * from "./style-group-flags.ts";
 export * from "./surfaces.ts";
diff --git a/packages/ai-shared/src/models.test.ts b/packages/ai-shared/src/models.test.ts
deleted file mode 100644
index 4973e4a7b..000000000
--- a/packages/ai-shared/src/models.test.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import { describe, expect, it } from "vite-plus/test";
-
-import { DEFAULT_AI_MODEL, messagesContainImage, modelForTurn, VISION_AI_MODEL } from "./models.ts";
-
-describe("modelForTurn", () => {
-  it("keeps text-only designer turns on the code model", () => {
-    const messages = [{ role: "user", parts: [{ type: "text", text: "Improve this" }] }];
-    expect(messagesContainImage(messages)).toBe(false);
-    expect(modelForTurn("designer", messages)).toBe(DEFAULT_AI_MODEL);
-  });
-
-  it("selects the vision model for a user image attachment", () => {
-    const messages = [
-      {
-        role: "user",
-        parts: [{ type: "file", mediaType: "image/png", url: "data:image/png;base64,cG5n" }],
-      },
-    ];
-    expect(messagesContainImage(messages)).toBe(true);
-    expect(modelForTurn("designer", messages)).toBe(VISION_AI_MODEL);
-  });
-
-  it("selects the vision model for a screenshot nested in a tool result", () => {
-    const messages = [
-      {
-        role: "assistant",
-        parts: [
-          {
-            type: "tool-get_preview_screenshot",
-            state: "output-available",
-            output: {
-              kind: "preview-screenshot",
-              mediaType: "image/png",
-              dataBase64: "cG5n",
-            },
-          },
-        ],
-      },
-    ];
-    expect(messagesContainImage(messages)).toBe(true);
-    expect(modelForTurn("designer", messages)).toBe(VISION_AI_MODEL);
-  });
-});
diff --git a/packages/ai-shared/src/models.ts b/packages/ai-shared/src/models.ts
deleted file mode 100644
index ebbcfe636..000000000
--- a/packages/ai-shared/src/models.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import type { Surface } from "./surfaces.ts";
-
-/** Workers AI model id for the Voidhash AI agent (Kimi K2.7 Code via AI Gateway). */
-export const DEFAULT_AI_MODEL = "@cf/moonshotai/kimi-k2.7-code";
-
-/**
- * Vision-capable Workers AI model used for turns that include an image
- * attachment. Llama 4 Scout is multimodal (text + image) and supports function
- * calling, so it can both read a screenshot/mockup and drive the same designer
- * tool loop the code model uses. Text-only turns stay on {@link DEFAULT_AI_MODEL}.
- */
-export const VISION_AI_MODEL = "@cf/meta/llama-4-scout-17b-16e-instruct";
-
-/** Per-surface model overrides for text-only turns; falls back to {@link DEFAULT_AI_MODEL}. */
-export const AI_MODEL_BY_SURFACE: Record<Surface, string> = {
-  designer: DEFAULT_AI_MODEL,
-};
-
-/** Whether an arbitrary UI-message value contains an image attachment/tool result. */
-function containsImage(value: unknown, seen: Set<object>): boolean {
-  if (value === null || typeof value !== "object") {
-    return false;
-  }
-  if (seen.has(value)) {
-    return false;
-  }
-  seen.add(value);
-
-  if (!Array.isArray(value)) {
-    const candidate = value as { kind?: unknown; mediaType?: unknown; type?: unknown };
-    const isImageFile =
-      candidate.type === "file" &&
-      typeof candidate.mediaType === "string" &&
-      candidate.mediaType.startsWith("image/");
-    const isPreviewScreenshot =
-      candidate.kind === "preview-screenshot" && candidate.mediaType === "image/png";
-    if (isImageFile || isPreviewScreenshot) {
-      return true;
-    }
-  }
-
-  return Object.values(value).some((child) => containsImage(child, seen));
-}
-
-/**
- * Whether the conversation contains an image supplied by the user OR returned
- * by a visual-review tool. The recursive walk is intentional: client tool
- * outputs live inside an assistant tool part's `output`, not as top-level file
- * parts. Detecting both keeps screenshot-driven continuations on the vision
- * model while text-only turns continue using the code model.
- */
-export const messagesContainImage = (messages: ReadonlyArray<unknown>): boolean =>
-  containsImage(messages, new Set());
-
-/**
- * Picks the model for a chat turn: the vision model when the conversation
- * contains an image attachment, otherwise the surface's text model.
- */
-export const modelForTurn = (surface: Surface, messages: ReadonlyArray<unknown>): string =>
-  messagesContainImage(messages) ? VISION_AI_MODEL : AI_MODEL_BY_SURFACE[surface];
diff --git a/packages/ai-shared/src/surfaces.test.ts b/packages/ai-shared/src/surfaces.test.ts
deleted file mode 100644
index 09300e6ba..000000000
--- a/packages/ai-shared/src/surfaces.test.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-import { describe, expect, it } from "vite-plus/test";
-
-import { previewScreenshotToolResultSchema } from "./surfaces.ts";
-
-describe("previewScreenshotToolResultSchema", () => {
-  it("accepts a successful multimodal screenshot payload", () => {
-    expect(
-      previewScreenshotToolResultSchema.safeParse({
-        kind: "preview-screenshot",
-        mediaType: "image/png",
-        dataBase64: "cG5n",
-        width: 375,
-        height: 812,
-        scale: 1,
-        documentSignature: "doc-12345678",
-        message: "Review this render.",
-      }).success,
-    ).toBe(true);
-  });
-
-  it("accepts a recoverable capture error for the next continuation", () => {
-    expect(
-      previewScreenshotToolResultSchema.safeParse("Could not capture the live preview.").success,
-    ).toBe(true);
-  });
-});
diff --git a/packages/ai-shared/src/surfaces.ts b/packages/ai-shared/src/surfaces.ts
index d41a52e77..0fd2c2804 100644
--- a/packages/ai-shared/src/surfaces.ts
+++ b/packages/ai-shared/src/surfaces.ts
@@ -1,13 +1,7 @@
 import { z } from "zod";
 
-/**
- * A studio surface the Voidhash AI agent can be embedded on. Each surface maps
- * to its own system prompt and client-executed tool set.
- */
-export type Surface = "designer";
-
 // ---------------------------------------------------------------------------
-// Document edit vocabulary (edit_document)
+// Document edit vocabulary (edit_paywall)
 // ---------------------------------------------------------------------------
 
 /**
@@ -26,7 +20,7 @@ export type Surface = "designer";
  * - `name` — optional display name.
  * - node data fields — spread at the top level: `style` (a `{ field: value }`
  *   object), `text` (for text nodes), component identity fields, etc. Validated
- *   against the node type's schema by the executor.
+ *   against the node type's schema by the server-side workspace tool.
  * - `children` — optional nested subtree.
  * Engine mints all ids; do not supply them.
  */
@@ -59,8 +53,8 @@ export const nodeInputSchema: z.ZodType<NodeInput> = z.lazy(() =>
 );
 
 /**
- * One atomic document edit. `edit_document` applies a batch of these
- * all-or-nothing. Nodes are addressed by their mimic id (from get_document or the
+ * One atomic document edit. `edit_paywall` applies a batch of these
+ * all-or-nothing. Nodes are addressed by their mimic id (from get_paywall or the
  * current selection); ids for inserted nodes are engine-minted and RETURNED.
  */
 export const documentEditSchema = z.discriminatedUnion("op", [
@@ -134,223 +128,8 @@ export const documentEditSchema = z.discriminatedUnion("op", [
 /** A single document edit op (discriminated on `op`). */
 export type DocumentEdit = z.infer<typeof documentEditSchema>;
 
-// ---------------------------------------------------------------------------
-// Designer tool input schemas
-// ---------------------------------------------------------------------------
-
-/**
- * Input schemas for the designer-surface tools. Declared here (shared package)
- * so the server-side tool DECLARATIONS (schema-only, no `execute`) and the
- * browser EXECUTOR (apps/www) validate against ONE definition and cannot drift.
- *
- * The designer tools are CLIENT-EXECUTED: the model calls them, the AI SDK ends
- * the request, and the browser runs each tool against the **currently open
- * paywall document** before auto-continuing the chat. Composition is authored as
- * MIMIC DOCUMENT EDITS (`edit_document`) — there is no `paywall.tsx` and no
- * fork/apply step; edits are validated and applied incrementally. Code components
- * remain code-authored and are managed by the `*_component` tools. `read_paywall`
- * is the only cross-paywall (read-only) tool.
- */
-export const designerToolSchemas = {
-  // -- read --
-  get_document: z.object({
-    nodeId: z
-      .string()
-      .optional()
-      .describe(
-        "Optional node id to root the returned tree at (defaults to the whole document). Use to zoom into a subtree.",
-      ),
-    depth: z
-      .number()
-      .int()
-      .optional()
-      .describe(
-        "Optional max depth from the root. Nodes past the limit render as stubs `{ id, type, name?, childCount }` you can expand with a follow-up get_document(nodeId).",
-      ),
-  }),
-  get_rendered_layout: z.object({
-    nodeIds: z
-      .array(z.string())
-      .max(100)
-      .optional()
-      .describe(
-        "Optional document node ids to inspect. Omit to inspect every rendered node in the open paywall (capped at 100). Returns actual browser geometry, resolved typography/overflow styles, and clipping signals.",
-      ),
-  }),
-  get_preview_screenshot: z.object({
-    nodeId: z
-      .string()
-      .optional()
-      .describe(
-        "Optional document node id to capture. Defaults to the paywall screen. Capture a subtree only when you need a closer review.",
-      ),
-    scale: z
-      .union([z.literal(1), z.literal(2)])
-      .optional()
-      .describe("Raster scale. Use 1 for layout review and 2 only for small text or fine details."),
-  }),
-  get_components: z.object({}),
-  read_component: z.object({
-    path: z
-      .string()
-      .describe(
-        "Canonical document-relative path of a LOCAL component to read (`components/<name>.tsx`).",
-      ),
-  }),
-  read_paywall: z.object({
-    slug: z
-      .string()
-      .describe(
-        "Slug of ANY paywall in the project whose document JSON to read for reference (read-only — you can only EDIT the currently open paywall).",
-      ),
-  }),
-  // -- write --
-  edit_document: z.object({
-    edits: z
-      .array(documentEditSchema)
-      .min(1)
-      .describe(
-        "Ordered batch of document edits, applied ATOMICALLY (all-or-nothing). Returns minted ids for inserts, or per-edit structured errors naming the offending node/field/value.",
-      ),
-  }),
-  duplicate_subtree: z.object({
-    nodeId: z.string().describe("Id of the existing visual node subtree to duplicate."),
-    parentId: z
-      .string()
-      .describe("Id of the destination parent. It must legally contain the duplicated node type."),
-    index: z
-      .number()
-      .int()
-      .optional()
-      .describe("Optional 0-based destination index. Omit to append."),
-    name: z
-      .string()
-      .optional()
-      .describe("Optional display name override for the duplicated subtree root."),
-  }),
-  write_component: z.object({
-    path: z
-      .string()
-      .describe(
-        "Canonical document-relative path (`components/<name>.tsx`). Writing a path that does not exist yet CREATES the component (its path IS its identity).",
-      ),
-    source: z.string().describe("Full TSX component source."),
-  }),
-  rename_component: z.object({
-    fromPath: z.string().describe("Existing component path (`components/<name>.tsx`)."),
-    toPath: z
-      .string()
-      .describe(
-        "New component path. Instances referencing the old path are re-pointed automatically.",
-      ),
-  }),
-  delete_component: z.object({
-    path: z.string().describe("Component path to delete (`components/<name>.tsx`)."),
-  }),
-  finish_design: z.object({
-    reviewedDocumentSignature: z
-      .string()
-      .describe(
-        "The exact document signature returned by the final get_preview_screenshot call. Completion is rejected if the document changed after that review.",
-      ),
-    verdict: z
-      .string()
-      .min(1)
-      .max(1000)
-      .describe(
-        "Concise visual QA verdict covering hierarchy, spacing, typography/contrast, alignment, clipping/safe areas, and purchase affordances.",
-      ),
-    unresolvedIssues: z
-      .array(z.string())
-      .max(20)
-      .describe(
-        "Issues still visible in the reviewed screenshot. This must be empty to finish; otherwise correct them and review again.",
-      ),
-  }),
-} as const;
-
-export type DesignerToolName = keyof typeof designerToolSchemas;
-
-/**
- * Model-facing descriptions for each designer tool. These are the model's ONLY
- * documentation for the document-first authoring model, so they are precise about
- * node addressing (ids from get_document / selection), the `edit_document` op
- * semantics + merge rules + minted-id returns, and that field-level validation
- * errors will name the allowed fields/values.
- */
-export const designerToolDescriptions: Record<DesignerToolName, string> = {
-  get_document:
-    "Return the open paywall's document as cleaned JSON: a nested tree of `{ id, type, name?, ...data, children }` nodes with schema-default fields stripped. Every node has a stable `id` you address in edit_document. Pass `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes come back as stubs you can expand). `codeComponent` definitions come back with their `path` and a `sourceLength` only — the TSX source is NOT inlined; read it with read_component. Call this before editing to learn the current structure and ids.",
-  get_rendered_layout:
-    "Inspect the ACTUAL browser-rendered layout of document nodes, not just their declared style data. Returns geometry relative to the screen, resolved overflow/typography styles, scroll dimensions, and clipping signals. Call this when spacing, alignment, overflow, safe-area fit, or above-the-fold placement needs exact measurements. Omit nodeIds to inspect the rendered paywall, or pass a focused set after a screenshot identifies a problem.",
-  get_preview_screenshot:
-    "Capture the current live paywall canvas as a PNG and return it as multimodal tool content for visual review. Defaults to the screen at 1x. Call after every meaningful visual section and ALWAYS after the final edit. Evaluate hierarchy, CTA dominance, spacing, typography, contrast, alignment, clipping, safe areas, product-option states, and close/restore/legal affordances; make targeted corrections before finishing. The result includes a document signature required by finish_design.",
-  get_components:
-    'List every component available to place: CATALOG components (deployed, shared), LOCAL code components (defined in this paywall), AND first-party BUILTINS that ship with the renderer. Each entry carries its path/slug, description, props schema, action list, and preview states — everything you need to insert a `component` node and bind its props/actions correctly. Insert a catalog component with its `componentSlug`; a local one with `componentPath` + `componentSource: "local"`; a builtin with `componentSource: "builtin"` + its `componentSlug` (builtins are UNPINNED — no version/hash).',
-  read_component:
-    "Read a LOCAL code component's TSX source by its `components/<name>.tsx` path, reflecting your in-progress edits. Use get_components first to discover paths; use read_paywall to read a DIFFERENT paywall.",
-  read_paywall:
-    "Read ANOTHER paywall's document JSON by slug for reference (e.g. to match its design). Read-only — you can only EDIT the currently open paywall.",
-  edit_document:
-    "Apply an ATOMIC batch of edits to the open paywall document (all-or-nothing). Ops: `insert` (add a subtree under a parent at an index — ids are engine-minted and RETURNED so you can address the new nodes next), `update` (partial data change; `set.style` merges per style field, other objects merge per-field, arrays/scalars replace wholesale), `move` (reparent; cycles and illegal containment are rejected), `remove` (delete a subtree), `replaceChildren` (swap a node's whole child list). Address nodes by the ids from get_document or the current selection. Invalid fields/values are rejected with per-edit errors naming the offending node, the allowed fields (with a did-you-mean), and the allowed values — read them and correct your edit.",
-  duplicate_subtree:
-    "Deep-clone an existing visual document subtree under a destination parent. The clone preserves node data, styles, interactions, and descendants while the engine mints fresh node ids, which are returned for follow-up edits. Prefer this for repeated product rows, benefits, cards, and controls so spacing and structure remain consistent. Engine-managed root/library/codeComponent nodes cannot be duplicated.",
-  write_component:
-    "Create-or-replace a LOCAL code component at `components/<name>.tsx` (its path is its identity). On success the component is compiled and committed and becomes placeable via a `component` node; on failure you get compile diagnostics. Use for anything that is genuinely code (custom logic/layout), not for plain composition — compose visual structure with edit_document.",
-  rename_component:
-    "Rename a local component from one `components/<name>.tsx` path to another. Instances referencing the old path are re-pointed automatically (rename cascade).",
-  delete_component:
-    "Delete a local component by path. Existing instances of it degrade to placeholders (they are not cascade-deleted), so replace or remove them afterward.",
-  finish_design:
-    "Complete the visual editing task only after a final get_preview_screenshot. Pass its exact document signature, a concise visual QA verdict, and an empty unresolvedIssues list. The call is rejected if the document changed after the screenshot or if issues remain, forcing another correction-and-review cycle instead of ending on an unverified tree.",
-};
-
-/** Multimodal output produced by `get_preview_screenshot`. */
-export const previewScreenshotToolOutputSchema = z.object({
-  kind: z.literal("preview-screenshot"),
-  mediaType: z.literal("image/png"),
-  dataBase64: z.string(),
-  width: z.number().int().positive(),
-  height: z.number().int().positive(),
-  scale: z.union([z.literal(1), z.literal(2)]),
-  documentSignature: z.string(),
-  message: z.string(),
-});
-
-export type PreviewScreenshotToolOutput = z.infer<typeof previewScreenshotToolOutputSchema>;
-
-/** Successful screenshot payload or the executor's recoverable text error. */
-export const previewScreenshotToolResultSchema = z.union([
-  previewScreenshotToolOutputSchema,
-  z.string(),
-]);
-
-/** Model/client output schema for every designer tool. */
-export const designerToolOutputSchemas: Record<DesignerToolName, z.ZodTypeAny> = {
-  get_document: z.string(),
-  get_rendered_layout: z.string(),
-  get_preview_screenshot: previewScreenshotToolResultSchema,
-  get_components: z.string(),
-  read_component: z.string(),
-  read_paywall: z.string(),
-  edit_document: z.string(),
-  duplicate_subtree: z.string(),
-  write_component: z.string(),
-  rename_component: z.string(),
-  delete_component: z.string(),
-  finish_design: z.string(),
-};
-
-/** Tool input schemas for a surface. */
-export const toolSchemasForSurface = (surface: Surface) =>
-  ({ designer: designerToolSchemas })[surface];
-
-// ---------------------------------------------------------------------------
-// Tool result wire shapes (executors return these; www + backend agree on them)
-// ---------------------------------------------------------------------------
-
 /**
- * A per-edit failure returned by `edit_document`, mirroring the validator's
+ * A per-edit failure returned by `edit_paywall`, mirroring the validator's
  * {@link DocumentEditError} on the wire. `editIndex` locates the offending op in
  * the submitted batch; `message` is the self-contained, model-facing text.
  */
@@ -378,7 +157,7 @@ export const documentEditErrorSchema = z.object({
 export type DocumentEditErrorResult = z.infer<typeof documentEditErrorSchema>;
 
 /**
- * The minted ids `edit_document` returns for each `insert` / `replaceChildren`
+ * The minted ids `edit_paywall` returns for each `insert` / `replaceChildren`
  * op, keyed by the op's index in the submitted batch. Each entry is the ordered
  * list of ids minted for the nodes that op created (parents before children,
  * pre-order), so the model can address freshly-inserted nodes in a follow-up.
@@ -388,16 +167,11 @@ export const mintedIdsSchema = z.record(z.string(), z.array(z.string()));
 export type MintedIds = z.infer<typeof mintedIdsSchema>;
 
 /**
- * The structured result of an `edit_document` call: on success the minted-id map;
+ * The structured result of an `edit_paywall` call: on success the minted-id map;
  * on failure the collected per-edit errors (the whole batch is rejected — nothing
  * is applied).
  *
- * This is the DESIGNER-surface wire contract: the browser executor builds its
- * `edit_document` tool output by parsing through this schema before stringifying,
- * so the JSON the model reads can never drift from this type. The MCP surface
- * deliberately does NOT use it — it renders the same outcome as PROSE for the
- * model (minted ids / errors described in text), so its tool output is not this
- * shape.
+ * Server-side workspace operations use this shape when applying edit batches.
  */
 export const editDocumentResultSchema = z.discriminatedUnion("ok", [
   z.object({ ok: z.literal(true), mintedIds: mintedIdsSchema }),
diff --git a/packages/core/src/domain/auth/Auth.test.ts b/packages/core/src/domain/auth/Auth.test.ts
new file mode 100644
index 000000000..fdef77a3c
--- /dev/null
+++ b/packages/core/src/domain/auth/Auth.test.ts
@@ -0,0 +1,58 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { makeInternalProjectAuthSession, makeInternalProjectUserAuthSession } from "./Auth.ts";
+
+describe("makeInternalProjectAuthSession", () => {
+  it("constructs a project-scoped session that uses normal service authorization", () => {
+    const session = makeInternalProjectAuthSession(
+      {
+        id: "project-1",
+        name: "Project",
+        organizationId: "organization-1",
+        slug: "project",
+      },
+      "Agent session",
+    );
+
+    expect(session).toMatchObject({
+      method: "secret-key",
+      name: "Agent session",
+      projects: [
+        {
+          id: "project-1",
+          organizationId: "organization-1",
+          permissions: ["project:all"],
+          slug: "project",
+        },
+      ],
+    });
+    expect(session.organizations).toEqual([]);
+    expect(session.user).toBeNull();
+  });
+
+  it("preserves an authenticated user across a trusted runtime boundary", () => {
+    const session = makeInternalProjectUserAuthSession(
+      {
+        id: "project-1",
+        name: "Project",
+        organizationId: "organization-1",
+        slug: "project",
+      },
+      "user-1",
+      "Agent session",
+    );
+
+    expect(session).toMatchObject({
+      method: "user",
+      name: "Agent session",
+      projects: [
+        {
+          id: "project-1",
+          organizationId: "organization-1",
+          permissions: ["project:all"],
+        },
+      ],
+      user: { id: "user-1" },
+    });
+  });
+});
diff --git a/packages/core/src/domain/auth/Auth.ts b/packages/core/src/domain/auth/Auth.ts
index 9e999b758..334b3ace7 100644
--- a/packages/core/src/domain/auth/Auth.ts
+++ b/packages/core/src/domain/auth/Auth.ts
@@ -1,10 +1,11 @@
 import { Schema } from "effect";
+import { AuthSession } from "@voidhash/rpc";
 // Single canonical AuthSession service tag — the rpc package owns the
 // definition and middleware that provides it; re-exporting here keeps domain
 // callers using the same class instance, so per-request middleware provisions
 // satisfy every consumer (including ones that imported AuthSession from this
 // domain module before the migration).
-export { AuthSession } from "@voidhash/rpc";
+export { AuthSession };
 
 /** Action is forbidden due to insufficient permissions */
 export class ActionForbiddenError extends Schema.TaggedErrorClass<ActionForbiddenError>(
@@ -99,3 +100,78 @@ export type SecretKeySession = typeof SecretKeySessionSchema.Type;
 export type PublishableKeySession = typeof PublishableKeySessionSchema.Type;
 
 export type AnyAuthSession = UserSession | SecretKeySession | PublishableKeySession;
+
+/** Project fields required to construct a trusted internal service session. */
+export interface InternalProjectSessionProject {
+  readonly id: string;
+  readonly name: string;
+  readonly organizationId: string;
+  readonly slug: string;
+}
+
+/**
+ * Constructs the single-project session used by trusted server-side adapters.
+ * The returned session still passes through the normal service authorization
+ * checks and grants no access outside the supplied project.
+ */
+export const makeInternalProjectAuthSession = (
+  project: InternalProjectSessionProject,
+  name = `${project.name} API Key`,
+): AuthSession["Service"] => ({
+  cookie: null,
+  method: "secret-key",
+  name,
+  organizations: [],
+  person: null,
+  projects: [
+    {
+      id: project.id,
+      logo: null,
+      name: project.name,
+      organizationId: project.organizationId,
+      permissions: ["project:all"],
+      slug: project.slug,
+    },
+  ],
+  user: null,
+});
+
+/**
+ * Constructs a trusted single-project user session while preserving the
+ * authenticated user's identity across an internal runtime boundary.
+ */
+export const makeInternalProjectUserAuthSession = (
+  project: InternalProjectSessionProject,
+  userId: string,
+  name = "Internal user session",
+): AuthSession["Service"] => {
+  const timestamp = new Date(0);
+  return {
+    cookie: null,
+    method: "user",
+    name,
+    organizations: [],
+    person: null,
+    projects: [
+      {
+        id: project.id,
+        logo: null,
+        name: project.name,
+        organizationId: project.organizationId,
+        permissions: ["project:all"],
+        slug: project.slug,
+      },
+    ],
+    user: {
+      createdAt: timestamp,
+      email: "",
+      emailVerified: false,
+      id: userId,
+      image: null,
+      name,
+      role: null,
+      updatedAt: timestamp,
+      workosUserId: null,
+    },
+  };
+};
diff --git a/packages/core/src/services/agentSession/AgentAttachmentService.test.ts b/packages/core/src/services/agentSession/AgentAttachmentService.test.ts
new file mode 100644
index 000000000..df7ee7cc2
--- /dev/null
+++ b/packages/core/src/services/agentSession/AgentAttachmentService.test.ts
@@ -0,0 +1,111 @@
+import { Effect, Layer } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { describe, expect, it } from "../../testing/effect-vitest.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+import { AgentSessionIndexService, AgentSessionNotFoundError } from "./AgentSessionIndexService.ts";
+import { AgentAttachmentForbiddenError, AgentAttachmentService } from "./AgentAttachmentService.ts";
+
+const png =
+  "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+A8AAQUBAScY42YAAAAASUVORK5CYII=";
+
+const auth = {
+  cookie: null,
+  method: "user" as const,
+  name: "User",
+  person: null,
+  organizations: [
+    {
+      id: "org_1",
+      logo: null,
+      name: "Org",
+      permissions: ["organization:all"],
+      slug: "org",
+      workosOrganizationId: "workos_org_1",
+    },
+  ],
+  projects: [],
+  user: {
+    id: "user_1",
+    createdAt: new Date(0),
+    updatedAt: new Date(0),
+    email: "user@example.com",
+    emailVerified: true,
+    image: null,
+    name: "User",
+    role: null,
+    workosUserId: "workos_user_1",
+  },
+};
+
+const makeLayer = (indexedOrganization?: string) => {
+  const writes: Array<{ key: string; body: Uint8Array; contentType?: string }> = [];
+  const index = Layer.succeed(AgentSessionIndexService, {
+    get: ({ sessionId }: { sessionId: string }) =>
+      indexedOrganization === undefined
+        ? Effect.fail(new AgentSessionNotFoundError({ sessionId }))
+        : Effect.succeed({
+            id: sessionId,
+            organizationId: indexedOrganization,
+            projectId: "project_1",
+            surface: "designer",
+            paywallId: null,
+            userId: "user_1",
+            title: "Session",
+            createdAt: new Date(0),
+            updatedAt: new Date(0),
+          }),
+  } as unknown as AgentSessionIndexService["Service"]);
+  const files = Layer.succeed(PublicFileStore, {
+    publicBaseUrl: "https://files.example.com",
+    publicUrl: (key: string) => `https://files.example.com/files/${key}`,
+    putObject: (input: { key: string; body: Uint8Array; contentType?: string }) =>
+      Effect.sync(() => void writes.push(input)),
+    getObject: () => Effect.succeed(null),
+    deleteObject: () => Effect.void,
+  });
+  return {
+    writes,
+    layer: AgentAttachmentService.layer.pipe(Layer.provide(index), Layer.provide(files)),
+  };
+};
+
+describe("AgentAttachmentService", () => {
+  it.effect("stores a validated pre-session image under the durable session", () => {
+    const fixture = makeLayer();
+    return Effect.gen(function* () {
+      const service = yield* AgentAttachmentService;
+      const attachment = yield* service.upload({
+        sessionId: "agent_1",
+        organizationId: "org_1",
+        name: "reference.png",
+        contentType: "image/png",
+        dataBase64: png,
+      });
+      expect(attachment.url).toContain("agent-sessions/agent_1/attachments/agent_att_");
+      expect(fixture.writes).toHaveLength(1);
+      expect(fixture.writes[0]?.body.length).toBeGreaterThan(0);
+    }).pipe(Effect.provideService(AuthSession, auth), Effect.provide(fixture.layer));
+  });
+
+  it.effect("rejects a session indexed to another organization", () => {
+    const fixture = makeLayer("org_other");
+    return Effect.gen(function* () {
+      const service = yield* AgentAttachmentService;
+      const result = yield* Effect.result(
+        service.upload({
+          sessionId: "agent_1",
+          organizationId: "org_1",
+          name: "reference.png",
+          contentType: "image/png",
+          dataBase64: png,
+        }),
+      );
+      expect(result._tag).toBe("Failure");
+      if (result._tag === "Failure") {
+        expect(result.failure).toBeInstanceOf(AgentAttachmentForbiddenError);
+      }
+      expect(fixture.writes).toHaveLength(0);
+    }).pipe(Effect.provideService(AuthSession, auth), Effect.provide(fixture.layer));
+  });
+});
diff --git a/packages/core/src/services/agentSession/AgentAttachmentService.ts b/packages/core/src/services/agentSession/AgentAttachmentService.ts
new file mode 100644
index 000000000..fa9229eb6
--- /dev/null
+++ b/packages/core/src/services/agentSession/AgentAttachmentService.ts
@@ -0,0 +1,117 @@
+import { Context, Effect, Layer, Result, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import {
+  PaywallAssetValidationError,
+  validateAndDecodePaywallAsset,
+} from "../../domain/paywallAssetImage.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { isSessionOrganizationMember } from "../../utils/permissions.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+import { AgentSessionIndexService } from "./AgentSessionIndexService.ts";
+
+/** Stable failure raised when durable-session attachment storage fails. */
+export class AgentAttachmentServiceError extends Schema.TaggedErrorClass<AgentAttachmentServiceError>(
+  "AgentAttachmentServiceError",
+)("AgentAttachmentServiceError", { message: Schema.String }) {}
+
+/** Authorization failure for a durable-session attachment operation. */
+export class AgentAttachmentForbiddenError extends Schema.TaggedErrorClass<AgentAttachmentForbiddenError>(
+  "AgentAttachmentForbiddenError",
+)("AgentAttachmentForbiddenError", { message: Schema.String }) {}
+
+/** Validation failure for a durable-session attachment payload. */
+export class AgentAttachmentValidationError extends Schema.TaggedErrorClass<AgentAttachmentValidationError>(
+  "AgentAttachmentValidationError",
+)("AgentAttachmentValidationError", { message: Schema.String }) {}
+
+export interface AgentAttachment {
+  readonly url: string;
+  readonly name: string;
+  readonly contentType: string;
+  readonly sizeBytes: number;
+}
+
+export interface AgentAttachmentUploadInput {
+  readonly sessionId: string;
+  readonly organizationId: string;
+  readonly name: string;
+  readonly contentType: string;
+  readonly dataBase64: string;
+}
+
+/** Validates and stores image attachments for durable agent prompts. */
+export class AgentAttachmentService extends Context.Service<AgentAttachmentService>()(
+  "AgentAttachmentService",
+  {
+    make: Effect.gen(function* () {
+      const sessions = yield* AgentSessionIndexService;
+      const publicFiles = yield* PublicFileStore;
+
+      const assertScope = (input: AgentAttachmentUploadInput) =>
+        Effect.gen(function* () {
+          const indexed = yield* Effect.result(sessions.get({ sessionId: input.sessionId }));
+          if (Result.isSuccess(indexed)) {
+            if (indexed.success.organizationId !== input.organizationId) {
+              return yield* Effect.fail(
+                new AgentAttachmentForbiddenError({
+                  message: `Session ${input.sessionId} belongs to another organization.`,
+                }),
+              );
+            }
+            return;
+          }
+          if (indexed.failure._tag === "AgentSessionForbiddenError") {
+            return yield* Effect.fail(
+              new AgentAttachmentForbiddenError({ message: indexed.failure.message }),
+            );
+          }
+          if (indexed.failure._tag === "AgentSessionIndexServiceError") {
+            return yield* Effect.fail(
+              new AgentAttachmentServiceError({ message: indexed.failure.message }),
+            );
+          }
+          const auth = yield* AuthSession;
+          if (!isSessionOrganizationMember(auth, input.organizationId)) {
+            return yield* Effect.fail(
+              new AgentAttachmentForbiddenError({
+                message: `Not a member of organization ${input.organizationId}.`,
+              }),
+            );
+          }
+        });
+
+      const upload = Effect.fn("uploadAgentAttachment")(
+        function* (input: AgentAttachmentUploadInput) {
+          yield* assertScope(input);
+          const { bytes, ext } = yield* validateAndDecodePaywallAsset({
+            imageBase64: input.dataBase64,
+            contentType: input.contentType,
+          });
+          const attachmentId = generateId("agentAttachment");
+          const key = `agent-sessions/${input.sessionId}/attachments/${attachmentId}.${ext}`;
+          yield* publicFiles.putObject({ key, body: bytes, contentType: input.contentType });
+          return {
+            url: publicFiles.publicUrl(key),
+            name: input.name.slice(0, 255),
+            contentType: input.contentType,
+            sizeBytes: bytes.length,
+          } satisfies AgentAttachment;
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              PublicFileStoreError: (error) =>
+                Effect.fail(new AgentAttachmentServiceError({ message: error.cause })),
+              PaywallAssetValidationError: (error: PaywallAssetValidationError) =>
+                Effect.fail(new AgentAttachmentValidationError({ message: error.message })),
+            }),
+          ),
+      );
+
+      return { upload } as const;
+    }),
+  },
+) {
+  static readonly layer = Layer.effect(AgentAttachmentService)(AgentAttachmentService.make);
+}
diff --git a/packages/core/src/services/agentSession/AgentSessionIndexService.test.ts b/packages/core/src/services/agentSession/AgentSessionIndexService.test.ts
new file mode 100644
index 000000000..d48e3614c
--- /dev/null
+++ b/packages/core/src/services/agentSession/AgentSessionIndexService.test.ts
@@ -0,0 +1,208 @@
+import { Db } from "@voidhash/db";
+import { Effect, Layer, Result } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { describe, expect, it } from "../../testing/effect-vitest.ts";
+import {
+  AgentSessionForbiddenError,
+  AgentSessionIndexService,
+  AgentSessionNotFoundError,
+} from "./AgentSessionIndexService.ts";
+
+interface SessionRow {
+  id: string;
+  organizationId: string;
+  projectId: string;
+  surface: string;
+  paywallId: string | null;
+  userId: string;
+  title: string;
+  createdAt: Date;
+  updatedAt: Date;
+  deletedAt: Date | null;
+}
+
+const auth = {
+  cookie: null,
+  method: "user" as const,
+  name: "User",
+  person: null,
+  organizations: [],
+  projects: [
+    {
+      id: "project_1",
+      logo: null,
+      name: "Project",
+      organizationId: "org_1",
+      permissions: ["project:all"],
+      slug: "project",
+    },
+  ],
+  user: {
+    id: "user_1",
+    createdAt: new Date(0),
+    updatedAt: new Date(0),
+    email: "user@example.com",
+    emailVerified: true,
+    image: null,
+    name: "User",
+    role: null,
+    workosUserId: "workos_user_1",
+  },
+};
+
+const makeRow = (overrides: Partial<SessionRow> = {}): SessionRow => ({
+  id: "agent_1",
+  organizationId: "org_1",
+  projectId: "project_1",
+  surface: "designer",
+  paywallId: null,
+  userId: "user_1",
+  title: "Session",
+  createdAt: new Date(0),
+  updatedAt: new Date(0),
+  deletedAt: null,
+  ...overrides,
+});
+
+const collectColumnNames = (value: unknown, names = new Set<string>()): Set<string> => {
+  if (value === null || typeof value !== "object") return names;
+  if ("name" in value && "table" in value && typeof value.name === "string") {
+    names.add(value.name);
+    return names;
+  }
+  if ("queryChunks" in value && Array.isArray(value.queryChunks)) {
+    for (const chunk of value.queryChunks) collectColumnNames(chunk, names);
+  }
+  return names;
+};
+
+const makeFixture = (initial?: SessionRow) => {
+  let row = initial;
+  let listColumns = new Set<string>();
+  let insertCount = 0;
+
+  const db = {
+    select: () => ({
+      from: () => ({
+        where: (condition: unknown) => ({
+          limit: () => Effect.succeed(row === undefined ? [] : [row]),
+          orderBy: () => {
+            listColumns = collectColumnNames(condition);
+            return Effect.succeed(row === undefined ? [] : [row]);
+          },
+        }),
+      }),
+    }),
+    insert: () => ({
+      values: (value: SessionRow) => ({
+        onConflictDoNothing: () => ({
+          returning: () =>
+            Effect.sync(() => {
+              insertCount += 1;
+              if (row !== undefined) return [];
+              row = {
+                ...value,
+                createdAt: new Date(0),
+                updatedAt: new Date(0),
+                deletedAt: null,
+              };
+              return [row];
+            }),
+        }),
+      }),
+    }),
+    update: () => ({
+      set: (patch: Partial<SessionRow>) => ({
+        where: () => {
+          const apply = () => {
+            if (row === undefined) return undefined;
+            row = { ...row, ...patch };
+            return row;
+          };
+          return Object.assign(Effect.sync(apply), {
+            returning: () =>
+              Effect.sync(() => {
+                const updated = apply();
+                return updated === undefined ? [] : [updated];
+              }),
+          });
+        },
+      }),
+    }),
+  };
+
+  const layer = AgentSessionIndexService.layer.pipe(Layer.provide(Layer.succeed(Db, db as never)));
+  return {
+    get insertCount() {
+      return insertCount;
+    },
+    get listColumns() {
+      return listColumns;
+    },
+    get row() {
+      return row;
+    },
+    layer,
+  };
+};
+
+describe("AgentSessionIndexService", () => {
+  it.effect("tombstones deletion and prevents the durable session from being re-indexed", () => {
+    const fixture = makeFixture(makeRow());
+    return Effect.gen(function* () {
+      const sessions = yield* AgentSessionIndexService;
+      yield* sessions.delete({ sessionId: "agent_1" });
+      expect(fixture.row?.deletedAt).toBeInstanceOf(Date);
+
+      const missing = yield* Effect.result(sessions.get({ sessionId: "agent_1" }));
+      expect(Result.isFailure(missing) && missing.failure).toBeInstanceOf(
+        AgentSessionNotFoundError,
+      );
+
+      const reopened = yield* Effect.result(
+        sessions.touch({
+          id: "agent_1",
+          organizationId: "org_1",
+          projectId: "project_1",
+          userId: "user_1",
+        }),
+      );
+      expect(Result.isFailure(reopened) && reopened.failure).toBeInstanceOf(
+        AgentSessionForbiddenError,
+      );
+    }).pipe(Effect.provideService(AuthSession, auth), Effect.provide(fixture.layer));
+  });
+
+  it.effect("rejects attempts to assign a session to a different user", () => {
+    const fixture = makeFixture();
+    return Effect.gen(function* () {
+      const sessions = yield* AgentSessionIndexService;
+      const result = yield* Effect.result(
+        sessions.touch({
+          id: "agent_1",
+          organizationId: "org_1",
+          projectId: "project_1",
+          userId: "user_other",
+        }),
+      );
+      expect(Result.isFailure(result) && result.failure).toBeInstanceOf(AgentSessionForbiddenError);
+      expect(fixture.insertCount).toBe(0);
+    }).pipe(Effect.provideService(AuthSession, auth), Effect.provide(fixture.layer));
+  });
+
+  it.effect("scopes history to the current user and excludes tombstones", () => {
+    const fixture = makeFixture(makeRow());
+    return Effect.gen(function* () {
+      const sessions = yield* AgentSessionIndexService;
+      const rows = yield* sessions.list({
+        organizationId: "org_1",
+        projectId: "project_1",
+        surface: "designer",
+      });
+      expect(rows).toHaveLength(1);
+      expect(fixture.listColumns).toContain("user_id");
+      expect(fixture.listColumns).toContain("deleted_at");
+    }).pipe(Effect.provideService(AuthSession, auth), Effect.provide(fixture.layer));
+  });
+});
diff --git a/packages/core/src/services/agentSession/AgentSessionIndexService.ts b/packages/core/src/services/agentSession/AgentSessionIndexService.ts
new file mode 100644
index 000000000..808774dc2
--- /dev/null
+++ b/packages/core/src/services/agentSession/AgentSessionIndexService.ts
@@ -0,0 +1,264 @@
+import { and, desc, Db, eq, isNull, voidhashAgentSession } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { AuthSession } from "../../domain/auth/Auth.ts";
+import { isSessionProjectMember } from "../../utils/permissions.ts";
+
+/** Stable storage failure raised by the agent-session index. */
+export class AgentSessionIndexServiceError extends Schema.TaggedErrorClass<AgentSessionIndexServiceError>(
+  "AgentSessionIndexServiceError",
+)("AgentSessionIndexServiceError", { message: Schema.String }) {}
+
+/** Raised when a caller cannot access the persisted session scope. */
+export class AgentSessionForbiddenError extends Schema.TaggedErrorClass<AgentSessionForbiddenError>(
+  "AgentSessionForbiddenError",
+)("AgentSessionForbiddenError", { message: Schema.String }) {}
+
+/** Raised when an indexed session does not exist. */
+export class AgentSessionNotFoundError extends Schema.TaggedErrorClass<AgentSessionNotFoundError>(
+  "AgentSessionNotFoundError",
+)("AgentSessionNotFoundError", { sessionId: Schema.String }) {}
+
+/** Metadata returned by session history operations. */
+export interface AgentSessionSummary {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly surface: string;
+  readonly paywallId: string | null;
+  readonly userId: string;
+  readonly title: string;
+  readonly createdAt: Date;
+  readonly updatedAt: Date;
+}
+
+/** Input used by the durable session core to create or refresh index metadata. */
+export interface AgentSessionTouchInput {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly userId: string;
+  readonly surface?: string;
+  readonly paywallId?: string | null;
+  readonly title?: string;
+}
+
+/** Public searchable metadata service for durable Pi sessions. */
+export interface AgentSessionIndexServiceShape {
+  readonly touch: (
+    input: AgentSessionTouchInput,
+  ) => Effect.Effect<
+    AgentSessionSummary,
+    AgentSessionIndexServiceError | AgentSessionForbiddenError,
+    AuthSession
+  >;
+  readonly list: (input: {
+    readonly organizationId: string;
+    readonly projectId: string;
+    readonly surface: string;
+    readonly paywallId?: string | null;
+  }) => Effect.Effect<
+    ReadonlyArray<AgentSessionSummary>,
+    AgentSessionIndexServiceError | AgentSessionForbiddenError,
+    AuthSession
+  >;
+  readonly get: (input: {
+    readonly sessionId: string;
+  }) => Effect.Effect<
+    AgentSessionSummary,
+    AgentSessionIndexServiceError | AgentSessionForbiddenError | AgentSessionNotFoundError,
+    AuthSession
+  >;
+  readonly delete: (input: {
+    readonly sessionId: string;
+  }) => Effect.Effect<
+    void,
+    AgentSessionIndexServiceError | AgentSessionForbiddenError | AgentSessionNotFoundError,
+    AuthSession
+  >;
+}
+
+const toSummary = (row: typeof voidhashAgentSession.$inferSelect): AgentSessionSummary => ({
+  id: row.id,
+  organizationId: row.organizationId,
+  projectId: row.projectId,
+  surface: row.surface,
+  paywallId: row.paywallId,
+  userId: row.userId,
+  title: row.title,
+  createdAt: row.createdAt,
+  updatedAt: row.updatedAt,
+});
+
+/** Searchable metadata for durable agent sessions. */
+export class AgentSessionIndexService extends Context.Service<AgentSessionIndexService>()(
+  "AgentSessionIndexService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const assertProjectMember = (projectId: string, organizationId: string) =>
+        Effect.gen(function* () {
+          const session = yield* AuthSession;
+          if (!isSessionProjectMember(session, projectId, organizationId)) {
+            return yield* Effect.fail(
+              new AgentSessionForbiddenError({ message: `No access to project ${projectId}.` }),
+            );
+          }
+        });
+      const currentUserId = Effect.gen(function* () {
+        const session = yield* AuthSession;
+        if (session.method !== "user" || session.user === null) {
+          return yield* Effect.fail(
+            new AgentSessionForbiddenError({ message: "Agent session history requires a user." }),
+          );
+        }
+        return session.user.id;
+      });
+      const find = (sessionId: string) =>
+        Effect.gen(function* () {
+          const rows = yield* db
+            .select()
+            .from(voidhashAgentSession)
+            .where(eq(voidhashAgentSession.id, sessionId))
+            .limit(1);
+          return rows[0];
+        });
+      const touch: AgentSessionIndexServiceShape["touch"] = (input) =>
+        Effect.gen(function* () {
+          yield* assertProjectMember(input.projectId, input.organizationId);
+          const userId = yield* currentUserId;
+          if (input.userId !== userId) {
+            return yield* Effect.fail(
+              new AgentSessionForbiddenError({
+                message: `Session ${input.id} cannot be assigned to another user.`,
+              }),
+            );
+          }
+          const existing = yield* find(input.id);
+          if (existing === undefined) {
+            const rows = yield* db
+              .insert(voidhashAgentSession)
+              .values({
+                id: input.id,
+                organizationId: input.organizationId,
+                projectId: input.projectId,
+                surface: input.surface ?? "designer",
+                paywallId: input.paywallId ?? null,
+                userId: input.userId,
+                title: (input.title ?? "New chat").slice(0, 255),
+              })
+              .onConflictDoNothing({ target: voidhashAgentSession.id })
+              .returning();
+            if (rows[0] !== undefined) return toSummary(rows[0]);
+          }
+          const authoritative = existing ?? (yield* find(input.id));
+          if (
+            authoritative === undefined ||
+            authoritative.organizationId !== input.organizationId ||
+            authoritative.projectId !== input.projectId ||
+            authoritative.userId !== input.userId ||
+            authoritative.deletedAt !== null
+          ) {
+            return yield* Effect.fail(
+              new AgentSessionForbiddenError({
+                message: `Session ${input.id} belongs to a different owner or project.`,
+              }),
+            );
+          }
+          const rows = yield* db
+            .update(voidhashAgentSession)
+            .set({
+              ...(input.title === undefined ? {} : { title: input.title.slice(0, 255) }),
+              ...(input.surface === undefined ? {} : { surface: input.surface }),
+              ...(input.paywallId === undefined ? {} : { paywallId: input.paywallId }),
+              updatedAt: new Date(),
+            })
+            .where(eq(voidhashAgentSession.id, input.id))
+            .returning();
+          if (rows[0] === undefined) {
+            return yield* Effect.fail(
+              new AgentSessionIndexServiceError({
+                message: `Session ${input.id} disappeared while it was updated.`,
+              }),
+            );
+          }
+          return toSummary(rows[0]);
+        }).pipe(
+          Effect.catchTag("EffectDrizzleQueryError", (error) =>
+            Effect.fail(new AgentSessionIndexServiceError({ message: String(error.cause) })),
+          ),
+        );
+
+      const list: AgentSessionIndexServiceShape["list"] = (input) =>
+        Effect.gen(function* () {
+          yield* assertProjectMember(input.projectId, input.organizationId);
+          const userId = yield* currentUserId;
+          const rows = yield* db
+            .select()
+            .from(voidhashAgentSession)
+            .where(
+              and(
+                eq(voidhashAgentSession.organizationId, input.organizationId),
+                eq(voidhashAgentSession.projectId, input.projectId),
+                eq(voidhashAgentSession.surface, input.surface),
+                eq(voidhashAgentSession.userId, userId),
+                isNull(voidhashAgentSession.deletedAt),
+                input.paywallId === undefined
+                  ? undefined
+                  : input.paywallId === null
+                    ? isNull(voidhashAgentSession.paywallId)
+                    : eq(voidhashAgentSession.paywallId, input.paywallId),
+              ),
+            )
+            .orderBy(desc(voidhashAgentSession.updatedAt), desc(voidhashAgentSession.id));
+          return rows.map(toSummary);
+        }).pipe(
+          Effect.catchTag("EffectDrizzleQueryError", (error) =>
+            Effect.fail(new AgentSessionIndexServiceError({ message: String(error.cause) })),
+          ),
+        );
+
+      const get: AgentSessionIndexServiceShape["get"] = (input) =>
+        Effect.gen(function* () {
+          const row = yield* find(input.sessionId);
+          if (row === undefined || row.deletedAt !== null) {
+            return yield* Effect.fail(
+              new AgentSessionNotFoundError({ sessionId: input.sessionId }),
+            );
+          }
+          yield* assertProjectMember(row.projectId, row.organizationId);
+          const userId = yield* currentUserId;
+          if (row.userId !== userId) {
+            return yield* Effect.fail(
+              new AgentSessionForbiddenError({
+                message: `Session ${input.sessionId} belongs to another user.`,
+              }),
+            );
+          }
+          return toSummary(row);
+        }).pipe(
+          Effect.catchTag("EffectDrizzleQueryError", (error) =>
+            Effect.fail(new AgentSessionIndexServiceError({ message: String(error.cause) })),
+          ),
+        );
+
+      const remove: AgentSessionIndexServiceShape["delete"] = (input) =>
+        get(input).pipe(
+          Effect.andThen(
+            db
+              .update(voidhashAgentSession)
+              .set({ deletedAt: new Date(), updatedAt: new Date() })
+              .where(eq(voidhashAgentSession.id, input.sessionId)),
+          ),
+          Effect.catchTag("EffectDrizzleQueryError", (error) =>
+            Effect.fail(new AgentSessionIndexServiceError({ message: String(error.cause) })),
+          ),
+          Effect.asVoid,
+        );
+
+      return { touch, list, get, delete: remove };
+    }),
+  },
+) {
+  static readonly layer = Layer.effect(AgentSessionIndexService)(AgentSessionIndexService.make);
+}
diff --git a/packages/core/src/services/aiChat/AiChatService.test.ts b/packages/core/src/services/aiChat/AiChatService.test.ts
deleted file mode 100644
index 97b2cf5d1..000000000
--- a/packages/core/src/services/aiChat/AiChatService.test.ts
+++ /dev/null
@@ -1,320 +0,0 @@
-import { Db } from "@voidhash/db";
-import { Effect, Exit, Layer } from "effect";
-import { describe, expect, it } from "vite-plus/test";
-
-import { AuthSession, type AnyAuthSession } from "../../domain/auth/Auth.ts";
-import { PublicFileStore } from "../storage/PublicFileStore.ts";
-import { isSessionOrganizationMember, isSessionProjectMember } from "../../utils/permissions.ts";
-import { AiChatService } from "./AiChatService.ts";
-
-const makeSession = (
-  orgIds: readonly string[],
-  projects: ReadonlyArray<{ id: string; organizationId: string }> = [],
-): AnyAuthSession => ({
-  cookie: null,
-  method: "secret-key",
-  name: "ci-key",
-  organizations: orgIds.map((id) => ({
-    id,
-    logo: null,
-    name: id,
-    permissions: ["project:all"],
-    slug: id,
-    workosOrganizationId: null,
-  })),
-  projects: projects.map((project) => ({
-    id: project.id,
-    logo: null,
-    name: project.id,
-    organizationId: project.organizationId,
-    permissions: ["project:all"],
-    slug: project.id,
-  })),
-  person: null,
-  user: null,
-});
-
-describe("isSessionOrganizationMember", () => {
-  it("is true when the org is present in the session", () => {
-    expect(isSessionOrganizationMember(makeSession(["org_1", "org_2"]), "org_2")).toBe(true);
-  });
-
-  it("is false when the org is absent (cross-org access denied)", () => {
-    expect(isSessionOrganizationMember(makeSession(["org_1"]), "org_2")).toBe(false);
-  });
-});
-
-describe("isSessionProjectMember", () => {
-  it("is true when the project belongs to the caller under the claimed org", () => {
-    const session = makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]);
-    expect(isSessionProjectMember(session, "proj_1", "org_1")).toBe(true);
-  });
-
-  it("is false when the project exists but under a different org (anti-spoof)", () => {
-    const session = makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]);
-    expect(isSessionProjectMember(session, "proj_1", "org_2")).toBe(false);
-  });
-
-  it("is false when the project is not in the session", () => {
-    const session = makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]);
-    expect(isSessionProjectMember(session, "proj_2", "org_1")).toBe(false);
-  });
-});
-
-// ── AI checkpoint capture + last-turn revert lookup ───────────────────────────
-
-interface ChatRow {
-  id: string;
-  organizationId: string;
-  projectId: string;
-}
-interface CheckpointRow {
-  chatId: string;
-  turnId: string;
-  paywallId: string;
-  tree: unknown;
-  createdAt: number;
-}
-
-/**
- * A tiny in-memory `Db` fake covering just the calls the checkpoint methods make:
- * - `insert(checkpoint).values(...).onConflictDoNothing(...)` — first-write-wins
- *   per (chatId, turnId, paywallId), mirroring the real unique index;
- * - the chat-row `findRow` select (for the project-membership check);
- * - the checkpoint `select().from().where().orderBy().limit(1)` (newest turn) and
- *   the follow-up select of that turn's pre-images.
- *
- * The fake keys tables by a marker set on the drizzle table object; the service
- * passes the real table objects, so we distinguish them by a stable property.
- */
-const makeCheckpointDb = (chats: ChatRow[]) => {
-  const checkpoints: CheckpointRow[] = [];
-  let clock = 0;
-
-  // `onConflictDoNothing()` performs the first-write-wins insert and returns a
-  // builder whose `.returning(...)` resolves to the inserted row on a real insert
-  // and an EMPTY array on the conflict no-op — mirroring drizzle, and the signal
-  // `captureCheckpointReporting` reads for `captured`. Awaiting the builder
-  // directly (no `.returning()`) is also supported for the void `captureCheckpoint`.
-  const insert = () => ({
-    values: (value: CheckpointRow & { id: string; createdAt?: number }) => ({
-      onConflictDoNothing: () => {
-        const run = () => {
-          const exists = checkpoints.some(
-            (row) =>
-              row.chatId === value.chatId &&
-              row.turnId === value.turnId &&
-              row.paywallId === value.paywallId,
-          );
-          if (!exists) {
-            checkpoints.push({ ...value, createdAt: (clock += 1) });
-          }
-          return exists ? [] : [{ id: value.id }];
-        };
-        const effect = Effect.sync(run);
-        return Object.assign(effect, {
-          returning: (_projection?: unknown) => Effect.sync(run),
-        });
-      },
-    }),
-  });
-
-  // Both `findRow` (chat) and the checkpoint reads go through `select`. The chat
-  // read passes no projection (`select()`), the checkpoint reads pass one — we
-  // branch on that. A `where` that is then `.orderBy().limit()` is the newest-turn
-  // query; a `where` awaited directly is the turn's pre-images; a `where().limit()`
-  // is `findRow`. The `where(...)` result is therefore both an Effect (awaited
-  // directly for the pre-images) and a builder (for the chained terminals).
-  const newestTurnId = () =>
-    checkpoints.length > 0
-      ? [...checkpoints].sort((a, b) => b.createdAt - a.createdAt)[0]!.turnId
-      : undefined;
-
-  const db = {
-    insert,
-    select: (projection?: unknown) => {
-      const isCheckpoint = projection !== undefined;
-      return {
-        from: () => ({
-          where: (..._args: unknown[]) => {
-            const preImages = checkpoints
-              .filter((row) => row.turnId === newestTurnId())
-              .map((row) => ({ paywallId: row.paywallId, tree: row.tree }));
-            const base = {
-              orderBy: () => ({
-                limit: (_n: number) =>
-                  Effect.sync(() => {
-                    const turnId = newestTurnId();
-                    return turnId !== undefined ? [{ turnId }] : [];
-                  }),
-              }),
-              limit: (_n: number) => Effect.sync(() => (chats.length > 0 ? [chats[0]] : [])),
-            };
-            return isCheckpoint
-              ? Object.assign(
-                  Effect.sync(() => preImages),
-                  base,
-                )
-              : base;
-          },
-        }),
-      };
-    },
-    __checkpoints: checkpoints,
-  };
-
-  return { layer: Layer.succeed(Db, db as never), checkpoints };
-};
-
-const checkpointLayers = (chats: ChatRow[], session: AnyAuthSession) => {
-  const { layer: dbLayer, checkpoints } = makeCheckpointDb(chats);
-  const layer = AiChatService.layer.pipe(
-    Layer.provide(dbLayer),
-    Layer.provide(Layer.succeed(PublicFileStore, {} as never)),
-    Layer.provideMerge(Layer.succeed(AuthSession, session as never)),
-  );
-  return { layer, checkpoints };
-};
-
-describe("AiChatService checkpoints", () => {
-  it("captureCheckpoint records a pre-image once per (chat, turn, document)", async () => {
-    const { layer, checkpoints } = checkpointLayers([], makeSession(["org_1"]));
-    const exit = await Effect.runPromiseExit(
-      Effect.gen(function* () {
-        const svc = yield* AiChatService;
-        yield* svc.captureCheckpoint({
-          chatId: "c1",
-          turnId: "t1",
-          paywallId: "pw_1",
-          tree: { a: 1 },
-        });
-        // Same (chat, turn, doc) again → first-write-wins, ignored.
-        yield* svc.captureCheckpoint({
-          chatId: "c1",
-          turnId: "t1",
-          paywallId: "pw_1",
-          tree: { a: 2 },
-        });
-        // Different doc in the same turn → new row.
-        yield* svc.captureCheckpoint({
-          chatId: "c1",
-          turnId: "t1",
-          paywallId: "pw_2",
-          tree: { b: 1 },
-        });
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(Exit.isSuccess(exit)).toBe(true);
-    expect(checkpoints.map((r) => `${r.turnId}:${r.paywallId}`)).toEqual(["t1:pw_1", "t1:pw_2"]);
-    // The preserved pre-image is the FIRST one (tree { a: 1 }).
-    expect(checkpoints.find((r) => r.paywallId === "pw_1")?.tree).toEqual({ a: 1 });
-  });
-
-  it("captureCheckpointReporting reports captured true then false (first-write-wins)", async () => {
-    const { layer, checkpoints } = checkpointLayers([], makeSession(["org_1"]));
-    const exit = await Effect.runPromiseExit(
-      Effect.gen(function* () {
-        const svc = yield* AiChatService;
-        // First capture for the turn takes the checkpoint.
-        const first = yield* svc.captureCheckpointReporting({
-          chatId: "c1",
-          turnId: "t1",
-          paywallId: "pw_1",
-          tree: { a: 1 },
-        });
-        // Re-capturing the same (chat, turn, doc) is a no-op — captured: false,
-        // and the original pre-image is preserved.
-        const second = yield* svc.captureCheckpointReporting({
-          chatId: "c1",
-          turnId: "t1",
-          paywallId: "pw_1",
-          tree: { a: 2 },
-        });
-        return { first, second };
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(Exit.isSuccess(exit)).toBe(true);
-    if (Exit.isSuccess(exit)) {
-      expect(exit.value.first.captured).toBe(true);
-      expect(exit.value.second.captured).toBe(false);
-    }
-    // Only one row, holding the original pre-image.
-    expect(checkpoints).toHaveLength(1);
-    expect(checkpoints[0]!.tree).toEqual({ a: 1 });
-  });
-
-  it("getLastTurnCheckpoints returns the newest turn's pre-images (project membership required)", async () => {
-    const { layer } = checkpointLayers(
-      [{ id: "c1", organizationId: "org_1", projectId: "proj_1" }],
-      makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]),
-    );
-    const exit = await Effect.runPromiseExit(
-      Effect.gen(function* () {
-        const svc = yield* AiChatService;
-        yield* svc.captureCheckpoint({
-          chatId: "c1",
-          turnId: "t1",
-          paywallId: "pw_1",
-          tree: { v: 1 },
-        });
-        yield* svc.captureCheckpoint({
-          chatId: "c1",
-          turnId: "t2",
-          paywallId: "pw_1",
-          tree: { v: 2 },
-        });
-        return yield* svc.getLastTurnCheckpoints({ chatId: "c1" });
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(Exit.isSuccess(exit)).toBe(true);
-    if (Exit.isSuccess(exit)) {
-      // Only the LAST turn (t2) is returned.
-      expect(exit.value).toEqual([{ paywallId: "pw_1", tree: { v: 2 } }]);
-    }
-  });
-
-  it("getLastTurnCheckpoints forbids a non-member of the chat's org", async () => {
-    const { layer } = checkpointLayers(
-      [{ id: "c1", organizationId: "org_other", projectId: "proj_other" }],
-      makeSession(["org_1"], [{ id: "proj_1", organizationId: "org_1" }]),
-    );
-    const exit = await Effect.runPromiseExit(
-      Effect.gen(function* () {
-        const svc = yield* AiChatService;
-        return yield* svc.getLastTurnCheckpoints({ chatId: "c1" });
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(Exit.isFailure(exit)).toBe(true);
-    if (Exit.isFailure(exit)) {
-      expect(exit.cause.toString()).toContain("AiChatForbiddenError");
-    }
-  });
-
-  it("getLastTurnCheckpoints forbids an org member outside the chat's project (no revert)", async () => {
-    // The caller belongs to the chat's ORG but not its PROJECT. Reverting mutates
-    // that project's paywalls, so project membership — not just org membership —
-    // must gate the lookup, else a cross-project org member could revert paywalls.
-    const { layer, checkpoints } = checkpointLayers(
-      [{ id: "c1", organizationId: "org_1", projectId: "proj_1" }],
-      makeSession(["org_1"], [{ id: "proj_2", organizationId: "org_1" }]),
-    );
-    const exit = await Effect.runPromiseExit(
-      Effect.gen(function* () {
-        const svc = yield* AiChatService;
-        yield* svc.captureCheckpoint({
-          chatId: "c1",
-          turnId: "t1",
-          paywallId: "pw_1",
-          tree: { v: 1 },
-        });
-        return yield* svc.getLastTurnCheckpoints({ chatId: "c1" });
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(Exit.isFailure(exit)).toBe(true);
-    if (Exit.isFailure(exit)) {
-      expect(exit.cause.toString()).toContain("AiChatForbiddenError");
-    }
-    // The forbidden lookup returned no pre-images, so no document is reverted.
-    expect(checkpoints.length).toBe(1);
-  });
-});
diff --git a/packages/core/src/services/aiChat/AiChatService.ts b/packages/core/src/services/aiChat/AiChatService.ts
deleted file mode 100644
index 83c28d4ee..000000000
--- a/packages/core/src/services/aiChat/AiChatService.ts
+++ /dev/null
@@ -1,540 +0,0 @@
-import { and, desc, Db, eq, voidhashAiChat, voidhashAiCheckpoint } from "@voidhash/db";
-import { Context, Effect, Layer, Schema } from "effect";
-
-import { AuthSession } from "../../domain/auth/Auth.ts";
-import {
-  PaywallAssetValidationError,
-  validateAndDecodePaywallAsset,
-} from "../../domain/paywallAssetImage.ts";
-import { generateId } from "../../utils/generate-id.ts";
-import { isSessionOrganizationMember, isSessionProjectMember } from "../../utils/permissions.ts";
-import { PublicFileStore } from "../storage/PublicFileStore.ts";
-
-/** Catch-all error raised by {@link AiChatService} public methods. */
-export class AiChatServiceError extends Schema.TaggedErrorClass<AiChatServiceError>(
-  "AiChatServiceError",
-)("AiChatServiceError", { message: Schema.String }) {}
-
-/** Raised when the caller is not a member of the target chat's organization/project. */
-export class AiChatForbiddenError extends Schema.TaggedErrorClass<AiChatForbiddenError>(
-  "AiChatForbiddenError",
-)("AiChatForbiddenError", { message: Schema.String }) {}
-
-/** Raised when the referenced chat row does not exist. */
-export class AiChatNotFoundError extends Schema.TaggedErrorClass<AiChatNotFoundError>(
-  "AiChatNotFoundError",
-)("AiChatNotFoundError", { chatId: Schema.String }) {}
-
-/** Raised when an uploaded chat attachment fails image validation. */
-export class AiChatAttachmentValidationError extends Schema.TaggedErrorClass<AiChatAttachmentValidationError>(
-  "AiChatAttachmentValidationError",
-)("AiChatAttachmentValidationError", { message: Schema.String }) {}
-
-/** Studio surface a chat belongs to. Kept as a plain string at the DB boundary. */
-export type AiChatType = "persistent" | "single_use";
-
-/** Metadata for one chat as returned by {@link AiChatServiceShape.list} (no messages). */
-export interface AiChatSummary {
-  readonly id: string;
-  readonly title: string;
-  readonly chatType: string;
-  readonly createdAt: Date;
-  readonly updatedAt: Date;
-}
-
-/** One full chat row (including its serialized messages) as returned by `get`. */
-export interface AiChatRow extends AiChatSummary {
-  readonly organizationId: string;
-  readonly projectId: string;
-  readonly surface: string;
-  readonly paywallId: string | null;
-  /** JSON-encoded AI SDK `UIMessage[]`. */
-  readonly messages: string;
-}
-
-/** One stored chat attachment as returned by {@link AiChatServiceShape.uploadAttachment}. */
-export interface AiChatAttachment {
-  readonly url: string;
-  readonly name: string;
-  readonly contentType: string;
-  readonly sizeBytes: number;
-}
-
-export interface AiChatSaveInput {
-  readonly id: string;
-  readonly organizationId: string;
-  readonly projectId: string;
-  readonly surface: string;
-  readonly chatType: AiChatType;
-  readonly paywallId?: string | null;
-  readonly title: string;
-  /** JSON-encoded AI SDK `UIMessage[]`. */
-  readonly messages: string;
-}
-
-export interface AiChatListInput {
-  readonly organizationId: string;
-  readonly projectId: string;
-  readonly surface: string;
-  /** When set, limits the list to persistent chats scoped to this paywall. */
-  readonly paywallId?: string | null;
-}
-
-export interface AiChatAttachmentUploadInput {
-  readonly chatId: string;
-  readonly organizationId: string;
-  readonly name: string;
-  readonly contentType: string;
-  readonly dataBase64: string;
-}
-
-/** A captured per-turn checkpoint pre-image: which document + its pre-write tree. */
-export interface AiCheckpointPreImage {
-  readonly paywallId: string;
-  /** The document's pre-write RAW encoded tree (mimic `TreeValue`). */
-  readonly tree: unknown;
-}
-
-/** Public {@link AiChatService} surface. */
-export interface AiChatServiceShape {
-  /** Upsert a chat by its (client-minted) id — inserts on first save, replaces messages/title after. */
-  readonly save: (
-    input: AiChatSaveInput,
-  ) => Effect.Effect<AiChatSummary, AiChatServiceError | AiChatForbiddenError>;
-  /** List a paywall/surface's **persistent** chats (metadata only), newest first. */
-  readonly list: (
-    input: AiChatListInput,
-  ) => Effect.Effect<ReadonlyArray<AiChatSummary>, AiChatServiceError | AiChatForbiddenError>;
-  /** Load one full chat (with messages), or fail not-found. */
-  readonly get: (input: {
-    readonly chatId: string;
-  }) => Effect.Effect<AiChatRow, AiChatServiceError | AiChatForbiddenError | AiChatNotFoundError>;
-  /** Delete one chat. */
-  readonly delete: (input: {
-    readonly chatId: string;
-  }) => Effect.Effect<void, AiChatServiceError | AiChatForbiddenError | AiChatNotFoundError>;
-  /** Upload an image attachment to R2 under this chat and return its public URL. */
-  readonly uploadAttachment: (
-    input: AiChatAttachmentUploadInput,
-  ) => Effect.Effect<
-    AiChatAttachment,
-    AiChatServiceError | AiChatForbiddenError | AiChatAttachmentValidationError
-  >;
-  /**
-   * Record a document's pre-turn image for one (chat, turn) — the tree as it was
-   * BEFORE the turn's first write, captured when that first write is ACCEPTED
-   * (never on a rejected-only or no-op turn). First-write-wins per (chatId,
-   * turnId, paywallId): only the first accepted write to a document in a turn
-   * captures; later accepted writes to the same document are idempotent no-ops.
-   * Server-authoritative: no membership check (the caller is the trusted AI turn
-   * loop; the chat row it scopes was already project-authorized).
-   */
-  readonly captureCheckpoint: (input: {
-    readonly chatId: string;
-    readonly turnId: string;
-    readonly paywallId: string;
-    readonly tree: unknown;
-  }) => Effect.Effect<void, AiChatServiceError>;
-  /**
-   * Like {@link captureCheckpoint}, but reports whether this call actually took
-   * the checkpoint (`captured: true`) or a checkpoint already existed for the
-   * `(chatId, turnId, paywallId)` triple (`captured: false`, a first-write-wins
-   * no-op). Backs the client-driven `CaptureAiCheckpoint` RPC in the
-   * document-first authoring model, where the browser captures the pre-turn image
-   * BEFORE the first mutating tool call of a turn and wants to know if it was the
-   * one that took it (so retries/reconnects are cheap, idempotent no-ops).
-   * Server-authoritative: same trust model as {@link captureCheckpoint}.
-   */
-  readonly captureCheckpointReporting: (input: {
-    readonly chatId: string;
-    readonly turnId: string;
-    readonly paywallId: string;
-    readonly tree: unknown;
-  }) => Effect.Effect<{ readonly captured: boolean }, AiChatServiceError>;
-  /**
-   * Load the pre-images of a chat's MOST RECENT turn (the turn of its newest
-   * checkpoint row), or an empty list when the chat has no checkpoints. Requires
-   * project membership on the owning chat (revert is a user-facing action).
-   */
-  readonly getLastTurnCheckpoints: (input: {
-    readonly chatId: string;
-  }) => Effect.Effect<
-    ReadonlyArray<AiCheckpointPreImage>,
-    AiChatServiceError | AiChatForbiddenError | AiChatNotFoundError
-  >;
-}
-
-/**
- * `AiChatService` persists Voidhash AI chats and their image attachments. The
- * chat id is minted client-side so an attachment can be stored under the chat
- * before its first turn is saved; `save` therefore upserts by id.
- *
- * Authorization binds every persisted chat operation to the stored project and
- * organization. A pre-save attachment has no row yet, so it is limited to an
- * organization the caller belongs to; once the chat exists its stored project
- * is authoritative. `Db` and `PublicFileStore` are provided by the application
- * root.
- */
-export class AiChatService extends Context.Service<AiChatService>()("AiChatService", {
-  make: Effect.gen(function* () {
-    const db = yield* Db;
-    const publicFileStore = yield* PublicFileStore;
-
-    const assertOrgMember = (organizationId: string) =>
-      Effect.gen(function* () {
-        const session = yield* AuthSession;
-        if (!isSessionOrganizationMember(session, organizationId)) {
-          return yield* Effect.fail(
-            new AiChatForbiddenError({
-              message: `Not a member of organization ${organizationId}.`,
-            }),
-          );
-        }
-      });
-
-    const assertProjectMember = (projectId: string, organizationId: string) =>
-      Effect.gen(function* () {
-        const session = yield* AuthSession;
-        if (!isSessionProjectMember(session, projectId, organizationId)) {
-          return yield* Effect.fail(
-            new AiChatForbiddenError({
-              message: `No access to project ${projectId}.`,
-            }),
-          );
-        }
-      });
-
-    const currentUserId = Effect.gen(function* () {
-      const session = yield* AuthSession;
-      return session.user?.id ?? null;
-    });
-
-    const rowToSummary = (row: typeof voidhashAiChat.$inferSelect): AiChatSummary => ({
-      id: row.id,
-      title: row.title,
-      chatType: row.chatType,
-      createdAt: row.createdAt,
-      updatedAt: row.updatedAt,
-    });
-
-    const rowToChat = (row: typeof voidhashAiChat.$inferSelect): AiChatRow => ({
-      ...rowToSummary(row),
-      organizationId: row.organizationId,
-      projectId: row.projectId,
-      surface: row.surface,
-      paywallId: row.paywallId,
-      messages: row.messages,
-    });
-
-    /** Load a row by id when present. */
-    const findOptionalRow = (chatId: string) =>
-      Effect.gen(function* () {
-        const rows = yield* db
-          .select()
-          .from(voidhashAiChat)
-          .where(eq(voidhashAiChat.id, chatId))
-          .limit(1);
-        return rows[0];
-      });
-
-    /** Load a row by id or fail not-found. */
-    const findRow = (chatId: string) =>
-      Effect.gen(function* () {
-        const row = yield* findOptionalRow(chatId);
-        if (!row) {
-          return yield* Effect.fail(new AiChatNotFoundError({ chatId }));
-        }
-        return row;
-      });
-
-    const assertSameChatScope = (
-      row: typeof voidhashAiChat.$inferSelect,
-      input: Pick<AiChatSaveInput, "organizationId" | "projectId">,
-    ) =>
-      row.organizationId === input.organizationId && row.projectId === input.projectId
-        ? Effect.void
-        : Effect.fail(
-            new AiChatForbiddenError({
-              message: `Chat ${row.id} belongs to a different organization or project.`,
-            }),
-          );
-
-    const save = Effect.fn("saveAiChat")(
-      function* (input: AiChatSaveInput) {
-        yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
-        yield* assertProjectMember(input.projectId, input.organizationId);
-        const title = input.title.slice(0, 255);
-        const now = new Date();
-        let existing = yield* findOptionalRow(input.id);
-        if (existing === undefined) {
-          const userId = yield* currentUserId;
-          const inserted = yield* db
-            .insert(voidhashAiChat)
-            .values({
-              id: input.id,
-              organizationId: input.organizationId,
-              projectId: input.projectId,
-              surface: input.surface,
-              chatType: input.chatType,
-              paywallId: input.paywallId ?? null,
-              userId,
-              title,
-              messages: input.messages,
-            })
-            .onConflictDoNothing({ target: voidhashAiChat.id })
-            .returning();
-          if (inserted[0] !== undefined) {
-            return rowToSummary(inserted[0]);
-          }
-          // Another request inserted this client-minted id after our read. Its
-          // persisted scope is authoritative before any update is allowed.
-          existing = yield* findOptionalRow(input.id);
-          if (existing === undefined) {
-            return yield* Effect.fail(
-              new AiChatServiceError({
-                message: `Chat ${input.id} disappeared while resolving a concurrent save.`,
-              }),
-            );
-          }
-        }
-
-        yield* assertSameChatScope(existing, input);
-        yield* assertProjectMember(existing.projectId, existing.organizationId);
-        const updated = yield* db
-          .update(voidhashAiChat)
-          .set({ title, messages: input.messages, updatedAt: now })
-          .where(
-            and(
-              eq(voidhashAiChat.id, input.id),
-              eq(voidhashAiChat.organizationId, existing.organizationId),
-              eq(voidhashAiChat.projectId, existing.projectId),
-            ),
-          )
-          .returning();
-        if (updated[0] === undefined) {
-          return yield* Effect.fail(
-            new AiChatForbiddenError({ message: `Chat ${input.id} changed scope or was removed.` }),
-          );
-        }
-        return rowToSummary(updated[0]);
-      },
-      (effect) =>
-        effect.pipe(
-          Effect.catchTags({
-            EffectDrizzleQueryError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
-          }),
-        ),
-    );
-
-    const list = Effect.fn("listAiChats")(
-      function* (input: AiChatListInput) {
-        yield* assertProjectMember(input.projectId, input.organizationId);
-        const scope = [
-          eq(voidhashAiChat.projectId, input.projectId),
-          eq(voidhashAiChat.surface, input.surface),
-          eq(voidhashAiChat.chatType, "persistent"),
-          input.paywallId ? eq(voidhashAiChat.paywallId, input.paywallId) : undefined,
-        ];
-        const rows = yield* db
-          .select()
-          .from(voidhashAiChat)
-          .where(and(...scope))
-          .orderBy(desc(voidhashAiChat.updatedAt), desc(voidhashAiChat.id));
-        return rows.map(rowToSummary);
-      },
-      (effect) =>
-        effect.pipe(
-          Effect.catchTags({
-            EffectDrizzleQueryError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
-          }),
-        ),
-    );
-
-    const get = Effect.fn("getAiChat")(
-      function* (input: { readonly chatId: string }) {
-        const row = yield* findRow(input.chatId);
-        yield* assertProjectMember(row.projectId, row.organizationId);
-        return rowToChat(row);
-      },
-      (effect) =>
-        effect.pipe(
-          Effect.catchTags({
-            EffectDrizzleQueryError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
-          }),
-        ),
-    );
-
-    const remove = Effect.fn("deleteAiChat")(
-      function* (input: { readonly chatId: string }) {
-        const row = yield* findRow(input.chatId);
-        yield* assertProjectMember(row.projectId, row.organizationId);
-        yield* db.delete(voidhashAiChat).where(eq(voidhashAiChat.id, input.chatId));
-      },
-      (effect) =>
-        effect.pipe(
-          Effect.catchTags({
-            EffectDrizzleQueryError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
-          }),
-        ),
-    );
-
-    const uploadAttachment = Effect.fn("uploadAiChatAttachment")(
-      function* (input: AiChatAttachmentUploadInput) {
-        yield* Effect.annotateCurrentSpan("voidhash.organization.id", input.organizationId);
-        const existing = yield* findOptionalRow(input.chatId);
-        if (existing !== undefined) {
-          yield* assertProjectMember(existing.projectId, existing.organizationId);
-          if (existing.organizationId !== input.organizationId) {
-            return yield* Effect.fail(
-              new AiChatForbiddenError({
-                message: `Chat ${input.chatId} belongs to a different organization.`,
-              }),
-            );
-          }
-        } else {
-          yield* assertOrgMember(input.organizationId);
-        }
-
-        const { bytes, ext } = yield* validateAndDecodePaywallAsset({
-          imageBase64: input.dataBase64,
-          contentType: input.contentType,
-        });
-
-        // Chat attachments live under a dedicated prefix, separate from the org
-        // asset library: ai-chats/<chatId>/attachments/<attachmentId>.<ext>.
-        const attachmentId = generateId("aiChatAttachment");
-        const key = `ai-chats/${input.chatId}/attachments/${attachmentId}.${ext}`;
-        yield* publicFileStore.putObject({ key, body: bytes, contentType: input.contentType });
-
-        return {
-          url: publicFileStore.publicUrl(key),
-          name: input.name.slice(0, 255),
-          contentType: input.contentType,
-          sizeBytes: bytes.length,
-        };
-      },
-      (effect) =>
-        effect.pipe(
-          Effect.catchTags({
-            EffectDrizzleQueryError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
-            PublicFileStoreError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: error.cause })),
-            PaywallAssetValidationError: (error: PaywallAssetValidationError) =>
-              Effect.fail(new AiChatAttachmentValidationError({ message: error.message })),
-          }),
-        ),
-    );
-
-    const captureCheckpointReporting = Effect.fn("captureAiCheckpoint")(
-      function* (input: {
-        readonly chatId: string;
-        readonly turnId: string;
-        readonly paywallId: string;
-        readonly tree: unknown;
-      }) {
-        // First-write-wins per (chat, turn, document): only the FIRST accepted
-        // write to a document in a turn captures the pre-turn image. A later write
-        // to the same document in the same turn is a no-op insert (nothing set on
-        // conflict), preserving the pre-turn baseline. `.returning()` yields the
-        // inserted row on a real insert and an EMPTY array on the conflict no-op,
-        // so `inserted.length > 0` is exactly "this call took the checkpoint".
-        const inserted = yield* db
-          .insert(voidhashAiCheckpoint)
-          .values({
-            id: generateId("aiCheckpoint"),
-            chatId: input.chatId,
-            turnId: input.turnId,
-            paywallId: input.paywallId,
-            tree: input.tree,
-          })
-          .onConflictDoNothing({
-            target: [
-              voidhashAiCheckpoint.chatId,
-              voidhashAiCheckpoint.turnId,
-              voidhashAiCheckpoint.paywallId,
-            ],
-          })
-          .returning({ id: voidhashAiCheckpoint.id });
-        return { captured: inserted.length > 0 };
-      },
-      (effect) =>
-        effect.pipe(
-          Effect.catchTags({
-            EffectDrizzleQueryError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
-          }),
-        ),
-    );
-
-    /** Void-returning capture for callers that don't need the taken/no-op signal. */
-    const captureCheckpoint = (input: {
-      readonly chatId: string;
-      readonly turnId: string;
-      readonly paywallId: string;
-      readonly tree: unknown;
-    }) => captureCheckpointReporting(input).pipe(Effect.asVoid);
-
-    const getLastTurnCheckpoints = Effect.fn("getLastTurnAiCheckpoints")(
-      function* (input: { readonly chatId: string }) {
-        const chat = yield* findRow(input.chatId);
-        // Reverting mutates this chat's project-scoped paywall documents, so
-        // require project membership (not just org membership) — an org member
-        // outside the chat's project must not be able to revert its paywalls.
-        yield* assertProjectMember(chat.projectId, chat.organizationId);
-
-        // The chat's newest checkpoint identifies the last turn; return all of
-        // that turn's pre-images (one per touched document).
-        const newest = yield* db
-          .select({ turnId: voidhashAiCheckpoint.turnId })
-          .from(voidhashAiCheckpoint)
-          .where(eq(voidhashAiCheckpoint.chatId, input.chatId))
-          .orderBy(desc(voidhashAiCheckpoint.createdAt), desc(voidhashAiCheckpoint.id))
-          .limit(1);
-        const turnId = newest[0]?.turnId;
-        if (turnId === undefined) {
-          return [];
-        }
-        const rows = yield* db
-          .select({
-            paywallId: voidhashAiCheckpoint.paywallId,
-            tree: voidhashAiCheckpoint.tree,
-          })
-          .from(voidhashAiCheckpoint)
-          .where(
-            and(
-              eq(voidhashAiCheckpoint.chatId, input.chatId),
-              eq(voidhashAiCheckpoint.turnId, turnId),
-            ),
-          );
-        return rows.map(
-          (row): AiCheckpointPreImage => ({ paywallId: row.paywallId, tree: row.tree }),
-        );
-      },
-      (effect) =>
-        effect.pipe(
-          Effect.catchTags({
-            EffectDrizzleQueryError: (error) =>
-              Effect.fail(new AiChatServiceError({ message: String(error.cause) })),
-          }),
-        ),
-    );
-
-    return {
-      save,
-      list,
-      get,
-      delete: remove,
-      uploadAttachment,
-      captureCheckpoint,
-      captureCheckpointReporting,
-      getLastTurnCheckpoints,
-    } as const;
-  }),
-}) {
-  static layer = Layer.effect(AiChatService)(AiChatService.make);
-}
diff --git a/packages/core/src/services/index.ts b/packages/core/src/services/index.ts
index 4d62ad700..44524de54 100644
--- a/packages/core/src/services/index.ts
+++ b/packages/core/src/services/index.ts
@@ -84,7 +84,8 @@ export { StripePaymentProvider as StripePaymentProviderEngine } from "./paymentP
 export * from "./paymentProviders/PaymentProvider.ts";
 export { PaymentProviderConfigurationValidationError } from "../domain/paymentProvider/PaymentProviderConfiguration.ts";
 export { PaymentProviderProductValidationError } from "../domain/paymentProvider/PaymentProviderProduct.ts";
-export * from "./aiChat/AiChatService.ts";
+export * from "./agentSession/AgentAttachmentService.ts";
+export * from "./agentSession/AgentSessionIndexService.ts";
 export * from "./paymentProviders/PaymentProviderConfigurationService.ts";
 export * from "./paymentProviders/PaymentProviderProductService.ts";
 export * from "./paywallAssets/PaywallAssetService.ts";
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
index c4a9fd08c..5451e1dca 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
@@ -1,5 +1,5 @@
 import { Db, PaywallEditChangeSetStatus } from "@voidhash/db";
-import { AuthSession } from "../../domain/auth/Auth.ts";
+import { ActionForbiddenError, AuthSession } from "../../domain/auth/Auth.ts";
 import { Effect, Layer } from "effect";
 import { describe, expect, it } from "vite-plus/test";
 
@@ -11,6 +11,7 @@ import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
 
 interface ChangeSetRow {
   id: string;
+  agentSessionId: string | null;
   projectId: string;
   paywallId: string;
   paywallSlug: string;
@@ -26,6 +27,7 @@ interface ChangeSetRow {
 const makeLayers = () => {
   const rows: ChangeSetRow[] = [];
   const reverted: unknown[] = [];
+  let currentVersion: number | undefined;
   const db = {
     query: {
       paywallEditChangeSets: {
@@ -43,12 +45,17 @@ const makeLayers = () => {
       values: (
         value: Omit<
           ChangeSetRow,
-          "lastPreviewSignature" | "lastPreviewVersion" | "reviewVerdict" | "finishedAt"
-        >,
+          | "agentSessionId"
+          | "lastPreviewSignature"
+          | "lastPreviewVersion"
+          | "reviewVerdict"
+          | "finishedAt"
+        > & { agentSessionId?: string },
       ) =>
         Effect.sync(() => {
           rows.push({
             ...value,
+            agentSessionId: value.agentSessionId ?? null,
             lastPreviewSignature: null,
             lastPreviewVersion: null,
             reviewVerdict: null,
@@ -73,7 +80,7 @@ const makeLayers = () => {
         paywallId: "pw_1",
         tree: { encoded: "baseline" },
         root: { id: "root_1", type: "root", children: [] },
-        version: 4,
+        version: currentVersion ?? rows[0]?.lastPreviewVersion ?? 4,
       }),
     revertDocument: (_paywallId: string, tree: unknown) =>
       Effect.sync(() => {
@@ -86,18 +93,29 @@ const makeLayers = () => {
     Layer.provide(Layer.succeed(PaywallWorkspaceService, workspace)),
     Layer.provideMerge(Layer.succeed(AuthSession, {} as never)),
   );
-  return { layer, rows, reverted };
+  return {
+    layer,
+    rows,
+    reverted,
+    setCurrentVersion: (version: number) => {
+      currentVersion = version;
+    },
+  };
 };
 
 describe("PaywallEditChangeSetService", () => {
-  it("captures one active baseline and rejects a second begin", async () => {
+  it("resumes its owning agent and rejects a second caller", async () => {
     const { layer, rows } = makeLayers();
     await Effect.runPromise(
       Effect.gen(function* () {
         const service = yield* PaywallEditChangeSetService;
-        const started = yield* service.begin("proj_1", "trial");
+        const started = yield* service.begin("proj_1", "trial", "agent_1");
         expect(started.baselineVersion).toBe(4);
         expect(rows[0]?.baselineTree).toEqual({ encoded: "baseline" });
+        expect(rows[0]?.agentSessionId).toBe("agent_1");
+        const resumed = yield* service.begin("proj_1", "trial", "agent_1");
+        expect(resumed.id).toBe(started.id);
+        expect(rows).toHaveLength(1);
         const conflict = yield* Effect.flip(service.begin("proj_1", "trial"));
         expect(conflict).toBeInstanceOf(PaywallEditChangeSetConflictError);
       }).pipe(Effect.provide(layer)),
@@ -140,8 +158,8 @@ describe("PaywallEditChangeSetService", () => {
         });
         expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.finished);
         expect(rows[0]?.reviewVerdict).toBe("Looks good");
-        const revertFinished = yield* Effect.flip(service.revert("proj_1", started.id));
-        expect(revertFinished).toBeInstanceOf(PaywallEditChangeSetConflictError);
+        yield* service.revert("proj_1", started.id);
+        expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.reverted);
       }).pipe(Effect.provide(layer)),
     );
   });
@@ -159,4 +177,66 @@ describe("PaywallEditChangeSetService", () => {
     expect(reverted).toEqual([{ encoded: "baseline" }]);
     expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.reverted);
   });
+
+  it("refuses to revert a finished change set after newer document edits", async () => {
+    const { layer, rows, reverted, setCurrentVersion } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditChangeSetService;
+        const started = yield* service.begin("proj_1", "trial");
+        yield* service.recordPreview({
+          projectId: "proj_1",
+          changeSetId: started.id,
+          paywallSlug: "trial",
+          documentSignature: "doc-current",
+          documentVersion: 7,
+        });
+        yield* service.finish({
+          projectId: "proj_1",
+          changeSetId: started.id,
+          paywallSlug: "trial",
+          reviewedDocumentSignature: "doc-current",
+          currentDocumentSignature: "doc-current",
+          currentDocumentVersion: 7,
+          verdict: "Looks good",
+        });
+        setCurrentVersion(8);
+        const conflict = yield* Effect.flip(service.revert("proj_1", started.id));
+        expect(conflict).toBeInstanceOf(PaywallEditChangeSetConflictError);
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.finished);
+    expect(reverted).toEqual([]);
+  });
+
+  it("only reverts through the durable agent session that owns the change set", async () => {
+    const { layer, reverted } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditChangeSetService;
+        const started = yield* service.begin("proj_1", "trial", "agent_1");
+        const editForbidden = yield* Effect.flip(
+          service.requireActive({
+            projectId: "proj_1",
+            changeSetId: started.id,
+            paywallSlug: "trial",
+            agentSessionId: "agent_other",
+          }),
+        );
+        expect(editForbidden).toBeInstanceOf(ActionForbiddenError);
+        yield* service.requireActive({
+          projectId: "proj_1",
+          changeSetId: started.id,
+          paywallSlug: "trial",
+          agentSessionId: "agent_1",
+        });
+        const forbidden = yield* Effect.flip(
+          service.revertForAgentSession("proj_1", started.id, "agent_other"),
+        );
+        expect(forbidden).toBeInstanceOf(ActionForbiddenError);
+        yield* service.revertForAgentSession("proj_1", started.id, "agent_1");
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(reverted).toEqual([{ encoded: "baseline" }]);
+  });
 });
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
index 1c8ee445c..2c0d4881f 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
@@ -1,6 +1,7 @@
 import { and, Db, eq, PaywallEditChangeSetStatus, paywallEditChangeSets } from "@voidhash/db";
 import { Context, Effect, Layer, Schema } from "effect";
 
+import { ActionForbiddenError } from "../../domain/auth/Auth.ts";
 import { generateId } from "../../utils/generate-id.ts";
 import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
 
@@ -55,9 +56,17 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
         readonly projectId: string;
         readonly changeSetId: string;
         readonly paywallSlug: string;
+        readonly agentSessionId?: string;
       }) =>
         Effect.gen(function* () {
           const row = yield* requireRow(input.projectId, input.changeSetId);
+          if (input.agentSessionId !== undefined && row.agentSessionId !== input.agentSessionId) {
+            return yield* Effect.fail(
+              new ActionForbiddenError({
+                message: "This change set does not belong to the active agent session.",
+              }),
+            );
+          }
           if (row.paywallSlug !== input.paywallSlug) {
             return yield* Effect.fail(
               new PaywallEditChangeSetConflictError({
@@ -81,7 +90,7 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
           } satisfies ActivePaywallEditChangeSet;
         });
 
-      const begin = (projectId: string, paywallSlug: string) =>
+      const begin = (projectId: string, paywallSlug: string, agentSessionId?: string) =>
         Effect.gen(function* () {
           const document = yield* workspace.readDocument(projectId, paywallSlug);
           const existing = yield* db.query.paywallEditChangeSets.findFirst({
@@ -92,6 +101,14 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
             },
           });
           if (existing !== undefined) {
+            if (agentSessionId !== undefined && existing.agentSessionId === agentSessionId) {
+              return {
+                id: existing.id,
+                paywallId: existing.paywallId,
+                paywallSlug: existing.paywallSlug,
+                baselineVersion: existing.baselineVersion,
+              };
+            }
             return yield* Effect.fail(
               new PaywallEditChangeSetConflictError({
                 message: `Paywall "${paywallSlug}" already has active change set "${existing.id}". Finish or revert it before beginning another.`,
@@ -102,6 +119,7 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
           const id = generateId("paywallEditChangeSet");
           yield* db.insert(paywallEditChangeSets).values({
             id,
+            ...(agentSessionId === undefined ? {} : { agentSessionId }),
             projectId,
             paywallId: document.paywallId,
             paywallSlug: document.slug,
@@ -121,6 +139,7 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
         readonly projectId: string;
         readonly changeSetId: string;
         readonly paywallSlug: string;
+        readonly agentSessionId?: string;
         readonly documentSignature: string;
         readonly documentVersion: number;
       }) =>
@@ -145,6 +164,7 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
         readonly projectId: string;
         readonly changeSetId: string;
         readonly paywallSlug: string;
+        readonly agentSessionId?: string;
         readonly reviewedDocumentSignature: string;
         readonly currentDocumentSignature: string;
         readonly currentDocumentVersion: number;
@@ -152,6 +172,13 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
       }) =>
         Effect.gen(function* () {
           const row = yield* requireRow(input.projectId, input.changeSetId);
+          if (input.agentSessionId !== undefined && row.agentSessionId !== input.agentSessionId) {
+            return yield* Effect.fail(
+              new ActionForbiddenError({
+                message: "This change set does not belong to the active agent session.",
+              }),
+            );
+          }
           if (row.paywallSlug !== input.paywallSlug) {
             return yield* Effect.fail(
               new PaywallEditChangeSetConflictError({
@@ -201,13 +228,38 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
       const revert = (projectId: string, changeSetId: string) =>
         Effect.gen(function* () {
           const row = yield* requireRow(projectId, changeSetId);
-          if (row.status !== PaywallEditChangeSetStatus.active) {
+          if (row.status === PaywallEditChangeSetStatus.reverted) {
             return yield* Effect.fail(
               new PaywallEditChangeSetConflictError({
-                message: `Change set "${changeSetId}" is ${row.status}; only active change sets can be reverted.`,
+                message: `Change set "${changeSetId}" has already been reverted.`,
               }),
             );
           }
+          if (row.status === PaywallEditChangeSetStatus.finished) {
+            const document = yield* workspace.readDocument(projectId, row.paywallSlug);
+            if (row.lastPreviewVersion === null || document.version !== row.lastPreviewVersion) {
+              return yield* Effect.fail(
+                new PaywallEditChangeSetConflictError({
+                  message:
+                    "The paywall changed after this change set was reviewed, so reverting it would overwrite newer work.",
+                }),
+              );
+            }
+            const active = yield* db.query.paywallEditChangeSets.findFirst({
+              where: {
+                projectId,
+                paywallId: row.paywallId,
+                status: PaywallEditChangeSetStatus.active,
+              },
+            });
+            if (active !== undefined && active.id !== row.id) {
+              return yield* Effect.fail(
+                new PaywallEditChangeSetConflictError({
+                  message: `Change set "${active.id}" is now active for this paywall. Finish or revert it first.`,
+                }),
+              );
+            }
+          }
           const result = yield* workspace.revertDocument(row.paywallId, row.baselineTree);
           yield* db
             .update(paywallEditChangeSets)
@@ -216,18 +268,36 @@ export class PaywallEditChangeSetService extends Context.Service<PaywallEditChan
               and(
                 eq(paywallEditChangeSets.id, changeSetId),
                 eq(paywallEditChangeSets.projectId, projectId),
-                eq(paywallEditChangeSets.status, PaywallEditChangeSetStatus.active),
+                eq(paywallEditChangeSets.status, row.status),
               ),
             );
           return { ...result, paywallSlug: row.paywallSlug };
         });
 
+      const revertForAgentSession = (
+        projectId: string,
+        changeSetId: string,
+        agentSessionId: string,
+      ) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(projectId, changeSetId);
+          if (row.agentSessionId !== agentSessionId) {
+            return yield* Effect.fail(
+              new ActionForbiddenError({
+                message: "This change set does not belong to the requested agent session.",
+              }),
+            );
+          }
+          return yield* revert(projectId, changeSetId);
+        });
+
       return {
         begin,
         requireActive,
         recordPreview,
         finish,
         revert,
+        revertForAgentSession,
       } as const;
     }),
   },
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
index 8f36fca69..c38ecc9b4 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
@@ -152,9 +152,11 @@ describe("PaywallWorkspaceService", () => {
     }
   });
 
-  it("readDocument resolves the slug (authz) and returns identity + decoded root", async () => {
+  it("readDocument resolves the slug and returns a consistent document snapshot", async () => {
     const root = { id: "root_1", type: "root", parentId: null, pos: 0, data: {}, children: [] };
+    const tree = encodeTree([{ type: "root", name: "Paywall", children: [] }]);
     const exit = await useWs((ws) => ws.readDocument("proj_1", "trial"), {
+      documents: [{ tree, version: 7 }],
       paywalls: [paywallRow({ id: "pw_1", slug: "trial" })],
       snapshot: root,
     });
@@ -164,7 +166,9 @@ describe("PaywallWorkspaceService", () => {
         slug: "trial",
         name: "Trial",
         paywallId: "pw_1",
+        tree,
         root,
+        version: 7,
       });
     }
   });
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
index 9f023a780..46d9531ad 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
@@ -188,7 +188,7 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
        *
        * The stored paywall is loaded first through {@link PaywallService}, so
        * direct callers cannot bypass project authorization by supplying a raw
-       * mimic document id. Used by the AI `CaptureAiCheckpoint` path (reads
+       * mimic document id. Used by server-side workspace inspection (reads
        * `tree`) and by {@link readDocument} (reads `root`).
        */
       const readDocumentTree = (paywallId: string) =>
@@ -215,11 +215,9 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
 
       /**
        * Resolves a paywall by slug within the project (authz: the slug must
-       * belong to `projectId`) and reads its LIVE document's decoded renderer
-       * `root` — the input the AI `read_paywall` / `ReadPaywallDocument` surface
-       * cleans (via `serializeDocument`) for the model. Returns the paywall's
-       * identity (`slug`, `name`, `paywallId`) alongside the decoded `root` so the
-       * caller need not re-resolve. Read-only.
+       * belong to `projectId`) and reads one consistent snapshot of its live
+       * document. Returns the paywall identity alongside the raw tree, decoded
+       * renderer root, and optimistic-concurrency version. Read-only.
        */
       const readDocument = (projectId: string, paywallSlug: string) =>
         Effect.gen(function* () {
diff --git a/packages/core/src/utils/generate-id.ts b/packages/core/src/utils/generate-id.ts
index 4352247d7..359d05c1b 100644
--- a/packages/core/src/utils/generate-id.ts
+++ b/packages/core/src/utils/generate-id.ts
@@ -73,12 +73,7 @@ const prefixes = {
   internalFeatureFlagOverride: "iff_ovr",
   // Organization-scoped paywall image asset library
   paywallAsset: "pw_asset",
-  // Voidhash AI chat persistence (the chat id is minted client-side; this
-  // prefix is used for server-side fallbacks and stored attachment objects)
-  aiChat: "ai_chat",
-  aiChatAttachment: "ai_att",
-  // Per-turn AI checkpoint pre-image row (server-minted).
-  aiCheckpoint: "ai_ckpt",
+  agentAttachment: "agent_att",
   // Internal voidhash product feedback (distinct from any future customer-facing
   // feedback-collection product, which could own the plain `fb` prefix)
   voidhashFeedback: "vh_fb",
diff --git a/packages/core/src/utils/permissions.ts b/packages/core/src/utils/permissions.ts
index df4cc6b24..d218f3803 100644
--- a/packages/core/src/utils/permissions.ts
+++ b/packages/core/src/utils/permissions.ts
@@ -27,7 +27,7 @@ export const extractAuthorizedProjectId = (authSession: AnyAuthSession) =>
  * Whether the session is a member of `organizationId`. Any org that appears in
  * the session is one the caller belongs to — the least-privileged check (no
  * specific permission required), for org-scoped features every member may use
- * (e.g. the asset library and AI chats). Pure over the session, so it is
+ * (e.g. the asset library and agent attachments). Pure over the session, so it is
  * unit-testable without a live session.
  */
 export const isSessionOrganizationMember = (
diff --git a/packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts b/packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts
deleted file mode 100644
index a285df6ec..000000000
--- a/packages/core/test/services/aiChat/AiChatAuthorization.integration.test.ts
+++ /dev/null
@@ -1,145 +0,0 @@
-import { type UserSession } from "@voidhash/core/domain/auth/Auth";
-import { AiChatForbiddenError, AiChatService } from "@voidhash/core/services";
-import { Db, eq, voidhashAiChat } from "@voidhash/db";
-import { CoreAuthSession } from "@testing/CoreAuthSession";
-import { CoreIntegrationTestHarness } from "@testing/CoreIntegrationTestHarness";
-import { CoreTestFixture } from "@testing/CoreTestFixture";
-import { Effect, Layer } from "effect";
-import { expect } from "vitest";
-
-import { PublicFileStore } from "../../../src/services/storage/PublicFileStore.ts";
-
-const { test } = CoreIntegrationTestHarness.make();
-const suffix = crypto.randomUUID();
-const chatId = `it_chat_auth_${suffix}`;
-const attackerProjectId = `it_project_attacker_${suffix}`;
-const objectWrites: string[] = [];
-
-const PublicFileStoreTest = Layer.succeed(PublicFileStore, {
-  publicBaseUrl: "https://files.example.test",
-  publicUrl: (key: string) => `https://files.example.test/files/${key}`,
-  putObject: ({ key }: { readonly key: string }) =>
-    Effect.sync(() => {
-      objectWrites.push(key);
-    }),
-  getObject: () => Effect.succeed(null),
-  deleteObject: () => Effect.void,
-});
-
-const ServiceUnderTest = AiChatService.layer.pipe(Layer.provide(PublicFileStoreTest));
-
-const attackerSession = (): UserSession => ({
-  cookie: null,
-  method: "user",
-  name: `${CoreTestFixture.userName} <${CoreTestFixture.userEmail}>`,
-  organizations: [
-    {
-      id: CoreTestFixture.organizationId,
-      logo: null,
-      name: CoreTestFixture.organizationName,
-      permissions: ["organization:all"],
-      slug: CoreTestFixture.organizationSlug,
-      workosOrganizationId: CoreTestFixture.workosOrganizationId,
-    },
-  ],
-  person: null,
-  projects: [
-    {
-      id: attackerProjectId,
-      logo: null,
-      name: "Attacker project",
-      organizationId: CoreTestFixture.organizationId,
-      permissions: ["project:all"],
-      slug: `attacker-${suffix}`,
-    },
-  ],
-  user: {
-    createdAt: new Date(0),
-    email: CoreTestFixture.userEmail,
-    emailVerified: true,
-    id: CoreTestFixture.userId,
-    image: null,
-    name: CoreTestFixture.userName,
-    role: null,
-    updatedAt: new Date(0),
-    workosUserId: CoreTestFixture.workosUserId,
-  },
-});
-
-const asAttacker = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
-  effect.pipe(CoreAuthSession.authenticate(attackerSession()));
-
-test(
-  "every persisted AI chat operation binds authorization to the stored project",
-  Effect.gen(function* () {
-    const db = yield* Db;
-    const service = yield* AiChatService;
-    objectWrites.length = 0;
-
-    yield* db.insert(voidhashAiChat).values({
-      chatType: "persistent",
-      id: chatId,
-      messages: '[{"role":"user","content":"private"}]',
-      organizationId: CoreTestFixture.organizationId,
-      paywallId: null,
-      projectId: CoreTestFixture.projectId,
-      surface: "designer",
-      title: "Victim chat",
-      userId: CoreTestFixture.userId,
-    });
-
-    const expectForbidden = <A, E, R>(operation: Effect.Effect<A, E, R>) =>
-      Effect.gen(function* () {
-        const error = yield* asAttacker(operation).pipe(Effect.flip);
-        expect(error).toBeInstanceOf(AiChatForbiddenError);
-      });
-
-    yield* expectForbidden(
-      service.save({
-        chatType: "persistent",
-        id: chatId,
-        messages: "[]",
-        organizationId: CoreTestFixture.organizationId,
-        projectId: attackerProjectId,
-        surface: "designer",
-        title: "Compromised",
-      }),
-    );
-    yield* expectForbidden(
-      service.list({
-        organizationId: CoreTestFixture.organizationId,
-        projectId: CoreTestFixture.projectId,
-        surface: "designer",
-      }),
-    );
-    yield* expectForbidden(service.get({ chatId }));
-    yield* expectForbidden(service.delete({ chatId }));
-    yield* expectForbidden(
-      service.uploadAttachment({
-        chatId,
-        contentType: "image/png",
-        dataBase64: "iVBORw0KGgo=",
-        name: "attacker.png",
-        organizationId: CoreTestFixture.organizationId,
-      }),
-    );
-    yield* expectForbidden(service.getLastTurnCheckpoints({ chatId }));
-
-    const row = yield* db.query.voidhashAiChat.findFirst({ where: { id: chatId } });
-    expect(row).toMatchObject({
-      messages: '[{"role":"user","content":"private"}]',
-      projectId: CoreTestFixture.projectId,
-      title: "Victim chat",
-    });
-    expect(objectWrites).toEqual([]);
-  }).pipe(
-    Effect.ensuring(
-      Effect.gen(function* () {
-        const db = yield* Db;
-        yield* db.delete(voidhashAiChat).where(eq(voidhashAiChat.id, chatId)).pipe(Effect.ignore);
-      }),
-    ),
-    Effect.provide(ServiceUnderTest),
-    CoreAuthSession.authenticate(),
-  ),
-);
diff --git a/packages/db/src/alchemy-migrations/20260714222500_add_voidhash_agent_session/migration.sql b/packages/db/src/alchemy-migrations/20260714222500_add_voidhash_agent_session/migration.sql
new file mode 100644
index 000000000..5835b981e
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260714222500_add_voidhash_agent_session/migration.sql
@@ -0,0 +1,18 @@
+CREATE TABLE "voidhash_agent_session" (
+	"id" varchar(64) PRIMARY KEY NOT NULL,
+	"organization_id" varchar(36) NOT NULL,
+	"project_id" varchar(36) NOT NULL,
+	"surface" varchar(64) NOT NULL,
+	"paywall_id" varchar(64),
+	"user_id" varchar(64) NOT NULL,
+	"title" varchar(255) NOT NULL,
+	"created_at" timestamp (3) with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp (3) with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp (3) with time zone
+);
+--> statement-breakpoint
+ALTER TABLE "voidhash_agent_session" ADD CONSTRAINT "voidhash_agent_session_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "public"."organization"("id") ON DELETE cascade ON UPDATE no action;
+--> statement-breakpoint
+CREATE INDEX "voidhash_agent_session_scope_idx" ON "voidhash_agent_session" USING btree ("project_id","surface","paywall_id","updated_at");
+--> statement-breakpoint
+CREATE INDEX "voidhash_agent_session_user_idx" ON "voidhash_agent_session" USING btree ("user_id","updated_at");
diff --git a/packages/db/src/alchemy-migrations/20260714230000_scope_agent_change_sets/migration.sql b/packages/db/src/alchemy-migrations/20260714230000_scope_agent_change_sets/migration.sql
new file mode 100644
index 000000000..fd01a018a
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260714230000_scope_agent_change_sets/migration.sql
@@ -0,0 +1,3 @@
+ALTER TABLE "paywall_edit_change_set" ADD COLUMN "agent_session_id" varchar(64);
+--> statement-breakpoint
+CREATE INDEX "paywall_edit_change_set_agent_session_idx" ON "paywall_edit_change_set" USING btree ("agent_session_id");
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index 5dd7322eb..cc1e0bcc2 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -1339,14 +1339,16 @@ export type PaywallEditChangeSetStatusValue =
   (typeof PaywallEditChangeSetStatus)[keyof typeof PaywallEditChangeSetStatus];
 
 /**
- * An explicit MCP authoring session for one paywall. The baseline is captured
- * when the session starts so the complete set of edits can be reverted later.
+ * An explicit agentic authoring change set for one paywall. The baseline is
+ * captured when editing starts so the complete set of edits can be reverted.
  */
 export const paywallEditChangeSets = pgTable(
   "paywall_edit_change_set",
   {
     id: varchar("id", { length: 64 }).primaryKey(),
     projectId: varchar("project_id", { length: 255 }).notNull(),
+    /** Durable internal agent session that owns this change set, or null for MCP. */
+    agentSessionId: varchar("agent_session_id", { length: 64 }),
     paywallId: varchar("paywall_id", { length: 255 }).notNull(),
     paywallSlug: varchar("paywall_slug", { length: 255 }).notNull(),
     baselineTree: jsonb("baseline_tree").$type<unknown>().notNull(),
@@ -1365,6 +1367,7 @@ export const paywallEditChangeSets = pgTable(
   (table) => [
     index("paywall_edit_change_set_project_idx").on(table.projectId),
     index("paywall_edit_change_set_paywall_idx").on(table.paywallId),
+    index("paywall_edit_change_set_agent_session_idx").on(table.agentSessionId),
     uniqueIndex("paywall_edit_change_set_active_idx")
       .on(table.projectId, table.paywallId)
       .where(sql`${table.status} = 'active'`),
@@ -2372,16 +2375,7 @@ export const paywallAsset = pgTable(
   ],
 );
 
-/**
- * Persisted Voidhash AI chat. The `id` is minted client-side (so attachments
- * can be uploaded under the chat before the first turn is saved). `messages`
- * holds the AI SDK `UIMessage[]` JSON-encoded as text — it is never queried
- * into, and storing it as a string keeps NDJSON RPC serialization trivial.
- *
- * `chatType` is `"persistent"` (listed in the history UI, resumable) or
- * `"single_use"` (stored for audit/debug but never listed). `paywallId` scopes
- * a persistent designer chat to its paywall for the history dropdown.
- */
+/** Legacy pre-Pi chat rows retained while historical data ages out. */
 export const voidhashAiChat = pgTable(
   "voidhash_ai_chat",
   {
@@ -2400,7 +2394,7 @@ export const voidhashAiChat = pgTable(
     userId: varchar("user_id", { length: 64 }),
     /** Short title derived from the first user message. */
     title: varchar("title", { length: 255 }).notNull(),
-    /** JSON-encoded AI SDK UIMessage[]. */
+    /** Legacy JSON-encoded UI messages. */
     messages: text("messages").notNull(),
     createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
     updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
@@ -2421,14 +2415,7 @@ export const voidhashAiChat = pgTable(
   ],
 );
 
-/**
- * Per-turn AI checkpoint pre-images. Before the FIRST accepted write to a
- * document within one chat turn (one POST /api/ai/chat stream), the workspace
- * service captures that document's pre-write tree here — one row per (chat,
- * turn, document). Reverting "the last turn" reads these rows and reconciles
- * each captured tree back onto the live document. Rows are chat-scoped (deleted
- * with the chat) and are not authorization-bearing on their own.
- */
+/** Legacy pre-Pi turn checkpoints retained with their historical chats. */
 export const voidhashAiCheckpoint = pgTable(
   "voidhash_ai_checkpoint",
   {
@@ -2437,11 +2424,7 @@ export const voidhashAiCheckpoint = pgTable(
     chatId: varchar("chat_id", { length: 64 })
       .notNull()
       .references(() => voidhashAiChat.id, { onDelete: "cascade" }),
-    /**
-     * Turn identifier — the id of the triggering user message (or a server-minted
-     * turn id). Groups the pre-images captured within one POST /api/ai/chat stream
-     * so a revert can target "the last turn".
-     */
+    /** Groups the pre-images captured within one legacy chat turn. */
     turnId: varchar("turn_id", { length: 128 }).notNull(),
     /** The mimic document / paywall this pre-image belongs to. */
     paywallId: varchar("paywall_id", { length: 64 }).notNull(),
@@ -2463,6 +2446,40 @@ export const voidhashAiCheckpoint = pgTable(
   ],
 );
 
+/**
+ * Searchable metadata for durable Pi agent sessions. Conversation entries stay
+ * in durable-entity storage; this table only backs scoped history and ownership.
+ */
+export const voidhashAgentSession = pgTable(
+  "voidhash_agent_session",
+  {
+    id: varchar("id", { length: 64 }).primaryKey(),
+    organizationId: varchar("organization_id", { length: 36 })
+      .notNull()
+      .references(() => organization.id, { onDelete: "cascade" }),
+    projectId: varchar("project_id", { length: 36 }).notNull(),
+    surface: varchar("surface", { length: 64 }).notNull(),
+    paywallId: varchar("paywall_id", { length: 64 }),
+    userId: varchar("user_id", { length: 64 }).notNull(),
+    title: varchar("title", { length: 255 }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
+      .defaultNow()
+      .$onUpdate(() => new Date())
+      .notNull(),
+    deletedAt: timestamp("deleted_at", { withTimezone: true, precision: 3 }),
+  },
+  (table) => [
+    index("voidhash_agent_session_scope_idx").on(
+      table.projectId,
+      table.surface,
+      table.paywallId,
+      table.updatedAt,
+    ),
+    index("voidhash_agent_session_user_idx").on(table.userId, table.updatedAt),
+  ],
+);
+
 // ============================================
 // EXPERIMENT (A/B TESTING) TABLES
 // ============================================
diff --git a/packages/rpc/src/errors/AgentSession.ts b/packages/rpc/src/errors/AgentSession.ts
new file mode 100644
index 000000000..fc16e847a
--- /dev/null
+++ b/packages/rpc/src/errors/AgentSession.ts
@@ -0,0 +1,16 @@
+import { Schema } from "effect";
+
+/** Stable RPC failure for durable session metadata or attachment storage. */
+export class RpcAgentSessionServiceError extends Schema.TaggedErrorClass<RpcAgentSessionServiceError>(
+  "RpcAgentSessionServiceError",
+)("Rpc/AgentSessionServiceError", { message: Schema.String }) {}
+
+/** Stable RPC failure for a durable session that does not exist. */
+export class RpcAgentSessionNotFoundError extends Schema.TaggedErrorClass<RpcAgentSessionNotFoundError>(
+  "RpcAgentSessionNotFoundError",
+)("Rpc/AgentSessionNotFoundError", { sessionId: Schema.String }) {}
+
+/** Stable RPC failure for invalid durable-session attachment input. */
+export class RpcAgentAttachmentValidationError extends Schema.TaggedErrorClass<RpcAgentAttachmentValidationError>(
+  "RpcAgentAttachmentValidationError",
+)("Rpc/AgentAttachmentValidationError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/AiChat.ts b/packages/rpc/src/errors/AiChat.ts
deleted file mode 100644
index 4d65161fd..000000000
--- a/packages/rpc/src/errors/AiChat.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-/**
- * Voidhash AI chat errors — typed errors returned by AI-chat RPCs. Class names
- * and `_tag` values are namespaced with `Rpc` / `Rpc/`.
- */
-import { Schema } from "effect";
-
-/** Catch-all service failure (db / storage). */
-export class RpcAiChatServiceError extends Schema.TaggedErrorClass<RpcAiChatServiceError>(
-  "RpcAiChatServiceError",
-)("Rpc/AiChatServiceError", { message: Schema.String }) {}
-
-/** Referenced chat row not found. */
-export class RpcAiChatNotFoundError extends Schema.TaggedErrorClass<RpcAiChatNotFoundError>(
-  "RpcAiChatNotFoundError",
-)("Rpc/AiChatNotFoundError", { chatId: Schema.String }) {}
-
-/** Uploaded attachment failed image validation (unsupported type, too large, or malformed). */
-export class RpcAiChatAttachmentValidationError extends Schema.TaggedErrorClass<RpcAiChatAttachmentValidationError>(
-  "RpcAiChatAttachmentValidationError",
-)("Rpc/AiChatAttachmentValidationError", { message: Schema.String }) {}
diff --git a/packages/rpc/src/errors/index.ts b/packages/rpc/src/errors/index.ts
index 63d5103fa..c7f7d48b7 100644
--- a/packages/rpc/src/errors/index.ts
+++ b/packages/rpc/src/errors/index.ts
@@ -4,7 +4,7 @@
  * raise lives here so the rpc package stays self-contained and doesn't
  * leak server-side internals to frontend consumers.
  */
-export * from "./AiChat.ts";
+export * from "./AgentSession.ts";
 export * from "./analytics.ts";
 export * from "./ApiKey.ts";
 export * from "./AuditLog.ts";
diff --git a/packages/rpc/src/groups/AgentSessionRpcsDef.ts b/packages/rpc/src/groups/AgentSessionRpcsDef.ts
new file mode 100644
index 000000000..56c78f7f6
--- /dev/null
+++ b/packages/rpc/src/groups/AgentSessionRpcsDef.ts
@@ -0,0 +1,87 @@
+import { Schema } from "effect";
+import { Rpc, RpcGroup } from "effect/unstable/rpc";
+
+import {
+  RpcAgentAttachmentValidationError,
+  RpcAgentSessionNotFoundError,
+  RpcAgentSessionServiceError,
+} from "../errors/AgentSession.ts";
+import { RpcActionForbiddenError } from "../errors/common.ts";
+import { AuthMiddleware } from "../middlewares.ts";
+
+/** Searchable metadata returned for a durable agent session. */
+export const AgentSessionSummarySchema = Schema.Struct({
+  id: Schema.String,
+  organizationId: Schema.String,
+  projectId: Schema.String,
+  surface: Schema.String,
+  paywallId: Schema.NullOr(Schema.String),
+  userId: Schema.String,
+  title: Schema.String,
+  createdAt: Schema.Date,
+  updatedAt: Schema.Date,
+});
+
+/** Public attachment metadata accepted by the Pi prompt protocol. */
+export const AgentAttachmentSchema = Schema.Struct({
+  url: Schema.String,
+  name: Schema.String,
+  contentType: Schema.String,
+  sizeBytes: Schema.Number,
+});
+
+/** Authenticated metadata and attachment operations for durable Pi sessions. */
+export class AgentSessionRpcsDef extends RpcGroup.make(
+  Rpc.make("ListAgentSessions", {
+    error: Schema.Union([RpcAgentSessionServiceError, RpcActionForbiddenError]),
+    payload: {
+      organizationId: Schema.String,
+      projectId: Schema.String,
+      surface: Schema.String,
+      paywallId: Schema.optional(Schema.String),
+    },
+    success: Schema.Array(AgentSessionSummarySchema),
+  }),
+  Rpc.make("GetAgentSession", {
+    error: Schema.Union([
+      RpcAgentSessionServiceError,
+      RpcActionForbiddenError,
+      RpcAgentSessionNotFoundError,
+    ]),
+    payload: { sessionId: Schema.String },
+    success: AgentSessionSummarySchema,
+  }),
+  Rpc.make("DeleteAgentSession", {
+    error: Schema.Union([
+      RpcAgentSessionServiceError,
+      RpcActionForbiddenError,
+      RpcAgentSessionNotFoundError,
+    ]),
+    payload: { sessionId: Schema.String },
+    success: Schema.Void,
+  }),
+  Rpc.make("RevertAgentSessionChangeSet", {
+    error: Schema.Union([
+      RpcAgentSessionServiceError,
+      RpcActionForbiddenError,
+      RpcAgentSessionNotFoundError,
+    ]),
+    payload: { sessionId: Schema.String, changeSetId: Schema.String },
+    success: Schema.Void,
+  }),
+  Rpc.make("UploadAgentAttachment", {
+    error: Schema.Union([
+      RpcAgentSessionServiceError,
+      RpcActionForbiddenError,
+      RpcAgentAttachmentValidationError,
+    ]),
+    payload: {
+      sessionId: Schema.String,
+      organizationId: Schema.String,
+      name: Schema.String,
+      contentType: Schema.String,
+      dataBase64: Schema.String,
+    },
+    success: AgentAttachmentSchema,
+  }),
+).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/groups/AiChatRpcsDef.ts b/packages/rpc/src/groups/AiChatRpcsDef.ts
deleted file mode 100644
index 8d7947312..000000000
--- a/packages/rpc/src/groups/AiChatRpcsDef.ts
+++ /dev/null
@@ -1,139 +0,0 @@
-import { Rpc, RpcGroup } from "effect/unstable/rpc";
-import { Schema } from "effect";
-
-import {
-  RpcAiChatAttachmentValidationError,
-  RpcAiChatNotFoundError,
-  RpcAiChatServiceError,
-} from "../errors/AiChat.ts";
-import { RpcActionForbiddenError } from "../errors/common.ts";
-import { AuthMiddleware } from "../middlewares.ts";
-
-/** Chat metadata as returned by the history list (no messages). */
-export const AiChatSummarySchema = Schema.Struct({
-  id: Schema.String,
-  title: Schema.String,
-  chatType: Schema.String,
-  createdAt: Schema.Date,
-  updatedAt: Schema.Date,
-});
-
-/** One full chat, including its JSON-encoded `UIMessage[]`. */
-export const AiChatSchema = Schema.Struct({
-  id: Schema.String,
-  organizationId: Schema.String,
-  projectId: Schema.String,
-  surface: Schema.String,
-  chatType: Schema.String,
-  paywallId: Schema.NullOr(Schema.String),
-  title: Schema.String,
-  /** JSON-encoded AI SDK `UIMessage[]`. */
-  messages: Schema.String,
-  createdAt: Schema.Date,
-  updatedAt: Schema.Date,
-});
-
-/** One stored chat attachment. */
-export const AiChatAttachmentSchema = Schema.Struct({
-  url: Schema.String,
-  name: Schema.String,
-  contentType: Schema.String,
-  sizeBytes: Schema.Number,
-});
-
-/**
- * Voidhash AI chat persistence + attachments, gated by {@link AuthMiddleware}.
- * The chat id is minted client-side; `SaveAiChat` upserts by it. Reads/deletes
- * require org membership; writes additionally require access to the project.
- */
-export class AiChatRpcsDef extends RpcGroup.make(
-  Rpc.make("SaveAiChat", {
-    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError]),
-    payload: {
-      id: Schema.String,
-      organizationId: Schema.String,
-      projectId: Schema.String,
-      surface: Schema.String,
-      /** "persistent" (listed, resumable) | "single_use" (stored, never listed). */
-      chatType: Schema.String,
-      paywallId: Schema.optional(Schema.String),
-      title: Schema.String,
-      /** JSON-encoded AI SDK `UIMessage[]`. */
-      messages: Schema.String,
-    },
-    success: AiChatSummarySchema,
-  }),
-  Rpc.make("ListAiChats", {
-    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError]),
-    payload: {
-      organizationId: Schema.String,
-      projectId: Schema.String,
-      surface: Schema.String,
-      paywallId: Schema.optional(Schema.String),
-    },
-    success: Schema.Array(AiChatSummarySchema),
-  }),
-  Rpc.make("GetAiChat", {
-    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
-    payload: {
-      chatId: Schema.String,
-    },
-    success: AiChatSchema,
-  }),
-  Rpc.make("DeleteAiChat", {
-    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
-    payload: {
-      chatId: Schema.String,
-    },
-    success: Schema.Void,
-  }),
-  Rpc.make("UploadAiChatAttachment", {
-    error: Schema.Union([
-      RpcAiChatServiceError,
-      RpcActionForbiddenError,
-      RpcAiChatAttachmentValidationError,
-    ]),
-    payload: {
-      chatId: Schema.String,
-      organizationId: Schema.String,
-      name: Schema.String,
-      contentType: Schema.String,
-      dataBase64: Schema.String,
-    },
-    success: AiChatAttachmentSchema,
-  }),
-  Rpc.make("RevertAiChatCheckpoint", {
-    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
-    payload: {
-      chatId: Schema.String,
-    },
-    // The number of documents reverted in the chat's last turn (`0` when the
-    // chat has no checkpoints — a benign no-op the UI can treat as "nothing to
-    // undo").
-    success: Schema.Struct({ revertedDocuments: Schema.Number }),
-  }),
-  /**
-   * Capture the current document tree of `paywallId` as the pre-turn image for a
-   * chat turn, so a later {@link RpcGroup} `RevertAiChatCheckpoint` can restore
-   * it. Called by the client at the START of an AI turn that will mutate the
-   * document (before the model's `edit_document` ops land), in the
-   * document-first authoring model where edits are applied incrementally.
-   *
-   * First-write-wins per `(chatId, turnId, paywallId)`: re-capturing the same
-   * turn is a benign no-op (`captured: false`) so retries/reconnects don't clobber
-   * the original pre-turn image. USER-session only.
-   */
-  Rpc.make("CaptureAiCheckpoint", {
-    error: Schema.Union([RpcAiChatServiceError, RpcActionForbiddenError, RpcAiChatNotFoundError]),
-    payload: {
-      chatId: Schema.String,
-      /** Stable per-turn id (matches the AI SDK turn) the checkpoint is keyed by. */
-      turnId: Schema.String,
-      /** The document whose current tree is captured as the pre-turn image. */
-      paywallId: Schema.String,
-    },
-    // `captured: true` when this call took the checkpoint, `false` when one
-    // already existed for the turn (first-write-wins no-op).
-    success: Schema.Struct({ captured: Schema.Boolean }),
-  }),
-).middleware(AuthMiddleware) {}
diff --git a/packages/rpc/src/index.ts b/packages/rpc/src/index.ts
index 34e4c019b..3b4080317 100644
--- a/packages/rpc/src/index.ts
+++ b/packages/rpc/src/index.ts
@@ -1,6 +1,6 @@
 import { RpcGroup } from "effect/unstable/rpc";
 
-import { AiChatRpcsDef } from "./groups/AiChatRpcsDef.ts";
+import { AgentSessionRpcsDef } from "./groups/AgentSessionRpcsDef.ts";
 import { AnalyticsRpcsDef } from "./groups/AnalyticsRpcsDef.ts";
 import { ApiKeyRpcsDef } from "./groups/ApiKeyRpcsDef.ts";
 import { PersonRpcsDef } from "./groups/PersonRpcsDef.ts";
@@ -27,7 +27,7 @@ import { FeedbackRpcsDef } from "./groups/FeedbackRpcsDef.ts";
 import { ExperimentRpcsDef } from "./groups/ExperimentRpcsDef.ts";
 
 export const RpcGroups = RpcGroup.make().merge(
-  AiChatRpcsDef,
+  AgentSessionRpcsDef,
   AnalyticsRpcsDef,
   ApiKeyRpcsDef,
   PersonRpcsDef,
@@ -56,7 +56,7 @@ export const RpcGroups = RpcGroup.make().merge(
 
 export * from "./auth.ts";
 export * from "./errors/index.ts";
-export * from "./groups/AiChatRpcsDef.ts";
+export * from "./groups/AgentSessionRpcsDef.ts";
 export * from "./groups/AnalyticsRpcsDef.ts";
 export * from "./groups/ApiKeyRpcsDef.ts";
 export * from "./groups/PersonRpcsDef.ts";
diff --git a/packages/rpc/src/internalFeatureFlags.ts b/packages/rpc/src/internalFeatureFlags.ts
index 80083738c..ef3a35ca7 100644
--- a/packages/rpc/src/internalFeatureFlags.ts
+++ b/packages/rpc/src/internalFeatureFlags.ts
@@ -65,12 +65,12 @@ export const INTERNAL_FEATURE_FLAGS = {
       "The Experimentation suite in the studio sidebar: the Feature Flags product and A/B Tests.",
     defaultEnabled: false,
   },
-  voidhashAi: {
-    key: "voidhash_ai",
-    name: "Voidhash AI",
+  voidhashAiPi: {
+    key: "voidhash_ai_pi",
+    name: "Voidhash AI (Pi)",
     description:
-      "The Voidhash AI agent: the chat panel in the paywall designer that can edit code components and paywall composition.",
-    defaultEnabled: false,
+      "The durable Pi agent session in the paywall designer with server-executed workspace tools.",
+    defaultEnabled: true,
   },
 } as const satisfies Record<string, InternalFeatureFlagDefinition>;
 
diff --git a/patches/@earendil-works__pi-ai@0.80.7.patch b/patches/@earendil-works__pi-ai@0.80.7.patch
new file mode 100644
index 000000000..95d57ed58
--- /dev/null
+++ b/patches/@earendil-works__pi-ai@0.80.7.patch
@@ -0,0 +1,20 @@
+diff --git a/dist/api/google-generative-ai.lazy.js b/dist/api/google-generative-ai.lazy.js
+index 9dcc0e2..0b6232a 100644
+--- a/dist/api/google-generative-ai.lazy.js
++++ b/dist/api/google-generative-ai.lazy.js
+@@ -1,3 +1,4 @@
+ import { lazyApi } from "./lazy.js";
+-export const googleGenerativeAIApi = () => lazyApi(() => import("./google-generative-ai.js"));
++const unavailable = () => Promise.reject(new Error("Google Generative AI support is not installed"));
++export const googleGenerativeAIApi = () => lazyApi(unavailable);
+ //# sourceMappingURL=google-generative-ai.lazy.js.map
+diff --git a/dist/api/google-vertex.lazy.js b/dist/api/google-vertex.lazy.js
+index f43a254..05d09cd 100644
+--- a/dist/api/google-vertex.lazy.js
++++ b/dist/api/google-vertex.lazy.js
+@@ -1,3 +1,4 @@
+ import { lazyApi } from "./lazy.js";
+-export const googleVertexApi = () => lazyApi(() => import("./google-vertex.js"));
++const unavailable = () => Promise.reject(new Error("Google Vertex support is not installed"));
++export const googleVertexApi = () => lazyApi(unavailable);
+ //# sourceMappingURL=google-vertex.lazy.js.map
diff --git a/plugins/voidhash/skills/design-paywall/SKILL.md b/plugins/voidhash/skills/design-paywall/SKILL.md
index 6b59bc89c..dd53b58f5 100644
--- a/plugins/voidhash/skills/design-paywall/SKILL.md
+++ b/plugins/voidhash/skills/design-paywall/SKILL.md
@@ -1,32 +1,728 @@
 ---
 name: design-paywall
-description: Design, edit, preview, visually review, finish, or revert a Voidhash paywall through the Voidhash MCP server.
+description: Design, edit, preview, visually review, finish, or revert a Voidhash paywall with the shared workspace tools.
 ---
 
-# Design a Voidhash paywall
+# Paywall Authoring Reference
 
-Use the `voidhash` MCP server for all paywall operations.
+This is the domain reference for building a paywall as a mimic document
+with `edit_paywall`, plus code components for anything that needs real code.
+Read the document model and containment rules first — the style reference below is
+generated from the live schema, so it is always exact.
 
-Before editing:
+## Document model
 
-1. Read `voidhash://paywall-authoring/reference` for the schema-derived authoring rules.
-2. Call `list_paywalls`, then `begin_paywall_edit` for the selected slug.
-3. Keep the returned `changeSetId` and pass it to every mutation and preview call.
-4. Read the current structure with `get_paywall` and available catalog, local, and builtin components with `get_components`.
-5. If the user provides an inspiration URL and browser tools are available, inspect it for visual context before editing. Browser context is optional and must never block the MCP workflow.
+A paywall is a MIMIC DOCUMENT: a tree of nodes. You author it with `edit_paywall`
+ops (`insert`, `update`, `move`, `remove`, `replaceChildren`), addressing nodes
+by their engine-minted id. The node kinds you build with:
 
-While editing:
+- `screen` — the paywall's root visual frame (the top-level node under the
+  document). Holds the whole layout; has a background, safe-area flags, and a
+  fixed default size (375×812).
+- `view` — a flex container / row / column. The workhorse for layout, grouping,
+  cards, buttons (a `view` with a click interaction is a tappable surface —
+  there is no separate button/pressable node).
+- `scrollView` — a `view` that SCROLLS. Same style/children as a `view`; use it
+  for content taller than the screen. `horizontal: true` scrolls sideways and lays
+  its children out in a row (forces row flow, like RN); `showsScrollIndicator: false`
+  hides the scrollbar.
+- `text` — a text leaf. Its `text` data field is the literal string it renders.
+- `shape` — a vector container that holds `path` nodes (for icons / custom
+  vector art).
+- `path` — a single vector path inside a `shape`.
+- `component` — an INSTANCE of a catalog component, a local code component, or a
+  first-party BUILTIN that ships with the renderer. Insert one to place a reusable
+  widget; bind its props/actions (discover them with `get_components`). Insert a
+  builtin with `componentSource: "builtin"` and its `componentSlug` from
+  `get_components` — builtins are UNPINNED (no version/hash) and take props like
+  any component.
 
-- Prefer `edit_paywall` for visual composition and atomic batches.
-- Use `duplicate_subtree` when an existing section is the right starting point.
-- Build dynamic behavior without code whenever the document can express it: declare typed `localVariables` on the nearest common ancestor, use `view`/`scrollView` click interactions or component `actionBindings` to run `set-variable`, `purchase-product`, or `close-paywall`, and use conditional `states` to override styles or actions when variables match. Preserve complete arrays when updating them.
-- Use the no-code cycle `variable → action changes variable → matching state changes appearance/behavior → CTA consumes variable` for product selection, toggles, conditional visibility, multi-step sections, and purchase flows.
-- Use local component tools only when custom TSX behavior is genuinely needed. A write is not committed unless server-side compilation succeeds.
-- After meaningful sections, call `get_paywall_preview` and inspect the returned image for hierarchy, spacing, clipping, legibility, and viewport fit.
+Node ids are ADDRESSES: every node has a stable id. `get_paywall` returns the
+tree with ids; the user's selection is a set of ids; inserts RETURN their minted
+ids. You never write an id yourself.
 
-Before stopping:
+### Containment (which node may hold which)
 
-1. Render a final full preview and inspect the actual image.
-2. Fix every visible issue and render again after the last mutation.
-3. Call `finish_paywall_edit` with the exact latest `documentSignature`, a concise visual verdict, and an empty `unresolvedIssues` list.
-4. If the result should be discarded, call `revert_paywall_edit` instead. Never abandon an active change set.
+An `insert`/`move` into a parent that cannot contain the node type is rejected.
+The legal parent → child rules (generated from the schema):
+
+- `screen` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+- `view` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+- `scrollView` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+- `text` is a leaf (no child nodes).
+- `shape` may contain: `path`
+- `path` is a leaf (no child nodes).
+- `component` may contain: `view`, `scrollView`, `text`, `shape`, `component`
+
+## Style reference (generated from the schema)
+
+Style is a per-node `style` object of RN-named fields (NO shorthands: write
+`paddingTop`/`paddingRight`/… never `padding`; `borderTopLeftRadius`/… never
+`borderRadius`). Colors are `rgba(r, g, b, a)` strings. Each node type accepts a
+different subset; a field not listed for a node type is rejected on it.
+
+**Group flags are AUTO-MANAGED in a node's base `style`.** Setting ANY background /
+border / shadow (or, on `path`, fill / stroke) field there automatically turns
+that group's `<group>Enabled` flag on — just set `backgroundColor` and the
+background renders. Inside `states[].overrides.style`, explicitly include the
+matching `*Enabled: true` flag when the base style has not already enabled that
+group. The flags also support non-destructive hiding: explicitly set one to
+`false` (e.g. `{ backgroundEnabled: false }`) to hide a group while keeping its
+fields for later.
+
+Set a style field via `update` with merge semantics: `set: { style: { paddingTop: 8 } }`
+changes ONLY `paddingTop` and leaves every other style field untouched. To insert
+a node with styles, put the `style` object on the inserted node.
+
+### `screen` style fields
+
+- `x`: number (default 0)
+- `y`: number (default 0)
+- `width`: number (default 375)
+- `height`: number (default 812)
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `paddingTop`: number (default 0)
+- `paddingRight`: number (default 0)
+- `paddingBottom`: number (default 0)
+- `paddingLeft`: number (default 0)
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `gap`: number (default 0)
+- `justifyContent`: "flex-start" | "center" | "flex-end" | "space-between" | "space-around" | "space-evenly" (default "flex-start")
+- `alignItems`: "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "stretch")
+- `flexDirection`: "row" | "column" (default "column")
+- `backgroundColor`: color (rgba) (default "rgba(255, 255, 255, 1)")
+- `backgroundEnabled`: boolean (default true) — AUTO-MANAGED: set to true automatically when you set any background field; write `false` explicitly to hide the background without deleting its fields.
+- `backgroundType`: "solid" | "gradient" | "image" (default "solid")
+- `backgroundGradient`: object (default {"kind":"linear","startX":0.5,"startY":0,"endX":0.5,"endY":1,"stops":[{"color":"rgba(255, 255, 255, 1)","position":0},{"color":"rgba(255, 255, 255, 0)","position":1}]})
+- `backgroundImage`: object (default {"url":"","resizeMode":"cover"})
+- `borderTopWidth`: number (default 0)
+- `borderRightWidth`: number (default 0)
+- `borderBottomWidth`: number (default 0)
+- `borderLeftWidth`: number (default 0)
+- `borderColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `borderStyle`: "solid" | "dashed" | "dotted" (default "solid")
+- `borderEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any border field; write `false` explicitly to hide the border without deleting its fields.
+- `opacity`: number (default 1)
+- `overflow`: "visible" | "hidden" | "scroll" (default "visible")
+- `zIndex`: number (default 0)
+- `display`: "flex" | "none" (default "flex")
+- `shadowEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any shadow field; write `false` explicitly to hide the shadow without deleting its fields.
+- `shadowColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `shadowOffsetX`: number (default 0)
+- `shadowOffsetY`: number (default 0)
+- `shadowRadius`: number (default 0)
+- `shadowOpacity`: number (default 1)
+- `safeAreaTop`: boolean (default false)
+- `safeAreaBottom`: boolean (default false)
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+
+### `view` style fields
+
+- `paddingTop`: number (default 0)
+- `paddingRight`: number (default 0)
+- `paddingBottom`: number (default 0)
+- `paddingLeft`: number (default 0)
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `gap`: number (default 0)
+- `justifyContent`: "flex-start" | "center" | "flex-end" | "space-between" | "space-around" | "space-evenly" (default "flex-start")
+- `alignItems`: "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "stretch")
+- `flexDirection`: "row" | "column" (default "column")
+- `width`: number (default "auto")
+- `height`: number (default "auto")
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `backgroundColor`: color (rgba) (default "rgba(255, 255, 255, 1)")
+- `backgroundEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any background field; write `false` explicitly to hide the background without deleting its fields.
+- `backgroundType`: "solid" | "gradient" | "image" (default "solid")
+- `backgroundGradient`: object (default {"kind":"linear","startX":0.5,"startY":0,"endX":0.5,"endY":1,"stops":[{"color":"rgba(255, 255, 255, 1)","position":0},{"color":"rgba(255, 255, 255, 0)","position":1}]})
+- `backgroundImage`: object (default {"url":"","resizeMode":"cover"})
+- `borderTopWidth`: number (default 0)
+- `borderRightWidth`: number (default 0)
+- `borderBottomWidth`: number (default 0)
+- `borderLeftWidth`: number (default 0)
+- `borderColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `borderStyle`: "solid" | "dashed" | "dotted" (default "solid")
+- `borderEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any border field; write `false` explicitly to hide the border without deleting its fields.
+- `borderTopLeftRadius`: number (default 0)
+- `borderTopRightRadius`: number (default 0)
+- `borderBottomRightRadius`: number (default 0)
+- `borderBottomLeftRadius`: number (default 0)
+- `opacity`: number (default 1)
+- `overflow`: "visible" | "hidden" | "scroll" (default "visible")
+- `zIndex`: number (default 0)
+- `position`: "absolute" | "relative" (default "relative")
+- `left`: number (default "auto")
+- `top`: number (default "auto")
+- `right`: number (default "auto")
+- `bottom`: number (default "auto")
+- `display`: "flex" | "none" (default "flex")
+- `shadowEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any shadow field; write `false` explicitly to hide the shadow without deleting its fields.
+- `shadowColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `shadowOffsetX`: number (default 0)
+- `shadowOffsetY`: number (default 0)
+- `shadowRadius`: number (default 0)
+- `shadowOpacity`: number (default 1)
+- `safeAreaTop`: boolean (default false)
+- `safeAreaBottom`: boolean (default false)
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+
+### `text` style fields
+
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `fontSize`: number (default 16)
+- `fontWeight`: "100" | "200" | "300" | "400" | "500" | "600" | "700" | "800" | "900" (default "400")
+- `color`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `textAlign`: "left" | "center" | "right" | "justify" (default "left")
+- `lineHeight`: number (default 1.5)
+- `letterSpacing`: number (default 0)
+- `borderTopWidth`: number (default 0)
+- `borderRightWidth`: number (default 0)
+- `borderBottomWidth`: number (default 0)
+- `borderLeftWidth`: number (default 0)
+- `borderColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `borderStyle`: "solid" | "dashed" | "dotted" (default "solid")
+- `borderEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any border field; write `false` explicitly to hide the border without deleting its fields.
+- `opacity`: number (default 1)
+- `overflow`: "visible" | "hidden" | "scroll" (default "visible")
+- `zIndex`: number (default 0)
+- `position`: "absolute" | "relative" (default "relative")
+- `left`: number (default "auto")
+- `top`: number (default "auto")
+- `right`: number (default "auto")
+- `bottom`: number (default "auto")
+- `display`: "flex" | "none" (default "flex")
+- `shadowEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any shadow field; write `false` explicitly to hide the shadow without deleting its fields.
+- `shadowColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `shadowOffsetX`: number (default 0)
+- `shadowOffsetY`: number (default 0)
+- `shadowRadius`: number (default 0)
+- `shadowOpacity`: number (default 1)
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+
+### `shape` style fields
+
+- `width`: number (default "auto")
+- `height`: number (default "auto")
+- `minWidth`: number (no default)
+- `maxWidth`: number (no default)
+- `minHeight`: number (no default)
+- `maxHeight`: number (no default)
+- `marginTop`: number (default 0)
+- `marginRight`: number (default 0)
+- `marginBottom`: number (default 0)
+- `marginLeft`: number (default 0)
+- `opacity`: number (default 1)
+- `display`: "flex" | "none" (default "flex")
+- `flex`: number (no default)
+- `flexGrow`: number (default 0)
+- `flexShrink`: number (default 1)
+- `flexBasis`: number (default "auto")
+- `alignSelf`: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline" (default "auto")
+- `preserveAspectRatio`: "none" | "xMidYMid meet" | "xMidYMid slice" (default "xMidYMid meet")
+
+### `path` style fields
+
+- `fillColor`: color (rgba) (default "rgba(255, 255, 255, 1)")
+- `fillEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any fill field; write `false` explicitly to hide the fill without deleting its fields.
+- `fillRule`: "nonzero" | "evenodd" (default "nonzero")
+- `fillOpacity`: number (default 1)
+- `strokeColor`: color (rgba) (default "rgba(0, 0, 0, 1)")
+- `strokeEnabled`: boolean (default false) — AUTO-MANAGED: set to true automatically when you set any stroke field; write `false` explicitly to hide the stroke without deleting its fields.
+- `strokeWidth`: number (default 0)
+- `strokeOpacity`: number (default 1)
+- `strokeLinecap`: "butt" | "round" | "square" (default "butt")
+- `strokeLinejoin`: "miter" | "round" | "bevel" (default "miter")
+- `opacity`: number (default 1)
+- `display`: "flex" | "none" (default "flex")
+
+### Flex layout (defaults match CSS)
+
+Layout is flexbox, exactly like CSS / React Native:
+
+- Views **hug their content** by default: `width` and `height` default to
+  `"auto"`. Do NOT set a numeric `width`/`height` just to "make it fit" — omit
+  them and let flex size the node. Set a number only for a genuinely fixed size.
+- A container **stretches its children on the CROSS axis** by default
+  (`alignItems` defaults to `"stretch"`). So a child of a `column` fills the
+  container's width, and a child of a `row` fills its height, automatically —
+  you do not need `alignSelf` or a width/height for that.
+- To make a child **fill the MAIN axis** (grow to share leftover space), give it
+  `flex: 1` (e.g. a spacer, or two side-by-side cards that split a row).
+- Cross-axis fill is automatic UNLESS the child opts out — either a numeric size
+  on that axis (a fixed size defeats stretch) or a non-`stretch` `alignSelf`
+  (`"flex-start"`/`"center"`/`"flex-end"`). Set `alignSelf` only to deviate from
+  the container's alignment.
+- Prefer omitting `width`/`height` and reaching for `flexDirection`, `gap`,
+  `justifyContent` (main axis), `alignItems` (cross axis), and `flex` to compose
+  layout — the same tools you would use in CSS.
+
+### Structured style values (gradient / image backgrounds)
+
+`backgroundGradient` and `backgroundImage` are objects. Set
+`backgroundType: "gradient"` (or `"image"`) for the chosen fill to render
+(`backgroundEnabled` is turned on automatically for you).
+
+```json
+// backgroundGradient
+{ "kind": "linear", "startX": 0.5, "startY": 0, "endX": 0.5, "endY": 1,
+  "stops": [ { "color": "rgba(255,255,255,1)", "position": 0 },
+             { "color": "rgba(255,255,255,0)", "position": 1 } ] }
+// backgroundImage
+{ "url": "https://…", "resizeMode": "cover" }  // cover | contain | stretch | center
+```
+
+## Tool usage
+
+- **Open one change set.** Discover the target with `list_paywalls`, then call
+  `begin_paywall_edit({ slug })`. Pass the returned `changeSetId` and the same
+  `slug` to every mutation and preview call. Finish it after visual QA, or
+  revert it; never abandon an active change set.
+- **`get_paywall` first.** Learn the current tree and ids before editing. Pass
+  `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes return
+  as `{ id, type, name?, childCount }` stubs you expand with a follow-up
+  `get_paywall({ slug, nodeId })`). Cheaper than pulling the whole document every
+  turn.
+- **`edit_paywall` applies an ATOMIC batch.** Every op lands or none does. On
+  success you get the minted ids for `insert`/`replaceChildren` ops (keyed by op
+  index, parents-before-children) so you can address new nodes next. On failure
+  you get per-op errors naming the node, the allowed fields (with a did-you-mean),
+  and the allowed values — trust them and correct the batch. On a write conflict
+  the batch is re-applied against the latest LIVE tree, so concurrent designer
+  edits MERGE rather than clobber — a follow-up `get_paywall` may show a tree
+  shifted by another editor's changes.
+- **Merge semantics on `update`.** `set.style` merges per style field; other
+  objects merge per-field; arrays and scalars REPLACE wholesale. Send only the
+  fields you want to change.
+- **Ids are minted.** Never supply an id on an inserted node. Target existing
+  nodes with ids from `get_paywall`, the selection, or a prior insert's returned
+  ids.
+- **Selection ids are directly addressable.** When the context block lists
+  selected node ids, use them straight in ops (no need to re-locate them).
+- **`duplicate_subtree` preserves visual systems.** Prefer it over rebuilding a
+  repeated benefit, product option, card, or control from scratch. Fresh ids are
+  returned, so immediately tailor the clone's content/state with focused updates.
+- **`get_paywall_preview` is the visual checkpoint.** Capture the screen after
+  each meaningful visual section and after every correction pass. Inspect the
+  pixels; do not infer visual quality from the document tree alone.
+- **`finish_paywall_edit` is the completion gate.** It accepts only the exact signature
+  of the latest screenshot while the document is unchanged and
+  `unresolvedIssues` is empty. Any post-review edit requires a new screenshot.
+
+## Visual design and review workflow
+
+For broad design work, decide on one coherent direction before editing: audience
+and offer, visual mood, a restrained palette, typography scale, spacing rhythm,
+content hierarchy, and CTA treatment. Build one meaningful visual group at a
+time, then review it in the live screenshot. Prefer purposeful hierarchy and
+consistent systems over adding decoration.
+
+At every screenshot checkpoint, critique the rendered paywall against this
+rubric and correct visible issues with focused edits:
+
+- **Hierarchy and story:** the value proposition reads first, supporting proof
+  and benefits scan naturally, and the primary CTA is unmistakably dominant.
+- **Offer clarity:** product options, price/period, trial or billing terms, savings,
+  and the selected state are understandable without guesswork.
+- **Composition:** margins, gaps, alignment, radii, and repeated structures follow
+  a consistent rhythm; no section feels accidentally crowded or empty.
+- **Typography and color:** the type scale has clear roles, copy wraps cleanly,
+  contrast is legible, and accents are reserved for meaningful emphasis.
+- **Viewport fit:** no unintended clipping or horizontal overflow; safe areas are
+  respected; the CTA and essential offer information are reachable and sensibly
+  placed on the 375×812 screen.
+- **Purchase affordances:** selectable options look selectable, the CTA looks
+  tappable, and close, restore, legal, and subscription-term affordances are
+  present when appropriate.
+- **Polish:** imagery, icons, borders, shadows, and states render cleanly with no
+  placeholders, awkward truncation, inconsistent styling, or accidental defaults.
+
+Do not merely describe a problem found in the screenshot. Fix it, capture a new
+screenshot, and repeat until the review has no unresolved issues. Then call
+`finish_paywall_edit` with the final screenshot's document signature.
+
+### Op cheatsheet
+
+- `insert` — add a subtree under `parentId` at `index` (append if omitted).
+- `update` — partial data change on `nodeId` (`set`, merge semantics above).
+- `move` — reparent `nodeId` under `parentId` at `index` (cycles/illegal
+  containment rejected).
+- `remove` — delete `nodeId` and its subtree.
+- `replaceChildren` — swap `nodeId`'s whole child list for a new ordered one.
+
+## Worked examples
+
+### (a) Insert a screen's content in one batch
+
+Add a header row and a title inside the screen `scr_1` (ids returned are used
+implicitly by nesting the `children` inline):
+
+```json
+{ "edits": [
+  { "op": "insert", "parentId": "scr_1", "node": {
+      "type": "view", "name": "Header",
+      "style": { "flexDirection": "row", "justifyContent": "space-between", "alignItems": "center", "paddingTop": 16, "paddingBottom": 16 },
+      "children": [
+        { "type": "text", "name": "Title", "text": "Unlock Pro",
+          "style": { "fontSize": 28, "fontWeight": "700", "color": "rgba(255,255,255,1)" } }
+      ]
+  } }
+] }
+```
+
+### (b) Restyle the selected node
+
+The user has `view_9` selected and asks for a rounded indigo card. Change only
+the fields you mean to (style merges per field):
+
+```json
+{ "edits": [
+  { "op": "update", "nodeId": "view_9", "set": { "style": {
+      "backgroundColor": "rgba(99,102,241,1)",
+      "borderTopLeftRadius": 12, "borderTopRightRadius": 12,
+      "borderBottomRightRadius": 12, "borderBottomLeftRadius": 12,
+      "paddingTop": 16, "paddingRight": 16, "paddingBottom": 16, "paddingLeft": 16 } } }
+] }
+```
+
+### (c) Insert a component instance and bind it
+
+First `get_components` to read the component's path/slug, props, and actions.
+Then insert a `component` node. A `component` node's identity fields select which
+component to place; `props` binds its inputs and interactions/actions wire its
+outputs. Read the exact prop/action names from `get_components` (they differ per
+component) and follow the shapes the tool reports — do not assume field names.
+Bind a purchase to the component's declared action via the same interaction model
+as (d): a `purchase-product` action on the component's action slot.
+
+### (d) Variables, states, and actions (dynamic behavior without code)
+
+These three first-class document fields form a small no-code state machine:
+
+1. **Variables hold runtime state.** Put `localVariables` on a common ancestor so
+   the node and its descendants can read them. Supported values are
+   `{ key: "string", value }`, `{ key: "number", value }`,
+   `{ key: "boolean", value }`, and
+   `{ key: "product", value: { productId? } }`. Variables may live on
+   `screen`, `view`, `scrollView`, `text`, `shape`, or `path`; lookup is
+   lexical (own node, then nearest ancestor). Declare shared state on the nearest
+   common ancestor and reference its stable `id`, never its display `name`.
+2. **Actions change state or call the host.** A `view` or `scrollView` has an
+   `interactions` array of `{ id, trigger: { type: "click" }, action }`. The
+   action is `none`, `close-paywall`, `set-variable`, or `purchase-product`.
+   Values/products can be literals or variable references. A `component` exposes
+   named outputs through `actionBindings`; bind those names (from
+   `get_components`) to the same actions, optionally reading a field from the
+   component's emitted payload with `{ type: "action-payload", ... }`.
+3. **States react to variables.** Stateful nodes have a `states` array. Each state
+   has `{ id, name, condition, overrides }`. A condition is DNF:
+   `{ type: "or", value: [ { type: "and", value: [predicates...] } ] }` — any
+   OR branch may match, while every predicate in an AND branch must match.
+   Predicates are `equals`, `not-equals`, `greater-than`,
+   `greater-than-or-equal`, `less-than`, or `less-than-or-equal`; each operand
+   is a typed literal or `{ type: "variable-reference", value: { id } }`.
+   Matching states merge `overrides.style` over the base style immediately after
+   a variable changes. Later matching states win conflicting fields. On `view`
+   and `scrollView`, a state may also replace an interaction's action through
+   `overrides.actions`; its `interactionId` must be the interaction array-entry
+   id returned by `get_paywall`. State style overrides do not auto-enable gated
+   groups, so include `backgroundEnabled`, `borderEnabled`, `shadowEnabled`,
+   `fillEnabled`, or `strokeEnabled` when an override first turns on that group.
+
+This is enough for product selection, toggles, conditional emphasis/visibility,
+multi-step sections, close buttons, and a CTA that purchases the selected product
+without TSX. Build the cycle as **declare variable → click action updates variable
+→ matching state changes appearance/behavior → CTA consumes variable**.
+
+Example: declare the selected product on the screen, make a yearly option select
+it and show its selected style, then have the CTA purchase the current selection.
+Repeat the option action/state for each other product id:
+
+```json
+{ "edits": [
+  { "op": "update", "nodeId": "scr_1", "set": { "localVariables": [
+    { "id": "selected_product", "name": "Selected product",
+      "value": { "key": "product", "value": { "productId": "yearly" } } }
+  ] } },
+  { "op": "update", "nodeId": "view_yearly", "set": {
+    "interactions": [
+      { "id": "select_yearly", "trigger": { "type": "click" },
+        "action": { "type": "set-variable", "payload": {
+          "variableId": "selected_product",
+          "newValue": { "type": "literal", "value": {
+            "key": "product", "value": { "productId": "yearly" }
+          } }
+        } }
+      }
+    ],
+    "states": [
+      { "id": "yearly_selected", "name": "Selected", "condition": {
+          "type": "or", "value": [
+            { "type": "and", "value": [
+              { "type": "equals", "value": {
+                "left": { "type": "variable-reference", "value": { "id": "selected_product" } },
+                "right": { "type": "literal", "value": {
+                  "key": "product", "value": { "productId": "yearly" }
+                } }
+              } }
+            ] }
+          ]
+        }, "overrides": { "style": {
+          "backgroundEnabled": true,
+          "backgroundColor": "rgba(99,102,241,0.16)",
+          "borderEnabled": true,
+          "borderColor": "rgba(99,102,241,1)",
+          "borderTopWidth": 2, "borderRightWidth": 2,
+          "borderBottomWidth": 2, "borderLeftWidth": 2
+        } }
+      }
+    ]
+  } },
+  { "op": "update", "nodeId": "view_cta", "set": { "interactions": [
+    { "id": "purchase_selected", "trigger": { "type": "click" },
+      "action": { "type": "purchase-product", "payload": {
+        "type": "variable-reference", "variableId": "selected_product"
+      } }
+    }
+  ] } }
+] }
+```
+
+Arrays replace wholesale on `update`, so preserve every existing variable,
+interaction, state, prop binding, or action binding you still need. The `id`
+fields inside these arrays are stable logical ids for sub-records, not node ids.
+
+## Doctrine: build with the document, reach for code only when you must
+
+**The document (`edit_paywall`) is ALWAYS the primary way to build a paywall.**
+Static layout, styling, literal text, local variables, click/component actions,
+and variable-driven style/visibility states all belong in the document. Write a
+code component ONLY when the document genuinely cannot express what you need:
+
+- **Mapping/looping** — one row per product, or any list built by iterating over
+  runtime data (`usePaywallProducts()`).
+- **Structural branching** — different children/content that cannot be expressed
+  by a variable-driven style state (simple conditional visibility via `display`
+  belongs in document states).
+- **Transient pressed / hover / focus pseudo-states** — document states are driven
+  by variables, not pointer/gesture lifecycle.
+- **Animation.**
+- **Custom formatting logic** — deriving "$5/mo billed yearly", percent savings,
+  trial copy.
+- **Runtime-data-bound text** — a `text` node renders a LITERAL string; it cannot
+  interpolate a product price or a variable. Data-driven text needs a component.
+
+### Decision checklist
+
+1. Static layout + literal text? → **document** (`screen`/`view`/`text` nodes).
+2. Selection, toggle, conditional styling/visibility, close, or purchase flow? →
+   **document variables + states + actions.**
+3. Text needs runtime data (price, count, formatting)? → code component for that
+   text only.
+4. A list produced by iterating products/data? → code component (map).
+5. Structural branching not expressible with state style overrides? → code component.
+6. Pressed/hover/animated visuals? → code component.
+7. Otherwise → **document.** Prefer building with nodes.
+
+When a code component IS needed, keep it **as small as possible** — one focused
+interactive widget — then place it as a `component` node in the document.
+
+## Code-component authoring (`components/<name>.tsx`)
+
+A code component is a normal React component defined with `defineComponent` from
+`@voidhash/paywalls`. Its identity is its path; a `component` node references it by
+that path. Primitives, hooks, and full `StyleProp` arrays are all available here
+(this is the escape hatch — real JS is allowed). Author it with `write_component`;
+on success it compiles and becomes placeable, on failure you get compile
+diagnostics to fix (the compile loop is internal to `write_component`).
+
+```tsx
+import {
+  defineComponent,
+  View,
+  Text,
+  Pressable,
+  Slot,
+  useSelectedProduct,
+} from "@voidhash/paywalls";
+import type { PaywallProduct } from "@voidhash/paywalls";
+
+export default defineComponent({
+  title: "Product Option",
+  description: "A selectable pricing row.",
+  props: (p) => ({
+    product: p.ref("product"),
+    accentColor: p.string().editor("color").default("rgba(99, 102, 241, 1)"),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ product: a.string() }),
+  }),
+  previews: {
+    default: {
+      data: {
+        products: [
+          {
+            id: "yearly",
+            slug: "yearly",
+            displayName: "Yearly",
+            priceString: "$59.99",
+            period: "year",
+          },
+        ],
+      },
+    },
+  },
+  render: ({ props, actions }) => {
+    const { selectedProductId } = useSelectedProduct();
+    const isSelected = selectedProductId === props.product.id;
+    return (
+      <Pressable onPress={() => actions.onSelect({ product: props.product.id })}>
+        <View
+          style={[
+            { paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16, borderTopLeftRadius: 12, borderTopRightRadius: 12, borderBottomLeftRadius: 12, borderBottomRightRadius: 12, borderTopWidth: 1, borderRightWidth: 1, borderBottomWidth: 1, borderLeftWidth: 1, borderColor: "rgba(255, 255, 255, 0.15)" },
+            isSelected && { borderColor: props.accentColor },
+          ]}
+        >
+          <Text style={{ fontSize: 16, fontWeight: "600", color: "rgba(255, 255, 255, 1)" }}>
+            {props.product.displayName}
+          </Text>
+          <Text style={{ fontSize: 14, color: "rgba(200, 200, 210, 1)" }}>
+            {props.product.priceString}
+          </Text>
+          <Slot />
+        </View>
+      </Pressable>
+    );
+  },
+});
+```
+
+### `defineComponent` shape
+
+`defineComponent({ title?, description?, props?, actions?, previews?, panel?, render })`.
+There is **NO `id`** — a component is identified by its FILE PATH
+(`components/<name>.tsx`), which is the path a `component` node references.
+
+- `render: ({ props, actions }) => ReactNode` — the template. `props` has
+  defaults filled and `.optional()` props typed `T | undefined`; `actions` are
+  typed callbacks.
+- The file MUST default-export the `defineComponent({ … })` definition itself —
+  `export default defineComponent({ … })`. Do NOT export a `.component` property or
+  any other shape — only the `defineComponent(...)` result is valid.
+
+### Prop builders (`p`)
+
+Chainable, immutable: `.label(str)`, `.default(value)`, `.optional()`, and
+`.editor("color")` (string props only).
+
+- `p.string()` — string. `p.number()`, `p.boolean()`.
+- `p.select([...] as const)` — a string constrained to the options.
+- `p.image()` — an image URL/asset reference (string).
+- `p.ref("product")` — a product reference; the template receives a
+  `PaywallProduct`.
+- `p.component()` — a nested element the editor fills; the template receives a
+  `ReactNode`.
+- `p.array(item)` — a homogeneous list; `item` must be a non-array builder.
+
+### Action builders (`a`)
+
+- `a.action()` — a payload-free action; template callback is `() => void`.
+- `a.action({ field: a.string() })` — a typed payload; template callback is
+  `(payload) => void`. Payload fields are scalars: `a.string()`, `a.number()`,
+  `a.boolean()`.
+
+### Primitives (`@voidhash/paywalls`)
+
+`View`, `Text`, `Pressable`, `ScrollView`, `Image`, `Slot`. `style` accepts a
+`StyleProp` — a single object OR an array with falsy entries ignored
+(`style={[base, cond && override]}`) — using the SAME RN style vocabulary as the
+document (plus text-only `textTransform`/`textDecorationLine`/`fontStyle`/`fontFamily`).
+
+- `<Pressable onPress={…}>` — the tap surface. Pass a declared action directly
+  (`onPress={actions.onSelect}`) or wrap it (`onPress={() => actions.onSelect({…})}`).
+- `<Image source={"…" | { uri }} resizeMode="cover" />`.
+- `<Slot />` renders children the document passed into the component instance;
+  `<Slot fallback={…} />` renders fallback when none were passed.
+
+### Runtime hooks (`@voidhash/paywalls`)
+
+- `usePaywallProducts(): readonly PaywallProduct[]` — the available products
+  (map over these to render a list).
+- `useSelectedProduct(): { selectedProduct, selectedProductId, selectProduct }`.
+- `usePaywallVariables(): Record<string, string | number | boolean>`.
+- `usePaywallActions(): { purchase, restore, close, openUrl, track, selectProduct }`.
+- `usePaywallStatus(): { status, productId?, error? }` —
+  `idle`/`purchasing`/`purchased`/`restoring`/`restored`/`failed`.
+- `usePaywallConfig(): PaywallRuntimeConfig` (products, variables, locale,
+  platform).
+
+`PaywallProduct`:
+`{ id, slug, displayName, description?, price?, priceString, currencyCode?, period?, trialPeriod? }`
+where `period` is `"month" | "year" | "week" | "lifetime"`.
+
+### Renaming and deleting components
+
+- `rename_component(fromPath, toPath)` — moves the component. Instances
+  referencing the old path are RE-POINTED automatically (rename cascade), so the
+  `component` nodes keep working.
+- `delete_component(path)` — removes the component. Existing instances degrade to
+  placeholders (they are NOT cascade-deleted), so replace or remove those
+  `component` nodes afterward.
+
+## Tool vocabulary
+
+- `list_paywalls()` — discover paywall slugs in the project.
+- `begin_paywall_edit({ slug })` — capture the revert baseline and return a
+  `changeSetId`.
+- `get_paywall({ slug, nodeId?, depth? })` — read cleaned document JSON (subtree
+  + depth for economy).
+- `get_components({ slug })` — list every placeable catalog, local, and builtin
+  component with its authoring contract.
+- `read_component({ slug, path })` — read a local code component's TSX source.
+- `edit_paywall({ slug, changeSetId, edits })` — apply an atomic batch of document
+  ops (returns minted ids or per-op errors).
+- `duplicate_subtree({ slug, changeSetId, nodeId, parentId, index? })` — clone a
+  visual subtree with fresh ids.
+- `write_component({ slug, changeSetId, path, source })` — create or replace a
+  compiled code component.
+- `rename_component({ slug, changeSetId, fromPath, toPath })` — move a component
+  and re-point its instances.
+- `delete_component({ slug, changeSetId, path })` — delete a component; existing
+  instances degrade to placeholders.
+- `get_paywall_preview({ slug, changeSetId })` — render the version-bound PNG
+  used for visual QA.
+- `finish_paywall_edit({ slug, changeSetId, reviewedDocumentSignature, verdict,
+  unresolvedIssues: [] })` — accept a visually verified edit.
+- `revert_paywall_edit({ changeSetId })` — restore the captured baseline.
+
+Read (`get_paywall`/`get_components`) before you write, use the minted ids the
+edits return, and trust the field/value errors the validator gives you.
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 369819838..1d3a4e75d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -194,6 +194,11 @@ overrides:
   xcode>uuid: 11.1.1
   yaml@>=2.0.0 <2.8.3: 2.8.3
 
+pnpmfileChecksum: sha256-FmQ3RWUsIKZQg8qJsKhZOw8G3ylUwk93HvwW4x5Nr5A=
+
+patchedDependencies:
+  '@earendil-works/pi-ai@0.80.7': 3fbb9897213abf111acd834b26232ea390b59077e07751ef66a6e45bd00a4bd3
+
 importers:
 
   .:
@@ -250,6 +255,9 @@ importers:
 
   apps/backend:
     dependencies:
+      '@voidhash/agent':
+        specifier: workspace:*
+        version: link:../../packages/agent
       '@voidhash/ai-shared':
         specifier: workspace:*
         version: link:../../packages/ai-shared
@@ -289,9 +297,6 @@ importers:
       '@workos-inc/node':
         specifier: 9.2.0
         version: 9.2.0
-      ai:
-        specifier: ^7.0.0
-        version: 7.0.22(zod@4.3.6)
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -301,9 +306,6 @@ importers:
       preact:
         specifier: ^10.25.4
         version: 10.29.2
-      workers-ai-provider:
-        specifier: ^3.0.0
-        version: 3.3.1(@ai-sdk/provider@4.0.3)(ai@7.0.22(zod@4.3.6))
       zod:
         specifier: 'catalog:'
         version: 4.3.6
@@ -334,22 +336,22 @@ importers:
         version: link:../../packages/tsconfig
       alchemy:
         specifier: 'catalog:'
-        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0)
+        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0)
       typescript:
         specifier: 'catalog:'
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   apps/cli:
     dependencies:
       '@better-auth/api-key':
         specifier: 'catalog:'
-        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
+        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
       '@effect/platform-node':
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -364,7 +366,7 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -501,7 +503,7 @@ importers:
         version: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   apps/mimic-db:
     dependencies:
@@ -538,10 +540,10 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   apps/studio:
     dependencies:
@@ -581,13 +583,10 @@ importers:
         version: 5.6.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   apps/www:
     dependencies:
-      '@ai-sdk/react':
-        specifier: ^4.0.0
-        version: 4.0.23(react@19.1.0)(zod@4.3.6)
       '@apple/app-store-server-library':
         specifier: ^1.6.0
         version: 1.6.0
@@ -684,9 +683,9 @@ importers:
       '@tanstack/zod-adapter':
         specifier: 'catalog:'
         version: 1.167.0(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(zod@4.3.6)
-      '@voidhash/ai-shared':
+      '@voidhash/agent':
         specifier: workspace:*
-        version: link:../../packages/ai-shared
+        version: link:../../packages/agent
       '@voidhash/api-contracts':
         specifier: workspace:*
         version: link:../../packages/api-contracts
@@ -738,9 +737,6 @@ importers:
       '@workos/authkit-tanstack-react-start':
         specifier: 0.8.2
         version: 0.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(@workos-inc/node@8.13.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(typescript@6.0.3)
-      ai:
-        specifier: ^7.0.0
-        version: 7.0.22(zod@4.3.6)
       class-variance-authority:
         specifier: ^0.7.1
         version: 0.7.1
@@ -864,7 +860,7 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 'catalog:'
-        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@tailwindcss/vite':
         specifier: 'catalog:'
         version: 4.3.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -909,10 +905,10 @@ importers:
         version: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   examples/mimic-example:
     dependencies:
@@ -1000,7 +996,7 @@ importers:
         version: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   examples/react-native-example:
     dependencies:
@@ -1178,10 +1174,10 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 4.0.0-beta.84
-        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@srsholmes/vitest-react-native':
         specifier: ^0.1.5
-        version: 0.1.5(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 0.1.5(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@types/react':
         specifier: ~19.1.10
         version: 19.1.17
@@ -1226,7 +1222,7 @@ importers:
         version: 5.1.4(typescript@5.9.3)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   libraries/web:
     dependencies:
@@ -1271,6 +1267,40 @@ importers:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@20.0.3)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
 
+  packages/agent:
+    dependencies:
+      '@earendil-works/pi-agent-core':
+        specifier: 0.80.7
+        version: 0.80.7(ws@8.21.0)(zod@4.4.3)
+      '@earendil-works/pi-ai':
+        specifier: 0.80.7
+        version: 0.80.7(patch_hash=3fbb9897213abf111acd834b26232ea390b59077e07751ef66a6e45bd00a4bd3)(ws@8.21.0)(zod@4.4.3)
+      '@voidhash/platform':
+        specifier: workspace:*
+        version: link:../platform
+      effect:
+        specifier: 4.0.0-beta.84
+        version: 4.0.0-beta.84
+      typebox:
+        specifier: 1.1.38
+        version: 1.1.38
+    devDependencies:
+      '@voidhash/platform-node':
+        specifier: workspace:*
+        version: link:../../selfhost/platform-node
+      '@voidhash/tsconfig':
+        specifier: workspace:*
+        version: link:../tsconfig
+      typescript:
+        specifier: 'catalog:'
+        version: 6.0.3
+      vite-plus:
+        specifier: 'catalog:'
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      wrangler:
+        specifier: ^4.0.0
+        version: 4.110.0
+
   packages/ai-shared:
     dependencies:
       '@voidhash/mimic-core':
@@ -1294,7 +1324,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1338,7 +1368,7 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -1418,7 +1448,7 @@ importers:
     devDependencies:
       '@effect/vitest':
         specifier: 'catalog:'
-        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
+        version: 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@voidhash/generated-clients':
         specifier: workspace:*
         version: link:../generated-clients
@@ -1433,10 +1463,10 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   packages/db:
     dependencies:
@@ -1448,7 +1478,7 @@ importers:
         version: link:../lib
       drizzle-orm:
         specifier: 1.0.0-rc.3
-        version: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3)
+        version: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3)
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -1470,10 +1500,10 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: 'catalog:'
-        version: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+        version: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   packages/emails:
     dependencies:
@@ -1530,7 +1560,7 @@ importers:
         version: 5.9.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -1580,7 +1610,7 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -1598,7 +1628,7 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -1626,7 +1656,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1651,7 +1681,7 @@ importers:
         version: 5.8.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -1679,7 +1709,7 @@ importers:
         version: 4.21.0
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1707,7 +1737,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1750,7 +1780,7 @@ importers:
         version: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -1775,7 +1805,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vitest:
         specifier: ^3.2.7
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
@@ -1806,7 +1836,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       vite-tsconfig-paths:
         specifier: ^5.1.4
         version: 5.1.4(typescript@6.0.3)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -1953,6 +1983,9 @@ importers:
       '@effect/sql-pg':
         specifier: 'catalog:'
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)
+      '@voidhash/agent':
+        specifier: workspace:*
+        version: link:../../packages/agent
       '@voidhash/api-contracts':
         specifier: workspace:*
         version: link:../../packages/api-contracts
@@ -2037,7 +2070,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   selfhost/platform-node:
     dependencies:
@@ -2074,7 +2107,7 @@ importers:
         version: 6.0.3
       vite-plus:
         specifier: 'catalog:'
-        version: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+        version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
 packages:
 
@@ -2086,34 +2119,6 @@ packages:
       graphql:
         optional: true
 
-  '@ai-sdk/gateway@4.0.16':
-    resolution: {integrity: sha512-9iYxdOLquoOFk5e+02P9qfBIA+EJU0FNJvyjGxi4iXJabt2+GlbaCg7TX0sTtxOsBVkdabkatqWM6+kvp53tBg==}
-    engines: {node: '>=22'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/mcp@2.0.10':
-    resolution: {integrity: sha512-LP47CEk3e6BwCqXamvv4nKbgOWQ5z5T/qS/J2fola5h98KTy7JT7I1yw5LKtB89MZBLviYmEh98Ep4ovHOz/vA==}
-    engines: {node: '>=22'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/provider-utils@5.0.7':
-    resolution: {integrity: sha512-OSm5/5kdrHa11WIOo5LYgDKnxYWp5aB/wx5EXRHi0jpUGduMDeB6oht9U6p+UNNWIP3F/EqPpV8d7vdP/iRnqg==}
-    engines: {node: '>=22'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/provider@4.0.3':
-    resolution: {integrity: sha512-e0CpNWJUY7OxAFAnCZkw+ri9QOHWwTs1tXP42782KFGCU07qt8NiXCrCVowyCB5dP2r5/Uls+g2oPd8kOJn9dw==}
-    engines: {node: '>=22'}
-
-  '@ai-sdk/react@4.0.23':
-    resolution: {integrity: sha512-nJ96yQE1013tafK9Pec3uSGTScXg8dc3t4xyydm+a0AfkaSewR58+Eg3l+xqmQAR8tzFAgo/38we5DeXrcgcqw==}
-    engines: {node: '>=22'}
-    peerDependencies:
-      react: ^18 || ~19.0.1 || ~19.1.2 || ^19.2.1
-
   '@alcalzone/ansi-tokenize@0.2.5':
     resolution: {integrity: sha512-3NX/MpTdroi0aKz134A6RC2Gb2iXVECN4QaAXnvCIxxIm3C3AVB1mkUe8NaaiyvOpDfsrqWhYtj+Q6a62RrTsw==}
     engines: {node: '>=18'}
@@ -2135,6 +2140,15 @@ packages:
   '@antfu/utils@8.1.1':
     resolution: {integrity: sha512-Mex9nXf9vR6AhcXmMrlz/HVgYYZpVGJ6YlPgwl7UnaFpnshXs6EK/oa5Gpf3CzENMjkvEx2tQtntGnb7UtSTOQ==}
 
+  '@anthropic-ai/sdk@0.91.1':
+    resolution: {integrity: sha512-LAmu761tSN9r66ixvmciswUj/ZC+1Q4iAfpedTfSVLeswRwnY3n2Nb6Tsk+cLPP28aLOPWeMgIuTuCcMC6W/iw==}
+    hasBin: true
+    peerDependencies:
+      zod: ^3.25.0 || ^4.0.0
+    peerDependenciesMeta:
+      zod:
+        optional: true
+
   '@apple/app-store-server-library@1.6.0':
     resolution: {integrity: sha512-CmwCXLtkR6RdYjJjuiV2V7RNN6cJLeI7NoZtuDDhalM4/6MfNsZLrTyZvDWKWJsArh0LKoiplK+cc5+PCkwKUQ==}
 
@@ -2145,6 +2159,16 @@ packages:
     resolution: {integrity: sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==}
     engines: {node: '>=16.0.0'}
 
+  '@aws-crypto/sha256-browser@5.2.0':
+    resolution: {integrity: sha512-AXfN/lGotSQwu6HNcEsIASo7kWXZ5HYWvfOmSNKDsEqC4OashTp8alTmaz+F7TC2L083SFv5RdB+qU3Vs1kZqw==}
+
+  '@aws-crypto/sha256-js@5.2.0':
+    resolution: {integrity: sha512-FFQQyu7edu4ufvIZ+OadFpHHOt+eSTBaYaki44c+akjg7qZg9oOQeLlk77F6tSYqjDAFClrHJk9tMf0HdVyOvA==}
+    engines: {node: '>=16.0.0'}
+
+  '@aws-crypto/supports-web-crypto@5.2.0':
+    resolution: {integrity: sha512-iAvUotm021kM33eCdNfwIN//F77/IADDSs58i+MDaOqFrVjZo9bAal0NK7HurRuWLLpF1iLX7gbWrjHjeo+YFg==}
+
   '@aws-crypto/util@5.2.0':
     resolution: {integrity: sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==}
 
@@ -2152,6 +2176,10 @@ packages:
     resolution: {integrity: sha512-EKnvkXSmz3IpA99tCNuI+dLFXyZyClSm8zns9sB/elvkU+MTuomAs6toJMPMBf98/fICG/urXDkzGz0/c3yyAQ==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/client-bedrock-runtime@3.1048.0':
+    resolution: {integrity: sha512-u+NT61JZEkRFtpL0CAw1N1dwxnaLgwVXQl/zjJxTGgLyS/jTIdg2SdoEoCTHxgDyCnqa1HEi9QOoE9/pYRNpOQ==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/client-cognito-identity@3.1081.0':
     resolution: {integrity: sha512-ipDgvZ3Hy8kaFrkwj62yuoghKkZi5WrWTiJnaqGc/ntbuAuijIkRWhzSb8d1MGEE+qb+vFFTrWVFwGSqt76TCA==}
     engines: {node: '>=20.0.0'}
@@ -2164,6 +2192,10 @@ packages:
     resolution: {integrity: sha512-8qh/6EYb7hl/ZwVfQufhbMEZs1gQIc7GbdrIf4eprQJ7cv042+74nE6l3YDfyWNzb9iPXb8fRyYSHkNIk5eE6Q==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/core@3.975.2':
+    resolution: {integrity: sha512-iyeXwziyjJpixq5OmhsIyrSWx8vwcI7gDo4yRUC3EP7NQtOo9iAJiIEc3G+/HkhtNXqOhofiCK7Lc34Sq+fJWg==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/credential-provider-cognito-identity@3.972.56':
     resolution: {integrity: sha512-nedaZz6Wz2FGUBMsWhlvBPGIkTMfRuMJ99YDHJI4CaC31JS8WPyTavEAio74cfd5nGhi0A8XASB4fZA5VqTdOQ==}
     engines: {node: '>=20.0.0'}
@@ -2204,10 +2236,22 @@ packages:
     resolution: {integrity: sha512-UHWvxd1F5nfBXBRXtQaXWoNT8CYKXZovLQOyz6XZlgFTGc2mWzzPGspOfnh49jwvB2qzsdH046i9jnnmND+64w==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/eventstream-handler-node@3.972.27':
+    resolution: {integrity: sha512-F4vQtU+gCT6LmESV1sinN47WslDc/vEL1vWvKHeUA+OmuvWgY54Eljauu+15HaTX/g5MDHAdsHxRfZqlZP4LyQ==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/middleware-eventstream@3.972.23':
+    resolution: {integrity: sha512-H4phGWCJ/K/VtOs68DTyl77zhNhf4rJ6Tf5IDsHts1cCcrB/FGO2f/8Tf2wBYNvzaaTDCFa4jtj/S0eWUd4DMg==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/middleware-sdk-s3@3.972.62':
     resolution: {integrity: sha512-k8JJwYXVYlOOjWnPZDThQS1xDFJgi5Dokt73qFlDtrZAbdcint5aIdjB9XgJAAQVP5OoqcefQmh1FYXiPpvsvw==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/middleware-websocket@3.972.40':
+    resolution: {integrity: sha512-xBUCdsjAq0mq7K6mYpwm7Ax12Bdu08kjmE5S7vOboHgUxRpcxxap5PqkR2MMpaeMYi1taV/dBL/z2DVs6ecJoQ==}
+    engines: {node: '>= 14.0.0'}
+
   '@aws-sdk/nested-clients@3.997.31':
     resolution: {integrity: sha512-BDHTpwcsZHEBNEJzOg/B1BkFYJxAXY50dau/NyVWs3d51F0WgIUGSWZot/Os+N3KpDhXeaXnz37mWffAvduREw==}
     engines: {node: '>=20.0.0'}
@@ -2220,6 +2264,10 @@ packages:
     resolution: {integrity: sha512-8+srXqYIF8KYMLC4FxMLEM5Ek7kUNibJu1R4m8/fUhhNYIZZz26oGtKkCr8I/HiG2fFQxBvaGgQZT4/mqRCSnA==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/token-providers@3.1048.0':
+    resolution: {integrity: sha512-k0y/GcuesuSfWyUM0WamrGyeZmltRYaPbHO82UDA6mZ/doB+FOHKutikPAtSXMn/hDz970cF+iRuuiYO9VEbAA==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/token-providers@3.1083.0':
     resolution: {integrity: sha512-s0woKnxuHrExLc5L2ArIH5BMkbonHPtt+5hSBM8oknp9M6QTuUmmAmJ2E0EdzCGONrO+8+ADPqvv6UX0nNcc7A==}
     engines: {node: '>=20.0.0'}
@@ -2228,10 +2276,22 @@ packages:
     resolution: {integrity: sha512-QIBrw90CDm4O0UaIIzkU6DrFdeJzEb2Va5EPEVpyldj6sHJxB6cshhStJuhZxk3wR3PmjJlYsjPmY1kNb+KGBg==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/types@3.974.1':
+    resolution: {integrity: sha512-W0IQZR0eaBqlBFIIofMapaWkw1W0U+Xi4dvW+BqwmCEMd8Ng2U6IhkxuPSjMVnR8klLjfuS9PeZWUl1N6UaZdg==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/util-locate-window@3.965.8':
+    resolution: {integrity: sha512-uUbMs1cBZPafD0ohUj6EwNf0fPZ534NvBxHox4hjX+0Rxq5paSYUem7+hi833pYrzrcnBATKIYpR02MDXT5M9g==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/xml-builder@3.972.34':
     resolution: {integrity: sha512-wHhWL1y7sN3enBA8POrPpQM5jCcmu2ozyhbRei4c8OjVcEaEs6yLucLa/pla457ggS/ysuy7bosagz3HaJkZXA==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/xml-builder@3.972.35':
+    resolution: {integrity: sha512-pXzaWe3evZhjxDXAlMnqISe/XefTCGwBJG4nFTXaWSgAnMkqPEhxEPqJNhhpGesEvKFhvNpnozJJ4GTL11bRYw==}
+    engines: {node: '>=20.0.0'}
+
   '@aws/lambda-invoke-store@0.3.0':
     resolution: {integrity: sha512-sl4Bm6yiMNYrZKkqqDFWN0UfnWhlS8ivKxrYl+6t0gCLrqr8y3B2IqZZbFRkfaVVp7C/baApyh71P+LeE1A2sQ==}
     engines: {node: '>=18.0.0'}
@@ -3284,6 +3344,10 @@ packages:
     resolution: {integrity: sha512-vs3/Zc1dHvT171btW5nMoPsPCJ6QVJ5pp7obxzO5sjqwFx/jjz9wwCAqcFOdc2DhprugDBaVn+4dVY8hG3A9nw==}
     engines: {node: '>=20'}
 
+  '@cloudflare/kv-asset-handler@0.5.0':
+    resolution: {integrity: sha512-jxQYkj8dSIzc0cD6cMMNdOc1UVjqSqu8BZdor5s8cGjW2I8BjODt/kWPVdY+u9zj3ms75Q5qaZgnxUad83+eAg==}
+    engines: {node: '>=22.0.0'}
+
   '@cloudflare/unenv-preset@2.16.1':
     resolution: {integrity: sha512-ECxObrMfyTl5bhQf/lZCXwo5G6xX9IAUo+nDMKK4SZ8m4Jvvxp52vilxyySSWh2YTZz8+HQ07qGH/2rEom1vDw==}
     peerDependencies:
@@ -3299,30 +3363,64 @@ packages:
     cpu: [x64]
     os: [darwin]
 
+  '@cloudflare/workerd-darwin-64@1.20260708.1':
+    resolution: {integrity: sha512-HXFCvhS1wpg3uXO0CLUwmwC41i2loM5FSK69EUchOBpmYBAXxT1oHLm6EOA5lqhTk5Mu9kjRiQYxa1GwKPwfJg==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [darwin]
+
   '@cloudflare/workerd-darwin-arm64@1.20260526.1':
     resolution: {integrity: sha512-rcyu0iANYfaiezKh3Mcao1O4IIgVfQldxduiL5TZT1sP0NIeRY4YReSTrzPxNnXxSYaIqaqRHMcHbUM/ic4knA==}
     engines: {node: '>=16'}
     cpu: [arm64]
     os: [darwin]
 
+  '@cloudflare/workerd-darwin-arm64@1.20260708.1':
+    resolution: {integrity: sha512-JVlJaKDoRTVKSroHIlf8g3UCPjKj4iDbMZE2CNYht5qQ+2rL0FAUiVlV82G3BqKnnw9kHYnnsMzC08b9zVtdzA==}
+    engines: {node: '>=16'}
+    cpu: [arm64]
+    os: [darwin]
+
   '@cloudflare/workerd-linux-64@1.20260526.1':
     resolution: {integrity: sha512-5EZAEnlLwa9oGJRo8Nd3iY5Wcd9ROGNNG90xNIGp8MEjj8v2jTn42NC47fCZKFdnLj3+S+vWEhu1x0GVJnALjA==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [linux]
 
+  '@cloudflare/workerd-linux-64@1.20260708.1':
+    resolution: {integrity: sha512-3daE60YdD7YX0Jtuzc9DE/r/qMkmx8ZvHTkF8Mzmp3F5tbzlV0DAzmu5PFUPF2WuvtKbAhZKbvC2cHmWpQYxnA==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [linux]
+
   '@cloudflare/workerd-linux-arm64@1.20260526.1':
     resolution: {integrity: sha512-X/YBQXeXFeCN7QTStoWrATEBc9WKl7PIqkw/dQkjyJ72gh3rkLe0+Xkzp3wO7gtxTDQMa7NPGy1W4+sdMf8q1g==}
     engines: {node: '>=16'}
     cpu: [arm64]
     os: [linux]
 
+  '@cloudflare/workerd-linux-arm64@1.20260708.1':
+    resolution: {integrity: sha512-VLdNYOx5Hj+9C6isy0ACWZsbMtSxex2DIJWEe7cZxUdlphZ58ZT8zxNXK8yunFiowd34hn3VwGMopdvdj8lvmA==}
+    engines: {node: '>=16'}
+    cpu: [arm64]
+    os: [linux]
+
   '@cloudflare/workerd-windows-64@1.20260526.1':
     resolution: {integrity: sha512-R+tqpFFdcfZIljx8fIW9rj9fRTtDgfoA2yonsfAGa6e8snrmr+38mdFHtkRC0D3UyZpn/hOtmXiUBfdX2gMR7Q==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [win32]
 
+  '@cloudflare/workerd-windows-64@1.20260708.1':
+    resolution: {integrity: sha512-bC/aSAwLy16Vjo24i9XU3aWH+eRgz7NeR5xPKavGbembO18ZywYTQbXh14eXtY6fAqN3RzRG8psijTdhX4xydA==}
+    engines: {node: '>=16'}
+    cpu: [x64]
+    os: [win32]
+
+  '@cspotcode/source-map-support@0.8.1':
+    resolution: {integrity: sha512-IchNf6dN4tHoMFIn/7OE8LWZ19Y6q/67Bmf6vnGREv8RSbBVb9LPJxEcnwrcwX6ixSvaiGoomAUvu4YSxXrVgw==}
+    engines: {node: '>=12'}
+
   '@csstools/color-helpers@5.1.0':
     resolution: {integrity: sha512-S11EXWJyy0Mz5SYvRmY8nJYTFFd1LCNV+7cXyAgQtOOuzb4EsgfqDufL+9esx72/eLhsRdGZwaldu/h+E4t4BA==}
     engines: {node: '>=18'}
@@ -3464,6 +3562,15 @@ packages:
   '@drizzle-team/brocli@0.11.0':
     resolution: {integrity: sha512-hD3pekGiPg0WPCCGAZmusBBJsDqGUR66Y452YgQsZOnkdQ7ViEPKuyP4huUGEZQefp8g34RRodXYmJ2TbCH+tg==}
 
+  '@earendil-works/pi-agent-core@0.80.7':
+    resolution: {integrity: sha512-EFjyAuoz2kn24sR9Q5A86sZCG6mD+nz58DCsA2I2wxgmS50cF1tSLCBOZaHKI5U9Y3pJs4BefeK3LRkB5TdJag==}
+    engines: {node: '>=22.19.0'}
+
+  '@earendil-works/pi-ai@0.80.7':
+    resolution: {integrity: sha512-8RLKLwe5TFM9kKFMNu/lTzveduq4GxZbnlG6ba8FAhLeb5wJP4zbj1eBumKBRvggpFQnW5R/Vo2a8zTlHsV9SQ==}
+    engines: {node: '>=22.19.0'}
+    hasBin: true
+
   '@effect-aws/client-s3@2.0.0-beta.4':
     resolution: {integrity: sha512-fcrAOopriDJ47vdZLG1apXY3VnAd1EtSyaHRfWyX7dYy8/AKi88p/XsfHIj48FMXac9KtXGBpXEfBDQl0+mnWA==}
     peerDependencies:
@@ -4209,6 +4316,159 @@ packages:
   '@iconify/utils@3.1.4':
     resolution: {integrity: sha512-b1S7B1k9ohZ+iNTi2ATxbRYG9fTrJmUT0rc46bvVnNxqNRGW7dyo/vRREwyniI5IRN2RSJHDcm+s3BjWrSAjHw==}
 
+  '@img/colour@1.1.0':
+    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
+    engines: {node: '>=18'}
+
+  '@img/sharp-darwin-arm64@0.34.5':
+    resolution: {integrity: sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-darwin-x64@0.34.5':
+    resolution: {integrity: sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-libvips-darwin-arm64@1.2.4':
+    resolution: {integrity: sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-libvips-darwin-x64@1.2.4':
+    resolution: {integrity: sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-libvips-linux-arm64@1.2.4':
+    resolution: {integrity: sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-arm@1.2.4':
+    resolution: {integrity: sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-ppc64@1.2.4':
+    resolution: {integrity: sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-riscv64@1.2.4':
+    resolution: {integrity: sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-s390x@1.2.4':
+    resolution: {integrity: sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-x64@1.2.4':
+    resolution: {integrity: sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
+    resolution: {integrity: sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
+    resolution: {integrity: sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linux-arm64@0.34.5':
+    resolution: {integrity: sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-arm@0.34.5':
+    resolution: {integrity: sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-ppc64@0.34.5':
+    resolution: {integrity: sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-riscv64@0.34.5':
+    resolution: {integrity: sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-s390x@0.34.5':
+    resolution: {integrity: sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-x64@0.34.5':
+    resolution: {integrity: sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linuxmusl-arm64@0.34.5':
+    resolution: {integrity: sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linuxmusl-x64@0.34.5':
+    resolution: {integrity: sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-wasm32@0.34.5':
+    resolution: {integrity: sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [wasm32]
+
+  '@img/sharp-win32-arm64@0.34.5':
+    resolution: {integrity: sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [arm64]
+    os: [win32]
+
+  '@img/sharp-win32-ia32@0.34.5':
+    resolution: {integrity: sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@img/sharp-win32-x64@0.34.5':
+    resolution: {integrity: sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+    cpu: [x64]
+    os: [win32]
+
   '@ioredis/commands@1.5.0':
     resolution: {integrity: sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==}
 
@@ -4333,6 +4593,9 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
+  '@jridgewell/trace-mapping@0.3.9':
+    resolution: {integrity: sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ==}
+
   '@js-temporal/polyfill@0.5.1':
     resolution: {integrity: sha512-hloP58zRVCRSpgDxmqCWJNlizAlUgJFqG2ypq79DCvyv9tHjRYMDOcPFjzfl/A1/YxDvRCZz8wvZvmapQnKwFQ==}
     engines: {node: '>=12'}
@@ -4403,6 +4666,14 @@ packages:
   '@mermaid-js/parser@1.2.0':
     resolution: {integrity: sha512-oYPyv8A4As1yH5Bx+04iQEQxXuIQDe0GKCNSRgao6z8AM9jixXIfP0vsppRLvGf+nKIOb9/LdpWA4YuJiVvESA==}
 
+  '@mistralai/mistralai@2.2.6':
+    resolution: {integrity: sha512-W8pX7zHxjJvMIpw8JMxeJEleapXX0Q9NPszdNzqkM3MIEoIGPObdodujj+WHteXEvGfaP/AMwlNyRfEzSY6dQQ==}
+    peerDependencies:
+      '@opentelemetry/api': ^1.9.0
+    peerDependenciesMeta:
+      '@opentelemetry/api':
+        optional: true
+
   '@monaco-editor/loader@1.7.0':
     resolution: {integrity: sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA==}
 
@@ -4577,6 +4848,10 @@ packages:
     resolution: {integrity: sha512-hAX0pT/73190NLqBPPWSdBVGtbY6VOhWYK3qqHqtXQ1gK7kS2yz4+ivsN07hpJ6I3aeMtKP6J6npsEKOAzuTLA==}
     engines: {node: '>=20.0'}
 
+  '@opentelemetry/api@1.9.0':
+    resolution: {integrity: sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==}
+    engines: {node: '>=8.0.0'}
+
   '@opentelemetry/semantic-conventions@1.43.0':
     resolution: {integrity: sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==}
     engines: {node: '>=14'}
@@ -4965,6 +5240,15 @@ packages:
   '@polka/url@1.0.0-next.29':
     resolution: {integrity: sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==}
 
+  '@poppinss/colors@4.1.6':
+    resolution: {integrity: sha512-H9xkIdFswbS8n1d6vmRd8+c10t2Qe+rZITbbDHHkQixH5+2x1FDGmi/0K+WgWiqQFKPSlIYB7jlH6Kpfn6Fleg==}
+
+  '@poppinss/dumper@0.6.5':
+    resolution: {integrity: sha512-NBdYIb90J7LfOI32dOewKI1r7wnkiH6m920puQ3qHUeZkxNkQiFnXVWoE6YtFSv6QOiPPf7ys6i+HWWecDz7sw==}
+
+  '@poppinss/exception@1.2.3':
+    resolution: {integrity: sha512-dCED+QRChTVatE9ibtoaxc+WkdzOSjYTKi/+uacHWIsfodVfpsueo3+DKpgU5Px8qXjgmXkSvhXvSCz3fnP9lw==}
+
   '@quansync/fs@1.0.0':
     resolution: {integrity: sha512-4TJ3DFtlf1L5LDMaM6CanJ/0lckGNtJcMjQ1NAV6zDmA0tEHKZtxNKin8EgPaVX1YzljbxckyT2tJrpQKAtngQ==}
 
@@ -6540,6 +6824,10 @@ packages:
   '@sinclair/typebox@0.34.41':
     resolution: {integrity: sha512-6gS8pZzSXdyRHTIqoqSVknxolr1kzfy4/CeDnrzsVz8TTIWUbOBr6gnzOmTYJ3eXQNh4IYHIGi5aIL7sOZ2G/g==}
 
+  '@sindresorhus/is@7.2.0':
+    resolution: {integrity: sha512-P1Cz1dWaFfR4IR+U13mqqiGsLFf1KbayybWwdd2vfctdV6hDpUkgCY0nKOLLTMSoRd/jJNjtbqzf13K8DCCXQw==}
+    engines: {node: '>=18'}
+
   '@sinonjs/commons@3.0.1':
     resolution: {integrity: sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==}
 
@@ -6566,6 +6854,10 @@ packages:
     resolution: {integrity: sha512-Kran9kcysdZdoiVZQ3EXfHTbZ48kJ6Er2sZ4eHaL2LSsqVlucn/8xrgxj36/z9qlrToNGNf+na4u6xp1Nz08KQ==}
     engines: {node: '>=18.0.0'}
 
+  '@smithy/node-http-handler@4.7.3':
+    resolution: {integrity: sha512-/jPhevcTFPMVl6KNjbaI47iOg1zxC7IsnX4PQDGVZKMFceOXtB8IEYaB7a9VvkP/3oC60WzTeKocvSI7vLT0vA==}
+    engines: {node: '>=18.0.0'}
+
   '@smithy/node-http-handler@4.9.5':
     resolution: {integrity: sha512-bNqdxTQTxmLbomSmlkZFz8L6B/feQ2HHzw4L2zY7Ecp2XffYAZq2uzdWDdxJHJFbEvqd+SRuluJso0P8+xPdbw==}
     engines: {node: '>=18.0.0'}
@@ -6605,6 +6897,9 @@ packages:
   '@socket.io/component-emitter@3.1.2':
     resolution: {integrity: sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==}
 
+  '@speed-highlight/core@1.2.17':
+    resolution: {integrity: sha512-Z92FwKpCtfaW1V0jTU/fh3QzYEZN8wDwrzRIBoADCJfn4mJCNcJN/XegifX7BDrQ8/h9Xh/JnbyMchL0FqXrkg==}
+
   '@srsholmes/vitest-react-native@0.1.5':
     resolution: {integrity: sha512-LqUsKKevWSrma/q2jMVOz/yFUZ4KRTkHSBMTCbsyyx5m8RSAdgPci6FPT9rbnnEJv8nUmcEZIUbYWqiJQpQYEg==}
     engines: {node: '>=20'}
@@ -7658,10 +7953,6 @@ packages:
     peerDependencies:
       react: '>= 16.8.0'
 
-  '@vercel/oidc@3.2.0':
-    resolution: {integrity: sha512-UycprH3T6n3jH0k44NHMa7pnFHGu/N05MjojYr+Mc6I7obkoLIJujSWwin1pCvdy/eOxrI/l3uDLQsmcrOb4ug==}
-    engines: {node: '>= 20'}
-
   '@vitejs/plugin-react@4.7.0':
     resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==}
     engines: {node: ^14.18.0 || >=16.0.0}
@@ -7863,9 +8154,6 @@ packages:
   '@webgpu/types@0.1.71':
     resolution: {integrity: sha512-mMy8/ODcKhab808co15eW+yN+HgXoQxRQHTiBV9Mrvl1r0ufnid7YOcI+gi4eUWSWl9ezD6TW2KXccrL8HCh2A==}
 
-  '@workflow/serde@4.1.0':
-    resolution: {integrity: sha512-pav4F2BoirECWR7Nf1TKt+2eETcBj7jj4cBefQ8VXQCA6NPkaKeLfj/zMgi+3zYV5ZIBT4GuUiphsj0/b9hPQQ==}
-
   '@workos-inc/node@8.13.0':
     resolution: {integrity: sha512-NgQKHpwh8AbT4KvAsW91Y+4f4jja2IvFPQ5atcy5NUxUMVRgXzRFEee3erawfXrTmiCVqJjd9PljHySKBXmHKQ==}
     engines: {node: '>=20.15.0'}
@@ -7935,12 +8223,6 @@ packages:
     resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==}
     engines: {node: '>= 14'}
 
-  ai@7.0.22:
-    resolution: {integrity: sha512-iAXYwQtR18qN7GXwNmGVAQM4uSJOh2+nZ5RP9NtDXfH5d4tlYyYzAM133O3U+eVcyWrvNRzecN9yW58xpCdfMg==}
-    engines: {node: '>=22'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
   ajv-formats@3.0.1:
     resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
     peerDependencies:
@@ -8338,6 +8620,9 @@ packages:
   birpc@4.0.0:
     resolution: {integrity: sha512-LShSxJP0KTmd101b6DRyGBj57LZxSDYWKitQNW/mi8GRMvZb078Uf9+pveax1DrVL89vm7mWe+TovdI/UDOuPw==}
 
+  blake3-wasm@2.1.5:
+    resolution: {integrity: sha512-F1+K8EbfOZE49dtoPtmxUQrpXaBIl3ICvasLh+nJta0xkz+9kF/7uet9fLnwKqhDrmj6g+6K3Tw9yQPUg2ka5g==}
+
   boolbase@1.0.0:
     resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
 
@@ -8729,6 +9014,10 @@ packages:
     resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
     engines: {node: '>= 0.6'}
 
+  cookie@1.1.1:
+    resolution: {integrity: sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==}
+    engines: {node: '>=18'}
+
   core-js-compat@3.47.0:
     resolution: {integrity: sha512-IGfuznZ/n7Kp9+nypamBhvwdwLsW6KC8IOaURw2doAK5e98AG3acVLdh0woOnEqCfUtS+Vu882JE4k/DAm3ItQ==}
 
@@ -9436,6 +9725,9 @@ packages:
   error-ex@1.3.4:
     resolution: {integrity: sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==}
 
+  error-stack-parser-es@1.0.5:
+    resolution: {integrity: sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA==}
+
   error-stack-parser@2.1.4:
     resolution: {integrity: sha512-Sk5V6wVazPhq5MhpO+AUxJn5x7XSXGl1R93Vn7i+zS15KDVxQijejNCrz8340/2bgLBjR9GtEG8ZVKONDjcqGQ==}
 
@@ -9762,10 +10054,6 @@ packages:
     resolution: {integrity: sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==}
     engines: {node: '>=0.8.x'}
 
-  eventsource-parser@3.1.0:
-    resolution: {integrity: sha512-kJezFj9YFAMLeORyi7aCLxLbD5/qWMQnoMVlVPyHIll7lgRJCc3JVln9Vgl9nwQi0YkMnhdGTMNn7CkRRAptMg==}
-    engines: {node: '>=18.0.0'}
-
   exec-async@2.2.0:
     resolution: {integrity: sha512-87OpwcEiMia/DeiKFzaQNBNFeN3XkkpYIh9FyOqq5mS2oKv3CBE67PXoEKcr6nodWdXNogTiQ0jE2NGuoffXPw==}
 
@@ -11089,6 +11377,10 @@ packages:
   json-parse-even-better-errors@2.3.1:
     resolution: {integrity: sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==}
 
+  json-schema-to-ts@3.1.1:
+    resolution: {integrity: sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==}
+    engines: {node: '>=16'}
+
   json-schema-traverse@0.4.1:
     resolution: {integrity: sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==}
 
@@ -11098,9 +11390,6 @@ packages:
   json-schema-typed@8.0.2:
     resolution: {integrity: sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==}
 
-  json-schema@0.4.0:
-    resolution: {integrity: sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==}
-
   json-stable-stringify-without-jsonify@1.0.1:
     resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
 
@@ -11153,6 +11442,10 @@ packages:
     resolution: {integrity: sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==}
     engines: {node: '>=6'}
 
+  kleur@4.1.5:
+    resolution: {integrity: sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==}
+    engines: {node: '>=6'}
+
   kubernetes-types@1.30.0:
     resolution: {integrity: sha512-Dew1okvhM/SQcIa2rcgujNndZwU8VnSapDgdxlYoB84ZlpAD43U6KLAFqYo17ykSFGHNPrg0qry0bP+GJd9v7Q==}
 
@@ -11744,6 +12037,11 @@ packages:
     resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
     engines: {node: '>=4'}
 
+  miniflare@4.20260708.1:
+    resolution: {integrity: sha512-c94O9zRDISdqO18EHt6l0iF/fWgWt8p18PJvRsA/L/NJZ9Cfke3s/F5Blg1XXF7WDutVRzWVWy8Vy4LaT5ifsA==}
+    engines: {node: '>=22.0.0'}
+    hasBin: true
+
   minimatch@10.2.3:
     resolution: {integrity: sha512-Rwi3pnapEqirPSbWbrZaa6N3nmqq4Xer/2XooiOKyV3q12ML06f7MOuc5DVH8ONZIFhwIYQ3yzPH4nt7iWHaTg==}
     engines: {node: 18 || 20 || >=22}
@@ -12051,6 +12349,18 @@ packages:
     resolution: {integrity: sha512-7x81NCL719oNbsq/3mh+hVrAWmFuEYUqrq/Iw3kUzH8ReypT9QQ0BLoJS7/G9k6N81XjW4qHWtjWwe/9eLy1EQ==}
     engines: {node: '>=12'}
 
+  openai@6.26.0:
+    resolution: {integrity: sha512-zd23dbWTjiJ6sSAX6s0HrCZi41JwTA1bQVs0wLQPZ2/5o2gxOJA5wh7yOAUgwYybfhDXyhwlpeQf7Mlgx8EOCA==}
+    hasBin: true
+    peerDependencies:
+      ws: 8.21.0
+      zod: ^3.25 || ^4.0
+    peerDependenciesMeta:
+      ws:
+        optional: true
+      zod:
+        optional: true
+
   optionator@0.9.4:
     resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
     engines: {node: '>= 0.8.0'}
@@ -12156,6 +12466,9 @@ packages:
     resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
     engines: {node: '>= 0.8'}
 
+  partial-json@0.1.7:
+    resolution: {integrity: sha512-Njv/59hHaokb/hRUjce3Hdv12wd60MtM9Z5Olmn+nehe0QDAsRtRbJPvJ0Z91TusF0SuZRIvnM+S4l6EIP8leA==}
+
   patch-console@2.0.0:
     resolution: {integrity: sha512-0YNdUceMdaQwoKce1gatDScmMo5pu/tfABfnzEqeG0gtTmd7mh/WcwgUjtAeOU7N8nFFlbQBnFK2gXW5fGvmMA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -12193,6 +12506,9 @@ packages:
     resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
     engines: {node: 18 || 20 || >=22}
 
+  path-to-regexp@6.3.0:
+    resolution: {integrity: sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==}
+
   path-to-regexp@8.4.2:
     resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
 
@@ -12319,10 +12635,6 @@ packages:
   pixi.js@8.19.0:
     resolution: {integrity: sha512-pq1O6emA/GFjjeF+8d3Pb5t7knD8FsnfWGqQcRjYjsqFZ7QdzG1XgjLDUu0DFJRbafjV5+g8iNLFBx0b9649lg==}
 
-  pkce-challenge@5.0.1:
-    resolution: {integrity: sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==}
-    engines: {node: '>=16.20.0'}
-
   pkg-dir@4.2.0:
     resolution: {integrity: sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==}
     engines: {node: '>=8'}
@@ -13249,6 +13561,10 @@ packages:
   shallowequal@1.1.0:
     resolution: {integrity: sha512-y0m1JoUZSlPAjXVtPPW70aZWfIL/dSP7AFkRnniLCrK/8MDKog3TySTBmckD+RObVxH0v4Tox67+F14PdED2oQ==}
 
+  sharp@0.34.5:
+    resolution: {integrity: sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==}
+    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -13599,6 +13915,10 @@ packages:
     engines: {node: '>=16 || 14 >=14.17'}
     hasBin: true
 
+  supports-color@10.2.2:
+    resolution: {integrity: sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==}
+    engines: {node: '>=18'}
+
   supports-color@5.5.0:
     resolution: {integrity: sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==}
     engines: {node: '>=4'}
@@ -13624,11 +13944,6 @@ packages:
     peerDependencies:
       react: '>=17.0'
 
-  swr@2.4.2:
-    resolution: {integrity: sha512-ej644Y2bvkIajfR32KGeSSdBXQW+ScjGjkybZgSE7kFpk9eGnV44XY9FJylXi+W75pavSX1PVNB57W5EbhGIYw==}
-    peerDependencies:
-      react: ^16.11.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
   symbol-tree@3.2.4:
     resolution: {integrity: sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==}
 
@@ -13708,10 +14023,6 @@ packages:
   throat@5.0.0:
     resolution: {integrity: sha512-fcwX4mndzpLQKBS1DVYhGAcYaYt7vsHNIvQV+WXMvnow5cgjPphq5CaayLaGsjRdSCKZFNGt7/GYAuXaNOiYCA==}
 
-  throttleit@2.1.0:
-    resolution: {integrity: sha512-nt6AMGKW1p/70DF/hGBdJB57B8Tspmbp5gfJ8ilhLnt7kkr2ye7hzD6NVG8GGErk2HWF34igrL2CXmNIkzKqKw==}
-    engines: {node: '>=18'}
-
   tiny-invariant@1.3.3:
     resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
 
@@ -13832,6 +14143,9 @@ packages:
   trough@2.2.0:
     resolution: {integrity: sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==}
 
+  ts-algebra@2.0.0:
+    resolution: {integrity: sha512-FPAhNPFMrkwz76P7cdjdmiShwMynZYN6SgOujD1urY4oNm80Ou9oMdmbR45LotcKOXoy7wSmHkRFE6Mxbrhefw==}
+
   ts-api-utils@2.1.0:
     resolution: {integrity: sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==}
     engines: {node: '>=18.12'}
@@ -13981,6 +14295,9 @@ packages:
     resolution: {integrity: sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==}
     engines: {node: '>=20'}
 
+  typebox@1.1.38:
+    resolution: {integrity: sha512-pZ0aQPmMmXoUvSbeuWf/Hzsc+avNw/Zd6VeE8CFgkVGWyuHPJvqeJJDeJqLve+K70LvjYIoleGcoJHPT17cWoA==}
+
   typed-array-buffer@1.0.3:
     resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
     engines: {node: '>= 0.4'}
@@ -14502,20 +14819,19 @@ packages:
     engines: {node: '>=16'}
     hasBin: true
 
-  workers-ai-provider@3.3.1:
-    resolution: {integrity: sha512-vArwnmiAxQQF1clsXJd9ADn1xK9YUZVxE4umaMhrdsxM2kucxP430LfaoH4rn0AfoqtnuH3bfRhW1ak0r1x/8A==}
+  workerd@1.20260708.1:
+    resolution: {integrity: sha512-WAK+Kt/VVCSldH2qSr8lx46XCJ4Q+bdlHNaFqUtOHthBEIB8C1N8HVW+VOLrxDoTCk0NGNv0zajnBeQK4JOB9w==}
+    engines: {node: '>=16'}
+    hasBin: true
+
+  wrangler@4.110.0:
+    resolution: {integrity: sha512-xZeXKYi7hxQRF5anL+v77RkufJNpF9f3Eqeyqq2QBsETpLZgh0Agj0jJ6JPtkbgn6ukZdh8OK5egsGPWIditgg==}
+    engines: {node: '>=22.0.0'}
+    hasBin: true
     peerDependencies:
-      '@ai-sdk/anthropic': ^3.0.0
-      '@ai-sdk/google': ^3.0.0
-      '@ai-sdk/openai': ^3.0.0
-      '@ai-sdk/provider': ^3.0.0
-      ai: ^6.0.0
+      '@cloudflare/workers-types': ^5.20260708.1
     peerDependenciesMeta:
-      '@ai-sdk/anthropic':
-        optional: true
-      '@ai-sdk/google':
-        optional: true
-      '@ai-sdk/openai':
+      '@cloudflare/workers-types':
         optional: true
 
   wrap-ansi@7.0.0:
@@ -14661,12 +14977,23 @@ packages:
   yoga-layout@3.2.1:
     resolution: {integrity: sha512-0LPOt3AxKqMdFBZA3HBAt/t/8vIKq7VaQYbuA8WxCgung+p9TVyKRYdpvCb80HcdTN2NkbIKbhNwKUfm3tQywQ==}
 
+  youch-core@0.3.3:
+    resolution: {integrity: sha512-ho7XuGjLaJ2hWHoK8yFnsUGy2Y5uDpqSTq1FkHLK4/oqKtyUU1AFbOOxY4IpC9f0fTLjwYbslUz0Po5BpD1wrA==}
+
+  youch@4.1.0-beta.10:
+    resolution: {integrity: sha512-rLfVLB4FgQneDr0dv1oddCVZmKjcJ6yX6mS4pU82Mq/Dt9a3cLZQ62pDBL4AUO+uVrCvtWz3ZFUL2HFAFJ/BXQ==}
+
   zod-openapi@5.4.6:
     resolution: {integrity: sha512-P2jsOOBAq/6hCwUsMCjUATZ8szkMsV5VAwZENfyxp2Hc/XPJQpVwAgevWZc65xZauCwWB9LAn7zYeiCJFAEL+A==}
     engines: {node: '>=20'}
     peerDependencies:
       zod: ^3.25.74 || ^4.0.0
 
+  zod-to-json-schema@3.25.2:
+    resolution: {integrity: sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==}
+    peerDependencies:
+      zod: ^3.25.28 || ^4
+
   zod@3.25.76:
     resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
 
@@ -14712,47 +15039,9 @@ packages:
   zwitch@2.0.4:
     resolution: {integrity: sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==}
 
-snapshots:
-
-  '@0no-co/graphql.web@1.2.0': {}
-
-  '@ai-sdk/gateway@4.0.16(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 4.0.3
-      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
-      '@vercel/oidc': 3.2.0
-      zod: 4.3.6
-
-  '@ai-sdk/mcp@2.0.10(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 4.0.3
-      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
-      pkce-challenge: 5.0.1
-      zod: 4.3.6
-
-  '@ai-sdk/provider-utils@5.0.7(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 4.0.3
-      '@standard-schema/spec': 1.1.0
-      '@workflow/serde': 4.1.0
-      eventsource-parser: 3.1.0
-      zod: 4.3.6
-
-  '@ai-sdk/provider@4.0.3':
-    dependencies:
-      json-schema: 0.4.0
+snapshots:
 
-  '@ai-sdk/react@4.0.23(react@19.1.0)(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/mcp': 2.0.10(zod@4.3.6)
-      '@ai-sdk/provider': 4.0.3
-      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
-      ai: 7.0.22(zod@4.3.6)
-      react: 19.1.0
-      swr: 2.4.2(react@19.1.0)
-      throttleit: 2.1.0
-    transitivePeerDependencies:
-      - zod
+  '@0no-co/graphql.web@1.2.0': {}
 
   '@alcalzone/ansi-tokenize@0.2.5':
     dependencies:
@@ -14772,6 +15061,12 @@ snapshots:
 
   '@antfu/utils@8.1.1': {}
 
+  '@anthropic-ai/sdk@0.91.1(zod@4.4.3)':
+    dependencies:
+      json-schema-to-ts: 3.1.1
+    optionalDependencies:
+      zod: 4.4.3
+
   '@apple/app-store-server-library@1.6.0':
     dependencies:
       '@types/jsonwebtoken': 9.0.10
@@ -14799,6 +15094,26 @@ snapshots:
       '@aws-sdk/types': 3.974.0
       tslib: 2.8.1
 
+  '@aws-crypto/sha256-browser@5.2.0':
+    dependencies:
+      '@aws-crypto/sha256-js': 5.2.0
+      '@aws-crypto/supports-web-crypto': 5.2.0
+      '@aws-crypto/util': 5.2.0
+      '@aws-sdk/types': 3.974.0
+      '@aws-sdk/util-locate-window': 3.965.8
+      '@smithy/util-utf8': 2.3.0
+      tslib: 2.8.1
+
+  '@aws-crypto/sha256-js@5.2.0':
+    dependencies:
+      '@aws-crypto/util': 5.2.0
+      '@aws-sdk/types': 3.974.0
+      tslib: 2.8.1
+
+  '@aws-crypto/supports-web-crypto@5.2.0':
+    dependencies:
+      tslib: 2.8.1
+
   '@aws-crypto/util@5.2.0':
     dependencies:
       '@aws-sdk/types': 3.974.0
@@ -14813,6 +15128,23 @@ snapshots:
       '@smithy/types': 4.16.1
       tslib: 2.8.1
 
+  '@aws-sdk/client-bedrock-runtime@3.1048.0':
+    dependencies:
+      '@aws-crypto/sha256-browser': 5.2.0
+      '@aws-crypto/sha256-js': 5.2.0
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/credential-provider-node': 3.972.66
+      '@aws-sdk/eventstream-handler-node': 3.972.27
+      '@aws-sdk/middleware-eventstream': 3.972.23
+      '@aws-sdk/middleware-websocket': 3.972.40
+      '@aws-sdk/token-providers': 3.1048.0
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/fetch-http-handler': 5.6.5
+      '@smithy/node-http-handler': 4.9.5
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
   '@aws-sdk/client-cognito-identity@3.1081.0':
     dependencies:
       '@aws-sdk/core': 3.975.1
@@ -14849,6 +15181,17 @@ snapshots:
       bowser: 2.14.1
       tslib: 2.8.1
 
+  '@aws-sdk/core@3.975.2':
+    dependencies:
+      '@aws-sdk/types': 3.974.1
+      '@aws-sdk/xml-builder': 3.972.35
+      '@aws/lambda-invoke-store': 0.3.0
+      '@smithy/core': 3.29.3
+      '@smithy/signature-v4': 5.6.4
+      '@smithy/types': 4.16.1
+      bowser: 2.14.1
+      tslib: 2.8.1
+
   '@aws-sdk/credential-provider-cognito-identity@3.972.56':
     dependencies:
       '@aws-sdk/nested-clients': 3.997.31
@@ -14961,6 +15304,20 @@ snapshots:
       '@smithy/types': 4.16.1
       tslib: 2.8.1
 
+  '@aws-sdk/eventstream-handler-node@3.972.27':
+    dependencies:
+      '@aws-sdk/types': 3.974.1
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/middleware-eventstream@3.972.23':
+    dependencies:
+      '@aws-sdk/types': 3.974.1
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
   '@aws-sdk/middleware-sdk-s3@3.972.62':
     dependencies:
       '@aws-sdk/core': 3.975.1
@@ -14970,6 +15327,16 @@ snapshots:
       '@smithy/types': 4.16.1
       tslib: 2.8.1
 
+  '@aws-sdk/middleware-websocket@3.972.40':
+    dependencies:
+      '@aws-sdk/core': 3.975.2
+      '@aws-sdk/types': 3.974.1
+      '@smithy/core': 3.29.3
+      '@smithy/fetch-http-handler': 5.6.5
+      '@smithy/signature-v4': 5.6.4
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
   '@aws-sdk/nested-clients@3.997.31':
     dependencies:
       '@aws-sdk/core': 3.975.1
@@ -14997,6 +15364,15 @@ snapshots:
       '@smithy/types': 4.16.1
       tslib: 2.8.1
 
+  '@aws-sdk/token-providers@3.1048.0':
+    dependencies:
+      '@aws-sdk/core': 3.975.1
+      '@aws-sdk/nested-clients': 3.997.31
+      '@aws-sdk/types': 3.974.0
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
   '@aws-sdk/token-providers@3.1083.0':
     dependencies:
       '@aws-sdk/core': 3.975.1
@@ -15011,11 +15387,25 @@ snapshots:
       '@smithy/types': 4.16.1
       tslib: 2.8.1
 
+  '@aws-sdk/types@3.974.1':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
+  '@aws-sdk/util-locate-window@3.965.8':
+    dependencies:
+      tslib: 2.8.1
+
   '@aws-sdk/xml-builder@3.972.34':
     dependencies:
       '@smithy/types': 4.16.1
       tslib: 2.8.1
 
+  '@aws-sdk/xml-builder@3.972.35':
+    dependencies:
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
   '@aws/lambda-invoke-store@0.3.0': {}
 
   '@axiomhq/js@1.8.0':
@@ -16134,15 +16524,15 @@ snapshots:
 
   '@bcoe/v8-coverage@0.2.3': {}
 
-  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
+  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
-      better-auth: 1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       better-call: 1.3.7(zod@4.3.6)
       zod: 4.3.6
 
-  '@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)':
+  '@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)':
     dependencies:
       '@better-auth/utils': 0.4.2
       '@better-fetch/fetch': 1.3.1
@@ -16153,37 +16543,39 @@ snapshots:
       kysely: 0.28.17
       nanostores: 1.4.0
       zod: 4.3.6
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
 
-  '@better-auth/drizzle-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/drizzle-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/kysely-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)':
+  '@better-auth/kysely-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
     optionalDependencies:
       kysely: 0.28.17
 
-  '@better-auth/memory-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/memory-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/mongo-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/mongo-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/prisma-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
+  '@better-auth/prisma-adapter@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
 
-  '@better-auth/telemetry@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)':
+  '@better-auth/telemetry@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)':
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
       '@better-fetch/fetch': 1.3.1
 
@@ -16251,27 +16643,48 @@ snapshots:
 
   '@clickhouse/client@1.23.1': {}
 
-  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260526.1)':
+  '@cloudflare/kv-asset-handler@0.5.0': {}
+
+  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260708.1)':
     dependencies:
       unenv: 2.0.0-rc.24
     optionalDependencies:
-      workerd: 1.20260526.1
+      workerd: 1.20260708.1
 
   '@cloudflare/workerd-darwin-64@1.20260526.1':
     optional: true
 
+  '@cloudflare/workerd-darwin-64@1.20260708.1':
+    optional: true
+
   '@cloudflare/workerd-darwin-arm64@1.20260526.1':
     optional: true
 
+  '@cloudflare/workerd-darwin-arm64@1.20260708.1':
+    optional: true
+
   '@cloudflare/workerd-linux-64@1.20260526.1':
     optional: true
 
+  '@cloudflare/workerd-linux-64@1.20260708.1':
+    optional: true
+
   '@cloudflare/workerd-linux-arm64@1.20260526.1':
     optional: true
 
+  '@cloudflare/workerd-linux-arm64@1.20260708.1':
+    optional: true
+
   '@cloudflare/workerd-windows-64@1.20260526.1':
     optional: true
 
+  '@cloudflare/workerd-windows-64@1.20260708.1':
+    optional: true
+
+  '@cspotcode/source-map-support@0.8.1':
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.9
+
   '@csstools/color-helpers@5.1.0': {}
 
   '@csstools/css-calc@2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
@@ -16313,9 +16726,9 @@ snapshots:
       '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
       effect: 4.0.0-beta.84
 
-  '@distilled.cloud/cloudflare-rolldown-plugin@0.11.2(rolldown@1.0.1)(workerd@1.20260526.1)':
+  '@distilled.cloud/cloudflare-rolldown-plugin@0.11.2(rolldown@1.0.1)(workerd@1.20260708.1)':
     dependencies:
-      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260526.1)
+      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260708.1)
       magic-string: 0.30.21
       unenv: 2.0.0-rc.24
     optionalDependencies:
@@ -16333,10 +16746,10 @@ snapshots:
       '@effect/platform-bun': 4.0.0-beta.84(effect@4.0.0-beta.84)
       '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
 
-  '@distilled.cloud/cloudflare-vite-plugin@0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260526.1)':
+  '@distilled.cloud/cloudflare-vite-plugin@0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260708.1)':
     dependencies:
       '@distilled.cloud/cloudflare': 0.26.1(effect@4.0.0-beta.84)
-      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260526.1)
+      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260708.1)
       '@distilled.cloud/cloudflare-runtime': 0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)
       effect: 4.0.0-beta.84
     optionalDependencies:
@@ -16423,6 +16836,38 @@ snapshots:
 
   '@drizzle-team/brocli@0.11.0': {}
 
+  '@earendil-works/pi-agent-core@0.80.7(ws@8.21.0)(zod@4.4.3)':
+    dependencies:
+      '@earendil-works/pi-ai': 0.80.7(patch_hash=3fbb9897213abf111acd834b26232ea390b59077e07751ef66a6e45bd00a4bd3)(ws@8.21.0)(zod@4.4.3)
+      ignore: 7.0.5
+      typebox: 1.1.38
+      yaml: 2.9.0
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+      - ws
+      - zod
+
+  '@earendil-works/pi-ai@0.80.7(patch_hash=3fbb9897213abf111acd834b26232ea390b59077e07751ef66a6e45bd00a4bd3)(ws@8.21.0)(zod@4.4.3)':
+    dependencies:
+      '@anthropic-ai/sdk': 0.91.1(zod@4.4.3)
+      '@aws-sdk/client-bedrock-runtime': 3.1048.0
+      '@mistralai/mistralai': 2.2.6(@opentelemetry/api@1.9.0)
+      '@opentelemetry/api': 1.9.0
+      '@smithy/node-http-handler': 4.7.3
+      http-proxy-agent: 7.0.2
+      https-proxy-agent: 7.0.6
+      openai: 6.26.0(ws@8.21.0)(zod@4.4.3)
+      partial-json: 0.1.7
+      typebox: 1.1.38
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+      - ws
+      - zod
+
   '@effect-aws/client-s3@2.0.0-beta.4(effect@4.0.0-beta.84)':
     dependencies:
       '@aws-sdk/client-s3': 3.1085.0
@@ -16485,20 +16930,20 @@ snapshots:
     transitivePeerDependencies:
       - pg-native
 
-  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
-  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
+  '@effect/vitest@4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(effect@4.0.0-beta.84)':
     dependencies:
       effect: 4.0.0-beta.84
-      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   '@effect/vitest@4.0.0-beta.84(effect@4.0.0-beta.84)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
@@ -17192,6 +17637,102 @@ snapshots:
       '@iconify/types': 2.0.0
       import-meta-resolve: 4.2.0
 
+  '@img/colour@1.1.0': {}
+
+  '@img/sharp-darwin-arm64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-arm64': 1.2.4
+    optional: true
+
+  '@img/sharp-darwin-x64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-x64': 1.2.4
+    optional: true
+
+  '@img/sharp-libvips-darwin-arm64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-darwin-x64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-ppc64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-riscv64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-s390x@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linux-x64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
+    optional: true
+
+  '@img/sharp-linux-arm64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm64': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-arm@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-ppc64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-ppc64': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-riscv64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-riscv64': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-s390x@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-s390x': 1.2.4
+    optional: true
+
+  '@img/sharp-linux-x64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-x64': 1.2.4
+    optional: true
+
+  '@img/sharp-linuxmusl-arm64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
+    optional: true
+
+  '@img/sharp-linuxmusl-x64@0.34.5':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
+    optional: true
+
+  '@img/sharp-wasm32@0.34.5':
+    dependencies:
+      '@emnapi/runtime': 1.10.0
+    optional: true
+
+  '@img/sharp-win32-arm64@0.34.5':
+    optional: true
+
+  '@img/sharp-win32-ia32@0.34.5':
+    optional: true
+
+  '@img/sharp-win32-x64@0.34.5':
+    optional: true
+
   '@ioredis/commands@1.5.0': {}
 
   '@isaacs/fs-minipass@4.0.1':
@@ -17410,6 +17951,11 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
+  '@jridgewell/trace-mapping@0.3.9':
+    dependencies:
+      '@jridgewell/resolve-uri': 3.1.2
+      '@jridgewell/sourcemap-codec': 1.5.5
+
   '@js-temporal/polyfill@0.5.1':
     dependencies:
       jsbi: 4.3.2
@@ -17508,6 +18054,18 @@ snapshots:
     dependencies:
       '@chevrotain/types': 11.1.2
 
+  '@mistralai/mistralai@2.2.6(@opentelemetry/api@1.9.0)':
+    dependencies:
+      '@opentelemetry/semantic-conventions': 1.43.0
+      ws: 8.21.0
+      zod: 4.4.3
+      zod-to-json-schema: 3.25.2(zod@4.4.3)
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
   '@monaco-editor/loader@1.7.0':
     dependencies:
       state-local: 1.0.7
@@ -17675,6 +18233,8 @@ snapshots:
 
   '@oozcitak/util@10.0.0': {}
 
+  '@opentelemetry/api@1.9.0': {}
+
   '@opentelemetry/semantic-conventions@1.43.0': {}
 
   '@orama/orama@3.1.18': {}
@@ -17968,6 +18528,18 @@ snapshots:
 
   '@polka/url@1.0.0-next.29': {}
 
+  '@poppinss/colors@4.1.6':
+    dependencies:
+      kleur: 4.1.5
+
+  '@poppinss/dumper@0.6.5':
+    dependencies:
+      '@poppinss/colors': 4.1.6
+      '@sindresorhus/is': 7.2.0
+      supports-color: 10.2.2
+
+  '@poppinss/exception@1.2.3': {}
+
   '@quansync/fs@1.0.0':
     dependencies:
       quansync: 1.0.0
@@ -20214,6 +20786,8 @@ snapshots:
 
   '@sinclair/typebox@0.34.41': {}
 
+  '@sindresorhus/is@7.2.0': {}
+
   '@sinonjs/commons@3.0.1':
     dependencies:
       type-detect: 4.0.8
@@ -20248,6 +20822,12 @@ snapshots:
       '@smithy/core': 3.29.3
       tslib: 2.8.1
 
+  '@smithy/node-http-handler@4.7.3':
+    dependencies:
+      '@smithy/core': 3.29.3
+      '@smithy/types': 4.16.1
+      tslib: 2.8.1
+
   '@smithy/node-http-handler@4.9.5':
     dependencies:
       '@smithy/core': 3.29.3
@@ -20297,7 +20877,9 @@ snapshots:
 
   '@socket.io/component-emitter@3.1.2': {}
 
-  '@srsholmes/vitest-react-native@0.1.5(@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@speed-highlight/core@1.2.17': {}
+
+  '@srsholmes/vitest-react-native@0.1.5(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@react-native/polyfills': 2.0.0
       esbuild: 0.28.1
@@ -20307,7 +20889,7 @@ snapshots:
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       regenerator-runtime: 0.14.1
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   '@standard-schema/spec@1.1.0': {}
 
@@ -21464,8 +22046,6 @@ snapshots:
       '@use-gesture/core': 10.3.1
       react: 19.1.0
 
-  '@vercel/oidc@3.2.0': {}
-
   '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
@@ -21599,7 +22179,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.1.0
-      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
+      vitest: '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)'
 
   '@vitest/utils@3.2.7':
     dependencies:
@@ -21818,7 +22398,7 @@ snapshots:
   '@voidzero-dev/vite-plus-linux-x64-musl@0.1.24':
     optional: true
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -21835,6 +22415,7 @@ snapshots:
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 20.19.43
       '@vitest/ui': 4.1.0(@voidzero-dev/vite-plus-test@0.1.24)
       jsdom: 26.1.0
@@ -21860,7 +22441,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -21877,6 +22458,7 @@ snapshots:
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 20.19.43
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -21901,7 +22483,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -21918,6 +22500,7 @@ snapshots:
       vite: 7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 22.20.1
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -21942,7 +22525,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -21959,6 +22542,7 @@ snapshots:
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -21983,7 +22567,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -22000,6 +22584,7 @@ snapshots:
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -22024,7 +22609,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -22041,6 +22626,7 @@ snapshots:
       vite: 7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 24.10.4
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -22065,7 +22651,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -22082,6 +22668,7 @@ snapshots:
       vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -22106,7 +22693,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -22123,6 +22710,7 @@ snapshots:
       vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -22147,7 +22735,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -22164,6 +22752,7 @@ snapshots:
       vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -22188,7 +22777,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -22205,6 +22794,7 @@ snapshots:
       vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -22229,7 +22819,7 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@types/chai': 5.2.3
@@ -22246,6 +22836,7 @@ snapshots:
       vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       ws: 8.21.0
     optionalDependencies:
+      '@opentelemetry/api': 1.9.0
       '@types/node': 26.1.1
       jsdom: 26.1.0
     transitivePeerDependencies:
@@ -22278,8 +22869,6 @@ snapshots:
 
   '@webgpu/types@0.1.71': {}
 
-  '@workflow/serde@4.1.0': {}
-
   '@workos-inc/node@8.13.0':
     dependencies:
       eventemitter3: 5.0.4
@@ -22350,13 +22939,6 @@ snapshots:
 
   agent-base@7.1.4: {}
 
-  ai@7.0.22(zod@4.3.6):
-    dependencies:
-      '@ai-sdk/gateway': 4.0.16(zod@4.3.6)
-      '@ai-sdk/provider': 4.0.3
-      '@ai-sdk/provider-utils': 5.0.7(zod@4.3.6)
-      zod: 4.3.6
-
   ajv-formats@3.0.1(ajv@8.18.0):
     optionalDependencies:
       ajv: 8.18.0
@@ -22375,7 +22957,7 @@ snapshots:
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
-  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260526.1)(ws@8.21.0):
+  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0):
     dependencies:
       '@alchemy.run/node-utils': 0.0.5
       '@aws-sdk/credential-providers': 3.1081.0
@@ -22383,13 +22965,13 @@ snapshots:
       '@distilled.cloud/aws': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/axiom': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/cloudflare': 0.26.1(effect@4.0.0-beta.84)
-      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260526.1)
+      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260708.1)
       '@distilled.cloud/cloudflare-runtime': 0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)
-      '@distilled.cloud/cloudflare-vite-plugin': 0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260526.1)
+      '@distilled.cloud/cloudflare-vite-plugin': 0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260708.1)
       '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/neon': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/planetscale': 0.26.1(effect@4.0.0-beta.84)
-      '@effect/vitest': 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
+      '@effect/vitest': 4.0.0-beta.84(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(effect@4.0.0-beta.84)
       '@libsql/client': 0.17.4
       '@octokit/rest': 22.0.1
       '@octokit/webhooks': 14.2.0
@@ -22419,7 +23001,7 @@ snapshots:
       '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
       '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
       drizzle-kit: 1.0.0-rc.3
-      drizzle-orm: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
+      drizzle-orm: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
       ws: 8.21.0
     transitivePeerDependencies:
       - '@types/react'
@@ -22824,15 +23406,15 @@ snapshots:
 
   before-after-hook@4.0.0: {}
 
-  better-auth@1.6.23(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
-      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/kysely-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)
-      '@better-auth/memory-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/mongo-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/prisma-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
-      '@better-auth/telemetry': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)
+      '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
+      '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/kysely-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(kysely@0.28.17)
+      '@better-auth/memory-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/mongo-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/prisma-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
+      '@better-auth/telemetry': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)
       '@better-auth/utils': 0.4.2
       '@better-fetch/fetch': 1.3.1
       '@noble/ciphers': 2.1.1
@@ -22879,6 +23461,8 @@ snapshots:
 
   birpc@4.0.0: {}
 
+  blake3-wasm@2.1.5: {}
+
   boolbase@1.0.0: {}
 
   bowser@2.14.1: {}
@@ -23301,6 +23885,8 @@ snapshots:
 
   cookie@0.7.2: {}
 
+  cookie@1.1.1: {}
+
   core-js-compat@3.47.0:
     dependencies:
       browserslist: 4.28.1
@@ -23817,30 +24403,34 @@ snapshots:
       get-tsconfig: 4.14.0
       jiti: 2.7.0
 
-  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6):
+  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6):
     optionalDependencies:
       '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
       '@libsql/client': 0.17.4
+      '@opentelemetry/api': 1.9.0
       '@sinclair/typebox': 0.34.41
       '@types/pg': 8.20.0
       bun-types: 1.3.14
       effect: 4.0.0-beta.84
       mysql2: 3.16.0
       pg: 8.22.0
+      typebox: 1.1.38
       valibot: 1.4.2(typescript@6.0.3)
       zod: 4.3.6
     optional: true
 
-  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3):
+  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3):
     optionalDependencies:
       '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
       '@libsql/client': 0.17.4
+      '@opentelemetry/api': 1.9.0
       '@sinclair/typebox': 0.34.41
       '@types/pg': 8.20.0
       bun-types: 1.3.14
       effect: 4.0.0-beta.84
       mysql2: 3.16.0
       pg: 8.22.0
+      typebox: 1.1.38
       valibot: 1.4.2(typescript@6.0.3)
       zod: 4.4.3
 
@@ -23957,6 +24547,8 @@ snapshots:
     dependencies:
       is-arrayish: 0.2.1
 
+  error-stack-parser-es@1.0.5: {}
+
   error-stack-parser@2.1.4:
     dependencies:
       stackframe: 1.3.4
@@ -24512,8 +25104,6 @@ snapshots:
 
   events@3.3.0: {}
 
-  eventsource-parser@3.1.0: {}
-
   exec-async@2.2.0: {}
 
   execa@5.1.1:
@@ -26466,14 +27056,17 @@ snapshots:
 
   json-parse-even-better-errors@2.3.1: {}
 
+  json-schema-to-ts@3.1.1:
+    dependencies:
+      '@babel/runtime': 7.29.7
+      ts-algebra: 2.0.0
+
   json-schema-traverse@0.4.1: {}
 
   json-schema-traverse@1.0.0: {}
 
   json-schema-typed@8.0.2: {}
 
-  json-schema@0.4.0: {}
-
   json-stable-stringify-without-jsonify@1.0.1: {}
 
   json-with-bigint@3.5.10: {}
@@ -26538,6 +27131,8 @@ snapshots:
 
   kleur@3.0.3: {}
 
+  kleur@4.1.5: {}
+
   kubernetes-types@1.30.0: {}
 
   kysely@0.28.17: {}
@@ -27451,6 +28046,18 @@ snapshots:
 
   min-indent@1.0.1: {}
 
+  miniflare@4.20260708.1:
+    dependencies:
+      '@cspotcode/source-map-support': 0.8.1
+      sharp: 0.34.5
+      undici: 7.28.0
+      workerd: 1.20260708.1
+      ws: 8.21.0
+      youch: 4.1.0-beta.10
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
   minimatch@10.2.3:
     dependencies:
       brace-expansion: 5.0.7
@@ -27751,6 +28358,11 @@ snapshots:
       is-docker: 2.2.1
       is-wsl: 2.2.0
 
+  openai@6.26.0(ws@8.21.0)(zod@4.4.3):
+    optionalDependencies:
+      ws: 8.21.0
+      zod: 4.4.3
+
   optionator@0.9.4:
     dependencies:
       deep-is: 0.1.4
@@ -27775,7 +28387,7 @@ snapshots:
       object-keys: 1.1.1
       safe-push-apply: 1.0.0
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27798,9 +28410,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27823,9 +28435,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27848,9 +28460,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27873,9 +28485,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27898,9 +28510,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27923,9 +28535,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27948,9 +28560,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27973,9 +28585,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -27998,9 +28610,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28023,9 +28635,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28048,9 +28660,9 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxfmt@0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxfmt@0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -28073,7 +28685,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.52.0
       '@oxfmt/binding-win32-ia32-msvc': 0.52.0
       '@oxfmt/binding-win32-x64-msvc': 0.52.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   oxlint-tsgolint@0.23.0:
     optionalDependencies:
@@ -28084,7 +28696,7 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 0.23.0
       '@oxlint-tsgolint/win32-x64': 0.23.0
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28106,9 +28718,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28130,9 +28742,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28154,9 +28766,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28178,9 +28790,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28202,9 +28814,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28226,9 +28838,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28250,9 +28862,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28274,9 +28886,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28298,9 +28910,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28322,9 +28934,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28346,9 +28958,9 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
-  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
+  oxlint@1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.67.0
       '@oxlint/binding-android-arm64': 1.67.0
@@ -28370,7 +28982,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.67.0
       '@oxlint/binding-win32-x64-msvc': 1.67.0
       oxlint-tsgolint: 0.23.0
-      vite-plus: 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
   p-limit@2.3.0:
     dependencies:
@@ -28445,6 +29057,8 @@ snapshots:
 
   parseurl@1.3.3: {}
 
+  partial-json@0.1.7: {}
+
   patch-console@2.0.0: {}
 
   path-browserify@1.0.1: {}
@@ -28471,6 +29085,8 @@ snapshots:
       lru-cache: 11.5.2
       minipass: 7.1.3
 
+  path-to-regexp@6.3.0: {}
+
   path-to-regexp@8.4.2: {}
 
   pathe@2.0.3: {}
@@ -28600,8 +29216,6 @@ snapshots:
       parse-svg-path: 0.2.0
       tiny-lru: 11.4.7
 
-  pkce-challenge@5.0.1: {}
-
   pkg-dir@4.2.0:
     dependencies:
       find-up: 4.1.0
@@ -29807,6 +30421,37 @@ snapshots:
 
   shallowequal@1.1.0: {}
 
+  sharp@0.34.5:
+    dependencies:
+      '@img/colour': 1.1.0
+      detect-libc: 2.1.2
+      semver: 7.8.5
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.34.5
+      '@img/sharp-darwin-x64': 0.34.5
+      '@img/sharp-libvips-darwin-arm64': 1.2.4
+      '@img/sharp-libvips-darwin-x64': 1.2.4
+      '@img/sharp-libvips-linux-arm': 1.2.4
+      '@img/sharp-libvips-linux-arm64': 1.2.4
+      '@img/sharp-libvips-linux-ppc64': 1.2.4
+      '@img/sharp-libvips-linux-riscv64': 1.2.4
+      '@img/sharp-libvips-linux-s390x': 1.2.4
+      '@img/sharp-libvips-linux-x64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
+      '@img/sharp-linux-arm': 0.34.5
+      '@img/sharp-linux-arm64': 0.34.5
+      '@img/sharp-linux-ppc64': 0.34.5
+      '@img/sharp-linux-riscv64': 0.34.5
+      '@img/sharp-linux-s390x': 0.34.5
+      '@img/sharp-linux-x64': 0.34.5
+      '@img/sharp-linuxmusl-arm64': 0.34.5
+      '@img/sharp-linuxmusl-x64': 0.34.5
+      '@img/sharp-wasm32': 0.34.5
+      '@img/sharp-win32-arm64': 0.34.5
+      '@img/sharp-win32-ia32': 0.34.5
+      '@img/sharp-win32-x64': 0.34.5
+
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
@@ -30219,6 +30864,8 @@ snapshots:
       tinyglobby: 0.2.15
       ts-interface-checker: 0.1.13
 
+  supports-color@10.2.2: {}
+
   supports-color@5.5.0:
     dependencies:
       has-flag: 3.0.0
@@ -30242,12 +30889,6 @@ snapshots:
     dependencies:
       react: 19.1.0
 
-  swr@2.4.2(react@19.1.0):
-    dependencies:
-      dequal: 2.0.3
-      react: 19.1.0
-      use-sync-external-store: 1.6.0(react@19.1.0)
-
   symbol-tree@3.2.4: {}
 
   synckit@0.11.11:
@@ -30336,8 +30977,6 @@ snapshots:
 
   throat@5.0.0: {}
 
-  throttleit@2.1.0: {}
-
   tiny-invariant@1.3.3: {}
 
   tiny-lru@11.4.7: {}
@@ -30431,6 +31070,8 @@ snapshots:
 
   trough@2.2.0: {}
 
+  ts-algebra@2.0.0: {}
+
   ts-api-utils@2.1.0(typescript@5.9.3):
     dependencies:
       typescript: 5.9.3
@@ -30597,6 +31238,8 @@ snapshots:
     dependencies:
       tagged-tag: 1.0.0
 
+  typebox@1.1.38: {}
+
   typed-array-buffer@1.0.3:
     dependencies:
       call-bound: 1.0.4
@@ -31075,14 +31718,14 @@ snapshots:
       - tsx
       - yaml
 
-  vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31125,14 +31768,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31175,14 +31818,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31225,14 +31868,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(@vitest/ui@4.1.0(@voidzero-dev/vite-plus-test@0.1.24))(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31275,14 +31918,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@22.20.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31325,14 +31968,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31375,14 +32018,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@24.10.4)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@24.10.4)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31425,14 +32068,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31475,14 +32118,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31525,14 +32168,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31575,14 +32218,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -31625,14 +32268,14 @@ snapshots:
       - vite
       - yaml
 
-  vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
+  vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3):
     dependencies:
       '@oxc-project/types': 0.133.0
       '@oxlint/plugins': 1.61.0
       '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      '@voidzero-dev/vite-plus-test': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
-      oxfmt: 0.52.0(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
-      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      '@voidzero-dev/vite-plus-test': 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
+      oxfmt: 0.52.0(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
+      oxlint: 1.67.0(oxlint-tsgolint@0.23.0)(vite-plus@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3))
       oxlint-tsgolint: 0.23.0
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.1.24
@@ -32151,10 +32794,29 @@ snapshots:
       '@cloudflare/workerd-linux-arm64': 1.20260526.1
       '@cloudflare/workerd-windows-64': 1.20260526.1
 
-  workers-ai-provider@3.3.1(@ai-sdk/provider@4.0.3)(ai@7.0.22(zod@4.3.6)):
+  workerd@1.20260708.1:
+    optionalDependencies:
+      '@cloudflare/workerd-darwin-64': 1.20260708.1
+      '@cloudflare/workerd-darwin-arm64': 1.20260708.1
+      '@cloudflare/workerd-linux-64': 1.20260708.1
+      '@cloudflare/workerd-linux-arm64': 1.20260708.1
+      '@cloudflare/workerd-windows-64': 1.20260708.1
+
+  wrangler@4.110.0:
     dependencies:
-      '@ai-sdk/provider': 4.0.3
-      ai: 7.0.22(zod@4.3.6)
+      '@cloudflare/kv-asset-handler': 0.5.0
+      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260708.1)
+      blake3-wasm: 2.1.5
+      esbuild: 0.28.1
+      miniflare: 4.20260708.1
+      path-to-regexp: 6.3.0
+      unenv: 2.0.0-rc.24
+      workerd: 1.20260708.1
+    optionalDependencies:
+      fsevents: 2.3.3
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
 
   wrap-ansi@7.0.0:
     dependencies:
@@ -32261,10 +32923,27 @@ snapshots:
 
   yoga-layout@3.2.1: {}
 
+  youch-core@0.3.3:
+    dependencies:
+      '@poppinss/exception': 1.2.3
+      error-stack-parser-es: 1.0.5
+
+  youch@4.1.0-beta.10:
+    dependencies:
+      '@poppinss/colors': 4.1.6
+      '@poppinss/dumper': 0.6.5
+      '@speed-highlight/core': 1.2.17
+      cookie: 1.1.1
+      youch-core: 0.3.3
+
   zod-openapi@5.4.6(zod@4.3.6):
     dependencies:
       zod: 4.3.6
 
+  zod-to-json-schema@3.25.2(zod@4.4.3):
+    dependencies:
+      zod: 4.4.3
+
   zod@3.25.76: {}
 
   zod@4.3.6: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index be202030d..22b55374b 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -9,6 +9,8 @@ packages:
 ignoredBuiltDependencies:
   - "@mongodb-js/zstd"
   - node-liblzma
+patchedDependencies:
+  "@earendil-works/pi-ai@0.80.7": patches/@earendil-works__pi-ai@0.80.7.patch
 catalog:
   # Effect ecosystem (v4)
   effect: 4.0.0-beta.84
diff --git a/scripts/check-publication-boundary.mjs b/scripts/check-publication-boundary.mjs
index aeb06af32..fdab45886 100644
--- a/scripts/check-publication-boundary.mjs
+++ b/scripts/check-publication-boundary.mjs
@@ -5,12 +5,16 @@ import { dirname, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const repoRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const tracked = execFileSync("git", ["ls-files", "-z"], {
-  cwd: repoRoot,
-  encoding: "utf8",
-})
+const tracked = execFileSync(
+  "git",
+  ["ls-files", "--cached", "--others", "--exclude-standard", "-z"],
+  {
+    cwd: repoRoot,
+    encoding: "utf8",
+  },
+)
   .split("\0")
-  .filter(Boolean);
+  .filter((path) => path.length > 0 && existsSync(join(repoRoot, path)));
 const trackedSet = new Set(tracked);
 const failures = [];
 
@@ -48,10 +52,7 @@ for (const path of tracked) {
   if (privateRoots.some((prefix) => path.startsWith(prefix))) {
     failures.push(`private-only path is tracked in the OSS repository: ${path}`);
   }
-  if (
-    path.split("/").some((part) => part.startsWith(".env")) &&
-    !path.endsWith(".env.example")
-  ) {
+  if (path.split("/").some((part) => part.startsWith(".env")) && !path.endsWith(".env.example")) {
     failures.push(`non-example environment file is tracked: ${path}`);
   }
 }
@@ -143,7 +144,6 @@ if (failures.length > 0) {
 
 process.stdout.write(
   `Publication boundary OK — ${tracked.length} tracked files and ${
-    tracked.filter((path) => path === "package.json" || path.endsWith("/package.json"))
-      .length - 1
+    tracked.filter((path) => path === "package.json" || path.endsWith("/package.json")).length - 1
   } workspace packages checked.\n`,
 );
diff --git a/scripts/sync-plugins.ts b/scripts/sync-plugins.ts
new file mode 100644
index 000000000..f420ba19f
--- /dev/null
+++ b/scripts/sync-plugins.ts
@@ -0,0 +1,43 @@
+import { readFile, writeFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { findSkill } from "../apps/backend/src/ai/skills/registry.ts";
+
+const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const targetPaths = [
+  resolve(repositoryRoot, "integrations/claude-code/voidhash/skills/design-paywall/SKILL.md"),
+  resolve(repositoryRoot, "plugins/voidhash/skills/design-paywall/SKILL.md"),
+] as const;
+
+const definition = findSkill("paywall-authoring");
+if (definition === undefined) {
+  throw new Error("The paywall-authoring skill is not registered");
+}
+
+const generated = `---
+name: design-paywall
+description: ${definition.description}
+---
+
+${definition.body().trimEnd()}
+`;
+
+const check = process.argv.includes("--check");
+const stale: string[] = [];
+
+for (const targetPath of targetPaths) {
+  const current = await readFile(targetPath, "utf8").catch(() => undefined);
+  if (current === generated) continue;
+  if (check) {
+    stale.push(targetPath);
+  } else {
+    await writeFile(targetPath, generated);
+  }
+}
+
+if (stale.length > 0) {
+  throw new Error(
+    `Generated plugin skills are stale:\n${stale.join("\n")}\nRun pnpm sync:plugins.`,
+  );
+}
diff --git a/selfhost/.env.example b/selfhost/.env.example
index 26873ed84..9aebd8c96 100644
--- a/selfhost/.env.example
+++ b/selfhost/.env.example
@@ -29,6 +29,14 @@ WORKOS_COOKIE_NAME=wos-session
 WORKOS_COOKIE_PASSWORD=replace-with-at-least-32-random-characters
 WORKOS_REDIRECT_URI=http://localhost:5001/api/auth/callback
 WORKOS_WEBHOOK_SECRET=whsec_replace-me
+# Durable agent model access. Configure at least one provider.
+OPENAI_API_KEY=
+ANTHROPIC_API_KEY=
+# OPENAI_BASE_URL=https://your-openai-compatible-host/v1
+# VOIDHASH_AGENT_MODEL_PROVIDER=openai
+# VOIDHASH_AGENT_MODEL_ID=gpt-5.4
+# VOIDHASH_AGENT_VISION_MODEL_PROVIDER=openai
+# VOIDHASH_AGENT_VISION_MODEL_ID=gpt-5.4
 # Required when Google Play RTDN is enabled. These must match the Pub/Sub push subscription.
 GOOGLE_PUBSUB_PUSH_AUDIENCE=
 GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL=
diff --git a/selfhost/README.md b/selfhost/README.md
index b68288445..0ed1eec3e 100644
--- a/selfhost/README.md
+++ b/selfhost/README.md
@@ -61,6 +61,17 @@ When running the Node entry outside its image, set `CHROMIUM_EXECUTABLE_PATH` to
 a compatible Chromium executable to enable paywall thumbnails; the remaining
 runtime stays available when it is unset.
 
+### Agent models
+
+Durable designer-agent sessions use your own OpenAI or Anthropic credentials.
+Set `OPENAI_API_KEY` or `ANTHROPIC_API_KEY` in `selfhost/.env`; OpenAI is selected
+when both are present. The default models are `gpt-5.4` and
+`claude-sonnet-4-6`, respectively. Override text and vision routing with
+`VOIDHASH_AGENT_MODEL_PROVIDER`, `VOIDHASH_AGENT_MODEL_ID`,
+`VOIDHASH_AGENT_VISION_MODEL_PROVIDER`, and
+`VOIDHASH_AGENT_VISION_MODEL_ID`. An OpenAI-compatible deployment can also set
+`OPENAI_BASE_URL` while keeping the provider id `openai`.
+
 ### Google Play RTDN
 
 Google Play Real-time developer notifications must use an authenticated Pub/Sub
@@ -89,6 +100,13 @@ shared dashboard, the Community capability response, and app health, proving tha
 the backend route graph and durable workflow runner boot without ClickHouse, which
 remains an optional profile.
 
+To include an authenticated model-backed agent round-trip, set
+`SELFHOST_AGENT_SMOKE_BEARER_TOKEN`, `SELFHOST_AGENT_SMOKE_ORGANIZATION_ID`, and
+`SELFHOST_AGENT_SMOKE_PROJECT_ID` before running the smoke test. Optionally set
+`SELFHOST_AGENT_SMOKE_PAYWALL_ID` to exercise a designer-scoped session. The
+credentials must identify a user with access to that project, and the runtime
+must have one of the agent provider keys configured.
+
 The release-grade smoke additionally requires the analytics profile and Docker
 access from the checkout:
 
diff --git a/selfhost/docker-compose.yml b/selfhost/docker-compose.yml
index 5823ea066..8747fa682 100644
--- a/selfhost/docker-compose.yml
+++ b/selfhost/docker-compose.yml
@@ -187,6 +187,13 @@ services:
       WORKOS_COOKIE_PASSWORD: ${WORKOS_COOKIE_PASSWORD:-selfhost-development-cookie-password-change-me}
       WORKOS_REDIRECT_URI: ${WORKOS_REDIRECT_URI:-http://localhost:5001/api/auth/callback}
       WORKOS_WEBHOOK_SECRET: ${WORKOS_WEBHOOK_SECRET:-whsec_selfhost_not_configured}
+      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
+      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
+      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
+      VOIDHASH_AGENT_MODEL_PROVIDER: ${VOIDHASH_AGENT_MODEL_PROVIDER:-}
+      VOIDHASH_AGENT_MODEL_ID: ${VOIDHASH_AGENT_MODEL_ID:-}
+      VOIDHASH_AGENT_VISION_MODEL_PROVIDER: ${VOIDHASH_AGENT_VISION_MODEL_PROVIDER:-}
+      VOIDHASH_AGENT_VISION_MODEL_ID: ${VOIDHASH_AGENT_VISION_MODEL_ID:-}
       GOOGLE_PUBSUB_PUSH_AUDIENCE: ${GOOGLE_PUBSUB_PUSH_AUDIENCE:-}
       GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL: ${GOOGLE_PUBSUB_PUSH_SERVICE_ACCOUNT_EMAIL:-}
       ENCRYPTION_KEY: ${ENCRYPTION_KEY:-}
diff --git a/selfhost/entry/package.json b/selfhost/entry/package.json
index 249f5a78c..a9bf61cb5 100644
--- a/selfhost/entry/package.json
+++ b/selfhost/entry/package.json
@@ -22,8 +22,9 @@
   "dependencies": {
     "@effect/platform-node": "catalog:",
     "@effect/sql-pg": "catalog:",
-    "@voidhash/app-store-server-sdk": "workspace:*",
+    "@voidhash/agent": "workspace:*",
     "@voidhash/api-contracts": "workspace:*",
+    "@voidhash/app-store-server-sdk": "workspace:*",
     "@voidhash/backend": "workspace:*",
     "@voidhash/clickhouse-db": "workspace:*",
     "@voidhash/core": "workspace:*",
@@ -33,9 +34,9 @@
     "@voidhash/mimic-schema": "workspace:*",
     "@voidhash/paywall-renderer-preact": "workspace:*",
     "@voidhash/paywall-renderer-web-core": "workspace:*",
+    "@voidhash/paywalls": "workspace:*",
     "@voidhash/platform": "workspace:*",
     "@voidhash/platform-node": "workspace:*",
-    "@voidhash/paywalls": "workspace:*",
     "effect": "catalog:",
     "esbuild": "^0.25.10",
     "jose": "catalog:",
diff --git a/selfhost/entry/src/DurableEntityAlarms.ts b/selfhost/entry/src/DurableEntityAlarms.ts
new file mode 100644
index 000000000..82bd285a4
--- /dev/null
+++ b/selfhost/entry/src/DurableEntityAlarms.ts
@@ -0,0 +1,27 @@
+import type { DurableEntityAddress } from "@voidhash/platform/DurableEntity";
+import type { NodeDurableEntityControlShape } from "@voidhash/platform-node/DurableEntity";
+import { Effect } from "effect";
+
+/** Handler for one durable-entity alarm type. */
+export type DurableEntityAlarmHandler = (
+  address: DurableEntityAddress,
+  now: number,
+) => Effect.Effect<void, unknown>;
+
+/** Dispatches one bounded page of due alarms through the registered type handlers. */
+export const dispatchDurableEntityAlarms = (
+  control: NodeDurableEntityControlShape,
+  handlers: Readonly<Record<string, DurableEntityAlarmHandler>>,
+  now = Date.now(),
+): Effect.Effect<void, unknown> =>
+  control
+    .listDueAlarms(now, 100)
+    .pipe(
+      Effect.flatMap((due) =>
+        Effect.forEach(
+          due,
+          ({ address }) => handlers[address.type]?.(address, now) ?? Effect.void,
+          { discard: true },
+        ),
+      ),
+    );
diff --git a/selfhost/entry/src/agent/AgentNodeWebSocket.ts b/selfhost/entry/src/agent/AgentNodeWebSocket.ts
new file mode 100644
index 000000000..f14997cb5
--- /dev/null
+++ b/selfhost/entry/src/agent/AgentNodeWebSocket.ts
@@ -0,0 +1,289 @@
+import type { IncomingMessage, Server } from "node:http";
+import type { Duplex } from "node:stream";
+
+import {
+  AGENT_SESSION_ENTITY_TYPE,
+  AgentSessionCore,
+  getCatalogModel,
+  type AgentSessionConnection,
+  type EffectRunner,
+  type Model,
+} from "@voidhash/agent";
+import { makeAgentSessionIndex } from "@voidhash/backend/src/ai/AgentSessionIndexAdapter.ts";
+import {
+  makeWorkspaceAgentSessionFactory,
+  type WorkspaceAgentDeps,
+} from "@voidhash/backend/src/ai/WorkspaceAgentSessionFactory.ts";
+import { resolveWorkosSession } from "@voidhash/backend/src/AuthSessionResolver.ts";
+import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { AgentSessionIndexService, LocalUserSessionService, Workos } from "@voidhash/core/services";
+import type { AuthTokenVerifier } from "@voidhash/core/services/auth/AuthTokenVerifier";
+import { Db } from "@voidhash/db";
+import type { DurableEntityHostShape } from "@voidhash/platform/DurableEntity";
+import { makeNodeDurableEntitySession } from "@voidhash/platform-node/NodeDurableEntitySession";
+import { Context, Effect, Redacted } from "effect";
+import * as HttpHeaders from "effect/unstable/http/Headers";
+import { WebSocketServer, type RawData } from "ws";
+
+import type { SelfhostAgentConfig } from "../config.ts";
+import type { DurableEntityAlarmHandler } from "../DurableEntityAlarms.ts";
+
+type AgentNodeServices =
+  | Exclude<WorkspaceAgentDeps, AuthSession>
+  | AgentSessionIndexService
+  | Db
+  | Workos
+  | LocalUserSessionService;
+
+interface AgentConnectionData {
+  readonly authSession: Effect.Success<ReturnType<typeof resolveWorkosSession>>;
+}
+
+interface AgentRoute {
+  readonly sessionId: string;
+  readonly organizationId: string;
+  readonly projectId: string;
+  readonly surface: "designer";
+  readonly paywallId?: string;
+}
+
+/** Handles and alarm registration returned by the Node agent WebSocket host. */
+export interface AgentNodeWebSocketServer {
+  readonly alarmHandlers: Readonly<Record<string, DurableEntityAlarmHandler>>;
+  readonly close: () => void;
+}
+
+export type AgentNodeRouteResult =
+  | { readonly _tag: "Other" }
+  | { readonly _tag: "Invalid" }
+  | { readonly _tag: "Route"; readonly route: AgentRoute };
+
+const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{1,64}$/;
+
+/** Parses and validates the self-host agent upgrade target. */
+export const parseAgentNodeRoute = (
+  request: Pick<IncomingMessage, "url">,
+): AgentNodeRouteResult => {
+  const url = new URL(request.url ?? "/", "http://selfhost.local");
+  if (!url.pathname.startsWith("/api/agent/sessions/")) return { _tag: "Other" };
+  const match = /^\/api\/agent\/sessions\/([^/]+)\/ws$/.exec(url.pathname);
+  if (match?.[1] === undefined) return { _tag: "Invalid" };
+  const organizationId = url.searchParams.get("organizationId")?.trim() ?? "";
+  const projectId = url.searchParams.get("projectId")?.trim() ?? "";
+  const surface = url.searchParams.get("surface")?.trim() ?? "";
+  let sessionId: string;
+  try {
+    sessionId = decodeURIComponent(match[1]);
+  } catch {
+    return { _tag: "Invalid" };
+  }
+  if (
+    !organizationId ||
+    !projectId ||
+    surface !== "designer" ||
+    !SESSION_ID_PATTERN.test(sessionId)
+  ) {
+    return { _tag: "Invalid" };
+  }
+  const paywallId = url.searchParams.get("paywallId")?.trim() || undefined;
+  return {
+    _tag: "Route",
+    route: {
+      sessionId,
+      organizationId,
+      projectId,
+      surface,
+      ...(paywallId === undefined ? {} : { paywallId }),
+    },
+  };
+};
+
+const rejectUpgrade = (socket: Duplex, status: number, reason: string): void => {
+  socket.write(`HTTP/1.1 ${status} ${reason}\r\nConnection: close\r\n\r\n`);
+  socket.destroy();
+};
+
+const headersOf = (request: IncomingMessage): HttpHeaders.Headers =>
+  HttpHeaders.fromInput(
+    Object.fromEntries(
+      Object.entries(request.headers).flatMap(([name, value]) =>
+        value === undefined
+          ? []
+          : [[name, Array.isArray(value) ? value.join(", ") : value] as const],
+      ),
+    ),
+  );
+
+const frameOf = (data: RawData, isBinary: boolean): string | Uint8Array => {
+  if (!isBinary) return data.toString();
+  if (data instanceof ArrayBuffer) return new Uint8Array(data);
+  if (Array.isArray(data)) return new Uint8Array(Buffer.concat(data));
+  return new Uint8Array(data);
+};
+
+const configuredModel = (
+  provider: string,
+  modelId: string,
+  openaiBaseUrl: string | undefined,
+): Model<string> => {
+  const model = getCatalogModel(provider, modelId);
+  if (model === undefined) throw new Error(`Unknown agent model: ${provider}/${modelId}`);
+  return provider === "openai" && openaiBaseUrl !== undefined
+    ? { ...model, baseUrl: openaiBaseUrl }
+    : model;
+};
+
+const resolveConfiguredModel = (
+  provider: string,
+  modelId: string,
+  openaiBaseUrl: string | undefined,
+): Model<string> | undefined => {
+  const model = getCatalogModel(provider, modelId);
+  return model === undefined
+    ? undefined
+    : provider === "openai" && openaiBaseUrl !== undefined
+      ? { ...model, baseUrl: openaiBaseUrl }
+      : model;
+};
+
+/** Installs authenticated durable Pi sessions on the self-host HTTP server. */
+export const installAgentNodeWebSocketServer = (
+  server: Server,
+  entities: DurableEntityHostShape,
+  services: Context.Context<AgentNodeServices>,
+  authTokenVerifier: AuthTokenVerifier["Service"],
+  config: SelfhostAgentConfig,
+): AgentNodeWebSocketServer => {
+  const webSockets = new WebSocketServer({ noServer: true });
+  const defaultModel = configuredModel(config.provider, config.modelId, config.openaiBaseUrl);
+  const visionModel = configuredModel(
+    config.visionProvider,
+    config.visionModelId,
+    config.openaiBaseUrl,
+  );
+  const contextFor = (data: AgentConnectionData) =>
+    Context.add(services, AuthSession, data.authSession) as Context.Context<
+      WorkspaceAgentDeps | AgentSessionIndexService | AuthSession
+    >;
+  const runAgentEffect: EffectRunner<
+    AgentConnectionData,
+    WorkspaceAgentDeps | AgentSessionIndexService | AuthSession
+  > = (data, effect, signal) =>
+    Effect.runPromise(
+      effect.pipe(Effect.provide(contextFor(data))),
+      signal === undefined ? undefined : { signal },
+    );
+  const factory = makeWorkspaceAgentSessionFactory<AgentConnectionData>({
+    defaultModel,
+    visionModel,
+    runEffect: (data, effect, signal) => runAgentEffect(data, effect, signal),
+    getApiKey: (provider) => {
+      if (provider === "openai" && config.openaiApiKey !== undefined) {
+        return Redacted.value(config.openaiApiKey);
+      }
+      if (provider === "anthropic" && config.anthropicApiKey !== undefined) {
+        return Redacted.value(config.anthropicApiKey);
+      }
+      return undefined;
+    },
+    resolveModel: (provider, modelId) =>
+      resolveConfiguredModel(provider, modelId, config.openaiBaseUrl),
+  });
+  const core = new AgentSessionCore<AgentConnectionData>({
+    host: entities,
+    factory,
+    index: makeAgentSessionIndex((data, effect, signal) => runAgentEffect(data, effect, signal)),
+  });
+
+  const run = (effect: Effect.Effect<void, unknown>): void => {
+    Effect.runFork(
+      effect.pipe(
+        Effect.catchCause((cause) => Effect.logError("agent Node WebSocket handler failed", cause)),
+      ),
+    );
+  };
+
+  const onUpgrade = (request: IncomingMessage, socket: Duplex, head: Buffer): void => {
+    const parsed = parseAgentNodeRoute(request);
+    if (parsed._tag === "Other") return;
+    if (parsed._tag === "Invalid") {
+      rejectUpgrade(socket, 400, "Bad Request");
+      return;
+    }
+    const route = parsed.route;
+    void Effect.runPromise(
+      resolveWorkosSession(headersOf(request), authTokenVerifier).pipe(Effect.provide(services)),
+    )
+      .then((session) => {
+        if (session.method !== "user" || session.user === null) {
+          rejectUpgrade(socket, 403, "Forbidden");
+          return;
+        }
+        const project = session.projects.find(
+          (candidate) =>
+            candidate.id === route.projectId && candidate.organizationId === route.organizationId,
+        );
+        if (project === undefined) {
+          rejectUpgrade(socket, 403, "Forbidden");
+          return;
+        }
+        webSockets.handleUpgrade(request, socket, head, (webSocket) => {
+          const durableSession = makeNodeDurableEntitySession(globalThis.crypto.randomUUID(), {
+            send: (message) => webSocket.send(message),
+            close: (code, reason) => webSocket.close(code, reason),
+          });
+          const connection: AgentSessionConnection<AgentConnectionData> = {
+            sessionId: route.sessionId,
+            owner: {
+              organizationId: route.organizationId,
+              projectId: route.projectId,
+              userId: session.user.id,
+            },
+            metadata: {
+              surface: route.surface,
+              paywallId: route.paywallId ?? null,
+            },
+            session: durableSession,
+            data: { authSession: session },
+          };
+          const connected = Effect.runPromise(core.connect(connection));
+          webSocket.on("message", (data, isBinary) => {
+            run(
+              Effect.promise(() => connected).pipe(
+                Effect.flatMap((authorized) =>
+                  authorized
+                    ? core.handleMessage(connection, frameOf(data, isBinary))
+                    : Effect.sync(() => webSocket.close(1008, "Session access denied")),
+                ),
+              ),
+            );
+          });
+          webSocket.once("close", () => {
+            run(
+              Effect.promise(() => connected).pipe(
+                Effect.andThen(core.disconnect(route.sessionId, durableSession.id)),
+              ),
+            );
+          });
+          void connected
+            .then((authorized) => {
+              if (!authorized) webSocket.close(1008, "Session access denied");
+            })
+            .catch(() => webSocket.close(1011, "Session initialization failed"));
+        });
+      })
+      .catch(() => rejectUpgrade(socket, 401, "Unauthorized"));
+  };
+
+  server.on("upgrade", onUpgrade);
+  return {
+    alarmHandlers: {
+      [AGENT_SESSION_ENTITY_TYPE]: (address) => core.onAlarm(address.id).pipe(Effect.asVoid),
+    },
+    close: () => {
+      server.off("upgrade", onUpgrade);
+      for (const client of webSockets.clients) client.close(1001, "Server shutting down");
+      webSockets.close();
+    },
+  };
+};
diff --git a/selfhost/entry/src/config.ts b/selfhost/entry/src/config.ts
index 39c4dec36..d2f00c171 100644
--- a/selfhost/entry/src/config.ts
+++ b/selfhost/entry/src/config.ts
@@ -85,6 +85,9 @@ export const validateSelfhostSecurityConfig = (): SelfhostMode => {
   for (const name of requiredSecrets) {
     if (isExampleSecret(process.env[name])) unsafeSettings.push(name);
   }
+  if (!process.env.OPENAI_API_KEY?.trim() && !process.env.ANTHROPIC_API_KEY?.trim()) {
+    unsafeSettings.push("OPENAI_API_KEY or ANTHROPIC_API_KEY");
+  }
 
   for (const name of [
     "PUBLIC_BASE_URL",
@@ -128,8 +131,20 @@ export interface SelfhostClickhouseConfig {
   readonly readWrite: SelfhostClickhouseConnection;
 }
 
+/** BYO-provider configuration for durable self-hosted agent sessions. */
+export interface SelfhostAgentConfig {
+  readonly provider: string;
+  readonly modelId: string;
+  readonly visionProvider: string;
+  readonly visionModelId: string;
+  readonly openaiApiKey?: Redacted.Redacted<string>;
+  readonly anthropicApiKey?: Redacted.Redacted<string>;
+  readonly openaiBaseUrl?: string;
+}
+
 /** Configuration for the single-process self-host runtime. */
 export interface SelfhostRuntimeConfig {
+  readonly agent: SelfhostAgentConfig;
   readonly clickhouse?: SelfhostClickhouseConfig;
   readonly componentCompilerUrl: string;
   readonly database: DbConfig;
@@ -223,8 +238,23 @@ export const getSelfhostRuntimeConfig = (): SelfhostRuntimeConfig => {
     secretAccessKey,
   };
   const clickhouse = getSelfhostClickhouseConfig();
+  const openaiApiKey = process.env.OPENAI_API_KEY?.trim();
+  const anthropicApiKey = process.env.ANTHROPIC_API_KEY?.trim();
+  const defaultProvider = openaiApiKey ? "openai" : "anthropic";
+  const defaultModelId = openaiApiKey ? "gpt-5.4" : "claude-sonnet-4-6";
 
   return {
+    agent: {
+      provider: process.env.VOIDHASH_AGENT_MODEL_PROVIDER?.trim() || defaultProvider,
+      modelId: process.env.VOIDHASH_AGENT_MODEL_ID?.trim() || defaultModelId,
+      visionProvider: process.env.VOIDHASH_AGENT_VISION_MODEL_PROVIDER?.trim() || defaultProvider,
+      visionModelId: process.env.VOIDHASH_AGENT_VISION_MODEL_ID?.trim() || defaultModelId,
+      ...(openaiApiKey === undefined ? {} : { openaiApiKey: Redacted.make(openaiApiKey) }),
+      ...(anthropicApiKey === undefined ? {} : { anthropicApiKey: Redacted.make(anthropicApiKey) }),
+      ...(process.env.OPENAI_BASE_URL?.trim()
+        ? { openaiBaseUrl: process.env.OPENAI_BASE_URL.trim() }
+        : {}),
+    },
     artifactObjectStore: {
       ...objectStore,
       bucketName: process.env.S3_ARTIFACT_BUCKET?.trim() || "voidhash-artifacts",
diff --git a/selfhost/entry/src/main.ts b/selfhost/entry/src/main.ts
index 1c76b791c..448ff620b 100644
--- a/selfhost/entry/src/main.ts
+++ b/selfhost/entry/src/main.ts
@@ -4,6 +4,7 @@ import { NodeHttpServer, NodeRuntime } from "@effect/platform-node";
 import { EventCaptureApi } from "@voidhash/api-contracts/event-capture";
 import {
   buildBackendFetch,
+  buildBackendAgentServices,
   NoBackendFeatures,
   NoBackendRpcExtension,
 } from "@voidhash/backend/src/BackendApp.ts";
@@ -29,10 +30,7 @@ import {
 } from "./backend/Analytics.ts";
 import { WorkosAuthTokenVerifierLive } from "./backend/AuthTokenVerifier.ts";
 import { runSelfhostCronJobs } from "./backend/Background.ts";
-import {
-  makeBackendInfrastructureLive,
-  makeSelfhostWorkosLive,
-} from "./backend/Backend.ts";
+import { makeBackendInfrastructureLive, makeSelfhostWorkosLive } from "./backend/Backend.ts";
 import { makeSelfhostClickhouseLayers } from "./backend/Clickhouse.ts";
 import {
   runSelfhostPushDeliveryConsumers,
@@ -48,14 +46,12 @@ import {
   registerSelfhostWorkflows,
 } from "./backend/WorkflowPorts.ts";
 import { getSelfhostRuntimeConfig } from "./config.ts";
+import { installAgentNodeWebSocketServer } from "./agent/AgentNodeWebSocket.ts";
 import { makeSelfhostMimicDocumentIdlePublisher } from "./mimic/MimicDocumentIdleQueue.ts";
 import { installMimicNodeWebSocketServer } from "./mimic/MimicNodeWebSocket.ts";
 import { makeMimicNodeHostLive } from "./mimic/MimicNode.ts";
 import { getMimicNodeConfig } from "./mimic/config.ts";
-import {
-  isWwwRequest,
-  loadWwwRequestHandler,
-} from "./www/Www.ts";
+import { isWwwRequest, loadWwwRequestHandler } from "./www/Www.ts";
 
 const isMimicRequest = (url: string | undefined): boolean => {
   const pathname = new URL(url ?? "/", "http://selfhost.local").pathname;
@@ -96,9 +92,7 @@ NodeRuntime.runMain(
         chromiumConfig === undefined
           ? undefined
           : makeSelfhostSnapshotImageRendererLive(chromiumConfig),
-      ).pipe(
-        Layer.provide(hostLayer),
-      );
+      ).pipe(Layer.provide(hostLayer));
       const authContext = yield* Layer.build(
         WorkosAuthTokenVerifierLive.pipe(Layer.provide(workos)),
       );
@@ -123,6 +117,16 @@ NodeRuntime.runMain(
         PushDeliveryDispatch,
         Context.get(pushDispatchContext, PushDeliveryDispatch),
       );
+      const agentServices = yield* Layer.build(
+        Layer.mergeAll(
+          buildBackendAgentServices({
+            features: NoBackendFeatures,
+            infrastructure,
+            pushDeliveryDispatch,
+          }),
+          infrastructure,
+        ),
+      );
       yield* registerSelfhostWorkflows(config).pipe(Effect.provide(runtimeContext));
       yield* Effect.forkScoped(
         runSelfhostAnalyticsConsumers(config, clickhouse?.readWrite).pipe(
@@ -130,23 +134,16 @@ NodeRuntime.runMain(
         ),
       );
       yield* Effect.forkScoped(
-        runSelfhostPushDeliveryConsumers(config).pipe(
-          Effect.provide(runtimeContext),
-        ),
+        runSelfhostPushDeliveryConsumers(config).pipe(Effect.provide(runtimeContext)),
       );
       yield* Effect.forkScoped(
-        runSelfhostCronJobs(config, clickhouse?.readWrite).pipe(
-          Effect.provide(runtimeContext),
-        ),
+        runSelfhostCronJobs(config, clickhouse?.readWrite).pipe(Effect.provide(runtimeContext)),
       );
       if (chromiumConfig !== undefined) {
         const thumbnailContext = yield* Layer.build(
           makeSelfhostPaywallThumbnailServiceLive(chromiumConfig),
         ).pipe(Effect.provide(runtimeContext));
-        const thumbnailService = Context.get(
-          thumbnailContext,
-          PaywallThumbnailService,
-        );
+        const thumbnailService = Context.get(thumbnailContext, PaywallThumbnailService);
         yield* Effect.forkScoped(
           runSelfhostPaywallThumbnailConsumer.pipe(
             Effect.provide(runtimeContext),
@@ -164,11 +161,8 @@ NodeRuntime.runMain(
         features: NoBackendFeatures,
         rpcExtension: NoBackendRpcExtension,
         infrastructure,
-        ...(clickhouse === undefined
-          ? {}
-          : { analyticsQueryClient: clickhouse.analyticsQuery }),
+        ...(clickhouse === undefined ? {} : { analyticsQueryClient: clickhouse.analyticsQuery }),
         pushDeliveryDispatch,
-        authTokenVerifier,
       }).pipe(Effect.provide(runtimeContext));
       const mimicEffect = yield* makeRoutesLive(hostLayer).pipe(
         Layer.provide(NodeHttpServer.layerHttpServices),
@@ -201,12 +195,13 @@ NodeRuntime.runMain(
           new Error("WWW_SERVER_ENTRY and WWW_CLIENT_DIRECTORY must be configured together"),
         );
       }
-      const wwwHandler = wwwServerEntry && wwwClientDirectory
-        ? yield* Effect.tryPromise({
-            try: () => loadWwwRequestHandler(wwwServerEntry, wwwClientDirectory),
-            catch: (cause) => new Error("Failed to load the WWW server bundle", { cause }),
-          })
-        : undefined;
+      const wwwHandler =
+        wwwServerEntry && wwwClientDirectory
+          ? yield* Effect.tryPromise({
+              try: () => loadWwwRequestHandler(wwwServerEntry, wwwClientDirectory),
+              catch: (cause) => new Error("Failed to load the WWW server bundle", { cause }),
+            })
+          : undefined;
       const server = createServer((request, response) => {
         if (isMimicRequest(request.url)) {
           mimicHandler(request, response);
@@ -228,16 +223,19 @@ NodeRuntime.runMain(
         }
         backendHandler(request, response);
       });
-      const closeWebSockets = installMimicNodeWebSocketServer(
+      const agentWebSockets = installAgentNodeWebSocketServer(
         server,
-        host,
         entities,
-        {
-          control: entityControl,
-          debounceMs: mimicConfig.idleNotifyDebounceMs,
-          publish: publishIdleDocument,
-        },
+        agentServices,
+        authTokenVerifier,
+        config.agent,
       );
+      const closeMimicWebSockets = installMimicNodeWebSocketServer(server, host, entities, {
+        control: entityControl,
+        debounceMs: mimicConfig.idleNotifyDebounceMs,
+        publish: publishIdleDocument,
+        additionalAlarmHandlers: agentWebSockets.alarmHandlers,
+      });
 
       yield* Effect.acquireRelease(
         Effect.callback<void, Error>((resume) => {
@@ -250,7 +248,8 @@ NodeRuntime.runMain(
         }),
         () =>
           Effect.callback<void>((resume) => {
-            closeWebSockets();
+            agentWebSockets.close();
+            closeMimicWebSockets();
             if (!server.listening) {
               resume(Effect.void);
               return;
diff --git a/selfhost/entry/src/mimic/MimicNodeWebSocket.ts b/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
index e5fcea0e1..80e4a6b37 100644
--- a/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
+++ b/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
@@ -1,10 +1,7 @@
 import type { IncomingMessage, Server } from "node:http";
 import type { Duplex } from "node:stream";
 
-import type {
-  HostService,
-  PresenceEntry,
-} from "@voidhash/mimic-db/app/hostService";
+import type { HostService, PresenceEntry } from "@voidhash/mimic-db/app/hostService";
 import {
   AUTH_DEADLINE_MS,
   handleDocumentSocketClose,
@@ -28,6 +25,11 @@ import { makeNodeDurableEntitySession } from "@voidhash/platform-node/NodeDurabl
 import { Duration, Effect, Fiber, Semaphore } from "effect";
 import WebSocket, { WebSocketServer, type RawData } from "ws";
 
+import {
+  dispatchDurableEntityAlarms,
+  type DurableEntityAlarmHandler,
+} from "../DurableEntityAlarms.ts";
+
 interface NodeDocumentSocket {
   readonly webSocket: WebSocket;
   attachment: SessionAttachment | null;
@@ -44,10 +46,9 @@ interface NodeDocumentRuntime {
 export interface MimicNodeIdleNotificationOptions {
   readonly control: NodeDurableEntityControlShape;
   readonly debounceMs: number;
-  readonly publish: (
-    message: MimicDocumentIdleMessageType,
-  ) => Effect.Effect<void, unknown>;
+  readonly publish: (message: MimicDocumentIdleMessageType) => Effect.Effect<void, unknown>;
   readonly pollIntervalMs?: number;
+  readonly additionalAlarmHandlers?: Readonly<Record<string, DurableEntityAlarmHandler>>;
 }
 
 const mimicDocumentEntityType = "mimic-document";
@@ -56,10 +57,7 @@ const documentKey = (collectionId: string, documentId: string): string =>
   `${collectionId}\u0000${documentId}`;
 
 const documentEntityAddress = (collectionId: string, documentId: string) =>
-  makeDurableEntityAddress(
-    mimicDocumentEntityType,
-    `${collectionId}:${documentId}`,
-  );
+  makeDurableEntityAddress(mimicDocumentEntityType, `${collectionId}:${documentId}`);
 
 const parseDocumentEntityId = (
   id: string,
@@ -88,11 +86,9 @@ const makeNodeIdleNotifier = (
     publish: options.publish,
     storage: {
       get: (key) =>
-        entity.keyValue.get(key).pipe(
-          Effect.map((value) =>
-            typeof value === "number" ? value : undefined,
-          ),
-        ),
+        entity.keyValue
+          .get(key)
+          .pipe(Effect.map((value) => (typeof value === "number" ? value : undefined))),
       put: (key, value) => entity.keyValue.put(key, value),
       setAlarm: entity.alarm.set,
     },
@@ -103,41 +99,28 @@ export const dispatchMimicDocumentIdleAlarms = (
   entities: DurableEntityHost["Service"],
   options: MimicNodeIdleNotificationOptions,
   authenticatedCount: (collectionId: string, documentId: string) => number,
-): Effect.Effect<void> =>
-  Effect.gen(function* () {
-    const now = Date.now();
-    const due = yield* options.control.listDueAlarms(now, 100);
-    yield* Effect.forEach(
-      due,
-      ({ address }) => {
-        if (address.type !== mimicDocumentEntityType) return Effect.void;
-        const document = parseDocumentEntityId(address.id);
-        if (!document) {
-          return Effect.logWarning(
-            `Ignoring malformed Mimic document entity alarm ${address.id}`,
-          );
-        }
-        return entities.run(address, (entity) =>
-          Effect.gen(function* () {
-            const scheduledTime = yield* entity.alarm.get;
-            if (scheduledTime === undefined || scheduledTime > now) return;
-            yield* entity.alarm.delete;
-            yield* makeNodeIdleNotifier(
-              entity,
-              document.collectionId,
-              document.documentId,
-              () =>
-                authenticatedCount(
-                  document.collectionId,
-                  document.documentId,
-                ),
-              options,
-            ).onAlarm();
-          }),
-        );
-      },
-      { discard: true },
-    );
+): Effect.Effect<void, unknown> =>
+  dispatchDurableEntityAlarms(options.control, {
+    [mimicDocumentEntityType]: (address, now) => {
+      const document = parseDocumentEntityId(address.id);
+      if (!document) {
+        return Effect.logWarning(`Ignoring malformed Mimic document entity alarm ${address.id}`);
+      }
+      return entities.run(address, (entity) =>
+        Effect.gen(function* () {
+          const scheduledTime = yield* entity.alarm.get;
+          if (scheduledTime === undefined || scheduledTime > now) return;
+          yield* entity.alarm.delete;
+          yield* makeNodeIdleNotifier(
+            entity,
+            document.collectionId,
+            document.documentId,
+            () => authenticatedCount(document.collectionId, document.documentId),
+            options,
+          ).onAlarm();
+        }),
+      );
+    },
   });
 
 const parseDocumentAddress = (
@@ -161,11 +144,6 @@ const parseDocumentAddress = (
   };
 };
 
-const rejectUpgrade = (socket: Duplex, status: number, reason: string): void => {
-  socket.write(`HTTP/1.1 ${status} ${reason}\r\nConnection: close\r\n\r\n`);
-  socket.destroy();
-};
-
 const toFrame = (data: RawData, isBinary: boolean): string | Uint8Array => {
   if (!isBinary) return data.toString();
   if (data instanceof ArrayBuffer) return new Uint8Array(data);
@@ -226,8 +204,7 @@ export const installMimicNodeWebSocketServer = (
       setAttachment: (socket, attachment) => void (socket.attachment = attachment),
       send: (socket, message) =>
         Effect.sync(() => void socket.webSocket.send(encodeServerMessage(message))),
-      close: (socket, code, reason) =>
-        Effect.sync(() => void socket.webSocket.close(code, reason)),
+      close: (socket, code, reason) => Effect.sync(() => void socket.webSocket.close(code, reason)),
       authenticate: (token, attachment) =>
         withoutRequirements(
           host.authenticateDocumentToken(
@@ -255,13 +232,9 @@ export const installMimicNodeWebSocketServer = (
           ),
         ),
       onAccepted: (seq) =>
-        entities.run(entityAddress, (entity) =>
-          idleNotifier(entity).recordDirty(seq),
-        ),
+        entities.run(entityAddress, (entity) => idleNotifier(entity).recordDirty(seq)),
       onLastAuthenticatedClose: () =>
-        entities.run(entityAddress, (entity) =>
-          idleNotifier(entity).onLastAuthenticatedClose(),
-        ),
+        entities.run(entityAddress, (entity) => idleNotifier(entity).onLastAuthenticatedClose()),
     };
     const runtime = {
       lock: Semaphore.makeUnsafe(1),
@@ -276,7 +249,6 @@ export const installMimicNodeWebSocketServer = (
   const onUpgrade = (request: IncomingMessage, socket: Duplex, head: Buffer): void => {
     const address = parseDocumentAddress(request);
     if (!address) {
-      rejectUpgrade(socket, 404, "Not Found");
       return;
     }
     webSockets.handleUpgrade(request, socket, head, (webSocket) => {
@@ -299,10 +271,7 @@ export const installMimicNodeWebSocketServer = (
       }
       runtime.connections.add(nodeSocket);
       runtime.context.registry.trackPending(attachment.connectionId, nodeSocket);
-      const entityAddress = documentEntityAddress(
-        address.collectionId,
-        address.documentId,
-      );
+      const entityAddress = documentEntityAddress(address.collectionId, address.documentId);
       const entitySession = makeNodeDurableEntitySession(
         attachment.connectionId,
         {
@@ -319,11 +288,7 @@ export const installMimicNodeWebSocketServer = (
           Effect.promise(() => ready).pipe(
             Effect.andThen(
               runtime.lock.withPermit(
-                handleDocumentSocketMessage(
-                  runtime.context,
-                  nodeSocket,
-                  toFrame(data, isBinary),
-                ),
+                handleDocumentSocketMessage(runtime.context, nodeSocket, toFrame(data, isBinary)),
               ),
             ),
           ),
@@ -364,22 +329,38 @@ export const installMimicNodeWebSocketServer = (
 
   const alarmFiber = Effect.runFork(
     Effect.forever(
-      dispatchMimicDocumentIdleAlarms(
-        entities,
-        idleNotifications,
-        (collectionId, documentId) =>
-          documents
-            .get(documentKey(collectionId, documentId))
-            ?.context.registry.authenticated().length ?? 0,
-      ).pipe(
+      dispatchDurableEntityAlarms(idleNotifications.control, {
+        [mimicDocumentEntityType]: (address, now) => {
+          const document = parseDocumentEntityId(address.id);
+          if (!document) {
+            return Effect.logWarning(
+              `Ignoring malformed Mimic document entity alarm ${address.id}`,
+            );
+          }
+          return entities.run(address, (entity) =>
+            Effect.gen(function* () {
+              const scheduledTime = yield* entity.alarm.get;
+              if (scheduledTime === undefined || scheduledTime > now) return;
+              yield* entity.alarm.delete;
+              yield* makeNodeIdleNotifier(
+                entity,
+                document.collectionId,
+                document.documentId,
+                () =>
+                  documents
+                    .get(documentKey(document.collectionId, document.documentId))
+                    ?.context.registry.authenticated().length ?? 0,
+                idleNotifications,
+              ).onAlarm();
+            }),
+          );
+        },
+        ...idleNotifications.additionalAlarmHandlers,
+      }).pipe(
         Effect.catchCause((cause) =>
           Effect.logError("Mimic document alarm dispatch failed", cause),
         ),
-        Effect.andThen(
-          Effect.sleep(
-            Duration.millis(idleNotifications.pollIntervalMs ?? 500),
-          ),
-        ),
+        Effect.andThen(Effect.sleep(Duration.millis(idleNotifications.pollIntervalMs ?? 500))),
       ),
     ),
   );
diff --git a/selfhost/entry/tests/AgentNodeWebSocket.integration.test.ts b/selfhost/entry/tests/AgentNodeWebSocket.integration.test.ts
new file mode 100644
index 000000000..8369618f8
--- /dev/null
+++ b/selfhost/entry/tests/AgentNodeWebSocket.integration.test.ts
@@ -0,0 +1,277 @@
+import { createServer, type Server } from "node:http";
+
+import {
+  AgentSessionIndexService,
+  LocalUserSessionService,
+  PaywallService,
+  PaywallWorkspaceService,
+  Workos,
+} from "@voidhash/core/services";
+import { Db } from "@voidhash/db";
+import { makeMemoryDurableEntityHost } from "@voidhash/platform-node/MemoryDurableEntity";
+import { Context, Effect, Redacted } from "effect";
+import { WebSocket } from "ws";
+import { afterEach, describe, expect, it } from "vite-plus/test";
+
+import { installAgentNodeWebSocketServer } from "../src/agent/AgentNodeWebSocket.ts";
+
+const servers: Server[] = [];
+
+afterEach(async () => {
+  await Promise.all(
+    servers.splice(0).map(
+      (server) =>
+        new Promise<void>((resolve) => {
+          server.close(() => resolve());
+        }),
+    ),
+  );
+});
+
+const listen = (server: Server): Promise<number> =>
+  new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", () => {
+      server.off("error", reject);
+      const address = server.address();
+      if (address === null || typeof address === "string") {
+        reject(new Error("HTTP server did not expose a TCP port"));
+        return;
+      }
+      servers.push(server);
+      resolve(address.port);
+    });
+  });
+
+const waitFor = async (predicate: () => boolean): Promise<void> => {
+  for (let attempt = 0; attempt < 150; attempt += 1) {
+    if (predicate()) return;
+    await new Promise((resolve) => setTimeout(resolve, 20));
+  }
+  throw new Error("Timed out waiting for the Node agent WebSocket");
+};
+
+const authSession = {
+  cookie: null,
+  method: "user" as const,
+  name: "Probe user",
+  person: null,
+  organizations: [
+    {
+      id: "org_1",
+      logo: null,
+      name: "Organization",
+      permissions: ["organization:all"],
+      slug: "organization",
+      workosOrganizationId: "workos_org_1",
+    },
+  ],
+  projects: [
+    {
+      id: "project_1",
+      logo: null,
+      name: "Project",
+      organizationId: "org_1",
+      permissions: ["project:all"],
+      slug: "project",
+    },
+  ],
+  user: {
+    id: "user_1",
+    createdAt: new Date(0),
+    updatedAt: new Date(0),
+    email: "user@example.com",
+    emailVerified: true,
+    image: null,
+    name: "Probe user",
+    role: null,
+    workosUserId: "workos_user_1",
+  },
+};
+
+const makeServices = () => {
+  let context = Context.empty() as Context.Context<never>;
+  context = Context.add(context, Db, {} as never);
+  context = Context.add(context, Workos, {
+    getUser: () => Effect.succeed({ id: "workos_user_1" }),
+    setUserExternalId: () => Effect.void,
+  } as unknown as Workos["Service"]);
+  context = Context.add(context, LocalUserSessionService, {
+    resolveLocalUser: () => Effect.succeed(authSession.user),
+    loadUserAccess: () =>
+      Effect.succeed({
+        organizations: authSession.organizations,
+        projects: authSession.projects,
+      }),
+    toUserSession: () => authSession,
+  } as unknown as LocalUserSessionService["Service"]);
+  context = Context.add(context, AgentSessionIndexService, {
+    touch: () => Effect.succeed(undefined),
+  } as unknown as AgentSessionIndexService["Service"]);
+  context = Context.add(context, PaywallService, {
+    getPaywalls: () => Effect.succeed([]),
+  } as unknown as PaywallService["Service"]);
+  context = Context.add(context, PaywallWorkspaceService, {} as PaywallWorkspaceService["Service"]);
+  return context as Context.Context<any>;
+};
+
+describe("installAgentNodeWebSocketServer", () => {
+  it("authenticates, streams, and accepts steering through a real Node WebSocket", async () => {
+    let releaseFirstProvider!: () => void;
+    const firstProviderGate = new Promise<void>((resolve) => {
+      releaseFirstProvider = resolve;
+    });
+    let providerRequests = 0;
+    const provider = createServer((request, response) => {
+      if (request.url !== "/v1/responses") {
+        response.writeHead(404).end();
+        return;
+      }
+      providerRequests += 1;
+      response.writeHead(200, {
+        "content-type": "text/event-stream",
+        "cache-control": "no-cache",
+      });
+      response.write(
+        `data: ${JSON.stringify({
+          type: "response.created",
+          response: { id: `response_${providerRequests}`, status: "in_progress", output: [] },
+        })}\n\n`,
+      );
+      const finishResponse = () => {
+        const events = [
+          {
+            type: "response.output_item.added",
+            output_index: 0,
+            item: {
+              id: "message_1",
+              type: "message",
+              role: "assistant",
+              status: "in_progress",
+              content: [],
+            },
+          },
+          { type: "response.output_text.delta", output_index: 0, delta: "node-host-ok" },
+          {
+            type: "response.output_item.done",
+            output_index: 0,
+            item: {
+              id: "message_1",
+              type: "message",
+              role: "assistant",
+              status: "completed",
+              content: [{ type: "output_text", text: "node-host-ok", annotations: [] }],
+            },
+          },
+          {
+            type: "response.completed",
+            response: {
+              id: "response_1",
+              status: "completed",
+              output: [],
+              usage: { input_tokens: 1, output_tokens: 1, total_tokens: 2 },
+            },
+          },
+        ];
+        for (const event of events) response.write(`data: ${JSON.stringify(event)}\n\n`);
+        response.end("data: [DONE]\n\n");
+      };
+      if (providerRequests === 1) {
+        void firstProviderGate.then(finishResponse);
+      } else {
+        finishResponse();
+      }
+    });
+    const providerPort = await listen(provider);
+
+    const server = createServer((_request, response) => response.writeHead(404).end());
+    const host = installAgentNodeWebSocketServer(
+      server,
+      makeMemoryDurableEntityHost(),
+      makeServices(),
+      {
+        validateToken: () =>
+          Effect.succeed({
+            payload: { sub: "workos_user_1", email: "user@example.com" },
+            provider: "workos" as const,
+          }),
+      },
+      {
+        provider: "openai",
+        modelId: "gpt-5.4",
+        visionProvider: "openai",
+        visionModelId: "gpt-5.4",
+        openaiApiKey: Redacted.make("probe-key"),
+        openaiBaseUrl: `http://127.0.0.1:${providerPort}/v1`,
+      },
+    );
+    const port = await listen(server);
+    const frames: Array<Record<string, any>> = [];
+    const socket = new WebSocket(
+      `ws://127.0.0.1:${port}/api/agent/sessions/agent_1/ws?organizationId=org_1&projectId=project_1&surface=designer`,
+      { headers: { authorization: "Bearer probe-token" } },
+    );
+    socket.on("message", (data) => frames.push(JSON.parse(data.toString())));
+    await new Promise<void>((resolve, reject) => {
+      socket.once("open", resolve);
+      socket.once("error", reject);
+    });
+    socket.send(JSON.stringify({ v: 1, type: "prompt", requestId: "prompt_1", text: "hello" }));
+    await waitFor(
+      () =>
+        providerRequests === 1 &&
+        frames.some((frame) => frame.type === "event" && frame.event?.type === "agent_start"),
+    );
+    socket.send(JSON.stringify({ v: 1, type: "get_state", requestId: "streaming_state" }));
+    await waitFor(() =>
+      frames.some(
+        (frame) =>
+          frame.type === "state" &&
+          frame.requestId === "streaming_state" &&
+          frame.state?.isStreaming === true,
+      ),
+    );
+    socket.send(
+      JSON.stringify({ v: 1, type: "steer", requestId: "steer_1", text: "change direction" }),
+    );
+    await waitFor(() =>
+      frames.some(
+        (frame) =>
+          frame.type === "ack" && frame.requestId === "steer_1" && frame.command === "steer",
+      ),
+    );
+    releaseFirstProvider();
+    await waitFor(() =>
+      frames.some((frame) => frame.type === "event" && frame.event?.type === "agent_end"),
+    );
+
+    const text = frames
+      .filter((frame) => frame.type === "event" && frame.event?.type === "message_end")
+      .flatMap((frame) => frame.event.message?.content ?? [])
+      .find((content) => content.type === "text")?.text;
+    expect(text).toBe("node-host-ok");
+    expect(providerRequests).toBeGreaterThanOrEqual(2);
+
+    socket.send(JSON.stringify({ v: 1, type: "get_entries", requestId: "entries_1" }));
+    await waitFor(() =>
+      frames.some((frame) => frame.type === "entries" && frame.requestId === "entries_1"),
+    );
+    const entries = frames.find(
+      (frame) => frame.type === "entries" && frame.requestId === "entries_1",
+    )?.entries;
+    const userText = Array.isArray(entries)
+      ? entries
+          .filter((entry) => entry.type === "message" && entry.message?.role === "user")
+          .flatMap((entry) => {
+            const content = entry.message.content;
+            if (typeof content === "string") return [content];
+            if (!Array.isArray(content)) return [];
+            return content.filter((part) => part.type === "text").map((part) => part.text);
+          })
+      : [];
+    expect(userText).toContain("change direction");
+
+    socket.close();
+    host.close();
+  });
+});
diff --git a/selfhost/entry/tests/AgentNodeWebSocket.test.ts b/selfhost/entry/tests/AgentNodeWebSocket.test.ts
new file mode 100644
index 000000000..4aa6321d4
--- /dev/null
+++ b/selfhost/entry/tests/AgentNodeWebSocket.test.ts
@@ -0,0 +1,43 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { parseAgentNodeRoute } from "../src/agent/AgentNodeWebSocket.ts";
+
+describe("parseAgentNodeRoute", () => {
+  it("parses a scoped durable session", () => {
+    expect(
+      parseAgentNodeRoute({
+        url: "/api/agent/sessions/agent_1/ws?organizationId=org_1&projectId=project_1&surface=designer",
+      }),
+    ).toEqual({
+      _tag: "Route",
+      route: {
+        organizationId: "org_1",
+        projectId: "project_1",
+        sessionId: "agent_1",
+        surface: "designer",
+      },
+    });
+  });
+
+  it("separates unrelated upgrades from malformed agent routes", () => {
+    expect(parseAgentNodeRoute({ url: "/ws/v1/documents/1" })).toEqual({ _tag: "Other" });
+    expect(parseAgentNodeRoute({ url: "/api/agent/sessions/a/ws" })).toEqual({
+      _tag: "Invalid",
+    });
+    expect(
+      parseAgentNodeRoute({
+        url: "/api/agent/sessions/a/ws?organizationId=o&projectId=p",
+      }),
+    ).toEqual({ _tag: "Invalid" });
+    expect(
+      parseAgentNodeRoute({
+        url: "/api/agent/sessions/a/ws?organizationId=o&projectId=p&surface=unknown",
+      }),
+    ).toEqual({ _tag: "Invalid" });
+    expect(
+      parseAgentNodeRoute({
+        url: `/api/agent/sessions/${"a".repeat(65)}/ws?organizationId=o&projectId=p&surface=designer`,
+      }),
+    ).toEqual({ _tag: "Invalid" });
+  });
+});
diff --git a/selfhost/entry/tests/BackendAdapters.test.ts b/selfhost/entry/tests/BackendAdapters.test.ts
index d65ae834b..432de8d32 100644
--- a/selfhost/entry/tests/BackendAdapters.test.ts
+++ b/selfhost/entry/tests/BackendAdapters.test.ts
@@ -18,8 +18,10 @@ beforeEach(() => {
 describe("self-host runtime configuration", () => {
   it("uses local development defaults", () => {
     delete process.env.NODE_ENV;
+    delete process.env.ANTHROPIC_API_KEY;
     delete process.env.CLICKHOUSE_URL;
     delete process.env.PUBLIC_BASE_URL;
+    delete process.env.OPENAI_API_KEY;
     delete process.env.S3_ENDPOINT;
     delete process.env.SMTP_FROM_ADDRESS;
     delete process.env.SMTP_FROM_NAME;
@@ -39,6 +41,12 @@ describe("self-host runtime configuration", () => {
     const config = getSelfhostRuntimeConfig();
 
     expect(config.clickhouse).toBeUndefined();
+    expect(config.agent).toMatchObject({
+      modelId: "claude-sonnet-4-6",
+      provider: "anthropic",
+      visionModelId: "claude-sonnet-4-6",
+      visionProvider: "anthropic",
+    });
     expect(config.publicBaseUrl).toBe("http://localhost:5001");
     expect(config.publicObjectStore.endpoint).toBe("http://127.0.0.1:9000");
     expect(config.mailer).toMatchObject({
@@ -50,6 +58,26 @@ describe("self-host runtime configuration", () => {
     expect(config.workos.clientId).toBe("client_selfhost_not_configured");
   });
 
+  it("reads BYO agent provider and model settings", () => {
+    process.env.OPENAI_API_KEY = "configured-openai-key";
+    process.env.OPENAI_BASE_URL = "https://models.example.test/v1";
+    process.env.VOIDHASH_AGENT_MODEL_PROVIDER = "openai";
+    process.env.VOIDHASH_AGENT_MODEL_ID = "gpt-5.4";
+    process.env.VOIDHASH_AGENT_VISION_MODEL_PROVIDER = "openai";
+    process.env.VOIDHASH_AGENT_VISION_MODEL_ID = "gpt-5.4";
+
+    const agent = getSelfhostRuntimeConfig().agent;
+
+    expect(agent).toMatchObject({
+      modelId: "gpt-5.4",
+      openaiBaseUrl: "https://models.example.test/v1",
+      provider: "openai",
+      visionModelId: "gpt-5.4",
+      visionProvider: "openai",
+    });
+    expect(Redacted.value(agent.openaiApiKey!)).toBe("configured-openai-key");
+  });
+
   it("reads authenticated TLS SMTP settings", () => {
     process.env.SMTP_HOST = "smtp.example.com";
     process.env.SMTP_PORT = "465";
diff --git a/selfhost/entry/tests/SecurityConfig.test.ts b/selfhost/entry/tests/SecurityConfig.test.ts
index d9810e8a2..6f42b866b 100644
--- a/selfhost/entry/tests/SecurityConfig.test.ts
+++ b/selfhost/entry/tests/SecurityConfig.test.ts
@@ -7,6 +7,7 @@ const validProductionEnvironment = {
   DATABASE_PASSWORD: "database-secret",
   MIMIC_PUBLIC_BASE_URL: "https://mimic.example.test",
   MIMIC_ROOT_PASSWORD: "mimic-secret",
+  OPENAI_API_KEY: "configured-openai-key",
   PUBLIC_BASE_URL: "https://app.example.test",
   PUBLIC_FILES_BASE_URL: "https://files.example.test",
   S3_SECRET_ACCESS_KEY: "object-store-secret",
diff --git a/selfhost/smoke.mts b/selfhost/smoke.mts
index 947652f4f..80ffb8a52 100644
--- a/selfhost/smoke.mts
+++ b/selfhost/smoke.mts
@@ -55,9 +55,7 @@ const authenticateSocket = (socketUrl: string, token: string): Promise<unknown[]
       messages.push(message);
       if (message.type === "snapshot") {
         const version =
-          "version" in message && typeof message.version === "number"
-            ? message.version
-            : 1;
+          "version" in message && typeof message.version === "number" ? message.version : 1;
         const value = "value" in message ? message.value : undefined;
         socket.send(
           JSON.stringify({
@@ -78,6 +76,63 @@ const authenticateSocket = (socketUrl: string, token: string): Promise<unknown[]
     });
   });
 
+const smokeAgentSession = async (): Promise<void> => {
+  const token = process.env.SELFHOST_AGENT_SMOKE_BEARER_TOKEN?.trim();
+  const organizationId = process.env.SELFHOST_AGENT_SMOKE_ORGANIZATION_ID?.trim();
+  const projectId = process.env.SELFHOST_AGENT_SMOKE_PROJECT_ID?.trim();
+  if (!token && !organizationId && !projectId) return;
+  if (!token || !organizationId || !projectId) {
+    throw new Error(
+      "SELFHOST_AGENT_SMOKE_BEARER_TOKEN, SELFHOST_AGENT_SMOKE_ORGANIZATION_ID, and SELFHOST_AGENT_SMOKE_PROJECT_ID must be set together",
+    );
+  }
+  const sessionId = `agent_smoke_${crypto.randomUUID().replaceAll("-", "")}`;
+  const socketUrl = new URL(`/api/agent/sessions/${sessionId}/ws`, url.replace(/^http/, "ws"));
+  socketUrl.searchParams.set("organizationId", organizationId);
+  socketUrl.searchParams.set("projectId", projectId);
+  socketUrl.searchParams.set("surface", "designer");
+  const paywallId = process.env.SELFHOST_AGENT_SMOKE_PAYWALL_ID?.trim();
+  if (paywallId) socketUrl.searchParams.set("paywallId", paywallId);
+
+  await new Promise<void>((resolve, reject) => {
+    const socket = new WebSocket(socketUrl, {
+      headers: { authorization: `Bearer ${token}` },
+    });
+    const timeout = setTimeout(() => {
+      socket.close();
+      reject(new Error("Timed out waiting for the durable agent round-trip"));
+    }, 60_000);
+    socket.once("error", reject);
+    socket.once("open", () => {
+      socket.send(
+        JSON.stringify({
+          v: 1,
+          type: "prompt",
+          requestId: "compose-agent-smoke",
+          text: "Reply with a short confirmation without modifying anything.",
+        }),
+      );
+    });
+    socket.on("message", (data) => {
+      const frame = JSON.parse(data.toString()) as {
+        readonly type?: string;
+        readonly message?: string;
+        readonly event?: { readonly type?: string };
+      };
+      if (frame.type === "error") {
+        clearTimeout(timeout);
+        socket.close();
+        reject(new Error(frame.message ?? "Agent session failed"));
+      }
+      if (frame.type === "event" && frame.event?.type === "agent_end") {
+        clearTimeout(timeout);
+        socket.close(1000, "agent smoke complete");
+        resolve();
+      }
+    });
+  });
+};
+
 await waitForHealth();
 await assertApplicationSurface();
 const sdk = new MimicSDK({ url, username, password });
@@ -127,10 +182,9 @@ try {
       message.type === "transaction",
   );
   if (!authenticated || !snapshot || !transaction) {
-    throw new Error(
-      "WebSocket authentication, snapshot, or transaction message was missing",
-    );
+    throw new Error("WebSocket authentication, snapshot, or transaction message was missing");
   }
+  await smokeAgentSession();
   console.log("Self-host compose smoke passed");
 } finally {
   if (collectionId) {

From bd57beeefe37532f5ff281389b2ff4dcd6f1e856 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 15 Jul 2026 21:00:27 +0200
Subject: [PATCH 096/129] feat: expand agent component authoring

---
 apps/backend/src/BackendApp.ts                |  33 +-
 apps/backend/src/ai/DesignerContext.ts        |  28 +-
 apps/backend/src/ai/WorkspaceAgentServices.ts |   4 +-
 .../ai/WorkspaceAgentSessionFactory.test.ts   |   3 +-
 .../src/ai/WorkspaceAgentSessionFactory.ts    |   8 +-
 .../src/ai/WorkspaceAgentTools.test.ts        | 101 ++-
 apps/backend/src/ai/WorkspaceAgentTools.ts    | 186 +++---
 .../src/ai/skills/component-authoring.test.ts | 176 +++++
 .../src/ai/skills/component-authoring.ts      | 609 ++++++++++++++++++
 .../src/ai/skills/paywall-authoring.ts        |  41 +-
 apps/backend/src/ai/skills/registry.ts        |   9 +-
 apps/backend/src/ai/surfaces.test.ts          |  32 +-
 apps/backend/src/ai/tools.test.ts             | 193 +++---
 apps/backend/src/ai/workspace-tools.ts        | 381 ++++++-----
 apps/backend/src/mcp/dispatch.test.ts         |  64 +-
 apps/backend/src/mcp/protocol.test.ts         |  16 +-
 apps/backend/src/mcp/protocol.ts              |  25 +-
 apps/backend/src/mcp/tool-manifest.test.ts    |  51 +-
 apps/backend/src/mcp/tool-manifest.ts         | 113 ++--
 .../src/rpcs/agent-session-rpcs.test.ts       |  21 +-
 apps/backend/src/rpcs/agent-session-rpcs.ts   |   8 +-
 apps/backend/src/rpcs/paywall-rpcs.ts         |  38 +-
 apps/backend/src/testing/rpc-smoke-cases.ts   |   8 +-
 apps/mimic-db/src/api/handlers/documents.ts   |  56 ++
 apps/mimic-db/src/app/hostService.ts          |  16 +
 apps/mimic-db/src/core/local-host-service.ts  | 214 +++++-
 apps/mimic-db/src/core/pg-store.ts            |  14 +
 .../src/worker/durable-host-service.ts        |  96 ++-
 apps/mimic-db/src/ws/document-session.ts      |  21 +-
 apps/mimic-db/tests/helpers.ts                |  10 +-
 .../tests/integration/host-flow.test.ts       |  44 ++
 .../tests/unit/document-session.test.ts       |  12 +-
 .../src/features/studio/ai/agent-ui.test.ts   |  10 +-
 .../studio/ai/components/chat-shell.tsx       |  46 +-
 .../lib/tanstack-query/agent-sessions.ts      |  10 +-
 .../studio/lib/tanstack-query/paywalls.ts     |   8 +-
 .../component-node-renderer.tsx               |  25 +-
 .../component-wrapper-style.test.ts           |  38 ++
 .../node-renderers/component-wrapper-style.ts |  19 +
 .../overlay/working-indicator-overlay.tsx     |  10 +-
 .../designer/code-mode/manifest-upload.ts     |   9 +-
 .../panels/left-panel/layer-expansion.test.ts |  42 ++
 .../panels/left-panel/layer-expansion.ts      |  29 +
 .../panels/left-panel/layers-section.tsx      |  31 +-
 .../state/actions/ai-panel-actions.ts         |   6 +-
 .../state/actions/selection-actions.test.ts   |  27 +-
 .../designer/state/designer-store-state.tsx   |   4 +-
 .../designer/state/designer-store.tsx         |   3 +-
 .../designer/state/utils/ai-working.test.ts   |  27 +
 .../designer/state/utils/ai-working.ts        |   8 +
 .../paywalls/designer/state/utils/presence.ts |   1 +
 .../$projectSlug/paywalls.index.tsx           |  53 +-
 .../security/endpoint-authorization-matrix.md |   4 +-
 integrations/claude-code/voidhash/README.md   |   6 +-
 .../skills/code-component-authoring/SKILL.md  | 604 +++++++++++++++++
 .../voidhash/skills/design-paywall/SKILL.md   |  41 +-
 packages/core/src/services/index.ts           |   2 +-
 .../PaywallThumbnailService.test.ts           | 200 +++++-
 .../PaywallThumbnailService.ts                | 329 +++++++---
 .../ComponentManifestCacheService.test.ts     |  43 +-
 .../ComponentManifestCacheService.ts          |  39 +-
 .../PaywallEditChangeSetService.test.ts       | 242 -------
 .../PaywallEditChangeSetService.ts            | 306 ---------
 .../PaywallEditSessionService.test.ts         | 392 +++++++++++
 .../PaywallEditSessionService.ts              | 423 ++++++++++++
 .../PaywallWorkspaceService.test.ts           |  56 +-
 .../PaywallWorkspaceService.ts                | 274 +++++++-
 .../core/src/services/paywalls/MimicHost.ts   |  42 ++
 packages/core/src/utils/generate-id.ts        |   2 +-
 ...WorkspaceAuthorization.integration.test.ts |  17 +
 .../migration.sql                             |  17 +
 .../migration.sql                             |   1 +
 .../migration.sql                             |   2 +
 packages/db/src/schema.ts                     |  30 +-
 packages/mimic-schema/src/presence.ts         |  16 +
 .../src/effect/RawCollectionHandle.ts         | 100 +++
 packages/mimic-server/src/effect/index.ts     |   8 +-
 packages/mimic-server/src/promise/MimicSDK.ts |  54 ++
 .../mimic-server/src/rpc/groups/documents.ts  |  61 ++
 packages/mimic-server/src/rpc/index.ts        |   5 +
 .../mimic-server/tests/rpc/contracts.test.ts  |   5 +
 .../src/templates/runtime-bundle.generated.ts |   2 +-
 .../src/styles/node-styles.test.ts            |   6 +
 .../src/styles/text-styles.ts                 |   2 +
 .../rpc/src/groups/AgentSessionRpcsDef.ts     |   4 +-
 packages/rpc/src/groups/PaywallRpcsDef.ts     |  10 +
 .../rpc/src/groups/PaywallWorkspaceRpcsDef.ts |   1 +
 plugins/voidhash/.codex-plugin/plugin.json    |   9 +-
 plugins/voidhash/README.md                    |   6 +-
 .../skills/code-component-authoring/SKILL.md  | 604 +++++++++++++++++
 .../agents/openai.yaml                        |   4 +
 .../voidhash/skills/design-paywall/SKILL.md   |  41 +-
 scripts/sync-plugins.ts                       |  48 +-
 selfhost/entry/src/backend/MimicHost.ts       | 107 ++-
 .../entry/src/mimic/MimicNodeWebSocket.ts     |  76 ++-
 selfhost/entry/src/mimic/config.ts            |   8 +-
 .../tests/PaywallRelease.integration.test.ts  |   5 +
 .../tests/ThumbnailQueue.integration.test.ts  |   1 +
 98 files changed, 5734 insertions(+), 1558 deletions(-)
 create mode 100644 apps/backend/src/ai/skills/component-authoring.test.ts
 create mode 100644 apps/backend/src/ai/skills/component-authoring.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.test.ts
 create mode 100644 apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.ts
 create mode 100644 integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md
 delete mode 100644 packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
 delete mode 100644 packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/PaywallEditSessionService.test.ts
 create mode 100644 packages/core/src/services/paywallWorkspace/PaywallEditSessionService.ts
 create mode 100644 packages/db/src/alchemy-migrations/20260715120000_rename_paywall_edit_sessions/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260715140000_allow_concurrent_paywall_edit_sessions/migration.sql
 create mode 100644 packages/db/src/alchemy-migrations/20260715153000_add_component_preview_trees/migration.sql
 create mode 100644 plugins/voidhash/skills/code-component-authoring/SKILL.md
 create mode 100644 plugins/voidhash/skills/code-component-authoring/agents/openai.yaml

diff --git a/apps/backend/src/BackendApp.ts b/apps/backend/src/BackendApp.ts
index ed55f1bd6..a3583e2e2 100644
--- a/apps/backend/src/BackendApp.ts
+++ b/apps/backend/src/BackendApp.ts
@@ -47,10 +47,11 @@ import {
   PaywallArtifactStore,
   PaywallArtifactStoreError,
   PaywallDeployService,
-  PaywallEditChangeSetService,
+  PaywallEditSessionService,
   PaywallLocationService,
   PaywallReleaseService,
   PaywallService,
+  PaywallThumbnailService,
   PaywallWorkspaceService,
   ComponentCompiler,
   ComponentManifestCacheService,
@@ -490,6 +491,7 @@ export const BackendPublicFileStoreStubLive = Layer.succeed(PublicFileStore, {
  * is exercised end-to-end in process.
  */
 export const BackendMimicHostStubLive = Layer.succeed(MimicHost, {
+  closePaywallConnection: () => Effect.void,
   createPaywallEditToken: () =>
     Effect.sync(() => ({
       expiresAt: new Date(Date.now() + 300_000),
@@ -510,6 +512,28 @@ export const BackendMimicHostStubLive = Layer.succeed(MimicHost, {
         message: "mimic host document read is not stubbed",
       }),
     ),
+  getConnectedPaywallDocument: () =>
+    Effect.fail(
+      new MimicHostError({
+        cause: "connected document reads are not available in the in-process backend harness",
+        message: "mimic host connected document read is not stubbed",
+      }),
+    ),
+  heartbeatPaywallConnection: () => Effect.void,
+  openPaywallConnection: () =>
+    Effect.fail(
+      new MimicHostError({
+        cause: "document connections are not available in the in-process backend harness",
+        message: "mimic host document connection is not stubbed",
+      }),
+    ),
+  submitConnectedPaywallTransaction: () =>
+    Effect.fail(
+      new MimicHostError({
+        cause: "connected transaction submits are not available in the in-process backend harness",
+        message: "mimic host connected transaction submit is not stubbed",
+      }),
+    ),
   submitPaywallTransaction: () =>
     Effect.fail(
       new MimicHostError({
@@ -739,6 +763,10 @@ const buildBackendServiceGraph = <
     Layer.provide(ComponentManifestCacheService.layer),
   );
 
+  const PaywallThumbnailServiceLive = PaywallThumbnailService.layer.pipe(
+    Layer.provide(ComponentManifestCacheService.layer),
+  );
+
   const AgentSessionIndexServiceLive = AgentSessionIndexService.layer;
   const BaseDomainServicesLayer = Layer.mergeAll(
     AgentSessionIndexServiceLive,
@@ -771,13 +799,14 @@ const buildBackendServiceGraph = <
     PaywallLocationService.layer.pipe(Layer.provide(ExperimentServiceLayer)),
     PaywallReleaseService.layer.pipe(Layer.provide(BackendSnapshotHtmlRendererLive)),
     PaywallService.layer,
+    PaywallThumbnailServiceLive,
     ComponentManifestCacheService.layer,
     // The workspace service needs PaywallService (authz + slug resolution) and
     // the manifest cache; `mergeAll` does not cross-wire siblings, so both are
     // provided explicitly. MimicHost and ComponentCompiler come from the
     // infrastructure layer.
     PaywallWorkspaceServiceLive,
-    PaywallEditChangeSetService.layer.pipe(Layer.provide(PaywallWorkspaceServiceLive)),
+    PaywallEditSessionService.layer.pipe(Layer.provide(PaywallWorkspaceServiceLive)),
     PerkGrantService.layer,
     PerkService.layer,
     PersonService.layer,
diff --git a/apps/backend/src/ai/DesignerContext.ts b/apps/backend/src/ai/DesignerContext.ts
index d80613212..71a8a5b1e 100644
--- a/apps/backend/src/ai/DesignerContext.ts
+++ b/apps/backend/src/ai/DesignerContext.ts
@@ -6,11 +6,13 @@ import { Effect } from "effect";
 /** Server-resolved facts about the user's current designer workspace. */
 export interface DesignerContext {
   readonly paywalls: ReadonlyArray<{
+    readonly paywallId: string;
     readonly slug: string;
     readonly name: string;
     readonly componentFileNames: ReadonlyArray<string>;
   }>;
   readonly openPaywall?: {
+    readonly paywallId: string;
     readonly slug: string;
     readonly name: string;
   };
@@ -53,12 +55,18 @@ export const buildDesignerContext = (
       (row) =>
         workspace.readDocument(input.projectId, row.slug).pipe(
           Effect.map((resolved) => ({
+            paywallId: row.id,
             slug: row.slug,
             name: row.name,
             componentFileNames: componentFileNamesFromDocument(resolved.root),
           })),
           Effect.catchCause(() =>
-            Effect.succeed({ slug: row.slug, name: row.name, componentFileNames: [] }),
+            Effect.succeed({
+              paywallId: row.id,
+              slug: row.slug,
+              name: row.name,
+              componentFileNames: [],
+            }),
           ),
         ),
       { concurrency: 8 },
@@ -66,7 +74,15 @@ export const buildDesignerContext = (
     const openRow = rows.find((row) => row.id === input.paywallId);
     return {
       paywalls,
-      ...(openRow === undefined ? {} : { openPaywall: { slug: openRow.slug, name: openRow.name } }),
+      ...(openRow === undefined
+        ? {}
+        : {
+            openPaywall: {
+              paywallId: openRow.id,
+              slug: openRow.slug,
+              name: openRow.name,
+            },
+          }),
       selectedNodeIds: input.selectedNodeIds,
     };
   }).pipe(Effect.catchCause(() => Effect.succeed(undefined)));
@@ -76,7 +92,7 @@ const formatPaywallEntry = (paywall: DesignerContext["paywalls"][number]): strin
     paywall.componentFileNames.length > 0
       ? `components: ${paywall.componentFileNames.map((fileName) => `components/${fileName}`).join(", ")}`
       : "no code components";
-  return `- ${paywall.slug} ("${paywall.name}"): ${components}`;
+  return `- ${paywall.paywallId} ("${paywall.name}", slug "${paywall.slug}"): ${components}`;
 };
 
 /** Renders the dynamic designer facts appended to the agent system prompt. */
@@ -84,13 +100,13 @@ export const renderDesignerContext = (context: DesignerContext): string => {
   const sections: string[] = [];
   if (context.paywalls.length > 0) {
     sections.push(
-      `Paywalls in this project (slug, display name, code components):\n${context.paywalls.map(formatPaywallEntry).join("\n")}`,
+      `Paywalls in this project (stable id, display name, slug, code components):\n${context.paywalls.map(formatPaywallEntry).join("\n")}`,
     );
   }
   if (context.openPaywall !== undefined) {
-    const { slug, name } = context.openPaywall;
+    const { paywallId, slug, name } = context.openPaywall;
     const lines = [
-      `The user currently has the "${name}" paywall (slug "${slug}") open in the designer. Unqualified references like "this paywall", "the current screen", or "here" mean this one — edit it with \`edit_paywall\`.`,
+      `The user currently has the "${name}" paywall (id "${paywallId}", slug "${slug}") open in the designer. Unqualified references like "this paywall", "the current screen", or "here" mean this one — open it with \`begin_paywall_edit({ paywallId: "${paywallId}" })\`, then pass the returned \`editSessionId\` to every scoped tool.`,
     ];
     if (context.selectedNodeIds.length > 0) {
       const plural = context.selectedNodeIds.length === 1 ? "node" : "nodes";
diff --git a/apps/backend/src/ai/WorkspaceAgentServices.ts b/apps/backend/src/ai/WorkspaceAgentServices.ts
index 33b180096..a35ea5110 100644
--- a/apps/backend/src/ai/WorkspaceAgentServices.ts
+++ b/apps/backend/src/ai/WorkspaceAgentServices.ts
@@ -1,7 +1,7 @@
 import {
   ComponentManifestCacheService,
   PaywallDeployService,
-  PaywallEditChangeSetService,
+  PaywallEditSessionService,
   PaywallService,
   PaywallWorkspaceService,
 } from "@voidhash/core/services";
@@ -19,5 +19,5 @@ export const WorkspaceAgentServicesLive = Layer.mergeAll(
   ComponentManifestCacheServiceLive,
   PaywallDeployService.layer,
   PaywallWorkspaceServiceLive,
-  PaywallEditChangeSetService.layer.pipe(Layer.provide(PaywallWorkspaceServiceLive)),
+  PaywallEditSessionService.layer.pipe(Layer.provide(PaywallWorkspaceServiceLive)),
 );
diff --git a/apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts b/apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts
index 634694fc4..3bfae06ad 100644
--- a/apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts
+++ b/apps/backend/src/ai/WorkspaceAgentSessionFactory.test.ts
@@ -30,11 +30,12 @@ describe("makeWorkspaceAgentSessionFactory", () => {
     });
 
     expect(agent.state.systemPrompt).toContain("<name>paywall-authoring</name>");
+    expect(agent.state.systemPrompt).toContain("<name>code-component-authoring</name>");
     expect(agent.state.systemPrompt).not.toContain("Document model and authorable tree");
     expect(agent.state.tools.map((tool) => tool.name)).toContain("read_skill");
     expect(agent.state.tools.map((tool) => tool.name)).toContain("edit_paywall");
     const editPaywall = agent.state.tools.find((tool) => tool.name === "edit_paywall");
-    expect(editPaywall?.parameters.properties).not.toHaveProperty("changeSetId");
+    expect(editPaywall?.parameters.properties).toHaveProperty("editSessionId");
 
     await factory.preparePrompt?.({
       agent,
diff --git a/apps/backend/src/ai/WorkspaceAgentSessionFactory.ts b/apps/backend/src/ai/WorkspaceAgentSessionFactory.ts
index 6d2406a93..164a2eb39 100644
--- a/apps/backend/src/ai/WorkspaceAgentSessionFactory.ts
+++ b/apps/backend/src/ai/WorkspaceAgentSessionFactory.ts
@@ -16,7 +16,7 @@ import { PaywallService } from "@voidhash/core/services";
 import { buildDesignerContext } from "./DesignerContext.ts";
 import { registeredSkillSource } from "./skills/registry.ts";
 import { designerAgentSystemPrompt } from "./surfaces.ts";
-import { AgentChangeSetTracker, makeWorkspaceAgentTools } from "./WorkspaceAgentTools.ts";
+import { AgentEditSessionTracker, makeWorkspaceAgentTools } from "./WorkspaceAgentTools.ts";
 import type { WorkspaceToolDeps } from "./workspace-tools.ts";
 
 /** Services resolved by the Pi agent's in-process tools. */
@@ -93,14 +93,14 @@ export const makeWorkspaceAgentSessionFactory = <ConnectionData>(
 
   return {
     create: async (input) => {
-      const changeSets = new AgentChangeSetTracker();
-      changeSets.rehydrate(input.messages);
+      const editSessions = new AgentEditSessionTracker();
+      editSessions.rehydrate(input.messages);
       const runEffect = bindEffectRunner(options.runEffect, input.connectionData);
       const tools = [
         ...makeWorkspaceAgentTools(
           { projectId: input.owner.projectId, agentSessionId: input.sessionId },
           runEffect,
-          changeSets,
+          editSessions,
         ),
         makeReadSkillTool(registeredSkillSource()),
       ];
diff --git a/apps/backend/src/ai/WorkspaceAgentTools.test.ts b/apps/backend/src/ai/WorkspaceAgentTools.test.ts
index fc77b8638..9828fa518 100644
--- a/apps/backend/src/ai/WorkspaceAgentTools.test.ts
+++ b/apps/backend/src/ai/WorkspaceAgentTools.test.ts
@@ -1,74 +1,61 @@
 import { Effect } from "effect";
 import { describe, expect, it } from "vite-plus/test";
 
-import { AgentChangeSetTracker } from "./WorkspaceAgentTools.ts";
+import { AgentEditSessionTracker } from "./WorkspaceAgentTools.ts";
 
-describe("AgentChangeSetTracker", () => {
-  it("opens once and injects the change set into subsequent lifecycle calls", async () => {
-    const tracker = new AgentChangeSetTracker();
-    let begins = 0;
-    const begin = (slug: string) => {
-      begins += 1;
-      return Effect.succeed({
-        output: JSON.stringify({ changeSetId: "change-1", slug }),
+describe("AgentEditSessionTracker", () => {
+  it("accepts scoped calls only after begin_paywall_edit opens the session", async () => {
+    const tracker = new AgentEditSessionTracker();
+    tracker.observe(
+      "begin_paywall_edit",
+      { paywallId: "pw_1" },
+      {
+        output: JSON.stringify({ editSessionId: "edit-1", paywallId: "pw_1" }),
         isError: false,
-      });
-    };
+      },
+    );
 
     await expect(
-      Effect.runPromise(tracker.prepare("edit_paywall", { slug: "trial", edits: [] }, begin)),
-    ).resolves.toMatchObject({ changeSetId: "change-1" });
-    await expect(
-      Effect.runPromise(tracker.prepare("get_paywall_preview", { slug: "trial" }, begin)),
-    ).resolves.toEqual({ slug: "trial", changeSetId: "change-1" });
-    expect(begins).toBe(1);
+      Effect.runPromise(tracker.prepare("edit_paywall", { editSessionId: "edit-1", edits: [] })),
+    ).resolves.toMatchObject({ editSessionId: "edit-1" });
   });
 
-  it("overwrites model-supplied capabilities with the session-owned change set", async () => {
-    const tracker = new AgentChangeSetTracker();
-    let begins = 0;
-    const prepared = await Effect.runPromise(
-      tracker.prepare(
-        "edit_paywall",
-        { slug: "trial", changeSetId: "change-attacker", edits: [] },
-        (slug) => {
-          begins += 1;
-          return Effect.succeed({
-            output: JSON.stringify({ changeSetId: "change-owned", slug }),
-            isError: false,
-          });
-        },
+  it("rejects model-supplied edit sessions not owned by the durable session", async () => {
+    const tracker = new AgentEditSessionTracker();
+    await expect(
+      Effect.runPromise(
+        tracker.prepare("edit_paywall", { editSessionId: "edit-attacker", edits: [] }),
       ),
-    );
-
-    expect(prepared).toMatchObject({ changeSetId: "change-owned" });
-    expect(tracker.get("trial")).toBe("change-owned");
-    expect(begins).toBe(1);
+    ).rejects.toThrow("not owned");
   });
 
   it("clears the capability only after a successful finish or revert", async () => {
-    const tracker = new AgentChangeSetTracker();
+    const tracker = new AgentEditSessionTracker();
     tracker.observe(
       "begin_paywall_edit",
-      { slug: "trial" },
+      { paywallId: "pw_1" },
       {
-        output: JSON.stringify({ changeSetId: "change-1", slug: "trial" }),
+        output: JSON.stringify({ editSessionId: "edit-1", paywallId: "pw_1" }),
         isError: false,
       },
     );
 
-    tracker.observe("finish_paywall_edit", { slug: "trial" }, { output: "no", isError: true });
-    expect(tracker.get("trial")).toBe("change-1");
+    tracker.observe(
+      "finish_paywall_edit",
+      { editSessionId: "edit-1" },
+      { output: "no", isError: true },
+    );
+    expect(tracker.get("pw_1")).toBe("edit-1");
     tracker.observe(
       "revert_paywall_edit",
-      { changeSetId: "change-1" },
+      { editSessionId: "edit-1" },
       { output: "ok", isError: false },
     );
-    expect(tracker.get("trial")).toBeUndefined();
+    expect(tracker.get("pw_1")).toBeUndefined();
   });
 
   it("rehydrates an unfinished capability from persisted Pi tool results", async () => {
-    const tracker = new AgentChangeSetTracker();
+    const tracker = new AgentEditSessionTracker();
     tracker.rehydrate([
       {
         role: "toolResult",
@@ -78,24 +65,16 @@ describe("AgentChangeSetTracker", () => {
         details: {
           toolName: "edit_paywall",
           output: "Updated",
-          changeSetId: "change-1",
-          slug: "trial",
+          editSessionId: "edit-1",
+          paywallId: "pw_1",
         },
         isError: true,
         timestamp: 1,
       },
     ]);
-    let begins = 0;
-
     await expect(
-      Effect.runPromise(
-        tracker.prepare("edit_paywall", { slug: "trial", edits: [] }, () => {
-          begins += 1;
-          return Effect.succeed({ output: "unexpected", isError: true });
-        }),
-      ),
-    ).resolves.toMatchObject({ changeSetId: "change-1" });
-    expect(begins).toBe(0);
+      Effect.runPromise(tracker.prepare("edit_paywall", { editSessionId: "edit-1", edits: [] })),
+    ).resolves.toMatchObject({ editSessionId: "edit-1" });
 
     tracker.rehydrate([
       {
@@ -106,8 +85,8 @@ describe("AgentChangeSetTracker", () => {
         details: {
           toolName: "edit_paywall",
           output: "Updated",
-          changeSetId: "change-1",
-          slug: "trial",
+          editSessionId: "edit-1",
+          paywallId: "pw_1",
         },
         isError: false,
         timestamp: 1,
@@ -120,13 +99,13 @@ describe("AgentChangeSetTracker", () => {
         details: {
           toolName: "finish_paywall_edit",
           output: "Finished",
-          changeSetId: "change-1",
-          slug: "trial",
+          editSessionId: "edit-1",
+          paywallId: "pw_1",
         },
         isError: false,
         timestamp: 2,
       },
     ]);
-    expect(tracker.get("trial")).toBeUndefined();
+    expect(tracker.get("pw_1")).toBeUndefined();
   });
 });
diff --git a/apps/backend/src/ai/WorkspaceAgentTools.ts b/apps/backend/src/ai/WorkspaceAgentTools.ts
index a7304e858..87935cd3f 100644
--- a/apps/backend/src/ai/WorkspaceAgentTools.ts
+++ b/apps/backend/src/ai/WorkspaceAgentTools.ts
@@ -14,7 +14,10 @@ import type {
   WorkspaceToolScope,
 } from "./workspace-tools.ts";
 
-const CHANGE_SET_TOOLS = new Set([
+const EDIT_SESSION_TOOLS = new Set([
+  "get_paywall",
+  "get_components",
+  "read_component",
   "edit_paywall",
   "duplicate_subtree",
   "write_component",
@@ -22,6 +25,7 @@ const CHANGE_SET_TOOLS = new Set([
   "delete_component",
   "get_paywall_preview",
   "finish_paywall_edit",
+  "revert_paywall_edit",
 ]);
 
 const inputRecord = (input: unknown): Record<string, unknown> | undefined =>
@@ -29,14 +33,14 @@ const inputRecord = (input: unknown): Record<string, unknown> | undefined =>
     ? (input as Record<string, unknown>)
     : undefined;
 
-const decodedChangeSet = (
+const decodedEditSession = (
   result: WorkspaceToolResult,
-): { readonly changeSetId: string; readonly slug: string } | undefined => {
+): { readonly editSessionId: string; readonly paywallId: string } | undefined => {
   if (result.isError) return undefined;
   try {
-    const value = JSON.parse(result.output) as { changeSetId?: unknown; slug?: unknown };
-    return typeof value.changeSetId === "string" && typeof value.slug === "string"
-      ? { changeSetId: value.changeSetId, slug: value.slug }
+    const value = JSON.parse(result.output) as { editSessionId?: unknown; paywallId?: unknown };
+    return typeof value.editSessionId === "string" && typeof value.paywallId === "string"
+      ? { editSessionId: value.editSessionId, paywallId: value.paywallId }
       : undefined;
   } catch {
     return undefined;
@@ -44,90 +48,87 @@ const decodedChangeSet = (
 };
 
 /** Tracks the server-managed edit capability used by an internal agent session. */
-export class AgentChangeSetTracker {
-  readonly #activeBySlug = new Map<string, string>();
+export class AgentEditSessionTracker {
+  readonly #activeByPaywallId = new Map<string, string>();
 
-  /** Returns the active change-set id for a paywall, when one has been opened. */
-  readonly get = (slug: string): string | undefined => this.#activeBySlug.get(slug);
+  /** Returns the active edit-session id for a paywall, when one has been opened. */
+  readonly get = (paywallId: string): string | undefined => this.#activeByPaywallId.get(paywallId);
+
+  /** Returns the paywall owned by an active edit-session handle. */
+  readonly paywallIdFor = (editSessionId: string): string | undefined =>
+    [...this.#activeByPaywallId].find(([, activeId]) => activeId === editSessionId)?.[0];
 
   /** Rebuilds active capabilities from persisted Pi tool-result messages. */
   readonly rehydrate = (messages: ReadonlyArray<AgentMessage>): void => {
-    this.#activeBySlug.clear();
+    this.#activeByPaywallId.clear();
     for (const message of messages) {
       if (message.role !== "toolResult") continue;
       const details = inputRecord(message.details);
       const toolName = typeof details?.toolName === "string" ? details.toolName : message.toolName;
       const decoded =
         typeof details?.output === "string"
-          ? decodedChangeSet({ output: details.output, isError: false })
+          ? decodedEditSession({ output: details.output, isError: false })
           : undefined;
-      const changeSetId =
-        typeof details?.changeSetId === "string" ? details.changeSetId : decoded?.changeSetId;
-      const slug = typeof details?.slug === "string" ? details.slug : decoded?.slug;
-      if (changeSetId !== undefined && slug !== undefined) {
-        this.#activeBySlug.set(slug, changeSetId);
+      const editSessionId =
+        typeof details?.editSessionId === "string" ? details.editSessionId : decoded?.editSessionId;
+      const paywallId =
+        typeof details?.paywallId === "string" ? details.paywallId : decoded?.paywallId;
+      if (editSessionId !== undefined && paywallId !== undefined) {
+        this.#activeByPaywallId.set(paywallId, editSessionId);
       }
       if (message.isError) continue;
-      if (toolName === "finish_paywall_edit" && slug !== undefined) {
-        this.#activeBySlug.delete(slug);
-      } else if (toolName === "revert_paywall_edit" && changeSetId !== undefined) {
-        for (const [activeSlug, activeId] of this.#activeBySlug) {
-          if (activeId === changeSetId) this.#activeBySlug.delete(activeSlug);
+      if (toolName === "finish_paywall_edit" && editSessionId !== undefined) {
+        for (const [activePaywallId, activeId] of this.#activeByPaywallId) {
+          if (activeId === editSessionId) this.#activeByPaywallId.delete(activePaywallId);
+        }
+      } else if (toolName === "revert_paywall_edit" && editSessionId !== undefined) {
+        for (const [activePaywallId, activeId] of this.#activeByPaywallId) {
+          if (activeId === editSessionId) this.#activeByPaywallId.delete(activePaywallId);
         }
       }
     }
   };
 
   /**
-   * Adds the active capability to a lifecycle tool call. The first mutating call
-   * for a paywall opens the change set through the same workspace implementation
-   * exposed to MCP.
+   * Accepts only edit-session handles opened by this durable agent session.
    */
-  readonly prepare = <R>(
-    toolName: string,
-    input: unknown,
-    begin: (slug: string) => Effect.Effect<WorkspaceToolResult, never, R>,
-  ): Effect.Effect<unknown, Error, R> => {
+  readonly prepare = (toolName: string, input: unknown): Effect.Effect<unknown, Error> => {
     const record = inputRecord(input);
-    if (!CHANGE_SET_TOOLS.has(toolName) || record === undefined) {
+    if (!EDIT_SESSION_TOOLS.has(toolName) || record === undefined) {
       return Effect.succeed(input);
     }
-    const slug = record.slug;
-    if (typeof slug !== "string" || slug.length === 0) {
-      return Effect.succeed(input);
+    const editSessionId = record.editSessionId;
+    if (typeof editSessionId !== "string" || editSessionId.length === 0) {
+      return Effect.fail(new Error(`Call begin_paywall_edit before ${toolName}.`));
     }
-    const active = this.#activeBySlug.get(slug);
-    if (active !== undefined) {
-      return Effect.succeed({ ...record, changeSetId: active });
+    if (![...this.#activeByPaywallId.values()].includes(editSessionId)) {
+      return Effect.fail(
+        new Error(`Edit session "${editSessionId}" is not owned by this agent session.`),
+      );
     }
-    return begin(slug).pipe(
-      Effect.flatMap((result) => {
-        const opened = decodedChangeSet(result);
-        if (opened === undefined) {
-          return Effect.fail(new Error(result.output));
-        }
-        this.#activeBySlug.set(opened.slug, opened.changeSetId);
-        return Effect.succeed({ ...record, changeSetId: opened.changeSetId });
-      }),
-    );
+    return Effect.succeed(input);
   };
 
   /** Updates tracked lifecycle state after a workspace tool completes. */
   readonly observe = (toolName: string, input: unknown, result: WorkspaceToolResult): void => {
     if (result.isError) return;
     if (toolName === "begin_paywall_edit") {
-      const opened = decodedChangeSet(result);
-      if (opened !== undefined) this.#activeBySlug.set(opened.slug, opened.changeSetId);
+      const opened = decodedEditSession(result);
+      if (opened !== undefined) {
+        this.#activeByPaywallId.set(opened.paywallId, opened.editSessionId);
+      }
       return;
     }
     const record = inputRecord(input);
-    if (toolName === "finish_paywall_edit" && typeof record?.slug === "string") {
-      this.#activeBySlug.delete(record.slug);
+    if (toolName === "finish_paywall_edit" && typeof record?.editSessionId === "string") {
+      for (const [paywallId, editSessionId] of this.#activeByPaywallId) {
+        if (editSessionId === record.editSessionId) this.#activeByPaywallId.delete(paywallId);
+      }
       return;
     }
-    if (toolName === "revert_paywall_edit" && typeof record?.changeSetId === "string") {
-      for (const [slug, changeSetId] of this.#activeBySlug) {
-        if (changeSetId === record.changeSetId) this.#activeBySlug.delete(slug);
+    if (toolName === "revert_paywall_edit" && typeof record?.editSessionId === "string") {
+      for (const [paywallId, editSessionId] of this.#activeByPaywallId) {
+        if (editSessionId === record.editSessionId) this.#activeByPaywallId.delete(paywallId);
       }
     }
   };
@@ -137,20 +138,11 @@ export class AgentChangeSetTracker {
 export interface WorkspaceAgentToolDetails {
   readonly toolName: string;
   readonly output: string;
-  readonly changeSetId?: string;
-  readonly slug?: string;
+  readonly editSessionId?: string;
+  readonly paywallId?: string;
 }
 
-const internalParameters = (schema: Record<string, unknown>): TSchema => {
-  const cloned = structuredClone(schema);
-  const properties = inputRecord(cloned.properties);
-  if (properties !== undefined) delete properties.changeSetId;
-  const required = cloned.required;
-  if (Array.isArray(required)) {
-    cloned.required = required.filter((property) => property !== "changeSetId");
-  }
-  return cloned as unknown as TSchema;
-};
+const internalParameters = (schema: Record<string, unknown>): TSchema => schema as TSchema;
 
 const contentOf = (result: WorkspaceToolResult) =>
   result.content === undefined
@@ -160,16 +152,13 @@ const contentOf = (result: WorkspaceToolResult) =>
 /**
  * Adapts every shared MCP workspace tool into a Pi tool that executes through
  * the host's Effect runner. Tool names and schemas remain aligned with MCP while
- * internal change-set capabilities are injected automatically.
+ * edit-session handles remain explicit and are ownership-checked before use.
  */
 export const makeWorkspaceAgentTools = (
   scope: WorkspaceToolScope,
   runEffect: BoundEffectRunner<WorkspaceToolDeps>,
-  tracker = new AgentChangeSetTracker(),
+  tracker = new AgentEditSessionTracker(),
 ): ReadonlyArray<AgentTool> => {
-  const beginTool = MCP_TOOLS.find((tool) => tool.descriptor.name === "begin_paywall_edit");
-  if (beginTool === undefined) throw new Error("begin_paywall_edit is not registered");
-
   return MCP_TOOLS.map((tool) =>
     makeEffectAgentToolWithRunner<unknown, WorkspaceAgentToolDetails, Error, WorkspaceToolDeps>(
       {
@@ -178,35 +167,34 @@ export const makeWorkspaceAgentTools = (
         description: tool.descriptor.description,
         parameters: internalParameters(tool.descriptor.inputSchema),
         effectHandler: (input) =>
-          tracker
-            .prepare(tool.descriptor.name, input, (slug) => beginTool.dispatch(scope, { slug }))
-            .pipe(
-              Effect.flatMap((prepared) =>
-                tool.dispatch(scope, prepared).pipe(Effect.map((result) => ({ prepared, result }))),
-              ),
-              Effect.map(({ prepared, result }) => {
-                const record = inputRecord(prepared);
-                const slug = typeof record?.slug === "string" ? record.slug : undefined;
-                const suppliedChangeSetId = record?.changeSetId;
-                tracker.observe(tool.descriptor.name, prepared, result);
-                const changeSetId =
-                  typeof suppliedChangeSetId === "string"
-                    ? suppliedChangeSetId
-                    : slug === undefined
-                      ? undefined
-                      : tracker.get(slug);
-                return {
-                  content: contentOf(result),
-                  details: {
-                    toolName: tool.descriptor.name,
-                    output: result.output,
-                    ...(changeSetId === undefined ? {} : { changeSetId }),
-                    ...(slug === undefined ? {} : { slug }),
-                  },
-                  isError: result.isError,
-                };
-              }),
+          tracker.prepare(tool.descriptor.name, input).pipe(
+            Effect.flatMap((prepared) =>
+              tool.dispatch(scope, prepared).pipe(Effect.map((result) => ({ prepared, result }))),
             ),
+            Effect.map(({ prepared, result }) => {
+              const record = inputRecord(prepared);
+              const suppliedEditSessionId = record?.editSessionId;
+              const editSessionId =
+                typeof suppliedEditSessionId === "string"
+                  ? suppliedEditSessionId
+                  : decodedEditSession(result)?.editSessionId;
+              const trackedPaywallId =
+                editSessionId === undefined ? undefined : tracker.paywallIdFor(editSessionId);
+              const paywallId =
+                typeof record?.paywallId === "string" ? record.paywallId : trackedPaywallId;
+              tracker.observe(tool.descriptor.name, prepared, result);
+              return {
+                content: contentOf(result),
+                details: {
+                  toolName: tool.descriptor.name,
+                  output: result.output,
+                  ...(editSessionId === undefined ? {} : { editSessionId }),
+                  ...(paywallId === undefined ? {} : { paywallId }),
+                },
+                isError: result.isError,
+              };
+            }),
+          ),
       },
       runEffect,
     ),
diff --git a/apps/backend/src/ai/skills/component-authoring.test.ts b/apps/backend/src/ai/skills/component-authoring.test.ts
new file mode 100644
index 000000000..294fa5fe8
--- /dev/null
+++ b/apps/backend/src/ai/skills/component-authoring.test.ts
@@ -0,0 +1,176 @@
+import { readFileSync } from "node:fs";
+
+import { describe, expect, it } from "vite-plus/test";
+
+import { componentAuthoringSkill } from "./component-authoring.ts";
+
+const skill = componentAuthoringSkill();
+
+const filesystemSkill = readFileSync(
+  new URL(
+    "../../../../../plugins/voidhash/skills/code-component-authoring/SKILL.md",
+    import.meta.url,
+  ),
+  "utf8",
+);
+const claudeSkill = readFileSync(
+  new URL(
+    "../../../../../integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md",
+    import.meta.url,
+  ),
+  "utf8",
+);
+
+const filesystemBody = filesystemSkill.slice(filesystemSkill.indexOf("\n---\n") + 5).trim();
+
+describe("componentAuthoringSkill — delivery channels", () => {
+  it("keeps the MCP and Codex plugin bodies identical", () => {
+    expect(skill.trim()).toBe(filesystemBody);
+    expect(claudeSkill).toBe(filesystemSkill);
+    expect(skill).not.toContain("TODO");
+  });
+});
+
+describe("componentAuthoringSkill — component contract", () => {
+  it("documents the complete authoring and MCP lifecycle", () => {
+    for (const marker of [
+      "begin_paywall_edit",
+      "get_components",
+      "read_component",
+      "write_component",
+      "rename_component",
+      "delete_component",
+      "get_paywall_preview",
+      "defineComponent",
+      "Prop builders",
+      "Actions",
+      "Previews and slots",
+      "Runtime hooks",
+      "cancelled",
+    ]) {
+      expect(skill).toContain(marker);
+    }
+  });
+
+  it("lists every prop builder and the author-visible primitives", () => {
+    for (const builder of [
+      "p.string()",
+      "p.number()",
+      "p.boolean()",
+      "p.select(",
+      "p.image()",
+      'p.ref("product")',
+      "p.component()",
+      "p.array(item)",
+    ]) {
+      expect(skill).toContain(builder);
+    }
+    for (const primitive of ["View", "Text", "Pressable", "ScrollView", "Image", "Slot"]) {
+      expect(skill).toContain(`\`${primitive}\``);
+    }
+  });
+});
+
+describe("componentAuthoringSkill — custom panels", () => {
+  it("lists every Panel primitive", () => {
+    for (const primitive of [
+      "Section",
+      "SectionActions",
+      "Subsection",
+      "Row",
+      "Column",
+      "Field",
+      "Text",
+      "Callout",
+      "Popover",
+      "PopoverTrigger",
+      "PopoverContent",
+      "Menu",
+      "TextField",
+      "SelectField",
+      "ToggleGroup",
+      "SwitchField",
+      "Button",
+      "SliderField",
+      "ResetAffordance",
+      "ColorField",
+      "ColorPicker",
+      "GradientStops",
+      "Swatch",
+      "ImageField",
+      "AlignmentGrid",
+      "DimensionField",
+      "FillField",
+      "VariableField",
+      "ActionEditorField",
+      "ProductField",
+      "PropField",
+      "DefaultProps",
+    ]) {
+      expect(skill).toContain(`Panel.${primitive}`);
+    }
+  });
+
+  it("documents mixed/bound/ref handles, limits, and gesture writes", () => {
+    expect(skill).toContain("ctx.selection.count");
+    expect(skill).toContain("bound: boolean");
+    expect(skill).toContain("value: PaywallProduct | undefined");
+    expect(skill).toContain('gesture?: "live" | "commit"');
+    expect(skill).toContain("2,000 nodes");
+    expect(skill).toContain("eight event names per node");
+    expect(skill).toContain("coalesces live writes per prop per frame");
+    expect(skill).toContain("Current Studio custom sessions send `products: []`");
+    expect(skill).toContain("a 6-second init deadline");
+    expect(skill).toContain("caps intents at 240/second");
+    expect(skill).toContain("10 seconds of inactivity");
+    expect(skill).toContain("onStopColorChange?");
+    expect(skill).toContain("onOpenChange?");
+  });
+});
+
+describe("componentAuthoringSkill — motion and gestures", () => {
+  it("lists the complete motion output vocabulary and hooks", () => {
+    for (const key of [
+      "x",
+      "y",
+      "scale",
+      "scaleX",
+      "scaleY",
+      "rotate",
+      "opacity",
+      "backgroundColor",
+      "transformOrigin",
+    ]) {
+      expect(skill).toContain(`\`${key}\``);
+    }
+    for (const hook of [
+      "useMotionValue",
+      "useMotionValueEvent",
+      "useTransform",
+      "useSpring",
+      "useVelocity",
+      "useMotionRef",
+      "useScroll",
+      "useInView",
+      "useDragControls",
+      "useMotionConfig",
+      "useReducedMotion",
+    ]) {
+      expect(skill).toContain(hook);
+    }
+  });
+
+  it("documents variants, reduced motion, static previews, and drag arbitration", () => {
+    expect(skill).toContain("Active interaction targets overlay in this order");
+    expect(skill).toContain('reducedMotion: "user" | "always" | "never"');
+    expect(skill).toContain("Static previews never run live animation");
+    expect(skill).toContain("matching-axis ancestor ScrollView win");
+    expect(skill).toContain("roughly three logical pixels");
+    expect(skill).toContain("Transforms compile in this fixed order");
+    expect(skill).toContain("Target values win");
+    expect(skill).toContain("counts zero overlap as in view");
+    expect(skill).toContain("current DOM adapter ignores both");
+    expect(skill).toContain("post-claim displacement strictly on that axis");
+    expect(skill).toContain("There is no `whileHover`");
+  });
+});
diff --git a/apps/backend/src/ai/skills/component-authoring.ts b/apps/backend/src/ai/skills/component-authoring.ts
new file mode 100644
index 000000000..e5c31c78f
--- /dev/null
+++ b/apps/backend/src/ai/skills/component-authoring.ts
@@ -0,0 +1,609 @@
+/**
+ * Complete author-facing reference for code components, custom editor panels,
+ * runtime motion, and drag gestures. The body is also shipped as a filesystem
+ * skill in the Voidhash Codex plugin; keep the contract test in sync when
+ * changing either delivery channel.
+ */
+const COMPONENT_AUTHORING_SKILL = `# Code Component Authoring
+
+Use this as the complete author-facing contract for local Voidhash code components.
+Build ordinary composition with document nodes; use a code component only for behavior
+the document cannot express, such as runtime-data text, loops, structural branching,
+custom formatting, pointer states, motion, and drag gestures.
+
+## MCP workflow
+
+1. Call \`begin_paywall_edit({ paywallId })\` and retain its \`editSessionId\`.
+2. Read the document with \`get_paywall\` and all placeable contracts with
+   \`get_components\`. If editing a local component, read it with \`read_component\`.
+3. Write one complete \`components/<name>.tsx\` source with \`write_component\`. Fix every
+   compile or runtime diagnostic and retry; a rejected write commits nothing.
+4. Place a successful local definition with a document \`component\` node:
+
+   \`\`\`json
+   {
+     "op": "insert",
+     "parentId": "<parent-id>",
+     "node": {
+       "type": "component",
+       "name": "Animated offer",
+       "componentSource": "local",
+       "componentPath": "components/animated-offer.tsx"
+     }
+   }
+   \`\`\`
+
+5. Configure instance \`props\`, \`localizedValues\`, \`actionBindings\`, \`previewState\`, and
+   slot children through \`edit_paywall\`, using the manifest returned by \`get_components\`.
+6. Render \`get_paywall_preview\`, inspect the actual PNG, iterate, and finish or revert the
+   edit session using the normal paywall-authoring workflow.
+
+Treat the component path as identity. Valid paths are exactly
+\`components/<basename>.tsx\`; the basename may use letters, digits, \`.\`, \`_\`, and \`-\`,
+must not contain a separator or \`..\`, and is compared case-insensitively for collisions.
+\`rename_component\` changes the identity and re-points local instances.
+\`delete_component\` removes only the definition; existing instances become placeholders.
+
+Author one self-contained file. Import runtime/component APIs from
+\`@voidhash/paywalls\`, panel APIs from \`@voidhash/paywalls/panel\`, and nothing else.
+Do not import \`react\` directly or use relative imports from an MCP-written component.
+React hooks needed by authored code are re-exported by \`@voidhash/paywalls\`.
+
+## Complete component pattern
+
+\`\`\`tsx
+import {
+  defineComponent,
+  MotionConfig,
+  Pressable,
+  Slot,
+  Text,
+  View,
+  usePaywallActions,
+  useSelectedProduct,
+} from "@voidhash/paywalls";
+import { Panel } from "@voidhash/paywalls/panel";
+
+export default defineComponent({
+  title: "Animated Offer",
+  description: "A selectable offer with editable appearance.",
+  props: (p) => ({
+    title: p.string().label("Title").localizable().default("Annual Pro"),
+    accent: p.string().label("Accent").editor("color").default("rgba(99, 102, 241, 1)"),
+    radius: p.number().label("Radius").default(16),
+    product: p.ref("product"),
+    footer: p.component().optional(),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ productId: a.string() }),
+  }),
+  previews: {
+    default: {
+      props: { title: "Annual Pro", accent: "rgba(99, 102, 241, 1)", radius: 16 },
+      data: {
+        products: [{
+          id: "annual",
+          slug: "annual",
+          displayName: "Annual Pro",
+          priceString: "$59.99",
+          period: "year",
+        }],
+      },
+    },
+  },
+  panel: (ctx) => (
+    <Panel>
+      <Panel.Section title="Content">
+        <Panel.PropField name="title" />
+        <Panel.PropField name="product" />
+      </Panel.Section>
+      <Panel.Section title="Appearance">
+        <Panel.Field label="Accent">
+          <Panel.ColorField
+            disabled={ctx.props.accent.bound}
+            mixed={ctx.props.accent.mixed}
+            onChange={(value) => ctx.props.accent.set(value, { gesture: "live" })}
+            onCommit={(value) => ctx.props.accent.set(value, { gesture: "commit" })}
+            onDiscard={() => ctx.props.accent.cancel()}
+            value={ctx.props.accent.value}
+          />
+        </Panel.Field>
+        <Panel.Field label="Radius">
+          <Panel.SliderField
+            max={32}
+            min={0}
+            mixed={ctx.props.radius.mixed}
+            onChange={(value) => ctx.props.radius.set(value, { gesture: "live" })}
+            onCommit={(value) => ctx.props.radius.set(value, { gesture: "commit" })}
+            value={ctx.props.radius.value}
+          />
+        </Panel.Field>
+        <Panel.DefaultProps exclude={["title", "product", "accent", "radius"]} />
+      </Panel.Section>
+    </Panel>
+  ),
+  render: ({ props, actions }) => {
+    const { selectedProductId } = useSelectedProduct();
+    const runtime = usePaywallActions();
+    const selected = selectedProductId === props.product.id;
+    return (
+      <MotionConfig reducedMotion="user">
+        <Pressable
+          accessibilityLabel={\`Select \${props.product.displayName}\`}
+          onPress={() => {
+            actions.onSelect({ productId: props.product.id });
+            runtime.selectProduct(props.product.id);
+          }}
+          style={{
+            backgroundColor: selected ? props.accent : "rgba(255, 255, 255, 1)",
+            borderBottomLeftRadius: props.radius,
+            borderBottomRightRadius: props.radius,
+            borderTopLeftRadius: props.radius,
+            borderTopRightRadius: props.radius,
+            paddingBottom: 16,
+            paddingLeft: 16,
+            paddingRight: 16,
+            paddingTop: 16,
+          }}
+          transition={{ type: "spring", stiffness: 240, damping: 22 }}
+          whilePress={{ scale: 0.97 }}
+        >
+          <View initial={{ opacity: 0, y: 12 }} animate={{ opacity: 1, y: 0 }}>
+            <Text>{props.title}</Text>
+            <Text>{props.product.priceString}</Text>
+            <Slot fallback={props.footer} />
+          </View>
+        </Pressable>
+      </MotionConfig>
+    );
+  },
+});
+\`\`\`
+
+## \`defineComponent\` contract
+
+Use \`export default defineComponent({ ... })\`. A named constant that holds the call and is
+default-exported is also accepted, but never export \`.component\`. There is no component
+\`id\`; the file path is the identity.
+
+- \`title?\` and \`description?\` supply editor/catalog metadata.
+- \`props?: (p) => ({ ... })\` declares the editable input contract.
+- \`actions?: (a) => ({ ... })\` declares named events an instance may bind.
+- \`previews?: { [state]: { props?, data? } }\` supplies deterministic fixtures.
+- \`panel?: (ctx) => ReactNode\` supplies a custom properties panel.
+- \`render: ({ props, actions }) => ReactNode\` is required.
+
+Module evaluation must be deterministic and fast. Put hooks inside \`render\`, \`panel\`, or
+local React components, never at module scope. \`write_component\` evaluates the module,
+extracts the manifest, and renders every component preview. It detects that a custom panel
+exists but does not exercise every panel event; a panel can still fail when opened, in
+which case Studio falls back to default prop controls.
+
+Preview rendering flushes passive effects and waits one macrotask before serialization.
+Keep effects finite and deterministic; do not start unbounded timers, event loops, or
+network-dependent work in a preview.
+
+### Prop builders
+
+Every builder is immutable and chainable with \`.label(string)\`, \`.default(value)\`, and
+\`.optional()\`.
+
+- \`p.string()\` yields \`string\`; add \`.editor("color")\` for a color editor.
+- \`p.number()\` yields \`number\`.
+- \`p.boolean()\` yields \`boolean\`.
+- \`p.select(["a", "b"] as const)\` yields the option union. Options must be non-empty.
+- \`p.image()\` yields an image URL/asset reference string.
+- \`p.ref("product")\` yields a resolved \`PaywallProduct\` in \`render\`.
+- \`p.component()\` yields a nested \`ReactNode\` controlled by the editor.
+- \`p.array(item)\` yields a homogeneous array; \`item\` cannot itself be an array. Arrays of
+  ref/component items compile, but Studio treats them as code-configured/read-only.
+- \`.localizable()\` is legal only on string and image props.
+
+A default makes a prop optional to the instance but always populated in \`render\`.
+An explicitly optional prop is \`T | undefined\` in \`render\`. Use only JSON-safe scalar or
+scalar-array defaults; ref/component defaults do not survive the manifest. Never name a
+prop or action \`id\`; it is reserved for document node identity. Use the exact \`Slot\`
+identifier and supported product-hook names because manifest slot/host-data detection is
+source-based; renamed imports and product hooks hidden in helpers outside \`render\` may not
+be detected.
+
+### Actions
+
+- \`a.action()\` declares \`() => void\`.
+- \`a.action({ field: a.string(), count: a.number(), enabled: a.boolean() })\` declares a
+  typed payload callback.
+- Payloads are flat scalar records only.
+
+Pass a payload-free action directly to \`Pressable\` when possible. Wrap a payload action so
+the component supplies its payload. Declared action callbacks are stable and become no-ops
+when an instance has no matching binding. An instance's \`actionBindings\` may bind emitted
+fields to literals, variables, or action-payload fields and may perform \`set-variable\`,
+\`purchase-product\`, \`close-paywall\`, or \`none\` according to the document schema.
+
+### Previews and slots
+
+Preview names must match \`[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}\`. With no declarations, an
+implicit \`default\` preview is rendered. \`props\` override declared defaults. \`data\` accepts
+\`products\` and \`variables\`; product refs fall back to the first fixture product when unset.
+Exercise meaningful visual branches with named previews and keep fixture data complete.
+
+Use at most one \`<Slot />\`. It renders document children supplied to the component
+instance; \`<Slot fallback={...} />\` renders the fallback only when no children were passed.
+An empty Slot becomes a marker in the preview tree. More than one Slot collapses the
+preview to an error placeholder. A component-node's children are its slot content.
+
+## Render primitives, runtime, and styles
+
+Import \`View\`, \`Text\`, \`Pressable\`, \`ScrollView\`, \`Image\`, and \`Slot\` from
+\`@voidhash/paywalls\`.
+
+- \`View\`: flex container; supports visual motion and drag.
+- \`Text\`: text content; supports visual motion, \`numberOfLines\`, test id, and accessibility
+  label; never draggable.
+- \`Pressable\`: tap/keyboard surface; supports visual motion, press/focus states, drag,
+  \`disabled\`, and either static children or \`(state: { pressed }) => ReactNode\`.
+- \`ScrollView\`: vertical by default, horizontal with \`horizontal\`; supports visual motion,
+  \`contentContainerStyle\`, and a motion ref; never draggable.
+- \`Image\`: requires \`source\` as a string or \`{ uri }\`; \`resizeMode\` is \`cover\`, \`contain\`,
+  \`stretch\`, or \`center\`; supports visual motion and drag.
+
+\`testID\` is available on \`View\`, \`Text\`, \`Pressable\`, \`ScrollView\`, and \`Image\`.
+All except \`ScrollView\` also accept \`accessibilityLabel\`. \`id\`/\`name\` on \`View\` and
+\`Text\` are inert annotations, and \`View.onPress\` is inert; use \`Pressable\` for runtime
+interaction. A ScrollView's \`contentContainerStyle\` accepts static style only.
+
+Styles accept a single object or nested arrays with falsy entries; later entries win.
+Use React Native-style longhands, not CSS or shorthand spacing/borders. Numbers are logical
+pixels; dimensions may also be strings such as \`"50%"\`.
+
+Supported static keys are:
+
+\`flex\`, \`flexDirection\`, \`alignItems\`, \`alignSelf\`, \`justifyContent\`, \`flexWrap\`, \`gap\`,
+\`flexGrow\`, \`flexShrink\`, \`flexBasis\`, \`width\`, \`height\`, \`minWidth\`, \`minHeight\`,
+\`maxWidth\`, \`maxHeight\`, \`paddingTop\`, \`paddingBottom\`, \`paddingLeft\`, \`paddingRight\`,
+\`marginTop\`, \`marginBottom\`, \`marginLeft\`, \`marginRight\`, \`aspectRatio\`,
+\`borderTopWidth\`, \`borderRightWidth\`, \`borderBottomWidth\`, \`borderLeftWidth\`,
+\`borderColor\`, \`borderTopLeftRadius\`, \`borderTopRightRadius\`,
+\`borderBottomLeftRadius\`, \`borderBottomRightRadius\`, \`borderStyle\`, \`backgroundColor\`,
+\`backgroundType\`, \`backgroundGradient\`, \`backgroundImage\`, \`opacity\`, \`overflow\`,
+\`position\`, \`top\`, \`right\`, \`bottom\`, \`left\`, \`zIndex\`, \`color\`, \`fontSize\`,
+\`fontWeight\`, \`fontStyle\`, \`lineHeight\`, \`letterSpacing\`, \`textAlign\`, \`textTransform\`,
+\`textDecorationLine\`, and \`fontFamily\`.
+
+Value unions: \`flexDirection\` is \`row | row-reverse | column | column-reverse\`;
+\`alignItems\` is \`flex-start | flex-end | center | stretch | baseline\`; \`alignSelf\` also
+allows \`auto\`; \`justifyContent\` is \`flex-start | flex-end | center | space-between |
+space-around | space-evenly\`; \`flexWrap\` is \`wrap | nowrap | wrap-reverse\`; \`borderStyle\`
+is \`solid | dotted | dashed\`; \`overflow\` is \`visible | hidden | scroll\`; and \`position\` is
+\`absolute | relative\`. \`fontStyle\` is \`normal | italic\`; \`textAlign\` is \`auto | left |
+right | center | justify\`; \`textTransform\` is \`none | uppercase | lowercase | capitalize\`;
+and \`textDecorationLine\` is \`none | underline | line-through | underline line-through\`.
+\`fontWeight\` accepts a number, \`normal\`, \`bold\`, or the strings \`100\` through \`900\`.
+
+For structured backgrounds, set \`backgroundType\` to \`solid\`, \`gradient\`, or \`image\`.
+A gradient is \`{ kind, startX, startY, endX, endY, stops: [{ color, position }] }\` with
+\`kind\` \`linear\` or \`radial\`. An image is \`{ url, resizeMode }\`. Do not use arbitrary CSS,
+\`transform\`, shorthand \`padding\`, shorthand \`margin\`, shorthand \`borderWidth\`, or
+\`borderRadius\`; motion transforms use the motion keys below.
+
+Runtime hooks:
+
+- \`usePaywallProducts()\` returns \`readonly PaywallProduct[]\`.
+- \`useSelectedProduct()\` returns \`selectedProduct\`, \`selectedProductId\`, and
+  \`selectProduct(productId)\`.
+- \`usePaywallVariables()\` returns \`Record<string, string | number | boolean>\`.
+- \`usePaywallActions()\` returns \`purchase(productId?)\`, \`restore()\`, \`close(reason?)\`,
+  \`openUrl(url)\`, \`track(name, properties?)\`, and \`selectProduct(productId)\`.
+- \`usePaywallStatus()\` returns status \`idle\`, \`purchasing\`, \`purchased\`, \`restoring\`,
+  \`restored\`, \`cancelled\`, or \`failed\`, plus optional \`productId\` and an optional error
+  containing \`code\` and \`message\`.
+- \`usePaywallConfig()\` returns products, variables, locale, platform, and optional default
+  selected product id. Platform is \`ios | android | web\`.
+
+The selected product defaults to \`defaultSelectedProductId\`, then the first product.
+\`purchase()\` uses that selection when no id is passed and warns/no-ops if no product exists.
+
+\`PaywallProduct\` contains \`id\`, \`slug\`, \`displayName\`, optional \`description\`, optional
+numeric \`price\`, \`priceString\`, optional \`currencyCode\`, optional \`period\` (\`month\`,
+\`year\`, \`week\`, \`lifetime\`), and optional \`trialPeriod\`. Also import \`useState\`,
+\`useEffect\`, \`useMemo\`, \`useCallback\`, and \`useRef\` from \`@voidhash/paywalls\`.
+
+## Custom designer panels
+
+Import \`Panel\` from \`@voidhash/paywalls/panel\`. Return exactly one \`<Panel>\` root from the
+\`panel(ctx)\` function. The definition runs as a long-lived React session, so hooks, state,
+effects, and timers work. Its output is serialized to a closed JSON-safe tree; functions
+never cross the sandbox boundary. Events are routed back to the current handler by node id
+and event name. A recompile or component-identity change remounts the panel and resets its
+local state.
+
+### Panel context and safe editing
+
+\`ctx.selection.count\` reports the number of homogeneous component instances being edited.
+\`ctx.data.products\` and \`ctx.data.variables\` contain host data when available; do not assume
+either is populated.
+
+Current Studio custom sessions send \`products: []\` and \`variables: {}\`. Consequently a
+custom \`ctx.props.<ref>.set(productId)\` is rejected until a synchronous product source is
+wired. Use \`Panel.PropField\` for product refs and variable-binding chrome; it expands through
+the host and does not depend on this sandbox data.
+
+For scalar, select, image, and writable array props, \`ctx.props.name\` contains:
+
+- \`value: T | undefined\`, \`mixed: boolean\`, \`bound: boolean\`, and \`kind\`.
+- \`set(value, { gesture?: "live" | "commit" })\`; omitted gesture means \`commit\`.
+- \`cancel()\` to discard an in-flight live gesture.
+- \`reset()\` to remove the override and return to the declared default.
+
+Never call \`set\` or \`reset\` when \`bound\` is true; the host drops the write because variable
+binding owns the value. Render \`Panel.PropField\` or \`Panel.DefaultProps\` to retain the
+host's binding/localization/reset chrome. For multi-selection, pass \`mixed\` into controls
+and avoid presenting one target's value as unanimous.
+
+A ref handle contains \`value: PaywallProduct | undefined\`, \`productId\`, \`mixed\`, \`kind:
+"ref"\`, and \`set(productId)\`. A component prop handle is read-only (\`value\`, \`mixed\`,
+\`kind\`). Prefer \`Panel.PropField\` for ref, component, localized, and variable-bound props;
+the host owns their complete editor behavior and may not inject products into a custom
+session synchronously.
+
+### Panel primitives
+
+Shared tokens:
+
+- gap: \`none | xs | sm | md | lg\`; width: \`auto | full | half\`.
+- align: \`start | center | end | stretch\`; justify: \`start | center | end | between\`.
+- text variant: \`label | body | caption | heading\`.
+- tone: \`default | muted | info | warning | error\`.
+- button variant: \`default | outline | ghost | destructive\`; size: \`sm | icon-sm | default\`.
+- option: \`{ value, label?, icon?, disabled? }\`.
+
+Layout and chrome:
+
+- \`Panel\` root; \`Panel.Section({ title?, collapsible?, defaultCollapsed?, onToggle? })\`;
+  \`Panel.SectionActions\`; \`Panel.Subsection({ title? })\`.
+- \`Panel.Row({ gap?, width?, align?, justify? })\`; \`Panel.Column({ gap?, width?, align? })\`;
+  \`Panel.Field({ label?, icon? })\`.
+- \`Panel.Text({ content?, variant?, tone? })\` and
+  \`Panel.Callout({ message?, tone? })\` use props, not JSX text children.
+- \`Panel.Popover({ open?, onOpenChange? })\`, \`Panel.PopoverTrigger\`, and
+  \`Panel.PopoverContent({ align?, side? })\` compose a popover.
+- \`Panel.Menu({ items?, value?, align?, onSelect? })\` renders a host dropdown.
+
+Basic controls:
+
+- \`Panel.TextField({ kind?, value?, mixed?, placeholder?, min?, max?, step?, icon?,
+  disabled?, trailingMenu?, onChange?, onCommit?, onTrailingSelect? })\`. Event values are
+  strings; parse numeric text when necessary.
+- \`Panel.SelectField({ value?, options?, placeholder?, mixed?, disabled?, onChange? })\`.
+- \`Panel.ToggleGroup({ value?, options?, mixed?, disabled?, onChange? })\`.
+- \`Panel.SwitchField({ checked?, mixed?, label?, disabled?, onChange? })\`.
+- \`Panel.Button({ label?, icon?, variant?, size?, disabled?, onClick? })\`.
+- \`Panel.SliderField({ value?, min?, max?, step?, mixed?, disabled?, onChange?,
+  onCommit? })\`.
+- \`Panel.ResetAffordance({ show?, label?, onReset?, children? })\`.
+
+Host-integrated composites:
+
+- \`Panel.ColorField({ value?, mixed?, mixedLabel?, disabled?, onChange?, onDragStart?,
+  onCommit?, onDiscard? })\`.
+- \`Panel.ColorPicker({ color?, opacity?, onColorChange?, onOpacityChange?, onDragStart?,
+  onDragEnd?, onDiscard? })\`.
+- \`Panel.GradientStops({ stops?, selectedStopId?, onSelect?, onAddStop?, onMoveStop?,
+  onRemoveStop?, onDragStart?, onDragEnd?, onDiscard? })\`.
+- \`Panel.Swatch({ color?, imageUrl? })\`; \`Panel.ImageField({ url?, resizeMode?, onPick?,
+  onResizeModeChange?, onClear? })\`.
+- \`Panel.AlignmentGrid({ flexDirection?, alignItems?, justifyContent?, mixed?, onChange? })\`.
+- \`Panel.DimensionField({ axis?, mode?, value?, label?, mixed?, disabled?, computed?,
+  onChange?, onCommit?, onModeChange? })\`.
+- \`Panel.FillField({ label?, backgroundType?, isTypeMixed?, backgroundColor?, gradient?,
+  selectedStopIndex?, image?, open?, onTypeChange?, onColorChange?, onGradientChange?,
+  onStopColorChange?, onStopPositionChange?, onAddStop?, onAddStopAt?, onRemoveStop?,
+  onSelectStop?, onImageUrlChange?, onImageResizeModeChange?, onGestureStart?, onCommit?,
+  onDiscard?, onOpenChange? })\`. Keep at most eight handlers on one node; normally use the
+  write-bearing set \`onTypeChange\`, \`onColorChange\`, \`onGradientChange\`,
+  \`onImageUrlChange\`, \`onImageResizeModeChange\`, \`onGestureStart\`, \`onCommit\`, and
+  \`onDiscard\`.
+- \`Panel.VariableField({ variableId?, variableName?, variableType?, allowedKinds?, label?,
+  onBind?, onUnbind?, onCreate? })\`.
+- \`Panel.ActionEditorField({ value?, variables?, productVariables?, payloadFields?,
+  onChange? })\`.
+- \`Panel.ProductField({ productId?, placeholder?, disabled?, label?, onChange? })\`.
+- \`Panel.PropField({ name })\` expands one manifest prop through the full host editor.
+- \`Panel.DefaultProps({ exclude? })\` expands all manifest props except the exclusions.
+
+Composite callbacks do not grant extra host authority. In particular, \`VariableField\` and
+\`ActionEditorField\` only emit their declared callbacks; use host-expanded prop rows for
+actual component prop binding, localization, reset, and product selection.
+
+Use only these icon tokens:
+\`w\`, \`h\`, \`a\`, \`plus\`, \`minus\`, \`x\`, \`trash\`, \`pencil\`, \`search\`, \`settings\`, \`info\`,
+\`alert\`, \`image\`, \`imagePlus\`, \`pipette\`, \`percent\`, \`diamond\`, \`square\`, \`squareDashed\`,
+\`squareRoundCorner\`, \`squareRoundCornerTopLeft\`, \`squareRoundCornerBottomLeft\`,
+\`squareRoundCornerBottomRight\`, \`squareDashedTopSolid\`, \`squareDashedTopSolidLeft\`,
+\`squareDashedTopSolidRight\`, \`squareDashedTopSolidBottom\`, \`type\`, \`component\`, \`code\`,
+\`eye\`, \`paintbrush\`, \`chevronDown\`, \`chevronRight\`, \`chevronUp\`, \`arrowDown\`,
+\`arrowRight\`, \`arrowUpCircle\`, \`rotateCw\`, \`rotateCcw\`, \`flipHorizontal\`, \`undo\`, \`redo\`,
+\`save\`, \`fullscreen\`, \`scan\`, \`vault\`, \`panelLeftDashed\`, \`panelRightDashed\`,
+\`panelTopDashed\`, \`panelBottomDashed\`, \`panelLeftRightDashed\`, \`panelTopBottomDashed\`,
+\`betweenHorizontalStart\`, \`user\`, \`users\`, \`externalLink\`, and \`mousePointer\`.
+
+Panel limits are 256 KiB per tree, 2,000 nodes, depth 32, 4,096 characters per string,
+256 options per select/toggle/menu, 64 gradient stops, eight event names per node, and
+32 KiB per emitted prop value. The host also validates values against the component
+manifest, rejects unknown/read-only/bound props, limits arrays to 200 items, rate-limits
+the intent stream, and coalesces live writes per prop per frame.
+
+Panel trees are coalesced to the latest revision once per animation frame. The sandbox has
+a 6-second init deadline, a 2.5-second heartbeat, allows two missed pongs, kills tree
+streams above 120/second, caps intents at 240/second, and permits two automatic restarts
+with 400 ms backoff. A terminal failure switches to the default prop panel with a retry
+control.
+
+### Panel gesture pattern
+
+Use committed writes for text/select/switch/button edits. For continuous controls, send
+live values during movement, a final committed value on release, and cancel on abort:
+
+\`\`\`tsx
+<Panel.SliderField
+  value={ctx.props.radius.value}
+  mixed={ctx.props.radius.mixed}
+  min={0}
+  max={32}
+  onChange={(value) => ctx.props.radius.set(value, { gesture: "live" })}
+  onCommit={(value) => ctx.props.radius.set(value, { gesture: "commit" })}
+/>
+\`\`\`
+
+The first live write opens a host draft; live writes are transient/coalesced, and the end
+commits one undoable edit. \`cancel()\` discards the in-flight draft. A selection change,
+session failure, or 10 seconds of inactivity also discards an unfinished gesture. Keep the
+control's display value derived from the latest \`ctx\` snapshot; the host protects an active
+control from stale sandbox echoes during a drag.
+
+## Runtime animation and gestures
+
+### Motion targets, variants, and transitions
+
+Every motion-capable primitive (\`View\`, \`Text\`, \`Pressable\`, \`ScrollView\`, and \`Image\`)
+accepts \`initial\`, \`animate\`, \`variants\`, \`transition\`, \`whileInView\`, \`viewport\`,
+\`onAnimationStart\`, and \`onAnimationComplete\`. \`Pressable\` also accepts
+\`whilePress\`/\`whileFocus\`; draggable primitives accept \`whileDrag\`.
+
+Motion targets support only \`x\`, \`y\`, \`scale\`, \`scaleX\`, \`scaleY\`, \`rotate\` (degrees),
+\`opacity\`, \`backgroundColor\`, and \`transformOrigin\` (\`{ x, y }\` fractions of the box).
+Put these keys directly in \`style\` for motion values or in a target. Do not use a CSS
+\`transform\` string.
+
+Use inline targets or named variants:
+
+\`\`\`tsx
+<View
+  variants={{ hidden: { opacity: 0, y: 20 }, shown: { opacity: 1, y: 0 } }}
+  initial="hidden"
+  animate="shown"
+  transition={{
+    default: { type: "spring", stiffness: 220, damping: 24 },
+    opacity: { type: "tween", duration: 0.2, ease: "easeOut" },
+  }}
+/>
+\`\`\`
+
+A variant label array merges labels left-to-right. Literal motion style is the base;
+\`animate\` overrides it at rest. Active interaction targets overlay in this order:
+in-view, press, focus, drag, so later states win conflicting keys. \`initial={false}\` mounts
+at rest. Define a numeric value in both start and target states if it must interpolate;
+non-numeric motion values such as colors and transform origins currently snap.
+
+Transforms compile in this fixed order: translate (\`x\`/\`y\`), rotate, \`scale\`, \`scaleX\`,
+then \`scaleY\`.
+
+Transitions use seconds. \`type\` is \`tween\` or \`spring\`; shared fields are \`delay\`,
+\`duration\`, \`ease\` (\`linear\`, \`easeIn\`, \`easeOut\`, \`easeInOut\`), \`stiffness\`, \`damping\`,
+\`mass\`, \`velocity\`, \`restDelta\`, and \`restSpeed\`. Defaults are a 0.3-second linear tween,
+or a spring with stiffness 170, damping 26, mass 1, rest delta/speed 0.01. A transition may
+contain per-key overrides plus \`default\`. \`MotionConfig\` supplies inherited transition and
+\`reducedMotion: "user" | "always" | "never"\`; reduced motion jumps to targets and still
+fires completion. \`useMotionConfig()\` reads the inherited policy/default transition, and
+\`useReducedMotion()\` resolves it to a boolean using the platform preference. An interrupted
+animation is canceled and does not fire its old completion callback.
+
+Static previews never run live animation. They serialize the deterministic rest state
+(\`animate\`, else \`initial\`, over literal motion style), omit live motion values, render
+Pressable children unpressed, and flatten scroll content. Design the rest state to be
+complete and readable.
+
+The \`AnimationControls\` type is reserved for imperative control, but there is currently no
+author-facing controls factory/binding. Use declarative \`animate\`/variants or motion values.
+
+### Motion values
+
+- \`useMotionValue(initial)\` creates a stable mutable value whose updates bypass React.
+- \`motionValue(initial)\` creates one outside React; \`get\`, \`getPrevious\`, \`set\`, and
+  \`on("change" | "renderRequest", listener)\` form its protocol.
+- \`useMotionValueEvent(value, event, listener)\` subscribes without React frame renders.
+- \`useTransform(source, fn)\` derives any mapped value. The numeric range overload maps
+  equal-length input/output arrays and clamps to the covered range.
+- \`useSpring(source, transition)\` follows a numeric source with an interruptible spring.
+- \`useVelocity(source)\` returns logical units per second.
+
+Pass a motion value through a supported motion style key:
+
+\`\`\`tsx
+const { scrollYProgress } = useScroll();
+const opacity = useTransform(scrollYProgress, [0, 0.5, 1], [0.4, 1, 0.4]);
+return <View style={{ opacity }} />;
+\`\`\`
+
+A live motion value drives a key only when the resolved animation/interaction target does
+not also define that key. Target values win; reduced-motion mode also suppresses live style
+updates. Static previews omit motion values entirely.
+
+### Scroll and in-view
+
+Create renderer-neutral refs with \`useMotionRef()\` and attach them to motion-capable primitives.
+\`useScroll({ container?, target?, axis?, offset?, trackLayout? })\` returns \`scrollX\`,
+\`scrollY\`, \`scrollXProgress\`, and \`scrollYProgress\` motion values. Without a container it
+tracks the root window. Without a target, progress is total scroll progress. With a target,
+the default offsets are \`["start end", "end start"]\`; anchors accept \`start\`, \`center\`,
+\`end\`, percentages, or numeric strings. Use \`trackLayout\` when changing layout affects the
+measurement. \`axis\` defaults to \`y\`; with a target, only the selected axis's progress value
+is updated.
+
+\`useInView(ref, { root?, once?, amount?, margin? })\` returns a boolean. \`amount\` is a
+number, \`some\` (1% threshold), or \`all\`; \`once\` stays true after first entry. \`whileInView\`
+uses the same viewport contract. Omitted \`amount\` currently uses a zero threshold, which
+counts zero overlap as in view; pass \`"some"\` or a positive number for actual intersection.
+The current DOM adapter accepts \`margin\` in the public shape but does not apply it; do not
+rely on margin-sensitive behavior.
+
+\`ScrollView\` refs additionally expose \`getScrollMetrics()\`, \`scrollTo({ x?, y? })\`, and
+\`subscribeScroll\`. Measurements use the untransformed layout box.
+
+### Drag gestures
+
+Drag is supported only by \`View\`, \`Image\`, and \`Pressable\`.
+
+- \`drag={true}\` allows both axes. \`"x"\` or \`"y"\` limits which dominant direction may
+  claim the gesture; in the current DOM adapter, also enable \`dragDirectionLock\` to keep
+  post-claim displacement strictly on that axis.
+- \`dragConstraints\` accepts \`{ left?, right?, top?, bottom? }\` relative to the starting
+  motion position, or a \`MotionRef\` whose measured box bounds the draggable node.
+- \`dragElastic\` is \`0.35\` by default, \`false\` for no overshoot, or a numeric factor.
+- \`dragMomentum\` defaults true. Release projects velocity by 0.2 seconds, clamps it to
+  constraints, and animates to the result with \`{ type: "spring", ...dragTransition }\`;
+  supplied transition fields, including \`type\`, override the default. Set false to stop at
+  the release position.
+- \`dragDirectionLock\` locks to the dominant axis after movement begins.
+- \`gesturePriority="auto"\` lets a matching-axis ancestor ScrollView win; a cross-axis drag
+  wins. Use \`"drag"\` only when the draggable must steal a matching-axis scroll gesture.
+- \`dragListener={false}\` disables direct pointer start. It also enables registration of a
+  supplied \`dragControls={useDragControls()}\`. \`controls.start(event, options)\` requires a
+  \`MotionGestureEvent\`; options are \`{ snapToCursor?, distanceThreshold? }\`. Authored
+  primitives expose no raw pointer-down event and the current DOM adapter ignores both
+  options, so prefer the built-in listener.
+- \`onDragStart\`, \`onDrag\`, and \`onDragEnd\` receive a platform-neutral event and \`DragInfo\`:
+  current \`point\`, last-event \`delta\`, start-relative \`offset\`, and logical-units-per-second
+  \`velocity\`.
+
+A drag claims the gesture after roughly three logical pixels. On a Pressable, claiming a
+drag clears the pressed state and suppresses the following click. \`whilePress\` begins on
+pointer down and clears on leave/up/cancel; \`whileFocus\` follows keyboard focus. Enter and
+Space activate a focused Pressable. There is no \`whileHover\`, keyframe/timeline API, layout
+animation, arbitrary transform string, or draggable Text/ScrollView in the current surface.
+
+## Final verification checklist
+
+- Keep the component as small as the code-only behavior permits.
+- Use a valid, unique path and default-export the \`defineComponent\` result.
+- Declare every editable input and emitted event; avoid reserved \`id\`.
+- Provide preview fixtures for product/runtime branches and use no more than one Slot.
+- Use only supported primitives, style keys, motion keys, imports, and panel nodes.
+- Preserve mixed/bound semantics and use gesture-aware panel writes correctly.
+- Respect reduced motion and make the static rest state complete.
+- Re-read compiler diagnostics instead of guessing, inspect the rendered paywall PNG, and
+  finish or revert the edit session explicitly.
+`;
+
+/** Returns the complete code-component authoring skill body. */
+export const componentAuthoringSkill = (): string => COMPONENT_AUTHORING_SKILL;
diff --git a/apps/backend/src/ai/skills/paywall-authoring.ts b/apps/backend/src/ai/skills/paywall-authoring.ts
index 6a3ace9a9..1a8540f0b 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.ts
@@ -235,14 +235,15 @@ Layout is flexbox, exactly like CSS / React Native:
 
 ## Tool usage
 
-- **Open one change set.** Discover the target with \`list_paywalls\`, then call
-  \`begin_paywall_edit({ slug })\`. Pass the returned \`changeSetId\` and the same
-  \`slug\` to every mutation and preview call. Finish it after visual QA, or
-  revert it; never abandon an active change set.
+- **Open your edit session.** Discover the target with \`list_paywalls\`, then call
+  \`begin_paywall_edit({ paywallId })\`. Pass only the returned \`editSessionId\` to every
+  scoped call. Every participant gets an independent Mimic connection, so multiple users
+  and agents may edit the same paywall concurrently. Finish yours after visual QA, or
+  revert it; never abandon an active session.
 - **\`get_paywall\` first.** Learn the current tree and ids before editing. Pass
   \`nodeId\` to root at a subtree and \`depth\` to cap the tree (deeper nodes return
   as \`{ id, type, name?, childCount }\` stubs you expand with a follow-up
-  \`get_paywall({ slug, nodeId })\`). Cheaper than pulling the whole document every
+  \`get_paywall({ editSessionId, nodeId })\`). Cheaper than pulling the whole document every
   turn.
 - **\`edit_paywall\` applies an ATOMIC batch.** Every op lands or none does. On
   success you get the minted ids for \`insert\`/\`replaceChildren\` ops (keyed by op
@@ -632,29 +633,31 @@ where \`period\` is \`"month" | "year" | "week" | "lifetime"\`.
 
 ## Tool vocabulary
 
-- \`list_paywalls()\` — discover paywall slugs in the project.
-- \`begin_paywall_edit({ slug })\` — capture the revert baseline and return a
-  \`changeSetId\`.
-- \`get_paywall({ slug, nodeId?, depth? })\` — read cleaned document JSON (subtree
+- \`list_paywalls()\` — discover stable paywall ids (plus display slugs) in the project.
+- \`begin_paywall_edit({ paywallId })\` — capture the revert baseline and return a
+  \`editSessionId\`.
+- \`get_paywall({ editSessionId, nodeId?, depth? })\` — read cleaned document JSON (subtree
   + depth for economy).
-- \`get_components({ slug })\` — list every placeable catalog, local, and builtin
+- \`get_components({ editSessionId })\` — list every placeable catalog, local, and builtin
   component with its authoring contract.
-- \`read_component({ slug, path })\` — read a local code component's TSX source.
-- \`edit_paywall({ slug, changeSetId, edits })\` — apply an atomic batch of document
+- \`read_component({ editSessionId, path })\` — read a local code component's TSX source.
+- \`edit_paywall({ editSessionId, edits })\` — apply an atomic batch of document
   ops (returns minted ids or per-op errors).
-- \`duplicate_subtree({ slug, changeSetId, nodeId, parentId, index? })\` — clone a
+- \`duplicate_subtree({ editSessionId, nodeId, parentId, index? })\` — clone a
   visual subtree with fresh ids.
-- \`write_component({ slug, changeSetId, path, source })\` — create or replace a
+- \`write_component({ editSessionId, path, source })\` — create or replace a
   compiled code component.
-- \`rename_component({ slug, changeSetId, fromPath, toPath })\` — move a component
+- \`rename_component({ editSessionId, fromPath, toPath })\` — move a component
   and re-point its instances.
-- \`delete_component({ slug, changeSetId, path })\` — delete a component; existing
+- \`delete_component({ editSessionId, path })\` — delete a component; existing
   instances degrade to placeholders.
-- \`get_paywall_preview({ slug, changeSetId })\` — render the version-bound PNG
+- \`get_paywall_preview({ editSessionId })\` — render the version-bound PNG
   used for visual QA.
-- \`finish_paywall_edit({ slug, changeSetId, reviewedDocumentSignature, verdict,
+- \`finish_paywall_edit({ editSessionId, reviewedDocumentSignature, verdict,
   unresolvedIssues: [] })\` — accept a visually verified edit.
-- \`revert_paywall_edit({ changeSetId })\` — restore the captured baseline.
+- \`revert_paywall_edit({ editSessionId })\` — restore the captured baseline when that can
+  be done without overwriting interleaved participant work. A mutation-free session closes
+  without changing the document.
 
 Read (\`get_paywall\`/\`get_components\`) before you write, use the minted ids the
 edits return, and trust the field/value errors the validator gives you.
diff --git a/apps/backend/src/ai/skills/registry.ts b/apps/backend/src/ai/skills/registry.ts
index 38db49ff3..513476bbc 100644
--- a/apps/backend/src/ai/skills/registry.ts
+++ b/apps/backend/src/ai/skills/registry.ts
@@ -1,8 +1,9 @@
 import type { SkillSource } from "@voidhash/agent/SkillSource";
 
+import { componentAuthoringSkill } from "./component-authoring.ts";
 import { paywallAuthoringSkill } from "./paywall-authoring.ts";
 
-/** One lazily materialized skill delivered through every agent channel. */
+/** A lazily materialized skill delivered through every agent channel. */
 export interface SkillDefinition {
   readonly name: string;
   readonly description: string;
@@ -16,6 +17,12 @@ const definitions: ReadonlyArray<SkillDefinition> = [
       "Design, edit, preview, visually review, finish, or revert a Voidhash paywall with the shared workspace tools.",
     body: paywallAuthoringSkill,
   },
+  {
+    name: "code-component-authoring",
+    description:
+      "Create, edit, debug, and place Voidhash code components, including typed props and actions, preview fixtures, custom designer panels, animation, motion values, scroll-linked effects, drag gestures, and gesture-aware panel controls. Use when a paywall needs runtime data, loops, structural logic, custom formatting, pressed/focus states, animation, dragging, or a tailored component-properties panel, or when working with read_component, write_component, rename_component, or delete_component.",
+    body: componentAuthoringSkill,
+  },
 ];
 
 /** Lists every registered skill without evaluating its body. */
diff --git a/apps/backend/src/ai/surfaces.test.ts b/apps/backend/src/ai/surfaces.test.ts
index c3058c526..c4a9b72e6 100644
--- a/apps/backend/src/ai/surfaces.test.ts
+++ b/apps/backend/src/ai/surfaces.test.ts
@@ -42,25 +42,31 @@ describe("designerAgentSystemPrompt", () => {
   it("lists every paywall with its display name and code components", () => {
     const prompt = designerAgentSystemPrompt({
       paywalls: [
-        { slug: "trial", name: "Trial", componentFileNames: ["hero.tsx", "cta.tsx"] },
-        { slug: "onboarding", name: "Onboarding", componentFileNames: [] },
+        {
+          paywallId: "pw_1",
+          slug: "trial",
+          name: "Trial",
+          componentFileNames: ["hero.tsx", "cta.tsx"],
+        },
+        { paywallId: "pw_2", slug: "onboarding", name: "Onboarding", componentFileNames: [] },
       ],
-      openPaywall: { slug: "trial", name: "Trial" },
+      openPaywall: { paywallId: "pw_1", slug: "trial", name: "Trial" },
       selectedNodeIds: [],
     });
     expect(prompt).toContain(
-      '- trial ("Trial"): components: components/hero.tsx, components/cta.tsx',
+      '- pw_1 ("Trial", slug "trial"): components: components/hero.tsx, components/cta.tsx',
     );
-    expect(prompt).toContain('- onboarding ("Onboarding"): no code components');
+    expect(prompt).toContain('- pw_2 ("Onboarding", slug "onboarding"): no code components');
   });
 
   it("names the open paywall and points at edit_paywall for unqualified refs", () => {
     const prompt = designerAgentSystemPrompt({
-      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
-      openPaywall: { slug: "trial", name: "Trial" },
+      paywalls: [{ paywallId: "pw_1", slug: "trial", name: "Trial", componentFileNames: [] }],
+      openPaywall: { paywallId: "pw_1", slug: "trial", name: "Trial" },
       selectedNodeIds: [],
     });
-    expect(prompt).toContain('has the "Trial" paywall (slug "trial") open');
+    expect(prompt).toContain('has the "Trial" paywall (id "pw_1", slug "trial") open');
+    expect(prompt).toContain('paywallId: "pw_1"');
     expect(prompt).toContain("edit_paywall");
     expect(prompt).toContain('"this paywall"');
     // No workspace path for the open paywall in the document-first model.
@@ -69,8 +75,8 @@ describe("designerAgentSystemPrompt", () => {
 
   it("renders the selection as directly-addressable document node ids (plural)", () => {
     const prompt = designerAgentSystemPrompt({
-      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
-      openPaywall: { slug: "trial", name: "Trial" },
+      paywalls: [{ paywallId: "pw_1", slug: "trial", name: "Trial", componentFileNames: [] }],
+      openPaywall: { paywallId: "pw_1", slug: "trial", name: "Trial" },
       selectedNodeIds: ["node_a", "node_b"],
     });
     expect(prompt).toContain("nodes with id node_a, node_b selected");
@@ -79,8 +85,8 @@ describe("designerAgentSystemPrompt", () => {
 
   it("uses the singular for a single selected node", () => {
     const prompt = designerAgentSystemPrompt({
-      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
-      openPaywall: { slug: "trial", name: "Trial" },
+      paywalls: [{ paywallId: "pw_1", slug: "trial", name: "Trial", componentFileNames: [] }],
+      openPaywall: { paywallId: "pw_1", slug: "trial", name: "Trial" },
       selectedNodeIds: ["node_a"],
     });
     expect(prompt).toContain("node with id node_a selected");
@@ -88,7 +94,7 @@ describe("designerAgentSystemPrompt", () => {
 
   it("states no paywall is open when none matches", () => {
     const prompt = designerAgentSystemPrompt({
-      paywalls: [{ slug: "trial", name: "Trial", componentFileNames: [] }],
+      paywalls: [{ paywallId: "pw_1", slug: "trial", name: "Trial", componentFileNames: [] }],
       openPaywall: undefined,
       selectedNodeIds: [],
     });
diff --git a/apps/backend/src/ai/tools.test.ts b/apps/backend/src/ai/tools.test.ts
index aeac23f4a..fb6c03933 100644
--- a/apps/backend/src/ai/tools.test.ts
+++ b/apps/backend/src/ai/tools.test.ts
@@ -4,7 +4,7 @@ import {
   componentServingPreviewKey,
   PaywallArtifactStore,
   PaywallDeployService,
-  PaywallEditChangeSetService,
+  PaywallEditSessionService,
   PaywallWorkspaceService,
   SnapshotImageRenderer,
 } from "@voidhash/core/services";
@@ -15,14 +15,14 @@ import { describe, expect, it } from "vite-plus/test";
 import * as WorkspaceTools from "./workspace-tools.ts";
 
 /**
- * Drive the STATELESS, document-first MCP workspace-tool core directly against a
- * mocked workspace/deploy/compiler context. These tools read the LIVE document
- * and edit it via mimic ops / component-path writes; every one folds an expected
- * service failure into a readable message rather than throwing.
+ * Drive the stateful, document-first MCP workspace-tool core directly against a
+ * mocked workspace/deploy/compiler context. These tools read and edit the live
+ * document through an explicit edit-session connection; every one folds an
+ * expected service failure into a readable message rather than throwing.
  */
 
 const SCOPE: WorkspaceTools.WorkspaceToolScope = { projectId: "proj_1" };
-const CHANGE_SET_ID = "pw_change_1";
+const EDIT_SESSION_ID = "pw_edit_1";
 
 /** A decoded document root: root → screen → view(with a text), and a library with one component. */
 const documentRoot = {
@@ -90,11 +90,21 @@ const fakeWorkspace = (over: Partial<PaywallWorkspaceService["Service"]> = {}) =
         root: documentRoot,
         version: 8,
       }),
+    readConnectedDocumentTree: () =>
+      Effect.succeed({ tree: { encoded: true }, root: documentRoot, version: 8 }),
     editDocument: () =>
       Effect.succeed({ version: 9, commandCount: 2, mintedIds: { "0": ["abc1234567"] } }),
+    editConnectedDocument: () =>
+      Effect.succeed({ version: 9, commandCount: 2, mintedIds: { "0": ["abc1234567"] } }),
     writeComponentSource: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    writeConnectedComponentSource: () =>
+      Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
     moveComponentFile: () => Effect.succeed({ version: 9, commandCount: 2, diagnostics: [] }),
+    moveConnectedComponentFile: () =>
+      Effect.succeed({ version: 9, commandCount: 2, diagnostics: [] }),
     deleteComponentFile: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    deleteConnectedComponentFile: () =>
+      Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
     ...over,
   }) as unknown as PaywallWorkspaceService["Service"];
 
@@ -118,28 +128,28 @@ const fakeCompiler = (over: Partial<ComponentCompiler["Service"]> = {}) =>
     ...over,
   }) as unknown as ComponentCompiler["Service"];
 
-const fakeChangeSets = (over: Partial<PaywallEditChangeSetService["Service"]> = {}) =>
+const fakeEditSessions = (over: Partial<PaywallEditSessionService["Service"]> = {}) =>
   ({
     begin: () =>
       Effect.succeed({
-        id: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         paywallId: "pw_1",
-        paywallSlug: "trial",
         baselineVersion: 8,
       }),
-    requireActive: () =>
+    connectActive: () =>
       Effect.succeed({
-        id: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         projectId: "proj_1",
         paywallId: "pw_1",
         paywallSlug: "trial",
         baselineVersion: 1,
       }),
     recordPreview: () => Effect.void,
-    finish: () => Effect.succeed({ id: CHANGE_SET_ID, status: "finished" as const }),
+    recordMutation: () => Effect.void,
+    finish: () => Effect.succeed({ editSessionId: EDIT_SESSION_ID, status: "finished" as const }),
     revert: () => Effect.succeed({ version: 9, commandCount: 2, paywallSlug: "trial" }),
     ...over,
-  }) as unknown as PaywallEditChangeSetService["Service"];
+  }) as unknown as PaywallEditSessionService["Service"];
 
 const fakeArtifactStore = () =>
   ({ getObject: () => Effect.succeed(null) }) as unknown as PaywallArtifactStore["Service"];
@@ -152,7 +162,7 @@ interface Fakes {
   readonly deploy?: PaywallDeployService["Service"];
   readonly manifestCache?: ComponentManifestCacheService["Service"];
   readonly compiler?: ComponentCompiler["Service"];
-  readonly changeSets?: PaywallEditChangeSetService["Service"];
+  readonly editSessions?: PaywallEditSessionService["Service"];
   readonly artifactStore?: PaywallArtifactStore["Service"];
   readonly renderer?: SnapshotImageRenderer["Service"];
 }
@@ -173,7 +183,7 @@ const run = (
           Context.add(PaywallDeployService, fakes.deploy ?? fakeDeploy()),
           Context.add(ComponentManifestCacheService, fakes.manifestCache ?? fakeManifestCache()),
           Context.add(ComponentCompiler, fakes.compiler ?? fakeCompiler()),
-          Context.add(PaywallEditChangeSetService, fakes.changeSets ?? fakeChangeSets()),
+          Context.add(PaywallEditSessionService, fakes.editSessions ?? fakeEditSessions()),
           Context.add(PaywallArtifactStore, fakes.artifactStore ?? fakeArtifactStore()),
           Context.add(SnapshotImageRenderer, fakes.renderer ?? fakeRenderer()),
           Context.add(AuthSession, {} as never),
@@ -183,11 +193,11 @@ const run = (
   );
 
 describe("MCP workspace tools (document-first)", () => {
-  it("begin_paywall_edit returns the change-set capability and captured baseline", async () => {
-    const result = await run(WorkspaceTools.beginPaywallEdit(SCOPE, { slug: "trial" }));
+  it("begin_paywall_edit returns the edit-session capability and captured baseline", async () => {
+    const result = await run(WorkspaceTools.beginPaywallEdit(SCOPE, { paywallId: "pw_1" }));
     expect(result.isError, result.output).toBe(false);
-    expect(result.output).toContain(CHANGE_SET_ID);
-    expect(JSON.parse(result.output)).toMatchObject({ baselineVersion: 8, slug: "trial" });
+    expect(result.output).toContain(EDIT_SESSION_ID);
+    expect(JSON.parse(result.output)).toMatchObject({ baselineVersion: 8, paywallId: "pw_1" });
   });
 
   it("list_paywalls formats the project's paywalls", async () => {
@@ -198,14 +208,16 @@ describe("MCP workspace tools (document-first)", () => {
   });
 
   it("get_paywall returns cleaned document JSON with node ids", async () => {
-    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "trial" }));
+    const result = await run(WorkspaceTools.getPaywall(SCOPE, { editSessionId: EDIT_SESSION_ID }));
     expect(result.isError).toBe(false);
     expect(result.output).toContain('"id": "root1"');
     expect(result.output).toContain('"id": "view1"');
   });
 
   it("get_paywall(nodeId) roots the tree at a subtree", async () => {
-    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "trial", nodeId: "view1" }));
+    const result = await run(
+      WorkspaceTools.getPaywall(SCOPE, { editSessionId: EDIT_SESSION_ID, nodeId: "view1" }),
+    );
     expect(result.isError).toBe(false);
     expect(result.output).toContain('"id": "view1"');
     // The sibling library node is not under view1.
@@ -213,29 +225,34 @@ describe("MCP workspace tools (document-first)", () => {
   });
 
   it("get_paywall errors on an unknown nodeId", async () => {
-    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "trial", nodeId: "ghost" }));
+    const result = await run(
+      WorkspaceTools.getPaywall(SCOPE, { editSessionId: EDIT_SESSION_ID, nodeId: "ghost" }),
+    );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("no node");
   });
 
   it("get_components lists catalog + local components; a missing manifest is noted", async () => {
-    const result = await run(WorkspaceTools.getComponents(SCOPE, { slug: "trial" }), {
-      deploy: fakeDeploy({
-        listComponents: () =>
-          Effect.succeed([
-            {
-              slug: "pricing",
-              title: "Pricing",
-              latestVersion: 3,
-              latest: { manifest: { props: {}, actions: {} }, previewStates: ["default"] },
-              previousVersions: [],
-              componentId: "pc_1",
-            },
-          ]) as never,
-      }),
-      // no cached manifest for the local component → "manifest unavailable" note
-      manifestCache: fakeManifestCache({ getMany: () => Effect.succeed(new Map()) }),
-    });
+    const result = await run(
+      WorkspaceTools.getComponents(SCOPE, { editSessionId: EDIT_SESSION_ID }),
+      {
+        deploy: fakeDeploy({
+          listComponents: () =>
+            Effect.succeed([
+              {
+                slug: "pricing",
+                title: "Pricing",
+                latestVersion: 3,
+                latest: { manifest: { props: {}, actions: {} }, previewStates: ["default"] },
+                previousVersions: [],
+                componentId: "pc_1",
+              },
+            ]) as never,
+        }),
+        // no cached manifest for the local component → "manifest unavailable" note
+        manifestCache: fakeManifestCache({ getMany: () => Effect.succeed(new Map()) }),
+      },
+    );
     expect(result.isError).toBe(false);
     expect(result.output).toContain("pricing");
     expect(result.output).toContain("components/hero.tsx");
@@ -245,7 +262,10 @@ describe("MCP workspace tools (document-first)", () => {
 
   it("read_component returns the local component source", async () => {
     const result = await run(
-      WorkspaceTools.readComponent(SCOPE, { slug: "trial", path: "components/hero.tsx" }),
+      WorkspaceTools.readComponent(SCOPE, {
+        editSessionId: EDIT_SESSION_ID,
+        path: "components/hero.tsx",
+      }),
     );
     expect(result.isError).toBe(false);
     expect(result.output).toBe("export const Hero = () => null;");
@@ -253,7 +273,10 @@ describe("MCP workspace tools (document-first)", () => {
 
   it("read_component errors on an unknown path and lists what is available", async () => {
     const result = await run(
-      WorkspaceTools.readComponent(SCOPE, { slug: "trial", path: "components/ghost.tsx" }),
+      WorkspaceTools.readComponent(SCOPE, {
+        editSessionId: EDIT_SESSION_ID,
+        path: "components/ghost.tsx",
+      }),
     );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("components/hero.tsx");
@@ -262,8 +285,7 @@ describe("MCP workspace tools (document-first)", () => {
   it("edit_paywall validates then applies, returning minted ids", async () => {
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
       }),
     );
@@ -279,8 +301,7 @@ describe("MCP workspace tools (document-first)", () => {
     let applied: unknown[] = [];
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         edits: [
           {
             op: "update",
@@ -291,7 +312,7 @@ describe("MCP workspace tools (document-first)", () => {
       }),
       {
         workspace: fakeWorkspace({
-          editDocument: ((_p: string, _slug: string, edits: unknown[]) => {
+          editConnectedDocument: ((_p: string, _slug: string, edits: unknown[]) => {
             applied = edits;
             return Effect.succeed({ version: 9, commandCount: 1, mintedIds: {} });
           }) as never,
@@ -310,12 +331,11 @@ describe("MCP workspace tools (document-first)", () => {
     };
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         // view cannot be a child of text → illegalChild
         edits: [{ op: "insert", parentId: "text1", node: { type: "view" } }],
       }),
-      { workspace: fakeWorkspace({ editDocument: editDocument as never }) },
+      { workspace: fakeWorkspace({ editConnectedDocument: editDocument as never }) },
     );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("edit_paywall rejected");
@@ -325,13 +345,12 @@ describe("MCP workspace tools (document-first)", () => {
   it("edit_paywall folds a conflict into a clean message (no Cause/_tag leak)", async () => {
     const result = await run(
       WorkspaceTools.editPaywall(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         edits: [{ op: "update", nodeId: "text1", set: { text: "Bye" } }],
       }),
       {
         workspace: fakeWorkspace({
-          editDocument: () =>
+          editConnectedDocument: () =>
             Effect.fail({ _tag: "WorkspaceWriteConflictError", message: "race lost" }) as never,
         }),
       },
@@ -346,15 +365,14 @@ describe("MCP workspace tools (document-first)", () => {
     let applied: unknown[] = [];
     const result = await run(
       WorkspaceTools.duplicateSubtree(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         nodeId: "view1",
         parentId: "screen1",
         nextName: "Copied offer",
       }),
       {
         workspace: fakeWorkspace({
-          editDocument: ((_projectId: string, _slug: string, edits: unknown[]) => {
+          editConnectedDocument: ((_projectId: string, _slug: string, edits: unknown[]) => {
             applied = edits;
             return Effect.succeed({ version: 10, commandCount: 1, mintedIds: {} });
           }) as never,
@@ -393,25 +411,21 @@ describe("MCP workspace tools (document-first)", () => {
     });
     const result = await run(
       WorkspaceTools.getPaywallPreview(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         width: 375,
         height: 812,
         scale: 1,
       }),
       {
         workspace: fakeWorkspace({
-          readDocument: (_projectId: string, slug: string) =>
+          readConnectedDocumentTree: () =>
             Effect.succeed({
-              slug,
-              name: "Trial",
-              paywallId: "pw_1",
               tree: { encoded: true },
               root: catalogRoot,
               version: 8,
             }),
         }),
-        changeSets: fakeChangeSets({
+        editSessions: fakeEditSessions({
           recordPreview: ((input: unknown) =>
             Effect.sync(() => void recorded.push(input))) as never,
         }),
@@ -451,7 +465,7 @@ describe("MCP workspace tools (document-first)", () => {
       { type: "text", text: expect.stringContaining('"documentVersion":8') },
       { type: "image", data: "AQID", mimeType: "image/png" },
     ]);
-    expect(recorded[0]).toMatchObject({ documentVersion: 8, paywallSlug: "trial" });
+    expect(recorded[0]).toMatchObject({ documentVersion: 8 });
     expect(rendered[0]).toMatchObject({
       componentTrees: {
         "hash-1": {
@@ -475,18 +489,17 @@ describe("MCP workspace tools (document-first)", () => {
     const finished: unknown[] = [];
     const result = await run(
       WorkspaceTools.finishPaywallEdit(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         reviewedDocumentSignature: "doc-reviewed",
         verdict: "Clear hierarchy and no clipping.",
         unresolvedIssues: [],
       }),
       {
-        changeSets: fakeChangeSets({
+        editSessions: fakeEditSessions({
           finish: ((input: unknown) =>
             Effect.sync(() => {
               finished.push(input);
-              return { id: CHANGE_SET_ID, status: "finished" as const };
+              return { id: EDIT_SESSION_ID, status: "finished" as const };
             })) as never,
         }),
       },
@@ -502,19 +515,18 @@ describe("MCP workspace tools (document-first)", () => {
     );
   });
 
-  it("finish_paywall_edit rejects unresolved visual issues without closing the change set", async () => {
+  it("finish_paywall_edit rejects unresolved visual issues without closing the edit session", async () => {
     const finish = () => {
       throw new Error("must not finish with unresolved visual issues");
     };
     const result = await run(
       WorkspaceTools.finishPaywallEdit(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         reviewedDocumentSignature: "doc-reviewed",
         verdict: "Needs another pass.",
         unresolvedIssues: ["CTA is clipped"],
       }),
-      { changeSets: fakeChangeSets({ finish: finish as never }) },
+      { editSessions: fakeEditSessions({ finish: finish as never }) },
     );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("CTA is clipped");
@@ -522,10 +534,10 @@ describe("MCP workspace tools (document-first)", () => {
 
   it("revert_paywall_edit restores the entire captured baseline", async () => {
     const result = await run(
-      WorkspaceTools.revertPaywallEdit(SCOPE, { changeSetId: CHANGE_SET_ID }),
+      WorkspaceTools.revertPaywallEdit(SCOPE, { editSessionId: EDIT_SESSION_ID }),
     );
     expect(result.isError, result.output).toBe(false);
-    expect(result.output).toContain("Reverted change set");
+    expect(result.output).toContain("Reverted edit session");
     expect(result.output).toContain("2 commands");
   });
 
@@ -535,13 +547,12 @@ describe("MCP workspace tools (document-first)", () => {
     };
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         path: "components/broken.tsx",
         source: "export default (=> {",
       }),
       {
-        workspace: fakeWorkspace({ writeComponentSource: writeComponentSource as never }),
+        workspace: fakeWorkspace({ writeConnectedComponentSource: writeComponentSource as never }),
         compiler: fakeCompiler({
           compileAndExtract: () =>
             Effect.succeed({
@@ -560,8 +571,7 @@ describe("MCP workspace tools (document-first)", () => {
     const recorded: unknown[] = [];
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         path: "components/card.tsx",
         source: "export default () => null;",
       }),
@@ -594,8 +604,7 @@ describe("MCP workspace tools (document-first)", () => {
   it("write_component rejects when headless compilation is unavailable", async () => {
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         path: "components/card.tsx",
         source: "export default () => null;",
       }),
@@ -611,8 +620,7 @@ describe("MCP workspace tools (document-first)", () => {
     };
     const result = await run(
       WorkspaceTools.writeComponent(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         path: "components/../evil.tsx",
         source: "export default () => null;",
       }),
@@ -625,8 +633,7 @@ describe("MCP workspace tools (document-first)", () => {
   it("rename_component moves a component and reports the version", async () => {
     const result = await run(
       WorkspaceTools.renameComponent(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         fromPath: "components/hero.tsx",
         toPath: "components/banner.tsx",
       }),
@@ -638,8 +645,7 @@ describe("MCP workspace tools (document-first)", () => {
   it("delete_component removes a component and warns about placeholders", async () => {
     const result = await run(
       WorkspaceTools.deleteComponent(SCOPE, {
-        slug: "trial",
-        changeSetId: CHANGE_SET_ID,
+        editSessionId: EDIT_SESSION_ID,
         path: "components/hero.tsx",
       }),
     );
@@ -648,12 +654,15 @@ describe("MCP workspace tools (document-first)", () => {
   });
 
   it("a service failure folds into a readable message (no Cause leak)", async () => {
-    const result = await run(WorkspaceTools.getPaywall(SCOPE, { slug: "missing" }), {
-      workspace: fakeWorkspace({
-        readDocument: () =>
-          Effect.fail({ _tag: "PaywallNotFoundError", message: 'No paywall "missing"' }) as never,
-      }),
-    });
+    const result = await run(
+      WorkspaceTools.getPaywall(SCOPE, { editSessionId: "missing_session" }),
+      {
+        workspace: fakeWorkspace({
+          readConnectedDocumentTree: () =>
+            Effect.fail({ _tag: "PaywallNotFoundError", message: 'No paywall "missing"' }) as never,
+        }),
+      },
+    );
     expect(result.isError).toBe(true);
     expect(result.output).toContain("get_paywall failed");
     expect(result.output).toContain('No paywall "missing"');
diff --git a/apps/backend/src/ai/workspace-tools.ts b/apps/backend/src/ai/workspace-tools.ts
index c59706fcb..d6d6fa4d9 100644
--- a/apps/backend/src/ai/workspace-tools.ts
+++ b/apps/backend/src/ai/workspace-tools.ts
@@ -1,22 +1,24 @@
 /**
- * Stateless MCP tool core: ONE implementation of each MCP `tools/call` handler,
+ * Stateful document-editing tool core: ONE implementation of each MCP
+ * `tools/call` handler,
  * consumed by the MCP JSON-RPC frontend (`routes/mcp.ts`).
  *
- * MCP is stateless and server-executed (external agents like Claude Code hitting
- * `/api/mcp`): there is no fork, no `paywall.tsx`, no whole-target overwrite. The
- * surface is document-first — composition is edited as mimic DOCUMENT ops and
- * code components are managed by path:
+ * Individual MCP HTTP requests are server-executed, while `editSessionId` keeps
+ * a leased Mimic participant connection alive across them. There is no fork, no
+ * `paywall.tsx`, and no whole-target overwrite. The surface is document-first —
+ * composition is edited as Mimic document ops and code components are managed by
+ * path:
  *
- * - `list_paywalls` — the project's paywall directories.
+ * - `list_paywalls` — the project's paywall ids, slugs, and directories.
  * - `begin_paywall_edit` / `finish_paywall_edit` / `revert_paywall_edit` — a
  *   version- and preview-bound edit lifecycle.
- * - `get_paywall({ slug, nodeId?, depth? })` — cleaned document JSON.
- * - `get_components({ slug })` — catalog, local, and builtin components.
- * - `read_component({ slug, path })` — a local component's TSX source.
- * - `edit_paywall({ slug, edits })` — an ATOMIC batch of document ops against the
- *   LIVE document (schema-validated, then reconciled+submitted with retry).
+ * - `get_paywall({ editSessionId, nodeId?, depth? })` — cleaned document JSON.
+ * - `get_components({ editSessionId })` — catalog, local, and builtin components.
+ * - `read_component({ editSessionId, path })` — a local component's TSX source.
+ * - `edit_paywall({ editSessionId, edits })` — an ATOMIC batch of document ops against
+ *   the LIVE document (schema-validated, then reconciled+submitted with retry).
  * - `duplicate_subtree` — copy an existing visual subtree with fresh node ids.
- * - `write_component({ slug, path, source })` — server-VALIDATED (headless build)
+ * - `write_component({ editSessionId, path, source })` — server-VALIDATED (headless build)
  *   then committed; diagnostics commit nothing.
  * - `rename_component` / `delete_component` — path move / placeholder-degrade.
  * - `get_paywall_preview` — a PNG plus the exact document version/signature it
@@ -34,7 +36,7 @@ import {
   componentServingPreviewKey,
   PaywallArtifactStore,
   PaywallDeployService,
-  PaywallEditChangeSetService,
+  PaywallEditSessionService,
   PaywallWorkspaceService,
   SnapshotImageRenderer,
   type CompileExtractResult,
@@ -63,7 +65,7 @@ export type WorkspaceToolDeps =
   | ComponentManifestCacheService
   | ComponentCompiler
   | PaywallArtifactStore
-  | PaywallEditChangeSetService
+  | PaywallEditSessionService
   | SnapshotImageRenderer
   | AuthSession;
 
@@ -87,7 +89,7 @@ export interface WorkspaceToolResult {
 /**
  * The scope a workspace tool operates over. `projectId` is authoritative — the
  * MCP frontend derives it from the API key. Internal durable sessions also
- * supply their identity so newly opened change sets remain session-owned.
+ * supply their identity so newly opened edit sessions remain agent-session-owned.
  */
 export interface WorkspaceToolScope {
   readonly projectId: string;
@@ -197,69 +199,120 @@ const runFolded = <A>(
 
 /** Inputs for each workspace tool, matching the MCP tool schemas. */
 export interface ListPaywallsInput {}
-export interface BeginPaywallEditInput {
-  readonly slug: string;
+
+/** Stable paywall target shared by every paywall-scoped tool. */
+export interface PaywallTargetInput {
+  readonly paywallId: string;
 }
-export interface GetPaywallInput {
-  readonly slug: string;
+
+export interface BeginPaywallEditInput extends PaywallTargetInput {}
+export interface EditSessionInput {
+  readonly editSessionId: string;
+}
+export interface GetPaywallInput extends EditSessionInput {
   readonly nodeId?: string;
   readonly depth?: number;
 }
-export interface GetComponentsInput {
-  readonly slug: string;
-}
-export interface ReadComponentInput {
-  readonly slug: string;
+export interface GetComponentsInput extends EditSessionInput {}
+export interface ReadComponentInput extends EditSessionInput {
   readonly path: string;
 }
-export interface EditPaywallInput {
-  readonly slug: string;
-  readonly changeSetId: string;
+export interface EditPaywallInput extends EditSessionInput {
   readonly edits: ReadonlyArray<DocumentEdit>;
 }
-export interface DuplicateSubtreeInput {
-  readonly slug: string;
-  readonly changeSetId: string;
+export interface DuplicateSubtreeInput extends EditSessionInput {
   readonly nodeId: string;
   readonly parentId: string;
   readonly index?: number;
   readonly nextName?: string;
 }
-export interface WriteComponentInput {
-  readonly slug: string;
-  readonly changeSetId: string;
+export interface WriteComponentInput extends EditSessionInput {
   readonly path: string;
   readonly source: string;
 }
-export interface RenameComponentInput {
-  readonly slug: string;
-  readonly changeSetId: string;
+export interface RenameComponentInput extends EditSessionInput {
   readonly fromPath: string;
   readonly toPath: string;
 }
-export interface DeleteComponentInput {
-  readonly slug: string;
-  readonly changeSetId: string;
+export interface DeleteComponentInput extends EditSessionInput {
   readonly path: string;
 }
-export interface GetPaywallPreviewInput {
-  readonly slug: string;
-  readonly changeSetId: string;
+export interface GetPaywallPreviewInput extends EditSessionInput {
   readonly width?: number;
   readonly height?: number;
   readonly scale?: 1 | 2;
 }
-export interface FinishPaywallEditInput {
-  readonly slug: string;
-  readonly changeSetId: string;
+export interface FinishPaywallEditInput extends EditSessionInput {
   readonly reviewedDocumentSignature: string;
   readonly verdict: string;
   readonly unresolvedIssues: ReadonlyArray<string>;
 }
 export interface RevertPaywallEditInput {
-  readonly changeSetId: string;
+  readonly editSessionId: string;
+}
+
+interface ResolvedPaywallTarget {
+  readonly paywallId: string;
+  readonly slug: string;
+}
+
+interface ResolvedEditSession extends ResolvedPaywallTarget {
+  readonly editSessionId: string;
 }
 
+/** Resolve a stable paywall id within the scoped project. */
+const resolvePaywallTarget = (
+  scope: WorkspaceToolScope,
+  input: PaywallTargetInput,
+): Effect.Effect<ResolvedPaywallTarget, Error, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const ws = yield* PaywallWorkspaceService;
+    const paywalls = yield* ws.listPaywalls(scope.projectId);
+    const target = paywalls.find((candidate) => candidate.paywallId === input.paywallId);
+    if (target === undefined) {
+      return yield* Effect.fail(
+        new Error(`No paywall with id "${input.paywallId}" exists in this project.`),
+      );
+    }
+    return target;
+  });
+
+/** Resolves and authorizes the Mimic connection represented by an edit session. */
+const resolveEditSession = (
+  scope: WorkspaceToolScope,
+  input: EditSessionInput,
+): Effect.Effect<ResolvedEditSession, unknown, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const editSessions = yield* PaywallEditSessionService;
+    const session = yield* editSessions.connectActive({
+      projectId: scope.projectId,
+      editSessionId: input.editSessionId,
+      agentSessionId: scope.agentSessionId,
+    });
+    return {
+      editSessionId: session.editSessionId,
+      paywallId: session.paywallId,
+      slug: session.paywallSlug,
+    };
+  });
+
+const recordSessionMutation = (
+  scope: WorkspaceToolScope,
+  target: ResolvedEditSession,
+  result: { readonly version: number; readonly commandCount: number },
+) =>
+  result.commandCount === 0
+    ? Effect.void
+    : Effect.gen(function* () {
+        const editSessions = yield* PaywallEditSessionService;
+        yield* editSessions.recordMutation({
+          projectId: scope.projectId,
+          editSessionId: target.editSessionId,
+          agentSessionId: scope.agentSessionId,
+          documentVersion: result.version,
+        });
+      }).pipe(Effect.ignore);
+
 /** `begin_paywall_edit` — capture the revert baseline and mint the write capability. */
 export const beginPaywallEdit = (
   scope: WorkspaceToolScope,
@@ -268,15 +321,27 @@ export const beginPaywallEdit = (
   Effect.gen(function* () {
     const result = yield* runFolded(
       Effect.gen(function* () {
-        const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.begin(scope.projectId, input.slug, scope.agentSessionId);
+        const target = yield* resolvePaywallTarget(scope, input);
+        const editSessions = yield* PaywallEditSessionService;
+        return yield* scope.agentSessionId === undefined
+          ? editSessions.begin({
+              projectId: scope.projectId,
+              paywallId: target.paywallId,
+              source: "mcp",
+            })
+          : editSessions.begin({
+              projectId: scope.projectId,
+              paywallId: target.paywallId,
+              source: "built_in",
+              agentSessionId: scope.agentSessionId,
+            });
       }),
     );
     return result.ok
       ? okResult(
           JSON.stringify({
-            changeSetId: result.value.id,
-            slug: result.value.paywallSlug,
+            editSessionId: result.value.editSessionId,
+            paywallId: result.value.paywallId,
             baselineVersion: result.value.baselineVersion,
           }),
         )
@@ -284,7 +349,7 @@ export const beginPaywallEdit = (
   });
 
 /**
- * `list_paywalls` — the project's paywall directories (slug + path) as a list.
+ * `list_paywalls` — the project's paywalls (stable id + slug + path) as a list.
  * MCP has no system prompt to embed the paywall set into, so it is a first-class
  * tool here.
  */
@@ -304,7 +369,9 @@ export const listPaywalls = (
     if (result.value.length === 0) {
       return okResult("No paywalls in this project.");
     }
-    const lines = result.value.map((dir) => `- ${dir.slug} (/paywalls/${dir.slug})`);
+    const lines = result.value.map(
+      (dir) => `- ${dir.paywallId}: slug ${dir.slug} (/paywalls/${dir.slug})`,
+    );
     return okResult(`${result.value.length} paywall(s):\n${lines.join("\n")}`);
   });
 
@@ -320,12 +387,17 @@ const toEditableNode = (node: SnapshotDocumentNode): EditableDocumentNode => ({
   children: (node.children ?? []).map(toEditableNode),
 });
 
-/** Read the decoded document root for a slug, or a readable failure message. */
-const readDocumentRoot = (scope: WorkspaceToolScope, slug: string) =>
+/** Resolve the target and read its decoded document root. */
+const readDocumentRoot = (scope: WorkspaceToolScope, input: EditSessionInput) =>
   runFolded(
     Effect.gen(function* () {
+      const target = yield* resolveEditSession(scope, input);
       const ws = yield* PaywallWorkspaceService;
-      return yield* ws.readDocument(scope.projectId, slug);
+      const document = yield* ws.readConnectedDocumentTree(scope.projectId, {
+        paywallId: target.paywallId,
+        connectionId: target.editSessionId,
+      });
+      return { target, document };
     }),
   );
 
@@ -340,20 +412,24 @@ export const getPaywall = (
   input: GetPaywallInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
-    const result = yield* readDocumentRoot(scope, input.slug);
+    const result = yield* readDocumentRoot(scope, input);
     if (!result.ok) {
       return errResult(`get_paywall failed: ${result.message}`);
     }
-    const roots = result.value.root != null ? [result.value.root as SnapshotDocumentNode] : [];
+    const roots =
+      result.value.document.root != null
+        ? [result.value.document.root as SnapshotDocumentNode]
+        : [];
     const cleaned = serializeDocument(roots, {
       ...(input.nodeId !== undefined ? { nodeId: input.nodeId } : {}),
       ...(input.depth !== undefined ? { depth: input.depth } : {}),
     });
     if (cleaned === null) {
+      const label = `${result.value.target.paywallId} (${result.value.target.slug})`;
       return errResult(
         input.nodeId !== undefined
-          ? `get_paywall: no node "${input.nodeId}" in paywall "${input.slug}".`
-          : `get_paywall: paywall "${input.slug}" has no document.`,
+          ? `get_paywall: no node "${input.nodeId}" in paywall ${label}.`
+          : `get_paywall: paywall ${label} has no document.`,
       );
     }
     return okResult(JSON.stringify(cleaned, null, 2));
@@ -403,9 +479,13 @@ export const getComponents = (
         const deploy = yield* PaywallDeployService;
         const ws = yield* PaywallWorkspaceService;
         const manifestCache = yield* ComponentManifestCacheService;
+        const target = yield* resolveEditSession(scope, input);
 
         const catalog = yield* deploy.listComponents({ projectId: scope.projectId });
-        const document = yield* ws.readDocument(scope.projectId, input.slug);
+        const document = yield* ws.readConnectedDocumentTree(scope.projectId, {
+          paywallId: target.paywallId,
+          connectionId: target.editSessionId,
+        });
         const locals = localComponentsOf((document.root as SnapshotDocumentNode | null) ?? null);
         const cached = yield* manifestCache.getMany(
           locals.map((local) => hashSource(local.source)),
@@ -476,16 +556,18 @@ export const readComponent = (
   input: ReadComponentInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
-    const result = yield* readDocumentRoot(scope, input.slug);
+    const result = yield* readDocumentRoot(scope, input);
     if (!result.ok) {
       return errResult(`read_component failed: ${result.message}`);
     }
-    const locals = localComponentsOf((result.value.root as SnapshotDocumentNode | null) ?? null);
+    const locals = localComponentsOf(
+      (result.value.document.root as SnapshotDocumentNode | null) ?? null,
+    );
     const component = locals.find((local) => local.path === input.path);
     if (component === undefined) {
       const available = locals.map((local) => local.path);
       return errResult(
-        `read_component: no local component at "${input.path}" in paywall "${input.slug}".${
+        `read_component: no local component at "${input.path}" in paywall ${result.value.target.paywallId} (${result.value.target.slug}).${
           available.length > 0 ? ` Available: [${available.join(", ")}].` : ""
         }`,
       );
@@ -506,30 +588,22 @@ export const editPaywall = (
   input: EditPaywallInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
-    const changeSet = yield* runFolded(
-      Effect.gen(function* () {
-        const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.requireActive({
-          projectId: scope.projectId,
-          changeSetId: input.changeSetId,
-          paywallSlug: input.slug,
-          agentSessionId: scope.agentSessionId,
-        });
-      }),
-    );
-    if (!changeSet.ok) {
-      return errResult(`edit_paywall rejected: ${changeSet.message}`);
+    const resolved = yield* runFolded(resolveEditSession(scope, input));
+    if (!resolved.ok) {
+      return errResult(`edit_paywall failed: ${resolved.message}`);
     }
-
+    const target = resolved.value;
     // Validate first (against a fresh read) so an invalid batch never opens a
     // transaction and returns the model-facing errors verbatim.
-    const read = yield* readDocumentRoot(scope, input.slug);
+    const read = yield* readDocumentRoot(scope, input);
     if (!read.ok) {
       return errResult(`edit_paywall failed: ${read.message}`);
     }
-    const root = read.value.root as SnapshotDocumentNode | null;
+    const root = read.value.document.root as SnapshotDocumentNode | null;
     if (root === null) {
-      return errResult(`edit_paywall: paywall "${input.slug}" has no document to edit.`);
+      return errResult(
+        `edit_paywall: paywall ${target.paywallId} (${target.slug}) has no document to edit.`,
+      );
     }
     const validation = validateDocumentEdits(input.edits, toEditableNode(root));
     if (!validation.ok) {
@@ -543,7 +617,13 @@ export const editPaywall = (
     const applied = yield* runFolded(
       Effect.gen(function* () {
         const ws = yield* PaywallWorkspaceService;
-        return yield* ws.editDocument(scope.projectId, input.slug, validation.edits);
+        const result = yield* ws.editConnectedDocument(
+          scope.projectId,
+          { paywallId: target.paywallId, connectionId: target.editSessionId },
+          validation.edits,
+        );
+        yield* recordSessionMutation(scope, target, result);
+        return result;
       }),
     );
     if (!applied.ok) {
@@ -558,7 +638,7 @@ export const editPaywall = (
             .join("; ")}`
         : "";
     return okResult(
-      `Applied ${validation.edits.length} edit(s) to "${input.slug}" at version ${version} (${commandCount} command${commandCount === 1 ? "" : "s"}).${mintedNote}`,
+      `Applied ${validation.edits.length} edit(s) to ${target.paywallId} (${target.slug}) at version ${version} (${commandCount} command${commandCount === 1 ? "" : "s"}).${mintedNote}`,
     );
   });
 
@@ -597,13 +677,16 @@ export const duplicateSubtree = (
   input: DuplicateSubtreeInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
-    const read = yield* readDocumentRoot(scope, input.slug);
+    const read = yield* readDocumentRoot(scope, input);
     if (!read.ok) {
       return errResult(`duplicate_subtree failed: ${read.message}`);
     }
-    const root = read.value.root as SnapshotDocumentNode | null;
+    const { target, document } = read.value;
+    const root = document.root as SnapshotDocumentNode | null;
     if (root === null) {
-      return errResult(`duplicate_subtree: paywall "${input.slug}" has no document.`);
+      return errResult(
+        `duplicate_subtree: paywall ${target.paywallId} (${target.slug}) has no document.`,
+      );
     }
     const source = findSnapshotNode(root, input.nodeId);
     if (source === null) {
@@ -619,8 +702,7 @@ export const duplicateSubtree = (
       node.name = input.nextName;
     }
     return yield* editPaywall(scope, {
-      slug: input.slug,
-      changeSetId: input.changeSetId,
+      editSessionId: input.editSessionId,
       edits: [
         {
           op: "insert",
@@ -661,20 +743,11 @@ export const writeComponent = (
   input: WriteComponentInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
-    const active = yield* runFolded(
-      Effect.gen(function* () {
-        const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.requireActive({
-          projectId: scope.projectId,
-          changeSetId: input.changeSetId,
-          paywallSlug: input.slug,
-          agentSessionId: scope.agentSessionId,
-        });
-      }),
-    );
-    if (!active.ok) {
-      return errResult(`write_component rejected: ${active.message}`);
+    const resolved = yield* runFolded(resolveEditSession(scope, input));
+    if (!resolved.ok) {
+      return errResult(`write_component failed: ${resolved.message}`);
     }
+    const target = resolved.value;
     const nameError = validateComponentFileName(fileNameFromDocRelative(input.path));
     if (nameError !== undefined) {
       return errResult(`write_component rejected: ${nameError}`);
@@ -705,12 +778,13 @@ export const writeComponent = (
     const committed = yield* runFolded(
       Effect.gen(function* () {
         const ws = yield* PaywallWorkspaceService;
-        const result = yield* ws.writeComponentSource(
+        const result = yield* ws.writeConnectedComponentSource(
           scope.projectId,
-          input.slug,
+          { paywallId: target.paywallId, connectionId: target.editSessionId },
           input.path,
           input.source,
         );
+        yield* recordSessionMutation(scope, target, result);
         const manifestCache = yield* ComponentManifestCacheService;
         yield* manifestCache.record({
           sourceHash: hashSource(input.source),
@@ -724,7 +798,7 @@ export const writeComponent = (
       return errResult(`write_component rejected: ${committed.message}`);
     }
     return okResult(
-      `Wrote ${input.path} to "${input.slug}" at version ${committed.value.version} (compiled clean; manifest recorded).`,
+      `Wrote ${input.path} to ${target.paywallId} (${target.slug}) at version ${committed.value.version} (compiled clean; manifest recorded).`,
     );
   });
 
@@ -738,34 +812,27 @@ export const renameComponent = (
   input: RenameComponentInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
-    const active = yield* runFolded(
-      Effect.gen(function* () {
-        const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.requireActive({
-          projectId: scope.projectId,
-          changeSetId: input.changeSetId,
-          paywallSlug: input.slug,
-          agentSessionId: scope.agentSessionId,
-        });
-      }),
-    );
-    if (!active.ok) {
-      return errResult(`rename_component rejected: ${active.message}`);
+    const resolved = yield* runFolded(resolveEditSession(scope, input));
+    if (!resolved.ok) {
+      return errResult(`rename_component failed: ${resolved.message}`);
     }
+    const target = resolved.value;
     const result = yield* runFolded(
       Effect.gen(function* () {
         const ws = yield* PaywallWorkspaceService;
-        return yield* ws.moveComponentFile(
+        const result = yield* ws.moveConnectedComponentFile(
           scope.projectId,
-          input.slug,
+          { paywallId: target.paywallId, connectionId: target.editSessionId },
           fileNameFromDocRelative(input.fromPath),
           fileNameFromDocRelative(input.toPath),
         );
+        yield* recordSessionMutation(scope, target, result);
+        return result;
       }),
     );
     return result.ok
       ? okResult(
-          `Renamed ${input.fromPath} → ${input.toPath} in "${input.slug}" at version ${result.value.version}.`,
+          `Renamed ${input.fromPath} → ${input.toPath} in ${target.paywallId} (${target.slug}) at version ${result.value.version}.`,
         )
       : errResult(`rename_component rejected: ${result.message}`);
   });
@@ -780,33 +847,26 @@ export const deleteComponent = (
   input: DeleteComponentInput,
 ): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
   Effect.gen(function* () {
-    const active = yield* runFolded(
-      Effect.gen(function* () {
-        const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.requireActive({
-          projectId: scope.projectId,
-          changeSetId: input.changeSetId,
-          paywallSlug: input.slug,
-          agentSessionId: scope.agentSessionId,
-        });
-      }),
-    );
-    if (!active.ok) {
-      return errResult(`delete_component rejected: ${active.message}`);
+    const resolved = yield* runFolded(resolveEditSession(scope, input));
+    if (!resolved.ok) {
+      return errResult(`delete_component failed: ${resolved.message}`);
     }
+    const target = resolved.value;
     const result = yield* runFolded(
       Effect.gen(function* () {
         const ws = yield* PaywallWorkspaceService;
-        return yield* ws.deleteComponentFile(
+        const result = yield* ws.deleteConnectedComponentFile(
           scope.projectId,
-          input.slug,
+          { paywallId: target.paywallId, connectionId: target.editSessionId },
           fileNameFromDocRelative(input.path),
         );
+        yield* recordSessionMutation(scope, target, result);
+        return result;
       }),
     );
     return result.ok
       ? okResult(
-          `Deleted ${input.path} from "${input.slug}" at version ${result.value.version}. Any instances of it now render as placeholders — replace or remove them.`,
+          `Deleted ${input.path} from ${target.paywallId} (${target.slug}) at version ${result.value.version}. Any instances of it now render as placeholders — replace or remove them.`,
         )
       : errResult(`delete_component rejected: ${result.message}`);
   });
@@ -906,15 +966,14 @@ export const getPaywallPreview = (
     const scale = input.scale ?? 1;
     const result = yield* runFolded(
       Effect.gen(function* () {
-        const changeSets = yield* PaywallEditChangeSetService;
-        yield* changeSets.requireActive({
-          projectId: scope.projectId,
-          changeSetId: input.changeSetId,
-          paywallSlug: input.slug,
-          agentSessionId: scope.agentSessionId,
-        });
+        const target = yield* resolveEditSession(scope, input);
+        const editSessions = yield* PaywallEditSessionService;
         const workspace = yield* PaywallWorkspaceService;
-        const before = yield* workspace.readDocument(scope.projectId, input.slug);
+        const connection = {
+          paywallId: target.paywallId,
+          connectionId: target.editSessionId,
+        };
+        const before = yield* workspace.readConnectedDocumentTree(scope.projectId, connection);
         const signature = documentSignature(before.root);
         const root = (before.root as SnapshotDocumentNode | null) ?? null;
         const componentTrees = yield* fetchPreviewComponentTrees(root);
@@ -928,7 +987,7 @@ export const getPaywallPreview = (
           height,
           deviceScaleFactor: scale,
         });
-        const after = yield* workspace.readDocument(scope.projectId, input.slug);
+        const after = yield* workspace.readConnectedDocumentTree(scope.projectId, connection);
         if (after.version !== before.version || documentSignature(after.root) !== signature) {
           return yield* Effect.fail(
             new Error(
@@ -936,10 +995,9 @@ export const getPaywallPreview = (
             ),
           );
         }
-        yield* changeSets.recordPreview({
+        yield* editSessions.recordPreview({
           projectId: scope.projectId,
-          changeSetId: input.changeSetId,
-          paywallSlug: input.slug,
+          editSessionId: input.editSessionId,
           agentSessionId: scope.agentSessionId,
           documentSignature: signature,
           documentVersion: before.version,
@@ -959,7 +1017,7 @@ export const getPaywallPreview = (
       scale,
       documentVersion: result.value.version,
       documentSignature: result.value.signature,
-      message: "Review this image visually before finishing the change set.",
+      message: "Review this image visually before finishing the edit session.",
     });
     return okResult(metadata, [
       { type: "text", text: metadata },
@@ -967,7 +1025,7 @@ export const getPaywallPreview = (
     ]);
   });
 
-/** `finish_paywall_edit` — close a change set after reviewing its exact latest preview. */
+/** `finish_paywall_edit` — close an edit session after reviewing its exact latest preview. */
 export const finishPaywallEdit = (
   scope: WorkspaceToolScope,
   input: FinishPaywallEditInput,
@@ -980,13 +1038,16 @@ export const finishPaywallEdit = (
     }
     const result = yield* runFolded(
       Effect.gen(function* () {
+        const target = yield* resolveEditSession(scope, input);
         const workspace = yield* PaywallWorkspaceService;
-        const document = yield* workspace.readDocument(scope.projectId, input.slug);
-        const changeSets = yield* PaywallEditChangeSetService;
-        return yield* changeSets.finish({
+        const document = yield* workspace.readConnectedDocumentTree(scope.projectId, {
+          paywallId: target.paywallId,
+          connectionId: target.editSessionId,
+        });
+        const editSessions = yield* PaywallEditSessionService;
+        return yield* editSessions.finish({
           projectId: scope.projectId,
-          changeSetId: input.changeSetId,
-          paywallSlug: input.slug,
+          editSessionId: input.editSessionId,
           agentSessionId: scope.agentSessionId,
           reviewedDocumentSignature: input.reviewedDocumentSignature,
           currentDocumentSignature: documentSignature(document.root),
@@ -997,7 +1058,7 @@ export const finishPaywallEdit = (
     );
     return result.ok
       ? okResult(
-          `Finished change set ${input.changeSetId} after visual review. Verdict: ${input.verdict}`,
+          `Finished edit session ${input.editSessionId} after visual review. Verdict: ${input.verdict}`,
         )
       : errResult(`finish_paywall_edit rejected: ${result.message}`);
   });
@@ -1010,19 +1071,19 @@ export const revertPaywallEdit = (
   Effect.gen(function* () {
     const result = yield* runFolded(
       Effect.gen(function* () {
-        const changeSets = yield* PaywallEditChangeSetService;
+        const editSessions = yield* PaywallEditSessionService;
         return yield* scope.agentSessionId === undefined
-          ? changeSets.revert(scope.projectId, input.changeSetId)
-          : changeSets.revertForAgentSession(
+          ? editSessions.revert(scope.projectId, input.editSessionId)
+          : editSessions.revertForAgentSession(
               scope.projectId,
-              input.changeSetId,
+              input.editSessionId,
               scope.agentSessionId,
             );
       }),
     );
     return result.ok
       ? okResult(
-          `Reverted change set ${input.changeSetId} for "${result.value.paywallSlug}" at version ${result.value.version} (${result.value.commandCount} command${result.value.commandCount === 1 ? "" : "s"}).`,
+          `Reverted edit session ${input.editSessionId} for "${result.value.paywallSlug}" at version ${result.value.version} (${result.value.commandCount} command${result.value.commandCount === 1 ? "" : "s"}).`,
         )
       : errResult(`revert_paywall_edit failed: ${result.message}`);
   });
diff --git a/apps/backend/src/mcp/dispatch.test.ts b/apps/backend/src/mcp/dispatch.test.ts
index 522aa5cfc..a23e74f25 100644
--- a/apps/backend/src/mcp/dispatch.test.ts
+++ b/apps/backend/src/mcp/dispatch.test.ts
@@ -1,6 +1,6 @@
 /**
- * Tests the MCP tool DISPATCH path end-to-end through the stateless document-
- * first workspace-tool core against a mocked workspace context. Proves: a valid
+ * Tests the MCP tool dispatch path end-to-end through the stateful document-
+ * editing core against a mocked workspace context. Proves: a valid
  * call runs the core and returns its string; an invalid argument set folds to an
  * `isError` result (never a throw / JSON-RPC error); `list_paywalls` lists
  * directories; `get_paywall` cleans the document; `edit_paywall` validates then
@@ -11,7 +11,7 @@ import {
   ComponentManifestCacheService,
   PaywallArtifactStore,
   PaywallDeployService,
-  PaywallEditChangeSetService,
+  PaywallEditSessionService,
   PaywallWorkspaceService,
   SnapshotImageRenderer,
 } from "@voidhash/core/services";
@@ -43,10 +43,18 @@ const fakeWorkspace = (over: Partial<PaywallWorkspaceService["Service"]> = {}) =
       ]),
     readDocument: (_p: string, slug: string) =>
       Effect.succeed({ slug, name: "Trial", paywallId: "pw_1", root: documentRoot }),
+    readConnectedDocumentTree: () => Effect.succeed({ tree: {}, root: documentRoot, version: 8 }),
     editDocument: () => Effect.succeed({ version: 9, commandCount: 2, mintedIds: {} }),
+    editConnectedDocument: () => Effect.succeed({ version: 9, commandCount: 2, mintedIds: {} }),
     writeComponentSource: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    writeConnectedComponentSource: () =>
+      Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
     moveComponentFile: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    moveConnectedComponentFile: () =>
+      Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
     deleteComponentFile: () => Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
+    deleteConnectedComponentFile: () =>
+      Effect.succeed({ version: 9, commandCount: 1, diagnostics: [] }),
     ...over,
   }) as unknown as PaywallWorkspaceService["Service"];
 
@@ -70,23 +78,26 @@ const fakeCompiler = (over: Partial<ComponentCompiler["Service"]> = {}) =>
     ...over,
   }) as unknown as ComponentCompiler["Service"];
 
-const fakeChangeSets = () =>
+const fakeEditSessions = (over: Partial<PaywallEditSessionService["Service"]> = {}) =>
   ({
-    requireActive: () =>
+    recordMutation: () => Effect.void,
+    connectActive: () =>
       Effect.succeed({
-        id: "pw_change_1",
+        editSessionId: "pw_edit_1",
         projectId: "proj_1",
         paywallId: "pw_1",
         paywallSlug: "trial",
         baselineVersion: 1,
       }),
-  }) as unknown as PaywallEditChangeSetService["Service"];
+    ...over,
+  }) as unknown as PaywallEditSessionService["Service"];
 
 interface Fakes {
   readonly workspace?: PaywallWorkspaceService["Service"];
   readonly deploy?: PaywallDeployService["Service"];
   readonly manifestCache?: ComponentManifestCacheService["Service"];
   readonly compiler?: ComponentCompiler["Service"];
+  readonly editSessions?: PaywallEditSessionService["Service"];
 }
 
 const contextWith = (fakes: Fakes) =>
@@ -95,7 +106,7 @@ const contextWith = (fakes: Fakes) =>
     Context.add(PaywallDeployService, fakes.deploy ?? fakeDeploy()),
     Context.add(ComponentManifestCacheService, fakes.manifestCache ?? fakeManifestCache()),
     Context.add(ComponentCompiler, fakes.compiler ?? fakeCompiler()),
-    Context.add(PaywallEditChangeSetService, fakeChangeSets()),
+    Context.add(PaywallEditSessionService, fakes.editSessions ?? fakeEditSessions()),
     Context.add(PaywallArtifactStore, {
       getObject: () => Effect.succeed(null),
     } as unknown as PaywallArtifactStore["Service"]),
@@ -122,12 +133,12 @@ describe("MCP tool dispatch", () => {
   it("list_paywalls lists the project directories (no input)", async () => {
     const result = await dispatch("list_paywalls", {});
     expect(result.isError).toBe(false);
-    expect(result.output).toContain("trial (/paywalls/trial)");
-    expect(result.output).toContain("onboarding (/paywalls/onboarding)");
+    expect(result.output).toContain("pw_1: slug trial (/paywalls/trial)");
+    expect(result.output).toContain("pw_2: slug onboarding (/paywalls/onboarding)");
   });
 
   it("get_paywall returns the cleaned document JSON with node ids", async () => {
-    const result = await dispatch("get_paywall", { slug: "trial" });
+    const result = await dispatch("get_paywall", { editSessionId: "pw_edit_1" });
     expect(result.isError).toBe(false);
     expect(result.output).toContain('"id": "root1"');
     expect(result.output).toContain('"type": "screen"');
@@ -135,8 +146,7 @@ describe("MCP tool dispatch", () => {
 
   it("edit_paywall validates then applies, reporting the new version", async () => {
     const result = await dispatch("edit_paywall", {
-      slug: "trial",
-      changeSetId: "pw_change_1",
+      editSessionId: "pw_edit_1",
       edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
     });
     expect(result.isError).toBe(false);
@@ -144,16 +154,15 @@ describe("MCP tool dispatch", () => {
   });
 
   it("edit_paywall returns structured validation errors verbatim (no apply)", async () => {
-    const editDocument = () => {
-      throw new Error("editDocument must not be called on a validation failure");
+    const editConnectedDocument = () => {
+      throw new Error("editConnectedDocument must not be called on a validation failure");
     };
     const result = await dispatchWith(
-      { workspace: fakeWorkspace({ editDocument: editDocument as never }) },
+      { workspace: fakeWorkspace({ editConnectedDocument: editConnectedDocument as never }) },
       "edit_paywall",
       // Unknown parent id → validation rejects before any submit.
       {
-        slug: "trial",
-        changeSetId: "pw_change_1",
+        editSessionId: "pw_edit_1",
         edits: [{ op: "insert", parentId: "ghost", node: { type: "view" } }],
       },
     );
@@ -163,12 +172,14 @@ describe("MCP tool dispatch", () => {
   });
 
   it("write_component rejects broken source with diagnostics (commits nothing)", async () => {
-    const writeComponentSource = () => {
-      throw new Error("writeComponentSource must not be called on a compile error");
+    const writeConnectedComponentSource = () => {
+      throw new Error("writeConnectedComponentSource must not be called on a compile error");
     };
     const result = await dispatchWith(
       {
-        workspace: fakeWorkspace({ writeComponentSource: writeComponentSource as never }),
+        workspace: fakeWorkspace({
+          writeConnectedComponentSource: writeConnectedComponentSource as never,
+        }),
         compiler: fakeCompiler({
           compileAndExtract: () =>
             Effect.succeed({
@@ -180,8 +191,7 @@ describe("MCP tool dispatch", () => {
       },
       "write_component",
       {
-        slug: "trial",
-        changeSetId: "pw_change_1",
+        editSessionId: "pw_edit_1",
         path: "components/hero.tsx",
         source: "export default (=> {",
       },
@@ -213,8 +223,7 @@ describe("MCP tool dispatch", () => {
       },
       "write_component",
       {
-        slug: "trial",
-        changeSetId: "pw_change_1",
+        editSessionId: "pw_edit_1",
         path: "components/hero.tsx",
         source: "export default () => null;",
       },
@@ -235,7 +244,7 @@ describe("MCP tool dispatch", () => {
     const result = await dispatchWith(
       {
         workspace: fakeWorkspace({
-          editDocument: () =>
+          editConnectedDocument: () =>
             Effect.fail({
               _tag: "WorkspaceWriteConflictError",
               message: "lost the concurrency race",
@@ -244,8 +253,7 @@ describe("MCP tool dispatch", () => {
       },
       "edit_paywall",
       {
-        slug: "trial",
-        changeSetId: "pw_change_1",
+        editSessionId: "pw_edit_1",
         edits: [{ op: "insert", parentId: "screen1", node: { type: "view" } }],
       },
     );
diff --git a/apps/backend/src/mcp/protocol.test.ts b/apps/backend/src/mcp/protocol.test.ts
index 9079add24..3d6111576 100644
--- a/apps/backend/src/mcp/protocol.test.ts
+++ b/apps/backend/src/mcp/protocol.test.ts
@@ -150,11 +150,12 @@ describe("tools/call", () => {
 });
 
 describe("resources", () => {
-  it("lists and reads the schema-derived authoring guide", async () => {
+  it("lists and reads both authoring skills", async () => {
     const listed = await run(msg("resources/list"));
     const resources = (listed as { result: { resources: Array<{ uri: string }> } }).result
       .resources;
     expect(resources[0]?.uri).toBe("voidhash://skills/paywall-authoring");
+    expect(resources[1]?.uri).toBe("voidhash://skills/code-component-authoring");
 
     const read = await run(msg("resources/read", { uri: "voidhash://skills/paywall-authoring" }));
     const text = (read as { result: { contents: Array<{ text: string }> } }).result.contents[0]
@@ -163,6 +164,15 @@ describe("resources", () => {
     expect(text).toContain("Document model");
     expect(text).toContain("Variables, states, and actions");
     expect(text).toContain("selected_product");
+
+    const componentRead = await run(
+      msg("resources/read", { uri: "voidhash://skills/code-component-authoring" }),
+    );
+    const componentText = (componentRead as { result: { contents: Array<{ text: string }> } })
+      .result.contents[0]?.text;
+    expect(componentText).toContain("Custom designer panels");
+    expect(componentText).toContain("Runtime animation and gestures");
+    expect(componentText).toContain("useMotionValue");
   });
 });
 
@@ -175,7 +185,7 @@ describe("prompts", () => {
     const response = await run(
       msg("prompts/get", {
         name: "design_paywall",
-        arguments: { slug: "trial", request: "Improve hierarchy" },
+        arguments: { paywallId: "pw_1", request: "Improve hierarchy" },
       }),
     );
     const text = (
@@ -183,7 +193,7 @@ describe("prompts", () => {
         result: { messages: Array<{ content: { text: string } }> };
       }
     ).result.messages[0]?.content.text;
-    expect(text).toContain('paywall "trial"');
+    expect(text).toContain('paywall "pw_1"');
     expect(text).toContain("get_paywall_preview");
     expect(text).toContain("dynamic behavior without code");
     expect(text).toContain("actionBindings");
diff --git a/apps/backend/src/mcp/protocol.ts b/apps/backend/src/mcp/protocol.ts
index 9ccf0c6b4..d200ebe1a 100644
--- a/apps/backend/src/mcp/protocol.ts
+++ b/apps/backend/src/mcp/protocol.ts
@@ -1,8 +1,9 @@
 /**
  * Minimal, hand-rolled MCP JSON-RPC 2.0 handler for the STATELESS streamable-HTTP
- * transport. No SDK dependency: a stateless server answers each `POST /api/mcp`
- * with a single JSON response (or 202 for a notification), which is spec-compliant
- * and exactly what Claude Code's streamable-HTTP client accepts.
+ * transport. Editing state lives behind `editSessionId`; the transport itself
+ * answers each `POST /api/mcp` with a single JSON response (or 202 for a
+ * notification), which is spec-compliant and exactly what Claude Code's
+ * streamable-HTTP client accepts.
  *
  * This module is transport- and auth-free: {@link handleMcpMessage} takes an
  * already-parsed JSON-RPC message plus a `callTool` executor (the route supplies
@@ -132,7 +133,7 @@ const initializeResult = (params: Record<string, unknown> | undefined) => ({
   capabilities: { tools: {}, resources: {}, prompts: {} },
   serverInfo: SERVER_INFO,
   instructions:
-    "Begin a paywall edit change set before mutating. Prefer document variables, conditional states, and actions for dynamic behavior without code. Review the final PNG preview and finish with its exact document signature, or revert the change set.",
+    "Begin a paywall edit session before using scoped tools. The returned editSessionId is the connection handle. Prefer document variables, conditional states, and actions for dynamic behavior without code. Review the final PNG preview and finish with its exact document signature, or revert the session.",
 });
 
 /** The `tools/list` result: the advertised tool descriptors. */
@@ -156,7 +157,7 @@ const promptsListResult = () => ({
       description:
         "Start a visually verified MCP paywall-authoring workflow with dynamic no-code behavior.",
       arguments: [
-        { name: "slug", description: "Paywall slug to edit.", required: true },
+        { name: "paywallId", description: "Stable paywall id to edit.", required: true },
         { name: "request", description: "What to change or create.", required: false },
       ],
     },
@@ -266,10 +267,14 @@ export const handleMcpMessage = (
         message.params.arguments !== null && typeof message.params.arguments === "object"
           ? (message.params.arguments as Record<string, unknown>)
           : {};
-      const slug = args.slug;
-      if (typeof slug !== "string" || slug.length === 0) {
+      const paywallId = args.paywallId;
+      if (typeof paywallId !== "string" || paywallId.length === 0) {
         return Effect.succeed(
-          failure(id, JsonRpcErrorCode.InvalidParams, 'design_paywall requires a string "slug"'),
+          failure(
+            id,
+            JsonRpcErrorCode.InvalidParams,
+            'design_paywall requires a string "paywallId"',
+          ),
         );
       }
       const request =
@@ -278,13 +283,13 @@ export const handleMcpMessage = (
           : "";
       return Effect.succeed(
         success(id, {
-          description: `Design paywall ${slug} with a visually verified change set.`,
+          description: `Design paywall ${paywallId} with a visually verified edit session.`,
           messages: [
             {
               role: "user",
               content: {
                 type: "text",
-                text: `Design paywall "${slug}" using the Voidhash MCP workflow.${request}\n\n${mcpAuthoringGuide()}`,
+                text: `Design paywall "${paywallId}" using the Voidhash MCP workflow.${request}\n\n${mcpAuthoringGuide()}`,
               },
             },
           ],
diff --git a/apps/backend/src/mcp/tool-manifest.test.ts b/apps/backend/src/mcp/tool-manifest.test.ts
index 8ff186952..64b78bdc8 100644
--- a/apps/backend/src/mcp/tool-manifest.test.ts
+++ b/apps/backend/src/mcp/tool-manifest.test.ts
@@ -1,5 +1,5 @@
 /**
- * Contract test for the stateless MCP tool manifest: the advertised tool set,
+ * Contract test for the stateful MCP editing manifest: the advertised tool set,
  * each descriptor's JSON Schema shape, and that a validated tool's dispatcher
  * folds an invalid-argument call into an `isError` tool result (never a throw).
  */
@@ -53,47 +53,58 @@ describe("MCP tool manifest", () => {
     expect(tool?.descriptor.inputSchema.properties).toEqual({});
   });
 
-  it("get_paywall requires a slug and allows nodeId + depth", () => {
+  it("list_paywalls rejects unexpected input", async () => {
+    const tool = findMcpTool("list_paywalls")!;
+    const result = await Effect.runPromise(
+      tool.dispatch({ projectId: "proj_1" }, { paywallId: "pw_1" }) as Effect.Effect<{
+        output: string;
+        isError: boolean;
+      }>,
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("invalid arguments");
+  });
+
+  it("get_paywall requires an edit session and allows nodeId + depth", () => {
     const schema = findMcpTool("get_paywall")!.descriptor.inputSchema;
-    expect((schema.required as string[]).sort()).toEqual(["slug"]);
+    expect((schema.required as string[]).sort()).toEqual(["editSessionId"]);
     const props = schema.properties as Record<string, unknown>;
     expect(props).toHaveProperty("nodeId");
     expect(props).toHaveProperty("depth");
   });
 
-  it("edit_paywall requires a slug + a non-empty edits array", () => {
+  it("edit_paywall requires an edit session + a non-empty edits array", () => {
     const schema = findMcpTool("edit_paywall")!.descriptor.inputSchema;
     const required = (schema.required as string[] | undefined) ?? [];
-    expect(required).toContain("slug");
-    expect(required).toContain("changeSetId");
+    expect(required).toContain("editSessionId");
     expect(required).toContain("edits");
     const edits = (schema.properties as Record<string, { type?: string }>).edits;
     expect(edits.type).toBe("array");
   });
 
-  it("write_component requires slug + path + source", () => {
+  it("write_component requires editSessionId + path + source", () => {
     const schema = findMcpTool("write_component")!.descriptor.inputSchema;
     const required = ((schema.required as string[] | undefined) ?? []).sort();
-    expect(required).toEqual(["changeSetId", "path", "slug", "source"]);
+    expect(required).toEqual(["editSessionId", "path", "source"]);
   });
 
-  it("rename_component requires slug + fromPath + toPath", () => {
+  it("rename_component requires editSessionId + fromPath + toPath", () => {
     const schema = findMcpTool("rename_component")!.descriptor.inputSchema;
     const required = ((schema.required as string[] | undefined) ?? []).sort();
-    expect(required).toEqual(["changeSetId", "fromPath", "slug", "toPath"]);
+    expect(required).toEqual(["editSessionId", "fromPath", "toPath"]);
   });
 
   it("advertises the explicit preview-gated lifecycle", () => {
     expect(findMcpTool("begin_paywall_edit")!.descriptor.inputSchema.required as string[]).toEqual([
-      "slug",
+      "paywallId",
     ]);
     const previewRequired =
       (findMcpTool("get_paywall_preview")!.descriptor.inputSchema.required as string[]) ?? [];
-    expect(previewRequired.sort()).toEqual(["changeSetId", "slug"]);
+    expect(previewRequired.sort()).toEqual(["editSessionId"]);
     const finishRequired =
       (findMcpTool("finish_paywall_edit")!.descriptor.inputSchema.required as string[]) ?? [];
     expect(finishRequired).toEqual(
-      expect.arrayContaining(["slug", "changeSetId", "reviewedDocumentSignature", "verdict"]),
+      expect.arrayContaining(["editSessionId", "reviewedDocumentSignature", "verdict"]),
     );
   });
 
@@ -101,7 +112,7 @@ describe("MCP tool manifest", () => {
     const tool = findMcpTool("edit_paywall")!;
     const result = await Effect.runPromise(
       // Missing required `edits` — the dispatcher validates and folds the failure.
-      tool.dispatch({ projectId: "proj_1" }, { slug: "trial" }) as Effect.Effect<{
+      tool.dispatch({ projectId: "proj_1" }, { editSessionId: "pw_edit_1" }) as Effect.Effect<{
         output: string;
         isError: boolean;
       }>,
@@ -109,4 +120,16 @@ describe("MCP tool manifest", () => {
     expect(result.isError).toBe(true);
     expect(result.output).toContain("invalid arguments");
   });
+
+  it("rejects redundant paywallId arguments after a session is opened", async () => {
+    const tool = findMcpTool("get_paywall")!;
+    const result = await Effect.runPromise(
+      tool.dispatch(
+        { projectId: "proj_1" },
+        { editSessionId: "pw_edit_1", paywallId: "pw_1" },
+      ) as Effect.Effect<{ output: string; isError: boolean }>,
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("invalid arguments");
+  });
 });
diff --git a/apps/backend/src/mcp/tool-manifest.ts b/apps/backend/src/mcp/tool-manifest.ts
index 2ecf01bec..6ed4576a4 100644
--- a/apps/backend/src/mcp/tool-manifest.ts
+++ b/apps/backend/src/mcp/tool-manifest.ts
@@ -1,14 +1,14 @@
 /**
  * The MCP tool manifest: the JSON-Schema-described tools advertised over
  * `tools/list` and dispatched over `tools/call`, plus the mapping from a tool
- * name to the stateless workspace-tool core ({@link WorkspaceTools}).
+ * name to the shared workspace-tool core ({@link WorkspaceTools}).
  *
- * MCP is STATELESS and DOCUMENT-FIRST now — there is no fork, no `paywall.tsx`,
- * no whole-target overwrite. Composition is read as cleaned document JSON and
- * edited with mimic DOCUMENT ops (`edit_paywall`); code components are read and
- * managed by their canonical `components/<name>.tsx` path. Explicit change sets
- * wrap all mutations, subtree duplication is first-class, and finishing is
- * gated on inspecting a version-bound PNG preview.
+ * MCP is document-first and stateful at the editing layer — there is no fork, no
+ * `paywall.tsx`, and no whole-target overwrite. Composition is read as cleaned
+ * document JSON and edited over a leased Mimic participant connection; code
+ * components are managed by their canonical `components/<name>.tsx` path.
+ * Explicit edit sessions wrap scoped operations, subtree duplication is
+ * first-class, and finishing is gated on inspecting a version-bound PNG preview.
  *
  * **Schema alignment**: each validated tool's `inputSchema` is derived at module
  * load from the SAME zod schema its dispatcher parses with, via `z.toJSONSchema`
@@ -35,7 +35,7 @@ export interface McpToolDescriptor {
 
 /**
  * One MCP tool: its advertised descriptor + a dispatcher that validates the raw
- * arguments with the aligned zod schema and runs the stateless workspace-tool
+ * arguments with the aligned zod schema and runs the shared workspace-tool
  * core. `dispatch` never fails (`E = never`) — the core folds workspace failures
  * into a `{ isError: true }` result; an invalid-arguments failure is likewise
  * folded into a tool result (MCP maps a bad-input tool call to `isError`, not a
@@ -49,25 +49,18 @@ export interface McpTool {
   ) => Effect.Effect<WorkspaceTools.WorkspaceToolResult, never, WorkspaceTools.WorkspaceToolDeps>;
 }
 
-/** JSON Schema for a tool with no input (`list_paywalls`). */
-const EMPTY_INPUT_SCHEMA: JsonSchema = {
-  $schema: "https://json-schema.org/draft/2020-12/schema",
-  type: "object",
-  properties: {},
-  additionalProperties: false,
-};
-
 /**
  * MCP tool input schemas. The internal Pi agent consumes this same manifest,
  * and `documentEditSchema` remains the single validation vocabulary for every
  * server-executed document batch.
  */
 const mcpToolSchemas = {
-  begin_paywall_edit: z.object({
-    slug: z.string().describe("Slug of the paywall to edit."),
+  list_paywalls: z.strictObject({}),
+  begin_paywall_edit: z.strictObject({
+    paywallId: z.string().describe("Stable id of the paywall to edit (from list_paywalls)."),
   }),
-  get_paywall: z.object({
-    slug: z.string().describe("Slug of the paywall to read (from list_paywalls)."),
+  get_paywall: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     nodeId: z
       .string()
       .optional()
@@ -82,20 +75,17 @@ const mcpToolSchemas = {
         "Optional max depth from the root. Nodes past the limit render as stubs `{ id, type, name?, childCount }` you expand with a follow-up get_paywall(nodeId).",
       ),
   }),
-  get_components: z.object({
-    slug: z.string().describe("Slug of the paywall whose placeable components to list."),
+  get_components: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
   }),
-  read_component: z.object({
-    slug: z.string().describe("Slug of the paywall the component belongs to."),
+  read_component: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     path: z
       .string()
       .describe("Canonical document-relative path of a LOCAL component (`components/<name>.tsx`)."),
   }),
-  edit_paywall: z.object({
-    slug: z.string().describe("Slug of the paywall to edit."),
-    changeSetId: z
-      .string()
-      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+  edit_paywall: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     edits: z
       .array(documentEditSchema)
       .min(1)
@@ -103,21 +93,15 @@ const mcpToolSchemas = {
         "Ordered batch of document edits, applied ATOMICALLY (all-or-nothing) against the LIVE document. Returns minted ids for inserts, or per-edit structured errors naming the offending node/field/value. Setting any background/border/shadow (or path fill/stroke) style field automatically sets the group's `*Enabled` flag to true; set it to `false` explicitly to hide the group non-destructively.",
       ),
   }),
-  duplicate_subtree: z.object({
-    slug: z.string().describe("Slug of the paywall to edit."),
-    changeSetId: z
-      .string()
-      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+  duplicate_subtree: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     nodeId: z.string().describe("Id of the visual subtree to clone."),
     parentId: z.string().describe("Id of the destination parent."),
     index: z.number().int().optional().describe("Optional destination child index."),
     nextName: z.string().optional().describe("Optional display name for the cloned root."),
   }),
-  write_component: z.object({
-    slug: z.string().describe("Slug of the paywall to write the component into."),
-    changeSetId: z
-      .string()
-      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+  write_component: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     path: z
       .string()
       .describe(
@@ -125,11 +109,8 @@ const mcpToolSchemas = {
       ),
     source: z.string().describe("Full TSX component source."),
   }),
-  rename_component: z.object({
-    slug: z.string().describe("Slug of the paywall the component belongs to."),
-    changeSetId: z
-      .string()
-      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+  rename_component: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     fromPath: z.string().describe("Existing component path (`components/<name>.tsx`)."),
     toPath: z
       .string()
@@ -137,18 +118,12 @@ const mcpToolSchemas = {
         "New component path. Instances referencing the old path are re-pointed automatically.",
       ),
   }),
-  delete_component: z.object({
-    slug: z.string().describe("Slug of the paywall the component belongs to."),
-    changeSetId: z
-      .string()
-      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+  delete_component: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     path: z.string().describe("Component path to delete (`components/<name>.tsx`)."),
   }),
-  get_paywall_preview: z.object({
-    slug: z.string().describe("Slug of the paywall to render."),
-    changeSetId: z
-      .string()
-      .describe("Active change-set id returned by begin_paywall_edit for this paywall."),
+  get_paywall_preview: z.strictObject({
+    editSessionId: z.string().describe("Active edit session returned by begin_paywall_edit."),
     width: z
       .number()
       .int()
@@ -168,9 +143,8 @@ const mcpToolSchemas = {
       .optional()
       .describe("Device scale; defaults to 1."),
   }),
-  finish_paywall_edit: z.object({
-    slug: z.string().describe("Slug of the paywall whose edit session should finish."),
-    changeSetId: z.string().describe("Active change-set id to finish."),
+  finish_paywall_edit: z.strictObject({
+    editSessionId: z.string().describe("Active edit session to finish."),
     reviewedDocumentSignature: z
       .string()
       .describe("Exact documentSignature from the latest get_paywall_preview result."),
@@ -180,8 +154,8 @@ const mcpToolSchemas = {
       .default([])
       .describe("Any remaining visual issues. Must be empty to finish."),
   }),
-  revert_paywall_edit: z.object({
-    changeSetId: z.string().describe("Change-set id whose complete edits should be reverted."),
+  revert_paywall_edit: z.strictObject({
+    editSessionId: z.string().describe("Edit session whose edits should be reverted."),
   }),
 } as const;
 
@@ -226,18 +200,15 @@ const validatedTool = <Input>(
  * `delete_component` for code components).
  */
 export const MCP_TOOLS: ReadonlyArray<McpTool> = [
-  {
-    descriptor: {
-      name: "list_paywalls",
-      description:
-        "List every paywall in the project as a directory (slug + workspace path). Start here to discover what to read or edit; then use get_paywall to read a paywall's document and get_components to see what you can place.",
-      inputSchema: EMPTY_INPUT_SCHEMA,
-    },
-    dispatch: (scope) => WorkspaceTools.listPaywalls(scope),
-  },
+  validatedTool(
+    "list_paywalls",
+    "List every paywall in the project with its stable paywallId, display slug, and workspace path. Pass a paywallId to begin_paywall_edit, then use its editSessionId for every scoped tool.",
+    mcpToolSchemas.list_paywalls,
+    (scope) => WorkspaceTools.listPaywalls(scope),
+  ),
   validatedTool(
     "begin_paywall_edit",
-    "Begin an explicit edit session for one paywall. This captures a revert baseline and returns the changeSetId required by every mutation. Only one active change set is allowed per paywall; finish or revert it before starting another.",
+    "Begin an explicit edit session for one paywall. This opens an independent Mimic participant connection, captures its revert baseline, and returns the editSessionId required by every scoped tool. Multiple users and agents may edit the same paywall concurrently.",
     mcpToolSchemas.begin_paywall_edit,
     WorkspaceTools.beginPaywallEdit,
   ),
@@ -297,13 +268,13 @@ export const MCP_TOOLS: ReadonlyArray<McpTool> = [
   ),
   validatedTool(
     "finish_paywall_edit",
-    "Finish an active change set only after visual QA of its latest get_paywall_preview. Pass the exact document signature, a concise verdict, and an empty unresolvedIssues list. Stale or missing previews are rejected.",
+    "Finish an active edit session only after visual QA of its latest get_paywall_preview. Pass the exact document signature, a concise verdict, and an empty unresolvedIssues list. Stale or missing previews are rejected.",
     mcpToolSchemas.finish_paywall_edit,
     WorkspaceTools.finishPaywallEdit,
   ),
   validatedTool(
     "revert_paywall_edit",
-    "Revert all edits in an active change set by reconciling the live paywall to the baseline captured by begin_paywall_edit, then mark the set reverted.",
+    "Revert an edit session by reconciling the live paywall to the baseline captured by begin_paywall_edit. Revert is refused when doing so could overwrite another participant's multiplayer edits.",
     mcpToolSchemas.revert_paywall_edit,
     WorkspaceTools.revertPaywallEdit,
   ),
diff --git a/apps/backend/src/rpcs/agent-session-rpcs.test.ts b/apps/backend/src/rpcs/agent-session-rpcs.test.ts
index 4a73c5ddb..14de85f05 100644
--- a/apps/backend/src/rpcs/agent-session-rpcs.test.ts
+++ b/apps/backend/src/rpcs/agent-session-rpcs.test.ts
@@ -1,7 +1,7 @@
 import {
   AgentAttachmentService,
   AgentSessionIndexService,
-  PaywallEditChangeSetService,
+  PaywallEditSessionService,
 } from "@voidhash/core/services";
 import { AgentSessionRpcsDef, AuthMiddleware, AuthSession } from "@voidhash/rpc";
 import { Effect, Layer } from "effect";
@@ -22,8 +22,7 @@ const summary = {
   updatedAt: new Date(1),
 };
 
-const reverted: Array<{ changeSetId: string; sessionId: string }> = [];
-
+const reverted: Array<{ editSessionId: string; sessionId: string }> = [];
 const handlers = Layer.mergeAll(
   AgentSessionRpcsLive.pipe(
     Layer.provide(
@@ -45,13 +44,13 @@ const handlers = Layer.mergeAll(
       } as AgentAttachmentService["Service"]),
     ),
     Layer.provide(
-      Layer.succeed(PaywallEditChangeSetService, {
-        revertForAgentSession: (_projectId: string, changeSetId: string, sessionId: string) =>
+      Layer.succeed(PaywallEditSessionService, {
+        revertForAgentSession: (_projectId: string, editSessionId: string, sessionId: string) =>
           Effect.sync(() => {
-            reverted.push({ changeSetId, sessionId });
+            reverted.push({ editSessionId, sessionId });
             return { version: 2, commandCount: 1, paywallSlug: "trial" };
           }),
-      } as unknown as PaywallEditChangeSetService["Service"]),
+      } as unknown as PaywallEditSessionService["Service"]),
     ),
   ),
   Layer.succeed(
@@ -96,17 +95,17 @@ describe("AgentSessionRpcs", () => {
     });
   });
 
-  it("reverts a change set through its owning session scope", async () => {
+  it("reverts an edit session through its owning agent-session scope", async () => {
     reverted.length = 0;
     await Effect.runPromise(
       Effect.gen(function* () {
         const client = yield* RpcTest.makeClient(AgentSessionRpcsDef);
-        yield* client.RevertAgentSessionChangeSet({
+        yield* client.RevertAgentEditSession({
           sessionId: "agent_1",
-          changeSetId: "change_1",
+          editSessionId: "change_1",
         });
       }).pipe(Effect.provide(handlers), Effect.scoped),
     );
-    expect(reverted).toEqual([{ changeSetId: "change_1", sessionId: "agent_1" }]);
+    expect(reverted).toEqual([{ editSessionId: "change_1", sessionId: "agent_1" }]);
   });
 });
diff --git a/apps/backend/src/rpcs/agent-session-rpcs.ts b/apps/backend/src/rpcs/agent-session-rpcs.ts
index 408d90f81..9ad7afd0f 100644
--- a/apps/backend/src/rpcs/agent-session-rpcs.ts
+++ b/apps/backend/src/rpcs/agent-session-rpcs.ts
@@ -1,7 +1,7 @@
 import {
   AgentAttachmentService,
   AgentSessionIndexService,
-  PaywallEditChangeSetService,
+  PaywallEditSessionService,
 } from "@voidhash/core/services";
 import {
   AgentSessionRpcsDef,
@@ -44,7 +44,7 @@ export const AgentSessionRpcsLive = AgentSessionRpcsDef.toLayer(
   Effect.gen(function* AgentSessionRpcsLive() {
     const sessions = yield* AgentSessionIndexService;
     const attachments = yield* AgentAttachmentService;
-    const changeSets = yield* PaywallEditChangeSetService;
+    const editSessions = yield* PaywallEditSessionService;
     const mapSessionErrors = {
       AgentSessionForbiddenError: (error: { readonly message: string }) =>
         Effect.fail(new RpcActionForbiddenError({ message: error.message })),
@@ -72,10 +72,10 @@ export const AgentSessionRpcsLive = AgentSessionRpcsDef.toLayer(
               Effect.fail(new RpcAgentSessionNotFoundError({ sessionId: error.sessionId })),
           }),
         ),
-      RevertAgentSessionChangeSet: ({ sessionId, changeSetId }) =>
+      RevertAgentEditSession: ({ sessionId, editSessionId }) =>
         sessions.get({ sessionId }).pipe(
           Effect.flatMap((session) =>
-            changeSets.revertForAgentSession(session.projectId, changeSetId, session.id),
+            editSessions.revertForAgentSession(session.projectId, editSessionId, session.id),
           ),
           Effect.catch(mapRevertError),
           Effect.asVoid,
diff --git a/apps/backend/src/rpcs/paywall-rpcs.ts b/apps/backend/src/rpcs/paywall-rpcs.ts
index 8b5dc8e17..0d782266a 100644
--- a/apps/backend/src/rpcs/paywall-rpcs.ts
+++ b/apps/backend/src/rpcs/paywall-rpcs.ts
@@ -1,4 +1,9 @@
-import { MimicHost, PaywallReleaseService, PaywallService } from "@voidhash/core/services";
+import {
+  MimicHost,
+  PaywallReleaseService,
+  PaywallService,
+  PaywallThumbnailService,
+} from "@voidhash/core/services";
 import {
   PaywallRpcsDef,
   RpcActionForbiddenError,
@@ -14,9 +19,40 @@ export const PaywallRpcsLive = PaywallRpcsDef.toLayer(
   Effect.gen(function* () {
     const paywallService = yield* PaywallService;
     const releaseService = yield* PaywallReleaseService;
+    const thumbnailService = yield* PaywallThumbnailService;
     const mimicHost = yield* MimicHost;
 
     return {
+      BackfillPaywallThumbnails: ({ projectId }) =>
+        Effect.gen(function* () {
+          const projectPaywalls = yield* paywallService.getPaywalls(projectId, true);
+          const missing = projectPaywalls.filter((paywall) => paywall.thumbnailUrl === null);
+          const results = yield* Effect.forEach(
+            missing,
+            (paywall) =>
+              thumbnailService.renderCurrent(paywall.id).pipe(
+                Effect.as(true),
+                Effect.catchTag("PaywallThumbnailServiceError", (error) =>
+                  Effect.logError("Paywall thumbnail backfill failed", {
+                    paywallId: paywall.id,
+                    message: error.message,
+                  }).pipe(Effect.as(false)),
+                ),
+              ),
+            { concurrency: 1 },
+          );
+          return {
+            attempted: missing.length,
+            rendered: results.filter(Boolean).length,
+          };
+        }).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: (error) =>
+              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
+            PaywallServiceError: (error) =>
+              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
+          }),
+        ),
       CreatePaywall: (input) =>
         paywallService.createPaywall(input).pipe(
           Effect.catchTags({
diff --git a/apps/backend/src/testing/rpc-smoke-cases.ts b/apps/backend/src/testing/rpc-smoke-cases.ts
index 3bf7e101a..bf93d43ea 100644
--- a/apps/backend/src/testing/rpc-smoke-cases.ts
+++ b/apps/backend/src/testing/rpc-smoke-cases.ts
@@ -555,6 +555,12 @@ export const rpcSmokeCases = [
     role: "admin",
     tag: "CreatePaywall",
   },
+  {
+    expected: success,
+    payload: ({ ids }) => ({ projectId: ids.projectId }),
+    role: "admin",
+    tag: "BackfillPaywallThumbnails",
+  },
   {
     expected: success,
     payload: ({ ids }) => ({ includeArchived: true, projectId: ids.projectId }),
@@ -781,7 +787,7 @@ const knownMissingRpcSmokeTags = new Set([
   "ListAgentSessions",
   "GetAgentSession",
   "DeleteAgentSession",
-  "RevertAgentSessionChangeSet",
+  "RevertAgentEditSession",
   "UploadAgentAttachment",
   "ListExperiments",
   "GetExperiment",
diff --git a/apps/mimic-db/src/api/handlers/documents.ts b/apps/mimic-db/src/api/handlers/documents.ts
index 417d0fc40..02b749370 100644
--- a/apps/mimic-db/src/api/handlers/documents.ts
+++ b/apps/mimic-db/src/api/handlers/documents.ts
@@ -44,6 +44,62 @@ export const DocumentsHandlersLive = DocumentsRpcs.toLayer(
             transaction as TransactionEnvelope,
           );
         }),
+      OpenDocumentConnection: ({ collectionId, documentId, connectionId, presence, leaseMs }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          const snapshot = yield* host.attachConnection(
+            collectionId,
+            documentId,
+            connectionId,
+            "write",
+            user.userId,
+            presence as never,
+            leaseMs,
+          );
+          return { id: documentId, collectionId, value: snapshot.value, version: snapshot.version };
+        }),
+      GetConnectedDocument: ({ collectionId, documentId, connectionId, leaseMs }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          return yield* host.getConnectionDocument(collectionId, documentId, connectionId, leaseMs);
+        }),
+      HeartbeatDocumentConnection: ({ collectionId, documentId, connectionId, leaseMs }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          yield* host.heartbeatConnection(collectionId, documentId, connectionId, leaseMs);
+        }),
+      CloseDocumentConnection: ({ collectionId, documentId, connectionId }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          yield* host.detachConnection(collectionId, documentId, connectionId);
+        }),
+      SubmitConnectedTransaction: ({
+        collectionId,
+        documentId,
+        connectionId,
+        transaction,
+        leaseMs,
+      }) =>
+        Effect.gen(function* () {
+          const user = yield* CurrentUser;
+          const databaseId = yield* host.databaseIdForCollection(collectionId);
+          yield* host.ensureDatabasePermission(user.userId, user.isSuperuser, databaseId, "write");
+          return yield* host.submitConnectionTransaction(
+            collectionId,
+            documentId,
+            connectionId,
+            transaction as TransactionEnvelope,
+            leaseMs,
+          );
+        }),
       DeleteDocument: ({ collectionId, documentId }) =>
         Effect.gen(function* () {
           const user = yield* CurrentUser;
diff --git a/apps/mimic-db/src/app/hostService.ts b/apps/mimic-db/src/app/hostService.ts
index 56431c2c7..8b75c3444 100644
--- a/apps/mimic-db/src/app/hostService.ts
+++ b/apps/mimic-db/src/app/hostService.ts
@@ -132,6 +132,8 @@ export interface HostService {
     connectionId: string,
     permission: DocumentPermission,
     userId?: string,
+    presence?: Value,
+    leaseMs?: number,
   ) => Effect.Effect<
     {
       readonly value: Value;
@@ -144,7 +146,21 @@ export interface HostService {
     collectionId: string,
     documentId: string,
     connectionId: string,
+    leaseMs?: number,
   ) => Effect.Effect<void, any>;
+  readonly getConnectionDocument: (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+    leaseMs?: number,
+  ) => Effect.Effect<DocumentSnapshotResponse, any>;
+  readonly submitConnectionTransaction: (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+    transaction: TransactionEnvelope,
+    leaseMs?: number,
+  ) => Effect.Effect<SubmitTransactionResponse, any>;
   readonly detachConnection: (
     collectionId: string,
     documentId: string,
diff --git a/apps/mimic-db/src/core/local-host-service.ts b/apps/mimic-db/src/core/local-host-service.ts
index 3538dfe8b..8258880e9 100644
--- a/apps/mimic-db/src/core/local-host-service.ts
+++ b/apps/mimic-db/src/core/local-host-service.ts
@@ -1,9 +1,23 @@
-import { DurableEntityHost, makeDurableEntityAddress } from "@voidhash/platform/DurableEntity";
+import {
+  type DurableEntityContext,
+  DurableEntityHost,
+  makeDurableEntityAddress,
+} from "@voidhash/platform/DurableEntity";
 import { Effect, Layer } from "effect";
 import type { MigrationRegistry } from "@voidhash/mimic-server/migrate";
+import { NotFoundError } from "@voidhash/mimic-server/rpc";
 
 import { HostServiceTag, type HostService, type PresenceEntry } from "../app/hostService.ts";
 import { getConfig, type MimicConfig } from "../config.ts";
+import type { TransactionEnvelope } from "../document/transaction.ts";
+import type { SessionAttachment } from "../ws/document-session.ts";
+import { IDLE_DIRTY_SEQ_KEY } from "../ws/idle-notify.ts";
+import {
+  presenceRemoveMessage,
+  presenceUpdateMessage,
+  transactionMessage,
+} from "../ws/messages.ts";
+import { encodeServerMessage, type ServerMessage } from "../ws/protocol.ts";
 import { makeControlEngine, type ControlEngineApi } from "./control-engine.ts";
 import { makeDocumentEngine, type DocumentEngineApi } from "./document-engine.ts";
 import {
@@ -25,6 +39,11 @@ import { randomId } from "./ids.ts";
 const docKeyOf = (collectionId: string, documentId: string): string =>
   `${collectionId}:${documentId}`;
 
+interface StoredPresence {
+  readonly entry: PresenceEntry;
+  readonly expiresAt?: number;
+}
+
 export interface LocalHostServiceDeps {
   readonly control: ControlEngineApi;
   readonly entities: DurableEntityHost["Service"];
@@ -42,7 +61,7 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
   const { control, entities, migrations, documentStores, config } = deps;
   const schema = makeControlStoreSchemaProvider(control.store);
   const documents = new Map<string, DocumentEngineApi>();
-  const presence = new Map<string, Map<string, PresenceEntry>>();
+  const presence = new Map<string, Map<string, StoredPresence>>();
 
   const getDoc = (collectionId: string, documentId: string): DocumentEngineApi => {
     const key = docKeyOf(collectionId, documentId);
@@ -59,7 +78,7 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
     return engine;
   };
 
-  const presenceOf = (collectionId: string, documentId: string): Map<string, PresenceEntry> => {
+  const presenceOf = (collectionId: string, documentId: string): Map<string, StoredPresence> => {
     const key = docKeyOf(collectionId, documentId);
     let entries = presence.get(key);
     if (!entries) {
@@ -72,7 +91,13 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
   const presenceSnapshot = (
     collectionId: string,
     documentId: string,
-  ): Record<string, PresenceEntry> => Object.fromEntries(presenceOf(collectionId, documentId));
+  ): Record<string, PresenceEntry> =>
+    Object.fromEntries(
+      [...presenceOf(collectionId, documentId)].map(([connectionId, stored]) => [
+        connectionId,
+        stored.entry,
+      ]),
+    );
 
   const runControl = <A, E, R>(operation: () => Effect.Effect<A, E, R>): Effect.Effect<A, E, R> =>
     entities.run(makeDurableEntityAddress("mimic-control", "default"), () =>
@@ -82,13 +107,87 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
   const runDocument = <A, E, R>(
     collectionId: string,
     documentId: string,
-    operation: () => Effect.Effect<A, E, R>,
+    operation: (entity: DurableEntityContext) => Effect.Effect<A, E, R>,
   ): Effect.Effect<A, E, R> =>
     entities.run(
       makeDurableEntityAddress("mimic-document", docKeyOf(collectionId, documentId)),
-      () => Effect.suspend(operation),
+      (entity) => Effect.suspend(() => operation(entity)),
     );
 
+  const connectionNotFound = (connectionId: string) =>
+    new NotFoundError({ code: "not_found", message: `Connection not found: ${connectionId}` });
+
+  const broadcast = (entity: DurableEntityContext, message: ServerMessage): Effect.Effect<void> =>
+    Effect.gen(function* () {
+      const sessions = yield* entity.sessions.list;
+      yield* Effect.forEach(
+        sessions,
+        (session) =>
+          Effect.gen(function* () {
+            const attachment = (yield* session.getAttachment) as SessionAttachment | undefined;
+            if (attachment?.authenticated !== true) return;
+            yield* session.send(encodeServerMessage(message));
+          }),
+        { discard: true },
+      );
+    });
+
+  const scheduleAlarmAt = (entity: DurableEntityContext, scheduledTime: number) =>
+    Effect.gen(function* () {
+      const current = yield* entity.alarm.get;
+      if (current === undefined || scheduledTime < current) {
+        yield* entity.alarm.set(scheduledTime);
+      }
+    });
+
+  const scheduleNextPresenceExpiry = (
+    entries: Map<string, StoredPresence>,
+    entity: DurableEntityContext,
+  ) => {
+    const expirations = [...entries.values()].flatMap(({ expiresAt }) =>
+      expiresAt === undefined ? [] : [expiresAt],
+    );
+    return expirations.length === 0
+      ? Effect.void
+      : scheduleAlarmAt(entity, Math.min(...expirations));
+  };
+
+  const prunePresence = (
+    collectionId: string,
+    documentId: string,
+    entity: DurableEntityContext,
+  ): Effect.Effect<void> =>
+    Effect.gen(function* () {
+      const entries = presenceOf(collectionId, documentId);
+      const now = Date.now();
+      for (const [connectionId, stored] of entries) {
+        if (stored.expiresAt === undefined || stored.expiresAt > now) continue;
+        entries.delete(connectionId);
+        yield* broadcast(entity, presenceRemoveMessage(connectionId));
+      }
+      yield* scheduleNextPresenceExpiry(entries, entity);
+    });
+
+  const requireHeadlessConnection = (
+    collectionId: string,
+    documentId: string,
+    connectionId: string,
+    leaseMs: number,
+    entity: DurableEntityContext,
+  ): Effect.Effect<StoredPresence, NotFoundError> =>
+    Effect.gen(function* () {
+      yield* prunePresence(collectionId, documentId, entity);
+      const entries = presenceOf(collectionId, documentId);
+      const current = entries.get(connectionId);
+      if (current?.expiresAt === undefined) {
+        return yield* Effect.fail(connectionNotFound(connectionId));
+      }
+      const next = { ...current, expiresAt: Date.now() + leaseMs };
+      entries.set(connectionId, next);
+      yield* scheduleAlarmAt(entity, next.expiresAt);
+      return next;
+    });
+
   return {
     authenticateBasic: (username, password) =>
       runControl(() => control.authenticateBasic(username, password)),
@@ -212,11 +311,39 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
         }),
       ),
 
-    attachConnection: (collectionId, documentId) =>
-      runDocument(collectionId, documentId, () =>
+    attachConnection: (
+      collectionId,
+      documentId,
+      connectionId,
+      _permission,
+      userId,
+      connectionPresence,
+      leaseMs = config.presenceTtlMs,
+    ) =>
+      runDocument(collectionId, documentId, (entity) =>
         Effect.gen(function* () {
           yield* runControl(() => control.findDocument(collectionId, documentId));
+          if (connectionPresence === undefined) {
+            return yield* Effect.fail(
+              new NotFoundError({
+                code: "not_found",
+                message: "Headless connections require presence data",
+              }),
+            );
+          }
+          yield* prunePresence(collectionId, documentId, entity);
           const loaded = yield* getDoc(collectionId, documentId).load();
+          const entry: PresenceEntry = {
+            data: connectionPresence,
+            ...(userId === undefined ? {} : { userId }),
+          };
+          const stored = {
+            entry,
+            expiresAt: Date.now() + leaseMs,
+          };
+          presenceOf(collectionId, documentId).set(connectionId, stored);
+          yield* scheduleAlarmAt(entity, stored.expiresAt);
+          yield* broadcast(entity, presenceUpdateMessage(connectionId, entry.data, entry.userId));
           return {
             value: loaded.value,
             version: loaded.version,
@@ -225,20 +352,77 @@ export const makeLocalHostService = (deps: LocalHostServiceDeps): HostService =>
         }),
       ),
 
-    heartbeatConnection: (collectionId, documentId) =>
-      runDocument(collectionId, documentId, () => Effect.void),
+    heartbeatConnection: (collectionId, documentId, connectionId, leaseMs = config.presenceTtlMs) =>
+      runDocument(collectionId, documentId, (entity) =>
+        requireHeadlessConnection(collectionId, documentId, connectionId, leaseMs, entity).pipe(
+          Effect.asVoid,
+        ),
+      ),
+    getConnectionDocument: (
+      collectionId,
+      documentId,
+      connectionId,
+      leaseMs = config.presenceTtlMs,
+    ) =>
+      runDocument(collectionId, documentId, (entity) =>
+        Effect.gen(function* () {
+          yield* requireHeadlessConnection(collectionId, documentId, connectionId, leaseMs, entity);
+          const loaded = yield* getDoc(collectionId, documentId).load();
+          return { id: documentId, collectionId, value: loaded.value, version: loaded.version };
+        }),
+      ),
+    submitConnectionTransaction: (
+      collectionId,
+      documentId,
+      connectionId,
+      transaction,
+      leaseMs = config.presenceTtlMs,
+    ) =>
+      runDocument(collectionId, documentId, (entity) =>
+        Effect.gen(function* () {
+          const connection = yield* requireHeadlessConnection(
+            collectionId,
+            documentId,
+            connectionId,
+            leaseMs,
+            entity,
+          );
+          const envelope: TransactionEnvelope = {
+            ...transaction,
+            actor: {
+              connectionId,
+              ...(connection.entry.userId === undefined ? {} : { userId: connection.entry.userId }),
+            },
+          };
+          const result = yield* getDoc(collectionId, documentId).submit(envelope);
+          if (result.accepted) {
+            yield* entity.keyValue.put(IDLE_DIRTY_SEQ_KEY, result.version - 1);
+            yield* broadcast(entity, transactionMessage(envelope, result.version));
+          }
+          return result;
+        }),
+      ),
     detachConnection: (collectionId, documentId, connectionId) =>
-      runDocument(collectionId, documentId, () =>
-        Effect.sync(() => void presenceOf(collectionId, documentId).delete(connectionId)),
+      runDocument(collectionId, documentId, (entity) =>
+        Effect.gen(function* () {
+          const removed = presenceOf(collectionId, documentId).delete(connectionId);
+          if (removed) yield* broadcast(entity, presenceRemoveMessage(connectionId));
+          if (removed && presenceOf(collectionId, documentId).size === 0) {
+            yield* scheduleAlarmAt(entity, Date.now() + config.idleNotifyDebounceMs);
+          }
+        }),
       ),
 
     getPresenceSnapshot: (collectionId, documentId) =>
-      runDocument(collectionId, documentId, () =>
-        Effect.sync(() => ({ presences: presenceSnapshot(collectionId, documentId) })),
+      runDocument(collectionId, documentId, (entity) =>
+        Effect.gen(function* () {
+          yield* prunePresence(collectionId, documentId, entity);
+          return { presences: presenceSnapshot(collectionId, documentId) };
+        }),
       ),
     setPresence: (collectionId, documentId, connectionId, entry) =>
       runDocument(collectionId, documentId, () =>
-        Effect.sync(() => void presenceOf(collectionId, documentId).set(connectionId, entry)),
+        Effect.sync(() => void presenceOf(collectionId, documentId).set(connectionId, { entry })),
       ),
     removePresence: (collectionId, documentId, connectionId) =>
       runDocument(collectionId, documentId, () =>
diff --git a/apps/mimic-db/src/core/pg-store.ts b/apps/mimic-db/src/core/pg-store.ts
index 5bd5808cf..7169c7194 100644
--- a/apps/mimic-db/src/core/pg-store.ts
+++ b/apps/mimic-db/src/core/pg-store.ts
@@ -14,6 +14,20 @@ export interface PgDocumentConfig {
   readonly password: Redacted.Redacted<string>;
 }
 
+/** Plain connection input accepted at package boundaries before secret redaction. */
+export interface PgDocumentConfigInput extends Omit<PgDocumentConfig, "password"> {
+  readonly password: string;
+}
+
+/**
+ * Builds document-store configuration while redacting the password in the same
+ * Effect module instance that later consumes it.
+ */
+export const makePgDocumentConfig = (config: PgDocumentConfigInput): PgDocumentConfig => ({
+  ...config,
+  password: Redacted.make(config.password),
+});
+
 const clientLayer = (config: PgDocumentConfig) =>
   PgClient.layer({
     host: config.host,
diff --git a/apps/mimic-db/src/worker/durable-host-service.ts b/apps/mimic-db/src/worker/durable-host-service.ts
index ef9598449..711106900 100644
--- a/apps/mimic-db/src/worker/durable-host-service.ts
+++ b/apps/mimic-db/src/worker/durable-host-service.ts
@@ -8,6 +8,7 @@ import type { DocumentSnapshotResponse } from "../document/snapshot.ts";
 import type { SubmitTransactionResponse, TransactionEnvelope } from "../document/transaction.ts";
 import { makeControlEngine } from "../core/control-engine.ts";
 import type { ControlStoreApi } from "../core/store.ts";
+import { getConfig } from "../config.ts";
 
 /**
  * The subset of a document-entity stub the HTTP entry point calls. Remote
@@ -28,6 +29,33 @@ export interface DocumentStub {
   readonly submitRpc: (
     envelope: TransactionEnvelope,
   ) => Effect.Effect<SubmitTransactionResponse | { notFound: true }, any>;
+  readonly openConnection: (
+    connectionId: string,
+    entry: { readonly data: Value; readonly userId?: string },
+    leaseMs: number,
+  ) => Effect.Effect<
+    | { readonly found: true; readonly value: Value; readonly version: number }
+    | { readonly notFound: true },
+    any
+  >;
+  readonly getConnectionSnapshot: (
+    connectionId: string,
+    leaseMs: number,
+  ) => Effect.Effect<
+    | { readonly found: true; readonly value: Value; readonly version: number }
+    | { readonly notFound: true },
+    any
+  >;
+  readonly heartbeatConnection: (
+    connectionId: string,
+    leaseMs: number,
+  ) => Effect.Effect<boolean, any>;
+  readonly closeConnection: (connectionId: string) => Effect.Effect<boolean, any>;
+  readonly submitConnection: (
+    connectionId: string,
+    leaseMs: number,
+    envelope: TransactionEnvelope,
+  ) => Effect.Effect<SubmitTransactionResponse | { readonly notFound: true }, any>;
   readonly remove: () => Effect.Effect<void, any>;
 }
 
@@ -50,13 +78,16 @@ const isSubmitResponse = (
  * `HostService` over remote durable entity stubs. Control-plane logic runs in the
  * entry point over a control-entity stub; document operations are delegated to
  * per-document entity stubs, which serialize them and migrate on load. The
- * WebSocket realtime path lives in the document entity, so the presence and
- * connection methods here are no-ops on the RPC surface.
+ * WebSocket realtime path and leased headless connections both live in the
+ * document entity, so accepted transactions and presence changes share one
+ * serialized broadcast boundary.
  */
 export const makeDurableHostService = (deps: DurableHostServiceDeps): HostService => {
   const { docStub } = deps;
   const control = makeControlEngine(deps.controlStore, deps.migrations);
 
+  const connectionLeaseMs = (leaseMs?: number) => leaseMs ?? getConfig().presenceTtlMs;
+
   return {
     authenticateBasic: control.authenticateBasic,
     authenticateDocumentToken: control.authenticateDocumentToken,
@@ -162,19 +193,66 @@ export const makeDurableHostService = (deps: DurableHostServiceDeps): HostServic
         return result;
       }),
 
-    attachConnection: (collectionId, documentId) =>
+    attachConnection: (
+      collectionId,
+      documentId,
+      connectionId,
+      _permission,
+      userId,
+      presence,
+      leaseMs,
+    ) =>
       Effect.gen(function* () {
         yield* control.findDocument(collectionId, documentId);
-        const snapshot = yield* docStub(collectionId, documentId).getSnapshot();
-        if (!snapshot.found) {
+        if (presence === undefined) {
+          return yield* Effect.fail(notFound("Headless connections require presence data"));
+        }
+        const snapshot = yield* docStub(collectionId, documentId).openConnection(
+          connectionId,
+          { data: presence, ...(userId === undefined ? {} : { userId }) },
+          connectionLeaseMs(leaseMs),
+        );
+        if (!("found" in snapshot)) {
           return yield* Effect.fail(notFound(`Document not found: ${documentId}`));
         }
         return { value: snapshot.value, version: snapshot.version, presences: {} };
       }),
-
-    // Realtime presence and heartbeat live on the document entity's WebSocket path.
-    heartbeatConnection: () => Effect.void,
-    detachConnection: () => Effect.void,
+    heartbeatConnection: (collectionId, documentId, connectionId, leaseMs) =>
+      docStub(collectionId, documentId)
+        .heartbeatConnection(connectionId, connectionLeaseMs(leaseMs))
+        .pipe(
+          Effect.flatMap((found) =>
+            found ? Effect.void : Effect.fail(notFound(`Connection not found: ${connectionId}`)),
+          ),
+        ),
+    getConnectionDocument: (collectionId, documentId, connectionId, leaseMs) =>
+      docStub(collectionId, documentId)
+        .getConnectionSnapshot(connectionId, connectionLeaseMs(leaseMs))
+        .pipe(
+          Effect.flatMap((snapshot) =>
+            "found" in snapshot
+              ? Effect.succeed({
+                  id: documentId,
+                  collectionId,
+                  value: snapshot.value,
+                  version: snapshot.version,
+                })
+              : Effect.fail(notFound(`Connection not found: ${connectionId}`)),
+          ),
+        ),
+    submitConnectionTransaction: (collectionId, documentId, connectionId, transaction, leaseMs) =>
+      docStub(collectionId, documentId)
+        .submitConnection(connectionId, connectionLeaseMs(leaseMs), transaction)
+        .pipe(
+          Effect.flatMap((result) =>
+            "notFound" in result
+              ? Effect.fail(notFound(`Connection not found: ${connectionId}`))
+              : Effect.succeed(result),
+          ),
+        ),
+    detachConnection: (collectionId, documentId, connectionId) =>
+      docStub(collectionId, documentId).closeConnection(connectionId).pipe(Effect.asVoid),
+    // Browser WebSocket presence is held directly by the document object.
     getPresenceSnapshot: () => Effect.succeed({ presences: {} }),
     setPresence: () => Effect.void,
     removePresence: () => Effect.void,
diff --git a/apps/mimic-db/src/ws/document-session.ts b/apps/mimic-db/src/ws/document-session.ts
index 7436807b9..62e01f857 100644
--- a/apps/mimic-db/src/ws/document-session.ts
+++ b/apps/mimic-db/src/ws/document-session.ts
@@ -47,13 +47,21 @@ export interface LoadedDocumentSnapshot {
   readonly version: number;
 }
 
+/** Presence storage shared by WebSocket and headless document participants. */
+export interface DocumentPresenceStore {
+  readonly snapshot: () => Effect.Effect<Record<string, PresenceEntry>, unknown>;
+  readonly set: (connectionId: string, entry: PresenceEntry) => Effect.Effect<void, unknown>;
+  readonly remove: (connectionId: string) => Effect.Effect<boolean, unknown>;
+  readonly prune: () => Effect.Effect<void, unknown>;
+}
+
 /**
  * Everything the WebSocket message/close handlers need from their host, so the
  * session protocol can be exercised independently of a platform runtime.
  */
 export interface DocumentSessionContext<TSocket> {
   readonly registry: SessionRegistry<TSocket>;
-  readonly presence: Map<string, PresenceEntry>;
+  readonly presence: DocumentPresenceStore;
   readonly getAttachment: (socket: TSocket) => SessionAttachment | null;
   readonly setAttachment: (socket: TSocket, attachment: SessionAttachment) => void;
   readonly send: (socket: TSocket, message: ServerMessage) => Effect.Effect<void>;
@@ -120,6 +128,7 @@ export const handleDocumentSocketMessage = <TSocket>(
   raw: string | Uint8Array,
 ): Effect.Effect<void> =>
   Effect.gen(function* () {
+    yield* ctx.presence.prune();
     const attachment = ctx.getAttachment(socket);
     if (!attachment) return;
     const message = yield* parseClientMessage(raw);
@@ -158,7 +167,7 @@ export const handleDocumentSocketMessage = <TSocket>(
         yield* ctx.send(socket, snapshotMessage(loaded.success.value, loaded.success.version));
         yield* ctx.send(
           socket,
-          presenceSnapshotMessage(next.connectionId, Object.fromEntries(ctx.presence)),
+          presenceSnapshotMessage(next.connectionId, yield* ctx.presence.snapshot()),
         );
         return;
       }
@@ -175,7 +184,7 @@ export const handleDocumentSocketMessage = <TSocket>(
       }
       case "presence_set": {
         if (!attachment.authenticated || attachment.permission !== "write") return;
-        ctx.presence.set(attachment.connectionId, {
+        yield* ctx.presence.set(attachment.connectionId, {
           data: message.data,
           userId: attachment.tokenId,
         });
@@ -187,7 +196,7 @@ export const handleDocumentSocketMessage = <TSocket>(
       }
       case "presence_clear": {
         if (!attachment.authenticated) return;
-        ctx.presence.delete(attachment.connectionId);
+        yield* ctx.presence.remove(attachment.connectionId);
         yield* broadcastToAuthenticated(ctx, presenceRemoveMessage(attachment.connectionId));
         return;
       }
@@ -233,12 +242,12 @@ export const handleDocumentSocketMessage = <TSocket>(
 export const handleDocumentSocketClose = <TSocket>(
   ctx: DocumentSessionContext<TSocket>,
   socket: TSocket,
-): Effect.Effect<void> =>
+): Effect.Effect<void, unknown> =>
   Effect.gen(function* () {
     const attachment = ctx.getAttachment(socket);
     if (!attachment) return;
     ctx.registry.remove(attachment.connectionId);
-    const hadPresence = ctx.presence.delete(attachment.connectionId);
+    const hadPresence = yield* ctx.presence.remove(attachment.connectionId);
     if (hadPresence) {
       yield* broadcastToAuthenticated(ctx, presenceRemoveMessage(attachment.connectionId));
     }
diff --git a/apps/mimic-db/tests/helpers.ts b/apps/mimic-db/tests/helpers.ts
index dc28affe8..c394e87f1 100644
--- a/apps/mimic-db/tests/helpers.ts
+++ b/apps/mimic-db/tests/helpers.ts
@@ -1,4 +1,5 @@
 import { Effect } from "effect";
+import type { Value } from "@voidhash/mimic-core";
 import type { MigrationRegistry } from "@voidhash/mimic-server/migrate";
 
 import type { HostService } from "../src/app/hostService.ts";
@@ -90,6 +91,9 @@ export const titleCountSchema = {
   },
 };
 
-export const objectValue = (fields: Record<string, unknown>) => ({ kind: "object", fields });
-export const stringValue = (value: string) => ({ kind: "string", value });
-export const numberValue = (value: number) => ({ kind: "number", value });
+export const objectValue = (fields: Record<string, Value>) => ({
+  kind: "object" as const,
+  fields,
+});
+export const stringValue = (value: string) => ({ kind: "string" as const, value });
+export const numberValue = (value: number) => ({ kind: "number" as const, value });
diff --git a/apps/mimic-db/tests/integration/host-flow.test.ts b/apps/mimic-db/tests/integration/host-flow.test.ts
index b8fcfa17f..5168f9e77 100644
--- a/apps/mimic-db/tests/integration/host-flow.test.ts
+++ b/apps/mimic-db/tests/integration/host-flow.test.ts
@@ -156,6 +156,50 @@ describe("mimic-db host flow (durable-entity engine, in-memory)", () => {
       }),
     ));
 
+  it("opens, edits through, and closes a headless document connection", () =>
+    runHost(
+      Effect.gen(function* () {
+        const host = yield* HostServiceTag;
+        const db = yield* host.createDatabase("voidhash", "test");
+        const collection = yield* host.createCollection(db.id, "paywalls", titleSchema);
+        yield* host.createDocument(
+          collection.id,
+          "doc-1",
+          objectValue({ title: stringValue("Hello") }),
+        );
+
+        const opened = yield* host.attachConnection(
+          collection.id,
+          "doc-1",
+          "edit-1",
+          "write",
+          "agent-1",
+          objectValue({ name: stringValue("Agent") }),
+        );
+        expect(opened.version).toBe(1);
+        expect(opened.presences["edit-1"]?.userId).toBe("agent-1");
+
+        const result = yield* host.submitConnectionTransaction(collection.id, "doc-1", "edit-1", {
+          id: "tx-connected",
+          baseVersion: 1,
+          commands: [
+            { kind: "object.set", path: [], key: "title", value: stringValue("Updated") } as any,
+          ],
+        });
+        expect(result).toMatchObject({ accepted: true, version: 2 });
+
+        const connected = yield* host.getConnectionDocument(collection.id, "doc-1", "edit-1");
+        expect((connected.value as any).fields.title.value).toBe("Updated");
+
+        yield* host.detachConnection(collection.id, "doc-1", "edit-1");
+        expect((yield* host.getPresenceSnapshot(collection.id, "doc-1")).presences).toEqual({});
+        const afterClose = yield* Effect.result(
+          host.getConnectionDocument(collection.id, "doc-1", "edit-1"),
+        );
+        expect(Result.isFailure(afterClose)).toBe(true);
+      }),
+    ));
+
   it("rejects a transaction with a stale base version", () =>
     runHost(
       Effect.gen(function* () {
diff --git a/apps/mimic-db/tests/unit/document-session.test.ts b/apps/mimic-db/tests/unit/document-session.test.ts
index d218078fe..0610e11dc 100644
--- a/apps/mimic-db/tests/unit/document-session.test.ts
+++ b/apps/mimic-db/tests/unit/document-session.test.ts
@@ -64,7 +64,12 @@ const makeHarness = (options?: {
   const presence = new Map<string, PresenceEntry>();
   const ctx: DocumentSessionContext<FakeSocket> = {
     registry,
-    presence,
+    presence: {
+      snapshot: () => Effect.sync(() => Object.fromEntries(presence)),
+      set: (connectionId, entry) => Effect.sync(() => void presence.set(connectionId, entry)),
+      remove: (connectionId) => Effect.sync(() => presence.delete(connectionId)),
+      prune: () => Effect.void,
+    },
     getAttachment: (socket) => socket.attachment,
     setAttachment: (socket, attachment) => {
       socket.attachment = attachment;
@@ -278,7 +283,10 @@ describe("document session protocol", () => {
     const dyingCtx: DocumentSessionContext<FakeSocket> = {
       ...harness.ctx,
       onLastAuthenticatedClose: () =>
-        isolateSessionHook(Effect.die(new Error("storage unavailable")), "onLastAuthenticatedClose"),
+        isolateSessionHook(
+          Effect.die(new Error("storage unavailable")),
+          "onLastAuthenticatedClose",
+        ),
     };
     const leaver = await harness.authenticateSocket("leaver");
     await Effect.runPromise(
diff --git a/apps/www/src/features/studio/ai/agent-ui.test.ts b/apps/www/src/features/studio/ai/agent-ui.test.ts
index 6d95f2eb1..bdd3e42ed 100644
--- a/apps/www/src/features/studio/ai/agent-ui.test.ts
+++ b/apps/www/src/features/studio/ai/agent-ui.test.ts
@@ -60,7 +60,7 @@ describe("agent UI event fold", () => {
           toolCallId: "call-1",
           toolName: "edit_paywall",
           content: [{ type: "text", text: "Updated" }],
-          details: { changeSetId: "change-1" },
+          details: { editSessionId: "change-1" },
           isError: false,
           timestamp: 21,
         },
@@ -75,7 +75,7 @@ describe("agent UI event fold", () => {
         toolName: "edit_paywall",
         state: "output-available",
         output: "Updated",
-        details: { changeSetId: "change-1" },
+        details: { editSessionId: "change-1" },
       }),
     );
   });
@@ -146,7 +146,7 @@ describe("agent UI event fold", () => {
     ]);
   });
 
-  it("preserves change-set details when a workspace tool reports an expected error", () => {
+  it("preserves edit-session details when a workspace tool reports an expected error", () => {
     const assistant = {
       role: "assistant" as const,
       content: [
@@ -183,7 +183,7 @@ describe("agent UI event fold", () => {
           toolName: "edit_paywall",
           result: {
             content: [{ type: "text", text: "The edit conflicted." }],
-            details: { changeSetId: "change-1" },
+            details: { editSessionId: "change-1" },
           },
           isError: true,
         },
@@ -196,7 +196,7 @@ describe("agent UI event fold", () => {
         type: "tool",
         state: "output-error",
         errorText: "The edit conflicted.",
-        details: { changeSetId: "change-1" },
+        details: { editSessionId: "change-1" },
       }),
     );
   });
diff --git a/apps/www/src/features/studio/ai/components/chat-shell.tsx b/apps/www/src/features/studio/ai/components/chat-shell.tsx
index 92c2302e1..74e685106 100644
--- a/apps/www/src/features/studio/ai/components/chat-shell.tsx
+++ b/apps/www/src/features/studio/ai/components/chat-shell.tsx
@@ -25,7 +25,7 @@ import { toast } from "sonner";
 import { Streamdown } from "streamdown";
 
 import {
-  revertAgentSessionChangeSetOptions,
+  revertAgentEditSessionOptions,
   uploadAgentAttachmentOptions,
 } from "@/features/studio/lib/tanstack-query";
 
@@ -77,16 +77,16 @@ function ImageAttachment({ url, name }: { url: string; name: string }) {
 }
 
 /** Render the parts of one assistant message: text via Streamdown, tool calls via ToolCallView. */
-const toolChangeSetId = (part: AgentUiToolPart): string | undefined => {
+const toolEditSessionId = (part: AgentUiToolPart): string | undefined => {
   if (
     (part.state !== "output-available" && part.state !== "output-error") ||
     typeof part.details !== "object" ||
     part.details === null ||
-    !("changeSetId" in part.details)
+    !("editSessionId" in part.details)
   ) {
     return undefined;
   }
-  return typeof part.details.changeSetId === "string" ? part.details.changeSetId : undefined;
+  return typeof part.details.editSessionId === "string" ? part.details.editSessionId : undefined;
 };
 
 function AssistantMessage({
@@ -97,7 +97,7 @@ function AssistantMessage({
   reverted,
 }: {
   message: AgentUiMessage;
-  onRevert: (changeSetId: string) => void;
+  onRevert: (editSessionId: string) => void;
   revertAnchors: ReadonlyMap<string, string>;
   reverting: boolean;
   reverted: ReadonlySet<string>;
@@ -115,21 +115,21 @@ function AssistantMessage({
             );
           }
           if (part.type === "tool") {
-            const changeSetId = toolChangeSetId(part);
+            const editSessionId = toolEditSessionId(part);
             const isRevertAnchor =
-              changeSetId !== undefined && revertAnchors.get(changeSetId) === key;
+              editSessionId !== undefined && revertAnchors.get(editSessionId) === key;
             return (
               <div key={key} className="flex flex-wrap items-center gap-2">
                 <ToolCallView part={part} />
-                {changeSetId === undefined || !isRevertAnchor ? null : (
+                {editSessionId === undefined || !isRevertAnchor ? null : (
                   <Button
-                    disabled={reverting || reverted.has(changeSetId)}
-                    onClick={() => onRevert(changeSetId)}
+                    disabled={reverting || reverted.has(editSessionId)}
+                    onClick={() => onRevert(editSessionId)}
                     size="sm"
                     variant="outline"
                   >
                     <RotateCcw className="size-3.5" />
-                    {reverted.has(changeSetId) ? "Reverted" : "Revert changes"}
+                    {reverted.has(editSessionId) ? "Reverted" : "Revert changes"}
                   </Button>
                 )}
               </div>
@@ -214,25 +214,25 @@ export function ChatShell({ agent, chatId, emptyState, onBusyChange, className }
   });
 
   const uploadAttachment = useMutation(uploadAgentAttachmentOptions());
-  const revertChangeSet = useMutation(revertAgentSessionChangeSetOptions());
+  const revertEditSession = useMutation(revertAgentEditSessionOptions());
   const [attachments, setAttachments] = useState<PendingAttachment[]>([]);
-  const [revertedChangeSets, setRevertedChangeSets] = useState<ReadonlySet<string>>(
+  const [revertedEditSessions, setRevertedEditSessions] = useState<ReadonlySet<string>>(
     () => new Set(),
   );
 
   const handleRevert = useCallback(
-    (changeSetId: string) => {
-      void revertChangeSet
-        .mutateAsync({ sessionId: chatId, changeSetId })
+    (editSessionId: string) => {
+      void revertEditSession
+        .mutateAsync({ sessionId: chatId, editSessionId })
         .then(() => {
-          setRevertedChangeSets((current) => new Set(current).add(changeSetId));
+          setRevertedEditSessions((current) => new Set(current).add(editSessionId));
           toast.success("Agent changes reverted.");
         })
         .catch((cause: unknown) => {
           toast.error(cause instanceof Error ? cause.message : "Could not revert agent changes.");
         });
     },
-    [chatId, revertChangeSet],
+    [chatId, revertEditSession],
   );
 
   const patch = useCallback((id: string, next: Partial<PendingAttachment>) => {
@@ -382,9 +382,9 @@ export function ChatShell({ agent, chatId, emptyState, onBusyChange, className }
     if (message.role !== "assistant") continue;
     message.parts.forEach((part, index) => {
       if (part.type !== "tool") return;
-      const changeSetId = toolChangeSetId(part);
-      if (changeSetId !== undefined) {
-        revertAnchors.set(changeSetId, `${message.id}-${index}`);
+      const editSessionId = toolEditSessionId(part);
+      if (editSessionId !== undefined) {
+        revertAnchors.set(editSessionId, `${message.id}-${index}`);
       }
     });
   }
@@ -410,8 +410,8 @@ export function ChatShell({ agent, chatId, emptyState, onBusyChange, className }
                       message={message}
                       onRevert={handleRevert}
                       revertAnchors={revertAnchors}
-                      reverted={revertedChangeSets}
-                      reverting={isBusy || revertChangeSet.isPending}
+                      reverted={revertedEditSessions}
+                      reverting={isBusy || revertEditSession.isPending}
                     />
                   )}
                 </MessageScrollerItem>
diff --git a/apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts b/apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts
index ad961a599..012e1f814 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/agent-sessions.ts
@@ -24,12 +24,12 @@ export const deleteAgentSessionOptions = () =>
     mutationKey: ["deleteAgentSession"],
   });
 
-/** Reverts the latest reviewed paywall change set owned by a durable session. */
-export const revertAgentSessionChangeSetOptions = () =>
+/** Reverts the latest reviewed paywall edit session owned by a durable agent session. */
+export const revertAgentEditSessionOptions = () =>
   eq.mutationOptions({
-    mutationFn: (variables: { sessionId: string; changeSetId: string }) =>
-      VoidhashRpc.request((rpc) => rpc.RevertAgentSessionChangeSet(variables)),
-    mutationKey: ["revertAgentSessionChangeSet"],
+    mutationFn: (variables: { sessionId: string; editSessionId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.RevertAgentEditSession(variables)),
+    mutationKey: ["revertAgentEditSession"],
   });
 
 /** Uploads one image for a session prompt and returns its public URL. */
diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts b/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
index 7862a0e7e..535701a83 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
@@ -1,4 +1,3 @@
-import { Effect } from "effect";
 import { queryKeys } from "@/features/studio/lib/tanstack-query";
 
 import { VoidhashRpc, eq } from "../effect-query";
@@ -9,6 +8,13 @@ export const listPaywallsOptions = (options: { projectId: string; includeArchive
     queryKey: queryKeys.paywall.list(options),
   });
 
+export const backfillPaywallThumbnailsOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: { projectId: string }) =>
+      VoidhashRpc.request((rpc) => rpc.BackfillPaywallThumbnails(variables)),
+    mutationKey: ["backfillPaywallThumbnails"],
+  });
+
 export const createPaywallOptions = () =>
   eq.mutationOptions({
     mutationFn: (variables: { projectId: string; name: string; slug: string }) =>
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx
index 495cf39f2..30f3bcc9c 100644
--- a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-node-renderer.tsx
@@ -12,6 +12,7 @@ import { usePaywallDesignerStore } from "../../state/designer-store";
 import type { LocalComponentArtifact } from "../../state/designer-store-state";
 import { definitionForComponentPath } from "../../state/utils/code-components";
 import { Selectable } from "../helpers/selectable";
+import { componentWrapperStyle } from "./component-wrapper-style";
 
 /**
  * Resolves the preview state to render from the spec §6 fallback chain: each
@@ -69,17 +70,12 @@ function ComponentPreviewContent({
  * path exactly.
  */
 function LocalComponentPreviewContent({
-  artifact,
-  candidates,
+  tree,
   renderSlot,
 }: {
-  artifact: LocalComponentArtifact;
-  candidates: ReadonlyArray<string | undefined>;
+  tree: LocalComponentArtifact["previewTrees"][string] | undefined;
   renderSlot: () => ReactNode;
 }) {
-  const states = Object.keys(artifact.previewTrees);
-  const state = resolvePreviewState(states, candidates);
-  const tree = state !== undefined ? artifact.previewTrees[state] : undefined;
   if (tree === undefined) {
     return <PlaceholderChip label="Component has no preview state" />;
   }
@@ -171,19 +167,28 @@ export function ComponentNodeRenderer({
       : undefined;
 
   const stateCandidates = [localPreviewState, node.data.previewState, "default"];
+  const localTree = (() => {
+    if (localArtifact === undefined) return undefined;
+    const state = resolvePreviewState(Object.keys(localArtifact.previewTrees), stateCandidates);
+    return state === undefined ? undefined : localArtifact.previewTrees[state];
+  })();
 
   return (
     <Selectable nodeId={node.id}>
       {(selectableProps) => (
-        <div className="relative" ref={ref} {...selectableProps}>
+        <div
+          className="relative flex min-h-0 min-w-0 flex-col"
+          ref={ref}
+          style={componentWrapperStyle(localTree?.root)}
+          {...selectableProps}
+        >
           {isBuiltin ? (
             <BuiltinComponentContent node={node} />
           ) : isLocal ? (
             localArtifact !== undefined ? (
               <LocalComponentPreviewContent
-                artifact={localArtifact}
-                candidates={stateCandidates}
                 renderSlot={() => children}
+                tree={localTree}
               />
             ) : !localDefinitionExists ? (
               <PlaceholderChip label={`Missing component file — ${node.data.componentPath}`} />
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.test.ts b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.test.ts
new file mode 100644
index 000000000..58981c23d
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.test.ts
@@ -0,0 +1,38 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { componentWrapperStyle } from "./component-wrapper-style";
+
+describe("componentWrapperStyle", () => {
+  test("forwards flex-child sizing without copying visual styles", () => {
+    expect(
+      componentWrapperStyle({
+        children: [],
+        style: {
+          alignSelf: "stretch",
+          backgroundColor: "red",
+          flex: 1,
+          flexBasis: "auto",
+          flexGrow: 2,
+          flexShrink: 0,
+        },
+        type: "view",
+      }),
+    ).toEqual({
+      alignSelf: "stretch",
+      flex: 1,
+      flexBasis: "auto",
+      flexGrow: 2,
+      flexShrink: 0,
+    });
+  });
+
+  test("returns no explicit sizing for a hugging root", () => {
+    expect(
+      componentWrapperStyle({ children: [], style: { backgroundColor: "red" }, type: "view" }),
+    ).toEqual({});
+  });
+
+  test("returns no explicit sizing for an unstyled root", () => {
+    expect(componentWrapperStyle({ type: "slot" })).toEqual({});
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.ts b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.ts
new file mode 100644
index 000000000..d2cc5c0e3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/node-renderers/component-wrapper-style.ts
@@ -0,0 +1,19 @@
+import {
+  buildPreviewNodeStyles,
+  type PreviewNode,
+} from "@voidhash/paywall-renderer-web-core";
+import type { CSSProperties } from "react";
+
+/** Mirrors a component preview root's flex-child sizing onto Studio's selectable wrapper. */
+export function componentWrapperStyle(root: PreviewNode | undefined): CSSProperties {
+  if (root === undefined || !("style" in root)) return {};
+  const style = root.style;
+  const css = buildPreviewNodeStyles(style, root.type);
+  return {
+    ...(style.flex === undefined ? {} : { flex: css.flex }),
+    ...(style.flexGrow === undefined ? {} : { flexGrow: css.flexGrow }),
+    ...(style.flexShrink === undefined ? {} : { flexShrink: css.flexShrink }),
+    ...(style.flexBasis === undefined ? {} : { flexBasis: css.flexBasis }),
+    ...(style.alignSelf === undefined ? {} : { alignSelf: css.alignSelf }),
+  };
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx
index 415e8d687..640a498b2 100644
--- a/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/overlay/working-indicator-overlay.tsx
@@ -5,6 +5,7 @@ import { useEffect, useRef } from "react";
 
 import { selectRenderRoot, usePaywallDesignerStore } from "../../state/designer-store";
 import type { DesignerStoreState } from "../../state/designer-store-state";
+import { selectAiWorking } from "../../state/utils/ai-working";
 import {
   advanceWorkingIndicator,
   createWorkingIndicatorAnimation,
@@ -84,7 +85,8 @@ export function WorkingIndicatorOverlay({ containerRef }: WorkingIndicatorOverla
           y: viewport.y,
         });
         syncWorkingIndicatorScreens(animation, readScreens(state));
-        setWorkingIndicatorActive(animation, state.ai.isWorking, now);
+        const isWorking = selectAiWorking(state);
+        setWorkingIndicatorActive(animation, isWorking, now);
         advanceWorkingIndicator(animation, now, ticker.deltaMS);
 
         graphics.clear();
@@ -105,7 +107,7 @@ export function WorkingIndicatorOverlay({ containerRef }: WorkingIndicatorOverla
           }
         });
 
-        if (animation.phase === "idle" && !state.ai.isWorking) {
+        if (animation.phase === "idle" && !isWorking) {
           app.stop();
           app.render();
         }
@@ -113,12 +115,12 @@ export function WorkingIndicatorOverlay({ containerRef }: WorkingIndicatorOverla
 
       app.ticker.add(tick);
       unsubscribe = store.subscribe((state, previousState) => {
-        if (state.ai.isWorking !== previousState.ai.isWorking) {
+        if (selectAiWorking(state) !== selectAiWorking(previousState)) {
           app.start();
         }
       });
 
-      if (store.getState().ai.isWorking) {
+      if (selectAiWorking(store.getState() as DesignerStoreState)) {
         app.start();
       } else {
         app.stop();
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts
index 01abafe06..f409e0e8d 100644
--- a/apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/manifest-upload.ts
@@ -1,5 +1,3 @@
-import { Effect } from "effect";
-
 import { managedRuntime, VoidhashRpc } from "@/features/studio/lib/effect-query";
 
 import type { CompileDiagnostic } from "../state/designer-store-state";
@@ -30,7 +28,12 @@ export function uploadComponentManifest(sourceHash: string, result: PipelineResu
   uploadedHashes.add(sourceHash);
 
   const payload = result.ok
-    ? { sourceHash, status: "ready" as const, manifest: result.manifest }
+    ? {
+        sourceHash,
+        status: "ready" as const,
+        manifest: result.manifest,
+        previewTrees: result.previewTrees,
+      }
     : {
         sourceHash,
         status: "error" as const,
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.test.ts
new file mode 100644
index 000000000..5969b604a
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.test.ts
@@ -0,0 +1,42 @@
+import { describe, expect, test } from "vite-plus/test";
+
+import { getExpandedLayerIdsForSelection } from "./layer-expansion";
+
+const tree = {
+  children: [
+    {
+      children: [
+        {
+          children: [{ id: "headline" }],
+          id: "hero",
+        },
+        {
+          children: [{ id: "plan-label" }],
+          id: "plans",
+        },
+      ],
+      id: "screen",
+    },
+  ],
+  id: "root",
+};
+
+describe("layer expansion", () => {
+  test("expands every ancestor of a selected leaf", () => {
+    expect(getExpandedLayerIdsForSelection(tree, ["headline"])).toEqual(
+      new Set(["hero", "screen", "root"]),
+    );
+  });
+
+  test("expands ancestors when the selected node has children", () => {
+    expect(getExpandedLayerIdsForSelection(tree, ["hero"])).toEqual(
+      new Set(["screen", "root"]),
+    );
+  });
+
+  test("expands paths for selections in separate branches", () => {
+    expect(getExpandedLayerIdsForSelection(tree, ["headline", "plan-label"])).toEqual(
+      new Set(["hero", "plans", "screen", "root"]),
+    );
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.ts b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.ts
new file mode 100644
index 000000000..0b7bc907f
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layer-expansion.ts
@@ -0,0 +1,29 @@
+interface LayerTreeNode {
+  id: string;
+  children?: readonly LayerTreeNode[];
+}
+
+/** Returns every ancestor layer that must be expanded to reveal the selection. */
+export function getExpandedLayerIdsForSelection(
+  tree: LayerTreeNode,
+  selectedNodeIds: readonly string[],
+): Set<string> {
+  const selectedIds = new Set(selectedNodeIds);
+  const expandedIds = new Set<string>();
+
+  const visit = (node: LayerTreeNode): boolean => {
+    let containsSelection = selectedIds.has(node.id);
+
+    for (const child of node.children ?? []) {
+      if (visit(child)) {
+        expandedIds.add(node.id);
+        containsSelection = true;
+      }
+    }
+
+    return containsSelection;
+  };
+
+  visit(tree);
+  return expandedIds;
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx
index b8df4346b..fc7c6d5ff 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel/layers-section.tsx
@@ -40,6 +40,7 @@ import { nodePassesSlotGate } from "../../state/utils/component-children";
 import { selectDocumentRoot } from "../../state/utils/document-root";
 import { canHaveChildren as nodeCanHaveChildren } from "../../state/utils/node-type-helpers";
 import { selectedNodeIdsFromPresence } from "../../state/utils/presence";
+import { getExpandedLayerIdsForSelection } from "./layer-expansion";
 
 // ============================================================================
 // Types
@@ -760,33 +761,6 @@ function SortableTreeItem({
   );
 }
 
-// ============================================================================
-// Expanded Layers Logic
-// ============================================================================
-
-const getExpandedLayersBySelectedNodes = (
-  tree: SnapshotNode,
-  selectedNodeIds: string[],
-): Set<string> => {
-  const reduceExpandedNodeIdsToSet = (node: SnapshotNode, selectedIds: string[]): Set<string> => {
-    const children = node.children ?? [];
-    if (children.length === 0) {
-      if (selectedIds.includes(node.id)) {
-        return new Set([node.id]);
-      }
-      return new Set([]);
-    }
-
-    const childrenExpandedIds = children.flatMap((child) => [
-      ...reduceExpandedNodeIdsToSet(child, selectedIds),
-    ]);
-
-    return new Set([...childrenExpandedIds, ...(childrenExpandedIds.length > 0 ? [node.id] : [])]);
-  };
-
-  return tree ? reduceExpandedNodeIdsToSet(tree, selectedNodeIds) : new Set([]);
-};
-
 // ============================================================================
 // Main Component
 // ============================================================================
@@ -887,7 +861,8 @@ export function LayersSection() {
 
   // Expanded layers by selected nodes (includes preview selections)
   const expandedLayersBySelectedNodes = useMemo(
-    () => (tree ? getExpandedLayersBySelectedNodes(tree, allSelectedNodeIds) : new Set<string>([])),
+    () =>
+      tree ? getExpandedLayerIdsForSelection(tree, allSelectedNodeIds) : new Set<string>([]),
     [tree, allSelectedNodeIds],
   );
 
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
index 100799a6c..af7e94e8d 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
@@ -66,16 +66,16 @@ export const finishAiCanvasOperation = commander.action<{ id: string }>((ctx, {
   ctx.setState({ ai: { ...state.ai, operations } });
 });
 
-/** Sets whether the designer agent is actively processing a turn. */
+/** Sets whether this browser's built-in designer agent is processing a turn. */
 export const setAiWorking = commander.action<{ isWorking: boolean }>((ctx, { isWorking }) => {
   const state = ctx.getState();
-  if (state.ai.isWorking === isWorking) {
+  if (state.ai.localIsWorking === isWorking) {
     return;
   }
   ctx.setState({
     ai: {
       ...state.ai,
-      isWorking,
+      localIsWorking: isWorking,
     },
   });
 });
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts
index ecd650468..dd9c326f5 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/selection-actions.test.ts
@@ -5,6 +5,7 @@ import { clearSelection, selectNode, unselectNode } from "./selection-actions";
 interface PresenceSnapshotFixture {
   cursor?: { x: number; y: number };
   name?: string;
+  participant: { kind: "human" };
   selectedNodeIds: { id: string; pos: string; value: string }[];
   user: { color: string; name: string };
 }
@@ -12,6 +13,7 @@ interface PresenceSnapshotFixture {
 interface PresenceInputFixture {
   cursor?: { x: number; y: number };
   name?: string;
+  participant: { kind: "human" };
   selectedNodeIds?: readonly string[];
   user: { color: string; name: string };
 }
@@ -36,6 +38,7 @@ type SelectionState = {
 
 function presenceSnapshot(selectedNodeIds: string[]): PresenceSnapshotFixture {
   return {
+    participant: { kind: "human" },
     selectedNodeIds: selectedNodeIds.map((value, index) => ({
       id: `entry-${index}`,
       pos: `a${index}`,
@@ -50,15 +53,19 @@ function createSelectionCtx(initial: {
   stateOverrideSelection: Record<string, string | null>;
 }) {
   let presence = presenceSnapshot(initial.selectedNodeIds);
+  const setPresence = vi.fn((value: PresenceInputFixture) => {
+    presence = {
+      ...presenceSnapshot([...(value.selectedNodeIds ?? [])]),
+      participant: value.participant,
+    };
+  });
   let state: SelectionState = {
     highlightedNodeId: null,
     mimic: {
       document: {
         presence: {
           self: () => presence,
-          set: (value) => {
-            presence = presenceSnapshot([...(value.selectedNodeIds ?? [])]);
-          },
+          set: setPresence,
         },
       },
       snapshot: [
@@ -88,6 +95,7 @@ function createSelectionCtx(initial: {
     ctx,
     getSelectedNodeIds: () => presence.selectedNodeIds.map((entry) => entry.value),
     getState: () => state,
+    setPresence,
   };
 }
 
@@ -106,6 +114,19 @@ describe("selection actions", () => {
     expect(ctx.dispatch).not.toHaveBeenCalled();
   });
 
+  test("selection updates preserve the participant identity", () => {
+    const { ctx, setPresence } = createSelectionCtx({
+      selectedNodeIds: [],
+      stateOverrideSelection: {},
+    });
+
+    selectNode.fn(ctx as never, { id: "node-1", many: false });
+
+    expect(setPresence).toHaveBeenCalledWith(
+      expect.objectContaining({ participant: { kind: "human" } }),
+    );
+  });
+
   test("multi-select does not reset per-node state selections", () => {
     const initialSelection = { "node-1": "state-1", "node-2": "state-2" };
     const { ctx, getState, getSelectedNodeIds } = createSelectionCtx({
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
index 558d41dac..cacf9dfbd 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
@@ -292,8 +292,8 @@ export type DesignerStoreState = {
     width: number;
     /** Active model/tool operations, keyed by tool-call id (browser-only). */
     operations: Record<string, AgentCanvasOperation>;
-    /** Whether the designer agent is submitting or streaming a turn. */
-    isWorking: boolean;
+    /** Whether this browser's built-in designer agent is processing a turn. */
+    localIsWorking: boolean;
   };
   stateOverrideSelection: StateOverrideSelection;
   /**
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
index 07d21925e..5effe4983 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
@@ -155,7 +155,7 @@ function createDesignerLocalState() {
     },
     ai: {
       operations: {} as Record<string, AgentCanvasOperation>,
-      isWorking: false,
+      localIsWorking: false,
       panelOpen: true,
       width: PANEL_DIMENSIONS.AI_CHAT_WIDTH,
     },
@@ -242,6 +242,7 @@ function toError(error: unknown): Error {
 
 function createInitialPresence(): PresenceInput {
   return {
+    participant: { kind: "human" },
     selectedNodeIds: [],
     user: {
       color: `#${Math.floor(Math.random() * 16_777_215)
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.test.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.test.ts
new file mode 100644
index 000000000..0f8010dff
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.test.ts
@@ -0,0 +1,27 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import type { DesignerStoreState } from "../designer-store-state";
+import { selectAiWorking } from "./ai-working";
+
+const state = (localIsWorking: boolean, participant?: "agent" | "human") =>
+  ({
+    ai: { localIsWorking },
+    mimic: {
+      presence: {
+        others: new Map(
+          participant === undefined
+            ? []
+            : [["participant", { data: { participant: { kind: participant } } }]],
+        ),
+      },
+    },
+  }) as unknown as DesignerStoreState;
+
+describe("selectAiWorking", () => {
+  it("stays active while either the local chat or a connected agent is active", () => {
+    expect(selectAiWorking(state(false))).toBe(false);
+    expect(selectAiWorking(state(true))).toBe(true);
+    expect(selectAiWorking(state(false, "human"))).toBe(false);
+    expect(selectAiWorking(state(false, "agent"))).toBe(true);
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.ts
new file mode 100644
index 000000000..8c04912c5
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/ai-working.ts
@@ -0,0 +1,8 @@
+import type { DesignerStoreState } from "../designer-store-state";
+
+/** Combines local chat state with connected agent presence from Mimic. */
+export const selectAiWorking = (state: DesignerStoreState): boolean =>
+  state.ai.localIsWorking ||
+  [...(state.mimic.presence?.others.values() ?? [])].some(
+    ({ data }) => data?.participant.kind === "agent",
+  );
diff --git a/apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts b/apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts
index 9fa38cb9f..f550a73ac 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/utils/presence.ts
@@ -26,6 +26,7 @@ export function presenceInputFromSnapshot(snapshot: PresenceSnapshot): DesignerP
   return {
     cursor: snapshot.cursor,
     name: snapshot.name,
+    participant: snapshot.participant,
     selectedNodeIds: selectedNodeIdsFromPresence(snapshot),
     user: snapshot.user,
   };
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
index 1c9a74162..6a1be185e 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -1,17 +1,23 @@
-import { useSuspenseQuery } from "@tanstack/react-query";
+import { useMutation, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
 import { Button, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
 import { ArchiveIcon } from "lucide-react";
-import { useState } from "react";
+import { useEffect, useRef, useState } from "react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { CreatePaywallButton } from "@/features/studio/paywalls/create-paywall-button";
 import { PaywallCard } from "@/features/studio/paywalls/paywall-card";
 import { PaywallCardSkeleton } from "@/features/studio/paywalls/paywall-card-skeleton";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
+import {
+  backfillPaywallThumbnailsOptions,
+  listPaywallsOptions,
+} from "@/features/studio/lib/tanstack-query/paywalls";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 
+const THUMBNAIL_REFRESH_INTERVAL_MS = 2_000;
+const THUMBNAIL_REFRESH_WINDOW_MS = 45_000;
+
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/",
 )({
@@ -61,12 +67,41 @@ function PaywallsPage() {
   }
 
   const [showArchived, setShowArchived] = useState(false);
+  const thumbnailRefreshDeadline = useRef(Date.now() + THUMBNAIL_REFRESH_WINDOW_MS);
+  const thumbnailBackfillProjectId = useRef<string | null>(null);
+  const queryClient = useQueryClient();
+  const paywallsQueryOptions = listPaywallsOptions({
+    includeArchived: true,
+    projectId: project.id,
+  });
+  const { mutate: backfillThumbnails } = useMutation({
+    ...backfillPaywallThumbnailsOptions(),
+    onSuccess: () => queryClient.invalidateQueries({ queryKey: paywallsQueryOptions.queryKey }),
+  });
 
   // Fetch archived paywalls alongside active ones so toggling visibility is a
   // client-side filter — no refetch (and no skeleton flash) when flipping it.
-  const { data: allPaywalls } = useSuspenseQuery(
-    listPaywallsOptions({ includeArchived: true, projectId: project.id }),
-  );
+  const { data: allPaywalls } = useSuspenseQuery({
+    ...paywallsQueryOptions,
+    // Thumbnail generation starts after the designer connection becomes idle,
+    // so the first list response commonly arrives before thumbnailUrl is set.
+    refetchInterval: (query) =>
+      Date.now() < thumbnailRefreshDeadline.current &&
+      query.state.data?.some((paywall) => paywall.thumbnailUrl === null)
+        ? THUMBNAIL_REFRESH_INTERVAL_MS
+        : false,
+  });
+
+  useEffect(() => {
+    if (
+      thumbnailBackfillProjectId.current === project.id ||
+      !allPaywalls.some((paywall) => paywall.thumbnailUrl === null)
+    ) {
+      return;
+    }
+    thumbnailBackfillProjectId.current = project.id;
+    backfillThumbnails({ projectId: project.id });
+  }, [allPaywalls, backfillThumbnails, project.id]);
 
   const archivedCount = allPaywalls.filter((paywall) => paywall.archivedAt != null).length;
   const paywalls = showArchived
@@ -79,11 +114,7 @@ function PaywallsPage() {
         rightActions={
           <div className="flex items-center gap-2">
             {archivedCount > 0 && (
-              <Button
-                onClick={() => setShowArchived((value) => !value)}
-                size="sm"
-                variant="ghost"
-              >
+              <Button onClick={() => setShowArchived((value) => !value)} size="sm" variant="ghost">
                 <ArchiveIcon />
                 {showArchived ? "Hide archived" : `Show archived (${archivedCount})`}
               </Button>
diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index ecabaf471..e10f47168 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -58,7 +58,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 <!-- RPC_OPERATIONS_START -->
 | Group | Operations |
 | --- | --- |
-| AgentSession | `ListAgentSessions`, `GetAgentSession`, `DeleteAgentSession`, `RevertAgentSessionChangeSet`, `UploadAgentAttachment` |
+| AgentSession | `ListAgentSessions`, `GetAgentSession`, `DeleteAgentSession`, `RevertAgentEditSession`, `UploadAgentAttachment` |
 | Analytics | `ListRecentAnalyticsEvents`, `QueryAnalyticsInsights`, `QueryCustomAnalyticsInsight`, `QueryCustomAnalyticsPersons`, `ListAnalyticsInsights`, `CreateAnalyticsInsight`, `UpdateAnalyticsInsight`, `DeleteAnalyticsInsight`, `ListAnalyticsCohorts`, `CreateAnalyticsCohort`, `UpdateAnalyticsCohort`, `DeleteAnalyticsCohort`, `ListAnalyticsDashboards`, `CreateAnalyticsDashboard`, `DuplicateAnalyticsDashboard`, `UpdateAnalyticsDashboard`, `DeleteAnalyticsDashboard`, `PutAnalyticsDashboardItem`, `ReorderAnalyticsDashboardItems`, `RemoveAnalyticsDashboardItem` |
 | ApiKey | `CreateSecretKey`, `ListApiKeys`, `GetApiKeyById`, `RotateSecretKey`, `DeleteApiKey`, `CreateUserApiKey`, `ListUserApiKeys`, `RevokeUserApiKey` |
 | Person | `CreatePerson`, `ListPersons`, `GetPersonById`, `GetPersonByDistinctId` |
@@ -74,7 +74,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | PaywallComponent | `ListPaywallComponents`, `GetPaywallComponentVersions` |
 | PaywallDeploy | `ListPaywallDeploys`, `SetActivePaywallRelease` |
 | PaywallLocation | `ListPaywallLocations`, `CreatePaywallLocation`, `UpdatePaywallLocation`, `ArchivePaywallLocation`, `AssignPaywallLocationShowing`, `ClearPaywallLocationShowing`, `ListPaywallLocationShowings` |
-| Paywall | `ListPaywalls`, `CreatePaywall`, `RenamePaywall`, `ArchivePaywall`, `RestorePaywall`, `DeletePaywall`, `RequestPaywallEditToken`, `CreatePaywallRelease`, `PublishPaywallRelease`, `GetPaywallDraftRelease` |
+| Paywall | `ListPaywalls`, `BackfillPaywallThumbnails`, `CreatePaywall`, `RenamePaywall`, `ArchivePaywall`, `RestorePaywall`, `DeletePaywall`, `RequestPaywallEditToken`, `CreatePaywallRelease`, `PublishPaywallRelease`, `GetPaywallDraftRelease` |
 | PaywallWorkspace | `ListWorkspacePaywalls`, `ReadPaywallDocument`, `RecordComponentManifest` |
 | Perk | `ListPerks`, `CreatePerk`, `DeletePerk` |
 | ProductPerk | `ListProductPerksByProductId`, `CreateProductPerk`, `DeleteProductPerk` |
diff --git a/integrations/claude-code/voidhash/README.md b/integrations/claude-code/voidhash/README.md
index 96d4b9a97..c5a366e8d 100644
--- a/integrations/claude-code/voidhash/README.md
+++ b/integrations/claude-code/voidhash/README.md
@@ -1,6 +1,6 @@
 # Voidhash for Claude Code
 
-This plugin connects Claude Code to the hosted Voidhash MCP server. It currently includes visually verified paywall authoring and can grow with additional platform tools.
+This plugin connects Claude Code to the hosted Voidhash MCP server. It includes visually verified paywall authoring plus custom code-component, editor-panel, motion, and gesture authoring.
 
 Authentication uses OAuth in the browser. The plugin does not require `voidhash-cli`, an API key, or environment variables.
 
@@ -19,3 +19,7 @@ For this browser-only flow, test with an organization that contains one project.
 Then ask Claude:
 
 > Use Voidhash to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
+
+To exercise the component reference, start a new conversation and ask:
+
+> Use the code-component-authoring skill to build a custom paywall component with an editor panel and motion.
diff --git a/integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md b/integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md
new file mode 100644
index 000000000..166616430
--- /dev/null
+++ b/integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md
@@ -0,0 +1,604 @@
+---
+name: code-component-authoring
+description: Create, edit, debug, and place Voidhash code components, including typed props and actions, preview fixtures, custom designer panels, animation, motion values, scroll-linked effects, drag gestures, and gesture-aware panel controls. Use when a paywall needs runtime data, loops, structural logic, custom formatting, pressed/focus states, animation, dragging, or a tailored component-properties panel, or when working with read_component, write_component, rename_component, or delete_component.
+---
+
+# Code Component Authoring
+
+Use this as the complete author-facing contract for local Voidhash code components.
+Build ordinary composition with document nodes; use a code component only for behavior
+the document cannot express, such as runtime-data text, loops, structural branching,
+custom formatting, pointer states, motion, and drag gestures.
+
+## MCP workflow
+
+1. Call `begin_paywall_edit({ paywallId })` and retain its `editSessionId`.
+2. Read the document with `get_paywall` and all placeable contracts with
+   `get_components`. If editing a local component, read it with `read_component`.
+3. Write one complete `components/<name>.tsx` source with `write_component`. Fix every
+   compile or runtime diagnostic and retry; a rejected write commits nothing.
+4. Place a successful local definition with a document `component` node:
+
+   ```json
+   {
+     "op": "insert",
+     "parentId": "<parent-id>",
+     "node": {
+       "type": "component",
+       "name": "Animated offer",
+       "componentSource": "local",
+       "componentPath": "components/animated-offer.tsx"
+     }
+   }
+   ```
+
+5. Configure instance `props`, `localizedValues`, `actionBindings`, `previewState`, and
+   slot children through `edit_paywall`, using the manifest returned by `get_components`.
+6. Render `get_paywall_preview`, inspect the actual PNG, iterate, and finish or revert the
+   edit session using the normal paywall-authoring workflow.
+
+Treat the component path as identity. Valid paths are exactly
+`components/<basename>.tsx`; the basename may use letters, digits, `.`, `_`, and `-`,
+must not contain a separator or `..`, and is compared case-insensitively for collisions.
+`rename_component` changes the identity and re-points local instances.
+`delete_component` removes only the definition; existing instances become placeholders.
+
+Author one self-contained file. Import runtime/component APIs from
+`@voidhash/paywalls`, panel APIs from `@voidhash/paywalls/panel`, and nothing else.
+Do not import `react` directly or use relative imports from an MCP-written component.
+React hooks needed by authored code are re-exported by `@voidhash/paywalls`.
+
+## Complete component pattern
+
+```tsx
+import {
+  defineComponent,
+  MotionConfig,
+  Pressable,
+  Slot,
+  Text,
+  View,
+  usePaywallActions,
+  useSelectedProduct,
+} from "@voidhash/paywalls";
+import { Panel } from "@voidhash/paywalls/panel";
+
+export default defineComponent({
+  title: "Animated Offer",
+  description: "A selectable offer with editable appearance.",
+  props: (p) => ({
+    title: p.string().label("Title").localizable().default("Annual Pro"),
+    accent: p.string().label("Accent").editor("color").default("rgba(99, 102, 241, 1)"),
+    radius: p.number().label("Radius").default(16),
+    product: p.ref("product"),
+    footer: p.component().optional(),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ productId: a.string() }),
+  }),
+  previews: {
+    default: {
+      props: { title: "Annual Pro", accent: "rgba(99, 102, 241, 1)", radius: 16 },
+      data: {
+        products: [{
+          id: "annual",
+          slug: "annual",
+          displayName: "Annual Pro",
+          priceString: "$59.99",
+          period: "year",
+        }],
+      },
+    },
+  },
+  panel: (ctx) => (
+    <Panel>
+      <Panel.Section title="Content">
+        <Panel.PropField name="title" />
+        <Panel.PropField name="product" />
+      </Panel.Section>
+      <Panel.Section title="Appearance">
+        <Panel.Field label="Accent">
+          <Panel.ColorField
+            disabled={ctx.props.accent.bound}
+            mixed={ctx.props.accent.mixed}
+            onChange={(value) => ctx.props.accent.set(value, { gesture: "live" })}
+            onCommit={(value) => ctx.props.accent.set(value, { gesture: "commit" })}
+            onDiscard={() => ctx.props.accent.cancel()}
+            value={ctx.props.accent.value}
+          />
+        </Panel.Field>
+        <Panel.Field label="Radius">
+          <Panel.SliderField
+            max={32}
+            min={0}
+            mixed={ctx.props.radius.mixed}
+            onChange={(value) => ctx.props.radius.set(value, { gesture: "live" })}
+            onCommit={(value) => ctx.props.radius.set(value, { gesture: "commit" })}
+            value={ctx.props.radius.value}
+          />
+        </Panel.Field>
+        <Panel.DefaultProps exclude={["title", "product", "accent", "radius"]} />
+      </Panel.Section>
+    </Panel>
+  ),
+  render: ({ props, actions }) => {
+    const { selectedProductId } = useSelectedProduct();
+    const runtime = usePaywallActions();
+    const selected = selectedProductId === props.product.id;
+    return (
+      <MotionConfig reducedMotion="user">
+        <Pressable
+          accessibilityLabel={`Select ${props.product.displayName}`}
+          onPress={() => {
+            actions.onSelect({ productId: props.product.id });
+            runtime.selectProduct(props.product.id);
+          }}
+          style={{
+            backgroundColor: selected ? props.accent : "rgba(255, 255, 255, 1)",
+            borderBottomLeftRadius: props.radius,
+            borderBottomRightRadius: props.radius,
+            borderTopLeftRadius: props.radius,
+            borderTopRightRadius: props.radius,
+            paddingBottom: 16,
+            paddingLeft: 16,
+            paddingRight: 16,
+            paddingTop: 16,
+          }}
+          transition={{ type: "spring", stiffness: 240, damping: 22 }}
+          whilePress={{ scale: 0.97 }}
+        >
+          <View initial={{ opacity: 0, y: 12 }} animate={{ opacity: 1, y: 0 }}>
+            <Text>{props.title}</Text>
+            <Text>{props.product.priceString}</Text>
+            <Slot fallback={props.footer} />
+          </View>
+        </Pressable>
+      </MotionConfig>
+    );
+  },
+});
+```
+
+## `defineComponent` contract
+
+Use `export default defineComponent({ ... })`. A named constant that holds the call and is
+default-exported is also accepted, but never export `.component`. There is no component
+`id`; the file path is the identity.
+
+- `title?` and `description?` supply editor/catalog metadata.
+- `props?: (p) => ({ ... })` declares the editable input contract.
+- `actions?: (a) => ({ ... })` declares named events an instance may bind.
+- `previews?: { [state]: { props?, data? } }` supplies deterministic fixtures.
+- `panel?: (ctx) => ReactNode` supplies a custom properties panel.
+- `render: ({ props, actions }) => ReactNode` is required.
+
+Module evaluation must be deterministic and fast. Put hooks inside `render`, `panel`, or
+local React components, never at module scope. `write_component` evaluates the module,
+extracts the manifest, and renders every component preview. It detects that a custom panel
+exists but does not exercise every panel event; a panel can still fail when opened, in
+which case Studio falls back to default prop controls.
+
+Preview rendering flushes passive effects and waits one macrotask before serialization.
+Keep effects finite and deterministic; do not start unbounded timers, event loops, or
+network-dependent work in a preview.
+
+### Prop builders
+
+Every builder is immutable and chainable with `.label(string)`, `.default(value)`, and
+`.optional()`.
+
+- `p.string()` yields `string`; add `.editor("color")` for a color editor.
+- `p.number()` yields `number`.
+- `p.boolean()` yields `boolean`.
+- `p.select(["a", "b"] as const)` yields the option union. Options must be non-empty.
+- `p.image()` yields an image URL/asset reference string.
+- `p.ref("product")` yields a resolved `PaywallProduct` in `render`.
+- `p.component()` yields a nested `ReactNode` controlled by the editor.
+- `p.array(item)` yields a homogeneous array; `item` cannot itself be an array. Arrays of
+  ref/component items compile, but Studio treats them as code-configured/read-only.
+- `.localizable()` is legal only on string and image props.
+
+A default makes a prop optional to the instance but always populated in `render`.
+An explicitly optional prop is `T | undefined` in `render`. Use only JSON-safe scalar or
+scalar-array defaults; ref/component defaults do not survive the manifest. Never name a
+prop or action `id`; it is reserved for document node identity. Use the exact `Slot`
+identifier and supported product-hook names because manifest slot/host-data detection is
+source-based; renamed imports and product hooks hidden in helpers outside `render` may not
+be detected.
+
+### Actions
+
+- `a.action()` declares `() => void`.
+- `a.action({ field: a.string(), count: a.number(), enabled: a.boolean() })` declares a
+  typed payload callback.
+- Payloads are flat scalar records only.
+
+Pass a payload-free action directly to `Pressable` when possible. Wrap a payload action so
+the component supplies its payload. Declared action callbacks are stable and become no-ops
+when an instance has no matching binding. An instance's `actionBindings` may bind emitted
+fields to literals, variables, or action-payload fields and may perform `set-variable`,
+`purchase-product`, `close-paywall`, or `none` according to the document schema.
+
+### Previews and slots
+
+Preview names must match `[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}`. With no declarations, an
+implicit `default` preview is rendered. `props` override declared defaults. `data` accepts
+`products` and `variables`; product refs fall back to the first fixture product when unset.
+Exercise meaningful visual branches with named previews and keep fixture data complete.
+
+Use at most one `<Slot />`. It renders document children supplied to the component
+instance; `<Slot fallback={...} />` renders the fallback only when no children were passed.
+An empty Slot becomes a marker in the preview tree. More than one Slot collapses the
+preview to an error placeholder. A component-node's children are its slot content.
+
+## Render primitives, runtime, and styles
+
+Import `View`, `Text`, `Pressable`, `ScrollView`, `Image`, and `Slot` from
+`@voidhash/paywalls`.
+
+- `View`: flex container; supports visual motion and drag.
+- `Text`: text content; supports visual motion, `numberOfLines`, test id, and accessibility
+  label; never draggable.
+- `Pressable`: tap/keyboard surface; supports visual motion, press/focus states, drag,
+  `disabled`, and either static children or `(state: { pressed }) => ReactNode`.
+- `ScrollView`: vertical by default, horizontal with `horizontal`; supports visual motion,
+  `contentContainerStyle`, and a motion ref; never draggable.
+- `Image`: requires `source` as a string or `{ uri }`; `resizeMode` is `cover`, `contain`,
+  `stretch`, or `center`; supports visual motion and drag.
+
+`testID` is available on `View`, `Text`, `Pressable`, `ScrollView`, and `Image`.
+All except `ScrollView` also accept `accessibilityLabel`. `id`/`name` on `View` and
+`Text` are inert annotations, and `View.onPress` is inert; use `Pressable` for runtime
+interaction. A ScrollView's `contentContainerStyle` accepts static style only.
+
+Styles accept a single object or nested arrays with falsy entries; later entries win.
+Use React Native-style longhands, not CSS or shorthand spacing/borders. Numbers are logical
+pixels; dimensions may also be strings such as `"50%"`.
+
+Supported static keys are:
+
+`flex`, `flexDirection`, `alignItems`, `alignSelf`, `justifyContent`, `flexWrap`, `gap`,
+`flexGrow`, `flexShrink`, `flexBasis`, `width`, `height`, `minWidth`, `minHeight`,
+`maxWidth`, `maxHeight`, `paddingTop`, `paddingBottom`, `paddingLeft`, `paddingRight`,
+`marginTop`, `marginBottom`, `marginLeft`, `marginRight`, `aspectRatio`,
+`borderTopWidth`, `borderRightWidth`, `borderBottomWidth`, `borderLeftWidth`,
+`borderColor`, `borderTopLeftRadius`, `borderTopRightRadius`,
+`borderBottomLeftRadius`, `borderBottomRightRadius`, `borderStyle`, `backgroundColor`,
+`backgroundType`, `backgroundGradient`, `backgroundImage`, `opacity`, `overflow`,
+`position`, `top`, `right`, `bottom`, `left`, `zIndex`, `color`, `fontSize`,
+`fontWeight`, `fontStyle`, `lineHeight`, `letterSpacing`, `textAlign`, `textTransform`,
+`textDecorationLine`, and `fontFamily`.
+
+Value unions: `flexDirection` is `row | row-reverse | column | column-reverse`;
+`alignItems` is `flex-start | flex-end | center | stretch | baseline`; `alignSelf` also
+allows `auto`; `justifyContent` is `flex-start | flex-end | center | space-between |
+space-around | space-evenly`; `flexWrap` is `wrap | nowrap | wrap-reverse`; `borderStyle`
+is `solid | dotted | dashed`; `overflow` is `visible | hidden | scroll`; and `position` is
+`absolute | relative`. `fontStyle` is `normal | italic`; `textAlign` is `auto | left |
+right | center | justify`; `textTransform` is `none | uppercase | lowercase | capitalize`;
+and `textDecorationLine` is `none | underline | line-through | underline line-through`.
+`fontWeight` accepts a number, `normal`, `bold`, or the strings `100` through `900`.
+
+For structured backgrounds, set `backgroundType` to `solid`, `gradient`, or `image`.
+A gradient is `{ kind, startX, startY, endX, endY, stops: [{ color, position }] }` with
+`kind` `linear` or `radial`. An image is `{ url, resizeMode }`. Do not use arbitrary CSS,
+`transform`, shorthand `padding`, shorthand `margin`, shorthand `borderWidth`, or
+`borderRadius`; motion transforms use the motion keys below.
+
+Runtime hooks:
+
+- `usePaywallProducts()` returns `readonly PaywallProduct[]`.
+- `useSelectedProduct()` returns `selectedProduct`, `selectedProductId`, and
+  `selectProduct(productId)`.
+- `usePaywallVariables()` returns `Record<string, string | number | boolean>`.
+- `usePaywallActions()` returns `purchase(productId?)`, `restore()`, `close(reason?)`,
+  `openUrl(url)`, `track(name, properties?)`, and `selectProduct(productId)`.
+- `usePaywallStatus()` returns status `idle`, `purchasing`, `purchased`, `restoring`,
+  `restored`, `cancelled`, or `failed`, plus optional `productId` and an optional error
+  containing `code` and `message`.
+- `usePaywallConfig()` returns products, variables, locale, platform, and optional default
+  selected product id. Platform is `ios | android | web`.
+
+The selected product defaults to `defaultSelectedProductId`, then the first product.
+`purchase()` uses that selection when no id is passed and warns/no-ops if no product exists.
+
+`PaywallProduct` contains `id`, `slug`, `displayName`, optional `description`, optional
+numeric `price`, `priceString`, optional `currencyCode`, optional `period` (`month`,
+`year`, `week`, `lifetime`), and optional `trialPeriod`. Also import `useState`,
+`useEffect`, `useMemo`, `useCallback`, and `useRef` from `@voidhash/paywalls`.
+
+## Custom designer panels
+
+Import `Panel` from `@voidhash/paywalls/panel`. Return exactly one `<Panel>` root from the
+`panel(ctx)` function. The definition runs as a long-lived React session, so hooks, state,
+effects, and timers work. Its output is serialized to a closed JSON-safe tree; functions
+never cross the sandbox boundary. Events are routed back to the current handler by node id
+and event name. A recompile or component-identity change remounts the panel and resets its
+local state.
+
+### Panel context and safe editing
+
+`ctx.selection.count` reports the number of homogeneous component instances being edited.
+`ctx.data.products` and `ctx.data.variables` contain host data when available; do not assume
+either is populated.
+
+Current Studio custom sessions send `products: []` and `variables: {}`. Consequently a
+custom `ctx.props.<ref>.set(productId)` is rejected until a synchronous product source is
+wired. Use `Panel.PropField` for product refs and variable-binding chrome; it expands through
+the host and does not depend on this sandbox data.
+
+For scalar, select, image, and writable array props, `ctx.props.name` contains:
+
+- `value: T | undefined`, `mixed: boolean`, `bound: boolean`, and `kind`.
+- `set(value, { gesture?: "live" | "commit" })`; omitted gesture means `commit`.
+- `cancel()` to discard an in-flight live gesture.
+- `reset()` to remove the override and return to the declared default.
+
+Never call `set` or `reset` when `bound` is true; the host drops the write because variable
+binding owns the value. Render `Panel.PropField` or `Panel.DefaultProps` to retain the
+host's binding/localization/reset chrome. For multi-selection, pass `mixed` into controls
+and avoid presenting one target's value as unanimous.
+
+A ref handle contains `value: PaywallProduct | undefined`, `productId`, `mixed`, `kind:
+"ref"`, and `set(productId)`. A component prop handle is read-only (`value`, `mixed`,
+`kind`). Prefer `Panel.PropField` for ref, component, localized, and variable-bound props;
+the host owns their complete editor behavior and may not inject products into a custom
+session synchronously.
+
+### Panel primitives
+
+Shared tokens:
+
+- gap: `none | xs | sm | md | lg`; width: `auto | full | half`.
+- align: `start | center | end | stretch`; justify: `start | center | end | between`.
+- text variant: `label | body | caption | heading`.
+- tone: `default | muted | info | warning | error`.
+- button variant: `default | outline | ghost | destructive`; size: `sm | icon-sm | default`.
+- option: `{ value, label?, icon?, disabled? }`.
+
+Layout and chrome:
+
+- `Panel` root; `Panel.Section({ title?, collapsible?, defaultCollapsed?, onToggle? })`;
+  `Panel.SectionActions`; `Panel.Subsection({ title? })`.
+- `Panel.Row({ gap?, width?, align?, justify? })`; `Panel.Column({ gap?, width?, align? })`;
+  `Panel.Field({ label?, icon? })`.
+- `Panel.Text({ content?, variant?, tone? })` and
+  `Panel.Callout({ message?, tone? })` use props, not JSX text children.
+- `Panel.Popover({ open?, onOpenChange? })`, `Panel.PopoverTrigger`, and
+  `Panel.PopoverContent({ align?, side? })` compose a popover.
+- `Panel.Menu({ items?, value?, align?, onSelect? })` renders a host dropdown.
+
+Basic controls:
+
+- `Panel.TextField({ kind?, value?, mixed?, placeholder?, min?, max?, step?, icon?,
+  disabled?, trailingMenu?, onChange?, onCommit?, onTrailingSelect? })`. Event values are
+  strings; parse numeric text when necessary.
+- `Panel.SelectField({ value?, options?, placeholder?, mixed?, disabled?, onChange? })`.
+- `Panel.ToggleGroup({ value?, options?, mixed?, disabled?, onChange? })`.
+- `Panel.SwitchField({ checked?, mixed?, label?, disabled?, onChange? })`.
+- `Panel.Button({ label?, icon?, variant?, size?, disabled?, onClick? })`.
+- `Panel.SliderField({ value?, min?, max?, step?, mixed?, disabled?, onChange?,
+  onCommit? })`.
+- `Panel.ResetAffordance({ show?, label?, onReset?, children? })`.
+
+Host-integrated composites:
+
+- `Panel.ColorField({ value?, mixed?, mixedLabel?, disabled?, onChange?, onDragStart?,
+  onCommit?, onDiscard? })`.
+- `Panel.ColorPicker({ color?, opacity?, onColorChange?, onOpacityChange?, onDragStart?,
+  onDragEnd?, onDiscard? })`.
+- `Panel.GradientStops({ stops?, selectedStopId?, onSelect?, onAddStop?, onMoveStop?,
+  onRemoveStop?, onDragStart?, onDragEnd?, onDiscard? })`.
+- `Panel.Swatch({ color?, imageUrl? })`; `Panel.ImageField({ url?, resizeMode?, onPick?,
+  onResizeModeChange?, onClear? })`.
+- `Panel.AlignmentGrid({ flexDirection?, alignItems?, justifyContent?, mixed?, onChange? })`.
+- `Panel.DimensionField({ axis?, mode?, value?, label?, mixed?, disabled?, computed?,
+  onChange?, onCommit?, onModeChange? })`.
+- `Panel.FillField({ label?, backgroundType?, isTypeMixed?, backgroundColor?, gradient?,
+  selectedStopIndex?, image?, open?, onTypeChange?, onColorChange?, onGradientChange?,
+  onStopColorChange?, onStopPositionChange?, onAddStop?, onAddStopAt?, onRemoveStop?,
+  onSelectStop?, onImageUrlChange?, onImageResizeModeChange?, onGestureStart?, onCommit?,
+  onDiscard?, onOpenChange? })`. Keep at most eight handlers on one node; normally use the
+  write-bearing set `onTypeChange`, `onColorChange`, `onGradientChange`,
+  `onImageUrlChange`, `onImageResizeModeChange`, `onGestureStart`, `onCommit`, and
+  `onDiscard`.
+- `Panel.VariableField({ variableId?, variableName?, variableType?, allowedKinds?, label?,
+  onBind?, onUnbind?, onCreate? })`.
+- `Panel.ActionEditorField({ value?, variables?, productVariables?, payloadFields?,
+  onChange? })`.
+- `Panel.ProductField({ productId?, placeholder?, disabled?, label?, onChange? })`.
+- `Panel.PropField({ name })` expands one manifest prop through the full host editor.
+- `Panel.DefaultProps({ exclude? })` expands all manifest props except the exclusions.
+
+Composite callbacks do not grant extra host authority. In particular, `VariableField` and
+`ActionEditorField` only emit their declared callbacks; use host-expanded prop rows for
+actual component prop binding, localization, reset, and product selection.
+
+Use only these icon tokens:
+`w`, `h`, `a`, `plus`, `minus`, `x`, `trash`, `pencil`, `search`, `settings`, `info`,
+`alert`, `image`, `imagePlus`, `pipette`, `percent`, `diamond`, `square`, `squareDashed`,
+`squareRoundCorner`, `squareRoundCornerTopLeft`, `squareRoundCornerBottomLeft`,
+`squareRoundCornerBottomRight`, `squareDashedTopSolid`, `squareDashedTopSolidLeft`,
+`squareDashedTopSolidRight`, `squareDashedTopSolidBottom`, `type`, `component`, `code`,
+`eye`, `paintbrush`, `chevronDown`, `chevronRight`, `chevronUp`, `arrowDown`,
+`arrowRight`, `arrowUpCircle`, `rotateCw`, `rotateCcw`, `flipHorizontal`, `undo`, `redo`,
+`save`, `fullscreen`, `scan`, `vault`, `panelLeftDashed`, `panelRightDashed`,
+`panelTopDashed`, `panelBottomDashed`, `panelLeftRightDashed`, `panelTopBottomDashed`,
+`betweenHorizontalStart`, `user`, `users`, `externalLink`, and `mousePointer`.
+
+Panel limits are 256 KiB per tree, 2,000 nodes, depth 32, 4,096 characters per string,
+256 options per select/toggle/menu, 64 gradient stops, eight event names per node, and
+32 KiB per emitted prop value. The host also validates values against the component
+manifest, rejects unknown/read-only/bound props, limits arrays to 200 items, rate-limits
+the intent stream, and coalesces live writes per prop per frame.
+
+Panel trees are coalesced to the latest revision once per animation frame. The sandbox has
+a 6-second init deadline, a 2.5-second heartbeat, allows two missed pongs, kills tree
+streams above 120/second, caps intents at 240/second, and permits two automatic restarts
+with 400 ms backoff. A terminal failure switches to the default prop panel with a retry
+control.
+
+### Panel gesture pattern
+
+Use committed writes for text/select/switch/button edits. For continuous controls, send
+live values during movement, a final committed value on release, and cancel on abort:
+
+```tsx
+<Panel.SliderField
+  value={ctx.props.radius.value}
+  mixed={ctx.props.radius.mixed}
+  min={0}
+  max={32}
+  onChange={(value) => ctx.props.radius.set(value, { gesture: "live" })}
+  onCommit={(value) => ctx.props.radius.set(value, { gesture: "commit" })}
+/>
+```
+
+The first live write opens a host draft; live writes are transient/coalesced, and the end
+commits one undoable edit. `cancel()` discards the in-flight draft. A selection change,
+session failure, or 10 seconds of inactivity also discards an unfinished gesture. Keep the
+control's display value derived from the latest `ctx` snapshot; the host protects an active
+control from stale sandbox echoes during a drag.
+
+## Runtime animation and gestures
+
+### Motion targets, variants, and transitions
+
+Every motion-capable primitive (`View`, `Text`, `Pressable`, `ScrollView`, and `Image`)
+accepts `initial`, `animate`, `variants`, `transition`, `whileInView`, `viewport`,
+`onAnimationStart`, and `onAnimationComplete`. `Pressable` also accepts
+`whilePress`/`whileFocus`; draggable primitives accept `whileDrag`.
+
+Motion targets support only `x`, `y`, `scale`, `scaleX`, `scaleY`, `rotate` (degrees),
+`opacity`, `backgroundColor`, and `transformOrigin` (`{ x, y }` fractions of the box).
+Put these keys directly in `style` for motion values or in a target. Do not use a CSS
+`transform` string.
+
+Use inline targets or named variants:
+
+```tsx
+<View
+  variants={{ hidden: { opacity: 0, y: 20 }, shown: { opacity: 1, y: 0 } }}
+  initial="hidden"
+  animate="shown"
+  transition={{
+    default: { type: "spring", stiffness: 220, damping: 24 },
+    opacity: { type: "tween", duration: 0.2, ease: "easeOut" },
+  }}
+/>
+```
+
+A variant label array merges labels left-to-right. Literal motion style is the base;
+`animate` overrides it at rest. Active interaction targets overlay in this order:
+in-view, press, focus, drag, so later states win conflicting keys. `initial={false}` mounts
+at rest. Define a numeric value in both start and target states if it must interpolate;
+non-numeric motion values such as colors and transform origins currently snap.
+
+Transforms compile in this fixed order: translate (`x`/`y`), rotate, `scale`, `scaleX`,
+then `scaleY`.
+
+Transitions use seconds. `type` is `tween` or `spring`; shared fields are `delay`,
+`duration`, `ease` (`linear`, `easeIn`, `easeOut`, `easeInOut`), `stiffness`, `damping`,
+`mass`, `velocity`, `restDelta`, and `restSpeed`. Defaults are a 0.3-second linear tween,
+or a spring with stiffness 170, damping 26, mass 1, rest delta/speed 0.01. A transition may
+contain per-key overrides plus `default`. `MotionConfig` supplies inherited transition and
+`reducedMotion: "user" | "always" | "never"`; reduced motion jumps to targets and still
+fires completion. `useMotionConfig()` reads the inherited policy/default transition, and
+`useReducedMotion()` resolves it to a boolean using the platform preference. An interrupted
+animation is canceled and does not fire its old completion callback.
+
+Static previews never run live animation. They serialize the deterministic rest state
+(`animate`, else `initial`, over literal motion style), omit live motion values, render
+Pressable children unpressed, and flatten scroll content. Design the rest state to be
+complete and readable.
+
+The `AnimationControls` type is reserved for imperative control, but there is currently no
+author-facing controls factory/binding. Use declarative `animate`/variants or motion values.
+
+### Motion values
+
+- `useMotionValue(initial)` creates a stable mutable value whose updates bypass React.
+- `motionValue(initial)` creates one outside React; `get`, `getPrevious`, `set`, and
+  `on("change" | "renderRequest", listener)` form its protocol.
+- `useMotionValueEvent(value, event, listener)` subscribes without React frame renders.
+- `useTransform(source, fn)` derives any mapped value. The numeric range overload maps
+  equal-length input/output arrays and clamps to the covered range.
+- `useSpring(source, transition)` follows a numeric source with an interruptible spring.
+- `useVelocity(source)` returns logical units per second.
+
+Pass a motion value through a supported motion style key:
+
+```tsx
+const { scrollYProgress } = useScroll();
+const opacity = useTransform(scrollYProgress, [0, 0.5, 1], [0.4, 1, 0.4]);
+return <View style={{ opacity }} />;
+```
+
+A live motion value drives a key only when the resolved animation/interaction target does
+not also define that key. Target values win; reduced-motion mode also suppresses live style
+updates. Static previews omit motion values entirely.
+
+### Scroll and in-view
+
+Create renderer-neutral refs with `useMotionRef()` and attach them to motion-capable primitives.
+`useScroll({ container?, target?, axis?, offset?, trackLayout? })` returns `scrollX`,
+`scrollY`, `scrollXProgress`, and `scrollYProgress` motion values. Without a container it
+tracks the root window. Without a target, progress is total scroll progress. With a target,
+the default offsets are `["start end", "end start"]`; anchors accept `start`, `center`,
+`end`, percentages, or numeric strings. Use `trackLayout` when changing layout affects the
+measurement. `axis` defaults to `y`; with a target, only the selected axis's progress value
+is updated.
+
+`useInView(ref, { root?, once?, amount?, margin? })` returns a boolean. `amount` is a
+number, `some` (1% threshold), or `all`; `once` stays true after first entry. `whileInView`
+uses the same viewport contract. Omitted `amount` currently uses a zero threshold, which
+counts zero overlap as in view; pass `"some"` or a positive number for actual intersection.
+The current DOM adapter accepts `margin` in the public shape but does not apply it; do not
+rely on margin-sensitive behavior.
+
+`ScrollView` refs additionally expose `getScrollMetrics()`, `scrollTo({ x?, y? })`, and
+`subscribeScroll`. Measurements use the untransformed layout box.
+
+### Drag gestures
+
+Drag is supported only by `View`, `Image`, and `Pressable`.
+
+- `drag={true}` allows both axes. `"x"` or `"y"` limits which dominant direction may
+  claim the gesture; in the current DOM adapter, also enable `dragDirectionLock` to keep
+  post-claim displacement strictly on that axis.
+- `dragConstraints` accepts `{ left?, right?, top?, bottom? }` relative to the starting
+  motion position, or a `MotionRef` whose measured box bounds the draggable node.
+- `dragElastic` is `0.35` by default, `false` for no overshoot, or a numeric factor.
+- `dragMomentum` defaults true. Release projects velocity by 0.2 seconds, clamps it to
+  constraints, and animates to the result with `{ type: "spring", ...dragTransition }`;
+  supplied transition fields, including `type`, override the default. Set false to stop at
+  the release position.
+- `dragDirectionLock` locks to the dominant axis after movement begins.
+- `gesturePriority="auto"` lets a matching-axis ancestor ScrollView win; a cross-axis drag
+  wins. Use `"drag"` only when the draggable must steal a matching-axis scroll gesture.
+- `dragListener={false}` disables direct pointer start. It also enables registration of a
+  supplied `dragControls={useDragControls()}`. `controls.start(event, options)` requires a
+  `MotionGestureEvent`; options are `{ snapToCursor?, distanceThreshold? }`. Authored
+  primitives expose no raw pointer-down event and the current DOM adapter ignores both
+  options, so prefer the built-in listener.
+- `onDragStart`, `onDrag`, and `onDragEnd` receive a platform-neutral event and `DragInfo`:
+  current `point`, last-event `delta`, start-relative `offset`, and logical-units-per-second
+  `velocity`.
+
+A drag claims the gesture after roughly three logical pixels. On a Pressable, claiming a
+drag clears the pressed state and suppresses the following click. `whilePress` begins on
+pointer down and clears on leave/up/cancel; `whileFocus` follows keyboard focus. Enter and
+Space activate a focused Pressable. There is no `whileHover`, keyframe/timeline API, layout
+animation, arbitrary transform string, or draggable Text/ScrollView in the current surface.
+
+## Final verification checklist
+
+- Keep the component as small as the code-only behavior permits.
+- Use a valid, unique path and default-export the `defineComponent` result.
+- Declare every editable input and emitted event; avoid reserved `id`.
+- Provide preview fixtures for product/runtime branches and use no more than one Slot.
+- Use only supported primitives, style keys, motion keys, imports, and panel nodes.
+- Preserve mixed/bound semantics and use gesture-aware panel writes correctly.
+- Respect reduced motion and make the static rest state complete.
+- Re-read compiler diagnostics instead of guessing, inspect the rendered paywall PNG, and
+  finish or revert the edit session explicitly.
diff --git a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
index dd53b58f5..b49b25e95 100644
--- a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
+++ b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
@@ -303,14 +303,15 @@ Layout is flexbox, exactly like CSS / React Native:
 
 ## Tool usage
 
-- **Open one change set.** Discover the target with `list_paywalls`, then call
-  `begin_paywall_edit({ slug })`. Pass the returned `changeSetId` and the same
-  `slug` to every mutation and preview call. Finish it after visual QA, or
-  revert it; never abandon an active change set.
+- **Open your edit session.** Discover the target with `list_paywalls`, then call
+  `begin_paywall_edit({ paywallId })`. Pass only the returned `editSessionId` to every
+  scoped call. Every participant gets an independent Mimic connection, so multiple users
+  and agents may edit the same paywall concurrently. Finish yours after visual QA, or
+  revert it; never abandon an active session.
 - **`get_paywall` first.** Learn the current tree and ids before editing. Pass
   `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes return
   as `{ id, type, name?, childCount }` stubs you expand with a follow-up
-  `get_paywall({ slug, nodeId })`). Cheaper than pulling the whole document every
+  `get_paywall({ editSessionId, nodeId })`). Cheaper than pulling the whole document every
   turn.
 - **`edit_paywall` applies an ATOMIC batch.** Every op lands or none does. On
   success you get the minted ids for `insert`/`replaceChildren` ops (keyed by op
@@ -700,29 +701,31 @@ where `period` is `"month" | "year" | "week" | "lifetime"`.
 
 ## Tool vocabulary
 
-- `list_paywalls()` — discover paywall slugs in the project.
-- `begin_paywall_edit({ slug })` — capture the revert baseline and return a
-  `changeSetId`.
-- `get_paywall({ slug, nodeId?, depth? })` — read cleaned document JSON (subtree
+- `list_paywalls()` — discover stable paywall ids (plus display slugs) in the project.
+- `begin_paywall_edit({ paywallId })` — capture the revert baseline and return a
+  `editSessionId`.
+- `get_paywall({ editSessionId, nodeId?, depth? })` — read cleaned document JSON (subtree
   + depth for economy).
-- `get_components({ slug })` — list every placeable catalog, local, and builtin
+- `get_components({ editSessionId })` — list every placeable catalog, local, and builtin
   component with its authoring contract.
-- `read_component({ slug, path })` — read a local code component's TSX source.
-- `edit_paywall({ slug, changeSetId, edits })` — apply an atomic batch of document
+- `read_component({ editSessionId, path })` — read a local code component's TSX source.
+- `edit_paywall({ editSessionId, edits })` — apply an atomic batch of document
   ops (returns minted ids or per-op errors).
-- `duplicate_subtree({ slug, changeSetId, nodeId, parentId, index? })` — clone a
+- `duplicate_subtree({ editSessionId, nodeId, parentId, index? })` — clone a
   visual subtree with fresh ids.
-- `write_component({ slug, changeSetId, path, source })` — create or replace a
+- `write_component({ editSessionId, path, source })` — create or replace a
   compiled code component.
-- `rename_component({ slug, changeSetId, fromPath, toPath })` — move a component
+- `rename_component({ editSessionId, fromPath, toPath })` — move a component
   and re-point its instances.
-- `delete_component({ slug, changeSetId, path })` — delete a component; existing
+- `delete_component({ editSessionId, path })` — delete a component; existing
   instances degrade to placeholders.
-- `get_paywall_preview({ slug, changeSetId })` — render the version-bound PNG
+- `get_paywall_preview({ editSessionId })` — render the version-bound PNG
   used for visual QA.
-- `finish_paywall_edit({ slug, changeSetId, reviewedDocumentSignature, verdict,
+- `finish_paywall_edit({ editSessionId, reviewedDocumentSignature, verdict,
   unresolvedIssues: [] })` — accept a visually verified edit.
-- `revert_paywall_edit({ changeSetId })` — restore the captured baseline.
+- `revert_paywall_edit({ editSessionId })` — restore the captured baseline when that can
+  be done without overwriting interleaved participant work. A mutation-free session closes
+  without changing the document.
 
 Read (`get_paywall`/`get_components`) before you write, use the minted ids the
 edits return, and trust the field/value errors the validator gives you.
diff --git a/packages/core/src/services/index.ts b/packages/core/src/services/index.ts
index 44524de54..a05063d3b 100644
--- a/packages/core/src/services/index.ts
+++ b/packages/core/src/services/index.ts
@@ -102,7 +102,7 @@ export * from "./paywalls/MimicHost.ts";
 export * from "./paywalls/PaywallService.ts";
 export * from "./paywallWorkspace/ComponentCompiler.ts";
 export * from "./paywallWorkspace/ComponentManifestCacheService.ts";
-export * from "./paywallWorkspace/PaywallEditChangeSetService.ts";
+export * from "./paywallWorkspace/PaywallEditSessionService.ts";
 export * from "./paywallWorkspace/PaywallWorkspaceService.ts";
 export * from "./perkGrants/PerkGrantService.ts";
 export * from "./perks/PerkService.ts";
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
index 9bdb93ffb..0cfdee84d 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
@@ -1,6 +1,21 @@
+import { Effect, Layer } from "effect";
 import { describe, expect, it } from "vite-plus/test";
 
-import { collectDeployedComponentContentHashes } from "./PaywallThumbnailService.ts";
+import { Db } from "@voidhash/db";
+import { hashSource } from "@voidhash/paywall-workspace";
+
+import { PaywallArtifactStore } from "../paywallDeploys/PaywallArtifactStore.ts";
+import { MimicHost } from "../paywalls/MimicHost.ts";
+import { ComponentCompiler } from "../paywallWorkspace/ComponentCompiler.ts";
+import { ComponentManifestCacheService } from "../paywallWorkspace/ComponentManifestCacheService.ts";
+import { PublicFileStore } from "../storage/PublicFileStore.ts";
+import { SnapshotImageRenderer } from "./SnapshotImageRenderer.ts";
+
+import {
+  collectDeployedComponentContentHashes,
+  collectLocalComponentSources,
+  PaywallThumbnailService,
+} from "./PaywallThumbnailService.ts";
 
 describe("collectDeployedComponentContentHashes", () => {
   it("collects distinct non-empty contentHashes of deployed component nodes depth-first", () => {
@@ -28,7 +43,7 @@ describe("collectDeployedComponentContentHashes", () => {
     const snapshot = {
       type: "root",
       children: [
-        // local code component — no served preview tree in v1
+        // local code component — compiled from its embedded definition instead
         { type: "component", data: { contentHash: "", componentSource: "local" }, children: [] },
         { type: "text", data: { text: "hi" }, children: [] },
         { type: "component", data: {}, children: [] },
@@ -43,3 +58,184 @@ describe("collectDeployedComponentContentHashes", () => {
     expect(collectDeployedComponentContentHashes(null).size).toBe(0);
   });
 });
+
+describe("collectLocalComponentSources", () => {
+  it("collects code component paths and sources from the document library", () => {
+    const snapshot = {
+      type: "root",
+      children: [
+        {
+          type: "library",
+          children: [
+            {
+              type: "codeComponent",
+              data: { path: "components/product-list.tsx", source: "export default productList" },
+              children: [],
+            },
+            {
+              type: "codeComponent",
+              data: {
+                path: "components/purchase-button.tsx",
+                source: "export default purchaseButton",
+              },
+              children: [],
+            },
+          ],
+        },
+      ],
+    };
+
+    expect(collectLocalComponentSources(snapshot)).toEqual([
+      { path: "components/product-list.tsx", source: "export default productList" },
+      { path: "components/purchase-button.tsx", source: "export default purchaseButton" },
+    ]);
+  });
+
+  it("ignores malformed definitions and tolerates a missing snapshot", () => {
+    expect(
+      collectLocalComponentSources({
+        type: "root",
+        children: [
+          { type: "codeComponent", data: { path: "components/missing-source.tsx" } },
+          { type: "codeComponent", data: { source: "missing path" } },
+        ],
+      }),
+    ).toEqual([]);
+    expect(collectLocalComponentSources(undefined)).toEqual([]);
+  });
+});
+
+describe("PaywallThumbnailService local components", () => {
+  it("passes cached editor preview trees to the thumbnail renderer", async () => {
+    const paywallId = "pw_local";
+    const projectId = "proj_local";
+    const componentPath = "components/product-list.tsx";
+    const componentSource = "export default productList";
+    const sourceHash = hashSource(componentSource);
+    const previewTrees = {
+      default: {
+        root: { type: "text", style: {}, text: "Yearly" },
+        state: "default",
+        treeVersion: 1,
+      },
+    };
+    const snapshot = {
+      type: "root",
+      children: [
+        {
+          type: "screen",
+          children: [
+            {
+              type: "component",
+              data: {
+                componentPath,
+                componentSource: "local",
+                contentHash: "",
+              },
+              children: [],
+            },
+          ],
+        },
+        {
+          type: "library",
+          children: [
+            {
+              type: "codeComponent",
+              data: { path: componentPath, source: componentSource },
+              children: [],
+            },
+          ],
+        },
+      ],
+    };
+    const paywall = {
+      id: paywallId,
+      projectId,
+      thumbnailSeq: null,
+      thumbnailUrl: null,
+    };
+    let rendererInput: unknown;
+    let compileCalls = 0;
+
+    const db = {
+      query: {
+        paywalls: {
+          findFirst: () => Effect.succeed(paywall),
+        },
+      },
+      update: () => ({
+        set: () => ({
+          where: () => ({
+            returning: () => Effect.succeed([{ id: paywallId }]),
+          }),
+        }),
+      }),
+    };
+    const dependencies = Layer.mergeAll(
+      Layer.succeed(Db, db as never),
+      Layer.succeed(MimicHost, {
+        getPaywallSnapshot: () => Effect.succeed(snapshot),
+      } as never),
+      Layer.succeed(PaywallArtifactStore, {
+        bucketName: "test",
+        getObject: () => Effect.succeed(null),
+        head: () => Effect.succeed(null),
+        putObject: () => Effect.void,
+      }),
+      Layer.succeed(ComponentCompiler, {
+        compileCheck: () => Effect.succeed({ status: "unavailable" as const }),
+        compileAndExtract: () => {
+          compileCalls += 1;
+          return Effect.succeed({ status: "unavailable" as const });
+        },
+      }),
+      Layer.succeed(ComponentManifestCacheService, {
+        getMany: (hashes) =>
+          Effect.sync(() => {
+            expect(hashes).toEqual([sourceHash]);
+            return new Map([
+              [
+                sourceHash,
+                {
+                  diagnostics: [],
+                  manifest: null,
+                  previewTrees,
+                  sourceHash,
+                  status: "ready" as const,
+                },
+              ],
+            ]);
+          }),
+        record: () => Effect.succeed(undefined),
+      }),
+      Layer.succeed(PublicFileStore, {
+        publicBaseUrl: "https://files.test",
+        publicUrl: (key) => `https://files.test/files/${key}`,
+        putObject: () => Effect.void,
+        getObject: () => Effect.succeed(null),
+        deleteObject: () => Effect.void,
+      }),
+      Layer.succeed(SnapshotImageRenderer, {
+        render: (input) =>
+          Effect.sync(() => {
+            rendererInput = input;
+            return new Uint8Array([1, 2, 3]);
+          }),
+      }),
+    );
+    const layer = PaywallThumbnailService.layer.pipe(Layer.provide(dependencies));
+
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallThumbnailService;
+        yield* service.handleDocumentIdle({ documentId: paywallId, seq: 12 });
+      }).pipe(Effect.provide(layer)),
+    );
+
+    expect(compileCalls).toBe(0);
+    expect(rendererInput).toMatchObject({
+      localComponentTrees: { [componentPath]: previewTrees },
+      snapshot,
+    });
+  });
+});
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
index b762cd864..3767d12d4 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
@@ -1,6 +1,7 @@
 import { Cause, Context, Effect, Layer, Predicate, Schema } from "effect";
 
-import { Db, and, eq, isNull, lt, or, paywalls } from "@voidhash/db";
+import { Db, and, eq, isNull, lt, or, paywalls, type Paywall } from "@voidhash/db";
+import { hashSource } from "@voidhash/paywall-workspace";
 
 import {
   derivePaywallThumbnailKey,
@@ -10,6 +11,8 @@ import {
 import { componentServingPreviewKey } from "../paywallDeploys/PaywallDeployManifest.ts";
 import { PaywallArtifactStore } from "../paywallDeploys/PaywallArtifactStore.ts";
 import { MimicHost } from "../paywalls/MimicHost.ts";
+import { ComponentCompiler } from "../paywallWorkspace/ComponentCompiler.ts";
+import { ComponentManifestCacheService } from "../paywallWorkspace/ComponentManifestCacheService.ts";
 import { PublicFileStore } from "../storage/PublicFileStore.ts";
 import { SnapshotImageRenderer } from "./SnapshotImageRenderer.ts";
 
@@ -22,9 +25,8 @@ const THUMBNAIL_DEVICE_SCALE_FACTOR = 2;
 const THUMBNAIL_PREVIEW_STATE = "default";
 
 /**
- * Catch-all error raised by {@link PaywallThumbnailService.handleDocumentIdle}
- * for real failures (snapshot fetch, render/screenshot, store, or DB write) so
- * the queue consumer can decide whether to log-and-ack or retry. A missing
+ * Catch-all error raised by the paywall-thumbnail render entry points for real
+ * failures (snapshot fetch, render/screenshot, store, or DB write). A missing
  * paywall row (non-paywall documents on the generic idle queue) and a stale
  * `seq` are NOT errors — they succeed as no-ops.
  */
@@ -45,7 +47,7 @@ const isSnapshotNodeLike = (value: unknown): value is SnapshotNodeLike =>
 /**
  * Collects the distinct non-empty `contentHash`es of the snapshot's deployed
  * `component` nodes (depth-first). Local code components pin a sentinel
- * `contentHash: ""` and are skipped — they have no served preview trees in v1.
+ * `contentHash: ""` and are handled separately by the component compiler.
  */
 export const collectDeployedComponentContentHashes = (snapshot: unknown): ReadonlySet<string> => {
   const hashes = new Set<string>();
@@ -67,19 +69,46 @@ export const collectDeployedComponentContentHashes = (snapshot: unknown): Readon
   return hashes;
 };
 
+/** Collects local component definitions embedded in a paywall document library. */
+export const collectLocalComponentSources = (
+  snapshot: unknown,
+): ReadonlyArray<{ readonly path: string; readonly source: string }> => {
+  const components: Array<{ readonly path: string; readonly source: string }> = [];
+  const visit = (value: unknown): void => {
+    if (!isSnapshotNodeLike(value)) {
+      return;
+    }
+    if (value.type === "codeComponent") {
+      const data = value.data as { readonly path?: unknown; readonly source?: unknown } | undefined;
+      if (typeof data?.path === "string" && typeof data.source === "string") {
+        components.push({ path: data.path, source: data.source });
+      }
+    }
+    for (const child of value.children ?? []) {
+      visit(child);
+    }
+  };
+  visit(snapshot);
+  return components;
+};
+
 /**
  * `PaywallThumbnailService` owns the render vertical of the paywall-thumbnail
- * feature: given a `{documentId, seq}` from the mimic idle queue (document id =
- * paywall id), it renders the current document snapshot to a PNG and publishes
- * it, gated by a monotonic `seq` guard so a late render never clobbers a newer
- * one.
+ * feature: it renders a mimic document snapshot to a PNG and publishes it,
+ * gated by a monotonic `seq` guard so a late render never clobbers a newer one.
+ * Queue consumers call `handleDocumentIdle`; list-page backfills call
+ * `renderCurrent` so paywalls created before idle notifications were available
+ * (or whose best-effort queue message was exhausted) can recover.
  *
  * The queue is generic — non-paywall documents may arrive — so a missing
  * paywall row is a silent no-op. `Db`, `MimicHost`, `PaywallArtifactStore`,
  * `PublicFileStore`, and {@link SnapshotImageRenderer} are provided by the
  * application root; all infra deps are abstract ports, so the service stays
- * infra-pure. The `SnapshotImageRenderer` adapter itself depends on the
- * {@link HtmlScreenshot} port, which the application root wires alongside it.
+ * infra-pure. Local code components reuse renderer-ready trees from
+ * {@link ComponentManifestCacheService}, falling back to
+ * {@link ComponentCompiler} and recording the result on a cache miss. The
+ * `SnapshotImageRenderer` adapter itself depends on the {@link HtmlScreenshot}
+ * port, which the application root wires alongside it.
  */
 export class PaywallThumbnailService extends Context.Service<PaywallThumbnailService>()(
   "PaywallThumbnailService",
@@ -88,6 +117,8 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
       const db = yield* Db;
       const mimicHost = yield* MimicHost;
       const artifactStore = yield* PaywallArtifactStore;
+      const componentCompiler = yield* ComponentCompiler;
+      const componentManifestCache = yield* ComponentManifestCacheService;
       const publicFileStore = yield* PublicFileStore;
       const renderer = yield* SnapshotImageRenderer;
 
@@ -120,113 +151,225 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
           return trees;
         });
 
-      const handleDocumentIdle = Effect.fn("handleDocumentIdle")(
-        function* (input: { readonly documentId: string; readonly seq: number }) {
-          yield* Effect.annotateCurrentSpan("voidhash.paywall.id", input.documentId);
-          yield* Effect.annotateCurrentSpan("voidhash.paywall_thumbnail.seq", input.seq);
+      const compileLocalComponentTrees = (snapshot: unknown) =>
+        Effect.gen(function* () {
+          const trees: Record<string, Record<string, unknown>> = {};
+          const components = collectLocalComponentSources(snapshot);
+          const hashes = components.map((component) => hashSource(component.source));
+          const cached = yield* componentManifestCache.getMany(hashes);
 
-          const paywall = yield* db.query.paywalls.findFirst({ where: { id: input.documentId } });
-          if (!paywall) {
-            // Generic idle queue: non-paywall documents are expected — no-op.
-            yield* Effect.logDebug(
-              `Idle document ${input.documentId} is not a paywall; skipping thumbnail render`,
-            );
-            return;
-          }
-          yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
+          for (const component of components) {
+            const sourceHash = hashSource(component.source);
+            const cachedTrees = cached.get(sourceHash)?.previewTrees;
+            if (cachedTrees !== null && cachedTrees !== undefined) {
+              trees[component.path] = { ...cachedTrees };
+              continue;
+            }
 
-          // Idempotency guard: a render at or beyond this seq already landed.
-          if (paywall.thumbnailSeq !== null && paywall.thumbnailSeq >= input.seq) {
-            yield* Effect.logDebug(
-              `Paywall ${paywall.id} thumbnail already at seq ${paywall.thumbnailSeq} >= ${input.seq}; skipping`,
-            );
-            return;
+            const result = yield* componentCompiler.compileAndExtract(component.source);
+            if (result.status === "unavailable") {
+              return yield* Effect.fail(
+                new PaywallThumbnailServiceError({
+                  message: `Local component compiler unavailable for ${component.path}`,
+                }),
+              );
+            }
+            if (result.status === "error") {
+              return yield* Effect.fail(
+                new PaywallThumbnailServiceError({
+                  message: `Local component ${component.path} failed to compile: ${result.diagnostics
+                    .map((diagnostic) => diagnostic.message)
+                    .join("; ")}`,
+                }),
+              );
+            }
+            trees[component.path] = { ...result.previewTrees };
+            yield* componentManifestCache.record({
+              sourceHash,
+              status: "ready",
+              manifest: result.manifest,
+              previewTrees: result.previewTrees,
+            });
           }
+          return trees;
+        });
 
-          const snapshot = yield* mimicHost.getPaywallSnapshot(paywall.id);
+      const renderPaywall = Effect.fn("renderPaywallThumbnail")(function* (input: {
+        readonly paywall: Paywall;
+        readonly seq: number;
+        readonly snapshot: unknown;
+      }) {
+        const { paywall, seq, snapshot } = input;
+
+        // Idempotency guard: a render at or beyond this seq already landed.
+        if (
+          paywall.thumbnailSeq !== null &&
+          (paywall.thumbnailSeq > seq ||
+            (paywall.thumbnailSeq === seq && paywall.thumbnailUrl !== null))
+        ) {
+          yield* Effect.logDebug(
+            `Paywall ${paywall.id} thumbnail already at seq ${paywall.thumbnailSeq} >= ${seq}; skipping`,
+          );
+          return;
+        }
 
-          const contentHashes = collectDeployedComponentContentHashes(snapshot);
-          const componentTrees = yield* fetchComponentTrees(contentHashes);
-
-          const png = yield* renderer.render({
-            componentTrees,
-            localComponentTrees: {},
-            deviceScaleFactor: THUMBNAIL_DEVICE_SCALE_FACTOR,
-            height: THUMBNAIL_HEIGHT,
-            snapshot,
-            width: THUMBNAIL_WIDTH,
-          });
-
-          const key = derivePaywallThumbnailKey(paywall.projectId, paywall.id, input.seq);
-          yield* publicFileStore.putObject({ body: png, contentType: "image/png", key });
-          const url = publicFileStore.publicUrl(key);
-
-          // Race-guarded write: only advance if no newer render beat us to the
-          // row. A concurrent render for a higher seq wins; we delete the object
-          // we just wrote and stop.
-          const updated = yield* db
-            .update(paywalls)
-            .set({ thumbnailSeq: input.seq, thumbnailUrl: url })
-            .where(
-              and(
-                eq(paywalls.id, paywall.id),
-                or(isNull(paywalls.thumbnailSeq), lt(paywalls.thumbnailSeq, input.seq)),
+        const contentHashes = collectDeployedComponentContentHashes(snapshot);
+        const componentTrees = yield* fetchComponentTrees(contentHashes);
+        const localComponentTrees = yield* compileLocalComponentTrees(snapshot);
+
+        const png = yield* renderer.render({
+          componentTrees,
+          localComponentTrees,
+          deviceScaleFactor: THUMBNAIL_DEVICE_SCALE_FACTOR,
+          height: THUMBNAIL_HEIGHT,
+          snapshot,
+          width: THUMBNAIL_WIDTH,
+        });
+
+        const key = derivePaywallThumbnailKey(paywall.projectId, paywall.id, seq);
+        yield* publicFileStore.putObject({ body: png, contentType: "image/png", key });
+        const url = publicFileStore.publicUrl(key);
+
+        // Race-guarded write: only advance if no newer render beat us to the
+        // row. A concurrent render for a higher seq wins; we delete the object
+        // we just wrote and stop.
+        const updated = yield* db
+          .update(paywalls)
+          .set({ thumbnailSeq: seq, thumbnailUrl: url })
+          .where(
+            and(
+              eq(paywalls.id, paywall.id),
+              or(
+                isNull(paywalls.thumbnailSeq),
+                lt(paywalls.thumbnailSeq, seq),
+                and(eq(paywalls.thumbnailSeq, seq), isNull(paywalls.thumbnailUrl)),
               ),
-            )
-            .returning({ id: paywalls.id });
+            ),
+          )
+          .returning({ id: paywalls.id });
 
-          if (updated.length === 0) {
-            yield* Effect.logDebug(
-              `Paywall ${paywall.id} thumbnail seq ${input.seq} lost the write race; discarding`,
+        if (updated.length === 0) {
+          yield* Effect.logDebug(
+            `Paywall ${paywall.id} thumbnail seq ${seq} lost the write race; discarding`,
+          );
+          yield* publicFileStore
+            .deleteObject(key)
+            .pipe(
+              Effect.catchCause((cause) =>
+                Effect.logWarning(
+                  `Failed to delete superseded thumbnail object ${key}: ${Cause.pretty(cause)}`,
+                ),
+              ),
             );
+          return;
+        }
+
+        // Best-effort cleanup of the PREVIOUS thumbnail object, scoped to keys
+        // we own for this project + paywall.
+        if (
+          isOwnedPaywallThumbnailUrl(
+            paywall.thumbnailUrl,
+            paywall.projectId,
+            paywall.id,
+            publicFileStore.publicBaseUrl,
+          )
+        ) {
+          const previousKey = paywallThumbnailKeyFromUrl(
+            paywall.thumbnailUrl!,
+            paywall.projectId,
+            paywall.id,
+            publicFileStore.publicBaseUrl,
+          );
+          if (previousKey !== null && previousKey !== key) {
             yield* publicFileStore
-              .deleteObject(key)
+              .deleteObject(previousKey)
               .pipe(
                 Effect.catchCause((cause) =>
                   Effect.logWarning(
-                    `Failed to delete superseded thumbnail object ${key}: ${Cause.pretty(cause)}`,
+                    `Failed to delete previous thumbnail object ${previousKey}: ${Cause.pretty(cause)}`,
                   ),
                 ),
               );
-            return;
           }
+        }
+
+        yield* Effect.log(`Rendered thumbnail for paywall ${paywall.id} at seq ${seq}`);
+      });
 
-          // Best-effort cleanup of the PREVIOUS thumbnail object, scoped to keys
-          // we own for this project + paywall.
-          if (
-            isOwnedPaywallThumbnailUrl(
-              paywall.thumbnailUrl,
-              paywall.projectId,
-              paywall.id,
-              publicFileStore.publicBaseUrl,
-            )
-          ) {
-            const previousKey = paywallThumbnailKeyFromUrl(
-              paywall.thumbnailUrl!,
-              paywall.projectId,
-              paywall.id,
-              publicFileStore.publicBaseUrl,
+      const handleDocumentIdle = Effect.fn("handleDocumentIdle")(
+        function* (input: { readonly documentId: string; readonly seq: number }) {
+          yield* Effect.annotateCurrentSpan("voidhash.paywall.id", input.documentId);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_thumbnail.seq", input.seq);
+
+          const paywall = yield* db.query.paywalls.findFirst({ where: { id: input.documentId } });
+          if (!paywall) {
+            // Generic idle queue: non-paywall documents are expected — no-op.
+            yield* Effect.logDebug(
+              `Idle document ${input.documentId} is not a paywall; skipping thumbnail render`,
             );
-            if (previousKey !== null && previousKey !== key) {
-              yield* publicFileStore
-                .deleteObject(previousKey)
-                .pipe(
-                  Effect.catchCause((cause) =>
-                    Effect.logWarning(
-                      `Failed to delete previous thumbnail object ${previousKey}: ${Cause.pretty(cause)}`,
-                    ),
-                  ),
-                );
-            }
+            return;
           }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
 
-          yield* Effect.log(`Rendered thumbnail for paywall ${paywall.id} at seq ${input.seq}`);
+          const snapshot = yield* mimicHost.getPaywallSnapshot(paywall.id);
+          yield* renderPaywall({ paywall, seq: input.seq, snapshot });
         },
         (effect) =>
           effect.pipe(
             Effect.catchTags({
               EffectDrizzleQueryError: (error) =>
                 Effect.fail(new PaywallThumbnailServiceError({ message: String(error.cause) })),
+              ComponentCompilerError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+              ComponentManifestCacheError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+              ComponentManifestInvalidError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+              MimicHostError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+              PaywallArtifactStoreError: (error) =>
+                Effect.fail(
+                  new PaywallThumbnailServiceError({
+                    message: `${error.message}: ${error.cause}`,
+                  }),
+                ),
+              PublicFileStoreError: (error) =>
+                Effect.fail(
+                  new PaywallThumbnailServiceError({
+                    message: `${error.message}: ${error.cause}`,
+                  }),
+                ),
+              SnapshotImageRenderError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+            }),
+          ),
+      );
+
+      const renderCurrent = Effect.fn("renderCurrentPaywallThumbnail")(
+        function* (paywallId: string) {
+          yield* Effect.annotateCurrentSpan("voidhash.paywall.id", paywallId);
+          const paywall = yield* db.query.paywalls.findFirst({ where: { id: paywallId } });
+          if (!paywall) {
+            return;
+          }
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
+
+          yield* mimicHost.ensurePaywallDocument(paywall.id);
+          const document = yield* mimicHost.getPaywallDocument(paywall.id);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_thumbnail.seq", document.version);
+          yield* renderPaywall({ paywall, seq: document.version, snapshot: document.root });
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: String(error.cause) })),
+              ComponentCompilerError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+              ComponentManifestCacheError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+              ComponentManifestInvalidError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
               MimicHostError: (error) =>
                 Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
               PaywallArtifactStoreError: (error) =>
@@ -247,7 +390,7 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
           ),
       );
 
-      return { handleDocumentIdle } as const;
+      return { handleDocumentIdle, renderCurrent } as const;
     }),
   },
 ) {
diff --git a/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts
index c4c2bf2af..ef377c660 100644
--- a/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts
+++ b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.test.ts
@@ -11,6 +11,7 @@ interface Row {
   sourceHash: string;
   status: string;
   manifest: unknown;
+  previewTrees?: unknown;
   diagnostics: unknown;
 }
 
@@ -29,8 +30,9 @@ const readyManifest = {
  * `query.paywallComponentManifests.findMany({ where: { sourceHash: { in } } })`.
  *
  * The `onConflictDoUpdate` fake mirrors the real first-write-wins semantics: a
- * fresh key inserts; on conflict, the row is replaced ONLY when the existing row
- * has `status === "error"` (the `setWhere` gate). A `ready` row is immutable.
+ * fresh key inserts; on conflict, an error row is replaced and a legacy ready
+ * row may fill its missing preview trees. An existing ready derivation remains
+ * otherwise immutable.
  */
 const makeDbLayer = (seed: ReadonlyArray<Row> = []) => {
   const rows = new Map<string, Row>(seed.map((row) => [row.sourceHash, row]));
@@ -42,6 +44,12 @@ const makeDbLayer = (seed: ReadonlyArray<Row> = []) => {
           const existing = rows.get(value.sourceHash);
           if (existing === undefined || existing.status === "error") {
             rows.set(value.sourceHash, value);
+          } else if (
+            existing.status === "ready" &&
+            existing.previewTrees == null &&
+            value.status === "ready"
+          ) {
+            rows.set(value.sourceHash, { ...existing, previewTrees: value.previewTrees });
           }
         }),
     }),
@@ -52,7 +60,9 @@ const makeDbLayer = (seed: ReadonlyArray<Row> = []) => {
     query: {
       paywallComponentManifests: {
         findMany: (args: { where: { sourceHash: { in: string[] } } }) =>
-          Effect.sync(() => args.where.sourceHash.in.flatMap((h) => (rows.has(h) ? [rows.get(h)!] : []))),
+          Effect.sync(() =>
+            args.where.sourceHash.in.flatMap((h) => (rows.has(h) ? [rows.get(h)!] : [])),
+          ),
       },
     },
     __rows: rows,
@@ -78,10 +88,12 @@ describe("ComponentManifestCacheService.record", () => {
       sourceHash: "abc",
       status: "ready",
       manifest: readyManifest,
+      previewTrees: { default: { type: "view" } },
     });
     expect(Exit.isSuccess(await exit)).toBe(true);
     expect(rows.get("abc")?.status).toBe("ready");
     expect(rows.get("abc")?.manifest).toEqual(readyManifest);
+    expect(rows.get("abc")?.previewTrees).toEqual({ default: { type: "view" } });
   });
 
   it("stores diagnostics with a null manifest for an error compile", async () => {
@@ -140,6 +152,30 @@ describe("ComponentManifestCacheService.record", () => {
     expect(rows.get("h")?.manifest).toEqual(readyManifest);
   });
 
+  it("fills preview trees on a legacy ready row without replacing its manifest", async () => {
+    const { layer, rows } = makeDbLayer([
+      { sourceHash: "h", status: "ready", manifest: readyManifest, diagnostics: [] },
+    ]);
+    const conflicting = {
+      ...readyManifest,
+      title: "Other",
+    };
+    const exit = await Effect.runPromiseExit(
+      Effect.gen(function* () {
+        const cache = yield* ComponentManifestCacheService;
+        yield* cache.record({
+          sourceHash: "h",
+          status: "ready",
+          manifest: conflicting,
+          previewTrees: { default: { type: "text" } },
+        });
+      }).pipe(Effect.provide(ComponentManifestCacheService.layer.pipe(Layer.provide(layer)))),
+    );
+    expect(Exit.isSuccess(exit)).toBe(true);
+    expect(rows.get("h")?.manifest).toEqual(readyManifest);
+    expect(rows.get("h")?.previewTrees).toEqual({ default: { type: "text" } });
+  });
+
   it("upgrades an error row to ready", async () => {
     const { layer, rows } = makeDbLayer([
       { sourceHash: "h", status: "error", manifest: null, diagnostics: [{ message: "boom" }] },
@@ -193,6 +229,7 @@ describe("ComponentManifestCacheService.getMany", () => {
       }).pipe(Effect.provide(ComponentManifestCacheService.layer.pipe(Layer.provide(layer)))),
     );
     expect(result.get("ready1")?.manifest).toEqual(readyManifest);
+    expect(result.get("ready1")?.previewTrees).toBeNull();
     expect(result.get("err1")?.status).toBe("error");
     expect(result.get("err1")?.manifest).toBeNull();
     expect(result.has("missing")).toBe(false);
diff --git a/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts
index 4955c8df9..c25f76773 100644
--- a/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts
+++ b/packages/core/src/services/paywallWorkspace/ComponentManifestCacheService.ts
@@ -35,6 +35,7 @@ export interface RecordComponentManifestInput {
   readonly sourceHash: string;
   readonly status: "ready" | "error";
   readonly manifest?: unknown;
+  readonly previewTrees?: Readonly<Record<string, unknown>>;
   readonly diagnostics?: ReadonlyArray<ComponentManifestDiagnostic>;
 }
 
@@ -46,6 +47,7 @@ export interface CachedComponentManifest {
   readonly sourceHash: string;
   readonly status: "ready" | "error";
   readonly manifest: ComponentManifest | null;
+  readonly previewTrees: Readonly<Record<string, unknown>> | null;
   readonly diagnostics: ReadonlyArray<ComponentManifestDiagnostic>;
 }
 
@@ -93,20 +95,24 @@ export class ComponentManifestCacheService extends Context.Service<ComponentMani
       /**
        * Content-addressed, **first-write-wins** upsert of one compile result. A
        * `ready` status validates the supplied manifest against the core schema
-       * before storing; an `error` status stores diagnostics with a null
-       * manifest.
+       * before storing it with the optional renderer-ready preview trees; an
+       * `error` status stores diagnostics with a null manifest and preview.
        *
        * A row that is already `ready` is IMMUTABLE: because the row is keyed by
        * the content hash of the source, any conflicting write carries the same
        * source and so cannot legitimately differ — the `setWhere` clause makes
        * the conflicting UPDATE a no-op, so a later (possibly adversarial) writer
-       * can never replace an existing ready manifest. An `error` row MAY be
-       * upgraded — error→ready once the source finally compiles somewhere, or
-       * error→error to refresh diagnostics.
+       * can never replace an existing ready manifest. A legacy ready row whose
+       * preview trees are still null may be filled once without replacing the
+       * manifest. An `error` row MAY be upgraded — error→ready once the source
+       * finally compiles somewhere, or error→error to refresh diagnostics.
        */
       const record = Effect.fn("componentManifestCache.record")(
         function* (input: RecordComponentManifestInput) {
-          yield* Effect.annotateCurrentSpan("voidhash.paywall.component_source_hash", input.sourceHash);
+          yield* Effect.annotateCurrentSpan(
+            "voidhash.paywall.component_source_hash",
+            input.sourceHash,
+          );
 
           let manifest: ComponentManifest | null = null;
           if (input.status === "ready") {
@@ -134,15 +140,21 @@ export class ComponentManifestCacheService extends Context.Service<ComponentMani
               sourceHash: input.sourceHash,
               status: input.status,
               manifest,
+              previewTrees: input.status === "ready" ? (input.previewTrees ?? null) : null,
               diagnostics,
             })
             .onConflictDoUpdate({
               target: paywallComponentManifests.sourceHash,
-              set: { status: input.status, manifest, diagnostics, updatedAt: new Date() },
-              // First-write-wins: only overwrite an `error` row. The bare table
-              // reference in a Postgres `ON CONFLICT DO UPDATE ... WHERE` names
-              // the existing row, so a `ready` row is left untouched.
-              setWhere: sql`${paywallComponentManifests.status} = 'error'`,
+              set: {
+                status: sql`CASE WHEN ${paywallComponentManifests.status} = 'error' THEN excluded.status ELSE ${paywallComponentManifests.status} END`,
+                manifest: sql`CASE WHEN ${paywallComponentManifests.status} = 'error' THEN excluded.manifest ELSE ${paywallComponentManifests.manifest} END`,
+                previewTrees: sql`CASE WHEN ${paywallComponentManifests.status} = 'error' OR (${paywallComponentManifests.previewTrees} IS NULL AND excluded.status = 'ready') THEN excluded.preview_trees ELSE ${paywallComponentManifests.previewTrees} END`,
+                diagnostics: sql`CASE WHEN ${paywallComponentManifests.status} = 'error' THEN excluded.diagnostics ELSE ${paywallComponentManifests.diagnostics} END`,
+                updatedAt: new Date(),
+              },
+              // Keep a ready derivation immutable, except for filling the new
+              // preview-tree column on rows recorded before it existed.
+              setWhere: sql`${paywallComponentManifests.status} = 'error' OR (${paywallComponentManifests.previewTrees} IS NULL AND excluded.status = 'ready')`,
             });
         },
         (effect) =>
@@ -173,7 +185,8 @@ export class ComponentManifestCacheService extends Context.Service<ComponentMani
             where: { sourceHash: { in: distinct } },
           });
           for (const row of rows) {
-            const diagnostics = (row.diagnostics ?? []) as ReadonlyArray<ComponentManifestDiagnostic>;
+            const diagnostics = (row.diagnostics ??
+              []) as ReadonlyArray<ComponentManifestDiagnostic>;
             if (row.status === "ready") {
               const manifest = yield* decodeManifest(row.manifest).pipe(
                 Effect.map((value): ComponentManifest | null => value),
@@ -186,6 +199,7 @@ export class ComponentManifestCacheService extends Context.Service<ComponentMani
                 sourceHash: row.sourceHash,
                 status: "ready",
                 manifest,
+                previewTrees: row.previewTrees ?? null,
                 diagnostics,
               });
             } else {
@@ -193,6 +207,7 @@ export class ComponentManifestCacheService extends Context.Service<ComponentMani
                 sourceHash: row.sourceHash,
                 status: "error",
                 manifest: null,
+                previewTrees: null,
                 diagnostics,
               });
             }
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
deleted file mode 100644
index 5451e1dca..000000000
--- a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.test.ts
+++ /dev/null
@@ -1,242 +0,0 @@
-import { Db, PaywallEditChangeSetStatus } from "@voidhash/db";
-import { ActionForbiddenError, AuthSession } from "../../domain/auth/Auth.ts";
-import { Effect, Layer } from "effect";
-import { describe, expect, it } from "vite-plus/test";
-
-import {
-  PaywallEditChangeSetService,
-  PaywallEditChangeSetConflictError,
-} from "./PaywallEditChangeSetService.ts";
-import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
-
-interface ChangeSetRow {
-  id: string;
-  agentSessionId: string | null;
-  projectId: string;
-  paywallId: string;
-  paywallSlug: string;
-  baselineTree: unknown;
-  baselineVersion: number;
-  status: "active" | "finished" | "reverted";
-  lastPreviewSignature: string | null;
-  lastPreviewVersion: number | null;
-  reviewVerdict: string | null;
-  finishedAt: Date | null;
-}
-
-const makeLayers = () => {
-  const rows: ChangeSetRow[] = [];
-  const reverted: unknown[] = [];
-  let currentVersion: number | undefined;
-  const db = {
-    query: {
-      paywallEditChangeSets: {
-        findFirst: ({ where }: { where: Partial<ChangeSetRow> }) =>
-          Effect.succeed(
-            rows.find((row) =>
-              Object.entries(where).every(([key, value]) =>
-                value === undefined ? true : row[key as keyof ChangeSetRow] === value,
-              ),
-            ),
-          ),
-      },
-    },
-    insert: () => ({
-      values: (
-        value: Omit<
-          ChangeSetRow,
-          | "agentSessionId"
-          | "lastPreviewSignature"
-          | "lastPreviewVersion"
-          | "reviewVerdict"
-          | "finishedAt"
-        > & { agentSessionId?: string },
-      ) =>
-        Effect.sync(() => {
-          rows.push({
-            ...value,
-            agentSessionId: value.agentSessionId ?? null,
-            lastPreviewSignature: null,
-            lastPreviewVersion: null,
-            reviewVerdict: null,
-            finishedAt: null,
-          });
-        }),
-    }),
-    update: () => ({
-      set: (patch: Partial<ChangeSetRow>) => ({
-        where: () =>
-          Effect.sync(() => {
-            Object.assign(rows[0]!, patch);
-          }),
-      }),
-    }),
-  };
-  const workspace = {
-    readDocument: () =>
-      Effect.succeed({
-        slug: "trial",
-        name: "Trial",
-        paywallId: "pw_1",
-        tree: { encoded: "baseline" },
-        root: { id: "root_1", type: "root", children: [] },
-        version: currentVersion ?? rows[0]?.lastPreviewVersion ?? 4,
-      }),
-    revertDocument: (_paywallId: string, tree: unknown) =>
-      Effect.sync(() => {
-        reverted.push(tree);
-        return { version: 8, commandCount: 2 };
-      }),
-  } as unknown as PaywallWorkspaceService["Service"];
-  const layer = PaywallEditChangeSetService.layer.pipe(
-    Layer.provide(Layer.succeed(Db, db as never)),
-    Layer.provide(Layer.succeed(PaywallWorkspaceService, workspace)),
-    Layer.provideMerge(Layer.succeed(AuthSession, {} as never)),
-  );
-  return {
-    layer,
-    rows,
-    reverted,
-    setCurrentVersion: (version: number) => {
-      currentVersion = version;
-    },
-  };
-};
-
-describe("PaywallEditChangeSetService", () => {
-  it("resumes its owning agent and rejects a second caller", async () => {
-    const { layer, rows } = makeLayers();
-    await Effect.runPromise(
-      Effect.gen(function* () {
-        const service = yield* PaywallEditChangeSetService;
-        const started = yield* service.begin("proj_1", "trial", "agent_1");
-        expect(started.baselineVersion).toBe(4);
-        expect(rows[0]?.baselineTree).toEqual({ encoded: "baseline" });
-        expect(rows[0]?.agentSessionId).toBe("agent_1");
-        const resumed = yield* service.begin("proj_1", "trial", "agent_1");
-        expect(resumed.id).toBe(started.id);
-        expect(rows).toHaveLength(1);
-        const conflict = yield* Effect.flip(service.begin("proj_1", "trial"));
-        expect(conflict).toBeInstanceOf(PaywallEditChangeSetConflictError);
-      }).pipe(Effect.provide(layer)),
-    );
-  });
-
-  it("finishes only when the latest preview matches the current document", async () => {
-    const { layer, rows } = makeLayers();
-    await Effect.runPromise(
-      Effect.gen(function* () {
-        const service = yield* PaywallEditChangeSetService;
-        const started = yield* service.begin("proj_1", "trial");
-        yield* service.recordPreview({
-          projectId: "proj_1",
-          changeSetId: started.id,
-          paywallSlug: "trial",
-          documentSignature: "doc-current",
-          documentVersion: 7,
-        });
-        const stale = yield* Effect.flip(
-          service.finish({
-            projectId: "proj_1",
-            changeSetId: started.id,
-            paywallSlug: "trial",
-            reviewedDocumentSignature: "doc-current",
-            currentDocumentSignature: "doc-newer",
-            currentDocumentVersion: 8,
-            verdict: "Looks good",
-          }),
-        );
-        expect(stale).toBeInstanceOf(PaywallEditChangeSetConflictError);
-        yield* service.finish({
-          projectId: "proj_1",
-          changeSetId: started.id,
-          paywallSlug: "trial",
-          reviewedDocumentSignature: "doc-current",
-          currentDocumentSignature: "doc-current",
-          currentDocumentVersion: 7,
-          verdict: "Looks good",
-        });
-        expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.finished);
-        expect(rows[0]?.reviewVerdict).toBe("Looks good");
-        yield* service.revert("proj_1", started.id);
-        expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.reverted);
-      }).pipe(Effect.provide(layer)),
-    );
-  });
-
-  it("reconciles the captured baseline and marks the change set reverted", async () => {
-    const { layer, rows, reverted } = makeLayers();
-    await Effect.runPromise(
-      Effect.gen(function* () {
-        const service = yield* PaywallEditChangeSetService;
-        const started = yield* service.begin("proj_1", "trial");
-        const result = yield* service.revert("proj_1", started.id);
-        expect(result).toMatchObject({ version: 8, commandCount: 2, paywallSlug: "trial" });
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(reverted).toEqual([{ encoded: "baseline" }]);
-    expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.reverted);
-  });
-
-  it("refuses to revert a finished change set after newer document edits", async () => {
-    const { layer, rows, reverted, setCurrentVersion } = makeLayers();
-    await Effect.runPromise(
-      Effect.gen(function* () {
-        const service = yield* PaywallEditChangeSetService;
-        const started = yield* service.begin("proj_1", "trial");
-        yield* service.recordPreview({
-          projectId: "proj_1",
-          changeSetId: started.id,
-          paywallSlug: "trial",
-          documentSignature: "doc-current",
-          documentVersion: 7,
-        });
-        yield* service.finish({
-          projectId: "proj_1",
-          changeSetId: started.id,
-          paywallSlug: "trial",
-          reviewedDocumentSignature: "doc-current",
-          currentDocumentSignature: "doc-current",
-          currentDocumentVersion: 7,
-          verdict: "Looks good",
-        });
-        setCurrentVersion(8);
-        const conflict = yield* Effect.flip(service.revert("proj_1", started.id));
-        expect(conflict).toBeInstanceOf(PaywallEditChangeSetConflictError);
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(rows[0]?.status).toBe(PaywallEditChangeSetStatus.finished);
-    expect(reverted).toEqual([]);
-  });
-
-  it("only reverts through the durable agent session that owns the change set", async () => {
-    const { layer, reverted } = makeLayers();
-    await Effect.runPromise(
-      Effect.gen(function* () {
-        const service = yield* PaywallEditChangeSetService;
-        const started = yield* service.begin("proj_1", "trial", "agent_1");
-        const editForbidden = yield* Effect.flip(
-          service.requireActive({
-            projectId: "proj_1",
-            changeSetId: started.id,
-            paywallSlug: "trial",
-            agentSessionId: "agent_other",
-          }),
-        );
-        expect(editForbidden).toBeInstanceOf(ActionForbiddenError);
-        yield* service.requireActive({
-          projectId: "proj_1",
-          changeSetId: started.id,
-          paywallSlug: "trial",
-          agentSessionId: "agent_1",
-        });
-        const forbidden = yield* Effect.flip(
-          service.revertForAgentSession("proj_1", started.id, "agent_other"),
-        );
-        expect(forbidden).toBeInstanceOf(ActionForbiddenError);
-        yield* service.revertForAgentSession("proj_1", started.id, "agent_1");
-      }).pipe(Effect.provide(layer)),
-    );
-    expect(reverted).toEqual([{ encoded: "baseline" }]);
-  });
-});
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts b/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
deleted file mode 100644
index 2c0d4881f..000000000
--- a/packages/core/src/services/paywallWorkspace/PaywallEditChangeSetService.ts
+++ /dev/null
@@ -1,306 +0,0 @@
-import { and, Db, eq, PaywallEditChangeSetStatus, paywallEditChangeSets } from "@voidhash/db";
-import { Context, Effect, Layer, Schema } from "effect";
-
-import { ActionForbiddenError } from "../../domain/auth/Auth.ts";
-import { generateId } from "../../utils/generate-id.ts";
-import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
-
-/** A requested paywall edit change set does not exist in the authenticated project. */
-export class PaywallEditChangeSetNotFoundError extends Schema.TaggedErrorClass<PaywallEditChangeSetNotFoundError>(
-  "PaywallEditChangeSetNotFoundError",
-)("PaywallEditChangeSetNotFoundError", { message: Schema.String }) {}
-
-/** The requested change-set transition is invalid for its current state. */
-export class PaywallEditChangeSetConflictError extends Schema.TaggedErrorClass<PaywallEditChangeSetConflictError>(
-  "PaywallEditChangeSetConflictError",
-)("PaywallEditChangeSetConflictError", { message: Schema.String }) {}
-
-export interface ActivePaywallEditChangeSet {
-  readonly id: string;
-  readonly projectId: string;
-  readonly paywallId: string;
-  readonly paywallSlug: string;
-  readonly baselineVersion: number;
-}
-
-/**
- * Persists MCP paywall edit sessions and enforces their begin/preview/finish or
- * revert lifecycle across otherwise stateless HTTP requests.
- */
-export class PaywallEditChangeSetService extends Context.Service<PaywallEditChangeSetService>()(
-  "PaywallEditChangeSetService",
-  {
-    make: Effect.gen(function* () {
-      const db = yield* Db;
-      const workspace = yield* PaywallWorkspaceService;
-
-      const find = (projectId: string, changeSetId: string) =>
-        db.query.paywallEditChangeSets.findFirst({
-          where: { id: changeSetId, projectId },
-        });
-
-      const requireRow = (projectId: string, changeSetId: string) =>
-        Effect.gen(function* () {
-          const row = yield* find(projectId, changeSetId);
-          if (row === undefined) {
-            return yield* Effect.fail(
-              new PaywallEditChangeSetNotFoundError({
-                message: `No paywall edit change set "${changeSetId}" exists in this project.`,
-              }),
-            );
-          }
-          return row;
-        });
-
-      const requireActive = (input: {
-        readonly projectId: string;
-        readonly changeSetId: string;
-        readonly paywallSlug: string;
-        readonly agentSessionId?: string;
-      }) =>
-        Effect.gen(function* () {
-          const row = yield* requireRow(input.projectId, input.changeSetId);
-          if (input.agentSessionId !== undefined && row.agentSessionId !== input.agentSessionId) {
-            return yield* Effect.fail(
-              new ActionForbiddenError({
-                message: "This change set does not belong to the active agent session.",
-              }),
-            );
-          }
-          if (row.paywallSlug !== input.paywallSlug) {
-            return yield* Effect.fail(
-              new PaywallEditChangeSetConflictError({
-                message: `Change set "${input.changeSetId}" belongs to paywall "${row.paywallSlug}", not "${input.paywallSlug}".`,
-              }),
-            );
-          }
-          if (row.status !== PaywallEditChangeSetStatus.active) {
-            return yield* Effect.fail(
-              new PaywallEditChangeSetConflictError({
-                message: `Change set "${input.changeSetId}" is ${row.status}; only active change sets can be edited.`,
-              }),
-            );
-          }
-          return {
-            id: row.id,
-            projectId: row.projectId,
-            paywallId: row.paywallId,
-            paywallSlug: row.paywallSlug,
-            baselineVersion: row.baselineVersion,
-          } satisfies ActivePaywallEditChangeSet;
-        });
-
-      const begin = (projectId: string, paywallSlug: string, agentSessionId?: string) =>
-        Effect.gen(function* () {
-          const document = yield* workspace.readDocument(projectId, paywallSlug);
-          const existing = yield* db.query.paywallEditChangeSets.findFirst({
-            where: {
-              projectId,
-              paywallId: document.paywallId,
-              status: PaywallEditChangeSetStatus.active,
-            },
-          });
-          if (existing !== undefined) {
-            if (agentSessionId !== undefined && existing.agentSessionId === agentSessionId) {
-              return {
-                id: existing.id,
-                paywallId: existing.paywallId,
-                paywallSlug: existing.paywallSlug,
-                baselineVersion: existing.baselineVersion,
-              };
-            }
-            return yield* Effect.fail(
-              new PaywallEditChangeSetConflictError({
-                message: `Paywall "${paywallSlug}" already has active change set "${existing.id}". Finish or revert it before beginning another.`,
-              }),
-            );
-          }
-
-          const id = generateId("paywallEditChangeSet");
-          yield* db.insert(paywallEditChangeSets).values({
-            id,
-            ...(agentSessionId === undefined ? {} : { agentSessionId }),
-            projectId,
-            paywallId: document.paywallId,
-            paywallSlug: document.slug,
-            baselineTree: document.tree,
-            baselineVersion: document.version,
-            status: PaywallEditChangeSetStatus.active,
-          });
-          return {
-            id,
-            paywallId: document.paywallId,
-            paywallSlug: document.slug,
-            baselineVersion: document.version,
-          };
-        });
-
-      const recordPreview = (input: {
-        readonly projectId: string;
-        readonly changeSetId: string;
-        readonly paywallSlug: string;
-        readonly agentSessionId?: string;
-        readonly documentSignature: string;
-        readonly documentVersion: number;
-      }) =>
-        Effect.gen(function* () {
-          yield* requireActive(input);
-          yield* db
-            .update(paywallEditChangeSets)
-            .set({
-              lastPreviewSignature: input.documentSignature,
-              lastPreviewVersion: input.documentVersion,
-            })
-            .where(
-              and(
-                eq(paywallEditChangeSets.id, input.changeSetId),
-                eq(paywallEditChangeSets.projectId, input.projectId),
-                eq(paywallEditChangeSets.status, PaywallEditChangeSetStatus.active),
-              ),
-            );
-        });
-
-      const finish = (input: {
-        readonly projectId: string;
-        readonly changeSetId: string;
-        readonly paywallSlug: string;
-        readonly agentSessionId?: string;
-        readonly reviewedDocumentSignature: string;
-        readonly currentDocumentSignature: string;
-        readonly currentDocumentVersion: number;
-        readonly verdict: string;
-      }) =>
-        Effect.gen(function* () {
-          const row = yield* requireRow(input.projectId, input.changeSetId);
-          if (input.agentSessionId !== undefined && row.agentSessionId !== input.agentSessionId) {
-            return yield* Effect.fail(
-              new ActionForbiddenError({
-                message: "This change set does not belong to the active agent session.",
-              }),
-            );
-          }
-          if (row.paywallSlug !== input.paywallSlug) {
-            return yield* Effect.fail(
-              new PaywallEditChangeSetConflictError({
-                message: `Change set "${input.changeSetId}" belongs to paywall "${row.paywallSlug}", not "${input.paywallSlug}".`,
-              }),
-            );
-          }
-          if (row.status !== PaywallEditChangeSetStatus.active) {
-            return yield* Effect.fail(
-              new PaywallEditChangeSetConflictError({
-                message: `Change set "${input.changeSetId}" is already ${row.status}.`,
-              }),
-            );
-          }
-          if (
-            row.lastPreviewSignature === null ||
-            row.lastPreviewVersion === null ||
-            row.lastPreviewSignature !== input.reviewedDocumentSignature ||
-            row.lastPreviewSignature !== input.currentDocumentSignature ||
-            row.lastPreviewVersion !== input.currentDocumentVersion
-          ) {
-            return yield* Effect.fail(
-              new PaywallEditChangeSetConflictError({
-                message:
-                  "The reviewed preview is stale or missing. Render a new get_paywall_preview and finish with its documentSignature.",
-              }),
-            );
-          }
-          const now = new Date();
-          yield* db
-            .update(paywallEditChangeSets)
-            .set({
-              status: PaywallEditChangeSetStatus.finished,
-              reviewVerdict: input.verdict,
-              finishedAt: now,
-            })
-            .where(
-              and(
-                eq(paywallEditChangeSets.id, input.changeSetId),
-                eq(paywallEditChangeSets.projectId, input.projectId),
-                eq(paywallEditChangeSets.status, PaywallEditChangeSetStatus.active),
-              ),
-            );
-          return { id: row.id, status: PaywallEditChangeSetStatus.finished } as const;
-        });
-
-      const revert = (projectId: string, changeSetId: string) =>
-        Effect.gen(function* () {
-          const row = yield* requireRow(projectId, changeSetId);
-          if (row.status === PaywallEditChangeSetStatus.reverted) {
-            return yield* Effect.fail(
-              new PaywallEditChangeSetConflictError({
-                message: `Change set "${changeSetId}" has already been reverted.`,
-              }),
-            );
-          }
-          if (row.status === PaywallEditChangeSetStatus.finished) {
-            const document = yield* workspace.readDocument(projectId, row.paywallSlug);
-            if (row.lastPreviewVersion === null || document.version !== row.lastPreviewVersion) {
-              return yield* Effect.fail(
-                new PaywallEditChangeSetConflictError({
-                  message:
-                    "The paywall changed after this change set was reviewed, so reverting it would overwrite newer work.",
-                }),
-              );
-            }
-            const active = yield* db.query.paywallEditChangeSets.findFirst({
-              where: {
-                projectId,
-                paywallId: row.paywallId,
-                status: PaywallEditChangeSetStatus.active,
-              },
-            });
-            if (active !== undefined && active.id !== row.id) {
-              return yield* Effect.fail(
-                new PaywallEditChangeSetConflictError({
-                  message: `Change set "${active.id}" is now active for this paywall. Finish or revert it first.`,
-                }),
-              );
-            }
-          }
-          const result = yield* workspace.revertDocument(row.paywallId, row.baselineTree);
-          yield* db
-            .update(paywallEditChangeSets)
-            .set({ status: PaywallEditChangeSetStatus.reverted, finishedAt: new Date() })
-            .where(
-              and(
-                eq(paywallEditChangeSets.id, changeSetId),
-                eq(paywallEditChangeSets.projectId, projectId),
-                eq(paywallEditChangeSets.status, row.status),
-              ),
-            );
-          return { ...result, paywallSlug: row.paywallSlug };
-        });
-
-      const revertForAgentSession = (
-        projectId: string,
-        changeSetId: string,
-        agentSessionId: string,
-      ) =>
-        Effect.gen(function* () {
-          const row = yield* requireRow(projectId, changeSetId);
-          if (row.agentSessionId !== agentSessionId) {
-            return yield* Effect.fail(
-              new ActionForbiddenError({
-                message: "This change set does not belong to the requested agent session.",
-              }),
-            );
-          }
-          return yield* revert(projectId, changeSetId);
-        });
-
-      return {
-        begin,
-        requireActive,
-        recordPreview,
-        finish,
-        revert,
-        revertForAgentSession,
-      } as const;
-    }),
-  },
-) {
-  static layer = Layer.effect(PaywallEditChangeSetService)(PaywallEditChangeSetService.make);
-}
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditSessionService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallEditSessionService.test.ts
new file mode 100644
index 000000000..174519d37
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/PaywallEditSessionService.test.ts
@@ -0,0 +1,392 @@
+import { Db, PaywallEditSessionStatus } from "@voidhash/db";
+import { ActionForbiddenError, AuthSession } from "../../domain/auth/Auth.ts";
+import { Effect, Layer } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import {
+  PaywallEditSessionService,
+  PaywallEditSessionConflictError,
+} from "./PaywallEditSessionService.ts";
+import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
+
+interface EditSessionRow {
+  id: string;
+  agentSessionId: string | null;
+  projectId: string;
+  paywallId: string;
+  paywallSlug: string;
+  baselineTree: unknown;
+  baselineVersion: number;
+  lastAgentVersion: number;
+  revertSafe: boolean;
+  status: "active" | "finished" | "reverted";
+  lastPreviewSignature: string | null;
+  lastPreviewVersion: number | null;
+  reviewVerdict: string | null;
+  finishedAt: Date | null;
+  createdAt: Date;
+  updatedAt: Date;
+}
+
+const makeLayers = () => {
+  const rows: EditSessionRow[] = [];
+  const reverted: unknown[] = [];
+  let currentVersion: number | undefined;
+  let openCount = 0;
+  let heartbeatFails = false;
+  const db = {
+    query: {
+      paywallEditSessions: {
+        findFirst: ({ where }: { where: Partial<EditSessionRow> }) =>
+          Effect.succeed(
+            rows.find((row) =>
+              Object.entries(where).every(([key, value]) =>
+                value === undefined ? true : row[key as keyof EditSessionRow] === value,
+              ),
+            ),
+          ),
+      },
+    },
+    insert: () => ({
+      values: (
+        value: Omit<
+          EditSessionRow,
+          | "agentSessionId"
+          | "lastPreviewSignature"
+          | "lastPreviewVersion"
+          | "reviewVerdict"
+          | "finishedAt"
+          | "createdAt"
+          | "updatedAt"
+          | "lastAgentVersion"
+          | "revertSafe"
+        > & { agentSessionId?: string },
+      ) =>
+        Effect.sync(() => {
+          rows.push({
+            ...value,
+            agentSessionId: value.agentSessionId ?? null,
+            lastPreviewSignature: null,
+            lastPreviewVersion: null,
+            lastAgentVersion: value.baselineVersion,
+            revertSafe: true,
+            reviewVerdict: null,
+            finishedAt: null,
+            createdAt: new Date(),
+            updatedAt: new Date(),
+          });
+        }),
+    }),
+    update: () => ({
+      set: (patch: Partial<EditSessionRow>) => ({
+        where: () =>
+          Effect.sync(() => {
+            Object.assign(rows[0]!, patch);
+          }),
+      }),
+    }),
+  };
+  const workspace = {
+    openDocumentConnection: () =>
+      Effect.sync(() => {
+        openCount += 1;
+        return {
+          slug: "trial",
+          name: "Trial",
+          paywallId: "pw_1",
+          tree: { encoded: "baseline" },
+          root: { id: "root_1", type: "root", children: [] },
+          version: currentVersion ?? rows[0]?.lastPreviewVersion ?? 4,
+        };
+      }),
+    heartbeatDocumentConnection: () =>
+      heartbeatFails ? Effect.fail(new Error("connection expired")) : Effect.void,
+    closeDocumentConnection: () => Effect.void,
+    readDocument: () =>
+      Effect.succeed({
+        slug: "trial",
+        name: "Trial",
+        paywallId: "pw_1",
+        tree: { encoded: "baseline" },
+        root: { id: "root_1", type: "root", children: [] },
+        version: currentVersion ?? rows[0]?.lastPreviewVersion ?? 4,
+      }),
+    readDocumentTree: () =>
+      Effect.succeed({
+        tree: { encoded: "current" },
+        root: { id: "root_1", type: "root", children: [] },
+        version: currentVersion ?? 4,
+      }),
+    revertConnectedDocument: (_projectId: string, _connection: unknown, tree: unknown) =>
+      Effect.sync(() => {
+        reverted.push(tree);
+        return { version: 8, commandCount: 2 };
+      }),
+  } as unknown as PaywallWorkspaceService["Service"];
+  const layer = PaywallEditSessionService.layer.pipe(
+    Layer.provide(Layer.succeed(Db, db as never)),
+    Layer.provide(Layer.succeed(PaywallWorkspaceService, workspace)),
+    Layer.provideMerge(Layer.succeed(AuthSession, {} as never)),
+  );
+  return {
+    layer,
+    rows,
+    reverted,
+    getOpenCount: () => openCount,
+    setHeartbeatFailure: (fails: boolean) => {
+      heartbeatFails = fails;
+    },
+    setCurrentVersion: (version: number) => {
+      currentVersion = version;
+    },
+  };
+};
+
+describe("PaywallEditSessionService", () => {
+  it("renews an active connection and reopens it after lease expiry", async () => {
+    const { layer, getOpenCount, setHeartbeatFailure } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const started = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        yield* service.connectActive({
+          projectId: "proj_1",
+          editSessionId: started.editSessionId,
+        });
+        expect(getOpenCount()).toBe(1);
+
+        setHeartbeatFailure(true);
+        yield* service.connectActive({
+          projectId: "proj_1",
+          editSessionId: started.editSessionId,
+        });
+        expect(getOpenCount()).toBe(2);
+      }).pipe(Effect.provide(layer)),
+    );
+  });
+
+  it("resumes its owning agent while allowing independent concurrent sessions", async () => {
+    const { layer, rows, getOpenCount } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const started = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "built_in",
+          agentSessionId: "agent_1",
+        });
+        expect(started.baselineVersion).toBe(4);
+        expect(rows[0]?.baselineTree).toEqual({ encoded: "baseline" });
+        expect(rows[0]?.agentSessionId).toBe("agent_1");
+        const resumed = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "built_in",
+          agentSessionId: "agent_1",
+        });
+        expect(resumed.editSessionId).toBe(started.editSessionId);
+        expect(rows).toHaveLength(1);
+        const concurrentMcp = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        const concurrentBuiltIn = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "built_in",
+          agentSessionId: "agent_2",
+        });
+        expect(concurrentMcp.editSessionId).not.toBe(started.editSessionId);
+        expect(concurrentBuiltIn.editSessionId).not.toBe(started.editSessionId);
+        expect(concurrentBuiltIn.editSessionId).not.toBe(concurrentMcp.editSessionId);
+        expect(rows).toHaveLength(3);
+        expect(getOpenCount()).toBe(4);
+      }).pipe(Effect.provide(layer)),
+    );
+  });
+
+  it("finishes only when the latest preview matches the current document", async () => {
+    const { layer, rows, setCurrentVersion } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const started = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        yield* service.recordPreview({
+          projectId: "proj_1",
+          editSessionId: started.editSessionId,
+          documentSignature: "doc-current",
+          documentVersion: 7,
+        });
+        const stale = yield* Effect.flip(
+          service.finish({
+            projectId: "proj_1",
+            editSessionId: started.editSessionId,
+            reviewedDocumentSignature: "doc-current",
+            currentDocumentSignature: "doc-newer",
+            currentDocumentVersion: 8,
+            verdict: "Looks good",
+          }),
+        );
+        expect(stale).toBeInstanceOf(PaywallEditSessionConflictError);
+        yield* service.finish({
+          projectId: "proj_1",
+          editSessionId: started.editSessionId,
+          reviewedDocumentSignature: "doc-current",
+          currentDocumentSignature: "doc-current",
+          currentDocumentVersion: 7,
+          verdict: "Looks good",
+        });
+        expect(rows[0]?.status).toBe(PaywallEditSessionStatus.finished);
+        expect(rows[0]?.reviewVerdict).toBe("Looks good");
+        rows[0]!.lastAgentVersion = 7;
+        setCurrentVersion(7);
+        yield* service.revert("proj_1", started.editSessionId);
+        expect(rows[0]?.status).toBe(PaywallEditSessionStatus.reverted);
+      }).pipe(Effect.provide(layer)),
+    );
+  });
+
+  it("reconciles the captured baseline and marks the edit session reverted", async () => {
+    const { layer, rows, reverted, setCurrentVersion } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const started = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        rows[0]!.lastAgentVersion = 7;
+        setCurrentVersion(7);
+        const result = yield* service.revert("proj_1", started.editSessionId);
+        expect(result).toMatchObject({ version: 8, commandCount: 2, paywallSlug: "trial" });
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(reverted).toEqual([{ encoded: "baseline" }]);
+    expect(rows[0]?.status).toBe(PaywallEditSessionStatus.reverted);
+  });
+
+  it("closes a mutation-free session without reverting concurrent edits", async () => {
+    const { layer, rows, reverted, setCurrentVersion } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const passive = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        setCurrentVersion(5);
+        const result = yield* service.revert("proj_1", passive.editSessionId);
+        expect(result).toMatchObject({ version: 5, commandCount: 0, paywallSlug: "trial" });
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(reverted).toEqual([]);
+    expect(rows[0]?.status).toBe(PaywallEditSessionStatus.reverted);
+    expect(rows[1]?.status).toBe(PaywallEditSessionStatus.active);
+  });
+
+  it("refuses to revert a finished edit session after newer document edits", async () => {
+    const { layer, rows, reverted, setCurrentVersion } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const started = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        yield* service.recordPreview({
+          projectId: "proj_1",
+          editSessionId: started.editSessionId,
+          documentSignature: "doc-current",
+          documentVersion: 7,
+        });
+        yield* service.finish({
+          projectId: "proj_1",
+          editSessionId: started.editSessionId,
+          reviewedDocumentSignature: "doc-current",
+          currentDocumentSignature: "doc-current",
+          currentDocumentVersion: 7,
+          verdict: "Looks good",
+        });
+        rows[0]!.lastAgentVersion = 7;
+        setCurrentVersion(8);
+        const conflict = yield* Effect.flip(service.revert("proj_1", started.editSessionId));
+        expect(conflict).toBeInstanceOf(PaywallEditSessionConflictError);
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(rows[0]?.status).toBe(PaywallEditSessionStatus.finished);
+    expect(reverted).toEqual([]);
+  });
+
+  it("refuses to overwrite interleaved multiplayer edits", async () => {
+    const { layer, rows, reverted, setCurrentVersion } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const started = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "mcp",
+        });
+        rows[0]!.revertSafe = false;
+        rows[0]!.lastAgentVersion = 7;
+        setCurrentVersion(7);
+        const conflict = yield* Effect.flip(service.revert("proj_1", started.editSessionId));
+        expect(conflict).toBeInstanceOf(PaywallEditSessionConflictError);
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(reverted).toEqual([]);
+    expect(rows[0]?.status).toBe(PaywallEditSessionStatus.active);
+  });
+
+  it("only reverts through the durable agent session that owns the edit session", async () => {
+    const { layer, reverted } = makeLayers();
+    await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallEditSessionService;
+        const started = yield* service.begin({
+          projectId: "proj_1",
+          paywallId: "pw_1",
+          source: "built_in",
+          agentSessionId: "agent_1",
+        });
+        const editForbidden = yield* Effect.flip(
+          service.requireActive({
+            projectId: "proj_1",
+            editSessionId: started.editSessionId,
+            agentSessionId: "agent_other",
+          }),
+        );
+        expect(editForbidden).toBeInstanceOf(ActionForbiddenError);
+        yield* service.requireActive({
+          projectId: "proj_1",
+          editSessionId: started.editSessionId,
+          agentSessionId: "agent_1",
+        });
+        const forbidden = yield* Effect.flip(
+          service.revertForAgentSession("proj_1", started.editSessionId, "agent_other"),
+        );
+        expect(forbidden).toBeInstanceOf(ActionForbiddenError);
+        yield* service.revertForAgentSession("proj_1", started.editSessionId, "agent_1");
+      }).pipe(Effect.provide(layer)),
+    );
+    expect(reverted).toEqual([]);
+  });
+});
diff --git a/packages/core/src/services/paywallWorkspace/PaywallEditSessionService.ts b/packages/core/src/services/paywallWorkspace/PaywallEditSessionService.ts
new file mode 100644
index 000000000..4ce5f4d1d
--- /dev/null
+++ b/packages/core/src/services/paywallWorkspace/PaywallEditSessionService.ts
@@ -0,0 +1,423 @@
+import { and, Db, eq, PaywallEditSessionStatus, paywallEditSessions, sql } from "@voidhash/db";
+import { Context, Effect, Layer, Schema } from "effect";
+
+import { ActionForbiddenError } from "../../domain/auth/Auth.ts";
+import { generateId } from "../../utils/generate-id.ts";
+import { PaywallWorkspaceService } from "./PaywallWorkspaceService.ts";
+
+/** A requested paywall edit session does not exist in the authenticated project. */
+export class PaywallEditSessionNotFoundError extends Schema.TaggedErrorClass<PaywallEditSessionNotFoundError>(
+  "PaywallEditSessionNotFoundError",
+)("PaywallEditSessionNotFoundError", { message: Schema.String }) {}
+
+/** The requested edit-session transition is invalid for its current state. */
+export class PaywallEditSessionConflictError extends Schema.TaggedErrorClass<PaywallEditSessionConflictError>(
+  "PaywallEditSessionConflictError",
+)("PaywallEditSessionConflictError", { message: Schema.String }) {}
+
+export interface ActivePaywallEditSession {
+  readonly editSessionId: string;
+  readonly projectId: string;
+  readonly paywallId: string;
+  readonly paywallSlug: string;
+  readonly baselineVersion: number;
+}
+
+export type BeginPaywallEditSessionInput = {
+  readonly projectId: string;
+  readonly paywallId: string;
+} & (
+  | { readonly source: "mcp"; readonly agentSessionId?: never }
+  | { readonly source: "built_in"; readonly agentSessionId: string }
+);
+
+/**
+ * Persists agent paywall edit sessions while each row's id doubles as the
+ * leased Mimic document connection handle.
+ */
+export class PaywallEditSessionService extends Context.Service<PaywallEditSessionService>()(
+  "PaywallEditSessionService",
+  {
+    make: Effect.gen(function* () {
+      const db = yield* Db;
+      const workspace = yield* PaywallWorkspaceService;
+
+      const find = (projectId: string, editSessionId: string) =>
+        db.query.paywallEditSessions.findFirst({
+          where: { id: editSessionId, projectId },
+        });
+
+      const requireRow = (projectId: string, editSessionId: string) =>
+        Effect.gen(function* () {
+          const row = yield* find(projectId, editSessionId);
+          if (row === undefined) {
+            return yield* Effect.fail(
+              new PaywallEditSessionNotFoundError({
+                message: `No paywall edit session "${editSessionId}" exists in this project.`,
+              }),
+            );
+          }
+          return row;
+        });
+
+      const requireActive = (input: {
+        readonly projectId: string;
+        readonly editSessionId: string;
+        readonly agentSessionId?: string;
+      }) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(input.projectId, input.editSessionId);
+          if (input.agentSessionId !== undefined && row.agentSessionId !== input.agentSessionId) {
+            return yield* Effect.fail(
+              new ActionForbiddenError({
+                message: "This edit session does not belong to the active agent session.",
+              }),
+            );
+          }
+          if (row.status !== PaywallEditSessionStatus.active) {
+            return yield* Effect.fail(
+              new PaywallEditSessionConflictError({
+                message: `Edit session "${input.editSessionId}" is ${row.status}; only active sessions can be edited.`,
+              }),
+            );
+          }
+          return {
+            editSessionId: row.id,
+            projectId: row.projectId,
+            paywallId: row.paywallId,
+            paywallSlug: row.paywallSlug,
+            baselineVersion: row.baselineVersion,
+          } satisfies ActivePaywallEditSession;
+        });
+
+      const connectActive = (input: {
+        readonly projectId: string;
+        readonly editSessionId: string;
+        readonly agentSessionId?: string;
+      }) =>
+        Effect.gen(function* () {
+          const session = yield* requireActive(input);
+          const source = input.agentSessionId === undefined ? "mcp" : "built_in";
+          yield* workspace
+            .heartbeatDocumentConnection(session.projectId, {
+              paywallId: session.paywallId,
+              connectionId: session.editSessionId,
+            })
+            .pipe(
+              Effect.catch(() =>
+                workspace
+                  .openDocumentConnection(
+                    session.projectId,
+                    session.paywallId,
+                    session.editSessionId,
+                    {
+                      editSessionId: session.editSessionId,
+                      source,
+                      name: source === "mcp" ? "MCP Agent" : "Voidhash AI",
+                    },
+                  )
+                  .pipe(Effect.asVoid),
+              ),
+            );
+          return session;
+        });
+
+      const begin = (input: BeginPaywallEditSessionInput) =>
+        Effect.gen(function* () {
+          if (input.source === "built_in") {
+            const existing = yield* db.query.paywallEditSessions.findFirst({
+              where: {
+                agentSessionId: input.agentSessionId,
+                projectId: input.projectId,
+                paywallId: input.paywallId,
+                status: PaywallEditSessionStatus.active,
+              },
+            });
+            if (existing !== undefined) {
+              yield* workspace.openDocumentConnection(
+                input.projectId,
+                existing.paywallId,
+                existing.id,
+                {
+                  editSessionId: existing.id,
+                  source: input.source,
+                  name: "Voidhash AI",
+                },
+              );
+              return {
+                editSessionId: existing.id,
+                paywallId: existing.paywallId,
+                baselineVersion: existing.baselineVersion,
+              };
+            }
+          }
+
+          const editSessionId = generateId("paywallEditSession");
+          const document = yield* workspace.openDocumentConnection(
+            input.projectId,
+            input.paywallId,
+            editSessionId,
+            {
+              editSessionId,
+              source: input.source,
+              name: input.source === "mcp" ? "MCP Agent" : "Voidhash AI",
+            },
+          );
+          yield* db
+            .insert(paywallEditSessions)
+            .values({
+              id: editSessionId,
+              ...(input.agentSessionId === undefined
+                ? {}
+                : { agentSessionId: input.agentSessionId }),
+              projectId: input.projectId,
+              paywallId: document.paywallId,
+              paywallSlug: document.slug,
+              baselineTree: document.tree,
+              baselineVersion: document.version,
+              lastAgentVersion: document.version,
+              revertSafe: true,
+              status: PaywallEditSessionStatus.active,
+            })
+            .pipe(
+              Effect.catch((error) =>
+                workspace
+                  .closeDocumentConnection(input.projectId, {
+                    paywallId: document.paywallId,
+                    connectionId: editSessionId,
+                  })
+                  .pipe(Effect.ignore, Effect.andThen(Effect.fail(error))),
+              ),
+            );
+          return {
+            editSessionId,
+            paywallId: document.paywallId,
+            baselineVersion: document.version,
+          };
+        });
+
+      const recordMutation = (input: {
+        readonly projectId: string;
+        readonly editSessionId: string;
+        readonly agentSessionId?: string;
+        readonly documentVersion: number;
+      }) =>
+        Effect.gen(function* () {
+          yield* requireActive(input);
+          yield* db
+            .update(paywallEditSessions)
+            .set({
+              lastAgentVersion: sql<number>`GREATEST(${paywallEditSessions.lastAgentVersion}, ${input.documentVersion})`,
+              revertSafe: sql<boolean>`${paywallEditSessions.revertSafe} AND ${paywallEditSessions.lastAgentVersion} = ${input.documentVersion - 1}`,
+            })
+            .where(
+              and(
+                eq(paywallEditSessions.id, input.editSessionId),
+                eq(paywallEditSessions.projectId, input.projectId),
+                eq(paywallEditSessions.status, PaywallEditSessionStatus.active),
+              ),
+            );
+        });
+
+      const recordPreview = (input: {
+        readonly projectId: string;
+        readonly editSessionId: string;
+        readonly agentSessionId?: string;
+        readonly documentSignature: string;
+        readonly documentVersion: number;
+      }) =>
+        Effect.gen(function* () {
+          yield* requireActive(input);
+          yield* db
+            .update(paywallEditSessions)
+            .set({
+              lastPreviewSignature: input.documentSignature,
+              lastPreviewVersion: input.documentVersion,
+            })
+            .where(
+              and(
+                eq(paywallEditSessions.id, input.editSessionId),
+                eq(paywallEditSessions.projectId, input.projectId),
+                eq(paywallEditSessions.status, PaywallEditSessionStatus.active),
+              ),
+            );
+        });
+
+      const finish = (input: {
+        readonly projectId: string;
+        readonly editSessionId: string;
+        readonly agentSessionId?: string;
+        readonly reviewedDocumentSignature: string;
+        readonly currentDocumentSignature: string;
+        readonly currentDocumentVersion: number;
+        readonly verdict: string;
+      }) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(input.projectId, input.editSessionId);
+          if (input.agentSessionId !== undefined && row.agentSessionId !== input.agentSessionId) {
+            return yield* Effect.fail(
+              new ActionForbiddenError({
+                message: "This edit session does not belong to the active agent session.",
+              }),
+            );
+          }
+          if (row.status !== PaywallEditSessionStatus.active) {
+            return yield* Effect.fail(
+              new PaywallEditSessionConflictError({
+                message: `Edit session "${input.editSessionId}" is already ${row.status}.`,
+              }),
+            );
+          }
+          if (
+            row.lastPreviewSignature === null ||
+            row.lastPreviewVersion === null ||
+            row.lastPreviewSignature !== input.reviewedDocumentSignature ||
+            row.lastPreviewSignature !== input.currentDocumentSignature ||
+            row.lastPreviewVersion !== input.currentDocumentVersion
+          ) {
+            return yield* Effect.fail(
+              new PaywallEditSessionConflictError({
+                message:
+                  "The reviewed preview is stale or missing. Render a new get_paywall_preview and finish with its documentSignature.",
+              }),
+            );
+          }
+          const now = new Date();
+          yield* db
+            .update(paywallEditSessions)
+            .set({
+              status: PaywallEditSessionStatus.finished,
+              reviewVerdict: input.verdict,
+              finishedAt: now,
+            })
+            .where(
+              and(
+                eq(paywallEditSessions.id, input.editSessionId),
+                eq(paywallEditSessions.projectId, input.projectId),
+                eq(paywallEditSessions.status, PaywallEditSessionStatus.active),
+              ),
+            );
+          yield* workspace
+            .closeDocumentConnection(input.projectId, {
+              paywallId: row.paywallId,
+              connectionId: row.id,
+            })
+            .pipe(Effect.ignore);
+          return { editSessionId: row.id, status: PaywallEditSessionStatus.finished } as const;
+        });
+
+      const revert = (projectId: string, editSessionId: string) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(projectId, editSessionId);
+          if (row.status === PaywallEditSessionStatus.reverted) {
+            return yield* Effect.fail(
+              new PaywallEditSessionConflictError({
+                message: `Edit session "${editSessionId}" has already been reverted.`,
+              }),
+            );
+          }
+          const current = yield* workspace.readDocumentTree(row.paywallId);
+          if (row.lastAgentVersion === row.baselineVersion) {
+            yield* db
+              .update(paywallEditSessions)
+              .set({ status: PaywallEditSessionStatus.reverted, finishedAt: new Date() })
+              .where(
+                and(
+                  eq(paywallEditSessions.id, editSessionId),
+                  eq(paywallEditSessions.projectId, projectId),
+                  eq(paywallEditSessions.status, row.status),
+                ),
+              );
+            yield* workspace
+              .closeDocumentConnection(projectId, {
+                paywallId: row.paywallId,
+                connectionId: row.id,
+              })
+              .pipe(Effect.ignore);
+            return { version: current.version, commandCount: 0, paywallSlug: row.paywallSlug };
+          }
+          if (!row.revertSafe || current.version !== row.lastAgentVersion) {
+            return yield* Effect.fail(
+              new PaywallEditSessionConflictError({
+                message:
+                  "The paywall contains edits not made by this agent session, so reverting the session would overwrite multiplayer work.",
+              }),
+            );
+          }
+          if (row.status === PaywallEditSessionStatus.finished) {
+            if (row.lastPreviewVersion === null || current.version !== row.lastPreviewVersion) {
+              return yield* Effect.fail(
+                new PaywallEditSessionConflictError({
+                  message:
+                    "The paywall changed after this edit session was reviewed, so reverting it would overwrite newer work.",
+                }),
+              );
+            }
+          }
+          const source = row.agentSessionId === null ? "mcp" : "built_in";
+          yield* workspace.openDocumentConnection(projectId, row.paywallId, row.id, {
+            editSessionId: row.id,
+            source,
+            name: source === "mcp" ? "MCP Agent" : "Voidhash AI",
+          });
+          return yield* Effect.gen(function* () {
+            const result = yield* workspace.revertConnectedDocument(
+              projectId,
+              { paywallId: row.paywallId, connectionId: row.id },
+              row.baselineTree,
+            );
+            yield* db
+              .update(paywallEditSessions)
+              .set({ status: PaywallEditSessionStatus.reverted, finishedAt: new Date() })
+              .where(
+                and(
+                  eq(paywallEditSessions.id, editSessionId),
+                  eq(paywallEditSessions.projectId, projectId),
+                  eq(paywallEditSessions.status, row.status),
+                ),
+              );
+            return { ...result, paywallSlug: row.paywallSlug };
+          }).pipe(
+            Effect.ensuring(
+              workspace
+                .closeDocumentConnection(projectId, {
+                  paywallId: row.paywallId,
+                  connectionId: row.id,
+                })
+                .pipe(Effect.ignore),
+            ),
+          );
+        });
+
+      const revertForAgentSession = (
+        projectId: string,
+        editSessionId: string,
+        agentSessionId: string,
+      ) =>
+        Effect.gen(function* () {
+          const row = yield* requireRow(projectId, editSessionId);
+          if (row.agentSessionId !== agentSessionId) {
+            return yield* Effect.fail(
+              new ActionForbiddenError({
+                message: "This edit session does not belong to the requested agent session.",
+              }),
+            );
+          }
+          return yield* revert(projectId, editSessionId);
+        });
+
+      return {
+        begin,
+        connectActive,
+        recordMutation,
+        requireActive,
+        recordPreview,
+        finish,
+        revert,
+        revertForAgentSession,
+      } as const;
+    }),
+  },
+) {
+  static layer = Layer.effect(PaywallEditSessionService)(PaywallEditSessionService.make);
+}
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
index c38ecc9b4..c3aa1fb8b 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.test.ts
@@ -59,32 +59,42 @@ const testLayer = (fakes: Fakes) => {
   let submitAttempts = 0;
   const documents = fakes.documents ?? [];
 
+  const readDocument = () =>
+    Effect.sync(() => {
+      const doc = documents[Math.min(docReads, documents.length - 1)] ?? {
+        tree: encodeTree([{ type: "root", name: "Paywall", children: [{ type: "screen" }] }]),
+        version: 1,
+      };
+      docReads += 1;
+      return { ...doc, root: fakes.snapshot ?? null };
+    });
+
+  const submitTransaction = (input: {
+    readonly baseVersion: number;
+    readonly commands: ReadonlyArray<unknown>;
+  }) =>
+    Effect.sync(() => {
+      const attempt = submitAttempts;
+      submitAttempts += 1;
+      return (
+        fakes.submit?.({ ...input, attempt }) ?? {
+          accepted: true,
+          version: input.baseVersion + 1,
+        }
+      );
+    });
+
   const mimicLayer = Layer.succeed(MimicHost, {
     ensurePaywallDocument: () => Effect.void,
     getPaywallSnapshot: () => Effect.succeed(fakes.snapshot ?? null),
-    getPaywallDocument: () =>
-      Effect.sync(() => {
-        const doc = documents[Math.min(docReads, documents.length - 1)] ?? {
-          tree: encodeTree([{ type: "root", name: "Paywall", children: [{ type: "screen" }] }]),
-          version: 1,
-        };
-        docReads += 1;
-        // `PaywallDocument` now carries the decoded `root` (same read as version);
-        // this service's write path uses only `tree`/`version`, so default the
-        // root to the shared snapshot for the shape.
-        return { ...doc, root: fakes.snapshot ?? null };
-      }),
-    submitPaywallTransaction: (_paywallId, input) =>
-      Effect.sync(() => {
-        const attempt = submitAttempts;
-        submitAttempts += 1;
-        return (
-          fakes.submit?.({ ...input, attempt }) ?? {
-            accepted: true,
-            version: input.baseVersion + 1,
-          }
-        );
-      }),
+    getPaywallDocument: readDocument,
+    submitPaywallTransaction: (_paywallId, input) => submitTransaction(input),
+    openPaywallConnection: () => readDocument(),
+    getConnectedPaywallDocument: () => readDocument(),
+    heartbeatPaywallConnection: () => Effect.void,
+    closePaywallConnection: () => Effect.void,
+    submitConnectedPaywallTransaction: (_paywallId, _connectionId, input) =>
+      submitTransaction(input),
     createPaywallEditToken: () => Effect.succeed({ token: "", url: "", expiresAt: new Date() }),
   });
 
diff --git a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
index 46d9531ad..9fadf5abb 100644
--- a/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
+++ b/packages/core/src/services/paywallWorkspace/PaywallWorkspaceService.ts
@@ -13,7 +13,7 @@ import {
 } from "@voidhash/paywall-workspace";
 
 import { PaywallNotFoundError } from "../../domain/paywall/Paywall.ts";
-import { MimicHost } from "../paywalls/MimicHost.ts";
+import { MimicHost, type AgentPaywallPresence } from "../paywalls/MimicHost.ts";
 import { PaywallService } from "../paywalls/PaywallService.ts";
 import { ComponentManifestCacheError } from "./ComponentManifestCacheService.ts";
 
@@ -85,6 +85,12 @@ export interface WorkspacePaywallDir {
   readonly paywallId: string;
 }
 
+/** A live Mimic participant connection scoped to one paywall document. */
+export interface WorkspaceDocumentConnection {
+  readonly paywallId: string;
+  readonly connectionId: string;
+}
+
 /**
  * A workspace mutation lowering: a pure transform of the live raw document tree
  * into a mimic command batch (or a typed rejection). The shared
@@ -178,6 +184,20 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
           return paywall;
         });
 
+      const resolvePaywallById = (projectId: string, paywallId: string) =>
+        Effect.gen(function* () {
+          const paywalls = yield* paywallService.getPaywalls(projectId);
+          const paywall = paywalls.find((candidate) => candidate.id === paywallId);
+          if (paywall === undefined) {
+            return yield* Effect.fail(
+              new PaywallNotFoundError({
+                message: `No paywall with id "${paywallId}" in project ${projectId}`,
+              }),
+            );
+          }
+          return paywall;
+        });
+
       /**
        * Reads the current LIVE document for `paywallId` (by id, not slug):
        * ensures the mimic document exists and returns its RAW encoded `tree` (the
@@ -240,6 +260,82 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
           };
         });
 
+      const openDocumentConnection = (
+        projectId: string,
+        paywallId: string,
+        connectionId: string,
+        presence: AgentPaywallPresence,
+      ) =>
+        Effect.gen(function* () {
+          const paywall = yield* resolvePaywallById(projectId, paywallId);
+          yield* mimicHost.ensurePaywallDocument(paywall.id);
+          const document = yield* mimicHost.openPaywallConnection({
+            paywallId: paywall.id,
+            connectionId,
+            presence,
+          });
+          return {
+            slug: paywall.slug,
+            name: paywall.name,
+            paywallId: paywall.id,
+            tree: document.tree,
+            root: document.root,
+            version: document.version,
+          };
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      const readConnectedDocumentTree = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          const document = yield* mimicHost.getConnectedPaywallDocument(connection);
+          return {
+            tree: document.tree,
+            root: document.root,
+            version: document.version,
+          };
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      const heartbeatDocumentConnection = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          yield* mimicHost.heartbeatPaywallConnection(connection);
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      const closeDocumentConnection = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          yield* mimicHost.closePaywallConnection(connection);
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
       /**
        * A workspace mutation, expressed as a pure lowering of the live raw
        * document tree to a command batch (or a rejection). Rename and delete
@@ -267,9 +363,11 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
        * post-accept checkpoint. Returns done+result (accepted or a committed
        * no-op) or `done: false` to retry on conflict.
        */
-      const attemptTransaction = (paywallId: string, lower: Lowering) =>
+      const attemptTransaction = (paywallId: string, lower: Lowering, connectionId?: string) =>
         Effect.gen(function* () {
-          const document = yield* mimicHost.getPaywallDocument(paywallId);
+          const document = yield* connectionId === undefined
+            ? mimicHost.getPaywallDocument(paywallId)
+            : mimicHost.getConnectedPaywallDocument({ paywallId, connectionId });
           const preImage = { tree: document.tree, version: document.version };
           const lowered = yield* lower(document.tree);
 
@@ -299,10 +397,15 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
             };
           }
 
-          const submitted = yield* mimicHost.submitPaywallTransaction(paywallId, {
-            baseVersion: document.version,
-            commands: lowered.commands,
-          });
+          const submitted = yield* connectionId === undefined
+            ? mimicHost.submitPaywallTransaction(paywallId, {
+                baseVersion: document.version,
+                commands: lowered.commands,
+              })
+            : mimicHost.submitConnectedPaywallTransaction(paywallId, connectionId, {
+                baseVersion: document.version,
+                commands: lowered.commands,
+              });
 
           if (submitted.accepted) {
             return {
@@ -337,11 +440,16 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
        * newer base a retried attempt read. A rejected-only or no-op turn never
        * captures.
        */
-      const submitLoop = (paywallId: string, lower: Lowering, onFirstRead?: OnFirstRead) =>
+      const submitLoop = (
+        paywallId: string,
+        lower: Lowering,
+        onFirstRead?: OnFirstRead,
+        connectionId?: string,
+      ) =>
         Effect.gen(function* () {
           let preTurnImage: { readonly tree: unknown; readonly version: number } | undefined;
           for (let attempt = 0; attempt < WRITE_MAX_ATTEMPTS; attempt += 1) {
-            const outcome = yield* attemptTransaction(paywallId, lower);
+            const outcome = yield* attemptTransaction(paywallId, lower, connectionId);
             // Hold the attempt-0 (pre-turn) image; later retries read a newer
             // base, but the checkpoint must always be the pre-turn tree.
             if (attempt === 0) {
@@ -558,14 +666,162 @@ export class PaywallWorkspaceService extends Context.Service<PaywallWorkspaceSer
           }),
         );
 
+      /** Applies validated document edits through an active Mimic connection. */
+      const editConnectedDocument = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+        edits: readonly DocumentEdit[],
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          let mintedIds: MintedIds = {};
+          const outcome = yield* submitLoop(
+            connection.paywallId,
+            (tree) =>
+              Effect.sync(() => {
+                const applied = applyDocumentEditsToTree({ tree, edits });
+                mintedIds = applied.mintedIds;
+                return applied.result;
+              }),
+            undefined,
+            connection.connectionId,
+          );
+          return {
+            ...outcome.result,
+            mintedIds: outcome.result.commandCount === 0 ? {} : mintedIds,
+          } satisfies EditDocumentResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /** Creates or replaces a component source through an active connection. */
+      const writeConnectedComponentSource = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+        path: string,
+        source: string,
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          const outcome = yield* submitLoop(
+            connection.paywallId,
+            (tree) => Effect.succeed(writeComponentSourceToTree({ tree, path, source })),
+            undefined,
+            connection.connectionId,
+          );
+          return {
+            ...outcome.result,
+            diagnostics: outcome.loweringDiagnostics,
+          } satisfies WorkspaceMutationResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /** Moves a component file through an active connection. */
+      const moveConnectedComponentFile = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+        fromFileName: string,
+        toFileName: string,
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          const fromPath = docRelativeFromFileName(fromFileName);
+          const toPath = docRelativeFromFileName(toFileName);
+          const outcome = yield* submitLoop(
+            connection.paywallId,
+            (tree) => Effect.succeed(applyWorkspaceMove({ fromPath, toPath, tree })),
+            undefined,
+            connection.connectionId,
+          );
+          return {
+            ...outcome.result,
+            diagnostics: outcome.loweringDiagnostics,
+          } satisfies WorkspaceMutationResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /** Deletes a component file through an active connection. */
+      const deleteConnectedComponentFile = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+        fileName: string,
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          const path = docRelativeFromFileName(fileName);
+          const outcome = yield* submitLoop(
+            connection.paywallId,
+            (tree) => Effect.succeed(applyWorkspaceDelete({ path, tree })),
+            undefined,
+            connection.connectionId,
+          );
+          return {
+            ...outcome.result,
+            diagnostics: outcome.loweringDiagnostics,
+          } satisfies WorkspaceMutationResult;
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
+      /** Reconciles to a captured tree through an active connection. */
+      const revertConnectedDocument = (
+        projectId: string,
+        connection: WorkspaceDocumentConnection,
+        capturedTree: unknown,
+      ) =>
+        Effect.gen(function* () {
+          yield* resolvePaywallById(projectId, connection.paywallId);
+          const outcome = yield* submitLoop(
+            connection.paywallId,
+            (current) => Effect.succeed(reconcileToTree({ current, target: capturedTree })),
+            undefined,
+            connection.connectionId,
+          );
+          return outcome.result satisfies { version: number; commandCount: number };
+        }).pipe(
+          Effect.catchTags({
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new PaywallWorkspaceServiceError({ message: error.message })),
+          }),
+        );
+
       return {
+        closeDocumentConnection,
+        deleteConnectedComponentFile,
         listPaywalls,
+        heartbeatDocumentConnection,
+        openDocumentConnection,
+        readConnectedDocumentTree,
         readDocumentTree,
         readDocument,
+        editConnectedDocument,
         editDocument,
+        moveConnectedComponentFile,
         writeComponentSource,
+        writeConnectedComponentSource,
         moveComponentFile,
         deleteComponentFile,
+        revertConnectedDocument,
         revertDocument,
       } as const;
     }),
diff --git a/packages/core/src/services/paywalls/MimicHost.ts b/packages/core/src/services/paywalls/MimicHost.ts
index 0345371c0..aacbd08d2 100644
--- a/packages/core/src/services/paywalls/MimicHost.ts
+++ b/packages/core/src/services/paywalls/MimicHost.ts
@@ -49,6 +49,13 @@ export interface PaywallDocument {
   readonly root: unknown;
 }
 
+/** Presence identity published for a connected AI editing participant. */
+export interface AgentPaywallPresence {
+  readonly editSessionId: string;
+  readonly source: "built_in" | "mcp";
+  readonly name: string;
+}
+
 /**
  * The result of submitting a granular transaction: whether the document DO
  * accepted it (optimistic-concurrency check on `baseVersion` passed and the
@@ -104,6 +111,31 @@ export interface MimicHostShape {
     paywallId: string,
   ) => Effect.Effect<PaywallDocument, MimicHostError>;
 
+  /** Opens a leased agent participant connection and publishes its presence. */
+  readonly openPaywallConnection: (input: {
+    readonly paywallId: string;
+    readonly connectionId: string;
+    readonly presence: AgentPaywallPresence;
+  }) => Effect.Effect<PaywallDocument, MimicHostError>;
+
+  /** Reads through an active agent connection and renews its lease. */
+  readonly getConnectedPaywallDocument: (input: {
+    readonly paywallId: string;
+    readonly connectionId: string;
+  }) => Effect.Effect<PaywallDocument, MimicHostError>;
+
+  /** Renews an active agent connection without reading the document. */
+  readonly heartbeatPaywallConnection: (input: {
+    readonly paywallId: string;
+    readonly connectionId: string;
+  }) => Effect.Effect<void, MimicHostError>;
+
+  /** Closes an agent connection and removes its presence from the document. */
+  readonly closePaywallConnection: (input: {
+    readonly paywallId: string;
+    readonly connectionId: string;
+  }) => Effect.Effect<void, MimicHostError>;
+
   /**
    * Submits a granular transaction (a plain mimic `Command[]` batch at
    * `baseVersion`) to the paywall's document DO, which linearizes it against
@@ -124,6 +156,16 @@ export interface MimicHostShape {
       readonly commands: ReadonlyArray<unknown>;
     },
   ) => Effect.Effect<SubmitPaywallTransactionResult, MimicHostError>;
+
+  /** Submits a granular transaction through an active agent connection. */
+  readonly submitConnectedPaywallTransaction: (
+    paywallId: string,
+    connectionId: string,
+    input: {
+      readonly baseVersion: number;
+      readonly commands: ReadonlyArray<unknown>;
+    },
+  ) => Effect.Effect<SubmitPaywallTransactionResult, MimicHostError>;
 }
 
 /**
diff --git a/packages/core/src/utils/generate-id.ts b/packages/core/src/utils/generate-id.ts
index 359d05c1b..a2854a29c 100644
--- a/packages/core/src/utils/generate-id.ts
+++ b/packages/core/src/utils/generate-id.ts
@@ -17,7 +17,7 @@ const prefixes = {
   purchase: "pur",
   paywall: "pw",
   paywallEditToken: "pw_et",
-  paywallEditChangeSet: "pw_change",
+  paywallEditSession: "pw_edit",
   paywallProduct: "pw_prod",
   paywallRelease: "pw_pub",
   paymentProviderConfiguration: "pp_conf",
diff --git a/packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts b/packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts
index 6738404b2..1b0f7d4dc 100644
--- a/packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts
+++ b/packages/core/test/services/paywallWorkspace/PaywallWorkspaceAuthorization.integration.test.ts
@@ -14,6 +14,7 @@ const paywallSlug = `workspace-auth-${suffix}`;
 const mimicCalls: string[] = [];
 
 const MimicHostTest = Layer.succeed(MimicHost, {
+  closePaywallConnection: () => Effect.void,
   ensurePaywallDocument: (id: string) =>
     Effect.sync(() => {
       mimicCalls.push(`ensure:${id}`);
@@ -30,6 +31,22 @@ const MimicHostTest = Layer.succeed(MimicHost, {
       mimicCalls.push(`document:${id}`);
       return { root: null, tree: { kind: "tree", nodes: [] }, version: 1 };
     }),
+  getConnectedPaywallDocument: (input) =>
+    Effect.sync(() => {
+      mimicCalls.push(`connected-document:${input.paywallId}`);
+      return { root: null, tree: { kind: "tree", nodes: [] }, version: 1 };
+    }),
+  heartbeatPaywallConnection: () => Effect.void,
+  openPaywallConnection: (input) =>
+    Effect.sync(() => {
+      mimicCalls.push(`open:${input.paywallId}`);
+      return { root: null, tree: { kind: "tree", nodes: [] }, version: 1 };
+    }),
+  submitConnectedPaywallTransaction: (id: string) =>
+    Effect.sync(() => {
+      mimicCalls.push(`connected-submit:${id}`);
+      return { accepted: true, version: 2 };
+    }),
   submitPaywallTransaction: (id: string) =>
     Effect.sync(() => {
       mimicCalls.push(`submit:${id}`);
diff --git a/packages/db/src/alchemy-migrations/20260715120000_rename_paywall_edit_sessions/migration.sql b/packages/db/src/alchemy-migrations/20260715120000_rename_paywall_edit_sessions/migration.sql
new file mode 100644
index 000000000..a9d8ef312
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260715120000_rename_paywall_edit_sessions/migration.sql
@@ -0,0 +1,17 @@
+ALTER TABLE "paywall_edit_change_set" RENAME TO "paywall_edit_session";
+--> statement-breakpoint
+ALTER INDEX "paywall_edit_change_set_project_idx" RENAME TO "paywall_edit_session_project_idx";
+--> statement-breakpoint
+ALTER INDEX "paywall_edit_change_set_paywall_idx" RENAME TO "paywall_edit_session_paywall_idx";
+--> statement-breakpoint
+ALTER INDEX "paywall_edit_change_set_agent_session_idx" RENAME TO "paywall_edit_session_agent_session_idx";
+--> statement-breakpoint
+ALTER INDEX "paywall_edit_change_set_active_idx" RENAME TO "paywall_edit_session_active_idx";
+--> statement-breakpoint
+ALTER TABLE "paywall_edit_session" ADD COLUMN "last_agent_version" integer;
+--> statement-breakpoint
+UPDATE "paywall_edit_session" SET "last_agent_version" = "baseline_version";
+--> statement-breakpoint
+ALTER TABLE "paywall_edit_session" ALTER COLUMN "last_agent_version" SET NOT NULL;
+--> statement-breakpoint
+ALTER TABLE "paywall_edit_session" ADD COLUMN "revert_safe" boolean DEFAULT true NOT NULL;
diff --git a/packages/db/src/alchemy-migrations/20260715140000_allow_concurrent_paywall_edit_sessions/migration.sql b/packages/db/src/alchemy-migrations/20260715140000_allow_concurrent_paywall_edit_sessions/migration.sql
new file mode 100644
index 000000000..ba0db8a70
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260715140000_allow_concurrent_paywall_edit_sessions/migration.sql
@@ -0,0 +1 @@
+DROP INDEX IF EXISTS "paywall_edit_session_active_idx";
diff --git a/packages/db/src/alchemy-migrations/20260715153000_add_component_preview_trees/migration.sql b/packages/db/src/alchemy-migrations/20260715153000_add_component_preview_trees/migration.sql
new file mode 100644
index 000000000..8e4cace2e
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260715153000_add_component_preview_trees/migration.sql
@@ -0,0 +1,2 @@
+ALTER TABLE "paywall_component_manifest"
+ADD COLUMN "preview_trees" jsonb;
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index cc1e0bcc2..f1b2c6a98 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -1329,31 +1329,33 @@ export const paywalls = pgTable(
   (table) => [uniqueIndex("paywall_slug_project_id_idx").on(table.slug, table.projectId)],
 );
 
-export const PaywallEditChangeSetStatus = {
+export const PaywallEditSessionStatus = {
   active: "active",
   finished: "finished",
   reverted: "reverted",
 } as const;
 
-export type PaywallEditChangeSetStatusValue =
-  (typeof PaywallEditChangeSetStatus)[keyof typeof PaywallEditChangeSetStatus];
+export type PaywallEditSessionStatusValue =
+  (typeof PaywallEditSessionStatus)[keyof typeof PaywallEditSessionStatus];
 
 /**
- * An explicit agentic authoring change set for one paywall. The baseline is
- * captured when editing starts so the complete set of edits can be reverted.
+ * A connected agentic authoring session for one paywall. The baseline is
+ * captured when editing starts so the session's edits can be reverted.
  */
-export const paywallEditChangeSets = pgTable(
-  "paywall_edit_change_set",
+export const paywallEditSessions = pgTable(
+  "paywall_edit_session",
   {
     id: varchar("id", { length: 64 }).primaryKey(),
     projectId: varchar("project_id", { length: 255 }).notNull(),
-    /** Durable internal agent session that owns this change set, or null for MCP. */
+    /** Durable internal agent session that owns this edit session, or null for MCP. */
     agentSessionId: varchar("agent_session_id", { length: 64 }),
     paywallId: varchar("paywall_id", { length: 255 }).notNull(),
     paywallSlug: varchar("paywall_slug", { length: 255 }).notNull(),
     baselineTree: jsonb("baseline_tree").$type<unknown>().notNull(),
     baselineVersion: integer("baseline_version").notNull(),
-    status: varchar("status", { length: 16 }).$type<PaywallEditChangeSetStatusValue>().notNull(),
+    lastAgentVersion: integer("last_agent_version").notNull(),
+    revertSafe: boolean("revert_safe").default(true).notNull(),
+    status: varchar("status", { length: 16 }).$type<PaywallEditSessionStatusValue>().notNull(),
     lastPreviewSignature: varchar("last_preview_signature", { length: 80 }),
     lastPreviewVersion: integer("last_preview_version"),
     reviewVerdict: text("review_verdict"),
@@ -1365,12 +1367,9 @@ export const paywallEditChangeSets = pgTable(
     finishedAt: timestamp("finished_at", { withTimezone: true, precision: 3 }),
   },
   (table) => [
-    index("paywall_edit_change_set_project_idx").on(table.projectId),
-    index("paywall_edit_change_set_paywall_idx").on(table.paywallId),
-    index("paywall_edit_change_set_agent_session_idx").on(table.agentSessionId),
-    uniqueIndex("paywall_edit_change_set_active_idx")
-      .on(table.projectId, table.paywallId)
-      .where(sql`${table.status} = 'active'`),
+    index("paywall_edit_session_project_idx").on(table.projectId),
+    index("paywall_edit_session_paywall_idx").on(table.paywallId),
+    index("paywall_edit_session_agent_session_idx").on(table.agentSessionId),
   ],
 );
 
@@ -1424,6 +1423,7 @@ export const paywallComponentManifests = pgTable("paywall_component_manifest", {
   sourceHash: varchar("source_hash", { length: 64 }).primaryKey(),
   status: varchar("status", { length: 16 }).notNull().$type<PaywallComponentManifestStatusValue>(),
   manifest: jsonb("manifest").$type<unknown>(),
+  previewTrees: jsonb("preview_trees").$type<Readonly<Record<string, unknown>>>(),
   diagnostics: jsonb("diagnostics").$type<ReadonlyArray<PaywallComponentManifestDiagnostic>>(),
   createdAt: timestamp("created_at", { withTimezone: true, precision: 3 }).defaultNow().notNull(),
   updatedAt: timestamp("updated_at", { withTimezone: true, precision: 3 })
diff --git a/packages/mimic-schema/src/presence.ts b/packages/mimic-schema/src/presence.ts
index b122d74f5..12b3073ca 100644
--- a/packages/mimic-schema/src/presence.ts
+++ b/packages/mimic-schema/src/presence.ts
@@ -10,6 +10,22 @@ export const PresenceSchema = Primitive.Struct({
     y: Primitive.Number().required(),
   }),
   name: Primitive.String(),
+  participant: Primitive.Union(
+    {
+      agent: Primitive.Struct({
+        editSessionId: Primitive.String().required(),
+        kind: Primitive.Literal("agent").required(),
+        source: Primitive.Either(
+          Primitive.Literal("built_in"),
+          Primitive.Literal("mcp"),
+        ).required(),
+      }),
+      human: Primitive.Struct({
+        kind: Primitive.Literal("human").required(),
+      }),
+    },
+    { discriminator: "kind" },
+  ).required(),
   selectedNodeIds: Primitive.Array(Primitive.String()).default([]),
   user: Primitive.Struct({
     color: Primitive.String().required(),
diff --git a/packages/mimic-server/src/effect/RawCollectionHandle.ts b/packages/mimic-server/src/effect/RawCollectionHandle.ts
index 72f50b351..c9ce755fc 100644
--- a/packages/mimic-server/src/effect/RawCollectionHandle.ts
+++ b/packages/mimic-server/src/effect/RawCollectionHandle.ts
@@ -28,6 +28,17 @@ export interface RawTransactionResult {
   readonly reason?: string;
 }
 
+export interface RawDocumentConnectionInput {
+  readonly connectionId: string;
+  readonly presence: unknown;
+  readonly leaseMs?: number;
+}
+
+export interface RawConnectedTransactionInput extends RawTransactionInput {
+  readonly connectionId: string;
+  readonly leaseMs?: number;
+}
+
 /**
  * "Raw" collection handle for callers that work with dynamic schemas at
  * runtime (admin UI, tooling). Does not encode/decode through a `Primitive`;
@@ -172,6 +183,95 @@ export class RawCollectionHandle {
     });
   }
 
+  /** Opens a leased headless participant connection to a document. */
+  openDocumentConnection(
+    documentId: string,
+    input: RawDocumentConnectionInput,
+  ): Effect.Effect<RawDocumentSnapshot, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.OpenDocumentConnection({
+          collectionId: this.id,
+          documentId,
+          connectionId: input.connectionId,
+          presence: input.presence,
+          leaseMs: input.leaseMs,
+        }) as Effect.Effect<RawDocumentSnapshot, unknown>,
+    );
+  }
+
+  /** Reads a document through an active headless connection and renews its lease. */
+  getConnectedDocument(
+    documentId: string,
+    connectionId: string,
+    leaseMs?: number,
+  ): Effect.Effect<RawDocumentSnapshot, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.GetConnectedDocument({
+          collectionId: this.id,
+          documentId,
+          connectionId,
+          leaseMs,
+        }) as Effect.Effect<RawDocumentSnapshot, unknown>,
+    );
+  }
+
+  /** Renews the lease for an active headless document connection. */
+  heartbeatDocumentConnection(
+    documentId: string,
+    connectionId: string,
+    leaseMs?: number,
+  ): Effect.Effect<void, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.HeartbeatDocumentConnection({
+          collectionId: this.id,
+          documentId,
+          connectionId,
+          leaseMs,
+        }) as Effect.Effect<void, unknown>,
+    );
+  }
+
+  /** Closes a headless document connection and removes its presence. */
+  closeDocumentConnection(documentId: string, connectionId: string): Effect.Effect<void, unknown> {
+    return this.sdk.runEffect(
+      (client) =>
+        client.CloseDocumentConnection({
+          collectionId: this.id,
+          documentId,
+          connectionId,
+        }) as Effect.Effect<void, unknown>,
+    );
+  }
+
+  /** Submits a granular transaction through an active headless connection. */
+  submitConnectedTransaction(
+    documentId: string,
+    input: RawConnectedTransactionInput,
+  ): Effect.Effect<RawTransactionResult, unknown> {
+    const transactionId =
+      input.id ??
+      (typeof globalThis.crypto?.randomUUID === "function"
+        ? globalThis.crypto.randomUUID()
+        : `${Date.now()}-${Math.random().toString(36).slice(2)}`);
+    return this.sdk.runEffect(
+      (client) =>
+        client.SubmitConnectedTransaction({
+          collectionId: this.id,
+          documentId,
+          connectionId: input.connectionId,
+          leaseMs: input.leaseMs,
+          transaction: {
+            id: transactionId,
+            baseVersion: input.baseVersion,
+            commands: input.commands as never,
+          },
+        }) as Effect.Effect<RawTransactionResult, unknown>,
+    );
+  }
+
   setupDocumentAuthentication(
     options: SetupDocumentAuthenticationOptions,
   ): Effect.Effect<DocumentAuthenticationSetup, unknown> {
diff --git a/packages/mimic-server/src/effect/index.ts b/packages/mimic-server/src/effect/index.ts
index 2701464ad..3e9f29785 100644
--- a/packages/mimic-server/src/effect/index.ts
+++ b/packages/mimic-server/src/effect/index.ts
@@ -2,7 +2,13 @@ export { type MimicClientConfig, makeMimicProtocolLayer } from "./RpcClient.ts";
 export { MimicSDK } from "./MimicSDK.ts";
 export { DatabaseHandle } from "./DatabaseHandle.ts";
 export { CollectionHandle } from "./CollectionHandle.ts";
-export { RawCollectionHandle } from "./RawCollectionHandle.ts";
+export {
+  RawCollectionHandle,
+  type RawConnectedTransactionInput,
+  type RawDocumentConnectionInput,
+  type RawTransactionInput,
+  type RawTransactionResult,
+} from "./RawCollectionHandle.ts";
 export type {
   CollectionInfo,
   CreateUserResult,
diff --git a/packages/mimic-server/src/promise/MimicSDK.ts b/packages/mimic-server/src/promise/MimicSDK.ts
index dec74fd05..77c6eac04 100644
--- a/packages/mimic-server/src/promise/MimicSDK.ts
+++ b/packages/mimic-server/src/promise/MimicSDK.ts
@@ -5,6 +5,11 @@ import { CollectionHandle as EffectCollectionHandle } from "../effect/Collection
 import { DatabaseHandle as EffectDatabaseHandle } from "../effect/DatabaseHandle.ts";
 import { MimicSDK as EffectMimicSDK } from "../effect/MimicSDK.ts";
 import { RawCollectionHandle as EffectRawCollectionHandle } from "../effect/RawCollectionHandle.ts";
+import type {
+  RawConnectedTransactionInput,
+  RawDocumentConnectionInput,
+  RawTransactionResult,
+} from "../effect/RawCollectionHandle.ts";
 import type { MimicClientConfig } from "../effect/RpcClient.ts";
 import type {
   CollectionInfo,
@@ -259,6 +264,55 @@ export class RawCollectionHandle {
     return this.effect.sdk.runtime.runPromise(this.effect.setDocumentRaw(documentId, value));
   }
 
+  /** Opens a leased headless participant connection to a document. */
+  openDocumentConnection(
+    documentId: string,
+    input: RawDocumentConnectionInput,
+  ): Promise<RawDocumentSnapshot> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.openDocumentConnection(documentId, input),
+    );
+  }
+
+  /** Reads a document through an active headless connection. */
+  getConnectedDocument(
+    documentId: string,
+    connectionId: string,
+    leaseMs?: number,
+  ): Promise<RawDocumentSnapshot> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.getConnectedDocument(documentId, connectionId, leaseMs),
+    );
+  }
+
+  /** Renews an active headless connection lease. */
+  heartbeatDocumentConnection(
+    documentId: string,
+    connectionId: string,
+    leaseMs?: number,
+  ): Promise<void> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.heartbeatDocumentConnection(documentId, connectionId, leaseMs),
+    );
+  }
+
+  /** Closes a headless connection and removes its presence. */
+  closeDocumentConnection(documentId: string, connectionId: string): Promise<void> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.closeDocumentConnection(documentId, connectionId),
+    );
+  }
+
+  /** Submits a granular transaction through an active headless connection. */
+  submitConnectedTransaction(
+    documentId: string,
+    input: RawConnectedTransactionInput,
+  ): Promise<RawTransactionResult> {
+    return this.effect.sdk.runtime.runPromise(
+      this.effect.submitConnectedTransaction(documentId, input),
+    );
+  }
+
   setupDocumentAuthentication(
     options: SetupDocumentAuthenticationOptions,
   ): Promise<DocumentAuthenticationSetup> {
diff --git a/packages/mimic-server/src/rpc/groups/documents.ts b/packages/mimic-server/src/rpc/groups/documents.ts
index 80930e598..d372b37df 100644
--- a/packages/mimic-server/src/rpc/groups/documents.ts
+++ b/packages/mimic-server/src/rpc/groups/documents.ts
@@ -53,6 +53,62 @@ export const SubmitTransaction = Rpc.make("SubmitTransaction", {
   error: Schema.Union([NotFoundError, InvalidValueError, VersionConflictError, ForbiddenError]),
 });
 
+export const OpenDocumentConnection = Rpc.make("OpenDocumentConnection", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+    connectionId: Schema.String,
+    presence: ValueRpcSchema,
+    leaseMs: Schema.optional(Schema.Number),
+  }),
+  success: DocumentSnapshotResponseSchema,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const GetConnectedDocument = Rpc.make("GetConnectedDocument", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+    connectionId: Schema.String,
+    leaseMs: Schema.optional(Schema.Number),
+  }),
+  success: DocumentSnapshotResponseSchema,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const HeartbeatDocumentConnection = Rpc.make("HeartbeatDocumentConnection", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+    connectionId: Schema.String,
+    leaseMs: Schema.optional(Schema.Number),
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const CloseDocumentConnection = Rpc.make("CloseDocumentConnection", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+    connectionId: Schema.String,
+  }),
+  success: Schema.Void,
+  error: Schema.Union([NotFoundError, ForbiddenError]),
+});
+
+export const SubmitConnectedTransaction = Rpc.make("SubmitConnectedTransaction", {
+  payload: Schema.Struct({
+    collectionId: Schema.String,
+    documentId: Schema.String,
+    connectionId: Schema.String,
+    leaseMs: Schema.optional(Schema.Number),
+    transaction: TransactionEnvelopeSchema,
+  }),
+  success: SubmitTransactionResponseSchema,
+  error: Schema.Union([NotFoundError, InvalidValueError, VersionConflictError, ForbiddenError]),
+});
+
 export const DeleteDocument = Rpc.make("DeleteDocument", {
   payload: Schema.Struct({
     collectionId: Schema.String,
@@ -67,5 +123,10 @@ export const DocumentsRpcs = RpcGroup.make(
   GetDocument,
   ListDocuments,
   SubmitTransaction,
+  OpenDocumentConnection,
+  GetConnectedDocument,
+  HeartbeatDocumentConnection,
+  CloseDocumentConnection,
+  SubmitConnectedTransaction,
   DeleteDocument,
 ).middleware(AuthMiddleware);
diff --git a/packages/mimic-server/src/rpc/index.ts b/packages/mimic-server/src/rpc/index.ts
index 1e8ab0973..5a664441f 100644
--- a/packages/mimic-server/src/rpc/index.ts
+++ b/packages/mimic-server/src/rpc/index.ts
@@ -63,10 +63,15 @@ export {
 
 export {
   CreateDocument,
+  CloseDocumentConnection,
   DeleteDocument,
   DocumentsRpcs,
   GetDocument,
+  GetConnectedDocument,
+  HeartbeatDocumentConnection,
   ListDocuments,
+  OpenDocumentConnection,
+  SubmitConnectedTransaction,
   SubmitTransaction,
 } from "./groups/documents.ts";
 
diff --git a/packages/mimic-server/tests/rpc/contracts.test.ts b/packages/mimic-server/tests/rpc/contracts.test.ts
index 1a4611f02..c733c0a30 100644
--- a/packages/mimic-server/tests/rpc/contracts.test.ts
+++ b/packages/mimic-server/tests/rpc/contracts.test.ts
@@ -6,6 +6,7 @@ describe("MimicRpcGroup", () => {
   it("exposes the expected procedure tags", () => {
     const tags = [...MimicRpcGroup.requests.keys()].sort();
     expect(tags).toEqual([
+      "CloseDocumentConnection",
       "CreateCollection",
       "CreateDatabase",
       "CreateDocument",
@@ -14,15 +15,19 @@ describe("MimicRpcGroup", () => {
       "DeleteDatabase",
       "DeleteDocument",
       "DeleteUser",
+      "GetConnectedDocument",
       "GetDocument",
       "GrantPermission",
+      "HeartbeatDocumentConnection",
       "ListCollections",
       "ListDatabases",
       "ListDocuments",
       "ListGrants",
       "ListUsers",
+      "OpenDocumentConnection",
       "RevokePermission",
       "SetupDocumentAuthentication",
+      "SubmitConnectedTransaction",
       "SubmitTransaction",
     ]);
   });
diff --git a/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
index 469e5efae..a1bd06a91 100644
--- a/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
+++ b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
@@ -1,2 +1,2 @@
 /** Generated by scripts/generate-runtime-bundle.mjs. */
-export const PAYWALL_RUNTIME_BUNDLE = "(()=>{var Yn=Object.defineProperty;var Ia=(e,t,r)=>t in e?Yn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Aa=(e,t)=>{for(var r in t)Yn(e,r,{get:t[r],enumerable:!0})};var p=(e,t,r)=>Ia(e,typeof t!=\"symbol\"?t+\"\":t,r);var Wt,k,Qn,Ra,Ne,Xn,ei,ti,$r,Bt,Ct,ri,Gr,Fr,zr,ni,$t={},Ft=[],Ca=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Kt=Array.isArray;function be(e,t){for(var r in t)e[r]=t[r];return e}function Yr(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function qa(e,t,r){var n,i,a,d={};for(a in t)a==\"key\"?n=t[a]:a==\"ref\"?i=t[a]:d[a]=t[a];if(arguments.length>2&&(d.children=arguments.length>3?Wt.call(arguments,2):r),typeof e==\"function\"&&e.defaultProps!=null)for(a in e.defaultProps)d[a]===void 0&&(d[a]=e.defaultProps[a]);return Ht(e,d,n,i,null)}function Ht(e,t,r,n,i){var a={type:e,props:t,key:r,ref:n,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:i??++Qn,__i:-1,__u:0};return i==null&&k.vnode!=null&&k.vnode(a),a}function Q(e){return e.children}function Ut(e,t){this.props=e,this.context=t}function rt(e,t){if(t==null)return e.__?rt(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if((r=e.__k[t])!=null&&r.__e!=null)return r.__e;return typeof e.type==\"function\"?rt(e):null}function Ea(e){if(e.__P&&e.__d){var t=e.__v,r=t.__e,n=[],i=[],a=be({},t);a.__v=t.__v+1,k.vnode&&k.vnode(a),Xr(e.__P,a,t,e.__n,e.__P.namespaceURI,32&t.__u?[r]:null,n,r??rt(t),!!(32&t.__u),i),a.__v=t.__v,a.__.__k[a.__i]=a,di(n,a,i),t.__e=t.__=null,a.__e!=r&&ii(a)}}function ii(e){if((e=e.__)!=null&&e.__c!=null)return e.__e=e.__c.base=null,e.__k.some(function(t){if(t!=null&&t.__e!=null)return e.__e=e.__c.base=t.__e}),ii(e)}function Wr(e){(!e.__d&&(e.__d=!0)&&Ne.push(e)&&!zt.__r++||Xn!=k.debounceRendering)&&((Xn=k.debounceRendering)||ei)(zt)}function zt(){try{for(var e,t=1;Ne.length;)Ne.length>t&&Ne.sort(ti),e=Ne.shift(),t=Ne.length,Ea(e)}finally{Ne.length=zt.__r=0}}function oi(e,t,r,n,i,a,d,l,s,u,f){var c,m,y,N,R,w,P,V=n&&n.__k||Ft,L=t.length;for(s=Da(r,t,V,s,L),c=0;c<L;c++)(y=r.__k[c])!=null&&(m=y.__i!=-1&&V[y.__i]||$t,y.__i=c,w=Xr(e,y,m,i,a,d,l,s,u,f),N=y.__e,y.ref&&m.ref!=y.ref&&(m.ref&&Jr(m.ref,null,y),f.push(y.ref,y.__c||N,y)),R==null&&N!=null&&(R=N),(P=!!(4&y.__u))||m.__k===y.__k?(s=ai(y,s,e,P),P&&m.__e&&(m.__e=null)):typeof y.type==\"function\"&&w!==void 0?s=w:N&&(s=N.nextSibling),y.__u&=-7);return r.__e=R,s}function Da(e,t,r,n,i){var a,d,l,s,u,f=r.length,c=f,m=0;for(e.__k=new Array(i),a=0;a<i;a++)(d=t[a])!=null&&typeof d!=\"boolean\"&&typeof d!=\"function\"?(typeof d==\"string\"||typeof d==\"number\"||typeof d==\"bigint\"||d.constructor==String?d=e.__k[a]=Ht(null,d,null,null,null):Kt(d)?d=e.__k[a]=Ht(Q,{children:d},null,null,null):d.constructor===void 0&&d.__b>0?d=e.__k[a]=Ht(d.type,d.props,d.key,d.ref?d.ref:null,d.__v):e.__k[a]=d,s=a+m,d.__=e,d.__b=e.__b+1,l=null,(u=d.__i=La(d,r,s,c))!=-1&&(c--,(l=r[u])&&(l.__u|=2)),l==null||l.__v==null?(u==-1&&(i>f?m--:i<f&&m++),typeof d.type!=\"function\"&&(d.__u|=4)):u!=s&&(u==s-1?m--:u==s+1?m++:(u>s?m--:m++,d.__u|=4))):e.__k[a]=null;if(c)for(a=0;a<f;a++)(l=r[a])!=null&&(2&l.__u)==0&&(l.__e==n&&(n=rt(l)),si(l,l));return n}function ai(e,t,r,n){var i,a;if(typeof e.type==\"function\"){for(i=e.__k,a=0;i&&a<i.length;a++)i[a]&&(i[a].__=e,t=ai(i[a],t,r,n));return t}e.__e!=t&&(n&&(t&&e.type&&!t.parentNode&&(t=rt(e)),r.insertBefore(e.__e,t||null)),t=e.__e);do t=t&&t.nextSibling;while(t!=null&&t.nodeType==8);return t}function La(e,t,r,n){var i,a,d,l=e.key,s=e.type,u=t[r],f=u!=null&&(2&u.__u)==0;if(u===null&&l==null||f&&l==u.key&&s==u.type)return r;if(n>(f?1:0)){for(i=r-1,a=r+1;i>=0||a<t.length;)if((u=t[d=i>=0?i--:a++])!=null&&(2&u.__u)==0&&l==u.key&&s==u.type)return d}return-1}function Jn(e,t,r){t[0]==\"-\"?e.setProperty(t,r??\"\"):e[t]=r==null?\"\":typeof r!=\"number\"||Ca.test(t)?r:r+\"px\"}function jt(e,t,r,n,i){var a,d;e:if(t==\"style\")if(typeof r==\"string\")e.style.cssText=r;else{if(typeof n==\"string\"&&(e.style.cssText=n=\"\"),n)for(t in n)r&&t in r||Jn(e.style,t,\"\");if(r)for(t in r)n&&r[t]==n[t]||Jn(e.style,t,r[t])}else if(t[0]==\"o\"&&t[1]==\"n\")a=t!=(t=t.replace(ri,\"$1\")),d=t.toLowerCase(),t=d in e||t==\"onFocusOut\"||t==\"onFocusIn\"?d.slice(2):t.slice(2),e.l||(e.l={}),e.l[t+a]=r,r?n?r[Ct]=n[Ct]:(r[Ct]=Gr,e.addEventListener(t,a?zr:Fr,a)):e.removeEventListener(t,a?zr:Fr,a);else{if(i==\"http://www.w3.org/2000/svg\")t=t.replace(/xlink(H|:h)/,\"h\").replace(/sName$/,\"s\");else if(t!=\"width\"&&t!=\"height\"&&t!=\"href\"&&t!=\"list\"&&t!=\"form\"&&t!=\"tabIndex\"&&t!=\"download\"&&t!=\"rowSpan\"&&t!=\"colSpan\"&&t!=\"role\"&&t!=\"popover\"&&t in e)try{e[t]=r??\"\";break e}catch{}typeof r==\"function\"||(r==null||r===!1&&t[4]!=\"-\"?e.removeAttribute(t):e.setAttribute(t,t==\"popover\"&&r==1?\"\":r))}}function Zn(e){return function(t){if(this.l){var r=this.l[t.type+e];if(t[Bt]==null)t[Bt]=Gr++;else if(t[Bt]<r[Ct])return;return r(k.event?k.event(t):t)}}}function Xr(e,t,r,n,i,a,d,l,s,u){var f,c,m,y,N,R,w,P,V,L,z,Pe,et,Rt,tt,M=t.type;if(t.constructor!==void 0)return null;128&r.__u&&(s=!!(32&r.__u),a=[l=t.__e=r.__e]),(f=k.__b)&&f(t);e:if(typeof M==\"function\")try{if(P=t.props,V=M.prototype&&M.prototype.render,L=(f=M.contextType)&&n[f.__c],z=f?L?L.props.value:f.__:n,r.__c?w=(c=t.__c=r.__c).__=c.__E:(V?t.__c=c=new M(P,z):(t.__c=c=new Ut(P,z),c.constructor=M,c.render=Ma),L&&L.sub(c),c.state||(c.state={}),c.__n=n,m=c.__d=!0,c.__h=[],c._sb=[]),V&&c.__s==null&&(c.__s=c.state),V&&M.getDerivedStateFromProps!=null&&(c.__s==c.state&&(c.__s=be({},c.__s)),be(c.__s,M.getDerivedStateFromProps(P,c.__s))),y=c.props,N=c.state,c.__v=t,m)V&&M.getDerivedStateFromProps==null&&c.componentWillMount!=null&&c.componentWillMount(),V&&c.componentDidMount!=null&&c.__h.push(c.componentDidMount);else{if(V&&M.getDerivedStateFromProps==null&&P!==y&&c.componentWillReceiveProps!=null&&c.componentWillReceiveProps(P,z),t.__v==r.__v||!c.__e&&c.shouldComponentUpdate!=null&&c.shouldComponentUpdate(P,c.__s,z)===!1){t.__v!=r.__v&&(c.props=P,c.state=c.__s,c.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(Ve){Ve&&(Ve.__=t)}),Ft.push.apply(c.__h,c._sb),c._sb=[],c.__h.length&&d.push(c);break e}c.componentWillUpdate!=null&&c.componentWillUpdate(P,c.__s,z),V&&c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(y,N,R)})}if(c.context=z,c.props=P,c.__P=e,c.__e=!1,Pe=k.__r,et=0,V)c.state=c.__s,c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),Ft.push.apply(c.__h,c._sb),c._sb=[];else do c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),c.state=c.__s;while(c.__d&&++et<25);c.state=c.__s,c.getChildContext!=null&&(n=be(be({},n),c.getChildContext())),V&&!m&&c.getSnapshotBeforeUpdate!=null&&(R=c.getSnapshotBeforeUpdate(y,N)),Rt=f!=null&&f.type===Q&&f.key==null?li(f.props.children):f,l=oi(e,Kt(Rt)?Rt:[Rt],t,r,n,i,a,d,l,s,u),c.base=t.__e,t.__u&=-161,c.__h.length&&d.push(c),w&&(c.__E=c.__=null)}catch(Ve){if(t.__v=null,s||a!=null)if(Ve.then){for(t.__u|=s?160:128;l&&l.nodeType==8&&l.nextSibling;)l=l.nextSibling;a[a.indexOf(l)]=null,t.__e=l}else{for(tt=a.length;tt--;)Yr(a[tt]);Kr(t)}else t.__e=r.__e,t.__k=r.__k,Ve.then||Kr(t);k.__e(Ve,t,r)}else a==null&&t.__v==r.__v?(t.__k=r.__k,t.__e=r.__e):l=t.__e=Oa(r.__e,t,r,n,i,a,d,s,u);return(f=k.diffed)&&f(t),128&t.__u?void 0:l}function Kr(e){e&&(e.__c&&(e.__c.__e=!0),e.__k&&e.__k.some(Kr))}function di(e,t,r){for(var n=0;n<r.length;n++)Jr(r[n],r[++n],r[++n]);k.__c&&k.__c(t,e),e.some(function(i){try{e=i.__h,i.__h=[],e.some(function(a){a.call(i)})}catch(a){k.__e(a,i.__v)}})}function li(e){return typeof e!=\"object\"||e==null||e.__b>0?e:Kt(e)?e.map(li):e.constructor!==void 0?null:be({},e)}function Oa(e,t,r,n,i,a,d,l,s){var u,f,c,m,y,N,R,w=r.props||$t,P=t.props,V=t.type;if(V==\"svg\"?i=\"http://www.w3.org/2000/svg\":V==\"math\"?i=\"http://www.w3.org/1998/Math/MathML\":i||(i=\"http://www.w3.org/1999/xhtml\"),a!=null){for(u=0;u<a.length;u++)if((y=a[u])&&\"setAttribute\"in y==!!V&&(V?y.localName==V:y.nodeType==3)){e=y,a[u]=null;break}}if(e==null){if(V==null)return document.createTextNode(P);e=document.createElementNS(i,V,P.is&&P),l&&(k.__m&&k.__m(t,a),l=!1),a=null}if(V==null)w===P||l&&e.data==P||(e.data=P);else{if(a=V==\"textarea\"&&P.defaultValue!=null?null:a&&Wt.call(e.childNodes),!l&&a!=null)for(w={},u=0;u<e.attributes.length;u++)w[(y=e.attributes[u]).name]=y.value;for(u in w)y=w[u],u==\"dangerouslySetInnerHTML\"?c=y:u==\"children\"||u in P||u==\"value\"&&\"defaultValue\"in P||u==\"checked\"&&\"defaultChecked\"in P||jt(e,u,null,y,i);for(u in P)y=P[u],u==\"children\"?m=y:u==\"dangerouslySetInnerHTML\"?f=y:u==\"value\"?N=y:u==\"checked\"?R=y:l&&typeof y!=\"function\"||w[u]===y||jt(e,u,y,w[u],i);if(f)l||c&&(f.__html==c.__html||f.__html==e.innerHTML)||(e.innerHTML=f.__html),t.__k=[];else if(c&&(e.innerHTML=\"\"),oi(t.type==\"template\"?e.content:e,Kt(m)?m:[m],t,r,n,V==\"foreignObject\"?\"http://www.w3.org/1999/xhtml\":i,a,d,a?a[0]:r.__k&&rt(r,0),l,s),a!=null)for(u=a.length;u--;)Yr(a[u]);l&&V!=\"textarea\"||(u=\"value\",V==\"progress\"&&N==null?e.removeAttribute(\"value\"):N!=null&&(N!==e[u]||V==\"progress\"&&!N||V==\"option\"&&N!=w[u])&&jt(e,u,N,w[u],i),u=\"checked\",R!=null&&R!=e[u]&&jt(e,u,R,w[u],i))}return e}function Jr(e,t,r){try{if(typeof e==\"function\"){var n=typeof e.__u==\"function\";n&&e.__u(),n&&t==null||(e.__u=e(t))}else e.current=t}catch(i){k.__e(i,r)}}function si(e,t,r){var n,i;if(k.unmount&&k.unmount(e),(n=e.ref)&&(n.current&&n.current!=e.__e||Jr(n,null,t)),(n=e.__c)!=null){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(a){k.__e(a,t)}n.base=n.__P=null}if(n=e.__k)for(i=0;i<n.length;i++)n[i]&&si(n[i],t,r||typeof e.type!=\"function\");r||Yr(e.__e),e.__c=e.__=e.__e=void 0}function Ma(e,t,r){return this.constructor(e,r)}function ui(e,t,r){var n,i,a,d;t==document&&(t=document.documentElement),k.__&&k.__(e,t),i=(n=typeof r==\"function\")?null:r&&r.__k||t.__k,a=[],d=[],Xr(t,e=(!n&&r||t).__k=qa(Q,null,[e]),i||$t,$t,t.namespaceURI,!n&&r?[r]:i?null:t.firstChild?Wt.call(t.childNodes):null,a,!n&&r?r:i?i.__e:t.firstChild,n,d),di(a,e,d)}function ci(e){function t(r){var n,i;return this.getChildContext||(n=new Set,(i={})[t.__c]=this,this.getChildContext=function(){return i},this.componentWillUnmount=function(){n=null},this.shouldComponentUpdate=function(a){this.props.value!=a.value&&n.forEach(function(d){d.__e=!0,Wr(d)})},this.sub=function(a){n.add(a);var d=a.componentWillUnmount;a.componentWillUnmount=function(){n&&n.delete(a),d&&d.call(a)}}),r.children}return t.__c=\"__cC\"+ni++,t.__=e,t.Provider=t.__l=(t.Consumer=function(r,n){return r.children(n)}).contextType=t,t}Wt=Ft.slice,k={__e:function(e,t,r,n){for(var i,a,d;t=t.__;)if((i=t.__c)&&!i.__)try{if((a=i.constructor)&&a.getDerivedStateFromError!=null&&(i.setState(a.getDerivedStateFromError(e)),d=i.__d),i.componentDidCatch!=null&&(i.componentDidCatch(e,n||{}),d=i.__d),d)return i.__E=i}catch(l){e=l}throw e}},Qn=0,Ra=function(e){return e!=null&&e.constructor===void 0},Ut.prototype.setState=function(e,t){var r;r=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=be({},this.state),typeof e==\"function\"&&(e=e(be({},r),this.props)),e&&be(r,e),e!=null&&this.__v&&(t&&this._sb.push(t),Wr(this))},Ut.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),Wr(this))},Ut.prototype.render=Q,Ne=[],ei=typeof Promise==\"function\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,ti=function(e,t){return e.__v.__b-t.__v.__b},zt.__r=0,$r=Math.random().toString(8),Bt=\"__d\"+$r,Ct=\"__a\"+$r,ri=/(PointerCapture)$|Capture$/i,Gr=0,Fr=Zn(!1),zr=Zn(!0),ni=0;function fi(e){if(e==null)return;let t=\"value\"in e&&typeof e.value==\"object\"?e.value:e;if(!(t==null||typeof t.color!=\"string\"))return{color:t.color,position:t.position??0}}var pi={center:\"auto\",contain:\"contain\",cover:\"cover\",stretch:\"100% 100%\"};function mi(e,t){let r=t.map(i=>`<stop offset='${i.position}' stop-color='${i.color}'/>`).join(\"\");return`<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${e.kind===\"radial\"?(()=>{let i=Math.hypot(e.endX-e.startX,e.endY-e.startY);return`<radialGradient id='g' cx='${e.startX}' cy='${e.startY}' r='${i}'>${r}</radialGradient>`})():`<linearGradient id='g' x1='${e.startX}' y1='${e.startY}' x2='${e.endX}' y2='${e.endY}'>${r}</linearGradient>`}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`}function nt(e){if(!e.backgroundEnabled)return{backgroundColor:\"transparent\"};let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return{backgroundColor:e.backgroundColor}}function Gt(e){let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor}}function g(e){return e===0?\"0\":`${e}px`}function We(e){return e===\"auto\"||e===void 0?\"auto\":g(e)}function it(e){let t={alignItems:e.alignItems,boxSizing:\"border-box\",display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:We(e.height),justifyContent:e.justifyContent,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),position:e.position??\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),Object.assign(t,nt(e)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),t.borderTopLeftRadius=g(e.borderTopLeftRadius??0),t.borderTopRightRadius=g(e.borderTopRightRadius??0),t.borderBottomRightRadius=g(e.borderBottomRightRadius??0),t.borderBottomLeftRadius=g(e.borderBottomLeftRadius??0),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Yt(e,{horizontal:t,showsScrollIndicator:r}){let n=it(e);return n.minHeight??(n.minHeight=0),n.minWidth??(n.minWidth=0),n.WebkitOverflowScrolling=\"touch\",t?(n.flexDirection=\"row\",n.overflowX=\"auto\",n.overflowY=\"hidden\"):(n.overflowX=\"hidden\",n.overflowY=\"auto\"),r||(n.scrollbarWidth=\"none\"),n}function Xt(e){return{fill:e.fillEnabled?e.fillColor:\"none\",fillRule:e.fillRule,fillOpacity:e.fillOpacity,stroke:e.strokeEnabled?e.strokeColor:\"none\",strokeWidth:e.strokeWidth,strokeOpacity:e.strokeOpacity,strokeLinecap:e.strokeLinecap,strokeLinejoin:e.strokeLinejoin,opacity:e.opacity}}function Jt(e){let t={boxSizing:\"border-box\",height:\"100vh\",overflow:\"hidden\",width:\"100vw\"};return Object.assign(t,nt(e)),t}function Zt(e){return{alignItems:e.alignItems,display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:\"100vh\",justifyContent:e.justifyContent,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),width:\"100vw\"}}function Qt(e){let t={boxSizing:\"border-box\",display:e.display===\"none\"?\"none\":\"block\",height:We(e.height),marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,position:\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function er(e){let t={color:e.color,display:e.display,fontSize:g(e.fontSize),fontWeight:e.fontWeight,letterSpacing:g(e.letterSpacing),lineHeight:e.lineHeight,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,position:e.position??\"relative\",textAlign:e.textAlign};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Zr(e){let t={stores:new Map,parents:new Map};return yi(e,null,t),t}function yi(e,t,r){r.parents.set(e.id,t),hi(e,r.stores);for(let n of e.children)yi(n,e.id,r)}function tr(e,t,r,n){let i=new Set,a=r;for(;a!==null&&!i.has(a);){if(i.add(a),t(a)?.has(n))return a;a=e.get(a)??null}}function Qr(e,t,r){return{get:n=>{let i=tr(e,t,r,n);if(i!==void 0)return t(i)?.get(n)}}}function hi(e,t){let r=e.data;if(r!==void 0&&\"localVariables\"in r&&r.localVariables.length>0){let n=new Map,i=new Map;for(let a of r.localVariables){let d=a.value;d?.id===void 0||d.value===void 0||(n.set(d.id,d.value),n.set(a.id,d.value),i.set(a.id,d.id),i.set(d.id,a.id))}n.size>0&&t.set(e.id,{store:n,aliases:i})}for(let n of e.children)hi(n,t)}function vi(e){if(e)return typeof e==\"object\"&&e!==null&&\"id\"in e&&\"value\"in e&&!(\"type\"in e)?e.value:e}function rr(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.some(r=>{let n=vi(r);return n?ja(n,t):!1})}function ja(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.every(r=>{let n=vi(r);return n?Ba(n,t):!1})}function gi(e,t){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}function bi(e){switch(e.key){case\"boolean\":return e.value??!1;case\"number\":return e.value??0;case\"string\":return e.value??\"\";case\"product\":return e.value?.productId??\"\";default:return\"\"}}function Ba(e,t){if(!e?.value?.left||!e?.value?.right)return!1;let r=gi(e.value.left,t),n=gi(e.value.right,t);if(r===void 0||n===void 0)return!1;let i=bi(r),a=bi(n);switch(e.type){case\"equals\":return i===a;case\"not-equals\":return i!==a;case\"greater-than\":return i>a;case\"greater-than-or-equal\":return i>=a;case\"less-than\":return i<a;case\"less-than-or-equal\":return i<=a;default:return!1}}function en(e,t,r){let n={...e};for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=a.overrides.style;if(d)for(let l of Object.keys(d))d[l]!==void 0&&(n[l]=d[l])}}return n}function tn(e,t,r){let n;for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=\"actions\"in a.overrides?a.overrides.actions:void 0;if(d)for(let l of d){let s=\"value\"in l?l.value:l;s&&s.interactionId===e&&(n=s.action)}}}return n}function Ha(e,t){if(e?.type){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}}function Ua(e,t){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(!e.variableId)return;let r=t.get(e.variableId);if(r?.key===\"product\")return r.value?.productId}function rn(e,t,r){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let n=e.payload;if(!n?.newValue||!n.variableId)break;let i=Ha(n.newValue,t);i!==void 0&&r.onSetVariable(n.variableId,i);break}case\"close-paywall\":r.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let n=Ua(e.payload,t);n!==void 0&&r.onPurchaseProduct(n);break}}}function $a(e,t){switch(t.key){case\"string\":return typeof e==\"string\"?{key:\"string\",value:e}:void 0;case\"number\":return typeof e==\"number\"?{key:\"number\",value:e}:void 0;case\"boolean\":return typeof e==\"boolean\"?{key:\"boolean\",value:e}:void 0;case\"product\":return typeof e==\"string\"||typeof e==\"number\"||typeof e==\"boolean\"?{key:\"product\",value:{productId:String(e)}}:void 0;default:return}}function Fa(e,t,r,n){if(!e?.type)return;if(e.type===\"literal\")return e.value;if(e.type===\"variable-reference\")return!e.value||!(\"id\"in e.value)||!e.value.id?void 0:r.get(e.value.id);if(!e.value||!(\"field\"in e.value)||!e.value.field)return;let i=t?.[e.value.field];if(i===void 0)return;let a=r.get(n);if(a!==void 0)return $a(i,a)}function za(e,t,r){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(e.type===\"variable-reference\"){if(!e.variableId)return;let i=r.get(e.variableId);return i?.key===\"product\"?i.value?.productId:void 0}if(!e.field)return;let n=t?.[e.field];return typeof n==\"string\"?n:void 0}function nn(e,t,r,n){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let i=e.payload;if(!i?.newValue||!i.variableId)break;let a=Fa(i.newValue,t,r,i.variableId);a!==void 0&&n.onSetVariable(i.variableId,a);break}case\"close-paywall\":n.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let i=za(e.payload,t,r);i!==void 0&&n.onPurchaseProduct(i);break}}}var on={alignItems:\"stretch\",boxSizing:\"border-box\",display:\"flex\",flexBasis:\"auto\",flexDirection:\"column\",flexShrink:0,margin:0,minHeight:0,minWidth:0,padding:0,position:\"relative\"},Wa={boxSizing:\"border-box\",display:\"block\",margin:0,padding:0,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"},Ka={boxSizing:\"border-box\",display:\"block\"},Ga={...on,cursor:\"pointer\",touchAction:\"manipulation\",userSelect:\"none\"},Ya={...on,overflowX:\"hidden\",overflowY:\"auto\",WebkitOverflowScrolling:\"touch\"},Xa={image:Ka,pressable:Ga,scroll:Ya,text:Wa,view:on},Ti=[\"flex\",\"gap\"],Ja=[\"backgroundType\",\"backgroundGradient\",\"backgroundImage\"],Za=new Set([...Ti,...Ja]),Qa=new Set([\"aspectRatio\",\"flex\",\"flexGrow\",\"flexShrink\",\"fontWeight\",\"opacity\",\"zIndex\"]);function Si(e,t){return typeof t==\"number\"&&!Qa.has(e)?t===0?0:`${t}px`:t}var ed={center:\"none\",contain:\"contain\",cover:\"cover\",stretch:\"fill\"};function nr(e){return ed[e??\"cover\"]}function an(e){if(!e)return{};let t=[];return(e.x!==void 0||e.y!==void 0)&&t.push(`translate3d(${e.x??0}px, ${e.y??0}px, 0)`),e.rotate!==void 0&&t.push(`rotate(${e.rotate}deg)`),e.scale!==void 0&&t.push(`scale(${e.scale})`),e.scaleX!==void 0&&t.push(`scaleX(${e.scaleX})`),e.scaleY!==void 0&&t.push(`scaleY(${e.scaleY})`),{...e.opacity===void 0?{}:{opacity:e.opacity},...e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor},...t.length===0?{}:{transform:t.join(\" \")},...e.transformOrigin===void 0?{}:{transformOrigin:`${e.transformOrigin.x*100}% ${e.transformOrigin.y*100}%`}}}function ir(e,t,r){let n={...Xa[t]},i=(d,l)=>{delete n[d],n[d]=Si(d,l)};for(let d of Ti){let l=e[d];l!==void 0&&(n[d]=Si(d,l))}for(let[d,l]of Object.entries(e))l===void 0||Za.has(d)||typeof l!=\"string\"&&typeof l!=\"number\"||i(d,l);return(e.borderTopWidth!==void 0||e.borderRightWidth!==void 0||e.borderBottomWidth!==void 0||e.borderLeftWidth!==void 0||e.borderColor!==void 0)&&e.borderStyle===void 0&&(n.borderStyle=\"solid\"),(e.backgroundType===\"gradient\"||e.backgroundType===\"image\")&&(delete n.backgroundColor,Object.assign(n,Gt({backgroundColor:typeof e.backgroundColor==\"string\"?e.backgroundColor:void 0,backgroundType:e.backgroundType,backgroundGradient:e.backgroundGradient,backgroundImage:e.backgroundImage}))),Object.assign(n,an(r)),n}var qt,A,dn,xi,ar=0,Ai=[],C=k,wi=C.__b,Pi=C.__r,Vi=C.diffed,Ni=C.__c,_i=C.unmount,ki=C.__;function sn(e,t){C.__h&&C.__h(A,e,ar||t),ar=0;var r=A.__H||(A.__H={__:[],__h:[]});return e>=r.__.length&&r.__.push({}),r.__[e]}function Ri(e){return ar=1,td(qi,e)}function td(e,t,r){var n=sn(qt++,2);if(n.t=e,!n.__c&&(n.__=[r?r(t):qi(void 0,t),function(l){var s=n.__N?n.__N[0]:n.__[0],u=n.t(s,l);s!==u&&(n.__N=[u,n.__[1]],n.__c.setState({}))}],n.__c=A,!A.__f)){var i=function(l,s,u){if(!n.__c.__H)return!0;var f=n.__c.__H.__.filter(function(m){return m.__c});if(f.every(function(m){return!m.__N}))return!a||a.call(this,l,s,u);var c=n.__c.props!==l;return f.some(function(m){if(m.__N){var y=m.__[0];m.__=m.__N,m.__N=void 0,y!==m.__[0]&&(c=!0)}}),a&&a.call(this,l,s,u)||c};A.__f=!0;var a=A.shouldComponentUpdate,d=A.componentWillUpdate;A.componentWillUpdate=function(l,s,u){if(this.__e){var f=a;a=void 0,i(l,s,u),a=f}d&&d.call(this,l,s,u)},A.shouldComponentUpdate=i}return n.__N||n.__}function j(e,t){var r=sn(qt++,7);return id(r.__H,t)&&(r.__=e(),r.__H=t,r.__h=e),r.__}function ee(e,t){return ar=8,j(function(){return e},t)}function Ci(e){var t=A.context[e.__c],r=sn(qt++,9);return r.c=e,t?(r.__==null&&(r.__=!0,t.sub(A)),t.props.value):e.__}function rd(){for(var e;e=Ai.shift();){var t=e.__H;if(e.__P&&t)try{t.__h.some(or),t.__h.some(ln),t.__h=[]}catch(r){t.__h=[],C.__e(r,e.__v)}}}C.__b=function(e){A=null,wi&&wi(e)},C.__=function(e,t){e&&t.__k&&t.__k.__m&&(e.__m=t.__k.__m),ki&&ki(e,t)},C.__r=function(e){Pi&&Pi(e),qt=0;var t=(A=e.__c).__H;t&&(dn===A?(t.__h=[],A.__h=[],t.__.some(function(r){r.__N&&(r.__=r.__N),r.u=r.__N=void 0})):(t.__h.some(or),t.__h.some(ln),t.__h=[],qt=0)),dn=A},C.diffed=function(e){Vi&&Vi(e);var t=e.__c;t&&t.__H&&(t.__H.__h.length&&(Ai.push(t)!==1&&xi===C.requestAnimationFrame||((xi=C.requestAnimationFrame)||nd)(rd)),t.__H.__.some(function(r){r.u&&(r.__H=r.u),r.u=void 0})),dn=A=null},C.__c=function(e,t){t.some(function(r){try{r.__h.some(or),r.__h=r.__h.filter(function(n){return!n.__||ln(n)})}catch(n){t.some(function(i){i.__h&&(i.__h=[])}),t=[],C.__e(n,r.__v)}}),Ni&&Ni(e,t)},C.unmount=function(e){_i&&_i(e);var t,r=e.__c;r&&r.__H&&(r.__H.__.some(function(n){try{or(n)}catch(i){t=i}}),r.__H=void 0,t&&C.__e(t,r.__v))};var Ii=typeof requestAnimationFrame==\"function\";function nd(e){var t,r=function(){clearTimeout(n),Ii&&cancelAnimationFrame(t),setTimeout(e)},n=setTimeout(r,35);Ii&&(t=requestAnimationFrame(r))}function or(e){var t=A,r=e.__c;typeof r==\"function\"&&(e.__c=void 0,r()),A=t}function ln(e){var t=A;e.__c=e.__(),A=t}function id(e,t){return!e||e.length!==t.length||t.some(function(r,n){return r!==e[n]})}function qi(e,t){return typeof t==\"function\"?t(e):t}var od=0;function b(e,t,r,n,i,a){t||(t={});var d,l,s=t;if(\"ref\"in s)for(l in s={},t)l==\"ref\"?d=t[l]:s[l]=t[l];var u={type:e,props:s,key:r,ref:d,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:--od,__i:-1,__u:0,__source:i,__self:a};if(typeof e==\"function\"&&(d=e.defaultProps))for(l in d)s[l]===void 0&&(s[l]=d[l]);return k.vnode&&k.vnode(u),u}var ad=new Map,Di=ci(null);function Ei(e){let t=JSON.stringify(e);window.ReactNativeWebView?window.ReactNativeWebView.postMessage(t):window.parent.postMessage(e,\"*\")}function Li({snapshot:e,componentArtifacts:t,locale:r,children:n}){let i=j(()=>Zr(e),[e]),a=(e.type===\"root\"?e.data.localization?.defaultLocale:void 0)??\"en\",[d,l]=Ri(()=>{let w=new Map;for(let[P,{store:V}]of i.stores)w.set(P,V);return w}),s=j(()=>new Map,[i,d]),u=ee(w=>{let P=s.get(w);if(P)return P;let V=Qr(i.parents,L=>d.get(L),w);return s.set(w,V),V},[s,d,i]),f=ee((w,P,V)=>{l(L=>{let z=tr(i.parents,Ve=>L.get(Ve),w,P);if(z===void 0)return L;let Pe=L.get(z);if(!Pe)return L;let et=new Map(Pe);et.set(P,V);let tt=i.stores.get(z)?.aliases?.get(P);tt&&et.set(tt,V);let M=new Map(L);return M.set(z,et),M})},[i]),c=ee(()=>{Ei({type:\"paywall:close\"})},[]),m=ee(w=>{Ei({type:\"paywall:purchase\",productId:w})},[]),y=ee((w,P)=>{console.warn(`onSetVariable called directly for \"${w}\" without node context. Use the scoped callback from useInteractions instead.`)},[]),N=j(()=>({onClosePaywall:c,onPurchaseProduct:m,onSetVariable:y}),[c,m,y]),R=j(()=>({getNodeVariables:u,setNodeVariable:f,callbacks:N,componentArtifacts:t,locale:r,defaultLocale:a}),[u,f,N,t,r,a]);return b(Di.Provider,{value:R,children:n})}function te(){let e=Ci(Di);return e||{getNodeVariables:()=>ad,setNodeVariable:()=>{},callbacks:{onClosePaywall:()=>{},onPurchaseProduct:()=>{},onSetVariable:()=>{}},componentArtifacts:void 0,locale:void 0,defaultLocale:\"en\"}}var dd={alignSelf:\"flex-start\",backgroundColor:\"#18181b\",borderRadius:\"999px\",boxSizing:\"border-box\",color:\"#fafafa\",display:\"inline-flex\",fontFamily:\"inherit\",fontSize:\"11px\",fontWeight:600,lineHeight:\"16px\",padding:\"2px 8px\"};function Oi({props:e}){let t=typeof e.label==\"string\"?e.label:\"New\";return b(\"span\",{style:dd,children:t})}var Mi={\"sample-badge\":Oi};function ji(e,t){let r={};for(let n of e){let i=n.value;if(!i?.name)continue;let a=i.value;if(a?.type){if(a.type===\"literal\"){a.value&&(r[i.name]=a.value.value);continue}if(a.type===\"variable-reference\"){if(!a.value||!(\"id\"in a.value)||!a.value.id)continue;let d=t.get(a.value.id);d!==void 0&&(r[i.name]=d.value)}}}return r}var un={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontFamily:\"inherit\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",position:\"relative\",textAlign:\"center\"};function dr(e,t,r){return{...ir(e,t,r)}}function ld(e,t){if(!e)return;for(let n of[t,\"default\"]){let i=e[n];if(i)return i}let r=Object.keys(e)[0];return r===void 0?void 0:e[r]}function cn({node:e,slot:t,fireAction:r}){switch(e.type){case\"view\":case\"scroll\":return b(\"div\",{style:dr(e.style,e.type,e.motion),children:e.children.map((n,i)=>b(cn,{fireAction:r,node:n,slot:t},i))});case\"pressable\":{let n=e.action;return b(\"div\",{onClick:n===void 0?void 0:()=>r(n),style:dr(e.style,\"pressable\",e.motion),children:e.children.map((a,d)=>b(cn,{fireAction:r,node:a,slot:t},d))})}case\"text\":return b(\"div\",{style:dr(e.style,\"text\",e.motion),children:e.text});case\"image\":return b(\"img\",{alt:\"\",src:e.src,style:{...dr(e.style,\"image\",e.motion),objectFit:nr(e.resizeMode)??\"cover\"}});case\"slot\":return b(Q,{children:t});case\"placeholder\":return b(\"div\",{style:un,children:e.reason});default:return null}}function Bi({node:e,children:t}){let{getNodeVariables:r,setNodeVariable:n,callbacks:i,componentArtifacts:a}=te(),d=r(e.id),l=j(()=>({...i,onSetVariable:(m,y)=>{n(e.id,m,y)}}),[i,e.id,n]),s=ee((m,y)=>{let R=e.data.actionBindings.find(w=>w.value?.name===m)?.value?.action;R&&nn(R,y,d,l)},[e.data.actionBindings,d,l]);if(e.data.componentSource===\"builtin\"){let m=Mi[e.data.componentSlug];if(!m)return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${e.data.componentSlug}\" preview unavailable`});let y=ji(e.data.props,d);return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(m,{fireAction:s,props:y,children:t})})}let u=e.data.componentSource===\"local\"&&e.data.componentPath!==\"\",f=u?a?.localTrees?.[e.data.componentPath]:a?.trees[e.data.contentHash],c=ld(f,e.data.previewState);if(!c){let m=u?e.data.componentPath:e.data.componentSlug;return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${m}\" preview unavailable`})}return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(cn,{fireAction:s,node:c.root,slot:t})})}function W(e,t,r){let{getNodeVariables:n}=te(),i=n(e);return j(()=>en(t,r,i),[t,r,i])}function Hi({node:e}){let t=W(e.id,e.data.style,e.data.states),r=Xt(t);return b(\"path\",{d:e.data.d,fill:r.fill,fillOpacity:r.fillOpacity,fillRule:r.fillRule,opacity:r.opacity,stroke:r.stroke,strokeLinecap:r.strokeLinecap,strokeLinejoin:r.strokeLinejoin,strokeOpacity:r.strokeOpacity,strokeWidth:r.strokeWidth,transform:e.data.transform,vectorEffect:\"non-scaling-stroke\"})}var v={InvalidCommand:\"invalid_command\",InvalidPath:\"invalid_path\",TypeMismatch:\"type_mismatch\",MissingField:\"missing_field\",MissingArrayItem:\"missing_array_item\",MissingTreeNode:\"missing_tree_node\",DuplicateArrayItemId:\"duplicate_array_item_id\",DuplicateArrayPos:\"duplicate_array_pos\",DuplicateTreeNodeId:\"duplicate_tree_node_id\",DuplicateTreePos:\"duplicate_tree_pos\",InvalidTreeParent:\"invalid_tree_parent\",TreeCycle:\"tree_cycle\",TreeNodeValueMustBeObject:\"tree_node_value_must_be_object\",ReservedIdentifier:\"reserved_identifier\"},fn=class extends Error{constructor(r,n=\"\"){super(n?`${r}: ${n}`:r);p(this,\"code\");this.name=\"CoreError\",this.code=r}},S=(e,t)=>new fn(e,t);var I=\"$root\";var re=e=>({kind:\"string\",value:e}),ot=e=>({kind:\"number\",value:e}),at=e=>({kind:\"boolean\",value:e}),ne=(e={})=>({kind:\"object\",fields:e}),pn=(e=[])=>({kind:\"array\",items:e}),mn=(e=[])=>({kind:\"tree\",nodes:e}),Ui=e=>e?[...e]:[],_=e=>{switch(e.kind){case\"string\":case\"number\":case\"boolean\":return{...e};case\"object\":{let t={};for(let[r,n]of Object.entries(e.fields))t[r]=_(n);return{kind:\"object\",fields:t}}case\"array\":return{kind:\"array\",items:e.items.map(t=>({id:t.id,pos:t.pos,value:_(t.value)}))};case\"tree\":return{kind:\"tree\",nodes:e.nodes.map(t=>({id:t.id,parent:t.parent,pos:t.pos,value:_(t.value)}))}}};var lr=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,$i=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,yn=(e,t)=>e.parent<t.parent?-1:e.parent>t.parent?1:$i(e,t);var B=e=>{switch(e.kind){case\"string\":case\"boolean\":return;case\"number\":if(Number.isNaN(e.value)||!Number.isFinite(e.value))throw S(v.InvalidCommand,\"number must be finite\");return;case\"object\":for(let t of Object.values(e.fields))B(t);return;case\"array\":{let t=new Set,r=new Set;for(let n of e.items){if(t.has(n.id))throw S(v.DuplicateArrayItemId,\"duplicate array item id\");if(r.has(n.pos))throw S(v.DuplicateArrayPos,\"duplicate array position\");t.add(n.id),r.add(n.pos),B(n.value)}return}case\"tree\":{let t=new Set,r=new Map,n=new Map;for(let s of e.nodes){if(s.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(s.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(t.has(s.id))throw S(v.DuplicateTreeNodeId,\"duplicate tree node id\");t.add(s.id),r.set(s.id,s);let u=n.get(s.parent)??new Set;if(u.has(s.pos))throw S(v.DuplicateTreePos,\"duplicate tree position\");u.add(s.pos),n.set(s.parent,u),B(s.value)}for(let s of e.nodes)if(s.parent!==I&&!r.has(s.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");let i=new Set,a=new Set,d=s=>{if(i.has(s))throw S(v.TreeCycle,\"tree contains cycle\");if(a.has(s))return;i.add(s);let u=r.get(s);u&&u.parent!==I&&d(u.parent),i.delete(s),a.add(s)},l=[...r.keys()].sort();for(let s of l)d(s);return}}};var hn=(e,t)=>{B(e);let r=_(e);for(let n of t)sd(r,{...n,path:Ui(n.path)});return B(r),r},sd=(e,t)=>{switch(t.kind){case\"value.set\":ud(e,t.path,t.value);return;case\"object.set\":cd(e,t.path,t.key,t.value);return;case\"object.delete\":fd(e,t.path,t.key);return;case\"array.insert\":pd(e,t.path,t.item);return;case\"array.move\":md(e,t.path,t.id,t.pos);return;case\"array.delete\":yd(e,t.path,t.id);return;case\"tree.insert\":hd(e,t.path,t.node);return;case\"tree.move\":gd(e,t.path,t.id,t.parent,t.pos);return;case\"tree.delete\":bd(e,t.path,t.id);return}},ud=(e,t,r)=>{if(t.length===0){Fi(e,_(r));return}K(e,t,n=>{Fi(n,_(r))})},cd=(e,t,r,n)=>{if(!r)throw S(v.InvalidCommand,\"object.set requires key and value\");K(e,t,i=>{if(i.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");i.fields[r]=_(n)})},fd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"object.delete requires key\");K(e,t,n=>{if(n.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");if(!Object.hasOwn(n.fields,r))throw S(v.MissingField,\"object field does not exist\");delete n.fields[r]})},pd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");for(let i of n.items){if(i.id===r.id)throw S(v.DuplicateArrayItemId,\"array item id already exists\");if(i.pos===r.pos)throw S(v.DuplicateArrayPos,\"array item position already exists\")}n.items.push({id:r.id,pos:r.pos,value:_(r.value)}),n.items.sort(lr)})},md=(e,t,r,n)=>{if(!r||!n)throw S(v.InvalidCommand,\"array.move requires id and pos\");K(e,t,i=>{if(i.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let a=-1;for(let d=0;d<i.items.length;d+=1){let l=i.items[d];if(l?.id===r){a=d;continue}if(l?.pos===n)throw S(v.DuplicateArrayPos,\"array item position already exists\")}if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");i.items[a]={...i.items[a],pos:n},i.items.sort(lr)})},yd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"array.delete requires id\");K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let i=zi(n.items,r);if(i===-1)throw S(v.MissingArrayItem,\"array item does not exist\");n.items.splice(i,1)})},hd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(r.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(r.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(Et(n.nodes,r.id)!==-1)throw S(v.DuplicateTreeNodeId,\"tree node id already exists\");if(!Wi(n.nodes,r.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(Ki(n.nodes,r.parent,r.pos,\"\"))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");n.nodes.push({id:r.id,parent:r.parent,pos:r.pos,value:_(r.value)}),n.nodes.sort(yn)})},gd=(e,t,r,n,i)=>{if(!r||!n||!i)throw S(v.InvalidCommand,\"tree.move requires id, parent, and pos\");K(e,t,a=>{if(a.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");let d=Et(a.nodes,r);if(d===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");if(!Wi(a.nodes,n))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(n===r||vd(a.nodes,n,r))throw S(v.TreeCycle,\"tree move would create cycle\");if(Ki(a.nodes,n,i,r))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");a.nodes[d]={...a.nodes[d],parent:n,pos:i},a.nodes.sort(yn)})},bd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"tree.delete requires id\");K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(Et(n.nodes,r)===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");let i=new Set([r]),a=!0;for(;a;){a=!1;for(let l of n.nodes)i.has(l.parent)&&!i.has(l.id)&&(i.add(l.id),a=!0)}let d=n.nodes.filter(l=>!i.has(l.id));n.nodes.splice(0,n.nodes.length,...d)})},K=(e,t,r)=>{if(t.length===0){r(e);return}let n=t[0],i=t.slice(1);switch(n.kind){case\"field\":if(e.kind!==\"object\")throw S(v.TypeMismatch,\"field path requires object\");if(!Object.hasOwn(e.fields,n.key))throw S(v.MissingField,\"field does not exist\");K(e.fields[n.key],i,r);return;case\"item\":if(e.kind!==\"array\")throw S(v.TypeMismatch,\"item path requires array\");{let a=zi(e.items,n.id);if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");K(e.items[a].value,i,r)}return;case\"node\":if(e.kind!==\"tree\")throw S(v.TypeMismatch,\"node path requires tree\");{let a=Et(e.nodes,n.id);if(a===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");K(e.nodes[a].value,i,r)}return}},Fi=(e,t)=>{for(let r of Object.keys(e))delete e[r];Object.assign(e,t)},zi=(e,t)=>e.findIndex(r=>r.id===t),Et=(e,t)=>e.findIndex(r=>r.id===t),Wi=(e,t)=>t===I||Et(e,t)!==-1,Ki=(e,t,r,n)=>e.some(i=>i.parent===t&&i.id!==n&&i.pos===r),vd=(e,t,r)=>{if(t===I)return!1;let n=new Map(e.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}};var gn=class{next(){let t=globalThis.crypto;if(t?.getRandomValues){let r=new Uint32Array(2);t.getRandomValues(r);let n=r[0]>>>5,i=r[1]>>>6;return(n*67108864+i)/9007199254740992}return Math.random()}},bn=class{constructor(t){p(this,\"charset\");p(this,\"random\");p(this,\"useJitter\");this.charset=t?.charset??Xi(),this.random=t?.random,this.useJitter=t?.useJitter??!0}between(t,r){return this.useJitter?wd(t,r,this.charset,this.random??new gn):Ji(t,r,this.charset)}},Sd=e=>{if(e.chars.length<7)throw new Error(\"charSet must be at least 7 characters long\");if([...e.chars].sort().join(\"\")!==e.chars)throw new Error(\"charSet must be sorted\");let r={},n={};for(let s=0;s<e.chars.length;s+=1){let u=e.chars[s];r[u]=s,n[s]=u}let i=r[e.firstPositive],a=r[e.mostPositive],d=r[e.mostNegative];if(i===void 0)throw new Error(\"invalid firstPositive\");if(a===void 0)throw new Error(\"invalid mostPositive\");if(d===void 0)throw new Error(\"invalid mostNegative\");if(a-i<3)throw new Error(\"mostPositive must be at least 3 characters away from neutral\");if(i-d<3)throw new Error(\"mostNegative must be at least 3 characters away from neutral\");let l=e.jitterRange??Math.floor(wn(e.chars.length,3)/5);return{chars:e.chars,byChar:r,byCode:n,length:e.chars.length,first:n[0],last:n[e.chars.length-1],firstPositive:e.firstPositive,mostPositive:e.mostPositive,firstNegative:n[i-1],mostNegative:e.mostNegative,jitterRange:l,paddingDict:Rd(l,e.chars.length)}},Td=Sd({chars:\"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\",firstPositive:\"a\",mostPositive:\"z\",mostNegative:\"A\"}),Xi=()=>Td;var ke=()=>new bn({charset:Xi()});var xd=e=>`${e.firstPositive}${e.byCode[0]}`,Gi=(e,t)=>{sr(e,t)},Ji=(e,t,r)=>{if(e!==void 0&&Gi(e,r),t!==void 0&&Gi(t,r),e===void 0&&t===void 0)return xd(r);if(e===void 0)return Pd(sr(t,r),r);if(t===void 0)return Zi(sr(e,r),r);if(e>=t)throw new Error(`${e} >= ${t}`);return Vd(e,t,r)};var wd=(e,t,r,n)=>{let i=Ji(e,t,r),a=_d(i,t,r);return a>0?Nd(i,a,r,n):Qi(i,r,n)};var sr=(e,t)=>{let r=eo(e,t),n=Tn(r,t);if(n>e.length)throw new Error(`invalid order key length: ${e}`);return e.slice(0,n)},Zi=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[t.length-1];return[...n].some(a=>a!==i)?`${r}${ao(n,t)}`:no(kd(r,t),\"lower\",t)},Pd=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[0];return[...n].some(a=>a!==i)?`${r}${vn(n,t,!1)}`:no(Id(r,t),\"upper\",t)},Vd=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),a=Sn(n,i,r);a===1&&(n=`${n}${r.first}`,a=r.length);let d=io(Math.floor(a/2),r);return xn(n,d,r)},Qi=(e,t,r)=>{let n=r.next();if(n<0||n>=1)throw new Error(`random value out of range: ${n}`);return xn(e,io(Math.floor(n*t.jitterRange),t),t)},Nd=(e,t,r,n)=>Qi(`${e}${r.first.repeat(t)}`,r,n),Yi=(e,t)=>{let r=t.jitterRange-e;for(let[n,i]of Object.entries(t.paddingDict))if(i>r)return Number(n);return 0},_d=(e,t,r)=>{let n=sr(e,r),i=Zi(n,r),a=0;if(t!==void 0){let l=Sn(e,t,r);l<r.jitterRange+1&&(a=Math.max(a,Yi(l,r)))}let d=Sn(e,i,r);return d<r.jitterRange+1&&(a=Math.max(a,Yi(d,r))),a},eo=(e,t)=>{if(e.length===0)return\"\";let r=0;if(e[0]===t.mostPositive)for(;r<e.length&&e[r]===t.mostPositive;)r+=1;if(e[0]===t.mostNegative)for(;r<e.length&&e[r]===t.mostNegative;)r+=1;return r>=e.length?e:e.slice(0,r+1)},ur=(e,t,r)=>{if(e.length===0)return 0;let n=e[0];if(n>r.mostPositive||n<r.mostNegative)throw new Error(\"invalid firstChar on key\");return n===r.mostPositive&&t===\"positive\"?_e(n,r.mostNegative,r)+1+ur(e.slice(1),t,r):n===r.mostNegative&&t===\"negative\"?_e(n,r.mostPositive,r)+1+ur(e.slice(1),t,r):t===\"positive\"?_e(n,r.mostNegative,r)+2:_e(n,r.mostPositive,r)+2},Tn=(e,t)=>{if(e.length===0)throw new Error(\"head cannot be empty\");let r=e[0];if(r>t.mostPositive||r<t.mostNegative)throw new Error(\"invalid firstChar on key\");return r===t.mostPositive?_e(r,t.firstPositive,t)+1+ur(e.slice(1),\"positive\",t):r===t.mostNegative?_e(r,t.firstNegative,t)+1+ur(e.slice(1),\"negative\",t):r>=t.firstPositive?_e(r,t.firstPositive,t)+2:_e(r,t.firstNegative,t)+2},to=(e,t)=>{if(Tn(e,t)!==e.length)throw new Error(`invalid integer length: ${e}`)},ro=(e,t)=>{let r=eo(e,t);return[r,e.slice(r.length)]},kd=(e,t)=>{let r=e>=t.firstPositive,n=ao(e,t),i=e.at(-1)===t.mostPositive,a=n.at(-1)===t.mostPositive;return r&&a?`${n}${t.mostNegative}`:!r&&i?e.slice(0,-1):n},Id=(e,t)=>{let r=e>=t.firstPositive,n=e.at(-1)===t.mostNegative;return r&&n?vn(e.slice(0,-1),t,!1):!r&&n?`${e}${t.mostPositive}`:vn(e,t,!1)},no=(e,t,r)=>{let n=Tn(e,r),i=t===\"upper\"?r.last:r.first;return`${e}${i.repeat(n-e.length)}`},_e=(e,t,r)=>{let n=r.byChar[e],i=r.byChar[t];if(n===void 0||i===void 0)throw new Error(\"invalid character in distance calculation\");return Math.abs(n-i)},cr=(e,t,r,n)=>{let i=Math.max(e.length,t.length);return r===\"start\"?[n.repeat(i-e.length)+e,n.repeat(i-t.length)+t]:[e+n.repeat(i-e.length),t+n.repeat(i-t.length)]},io=(e,t)=>{if(e===0)return t.byCode[0];let r=\"\",n=e;for(;n>0;)r=`${t.byCode[n%t.length]}${r}`,n=Math.floor(n/t.length);return r},Ad=(e,t)=>{let r=0;for(let n=0;n<e.length;n+=1){let i=e.length-n-1;r+=t.byChar[e[n]]*wn(t.length,i)}return r},xn=(e,t,r)=>{let[n,i]=cr(e,t,\"start\",r.first),a=[],d=0;for(let l=n.length-1;l>=0;l-=1){let s=r.byChar[n[l]]+r.byChar[i[l]]+d;d=Math.floor(s/r.length),a.push(r.byCode[s%r.length])}return d>0&&a.push(r.byCode[d]),a.reverse().join(\"\")},oo=(e,t,r,n)=>{let[i,a]=cr(e,t,\"start\",r.first),d=[],l=0;for(let u=i.length-1;u>=0;u-=1){let f=r.byChar[i[u]],c=r.byChar[a[u]]+l;f<c?(l=1,f+=r.length):l=0,d.push(r.byCode[f-c])}if(l>0)throw new Error(\"subtraction result is negative\");let s=d.reverse().join(\"\");return n?s.replace(new RegExp(`^${r.first}+`),\"\")||r.first:s},ao=(e,t)=>xn(e,t.byCode[1],t),vn=(e,t,r)=>oo(e,t.byCode[1],t,r),Sn=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),[a,d]=n>i?[i,n]:[n,i];return Ad(oo(d,a,r,!0),r)};function Rd(e,t){let r={};for(let n=0;n<100;n+=1){let i=wn(t,n);if(r[n]=i,i>e)break}return r}function wn(e,t){let r=1;for(let n=0;n<t;n+=1)r*=e;return r}var T={InvalidSchema:\"invalid_schema\",MissingRequired:\"missing_required\",TypeMismatch:\"type_mismatch\",LiteralMismatch:\"literal_mismatch\",ValidatorFailed:\"validator_failed\",UnionNoMatch:\"union_no_match\",EitherNoMatch:\"either_no_match\",TreeInvalidRootType:\"tree_invalid_root_type\",TreeInvalidChildType:\"tree_invalid_child_type\",TreeUnknownVariant:\"tree_unknown_variant\"},fr=class extends Error{constructor(r,n=\"\",i){super(n?`${r}: ${n}`:r);p(this,\"code\");p(this,\"valuePath\");p(this,\"schemaPath\");this.name=\"SchemaError\",this.code=r,this.valuePath=i?.valuePath??[],this.schemaPath=i?.schemaPath??[]}},x=(e,t,r)=>new fr(e,t,r),Pn=e=>e instanceof fr;var H=(e,t)=>x(T.InvalidSchema,t,{valuePath:[],schemaPath:e}),Z=(e,t,r)=>{if(typeof e!=\"object\"||e===null||Array.isArray(e))throw H(t,r);return e},ve=(e,t,r)=>{if(typeof e!=\"string\")throw H(t,r);return e},Vn=(e,t)=>{if(typeof e!=\"number\"||Number.isNaN(e)||!Number.isFinite(e))throw H(t,\"validator value must be a finite number\");return e};var qd=(e,t)=>{if(e!==void 0){if(typeof e!=\"string\")throw H(t,\"value must be a string\");return e}},lo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"string validators must be an array\");return e.map((r,n)=>Ed(r,[...t,n]))}},so=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"number validators must be an array\");return e.map((r,n)=>Dd(r,[...t,n]))}},uo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"array validators must be an array\");return e.map((r,n)=>Ld(r,[...t,n]))}},Ed=(e,t)=>{let r=Z(e,t,\"string validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":case\"length\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"regex\":return{kind:n,pattern:ve(r.pattern,[...t,\"pattern\"],\"regex pattern must be a string\"),flags:qd(r.flags,[...t,\"flags\"])};case\"email\":case\"url\":return{kind:n};default:throw H(t,`unknown string validator ${n}`)}},Dd=(e,t)=>{let r=Z(e,t,\"number validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"min\":case\"max\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"positive\":case\"negative\":case\"int\":return{kind:n};default:throw H(t,`unknown number validator ${n}`)}},Ld=(e,t)=>{let r=Z(e,t,\"array validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};default:throw H(t,`unknown array validator ${n}`)}};var Dt=(e,t,r,n,i)=>{if(r.kind!==t)throw x(T.TypeMismatch,`expected ${e}, got ${r.kind}`,{valuePath:n,schemaPath:i})},pr=(e,t,r,n)=>(Dt(e,\"string\",t,r,n),t),mr=(e,t,r,n)=>(Dt(e,\"number\",t,r,n),t),yr=(e,t,r,n)=>(Dt(e,\"boolean\",t,r,n),t),hr=(e,t,r,n)=>(Dt(e,\"object\",t,r,n),t),co=(e,t,r,n)=>(Dt(e,\"array\",t,r,n),t);var O=(e,t,r)=>x(T.ValidatorFailed,e,{valuePath:t,schemaPath:r}),q=e=>e===void 0?e:_(e),E=e=>e?{required:!0}:{};var fo={kind:\"array\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,element:r.parseSchema(e.element,[...n,\"element\"]),validators:uo(e.validators,[...n,\"validators\"])},e.default,n),serialize:(e,t)=>({kind:\"array\",element:t(e.element),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(r=>({...r}))}:{}}),validate:(e,t,r,n,i)=>{let d=co(e.kind,t,n,i).items.map(l=>{let s=r.validate(e.element,l.value,[...n,{kind:\"item\",id:l.id}],[...i,\"element\"]);if(s===void 0)throw x(T.TypeMismatch,\"array item cannot sanitize to undefined\",{valuePath:[...n,{kind:\"item\",id:l.id}],schemaPath:i});return{id:l.id,pos:l.pos,value:s}});for(let l of e.validators??[])switch(l.kind){case\"minLength\":if(d.length<l.value)throw O(\"array shorter than minLength\",n,i);break;case\"maxLength\":if(d.length>l.value)throw O(\"array longer than maxLength\",n,i);break}return{kind:\"array\",items:d}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var po={kind:\"boolean\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required},e.default,n),serialize:e=>({kind:\"boolean\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>_(yr(\"boolean\",t,n,i)),materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var mo={kind:\"either\",parse:(e,t,r,n)=>{if(!Array.isArray(e.variants))throw x(T.InvalidSchema,\"either variants must be an array\",{schemaPath:[...n,\"variants\"]});return r.normalizeDefault({kind:t.kind,required:t.required,variants:e.variants.map((i,a)=>r.parseSchema(i,[...n,\"variants\",a]))},e.default,n)},serialize:(e,t)=>({kind:\"either\",variants:e.variants.map(r=>t(r)),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=[];for(let d=0;d<e.variants.length;d+=1)try{let l=r.validate(e.variants[d],t,n,[...i,\"variants\",d]);if(l!==void 0)return l}catch(l){l instanceof Error&&a.push(l)}throw x(T.EitherNoMatch,a[0]?.message??\"no either variant matched\",{valuePath:n,schemaPath:i})},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var yo={kind:\"literal\",parse:(e,t,r,n)=>{let i=e.value;if(typeof i!=\"string\"&&typeof i!=\"number\"&&typeof i!=\"boolean\")throw H([...n,\"value\"],\"literal value must be string, number, or boolean\");return r.normalizeDefault({kind:t.kind,required:t.required,value:i},e.default,n)},serialize:e=>({kind:\"literal\",value:e.value,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=typeof e.value==\"string\"?\"string\":typeof e.value==\"number\"?\"number\":\"boolean\",d=a===\"string\"?pr(e.kind,t,n,i):a===\"number\"?mr(e.kind,t,n,i):yr(e.kind,t,n,i);if(d.value!==e.value)throw x(T.LiteralMismatch,\"literal value does not match schema\",{valuePath:n,schemaPath:i});return _(d)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var ho={kind:\"number\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:so(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"number\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=mr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"min\":if(a.value<d.value)throw O(\"number smaller than min\",n,i);break;case\"max\":if(a.value>d.value)throw O(\"number larger than max\",n,i);break;case\"positive\":if(a.value<=0)throw O(\"number is not positive\",n,i);break;case\"negative\":if(a.value>=0)throw O(\"number is not negative\",n,i);break;case\"int\":if(!Number.isInteger(a.value))throw O(\"number is not an integer\",n,i);break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var go={kind:\"object\",parse:(e,t,r,n)=>{let i=Z(e.fields,[...n,\"fields\"],\"object schema fields must be an object\"),a={};for(let[d,l]of Object.entries(i))a[d]=r.parseSchema(l,[...n,\"fields\",d]);return r.normalizeDefault({kind:t.kind,required:t.required,fields:a},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.fields))r[n]=t(i);return{kind:\"object\",fields:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d={};for(let[l,s]of Object.entries(e.fields)){let u=r.validate(s,a.fields[l],[...n,{kind:\"field\",key:l}],[...i,\"fields\",l]);u!==void 0&&(d[l]=u)}return ne(d)},materializeDefault:(e,t,r,n)=>{let i={},a=!1;for(let[d,l]of Object.entries(e.fields)){let s;try{s=t.materializeDefault(l,[...r,{kind:\"field\",key:d}],[...n,\"fields\",d])}catch(u){if(!e.required&&Pn(u)&&u.code===T.MissingRequired)return;throw u}s!==void 0&&(i[d]=s,a=!0)}if(a)return ne(i);if(e.required)throw x(T.MissingRequired,\"required object has no defaultable fields\",{valuePath:r,schemaPath:n})}};var bo={kind:\"string\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:lo(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"string\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=pr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"minLength\":if(a.value.length<d.value)throw O(\"string shorter than minLength\",n,i);break;case\"maxLength\":if(a.value.length>d.value)throw O(\"string longer than maxLength\",n,i);break;case\"length\":if(a.value.length!==d.value)throw O(\"string length mismatch\",n,i);break;case\"regex\":if(!new RegExp(d.pattern,d.flags).test(a.value))throw O(\"string does not match regex\",n,i);break;case\"email\":if(!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(a.value))throw O(\"invalid email\",n,i);break;case\"url\":try{new URL(a.value)}catch{throw O(\"invalid url\",n,i)}break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var vo={kind:\"tree\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"tree discriminator must be a string\"),a=e.roots;if(!Array.isArray(a)||!a.every(s=>typeof s==\"string\"))throw x(T.InvalidSchema,\"tree roots must be a string array\",{schemaPath:[...n,\"roots\"]});let d=Z(e.variants,[...n,\"variants\"],\"tree variants must be an object\"),l={};for(let[s,u]of Object.entries(d)){let f=Z(u,[...n,\"variants\",s],\"tree variant must be an object\"),c=r.parseSchema(f.schema,[...n,\"variants\",s,\"schema\"]);if(c.kind!==\"object\")throw x(T.InvalidSchema,\"tree variant schema must be an object schema\",{schemaPath:[...n,\"variants\",s,\"schema\"]});let m=c.fields[i];if(m?.kind!==\"literal\"||m.value!==s)throw x(T.InvalidSchema,\"tree discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",s,\"schema\",\"fields\",i]});let y=f.children;if(!Array.isArray(y)||!y.every(N=>typeof N==\"string\"))throw x(T.InvalidSchema,\"tree variant children must be a string array\",{schemaPath:[...n,\"variants\",s,\"children\"]});l[s]={schema:c,children:[...y]}}for(let s of a)if(!Object.hasOwn(l,s))throw x(T.InvalidSchema,`unknown tree root variant ${s}`,{schemaPath:[...n,\"roots\"]});for(let[s,u]of Object.entries(l))for(let f of u.children)if(!Object.hasOwn(l,f))throw x(T.InvalidSchema,`unknown tree child variant ${f}`,{schemaPath:[...n,\"variants\",s,\"children\"]});return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,roots:[...a],variants:l},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]={schema:t(i.schema),children:[...i.children]};return{kind:\"tree\",discriminator:e.discriminator,roots:[...e.roots],variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=(()=>{if(t.kind!==\"tree\")throw x(T.TypeMismatch,`expected ${e.kind}, got ${t.kind}`,{valuePath:n,schemaPath:i});return t})(),d=new Map,l=a.nodes.map(s=>{let u=s.value.fields[e.discriminator];if(u===void 0||u.kind!==\"string\")throw x(T.TreeUnknownVariant,\"tree node discriminator is missing or invalid\",{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let f=e.variants[u.value];if(!f)throw x(T.TreeUnknownVariant,`unknown tree variant ${u.value}`,{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});let c=r.validate(f.schema,s.value,[...n,{kind:\"node\",id:s.id}],[...i,\"variants\",u.value,\"schema\"]);return d.set(s.id,u.value),{id:s.id,parent:s.parent,pos:s.pos,value:c}});for(let s of l){let u=d.get(s.id);if(s.parent===I){if(!e.roots.includes(u))throw x(T.TreeInvalidRootType,`tree root type ${u} is not allowed`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"roots\"]});continue}let f=d.get(s.parent);if(!f)throw x(T.TreeUnknownVariant,\"tree parent variant is missing\",{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:i});if(!e.variants[f].children.includes(u))throw x(T.TreeInvalidChildType,`tree child type ${u} is not allowed under ${f}`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"variants\",f,\"children\"]})}return{kind:\"tree\",nodes:l}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var So={kind:\"union\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"union discriminator must be a string\"),a=Z(e.variants,[...n,\"variants\"],\"union variants must be an object\"),d={};for(let[l,s]of Object.entries(a)){let u=r.parseSchema(s,[...n,\"variants\",l]);if(u.kind!==\"object\")throw x(T.InvalidSchema,\"union variants must be object schemas\",{schemaPath:[...n,\"variants\",l]});let f=u.fields[i];if(f?.kind!==\"literal\"||f.value!==l)throw x(T.InvalidSchema,\"union discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",l,\"fields\",i]});d[l]=u}return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,variants:d},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]=t(i);return{kind:\"union\",discriminator:e.discriminator,variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d=a.fields[e.discriminator];if(d===void 0||d.kind!==\"string\")throw x(T.UnionNoMatch,\"union discriminator is missing or invalid\",{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let l=e.variants[d.value];if(!l)throw x(T.UnionNoMatch,`unknown union discriminator ${d.value}`,{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});return r.validate(l,a,n,[...i,\"variants\",d.value])},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var Od={string:bo,number:ho,boolean:po,literal:yo,object:go,array:fo,union:So,either:mo,tree:vo};var Ke=e=>Od[e];var Nn=(e,t,r)=>To(e,t,r),To=(e,t,r)=>\"default\"in e&&e.default!==void 0?_(e.default):Ke(e.kind).materializeDefault(e,Md,t,r),Md={materializeDefault:To};var Lt=(e,t)=>(t!==void 0&&B(t),xo(e,t,[],[])),xo=(e,t,r,n)=>t===void 0?Nn(e,r,n):Ke(e.kind).validate(e,t,jd,r,n),jd={validate:xo,materializeDefault:Nn};var wo=e=>Po(e),Po=e=>Ke(e.kind).serialize(e,Po);var o={};Aa(o,{Array:()=>Xd,ArrayPrimitive:()=>Pr,Boolean:()=>Wd,BooleanPrimitive:()=>Tr,Either:()=>Jd,EitherPrimitive:()=>Vr,Lazy:()=>ol,LazyPrimitive:()=>Ar,Literal:()=>Kd,LiteralPrimitive:()=>xr,Number:()=>zd,NumberPrimitive:()=>Sr,PrimitiveError:()=>h,String:()=>Fd,StringPrimitive:()=>vr,Struct:()=>Yd,StructPrimitive:()=>wr,Tree:()=>nl,TreeNode:()=>tl,TreeNodePrimitive:()=>_r,TreeNodeSelf:()=>Qd,TreePrimitive:()=>Ir,Union:()=>Zd,UnionPrimitive:()=>Nr,commands:()=>$d,expectDefined:()=>Bd,hasOwn:()=>Hd,randomUuid:()=>dt,shortId:()=>Ge});var h=class extends Error{constructor(t){super(t),this.name=\"PrimitiveError\"}},Bd=(e,t)=>{if(e===void 0)throw new h(t);return e},Hd=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),dt=()=>{let e=globalThis.crypto?.randomUUID?.();if(typeof e==\"string\")return e;throw new h(\"crypto.randomUUID is not available in this runtime\")},Vo=\"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ\",Ud=10,Ge=(e=Ud)=>{let t=globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);if(!t)throw new h(\"crypto.getRandomValues is not available in this runtime\");let r=Vo.length,n=Math.floor(256/r)*r,i=\"\",a=new Uint8Array(e);for(;i.length<e;){t(a);for(let d=0;d<a.length&&i.length<e;d+=1){let l=a[d];l<n&&(i+=Vo[l%r])}}return i};var $d=(e,t,r)=>{B(t);let n=Lt(e.schema,t);if(n===void 0)throw new Error(\"Primitive root snapshot cannot be undefined\");let i=[],a=n,d=ke(),l={current:()=>a,emit:s=>{s.length!==0&&(i.push(...s),a=hn(n,i))},generator:{nextArrayItemId:()=>dt(),nextTreeNodeId:()=>Ge(),between:(s,u)=>d.between(s,u)}};return r(e.createProxy(l,[])),i};var D=(e,t)=>{let r=e;for(let n of t){if(r===void 0)return;switch(n.kind){case\"field\":if(r.kind!==\"object\")return;r=r.fields[n.key];break;case\"item\":if(r.kind!==\"array\")return;r=r.items.find(i=>i.id===n.id)?.value;break;case\"node\":if(r.kind!==\"tree\")return;r=r.nodes.find(i=>i.id===n.id)?.value;break}}return r},gr=(e,t)=>{let r=D(e,t);return r?.kind===\"object\"?r:void 0},U=(e,t)=>{let r=D(e,t);return r?.kind===\"array\"?r:void 0},G=(e,t)=>{let r=D(e,t);return r?.kind===\"tree\"?r:void 0},Se=e=>e?[...e.items].sort((t,r)=>t.pos.localeCompare(r.pos)):[],br=(e,t)=>e?.items.find(r=>r.id===t),_n=(e,t)=>{let r=Se(e),n=Ot(t,r.length);return n===void 0?void 0:r[n]},kn=(e,t)=>e?.nodes.find(r=>r.id===t),Ie=(e,t)=>e?e.nodes.filter(r=>r.parent===t).sort((r,n)=>r.pos.localeCompare(n.pos)):[];var Ot=(e,t)=>{let r=e<0?t+e:e;if(!(r<0||r>=t))return r},lt=(e,t)=>{if(t<0||t>e.length)throw new h(`Index ${t} is out of range`);return{lower:t===0?void 0:e[t-1],upper:t===e.length?void 0:e[t]}};var In=(e,t,r)=>{if(!e||t===I)return!1;let n=new Map(e.nodes.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}},An=(e,t)=>[...e,{kind:\"node\",id:t}];var vr=class e{constructor(t){p(this,\"_tag\",\"StringPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"string\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:re(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}length(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"length\",value:t}]})}regex(t,r){return new e({...this.state,validators:[...this.state.validators,{kind:\"regex\",pattern:t.source,flags:t.flags}]})}email(){return new e({...this.state,validators:[...this.state.validators,{kind:\"email\"}]})}url(){return new e({...this.state,validators:[...this.state.validators,{kind:\"url\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"String value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return re(this.state.defaultValue);if(this.state.required)throw new h(\"String value is required\");return}if(typeof t!=\"string\")throw new h(\"Expected string input\");return re(t)}decode(t){return t?.kind===\"string\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Fd=()=>new vr({required:!1,defaultValue:void 0,validators:[]});var Sr=class e{constructor(t){p(this,\"_tag\",\"NumberPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"number\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:ot(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"min\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"max\",value:t}]})}positive(){return new e({...this.state,validators:[...this.state.validators,{kind:\"positive\"}]})}negative(){return new e({...this.state,validators:[...this.state.validators,{kind:\"negative\"}]})}int(){return new e({...this.state,validators:[...this.state.validators,{kind:\"int\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Number value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return ot(this.state.defaultValue);if(this.state.required)throw new h(\"Number value is required\");return}if(typeof t!=\"number\"||globalThis.Number.isNaN(t)||!globalThis.Number.isFinite(t))throw new h(\"Expected finite number input\");return ot(t)}decode(t){return t?.kind===\"number\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},zd=()=>new Sr({required:!1,defaultValue:void 0,validators:[]});var Tr=class e{constructor(t){p(this,\"_tag\",\"BooleanPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"boolean\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:at(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Boolean value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return at(this.state.defaultValue);if(this.state.required)throw new h(\"Boolean value is required\");return}if(typeof t!=\"boolean\")throw new h(\"Expected boolean input\");return at(t)}decode(t){return t?.kind===\"boolean\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Wd=()=>new Tr({required:!1,defaultValue:void 0});var Rn=e=>{switch(typeof e){case\"string\":return re(e);case\"number\":return ot(e);case\"boolean\":return at(e);default:throw new h(`Unsupported scalar value type: ${typeof e}`)}};var xr=class e{constructor(t){p(this,\"_tag\",\"LiteralPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get literal(){return this.state.literal}get schema(){return{kind:\"literal\",value:this.state.literal,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:Rn(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){if(t!==this.state.literal)throw new h(\"Literal default must equal the literal value\");return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Literal value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Literal value is required\");return}if(r!==this.state.literal)throw new h(\"Input does not match the literal value\");return Rn(this.state.literal)}decode(t){if(t!==void 0&&\"value\"in t&&t.value===this.state.literal)return this.state.literal}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Kd=e=>new xr({required:!1,defaultValue:void 0,literal:e});var wr=class e{constructor(t){p(this,\"_tag\",\"StructPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get fields(){return this.state.fields}get schema(){let t={};for(let[r,n]of Object.entries(this.state.fields))t[r]=n.schema;return{kind:\"object\",fields:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}extend(t){return new e({required:this.state.required,defaultValue:void 0,fields:{...this.state.fields,...t}})}partial(t){let r=t?.stripDefaults??!1,n={};for(let[i,a]of Object.entries(this.state.fields))n[i]=No(a,r);return new e({required:this.state.required,defaultValue:void 0,fields:n})}optional(t){let r=t?Object.fromEntries(Object.entries(this.state.fields).map(([n,i])=>[n,No(i,!0)])):this.state.fields;return new e({required:!1,defaultValue:t?void 0:this.state.defaultValue,fields:r})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Struct value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return this.encode(this.state.defaultValue);if(this.state.required)throw new h(\"Struct value is required\");return}if(typeof t!=\"object\"||t===null||Array.isArray(t))throw new h(\"Expected object input\");let r=t,n={};for(let[i,a]of Object.entries(this.state.fields)){let d=a.encodeOptional(r[i]);d!==void 0&&(n[i]=d)}return ne(n)}decode(t){if(t?.kind!==\"object\")return;let r={};for(let[n,i]of Object.entries(this.state.fields)){let a=i.decode(t.fields[n]);a!==void 0&&(r[n]=a)}return r}createProxy(t,r){let n={get:()=>this.decode(D(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},update:i=>{Gd(this.state.fields,t,r,i)}};for(let[i,a]of Object.entries(this.state.fields))n[i]=a.createProxy(t,[...r,{kind:\"field\",key:i}]);return n}},Gd=(e,t,r,n)=>{for(let[i,a]of Object.entries(n)){let d=e[i];if(d){if(a===void 0){gr(t.current(),r)?.fields[i]!==void 0&&t.emit([{kind:\"object.delete\",path:r,key:i}]);continue}if(d._tag===\"StructPrimitive\"&&typeof a==\"object\"&&a!==null&&!Array.isArray(a)){d.createProxy(t,[...r,{kind:\"field\",key:i}]).update(a);continue}t.emit([{kind:\"object.set\",path:r,key:i,value:d.encode(a)}])}}},No=(e,t)=>{let r=e.optional;return typeof r==\"function\"?r.call(e,t):e},Yd=e=>new wr({required:!1,defaultValue:void 0,fields:e});var Pr=class e{constructor(t){p(this,\"_tag\",\"ArrayPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");p(this,\"encodedDefaultCache\");this.state=t}encodedDefault(){return this.encodedDefaultCache===void 0&&(this.encodedDefaultCache={value:this.state.defaultValue===void 0?void 0:this.encodeEntries(this.state.defaultValue)}),this.encodedDefaultCache.value}get element(){return this.state.element}get schema(){let t=this.encodedDefault();return{kind:\"array\",element:this.state.element.schema,...this.state.required?{required:!0}:{},...t!==void 0?{default:_(t)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}minLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}maxLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Array value is undefined\");return r}encodeOptional(t){if(t===void 0){let r=this.encodedDefault();if(r!==void 0)return _(r);if(this.state.required)throw new h(\"Array value is required\");return}if(!globalThis.Array.isArray(t))throw new h(\"Expected array input\");return this.encodeEntries(t)}decode(t){if(t?.kind===\"array\")return Se(t).map(r=>({id:r.id,pos:r.pos,value:this.state.element.decode(r.value)}))}createProxy(t,r){let n=d=>({get id(){return d},get pos(){return br(U(t.current(),r),d)?.pos??\"\"},get value(){return a.state.element.createProxy(t,[...r,{kind:\"item\",id:d}])},get:()=>{let l=br(U(t.current(),r),d);return this.state.element.decode(l?.value)},remove:()=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:l=>{_o(t,r,d,l)},moveToPos:l=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])}}),i=()=>Se(U(t.current(),r)).map(d=>n(d.id)),a=this;return{get length(){return Se(U(t.current(),r)).length},get:()=>this.decode(U(t.current(),r)),set:d=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(d)}])},push:d=>{let l=Se(U(t.current(),r)),s=l.length===0?void 0:l[l.length-1]?.pos,u=t.generator.nextArrayItemId(r),f=t.generator.between(s,void 0);return t.emit([{kind:\"array.insert\",path:r,item:{id:u,pos:f,value:this.state.element.encode(d)}}]),n(u)},insertAt:(d,l)=>{let s=Se(U(t.current(),r)),u=lt(s.map(m=>m.pos),d),f=t.generator.nextArrayItemId(r),c=t.generator.between(u.lower,u.upper);return t.emit([{kind:\"array.insert\",path:r,item:{id:f,pos:c,value:this.state.element.encode(l)}}]),n(f)},insertAtPos:(d,l)=>{let s=t.generator.nextArrayItemId(r);return t.emit([{kind:\"array.insert\",path:r,item:{id:s,pos:d,value:this.state.element.encode(l)}}]),n(s)},remove:d=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:(d,l)=>{_o(t,r,d,l)},moveToPos:(d,l)=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])},at:d=>{let l=_n(U(t.current(),r),d);return l?n(l.id):void 0},first:()=>{let d=_n(U(t.current(),r),0);return d?n(d.id):void 0},last:()=>{let d=Se(U(t.current(),r)),l=d[d.length-1];return l?n(l.id):void 0},findById:d=>{let l=br(U(t.current(),r),d);return l?n(l.id):void 0},find:d=>i().find((s,u,f)=>d(s,u,f)),findIndex:d=>i().findIndex((s,u,f)=>d(s,u,f)),map:d=>i().map((s,u,f)=>d(s,u,f)),filter:d=>i().filter((s,u,f)=>d(s,u,f)),some:d=>i().some((s,u,f)=>d(s,u,f)),every:d=>i().every((s,u,f)=>d(s,u,f)),forEach:d=>{i().forEach((s,u,f)=>d(s,u,f))},[Symbol.iterator]:()=>i()[Symbol.iterator]()}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encodeEntries(t){let r=ke(),n=new Set,i,a=t.map(d=>{let l=r.between(i,void 0);i=l;let s=dt();for(;n.has(s);)s=dt();return n.add(s),{id:s,pos:l,value:this.state.element.encode(d)}});return pn(a)}},_o=(e,t,r,n)=>{let i=Se(U(e.current(),t));if(i.findIndex(c=>c.id===r)===-1)throw new h(`Array item \"${r}\" does not exist`);let d=i.filter(c=>c.id!==r),l=Ot(n,d.length+1);if(l===void 0&&n!==d.length)throw new h(`Index ${n} is out of range`);let s=l??d.length,u=lt(d.map(c=>c.pos),s),f=e.generator.between(u.lower,u.upper);e.emit([{kind:\"array.move\",path:t,id:r,pos:f}])},Xd=e=>new Pr({required:!1,defaultValue:void 0,element:e,validators:[]});var Vr=class e{constructor(t){p(this,\"_tag\",\"EitherPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");if(this.state=t,t.variants.length===0)throw new h(\"Either requires at least one variant\")}get schema(){return{kind:\"either\",variants:this.state.variants.map(t=>t.schema),...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Either value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Either value is required\");return}for(let n of this.state.variants)try{let i=n.encodeOptional(r);if(i!==void 0)return i}catch{}throw new h(\"Either input did not match any variant\")}decode(t){for(let r of this.state.variants){let n=r.decode(t);if(n!==void 0)return n}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}},Jd=(...e)=>new Vr({required:!1,defaultValue:void 0,variants:e});var Nr=class e{constructor(t){p(this,\"_tag\",\"UnionPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get discriminator(){return this.state.discriminator}get variants(){return this.state.variants}get schema(){let t={};for(let[r,n]of Object.entries(this.state.variants)){let i=n.schema;if(i.kind!==\"object\")throw new h(\"Union variants must compile to object schemas\");let a={...i.fields,[this.state.discriminator]:{kind:\"literal\",value:r}};t[r]={kind:\"object\",fields:a}}return{kind:\"union\",discriminator:this.state.discriminator,variants:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Union value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Union value is required\");return}if(typeof r!=\"object\"||r===null||Array.isArray(r))throw new h(\"Expected union input object\");let n=this.resolveVariantKey(r),i=this.state.variants[n];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);let a=i.encode(r);if(a.kind!==\"object\")throw new h(\"Union variant must encode to an object value\");return ne({...a.fields,[this.state.discriminator]:re(String(n))})}decode(t){if(t?.kind!==\"object\")return;let r=this.resolveVariantKeyFromObject(t);if(!r)return;let i=this.state.variants[r]?.decode(t);if(i!==void 0)return{...i,[this.state.discriminator]:r}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},as:n=>{let i=this.state.variants[String(n)];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);return i.createProxy(t,r)},match:n=>{let i=gr(t.current(),r),a=i?this.resolveVariantKeyFromObject(i):void 0;if(!a)return;let d=n[a];if(d)return d(this.state.variants[a].createProxy(t,r))}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}resolveVariantKey(t){let r=t[this.state.discriminator];if(typeof r==\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r))return r;let n=Object.entries(this.state.variants).filter(([,i])=>{let a=Object.keys(i.fields);return Object.keys(t).every(d=>d===this.state.discriminator||a.includes(d))}).map(([i])=>i);if(n.length===1)return n[0];throw new h(\"Unable to resolve union variant from input\")}resolveVariantKeyFromObject(t){let r=t.fields[this.state.discriminator];if(r?.kind===\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r.value))return r.value}},Zd=(e,t)=>new Nr({required:!1,defaultValue:void 0,discriminator:t?.discriminator??\"type\",variants:e});var ko=Symbol.for(\"TreeNode.Self\"),Qd={_tag:\"TreeNodeSelf\",_brand:ko},el=e=>typeof e==\"object\"&&e!==null&&\"_brand\"in e&&e._brand===ko,_r=class{constructor(t,r,n){p(this,\"_tag\",\"TreeNodePrimitive\");p(this,\"_Type\");p(this,\"_Data\");p(this,\"_Children\");p(this,\"TSetInput\");p(this,\"type\");p(this,\"data\");p(this,\"childrenInput\");p(this,\"resolvedChildren\");this.type=t,this.data=r,this.childrenInput=n}get children(){if(this.resolvedChildren===void 0){let t=typeof this.childrenInput==\"function\"?this.childrenInput():this.childrenInput;this.resolvedChildren=t.map(r=>el(r)?this:r)}return this.resolvedChildren}isChildAllowed(t){return this.children.some(r=>r.type===t)}},tl=(e,t)=>new _r(e,t.data,t.children);var Ir=class e{constructor(t){p(this,\"_tag\",\"TreePrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){let t=rl(this.state.root);return{kind:\"tree\",discriminator:\"type\",roots:[this.state.root.type],variants:t,...this.state.required?{required:!0}:{},...this.state.encodedDefault!==void 0?{default:_(this.state.encodedDefault)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t,encodedDefault:this.encodeRoots(t)})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Tree value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.encodedDefault!==void 0)return _(this.state.encodedDefault);if(this.state.required)throw new h(\"Tree value is required\");return}if(!Array.isArray(t))throw new h(\"Expected tree root input array\");return this.encodeRoots(t)}encodeRoots(t){let r=[],n=kr(this.state.root),i=new Set([I]),a,d=ke(),l=(s,u,f,c)=>{let m=n.get(s.type);if(!m)throw new h(`Unknown tree node type \"${s.type}\"`);if(!f.some(w=>w.type===m.type))throw new h(`Node type \"${s.type}\" is not allowed here`);let y=s.id??il(i);if(i.has(y))throw new h(`Duplicate tree node id \"${y}\" in encoded input`);i.add(y);let N=d.between(c,void 0);r.push({id:y,parent:u,pos:N,value:Cn(m,s)});let R;for(let w of s.children??[])R=l(w,y,m.children,R);return N};for(let s of t)a=l(s,I,[this.state.root],a);return mn(r)}decode(t){if(t?.kind!==\"tree\")return;let r=kr(this.state.root);return Ro(t,I,r)}createProxy(t,r){let n=kr(this.state.root);return{get:()=>this.decode(G(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},findByIdAcrossTree:i=>{let a=G(t.current(),r),d=kn(a,i);if(!d)return;let l=d.value.fields.type,s=n.get(l?.kind===\"string\"?l.value:\"\");return s?Ye(t,r,n,s,i):void 0},children:Ao(t,r,n,I,[this.state.root])}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue,encodedDefault:t?void 0:this.state.encodedDefault})}},Ao=(e,t,r,n,i)=>{let a=()=>Ie(G(e.current(),t),n).filter(l=>i.some(s=>s.type===ie(l))).map(l=>Ye(e,t,r,r.get(ie(l)),l.id)),d={__parentId:n,get length(){return a().length},at:l=>{let s=Ie(G(e.current(),t),n).filter(c=>i.some(m=>m.type===ie(c))),u=Ot(l,s.length),f=u===void 0?void 0:s[u];return f?Ye(e,t,r,r.get(ie(f)),f.id):void 0},first:()=>d.at(0),last:()=>{let l=a();return l[l.length-1]},findById:l=>{let s=Ie(G(e.current(),t),n).find(f=>f.id===l);if(!s)return;let u=r.get(ie(s));return u?Ye(e,t,r,u,s.id):void 0},insertAt:(l,s)=>{let u=G(e.current(),t),f=Ie(u,n).filter(w=>i.some(P=>P.type===ie(w))),c=lt(f.map(w=>w.pos),l),m=Io(i,s.type),y=s.id??e.generator.nextTreeNodeId(t),N=e.generator.between(c.lower,c.upper),R={id:y,parent:n,pos:N,value:Cn(m,s)};return e.emit([{kind:\"tree.insert\",path:t,node:R}]),Ye(e,t,r,m,y)},insertLast:l=>{let s=Ie(G(e.current(),t),n).filter(u=>i.some(f=>f.type===ie(u)));return d.insertAt(s.length,l)},insertAtPos:(l,s)=>{let u=Io(i,s.type),f=s.id??e.generator.nextTreeNodeId(t),c={id:f,parent:n,pos:l,value:Cn(u,s)};return e.emit([{kind:\"tree.insert\",path:t,node:c}]),Ye(e,t,r,u,f)},find:l=>a().find((u,f,c)=>l(u,f,c)),findIndex:l=>a().findIndex((u,f,c)=>l(u,f,c)),map:l=>a().map((u,f,c)=>l(u,f,c)),filter:l=>a().filter((u,f,c)=>l(u,f,c)),some:l=>a().some((u,f,c)=>l(u,f,c)),every:l=>a().every((u,f,c)=>l(u,f,c)),forEach:l=>{a().forEach((u,f,c)=>l(u,f,c))},[Symbol.iterator]:()=>a()[Symbol.iterator]()};return d},Ye=(e,t,r,n,i)=>{let a=()=>kn(G(e.current(),t),i),d=()=>{let l=a();return l?r.get(ie(l))??n:n};return{get id(){return i},get type(){return d().type},get pos(){return a()?.pos??\"\"},get parentId(){let l=a()?.parent;return l===I?null:l??null},get data(){return d().data.createProxy(e,An(t,i))},get children(){return Ao(e,t,r,i,d().children)},get:()=>{let l=a();if(l)return Co(l,G(e.current(),t),r)},update:l=>{d().data.createProxy(e,An(t,i)).update(l)},remove:()=>{e.emit([{kind:\"tree.delete\",path:t,id:i}])},moveTo:(l,s)=>{let u=l.__parentId;if(!u)throw new h(\"Target children collection is not movable\");let f=G(e.current(),t);if(In(f,u,i))throw new h(\"Tree move would create a cycle\");let c=Ie(f,u).filter(N=>N.id!==i),m=lt(c.map(N=>N.pos),s),y=e.generator.between(m.lower,m.upper);e.emit([{kind:\"tree.move\",path:t,id:i,parent:u,pos:y}])},moveToPos:(l,s)=>{let u=G(e.current(),t);if(In(u,l,i))throw new h(\"Tree move would create a cycle\");e.emit([{kind:\"tree.move\",path:t,id:i,parent:l,pos:s}])},as:l=>{if(d().type!==l.type)throw new h(`Expected node type \"${l.type}\", got \"${d().type}\"`);return Ye(e,t,r,l,i)}}},rl=e=>{let t=kr(e),r={};for(let n of t.values()){let i=n.data.schema;if(i.kind!==\"object\")throw new h(\"Tree node data must compile to an object schema\");r[n.type]={schema:{kind:\"object\",fields:{...i.fields,type:{kind:\"literal\",value:n.type}}},children:n.children.map(a=>a.type)}}return r},kr=e=>{let t=new Map,r=n=>{let i=t.get(n.type);if(i&&i!==n)throw new h(`Duplicate tree node type \"${n.type}\"`);if(!i){t.set(n.type,n);for(let a of n.children)r(a)}};return r(e),t},Cn=(e,t)=>{let r=e.data.encode(t);if(r.kind!==\"object\")throw new h(\"Tree node data must encode to an object\");return ne({...r.fields,type:re(e.type)})},ie=e=>{let t=e.value.fields.type;if(t?.kind!==\"string\")throw new h(`Tree node \"${e.id}\" is missing its type discriminator`);return t.value},Ro=(e,t,r)=>Ie(e,t).map(n=>Co(n,e,r)),Co=(e,t,r)=>{let n=r.get(ie(e));if(!n)throw new h(`Unknown tree node type \"${ie(e)}\"`);return{id:e.id,type:n.type,parentId:e.parent===I?null:e.parent,pos:e.pos,data:n.data.decode(e.value),children:Ro(t,e.id,r)}},Io=(e,t)=>{let r=e.find(n=>n.type===t);if(!r)throw new h(`Tree node type \"${t}\" is not allowed in this collection`);return r},nl=e=>new Ir({required:!1,defaultValue:void 0,encodedDefault:void 0,root:e.root}),il=e=>{let t=Ge();for(;e.has(t);)t=Ge();return t};var Ar=class{constructor(t){p(this,\"_tag\",\"LazyPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"thunk\");p(this,\"resolved\");this.thunk=t}get schema(){return this.resolve().schema}encode(t){return this.resolve().encode(t)}encodeOptional(t){return this.resolve().encodeOptional(t)}decode(t){return this.resolve().decode(t)}createProxy(t,r){return this.resolve().createProxy(t,r)}resolve(){return this.resolved===void 0&&(this.resolved=this.thunk()),this.resolved}},ol=e=>new Ar(e);var qo=o.Struct({type:o.Literal(\"click\").required()}),Eo=o.Union({click:qo}),Rr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()})},{discriminator:\"key\"}),Do=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Lo=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),Oo=o.Struct({type:o.Literal(\"none\").required()}),Mo=o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Do.required()}).required()}),jo=o.Struct({type:o.Literal(\"close-paywall\").required()}),Bo=o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Lo.required()}),Cr=o.Union({\"close-paywall\":jo,none:Oo,\"purchase-product\":Bo,\"set-variable\":Mo}),Ho=o.Struct({id:o.String().required(),trigger:Eo.required(),action:Cr.required()}),Mt=o.Array(Ho).default([]);var Uo=o.Struct({key:o.Literal(\"string\").required(),value:o.String().default(\"\")}),$o=o.Struct({key:o.Literal(\"number\").required(),value:o.Number().default(0)}),Fo=o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().default(!1)}),zo=o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).default({})}),qr=o.Union({boolean:Fo,number:$o,product:zo,string:Uo},{discriminator:\"key\"}),Wo=o.Struct({id:o.String().required(),name:o.String().required(),value:qr.required()}),Er=o.Struct({id:o.String().required()});var Dr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),\"boolean-array\":o.Struct({key:o.Literal(\"boolean-array\").required(),value:o.Array(o.Boolean()).required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),\"number-array\":o.Struct({key:o.Literal(\"number-array\").required(),value:o.Array(o.Number()).required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),\"string-array\":o.Struct({key:o.Literal(\"string-array\").required(),value:o.Array(o.String()).required()})},{discriminator:\"key\"}),qn=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Dr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),Ko=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),value:o.Struct({field:o.String().required()}).required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Go=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),field:o.String().required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),En=o.Union({\"close-paywall\":o.Struct({type:o.Literal(\"close-paywall\").required()}),none:o.Struct({type:o.Literal(\"none\").required()}),\"purchase-product\":o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Go.required()}),\"set-variable\":o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Ko.required()}).required()})});var $=o.Array(Wo).default([]),F=o.Array(o.Struct({name:o.String().required(),nodeId:o.String().required()})).default([]);var al=o.Struct({path:o.String().required(),source:o.String().default(\"\")}).required(),Dn=o.TreeNode(\"codeComponent\",{children:[],data:al});var Y=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:qr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),dl=o.Struct({type:o.Literal(\"equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ll=o.Struct({type:o.Literal(\"not-equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),sl=o.Struct({type:o.Literal(\"greater-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ul=o.Struct({type:o.Literal(\"greater-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),cl=o.Struct({type:o.Literal(\"less-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),fl=o.Struct({type:o.Literal(\"less-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),pl=o.Union({equals:dl,\"greater-than\":sl,\"greater-than-or-equal\":ul,\"less-than\":cl,\"less-than-or-equal\":fl,\"not-equals\":ll}),ml=o.Struct({type:o.Literal(\"and\").required(),value:o.Array(pl).minLength(1).required()}),Yo=o.Struct({type:o.Literal(\"or\").required(),value:o.Array(ml).minLength(1).required()}),yl=o.Struct({action:Cr.required(),interactionId:o.String().required()});function Ae(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({style:e}).default({})})}function Lr(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({actions:o.Array(yl).default([]),style:e}).default({})})}var Xe=/^rgba\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d*\\.?\\d+)\\s*\\)$/i,st=o.Number().default(0),ut=o.Number().default(0),ct=o.Number().default(0),ft=o.Number().default(0),oe=o.Number().default(0),ae=o.Number().default(0),de=o.Number().default(0),le=o.Number().default(0),pt=o.Number().default(0),mt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"space-between\"),o.Literal(\"space-around\"),o.Literal(\"space-evenly\")).default(\"flex-start\"),yt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"stretch\"),ht=o.Either(o.Literal(\"row\"),o.Literal(\"column\")).default(\"column\"),se=o.Number(),ue=o.Number().default(0),ce=o.Number().default(1),fe=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),pe=o.Either(o.Literal(\"auto\"),o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"auto\"),gt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),bt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),me=o.Number(),ye=o.Number(),he=o.Number(),ge=o.Number(),Xo=o.Number().default(0),Jo=o.Number().default(0),vt=o.Either(o.Literal(\"absolute\"),o.Literal(\"relative\")).default(\"relative\"),St=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Tt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),xt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),wt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Pt=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),Vt=o.Boolean().default(!1),Nt=o.Either(o.Literal(\"solid\"),o.Literal(\"gradient\"),o.Literal(\"image\")).default(\"solid\"),_t=o.Struct({kind:o.Either(o.Literal(\"linear\"),o.Literal(\"radial\")).default(\"linear\"),startX:o.Number().default(.5),startY:o.Number().default(0),endX:o.Number().default(.5),endY:o.Number().default(1),stops:o.Array(o.Struct({color:o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),position:o.Number().default(0)})).default([{color:\"rgba(255, 255, 255, 1)\",position:0},{color:\"rgba(255, 255, 255, 0)\",position:1}])}).default({}),Te=o.Struct({url:o.String().default(\"\"),resizeMode:o.Either(o.Literal(\"cover\"),o.Literal(\"contain\"),o.Literal(\"stretch\"),o.Literal(\"center\")).default(\"cover\")}).default({}),Re=o.Number().default(0),Ce=o.Number().default(0),qe=o.Number().default(0),Ee=o.Number().default(0),De=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Le=o.Either(o.Literal(\"solid\"),o.Literal(\"dashed\"),o.Literal(\"dotted\")).default(\"solid\"),Or=o.Number().default(0),Mr=o.Number().default(0),jr=o.Number().default(0),Br=o.Number().default(0),Oe=o.Boolean().default(!1),X=o.Number().default(1),Me=o.Either(o.Literal(\"visible\"),o.Literal(\"hidden\"),o.Literal(\"scroll\")).default(\"visible\"),je=o.Number().default(0),J=o.Either(o.Literal(\"flex\"),o.Literal(\"none\")).default(\"flex\"),Be=o.Boolean().default(!1),He=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Ue=o.Number().default(0),$e=o.Number().default(0),Fe=o.Number().default(0),ze=o.Number().default(1),Zo=o.Number().default(16).min(1),Qo=o.Either(o.Literal(\"100\"),o.Literal(\"200\"),o.Literal(\"300\"),o.Literal(\"400\"),o.Literal(\"500\"),o.Literal(\"600\"),o.Literal(\"700\"),o.Literal(\"800\"),o.Literal(\"900\")).default(\"400\"),ea=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),ta=o.Either(o.Literal(\"left\"),o.Literal(\"center\"),o.Literal(\"right\"),o.Literal(\"justify\")).default(\"left\"),ra=o.Number().default(1.5),na=o.Number().default(0),kt=o.Boolean().default(!1),It=o.Boolean().default(!1),ia=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),oa=o.Boolean().default(!1),aa=o.Either(o.Literal(\"nonzero\"),o.Literal(\"evenodd\")).default(\"nonzero\"),da=o.Number().default(1),la=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),sa=o.Boolean().default(!1),ua=o.Number().default(0),ca=o.Number().default(1),fa=o.Either(o.Literal(\"butt\"),o.Literal(\"round\"),o.Literal(\"square\")).default(\"butt\"),pa=o.Either(o.Literal(\"miter\"),o.Literal(\"round\"),o.Literal(\"bevel\")).default(\"miter\");var Ln=o.Struct({fillColor:ia,fillEnabled:oa,fillRule:aa,fillOpacity:da,strokeColor:la,strokeEnabled:sa,strokeWidth:ua,strokeOpacity:ca,strokeLinecap:fa,strokeLinejoin:pa,opacity:X,display:J}).default({}),hl=Ae(Ln.partial({stripDefaults:!0}).default({})),gl=o.Array(hl).default([]),On=o.TreeNode(\"path\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Path\"),states:gl,d:o.String().default(\"\"),transform:o.String(),style:Ln}).required()});var bl=o.Either(o.Literal(\"none\"),o.Literal(\"xMidYMid meet\"),o.Literal(\"xMidYMid slice\")).default(\"xMidYMid meet\"),vl=o.Struct({minX:o.Number().default(0),minY:o.Number().default(0),width:o.Number().default(24),height:o.Number().default(24)}).default({}),Mn=o.Struct({width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,opacity:X,display:J,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\"),preserveAspectRatio:bl}).default({}),Sl=Ae(Mn.partial({stripDefaults:!0}).default({})),Tl=o.Array(Sl).default([]),xe=o.TreeNode(\"shape\",{children:[On],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Shape\"),states:Tl,svgSource:o.String(),viewBox:vl,style:Mn}).required()});var jn=o.Struct({marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,fontSize:Zo,fontWeight:Qo,color:ea,textAlign:ta,lineHeight:ra,letterSpacing:na,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),xl=Ae(jn.partial({stripDefaults:!0}).default({})),wl=o.Array(xl).default([]),Pl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({text:o.String()}).default({})})).default([]),we=o.TreeNode(\"text\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,localized:Pl,name:o.String().default(\"Text\"),states:wl,style:jn,text:o.String().default(\"New Text\")}).required()});var Bn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),Vl=Lr(Bn.partial({stripDefaults:!0}).default({})),Nl=o.Array(Vl).default([]),_l=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Je=o.TreeNode(\"view\",{children:()=>[o.TreeNodeSelf,Ze,we,xe,Qe],data:o.Struct({interactions:Mt,linkedVariables:F,localVariables:$,localized:_l,name:o.String().default(\"View\"),states:Nl,style:Bn}).required()});var Hn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),kl=Lr(Hn.partial({stripDefaults:!0}).default({})),Il=o.Array(kl).default([]),Al=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Rl=o.Struct({horizontal:o.Boolean().default(!1),interactions:Mt,linkedVariables:F,localVariables:$,localized:Al,name:o.String().default(\"ScrollView\"),showsScrollIndicator:o.Boolean().default(!0),states:Il,style:Hn}).required(),Ze=o.TreeNode(\"scrollView\",{children:()=>[Je,o.TreeNodeSelf,we,xe,Qe],data:Rl});var Cl=o.Struct({actionBindings:o.Array(o.Struct({action:En.required(),name:o.String().required()})).default([]),componentSource:o.String().default(\"catalog\"),componentPath:o.String().default(\"\"),componentSlug:o.String().default(\"\"),componentVersion:o.Number().default(0),contentHash:o.String().default(\"\"),name:o.String().default(\"Component\"),previewState:o.String().default(\"default\"),props:o.Array(o.Struct({name:o.String().required(),value:qn.required(),localizedValues:o.Array(o.Struct({locale:o.String().required(),value:Dr.required()})).default([])})).default([])}).required(),Qe=o.TreeNode(\"component\",{children:()=>[Je,Ze,we,xe,o.TreeNodeSelf],data:Cl});var Un=o.TreeNode(\"library\",{children:()=>[Dn],data:o.Struct({}).required()});var $n=o.Struct({x:Xo,y:Jo,width:o.Number().default(375),height:o.Number().default(812),minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,backgroundColor:Pt.default(\"rgba(255, 255, 255, 1)\"),backgroundEnabled:Vt.default(!0),backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),ql=Ae($n.partial({stripDefaults:!0}).default({})),El=o.Array(ql).default([]),Dl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Fn=o.TreeNode(\"screen\",{children:()=>[Je,Ze,we,xe,Qe],data:o.Struct({linkedVariables:F,localVariables:$,localized:Dl,name:o.String().default(\"Screen\"),states:El,style:$n}).required()});var Ll=o.Struct({defaultLocale:o.String().default(\"en\"),locales:o.Array(o.Struct({tag:o.String().required()})).default([])}).default({}),zn=o.TreeNode(\"root\",{children:()=>[Fn,Un],data:o.Struct({localization:Ll,name:o.String()}).required()});var Wn=o.Tree({root:zn});function Hr(e){return e!==null&&typeof e==\"object\"&&\"id\"in e&&\"pos\"in e&&\"value\"in e?e.value:e}function Kn(e){let t=e.indexOf(\"-\");return t===-1?e:e.slice(0,t)}function ma(e,t,r){let n=e.text,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.text;if(f===void 0||f===\"\")continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}function ya(e,t,r){let n=e.style.backgroundImage,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.backgroundImage;if(f===void 0)continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}var Gn=e=>Array.isArray(e)?e.map(Gn):typeof e!=\"object\"||e===null?e:Object.fromEntries(Object.entries(e).sort(([t],[r])=>t.localeCompare(r)).map(([t,r])=>[t,Gn(r)])),ha=e=>JSON.stringify(Gn(wo(e.schema))),ga=e=>{let t=new Map;for(let r of e){let n=`${r.database}\\0${r.collection}`;if(t.has(n))throw new Error(`Duplicate migration collection ${r.database}/${r.collection}`);let i=r.baseline;for(let[a,d]of r.migrations.entries()){let l=a+1;if(!Number.isSafeInteger(d.version)||d.version!==l)throw new Error(`Expected migration version ${l} for ${r.database}/${r.collection}, received ${d.version}`);if(ha(i)!==ha(d.from))throw new Error(`Migration ${d.version} (${d.name}) does not start from the previous schema`);i=d.to}t.set(n,r)}return{collections:[...e],find:(r,n)=>t.get(`${r}\\0${n}`)}};var Ol=\"voidhash\",Ml=\"paywalls\",Ch=ga([{database:Ol,databaseDescription:\"Voidhash paywall documents\",collection:Ml,baseline:Wn,migrations:[]}]);var Dh=o.Struct({cursor:o.Struct({x:o.Number().required(),y:o.Number().required()}),name:o.String(),selectedNodeIds:o.Array(o.String()).default([]),user:o.Struct({color:o.String().required(),name:o.String().required()}).required()});function At(e){let{locale:t,defaultLocale:r}=te();return ya(e,t,r)}function ba({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=At(e.data),i=Jt(n===e.data.style.backgroundImage?r:{...r,backgroundImage:n}),a=Zt(r);return b(\"div\",{\"data-node-id\":e.id,style:i,children:b(\"div\",{style:a,children:t})})}function Ur(e,t,r){let{getNodeVariables:n,setNodeVariable:i,callbacks:a}=te(),d=n(e),l=j(()=>({...a,onSetVariable:(f,c)=>{i(e,f,c)}}),[a,e,i]),s=j(()=>t.filter(f=>f.value?.trigger?.type===\"click\"),[t]),u=ee(()=>{for(let f of s){let c=f.value;if(!c?.action)continue;let m=f.id??c.id;if(!m)continue;let N=tn(m,r,d)??c.action;rn(N,d,l)}},[s,r,d,l]);if(s.length!==0)return u}function va({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=Yt(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i},{horizontal:e.data.horizontal,showsScrollIndicator:e.data.showsScrollIndicator});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function Sa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Qt(r),i=e.data.viewBox,a=`${i.minX} ${i.minY} ${i.width} ${i.height}`;return b(\"div\",{\"data-node-id\":e.id,style:n,children:b(\"svg\",{height:\"100%\",preserveAspectRatio:r.preserveAspectRatio,style:{display:\"block\"},viewBox:a,width:\"100%\",children:t})})}function Ta({node:e}){let t=W(e.id,e.data.style,e.data.states),r=er(t),{locale:n,defaultLocale:i}=te();return b(\"span\",{\"data-node-id\":e.id,style:r,children:ma(e.data,n,i)})}function xa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=it(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function wa({snapshot:e,componentArtifacts:t,locale:r}){return b(Li,{componentArtifacts:t,locale:r,snapshot:e,children:b(Pa,{node:e})})}var jl={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",textAlign:\"center\"};function Bl({node:e}){return b(\"div\",{style:jl,children:`Unsupported node type: ${String(e.type)}`})}function Pa({node:e}){let t=(e.children??[]).map(r=>b(Pa,{node:r},r.id));switch(e.type){case\"root\":return b(Q,{children:t});case\"screen\":return b(ba,{node:e,children:t});case\"view\":return b(xa,{node:e,children:t});case\"scrollView\":return b(va,{node:e,children:t});case\"text\":return b(Ta,{node:e});case\"shape\":return b(Sa,{node:e,children:t});case\"path\":return b(Hi,{node:e});case\"component\":return b(Bi,{node:e,children:t});case\"library\":case\"codeComponent\":return null;default:return b(Bl,{node:e})}}var Hl=\"__VOIDHASH_PAYWALL__\",Va={products:[],variables:{}},Ul=e=>({products:e?.products??[],variables:e?.variables??{},locale:e?.locale,platform:e?.platform,defaultSelectedProductId:e?.defaultSelectedProductId}),Na=()=>{if(typeof window>\"u\")return Va;let e=window[Hl];return e?Ul(e):Va};function _a(e){return Na().locale??e}function $l(e){let t;try{t=JSON.parse(e)}catch{return}if(!(typeof t!=\"object\"||t===null)){if(\"type\"in t)return{componentArtifacts:void 0,locale:void 0,snapshot:t};if(\"snapshot\"in t){let r=t;return{componentArtifacts:r.componentArtifacts,locale:r.locale,snapshot:r.snapshot}}}}function ka(){let e=document.getElementById(\"__PAYWALL_DATA__\");if(!e?.textContent)return;let t=document.getElementById(\"paywall-root\");if(!t)return;let r=$l(e.textContent);r&&ui(b(wa,{componentArtifacts:r.componentArtifacts,locale:_a(r.locale),snapshot:r.snapshot}),t)}document.readyState===\"loading\"?document.addEventListener(\"DOMContentLoaded\",ka):ka();})();\n";
+export const PAYWALL_RUNTIME_BUNDLE = "(()=>{var Yn=Object.defineProperty;var Ia=(e,t,r)=>t in e?Yn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Aa=(e,t)=>{for(var r in t)Yn(e,r,{get:t[r],enumerable:!0})};var p=(e,t,r)=>Ia(e,typeof t!=\"symbol\"?t+\"\":t,r);var Wt,k,Qn,Ra,Ne,Xn,ei,ti,$r,Bt,Ct,ri,Gr,Fr,zr,ni,$t={},Ft=[],Ca=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Kt=Array.isArray;function be(e,t){for(var r in t)e[r]=t[r];return e}function Yr(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function qa(e,t,r){var n,i,a,d={};for(a in t)a==\"key\"?n=t[a]:a==\"ref\"?i=t[a]:d[a]=t[a];if(arguments.length>2&&(d.children=arguments.length>3?Wt.call(arguments,2):r),typeof e==\"function\"&&e.defaultProps!=null)for(a in e.defaultProps)d[a]===void 0&&(d[a]=e.defaultProps[a]);return Ht(e,d,n,i,null)}function Ht(e,t,r,n,i){var a={type:e,props:t,key:r,ref:n,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:i??++Qn,__i:-1,__u:0};return i==null&&k.vnode!=null&&k.vnode(a),a}function Q(e){return e.children}function Ut(e,t){this.props=e,this.context=t}function rt(e,t){if(t==null)return e.__?rt(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if((r=e.__k[t])!=null&&r.__e!=null)return r.__e;return typeof e.type==\"function\"?rt(e):null}function Ea(e){if(e.__P&&e.__d){var t=e.__v,r=t.__e,n=[],i=[],a=be({},t);a.__v=t.__v+1,k.vnode&&k.vnode(a),Xr(e.__P,a,t,e.__n,e.__P.namespaceURI,32&t.__u?[r]:null,n,r??rt(t),!!(32&t.__u),i),a.__v=t.__v,a.__.__k[a.__i]=a,di(n,a,i),t.__e=t.__=null,a.__e!=r&&ii(a)}}function ii(e){if((e=e.__)!=null&&e.__c!=null)return e.__e=e.__c.base=null,e.__k.some(function(t){if(t!=null&&t.__e!=null)return e.__e=e.__c.base=t.__e}),ii(e)}function Wr(e){(!e.__d&&(e.__d=!0)&&Ne.push(e)&&!zt.__r++||Xn!=k.debounceRendering)&&((Xn=k.debounceRendering)||ei)(zt)}function zt(){try{for(var e,t=1;Ne.length;)Ne.length>t&&Ne.sort(ti),e=Ne.shift(),t=Ne.length,Ea(e)}finally{Ne.length=zt.__r=0}}function oi(e,t,r,n,i,a,d,l,s,u,f){var c,m,y,N,R,w,P,V=n&&n.__k||Ft,L=t.length;for(s=Da(r,t,V,s,L),c=0;c<L;c++)(y=r.__k[c])!=null&&(m=y.__i!=-1&&V[y.__i]||$t,y.__i=c,w=Xr(e,y,m,i,a,d,l,s,u,f),N=y.__e,y.ref&&m.ref!=y.ref&&(m.ref&&Jr(m.ref,null,y),f.push(y.ref,y.__c||N,y)),R==null&&N!=null&&(R=N),(P=!!(4&y.__u))||m.__k===y.__k?(s=ai(y,s,e,P),P&&m.__e&&(m.__e=null)):typeof y.type==\"function\"&&w!==void 0?s=w:N&&(s=N.nextSibling),y.__u&=-7);return r.__e=R,s}function Da(e,t,r,n,i){var a,d,l,s,u,f=r.length,c=f,m=0;for(e.__k=new Array(i),a=0;a<i;a++)(d=t[a])!=null&&typeof d!=\"boolean\"&&typeof d!=\"function\"?(typeof d==\"string\"||typeof d==\"number\"||typeof d==\"bigint\"||d.constructor==String?d=e.__k[a]=Ht(null,d,null,null,null):Kt(d)?d=e.__k[a]=Ht(Q,{children:d},null,null,null):d.constructor===void 0&&d.__b>0?d=e.__k[a]=Ht(d.type,d.props,d.key,d.ref?d.ref:null,d.__v):e.__k[a]=d,s=a+m,d.__=e,d.__b=e.__b+1,l=null,(u=d.__i=La(d,r,s,c))!=-1&&(c--,(l=r[u])&&(l.__u|=2)),l==null||l.__v==null?(u==-1&&(i>f?m--:i<f&&m++),typeof d.type!=\"function\"&&(d.__u|=4)):u!=s&&(u==s-1?m--:u==s+1?m++:(u>s?m--:m++,d.__u|=4))):e.__k[a]=null;if(c)for(a=0;a<f;a++)(l=r[a])!=null&&(2&l.__u)==0&&(l.__e==n&&(n=rt(l)),si(l,l));return n}function ai(e,t,r,n){var i,a;if(typeof e.type==\"function\"){for(i=e.__k,a=0;i&&a<i.length;a++)i[a]&&(i[a].__=e,t=ai(i[a],t,r,n));return t}e.__e!=t&&(n&&(t&&e.type&&!t.parentNode&&(t=rt(e)),r.insertBefore(e.__e,t||null)),t=e.__e);do t=t&&t.nextSibling;while(t!=null&&t.nodeType==8);return t}function La(e,t,r,n){var i,a,d,l=e.key,s=e.type,u=t[r],f=u!=null&&(2&u.__u)==0;if(u===null&&l==null||f&&l==u.key&&s==u.type)return r;if(n>(f?1:0)){for(i=r-1,a=r+1;i>=0||a<t.length;)if((u=t[d=i>=0?i--:a++])!=null&&(2&u.__u)==0&&l==u.key&&s==u.type)return d}return-1}function Jn(e,t,r){t[0]==\"-\"?e.setProperty(t,r??\"\"):e[t]=r==null?\"\":typeof r!=\"number\"||Ca.test(t)?r:r+\"px\"}function jt(e,t,r,n,i){var a,d;e:if(t==\"style\")if(typeof r==\"string\")e.style.cssText=r;else{if(typeof n==\"string\"&&(e.style.cssText=n=\"\"),n)for(t in n)r&&t in r||Jn(e.style,t,\"\");if(r)for(t in r)n&&r[t]==n[t]||Jn(e.style,t,r[t])}else if(t[0]==\"o\"&&t[1]==\"n\")a=t!=(t=t.replace(ri,\"$1\")),d=t.toLowerCase(),t=d in e||t==\"onFocusOut\"||t==\"onFocusIn\"?d.slice(2):t.slice(2),e.l||(e.l={}),e.l[t+a]=r,r?n?r[Ct]=n[Ct]:(r[Ct]=Gr,e.addEventListener(t,a?zr:Fr,a)):e.removeEventListener(t,a?zr:Fr,a);else{if(i==\"http://www.w3.org/2000/svg\")t=t.replace(/xlink(H|:h)/,\"h\").replace(/sName$/,\"s\");else if(t!=\"width\"&&t!=\"height\"&&t!=\"href\"&&t!=\"list\"&&t!=\"form\"&&t!=\"tabIndex\"&&t!=\"download\"&&t!=\"rowSpan\"&&t!=\"colSpan\"&&t!=\"role\"&&t!=\"popover\"&&t in e)try{e[t]=r??\"\";break e}catch{}typeof r==\"function\"||(r==null||r===!1&&t[4]!=\"-\"?e.removeAttribute(t):e.setAttribute(t,t==\"popover\"&&r==1?\"\":r))}}function Zn(e){return function(t){if(this.l){var r=this.l[t.type+e];if(t[Bt]==null)t[Bt]=Gr++;else if(t[Bt]<r[Ct])return;return r(k.event?k.event(t):t)}}}function Xr(e,t,r,n,i,a,d,l,s,u){var f,c,m,y,N,R,w,P,V,L,z,Pe,et,Rt,tt,M=t.type;if(t.constructor!==void 0)return null;128&r.__u&&(s=!!(32&r.__u),a=[l=t.__e=r.__e]),(f=k.__b)&&f(t);e:if(typeof M==\"function\")try{if(P=t.props,V=M.prototype&&M.prototype.render,L=(f=M.contextType)&&n[f.__c],z=f?L?L.props.value:f.__:n,r.__c?w=(c=t.__c=r.__c).__=c.__E:(V?t.__c=c=new M(P,z):(t.__c=c=new Ut(P,z),c.constructor=M,c.render=Ma),L&&L.sub(c),c.state||(c.state={}),c.__n=n,m=c.__d=!0,c.__h=[],c._sb=[]),V&&c.__s==null&&(c.__s=c.state),V&&M.getDerivedStateFromProps!=null&&(c.__s==c.state&&(c.__s=be({},c.__s)),be(c.__s,M.getDerivedStateFromProps(P,c.__s))),y=c.props,N=c.state,c.__v=t,m)V&&M.getDerivedStateFromProps==null&&c.componentWillMount!=null&&c.componentWillMount(),V&&c.componentDidMount!=null&&c.__h.push(c.componentDidMount);else{if(V&&M.getDerivedStateFromProps==null&&P!==y&&c.componentWillReceiveProps!=null&&c.componentWillReceiveProps(P,z),t.__v==r.__v||!c.__e&&c.shouldComponentUpdate!=null&&c.shouldComponentUpdate(P,c.__s,z)===!1){t.__v!=r.__v&&(c.props=P,c.state=c.__s,c.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(Ve){Ve&&(Ve.__=t)}),Ft.push.apply(c.__h,c._sb),c._sb=[],c.__h.length&&d.push(c);break e}c.componentWillUpdate!=null&&c.componentWillUpdate(P,c.__s,z),V&&c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(y,N,R)})}if(c.context=z,c.props=P,c.__P=e,c.__e=!1,Pe=k.__r,et=0,V)c.state=c.__s,c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),Ft.push.apply(c.__h,c._sb),c._sb=[];else do c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),c.state=c.__s;while(c.__d&&++et<25);c.state=c.__s,c.getChildContext!=null&&(n=be(be({},n),c.getChildContext())),V&&!m&&c.getSnapshotBeforeUpdate!=null&&(R=c.getSnapshotBeforeUpdate(y,N)),Rt=f!=null&&f.type===Q&&f.key==null?li(f.props.children):f,l=oi(e,Kt(Rt)?Rt:[Rt],t,r,n,i,a,d,l,s,u),c.base=t.__e,t.__u&=-161,c.__h.length&&d.push(c),w&&(c.__E=c.__=null)}catch(Ve){if(t.__v=null,s||a!=null)if(Ve.then){for(t.__u|=s?160:128;l&&l.nodeType==8&&l.nextSibling;)l=l.nextSibling;a[a.indexOf(l)]=null,t.__e=l}else{for(tt=a.length;tt--;)Yr(a[tt]);Kr(t)}else t.__e=r.__e,t.__k=r.__k,Ve.then||Kr(t);k.__e(Ve,t,r)}else a==null&&t.__v==r.__v?(t.__k=r.__k,t.__e=r.__e):l=t.__e=Oa(r.__e,t,r,n,i,a,d,s,u);return(f=k.diffed)&&f(t),128&t.__u?void 0:l}function Kr(e){e&&(e.__c&&(e.__c.__e=!0),e.__k&&e.__k.some(Kr))}function di(e,t,r){for(var n=0;n<r.length;n++)Jr(r[n],r[++n],r[++n]);k.__c&&k.__c(t,e),e.some(function(i){try{e=i.__h,i.__h=[],e.some(function(a){a.call(i)})}catch(a){k.__e(a,i.__v)}})}function li(e){return typeof e!=\"object\"||e==null||e.__b>0?e:Kt(e)?e.map(li):e.constructor!==void 0?null:be({},e)}function Oa(e,t,r,n,i,a,d,l,s){var u,f,c,m,y,N,R,w=r.props||$t,P=t.props,V=t.type;if(V==\"svg\"?i=\"http://www.w3.org/2000/svg\":V==\"math\"?i=\"http://www.w3.org/1998/Math/MathML\":i||(i=\"http://www.w3.org/1999/xhtml\"),a!=null){for(u=0;u<a.length;u++)if((y=a[u])&&\"setAttribute\"in y==!!V&&(V?y.localName==V:y.nodeType==3)){e=y,a[u]=null;break}}if(e==null){if(V==null)return document.createTextNode(P);e=document.createElementNS(i,V,P.is&&P),l&&(k.__m&&k.__m(t,a),l=!1),a=null}if(V==null)w===P||l&&e.data==P||(e.data=P);else{if(a=V==\"textarea\"&&P.defaultValue!=null?null:a&&Wt.call(e.childNodes),!l&&a!=null)for(w={},u=0;u<e.attributes.length;u++)w[(y=e.attributes[u]).name]=y.value;for(u in w)y=w[u],u==\"dangerouslySetInnerHTML\"?c=y:u==\"children\"||u in P||u==\"value\"&&\"defaultValue\"in P||u==\"checked\"&&\"defaultChecked\"in P||jt(e,u,null,y,i);for(u in P)y=P[u],u==\"children\"?m=y:u==\"dangerouslySetInnerHTML\"?f=y:u==\"value\"?N=y:u==\"checked\"?R=y:l&&typeof y!=\"function\"||w[u]===y||jt(e,u,y,w[u],i);if(f)l||c&&(f.__html==c.__html||f.__html==e.innerHTML)||(e.innerHTML=f.__html),t.__k=[];else if(c&&(e.innerHTML=\"\"),oi(t.type==\"template\"?e.content:e,Kt(m)?m:[m],t,r,n,V==\"foreignObject\"?\"http://www.w3.org/1999/xhtml\":i,a,d,a?a[0]:r.__k&&rt(r,0),l,s),a!=null)for(u=a.length;u--;)Yr(a[u]);l&&V!=\"textarea\"||(u=\"value\",V==\"progress\"&&N==null?e.removeAttribute(\"value\"):N!=null&&(N!==e[u]||V==\"progress\"&&!N||V==\"option\"&&N!=w[u])&&jt(e,u,N,w[u],i),u=\"checked\",R!=null&&R!=e[u]&&jt(e,u,R,w[u],i))}return e}function Jr(e,t,r){try{if(typeof e==\"function\"){var n=typeof e.__u==\"function\";n&&e.__u(),n&&t==null||(e.__u=e(t))}else e.current=t}catch(i){k.__e(i,r)}}function si(e,t,r){var n,i;if(k.unmount&&k.unmount(e),(n=e.ref)&&(n.current&&n.current!=e.__e||Jr(n,null,t)),(n=e.__c)!=null){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(a){k.__e(a,t)}n.base=n.__P=null}if(n=e.__k)for(i=0;i<n.length;i++)n[i]&&si(n[i],t,r||typeof e.type!=\"function\");r||Yr(e.__e),e.__c=e.__=e.__e=void 0}function Ma(e,t,r){return this.constructor(e,r)}function ui(e,t,r){var n,i,a,d;t==document&&(t=document.documentElement),k.__&&k.__(e,t),i=(n=typeof r==\"function\")?null:r&&r.__k||t.__k,a=[],d=[],Xr(t,e=(!n&&r||t).__k=qa(Q,null,[e]),i||$t,$t,t.namespaceURI,!n&&r?[r]:i?null:t.firstChild?Wt.call(t.childNodes):null,a,!n&&r?r:i?i.__e:t.firstChild,n,d),di(a,e,d)}function ci(e){function t(r){var n,i;return this.getChildContext||(n=new Set,(i={})[t.__c]=this,this.getChildContext=function(){return i},this.componentWillUnmount=function(){n=null},this.shouldComponentUpdate=function(a){this.props.value!=a.value&&n.forEach(function(d){d.__e=!0,Wr(d)})},this.sub=function(a){n.add(a);var d=a.componentWillUnmount;a.componentWillUnmount=function(){n&&n.delete(a),d&&d.call(a)}}),r.children}return t.__c=\"__cC\"+ni++,t.__=e,t.Provider=t.__l=(t.Consumer=function(r,n){return r.children(n)}).contextType=t,t}Wt=Ft.slice,k={__e:function(e,t,r,n){for(var i,a,d;t=t.__;)if((i=t.__c)&&!i.__)try{if((a=i.constructor)&&a.getDerivedStateFromError!=null&&(i.setState(a.getDerivedStateFromError(e)),d=i.__d),i.componentDidCatch!=null&&(i.componentDidCatch(e,n||{}),d=i.__d),d)return i.__E=i}catch(l){e=l}throw e}},Qn=0,Ra=function(e){return e!=null&&e.constructor===void 0},Ut.prototype.setState=function(e,t){var r;r=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=be({},this.state),typeof e==\"function\"&&(e=e(be({},r),this.props)),e&&be(r,e),e!=null&&this.__v&&(t&&this._sb.push(t),Wr(this))},Ut.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),Wr(this))},Ut.prototype.render=Q,Ne=[],ei=typeof Promise==\"function\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,ti=function(e,t){return e.__v.__b-t.__v.__b},zt.__r=0,$r=Math.random().toString(8),Bt=\"__d\"+$r,Ct=\"__a\"+$r,ri=/(PointerCapture)$|Capture$/i,Gr=0,Fr=Zn(!1),zr=Zn(!0),ni=0;function fi(e){if(e==null)return;let t=\"value\"in e&&typeof e.value==\"object\"?e.value:e;if(!(t==null||typeof t.color!=\"string\"))return{color:t.color,position:t.position??0}}var pi={center:\"auto\",contain:\"contain\",cover:\"cover\",stretch:\"100% 100%\"};function mi(e,t){let r=t.map(i=>`<stop offset='${i.position}' stop-color='${i.color}'/>`).join(\"\");return`<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${e.kind===\"radial\"?(()=>{let i=Math.hypot(e.endX-e.startX,e.endY-e.startY);return`<radialGradient id='g' cx='${e.startX}' cy='${e.startY}' r='${i}'>${r}</radialGradient>`})():`<linearGradient id='g' x1='${e.startX}' y1='${e.startY}' x2='${e.endX}' y2='${e.endY}'>${r}</linearGradient>`}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`}function nt(e){if(!e.backgroundEnabled)return{backgroundColor:\"transparent\"};let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return{backgroundColor:e.backgroundColor}}function Gt(e){let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor}}function g(e){return e===0?\"0\":`${e}px`}function We(e){return e===\"auto\"||e===void 0?\"auto\":g(e)}function it(e){let t={alignItems:e.alignItems,boxSizing:\"border-box\",display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:We(e.height),justifyContent:e.justifyContent,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),position:e.position??\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),Object.assign(t,nt(e)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),t.borderTopLeftRadius=g(e.borderTopLeftRadius??0),t.borderTopRightRadius=g(e.borderTopRightRadius??0),t.borderBottomRightRadius=g(e.borderBottomRightRadius??0),t.borderBottomLeftRadius=g(e.borderBottomLeftRadius??0),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Yt(e,{horizontal:t,showsScrollIndicator:r}){let n=it(e);return n.minHeight??(n.minHeight=0),n.minWidth??(n.minWidth=0),n.WebkitOverflowScrolling=\"touch\",t?(n.flexDirection=\"row\",n.overflowX=\"auto\",n.overflowY=\"hidden\"):(n.overflowX=\"hidden\",n.overflowY=\"auto\"),r||(n.scrollbarWidth=\"none\"),n}function Xt(e){return{fill:e.fillEnabled?e.fillColor:\"none\",fillRule:e.fillRule,fillOpacity:e.fillOpacity,stroke:e.strokeEnabled?e.strokeColor:\"none\",strokeWidth:e.strokeWidth,strokeOpacity:e.strokeOpacity,strokeLinecap:e.strokeLinecap,strokeLinejoin:e.strokeLinejoin,opacity:e.opacity}}function Jt(e){let t={boxSizing:\"border-box\",height:\"100vh\",overflow:\"hidden\",width:\"100vw\"};return Object.assign(t,nt(e)),t}function Zt(e){return{alignItems:e.alignItems,display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:\"100vh\",justifyContent:e.justifyContent,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),width:\"100vw\"}}function Qt(e){let t={boxSizing:\"border-box\",display:e.display===\"none\"?\"none\":\"block\",height:We(e.height),marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,position:\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function er(e){let t={color:e.color,display:e.display,fontSize:g(e.fontSize),fontWeight:e.fontWeight,letterSpacing:g(e.letterSpacing),lineHeight:e.lineHeight,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,position:e.position??\"relative\",textAlign:e.textAlign,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Zr(e){let t={stores:new Map,parents:new Map};return yi(e,null,t),t}function yi(e,t,r){r.parents.set(e.id,t),hi(e,r.stores);for(let n of e.children)yi(n,e.id,r)}function tr(e,t,r,n){let i=new Set,a=r;for(;a!==null&&!i.has(a);){if(i.add(a),t(a)?.has(n))return a;a=e.get(a)??null}}function Qr(e,t,r){return{get:n=>{let i=tr(e,t,r,n);if(i!==void 0)return t(i)?.get(n)}}}function hi(e,t){let r=e.data;if(r!==void 0&&\"localVariables\"in r&&r.localVariables.length>0){let n=new Map,i=new Map;for(let a of r.localVariables){let d=a.value;d?.id===void 0||d.value===void 0||(n.set(d.id,d.value),n.set(a.id,d.value),i.set(a.id,d.id),i.set(d.id,a.id))}n.size>0&&t.set(e.id,{store:n,aliases:i})}for(let n of e.children)hi(n,t)}function vi(e){if(e)return typeof e==\"object\"&&e!==null&&\"id\"in e&&\"value\"in e&&!(\"type\"in e)?e.value:e}function rr(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.some(r=>{let n=vi(r);return n?ja(n,t):!1})}function ja(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.every(r=>{let n=vi(r);return n?Ba(n,t):!1})}function gi(e,t){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}function bi(e){switch(e.key){case\"boolean\":return e.value??!1;case\"number\":return e.value??0;case\"string\":return e.value??\"\";case\"product\":return e.value?.productId??\"\";default:return\"\"}}function Ba(e,t){if(!e?.value?.left||!e?.value?.right)return!1;let r=gi(e.value.left,t),n=gi(e.value.right,t);if(r===void 0||n===void 0)return!1;let i=bi(r),a=bi(n);switch(e.type){case\"equals\":return i===a;case\"not-equals\":return i!==a;case\"greater-than\":return i>a;case\"greater-than-or-equal\":return i>=a;case\"less-than\":return i<a;case\"less-than-or-equal\":return i<=a;default:return!1}}function en(e,t,r){let n={...e};for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=a.overrides.style;if(d)for(let l of Object.keys(d))d[l]!==void 0&&(n[l]=d[l])}}return n}function tn(e,t,r){let n;for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=\"actions\"in a.overrides?a.overrides.actions:void 0;if(d)for(let l of d){let s=\"value\"in l?l.value:l;s&&s.interactionId===e&&(n=s.action)}}}return n}function Ha(e,t){if(e?.type){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}}function Ua(e,t){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(!e.variableId)return;let r=t.get(e.variableId);if(r?.key===\"product\")return r.value?.productId}function rn(e,t,r){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let n=e.payload;if(!n?.newValue||!n.variableId)break;let i=Ha(n.newValue,t);i!==void 0&&r.onSetVariable(n.variableId,i);break}case\"close-paywall\":r.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let n=Ua(e.payload,t);n!==void 0&&r.onPurchaseProduct(n);break}}}function $a(e,t){switch(t.key){case\"string\":return typeof e==\"string\"?{key:\"string\",value:e}:void 0;case\"number\":return typeof e==\"number\"?{key:\"number\",value:e}:void 0;case\"boolean\":return typeof e==\"boolean\"?{key:\"boolean\",value:e}:void 0;case\"product\":return typeof e==\"string\"||typeof e==\"number\"||typeof e==\"boolean\"?{key:\"product\",value:{productId:String(e)}}:void 0;default:return}}function Fa(e,t,r,n){if(!e?.type)return;if(e.type===\"literal\")return e.value;if(e.type===\"variable-reference\")return!e.value||!(\"id\"in e.value)||!e.value.id?void 0:r.get(e.value.id);if(!e.value||!(\"field\"in e.value)||!e.value.field)return;let i=t?.[e.value.field];if(i===void 0)return;let a=r.get(n);if(a!==void 0)return $a(i,a)}function za(e,t,r){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(e.type===\"variable-reference\"){if(!e.variableId)return;let i=r.get(e.variableId);return i?.key===\"product\"?i.value?.productId:void 0}if(!e.field)return;let n=t?.[e.field];return typeof n==\"string\"?n:void 0}function nn(e,t,r,n){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let i=e.payload;if(!i?.newValue||!i.variableId)break;let a=Fa(i.newValue,t,r,i.variableId);a!==void 0&&n.onSetVariable(i.variableId,a);break}case\"close-paywall\":n.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let i=za(e.payload,t,r);i!==void 0&&n.onPurchaseProduct(i);break}}}var on={alignItems:\"stretch\",boxSizing:\"border-box\",display:\"flex\",flexBasis:\"auto\",flexDirection:\"column\",flexShrink:0,margin:0,minHeight:0,minWidth:0,padding:0,position:\"relative\"},Wa={boxSizing:\"border-box\",display:\"block\",margin:0,padding:0,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"},Ka={boxSizing:\"border-box\",display:\"block\"},Ga={...on,cursor:\"pointer\",touchAction:\"manipulation\",userSelect:\"none\"},Ya={...on,overflowX:\"hidden\",overflowY:\"auto\",WebkitOverflowScrolling:\"touch\"},Xa={image:Ka,pressable:Ga,scroll:Ya,text:Wa,view:on},Ti=[\"flex\",\"gap\"],Ja=[\"backgroundType\",\"backgroundGradient\",\"backgroundImage\"],Za=new Set([...Ti,...Ja]),Qa=new Set([\"aspectRatio\",\"flex\",\"flexGrow\",\"flexShrink\",\"fontWeight\",\"opacity\",\"zIndex\"]);function Si(e,t){return typeof t==\"number\"&&!Qa.has(e)?t===0?0:`${t}px`:t}var ed={center:\"none\",contain:\"contain\",cover:\"cover\",stretch:\"fill\"};function nr(e){return ed[e??\"cover\"]}function an(e){if(!e)return{};let t=[];return(e.x!==void 0||e.y!==void 0)&&t.push(`translate3d(${e.x??0}px, ${e.y??0}px, 0)`),e.rotate!==void 0&&t.push(`rotate(${e.rotate}deg)`),e.scale!==void 0&&t.push(`scale(${e.scale})`),e.scaleX!==void 0&&t.push(`scaleX(${e.scaleX})`),e.scaleY!==void 0&&t.push(`scaleY(${e.scaleY})`),{...e.opacity===void 0?{}:{opacity:e.opacity},...e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor},...t.length===0?{}:{transform:t.join(\" \")},...e.transformOrigin===void 0?{}:{transformOrigin:`${e.transformOrigin.x*100}% ${e.transformOrigin.y*100}%`}}}function ir(e,t,r){let n={...Xa[t]},i=(d,l)=>{delete n[d],n[d]=Si(d,l)};for(let d of Ti){let l=e[d];l!==void 0&&(n[d]=Si(d,l))}for(let[d,l]of Object.entries(e))l===void 0||Za.has(d)||typeof l!=\"string\"&&typeof l!=\"number\"||i(d,l);return(e.borderTopWidth!==void 0||e.borderRightWidth!==void 0||e.borderBottomWidth!==void 0||e.borderLeftWidth!==void 0||e.borderColor!==void 0)&&e.borderStyle===void 0&&(n.borderStyle=\"solid\"),(e.backgroundType===\"gradient\"||e.backgroundType===\"image\")&&(delete n.backgroundColor,Object.assign(n,Gt({backgroundColor:typeof e.backgroundColor==\"string\"?e.backgroundColor:void 0,backgroundType:e.backgroundType,backgroundGradient:e.backgroundGradient,backgroundImage:e.backgroundImage}))),Object.assign(n,an(r)),n}var qt,A,dn,xi,ar=0,Ai=[],C=k,wi=C.__b,Pi=C.__r,Vi=C.diffed,Ni=C.__c,_i=C.unmount,ki=C.__;function sn(e,t){C.__h&&C.__h(A,e,ar||t),ar=0;var r=A.__H||(A.__H={__:[],__h:[]});return e>=r.__.length&&r.__.push({}),r.__[e]}function Ri(e){return ar=1,td(qi,e)}function td(e,t,r){var n=sn(qt++,2);if(n.t=e,!n.__c&&(n.__=[r?r(t):qi(void 0,t),function(l){var s=n.__N?n.__N[0]:n.__[0],u=n.t(s,l);s!==u&&(n.__N=[u,n.__[1]],n.__c.setState({}))}],n.__c=A,!A.__f)){var i=function(l,s,u){if(!n.__c.__H)return!0;var f=n.__c.__H.__.filter(function(m){return m.__c});if(f.every(function(m){return!m.__N}))return!a||a.call(this,l,s,u);var c=n.__c.props!==l;return f.some(function(m){if(m.__N){var y=m.__[0];m.__=m.__N,m.__N=void 0,y!==m.__[0]&&(c=!0)}}),a&&a.call(this,l,s,u)||c};A.__f=!0;var a=A.shouldComponentUpdate,d=A.componentWillUpdate;A.componentWillUpdate=function(l,s,u){if(this.__e){var f=a;a=void 0,i(l,s,u),a=f}d&&d.call(this,l,s,u)},A.shouldComponentUpdate=i}return n.__N||n.__}function j(e,t){var r=sn(qt++,7);return id(r.__H,t)&&(r.__=e(),r.__H=t,r.__h=e),r.__}function ee(e,t){return ar=8,j(function(){return e},t)}function Ci(e){var t=A.context[e.__c],r=sn(qt++,9);return r.c=e,t?(r.__==null&&(r.__=!0,t.sub(A)),t.props.value):e.__}function rd(){for(var e;e=Ai.shift();){var t=e.__H;if(e.__P&&t)try{t.__h.some(or),t.__h.some(ln),t.__h=[]}catch(r){t.__h=[],C.__e(r,e.__v)}}}C.__b=function(e){A=null,wi&&wi(e)},C.__=function(e,t){e&&t.__k&&t.__k.__m&&(e.__m=t.__k.__m),ki&&ki(e,t)},C.__r=function(e){Pi&&Pi(e),qt=0;var t=(A=e.__c).__H;t&&(dn===A?(t.__h=[],A.__h=[],t.__.some(function(r){r.__N&&(r.__=r.__N),r.u=r.__N=void 0})):(t.__h.some(or),t.__h.some(ln),t.__h=[],qt=0)),dn=A},C.diffed=function(e){Vi&&Vi(e);var t=e.__c;t&&t.__H&&(t.__H.__h.length&&(Ai.push(t)!==1&&xi===C.requestAnimationFrame||((xi=C.requestAnimationFrame)||nd)(rd)),t.__H.__.some(function(r){r.u&&(r.__H=r.u),r.u=void 0})),dn=A=null},C.__c=function(e,t){t.some(function(r){try{r.__h.some(or),r.__h=r.__h.filter(function(n){return!n.__||ln(n)})}catch(n){t.some(function(i){i.__h&&(i.__h=[])}),t=[],C.__e(n,r.__v)}}),Ni&&Ni(e,t)},C.unmount=function(e){_i&&_i(e);var t,r=e.__c;r&&r.__H&&(r.__H.__.some(function(n){try{or(n)}catch(i){t=i}}),r.__H=void 0,t&&C.__e(t,r.__v))};var Ii=typeof requestAnimationFrame==\"function\";function nd(e){var t,r=function(){clearTimeout(n),Ii&&cancelAnimationFrame(t),setTimeout(e)},n=setTimeout(r,35);Ii&&(t=requestAnimationFrame(r))}function or(e){var t=A,r=e.__c;typeof r==\"function\"&&(e.__c=void 0,r()),A=t}function ln(e){var t=A;e.__c=e.__(),A=t}function id(e,t){return!e||e.length!==t.length||t.some(function(r,n){return r!==e[n]})}function qi(e,t){return typeof t==\"function\"?t(e):t}var od=0;function b(e,t,r,n,i,a){t||(t={});var d,l,s=t;if(\"ref\"in s)for(l in s={},t)l==\"ref\"?d=t[l]:s[l]=t[l];var u={type:e,props:s,key:r,ref:d,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:--od,__i:-1,__u:0,__source:i,__self:a};if(typeof e==\"function\"&&(d=e.defaultProps))for(l in d)s[l]===void 0&&(s[l]=d[l]);return k.vnode&&k.vnode(u),u}var ad=new Map,Di=ci(null);function Ei(e){let t=JSON.stringify(e);window.ReactNativeWebView?window.ReactNativeWebView.postMessage(t):window.parent.postMessage(e,\"*\")}function Li({snapshot:e,componentArtifacts:t,locale:r,children:n}){let i=j(()=>Zr(e),[e]),a=(e.type===\"root\"?e.data.localization?.defaultLocale:void 0)??\"en\",[d,l]=Ri(()=>{let w=new Map;for(let[P,{store:V}]of i.stores)w.set(P,V);return w}),s=j(()=>new Map,[i,d]),u=ee(w=>{let P=s.get(w);if(P)return P;let V=Qr(i.parents,L=>d.get(L),w);return s.set(w,V),V},[s,d,i]),f=ee((w,P,V)=>{l(L=>{let z=tr(i.parents,Ve=>L.get(Ve),w,P);if(z===void 0)return L;let Pe=L.get(z);if(!Pe)return L;let et=new Map(Pe);et.set(P,V);let tt=i.stores.get(z)?.aliases?.get(P);tt&&et.set(tt,V);let M=new Map(L);return M.set(z,et),M})},[i]),c=ee(()=>{Ei({type:\"paywall:close\"})},[]),m=ee(w=>{Ei({type:\"paywall:purchase\",productId:w})},[]),y=ee((w,P)=>{console.warn(`onSetVariable called directly for \"${w}\" without node context. Use the scoped callback from useInteractions instead.`)},[]),N=j(()=>({onClosePaywall:c,onPurchaseProduct:m,onSetVariable:y}),[c,m,y]),R=j(()=>({getNodeVariables:u,setNodeVariable:f,callbacks:N,componentArtifacts:t,locale:r,defaultLocale:a}),[u,f,N,t,r,a]);return b(Di.Provider,{value:R,children:n})}function te(){let e=Ci(Di);return e||{getNodeVariables:()=>ad,setNodeVariable:()=>{},callbacks:{onClosePaywall:()=>{},onPurchaseProduct:()=>{},onSetVariable:()=>{}},componentArtifacts:void 0,locale:void 0,defaultLocale:\"en\"}}var dd={alignSelf:\"flex-start\",backgroundColor:\"#18181b\",borderRadius:\"999px\",boxSizing:\"border-box\",color:\"#fafafa\",display:\"inline-flex\",fontFamily:\"inherit\",fontSize:\"11px\",fontWeight:600,lineHeight:\"16px\",padding:\"2px 8px\"};function Oi({props:e}){let t=typeof e.label==\"string\"?e.label:\"New\";return b(\"span\",{style:dd,children:t})}var Mi={\"sample-badge\":Oi};function ji(e,t){let r={};for(let n of e){let i=n.value;if(!i?.name)continue;let a=i.value;if(a?.type){if(a.type===\"literal\"){a.value&&(r[i.name]=a.value.value);continue}if(a.type===\"variable-reference\"){if(!a.value||!(\"id\"in a.value)||!a.value.id)continue;let d=t.get(a.value.id);d!==void 0&&(r[i.name]=d.value)}}}return r}var un={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontFamily:\"inherit\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",position:\"relative\",textAlign:\"center\"};function dr(e,t,r){return{...ir(e,t,r)}}function ld(e,t){if(!e)return;for(let n of[t,\"default\"]){let i=e[n];if(i)return i}let r=Object.keys(e)[0];return r===void 0?void 0:e[r]}function cn({node:e,slot:t,fireAction:r}){switch(e.type){case\"view\":case\"scroll\":return b(\"div\",{style:dr(e.style,e.type,e.motion),children:e.children.map((n,i)=>b(cn,{fireAction:r,node:n,slot:t},i))});case\"pressable\":{let n=e.action;return b(\"div\",{onClick:n===void 0?void 0:()=>r(n),style:dr(e.style,\"pressable\",e.motion),children:e.children.map((a,d)=>b(cn,{fireAction:r,node:a,slot:t},d))})}case\"text\":return b(\"div\",{style:dr(e.style,\"text\",e.motion),children:e.text});case\"image\":return b(\"img\",{alt:\"\",src:e.src,style:{...dr(e.style,\"image\",e.motion),objectFit:nr(e.resizeMode)??\"cover\"}});case\"slot\":return b(Q,{children:t});case\"placeholder\":return b(\"div\",{style:un,children:e.reason});default:return null}}function Bi({node:e,children:t}){let{getNodeVariables:r,setNodeVariable:n,callbacks:i,componentArtifacts:a}=te(),d=r(e.id),l=j(()=>({...i,onSetVariable:(m,y)=>{n(e.id,m,y)}}),[i,e.id,n]),s=ee((m,y)=>{let R=e.data.actionBindings.find(w=>w.value?.name===m)?.value?.action;R&&nn(R,y,d,l)},[e.data.actionBindings,d,l]);if(e.data.componentSource===\"builtin\"){let m=Mi[e.data.componentSlug];if(!m)return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${e.data.componentSlug}\" preview unavailable`});let y=ji(e.data.props,d);return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(m,{fireAction:s,props:y,children:t})})}let u=e.data.componentSource===\"local\"&&e.data.componentPath!==\"\",f=u?a?.localTrees?.[e.data.componentPath]:a?.trees[e.data.contentHash],c=ld(f,e.data.previewState);if(!c){let m=u?e.data.componentPath:e.data.componentSlug;return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${m}\" preview unavailable`})}return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(cn,{fireAction:s,node:c.root,slot:t})})}function W(e,t,r){let{getNodeVariables:n}=te(),i=n(e);return j(()=>en(t,r,i),[t,r,i])}function Hi({node:e}){let t=W(e.id,e.data.style,e.data.states),r=Xt(t);return b(\"path\",{d:e.data.d,fill:r.fill,fillOpacity:r.fillOpacity,fillRule:r.fillRule,opacity:r.opacity,stroke:r.stroke,strokeLinecap:r.strokeLinecap,strokeLinejoin:r.strokeLinejoin,strokeOpacity:r.strokeOpacity,strokeWidth:r.strokeWidth,transform:e.data.transform,vectorEffect:\"non-scaling-stroke\"})}var v={InvalidCommand:\"invalid_command\",InvalidPath:\"invalid_path\",TypeMismatch:\"type_mismatch\",MissingField:\"missing_field\",MissingArrayItem:\"missing_array_item\",MissingTreeNode:\"missing_tree_node\",DuplicateArrayItemId:\"duplicate_array_item_id\",DuplicateArrayPos:\"duplicate_array_pos\",DuplicateTreeNodeId:\"duplicate_tree_node_id\",DuplicateTreePos:\"duplicate_tree_pos\",InvalidTreeParent:\"invalid_tree_parent\",TreeCycle:\"tree_cycle\",TreeNodeValueMustBeObject:\"tree_node_value_must_be_object\",ReservedIdentifier:\"reserved_identifier\"},fn=class extends Error{constructor(r,n=\"\"){super(n?`${r}: ${n}`:r);p(this,\"code\");this.name=\"CoreError\",this.code=r}},S=(e,t)=>new fn(e,t);var I=\"$root\";var re=e=>({kind:\"string\",value:e}),ot=e=>({kind:\"number\",value:e}),at=e=>({kind:\"boolean\",value:e}),ne=(e={})=>({kind:\"object\",fields:e}),pn=(e=[])=>({kind:\"array\",items:e}),mn=(e=[])=>({kind:\"tree\",nodes:e}),Ui=e=>e?[...e]:[],_=e=>{switch(e.kind){case\"string\":case\"number\":case\"boolean\":return{...e};case\"object\":{let t={};for(let[r,n]of Object.entries(e.fields))t[r]=_(n);return{kind:\"object\",fields:t}}case\"array\":return{kind:\"array\",items:e.items.map(t=>({id:t.id,pos:t.pos,value:_(t.value)}))};case\"tree\":return{kind:\"tree\",nodes:e.nodes.map(t=>({id:t.id,parent:t.parent,pos:t.pos,value:_(t.value)}))}}};var lr=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,$i=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,yn=(e,t)=>e.parent<t.parent?-1:e.parent>t.parent?1:$i(e,t);var B=e=>{switch(e.kind){case\"string\":case\"boolean\":return;case\"number\":if(Number.isNaN(e.value)||!Number.isFinite(e.value))throw S(v.InvalidCommand,\"number must be finite\");return;case\"object\":for(let t of Object.values(e.fields))B(t);return;case\"array\":{let t=new Set,r=new Set;for(let n of e.items){if(t.has(n.id))throw S(v.DuplicateArrayItemId,\"duplicate array item id\");if(r.has(n.pos))throw S(v.DuplicateArrayPos,\"duplicate array position\");t.add(n.id),r.add(n.pos),B(n.value)}return}case\"tree\":{let t=new Set,r=new Map,n=new Map;for(let s of e.nodes){if(s.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(s.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(t.has(s.id))throw S(v.DuplicateTreeNodeId,\"duplicate tree node id\");t.add(s.id),r.set(s.id,s);let u=n.get(s.parent)??new Set;if(u.has(s.pos))throw S(v.DuplicateTreePos,\"duplicate tree position\");u.add(s.pos),n.set(s.parent,u),B(s.value)}for(let s of e.nodes)if(s.parent!==I&&!r.has(s.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");let i=new Set,a=new Set,d=s=>{if(i.has(s))throw S(v.TreeCycle,\"tree contains cycle\");if(a.has(s))return;i.add(s);let u=r.get(s);u&&u.parent!==I&&d(u.parent),i.delete(s),a.add(s)},l=[...r.keys()].sort();for(let s of l)d(s);return}}};var hn=(e,t)=>{B(e);let r=_(e);for(let n of t)sd(r,{...n,path:Ui(n.path)});return B(r),r},sd=(e,t)=>{switch(t.kind){case\"value.set\":ud(e,t.path,t.value);return;case\"object.set\":cd(e,t.path,t.key,t.value);return;case\"object.delete\":fd(e,t.path,t.key);return;case\"array.insert\":pd(e,t.path,t.item);return;case\"array.move\":md(e,t.path,t.id,t.pos);return;case\"array.delete\":yd(e,t.path,t.id);return;case\"tree.insert\":hd(e,t.path,t.node);return;case\"tree.move\":gd(e,t.path,t.id,t.parent,t.pos);return;case\"tree.delete\":bd(e,t.path,t.id);return}},ud=(e,t,r)=>{if(t.length===0){Fi(e,_(r));return}K(e,t,n=>{Fi(n,_(r))})},cd=(e,t,r,n)=>{if(!r)throw S(v.InvalidCommand,\"object.set requires key and value\");K(e,t,i=>{if(i.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");i.fields[r]=_(n)})},fd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"object.delete requires key\");K(e,t,n=>{if(n.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");if(!Object.hasOwn(n.fields,r))throw S(v.MissingField,\"object field does not exist\");delete n.fields[r]})},pd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");for(let i of n.items){if(i.id===r.id)throw S(v.DuplicateArrayItemId,\"array item id already exists\");if(i.pos===r.pos)throw S(v.DuplicateArrayPos,\"array item position already exists\")}n.items.push({id:r.id,pos:r.pos,value:_(r.value)}),n.items.sort(lr)})},md=(e,t,r,n)=>{if(!r||!n)throw S(v.InvalidCommand,\"array.move requires id and pos\");K(e,t,i=>{if(i.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let a=-1;for(let d=0;d<i.items.length;d+=1){let l=i.items[d];if(l?.id===r){a=d;continue}if(l?.pos===n)throw S(v.DuplicateArrayPos,\"array item position already exists\")}if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");i.items[a]={...i.items[a],pos:n},i.items.sort(lr)})},yd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"array.delete requires id\");K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let i=zi(n.items,r);if(i===-1)throw S(v.MissingArrayItem,\"array item does not exist\");n.items.splice(i,1)})},hd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(r.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(r.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(Et(n.nodes,r.id)!==-1)throw S(v.DuplicateTreeNodeId,\"tree node id already exists\");if(!Wi(n.nodes,r.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(Ki(n.nodes,r.parent,r.pos,\"\"))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");n.nodes.push({id:r.id,parent:r.parent,pos:r.pos,value:_(r.value)}),n.nodes.sort(yn)})},gd=(e,t,r,n,i)=>{if(!r||!n||!i)throw S(v.InvalidCommand,\"tree.move requires id, parent, and pos\");K(e,t,a=>{if(a.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");let d=Et(a.nodes,r);if(d===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");if(!Wi(a.nodes,n))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(n===r||vd(a.nodes,n,r))throw S(v.TreeCycle,\"tree move would create cycle\");if(Ki(a.nodes,n,i,r))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");a.nodes[d]={...a.nodes[d],parent:n,pos:i},a.nodes.sort(yn)})},bd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"tree.delete requires id\");K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(Et(n.nodes,r)===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");let i=new Set([r]),a=!0;for(;a;){a=!1;for(let l of n.nodes)i.has(l.parent)&&!i.has(l.id)&&(i.add(l.id),a=!0)}let d=n.nodes.filter(l=>!i.has(l.id));n.nodes.splice(0,n.nodes.length,...d)})},K=(e,t,r)=>{if(t.length===0){r(e);return}let n=t[0],i=t.slice(1);switch(n.kind){case\"field\":if(e.kind!==\"object\")throw S(v.TypeMismatch,\"field path requires object\");if(!Object.hasOwn(e.fields,n.key))throw S(v.MissingField,\"field does not exist\");K(e.fields[n.key],i,r);return;case\"item\":if(e.kind!==\"array\")throw S(v.TypeMismatch,\"item path requires array\");{let a=zi(e.items,n.id);if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");K(e.items[a].value,i,r)}return;case\"node\":if(e.kind!==\"tree\")throw S(v.TypeMismatch,\"node path requires tree\");{let a=Et(e.nodes,n.id);if(a===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");K(e.nodes[a].value,i,r)}return}},Fi=(e,t)=>{for(let r of Object.keys(e))delete e[r];Object.assign(e,t)},zi=(e,t)=>e.findIndex(r=>r.id===t),Et=(e,t)=>e.findIndex(r=>r.id===t),Wi=(e,t)=>t===I||Et(e,t)!==-1,Ki=(e,t,r,n)=>e.some(i=>i.parent===t&&i.id!==n&&i.pos===r),vd=(e,t,r)=>{if(t===I)return!1;let n=new Map(e.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}};var gn=class{next(){let t=globalThis.crypto;if(t?.getRandomValues){let r=new Uint32Array(2);t.getRandomValues(r);let n=r[0]>>>5,i=r[1]>>>6;return(n*67108864+i)/9007199254740992}return Math.random()}},bn=class{constructor(t){p(this,\"charset\");p(this,\"random\");p(this,\"useJitter\");this.charset=t?.charset??Xi(),this.random=t?.random,this.useJitter=t?.useJitter??!0}between(t,r){return this.useJitter?wd(t,r,this.charset,this.random??new gn):Ji(t,r,this.charset)}},Sd=e=>{if(e.chars.length<7)throw new Error(\"charSet must be at least 7 characters long\");if([...e.chars].sort().join(\"\")!==e.chars)throw new Error(\"charSet must be sorted\");let r={},n={};for(let s=0;s<e.chars.length;s+=1){let u=e.chars[s];r[u]=s,n[s]=u}let i=r[e.firstPositive],a=r[e.mostPositive],d=r[e.mostNegative];if(i===void 0)throw new Error(\"invalid firstPositive\");if(a===void 0)throw new Error(\"invalid mostPositive\");if(d===void 0)throw new Error(\"invalid mostNegative\");if(a-i<3)throw new Error(\"mostPositive must be at least 3 characters away from neutral\");if(i-d<3)throw new Error(\"mostNegative must be at least 3 characters away from neutral\");let l=e.jitterRange??Math.floor(wn(e.chars.length,3)/5);return{chars:e.chars,byChar:r,byCode:n,length:e.chars.length,first:n[0],last:n[e.chars.length-1],firstPositive:e.firstPositive,mostPositive:e.mostPositive,firstNegative:n[i-1],mostNegative:e.mostNegative,jitterRange:l,paddingDict:Rd(l,e.chars.length)}},Td=Sd({chars:\"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\",firstPositive:\"a\",mostPositive:\"z\",mostNegative:\"A\"}),Xi=()=>Td;var ke=()=>new bn({charset:Xi()});var xd=e=>`${e.firstPositive}${e.byCode[0]}`,Gi=(e,t)=>{sr(e,t)},Ji=(e,t,r)=>{if(e!==void 0&&Gi(e,r),t!==void 0&&Gi(t,r),e===void 0&&t===void 0)return xd(r);if(e===void 0)return Pd(sr(t,r),r);if(t===void 0)return Zi(sr(e,r),r);if(e>=t)throw new Error(`${e} >= ${t}`);return Vd(e,t,r)};var wd=(e,t,r,n)=>{let i=Ji(e,t,r),a=_d(i,t,r);return a>0?Nd(i,a,r,n):Qi(i,r,n)};var sr=(e,t)=>{let r=eo(e,t),n=Tn(r,t);if(n>e.length)throw new Error(`invalid order key length: ${e}`);return e.slice(0,n)},Zi=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[t.length-1];return[...n].some(a=>a!==i)?`${r}${ao(n,t)}`:no(kd(r,t),\"lower\",t)},Pd=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[0];return[...n].some(a=>a!==i)?`${r}${vn(n,t,!1)}`:no(Id(r,t),\"upper\",t)},Vd=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),a=Sn(n,i,r);a===1&&(n=`${n}${r.first}`,a=r.length);let d=io(Math.floor(a/2),r);return xn(n,d,r)},Qi=(e,t,r)=>{let n=r.next();if(n<0||n>=1)throw new Error(`random value out of range: ${n}`);return xn(e,io(Math.floor(n*t.jitterRange),t),t)},Nd=(e,t,r,n)=>Qi(`${e}${r.first.repeat(t)}`,r,n),Yi=(e,t)=>{let r=t.jitterRange-e;for(let[n,i]of Object.entries(t.paddingDict))if(i>r)return Number(n);return 0},_d=(e,t,r)=>{let n=sr(e,r),i=Zi(n,r),a=0;if(t!==void 0){let l=Sn(e,t,r);l<r.jitterRange+1&&(a=Math.max(a,Yi(l,r)))}let d=Sn(e,i,r);return d<r.jitterRange+1&&(a=Math.max(a,Yi(d,r))),a},eo=(e,t)=>{if(e.length===0)return\"\";let r=0;if(e[0]===t.mostPositive)for(;r<e.length&&e[r]===t.mostPositive;)r+=1;if(e[0]===t.mostNegative)for(;r<e.length&&e[r]===t.mostNegative;)r+=1;return r>=e.length?e:e.slice(0,r+1)},ur=(e,t,r)=>{if(e.length===0)return 0;let n=e[0];if(n>r.mostPositive||n<r.mostNegative)throw new Error(\"invalid firstChar on key\");return n===r.mostPositive&&t===\"positive\"?_e(n,r.mostNegative,r)+1+ur(e.slice(1),t,r):n===r.mostNegative&&t===\"negative\"?_e(n,r.mostPositive,r)+1+ur(e.slice(1),t,r):t===\"positive\"?_e(n,r.mostNegative,r)+2:_e(n,r.mostPositive,r)+2},Tn=(e,t)=>{if(e.length===0)throw new Error(\"head cannot be empty\");let r=e[0];if(r>t.mostPositive||r<t.mostNegative)throw new Error(\"invalid firstChar on key\");return r===t.mostPositive?_e(r,t.firstPositive,t)+1+ur(e.slice(1),\"positive\",t):r===t.mostNegative?_e(r,t.firstNegative,t)+1+ur(e.slice(1),\"negative\",t):r>=t.firstPositive?_e(r,t.firstPositive,t)+2:_e(r,t.firstNegative,t)+2},to=(e,t)=>{if(Tn(e,t)!==e.length)throw new Error(`invalid integer length: ${e}`)},ro=(e,t)=>{let r=eo(e,t);return[r,e.slice(r.length)]},kd=(e,t)=>{let r=e>=t.firstPositive,n=ao(e,t),i=e.at(-1)===t.mostPositive,a=n.at(-1)===t.mostPositive;return r&&a?`${n}${t.mostNegative}`:!r&&i?e.slice(0,-1):n},Id=(e,t)=>{let r=e>=t.firstPositive,n=e.at(-1)===t.mostNegative;return r&&n?vn(e.slice(0,-1),t,!1):!r&&n?`${e}${t.mostPositive}`:vn(e,t,!1)},no=(e,t,r)=>{let n=Tn(e,r),i=t===\"upper\"?r.last:r.first;return`${e}${i.repeat(n-e.length)}`},_e=(e,t,r)=>{let n=r.byChar[e],i=r.byChar[t];if(n===void 0||i===void 0)throw new Error(\"invalid character in distance calculation\");return Math.abs(n-i)},cr=(e,t,r,n)=>{let i=Math.max(e.length,t.length);return r===\"start\"?[n.repeat(i-e.length)+e,n.repeat(i-t.length)+t]:[e+n.repeat(i-e.length),t+n.repeat(i-t.length)]},io=(e,t)=>{if(e===0)return t.byCode[0];let r=\"\",n=e;for(;n>0;)r=`${t.byCode[n%t.length]}${r}`,n=Math.floor(n/t.length);return r},Ad=(e,t)=>{let r=0;for(let n=0;n<e.length;n+=1){let i=e.length-n-1;r+=t.byChar[e[n]]*wn(t.length,i)}return r},xn=(e,t,r)=>{let[n,i]=cr(e,t,\"start\",r.first),a=[],d=0;for(let l=n.length-1;l>=0;l-=1){let s=r.byChar[n[l]]+r.byChar[i[l]]+d;d=Math.floor(s/r.length),a.push(r.byCode[s%r.length])}return d>0&&a.push(r.byCode[d]),a.reverse().join(\"\")},oo=(e,t,r,n)=>{let[i,a]=cr(e,t,\"start\",r.first),d=[],l=0;for(let u=i.length-1;u>=0;u-=1){let f=r.byChar[i[u]],c=r.byChar[a[u]]+l;f<c?(l=1,f+=r.length):l=0,d.push(r.byCode[f-c])}if(l>0)throw new Error(\"subtraction result is negative\");let s=d.reverse().join(\"\");return n?s.replace(new RegExp(`^${r.first}+`),\"\")||r.first:s},ao=(e,t)=>xn(e,t.byCode[1],t),vn=(e,t,r)=>oo(e,t.byCode[1],t,r),Sn=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),[a,d]=n>i?[i,n]:[n,i];return Ad(oo(d,a,r,!0),r)};function Rd(e,t){let r={};for(let n=0;n<100;n+=1){let i=wn(t,n);if(r[n]=i,i>e)break}return r}function wn(e,t){let r=1;for(let n=0;n<t;n+=1)r*=e;return r}var T={InvalidSchema:\"invalid_schema\",MissingRequired:\"missing_required\",TypeMismatch:\"type_mismatch\",LiteralMismatch:\"literal_mismatch\",ValidatorFailed:\"validator_failed\",UnionNoMatch:\"union_no_match\",EitherNoMatch:\"either_no_match\",TreeInvalidRootType:\"tree_invalid_root_type\",TreeInvalidChildType:\"tree_invalid_child_type\",TreeUnknownVariant:\"tree_unknown_variant\"},fr=class extends Error{constructor(r,n=\"\",i){super(n?`${r}: ${n}`:r);p(this,\"code\");p(this,\"valuePath\");p(this,\"schemaPath\");this.name=\"SchemaError\",this.code=r,this.valuePath=i?.valuePath??[],this.schemaPath=i?.schemaPath??[]}},x=(e,t,r)=>new fr(e,t,r),Pn=e=>e instanceof fr;var H=(e,t)=>x(T.InvalidSchema,t,{valuePath:[],schemaPath:e}),Z=(e,t,r)=>{if(typeof e!=\"object\"||e===null||Array.isArray(e))throw H(t,r);return e},ve=(e,t,r)=>{if(typeof e!=\"string\")throw H(t,r);return e},Vn=(e,t)=>{if(typeof e!=\"number\"||Number.isNaN(e)||!Number.isFinite(e))throw H(t,\"validator value must be a finite number\");return e};var qd=(e,t)=>{if(e!==void 0){if(typeof e!=\"string\")throw H(t,\"value must be a string\");return e}},lo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"string validators must be an array\");return e.map((r,n)=>Ed(r,[...t,n]))}},so=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"number validators must be an array\");return e.map((r,n)=>Dd(r,[...t,n]))}},uo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"array validators must be an array\");return e.map((r,n)=>Ld(r,[...t,n]))}},Ed=(e,t)=>{let r=Z(e,t,\"string validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":case\"length\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"regex\":return{kind:n,pattern:ve(r.pattern,[...t,\"pattern\"],\"regex pattern must be a string\"),flags:qd(r.flags,[...t,\"flags\"])};case\"email\":case\"url\":return{kind:n};default:throw H(t,`unknown string validator ${n}`)}},Dd=(e,t)=>{let r=Z(e,t,\"number validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"min\":case\"max\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"positive\":case\"negative\":case\"int\":return{kind:n};default:throw H(t,`unknown number validator ${n}`)}},Ld=(e,t)=>{let r=Z(e,t,\"array validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};default:throw H(t,`unknown array validator ${n}`)}};var Dt=(e,t,r,n,i)=>{if(r.kind!==t)throw x(T.TypeMismatch,`expected ${e}, got ${r.kind}`,{valuePath:n,schemaPath:i})},pr=(e,t,r,n)=>(Dt(e,\"string\",t,r,n),t),mr=(e,t,r,n)=>(Dt(e,\"number\",t,r,n),t),yr=(e,t,r,n)=>(Dt(e,\"boolean\",t,r,n),t),hr=(e,t,r,n)=>(Dt(e,\"object\",t,r,n),t),co=(e,t,r,n)=>(Dt(e,\"array\",t,r,n),t);var O=(e,t,r)=>x(T.ValidatorFailed,e,{valuePath:t,schemaPath:r}),q=e=>e===void 0?e:_(e),E=e=>e?{required:!0}:{};var fo={kind:\"array\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,element:r.parseSchema(e.element,[...n,\"element\"]),validators:uo(e.validators,[...n,\"validators\"])},e.default,n),serialize:(e,t)=>({kind:\"array\",element:t(e.element),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(r=>({...r}))}:{}}),validate:(e,t,r,n,i)=>{let d=co(e.kind,t,n,i).items.map(l=>{let s=r.validate(e.element,l.value,[...n,{kind:\"item\",id:l.id}],[...i,\"element\"]);if(s===void 0)throw x(T.TypeMismatch,\"array item cannot sanitize to undefined\",{valuePath:[...n,{kind:\"item\",id:l.id}],schemaPath:i});return{id:l.id,pos:l.pos,value:s}});for(let l of e.validators??[])switch(l.kind){case\"minLength\":if(d.length<l.value)throw O(\"array shorter than minLength\",n,i);break;case\"maxLength\":if(d.length>l.value)throw O(\"array longer than maxLength\",n,i);break}return{kind:\"array\",items:d}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var po={kind:\"boolean\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required},e.default,n),serialize:e=>({kind:\"boolean\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>_(yr(\"boolean\",t,n,i)),materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var mo={kind:\"either\",parse:(e,t,r,n)=>{if(!Array.isArray(e.variants))throw x(T.InvalidSchema,\"either variants must be an array\",{schemaPath:[...n,\"variants\"]});return r.normalizeDefault({kind:t.kind,required:t.required,variants:e.variants.map((i,a)=>r.parseSchema(i,[...n,\"variants\",a]))},e.default,n)},serialize:(e,t)=>({kind:\"either\",variants:e.variants.map(r=>t(r)),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=[];for(let d=0;d<e.variants.length;d+=1)try{let l=r.validate(e.variants[d],t,n,[...i,\"variants\",d]);if(l!==void 0)return l}catch(l){l instanceof Error&&a.push(l)}throw x(T.EitherNoMatch,a[0]?.message??\"no either variant matched\",{valuePath:n,schemaPath:i})},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var yo={kind:\"literal\",parse:(e,t,r,n)=>{let i=e.value;if(typeof i!=\"string\"&&typeof i!=\"number\"&&typeof i!=\"boolean\")throw H([...n,\"value\"],\"literal value must be string, number, or boolean\");return r.normalizeDefault({kind:t.kind,required:t.required,value:i},e.default,n)},serialize:e=>({kind:\"literal\",value:e.value,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=typeof e.value==\"string\"?\"string\":typeof e.value==\"number\"?\"number\":\"boolean\",d=a===\"string\"?pr(e.kind,t,n,i):a===\"number\"?mr(e.kind,t,n,i):yr(e.kind,t,n,i);if(d.value!==e.value)throw x(T.LiteralMismatch,\"literal value does not match schema\",{valuePath:n,schemaPath:i});return _(d)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var ho={kind:\"number\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:so(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"number\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=mr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"min\":if(a.value<d.value)throw O(\"number smaller than min\",n,i);break;case\"max\":if(a.value>d.value)throw O(\"number larger than max\",n,i);break;case\"positive\":if(a.value<=0)throw O(\"number is not positive\",n,i);break;case\"negative\":if(a.value>=0)throw O(\"number is not negative\",n,i);break;case\"int\":if(!Number.isInteger(a.value))throw O(\"number is not an integer\",n,i);break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var go={kind:\"object\",parse:(e,t,r,n)=>{let i=Z(e.fields,[...n,\"fields\"],\"object schema fields must be an object\"),a={};for(let[d,l]of Object.entries(i))a[d]=r.parseSchema(l,[...n,\"fields\",d]);return r.normalizeDefault({kind:t.kind,required:t.required,fields:a},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.fields))r[n]=t(i);return{kind:\"object\",fields:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d={};for(let[l,s]of Object.entries(e.fields)){let u=r.validate(s,a.fields[l],[...n,{kind:\"field\",key:l}],[...i,\"fields\",l]);u!==void 0&&(d[l]=u)}return ne(d)},materializeDefault:(e,t,r,n)=>{let i={},a=!1;for(let[d,l]of Object.entries(e.fields)){let s;try{s=t.materializeDefault(l,[...r,{kind:\"field\",key:d}],[...n,\"fields\",d])}catch(u){if(!e.required&&Pn(u)&&u.code===T.MissingRequired)return;throw u}s!==void 0&&(i[d]=s,a=!0)}if(a)return ne(i);if(e.required)throw x(T.MissingRequired,\"required object has no defaultable fields\",{valuePath:r,schemaPath:n})}};var bo={kind:\"string\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:lo(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"string\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=pr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"minLength\":if(a.value.length<d.value)throw O(\"string shorter than minLength\",n,i);break;case\"maxLength\":if(a.value.length>d.value)throw O(\"string longer than maxLength\",n,i);break;case\"length\":if(a.value.length!==d.value)throw O(\"string length mismatch\",n,i);break;case\"regex\":if(!new RegExp(d.pattern,d.flags).test(a.value))throw O(\"string does not match regex\",n,i);break;case\"email\":if(!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(a.value))throw O(\"invalid email\",n,i);break;case\"url\":try{new URL(a.value)}catch{throw O(\"invalid url\",n,i)}break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var vo={kind:\"tree\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"tree discriminator must be a string\"),a=e.roots;if(!Array.isArray(a)||!a.every(s=>typeof s==\"string\"))throw x(T.InvalidSchema,\"tree roots must be a string array\",{schemaPath:[...n,\"roots\"]});let d=Z(e.variants,[...n,\"variants\"],\"tree variants must be an object\"),l={};for(let[s,u]of Object.entries(d)){let f=Z(u,[...n,\"variants\",s],\"tree variant must be an object\"),c=r.parseSchema(f.schema,[...n,\"variants\",s,\"schema\"]);if(c.kind!==\"object\")throw x(T.InvalidSchema,\"tree variant schema must be an object schema\",{schemaPath:[...n,\"variants\",s,\"schema\"]});let m=c.fields[i];if(m?.kind!==\"literal\"||m.value!==s)throw x(T.InvalidSchema,\"tree discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",s,\"schema\",\"fields\",i]});let y=f.children;if(!Array.isArray(y)||!y.every(N=>typeof N==\"string\"))throw x(T.InvalidSchema,\"tree variant children must be a string array\",{schemaPath:[...n,\"variants\",s,\"children\"]});l[s]={schema:c,children:[...y]}}for(let s of a)if(!Object.hasOwn(l,s))throw x(T.InvalidSchema,`unknown tree root variant ${s}`,{schemaPath:[...n,\"roots\"]});for(let[s,u]of Object.entries(l))for(let f of u.children)if(!Object.hasOwn(l,f))throw x(T.InvalidSchema,`unknown tree child variant ${f}`,{schemaPath:[...n,\"variants\",s,\"children\"]});return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,roots:[...a],variants:l},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]={schema:t(i.schema),children:[...i.children]};return{kind:\"tree\",discriminator:e.discriminator,roots:[...e.roots],variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=(()=>{if(t.kind!==\"tree\")throw x(T.TypeMismatch,`expected ${e.kind}, got ${t.kind}`,{valuePath:n,schemaPath:i});return t})(),d=new Map,l=a.nodes.map(s=>{let u=s.value.fields[e.discriminator];if(u===void 0||u.kind!==\"string\")throw x(T.TreeUnknownVariant,\"tree node discriminator is missing or invalid\",{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let f=e.variants[u.value];if(!f)throw x(T.TreeUnknownVariant,`unknown tree variant ${u.value}`,{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});let c=r.validate(f.schema,s.value,[...n,{kind:\"node\",id:s.id}],[...i,\"variants\",u.value,\"schema\"]);return d.set(s.id,u.value),{id:s.id,parent:s.parent,pos:s.pos,value:c}});for(let s of l){let u=d.get(s.id);if(s.parent===I){if(!e.roots.includes(u))throw x(T.TreeInvalidRootType,`tree root type ${u} is not allowed`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"roots\"]});continue}let f=d.get(s.parent);if(!f)throw x(T.TreeUnknownVariant,\"tree parent variant is missing\",{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:i});if(!e.variants[f].children.includes(u))throw x(T.TreeInvalidChildType,`tree child type ${u} is not allowed under ${f}`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"variants\",f,\"children\"]})}return{kind:\"tree\",nodes:l}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var So={kind:\"union\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"union discriminator must be a string\"),a=Z(e.variants,[...n,\"variants\"],\"union variants must be an object\"),d={};for(let[l,s]of Object.entries(a)){let u=r.parseSchema(s,[...n,\"variants\",l]);if(u.kind!==\"object\")throw x(T.InvalidSchema,\"union variants must be object schemas\",{schemaPath:[...n,\"variants\",l]});let f=u.fields[i];if(f?.kind!==\"literal\"||f.value!==l)throw x(T.InvalidSchema,\"union discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",l,\"fields\",i]});d[l]=u}return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,variants:d},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]=t(i);return{kind:\"union\",discriminator:e.discriminator,variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d=a.fields[e.discriminator];if(d===void 0||d.kind!==\"string\")throw x(T.UnionNoMatch,\"union discriminator is missing or invalid\",{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let l=e.variants[d.value];if(!l)throw x(T.UnionNoMatch,`unknown union discriminator ${d.value}`,{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});return r.validate(l,a,n,[...i,\"variants\",d.value])},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var Od={string:bo,number:ho,boolean:po,literal:yo,object:go,array:fo,union:So,either:mo,tree:vo};var Ke=e=>Od[e];var Nn=(e,t,r)=>To(e,t,r),To=(e,t,r)=>\"default\"in e&&e.default!==void 0?_(e.default):Ke(e.kind).materializeDefault(e,Md,t,r),Md={materializeDefault:To};var Lt=(e,t)=>(t!==void 0&&B(t),xo(e,t,[],[])),xo=(e,t,r,n)=>t===void 0?Nn(e,r,n):Ke(e.kind).validate(e,t,jd,r,n),jd={validate:xo,materializeDefault:Nn};var wo=e=>Po(e),Po=e=>Ke(e.kind).serialize(e,Po);var o={};Aa(o,{Array:()=>Xd,ArrayPrimitive:()=>Pr,Boolean:()=>Wd,BooleanPrimitive:()=>Tr,Either:()=>Jd,EitherPrimitive:()=>Vr,Lazy:()=>ol,LazyPrimitive:()=>Ar,Literal:()=>Kd,LiteralPrimitive:()=>xr,Number:()=>zd,NumberPrimitive:()=>Sr,PrimitiveError:()=>h,String:()=>Fd,StringPrimitive:()=>vr,Struct:()=>Yd,StructPrimitive:()=>wr,Tree:()=>nl,TreeNode:()=>tl,TreeNodePrimitive:()=>_r,TreeNodeSelf:()=>Qd,TreePrimitive:()=>Ir,Union:()=>Zd,UnionPrimitive:()=>Nr,commands:()=>$d,expectDefined:()=>Bd,hasOwn:()=>Hd,randomUuid:()=>dt,shortId:()=>Ge});var h=class extends Error{constructor(t){super(t),this.name=\"PrimitiveError\"}},Bd=(e,t)=>{if(e===void 0)throw new h(t);return e},Hd=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),dt=()=>{let e=globalThis.crypto?.randomUUID?.();if(typeof e==\"string\")return e;throw new h(\"crypto.randomUUID is not available in this runtime\")},Vo=\"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ\",Ud=10,Ge=(e=Ud)=>{let t=globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);if(!t)throw new h(\"crypto.getRandomValues is not available in this runtime\");let r=Vo.length,n=Math.floor(256/r)*r,i=\"\",a=new Uint8Array(e);for(;i.length<e;){t(a);for(let d=0;d<a.length&&i.length<e;d+=1){let l=a[d];l<n&&(i+=Vo[l%r])}}return i};var $d=(e,t,r)=>{B(t);let n=Lt(e.schema,t);if(n===void 0)throw new Error(\"Primitive root snapshot cannot be undefined\");let i=[],a=n,d=ke(),l={current:()=>a,emit:s=>{s.length!==0&&(i.push(...s),a=hn(n,i))},generator:{nextArrayItemId:()=>dt(),nextTreeNodeId:()=>Ge(),between:(s,u)=>d.between(s,u)}};return r(e.createProxy(l,[])),i};var D=(e,t)=>{let r=e;for(let n of t){if(r===void 0)return;switch(n.kind){case\"field\":if(r.kind!==\"object\")return;r=r.fields[n.key];break;case\"item\":if(r.kind!==\"array\")return;r=r.items.find(i=>i.id===n.id)?.value;break;case\"node\":if(r.kind!==\"tree\")return;r=r.nodes.find(i=>i.id===n.id)?.value;break}}return r},gr=(e,t)=>{let r=D(e,t);return r?.kind===\"object\"?r:void 0},U=(e,t)=>{let r=D(e,t);return r?.kind===\"array\"?r:void 0},G=(e,t)=>{let r=D(e,t);return r?.kind===\"tree\"?r:void 0},Se=e=>e?[...e.items].sort((t,r)=>t.pos.localeCompare(r.pos)):[],br=(e,t)=>e?.items.find(r=>r.id===t),_n=(e,t)=>{let r=Se(e),n=Ot(t,r.length);return n===void 0?void 0:r[n]},kn=(e,t)=>e?.nodes.find(r=>r.id===t),Ie=(e,t)=>e?e.nodes.filter(r=>r.parent===t).sort((r,n)=>r.pos.localeCompare(n.pos)):[];var Ot=(e,t)=>{let r=e<0?t+e:e;if(!(r<0||r>=t))return r},lt=(e,t)=>{if(t<0||t>e.length)throw new h(`Index ${t} is out of range`);return{lower:t===0?void 0:e[t-1],upper:t===e.length?void 0:e[t]}};var In=(e,t,r)=>{if(!e||t===I)return!1;let n=new Map(e.nodes.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}},An=(e,t)=>[...e,{kind:\"node\",id:t}];var vr=class e{constructor(t){p(this,\"_tag\",\"StringPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"string\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:re(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}length(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"length\",value:t}]})}regex(t,r){return new e({...this.state,validators:[...this.state.validators,{kind:\"regex\",pattern:t.source,flags:t.flags}]})}email(){return new e({...this.state,validators:[...this.state.validators,{kind:\"email\"}]})}url(){return new e({...this.state,validators:[...this.state.validators,{kind:\"url\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"String value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return re(this.state.defaultValue);if(this.state.required)throw new h(\"String value is required\");return}if(typeof t!=\"string\")throw new h(\"Expected string input\");return re(t)}decode(t){return t?.kind===\"string\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Fd=()=>new vr({required:!1,defaultValue:void 0,validators:[]});var Sr=class e{constructor(t){p(this,\"_tag\",\"NumberPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"number\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:ot(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"min\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"max\",value:t}]})}positive(){return new e({...this.state,validators:[...this.state.validators,{kind:\"positive\"}]})}negative(){return new e({...this.state,validators:[...this.state.validators,{kind:\"negative\"}]})}int(){return new e({...this.state,validators:[...this.state.validators,{kind:\"int\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Number value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return ot(this.state.defaultValue);if(this.state.required)throw new h(\"Number value is required\");return}if(typeof t!=\"number\"||globalThis.Number.isNaN(t)||!globalThis.Number.isFinite(t))throw new h(\"Expected finite number input\");return ot(t)}decode(t){return t?.kind===\"number\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},zd=()=>new Sr({required:!1,defaultValue:void 0,validators:[]});var Tr=class e{constructor(t){p(this,\"_tag\",\"BooleanPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"boolean\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:at(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Boolean value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return at(this.state.defaultValue);if(this.state.required)throw new h(\"Boolean value is required\");return}if(typeof t!=\"boolean\")throw new h(\"Expected boolean input\");return at(t)}decode(t){return t?.kind===\"boolean\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Wd=()=>new Tr({required:!1,defaultValue:void 0});var Rn=e=>{switch(typeof e){case\"string\":return re(e);case\"number\":return ot(e);case\"boolean\":return at(e);default:throw new h(`Unsupported scalar value type: ${typeof e}`)}};var xr=class e{constructor(t){p(this,\"_tag\",\"LiteralPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get literal(){return this.state.literal}get schema(){return{kind:\"literal\",value:this.state.literal,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:Rn(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){if(t!==this.state.literal)throw new h(\"Literal default must equal the literal value\");return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Literal value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Literal value is required\");return}if(r!==this.state.literal)throw new h(\"Input does not match the literal value\");return Rn(this.state.literal)}decode(t){if(t!==void 0&&\"value\"in t&&t.value===this.state.literal)return this.state.literal}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Kd=e=>new xr({required:!1,defaultValue:void 0,literal:e});var wr=class e{constructor(t){p(this,\"_tag\",\"StructPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get fields(){return this.state.fields}get schema(){let t={};for(let[r,n]of Object.entries(this.state.fields))t[r]=n.schema;return{kind:\"object\",fields:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}extend(t){return new e({required:this.state.required,defaultValue:void 0,fields:{...this.state.fields,...t}})}partial(t){let r=t?.stripDefaults??!1,n={};for(let[i,a]of Object.entries(this.state.fields))n[i]=No(a,r);return new e({required:this.state.required,defaultValue:void 0,fields:n})}optional(t){let r=t?Object.fromEntries(Object.entries(this.state.fields).map(([n,i])=>[n,No(i,!0)])):this.state.fields;return new e({required:!1,defaultValue:t?void 0:this.state.defaultValue,fields:r})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Struct value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return this.encode(this.state.defaultValue);if(this.state.required)throw new h(\"Struct value is required\");return}if(typeof t!=\"object\"||t===null||Array.isArray(t))throw new h(\"Expected object input\");let r=t,n={};for(let[i,a]of Object.entries(this.state.fields)){let d=a.encodeOptional(r[i]);d!==void 0&&(n[i]=d)}return ne(n)}decode(t){if(t?.kind!==\"object\")return;let r={};for(let[n,i]of Object.entries(this.state.fields)){let a=i.decode(t.fields[n]);a!==void 0&&(r[n]=a)}return r}createProxy(t,r){let n={get:()=>this.decode(D(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},update:i=>{Gd(this.state.fields,t,r,i)}};for(let[i,a]of Object.entries(this.state.fields))n[i]=a.createProxy(t,[...r,{kind:\"field\",key:i}]);return n}},Gd=(e,t,r,n)=>{for(let[i,a]of Object.entries(n)){let d=e[i];if(d){if(a===void 0){gr(t.current(),r)?.fields[i]!==void 0&&t.emit([{kind:\"object.delete\",path:r,key:i}]);continue}if(d._tag===\"StructPrimitive\"&&typeof a==\"object\"&&a!==null&&!Array.isArray(a)){d.createProxy(t,[...r,{kind:\"field\",key:i}]).update(a);continue}t.emit([{kind:\"object.set\",path:r,key:i,value:d.encode(a)}])}}},No=(e,t)=>{let r=e.optional;return typeof r==\"function\"?r.call(e,t):e},Yd=e=>new wr({required:!1,defaultValue:void 0,fields:e});var Pr=class e{constructor(t){p(this,\"_tag\",\"ArrayPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");p(this,\"encodedDefaultCache\");this.state=t}encodedDefault(){return this.encodedDefaultCache===void 0&&(this.encodedDefaultCache={value:this.state.defaultValue===void 0?void 0:this.encodeEntries(this.state.defaultValue)}),this.encodedDefaultCache.value}get element(){return this.state.element}get schema(){let t=this.encodedDefault();return{kind:\"array\",element:this.state.element.schema,...this.state.required?{required:!0}:{},...t!==void 0?{default:_(t)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}minLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}maxLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Array value is undefined\");return r}encodeOptional(t){if(t===void 0){let r=this.encodedDefault();if(r!==void 0)return _(r);if(this.state.required)throw new h(\"Array value is required\");return}if(!globalThis.Array.isArray(t))throw new h(\"Expected array input\");return this.encodeEntries(t)}decode(t){if(t?.kind===\"array\")return Se(t).map(r=>({id:r.id,pos:r.pos,value:this.state.element.decode(r.value)}))}createProxy(t,r){let n=d=>({get id(){return d},get pos(){return br(U(t.current(),r),d)?.pos??\"\"},get value(){return a.state.element.createProxy(t,[...r,{kind:\"item\",id:d}])},get:()=>{let l=br(U(t.current(),r),d);return this.state.element.decode(l?.value)},remove:()=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:l=>{_o(t,r,d,l)},moveToPos:l=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])}}),i=()=>Se(U(t.current(),r)).map(d=>n(d.id)),a=this;return{get length(){return Se(U(t.current(),r)).length},get:()=>this.decode(U(t.current(),r)),set:d=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(d)}])},push:d=>{let l=Se(U(t.current(),r)),s=l.length===0?void 0:l[l.length-1]?.pos,u=t.generator.nextArrayItemId(r),f=t.generator.between(s,void 0);return t.emit([{kind:\"array.insert\",path:r,item:{id:u,pos:f,value:this.state.element.encode(d)}}]),n(u)},insertAt:(d,l)=>{let s=Se(U(t.current(),r)),u=lt(s.map(m=>m.pos),d),f=t.generator.nextArrayItemId(r),c=t.generator.between(u.lower,u.upper);return t.emit([{kind:\"array.insert\",path:r,item:{id:f,pos:c,value:this.state.element.encode(l)}}]),n(f)},insertAtPos:(d,l)=>{let s=t.generator.nextArrayItemId(r);return t.emit([{kind:\"array.insert\",path:r,item:{id:s,pos:d,value:this.state.element.encode(l)}}]),n(s)},remove:d=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:(d,l)=>{_o(t,r,d,l)},moveToPos:(d,l)=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])},at:d=>{let l=_n(U(t.current(),r),d);return l?n(l.id):void 0},first:()=>{let d=_n(U(t.current(),r),0);return d?n(d.id):void 0},last:()=>{let d=Se(U(t.current(),r)),l=d[d.length-1];return l?n(l.id):void 0},findById:d=>{let l=br(U(t.current(),r),d);return l?n(l.id):void 0},find:d=>i().find((s,u,f)=>d(s,u,f)),findIndex:d=>i().findIndex((s,u,f)=>d(s,u,f)),map:d=>i().map((s,u,f)=>d(s,u,f)),filter:d=>i().filter((s,u,f)=>d(s,u,f)),some:d=>i().some((s,u,f)=>d(s,u,f)),every:d=>i().every((s,u,f)=>d(s,u,f)),forEach:d=>{i().forEach((s,u,f)=>d(s,u,f))},[Symbol.iterator]:()=>i()[Symbol.iterator]()}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encodeEntries(t){let r=ke(),n=new Set,i,a=t.map(d=>{let l=r.between(i,void 0);i=l;let s=dt();for(;n.has(s);)s=dt();return n.add(s),{id:s,pos:l,value:this.state.element.encode(d)}});return pn(a)}},_o=(e,t,r,n)=>{let i=Se(U(e.current(),t));if(i.findIndex(c=>c.id===r)===-1)throw new h(`Array item \"${r}\" does not exist`);let d=i.filter(c=>c.id!==r),l=Ot(n,d.length+1);if(l===void 0&&n!==d.length)throw new h(`Index ${n} is out of range`);let s=l??d.length,u=lt(d.map(c=>c.pos),s),f=e.generator.between(u.lower,u.upper);e.emit([{kind:\"array.move\",path:t,id:r,pos:f}])},Xd=e=>new Pr({required:!1,defaultValue:void 0,element:e,validators:[]});var Vr=class e{constructor(t){p(this,\"_tag\",\"EitherPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");if(this.state=t,t.variants.length===0)throw new h(\"Either requires at least one variant\")}get schema(){return{kind:\"either\",variants:this.state.variants.map(t=>t.schema),...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Either value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Either value is required\");return}for(let n of this.state.variants)try{let i=n.encodeOptional(r);if(i!==void 0)return i}catch{}throw new h(\"Either input did not match any variant\")}decode(t){for(let r of this.state.variants){let n=r.decode(t);if(n!==void 0)return n}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}},Jd=(...e)=>new Vr({required:!1,defaultValue:void 0,variants:e});var Nr=class e{constructor(t){p(this,\"_tag\",\"UnionPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get discriminator(){return this.state.discriminator}get variants(){return this.state.variants}get schema(){let t={};for(let[r,n]of Object.entries(this.state.variants)){let i=n.schema;if(i.kind!==\"object\")throw new h(\"Union variants must compile to object schemas\");let a={...i.fields,[this.state.discriminator]:{kind:\"literal\",value:r}};t[r]={kind:\"object\",fields:a}}return{kind:\"union\",discriminator:this.state.discriminator,variants:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Union value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Union value is required\");return}if(typeof r!=\"object\"||r===null||Array.isArray(r))throw new h(\"Expected union input object\");let n=this.resolveVariantKey(r),i=this.state.variants[n];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);let a=i.encode(r);if(a.kind!==\"object\")throw new h(\"Union variant must encode to an object value\");return ne({...a.fields,[this.state.discriminator]:re(String(n))})}decode(t){if(t?.kind!==\"object\")return;let r=this.resolveVariantKeyFromObject(t);if(!r)return;let i=this.state.variants[r]?.decode(t);if(i!==void 0)return{...i,[this.state.discriminator]:r}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},as:n=>{let i=this.state.variants[String(n)];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);return i.createProxy(t,r)},match:n=>{let i=gr(t.current(),r),a=i?this.resolveVariantKeyFromObject(i):void 0;if(!a)return;let d=n[a];if(d)return d(this.state.variants[a].createProxy(t,r))}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}resolveVariantKey(t){let r=t[this.state.discriminator];if(typeof r==\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r))return r;let n=Object.entries(this.state.variants).filter(([,i])=>{let a=Object.keys(i.fields);return Object.keys(t).every(d=>d===this.state.discriminator||a.includes(d))}).map(([i])=>i);if(n.length===1)return n[0];throw new h(\"Unable to resolve union variant from input\")}resolveVariantKeyFromObject(t){let r=t.fields[this.state.discriminator];if(r?.kind===\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r.value))return r.value}},Zd=(e,t)=>new Nr({required:!1,defaultValue:void 0,discriminator:t?.discriminator??\"type\",variants:e});var ko=Symbol.for(\"TreeNode.Self\"),Qd={_tag:\"TreeNodeSelf\",_brand:ko},el=e=>typeof e==\"object\"&&e!==null&&\"_brand\"in e&&e._brand===ko,_r=class{constructor(t,r,n){p(this,\"_tag\",\"TreeNodePrimitive\");p(this,\"_Type\");p(this,\"_Data\");p(this,\"_Children\");p(this,\"TSetInput\");p(this,\"type\");p(this,\"data\");p(this,\"childrenInput\");p(this,\"resolvedChildren\");this.type=t,this.data=r,this.childrenInput=n}get children(){if(this.resolvedChildren===void 0){let t=typeof this.childrenInput==\"function\"?this.childrenInput():this.childrenInput;this.resolvedChildren=t.map(r=>el(r)?this:r)}return this.resolvedChildren}isChildAllowed(t){return this.children.some(r=>r.type===t)}},tl=(e,t)=>new _r(e,t.data,t.children);var Ir=class e{constructor(t){p(this,\"_tag\",\"TreePrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){let t=rl(this.state.root);return{kind:\"tree\",discriminator:\"type\",roots:[this.state.root.type],variants:t,...this.state.required?{required:!0}:{},...this.state.encodedDefault!==void 0?{default:_(this.state.encodedDefault)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t,encodedDefault:this.encodeRoots(t)})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Tree value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.encodedDefault!==void 0)return _(this.state.encodedDefault);if(this.state.required)throw new h(\"Tree value is required\");return}if(!Array.isArray(t))throw new h(\"Expected tree root input array\");return this.encodeRoots(t)}encodeRoots(t){let r=[],n=kr(this.state.root),i=new Set([I]),a,d=ke(),l=(s,u,f,c)=>{let m=n.get(s.type);if(!m)throw new h(`Unknown tree node type \"${s.type}\"`);if(!f.some(w=>w.type===m.type))throw new h(`Node type \"${s.type}\" is not allowed here`);let y=s.id??il(i);if(i.has(y))throw new h(`Duplicate tree node id \"${y}\" in encoded input`);i.add(y);let N=d.between(c,void 0);r.push({id:y,parent:u,pos:N,value:Cn(m,s)});let R;for(let w of s.children??[])R=l(w,y,m.children,R);return N};for(let s of t)a=l(s,I,[this.state.root],a);return mn(r)}decode(t){if(t?.kind!==\"tree\")return;let r=kr(this.state.root);return Ro(t,I,r)}createProxy(t,r){let n=kr(this.state.root);return{get:()=>this.decode(G(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},findByIdAcrossTree:i=>{let a=G(t.current(),r),d=kn(a,i);if(!d)return;let l=d.value.fields.type,s=n.get(l?.kind===\"string\"?l.value:\"\");return s?Ye(t,r,n,s,i):void 0},children:Ao(t,r,n,I,[this.state.root])}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue,encodedDefault:t?void 0:this.state.encodedDefault})}},Ao=(e,t,r,n,i)=>{let a=()=>Ie(G(e.current(),t),n).filter(l=>i.some(s=>s.type===ie(l))).map(l=>Ye(e,t,r,r.get(ie(l)),l.id)),d={__parentId:n,get length(){return a().length},at:l=>{let s=Ie(G(e.current(),t),n).filter(c=>i.some(m=>m.type===ie(c))),u=Ot(l,s.length),f=u===void 0?void 0:s[u];return f?Ye(e,t,r,r.get(ie(f)),f.id):void 0},first:()=>d.at(0),last:()=>{let l=a();return l[l.length-1]},findById:l=>{let s=Ie(G(e.current(),t),n).find(f=>f.id===l);if(!s)return;let u=r.get(ie(s));return u?Ye(e,t,r,u,s.id):void 0},insertAt:(l,s)=>{let u=G(e.current(),t),f=Ie(u,n).filter(w=>i.some(P=>P.type===ie(w))),c=lt(f.map(w=>w.pos),l),m=Io(i,s.type),y=s.id??e.generator.nextTreeNodeId(t),N=e.generator.between(c.lower,c.upper),R={id:y,parent:n,pos:N,value:Cn(m,s)};return e.emit([{kind:\"tree.insert\",path:t,node:R}]),Ye(e,t,r,m,y)},insertLast:l=>{let s=Ie(G(e.current(),t),n).filter(u=>i.some(f=>f.type===ie(u)));return d.insertAt(s.length,l)},insertAtPos:(l,s)=>{let u=Io(i,s.type),f=s.id??e.generator.nextTreeNodeId(t),c={id:f,parent:n,pos:l,value:Cn(u,s)};return e.emit([{kind:\"tree.insert\",path:t,node:c}]),Ye(e,t,r,u,f)},find:l=>a().find((u,f,c)=>l(u,f,c)),findIndex:l=>a().findIndex((u,f,c)=>l(u,f,c)),map:l=>a().map((u,f,c)=>l(u,f,c)),filter:l=>a().filter((u,f,c)=>l(u,f,c)),some:l=>a().some((u,f,c)=>l(u,f,c)),every:l=>a().every((u,f,c)=>l(u,f,c)),forEach:l=>{a().forEach((u,f,c)=>l(u,f,c))},[Symbol.iterator]:()=>a()[Symbol.iterator]()};return d},Ye=(e,t,r,n,i)=>{let a=()=>kn(G(e.current(),t),i),d=()=>{let l=a();return l?r.get(ie(l))??n:n};return{get id(){return i},get type(){return d().type},get pos(){return a()?.pos??\"\"},get parentId(){let l=a()?.parent;return l===I?null:l??null},get data(){return d().data.createProxy(e,An(t,i))},get children(){return Ao(e,t,r,i,d().children)},get:()=>{let l=a();if(l)return Co(l,G(e.current(),t),r)},update:l=>{d().data.createProxy(e,An(t,i)).update(l)},remove:()=>{e.emit([{kind:\"tree.delete\",path:t,id:i}])},moveTo:(l,s)=>{let u=l.__parentId;if(!u)throw new h(\"Target children collection is not movable\");let f=G(e.current(),t);if(In(f,u,i))throw new h(\"Tree move would create a cycle\");let c=Ie(f,u).filter(N=>N.id!==i),m=lt(c.map(N=>N.pos),s),y=e.generator.between(m.lower,m.upper);e.emit([{kind:\"tree.move\",path:t,id:i,parent:u,pos:y}])},moveToPos:(l,s)=>{let u=G(e.current(),t);if(In(u,l,i))throw new h(\"Tree move would create a cycle\");e.emit([{kind:\"tree.move\",path:t,id:i,parent:l,pos:s}])},as:l=>{if(d().type!==l.type)throw new h(`Expected node type \"${l.type}\", got \"${d().type}\"`);return Ye(e,t,r,l,i)}}},rl=e=>{let t=kr(e),r={};for(let n of t.values()){let i=n.data.schema;if(i.kind!==\"object\")throw new h(\"Tree node data must compile to an object schema\");r[n.type]={schema:{kind:\"object\",fields:{...i.fields,type:{kind:\"literal\",value:n.type}}},children:n.children.map(a=>a.type)}}return r},kr=e=>{let t=new Map,r=n=>{let i=t.get(n.type);if(i&&i!==n)throw new h(`Duplicate tree node type \"${n.type}\"`);if(!i){t.set(n.type,n);for(let a of n.children)r(a)}};return r(e),t},Cn=(e,t)=>{let r=e.data.encode(t);if(r.kind!==\"object\")throw new h(\"Tree node data must encode to an object\");return ne({...r.fields,type:re(e.type)})},ie=e=>{let t=e.value.fields.type;if(t?.kind!==\"string\")throw new h(`Tree node \"${e.id}\" is missing its type discriminator`);return t.value},Ro=(e,t,r)=>Ie(e,t).map(n=>Co(n,e,r)),Co=(e,t,r)=>{let n=r.get(ie(e));if(!n)throw new h(`Unknown tree node type \"${ie(e)}\"`);return{id:e.id,type:n.type,parentId:e.parent===I?null:e.parent,pos:e.pos,data:n.data.decode(e.value),children:Ro(t,e.id,r)}},Io=(e,t)=>{let r=e.find(n=>n.type===t);if(!r)throw new h(`Tree node type \"${t}\" is not allowed in this collection`);return r},nl=e=>new Ir({required:!1,defaultValue:void 0,encodedDefault:void 0,root:e.root}),il=e=>{let t=Ge();for(;e.has(t);)t=Ge();return t};var Ar=class{constructor(t){p(this,\"_tag\",\"LazyPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"thunk\");p(this,\"resolved\");this.thunk=t}get schema(){return this.resolve().schema}encode(t){return this.resolve().encode(t)}encodeOptional(t){return this.resolve().encodeOptional(t)}decode(t){return this.resolve().decode(t)}createProxy(t,r){return this.resolve().createProxy(t,r)}resolve(){return this.resolved===void 0&&(this.resolved=this.thunk()),this.resolved}},ol=e=>new Ar(e);var qo=o.Struct({type:o.Literal(\"click\").required()}),Eo=o.Union({click:qo}),Rr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()})},{discriminator:\"key\"}),Do=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Lo=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),Oo=o.Struct({type:o.Literal(\"none\").required()}),Mo=o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Do.required()}).required()}),jo=o.Struct({type:o.Literal(\"close-paywall\").required()}),Bo=o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Lo.required()}),Cr=o.Union({\"close-paywall\":jo,none:Oo,\"purchase-product\":Bo,\"set-variable\":Mo}),Ho=o.Struct({id:o.String().required(),trigger:Eo.required(),action:Cr.required()}),Mt=o.Array(Ho).default([]);var Uo=o.Struct({key:o.Literal(\"string\").required(),value:o.String().default(\"\")}),$o=o.Struct({key:o.Literal(\"number\").required(),value:o.Number().default(0)}),Fo=o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().default(!1)}),zo=o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).default({})}),qr=o.Union({boolean:Fo,number:$o,product:zo,string:Uo},{discriminator:\"key\"}),Wo=o.Struct({id:o.String().required(),name:o.String().required(),value:qr.required()}),Er=o.Struct({id:o.String().required()});var Dr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),\"boolean-array\":o.Struct({key:o.Literal(\"boolean-array\").required(),value:o.Array(o.Boolean()).required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),\"number-array\":o.Struct({key:o.Literal(\"number-array\").required(),value:o.Array(o.Number()).required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),\"string-array\":o.Struct({key:o.Literal(\"string-array\").required(),value:o.Array(o.String()).required()})},{discriminator:\"key\"}),qn=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Dr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),Ko=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),value:o.Struct({field:o.String().required()}).required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Go=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),field:o.String().required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),En=o.Union({\"close-paywall\":o.Struct({type:o.Literal(\"close-paywall\").required()}),none:o.Struct({type:o.Literal(\"none\").required()}),\"purchase-product\":o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Go.required()}),\"set-variable\":o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Ko.required()}).required()})});var $=o.Array(Wo).default([]),F=o.Array(o.Struct({name:o.String().required(),nodeId:o.String().required()})).default([]);var al=o.Struct({path:o.String().required(),source:o.String().default(\"\")}).required(),Dn=o.TreeNode(\"codeComponent\",{children:[],data:al});var Y=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:qr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),dl=o.Struct({type:o.Literal(\"equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ll=o.Struct({type:o.Literal(\"not-equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),sl=o.Struct({type:o.Literal(\"greater-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ul=o.Struct({type:o.Literal(\"greater-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),cl=o.Struct({type:o.Literal(\"less-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),fl=o.Struct({type:o.Literal(\"less-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),pl=o.Union({equals:dl,\"greater-than\":sl,\"greater-than-or-equal\":ul,\"less-than\":cl,\"less-than-or-equal\":fl,\"not-equals\":ll}),ml=o.Struct({type:o.Literal(\"and\").required(),value:o.Array(pl).minLength(1).required()}),Yo=o.Struct({type:o.Literal(\"or\").required(),value:o.Array(ml).minLength(1).required()}),yl=o.Struct({action:Cr.required(),interactionId:o.String().required()});function Ae(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({style:e}).default({})})}function Lr(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({actions:o.Array(yl).default([]),style:e}).default({})})}var Xe=/^rgba\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d*\\.?\\d+)\\s*\\)$/i,st=o.Number().default(0),ut=o.Number().default(0),ct=o.Number().default(0),ft=o.Number().default(0),oe=o.Number().default(0),ae=o.Number().default(0),de=o.Number().default(0),le=o.Number().default(0),pt=o.Number().default(0),mt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"space-between\"),o.Literal(\"space-around\"),o.Literal(\"space-evenly\")).default(\"flex-start\"),yt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"stretch\"),ht=o.Either(o.Literal(\"row\"),o.Literal(\"column\")).default(\"column\"),se=o.Number(),ue=o.Number().default(0),ce=o.Number().default(1),fe=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),pe=o.Either(o.Literal(\"auto\"),o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"auto\"),gt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),bt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),me=o.Number(),ye=o.Number(),he=o.Number(),ge=o.Number(),Xo=o.Number().default(0),Jo=o.Number().default(0),vt=o.Either(o.Literal(\"absolute\"),o.Literal(\"relative\")).default(\"relative\"),St=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Tt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),xt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),wt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Pt=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),Vt=o.Boolean().default(!1),Nt=o.Either(o.Literal(\"solid\"),o.Literal(\"gradient\"),o.Literal(\"image\")).default(\"solid\"),_t=o.Struct({kind:o.Either(o.Literal(\"linear\"),o.Literal(\"radial\")).default(\"linear\"),startX:o.Number().default(.5),startY:o.Number().default(0),endX:o.Number().default(.5),endY:o.Number().default(1),stops:o.Array(o.Struct({color:o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),position:o.Number().default(0)})).default([{color:\"rgba(255, 255, 255, 1)\",position:0},{color:\"rgba(255, 255, 255, 0)\",position:1}])}).default({}),Te=o.Struct({url:o.String().default(\"\"),resizeMode:o.Either(o.Literal(\"cover\"),o.Literal(\"contain\"),o.Literal(\"stretch\"),o.Literal(\"center\")).default(\"cover\")}).default({}),Re=o.Number().default(0),Ce=o.Number().default(0),qe=o.Number().default(0),Ee=o.Number().default(0),De=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Le=o.Either(o.Literal(\"solid\"),o.Literal(\"dashed\"),o.Literal(\"dotted\")).default(\"solid\"),Or=o.Number().default(0),Mr=o.Number().default(0),jr=o.Number().default(0),Br=o.Number().default(0),Oe=o.Boolean().default(!1),X=o.Number().default(1),Me=o.Either(o.Literal(\"visible\"),o.Literal(\"hidden\"),o.Literal(\"scroll\")).default(\"visible\"),je=o.Number().default(0),J=o.Either(o.Literal(\"flex\"),o.Literal(\"none\")).default(\"flex\"),Be=o.Boolean().default(!1),He=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Ue=o.Number().default(0),$e=o.Number().default(0),Fe=o.Number().default(0),ze=o.Number().default(1),Zo=o.Number().default(16).min(1),Qo=o.Either(o.Literal(\"100\"),o.Literal(\"200\"),o.Literal(\"300\"),o.Literal(\"400\"),o.Literal(\"500\"),o.Literal(\"600\"),o.Literal(\"700\"),o.Literal(\"800\"),o.Literal(\"900\")).default(\"400\"),ea=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),ta=o.Either(o.Literal(\"left\"),o.Literal(\"center\"),o.Literal(\"right\"),o.Literal(\"justify\")).default(\"left\"),ra=o.Number().default(1.5),na=o.Number().default(0),kt=o.Boolean().default(!1),It=o.Boolean().default(!1),ia=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),oa=o.Boolean().default(!1),aa=o.Either(o.Literal(\"nonzero\"),o.Literal(\"evenodd\")).default(\"nonzero\"),da=o.Number().default(1),la=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),sa=o.Boolean().default(!1),ua=o.Number().default(0),ca=o.Number().default(1),fa=o.Either(o.Literal(\"butt\"),o.Literal(\"round\"),o.Literal(\"square\")).default(\"butt\"),pa=o.Either(o.Literal(\"miter\"),o.Literal(\"round\"),o.Literal(\"bevel\")).default(\"miter\");var Ln=o.Struct({fillColor:ia,fillEnabled:oa,fillRule:aa,fillOpacity:da,strokeColor:la,strokeEnabled:sa,strokeWidth:ua,strokeOpacity:ca,strokeLinecap:fa,strokeLinejoin:pa,opacity:X,display:J}).default({}),hl=Ae(Ln.partial({stripDefaults:!0}).default({})),gl=o.Array(hl).default([]),On=o.TreeNode(\"path\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Path\"),states:gl,d:o.String().default(\"\"),transform:o.String(),style:Ln}).required()});var bl=o.Either(o.Literal(\"none\"),o.Literal(\"xMidYMid meet\"),o.Literal(\"xMidYMid slice\")).default(\"xMidYMid meet\"),vl=o.Struct({minX:o.Number().default(0),minY:o.Number().default(0),width:o.Number().default(24),height:o.Number().default(24)}).default({}),Mn=o.Struct({width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,opacity:X,display:J,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\"),preserveAspectRatio:bl}).default({}),Sl=Ae(Mn.partial({stripDefaults:!0}).default({})),Tl=o.Array(Sl).default([]),xe=o.TreeNode(\"shape\",{children:[On],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Shape\"),states:Tl,svgSource:o.String(),viewBox:vl,style:Mn}).required()});var jn=o.Struct({marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,fontSize:Zo,fontWeight:Qo,color:ea,textAlign:ta,lineHeight:ra,letterSpacing:na,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),xl=Ae(jn.partial({stripDefaults:!0}).default({})),wl=o.Array(xl).default([]),Pl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({text:o.String()}).default({})})).default([]),we=o.TreeNode(\"text\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,localized:Pl,name:o.String().default(\"Text\"),states:wl,style:jn,text:o.String().default(\"New Text\")}).required()});var Bn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),Vl=Lr(Bn.partial({stripDefaults:!0}).default({})),Nl=o.Array(Vl).default([]),_l=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Je=o.TreeNode(\"view\",{children:()=>[o.TreeNodeSelf,Ze,we,xe,Qe],data:o.Struct({interactions:Mt,linkedVariables:F,localVariables:$,localized:_l,name:o.String().default(\"View\"),states:Nl,style:Bn}).required()});var Hn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),kl=Lr(Hn.partial({stripDefaults:!0}).default({})),Il=o.Array(kl).default([]),Al=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Rl=o.Struct({horizontal:o.Boolean().default(!1),interactions:Mt,linkedVariables:F,localVariables:$,localized:Al,name:o.String().default(\"ScrollView\"),showsScrollIndicator:o.Boolean().default(!0),states:Il,style:Hn}).required(),Ze=o.TreeNode(\"scrollView\",{children:()=>[Je,o.TreeNodeSelf,we,xe,Qe],data:Rl});var Cl=o.Struct({actionBindings:o.Array(o.Struct({action:En.required(),name:o.String().required()})).default([]),componentSource:o.String().default(\"catalog\"),componentPath:o.String().default(\"\"),componentSlug:o.String().default(\"\"),componentVersion:o.Number().default(0),contentHash:o.String().default(\"\"),name:o.String().default(\"Component\"),previewState:o.String().default(\"default\"),props:o.Array(o.Struct({name:o.String().required(),value:qn.required(),localizedValues:o.Array(o.Struct({locale:o.String().required(),value:Dr.required()})).default([])})).default([])}).required(),Qe=o.TreeNode(\"component\",{children:()=>[Je,Ze,we,xe,o.TreeNodeSelf],data:Cl});var Un=o.TreeNode(\"library\",{children:()=>[Dn],data:o.Struct({}).required()});var $n=o.Struct({x:Xo,y:Jo,width:o.Number().default(375),height:o.Number().default(812),minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,backgroundColor:Pt.default(\"rgba(255, 255, 255, 1)\"),backgroundEnabled:Vt.default(!0),backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),ql=Ae($n.partial({stripDefaults:!0}).default({})),El=o.Array(ql).default([]),Dl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Fn=o.TreeNode(\"screen\",{children:()=>[Je,Ze,we,xe,Qe],data:o.Struct({linkedVariables:F,localVariables:$,localized:Dl,name:o.String().default(\"Screen\"),states:El,style:$n}).required()});var Ll=o.Struct({defaultLocale:o.String().default(\"en\"),locales:o.Array(o.Struct({tag:o.String().required()})).default([])}).default({}),zn=o.TreeNode(\"root\",{children:()=>[Fn,Un],data:o.Struct({localization:Ll,name:o.String()}).required()});var Wn=o.Tree({root:zn});function Hr(e){return e!==null&&typeof e==\"object\"&&\"id\"in e&&\"pos\"in e&&\"value\"in e?e.value:e}function Kn(e){let t=e.indexOf(\"-\");return t===-1?e:e.slice(0,t)}function ma(e,t,r){let n=e.text,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.text;if(f===void 0||f===\"\")continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}function ya(e,t,r){let n=e.style.backgroundImage,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.backgroundImage;if(f===void 0)continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}var Gn=e=>Array.isArray(e)?e.map(Gn):typeof e!=\"object\"||e===null?e:Object.fromEntries(Object.entries(e).sort(([t],[r])=>t.localeCompare(r)).map(([t,r])=>[t,Gn(r)])),ha=e=>JSON.stringify(Gn(wo(e.schema))),ga=e=>{let t=new Map;for(let r of e){let n=`${r.database}\\0${r.collection}`;if(t.has(n))throw new Error(`Duplicate migration collection ${r.database}/${r.collection}`);let i=r.baseline;for(let[a,d]of r.migrations.entries()){let l=a+1;if(!Number.isSafeInteger(d.version)||d.version!==l)throw new Error(`Expected migration version ${l} for ${r.database}/${r.collection}, received ${d.version}`);if(ha(i)!==ha(d.from))throw new Error(`Migration ${d.version} (${d.name}) does not start from the previous schema`);i=d.to}t.set(n,r)}return{collections:[...e],find:(r,n)=>t.get(`${r}\\0${n}`)}};var Ol=\"voidhash\",Ml=\"paywalls\",Ch=ga([{database:Ol,databaseDescription:\"Voidhash paywall documents\",collection:Ml,baseline:Wn,migrations:[]}]);var Dh=o.Struct({cursor:o.Struct({x:o.Number().required(),y:o.Number().required()}),name:o.String(),participant:o.Union({agent:o.Struct({editSessionId:o.String().required(),kind:o.Literal(\"agent\").required(),source:o.Either(o.Literal(\"built_in\"),o.Literal(\"mcp\")).required()}),human:o.Struct({kind:o.Literal(\"human\").required()})},{discriminator:\"kind\"}).required(),selectedNodeIds:o.Array(o.String()).default([]),user:o.Struct({color:o.String().required(),name:o.String().required()}).required()});function At(e){let{locale:t,defaultLocale:r}=te();return ya(e,t,r)}function ba({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=At(e.data),i=Jt(n===e.data.style.backgroundImage?r:{...r,backgroundImage:n}),a=Zt(r);return b(\"div\",{\"data-node-id\":e.id,style:i,children:b(\"div\",{style:a,children:t})})}function Ur(e,t,r){let{getNodeVariables:n,setNodeVariable:i,callbacks:a}=te(),d=n(e),l=j(()=>({...a,onSetVariable:(f,c)=>{i(e,f,c)}}),[a,e,i]),s=j(()=>t.filter(f=>f.value?.trigger?.type===\"click\"),[t]),u=ee(()=>{for(let f of s){let c=f.value;if(!c?.action)continue;let m=f.id??c.id;if(!m)continue;let N=tn(m,r,d)??c.action;rn(N,d,l)}},[s,r,d,l]);if(s.length!==0)return u}function va({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=Yt(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i},{horizontal:e.data.horizontal,showsScrollIndicator:e.data.showsScrollIndicator});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function Sa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Qt(r),i=e.data.viewBox,a=`${i.minX} ${i.minY} ${i.width} ${i.height}`;return b(\"div\",{\"data-node-id\":e.id,style:n,children:b(\"svg\",{height:\"100%\",preserveAspectRatio:r.preserveAspectRatio,style:{display:\"block\"},viewBox:a,width:\"100%\",children:t})})}function Ta({node:e}){let t=W(e.id,e.data.style,e.data.states),r=er(t),{locale:n,defaultLocale:i}=te();return b(\"span\",{\"data-node-id\":e.id,style:r,children:ma(e.data,n,i)})}function xa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=it(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function wa({snapshot:e,componentArtifacts:t,locale:r}){return b(Li,{componentArtifacts:t,locale:r,snapshot:e,children:b(Pa,{node:e})})}var jl={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",textAlign:\"center\"};function Bl({node:e}){return b(\"div\",{style:jl,children:`Unsupported node type: ${String(e.type)}`})}function Pa({node:e}){let t=(e.children??[]).map(r=>b(Pa,{node:r},r.id));switch(e.type){case\"root\":return b(Q,{children:t});case\"screen\":return b(ba,{node:e,children:t});case\"view\":return b(xa,{node:e,children:t});case\"scrollView\":return b(va,{node:e,children:t});case\"text\":return b(Ta,{node:e});case\"shape\":return b(Sa,{node:e,children:t});case\"path\":return b(Hi,{node:e});case\"component\":return b(Bi,{node:e,children:t});case\"library\":case\"codeComponent\":return null;default:return b(Bl,{node:e})}}var Hl=\"__VOIDHASH_PAYWALL__\",Va={products:[],variables:{}},Ul=e=>({products:e?.products??[],variables:e?.variables??{},locale:e?.locale,platform:e?.platform,defaultSelectedProductId:e?.defaultSelectedProductId}),Na=()=>{if(typeof window>\"u\")return Va;let e=window[Hl];return e?Ul(e):Va};function _a(e){return Na().locale??e}function $l(e){let t;try{t=JSON.parse(e)}catch{return}if(!(typeof t!=\"object\"||t===null)){if(\"type\"in t)return{componentArtifacts:void 0,locale:void 0,snapshot:t};if(\"snapshot\"in t){let r=t;return{componentArtifacts:r.componentArtifacts,locale:r.locale,snapshot:r.snapshot}}}}function ka(){let e=document.getElementById(\"__PAYWALL_DATA__\");if(!e?.textContent)return;let t=document.getElementById(\"paywall-root\");if(!t)return;let r=$l(e.textContent);r&&ui(b(wa,{componentArtifacts:r.componentArtifacts,locale:_a(r.locale),snapshot:r.snapshot}),t)}document.readyState===\"loading\"?document.addEventListener(\"DOMContentLoaded\",ka):ka();})();\n";
diff --git a/packages/paywall-renderer-web-core/src/styles/node-styles.test.ts b/packages/paywall-renderer-web-core/src/styles/node-styles.test.ts
index fb0a2fbab..8e8094047 100644
--- a/packages/paywall-renderer-web-core/src/styles/node-styles.test.ts
+++ b/packages/paywall-renderer-web-core/src/styles/node-styles.test.ts
@@ -150,6 +150,12 @@ describe("buildShapeContainerStyles", () => {
 });
 
 describe("buildTextStyles", () => {
+  test("preserves authored line breaks and wraps long words", () => {
+    const styles = buildTextStyles(makeTextStyle());
+    expect(styles.whiteSpace).toBe("pre-wrap");
+    expect(styles.wordWrap).toBe("break-word");
+  });
+
   test("absent min/max constraints and flex stay unset; present ones emit px", () => {
     const defaults = buildTextStyles(makeTextStyle());
     expect(defaults.minWidth).toBeUndefined();
diff --git a/packages/paywall-renderer-web-core/src/styles/text-styles.ts b/packages/paywall-renderer-web-core/src/styles/text-styles.ts
index ced44120e..e592b1268 100644
--- a/packages/paywall-renderer-web-core/src/styles/text-styles.ts
+++ b/packages/paywall-renderer-web-core/src/styles/text-styles.ts
@@ -19,6 +19,8 @@ export function buildTextStyles(style: TextNodeData["data"]["style"]): Propertie
     overflow: style.overflow,
     position: style.position ?? "relative",
     textAlign: style.textAlign,
+    whiteSpace: "pre-wrap",
+    wordWrap: "break-word",
   };
 
   // Min/max constraints — absent means unconstrained
diff --git a/packages/rpc/src/groups/AgentSessionRpcsDef.ts b/packages/rpc/src/groups/AgentSessionRpcsDef.ts
index 56c78f7f6..6a4f16871 100644
--- a/packages/rpc/src/groups/AgentSessionRpcsDef.ts
+++ b/packages/rpc/src/groups/AgentSessionRpcsDef.ts
@@ -60,13 +60,13 @@ export class AgentSessionRpcsDef extends RpcGroup.make(
     payload: { sessionId: Schema.String },
     success: Schema.Void,
   }),
-  Rpc.make("RevertAgentSessionChangeSet", {
+  Rpc.make("RevertAgentEditSession", {
     error: Schema.Union([
       RpcAgentSessionServiceError,
       RpcActionForbiddenError,
       RpcAgentSessionNotFoundError,
     ]),
-    payload: { sessionId: Schema.String, changeSetId: Schema.String },
+    payload: { sessionId: Schema.String, editSessionId: Schema.String },
     success: Schema.Void,
   }),
   Rpc.make("UploadAgentAttachment", {
diff --git a/packages/rpc/src/groups/PaywallRpcsDef.ts b/packages/rpc/src/groups/PaywallRpcsDef.ts
index b0044f304..b553393f6 100644
--- a/packages/rpc/src/groups/PaywallRpcsDef.ts
+++ b/packages/rpc/src/groups/PaywallRpcsDef.ts
@@ -51,6 +51,16 @@ export class PaywallRpcsDef extends RpcGroup.make(
     }),
     success: Schema.Array(Paywall),
   }),
+  Rpc.make("BackfillPaywallThumbnails", {
+    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError]),
+    payload: Schema.Struct({
+      projectId: Schema.String,
+    }),
+    success: Schema.Struct({
+      attempted: Schema.Number,
+      rendered: Schema.Number,
+    }),
+  }),
   Rpc.make("CreatePaywall", {
     error: Schema.Union([
       RpcActionForbiddenError,
diff --git a/packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts b/packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts
index 897b7f847..8696b8dc5 100644
--- a/packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts
+++ b/packages/rpc/src/groups/PaywallWorkspaceRpcsDef.ts
@@ -72,6 +72,7 @@ export class PaywallWorkspaceRpcsDef extends RpcGroup.make(
       // Validated server-side against the ComponentManifest schema; `undefined`
       // for `error` uploads.
       manifest: Schema.optional(Schema.Unknown),
+      previewTrees: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
       diagnostics: Schema.optional(Schema.Array(ComponentManifestDiagnostic)),
     }),
     success: Schema.Void,
diff --git a/plugins/voidhash/.codex-plugin/plugin.json b/plugins/voidhash/.codex-plugin/plugin.json
index 3c97c9b90..e5d773043 100644
--- a/plugins/voidhash/.codex-plugin/plugin.json
+++ b/plugins/voidhash/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "voidhash",
-  "version": "0.1.0+codex.20260714172114",
+  "version": "0.1.0+codex.20260715124658",
   "description": "Control Voidhash with OAuth-authenticated MCP tools.",
   "author": {
     "name": "Voidhash"
@@ -18,16 +18,17 @@
   "interface": {
     "displayName": "Voidhash",
     "shortDescription": "Work with Voidhash through OAuth-authenticated tools.",
-    "longDescription": "Connect Codex to Voidhash through browser-based OAuth and use platform tools, starting with visually verified paywall authoring.",
+    "longDescription": "Connect Codex to Voidhash through browser-based OAuth to author visually verified paywalls and build custom code components, editor panels, motion, and gestures.",
     "developerName": "Voidhash",
     "category": "Productivity",
     "capabilities": [
       "OAuth",
       "Platform tools",
-      "Paywall authoring"
+      "Paywall authoring",
+      "Code component authoring"
     ],
     "websiteURL": "https://voidhash.com",
-    "defaultPrompt": "Use Voidhash to design and visually verify my paywall."
+    "defaultPrompt": "Use Voidhash to design and visually verify a paywall or build a custom code component."
   },
   "mcpServers": "./.mcp.json"
 }
diff --git a/plugins/voidhash/README.md b/plugins/voidhash/README.md
index e535c7a50..d8c4563f9 100644
--- a/plugins/voidhash/README.md
+++ b/plugins/voidhash/README.md
@@ -1,6 +1,6 @@
 # Voidhash for Codex
 
-This plugin connects Codex to the hosted Voidhash MCP server. It currently includes visually verified paywall authoring and can grow with additional platform tools. Authentication uses OAuth in the browser; no CLI login, API key, or environment variable is required.
+This plugin connects Codex to the hosted Voidhash MCP server. It includes visually verified paywall authoring plus custom code-component, editor-panel, motion, and gesture authoring. Authentication uses OAuth in the browser; no CLI login, API key, or environment variable is required.
 
 ## Install from this checkout
 
@@ -22,3 +22,7 @@ For this browser-only flow, test with an organization that contains one project.
 Start a new task and ask:
 
 > Use Voidhash to list my paywalls, open one for editing, render a preview, and revert the edit without publishing changes.
+
+To exercise the component reference, start a new task and ask:
+
+> Use $code-component-authoring to build a custom paywall component with an editor panel and motion.
diff --git a/plugins/voidhash/skills/code-component-authoring/SKILL.md b/plugins/voidhash/skills/code-component-authoring/SKILL.md
new file mode 100644
index 000000000..166616430
--- /dev/null
+++ b/plugins/voidhash/skills/code-component-authoring/SKILL.md
@@ -0,0 +1,604 @@
+---
+name: code-component-authoring
+description: Create, edit, debug, and place Voidhash code components, including typed props and actions, preview fixtures, custom designer panels, animation, motion values, scroll-linked effects, drag gestures, and gesture-aware panel controls. Use when a paywall needs runtime data, loops, structural logic, custom formatting, pressed/focus states, animation, dragging, or a tailored component-properties panel, or when working with read_component, write_component, rename_component, or delete_component.
+---
+
+# Code Component Authoring
+
+Use this as the complete author-facing contract for local Voidhash code components.
+Build ordinary composition with document nodes; use a code component only for behavior
+the document cannot express, such as runtime-data text, loops, structural branching,
+custom formatting, pointer states, motion, and drag gestures.
+
+## MCP workflow
+
+1. Call `begin_paywall_edit({ paywallId })` and retain its `editSessionId`.
+2. Read the document with `get_paywall` and all placeable contracts with
+   `get_components`. If editing a local component, read it with `read_component`.
+3. Write one complete `components/<name>.tsx` source with `write_component`. Fix every
+   compile or runtime diagnostic and retry; a rejected write commits nothing.
+4. Place a successful local definition with a document `component` node:
+
+   ```json
+   {
+     "op": "insert",
+     "parentId": "<parent-id>",
+     "node": {
+       "type": "component",
+       "name": "Animated offer",
+       "componentSource": "local",
+       "componentPath": "components/animated-offer.tsx"
+     }
+   }
+   ```
+
+5. Configure instance `props`, `localizedValues`, `actionBindings`, `previewState`, and
+   slot children through `edit_paywall`, using the manifest returned by `get_components`.
+6. Render `get_paywall_preview`, inspect the actual PNG, iterate, and finish or revert the
+   edit session using the normal paywall-authoring workflow.
+
+Treat the component path as identity. Valid paths are exactly
+`components/<basename>.tsx`; the basename may use letters, digits, `.`, `_`, and `-`,
+must not contain a separator or `..`, and is compared case-insensitively for collisions.
+`rename_component` changes the identity and re-points local instances.
+`delete_component` removes only the definition; existing instances become placeholders.
+
+Author one self-contained file. Import runtime/component APIs from
+`@voidhash/paywalls`, panel APIs from `@voidhash/paywalls/panel`, and nothing else.
+Do not import `react` directly or use relative imports from an MCP-written component.
+React hooks needed by authored code are re-exported by `@voidhash/paywalls`.
+
+## Complete component pattern
+
+```tsx
+import {
+  defineComponent,
+  MotionConfig,
+  Pressable,
+  Slot,
+  Text,
+  View,
+  usePaywallActions,
+  useSelectedProduct,
+} from "@voidhash/paywalls";
+import { Panel } from "@voidhash/paywalls/panel";
+
+export default defineComponent({
+  title: "Animated Offer",
+  description: "A selectable offer with editable appearance.",
+  props: (p) => ({
+    title: p.string().label("Title").localizable().default("Annual Pro"),
+    accent: p.string().label("Accent").editor("color").default("rgba(99, 102, 241, 1)"),
+    radius: p.number().label("Radius").default(16),
+    product: p.ref("product"),
+    footer: p.component().optional(),
+  }),
+  actions: (a) => ({
+    onSelect: a.action({ productId: a.string() }),
+  }),
+  previews: {
+    default: {
+      props: { title: "Annual Pro", accent: "rgba(99, 102, 241, 1)", radius: 16 },
+      data: {
+        products: [{
+          id: "annual",
+          slug: "annual",
+          displayName: "Annual Pro",
+          priceString: "$59.99",
+          period: "year",
+        }],
+      },
+    },
+  },
+  panel: (ctx) => (
+    <Panel>
+      <Panel.Section title="Content">
+        <Panel.PropField name="title" />
+        <Panel.PropField name="product" />
+      </Panel.Section>
+      <Panel.Section title="Appearance">
+        <Panel.Field label="Accent">
+          <Panel.ColorField
+            disabled={ctx.props.accent.bound}
+            mixed={ctx.props.accent.mixed}
+            onChange={(value) => ctx.props.accent.set(value, { gesture: "live" })}
+            onCommit={(value) => ctx.props.accent.set(value, { gesture: "commit" })}
+            onDiscard={() => ctx.props.accent.cancel()}
+            value={ctx.props.accent.value}
+          />
+        </Panel.Field>
+        <Panel.Field label="Radius">
+          <Panel.SliderField
+            max={32}
+            min={0}
+            mixed={ctx.props.radius.mixed}
+            onChange={(value) => ctx.props.radius.set(value, { gesture: "live" })}
+            onCommit={(value) => ctx.props.radius.set(value, { gesture: "commit" })}
+            value={ctx.props.radius.value}
+          />
+        </Panel.Field>
+        <Panel.DefaultProps exclude={["title", "product", "accent", "radius"]} />
+      </Panel.Section>
+    </Panel>
+  ),
+  render: ({ props, actions }) => {
+    const { selectedProductId } = useSelectedProduct();
+    const runtime = usePaywallActions();
+    const selected = selectedProductId === props.product.id;
+    return (
+      <MotionConfig reducedMotion="user">
+        <Pressable
+          accessibilityLabel={`Select ${props.product.displayName}`}
+          onPress={() => {
+            actions.onSelect({ productId: props.product.id });
+            runtime.selectProduct(props.product.id);
+          }}
+          style={{
+            backgroundColor: selected ? props.accent : "rgba(255, 255, 255, 1)",
+            borderBottomLeftRadius: props.radius,
+            borderBottomRightRadius: props.radius,
+            borderTopLeftRadius: props.radius,
+            borderTopRightRadius: props.radius,
+            paddingBottom: 16,
+            paddingLeft: 16,
+            paddingRight: 16,
+            paddingTop: 16,
+          }}
+          transition={{ type: "spring", stiffness: 240, damping: 22 }}
+          whilePress={{ scale: 0.97 }}
+        >
+          <View initial={{ opacity: 0, y: 12 }} animate={{ opacity: 1, y: 0 }}>
+            <Text>{props.title}</Text>
+            <Text>{props.product.priceString}</Text>
+            <Slot fallback={props.footer} />
+          </View>
+        </Pressable>
+      </MotionConfig>
+    );
+  },
+});
+```
+
+## `defineComponent` contract
+
+Use `export default defineComponent({ ... })`. A named constant that holds the call and is
+default-exported is also accepted, but never export `.component`. There is no component
+`id`; the file path is the identity.
+
+- `title?` and `description?` supply editor/catalog metadata.
+- `props?: (p) => ({ ... })` declares the editable input contract.
+- `actions?: (a) => ({ ... })` declares named events an instance may bind.
+- `previews?: { [state]: { props?, data? } }` supplies deterministic fixtures.
+- `panel?: (ctx) => ReactNode` supplies a custom properties panel.
+- `render: ({ props, actions }) => ReactNode` is required.
+
+Module evaluation must be deterministic and fast. Put hooks inside `render`, `panel`, or
+local React components, never at module scope. `write_component` evaluates the module,
+extracts the manifest, and renders every component preview. It detects that a custom panel
+exists but does not exercise every panel event; a panel can still fail when opened, in
+which case Studio falls back to default prop controls.
+
+Preview rendering flushes passive effects and waits one macrotask before serialization.
+Keep effects finite and deterministic; do not start unbounded timers, event loops, or
+network-dependent work in a preview.
+
+### Prop builders
+
+Every builder is immutable and chainable with `.label(string)`, `.default(value)`, and
+`.optional()`.
+
+- `p.string()` yields `string`; add `.editor("color")` for a color editor.
+- `p.number()` yields `number`.
+- `p.boolean()` yields `boolean`.
+- `p.select(["a", "b"] as const)` yields the option union. Options must be non-empty.
+- `p.image()` yields an image URL/asset reference string.
+- `p.ref("product")` yields a resolved `PaywallProduct` in `render`.
+- `p.component()` yields a nested `ReactNode` controlled by the editor.
+- `p.array(item)` yields a homogeneous array; `item` cannot itself be an array. Arrays of
+  ref/component items compile, but Studio treats them as code-configured/read-only.
+- `.localizable()` is legal only on string and image props.
+
+A default makes a prop optional to the instance but always populated in `render`.
+An explicitly optional prop is `T | undefined` in `render`. Use only JSON-safe scalar or
+scalar-array defaults; ref/component defaults do not survive the manifest. Never name a
+prop or action `id`; it is reserved for document node identity. Use the exact `Slot`
+identifier and supported product-hook names because manifest slot/host-data detection is
+source-based; renamed imports and product hooks hidden in helpers outside `render` may not
+be detected.
+
+### Actions
+
+- `a.action()` declares `() => void`.
+- `a.action({ field: a.string(), count: a.number(), enabled: a.boolean() })` declares a
+  typed payload callback.
+- Payloads are flat scalar records only.
+
+Pass a payload-free action directly to `Pressable` when possible. Wrap a payload action so
+the component supplies its payload. Declared action callbacks are stable and become no-ops
+when an instance has no matching binding. An instance's `actionBindings` may bind emitted
+fields to literals, variables, or action-payload fields and may perform `set-variable`,
+`purchase-product`, `close-paywall`, or `none` according to the document schema.
+
+### Previews and slots
+
+Preview names must match `[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}`. With no declarations, an
+implicit `default` preview is rendered. `props` override declared defaults. `data` accepts
+`products` and `variables`; product refs fall back to the first fixture product when unset.
+Exercise meaningful visual branches with named previews and keep fixture data complete.
+
+Use at most one `<Slot />`. It renders document children supplied to the component
+instance; `<Slot fallback={...} />` renders the fallback only when no children were passed.
+An empty Slot becomes a marker in the preview tree. More than one Slot collapses the
+preview to an error placeholder. A component-node's children are its slot content.
+
+## Render primitives, runtime, and styles
+
+Import `View`, `Text`, `Pressable`, `ScrollView`, `Image`, and `Slot` from
+`@voidhash/paywalls`.
+
+- `View`: flex container; supports visual motion and drag.
+- `Text`: text content; supports visual motion, `numberOfLines`, test id, and accessibility
+  label; never draggable.
+- `Pressable`: tap/keyboard surface; supports visual motion, press/focus states, drag,
+  `disabled`, and either static children or `(state: { pressed }) => ReactNode`.
+- `ScrollView`: vertical by default, horizontal with `horizontal`; supports visual motion,
+  `contentContainerStyle`, and a motion ref; never draggable.
+- `Image`: requires `source` as a string or `{ uri }`; `resizeMode` is `cover`, `contain`,
+  `stretch`, or `center`; supports visual motion and drag.
+
+`testID` is available on `View`, `Text`, `Pressable`, `ScrollView`, and `Image`.
+All except `ScrollView` also accept `accessibilityLabel`. `id`/`name` on `View` and
+`Text` are inert annotations, and `View.onPress` is inert; use `Pressable` for runtime
+interaction. A ScrollView's `contentContainerStyle` accepts static style only.
+
+Styles accept a single object or nested arrays with falsy entries; later entries win.
+Use React Native-style longhands, not CSS or shorthand spacing/borders. Numbers are logical
+pixels; dimensions may also be strings such as `"50%"`.
+
+Supported static keys are:
+
+`flex`, `flexDirection`, `alignItems`, `alignSelf`, `justifyContent`, `flexWrap`, `gap`,
+`flexGrow`, `flexShrink`, `flexBasis`, `width`, `height`, `minWidth`, `minHeight`,
+`maxWidth`, `maxHeight`, `paddingTop`, `paddingBottom`, `paddingLeft`, `paddingRight`,
+`marginTop`, `marginBottom`, `marginLeft`, `marginRight`, `aspectRatio`,
+`borderTopWidth`, `borderRightWidth`, `borderBottomWidth`, `borderLeftWidth`,
+`borderColor`, `borderTopLeftRadius`, `borderTopRightRadius`,
+`borderBottomLeftRadius`, `borderBottomRightRadius`, `borderStyle`, `backgroundColor`,
+`backgroundType`, `backgroundGradient`, `backgroundImage`, `opacity`, `overflow`,
+`position`, `top`, `right`, `bottom`, `left`, `zIndex`, `color`, `fontSize`,
+`fontWeight`, `fontStyle`, `lineHeight`, `letterSpacing`, `textAlign`, `textTransform`,
+`textDecorationLine`, and `fontFamily`.
+
+Value unions: `flexDirection` is `row | row-reverse | column | column-reverse`;
+`alignItems` is `flex-start | flex-end | center | stretch | baseline`; `alignSelf` also
+allows `auto`; `justifyContent` is `flex-start | flex-end | center | space-between |
+space-around | space-evenly`; `flexWrap` is `wrap | nowrap | wrap-reverse`; `borderStyle`
+is `solid | dotted | dashed`; `overflow` is `visible | hidden | scroll`; and `position` is
+`absolute | relative`. `fontStyle` is `normal | italic`; `textAlign` is `auto | left |
+right | center | justify`; `textTransform` is `none | uppercase | lowercase | capitalize`;
+and `textDecorationLine` is `none | underline | line-through | underline line-through`.
+`fontWeight` accepts a number, `normal`, `bold`, or the strings `100` through `900`.
+
+For structured backgrounds, set `backgroundType` to `solid`, `gradient`, or `image`.
+A gradient is `{ kind, startX, startY, endX, endY, stops: [{ color, position }] }` with
+`kind` `linear` or `radial`. An image is `{ url, resizeMode }`. Do not use arbitrary CSS,
+`transform`, shorthand `padding`, shorthand `margin`, shorthand `borderWidth`, or
+`borderRadius`; motion transforms use the motion keys below.
+
+Runtime hooks:
+
+- `usePaywallProducts()` returns `readonly PaywallProduct[]`.
+- `useSelectedProduct()` returns `selectedProduct`, `selectedProductId`, and
+  `selectProduct(productId)`.
+- `usePaywallVariables()` returns `Record<string, string | number | boolean>`.
+- `usePaywallActions()` returns `purchase(productId?)`, `restore()`, `close(reason?)`,
+  `openUrl(url)`, `track(name, properties?)`, and `selectProduct(productId)`.
+- `usePaywallStatus()` returns status `idle`, `purchasing`, `purchased`, `restoring`,
+  `restored`, `cancelled`, or `failed`, plus optional `productId` and an optional error
+  containing `code` and `message`.
+- `usePaywallConfig()` returns products, variables, locale, platform, and optional default
+  selected product id. Platform is `ios | android | web`.
+
+The selected product defaults to `defaultSelectedProductId`, then the first product.
+`purchase()` uses that selection when no id is passed and warns/no-ops if no product exists.
+
+`PaywallProduct` contains `id`, `slug`, `displayName`, optional `description`, optional
+numeric `price`, `priceString`, optional `currencyCode`, optional `period` (`month`,
+`year`, `week`, `lifetime`), and optional `trialPeriod`. Also import `useState`,
+`useEffect`, `useMemo`, `useCallback`, and `useRef` from `@voidhash/paywalls`.
+
+## Custom designer panels
+
+Import `Panel` from `@voidhash/paywalls/panel`. Return exactly one `<Panel>` root from the
+`panel(ctx)` function. The definition runs as a long-lived React session, so hooks, state,
+effects, and timers work. Its output is serialized to a closed JSON-safe tree; functions
+never cross the sandbox boundary. Events are routed back to the current handler by node id
+and event name. A recompile or component-identity change remounts the panel and resets its
+local state.
+
+### Panel context and safe editing
+
+`ctx.selection.count` reports the number of homogeneous component instances being edited.
+`ctx.data.products` and `ctx.data.variables` contain host data when available; do not assume
+either is populated.
+
+Current Studio custom sessions send `products: []` and `variables: {}`. Consequently a
+custom `ctx.props.<ref>.set(productId)` is rejected until a synchronous product source is
+wired. Use `Panel.PropField` for product refs and variable-binding chrome; it expands through
+the host and does not depend on this sandbox data.
+
+For scalar, select, image, and writable array props, `ctx.props.name` contains:
+
+- `value: T | undefined`, `mixed: boolean`, `bound: boolean`, and `kind`.
+- `set(value, { gesture?: "live" | "commit" })`; omitted gesture means `commit`.
+- `cancel()` to discard an in-flight live gesture.
+- `reset()` to remove the override and return to the declared default.
+
+Never call `set` or `reset` when `bound` is true; the host drops the write because variable
+binding owns the value. Render `Panel.PropField` or `Panel.DefaultProps` to retain the
+host's binding/localization/reset chrome. For multi-selection, pass `mixed` into controls
+and avoid presenting one target's value as unanimous.
+
+A ref handle contains `value: PaywallProduct | undefined`, `productId`, `mixed`, `kind:
+"ref"`, and `set(productId)`. A component prop handle is read-only (`value`, `mixed`,
+`kind`). Prefer `Panel.PropField` for ref, component, localized, and variable-bound props;
+the host owns their complete editor behavior and may not inject products into a custom
+session synchronously.
+
+### Panel primitives
+
+Shared tokens:
+
+- gap: `none | xs | sm | md | lg`; width: `auto | full | half`.
+- align: `start | center | end | stretch`; justify: `start | center | end | between`.
+- text variant: `label | body | caption | heading`.
+- tone: `default | muted | info | warning | error`.
+- button variant: `default | outline | ghost | destructive`; size: `sm | icon-sm | default`.
+- option: `{ value, label?, icon?, disabled? }`.
+
+Layout and chrome:
+
+- `Panel` root; `Panel.Section({ title?, collapsible?, defaultCollapsed?, onToggle? })`;
+  `Panel.SectionActions`; `Panel.Subsection({ title? })`.
+- `Panel.Row({ gap?, width?, align?, justify? })`; `Panel.Column({ gap?, width?, align? })`;
+  `Panel.Field({ label?, icon? })`.
+- `Panel.Text({ content?, variant?, tone? })` and
+  `Panel.Callout({ message?, tone? })` use props, not JSX text children.
+- `Panel.Popover({ open?, onOpenChange? })`, `Panel.PopoverTrigger`, and
+  `Panel.PopoverContent({ align?, side? })` compose a popover.
+- `Panel.Menu({ items?, value?, align?, onSelect? })` renders a host dropdown.
+
+Basic controls:
+
+- `Panel.TextField({ kind?, value?, mixed?, placeholder?, min?, max?, step?, icon?,
+  disabled?, trailingMenu?, onChange?, onCommit?, onTrailingSelect? })`. Event values are
+  strings; parse numeric text when necessary.
+- `Panel.SelectField({ value?, options?, placeholder?, mixed?, disabled?, onChange? })`.
+- `Panel.ToggleGroup({ value?, options?, mixed?, disabled?, onChange? })`.
+- `Panel.SwitchField({ checked?, mixed?, label?, disabled?, onChange? })`.
+- `Panel.Button({ label?, icon?, variant?, size?, disabled?, onClick? })`.
+- `Panel.SliderField({ value?, min?, max?, step?, mixed?, disabled?, onChange?,
+  onCommit? })`.
+- `Panel.ResetAffordance({ show?, label?, onReset?, children? })`.
+
+Host-integrated composites:
+
+- `Panel.ColorField({ value?, mixed?, mixedLabel?, disabled?, onChange?, onDragStart?,
+  onCommit?, onDiscard? })`.
+- `Panel.ColorPicker({ color?, opacity?, onColorChange?, onOpacityChange?, onDragStart?,
+  onDragEnd?, onDiscard? })`.
+- `Panel.GradientStops({ stops?, selectedStopId?, onSelect?, onAddStop?, onMoveStop?,
+  onRemoveStop?, onDragStart?, onDragEnd?, onDiscard? })`.
+- `Panel.Swatch({ color?, imageUrl? })`; `Panel.ImageField({ url?, resizeMode?, onPick?,
+  onResizeModeChange?, onClear? })`.
+- `Panel.AlignmentGrid({ flexDirection?, alignItems?, justifyContent?, mixed?, onChange? })`.
+- `Panel.DimensionField({ axis?, mode?, value?, label?, mixed?, disabled?, computed?,
+  onChange?, onCommit?, onModeChange? })`.
+- `Panel.FillField({ label?, backgroundType?, isTypeMixed?, backgroundColor?, gradient?,
+  selectedStopIndex?, image?, open?, onTypeChange?, onColorChange?, onGradientChange?,
+  onStopColorChange?, onStopPositionChange?, onAddStop?, onAddStopAt?, onRemoveStop?,
+  onSelectStop?, onImageUrlChange?, onImageResizeModeChange?, onGestureStart?, onCommit?,
+  onDiscard?, onOpenChange? })`. Keep at most eight handlers on one node; normally use the
+  write-bearing set `onTypeChange`, `onColorChange`, `onGradientChange`,
+  `onImageUrlChange`, `onImageResizeModeChange`, `onGestureStart`, `onCommit`, and
+  `onDiscard`.
+- `Panel.VariableField({ variableId?, variableName?, variableType?, allowedKinds?, label?,
+  onBind?, onUnbind?, onCreate? })`.
+- `Panel.ActionEditorField({ value?, variables?, productVariables?, payloadFields?,
+  onChange? })`.
+- `Panel.ProductField({ productId?, placeholder?, disabled?, label?, onChange? })`.
+- `Panel.PropField({ name })` expands one manifest prop through the full host editor.
+- `Panel.DefaultProps({ exclude? })` expands all manifest props except the exclusions.
+
+Composite callbacks do not grant extra host authority. In particular, `VariableField` and
+`ActionEditorField` only emit their declared callbacks; use host-expanded prop rows for
+actual component prop binding, localization, reset, and product selection.
+
+Use only these icon tokens:
+`w`, `h`, `a`, `plus`, `minus`, `x`, `trash`, `pencil`, `search`, `settings`, `info`,
+`alert`, `image`, `imagePlus`, `pipette`, `percent`, `diamond`, `square`, `squareDashed`,
+`squareRoundCorner`, `squareRoundCornerTopLeft`, `squareRoundCornerBottomLeft`,
+`squareRoundCornerBottomRight`, `squareDashedTopSolid`, `squareDashedTopSolidLeft`,
+`squareDashedTopSolidRight`, `squareDashedTopSolidBottom`, `type`, `component`, `code`,
+`eye`, `paintbrush`, `chevronDown`, `chevronRight`, `chevronUp`, `arrowDown`,
+`arrowRight`, `arrowUpCircle`, `rotateCw`, `rotateCcw`, `flipHorizontal`, `undo`, `redo`,
+`save`, `fullscreen`, `scan`, `vault`, `panelLeftDashed`, `panelRightDashed`,
+`panelTopDashed`, `panelBottomDashed`, `panelLeftRightDashed`, `panelTopBottomDashed`,
+`betweenHorizontalStart`, `user`, `users`, `externalLink`, and `mousePointer`.
+
+Panel limits are 256 KiB per tree, 2,000 nodes, depth 32, 4,096 characters per string,
+256 options per select/toggle/menu, 64 gradient stops, eight event names per node, and
+32 KiB per emitted prop value. The host also validates values against the component
+manifest, rejects unknown/read-only/bound props, limits arrays to 200 items, rate-limits
+the intent stream, and coalesces live writes per prop per frame.
+
+Panel trees are coalesced to the latest revision once per animation frame. The sandbox has
+a 6-second init deadline, a 2.5-second heartbeat, allows two missed pongs, kills tree
+streams above 120/second, caps intents at 240/second, and permits two automatic restarts
+with 400 ms backoff. A terminal failure switches to the default prop panel with a retry
+control.
+
+### Panel gesture pattern
+
+Use committed writes for text/select/switch/button edits. For continuous controls, send
+live values during movement, a final committed value on release, and cancel on abort:
+
+```tsx
+<Panel.SliderField
+  value={ctx.props.radius.value}
+  mixed={ctx.props.radius.mixed}
+  min={0}
+  max={32}
+  onChange={(value) => ctx.props.radius.set(value, { gesture: "live" })}
+  onCommit={(value) => ctx.props.radius.set(value, { gesture: "commit" })}
+/>
+```
+
+The first live write opens a host draft; live writes are transient/coalesced, and the end
+commits one undoable edit. `cancel()` discards the in-flight draft. A selection change,
+session failure, or 10 seconds of inactivity also discards an unfinished gesture. Keep the
+control's display value derived from the latest `ctx` snapshot; the host protects an active
+control from stale sandbox echoes during a drag.
+
+## Runtime animation and gestures
+
+### Motion targets, variants, and transitions
+
+Every motion-capable primitive (`View`, `Text`, `Pressable`, `ScrollView`, and `Image`)
+accepts `initial`, `animate`, `variants`, `transition`, `whileInView`, `viewport`,
+`onAnimationStart`, and `onAnimationComplete`. `Pressable` also accepts
+`whilePress`/`whileFocus`; draggable primitives accept `whileDrag`.
+
+Motion targets support only `x`, `y`, `scale`, `scaleX`, `scaleY`, `rotate` (degrees),
+`opacity`, `backgroundColor`, and `transformOrigin` (`{ x, y }` fractions of the box).
+Put these keys directly in `style` for motion values or in a target. Do not use a CSS
+`transform` string.
+
+Use inline targets or named variants:
+
+```tsx
+<View
+  variants={{ hidden: { opacity: 0, y: 20 }, shown: { opacity: 1, y: 0 } }}
+  initial="hidden"
+  animate="shown"
+  transition={{
+    default: { type: "spring", stiffness: 220, damping: 24 },
+    opacity: { type: "tween", duration: 0.2, ease: "easeOut" },
+  }}
+/>
+```
+
+A variant label array merges labels left-to-right. Literal motion style is the base;
+`animate` overrides it at rest. Active interaction targets overlay in this order:
+in-view, press, focus, drag, so later states win conflicting keys. `initial={false}` mounts
+at rest. Define a numeric value in both start and target states if it must interpolate;
+non-numeric motion values such as colors and transform origins currently snap.
+
+Transforms compile in this fixed order: translate (`x`/`y`), rotate, `scale`, `scaleX`,
+then `scaleY`.
+
+Transitions use seconds. `type` is `tween` or `spring`; shared fields are `delay`,
+`duration`, `ease` (`linear`, `easeIn`, `easeOut`, `easeInOut`), `stiffness`, `damping`,
+`mass`, `velocity`, `restDelta`, and `restSpeed`. Defaults are a 0.3-second linear tween,
+or a spring with stiffness 170, damping 26, mass 1, rest delta/speed 0.01. A transition may
+contain per-key overrides plus `default`. `MotionConfig` supplies inherited transition and
+`reducedMotion: "user" | "always" | "never"`; reduced motion jumps to targets and still
+fires completion. `useMotionConfig()` reads the inherited policy/default transition, and
+`useReducedMotion()` resolves it to a boolean using the platform preference. An interrupted
+animation is canceled and does not fire its old completion callback.
+
+Static previews never run live animation. They serialize the deterministic rest state
+(`animate`, else `initial`, over literal motion style), omit live motion values, render
+Pressable children unpressed, and flatten scroll content. Design the rest state to be
+complete and readable.
+
+The `AnimationControls` type is reserved for imperative control, but there is currently no
+author-facing controls factory/binding. Use declarative `animate`/variants or motion values.
+
+### Motion values
+
+- `useMotionValue(initial)` creates a stable mutable value whose updates bypass React.
+- `motionValue(initial)` creates one outside React; `get`, `getPrevious`, `set`, and
+  `on("change" | "renderRequest", listener)` form its protocol.
+- `useMotionValueEvent(value, event, listener)` subscribes without React frame renders.
+- `useTransform(source, fn)` derives any mapped value. The numeric range overload maps
+  equal-length input/output arrays and clamps to the covered range.
+- `useSpring(source, transition)` follows a numeric source with an interruptible spring.
+- `useVelocity(source)` returns logical units per second.
+
+Pass a motion value through a supported motion style key:
+
+```tsx
+const { scrollYProgress } = useScroll();
+const opacity = useTransform(scrollYProgress, [0, 0.5, 1], [0.4, 1, 0.4]);
+return <View style={{ opacity }} />;
+```
+
+A live motion value drives a key only when the resolved animation/interaction target does
+not also define that key. Target values win; reduced-motion mode also suppresses live style
+updates. Static previews omit motion values entirely.
+
+### Scroll and in-view
+
+Create renderer-neutral refs with `useMotionRef()` and attach them to motion-capable primitives.
+`useScroll({ container?, target?, axis?, offset?, trackLayout? })` returns `scrollX`,
+`scrollY`, `scrollXProgress`, and `scrollYProgress` motion values. Without a container it
+tracks the root window. Without a target, progress is total scroll progress. With a target,
+the default offsets are `["start end", "end start"]`; anchors accept `start`, `center`,
+`end`, percentages, or numeric strings. Use `trackLayout` when changing layout affects the
+measurement. `axis` defaults to `y`; with a target, only the selected axis's progress value
+is updated.
+
+`useInView(ref, { root?, once?, amount?, margin? })` returns a boolean. `amount` is a
+number, `some` (1% threshold), or `all`; `once` stays true after first entry. `whileInView`
+uses the same viewport contract. Omitted `amount` currently uses a zero threshold, which
+counts zero overlap as in view; pass `"some"` or a positive number for actual intersection.
+The current DOM adapter accepts `margin` in the public shape but does not apply it; do not
+rely on margin-sensitive behavior.
+
+`ScrollView` refs additionally expose `getScrollMetrics()`, `scrollTo({ x?, y? })`, and
+`subscribeScroll`. Measurements use the untransformed layout box.
+
+### Drag gestures
+
+Drag is supported only by `View`, `Image`, and `Pressable`.
+
+- `drag={true}` allows both axes. `"x"` or `"y"` limits which dominant direction may
+  claim the gesture; in the current DOM adapter, also enable `dragDirectionLock` to keep
+  post-claim displacement strictly on that axis.
+- `dragConstraints` accepts `{ left?, right?, top?, bottom? }` relative to the starting
+  motion position, or a `MotionRef` whose measured box bounds the draggable node.
+- `dragElastic` is `0.35` by default, `false` for no overshoot, or a numeric factor.
+- `dragMomentum` defaults true. Release projects velocity by 0.2 seconds, clamps it to
+  constraints, and animates to the result with `{ type: "spring", ...dragTransition }`;
+  supplied transition fields, including `type`, override the default. Set false to stop at
+  the release position.
+- `dragDirectionLock` locks to the dominant axis after movement begins.
+- `gesturePriority="auto"` lets a matching-axis ancestor ScrollView win; a cross-axis drag
+  wins. Use `"drag"` only when the draggable must steal a matching-axis scroll gesture.
+- `dragListener={false}` disables direct pointer start. It also enables registration of a
+  supplied `dragControls={useDragControls()}`. `controls.start(event, options)` requires a
+  `MotionGestureEvent`; options are `{ snapToCursor?, distanceThreshold? }`. Authored
+  primitives expose no raw pointer-down event and the current DOM adapter ignores both
+  options, so prefer the built-in listener.
+- `onDragStart`, `onDrag`, and `onDragEnd` receive a platform-neutral event and `DragInfo`:
+  current `point`, last-event `delta`, start-relative `offset`, and logical-units-per-second
+  `velocity`.
+
+A drag claims the gesture after roughly three logical pixels. On a Pressable, claiming a
+drag clears the pressed state and suppresses the following click. `whilePress` begins on
+pointer down and clears on leave/up/cancel; `whileFocus` follows keyboard focus. Enter and
+Space activate a focused Pressable. There is no `whileHover`, keyframe/timeline API, layout
+animation, arbitrary transform string, or draggable Text/ScrollView in the current surface.
+
+## Final verification checklist
+
+- Keep the component as small as the code-only behavior permits.
+- Use a valid, unique path and default-export the `defineComponent` result.
+- Declare every editable input and emitted event; avoid reserved `id`.
+- Provide preview fixtures for product/runtime branches and use no more than one Slot.
+- Use only supported primitives, style keys, motion keys, imports, and panel nodes.
+- Preserve mixed/bound semantics and use gesture-aware panel writes correctly.
+- Respect reduced motion and make the static rest state complete.
+- Re-read compiler diagnostics instead of guessing, inspect the rendered paywall PNG, and
+  finish or revert the edit session explicitly.
diff --git a/plugins/voidhash/skills/code-component-authoring/agents/openai.yaml b/plugins/voidhash/skills/code-component-authoring/agents/openai.yaml
new file mode 100644
index 000000000..269b84338
--- /dev/null
+++ b/plugins/voidhash/skills/code-component-authoring/agents/openai.yaml
@@ -0,0 +1,4 @@
+interface:
+  display_name: "Code Component Authoring"
+  short_description: "Build Voidhash components, panels, and motion"
+  default_prompt: "Use $code-component-authoring to build a custom Voidhash code component with an editor panel and motion."
diff --git a/plugins/voidhash/skills/design-paywall/SKILL.md b/plugins/voidhash/skills/design-paywall/SKILL.md
index dd53b58f5..b49b25e95 100644
--- a/plugins/voidhash/skills/design-paywall/SKILL.md
+++ b/plugins/voidhash/skills/design-paywall/SKILL.md
@@ -303,14 +303,15 @@ Layout is flexbox, exactly like CSS / React Native:
 
 ## Tool usage
 
-- **Open one change set.** Discover the target with `list_paywalls`, then call
-  `begin_paywall_edit({ slug })`. Pass the returned `changeSetId` and the same
-  `slug` to every mutation and preview call. Finish it after visual QA, or
-  revert it; never abandon an active change set.
+- **Open your edit session.** Discover the target with `list_paywalls`, then call
+  `begin_paywall_edit({ paywallId })`. Pass only the returned `editSessionId` to every
+  scoped call. Every participant gets an independent Mimic connection, so multiple users
+  and agents may edit the same paywall concurrently. Finish yours after visual QA, or
+  revert it; never abandon an active session.
 - **`get_paywall` first.** Learn the current tree and ids before editing. Pass
   `nodeId` to root at a subtree and `depth` to cap the tree (deeper nodes return
   as `{ id, type, name?, childCount }` stubs you expand with a follow-up
-  `get_paywall({ slug, nodeId })`). Cheaper than pulling the whole document every
+  `get_paywall({ editSessionId, nodeId })`). Cheaper than pulling the whole document every
   turn.
 - **`edit_paywall` applies an ATOMIC batch.** Every op lands or none does. On
   success you get the minted ids for `insert`/`replaceChildren` ops (keyed by op
@@ -700,29 +701,31 @@ where `period` is `"month" | "year" | "week" | "lifetime"`.
 
 ## Tool vocabulary
 
-- `list_paywalls()` — discover paywall slugs in the project.
-- `begin_paywall_edit({ slug })` — capture the revert baseline and return a
-  `changeSetId`.
-- `get_paywall({ slug, nodeId?, depth? })` — read cleaned document JSON (subtree
+- `list_paywalls()` — discover stable paywall ids (plus display slugs) in the project.
+- `begin_paywall_edit({ paywallId })` — capture the revert baseline and return a
+  `editSessionId`.
+- `get_paywall({ editSessionId, nodeId?, depth? })` — read cleaned document JSON (subtree
   + depth for economy).
-- `get_components({ slug })` — list every placeable catalog, local, and builtin
+- `get_components({ editSessionId })` — list every placeable catalog, local, and builtin
   component with its authoring contract.
-- `read_component({ slug, path })` — read a local code component's TSX source.
-- `edit_paywall({ slug, changeSetId, edits })` — apply an atomic batch of document
+- `read_component({ editSessionId, path })` — read a local code component's TSX source.
+- `edit_paywall({ editSessionId, edits })` — apply an atomic batch of document
   ops (returns minted ids or per-op errors).
-- `duplicate_subtree({ slug, changeSetId, nodeId, parentId, index? })` — clone a
+- `duplicate_subtree({ editSessionId, nodeId, parentId, index? })` — clone a
   visual subtree with fresh ids.
-- `write_component({ slug, changeSetId, path, source })` — create or replace a
+- `write_component({ editSessionId, path, source })` — create or replace a
   compiled code component.
-- `rename_component({ slug, changeSetId, fromPath, toPath })` — move a component
+- `rename_component({ editSessionId, fromPath, toPath })` — move a component
   and re-point its instances.
-- `delete_component({ slug, changeSetId, path })` — delete a component; existing
+- `delete_component({ editSessionId, path })` — delete a component; existing
   instances degrade to placeholders.
-- `get_paywall_preview({ slug, changeSetId })` — render the version-bound PNG
+- `get_paywall_preview({ editSessionId })` — render the version-bound PNG
   used for visual QA.
-- `finish_paywall_edit({ slug, changeSetId, reviewedDocumentSignature, verdict,
+- `finish_paywall_edit({ editSessionId, reviewedDocumentSignature, verdict,
   unresolvedIssues: [] })` — accept a visually verified edit.
-- `revert_paywall_edit({ changeSetId })` — restore the captured baseline.
+- `revert_paywall_edit({ editSessionId })` — restore the captured baseline when that can
+  be done without overwriting interleaved participant work. A mutation-free session closes
+  without changing the document.
 
 Read (`get_paywall`/`get_components`) before you write, use the minted ids the
 edits return, and trust the field/value errors the validator gives you.
diff --git a/scripts/sync-plugins.ts b/scripts/sync-plugins.ts
index f420ba19f..048967d07 100644
--- a/scripts/sync-plugins.ts
+++ b/scripts/sync-plugins.ts
@@ -5,34 +5,42 @@ import { fileURLToPath } from "node:url";
 import { findSkill } from "../apps/backend/src/ai/skills/registry.ts";
 
 const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const targetPaths = [
-  resolve(repositoryRoot, "integrations/claude-code/voidhash/skills/design-paywall/SKILL.md"),
-  resolve(repositoryRoot, "plugins/voidhash/skills/design-paywall/SKILL.md"),
+const skills = [
+  { sourceName: "paywall-authoring", pluginName: "design-paywall" },
+  { sourceName: "code-component-authoring", pluginName: "code-component-authoring" },
 ] as const;
 
-const definition = findSkill("paywall-authoring");
-if (definition === undefined) {
-  throw new Error("The paywall-authoring skill is not registered");
-}
+const check = process.argv.includes("--check");
+const stale: string[] = [];
 
-const generated = `---
-name: design-paywall
+for (const skill of skills) {
+  const definition = findSkill(skill.sourceName);
+  if (definition === undefined) {
+    throw new Error(`The ${skill.sourceName} skill is not registered`);
+  }
+  const generated = `---
+name: ${skill.pluginName}
 description: ${definition.description}
 ---
 
 ${definition.body().trimEnd()}
 `;
-
-const check = process.argv.includes("--check");
-const stale: string[] = [];
-
-for (const targetPath of targetPaths) {
-  const current = await readFile(targetPath, "utf8").catch(() => undefined);
-  if (current === generated) continue;
-  if (check) {
-    stale.push(targetPath);
-  } else {
-    await writeFile(targetPath, generated);
+  const targetPaths = [
+    resolve(
+      repositoryRoot,
+      `integrations/claude-code/voidhash/skills/${skill.pluginName}/SKILL.md`,
+    ),
+    resolve(repositoryRoot, `plugins/voidhash/skills/${skill.pluginName}/SKILL.md`),
+  ];
+
+  for (const targetPath of targetPaths) {
+    const current = await readFile(targetPath, "utf8").catch(() => undefined);
+    if (current === generated) continue;
+    if (check) {
+      stale.push(targetPath);
+    } else {
+      await writeFile(targetPath, generated);
+    }
   }
 }
 
diff --git a/selfhost/entry/src/backend/MimicHost.ts b/selfhost/entry/src/backend/MimicHost.ts
index 33bd9fc5f..ff23db6bc 100644
--- a/selfhost/entry/src/backend/MimicHost.ts
+++ b/selfhost/entry/src/backend/MimicHost.ts
@@ -10,10 +10,12 @@ import {
   MIMIC_DATABASE_NAME,
   MIMIC_PAYWALLS_COLLECTION_NAME,
   PaywallDesignerDocument,
+  PresenceSchema,
 } from "@voidhash/mimic-schema";
 import { Effect, Layer, Semaphore } from "effect";
 
 const editTokenTtlSeconds = 300;
+const agentConnectionLeaseMs = 5 * 60 * 1000;
 
 interface ProvisioningIds {
   readonly collectionId: string;
@@ -121,6 +123,15 @@ const makeMimicHost = (host: HostService, publicBaseUrl: string): MimicHostShape
       Effect.mapError((cause) => hostError(`Failed to read paywall document ${paywallId}`, cause)),
     );
 
+  const toPaywallDocument = (document: { readonly value: unknown; readonly version: number }) => {
+    const roots = PaywallDesignerDocument.decode(document.value as never);
+    return {
+      root: roots?.[0],
+      tree: document.value,
+      version: document.version,
+    };
+  };
+
   return {
     createPaywallEditToken: ({ paywallId }) =>
       provision.pipe(
@@ -138,17 +149,7 @@ const makeMimicHost = (host: HostService, publicBaseUrl: string): MimicHostShape
         Effect.mapError((cause) => hostError(`Failed to mint a token for ${paywallId}`, cause)),
       ),
     ensurePaywallDocument,
-    getPaywallDocument: (paywallId) =>
-      getDocument(paywallId).pipe(
-        Effect.map((document) => {
-          const roots = PaywallDesignerDocument.decode(document.value);
-          return {
-            root: roots?.[0],
-            tree: document.value,
-            version: document.version,
-          };
-        }),
-      ),
+    getPaywallDocument: (paywallId) => getDocument(paywallId).pipe(Effect.map(toPaywallDocument)),
     getPaywallSnapshot: (paywallId) =>
       getDocument(paywallId).pipe(
         Effect.map((document) => PaywallDesignerDocument.decode(document.value)?.[0]),
@@ -177,6 +178,90 @@ const makeMimicHost = (host: HostService, publicBaseUrl: string): MimicHostShape
             : hostError(`Failed to update paywall document ${paywallId}`, cause),
         ),
       ),
+    openPaywallConnection: ({ paywallId, connectionId, presence }) =>
+      provision.pipe(
+        Effect.flatMap(({ collectionId }) =>
+          host.attachConnection(
+            collectionId,
+            paywallId,
+            connectionId,
+            "write",
+            undefined,
+            PresenceSchema.encode({
+              participant: {
+                editSessionId: presence.editSessionId,
+                kind: "agent",
+                source: presence.source,
+              },
+              selectedNodeIds: [],
+              user: { color: "#7c3aed", name: presence.name },
+            }),
+            agentConnectionLeaseMs,
+          ),
+        ),
+        Effect.map(toPaywallDocument),
+        Effect.mapError((cause) =>
+          hostError(`Failed to open a connection for paywall ${paywallId}`, cause),
+        ),
+      ),
+    getConnectedPaywallDocument: ({ paywallId, connectionId }) =>
+      provision.pipe(
+        Effect.flatMap(({ collectionId }) =>
+          host.getConnectionDocument(collectionId, paywallId, connectionId, agentConnectionLeaseMs),
+        ),
+        Effect.map(toPaywallDocument),
+        Effect.mapError((cause) =>
+          hostError(`Failed to read connected paywall ${paywallId}`, cause),
+        ),
+      ),
+    heartbeatPaywallConnection: ({ paywallId, connectionId }) =>
+      provision.pipe(
+        Effect.flatMap(({ collectionId }) =>
+          host.heartbeatConnection(collectionId, paywallId, connectionId, agentConnectionLeaseMs),
+        ),
+        Effect.mapError((cause) =>
+          hostError(`Failed to renew the connection for paywall ${paywallId}`, cause),
+        ),
+      ),
+    closePaywallConnection: ({ paywallId, connectionId }) =>
+      provision.pipe(
+        Effect.flatMap(({ collectionId }) =>
+          host.detachConnection(collectionId, paywallId, connectionId),
+        ),
+        Effect.mapError((cause) =>
+          hostError(`Failed to close the connection for paywall ${paywallId}`, cause),
+        ),
+      ),
+    submitConnectedPaywallTransaction: (paywallId, connectionId, input) =>
+      provision.pipe(
+        Effect.flatMap(({ collectionId }) =>
+          Effect.try({
+            try: () =>
+              decodeTransactionEnvelope({
+                baseVersion: input.baseVersion,
+                commands: input.commands,
+                id: crypto.randomUUID(),
+              }),
+            catch: (cause) => hostError("Invalid mimic transaction", cause),
+          }).pipe(
+            Effect.flatMap((transaction) =>
+              host.submitConnectionTransaction(
+                collectionId,
+                paywallId,
+                connectionId,
+                transaction,
+                agentConnectionLeaseMs,
+              ),
+            ),
+          ),
+        ),
+        Effect.map((result) => ({ accepted: result.accepted, version: result.version })),
+        Effect.mapError((cause) =>
+          cause instanceof MimicHostError
+            ? cause
+            : hostError(`Failed to update connected paywall ${paywallId}`, cause),
+        ),
+      ),
   };
 };
 
diff --git a/selfhost/entry/src/mimic/MimicNodeWebSocket.ts b/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
index 80e4a6b37..5b7636345 100644
--- a/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
+++ b/selfhost/entry/src/mimic/MimicNodeWebSocket.ts
@@ -1,7 +1,7 @@
 import type { IncomingMessage, Server } from "node:http";
 import type { Duplex } from "node:stream";
 
-import type { HostService, PresenceEntry } from "@voidhash/mimic-db/app/hostService";
+import type { HostService } from "@voidhash/mimic-db/app/hostService";
 import {
   AUTH_DEADLINE_MS,
   handleDocumentSocketClose,
@@ -37,7 +37,6 @@ interface NodeDocumentSocket {
 
 interface NodeDocumentRuntime {
   readonly lock: Semaphore.Semaphore;
-  readonly presence: Map<string, PresenceEntry>;
   readonly connections: Set<NodeDocumentSocket>;
   readonly context: DocumentSessionContext<NodeDocumentSocket>;
 }
@@ -182,7 +181,6 @@ export const installMimicNodeWebSocketServer = (
     const existing = documents.get(key);
     if (existing) return existing;
 
-    const presence = new Map<string, PresenceEntry>();
     const registry = makeSessionRegistry<NodeDocumentSocket>({
       authDeadlineMs: AUTH_DEADLINE_MS,
       isAuthenticated: (socket) => socket.attachment?.authenticated === true,
@@ -199,7 +197,27 @@ export const installMimicNodeWebSocketServer = (
       );
     const context: DocumentSessionContext<NodeDocumentSocket> = {
       registry,
-      presence,
+      presence: {
+        snapshot: () =>
+          withoutRequirements(host.getPresenceSnapshot(collectionId, documentId)).pipe(
+            Effect.map(({ presences }) => presences),
+          ),
+        set: (connectionId, entry) =>
+          withoutRequirements(host.setPresence(collectionId, documentId, connectionId, entry)),
+        remove: (connectionId) =>
+          Effect.gen(function* () {
+            const { presences } = yield* withoutRequirements(
+              host.getPresenceSnapshot(collectionId, documentId),
+            );
+            const existed = connectionId in presences;
+            yield* withoutRequirements(host.removePresence(collectionId, documentId, connectionId));
+            return existed;
+          }),
+        prune: () =>
+          withoutRequirements(host.getPresenceSnapshot(collectionId, documentId)).pipe(
+            Effect.asVoid,
+          ),
+      },
       getAttachment: (socket) => socket.attachment,
       setAttachment: (socket, attachment) => void (socket.attachment = attachment),
       send: (socket, message) =>
@@ -238,7 +256,6 @@ export const installMimicNodeWebSocketServer = (
     };
     const runtime = {
       lock: Semaphore.makeUnsafe(1),
-      presence,
       connections: new Set<NodeDocumentSocket>(),
       context,
     };
@@ -303,13 +320,6 @@ export const installMimicNodeWebSocketServer = (
                   yield* handleDocumentSocketClose(runtime.context, nodeSocket);
                   const attachment = nodeSocket.attachment;
                   if (attachment) {
-                    yield* withoutRequirements(
-                      host.detachConnection(
-                        attachment.collectionId,
-                        attachment.documentId,
-                        attachment.connectionId,
-                      ),
-                    );
                     yield* entities.run(entityAddress, (entity) =>
                       entity.sessions.remove(attachment.connectionId),
                     );
@@ -337,23 +347,31 @@ export const installMimicNodeWebSocketServer = (
               `Ignoring malformed Mimic document entity alarm ${address.id}`,
             );
           }
-          return entities.run(address, (entity) =>
-            Effect.gen(function* () {
-              const scheduledTime = yield* entity.alarm.get;
-              if (scheduledTime === undefined || scheduledTime > now) return;
-              yield* entity.alarm.delete;
-              yield* makeNodeIdleNotifier(
-                entity,
-                document.collectionId,
-                document.documentId,
-                () =>
-                  documents
-                    .get(documentKey(document.collectionId, document.documentId))
-                    ?.context.registry.authenticated().length ?? 0,
-                idleNotifications,
-              ).onAlarm();
-            }),
-          );
+          return Effect.gen(function* () {
+            const due = yield* entities.run(address, (entity) =>
+              Effect.gen(function* () {
+                const scheduledTime = yield* entity.alarm.get;
+                if (scheduledTime === undefined || scheduledTime > now) return false;
+                yield* entity.alarm.delete;
+                return true;
+              }),
+            );
+            if (!due) return;
+            const { presences } = yield* withoutRequirements(
+              host.getPresenceSnapshot(document.collectionId, document.documentId),
+            );
+            yield* entities.run(address, (entity) =>
+              Effect.gen(function* () {
+                yield* makeNodeIdleNotifier(
+                  entity,
+                  document.collectionId,
+                  document.documentId,
+                  () => Object.keys(presences).length,
+                  idleNotifications,
+                ).onAlarm();
+              }),
+            );
+          });
         },
         ...idleNotifications.additionalAlarmHandlers,
       }).pipe(
diff --git a/selfhost/entry/src/mimic/config.ts b/selfhost/entry/src/mimic/config.ts
index 760e2c052..7b06bb565 100644
--- a/selfhost/entry/src/mimic/config.ts
+++ b/selfhost/entry/src/mimic/config.ts
@@ -1,4 +1,4 @@
-import type { PgDocumentConfig } from "@voidhash/mimic-db/core/pg-store";
+import { makePgDocumentConfig } from "@voidhash/mimic-db/core/pg-store";
 import type { PgDurableEntityConfig } from "@voidhash/platform-node/DurableEntity";
 import { Redacted } from "effect";
 
@@ -29,12 +29,12 @@ export const getMimicNodeConfig = (): MimicNodeConfig => {
     username,
     password,
   };
-  const documents: PgDocumentConfig = {
+  const documents = makePgDocumentConfig({
     host,
     port,
     database,
     username,
-    password,
-  };
+    password: passwordValue,
+  });
   return { database: databaseConfig, documents };
 };
diff --git a/selfhost/entry/tests/PaywallRelease.integration.test.ts b/selfhost/entry/tests/PaywallRelease.integration.test.ts
index ae790a539..b023608b3 100644
--- a/selfhost/entry/tests/PaywallRelease.integration.test.ts
+++ b/selfhost/entry/tests/PaywallRelease.integration.test.ts
@@ -61,10 +61,15 @@ describePg("self-host paywall releases", () => {
       database,
       AuditLogPort.noop,
       Layer.succeed(MimicHost, {
+        closePaywallConnection: () => Effect.die("unused"),
         createPaywallEditToken: () => Effect.die("unused"),
         ensurePaywallDocument: () => Effect.void,
+        getConnectedPaywallDocument: () => Effect.die("unused"),
         getPaywallDocument: () => Effect.die("unused"),
         getPaywallSnapshot: () => Effect.succeed({ id: "root", type: "root" }),
+        heartbeatPaywallConnection: () => Effect.die("unused"),
+        openPaywallConnection: () => Effect.die("unused"),
+        submitConnectedPaywallTransaction: () => Effect.die("unused"),
         submitPaywallTransaction: () => Effect.die("unused"),
       }),
       Layer.succeed(PaywallArtifactStore, {
diff --git a/selfhost/entry/tests/ThumbnailQueue.integration.test.ts b/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
index 17db9221e..199ba5e41 100644
--- a/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
+++ b/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
@@ -29,6 +29,7 @@ describePg("self-host thumbnail queue", () => {
                 Effect.sync(() => {
                   handled.push(input);
                 }),
+              renderCurrent: () => Effect.void,
             });
             yield* Effect.forkScoped(
               runSelfhostPaywallThumbnailConsumer.pipe(

From b12e7c9362e309ca354adcf71322c95be9a47610 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 16 Jul 2026 19:06:55 +0200
Subject: [PATCH 097/129] feat: panel resizing

---
 .../paywalls/designer/ai-panel/ai-panel.tsx   | 60 ++++++--------
 .../code-mode/code-mode-workspace.tsx         | 27 ++++--
 .../paywalls/designer/panels/constants.ts     | 29 +++++++
 .../paywalls/designer/panels/left-panel.tsx   | 41 +++++++++-
 .../designer/panels/panel-resize-handle.tsx   | 82 +++++++++++++++++++
 .../designer/panels/panel-width-storage.ts    | 64 +++++++++++++++
 .../paywalls/designer/panels/right-panel.tsx  | 37 ++++++++-
 .../state/actions/ai-panel-actions.ts         |  8 +-
 .../designer/state/actions/panel-actions.ts   | 29 ++++++-
 .../designer/state/designer-store-state.tsx   |  6 ++
 .../designer/state/designer-store.tsx         | 16 +++-
 .../translation-mode-workspace.tsx            |  9 +-
 12 files changed, 346 insertions(+), 62 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/panel-resize-handle.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/designer/panels/panel-width-storage.ts

diff --git a/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
index 25ba5566a..97590ffe7 100644
--- a/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/ai-panel/ai-panel.tsx
@@ -2,7 +2,7 @@
 
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
 import { cn } from "@voidhash/ui";
-import { useCallback, useRef, useState } from "react";
+import { useCallback, useState } from "react";
 import { useStore } from "zustand/react";
 
 import { ChatHistoryMenu, ChatShell, newAgentSessionId } from "@/features/studio/ai";
@@ -10,7 +10,10 @@ import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeature
 
 import { Panel } from "../components/ui/panel";
 import { PANEL_DIMENSIONS } from "../panels/constants";
+import { PanelResizeHandle } from "../panels/panel-resize-handle";
+import { persistPanelWidths } from "../panels/panel-width-storage";
 import { setAiPanelWidth, setAiWorking } from "../state/actions/ai-panel-actions";
+import { setPanelResizeActive } from "../state/actions/panel-actions";
 import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
 import { useDesignerAgent } from "./use-designer-agent";
 
@@ -44,34 +47,23 @@ export function AiPanel() {
     chatId: newAgentSessionId(),
   }));
 
-  // Drag-to-resize: capture the pointer on the right-edge handle and translate
-  // horizontal movement into width updates (clamped by the setter). Held in a
-  // ref so the move handler reads the drag origin without re-subscribing.
-  const dragOrigin = useRef<{ startX: number; startWidth: number } | null>(null);
+  const handleResizeStart = useCallback(() => {
+    dispatch(setPanelResizeActive)({ active: true });
+  }, [dispatch]);
 
-  const handleResizeStart = useCallback(
-    (event: React.PointerEvent<HTMLDivElement>) => {
-      event.preventDefault();
-      dragOrigin.current = { startX: event.clientX, startWidth: store.getState().ai.width };
-      event.currentTarget.setPointerCapture(event.pointerId);
-    },
-    [store],
-  );
-
-  const handleResizeMove = useCallback(
-    (event: React.PointerEvent<HTMLDivElement>) => {
-      const origin = dragOrigin.current;
-      if (!origin) return;
-      dispatch(setAiPanelWidth)({ width: origin.startWidth + (event.clientX - origin.startX) });
+  const handleResizeChange = useCallback(
+    (nextWidth: number) => {
+      dispatch(setAiPanelWidth)({ width: nextWidth });
     },
     [dispatch],
   );
 
-  const handleResizeEnd = useCallback((event: React.PointerEvent<HTMLDivElement>) => {
-    if (!dragOrigin.current) return;
-    dragOrigin.current = null;
-    event.currentTarget.releasePointerCapture(event.pointerId);
-  }, []);
+  const handleResizeEnd = useCallback(() => {
+    dispatch(setPanelResizeActive)({ active: false });
+    persistPanelWidths(store.getState());
+  }, [dispatch, store]);
+
+  const getWidth = useCallback(() => store.getState().ai.width, [store]);
 
   const handleBusyChange = useCallback(
     (isWorking: boolean) => {
@@ -98,18 +90,14 @@ export function AiPanel() {
         width,
       }}
     >
-      <div
-        role="separator"
-        aria-orientation="vertical"
-        aria-label="Resize AI panel"
-        onPointerDown={handleResizeStart}
-        onPointerMove={handleResizeMove}
-        onPointerUp={handleResizeEnd}
-        onPointerCancel={handleResizeEnd}
-        className="group absolute inset-y-0 -right-1 z-10 w-2 cursor-col-resize touch-none"
-      >
-        <div className="mx-auto h-full w-px bg-transparent transition-colors group-hover:bg-primary" />
-      </div>
+      <PanelResizeHandle
+        edge="right"
+        label="Resize AI panel"
+        getWidth={getWidth}
+        onWidthChange={handleResizeChange}
+        onDragStart={handleResizeStart}
+        onDragEnd={handleResizeEnd}
+      />
       <Panel className="overflow-hidden">
         <div className="flex items-center justify-between px-3 py-2">
           <span className="font-medium text-sm">Voidhash AI</span>
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
index 2e92ec94c..128261121 100644
--- a/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/code-mode-workspace.tsx
@@ -2,6 +2,7 @@
 
 import { docRelativeComponentPath } from "@voidhash/paywall-workspace";
 import {
+  cn,
   ResizableHandle,
   ResizablePanel,
   ResizablePanelGroup,
@@ -66,6 +67,9 @@ function definitionForTabKey(
 export function CodeModeWorkspace() {
   const store = usePaywallDesignerStore();
   const aiOffset = useAiPanelOffset();
+  const leftPanelWidth = useStore(store, (state) => state.viewport.panels.left.width);
+  const resizeActive = useStore(store, (state) => state.viewport.panelResizeActive);
+  const leftOffset = aiOffset + leftPanelWidth;
 
   const openTabs = useStore(store, (state) => state.codeComponents.openTabs);
   const activeTabPath = useStore(store, (state) => state.codeComponents.activeTabPath);
@@ -98,7 +102,7 @@ export function CodeModeWorkspace() {
 
   if (buffers.length === 0) {
     return (
-      <Region aiOffset={aiOffset}>
+      <Region left={leftOffset} resizeActive={resizeActive}>
         <CenteredMessage>Select or create a code component to start editing.</CenteredMessage>
       </Region>
     );
@@ -110,7 +114,7 @@ export function CodeModeWorkspace() {
   const activeDefinitionId = buffers.find((buffer) => buffer.key === activeKey)?.definitionId;
 
   return (
-    <Region aiOffset={aiOffset}>
+    <Region left={leftOffset} resizeActive={resizeActive}>
       <ResizablePanelGroup direction="horizontal">
         <ResizablePanel defaultSize={55} minSize={25}>
           <div className="flex h-full flex-col">
@@ -136,12 +140,25 @@ export function CodeModeWorkspace() {
 }
 
 /** Fixed positioning shell for the code-mode region (right of left panel, below top panel). */
-function Region({ aiOffset, children }: { aiOffset: number; children: React.ReactNode }) {
+function Region({
+  left,
+  resizeActive,
+  children,
+}: {
+  left: number;
+  resizeActive: boolean;
+  children: React.ReactNode;
+}) {
   return (
     <div
-      className="absolute inset-0 bg-background transition-[left] duration-300 ease-in-out"
+      className={cn(
+        "absolute inset-0 bg-background",
+        // Suspended while a panel resize handle is dragged so the region
+        // tracks the live panel widths instead of easing behind them.
+        !resizeActive && "transition-[left] duration-300 ease-in-out",
+      )}
       style={{
-        left: aiOffset + PANEL_DIMENSIONS.LEFT_WIDTH,
+        left,
         top: PANEL_DIMENSIONS.TOP_HEIGHT,
       }}
     >
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/constants.ts b/apps/www/src/features/studio/paywalls/designer/panels/constants.ts
index bfbfc5d0e..a48270f76 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/constants.ts
+++ b/apps/www/src/features/studio/paywalls/designer/panels/constants.ts
@@ -1,6 +1,16 @@
 export const PANEL_DIMENSIONS = {
+  /** Default width of the left (layers) panel (user-resizable at runtime). */
   LEFT_WIDTH: 240,
+  /** Lower bound for the resizable left panel width. */
+  LEFT_MIN_WIDTH: 200,
+  /** Upper bound for the resizable left panel width. */
+  LEFT_MAX_WIDTH: 400,
+  /** Default width of the right (properties) panel (user-resizable at runtime). */
   RIGHT_WIDTH: 280,
+  /** Lower bound for the resizable right panel width. */
+  RIGHT_MIN_WIDTH: 240,
+  /** Upper bound for the resizable right panel width. */
+  RIGHT_MAX_WIDTH: 480,
   TOP_HEIGHT: 54,
   /** Default width of the Voidhash AI chat panel (user-resizable at runtime). */
   AI_CHAT_WIDTH: 320,
@@ -9,3 +19,22 @@ export const PANEL_DIMENSIONS = {
   /** Upper bound for the resizable AI chat panel width. */
   AI_CHAT_MAX_WIDTH: 560,
 } as const;
+
+function clamp(value: number, min: number, max: number): number {
+  return Math.max(min, Math.min(max, value));
+}
+
+/** Clamp a left (layers) panel width to its resize bounds. */
+export function clampLeftPanelWidth(width: number): number {
+  return clamp(width, PANEL_DIMENSIONS.LEFT_MIN_WIDTH, PANEL_DIMENSIONS.LEFT_MAX_WIDTH);
+}
+
+/** Clamp a right (properties) panel width to its resize bounds. */
+export function clampRightPanelWidth(width: number): number {
+  return clamp(width, PANEL_DIMENSIONS.RIGHT_MIN_WIDTH, PANEL_DIMENSIONS.RIGHT_MAX_WIDTH);
+}
+
+/** Clamp an AI chat panel width to its resize bounds. */
+export function clampAiPanelWidth(width: number): number {
+  return clamp(width, PANEL_DIMENSIONS.AI_CHAT_MIN_WIDTH, PANEL_DIMENSIONS.AI_CHAT_MAX_WIDTH);
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
index 85edbbe7c..cab71d587 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/left-panel.tsx
@@ -1,37 +1,72 @@
 "use client";
 
 import { cn, ScrollArea } from "@voidhash/ui";
+import { useCallback } from "react";
 import { useStore } from "zustand/react";
 
 import { Panel } from "@/features/studio/paywalls/designer/components/ui/panel";
 
 import { useAiPanelOffset } from "../ai-panel/use-ai-panel-offset";
-import { usePaywallDesignerStore } from "../state/designer-store";
+import { setLeftPanelWidth, setPanelResizeActive } from "../state/actions/panel-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
 import { PANEL_DIMENSIONS } from "./constants";
 import { CodeFileTree } from "./left-panel/code-file-tree";
 import { LayersSection } from "./left-panel/layers-section";
+import { PanelResizeHandle } from "./panel-resize-handle";
+import { persistPanelWidths } from "./panel-width-storage";
 
 export function LeftPanel() {
   const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
   const mode = useStore(store, (state) => state.mode);
+  const width = useStore(store, (state) => state.viewport.panels.left.width);
+  const resizeActive = useStore(store, (state) => state.viewport.panelResizeActive);
   const visibleAiOffset = useAiPanelOffset();
   const isPreviewMode = mode === "preview";
   const isCodeMode = mode === "code";
   const aiOffset = isPreviewMode ? 0 : visibleAiOffset;
 
+  const handleResizeStart = useCallback(() => {
+    dispatch(setPanelResizeActive)({ active: true });
+  }, [dispatch]);
+
+  const handleResizeChange = useCallback(
+    (nextWidth: number) => {
+      dispatch(setLeftPanelWidth)({ width: nextWidth });
+    },
+    [dispatch],
+  );
+
+  const handleResizeEnd = useCallback(() => {
+    dispatch(setPanelResizeActive)({ active: false });
+    persistPanelWidths(store.getState());
+  }, [dispatch, store]);
+
+  const getWidth = useCallback(() => store.getState().viewport.panels.left.width, [store]);
+
   return (
     <div
       className={cn(
         "fixed bottom-0 z-40 flex flex-col border-border border-r bg-panel",
-        "transition-[transform,left] duration-300 ease-in-out",
+        // Suspended while a resize handle is dragged so `left` tracks the AI
+        // panel's live width instead of easing behind it.
+        !resizeActive && "transition-[transform,left] duration-300 ease-in-out",
         isPreviewMode && "-translate-x-full",
       )}
       style={{
         top: PANEL_DIMENSIONS.TOP_HEIGHT,
         left: aiOffset,
-        width: PANEL_DIMENSIONS.LEFT_WIDTH,
+        width,
       }}
     >
+      <PanelResizeHandle
+        edge="right"
+        label="Resize layers panel"
+        getWidth={getWidth}
+        onWidthChange={handleResizeChange}
+        onDragStart={handleResizeStart}
+        onDragEnd={handleResizeEnd}
+      />
       <Panel className="relative overflow-hidden">
         <div className="absolute inset-0">
           {/* Code mode swaps the layers/components panels for a virtual file tree. */}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/panel-resize-handle.tsx b/apps/www/src/features/studio/paywalls/designer/panels/panel-resize-handle.tsx
new file mode 100644
index 000000000..eb61401b3
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/panel-resize-handle.tsx
@@ -0,0 +1,82 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { useCallback, useRef } from "react";
+
+interface PanelResizeHandleProps {
+  /** Which edge of the panel the handle overlays; dragging away from the panel widens it. */
+  edge: "left" | "right";
+  label: string;
+  /** Reads the panel's current width when a drag starts. */
+  getWidth: () => number;
+  /** Receives the proposed width on every pointer move; clamping is the owner's job. */
+  onWidthChange: (width: number) => void;
+  onDragStart?: () => void;
+  /** Fires once when the drag ends — the place to persist the final width. */
+  onDragEnd?: () => void;
+}
+
+/**
+ * Invisible drag strip overlaying one edge of a floating designer panel.
+ * Captures the pointer and translates horizontal movement into width updates
+ * for the owning panel. Held in a ref so the move handler reads the drag
+ * origin without re-subscribing.
+ */
+export function PanelResizeHandle({
+  edge,
+  label,
+  getWidth,
+  onWidthChange,
+  onDragStart,
+  onDragEnd,
+}: PanelResizeHandleProps) {
+  const dragOrigin = useRef<{ startX: number; startWidth: number } | null>(null);
+
+  const handlePointerDown = useCallback(
+    (event: React.PointerEvent<HTMLDivElement>) => {
+      event.preventDefault();
+      dragOrigin.current = { startX: event.clientX, startWidth: getWidth() };
+      event.currentTarget.setPointerCapture(event.pointerId);
+      onDragStart?.();
+    },
+    [getWidth, onDragStart],
+  );
+
+  const handlePointerMove = useCallback(
+    (event: React.PointerEvent<HTMLDivElement>) => {
+      const origin = dragOrigin.current;
+      if (!origin) return;
+      const delta = event.clientX - origin.startX;
+      onWidthChange(origin.startWidth + (edge === "right" ? delta : -delta));
+    },
+    [edge, onWidthChange],
+  );
+
+  const handlePointerEnd = useCallback(
+    (event: React.PointerEvent<HTMLDivElement>) => {
+      if (!dragOrigin.current) return;
+      dragOrigin.current = null;
+      event.currentTarget.releasePointerCapture(event.pointerId);
+      onDragEnd?.();
+    },
+    [onDragEnd],
+  );
+
+  return (
+    <div
+      role="separator"
+      aria-orientation="vertical"
+      aria-label={label}
+      onPointerDown={handlePointerDown}
+      onPointerMove={handlePointerMove}
+      onPointerUp={handlePointerEnd}
+      onPointerCancel={handlePointerEnd}
+      className={cn(
+        "group absolute inset-y-0 z-10 w-2 cursor-col-resize touch-none",
+        edge === "right" ? "-right-1" : "-left-1",
+      )}
+    >
+      <div className="mx-auto h-full w-px bg-transparent transition-colors group-hover:bg-primary" />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/panel-width-storage.ts b/apps/www/src/features/studio/paywalls/designer/panels/panel-width-storage.ts
new file mode 100644
index 000000000..abde02b4b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/panels/panel-width-storage.ts
@@ -0,0 +1,64 @@
+/**
+ * localStorage persistence for the designer's user-resized panel widths.
+ * Widths are loaded once when the designer store is created and saved when a
+ * resize drag ends, so a user's layout survives reloads.
+ */
+
+import type { DesignerStoreState } from "../state/designer-store-state";
+
+const STORAGE_KEY = "voidhash.designer.panelWidths";
+
+/** Panel widths restored from a previous session; missing fields fall back to defaults. */
+export interface PersistedPanelWidths {
+  ai?: number;
+  left?: number;
+  right?: number;
+}
+
+function asFiniteNumber(value: unknown): number | undefined {
+  return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+
+/** Load the persisted panel widths, tolerating missing/corrupt storage. */
+export function loadPanelWidths(): PersistedPanelWidths {
+  if (typeof window === "undefined") {
+    return {};
+  }
+  try {
+    const raw = window.localStorage.getItem(STORAGE_KEY);
+    if (raw === null) {
+      return {};
+    }
+    const parsed: unknown = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null) {
+      return {};
+    }
+    const record = parsed as Record<string, unknown>;
+    return {
+      ai: asFiniteNumber(record.ai),
+      left: asFiniteNumber(record.left),
+      right: asFiniteNumber(record.right),
+    };
+  } catch {
+    return {};
+  }
+}
+
+/** Persist the current widths of all resizable panels (called when a drag ends). */
+export function persistPanelWidths(state: DesignerStoreState): void {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    window.localStorage.setItem(
+      STORAGE_KEY,
+      JSON.stringify({
+        ai: state.ai.width,
+        left: state.viewport.panels.left.width,
+        right: state.viewport.panels.right.width,
+      }),
+    );
+  } catch {
+    // Storage may be unavailable (private mode, quota) — resizing still works, it just won't persist.
+  }
+}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx
index 8004f2d1b..9e6671c8a 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel.tsx
@@ -2,15 +2,18 @@
 
 import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
 import { cn, ScrollArea } from "@voidhash/ui";
-import { useRef } from "react";
+import { useCallback, useRef } from "react";
 import { useStore } from "zustand/react";
 
 import { Panel } from "@/features/studio/paywalls/designer/components/ui/panel";
 
-import { usePaywallDesignerStore } from "../state/designer-store";
+import { setPanelResizeActive, setRightPanelWidth } from "../state/actions/panel-actions";
+import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
 import { getNodeById } from "../state/utils/nodes";
 import { selectedNodeIdsFromPresence } from "../state/utils/presence";
 import { PANEL_DIMENSIONS } from "./constants";
+import { PanelResizeHandle } from "./panel-resize-handle";
+import { persistPanelWidths } from "./panel-width-storage";
 import { PanelStack } from "./right-panel/panel-stack";
 
 /**
@@ -45,9 +48,29 @@ function useSelectedNodes(): SnapshotNode[] {
 
 export function RightPanel() {
   const store = usePaywallDesignerStore();
+  const dispatch = usePaywallDesignerActions();
   const isPreviewMode = useStore(store, (state) => state.mode === "preview");
+  const width = useStore(store, (state) => state.viewport.panels.right.width);
   const nodes = useSelectedNodes();
 
+  const handleResizeStart = useCallback(() => {
+    dispatch(setPanelResizeActive)({ active: true });
+  }, [dispatch]);
+
+  const handleResizeChange = useCallback(
+    (nextWidth: number) => {
+      dispatch(setRightPanelWidth)({ width: nextWidth });
+    },
+    [dispatch],
+  );
+
+  const handleResizeEnd = useCallback(() => {
+    dispatch(setPanelResizeActive)({ active: false });
+    persistPanelWidths(store.getState());
+  }, [dispatch, store]);
+
+  const getWidth = useCallback(() => store.getState().viewport.panels.right.width, [store]);
+
   return (
     <div
       className={cn(
@@ -57,9 +80,17 @@ export function RightPanel() {
       )}
       style={{
         top: PANEL_DIMENSIONS.TOP_HEIGHT,
-        width: PANEL_DIMENSIONS.RIGHT_WIDTH,
+        width,
       }}
     >
+      <PanelResizeHandle
+        edge="left"
+        label="Resize properties panel"
+        getWidth={getWidth}
+        onWidthChange={handleResizeChange}
+        onDragStart={handleResizeStart}
+        onDragEnd={handleResizeEnd}
+      />
       <Panel className="relative overflow-hidden">
         <div className="absolute inset-0">
           <ScrollArea className="h-full">
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
index af7e94e8d..cae8c8aa9 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/ai-panel-actions.ts
@@ -4,7 +4,7 @@
  * These commands manage the Voidhash AI chat panel (browser-only state).
  */
 
-import { PANEL_DIMENSIONS } from "../../panels/constants";
+import { clampAiPanelWidth } from "../../panels/constants";
 import { commander } from "../designer-commander";
 import type { AgentCanvasOperation } from "../designer-store-state";
 
@@ -32,14 +32,10 @@ export const toggleAiPanel = commander.action((ctx) => {
  */
 export const setAiPanelWidth = commander.action<{ width: number }>((ctx, { width }) => {
   const state = ctx.getState();
-  const clamped = Math.max(
-    PANEL_DIMENSIONS.AI_CHAT_MIN_WIDTH,
-    Math.min(PANEL_DIMENSIONS.AI_CHAT_MAX_WIDTH, width),
-  );
   ctx.setState({
     ai: {
       ...state.ai,
-      width: clamped,
+      width: clampAiPanelWidth(width),
     },
   });
 });
diff --git a/apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts b/apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts
index 944d4995e..44ad5ecb7 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts
+++ b/apps/www/src/features/studio/paywalls/designer/state/actions/panel-actions.ts
@@ -4,6 +4,7 @@
  * These commands manage viewport panel dimensions (browser-only state).
  */
 
+import { clampLeftPanelWidth, clampRightPanelWidth } from "../../panels/constants";
 import { commander } from "../designer-commander";
 import type { DesignerStoreState } from "../designer-store-state";
 
@@ -44,7 +45,9 @@ export const setBottomPanelHeight = commander.action<{ height: number }>((ctx, p
 });
 
 /**
- * Set the width of the left panel.
+ * Set the left (layers) panel width (px), clamped to the panel's min/max
+ * bounds. Browser-only local state — high-frequency writes during a drag are
+ * fine as they never touch the mimic document's undo history.
  */
 export const setLeftPanelWidth = commander.action<{ width: number }>((ctx, params) => {
   const state = ctx.getState();
@@ -53,14 +56,15 @@ export const setLeftPanelWidth = commander.action<{ width: number }>((ctx, param
       ...state.viewport,
       panels: {
         ...state.viewport.panels,
-        left: { width: params.width },
+        left: { width: clampLeftPanelWidth(params.width) },
       },
     },
   });
 });
 
 /**
- * Set the width of the right panel.
+ * Set the right (properties) panel width (px), clamped to the panel's min/max
+ * bounds. Browser-only local state, like {@link setLeftPanelWidth}.
  */
 export const setRightPanelWidth = commander.action<{ width: number }>((ctx, params) => {
   const state = ctx.getState();
@@ -69,8 +73,25 @@ export const setRightPanelWidth = commander.action<{ width: number }>((ctx, para
       ...state.viewport,
       panels: {
         ...state.viewport.panels,
-        right: { width: params.width },
+        right: { width: clampRightPanelWidth(params.width) },
       },
     },
   });
 });
+
+/**
+ * Mark a panel resize drag as active/inactive so panels positioned off another
+ * panel's width can suspend their CSS position transitions for the drag.
+ */
+export const setPanelResizeActive = commander.action<{ active: boolean }>((ctx, { active }) => {
+  const state = ctx.getState();
+  if (state.viewport.panelResizeActive === active) {
+    return;
+  }
+  ctx.setState({
+    viewport: {
+      ...state.viewport,
+      panelResizeActive: active,
+    },
+  });
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
index cacf9dfbd..10541378e 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store-state.tsx
@@ -281,6 +281,12 @@ export type DesignerStoreState = {
       left: { width: number };
       right: { width: number };
     };
+    /**
+     * True while a panel resize handle is being dragged. Panels whose position
+     * depends on another panel's width suspend their CSS position transitions
+     * during the drag so they track the pointer instead of easing behind it.
+     */
+    panelResizeActive: boolean;
   };
   devMode: {
     enabled: boolean;
diff --git a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
index 5effe4983..48ddcb50d 100644
--- a/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/state/designer-store.tsx
@@ -14,7 +14,13 @@ import { create } from "zustand";
 import { managedRuntime, VoidhashRpc } from "@/features/studio/lib/effect-query";
 
 import { SHOW_GRID } from "../constants";
-import { PANEL_DIMENSIONS } from "../panels/constants";
+import {
+  clampAiPanelWidth,
+  clampLeftPanelWidth,
+  clampRightPanelWidth,
+  PANEL_DIMENSIONS,
+} from "../panels/constants";
+import { loadPanelWidths } from "../panels/panel-width-storage";
 import { commander } from "./designer-commander";
 import type {
   AgentCanvasOperation,
@@ -96,6 +102,7 @@ export type PaywallDesignerDocumentInstance = ReturnType<typeof createPaywallDes
  * panel-definition test harness reuses it via {@link createDesignerStore}).
  */
 function createDesignerLocalState() {
+  const storedWidths = loadPanelWidths();
   return {
     // Local browser state
     canvas: {
@@ -144,10 +151,11 @@ function createDesignerLocalState() {
     viewport: {
       panels: {
         bottom: { height: 0 },
-        left: { width: 0 },
-        right: { width: 0 },
+        left: { width: clampLeftPanelWidth(storedWidths.left ?? PANEL_DIMENSIONS.LEFT_WIDTH) },
+        right: { width: clampRightPanelWidth(storedWidths.right ?? PANEL_DIMENSIONS.RIGHT_WIDTH) },
         top: { height: 0 },
       },
+      panelResizeActive: false,
     },
     devMode: {
       enabled: false,
@@ -157,7 +165,7 @@ function createDesignerLocalState() {
       operations: {} as Record<string, AgentCanvasOperation>,
       localIsWorking: false,
       panelOpen: true,
-      width: PANEL_DIMENSIONS.AI_CHAT_WIDTH,
+      width: clampAiPanelWidth(storedWidths.ai ?? PANEL_DIMENSIONS.AI_CHAT_WIDTH),
     },
   };
 }
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
index c160888b5..3fb77b506 100644
--- a/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/translation-mode-workspace.tsx
@@ -1,5 +1,6 @@
 "use client";
 
+import { cn } from "@voidhash/ui";
 import { useMemo, useState } from "react";
 import { useStore } from "zustand/react";
 
@@ -49,6 +50,7 @@ export function TranslationModeWorkspace() {
   const store = usePaywallDesignerStore();
   const dispatch = usePaywallDesignerActions();
   const aiOffset = useAiPanelOffset();
+  const resizeActive = useStore(store, (state) => state.viewport.panelResizeActive);
 
   // Draft-aware live snapshot: rows and the preview follow the document as
   // collaborators edit; a node deleted mid-edit simply drops its row.
@@ -98,7 +100,12 @@ export function TranslationModeWorkspace() {
 
   return (
     <div
-      className="absolute inset-0 flex bg-background transition-[left] duration-300 ease-in-out"
+      className={cn(
+        "absolute inset-0 flex bg-background",
+        // Suspended while the AI panel is being resized so the workspace
+        // tracks its live width instead of easing behind it.
+        !resizeActive && "transition-[left] duration-300 ease-in-out",
+      )}
       style={{ left: aiOffset, top: PANEL_DIMENSIONS.TOP_HEIGHT }}
     >
       <LocaleRail

From 52c4d5a5d06e25a14b4927c0c607e9f06e7cd3aa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 16 Jul 2026 19:23:27 +0200
Subject: [PATCH 098/129] refactor: remove legacy panel system

---
 .../panels/right-panel/builtin-panel-host.tsx |  20 +-
 .../right-panel/component-panel-host.tsx      |   3 +-
 .../component-warnings.tsx                    |   2 +-
 .../right-panel/definitions/border-panel.tsx  |   7 +-
 .../definitions/border-radius-panel.tsx       |   7 +-
 .../definitions/component-actions-panel.tsx   |   4 +-
 .../definitions/component-settings-panel.tsx  |   3 +-
 .../definitions/definition-selection.tsx      |   4 +-
 .../right-panel/definitions/fill-panel.tsx    |   3 +-
 .../definitions/flex-layout-panel.tsx         |  14 +-
 .../definitions/interactions-panel.tsx        |   4 +-
 .../definitions/path-fill-panel.tsx           |   3 +-
 .../definitions/path-stroke-panel.tsx         |   3 +-
 .../definitions/position-panel.tsx            |   4 +-
 .../scroll-view-settings-panel.tsx            |   3 +-
 .../definitions/shape-layout-panel.tsx        |   4 +-
 .../right-panel/definitions/states-panel.tsx  |   3 +-
 .../testing/definition-harness.tsx            |   8 +-
 .../definitions/text-fill-panel.tsx           |   3 +-
 .../definitions/typography-panel.tsx          |   3 +-
 .../definitions/use-definition-nodes.ts       |  28 +-
 .../definitions/variables-panel.tsx           |   4 +-
 .../panels/right-panel/dynamic-panel.tsx      | 182 ------
 .../inputs/flex-alignment-input.tsx           |   1 -
 .../right-panel/inputs/height-input.tsx       |  50 --
 .../panels/right-panel/inputs/text-input.tsx  |  84 ---
 .../panels/right-panel/inputs/width-input.tsx |  50 --
 .../panels/right-panel/panel-registry.test.ts |  33 +-
 .../panels/right-panel/panel-registry.ts      |  86 +--
 .../panels/right-panel/panel-stack.tsx        |  84 +--
 .../panels/right-panel/section-registry.ts    | 127 ----
 .../right-panel/sections/action-editor.tsx    |   1 -
 .../sections/border-radius-section.tsx        | 325 ----------
 .../right-panel/sections/border-section.tsx   | 406 ------------
 .../sections/component-actions-section.tsx    | 156 -----
 .../sections/component-props-section.tsx      | 153 -----
 .../sections/component-section.tsx            | 293 ---------
 .../right-panel/sections/content-section.tsx  | 132 ----
 .../right-panel/sections/fill-section.tsx     | 397 ------------
 .../sections/flex-layout-section.tsx          | 581 ------------------
 .../right-panel/sections/interaction-row.tsx  | 129 ----
 .../sections/interactions-section.tsx         | 129 ----
 .../sections/path-fill-section.tsx            | 115 ----
 .../sections/path-stroke-section.tsx          | 176 ------
 .../sections/pending-variable-row.tsx         | 106 ----
 .../right-panel/sections/position-section.tsx | 183 ------
 .../sections/safe-area-section.tsx            |  50 --
 .../sections/scroll-view-settings-section.tsx |  72 ---
 .../sections/shape-layout-section.tsx         | 151 -----
 .../right-panel/sections/states-section.tsx   | 187 ------
 .../sections/text-fill-section.tsx            |  85 ---
 .../sections/typography-section.tsx           | 303 ---------
 .../right-panel/sections/variable-row.tsx     | 150 -----
 .../sections/variables-section.tsx            | 221 -------
 .../right-panel/utils/get-style-targets.ts    |  27 -
 ...ets.test.ts => style-targets-core.test.ts} |   0
 .../studio/paywalls/designer/panels/types.ts  |  45 --
 57 files changed, 91 insertions(+), 5316 deletions(-)
 rename apps/www/src/features/studio/paywalls/designer/panels/right-panel/{sections => components}/component-warnings.tsx (98%)
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts
 rename apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/{get-style-targets.test.ts => style-targets-core.test.ts} (100%)

diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx
index 09867fe57..40bc0c278 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/builtin-panel-host.tsx
@@ -1,20 +1,17 @@
 "use client";
 
 /**
- * Mounts ONE in-process built-in panel session for a section and renders its
- * tree with the host kit. The session is keyed by `sectionId` ONLY (by the
- * PanelStack's `key={section.id}`), so a selection change NEVER remounts it —
- * the definition's `useState` survives across selections exactly like today's
- * `key={section.id}` sections (inventory §A / anomaly 4). Selection and nodes
- * flow into the definition as INPUTS via `transport.update`, not as a remount.
+ * Mounts one in-process built-in panel session and renders its tree with the
+ * host kit. The stack keys each host by panel id, so selection changes update
+ * the session inputs without remounting it and preserve definition state.
  *
  * `wrap` re-wraps providers INSIDE the reconciler root: the SAME designer zustand
- * store (via {@link PaywallStoreContext}, so `useStore`-based section hooks work
+ * store (via {@link PaywallStoreContext}, so `useStore`-based hooks work
  * unchanged inside the reconciler) plus the {@link PanelHostServicesProvider}
  * host-services surface. The portalled host chrome (State Manager sheet, confirm
  * dialog) lives in the main tree inside {@link PanelHostServicesHost}.
  */
-import type { PanelContext, PanelSessionInputs } from "@voidhash/paywalls/panel";
+import type { PanelSessionInputs } from "@voidhash/paywalls/panel";
 import { useEffect, useMemo, useRef } from "react";
 import type { ReactNode } from "react";
 
@@ -44,8 +41,6 @@ export interface BuiltinPanelSelection {
 }
 
 export interface BuiltinPanelHostProps {
-  /** The section this host renders (used only for diagnostics; identity is the mount key). */
-  readonly sectionId: string;
   /** The built-in panel definition to run in-process. */
   readonly definition: PanelRender;
   /** The current selection (flows to the definition via `update`, never remounts). */
@@ -125,9 +120,8 @@ function BuiltinPanelSessionView({
 }
 
 /**
- * Mounts a built-in panel host for `sectionId`. Renders the portalled host
- * chrome via {@link PanelHostServicesHost} and, inside it, the session view. The
- * PanelStack keys this component by `sectionId` so it persists across selections.
+ * Mounts a built-in panel host. The parent stack supplies the panel identity as
+ * the React key so this host persists across selection changes.
  */
 export function BuiltinPanelHost({ definition, selection }: BuiltinPanelHostProps): ReactNode {
   const store = usePaywallDesignerStore();
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx
index e9c68a68a..677b43992 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/component-panel-host.tsx
@@ -1,7 +1,7 @@
 "use client";
 
 /**
- * The `componentProps` slot of the v2 right-panel stack (Phase 3b). It edits the
+ * The `componentProps` slot of the right-panel stack. It edits the
  * props of the selected component node(s) either through a HOST-rendered default
  * panel (a {@link PropFieldRow} per manifest prop, wired to the batched
  * multi-node prop actions) or, when the component declares a custom `panel`, a
@@ -57,7 +57,6 @@ import {
   componentPropBindingFromRaw,
   findComponentPropEntry,
   manifestDefaultPropValue,
-  type ComponentPropBindingPlain,
   type ComponentPropValuePlain,
 } from "../../state/utils/component-prop-values";
 import { selectDocumentRoot } from "../../state/utils/document-root";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-warnings.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/components/component-warnings.tsx
similarity index 98%
rename from apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-warnings.tsx
rename to apps/www/src/features/studio/paywalls/designer/panels/right-panel/components/component-warnings.tsx
index f707e997c..dbdfc321a 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-warnings.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/components/component-warnings.tsx
@@ -33,7 +33,7 @@ export interface ComponentWarningsBlockProps {
 
 /**
  * Validation summary for the selected component node, rendered above the
- * right-panel sections (spec §7.4): amber rows for warnings, muted rows for
+ * right-panel panels (spec §7.4): amber rows for warnings, muted rows for
  * info. When the instance references a component file that no longer exists
  * (`component-unresolved`), a primary "Pair to a component file…" action opens a
  * picker to re-point it at an existing file.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx
index f1ce51720..b50b51d74 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Border` section — the wire-tree replica of
- * {@link ../sections/border-section.BorderSection}.
+ * Built-in panel definition for border width, color, enablement, and resets.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Border" → `Panel.Section title="Border"`.
@@ -52,9 +51,7 @@ interface BorderStyle {
 }
 
 /**
- * Whether the four side widths diverge — the seed for the expanded view.
- * Replicated verbatim from the legacy section (kept private to preserve the
- * flag-off byte-identity).
+ * Whether the four side widths diverge, seeding the expanded view.
  */
 function shouldShowIndividualBorder(node: BorderStyle): boolean {
   return (
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx
index 621579c40..84bfd67a8 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/border-radius-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Border Radius` section — the wire-tree
- * replica of {@link ../sections/border-radius-section.BorderRadiusSection}.
+ * Built-in panel definition for uniform and per-corner border radii.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Border Radius" → `Panel.Section title="Border Radius"`.
@@ -51,9 +50,7 @@ interface BorderRadiusStyle {
 }
 
 /**
- * Whether the four corners diverge (any pair differs) — the seed for the
- * expanded/individual view. Replicated verbatim from the legacy section (a
- * module-local helper there, kept private to preserve the flag-off byte-identity).
+ * Whether the four corners diverge, seeding the expanded view.
  */
 function shouldShowIndividualBorderRadius(node: BorderRadiusStyle): boolean {
   return (
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx
index 93dbe727e..f879fa9f5 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-actions-panel.tsx
@@ -1,9 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Component actions` section — the wire-tree
- * replica of {@link ../sections/component-actions-section.ComponentActionsSection}
- * (+ its `ComponentActionRow`).
+ * Built-in panel definition for component action bindings.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Actions" → `Panel.Section title="Actions"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx
index 37eafbca3..ca4c01261 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/component-settings-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Component settings` section — the wire-tree
- * replica of {@link ../sections/component-section.ComponentSection}.
+ * Built-in panel definition for component identity, version, and preview state.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Component" → `Panel.Section title="Component"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx
index 62ef01113..58919ca51 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/definition-selection.tsx
@@ -16,8 +16,8 @@
  * change does — without a source-identity change.
  *
  * This carries no serializable form and never crosses the sandbox boundary; a
- * code-component panel (Phase 3) learns its selection through the wire
- * `selection` input, not this context.
+ * code-component panel learns its selection through the wire `selection` input,
+ * not this context.
  */
 import { createContext, useContext, useSyncExternalStore } from "react";
 
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx
index 525b89e80..8c39d346a 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/fill-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Fill` section — the wire-tree replica of
- * {@link ../sections/fill-section.FillSection}.
+ * Built-in panel definition for solid, gradient, and image fills.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Fill" → `Panel.Section title="Fill"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx
index b3644b461..8db7a0fd6 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/flex-layout-panel.tsx
@@ -1,9 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Layout` (flex) section — the wire-tree
- * replica of {@link ../sections/flex-layout-section.FlexLayoutSection}
- * (screen/view nodes, multi-selectable).
+ * Built-in layout panel definition for screen and view selections.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` "Layout" → `Panel.Section title="Layout"`.
@@ -16,10 +14,9 @@
  * - PADDING subsection: uniform (2 fields) OR expanded (4 per-side fields) + an
  *   expand/collapse button → `Panel.Subsection title="Padding"` > `Panel.Row`.
  *
- * Applicability nuance (verbatim from the old `DynamicPanel`): the section renders
- * ONLY when the first node has a truthy `parentId`; the definition returns an
- * empty `<Panel/>` otherwise (renders nothing). Dimension inputs are disabled for
- * a `screen` node (`editableDimensions = firstNode.type !== "screen"`).
+ * The panel renders only when the first node has a parent; otherwise the
+ * definition returns an empty `<Panel/>`. Dimension inputs are disabled for a
+ * `screen` node (`editableDimensions = firstNode.type !== "screen"`).
  *
  * Behavior (identical to the old section):
  * - direction + alignment are DIRECT writes (one undo); gap + padding + dimension
@@ -165,8 +162,7 @@ export function FlexLayoutPanel(_ctx: PanelContext) {
     });
   }, [node, handleChange]);
 
-  // Renders NOTHING when the first node has no parent (the old DynamicPanel gated
-  // the whole section on `firstNode.parentId`), matching the flag-off path.
+  // Parentless selections have no flex-layout relationship to edit.
   if (!node || !parentId) return <Panel />;
 
   const parentDirection = getFlexDirection(parent, "row");
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
index 0a613e680..6695cd0ed 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
@@ -1,9 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Interactions` section — the wire-tree
- * replica of {@link ../sections/interactions-section.InteractionsSection} (+ its
- * `InteractionRow`).
+ * Built-in panel definition for node interactions and action editing.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Interactions" → `Panel.Section title="Interactions"`,
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx
index fe19b0576..bd1e35643 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-fill-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the path `Fill` section — the wire-tree
- * replica of {@link ../sections/path-fill-section.PathFillSection}.
+ * Built-in panel definition for path fill color and fill rule.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Fill" → `Panel.Section title="Fill"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx
index 582df5461..12a46e160 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/path-stroke-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the path `Stroke` section — the wire-tree
- * replica of {@link ../sections/path-stroke-section.PathStrokeSection}.
+ * Built-in panel definition for path stroke width and color.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Stroke" → `Panel.Section title="Stroke"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx
index 7376cb601..163a69e75 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/position-panel.tsx
@@ -1,9 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the dedicated `Position` section — the wire-tree
- * replica of {@link ../sections/position-section.PositionSection} (view + text
- * nodes, multi-selectable).
+ * Built-in panel definition for relative and absolute positioning.
  *
  * Structure (JSX → wire nodes):
  * - `PanelSection` "Position" → `Panel.Section title="Position"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx
index 32c451653..eaba06608 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/scroll-view-settings-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the scrollView `Scroll` settings section — the
- * wire-tree replica of {@link ../sections/scroll-view-settings-section.ScrollViewSettingsSection}.
+ * Built-in panel definition for scroll view axis and indicator settings.
  * Exposes the two scrollView-only data flags as boolean switches:
  * - `horizontal` — scroll axis (off = vertical).
  * - `showsScrollIndicator` — whether the native scrollbar is shown.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx
index c7a0e4476..460d531e3 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/shape-layout-panel.tsx
@@ -1,9 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the shape `Layout` section — the wire-tree
- * replica of {@link ../sections/shape-layout-section.ShapeLayoutSection}
- * (single `shape` node; NO override-reset affordances).
+ * Built-in layout panel definition for shape dimensions.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` "Layout" → `Panel.Section title="Layout"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx
index 6cdac28ff..6ea3be2da 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/states-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `States` section — the wire-tree replica of
- * {@link ../sections/states-section.StatesSection}.
+ * Built-in panel definition for state selection and state-manager access.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "States" → `Panel.Section title="States"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx
index 4caf085c3..5eb26a040 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/testing/definition-harness.tsx
@@ -14,13 +14,13 @@
  * decode) on construction and after every {@link PanelHarness.dispatch}, so a
  * definition that drifts from the wire contract fails the test automatically.
  *
- * Later section migrations reuse this verbatim — seed nodes/selection with
- * {@link seedNodes}, mount the definition, then assert structure via the finders
- * and behavior via `dispatch` + the store/draft/undo/action helpers.
+ * Tests seed nodes and selection with {@link seedNodes}, mount the definition,
+ * then assert structure via the finders and behavior via `dispatch` plus the
+ * store, draft, undo, and action helpers.
  */
 import type { ComponentManifest } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
 import type { ComponentBoundAction } from "@voidhash/mimic-schema";
-import type { PanelContext, PanelSessionInputs } from "@voidhash/paywalls/panel";
+import type { PanelSessionInputs } from "@voidhash/paywalls/panel";
 import type { Command as CommandObject } from "@voidhash/mimic/zustand-commander";
 
 import { createInProcessTransport } from "../../../../panel-runtime/in-process-transport";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx
index 2772e3b36..266328389 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/text-fill-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the text `Fill` section — the wire-tree replica
- * of {@link ../sections/text-fill-section.TextFillSection}.
+ * Built-in panel definition for text fill color and override resets.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Fill" → `Panel.Section title="Fill"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx
index 1da6faddc..2d2426ecc 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/typography-panel.tsx
@@ -1,8 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Typography` section — the wire-tree replica
- * of {@link ../sections/typography-section.TypographySection}.
+ * Built-in panel definition for typography and alignment controls.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Typography" → `Panel.Section title="Typography"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts
index f2874c578..48f2fd67b 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/use-definition-nodes.ts
@@ -5,17 +5,9 @@
  * edits from the store. It bridges the two host seams a definition reads —
  * {@link useDefinitionSelection} (the reactive selected node ids) and
  * {@link usePaywallDesignerStore} (the live document) — into a single
- * `{ nodes, style, targets, mixedKeys }` result, so a definition never touches
- * the render root, draft plumbing, or style-target resolution directly.
- *
- * It is the draft-aware analogue of the legacy sections' `useStyleTargets(nodes)`
- * with the `nodes` argument replaced by the selection channel: nodes are
- * resolved from `selectRenderRoot` (draft-staged snapshot preferred, so an
- * in-progress panel drag renders live), then run through the SAME
- * `getStyleTargetsForNodes` core the legacy sections use, keeping behavior
- * byte-identical. Subscribing to `selectRenderRoot` also re-renders the panel on
- * every draft edit; subscribing to the selection store re-renders it on every
- * selection change.
+ * `{ nodes, style, targets, mixedKeys }` result. Nodes resolve from the
+ * draft-aware render root and flow through the shared style-target core, while
+ * subscriptions keep the panel current with draft edits and selection changes.
  */
 import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
 import { useStore } from "zustand/react";
@@ -23,14 +15,13 @@ import { useStore } from "zustand/react";
 import { usePaywallDesignerStore } from "../../../state/designer-store";
 import { selectRenderRoot } from "../../../state/utils/document-root";
 import { findNodeById } from "../../../state/utils/tree";
-import { getStyleTargetsForNodes, type StyleTargetsResult } from "../utils/get-style-targets";
+import { getStyleTargetsForNodes, type StyleTargetsResult } from "../utils/style-targets-core";
 import { useDefinitionSelection } from "./definition-selection";
 
 /**
  * The resolved editing target for a definition: the selected snapshot nodes plus
  * the style-target result (effective `style`, write `targets`, and `mixedKeys`
- * across a multi-selection). `style` is `null` when the first node is styleless
- * — a definition returns `null` in that case, exactly like the legacy sections.
+ * across a multi-selection). `style` is `null` when the first node is styleless.
  */
 export interface DefinitionNodes extends StyleTargetsResult {
   /** The selected snapshot nodes, resolved draft-aware from the render root. */
@@ -53,14 +44,7 @@ export function useDefinitionNodes(): DefinitionNodes {
   // committed snapshot. Subscribing here also re-renders the panel per draft
   // edit.
   const renderRoot = useStore(store, selectRenderRoot);
-  // Resolve each selected id from the render root, DROPPING any that no longer
-  // resolve. The legacy `useStyleTargets(nodes)` fell back to the passed-in
-  // snapshot node (`findNodeById(...) ?? node`), but there the caller already
-  // held a resolved node object; here only the id crosses the selection seam.
-  // In the live flow the ids come straight from the current render nodes
-  // (`panel-stack` maps `nodes.map(n => n.id)`), so they always resolve and the
-  // two paths are identical — the drop only guards a transient stale id, where
-  // rendering nothing is safer than rendering stale style data.
+  // Drop transient stale ids rather than rendering controls for stale style data.
   const nodes = nodeIds.flatMap((id) => {
     const node = findNodeById<SnapshotNode>(renderRoot, id);
     return node ? [node] : [];
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
index 2731e71b5..ed22add4c 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
@@ -1,9 +1,7 @@
 "use client";
 
 /**
- * Built-in panel DEFINITION for the `Variables` section — the wire-tree replica
- * of {@link ../sections/variables-section.VariablesSection} (+ its `VariableRow`
- * and `PendingVariableRow`).
+ * Built-in panel definition for local variable creation and editing.
  *
  * Structure (old JSX → wire nodes):
  * - `PanelSection` + header "Variables" → `Panel.Section title="Variables"`.
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx
deleted file mode 100644
index 954a773b2..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/dynamic-panel.tsx
+++ /dev/null
@@ -1,182 +0,0 @@
-"use client";
-
-import type {
-  PathSnapshotNode,
-  ScreenSnapshotNode,
-  ScrollViewSnapshotNode,
-  ShapeSnapshotNode,
-  SnapshotNode,
-  TextSnapshotNode,
-  ViewSnapshotNode,
-} from "@voidhash/paywall-renderer-web-core";
-
-import { isEditableNodeType } from "../../state/actions";
-import type { EditableNodeType } from "../../state/actions";
-import type { SectionId } from "../types";
-import { getSharedSections } from "./section-registry";
-import { BorderRadiusSection } from "./sections/border-radius-section";
-import { BorderSection } from "./sections/border-section";
-import { ComponentActionsSection } from "./sections/component-actions-section";
-import { ComponentPropsSection } from "./sections/component-props-section";
-import { ComponentSection } from "./sections/component-section";
-import { ComponentWarningsBlock } from "./sections/component-warnings";
-import { ContentSection } from "./sections/content-section";
-import { FillSection } from "./sections/fill-section";
-import { FlexLayoutSection } from "./sections/flex-layout-section";
-import { InteractionsSection } from "./sections/interactions-section";
-import { PathFillSection } from "./sections/path-fill-section";
-import { PathStrokeSection } from "./sections/path-stroke-section";
-import { PositionSection } from "./sections/position-section";
-import { ScrollViewSettingsSection } from "./sections/scroll-view-settings-section";
-import { ShapeLayoutSection } from "./sections/shape-layout-section";
-import { StatesSection } from "./sections/states-section";
-import { TextFillSection } from "./sections/text-fill-section";
-import { TypographySection } from "./sections/typography-section";
-import { VariablesSection } from "./sections/variables-section";
-
-type StatefulSnapshotNode =
-  | ViewSnapshotNode
-  | ScrollViewSnapshotNode
-  | ScreenSnapshotNode
-  | TextSnapshotNode
-  | ShapeSnapshotNode
-  | PathSnapshotNode;
-
-function isStatefulSnapshotNode(node: SnapshotNode): node is StatefulSnapshotNode {
-  return (
-    node.type === "view" ||
-    node.type === "scrollView" ||
-    node.type === "screen" ||
-    node.type === "text" ||
-    node.type === "shape" ||
-    node.type === "path"
-  );
-}
-
-/**
- * Renders one legacy section by id, narrowing the first node's type as the old
- * per-section switch requires. Exported so the v2 {@link PanelStack} can reuse
- * this EXACT rendering path for any section not yet migrated (the fallback must
- * be byte-identical to the flag-off panel — do not fork this logic).
- */
-export function Section({ sectionId, nodes }: { sectionId: SectionId; nodes: SnapshotNode[] }) {
-  const firstNode = nodes[0]!;
-  const statefulNodes = nodes.filter(isStatefulSnapshotNode);
-
-  switch (sectionId) {
-    case "variables":
-      if (
-        firstNode.type === "view" ||
-        firstNode.type === "scrollView" ||
-        firstNode.type === "text" ||
-        firstNode.type === "screen" ||
-        firstNode.type === "shape" ||
-        firstNode.type === "path"
-      ) {
-        return <VariablesSection nodes={statefulNodes} />;
-      }
-      return null;
-    case "states":
-      if (
-        firstNode.type === "view" ||
-        firstNode.type === "scrollView" ||
-        firstNode.type === "text" ||
-        firstNode.type === "screen" ||
-        firstNode.type === "shape" ||
-        firstNode.type === "path"
-      ) {
-        return <StatesSection nodes={statefulNodes} />;
-      }
-      return null;
-    case "scrollViewSettings":
-      return (
-        <ScrollViewSettingsSection
-          nodes={nodes.filter((node) => node.type === "scrollView")}
-        />
-      );
-    case "position": {
-      if (firstNode.type !== "view" && firstNode.type !== "scrollView" && firstNode.type !== "text")
-        return null;
-      return <PositionSection nodes={nodes} />;
-    }
-    case "flexLayout": {
-      // Use the node's actual parentId from the snapshot
-      if (!firstNode.parentId) return null;
-
-      return (
-        <FlexLayoutSection
-          editableDimensions={firstNode.type !== "screen"}
-          nodes={nodes}
-          parentId={firstNode.parentId}
-        />
-      );
-    }
-    case "shapeLayout":
-      return <ShapeLayoutSection nodes={nodes} />;
-    case "borderRadius":
-      return <BorderRadiusSection nodes={nodes} />;
-    case "fill":
-      return <FillSection nodes={nodes} />;
-    case "border":
-      return <BorderSection nodes={nodes} />;
-    case "interactions": {
-      if (firstNode.type !== "view" && firstNode.type !== "scrollView") return null;
-      return (
-        <InteractionsSection
-          nodes={nodes.filter((node) => node.type === "view" || node.type === "scrollView")}
-        />
-      );
-    }
-    case "content": {
-      if (firstNode.type !== "text") return null;
-      return <ContentSection node={firstNode} />;
-    }
-    case "typography":
-      return <TypographySection nodes={nodes} />;
-    case "textFill":
-      return <TextFillSection nodes={nodes} />;
-    case "pathFill":
-      return <PathFillSection nodes={nodes} />;
-    case "pathStroke":
-      return <PathStrokeSection nodes={nodes} />;
-    case "componentSettings": {
-      if (firstNode.type !== "component") return null;
-      return <ComponentSection node={firstNode} />;
-    }
-    case "componentProps": {
-      if (firstNode.type !== "component") return null;
-      return <ComponentPropsSection node={firstNode} />;
-    }
-    case "componentActions": {
-      if (firstNode.type !== "component") return null;
-      return <ComponentActionsSection node={firstNode} />;
-    }
-    default:
-      return null;
-  }
-}
-
-export function DynamicPanel({ nodes }: { nodes: SnapshotNode[] }) {
-  if (nodes.length === 0) return null;
-
-  const nodeTypes = [
-    ...new Set(
-      nodes.map((n) => n.type).filter((t): t is EditableNodeType => isEditableNodeType(t)),
-    ),
-  ];
-
-  if (nodeTypes.length === 0) return null;
-
-  const isMulti = nodes.length > 1;
-  const sections = getSharedSections(nodeTypes, isMulti);
-  const singleComponentNode = !isMulti && nodes[0]?.type === "component" ? nodes[0] : null;
-
-  return (
-    <>
-      {singleComponentNode && <ComponentWarningsBlock nodeId={singleComponentNode.id} />}
-      {sections.map((section) => (
-        <Section key={section.id} nodes={nodes} sectionId={section.id} />
-      ))}
-    </>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx
deleted file mode 100644
index e053fe97d..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/flex-alignment-input.tsx
+++ /dev/null
@@ -1 +0,0 @@
-export * from "@/features/studio/paywalls/designer/panel-kit/alignment-grid";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx
deleted file mode 100644
index 7f5ff56ba..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/height-input.tsx
+++ /dev/null
@@ -1,50 +0,0 @@
-import type { AlignItems, FlexDirection } from "@voidhash/mimic-schema";
-
-import { DimensionField } from "@/features/studio/paywalls/designer/panel-kit/dimension-field";
-
-import type { NodeEditorProps } from "../../types";
-
-type HeightInputProps = NodeEditorProps<
-  "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
-> & {
-  disabled?: boolean;
-  parentDirection: FlexDirection;
-  parentAlignItems?: AlignItems;
-  computedHeight?: number | null;
-  onDraftChange?: (
-    node: NodeEditorProps<
-      "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
-    >["node"],
-  ) => void;
-  onCommit?: () => void;
-};
-
-/**
- * Height-axis specialization of {@link DimensionField}. Kept as a thin wrapper so
- * the flex-layout and shape-layout sections keep their existing call sites
- * (`computedHeight` prop name) while the shared logic lives in the kit.
- */
-export function HeightInput({
-  node,
-  onNodeChange,
-  disabled = false,
-  parentDirection,
-  parentAlignItems,
-  computedHeight,
-  onDraftChange,
-  onCommit,
-}: HeightInputProps) {
-  return (
-    <DimensionField
-      axis="height"
-      computed={computedHeight}
-      disabled={disabled}
-      node={node}
-      onCommit={onCommit}
-      onDraftChange={onDraftChange}
-      onNodeChange={onNodeChange}
-      parentAlignItems={parentAlignItems}
-      parentDirection={parentDirection}
-    />
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx
deleted file mode 100644
index fac30b5fc..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/text-input.tsx
+++ /dev/null
@@ -1,84 +0,0 @@
-"use client";
-
-import type { Schema } from "effect";
-import { Schema as S } from "effect";
-
-import {
-  TextInput as BaseTextInput,
-  type TextInputProps as BaseTextInputProps,
-} from "@/features/studio/paywalls/designer/panel-kit/text-input";
-
-/**
- * Props for the node-aware TextInput wrapper.
- * Extends the base TextInput props but makes value/onChange work with node properties.
- */
-export interface NodeTextInputProps<T extends Record<string, unknown>> {
-  /** The node object containing the property to edit */
-  node: T;
-  /** Callback when the node should be updated */
-  onNodeChange: (node: T) => void;
-  /** The property key on the node to read/write */
-  property: keyof T;
-  /** Transform the node property value to a string for display */
-  valueToString?: (value: T[keyof T]) => string;
-  /** Transform the string input back to the node property type */
-  stringToValue?: (value: string) => T[keyof T];
-  /** Input type */
-  type?: "text" | "number";
-  /** Step increment for number type */
-  typeNumberStepIncrement?: number;
-  /** Icon to display */
-  icon?: React.ReactNode;
-  /** Accessible label */
-  label: string;
-  /** Validation schema */
-  validator?: Schema.Decoder<string>;
-  /** Additional class names */
-  className?: string;
-}
-
-/**
- * Node-aware TextInput wrapper.
- * Provides convenient props for working with node objects in the designer panels.
- */
-export function NodeTextInput<T extends Record<string, unknown>>({
-  node,
-  onNodeChange,
-  property,
-  valueToString = (v) => String(v),
-  stringToValue = (v) => v as T[keyof T],
-  type = "text",
-  typeNumberStepIncrement = 1,
-  icon,
-  label,
-  validator = S.String,
-  className,
-}: NodeTextInputProps<T>) {
-  const value = valueToString(node[property]);
-
-  const handleChange = (newValue: string) => {
-    onNodeChange({
-      ...node,
-      [property]: stringToValue(newValue),
-    });
-  };
-
-  return (
-    <BaseTextInput
-      className={className}
-      icon={icon}
-      label={label}
-      onChange={handleChange}
-      type={type}
-      typeNumberStepIncrement={typeNumberStepIncrement}
-      validator={validator}
-      value={value}
-    />
-  );
-}
-
-/**
- * Re-export the base TextInput for direct usage when node logic is not needed.
- */
-export { BaseTextInput as TextInput };
-export type { BaseTextInputProps as TextInputProps };
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx
deleted file mode 100644
index 55635b2c1..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/inputs/width-input.tsx
+++ /dev/null
@@ -1,50 +0,0 @@
-import type { AlignItems, FlexDirection } from "@voidhash/mimic-schema";
-
-import { DimensionField } from "@/features/studio/paywalls/designer/panel-kit/dimension-field";
-
-import type { NodeEditorProps } from "../../types";
-
-type WidthInputProps = NodeEditorProps<
-  "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
-> & {
-  disabled?: boolean;
-  parentDirection: FlexDirection;
-  parentAlignItems?: AlignItems;
-  computedWidth?: number | null;
-  onDraftChange?: (
-    node: NodeEditorProps<
-      "width" | "height" | "flex" | "flexGrow" | "flexShrink" | "flexBasis" | "alignSelf"
-    >["node"],
-  ) => void;
-  onCommit?: () => void;
-};
-
-/**
- * Width-axis specialization of {@link DimensionField}. Kept as a thin wrapper so
- * the flex-layout and shape-layout sections keep their existing call sites
- * (`computedWidth` prop name) while the shared logic lives in the kit.
- */
-export function WidthInput({
-  node,
-  onNodeChange,
-  disabled = false,
-  parentDirection,
-  parentAlignItems,
-  computedWidth,
-  onDraftChange,
-  onCommit,
-}: WidthInputProps) {
-  return (
-    <DimensionField
-      axis="width"
-      computed={computedWidth}
-      disabled={disabled}
-      node={node}
-      onCommit={onCommit}
-      onDraftChange={onDraftChange}
-      onNodeChange={onNodeChange}
-      parentAlignItems={parentAlignItems}
-      parentDirection={parentDirection}
-    />
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts
index 7a2c8c81d..f5aedc8cb 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.test.ts
@@ -1,41 +1,22 @@
 import { describe, expect, test } from "vite-plus/test";
 
-import { MIGRATED, PANEL_REGISTRY } from "./panel-registry";
+import { PANEL_REGISTRY } from "./panel-registry";
 
-/**
- * Phase 2 completeness lock: every built-in section is migrated. After the final
- * batch (componentSettings + componentActions), the ONLY non-`builtin` entry is
- * `componentProps` (the Phase 3 component-panel slot); every other entry (all 14
- * built-in sections) is a `builtin` with a filled `definition` AND is present in
- * `MIGRATED`.
- */
-describe("panel-registry — Phase 2 completeness", () => {
-  test("every entry except componentProps is a builtin with a definition and is MIGRATED", () => {
+describe("panel registry", () => {
+  test("every entry except componentProps has a built-in definition", () => {
     for (const entry of PANEL_REGISTRY) {
       if (entry.id === "componentProps") continue;
       expect(entry.source.kind).toBe("builtin");
-      // `definition` only exists on the builtin variant — narrow before reading.
-      expect(entry.source.kind === "builtin" && entry.source.definition !== undefined).toBe(true);
-      expect(MIGRATED.has(entry.id)).toBe(true);
+      expect(entry.source.kind === "builtin" && typeof entry.source.definition === "function").toBe(
+        true,
+      );
     }
   });
 
-  test("componentProps is the component-panel slot (not migrated, multi-selectable)", () => {
+  test("componentProps uses the component panel host and supports multi-selection", () => {
     const componentProps = PANEL_REGISTRY.find((entry) => entry.id === "componentProps");
     expect(componentProps).toBeDefined();
     expect(componentProps!.source.kind).toBe("component-panel");
-    expect(MIGRATED.has("componentProps")).toBe(false);
-    // Phase 3b: the slot batch-edits a homogeneous component multi-selection.
     expect(componentProps!.multiSelectable).toBe(true);
   });
-
-  test("MIGRATED contains exactly the built-in section ids (all but componentProps)", () => {
-    const builtinIds = PANEL_REGISTRY.filter((entry) => entry.id !== "componentProps").map(
-      (entry) => entry.id,
-    );
-    // Every built-in section is migrated, and MIGRATED holds nothing else.
-    expect(MIGRATED.size).toBe(builtinIds.length);
-    expect(builtinIds.every((id) => MIGRATED.has(id))).toBe(true);
-    expect([...MIGRATED].every((id) => builtinIds.includes(id))).toBe(true);
-  });
 });
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts
index d2a66b24b..d2d4bc7f1 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-registry.ts
@@ -1,5 +1,5 @@
-import type { PanelRender, PanelWrap } from "../../panel-runtime/in-process-transport";
-import type { EditableNodeType, SectionId } from "../types";
+import type { PanelRender } from "../../panel-runtime/in-process-transport";
+import type { EditableNodeType } from "../types";
 import { BorderPanel } from "./definitions/border-panel";
 import { BorderRadiusPanel } from "./definitions/border-radius-panel";
 import { ComponentActionsPanel } from "./definitions/component-actions-panel";
@@ -18,31 +18,42 @@ import { TypographyPanel } from "./definitions/typography-panel";
 import { VariablesPanel } from "./definitions/variables-panel";
 
 /**
- * The engine + payload that backs one registered panel. A `builtin` panel runs a
- * trusted definition in-process; its `definition` is OPTIONAL now (Phase 2 fills
- * one per migrated section — until then the entry falls back to the old section
- * component). A `component-panel` panel is authored as a code component and runs
- * in the Phase 3 sandbox.
+ * The engine and payload backing a registered panel. Built-in panels run trusted
+ * definitions in process; component panels run authored code in the sandbox.
  */
 export type PanelSourceSpec =
   | {
       readonly kind: "builtin";
-      /** The panel definition `(ctx) => ReactNode` (filled per section in Phase 2). */
-      readonly definition?: PanelRender;
-      /** Optional provider re-wrap inside the reconciler root (rarely per-section). */
-      readonly wrap?: PanelWrap;
+      /** The panel definition `(ctx) => ReactNode`. */
+      readonly definition: PanelRender;
     }
   | { readonly kind: "component-panel" };
 
+/** Stable identifiers for panels in the right-panel registry. */
+export type PanelId =
+  | "variables"
+  | "states"
+  | "position"
+  | "flexLayout"
+  | "shapeLayout"
+  | "borderRadius"
+  | "fill"
+  | "border"
+  | "interactions"
+  | "scrollViewSettings"
+  | "typography"
+  | "textFill"
+  | "pathFill"
+  | "pathStroke"
+  | "componentSettings"
+  | "componentProps"
+  | "componentActions";
+
 /**
- * A registered right-panel entry. Mirrors {@link SectionRegistryEntry} 1:1
- * (id/supportedNodeTypes/order/multiSelectable — same applicability semantics)
- * and adds the {@link PanelSourceSpec} that decides how the panel is rendered
- * behind the v2 flag. When the flag is off, {@link ../dynamic-panel.DynamicPanel}
- * renders the legacy section instead and this registry is unused.
+ * A registered right-panel entry and its applicability and rendering source.
  */
 export interface PanelRegistryEntry {
-  readonly id: SectionId;
+  readonly id: PanelId;
   readonly supportedNodeTypes: EditableNodeType[];
   readonly order: number;
   readonly multiSelectable: boolean;
@@ -50,11 +61,8 @@ export interface PanelRegistryEntry {
 }
 
 /**
- * The right-panel registry. Entries are copied VERBATIM from
- * `section-registry.ts` (ids/order/supportedNodeTypes/multiSelectable) so
- * applicability is byte-identical; only the `source` field is new. Every entry
- * is `builtin` (with an as-yet-empty `definition`) except `componentProps`,
- * which is a `component-panel` (its editor is authored as a code component).
+ * The right-panel registry. Every entry uses a built-in definition except
+ * `componentProps`, whose editor is authored as a code component.
  */
 export const PANEL_REGISTRY: PanelRegistryEntry[] = [
   {
@@ -166,8 +174,7 @@ export const PANEL_REGISTRY: PanelRegistryEntry[] = [
     id: "componentProps",
     supportedNodeTypes: ["component"],
     order: 13,
-    // Phase 3b: the component-panel slot batch-edits a homogeneous multi-selection
-    // of the same component (same identity key), so it participates in multi-select.
+    // The component panel batch-edits homogeneous selections sharing an identity.
     multiSelectable: true,
     source: { kind: "component-panel" },
   },
@@ -181,35 +188,8 @@ export const PANEL_REGISTRY: PanelRegistryEntry[] = [
 ];
 
 /**
- * The set of sections whose built-in `definition` is ready to render through the
- * v2 host. Phase 2 is COMPLETE: this holds every built-in section (all but
- * `componentProps`, the Phase 3 component-panel slot). When the flag is on, the
- * stack renders each through {@link ../builtin-panel-host.BuiltinPanelHost}
- * instead of the legacy section.
- */
-export const MIGRATED: ReadonlySet<SectionId> = new Set<SectionId>([
-  "borderRadius",
-  "border",
-  "typography",
-  "pathFill",
-  "pathStroke",
-  "textFill",
-  "position",
-  "flexLayout",
-  "shapeLayout",
-  "fill",
-  "states",
-  "variables",
-  "interactions",
-  "scrollViewSettings",
-  "componentSettings",
-  "componentActions",
-]);
-
-/**
- * Returns the registered panels applicable to the given node types, mirroring
- * `getSharedSections` exactly: a panel is included only when ALL node types are
- * in its `supportedNodeTypes` ("every", not "any"); when `isMulti`, panels with
+ * Returns registered panels applicable to the given node types. A panel is
+ * included only when all node types are supported; when `isMulti`, panels with
  * `multiSelectable: false` are excluded. Results are sorted by `order`.
  */
 export function getSharedPanels(
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx
index 3dd66e2d3..c99e82ea1 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/panel-stack.tsx
@@ -1,18 +1,8 @@
 "use client";
 
 /**
- * The flag gate between the legacy right panel ({@link DynamicPanel}) and the v2
- * host-rendered panel stack. The flag lives at
- * `localStorage["voidhash.designer.panelsV2"]` (`off` | `on` | `both`), with a
- * `?panelsV2=` URL query overriding it (read once per mount). DEFAULT is `off`,
- * so production is byte-identical to before this phase.
- *
- * - `off`  → render {@link DynamicPanel} EXACTLY (the default path).
- * - `on`   → the v2 stack: the component warnings block, then per applicable
- *            panel, a {@link BuiltinPanelHost} when the panel is MIGRATED and has
- *            a built-in `definition`, else the legacy {@link Section} (reused
- *            verbatim so unmigrated sections render identically).
- * - `both` → the legacy panel and the v2 stack, stacked, for visual diffing.
+ * Renders the host-driven right panel stack for the current selection. Built-in
+ * panels run in process; component property panels use the component panel host.
  */
 import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
 
@@ -20,36 +10,12 @@ import { isEditableNodeType } from "../../state/actions";
 import type { EditableNodeType } from "../../state/actions";
 import { BuiltinPanelHost } from "./builtin-panel-host";
 import { ComponentPanelHost } from "./component-panel-host";
-import { DynamicPanel, Section } from "./dynamic-panel";
-import { getSharedPanels, MIGRATED } from "./panel-registry";
-import { ComponentWarningsBlock } from "./sections/component-warnings";
+import { ComponentWarningsBlock } from "./components/component-warnings";
+import { getSharedPanels } from "./panel-registry";
 
-type PanelsV2Flag = "off" | "on" | "both";
-
-/**
- * Reads the v2 flag: the `?panelsV2=` URL query wins, else
- * `localStorage["voidhash.designer.panelsV2"]`, else `off`. Read once per mount
- * (a stale value until reload is fine — this is a developer flag).
- */
-function readPanelsV2Flag(): PanelsV2Flag {
-  const normalize = (value: string | null | undefined): PanelsV2Flag | null =>
-    value === "on" || value === "off" || value === "both" ? value : null;
-  if (typeof window === "undefined") return "off";
-  try {
-    const fromUrl = normalize(new URLSearchParams(window.location.search).get("panelsV2"));
-    if (fromUrl) return fromUrl;
-    return normalize(window.localStorage.getItem("voidhash.designer.panelsV2")) ?? "off";
-  } catch {
-    return "off";
-  }
-}
+export function PanelStack({ nodes }: { nodes: SnapshotNode[] }) {
+  if (nodes.length === 0) return null;
 
-/**
- * The v2 stack body: the component warnings block (same single-component rule as
- * the legacy panel), then each applicable panel rendered through the v2 host when
- * migrated, or the legacy section otherwise.
- */
-function PanelStackV2({ nodes }: { nodes: SnapshotNode[] }) {
   const nodeTypes = [
     ...new Set(
       nodes.map((n) => n.type).filter((t): t is EditableNodeType => isEditableNodeType(t)),
@@ -66,51 +32,17 @@ function PanelStackV2({ nodes }: { nodes: SnapshotNode[] }) {
     <>
       {singleComponentNode && <ComponentWarningsBlock nodeId={singleComponentNode.id} />}
       {panels.map((panel) => {
-        if (
-          panel.source.kind === "builtin" &&
-          panel.source.definition &&
-          MIGRATED.has(panel.id)
-        ) {
+        if (panel.source.kind === "builtin") {
           return (
             <BuiltinPanelHost
               definition={panel.source.definition}
               key={panel.id}
-              sectionId={panel.id}
               selection={{ nodeIds }}
             />
           );
         }
-        // The component-panel slot (Phase 3b): host-rendered default panel or a
-        // sandboxed custom session, batch-editing the selected component nodes.
-        if (panel.source.kind === "component-panel") {
-          return <ComponentPanelHost key={panel.id} nodes={nodes} />;
-        }
-        // Any remaining unmigrated section renders through the reused per-section
-        // switch so the fallback is byte-identical to the flag-off panel.
-        return <Section key={panel.id} nodes={nodes} sectionId={panel.id} />;
+        return <ComponentPanelHost key={panel.id} nodes={nodes} />;
       })}
     </>
   );
 }
-
-/**
- * The right-panel content, gated by the v2 flag. With the flag off (default) it
- * renders {@link DynamicPanel} exactly — zero behavior change in production.
- */
-export function PanelStack({ nodes }: { nodes: SnapshotNode[] }) {
-  if (nodes.length === 0) return null;
-  const flag = readPanelsV2Flag();
-
-  if (flag === "off") {
-    return <DynamicPanel nodes={nodes} />;
-  }
-  if (flag === "both") {
-    return (
-      <>
-        <DynamicPanel nodes={nodes} />
-        <PanelStackV2 nodes={nodes} />
-      </>
-    );
-  }
-  return <PanelStackV2 nodes={nodes} />;
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts
deleted file mode 100644
index ff1739b40..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/section-registry.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-import type { EditableNodeType, SectionRegistryEntry } from "../types";
-
-const SECTION_REGISTRY: SectionRegistryEntry[] = [
-  {
-    id: "variables",
-    supportedNodeTypes: ["screen", "view", "scrollView", "text", "shape", "path"],
-    order: 0,
-    multiSelectable: false,
-  },
-  {
-    id: "states",
-    supportedNodeTypes: ["screen", "view", "scrollView", "text", "shape", "path"],
-    order: 1,
-    multiSelectable: false,
-  },
-  {
-    id: "scrollViewSettings",
-    supportedNodeTypes: ["scrollView"],
-    order: 2,
-    multiSelectable: true,
-  },
-  {
-    id: "position",
-    supportedNodeTypes: ["view", "scrollView", "text"],
-    order: 2,
-    multiSelectable: true,
-  },
-  {
-    id: "flexLayout",
-    supportedNodeTypes: ["screen", "view", "scrollView"],
-    order: 3,
-    multiSelectable: true,
-  },
-  {
-    id: "shapeLayout",
-    supportedNodeTypes: ["shape"],
-    order: 3,
-    multiSelectable: false,
-  },
-  {
-    id: "borderRadius",
-    supportedNodeTypes: ["view", "scrollView"],
-    order: 4,
-    multiSelectable: true,
-  },
-  {
-    id: "fill",
-    supportedNodeTypes: ["screen", "view", "scrollView"],
-    order: 5,
-    multiSelectable: true,
-  },
-  {
-    id: "border",
-    supportedNodeTypes: ["view", "scrollView"],
-    order: 6,
-    multiSelectable: true,
-  },
-  {
-    id: "interactions",
-    supportedNodeTypes: ["view", "scrollView"],
-    order: 7,
-    multiSelectable: true,
-  },
-  {
-    id: "content",
-    supportedNodeTypes: ["text"],
-    order: 8,
-    multiSelectable: false,
-  },
-  {
-    id: "typography",
-    supportedNodeTypes: ["text"],
-    order: 8,
-    multiSelectable: true,
-  },
-  {
-    id: "textFill",
-    supportedNodeTypes: ["text"],
-    order: 9,
-    multiSelectable: true,
-  },
-  {
-    id: "pathFill",
-    supportedNodeTypes: ["path"],
-    order: 10,
-    multiSelectable: true,
-  },
-  {
-    id: "pathStroke",
-    supportedNodeTypes: ["path"],
-    order: 11,
-    multiSelectable: true,
-  },
-  {
-    id: "componentSettings",
-    supportedNodeTypes: ["component"],
-    order: 12,
-    multiSelectable: false,
-  },
-  {
-    id: "componentProps",
-    supportedNodeTypes: ["component"],
-    order: 13,
-    multiSelectable: false,
-  },
-  {
-    id: "componentActions",
-    supportedNodeTypes: ["component"],
-    order: 14,
-    multiSelectable: false,
-  },
-];
-
-/**
- * Returns sections applicable to the given set of node types.
- * A section is included only if ALL node types are in its supportedNodeTypes.
- * When isMulti is true, sections with multiSelectable=false are excluded.
- */
-export function getSharedSections(
-  nodeTypes: EditableNodeType[],
-  isMulti: boolean,
-): SectionRegistryEntry[] {
-  return SECTION_REGISTRY.filter((entry) => {
-    if (isMulti && !entry.multiSelectable) return false;
-    return nodeTypes.every((t) => entry.supportedNodeTypes.includes(t));
-  }).sort((a, b) => a.order - b.order);
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx
deleted file mode 100644
index 564b1242f..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/action-editor.tsx
+++ /dev/null
@@ -1 +0,0 @@
-export * from "@/features/studio/paywalls/designer/panel-kit/action-editor";
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx
deleted file mode 100644
index 8c461aecd..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-radius-section.tsx
+++ /dev/null
@@ -1,325 +0,0 @@
-"use client";
-
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { Schema } from "effect";
-import { FullscreenIcon, ScanIcon, SquareRoundCorner, VaultIcon } from "lucide-react";
-import { useCallback, useState } from "react";
-
-import { Button } from "@voidhash/ui";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-  PanelSubSection,
-  PanelSubSectionContent,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { updateBorderRadiusStyle } from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { OverrideResetAffordance } from "../components/override-reset-affordance";
-import { TextInput } from "../inputs/text-input";
-import { useStyleTargets } from "../utils/get-style-targets";
-import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
-
-type BorderRadiusNode = {
-  borderTopLeftRadius: number;
-  borderTopRightRadius: number;
-  borderBottomRightRadius: number;
-  borderBottomLeftRadius: number;
-};
-
-function shouldShowIndividualBorderRadius(node: BorderRadiusNode) {
-  return (
-    node.borderTopLeftRadius !== node.borderTopRightRadius ||
-    node.borderTopLeftRadius !== node.borderBottomRightRadius ||
-    node.borderTopLeftRadius !== node.borderBottomLeftRadius ||
-    node.borderTopRightRadius !== node.borderBottomRightRadius ||
-    node.borderTopRightRadius !== node.borderBottomLeftRadius ||
-    node.borderBottomRightRadius !== node.borderBottomLeftRadius
-  );
-}
-
-export function BorderRadiusSection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets, mixedKeys } = useStyleTargets(nodes);
-  const overrideReset = useStyleOverrideResetContext(nodes);
-  const { draft, begin, commit } = useDesignerDraft(store);
-  const borderRadiusAllKeys = [
-    "borderTopLeftRadius",
-    "borderTopRightRadius",
-    "borderBottomRightRadius",
-    "borderBottomLeftRadius",
-  ] as const;
-  const borderTopLeftRadiusKeys = ["borderTopLeftRadius"] as const;
-  const borderTopRightRadiusKeys = ["borderTopRightRadius"] as const;
-  const borderBottomLeftRadiusKeys = ["borderBottomLeftRadius"] as const;
-  const borderBottomRightRadiusKeys = ["borderBottomRightRadius"] as const;
-
-  const [showIndividualBorderRadius, setShowIndividualBorderRadius] = useState(() => {
-    if (!style) return false;
-    if (
-      mixedKeys.has("borderTopLeftRadius") ||
-      mixedKeys.has("borderTopRightRadius") ||
-      mixedKeys.has("borderBottomRightRadius") ||
-      mixedKeys.has("borderBottomLeftRadius")
-    ) {
-      return true;
-    }
-    return shouldShowIndividualBorderRadius(style as BorderRadiusNode);
-  });
-
-  const node = style as BorderRadiusNode | null;
-  const showBorderRadiusAllReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderRadiusAllKeys);
-  const showBorderRadiusTopLeftReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderTopLeftRadiusKeys);
-  const showBorderRadiusTopRightReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderTopRightRadiusKeys);
-  const showBorderRadiusBottomLeftReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderBottomLeftRadiusKeys);
-  const showBorderRadiusBottomRightReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderBottomRightRadiusKeys);
-
-  const handleChange = useCallback(
-    (incoming: Partial<BorderRadiusNode>) => {
-      dispatch(updateBorderRadiusStyle)({ nodes: targets, style: incoming });
-    },
-    [dispatch, targets],
-  );
-
-  const handleDraftChange = useCallback(
-    (incoming: Partial<BorderRadiusNode>) => {
-      if (!draft) begin();
-      dispatch(updateBorderRadiusStyle)({ nodes: targets, style: incoming });
-    },
-    [draft, begin, dispatch, targets],
-  );
-
-  const handleCommit = useCallback(() => {
-    commit();
-  }, [commit]);
-
-  const expandBorderRadius = () => {
-    setShowIndividualBorderRadius(true);
-  };
-
-  const collapseBorderRadius = () => {
-    if (!node) return;
-    setShowIndividualBorderRadius(false);
-    const allCornersValue = node.borderTopLeftRadius;
-    handleChange({
-      borderTopLeftRadius: allCornersValue,
-      borderTopRightRadius: allCornersValue,
-      borderBottomRightRadius: allCornersValue,
-      borderBottomLeftRadius: allCornersValue,
-    });
-  };
-
-  if (!node) return null;
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Border Radius</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <PanelSubSection>
-          <PanelSubSectionContent>
-            <div className="flex flex-row gap-2">
-              {!showIndividualBorderRadius && (
-                <OverrideResetAffordance
-                  className="flex-1"
-                  label="border radius"
-                  onReset={() =>
-                    handleChange(
-                      overrideReset.buildResetPatch(
-                        borderRadiusAllKeys,
-                      ) as Partial<BorderRadiusNode>,
-                    )
-                  }
-                  show={showBorderRadiusAllReset}
-                >
-                  <TextInput
-                    icon={<ScanIcon className="size-3.5" />}
-                    label="Radius"
-                    mixed={
-                      mixedKeys.has("borderTopLeftRadius") ||
-                      mixedKeys.has("borderTopRightRadius") ||
-                      mixedKeys.has("borderBottomRightRadius") ||
-                      mixedKeys.has("borderBottomLeftRadius")
-                    }
-                    minValue={0}
-                    maxValue={100}
-                    onChange={(value) => {
-                      const numValue = Number(value);
-                      handleDraftChange({
-                        borderTopLeftRadius: numValue,
-                        borderTopRightRadius: numValue,
-                        borderBottomRightRadius: numValue,
-                        borderBottomLeftRadius: numValue,
-                      });
-                    }}
-                    onCommit={handleCommit}
-                    type="number"
-                    typeNumberStepIncrement={1}
-                    validator={Schema.String}
-                    value={node.borderTopLeftRadius.toString()}
-                  />
-                </OverrideResetAffordance>
-              )}
-
-              {showIndividualBorderRadius && (
-                <div className="flex flex-col gap-2">
-                  <div className="flex flex-row gap-2">
-                    <OverrideResetAffordance
-                      className="flex-1"
-                      label="top left border radius"
-                      onReset={() =>
-                        handleChange(
-                          overrideReset.buildResetPatch(
-                            borderTopLeftRadiusKeys,
-                          ) as Partial<BorderRadiusNode>,
-                        )
-                      }
-                      show={showBorderRadiusTopLeftReset}
-                    >
-                      <TextInput
-                        icon={<SquareRoundCorner className="-scale-x-100 size-3.5" />}
-                        label="Top Left"
-                        mixed={mixedKeys.has("borderTopLeftRadius")}
-                        minValue={0}
-                        maxValue={100}
-                        onChange={(value) =>
-                          handleDraftChange({
-                            borderTopLeftRadius: Number(value),
-                          })
-                        }
-                        onCommit={handleCommit}
-                        type="number"
-                        typeNumberStepIncrement={1}
-                        validator={Schema.String}
-                        value={node.borderTopLeftRadius.toString()}
-                      />
-                    </OverrideResetAffordance>
-                    <OverrideResetAffordance
-                      className="flex-1"
-                      label="top right border radius"
-                      onReset={() =>
-                        handleChange(
-                          overrideReset.buildResetPatch(
-                            borderTopRightRadiusKeys,
-                          ) as Partial<BorderRadiusNode>,
-                        )
-                      }
-                      show={showBorderRadiusTopRightReset}
-                    >
-                      <TextInput
-                        icon={<SquareRoundCorner className="size-3.5" />}
-                        label="Top Right"
-                        mixed={mixedKeys.has("borderTopRightRadius")}
-                        minValue={0}
-                        maxValue={100}
-                        onChange={(value) =>
-                          handleDraftChange({
-                            borderTopRightRadius: Number(value),
-                          })
-                        }
-                        onCommit={handleCommit}
-                        type="number"
-                        typeNumberStepIncrement={1}
-                        validator={Schema.String}
-                        value={node.borderTopRightRadius.toString()}
-                      />
-                    </OverrideResetAffordance>
-                  </div>
-                  <div className="flex flex-row gap-2">
-                    <OverrideResetAffordance
-                      className="flex-1"
-                      label="bottom left border radius"
-                      onReset={() =>
-                        handleChange(
-                          overrideReset.buildResetPatch(
-                            borderBottomLeftRadiusKeys,
-                          ) as Partial<BorderRadiusNode>,
-                        )
-                      }
-                      show={showBorderRadiusBottomLeftReset}
-                    >
-                      <TextInput
-                        icon={<SquareRoundCorner className="rotate-180 size-3.5" />}
-                        label="Bottom Left"
-                        mixed={mixedKeys.has("borderBottomLeftRadius")}
-                        minValue={0}
-                        maxValue={100}
-                        onChange={(value) =>
-                          handleDraftChange({
-                            borderBottomLeftRadius: Number(value),
-                          })
-                        }
-                        onCommit={handleCommit}
-                        type="number"
-                        typeNumberStepIncrement={1}
-                        validator={Schema.String}
-                        value={node.borderBottomLeftRadius.toString()}
-                      />
-                    </OverrideResetAffordance>
-                    <OverrideResetAffordance
-                      className="flex-1"
-                      label="bottom right border radius"
-                      onReset={() =>
-                        handleChange(
-                          overrideReset.buildResetPatch(
-                            borderBottomRightRadiusKeys,
-                          ) as Partial<BorderRadiusNode>,
-                        )
-                      }
-                      show={showBorderRadiusBottomRightReset}
-                    >
-                      <TextInput
-                        icon={<SquareRoundCorner className="rotate-180 -scale-x-100  size-3.5" />}
-                        label="Bottom Right"
-                        mixed={mixedKeys.has("borderBottomRightRadius")}
-                        minValue={0}
-                        maxValue={100}
-                        onChange={(value) =>
-                          handleDraftChange({
-                            borderBottomRightRadius: Number(value),
-                          })
-                        }
-                        onCommit={handleCommit}
-                        type="number"
-                        typeNumberStepIncrement={1}
-                        validator={Schema.String}
-                        value={node.borderBottomRightRadius.toString()}
-                      />
-                    </OverrideResetAffordance>
-                  </div>
-                </div>
-              )}
-
-              <Button
-                size="icon-sm"
-                variant="secondary"
-                onClick={() =>
-                  showIndividualBorderRadius ? collapseBorderRadius() : expandBorderRadius()
-                }
-              >
-                {showIndividualBorderRadius ? (
-                  <VaultIcon className="size-3.5" />
-                ) : (
-                  <FullscreenIcon className="size-3.5" />
-                )}
-              </Button>
-            </div>
-          </PanelSubSectionContent>
-        </PanelSubSection>
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx
deleted file mode 100644
index a560464c4..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/border-section.tsx
+++ /dev/null
@@ -1,406 +0,0 @@
-"use client";
-
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { Schema } from "effect";
-import {
-  FullscreenIcon,
-  MinusIcon,
-  PlusIcon,
-  SquareDashedTopSolidIcon,
-  SquareIcon,
-  VaultIcon,
-} from "lucide-react";
-import { useCallback, useState } from "react";
-
-import { Button } from "@voidhash/ui";
-import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-  PanelSubSection,
-  PanelSubSectionContent,
-  PanelSubSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { updateBorderStyle } from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { OverrideResetAffordance } from "../components/override-reset-affordance";
-import { TextInput } from "../inputs/text-input";
-import { useStyleTargets } from "../utils/get-style-targets";
-import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
-
-type BorderNode = {
-  borderTopWidth: number;
-  borderRightWidth: number;
-  borderBottomWidth: number;
-  borderLeftWidth: number;
-  borderColor: string;
-  borderStyle: string;
-  borderEnabled: boolean;
-};
-
-function shouldShowIndividualBorder(node: BorderNode) {
-  return (
-    node.borderTopWidth !== node.borderBottomWidth ||
-    node.borderTopWidth !== node.borderLeftWidth ||
-    node.borderTopWidth !== node.borderRightWidth ||
-    node.borderBottomWidth !== node.borderLeftWidth ||
-    node.borderBottomWidth !== node.borderRightWidth ||
-    node.borderLeftWidth !== node.borderRightWidth
-  );
-}
-
-export function BorderSection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets, mixedKeys } = useStyleTargets(nodes);
-  const overrideReset = useStyleOverrideResetContext(nodes);
-  const { draft, begin, commit, discard } = useDesignerDraft(store);
-  const isBorderEnabledMixed = mixedKeys.has("borderEnabled");
-  const borderEnabledKeys = ["borderEnabled"] as const;
-  const borderWidthAllKeys = [
-    "borderTopWidth",
-    "borderRightWidth",
-    "borderBottomWidth",
-    "borderLeftWidth",
-  ] as const;
-  const borderLeftWidthKeys = ["borderLeftWidth"] as const;
-  const borderTopWidthKeys = ["borderTopWidth"] as const;
-  const borderRightWidthKeys = ["borderRightWidth"] as const;
-  const borderBottomWidthKeys = ["borderBottomWidth"] as const;
-  const borderColorKeys = ["borderColor"] as const;
-  const borderRelatedKeys = [
-    "borderEnabled",
-    "borderTopWidth",
-    "borderRightWidth",
-    "borderBottomWidth",
-    "borderLeftWidth",
-    "borderColor",
-  ] as const;
-
-  const [showIndividualBorder, setShowIndividualBorder] = useState(() => {
-    if (!style) return false;
-    return shouldShowIndividualBorder(style as BorderNode);
-  });
-
-  const node = style as BorderNode | null;
-  const showBorderEnabledReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(borderEnabledKeys);
-  const showBorderWidthAllReset =
-    !showBorderEnabledReset &&
-    overrideReset.isOverrideModeActive &&
-    overrideReset.hasOverride(borderWidthAllKeys);
-  const showBorderWidthLeftReset =
-    !showBorderEnabledReset &&
-    overrideReset.isOverrideModeActive &&
-    overrideReset.hasOverride(borderLeftWidthKeys);
-  const showBorderWidthTopReset =
-    !showBorderEnabledReset &&
-    overrideReset.isOverrideModeActive &&
-    overrideReset.hasOverride(borderTopWidthKeys);
-  const showBorderWidthRightReset =
-    !showBorderEnabledReset &&
-    overrideReset.isOverrideModeActive &&
-    overrideReset.hasOverride(borderRightWidthKeys);
-  const showBorderWidthBottomReset =
-    !showBorderEnabledReset &&
-    overrideReset.isOverrideModeActive &&
-    overrideReset.hasOverride(borderBottomWidthKeys);
-  const showBorderColorReset =
-    !showBorderEnabledReset &&
-    overrideReset.isOverrideModeActive &&
-    overrideReset.hasOverride(borderColorKeys);
-
-  const handleChange = useCallback(
-    (incoming: Partial<BorderNode>) => {
-      dispatch(updateBorderStyle)({ nodes: targets, style: incoming });
-    },
-    [dispatch, targets],
-  );
-
-  const handleDraftChange = useCallback(
-    (incoming: Partial<BorderNode>) => {
-      if (!draft) begin();
-      dispatch(updateBorderStyle)({ nodes: targets, style: incoming });
-    },
-    [draft, begin, dispatch, targets],
-  );
-
-  const handleCommit = useCallback(() => {
-    commit();
-  }, [commit]);
-
-  const expandBorder = () => {
-    setShowIndividualBorder(true);
-  };
-
-  const collapseBorder = () => {
-    if (!node) return;
-    setShowIndividualBorder(false);
-    const allSidesValue = node.borderTopWidth;
-    handleChange({
-      borderLeftWidth: allSidesValue,
-      borderRightWidth: allSidesValue,
-      borderTopWidth: allSidesValue,
-      borderBottomWidth: allSidesValue,
-    });
-  };
-
-  if (!node) return null;
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Border</PanelSectionTitle>
-        <PanelSectionHeaderActions>
-          {!node.borderEnabled && !isBorderEnabledMixed && (
-            <OverrideResetAffordance
-              label="border enabled"
-              onReset={() =>
-                handleChange(
-                  overrideReset.buildResetPatch(borderRelatedKeys) as Partial<BorderNode>,
-                )
-              }
-              show={showBorderEnabledReset}
-            >
-              <Button
-                onClick={() => handleChange({ borderEnabled: true })}
-                size="icon-sm"
-                variant="secondary"
-              >
-                <PlusIcon />
-              </Button>
-            </OverrideResetAffordance>
-          )}
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      {(node.borderEnabled || isBorderEnabledMixed) && (
-        <PanelSectionContent>
-          <PanelSubSection>
-            <PanelSubSectionTitle>Width</PanelSubSectionTitle>
-            <PanelSubSectionContent>
-              <OverrideResetAffordance
-                label="border enabled"
-                onReset={() =>
-                  handleChange(
-                    overrideReset.buildResetPatch(borderRelatedKeys) as Partial<BorderNode>,
-                  )
-                }
-                show={showBorderEnabledReset}
-              >
-                <div className="flex flex-row gap-2">
-                  {!showIndividualBorder && (
-                    <OverrideResetAffordance
-                      className="flex-1"
-                      label="border width"
-                      onReset={() =>
-                        handleChange(
-                          overrideReset.buildResetPatch(borderWidthAllKeys) as Partial<BorderNode>,
-                        )
-                      }
-                      show={showBorderWidthAllReset}
-                    >
-                      <TextInput
-                        icon={<SquareIcon className="size-3.5" />}
-                        label="Width"
-                        mixed={
-                          mixedKeys.has("borderTopWidth") ||
-                          mixedKeys.has("borderRightWidth") ||
-                          mixedKeys.has("borderBottomWidth") ||
-                          mixedKeys.has("borderLeftWidth")
-                        }
-                        minValue={0}
-                        onChange={(value) => {
-                          const numValue = Number(value);
-                          handleDraftChange({
-                            borderTopWidth: numValue,
-                            borderRightWidth: numValue,
-                            borderBottomWidth: numValue,
-                            borderLeftWidth: numValue,
-                          });
-                        }}
-                        onCommit={handleCommit}
-                        type="number"
-                        typeNumberStepIncrement={1}
-                        validator={Schema.String}
-                        value={node.borderTopWidth.toString()}
-                      />
-                    </OverrideResetAffordance>
-                  )}
-
-                  {showIndividualBorder && (
-                    <div className="flex flex-col gap-2">
-                      <div className="flex flex-row gap-2">
-                        <OverrideResetAffordance
-                          className="flex-1"
-                          label="border left width"
-                          onReset={() =>
-                            handleChange(
-                              overrideReset.buildResetPatch(
-                                borderLeftWidthKeys,
-                              ) as Partial<BorderNode>,
-                            )
-                          }
-                          show={showBorderWidthLeftReset}
-                        >
-                          <TextInput
-                            icon={<SquareDashedTopSolidIcon className="-rotate-90 size-3.5" />}
-                            label="Border Left"
-                            mixed={mixedKeys.has("borderLeftWidth")}
-                            minValue={0}
-                            onChange={(value) =>
-                              handleDraftChange({
-                                borderLeftWidth: Number(value),
-                              })
-                            }
-                            onCommit={handleCommit}
-                            type="number"
-                            typeNumberStepIncrement={1}
-                            validator={Schema.String}
-                            value={node.borderLeftWidth.toString()}
-                          />
-                        </OverrideResetAffordance>
-                        <OverrideResetAffordance
-                          className="flex-1"
-                          label="border top width"
-                          onReset={() =>
-                            handleChange(
-                              overrideReset.buildResetPatch(
-                                borderTopWidthKeys,
-                              ) as Partial<BorderNode>,
-                            )
-                          }
-                          show={showBorderWidthTopReset}
-                        >
-                          <TextInput
-                            icon={<SquareDashedTopSolidIcon className="size-3.5" />}
-                            label="Border Top"
-                            mixed={mixedKeys.has("borderTopWidth")}
-                            minValue={0}
-                            onChange={(value) =>
-                              handleDraftChange({
-                                borderTopWidth: Number(value),
-                              })
-                            }
-                            onCommit={handleCommit}
-                            type="number"
-                            typeNumberStepIncrement={1}
-                            validator={Schema.String}
-                            value={node.borderTopWidth.toString()}
-                          />
-                        </OverrideResetAffordance>
-                      </div>
-                      <div className="flex flex-row gap-2">
-                        <OverrideResetAffordance
-                          className="flex-1"
-                          label="border right width"
-                          onReset={() =>
-                            handleChange(
-                              overrideReset.buildResetPatch(
-                                borderRightWidthKeys,
-                              ) as Partial<BorderNode>,
-                            )
-                          }
-                          show={showBorderWidthRightReset}
-                        >
-                          <TextInput
-                            icon={<SquareDashedTopSolidIcon className="rotate-90 size-3.5" />}
-                            label="Border Right"
-                            mixed={mixedKeys.has("borderRightWidth")}
-                            minValue={0}
-                            onChange={(value) =>
-                              handleDraftChange({
-                                borderRightWidth: Number(value),
-                              })
-                            }
-                            onCommit={handleCommit}
-                            type="number"
-                            typeNumberStepIncrement={1}
-                            validator={Schema.String}
-                            value={node.borderRightWidth.toString()}
-                          />
-                        </OverrideResetAffordance>
-                        <OverrideResetAffordance
-                          className="flex-1"
-                          label="border bottom width"
-                          onReset={() =>
-                            handleChange(
-                              overrideReset.buildResetPatch(
-                                borderBottomWidthKeys,
-                              ) as Partial<BorderNode>,
-                            )
-                          }
-                          show={showBorderWidthBottomReset}
-                        >
-                          <TextInput
-                            icon={<SquareDashedTopSolidIcon className="rotate-180 size-3.5" />}
-                            label="Border Bottom"
-                            mixed={mixedKeys.has("borderBottomWidth")}
-                            minValue={0}
-                            onChange={(value) =>
-                              handleDraftChange({
-                                borderBottomWidth: Number(value),
-                              })
-                            }
-                            onCommit={handleCommit}
-                            type="number"
-                            typeNumberStepIncrement={1}
-                            validator={Schema.String}
-                            value={node.borderBottomWidth.toString()}
-                          />
-                        </OverrideResetAffordance>
-                      </div>
-                    </div>
-                  )}
-
-                  <Button
-                    size="icon-sm"
-                    variant="secondary"
-                    onClick={() => (showIndividualBorder ? collapseBorder() : expandBorder())}
-                  >
-                    {showIndividualBorder ? (
-                      <VaultIcon className="size-3.5" />
-                    ) : (
-                      <FullscreenIcon className="size-3.5" />
-                    )}
-                  </Button>
-
-                  <Button
-                    onClick={() => handleChange({ borderEnabled: false })}
-                    size="icon-sm"
-                    variant="secondary"
-                  >
-                    <MinusIcon />
-                  </Button>
-                </div>
-              </OverrideResetAffordance>
-            </PanelSubSectionContent>
-          </PanelSubSection>
-          <OverrideResetAffordance
-            label="border color"
-            onReset={() =>
-              handleChange(overrideReset.buildResetPatch(borderColorKeys) as Partial<BorderNode>)
-            }
-            show={showBorderColorReset}
-          >
-            <ColorInput
-              mixed={mixedKeys.has("borderColor")}
-              onChange={(value) => handleChange({ borderColor: value })}
-              onCommit={commit}
-              onDiscard={discard}
-              onDragStart={begin}
-              value={node.borderColor}
-            />
-          </OverrideResetAffordance>
-        </PanelSectionContent>
-      )}
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx
deleted file mode 100644
index 2b377ecdf..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-actions-section.tsx
+++ /dev/null
@@ -1,156 +0,0 @@
-"use client";
-
-import type { ComponentAction } from "@voidhash/core/services/paywallDeploys/PaywallDeployManifest";
-import type { ComponentBoundAction } from "@voidhash/mimic-schema";
-import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
-import { ChevronRightIcon } from "lucide-react";
-import { useMemo, useState } from "react";
-import { useStore } from "zustand/react";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
-import { useComponentManifest } from "@/features/studio/paywalls/designer/hooks/use-component-manifest";
-import type { LabeledVariable } from "@/features/studio/paywalls/designer/components/variables/types";
-import {
-  removeComponentActionBinding,
-  setComponentActionBinding,
-} from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-import {
-  collectAncestorVariables,
-  toLabeledVariables,
-} from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
-import {
-  componentBoundActionFromRaw,
-  findComponentActionEntry,
-} from "@/features/studio/paywalls/designer/state/utils/component-prop-values";
-import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
-
-import { ActionEditor, ACTION_TYPE_LABELS } from "@/features/studio/paywalls/designer/panel-kit/action-editor";
-import { PopoverHeader } from "@/features/studio/paywalls/designer/panel-kit/popover-header";
-
-const UNBOUND_ACTION: ComponentBoundAction = { type: "none" };
-
-function ComponentActionRow({
-  node,
-  actionName,
-  manifestAction,
-  variables,
-  productVariables,
-}: {
-  node: ComponentSnapshotNode;
-  actionName: string;
-  manifestAction: ComponentAction;
-  variables: readonly LabeledVariable[];
-  productVariables: readonly LabeledVariable[];
-}) {
-  const dispatch = usePaywallDesignerActions();
-  const [isOpen, setIsOpen] = useState(false);
-
-  const storedEntry = findComponentActionEntry(node.data.actionBindings, actionName);
-  const boundAction =
-    (storedEntry === undefined ? undefined : componentBoundActionFromRaw(storedEntry.raw)) ??
-    UNBOUND_ACTION;
-
-  const payloadFields = useMemo(
-    () => Object.keys(manifestAction.payload),
-    [manifestAction.payload],
-  );
-
-  const handleChange = (action: ComponentBoundAction) => {
-    if (action.type === "none") {
-      if (storedEntry !== undefined) {
-        dispatch(removeComponentActionBinding)({ actionName, nodeId: node.id });
-      }
-      return;
-    }
-    dispatch(setComponentActionBinding)({ action, actionName, nodeId: node.id });
-  };
-
-  return (
-    <Popover onOpenChange={setIsOpen} open={isOpen}>
-      <PopoverTrigger asChild>
-        <Button className="w-full justify-start gap-1 px-2" size="sm" variant="secondary">
-          <span className="text-xs">{actionName}</span>
-          <ChevronRightIcon className="size-3 text-muted-foreground" />
-          <span className="text-muted-foreground text-xs">
-            {ACTION_TYPE_LABELS[boundAction.type]}
-          </span>
-        </Button>
-      </PopoverTrigger>
-      <PopoverContent align="start" className="w-72 p-3" side="left" sideOffset={4}>
-        <PopoverHeader onClose={() => setIsOpen(false)} title={actionName} />
-        <ActionEditor
-          action={boundAction}
-          onChange={handleChange}
-          payloadFields={payloadFields}
-          productVariables={productVariables}
-          variables={variables}
-        />
-      </PopoverContent>
-    </Popover>
-  );
-}
-
-export interface ComponentActionsSectionProps {
-  node: ComponentSnapshotNode;
-}
-
-export function ComponentActionsSection({ node }: ComponentActionsSectionProps) {
-  const store = usePaywallDesignerStore();
-  const documentRoot = useStore(store, selectDocumentRoot);
-
-  const manifest = useComponentManifest(node);
-
-  const variables = useMemo(
-    () => toLabeledVariables(collectAncestorVariables(documentRoot, node.id), node.id),
-    [documentRoot, node.id],
-  );
-
-  const productVariables = useMemo(
-    () => variables.filter((v) => v.value.key === "product"),
-    [variables],
-  );
-
-  const actionEntries = useMemo(() => Object.entries(manifest?.actions ?? {}), [manifest]);
-
-  if (manifest !== undefined && actionEntries.length === 0) {
-    return null;
-  }
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Actions</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        {manifest === undefined ? (
-          <p className="text-muted-foreground text-xs">
-            This version is not in the project catalog, so its actions can&apos;t be bound.
-          </p>
-        ) : (
-          <div className="flex flex-col gap-2">
-            {actionEntries.map(([actionName, manifestAction]) => (
-              <ComponentActionRow
-                actionName={actionName}
-                key={actionName}
-                manifestAction={manifestAction}
-                node={node}
-                productVariables={productVariables}
-                variables={variables}
-              />
-            ))}
-          </div>
-        )}
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx
deleted file mode 100644
index a988f4a4c..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-props-section.tsx
+++ /dev/null
@@ -1,153 +0,0 @@
-"use client";
-
-import { resolveComponentPropValue } from "@voidhash/mimic-schema";
-import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useMemo } from "react";
-import { useStore } from "zustand/react";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
-import { PropFieldRow } from "@/features/studio/paywalls/designer/panel-kit/prop-field-row";
-import { useComponentManifest } from "@/features/studio/paywalls/designer/hooks/use-component-manifest";
-import {
-  removeComponentProp,
-  updateComponentPropBinding,
-  updateComponentPropLocalizedValue,
-} from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-import {
-  collectAncestorVariables,
-  toLabeledVariables,
-} from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
-import {
-  componentPropBindingFromRaw,
-  findComponentPropEntry,
-} from "@/features/studio/paywalls/designer/state/utils/component-prop-values";
-import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
-import {
-  readLocalizableComponentProp,
-  selectDefaultLocale,
-} from "@/features/studio/paywalls/designer/state/utils/localization";
-
-const NO_VARIABLES = [] as const;
-
-export interface ComponentPropsSectionProps {
-  node: ComponentSnapshotNode;
-}
-
-export function ComponentPropsSection({ node }: ComponentPropsSectionProps) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const documentRoot = useStore(store, selectDocumentRoot);
-  const activeLocale = useStore(store, (state) => state.activeLocale);
-  const defaultLocale = useStore(store, selectDefaultLocale);
-
-  const manifest = useComponentManifest(node);
-
-  const variables = useMemo(
-    () => toLabeledVariables(collectAncestorVariables(documentRoot, node.id), node.id),
-    [documentRoot, node.id],
-  );
-
-  const propEntries = useMemo(
-    () => (manifest === undefined ? [] : Object.entries(manifest.props)),
-    [manifest],
-  );
-
-  const localeTag = activeLocale !== null && activeLocale !== defaultLocale ? activeLocale : null;
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Props</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        {manifest === undefined ? (
-          <p className="text-muted-foreground text-xs">
-            This version is not in the project catalog, so its props can&apos;t be edited.
-          </p>
-        ) : propEntries.length === 0 ? (
-          <p className="text-muted-foreground text-xs">This component declares no props.</p>
-        ) : (
-          <div className="flex flex-col gap-2">
-            {propEntries.map(([propName, def]) => {
-              const storedEntry = findComponentPropEntry(node.data.props, propName);
-              const storedBinding =
-                storedEntry === undefined
-                  ? undefined
-                  : componentPropBindingFromRaw(storedEntry.raw);
-
-              // A literal-bound string/image prop marked `.localizable()` edits
-              // the active locale's override instead of the base binding.
-              const isLocalizableKind =
-                (def.kind === "string" || def.kind === "image") && def.localizable === true;
-              const prop = isLocalizableKind
-                ? readLocalizableComponentProp(node, propName)
-                : undefined;
-              if (
-                localeTag !== null &&
-                isLocalizableKind &&
-                prop !== undefined &&
-                prop.value.type === "literal"
-              ) {
-                const resolved = resolveComponentPropValue(prop, localeTag, defaultLocale);
-                const hasOverride = resolved !== prop.value;
-                const resolvedPlain = componentPropBindingFromRaw(resolved);
-                return (
-                  <PropFieldRow
-                    def={def}
-                    key={propName}
-                    localeEditing={{ badge: localeTag, hasOverride }}
-                    onResetProp={(name) =>
-                      dispatch(updateComponentPropLocalizedValue)({
-                        locale: localeTag,
-                        nodeId: node.id,
-                        propName: name,
-                        value: null,
-                      })
-                    }
-                    onSetProp={(name, binding) => {
-                      if (binding.type !== "literal") {
-                        return;
-                      }
-                      dispatch(updateComponentPropLocalizedValue)({
-                        locale: localeTag,
-                        nodeId: node.id,
-                        propName: name,
-                        value: binding.value,
-                      });
-                    }}
-                    propName={propName}
-                    targets={[{ id: node.id, storedBinding: resolvedPlain }]}
-                    variables={NO_VARIABLES}
-                  />
-                );
-              }
-
-              return (
-                <PropFieldRow
-                  def={def}
-                  key={propName}
-                  onResetProp={(name) => dispatch(removeComponentProp)({ nodeId: node.id, propName: name })}
-                  onSetProp={(name, binding) =>
-                    dispatch(updateComponentPropBinding)({ binding, nodeId: node.id, propName: name })
-                  }
-                  propName={propName}
-                  targets={[{ id: node.id, storedBinding }]}
-                  variables={variables}
-                />
-              );
-            })}
-          </div>
-        )}
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx
deleted file mode 100644
index 5d08c5fd5..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/component-section.tsx
+++ /dev/null
@@ -1,293 +0,0 @@
-"use client";
-
-import { getBuiltinComponent } from "@voidhash/paywall-builtins";
-import type { ComponentSnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import {
-  AlertDialog,
-  AlertDialogAction,
-  AlertDialogCancel,
-  AlertDialogContent,
-  AlertDialogDescription,
-  AlertDialogFooter,
-  AlertDialogHeader,
-  AlertDialogTitle,
-  Button,
-  cn,
-} from "@voidhash/ui";
-import { ArrowUpCircleIcon } from "lucide-react";
-import { useMemo, useState } from "react";
-import { useStore } from "zustand/react";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-  PanelSubSection,
-  PanelSubSectionContent,
-  PanelSubSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { TextInput } from "@/features/studio/paywalls/designer/components/ui/text-input";
-import {
-  applyComponentVersionUpdate,
-  setComponentPreviewStateSelection,
-  updateComponentNode,
-} from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-import type { ComponentCatalogVersion } from "@/features/studio/paywalls/designer/state/designer-store-state";
-import type { AncestorVariablesSnapshotNode } from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
-import {
-  collectAncestorVariableIds,
-  validateComponentNode,
-} from "@/features/studio/paywalls/designer/state/utils/component-validation";
-import { componentFileName } from "@/features/studio/paywalls/designer/state/utils/code-components";
-import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
-
-interface VersionUpdatePlan {
-  latest: ComponentCatalogVersion;
-  latestVersion: number;
-  /** Stored props the new manifest no longer declares — removed on confirm. */
-  removedPropNames: string[];
-  /** Remaining warning messages the update would introduce. */
-  warningMessages: string[];
-  resetPreviewState: boolean;
-}
-
-export interface ComponentSectionProps {
-  node: ComponentSnapshotNode;
-}
-
-export function ComponentSection({ node }: ComponentSectionProps) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const [isUpdateDialogOpen, setIsUpdateDialogOpen] = useState(false);
-
-  const components = useStore(store, (state) => state.componentCatalog.components);
-  const byContentHash = useStore(store, (state) => state.componentCatalog.byContentHash);
-  const previewStateSelection = useStore(
-    store,
-    (state) => state.componentPreviewStateSelection[node.id],
-  );
-  const documentRoot: AncestorVariablesSnapshotNode = useStore(store, selectDocumentRoot);
-
-  const isLocal = node.data.componentSource === "local";
-  const isBuiltin = node.data.componentSource === "builtin";
-  // Builtins carry no catalog row and no pinned hash — they resolve from the
-  // static registry by slug; catalog affordances (version/update) never apply.
-  const builtin = isBuiltin ? getBuiltinComponent(node.data.componentSlug) : undefined;
-  const catalogEntry = isBuiltin ? undefined : components[node.data.componentSlug];
-  const pinnedVersion = isBuiltin ? undefined : byContentHash[node.data.contentHash];
-  const previewStates = isBuiltin
-    ? (builtin?.manifest.previewStates ?? [])
-    : (pinnedVersion?.previewStates ?? []);
-  // The "Component" row shows the file basename for a local instance (its slug
-  // sentinel is empty), the registry display name for a builtin, or the catalog
-  // slug for a catalog instance.
-  const componentLabel = isLocal
-    ? componentFileName(node.data.componentPath)
-    : isBuiltin
-      ? (builtin?.name ?? node.data.componentSlug)
-      : node.data.componentSlug;
-
-  const persistedPreviewState = node.data.previewState ?? "default";
-  const effectivePreviewState = previewStateSelection ?? persistedPreviewState;
-
-  const updatePlan = useMemo((): VersionUpdatePlan | null => {
-    if (!catalogEntry || catalogEntry.latestVersion <= node.data.componentVersion) {
-      return null;
-    }
-    const latest = catalogEntry.latest;
-    const availableVariableIds = collectAncestorVariableIds(documentRoot, node.id);
-    const warnings = validateComponentNode(
-      {
-        actionBindings: node.data.actionBindings,
-        children: node.children,
-        contentHash: node.data.contentHash,
-        props: node.data.props,
-      },
-      latest.manifest,
-      availableVariableIds,
-    );
-    const removedPropNames = [
-      ...new Set(
-        warnings
-          .filter((warning) => warning.kind === "unknown-prop")
-          .map((warning) => warning.propName),
-      ),
-    ];
-    const warningMessages = warnings
-      .filter((warning) => warning.kind !== "unknown-prop" && warning.severity === "warning")
-      .map((warning) => warning.message);
-    return {
-      latest,
-      latestVersion: catalogEntry.latestVersion,
-      removedPropNames,
-      resetPreviewState: !latest.previewStates.includes(persistedPreviewState),
-      warningMessages,
-    };
-  }, [catalogEntry, node, documentRoot, persistedPreviewState]);
-
-  const handleNameChange = (name: string) => {
-    dispatch(updateComponentNode)({ id: node.id, updates: { name } });
-  };
-
-  const handleSelectPreviewState = (state: string) => {
-    dispatch(setComponentPreviewStateSelection)({
-      nodeId: node.id,
-      previewState: state === persistedPreviewState ? null : state,
-    });
-  };
-
-  const handlePersistPreviewState = () => {
-    dispatch(updateComponentNode)({
-      id: node.id,
-      updates: { previewState: effectivePreviewState },
-    });
-    dispatch(setComponentPreviewStateSelection)({ nodeId: node.id, previewState: null });
-  };
-
-  const handleConfirmUpdate = () => {
-    if (!updatePlan) {
-      return;
-    }
-    dispatch(applyComponentVersionUpdate)({
-      contentHash: updatePlan.latest.contentHash,
-      dropPropNames: updatePlan.removedPropNames,
-      nodeId: node.id,
-      resetPreviewState: updatePlan.resetPreviewState,
-      version: updatePlan.latestVersion,
-    });
-    dispatch(setComponentPreviewStateSelection)({ nodeId: node.id, previewState: null });
-    setIsUpdateDialogOpen(false);
-  };
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Component</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <div className="flex flex-col gap-2">
-          <div className="flex flex-row items-center gap-2">
-            <span className="min-w-16 text-muted-foreground text-xs">Name</span>
-            <TextInput
-              className="flex-1"
-              label="Name"
-              onChange={handleNameChange}
-              value={node.data.name ?? ""}
-            />
-          </div>
-          <div className="flex flex-row items-center gap-2">
-            <span className="min-w-16 text-muted-foreground text-xs">Component</span>
-            <span className="truncate text-xs">{componentLabel}</span>
-          </div>
-          {!isLocal && !isBuiltin && (
-            <div className="flex flex-row items-center gap-2">
-              <span className="min-w-16 text-muted-foreground text-xs">Version</span>
-              <span className="text-xs">v{node.data.componentVersion}</span>
-              {updatePlan && (
-                <span className="text-[10px] text-muted-foreground">
-                  v{updatePlan.latestVersion} available
-                </span>
-              )}
-            </div>
-          )}
-        </div>
-
-        {updatePlan && (
-          <Button
-            className="w-full"
-            onClick={() => setIsUpdateDialogOpen(true)}
-            size="sm"
-            variant="outline"
-          >
-            <ArrowUpCircleIcon />
-            Update to v{updatePlan.latestVersion}
-          </Button>
-        )}
-
-        {previewStates.length > 1 && (
-          <PanelSubSection>
-            <div className="flex h-7 flex-row items-center justify-between">
-              <PanelSubSectionTitle>Preview state</PanelSubSectionTitle>
-              {effectivePreviewState !== persistedPreviewState && (
-                <Button onClick={handlePersistPreviewState} size="sm" variant="ghost">
-                  Set as default
-                </Button>
-              )}
-            </div>
-            <PanelSubSectionContent>
-              <div className="flex flex-col">
-                {previewStates.map((state) => (
-                  <button
-                    className={cn(
-                      "flex h-7 w-full items-center rounded-sm px-2 text-left font-medium text-xs",
-                      effectivePreviewState === state
-                        ? "bg-accent text-accent-foreground"
-                        : "text-muted-foreground",
-                    )}
-                    key={state}
-                    onClick={() => handleSelectPreviewState(state)}
-                    type="button"
-                  >
-                    {state}
-                    {state === persistedPreviewState && (
-                      <span className="ml-auto text-[10px] text-muted-foreground">default</span>
-                    )}
-                  </button>
-                ))}
-              </div>
-            </PanelSubSectionContent>
-          </PanelSubSection>
-        )}
-      </PanelSectionContent>
-
-      <AlertDialog onOpenChange={setIsUpdateDialogOpen} open={isUpdateDialogOpen}>
-        <AlertDialogContent>
-          <AlertDialogHeader>
-            <AlertDialogTitle>
-              Update {catalogEntry?.title ?? node.data.componentSlug} to v{updatePlan?.latestVersion}
-            </AlertDialogTitle>
-            <AlertDialogDescription asChild>
-              <div className="space-y-2">
-                <p>
-                  This instance is pinned to v{node.data.componentVersion}. Updating re-renders it from
-                  the latest deployed version.
-                </p>
-                {updatePlan && updatePlan.removedPropNames.length > 0 && (
-                  <p className="text-amber-600 text-sm">
-                    Will be removed (no longer declared): {updatePlan.removedPropNames.join(", ")}
-                  </p>
-                )}
-                {updatePlan?.resetPreviewState && (
-                  <p className="text-sm">
-                    The preview state &quot;{persistedPreviewState}&quot; no longer exists and
-                    resets to &quot;default&quot;.
-                  </p>
-                )}
-                {updatePlan?.warningMessages.map((message) => (
-                  <p className="text-amber-600 text-sm" key={message}>
-                    {message}
-                  </p>
-                ))}
-                {updatePlan &&
-                  updatePlan.removedPropNames.length === 0 &&
-                  updatePlan.warningMessages.length === 0 &&
-                  !updatePlan.resetPreviewState && (
-                    <p className="text-sm">All configured props and actions carry over.</p>
-                  )}
-              </div>
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel>Cancel</AlertDialogCancel>
-            <AlertDialogAction onClick={handleConfirmUpdate}>Update</AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx
deleted file mode 100644
index 9ba5780b8..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/content-section.tsx
+++ /dev/null
@@ -1,132 +0,0 @@
-"use client";
-
-import { entryValue } from "@voidhash/mimic-schema";
-import type { TextSnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { Textarea } from "@voidhash/ui";
-import { useState } from "react";
-import { useStore } from "zustand/react";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
-import {
-  updateNodeTranslation,
-  updateTextNode,
-} from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-import { selectDefaultLocale } from "@/features/studio/paywalls/designer/state/utils/localization";
-
-/**
- * Reads the RAW stored override text for a locale (exact tag), or `""` when no
- * override exists. Unlike `resolveText`, this never falls back to the base text
- * — the translation editor shows the empty override as an empty field (with the
- * base text as its placeholder) so an untranslated string is visibly editable.
- */
-function readLocaleOverrideText(data: TextSnapshotNode["data"], locale: string): string {
-  for (const entry of data.localized ?? []) {
-    const value = entryValue(entry);
-    if (value?.locale === locale) {
-      return value.overrides?.text ?? "";
-    }
-  }
-  return "";
-}
-
-/**
- * A commit-on-blur text field seeded from `value`. Local edits stay local until
- * blur, which fires `onCommit` only when the value actually changed. Remount it
- * (via a `key`) to re-seed when the edited target changes.
- */
-function CommitTextarea({
-  value,
-  placeholder,
-  readOnly,
-  onCommit,
-}: {
-  value: string;
-  placeholder?: string;
-  readOnly?: boolean;
-  onCommit: (next: string) => void;
-}) {
-  const [draft, setDraft] = useState(value);
-  return (
-    <Textarea
-      className="min-h-16 text-xs"
-      onBlur={() => {
-        if (!readOnly && draft !== value) {
-          onCommit(draft);
-        }
-      }}
-      onChange={(event) => setDraft(event.target.value)}
-      placeholder={placeholder}
-      readOnly={readOnly}
-      value={draft}
-    />
-  );
-}
-
-export interface ContentSectionProps {
-  node: TextSnapshotNode;
-}
-
-/**
- * Right-panel "Content" section for a text node. In the default locale the base
- * string is editable (writes `updateTextNode`). In a non-default locale the base
- * string is read-only and a second field edits that locale's translation
- * (`updateNodeTranslation`; an empty value clears the override → falls back to
- * base, matching the canvas).
- */
-export function ContentSection({ node }: ContentSectionProps) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const activeLocale = useStore(store, (state) => state.activeLocale);
-  const defaultLocale = useStore(store, selectDefaultLocale);
-
-  const isBaseLocale = activeLocale === null || activeLocale === defaultLocale;
-  const baseText = node.data.text;
-  const translation = isBaseLocale ? "" : readLocaleOverrideText(node.data, activeLocale);
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Content</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <div className="flex flex-col gap-2">
-          <div className="flex flex-col gap-1">
-            <span className="text-muted-foreground text-xs">Base</span>
-            <CommitTextarea
-              key={`base:${node.id}`}
-              onCommit={(next) => dispatch(updateTextNode)({ id: node.id, updates: { text: next } })}
-              readOnly={!isBaseLocale}
-              value={baseText}
-            />
-          </div>
-          {!isBaseLocale && activeLocale !== null && (
-            <div className="flex flex-col gap-1">
-              <span className="text-muted-foreground text-xs">{activeLocale}</span>
-              <CommitTextarea
-                key={`locale:${node.id}:${activeLocale}`}
-                onCommit={(next) =>
-                  dispatch(updateNodeTranslation)({
-                    id: node.id,
-                    locale: activeLocale,
-                    text: next,
-                  })
-                }
-                placeholder={baseText}
-                value={translation}
-              />
-            </div>
-          )}
-        </div>
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx
deleted file mode 100644
index 0c12f54c7..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/fill-section.tsx
+++ /dev/null
@@ -1,397 +0,0 @@
-"use client";
-
-import { resolveBackgroundImage } from "@voidhash/mimic-schema";
-import type {
-  ScreenSnapshotNode,
-  ScrollViewSnapshotNode,
-  SnapshotNode,
-  ViewSnapshotNode,
-} from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { MinusIcon, PlusIcon } from "lucide-react";
-import { useCallback, useEffect, useState } from "react";
-import { useStore } from "zustand/react";
-
-import { Badge, Button } from "@voidhash/ui";
-import { rgbaToHexOpacity } from "@/features/studio/paywalls/designer/panel-kit/color-picker/color-utils";
-import { FillField } from "@/features/studio/paywalls/designer/panel-kit/fill-field";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/panel-kit/panel-section";
-import { OverrideResetAffordance } from "@/features/studio/paywalls/designer/panel-kit/reset-affordance";
-import type {
-  BackgroundGradient,
-  BackgroundImage,
-  BackgroundType,
-  GradientStop,
-} from "@/features/studio/paywalls/designer/state/actions/features/fill-style-actions";
-import {
-  updateFillStyle,
-  updateNodeLocalizedImage,
-} from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-import { selectDefaultLocale } from "@/features/studio/paywalls/designer/state/utils/localization";
-
-import { nextStopPosition } from "../utils/gradient-stops";
-import { useStyleTargets } from "../utils/get-style-targets";
-import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
-
-/**
- * The decoded (read) shape of a gradient on `data.style`. Array elements are
- * wrapped by the mimic CRDT decoder as `{ value }`; scalar fields are plain.
- */
-interface DecodedGradient {
-  kind: "linear" | "radial";
-  startX: number;
-  startY: number;
-  endX: number;
-  endY: number;
-  stops: Array<{ value?: GradientStop }>;
-}
-
-/**
- * The panel-facing view of a node's effective fill style. Structured fields are
- * read in their decoded (CRDT-wrapped) form; the panel unwraps them before use.
- */
-interface FillStyleRead {
-  backgroundColor: string;
-  backgroundEnabled: boolean;
-  backgroundType?: BackgroundType;
-  backgroundGradient?: DecodedGradient;
-  backgroundImage?: BackgroundImage;
-}
-
-interface FillStyleWrite {
-  backgroundColor: string;
-  backgroundEnabled: boolean;
-  backgroundType: BackgroundType;
-  backgroundGradient: BackgroundGradient;
-  backgroundImage: BackgroundImage;
-}
-
-const DEFAULT_GRADIENT: BackgroundGradient = {
-  kind: "linear",
-  startX: 0.5,
-  startY: 0,
-  endX: 0.5,
-  endY: 1,
-  stops: [
-    { color: "rgba(255, 255, 255, 1)", position: 0 },
-    { color: "rgba(255, 255, 255, 0)", position: 1 },
-  ],
-};
-
-/** Unwrap the CRDT-decoded gradient into the logical write shape. */
-function toWriteGradient(decoded: DecodedGradient | undefined): BackgroundGradient {
-  if (!decoded) {
-    return { ...DEFAULT_GRADIENT, stops: DEFAULT_GRADIENT.stops.map((s) => ({ ...s })) };
-  }
-  const stops = decoded.stops
-    .map((entry) => entry.value)
-    .filter((stop): stop is GradientStop => stop !== undefined)
-    .map((stop) => ({ color: stop.color, position: stop.position }));
-  return {
-    kind: decoded.kind,
-    startX: decoded.startX,
-    startY: decoded.startY,
-    endX: decoded.endX,
-    endY: decoded.endY,
-    stops,
-  };
-}
-
-export function FillSection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets, mixedKeys } = useStyleTargets(nodes);
-  const overrideReset = useStyleOverrideResetContext(nodes);
-  const { begin, commit, discard } = useDesignerDraft(store);
-  const activeLocale = useStore(store, (state) => state.activeLocale);
-  const defaultLocale = useStore(store, selectDefaultLocale);
-
-  const [isOpen, setIsOpen] = useState(false);
-  const [selectedStopIndex, setSelectedStopIndex] = useState<number | null>(0);
-
-  const fill = style as unknown as FillStyleRead | null;
-
-  const isBackgroundEnabledMixed = mixedKeys.has("backgroundEnabled");
-  const isBackgroundTypeMixed = mixedKeys.has("backgroundType");
-  const backgroundEnabledKeys = ["backgroundEnabled"] as const;
-  const backgroundColorKeys = ["backgroundColor"] as const;
-  const fillRelatedKeys = ["backgroundEnabled", "backgroundColor"] as const;
-
-  const showBackgroundEnabledReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(backgroundEnabledKeys);
-  const showBackgroundColorReset =
-    !showBackgroundEnabledReset &&
-    overrideReset.isOverrideModeActive &&
-    overrideReset.hasOverride(backgroundColorKeys);
-
-  const handleChange = useCallback(
-    (incoming: Partial<FillStyleWrite>) => {
-      dispatch(updateFillStyle)({ nodes: targets, style: incoming });
-    },
-    [dispatch, targets],
-  );
-
-  const handleColorChange = useCallback(
-    (value: string) => {
-      dispatch(updateFillStyle)({
-        nodes: targets,
-        style: { backgroundColor: value },
-      });
-    },
-    [dispatch, targets],
-  );
-
-  const backgroundType: BackgroundType = fill?.backgroundType ?? "solid";
-  const gradient = toWriteGradient(fill?.backgroundGradient);
-
-  // Keep the selected stop index within bounds as stops are added/removed.
-  useEffect(() => {
-    setSelectedStopIndex((prev) => {
-      if (gradient.stops.length === 0) return null;
-      if (prev === null) return 0;
-      return Math.min(prev, gradient.stops.length - 1);
-    });
-  }, [gradient.stops.length]);
-
-  const writeGradient = useCallback(
-    (next: BackgroundGradient) => {
-      handleChange({ backgroundGradient: next });
-    },
-    [handleChange],
-  );
-
-  const handleStopColor = useCallback(
-    (index: number, color: string) => {
-      const stops = gradient.stops.map((stop, i) => (i === index ? { ...stop, color } : stop));
-      writeGradient({ ...gradient, stops });
-    },
-    [gradient, writeGradient],
-  );
-
-  const handleStopPosition = useCallback(
-    (index: number, position: number) => {
-      const clamped = Math.min(1, Math.max(0, position));
-      const stops = gradient.stops.map((stop, i) =>
-        i === index ? { ...stop, position: clamped } : stop,
-      );
-      writeGradient({ ...gradient, stops });
-    },
-    [gradient, writeGradient],
-  );
-
-  const handleAddStop = useCallback(() => {
-    const position = nextStopPosition(gradient.stops);
-    const lastColor = gradient.stops.at(-1)?.color ?? "rgba(255, 255, 255, 1)";
-    const stops = [...gradient.stops, { color: lastColor, position }].sort(
-      (a, b) => a.position - b.position,
-    );
-    writeGradient({ ...gradient, stops });
-    setSelectedStopIndex(stops.findIndex((s) => s.position === position && s.color === lastColor));
-  }, [gradient, writeGradient]);
-
-  const handleAddStopAt = useCallback(
-    (position: number, color: string) => {
-      const clamped = Math.min(1, Math.max(0, position));
-      const stops = [...gradient.stops, { color, position: clamped }].sort(
-        (a, b) => a.position - b.position,
-      );
-      writeGradient({ ...gradient, stops });
-      setSelectedStopIndex(
-        stops.findIndex((s) => s.position === clamped && s.color === color),
-      );
-    },
-    [gradient, writeGradient],
-  );
-
-  const handleRemoveStop = useCallback(
-    (index: number) => {
-      if (gradient.stops.length <= 2) return;
-      const stops = gradient.stops.filter((_, i) => i !== index);
-      writeGradient({ ...gradient, stops });
-    },
-    [gradient, writeGradient],
-  );
-
-  const image: BackgroundImage = fill?.backgroundImage ?? { url: "", resizeMode: "cover" };
-
-  // Per-locale image editing: only for a single view/scrollView/screen node whose
-  // base fill is an image, in a non-default locale, and NOT while a state-override
-  // editing session is active — the state-override editing surface takes priority
-  // over the locale surface (keep precedence simple).
-  const singleNode = nodes.length === 1 ? nodes[0] : undefined;
-  const localeNode =
-    singleNode !== undefined &&
-    (singleNode.type === "view" ||
-      singleNode.type === "scrollView" ||
-      singleNode.type === "screen")
-      ? (singleNode as ViewSnapshotNode | ScrollViewSnapshotNode | ScreenSnapshotNode)
-      : undefined;
-  const isLocaleImageEditing =
-    !overrideReset.isOverrideModeActive &&
-    activeLocale !== null &&
-    activeLocale !== defaultLocale &&
-    backgroundType === "image" &&
-    localeNode !== undefined;
-  const resolvedLocaleImage =
-    isLocaleImageEditing && localeNode !== undefined && activeLocale !== null
-      ? resolveBackgroundImage(localeNode.data, activeLocale, defaultLocale)
-      : undefined;
-  const hasLocalizedImageOverride =
-    resolvedLocaleImage !== undefined &&
-    localeNode !== undefined &&
-    resolvedLocaleImage !== localeNode.data.style.backgroundImage;
-  const displayImage: BackgroundImage =
-    resolvedLocaleImage !== undefined
-      ? { url: resolvedLocaleImage.url, resizeMode: resolvedLocaleImage.resizeMode }
-      : image;
-
-  const handleImageUrl = useCallback(
-    (url: string) => {
-      if (isLocaleImageEditing && localeNode !== undefined && activeLocale !== null) {
-        dispatch(updateNodeLocalizedImage)({
-          id: localeNode.id,
-          locale: activeLocale,
-          backgroundImage: { ...displayImage, url },
-        });
-        return;
-      }
-      handleChange({ backgroundImage: { ...image, url } });
-    },
-    [isLocaleImageEditing, localeNode, activeLocale, displayImage, dispatch, handleChange, image],
-  );
-
-  const handleImageResizeMode = useCallback(
-    (resizeMode: BackgroundImage["resizeMode"]) => {
-      if (isLocaleImageEditing && localeNode !== undefined && activeLocale !== null) {
-        dispatch(updateNodeLocalizedImage)({
-          id: localeNode.id,
-          locale: activeLocale,
-          backgroundImage: { ...displayImage, resizeMode },
-        });
-        return;
-      }
-      handleChange({ backgroundImage: { ...image, resizeMode } });
-    },
-    [isLocaleImageEditing, localeNode, activeLocale, displayImage, dispatch, handleChange, image],
-  );
-
-  const handleResetLocalizedImage = useCallback(() => {
-    if (localeNode !== undefined && activeLocale !== null) {
-      dispatch(updateNodeLocalizedImage)({
-        id: localeNode.id,
-        locale: activeLocale,
-        backgroundImage: null,
-      });
-    }
-  }, [dispatch, localeNode, activeLocale]);
-
-  if (!fill) return null;
-
-  const rowLabel = isBackgroundTypeMixed
-    ? "Mixed"
-    : backgroundType === "solid"
-      ? `#${rgbaToHexOpacity(fill.backgroundColor).hex}`
-      : backgroundType === "gradient"
-        ? gradient.kind === "linear"
-          ? "Linear"
-          : "Radial"
-        : "Image";
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Fill</PanelSectionTitle>
-        {isLocaleImageEditing && activeLocale !== null && (
-          <Badge className="px-1 py-0 text-[10px]" variant="secondary">
-            {activeLocale}
-          </Badge>
-        )}
-        <PanelSectionHeaderActions>
-          {!fill.backgroundEnabled && !isBackgroundEnabledMixed && (
-            <OverrideResetAffordance
-              label="fill enabled"
-              onReset={() =>
-                handleChange(overrideReset.buildResetPatch(fillRelatedKeys) as Partial<FillStyleWrite>)
-              }
-              show={showBackgroundEnabledReset}
-            >
-              <Button
-                onClick={() => handleChange({ backgroundEnabled: true })}
-                size="icon-sm"
-                variant="secondary"
-              >
-                <PlusIcon />
-              </Button>
-            </OverrideResetAffordance>
-          )}
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      {(fill.backgroundEnabled || isBackgroundEnabledMixed) && (
-        <PanelSectionContent>
-          <OverrideResetAffordance
-            label={isLocaleImageEditing ? "localized fill" : "fill"}
-            onReset={
-              isLocaleImageEditing
-                ? handleResetLocalizedImage
-                : () =>
-                    handleChange(
-                      overrideReset.buildResetPatch(fillRelatedKeys) as Partial<FillStyleWrite>,
-                    )
-            }
-            show={
-              isLocaleImageEditing
-                ? hasLocalizedImageOverride
-                : showBackgroundEnabledReset || showBackgroundColorReset
-            }
-          >
-            <div className="flex flex-row items-center gap-2">
-              <FillField
-                backgroundColor={fill.backgroundColor}
-                backgroundType={backgroundType}
-                gradient={gradient}
-                image={displayImage}
-                isTypeMixed={isBackgroundTypeMixed}
-                label={rowLabel}
-                onAddStop={handleAddStop}
-                onAddStopAt={handleAddStopAt}
-                onColorChange={handleColorChange}
-                onCommit={commit}
-                onDiscard={discard}
-                onGestureStart={begin}
-                onGradientChange={writeGradient}
-                onImageResizeModeChange={handleImageResizeMode}
-                onImageUrlChange={handleImageUrl}
-                onOpenChange={setIsOpen}
-                onRemoveStop={handleRemoveStop}
-                onSelectStop={setSelectedStopIndex}
-                onStopColorChange={handleStopColor}
-                onStopPositionChange={handleStopPosition}
-                onTypeChange={(type) => handleChange({ backgroundType: type })}
-                open={isOpen}
-                selectedStopIndex={selectedStopIndex}
-              />
-              <Button
-                aria-label="Remove fill"
-                onClick={() => handleChange({ backgroundEnabled: false })}
-                size="icon-sm"
-                variant="secondary"
-              >
-                <MinusIcon />
-              </Button>
-            </div>
-          </OverrideResetAffordance>
-        </PanelSectionContent>
-      )}
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx
deleted file mode 100644
index ab345ee10..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/flex-layout-section.tsx
+++ /dev/null
@@ -1,581 +0,0 @@
-"use client";
-
-import type { FlexDirection } from "@voidhash/mimic-schema";
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { Schema } from "effect";
-import {
-  ArrowDownIcon,
-  ArrowRightIcon,
-  BetweenHorizontalStartIcon,
-  FullscreenIcon,
-  PanelBottomDashedIcon,
-  PanelLeftDashedIcon,
-  PanelLeftRightDashedIcon,
-  PanelRightDashedIcon,
-  PanelTopBottomDashedIcon,
-  PanelTopDashedIcon,
-  VaultIcon,
-} from "lucide-react";
-import { useCallback, useState } from "react";
-import { useStore } from "zustand";
-
-import { Button, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-  PanelSubSection,
-  PanelSubSectionContent,
-  PanelSubSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { updateLayoutStyle } from "@/features/studio/paywalls/designer/state/actions";
-import { usePaywallDesignerActions } from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { usePaywallDesignerStore } from "../../../state/designer-store";
-import { getAlignItems, getFlexDirection } from "../../../state/utils/node-type-helpers";
-import { getNodeById } from "../../../state/utils/nodes";
-import { OverrideResetAffordance } from "../components/override-reset-affordance";
-import { FlexAlignmentInput } from "../inputs/flex-alignment-input";
-import { HeightInput } from "../inputs/height-input";
-import { TextInput } from "../inputs/text-input";
-import { WidthInput } from "../inputs/width-input";
-import { useStyleTargets } from "../utils/get-style-targets";
-import { type StyleOverrideResetContext } from "../utils/style-override-reset";
-import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
-
-type LayoutNode = {
-  gap: number;
-  justifyContent: string;
-  alignItems: string;
-  flexDirection: FlexDirection;
-  paddingTop: number;
-  paddingRight: number;
-  paddingBottom: number;
-  paddingLeft: number;
-  width: unknown;
-  height: unknown;
-  flex: unknown;
-  flexGrow: unknown;
-  flexShrink: unknown;
-  flexBasis: unknown;
-  alignSelf: unknown;
-};
-
-export interface FlexLayoutSectionProps {
-  nodes: SnapshotNode[];
-  showDimensions?: boolean;
-  editableDimensions?: boolean;
-  parentId: string;
-}
-
-export function FlexLayoutSection({
-  nodes,
-  parentId,
-  showDimensions = true,
-  editableDimensions = true,
-}: FlexLayoutSectionProps) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets, mixedKeys } = useStyleTargets(nodes);
-  const overrideReset = useStyleOverrideResetContext(nodes);
-  const { draft, begin, commit } = useDesignerDraft(store);
-
-  const node = style as LayoutNode | null;
-  const firstNodeId = nodes[0]?.id ?? null;
-
-  const handleChange = useCallback(
-    (incoming: Partial<LayoutNode>) => {
-      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
-    },
-    [dispatch, targets],
-  );
-
-  const handleDraftChange = useCallback(
-    (incoming: Partial<LayoutNode>) => {
-      if (!draft) begin();
-      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
-    },
-    [draft, begin, dispatch, targets],
-  );
-
-  const handleCommit = useCallback(() => {
-    commit();
-  }, [commit]);
-
-  if (!node) return null;
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Layout</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <FlexSubsection
-          handleCommit={handleCommit}
-          handleDraftChange={handleDraftChange}
-          mixedKeys={mixedKeys}
-          node={node}
-          onNodeChange={handleChange}
-          overrideReset={overrideReset}
-        />
-        {showDimensions && (
-          <DimensionsSubSection
-            editable={editableDimensions}
-            handleCommit={handleCommit}
-            handleDraftChange={handleDraftChange}
-            node={node}
-            nodeId={firstNodeId}
-            onNodeChange={handleChange}
-            overrideReset={overrideReset}
-            parentId={parentId}
-          />
-        )}
-        <PaddingSubSection
-          handleCommit={handleCommit}
-          handleDraftChange={handleDraftChange}
-          mixedKeys={mixedKeys}
-          node={node}
-          onNodeChange={handleChange}
-          overrideReset={overrideReset}
-        />
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
-
-// ===============================
-// Dimensions
-// ===============================
-type DimensionsSubSectionProps = {
-  node: LayoutNode;
-  nodeId: string | null;
-  onNodeChange: (style: Partial<LayoutNode>) => void;
-  handleDraftChange: (style: Partial<LayoutNode>) => void;
-  handleCommit: () => void;
-  editable?: boolean;
-  parentId: string;
-  overrideReset: StyleOverrideResetContext;
-};
-
-function DimensionsSubSection({
-  node,
-  nodeId,
-  onNodeChange,
-  handleDraftChange,
-  handleCommit,
-  parentId,
-  editable = true,
-  overrideReset,
-}: DimensionsSubSectionProps) {
-  const store = usePaywallDesignerStore();
-  const parent = useStore(store, (state) => getNodeById(state, parentId));
-  const boundingBox = useStore(store, (state) =>
-    nodeId ? state.canvas.boundingBoxes[nodeId] : null,
-  );
-
-  if (!parent) {
-    return null;
-  }
-  const parentDirection = getFlexDirection(parent, "row");
-  const parentAlignItems = getAlignItems(parent, "stretch");
-
-  const computedWidth = boundingBox ? Math.round(boundingBox.width) : null;
-  const computedHeight = boundingBox ? Math.round(boundingBox.height) : null;
-  const widthKeys = ["width", "flex", "alignSelf"] as const;
-  const heightKeys = ["height", "flex", "alignSelf"] as const;
-  const showWidthReset = overrideReset.isOverrideModeActive && overrideReset.hasOverride(widthKeys);
-  const showHeightReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(heightKeys);
-
-  return (
-    <PanelSubSection>
-      <PanelSubSectionTitle>Dimensions</PanelSubSectionTitle>
-      <PanelSubSectionContent>
-        <div className="flex flex-row gap-2">
-          <OverrideResetAffordance
-            label="width"
-            onReset={() =>
-              onNodeChange(overrideReset.buildResetPatch(widthKeys) as Partial<LayoutNode>)
-            }
-            show={showWidthReset}
-          >
-            <WidthInput
-              computedWidth={computedWidth}
-              disabled={!editable}
-              node={node as never}
-              onCommit={handleCommit}
-              onDraftChange={handleDraftChange as never}
-              onNodeChange={onNodeChange as never}
-              parentAlignItems={parentAlignItems}
-              parentDirection={parentDirection}
-            />
-          </OverrideResetAffordance>
-          <OverrideResetAffordance
-            label="height"
-            onReset={() =>
-              onNodeChange(overrideReset.buildResetPatch(heightKeys) as Partial<LayoutNode>)
-            }
-            show={showHeightReset}
-          >
-            <HeightInput
-              computedHeight={computedHeight}
-              disabled={!editable}
-              node={node as never}
-              onCommit={handleCommit}
-              onDraftChange={handleDraftChange as never}
-              onNodeChange={onNodeChange as never}
-              parentAlignItems={parentAlignItems}
-              parentDirection={parentDirection}
-            />
-          </OverrideResetAffordance>
-        </div>
-      </PanelSubSectionContent>
-    </PanelSubSection>
-  );
-}
-
-// ===============================
-// Flex
-// ===============================
-type FlexSubsectionProps = {
-  node: LayoutNode;
-  mixedKeys: Set<string>;
-  onNodeChange: (style: Partial<LayoutNode>) => void;
-  handleDraftChange: (updates: Partial<LayoutNode>) => void;
-  handleCommit: () => void;
-  overrideReset: StyleOverrideResetContext;
-};
-
-function FlexSubsection({
-  node,
-  mixedKeys,
-  onNodeChange,
-  handleDraftChange,
-  handleCommit,
-  overrideReset,
-}: FlexSubsectionProps) {
-  const directionKeys = ["flexDirection"] as const;
-  const gapKeys = ["gap"] as const;
-  const alignmentKeys = ["alignItems", "justifyContent"] as const;
-  const showDirectionReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(directionKeys);
-  const showGapReset = overrideReset.isOverrideModeActive && overrideReset.hasOverride(gapKeys);
-  const showAlignmentReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(alignmentKeys);
-
-  return (
-    <PanelSubSection>
-      <PanelSubSectionContent>
-        <div className="flex flex-row gap-2">
-          <div className="flex w-21 flex-col gap-2">
-            <OverrideResetAffordance
-              label="layout direction"
-              onReset={() =>
-                onNodeChange(overrideReset.buildResetPatch(directionKeys) as Partial<LayoutNode>)
-              }
-              show={showDirectionReset}
-            >
-              <ToggleGroup
-                variant="outline"
-                size="sm"
-                className="w-full"
-                onValueChange={(value) => onNodeChange({ flexDirection: value as FlexDirection })}
-                type="single"
-                value={mixedKeys.has("flexDirection") ? undefined : node.flexDirection}
-              >
-                <ToggleGroupItem size="sm" className="flex-1 min-w-7 px-2" value="column">
-                  <ArrowDownIcon className="size-3.5" />
-                </ToggleGroupItem>
-                <ToggleGroupItem size="sm" className="flex-1 min-w-7 px-2" value="row">
-                  <ArrowRightIcon className="size-3.5" />
-                </ToggleGroupItem>
-              </ToggleGroup>
-            </OverrideResetAffordance>
-            <OverrideResetAffordance
-              label="layout gap"
-              onReset={() =>
-                onNodeChange(overrideReset.buildResetPatch(gapKeys) as Partial<LayoutNode>)
-              }
-              show={showGapReset}
-            >
-              <TextInput
-                icon={<BetweenHorizontalStartIcon className="size-3.5" />}
-                label="Gap"
-                mixed={mixedKeys.has("gap")}
-                onChange={(value) => handleDraftChange({ gap: Number(value) })}
-                onCommit={handleCommit}
-                type="number"
-                typeNumberStepIncrement={1}
-                validator={Schema.String}
-                value={node.gap.toString()}
-              />
-            </OverrideResetAffordance>
-          </div>
-          <OverrideResetAffordance
-            className="flex flex-1 min-w-0 items-stretch gap-2 self-stretch"
-            label="layout alignment"
-            onReset={() =>
-              onNodeChange(overrideReset.buildResetPatch(alignmentKeys) as Partial<LayoutNode>)
-            }
-            show={showAlignmentReset}
-          >
-            <FlexAlignmentInput
-              alignItems={node.alignItems as never}
-              flexDirection={node.flexDirection}
-              justifyContent={node.justifyContent as never}
-              onChange={(value) =>
-                onNodeChange({
-                  alignItems: value.alignItems,
-                  justifyContent: value.justifyContent,
-                })
-              }
-            />
-          </OverrideResetAffordance>
-        </div>
-      </PanelSubSectionContent>
-    </PanelSubSection>
-  );
-}
-
-// ===============================
-// Padding Sub Section
-// ===============================
-type PaddingSubSectionProps = {
-  node: LayoutNode;
-  mixedKeys: Set<string>;
-  onNodeChange: (style: Partial<LayoutNode>) => void;
-  handleDraftChange: (updates: Partial<LayoutNode>) => void;
-  handleCommit: () => void;
-  overrideReset: StyleOverrideResetContext;
-};
-
-function shouldShowIndividualPadding(node: LayoutNode) {
-  return node.paddingTop !== node.paddingBottom || node.paddingLeft !== node.paddingRight;
-}
-
-function PaddingSubSection({
-  node,
-  mixedKeys,
-  onNodeChange,
-  handleDraftChange,
-  handleCommit,
-  overrideReset,
-}: PaddingSubSectionProps) {
-  const [showIndividualPadding, setShowIndividualPadding] = useState(
-    shouldShowIndividualPadding(node) ||
-      mixedKeys.has("paddingLeft") ||
-      mixedKeys.has("paddingRight") ||
-      mixedKeys.has("paddingTop") ||
-      mixedKeys.has("paddingBottom"),
-  );
-
-  const expandPadding = () => {
-    setShowIndividualPadding(true);
-  };
-
-  const collapsePadding = () => {
-    setShowIndividualPadding(false);
-    onNodeChange({
-      paddingLeft: node.paddingLeft,
-      paddingRight: node.paddingLeft,
-      paddingTop: node.paddingTop,
-      paddingBottom: node.paddingTop,
-    });
-  };
-
-  const paddingLeftKeys = ["paddingLeft"] as const;
-  const paddingTopKeys = ["paddingTop"] as const;
-  const paddingRightKeys = ["paddingRight"] as const;
-  const paddingBottomKeys = ["paddingBottom"] as const;
-  const paddingHorizontalKeys = ["paddingLeft", "paddingRight"] as const;
-  const paddingVerticalKeys = ["paddingTop", "paddingBottom"] as const;
-
-  const showPaddingLeftReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingLeftKeys);
-  const showPaddingTopReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingTopKeys);
-  const showPaddingRightReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingRightKeys);
-  const showPaddingBottomReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingBottomKeys);
-  const showPaddingHorizontalReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingHorizontalKeys);
-  const showPaddingVerticalReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(paddingVerticalKeys);
-
-  return (
-    <PanelSubSection>
-      <PanelSubSectionTitle>Padding</PanelSubSectionTitle>
-      <PanelSubSectionContent>
-        <div className="flex flex-row gap-2">
-          {showIndividualPadding && (
-            <div className="flex flex-col gap-2">
-              <div className="flex flex-row gap-2">
-                <OverrideResetAffordance
-                  label="padding left"
-                  onReset={() =>
-                    onNodeChange(
-                      overrideReset.buildResetPatch(paddingLeftKeys) as Partial<LayoutNode>,
-                    )
-                  }
-                  show={showPaddingLeftReset}
-                >
-                  <TextInput
-                    icon={<PanelLeftDashedIcon className="size-3.5" />}
-                    label="Padding Left"
-                    mixed={mixedKeys.has("paddingLeft")}
-                    onChange={(value) => handleDraftChange({ paddingLeft: Number(value) })}
-                    onCommit={handleCommit}
-                    type="number"
-                    typeNumberStepIncrement={1}
-                    validator={Schema.String}
-                    value={node.paddingLeft.toString()}
-                  />
-                </OverrideResetAffordance>
-                <OverrideResetAffordance
-                  label="padding top"
-                  onReset={() =>
-                    onNodeChange(
-                      overrideReset.buildResetPatch(paddingTopKeys) as Partial<LayoutNode>,
-                    )
-                  }
-                  show={showPaddingTopReset}
-                >
-                  <TextInput
-                    icon={<PanelTopDashedIcon className="size-3.5" />}
-                    label="Padding Top"
-                    mixed={mixedKeys.has("paddingTop")}
-                    onChange={(value) => handleDraftChange({ paddingTop: Number(value) })}
-                    onCommit={handleCommit}
-                    type="number"
-                    typeNumberStepIncrement={1}
-                    validator={Schema.String}
-                    value={node.paddingTop.toString()}
-                  />
-                </OverrideResetAffordance>
-              </div>
-              <div className="flex flex-row gap-2">
-                <OverrideResetAffordance
-                  label="padding right"
-                  onReset={() =>
-                    onNodeChange(
-                      overrideReset.buildResetPatch(paddingRightKeys) as Partial<LayoutNode>,
-                    )
-                  }
-                  show={showPaddingRightReset}
-                >
-                  <TextInput
-                    icon={<PanelRightDashedIcon className="size-3.5" />}
-                    label="Padding Right"
-                    mixed={mixedKeys.has("paddingRight")}
-                    onChange={(value) => handleDraftChange({ paddingRight: Number(value) })}
-                    onCommit={handleCommit}
-                    type="number"
-                    typeNumberStepIncrement={1}
-                    validator={Schema.String}
-                    value={node.paddingRight.toString()}
-                  />
-                </OverrideResetAffordance>
-
-                <OverrideResetAffordance
-                  label="padding bottom"
-                  onReset={() =>
-                    onNodeChange(
-                      overrideReset.buildResetPatch(paddingBottomKeys) as Partial<LayoutNode>,
-                    )
-                  }
-                  show={showPaddingBottomReset}
-                >
-                  <TextInput
-                    icon={<PanelBottomDashedIcon className="size-3.5" />}
-                    label="Padding Bottom"
-                    mixed={mixedKeys.has("paddingBottom")}
-                    onChange={(value) => handleDraftChange({ paddingBottom: Number(value) })}
-                    onCommit={handleCommit}
-                    type="number"
-                    typeNumberStepIncrement={1}
-                    validator={Schema.String}
-                    value={node.paddingBottom.toString()}
-                  />
-                </OverrideResetAffordance>
-              </div>
-            </div>
-          )}
-
-          {!showIndividualPadding && (
-            <div className="flex flex-col gap-2">
-              <div className="flex flex-row gap-2">
-                <OverrideResetAffordance
-                  label="padding horizontal"
-                  onReset={() =>
-                    onNodeChange(
-                      overrideReset.buildResetPatch(paddingHorizontalKeys) as Partial<LayoutNode>,
-                    )
-                  }
-                  show={showPaddingHorizontalReset}
-                >
-                  <TextInput
-                    icon={<PanelLeftRightDashedIcon className="size-3.5" />}
-                    label="Padding Horizontal"
-                    mixed={mixedKeys.has("paddingLeft") || mixedKeys.has("paddingRight")}
-                    onChange={(value) =>
-                      handleDraftChange({
-                        paddingLeft: Number(value),
-                        paddingRight: Number(value),
-                      })
-                    }
-                    onCommit={handleCommit}
-                    type="number"
-                    typeNumberStepIncrement={1}
-                    validator={Schema.String}
-                    value={node.paddingLeft.toString()}
-                  />
-                </OverrideResetAffordance>
-                <OverrideResetAffordance
-                  label="padding vertical"
-                  onReset={() =>
-                    onNodeChange(
-                      overrideReset.buildResetPatch(paddingVerticalKeys) as Partial<LayoutNode>,
-                    )
-                  }
-                  show={showPaddingVerticalReset}
-                >
-                  <TextInput
-                    icon={<PanelTopBottomDashedIcon className="size-3.5" />}
-                    label="Padding Top"
-                    mixed={mixedKeys.has("paddingTop") || mixedKeys.has("paddingBottom")}
-                    onChange={(value) =>
-                      handleDraftChange({
-                        paddingTop: Number(value),
-                        paddingBottom: Number(value),
-                      })
-                    }
-                    onCommit={handleCommit}
-                    type="number"
-                    typeNumberStepIncrement={1}
-                    validator={Schema.String}
-                    value={node.paddingTop.toString()}
-                  />
-                </OverrideResetAffordance>
-              </div>
-            </div>
-          )}
-
-          <Button
-            onClick={() => (showIndividualPadding ? collapsePadding() : expandPadding())}
-            size="icon-sm"
-            variant="secondary"
-          >
-            {showIndividualPadding ? (
-              <VaultIcon className="size-3.5" />
-            ) : (
-              <FullscreenIcon className="size-3.5" />
-            )}
-          </Button>
-        </div>
-      </PanelSubSectionContent>
-    </PanelSubSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx
deleted file mode 100644
index 7e57972c7..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interaction-row.tsx
+++ /dev/null
@@ -1,129 +0,0 @@
-"use client";
-
-import type {
-  Action,
-  ComponentBoundAction,
-  Interaction,
-  Trigger,
-  TriggerType,
-} from "@voidhash/mimic-schema";
-import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
-import { ChevronRightIcon, MinusIcon } from "lucide-react";
-import { useState } from "react";
-
-import { SelectInput } from "@/features/studio/paywalls/designer/components/ui/select-input";
-import type { LabeledVariable } from "@/features/studio/paywalls/designer/components/variables/types";
-
-import { ActionEditor, ACTION_TYPE_LABELS } from "./action-editor";
-import { PopoverHeader } from "../../../components/ui/popover-header";
-
-const TRIGGER_OPTIONS: { value: TriggerType; label: string }[] = [
-  { value: "click", label: "On click" },
-];
-
-const TRIGGER_LABELS: Record<TriggerType, string> = {
-  click: "On click",
-};
-
-/**
- * Narrows a component-bound action back to the visual interaction `Action`
- * vocabulary. Returns `null` for action-payload sources, which interactions
- * cannot store (the editor never offers them without `payloadFields`).
- */
-function toVisualAction(action: ComponentBoundAction): Action | null {
-  switch (action.type) {
-    case "none":
-      return { type: "none" };
-    case "close-paywall":
-      return { type: "close-paywall" };
-    case "set-variable": {
-      const source = action.payload.newValue;
-      if (source.type === "action-payload") {
-        return null;
-      }
-      return {
-        payload: { newValue: source, variableId: action.payload.variableId },
-        type: "set-variable",
-      };
-    }
-    case "purchase-product": {
-      if (action.payload.type === "action-payload") {
-        return null;
-      }
-      return { payload: action.payload, type: "purchase-product" };
-    }
-  }
-}
-
-export interface InteractionRowProps {
-  interaction: Interaction;
-  onUpdateTrigger: (trigger: Trigger) => void;
-  onUpdateAction: (action: Action) => void;
-  onRemove: () => void;
-  allVariables: readonly LabeledVariable[];
-  productVariables: readonly LabeledVariable[];
-}
-
-export function InteractionRow({
-  interaction,
-  onUpdateTrigger,
-  onUpdateAction,
-  onRemove,
-  allVariables,
-  productVariables,
-}: InteractionRowProps) {
-  const [isOpen, setIsOpen] = useState(false);
-
-  const handleTriggerChange = (triggerType: TriggerType) => {
-    onUpdateTrigger({ type: triggerType });
-  };
-
-  const handleActionChange = (action: ComponentBoundAction) => {
-    const visualAction = toVisualAction(action);
-    if (visualAction) {
-      onUpdateAction(visualAction);
-    }
-  };
-
-  const triggerLabel = TRIGGER_LABELS[interaction.trigger.type];
-  const actionLabel = ACTION_TYPE_LABELS[interaction.action.type];
-
-  return (
-    <div className="flex flex-row items-center gap-2">
-      <Popover onOpenChange={setIsOpen} open={isOpen}>
-        <PopoverTrigger asChild>
-          <Button className="flex-1 justify-start gap-1 px-2" size="sm" variant="secondary">
-            <span className="text-xs">{triggerLabel}</span>
-            <ChevronRightIcon className="size-3 text-muted-foreground" />
-            <span className="text-muted-foreground text-xs">{actionLabel}</span>
-          </Button>
-        </PopoverTrigger>
-        <PopoverContent align="start" className="w-72 p-3" side="left" sideOffset={4}>
-          <PopoverHeader title="Interaction" onClose={() => setIsOpen(false)} />
-          <div className="flex flex-col gap-3">
-            <div className="flex flex-col gap-2">
-              <span className="text-muted-foreground text-xs font-medium">Trigger</span>
-              <SelectInput
-                label="Trigger"
-                onChange={handleTriggerChange}
-                options={TRIGGER_OPTIONS}
-                value={interaction.trigger.type}
-              />
-            </div>
-
-            <ActionEditor
-              action={interaction.action}
-              onChange={handleActionChange}
-              productVariables={productVariables}
-              variables={allVariables}
-            />
-          </div>
-        </PopoverContent>
-      </Popover>
-
-      <Button onClick={onRemove} size="icon-sm" variant="secondary">
-        <MinusIcon />
-      </Button>
-    </div>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx
deleted file mode 100644
index dc04e5ac7..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/interactions-section.tsx
+++ /dev/null
@@ -1,129 +0,0 @@
-"use client";
-
-import type { Action, Trigger } from "@voidhash/mimic-schema";
-import type {
-  ScrollViewSnapshotNode,
-  ViewSnapshotNode,
-} from "@voidhash/paywall-renderer-web-core";
-import { PlusIcon } from "lucide-react";
-import { useMemo } from "react";
-import { useStore } from "zustand/react";
-
-import { Button } from "@voidhash/ui";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import {
-  addInteraction,
-  removeInteraction,
-  updateInteraction,
-  updateInteractionActionOverride,
-} from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-import {
-  collectAncestorVariables,
-  toLabeledVariables,
-} from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
-import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
-import {
-  getSelectedStateIdForNode,
-  resolveEffectiveAction,
-} from "@/features/studio/paywalls/designer/state/utils/state-overrides";
-
-import { InteractionRow } from "./interaction-row";
-
-export interface InteractionsSectionProps {
-  nodes: (ViewSnapshotNode | ScrollViewSnapshotNode)[];
-}
-
-export function InteractionsSection({ nodes }: InteractionsSectionProps) {
-  const store = usePaywallDesignerStore();
-  const node = nodes[0]!;
-  const dispatch = usePaywallDesignerActions();
-  const interactions = node.data.interactions.flatMap((entry) =>
-    entry.value === undefined ? [] : [{ id: entry.id, value: entry.value }],
-  );
-  const documentRoot = useStore(store, selectDocumentRoot);
-  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
-  const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, node.id);
-
-  const allVariables = useMemo(
-    () => toLabeledVariables(collectAncestorVariables(documentRoot, node.id), node.id),
-    [documentRoot, node.id],
-  );
-
-  const productVariables = useMemo(
-    () => allVariables.filter((v) => v.value.key === "product"),
-    [allVariables],
-  );
-
-  const handleAddInteraction = () => {
-    dispatch(addInteraction)({ nodeId: node.id });
-  };
-
-  const handleRemoveInteraction = (interactionId: string) => {
-    dispatch(removeInteraction)({ interactionId, nodeId: node.id });
-  };
-
-  const handleUpdateTrigger = (interactionId: string, newTrigger: Trigger) => {
-    dispatch(updateInteraction)({ interactionId, newTrigger, nodeId: node.id });
-  };
-
-  const handleUpdateAction = (interactionId: string, newAction: Action) => {
-    if (selectedStateId) {
-      dispatch(updateInteractionActionOverride)({
-        interactionId,
-        newAction,
-        nodeId: node.id,
-        stateId: selectedStateId,
-      });
-      return;
-    }
-    dispatch(updateInteraction)({ interactionId, newAction, nodeId: node.id });
-  };
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Interactions</PanelSectionTitle>
-        <PanelSectionHeaderActions>
-          <Button onClick={handleAddInteraction} size="icon-sm" variant="secondary">
-            <PlusIcon />
-          </Button>
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      {interactions.length > 0 && (
-        <PanelSectionContent>
-          <div className="flex flex-col gap-3">
-            {interactions.map((interaction) => (
-              <InteractionRow
-                allVariables={allVariables}
-                interaction={{
-                  ...interaction.value,
-                  action: resolveEffectiveAction(
-                    node,
-                    selectedStateId,
-                    interaction.id,
-                    interaction.value.action,
-                  ),
-                }}
-                key={interaction.id}
-                onRemove={() => handleRemoveInteraction(interaction.id)}
-                onUpdateAction={(action) => handleUpdateAction(interaction.id, action)}
-                onUpdateTrigger={(trigger) => handleUpdateTrigger(interaction.id, trigger)}
-                productVariables={productVariables}
-              />
-            ))}
-          </div>
-        </PanelSectionContent>
-      )}
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx
deleted file mode 100644
index 0aaa33875..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-fill-section.tsx
+++ /dev/null
@@ -1,115 +0,0 @@
-"use client";
-
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { MinusIcon, PlusIcon } from "lucide-react";
-import { useCallback } from "react";
-
-import { Button, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
-import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { updatePathFillStyle } from "@/features/studio/paywalls/designer/state/actions/features/path-fill-style-actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { useStyleTargets } from "../utils/get-style-targets";
-
-interface PathFillStyle {
-  fillColor: string;
-  fillEnabled: boolean;
-  fillRule: "nonzero" | "evenodd";
-  fillOpacity: number;
-}
-
-export function PathFillSection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets } = useStyleTargets(nodes);
-  const { begin, commit, discard } = useDesignerDraft(store);
-
-  const fill = style as unknown as PathFillStyle | null;
-
-  const handleChange = useCallback(
-    (incoming: Partial<PathFillStyle>) => {
-      dispatch(updatePathFillStyle)({ nodes: targets, style: incoming });
-    },
-    [dispatch, targets],
-  );
-
-  const handleColorChange = useCallback(
-    (value: string) => {
-      dispatch(updatePathFillStyle)({
-        nodes: targets,
-        style: { fillColor: value },
-      });
-    },
-    [dispatch, targets],
-  );
-
-  if (!fill) return null;
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Fill</PanelSectionTitle>
-        <PanelSectionHeaderActions>
-          {!fill.fillEnabled && (
-            <Button
-              onClick={() => handleChange({ fillEnabled: true })}
-              size="icon-sm"
-              variant="secondary"
-            >
-              <PlusIcon />
-            </Button>
-          )}
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      {fill.fillEnabled && (
-        <PanelSectionContent>
-          <div className="flex flex-row justify-between gap-2">
-            <ToggleGroup
-              variant="outline"
-              size="sm"
-              onValueChange={(value) => {
-                if (value === "nonzero" || value === "evenodd") {
-                  handleChange({ fillRule: value });
-                }
-              }}
-              type="single"
-              value={fill.fillRule}
-            >
-              <ToggleGroupItem size="sm" className="flex-1" value="nonzero">
-                Nonzero
-              </ToggleGroupItem>
-              <ToggleGroupItem size="sm" className="flex-1" value="evenodd">
-                Even-odd
-              </ToggleGroupItem>
-            </ToggleGroup>
-            <Button
-              onClick={() => handleChange({ fillEnabled: false })}
-              size="icon-sm"
-              variant="secondary"
-            >
-              <MinusIcon />
-            </Button>
-          </div>
-          <ColorInput
-            onChange={handleColorChange}
-            onCommit={commit}
-            onDiscard={discard}
-            onDragStart={begin}
-            value={fill.fillColor}
-          />
-        </PanelSectionContent>
-      )}
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx
deleted file mode 100644
index f932a6f8b..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/path-stroke-section.tsx
+++ /dev/null
@@ -1,176 +0,0 @@
-"use client";
-
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { Schema } from "effect";
-import { MinusIcon, PlusIcon, SquareIcon } from "lucide-react";
-import { useCallback } from "react";
-
-import { Button, ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
-import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-  PanelSubSection,
-  PanelSubSectionContent,
-  PanelSubSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { updatePathStrokeStyle } from "@/features/studio/paywalls/designer/state/actions/features/path-stroke-style-actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { TextInput } from "../inputs/text-input";
-import { useStyleTargets } from "../utils/get-style-targets";
-
-interface PathStrokeStyle {
-  strokeColor: string;
-  strokeEnabled: boolean;
-  strokeWidth: number;
-  strokeLinecap: "butt" | "round" | "square";
-  strokeLinejoin: "miter" | "round" | "bevel";
-  strokeOpacity: number;
-}
-
-export function PathStrokeSection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets } = useStyleTargets(nodes);
-  const { draft, begin, commit, discard } = useDesignerDraft(store);
-
-  const stroke = style as unknown as PathStrokeStyle | null;
-
-  const handleChange = useCallback(
-    (incoming: Partial<PathStrokeStyle>) => {
-      dispatch(updatePathStrokeStyle)({ nodes: targets, style: incoming });
-    },
-    [dispatch, targets],
-  );
-
-  const handleDraftChange = useCallback(
-    (incoming: Partial<PathStrokeStyle>) => {
-      if (!draft) begin();
-      dispatch(updatePathStrokeStyle)({ nodes: targets, style: incoming });
-    },
-    [draft, begin, dispatch, targets],
-  );
-
-  const handleCommit = useCallback(() => {
-    commit();
-  }, [commit]);
-
-  if (!stroke) return null;
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Stroke</PanelSectionTitle>
-        <PanelSectionHeaderActions>
-          {!stroke.strokeEnabled && (
-            <Button
-              onClick={() => handleChange({ strokeEnabled: true })}
-              size="icon-sm"
-              variant="secondary"
-            >
-              <PlusIcon />
-            </Button>
-          )}
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      {stroke.strokeEnabled && (
-        <PanelSectionContent>
-          <PanelSubSection>
-            <PanelSubSectionTitle>Width</PanelSubSectionTitle>
-            <PanelSubSectionContent>
-              <div className="flex flex-row gap-2">
-                <TextInput
-                  icon={<SquareIcon className="size-3.5" />}
-                  label="Stroke Width"
-                  minValue={0}
-                  onChange={(value) => {
-                    handleDraftChange({ strokeWidth: Number(value) });
-                  }}
-                  onCommit={handleCommit}
-                  type="number"
-                  typeNumberStepIncrement={1}
-                  validator={Schema.String}
-                  value={stroke.strokeWidth.toString()}
-                />
-                <Button
-                  onClick={() => handleChange({ strokeEnabled: false })}
-                  size="icon-sm"
-                  variant="secondary"
-                >
-                  <MinusIcon />
-                </Button>
-              </div>
-            </PanelSubSectionContent>
-          </PanelSubSection>
-          <PanelSubSection>
-            <PanelSubSectionTitle>Line Cap</PanelSubSectionTitle>
-            <PanelSubSectionContent>
-              <ToggleGroup
-                variant="outline"
-                size="sm"
-                onValueChange={(value) => {
-                  if (value === "butt" || value === "round" || value === "square") {
-                    handleChange({ strokeLinecap: value });
-                  }
-                }}
-                type="single"
-                value={stroke.strokeLinecap}
-              >
-                <ToggleGroupItem size="sm" className="flex-1" value="butt">
-                  Butt
-                </ToggleGroupItem>
-                <ToggleGroupItem size="sm" className="flex-1" value="round">
-                  Round
-                </ToggleGroupItem>
-                <ToggleGroupItem size="sm" className="flex-1" value="square">
-                  Square
-                </ToggleGroupItem>
-              </ToggleGroup>
-            </PanelSubSectionContent>
-          </PanelSubSection>
-          <PanelSubSection>
-            <PanelSubSectionTitle>Line Join</PanelSubSectionTitle>
-            <PanelSubSectionContent>
-              <ToggleGroup
-                variant="outline"
-                size="sm"
-                onValueChange={(value) => {
-                  if (value === "miter" || value === "round" || value === "bevel") {
-                    handleChange({ strokeLinejoin: value });
-                  }
-                }}
-                type="single"
-                value={stroke.strokeLinejoin}
-              >
-                <ToggleGroupItem size="sm" className="flex-1" value="miter">
-                  Miter
-                </ToggleGroupItem>
-                <ToggleGroupItem size="sm" className="flex-1" value="round">
-                  Round
-                </ToggleGroupItem>
-                <ToggleGroupItem size="sm" className="flex-1" value="bevel">
-                  Bevel
-                </ToggleGroupItem>
-              </ToggleGroup>
-            </PanelSubSectionContent>
-          </PanelSubSection>
-          <ColorInput
-            onChange={(value) => handleChange({ strokeColor: value })}
-            onCommit={commit}
-            onDiscard={discard}
-            onDragStart={begin}
-            value={stroke.strokeColor}
-          />
-        </PanelSectionContent>
-      )}
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx
deleted file mode 100644
index 800bafb2f..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/pending-variable-row.tsx
+++ /dev/null
@@ -1,106 +0,0 @@
-"use client";
-
-import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
-import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
-import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
-import { MinusIcon } from "lucide-react";
-import { useEffect, useRef } from "react";
-
-import { LiteralInput } from "@/features/studio/paywalls/designer/components/variables/literal-input";
-
-interface PendingVariable {
-  type: VariableTypeKey;
-  name: string;
-  value: VariableType;
-}
-
-function getValueDisplayText(value: VariableType): string {
-  switch (value.key) {
-    case "string":
-      return value.value || '""';
-    case "number":
-      return String(value.value);
-    case "boolean":
-      return value.value ? "True" : "False";
-    case "product":
-      return value.value.productId ? "..." : "None";
-  }
-}
-
-export interface PendingVariableRowProps {
-  pendingVariable: PendingVariable;
-  onUpdateName: (newName: string) => void;
-  onUpdateValue: (newValue: VariableType) => void;
-  onRemove: () => void;
-  isOpen: boolean;
-  onOpenChange: (open: boolean) => void;
-}
-
-export function PendingVariableRow({
-  pendingVariable,
-  onUpdateName,
-  onUpdateValue,
-  onRemove,
-  isOpen,
-  onOpenChange,
-}: PendingVariableRowProps) {
-  const inputRef = useRef<HTMLInputElement>(null);
-  const valueDisplay = getValueDisplayText(pendingVariable.value);
-
-  // Auto-focus name input when popover opens
-  useEffect(() => {
-    if (isOpen) {
-      // Small delay to ensure popover is rendered
-      const timer = setTimeout(() => {
-        inputRef.current?.focus();
-      }, 50);
-      return () => clearTimeout(timer);
-    }
-  }, [isOpen]);
-
-  return (
-    <div className="flex flex-row items-center gap-2">
-      <Popover onOpenChange={onOpenChange} open={isOpen}>
-        <PopoverTrigger asChild>
-          <Button className="flex-1 justify-start gap-0 px-0" size="sm" variant="secondary">
-            <span className="flex-1 truncate border-r border-border px-2 text-left text-xs">
-              {pendingVariable.name || "Unnamed"}
-            </span>
-            <span className="flex-1 truncate px-2 text-left text-xs text-muted-foreground">
-              {valueDisplay}
-            </span>
-          </Button>
-        </PopoverTrigger>
-        <PopoverContent align="start" className="w-72 p-3" side="left" sideOffset={4}>
-          <div className="flex flex-col gap-3">
-            <div className="flex flex-col gap-2">
-              <span className="text-muted-foreground text-xs font-medium">Name</span>
-              <InputGroup className="h-7 rounded-sm border-none dark:bg-input/60">
-                <InputGroupInput
-                  aria-label="Variable name"
-                  className="h-7 px-1 py-0 pl-2 text-xs"
-                  onChange={(e) => onUpdateName(e.target.value)}
-                  ref={inputRef}
-                  value={pendingVariable.name}
-                />
-              </InputGroup>
-            </div>
-
-            <div className="flex flex-col gap-2">
-              <span className="text-muted-foreground text-xs font-medium">Value</span>
-              <LiteralInput
-                className="flex flex-row gap-1"
-                onChange={onUpdateValue}
-                value={pendingVariable.value}
-              />
-            </div>
-          </div>
-        </PopoverContent>
-      </Popover>
-
-      <Button onClick={onRemove} size="icon-sm" variant="secondary">
-        <MinusIcon />
-      </Button>
-    </div>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx
deleted file mode 100644
index e055d5f12..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/position-section.tsx
+++ /dev/null
@@ -1,183 +0,0 @@
-"use client";
-
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { Schema } from "effect";
-import { ArrowDownIcon, ArrowRightIcon, ScanIcon } from "lucide-react";
-import { useCallback } from "react";
-import { useStore } from "zustand";
-
-import { Button } from "@voidhash/ui";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import {
-  applyPerNodeLayoutStyle,
-  updateLayoutStyle,
-} from "@/features/studio/paywalls/designer/state/actions";
-import { usePaywallDesignerActions } from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { usePaywallDesignerStore } from "../../../state/designer-store";
-import { buildAbsolutePositionSeeds } from "../utils/seed-absolute-position";
-import { TextInput } from "../inputs/text-input";
-import { useStyleTargets } from "../utils/get-style-targets";
-
-/** The position style the section reads and writes (always present on view + text nodes). */
-type PositionNode = {
-  position: "relative" | "absolute";
-  left: number | "auto";
-  top: number | "auto";
-  right: number | "auto";
-  bottom: number | "auto";
-};
-
-/** The numeric value an offset input shows: the stored number, or `0` for `"auto"`. */
-function offsetValue(value: number | "auto"): number {
-  return typeof value === "number" ? value : 0;
-}
-
-export interface PositionSectionProps {
-  nodes: SnapshotNode[];
-}
-
-/**
- * The dedicated `Position` section (view + text nodes, single or multi-select).
- *
- * The absolute-position toggle lives as an icon button on the RIGHT of the
- * section header (pressed = absolute). X/Y offset inputs are ALWAYS visible:
- * - absolute: enabled, editing `left`/`top` (an `"auto"` value shows `0`), a live
- *   draft preview that commits on release, exactly like the old subsection.
- * - relative: disabled, showing the first node's measured offset within its
- *   parent (read live from the canvas bounding boxes, `0` when boxes are missing)
- *   — Figma-style read-only coordinates.
- *
- * Toggling ON seeds each node's `left`/`top` from its OWN offset (via
- * {@link buildAbsolutePositionSeeds}) so a multi-selection stays visually in
- * place; toggling OFF clears all four inset fields back to `"auto"`. A mixed
- * `position` across the selection disables the inputs and suppresses editing.
- */
-export function PositionSection({ nodes }: PositionSectionProps) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets, mixedKeys } = useStyleTargets(nodes);
-  const { draft, begin, commit } = useDesignerDraft(store);
-
-  const node = style as PositionNode | null;
-  const firstNode = nodes[0] as SnapshotNode | undefined;
-  const firstNodeId = firstNode?.id ?? null;
-  const firstParentId = firstNode?.parentId ?? null;
-
-  // The first node's + its parent's raw bounding boxes, read live from the
-  // canvas. Selected as STABLE references (never a freshly-built object) so the
-  // `useSyncExternalStore` snapshot stays cached — the offset is derived below.
-  const nodeBox = useStore(store, (state) =>
-    firstNodeId ? (state.canvas.boundingBoxes[firstNodeId] ?? null) : null,
-  );
-  const parentBox = useStore(store, (state) =>
-    firstParentId ? (state.canvas.boundingBoxes[firstParentId] ?? null) : null,
-  );
-  // The first node's measured offset within its parent — the value the disabled
-  // X/Y fields show in relative flow.
-  const measuredOffset =
-    nodeBox && parentBox ? { left: nodeBox.x - parentBox.x, top: nodeBox.y - parentBox.y } : null;
-
-  const handleDraftChange = useCallback(
-    (incoming: Partial<PositionNode>) => {
-      if (!draft) begin();
-      dispatch(updateLayoutStyle)({ nodes: targets, style: incoming });
-    },
-    [draft, begin, dispatch, targets],
-  );
-
-  const handleCommit = useCallback(() => {
-    commit();
-  }, [commit]);
-
-  // Toggling absolute positioning ON seeds each node from ITS OWN offset (so a
-  // multi-selection stays spread out, not stacked on the first node's spot) in a
-  // single undoable command.
-  const enableAbsolute = useCallback(() => {
-    const seeds = buildAbsolutePositionSeeds(
-      nodes,
-      targets,
-      store.getState().canvas.boundingBoxes,
-    );
-    if (seeds.length === 0) return;
-    dispatch(applyPerNodeLayoutStyle)({ nodes: seeds });
-  }, [dispatch, nodes, targets, store]);
-
-  const disableAbsolute = useCallback(() => {
-    dispatch(updateLayoutStyle)({
-      nodes: targets,
-      style: {
-        position: "relative",
-        left: "auto",
-        top: "auto",
-        right: "auto",
-        bottom: "auto",
-      },
-    });
-  }, [dispatch, targets]);
-
-  if (!node) return null;
-
-  const isAbsolute = node.position === "absolute";
-  const mixedPosition = mixedKeys.has("position");
-  const inputsEnabled = isAbsolute && !mixedPosition;
-
-  // Absolute + uniform: the stored offsets (auto → 0). Otherwise (relative or
-  // mixed) the fields are read-only, showing the measured parent offset.
-  const xValue = inputsEnabled ? offsetValue(node.left) : Math.round(measuredOffset?.left ?? 0);
-  const yValue = inputsEnabled ? offsetValue(node.top) : Math.round(measuredOffset?.top ?? 0);
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Position</PanelSectionTitle>
-        <PanelSectionHeaderActions>
-          <Button
-            aria-label="Absolute position"
-            aria-pressed={isAbsolute}
-            onClick={() => (isAbsolute ? disableAbsolute() : enableAbsolute())}
-            size="icon-sm"
-            variant={isAbsolute ? "default" : "ghost"}
-          >
-            <ScanIcon className="size-3.5" />
-          </Button>
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <div className="flex flex-row gap-2">
-          <TextInput
-            disabled={!inputsEnabled}
-            icon={<ArrowRightIcon className="size-3.5" />}
-            label="X"
-            mixed={inputsEnabled && mixedKeys.has("left")}
-            onChange={(value) => handleDraftChange({ left: Number(value) })}
-            onCommit={handleCommit}
-            type="number"
-            typeNumberStepIncrement={1}
-            validator={Schema.String}
-            value={xValue.toString()}
-          />
-          <TextInput
-            disabled={!inputsEnabled}
-            icon={<ArrowDownIcon className="size-3.5" />}
-            label="Y"
-            mixed={inputsEnabled && mixedKeys.has("top")}
-            onChange={(value) => handleDraftChange({ top: Number(value) })}
-            onCommit={handleCommit}
-            type="number"
-            typeNumberStepIncrement={1}
-            validator={Schema.String}
-            value={yValue.toString()}
-          />
-        </div>
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx
deleted file mode 100644
index a43be80df..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/safe-area-section.tsx
+++ /dev/null
@@ -1,50 +0,0 @@
-"use client";
-
-import { Switch } from "@voidhash/ui";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-
-interface SafeAreaSectionProps {
-  safeArea: {
-    top: boolean;
-    bottom: boolean;
-  };
-  onSafeAreaChange: (value: { top: boolean; bottom: boolean }) => void;
-}
-
-export function SafeAreaSection({ safeArea, onSafeAreaChange }: SafeAreaSectionProps) {
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Safe Area</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <div className="flex flex-col gap-3">
-          <div className="flex items-center justify-between">
-            <span className="text-sm">Top</span>
-            <Switch
-              checked={safeArea.top}
-              onCheckedChange={(checked) => {
-                onSafeAreaChange({ ...safeArea, top: checked });
-              }}
-            />
-          </div>
-          <div className="flex items-center justify-between">
-            <span className="text-sm">Bottom</span>
-            <Switch
-              checked={safeArea.bottom}
-              onCheckedChange={(checked) => {
-                onSafeAreaChange({ ...safeArea, bottom: checked });
-              }}
-            />
-          </div>
-        </div>
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx
deleted file mode 100644
index cf174d6d5..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/scroll-view-settings-section.tsx
+++ /dev/null
@@ -1,72 +0,0 @@
-"use client";
-
-/**
- * Legacy `Scroll` settings section for scrollView nodes. Exposes the two
- * scrollView-only data flags as switches: `horizontal` (scroll axis; off =
- * vertical) and `showsScrollIndicator` (native scrollbar visibility). Every
- * write goes through the node-level `updateScrollViewNode` action, applied to
- * EVERY selected scrollView so it works in a homogeneous multi-selection. A flag
- * whose selected nodes disagree renders unchecked until toggled.
- */
-import type { ScrollViewSnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { Switch } from "@voidhash/ui";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-
-import { updateScrollViewNode } from "@/features/studio/paywalls/designer/state/actions";
-
-import { usePaywallDesignerActions } from "../../../state/designer-store";
-
-/** Reads whether every node shares the same flag value (else "mixed"). */
-function collapseFlag(values: boolean[]): boolean {
-  const first = values[0] ?? false;
-  return values.some((value) => value !== first) ? false : first;
-}
-
-export function ScrollViewSettingsSection({ nodes }: { nodes: ScrollViewSnapshotNode[] }) {
-  const dispatch = usePaywallDesignerActions();
-
-  if (nodes.length === 0) {
-    return null;
-  }
-
-  const horizontal = collapseFlag(nodes.map((node) => node.data.horizontal));
-  const showsScrollIndicator = collapseFlag(nodes.map((node) => node.data.showsScrollIndicator));
-
-  const setHorizontal = (checked: boolean) => {
-    for (const node of nodes) {
-      dispatch(updateScrollViewNode)({ id: node.id, updates: { horizontal: checked } });
-    }
-  };
-
-  const setShowsScrollIndicator = (checked: boolean) => {
-    for (const node of nodes) {
-      dispatch(updateScrollViewNode)({ id: node.id, updates: { showsScrollIndicator: checked } });
-    }
-  };
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Scroll</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <div className="flex flex-col gap-3">
-          <div className="flex items-center justify-between">
-            <span className="text-sm">Horizontal</span>
-            <Switch checked={horizontal} onCheckedChange={setHorizontal} />
-          </div>
-          <div className="flex items-center justify-between">
-            <span className="text-sm">Show scroll indicator</span>
-            <Switch checked={showsScrollIndicator} onCheckedChange={setShowsScrollIndicator} />
-          </div>
-        </div>
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx
deleted file mode 100644
index 2e41b1ea2..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/shape-layout-section.tsx
+++ /dev/null
@@ -1,151 +0,0 @@
-"use client";
-
-import type { ShapeSnapshotNode, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { useCallback } from "react";
-import { useStore } from "zustand";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-  PanelSubSection,
-  PanelSubSectionContent,
-  PanelSubSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { updateShapeNode } from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { getAlignItems, getFlexDirection } from "../../../state/utils/node-type-helpers";
-import { getNodeById } from "../../../state/utils/nodes";
-import { HeightInput } from "../inputs/height-input";
-import { WidthInput } from "../inputs/width-input";
-
-type ShapeLayoutNode = {
-  width: number | "auto";
-  height: number | "auto";
-  flex: number | undefined;
-  flexGrow: number;
-  flexShrink: number;
-  flexBasis: number | "auto";
-  alignSelf: "auto" | "flex-start" | "center" | "flex-end" | "stretch" | "baseline";
-};
-
-export function ShapeLayoutSection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { draft, begin, commit } = useDesignerDraft(store);
-
-  const firstNode: ShapeSnapshotNode | undefined =
-    nodes[0]?.type === "shape" ? nodes[0] : undefined;
-  if (!firstNode) return null;
-
-  const style = firstNode.data.style;
-  const node: ShapeLayoutNode = { ...style, flex: style.flex };
-  const parentId = firstNode.parentId;
-
-  const handleChange = useCallback(
-    (incoming: Partial<ShapeLayoutNode>) => {
-      dispatch(updateShapeNode)({
-        id: firstNode.id,
-        updates: { style: incoming },
-      });
-    },
-    [dispatch, firstNode.id],
-  );
-
-  const handleDraftChange = useCallback(
-    (incoming: Partial<ShapeLayoutNode>) => {
-      if (!draft) begin();
-      dispatch(updateShapeNode)({
-        id: firstNode.id,
-        updates: { style: incoming },
-      });
-    },
-    [draft, begin, dispatch, firstNode.id],
-  );
-
-  const handleCommit = useCallback(() => {
-    commit();
-  }, [commit]);
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Layout</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <DimensionsSubSection
-          handleCommit={handleCommit}
-          handleDraftChange={handleDraftChange}
-          node={node}
-          nodeId={firstNode.id}
-          onNodeChange={handleChange}
-          parentId={parentId ?? ""}
-        />
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
-
-type DimensionsSubSectionProps = {
-  node: ShapeLayoutNode;
-  nodeId: string;
-  onNodeChange: (style: Partial<ShapeLayoutNode>) => void;
-  handleDraftChange: (style: Partial<ShapeLayoutNode>) => void;
-  handleCommit: () => void;
-  parentId: string;
-};
-
-function DimensionsSubSection({
-  node,
-  nodeId,
-  onNodeChange,
-  handleDraftChange,
-  handleCommit,
-  parentId,
-}: DimensionsSubSectionProps) {
-  const store = usePaywallDesignerStore();
-  const parent = useStore(store, (state) => getNodeById(state, parentId));
-  const boundingBox = useStore(store, (state) => state.canvas.boundingBoxes[nodeId] ?? null);
-
-  const parentDirection = parent ? getFlexDirection(parent, "row") : "row";
-  const parentAlignItems = getAlignItems(parent, "stretch");
-
-  const computedWidth = boundingBox ? Math.round(boundingBox.width) : null;
-  const computedHeight = boundingBox ? Math.round(boundingBox.height) : null;
-
-  return (
-    <PanelSubSection>
-      <PanelSubSectionTitle>Dimensions</PanelSubSectionTitle>
-      <PanelSubSectionContent>
-        <div className="flex flex-row gap-2">
-          <WidthInput
-            computedWidth={computedWidth}
-            disabled={false}
-            node={node}
-            onCommit={handleCommit}
-            onDraftChange={handleDraftChange}
-            onNodeChange={onNodeChange}
-            parentAlignItems={parentAlignItems}
-            parentDirection={parentDirection}
-          />
-          <HeightInput
-            computedHeight={computedHeight}
-            disabled={false}
-            node={node}
-            onCommit={handleCommit}
-            onDraftChange={handleDraftChange}
-            onNodeChange={onNodeChange}
-            parentAlignItems={parentAlignItems}
-            parentDirection={parentDirection}
-          />
-        </div>
-      </PanelSubSectionContent>
-    </PanelSubSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx
deleted file mode 100644
index 3dd3c667d..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/states-section.tsx
+++ /dev/null
@@ -1,187 +0,0 @@
-"use client";
-
-import type {
-  PathSnapshotNode,
-  ScreenSnapshotNode,
-  ScrollViewSnapshotNode,
-  ShapeSnapshotNode,
-  TextSnapshotNode,
-  ViewSnapshotNode,
-} from "@voidhash/paywall-renderer-web-core";
-import { Button, cn } from "@voidhash/ui";
-import { SettingsIcon } from "lucide-react";
-import { useEffect, useMemo, useState } from "react";
-import { useStore } from "zustand/react";
-
-import { StateManagerSheet } from "@/features/studio/paywalls/designer/components/state-manager";
-import type {
-  CRDTState,
-  CRDTVariable,
-} from "@/features/studio/paywalls/designer/components/state-manager/types";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import {
-  addNodeState,
-  removeNodeState,
-  setStateOverrideSelection,
-  updateNodeState,
-} from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-import { collectAncestorVariables } from "@/features/studio/paywalls/designer/state/utils/ancestor-variables";
-import { selectDocumentRoot } from "@/features/studio/paywalls/designer/state/utils/document-root";
-import type { DnfInput } from "@/features/studio/paywalls/designer/state/utils/replay";
-import { getSelectedStateIdForNode } from "@/features/studio/paywalls/designer/state/utils/state-overrides";
-
-type NodeWithStates =
-  | ViewSnapshotNode
-  | ScrollViewSnapshotNode
-  | ScreenSnapshotNode
-  | TextSnapshotNode
-  | ShapeSnapshotNode
-  | PathSnapshotNode;
-
-export interface StatesSectionProps {
-  nodes: NodeWithStates[];
-}
-
-export const StatesSection = ({ nodes }: StatesSectionProps) => {
-  const store = usePaywallDesignerStore();
-  const node = nodes[0]!;
-  const dispatch = usePaywallDesignerActions();
-  const nodeType = node.type;
-  const states: readonly CRDTState[] = node.data.states.flatMap((entry) =>
-    entry.value === undefined ? [] : [{ id: entry.id, value: entry.value }],
-  );
-  const [isSheetOpen, setIsSheetOpen] = useState(false);
-  const isSingleNodeSelection = nodes.length === 1;
-  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
-  const documentRoot = useStore(store, selectDocumentRoot);
-
-  const variables = useMemo((): readonly CRDTVariable[] => {
-    return collectAncestorVariables(documentRoot, node.id).map((variable) => ({
-      id: variable.id,
-      ownerLabel: variable.ownerNodeId === node.id ? undefined : variable.ownerName,
-      value: { name: variable.name, value: variable.value },
-    }));
-  }, [documentRoot, node.id]);
-
-  const selectedStateId = getSelectedStateIdForNode(stateOverrideSelection, node.id);
-
-  useEffect(() => {
-    if (!selectedStateId) {
-      return;
-    }
-    const hasSelectedState = states.some((state) => state.id === selectedStateId);
-    if (!hasSelectedState) {
-      dispatch(setStateOverrideSelection)({
-        nodeId: node.id,
-        stateId: null,
-      });
-    }
-  }, [dispatch, node.id, selectedStateId, states]);
-
-  const handleAddState = (name: string, condition: DnfInput) => {
-    dispatch(addNodeState)({ condition, name, nodeId: node.id, nodeType });
-  };
-
-  const handleRemoveState = (stateId: string) => {
-    dispatch(removeNodeState)({ nodeId: node.id, nodeType, stateId });
-  };
-
-  const handleUpdateStateName = (stateId: string, newName: string) => {
-    dispatch(updateNodeState)({ newName, nodeId: node.id, nodeType, stateId });
-  };
-
-  const handleUpdateStateCondition = (stateId: string, newCondition: DnfInput) => {
-    dispatch(updateNodeState)({
-      newCondition,
-      nodeId: node.id,
-      nodeType,
-      stateId,
-    });
-  };
-
-  const handleSelectDefault = () => {
-    if (!isSingleNodeSelection) return;
-    dispatch(setStateOverrideSelection)({
-      nodeId: node.id,
-      stateId: null,
-    });
-  };
-
-  const handleSelectState = (stateId: string) => {
-    if (!isSingleNodeSelection) return;
-    dispatch(setStateOverrideSelection)({
-      nodeId: node.id,
-      stateId,
-    });
-  };
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>States</PanelSectionTitle>
-        <PanelSectionHeaderActions>
-          <Button onClick={() => setIsSheetOpen(true)} size="icon-sm" variant="secondary">
-            <SettingsIcon />
-          </Button>
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      {states.length > 0 && (
-        <PanelSectionContent>
-          <div className="flex flex-col">
-            <button
-              className={cn(
-                "flex h-7 w-full items-center rounded-sm px-2 text-left font-medium text-xs",
-                selectedStateId === null
-                  ? "bg-accent text-accent-foreground"
-                  : "text-muted-foreground",
-                states.length > 0 && "rounded-b-none",
-              )}
-              disabled={!isSingleNodeSelection}
-              onClick={handleSelectDefault}
-              type="button"
-            >
-              Default
-            </button>
-            {states.map((state, index) => (
-              <button
-                className={cn(
-                  "flex h-7 w-full items-center rounded-sm px-2 text-left font-medium text-xs",
-                  selectedStateId === state.id
-                    ? "bg-accent text-accent-foreground"
-                    : "text-muted-foreground",
-                  index === 0 && "rounded-t-none",
-                )}
-                disabled={!isSingleNodeSelection}
-                key={state.id}
-                onClick={() => handleSelectState(state.id)}
-                type="button"
-              >
-                {state.value.name}
-              </button>
-            ))}
-          </div>
-        </PanelSectionContent>
-      )}
-      <StateManagerSheet
-        onAddState={handleAddState}
-        onOpenChange={setIsSheetOpen}
-        onRemoveState={handleRemoveState}
-        onUpdateStateCondition={handleUpdateStateCondition}
-        onUpdateStateName={handleUpdateStateName}
-        open={isSheetOpen}
-        states={states}
-        variables={variables}
-      />
-    </PanelSection>
-  );
-};
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx
deleted file mode 100644
index 420e412c5..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/text-fill-section.tsx
+++ /dev/null
@@ -1,85 +0,0 @@
-"use client";
-
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import { useCallback } from "react";
-
-import { ColorInput } from "@/features/studio/paywalls/designer/components/ui/color-input";
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { updateTextFillStyle } from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { OverrideResetAffordance } from "../components/override-reset-affordance";
-import { useStyleTargets } from "../utils/get-style-targets";
-import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
-
-export function TextFillSection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets, mixedKeys } = useStyleTargets(nodes);
-  const overrideReset = useStyleOverrideResetContext(nodes);
-  const { begin, commit, discard } = useDesignerDraft(store);
-  const colorKeys = ["color"] as const;
-
-  const fill = style as { color: string } | null;
-  const showColorReset = overrideReset.isOverrideModeActive && overrideReset.hasOverride(colorKeys);
-
-  const handleColorChange = useCallback(
-    (value: string) => {
-      dispatch(updateTextFillStyle)({
-        nodes: targets,
-        style: { color: value },
-      });
-    },
-    [dispatch, targets],
-  );
-  const handleChange = useCallback(
-    (incoming: Partial<{ color: string }>) => {
-      dispatch(updateTextFillStyle)({
-        nodes: targets,
-        style: incoming,
-      });
-    },
-    [dispatch, targets],
-  );
-
-  if (!fill) return null;
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Fill</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <OverrideResetAffordance
-          label="text color"
-          onReset={() =>
-            handleChange(
-              overrideReset.buildResetPatch(colorKeys) as Partial<{
-                color: string;
-              }>,
-            )
-          }
-          show={showColorReset}
-        >
-          <ColorInput
-            mixed={mixedKeys.has("color")}
-            onChange={handleColorChange}
-            onCommit={commit}
-            onDiscard={discard}
-            onDragStart={begin}
-            value={fill.color}
-          />
-        </OverrideResetAffordance>
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx
deleted file mode 100644
index 7e0013326..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/typography-section.tsx
+++ /dev/null
@@ -1,303 +0,0 @@
-"use client";
-
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import type { FontWeight, TextAlign } from "@voidhash/mimic-schema";
-import { useDesignerDraft } from "@/features/studio/paywalls/designer/hooks/use-designer-draft";
-import {
-  Button,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuTrigger,
-  ToggleGroup,
-  ToggleGroupItem,
-} from "@voidhash/ui";
-import { Schema } from "effect";
-import {
-  AlignCenter,
-  AlignLeft,
-  AlignRight,
-  BookTypeIcon,
-  ChevronDownIcon,
-  TypeIcon,
-} from "lucide-react";
-import { useCallback } from "react";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionTitle,
-  PanelSubSection,
-  PanelSubSectionContent,
-  PanelSubSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { SelectInput } from "@/features/studio/paywalls/designer/components/ui/select-input";
-import { updateTypographyStyle } from "@/features/studio/paywalls/designer/state/actions";
-import {
-  usePaywallDesignerActions,
-  usePaywallDesignerStore,
-} from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { OverrideResetAffordance } from "../components/override-reset-affordance";
-import { TextInput } from "../inputs/text-input";
-import { useStyleTargets } from "../utils/get-style-targets";
-import { useStyleOverrideResetContext } from "../utils/use-style-override-reset-context";
-
-type TypographyNode = {
-  fontSize: number;
-  fontWeight: FontWeight;
-  textAlign: TextAlign;
-  lineHeight: number;
-  letterSpacing: number;
-  color: string;
-};
-
-const FONT_WEIGHT_OPTIONS: { value: FontWeight; label: string }[] = [
-  { label: "Thin", value: "100" },
-  { label: "Extra Light", value: "200" },
-  { label: "Light", value: "300" },
-  { label: "Regular", value: "400" },
-  { label: "Medium", value: "500" },
-  { label: "Semibold", value: "600" },
-  { label: "Bold", value: "700" },
-  { label: "Extra Bold", value: "800" },
-  { label: "Black", value: "900" },
-];
-
-const FONT_FAMILY_OPTIONS: { value: string; label: string }[] = [
-  { label: "Default", value: "geist-variable" },
-];
-
-export function TypographySection({ nodes }: { nodes: SnapshotNode[] }) {
-  const store = usePaywallDesignerStore();
-  const dispatch = usePaywallDesignerActions();
-  const { style, targets, mixedKeys } = useStyleTargets(nodes);
-  const overrideReset = useStyleOverrideResetContext(nodes);
-  const { draft, begin, commit } = useDesignerDraft(store);
-
-  const node = style as TypographyNode | null;
-  const fontWeightKeys = ["fontWeight"] as const;
-  const fontSizeKeys = ["fontSize"] as const;
-  const lineHeightKeys = ["lineHeight"] as const;
-  const letterSpacingKeys = ["letterSpacing"] as const;
-  const textAlignKeys = ["textAlign"] as const;
-
-  const handleChange = useCallback(
-    (incoming: Partial<TypographyNode>) => {
-      dispatch(updateTypographyStyle)({ nodes: targets, style: incoming });
-    },
-    [dispatch, targets],
-  );
-
-  const handleDraftChange = useCallback(
-    (incoming: Partial<TypographyNode>) => {
-      if (!draft) begin();
-      dispatch(updateTypographyStyle)({ nodes: targets, style: incoming });
-    },
-    [draft, begin, dispatch, targets],
-  );
-
-  const handleCommit = useCallback(() => {
-    commit();
-  }, [commit]);
-
-  if (!node) return null;
-
-  const isLineHeightAuto = node.lineHeight === 0;
-  const showFontWeightReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(fontWeightKeys);
-  const showFontSizeReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(fontSizeKeys);
-  const showLineHeightReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(lineHeightKeys);
-  const showLetterSpacingReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(letterSpacingKeys);
-  const showTextAlignReset =
-    overrideReset.isOverrideModeActive && overrideReset.hasOverride(textAlignKeys);
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Typography</PanelSectionTitle>
-      </PanelSectionHeader>
-      <PanelSectionContent>
-        <div className="flex flex-col gap-2">
-          <SelectInput
-            disabled={true}
-            icon={<BookTypeIcon className="size-3.5" />}
-            label="Font Family"
-            onChange={() => {
-              // Do nothing
-            }}
-            options={FONT_FAMILY_OPTIONS}
-            placeholder="Default"
-            value={FONT_FAMILY_OPTIONS[0]?.value ?? ""}
-          />
-
-          <div className="flex flex-row gap-2">
-            <OverrideResetAffordance
-              className="flex-1"
-              label="font weight"
-              onReset={() =>
-                handleChange(
-                  overrideReset.buildResetPatch(fontWeightKeys) as Partial<TypographyNode>,
-                )
-              }
-              show={showFontWeightReset}
-            >
-              <SelectInput
-                icon={<div className="font-bold text-xs">W</div>}
-                label="Font Weight"
-                mixed={mixedKeys.has("fontWeight")}
-                onChange={(value) => handleChange({ fontWeight: value as FontWeight })}
-                options={FONT_WEIGHT_OPTIONS}
-                value={node.fontWeight}
-              />
-            </OverrideResetAffordance>
-            <OverrideResetAffordance
-              className="flex-1"
-              label="font size"
-              onReset={() =>
-                handleChange(overrideReset.buildResetPatch(fontSizeKeys) as Partial<TypographyNode>)
-              }
-              show={showFontSizeReset}
-            >
-              <TextInput
-                icon={<TypeIcon className="size-3.5" />}
-                label="Font Size"
-                mixed={mixedKeys.has("fontSize")}
-                minValue={1}
-                onChange={(value) => handleDraftChange({ fontSize: Number(value) })}
-                onCommit={handleCommit}
-                type="number"
-                typeNumberStepIncrement={1}
-                validator={Schema.String}
-                value={node.fontSize.toString()}
-              />
-            </OverrideResetAffordance>
-          </div>
-
-          <div className="flex flex-row gap-2">
-            <OverrideResetAffordance
-              className="flex-1"
-              label="line height"
-              onReset={() =>
-                handleChange(
-                  overrideReset.buildResetPatch(lineHeightKeys) as Partial<TypographyNode>,
-                )
-              }
-              show={showLineHeightReset}
-            >
-              <TextInput
-                disabled={isLineHeightAuto}
-                icon={<div className="text-xs">A</div>}
-                label="Line Height"
-                mixed={mixedKeys.has("lineHeight")}
-                minValue={0.5}
-                onChange={(value) => handleDraftChange({ lineHeight: Number(value) })}
-                onCommit={handleCommit}
-                trailing={
-                  <DropdownMenu>
-                    <DropdownMenuTrigger asChild>
-                      <Button
-                        className="bg-transparent pr-3 dark:bg-transparent"
-                        size="sm"
-                        variant="secondary"
-                      >
-                        {isLineHeightAuto ? (
-                          <div className="font-bold text-xs">Auto</div>
-                        ) : (
-                          <ChevronDownIcon className="size-3.5" />
-                        )}
-                      </Button>
-                    </DropdownMenuTrigger>
-                    <DropdownMenuContent>
-                      <DropdownMenuItem onSelect={() => handleChange({ lineHeight: 0 })}>
-                        Auto
-                      </DropdownMenuItem>
-                      <DropdownMenuItem
-                        onSelect={() =>
-                          handleChange({
-                            lineHeight: isLineHeightAuto ? 1.5 : node.lineHeight,
-                          })
-                        }
-                      >
-                        Fixed ({isLineHeightAuto ? "1.5" : node.lineHeight.toFixed(1)})
-                      </DropdownMenuItem>
-                    </DropdownMenuContent>
-                  </DropdownMenu>
-                }
-                type="number"
-                typeNumberStepIncrement={0.1}
-                validator={Schema.String}
-                value={isLineHeightAuto ? "Auto" : node.lineHeight.toString()}
-              />
-            </OverrideResetAffordance>
-            <OverrideResetAffordance
-              className="flex-1"
-              label="letter spacing"
-              onReset={() =>
-                handleChange(
-                  overrideReset.buildResetPatch(letterSpacingKeys) as Partial<TypographyNode>,
-                )
-              }
-              show={showLetterSpacingReset}
-            >
-              <TextInput
-                icon={<div className="font-mono text-xs">|A|</div>}
-                label="Letter Spacing"
-                mixed={mixedKeys.has("letterSpacing")}
-                onChange={(value) => handleDraftChange({ letterSpacing: Number(value) })}
-                onCommit={handleCommit}
-                type="number"
-                typeNumberStepIncrement={0.1}
-                validator={Schema.String}
-                value={node.letterSpacing.toString()}
-              />
-            </OverrideResetAffordance>
-          </div>
-        </div>
-
-        <PanelSubSection>
-          <PanelSubSectionTitle>Alignment</PanelSubSectionTitle>
-          <PanelSubSectionContent>
-            <div className="flex flex-row items-center gap-2">
-              <OverrideResetAffordance
-                label="text align"
-                onReset={() =>
-                  handleChange(
-                    overrideReset.buildResetPatch(textAlignKeys) as Partial<TypographyNode>,
-                  )
-                }
-                show={showTextAlignReset}
-              >
-                <ToggleGroup
-                  variant="outline"
-                  size="sm"
-                  onValueChange={(value) => {
-                    if (value) {
-                      handleChange({ textAlign: value as TextAlign });
-                    }
-                  }}
-                  type="single"
-                  value={mixedKeys.has("textAlign") ? undefined : node.textAlign}
-                >
-                  <ToggleGroupItem size="sm" className="min-w-7 px-2" value="left">
-                    <AlignLeft className="size-3.5" />
-                  </ToggleGroupItem>
-                  <ToggleGroupItem size="sm" className="min-w-7 px-2" value="center">
-                    <AlignCenter className="size-3.5" />
-                  </ToggleGroupItem>
-                  <ToggleGroupItem size="sm" className="min-w-7 px-2" value="right">
-                    <AlignRight className="size-3.5" />
-                  </ToggleGroupItem>
-                </ToggleGroup>
-              </OverrideResetAffordance>
-            </div>
-          </PanelSubSectionContent>
-        </PanelSubSection>
-      </PanelSectionContent>
-    </PanelSection>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx
deleted file mode 100644
index 473712291..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variable-row.tsx
+++ /dev/null
@@ -1,150 +0,0 @@
-"use client";
-
-import { useQuery } from "@tanstack/react-query";
-import { useParams } from "@tanstack/react-router";
-import type { Variable, VariableType } from "@voidhash/mimic-schema";
-import { Button, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
-import { InputGroup, InputGroupInput } from "@voidhash/ui/input-group";
-import { MinusIcon } from "lucide-react";
-import { useEffect, useMemo, useState } from "react";
-
-import { useAuth } from "@/features/studio/components/auth-context";
-import { listProductsOptions } from "@/features/studio/lib/tanstack-query/products";
-import { CurrentUser } from "@/features/studio/lib/utils/current-user";
-
-import { LiteralInput } from "@/features/studio/paywalls/designer/components/variables/literal-input";
-import { PopoverHeader } from "../../../components/ui/popover-header";
-
-function useProductName(productId: string | null): string | null {
-  const { organizationSlug, projectSlug } = useParams({ strict: false });
-  const { user } = useAuth();
-
-  const project = useMemo(() => {
-    if (!organizationSlug || !projectSlug) return null;
-    return CurrentUser.getProjectBySlugs(user, organizationSlug as string, projectSlug as string);
-  }, [user, organizationSlug, projectSlug]);
-
-  const { data: products } = useQuery({
-    ...listProductsOptions({ projectId: project?.id ?? "" }),
-    enabled: !!project?.id && !!productId,
-  });
-
-  return useMemo(() => {
-    if (!productId || !products) return null;
-    return products.find((p) => p.id === productId)?.name ?? null;
-  }, [productId, products]);
-}
-
-function getValueDisplayText(value: VariableType, productName: string | null): string {
-  switch (value.key) {
-    case "string":
-      return value.value || '""';
-    case "number":
-      return String(value.value);
-    case "boolean":
-      return value.value ? "True" : "False";
-    case "product":
-      if (!value.value.productId) return "None";
-      return productName ?? "...";
-  }
-}
-
-export interface VariableRowProps {
-  variable: Variable;
-  onUpdateName: (newName: string) => void;
-  onUpdateValue: (newValue: VariableType) => void;
-  onRemove: () => void;
-  isOpen: boolean;
-  onOpenChange: (open: boolean) => void;
-}
-
-export function VariableRow({
-  variable,
-  onUpdateName,
-  onUpdateValue,
-  onRemove,
-  isOpen,
-  onOpenChange,
-}: VariableRowProps) {
-  // Local editing state - only persisted when popover closes
-  const [editName, setEditName] = useState(variable.name);
-  const [editValue, setEditValue] = useState<VariableType>(variable.value);
-
-  // Reset local state when popover opens or variable changes from outside
-  useEffect(() => {
-    if (isOpen) {
-      setEditName(variable.name);
-      setEditValue(variable.value);
-    }
-  }, [isOpen, variable.name, variable.value]);
-
-  const displayProductId =
-    variable.value.key === "product" ? (variable.value.value.productId ?? null) : null;
-  const productName = useProductName(displayProductId);
-  const valueDisplay = getValueDisplayText(variable.value, productName);
-
-  const handleOpenChange = (open: boolean) => {
-    if (!open) {
-      // Persist changes when closing
-      if (editName !== variable.name) {
-        onUpdateName(editName);
-      }
-      if (JSON.stringify(editValue) !== JSON.stringify(variable.value)) {
-        onUpdateValue(editValue);
-      }
-    }
-    onOpenChange(open);
-  };
-
-  return (
-    <div className="flex flex-row items-center gap-2">
-      <Popover onOpenChange={handleOpenChange} open={isOpen}>
-        <PopoverTrigger asChild>
-          <Button className="flex-1 justify-start gap-0 px-0" size="sm" variant="secondary">
-            <span className="flex-1 truncate border-r border-border px-2 text-left text-xs">
-              {variable.name || "Unnamed"}
-            </span>
-            <span className="flex-1 truncate px-2 text-left text-xs text-muted-foreground">
-              {valueDisplay}
-            </span>
-          </Button>
-        </PopoverTrigger>
-        <PopoverContent
-          align="start"
-          className="w-72 p-3"
-          onOpenAutoFocus={(e) => e.preventDefault()}
-          side="left"
-          sideOffset={4}
-        >
-          <PopoverHeader title="Variable" onClose={() => handleOpenChange(false)} />
-          <div className="flex flex-col gap-3">
-            <div className="flex flex-col gap-2">
-              <span className="text-muted-foreground text-xs font-medium">Name</span>
-              <InputGroup className="h-7 rounded-sm border-none dark:bg-input/60">
-                <InputGroupInput
-                  aria-label="Variable name"
-                  className="h-7 px-1 py-0 pl-2 text-xs"
-                  onChange={(e) => setEditName(e.target.value)}
-                  value={editName}
-                />
-              </InputGroup>
-            </div>
-
-            <div className="flex flex-col gap-2">
-              <span className="text-muted-foreground text-xs font-medium">Value</span>
-              <LiteralInput
-                className="flex flex-row gap-1"
-                onChange={setEditValue}
-                value={editValue}
-              />
-            </div>
-          </div>
-        </PopoverContent>
-      </Popover>
-
-      <Button onClick={onRemove} size="icon-sm" variant="secondary">
-        <MinusIcon />
-      </Button>
-    </div>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx
deleted file mode 100644
index b860260cc..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/sections/variables-section.tsx
+++ /dev/null
@@ -1,221 +0,0 @@
-"use client";
-
-import type { VariableType, VariableTypeKey } from "@voidhash/mimic-schema";
-import type {
-  PathSnapshotNode,
-  ScreenSnapshotNode,
-  ScrollViewSnapshotNode,
-  ShapeSnapshotNode,
-  TextSnapshotNode,
-  ViewSnapshotNode,
-} from "@voidhash/paywall-renderer-web-core";
-import {
-  Button,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuSeparator,
-  DropdownMenuTrigger,
-} from "@voidhash/ui";
-import { PlusIcon } from "lucide-react";
-import { useCallback, useEffect, useState } from "react";
-import { toast } from "sonner";
-
-import {
-  PanelSection,
-  PanelSectionContent,
-  PanelSectionHeader,
-  PanelSectionHeaderActions,
-  PanelSectionTitle,
-} from "@/features/studio/paywalls/designer/components/ui/panel-section";
-import { VARIABLE_TYPE_REGISTRY } from "@/features/studio/paywalls/designer/constants";
-import {
-  addVariable,
-  removeVariable,
-  updateVariable,
-} from "@/features/studio/paywalls/designer/state/actions";
-import { usePaywallDesignerActions } from "@/features/studio/paywalls/designer/state/designer-store";
-
-import { PendingVariableRow } from "./pending-variable-row";
-import { VariableRow } from "./variable-row";
-
-type NodeWithVariables =
-  | ViewSnapshotNode
-  | ScrollViewSnapshotNode
-  | ScreenSnapshotNode
-  | TextSnapshotNode
-  | ShapeSnapshotNode
-  | PathSnapshotNode;
-
-interface PendingVariable {
-  type: VariableTypeKey;
-  name: string;
-  value: VariableType;
-}
-
-export interface VariablesSectionProps {
-  nodes: NodeWithVariables[];
-}
-
-export const VariablesSection = ({ nodes }: VariablesSectionProps) => {
-  const node = nodes[0]!;
-  const dispatch = usePaywallDesignerActions();
-  const nodeType = node.type;
-  const variables = node.data.localVariables.flatMap((entry) =>
-    entry.value === undefined ? [] : [{ id: entry.id, value: entry.value }],
-  );
-  const existingVariableNames = new Set(variables.map((v) => v.value.name));
-
-  const [openVariableId, setOpenVariableId] = useState<string | null>(null);
-  const [pendingVariable, setPendingVariable] = useState<PendingVariable | null>(null);
-  const [isPendingPopoverOpen, setIsPendingPopoverOpen] = useState(false);
-
-  useEffect(() => {
-    if (pendingVariable && !isPendingPopoverOpen) {
-      const timer = setTimeout(() => {
-        setIsPendingPopoverOpen(true);
-      }, 200);
-      return () => clearTimeout(timer);
-    }
-    if (!pendingVariable) {
-      setIsPendingPopoverOpen(false);
-    }
-  }, [pendingVariable, isPendingPopoverOpen]);
-
-  const handleStartAdding = useCallback((type: VariableTypeKey) => {
-    const defaultValue = VARIABLE_TYPE_REGISTRY[type].defaultValue;
-    setPendingVariable({ type, name: "", value: defaultValue });
-    setIsPendingPopoverOpen(false);
-    setOpenVariableId(null);
-  }, []);
-
-  const handlePendingNameChange = useCallback((name: string) => {
-    setPendingVariable((prev) => (prev ? { ...prev, name } : null));
-  }, []);
-
-  const handlePendingValueChange = useCallback((value: VariableType) => {
-    setPendingVariable((prev) => (prev ? { ...prev, value } : null));
-  }, []);
-
-  const handlePendingOpenChange = useCallback(
-    (open: boolean) => {
-      if (!open && isPendingPopoverOpen && pendingVariable) {
-        const trimmedName = pendingVariable.name.trim();
-
-        if (!trimmedName) {
-          setPendingVariable(null);
-          return;
-        }
-
-        if (trimmedName.length > 32) {
-          toast.error("Variable name must be less than 32 characters");
-          setPendingVariable(null);
-          return;
-        }
-
-        if (existingVariableNames.has(trimmedName)) {
-          toast.error("A variable with this name already exists");
-          setPendingVariable(null);
-          return;
-        }
-
-        dispatch(addVariable)({
-          name: trimmedName,
-          nodeId: node.id,
-          nodeType,
-          type: pendingVariable.type,
-        });
-        setPendingVariable(null);
-      }
-    },
-    [isPendingPopoverOpen, pendingVariable, existingVariableNames, node.id, nodeType, dispatch],
-  );
-
-  const handleVariableOpenChange = useCallback((variableId: string, open: boolean) => {
-    if (open) {
-      setPendingVariable(null);
-      setOpenVariableId(variableId);
-    } else {
-      setOpenVariableId(null);
-    }
-  }, []);
-
-  const handleRemoveVariable = (variableId: string) => {
-    dispatch(removeVariable)({ nodeId: node.id, nodeType, variableId });
-  };
-
-  const handleUpdateVariableName = (variableId: string, newName: string) => {
-    dispatch(updateVariable)({
-      newName,
-      nodeId: node.id,
-      nodeType,
-      variableId,
-    });
-  };
-
-  const handleUpdateVariableValue = (variableId: string, value: VariableType) => {
-    dispatch(updateVariable)({
-      newValue: value,
-      nodeId: node.id,
-      nodeType,
-      variableId,
-    });
-  };
-
-  return (
-    <PanelSection>
-      <PanelSectionHeader>
-        <PanelSectionTitle>Variables</PanelSectionTitle>
-        <PanelSectionHeaderActions>
-          <DropdownMenu>
-            <DropdownMenuTrigger asChild>
-              <Button size="icon-sm" variant="secondary">
-                <PlusIcon />
-              </Button>
-            </DropdownMenuTrigger>
-            <DropdownMenuContent align="end">
-              <DropdownMenuItem onClick={() => handleStartAdding("string")}>Text</DropdownMenuItem>
-              <DropdownMenuItem onClick={() => handleStartAdding("number")}>
-                Number
-              </DropdownMenuItem>
-              <DropdownMenuItem onClick={() => handleStartAdding("boolean")}>
-                Boolean (True / False)
-              </DropdownMenuItem>
-              <DropdownMenuSeparator />
-              <DropdownMenuItem onClick={() => handleStartAdding("product")}>
-                Product
-              </DropdownMenuItem>
-            </DropdownMenuContent>
-          </DropdownMenu>
-        </PanelSectionHeaderActions>
-      </PanelSectionHeader>
-      {(variables.length > 0 || pendingVariable) && (
-        <PanelSectionContent>
-          <div className="flex flex-col gap-2">
-            {variables.map((variable) => (
-              <VariableRow
-                isOpen={openVariableId === variable.id}
-                key={variable.id}
-                onOpenChange={(open) => handleVariableOpenChange(variable.id, open)}
-                onRemove={() => handleRemoveVariable(variable.id)}
-                onUpdateName={(newName) => handleUpdateVariableName(variable.id, newName)}
-                onUpdateValue={(newValue) => handleUpdateVariableValue(variable.id, newValue)}
-                variable={variable.value}
-              />
-            ))}
-            {pendingVariable && (
-              <PendingVariableRow
-                isOpen={isPendingPopoverOpen}
-                onOpenChange={handlePendingOpenChange}
-                onRemove={() => setPendingVariable(null)}
-                onUpdateName={handlePendingNameChange}
-                onUpdateValue={handlePendingValueChange}
-                pendingVariable={pendingVariable}
-              />
-            )}
-          </div>
-        </PanelSectionContent>
-      )}
-    </PanelSection>
-  );
-};
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts
deleted file mode 100644
index bcb0f2b0a..000000000
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import type { SnapshotNode } from "@voidhash/paywall-renderer-web-core";
-import { useStore } from "zustand/react";
-
-import { usePaywallDesignerStore } from "../../../state/designer-store";
-import { selectRenderRoot } from "../../../state/utils/document-root";
-import { findNodeById } from "../../../state/utils/tree";
-import { getStyleTargetsForNodes, type StyleTargetsResult } from "./style-targets-core";
-
-export { getStyleTargetsForNodes, type StyleTargetsResult };
-
-export function useStyleTargets(nodes: SnapshotNode[]): StyleTargetsResult {
-  const store = usePaywallDesignerStore();
-  const stateOverrideSelection = useStore(store, (state) => state.stateOverrideSelection);
-
-  // Re-resolve the selected nodes from the draft-aware render root so an
-  // in-progress deferred edit (a style-panel drag runs inside a mimic draft)
-  // reflects live in the panel's own controls — gradient stop bar, stop
-  // position inputs, swatches — matching the canvas. Subscribing to
-  // `selectRenderRoot` also re-renders the panel on each draft edit. With no
-  // active draft this is the committed snapshot and resolves the same nodes.
-  const renderRoot = useStore(store, selectRenderRoot);
-  const resolvedNodes = nodes.map(
-    (node) => findNodeById<SnapshotNode>(renderRoot, node.id) ?? node,
-  );
-
-  return getStyleTargetsForNodes(resolvedNodes, stateOverrideSelection);
-}
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.test.ts b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-targets-core.test.ts
similarity index 100%
rename from apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/get-style-targets.test.ts
rename to apps/www/src/features/studio/paywalls/designer/panels/right-panel/utils/style-targets-core.test.ts
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/types.ts b/apps/www/src/features/studio/paywalls/designer/panels/types.ts
index 5a58b0cb2..bc505dfd9 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/types.ts
+++ b/apps/www/src/features/studio/paywalls/designer/panels/types.ts
@@ -60,48 +60,3 @@ export interface NodeEditorProps<K extends StylePropertyName> {
   node: NodeWithProperties<K>;
   onNodeChange: (node: NodeWithProperties<K>) => void;
 }
-
-/**
- * Sentinel symbol indicating that selected nodes have different values for a property.
- */
-export const MIXED: unique symbol = Symbol("MIXED");
-export type Mixed = typeof MIXED;
-
-/**
- * A value that may be a concrete T or the MIXED sentinel (when multiple nodes disagree).
- */
-export type MaybeMulti<T> = T | Mixed;
-
-/**
- * Section IDs for the right panel registry.
- */
-export type SectionId =
-  | "variables"
-  | "states"
-  | "position"
-  | "flexLayout"
-  | "shapeLayout"
-  | "borderRadius"
-  | "fill"
-  | "border"
-  | "interactions"
-  | "scrollViewSettings"
-  | "content"
-  | "typography"
-  | "textFill"
-  | "pathFill"
-  | "pathStroke"
-  | "componentSettings"
-  | "componentProps"
-  | "componentActions";
-
-/**
- * A section registry entry describes a panel section, which node types it supports,
- * and whether it can appear in multi-select mode.
- */
-export interface SectionRegistryEntry {
-  id: SectionId;
-  supportedNodeTypes: EditableNodeType[];
-  order: number;
-  multiSelectable: boolean;
-}

From 56526d193368a1da01c16d3f917092c0b664828c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 17 Jul 2026 16:54:23 +0200
Subject: [PATCH 099/129] feat: add runtime environment hooks

---
 .../src/ai/skills/component-authoring.ts      |  15 +-
 .../src/ai/skills/paywall-authoring.ts        |  12 +-
 apps/cli/src/domain/services/paywall-build.ts |  37 ++++
 apps/studio/src/App.tsx                       |  20 +-
 .../src/components/ComponentPreview.tsx       |  25 ++-
 apps/studio/src/components/PaywallPreview.tsx |  11 +-
 apps/studio/src/components/PhoneFrame.tsx     |  17 +-
 apps/studio/src/components/Sidebar.tsx        |   5 +-
 apps/studio/src/voidhash/preview-devices.ts   | 101 +++++++++
 apps/studio/src/voidhash/preview-runtime.ts   |  49 +---
 libraries/paywalls/README.md                  |  41 +++-
 libraries/paywalls/package.json               |   1 +
 .../src/authoring/define-component.tsx        |  11 +-
 libraries/paywalls/src/index.ts               |   7 +
 libraries/paywalls/src/runtime/config.ts      |  29 +++
 libraries/paywalls/src/runtime/environment.ts | 205 +++++++++++++++++
 libraries/paywalls/src/runtime/runtime.tsx    |  42 +++-
 libraries/paywalls/src/sandbox/host-data.ts   |  21 +-
 .../paywalls/src/sandbox/render-component.tsx |   2 +
 libraries/paywalls/tests/envelope.test.ts     |  10 +
 libraries/paywalls/tests/render.test.tsx      |  82 ++++++-
 .../tests/runtime-environment.test.tsx        | 209 ++++++++++++++++++
 .../paywalls/tests/sandbox-bundle.test.ts     |  26 ++-
 libraries/paywalls/tests/sandbox.test.tsx     |  92 +++++++-
 .../src/templates/runtime-bundle.generated.ts |   2 +-
 pnpm-lock.yaml                                |   3 +
 26 files changed, 976 insertions(+), 99 deletions(-)
 create mode 100644 apps/studio/src/voidhash/preview-devices.ts
 create mode 100644 libraries/paywalls/src/runtime/environment.ts
 create mode 100644 libraries/paywalls/tests/runtime-environment.test.tsx

diff --git a/apps/backend/src/ai/skills/component-authoring.ts b/apps/backend/src/ai/skills/component-authoring.ts
index e5c31c78f..fff172d96 100644
--- a/apps/backend/src/ai/skills/component-authoring.ts
+++ b/apps/backend/src/ai/skills/component-authoring.ts
@@ -224,7 +224,8 @@ fields to literals, variables, or action-payload fields and may perform \`set-va
 
 Preview names must match \`[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}\`. With no declarations, an
 implicit \`default\` preview is rendered. \`props\` override declared defaults. \`data\` accepts
-\`products\` and \`variables\`; product refs fall back to the first fixture product when unset.
+\`products\`, \`variables\`, \`platform\`, \`safeAreaInsets\`, and \`dimensions\`; product refs
+fall back to the first fixture product when unset. Insets and dimensions use logical pixels.
 Exercise meaningful visual branches with named previews and keep fixture data complete.
 
 Use at most one \`<Slot />\`. It renders document children supplied to the component
@@ -292,13 +293,21 @@ Runtime hooks:
 - \`useSelectedProduct()\` returns \`selectedProduct\`, \`selectedProductId\`, and
   \`selectProduct(productId)\`.
 - \`usePaywallVariables()\` returns \`Record<string, string | number | boolean>\`.
+- \`usePlatform()\` returns \`ios | android | web\`.
+- \`useSafeAreaInsets()\` returns \`{ top, right, bottom, left }\` in logical pixels.
+- \`useDimensions("screen" | "window")\` returns \`{ width, height, x, y }\` in logical
+  pixels; \`x\` and \`y\` are screen-space origins.
 - \`usePaywallActions()\` returns \`purchase(productId?)\`, \`restore()\`, \`close(reason?)\`,
   \`openUrl(url)\`, \`track(name, properties?)\`, and \`selectProduct(productId)\`.
 - \`usePaywallStatus()\` returns status \`idle\`, \`purchasing\`, \`purchased\`, \`restoring\`,
   \`restored\`, \`cancelled\`, or \`failed\`, plus optional \`productId\` and an optional error
   containing \`code\` and \`message\`.
-- \`usePaywallConfig()\` returns products, variables, locale, platform, and optional default
-  selected product id. Platform is \`ios | android | web\`.
+- \`usePaywallConfig()\` returns products, variables, locale, platform, optional safe-area
+  insets and dimensions, and the optional default selected product id.
+
+Explicit host or preview environment values take precedence. Browser measurements update on
+resize, orientation, and visual-viewport events. Missing platform defaults to \`web\`; missing
+or unavailable safe-area and SSR measurements fall back to zero.
 
 The selected product defaults to \`defaultSelectedProductId\`, then the first product.
 \`purchase()\` uses that selection when no id is passed and warns/no-ops if no product exists.
diff --git a/apps/backend/src/ai/skills/paywall-authoring.ts b/apps/backend/src/ai/skills/paywall-authoring.ts
index 1a8540f0b..173ed2c9b 100644
--- a/apps/backend/src/ai/skills/paywall-authoring.ts
+++ b/apps/backend/src/ai/skills/paywall-authoring.ts
@@ -568,6 +568,8 @@ There is **NO \`id\`** — a component is identified by its FILE PATH
 - \`render: ({ props, actions }) => ReactNode\` — the template. \`props\` has
   defaults filled and \`.optional()\` props typed \`T | undefined\`; \`actions\` are
   typed callbacks.
+- Preview-state \`data\` accepts \`products\`, \`variables\`, \`platform\`,
+  \`safeAreaInsets\`, and \`dimensions\` for deterministic runtime-hook branches.
 - The file MUST default-export the \`defineComponent({ … })\` definition itself —
   \`export default defineComponent({ … })\`. Do NOT export a \`.component\` property or
   any other shape — only the \`defineComponent(...)\` result is valid.
@@ -612,11 +614,19 @@ document (plus text-only \`textTransform\`/\`textDecorationLine\`/\`fontStyle\`/
   (map over these to render a list).
 - \`useSelectedProduct(): { selectedProduct, selectedProductId, selectProduct }\`.
 - \`usePaywallVariables(): Record<string, string | number | boolean>\`.
+- \`usePlatform(): "ios" | "android" | "web"\`.
+- \`useSafeAreaInsets(): { top, right, bottom, left }\` in logical pixels.
+- \`useDimensions("screen" | "window"): { width, height, x, y }\` in logical pixels;
+  \`x\` and \`y\` are screen-space origins.
 - \`usePaywallActions(): { purchase, restore, close, openUrl, track, selectProduct }\`.
 - \`usePaywallStatus(): { status, productId?, error? }\` —
   \`idle\`/\`purchasing\`/\`purchased\`/\`restoring\`/\`restored\`/\`failed\`.
 - \`usePaywallConfig(): PaywallRuntimeConfig\` (products, variables, locale,
-  platform).
+  platform, safe-area insets, and dimensions).
+
+Explicit runtime or preview environment values take precedence and late configuration updates
+consumers. Browser measurements react to resize, orientation, and visual-viewport events.
+Missing platform defaults to \`web\`; unavailable safe-area and SSR measurements use zero.
 
 \`PaywallProduct\`:
 \`{ id, slug, displayName, description?, price?, priceString, currencyCode?, period?, trialPeriod? }\`
diff --git a/apps/cli/src/domain/services/paywall-build.ts b/apps/cli/src/domain/services/paywall-build.ts
index 441c35686..67d108e93 100644
--- a/apps/cli/src/domain/services/paywall-build.ts
+++ b/apps/cli/src/domain/services/paywall-build.ts
@@ -183,6 +183,9 @@ interface UserTreeLib {
       readonly config?: {
         readonly products?: ReadonlyArray<unknown>;
         readonly variables?: Record<string, unknown>;
+        readonly platform?: "ios" | "android" | "web";
+        readonly safeAreaInsets?: ComponentPreviewSafeAreaInsets;
+        readonly dimensions?: ComponentPreviewDimensions;
       };
       readonly state?: string;
     },
@@ -198,6 +201,31 @@ interface ComponentPreviewStateLike {
   readonly data?: {
     readonly products?: ReadonlyArray<unknown>;
     readonly variables?: Record<string, unknown>;
+    readonly platform?: "ios" | "android" | "web";
+    readonly safeAreaInsets?: ComponentPreviewSafeAreaInsets;
+    readonly dimensions?: ComponentPreviewDimensions;
+  };
+}
+
+interface ComponentPreviewSafeAreaInsets {
+  readonly top: number;
+  readonly right: number;
+  readonly bottom: number;
+  readonly left: number;
+}
+
+interface ComponentPreviewDimensions {
+  readonly screen: {
+    readonly width: number;
+    readonly height: number;
+    readonly x: number;
+    readonly y: number;
+  };
+  readonly window: {
+    readonly width: number;
+    readonly height: number;
+    readonly x: number;
+    readonly y: number;
   };
 }
 
@@ -407,6 +435,12 @@ const htmlShell = (jsFileName: string): string =>
     />
     <title>Voidhash Paywall</title>
     <style>
+      :root {
+        --voidhash-safe-area-top: env(safe-area-inset-top, 0px);
+        --voidhash-safe-area-right: env(safe-area-inset-right, 0px);
+        --voidhash-safe-area-bottom: env(safe-area-inset-bottom, 0px);
+        --voidhash-safe-area-left: env(safe-area-inset-left, 0px);
+      }
       html, body, #root { height: 100%; margin: 0; }
       body { overscroll-behavior: none; -webkit-user-select: none; user-select: none; }
     </style>
@@ -896,6 +930,9 @@ export const buildPaywalls = ({
                   config: {
                     products: preview.data?.products ?? [],
                     variables: preview.data?.variables ?? {},
+                    platform: preview.data?.platform,
+                    safeAreaInsets: preview.data?.safeAreaInsets,
+                    dimensions: preview.data?.dimensions,
                   },
                   state,
                 },
diff --git a/apps/studio/src/App.tsx b/apps/studio/src/App.tsx
index 904956406..b0b9c4074 100644
--- a/apps/studio/src/App.tsx
+++ b/apps/studio/src/App.tsx
@@ -4,10 +4,10 @@ import { PaywallPreview } from "./components/PaywallPreview";
 import { Sidebar } from "./components/Sidebar";
 import { loadProjectContent } from "./voidhash/paywalls";
 import {
-  createStudioBridge,
-  DEFAULT_PREVIEW_CONFIG,
-  type PreviewEvent,
-} from "./voidhash/preview-runtime";
+  DEFAULT_PREVIEW_DEVICE_PROFILE,
+  previewConfigForDevice,
+} from "./voidhash/preview-devices";
+import { createStudioBridge, type PreviewEvent } from "./voidhash/preview-runtime";
 
 const projectName = (root: string): string => root.replace(/\/+$/, "").split("/").pop() || root;
 
@@ -16,6 +16,8 @@ export const App = (): ReactNode => {
   const content = loadProjectContent();
   const [selectedId, setSelectedId] = useState<string | null>(null);
   const [events, setEvents] = useState<ReadonlyArray<PreviewEvent>>([]);
+  const previewProfile = DEFAULT_PREVIEW_DEVICE_PROFILE;
+  const previewConfig = useMemo(() => previewConfigForDevice(previewProfile), [previewProfile]);
 
   const bridge = useMemo(
     () => createStudioBridge((event) => setEvents((prev) => [...prev, event])),
@@ -42,7 +44,7 @@ export const App = (): ReactNode => {
           <div className="flex items-center gap-3 text-neutral-400 text-xs">
             <span>{selected.title}</span>
             <span className="rounded bg-neutral-800 px-2 py-0.5 uppercase">
-              {DEFAULT_PREVIEW_CONFIG.platform}
+              {previewProfile.platform}
             </span>
           </div>
         )}
@@ -51,7 +53,12 @@ export const App = (): ReactNode => {
       <div className="flex min-h-0 flex-1">
         <main className="min-w-0 flex-1">
           {selected ? (
-            <PaywallPreview bridge={bridge} config={DEFAULT_PREVIEW_CONFIG} entry={selected} />
+            <PaywallPreview
+              bridge={bridge}
+              config={previewConfig}
+              entry={selected}
+              profile={previewProfile}
+            />
           ) : (
             <div className="flex h-full items-center justify-center p-8 text-center text-neutral-500 text-sm">
               Create a paywall in{" "}
@@ -68,6 +75,7 @@ export const App = (): ReactNode => {
           onClearEvents={() => setEvents([])}
           onSelect={handleSelect}
           paywalls={content.paywalls}
+          profile={previewProfile}
           selectedId={selected?.id ?? null}
         />
       </div>
diff --git a/apps/studio/src/components/ComponentPreview.tsx b/apps/studio/src/components/ComponentPreview.tsx
index 5bfa20659..b23d473d8 100644
--- a/apps/studio/src/components/ComponentPreview.tsx
+++ b/apps/studio/src/components/ComponentPreview.tsx
@@ -12,7 +12,8 @@ import {
 import { createElement, type ReactNode } from "react";
 
 import type { AnyComponentDefinition } from "../voidhash/paywalls";
-import { DEFAULT_PREVIEW_CONFIG, SILENT_BRIDGE } from "../voidhash/preview-runtime";
+import { previewConfigForDevice, type PreviewDeviceProfile } from "../voidhash/preview-devices";
+import { SILENT_BRIDGE } from "../voidhash/preview-runtime";
 import { PreviewErrorBoundary } from "./PreviewErrorBoundary";
 
 const PLACEHOLDER_IMAGE = `data:image/svg+xml,${encodeURIComponent(
@@ -54,11 +55,18 @@ const defaultPreviewState = (
 /** Mock runtime config, overridden by the preview state's declared data. */
 const previewConfig = (
   state: ComponentPreviewState<PropMap> | undefined,
-): PaywallRuntimeConfig => ({
-  ...DEFAULT_PREVIEW_CONFIG,
-  products: state?.data?.products ?? DEFAULT_PREVIEW_CONFIG.products,
-  variables: state?.data?.variables ?? DEFAULT_PREVIEW_CONFIG.variables,
-});
+  profile: PreviewDeviceProfile,
+): PaywallRuntimeConfig => {
+  const defaults = previewConfigForDevice(profile);
+  return {
+    ...defaults,
+    products: state?.data?.products ?? defaults.products,
+    variables: state?.data?.variables ?? defaults.variables,
+    platform: state?.data?.platform ?? profile.platform,
+    safeAreaInsets: state?.data?.safeAreaInsets ?? profile.safeAreaInsets,
+    dimensions: state?.data?.dimensions ?? profile.dimensions,
+  };
+};
 
 /**
  * Resolves the props to mount a component preview with: declared preview-state
@@ -89,6 +97,7 @@ const buildPreviewProps = (
 
 export interface ComponentPreviewProps {
   definition: AnyComponentDefinition;
+  profile: PreviewDeviceProfile;
 }
 
 /**
@@ -97,9 +106,9 @@ export interface ComponentPreviewProps {
  * renderer + runtime providers a real paywall renders under, against the mock
  * Studio config (envelopes go to a silent bridge).
  */
-export const ComponentPreview = ({ definition }: ComponentPreviewProps): ReactNode => {
+export const ComponentPreview = ({ definition, profile }: ComponentPreviewProps): ReactNode => {
   const state = defaultPreviewState(definition);
-  const config = previewConfig(state);
+  const config = previewConfig(state, profile);
   const props = buildPreviewProps(definition, state, config.products);
 
   return (
diff --git a/apps/studio/src/components/PaywallPreview.tsx b/apps/studio/src/components/PaywallPreview.tsx
index 3e2fc605d..b4971eb89 100644
--- a/apps/studio/src/components/PaywallPreview.tsx
+++ b/apps/studio/src/components/PaywallPreview.tsx
@@ -2,6 +2,7 @@ import { type PaywallBridge, PaywallRenderer, type PaywallRuntimeConfig } from "
 import type { ReactNode } from "react";
 
 import type { PaywallEntry } from "../voidhash/paywalls";
+import type { PreviewDeviceProfile } from "../voidhash/preview-devices";
 import { PhoneFrame } from "./PhoneFrame";
 import { PreviewErrorBoundary } from "./PreviewErrorBoundary";
 
@@ -9,14 +10,20 @@ export interface PaywallPreviewProps {
   entry: PaywallEntry;
   config: PaywallRuntimeConfig;
   bridge: PaywallBridge;
+  profile: PreviewDeviceProfile;
 }
 
 /**
  * Renders the selected paywall inside the phone frame using the real
  * `@voidhash/paywalls` DOM renderer — the same code path that runs on a device.
  */
-export const PaywallPreview = ({ entry, config, bridge }: PaywallPreviewProps): ReactNode => (
-  <PhoneFrame>
+export const PaywallPreview = ({
+  entry,
+  config,
+  bridge,
+  profile,
+}: PaywallPreviewProps): ReactNode => (
+  <PhoneFrame profile={profile}>
     <PreviewErrorBoundary key={entry.id}>
       <PaywallRenderer bridge={bridge} config={config} paywall={entry.definition} />
     </PreviewErrorBoundary>
diff --git a/apps/studio/src/components/PhoneFrame.tsx b/apps/studio/src/components/PhoneFrame.tsx
index b14c7467c..fbe363ab5 100644
--- a/apps/studio/src/components/PhoneFrame.tsx
+++ b/apps/studio/src/components/PhoneFrame.tsx
@@ -1,19 +1,24 @@
 import type { ReactNode } from "react";
 
+import type { PreviewDeviceProfile } from "../voidhash/preview-devices";
+
 export interface PhoneFrameProps {
   children: ReactNode;
+  profile: PreviewDeviceProfile;
 }
 
 /**
- * A 9:16 device mock. The screen fills the available height, keeps the phone
- * aspect ratio, and clips its content so a paywall renders exactly as it would
- * on a real device. The paywall owns the full screen via `absolute inset-0`.
+ * A device mock sized to a preview profile. The screen fills the available
+ * height, keeps the profile aspect ratio, and clips its paywall content.
  */
-export const PhoneFrame = ({ children }: PhoneFrameProps): ReactNode => (
+export const PhoneFrame = ({ children, profile }: PhoneFrameProps): ReactNode => (
   <div className="flex h-full w-full items-center justify-center p-6">
     <div
-      className="relative aspect-[9/16] h-full max-h-full overflow-hidden rounded-[2.5rem] border-[10px] border-neutral-950 bg-white shadow-2xl ring-1 ring-neutral-800"
-      style={{ maxWidth: "100%" }}
+      className="relative h-full max-h-full overflow-hidden rounded-[2.5rem] border-[10px] border-neutral-950 bg-white shadow-2xl ring-1 ring-neutral-800"
+      style={{
+        aspectRatio: `${profile.dimensions.window.width} / ${profile.dimensions.window.height}`,
+        maxWidth: "100%",
+      }}
     >
       {/* Notch */}
       <div className="-translate-x-1/2 pointer-events-none absolute top-0 left-1/2 z-10 h-6 w-32 rounded-b-2xl bg-neutral-950" />
diff --git a/apps/studio/src/components/Sidebar.tsx b/apps/studio/src/components/Sidebar.tsx
index c1e44d201..e1cb24176 100644
--- a/apps/studio/src/components/Sidebar.tsx
+++ b/apps/studio/src/components/Sidebar.tsx
@@ -3,6 +3,7 @@ import type { ReactNode } from "react";
 
 import { cn } from "../lib/cn";
 import type { ComponentEntry, InvalidEntry, PaywallEntry } from "../voidhash/paywalls";
+import type { PreviewDeviceProfile } from "../voidhash/preview-devices";
 import type { PreviewEvent } from "../voidhash/preview-runtime";
 import { ComponentPreview } from "./ComponentPreview";
 
@@ -44,6 +45,7 @@ export interface SidebarProps {
   selectedId: string | null;
   onSelect: (id: string) => void;
   onClearEvents: () => void;
+  profile: PreviewDeviceProfile;
 }
 
 /**
@@ -60,6 +62,7 @@ export const Sidebar = ({
   selectedId,
   onSelect,
   onClearEvents,
+  profile,
 }: SidebarProps): ReactNode => (
   <aside className="flex h-full w-80 flex-col border-neutral-800 border-l bg-neutral-950">
     <div className="flex items-center justify-between px-4 pt-4 pb-2">
@@ -129,7 +132,7 @@ export const Sidebar = ({
                 </div>
                 {c.definition ? (
                   <div className="px-2 pb-2">
-                    <ComponentPreview definition={c.definition} />
+                    <ComponentPreview definition={c.definition} profile={profile} />
                   </div>
                 ) : (
                   <p className="px-2.5 pb-2 text-[11px] text-neutral-600">
diff --git a/apps/studio/src/voidhash/preview-devices.ts b/apps/studio/src/voidhash/preview-devices.ts
new file mode 100644
index 000000000..66e51d4c3
--- /dev/null
+++ b/apps/studio/src/voidhash/preview-devices.ts
@@ -0,0 +1,101 @@
+import type {
+  PaywallDimensionsByTarget,
+  PaywallPlatform,
+  PaywallRuntimeConfig,
+  PaywallSafeAreaInsets,
+} from "@voidhash/paywalls";
+
+/**
+ * Deterministic device metrics used by Studio paywall previews. Insets are
+ * intentional preview fixtures rather than hardware specifications.
+ */
+export interface PreviewDeviceProfile {
+  readonly id: string;
+  readonly label: string;
+  readonly platform: PaywallPlatform;
+  readonly safeAreaInsets: PaywallSafeAreaInsets;
+  readonly dimensions: PaywallDimensionsByTarget;
+}
+
+const dimensions = (width: number, height: number): PaywallDimensionsByTarget => ({
+  screen: { width, height, x: 0, y: 0 },
+  window: { width, height, x: 0, y: 0 },
+});
+
+export const IPHONE_SE_3_PREVIEW_PROFILE: PreviewDeviceProfile = {
+  id: "iphone-se-3",
+  label: "iPhone SE (3rd generation)",
+  platform: "ios",
+  safeAreaInsets: { top: 20, right: 0, bottom: 0, left: 0 },
+  dimensions: dimensions(375, 667),
+};
+
+export const IPHONE_15_PRO_PREVIEW_PROFILE: PreviewDeviceProfile = {
+  id: "iphone-15-pro",
+  label: "iPhone 15 Pro",
+  platform: "ios",
+  safeAreaInsets: { top: 59, right: 0, bottom: 34, left: 0 },
+  dimensions: dimensions(393, 852),
+};
+
+export const PIXEL_8_PREVIEW_PROFILE: PreviewDeviceProfile = {
+  id: "pixel-8",
+  label: "Pixel 8",
+  platform: "android",
+  safeAreaInsets: { top: 24, right: 0, bottom: 24, left: 0 },
+  dimensions: dimensions(412, 915),
+};
+
+/** Device profiles available to a future Studio profile selector. */
+export const PREVIEW_DEVICE_PROFILES: ReadonlyArray<PreviewDeviceProfile> = [
+  IPHONE_SE_3_PREVIEW_PROFILE,
+  IPHONE_15_PRO_PREVIEW_PROFILE,
+  PIXEL_8_PREVIEW_PROFILE,
+];
+
+/** The profile currently used by Studio until device selection is exposed. */
+export const DEFAULT_PREVIEW_DEVICE_PROFILE = IPHONE_15_PRO_PREVIEW_PROFILE;
+
+/** Combines a device profile with Studio's representative products and variables. */
+export const previewConfigForDevice = (profile: PreviewDeviceProfile): PaywallRuntimeConfig => ({
+  defaultSelectedProductId: "com.example.app.yearly",
+  locale: "en-US",
+  platform: profile.platform,
+  safeAreaInsets: profile.safeAreaInsets,
+  dimensions: profile.dimensions,
+  products: [
+    {
+      currencyCode: "USD",
+      displayName: "Yearly",
+      id: "com.example.app.yearly",
+      period: "year",
+      price: 59.99,
+      priceString: "$59.99",
+      slug: "yearly",
+      trialPeriod: "7d",
+    },
+    {
+      currencyCode: "USD",
+      displayName: "Monthly",
+      id: "com.example.app.monthly",
+      period: "month",
+      price: 9.99,
+      priceString: "$9.99",
+      slug: "monthly",
+    },
+    {
+      currencyCode: "USD",
+      displayName: "Lifetime",
+      id: "com.example.app.lifetime",
+      period: "lifetime",
+      price: 199.99,
+      priceString: "$199.99",
+      slug: "lifetime",
+    },
+  ],
+  variables: {
+    accentColor: "#16a34a",
+    ctaLabel: "Continue",
+    showTrialBadge: true,
+  },
+});
diff --git a/apps/studio/src/voidhash/preview-runtime.ts b/apps/studio/src/voidhash/preview-runtime.ts
index a83ef150b..af980b9cf 100644
--- a/apps/studio/src/voidhash/preview-runtime.ts
+++ b/apps/studio/src/voidhash/preview-runtime.ts
@@ -1,8 +1,6 @@
-import type {
-  PaywallBridge,
-  PaywallOutboundEnvelope,
-  PaywallRuntimeConfig,
-} from "@voidhash/paywalls";
+import type { PaywallBridge, PaywallOutboundEnvelope } from "@voidhash/paywalls";
+
+import { DEFAULT_PREVIEW_DEVICE_PROFILE, previewConfigForDevice } from "./preview-devices";
 
 /**
  * Mock products + variables injected into previewed paywalls (contract §7.1).
@@ -10,46 +8,7 @@ import type {
  * subscription group so product-driven layouts render with realistic data.
  * `id` mirrors a store product identifier, `slug` the Voidhash product slug.
  */
-export const DEFAULT_PREVIEW_CONFIG: PaywallRuntimeConfig = {
-  defaultSelectedProductId: "com.example.app.yearly",
-  locale: "en-US",
-  platform: "ios",
-  products: [
-    {
-      currencyCode: "USD",
-      displayName: "Yearly",
-      id: "com.example.app.yearly",
-      period: "year",
-      price: 59.99,
-      priceString: "$59.99",
-      slug: "yearly",
-      trialPeriod: "7d",
-    },
-    {
-      currencyCode: "USD",
-      displayName: "Monthly",
-      id: "com.example.app.monthly",
-      period: "month",
-      price: 9.99,
-      priceString: "$9.99",
-      slug: "monthly",
-    },
-    {
-      currencyCode: "USD",
-      displayName: "Lifetime",
-      id: "com.example.app.lifetime",
-      period: "lifetime",
-      price: 199.99,
-      priceString: "$199.99",
-      slug: "lifetime",
-    },
-  ],
-  variables: {
-    accentColor: "#16a34a",
-    ctaLabel: "Continue",
-    showTrialBadge: true,
-  },
-};
+export const DEFAULT_PREVIEW_CONFIG = previewConfigForDevice(DEFAULT_PREVIEW_DEVICE_PROFILE);
 
 /** A captured outbound envelope with a monotonically increasing id + timestamp. */
 export interface PreviewEvent {
diff --git a/libraries/paywalls/README.md b/libraries/paywalls/README.md
index 8b187ec62..bee6f13e3 100644
--- a/libraries/paywalls/README.md
+++ b/libraries/paywalls/README.md
@@ -17,7 +17,13 @@ component manifest, preview node tree) are specified in
 `.voidhash/paywalls/*.tsx`
 
 ```tsx
-import { createPaywall, View, Text, Pressable, usePaywallActions } from "@voidhash/paywalls";
+import {
+  createPaywall,
+  View,
+  Text,
+  Pressable,
+  usePaywallActions,
+} from "@voidhash/paywalls";
 
 function Body() {
   const { purchase } = usePaywallActions();
@@ -81,14 +87,15 @@ export const definition = defineComponent({
   previews: {
     default: {
       data: {
-        products: [
-          /* fixture products */
-        ],
+        products: [/* fixture products */],
       },
     },
   },
   render: ({ props, actions }) => (
-    <Pressable onPress={actions.onSelect} style={{ borderColor: props.accentColor }}>
+    <Pressable
+      onPress={actions.onSelect}
+      style={{ borderColor: props.accentColor }}
+    >
       <Text>{props.product.displayName}</Text>
       <Slot /> {/* children passed by the consumer render here */}
     </Pressable>
@@ -110,6 +117,10 @@ that forward to the consumer prop of the same name. `extractComponentManifest(de
 emits the §2 manifest JSON (props, actions, slot usage, preview states,
 host data).
 
+Preview-state `data` may provide `products`, `variables`, `platform`,
+`safeAreaInsets`, and `dimensions`. The sandbox supplies deterministic
+iPhone-style environment values when those fields are omitted.
+
 ## Custom editor panels
 
 A component may declare an optional `panel` to replace the visual editor's
@@ -136,7 +147,9 @@ export const definition = defineComponent({
           <Panel.TextField
             kind="text"
             value={ctx.props.title.value ?? ""}
-            onCommit={(value) => ctx.props.title.set(value, { gesture: "commit" })}
+            onCommit={(value) =>
+              ctx.props.title.set(value, { gesture: "commit" })
+            }
           />
         </Panel.Field>
         <Panel.PropField name="subtitle" />
@@ -173,7 +186,7 @@ through to `DefaultProps`). Omitting `panel` entirely yields the default panel:
 one host-rendered row per manifest prop.
 
 **Security.** A panel never runs in the editor's context. Its compiled module is
-evaluated in a locked-down sandbox and it emits only serializable *intents* — a
+evaluated in a locked-down sandbox and it emits only serializable _intents_ — a
 panel function and its React tree never cross the boundary. Only validated data
 crosses: prop values in, `set-prop`/`reset-prop` intents out (each re-validated
 against the manifest by the host). Events are addressed purely by
@@ -193,12 +206,26 @@ Hooks read the runtime config the host supplies (injected
 
 - `usePaywallProducts()` — products to display.
 - `usePaywallVariables()` — dashboard/experiment overrides.
+- `usePlatform(): "ios" | "android" | "web"` — the current platform.
+- `useSafeAreaInsets(): { top, right, bottom, left }` — safe-area insets.
+- `useDimensions("screen" | "window"): { width, height, x, y }` — screen or
+  window geometry.
 - `useSelectedProduct()` — selected product + setter.
 - `usePaywallActions()` — `purchase`, `restore`, `close`, `openUrl`, `track`,
   `selectProduct`.
 - `usePaywallStatus()` — transaction lifecycle (idle/purchasing/purchased/…).
 - `usePaywallConfig()` — the full config (locale, platform, …).
 
+Environment values use logical/CSS pixels. `x` and `y` are screen-space
+rectangle origins, not safe-area offsets. Explicit runtime configuration takes
+precedence and late `configure` messages update consumers. Without explicit
+values, browsers measure `window.screen`, the browser window, and CSS
+`safe-area-inset-*`; resize, orientation, and visual-viewport events refresh
+the hooks. The platform defaults to `web`, unsupported safe-area values default
+to zero, and SSR or unavailable measurement uses zero rectangles. Configured
+native platforms currently use the measured screen rectangle for both targets
+when dimensions are not supplied.
+
 Actions are sent to the native SDK as version-1 envelopes over the WebView
 bridge; the envelope format mirrors
 `@voidhash/react-native`'s `paywall-bridge/protocol.ts` (normative). In Studio
diff --git a/libraries/paywalls/package.json b/libraries/paywalls/package.json
index f22c2ae84..8e78bed62 100644
--- a/libraries/paywalls/package.json
+++ b/libraries/paywalls/package.json
@@ -149,6 +149,7 @@
     "@types/react-dom": "catalog:",
     "@voidhash/tsconfig": "workspace:*",
     "esbuild": "^0.25.10",
+    "jsdom": "^26.1.0",
     "react": "catalog:",
     "react-dom": "catalog:",
     "tsup": "^8.5.1",
diff --git a/libraries/paywalls/src/authoring/define-component.tsx b/libraries/paywalls/src/authoring/define-component.tsx
index e9f6897f9..e4705729f 100644
--- a/libraries/paywalls/src/authoring/define-component.tsx
+++ b/libraries/paywalls/src/authoring/define-component.tsx
@@ -8,7 +8,13 @@ import type {
   PanelRefPropHandle,
 } from "../panel/context";
 import { SlotProvider } from "../primitives/slot";
-import type { PaywallProduct, PaywallVariables } from "../runtime/config";
+import type {
+  PaywallDimensionsByTarget,
+  PaywallPlatform,
+  PaywallProduct,
+  PaywallSafeAreaInsets,
+  PaywallVariables,
+} from "../runtime/config";
 import {
   type ActionFactory,
   type ActionHandlerProps,
@@ -37,6 +43,9 @@ export interface ComponentPreviewState<M extends PropMap> {
   readonly data?: {
     readonly products?: ReadonlyArray<PaywallProduct>;
     readonly variables?: PaywallVariables;
+    readonly platform?: PaywallPlatform;
+    readonly safeAreaInsets?: PaywallSafeAreaInsets;
+    readonly dimensions?: PaywallDimensionsByTarget;
   };
 }
 
diff --git a/libraries/paywalls/src/index.ts b/libraries/paywalls/src/index.ts
index 66f8ee66c..b552b8df3 100644
--- a/libraries/paywalls/src/index.ts
+++ b/libraries/paywalls/src/index.ts
@@ -149,10 +149,14 @@ export {
 export {
   EMPTY_RUNTIME_CONFIG,
   normalizeRuntimeConfig,
+  type PaywallDimensions,
+  type PaywallDimensionsByTarget,
+  type PaywallDimensionTarget,
   type PaywallPlatform,
   type PaywallProduct,
   type PaywallProductPeriod,
   type PaywallRuntimeConfig,
+  type PaywallSafeAreaInsets,
   type PaywallVariables,
   RUNTIME_CONFIG_GLOBAL,
   readInjectedConfig,
@@ -188,11 +192,14 @@ export {
   PaywallRuntimeProvider,
   type PaywallRuntimeProviderProps,
   type PaywallStatusSnapshot,
+  useDimensions,
   usePaywallActions,
   usePaywallConfig,
   usePaywallProducts,
   usePaywallStatus,
   usePaywallVariables,
+  usePlatform,
+  useSafeAreaInsets,
   useSelectedProduct,
 } from "./runtime/runtime";
 export {
diff --git a/libraries/paywalls/src/runtime/config.ts b/libraries/paywalls/src/runtime/config.ts
index 4e5ee6226..ec7e7c499 100644
--- a/libraries/paywalls/src/runtime/config.ts
+++ b/libraries/paywalls/src/runtime/config.ts
@@ -30,6 +30,31 @@ export type PaywallVariables = Readonly<Record<string, string | number | boolean
 /** Platform the paywall is being presented on. */
 export type PaywallPlatform = "ios" | "android" | "web";
 
+/** Safe-area insets in logical/CSS pixels. */
+export interface PaywallSafeAreaInsets {
+  readonly top: number;
+  readonly right: number;
+  readonly bottom: number;
+  readonly left: number;
+}
+
+/** A screen-space rectangle in logical/CSS pixels. */
+export interface PaywallDimensions {
+  readonly width: number;
+  readonly height: number;
+  readonly x: number;
+  readonly y: number;
+}
+
+/** Rectangle exposed by {@link useDimensions}. */
+export type PaywallDimensionTarget = "screen" | "window";
+
+/** Screen and window rectangles available to a paywall. */
+export interface PaywallDimensionsByTarget {
+  readonly screen: PaywallDimensions;
+  readonly window: PaywallDimensions;
+}
+
 /**
  * Everything a paywall needs at runtime beyond its own React tree (contract
  * §7.1). The native host injects it as `window.__VOIDHASH_PAYWALL__` when it
@@ -41,6 +66,8 @@ export interface PaywallRuntimeConfig {
   readonly variables: PaywallVariables;
   readonly locale?: string;
   readonly platform?: PaywallPlatform;
+  readonly safeAreaInsets?: PaywallSafeAreaInsets;
+  readonly dimensions?: PaywallDimensionsByTarget;
   /** Product selected when the paywall first renders. Defaults to the first. */
   readonly defaultSelectedProductId?: string;
 }
@@ -71,6 +98,8 @@ export const normalizeRuntimeConfig = (
   variables: input?.variables ?? {},
   locale: input?.locale,
   platform: input?.platform,
+  safeAreaInsets: input?.safeAreaInsets,
+  dimensions: input?.dimensions,
   defaultSelectedProductId: input?.defaultSelectedProductId,
 });
 
diff --git a/libraries/paywalls/src/runtime/environment.ts b/libraries/paywalls/src/runtime/environment.ts
new file mode 100644
index 000000000..4bcb9d5fd
--- /dev/null
+++ b/libraries/paywalls/src/runtime/environment.ts
@@ -0,0 +1,205 @@
+import { useEffect, useState } from "react";
+
+import type {
+  PaywallDimensions,
+  PaywallDimensionsByTarget,
+  PaywallPlatform,
+  PaywallRuntimeConfig,
+  PaywallSafeAreaInsets,
+} from "./config";
+
+const ZERO_DIMENSIONS: PaywallDimensions = {
+  width: 0,
+  height: 0,
+  x: 0,
+  y: 0,
+};
+
+const ZERO_SAFE_AREA_INSETS: PaywallSafeAreaInsets = {
+  top: 0,
+  right: 0,
+  bottom: 0,
+  left: 0,
+};
+
+const EMPTY_BROWSER_ENVIRONMENT: BrowserEnvironmentSnapshot = {
+  dimensions: {
+    screen: ZERO_DIMENSIONS,
+    window: ZERO_DIMENSIONS,
+  },
+  safeAreaInsets: ZERO_SAFE_AREA_INSETS,
+};
+
+interface BrowserEnvironmentSnapshot {
+  readonly dimensions: PaywallDimensionsByTarget;
+  readonly safeAreaInsets: PaywallSafeAreaInsets;
+}
+
+export interface ResolvedPaywallEnvironment extends BrowserEnvironmentSnapshot {
+  readonly platform: PaywallPlatform;
+}
+
+const finiteOr = (value: number | undefined, fallback: number): number =>
+  value !== undefined && Number.isFinite(value) ? value : fallback;
+
+const parseCssPixels = (value: string): number => {
+  const parsed = Number.parseFloat(value);
+  return Number.isFinite(parsed) ? Math.max(0, parsed) : 0;
+};
+
+const readSafeAreaInsets = (probe: HTMLElement | null): PaywallSafeAreaInsets => {
+  if (typeof document === "undefined" || typeof getComputedStyle === "undefined") {
+    return ZERO_SAFE_AREA_INSETS;
+  }
+
+  const rootStyle = getComputedStyle(document.documentElement);
+  const customProperties = {
+    top: rootStyle.getPropertyValue("--voidhash-safe-area-top"),
+    right: rootStyle.getPropertyValue("--voidhash-safe-area-right"),
+    bottom: rootStyle.getPropertyValue("--voidhash-safe-area-bottom"),
+    left: rootStyle.getPropertyValue("--voidhash-safe-area-left"),
+  };
+  if (Object.values(customProperties).some((value) => value.trim() !== "")) {
+    return {
+      top: parseCssPixels(customProperties.top),
+      right: parseCssPixels(customProperties.right),
+      bottom: parseCssPixels(customProperties.bottom),
+      left: parseCssPixels(customProperties.left),
+    };
+  }
+
+  if (!probe) {
+    return ZERO_SAFE_AREA_INSETS;
+  }
+  const style = getComputedStyle(probe);
+  return {
+    top: parseCssPixels(style.paddingTop),
+    right: parseCssPixels(style.paddingRight),
+    bottom: parseCssPixels(style.paddingBottom),
+    left: parseCssPixels(style.paddingLeft),
+  };
+};
+
+const measureBrowserEnvironment = (probe: HTMLElement | null): BrowserEnvironmentSnapshot => {
+  if (typeof window === "undefined") {
+    return EMPTY_BROWSER_ENVIRONMENT;
+  }
+
+  const screenWidth = finiteOr(window.screen?.width, finiteOr(window.innerWidth, 0));
+  const screenHeight = finiteOr(window.screen?.height, finiteOr(window.innerHeight, 0));
+  const windowWidth = finiteOr(window.innerWidth, screenWidth);
+  const windowHeight = finiteOr(window.innerHeight, screenHeight);
+
+  return {
+    dimensions: {
+      screen: {
+        width: screenWidth,
+        height: screenHeight,
+        x: 0,
+        y: 0,
+      },
+      window: {
+        width: windowWidth,
+        height: windowHeight,
+        x: finiteOr(window.screenX, 0),
+        y: finiteOr(window.screenY, 0),
+      },
+    },
+    safeAreaInsets: readSafeAreaInsets(probe),
+  };
+};
+
+const dimensionsEqual = (left: PaywallDimensions, right: PaywallDimensions): boolean =>
+  left.width === right.width &&
+  left.height === right.height &&
+  left.x === right.x &&
+  left.y === right.y;
+
+const snapshotsEqual = (
+  left: BrowserEnvironmentSnapshot,
+  right: BrowserEnvironmentSnapshot,
+): boolean =>
+  dimensionsEqual(left.dimensions.screen, right.dimensions.screen) &&
+  dimensionsEqual(left.dimensions.window, right.dimensions.window) &&
+  left.safeAreaInsets.top === right.safeAreaInsets.top &&
+  left.safeAreaInsets.right === right.safeAreaInsets.right &&
+  left.safeAreaInsets.bottom === right.safeAreaInsets.bottom &&
+  left.safeAreaInsets.left === right.safeAreaInsets.left;
+
+const createSafeAreaProbe = (): HTMLElement | null => {
+  if (typeof document === "undefined") {
+    return null;
+  }
+  const probe = document.createElement("div");
+  probe.setAttribute("aria-hidden", "true");
+  Object.assign(probe.style, {
+    paddingTop: "env(safe-area-inset-top, 0px)",
+    paddingRight: "env(safe-area-inset-right, 0px)",
+    paddingBottom: "env(safe-area-inset-bottom, 0px)",
+    paddingLeft: "env(safe-area-inset-left, 0px)",
+    position: "fixed",
+    visibility: "hidden",
+    pointerEvents: "none",
+  });
+  document.documentElement.append(probe);
+  return probe;
+};
+
+/** Observes browser geometry and safe-area changes for one runtime provider. */
+export const useBrowserEnvironment = (enabled: boolean): BrowserEnvironmentSnapshot => {
+  const [snapshot, setSnapshot] = useState<BrowserEnvironmentSnapshot>(() =>
+    measureBrowserEnvironment(null),
+  );
+
+  useEffect(() => {
+    if (!enabled || typeof window === "undefined") {
+      return;
+    }
+
+    const probe = createSafeAreaProbe();
+    const update = () => {
+      const next = measureBrowserEnvironment(probe);
+      setSnapshot((current) => (snapshotsEqual(current, next) ? current : next));
+    };
+    const visualViewport = window.visualViewport;
+
+    update();
+    window.addEventListener("resize", update);
+    window.addEventListener("orientationchange", update);
+    visualViewport?.addEventListener("resize", update);
+    visualViewport?.addEventListener("scroll", update);
+
+    return () => {
+      window.removeEventListener("resize", update);
+      window.removeEventListener("orientationchange", update);
+      visualViewport?.removeEventListener("resize", update);
+      visualViewport?.removeEventListener("scroll", update);
+      probe?.remove();
+    };
+  }, [enabled]);
+
+  return snapshot;
+};
+
+/** Resolves explicit host configuration over the latest browser measurement. */
+export const resolvePaywallEnvironment = (
+  config: PaywallRuntimeConfig,
+  browser: BrowserEnvironmentSnapshot,
+): ResolvedPaywallEnvironment => {
+  const platform = config.platform ?? "web";
+  const screen = config.dimensions?.screen ?? browser.dimensions.screen;
+  const windowDimensions =
+    config.dimensions?.window ?? (platform === "web" ? browser.dimensions.window : screen);
+
+  return {
+    platform,
+    safeAreaInsets: config.safeAreaInsets ?? browser.safeAreaInsets,
+    dimensions: {
+      screen: platform === "web" || config.dimensions ? screen : { ...screen, x: 0, y: 0 },
+      window:
+        platform === "web" || config.dimensions
+          ? windowDimensions
+          : { ...windowDimensions, x: 0, y: 0 },
+    },
+  };
+};
diff --git a/libraries/paywalls/src/runtime/runtime.tsx b/libraries/paywalls/src/runtime/runtime.tsx
index 440fa3d62..5294550f4 100644
--- a/libraries/paywalls/src/runtime/runtime.tsx
+++ b/libraries/paywalls/src/runtime/runtime.tsx
@@ -10,11 +10,20 @@ import {
 
 import { createDefaultBridge, type PaywallBridge } from "./bridge";
 import {
+  type PaywallDimensions,
+  type PaywallDimensionTarget,
+  type PaywallPlatform,
   type PaywallProduct,
   type PaywallRuntimeConfig,
+  type PaywallSafeAreaInsets,
   type PaywallVariables,
   readInjectedConfig,
 } from "./config";
+import {
+  type ResolvedPaywallEnvironment,
+  resolvePaywallEnvironment,
+  useBrowserEnvironment,
+} from "./environment";
 import {
   createCloseEnvelope,
   createEventEnvelope,
@@ -52,6 +61,7 @@ export interface PaywallStatusSnapshot {
 
 interface PaywallRuntimeValue {
   readonly config: PaywallRuntimeConfig;
+  readonly environment: ResolvedPaywallEnvironment;
   readonly products: ReadonlyArray<PaywallProduct>;
   readonly variables: PaywallVariables;
   readonly selectedProductId: string | undefined;
@@ -125,6 +135,14 @@ export const PaywallRuntimeProvider = ({
     }
   }, [configProp]);
 
+  const browserEnvironment = useBrowserEnvironment(
+    config.safeAreaInsets === undefined || config.dimensions === undefined,
+  );
+  const environment = useMemo(
+    () => resolvePaywallEnvironment(config, browserEnvironment),
+    [config, browserEnvironment],
+  );
+
   const [explicitSelection, setExplicitSelection] = useState<string | undefined>(undefined);
   // An explicit user selection survives reconfiguration as long as the product
   // still exists; otherwise fall back to the configured default.
@@ -203,13 +221,14 @@ export const PaywallRuntimeProvider = ({
     () => ({
       actions,
       config,
+      environment,
       products: config.products,
       selectedProduct: config.products.find((product) => product.id === selectedProductId),
       selectedProductId,
       status,
       variables: config.variables,
     }),
-    [actions, config, selectedProductId, status],
+    [actions, config, environment, selectedProductId, status],
   );
 
   return <PaywallRuntimeContext.Provider value={value}>{children}</PaywallRuntimeContext.Provider>;
@@ -223,11 +242,30 @@ export const usePaywallProducts = (): ReadonlyArray<PaywallProduct> =>
 export const usePaywallVariables = (): PaywallVariables =>
   useRuntimeOrThrow("usePaywallVariables").variables;
 
+/** The current runtime platform. Defaults to `web` when the host does not supply one. */
+export const usePlatform = (): PaywallPlatform =>
+  useRuntimeOrThrow("usePlatform").environment.platform;
+
+/** Safe-area insets in logical/CSS pixels. */
+export const useSafeAreaInsets = (): PaywallSafeAreaInsets =>
+  useRuntimeOrThrow("useSafeAreaInsets").environment.safeAreaInsets;
+
+/** Screen or window dimensions in logical/CSS pixels. */
+export const useDimensions = (target: PaywallDimensionTarget): PaywallDimensions => {
+  const runtime = useRuntimeOrThrow("useDimensions");
+  if (target !== "screen" && target !== "window") {
+    throw new Error(
+      `useDimensions expected "screen" or "window", received ${JSON.stringify(target)}.`,
+    );
+  }
+  return runtime.environment.dimensions[target];
+};
+
 /** Host-backed actions: purchase, restore, close, openUrl, track, select. */
 export const usePaywallActions = (): PaywallActions =>
   useRuntimeOrThrow("usePaywallActions").actions;
 
-/** The full runtime config (products, variables, locale, platform). */
+/** The full runtime config supplied by the host or preview environment. */
 export const usePaywallConfig = (): PaywallRuntimeConfig =>
   useRuntimeOrThrow("usePaywallConfig").config;
 
diff --git a/libraries/paywalls/src/sandbox/host-data.ts b/libraries/paywalls/src/sandbox/host-data.ts
index 03f670e13..b444408de 100644
--- a/libraries/paywalls/src/sandbox/host-data.ts
+++ b/libraries/paywalls/src/sandbox/host-data.ts
@@ -7,6 +7,11 @@
  * simpler shape than the full runtime {@link PaywallRuntimeConfig} — the
  * sandbox maps it into a runtime config before rendering.
  */
+import type {
+  PaywallDimensionsByTarget,
+  PaywallPlatform,
+  PaywallSafeAreaInsets,
+} from "../runtime/config";
 
 /**
  * A resolved product as delivered to components in the studio preview. On a
@@ -33,15 +38,27 @@ export interface SandboxHostData {
   /** Author variables (`usePaywallVariables`), overridable per preview state. */
   readonly variables: SandboxVariables;
   readonly locale: string;
-  readonly platform: "ios" | "android" | "web";
+  readonly platform: PaywallPlatform;
+  readonly safeAreaInsets: PaywallSafeAreaInsets;
+  readonly dimensions: PaywallDimensionsByTarget;
 }
 
 /** Default mock host data used when a preview fixture supplies none. */
 export const defaultHostData = (): SandboxHostData => ({
   locale: "en-US",
   platform: "ios",
+  safeAreaInsets: { top: 59, right: 0, bottom: 34, left: 0 },
+  dimensions: {
+    screen: { width: 393, height: 852, x: 0, y: 0 },
+    window: { width: 393, height: 852, x: 0, y: 0 },
+  },
   products: [
-    { displayName: "Yearly", id: "yearly", priceString: "$39.99", trialPeriod: "7 days" },
+    {
+      displayName: "Yearly",
+      id: "yearly",
+      priceString: "$39.99",
+      trialPeriod: "7 days",
+    },
     { displayName: "Monthly", id: "monthly", priceString: "$4.99" },
   ],
   selectedProductId: "yearly",
diff --git a/libraries/paywalls/src/sandbox/render-component.tsx b/libraries/paywalls/src/sandbox/render-component.tsx
index 411f7ba75..5cb37dbf8 100644
--- a/libraries/paywalls/src/sandbox/render-component.tsx
+++ b/libraries/paywalls/src/sandbox/render-component.tsx
@@ -61,6 +61,8 @@ const toRuntimeConfig = (hostData: SandboxHostData): PaywallRuntimeConfig => ({
   variables: hostData.variables ?? {},
   locale: hostData.locale,
   platform: hostData.platform,
+  safeAreaInsets: hostData.safeAreaInsets,
+  dimensions: hostData.dimensions,
   ...(hostData.selectedProductId != null
     ? { defaultSelectedProductId: hostData.selectedProductId }
     : {}),
diff --git a/libraries/paywalls/tests/envelope.test.ts b/libraries/paywalls/tests/envelope.test.ts
index e68781ae2..68fbcdbf8 100644
--- a/libraries/paywalls/tests/envelope.test.ts
+++ b/libraries/paywalls/tests/envelope.test.ts
@@ -174,6 +174,11 @@ describe("parseInboundEnvelope", () => {
           ],
           variables: { accentColor: "#16a34a" },
           platform: "ios",
+          safeAreaInsets: { top: 59, right: 0, bottom: 34, left: 0 },
+          dimensions: {
+            screen: { width: 393, height: 852, x: 0, y: 0 },
+            window: { width: 390, height: 760, x: 1, y: 59 },
+          },
         },
       }),
     );
@@ -193,6 +198,11 @@ describe("parseInboundEnvelope", () => {
         variables: { accentColor: "#16a34a" },
         locale: undefined,
         platform: "ios",
+        safeAreaInsets: { top: 59, right: 0, bottom: 34, left: 0 },
+        dimensions: {
+          screen: { width: 393, height: 852, x: 0, y: 0 },
+          window: { width: 390, height: 760, x: 1, y: 59 },
+        },
         defaultSelectedProductId: undefined,
       },
     });
diff --git a/libraries/paywalls/tests/render.test.tsx b/libraries/paywalls/tests/render.test.tsx
index d66c640e3..cc588b24d 100644
--- a/libraries/paywalls/tests/render.test.tsx
+++ b/libraries/paywalls/tests/render.test.tsx
@@ -10,8 +10,11 @@ import {
   Pressable,
   Slot,
   Text,
+  useDimensions,
   usePaywallProducts,
   usePaywallVariables,
+  usePlatform,
+  useSafeAreaInsets,
   View,
 } from "../src/index";
 
@@ -20,7 +23,14 @@ const Card = defineComponent({
     title: p.string().label("Title").default("Untitled"),
   }),
   render: ({ props }) => (
-    <View style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16 }}>
+    <View
+      style={{
+        paddingTop: 16,
+        paddingRight: 16,
+        paddingBottom: 16,
+        paddingLeft: 16,
+      }}
+    >
       <Text>Card {props.title}</Text>
       <Slot />
     </View>
@@ -111,6 +121,76 @@ describe("DOM paywall rendering", () => {
     expect(html).toContain("Yearly|#16a34a");
   });
 
+  it("exposes explicitly configured platform, safe area, screen and window metrics", () => {
+    const Body = () => (
+      <Text>
+        {JSON.stringify({
+          platform: usePlatform(),
+          safeAreaInsets: useSafeAreaInsets(),
+          screen: useDimensions("screen"),
+          window: useDimensions("window"),
+        })}
+      </Text>
+    );
+    const paywall = createPaywall({
+      title: "Environment hooks",
+      render: () => <Body />,
+    });
+    const html = renderToStaticMarkup(
+      <PaywallRenderer
+        config={{
+          products: [],
+          variables: {},
+          platform: "ios",
+          safeAreaInsets: { top: 59, right: 0, bottom: 34, left: 0 },
+          dimensions: {
+            screen: { width: 393, height: 852, x: 0, y: 0 },
+            window: { width: 390, height: 760, x: 1, y: 59 },
+          },
+        }}
+        paywall={paywall}
+      />,
+    );
+
+    expect(html).toContain("&quot;platform&quot;:&quot;ios&quot;");
+    expect(html).toContain("&quot;top&quot;:59");
+    expect(html).toContain("&quot;width&quot;:393");
+    expect(html).toContain("&quot;width&quot;:390");
+    expect(html).toContain("&quot;y&quot;:59");
+  });
+
+  it("uses stable web and zero environment fallbacks during SSR", () => {
+    const Body = () => (
+      <Text>
+        {usePlatform()}|{JSON.stringify(useSafeAreaInsets())}|
+        {JSON.stringify(useDimensions("screen"))}|{JSON.stringify(useDimensions("window"))}
+      </Text>
+    );
+    const paywall = createPaywall({
+      title: "SSR environment",
+      render: () => <Body />,
+    });
+    const html = renderToStaticMarkup(<PaywallRenderer paywall={paywall} />);
+
+    expect(html).toContain("web|");
+    expect(html).toContain(
+      "{&quot;top&quot;:0,&quot;right&quot;:0,&quot;bottom&quot;:0,&quot;left&quot;:0}",
+    );
+    expect(html.match(/&quot;width&quot;:0/g)).toHaveLength(2);
+  });
+
+  it("rejects an invalid dimension target with a descriptive error", () => {
+    const Body = () => <Text>{useDimensions("viewport" as "window").width}</Text>;
+    const paywall = createPaywall({
+      title: "Invalid dimensions",
+      render: () => <Body />,
+    });
+
+    expect(() => renderToStaticMarkup(<PaywallRenderer paywall={paywall} />)).toThrow(
+      'useDimensions expected "screen" or "window", received "viewport".',
+    );
+  });
+
   it("carries paywall metadata under __voidhash", () => {
     const paywall = createPaywall({
       title: "Onboarding",
diff --git a/libraries/paywalls/tests/runtime-environment.test.tsx b/libraries/paywalls/tests/runtime-environment.test.tsx
new file mode 100644
index 000000000..b9ab2ca00
--- /dev/null
+++ b/libraries/paywalls/tests/runtime-environment.test.tsx
@@ -0,0 +1,209 @@
+// @vitest-environment jsdom
+
+import { act, type ReactNode } from "react";
+import { createRoot, type Root } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+
+import {
+  normalizeRuntimeConfig,
+  type PaywallBridge,
+  type PaywallInboundEnvelope,
+  PaywallRuntimeProvider,
+  useDimensions,
+  usePlatform,
+  useSafeAreaInsets,
+} from "../src/index";
+
+Object.assign(globalThis, { IS_REACT_ACT_ENVIRONMENT: true });
+
+interface HookSnapshot {
+  readonly platform: ReturnType<typeof usePlatform>;
+  readonly safeAreaInsets: ReturnType<typeof useSafeAreaInsets>;
+  readonly screen: ReturnType<typeof useDimensions>;
+  readonly window: ReturnType<typeof useDimensions>;
+}
+
+const setWindowNumber = (name: string, value: number): void => {
+  Object.defineProperty(window, name, { configurable: true, value });
+};
+
+const setScreenNumber = (name: string, value: number): void => {
+  Object.defineProperty(window.screen, name, { configurable: true, value });
+};
+
+const setSafeAreaCss = (top: number, right: number, bottom: number, left: number): void => {
+  const style = document.documentElement.style;
+  style.setProperty("--voidhash-safe-area-top", `${top}px`);
+  style.setProperty("--voidhash-safe-area-right", `${right}px`);
+  style.setProperty("--voidhash-safe-area-bottom", `${bottom}px`);
+  style.setProperty("--voidhash-safe-area-left", `${left}px`);
+};
+
+describe("runtime environment hooks", () => {
+  let root: Root;
+  let container: HTMLDivElement;
+  let inboundListener: ((envelope: PaywallInboundEnvelope) => void) | undefined;
+  const visualViewport = new EventTarget();
+  const bridge: PaywallBridge = {
+    post: () => {},
+    subscribe: (listener) => {
+      inboundListener = listener;
+      return () => {
+        inboundListener = undefined;
+      };
+    },
+  };
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.append(container);
+    root = createRoot(container);
+    Object.defineProperty(window, "visualViewport", {
+      configurable: true,
+      value: visualViewport,
+    });
+    setScreenNumber("width", 1024);
+    setScreenNumber("height", 768);
+    setWindowNumber("innerWidth", 800);
+    setWindowNumber("innerHeight", 600);
+    setWindowNumber("screenX", -20);
+    setWindowNumber("screenY", 30);
+    setSafeAreaCss(12, 3, 18, 4);
+  });
+
+  afterEach(() => {
+    act(() => root.unmount());
+    container.remove();
+    document.documentElement.removeAttribute("style");
+    inboundListener = undefined;
+  });
+
+  it("measures browser metrics and refreshes on layout and viewport events", () => {
+    const snapshots: HookSnapshot[] = [];
+    const Probe = (): ReactNode => {
+      const snapshot = {
+        platform: usePlatform(),
+        safeAreaInsets: useSafeAreaInsets(),
+        screen: useDimensions("screen"),
+        window: useDimensions("window"),
+      };
+      snapshots.push(snapshot);
+      return <output>{JSON.stringify(snapshot)}</output>;
+    };
+
+    act(() => {
+      root.render(
+        <PaywallRuntimeProvider bridge={bridge} config={{ products: [], variables: {} }}>
+          <Probe />
+        </PaywallRuntimeProvider>,
+      );
+    });
+
+    expect(snapshots.at(-1)).toEqual({
+      platform: "web",
+      safeAreaInsets: { top: 12, right: 3, bottom: 18, left: 4 },
+      screen: { width: 1024, height: 768, x: 0, y: 0 },
+      window: { width: 800, height: 600, x: -20, y: 30 },
+    });
+
+    const renderCount = snapshots.length;
+    act(() => window.dispatchEvent(new Event("resize")));
+    expect(snapshots).toHaveLength(renderCount);
+
+    setWindowNumber("innerWidth", 640);
+    act(() => window.dispatchEvent(new Event("resize")));
+    expect(snapshots.at(-1)?.window.width).toBe(640);
+
+    setScreenNumber("height", 1024);
+    act(() => window.dispatchEvent(new Event("orientationchange")));
+    expect(snapshots.at(-1)?.screen.height).toBe(1024);
+
+    setSafeAreaCss(24, 0, 20, 0);
+    act(() => visualViewport.dispatchEvent(new Event("scroll")));
+    expect(snapshots.at(-1)?.safeAreaInsets).toEqual({
+      top: 24,
+      right: 0,
+      bottom: 20,
+      left: 0,
+    });
+  });
+
+  it("applies late configured native metrics and removes browser observation", () => {
+    let latest: HookSnapshot | undefined;
+    const Probe = (): ReactNode => {
+      latest = {
+        platform: usePlatform(),
+        safeAreaInsets: useSafeAreaInsets(),
+        screen: useDimensions("screen"),
+        window: useDimensions("window"),
+      };
+      return null;
+    };
+
+    act(() => {
+      root.render(
+        <PaywallRuntimeProvider bridge={bridge} config={{ products: [], variables: {} }}>
+          <Probe />
+        </PaywallRuntimeProvider>,
+      );
+    });
+    expect(document.documentElement.querySelectorAll('[aria-hidden="true"]')).toHaveLength(1);
+
+    act(() => {
+      inboundListener?.({
+        version: 1,
+        type: "configure",
+        payload: normalizeRuntimeConfig({
+          products: [],
+          variables: {},
+          platform: "android",
+          safeAreaInsets: { top: 24, right: 0, bottom: 24, left: 0 },
+          dimensions: {
+            screen: { width: 412, height: 915, x: 0, y: 0 },
+            window: { width: 400, height: 820, x: 6, y: 48 },
+          },
+        }),
+      });
+    });
+
+    expect(latest).toEqual({
+      platform: "android",
+      safeAreaInsets: { top: 24, right: 0, bottom: 24, left: 0 },
+      screen: { width: 412, height: 915, x: 0, y: 0 },
+      window: { width: 400, height: 820, x: 6, y: 48 },
+    });
+    expect(document.documentElement.querySelectorAll('[aria-hidden="true"]')).toHaveLength(0);
+  });
+
+  it("uses the measured screen rectangle for both native targets when dimensions are absent", () => {
+    let latest: HookSnapshot | undefined;
+    const Probe = (): ReactNode => {
+      latest = {
+        platform: usePlatform(),
+        safeAreaInsets: useSafeAreaInsets(),
+        screen: useDimensions("screen"),
+        window: useDimensions("window"),
+      };
+      return null;
+    };
+
+    act(() => {
+      root.render(
+        <PaywallRuntimeProvider
+          bridge={bridge}
+          config={{
+            products: [],
+            variables: {},
+            platform: "ios",
+            safeAreaInsets: { top: 20, right: 0, bottom: 0, left: 0 },
+          }}
+        >
+          <Probe />
+        </PaywallRuntimeProvider>,
+      );
+    });
+
+    expect(latest?.screen).toEqual({ width: 1024, height: 768, x: 0, y: 0 });
+    expect(latest?.window).toEqual(latest?.screen);
+  });
+});
diff --git a/libraries/paywalls/tests/sandbox-bundle.test.ts b/libraries/paywalls/tests/sandbox-bundle.test.ts
index 6691ae0df..24314a1db 100644
--- a/libraries/paywalls/tests/sandbox-bundle.test.ts
+++ b/libraries/paywalls/tests/sandbox-bundle.test.ts
@@ -16,7 +16,7 @@ const dtsModule = path.join(distDir, "sandbox-dts.mjs");
 const built = existsSync(bundleModule) && existsSync(dtsModule);
 const describeBuilt = built ? describe : describe.skip;
 
-const SOURCE = `import { defineComponent, View, Text, Pressable, Slot, usePaywallProducts, useState, useEffect } from "@voidhash/paywalls";
+const SOURCE = `import { defineComponent, View, Text, Pressable, Slot, usePaywallProducts, usePlatform, useSafeAreaInsets, useDimensions, useState, useEffect } from "@voidhash/paywalls";
 
 export default defineComponent({
   props: (p) => ({
@@ -26,13 +26,16 @@ export default defineComponent({
   previews: { default: {}, trial: {} },
   render: ({ props, actions }) => {
     const products = usePaywallProducts();
+    const platform = usePlatform();
+    const insets = useSafeAreaInsets();
+    const windowDimensions = useDimensions("window");
     const product = products[0];
     const [n, setN] = useState(0);
     useEffect(() => { setN(1); }, []);
     return (
       <Pressable onPress={actions.onSelect} style={{ paddingTop: 16, paddingRight: 16, paddingBottom: 16, paddingLeft: 16, backgroundColor: props.accentColor }}>
         <View style={{ gap: 4 }}>
-          <Text style={{ color: "white" }}>{product.displayName} {n}</Text>
+          <Text style={{ color: "white" }}>{product.displayName} {n} {platform} {windowDimensions.width} {insets.top}</Text>
         </View>
         <Slot />
       </Pressable>
@@ -46,7 +49,11 @@ interface SandboxSurface {
   extractComponentManifest: (definition: unknown) => unknown;
   renderComponentToTree: (
     definition: unknown,
-    inputs: { state: string; props?: Record<string, unknown>; hostData?: unknown },
+    inputs: {
+      state: string;
+      props?: Record<string, unknown>;
+      hostData?: unknown;
+    },
   ) => Promise<unknown>;
   defaultHostData: () => unknown;
 }
@@ -97,11 +104,14 @@ describeBuilt("sandbox IIFE (node integration, mirrors the studio sandbox path)"
     expect(parseComponentManifest(manifest).ok).toBe(true);
 
     const hostData = sandbox.defaultHostData();
-    const tree = await sandbox.renderComponentToTree(definition, { hostData, state: "default" });
+    const tree = await sandbox.renderComponentToTree(definition, {
+      hostData,
+      state: "default",
+    });
     const parsed = parsePreviewTree(tree);
     expect(parsed.ok).toBe(true);
     // Products + settled effect both flowed through the real reconciler.
-    expect(JSON.stringify(tree)).toContain("Yearly 1");
+    expect(JSON.stringify(tree)).toContain("Yearly 1 ios 393 59");
   });
 });
 
@@ -117,6 +127,12 @@ describeBuilt("generated Monaco dts", () => {
       "definePaywall",
       "Screen",
       "variable",
+      "usePlatform",
+      "useSafeAreaInsets",
+      "useDimensions",
+      "PaywallSafeAreaInsets",
+      "PaywallDimensions",
+      "PaywallDimensionTarget",
       "useState",
       "View",
       "Slot",
diff --git a/libraries/paywalls/tests/sandbox.test.tsx b/libraries/paywalls/tests/sandbox.test.tsx
index 9da086c8d..7be80aa9c 100644
--- a/libraries/paywalls/tests/sandbox.test.tsx
+++ b/libraries/paywalls/tests/sandbox.test.tsx
@@ -1,7 +1,17 @@
 import { useEffect, useState } from "react";
 import { describe, expect, it } from "vitest";
 
-import { defineComponent, Pressable, Slot, Text, usePaywallVariables, View } from "../src/index";
+import {
+  defineComponent,
+  Pressable,
+  Slot,
+  Text,
+  useDimensions,
+  usePaywallVariables,
+  usePlatform,
+  useSafeAreaInsets,
+  View,
+} from "../src/index";
 import { Panel } from "../src/panel/index";
 import { parseComponentManifest, parsePreviewTree } from "../src/schema/validate";
 import {
@@ -60,8 +70,14 @@ const definition = defineComponent({
 describe("sandbox renderComponentToTree", () => {
   it("renders a deterministic, byte-identical tree across two runs", async () => {
     const hostData = defaultHostData();
-    const first = await renderComponentToTree(definition, { hostData, state: "default" });
-    const second = await renderComponentToTree(definition, { hostData, state: "default" });
+    const first = await renderComponentToTree(definition, {
+      hostData,
+      state: "default",
+    });
+    const second = await renderComponentToTree(definition, {
+      hostData,
+      state: "default",
+    });
     expect(JSON.stringify(first)).toBe(JSON.stringify(second));
   });
 
@@ -90,7 +106,9 @@ describe("sandbox renderComponentToTree", () => {
         </Pressable>
       ),
     });
-    const tree = await renderComponentToTree(inlineDefinition, { state: "default" });
+    const tree = await renderComponentToTree(inlineDefinition, {
+      state: "default",
+    });
     if (tree.root.type !== "pressable") {
       throw new Error("expected a pressable root");
     }
@@ -98,7 +116,9 @@ describe("sandbox renderComponentToTree", () => {
     expect(tree.root.action).toBe("onSelect");
 
     // The probe must not perturb the committed tree — still byte-stable.
-    const again = await renderComponentToTree(inlineDefinition, { state: "default" });
+    const again = await renderComponentToTree(inlineDefinition, {
+      state: "default",
+    });
     expect(JSON.stringify(tree)).toBe(JSON.stringify(again));
   });
 
@@ -139,14 +159,68 @@ describe("sandbox renderComponentToTree", () => {
         return <Text>{String(variables.headline ?? "NONE")}</Text>;
       },
     });
-    const hostData = { ...defaultHostData(), variables: { headline: "FromFixture" } };
-    const tree = await renderComponentToTree(withVars, { hostData, state: "default" });
+    const hostData = {
+      ...defaultHostData(),
+      variables: { headline: "FromFixture" },
+    };
+    const tree = await renderComponentToTree(withVars, {
+      hostData,
+      state: "default",
+    });
     if (tree.root.type !== "text") {
       throw new Error("expected a text root");
     }
     expect(tree.root.text).toBe("FromFixture");
   });
 
+  it("uses deterministic default device metrics and per-state environment overrides", async () => {
+    const withEnvironment = defineComponent({
+      previews: {
+        iphone: {
+          data: {
+            platform: "ios",
+            safeAreaInsets: { top: 59, right: 0, bottom: 34, left: 0 },
+            dimensions: {
+              screen: { width: 393, height: 852, x: 0, y: 0 },
+              window: { width: 393, height: 852, x: 0, y: 0 },
+            },
+          },
+        },
+        pixel: {
+          data: {
+            platform: "android",
+            safeAreaInsets: { top: 24, right: 0, bottom: 24, left: 0 },
+            dimensions: {
+              screen: { width: 412, height: 915, x: 0, y: 0 },
+              window: { width: 412, height: 915, x: 0, y: 0 },
+            },
+          },
+        },
+      },
+      render: () => (
+        <Text>
+          {usePlatform()}:{useDimensions("window").width}:{useSafeAreaInsets().top}
+        </Text>
+      ),
+    });
+    const defaults = defaultHostData();
+    const iphone = await renderComponentToTree(withEnvironment, {
+      state: "iphone",
+      hostData: { ...defaults, ...withEnvironment.previews.iphone?.data },
+    });
+    const pixel = await renderComponentToTree(withEnvironment, {
+      state: "pixel",
+      hostData: { ...defaults, ...withEnvironment.previews.pixel?.data },
+    });
+
+    if (iphone.root.type !== "text" || pixel.root.type !== "text") {
+      throw new Error("expected text roots");
+    }
+    expect(iphone.root.text).toBe("ios:393:59");
+    expect(pixel.root.text).toBe("android:412:24");
+    expect(iphone).not.toEqual(pixel);
+  });
+
   it("extracts a manifest matching the definition", () => {
     const manifest = extractComponentManifest(definition);
     // Manifest v2 carries no `id` (identity is the component's file path); the
@@ -169,7 +243,9 @@ describe("sandbox renderComponentToTree", () => {
 
   it("reports hasPanel=true when the definition declares a panel", () => {
     const withPanel = defineComponent({
-      props: (p) => ({ accentColor: p.string().editor("color").default("#000") }),
+      props: (p) => ({
+        accentColor: p.string().editor("color").default("#000"),
+      }),
       panel: (ctx) => (
         <Panel>
           <Panel.Section title="Style">
diff --git a/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
index a1bd06a91..e229d66c3 100644
--- a/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
+++ b/packages/paywall-renderer-preact/src/templates/runtime-bundle.generated.ts
@@ -1,2 +1,2 @@
 /** Generated by scripts/generate-runtime-bundle.mjs. */
-export const PAYWALL_RUNTIME_BUNDLE = "(()=>{var Yn=Object.defineProperty;var Ia=(e,t,r)=>t in e?Yn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Aa=(e,t)=>{for(var r in t)Yn(e,r,{get:t[r],enumerable:!0})};var p=(e,t,r)=>Ia(e,typeof t!=\"symbol\"?t+\"\":t,r);var Wt,k,Qn,Ra,Ne,Xn,ei,ti,$r,Bt,Ct,ri,Gr,Fr,zr,ni,$t={},Ft=[],Ca=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Kt=Array.isArray;function be(e,t){for(var r in t)e[r]=t[r];return e}function Yr(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function qa(e,t,r){var n,i,a,d={};for(a in t)a==\"key\"?n=t[a]:a==\"ref\"?i=t[a]:d[a]=t[a];if(arguments.length>2&&(d.children=arguments.length>3?Wt.call(arguments,2):r),typeof e==\"function\"&&e.defaultProps!=null)for(a in e.defaultProps)d[a]===void 0&&(d[a]=e.defaultProps[a]);return Ht(e,d,n,i,null)}function Ht(e,t,r,n,i){var a={type:e,props:t,key:r,ref:n,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:i??++Qn,__i:-1,__u:0};return i==null&&k.vnode!=null&&k.vnode(a),a}function Q(e){return e.children}function Ut(e,t){this.props=e,this.context=t}function rt(e,t){if(t==null)return e.__?rt(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if((r=e.__k[t])!=null&&r.__e!=null)return r.__e;return typeof e.type==\"function\"?rt(e):null}function Ea(e){if(e.__P&&e.__d){var t=e.__v,r=t.__e,n=[],i=[],a=be({},t);a.__v=t.__v+1,k.vnode&&k.vnode(a),Xr(e.__P,a,t,e.__n,e.__P.namespaceURI,32&t.__u?[r]:null,n,r??rt(t),!!(32&t.__u),i),a.__v=t.__v,a.__.__k[a.__i]=a,di(n,a,i),t.__e=t.__=null,a.__e!=r&&ii(a)}}function ii(e){if((e=e.__)!=null&&e.__c!=null)return e.__e=e.__c.base=null,e.__k.some(function(t){if(t!=null&&t.__e!=null)return e.__e=e.__c.base=t.__e}),ii(e)}function Wr(e){(!e.__d&&(e.__d=!0)&&Ne.push(e)&&!zt.__r++||Xn!=k.debounceRendering)&&((Xn=k.debounceRendering)||ei)(zt)}function zt(){try{for(var e,t=1;Ne.length;)Ne.length>t&&Ne.sort(ti),e=Ne.shift(),t=Ne.length,Ea(e)}finally{Ne.length=zt.__r=0}}function oi(e,t,r,n,i,a,d,l,s,u,f){var c,m,y,N,R,w,P,V=n&&n.__k||Ft,L=t.length;for(s=Da(r,t,V,s,L),c=0;c<L;c++)(y=r.__k[c])!=null&&(m=y.__i!=-1&&V[y.__i]||$t,y.__i=c,w=Xr(e,y,m,i,a,d,l,s,u,f),N=y.__e,y.ref&&m.ref!=y.ref&&(m.ref&&Jr(m.ref,null,y),f.push(y.ref,y.__c||N,y)),R==null&&N!=null&&(R=N),(P=!!(4&y.__u))||m.__k===y.__k?(s=ai(y,s,e,P),P&&m.__e&&(m.__e=null)):typeof y.type==\"function\"&&w!==void 0?s=w:N&&(s=N.nextSibling),y.__u&=-7);return r.__e=R,s}function Da(e,t,r,n,i){var a,d,l,s,u,f=r.length,c=f,m=0;for(e.__k=new Array(i),a=0;a<i;a++)(d=t[a])!=null&&typeof d!=\"boolean\"&&typeof d!=\"function\"?(typeof d==\"string\"||typeof d==\"number\"||typeof d==\"bigint\"||d.constructor==String?d=e.__k[a]=Ht(null,d,null,null,null):Kt(d)?d=e.__k[a]=Ht(Q,{children:d},null,null,null):d.constructor===void 0&&d.__b>0?d=e.__k[a]=Ht(d.type,d.props,d.key,d.ref?d.ref:null,d.__v):e.__k[a]=d,s=a+m,d.__=e,d.__b=e.__b+1,l=null,(u=d.__i=La(d,r,s,c))!=-1&&(c--,(l=r[u])&&(l.__u|=2)),l==null||l.__v==null?(u==-1&&(i>f?m--:i<f&&m++),typeof d.type!=\"function\"&&(d.__u|=4)):u!=s&&(u==s-1?m--:u==s+1?m++:(u>s?m--:m++,d.__u|=4))):e.__k[a]=null;if(c)for(a=0;a<f;a++)(l=r[a])!=null&&(2&l.__u)==0&&(l.__e==n&&(n=rt(l)),si(l,l));return n}function ai(e,t,r,n){var i,a;if(typeof e.type==\"function\"){for(i=e.__k,a=0;i&&a<i.length;a++)i[a]&&(i[a].__=e,t=ai(i[a],t,r,n));return t}e.__e!=t&&(n&&(t&&e.type&&!t.parentNode&&(t=rt(e)),r.insertBefore(e.__e,t||null)),t=e.__e);do t=t&&t.nextSibling;while(t!=null&&t.nodeType==8);return t}function La(e,t,r,n){var i,a,d,l=e.key,s=e.type,u=t[r],f=u!=null&&(2&u.__u)==0;if(u===null&&l==null||f&&l==u.key&&s==u.type)return r;if(n>(f?1:0)){for(i=r-1,a=r+1;i>=0||a<t.length;)if((u=t[d=i>=0?i--:a++])!=null&&(2&u.__u)==0&&l==u.key&&s==u.type)return d}return-1}function Jn(e,t,r){t[0]==\"-\"?e.setProperty(t,r??\"\"):e[t]=r==null?\"\":typeof r!=\"number\"||Ca.test(t)?r:r+\"px\"}function jt(e,t,r,n,i){var a,d;e:if(t==\"style\")if(typeof r==\"string\")e.style.cssText=r;else{if(typeof n==\"string\"&&(e.style.cssText=n=\"\"),n)for(t in n)r&&t in r||Jn(e.style,t,\"\");if(r)for(t in r)n&&r[t]==n[t]||Jn(e.style,t,r[t])}else if(t[0]==\"o\"&&t[1]==\"n\")a=t!=(t=t.replace(ri,\"$1\")),d=t.toLowerCase(),t=d in e||t==\"onFocusOut\"||t==\"onFocusIn\"?d.slice(2):t.slice(2),e.l||(e.l={}),e.l[t+a]=r,r?n?r[Ct]=n[Ct]:(r[Ct]=Gr,e.addEventListener(t,a?zr:Fr,a)):e.removeEventListener(t,a?zr:Fr,a);else{if(i==\"http://www.w3.org/2000/svg\")t=t.replace(/xlink(H|:h)/,\"h\").replace(/sName$/,\"s\");else if(t!=\"width\"&&t!=\"height\"&&t!=\"href\"&&t!=\"list\"&&t!=\"form\"&&t!=\"tabIndex\"&&t!=\"download\"&&t!=\"rowSpan\"&&t!=\"colSpan\"&&t!=\"role\"&&t!=\"popover\"&&t in e)try{e[t]=r??\"\";break e}catch{}typeof r==\"function\"||(r==null||r===!1&&t[4]!=\"-\"?e.removeAttribute(t):e.setAttribute(t,t==\"popover\"&&r==1?\"\":r))}}function Zn(e){return function(t){if(this.l){var r=this.l[t.type+e];if(t[Bt]==null)t[Bt]=Gr++;else if(t[Bt]<r[Ct])return;return r(k.event?k.event(t):t)}}}function Xr(e,t,r,n,i,a,d,l,s,u){var f,c,m,y,N,R,w,P,V,L,z,Pe,et,Rt,tt,M=t.type;if(t.constructor!==void 0)return null;128&r.__u&&(s=!!(32&r.__u),a=[l=t.__e=r.__e]),(f=k.__b)&&f(t);e:if(typeof M==\"function\")try{if(P=t.props,V=M.prototype&&M.prototype.render,L=(f=M.contextType)&&n[f.__c],z=f?L?L.props.value:f.__:n,r.__c?w=(c=t.__c=r.__c).__=c.__E:(V?t.__c=c=new M(P,z):(t.__c=c=new Ut(P,z),c.constructor=M,c.render=Ma),L&&L.sub(c),c.state||(c.state={}),c.__n=n,m=c.__d=!0,c.__h=[],c._sb=[]),V&&c.__s==null&&(c.__s=c.state),V&&M.getDerivedStateFromProps!=null&&(c.__s==c.state&&(c.__s=be({},c.__s)),be(c.__s,M.getDerivedStateFromProps(P,c.__s))),y=c.props,N=c.state,c.__v=t,m)V&&M.getDerivedStateFromProps==null&&c.componentWillMount!=null&&c.componentWillMount(),V&&c.componentDidMount!=null&&c.__h.push(c.componentDidMount);else{if(V&&M.getDerivedStateFromProps==null&&P!==y&&c.componentWillReceiveProps!=null&&c.componentWillReceiveProps(P,z),t.__v==r.__v||!c.__e&&c.shouldComponentUpdate!=null&&c.shouldComponentUpdate(P,c.__s,z)===!1){t.__v!=r.__v&&(c.props=P,c.state=c.__s,c.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(Ve){Ve&&(Ve.__=t)}),Ft.push.apply(c.__h,c._sb),c._sb=[],c.__h.length&&d.push(c);break e}c.componentWillUpdate!=null&&c.componentWillUpdate(P,c.__s,z),V&&c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(y,N,R)})}if(c.context=z,c.props=P,c.__P=e,c.__e=!1,Pe=k.__r,et=0,V)c.state=c.__s,c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),Ft.push.apply(c.__h,c._sb),c._sb=[];else do c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),c.state=c.__s;while(c.__d&&++et<25);c.state=c.__s,c.getChildContext!=null&&(n=be(be({},n),c.getChildContext())),V&&!m&&c.getSnapshotBeforeUpdate!=null&&(R=c.getSnapshotBeforeUpdate(y,N)),Rt=f!=null&&f.type===Q&&f.key==null?li(f.props.children):f,l=oi(e,Kt(Rt)?Rt:[Rt],t,r,n,i,a,d,l,s,u),c.base=t.__e,t.__u&=-161,c.__h.length&&d.push(c),w&&(c.__E=c.__=null)}catch(Ve){if(t.__v=null,s||a!=null)if(Ve.then){for(t.__u|=s?160:128;l&&l.nodeType==8&&l.nextSibling;)l=l.nextSibling;a[a.indexOf(l)]=null,t.__e=l}else{for(tt=a.length;tt--;)Yr(a[tt]);Kr(t)}else t.__e=r.__e,t.__k=r.__k,Ve.then||Kr(t);k.__e(Ve,t,r)}else a==null&&t.__v==r.__v?(t.__k=r.__k,t.__e=r.__e):l=t.__e=Oa(r.__e,t,r,n,i,a,d,s,u);return(f=k.diffed)&&f(t),128&t.__u?void 0:l}function Kr(e){e&&(e.__c&&(e.__c.__e=!0),e.__k&&e.__k.some(Kr))}function di(e,t,r){for(var n=0;n<r.length;n++)Jr(r[n],r[++n],r[++n]);k.__c&&k.__c(t,e),e.some(function(i){try{e=i.__h,i.__h=[],e.some(function(a){a.call(i)})}catch(a){k.__e(a,i.__v)}})}function li(e){return typeof e!=\"object\"||e==null||e.__b>0?e:Kt(e)?e.map(li):e.constructor!==void 0?null:be({},e)}function Oa(e,t,r,n,i,a,d,l,s){var u,f,c,m,y,N,R,w=r.props||$t,P=t.props,V=t.type;if(V==\"svg\"?i=\"http://www.w3.org/2000/svg\":V==\"math\"?i=\"http://www.w3.org/1998/Math/MathML\":i||(i=\"http://www.w3.org/1999/xhtml\"),a!=null){for(u=0;u<a.length;u++)if((y=a[u])&&\"setAttribute\"in y==!!V&&(V?y.localName==V:y.nodeType==3)){e=y,a[u]=null;break}}if(e==null){if(V==null)return document.createTextNode(P);e=document.createElementNS(i,V,P.is&&P),l&&(k.__m&&k.__m(t,a),l=!1),a=null}if(V==null)w===P||l&&e.data==P||(e.data=P);else{if(a=V==\"textarea\"&&P.defaultValue!=null?null:a&&Wt.call(e.childNodes),!l&&a!=null)for(w={},u=0;u<e.attributes.length;u++)w[(y=e.attributes[u]).name]=y.value;for(u in w)y=w[u],u==\"dangerouslySetInnerHTML\"?c=y:u==\"children\"||u in P||u==\"value\"&&\"defaultValue\"in P||u==\"checked\"&&\"defaultChecked\"in P||jt(e,u,null,y,i);for(u in P)y=P[u],u==\"children\"?m=y:u==\"dangerouslySetInnerHTML\"?f=y:u==\"value\"?N=y:u==\"checked\"?R=y:l&&typeof y!=\"function\"||w[u]===y||jt(e,u,y,w[u],i);if(f)l||c&&(f.__html==c.__html||f.__html==e.innerHTML)||(e.innerHTML=f.__html),t.__k=[];else if(c&&(e.innerHTML=\"\"),oi(t.type==\"template\"?e.content:e,Kt(m)?m:[m],t,r,n,V==\"foreignObject\"?\"http://www.w3.org/1999/xhtml\":i,a,d,a?a[0]:r.__k&&rt(r,0),l,s),a!=null)for(u=a.length;u--;)Yr(a[u]);l&&V!=\"textarea\"||(u=\"value\",V==\"progress\"&&N==null?e.removeAttribute(\"value\"):N!=null&&(N!==e[u]||V==\"progress\"&&!N||V==\"option\"&&N!=w[u])&&jt(e,u,N,w[u],i),u=\"checked\",R!=null&&R!=e[u]&&jt(e,u,R,w[u],i))}return e}function Jr(e,t,r){try{if(typeof e==\"function\"){var n=typeof e.__u==\"function\";n&&e.__u(),n&&t==null||(e.__u=e(t))}else e.current=t}catch(i){k.__e(i,r)}}function si(e,t,r){var n,i;if(k.unmount&&k.unmount(e),(n=e.ref)&&(n.current&&n.current!=e.__e||Jr(n,null,t)),(n=e.__c)!=null){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(a){k.__e(a,t)}n.base=n.__P=null}if(n=e.__k)for(i=0;i<n.length;i++)n[i]&&si(n[i],t,r||typeof e.type!=\"function\");r||Yr(e.__e),e.__c=e.__=e.__e=void 0}function Ma(e,t,r){return this.constructor(e,r)}function ui(e,t,r){var n,i,a,d;t==document&&(t=document.documentElement),k.__&&k.__(e,t),i=(n=typeof r==\"function\")?null:r&&r.__k||t.__k,a=[],d=[],Xr(t,e=(!n&&r||t).__k=qa(Q,null,[e]),i||$t,$t,t.namespaceURI,!n&&r?[r]:i?null:t.firstChild?Wt.call(t.childNodes):null,a,!n&&r?r:i?i.__e:t.firstChild,n,d),di(a,e,d)}function ci(e){function t(r){var n,i;return this.getChildContext||(n=new Set,(i={})[t.__c]=this,this.getChildContext=function(){return i},this.componentWillUnmount=function(){n=null},this.shouldComponentUpdate=function(a){this.props.value!=a.value&&n.forEach(function(d){d.__e=!0,Wr(d)})},this.sub=function(a){n.add(a);var d=a.componentWillUnmount;a.componentWillUnmount=function(){n&&n.delete(a),d&&d.call(a)}}),r.children}return t.__c=\"__cC\"+ni++,t.__=e,t.Provider=t.__l=(t.Consumer=function(r,n){return r.children(n)}).contextType=t,t}Wt=Ft.slice,k={__e:function(e,t,r,n){for(var i,a,d;t=t.__;)if((i=t.__c)&&!i.__)try{if((a=i.constructor)&&a.getDerivedStateFromError!=null&&(i.setState(a.getDerivedStateFromError(e)),d=i.__d),i.componentDidCatch!=null&&(i.componentDidCatch(e,n||{}),d=i.__d),d)return i.__E=i}catch(l){e=l}throw e}},Qn=0,Ra=function(e){return e!=null&&e.constructor===void 0},Ut.prototype.setState=function(e,t){var r;r=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=be({},this.state),typeof e==\"function\"&&(e=e(be({},r),this.props)),e&&be(r,e),e!=null&&this.__v&&(t&&this._sb.push(t),Wr(this))},Ut.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),Wr(this))},Ut.prototype.render=Q,Ne=[],ei=typeof Promise==\"function\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,ti=function(e,t){return e.__v.__b-t.__v.__b},zt.__r=0,$r=Math.random().toString(8),Bt=\"__d\"+$r,Ct=\"__a\"+$r,ri=/(PointerCapture)$|Capture$/i,Gr=0,Fr=Zn(!1),zr=Zn(!0),ni=0;function fi(e){if(e==null)return;let t=\"value\"in e&&typeof e.value==\"object\"?e.value:e;if(!(t==null||typeof t.color!=\"string\"))return{color:t.color,position:t.position??0}}var pi={center:\"auto\",contain:\"contain\",cover:\"cover\",stretch:\"100% 100%\"};function mi(e,t){let r=t.map(i=>`<stop offset='${i.position}' stop-color='${i.color}'/>`).join(\"\");return`<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${e.kind===\"radial\"?(()=>{let i=Math.hypot(e.endX-e.startX,e.endY-e.startY);return`<radialGradient id='g' cx='${e.startX}' cy='${e.startY}' r='${i}'>${r}</radialGradient>`})():`<linearGradient id='g' x1='${e.startX}' y1='${e.startY}' x2='${e.endX}' y2='${e.endY}'>${r}</linearGradient>`}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`}function nt(e){if(!e.backgroundEnabled)return{backgroundColor:\"transparent\"};let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return{backgroundColor:e.backgroundColor}}function Gt(e){let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor}}function g(e){return e===0?\"0\":`${e}px`}function We(e){return e===\"auto\"||e===void 0?\"auto\":g(e)}function it(e){let t={alignItems:e.alignItems,boxSizing:\"border-box\",display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:We(e.height),justifyContent:e.justifyContent,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),position:e.position??\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),Object.assign(t,nt(e)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),t.borderTopLeftRadius=g(e.borderTopLeftRadius??0),t.borderTopRightRadius=g(e.borderTopRightRadius??0),t.borderBottomRightRadius=g(e.borderBottomRightRadius??0),t.borderBottomLeftRadius=g(e.borderBottomLeftRadius??0),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Yt(e,{horizontal:t,showsScrollIndicator:r}){let n=it(e);return n.minHeight??(n.minHeight=0),n.minWidth??(n.minWidth=0),n.WebkitOverflowScrolling=\"touch\",t?(n.flexDirection=\"row\",n.overflowX=\"auto\",n.overflowY=\"hidden\"):(n.overflowX=\"hidden\",n.overflowY=\"auto\"),r||(n.scrollbarWidth=\"none\"),n}function Xt(e){return{fill:e.fillEnabled?e.fillColor:\"none\",fillRule:e.fillRule,fillOpacity:e.fillOpacity,stroke:e.strokeEnabled?e.strokeColor:\"none\",strokeWidth:e.strokeWidth,strokeOpacity:e.strokeOpacity,strokeLinecap:e.strokeLinecap,strokeLinejoin:e.strokeLinejoin,opacity:e.opacity}}function Jt(e){let t={boxSizing:\"border-box\",height:\"100vh\",overflow:\"hidden\",width:\"100vw\"};return Object.assign(t,nt(e)),t}function Zt(e){return{alignItems:e.alignItems,display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:\"100vh\",justifyContent:e.justifyContent,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),width:\"100vw\"}}function Qt(e){let t={boxSizing:\"border-box\",display:e.display===\"none\"?\"none\":\"block\",height:We(e.height),marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,position:\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function er(e){let t={color:e.color,display:e.display,fontSize:g(e.fontSize),fontWeight:e.fontWeight,letterSpacing:g(e.letterSpacing),lineHeight:e.lineHeight,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,position:e.position??\"relative\",textAlign:e.textAlign,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Zr(e){let t={stores:new Map,parents:new Map};return yi(e,null,t),t}function yi(e,t,r){r.parents.set(e.id,t),hi(e,r.stores);for(let n of e.children)yi(n,e.id,r)}function tr(e,t,r,n){let i=new Set,a=r;for(;a!==null&&!i.has(a);){if(i.add(a),t(a)?.has(n))return a;a=e.get(a)??null}}function Qr(e,t,r){return{get:n=>{let i=tr(e,t,r,n);if(i!==void 0)return t(i)?.get(n)}}}function hi(e,t){let r=e.data;if(r!==void 0&&\"localVariables\"in r&&r.localVariables.length>0){let n=new Map,i=new Map;for(let a of r.localVariables){let d=a.value;d?.id===void 0||d.value===void 0||(n.set(d.id,d.value),n.set(a.id,d.value),i.set(a.id,d.id),i.set(d.id,a.id))}n.size>0&&t.set(e.id,{store:n,aliases:i})}for(let n of e.children)hi(n,t)}function vi(e){if(e)return typeof e==\"object\"&&e!==null&&\"id\"in e&&\"value\"in e&&!(\"type\"in e)?e.value:e}function rr(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.some(r=>{let n=vi(r);return n?ja(n,t):!1})}function ja(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.every(r=>{let n=vi(r);return n?Ba(n,t):!1})}function gi(e,t){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}function bi(e){switch(e.key){case\"boolean\":return e.value??!1;case\"number\":return e.value??0;case\"string\":return e.value??\"\";case\"product\":return e.value?.productId??\"\";default:return\"\"}}function Ba(e,t){if(!e?.value?.left||!e?.value?.right)return!1;let r=gi(e.value.left,t),n=gi(e.value.right,t);if(r===void 0||n===void 0)return!1;let i=bi(r),a=bi(n);switch(e.type){case\"equals\":return i===a;case\"not-equals\":return i!==a;case\"greater-than\":return i>a;case\"greater-than-or-equal\":return i>=a;case\"less-than\":return i<a;case\"less-than-or-equal\":return i<=a;default:return!1}}function en(e,t,r){let n={...e};for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=a.overrides.style;if(d)for(let l of Object.keys(d))d[l]!==void 0&&(n[l]=d[l])}}return n}function tn(e,t,r){let n;for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=\"actions\"in a.overrides?a.overrides.actions:void 0;if(d)for(let l of d){let s=\"value\"in l?l.value:l;s&&s.interactionId===e&&(n=s.action)}}}return n}function Ha(e,t){if(e?.type){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}}function Ua(e,t){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(!e.variableId)return;let r=t.get(e.variableId);if(r?.key===\"product\")return r.value?.productId}function rn(e,t,r){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let n=e.payload;if(!n?.newValue||!n.variableId)break;let i=Ha(n.newValue,t);i!==void 0&&r.onSetVariable(n.variableId,i);break}case\"close-paywall\":r.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let n=Ua(e.payload,t);n!==void 0&&r.onPurchaseProduct(n);break}}}function $a(e,t){switch(t.key){case\"string\":return typeof e==\"string\"?{key:\"string\",value:e}:void 0;case\"number\":return typeof e==\"number\"?{key:\"number\",value:e}:void 0;case\"boolean\":return typeof e==\"boolean\"?{key:\"boolean\",value:e}:void 0;case\"product\":return typeof e==\"string\"||typeof e==\"number\"||typeof e==\"boolean\"?{key:\"product\",value:{productId:String(e)}}:void 0;default:return}}function Fa(e,t,r,n){if(!e?.type)return;if(e.type===\"literal\")return e.value;if(e.type===\"variable-reference\")return!e.value||!(\"id\"in e.value)||!e.value.id?void 0:r.get(e.value.id);if(!e.value||!(\"field\"in e.value)||!e.value.field)return;let i=t?.[e.value.field];if(i===void 0)return;let a=r.get(n);if(a!==void 0)return $a(i,a)}function za(e,t,r){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(e.type===\"variable-reference\"){if(!e.variableId)return;let i=r.get(e.variableId);return i?.key===\"product\"?i.value?.productId:void 0}if(!e.field)return;let n=t?.[e.field];return typeof n==\"string\"?n:void 0}function nn(e,t,r,n){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let i=e.payload;if(!i?.newValue||!i.variableId)break;let a=Fa(i.newValue,t,r,i.variableId);a!==void 0&&n.onSetVariable(i.variableId,a);break}case\"close-paywall\":n.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let i=za(e.payload,t,r);i!==void 0&&n.onPurchaseProduct(i);break}}}var on={alignItems:\"stretch\",boxSizing:\"border-box\",display:\"flex\",flexBasis:\"auto\",flexDirection:\"column\",flexShrink:0,margin:0,minHeight:0,minWidth:0,padding:0,position:\"relative\"},Wa={boxSizing:\"border-box\",display:\"block\",margin:0,padding:0,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"},Ka={boxSizing:\"border-box\",display:\"block\"},Ga={...on,cursor:\"pointer\",touchAction:\"manipulation\",userSelect:\"none\"},Ya={...on,overflowX:\"hidden\",overflowY:\"auto\",WebkitOverflowScrolling:\"touch\"},Xa={image:Ka,pressable:Ga,scroll:Ya,text:Wa,view:on},Ti=[\"flex\",\"gap\"],Ja=[\"backgroundType\",\"backgroundGradient\",\"backgroundImage\"],Za=new Set([...Ti,...Ja]),Qa=new Set([\"aspectRatio\",\"flex\",\"flexGrow\",\"flexShrink\",\"fontWeight\",\"opacity\",\"zIndex\"]);function Si(e,t){return typeof t==\"number\"&&!Qa.has(e)?t===0?0:`${t}px`:t}var ed={center:\"none\",contain:\"contain\",cover:\"cover\",stretch:\"fill\"};function nr(e){return ed[e??\"cover\"]}function an(e){if(!e)return{};let t=[];return(e.x!==void 0||e.y!==void 0)&&t.push(`translate3d(${e.x??0}px, ${e.y??0}px, 0)`),e.rotate!==void 0&&t.push(`rotate(${e.rotate}deg)`),e.scale!==void 0&&t.push(`scale(${e.scale})`),e.scaleX!==void 0&&t.push(`scaleX(${e.scaleX})`),e.scaleY!==void 0&&t.push(`scaleY(${e.scaleY})`),{...e.opacity===void 0?{}:{opacity:e.opacity},...e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor},...t.length===0?{}:{transform:t.join(\" \")},...e.transformOrigin===void 0?{}:{transformOrigin:`${e.transformOrigin.x*100}% ${e.transformOrigin.y*100}%`}}}function ir(e,t,r){let n={...Xa[t]},i=(d,l)=>{delete n[d],n[d]=Si(d,l)};for(let d of Ti){let l=e[d];l!==void 0&&(n[d]=Si(d,l))}for(let[d,l]of Object.entries(e))l===void 0||Za.has(d)||typeof l!=\"string\"&&typeof l!=\"number\"||i(d,l);return(e.borderTopWidth!==void 0||e.borderRightWidth!==void 0||e.borderBottomWidth!==void 0||e.borderLeftWidth!==void 0||e.borderColor!==void 0)&&e.borderStyle===void 0&&(n.borderStyle=\"solid\"),(e.backgroundType===\"gradient\"||e.backgroundType===\"image\")&&(delete n.backgroundColor,Object.assign(n,Gt({backgroundColor:typeof e.backgroundColor==\"string\"?e.backgroundColor:void 0,backgroundType:e.backgroundType,backgroundGradient:e.backgroundGradient,backgroundImage:e.backgroundImage}))),Object.assign(n,an(r)),n}var qt,A,dn,xi,ar=0,Ai=[],C=k,wi=C.__b,Pi=C.__r,Vi=C.diffed,Ni=C.__c,_i=C.unmount,ki=C.__;function sn(e,t){C.__h&&C.__h(A,e,ar||t),ar=0;var r=A.__H||(A.__H={__:[],__h:[]});return e>=r.__.length&&r.__.push({}),r.__[e]}function Ri(e){return ar=1,td(qi,e)}function td(e,t,r){var n=sn(qt++,2);if(n.t=e,!n.__c&&(n.__=[r?r(t):qi(void 0,t),function(l){var s=n.__N?n.__N[0]:n.__[0],u=n.t(s,l);s!==u&&(n.__N=[u,n.__[1]],n.__c.setState({}))}],n.__c=A,!A.__f)){var i=function(l,s,u){if(!n.__c.__H)return!0;var f=n.__c.__H.__.filter(function(m){return m.__c});if(f.every(function(m){return!m.__N}))return!a||a.call(this,l,s,u);var c=n.__c.props!==l;return f.some(function(m){if(m.__N){var y=m.__[0];m.__=m.__N,m.__N=void 0,y!==m.__[0]&&(c=!0)}}),a&&a.call(this,l,s,u)||c};A.__f=!0;var a=A.shouldComponentUpdate,d=A.componentWillUpdate;A.componentWillUpdate=function(l,s,u){if(this.__e){var f=a;a=void 0,i(l,s,u),a=f}d&&d.call(this,l,s,u)},A.shouldComponentUpdate=i}return n.__N||n.__}function j(e,t){var r=sn(qt++,7);return id(r.__H,t)&&(r.__=e(),r.__H=t,r.__h=e),r.__}function ee(e,t){return ar=8,j(function(){return e},t)}function Ci(e){var t=A.context[e.__c],r=sn(qt++,9);return r.c=e,t?(r.__==null&&(r.__=!0,t.sub(A)),t.props.value):e.__}function rd(){for(var e;e=Ai.shift();){var t=e.__H;if(e.__P&&t)try{t.__h.some(or),t.__h.some(ln),t.__h=[]}catch(r){t.__h=[],C.__e(r,e.__v)}}}C.__b=function(e){A=null,wi&&wi(e)},C.__=function(e,t){e&&t.__k&&t.__k.__m&&(e.__m=t.__k.__m),ki&&ki(e,t)},C.__r=function(e){Pi&&Pi(e),qt=0;var t=(A=e.__c).__H;t&&(dn===A?(t.__h=[],A.__h=[],t.__.some(function(r){r.__N&&(r.__=r.__N),r.u=r.__N=void 0})):(t.__h.some(or),t.__h.some(ln),t.__h=[],qt=0)),dn=A},C.diffed=function(e){Vi&&Vi(e);var t=e.__c;t&&t.__H&&(t.__H.__h.length&&(Ai.push(t)!==1&&xi===C.requestAnimationFrame||((xi=C.requestAnimationFrame)||nd)(rd)),t.__H.__.some(function(r){r.u&&(r.__H=r.u),r.u=void 0})),dn=A=null},C.__c=function(e,t){t.some(function(r){try{r.__h.some(or),r.__h=r.__h.filter(function(n){return!n.__||ln(n)})}catch(n){t.some(function(i){i.__h&&(i.__h=[])}),t=[],C.__e(n,r.__v)}}),Ni&&Ni(e,t)},C.unmount=function(e){_i&&_i(e);var t,r=e.__c;r&&r.__H&&(r.__H.__.some(function(n){try{or(n)}catch(i){t=i}}),r.__H=void 0,t&&C.__e(t,r.__v))};var Ii=typeof requestAnimationFrame==\"function\";function nd(e){var t,r=function(){clearTimeout(n),Ii&&cancelAnimationFrame(t),setTimeout(e)},n=setTimeout(r,35);Ii&&(t=requestAnimationFrame(r))}function or(e){var t=A,r=e.__c;typeof r==\"function\"&&(e.__c=void 0,r()),A=t}function ln(e){var t=A;e.__c=e.__(),A=t}function id(e,t){return!e||e.length!==t.length||t.some(function(r,n){return r!==e[n]})}function qi(e,t){return typeof t==\"function\"?t(e):t}var od=0;function b(e,t,r,n,i,a){t||(t={});var d,l,s=t;if(\"ref\"in s)for(l in s={},t)l==\"ref\"?d=t[l]:s[l]=t[l];var u={type:e,props:s,key:r,ref:d,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:--od,__i:-1,__u:0,__source:i,__self:a};if(typeof e==\"function\"&&(d=e.defaultProps))for(l in d)s[l]===void 0&&(s[l]=d[l]);return k.vnode&&k.vnode(u),u}var ad=new Map,Di=ci(null);function Ei(e){let t=JSON.stringify(e);window.ReactNativeWebView?window.ReactNativeWebView.postMessage(t):window.parent.postMessage(e,\"*\")}function Li({snapshot:e,componentArtifacts:t,locale:r,children:n}){let i=j(()=>Zr(e),[e]),a=(e.type===\"root\"?e.data.localization?.defaultLocale:void 0)??\"en\",[d,l]=Ri(()=>{let w=new Map;for(let[P,{store:V}]of i.stores)w.set(P,V);return w}),s=j(()=>new Map,[i,d]),u=ee(w=>{let P=s.get(w);if(P)return P;let V=Qr(i.parents,L=>d.get(L),w);return s.set(w,V),V},[s,d,i]),f=ee((w,P,V)=>{l(L=>{let z=tr(i.parents,Ve=>L.get(Ve),w,P);if(z===void 0)return L;let Pe=L.get(z);if(!Pe)return L;let et=new Map(Pe);et.set(P,V);let tt=i.stores.get(z)?.aliases?.get(P);tt&&et.set(tt,V);let M=new Map(L);return M.set(z,et),M})},[i]),c=ee(()=>{Ei({type:\"paywall:close\"})},[]),m=ee(w=>{Ei({type:\"paywall:purchase\",productId:w})},[]),y=ee((w,P)=>{console.warn(`onSetVariable called directly for \"${w}\" without node context. Use the scoped callback from useInteractions instead.`)},[]),N=j(()=>({onClosePaywall:c,onPurchaseProduct:m,onSetVariable:y}),[c,m,y]),R=j(()=>({getNodeVariables:u,setNodeVariable:f,callbacks:N,componentArtifacts:t,locale:r,defaultLocale:a}),[u,f,N,t,r,a]);return b(Di.Provider,{value:R,children:n})}function te(){let e=Ci(Di);return e||{getNodeVariables:()=>ad,setNodeVariable:()=>{},callbacks:{onClosePaywall:()=>{},onPurchaseProduct:()=>{},onSetVariable:()=>{}},componentArtifacts:void 0,locale:void 0,defaultLocale:\"en\"}}var dd={alignSelf:\"flex-start\",backgroundColor:\"#18181b\",borderRadius:\"999px\",boxSizing:\"border-box\",color:\"#fafafa\",display:\"inline-flex\",fontFamily:\"inherit\",fontSize:\"11px\",fontWeight:600,lineHeight:\"16px\",padding:\"2px 8px\"};function Oi({props:e}){let t=typeof e.label==\"string\"?e.label:\"New\";return b(\"span\",{style:dd,children:t})}var Mi={\"sample-badge\":Oi};function ji(e,t){let r={};for(let n of e){let i=n.value;if(!i?.name)continue;let a=i.value;if(a?.type){if(a.type===\"literal\"){a.value&&(r[i.name]=a.value.value);continue}if(a.type===\"variable-reference\"){if(!a.value||!(\"id\"in a.value)||!a.value.id)continue;let d=t.get(a.value.id);d!==void 0&&(r[i.name]=d.value)}}}return r}var un={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontFamily:\"inherit\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",position:\"relative\",textAlign:\"center\"};function dr(e,t,r){return{...ir(e,t,r)}}function ld(e,t){if(!e)return;for(let n of[t,\"default\"]){let i=e[n];if(i)return i}let r=Object.keys(e)[0];return r===void 0?void 0:e[r]}function cn({node:e,slot:t,fireAction:r}){switch(e.type){case\"view\":case\"scroll\":return b(\"div\",{style:dr(e.style,e.type,e.motion),children:e.children.map((n,i)=>b(cn,{fireAction:r,node:n,slot:t},i))});case\"pressable\":{let n=e.action;return b(\"div\",{onClick:n===void 0?void 0:()=>r(n),style:dr(e.style,\"pressable\",e.motion),children:e.children.map((a,d)=>b(cn,{fireAction:r,node:a,slot:t},d))})}case\"text\":return b(\"div\",{style:dr(e.style,\"text\",e.motion),children:e.text});case\"image\":return b(\"img\",{alt:\"\",src:e.src,style:{...dr(e.style,\"image\",e.motion),objectFit:nr(e.resizeMode)??\"cover\"}});case\"slot\":return b(Q,{children:t});case\"placeholder\":return b(\"div\",{style:un,children:e.reason});default:return null}}function Bi({node:e,children:t}){let{getNodeVariables:r,setNodeVariable:n,callbacks:i,componentArtifacts:a}=te(),d=r(e.id),l=j(()=>({...i,onSetVariable:(m,y)=>{n(e.id,m,y)}}),[i,e.id,n]),s=ee((m,y)=>{let R=e.data.actionBindings.find(w=>w.value?.name===m)?.value?.action;R&&nn(R,y,d,l)},[e.data.actionBindings,d,l]);if(e.data.componentSource===\"builtin\"){let m=Mi[e.data.componentSlug];if(!m)return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${e.data.componentSlug}\" preview unavailable`});let y=ji(e.data.props,d);return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(m,{fireAction:s,props:y,children:t})})}let u=e.data.componentSource===\"local\"&&e.data.componentPath!==\"\",f=u?a?.localTrees?.[e.data.componentPath]:a?.trees[e.data.contentHash],c=ld(f,e.data.previewState);if(!c){let m=u?e.data.componentPath:e.data.componentSlug;return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${m}\" preview unavailable`})}return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(cn,{fireAction:s,node:c.root,slot:t})})}function W(e,t,r){let{getNodeVariables:n}=te(),i=n(e);return j(()=>en(t,r,i),[t,r,i])}function Hi({node:e}){let t=W(e.id,e.data.style,e.data.states),r=Xt(t);return b(\"path\",{d:e.data.d,fill:r.fill,fillOpacity:r.fillOpacity,fillRule:r.fillRule,opacity:r.opacity,stroke:r.stroke,strokeLinecap:r.strokeLinecap,strokeLinejoin:r.strokeLinejoin,strokeOpacity:r.strokeOpacity,strokeWidth:r.strokeWidth,transform:e.data.transform,vectorEffect:\"non-scaling-stroke\"})}var v={InvalidCommand:\"invalid_command\",InvalidPath:\"invalid_path\",TypeMismatch:\"type_mismatch\",MissingField:\"missing_field\",MissingArrayItem:\"missing_array_item\",MissingTreeNode:\"missing_tree_node\",DuplicateArrayItemId:\"duplicate_array_item_id\",DuplicateArrayPos:\"duplicate_array_pos\",DuplicateTreeNodeId:\"duplicate_tree_node_id\",DuplicateTreePos:\"duplicate_tree_pos\",InvalidTreeParent:\"invalid_tree_parent\",TreeCycle:\"tree_cycle\",TreeNodeValueMustBeObject:\"tree_node_value_must_be_object\",ReservedIdentifier:\"reserved_identifier\"},fn=class extends Error{constructor(r,n=\"\"){super(n?`${r}: ${n}`:r);p(this,\"code\");this.name=\"CoreError\",this.code=r}},S=(e,t)=>new fn(e,t);var I=\"$root\";var re=e=>({kind:\"string\",value:e}),ot=e=>({kind:\"number\",value:e}),at=e=>({kind:\"boolean\",value:e}),ne=(e={})=>({kind:\"object\",fields:e}),pn=(e=[])=>({kind:\"array\",items:e}),mn=(e=[])=>({kind:\"tree\",nodes:e}),Ui=e=>e?[...e]:[],_=e=>{switch(e.kind){case\"string\":case\"number\":case\"boolean\":return{...e};case\"object\":{let t={};for(let[r,n]of Object.entries(e.fields))t[r]=_(n);return{kind:\"object\",fields:t}}case\"array\":return{kind:\"array\",items:e.items.map(t=>({id:t.id,pos:t.pos,value:_(t.value)}))};case\"tree\":return{kind:\"tree\",nodes:e.nodes.map(t=>({id:t.id,parent:t.parent,pos:t.pos,value:_(t.value)}))}}};var lr=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,$i=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,yn=(e,t)=>e.parent<t.parent?-1:e.parent>t.parent?1:$i(e,t);var B=e=>{switch(e.kind){case\"string\":case\"boolean\":return;case\"number\":if(Number.isNaN(e.value)||!Number.isFinite(e.value))throw S(v.InvalidCommand,\"number must be finite\");return;case\"object\":for(let t of Object.values(e.fields))B(t);return;case\"array\":{let t=new Set,r=new Set;for(let n of e.items){if(t.has(n.id))throw S(v.DuplicateArrayItemId,\"duplicate array item id\");if(r.has(n.pos))throw S(v.DuplicateArrayPos,\"duplicate array position\");t.add(n.id),r.add(n.pos),B(n.value)}return}case\"tree\":{let t=new Set,r=new Map,n=new Map;for(let s of e.nodes){if(s.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(s.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(t.has(s.id))throw S(v.DuplicateTreeNodeId,\"duplicate tree node id\");t.add(s.id),r.set(s.id,s);let u=n.get(s.parent)??new Set;if(u.has(s.pos))throw S(v.DuplicateTreePos,\"duplicate tree position\");u.add(s.pos),n.set(s.parent,u),B(s.value)}for(let s of e.nodes)if(s.parent!==I&&!r.has(s.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");let i=new Set,a=new Set,d=s=>{if(i.has(s))throw S(v.TreeCycle,\"tree contains cycle\");if(a.has(s))return;i.add(s);let u=r.get(s);u&&u.parent!==I&&d(u.parent),i.delete(s),a.add(s)},l=[...r.keys()].sort();for(let s of l)d(s);return}}};var hn=(e,t)=>{B(e);let r=_(e);for(let n of t)sd(r,{...n,path:Ui(n.path)});return B(r),r},sd=(e,t)=>{switch(t.kind){case\"value.set\":ud(e,t.path,t.value);return;case\"object.set\":cd(e,t.path,t.key,t.value);return;case\"object.delete\":fd(e,t.path,t.key);return;case\"array.insert\":pd(e,t.path,t.item);return;case\"array.move\":md(e,t.path,t.id,t.pos);return;case\"array.delete\":yd(e,t.path,t.id);return;case\"tree.insert\":hd(e,t.path,t.node);return;case\"tree.move\":gd(e,t.path,t.id,t.parent,t.pos);return;case\"tree.delete\":bd(e,t.path,t.id);return}},ud=(e,t,r)=>{if(t.length===0){Fi(e,_(r));return}K(e,t,n=>{Fi(n,_(r))})},cd=(e,t,r,n)=>{if(!r)throw S(v.InvalidCommand,\"object.set requires key and value\");K(e,t,i=>{if(i.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");i.fields[r]=_(n)})},fd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"object.delete requires key\");K(e,t,n=>{if(n.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");if(!Object.hasOwn(n.fields,r))throw S(v.MissingField,\"object field does not exist\");delete n.fields[r]})},pd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");for(let i of n.items){if(i.id===r.id)throw S(v.DuplicateArrayItemId,\"array item id already exists\");if(i.pos===r.pos)throw S(v.DuplicateArrayPos,\"array item position already exists\")}n.items.push({id:r.id,pos:r.pos,value:_(r.value)}),n.items.sort(lr)})},md=(e,t,r,n)=>{if(!r||!n)throw S(v.InvalidCommand,\"array.move requires id and pos\");K(e,t,i=>{if(i.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let a=-1;for(let d=0;d<i.items.length;d+=1){let l=i.items[d];if(l?.id===r){a=d;continue}if(l?.pos===n)throw S(v.DuplicateArrayPos,\"array item position already exists\")}if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");i.items[a]={...i.items[a],pos:n},i.items.sort(lr)})},yd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"array.delete requires id\");K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let i=zi(n.items,r);if(i===-1)throw S(v.MissingArrayItem,\"array item does not exist\");n.items.splice(i,1)})},hd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(r.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(r.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(Et(n.nodes,r.id)!==-1)throw S(v.DuplicateTreeNodeId,\"tree node id already exists\");if(!Wi(n.nodes,r.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(Ki(n.nodes,r.parent,r.pos,\"\"))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");n.nodes.push({id:r.id,parent:r.parent,pos:r.pos,value:_(r.value)}),n.nodes.sort(yn)})},gd=(e,t,r,n,i)=>{if(!r||!n||!i)throw S(v.InvalidCommand,\"tree.move requires id, parent, and pos\");K(e,t,a=>{if(a.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");let d=Et(a.nodes,r);if(d===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");if(!Wi(a.nodes,n))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(n===r||vd(a.nodes,n,r))throw S(v.TreeCycle,\"tree move would create cycle\");if(Ki(a.nodes,n,i,r))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");a.nodes[d]={...a.nodes[d],parent:n,pos:i},a.nodes.sort(yn)})},bd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"tree.delete requires id\");K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(Et(n.nodes,r)===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");let i=new Set([r]),a=!0;for(;a;){a=!1;for(let l of n.nodes)i.has(l.parent)&&!i.has(l.id)&&(i.add(l.id),a=!0)}let d=n.nodes.filter(l=>!i.has(l.id));n.nodes.splice(0,n.nodes.length,...d)})},K=(e,t,r)=>{if(t.length===0){r(e);return}let n=t[0],i=t.slice(1);switch(n.kind){case\"field\":if(e.kind!==\"object\")throw S(v.TypeMismatch,\"field path requires object\");if(!Object.hasOwn(e.fields,n.key))throw S(v.MissingField,\"field does not exist\");K(e.fields[n.key],i,r);return;case\"item\":if(e.kind!==\"array\")throw S(v.TypeMismatch,\"item path requires array\");{let a=zi(e.items,n.id);if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");K(e.items[a].value,i,r)}return;case\"node\":if(e.kind!==\"tree\")throw S(v.TypeMismatch,\"node path requires tree\");{let a=Et(e.nodes,n.id);if(a===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");K(e.nodes[a].value,i,r)}return}},Fi=(e,t)=>{for(let r of Object.keys(e))delete e[r];Object.assign(e,t)},zi=(e,t)=>e.findIndex(r=>r.id===t),Et=(e,t)=>e.findIndex(r=>r.id===t),Wi=(e,t)=>t===I||Et(e,t)!==-1,Ki=(e,t,r,n)=>e.some(i=>i.parent===t&&i.id!==n&&i.pos===r),vd=(e,t,r)=>{if(t===I)return!1;let n=new Map(e.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}};var gn=class{next(){let t=globalThis.crypto;if(t?.getRandomValues){let r=new Uint32Array(2);t.getRandomValues(r);let n=r[0]>>>5,i=r[1]>>>6;return(n*67108864+i)/9007199254740992}return Math.random()}},bn=class{constructor(t){p(this,\"charset\");p(this,\"random\");p(this,\"useJitter\");this.charset=t?.charset??Xi(),this.random=t?.random,this.useJitter=t?.useJitter??!0}between(t,r){return this.useJitter?wd(t,r,this.charset,this.random??new gn):Ji(t,r,this.charset)}},Sd=e=>{if(e.chars.length<7)throw new Error(\"charSet must be at least 7 characters long\");if([...e.chars].sort().join(\"\")!==e.chars)throw new Error(\"charSet must be sorted\");let r={},n={};for(let s=0;s<e.chars.length;s+=1){let u=e.chars[s];r[u]=s,n[s]=u}let i=r[e.firstPositive],a=r[e.mostPositive],d=r[e.mostNegative];if(i===void 0)throw new Error(\"invalid firstPositive\");if(a===void 0)throw new Error(\"invalid mostPositive\");if(d===void 0)throw new Error(\"invalid mostNegative\");if(a-i<3)throw new Error(\"mostPositive must be at least 3 characters away from neutral\");if(i-d<3)throw new Error(\"mostNegative must be at least 3 characters away from neutral\");let l=e.jitterRange??Math.floor(wn(e.chars.length,3)/5);return{chars:e.chars,byChar:r,byCode:n,length:e.chars.length,first:n[0],last:n[e.chars.length-1],firstPositive:e.firstPositive,mostPositive:e.mostPositive,firstNegative:n[i-1],mostNegative:e.mostNegative,jitterRange:l,paddingDict:Rd(l,e.chars.length)}},Td=Sd({chars:\"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\",firstPositive:\"a\",mostPositive:\"z\",mostNegative:\"A\"}),Xi=()=>Td;var ke=()=>new bn({charset:Xi()});var xd=e=>`${e.firstPositive}${e.byCode[0]}`,Gi=(e,t)=>{sr(e,t)},Ji=(e,t,r)=>{if(e!==void 0&&Gi(e,r),t!==void 0&&Gi(t,r),e===void 0&&t===void 0)return xd(r);if(e===void 0)return Pd(sr(t,r),r);if(t===void 0)return Zi(sr(e,r),r);if(e>=t)throw new Error(`${e} >= ${t}`);return Vd(e,t,r)};var wd=(e,t,r,n)=>{let i=Ji(e,t,r),a=_d(i,t,r);return a>0?Nd(i,a,r,n):Qi(i,r,n)};var sr=(e,t)=>{let r=eo(e,t),n=Tn(r,t);if(n>e.length)throw new Error(`invalid order key length: ${e}`);return e.slice(0,n)},Zi=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[t.length-1];return[...n].some(a=>a!==i)?`${r}${ao(n,t)}`:no(kd(r,t),\"lower\",t)},Pd=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[0];return[...n].some(a=>a!==i)?`${r}${vn(n,t,!1)}`:no(Id(r,t),\"upper\",t)},Vd=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),a=Sn(n,i,r);a===1&&(n=`${n}${r.first}`,a=r.length);let d=io(Math.floor(a/2),r);return xn(n,d,r)},Qi=(e,t,r)=>{let n=r.next();if(n<0||n>=1)throw new Error(`random value out of range: ${n}`);return xn(e,io(Math.floor(n*t.jitterRange),t),t)},Nd=(e,t,r,n)=>Qi(`${e}${r.first.repeat(t)}`,r,n),Yi=(e,t)=>{let r=t.jitterRange-e;for(let[n,i]of Object.entries(t.paddingDict))if(i>r)return Number(n);return 0},_d=(e,t,r)=>{let n=sr(e,r),i=Zi(n,r),a=0;if(t!==void 0){let l=Sn(e,t,r);l<r.jitterRange+1&&(a=Math.max(a,Yi(l,r)))}let d=Sn(e,i,r);return d<r.jitterRange+1&&(a=Math.max(a,Yi(d,r))),a},eo=(e,t)=>{if(e.length===0)return\"\";let r=0;if(e[0]===t.mostPositive)for(;r<e.length&&e[r]===t.mostPositive;)r+=1;if(e[0]===t.mostNegative)for(;r<e.length&&e[r]===t.mostNegative;)r+=1;return r>=e.length?e:e.slice(0,r+1)},ur=(e,t,r)=>{if(e.length===0)return 0;let n=e[0];if(n>r.mostPositive||n<r.mostNegative)throw new Error(\"invalid firstChar on key\");return n===r.mostPositive&&t===\"positive\"?_e(n,r.mostNegative,r)+1+ur(e.slice(1),t,r):n===r.mostNegative&&t===\"negative\"?_e(n,r.mostPositive,r)+1+ur(e.slice(1),t,r):t===\"positive\"?_e(n,r.mostNegative,r)+2:_e(n,r.mostPositive,r)+2},Tn=(e,t)=>{if(e.length===0)throw new Error(\"head cannot be empty\");let r=e[0];if(r>t.mostPositive||r<t.mostNegative)throw new Error(\"invalid firstChar on key\");return r===t.mostPositive?_e(r,t.firstPositive,t)+1+ur(e.slice(1),\"positive\",t):r===t.mostNegative?_e(r,t.firstNegative,t)+1+ur(e.slice(1),\"negative\",t):r>=t.firstPositive?_e(r,t.firstPositive,t)+2:_e(r,t.firstNegative,t)+2},to=(e,t)=>{if(Tn(e,t)!==e.length)throw new Error(`invalid integer length: ${e}`)},ro=(e,t)=>{let r=eo(e,t);return[r,e.slice(r.length)]},kd=(e,t)=>{let r=e>=t.firstPositive,n=ao(e,t),i=e.at(-1)===t.mostPositive,a=n.at(-1)===t.mostPositive;return r&&a?`${n}${t.mostNegative}`:!r&&i?e.slice(0,-1):n},Id=(e,t)=>{let r=e>=t.firstPositive,n=e.at(-1)===t.mostNegative;return r&&n?vn(e.slice(0,-1),t,!1):!r&&n?`${e}${t.mostPositive}`:vn(e,t,!1)},no=(e,t,r)=>{let n=Tn(e,r),i=t===\"upper\"?r.last:r.first;return`${e}${i.repeat(n-e.length)}`},_e=(e,t,r)=>{let n=r.byChar[e],i=r.byChar[t];if(n===void 0||i===void 0)throw new Error(\"invalid character in distance calculation\");return Math.abs(n-i)},cr=(e,t,r,n)=>{let i=Math.max(e.length,t.length);return r===\"start\"?[n.repeat(i-e.length)+e,n.repeat(i-t.length)+t]:[e+n.repeat(i-e.length),t+n.repeat(i-t.length)]},io=(e,t)=>{if(e===0)return t.byCode[0];let r=\"\",n=e;for(;n>0;)r=`${t.byCode[n%t.length]}${r}`,n=Math.floor(n/t.length);return r},Ad=(e,t)=>{let r=0;for(let n=0;n<e.length;n+=1){let i=e.length-n-1;r+=t.byChar[e[n]]*wn(t.length,i)}return r},xn=(e,t,r)=>{let[n,i]=cr(e,t,\"start\",r.first),a=[],d=0;for(let l=n.length-1;l>=0;l-=1){let s=r.byChar[n[l]]+r.byChar[i[l]]+d;d=Math.floor(s/r.length),a.push(r.byCode[s%r.length])}return d>0&&a.push(r.byCode[d]),a.reverse().join(\"\")},oo=(e,t,r,n)=>{let[i,a]=cr(e,t,\"start\",r.first),d=[],l=0;for(let u=i.length-1;u>=0;u-=1){let f=r.byChar[i[u]],c=r.byChar[a[u]]+l;f<c?(l=1,f+=r.length):l=0,d.push(r.byCode[f-c])}if(l>0)throw new Error(\"subtraction result is negative\");let s=d.reverse().join(\"\");return n?s.replace(new RegExp(`^${r.first}+`),\"\")||r.first:s},ao=(e,t)=>xn(e,t.byCode[1],t),vn=(e,t,r)=>oo(e,t.byCode[1],t,r),Sn=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),[a,d]=n>i?[i,n]:[n,i];return Ad(oo(d,a,r,!0),r)};function Rd(e,t){let r={};for(let n=0;n<100;n+=1){let i=wn(t,n);if(r[n]=i,i>e)break}return r}function wn(e,t){let r=1;for(let n=0;n<t;n+=1)r*=e;return r}var T={InvalidSchema:\"invalid_schema\",MissingRequired:\"missing_required\",TypeMismatch:\"type_mismatch\",LiteralMismatch:\"literal_mismatch\",ValidatorFailed:\"validator_failed\",UnionNoMatch:\"union_no_match\",EitherNoMatch:\"either_no_match\",TreeInvalidRootType:\"tree_invalid_root_type\",TreeInvalidChildType:\"tree_invalid_child_type\",TreeUnknownVariant:\"tree_unknown_variant\"},fr=class extends Error{constructor(r,n=\"\",i){super(n?`${r}: ${n}`:r);p(this,\"code\");p(this,\"valuePath\");p(this,\"schemaPath\");this.name=\"SchemaError\",this.code=r,this.valuePath=i?.valuePath??[],this.schemaPath=i?.schemaPath??[]}},x=(e,t,r)=>new fr(e,t,r),Pn=e=>e instanceof fr;var H=(e,t)=>x(T.InvalidSchema,t,{valuePath:[],schemaPath:e}),Z=(e,t,r)=>{if(typeof e!=\"object\"||e===null||Array.isArray(e))throw H(t,r);return e},ve=(e,t,r)=>{if(typeof e!=\"string\")throw H(t,r);return e},Vn=(e,t)=>{if(typeof e!=\"number\"||Number.isNaN(e)||!Number.isFinite(e))throw H(t,\"validator value must be a finite number\");return e};var qd=(e,t)=>{if(e!==void 0){if(typeof e!=\"string\")throw H(t,\"value must be a string\");return e}},lo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"string validators must be an array\");return e.map((r,n)=>Ed(r,[...t,n]))}},so=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"number validators must be an array\");return e.map((r,n)=>Dd(r,[...t,n]))}},uo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"array validators must be an array\");return e.map((r,n)=>Ld(r,[...t,n]))}},Ed=(e,t)=>{let r=Z(e,t,\"string validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":case\"length\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"regex\":return{kind:n,pattern:ve(r.pattern,[...t,\"pattern\"],\"regex pattern must be a string\"),flags:qd(r.flags,[...t,\"flags\"])};case\"email\":case\"url\":return{kind:n};default:throw H(t,`unknown string validator ${n}`)}},Dd=(e,t)=>{let r=Z(e,t,\"number validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"min\":case\"max\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"positive\":case\"negative\":case\"int\":return{kind:n};default:throw H(t,`unknown number validator ${n}`)}},Ld=(e,t)=>{let r=Z(e,t,\"array validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};default:throw H(t,`unknown array validator ${n}`)}};var Dt=(e,t,r,n,i)=>{if(r.kind!==t)throw x(T.TypeMismatch,`expected ${e}, got ${r.kind}`,{valuePath:n,schemaPath:i})},pr=(e,t,r,n)=>(Dt(e,\"string\",t,r,n),t),mr=(e,t,r,n)=>(Dt(e,\"number\",t,r,n),t),yr=(e,t,r,n)=>(Dt(e,\"boolean\",t,r,n),t),hr=(e,t,r,n)=>(Dt(e,\"object\",t,r,n),t),co=(e,t,r,n)=>(Dt(e,\"array\",t,r,n),t);var O=(e,t,r)=>x(T.ValidatorFailed,e,{valuePath:t,schemaPath:r}),q=e=>e===void 0?e:_(e),E=e=>e?{required:!0}:{};var fo={kind:\"array\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,element:r.parseSchema(e.element,[...n,\"element\"]),validators:uo(e.validators,[...n,\"validators\"])},e.default,n),serialize:(e,t)=>({kind:\"array\",element:t(e.element),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(r=>({...r}))}:{}}),validate:(e,t,r,n,i)=>{let d=co(e.kind,t,n,i).items.map(l=>{let s=r.validate(e.element,l.value,[...n,{kind:\"item\",id:l.id}],[...i,\"element\"]);if(s===void 0)throw x(T.TypeMismatch,\"array item cannot sanitize to undefined\",{valuePath:[...n,{kind:\"item\",id:l.id}],schemaPath:i});return{id:l.id,pos:l.pos,value:s}});for(let l of e.validators??[])switch(l.kind){case\"minLength\":if(d.length<l.value)throw O(\"array shorter than minLength\",n,i);break;case\"maxLength\":if(d.length>l.value)throw O(\"array longer than maxLength\",n,i);break}return{kind:\"array\",items:d}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var po={kind:\"boolean\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required},e.default,n),serialize:e=>({kind:\"boolean\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>_(yr(\"boolean\",t,n,i)),materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var mo={kind:\"either\",parse:(e,t,r,n)=>{if(!Array.isArray(e.variants))throw x(T.InvalidSchema,\"either variants must be an array\",{schemaPath:[...n,\"variants\"]});return r.normalizeDefault({kind:t.kind,required:t.required,variants:e.variants.map((i,a)=>r.parseSchema(i,[...n,\"variants\",a]))},e.default,n)},serialize:(e,t)=>({kind:\"either\",variants:e.variants.map(r=>t(r)),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=[];for(let d=0;d<e.variants.length;d+=1)try{let l=r.validate(e.variants[d],t,n,[...i,\"variants\",d]);if(l!==void 0)return l}catch(l){l instanceof Error&&a.push(l)}throw x(T.EitherNoMatch,a[0]?.message??\"no either variant matched\",{valuePath:n,schemaPath:i})},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var yo={kind:\"literal\",parse:(e,t,r,n)=>{let i=e.value;if(typeof i!=\"string\"&&typeof i!=\"number\"&&typeof i!=\"boolean\")throw H([...n,\"value\"],\"literal value must be string, number, or boolean\");return r.normalizeDefault({kind:t.kind,required:t.required,value:i},e.default,n)},serialize:e=>({kind:\"literal\",value:e.value,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=typeof e.value==\"string\"?\"string\":typeof e.value==\"number\"?\"number\":\"boolean\",d=a===\"string\"?pr(e.kind,t,n,i):a===\"number\"?mr(e.kind,t,n,i):yr(e.kind,t,n,i);if(d.value!==e.value)throw x(T.LiteralMismatch,\"literal value does not match schema\",{valuePath:n,schemaPath:i});return _(d)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var ho={kind:\"number\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:so(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"number\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=mr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"min\":if(a.value<d.value)throw O(\"number smaller than min\",n,i);break;case\"max\":if(a.value>d.value)throw O(\"number larger than max\",n,i);break;case\"positive\":if(a.value<=0)throw O(\"number is not positive\",n,i);break;case\"negative\":if(a.value>=0)throw O(\"number is not negative\",n,i);break;case\"int\":if(!Number.isInteger(a.value))throw O(\"number is not an integer\",n,i);break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var go={kind:\"object\",parse:(e,t,r,n)=>{let i=Z(e.fields,[...n,\"fields\"],\"object schema fields must be an object\"),a={};for(let[d,l]of Object.entries(i))a[d]=r.parseSchema(l,[...n,\"fields\",d]);return r.normalizeDefault({kind:t.kind,required:t.required,fields:a},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.fields))r[n]=t(i);return{kind:\"object\",fields:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d={};for(let[l,s]of Object.entries(e.fields)){let u=r.validate(s,a.fields[l],[...n,{kind:\"field\",key:l}],[...i,\"fields\",l]);u!==void 0&&(d[l]=u)}return ne(d)},materializeDefault:(e,t,r,n)=>{let i={},a=!1;for(let[d,l]of Object.entries(e.fields)){let s;try{s=t.materializeDefault(l,[...r,{kind:\"field\",key:d}],[...n,\"fields\",d])}catch(u){if(!e.required&&Pn(u)&&u.code===T.MissingRequired)return;throw u}s!==void 0&&(i[d]=s,a=!0)}if(a)return ne(i);if(e.required)throw x(T.MissingRequired,\"required object has no defaultable fields\",{valuePath:r,schemaPath:n})}};var bo={kind:\"string\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:lo(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"string\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=pr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"minLength\":if(a.value.length<d.value)throw O(\"string shorter than minLength\",n,i);break;case\"maxLength\":if(a.value.length>d.value)throw O(\"string longer than maxLength\",n,i);break;case\"length\":if(a.value.length!==d.value)throw O(\"string length mismatch\",n,i);break;case\"regex\":if(!new RegExp(d.pattern,d.flags).test(a.value))throw O(\"string does not match regex\",n,i);break;case\"email\":if(!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(a.value))throw O(\"invalid email\",n,i);break;case\"url\":try{new URL(a.value)}catch{throw O(\"invalid url\",n,i)}break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var vo={kind:\"tree\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"tree discriminator must be a string\"),a=e.roots;if(!Array.isArray(a)||!a.every(s=>typeof s==\"string\"))throw x(T.InvalidSchema,\"tree roots must be a string array\",{schemaPath:[...n,\"roots\"]});let d=Z(e.variants,[...n,\"variants\"],\"tree variants must be an object\"),l={};for(let[s,u]of Object.entries(d)){let f=Z(u,[...n,\"variants\",s],\"tree variant must be an object\"),c=r.parseSchema(f.schema,[...n,\"variants\",s,\"schema\"]);if(c.kind!==\"object\")throw x(T.InvalidSchema,\"tree variant schema must be an object schema\",{schemaPath:[...n,\"variants\",s,\"schema\"]});let m=c.fields[i];if(m?.kind!==\"literal\"||m.value!==s)throw x(T.InvalidSchema,\"tree discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",s,\"schema\",\"fields\",i]});let y=f.children;if(!Array.isArray(y)||!y.every(N=>typeof N==\"string\"))throw x(T.InvalidSchema,\"tree variant children must be a string array\",{schemaPath:[...n,\"variants\",s,\"children\"]});l[s]={schema:c,children:[...y]}}for(let s of a)if(!Object.hasOwn(l,s))throw x(T.InvalidSchema,`unknown tree root variant ${s}`,{schemaPath:[...n,\"roots\"]});for(let[s,u]of Object.entries(l))for(let f of u.children)if(!Object.hasOwn(l,f))throw x(T.InvalidSchema,`unknown tree child variant ${f}`,{schemaPath:[...n,\"variants\",s,\"children\"]});return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,roots:[...a],variants:l},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]={schema:t(i.schema),children:[...i.children]};return{kind:\"tree\",discriminator:e.discriminator,roots:[...e.roots],variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=(()=>{if(t.kind!==\"tree\")throw x(T.TypeMismatch,`expected ${e.kind}, got ${t.kind}`,{valuePath:n,schemaPath:i});return t})(),d=new Map,l=a.nodes.map(s=>{let u=s.value.fields[e.discriminator];if(u===void 0||u.kind!==\"string\")throw x(T.TreeUnknownVariant,\"tree node discriminator is missing or invalid\",{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let f=e.variants[u.value];if(!f)throw x(T.TreeUnknownVariant,`unknown tree variant ${u.value}`,{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});let c=r.validate(f.schema,s.value,[...n,{kind:\"node\",id:s.id}],[...i,\"variants\",u.value,\"schema\"]);return d.set(s.id,u.value),{id:s.id,parent:s.parent,pos:s.pos,value:c}});for(let s of l){let u=d.get(s.id);if(s.parent===I){if(!e.roots.includes(u))throw x(T.TreeInvalidRootType,`tree root type ${u} is not allowed`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"roots\"]});continue}let f=d.get(s.parent);if(!f)throw x(T.TreeUnknownVariant,\"tree parent variant is missing\",{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:i});if(!e.variants[f].children.includes(u))throw x(T.TreeInvalidChildType,`tree child type ${u} is not allowed under ${f}`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"variants\",f,\"children\"]})}return{kind:\"tree\",nodes:l}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var So={kind:\"union\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"union discriminator must be a string\"),a=Z(e.variants,[...n,\"variants\"],\"union variants must be an object\"),d={};for(let[l,s]of Object.entries(a)){let u=r.parseSchema(s,[...n,\"variants\",l]);if(u.kind!==\"object\")throw x(T.InvalidSchema,\"union variants must be object schemas\",{schemaPath:[...n,\"variants\",l]});let f=u.fields[i];if(f?.kind!==\"literal\"||f.value!==l)throw x(T.InvalidSchema,\"union discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",l,\"fields\",i]});d[l]=u}return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,variants:d},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]=t(i);return{kind:\"union\",discriminator:e.discriminator,variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d=a.fields[e.discriminator];if(d===void 0||d.kind!==\"string\")throw x(T.UnionNoMatch,\"union discriminator is missing or invalid\",{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let l=e.variants[d.value];if(!l)throw x(T.UnionNoMatch,`unknown union discriminator ${d.value}`,{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});return r.validate(l,a,n,[...i,\"variants\",d.value])},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var Od={string:bo,number:ho,boolean:po,literal:yo,object:go,array:fo,union:So,either:mo,tree:vo};var Ke=e=>Od[e];var Nn=(e,t,r)=>To(e,t,r),To=(e,t,r)=>\"default\"in e&&e.default!==void 0?_(e.default):Ke(e.kind).materializeDefault(e,Md,t,r),Md={materializeDefault:To};var Lt=(e,t)=>(t!==void 0&&B(t),xo(e,t,[],[])),xo=(e,t,r,n)=>t===void 0?Nn(e,r,n):Ke(e.kind).validate(e,t,jd,r,n),jd={validate:xo,materializeDefault:Nn};var wo=e=>Po(e),Po=e=>Ke(e.kind).serialize(e,Po);var o={};Aa(o,{Array:()=>Xd,ArrayPrimitive:()=>Pr,Boolean:()=>Wd,BooleanPrimitive:()=>Tr,Either:()=>Jd,EitherPrimitive:()=>Vr,Lazy:()=>ol,LazyPrimitive:()=>Ar,Literal:()=>Kd,LiteralPrimitive:()=>xr,Number:()=>zd,NumberPrimitive:()=>Sr,PrimitiveError:()=>h,String:()=>Fd,StringPrimitive:()=>vr,Struct:()=>Yd,StructPrimitive:()=>wr,Tree:()=>nl,TreeNode:()=>tl,TreeNodePrimitive:()=>_r,TreeNodeSelf:()=>Qd,TreePrimitive:()=>Ir,Union:()=>Zd,UnionPrimitive:()=>Nr,commands:()=>$d,expectDefined:()=>Bd,hasOwn:()=>Hd,randomUuid:()=>dt,shortId:()=>Ge});var h=class extends Error{constructor(t){super(t),this.name=\"PrimitiveError\"}},Bd=(e,t)=>{if(e===void 0)throw new h(t);return e},Hd=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),dt=()=>{let e=globalThis.crypto?.randomUUID?.();if(typeof e==\"string\")return e;throw new h(\"crypto.randomUUID is not available in this runtime\")},Vo=\"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ\",Ud=10,Ge=(e=Ud)=>{let t=globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);if(!t)throw new h(\"crypto.getRandomValues is not available in this runtime\");let r=Vo.length,n=Math.floor(256/r)*r,i=\"\",a=new Uint8Array(e);for(;i.length<e;){t(a);for(let d=0;d<a.length&&i.length<e;d+=1){let l=a[d];l<n&&(i+=Vo[l%r])}}return i};var $d=(e,t,r)=>{B(t);let n=Lt(e.schema,t);if(n===void 0)throw new Error(\"Primitive root snapshot cannot be undefined\");let i=[],a=n,d=ke(),l={current:()=>a,emit:s=>{s.length!==0&&(i.push(...s),a=hn(n,i))},generator:{nextArrayItemId:()=>dt(),nextTreeNodeId:()=>Ge(),between:(s,u)=>d.between(s,u)}};return r(e.createProxy(l,[])),i};var D=(e,t)=>{let r=e;for(let n of t){if(r===void 0)return;switch(n.kind){case\"field\":if(r.kind!==\"object\")return;r=r.fields[n.key];break;case\"item\":if(r.kind!==\"array\")return;r=r.items.find(i=>i.id===n.id)?.value;break;case\"node\":if(r.kind!==\"tree\")return;r=r.nodes.find(i=>i.id===n.id)?.value;break}}return r},gr=(e,t)=>{let r=D(e,t);return r?.kind===\"object\"?r:void 0},U=(e,t)=>{let r=D(e,t);return r?.kind===\"array\"?r:void 0},G=(e,t)=>{let r=D(e,t);return r?.kind===\"tree\"?r:void 0},Se=e=>e?[...e.items].sort((t,r)=>t.pos.localeCompare(r.pos)):[],br=(e,t)=>e?.items.find(r=>r.id===t),_n=(e,t)=>{let r=Se(e),n=Ot(t,r.length);return n===void 0?void 0:r[n]},kn=(e,t)=>e?.nodes.find(r=>r.id===t),Ie=(e,t)=>e?e.nodes.filter(r=>r.parent===t).sort((r,n)=>r.pos.localeCompare(n.pos)):[];var Ot=(e,t)=>{let r=e<0?t+e:e;if(!(r<0||r>=t))return r},lt=(e,t)=>{if(t<0||t>e.length)throw new h(`Index ${t} is out of range`);return{lower:t===0?void 0:e[t-1],upper:t===e.length?void 0:e[t]}};var In=(e,t,r)=>{if(!e||t===I)return!1;let n=new Map(e.nodes.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}},An=(e,t)=>[...e,{kind:\"node\",id:t}];var vr=class e{constructor(t){p(this,\"_tag\",\"StringPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"string\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:re(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}length(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"length\",value:t}]})}regex(t,r){return new e({...this.state,validators:[...this.state.validators,{kind:\"regex\",pattern:t.source,flags:t.flags}]})}email(){return new e({...this.state,validators:[...this.state.validators,{kind:\"email\"}]})}url(){return new e({...this.state,validators:[...this.state.validators,{kind:\"url\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"String value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return re(this.state.defaultValue);if(this.state.required)throw new h(\"String value is required\");return}if(typeof t!=\"string\")throw new h(\"Expected string input\");return re(t)}decode(t){return t?.kind===\"string\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Fd=()=>new vr({required:!1,defaultValue:void 0,validators:[]});var Sr=class e{constructor(t){p(this,\"_tag\",\"NumberPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"number\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:ot(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"min\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"max\",value:t}]})}positive(){return new e({...this.state,validators:[...this.state.validators,{kind:\"positive\"}]})}negative(){return new e({...this.state,validators:[...this.state.validators,{kind:\"negative\"}]})}int(){return new e({...this.state,validators:[...this.state.validators,{kind:\"int\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Number value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return ot(this.state.defaultValue);if(this.state.required)throw new h(\"Number value is required\");return}if(typeof t!=\"number\"||globalThis.Number.isNaN(t)||!globalThis.Number.isFinite(t))throw new h(\"Expected finite number input\");return ot(t)}decode(t){return t?.kind===\"number\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},zd=()=>new Sr({required:!1,defaultValue:void 0,validators:[]});var Tr=class e{constructor(t){p(this,\"_tag\",\"BooleanPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"boolean\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:at(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Boolean value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return at(this.state.defaultValue);if(this.state.required)throw new h(\"Boolean value is required\");return}if(typeof t!=\"boolean\")throw new h(\"Expected boolean input\");return at(t)}decode(t){return t?.kind===\"boolean\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Wd=()=>new Tr({required:!1,defaultValue:void 0});var Rn=e=>{switch(typeof e){case\"string\":return re(e);case\"number\":return ot(e);case\"boolean\":return at(e);default:throw new h(`Unsupported scalar value type: ${typeof e}`)}};var xr=class e{constructor(t){p(this,\"_tag\",\"LiteralPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get literal(){return this.state.literal}get schema(){return{kind:\"literal\",value:this.state.literal,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:Rn(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){if(t!==this.state.literal)throw new h(\"Literal default must equal the literal value\");return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Literal value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Literal value is required\");return}if(r!==this.state.literal)throw new h(\"Input does not match the literal value\");return Rn(this.state.literal)}decode(t){if(t!==void 0&&\"value\"in t&&t.value===this.state.literal)return this.state.literal}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Kd=e=>new xr({required:!1,defaultValue:void 0,literal:e});var wr=class e{constructor(t){p(this,\"_tag\",\"StructPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get fields(){return this.state.fields}get schema(){let t={};for(let[r,n]of Object.entries(this.state.fields))t[r]=n.schema;return{kind:\"object\",fields:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}extend(t){return new e({required:this.state.required,defaultValue:void 0,fields:{...this.state.fields,...t}})}partial(t){let r=t?.stripDefaults??!1,n={};for(let[i,a]of Object.entries(this.state.fields))n[i]=No(a,r);return new e({required:this.state.required,defaultValue:void 0,fields:n})}optional(t){let r=t?Object.fromEntries(Object.entries(this.state.fields).map(([n,i])=>[n,No(i,!0)])):this.state.fields;return new e({required:!1,defaultValue:t?void 0:this.state.defaultValue,fields:r})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Struct value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return this.encode(this.state.defaultValue);if(this.state.required)throw new h(\"Struct value is required\");return}if(typeof t!=\"object\"||t===null||Array.isArray(t))throw new h(\"Expected object input\");let r=t,n={};for(let[i,a]of Object.entries(this.state.fields)){let d=a.encodeOptional(r[i]);d!==void 0&&(n[i]=d)}return ne(n)}decode(t){if(t?.kind!==\"object\")return;let r={};for(let[n,i]of Object.entries(this.state.fields)){let a=i.decode(t.fields[n]);a!==void 0&&(r[n]=a)}return r}createProxy(t,r){let n={get:()=>this.decode(D(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},update:i=>{Gd(this.state.fields,t,r,i)}};for(let[i,a]of Object.entries(this.state.fields))n[i]=a.createProxy(t,[...r,{kind:\"field\",key:i}]);return n}},Gd=(e,t,r,n)=>{for(let[i,a]of Object.entries(n)){let d=e[i];if(d){if(a===void 0){gr(t.current(),r)?.fields[i]!==void 0&&t.emit([{kind:\"object.delete\",path:r,key:i}]);continue}if(d._tag===\"StructPrimitive\"&&typeof a==\"object\"&&a!==null&&!Array.isArray(a)){d.createProxy(t,[...r,{kind:\"field\",key:i}]).update(a);continue}t.emit([{kind:\"object.set\",path:r,key:i,value:d.encode(a)}])}}},No=(e,t)=>{let r=e.optional;return typeof r==\"function\"?r.call(e,t):e},Yd=e=>new wr({required:!1,defaultValue:void 0,fields:e});var Pr=class e{constructor(t){p(this,\"_tag\",\"ArrayPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");p(this,\"encodedDefaultCache\");this.state=t}encodedDefault(){return this.encodedDefaultCache===void 0&&(this.encodedDefaultCache={value:this.state.defaultValue===void 0?void 0:this.encodeEntries(this.state.defaultValue)}),this.encodedDefaultCache.value}get element(){return this.state.element}get schema(){let t=this.encodedDefault();return{kind:\"array\",element:this.state.element.schema,...this.state.required?{required:!0}:{},...t!==void 0?{default:_(t)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}minLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}maxLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Array value is undefined\");return r}encodeOptional(t){if(t===void 0){let r=this.encodedDefault();if(r!==void 0)return _(r);if(this.state.required)throw new h(\"Array value is required\");return}if(!globalThis.Array.isArray(t))throw new h(\"Expected array input\");return this.encodeEntries(t)}decode(t){if(t?.kind===\"array\")return Se(t).map(r=>({id:r.id,pos:r.pos,value:this.state.element.decode(r.value)}))}createProxy(t,r){let n=d=>({get id(){return d},get pos(){return br(U(t.current(),r),d)?.pos??\"\"},get value(){return a.state.element.createProxy(t,[...r,{kind:\"item\",id:d}])},get:()=>{let l=br(U(t.current(),r),d);return this.state.element.decode(l?.value)},remove:()=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:l=>{_o(t,r,d,l)},moveToPos:l=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])}}),i=()=>Se(U(t.current(),r)).map(d=>n(d.id)),a=this;return{get length(){return Se(U(t.current(),r)).length},get:()=>this.decode(U(t.current(),r)),set:d=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(d)}])},push:d=>{let l=Se(U(t.current(),r)),s=l.length===0?void 0:l[l.length-1]?.pos,u=t.generator.nextArrayItemId(r),f=t.generator.between(s,void 0);return t.emit([{kind:\"array.insert\",path:r,item:{id:u,pos:f,value:this.state.element.encode(d)}}]),n(u)},insertAt:(d,l)=>{let s=Se(U(t.current(),r)),u=lt(s.map(m=>m.pos),d),f=t.generator.nextArrayItemId(r),c=t.generator.between(u.lower,u.upper);return t.emit([{kind:\"array.insert\",path:r,item:{id:f,pos:c,value:this.state.element.encode(l)}}]),n(f)},insertAtPos:(d,l)=>{let s=t.generator.nextArrayItemId(r);return t.emit([{kind:\"array.insert\",path:r,item:{id:s,pos:d,value:this.state.element.encode(l)}}]),n(s)},remove:d=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:(d,l)=>{_o(t,r,d,l)},moveToPos:(d,l)=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])},at:d=>{let l=_n(U(t.current(),r),d);return l?n(l.id):void 0},first:()=>{let d=_n(U(t.current(),r),0);return d?n(d.id):void 0},last:()=>{let d=Se(U(t.current(),r)),l=d[d.length-1];return l?n(l.id):void 0},findById:d=>{let l=br(U(t.current(),r),d);return l?n(l.id):void 0},find:d=>i().find((s,u,f)=>d(s,u,f)),findIndex:d=>i().findIndex((s,u,f)=>d(s,u,f)),map:d=>i().map((s,u,f)=>d(s,u,f)),filter:d=>i().filter((s,u,f)=>d(s,u,f)),some:d=>i().some((s,u,f)=>d(s,u,f)),every:d=>i().every((s,u,f)=>d(s,u,f)),forEach:d=>{i().forEach((s,u,f)=>d(s,u,f))},[Symbol.iterator]:()=>i()[Symbol.iterator]()}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encodeEntries(t){let r=ke(),n=new Set,i,a=t.map(d=>{let l=r.between(i,void 0);i=l;let s=dt();for(;n.has(s);)s=dt();return n.add(s),{id:s,pos:l,value:this.state.element.encode(d)}});return pn(a)}},_o=(e,t,r,n)=>{let i=Se(U(e.current(),t));if(i.findIndex(c=>c.id===r)===-1)throw new h(`Array item \"${r}\" does not exist`);let d=i.filter(c=>c.id!==r),l=Ot(n,d.length+1);if(l===void 0&&n!==d.length)throw new h(`Index ${n} is out of range`);let s=l??d.length,u=lt(d.map(c=>c.pos),s),f=e.generator.between(u.lower,u.upper);e.emit([{kind:\"array.move\",path:t,id:r,pos:f}])},Xd=e=>new Pr({required:!1,defaultValue:void 0,element:e,validators:[]});var Vr=class e{constructor(t){p(this,\"_tag\",\"EitherPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");if(this.state=t,t.variants.length===0)throw new h(\"Either requires at least one variant\")}get schema(){return{kind:\"either\",variants:this.state.variants.map(t=>t.schema),...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Either value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Either value is required\");return}for(let n of this.state.variants)try{let i=n.encodeOptional(r);if(i!==void 0)return i}catch{}throw new h(\"Either input did not match any variant\")}decode(t){for(let r of this.state.variants){let n=r.decode(t);if(n!==void 0)return n}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}},Jd=(...e)=>new Vr({required:!1,defaultValue:void 0,variants:e});var Nr=class e{constructor(t){p(this,\"_tag\",\"UnionPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get discriminator(){return this.state.discriminator}get variants(){return this.state.variants}get schema(){let t={};for(let[r,n]of Object.entries(this.state.variants)){let i=n.schema;if(i.kind!==\"object\")throw new h(\"Union variants must compile to object schemas\");let a={...i.fields,[this.state.discriminator]:{kind:\"literal\",value:r}};t[r]={kind:\"object\",fields:a}}return{kind:\"union\",discriminator:this.state.discriminator,variants:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Union value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Union value is required\");return}if(typeof r!=\"object\"||r===null||Array.isArray(r))throw new h(\"Expected union input object\");let n=this.resolveVariantKey(r),i=this.state.variants[n];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);let a=i.encode(r);if(a.kind!==\"object\")throw new h(\"Union variant must encode to an object value\");return ne({...a.fields,[this.state.discriminator]:re(String(n))})}decode(t){if(t?.kind!==\"object\")return;let r=this.resolveVariantKeyFromObject(t);if(!r)return;let i=this.state.variants[r]?.decode(t);if(i!==void 0)return{...i,[this.state.discriminator]:r}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},as:n=>{let i=this.state.variants[String(n)];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);return i.createProxy(t,r)},match:n=>{let i=gr(t.current(),r),a=i?this.resolveVariantKeyFromObject(i):void 0;if(!a)return;let d=n[a];if(d)return d(this.state.variants[a].createProxy(t,r))}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}resolveVariantKey(t){let r=t[this.state.discriminator];if(typeof r==\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r))return r;let n=Object.entries(this.state.variants).filter(([,i])=>{let a=Object.keys(i.fields);return Object.keys(t).every(d=>d===this.state.discriminator||a.includes(d))}).map(([i])=>i);if(n.length===1)return n[0];throw new h(\"Unable to resolve union variant from input\")}resolveVariantKeyFromObject(t){let r=t.fields[this.state.discriminator];if(r?.kind===\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r.value))return r.value}},Zd=(e,t)=>new Nr({required:!1,defaultValue:void 0,discriminator:t?.discriminator??\"type\",variants:e});var ko=Symbol.for(\"TreeNode.Self\"),Qd={_tag:\"TreeNodeSelf\",_brand:ko},el=e=>typeof e==\"object\"&&e!==null&&\"_brand\"in e&&e._brand===ko,_r=class{constructor(t,r,n){p(this,\"_tag\",\"TreeNodePrimitive\");p(this,\"_Type\");p(this,\"_Data\");p(this,\"_Children\");p(this,\"TSetInput\");p(this,\"type\");p(this,\"data\");p(this,\"childrenInput\");p(this,\"resolvedChildren\");this.type=t,this.data=r,this.childrenInput=n}get children(){if(this.resolvedChildren===void 0){let t=typeof this.childrenInput==\"function\"?this.childrenInput():this.childrenInput;this.resolvedChildren=t.map(r=>el(r)?this:r)}return this.resolvedChildren}isChildAllowed(t){return this.children.some(r=>r.type===t)}},tl=(e,t)=>new _r(e,t.data,t.children);var Ir=class e{constructor(t){p(this,\"_tag\",\"TreePrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){let t=rl(this.state.root);return{kind:\"tree\",discriminator:\"type\",roots:[this.state.root.type],variants:t,...this.state.required?{required:!0}:{},...this.state.encodedDefault!==void 0?{default:_(this.state.encodedDefault)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t,encodedDefault:this.encodeRoots(t)})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Tree value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.encodedDefault!==void 0)return _(this.state.encodedDefault);if(this.state.required)throw new h(\"Tree value is required\");return}if(!Array.isArray(t))throw new h(\"Expected tree root input array\");return this.encodeRoots(t)}encodeRoots(t){let r=[],n=kr(this.state.root),i=new Set([I]),a,d=ke(),l=(s,u,f,c)=>{let m=n.get(s.type);if(!m)throw new h(`Unknown tree node type \"${s.type}\"`);if(!f.some(w=>w.type===m.type))throw new h(`Node type \"${s.type}\" is not allowed here`);let y=s.id??il(i);if(i.has(y))throw new h(`Duplicate tree node id \"${y}\" in encoded input`);i.add(y);let N=d.between(c,void 0);r.push({id:y,parent:u,pos:N,value:Cn(m,s)});let R;for(let w of s.children??[])R=l(w,y,m.children,R);return N};for(let s of t)a=l(s,I,[this.state.root],a);return mn(r)}decode(t){if(t?.kind!==\"tree\")return;let r=kr(this.state.root);return Ro(t,I,r)}createProxy(t,r){let n=kr(this.state.root);return{get:()=>this.decode(G(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},findByIdAcrossTree:i=>{let a=G(t.current(),r),d=kn(a,i);if(!d)return;let l=d.value.fields.type,s=n.get(l?.kind===\"string\"?l.value:\"\");return s?Ye(t,r,n,s,i):void 0},children:Ao(t,r,n,I,[this.state.root])}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue,encodedDefault:t?void 0:this.state.encodedDefault})}},Ao=(e,t,r,n,i)=>{let a=()=>Ie(G(e.current(),t),n).filter(l=>i.some(s=>s.type===ie(l))).map(l=>Ye(e,t,r,r.get(ie(l)),l.id)),d={__parentId:n,get length(){return a().length},at:l=>{let s=Ie(G(e.current(),t),n).filter(c=>i.some(m=>m.type===ie(c))),u=Ot(l,s.length),f=u===void 0?void 0:s[u];return f?Ye(e,t,r,r.get(ie(f)),f.id):void 0},first:()=>d.at(0),last:()=>{let l=a();return l[l.length-1]},findById:l=>{let s=Ie(G(e.current(),t),n).find(f=>f.id===l);if(!s)return;let u=r.get(ie(s));return u?Ye(e,t,r,u,s.id):void 0},insertAt:(l,s)=>{let u=G(e.current(),t),f=Ie(u,n).filter(w=>i.some(P=>P.type===ie(w))),c=lt(f.map(w=>w.pos),l),m=Io(i,s.type),y=s.id??e.generator.nextTreeNodeId(t),N=e.generator.between(c.lower,c.upper),R={id:y,parent:n,pos:N,value:Cn(m,s)};return e.emit([{kind:\"tree.insert\",path:t,node:R}]),Ye(e,t,r,m,y)},insertLast:l=>{let s=Ie(G(e.current(),t),n).filter(u=>i.some(f=>f.type===ie(u)));return d.insertAt(s.length,l)},insertAtPos:(l,s)=>{let u=Io(i,s.type),f=s.id??e.generator.nextTreeNodeId(t),c={id:f,parent:n,pos:l,value:Cn(u,s)};return e.emit([{kind:\"tree.insert\",path:t,node:c}]),Ye(e,t,r,u,f)},find:l=>a().find((u,f,c)=>l(u,f,c)),findIndex:l=>a().findIndex((u,f,c)=>l(u,f,c)),map:l=>a().map((u,f,c)=>l(u,f,c)),filter:l=>a().filter((u,f,c)=>l(u,f,c)),some:l=>a().some((u,f,c)=>l(u,f,c)),every:l=>a().every((u,f,c)=>l(u,f,c)),forEach:l=>{a().forEach((u,f,c)=>l(u,f,c))},[Symbol.iterator]:()=>a()[Symbol.iterator]()};return d},Ye=(e,t,r,n,i)=>{let a=()=>kn(G(e.current(),t),i),d=()=>{let l=a();return l?r.get(ie(l))??n:n};return{get id(){return i},get type(){return d().type},get pos(){return a()?.pos??\"\"},get parentId(){let l=a()?.parent;return l===I?null:l??null},get data(){return d().data.createProxy(e,An(t,i))},get children(){return Ao(e,t,r,i,d().children)},get:()=>{let l=a();if(l)return Co(l,G(e.current(),t),r)},update:l=>{d().data.createProxy(e,An(t,i)).update(l)},remove:()=>{e.emit([{kind:\"tree.delete\",path:t,id:i}])},moveTo:(l,s)=>{let u=l.__parentId;if(!u)throw new h(\"Target children collection is not movable\");let f=G(e.current(),t);if(In(f,u,i))throw new h(\"Tree move would create a cycle\");let c=Ie(f,u).filter(N=>N.id!==i),m=lt(c.map(N=>N.pos),s),y=e.generator.between(m.lower,m.upper);e.emit([{kind:\"tree.move\",path:t,id:i,parent:u,pos:y}])},moveToPos:(l,s)=>{let u=G(e.current(),t);if(In(u,l,i))throw new h(\"Tree move would create a cycle\");e.emit([{kind:\"tree.move\",path:t,id:i,parent:l,pos:s}])},as:l=>{if(d().type!==l.type)throw new h(`Expected node type \"${l.type}\", got \"${d().type}\"`);return Ye(e,t,r,l,i)}}},rl=e=>{let t=kr(e),r={};for(let n of t.values()){let i=n.data.schema;if(i.kind!==\"object\")throw new h(\"Tree node data must compile to an object schema\");r[n.type]={schema:{kind:\"object\",fields:{...i.fields,type:{kind:\"literal\",value:n.type}}},children:n.children.map(a=>a.type)}}return r},kr=e=>{let t=new Map,r=n=>{let i=t.get(n.type);if(i&&i!==n)throw new h(`Duplicate tree node type \"${n.type}\"`);if(!i){t.set(n.type,n);for(let a of n.children)r(a)}};return r(e),t},Cn=(e,t)=>{let r=e.data.encode(t);if(r.kind!==\"object\")throw new h(\"Tree node data must encode to an object\");return ne({...r.fields,type:re(e.type)})},ie=e=>{let t=e.value.fields.type;if(t?.kind!==\"string\")throw new h(`Tree node \"${e.id}\" is missing its type discriminator`);return t.value},Ro=(e,t,r)=>Ie(e,t).map(n=>Co(n,e,r)),Co=(e,t,r)=>{let n=r.get(ie(e));if(!n)throw new h(`Unknown tree node type \"${ie(e)}\"`);return{id:e.id,type:n.type,parentId:e.parent===I?null:e.parent,pos:e.pos,data:n.data.decode(e.value),children:Ro(t,e.id,r)}},Io=(e,t)=>{let r=e.find(n=>n.type===t);if(!r)throw new h(`Tree node type \"${t}\" is not allowed in this collection`);return r},nl=e=>new Ir({required:!1,defaultValue:void 0,encodedDefault:void 0,root:e.root}),il=e=>{let t=Ge();for(;e.has(t);)t=Ge();return t};var Ar=class{constructor(t){p(this,\"_tag\",\"LazyPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"thunk\");p(this,\"resolved\");this.thunk=t}get schema(){return this.resolve().schema}encode(t){return this.resolve().encode(t)}encodeOptional(t){return this.resolve().encodeOptional(t)}decode(t){return this.resolve().decode(t)}createProxy(t,r){return this.resolve().createProxy(t,r)}resolve(){return this.resolved===void 0&&(this.resolved=this.thunk()),this.resolved}},ol=e=>new Ar(e);var qo=o.Struct({type:o.Literal(\"click\").required()}),Eo=o.Union({click:qo}),Rr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()})},{discriminator:\"key\"}),Do=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Lo=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),Oo=o.Struct({type:o.Literal(\"none\").required()}),Mo=o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Do.required()}).required()}),jo=o.Struct({type:o.Literal(\"close-paywall\").required()}),Bo=o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Lo.required()}),Cr=o.Union({\"close-paywall\":jo,none:Oo,\"purchase-product\":Bo,\"set-variable\":Mo}),Ho=o.Struct({id:o.String().required(),trigger:Eo.required(),action:Cr.required()}),Mt=o.Array(Ho).default([]);var Uo=o.Struct({key:o.Literal(\"string\").required(),value:o.String().default(\"\")}),$o=o.Struct({key:o.Literal(\"number\").required(),value:o.Number().default(0)}),Fo=o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().default(!1)}),zo=o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).default({})}),qr=o.Union({boolean:Fo,number:$o,product:zo,string:Uo},{discriminator:\"key\"}),Wo=o.Struct({id:o.String().required(),name:o.String().required(),value:qr.required()}),Er=o.Struct({id:o.String().required()});var Dr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),\"boolean-array\":o.Struct({key:o.Literal(\"boolean-array\").required(),value:o.Array(o.Boolean()).required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),\"number-array\":o.Struct({key:o.Literal(\"number-array\").required(),value:o.Array(o.Number()).required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),\"string-array\":o.Struct({key:o.Literal(\"string-array\").required(),value:o.Array(o.String()).required()})},{discriminator:\"key\"}),qn=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Dr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),Ko=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),value:o.Struct({field:o.String().required()}).required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Go=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),field:o.String().required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),En=o.Union({\"close-paywall\":o.Struct({type:o.Literal(\"close-paywall\").required()}),none:o.Struct({type:o.Literal(\"none\").required()}),\"purchase-product\":o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Go.required()}),\"set-variable\":o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Ko.required()}).required()})});var $=o.Array(Wo).default([]),F=o.Array(o.Struct({name:o.String().required(),nodeId:o.String().required()})).default([]);var al=o.Struct({path:o.String().required(),source:o.String().default(\"\")}).required(),Dn=o.TreeNode(\"codeComponent\",{children:[],data:al});var Y=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:qr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),dl=o.Struct({type:o.Literal(\"equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ll=o.Struct({type:o.Literal(\"not-equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),sl=o.Struct({type:o.Literal(\"greater-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ul=o.Struct({type:o.Literal(\"greater-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),cl=o.Struct({type:o.Literal(\"less-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),fl=o.Struct({type:o.Literal(\"less-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),pl=o.Union({equals:dl,\"greater-than\":sl,\"greater-than-or-equal\":ul,\"less-than\":cl,\"less-than-or-equal\":fl,\"not-equals\":ll}),ml=o.Struct({type:o.Literal(\"and\").required(),value:o.Array(pl).minLength(1).required()}),Yo=o.Struct({type:o.Literal(\"or\").required(),value:o.Array(ml).minLength(1).required()}),yl=o.Struct({action:Cr.required(),interactionId:o.String().required()});function Ae(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({style:e}).default({})})}function Lr(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({actions:o.Array(yl).default([]),style:e}).default({})})}var Xe=/^rgba\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d*\\.?\\d+)\\s*\\)$/i,st=o.Number().default(0),ut=o.Number().default(0),ct=o.Number().default(0),ft=o.Number().default(0),oe=o.Number().default(0),ae=o.Number().default(0),de=o.Number().default(0),le=o.Number().default(0),pt=o.Number().default(0),mt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"space-between\"),o.Literal(\"space-around\"),o.Literal(\"space-evenly\")).default(\"flex-start\"),yt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"stretch\"),ht=o.Either(o.Literal(\"row\"),o.Literal(\"column\")).default(\"column\"),se=o.Number(),ue=o.Number().default(0),ce=o.Number().default(1),fe=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),pe=o.Either(o.Literal(\"auto\"),o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"auto\"),gt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),bt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),me=o.Number(),ye=o.Number(),he=o.Number(),ge=o.Number(),Xo=o.Number().default(0),Jo=o.Number().default(0),vt=o.Either(o.Literal(\"absolute\"),o.Literal(\"relative\")).default(\"relative\"),St=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Tt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),xt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),wt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Pt=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),Vt=o.Boolean().default(!1),Nt=o.Either(o.Literal(\"solid\"),o.Literal(\"gradient\"),o.Literal(\"image\")).default(\"solid\"),_t=o.Struct({kind:o.Either(o.Literal(\"linear\"),o.Literal(\"radial\")).default(\"linear\"),startX:o.Number().default(.5),startY:o.Number().default(0),endX:o.Number().default(.5),endY:o.Number().default(1),stops:o.Array(o.Struct({color:o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),position:o.Number().default(0)})).default([{color:\"rgba(255, 255, 255, 1)\",position:0},{color:\"rgba(255, 255, 255, 0)\",position:1}])}).default({}),Te=o.Struct({url:o.String().default(\"\"),resizeMode:o.Either(o.Literal(\"cover\"),o.Literal(\"contain\"),o.Literal(\"stretch\"),o.Literal(\"center\")).default(\"cover\")}).default({}),Re=o.Number().default(0),Ce=o.Number().default(0),qe=o.Number().default(0),Ee=o.Number().default(0),De=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Le=o.Either(o.Literal(\"solid\"),o.Literal(\"dashed\"),o.Literal(\"dotted\")).default(\"solid\"),Or=o.Number().default(0),Mr=o.Number().default(0),jr=o.Number().default(0),Br=o.Number().default(0),Oe=o.Boolean().default(!1),X=o.Number().default(1),Me=o.Either(o.Literal(\"visible\"),o.Literal(\"hidden\"),o.Literal(\"scroll\")).default(\"visible\"),je=o.Number().default(0),J=o.Either(o.Literal(\"flex\"),o.Literal(\"none\")).default(\"flex\"),Be=o.Boolean().default(!1),He=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Ue=o.Number().default(0),$e=o.Number().default(0),Fe=o.Number().default(0),ze=o.Number().default(1),Zo=o.Number().default(16).min(1),Qo=o.Either(o.Literal(\"100\"),o.Literal(\"200\"),o.Literal(\"300\"),o.Literal(\"400\"),o.Literal(\"500\"),o.Literal(\"600\"),o.Literal(\"700\"),o.Literal(\"800\"),o.Literal(\"900\")).default(\"400\"),ea=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),ta=o.Either(o.Literal(\"left\"),o.Literal(\"center\"),o.Literal(\"right\"),o.Literal(\"justify\")).default(\"left\"),ra=o.Number().default(1.5),na=o.Number().default(0),kt=o.Boolean().default(!1),It=o.Boolean().default(!1),ia=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),oa=o.Boolean().default(!1),aa=o.Either(o.Literal(\"nonzero\"),o.Literal(\"evenodd\")).default(\"nonzero\"),da=o.Number().default(1),la=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),sa=o.Boolean().default(!1),ua=o.Number().default(0),ca=o.Number().default(1),fa=o.Either(o.Literal(\"butt\"),o.Literal(\"round\"),o.Literal(\"square\")).default(\"butt\"),pa=o.Either(o.Literal(\"miter\"),o.Literal(\"round\"),o.Literal(\"bevel\")).default(\"miter\");var Ln=o.Struct({fillColor:ia,fillEnabled:oa,fillRule:aa,fillOpacity:da,strokeColor:la,strokeEnabled:sa,strokeWidth:ua,strokeOpacity:ca,strokeLinecap:fa,strokeLinejoin:pa,opacity:X,display:J}).default({}),hl=Ae(Ln.partial({stripDefaults:!0}).default({})),gl=o.Array(hl).default([]),On=o.TreeNode(\"path\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Path\"),states:gl,d:o.String().default(\"\"),transform:o.String(),style:Ln}).required()});var bl=o.Either(o.Literal(\"none\"),o.Literal(\"xMidYMid meet\"),o.Literal(\"xMidYMid slice\")).default(\"xMidYMid meet\"),vl=o.Struct({minX:o.Number().default(0),minY:o.Number().default(0),width:o.Number().default(24),height:o.Number().default(24)}).default({}),Mn=o.Struct({width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,opacity:X,display:J,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\"),preserveAspectRatio:bl}).default({}),Sl=Ae(Mn.partial({stripDefaults:!0}).default({})),Tl=o.Array(Sl).default([]),xe=o.TreeNode(\"shape\",{children:[On],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Shape\"),states:Tl,svgSource:o.String(),viewBox:vl,style:Mn}).required()});var jn=o.Struct({marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,fontSize:Zo,fontWeight:Qo,color:ea,textAlign:ta,lineHeight:ra,letterSpacing:na,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),xl=Ae(jn.partial({stripDefaults:!0}).default({})),wl=o.Array(xl).default([]),Pl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({text:o.String()}).default({})})).default([]),we=o.TreeNode(\"text\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,localized:Pl,name:o.String().default(\"Text\"),states:wl,style:jn,text:o.String().default(\"New Text\")}).required()});var Bn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),Vl=Lr(Bn.partial({stripDefaults:!0}).default({})),Nl=o.Array(Vl).default([]),_l=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Je=o.TreeNode(\"view\",{children:()=>[o.TreeNodeSelf,Ze,we,xe,Qe],data:o.Struct({interactions:Mt,linkedVariables:F,localVariables:$,localized:_l,name:o.String().default(\"View\"),states:Nl,style:Bn}).required()});var Hn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),kl=Lr(Hn.partial({stripDefaults:!0}).default({})),Il=o.Array(kl).default([]),Al=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Rl=o.Struct({horizontal:o.Boolean().default(!1),interactions:Mt,linkedVariables:F,localVariables:$,localized:Al,name:o.String().default(\"ScrollView\"),showsScrollIndicator:o.Boolean().default(!0),states:Il,style:Hn}).required(),Ze=o.TreeNode(\"scrollView\",{children:()=>[Je,o.TreeNodeSelf,we,xe,Qe],data:Rl});var Cl=o.Struct({actionBindings:o.Array(o.Struct({action:En.required(),name:o.String().required()})).default([]),componentSource:o.String().default(\"catalog\"),componentPath:o.String().default(\"\"),componentSlug:o.String().default(\"\"),componentVersion:o.Number().default(0),contentHash:o.String().default(\"\"),name:o.String().default(\"Component\"),previewState:o.String().default(\"default\"),props:o.Array(o.Struct({name:o.String().required(),value:qn.required(),localizedValues:o.Array(o.Struct({locale:o.String().required(),value:Dr.required()})).default([])})).default([])}).required(),Qe=o.TreeNode(\"component\",{children:()=>[Je,Ze,we,xe,o.TreeNodeSelf],data:Cl});var Un=o.TreeNode(\"library\",{children:()=>[Dn],data:o.Struct({}).required()});var $n=o.Struct({x:Xo,y:Jo,width:o.Number().default(375),height:o.Number().default(812),minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,backgroundColor:Pt.default(\"rgba(255, 255, 255, 1)\"),backgroundEnabled:Vt.default(!0),backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),ql=Ae($n.partial({stripDefaults:!0}).default({})),El=o.Array(ql).default([]),Dl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Fn=o.TreeNode(\"screen\",{children:()=>[Je,Ze,we,xe,Qe],data:o.Struct({linkedVariables:F,localVariables:$,localized:Dl,name:o.String().default(\"Screen\"),states:El,style:$n}).required()});var Ll=o.Struct({defaultLocale:o.String().default(\"en\"),locales:o.Array(o.Struct({tag:o.String().required()})).default([])}).default({}),zn=o.TreeNode(\"root\",{children:()=>[Fn,Un],data:o.Struct({localization:Ll,name:o.String()}).required()});var Wn=o.Tree({root:zn});function Hr(e){return e!==null&&typeof e==\"object\"&&\"id\"in e&&\"pos\"in e&&\"value\"in e?e.value:e}function Kn(e){let t=e.indexOf(\"-\");return t===-1?e:e.slice(0,t)}function ma(e,t,r){let n=e.text,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.text;if(f===void 0||f===\"\")continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}function ya(e,t,r){let n=e.style.backgroundImage,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.backgroundImage;if(f===void 0)continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}var Gn=e=>Array.isArray(e)?e.map(Gn):typeof e!=\"object\"||e===null?e:Object.fromEntries(Object.entries(e).sort(([t],[r])=>t.localeCompare(r)).map(([t,r])=>[t,Gn(r)])),ha=e=>JSON.stringify(Gn(wo(e.schema))),ga=e=>{let t=new Map;for(let r of e){let n=`${r.database}\\0${r.collection}`;if(t.has(n))throw new Error(`Duplicate migration collection ${r.database}/${r.collection}`);let i=r.baseline;for(let[a,d]of r.migrations.entries()){let l=a+1;if(!Number.isSafeInteger(d.version)||d.version!==l)throw new Error(`Expected migration version ${l} for ${r.database}/${r.collection}, received ${d.version}`);if(ha(i)!==ha(d.from))throw new Error(`Migration ${d.version} (${d.name}) does not start from the previous schema`);i=d.to}t.set(n,r)}return{collections:[...e],find:(r,n)=>t.get(`${r}\\0${n}`)}};var Ol=\"voidhash\",Ml=\"paywalls\",Ch=ga([{database:Ol,databaseDescription:\"Voidhash paywall documents\",collection:Ml,baseline:Wn,migrations:[]}]);var Dh=o.Struct({cursor:o.Struct({x:o.Number().required(),y:o.Number().required()}),name:o.String(),participant:o.Union({agent:o.Struct({editSessionId:o.String().required(),kind:o.Literal(\"agent\").required(),source:o.Either(o.Literal(\"built_in\"),o.Literal(\"mcp\")).required()}),human:o.Struct({kind:o.Literal(\"human\").required()})},{discriminator:\"kind\"}).required(),selectedNodeIds:o.Array(o.String()).default([]),user:o.Struct({color:o.String().required(),name:o.String().required()}).required()});function At(e){let{locale:t,defaultLocale:r}=te();return ya(e,t,r)}function ba({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=At(e.data),i=Jt(n===e.data.style.backgroundImage?r:{...r,backgroundImage:n}),a=Zt(r);return b(\"div\",{\"data-node-id\":e.id,style:i,children:b(\"div\",{style:a,children:t})})}function Ur(e,t,r){let{getNodeVariables:n,setNodeVariable:i,callbacks:a}=te(),d=n(e),l=j(()=>({...a,onSetVariable:(f,c)=>{i(e,f,c)}}),[a,e,i]),s=j(()=>t.filter(f=>f.value?.trigger?.type===\"click\"),[t]),u=ee(()=>{for(let f of s){let c=f.value;if(!c?.action)continue;let m=f.id??c.id;if(!m)continue;let N=tn(m,r,d)??c.action;rn(N,d,l)}},[s,r,d,l]);if(s.length!==0)return u}function va({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=Yt(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i},{horizontal:e.data.horizontal,showsScrollIndicator:e.data.showsScrollIndicator});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function Sa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Qt(r),i=e.data.viewBox,a=`${i.minX} ${i.minY} ${i.width} ${i.height}`;return b(\"div\",{\"data-node-id\":e.id,style:n,children:b(\"svg\",{height:\"100%\",preserveAspectRatio:r.preserveAspectRatio,style:{display:\"block\"},viewBox:a,width:\"100%\",children:t})})}function Ta({node:e}){let t=W(e.id,e.data.style,e.data.states),r=er(t),{locale:n,defaultLocale:i}=te();return b(\"span\",{\"data-node-id\":e.id,style:r,children:ma(e.data,n,i)})}function xa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=it(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function wa({snapshot:e,componentArtifacts:t,locale:r}){return b(Li,{componentArtifacts:t,locale:r,snapshot:e,children:b(Pa,{node:e})})}var jl={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",textAlign:\"center\"};function Bl({node:e}){return b(\"div\",{style:jl,children:`Unsupported node type: ${String(e.type)}`})}function Pa({node:e}){let t=(e.children??[]).map(r=>b(Pa,{node:r},r.id));switch(e.type){case\"root\":return b(Q,{children:t});case\"screen\":return b(ba,{node:e,children:t});case\"view\":return b(xa,{node:e,children:t});case\"scrollView\":return b(va,{node:e,children:t});case\"text\":return b(Ta,{node:e});case\"shape\":return b(Sa,{node:e,children:t});case\"path\":return b(Hi,{node:e});case\"component\":return b(Bi,{node:e,children:t});case\"library\":case\"codeComponent\":return null;default:return b(Bl,{node:e})}}var Hl=\"__VOIDHASH_PAYWALL__\",Va={products:[],variables:{}},Ul=e=>({products:e?.products??[],variables:e?.variables??{},locale:e?.locale,platform:e?.platform,defaultSelectedProductId:e?.defaultSelectedProductId}),Na=()=>{if(typeof window>\"u\")return Va;let e=window[Hl];return e?Ul(e):Va};function _a(e){return Na().locale??e}function $l(e){let t;try{t=JSON.parse(e)}catch{return}if(!(typeof t!=\"object\"||t===null)){if(\"type\"in t)return{componentArtifacts:void 0,locale:void 0,snapshot:t};if(\"snapshot\"in t){let r=t;return{componentArtifacts:r.componentArtifacts,locale:r.locale,snapshot:r.snapshot}}}}function ka(){let e=document.getElementById(\"__PAYWALL_DATA__\");if(!e?.textContent)return;let t=document.getElementById(\"paywall-root\");if(!t)return;let r=$l(e.textContent);r&&ui(b(wa,{componentArtifacts:r.componentArtifacts,locale:_a(r.locale),snapshot:r.snapshot}),t)}document.readyState===\"loading\"?document.addEventListener(\"DOMContentLoaded\",ka):ka();})();\n";
+export const PAYWALL_RUNTIME_BUNDLE = "(()=>{var Yn=Object.defineProperty;var Ia=(e,t,r)=>t in e?Yn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Aa=(e,t)=>{for(var r in t)Yn(e,r,{get:t[r],enumerable:!0})};var p=(e,t,r)=>Ia(e,typeof t!=\"symbol\"?t+\"\":t,r);var Wt,k,Qn,Ra,Ne,Xn,ei,ti,$r,Bt,Ct,ri,Gr,Fr,zr,ni,$t={},Ft=[],Ca=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,Kt=Array.isArray;function be(e,t){for(var r in t)e[r]=t[r];return e}function Yr(e){e&&e.parentNode&&e.parentNode.removeChild(e)}function qa(e,t,r){var n,i,a,d={};for(a in t)a==\"key\"?n=t[a]:a==\"ref\"?i=t[a]:d[a]=t[a];if(arguments.length>2&&(d.children=arguments.length>3?Wt.call(arguments,2):r),typeof e==\"function\"&&e.defaultProps!=null)for(a in e.defaultProps)d[a]===void 0&&(d[a]=e.defaultProps[a]);return Ht(e,d,n,i,null)}function Ht(e,t,r,n,i){var a={type:e,props:t,key:r,ref:n,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:i??++Qn,__i:-1,__u:0};return i==null&&k.vnode!=null&&k.vnode(a),a}function Q(e){return e.children}function Ut(e,t){this.props=e,this.context=t}function rt(e,t){if(t==null)return e.__?rt(e.__,e.__i+1):null;for(var r;t<e.__k.length;t++)if((r=e.__k[t])!=null&&r.__e!=null)return r.__e;return typeof e.type==\"function\"?rt(e):null}function Ea(e){if(e.__P&&e.__d){var t=e.__v,r=t.__e,n=[],i=[],a=be({},t);a.__v=t.__v+1,k.vnode&&k.vnode(a),Xr(e.__P,a,t,e.__n,e.__P.namespaceURI,32&t.__u?[r]:null,n,r??rt(t),!!(32&t.__u),i),a.__v=t.__v,a.__.__k[a.__i]=a,di(n,a,i),t.__e=t.__=null,a.__e!=r&&ii(a)}}function ii(e){if((e=e.__)!=null&&e.__c!=null)return e.__e=e.__c.base=null,e.__k.some(function(t){if(t!=null&&t.__e!=null)return e.__e=e.__c.base=t.__e}),ii(e)}function Wr(e){(!e.__d&&(e.__d=!0)&&Ne.push(e)&&!zt.__r++||Xn!=k.debounceRendering)&&((Xn=k.debounceRendering)||ei)(zt)}function zt(){try{for(var e,t=1;Ne.length;)Ne.length>t&&Ne.sort(ti),e=Ne.shift(),t=Ne.length,Ea(e)}finally{Ne.length=zt.__r=0}}function oi(e,t,r,n,i,a,d,l,s,u,f){var c,m,y,N,R,w,P,V=n&&n.__k||Ft,L=t.length;for(s=Da(r,t,V,s,L),c=0;c<L;c++)(y=r.__k[c])!=null&&(m=y.__i!=-1&&V[y.__i]||$t,y.__i=c,w=Xr(e,y,m,i,a,d,l,s,u,f),N=y.__e,y.ref&&m.ref!=y.ref&&(m.ref&&Jr(m.ref,null,y),f.push(y.ref,y.__c||N,y)),R==null&&N!=null&&(R=N),(P=!!(4&y.__u))||m.__k===y.__k?(s=ai(y,s,e,P),P&&m.__e&&(m.__e=null)):typeof y.type==\"function\"&&w!==void 0?s=w:N&&(s=N.nextSibling),y.__u&=-7);return r.__e=R,s}function Da(e,t,r,n,i){var a,d,l,s,u,f=r.length,c=f,m=0;for(e.__k=new Array(i),a=0;a<i;a++)(d=t[a])!=null&&typeof d!=\"boolean\"&&typeof d!=\"function\"?(typeof d==\"string\"||typeof d==\"number\"||typeof d==\"bigint\"||d.constructor==String?d=e.__k[a]=Ht(null,d,null,null,null):Kt(d)?d=e.__k[a]=Ht(Q,{children:d},null,null,null):d.constructor===void 0&&d.__b>0?d=e.__k[a]=Ht(d.type,d.props,d.key,d.ref?d.ref:null,d.__v):e.__k[a]=d,s=a+m,d.__=e,d.__b=e.__b+1,l=null,(u=d.__i=La(d,r,s,c))!=-1&&(c--,(l=r[u])&&(l.__u|=2)),l==null||l.__v==null?(u==-1&&(i>f?m--:i<f&&m++),typeof d.type!=\"function\"&&(d.__u|=4)):u!=s&&(u==s-1?m--:u==s+1?m++:(u>s?m--:m++,d.__u|=4))):e.__k[a]=null;if(c)for(a=0;a<f;a++)(l=r[a])!=null&&(2&l.__u)==0&&(l.__e==n&&(n=rt(l)),si(l,l));return n}function ai(e,t,r,n){var i,a;if(typeof e.type==\"function\"){for(i=e.__k,a=0;i&&a<i.length;a++)i[a]&&(i[a].__=e,t=ai(i[a],t,r,n));return t}e.__e!=t&&(n&&(t&&e.type&&!t.parentNode&&(t=rt(e)),r.insertBefore(e.__e,t||null)),t=e.__e);do t=t&&t.nextSibling;while(t!=null&&t.nodeType==8);return t}function La(e,t,r,n){var i,a,d,l=e.key,s=e.type,u=t[r],f=u!=null&&(2&u.__u)==0;if(u===null&&l==null||f&&l==u.key&&s==u.type)return r;if(n>(f?1:0)){for(i=r-1,a=r+1;i>=0||a<t.length;)if((u=t[d=i>=0?i--:a++])!=null&&(2&u.__u)==0&&l==u.key&&s==u.type)return d}return-1}function Jn(e,t,r){t[0]==\"-\"?e.setProperty(t,r??\"\"):e[t]=r==null?\"\":typeof r!=\"number\"||Ca.test(t)?r:r+\"px\"}function jt(e,t,r,n,i){var a,d;e:if(t==\"style\")if(typeof r==\"string\")e.style.cssText=r;else{if(typeof n==\"string\"&&(e.style.cssText=n=\"\"),n)for(t in n)r&&t in r||Jn(e.style,t,\"\");if(r)for(t in r)n&&r[t]==n[t]||Jn(e.style,t,r[t])}else if(t[0]==\"o\"&&t[1]==\"n\")a=t!=(t=t.replace(ri,\"$1\")),d=t.toLowerCase(),t=d in e||t==\"onFocusOut\"||t==\"onFocusIn\"?d.slice(2):t.slice(2),e.l||(e.l={}),e.l[t+a]=r,r?n?r[Ct]=n[Ct]:(r[Ct]=Gr,e.addEventListener(t,a?zr:Fr,a)):e.removeEventListener(t,a?zr:Fr,a);else{if(i==\"http://www.w3.org/2000/svg\")t=t.replace(/xlink(H|:h)/,\"h\").replace(/sName$/,\"s\");else if(t!=\"width\"&&t!=\"height\"&&t!=\"href\"&&t!=\"list\"&&t!=\"form\"&&t!=\"tabIndex\"&&t!=\"download\"&&t!=\"rowSpan\"&&t!=\"colSpan\"&&t!=\"role\"&&t!=\"popover\"&&t in e)try{e[t]=r??\"\";break e}catch{}typeof r==\"function\"||(r==null||r===!1&&t[4]!=\"-\"?e.removeAttribute(t):e.setAttribute(t,t==\"popover\"&&r==1?\"\":r))}}function Zn(e){return function(t){if(this.l){var r=this.l[t.type+e];if(t[Bt]==null)t[Bt]=Gr++;else if(t[Bt]<r[Ct])return;return r(k.event?k.event(t):t)}}}function Xr(e,t,r,n,i,a,d,l,s,u){var f,c,m,y,N,R,w,P,V,L,z,Pe,et,Rt,tt,M=t.type;if(t.constructor!==void 0)return null;128&r.__u&&(s=!!(32&r.__u),a=[l=t.__e=r.__e]),(f=k.__b)&&f(t);e:if(typeof M==\"function\")try{if(P=t.props,V=M.prototype&&M.prototype.render,L=(f=M.contextType)&&n[f.__c],z=f?L?L.props.value:f.__:n,r.__c?w=(c=t.__c=r.__c).__=c.__E:(V?t.__c=c=new M(P,z):(t.__c=c=new Ut(P,z),c.constructor=M,c.render=Ma),L&&L.sub(c),c.state||(c.state={}),c.__n=n,m=c.__d=!0,c.__h=[],c._sb=[]),V&&c.__s==null&&(c.__s=c.state),V&&M.getDerivedStateFromProps!=null&&(c.__s==c.state&&(c.__s=be({},c.__s)),be(c.__s,M.getDerivedStateFromProps(P,c.__s))),y=c.props,N=c.state,c.__v=t,m)V&&M.getDerivedStateFromProps==null&&c.componentWillMount!=null&&c.componentWillMount(),V&&c.componentDidMount!=null&&c.__h.push(c.componentDidMount);else{if(V&&M.getDerivedStateFromProps==null&&P!==y&&c.componentWillReceiveProps!=null&&c.componentWillReceiveProps(P,z),t.__v==r.__v||!c.__e&&c.shouldComponentUpdate!=null&&c.shouldComponentUpdate(P,c.__s,z)===!1){t.__v!=r.__v&&(c.props=P,c.state=c.__s,c.__d=!1),t.__e=r.__e,t.__k=r.__k,t.__k.some(function(Ve){Ve&&(Ve.__=t)}),Ft.push.apply(c.__h,c._sb),c._sb=[],c.__h.length&&d.push(c);break e}c.componentWillUpdate!=null&&c.componentWillUpdate(P,c.__s,z),V&&c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(y,N,R)})}if(c.context=z,c.props=P,c.__P=e,c.__e=!1,Pe=k.__r,et=0,V)c.state=c.__s,c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),Ft.push.apply(c.__h,c._sb),c._sb=[];else do c.__d=!1,Pe&&Pe(t),f=c.render(c.props,c.state,c.context),c.state=c.__s;while(c.__d&&++et<25);c.state=c.__s,c.getChildContext!=null&&(n=be(be({},n),c.getChildContext())),V&&!m&&c.getSnapshotBeforeUpdate!=null&&(R=c.getSnapshotBeforeUpdate(y,N)),Rt=f!=null&&f.type===Q&&f.key==null?li(f.props.children):f,l=oi(e,Kt(Rt)?Rt:[Rt],t,r,n,i,a,d,l,s,u),c.base=t.__e,t.__u&=-161,c.__h.length&&d.push(c),w&&(c.__E=c.__=null)}catch(Ve){if(t.__v=null,s||a!=null)if(Ve.then){for(t.__u|=s?160:128;l&&l.nodeType==8&&l.nextSibling;)l=l.nextSibling;a[a.indexOf(l)]=null,t.__e=l}else{for(tt=a.length;tt--;)Yr(a[tt]);Kr(t)}else t.__e=r.__e,t.__k=r.__k,Ve.then||Kr(t);k.__e(Ve,t,r)}else a==null&&t.__v==r.__v?(t.__k=r.__k,t.__e=r.__e):l=t.__e=Oa(r.__e,t,r,n,i,a,d,s,u);return(f=k.diffed)&&f(t),128&t.__u?void 0:l}function Kr(e){e&&(e.__c&&(e.__c.__e=!0),e.__k&&e.__k.some(Kr))}function di(e,t,r){for(var n=0;n<r.length;n++)Jr(r[n],r[++n],r[++n]);k.__c&&k.__c(t,e),e.some(function(i){try{e=i.__h,i.__h=[],e.some(function(a){a.call(i)})}catch(a){k.__e(a,i.__v)}})}function li(e){return typeof e!=\"object\"||e==null||e.__b>0?e:Kt(e)?e.map(li):e.constructor!==void 0?null:be({},e)}function Oa(e,t,r,n,i,a,d,l,s){var u,f,c,m,y,N,R,w=r.props||$t,P=t.props,V=t.type;if(V==\"svg\"?i=\"http://www.w3.org/2000/svg\":V==\"math\"?i=\"http://www.w3.org/1998/Math/MathML\":i||(i=\"http://www.w3.org/1999/xhtml\"),a!=null){for(u=0;u<a.length;u++)if((y=a[u])&&\"setAttribute\"in y==!!V&&(V?y.localName==V:y.nodeType==3)){e=y,a[u]=null;break}}if(e==null){if(V==null)return document.createTextNode(P);e=document.createElementNS(i,V,P.is&&P),l&&(k.__m&&k.__m(t,a),l=!1),a=null}if(V==null)w===P||l&&e.data==P||(e.data=P);else{if(a=V==\"textarea\"&&P.defaultValue!=null?null:a&&Wt.call(e.childNodes),!l&&a!=null)for(w={},u=0;u<e.attributes.length;u++)w[(y=e.attributes[u]).name]=y.value;for(u in w)y=w[u],u==\"dangerouslySetInnerHTML\"?c=y:u==\"children\"||u in P||u==\"value\"&&\"defaultValue\"in P||u==\"checked\"&&\"defaultChecked\"in P||jt(e,u,null,y,i);for(u in P)y=P[u],u==\"children\"?m=y:u==\"dangerouslySetInnerHTML\"?f=y:u==\"value\"?N=y:u==\"checked\"?R=y:l&&typeof y!=\"function\"||w[u]===y||jt(e,u,y,w[u],i);if(f)l||c&&(f.__html==c.__html||f.__html==e.innerHTML)||(e.innerHTML=f.__html),t.__k=[];else if(c&&(e.innerHTML=\"\"),oi(t.type==\"template\"?e.content:e,Kt(m)?m:[m],t,r,n,V==\"foreignObject\"?\"http://www.w3.org/1999/xhtml\":i,a,d,a?a[0]:r.__k&&rt(r,0),l,s),a!=null)for(u=a.length;u--;)Yr(a[u]);l&&V!=\"textarea\"||(u=\"value\",V==\"progress\"&&N==null?e.removeAttribute(\"value\"):N!=null&&(N!==e[u]||V==\"progress\"&&!N||V==\"option\"&&N!=w[u])&&jt(e,u,N,w[u],i),u=\"checked\",R!=null&&R!=e[u]&&jt(e,u,R,w[u],i))}return e}function Jr(e,t,r){try{if(typeof e==\"function\"){var n=typeof e.__u==\"function\";n&&e.__u(),n&&t==null||(e.__u=e(t))}else e.current=t}catch(i){k.__e(i,r)}}function si(e,t,r){var n,i;if(k.unmount&&k.unmount(e),(n=e.ref)&&(n.current&&n.current!=e.__e||Jr(n,null,t)),(n=e.__c)!=null){if(n.componentWillUnmount)try{n.componentWillUnmount()}catch(a){k.__e(a,t)}n.base=n.__P=null}if(n=e.__k)for(i=0;i<n.length;i++)n[i]&&si(n[i],t,r||typeof e.type!=\"function\");r||Yr(e.__e),e.__c=e.__=e.__e=void 0}function Ma(e,t,r){return this.constructor(e,r)}function ui(e,t,r){var n,i,a,d;t==document&&(t=document.documentElement),k.__&&k.__(e,t),i=(n=typeof r==\"function\")?null:r&&r.__k||t.__k,a=[],d=[],Xr(t,e=(!n&&r||t).__k=qa(Q,null,[e]),i||$t,$t,t.namespaceURI,!n&&r?[r]:i?null:t.firstChild?Wt.call(t.childNodes):null,a,!n&&r?r:i?i.__e:t.firstChild,n,d),di(a,e,d)}function ci(e){function t(r){var n,i;return this.getChildContext||(n=new Set,(i={})[t.__c]=this,this.getChildContext=function(){return i},this.componentWillUnmount=function(){n=null},this.shouldComponentUpdate=function(a){this.props.value!=a.value&&n.forEach(function(d){d.__e=!0,Wr(d)})},this.sub=function(a){n.add(a);var d=a.componentWillUnmount;a.componentWillUnmount=function(){n&&n.delete(a),d&&d.call(a)}}),r.children}return t.__c=\"__cC\"+ni++,t.__=e,t.Provider=t.__l=(t.Consumer=function(r,n){return r.children(n)}).contextType=t,t}Wt=Ft.slice,k={__e:function(e,t,r,n){for(var i,a,d;t=t.__;)if((i=t.__c)&&!i.__)try{if((a=i.constructor)&&a.getDerivedStateFromError!=null&&(i.setState(a.getDerivedStateFromError(e)),d=i.__d),i.componentDidCatch!=null&&(i.componentDidCatch(e,n||{}),d=i.__d),d)return i.__E=i}catch(l){e=l}throw e}},Qn=0,Ra=function(e){return e!=null&&e.constructor===void 0},Ut.prototype.setState=function(e,t){var r;r=this.__s!=null&&this.__s!=this.state?this.__s:this.__s=be({},this.state),typeof e==\"function\"&&(e=e(be({},r),this.props)),e&&be(r,e),e!=null&&this.__v&&(t&&this._sb.push(t),Wr(this))},Ut.prototype.forceUpdate=function(e){this.__v&&(this.__e=!0,e&&this.__h.push(e),Wr(this))},Ut.prototype.render=Q,Ne=[],ei=typeof Promise==\"function\"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,ti=function(e,t){return e.__v.__b-t.__v.__b},zt.__r=0,$r=Math.random().toString(8),Bt=\"__d\"+$r,Ct=\"__a\"+$r,ri=/(PointerCapture)$|Capture$/i,Gr=0,Fr=Zn(!1),zr=Zn(!0),ni=0;function fi(e){if(e==null)return;let t=\"value\"in e&&typeof e.value==\"object\"?e.value:e;if(!(t==null||typeof t.color!=\"string\"))return{color:t.color,position:t.position??0}}var pi={center:\"auto\",contain:\"contain\",cover:\"cover\",stretch:\"100% 100%\"};function mi(e,t){let r=t.map(i=>`<stop offset='${i.position}' stop-color='${i.color}'/>`).join(\"\");return`<svg xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none' viewBox='0 0 1 1'><defs>${e.kind===\"radial\"?(()=>{let i=Math.hypot(e.endX-e.startX,e.endY-e.startY);return`<radialGradient id='g' cx='${e.startX}' cy='${e.startY}' r='${i}'>${r}</radialGradient>`})():`<linearGradient id='g' x1='${e.startX}' y1='${e.startY}' x2='${e.endX}' y2='${e.endY}'>${r}</linearGradient>`}</defs><rect width='1' height='1' fill='url(#g)'/></svg>`}function nt(e){if(!e.backgroundEnabled)return{backgroundColor:\"transparent\"};let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return{backgroundColor:e.backgroundColor}}function Gt(e){let t=e.backgroundType??\"solid\";if(t===\"gradient\"){let r=e.backgroundGradient,n=(r?.stops??[]).map(fi).filter(a=>a!==void 0).sort((a,d)=>a.position-d.position);if(!r||n.length===0)return{backgroundColor:\"transparent\"};if(n.length===1)return{backgroundColor:n[0].color};let i=mi(r,n);return{backgroundImage:`url(\"data:image/svg+xml,${encodeURIComponent(i)}\")`,backgroundRepeat:\"no-repeat\",backgroundSize:\"100% 100%\"}}if(t===\"image\"){let r=e.backgroundImage?.url??\"\";if(r===\"\")return{backgroundColor:\"transparent\"};let n=e.backgroundImage?.resizeMode??\"cover\";return{backgroundImage:`url(\"${encodeURI(r).replace(/\"/g,\"%22\")}\")`,backgroundPosition:\"center\",backgroundRepeat:\"no-repeat\",backgroundSize:pi[n]}}return e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor}}function g(e){return e===0?\"0\":`${e}px`}function We(e){return e===\"auto\"||e===void 0?\"auto\":g(e)}function it(e){let t={alignItems:e.alignItems,boxSizing:\"border-box\",display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:We(e.height),justifyContent:e.justifyContent,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),position:e.position??\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),Object.assign(t,nt(e)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),t.borderTopLeftRadius=g(e.borderTopLeftRadius??0),t.borderTopRightRadius=g(e.borderTopRightRadius??0),t.borderBottomRightRadius=g(e.borderBottomRightRadius??0),t.borderBottomLeftRadius=g(e.borderBottomLeftRadius??0),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Yt(e,{horizontal:t,showsScrollIndicator:r}){let n=it(e);return n.minHeight??(n.minHeight=0),n.minWidth??(n.minWidth=0),n.WebkitOverflowScrolling=\"touch\",t?(n.flexDirection=\"row\",n.overflowX=\"auto\",n.overflowY=\"hidden\"):(n.overflowX=\"hidden\",n.overflowY=\"auto\"),r||(n.scrollbarWidth=\"none\"),n}function Xt(e){return{fill:e.fillEnabled?e.fillColor:\"none\",fillRule:e.fillRule,fillOpacity:e.fillOpacity,stroke:e.strokeEnabled?e.strokeColor:\"none\",strokeWidth:e.strokeWidth,strokeOpacity:e.strokeOpacity,strokeLinecap:e.strokeLinecap,strokeLinejoin:e.strokeLinejoin,opacity:e.opacity}}function Jt(e){let t={boxSizing:\"border-box\",height:\"100vh\",overflow:\"hidden\",width:\"100vw\"};return Object.assign(t,nt(e)),t}function Zt(e){return{alignItems:e.alignItems,display:e.display,flexDirection:e.flexDirection,gap:g(e.gap??0),height:\"100vh\",justifyContent:e.justifyContent,paddingBottom:g(e.paddingBottom??0),paddingLeft:g(e.paddingLeft??0),paddingRight:g(e.paddingRight??0),paddingTop:g(e.paddingTop??0),width:\"100vw\"}}function Qt(e){let t={boxSizing:\"border-box\",display:e.display===\"none\"?\"none\":\"block\",height:We(e.height),marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,position:\"relative\",width:We(e.width)};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function er(e){let t={color:e.color,display:e.display,fontSize:g(e.fontSize),fontWeight:e.fontWeight,letterSpacing:g(e.letterSpacing),lineHeight:e.lineHeight,marginBottom:g(e.marginBottom??0),marginLeft:g(e.marginLeft??0),marginRight:g(e.marginRight??0),marginTop:g(e.marginTop??0),opacity:e.opacity,overflow:e.overflow,position:e.position??\"relative\",textAlign:e.textAlign,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"};return e.minWidth!==void 0&&(t.minWidth=g(e.minWidth)),e.maxWidth!==void 0&&(t.maxWidth=g(e.maxWidth)),e.minHeight!==void 0&&(t.minHeight=g(e.minHeight)),e.maxHeight!==void 0&&(t.maxHeight=g(e.maxHeight)),typeof e.left==\"number\"&&(t.left=g(e.left)),typeof e.top==\"number\"&&(t.top=g(e.top)),typeof e.right==\"number\"&&(t.right=g(e.right)),typeof e.bottom==\"number\"&&(t.bottom=g(e.bottom)),e.borderEnabled&&(t.borderTopWidth=g(e.borderTopWidth??0),t.borderRightWidth=g(e.borderRightWidth??0),t.borderBottomWidth=g(e.borderBottomWidth??0),t.borderLeftWidth=g(e.borderLeftWidth??0),t.borderColor=e.borderColor,t.borderStyle=e.borderStyle),e.flex!==void 0&&(t.flex=e.flex),e.alignSelf!==\"auto\"&&(t.alignSelf=e.alignSelf),t}function Zr(e){let t={stores:new Map,parents:new Map};return yi(e,null,t),t}function yi(e,t,r){r.parents.set(e.id,t),hi(e,r.stores);for(let n of e.children)yi(n,e.id,r)}function tr(e,t,r,n){let i=new Set,a=r;for(;a!==null&&!i.has(a);){if(i.add(a),t(a)?.has(n))return a;a=e.get(a)??null}}function Qr(e,t,r){return{get:n=>{let i=tr(e,t,r,n);if(i!==void 0)return t(i)?.get(n)}}}function hi(e,t){let r=e.data;if(r!==void 0&&\"localVariables\"in r&&r.localVariables.length>0){let n=new Map,i=new Map;for(let a of r.localVariables){let d=a.value;d?.id===void 0||d.value===void 0||(n.set(d.id,d.value),n.set(a.id,d.value),i.set(a.id,d.id),i.set(d.id,a.id))}n.size>0&&t.set(e.id,{store:n,aliases:i})}for(let n of e.children)hi(n,t)}function vi(e){if(e)return typeof e==\"object\"&&e!==null&&\"id\"in e&&\"value\"in e&&!(\"type\"in e)?e.value:e}function rr(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.some(r=>{let n=vi(r);return n?ja(n,t):!1})}function ja(e,t){return!e?.value||!Array.isArray(e.value)?!1:e.value.every(r=>{let n=vi(r);return n?Ba(n,t):!1})}function gi(e,t){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}function bi(e){switch(e.key){case\"boolean\":return e.value??!1;case\"number\":return e.value??0;case\"string\":return e.value??\"\";case\"product\":return e.value?.productId??\"\";default:return\"\"}}function Ba(e,t){if(!e?.value?.left||!e?.value?.right)return!1;let r=gi(e.value.left,t),n=gi(e.value.right,t);if(r===void 0||n===void 0)return!1;let i=bi(r),a=bi(n);switch(e.type){case\"equals\":return i===a;case\"not-equals\":return i!==a;case\"greater-than\":return i>a;case\"greater-than-or-equal\":return i>=a;case\"less-than\":return i<a;case\"less-than-or-equal\":return i<=a;default:return!1}}function en(e,t,r){let n={...e};for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=a.overrides.style;if(d)for(let l of Object.keys(d))d[l]!==void 0&&(n[l]=d[l])}}return n}function tn(e,t,r){let n;for(let i of t){let a=i.value;if(!(!a?.condition||!a.overrides)&&rr(a.condition,r)){let d=\"actions\"in a.overrides?a.overrides.actions:void 0;if(d)for(let l of d){let s=\"value\"in l?l.value:l;s&&s.interactionId===e&&(n=s.action)}}}return n}function Ha(e,t){if(e?.type){if(e.type===\"literal\")return e.value;if(!(!e.value||!(\"id\"in e.value)||!e.value.id))return t.get(e.value.id)}}function Ua(e,t){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(!e.variableId)return;let r=t.get(e.variableId);if(r?.key===\"product\")return r.value?.productId}function rn(e,t,r){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let n=e.payload;if(!n?.newValue||!n.variableId)break;let i=Ha(n.newValue,t);i!==void 0&&r.onSetVariable(n.variableId,i);break}case\"close-paywall\":r.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let n=Ua(e.payload,t);n!==void 0&&r.onPurchaseProduct(n);break}}}function $a(e,t){switch(t.key){case\"string\":return typeof e==\"string\"?{key:\"string\",value:e}:void 0;case\"number\":return typeof e==\"number\"?{key:\"number\",value:e}:void 0;case\"boolean\":return typeof e==\"boolean\"?{key:\"boolean\",value:e}:void 0;case\"product\":return typeof e==\"string\"||typeof e==\"number\"||typeof e==\"boolean\"?{key:\"product\",value:{productId:String(e)}}:void 0;default:return}}function Fa(e,t,r,n){if(!e?.type)return;if(e.type===\"literal\")return e.value;if(e.type===\"variable-reference\")return!e.value||!(\"id\"in e.value)||!e.value.id?void 0:r.get(e.value.id);if(!e.value||!(\"field\"in e.value)||!e.value.field)return;let i=t?.[e.value.field];if(i===void 0)return;let a=r.get(n);if(a!==void 0)return $a(i,a)}function za(e,t,r){if(!e?.type)return;if(e.type===\"literal\")return e.productId;if(e.type===\"variable-reference\"){if(!e.variableId)return;let i=r.get(e.variableId);return i?.key===\"product\"?i.value?.productId:void 0}if(!e.field)return;let n=t?.[e.field];return typeof n==\"string\"?n:void 0}function nn(e,t,r,n){if(e?.type)switch(e.type){case\"none\":break;case\"set-variable\":{let i=e.payload;if(!i?.newValue||!i.variableId)break;let a=Fa(i.newValue,t,r,i.variableId);a!==void 0&&n.onSetVariable(i.variableId,a);break}case\"close-paywall\":n.onClosePaywall();break;case\"purchase-product\":{if(!e.payload)break;let i=za(e.payload,t,r);i!==void 0&&n.onPurchaseProduct(i);break}}}var on={alignItems:\"stretch\",boxSizing:\"border-box\",display:\"flex\",flexBasis:\"auto\",flexDirection:\"column\",flexShrink:0,margin:0,minHeight:0,minWidth:0,padding:0,position:\"relative\"},Wa={boxSizing:\"border-box\",display:\"block\",margin:0,padding:0,whiteSpace:\"pre-wrap\",wordWrap:\"break-word\"},Ka={boxSizing:\"border-box\",display:\"block\"},Ga={...on,cursor:\"pointer\",touchAction:\"manipulation\",userSelect:\"none\"},Ya={...on,overflowX:\"hidden\",overflowY:\"auto\",WebkitOverflowScrolling:\"touch\"},Xa={image:Ka,pressable:Ga,scroll:Ya,text:Wa,view:on},Ti=[\"flex\",\"gap\"],Ja=[\"backgroundType\",\"backgroundGradient\",\"backgroundImage\"],Za=new Set([...Ti,...Ja]),Qa=new Set([\"aspectRatio\",\"flex\",\"flexGrow\",\"flexShrink\",\"fontWeight\",\"opacity\",\"zIndex\"]);function Si(e,t){return typeof t==\"number\"&&!Qa.has(e)?t===0?0:`${t}px`:t}var ed={center:\"none\",contain:\"contain\",cover:\"cover\",stretch:\"fill\"};function nr(e){return ed[e??\"cover\"]}function an(e){if(!e)return{};let t=[];return(e.x!==void 0||e.y!==void 0)&&t.push(`translate3d(${e.x??0}px, ${e.y??0}px, 0)`),e.rotate!==void 0&&t.push(`rotate(${e.rotate}deg)`),e.scale!==void 0&&t.push(`scale(${e.scale})`),e.scaleX!==void 0&&t.push(`scaleX(${e.scaleX})`),e.scaleY!==void 0&&t.push(`scaleY(${e.scaleY})`),{...e.opacity===void 0?{}:{opacity:e.opacity},...e.backgroundColor===void 0?{}:{backgroundColor:e.backgroundColor},...t.length===0?{}:{transform:t.join(\" \")},...e.transformOrigin===void 0?{}:{transformOrigin:`${e.transformOrigin.x*100}% ${e.transformOrigin.y*100}%`}}}function ir(e,t,r){let n={...Xa[t]},i=(d,l)=>{delete n[d],n[d]=Si(d,l)};for(let d of Ti){let l=e[d];l!==void 0&&(n[d]=Si(d,l))}for(let[d,l]of Object.entries(e))l===void 0||Za.has(d)||typeof l!=\"string\"&&typeof l!=\"number\"||i(d,l);return(e.borderTopWidth!==void 0||e.borderRightWidth!==void 0||e.borderBottomWidth!==void 0||e.borderLeftWidth!==void 0||e.borderColor!==void 0)&&e.borderStyle===void 0&&(n.borderStyle=\"solid\"),(e.backgroundType===\"gradient\"||e.backgroundType===\"image\")&&(delete n.backgroundColor,Object.assign(n,Gt({backgroundColor:typeof e.backgroundColor==\"string\"?e.backgroundColor:void 0,backgroundType:e.backgroundType,backgroundGradient:e.backgroundGradient,backgroundImage:e.backgroundImage}))),Object.assign(n,an(r)),n}var qt,A,dn,xi,ar=0,Ai=[],C=k,wi=C.__b,Pi=C.__r,Vi=C.diffed,Ni=C.__c,_i=C.unmount,ki=C.__;function sn(e,t){C.__h&&C.__h(A,e,ar||t),ar=0;var r=A.__H||(A.__H={__:[],__h:[]});return e>=r.__.length&&r.__.push({}),r.__[e]}function Ri(e){return ar=1,td(qi,e)}function td(e,t,r){var n=sn(qt++,2);if(n.t=e,!n.__c&&(n.__=[r?r(t):qi(void 0,t),function(l){var s=n.__N?n.__N[0]:n.__[0],u=n.t(s,l);s!==u&&(n.__N=[u,n.__[1]],n.__c.setState({}))}],n.__c=A,!A.__f)){var i=function(l,s,u){if(!n.__c.__H)return!0;var f=n.__c.__H.__.filter(function(m){return m.__c});if(f.every(function(m){return!m.__N}))return!a||a.call(this,l,s,u);var c=n.__c.props!==l;return f.some(function(m){if(m.__N){var y=m.__[0];m.__=m.__N,m.__N=void 0,y!==m.__[0]&&(c=!0)}}),a&&a.call(this,l,s,u)||c};A.__f=!0;var a=A.shouldComponentUpdate,d=A.componentWillUpdate;A.componentWillUpdate=function(l,s,u){if(this.__e){var f=a;a=void 0,i(l,s,u),a=f}d&&d.call(this,l,s,u)},A.shouldComponentUpdate=i}return n.__N||n.__}function j(e,t){var r=sn(qt++,7);return id(r.__H,t)&&(r.__=e(),r.__H=t,r.__h=e),r.__}function ee(e,t){return ar=8,j(function(){return e},t)}function Ci(e){var t=A.context[e.__c],r=sn(qt++,9);return r.c=e,t?(r.__==null&&(r.__=!0,t.sub(A)),t.props.value):e.__}function rd(){for(var e;e=Ai.shift();){var t=e.__H;if(e.__P&&t)try{t.__h.some(or),t.__h.some(ln),t.__h=[]}catch(r){t.__h=[],C.__e(r,e.__v)}}}C.__b=function(e){A=null,wi&&wi(e)},C.__=function(e,t){e&&t.__k&&t.__k.__m&&(e.__m=t.__k.__m),ki&&ki(e,t)},C.__r=function(e){Pi&&Pi(e),qt=0;var t=(A=e.__c).__H;t&&(dn===A?(t.__h=[],A.__h=[],t.__.some(function(r){r.__N&&(r.__=r.__N),r.u=r.__N=void 0})):(t.__h.some(or),t.__h.some(ln),t.__h=[],qt=0)),dn=A},C.diffed=function(e){Vi&&Vi(e);var t=e.__c;t&&t.__H&&(t.__H.__h.length&&(Ai.push(t)!==1&&xi===C.requestAnimationFrame||((xi=C.requestAnimationFrame)||nd)(rd)),t.__H.__.some(function(r){r.u&&(r.__H=r.u),r.u=void 0})),dn=A=null},C.__c=function(e,t){t.some(function(r){try{r.__h.some(or),r.__h=r.__h.filter(function(n){return!n.__||ln(n)})}catch(n){t.some(function(i){i.__h&&(i.__h=[])}),t=[],C.__e(n,r.__v)}}),Ni&&Ni(e,t)},C.unmount=function(e){_i&&_i(e);var t,r=e.__c;r&&r.__H&&(r.__H.__.some(function(n){try{or(n)}catch(i){t=i}}),r.__H=void 0,t&&C.__e(t,r.__v))};var Ii=typeof requestAnimationFrame==\"function\";function nd(e){var t,r=function(){clearTimeout(n),Ii&&cancelAnimationFrame(t),setTimeout(e)},n=setTimeout(r,35);Ii&&(t=requestAnimationFrame(r))}function or(e){var t=A,r=e.__c;typeof r==\"function\"&&(e.__c=void 0,r()),A=t}function ln(e){var t=A;e.__c=e.__(),A=t}function id(e,t){return!e||e.length!==t.length||t.some(function(r,n){return r!==e[n]})}function qi(e,t){return typeof t==\"function\"?t(e):t}var od=0;function b(e,t,r,n,i,a){t||(t={});var d,l,s=t;if(\"ref\"in s)for(l in s={},t)l==\"ref\"?d=t[l]:s[l]=t[l];var u={type:e,props:s,key:r,ref:d,__k:null,__:null,__b:0,__e:null,__c:null,constructor:void 0,__v:--od,__i:-1,__u:0,__source:i,__self:a};if(typeof e==\"function\"&&(d=e.defaultProps))for(l in d)s[l]===void 0&&(s[l]=d[l]);return k.vnode&&k.vnode(u),u}var ad=new Map,Di=ci(null);function Ei(e){let t=JSON.stringify(e);window.ReactNativeWebView?window.ReactNativeWebView.postMessage(t):window.parent.postMessage(e,\"*\")}function Li({snapshot:e,componentArtifacts:t,locale:r,children:n}){let i=j(()=>Zr(e),[e]),a=(e.type===\"root\"?e.data.localization?.defaultLocale:void 0)??\"en\",[d,l]=Ri(()=>{let w=new Map;for(let[P,{store:V}]of i.stores)w.set(P,V);return w}),s=j(()=>new Map,[i,d]),u=ee(w=>{let P=s.get(w);if(P)return P;let V=Qr(i.parents,L=>d.get(L),w);return s.set(w,V),V},[s,d,i]),f=ee((w,P,V)=>{l(L=>{let z=tr(i.parents,Ve=>L.get(Ve),w,P);if(z===void 0)return L;let Pe=L.get(z);if(!Pe)return L;let et=new Map(Pe);et.set(P,V);let tt=i.stores.get(z)?.aliases?.get(P);tt&&et.set(tt,V);let M=new Map(L);return M.set(z,et),M})},[i]),c=ee(()=>{Ei({type:\"paywall:close\"})},[]),m=ee(w=>{Ei({type:\"paywall:purchase\",productId:w})},[]),y=ee((w,P)=>{console.warn(`onSetVariable called directly for \"${w}\" without node context. Use the scoped callback from useInteractions instead.`)},[]),N=j(()=>({onClosePaywall:c,onPurchaseProduct:m,onSetVariable:y}),[c,m,y]),R=j(()=>({getNodeVariables:u,setNodeVariable:f,callbacks:N,componentArtifacts:t,locale:r,defaultLocale:a}),[u,f,N,t,r,a]);return b(Di.Provider,{value:R,children:n})}function te(){let e=Ci(Di);return e||{getNodeVariables:()=>ad,setNodeVariable:()=>{},callbacks:{onClosePaywall:()=>{},onPurchaseProduct:()=>{},onSetVariable:()=>{}},componentArtifacts:void 0,locale:void 0,defaultLocale:\"en\"}}var dd={alignSelf:\"flex-start\",backgroundColor:\"#18181b\",borderRadius:\"999px\",boxSizing:\"border-box\",color:\"#fafafa\",display:\"inline-flex\",fontFamily:\"inherit\",fontSize:\"11px\",fontWeight:600,lineHeight:\"16px\",padding:\"2px 8px\"};function Oi({props:e}){let t=typeof e.label==\"string\"?e.label:\"New\";return b(\"span\",{style:dd,children:t})}var Mi={\"sample-badge\":Oi};function ji(e,t){let r={};for(let n of e){let i=n.value;if(!i?.name)continue;let a=i.value;if(a?.type){if(a.type===\"literal\"){a.value&&(r[i.name]=a.value.value);continue}if(a.type===\"variable-reference\"){if(!a.value||!(\"id\"in a.value)||!a.value.id)continue;let d=t.get(a.value.id);d!==void 0&&(r[i.name]=d.value)}}}return r}var un={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontFamily:\"inherit\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",position:\"relative\",textAlign:\"center\"};function dr(e,t,r){return{...ir(e,t,r)}}function ld(e,t){if(!e)return;for(let n of[t,\"default\"]){let i=e[n];if(i)return i}let r=Object.keys(e)[0];return r===void 0?void 0:e[r]}function cn({node:e,slot:t,fireAction:r}){switch(e.type){case\"view\":case\"scroll\":return b(\"div\",{style:dr(e.style,e.type,e.motion),children:e.children.map((n,i)=>b(cn,{fireAction:r,node:n,slot:t},i))});case\"pressable\":{let n=e.action;return b(\"div\",{onClick:n===void 0?void 0:()=>r(n),style:dr(e.style,\"pressable\",e.motion),children:e.children.map((a,d)=>b(cn,{fireAction:r,node:a,slot:t},d))})}case\"text\":return b(\"div\",{style:dr(e.style,\"text\",e.motion),children:e.text});case\"image\":return b(\"img\",{alt:\"\",src:e.src,style:{...dr(e.style,\"image\",e.motion),objectFit:nr(e.resizeMode)??\"cover\"}});case\"slot\":return b(Q,{children:t});case\"placeholder\":return b(\"div\",{style:un,children:e.reason});default:return null}}function Bi({node:e,children:t}){let{getNodeVariables:r,setNodeVariable:n,callbacks:i,componentArtifacts:a}=te(),d=r(e.id),l=j(()=>({...i,onSetVariable:(m,y)=>{n(e.id,m,y)}}),[i,e.id,n]),s=ee((m,y)=>{let R=e.data.actionBindings.find(w=>w.value?.name===m)?.value?.action;R&&nn(R,y,d,l)},[e.data.actionBindings,d,l]);if(e.data.componentSource===\"builtin\"){let m=Mi[e.data.componentSlug];if(!m)return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${e.data.componentSlug}\" preview unavailable`});let y=ji(e.data.props,d);return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(m,{fireAction:s,props:y,children:t})})}let u=e.data.componentSource===\"local\"&&e.data.componentPath!==\"\",f=u?a?.localTrees?.[e.data.componentPath]:a?.trees[e.data.contentHash],c=ld(f,e.data.previewState);if(!c){let m=u?e.data.componentPath:e.data.componentSlug;return b(\"div\",{\"data-node-id\":e.id,style:un,children:`Component \"${m}\" preview unavailable`})}return b(\"div\",{\"data-node-id\":e.id,style:{display:\"contents\"},children:b(cn,{fireAction:s,node:c.root,slot:t})})}function W(e,t,r){let{getNodeVariables:n}=te(),i=n(e);return j(()=>en(t,r,i),[t,r,i])}function Hi({node:e}){let t=W(e.id,e.data.style,e.data.states),r=Xt(t);return b(\"path\",{d:e.data.d,fill:r.fill,fillOpacity:r.fillOpacity,fillRule:r.fillRule,opacity:r.opacity,stroke:r.stroke,strokeLinecap:r.strokeLinecap,strokeLinejoin:r.strokeLinejoin,strokeOpacity:r.strokeOpacity,strokeWidth:r.strokeWidth,transform:e.data.transform,vectorEffect:\"non-scaling-stroke\"})}var v={InvalidCommand:\"invalid_command\",InvalidPath:\"invalid_path\",TypeMismatch:\"type_mismatch\",MissingField:\"missing_field\",MissingArrayItem:\"missing_array_item\",MissingTreeNode:\"missing_tree_node\",DuplicateArrayItemId:\"duplicate_array_item_id\",DuplicateArrayPos:\"duplicate_array_pos\",DuplicateTreeNodeId:\"duplicate_tree_node_id\",DuplicateTreePos:\"duplicate_tree_pos\",InvalidTreeParent:\"invalid_tree_parent\",TreeCycle:\"tree_cycle\",TreeNodeValueMustBeObject:\"tree_node_value_must_be_object\",ReservedIdentifier:\"reserved_identifier\"},fn=class extends Error{constructor(r,n=\"\"){super(n?`${r}: ${n}`:r);p(this,\"code\");this.name=\"CoreError\",this.code=r}},S=(e,t)=>new fn(e,t);var I=\"$root\";var re=e=>({kind:\"string\",value:e}),ot=e=>({kind:\"number\",value:e}),at=e=>({kind:\"boolean\",value:e}),ne=(e={})=>({kind:\"object\",fields:e}),pn=(e=[])=>({kind:\"array\",items:e}),mn=(e=[])=>({kind:\"tree\",nodes:e}),Ui=e=>e?[...e]:[],_=e=>{switch(e.kind){case\"string\":case\"number\":case\"boolean\":return{...e};case\"object\":{let t={};for(let[r,n]of Object.entries(e.fields))t[r]=_(n);return{kind:\"object\",fields:t}}case\"array\":return{kind:\"array\",items:e.items.map(t=>({id:t.id,pos:t.pos,value:_(t.value)}))};case\"tree\":return{kind:\"tree\",nodes:e.nodes.map(t=>({id:t.id,parent:t.parent,pos:t.pos,value:_(t.value)}))}}};var lr=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,$i=(e,t)=>e.pos<t.pos?-1:e.pos>t.pos?1:e.id<t.id?-1:e.id>t.id?1:0,yn=(e,t)=>e.parent<t.parent?-1:e.parent>t.parent?1:$i(e,t);var B=e=>{switch(e.kind){case\"string\":case\"boolean\":return;case\"number\":if(Number.isNaN(e.value)||!Number.isFinite(e.value))throw S(v.InvalidCommand,\"number must be finite\");return;case\"object\":for(let t of Object.values(e.fields))B(t);return;case\"array\":{let t=new Set,r=new Set;for(let n of e.items){if(t.has(n.id))throw S(v.DuplicateArrayItemId,\"duplicate array item id\");if(r.has(n.pos))throw S(v.DuplicateArrayPos,\"duplicate array position\");t.add(n.id),r.add(n.pos),B(n.value)}return}case\"tree\":{let t=new Set,r=new Map,n=new Map;for(let s of e.nodes){if(s.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(s.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(t.has(s.id))throw S(v.DuplicateTreeNodeId,\"duplicate tree node id\");t.add(s.id),r.set(s.id,s);let u=n.get(s.parent)??new Set;if(u.has(s.pos))throw S(v.DuplicateTreePos,\"duplicate tree position\");u.add(s.pos),n.set(s.parent,u),B(s.value)}for(let s of e.nodes)if(s.parent!==I&&!r.has(s.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");let i=new Set,a=new Set,d=s=>{if(i.has(s))throw S(v.TreeCycle,\"tree contains cycle\");if(a.has(s))return;i.add(s);let u=r.get(s);u&&u.parent!==I&&d(u.parent),i.delete(s),a.add(s)},l=[...r.keys()].sort();for(let s of l)d(s);return}}};var hn=(e,t)=>{B(e);let r=_(e);for(let n of t)sd(r,{...n,path:Ui(n.path)});return B(r),r},sd=(e,t)=>{switch(t.kind){case\"value.set\":ud(e,t.path,t.value);return;case\"object.set\":cd(e,t.path,t.key,t.value);return;case\"object.delete\":fd(e,t.path,t.key);return;case\"array.insert\":pd(e,t.path,t.item);return;case\"array.move\":md(e,t.path,t.id,t.pos);return;case\"array.delete\":yd(e,t.path,t.id);return;case\"tree.insert\":hd(e,t.path,t.node);return;case\"tree.move\":gd(e,t.path,t.id,t.parent,t.pos);return;case\"tree.delete\":bd(e,t.path,t.id);return}},ud=(e,t,r)=>{if(t.length===0){Fi(e,_(r));return}K(e,t,n=>{Fi(n,_(r))})},cd=(e,t,r,n)=>{if(!r)throw S(v.InvalidCommand,\"object.set requires key and value\");K(e,t,i=>{if(i.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");i.fields[r]=_(n)})},fd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"object.delete requires key\");K(e,t,n=>{if(n.kind!==\"object\")throw S(v.TypeMismatch,\"object command requires object target\");if(!Object.hasOwn(n.fields,r))throw S(v.MissingField,\"object field does not exist\");delete n.fields[r]})},pd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");for(let i of n.items){if(i.id===r.id)throw S(v.DuplicateArrayItemId,\"array item id already exists\");if(i.pos===r.pos)throw S(v.DuplicateArrayPos,\"array item position already exists\")}n.items.push({id:r.id,pos:r.pos,value:_(r.value)}),n.items.sort(lr)})},md=(e,t,r,n)=>{if(!r||!n)throw S(v.InvalidCommand,\"array.move requires id and pos\");K(e,t,i=>{if(i.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let a=-1;for(let d=0;d<i.items.length;d+=1){let l=i.items[d];if(l?.id===r){a=d;continue}if(l?.pos===n)throw S(v.DuplicateArrayPos,\"array item position already exists\")}if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");i.items[a]={...i.items[a],pos:n},i.items.sort(lr)})},yd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"array.delete requires id\");K(e,t,n=>{if(n.kind!==\"array\")throw S(v.TypeMismatch,\"array command requires array target\");let i=zi(n.items,r);if(i===-1)throw S(v.MissingArrayItem,\"array item does not exist\");n.items.splice(i,1)})},hd=(e,t,r)=>{K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(r.id===I)throw S(v.ReservedIdentifier,\"tree node id uses reserved root identifier\");if(r.value.kind!==\"object\")throw S(v.TreeNodeValueMustBeObject,\"tree node value must be object\");if(Et(n.nodes,r.id)!==-1)throw S(v.DuplicateTreeNodeId,\"tree node id already exists\");if(!Wi(n.nodes,r.parent))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(Ki(n.nodes,r.parent,r.pos,\"\"))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");n.nodes.push({id:r.id,parent:r.parent,pos:r.pos,value:_(r.value)}),n.nodes.sort(yn)})},gd=(e,t,r,n,i)=>{if(!r||!n||!i)throw S(v.InvalidCommand,\"tree.move requires id, parent, and pos\");K(e,t,a=>{if(a.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");let d=Et(a.nodes,r);if(d===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");if(!Wi(a.nodes,n))throw S(v.InvalidTreeParent,\"tree parent does not exist\");if(n===r||vd(a.nodes,n,r))throw S(v.TreeCycle,\"tree move would create cycle\");if(Ki(a.nodes,n,i,r))throw S(v.DuplicateTreePos,\"tree sibling position already exists\");a.nodes[d]={...a.nodes[d],parent:n,pos:i},a.nodes.sort(yn)})},bd=(e,t,r)=>{if(!r)throw S(v.InvalidCommand,\"tree.delete requires id\");K(e,t,n=>{if(n.kind!==\"tree\")throw S(v.TypeMismatch,\"tree command requires tree target\");if(Et(n.nodes,r)===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");let i=new Set([r]),a=!0;for(;a;){a=!1;for(let l of n.nodes)i.has(l.parent)&&!i.has(l.id)&&(i.add(l.id),a=!0)}let d=n.nodes.filter(l=>!i.has(l.id));n.nodes.splice(0,n.nodes.length,...d)})},K=(e,t,r)=>{if(t.length===0){r(e);return}let n=t[0],i=t.slice(1);switch(n.kind){case\"field\":if(e.kind!==\"object\")throw S(v.TypeMismatch,\"field path requires object\");if(!Object.hasOwn(e.fields,n.key))throw S(v.MissingField,\"field does not exist\");K(e.fields[n.key],i,r);return;case\"item\":if(e.kind!==\"array\")throw S(v.TypeMismatch,\"item path requires array\");{let a=zi(e.items,n.id);if(a===-1)throw S(v.MissingArrayItem,\"array item does not exist\");K(e.items[a].value,i,r)}return;case\"node\":if(e.kind!==\"tree\")throw S(v.TypeMismatch,\"node path requires tree\");{let a=Et(e.nodes,n.id);if(a===-1)throw S(v.MissingTreeNode,\"tree node does not exist\");K(e.nodes[a].value,i,r)}return}},Fi=(e,t)=>{for(let r of Object.keys(e))delete e[r];Object.assign(e,t)},zi=(e,t)=>e.findIndex(r=>r.id===t),Et=(e,t)=>e.findIndex(r=>r.id===t),Wi=(e,t)=>t===I||Et(e,t)!==-1,Ki=(e,t,r,n)=>e.some(i=>i.parent===t&&i.id!==n&&i.pos===r),vd=(e,t,r)=>{if(t===I)return!1;let n=new Map(e.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}};var gn=class{next(){let t=globalThis.crypto;if(t?.getRandomValues){let r=new Uint32Array(2);t.getRandomValues(r);let n=r[0]>>>5,i=r[1]>>>6;return(n*67108864+i)/9007199254740992}return Math.random()}},bn=class{constructor(t){p(this,\"charset\");p(this,\"random\");p(this,\"useJitter\");this.charset=t?.charset??Xi(),this.random=t?.random,this.useJitter=t?.useJitter??!0}between(t,r){return this.useJitter?wd(t,r,this.charset,this.random??new gn):Ji(t,r,this.charset)}},Sd=e=>{if(e.chars.length<7)throw new Error(\"charSet must be at least 7 characters long\");if([...e.chars].sort().join(\"\")!==e.chars)throw new Error(\"charSet must be sorted\");let r={},n={};for(let s=0;s<e.chars.length;s+=1){let u=e.chars[s];r[u]=s,n[s]=u}let i=r[e.firstPositive],a=r[e.mostPositive],d=r[e.mostNegative];if(i===void 0)throw new Error(\"invalid firstPositive\");if(a===void 0)throw new Error(\"invalid mostPositive\");if(d===void 0)throw new Error(\"invalid mostNegative\");if(a-i<3)throw new Error(\"mostPositive must be at least 3 characters away from neutral\");if(i-d<3)throw new Error(\"mostNegative must be at least 3 characters away from neutral\");let l=e.jitterRange??Math.floor(wn(e.chars.length,3)/5);return{chars:e.chars,byChar:r,byCode:n,length:e.chars.length,first:n[0],last:n[e.chars.length-1],firstPositive:e.firstPositive,mostPositive:e.mostPositive,firstNegative:n[i-1],mostNegative:e.mostNegative,jitterRange:l,paddingDict:Rd(l,e.chars.length)}},Td=Sd({chars:\"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\",firstPositive:\"a\",mostPositive:\"z\",mostNegative:\"A\"}),Xi=()=>Td;var ke=()=>new bn({charset:Xi()});var xd=e=>`${e.firstPositive}${e.byCode[0]}`,Gi=(e,t)=>{sr(e,t)},Ji=(e,t,r)=>{if(e!==void 0&&Gi(e,r),t!==void 0&&Gi(t,r),e===void 0&&t===void 0)return xd(r);if(e===void 0)return Pd(sr(t,r),r);if(t===void 0)return Zi(sr(e,r),r);if(e>=t)throw new Error(`${e} >= ${t}`);return Vd(e,t,r)};var wd=(e,t,r,n)=>{let i=Ji(e,t,r),a=_d(i,t,r);return a>0?Nd(i,a,r,n):Qi(i,r,n)};var sr=(e,t)=>{let r=eo(e,t),n=Tn(r,t);if(n>e.length)throw new Error(`invalid order key length: ${e}`);return e.slice(0,n)},Zi=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[t.length-1];return[...n].some(a=>a!==i)?`${r}${ao(n,t)}`:no(kd(r,t),\"lower\",t)},Pd=(e,t)=>{to(e,t);let[r,n]=ro(e,t),i=t.byCode[0];return[...n].some(a=>a!==i)?`${r}${vn(n,t,!1)}`:no(Id(r,t),\"upper\",t)},Vd=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),a=Sn(n,i,r);a===1&&(n=`${n}${r.first}`,a=r.length);let d=io(Math.floor(a/2),r);return xn(n,d,r)},Qi=(e,t,r)=>{let n=r.next();if(n<0||n>=1)throw new Error(`random value out of range: ${n}`);return xn(e,io(Math.floor(n*t.jitterRange),t),t)},Nd=(e,t,r,n)=>Qi(`${e}${r.first.repeat(t)}`,r,n),Yi=(e,t)=>{let r=t.jitterRange-e;for(let[n,i]of Object.entries(t.paddingDict))if(i>r)return Number(n);return 0},_d=(e,t,r)=>{let n=sr(e,r),i=Zi(n,r),a=0;if(t!==void 0){let l=Sn(e,t,r);l<r.jitterRange+1&&(a=Math.max(a,Yi(l,r)))}let d=Sn(e,i,r);return d<r.jitterRange+1&&(a=Math.max(a,Yi(d,r))),a},eo=(e,t)=>{if(e.length===0)return\"\";let r=0;if(e[0]===t.mostPositive)for(;r<e.length&&e[r]===t.mostPositive;)r+=1;if(e[0]===t.mostNegative)for(;r<e.length&&e[r]===t.mostNegative;)r+=1;return r>=e.length?e:e.slice(0,r+1)},ur=(e,t,r)=>{if(e.length===0)return 0;let n=e[0];if(n>r.mostPositive||n<r.mostNegative)throw new Error(\"invalid firstChar on key\");return n===r.mostPositive&&t===\"positive\"?_e(n,r.mostNegative,r)+1+ur(e.slice(1),t,r):n===r.mostNegative&&t===\"negative\"?_e(n,r.mostPositive,r)+1+ur(e.slice(1),t,r):t===\"positive\"?_e(n,r.mostNegative,r)+2:_e(n,r.mostPositive,r)+2},Tn=(e,t)=>{if(e.length===0)throw new Error(\"head cannot be empty\");let r=e[0];if(r>t.mostPositive||r<t.mostNegative)throw new Error(\"invalid firstChar on key\");return r===t.mostPositive?_e(r,t.firstPositive,t)+1+ur(e.slice(1),\"positive\",t):r===t.mostNegative?_e(r,t.firstNegative,t)+1+ur(e.slice(1),\"negative\",t):r>=t.firstPositive?_e(r,t.firstPositive,t)+2:_e(r,t.firstNegative,t)+2},to=(e,t)=>{if(Tn(e,t)!==e.length)throw new Error(`invalid integer length: ${e}`)},ro=(e,t)=>{let r=eo(e,t);return[r,e.slice(r.length)]},kd=(e,t)=>{let r=e>=t.firstPositive,n=ao(e,t),i=e.at(-1)===t.mostPositive,a=n.at(-1)===t.mostPositive;return r&&a?`${n}${t.mostNegative}`:!r&&i?e.slice(0,-1):n},Id=(e,t)=>{let r=e>=t.firstPositive,n=e.at(-1)===t.mostNegative;return r&&n?vn(e.slice(0,-1),t,!1):!r&&n?`${e}${t.mostPositive}`:vn(e,t,!1)},no=(e,t,r)=>{let n=Tn(e,r),i=t===\"upper\"?r.last:r.first;return`${e}${i.repeat(n-e.length)}`},_e=(e,t,r)=>{let n=r.byChar[e],i=r.byChar[t];if(n===void 0||i===void 0)throw new Error(\"invalid character in distance calculation\");return Math.abs(n-i)},cr=(e,t,r,n)=>{let i=Math.max(e.length,t.length);return r===\"start\"?[n.repeat(i-e.length)+e,n.repeat(i-t.length)+t]:[e+n.repeat(i-e.length),t+n.repeat(i-t.length)]},io=(e,t)=>{if(e===0)return t.byCode[0];let r=\"\",n=e;for(;n>0;)r=`${t.byCode[n%t.length]}${r}`,n=Math.floor(n/t.length);return r},Ad=(e,t)=>{let r=0;for(let n=0;n<e.length;n+=1){let i=e.length-n-1;r+=t.byChar[e[n]]*wn(t.length,i)}return r},xn=(e,t,r)=>{let[n,i]=cr(e,t,\"start\",r.first),a=[],d=0;for(let l=n.length-1;l>=0;l-=1){let s=r.byChar[n[l]]+r.byChar[i[l]]+d;d=Math.floor(s/r.length),a.push(r.byCode[s%r.length])}return d>0&&a.push(r.byCode[d]),a.reverse().join(\"\")},oo=(e,t,r,n)=>{let[i,a]=cr(e,t,\"start\",r.first),d=[],l=0;for(let u=i.length-1;u>=0;u-=1){let f=r.byChar[i[u]],c=r.byChar[a[u]]+l;f<c?(l=1,f+=r.length):l=0,d.push(r.byCode[f-c])}if(l>0)throw new Error(\"subtraction result is negative\");let s=d.reverse().join(\"\");return n?s.replace(new RegExp(`^${r.first}+`),\"\")||r.first:s},ao=(e,t)=>xn(e,t.byCode[1],t),vn=(e,t,r)=>oo(e,t.byCode[1],t,r),Sn=(e,t,r)=>{let[n,i]=cr(e,t,\"end\",r.first),[a,d]=n>i?[i,n]:[n,i];return Ad(oo(d,a,r,!0),r)};function Rd(e,t){let r={};for(let n=0;n<100;n+=1){let i=wn(t,n);if(r[n]=i,i>e)break}return r}function wn(e,t){let r=1;for(let n=0;n<t;n+=1)r*=e;return r}var T={InvalidSchema:\"invalid_schema\",MissingRequired:\"missing_required\",TypeMismatch:\"type_mismatch\",LiteralMismatch:\"literal_mismatch\",ValidatorFailed:\"validator_failed\",UnionNoMatch:\"union_no_match\",EitherNoMatch:\"either_no_match\",TreeInvalidRootType:\"tree_invalid_root_type\",TreeInvalidChildType:\"tree_invalid_child_type\",TreeUnknownVariant:\"tree_unknown_variant\"},fr=class extends Error{constructor(r,n=\"\",i){super(n?`${r}: ${n}`:r);p(this,\"code\");p(this,\"valuePath\");p(this,\"schemaPath\");this.name=\"SchemaError\",this.code=r,this.valuePath=i?.valuePath??[],this.schemaPath=i?.schemaPath??[]}},x=(e,t,r)=>new fr(e,t,r),Pn=e=>e instanceof fr;var H=(e,t)=>x(T.InvalidSchema,t,{valuePath:[],schemaPath:e}),Z=(e,t,r)=>{if(typeof e!=\"object\"||e===null||Array.isArray(e))throw H(t,r);return e},ve=(e,t,r)=>{if(typeof e!=\"string\")throw H(t,r);return e},Vn=(e,t)=>{if(typeof e!=\"number\"||Number.isNaN(e)||!Number.isFinite(e))throw H(t,\"validator value must be a finite number\");return e};var qd=(e,t)=>{if(e!==void 0){if(typeof e!=\"string\")throw H(t,\"value must be a string\");return e}},lo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"string validators must be an array\");return e.map((r,n)=>Ed(r,[...t,n]))}},so=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"number validators must be an array\");return e.map((r,n)=>Dd(r,[...t,n]))}},uo=(e,t)=>{if(e!==void 0){if(!Array.isArray(e))throw H(t,\"array validators must be an array\");return e.map((r,n)=>Ld(r,[...t,n]))}},Ed=(e,t)=>{let r=Z(e,t,\"string validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":case\"length\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"regex\":return{kind:n,pattern:ve(r.pattern,[...t,\"pattern\"],\"regex pattern must be a string\"),flags:qd(r.flags,[...t,\"flags\"])};case\"email\":case\"url\":return{kind:n};default:throw H(t,`unknown string validator ${n}`)}},Dd=(e,t)=>{let r=Z(e,t,\"number validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"min\":case\"max\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};case\"positive\":case\"negative\":case\"int\":return{kind:n};default:throw H(t,`unknown number validator ${n}`)}},Ld=(e,t)=>{let r=Z(e,t,\"array validator must be an object\"),n=ve(r.kind,[...t,\"kind\"],\"validator kind must be a string\");switch(n){case\"minLength\":case\"maxLength\":return{kind:n,value:Vn(r.value,[...t,\"value\"])};default:throw H(t,`unknown array validator ${n}`)}};var Dt=(e,t,r,n,i)=>{if(r.kind!==t)throw x(T.TypeMismatch,`expected ${e}, got ${r.kind}`,{valuePath:n,schemaPath:i})},pr=(e,t,r,n)=>(Dt(e,\"string\",t,r,n),t),mr=(e,t,r,n)=>(Dt(e,\"number\",t,r,n),t),yr=(e,t,r,n)=>(Dt(e,\"boolean\",t,r,n),t),hr=(e,t,r,n)=>(Dt(e,\"object\",t,r,n),t),co=(e,t,r,n)=>(Dt(e,\"array\",t,r,n),t);var O=(e,t,r)=>x(T.ValidatorFailed,e,{valuePath:t,schemaPath:r}),q=e=>e===void 0?e:_(e),E=e=>e?{required:!0}:{};var fo={kind:\"array\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,element:r.parseSchema(e.element,[...n,\"element\"]),validators:uo(e.validators,[...n,\"validators\"])},e.default,n),serialize:(e,t)=>({kind:\"array\",element:t(e.element),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(r=>({...r}))}:{}}),validate:(e,t,r,n,i)=>{let d=co(e.kind,t,n,i).items.map(l=>{let s=r.validate(e.element,l.value,[...n,{kind:\"item\",id:l.id}],[...i,\"element\"]);if(s===void 0)throw x(T.TypeMismatch,\"array item cannot sanitize to undefined\",{valuePath:[...n,{kind:\"item\",id:l.id}],schemaPath:i});return{id:l.id,pos:l.pos,value:s}});for(let l of e.validators??[])switch(l.kind){case\"minLength\":if(d.length<l.value)throw O(\"array shorter than minLength\",n,i);break;case\"maxLength\":if(d.length>l.value)throw O(\"array longer than maxLength\",n,i);break}return{kind:\"array\",items:d}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var po={kind:\"boolean\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required},e.default,n),serialize:e=>({kind:\"boolean\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>_(yr(\"boolean\",t,n,i)),materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var mo={kind:\"either\",parse:(e,t,r,n)=>{if(!Array.isArray(e.variants))throw x(T.InvalidSchema,\"either variants must be an array\",{schemaPath:[...n,\"variants\"]});return r.normalizeDefault({kind:t.kind,required:t.required,variants:e.variants.map((i,a)=>r.parseSchema(i,[...n,\"variants\",a]))},e.default,n)},serialize:(e,t)=>({kind:\"either\",variants:e.variants.map(r=>t(r)),...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=[];for(let d=0;d<e.variants.length;d+=1)try{let l=r.validate(e.variants[d],t,n,[...i,\"variants\",d]);if(l!==void 0)return l}catch(l){l instanceof Error&&a.push(l)}throw x(T.EitherNoMatch,a[0]?.message??\"no either variant matched\",{valuePath:n,schemaPath:i})},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var yo={kind:\"literal\",parse:(e,t,r,n)=>{let i=e.value;if(typeof i!=\"string\"&&typeof i!=\"number\"&&typeof i!=\"boolean\")throw H([...n,\"value\"],\"literal value must be string, number, or boolean\");return r.normalizeDefault({kind:t.kind,required:t.required,value:i},e.default,n)},serialize:e=>({kind:\"literal\",value:e.value,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}),validate:(e,t,r,n,i)=>{let a=typeof e.value==\"string\"?\"string\":typeof e.value==\"number\"?\"number\":\"boolean\",d=a===\"string\"?pr(e.kind,t,n,i):a===\"number\"?mr(e.kind,t,n,i):yr(e.kind,t,n,i);if(d.value!==e.value)throw x(T.LiteralMismatch,\"literal value does not match schema\",{valuePath:n,schemaPath:i});return _(d)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var ho={kind:\"number\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:so(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"number\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=mr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"min\":if(a.value<d.value)throw O(\"number smaller than min\",n,i);break;case\"max\":if(a.value>d.value)throw O(\"number larger than max\",n,i);break;case\"positive\":if(a.value<=0)throw O(\"number is not positive\",n,i);break;case\"negative\":if(a.value>=0)throw O(\"number is not negative\",n,i);break;case\"int\":if(!Number.isInteger(a.value))throw O(\"number is not an integer\",n,i);break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var go={kind:\"object\",parse:(e,t,r,n)=>{let i=Z(e.fields,[...n,\"fields\"],\"object schema fields must be an object\"),a={};for(let[d,l]of Object.entries(i))a[d]=r.parseSchema(l,[...n,\"fields\",d]);return r.normalizeDefault({kind:t.kind,required:t.required,fields:a},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.fields))r[n]=t(i);return{kind:\"object\",fields:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d={};for(let[l,s]of Object.entries(e.fields)){let u=r.validate(s,a.fields[l],[...n,{kind:\"field\",key:l}],[...i,\"fields\",l]);u!==void 0&&(d[l]=u)}return ne(d)},materializeDefault:(e,t,r,n)=>{let i={},a=!1;for(let[d,l]of Object.entries(e.fields)){let s;try{s=t.materializeDefault(l,[...r,{kind:\"field\",key:d}],[...n,\"fields\",d])}catch(u){if(!e.required&&Pn(u)&&u.code===T.MissingRequired)return;throw u}s!==void 0&&(i[d]=s,a=!0)}if(a)return ne(i);if(e.required)throw x(T.MissingRequired,\"required object has no defaultable fields\",{valuePath:r,schemaPath:n})}};var bo={kind:\"string\",parse:(e,t,r,n)=>r.normalizeDefault({kind:t.kind,required:t.required,validators:lo(e.validators,[...n,\"validators\"])},e.default,n),serialize:e=>({kind:\"string\",...E(e.required),...e.default!==void 0?{default:q(e.default)}:{},...e.validators&&e.validators.length>0?{validators:e.validators.map(t=>({...t}))}:{}}),validate:(e,t,r,n,i)=>{let a=pr(e.kind,t,n,i);for(let d of e.validators??[])switch(d.kind){case\"minLength\":if(a.value.length<d.value)throw O(\"string shorter than minLength\",n,i);break;case\"maxLength\":if(a.value.length>d.value)throw O(\"string longer than maxLength\",n,i);break;case\"length\":if(a.value.length!==d.value)throw O(\"string length mismatch\",n,i);break;case\"regex\":if(!new RegExp(d.pattern,d.flags).test(a.value))throw O(\"string does not match regex\",n,i);break;case\"email\":if(!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(a.value))throw O(\"invalid email\",n,i);break;case\"url\":try{new URL(a.value)}catch{throw O(\"invalid url\",n,i)}break}return _(a)},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var vo={kind:\"tree\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"tree discriminator must be a string\"),a=e.roots;if(!Array.isArray(a)||!a.every(s=>typeof s==\"string\"))throw x(T.InvalidSchema,\"tree roots must be a string array\",{schemaPath:[...n,\"roots\"]});let d=Z(e.variants,[...n,\"variants\"],\"tree variants must be an object\"),l={};for(let[s,u]of Object.entries(d)){let f=Z(u,[...n,\"variants\",s],\"tree variant must be an object\"),c=r.parseSchema(f.schema,[...n,\"variants\",s,\"schema\"]);if(c.kind!==\"object\")throw x(T.InvalidSchema,\"tree variant schema must be an object schema\",{schemaPath:[...n,\"variants\",s,\"schema\"]});let m=c.fields[i];if(m?.kind!==\"literal\"||m.value!==s)throw x(T.InvalidSchema,\"tree discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",s,\"schema\",\"fields\",i]});let y=f.children;if(!Array.isArray(y)||!y.every(N=>typeof N==\"string\"))throw x(T.InvalidSchema,\"tree variant children must be a string array\",{schemaPath:[...n,\"variants\",s,\"children\"]});l[s]={schema:c,children:[...y]}}for(let s of a)if(!Object.hasOwn(l,s))throw x(T.InvalidSchema,`unknown tree root variant ${s}`,{schemaPath:[...n,\"roots\"]});for(let[s,u]of Object.entries(l))for(let f of u.children)if(!Object.hasOwn(l,f))throw x(T.InvalidSchema,`unknown tree child variant ${f}`,{schemaPath:[...n,\"variants\",s,\"children\"]});return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,roots:[...a],variants:l},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]={schema:t(i.schema),children:[...i.children]};return{kind:\"tree\",discriminator:e.discriminator,roots:[...e.roots],variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=(()=>{if(t.kind!==\"tree\")throw x(T.TypeMismatch,`expected ${e.kind}, got ${t.kind}`,{valuePath:n,schemaPath:i});return t})(),d=new Map,l=a.nodes.map(s=>{let u=s.value.fields[e.discriminator];if(u===void 0||u.kind!==\"string\")throw x(T.TreeUnknownVariant,\"tree node discriminator is missing or invalid\",{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let f=e.variants[u.value];if(!f)throw x(T.TreeUnknownVariant,`unknown tree variant ${u.value}`,{valuePath:[...n,{kind:\"node\",id:s.id},{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});let c=r.validate(f.schema,s.value,[...n,{kind:\"node\",id:s.id}],[...i,\"variants\",u.value,\"schema\"]);return d.set(s.id,u.value),{id:s.id,parent:s.parent,pos:s.pos,value:c}});for(let s of l){let u=d.get(s.id);if(s.parent===I){if(!e.roots.includes(u))throw x(T.TreeInvalidRootType,`tree root type ${u} is not allowed`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"roots\"]});continue}let f=d.get(s.parent);if(!f)throw x(T.TreeUnknownVariant,\"tree parent variant is missing\",{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:i});if(!e.variants[f].children.includes(u))throw x(T.TreeInvalidChildType,`tree child type ${u} is not allowed under ${f}`,{valuePath:[...n,{kind:\"node\",id:s.id}],schemaPath:[...i,\"variants\",f,\"children\"]})}return{kind:\"tree\",nodes:l}},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var So={kind:\"union\",parse:(e,t,r,n)=>{let i=ve(e.discriminator,[...n,\"discriminator\"],\"union discriminator must be a string\"),a=Z(e.variants,[...n,\"variants\"],\"union variants must be an object\"),d={};for(let[l,s]of Object.entries(a)){let u=r.parseSchema(s,[...n,\"variants\",l]);if(u.kind!==\"object\")throw x(T.InvalidSchema,\"union variants must be object schemas\",{schemaPath:[...n,\"variants\",l]});let f=u.fields[i];if(f?.kind!==\"literal\"||f.value!==l)throw x(T.InvalidSchema,\"union discriminator field must be a matching literal\",{schemaPath:[...n,\"variants\",l,\"fields\",i]});d[l]=u}return r.normalizeDefault({kind:t.kind,required:t.required,discriminator:i,variants:d},e.default,n)},serialize:(e,t)=>{let r={};for(let[n,i]of Object.entries(e.variants))r[n]=t(i);return{kind:\"union\",discriminator:e.discriminator,variants:r,...E(e.required),...e.default!==void 0?{default:q(e.default)}:{}}},validate:(e,t,r,n,i)=>{let a=hr(e.kind,t,n,i),d=a.fields[e.discriminator];if(d===void 0||d.kind!==\"string\")throw x(T.UnionNoMatch,\"union discriminator is missing or invalid\",{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"discriminator\"]});let l=e.variants[d.value];if(!l)throw x(T.UnionNoMatch,`unknown union discriminator ${d.value}`,{valuePath:[...n,{kind:\"field\",key:e.discriminator}],schemaPath:[...i,\"variants\"]});return r.validate(l,a,n,[...i,\"variants\",d.value])},materializeDefault:(e,t,r,n)=>{if(e.required)throw x(T.MissingRequired,\"required value has no default\",{valuePath:r,schemaPath:n})}};var Od={string:bo,number:ho,boolean:po,literal:yo,object:go,array:fo,union:So,either:mo,tree:vo};var Ke=e=>Od[e];var Nn=(e,t,r)=>To(e,t,r),To=(e,t,r)=>\"default\"in e&&e.default!==void 0?_(e.default):Ke(e.kind).materializeDefault(e,Md,t,r),Md={materializeDefault:To};var Lt=(e,t)=>(t!==void 0&&B(t),xo(e,t,[],[])),xo=(e,t,r,n)=>t===void 0?Nn(e,r,n):Ke(e.kind).validate(e,t,jd,r,n),jd={validate:xo,materializeDefault:Nn};var wo=e=>Po(e),Po=e=>Ke(e.kind).serialize(e,Po);var o={};Aa(o,{Array:()=>Xd,ArrayPrimitive:()=>Pr,Boolean:()=>Wd,BooleanPrimitive:()=>Tr,Either:()=>Jd,EitherPrimitive:()=>Vr,Lazy:()=>ol,LazyPrimitive:()=>Ar,Literal:()=>Kd,LiteralPrimitive:()=>xr,Number:()=>zd,NumberPrimitive:()=>Sr,PrimitiveError:()=>h,String:()=>Fd,StringPrimitive:()=>vr,Struct:()=>Yd,StructPrimitive:()=>wr,Tree:()=>nl,TreeNode:()=>tl,TreeNodePrimitive:()=>_r,TreeNodeSelf:()=>Qd,TreePrimitive:()=>Ir,Union:()=>Zd,UnionPrimitive:()=>Nr,commands:()=>$d,expectDefined:()=>Bd,hasOwn:()=>Hd,randomUuid:()=>dt,shortId:()=>Ge});var h=class extends Error{constructor(t){super(t),this.name=\"PrimitiveError\"}},Bd=(e,t)=>{if(e===void 0)throw new h(t);return e},Hd=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),dt=()=>{let e=globalThis.crypto?.randomUUID?.();if(typeof e==\"string\")return e;throw new h(\"crypto.randomUUID is not available in this runtime\")},Vo=\"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ\",Ud=10,Ge=(e=Ud)=>{let t=globalThis.crypto?.getRandomValues?.bind(globalThis.crypto);if(!t)throw new h(\"crypto.getRandomValues is not available in this runtime\");let r=Vo.length,n=Math.floor(256/r)*r,i=\"\",a=new Uint8Array(e);for(;i.length<e;){t(a);for(let d=0;d<a.length&&i.length<e;d+=1){let l=a[d];l<n&&(i+=Vo[l%r])}}return i};var $d=(e,t,r)=>{B(t);let n=Lt(e.schema,t);if(n===void 0)throw new Error(\"Primitive root snapshot cannot be undefined\");let i=[],a=n,d=ke(),l={current:()=>a,emit:s=>{s.length!==0&&(i.push(...s),a=hn(n,i))},generator:{nextArrayItemId:()=>dt(),nextTreeNodeId:()=>Ge(),between:(s,u)=>d.between(s,u)}};return r(e.createProxy(l,[])),i};var D=(e,t)=>{let r=e;for(let n of t){if(r===void 0)return;switch(n.kind){case\"field\":if(r.kind!==\"object\")return;r=r.fields[n.key];break;case\"item\":if(r.kind!==\"array\")return;r=r.items.find(i=>i.id===n.id)?.value;break;case\"node\":if(r.kind!==\"tree\")return;r=r.nodes.find(i=>i.id===n.id)?.value;break}}return r},gr=(e,t)=>{let r=D(e,t);return r?.kind===\"object\"?r:void 0},U=(e,t)=>{let r=D(e,t);return r?.kind===\"array\"?r:void 0},G=(e,t)=>{let r=D(e,t);return r?.kind===\"tree\"?r:void 0},Se=e=>e?[...e.items].sort((t,r)=>t.pos.localeCompare(r.pos)):[],br=(e,t)=>e?.items.find(r=>r.id===t),_n=(e,t)=>{let r=Se(e),n=Ot(t,r.length);return n===void 0?void 0:r[n]},kn=(e,t)=>e?.nodes.find(r=>r.id===t),Ie=(e,t)=>e?e.nodes.filter(r=>r.parent===t).sort((r,n)=>r.pos.localeCompare(n.pos)):[];var Ot=(e,t)=>{let r=e<0?t+e:e;if(!(r<0||r>=t))return r},lt=(e,t)=>{if(t<0||t>e.length)throw new h(`Index ${t} is out of range`);return{lower:t===0?void 0:e[t-1],upper:t===e.length?void 0:e[t]}};var In=(e,t,r)=>{if(!e||t===I)return!1;let n=new Map(e.nodes.map(a=>[a.id,a])),i=t;for(;;){let a=n.get(i);if(!a)return!1;if(a.parent===r)return!0;if(a.parent===I)return!1;i=a.parent}},An=(e,t)=>[...e,{kind:\"node\",id:t}];var vr=class e{constructor(t){p(this,\"_tag\",\"StringPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"string\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:re(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}length(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"length\",value:t}]})}regex(t,r){return new e({...this.state,validators:[...this.state.validators,{kind:\"regex\",pattern:t.source,flags:t.flags}]})}email(){return new e({...this.state,validators:[...this.state.validators,{kind:\"email\"}]})}url(){return new e({...this.state,validators:[...this.state.validators,{kind:\"url\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"String value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return re(this.state.defaultValue);if(this.state.required)throw new h(\"String value is required\");return}if(typeof t!=\"string\")throw new h(\"Expected string input\");return re(t)}decode(t){return t?.kind===\"string\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Fd=()=>new vr({required:!1,defaultValue:void 0,validators:[]});var Sr=class e{constructor(t){p(this,\"_tag\",\"NumberPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"number\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:ot(this.state.defaultValue)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}min(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"min\",value:t}]})}max(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"max\",value:t}]})}positive(){return new e({...this.state,validators:[...this.state.validators,{kind:\"positive\"}]})}negative(){return new e({...this.state,validators:[...this.state.validators,{kind:\"negative\"}]})}int(){return new e({...this.state,validators:[...this.state.validators,{kind:\"int\"}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Number value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return ot(this.state.defaultValue);if(this.state.required)throw new h(\"Number value is required\");return}if(typeof t!=\"number\"||globalThis.Number.isNaN(t)||!globalThis.Number.isFinite(t))throw new h(\"Expected finite number input\");return ot(t)}decode(t){return t?.kind===\"number\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},zd=()=>new Sr({required:!1,defaultValue:void 0,validators:[]});var Tr=class e{constructor(t){p(this,\"_tag\",\"BooleanPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){return{kind:\"boolean\",...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:at(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Boolean value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return at(this.state.defaultValue);if(this.state.required)throw new h(\"Boolean value is required\");return}if(typeof t!=\"boolean\")throw new h(\"Expected boolean input\");return at(t)}decode(t){return t?.kind===\"boolean\"?t.value:void 0}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Wd=()=>new Tr({required:!1,defaultValue:void 0});var Rn=e=>{switch(typeof e){case\"string\":return re(e);case\"number\":return ot(e);case\"boolean\":return at(e);default:throw new h(`Unsupported scalar value type: ${typeof e}`)}};var xr=class e{constructor(t){p(this,\"_tag\",\"LiteralPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get literal(){return this.state.literal}get schema(){return{kind:\"literal\",value:this.state.literal,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:Rn(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){if(t!==this.state.literal)throw new h(\"Literal default must equal the literal value\");return new e({...this.state,defaultValue:t})}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Literal value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Literal value is required\");return}if(r!==this.state.literal)throw new h(\"Input does not match the literal value\");return Rn(this.state.literal)}decode(t){if(t!==void 0&&\"value\"in t&&t.value===this.state.literal)return this.state.literal}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}},Kd=e=>new xr({required:!1,defaultValue:void 0,literal:e});var wr=class e{constructor(t){p(this,\"_tag\",\"StructPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get fields(){return this.state.fields}get schema(){let t={};for(let[r,n]of Object.entries(this.state.fields))t[r]=n.schema;return{kind:\"object\",fields:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}extend(t){return new e({required:this.state.required,defaultValue:void 0,fields:{...this.state.fields,...t}})}partial(t){let r=t?.stripDefaults??!1,n={};for(let[i,a]of Object.entries(this.state.fields))n[i]=No(a,r);return new e({required:this.state.required,defaultValue:void 0,fields:n})}optional(t){let r=t?Object.fromEntries(Object.entries(this.state.fields).map(([n,i])=>[n,No(i,!0)])):this.state.fields;return new e({required:!1,defaultValue:t?void 0:this.state.defaultValue,fields:r})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Struct value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.defaultValue!==void 0)return this.encode(this.state.defaultValue);if(this.state.required)throw new h(\"Struct value is required\");return}if(typeof t!=\"object\"||t===null||Array.isArray(t))throw new h(\"Expected object input\");let r=t,n={};for(let[i,a]of Object.entries(this.state.fields)){let d=a.encodeOptional(r[i]);d!==void 0&&(n[i]=d)}return ne(n)}decode(t){if(t?.kind!==\"object\")return;let r={};for(let[n,i]of Object.entries(this.state.fields)){let a=i.decode(t.fields[n]);a!==void 0&&(r[n]=a)}return r}createProxy(t,r){let n={get:()=>this.decode(D(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},update:i=>{Gd(this.state.fields,t,r,i)}};for(let[i,a]of Object.entries(this.state.fields))n[i]=a.createProxy(t,[...r,{kind:\"field\",key:i}]);return n}},Gd=(e,t,r,n)=>{for(let[i,a]of Object.entries(n)){let d=e[i];if(d){if(a===void 0){gr(t.current(),r)?.fields[i]!==void 0&&t.emit([{kind:\"object.delete\",path:r,key:i}]);continue}if(d._tag===\"StructPrimitive\"&&typeof a==\"object\"&&a!==null&&!Array.isArray(a)){d.createProxy(t,[...r,{kind:\"field\",key:i}]).update(a);continue}t.emit([{kind:\"object.set\",path:r,key:i,value:d.encode(a)}])}}},No=(e,t)=>{let r=e.optional;return typeof r==\"function\"?r.call(e,t):e},Yd=e=>new wr({required:!1,defaultValue:void 0,fields:e});var Pr=class e{constructor(t){p(this,\"_tag\",\"ArrayPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");p(this,\"encodedDefaultCache\");this.state=t}encodedDefault(){return this.encodedDefaultCache===void 0&&(this.encodedDefaultCache={value:this.state.defaultValue===void 0?void 0:this.encodeEntries(this.state.defaultValue)}),this.encodedDefaultCache.value}get element(){return this.state.element}get schema(){let t=this.encodedDefault();return{kind:\"array\",element:this.state.element.schema,...this.state.required?{required:!0}:{},...t!==void 0?{default:_(t)}:{},...this.state.validators.length>0?{validators:this.state.validators}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}minLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"minLength\",value:t}]})}maxLength(t){return new e({...this.state,validators:[...this.state.validators,{kind:\"maxLength\",value:t}]})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Array value is undefined\");return r}encodeOptional(t){if(t===void 0){let r=this.encodedDefault();if(r!==void 0)return _(r);if(this.state.required)throw new h(\"Array value is required\");return}if(!globalThis.Array.isArray(t))throw new h(\"Expected array input\");return this.encodeEntries(t)}decode(t){if(t?.kind===\"array\")return Se(t).map(r=>({id:r.id,pos:r.pos,value:this.state.element.decode(r.value)}))}createProxy(t,r){let n=d=>({get id(){return d},get pos(){return br(U(t.current(),r),d)?.pos??\"\"},get value(){return a.state.element.createProxy(t,[...r,{kind:\"item\",id:d}])},get:()=>{let l=br(U(t.current(),r),d);return this.state.element.decode(l?.value)},remove:()=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:l=>{_o(t,r,d,l)},moveToPos:l=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])}}),i=()=>Se(U(t.current(),r)).map(d=>n(d.id)),a=this;return{get length(){return Se(U(t.current(),r)).length},get:()=>this.decode(U(t.current(),r)),set:d=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(d)}])},push:d=>{let l=Se(U(t.current(),r)),s=l.length===0?void 0:l[l.length-1]?.pos,u=t.generator.nextArrayItemId(r),f=t.generator.between(s,void 0);return t.emit([{kind:\"array.insert\",path:r,item:{id:u,pos:f,value:this.state.element.encode(d)}}]),n(u)},insertAt:(d,l)=>{let s=Se(U(t.current(),r)),u=lt(s.map(m=>m.pos),d),f=t.generator.nextArrayItemId(r),c=t.generator.between(u.lower,u.upper);return t.emit([{kind:\"array.insert\",path:r,item:{id:f,pos:c,value:this.state.element.encode(l)}}]),n(f)},insertAtPos:(d,l)=>{let s=t.generator.nextArrayItemId(r);return t.emit([{kind:\"array.insert\",path:r,item:{id:s,pos:d,value:this.state.element.encode(l)}}]),n(s)},remove:d=>{t.emit([{kind:\"array.delete\",path:r,id:d}])},move:(d,l)=>{_o(t,r,d,l)},moveToPos:(d,l)=>{t.emit([{kind:\"array.move\",path:r,id:d,pos:l}])},at:d=>{let l=_n(U(t.current(),r),d);return l?n(l.id):void 0},first:()=>{let d=_n(U(t.current(),r),0);return d?n(d.id):void 0},last:()=>{let d=Se(U(t.current(),r)),l=d[d.length-1];return l?n(l.id):void 0},findById:d=>{let l=br(U(t.current(),r),d);return l?n(l.id):void 0},find:d=>i().find((s,u,f)=>d(s,u,f)),findIndex:d=>i().findIndex((s,u,f)=>d(s,u,f)),map:d=>i().map((s,u,f)=>d(s,u,f)),filter:d=>i().filter((s,u,f)=>d(s,u,f)),some:d=>i().some((s,u,f)=>d(s,u,f)),every:d=>i().every((s,u,f)=>d(s,u,f)),forEach:d=>{i().forEach((s,u,f)=>d(s,u,f))},[Symbol.iterator]:()=>i()[Symbol.iterator]()}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}encodeEntries(t){let r=ke(),n=new Set,i,a=t.map(d=>{let l=r.between(i,void 0);i=l;let s=dt();for(;n.has(s);)s=dt();return n.add(s),{id:s,pos:l,value:this.state.element.encode(d)}});return pn(a)}},_o=(e,t,r,n)=>{let i=Se(U(e.current(),t));if(i.findIndex(c=>c.id===r)===-1)throw new h(`Array item \"${r}\" does not exist`);let d=i.filter(c=>c.id!==r),l=Ot(n,d.length+1);if(l===void 0&&n!==d.length)throw new h(`Index ${n} is out of range`);let s=l??d.length,u=lt(d.map(c=>c.pos),s),f=e.generator.between(u.lower,u.upper);e.emit([{kind:\"array.move\",path:t,id:r,pos:f}])},Xd=e=>new Pr({required:!1,defaultValue:void 0,element:e,validators:[]});var Vr=class e{constructor(t){p(this,\"_tag\",\"EitherPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");if(this.state=t,t.variants.length===0)throw new h(\"Either requires at least one variant\")}get schema(){return{kind:\"either\",variants:this.state.variants.map(t=>t.schema),...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Either value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Either value is required\");return}for(let n of this.state.variants)try{let i=n.encodeOptional(r);if(i!==void 0)return i}catch{}throw new h(\"Either input did not match any variant\")}decode(t){for(let r of this.state.variants){let n=r.decode(t);if(n!==void 0)return n}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},update:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}},Jd=(...e)=>new Vr({required:!1,defaultValue:void 0,variants:e});var Nr=class e{constructor(t){p(this,\"_tag\",\"UnionPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get discriminator(){return this.state.discriminator}get variants(){return this.state.variants}get schema(){let t={};for(let[r,n]of Object.entries(this.state.variants)){let i=n.schema;if(i.kind!==\"object\")throw new h(\"Union variants must compile to object schemas\");let a={...i.fields,[this.state.discriminator]:{kind:\"literal\",value:r}};t[r]={kind:\"object\",fields:a}}return{kind:\"union\",discriminator:this.state.discriminator,variants:t,...this.state.required?{required:!0}:{},...this.state.defaultValue!==void 0?{default:this.encode(this.state.defaultValue)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Union value is undefined\");return r}encodeOptional(t){let r=t===void 0?this.state.defaultValue:t;if(r===void 0){if(this.state.required)throw new h(\"Union value is required\");return}if(typeof r!=\"object\"||r===null||Array.isArray(r))throw new h(\"Expected union input object\");let n=this.resolveVariantKey(r),i=this.state.variants[n];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);let a=i.encode(r);if(a.kind!==\"object\")throw new h(\"Union variant must encode to an object value\");return ne({...a.fields,[this.state.discriminator]:re(String(n))})}decode(t){if(t?.kind!==\"object\")return;let r=this.resolveVariantKeyFromObject(t);if(!r)return;let i=this.state.variants[r]?.decode(t);if(i!==void 0)return{...i,[this.state.discriminator]:r}}createProxy(t,r){return{get:()=>this.decode(D(t.current(),r)),set:n=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(n)}])},as:n=>{let i=this.state.variants[String(n)];if(!i)throw new h(`Unknown union variant \"${String(n)}\"`);return i.createProxy(t,r)},match:n=>{let i=gr(t.current(),r),a=i?this.resolveVariantKeyFromObject(i):void 0;if(!a)return;let d=n[a];if(d)return d(this.state.variants[a].createProxy(t,r))}}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue})}resolveVariantKey(t){let r=t[this.state.discriminator];if(typeof r==\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r))return r;let n=Object.entries(this.state.variants).filter(([,i])=>{let a=Object.keys(i.fields);return Object.keys(t).every(d=>d===this.state.discriminator||a.includes(d))}).map(([i])=>i);if(n.length===1)return n[0];throw new h(\"Unable to resolve union variant from input\")}resolveVariantKeyFromObject(t){let r=t.fields[this.state.discriminator];if(r?.kind===\"string\"&&Object.prototype.hasOwnProperty.call(this.state.variants,r.value))return r.value}},Zd=(e,t)=>new Nr({required:!1,defaultValue:void 0,discriminator:t?.discriminator??\"type\",variants:e});var ko=Symbol.for(\"TreeNode.Self\"),Qd={_tag:\"TreeNodeSelf\",_brand:ko},el=e=>typeof e==\"object\"&&e!==null&&\"_brand\"in e&&e._brand===ko,_r=class{constructor(t,r,n){p(this,\"_tag\",\"TreeNodePrimitive\");p(this,\"_Type\");p(this,\"_Data\");p(this,\"_Children\");p(this,\"TSetInput\");p(this,\"type\");p(this,\"data\");p(this,\"childrenInput\");p(this,\"resolvedChildren\");this.type=t,this.data=r,this.childrenInput=n}get children(){if(this.resolvedChildren===void 0){let t=typeof this.childrenInput==\"function\"?this.childrenInput():this.childrenInput;this.resolvedChildren=t.map(r=>el(r)?this:r)}return this.resolvedChildren}isChildAllowed(t){return this.children.some(r=>r.type===t)}},tl=(e,t)=>new _r(e,t.data,t.children);var Ir=class e{constructor(t){p(this,\"_tag\",\"TreePrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"state\");this.state=t}get schema(){let t=rl(this.state.root);return{kind:\"tree\",discriminator:\"type\",roots:[this.state.root.type],variants:t,...this.state.required?{required:!0}:{},...this.state.encodedDefault!==void 0?{default:_(this.state.encodedDefault)}:{}}}required(){return new e({...this.state,required:!0})}default(t){return new e({...this.state,defaultValue:t,encodedDefault:this.encodeRoots(t)})}encode(t){let r=this.encodeOptional(t);if(r===void 0)throw new h(\"Tree value is undefined\");return r}encodeOptional(t){if(t===void 0){if(this.state.encodedDefault!==void 0)return _(this.state.encodedDefault);if(this.state.required)throw new h(\"Tree value is required\");return}if(!Array.isArray(t))throw new h(\"Expected tree root input array\");return this.encodeRoots(t)}encodeRoots(t){let r=[],n=kr(this.state.root),i=new Set([I]),a,d=ke(),l=(s,u,f,c)=>{let m=n.get(s.type);if(!m)throw new h(`Unknown tree node type \"${s.type}\"`);if(!f.some(w=>w.type===m.type))throw new h(`Node type \"${s.type}\" is not allowed here`);let y=s.id??il(i);if(i.has(y))throw new h(`Duplicate tree node id \"${y}\" in encoded input`);i.add(y);let N=d.between(c,void 0);r.push({id:y,parent:u,pos:N,value:Cn(m,s)});let R;for(let w of s.children??[])R=l(w,y,m.children,R);return N};for(let s of t)a=l(s,I,[this.state.root],a);return mn(r)}decode(t){if(t?.kind!==\"tree\")return;let r=kr(this.state.root);return Ro(t,I,r)}createProxy(t,r){let n=kr(this.state.root);return{get:()=>this.decode(G(t.current(),r)),set:i=>{t.emit([{kind:\"value.set\",path:r,value:this.encode(i)}])},findByIdAcrossTree:i=>{let a=G(t.current(),r),d=kn(a,i);if(!d)return;let l=d.value.fields.type,s=n.get(l?.kind===\"string\"?l.value:\"\");return s?Ye(t,r,n,s,i):void 0},children:Ao(t,r,n,I,[this.state.root])}}optional(t){return new e({...this.state,required:!1,defaultValue:t?void 0:this.state.defaultValue,encodedDefault:t?void 0:this.state.encodedDefault})}},Ao=(e,t,r,n,i)=>{let a=()=>Ie(G(e.current(),t),n).filter(l=>i.some(s=>s.type===ie(l))).map(l=>Ye(e,t,r,r.get(ie(l)),l.id)),d={__parentId:n,get length(){return a().length},at:l=>{let s=Ie(G(e.current(),t),n).filter(c=>i.some(m=>m.type===ie(c))),u=Ot(l,s.length),f=u===void 0?void 0:s[u];return f?Ye(e,t,r,r.get(ie(f)),f.id):void 0},first:()=>d.at(0),last:()=>{let l=a();return l[l.length-1]},findById:l=>{let s=Ie(G(e.current(),t),n).find(f=>f.id===l);if(!s)return;let u=r.get(ie(s));return u?Ye(e,t,r,u,s.id):void 0},insertAt:(l,s)=>{let u=G(e.current(),t),f=Ie(u,n).filter(w=>i.some(P=>P.type===ie(w))),c=lt(f.map(w=>w.pos),l),m=Io(i,s.type),y=s.id??e.generator.nextTreeNodeId(t),N=e.generator.between(c.lower,c.upper),R={id:y,parent:n,pos:N,value:Cn(m,s)};return e.emit([{kind:\"tree.insert\",path:t,node:R}]),Ye(e,t,r,m,y)},insertLast:l=>{let s=Ie(G(e.current(),t),n).filter(u=>i.some(f=>f.type===ie(u)));return d.insertAt(s.length,l)},insertAtPos:(l,s)=>{let u=Io(i,s.type),f=s.id??e.generator.nextTreeNodeId(t),c={id:f,parent:n,pos:l,value:Cn(u,s)};return e.emit([{kind:\"tree.insert\",path:t,node:c}]),Ye(e,t,r,u,f)},find:l=>a().find((u,f,c)=>l(u,f,c)),findIndex:l=>a().findIndex((u,f,c)=>l(u,f,c)),map:l=>a().map((u,f,c)=>l(u,f,c)),filter:l=>a().filter((u,f,c)=>l(u,f,c)),some:l=>a().some((u,f,c)=>l(u,f,c)),every:l=>a().every((u,f,c)=>l(u,f,c)),forEach:l=>{a().forEach((u,f,c)=>l(u,f,c))},[Symbol.iterator]:()=>a()[Symbol.iterator]()};return d},Ye=(e,t,r,n,i)=>{let a=()=>kn(G(e.current(),t),i),d=()=>{let l=a();return l?r.get(ie(l))??n:n};return{get id(){return i},get type(){return d().type},get pos(){return a()?.pos??\"\"},get parentId(){let l=a()?.parent;return l===I?null:l??null},get data(){return d().data.createProxy(e,An(t,i))},get children(){return Ao(e,t,r,i,d().children)},get:()=>{let l=a();if(l)return Co(l,G(e.current(),t),r)},update:l=>{d().data.createProxy(e,An(t,i)).update(l)},remove:()=>{e.emit([{kind:\"tree.delete\",path:t,id:i}])},moveTo:(l,s)=>{let u=l.__parentId;if(!u)throw new h(\"Target children collection is not movable\");let f=G(e.current(),t);if(In(f,u,i))throw new h(\"Tree move would create a cycle\");let c=Ie(f,u).filter(N=>N.id!==i),m=lt(c.map(N=>N.pos),s),y=e.generator.between(m.lower,m.upper);e.emit([{kind:\"tree.move\",path:t,id:i,parent:u,pos:y}])},moveToPos:(l,s)=>{let u=G(e.current(),t);if(In(u,l,i))throw new h(\"Tree move would create a cycle\");e.emit([{kind:\"tree.move\",path:t,id:i,parent:l,pos:s}])},as:l=>{if(d().type!==l.type)throw new h(`Expected node type \"${l.type}\", got \"${d().type}\"`);return Ye(e,t,r,l,i)}}},rl=e=>{let t=kr(e),r={};for(let n of t.values()){let i=n.data.schema;if(i.kind!==\"object\")throw new h(\"Tree node data must compile to an object schema\");r[n.type]={schema:{kind:\"object\",fields:{...i.fields,type:{kind:\"literal\",value:n.type}}},children:n.children.map(a=>a.type)}}return r},kr=e=>{let t=new Map,r=n=>{let i=t.get(n.type);if(i&&i!==n)throw new h(`Duplicate tree node type \"${n.type}\"`);if(!i){t.set(n.type,n);for(let a of n.children)r(a)}};return r(e),t},Cn=(e,t)=>{let r=e.data.encode(t);if(r.kind!==\"object\")throw new h(\"Tree node data must encode to an object\");return ne({...r.fields,type:re(e.type)})},ie=e=>{let t=e.value.fields.type;if(t?.kind!==\"string\")throw new h(`Tree node \"${e.id}\" is missing its type discriminator`);return t.value},Ro=(e,t,r)=>Ie(e,t).map(n=>Co(n,e,r)),Co=(e,t,r)=>{let n=r.get(ie(e));if(!n)throw new h(`Unknown tree node type \"${ie(e)}\"`);return{id:e.id,type:n.type,parentId:e.parent===I?null:e.parent,pos:e.pos,data:n.data.decode(e.value),children:Ro(t,e.id,r)}},Io=(e,t)=>{let r=e.find(n=>n.type===t);if(!r)throw new h(`Tree node type \"${t}\" is not allowed in this collection`);return r},nl=e=>new Ir({required:!1,defaultValue:void 0,encodedDefault:void 0,root:e.root}),il=e=>{let t=Ge();for(;e.has(t);)t=Ge();return t};var Ar=class{constructor(t){p(this,\"_tag\",\"LazyPrimitive\");p(this,\"_Input\");p(this,\"_Snapshot\");p(this,\"_Proxy\");p(this,\"thunk\");p(this,\"resolved\");this.thunk=t}get schema(){return this.resolve().schema}encode(t){return this.resolve().encode(t)}encodeOptional(t){return this.resolve().encodeOptional(t)}decode(t){return this.resolve().decode(t)}createProxy(t,r){return this.resolve().createProxy(t,r)}resolve(){return this.resolved===void 0&&(this.resolved=this.thunk()),this.resolved}},ol=e=>new Ar(e);var qo=o.Struct({type:o.Literal(\"click\").required()}),Eo=o.Union({click:qo}),Rr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()})},{discriminator:\"key\"}),Do=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Lo=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),Oo=o.Struct({type:o.Literal(\"none\").required()}),Mo=o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Do.required()}).required()}),jo=o.Struct({type:o.Literal(\"close-paywall\").required()}),Bo=o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Lo.required()}),Cr=o.Union({\"close-paywall\":jo,none:Oo,\"purchase-product\":Bo,\"set-variable\":Mo}),Ho=o.Struct({id:o.String().required(),trigger:Eo.required(),action:Cr.required()}),Mt=o.Array(Ho).default([]);var Uo=o.Struct({key:o.Literal(\"string\").required(),value:o.String().default(\"\")}),$o=o.Struct({key:o.Literal(\"number\").required(),value:o.Number().default(0)}),Fo=o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().default(!1)}),zo=o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).default({})}),qr=o.Union({boolean:Fo,number:$o,product:zo,string:Uo},{discriminator:\"key\"}),Wo=o.Struct({id:o.String().required(),name:o.String().required(),value:qr.required()}),Er=o.Struct({id:o.String().required()});var Dr=o.Union({boolean:o.Struct({key:o.Literal(\"boolean\").required(),value:o.Boolean().required()}),\"boolean-array\":o.Struct({key:o.Literal(\"boolean-array\").required(),value:o.Array(o.Boolean()).required()}),number:o.Struct({key:o.Literal(\"number\").required(),value:o.Number().required()}),\"number-array\":o.Struct({key:o.Literal(\"number-array\").required(),value:o.Array(o.Number()).required()}),product:o.Struct({key:o.Literal(\"product\").required(),value:o.Struct({productId:o.String()}).required()}),string:o.Struct({key:o.Literal(\"string\").required(),value:o.String().required()}),\"string-array\":o.Struct({key:o.Literal(\"string-array\").required(),value:o.Array(o.String()).required()})},{discriminator:\"key\"}),qn=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:Dr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),Ko=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),value:o.Struct({field:o.String().required()}).required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),value:Rr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:o.Struct({id:o.String().required()}).required()})}),Go=o.Union({\"action-payload\":o.Struct({type:o.Literal(\"action-payload\").required(),field:o.String().required()}),literal:o.Struct({type:o.Literal(\"literal\").required(),productId:o.String().required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),variableId:o.String().required()})}),En=o.Union({\"close-paywall\":o.Struct({type:o.Literal(\"close-paywall\").required()}),none:o.Struct({type:o.Literal(\"none\").required()}),\"purchase-product\":o.Struct({type:o.Literal(\"purchase-product\").required(),payload:Go.required()}),\"set-variable\":o.Struct({type:o.Literal(\"set-variable\").required(),payload:o.Struct({variableId:o.String().required(),newValue:Ko.required()}).required()})});var $=o.Array(Wo).default([]),F=o.Array(o.Struct({name:o.String().required(),nodeId:o.String().required()})).default([]);var al=o.Struct({path:o.String().required(),source:o.String().default(\"\")}).required(),Dn=o.TreeNode(\"codeComponent\",{children:[],data:al});var Y=o.Union({literal:o.Struct({type:o.Literal(\"literal\").required(),value:qr.required()}),\"variable-reference\":o.Struct({type:o.Literal(\"variable-reference\").required(),value:Er.required()})}),dl=o.Struct({type:o.Literal(\"equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ll=o.Struct({type:o.Literal(\"not-equals\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),sl=o.Struct({type:o.Literal(\"greater-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),ul=o.Struct({type:o.Literal(\"greater-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),cl=o.Struct({type:o.Literal(\"less-than\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),fl=o.Struct({type:o.Literal(\"less-than-or-equal\").required(),value:o.Struct({left:Y.required(),right:Y.required()}).required()}),pl=o.Union({equals:dl,\"greater-than\":sl,\"greater-than-or-equal\":ul,\"less-than\":cl,\"less-than-or-equal\":fl,\"not-equals\":ll}),ml=o.Struct({type:o.Literal(\"and\").required(),value:o.Array(pl).minLength(1).required()}),Yo=o.Struct({type:o.Literal(\"or\").required(),value:o.Array(ml).minLength(1).required()}),yl=o.Struct({action:Cr.required(),interactionId:o.String().required()});function Ae(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({style:e}).default({})})}function Lr(e){return o.Struct({condition:Yo.required(),id:o.String().required(),name:o.String().required(),overrides:o.Struct({actions:o.Array(yl).default([]),style:e}).default({})})}var Xe=/^rgba\\(\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d{1,3})\\s*,\\s*(\\d*\\.?\\d+)\\s*\\)$/i,st=o.Number().default(0),ut=o.Number().default(0),ct=o.Number().default(0),ft=o.Number().default(0),oe=o.Number().default(0),ae=o.Number().default(0),de=o.Number().default(0),le=o.Number().default(0),pt=o.Number().default(0),mt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"space-between\"),o.Literal(\"space-around\"),o.Literal(\"space-evenly\")).default(\"flex-start\"),yt=o.Either(o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"stretch\"),ht=o.Either(o.Literal(\"row\"),o.Literal(\"column\")).default(\"column\"),se=o.Number(),ue=o.Number().default(0),ce=o.Number().default(1),fe=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),pe=o.Either(o.Literal(\"auto\"),o.Literal(\"flex-start\"),o.Literal(\"center\"),o.Literal(\"flex-end\"),o.Literal(\"stretch\"),o.Literal(\"baseline\")).default(\"auto\"),gt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),bt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),me=o.Number(),ye=o.Number(),he=o.Number(),ge=o.Number(),Xo=o.Number().default(0),Jo=o.Number().default(0),vt=o.Either(o.Literal(\"absolute\"),o.Literal(\"relative\")).default(\"relative\"),St=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Tt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),xt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),wt=o.Either(o.Number(),o.Literal(\"auto\")).default(\"auto\"),Pt=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),Vt=o.Boolean().default(!1),Nt=o.Either(o.Literal(\"solid\"),o.Literal(\"gradient\"),o.Literal(\"image\")).default(\"solid\"),_t=o.Struct({kind:o.Either(o.Literal(\"linear\"),o.Literal(\"radial\")).default(\"linear\"),startX:o.Number().default(.5),startY:o.Number().default(0),endX:o.Number().default(.5),endY:o.Number().default(1),stops:o.Array(o.Struct({color:o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),position:o.Number().default(0)})).default([{color:\"rgba(255, 255, 255, 1)\",position:0},{color:\"rgba(255, 255, 255, 0)\",position:1}])}).default({}),Te=o.Struct({url:o.String().default(\"\"),resizeMode:o.Either(o.Literal(\"cover\"),o.Literal(\"contain\"),o.Literal(\"stretch\"),o.Literal(\"center\")).default(\"cover\")}).default({}),Re=o.Number().default(0),Ce=o.Number().default(0),qe=o.Number().default(0),Ee=o.Number().default(0),De=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Le=o.Either(o.Literal(\"solid\"),o.Literal(\"dashed\"),o.Literal(\"dotted\")).default(\"solid\"),Or=o.Number().default(0),Mr=o.Number().default(0),jr=o.Number().default(0),Br=o.Number().default(0),Oe=o.Boolean().default(!1),X=o.Number().default(1),Me=o.Either(o.Literal(\"visible\"),o.Literal(\"hidden\"),o.Literal(\"scroll\")).default(\"visible\"),je=o.Number().default(0),J=o.Either(o.Literal(\"flex\"),o.Literal(\"none\")).default(\"flex\"),Be=o.Boolean().default(!1),He=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),Ue=o.Number().default(0),$e=o.Number().default(0),Fe=o.Number().default(0),ze=o.Number().default(1),Zo=o.Number().default(16).min(1),Qo=o.Either(o.Literal(\"100\"),o.Literal(\"200\"),o.Literal(\"300\"),o.Literal(\"400\"),o.Literal(\"500\"),o.Literal(\"600\"),o.Literal(\"700\"),o.Literal(\"800\"),o.Literal(\"900\")).default(\"400\"),ea=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),ta=o.Either(o.Literal(\"left\"),o.Literal(\"center\"),o.Literal(\"right\"),o.Literal(\"justify\")).default(\"left\"),ra=o.Number().default(1.5),na=o.Number().default(0),kt=o.Boolean().default(!1),It=o.Boolean().default(!1),ia=o.String().default(\"rgba(255, 255, 255, 1)\").regex(Xe,\"Invalid RGBA color format\"),oa=o.Boolean().default(!1),aa=o.Either(o.Literal(\"nonzero\"),o.Literal(\"evenodd\")).default(\"nonzero\"),da=o.Number().default(1),la=o.String().default(\"rgba(0, 0, 0, 1)\").regex(Xe,\"Invalid RGBA color format\"),sa=o.Boolean().default(!1),ua=o.Number().default(0),ca=o.Number().default(1),fa=o.Either(o.Literal(\"butt\"),o.Literal(\"round\"),o.Literal(\"square\")).default(\"butt\"),pa=o.Either(o.Literal(\"miter\"),o.Literal(\"round\"),o.Literal(\"bevel\")).default(\"miter\");var Ln=o.Struct({fillColor:ia,fillEnabled:oa,fillRule:aa,fillOpacity:da,strokeColor:la,strokeEnabled:sa,strokeWidth:ua,strokeOpacity:ca,strokeLinecap:fa,strokeLinejoin:pa,opacity:X,display:J}).default({}),hl=Ae(Ln.partial({stripDefaults:!0}).default({})),gl=o.Array(hl).default([]),On=o.TreeNode(\"path\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Path\"),states:gl,d:o.String().default(\"\"),transform:o.String(),style:Ln}).required()});var bl=o.Either(o.Literal(\"none\"),o.Literal(\"xMidYMid meet\"),o.Literal(\"xMidYMid slice\")).default(\"xMidYMid meet\"),vl=o.Struct({minX:o.Number().default(0),minY:o.Number().default(0),width:o.Number().default(24),height:o.Number().default(24)}).default({}),Mn=o.Struct({width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,opacity:X,display:J,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\"),preserveAspectRatio:bl}).default({}),Sl=Ae(Mn.partial({stripDefaults:!0}).default({})),Tl=o.Array(Sl).default([]),xe=o.TreeNode(\"shape\",{children:[On],data:o.Struct({linkedVariables:F,localVariables:$,name:o.String().default(\"Shape\"),states:Tl,svgSource:o.String(),viewBox:vl,style:Mn}).required()});var jn=o.Struct({marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,fontSize:Zo,fontWeight:Qo,color:ea,textAlign:ta,lineHeight:ra,letterSpacing:na,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),xl=Ae(jn.partial({stripDefaults:!0}).default({})),wl=o.Array(xl).default([]),Pl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({text:o.String()}).default({})})).default([]),we=o.TreeNode(\"text\",{children:[],data:o.Struct({linkedVariables:F,localVariables:$,localized:Pl,name:o.String().default(\"Text\"),states:wl,style:jn,text:o.String().default(\"New Text\")}).required()});var Bn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),Vl=Lr(Bn.partial({stripDefaults:!0}).default({})),Nl=o.Array(Vl).default([]),_l=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Je=o.TreeNode(\"view\",{children:()=>[o.TreeNodeSelf,Ze,we,xe,Qe],data:o.Struct({interactions:Mt,linkedVariables:F,localVariables:$,localized:_l,name:o.String().default(\"View\"),states:Nl,style:Bn}).required()});var Hn=o.Struct({paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,width:gt,height:bt,minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,backgroundColor:Pt,backgroundEnabled:Vt,backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,borderTopLeftRadius:Or,borderTopRightRadius:Mr,borderBottomRightRadius:jr,borderBottomLeftRadius:Br,opacity:X,overflow:Me,zIndex:je,position:vt,left:St,top:Tt,right:xt,bottom:wt,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe.default(\"auto\")}).default({}),kl=Lr(Hn.partial({stripDefaults:!0}).default({})),Il=o.Array(kl).default([]),Al=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Rl=o.Struct({horizontal:o.Boolean().default(!1),interactions:Mt,linkedVariables:F,localVariables:$,localized:Al,name:o.String().default(\"ScrollView\"),showsScrollIndicator:o.Boolean().default(!0),states:Il,style:Hn}).required(),Ze=o.TreeNode(\"scrollView\",{children:()=>[Je,o.TreeNodeSelf,we,xe,Qe],data:Rl});var Cl=o.Struct({actionBindings:o.Array(o.Struct({action:En.required(),name:o.String().required()})).default([]),componentSource:o.String().default(\"catalog\"),componentPath:o.String().default(\"\"),componentSlug:o.String().default(\"\"),componentVersion:o.Number().default(0),contentHash:o.String().default(\"\"),name:o.String().default(\"Component\"),previewState:o.String().default(\"default\"),props:o.Array(o.Struct({name:o.String().required(),value:qn.required(),localizedValues:o.Array(o.Struct({locale:o.String().required(),value:Dr.required()})).default([])})).default([])}).required(),Qe=o.TreeNode(\"component\",{children:()=>[Je,Ze,we,xe,o.TreeNodeSelf],data:Cl});var Un=o.TreeNode(\"library\",{children:()=>[Dn],data:o.Struct({}).required()});var $n=o.Struct({x:Xo,y:Jo,width:o.Number().default(375),height:o.Number().default(812),minWidth:me,maxWidth:ye,minHeight:he,maxHeight:ge,paddingTop:st,paddingRight:ut,paddingBottom:ct,paddingLeft:ft,marginTop:oe,marginRight:ae,marginBottom:de,marginLeft:le,gap:pt,justifyContent:mt,alignItems:yt,flexDirection:ht,backgroundColor:Pt.default(\"rgba(255, 255, 255, 1)\"),backgroundEnabled:Vt.default(!0),backgroundType:Nt,backgroundGradient:_t,backgroundImage:Te,borderTopWidth:Re,borderRightWidth:Ce,borderBottomWidth:qe,borderLeftWidth:Ee,borderColor:De,borderStyle:Le,borderEnabled:Oe,opacity:X,overflow:Me,zIndex:je,display:J,shadowEnabled:Be,shadowColor:He,shadowOffsetX:Ue,shadowOffsetY:$e,shadowRadius:Fe,shadowOpacity:ze,safeAreaTop:kt,safeAreaBottom:It,flex:se,flexGrow:ue,flexShrink:ce,flexBasis:fe,alignSelf:pe}).default({}),ql=Ae($n.partial({stripDefaults:!0}).default({})),El=o.Array(ql).default([]),Dl=o.Array(o.Struct({locale:o.String().required(),overrides:o.Struct({backgroundImage:Te}).partial({stripDefaults:!0}).default({})})).default([]),Fn=o.TreeNode(\"screen\",{children:()=>[Je,Ze,we,xe,Qe],data:o.Struct({linkedVariables:F,localVariables:$,localized:Dl,name:o.String().default(\"Screen\"),states:El,style:$n}).required()});var Ll=o.Struct({defaultLocale:o.String().default(\"en\"),locales:o.Array(o.Struct({tag:o.String().required()})).default([])}).default({}),zn=o.TreeNode(\"root\",{children:()=>[Fn,Un],data:o.Struct({localization:Ll,name:o.String()}).required()});var Wn=o.Tree({root:zn});function Hr(e){return e!==null&&typeof e==\"object\"&&\"id\"in e&&\"pos\"in e&&\"value\"in e?e.value:e}function Kn(e){let t=e.indexOf(\"-\");return t===-1?e:e.slice(0,t)}function ma(e,t,r){let n=e.text,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.text;if(f===void 0||f===\"\")continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}function ya(e,t,r){let n=e.style.backgroundImage,i=e.localized;if(t==null||t===r||i===void 0||i.length===0)return n;let a=t.toLowerCase(),d=Kn(a),l;for(let s of i){let u=Hr(s);if(u===void 0)continue;let f=u.overrides?.backgroundImage;if(f===void 0)continue;let c=u.locale.toLowerCase();if(c===a)return f;l===void 0&&c===d&&(l=f)}return l??n}var Gn=e=>Array.isArray(e)?e.map(Gn):typeof e!=\"object\"||e===null?e:Object.fromEntries(Object.entries(e).sort(([t],[r])=>t.localeCompare(r)).map(([t,r])=>[t,Gn(r)])),ha=e=>JSON.stringify(Gn(wo(e.schema))),ga=e=>{let t=new Map;for(let r of e){let n=`${r.database}\\0${r.collection}`;if(t.has(n))throw new Error(`Duplicate migration collection ${r.database}/${r.collection}`);let i=r.baseline;for(let[a,d]of r.migrations.entries()){let l=a+1;if(!Number.isSafeInteger(d.version)||d.version!==l)throw new Error(`Expected migration version ${l} for ${r.database}/${r.collection}, received ${d.version}`);if(ha(i)!==ha(d.from))throw new Error(`Migration ${d.version} (${d.name}) does not start from the previous schema`);i=d.to}t.set(n,r)}return{collections:[...e],find:(r,n)=>t.get(`${r}\\0${n}`)}};var Ol=\"voidhash\",Ml=\"paywalls\",Ch=ga([{database:Ol,databaseDescription:\"Voidhash paywall documents\",collection:Ml,baseline:Wn,migrations:[]}]);var Dh=o.Struct({cursor:o.Struct({x:o.Number().required(),y:o.Number().required()}),name:o.String(),participant:o.Union({agent:o.Struct({editSessionId:o.String().required(),kind:o.Literal(\"agent\").required(),source:o.Either(o.Literal(\"built_in\"),o.Literal(\"mcp\")).required()}),human:o.Struct({kind:o.Literal(\"human\").required()})},{discriminator:\"kind\"}).required(),selectedNodeIds:o.Array(o.String()).default([]),user:o.Struct({color:o.String().required(),name:o.String().required()}).required()});function At(e){let{locale:t,defaultLocale:r}=te();return ya(e,t,r)}function ba({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=At(e.data),i=Jt(n===e.data.style.backgroundImage?r:{...r,backgroundImage:n}),a=Zt(r);return b(\"div\",{\"data-node-id\":e.id,style:i,children:b(\"div\",{style:a,children:t})})}function Ur(e,t,r){let{getNodeVariables:n,setNodeVariable:i,callbacks:a}=te(),d=n(e),l=j(()=>({...a,onSetVariable:(f,c)=>{i(e,f,c)}}),[a,e,i]),s=j(()=>t.filter(f=>f.value?.trigger?.type===\"click\"),[t]),u=ee(()=>{for(let f of s){let c=f.value;if(!c?.action)continue;let m=f.id??c.id;if(!m)continue;let N=tn(m,r,d)??c.action;rn(N,d,l)}},[s,r,d,l]);if(s.length!==0)return u}function va({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=Yt(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i},{horizontal:e.data.horizontal,showsScrollIndicator:e.data.showsScrollIndicator});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function Sa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Qt(r),i=e.data.viewBox,a=`${i.minX} ${i.minY} ${i.width} ${i.height}`;return b(\"div\",{\"data-node-id\":e.id,style:n,children:b(\"svg\",{height:\"100%\",preserveAspectRatio:r.preserveAspectRatio,style:{display:\"block\"},viewBox:a,width:\"100%\",children:t})})}function Ta({node:e}){let t=W(e.id,e.data.style,e.data.states),r=er(t),{locale:n,defaultLocale:i}=te();return b(\"span\",{\"data-node-id\":e.id,style:r,children:ma(e.data,n,i)})}function xa({node:e,children:t}){let r=W(e.id,e.data.style,e.data.states),n=Ur(e.id,e.data.interactions,e.data.states),i=At(e.data),a=it(i===e.data.style.backgroundImage?r:{...r,backgroundImage:i});return b(\"div\",{\"data-node-id\":e.id,onClick:n,style:{...a,...n?{cursor:\"pointer\"}:{}},children:t})}function wa({snapshot:e,componentArtifacts:t,locale:r}){return b(Li,{componentArtifacts:t,locale:r,snapshot:e,children:b(Pa,{node:e})})}var jl={alignItems:\"center\",backgroundColor:\"#f4f4f5\",border:\"1px dashed #d4d4d8\",borderRadius:\"6px\",boxSizing:\"border-box\",color:\"#71717a\",display:\"flex\",fontSize:\"11px\",justifyContent:\"center\",minHeight:\"40px\",padding:\"8px\",textAlign:\"center\"};function Bl({node:e}){return b(\"div\",{style:jl,children:`Unsupported node type: ${String(e.type)}`})}function Pa({node:e}){let t=(e.children??[]).map(r=>b(Pa,{node:r},r.id));switch(e.type){case\"root\":return b(Q,{children:t});case\"screen\":return b(ba,{node:e,children:t});case\"view\":return b(xa,{node:e,children:t});case\"scrollView\":return b(va,{node:e,children:t});case\"text\":return b(Ta,{node:e});case\"shape\":return b(Sa,{node:e,children:t});case\"path\":return b(Hi,{node:e});case\"component\":return b(Bi,{node:e,children:t});case\"library\":case\"codeComponent\":return null;default:return b(Bl,{node:e})}}var Hl=\"__VOIDHASH_PAYWALL__\",Va={products:[],variables:{}},Ul=e=>({products:e?.products??[],variables:e?.variables??{},locale:e?.locale,platform:e?.platform,safeAreaInsets:e?.safeAreaInsets,dimensions:e?.dimensions,defaultSelectedProductId:e?.defaultSelectedProductId}),Na=()=>{if(typeof window>\"u\")return Va;let e=window[Hl];return e?Ul(e):Va};function _a(e){return Na().locale??e}function $l(e){let t;try{t=JSON.parse(e)}catch{return}if(!(typeof t!=\"object\"||t===null)){if(\"type\"in t)return{componentArtifacts:void 0,locale:void 0,snapshot:t};if(\"snapshot\"in t){let r=t;return{componentArtifacts:r.componentArtifacts,locale:r.locale,snapshot:r.snapshot}}}}function ka(){let e=document.getElementById(\"__PAYWALL_DATA__\");if(!e?.textContent)return;let t=document.getElementById(\"paywall-root\");if(!t)return;let r=$l(e.textContent);r&&ui(b(wa,{componentArtifacts:r.componentArtifacts,locale:_a(r.locale),snapshot:r.snapshot}),t)}document.readyState===\"loading\"?document.addEventListener(\"DOMContentLoaded\",ka):ka();})();\n";
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1d3a4e75d..d57c7fd70 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1135,6 +1135,9 @@ importers:
       esbuild:
         specifier: ^0.25.10
         version: 0.25.12
+      jsdom:
+        specifier: ^26.1.0
+        version: 26.1.0
       react:
         specifier: 'catalog:'
         version: 19.1.0

From b9744bf674f949900871fe1b865c44e0ae9fb210 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 17 Jul 2026 16:54:36 +0200
Subject: [PATCH 100/129] feat: add mcp bash tool over read-only workspace vfs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds a `bash` tool to the shared workspace-tool core, backed by
just-bash (imported via `just-bash/browser` so the same pure-JS bundle
runs in workerd and the Node self-host). Each call gets a fresh shell
over a lazily-projected virtual filesystem:

- /paywalls/<paywallId>/document.json — cleaned document JSON
- /paywalls/<paywallId>/components/<name>.tsx — local component sources
- /README.md + writable /tmp scratch (single call only)

Paywall directories resolve on demand with per-call memoization and are
gated by the project listing, so a multi-project credential cannot read
outside the scoped project. No network, no script runtimes, 30s timeout,
40KB/8KB output caps; writes into projections fail with EROFS. Custom
commands register via `workspaceCustomCommands` (`voidhash`,
`voidhash paywalls` ship first).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 apps/backend/package.json                   |   1 +
 apps/backend/src/ai/tools.test.ts           |  41 ++++
 apps/backend/src/ai/vfs/bash-tool.test.ts   | 124 +++++++++++
 apps/backend/src/ai/vfs/bash-tool.ts        |  89 ++++++++
 apps/backend/src/ai/vfs/readonly-fs.test.ts | 111 ++++++++++
 apps/backend/src/ai/vfs/readonly-fs.ts      | 222 ++++++++++++++++++++
 apps/backend/src/ai/vfs/workspace-vfs.ts    | 208 ++++++++++++++++++
 apps/backend/src/ai/workspace-tools.ts      |  72 +++++++
 apps/backend/src/mcp/protocol.test.ts       |   2 +-
 apps/backend/src/mcp/protocol.ts            |   2 +-
 apps/backend/src/mcp/tool-manifest.test.ts  |  17 +-
 apps/backend/src/mcp/tool-manifest.ts       |  23 +-
 12 files changed, 904 insertions(+), 8 deletions(-)
 create mode 100644 apps/backend/src/ai/vfs/bash-tool.test.ts
 create mode 100644 apps/backend/src/ai/vfs/bash-tool.ts
 create mode 100644 apps/backend/src/ai/vfs/readonly-fs.test.ts
 create mode 100644 apps/backend/src/ai/vfs/readonly-fs.ts
 create mode 100644 apps/backend/src/ai/vfs/workspace-vfs.ts

diff --git a/apps/backend/package.json b/apps/backend/package.json
index 2ea099d84..40b1a3fa5 100644
--- a/apps/backend/package.json
+++ b/apps/backend/package.json
@@ -28,6 +28,7 @@
     "@workos-inc/node": "9.2.0",
     "effect": "catalog:",
     "jose": "catalog:",
+    "just-bash": "3.1.0",
     "preact": "^10.25.4",
     "zod": "catalog:"
   },
diff --git a/apps/backend/src/ai/tools.test.ts b/apps/backend/src/ai/tools.test.ts
index fb6c03933..d86dddf66 100644
--- a/apps/backend/src/ai/tools.test.ts
+++ b/apps/backend/src/ai/tools.test.ts
@@ -9,6 +9,7 @@ import {
   SnapshotImageRenderer,
 } from "@voidhash/core/services";
 import { AuthSession } from "@voidhash/core/domain/auth/Auth";
+import { PaywallNotFoundError } from "@voidhash/core/domain/paywall/Paywall";
 import { Context, Effect } from "effect";
 import { describe, expect, it } from "vite-plus/test";
 
@@ -90,6 +91,12 @@ const fakeWorkspace = (over: Partial<PaywallWorkspaceService["Service"]> = {}) =
         root: documentRoot,
         version: 8,
       }),
+    readDocumentTree: (paywallId: string) =>
+      paywallId === "pw_1"
+        ? Effect.succeed({ tree: { encoded: true }, root: documentRoot, version: 8 })
+        : Effect.fail(
+            new PaywallNotFoundError({ message: `No paywall with id "${paywallId}"` }),
+          ),
     readConnectedDocumentTree: () =>
       Effect.succeed({ tree: { encoded: true }, root: documentRoot, version: 8 }),
     editDocument: () =>
@@ -207,6 +214,40 @@ describe("MCP workspace tools (document-first)", () => {
     expect(result.output).toContain("/paywalls/trial");
   });
 
+  it("bash reads projected documents and component sources over the VFS", async () => {
+    const result = await run(
+      WorkspaceTools.runBash(SCOPE, {
+        command: "ls /paywalls && cat /paywalls/pw_1/components/hero.tsx",
+      }),
+    );
+    expect(result.isError, result.output).toBe(false);
+    expect(result.output).toContain("pw_1");
+    expect(result.output).toContain("export const Hero");
+  });
+
+  it("bash reports a non-zero exit code as a successful result", async () => {
+    const result = await run(
+      WorkspaceTools.runBash(SCOPE, {
+        command: "grep no-such-token /paywalls/pw_1/document.json",
+      }),
+    );
+    expect(result.isError, result.output).toBe(false);
+    expect(result.output).toContain("[exit code 1]");
+  });
+
+  it("bash surfaces a workspace service failure as isError", async () => {
+    const result = await run(
+      WorkspaceTools.runBash(SCOPE, { command: "ls /paywalls" }),
+      {
+        workspace: fakeWorkspace({
+          listPaywalls: () => Effect.fail(new Error("db down")) as never,
+        }),
+      },
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("db down");
+  });
+
   it("get_paywall returns cleaned document JSON with node ids", async () => {
     const result = await run(WorkspaceTools.getPaywall(SCOPE, { editSessionId: EDIT_SESSION_ID }));
     expect(result.isError).toBe(false);
diff --git a/apps/backend/src/ai/vfs/bash-tool.test.ts b/apps/backend/src/ai/vfs/bash-tool.test.ts
new file mode 100644
index 000000000..fff8e61ec
--- /dev/null
+++ b/apps/backend/src/ai/vfs/bash-tool.test.ts
@@ -0,0 +1,124 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { runWorkspaceBash, truncateBashOutput } from "./bash-tool.ts";
+import type { PaywallVfsFiles, WorkspaceVfsSources } from "./workspace-vfs.ts";
+
+/**
+ * Fixture sources: two paywalls, `pw_1` with one local component. `readCalls`
+ * counts document reads per paywall id so tests can assert the per-call
+ * memoization and the listing scope gate.
+ */
+const fixtureSources = (): { sources: WorkspaceVfsSources; readCalls: Map<string, number> } => {
+  const readCalls = new Map<string, number>();
+  const paywalls: Record<string, PaywallVfsFiles> = {
+    pw_1: {
+      documentJson: `${JSON.stringify({ id: "root1", name: "Trial", token: "trial-token" }, null, 2)}\n`,
+      components: [{ fileName: "hero.tsx", source: "export const Hero = () => null;\n" }],
+    },
+    pw_2: {
+      documentJson: `${JSON.stringify({ id: "root2", name: "Onboarding" }, null, 2)}\n`,
+      components: [],
+    },
+  };
+  const sources: WorkspaceVfsSources = {
+    listPaywalls: async () => [
+      { paywallId: "pw_1", slug: "trial" },
+      { paywallId: "pw_2", slug: "onboarding" },
+    ],
+    readPaywall: async (paywallId) => {
+      readCalls.set(paywallId, (readCalls.get(paywallId) ?? 0) + 1);
+      return paywalls[paywallId] ?? null;
+    },
+  };
+  return { sources, readCalls };
+};
+
+describe("runWorkspaceBash", () => {
+  it("lists the root with README, paywalls mount, and scratch dirs", async () => {
+    const { sources } = fixtureSources();
+    const result = await runWorkspaceBash(sources, "ls /");
+    expect(result.exitCode).toBe(0);
+    const names = result.stdout.trim().split("\n");
+    expect(names).toContain("README.md");
+    expect(names).toContain("paywalls");
+    expect(names).toContain("tmp");
+  });
+
+  it("serves the README and the paywall projections", async () => {
+    const { sources } = fixtureSources();
+    const readme = await runWorkspaceBash(sources, "cat /README.md");
+    expect(readme.stdout).toContain("/paywalls/<paywallId>/document.json");
+
+    const listing = await runWorkspaceBash(sources, "ls /paywalls");
+    expect(listing.stdout.trim().split("\n").sort()).toEqual(["pw_1", "pw_2"]);
+
+    const document = await runWorkspaceBash(sources, "cat /paywalls/pw_1/document.json");
+    expect(document.exitCode).toBe(0);
+    expect(document.stdout).toContain("trial-token");
+
+    const component = await runWorkspaceBash(
+      sources,
+      "cat /paywalls/pw_1/components/hero.tsx",
+    );
+    expect(component.stdout).toContain("export const Hero");
+  });
+
+  it("reads each paywall document exactly once per call under grep -r", async () => {
+    const { sources, readCalls } = fixtureSources();
+    const result = await runWorkspaceBash(
+      sources,
+      "grep -rl trial-token /paywalls && grep -c trial-token /paywalls/pw_1/document.json",
+    );
+    expect(result.exitCode, result.stderr).toBe(0);
+    expect(result.stdout).toContain("/paywalls/pw_1/document.json");
+    expect(readCalls.get("pw_1")).toBe(1);
+    expect(readCalls.get("pw_2")).toBe(1);
+  });
+
+  it("refuses ids outside the project listing without reading them", async () => {
+    const { sources, readCalls } = fixtureSources();
+    const result = await runWorkspaceBash(sources, "cat /paywalls/pw_403/document.json");
+    expect(result.exitCode).not.toBe(0);
+    expect(result.stderr).toContain("No such file or directory");
+    expect(readCalls.has("pw_403")).toBe(false);
+  });
+
+  it("rejects writes into the projection with EROFS but allows /tmp scratch", async () => {
+    const { sources } = fixtureSources();
+    const write = await runWorkspaceBash(sources, "echo x > /paywalls/pw_1/scratch.txt");
+    expect(write.exitCode).not.toBe(0);
+    expect(write.stderr).toContain("EROFS");
+
+    const scratch = await runWorkspaceBash(
+      sources,
+      "echo scratch-ok > /tmp/x && cat /tmp/x",
+    );
+    expect(scratch.exitCode).toBe(0);
+    expect(scratch.stdout).toBe("scratch-ok\n");
+  });
+
+  it("answers voidhash and voidhash paywalls", async () => {
+    const { sources } = fixtureSources();
+    const help = await runWorkspaceBash(sources, "voidhash");
+    expect(help.stdout).toContain("read-only projection");
+
+    const paywalls = await runWorkspaceBash(sources, "voidhash paywalls");
+    expect(paywalls.stdout).toBe("pw_1\ttrial\npw_2\tonboarding\n");
+
+    const unknown = await runWorkspaceBash(sources, "voidhash nope");
+    expect(unknown.exitCode).toBe(1);
+    expect(unknown.stderr).toContain("unknown subcommand");
+  });
+});
+
+describe("truncateBashOutput", () => {
+  it("passes short output through and truncates long output with a notice", () => {
+    const short = truncateBashOutput({ stdout: "ok\n", stderr: "" });
+    expect(short).toEqual({ stdout: "ok\n", stderr: "" });
+
+    const long = truncateBashOutput({ stdout: "x".repeat(50_000), stderr: "y".repeat(9_000) });
+    expect(long.stdout.length).toBeLessThan(41_000);
+    expect(long.stdout).toContain("[stdout truncated at 40kB");
+    expect(long.stderr).toContain("[stderr truncated at 8kB");
+  });
+});
diff --git a/apps/backend/src/ai/vfs/bash-tool.ts b/apps/backend/src/ai/vfs/bash-tool.ts
new file mode 100644
index 000000000..fbdc78016
--- /dev/null
+++ b/apps/backend/src/ai/vfs/bash-tool.ts
@@ -0,0 +1,89 @@
+/**
+ * The just-bash execution seam behind the `bash` workspace tool: a fresh,
+ * sandboxed shell per invocation over {@link makeWorkspaceVfs}. No network, no
+ * script runtimes — the default pure-JS command set (grep/sed/awk/jq/…) plus
+ * the `voidhash` custom command. Custom commands register in
+ * {@link workspaceCustomCommands}.
+ */
+import { Bash, defineCommand, type CustomCommand, type ExecResult } from "just-bash/browser";
+
+import {
+  makeWorkspaceVfs,
+  WORKSPACE_VFS_README,
+  type WorkspaceVfsSources,
+} from "./workspace-vfs.ts";
+
+/** stdout cap for one bash result (~10k tokens). */
+export const MAX_BASH_STDOUT = 40_000;
+/** stderr cap for one bash result. */
+export const MAX_BASH_STDERR = 8_000;
+
+const voidhashCommand = (sources: WorkspaceVfsSources): CustomCommand =>
+  defineCommand("voidhash", async (args) => {
+    const subcommand = args[0];
+    if (subcommand === undefined || subcommand === "help") {
+      return { stdout: WORKSPACE_VFS_README, stderr: "", exitCode: 0 };
+    }
+    if (subcommand === "paywalls") {
+      const paywalls = await sources.listPaywalls();
+      const lines = paywalls.map((paywall) => `${paywall.paywallId}\t${paywall.slug}`);
+      return { stdout: lines.length === 0 ? "" : `${lines.join("\n")}\n`, stderr: "", exitCode: 0 };
+    }
+    return {
+      stdout: "",
+      stderr: `voidhash: unknown subcommand '${subcommand}' (usage: voidhash [help|paywalls])\n`,
+      exitCode: 1,
+    };
+  });
+
+const workspaceCustomCommands = (sources: WorkspaceVfsSources): CustomCommand[] => [
+  voidhashCommand(sources),
+];
+
+// Filesystem errors from redirect targets (`echo x > /paywalls/...`) escape
+// the interpreter as throws instead of becoming command stderr; a Node-shaped
+// `E<CODE>:` message is an answered question, not an infrastructure failure.
+const isFsError = (error: unknown): error is Error =>
+  error instanceof Error && /^E[A-Z]+: /.test(error.message);
+
+/**
+ * Execute one command line in a fresh workspace shell. Filesystem and shell
+ * state live only for this call; `signal` cooperatively aborts execution.
+ */
+export const runWorkspaceBash = async (
+  sources: WorkspaceVfsSources,
+  command: string,
+  options: { readonly signal?: AbortSignal } = {},
+): Promise<ExecResult> => {
+  const bash = new Bash({
+    fs: await makeWorkspaceVfs(sources),
+    cwd: "/",
+    env: { HOME: "/home/user" },
+    executionLimits: {
+      maxCommandCount: 512,
+      maxOutputSize: 2 * 1024 * 1024,
+    },
+    customCommands: workspaceCustomCommands(sources),
+  });
+  try {
+    return await bash.exec(command, options.signal === undefined ? {} : { signal: options.signal });
+  } catch (error) {
+    if (isFsError(error)) {
+      return { stdout: "", stderr: `bash: ${error.message}\n`, exitCode: 1 };
+    }
+    throw error;
+  }
+};
+
+const truncate = (text: string, max: number, label: string): string =>
+  text.length <= max
+    ? text
+    : `${text.slice(0, max)}\n[${label} truncated at ${Math.round(max / 1000)}kB — narrow with grep/head/wc and rerun]\n`;
+
+/** Cap a bash result's streams to token-friendly sizes, appending a notice. */
+export const truncateBashOutput = (
+  result: Pick<ExecResult, "stdout" | "stderr">,
+): { stdout: string; stderr: string } => ({
+  stdout: truncate(result.stdout, MAX_BASH_STDOUT, "stdout"),
+  stderr: truncate(result.stderr, MAX_BASH_STDERR, "stderr"),
+});
diff --git a/apps/backend/src/ai/vfs/readonly-fs.test.ts b/apps/backend/src/ai/vfs/readonly-fs.test.ts
new file mode 100644
index 000000000..85dd5f208
--- /dev/null
+++ b/apps/backend/src/ai/vfs/readonly-fs.test.ts
@@ -0,0 +1,111 @@
+import { describe, expect, it } from "vite-plus/test";
+
+import { LazyReadOnlyFs, type ReadOnlyDirEntry, type ReadOnlyDirProvider } from "./readonly-fs.ts";
+
+/**
+ * A fixture provider over a static two-level tree:
+ *   /a          (dir)
+ *   /a/x.txt    "hello"
+ *   /top.txt    "root file"
+ */
+const fixtureProvider = (): ReadOnlyDirProvider => {
+  const files = new Map<string, string>([
+    ["a/x.txt", "hello"],
+    ["top.txt", "root file"],
+  ]);
+  const dirs = new Set(["", "a"]);
+  return {
+    async readdir(relPath): Promise<ReadonlyArray<ReadOnlyDirEntry> | null> {
+      if (!dirs.has(relPath)) {
+        return null;
+      }
+      const prefix = relPath === "" ? "" : `${relPath}/`;
+      const entries: ReadOnlyDirEntry[] = [];
+      for (const dir of dirs) {
+        if (dir !== "" && dir.startsWith(prefix) && !dir.slice(prefix.length).includes("/")) {
+          entries.push({ name: dir.slice(prefix.length), kind: "dir" });
+        }
+      }
+      for (const file of files.keys()) {
+        if (file.startsWith(prefix) && !file.slice(prefix.length).includes("/")) {
+          entries.push({ name: file.slice(prefix.length), kind: "file" });
+        }
+      }
+      return entries;
+    },
+    async stat(relPath) {
+      if (dirs.has(relPath)) {
+        return { kind: "dir" };
+      }
+      const content = files.get(relPath);
+      return content === undefined ? null : { kind: "file" };
+    },
+    async readFile(relPath) {
+      return files.get(relPath) ?? null;
+    },
+  };
+};
+
+describe("LazyReadOnlyFs", () => {
+  it("maps readdir/stat/readFile onto the provider", async () => {
+    const fs = new LazyReadOnlyFs(fixtureProvider());
+    expect((await fs.readdir("/")).sort()).toEqual(["a", "top.txt"]);
+    expect(await fs.readdir("/a")).toEqual(["x.txt"]);
+    expect(await fs.readFile("/a/x.txt")).toBe("hello");
+    expect(await fs.exists("/a/x.txt")).toBe(true);
+    expect(await fs.exists("/nope")).toBe(false);
+    const stat = await fs.stat("/a/x.txt");
+    expect(stat.isFile).toBe(true);
+    expect(stat.size).toBe(5);
+    expect((await fs.stat("/a")).isDirectory).toBe(true);
+    expect(await fs.realpath("/a/../a/x.txt")).toBe("/a/x.txt");
+  });
+
+  it("reports typed dirents without extra stat calls", async () => {
+    const fs = new LazyReadOnlyFs(fixtureProvider());
+    const entries = await fs.readdirWithFileTypes("/");
+    expect(entries.find((entry) => entry.name === "a")?.isDirectory).toBe(true);
+    expect(entries.find((entry) => entry.name === "top.txt")?.isFile).toBe(true);
+  });
+
+  it("throws Node-shaped errors for missing and mistyped paths", async () => {
+    const fs = new LazyReadOnlyFs(fixtureProvider());
+    await expect(fs.readFile("/nope.txt")).rejects.toThrow(
+      "ENOENT: no such file or directory, open '/nope.txt'",
+    );
+    await expect(fs.readFile("/a")).rejects.toThrow(
+      "EISDIR: illegal operation on a directory, read '/a'",
+    );
+    await expect(fs.stat("/nope")).rejects.toThrow(
+      "ENOENT: no such file or directory, stat '/nope'",
+    );
+    await expect(fs.readdir("/nope")).rejects.toThrow(
+      "ENOENT: no such file or directory, scandir '/nope'",
+    );
+    await expect(fs.readdir("/top.txt")).rejects.toThrow(
+      "ENOTDIR: not a directory, scandir '/top.txt'",
+    );
+    await expect(fs.readlink("/a/x.txt")).rejects.toThrow(
+      "EINVAL: invalid argument, readlink '/a/x.txt'",
+    );
+  });
+
+  it("throws EROFS for every mutation", async () => {
+    const fs = new LazyReadOnlyFs(fixtureProvider());
+    const mutations: ReadonlyArray<[string, Promise<unknown>]> = [
+      ["writeFile", fs.writeFile("/a/x.txt")],
+      ["appendFile", fs.appendFile("/a/x.txt")],
+      ["mkdir", fs.mkdir("/b")],
+      ["rm", fs.rm("/a/x.txt")],
+      ["cp", fs.cp("/a/x.txt", "/a/y.txt")],
+      ["mv", fs.mv("/a/x.txt")],
+      ["chmod", fs.chmod("/a/x.txt")],
+      ["symlink", fs.symlink("/a/x.txt", "/a/l")],
+      ["link", fs.link("/a/x.txt", "/a/l")],
+      ["utimes", fs.utimes("/a/x.txt")],
+    ];
+    for (const [name, promise] of mutations) {
+      await expect(promise, name).rejects.toThrow(/^EROFS: read-only file system/);
+    }
+  });
+});
diff --git a/apps/backend/src/ai/vfs/readonly-fs.ts b/apps/backend/src/ai/vfs/readonly-fs.ts
new file mode 100644
index 000000000..a5589704e
--- /dev/null
+++ b/apps/backend/src/ai/vfs/readonly-fs.ts
@@ -0,0 +1,222 @@
+/**
+ * A lazy, read-only just-bash filesystem backend over a small provider seam.
+ *
+ * Mounted under a {@link https://github.com/vercel-labs/just-bash MountableFs}
+ * mount point, so every path this filesystem sees is already mount-relative
+ * (`/` = the mount root). Listings and contents are resolved on demand from the
+ * provider — nothing is materialized up front — which keeps `ls /paywalls`
+ * cheap while `grep -r` still reaches every file. All mutations throw `EROFS`.
+ */
+import type { FsStat, IFileSystem } from "just-bash/browser";
+
+type DirentEntry = Awaited<ReturnType<NonNullable<IFileSystem["readdirWithFileTypes"]>>>[number];
+
+/** One entry of a provider directory listing. */
+export interface ReadOnlyDirEntry {
+  readonly name: string;
+  readonly kind: "file" | "dir";
+}
+
+/**
+ * The data source behind one read-only mount. Paths are provider-relative with
+ * no leading slash (`""` = the mount root, `"a/b.txt"` = a nested file).
+ * Implementations should memoize expensive reads per instance — one provider
+ * instance lives for exactly one bash invocation.
+ */
+export interface ReadOnlyDirProvider {
+  /** Entries of a directory, or `null` when the path is not a directory. */
+  readdir(relPath: string): Promise<ReadonlyArray<ReadOnlyDirEntry> | null>;
+  /** Kind (and optional byte size) of a path, or `null` when it does not exist. */
+  stat(relPath: string): Promise<{ kind: "file" | "dir"; size?: number } | null>;
+  /** Content of a file, or `null` when the path is not a file. */
+  readFile(relPath: string): Promise<string | null>;
+}
+
+// Error messages mirror just-bash's own InMemoryFs formats exactly — its
+// coreutils branch on the `ENOENT:`/`EISDIR:`/... message prefixes when
+// rendering `cat`/`ls` failures.
+const enoent = (syscall: string, path: string): Error =>
+  new Error(`ENOENT: no such file or directory, ${syscall} '${path}'`);
+const eisdir = (syscall: string, path: string): Error =>
+  new Error(`EISDIR: illegal operation on a directory, ${syscall} '${path}'`);
+const enotdir = (syscall: string, path: string): Error =>
+  new Error(`ENOTDIR: not a directory, scandir '${path}'`);
+const einval = (syscall: string, path: string): Error =>
+  new Error(`EINVAL: invalid argument, ${syscall} '${path}'`);
+const erofs = (syscall: string, path: string): Error =>
+  new Error(
+    `EROFS: read-only file system, ${syscall} '${path}' — this folder is a read-only projection; use /tmp for scratch files`,
+  );
+
+/** Resolve `.`/`..` segments of an absolute POSIX path (no symlinks to follow). */
+const normalizePath = (path: string): string => {
+  const segments: string[] = [];
+  for (const segment of path.split("/")) {
+    if (segment === "" || segment === ".") {
+      continue;
+    }
+    if (segment === "..") {
+      segments.pop();
+      continue;
+    }
+    segments.push(segment);
+  }
+  return `/${segments.join("/")}`;
+};
+
+const relative = (path: string): string => normalizePath(path).slice(1);
+
+const FILE_MODE = 0o644;
+const DIR_MODE = 0o755;
+
+export class LazyReadOnlyFs implements IFileSystem {
+  private readonly mtime = new Date();
+  private readonly pathPrefix: string;
+
+  constructor(
+    private readonly provider: ReadOnlyDirProvider,
+    options: { readonly pathPrefix?: string } = {},
+  ) {
+    this.pathPrefix = options.pathPrefix ?? "";
+  }
+
+  // Mounted filesystems receive mount-relative paths; errors that escape the
+  // interpreter (e.g. a redirect's failed `open`) render the raw path, so
+  // re-prefix with the mount point to keep messages in the user's vocabulary.
+  private display(path: string): string {
+    const normalized = normalizePath(path);
+    return normalized === "/" ? this.pathPrefix || "/" : `${this.pathPrefix}${normalized}`;
+  }
+
+  async readFile(path: string): Promise<string> {
+    const content = await this.provider.readFile(relative(path));
+    if (content !== null) {
+      return content;
+    }
+    const stat = await this.provider.stat(relative(path));
+    throw stat?.kind === "dir"
+      ? eisdir("read", this.display(path))
+      : enoent("open", this.display(path));
+  }
+
+  async readFileBuffer(path: string): Promise<Uint8Array> {
+    return new TextEncoder().encode(await this.readFile(path));
+  }
+
+  async writeFile(path: string): Promise<void> {
+    throw erofs("open", this.display(path));
+  }
+
+  async appendFile(path: string): Promise<void> {
+    throw erofs("open", this.display(path));
+  }
+
+  async exists(path: string): Promise<boolean> {
+    return (await this.provider.stat(relative(path))) !== null;
+  }
+
+  async stat(path: string): Promise<FsStat> {
+    const stat = await this.provider.stat(relative(path));
+    if (stat === null) {
+      throw enoent("stat", this.display(path));
+    }
+    const size =
+      stat.kind === "file"
+        ? (stat.size ??
+          new TextEncoder().encode((await this.provider.readFile(relative(path))) ?? "").length)
+        : 0;
+    return {
+      isFile: stat.kind === "file",
+      isDirectory: stat.kind === "dir",
+      isSymbolicLink: false,
+      mode: stat.kind === "file" ? FILE_MODE : DIR_MODE,
+      size,
+      mtime: this.mtime,
+    };
+  }
+
+  async lstat(path: string): Promise<FsStat> {
+    return this.stat(path);
+  }
+
+  async mkdir(path: string): Promise<void> {
+    throw erofs("mkdir", this.display(path));
+  }
+
+  async readdir(path: string): Promise<string[]> {
+    const entries = await this.provider.readdir(relative(path));
+    if (entries === null) {
+      const stat = await this.provider.stat(relative(path));
+      throw stat === null
+        ? enoent("scandir", this.display(path))
+        : enotdir("scandir", this.display(path));
+    }
+    return entries.map((entry) => entry.name);
+  }
+
+  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {
+    const entries = await this.provider.readdir(relative(path));
+    if (entries === null) {
+      const stat = await this.provider.stat(relative(path));
+      throw stat === null
+        ? enoent("scandir", this.display(path))
+        : enotdir("scandir", this.display(path));
+    }
+    return entries.map((entry) => ({
+      name: entry.name,
+      isFile: entry.kind === "file",
+      isDirectory: entry.kind === "dir",
+      isSymbolicLink: false,
+    }));
+  }
+
+  async rm(path: string): Promise<void> {
+    throw erofs("rm", this.display(path));
+  }
+
+  async cp(src: string, dest: string): Promise<void> {
+    throw erofs("cp", this.display(dest));
+  }
+
+  async mv(src: string): Promise<void> {
+    throw erofs("rename", this.display(src));
+  }
+
+  resolvePath(base: string, path: string): string {
+    return path.startsWith("/") ? normalizePath(path) : normalizePath(`${base}/${path}`);
+  }
+
+  // Sync by contract, so a lazy backend cannot enumerate here. Nothing in
+  // just-bash consumes it outside FS-composition internals (globs walk
+  // `readdir`), so reporting just the root is safe.
+  getAllPaths(): string[] {
+    return ["/"];
+  }
+
+  async chmod(path: string): Promise<void> {
+    throw erofs("chmod", this.display(path));
+  }
+
+  async symlink(_target: string, linkPath: string): Promise<void> {
+    throw erofs("symlink", this.display(linkPath));
+  }
+
+  async link(_existingPath: string, newPath: string): Promise<void> {
+    throw erofs("link", this.display(newPath));
+  }
+
+  async readlink(path: string): Promise<string> {
+    throw einval("readlink", this.display(path));
+  }
+
+  async realpath(path: string): Promise<string> {
+    if (!(await this.exists(path))) {
+      throw enoent("realpath", this.display(path));
+    }
+    return normalizePath(path);
+  }
+
+  async utimes(path: string): Promise<void> {
+    throw erofs("utimes", this.display(path));
+  }
+}
diff --git a/apps/backend/src/ai/vfs/workspace-vfs.ts b/apps/backend/src/ai/vfs/workspace-vfs.ts
new file mode 100644
index 000000000..9a61ce613
--- /dev/null
+++ b/apps/backend/src/ai/vfs/workspace-vfs.ts
@@ -0,0 +1,208 @@
+/**
+ * The workspace virtual filesystem the `bash` tool executes over: read-only
+ * projections of the project's paywall workspace mounted over a writable
+ * in-memory base (`/README.md`, `/tmp`, `/home/user`).
+ *
+ * Layout:
+ *
+ * - `/paywalls/<paywallId>/document.json` — cleaned document JSON (the same
+ *   shape `get_paywall` returns).
+ * - `/paywalls/<paywallId>/components/<name>.tsx` — local code-component TSX.
+ *
+ * Adding a future folder (`/builtins`, `/components` catalog, `/examples`) is
+ * one new {@link ReadOnlyDirProvider} plus one mount entry in
+ * {@link makeWorkspaceVfs}.
+ */
+import { serializeDocument, type SnapshotDocumentNode } from "@voidhash/ai-shared";
+import { fileNameFromDocRelative } from "@voidhash/paywall-workspace";
+import { InMemoryFs, MountableFs, type IFileSystem } from "just-bash/browser";
+
+import {
+  LazyReadOnlyFs,
+  type ReadOnlyDirEntry,
+  type ReadOnlyDirProvider,
+} from "./readonly-fs.ts";
+
+/** One paywall of the scoped project, as listed by the workspace service. */
+export interface WorkspaceVfsPaywall {
+  readonly slug: string;
+  readonly paywallId: string;
+}
+
+/** The projected files of one paywall directory. */
+export interface PaywallVfsFiles {
+  readonly documentJson: string;
+  readonly components: ReadonlyArray<{ readonly fileName: string; readonly source: string }>;
+}
+
+/**
+ * The data the VFS reads, as plain promise-returning functions so the VFS
+ * modules stay Effect-free and unit-testable with fixtures. `readPaywall`
+ * returns `null` for an unknown id (e.g. a paywall deleted mid-call).
+ */
+export interface WorkspaceVfsSources {
+  listPaywalls(): Promise<ReadonlyArray<WorkspaceVfsPaywall>>;
+  readPaywall(paywallId: string): Promise<PaywallVfsFiles | null>;
+}
+
+/**
+ * Shape a decoded document root into its VFS files: pretty-printed cleaned
+ * document JSON plus the local `codeComponent` sources (walked from the
+ * singleton `library` node) named by their `<name>.tsx` file basename.
+ */
+export const paywallVfsFiles = (root: SnapshotDocumentNode | null): PaywallVfsFiles => {
+  const cleaned = root === null ? null : serializeDocument([root]);
+  const library = (root?.children ?? []).find((child) => child.type === "library");
+  const components = (library?.children ?? []).flatMap((node) => {
+    if (node.type !== "codeComponent") {
+      return [];
+    }
+    const data = (node.data ?? {}) as { path?: unknown; source?: unknown };
+    return typeof data.path === "string" && typeof data.source === "string"
+      ? [{ fileName: fileNameFromDocRelative(data.path), source: data.source }]
+      : [];
+  });
+  return { documentJson: `${JSON.stringify(cleaned, null, 2)}\n`, components };
+};
+
+const COMPONENTS_DIR = "components";
+const DOCUMENT_FILE = "document.json";
+
+/**
+ * `/paywalls` provider: one directory per paywall id. The listing and each
+ * paywall's files are memoized per instance (= per bash invocation), so a
+ * `grep -r /paywalls` reads every document exactly once. Ids not present in
+ * the project listing resolve to ENOENT without touching `readPaywall` — the
+ * listing is the project-scope gate.
+ */
+export class PaywallsProvider implements ReadOnlyDirProvider {
+  private listing: Promise<ReadonlyArray<WorkspaceVfsPaywall>> | undefined;
+  private readonly files = new Map<string, Promise<PaywallVfsFiles | null>>();
+
+  constructor(private readonly sources: WorkspaceVfsSources) {}
+
+  private list(): Promise<ReadonlyArray<WorkspaceVfsPaywall>> {
+    this.listing ??= this.sources.listPaywalls();
+    return this.listing;
+  }
+
+  private async filesOf(paywallId: string): Promise<PaywallVfsFiles | null> {
+    const listed = (await this.list()).some((paywall) => paywall.paywallId === paywallId);
+    if (!listed) {
+      return null;
+    }
+    let files = this.files.get(paywallId);
+    if (files === undefined) {
+      files = this.sources.readPaywall(paywallId);
+      this.files.set(paywallId, files);
+    }
+    return files;
+  }
+
+  async readdir(relPath: string): Promise<ReadonlyArray<ReadOnlyDirEntry> | null> {
+    const segments = relPath === "" ? [] : relPath.split("/");
+    if (segments.length === 0) {
+      const paywalls = await this.list();
+      return paywalls.map((paywall) => ({ name: paywall.paywallId, kind: "dir" }));
+    }
+    if (segments.length === 1) {
+      const files = await this.filesOf(segments[0]!);
+      return files === null
+        ? null
+        : [
+            { name: DOCUMENT_FILE, kind: "file" },
+            { name: COMPONENTS_DIR, kind: "dir" },
+          ];
+    }
+    if (segments.length === 2 && segments[1] === COMPONENTS_DIR) {
+      const files = await this.filesOf(segments[0]!);
+      return files === null
+        ? null
+        : files.components.map((component) => ({ name: component.fileName, kind: "file" }));
+    }
+    return null;
+  }
+
+  async stat(relPath: string): Promise<{ kind: "file" | "dir"; size?: number } | null> {
+    const segments = relPath === "" ? [] : relPath.split("/");
+    if (segments.length === 0) {
+      return { kind: "dir" };
+    }
+    if (segments.length === 1) {
+      return (await this.filesOf(segments[0]!)) === null ? null : { kind: "dir" };
+    }
+    if (segments.length === 2) {
+      const files = await this.filesOf(segments[0]!);
+      if (files === null) {
+        return null;
+      }
+      if (segments[1] === DOCUMENT_FILE) {
+        return { kind: "file", size: new TextEncoder().encode(files.documentJson).length };
+      }
+      return segments[1] === COMPONENTS_DIR ? { kind: "dir" } : null;
+    }
+    if (segments.length === 3 && segments[1] === COMPONENTS_DIR) {
+      const source = await this.componentSource(segments[0]!, segments[2]!);
+      return source === null
+        ? null
+        : { kind: "file", size: new TextEncoder().encode(source).length };
+    }
+    return null;
+  }
+
+  async readFile(relPath: string): Promise<string | null> {
+    const segments = relPath === "" ? [] : relPath.split("/");
+    if (segments.length === 2 && segments[1] === DOCUMENT_FILE) {
+      const files = await this.filesOf(segments[0]!);
+      return files === null ? null : files.documentJson;
+    }
+    if (segments.length === 3 && segments[1] === COMPONENTS_DIR) {
+      return this.componentSource(segments[0]!, segments[2]!);
+    }
+    return null;
+  }
+
+  private async componentSource(paywallId: string, fileName: string): Promise<string | null> {
+    const files = await this.filesOf(paywallId);
+    const component = files?.components.find((candidate) => candidate.fileName === fileName);
+    return component?.source ?? null;
+  }
+}
+
+export const WORKSPACE_VFS_README = `# Voidhash workspace (read-only projection)
+
+Layout:
+  /paywalls/<paywallId>/document.json          cleaned document JSON (same shape as get_paywall)
+  /paywalls/<paywallId>/components/<name>.tsx  local code-component TSX sources
+  /tmp                                         writable scratch — lives only within this single bash call
+
+Directory names under /paywalls are paywall ids: pass them directly to begin_paywall_edit.
+Run \`voidhash paywalls\` for an id → slug listing.
+
+Everything except /tmp and /home/user is READ-ONLY (writes fail with EROFS). Each bash call is
+a fresh shell and filesystem — chain steps with && and pipes instead of relying on state.
+To modify a paywall, use begin_paywall_edit + edit_paywall / write_component.
+`;
+
+/**
+ * Build the per-call workspace filesystem: a writable in-memory base carrying
+ * `/README.md` and the scratch dirs, with the read-only `/paywalls` projection
+ * mounted over it.
+ */
+export const makeWorkspaceVfs = async (sources: WorkspaceVfsSources): Promise<IFileSystem> => {
+  const base = new InMemoryFs({ "/README.md": WORKSPACE_VFS_README });
+  const fs = new MountableFs({
+    base,
+    mounts: [
+      {
+        mountPoint: "/paywalls",
+        filesystem: new LazyReadOnlyFs(new PaywallsProvider(sources), {
+          pathPrefix: "/paywalls",
+        }),
+      },
+    ],
+  });
+  await fs.mkdir("/tmp");
+  await fs.mkdir("/home/user", { recursive: true });
+  return fs;
+};
diff --git a/apps/backend/src/ai/workspace-tools.ts b/apps/backend/src/ai/workspace-tools.ts
index d6d6fa4d9..03cb0ebb3 100644
--- a/apps/backend/src/ai/workspace-tools.ts
+++ b/apps/backend/src/ai/workspace-tools.ts
@@ -58,6 +58,9 @@ import {
 } from "@voidhash/paywall-workspace";
 import { Cause, Effect, Exit, Option } from "effect";
 
+import { runWorkspaceBash, truncateBashOutput } from "./vfs/bash-tool.ts";
+import { paywallVfsFiles, type WorkspaceVfsSources } from "./vfs/workspace-vfs.ts";
+
 /** The context (services) every workspace tool closes over when it runs. */
 export type WorkspaceToolDeps =
   | PaywallWorkspaceService
@@ -200,6 +203,10 @@ const runFolded = <A>(
 /** Inputs for each workspace tool, matching the MCP tool schemas. */
 export interface ListPaywallsInput {}
 
+export interface RunBashInput {
+  readonly command: string;
+}
+
 /** Stable paywall target shared by every paywall-scoped tool. */
 export interface PaywallTargetInput {
   readonly paywallId: string;
@@ -375,6 +382,71 @@ export const listPaywalls = (
     return okResult(`${result.value.length} paywall(s):\n${lines.join("\n")}`);
   });
 
+/**
+ * `bash` — one read-only research command over the workspace VFS
+ * (`/paywalls/<paywallId>/…`), executed in a fresh just-bash shell. A completed
+ * exec is a success even on a non-zero exit code (`grep` exiting 1 on no match
+ * is a valid answer) — the exit code and stderr are reported in the output;
+ * only infrastructure failures (service errors, the 30s timeout) fold to
+ * `isError`.
+ */
+export const runBash = (
+  scope: WorkspaceToolScope,
+  input: RunBashInput,
+): Effect.Effect<WorkspaceToolResult, never, WorkspaceToolDeps> =>
+  Effect.gen(function* () {
+    const ws = yield* PaywallWorkspaceService;
+    const context = yield* Effect.context<WorkspaceToolDeps>();
+    const runEffect = Effect.runPromiseWith(context);
+    // A rejected VFS read gets re-rendered by the shell (e.g. `ls` prints a
+    // generic not-found), so the first service failure is recorded here and
+    // wins over whatever the shell made of it.
+    let serviceFailure: string | undefined;
+    const runSource = <A>(effect: Effect.Effect<A, unknown, WorkspaceToolDeps>): Promise<A> =>
+      runEffect(runFolded(effect)).then((folded) => {
+        if (folded.ok) {
+          return folded.value;
+        }
+        serviceFailure ??= folded.message;
+        throw new Error(folded.message);
+      });
+    const sources: WorkspaceVfsSources = {
+      listPaywalls: () => runSource(ws.listPaywalls(scope.projectId)),
+      readPaywall: (paywallId) =>
+        runSource(
+          ws.readDocumentTree(paywallId).pipe(
+            Effect.map((document) =>
+              paywallVfsFiles((document.root as SnapshotDocumentNode | null) ?? null),
+            ),
+            Effect.catchTag("PaywallNotFoundError", () => Effect.succeed(null)),
+          ),
+        ),
+    };
+    const result = yield* runFolded(
+      Effect.tryPromise((signal) => runWorkspaceBash(sources, input.command, { signal })).pipe(
+        Effect.timeout("30 seconds"),
+      ),
+    );
+    if (serviceFailure !== undefined) {
+      return errResult(`bash failed: ${serviceFailure}`);
+    }
+    if (!result.ok) {
+      return errResult(`bash failed: ${result.message}`);
+    }
+    const { stdout, stderr } = truncateBashOutput(result.value);
+    const sections: string[] = [];
+    if (stdout.length > 0) {
+      sections.push(stdout);
+    }
+    if (stderr.length > 0) {
+      sections.push(`[stderr]\n${stderr}`);
+    }
+    if (result.value.exitCode !== 0) {
+      sections.push(`[exit code ${result.value.exitCode}]`);
+    }
+    return okResult(sections.length > 0 ? sections.join("\n") : "(no output)");
+  });
+
 /**
  * Adapt a decoded document snapshot node to the ai-shared
  * {@link EditableDocumentNode} the validator reads (`data` verbatim — the
diff --git a/apps/backend/src/mcp/protocol.test.ts b/apps/backend/src/mcp/protocol.test.ts
index 3d6111576..a16672b20 100644
--- a/apps/backend/src/mcp/protocol.test.ts
+++ b/apps/backend/src/mcp/protocol.test.ts
@@ -101,7 +101,7 @@ describe("tools/list", () => {
   it("returns the tool descriptors with JSON Schema inputs", async () => {
     const response = await run(msg("tools/list"));
     const result = (response as { result: { tools: Array<Record<string, unknown>> } }).result;
-    expect(result.tools.length).toBe(13);
+    expect(result.tools.length).toBe(14);
     const listPaywalls = result.tools[0];
     expect(listPaywalls.name).toBe("list_paywalls");
     expect((listPaywalls.inputSchema as { type: string }).type).toBe("object");
diff --git a/apps/backend/src/mcp/protocol.ts b/apps/backend/src/mcp/protocol.ts
index d200ebe1a..914d34b23 100644
--- a/apps/backend/src/mcp/protocol.ts
+++ b/apps/backend/src/mcp/protocol.ts
@@ -133,7 +133,7 @@ const initializeResult = (params: Record<string, unknown> | undefined) => ({
   capabilities: { tools: {}, resources: {}, prompts: {} },
   serverInfo: SERVER_INFO,
   instructions:
-    "Begin a paywall edit session before using scoped tools. The returned editSessionId is the connection handle. Prefer document variables, conditional states, and actions for dynamic behavior without code. Review the final PNG preview and finish with its exact document signature, or revert the session.",
+    "Begin a paywall edit session before using scoped tools. The returned editSessionId is the connection handle. Prefer document variables, conditional states, and actions for dynamic behavior without code. Review the final PNG preview and finish with its exact document signature, or revert the session. Use the bash tool to research paywalls read-only before editing (`cat /README.md` for the layout).",
 });
 
 /** The `tools/list` result: the advertised tool descriptors. */
diff --git a/apps/backend/src/mcp/tool-manifest.test.ts b/apps/backend/src/mcp/tool-manifest.test.ts
index 64b78bdc8..dd729b660 100644
--- a/apps/backend/src/mcp/tool-manifest.test.ts
+++ b/apps/backend/src/mcp/tool-manifest.test.ts
@@ -13,6 +13,7 @@ describe("MCP tool manifest", () => {
     const names = mcpToolDescriptors().map((d) => d.name);
     expect(names).toEqual([
       "list_paywalls",
+      "bash",
       "begin_paywall_edit",
       "get_paywall",
       "get_components",
@@ -28,10 +29,9 @@ describe("MCP tool manifest", () => {
     ]);
   });
 
-  it("no longer advertises the deleted stateless-build / bash tools", () => {
+  it("no longer advertises the deleted stateless-build tools", () => {
     const names = mcpToolDescriptors().map((d) => d.name);
     for (const removed of [
-      "bash",
       "read_file",
       "get_diagnostics",
       "validate_paywall",
@@ -41,6 +41,19 @@ describe("MCP tool manifest", () => {
     }
   });
 
+  it("bash requires a non-empty command", async () => {
+    const tool = findMcpTool("bash")!;
+    expect(tool.descriptor.inputSchema.required).toEqual(["command"]);
+    const result = await Effect.runPromise(
+      tool.dispatch({ projectId: "proj_1" }, { command: "" }) as Effect.Effect<{
+        output: string;
+        isError: boolean;
+      }>,
+    );
+    expect(result.isError).toBe(true);
+    expect(result.output).toContain("invalid arguments");
+  });
+
   it("every descriptor has an object JSON Schema with a description", () => {
     for (const { descriptor } of MCP_TOOLS) {
       expect(descriptor.description.length).toBeGreaterThan(0);
diff --git a/apps/backend/src/mcp/tool-manifest.ts b/apps/backend/src/mcp/tool-manifest.ts
index 6ed4576a4..bbe6356fb 100644
--- a/apps/backend/src/mcp/tool-manifest.ts
+++ b/apps/backend/src/mcp/tool-manifest.ts
@@ -56,6 +56,14 @@ export interface McpTool {
  */
 const mcpToolSchemas = {
   list_paywalls: z.strictObject({}),
+  bash: z.strictObject({
+    command: z
+      .string()
+      .min(1)
+      .describe(
+        "Bash command line. Pipes, &&, and redirects into /tmp are allowed; each call is a fresh shell (no state across calls).",
+      ),
+  }),
   begin_paywall_edit: z.strictObject({
     paywallId: z.string().describe("Stable id of the paywall to edit (from list_paywalls)."),
   }),
@@ -194,10 +202,11 @@ const validatedTool = <Input>(
 });
 
 /**
- * The MCP tools, in advertised order: discovery (`list_paywalls`), read
- * (`get_paywall` / `get_components` / `read_component`), then the write surface
- * (`edit_paywall` for composition, `write_component` / `rename_component` /
- * `delete_component` for code components).
+ * The MCP tools, in advertised order: discovery (`list_paywalls`), research
+ * (`bash` over the read-only workspace VFS), read (`get_paywall` /
+ * `get_components` / `read_component`), then the write surface (`edit_paywall`
+ * for composition, `write_component` / `rename_component` / `delete_component`
+ * for code components).
  */
 export const MCP_TOOLS: ReadonlyArray<McpTool> = [
   validatedTool(
@@ -206,6 +215,12 @@ export const MCP_TOOLS: ReadonlyArray<McpTool> = [
     mcpToolSchemas.list_paywalls,
     (scope) => WorkspaceTools.listPaywalls(scope),
   ),
+  validatedTool(
+    "bash",
+    "Run a read-only bash command over a virtual filesystem projecting this project's paywall workspace — use it to RESEARCH, not edit. Standard tools work: ls, cat, grep, rg, find, head, tail, sed, awk, jq, wc, sort, diff, tree. Layout: /README.md (this map), /paywalls/<paywallId>/document.json (cleaned document JSON, same shape as get_paywall), /paywalls/<paywallId>/components/<name>.tsx (local component TSX sources). Directory names are paywall ids — pass them directly to begin_paywall_edit. Everything except /tmp is READ-ONLY (writes fail with EROFS); /tmp lives only within this single call, so chain steps with && and pipes. Custom command: `voidhash` (help), `voidhash paywalls` (paywallId + slug listing). No network, no state across calls; stdout is capped at ~40KB — prefer targeted greps over dumping whole trees (grep -r /paywalls loads every paywall document; fine occasionally, not per query). To modify anything, use begin_paywall_edit + edit_paywall/write_component.",
+    mcpToolSchemas.bash,
+    WorkspaceTools.runBash,
+  ),
   validatedTool(
     "begin_paywall_edit",
     "Begin an explicit edit session for one paywall. This opens an independent Mimic participant connection, captures its revert baseline, and returns the editSessionId required by every scoped tool. Multiple users and agents may edit the same paywall concurrently.",

From ce8d0e4d7521f88a1a9e24343ec480c861d33286 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 17 Jul 2026 17:03:59 +0200
Subject: [PATCH 101/129] fix: add just-bash to the standalone lockfile

just-bash@3.1.0 landed in apps/backend/package.json (#111) with only the
mono workspace lockfile updated, leaving this repo's frozen-lockfile
check broken.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 pnpm-lock.yaml | 412 ++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 406 insertions(+), 6 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1d3a4e75d..b217fc867 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -303,6 +303,9 @@ importers:
       jose:
         specifier: 'catalog:'
         version: 6.1.3
+      just-bash:
+        specifier: 3.1.0
+        version: 3.1.0
       preact:
         specifier: ^10.25.4
         version: 10.29.2
@@ -336,7 +339,7 @@ importers:
         version: link:../../packages/tsconfig
       alchemy:
         specifier: 'catalog:'
-        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0)
+        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0)
       typescript:
         specifier: 'catalog:'
         version: 6.0.3
@@ -1478,7 +1481,7 @@ importers:
         version: link:../lib
       drizzle-orm:
         specifier: 1.0.0-rc.3
-        version: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3)
+        version: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3)
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -3322,6 +3325,9 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@borewit/text-codec@0.2.2':
+    resolution: {integrity: sha512-DDaRehssg1aNrH4+2hnj1B7vnUGEjU6OIlyRdkMd0aUdIUvKXrJfXsy8LVtXAy7DRvYVluWbMspsRhz2lcW0mQ==}
+
   '@braintree/sanitize-url@7.1.2':
     resolution: {integrity: sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA==}
 
@@ -4574,6 +4580,21 @@ packages:
     resolution: {integrity: sha512-u3UPsIilWKOM3F9CXtrG8LEJmNxwoCQC/XVj4IKYXvvpx7QIi/Kg1LI5uDmDpKlac62NUtX7eLjRh+jVZcLOzw==}
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
 
+  '@jitl/quickjs-ffi-types@0.32.0':
+    resolution: {integrity: sha512-v9T+GQpmk43VDJ7d72sf0Nexhk+ArvtUihW27dy7lqAl0zBObFKtSBBIm5RBjwIhE8VwsPPm9PNuvPvNqLWUEg==}
+
+  '@jitl/quickjs-wasmfile-debug-asyncify@0.32.0':
+    resolution: {integrity: sha512-EX8zbXwGqCgAE764M+qvkHtyXDi/FUoMBea0JnES7vCM3P7a2+EOZOjGv85wtZ2sJhI1oJ+nekmqpOODFDY+hw==}
+
+  '@jitl/quickjs-wasmfile-debug-sync@0.32.0':
+    resolution: {integrity: sha512-LeYWrPGC1uNCTBWvibo3ZLJj0CSVNYUXvJpXMCmuQ5Sap2cCACc3uvGvYV4homHHBAzfw5akoTqMMS4YFRtw+Q==}
+
+  '@jitl/quickjs-wasmfile-release-asyncify@0.32.0':
+    resolution: {integrity: sha512-3oSwPfja12ICz4aIblB58cuY8JlEq5Txt8Cut4VLo+LH47QN+mzCnSgnbB03hWzg1LBcc+VyyI9UOag7a1NF+Q==}
+
+  '@jitl/quickjs-wasmfile-release-sync@0.32.0':
+    resolution: {integrity: sha512-BKNDI/TPBfGlLNGYpLrhcDGXmIk4xHm4MRAisOBnOzpXVn9HZWsfmMAc9WMBrAHjvvds6HOikKeaOBKdPdpVrg==}
+
   '@jridgewell/gen-mapping@0.3.13':
     resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
 
@@ -4674,6 +4695,9 @@ packages:
       '@opentelemetry/api':
         optional: true
 
+  '@mixmark-io/domino@2.2.0':
+    resolution: {integrity: sha512-Y28PR25bHXUg88kCV7nivXrP2Nj2RueZ3/l/jdx6J9f8J4nsEGcgX0Qe6lt7Pa+J79+kPiJU3LguR6O/6zrLOw==}
+
   '@monaco-editor/loader@1.7.0':
     resolution: {integrity: sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA==}
 
@@ -4684,6 +4708,10 @@ packages:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
       react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  '@mongodb-js/zstd@7.0.0':
+    resolution: {integrity: sha512-mQ2s0pYYiav+tzCDR05Zptem8Ey2v8s11lri5RKGhTtL4COVCvVCk5vtyRYNT+9L8qSfyOqqefF9UtnW8mC5jA==}
+    engines: {node: '>= 20.19.0'}
+
   '@monogrid/gainmap-js@3.4.0':
     resolution: {integrity: sha512-2Z0FATFHaoYJ8b+Y4y4Hgfn3FRFwuU5zRrk+9dFWp4uGAdHGqVEdP7HP+gLA3X469KXHmfupJaUbKo1b/aDKIg==}
     peerDependencies:
@@ -7422,6 +7450,13 @@ packages:
       '@types/react-dom':
         optional: true
 
+  '@tokenizer/inflate@0.4.1':
+    resolution: {integrity: sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==}
+    engines: {node: '>=18'}
+
+  '@tokenizer/token@0.3.0':
+    resolution: {integrity: sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==}
+
   '@tootallnate/once@2.0.1':
     resolution: {integrity: sha512-HqmEUIGRJ5fSXchkVgR5F7qn48bDBzv0kWj/Kfu5e6uci4UlEeng4331LnBkWffb++Ei3FOVLxo8JJWMFBDMeQ==}
     engines: {node: '>= 10'}
@@ -8620,6 +8655,9 @@ packages:
   birpc@4.0.0:
     resolution: {integrity: sha512-LShSxJP0KTmd101b6DRyGBj57LZxSDYWKitQNW/mi8GRMvZb078Uf9+pveax1DrVL89vm7mWe+TovdI/UDOuPw==}
 
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
   blake3-wasm@2.1.5:
     resolution: {integrity: sha512-F1+K8EbfOZE49dtoPtmxUQrpXaBIl3ICvasLh+nJta0xkz+9kF/7uet9fLnwKqhDrmj6g+6K3Tw9yQPUg2ka5g==}
 
@@ -8807,6 +8845,9 @@ packages:
     resolution: {integrity: sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==}
     engines: {node: '>= 20.19.0'}
 
+  chownr@1.1.4:
+    resolution: {integrity: sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==}
+
   chownr@3.0.0:
     resolution: {integrity: sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==}
     engines: {node: '>=18'}
@@ -9320,6 +9361,10 @@ packages:
     resolution: {integrity: sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==}
     engines: {node: '>=0.10'}
 
+  decompress-response@6.0.0:
+    resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
+    engines: {node: '>=10'}
+
   dedent@1.7.2:
     resolution: {integrity: sha512-WzMx3mW98SN+zn3hgemf4OzdmyNhhhKz5Ay0pUfQiMQ3e1g+xmTJWp/pKdwKVXhdSkAEGIIzqeuWrL3mV/AXbA==}
     peerDependencies:
@@ -9679,6 +9724,9 @@ packages:
   encoding-sniffer@0.2.1:
     resolution: {integrity: sha512-5gvq20T6vfpekVtqrYQsSCFZ1wEg5+wW0/QaZMWkFr6BqD3NfKs0rLCx4rrVlSWJeZb5NBJgVLswK/w2MWU+Gw==}
 
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
   engine.io-parser@5.2.3:
     resolution: {integrity: sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==}
     engines: {node: '>=10.0.0'}
@@ -10065,6 +10113,10 @@ packages:
     resolution: {integrity: sha512-Zk/eNKV2zbjpKzrsQ+n1G6poVbErQxJ0LBOJXaKZ1EViLzH+hrLu9cdXI4zw9dBQJslwBEpbQ2P1oS7nDxs6jQ==}
     engines: {node: '>= 0.8.0'}
 
+  expand-template@2.0.3:
+    resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==}
+    engines: {node: '>=6'}
+
   expect-type@1.3.0:
     resolution: {integrity: sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==}
     engines: {node: '>=12.0.0'}
@@ -10320,6 +10372,10 @@ packages:
     resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
     engines: {node: '>=16.0.0'}
 
+  file-type@21.3.4:
+    resolution: {integrity: sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==}
+    engines: {node: '>=20'}
+
   fill-range@7.1.1:
     resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==}
     engines: {node: '>=8'}
@@ -10397,6 +10453,9 @@ packages:
     resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==}
     engines: {node: '>= 0.6'}
 
+  fs-constants@1.0.0:
+    resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
+
   fs-readdir-recursive@1.1.0:
     resolution: {integrity: sha512-GNanXlVr2pf02+sPN40XN8HG+ePaNcvM0q5mZBd668Obwb0yD5GiUbZOFgwn8kGMY6I3mdyDJzieUy3PTYyTRA==}
 
@@ -10551,6 +10610,9 @@ packages:
     resolution: {integrity: sha512-L5bGsVkxJbJgdnwyuheIunkGatUF/zssUoxxjACCseZYAVbaqdh9Tsmmlkl8vYan09H7sbvKt4pS8GqKLBrEzA==}
     hasBin: true
 
+  github-from-package@0.0.0:
+    resolution: {integrity: sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==}
+
   github-slugger@2.0.0:
     resolution: {integrity: sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw==}
 
@@ -10852,6 +10914,10 @@ packages:
   ini@1.3.8:
     resolution: {integrity: sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==}
 
+  ini@6.0.0:
+    resolution: {integrity: sha512-IBTdIkzZNOpqm7q3dRqJvMaldXjDHWkEDfrwGEQTs5eaQMWV+djAhR+wahyNNMAa+qpbDUhBMVt4ZKNwpPm7xQ==}
+    engines: {node: ^20.17.0 || >=22.9.0}
+
   ini@7.0.0:
     resolution: {integrity: sha512-ifK0CgjALofS5bkrcTy4RaQ9Vx2Knf/eLeIO+NaswQEpH1UblrtTSCIvN71qQDMq0PeQ/SSPojvEJp9vvvfr+w==}
     engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
@@ -11422,6 +11488,10 @@ packages:
   jszip@3.10.1:
     resolution: {integrity: sha512-xXDvecyTpGLrqFrvkrUSoxxfJI5AH7U8zxxtVclpsUtMCq4JQ290LY8AW5c7Ggnr/Y/oK+bQMbqK2qmtk3pN4g==}
 
+  just-bash@3.1.0:
+    resolution: {integrity: sha512-/t28X8EH3+j/zvELGkNhlFV2g6hc3oHBzy6zPBnNq2nqUN0DGS9PsD889JfQ7F6ll08gqFoutiS+VJHK30wZpg==}
+    hasBin: true
+
   jwa@2.0.1:
     resolution: {integrity: sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==}
 
@@ -12033,6 +12103,10 @@ packages:
     resolution: {integrity: sha512-VP79XUPxV2CigYP3jWwAUFSku2aKqBH7uTAapFWCBqutsbmDo96KY5o8uh6U+/YSIn5OxJnXp73beVkpqMIGhA==}
     engines: {node: '>=18'}
 
+  mimic-response@3.1.0:
+    resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
+    engines: {node: '>=10'}
+
   min-indent@1.0.1:
     resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
     engines: {node: '>=4'}
@@ -12068,6 +12142,9 @@ packages:
     resolution: {integrity: sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==}
     engines: {node: '>= 18'}
 
+  mkdirp-classic@0.5.3:
+    resolution: {integrity: sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==}
+
   mkdirp@1.0.4:
     resolution: {integrity: sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==}
     engines: {node: '>=10'}
@@ -12076,6 +12153,10 @@ packages:
   mlly@1.8.2:
     resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
 
+  modern-tar@0.7.6:
+    resolution: {integrity: sha512-sweCIVXzx1aIGTCdzcMlSZt1h8k5Tmk08VNAuRk3IU28XamGiOH5ypi11g6De2CH7PhYqSSnGy2A/EFhbWnVKg==}
+    engines: {node: '>=18.0.0'}
+
   monaco-editor@0.52.2:
     resolution: {integrity: sha512-GEQWEZmfkOGLdd3XK8ryrfWz3AIP8YymVXiPHEdewrUq7mh0qrKrfHLNCXcbB6sTnMLnOZ3ztSiKcciFUkIJwQ==}
 
@@ -12150,6 +12231,9 @@ packages:
     resolution: {integrity: sha512-i0tloweeudshAEuddpDxcg9Ik6pkPfVsHIgKyf143JrgG7/MOh0+q7BypdLXZPoOP7fOYt1eTcwGkyiVmhJFkA==}
     engines: {node: ^20.0.0 || >=22.0.0}
 
+  napi-build-utils@2.0.0:
+    resolution: {integrity: sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==}
+
   napi-postinstall@0.3.4:
     resolution: {integrity: sha512-PHI5f1O0EP5xJ9gQmFGMS6IZcrVvTjpXjz7Na41gTE7eE2hK11lg04CECCYEEjdc17EV4DO+fkGEtt7TpTaTiQ==}
     engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
@@ -12184,6 +12268,14 @@ packages:
     deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
     hasBin: true
 
+  node-abi@3.94.0:
+    resolution: {integrity: sha512-W5ZNO5KRPB5TkYmGVD9F6YqhsglXJzE6etpbmT+f6EQElhiX/UTG551cnsRGvLG3fyZEg9HwaDmNmj5nwJ4z9g==}
+    engines: {node: '>=10'}
+
+  node-addon-api@8.9.0:
+    resolution: {integrity: sha512-ekZMeaaIzSQTSpr7X2X3iJM7lTzgnx8ahAG9pJfT/7+14mlEM8ZYQ9cgCDvSSRbReFK0oHli3WrZdCiRsgAT9Q==}
+    engines: {node: ^18 || ^20 || >= 21}
+
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
@@ -12204,9 +12296,18 @@ packages:
     resolution: {integrity: sha512-s+w+rBWnpTMwSFbaE0UXsRlg7hU4FjekKU4eyAih5T8nJuNZT1nNsskXpxmeqSK9UzkBl6UgRlnKc8hz8IEqOw==}
     hasBin: true
 
+  node-gyp-build@4.8.4:
+    resolution: {integrity: sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ==}
+    hasBin: true
+
   node-int64@0.4.0:
     resolution: {integrity: sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==}
 
+  node-liblzma@2.2.0:
+    resolution: {integrity: sha512-s0KzNOWwOJJgPG6wxg6cKohnAl9Wk/oW1KrQaVzJBjQwVcUGPQCzpR46Ximygjqj/3KhOrtJXnYMp/xYAXp75g==}
+    engines: {node: '>=16.0.0'}
+    hasBin: true
+
   node-modules-regexp@1.0.0:
     resolution: {integrity: sha512-JMaRS9L4wSRIR+6PTVEikTrq/lMGEZR43a48ETeilY0Q0iMwVnccMFrUM1k+tNzmYuIU0Vh710bCUqHX+/+ctQ==}
     engines: {node: '>=0.10.0'}
@@ -12432,6 +12533,9 @@ packages:
   pako@1.0.11:
     resolution: {integrity: sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==}
 
+  papaparse@5.5.4:
+    resolution: {integrity: sha512-SwzWD9gl/ElwYLCI0nUja1mFJzjq2D8ziShfNBa7zCHzkOozeOGDwHWQ+tvCzEZcewecWZ5U7kUopDnG+DFYEQ==}
+
   parent-module@1.0.1:
     resolution: {integrity: sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==}
     engines: {node: '>=6'}
@@ -12753,6 +12857,12 @@ packages:
   preact@10.29.2:
     resolution: {integrity: sha512-7tNmwg/7mzzAoB/8kSg6Hl37JraAZw3Z3A0JSY7VXlZwo82Xn0G7wKbNNs2qoF4ZEEsQGTwDAroNdqKs1ofJxQ==}
 
+  prebuild-install@7.1.3:
+    resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
+    engines: {node: '>=10'}
+    deprecated: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
+    hasBin: true
+
   prelude-ls@1.2.1:
     resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==}
     engines: {node: '>= 0.8.0'}
@@ -12836,6 +12946,9 @@ packages:
   psl@1.15.0:
     resolution: {integrity: sha512-JZd3gMVBAVQkSs6HdNZo9Sdo0LNcQeMNP3CozBJb3JYC/QUYZTnKxP+f8oWRX4rHP5EurWxqAHTSwUCjlNKa1w==}
 
+  pump@3.0.4:
+    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
+
   punycode@2.3.1:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
@@ -12883,6 +12996,13 @@ packages:
   quick-format-unescaped@4.0.4:
     resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
 
+  quickjs-emscripten-core@0.32.0:
+    resolution: {integrity: sha512-QFnPfjFey8EqknSrSxe1hZrf1/8z7/6s1QzGOmKo6++02r7QRRX7ZoyNaZh7JuVjWsVW87KnQrbZqnHkOAzUyg==}
+
+  quickjs-emscripten@0.32.0:
+    resolution: {integrity: sha512-So0Sqw869y/S2oE3Nuc0uT3Dhqgvsj8FSrwBdsuTosVsG8ME5/OcudU1GxsrIFdFABgy17GHnTVO9TYV/bLQcA==}
+    engines: {node: '>=16.0.0'}
+
   radix-ui@1.6.2:
     resolution: {integrity: sha512-OwYUjzMwiInCUxgAWpPsavXC3Kh4iyi/49uU1/qZTG3RQDlvegyk1GOMiGvSkjua1RDb3JD3fo3eroL9FV4GQw==}
     peerDependencies:
@@ -12907,6 +13027,9 @@ packages:
     resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
     hasBin: true
 
+  re2js@1.3.3:
+    resolution: {integrity: sha512-s/I5zEAo79SUK0Qw4dpZKpiMwbQ6Gz0KU2NRr7eaO4x/p2g7Vvmn3hdeXDg8VsaUjfj/ora+e9oi27LX/C9+mw==}
+
   react-day-picker@8.10.1:
     resolution: {integrity: sha512-TMx7fNbhLk15eqcMt+7Z7S2KF7mfTId/XJDjKE8f+IUcFn0l08/kI4FiYTL/0yuOLmEcbR4Fwe3GJf/NiiMnPA==}
     peerDependencies:
@@ -13135,6 +13258,10 @@ packages:
   readable-stream@2.3.8:
     resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
 
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
   readable-stream@4.7.0:
     resolution: {integrity: sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -13469,6 +13596,10 @@ packages:
   scroll-into-view-if-needed@3.1.0:
     resolution: {integrity: sha512-49oNpRjWRvnU8NyGVmUaYG4jtTkNonFZI86MmGRDqBphEK2EXT9gdEUoQPZhuBM8yWHxCWbobltqYO5M4XrUvQ==}
 
+  seek-bzip@2.0.0:
+    resolution: {integrity: sha512-SMguiTnYrhpLdk3PwfzHeotrcwi8bNV4iemL9tx9poR/yeaMYwB9VzR1w7b57DuWpuqR8n6oZboi0hj3AxZxQg==}
+    hasBin: true
+
   selderee@0.11.0:
     resolution: {integrity: sha512-5TF+l7p4+OsnP8BCCvSyZiSPc4x4//p5uPwK8TCnVPJYRmU2aYKMpOXvw8zM5a5JvuuCGN1jmsMwuU2W02ukfA==}
 
@@ -13610,6 +13741,12 @@ packages:
   signal-exit@3.0.7:
     resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
 
+  simple-concat@1.0.1:
+    resolution: {integrity: sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==}
+
+  simple-get@4.0.1:
+    resolution: {integrity: sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==}
+
   simple-git-hooks@2.13.1:
     resolution: {integrity: sha512-WszCLXwT4h2k1ufIXAgsbiTOazqqevFCIncOuUBZJ91DdvWcC5+OFkluWRQPrcuSYd8fjq+o2y1QfWqYMoAToQ==}
     hasBin: true
@@ -13651,6 +13788,10 @@ packages:
     resolution: {integrity: sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw==}
     engines: {node: '>=8.0.0'}
 
+  smol-toml@1.7.0:
+    resolution: {integrity: sha512-aqVvWoyO21L23mb+drl4RmMXbf6N7FdHjAhTRA9ZBL7apWBgfWC16KjrASI+1p9GAroljyMHj6fK67i0UiTNvQ==}
+    engines: {node: '>= 18'}
+
   socket.io-adapter@2.5.8:
     resolution: {integrity: sha512-6Oy52pbg+kvdCVvjcN+FnY7BvxZ7cIHNScbvztT/It5d0vbwoJoVZmF2gjJmnV0/4WlXRfG15zc45ySk9Ah8bw==}
 
@@ -13711,6 +13852,12 @@ packages:
   sprintf-js@1.0.3:
     resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==}
 
+  sprintf-js@1.1.3:
+    resolution: {integrity: sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==}
+
+  sql.js@1.14.1:
+    resolution: {integrity: sha512-gcj8zBWU5cFsi9WUP+4bFNXAyF1iRpA3LLyS/DP5xlrNzGmPIizUeBggKa8DbDwdqaKwUcTEnChtd2grWo/x/A==}
+
   sqlstring@2.3.3:
     resolution: {integrity: sha512-qC9iz2FlN7DQl3+wjwn3802RTyjCx7sDvfQEXchwa6CWOx07/WVfh91gBmQ9fahw8snwGEWU3xGzOt4tFyHLxg==}
     engines: {node: '>= 0.6'}
@@ -13892,6 +14039,10 @@ packages:
   strnum@2.4.1:
     resolution: {integrity: sha512-M9eUSMT2dCB2cTNPG7UYj6KuK7RJR2SN2+yCV/fTW3xzTCS6EaGZ5pSMgDIjB7r8zSfTGk+dvvn9rTjpVS9Mwg==}
 
+  strtok3@10.3.5:
+    resolution: {integrity: sha512-ki4hZQfh5rX0QDLLkOCj+h+CVNkqmp/CMf8v8kZpkNVK6jGQooMytqzLZYUVYIZcFZ6yDB70EfD8POcFXiF5oA==}
+    engines: {node: '>=18'}
+
   structured-headers@0.4.1:
     resolution: {integrity: sha512-0MP/Cxx5SzeeZ10p/bZI0S6MpgD+yxAhi1BOQ34jgnMXsCq3j1t6tQnZu+KdlL7dvJTLT3g9xN8tl10TqgFMcg==}
 
@@ -13968,6 +14119,13 @@ packages:
     resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
     engines: {node: '>=6'}
 
+  tar-fs@2.1.5:
+    resolution: {integrity: sha512-OboTd8mmMhZDNPV+UjQcK9yKAatXu2aJ+r1w4im1Otd4M4fl2hwvdoXUxIYHFTHWK/3y3FarBP70v3vwmGlOxw==}
+
+  tar-stream@2.2.0:
+    resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
+    engines: {node: '>=6'}
+
   tar@7.5.19:
     resolution: {integrity: sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==}
     engines: {node: '>=18'}
@@ -14093,6 +14251,10 @@ packages:
     resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
     engines: {node: '>=0.6'}
 
+  token-types@6.1.2:
+    resolution: {integrity: sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==}
+    engines: {node: '>=14.16'}
+
   toml@4.1.1:
     resolution: {integrity: sha512-EBJnVBr3dTXdA89WVFoAIPUqkBjxPMwRqsfuo1r240tKFHXv3zgca4+NJib/h6TyvGF7vOawz0jGuryJCdNHrw==}
     engines: {node: '>=20'}
@@ -14262,6 +14424,9 @@ packages:
     resolution: {integrity: sha512-axr3IdNuVIxnaK5XGEUFTu3YmAQ6lllgrvqfEoR16g/HGnYY/6We4oWENtAnzK6/LpJ2ur9PAb80RBt7/U4ugw==}
     engines: {node: '>= 6.0.0'}
 
+  tunnel-agent@0.6.0:
+    resolution: {integrity: sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==}
+
   tunnel-rat@0.1.2:
     resolution: {integrity: sha512-lR5VHmkPhzdhrM092lI2nACsLO4QubF0/yoOhzX7c+wIpbN1GjHNzCc91QlpxBi+cnx8vVJ+Ur6vL5cEoQPFpQ==}
 
@@ -14269,6 +14434,10 @@ packages:
     resolution: {integrity: sha512-GQpduILaKjoaGljw097ScsSyKTtZSY7cZ3bJktzfTkPMyCf3ShKLuXK2IaOEN2Plziml+ArR7WJ1m+V4VbnaKQ==}
     hasBin: true
 
+  turndown@7.2.4:
+    resolution: {integrity: sha512-I8yFsfRzmzK0WV1pNNOA4A7y4RDfFxPRxb3t+e3ui14qSGOxGtiSP6GjeX+Y6CHb7HYaFj7ECUD7VE5kQMZWGQ==}
+    engines: {node: '>=18', npm: '>=9'}
+
   tw-animate-css@1.4.0:
     resolution: {integrity: sha512-7bziOlRqH0hJx80h/3mbicLW7o8qLsH5+RaLR2t+OHM3D0JlWGODQKQ4cxbK7WlvmUxpcj6Kgu6EKqjrGFe3QQ==}
 
@@ -16620,6 +16789,8 @@ snapshots:
   '@biomejs/cli-win32-x64@2.3.11':
     optional: true
 
+  '@borewit/text-codec@0.2.2': {}
+
   '@braintree/sanitize-url@7.1.2': {}
 
   '@chevrotain/types@11.1.2': {}
@@ -17927,6 +18098,24 @@ snapshots:
       '@types/yargs': 17.0.35
       chalk: 4.1.2
 
+  '@jitl/quickjs-ffi-types@0.32.0': {}
+
+  '@jitl/quickjs-wasmfile-debug-asyncify@0.32.0':
+    dependencies:
+      '@jitl/quickjs-ffi-types': 0.32.0
+
+  '@jitl/quickjs-wasmfile-debug-sync@0.32.0':
+    dependencies:
+      '@jitl/quickjs-ffi-types': 0.32.0
+
+  '@jitl/quickjs-wasmfile-release-asyncify@0.32.0':
+    dependencies:
+      '@jitl/quickjs-ffi-types': 0.32.0
+
+  '@jitl/quickjs-wasmfile-release-sync@0.32.0':
+    dependencies:
+      '@jitl/quickjs-ffi-types': 0.32.0
+
   '@jridgewell/gen-mapping@0.3.13':
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -18066,6 +18255,8 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
+  '@mixmark-io/domino@2.2.0': {}
+
   '@monaco-editor/loader@1.7.0':
     dependencies:
       state-local: 1.0.7
@@ -18077,6 +18268,12 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.0(react@19.1.0)
 
+  '@mongodb-js/zstd@7.0.0':
+    dependencies:
+      node-addon-api: 8.9.0
+      prebuild-install: 7.1.3
+    optional: true
+
   '@monogrid/gainmap-js@3.4.0(three@0.178.0)':
     dependencies:
       promise-worker-transferable: 1.0.4
@@ -21495,6 +21692,15 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  '@tokenizer/inflate@0.4.1':
+    dependencies:
+      debug: 4.4.3
+      token-types: 6.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tokenizer/token@0.3.0': {}
+
   '@tootallnate/once@2.0.1': {}
 
   '@ts-morph/common@0.26.1':
@@ -22957,7 +23163,7 @@ snapshots:
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
-  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0):
+  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0):
     dependencies:
       '@alchemy.run/node-utils': 0.0.5
       '@aws-sdk/credential-providers': 3.1081.0
@@ -23001,7 +23207,7 @@ snapshots:
       '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
       '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
       drizzle-kit: 1.0.0-rc.3
-      drizzle-orm: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
+      drizzle-orm: 1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
       ws: 8.21.0
     transitivePeerDependencies:
       - '@types/react'
@@ -23461,6 +23667,13 @@ snapshots:
 
   birpc@4.0.0: {}
 
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+    optional: true
+
   blake3-wasm@2.1.5: {}
 
   boolbase@1.0.0: {}
@@ -23687,6 +23900,9 @@ snapshots:
     dependencies:
       readdirp: 5.0.0
 
+  chownr@1.1.4:
+    optional: true
+
   chownr@3.0.0: {}
 
   chrome-launcher@0.15.2:
@@ -24253,6 +24469,11 @@ snapshots:
 
   decode-uri-component@0.2.2: {}
 
+  decompress-response@6.0.0:
+    dependencies:
+      mimic-response: 3.1.0
+    optional: true
+
   dedent@1.7.2: {}
 
   deep-eql@5.0.2: {}
@@ -24403,7 +24624,7 @@ snapshots:
       get-tsconfig: 4.14.0
       jiti: 2.7.0
 
-  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6):
+  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6):
     optionalDependencies:
       '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
       '@libsql/client': 0.17.4
@@ -24414,12 +24635,13 @@ snapshots:
       effect: 4.0.0-beta.84
       mysql2: 3.16.0
       pg: 8.22.0
+      sql.js: 1.14.1
       typebox: 1.1.38
       valibot: 1.4.2(typescript@6.0.3)
       zod: 4.3.6
     optional: true
 
-  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3):
+  drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.4.3):
     optionalDependencies:
       '@effect/sql-pg': 4.0.0-beta.84(effect@4.0.0-beta.84)
       '@libsql/client': 0.17.4
@@ -24430,6 +24652,7 @@ snapshots:
       effect: 4.0.0-beta.84
       mysql2: 3.16.0
       pg: 8.22.0
+      sql.js: 1.14.1
       typebox: 1.1.38
       valibot: 1.4.2(typescript@6.0.3)
       zod: 4.4.3
@@ -24500,6 +24723,11 @@ snapshots:
       iconv-lite: 0.6.3
       whatwg-encoding: 3.1.1
 
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+    optional: true
+
   engine.io-parser@5.2.3: {}
 
   engine.io@6.6.9:
@@ -25120,6 +25348,9 @@ snapshots:
 
   exit@0.1.2: {}
 
+  expand-template@2.0.3:
+    optional: true
+
   expect-type@1.3.0: {}
 
   expect@29.7.0:
@@ -25503,6 +25734,15 @@ snapshots:
     dependencies:
       flat-cache: 4.0.1
 
+  file-type@21.3.4:
+    dependencies:
+      '@tokenizer/inflate': 0.4.1
+      strtok3: 10.3.5
+      token-types: 6.1.2
+      uint8array-extras: 1.5.0
+    transitivePeerDependencies:
+      - supports-color
+
   fill-range@7.1.1:
     dependencies:
       to-regex-range: 5.0.1
@@ -25583,6 +25823,9 @@ snapshots:
 
   fresh@0.5.2: {}
 
+  fs-constants@1.0.0:
+    optional: true
+
   fs-readdir-recursive@1.1.0: {}
 
   fs.realpath@1.0.0: {}
@@ -25758,6 +26001,9 @@ snapshots:
       nypm: 0.6.2
       pathe: 2.0.3
 
+  github-from-package@0.0.0:
+    optional: true
+
   github-slugger@2.0.0: {}
 
   glob-parent@5.1.2:
@@ -26136,6 +26382,8 @@ snapshots:
 
   ini@1.3.8: {}
 
+  ini@6.0.0: {}
+
   ini@7.0.0: {}
 
   ink@6.8.0(@types/react@19.1.17)(react-devtools-core@6.1.5)(react@19.2.7):
@@ -27108,6 +27356,29 @@ snapshots:
       readable-stream: 2.3.8
       setimmediate: 1.0.5
 
+  just-bash@3.1.0:
+    dependencies:
+      diff: 8.0.4
+      fast-xml-parser: 5.10.0
+      file-type: 21.3.4
+      ini: 6.0.0
+      minimatch: 10.2.3
+      modern-tar: 0.7.6
+      papaparse: 5.5.4
+      quickjs-emscripten: 0.32.0
+      re2js: 1.3.3
+      seek-bzip: 2.0.0
+      smol-toml: 1.7.0
+      sprintf-js: 1.1.3
+      sql.js: 1.14.1
+      turndown: 7.2.4
+      yaml: 2.8.3
+    optionalDependencies:
+      '@mongodb-js/zstd': 7.0.0
+      node-liblzma: 2.2.0
+    transitivePeerDependencies:
+      - supports-color
+
   jwa@2.0.1:
     dependencies:
       buffer-equal-constant-time: 1.0.1
@@ -28044,6 +28315,9 @@ snapshots:
 
   mimic-function@5.0.1: {}
 
+  mimic-response@3.1.0:
+    optional: true
+
   min-indent@1.0.1: {}
 
   miniflare@4.20260708.1:
@@ -28080,6 +28354,9 @@ snapshots:
     dependencies:
       minipass: 7.1.2
 
+  mkdirp-classic@0.5.3:
+    optional: true
+
   mkdirp@1.0.4: {}
 
   mlly@1.8.2:
@@ -28089,6 +28366,8 @@ snapshots:
       pkg-types: 1.3.1
       ufo: 1.6.4
 
+  modern-tar@0.7.6: {}
+
   monaco-editor@0.52.2: {}
 
   motion-dom@12.42.2:
@@ -28162,6 +28441,9 @@ snapshots:
 
   nanostores@1.4.0: {}
 
+  napi-build-utils@2.0.0:
+    optional: true
+
   napi-postinstall@0.3.4: {}
 
   natural-compare@1.4.0: {}
@@ -28195,6 +28477,14 @@ snapshots:
       - react
       - react-native
 
+  node-abi@3.94.0:
+    dependencies:
+      semver: 7.8.5
+    optional: true
+
+  node-addon-api@8.9.0:
+    optional: true
+
   node-fetch-native@1.6.7: {}
 
   node-fetch@2.7.0:
@@ -28208,8 +28498,17 @@ snapshots:
       detect-libc: 2.1.2
     optional: true
 
+  node-gyp-build@4.8.4:
+    optional: true
+
   node-int64@0.4.0: {}
 
+  node-liblzma@2.2.0:
+    dependencies:
+      node-addon-api: 8.9.0
+      node-gyp-build: 4.8.4
+    optional: true
+
   node-modules-regexp@1.0.0: {}
 
   node-releases@2.0.27: {}
@@ -29010,6 +29309,8 @@ snapshots:
 
   pako@1.0.11: {}
 
+  papaparse@5.5.4: {}
+
   parent-module@1.0.1:
     dependencies:
       callsites: 3.1.0
@@ -29313,6 +29614,22 @@ snapshots:
 
   preact@10.29.2: {}
 
+  prebuild-install@7.1.3:
+    dependencies:
+      detect-libc: 2.1.2
+      expand-template: 2.0.3
+      github-from-package: 0.0.0
+      minimist: 1.2.8
+      mkdirp-classic: 0.5.3
+      napi-build-utils: 2.0.0
+      node-abi: 3.94.0
+      pump: 3.0.4
+      rc: 1.2.8
+      simple-get: 4.0.1
+      tar-fs: 2.1.5
+      tunnel-agent: 0.6.0
+    optional: true
+
   prelude-ls@1.2.1: {}
 
   prettier-linter-helpers@1.0.0:
@@ -29385,6 +29702,12 @@ snapshots:
     dependencies:
       punycode: 2.3.1
 
+  pump@3.0.4:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+    optional: true
+
   punycode@2.3.1: {}
 
   pure-rand@6.1.0: {}
@@ -29425,6 +29748,18 @@ snapshots:
 
   quick-format-unescaped@4.0.4: {}
 
+  quickjs-emscripten-core@0.32.0:
+    dependencies:
+      '@jitl/quickjs-ffi-types': 0.32.0
+
+  quickjs-emscripten@0.32.0:
+    dependencies:
+      '@jitl/quickjs-wasmfile-debug-asyncify': 0.32.0
+      '@jitl/quickjs-wasmfile-debug-sync': 0.32.0
+      '@jitl/quickjs-wasmfile-release-asyncify': 0.32.0
+      '@jitl/quickjs-wasmfile-release-sync': 0.32.0
+      quickjs-emscripten-core: 0.32.0
+
   radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -29502,6 +29837,8 @@ snapshots:
       minimist: 1.2.8
       strip-json-comments: 2.0.1
 
+  re2js@1.3.3: {}
+
   react-day-picker@8.10.1(date-fns@4.4.0)(react@19.2.7):
     dependencies:
       date-fns: 4.4.0
@@ -29844,6 +30181,13 @@ snapshots:
       string_decoder: 1.1.1
       util-deprecate: 1.0.2
 
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+    optional: true
+
   readable-stream@4.7.0:
     dependencies:
       abort-controller: 3.0.0
@@ -30332,6 +30676,10 @@ snapshots:
     dependencies:
       compute-scroll-into-view: 3.1.1
 
+  seek-bzip@2.0.0:
+    dependencies:
+      commander: 6.2.1
+
   selderee@0.11.0:
     dependencies:
       parseley: 0.12.1
@@ -30516,6 +30864,16 @@ snapshots:
 
   signal-exit@3.0.7: {}
 
+  simple-concat@1.0.1:
+    optional: true
+
+  simple-get@4.0.1:
+    dependencies:
+      decompress-response: 6.0.0
+      once: 1.4.0
+      simple-concat: 1.0.1
+    optional: true
+
   simple-git-hooks@2.13.1: {}
 
   simple-plist@1.3.1:
@@ -30551,6 +30909,8 @@ snapshots:
 
   slugify@1.6.6: {}
 
+  smol-toml@1.7.0: {}
+
   socket.io-adapter@2.5.8:
     dependencies:
       debug: 4.4.3
@@ -30628,6 +30988,10 @@ snapshots:
 
   sprintf-js@1.0.3: {}
 
+  sprintf-js@1.1.3: {}
+
+  sql.js@1.14.1: {}
+
   sqlstring@2.3.3: {}
 
   srvx@0.11.15: {}
@@ -30836,6 +31200,10 @@ snapshots:
     dependencies:
       anynum: 1.0.1
 
+  strtok3@10.3.5:
+    dependencies:
+      '@tokenizer/token': 0.3.0
+
   structured-headers@0.4.1: {}
 
   stubborn-fs@2.0.0:
@@ -30905,6 +31273,23 @@ snapshots:
 
   tapable@2.3.3: {}
 
+  tar-fs@2.1.5:
+    dependencies:
+      chownr: 1.1.4
+      mkdirp-classic: 0.5.3
+      pump: 3.0.4
+      tar-stream: 2.2.0
+    optional: true
+
+  tar-stream@2.2.0:
+    dependencies:
+      bl: 4.1.0
+      end-of-stream: 1.4.5
+      fs-constants: 1.0.0
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+    optional: true
+
   tar@7.5.19:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
@@ -31025,6 +31410,12 @@ snapshots:
 
   toidentifier@1.0.1: {}
 
+  token-types@6.1.2:
+    dependencies:
+      '@borewit/text-codec': 0.2.2
+      '@tokenizer/token': 0.3.0
+      ieee754: 1.2.1
+
   toml@4.1.1: {}
 
   totalist@3.0.1: {}
@@ -31203,6 +31594,11 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
+  tunnel-agent@0.6.0:
+    dependencies:
+      safe-buffer: 5.2.1
+    optional: true
+
   tunnel-rat@0.1.2(@types/react@19.1.17)(react@19.1.0):
     dependencies:
       zustand: 4.5.7(@types/react@19.1.17)(react@19.1.0)
@@ -31220,6 +31616,10 @@ snapshots:
       '@turbo/windows-64': 2.10.4
       '@turbo/windows-arm64': 2.10.4
 
+  turndown@7.2.4:
+    dependencies:
+      '@mixmark-io/domino': 2.2.0
+
   tw-animate-css@1.4.0: {}
 
   tweedle.js@2.1.0: {}

From 21983096dbe35f9627649764be4f958bc964b5fc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 17 Jul 2026 17:54:52 +0200
Subject: [PATCH 102/129] feat: add paywall preview QR code to publish dialog
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The publish confirmation dialog now shows a QR code (in both the
pre-publish and published states) encoding a
voidhash://paywall-preview?url=... deep link to the content-addressed
release artifact. Scanning it with the Voidhash mobile app renders the
exact HTML that ships to SDKs — the draft and its published release
share the same /p/<contentHash>/index.html artifact, so the preview
always matches what goes live.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 apps/www/package.json                         |  1 +
 .../publish-confirmation-dialog.tsx           | 49 ++++++++++++++++---
 .../paywalls/designer/panels/top-panel.tsx    |  8 ++-
 pnpm-lock.yaml                                | 12 +++++
 4 files changed, 62 insertions(+), 8 deletions(-)

diff --git a/apps/www/package.json b/apps/www/package.json
index 8318c9092..ab742979c 100644
--- a/apps/www/package.json
+++ b/apps/www/package.json
@@ -82,6 +82,7 @@
     "pino": "^9.7.0",
     "pixi-viewport": "^6.0.3",
     "pixi.js": "^8.2.6",
+    "qrcode.react": "^4.2.0",
     "react": "catalog:",
     "react-dom": "catalog:",
     "react-easy-crop": "^6.0.2",
diff --git a/apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx b/apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx
index 9d3d45a2f..5bc7e4fb6 100644
--- a/apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/components/publish-confirmation-dialog.tsx
@@ -11,6 +11,7 @@ import {
   AlertDialogTitle,
 } from "@voidhash/ui";
 import { CheckCircle2Icon, ExternalLinkIcon, Loader2Icon } from "lucide-react";
+import { QRCodeSVG } from "qrcode.react";
 
 interface PublishConfirmationDialogProps {
   open: boolean;
@@ -18,15 +19,45 @@ interface PublishConfirmationDialogProps {
   onConfirm: () => void;
   isPublishing: boolean;
   draftVersion?: number;
+  draftUrl?: string;
   publishedUrl?: string;
 }
 
+/**
+ * Builds the deep link the Voidhash mobile app opens from its QR scanner.
+ * Carries the content-addressed release artifact URL — identical for a draft
+ * and its published release — so the scanned preview is byte-for-byte what
+ * ships to SDKs.
+ */
+function buildPaywallPreviewDeepLink(url: string, version?: number): string {
+  const versionParam = version === undefined ? "" : `&version=${version}`;
+  return `voidhash://paywall-preview?url=${encodeURIComponent(url)}${versionParam}`;
+}
+
+function PaywallPreviewQr({ url, version }: { url: string; version?: number }) {
+  return (
+    <div className="flex items-center gap-3 rounded-md border bg-muted/50 p-3">
+      <div className="shrink-0 rounded-sm bg-white p-2">
+        <QRCodeSVG size={104} value={buildPaywallPreviewDeepLink(url, version)} />
+      </div>
+      <div className="space-y-1">
+        <p className="text-xs font-medium text-foreground">Preview on your device</p>
+        <p className="text-xs text-muted-foreground">
+          Scan with the Voidhash app to see this exact version on your phone. Purchases are
+          simulated.
+        </p>
+      </div>
+    </div>
+  );
+}
+
 export function PublishConfirmationDialog({
   open,
   onOpenChange,
   onConfirm,
   isPublishing,
   draftVersion,
+  draftUrl,
   publishedUrl,
 }: PublishConfirmationDialogProps) {
   const isPublished = !!publishedUrl;
@@ -57,15 +88,19 @@ export function PublishConfirmationDialog({
                     <ExternalLinkIcon className="size-3 shrink-0" />
                   </a>
                 </div>
+                <PaywallPreviewQr url={publishedUrl} version={draftVersion} />
               </div>
             ) : (
-              <div>
-                This paywall will be rolled out to all users.
-                {draftVersion !== undefined && (
-                  <span className="mt-2 block text-xs text-muted-foreground">
-                    Version {draftVersion}
-                  </span>
-                )}
+              <div className="space-y-3">
+                <div>
+                  This paywall will be rolled out to all users.
+                  {draftVersion !== undefined && (
+                    <span className="mt-2 block text-xs text-muted-foreground">
+                      Version {draftVersion}
+                    </span>
+                  )}
+                </div>
+                {draftUrl && <PaywallPreviewQr url={draftUrl} version={draftVersion} />}
               </div>
             )}
           </AlertDialogDescription>
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
index 0c0e51704..dca18bd07 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
@@ -81,6 +81,7 @@ export function TopPanel() {
     | {
         releaseId: string;
         version: number;
+        draftUrl: string;
       }
     | undefined
   >();
@@ -89,7 +90,11 @@ export function TopPanel() {
   const { mutate: createRelease, isPending: isCreatingRelease } = useMutation({
     ...createPaywallReleaseOptions(),
     onSuccess: (data) => {
-      setReleaseInfo({ releaseId: data.releaseId, version: data.version });
+      setReleaseInfo({
+        releaseId: data.releaseId,
+        version: data.version,
+        draftUrl: data.draftUrl,
+      });
       setShowPublishDialog(true);
     },
     onError: () => {
@@ -222,6 +227,7 @@ export function TopPanel() {
         onConfirm={handleConfirmPublish}
         isPublishing={isPublishing}
         draftVersion={releaseInfo?.version}
+        draftUrl={releaseInfo?.draftUrl}
         publishedUrl={publishedUrl}
       />
     </>
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3d731e9e4..fc32e4bc7 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -800,6 +800,9 @@ importers:
       pixi.js:
         specifier: ^8.2.6
         version: 8.19.0
+      qrcode.react:
+        specifier: ^4.2.0
+        version: 4.2.0(react@19.1.0)
       react:
         specifier: 'catalog:'
         version: 19.1.0
@@ -12973,6 +12976,11 @@ packages:
     resolution: {integrity: sha512-Uu7ii+FQy4Qf82G4xu7ShHhjhGahEpCWc3x8UavY3CTcWV+ufmmCtwkr7ZKsX42jdL0kr1B5FKUeqJvAn51jzQ==}
     hasBin: true
 
+  qrcode.react@4.2.0:
+    resolution: {integrity: sha512-QpgqWi8rD9DsS9EP3z7BT+5lY5SFhsqGjpgW5DY/i3mK4M9DTBNz3ErMi8BWYEfI3L0d8GIbGmcdFAS1uIRGjA==}
+    peerDependencies:
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
   qs@6.15.3:
     resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==}
     engines: {node: '>=0.6'}
@@ -29725,6 +29733,10 @@ snapshots:
 
   qrcode-terminal@0.11.0: {}
 
+  qrcode.react@4.2.0(react@19.1.0):
+    dependencies:
+      react: 19.1.0
+
   qs@6.15.3:
     dependencies:
       es-define-property: 1.0.1

From 13411913b1276988a49ac540b4a0202caac1afcb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 20 Jul 2026 09:04:45 +0200
Subject: [PATCH 103/129] feat: improve docs

---
 apps/www/.gitignore                           |    3 +
 apps/www/design.generated.ts                  |   21 -
 apps/www/docs.generated.ts                    |   21 -
 apps/www/package.json                         |   14 +-
 apps/www/scripts/generate-openapi.ts          |   86 +
 .../design/components/layout/docs.tsx         |    8 +-
 .../design/components/layout/page.tsx         |    2 +-
 apps/www/src/features/design/lib/source.ts    |   12 +-
 .../src/features/design/source.generated.ts   |   21 -
 .../features/docs/components/layout/docs.tsx  |  427 +-
 .../features/docs/components/layout/page.tsx  |    3 +-
 .../src/features/docs/components/nav-bar.tsx  |   73 +-
 .../docs/content/docs/api/api-keys.mdx        |  170 +
 .../docs/content/docs/api/authentication.mdx  |  177 +
 .../docs/content/docs/api/catalog.mdx         |  213 +
 .../docs/content/docs/api/event-capture.mdx   |  152 +
 .../event_capture/event_capture.batch.mdx     |   27 +
 .../event_capture/event_capture.capture.mdx   |   27 +
 .../api/event-capture/event_capture/meta.json |    7 +
 .../content/docs/api/event-capture/meta.json  |    5 +
 .../features/docs/content/docs/api/meta.yaml  |   10 +
 .../docs/content/docs/api/notifications.mdx   |  117 +
 .../docs/api/organizations-and-projects.mdx   |  205 +
 .../docs/content/docs/api/overview.mdx        |   87 +
 .../docs/content/docs/api/paywall-deploys.mdx |  230 +
 .../docs/content/docs/api/persons.mdx         |  222 +
 .../api_keys/api_keys.createSecretKey.mdx     |   27 +
 .../api_keys/api_keys.deleteApiKey.mdx        |   27 +
 .../api_keys/api_keys.getApiKeyById.mdx       |   27 +
 .../api_keys/api_keys.listApiKeys.mdx         |   27 +
 .../api_keys/api_keys.rotateSecretKey.mdx     |   27 +
 .../docs/api/reference/api_keys/meta.json     |   10 +
 .../docs/api/reference/auth/auth.session.mdx  |   27 +
 .../content/docs/api/reference/auth/meta.json |    6 +
 .../docs/content/docs/api/reference/meta.json |   20 +
 .../api/reference/organizations/meta.json     |    6 +
 .../organizations.createOrganization.mdx      |   27 +
 .../payment_provider_configurations/meta.json |    6 +
 ...ions.listPaymentProviderConfigurations.mdx |   27 +
 .../payment_provider_products/meta.json       |    6 +
 ...r_products.listPaymentProviderProducts.mdx |   27 +
 .../api/reference/paywall_deploys/meta.json   |    8 +
 .../paywall_deploys.createDeploy.mdx          |   27 +
 .../paywall_deploys.finalizeDeploy.mdx        |   27 +
 .../paywall_deploys.uploadBlob.mdx            |   27 +
 .../api/reference/paywall_locations/meta.json |    6 +
 ...paywall_locations.listPaywallLocations.mdx |   27 +
 .../docs/api/reference/perks/meta.json        |    6 +
 .../api/reference/perks/perks.listPerks.mdx   |   27 +
 .../docs/api/reference/persons/meta.json      |    9 +
 .../persons/persons.createPerson.mdx          |   27 +
 .../persons/persons.getPersonByDistinctId.mdx |   27 +
 .../persons/persons.getPersonById.mdx         |   27 +
 .../reference/persons/persons.listPersons.mdx |   27 +
 .../api/reference/product_perks/meta.json     |    6 +
 ...duct_perks.listProductPerksByProductId.mdx |   27 +
 .../docs/api/reference/products/meta.json     |    6 +
 .../products/products.listProducts.mdx        |   27 +
 .../docs/api/reference/projects/meta.json     |    7 +
 .../projects/projects.createProject.mdx       |   27 +
 .../projects/projects.listProjects.mdx        |   27 +
 .../docs/api/reference/schema/meta.json       |    7 +
 .../api/reference/schema/schema.getSchema.mdx |   27 +
 .../schema/schema.getSchemaVersion.mdx        |   27 +
 .../content/docs/api/reference/sdk/meta.json  |   12 +
 .../sdk/sdk.evaluateFeatureFlags.mdx          |   27 +
 .../docs/api/reference/sdk/sdk.getPerson.mdx  |   27 +
 .../docs/api/reference/sdk/sdk.getSchema.mdx  |   27 +
 .../api/reference/sdk/sdk.identifyPerson.mdx  |   27 +
 .../api/reference/sdk/sdk.resolvePaywall.mdx  |   27 +
 .../sdk/sdk.syncPersonAttributes.mdx          |   27 +
 .../api/reference/sdk/sdk.syncTransaction.mdx |   27 +
 .../docs/api/reference/users/meta.json        |    6 +
 .../api/reference/users/users.getUser.mdx     |   27 +
 .../docs/api/reference/webhooks/meta.json     |   15 +
 .../webhooks.createWebhookEndpoint.mdx        |   27 +
 .../webhooks.deleteWebhookEndpoint.mdx        |   27 +
 .../webhooks/webhooks.getWebhookDelivery.mdx  |   27 +
 .../webhooks/webhooks.getWebhookEndpoint.mdx  |   27 +
 .../webhooks.listWebhookDeliveries.mdx        |   27 +
 .../webhooks.listWebhookEndpoints.mdx         |   27 +
 .../webhooks.retryWebhookDelivery.mdx         |   27 +
 .../webhooks/webhooks.rotateWebhookSecret.mdx |   27 +
 .../webhooks/webhooks.testWebhookEndpoint.mdx |   27 +
 .../webhooks.updateWebhookEndpoint.mdx        |   27 +
 .../features/docs/content/docs/api/schema.mdx |  141 +
 .../features/docs/content/docs/api/sdk.mdx    |  402 +
 .../docs/content/docs/api/webhooks.mdx        |  309 +
 .../docs/content/docs/basic-usage.mdx         |    1 +
 .../features/docs/content/docs/cli/auth.mdx   |   87 +
 .../features/docs/content/docs/cli/config.mdx |  156 +
 .../features/docs/content/docs/cli/deploy.mdx |  168 +
 .../features/docs/content/docs/cli/init.mdx   |  135 +
 .../features/docs/content/docs/cli/meta.yaml  |   10 +
 .../docs/content/docs/cli/overview.mdx        |  122 +
 .../features/docs/content/docs/cli/studio.mdx |   70 +
 .../features/docs/content/docs/cli/types.mdx  |  180 +
 .../docs/content/docs/guides/meta.yaml        |    4 +
 .../docs/guides/payment-providers/meta.yaml   |    3 +
 .../docs/content/docs/installation.mdx        |    1 +
 .../docs/content/docs/introduction.mdx        |    1 +
 .../src/features/docs/content/docs/mcp.mdx    |  177 +
 .../src/features/docs/content/docs/meta.yaml  |   10 +-
 .../content/docs/react-native/analytics.mdx   |  147 +
 .../docs/react-native/configuration.mdx       |  118 +
 .../docs/react-native/displaying-paywalls.mdx |  110 +
 .../docs/react-native/displaying-products.mdx |  181 +
 .../docs/react-native/error-handling.mdx      |  260 +
 .../docs/react-native/feature-flags.mdx       |  168 +
 .../docs/react-native/identifying-users.mdx   |  176 +
 .../docs/react-native/installation.mdx        |  129 +
 .../docs/content/docs/react-native/meta.yaml  |   21 +
 .../docs/react-native/observer-mode.mdx       |  141 +
 .../content/docs/react-native/overview.mdx    |   98 +
 .../content/docs/react-native/purchases.mdx   |  213 +
 .../content/docs/react-native/quickstart.mdx  |  164 +
 .../docs/react-native/schema-and-types.mdx    |  206 +
 .../docs/react-native/subscription-status.mdx |  214 +
 .../docs/content/docs/sdks-and-apis.mdx       |   26 +
 .../src/features/docs/lib/guide-content.tsx   |    8 +-
 .../src/features/docs/lib/mdx-components.tsx  |   10 +-
 .../src/features/docs/lib/openapi-page.tsx    |   47 +
 apps/www/src/features/docs/lib/openapi.ts     |   18 +
 apps/www/src/features/docs/lib/shiki-theme.ts |  161 +
 apps/www/src/features/docs/lib/source.ts      |   11 +-
 apps/www/src/features/docs/lib/tabs.test.ts   |   70 +
 apps/www/src/features/docs/lib/tabs.ts        |  137 +
 .../features/docs/openapi/event-capture.json  |  729 ++
 .../features/docs/openapi/voidhash-v1.json    | 8193 +++++++++++++++++
 apps/www/src/features/docs/source.config.ts   |   10 +
 .../www/src/features/docs/source.generated.ts |   21 -
 apps/www/src/features/fumadocs-config.ts      |   12 +
 apps/www/src/features/source.config.ts        |   46 +
 .../designer/code-mode/monaco-theme.ts        |  109 +-
 apps/www/src/generated.d.ts                   |   53 +
 apps/www/src/lib/code-theme.ts                |  116 +
 apps/www/src/lib/create-vite-source.ts        |   95 -
 apps/www/src/routeTree.gen.ts                 |   21 +
 apps/www/src/routes/design/$.tsx              |    7 +-
 apps/www/src/routes/docs/$.tsx                |    9 +-
 apps/www/src/routes/docs/api/proxy.ts         |   29 +
 apps/www/src/styles/globals.css               |    1 +
 apps/www/tsconfig.json                        |    4 +-
 apps/www/vite.config.ts                       |   52 +-
 pnpm-lock.yaml                                | 4172 +++++++--
 pnpm-workspace.yaml                           |    9 +-
 146 files changed, 20581 insertions(+), 1534 deletions(-)
 delete mode 100644 apps/www/design.generated.ts
 delete mode 100644 apps/www/docs.generated.ts
 create mode 100644 apps/www/scripts/generate-openapi.ts
 delete mode 100644 apps/www/src/features/design/source.generated.ts
 create mode 100644 apps/www/src/features/docs/content/docs/api/api-keys.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/authentication.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/catalog.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/event-capture.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.batch.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.capture.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/event-capture/event_capture/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/event-capture/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/meta.yaml
 create mode 100644 apps/www/src/features/docs/content/docs/api/notifications.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/organizations-and-projects.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/overview.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/paywall-deploys.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/persons.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.createSecretKey.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.deleteApiKey.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.getApiKeyById.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.listApiKeys.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.rotateSecretKey.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/api_keys/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/auth/auth.session.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/auth/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/organizations/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/organizations/organizations.createOrganization.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/payment_provider_configurations.listPaymentProviderConfigurations.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/payment_provider_products.listPaymentProviderProducts.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.createDeploy.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.finalizeDeploy.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.uploadBlob.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/paywall_locations/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/paywall_locations/paywall_locations.listPaywallLocations.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/perks/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/perks/perks.listPerks.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/persons/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/persons/persons.createPerson.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonByDistinctId.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonById.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/persons/persons.listPersons.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/product_perks/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/product_perks/product_perks.listProductPerksByProductId.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/products/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/products/products.listProducts.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/projects/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/projects/projects.createProject.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/projects/projects.listProjects.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/schema/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchema.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchemaVersion.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.evaluateFeatureFlags.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getPerson.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getSchema.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.identifyPerson.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.resolvePaywall.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncPersonAttributes.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncTransaction.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/users/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/users/users.getUser.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/meta.json
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.createWebhookEndpoint.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.deleteWebhookEndpoint.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookDelivery.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookEndpoint.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookDeliveries.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookEndpoints.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.retryWebhookDelivery.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.rotateWebhookSecret.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.testWebhookEndpoint.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.updateWebhookEndpoint.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/schema.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/sdk.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/api/webhooks.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/cli/auth.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/cli/config.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/cli/deploy.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/cli/init.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/cli/meta.yaml
 create mode 100644 apps/www/src/features/docs/content/docs/cli/overview.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/cli/studio.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/cli/types.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/guides/meta.yaml
 create mode 100644 apps/www/src/features/docs/content/docs/guides/payment-providers/meta.yaml
 create mode 100644 apps/www/src/features/docs/content/docs/mcp.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/analytics.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/configuration.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/displaying-paywalls.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/displaying-products.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/error-handling.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/feature-flags.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/identifying-users.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/installation.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/meta.yaml
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/observer-mode.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/overview.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/purchases.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/quickstart.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/schema-and-types.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/react-native/subscription-status.mdx
 create mode 100644 apps/www/src/features/docs/content/docs/sdks-and-apis.mdx
 create mode 100644 apps/www/src/features/docs/lib/openapi-page.tsx
 create mode 100644 apps/www/src/features/docs/lib/openapi.ts
 create mode 100644 apps/www/src/features/docs/lib/shiki-theme.ts
 create mode 100644 apps/www/src/features/docs/lib/tabs.test.ts
 create mode 100644 apps/www/src/features/docs/lib/tabs.ts
 create mode 100644 apps/www/src/features/docs/openapi/event-capture.json
 create mode 100644 apps/www/src/features/docs/openapi/voidhash-v1.json
 delete mode 100644 apps/www/src/features/docs/source.generated.ts
 create mode 100644 apps/www/src/features/source.config.ts
 create mode 100644 apps/www/src/generated.d.ts
 create mode 100644 apps/www/src/lib/code-theme.ts
 delete mode 100644 apps/www/src/lib/create-vite-source.ts
 create mode 100644 apps/www/src/routes/docs/api/proxy.ts

diff --git a/apps/www/.gitignore b/apps/www/.gitignore
index 7b8da95f5..4b209c8ca 100644
--- a/apps/www/.gitignore
+++ b/apps/www/.gitignore
@@ -40,3 +40,6 @@ yarn-error.log*
 # typescript
 *.tsbuildinfo
 next-env.d.ts
+
+# fumadocs-mdx generated runtime (regenerated by `generate:docs` / vite plugin)
+/.source
diff --git a/apps/www/design.generated.ts b/apps/www/design.generated.ts
deleted file mode 100644
index 9e905b47a..000000000
--- a/apps/www/design.generated.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-/// <reference types="vite/client" />
-import { fromConfig } from 'fumadocs-mdx/runtime/vite';
-import type * as Config from './src/features/design/source.config';
-
-export const create = fromConfig<typeof Config>();
-
-export const docs = {
-  doc: create.doc("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
-    "base": "./src/features/design/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  })),
-  meta: create.meta("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
-    "import": "default",
-    "base": "./src/features/design/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  }))
-};
\ No newline at end of file
diff --git a/apps/www/docs.generated.ts b/apps/www/docs.generated.ts
deleted file mode 100644
index 3da900be7..000000000
--- a/apps/www/docs.generated.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-/// <reference types="vite/client" />
-import { fromConfig } from 'fumadocs-mdx/runtime/vite';
-import type * as Config from './src/features/docs/source.config';
-
-export const create = fromConfig<typeof Config>();
-
-export const docs = {
-  doc: create.doc("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
-    "base": "./src/features/docs/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  })),
-  meta: create.meta("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
-    "import": "default",
-    "base": "./src/features/docs/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  }))
-};
\ No newline at end of file
diff --git a/apps/www/package.json b/apps/www/package.json
index 8318c9092..ea435c97b 100644
--- a/apps/www/package.json
+++ b/apps/www/package.json
@@ -8,8 +8,9 @@
     "dev": "vp dev",
     "build": "pnpm run generate:docs && vp build --configLoader runner",
     "preview": "vp preview",
-    "typecheck": "tsc --noEmit",
-    "generate:docs": "fumadocs-mdx src/features/docs/source.config.ts src/features/docs && fumadocs-mdx src/features/design/source.config.ts src/features/design"
+    "typecheck": "pnpm run generate:docs && tsc --noEmit",
+    "generate:docs": "fumadocs-mdx src/features/source.config.ts .source",
+    "generate:openapi": "bun scripts/generate-openapi.ts"
   },
   "dependencies": {
     "@apple/app-store-server-library": "^1.6.0",
@@ -35,6 +36,7 @@
     "@react-three/drei": "^10.1.2",
     "@react-three/fiber": "^9.1.2",
     "@react-three/postprocessing": "^3.0.4",
+    "@scalar/api-client-react": "^2.0.36",
     "@t3-oss/env-core": "^0.13.8",
     "@tanstack/query-core": "5.100.11",
     "@tanstack/react-query": "catalog:",
@@ -69,9 +71,10 @@
     "effect-query": "catalog:",
     "esbuild-wasm": "^0.25.10",
     "fractional-indexing-jittered": "^1.0.0",
-    "fumadocs-core": "15.8.2",
-    "fumadocs-mdx": "12.0.1",
-    "fumadocs-ui": "15.8.2",
+    "fumadocs-core": "16.11.5",
+    "fumadocs-mdx": "15.2.0",
+    "fumadocs-openapi": "^11.2.2",
+    "fumadocs-ui": "16.11.5",
     "h3-v2": "npm:h3@2.0.1-rc.18",
     "lucide-react": "catalog:",
     "lucide-static": "^0.555.0",
@@ -116,6 +119,7 @@
     "babel-plugin-react-compiler": "catalog:",
     "dotenv-cli": "catalog:",
     "tailwindcss": "catalog:",
+    "tsx": "^4.19.3",
     "tw-animate-css": "catalog:",
     "typescript": "catalog:",
     "vite": "catalog:",
diff --git a/apps/www/scripts/generate-openapi.ts b/apps/www/scripts/generate-openapi.ts
new file mode 100644
index 000000000..1f7001238
--- /dev/null
+++ b/apps/www/scripts/generate-openapi.ts
@@ -0,0 +1,86 @@
+import { mkdir, rm, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { generateFiles } from "fumadocs-openapi";
+import { createOpenAPI } from "fumadocs-openapi/server";
+
+/**
+ * Fetches the live OpenAPI documents from the backend and regenerates the API
+ * Reference MDX pages. Point at a different backend with `VOIDHASH_API_URL`
+ * (defaults to production); e.g. `VOIDHASH_API_URL=http://localhost:1337`.
+ */
+const API_URL = process.env.VOIDHASH_API_URL ?? "https://api.voidhash.com";
+
+const appRoot = fileURLToPath(new URL("..", import.meta.url));
+// Relative (to the app root) so the `document`/preload ids baked into generated
+// pages are portable across machines rather than absolute local paths.
+const specDirRel = "src/features/docs/openapi";
+const specDir = path.join(appRoot, specDirRel);
+const apiContentDir = path.join(appRoot, "src/features/docs/content/docs/api");
+
+interface Surface {
+  readonly label: string;
+  /** Stable schema id embedded as `document` in generated pages (see mdx-components). */
+  readonly key: string;
+  readonly remotePath: string;
+  readonly specFile: string;
+  readonly output: string;
+}
+
+const surfaces: Surface[] = [
+  {
+    label: "Management & device SDK API",
+    key: "voidhash-v1",
+    remotePath: "/api/docs/openapi.json",
+    specFile: "voidhash-v1.json",
+    output: path.join(apiContentDir, "reference"),
+  },
+  {
+    label: "Event Capture API",
+    key: "event-capture",
+    remotePath: "/i/docs/openapi.json",
+    specFile: "event-capture.json",
+    output: path.join(apiContentDir, "event-capture"),
+  },
+];
+
+async function fetchSpec(surface: Surface): Promise<void> {
+  const url = `${API_URL}${surface.remotePath}`;
+  const response = await fetch(url);
+  if (!response.ok) {
+    throw new Error(`Failed to fetch ${url}: ${response.status} ${response.statusText}`);
+  }
+  const document = await response.json();
+  await writeFile(path.join(specDir, surface.specFile), `${JSON.stringify(document, null, 2)}\n`);
+  console.log(`✓ fetched ${surface.label} (${url})`);
+}
+
+async function main(): Promise<void> {
+  await mkdir(specDir, { recursive: true });
+  for (const surface of surfaces) {
+    await fetchSpec(surface);
+  }
+
+  for (const surface of surfaces) {
+    await rm(surface.output, { force: true, recursive: true });
+    // Keyed record input so generated pages reference the spec by a stable
+    // `document` id (the key) rather than an absolute machine path.
+    const server = createOpenAPI({
+      input: { [surface.key]: `${specDirRel}/${surface.specFile}` },
+    });
+    await generateFiles({
+      input: server,
+      output: surface.output,
+      per: "operation",
+      groupBy: "tag",
+      meta: true,
+    });
+    console.log(`✓ generated ${surface.label} -> ${path.relative(appRoot, surface.output)}`);
+  }
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exit(1);
+});
diff --git a/apps/www/src/features/design/components/layout/docs.tsx b/apps/www/src/features/design/components/layout/docs.tsx
index 9acf43481..29761cc5e 100644
--- a/apps/www/src/features/design/components/layout/docs.tsx
+++ b/apps/www/src/features/design/components/layout/docs.tsx
@@ -16,7 +16,7 @@ import {
   SidebarProvider,
 } from "@voidhash/ui";
 import { Link as FrameworkLink, usePathname } from "fumadocs-core/framework";
-import type { PageTree } from "fumadocs-core/server";
+import type * as PageTree from "fumadocs-core/page-tree";
 import { TreeContextProvider, useTreeContext } from "fumadocs-ui/contexts/tree";
 import { ChevronRight } from "lucide-react";
 import { CirclePlay } from "lucide-static";
@@ -118,9 +118,7 @@ function DocsSidebar() {
         icon: CirclePlay as unknown as ReactElement,
         index: {
           $id: "index.mdx",
-          $ref: {
-            file: "index.mdx",
-          },
+          $ref: "index.mdx",
           name: "Index",
           type: "page",
           url: "/design",
@@ -146,7 +144,7 @@ function DocsSidebar() {
   );
 }
 
-function SidebarLink(props: ComponentProps<"a">) {
+function SidebarLink(props: ComponentProps<typeof FrameworkLink>) {
   const href = props.href ?? "#";
   return <FrameworkLink {...props} href={href} />;
 }
diff --git a/apps/www/src/features/design/components/layout/page.tsx b/apps/www/src/features/design/components/layout/page.tsx
index ae7705f6f..d40f336f3 100644
--- a/apps/www/src/features/design/components/layout/page.tsx
+++ b/apps/www/src/features/design/components/layout/page.tsx
@@ -1,5 +1,5 @@
 "use client";
-import { type PageTree } from "fumadocs-core/server";
+import type * as PageTree from "fumadocs-core/page-tree";
 
 import { Card, CardContent, CardDescription, CardTitle } from "@voidhash/ui";
 import { Link, usePathname } from "fumadocs-core/framework";
diff --git a/apps/www/src/features/design/lib/source.ts b/apps/www/src/features/design/lib/source.ts
index 8675371fb..6765ecb8e 100644
--- a/apps/www/src/features/design/lib/source.ts
+++ b/apps/www/src/features/design/lib/source.ts
@@ -1,8 +1,7 @@
 import { loader } from "fumadocs-core/source";
 import * as icons from "lucide-static";
 
-import { docs } from "@generated/design";
-import { createViteSource } from "@/lib/create-vite-source";
+import { design } from "@generated/server";
 import { DESIGN_PATH } from "@/lib/paths";
 
 type DesignSource = ReturnType<typeof loader>;
@@ -10,10 +9,13 @@ type DesignSource = ReturnType<typeof loader>;
 let sourcePromise: Promise<DesignSource> | undefined;
 
 /**
- * Returns the loaded design documentation source without evaluating MDX imports at module load.
+ * Returns the loaded design documentation source. fumadocs-mdx's server runtime
+ * builds the collection eagerly (top-level await in the generated
+ * `.source/server.ts`), so `toFumadocsSource()` is synchronous here; the promise
+ * memoizes the loader.
  */
 export const getSource = (): Promise<DesignSource> => {
-  sourcePromise ??= createViteSource(docs.doc, docs.meta).then((docsSource) =>
+  sourcePromise ??= Promise.resolve(
     loader({
       baseUrl: DESIGN_PATH,
       icon(icon) {
@@ -25,7 +27,7 @@ export const getSource = (): Promise<DesignSource> => {
           return icons[icon as keyof typeof icons] as unknown as React.ReactElement;
         }
       },
-      source: docsSource,
+      source: design.toFumadocsSource(),
     }),
   );
 
diff --git a/apps/www/src/features/design/source.generated.ts b/apps/www/src/features/design/source.generated.ts
deleted file mode 100644
index 6aae24421..000000000
--- a/apps/www/src/features/design/source.generated.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-/// <reference types="vite/client" />
-import { fromConfig } from 'fumadocs-mdx/runtime/vite';
-import type * as Config from './source.config';
-
-export const create = fromConfig<typeof Config>();
-
-export const docs = {
-  doc: create.doc("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
-    "base": "./src/features/design/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  })),
-  meta: create.meta("docs", "./src/features/design/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
-    "import": "default",
-    "base": "./src/features/design/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  }))
-};
\ No newline at end of file
diff --git a/apps/www/src/features/docs/components/layout/docs.tsx b/apps/www/src/features/docs/components/layout/docs.tsx
index 53e8318d4..9dd96b56f 100644
--- a/apps/www/src/features/docs/components/layout/docs.tsx
+++ b/apps/www/src/features/docs/components/layout/docs.tsx
@@ -1,33 +1,32 @@
 "use client";
 
 import {
-  Collapsible,
-  CollapsibleContent,
-  CollapsibleTrigger,
   Sidebar,
   SidebarContent,
   SidebarGroup,
-  SidebarGroupContent,
   SidebarGroupLabel,
   SidebarInset,
   SidebarMenu,
+  SidebarMenuAction,
   SidebarMenuButton,
   SidebarMenuItem,
   SidebarProvider,
+  Logo,
 } from "@voidhash/ui";
 import { Link as FrameworkLink, usePathname } from "fumadocs-core/framework";
-import type { PageTree } from "fumadocs-core/server";
+import type * as PageTree from "fumadocs-core/page-tree";
 import { TreeContextProvider, useTreeContext } from "fumadocs-ui/contexts/tree";
-import { ChevronRight } from "lucide-react";
-import { CirclePlay } from "lucide-static";
+import { ChevronLeft, ChevronRight } from "lucide-react";
 import {
   type ComponentProps,
-  type ComponentType,
   type ReactElement,
   type ReactNode,
+  useEffect,
   useMemo,
+  useState,
 } from "react";
 
+import { activeTabForPathname, tabNodes } from "../../lib/tabs";
 import { NavBar } from "../nav-bar";
 import { DocsThemeToggle } from "../theme-toggle";
 
@@ -38,192 +37,278 @@ export interface DocsLayoutProps {
 
 export function DocsLayout({ tree, children }: DocsLayoutProps) {
   return (
-    <SidebarProvider
-      className="flex flex-col [--header-height:calc(theme(spacing.14))]"
-      defaultOpen={true}
-    >
-      <TreeContextProvider tree={tree}>
-        <NavBar />
-
-        <div className="flex flex-1">
-          <DocsSidebar />
-
-          <SidebarInset className="top-[var(--header-height)] flex-1 transition-all duration-75">
-            <div className="flex w-full">{children}</div>
-          </SidebarInset>
-        </div>
-      </TreeContextProvider>
-    </SidebarProvider>
+    <div className="flex flex-col [--header-height:calc(theme(spacing.12))]">
+      <SidebarProvider className="flex flex-col">
+        <TreeContextProvider tree={tree}>
+          <NavBar />
+
+          <div className="flex min-h-0 flex-1 pt-[var(--header-height)]">
+            <DocsSidebar />
+
+            <SidebarInset className="mt-0! transition-all duration-75">
+              <div className="flex w-full">{children}</div>
+            </SidebarInset>
+          </div>
+        </TreeContextProvider>
+      </SidebarProvider>
+    </div>
   );
 }
 
-function DocsSidebar() {
+interface DocsNavItem {
+  title: string;
+  url: string;
+  icon?: ReactElement;
+  isActive: boolean;
+  /** Section groups rendered in the slide-in submenu when this item is a folder. */
+  subGroups?: DocsNavGroup[];
+}
+
+/** A titled section; `title` is undefined for the leading, unlabeled group. */
+interface DocsNavGroup {
+  title?: string;
+  items: DocsNavItem[];
+}
+
+const nodeName = (name: ReactNode): string => (typeof name === "string" ? name : String(name));
+
+/**
+ * Maps the active tab's slice of the fumadocs page tree onto the sidebar shape:
+ * `"---Section---"` separators become titled {@link DocsNavGroup} headings, pages
+ * become plain items, and folders become parent items whose descendants render
+ * as their own titled groups in the slide-in submenu.
+ */
+function useDocsNav(): { groups: DocsNavGroup[]; items: DocsNavItem[] } {
   const { root } = useTreeContext();
   const pathname = usePathname();
 
-  const groups = useMemo(() => {
-    function transformNode(node: PageTree.Node): {
-      icon?: ReactElement;
-      title: string;
-      url: string;
-      isActive?: () => boolean;
-      items?: {
-        title: string;
-        url: string;
-        isActive?: () => boolean;
-      }[];
-    } | null {
-      if (node.type === "page") {
-        return {
-          icon: node.icon as ReactElement,
-          isActive: () => pathname === node.url,
-          title: typeof node.name === "string" ? node.name : String(node.name),
-          url: node.url,
-        };
-      }
-
-      if (node.type === "folder") {
-        const items = node.children
-          .map(transformNode)
-          .filter((item): item is NonNullable<typeof item> => item !== null);
+  return useMemo(() => {
+    function pageItem(node: PageTree.Item): DocsNavItem {
+      return {
+        icon: node.icon as ReactElement,
+        isActive: pathname === node.url,
+        title: nodeName(node.name),
+        url: node.url,
+      };
+    }
 
+    /**
+     * Groups a folder's descendants for the slide-in submenu. Separators start a
+     * new titled section; nested folders become a section titled by the folder
+     * name (empty wrappers are skipped), so structure survives one level of
+     * flattening instead of collapsing to a single flat list.
+     */
+    function folderGroups(folder: PageTree.Folder): DocsNavGroup[] {
+      const groups: DocsNavGroup[] = [];
+      let current: DocsNavGroup = { items: [] };
+      const flush = () => {
+        if (current.items.length > 0) {
+          groups.push(current);
+        }
+        current = { items: [] };
+      };
+      const startSection = (title: string) => {
+        flush();
+        current = { title, items: [] };
+      };
+      const walk = (node: PageTree.Folder) => {
         if (node.index) {
-          return {
-            icon: node.icon as ReactElement,
-            isActive: () => pathname === node.index?.url || items.some((item) => item.isActive?.()),
-            items: items.length > 0 ? items : undefined,
-            title: typeof node.name === "string" ? node.name : String(node.name),
-            url: node.index.url,
-          };
+          current.items.push(pageItem(node.index));
         }
-
-        if (items.length > 0) {
-          return {
-            icon: node.icon as ReactElement,
-            isActive: () => items.some((item) => item.isActive?.()),
-            items,
-            title: typeof node.name === "string" ? node.name : String(node.name),
-            url: "#",
-          };
+        for (const child of node.children) {
+          if (child.type === "separator") {
+            startSection(nodeName(child.name));
+          } else if (child.type === "page") {
+            current.items.push(pageItem(child));
+          } else if (child.type === "folder") {
+            startSection(nodeName(child.name));
+            walk(child);
+            flush();
+          }
         }
+      };
+
+      walk(folder);
+      flush();
+      return groups;
+    }
+
+    const tab = activeTabForPathname(pathname);
+    const nodes = tabNodes(root, tab);
+
+    const groups: DocsNavGroup[] = [];
+    let current: DocsNavGroup = { items: [] };
+    const flush = () => {
+      if (current.items.length > 0) {
+        groups.push(current);
       }
+    };
 
-      return null;
+    for (const node of nodes) {
+      if (node.type === "separator") {
+        flush();
+        current = { title: nodeName(node.name), items: [] };
+      } else if (node.type === "page") {
+        current.items.push(pageItem(node));
+      } else if (node.type === "folder") {
+        const subGroups = folderGroups(node);
+        const subItems = subGroups.flatMap((group) => group.items);
+        if (subItems.length === 0) {
+          continue;
+        }
+        current.items.push({
+          icon: node.icon as ReactElement,
+          isActive: subItems.some((item) => item.isActive),
+          subGroups,
+          title: nodeName(node.name),
+          url: node.index?.url ?? subItems[0].url,
+        });
+      }
     }
+    flush();
 
-    const itemsWithDefaultGroup: PageTree.Node[] = [
-      {
-        $id: "get-started",
-        children: root.children.filter((item) => item.type === "page"),
-        icon: CirclePlay as unknown as ReactElement,
-        index: {
-          $id: "index.mdx",
-          $ref: {
-            file: "index.mdx",
-          },
-          name: "Index",
-          type: "page",
-          url: "/docs",
-        },
-        name: "Get Started",
-        type: "folder",
-      },
-      ...root.children.filter((item) => item.type === "folder"),
-    ];
-
-    return itemsWithDefaultGroup
-      .map(transformNode)
-      .filter((item): item is NonNullable<typeof item> => item !== null);
+    return { groups, items: groups.flatMap((group) => group.items) };
   }, [root, pathname]);
-
-  return (
-    <Sidebar className="!top-[var(--header-height)] !h-[calc(100svh-var(--header-height))] fixed min-w-64 border-r bg-background transition-all duration-75">
-      <SidebarContent className="gap-0">
-        <NavMain groups={groups} link={SidebarLink} />
-        <DocsThemeToggle className="mt-2 ml-5 block md:hidden" />
-      </SidebarContent>
-    </Sidebar>
-  );
 }
 
-function SidebarLink(props: ComponentProps<"a">) {
-  const href = props.href ?? "#";
-  return <FrameworkLink {...props} href={href} />;
-}
+function DocsSidebar() {
+  const { groups, items } = useDocsNav();
+
+  const activeParent = items.find((item) => item.isActive && item.subGroups?.length);
+  const [submenuOpen, setSubmenuOpen] = useState(!!activeParent);
+
+  useEffect(() => {
+    if (activeParent) {
+      setSubmenuOpen(true);
+    }
+  }, [activeParent?.title]);
+
+  const showSubmenu = submenuOpen && !!activeParent;
 
-export function NavMain({
-  link: Link,
-  groups,
-}: {
-  link: ComponentType<ComponentProps<"a">> | "a";
-  defaultOpenNested?: boolean;
-  groups: {
-    title: string;
-    icon?: ReactElement;
-    items?: {
-      title: string;
-      url: string;
-      icon?: ReactElement;
-      isActive?: () => boolean;
-      items?: {
-        title: string;
-        url: string;
-        isActive?: () => boolean;
-      }[];
-    }[];
-  }[];
-  tooltips?: "enabled" | "disabled";
-}) {
   return (
-    <>
-      {groups.map((group) => (
-        <Collapsible
-          className="group/collapsible"
-          defaultOpen
-          key={group.title}
-          title={group.title}
-        >
-          <SidebarGroup className="p-0">
-            <SidebarGroupLabel
-              asChild
-              className="group/label -mt-px rounded-none border-border border-y px-6 py-5 text-sidebar-foreground text-sm hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"
+    <Sidebar className="transition-all duration-75" collapsible="offcanvas" variant="inset">
+      <SidebarContent className="gap-0">
+        <div className="flex h-[var(--header-height)] w-full shrink-0 items-center px-3 py-2">
+          <a className="flex items-center gap-2" href="https://voidhash.com">
+            <Logo className="h-5" color="mono" variant="default" />
+            <span className="rounded-md bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
+              Docs
+            </span>
+          </a>
+        </div>
+
+        <SidebarGroup className="pt-0">
+          <div className="relative">
+            {/* Main Menu — titled section groups; folders open the slide-in submenu */}
+            <div
+              className={`flex flex-col gap-4 transition-all duration-150 ${showSubmenu ? "-translate-x-3 pointer-events-none opacity-0" : "translate-x-0 opacity-100"}`}
             >
-              <CollapsibleTrigger className="cursor-pointer">
-                <div
-                  className="*:-ml-0.5 *:mr-2 *:size-4 *:text-muted-foreground"
-                  // biome-ignore lint/security/noDangerouslySetInnerHtml: It is safe - static icon markup
-                  dangerouslySetInnerHTML={{
-                    __html: group.icon as unknown as string,
-                  }}
-                />
-                {group.title}
-                <ChevronRight className="ml-auto size-4 transition-transform group-data-[state=open]/collapsible:rotate-90" />
-              </CollapsibleTrigger>
-            </SidebarGroupLabel>
-            <CollapsibleContent className="pt-1">
-              <SidebarGroupContent className="p-2 pb-[9px]">
-                <SidebarMenu>
-                  {group.items?.map((item) => (
-                    <SidebarMenuItem
-                      className="px-1 font-normal text-muted-foreground"
-                      key={item.title}
-                    >
-                      <SidebarMenuButton asChild isActive={item.isActive?.()}>
-                        <Link
-                          className="px-3 font-normal data-[active=true]:bg-muted data-[active=true]:font-normal data-[active=true]:text-foreground"
-                          href={item.url}
+              {groups.map((group, groupIndex) => (
+                <div key={group.title ?? `group-${groupIndex}`}>
+                  {group.title ? <SidebarGroupLabel>{group.title}</SidebarGroupLabel> : null}
+                  <SidebarMenu>
+                    {group.items.map((item) => (
+                      <SidebarMenuItem key={item.url}>
+                        <SidebarMenuButton
+                          asChild
+                          isActive={!item.subGroups?.length && item.isActive}
                         >
-                          {item.title}
-                        </Link>
+                          <SidebarLink
+                            href={item.url}
+                            onClick={() => {
+                              if (item.subGroups?.length) {
+                                setSubmenuOpen(true);
+                              }
+                            }}
+                          >
+                            <NodeIcon icon={item.icon} />
+                            <span>{item.title}</span>
+                          </SidebarLink>
+                        </SidebarMenuButton>
+                        {item.subGroups?.length ? (
+                          <SidebarMenuAction onClick={() => setSubmenuOpen(true)}>
+                            <ChevronRight />
+                            <span className="sr-only">Toggle</span>
+                          </SidebarMenuAction>
+                        ) : null}
+                      </SidebarMenuItem>
+                    ))}
+                  </SidebarMenu>
+                </div>
+              ))}
+            </div>
+
+            {/* Sub Menu — the opened folder's titled section groups */}
+            <div
+              className={`absolute inset-0 flex flex-col gap-4 transition-all duration-150 ${showSubmenu ? "translate-x-0 opacity-100" : "pointer-events-none translate-x-10 opacity-0"}`}
+            >
+              {activeParent && (
+                <>
+                  <SidebarMenu>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton
+                        className="relative cursor-pointer"
+                        onClick={() => setSubmenuOpen(false)}
+                      >
+                        <ChevronLeft />
+                        <span className="-translate-x-[50%] absolute left-[50%] transform text-center">
+                          {activeParent.title}
+                        </span>
                       </SidebarMenuButton>
                     </SidebarMenuItem>
+                  </SidebarMenu>
+                  {activeParent.subGroups?.map((group, groupIndex) => (
+                    <div key={group.title ?? `subgroup-${groupIndex}`}>
+                      {group.title ? <SidebarGroupLabel>{group.title}</SidebarGroupLabel> : null}
+                      <SidebarMenu>
+                        {group.items.map((subItem) => (
+                          <SidebarMenuItem key={subItem.url}>
+                            <SidebarMenuButton asChild isActive={subItem.isActive}>
+                              <SidebarLink href={subItem.url}>
+                                <NodeIcon icon={subItem.icon} />
+                                <span>{subItem.title}</span>
+                              </SidebarLink>
+                            </SidebarMenuButton>
+                          </SidebarMenuItem>
+                        ))}
+                      </SidebarMenu>
+                    </div>
                   ))}
-                </SidebarMenu>
-              </SidebarGroupContent>
-            </CollapsibleContent>
-          </SidebarGroup>
-        </Collapsible>
-      ))}
-    </>
+                </>
+              )}
+            </div>
+          </div>
+        </SidebarGroup>
+
+        <DocsThemeToggle className="mt-auto mb-2 ml-4 block md:hidden" />
+      </SidebarContent>
+    </Sidebar>
   );
 }
+
+/**
+ * Tree icons come from the loader as raw lucide-static SVG markup (strings)
+ * so they survive server-loader serialization; render them via innerHTML.
+ */
+function NodeIcon({ icon }: { icon?: ReactElement }) {
+  if (!icon) {
+    return null;
+  }
+
+  if (typeof icon === "string") {
+    return (
+      <span
+        className="*:size-4 text-muted-foreground"
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: It is safe - static icon markup
+        dangerouslySetInnerHTML={{ __html: icon }}
+      />
+    );
+  }
+
+  return icon;
+}
+
+function SidebarLink(props: ComponentProps<typeof FrameworkLink>) {
+  const href = props.href ?? "#";
+  return <FrameworkLink {...props} href={href} />;
+}
diff --git a/apps/www/src/features/docs/components/layout/page.tsx b/apps/www/src/features/docs/components/layout/page.tsx
index 5f232566e..2ae1eb507 100644
--- a/apps/www/src/features/docs/components/layout/page.tsx
+++ b/apps/www/src/features/docs/components/layout/page.tsx
@@ -1,7 +1,8 @@
 "use client";
 import { Card, CardContent, CardDescription, CardTitle } from "@voidhash/ui";
 import { Link, usePathname } from "fumadocs-core/framework";
-import type { PageTree, TableOfContents, TOCItemType } from "fumadocs-core/server";
+import type * as PageTree from "fumadocs-core/page-tree";
+import type { TableOfContents, TOCItemType } from "fumadocs-core/toc";
 import { AnchorProvider, useActiveAnchors } from "fumadocs-core/toc";
 import { useTreeContext } from "fumadocs-ui/contexts/tree";
 import { ChevronLeftIcon, ChevronRightIcon } from "lucide-react";
diff --git a/apps/www/src/features/docs/components/nav-bar.tsx b/apps/www/src/features/docs/components/nav-bar.tsx
index 472932e6d..a0d1ef558 100644
--- a/apps/www/src/features/docs/components/nav-bar.tsx
+++ b/apps/www/src/features/docs/components/nav-bar.tsx
@@ -1,10 +1,12 @@
 "use client";
 
 import { Button, CommandShortcut, Logo, cn, useSidebar } from "@voidhash/ui";
+import { Link as FrameworkLink, usePathname } from "fumadocs-core/framework";
 import { useSearchContext } from "fumadocs-ui/contexts/search";
 import { MenuIcon, SearchIcon } from "lucide-react";
 import type { ComponentProps } from "react";
 
+import { DOCS_TABS, activeTabForPathname } from "../lib/tabs";
 import { DocsThemeToggle } from "./theme-toggle";
 
 function SearchToggle(props: ComponentProps<"button">) {
@@ -28,28 +30,59 @@ function SearchToggle(props: ComponentProps<"button">) {
   );
 }
 
+/** The Documentation / Guides / API Reference tabs shown in the docs header. */
+function DocsTabs() {
+  const pathname = usePathname();
+  const active = activeTabForPathname(pathname);
+
+  return (
+    <nav className="hidden items-center gap-1 md:flex">
+      {DOCS_TABS.map((tab) => {
+        const Icon = tab.icon;
+        const isActive = tab.id === active.id;
+        return (
+          <FrameworkLink
+            className={cn(
+              "flex items-center gap-2 rounded-md px-3 py-1.5 font-medium text-sm transition-colors",
+              isActive
+                ? "bg-muted text-foreground"
+                : "text-muted-foreground hover:text-foreground",
+            )}
+            href={tab.home}
+            key={tab.id}
+          >
+            <Icon className="size-4" />
+            <span>{tab.label}</span>
+          </FrameworkLink>
+        );
+      })}
+    </nav>
+  );
+}
+
 export function NavBar() {
   return (
-    <div className="fixed z-10 flex h-[var(--header-height)] w-full flex-row items-center justify-between border-border border-b bg-background transition-all duration-75">
-      <div className="flex flex-1 items-center justify-between px-4 py-2">
-        <div className="mr-7 flex items-center">
-          <a className="flex items-center gap-3" href="https://voidhash.com">
-            <Logo className="ml-2 h-6" color="mono" variant="default" />
-            <span className="rounded-md border-border bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
-              Docs
-            </span>
-          </a>
-        </div>
-        <div className="flex items-center gap-2 md:flex-1">
-          <div className="md:flex-1">
-            <SearchToggle className="ml-8 cursor-pointer rounded-lg bg-muted p-2 px-3 hover:bg-accent" />
-          </div>
-          <DocsThemeToggle />
-          <SidebarToggle />
-          <a className="hidden md:block" href="https://app.voidhash.com">
-            <Button variant="outline">Dashboard</Button>
-          </a>
-        </div>
+    <div className="fixed z-50 flex h-[var(--header-height)] w-full items-center justify-between gap-4 bg-sidebar px-4 transition-all duration-75 md:left-[var(--sidebar-width)] md:w-[calc(100vw-var(--sidebar-width))]">
+      <div className="flex items-center gap-1">
+        <a className="flex items-center gap-2 md:hidden" href="https://voidhash.com">
+          <Logo className="h-5" color="mono" variant="default" />
+          <span className="rounded-md bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
+            Docs
+          </span>
+        </a>
+        <DocsTabs />
+      </div>
+
+      <div className="flex items-center gap-2">
+        <SearchToggle className="hidden cursor-pointer rounded-lg bg-muted p-1.5 px-3 hover:bg-accent md:flex" />
+        <SearchToggle className="md:hidden" />
+        <DocsThemeToggle />
+        <SidebarToggle />
+        <a className="hidden md:block" href="https://app.voidhash.com">
+          <Button size="sm" variant="outline">
+            Dashboard
+          </Button>
+        </a>
       </div>
     </div>
   );
diff --git a/apps/www/src/features/docs/content/docs/api/api-keys.mdx b/apps/www/src/features/docs/content/docs/api/api-keys.mdx
new file mode 100644
index 000000000..3d3c50932
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/api-keys.mdx
@@ -0,0 +1,170 @@
+---
+title: API Keys
+description: Create, list, rotate, and delete project secret keys via /api/v1/api-keys.
+---
+
+The `/api/v1/api-keys` group manages the API keys that belong to a project — the secret keys your servers use and the publishable keys your apps ship with. See [Authentication](/api/authentication) for how each key type is used to call the API.
+
+All endpoints in this group live under `/api/v1/api-keys` and authenticate via the standard auth headers. They are project-scoped: key credentials carry exactly one project, and user sessions act on their first project — there is no explicit project parameter except on create.
+
+## The ApiKey object
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `id` | `string` | Unique key identifier (`api_sk_...`). Stable across rotation. |
+| `name` | `string` | Human-readable label you chose at creation. |
+| `projectId` | `string` | The project this key belongs to. |
+| `isPublic` | `boolean` | `true` for publishable keys, `false` for secret keys. |
+| `prefix` | `string` | Key prefix — `vh_sk_` for secret keys, `vh_pk_` for publishable keys. |
+| `end` | `string` | The last 4 characters of the key, for display (`vh_sk_...WxYz`). |
+| `rawKey` | `string` (optional) | The full key value. See below for when it is present. |
+
+```json
+{
+  "id": "api_sk_01hxyz",
+  "name": "Production server",
+  "projectId": "prj_01hxyz",
+  "isPublic": false,
+  "prefix": "vh_sk_",
+  "end": "WxYz"
+}
+```
+
+## ApiKey vs ApiKeyWithRawKey
+
+Secret keys are hashed before storage — Voidhash keeps only a SHA-256 digest, never the key itself. That means the full secret key value can only exist in two responses:
+
+- **Create** (`POST /api/v1/api-keys`) returns `ApiKeyWithRawKey` — the object above with `rawKey` **required**.
+- **Rotate** (`POST /api/v1/api-keys/:apiKeyId/rotate`) also returns `ApiKeyWithRawKey` with the **new** key value.
+
+Every other read — list and get by id — returns `ApiKey`, where `rawKey` is absent for secret keys. Use `prefix` and `end` to render an identifiable placeholder like `vh_sk_...WxYz` in your own tooling.
+
+<Callout type="warn" title="Store the raw key immediately">
+  The `rawKey` in the create and rotate responses is the only time you will ever see the full
+  secret key. It cannot be retrieved later — not by list, not by get. If you lose it, rotate the
+  key to get a new one.
+</Callout>
+
+Publishable keys are the exception: they are not secret, so `rawKey` is included whenever a publishable key appears in list or get responses.
+
+## Create a secret key
+
+`POST /api/v1/api-keys`
+
+| Body field | Type | Description |
+| --- | --- | --- |
+| `name` | `string` | Label for the key (e.g. the service that will use it). |
+| `projectId` | `string` | The project to create the key in. |
+
+```bash
+curl -X POST https://api.voidhash.com/api/v1/api-keys \
+  -H "x-api-key: <your-api-key>" \
+  -H "Content-Type: application/json" \
+  -d '{ "name": "Production server", "projectId": "prj_01hxyz" }'
+```
+
+Returns `ApiKeyWithRawKey`:
+
+```json
+{
+  "id": "api_sk_01hxyz",
+  "name": "Production server",
+  "projectId": "prj_01hxyz",
+  "isPublic": false,
+  "prefix": "vh_sk_",
+  "end": "WxYz",
+  "rawKey": "vh_sk_AbCdEfGhIjKlMnOpQrStUvWxYz"
+}
+```
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `403` | `Api/ActionForbiddenError` | The caller lacks permission on `projectId`. |
+| `500` | `Api/ApiKeyServiceError` | Internal service failure. |
+
+## List API keys
+
+`GET /api/v1/api-keys`
+
+Lists every key in the calling credential's project — publishable keys first, then by creation time. Secret keys come back without `rawKey`; publishable keys include it.
+
+```bash
+curl https://api.voidhash.com/api/v1/api-keys \
+  -H "x-secret-key: vh_sk_..."
+```
+
+Returns `ApiKey[]`.
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `403` | `Api/ActionForbiddenError` | No project in scope, or missing permission. |
+| `500` | `Api/ApiKeyServiceError` | Internal service failure. |
+
+## Get an API key
+
+`GET /api/v1/api-keys/:apiKeyId`
+
+```bash
+curl https://api.voidhash.com/api/v1/api-keys/api_sk_01hxyz \
+  -H "x-secret-key: vh_sk_..."
+```
+
+Returns a single `ApiKey`.
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `403` | `Api/ActionForbiddenError` | The key belongs to a project the caller cannot access. |
+| `404` | `Api/ApiKeyNotFoundError` | No key with this id exists. |
+| `500` | `Api/ApiKeyServiceError` | Internal service failure. |
+
+## Rotate a secret key
+
+`POST /api/v1/api-keys/:apiKeyId/rotate`
+
+Replaces the key material in place: a new secret is generated and stored under the same `id` and `name`, and the old key stops authenticating immediately. This is the endpoint to reach for when a key leaks.
+
+```bash
+curl -X POST https://api.voidhash.com/api/v1/api-keys/api_sk_01hxyz/rotate \
+  -H "x-api-key: <your-api-key>"
+```
+
+Returns `ApiKeyWithRawKey` with the new `rawKey`, `prefix`, and `end` — same warning as create: this is the only time you see the new value.
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `403` | `Api/ActionForbiddenError` | The caller lacks permission on the key's project. |
+| `404` | `Api/ApiKeyNotFoundError` | No key with this id exists. |
+| `500` | `Api/ApiKeyServiceError` | Internal service failure. |
+
+### Rotating a compromised key
+
+1. Call rotate on the compromised key. The leaked value is invalid the moment the call succeeds — there is no grace period.
+2. Copy `rawKey` from the response and update every server, CI secret, and environment variable that used the old value. Anything still holding the old key gets `401 Api/NotAuthenticatedError` on its next request.
+3. The `id` and `name` are unchanged, so nothing that references the key by id needs to change.
+
+If the key should not exist at all anymore, delete it instead.
+
+## Delete an API key
+
+`DELETE /api/v1/api-keys/:apiKeyId`
+
+Permanently removes the key. Requests using it fail with `401` immediately. Deletion is irreversible — if a service still needs access, prefer rotate.
+
+```bash
+curl -X DELETE https://api.voidhash.com/api/v1/api-keys/api_sk_01hxyz \
+  -H "x-api-key: <your-api-key>"
+```
+
+Returns an empty `200` response on success.
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `403` | `Api/ActionForbiddenError` | The caller lacks permission on the key's project. |
+| `404` | `Api/ApiKeyNotFoundError` | No key with this id exists. |
+| `500` | `Api/ApiKeyServiceError` | Internal service failure. |
+
+## Related
+
+- [Authentication](/api/authentication) — where each key type goes in request headers
+- [API Overview](/api/overview) — base URLs and shared error conventions
+- [Organizations & Projects](/api/organizations-and-projects) — creating the project a key belongs to
diff --git a/apps/www/src/features/docs/content/docs/api/authentication.mdx b/apps/www/src/features/docs/content/docs/api/authentication.mdx
new file mode 100644
index 000000000..b70811169
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/authentication.mdx
@@ -0,0 +1,177 @@
+---
+title: Authentication
+description: The four credential types the Voidhash API accepts, the session each one resolves to, and which endpoints expect which credential.
+---
+
+Every endpoint under `/api/v1` goes through a single shared authentication middleware. It accepts
+four credential types, resolves each to a session that carries the organizations and projects the
+credential can access, and rejects everything else with a `401`.
+
+| Credential | Header(s) | Typical caller |
+| --- | --- | --- |
+| User API key | `x-api-key` | CLI, scripts acting as a dashboard user |
+| Project secret key | `x-secret-key` | Your backend (server-to-server) |
+| Publishable key | `x-publishable-key` + `x-distinct-id` | Device SDKs (React Native, web) |
+| Dashboard session cookie | `Cookie: wos-session=...` | The Voidhash dashboard itself |
+
+The middleware checks credentials in a fixed order: `x-api-key` first, then the session cookie,
+then `x-secret-key`, then `x-publishable-key`. If a request carries several, the first match wins.
+
+## User API key (`x-api-key`)
+
+A user API key authenticates as a specific dashboard user. The resulting session has
+`method: "user"` and includes the full `user` object plus every organization and project that user
+belongs to, each with its own `permissions` array.
+
+```bash
+curl https://api.voidhash.com/api/v1/auth/session \
+  -H "x-api-key: $VOIDHASH_API_KEY"
+```
+
+Use this for tooling that acts on your behalf across projects — the [CLI](/docs/cli/auth)
+authenticates this way. See [API Keys](/docs/api/api-keys) for creating and rotating keys.
+
+## Project secret key (`x-secret-key`)
+
+A secret key authenticates as a single project with full project access. The resulting session has
+`method: "secret-key"`, an empty `organizations` array, no `user`, and exactly one entry in
+`projects` carrying the `project:all` permission.
+
+```bash
+curl https://api.voidhash.com/api/v1/persons \
+  -H "x-secret-key: $VOIDHASH_SECRET_KEY"
+```
+
+<Callout type="warn" title="Never ship a secret key in a client">
+A secret key grants full access to its project — persons, catalog, webhooks, notifications, all of
+it. Keep it on your server only. Never embed it in a mobile app, web bundle, or anything else you
+distribute; use the publishable key for device-side calls instead. If a secret key leaks, rotate it
+immediately via the [API Keys](/docs/api/api-keys) endpoints.
+</Callout>
+
+## Publishable key + distinct ID (device SDKs)
+
+The publishable key is safe to embed in clients. It must be paired with an `x-distinct-id` header
+identifying the current person; sending `x-publishable-key` without `x-distinct-id` fails with
+`Api/AuthenticationError` ("Missing distinct-id header").
+
+```bash
+curl https://api.voidhash.com/api/v1/sdk/schema \
+  -H "x-publishable-key: $VOIDHASH_PUBLISHABLE_KEY" \
+  -H "x-distinct-id: device-8f2c1a"
+```
+
+The resulting session has `method: "publishable-key"`, a single project entry with an **empty**
+`permissions` array, and a `person` object carrying the `distinctId`. It only unlocks the
+[SDK endpoint group](/docs/api/sdk), which additionally requires a set of client telemetry headers
+(`x-sdk`, `x-platform`, `x-client-bundle-id`, ...) documented on that page. The
+[React Native SDK](/docs/react-native/overview) sends all of this for you.
+
+## Dashboard session cookie
+
+Requests carrying a WorkOS session cookie (`wos-session=`) authenticate as the logged-in dashboard
+user. This is what the Voidhash dashboard uses; it resolves to the same `method: "user"` session
+shape as an API key. You will normally never construct this yourself — use an API key for
+programmatic access.
+
+## Session shapes
+
+Whatever the credential, the middleware provides a session with a common core:
+
+```ts
+type Session = {
+  method: "user" | "secret-key" | "publishable-key";
+  name: string;
+  organizations: Array<{
+    id: string;
+    name: string;
+    slug: string;
+    logo: string | null;
+    workosOrganizationId: string | null;
+    permissions: string[];
+  }>;
+  projects: Array<{
+    id: string;
+    name: string;
+    slug: string;
+    logo: string | null;
+    organizationId: string;
+    permissions: string[];
+  }>;
+  user: User | null; // only on method: "user"
+  person: { distinctId: string } | null; // only on method: "publishable-key"
+};
+```
+
+- **User sessions** list every organization and project the user can access; `permissions` on each
+  entry reflects the user's role there.
+- **Secret-key sessions** contain exactly one project with `permissions: ["project:all"]` and no
+  organizations.
+- **Publishable-key sessions** contain exactly one project with no permissions, plus the `person`
+  identity from `x-distinct-id`.
+
+Per-endpoint authorization is enforced against these `permissions` arrays — a valid credential that
+lacks the required project permission gets a `403 Api/ActionForbiddenError`.
+
+## Inspecting your credential
+
+`GET /api/v1/auth/session` echoes back what the API resolved your credential to. It is the quickest
+way to verify a key works and to discover the project and organization IDs it can see.
+
+```bash
+curl https://api.voidhash.com/api/v1/auth/session \
+  -H "x-secret-key: $VOIDHASH_SECRET_KEY"
+```
+
+```json
+{
+  "method": "secret-key",
+  "name": "My App API Key",
+  "organizations": [],
+  "projects": [
+    {
+      "id": "proj_123",
+      "name": "My App",
+      "organizationId": "org_123",
+      "slug": "my-app"
+    }
+  ]
+}
+```
+
+The `method` field is one of `"api-key"`, `"secret-key"`, or `"publishable-key"` — user sessions
+(API key or dashboard cookie) both report `"api-key"` here.
+
+## Authentication errors
+
+Errors are tagged JSON objects; the `_tag` identifies the error type.
+
+| Status | `_tag` | Body | When |
+| --- | --- | --- | --- |
+| 401 | `Api/NotAuthenticatedError` | `{ message }` | No credential sent, or the API key / cookie is invalid |
+| 500 | `Api/AuthenticationError` | `{ cause, message }` | Invalid or expired secret / publishable key, missing `x-distinct-id`, or an internal failure while authenticating |
+
+```json
+{
+  "_tag": "Api/NotAuthenticatedError",
+  "message": "You are not authenticated"
+}
+```
+
+Both can occur on any `/api/v1` endpoint since they come from the shared middleware, not the
+endpoint itself.
+
+## Which credential each endpoint group expects
+
+Any project-scoped endpoint accepts any session that covers the target project with the required
+permission, but the groups have clear intents:
+
+| Endpoint group | Expected credential |
+| --- | --- |
+| [`/sdk`](/docs/api/sdk) | Publishable key + distinct ID only |
+| [`/notifications`](/docs/api/notifications) | Secret key only (server-to-server) |
+| `/auth`, `/users`, [`/organizations`, `/projects`](/docs/api/organizations-and-projects) | User session (API key or dashboard cookie) |
+| Everything else — [persons](/docs/api/persons), [catalog](/docs/api/catalog), [schema](/docs/api/schema), [webhooks](/docs/api/webhooks), [paywall deploys](/docs/api/paywall-deploys), [API keys](/docs/api/api-keys) | User session or secret key with the required project permission |
+
+The [event capture surface](/docs/api/event-capture) at `/i/v1` is separate: it authenticates with
+a publishable project token in the request body, not through this middleware.
diff --git a/apps/www/src/features/docs/content/docs/api/catalog.mdx b/apps/www/src/features/docs/content/docs/api/catalog.mdx
new file mode 100644
index 000000000..568043e6a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/catalog.mdx
@@ -0,0 +1,213 @@
+---
+title: Products, Perks & Locations
+description: Read-only reference for the six catalog endpoints — products, perks, product perks, paywall locations, and payment provider configuration.
+---
+
+The catalog endpoints expose your project's purchase configuration as flat, read-only lists. They
+return exactly what is currently deployed for the project your credential resolves to — no
+pagination, no filters (except the product-perks lookup), no writes.
+
+## The catalog model
+
+Six resources make up the catalog:
+
+- **Products** are the purchasable items in your app. Every product carries a `type` —
+  `subscription`, `one-time`, or `one-time-consumable`. See [Products](/concepts/products).
+- **Perks** are the entitlements a purchase grants — the things you gate features on.
+  See [Perks](/concepts/perks).
+- **Product perks** are the join rows linking a product to the perks it unlocks.
+- **Paywall locations** are the named places in your app where a paywall can be shown
+  (for example `onboarding` or `settings-upsell`).
+- **Payment provider configurations** are your project's store connections (Apple App Store,
+  Google Play) and whether each is enabled.
+- **Payment provider products** map a catalog product to the actual store SKU via a provider-specific
+  `configuration` object.
+
+<Callout type="info" title="The catalog is written elsewhere">
+  These endpoints only read. The catalog itself is defined in your schema and pushed from your
+  project — there are no `POST`/`PATCH`/`DELETE` routes here. If you want the whole catalog in one
+  response, already joined and keyed the way the CLI and SDK consume it, use the
+  [Schema endpoint](/api/schema) instead of stitching these six lists together.
+</Callout>
+
+## Authentication
+
+All catalog endpoints accept any project-scoped credential — a project secret key
+(`x-secret-key`) or a user API key (`x-api-key`). The project is resolved from the credential, so
+there is no project ID in the path. See [Authentication](/api/authentication).
+
+The examples below use the production base URL `https://api.voidhash.com`.
+
+## List products
+
+```
+GET /api/v1/products
+```
+
+Returns every product in the project.
+
+```bash
+curl https://api.voidhash.com/api/v1/products \
+  -H "x-secret-key: vh_sk_..."
+```
+
+Each row has the shape:
+
+```ts
+type Product = {
+  id: string;
+  name: string;
+  projectId: string;
+  slug: string;
+  type: "subscription" | "one-time" | "one-time-consumable";
+};
+```
+
+```json
+[
+  {
+    "id": "prod_01j...",
+    "name": "Monthly Premium",
+    "projectId": "proj_01j...",
+    "slug": "monthly-sub",
+    "type": "subscription"
+  }
+]
+```
+
+The `slug` is the identifier you defined in your schema; `id` is Voidhash's internal identifier
+and is what the [product-perks lookup](#list-perks-for-a-product) expects.
+
+## List perks
+
+```
+GET /api/v1/perks
+```
+
+Returns every perk in the project.
+
+```bash
+curl https://api.voidhash.com/api/v1/perks \
+  -H "x-secret-key: vh_sk_..."
+```
+
+```ts
+type Perk = {
+  id: string;
+  name: string;
+  projectId: string;
+  slug: string;
+};
+```
+
+## List perks for a product
+
+```
+GET /api/v1/product-perks/by-product-id/:productId
+```
+
+Returns the join rows for one product — which perks it unlocks. `productId` is the internal
+product `id` from the products list, not the slug.
+
+```bash
+curl https://api.voidhash.com/api/v1/product-perks/by-product-id/prod_01j... \
+  -H "x-secret-key: vh_sk_..."
+```
+
+```ts
+type ProductPerk = {
+  id: string;
+  perkId: string;
+  productId: string;
+};
+```
+
+Join `perkId` back against the perks list to get names and slugs. An invalid `productId` yields a
+`400` with `Api/ProductPerkValidationError`.
+
+## List paywall locations
+
+```
+GET /api/v1/paywall-locations
+```
+
+Returns the paywall locations defined for the project. Locations are what the SDK resolves against
+when it decides which paywall to show at a given point in your app.
+
+```bash
+curl https://api.voidhash.com/api/v1/paywall-locations \
+  -H "x-secret-key: vh_sk_..."
+```
+
+```ts
+type PaywallLocation = {
+  description: string | null;
+  id: string;
+  name: string;
+  projectId: string;
+  slug: string;
+};
+```
+
+## List payment provider configurations
+
+```
+GET /api/v1/payment-provider-configurations
+```
+
+Returns the project's store connections and whether each is currently enabled.
+
+```bash
+curl https://api.voidhash.com/api/v1/payment-provider-configurations \
+  -H "x-secret-key: vh_sk_..."
+```
+
+```ts
+type PaymentProviderConfiguration = {
+  enabled: boolean;
+  id: string;
+  name: string;
+  projectId: string;
+  providerId: string;
+};
+```
+
+## List payment provider products
+
+```
+GET /api/v1/payment-provider-products
+```
+
+Returns the mapping between catalog products and store SKUs. Each row ties a `productId` to a
+provider configuration and carries the provider-specific `configuration` (for example the App
+Store product identifier, or the Google Play product ID and base plan ID).
+
+```bash
+curl https://api.voidhash.com/api/v1/payment-provider-products \
+  -H "x-secret-key: vh_sk_..."
+```
+
+```ts
+type PaymentProviderProduct = {
+  configuration: Record<string, unknown>;
+  id: string;
+  paymentProviderConfigurationId: string;
+  productId: string;
+  providerId: string;
+};
+```
+
+The `configuration` object is intentionally untyped at the API surface — its shape depends on the
+provider. Set these values in your schema's per-product `providers` block; see
+[Products](/concepts/products) for what each provider expects.
+
+## Errors
+
+All six endpoints share the same error surface. Errors are JSON objects tagged with `_tag`:
+
+| Status | `_tag` | Meaning |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credential. |
+| `403` | `Api/ActionForbiddenError` | Credential lacks the required project permission. |
+| `400` | `Api/ProductPerkValidationError` | Invalid `productId` (product-perks lookup only). |
+| `500` | `Api/ProductServiceError`, `Api/PerkServiceError`, `Api/ProductPerkServiceError`, `Api/PaywallLocationServiceError`, `Api/PaymentProviderConfigurationServiceError`, `Api/PaymentProviderProductServiceError` | Internal error in the owning service. |
diff --git a/apps/www/src/features/docs/content/docs/api/event-capture.mdx b/apps/www/src/features/docs/content/docs/api/event-capture.mdx
new file mode 100644
index 000000000..275c205b1
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/event-capture.mdx
@@ -0,0 +1,152 @@
+---
+title: Event Capture
+description: Ingest analytics events through the /i/v1 capture endpoints using a publishable project token.
+---
+
+Event capture is a separate, high-throughput ingestion surface for analytics events. It lives on the same host as the rest of the API (see [API Overview](/docs/api/overview) for base URLs) but under the `/i/v1` prefix, with its own authentication model and error shape. The [React Native SDK](/docs/react-native/analytics) uses these endpoints under the hood — call them directly when you are building your own client or forwarding events from another system.
+
+There are two endpoints:
+
+| Method + Path | Purpose |
+| --- | --- |
+| `POST /i/v1/capture` | Capture a single event |
+| `POST /i/v1/batch` | Capture multiple events in one request |
+
+## Authentication
+
+Unlike the `/api/v1` surface, event capture does **not** use authentication headers. Every request carries a publishable project `token` in the request body, and the token resolves the project the events belong to. A request with a missing or invalid token fails with `401 unauthorized`.
+
+Because the token is publishable, it is safe to embed in client applications — it can only submit events, and reserved server-side event names are rejected (see [Response semantics](#response-semantics) below).
+
+## The event object
+
+Both endpoints accept the same event shape:
+
+| Field | Type | Required | Description |
+| --- | --- | --- | --- |
+| `uuid` | string | Yes | Stable client-generated event id, used for deduplication |
+| `event` | string | Yes | The event name |
+| `distinct_id` | string | Yes | The distinct id of the person the event belongs to |
+| `properties` | object | Yes | Event properties (may be empty `{}`) |
+| `context` | object | Yes | Client context — device, app, and environment metadata (may be empty `{}`) |
+| `session_id` | string | No | Session identifier for grouping events |
+| `timestamp` | string | No | ISO 8601 time the event occurred on the client |
+
+`properties` and `context` values are JSON-like: strings, finite numbers, booleans, `null`, and arbitrarily nested arrays and objects of the same.
+
+<Callout type="info" title="uuid is your idempotency key">
+  Generate `uuid` on the client, once per event, and reuse the same value on retries. The server
+  deduplicates events by this id within the project, so resending an event after a timeout or a
+  `429`/`503` never produces duplicates. Never generate a fresh `uuid` for a retry of the same
+  event.
+</Callout>
+
+Alongside the events, the request body carries two top-level fields:
+
+| Field | Type | Required | Description |
+| --- | --- | --- | --- |
+| `token` | string | Yes | Publishable project token |
+| `sent_at` | string | Yes | ISO 8601 time the request left the client, recorded alongside the server's receive time |
+
+## Capture a single event
+
+`POST /i/v1/capture` takes one event: the event fields, plus `sent_at` and `token`, flattened into a single body.
+
+```bash
+curl https://api.voidhash.com/i/v1/capture \
+  -H "Content-Type: application/json" \
+  -d '{
+    "token": "vh_pk_...",
+    "sent_at": "2026-07-17T12:00:01.000Z",
+    "uuid": "018f6d2e-4c3a-7b1d-9e5f-2a8c1b0d4e6f",
+    "event": "paywall_viewed",
+    "distinct_id": "user_123",
+    "properties": { "paywall": "onboarding", "plan": "pro" },
+    "context": { "app_version": "2.4.0", "os": "ios" },
+    "session_id": "sess_456",
+    "timestamp": "2026-07-17T12:00:00.000Z"
+  }'
+```
+
+## Capture a batch
+
+`POST /i/v1/batch` takes a non-empty `events` array plus the same top-level `sent_at` and `token`. Prefer batching when you buffer events on the client — one request consumes one unit of the per-project request rate limit regardless of how many events it carries.
+
+```bash
+curl https://api.voidhash.com/i/v1/batch \
+  -H "Content-Type: application/json" \
+  -d '{
+    "token": "vh_pk_...",
+    "sent_at": "2026-07-17T12:00:05.000Z",
+    "events": [
+      {
+        "uuid": "018f6d2e-4c3a-7b1d-9e5f-2a8c1b0d4e6f",
+        "event": "paywall_viewed",
+        "distinct_id": "user_123",
+        "properties": { "paywall": "onboarding" },
+        "context": { "app_version": "2.4.0", "os": "ios" },
+        "timestamp": "2026-07-17T12:00:00.000Z"
+      },
+      {
+        "uuid": "018f6d2e-5d4b-7c2e-8f6a-3b9d2c1e5f7a",
+        "event": "purchase_button_tapped",
+        "distinct_id": "user_123",
+        "properties": { "product": "pro-monthly" },
+        "context": { "app_version": "2.4.0", "os": "ios" },
+        "timestamp": "2026-07-17T12:00:03.000Z"
+      }
+    ]
+  }'
+```
+
+## Response semantics
+
+Both endpoints return `202 Accepted` with per-event counts:
+
+```json
+{
+  "accepted": 2,
+  "rejected": 0
+}
+```
+
+- `202` means the request was authenticated and processed — accepted events are enqueued for asynchronous ingestion, not yet stored.
+- `accepted` + `rejected` always equals the number of events you sent. A batch can partially succeed: the request still returns `202` even when `rejected > 0`.
+- Events are rejected individually when they use a reserved revenue event name (`$purchase.*` and `$subscription.*` are server-trusted and can never enter through the publishable-token surface) or when per-event processing fails. Rejected events are dropped — do not resend them.
+
+Every response (success or error) includes an `x-request-id` header. Log it and include it when reporting ingestion issues.
+
+## Errors
+
+Error responses use a flat shape, distinct from the tagged errors on `/api/v1`:
+
+```json
+{
+  "error": "request rate limit exceeded",
+  "code": "rate_limited"
+}
+```
+
+Branch on `code` — it is stable and machine-matchable. `error` is a human-readable message.
+
+| Status | `code` | Meaning | Retry? |
+| --- | --- | --- | --- |
+| `400` | `invalid_request` | Malformed body or events failing schema validation | No — fix the request |
+| `401` | `unauthorized` | Missing or invalid `token` | No — fix the token |
+| `413` | `payload_too_large` | Request body exceeds the size limit | No — split into smaller batches |
+| `429` | `rate_limited` | Per-project request rate limit exceeded, or capture is disabled for the project | Yes — after the indicated delay |
+| `503` | `dependency_unavailable` | A capture dependency is temporarily unavailable | Yes — with backoff |
+| `500` | `internal_error` | Unexpected server failure | Yes — with backoff |
+
+Rate-limited responses tell you how long to wait: the `retry-after` response header carries the delay in seconds, and the body may additionally include `retry_after_ms` with millisecond precision.
+
+<Callout type="warn" title="Retry safely, never re-generate uuids">
+  Treat `429`, `503`, and `500` (and network timeouts) as retryable: keep the events buffered and
+  resend the identical payload with exponential backoff, honoring `retry-after` when present.
+  Because deduplication keys on each event's `uuid`, replaying the same batch is safe. `400`,
+  `401`, and `413` are not retryable — retrying the same request will fail the same way.
+</Callout>
+
+## OpenAPI document
+
+The event capture surface publishes its own OpenAPI document at `GET /i/docs/openapi.json` if you want to generate a client. For the header-authenticated management API, see [Authentication](/docs/api/authentication).
diff --git a/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.batch.mdx b/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.batch.mdx
new file mode 100644
index 000000000..53a58c543
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.batch.mdx
@@ -0,0 +1,27 @@
+---
+title: Batch
+full: true
+_openapi:
+  preload:
+    - event-capture
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="event-capture" operations={[{"path":"/i/v1/batch","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.capture.mdx b/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.capture.mdx
new file mode 100644
index 000000000..31e0e2b9a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/event_capture.capture.mdx
@@ -0,0 +1,27 @@
+---
+title: Capture
+full: true
+_openapi:
+  preload:
+    - event-capture
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="event-capture" operations={[{"path":"/i/v1/capture","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/meta.json b/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/meta.json
new file mode 100644
index 000000000..6e1bc0e74
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/event-capture/event_capture/meta.json
@@ -0,0 +1,7 @@
+{
+  "title": "Event_capture",
+  "pages": [
+    "event_capture.capture",
+    "event_capture.batch"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/event-capture/meta.json b/apps/www/src/features/docs/content/docs/api/event-capture/meta.json
new file mode 100644
index 000000000..704ece93f
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/event-capture/meta.json
@@ -0,0 +1,5 @@
+{
+  "pages": [
+    "event_capture"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/meta.yaml b/apps/www/src/features/docs/content/docs/api/meta.yaml
new file mode 100644
index 000000000..f67ef50ee
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/meta.yaml
@@ -0,0 +1,10 @@
+title: API Reference
+icon: Code
+pages:
+  - "---Overview---"
+  - overview
+  - authentication
+  - "---Reference---"
+  - reference
+  - "---Event Capture---"
+  - event-capture
diff --git a/apps/www/src/features/docs/content/docs/api/notifications.mdx b/apps/www/src/features/docs/content/docs/api/notifications.mdx
new file mode 100644
index 000000000..5f0fac118
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/notifications.mdx
@@ -0,0 +1,117 @@
+---
+title: Push Notifications
+description: Send push notifications to your users' devices with a single server-to-server API call.
+---
+
+The notifications endpoint dispatches push notifications to devices registered through the device SDK. You target one or more persons, provide the message once, and Voidhash fans it out to every registered device — routing each token through the right provider (FCM or APNs) for you.
+
+This is a privileged, server-to-server surface: it authenticates with a **project secret key only**. Publishable keys and user API keys are rejected, so clients can never push to arbitrary persons.
+
+<Callout type="info" title="Feature flag required">
+  Push notifications are gated by an internal feature flag. If the flag is not enabled for your
+  organization, sends fail with `409 Api/PushSendNotEnabledError`. Contact us to get it enabled
+  for your project.
+</Callout>
+
+Devices become targetable once your app registers them via the SDK push-device endpoints — see [push devices on the SDK page](/docs/api/sdk).
+
+## Send a notification
+
+```
+POST /api/v1/notifications/send
+```
+
+Authenticate with your project secret key:
+
+```bash
+curl https://api.voidhash.com/api/v1/notifications/send \
+  -X POST \
+  -H "x-secret-key: vh_sk_..." \
+  -H "Content-Type: application/json" \
+  -d '{
+    "distinctIds": ["user-123"],
+    "title": "Your trial ends tomorrow",
+    "body": "Upgrade now to keep your perks.",
+    "data": { "screen": "paywall", "locationSlug": "onboarding" },
+    "priority": "high",
+    "idempotencyKey": "trial-reminder-user-123"
+  }'
+```
+
+### Request body
+
+| Field | Type | Required | Description |
+| --- | --- | --- | --- |
+| `personIds` | `string[]` | See below | Target persons by canonical person ID |
+| `distinctIds` | `string[]` | See below | Target persons by distinct ID |
+| `title` | `string` | Yes | Notification title (min length 1) |
+| `body` | `string` | Yes | Notification body (min length 1) |
+| `data` | `object` | No | Arbitrary key-value payload delivered to the app |
+| `sound` | `string` | No | Sound to play on delivery |
+| `badge` | `number` | No | Badge count to set on the app icon |
+| `priority` | `"default" \| "high"` | No | Delivery priority |
+| `ttl` | `number` | No | Time-to-live in seconds |
+| `channelId` | `string` | No | Android notification channel |
+| `collapseId` | `string` | No | Collapse key — newer sends replace undelivered ones with the same ID |
+| `idempotencyKey` | `string` | No | Collapses retried sends into a single dispatch (per project) |
+
+### Targeting
+
+At least one of `personIds` or `distinctIds` must be non-empty — the server rejects requests that target nobody. You can mix both in one request.
+
+Targeting is forgiving by design: a `distinctId` that does not map to a known person is recorded in the response's `unresolvedDistinctIds`, never treated as a fatal error. The rest of the send proceeds normally.
+
+<Callout type="info" title="Retries are safe with an idempotency key">
+  Pass an `idempotencyKey` when your caller might retry (queue workers, cron jobs, webhook
+  handlers). Retried sends with the same key collapse into a single dispatch instead of
+  notifying users twice.
+</Callout>
+
+### Response
+
+The send is enqueued asynchronously — the response confirms acceptance and returns a tracking ID plus up-front counts, not final delivery results.
+
+```json
+{
+  "pushNotificationSendId": "push_send_...",
+  "deviceCount": 3,
+  "status": "pending",
+  "unresolvedDistinctIds": []
+}
+```
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `pushNotificationSendId` | `string` | Tracking ID for this send (`push_send_*`) |
+| `deviceCount` | `number` | Number of registered devices resolved for the targeted persons |
+| `status` | `string` | Send status — see below |
+| `unresolvedDistinctIds` | `string[]` | Distinct IDs that did not resolve to a known person |
+
+`status` is one of:
+
+| Status | Meaning |
+| --- | --- |
+| `pending` | Accepted and queued for dispatch |
+| `in_progress` | Dispatch to providers is underway |
+| `succeeded` | All device dispatches succeeded |
+| `partial_failed` | Some device dispatches failed |
+| `failed` | All device dispatches failed |
+| `no_recipients` | The targeted persons have no registered devices |
+
+A send that resolves zero devices returns immediately with `status: "no_recipients"` and `deviceCount: 0` — check `unresolvedDistinctIds` to see whether your targeting was off or the persons simply have no devices registered.
+
+## Errors
+
+| Status | `_tag` | Meaning |
+| --- | --- | --- |
+| `400` | `Api/PushDeviceValidationError` | Invalid request payload (e.g. no targets, empty title or body) |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials |
+| `403` | `Api/ActionForbiddenError` | Credential is not a project secret key, or lacks permission |
+| `409` | `Api/PushSendNotEnabledError` | Push is not enabled for this project — no enabled push provider, or the feature flag is off |
+| `500` | `Api/PushSendServiceError` | Downstream dispatch infrastructure failed |
+
+See [API Overview](/docs/api/overview) for the general error shape and status mapping.
+
+## Registering devices
+
+This endpoint only delivers to devices your app has registered. Registration, token refresh, and unregistration happen on the device-facing SDK surface (`POST /api/v1/sdk/push-devices/register`, `/refresh`, `/unregister`), authenticated with a publishable key. See [push devices on the SDK page](/docs/api/sdk) for the full contract.
diff --git a/apps/www/src/features/docs/content/docs/api/organizations-and-projects.mdx b/apps/www/src/features/docs/content/docs/api/organizations-and-projects.mdx
new file mode 100644
index 000000000..bc53978bb
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/organizations-and-projects.mdx
@@ -0,0 +1,205 @@
+---
+title: Organizations, Projects & Users
+description: Create organizations and projects, list the projects in an organization, and inspect the current user account.
+---
+
+Organizations and projects are the account-level containers in Voidhash. An **organization** groups
+your team and billing; a **project** lives inside an organization and owns everything else —
+products, perks, paywalls, API keys, and persons. The endpoints on this page manage those
+containers and the user account itself.
+
+<Callout type="info" title="These endpoints require a user session">
+  Unlike the rest of the API, organization, project, and user endpoints operate on *your account*,
+  not on a single project. Authenticate with a user API key (`x-api-key`) or a dashboard session
+  cookie. Project-scoped secret keys and publishable keys are not accepted here — they belong to
+  one project and cannot create or enumerate account-level resources. See
+  [Authentication](/docs/api/authentication).
+</Callout>
+
+## Create an Organization
+
+`POST /api/v1/organizations`
+
+Creates a new organization owned by the authenticated user.
+
+```bash
+curl -X POST https://api.voidhash.com/api/v1/organizations \
+  -H "x-api-key: <your-user-api-key>" \
+  -H "Content-Type: application/json" \
+  -d '{ "name": "Acme Inc" }'
+```
+
+### Request body
+
+| Field | Type | Required | Description |
+| --- | --- | --- | --- |
+| `name` | `string` | Yes | Display name of the organization. The slug is derived server-side. |
+
+### Response
+
+Returns the created `Organization`:
+
+```json
+{
+  "id": "org_...",
+  "name": "Acme Inc",
+  "slug": "acme-inc"
+}
+```
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `500` | `Api/OrganizationServiceError` | The organization could not be created. |
+
+## Create a Project
+
+`POST /api/v1/projects`
+
+Creates a new project inside an organization you belong to.
+
+```bash
+curl -X POST https://api.voidhash.com/api/v1/projects \
+  -H "x-api-key: <your-user-api-key>" \
+  -H "Content-Type: application/json" \
+  -d '{ "name": "My App", "organizationId": "org_..." }'
+```
+
+### Request body
+
+| Field | Type | Required | Description |
+| --- | --- | --- | --- |
+| `name` | `string` | Yes | Display name of the project. The slug is derived server-side. |
+| `organizationId` | `string` | Yes | The organization the project belongs to. |
+
+### Response
+
+Returns the created `Project`:
+
+```json
+{
+  "id": "proj_...",
+  "name": "My App",
+  "slug": "my-app"
+}
+```
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | You are not a member of the target organization. |
+| `500` | `Api/AuthenticationError` | The session could not be resolved. |
+| `500` | `Api/ProjectServiceError` | The project could not be created. |
+
+<Callout type="info" title="Next step: create keys for the project">
+  A new project has no credentials yet. Create a secret key for server-side use with
+  `POST /api/v1/api-keys` — see [API Keys](/docs/api/api-keys).
+</Callout>
+
+## List Projects
+
+`GET /api/v1/projects/:organizationId`
+
+Lists all projects in an organization you belong to.
+
+```bash
+curl https://api.voidhash.com/api/v1/projects/org_... \
+  -H "x-api-key: <your-user-api-key>"
+```
+
+### Response
+
+Returns an array of `Project` objects:
+
+```json
+[
+  { "id": "proj_...", "name": "My App", "slug": "my-app" },
+  { "id": "proj_...", "name": "My Other App", "slug": "my-other-app" }
+]
+```
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | You are not a member of the organization. |
+| `500` | `Api/ProjectServiceError` | Projects could not be loaded. |
+
+## Get the Current User
+
+`GET /api/v1/users/current`
+
+Returns the authenticated user, including every organization and project they have access to.
+This is the endpoint to call when you need to discover which projects a user API key can act on.
+
+```bash
+curl https://api.voidhash.com/api/v1/users/current \
+  -H "x-api-key: <your-user-api-key>"
+```
+
+### Response
+
+Returns the `User`:
+
+```json
+{
+  "id": "user_...",
+  "name": "Ada Lovelace",
+  "email": "ada@example.com",
+  "emailVerified": true,
+  "image": null,
+  "createdAt": "2026-01-15T09:30:00.000Z",
+  "updatedAt": "2026-07-01T12:00:00.000Z",
+  "organizations": [
+    {
+      "id": "org_...",
+      "name": "Acme Inc",
+      "slug": "acme-inc",
+      "logo": null,
+      "workosOrganizationId": null
+    }
+  ],
+  "projects": [
+    {
+      "id": "proj_...",
+      "name": "My App",
+      "slug": "my-app",
+      "logo": null,
+      "organizationId": "org_..."
+    }
+  ]
+}
+```
+
+### User fields
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `id` | `string` | User id. |
+| `name` | `string` | Display name. |
+| `email` | `string` | Email address. |
+| `emailVerified` | `boolean` | Whether the email address has been verified. |
+| `image` | `string \| null` | Avatar URL, if set. |
+| `createdAt` | `string` | ISO timestamp of account creation. |
+| `updatedAt` | `string` | ISO timestamp of the last account update. |
+| `organizations` | `array` | Organizations the user belongs to: `{ id, name, slug, logo \| null, workosOrganizationId \| null }`. |
+| `projects` | `array` | Projects the user can access: `{ id, name, slug, logo \| null, organizationId }`. |
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `500` | `Api/AuthenticationError` | The session could not be resolved. |
+| `500` | `Api/UserServiceError` | The user could not be loaded. |
+
+## Related
+
+- [Authentication](/docs/api/authentication) — credential types and which endpoints accept them.
+- [API Keys](/docs/api/api-keys) — create secret and publishable keys for a project.
+- [API Overview](/docs/api/overview) — base URLs, error format, and OpenAPI documents.
diff --git a/apps/www/src/features/docs/content/docs/api/overview.mdx b/apps/www/src/features/docs/content/docs/api/overview.mdx
new file mode 100644
index 000000000..dc334f646
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/overview.mdx
@@ -0,0 +1,87 @@
+---
+title: API Overview
+description: Base URLs, API surfaces, OpenAPI documents, and error conventions for the Voidhash HTTP API.
+---
+
+Voidhash exposes a public HTTP API for everything the CLI, the dashboard, and the device SDKs do: managing your catalog, persons, webhooks, paywall deploys, and capturing analytics events. If you prefer a typed client, the [React Native SDK](/docs/react-native/overview) and the [CLI](/docs/cli/overview) cover most use cases — the HTTP API is for server-to-server integrations and custom tooling.
+
+## Base URLs
+
+| Environment | Base URL |
+| --- | --- |
+| Production | `https://api.voidhash.com` |
+| Preview | `https://api.preview.voidhash.com` |
+| Local development | `http://localhost:1337` |
+
+All paths in the API reference are relative to these base URLs.
+
+## API surfaces
+
+The API has two distinct surfaces, served from the same host but with different authentication models:
+
+### Management & device SDK API — `/api/v1`
+
+The main API. Covers management endpoints (API keys, organizations, projects, persons, catalog, schema, webhooks, notifications, paywall deploys) and the device SDK endpoints under `/api/v1/sdk` that the React Native SDK talks to.
+
+Every endpoint authenticates via request headers — an API key, a project secret key, a publishable key, or a dashboard session. See [Authentication](/docs/api/authentication) for the full model.
+
+```bash
+curl https://api.voidhash.com/api/v1/auth/session \
+  -H "x-secret-key: vh_sk_..."
+```
+
+### Event capture API — `/i/v1`
+
+A separate, high-throughput surface for analytics event ingestion (`POST /i/v1/capture` and `POST /i/v1/batch`). It does not use header authentication — instead, requests carry a publishable project `token` in the request body, and the token resolves the project. Responses include an `x-request-id` header, and rate-limited responses (`429`) include `retry-after`. See [Event Capture](/docs/api/event-capture).
+
+## OpenAPI documents
+
+Both surfaces publish machine-readable OpenAPI documents you can use to generate clients or explore the API:
+
+| Surface | OpenAPI document |
+| --- | --- |
+| Management & device SDK API | `GET /api/docs/openapi.json` |
+| Event capture API | `GET /i/docs/openapi.json` |
+
+## Error conventions
+
+Errors on the `/api/v1` surface are tagged: every error body carries a `_tag` of the form `Api/XxxError` plus error-specific fields (typically `message`, or `cause` and `message` for service errors).
+
+```json
+{
+  "_tag": "Api/NotAuthenticatedError",
+  "message": "No valid credentials provided"
+}
+```
+
+The `_tag` is stable and machine-matchable — branch on it rather than parsing messages. HTTP status codes follow a consistent mapping:
+
+| Status | Error family | Meaning |
+| --- | --- | --- |
+| `400` | `Api/*ValidationError` | Invalid request payload or parameters |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials |
+| `403` | `Api/ActionForbiddenError` | Authenticated, but not permitted for this project or action |
+| `404` | `Api/*NotFoundError` | Resource does not exist |
+| `409` | `Api/*AlreadyExists*` and other conflicts | Request conflicts with current resource state |
+| `422` | Paywall deploy validation errors | Deploy manifest or blob failed validation |
+| `500` | `Api/*ServiceError` | Internal service failure |
+
+<Callout type="info" title="Event capture errors are shaped differently">
+  The `/i/v1` surface returns `{ "error": string, "code": string }` bodies with codes like
+  `invalid_request` (400), `unauthorized` (401), `payload_too_large` (413), `rate_limited` (429),
+  `dependency_unavailable` (503), and `internal_error` (500).
+</Callout>
+
+## API reference
+
+- [Authentication](/docs/api/authentication) — credential types, auth headers, and session introspection
+- [API Keys](/docs/api/api-keys) — create, list, rotate, and delete secret keys
+- [Organizations & Projects](/docs/api/organizations-and-projects) — organizations, projects, and the current user
+- [Persons](/docs/api/persons) — create and look up persons by ID or distinct ID
+- [Catalog](/docs/api/catalog) — products, perks, paywall locations, and payment provider configuration
+- [Schema](/docs/api/schema) — the consolidated project schema and its version probe
+- [Webhooks](/docs/api/webhooks) — endpoints, deliveries, retries, and secret rotation
+- [Notifications](/docs/api/notifications) — server-to-server push notification dispatch
+- [SDK](/docs/api/sdk) — the device-facing surface: identify, sync, flags, paywall resolution, push devices
+- [Paywall Deploys](/docs/api/paywall-deploys) — the code-deploy contract used by `voidhash-cli deploy`
+- [Event Capture](/docs/api/event-capture) — analytics event ingestion on `/i/v1`
diff --git a/apps/www/src/features/docs/content/docs/api/paywall-deploys.mdx b/apps/www/src/features/docs/content/docs/api/paywall-deploys.mdx
new file mode 100644
index 000000000..861d80982
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/paywall-deploys.mdx
@@ -0,0 +1,230 @@
+---
+title: Paywall Deploys
+description: The code-deploy contract behind voidhash-cli deploy — create a deploy from a manifest, upload content-addressed blobs, and finalize to release paywalls.
+---
+
+Paywall deploys are how code-built paywalls and components get onto Voidhash. The contract is a
+three-step, content-addressed flow: `POST` a deploy manifest, `PUT` each blob the server does not
+already have, then `POST` finalize to commit the deploy and release the paywalls. Every file is
+identified by its SHA-256 hash, so unchanged files are never uploaded twice.
+
+<Callout type="info" title="You probably want voidhash-cli deploy">
+  These endpoints exist for the CLI. Running [`voidhash-cli deploy`](/docs/cli/deploy) builds your
+  `.voidhash/` sources, assembles the manifest, and drives this exact flow for you — including
+  re-uploading missing blobs and retrying finalize. Call the endpoints directly only if you are
+  building custom deploy tooling.
+</Callout>
+
+## Authentication
+
+All three endpoints go through the standard auth middleware: send a user API key (what
+`voidhash-cli auth login` stores) as `x-api-key`, or a project secret key (`vh_sk_...`) as
+`x-secret-key`. The
+authenticated session must include a project whose slug matches the manifest's `project` field,
+inside an organization whose slug matches its `team` field — otherwise the request fails with
+`403`. See [Authentication](/docs/api/authentication).
+
+## Create a Deploy
+
+`POST /api/v1/paywall-deploys`
+
+Creates (or resumes) a deploy from a deploy manifest. The request body is the manifest JSON
+produced by the CLI build (`.voidhash/.build/manifest.json`, `schemaVersion: 2`): it declares
+every paywall, component, source file, artifact, and asset in the deploy, each as
+`{ path, bytes, sha256 }` (artifacts additionally carry `contentType`).
+
+```bash
+curl -X POST https://api.voidhash.com/api/v1/paywall-deploys \
+  -H "x-api-key: <your-api-key>" \
+  -H "Content-Type: application/json" \
+  --data-binary @.voidhash/.build/manifest.json
+```
+
+### Response
+
+Returns `201` with the deploy id and the subset of manifest file hashes the server does not
+already have stored for this project:
+
+```json
+{
+  "deployId": "pw_dep_...",
+  "missing": [
+    "5b00934c90ee...",
+    "ab93f1d24c07..."
+  ]
+}
+```
+
+Upload exactly the blobs listed in `missing`, then finalize. An empty `missing` array means every
+file is already on the server and you can finalize immediately.
+
+Creating a deploy is idempotent: re-`POST`ing a manifest whose canonical hash matches an existing
+deploy of the same project returns that deploy — whatever its status. A pending match resumes
+uploading via the returned `missing` list; an already-released match returns `missing: []`.
+
+<Callout type="warn" title="Unknown schemaVersion means your CLI is outdated">
+  The server validates `schemaVersion` before anything else. A version it does not understand is
+  rejected with a dedicated `400` — `Api/PaywallDeployUpgradeRequiredError` — whose `message`
+  tells you to upgrade `voidhash-cli`. Upgrade the CLI and rebuild rather than editing the
+  manifest by hand.
+</Callout>
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `400` | `Api/PaywallDeployUpgradeRequiredError` | The manifest declares a `schemaVersion` this server does not understand. Upgrade the CLI. |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | The session does not cover the manifest's `team`/`project`. |
+| `422` | `Api/PaywallDeployValidationError` | The manifest failed schema validation; `violations` lists the per-item details. |
+| `500` | `Api/PaywallDeployServiceError` | The deploy could not be created. |
+
+## Upload a Blob
+
+`PUT /api/v1/paywall-deploys/:deployId/blobs/:sha256`
+
+Uploads one file from the manifest as raw bytes. The `:sha256` path parameter is the lowercase
+hex SHA-256 of the body, exactly as declared in the manifest. The body is
+`application/octet-stream` — no JSON wrapper, no encoding.
+
+```bash
+curl -X PUT https://api.voidhash.com/api/v1/paywall-deploys/pw_dep_.../blobs/<sha256> \
+  -H "x-api-key: <your-api-key>" \
+  -H "Content-Type: application/octet-stream" \
+  --data-binary @.voidhash/.build/paywalls/onboarding/bundle.js
+```
+
+### Response
+
+Returns `200` with an empty object:
+
+```json
+{}
+```
+
+Blobs are content-addressed, so uploads are safe to repeat: re-uploading a blob the server
+already has is a no-op `200`. The server verifies that the body actually hashes to `:sha256` and
+that the hash is declared by the deploy's manifest, and enforces the per-role size caps on the
+actual uploaded bytes (a body whose length differs from the declared `bytes` or exceeds its
+role's cap is rejected).
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | The session does not cover the deploy's project. |
+| `404` | `Api/PaywallDeployNotFoundError` | No such deploy for this project. |
+| `404` | `Api/DeployBlobNotDeclaredError` | `:sha256` is not declared by the deploy's manifest; the body carries the offending `sha256`. |
+| `409` | `Api/PaywallDeployNotPendingError` | The deploy is no longer pending (already finalized) — blobs cannot be added. |
+| `422` | `Api/DeployBlobHashMismatchError` | The body does not hash to `:sha256`; the body carries `expectedSha256` and `actualSha256`. |
+| `422` | `Api/PaywallDeployValidationError` | The uploaded bytes violate a size constraint. |
+| `500` | `Api/PaywallDeployServiceError` | The blob could not be stored. |
+
+## Finalize a Deploy
+
+`POST /api/v1/paywall-deploys/:deployId/finalize`
+
+The immutable commit point. The server trusts nothing from the upload phase: it checks that every
+referenced blob is present, recomputes every SHA-256 and every `contentHash`, schema-validates
+the stored component manifests and preview trees, and re-verifies the size and content-type
+constraints — all from the stored blobs. On success it releases the paywalls and components and
+copies their artifacts into the public serving layout.
+
+```bash
+curl -X POST https://api.voidhash.com/api/v1/paywall-deploys/pw_dep_.../finalize \
+  -H "x-api-key: <your-api-key>"
+```
+
+### Response
+
+Returns the released paywalls (with their public URLs and versions) and components:
+
+```json
+{
+  "deployId": "pw_dep_...",
+  "status": "ready",
+  "paywalls": [
+    {
+      "id": "onboarding",
+      "paywallId": "pw_...",
+      "releaseId": "pw_pub_...",
+      "version": 3,
+      "contentHash": "5b00934c90ee...",
+      "url": "https://api.voidhash.com/p/5b00934c90ee.../index.html"
+    }
+  ],
+  "components": [
+    {
+      "id": "product-option",
+      "componentId": "pw_cmp_...",
+      "version": 2,
+      "contentHash": "ab93f1d24c07..."
+    }
+  ]
+}
+```
+
+### Paywall fields
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `id` | `string` | The paywall's slug from the manifest (derived from its filename). |
+| `paywallId` | `string` | The paywall record id (`pw_...`), upserted by slug. |
+| `releaseId` | `string` | The release id (`pw_pub_...`) now active for the paywall. |
+| `version` | `number` | The release version. Unchanged content reuses the existing release instead of bumping. |
+| `contentHash` | `string` | The content-addressed identity of the released bundle. |
+| `url` | `string` | The public URL of the released `index.html`. |
+
+### Component fields
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `id` | `string` | The component's slug from the manifest. |
+| `componentId` | `string` | The component record id (`pw_cmp_...`). |
+| `version` | `number` | The component version; skipped when the latest version has the same `contentHash`. |
+| `contentHash` | `string` | The content-addressed identity of the component's artifacts. |
+
+Finalizing an already-released deploy is a fully re-validated no-op that returns the current
+release and component summaries.
+
+<Callout type="info" title="Recovering from a 409">
+  A `409` — `Api/IncompleteDeployError` — means referenced blobs are still missing server-side;
+  its body carries the `missing` hash list. The deploy stays pending: upload exactly those blobs
+  and finalize again. This is what the CLI does automatically (it retries once).
+</Callout>
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | The session does not cover the deploy's project. |
+| `404` | `Api/PaywallDeployNotFoundError` | No such deploy for this project. |
+| `409` | `Api/IncompleteDeployError` | Referenced blobs are missing; the body carries the `missing` hash list. |
+| `422` | `Api/PaywallDeployValidationError` | A stored blob failed re-validation; `violations` lists the details. |
+| `500` | `Api/PaywallDeployServiceError` | The deploy could not be finalized. |
+
+## Serving Finalized Artifacts
+
+Finalized paywall artifacts are served publicly — unauthenticated, immutable, and
+content-addressed:
+
+```
+GET /p/:contentHash/index.html
+GET /p/:contentHash/bundle.js
+GET /p/:contentHash/assets/<name>
+```
+
+Responses carry long-lived immutable caching (`Cache-Control: public, max-age=31536000,
+immutable`) and permissive CORS. Component artifacts are served the same way under
+`/c/:contentHash/`. Never construct these URLs yourself: use the `url` from the finalize
+response, or the `htmlUrl` that [`POST /api/v1/sdk/resolve-paywall`](/docs/api/sdk) hands the
+device SDK at display time.
+
+## Related
+
+- [voidhash-cli deploy](/docs/cli/deploy) — the command that drives this flow end to end.
+- [Authentication](/docs/api/authentication) — credential types and which endpoints accept them.
+- [SDK](/docs/api/sdk) — how released paywalls reach devices via `resolve-paywall`.
+- [API Overview](/docs/api/overview) — base URLs, error format, and OpenAPI documents.
diff --git a/apps/www/src/features/docs/content/docs/api/persons.mdx b/apps/www/src/features/docs/content/docs/api/persons.mdx
new file mode 100644
index 000000000..20085972d
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/persons.mdx
@@ -0,0 +1,222 @@
+---
+title: Persons
+description: Create and look up the persons in a project — the server-side view of the users your app identifies through the SDK.
+---
+
+A **person** is Voidhash's record of an end user of your app: who they are, which distinct ids
+point at them, and (through other endpoints) what they own. Every purchase, subscription,
+entitlement, and analytics event in a project hangs off a person. The endpoints on this page are
+the server-side management surface — create a person ahead of time, enumerate them, or look one up
+by id.
+
+<Callout type="info" title="Project-scoped endpoints">
+  Persons belong to a project, so these endpoints require a project-scoped credential — a secret
+  key (`x-secret-key`) for server-to-server calls, or a user API key (`x-api-key`) with access to
+  the project. See [Authentication](/docs/api/authentication).
+</Callout>
+
+## Persons and distinct ids
+
+A person is addressed two ways:
+
+- `personId` — the canonical id Voidhash assigns (`person_...`). Stable, opaque, and the id you
+  should store on your side.
+- `distinctId` — the identifier *you* (or the SDK) use to refer to the user. A person can
+  accumulate several distinct ids over time; the API resolves any of them to the same person.
+
+Distinct ids come from two places:
+
+1. **The React Native SDK mints anonymous ids.** Before a user signs in, the SDK generates an
+   anonymous distinct id in the reserved `vh:anon:` namespace and uses it for every device call.
+2. **You supply identified ids.** When the user signs in, the SDK's identify call
+   (`POST /api/v1/sdk/identify` — see [Device SDK Endpoints](/docs/api/sdk)) links the device's
+   anonymous id to your own user id, merging the anonymous history into the identified person.
+
+Because of that merge model, reads on this page always resolve to the **canonical** person: if a
+person was merged into another, fetching the old `personId` returns the surviving profile.
+
+## The Person object
+
+```json
+{
+  "personId": "person_...",
+  "distinctId": "u_8f3c2a1b-9d4e-4f6a-b7c8-0d1e2f3a4b5c",
+  "email": "ada@example.com",
+  "name": "Ada Lovelace"
+}
+```
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `personId` | `string` | Canonical person id assigned by Voidhash. |
+| `distinctId` | `string` | The person's primary distinct id. |
+| `email` | `string \| null` | Email address, if known. |
+| `name` | `string \| null` | Display name, if known. |
+
+This is the management-surface shape. The device SDK's `GET /api/v1/sdk/person` returns a richer
+`SdkPerson` that adds entitlements, subscriptions, and purchase history — see
+[Device SDK Endpoints](/docs/api/sdk).
+
+## Create a Person
+
+`POST /api/v1/persons`
+
+Creates a person for the given distinct id in the authenticated project. If the distinct id
+already resolves to a person, the existing canonical profile is returned instead of a duplicate —
+the call is safe to repeat.
+
+```bash
+curl -X POST https://api.voidhash.com/api/v1/persons \
+  -H "x-secret-key: <your-secret-key>" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "distinctId": "u_8f3c2a1b-9d4e-4f6a-b7c8-0d1e2f3a4b5c",
+    "email": "ada@example.com",
+    "name": "Ada Lovelace"
+  }'
+```
+
+### Request body
+
+| Field | Type | Required | Description |
+| --- | --- | --- | --- |
+| `distinctId` | `string` | Yes | The identifier for the user. Use a unique, hard-to-guess value (like a UUID), the same one you later pass to the SDK's identify call. |
+| `email` | `string` | No | Email address to store on the person. |
+| `name` | `string` | No | Display name to store on the person. |
+
+Do not hand-craft distinct ids in the `vh:anon:` namespace — it is reserved for anonymous ids
+minted by the SDK.
+
+### Response
+
+Returns the created (or existing) `Person`:
+
+```json
+{
+  "personId": "person_...",
+  "distinctId": "u_8f3c2a1b-9d4e-4f6a-b7c8-0d1e2f3a4b5c",
+  "email": "ada@example.com",
+  "name": "Ada Lovelace"
+}
+```
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `400` | `Api/PersonInvalidAnonymousIdError` | The `distinctId` is an invalid anonymous id. The body carries the rejected id as `id`. |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | The credential has no access to the project. |
+| `500` | `Api/PersonServiceError` | The person could not be created. |
+
+<Callout type="info" title="You usually don't need to pre-create persons">
+  The SDK's identify call creates the person automatically the first time a distinct id is seen.
+  Use this endpoint when you want the person to exist server-side before the user ever opens the
+  app — for example to attach entitlements or send a push notification ahead of first launch.
+</Callout>
+
+## List Persons
+
+`GET /api/v1/persons`
+
+Lists the persons in the authenticated project.
+
+```bash
+curl https://api.voidhash.com/api/v1/persons \
+  -H "x-secret-key: <your-secret-key>"
+```
+
+### Response
+
+Returns an array of `Person` objects:
+
+```json
+[
+  {
+    "personId": "person_...",
+    "distinctId": "u_8f3c2a1b-9d4e-4f6a-b7c8-0d1e2f3a4b5c",
+    "email": "ada@example.com",
+    "name": "Ada Lovelace"
+  },
+  {
+    "personId": "person_...",
+    "distinctId": "vh:anon:1c9d0e2f-3a4b-5c6d-7e8f-9a0b1c2d3e4f",
+    "email": null,
+    "name": null
+  }
+]
+```
+
+Persons that have never been identified show their anonymous `vh:anon:` distinct id and `null`
+profile fields.
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | The credential has no access to the project. |
+| `500` | `Api/PersonServiceError` | Persons could not be loaded. |
+
+## Get a Person by Id
+
+`GET /api/v1/persons/:personId`
+
+Fetches a single person by their canonical `personId`. If the person was merged into another, the
+surviving canonical profile is returned.
+
+```bash
+curl https://api.voidhash.com/api/v1/persons/person_... \
+  -H "x-secret-key: <your-secret-key>"
+```
+
+### Response
+
+Returns the `Person`.
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | The credential has no access to the project. |
+| `404` | `Api/PersonNotFoundError` | No person with that id. The body carries the id as `id`. |
+| `500` | `Api/PersonServiceError` | The person could not be loaded. |
+
+## Get a Person by Distinct Id
+
+`GET /api/v1/persons/by-distinct-id/:distinctId`
+
+Fetches a person by any of their distinct ids — the identified id you supplied or an anonymous
+`vh:anon:` id minted by the SDK. This is the lookup to use when all you have is your own user id.
+
+```bash
+curl https://api.voidhash.com/api/v1/persons/by-distinct-id/u_8f3c2a1b-9d4e-4f6a-b7c8-0d1e2f3a4b5c \
+  -H "x-secret-key: <your-secret-key>"
+```
+
+Remember to URL-encode the distinct id if it contains characters like `:` — anonymous ids do.
+
+### Response
+
+Returns the `Person`.
+
+### Errors
+
+| Status | `_tag` | When |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials. |
+| `403` | `Api/ActionForbiddenError` | The credential has no access to the project. |
+| `404` | `Api/PersonNotFoundError` | No person has that distinct id. |
+| `500` | `Api/PersonServiceError` | The person could not be loaded. |
+
+## Related
+
+- [Device SDK Endpoints](/docs/api/sdk) — the identify call that links anonymous ids to your user
+  ids, and the entitlement-rich `SdkPerson` shape.
+- [Identifying Users](/docs/react-native/identifying-users) — how to identify users from the
+  React Native SDK.
+- [Notifications](/docs/api/notifications) — target persons by `personIds` or `distinctIds`.
+- [Webhooks](/docs/api/webhooks) — subscribe to `person.created`, `person.updated`, and
+  `person.deleted` events.
+- [Authentication](/docs/api/authentication) — credential types and which endpoints accept them.
diff --git a/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.createSecretKey.mdx b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.createSecretKey.mdx
new file mode 100644
index 000000000..93d670608
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.createSecretKey.mdx
@@ -0,0 +1,27 @@
+---
+title: Create Secret Key
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/api-keys","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.deleteApiKey.mdx b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.deleteApiKey.mdx
new file mode 100644
index 000000000..8d85a0b26
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.deleteApiKey.mdx
@@ -0,0 +1,27 @@
+---
+title: Delete Api Key
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: DELETE
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/api-keys/{apiKeyId}","method":"delete"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.getApiKeyById.mdx b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.getApiKeyById.mdx
new file mode 100644
index 000000000..e874c5322
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.getApiKeyById.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Api Key By Id
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/api-keys/{apiKeyId}","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.listApiKeys.mdx b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.listApiKeys.mdx
new file mode 100644
index 000000000..6c3c41095
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.listApiKeys.mdx
@@ -0,0 +1,27 @@
+---
+title: List Api Keys
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/api-keys","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.rotateSecretKey.mdx b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.rotateSecretKey.mdx
new file mode 100644
index 000000000..d5a9630cf
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/api_keys/api_keys.rotateSecretKey.mdx
@@ -0,0 +1,27 @@
+---
+title: Rotate Secret Key
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/api-keys/{apiKeyId}/rotate","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/api_keys/meta.json b/apps/www/src/features/docs/content/docs/api/reference/api_keys/meta.json
new file mode 100644
index 000000000..d2ae488b8
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/api_keys/meta.json
@@ -0,0 +1,10 @@
+{
+  "title": "Api_keys",
+  "pages": [
+    "api_keys.listApiKeys",
+    "api_keys.createSecretKey",
+    "api_keys.getApiKeyById",
+    "api_keys.deleteApiKey",
+    "api_keys.rotateSecretKey"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/auth/auth.session.mdx b/apps/www/src/features/docs/content/docs/api/reference/auth/auth.session.mdx
new file mode 100644
index 000000000..54737b24a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/auth/auth.session.mdx
@@ -0,0 +1,27 @@
+---
+title: Session
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/auth/session","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/auth/meta.json b/apps/www/src/features/docs/content/docs/api/reference/auth/meta.json
new file mode 100644
index 000000000..146a043c8
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/auth/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Auth",
+  "pages": [
+    "auth.session"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/meta.json b/apps/www/src/features/docs/content/docs/api/reference/meta.json
new file mode 100644
index 000000000..22dbd6eb8
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/meta.json
@@ -0,0 +1,20 @@
+{
+  "pages": [
+    "auth",
+    "api_keys",
+    "persons",
+    "organizations",
+    "perks",
+    "paywall_deploys",
+    "paywall_locations",
+    "schema",
+    "projects",
+    "products",
+    "product_perks",
+    "sdk",
+    "users",
+    "payment_provider_configurations",
+    "payment_provider_products",
+    "webhooks"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/organizations/meta.json b/apps/www/src/features/docs/content/docs/api/reference/organizations/meta.json
new file mode 100644
index 000000000..f580bd469
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/organizations/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Organizations",
+  "pages": [
+    "organizations.createOrganization"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/organizations/organizations.createOrganization.mdx b/apps/www/src/features/docs/content/docs/api/reference/organizations/organizations.createOrganization.mdx
new file mode 100644
index 000000000..1c6181aa7
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/organizations/organizations.createOrganization.mdx
@@ -0,0 +1,27 @@
+---
+title: Create Organization
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/organizations","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/meta.json b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/meta.json
new file mode 100644
index 000000000..2db6a150e
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Payment_provider_configurations",
+  "pages": [
+    "payment_provider_configurations.listPaymentProviderConfigurations"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/payment_provider_configurations.listPaymentProviderConfigurations.mdx b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/payment_provider_configurations.listPaymentProviderConfigurations.mdx
new file mode 100644
index 000000000..d9901938e
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_configurations/payment_provider_configurations.listPaymentProviderConfigurations.mdx
@@ -0,0 +1,27 @@
+---
+title: List Payment Provider Configurations
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/payment-provider-configurations","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/meta.json b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/meta.json
new file mode 100644
index 000000000..a5d93374d
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Payment_provider_products",
+  "pages": [
+    "payment_provider_products.listPaymentProviderProducts"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/payment_provider_products.listPaymentProviderProducts.mdx b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/payment_provider_products.listPaymentProviderProducts.mdx
new file mode 100644
index 000000000..154243191
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/payment_provider_products/payment_provider_products.listPaymentProviderProducts.mdx
@@ -0,0 +1,27 @@
+---
+title: List Payment Provider Products
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/payment-provider-products","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/meta.json b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/meta.json
new file mode 100644
index 000000000..c05b5eac1
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/meta.json
@@ -0,0 +1,8 @@
+{
+  "title": "Paywall_deploys",
+  "pages": [
+    "paywall_deploys.createDeploy",
+    "paywall_deploys.uploadBlob",
+    "paywall_deploys.finalizeDeploy"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.createDeploy.mdx b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.createDeploy.mdx
new file mode 100644
index 000000000..7f5c06693
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.createDeploy.mdx
@@ -0,0 +1,27 @@
+---
+title: Create Deploy
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/paywall-deploys","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.finalizeDeploy.mdx b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.finalizeDeploy.mdx
new file mode 100644
index 000000000..b5617c2ff
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.finalizeDeploy.mdx
@@ -0,0 +1,27 @@
+---
+title: Finalize Deploy
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/paywall-deploys/{deployId}/finalize","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.uploadBlob.mdx b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.uploadBlob.mdx
new file mode 100644
index 000000000..1f1b6c4df
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/paywall_deploys/paywall_deploys.uploadBlob.mdx
@@ -0,0 +1,27 @@
+---
+title: Upload Blob
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: PUT
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/paywall-deploys/{deployId}/blobs/{sha256}","method":"put"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/paywall_locations/meta.json b/apps/www/src/features/docs/content/docs/api/reference/paywall_locations/meta.json
new file mode 100644
index 000000000..5d456b6dd
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/paywall_locations/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Paywall_locations",
+  "pages": [
+    "paywall_locations.listPaywallLocations"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/paywall_locations/paywall_locations.listPaywallLocations.mdx b/apps/www/src/features/docs/content/docs/api/reference/paywall_locations/paywall_locations.listPaywallLocations.mdx
new file mode 100644
index 000000000..d813e2716
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/paywall_locations/paywall_locations.listPaywallLocations.mdx
@@ -0,0 +1,27 @@
+---
+title: List Paywall Locations
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/paywall-locations","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/perks/meta.json b/apps/www/src/features/docs/content/docs/api/reference/perks/meta.json
new file mode 100644
index 000000000..6c179672d
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/perks/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Perks",
+  "pages": [
+    "perks.listPerks"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/perks/perks.listPerks.mdx b/apps/www/src/features/docs/content/docs/api/reference/perks/perks.listPerks.mdx
new file mode 100644
index 000000000..cd823585b
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/perks/perks.listPerks.mdx
@@ -0,0 +1,27 @@
+---
+title: List Perks
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/perks","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/persons/meta.json b/apps/www/src/features/docs/content/docs/api/reference/persons/meta.json
new file mode 100644
index 000000000..7bf5f22b2
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/persons/meta.json
@@ -0,0 +1,9 @@
+{
+  "title": "Persons",
+  "pages": [
+    "persons.listPersons",
+    "persons.createPerson",
+    "persons.getPersonById",
+    "persons.getPersonByDistinctId"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/persons/persons.createPerson.mdx b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.createPerson.mdx
new file mode 100644
index 000000000..7b8bd4cd7
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.createPerson.mdx
@@ -0,0 +1,27 @@
+---
+title: Create Person
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/persons","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonByDistinctId.mdx b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonByDistinctId.mdx
new file mode 100644
index 000000000..8a98fa729
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonByDistinctId.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Person By Distinct Id
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/persons/by-distinct-id/{distinctId}","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonById.mdx b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonById.mdx
new file mode 100644
index 000000000..b46ef4292
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.getPersonById.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Person By Id
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/persons/{personId}","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/persons/persons.listPersons.mdx b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.listPersons.mdx
new file mode 100644
index 000000000..2d5768d23
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/persons/persons.listPersons.mdx
@@ -0,0 +1,27 @@
+---
+title: List Persons
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/persons","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/product_perks/meta.json b/apps/www/src/features/docs/content/docs/api/reference/product_perks/meta.json
new file mode 100644
index 000000000..c50b8f349
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/product_perks/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Product_perks",
+  "pages": [
+    "product_perks.listProductPerksByProductId"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/product_perks/product_perks.listProductPerksByProductId.mdx b/apps/www/src/features/docs/content/docs/api/reference/product_perks/product_perks.listProductPerksByProductId.mdx
new file mode 100644
index 000000000..81444a612
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/product_perks/product_perks.listProductPerksByProductId.mdx
@@ -0,0 +1,27 @@
+---
+title: List Product Perks By Product Id
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/product-perks/by-product-id/{productId}","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/products/meta.json b/apps/www/src/features/docs/content/docs/api/reference/products/meta.json
new file mode 100644
index 000000000..eca6aa33e
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/products/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Products",
+  "pages": [
+    "products.listProducts"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/products/products.listProducts.mdx b/apps/www/src/features/docs/content/docs/api/reference/products/products.listProducts.mdx
new file mode 100644
index 000000000..93e93dc49
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/products/products.listProducts.mdx
@@ -0,0 +1,27 @@
+---
+title: List Products
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/products","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/projects/meta.json b/apps/www/src/features/docs/content/docs/api/reference/projects/meta.json
new file mode 100644
index 000000000..45d8dd2fe
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/projects/meta.json
@@ -0,0 +1,7 @@
+{
+  "title": "Projects",
+  "pages": [
+    "projects.createProject",
+    "projects.listProjects"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/projects/projects.createProject.mdx b/apps/www/src/features/docs/content/docs/api/reference/projects/projects.createProject.mdx
new file mode 100644
index 000000000..9334928b7
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/projects/projects.createProject.mdx
@@ -0,0 +1,27 @@
+---
+title: Create Project
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/projects","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/projects/projects.listProjects.mdx b/apps/www/src/features/docs/content/docs/api/reference/projects/projects.listProjects.mdx
new file mode 100644
index 000000000..f8a64ff26
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/projects/projects.listProjects.mdx
@@ -0,0 +1,27 @@
+---
+title: List Projects
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/projects/{organizationId}","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/schema/meta.json b/apps/www/src/features/docs/content/docs/api/reference/schema/meta.json
new file mode 100644
index 000000000..5bc7fe53d
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/schema/meta.json
@@ -0,0 +1,7 @@
+{
+  "title": "Schema",
+  "pages": [
+    "schema.getSchema",
+    "schema.getSchemaVersion"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchema.mdx b/apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchema.mdx
new file mode 100644
index 000000000..53b046fc5
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchema.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Schema
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/schema","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchemaVersion.mdx b/apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchemaVersion.mdx
new file mode 100644
index 000000000..a8c6ddbcb
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/schema/schema.getSchemaVersion.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Schema Version
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/schema/version","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/meta.json b/apps/www/src/features/docs/content/docs/api/reference/sdk/meta.json
new file mode 100644
index 000000000..235432cbe
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/meta.json
@@ -0,0 +1,12 @@
+{
+  "title": "Sdk",
+  "pages": [
+    "sdk.getPerson",
+    "sdk.identifyPerson",
+    "sdk.syncPersonAttributes",
+    "sdk.syncTransaction",
+    "sdk.evaluateFeatureFlags",
+    "sdk.resolvePaywall",
+    "sdk.getSchema"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.evaluateFeatureFlags.mdx b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.evaluateFeatureFlags.mdx
new file mode 100644
index 000000000..f1b54c87a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.evaluateFeatureFlags.mdx
@@ -0,0 +1,27 @@
+---
+title: Evaluate Feature Flags
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/sdk/evaluate-flags","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getPerson.mdx b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getPerson.mdx
new file mode 100644
index 000000000..8b6d2e3a3
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getPerson.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Person
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/sdk/person","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getSchema.mdx b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getSchema.mdx
new file mode 100644
index 000000000..94cd8dcb0
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.getSchema.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Schema
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/sdk/schema","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.identifyPerson.mdx b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.identifyPerson.mdx
new file mode 100644
index 000000000..f4d011af6
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.identifyPerson.mdx
@@ -0,0 +1,27 @@
+---
+title: Identify Person
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/sdk/identify","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.resolvePaywall.mdx b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.resolvePaywall.mdx
new file mode 100644
index 000000000..cbd264c7d
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.resolvePaywall.mdx
@@ -0,0 +1,27 @@
+---
+title: Resolve Paywall
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/sdk/resolve-paywall","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncPersonAttributes.mdx b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncPersonAttributes.mdx
new file mode 100644
index 000000000..b338c8595
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncPersonAttributes.mdx
@@ -0,0 +1,27 @@
+---
+title: Sync Person Attributes
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/sdk/person/traits","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncTransaction.mdx b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncTransaction.mdx
new file mode 100644
index 000000000..ec5ae8639
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/sdk/sdk.syncTransaction.mdx
@@ -0,0 +1,27 @@
+---
+title: Sync Transaction
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/sdk/sync-transaction","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/users/meta.json b/apps/www/src/features/docs/content/docs/api/reference/users/meta.json
new file mode 100644
index 000000000..96de0c966
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/users/meta.json
@@ -0,0 +1,6 @@
+{
+  "title": "Users",
+  "pages": [
+    "users.getUser"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/users/users.getUser.mdx b/apps/www/src/features/docs/content/docs/api/reference/users/users.getUser.mdx
new file mode 100644
index 000000000..b8782edaa
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/users/users.getUser.mdx
@@ -0,0 +1,27 @@
+---
+title: Get User
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/users/current","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/meta.json b/apps/www/src/features/docs/content/docs/api/reference/webhooks/meta.json
new file mode 100644
index 000000000..a3644cc06
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/meta.json
@@ -0,0 +1,15 @@
+{
+  "title": "Webhooks",
+  "pages": [
+    "webhooks.listWebhookEndpoints",
+    "webhooks.createWebhookEndpoint",
+    "webhooks.getWebhookEndpoint",
+    "webhooks.updateWebhookEndpoint",
+    "webhooks.deleteWebhookEndpoint",
+    "webhooks.rotateWebhookSecret",
+    "webhooks.testWebhookEndpoint",
+    "webhooks.listWebhookDeliveries",
+    "webhooks.getWebhookDelivery",
+    "webhooks.retryWebhookDelivery"
+  ]
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.createWebhookEndpoint.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.createWebhookEndpoint.mdx
new file mode 100644
index 000000000..6f12442bb
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.createWebhookEndpoint.mdx
@@ -0,0 +1,27 @@
+---
+title: Create Webhook Endpoint
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/endpoints","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.deleteWebhookEndpoint.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.deleteWebhookEndpoint.mdx
new file mode 100644
index 000000000..ab0ad700b
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.deleteWebhookEndpoint.mdx
@@ -0,0 +1,27 @@
+---
+title: Delete Webhook Endpoint
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: DELETE
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/endpoints/{endpointId}","method":"delete"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookDelivery.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookDelivery.mdx
new file mode 100644
index 000000000..722004562
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookDelivery.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Webhook Delivery
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/deliveries/{deliveryId}","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookEndpoint.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookEndpoint.mdx
new file mode 100644
index 000000000..daa88176b
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.getWebhookEndpoint.mdx
@@ -0,0 +1,27 @@
+---
+title: Get Webhook Endpoint
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/endpoints/{endpointId}","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookDeliveries.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookDeliveries.mdx
new file mode 100644
index 000000000..f92f85bdb
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookDeliveries.mdx
@@ -0,0 +1,27 @@
+---
+title: List Webhook Deliveries
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/deliveries","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookEndpoints.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookEndpoints.mdx
new file mode 100644
index 000000000..fb01866ff
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.listWebhookEndpoints.mdx
@@ -0,0 +1,27 @@
+---
+title: List Webhook Endpoints
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: GET
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/endpoints","method":"get"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.retryWebhookDelivery.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.retryWebhookDelivery.mdx
new file mode 100644
index 000000000..21e1839cd
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.retryWebhookDelivery.mdx
@@ -0,0 +1,27 @@
+---
+title: Retry Webhook Delivery
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/deliveries/{deliveryId}/retry","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.rotateWebhookSecret.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.rotateWebhookSecret.mdx
new file mode 100644
index 000000000..ef9b1f219
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.rotateWebhookSecret.mdx
@@ -0,0 +1,27 @@
+---
+title: Rotate Webhook Secret
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/endpoints/{endpointId}/rotate-secret","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.testWebhookEndpoint.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.testWebhookEndpoint.mdx
new file mode 100644
index 000000000..2e2dca88b
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.testWebhookEndpoint.mdx
@@ -0,0 +1,27 @@
+---
+title: Test Webhook Endpoint
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: POST
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/endpoints/{endpointId}/test","method":"post"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.updateWebhookEndpoint.mdx b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.updateWebhookEndpoint.mdx
new file mode 100644
index 000000000..9e351a53d
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/reference/webhooks/webhooks.updateWebhookEndpoint.mdx
@@ -0,0 +1,27 @@
+---
+title: Update Webhook Endpoint
+full: true
+_openapi:
+  preload:
+    - voidhash-v1
+  method: PATCH
+  webhook: false
+  toc: []
+  structuredData:
+    headings: []
+    contents: []
+---
+
+{/* This file was generated by Fumadocs. Do not edit this file directly. Any changes should be made by running the generation command again. */}
+
+export default function Layout(props) {
+  const { APIPage, OpenAPIPage } = props.components ?? {};
+  // "APIPage" is the old name from v10, this allows both for backward compatibility
+  const Comp = OpenAPIPage ?? APIPage;
+  return (
+    <>
+      {props.children}
+      <Comp document="voidhash-v1" operations={[{"path":"/api/v1/webhooks/endpoints/{endpointId}","method":"patch"}]} />
+    </>
+  );
+}
\ No newline at end of file
diff --git a/apps/www/src/features/docs/content/docs/api/schema.mdx b/apps/www/src/features/docs/content/docs/api/schema.mdx
new file mode 100644
index 000000000..034db0139
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/schema.mdx
@@ -0,0 +1,141 @@
+---
+title: Project Schema
+description: Read the consolidated project schema and use its content-hashed version as a cheap change probe.
+---
+
+The schema endpoints expose a consolidated, read-only projection of your project's catalog configuration: enabled payment providers, paywall locations, perks, and products with their per-provider mappings. It is the single surface that type generation and the device SDKs are built on — instead of stitching together the individual [catalog endpoints](/docs/api/catalog), clients fetch one document and get a content hash (`version`) that changes if and only if any of it changes.
+
+Both endpoints authenticate with any project-scoped credential (`x-api-key` or `x-secret-key`) — see [Authentication](/docs/api/authentication).
+
+## Get the schema
+
+```bash
+curl https://api.voidhash.com/api/v1/schema \
+  -H "x-secret-key: vh_sk_..."
+```
+
+`GET /api/v1/schema` returns a `ProjectSchemaResponse`:
+
+```json
+{
+  "enabledProviders": ["appleAppStore", "googlePlay"],
+  "locations": [
+    {
+      "name": "Onboarding",
+      "slug": "onboarding",
+      "description": "Shown at the end of the welcome flow"
+    }
+  ],
+  "perks": [{ "name": "All Access", "slug": "all-access" }],
+  "products": [
+    {
+      "name": "Pro Monthly",
+      "slug": "pro-monthly",
+      "type": "subscription",
+      "perks": ["all-access"],
+      "providers": [
+        {
+          "providerId": "appleAppStore",
+          "configuration": { "productId": "com.yourcompany.yourapp.pro.monthly" }
+        },
+        {
+          "providerId": "googlePlay",
+          "configuration": { "productId": "pro_monthly", "basePlanId": "monthly" }
+        }
+      ]
+    }
+  ],
+  "version": "sha256:9f2a41c07d3e8b16..."
+}
+```
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `enabledProviders` | `("appleAppStore" \| "googlePlay")[]` | Payment providers with an enabled configuration in this project |
+| `locations` | `{ name, slug, description \| null }[]` | Paywall locations |
+| `perks` | `{ name, slug }[]` | Perks |
+| `products` | `SchemaProduct[]` | Products with their perk and provider mappings (see below) |
+| `version` | `string` | `sha256:<hex>` content hash of the normalized schema |
+
+Each product in `products`:
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `name` | `string` | Human-readable product name |
+| `slug` | `string` | Unique product identifier within the project |
+| `type` | `"subscription" \| "one-time" \| "one-time-consumable"` | Product type |
+| `perks` | `string[]` | Perk **slugs** (not IDs) granted by this product, sorted ascending |
+| `providers` | `{ providerId, configuration }[]` | Per-provider store mappings, sorted by `providerId` |
+
+The `configuration` blob on each provider entry is a free-form `Record<string, unknown>` — opaque to the schema itself. The CLI round-trips it as-is, and the SDK reads provider-specific keys (`productId`, `basePlanId`, …) out of it at the native store boundary. The sorted `perks` and `providers` arrays are part of the deterministic normalization that feeds the `version` hash, so identical configuration always produces an identical hash.
+
+## Get the schema version
+
+```bash
+curl https://api.voidhash.com/api/v1/schema/version \
+  -H "x-secret-key: vh_sk_..."
+```
+
+```json
+{ "version": "sha256:9f2a41c07d3e8b16..." }
+```
+
+`GET /api/v1/schema/version` returns only the hash — the same value the full schema response carries. It is the cheap change probe: poll it, and re-fetch the full schema only when the hash differs from the one you last saw.
+
+## The version hash as ETag
+
+The `version` doubles as the HTTP `ETag` on both endpoints. Responses carry:
+
+```
+etag: "sha256:9f2a41c07d3e8b16..."
+cache-control: no-cache, must-revalidate
+```
+
+Send the hash back in `If-None-Match` and the server answers `304 Not Modified` (empty body) when the schema is unchanged:
+
+```bash
+curl -i https://api.voidhash.com/api/v1/schema \
+  -H "x-secret-key: vh_sk_..." \
+  -H 'If-None-Match: "sha256:9f2a41c07d3e8b16..."'
+```
+
+<Callout type="info" title="One hash, three surfaces">
+  The same `sha256:<hex>` value appears in `GET /api/v1/schema`, `GET /api/v1/schema/version`, and
+  the SDK-facing `GET /api/v1/sdk/schema` — and it is embedded in the generated
+  `voidhash.gen.d.ts`. Comparing hashes is how every consumer detects drift, regardless of which
+  projection it reads.
+</Callout>
+
+## How the CLI uses it
+
+[`voidhash-cli types generate`](/docs/cli/types) fetches `GET /api/v1/schema` and emits your `voidhash.gen.d.ts` declaration file with the schema `version` embedded in a `@voidhash:version` header:
+
+```package-install
+npx voidhash-cli types generate
+```
+
+With `--watch`, the CLI polls `GET /api/v1/schema/version` (default every 5000 ms, configurable via `--poll-interval-ms`) and regenerates the declaration file whenever the hash changes — so types stay in sync while you edit products, perks, or locations in the dashboard:
+
+```package-install
+npx voidhash-cli types generate --watch --poll-interval-ms 2000
+```
+
+`voidhash-cli types check` is the CI gate built on the same hash: it compares the `@voidhash:version` header in your committed declaration file against the server's current version and fails with a non-zero exit when they differ, so a stale committed file can't pass PR CI:
+
+```package-install
+npx voidhash-cli types check
+```
+
+## How the React Native SDK uses it
+
+The [React Native SDK](/docs/react-native/schema-and-types) consumes the same schema through `GET /api/v1/sdk/schema` — a runtime-oriented projection of the same data, keyed by slug (`Record<slug, ...>` instead of arrays, and without `enabledProviders`) so the SDK can look products, perks, and locations up by slug at runtime. It carries the identical `version` hash.
+
+The SDK fetches it when the provider mounts and caches it per app version with a stale-while-revalidate policy: a warm cache is served immediately and refreshed in the background, while a cold cache forces a synchronous fetch. See the [SDK API reference](/docs/api/sdk) for the endpoint details.
+
+## Errors
+
+| Status | Error | Meaning |
+| --- | --- | --- |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials |
+| `403` | `Api/ActionForbiddenError` | Credential is not authorized for this project |
+| `500` | `Api/SchemaServiceError` | Internal failure while computing the schema |
diff --git a/apps/www/src/features/docs/content/docs/api/sdk.mdx b/apps/www/src/features/docs/content/docs/api/sdk.mdx
new file mode 100644
index 000000000..62d6b71c6
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/sdk.mdx
@@ -0,0 +1,402 @@
+---
+title: Device SDK Endpoints
+description: The /api/v1/sdk surface the React Native SDK talks to — required headers, endpoints, and response shapes.
+---
+
+Everything under `/api/v1/sdk` is the device-facing API: the endpoints the [React Native SDK](/docs/react-native/overview) calls to identify persons, sync purchases, evaluate feature flags, resolve paywalls, and manage push tokens. You normally never call these yourself — the SDK does. They are documented here for transparency, and for anyone building a custom client on another platform.
+
+All endpoints authenticate with a **publishable key** plus a **distinct ID**, so the session is always scoped to a single person in a single project. See [Authentication](/docs/api/authentication) for the credential model and [API Overview](/docs/api/overview) for base URLs and error conventions.
+
+## Required headers
+
+Every SDK endpoint requires the same header set. Two headers carry authentication:
+
+| Header | Value |
+| --- | --- |
+| `x-publishable-key` | Your project's publishable key (`vh_pk_...`) |
+| `x-distinct-id` | The distinct ID of the person making the request |
+
+The rest is client telemetry the server uses for storefront resolution, diagnostics, and analytics. These are **required** on every request:
+
+| Header | Value |
+| --- | --- |
+| `x-client-bundle-id` | The app's bundle identifier, e.g. `com.yourcompany.yourapp` |
+| `x-is-backgrounded` | Must be `"false"` — the contract only accepts requests from foregrounded apps |
+| `x-is-debug-build` | `"true"` or `"false"` |
+| `x-observer-mode` | `"true"` or `"false"` — whether the client runs in read-only observer mode |
+| `x-platform` | Platform name, e.g. `ios` or `android` |
+| `x-platform-flavor` | `"native"` or `"browser"` |
+| `x-sdk` | `"react-native"` or `"web"` |
+| `x-sdk-version` | The SDK version string |
+
+And these are optional:
+
+| Header | Value |
+| --- | --- |
+| `x-client-locale` | Current locale of the app |
+| `x-client-version` | App version |
+| `x-nonce` | Client-generated request nonce |
+| `x-platform-brand` | Device brand |
+| `x-platform-device` | Device model |
+| `x-platform-flavor-version` | Version of the platform flavor |
+| `x-platform-version` | OS version |
+| `x-preferred-locales` | The user's preferred locales |
+| `x-storefront` | Store storefront identifier |
+
+A minimal request looks like this:
+
+```bash
+curl https://api.voidhash.com/api/v1/sdk/person \
+  -H "x-publishable-key: vh_pk_..." \
+  -H "x-distinct-id: vh:anon:1f2e3d..." \
+  -H "x-client-bundle-id: com.yourcompany.yourapp" \
+  -H "x-is-backgrounded: false" \
+  -H "x-is-debug-build: false" \
+  -H "x-observer-mode: false" \
+  -H "x-platform: ios" \
+  -H "x-platform-flavor: native" \
+  -H "x-sdk: react-native" \
+  -H "x-sdk-version: 0.0.1"
+```
+
+Missing or malformed required headers fail request decoding before the endpoint runs. On top of the common error conventions, most SDK endpoints can return `Api/SdkServiceError` (500), `Api/SdkValidationError` (400), and `Api/SdkPersonNotFoundError` (404); endpoint-specific errors are listed below.
+
+## Endpoint summary
+
+| Endpoint | Method + Path | Returns |
+| --- | --- | --- |
+| Get person | `GET /api/v1/sdk/person` | `SdkPerson` |
+| Identify person | `POST /api/v1/sdk/identify` | `SdkPerson` |
+| Sync person attributes | `POST /api/v1/sdk/person/traits` | `SdkPerson` |
+| Sync transaction | `POST /api/v1/sdk/sync-transaction` | `{ accepted: boolean }` |
+| Evaluate feature flags | `POST /api/v1/sdk/evaluate-flags` | `{ flags: [...] }` |
+| Resolve paywall | `POST /api/v1/sdk/resolve-paywall` | `SdkResolvedPaywall \| null` |
+| Get schema | `GET /api/v1/sdk/schema` | `SdkSchema` |
+| Register push device | `POST /api/v1/sdk/push-devices/register` | `{ pushDeviceTokenId }` |
+| Refresh push device | `POST /api/v1/sdk/push-devices/refresh` | (empty) |
+| Unregister push device | `POST /api/v1/sdk/push-devices/unregister` | (empty) |
+
+## Get person
+
+```
+GET /api/v1/sdk/person
+```
+
+Returns the [`SdkPerson`](#the-sdkperson-shape) snapshot for the person identified by `x-distinct-id`: profile fields, entitlement grants, current subscription plus history, and purchase history. This is what powers `useCurrentPerson()` and [subscription status](/docs/react-native/subscription-status) in the React Native SDK.
+
+Returns `404 Api/SdkPersonNotFoundError` when no person exists for the distinct ID.
+
+## Identify person
+
+```
+POST /api/v1/sdk/identify
+```
+
+Links the anonymous person behind `x-distinct-id` to your own user ID. The `distinctId` in the body is the **new** identity (typically your backend's user ID); the anonymous person's data is migrated onto it. See [Identifying Users](/docs/react-native/identifying-users) for the client-side semantics.
+
+```json
+{
+  "distinctId": "user_42",
+  "email": "jane@example.com",
+  "name": "Jane Doe",
+  "traits": { "plan_intent": "annual" }
+}
+```
+
+`email`, `name`, and `traits` are optional. Trait values are `string | number | boolean | null`. Returns the merged `SdkPerson`.
+
+| Status | Error | Meaning |
+| --- | --- | --- |
+| `409` | `Api/SdkPersonAlreadyIdentifiedError` | The person was already identified with a different ID. The body carries the conflicting `distinctId`. |
+| `404` | `Api/SdkPersonNotFoundError` | No person for the calling distinct ID |
+| `400` | `Api/SdkValidationError` | Invalid payload |
+
+<Callout type="info" title="Identify migrations are visible in the snapshot">
+  While an identify migration is in flight, the returned `SdkPerson` has
+  `snapshotContext.mode: "temporary_pending_transfer"` and `snapshotContext.includedPersonIds`
+  lists every person merged into the snapshot. Once the migration completes, `mode` returns to
+  `"persisted"`.
+</Callout>
+
+## Sync person attributes
+
+```
+POST /api/v1/sdk/person/traits
+```
+
+Writes profile fields and custom traits for the current person and returns the updated `SdkPerson`. Two write semantics are available:
+
+```json
+{
+  "email": "jane@example.com",
+  "name": "Jane Doe",
+  "traits": { "favorite_color": "green" },
+  "setOnce": { "first_seen_screen": "onboarding" },
+  "clientEventId": "9c2f2a1e-..."
+}
+```
+
+- `traits` uses **`$set` semantics** — newest write wins per key.
+- `setOnce` uses **`$set_once` semantics** — the earliest write wins, and any `$set` for the same key beats it.
+- `clientEventId` is an optional stable client-supplied ID used as a deterministic last-write-wins tie-break, so a synchronous attribute write and its eventual asynchronous `$set` echo through the analytics pipeline dedupe idempotently.
+
+All fields are optional; trait values are `string | number | boolean | null`.
+
+## The `SdkPerson` shape
+
+Returned by `getPerson`, `identifyPerson`, and `syncPersonAttributes`. Dates are ISO 8601 strings on the wire.
+
+```ts
+type SdkPerson = {
+  personId: string;
+  distinctId: string;
+  email: string | null;
+  name: string | null;
+  entitlements: {
+    grants: Array<{
+      perkId: string;
+      status: "active" | "expired";
+      source: "subscription" | "purchase" | "manual";
+      sourceId: string | null;
+      sourcePersonId: string;
+      expiresAt: string | null;
+    }>;
+  };
+  subscriptions: {
+    current: {
+      status: "none" | "active" | "canceled" | "past_due" | "trialing";
+      productId: string | null;
+      subscriptionId: string | null;
+      expiresAt: string | null;
+    } | null;
+    history: Array<{
+      subscriptionId: string;
+      productId: string | null;
+      status: "active" | "canceled" | "expired" | "trialing" | "past_due";
+      isTrial: boolean;
+      startsAt: string;
+      expiresAt: string | null;
+      canceledAt: string | null;
+      sourcePersonId: string;
+    }>;
+  };
+  purchases: {
+    history: Array<{
+      purchaseId: string;
+      productId: string | null;
+      providerKey: string;
+      type: "one_time" | "subscription";
+      createdAt: string;
+      sourcePersonId: string;
+    }>;
+  };
+  snapshotContext: {
+    mode: "persisted" | "temporary_pending_transfer";
+    includedPersonIds: string[];
+    migrationJobId: string | null;
+  };
+};
+```
+
+The `sourcePersonId` fields tell you which underlying person a grant, subscription, or purchase belongs to — relevant when a snapshot temporarily merges multiple persons during an identify migration.
+
+## Sync transaction
+
+```
+POST /api/v1/sdk/sync-transaction
+```
+
+Reports a store transaction (StoreKit or Play Billing) to the server for verification. This is the endpoint behind the SDK's [purchase flow](/docs/react-native/purchases) — the client reports what it observed, and the server independently verifies with the store before granting anything.
+
+```json
+{
+  "platform": "ios",
+  "productSlug": "pro-monthly",
+  "transactionId": "2000000123456789",
+  "purchaseDate": 1752691200000,
+  "quantity": 1,
+  "appAccountToken": "6e8bf430-...",
+  "providerProductId": "com.yourcompany.yourapp.pro.monthly"
+}
+```
+
+| Field | Notes |
+| --- | --- |
+| `platform` | `"ios"` or `"android"` |
+| `productSlug` | The Voidhash product slug |
+| `transactionId` | The store's transaction identifier |
+| `purchaseDate` | Purchase timestamp (number) |
+| `quantity` | Purchase quantity |
+| `appAccountToken` | Optional. See the callout below |
+| `providerProductId` | Optional. The native store product identifier, kept separate from the Voidhash slug because they are not generally equal |
+| `purchaseToken` | Optional. Play Billing purchase token (Android) |
+| `receipt` | Optional receipt payload |
+
+Responds `{ "accepted": boolean }` — the sync is accepted for processing, not synchronously settled. The endpoint is idempotent, so clients can safely re-report the same transaction during reconciliation.
+
+<Callout type="info" title="appAccountToken is advisory only">
+  The SDK sets a deterministic UUID derived from the distinct ID as Apple's `appAccountToken` /
+  Google's `obfuscatedAccountId`, and echoes it here. The server treats it as observability data
+  only — it re-fetches and verifies the signed transaction (JWS) directly with the store, and never
+  trusts the client-supplied token for authorization.
+</Callout>
+
+## Evaluate feature flags
+
+```
+POST /api/v1/sdk/evaluate-flags
+```
+
+Evaluates [feature flags](/docs/react-native/feature-flags) for the current person. Pass `flagKeys` to evaluate a subset, or omit it to evaluate all flags:
+
+```json
+{ "flagKeys": ["new-onboarding", "paywall-experiment"] }
+```
+
+Response:
+
+```json
+{
+  "flags": [
+    { "key": "new-onboarding", "enabled": true, "variantKey": null, "payload": null },
+    { "key": "paywall-experiment", "enabled": true, "variantKey": "variant-b", "payload": { "discount": 20 } }
+  ]
+}
+```
+
+`variantKey` and `payload` are `null` for plain boolean flags.
+
+## Resolve paywall
+
+```
+POST /api/v1/sdk/resolve-paywall
+```
+
+Resolves which paywall (if any) the current person should see at a paywall location. This powers `usePaywallByLocation` and [displaying paywalls](/docs/react-native/displaying-paywalls).
+
+```json
+{ "locationSlug": "onboarding" }
+```
+
+Returns `null` when nothing is assigned and published at the location, otherwise:
+
+```ts
+type SdkResolvedPaywall = {
+  location: { id: string; name: string; slug: string };
+  showing: {
+    id: string;
+    type: "paywall_release" | "feature_flag";
+    paywall: { id: string; name: string; slug: string } | null;
+    paywallId: string | null;
+    paywallRelease: {
+      releaseId: string;
+      version: number;
+      htmlUrl: string;
+      publishedAt: string | null;
+      runtime: {
+        contentHash: string;
+        productSlugs: string[];
+        variables: Record<string, string | number | boolean>;
+      } | null;
+    } | null;
+    paywallReleaseId: string | null;
+    startedAt: string;
+  };
+};
+```
+
+The `runtime` block is the code-release runtime from the [paywall deploy contract](/docs/api/paywall-deploys): present for code-deployed releases and `null` for visual-editor releases. For code releases the device SDK caches the bundle by `contentHash` (the `htmlUrl` points at an immutable artifact), maps `productSlugs` through its native store metadata to build the paywall's product list, and passes `variables` through to the paywall unchanged.
+
+## Get schema
+
+```
+GET /api/v1/sdk/schema
+```
+
+Returns the runtime project schema the SDK fetches on `Provider` mount — your products, perks, and paywall locations as configured on the server. This is the record-keyed sibling of the CLI-facing [`GET /api/v1/schema`](/docs/api/schema): collections are keyed by slug (the SDK looks products up by slug at runtime) instead of being arrays, and `enabledProviders` is omitted.
+
+```ts
+type SdkSchema = {
+  locations: Record<string, { name: string; slug: string; description: string | null }>;
+  perks: Record<string, { name: string; slug: string }>;
+  products: Record<string, {
+    slug: string;
+    type: "subscription" | "one-time" | "one-time-consumable";
+    properties: { name: string };
+    configuration: {
+      perks: Record<string, true>;
+      providers: {
+        appleAppStore?: Record<string, unknown>;
+        googlePlay?: Record<string, unknown>;
+      };
+    };
+  }>;
+  version: string;
+};
+```
+
+`version` is the same `sha256:<hex>` content hash as `GET /api/v1/schema/version` — the SDK compares it against the hash baked into generated types to warn about drift (see [Schema & Types](/docs/react-native/schema-and-types)). Provider configuration blobs are opaque records; the SDK reads provider-specific keys (`productId`, `basePlanId`, …) out of them at the native store boundary.
+
+## Push device lifecycle
+
+Three endpoints manage push notification tokens for the current person. The server exchanges the raw platform credential for its own opaque ID (`push_tok_*`) and only ever hands that ID back — the raw FCM/APNs token is never echoed. Sending notifications to registered devices is a separate, server-side API: see [Notifications](/docs/api/notifications).
+
+### Register
+
+```
+POST /api/v1/sdk/push-devices/register
+```
+
+```json
+{
+  "platform": "ios",
+  "provider": "apns",
+  "platformToken": "a1b2c3...",
+  "bundleId": "com.yourcompany.yourapp",
+  "environment": "production",
+  "previousPushDeviceTokenId": "push_tok_..."
+}
+```
+
+| Field | Notes |
+| --- | --- |
+| `platform` | `"ios"` or `"android"` |
+| `provider` | `"fcm"` or `"apns"` — routing is provider-driven, not platform-driven |
+| `platformToken` | FCM registration token or raw APNs device-token hex (non-empty) |
+| `bundleId` | Required for `apns`/iOS |
+| `environment` | `"sandbox"` or `"production"`, APNs only |
+| `previousPushDeviceTokenId` | Optional hint that lets the server eagerly reap the old registration after a reinstall |
+
+Responds `{ "pushDeviceTokenId": "push_tok_..." }`.
+
+### Refresh
+
+```
+POST /api/v1/sdk/push-devices/refresh
+```
+
+Rotates the platform token under the **same** `pushDeviceTokenId` (same-install only):
+
+```json
+{ "pushDeviceTokenId": "push_tok_...", "platformToken": "d4e5f6..." }
+```
+
+Responds with an empty body on success.
+
+### Unregister
+
+```
+POST /api/v1/sdk/push-devices/unregister
+```
+
+```json
+{ "pushDeviceTokenId": "push_tok_..." }
+```
+
+Responds with an empty body on success.
+
+<Callout type="info" title="Uniform 404s — no existence oracle">
+  `refresh` and `unregister` return the same `404 Api/PushDeviceNotFoundError` whether the token ID
+  does not exist or exists but belongs to another person. A caller can never use these endpoints to
+  probe whether someone else's token ID is valid.
+</Callout>
diff --git a/apps/www/src/features/docs/content/docs/api/webhooks.mdx b/apps/www/src/features/docs/content/docs/api/webhooks.mdx
new file mode 100644
index 000000000..060e8b134
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/api/webhooks.mdx
@@ -0,0 +1,309 @@
+---
+title: Webhooks
+description: Subscribe to person, subscription, and purchase events with signed, automatically retried webhook deliveries.
+---
+
+Webhooks push events from Voidhash to your server as they happen — a person is created, a subscription renews, a purchase is refunded. You register one or more HTTPS endpoints per project, pick the events each endpoint cares about, and Voidhash POSTs a signed JSON payload to your URL with automatic retries on failure.
+
+All routes live under `/api/v1/webhooks` and accept any project-scoped credential — a project secret key (`x-secret-key`) or a user API key (`x-api-key`). See [Authentication](/docs/api/authentication).
+
+## Event types
+
+An endpoint only receives the events it subscribes to. The catalog:
+
+| Event | Fires when |
+| --- | --- |
+| `person.created` | A new person is created in the project |
+| `person.updated` | A person's profile or traits change |
+| `person.deleted` | A person is deleted |
+| `subscription.created` | A subscription starts |
+| `subscription.renewed` | A subscription renews for another period |
+| `subscription.cancelled` | A subscription is cancelled |
+| `subscription.expired` | A subscription expires |
+| `purchase.completed` | A one-time purchase completes |
+| `purchase.refunded` | A purchase is refunded |
+
+Subscriptions are validated on create and update — an unknown event type is rejected with `400 Api/WebhookValidationError`, and the list must contain at least one event. Test deliveries additionally use the reserved `test.ping` event type, which you cannot subscribe to.
+
+## The webhook endpoint object
+
+```json
+{
+  "id": "wh_ep_...",
+  "projectId": "...",
+  "name": "Production events",
+  "url": "https://example.com/voidhash/webhooks",
+  "secret": "whsec_...",
+  "events": ["subscription.created", "purchase.completed"],
+  "status": "active",
+  "description": null,
+  "consecutiveFailures": 0,
+  "lastSuccessAt": "2026-07-17T09:30:00.000Z",
+  "createdAt": "2026-07-01T12:00:00.000Z"
+}
+```
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `id` | `string` | Endpoint ID (`wh_ep_*`) |
+| `projectId` | `string` | Owning project |
+| `name` | `string` | Display name |
+| `url` | `string` | Destination URL (must be `http:` or `https:`) |
+| `secret` | `string` | Signing secret (`whsec_` + 64 hex chars) used for the delivery signature |
+| `events` | `string[]` | Subscribed event types |
+| `status` | `string` | `active`, `disabled`, or `failed` — only `active` endpoints receive deliveries |
+| `description` | `string \| null` | Optional free-form description |
+| `consecutiveFailures` | `number` | Failed attempts since the last successful delivery; reset to `0` on success |
+| `lastSuccessAt` | `string \| null` | Timestamp of the last successful delivery |
+| `createdAt` | `string \| null` | Creation timestamp |
+
+Setting `status` back to `active` via update also resets `consecutiveFailures` to `0`.
+
+## Manage endpoints
+
+### Create an endpoint
+
+```
+POST /api/v1/webhooks/endpoints
+```
+
+```bash
+curl https://api.voidhash.com/api/v1/webhooks/endpoints \
+  -X POST \
+  -H "x-secret-key: vh_sk_..." \
+  -H "Content-Type: application/json" \
+  -d '{
+    "name": "Production events",
+    "url": "https://example.com/voidhash/webhooks",
+    "events": ["subscription.created", "subscription.expired", "purchase.completed"],
+    "description": "Syncs entitlements into our CRM"
+  }'
+```
+
+| Field | Type | Required | Description |
+| --- | --- | --- | --- |
+| `name` | `string` | Yes | Display name |
+| `url` | `string` | Yes | Destination URL, `http:` or `https:` only |
+| `events` | `string[]` | Yes | Non-empty list of event types from the catalog above |
+| `description` | `string` | No | Free-form description |
+
+Returns the full endpoint object with a freshly generated `secret` and `status: "active"`.
+
+<Callout type="info" title="Store the secret when you create the endpoint">
+  The `secret` is what your server uses to verify delivery signatures. It is returned on every
+  read of the endpoint, but treat it like a credential — keep it in your server's secret store,
+  and rotate it if it ever leaks.
+</Callout>
+
+### List and fetch endpoints
+
+```
+GET /api/v1/webhooks/endpoints
+GET /api/v1/webhooks/endpoints/:endpointId
+```
+
+Listing returns every endpoint in the project. Fetching an unknown ID returns `404 Api/WebhookEndpointNotFoundError`.
+
+### Update an endpoint
+
+```
+PATCH /api/v1/webhooks/endpoints/:endpointId
+```
+
+All fields are optional; only the ones you send change:
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `name` | `string` | New display name |
+| `url` | `string` | New destination URL (validated) |
+| `events` | `string[]` | Replacement event list (validated, non-empty) |
+| `description` | `string \| null` | Set or clear the description |
+| `status` | `"active" \| "disabled"` | Pause or resume deliveries |
+
+```bash
+curl https://api.voidhash.com/api/v1/webhooks/endpoints/wh_ep_... \
+  -X PATCH \
+  -H "x-secret-key: vh_sk_..." \
+  -H "Content-Type: application/json" \
+  -d '{ "status": "disabled" }'
+```
+
+Disabled endpoints keep their configuration and delivery history but receive no new deliveries. Re-activating resets `consecutiveFailures`.
+
+### Delete an endpoint
+
+```
+DELETE /api/v1/webhooks/endpoints/:endpointId
+```
+
+Returns an empty success response.
+
+### Rotate the secret
+
+```
+POST /api/v1/webhooks/endpoints/:endpointId/rotate-secret
+```
+
+Generates a new `whsec_` secret and returns the updated endpoint. Deliveries signed after rotation use the new secret immediately, so update your server's copy before rotating in production.
+
+### Send a test delivery
+
+```
+POST /api/v1/webhooks/endpoints/:endpointId/test
+```
+
+Enqueues a real delivery with event type `test.ping` and returns the delivery object (initially `status: "pending"`). The body your server receives is:
+
+```json
+{
+  "message": "This is a test webhook delivery",
+  "timestamp": "2026-07-17T09:30:00.000Z"
+}
+```
+
+Test deliveries go through the exact same signing, retry, and attempt-recording pipeline as real events, so they are the fastest way to verify your signature handling end to end.
+
+## Receiving deliveries
+
+Voidhash POSTs the event payload as JSON to your endpoint URL. The event type and signature travel in headers — the body is the payload itself:
+
+| Header | Description |
+| --- | --- |
+| `Content-Type` | `application/json` |
+| `X-Webhook-Event` | The event type, e.g. `subscription.created` |
+| `X-Webhook-Timestamp` | Unix timestamp (seconds) when the delivery was signed |
+| `X-Webhook-Signature` | `v1=<hex>` — HMAC signature of the body, see below |
+
+Respond with any `2xx` status within **30 seconds** to acknowledge the delivery. Anything else — a non-2xx status, a timeout, or a connection error — counts as a failed attempt and schedules a retry. Do your heavy processing asynchronously and acknowledge fast.
+
+### Verifying the signature
+
+The signature is an HMAC-SHA256 over `` `${timestamp}.${body}` `` using the endpoint's `secret`, hex-encoded and prefixed with the scheme version `v1=`:
+
+```ts
+import { createHmac, timingSafeEqual } from "node:crypto";
+
+const verifyWebhook = (rawBody: string, headers: Headers, secret: string) => {
+  const timestamp = headers.get("x-webhook-timestamp");
+  const signature = headers.get("x-webhook-signature");
+  if (!timestamp || !signature) return false;
+
+  const expected = `v1=${createHmac("sha256", secret)
+    .update(`${timestamp}.${rawBody}`)
+    .digest("hex")}`;
+
+  return (
+    expected.length === signature.length &&
+    timingSafeEqual(Buffer.from(expected), Buffer.from(signature))
+  );
+};
+```
+
+<Callout type="warn" title="Sign the raw body">
+  Compute the HMAC over the raw request body exactly as received, before any JSON parsing or
+  re-serialization — a re-stringified body will not match the signature. Also check that the
+  timestamp is recent (e.g. within 5 minutes) to guard against replay.
+</Callout>
+
+## Delivery lifecycle
+
+Every event fan-out creates one delivery per subscribed active endpoint. A delivery moves through these statuses:
+
+| Status | Meaning |
+| --- | --- |
+| `pending` | Created, not yet attempted |
+| `in_progress` | An attempt is currently running |
+| `succeeded` | An attempt got a `2xx` response — terminal |
+| `failed` | The last attempt failed; a retry is scheduled at `nextAttemptAt` |
+| `exhausted` | All attempts failed and the retry schedule is depleted — terminal unless retried manually |
+
+Failed attempts retry on a fixed backoff schedule: **1 minute, 5 minutes, 30 minutes, 2 hours, 24 hours**. `attemptCount` tracks how many attempts have run, `maxAttempts` is `5`, and `nextAttemptAt` tells you when the next automatic retry fires (`null` once the delivery is terminal).
+
+### The delivery object
+
+```json
+{
+  "id": "wh_del_...",
+  "projectId": "...",
+  "webhookEndpointId": "wh_ep_...",
+  "eventType": "subscription.created",
+  "eventOccurredAt": "2026-07-17T09:30:00.000Z",
+  "payload": { ... },
+  "status": "failed",
+  "attemptCount": 2,
+  "maxAttempts": 5,
+  "nextAttemptAt": "2026-07-17T10:00:00.000Z",
+  "completedAt": null,
+  "createdAt": "2026-07-17T09:30:00.000Z"
+}
+```
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `id` | `string` | Delivery ID (`wh_del_*`) |
+| `webhookEndpointId` | `string` | Target endpoint |
+| `eventType` | `string` | Event type of this delivery |
+| `eventOccurredAt` | `string` | When the event happened |
+| `payload` | `unknown` | The exact JSON body sent to your endpoint |
+| `status` | `string` | Lifecycle status — see above |
+| `attemptCount` | `number` | Attempts made so far |
+| `maxAttempts` | `number` | Maximum automatic attempts (`5`) |
+| `nextAttemptAt` | `string \| null` | Scheduled time of the next automatic retry |
+| `completedAt` | `string \| null` | When the delivery reached a terminal state |
+| `createdAt` | `string \| null` | Creation timestamp |
+
+## Delivery history
+
+### List deliveries
+
+```
+GET /api/v1/webhooks/deliveries
+```
+
+Returns the project's deliveries across all endpoints.
+
+### Get a delivery with attempts
+
+```
+GET /api/v1/webhooks/deliveries/:deliveryId
+```
+
+Returns the delivery plus an `attempts` array — one record per HTTP attempt, which is your debugging window into what your server actually returned:
+
+| Field | Type | Description |
+| --- | --- | --- |
+| `id` | `string` | Attempt ID (`wh_att_*`) |
+| `attemptNumber` | `number` | 1-based attempt index |
+| `succeeded` | `boolean` | Whether the attempt got a `2xx` response |
+| `statusCode` | `number \| null` | HTTP status returned by your server (`null` on connection error or timeout) |
+| `durationMs` | `number \| null` | Round-trip duration |
+| `responseBody` | `string \| null` | Your server's response body, truncated to 2048 characters |
+| `errorMessage` | `string \| null` | Transport-level error when no response was received |
+| `createdAt` | `string \| null` | When the attempt ran |
+
+### Retry a delivery
+
+```
+POST /api/v1/webhooks/deliveries/:deliveryId/retry
+```
+
+Re-dispatches the delivery immediately with its original payload and returns it with `status: "in_progress"`. Only deliveries in `failed` or `exhausted` state can be retried — anything else returns `400 Api/WebhookValidationError` with the message "Can only retry failed or exhausted deliveries".
+
+```bash
+curl https://api.voidhash.com/api/v1/webhooks/deliveries/wh_del_.../retry \
+  -X POST \
+  -H "x-secret-key: vh_sk_..."
+```
+
+## Errors
+
+| Status | `_tag` | Meaning |
+| --- | --- | --- |
+| `400` | `Api/WebhookValidationError` | Invalid URL, unknown or empty event list, or retry of a non-retryable delivery |
+| `401` | `Api/NotAuthenticatedError` | Missing or invalid credentials |
+| `403` | `Api/ActionForbiddenError` | Credential lacks permission on the project |
+| `404` | `Api/WebhookEndpointNotFoundError` | No endpoint with that ID in the project |
+| `404` | `Api/WebhookDeliveryNotFoundError` | No delivery with that ID in the project |
+| `500` | `Api/WebhookServiceError` | Internal webhook infrastructure failure |
+
+See [API Overview](/docs/api/overview) for the general error shape and status mapping.
diff --git a/apps/www/src/features/docs/content/docs/basic-usage.mdx b/apps/www/src/features/docs/content/docs/basic-usage.mdx
index a3c541950..a43dc11ef 100644
--- a/apps/www/src/features/docs/content/docs/basic-usage.mdx
+++ b/apps/www/src/features/docs/content/docs/basic-usage.mdx
@@ -1,6 +1,7 @@
 ---
 title: Basic Usage
 description: Learn how to identify users, build paywalls, and handle purchases with Voidhash.
+icon: Play
 ---
 
 ## Setup
diff --git a/apps/www/src/features/docs/content/docs/cli/auth.mdx b/apps/www/src/features/docs/content/docs/cli/auth.mdx
new file mode 100644
index 000000000..498c9c50a
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/auth.mdx
@@ -0,0 +1,87 @@
+---
+title: auth
+description: Log in and out of the Voidhash CLI, check your session, and print MCP headers.
+---
+
+The `auth` command group manages the CLI's authentication. Logging in stores an API key in your
+CLI configuration, and every other command that talks to the Voidhash API (like `types generate`
+or `deploy`) uses that key. There are four subcommands: `login`, `logout`, `status`, and `token`.
+
+## auth login
+
+Starts a browser-based device login:
+
+```package-install
+npx voidhash-cli auth login
+```
+
+The flow works like this:
+
+1. The CLI starts a local callback server at `http://127.0.0.1:4004/callback` and generates an
+   8-character confirmation code.
+2. Your browser opens the Voidhash device authorization page with that code. The CLI also prints
+   the confirmation code and a fallback URL — if the browser doesn't open, copy and paste the URL
+   manually.
+3. Verify that the code shown in the browser matches the one printed in your terminal and approve
+   the login.
+4. The browser redirects back to the local callback server, which hands the CLI an API key. The
+   key is stored as `api_key` in `~/.voidhash`.
+
+If you cancel in the browser, the CLI prints `Login cancelled.` and nothing is stored. If you are
+already logged in, the CLI asks for confirmation and logs you out before starting a new login.
+
+<Callout type="info" title="Profiles">
+  When you run with `--profile <name>`, the API key is stored in that profile's overrides instead
+  of the base configuration, so you can keep separate logins per profile (for example a local
+  development environment). See [config](/docs/cli/config) for how profiles work.
+</Callout>
+
+## auth logout
+
+Clears the stored API key:
+
+```package-install
+npx voidhash-cli auth logout
+```
+
+If a session exists, the CLI asks for confirmation (`You are currently logged in as <name>...`)
+before clearing `api_key` from the configuration. If no session can be resolved, the confirmation
+is skipped and the stored key (if any) is cleared directly.
+
+## auth status
+
+Shows who you are logged in as:
+
+```package-install
+npx voidhash-cli auth status
+```
+
+Prints `Logged in as <name>` or `Not logged in`. If the session can't be fetched (for example the
+stored key was revoked), the CLI suggests running `voidhash-cli auth login` again.
+
+## auth token
+
+Prints authenticated request headers for the Voidhash [MCP server](/docs/mcp) as a single line of
+JSON:
+
+```package-install
+npx voidhash-cli auth token --project my-app
+```
+
+```json
+{"Authorization":"Bearer vh_...","X-Voidhash-Project":"my-app"}
+```
+
+This is designed as a headers helper for MCP clients like Claude Code: the client shells out to
+the CLI at connection time, so your API key never has to be pasted into an MCP configuration file.
+It fails with `You must be logged in. Run 'voidhash-cli auth login' first.` when no key is stored.
+
+The project is resolved in this order:
+
+1. The `--project` flag (project id or slug)
+2. The `CLAUDE_PLUGIN_OPTION_PROJECT` environment variable
+3. The `VOIDHASH_PROJECT` environment variable
+
+When none of these resolve, the `X-Voidhash-Project` header is omitted and only the
+`Authorization` header is printed. See the [MCP page](/docs/mcp) for how to wire this into your
+MCP client configuration.
diff --git a/apps/www/src/features/docs/content/docs/cli/config.mdx b/apps/www/src/features/docs/content/docs/cli/config.mdx
new file mode 100644
index 000000000..90d5e5d0d
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/config.mdx
@@ -0,0 +1,156 @@
+---
+title: config & profiles
+description: Inspect and change the CLI configuration, and use profiles to switch between environments.
+---
+
+The `config` command group manages the CLI's configuration file, a JSON file stored at
+`~/.voidhash`. It holds three keys:
+
+- `api_key` — the API key stored by [auth login](/docs/cli/auth). `null` when you are logged out.
+- `api_url` — the Voidhash API endpoint. Defaults to `https://api.voidhash.com`.
+- `web_url` — the Voidhash web app used for browser-based flows like device login. Defaults to
+  `https://voidhash.com`.
+
+You normally never need to touch `api_url` or `web_url` — the defaults point at the hosted
+Voidhash platform. They exist for self-hosted deployments and for pointing the CLI at a locally
+running backend during development.
+
+## config
+
+Running `config` with no subcommand prints the resolved configuration:
+
+```package-install
+npx voidhash-cli config
+```
+
+```
+Current configuration:
+api_key: (not set)
+api_url: https://api.voidhash.com
+web_url: https://voidhash.com
+
+Profiles: dev, staging
+```
+
+The output shows each key with its effective value — unset values are marked `(not set)` — and,
+when profiles exist, a list of the profile names defined in the file. If a profile is active via
+`--profile <name>`, an `Active profile: <name>` line is printed first and the values shown are the
+base configuration with that profile's overrides merged on top.
+
+## config set
+
+Sets a single configuration value:
+
+```package-install
+npx voidhash-cli config set api_url http://localhost:8787
+```
+
+`set` takes two positional arguments, `key` and `value`. Valid keys are the three configuration
+fields: `api_key`, `api_url`, and `web_url`. The write is schema-validated — anything else fails
+with `Failed to set configuration`.
+
+<Callout type="info" title="Prefer auth login for keys">
+  You can set `api_key` by hand, but the normal way to obtain and store one is the browser-based
+  [auth login](/docs/cli/auth) flow — it writes the key to the same place.
+</Callout>
+
+## config reset
+
+Restores the configuration to its defaults:
+
+```package-install
+npx voidhash-cli config reset
+```
+
+`reset` sets `api_url` and `web_url` back to their default values but **preserves your
+`api_key`** — resetting the configuration does not log you out. To clear the stored key, use
+[auth logout](/docs/cli/auth) instead.
+
+## Profiles
+
+Profiles let you keep several environments — production, staging, a local backend — in the same
+`~/.voidhash` file and switch between them per invocation. A profile is a *sparse* set of
+overrides: it only stores the keys you explicitly set for it, and every other key falls back to
+the shared base configuration.
+
+On disk, profiles live under a `profiles` map next to the base keys:
+
+```json title="~/.voidhash"
+{
+  "api_key": "vh_...",
+  "api_url": "https://api.voidhash.com",
+  "web_url": "https://voidhash.com",
+  "profiles": {
+    "dev": {
+      "api_url": "http://localhost:8787"
+    }
+  }
+}
+```
+
+Here the `dev` profile only overrides `api_url`; `api_key` and `web_url` still come from the base
+configuration when `dev` is active.
+
+### Selecting a profile
+
+Pass `--profile <name>` to any command. It is a shared flag, so it works both before and after the
+subcommand name:
+
+```package-install
+npx voidhash-cli deploy --profile dev
+```
+
+```package-install
+npx voidhash-cli --profile dev types generate
+```
+
+There is no short alias for `--profile` (`-p` belongs to `studio --port`). A profile does not need
+to be created first — it comes into existence the first time you write to it.
+
+### Writing to a profile
+
+When a profile is active, `config set` (and any other command that persists configuration, such as
+`auth login`) writes into that profile's overrides instead of the base configuration. The base
+values and all other profiles are left untouched.
+
+### Resetting a profile
+
+`config reset` with an active profile clears only that profile's overrides, reverting it to the
+base configuration:
+
+```package-install
+npx voidhash-cli config reset --profile dev
+```
+
+If the profile has its own `api_key` override, that key is preserved — same rule as a base reset:
+resetting never logs you out.
+
+### Example: a dev profile against a local backend
+
+A common setup is a `dev` profile that points the CLI at a locally running Voidhash backend while
+the base configuration keeps talking to production:
+
+```package-install
+npx voidhash-cli config set api_url http://localhost:8787 --profile dev
+```
+
+Verify what the profile resolves to:
+
+```package-install
+npx voidhash-cli config --profile dev
+```
+
+```
+Active profile: dev
+Current configuration:
+api_key: vh_...
+api_url: http://localhost:8787
+web_url: https://voidhash.com
+
+Profiles: dev
+```
+
+From here, run any command with `--profile dev` to target the local backend — for example
+`voidhash-cli deploy --profile dev` — and omit the flag to target production. When the local
+environment needs its own login, run `voidhash-cli auth login --profile dev` and the resulting key
+is stored only in the `dev` profile.
diff --git a/apps/www/src/features/docs/content/docs/cli/deploy.mdx b/apps/www/src/features/docs/content/docs/cli/deploy.mdx
new file mode 100644
index 000000000..3bb770772
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/deploy.mdx
@@ -0,0 +1,168 @@
+---
+title: deploy
+description: Build the paywalls and components in .voidhash and deploy them to Voidhash.
+---
+
+`voidhash-cli deploy` compiles everything in your project's `.voidhash` folder into deployable
+artifacts and ships them to Voidhash in one command:
+
+```package-install
+npx voidhash-cli deploy
+```
+
+The command requires a `voidhash.config.ts` (created by [init](/docs/cli/init)) — the deploy
+targets the `team` and `project` configured there. The upload step calls the Voidhash API, so you
+must be logged in via [auth login](/docs/cli/auth).
+
+## Flags
+
+- `--dry-run` — build the deploy payload without uploading it. The command stops after printing
+  the build report.
+- `--profile <name>` — shared flag; run the deploy against a named
+  [config profile](/docs/cli/config) (works before or after the subcommand:
+  `npx voidhash-cli deploy --profile dev`).
+- `--debug` / `-d` — shared flag; print full error traces on failure.
+
+## What the build does
+
+The build scans two directories under your project root:
+
+- `.voidhash/paywalls` — each source file (`.tsx`, `.jsx`, `.ts`, `.js`) default-exporting
+  `createPaywall({ … })` becomes one paywall.
+- `.voidhash/components` — each source file default-exporting `defineComponent({ … })` becomes
+  one reusable component.
+
+The file name is the id: `.voidhash/paywalls/onboarding.tsx` deploys as the paywall `onboarding`.
+Ids must match `^[a-z0-9][a-z0-9-]{0,63}$` and be unique; a component's `id` in
+`defineComponent` must match its file name.
+
+The pipeline then:
+
+1. **Typechecks** all discovered sources — a type error fails the deploy before anything is
+   bundled.
+2. **Compiles paywalls** — each paywall is bundled with its dependencies into a WebView-ready
+   `index.html` + minified `bundle.js`, plus any imported image/font assets. This is the exact
+   bundle the React Native SDK renders in a WebView at runtime.
+3. **Compiles components** — each component is compiled to a `manifest.json` (its props, actions,
+   and preview states), one rendered preview tree per declared preview state (a `default` state is
+   always emitted), a `runtime.js` bundle, and a `panel.js` bundle when the component declares a
+   custom editor panel.
+4. **Assembles the manifest** — every file is hashed with SHA-256 and recorded in a
+   content-addressed `schemaVersion: 2` deploy manifest. Each paywall and component gets a
+   `contentHash` derived from its artifact hashes — that hash is its deployable identity (storage
+   prefix, cache key, dedupe key).
+
+Build output lands in `.voidhash/.build` (the directory is cleaned on every build):
+
+```
+.voidhash/.build/
+├── manifest.json
+├── paywalls/
+│   └── onboarding/
+│       ├── index.html
+│       ├── bundle.js
+│       └── assets/hero-AB12CD.png
+└── components/
+    └── product-option/
+        ├── manifest.json
+        ├── previews/default.json
+        └── runtime.js
+```
+
+<Callout type="info" title="Modules resolve from your project">
+  `@voidhash/paywalls` and React are resolved from your project's `node_modules`, not from the
+  CLI — the bundle, the preview renderer, and your app share one runtime instance. Make sure
+  `@voidhash/paywalls` is installed in the project you deploy from.
+</Callout>
+
+Paywall bundles may only import from `@voidhash/paywalls`, React's runtime entries, and relative
+paths within `.voidhash` — other imports are rejected at build time. Paywall `variables` values
+must be strings, numbers, or booleans. The server enforces size caps at upload: JS bundles up to
+5 MB, individual assets up to 10 MB.
+
+## What the deploy does
+
+The non-dry-run path uploads the build in three steps against the
+[Paywall Deploys API](/docs/api/paywall-deploys):
+
+1. **Create** — the manifest is posted to the server, which answers with a deploy id and the list
+   of file hashes it does not already have for this project.
+2. **Upload** — only the missing blobs are uploaded. Everything the server has seen before (in
+   any previous deploy of this project) is reused, so repeat deploys only transfer what actually
+   changed.
+3. **Finalize** — the deploy is committed immutably. The server validates the contents and
+   releases a new version of every paywall and component in the manifest.
+
+On success the command prints the released versions and public URLs:
+
+```
+Deploying…
+  Uploading 3 blob(s) (6 already on the server)…
+
+Deploy <deployId> is ready (3 blob(s) uploaded, 6 reused).
+
+Paywalls:
+  • onboarding  v4
+      https://api.voidhash.com/p/<contentHash>/index.html
+
+Components:
+  • product-option  v2
+```
+
+Finalized artifacts are served publicly and immutably by content hash — the printed URL is the
+exact bundle the SDK loads when [resolving a paywall](/docs/react-native/displaying-paywalls).
+
+<Callout type="info" title="Deploys are cheap to retry">
+  Uploads are content-addressed, so re-running a failed or interrupted deploy only transfers the
+  blobs the server is still missing. If finalize reports missing blobs, the CLI re-uploads exactly
+  those and retries once automatically.
+</Callout>
+
+## Dry run
+
+Use `--dry-run` to validate and inspect a deploy without releasing anything:
+
+```package-install
+npx voidhash-cli deploy --dry-run
+```
+
+The build report lists every paywall and component with its content hash, bundle size, and asset
+or preview counts:
+
+```
+Building paywalls…
+
+Built 1 paywall(s) and 1 component(s) for acme/my-app:
+
+  • Onboarding (onboarding)
+      hash    5b00934c90ee
+      bundle  198.4 KB, 1 asset(s)
+  • Product Option (product-option, component)
+      hash     ab93f1c2d4e5
+      runtime  5.9 KB, 2 preview(s)
+
+  1 asset(s)
+  Output:   /path/to/my-app/.voidhash/.build
+  Manifest: /path/to/my-app/.voidhash/.build/manifest.json
+
+Dry run — nothing uploaded.
+```
+
+A dry run performs the full build — typecheck, bundling, and manifest validation — so it doubles
+as a CI gate for paywall sources.
+
+## Troubleshooting
+
+- **`voidhash.config.ts not found`** — run [`voidhash-cli init`](/docs/cli/init) in the project
+  root first.
+- **`You must be logged in to deploy`** — run [`voidhash-cli auth login`](/docs/cli/auth).
+- **`No paywalls or components found`** — the build needs at least one source file in
+  `.voidhash/paywalls` or `.voidhash/components`. Use [studio](/docs/cli/studio) to preview
+  paywalls locally while you author them.
+- **A 400 on create** — the server no longer accepts your manifest's `schemaVersion`; upgrade
+  `voidhash-cli`.
+- **A 403 on create** — check that `team` and `project` in `voidhash.config.ts` match a project
+  your account can access.
+
+For the raw HTTP endpoints behind the upload flow, see
+[Paywall Deploys](/docs/api/paywall-deploys).
diff --git a/apps/www/src/features/docs/content/docs/cli/init.mdx b/apps/www/src/features/docs/content/docs/cli/init.mdx
new file mode 100644
index 000000000..74d823d29
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/init.mdx
@@ -0,0 +1,135 @@
+---
+title: init
+description: Set up Voidhash in your project with a one-time interactive command.
+---
+
+`voidhash-cli init` is the one-time setup command for a React Native project. It signs you in,
+lets you pick (or create) a team and project, verifies the project has a publishable key, and
+scaffolds the three files your app needs: `voidhash.config.ts`, an SDK client module with the key
+pre-filled, and the initial `voidhash.gen.d.ts` type declarations.
+
+Run it in the root of your Expo / React Native project:
+
+```package-install
+npx voidhash-cli init
+```
+
+The command takes no flags. Everything is resolved interactively.
+
+## What happens when you run it
+
+<Steps>
+
+<Step>
+### Overwrite check
+
+If a `voidhash.config.ts` (or `.js`) already exists, `init` asks whether to overwrite the existing
+configuration. Confirming deletes the old config file and starts fresh; declining prints
+`Initialization cancelled.` and exits without touching anything.
+
+</Step>
+
+<Step>
+### Sign in
+
+If you are not logged in, `init` asks for confirmation and then opens a browser window to sign you
+in — the same flow as [`voidhash-cli auth login`](/docs/cli/auth). If you are already logged in,
+this step is skipped.
+
+</Step>
+
+<Step>
+### Select a team and project
+
+You pick the team (organization) and then one of its projects from an interactive list. Both
+prompts include an option to create a new one inline, so a fresh account can go from zero to a
+configured project without leaving the terminal.
+
+</Step>
+
+<Step>
+### Publishable key check
+
+`init` verifies that the selected project has a publishable API key (`vh_pk_...`). The key is not
+stored in any config file — it goes straight into the generated SDK client module in the next
+step. If no valid publishable key exists, the command fails with
+`Could not retrieve a valid publishable key for the selected project.` — create one in the
+dashboard and re-run `init`.
+
+</Step>
+
+<Step>
+### Files are written
+
+`init` detects whether your project uses TypeScript or JavaScript and whether it has a `src/`
+directory, then writes the files described below. It refuses to overwrite anything unexpected —
+each target path is checked before writing.
+
+</Step>
+
+</Steps>
+
+## What gets written
+
+### `voidhash.config.ts`
+
+The project configuration, written to the project root (as `.js` in JavaScript projects):
+
+```ts title="voidhash.config.ts"
+import { defineConfig } from 'voidhash-cli';
+
+export default defineConfig({
+  team: 'acme',
+  project: 'my-app',
+});
+```
+
+`team` and `project` are the slugs you selected. This file is consumed by
+[`voidhash-cli types`](/docs/cli/types) and [`voidhash-cli deploy`](/docs/cli/deploy). A third
+option, `typesOutput`, controls where the generated declaration file is written — `init` omits it
+so the default (`voidhash.gen.d.ts` at the project root) applies.
+
+### `src/lib/voidhash.ts`
+
+The SDK client module, with your publishable key pre-filled so it works on the first run. In
+projects without a `src/` directory it is written to `lib/voidhash.js` instead:
+
+```ts title="src/lib/voidhash.ts"
+import { createVoidhashClient } from "@voidhash/react-native";
+
+/**
+ * Voidhash SDK client. Safe to edit.
+ *
+ * Use it like `<voidhash.Provider>` and `voidhash.useProducts()`. The
+ * publishable key is safe to ship in client code.
+ */
+export const voidhash = createVoidhashClient("vh_pk_...");
+```
+
+The file is yours to edit — the rest of your app imports the `voidhash` object from here, e.g.
+`<voidhash.Provider>` or `voidhash.useProducts()`.
+
+### `voidhash.gen.d.ts`
+
+The initial TypeScript declaration file, generated from your project's schema on the server so
+autocomplete works immediately. It embeds a schema version header used by
+[`voidhash-cli types check`](/docs/cli/types) to detect drift.
+
+<Callout type="info" title="Types generation is non-fatal">
+  If fetching the remote schema fails, `init` logs a warning and finishes anyway. Run
+  `voidhash-cli types generate` later to produce the declaration file.
+</Callout>
+
+## Next steps
+
+On success, `init` prints where each file was written and these next steps:
+
+1. Wrap your app with `<voidhash.Provider>` from the generated client module.
+2. Create your products and paywall locations in the Voidhash dashboard.
+3. Re-run `voidhash-cli types generate` whenever the dashboard schema changes.
+
+<Callout type="info" title="No local schema files">
+  Voidhash is server-first: the dashboard is the source of truth for products, paywall locations,
+  and the rest of your schema. `init` does not generate any local schema files — you define your
+  catalog in the dashboard and pull its shape into your editor with `voidhash-cli types generate`.
+</Callout>
diff --git a/apps/www/src/features/docs/content/docs/cli/meta.yaml b/apps/www/src/features/docs/content/docs/cli/meta.yaml
new file mode 100644
index 000000000..53559cb35
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/meta.yaml
@@ -0,0 +1,10 @@
+title: CLI
+icon: SquareTerminal
+pages:
+  - overview
+  - init
+  - auth
+  - types
+  - studio
+  - deploy
+  - config
diff --git a/apps/www/src/features/docs/content/docs/cli/overview.mdx b/apps/www/src/features/docs/content/docs/cli/overview.mdx
new file mode 100644
index 000000000..83d4eb1af
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/overview.mdx
@@ -0,0 +1,122 @@
+---
+title: Overview
+description: What the Voidhash CLI is, how to run it, and how its configuration files work.
+---
+
+The Voidhash CLI (`voidhash-cli`) is the command-line companion for a Voidhash project. It signs
+you in, wires a React Native project to a team and project, keeps your generated TypeScript types
+in sync with the server schema, launches the local paywall Studio, and builds and deploys your
+paywalls.
+
+## Running the CLI
+
+Add it as a dev dependency and run it with `npx`:
+
+```package-install
+npm i voidhash-cli -D
+```
+
+```package-install
+npx voidhash-cli init
+```
+
+<Callout type="info" title="Package name">
+  The published package and binary are both named `voidhash-cli`. Older material referring to
+  `@voidhash/cli` is out of date — that package name does not exist.
+</Callout>
+
+## Commands
+
+| Command | Description |
+| --- | --- |
+| [`voidhash-cli init`](/cli/init) | Initialize a Voidhash project: sign in, pick a team and project, and scaffold the config files |
+| [`voidhash-cli auth`](/cli/auth) | Manage authentication — `login`, `logout`, `status`, and `token` |
+| [`voidhash-cli types`](/cli/types) | Generate and validate the `voidhash.gen.d.ts` declaration file — `generate` and `check` |
+| [`voidhash-cli studio`](/cli/studio) | Launch the local paywall preview Studio |
+| [`voidhash-cli deploy`](/cli/deploy) | Build and deploy paywalls to Voidhash |
+| [`voidhash-cli config`](/cli/config) | Print and manage the CLI configuration — `set` and `reset` |
+
+## Global flags
+
+Two flags are shared by every command and can be placed before or after the subcommand —
+`npx voidhash-cli deploy --profile staging` and `npx voidhash-cli --profile staging deploy` are
+equivalent.
+
+### `--debug`, `-d`
+
+Enables debug logging with full error traces. By default the CLI prints a short, friendly error
+message and exits with code 1; with `--debug` it also prints the full cause chain, which is what
+you want when reporting an issue.
+
+```package-install
+npx voidhash-cli --debug types generate
+```
+
+### `--profile <name>`
+
+Selects a named configuration profile: a sparse set of overrides (`api_key`, `api_url`,
+`web_url`) merged on top of the shared base configuration in `~/.voidhash`. Any key the profile
+does not override falls back to the base value. There is no short alias — `-p` is used by
+`studio` for `--port`.
+
+```package-install
+npx voidhash-cli deploy --profile staging
+```
+
+While a profile is active, configuration writes (for example `auth login` storing an API key, or
+`config set`) go into that profile's overrides only — the base configuration is untouched. See
+[`voidhash-cli config`](/cli/config) for managing profiles.
+
+## CLI configuration: `~/.voidhash`
+
+The CLI stores its own configuration as JSON in `.voidhash` in your home directory. It holds the
+shared base keys plus an optional `profiles` map:
+
+```json title="~/.voidhash"
+{
+  "api_key": "<set by voidhash-cli auth login>",
+  "api_url": "https://api.voidhash.com",
+  "web_url": "https://voidhash.com",
+  "profiles": {
+    "staging": {
+      "api_url": "https://api.staging.voidhash.com"
+    }
+  }
+}
+```
+
+| Key | Description |
+| --- | --- |
+| `api_key` | Your login credential, written by [`voidhash-cli auth login`](/cli/auth). `null` when logged out |
+| `api_url` | The Voidhash API endpoint. Defaults to `https://api.voidhash.com` |
+| `web_url` | The Voidhash dashboard URL, used for the browser login flow. Defaults to `https://voidhash.com` |
+| `profiles` | Optional map of named profiles. Each profile stores only the keys it overrides |
+
+You rarely edit this file by hand — [`voidhash-cli config`](/cli/config) prints the resolved
+configuration and `config set` / `config reset` manage it for you.
+
+## Project configuration: `voidhash.config.ts`
+
+Each project has a `voidhash.config.ts` at its root, created by
+[`voidhash-cli init`](/cli/init). It ties the directory to a Voidhash team and project and is
+read by `types generate`, `types check`, and `deploy`:
+
+```ts title="voidhash.config.ts"
+import { defineConfig } from "voidhash-cli";
+
+export default defineConfig({
+  team: "my-team",
+  project: "my-app",
+});
+```
+
+| Field | Description |
+| --- | --- |
+| `team` | The team (organization) slug the project belongs to |
+| `project` | The project slug within the team |
+| `typesOutput` | Optional output path for the generated declaration file. Defaults to `voidhash.gen.d.ts` at the project root |
+
+<Callout type="info" title="Two config files, two scopes">
+  `~/.voidhash` is per-machine and holds your credentials and endpoints; `voidhash.config.ts` is
+  per-project, checked into the repository, and holds no secrets.
+</Callout>
diff --git a/apps/www/src/features/docs/content/docs/cli/studio.mdx b/apps/www/src/features/docs/content/docs/cli/studio.mdx
new file mode 100644
index 000000000..d2e834787
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/studio.mdx
@@ -0,0 +1,70 @@
+---
+title: studio
+description: Launch the paywall preview Studio for the current project.
+---
+
+`voidhash-cli studio` launches the Studio — a local preview app bundled with the CLI — so you can
+build and iterate on your paywalls without deploying anything. It runs entirely against the
+`.voidhash` folder in your current directory, so run it from your project root:
+
+```package-install
+npx voidhash-cli studio
+```
+
+The command prints the project path and preview URL, then keeps running until you stop it with
+`Ctrl+C`:
+
+```
+  Voidhash Studio
+  Project:  /path/to/your-app
+  Preview:  http://localhost:4830
+```
+
+By default, Studio opens in your browser shortly after the server starts.
+
+## Flags
+
+### `--port`, `-p`
+
+Port for the Studio dev server. Defaults to `4830`. The port is strict — if it is already in use,
+Studio fails instead of silently picking a different one, so the printed preview URL is always the
+one Studio is actually serving on.
+
+```package-install
+npx voidhash-cli studio --port 5000
+```
+
+### `--open`
+
+Open Studio in your browser once it starts. Defaults to `true`; pass `--no-open` to disable it,
+for example when Studio runs inside a script or a remote shell:
+
+```package-install
+npx voidhash-cli studio --no-open
+```
+
+## How it works
+
+Studio is a Vite app shipped inside the CLI. The command resolves the bundled app, starts its dev
+server, and points it at your project via the `VOIDHASH_PROJECT_ROOT` environment variable. Your
+project's `.voidhash` folder is the source of truth — the paywalls Studio previews are the same
+files that [deploy](/cli/deploy) builds and uploads.
+
+If the current directory has no `.voidhash` folder, the command warns but still starts:
+
+```
+No .voidhash folder found in /path/to/your-app.
+Studio will start, but there are no paywalls to preview yet.
+Create .voidhash/paywalls/<name>.tsx to get started.
+```
+
+<Callout type="info" title="Run it from the project root">
+  Studio resolves the project from the directory you run the command in. If you see the warning
+  above in a project that does have paywalls, you are likely running the command from a
+  subdirectory.
+</Callout>
+
+## Next steps
+
+- Happy with the preview? Ship it with [`voidhash-cli deploy`](/cli/deploy).
+- New project without a `.voidhash` folder yet? Start with [`voidhash-cli init`](/cli/init).
diff --git a/apps/www/src/features/docs/content/docs/cli/types.mdx b/apps/www/src/features/docs/content/docs/cli/types.mdx
new file mode 100644
index 000000000..2286b4b2b
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/cli/types.mdx
@@ -0,0 +1,180 @@
+---
+title: types
+description: Generate the voidhash.gen.d.ts declaration file from the server schema and verify it stays in sync in CI.
+---
+
+`voidhash-cli types` keeps your project's generated TypeScript declaration file —
+`voidhash.gen.d.ts` — in sync with the schema on the server. It has two subcommands:
+
+- `types generate` — fetch the server schema and write the declaration file (optionally watching
+  for changes)
+- `types check` — CI gate that fails when the committed file has fallen behind the server
+
+Both require a logged-in session ([`auth login`](/docs/cli/auth)) and a `voidhash.config.ts` in the
+project root ([`init`](/docs/cli/init)). You get a clear error pointing at the right command when
+either is missing.
+
+## types generate
+
+```package-install
+npx voidhash-cli types generate
+```
+
+Fetches the schema from the server and writes the declaration file, then prints the embedded
+version:
+
+```
+Fetching remote schema...
+✓ Types written to voidhash.gen.d.ts (version 3f6c1a9e2b74d0c8e5a...)
+```
+
+The output path defaults to `voidhash.gen.d.ts` at the project root; override it with
+`typesOutput` in `voidhash.config.ts`:
+
+```ts title="voidhash.config.ts"
+import { defineConfig } from "voidhash-cli";
+
+export default defineConfig({
+  team: "my-team",
+  project: "my-app",
+  typesOutput: "src/voidhash.gen.d.ts", // optional
+});
+```
+
+Every generated file starts with a `@voidhash:version` header carrying the server-computed schema
+version hash:
+
+```ts title="voidhash.gen.d.ts"
+// voidhash.gen.d.ts — generated by voidhash-cli, do not edit
+// @voidhash:version 3f6c1a9e2b74d0c8e5a1...
+// @voidhash:fetched-at 2026-07-17T09:30:00.000Z
+
+declare module "@voidhash/react-native" {
+  interface VoidhashRegister {
+    schema: {
+      products: "monthly_sub" | "yearly_sub";
+      locations: "onboarding" | "settings-upsell";
+      perks: "all-access" | "premium-features";
+    };
+  }
+}
+
+export {};
+```
+
+The version is supplied by the server, not computed locally, so client and server can never
+disagree on the hash. It is what `--watch` and `types check` compare against.
+
+<Callout type="info" title="Commit the generated file">
+  `voidhash.gen.d.ts` belongs in version control — that is what makes types reproducible across
+  your team and what gives `types check` something to verify in CI.
+</Callout>
+
+### Flags
+
+- `--watch` — after the initial generate, keep running and regenerate whenever the server schema
+  changes. Default `false`.
+- `--poll-interval-ms <n>` — polling interval for `--watch` mode, in milliseconds. Default `5000`.
+
+### Watch mode
+
+```package-install
+npx voidhash-cli types generate --watch --poll-interval-ms 2000
+```
+
+Watch mode polls the server's lightweight `GET /schema/version` endpoint on the configured
+interval and only re-downloads the full schema — and rewrites the file — when the version hash
+actually changes. Press Ctrl+C to stop.
+
+The loop is deliberately resilient: poll errors and regeneration failures are logged as warnings
+and skipped, so a flaky network or a momentary logout never kills the watcher. You keep working
+against the last-known-good declaration file.
+
+## types check
+
+```package-install
+npx voidhash-cli types check
+```
+
+The CI gate. Reads the `@voidhash:version` header from the local declaration file and compares it
+against the server's current schema version:
+
+- **In sync** — prints `✓ Types are up to date (version ...)` and exits `0`.
+- **Stale** — prints the divergence and exits non-zero, so a stale committed file cannot pass PR
+  CI:
+
+```
+✗ Types are stale.
+  Local:  3f6c1a9e2b74d0c8e5a1...
+  Server: 9d2e7b41f0a3c6d8e2b5...
+
+Run 'voidhash-cli types generate' to refresh, then commit the updated declaration file.
+```
+
+Two failure modes get distinct errors so they are easy to diagnose in CI logs:
+
+- **File missing** — `Could not read generated types at voidhash.gen.d.ts. Run 'voidhash-cli
+  types generate' first.`
+- **Header missing** — `voidhash.gen.d.ts is missing the @voidhash:version header. Re-run
+  'voidhash-cli types generate' to regenerate.` (usually the result of hand-editing the file)
+
+### CI workflow example
+
+Authenticate the CLI in CI by setting the API key from a secret (the same `api_key` that
+`auth login` stores in `~/.voidhash` on your machine — see [`config`](/docs/cli/config)), then run
+the check:
+
+```yaml title=".github/workflows/voidhash-types.yml"
+name: voidhash types
+on: pull_request
+
+jobs:
+  types-check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - run: npm ci
+      - run: npx voidhash-cli config set api_key "$VOIDHASH_API_KEY"
+        env:
+          VOIDHASH_API_KEY: ${{ secrets.VOIDHASH_API_KEY }}
+      - run: npx voidhash-cli types check
+```
+
+When someone renames a product slug in the dashboard, the next PR fails `types check` until the
+declaration file is regenerated and committed — at which point TypeScript surfaces every call site
+still using the old slug.
+
+## What the generated file powers
+
+The React Native SDK exports an intentionally empty `VoidhashRegister` interface; the generated
+file augments it via declaration merging. `ProductSlug`, `LocationSlug`, and `PerkSlug` resolve
+against the augmentation, so hooks like `usePaywallByLocation("onboarding")` autocomplete the
+literal union of valid slugs. Without the file (or with an empty schema), they degrade gracefully
+to `string` — the file is purely a compile-time aid; nothing at runtime depends on it.
+
+During development you rarely run the watcher by hand: the SDK's Metro plugin spawns
+`voidhash-cli types generate --watch` alongside `expo start` and tears it down on shutdown:
+
+```js title="metro.config.js"
+const { getDefaultConfig } = require("expo/metro-config");
+const { withVoidhash } = require("@voidhash/react-native/metro");
+
+module.exports = withVoidhash(getDefaultConfig(__dirname), {
+  pollIntervalMs: 5000, // optional
+});
+```
+
+The plugin's `pollIntervalMs` option is forwarded to `--poll-interval-ms`. See
+[Schema & Generated Types](/docs/react-native/schema-and-types) for the full picture of how the
+server schema, the runtime fetch, and the generated types fit together.
+
+## Related
+
+- [Schema & Generated Types](/docs/react-native/schema-and-types) — how the SDK consumes the
+  declaration file
+- [init](/docs/cli/init) — creates `voidhash.config.ts` and the initial `voidhash.gen.d.ts`
+- [auth](/docs/cli/auth) — login session required by both subcommands
+- [config](/docs/cli/config) — profiles and non-interactive `api_key` setup for CI
diff --git a/apps/www/src/features/docs/content/docs/guides/meta.yaml b/apps/www/src/features/docs/content/docs/guides/meta.yaml
new file mode 100644
index 000000000..800cb9559
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/meta.yaml
@@ -0,0 +1,4 @@
+title: Guides
+icon: BookOpen
+pages:
+  - payment-providers
diff --git a/apps/www/src/features/docs/content/docs/guides/payment-providers/meta.yaml b/apps/www/src/features/docs/content/docs/guides/payment-providers/meta.yaml
new file mode 100644
index 000000000..d43964cf9
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/guides/payment-providers/meta.yaml
@@ -0,0 +1,3 @@
+title: Payment Providers
+pages:
+  - apple-app-store
diff --git a/apps/www/src/features/docs/content/docs/installation.mdx b/apps/www/src/features/docs/content/docs/installation.mdx
index b2b581b5a..623ca2857 100644
--- a/apps/www/src/features/docs/content/docs/installation.mdx
+++ b/apps/www/src/features/docs/content/docs/installation.mdx
@@ -1,6 +1,7 @@
 ---
 title: Installation
 description: Learn how to add Voidhash to your project.
+icon: Download
 ---
 
 <Steps>
diff --git a/apps/www/src/features/docs/content/docs/introduction.mdx b/apps/www/src/features/docs/content/docs/introduction.mdx
index 8d9e1c25a..ada1a3946 100644
--- a/apps/www/src/features/docs/content/docs/introduction.mdx
+++ b/apps/www/src/features/docs/content/docs/introduction.mdx
@@ -1,6 +1,7 @@
 ---
 title: Introduction
 description: Introduction to Voidhash.
+icon: BookOpen
 ---
 
 Voidhash is an in-app purchases and subscription management platform designed for **React Native**. Implementing in-app purchases has always been about as enjoyable as debugging production code at 3 AM. With Voidhash, you get server-side receipt validation, CRM, analytics, and more in under 5 minutes. Built by developers who've felt your pain. And the best part? It's Open Source.
diff --git a/apps/www/src/features/docs/content/docs/mcp.mdx b/apps/www/src/features/docs/content/docs/mcp.mdx
new file mode 100644
index 000000000..7c657d5a2
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/mcp.mdx
@@ -0,0 +1,177 @@
+---
+title: Voidhash MCP
+description: Connect Claude Code, Cursor, Codex, and other MCP clients to your Voidhash project.
+icon: Bot
+---
+
+Voidhash exposes your paywall workspace as a Model Context Protocol server at
+`https://api.voidhash.com/api/mcp` (streamable HTTP, stateless). Point your agent at it and it can
+list and edit paywalls, write code components, and render live previews of the result — the same
+document the designer edits, over `list_paywalls`, `edit_paywall`, `write_component`,
+`get_paywall_preview`, and friends.
+
+Every request authenticates with a bearer token: either a **project secret key** (`vh_sk_...`,
+already scoped to one project) or a **user API key** from your CLI login. User keys can span
+multiple projects, so they also need an `X-Voidhash-Project` header with a project id or slug. The
+easiest way to get both headers is the CLI — log in with [`voidhash-cli auth`](/cli/auth), then:
+
+```package-install
+npx voidhash-cli auth token --project your-project
+```
+
+This prints the exact headers as JSON, for example
+`{"Authorization":"Bearer vh_...","X-Voidhash-Project":"your-project"}`, without ever exposing the
+key as a command argument. Prefer a project secret key for shared or long-lived setups — create one
+under [API keys](/api/api-keys) and omit the `X-Voidhash-Project` header.
+
+Pick your client below and copy the snippet into its config. Verify any of them by asking your
+agent: "What paywalls do I have in Voidhash?" — it should call the `list_paywalls` tool.
+
+## Claude Code
+
+Add the server with the `claude mcp` command.
+
+Run `npx voidhash-cli auth token --project your-project` to get your headers, then register the
+server:
+
+```bash
+claude mcp add --transport http voidhash https://api.voidhash.com/api/mcp \
+  --header "Authorization: Bearer vh_sk_..."
+```
+
+**Verify:** Ask Claude Code: "What paywalls do I have in Voidhash?" — it should call the
+`list_paywalls` tool.
+
+## Cursor
+
+Add a server entry to `.cursor/mcp.json` (project) or `~/.cursor/mcp.json` (global).
+
+Create or edit the file:
+
+```json title=".cursor/mcp.json"
+{
+  "mcpServers": {
+    "voidhash": {
+      "type": "http",
+      "url": "https://api.voidhash.com/api/mcp",
+      "headers": {
+        "Authorization": "Bearer vh_sk_..."
+      }
+    }
+  }
+}
+```
+
+Reload Cursor (Cmd/Ctrl-Shift-P → Cursor: Reload) so the new server is picked up.
+
+**Verify:** In Cursor agent mode, ask: "What paywalls do I have in Voidhash?" — it should call
+`list_paywalls`.
+
+## Codex
+
+Add a custom server from the Codex settings UI.
+
+Open Codex Settings → MCP Servers → Add custom server and switch to the Streamable HTTP tab. Set
+the name to `voidhash`, the URL to `https://api.voidhash.com/api/mcp`, and add an `Authorization`
+header with the value `Bearer vh_sk_...`. Save.
+
+**Verify:** Ask Codex: "What paywalls do I have in Voidhash?" — it should call `list_paywalls`.
+
+## VS Code / GitHub Copilot
+
+Drop a `.vscode/mcp.json` into the workspace. Note the top-level key is `servers`, not
+`mcpServers`.
+
+Create or edit the file:
+
+```json title=".vscode/mcp.json"
+{
+  "servers": {
+    "voidhash": {
+      "type": "http",
+      "url": "https://api.voidhash.com/api/mcp",
+      "headers": {
+        "Authorization": "Bearer vh_sk_..."
+      }
+    }
+  }
+}
+```
+
+Restart VS Code so Copilot Chat picks up the new server.
+
+**Verify:** In Copilot Chat (agent mode), ask: "What paywalls do I have in Voidhash?" — it should
+call `list_paywalls`.
+
+## Windsurf
+
+Add a server entry to Windsurf's global MCP config. Windsurf uses `serverUrl` and no `type` field.
+
+Create or edit the file:
+
+```json title="~/.codeium/windsurf/mcp_config.json"
+{
+  "mcpServers": {
+    "voidhash": {
+      "serverUrl": "https://api.voidhash.com/api/mcp",
+      "headers": {
+        "Authorization": "Bearer vh_sk_..."
+      }
+    }
+  }
+}
+```
+
+**Verify:** In Cascade, ask: "What paywalls do I have in Voidhash?" — it should call
+`list_paywalls`.
+
+## OpenCode
+
+Add a `mcp` entry to `opencode.json` (project) or `~/.config/opencode/opencode.json` (global).
+
+Create or edit the file:
+
+```json title="opencode.json"
+{
+  "mcp": {
+    "voidhash": {
+      "type": "remote",
+      "url": "https://api.voidhash.com/api/mcp",
+      "enabled": true,
+      "headers": {
+        "Authorization": "Bearer vh_sk_..."
+      }
+    }
+  }
+}
+```
+
+**Verify:** Ask OpenCode: "What paywalls do I have in Voidhash?" — it should call `list_paywalls`.
+
+## Antigravity
+
+Add a server entry to Antigravity's MCP config — same shape as Windsurf.
+
+Create or edit the file:
+
+```json title="~/.codeium/antigravity/mcp_config.json"
+{
+  "mcpServers": {
+    "voidhash": {
+      "serverUrl": "https://api.voidhash.com/api/mcp",
+      "headers": {
+        "Authorization": "Bearer vh_sk_..."
+      }
+    }
+  }
+}
+```
+
+**Verify:** Ask the Antigravity agent: "What paywalls do I have in Voidhash?" — it should call
+`list_paywalls`.
+
+---
+
+The MCP server ships as part of the open-source backend in
+[voidhashcom/voidhash](https://github.com/voidhashcom/voidhash). File an issue there if your client
+is missing or a snippet breaks.
diff --git a/apps/www/src/features/docs/content/docs/meta.yaml b/apps/www/src/features/docs/content/docs/meta.yaml
index e2af68e82..1835d439b 100644
--- a/apps/www/src/features/docs/content/docs/meta.yaml
+++ b/apps/www/src/features/docs/content/docs/meta.yaml
@@ -1,7 +1,15 @@
-title: guide
+title: Documentation
 root: true
 pages:
+  - "---Get started---"
   - introduction
   - installation
   - basic-usage
+  - sdks-and-apis
+  - "---Learn---"
   - concepts
+  - react-native
+  - cli
+  - mcp
+  - guides
+  - api
diff --git a/apps/www/src/features/docs/content/docs/react-native/analytics.mdx b/apps/www/src/features/docs/content/docs/react-native/analytics.mdx
new file mode 100644
index 000000000..c718e5d78
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/analytics.mdx
@@ -0,0 +1,147 @@
+---
+title: Analytics
+description: Capture product analytics events with the built-in batching queue, automatic lifecycle events, and person traits.
+---
+
+Voidhash ships product analytics with the SDK — no separate analytics package to install. Events
+you capture are attributed to the current person, batched in memory, and delivered to the Voidhash
+ingest endpoint in the background. The SDK also captures a set of lifecycle events automatically,
+and person trait updates ride the same queue.
+
+## Capturing Events
+
+Call `client.capture(eventName, properties?)` anywhere in your app:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+voidhash.client.capture("cta_button_clicked", {
+  button_name: "Get Started",
+  page: "home",
+});
+```
+
+`capture` is **synchronous** and never blocks — it appends the event to an in-memory queue and
+returns immediately. Delivery happens in the background (see below), so it is safe to call from
+render paths, gesture handlers, and hot loops.
+
+Event names with only whitespace are dropped. Avoid the `$` prefix for your own event names — it
+marks Voidhash's built-in events and properties.
+
+<Callout type="info" title="Pre-init buffering">
+  Unlike every other client method, `capture` works before the Provider has finished initializing.
+  Events captured early are buffered in memory and transferred to the delivery queue once
+  `init()` completes, so you never lose the first events of a session.
+</Callout>
+
+## Batching and Delivery
+
+Queued events are sent in batches with these defaults:
+
+- **Batch size**: `20` events — reaching it triggers an immediate flush
+- **Flush window**: every `5000ms` a background flush drains whatever is queued
+- **Retries**: up to `3` attempts per batch with exponential backoff
+
+Batches that keep failing with a retryable status (or a network error) are re-queued with a capped
+backoff and picked up by a later flush; rate-limit responses honor the server's `Retry-After`.
+Non-retryable responses drop the batch and log a warning instead of blocking the queue.
+
+### Forcing Delivery
+
+Call `flush()` to drain the queue immediately — for example right before a moment where the app
+might be killed:
+
+```tsx
+await voidhash.client.flush();
+```
+
+Concurrent `flush()` calls are deduplicated: if a flush is already in flight, subsequent callers
+await that same flush instead of starting another one. The periodic background flush goes through
+the same guard. A failed flush rejects with a `VoidhashError` carrying the
+`FAILED_TO_FLUSH_ANALYTICS` code (see [Error Handling](/react-native/error-handling)).
+
+### Shutdown
+
+`client.end()` performs a final awaited `flush()` before closing the store connection, so events
+captured late in the session still make it out.
+
+## Automatic Events
+
+The SDK captures these events on your behalf — the `$` prefix marks them as built-in:
+
+| Event | When it fires |
+| --- | --- |
+| `$app_installed` | First launch the SDK has seen on this install (no previously cached release) |
+| `$app_updated` | Launch where the app build or version differs from the last seen one |
+| `$app_opened` | Every SDK startup, after install/update has been resolved |
+| `$app_backgrounded` | The app moved to the background |
+| `$app_became_active` | The app returned to the foreground from a non-active state |
+| `$sign_out` | `client.signOut()` was called |
+
+Install/update detection compares the current app build and version against the last release the
+SDK cached on the device, then records the current one for next launch.
+
+### Paywall Events
+
+Analytics events emitted by a displayed paywall (via the paywall bridge) are routed into the same
+capture queue, stamped with a `paywall_location` property carrying the location slug the paywall
+was shown for. See [Displaying Paywalls](/react-native/displaying-paywalls).
+
+## Standardized Properties
+
+Every delivered event is enriched with standardized device and app context, alongside the
+properties you pass: `$app_build`, `$app_name`, `$app_version`, `$bundle_id`, `$device_brand`,
+`$device_name`, `$locale`, `$platform`, `$platform_version`, `$sdk` (`"react-native"`), and
+`$sdk_version`. Events also carry a stable per-session id and a unique event id, so retries never
+produce duplicates on the server.
+
+## Person Traits
+
+`client.setPersonAttributes(attributes)` updates the current person's traits by riding the
+analytics queue as a `$set` event — it is fire-and-forget and delivered with the queue's normal
+batching:
+
+```tsx
+voidhash.client.setPersonAttributes({
+  email: "ada@example.com",
+  name: "Ada Lovelace",
+  favorite_color: "green",
+});
+```
+
+The reserved `email` and `name` keys map to the person's dedicated server fields; every other key
+becomes a custom trait. Because the update is queued, call `flush()` if you need it delivered
+immediately — or use `setPersonAttributesSync` for a network round-trip that returns the updated
+person. See [Identifying Users](/react-native/identifying-users) for the full comparison.
+
+## Analytics and Identity
+
+Events are attributed to the distinct id that was active when delivery happens, so the SDK flushes
+at identity boundaries to keep attribution correct:
+
+- `client.identify(...)` drains the queue **first**, so events captured before the switch
+  attribute to the pre-switch (usually anonymous) identity.
+- `client.signOut()` captures `$sign_out` and flushes it under the signing-out identity before
+  resetting to a fresh anonymous id.
+
+## Ingest URL
+
+Analytics batches are posted to the same origin as your API `baseUrl`, under the `/i/v1/` path
+prefix — with the default `baseUrl` that means `https://api.voidhash.com/i/v1/batch`. No
+configuration is needed in production.
+
+For local development where the ingest service runs on a different host or port, pass the
+`ingestUrl` option to override the origin analytics requests are sent to:
+
+```ts title="utils/voidhash/client.ts"
+import { createVoidhashClient } from "@voidhash/react-native";
+
+export const voidhash = createVoidhashClient("vh_pk_...", {
+  baseUrl: "http://localhost:5001",
+  ingestUrl: "http://localhost:8083",
+  scheme: "myapp",
+});
+```
+
+See [Configuration](/react-native/configuration) for all client options and
+[Event Capture](/api/event-capture) for the ingest API itself.
diff --git a/apps/www/src/features/docs/content/docs/react-native/configuration.mdx b/apps/www/src/features/docs/content/docs/react-native/configuration.mdx
new file mode 100644
index 000000000..63d337270
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/configuration.mdx
@@ -0,0 +1,118 @@
+---
+title: Client Configuration
+description: Configure createVoidhashClient, understand what happens on Provider mount, and gate your UI on initialization.
+---
+
+The SDK is bootstrapped with a single factory call. `createVoidhashClient(publishableKey, options)` builds one client instance and returns a bag containing the `Provider`, the raw `client`, and a set of hooks that are all bound to that instance. Create it once in a module, export the result, and import it wherever you need it:
+
+```ts title="utils/voidhash/client.ts"
+import { createVoidhashClient } from "@voidhash/react-native";
+
+export const voidhash = createVoidhashClient("vh_pk_your_publishable_key", {
+  debug: __DEV__,
+});
+```
+
+```tsx title="app/_layout.tsx"
+import { voidhash } from "utils/voidhash/client";
+
+export default function RootLayout() {
+  return <voidhash.Provider>{/* Your app content */}</voidhash.Provider>;
+}
+```
+
+Because the hooks are created by the factory, they are always wired to the right client — there is no global singleton to configure and no client prop to thread through your tree. The returned object contains:
+
+- `Provider` — React provider that initializes the client on mount
+- `client` — the underlying `VoidhashClient` instance for imperative calls (`identify`, `capture`, `purchase`, ...)
+- `useVoidhash` — access to `{ client, isInitialized }` inside the tree
+- `useCurrentPerson`, `useFeatureFlags`, `usePaywallByLocation`, `useProducts`, `usePurchase` — data hooks bound to this client
+
+<Callout type="info" title="There is no schema argument">
+  Older versions of the SDK accepted a schema object as the second argument. That is gone: your
+  schema (products, locations, perks) lives on the server and is fetched automatically when the
+  `Provider` mounts. Type-safe slugs come from a generated `voidhash.gen.d.ts` instead — see
+  [Schema & Generated Types](/docs/react-native/schema-and-types).
+</Callout>
+
+## Options
+
+All options are optional. Defaults are applied inside `createVoidhashClient`.
+
+| Option | Type | Default |
+| --- | --- | --- |
+| `baseUrl` | `string` | `"https://api.voidhash.com"` |
+| `debug` | `boolean` | `false` |
+| `distinctId` | `string` | `undefined` (anonymous id) |
+| `ingestUrl` | `string` | derived from `baseUrl` |
+| `readOnly` | `boolean` | `false` |
+| `scheme` | `string` | Expo config `scheme` |
+| `unstable_swallowErrors` | `boolean` | `false` |
+
+### baseUrl
+
+The Voidhash API origin. Only override this when pointing the SDK at a self-hosted or local instance.
+
+### debug
+
+Enables verbose HTTP request/response logging (sensitive headers are redacted). Useful during integration; keep it off in production builds — passing `__DEV__` is a good default.
+
+### distinctId
+
+Seeds the identity the client initializes with. When omitted, the SDK reuses the persisted distinct id from a previous session, or generates and persists a new anonymous id (prefixed `vh:anon:`). You normally don't set this — call `client.identify()` after your own sign-in instead (see [Identifying Users](/docs/react-native/identifying-users)).
+
+### ingestUrl
+
+Overrides the base origin for analytics event delivery. By default events are sent to the same host as `baseUrl` (the ingest endpoint lives under the `/i/v1/...` path prefix there), so you only need this when running a separate local or test ingest server. See [Analytics](/docs/react-native/analytics).
+
+### readOnly
+
+Puts the client in observer mode: purchase initiation is blocked (`purchase` and `setPersonAttributesSync` throw), and the SDK observes and syncs store transactions without ever acknowledging or finishing them. Use this to run Voidhash alongside another billing SDK — see [Observer Mode](/docs/react-native/observer-mode).
+
+### scheme
+
+The deep-link scheme used for paywall callback URLs (`yourscheme://voidhash/callback/success` and `.../error`). In an Expo app this defaults to the `scheme` from your app config, so you rarely set it explicitly. If no scheme can be resolved from either source, `createVoidhashClient` throws a `SchemeNotSetError` immediately.
+
+### unstable_swallowErrors
+
+When enabled, failures in side-effect methods (`init`, `end`, `identify`, `reset`, `signOut`, `setPersonAttributes`, `restorePurchases`, `flush`, and the iOS sheet helpers) log a `[voidhash]` console warning instead of rejecting. Methods that return data you render (`getCurrentPerson`, `getProducts`, `getFeatureFlags`, `getPaywallForLocation`, `purchase`, `setPersonAttributesSync`) still reject so you never silently show wrong state. This is an alpha-era convenience for keeping an app alive while integrating; prefer real error handling — see [Error Handling](/docs/react-native/error-handling).
+
+## What happens on Provider mount
+
+The `Provider` calls `client.init()` in an effect on mount and flips `isInitialized` to `true` once it resolves. `init()` performs, in order (network calls run concurrently where possible):
+
+1. **Identity** — resolves the distinct id: the `distinctId` option if provided, otherwise the persisted id from a previous session, otherwise a freshly generated anonymous id.
+2. **Schema fetch** — fetches the runtime schema from the server through a stale-while-revalidate cache. A cached schema keeps the app working offline; a cold cache combined with an unreachable server is fatal and rejects `init()` with `FailedToFetchSchemaError`.
+3. **Person prefetch** — fetches the current person snapshot and publishes it, so `useCurrentPerson` has data without a hook-driven refetch.
+4. **Transaction observer** — attaches the native store transaction observer (StoreKit 2 / Play Billing) and kicks off a background reconciliation of previously observed transactions.
+5. **Analytics** — transfers any events you `capture`d before initialization from the pre-init buffer into the analytics queue, captures automatic startup events (`$app_installed` / `$app_updated` / `$app_opened`), wires app lifecycle events, and triggers a background flush.
+
+`client.capture()` is safe to call at any time — pre-init events are buffered and delivered after step 5. Every other client method throws a `VOIDHASH_CLIENT_NOT_INITIALIZED` error when called before `init()` completes.
+
+## Gating on initialization
+
+The bound hooks handle the gate for you: they wait for `isInitialized` internally. For imperative `client.*` calls from your own components, check the gate first with `useVoidhash()`:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+function AccountActions() {
+  const { client, isInitialized } = voidhash.useVoidhash();
+
+  if (!isInitialized) {
+    return null;
+  }
+
+  return <Button title="Restore purchases" onPress={() => client.restorePurchases()} />;
+}
+```
+
+`useVoidhash()` throws if called outside the `Provider`, so a missing wrapper fails loudly rather than returning stale state.
+
+## Shutting down
+
+`client.end()` flushes queued analytics, closes the native store connection, and removes the lifecycle subscription. After it resolves, `isInitialized` is `false` again. You rarely need this in an app — the client is designed to live for the process lifetime — but it is useful in tests or when tearing a client down deliberately:
+
+```ts
+await voidhash.client.end();
+```
diff --git a/apps/www/src/features/docs/content/docs/react-native/displaying-paywalls.mdx b/apps/www/src/features/docs/content/docs/react-native/displaying-paywalls.mdx
new file mode 100644
index 000000000..3845ae506
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/displaying-paywalls.mdx
@@ -0,0 +1,110 @@
+---
+title: Displaying Paywalls
+description: Present remotely published paywalls with usePaywallByLocation and react to purchase, restore, and error outcomes.
+---
+
+Paywalls in Voidhash are published to **locations** — named spots in your app like `onboarding` or `settings-upsell`. The `usePaywallByLocation` hook resolves which paywall is currently assigned to a location, preloads it, and presents it in a native full-screen presenter. Purchases, restores, and dismissal are handled for you; your code decides *when* to show the paywall and reacts to the outcome.
+
+## Showing a Paywall
+
+Call the hook with a location slug and invoke `show()` when you want to present the paywall:
+
+```tsx title="app/onboarding.tsx"
+import { voidhash } from "utils/voidhash/client";
+
+export default function OnboardingScreen() {
+  const { show } = voidhash.usePaywallByLocation("onboarding");
+
+  const handleContinue = async () => {
+    const didShow = await show();
+
+    if (!didShow) {
+      // No published paywall is assigned to this location —
+      // continue the flow without one.
+      router.push("/home");
+    }
+  };
+
+  return <Button onPress={handleContinue} title="Continue" />;
+}
+```
+
+`show()` returns a `Promise<boolean>`:
+
+- `true` — a paywall was presented full-screen on top of your app.
+- `false` — no published paywall is assigned to this location (or the client is not initialized yet). Treat this as "continue without a paywall", not as an error.
+
+<Callout type="info" title="Type-safe location slugs">
+  Location slugs are defined on the server. Run `voidhash-cli types generate` to get a
+  `voidhash.gen.d.ts` file that narrows the `locationSlug` argument to your project's actual
+  locations. Without generated types the argument degrades to `string`. See
+  [Schema and Types](/docs/react-native/schema-and-types).
+</Callout>
+
+## Reacting to Purchases and Restores
+
+Purchase and restore buttons inside the paywall are wired up automatically — the SDK runs the native store flow and dismisses the paywall on success. Pass callbacks as the second argument when you need to react, for example to navigate away or refresh local state:
+
+```tsx
+const { show } = voidhash.usePaywallByLocation("onboarding", {
+  onPurchase: ({ productId, requestId }) => {
+    // Fires after a purchase started inside the paywall succeeds.
+    router.push("/home");
+  },
+  onRestore: ({ requestId }) => {
+    // Fires after a restore started inside the paywall succeeds.
+    router.push("/home");
+  },
+  onError: (error, { action, requestId }) => {
+    // `action` is "purchase" or "restore".
+    console.error(`Paywall ${action} failed`, error.message);
+  },
+});
+```
+
+- `onPurchase` receives the `productId` of the purchased product.
+- `onError` fires when a purchase or restore initiated inside the paywall fails — including a cancelled store dialog, an unknown product id, or a second action started while one is still running (only one purchase or restore runs per location at a time; concurrent attempts are rejected).
+- `requestId` correlates the callback with the specific button press inside the paywall; it is present when the paywall bundle supplied one.
+
+The callbacks are optional. Entitlements update on the person regardless — see [Subscription Status](/docs/react-native/subscription-status) for reading them.
+
+## What Happens Automatically
+
+`usePaywallByLocation` does a lot behind the scenes. Knowing the exact behavior helps you reason about performance and lifecycle:
+
+- **Native full-screen presentation.** The paywall renders in a dedicated native presenter (Swift on iOS, Kotlin on Android) hosting a WebView — it is *not* a React Native `Modal` and never enters your component tree.
+- **Preloading.** The assigned paywall is resolved and its WebView preloaded when the hook mounts, and again every time the app returns to the foreground — so `show()` presents instantly. If nothing is preloaded yet, `show()` resolves and loads on demand.
+- **Warm WebViews.** Preloaded WebViews stay warm as long as at least one hook instance for that location is mounted. When the last hook instance for a location unmounts, its WebView is released.
+- **Purchases and restores.** Handled by the SDK's native purchase flow (StoreKit 2 / Play Billing) and synced to the Voidhash backend — the same flow as [Purchases](/docs/react-native/purchases). On success the paywall is dismissed automatically.
+- **Analytics.** Custom events emitted by the paywall are captured through the SDK's analytics queue, stamped with a `paywall_location` property so you can attribute them to the location. See [Analytics](/docs/react-native/analytics).
+- **External links.** Links the paywall opens externally (terms, privacy policy) go through `Linking.openURL`.
+- **Dismissal.** The paywall's close button dismisses the presenter; no wiring needed on your side.
+
+## Resolving a Paywall Imperatively
+
+When you need the resolution result without presenting anything — for example to decide whether to render an upsell entry point at all — use `client.getPaywallForLocation()`:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+const resolved = await voidhash.client.getPaywallForLocation("onboarding");
+
+const hasPublishedPaywall = Boolean(resolved?.showing.paywallRelease?.htmlUrl);
+```
+
+The result is `null` when nothing resolves for the location. Otherwise it describes the location, the assigned paywall, and the active release (`showing.paywallRelease`) including its `htmlUrl` and version. `usePaywallByLocation` uses this same call internally, so resolving imperatively and then showing via the hook does not cost an extra round-trip once the hook has preloaded.
+
+## Code Releases vs Visual-Editor Releases
+
+A location can be showing one of two kinds of paywall release:
+
+- **Visual-editor releases** are built in the Voidhash paywall editor. They are self-contained: everything they display is baked in at publish time.
+- **Code releases** are custom paywalls deployed with [`voidhash-cli deploy`](/docs/cli/deploy). After the paywall signals it is ready, the SDK sends it a runtime configuration: the release's products enriched with live store data (locale-formatted price strings, billing period, trial info from StoreKit / Play Billing), the author-configured variables, and the current platform.
+
+From the hook's perspective the two are identical — `show()`, the callbacks, and the automatic behaviors above work the same for both. The distinction only matters when you author code paywalls yourself; see [Paywall Deploys](/docs/api/paywall-deploys) for the deploy contract.
+
+## Next Steps
+
+- [Purchases](/docs/react-native/purchases) — the purchase flow the paywall triggers under the hood.
+- [Displaying Products](/docs/react-native/displaying-products) — build a fully custom in-app paywall with `useProducts`.
+- [Error Handling](/docs/react-native/error-handling) — error types and codes surfaced by the SDK.
diff --git a/apps/www/src/features/docs/content/docs/react-native/displaying-products.mdx b/apps/www/src/features/docs/content/docs/react-native/displaying-products.mdx
new file mode 100644
index 000000000..d29add042
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/displaying-products.mdx
@@ -0,0 +1,181 @@
+---
+title: Displaying Products
+description: Fetch live store products with useProducts and build your own paywall UI.
+---
+
+If you want full control over your paywall UI instead of using a [hosted paywall](/react-native/displaying-paywalls), fetch your products directly and render them with your own React Native components. Voidhash resolves the products declared in your [schema](/react-native/schema-and-types) against the native store SDK (StoreKit on iOS, Google Play Billing on Android), so every product comes back with live, store-formatted pricing.
+
+## Fetching Products
+
+Use the `useProducts()` hook returned by `createVoidhashClient`. It returns `{ data, error, isLoading }` and automatically waits for the [Provider](/react-native/configuration) to finish initializing:
+
+```tsx title="app/paywall.tsx"
+import { Text, View } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+export default function PaywallScreen() {
+  const { data: products, error, isLoading } = voidhash.useProducts();
+
+  if (isLoading) {
+    return <LoadingSpinner />;
+  }
+
+  if (error) {
+    return <ErrorMessage error={error} />;
+  }
+
+  return (
+    <View>
+      {products.toList().map((product) => (
+        <View key={product.slug}>
+          <Text>{product.name}</Text>
+          <Text>{product.displayPrice}</Text>
+        </View>
+      ))}
+    </View>
+  );
+}
+```
+
+## Working with the Result
+
+`data` is a record keyed by your product slugs, with two helpers attached:
+
+- **`data.get(slug)`** — returns the product for a slug, or `null` if it isn't available (or products haven't loaded yet).
+- **`data.toList()`** — returns all products as an array, filtering out any `null` entries.
+
+```tsx
+const { data: products } = voidhash.useProducts();
+
+// Look up a specific product
+const monthly = products.get("pro-monthly");
+
+// Or iterate over everything the store returned
+const available = products.toList();
+```
+
+If you've generated types with `voidhash-cli types generate`, the slugs are typed as a literal union — `products.get()` autocompletes your real product slugs and rejects typos at compile time. See [Schema & Types](/react-native/schema-and-types).
+
+## Product Fields
+
+Each product combines your schema definition with live metadata from the store:
+
+| Field | Description |
+| --- | --- |
+| `slug` | The product's slug from your Voidhash schema. |
+| `id` | The native store product identifier (App Store Connect / Google Play product ID). |
+| `name` | The product name from your Voidhash schema. |
+| `displayName` | The localized product name from the store listing. |
+| `displayPrice` | The store-formatted price string, e.g. `$9.99` — already localized to the user's storefront. |
+| `price` | The price as a number. |
+| `currency` | The storefront currency code. |
+| `type` | The product type reported by the store SDK. |
+| `platform` | `"ios"` or `"android"`. |
+| `googlePlayOfferToken` | Android only — the offer token used when purchasing. |
+
+<Callout type="info" title="Always render displayPrice">
+  Prefer `displayPrice` over formatting `price` yourself. The store formats it for the user's
+  storefront — correct currency symbol, decimal separators, and locale conventions — which is very
+  hard to get right manually.
+</Callout>
+
+### Product Types
+
+In your schema, every product is one of three types:
+
+- **`subscription`** — auto-renewing subscription.
+- **`one-time`** — a single purchase that permanently unlocks its perks.
+- **`one-time-consumable`** — a purchase that can be bought repeatedly (credits, coins, boosts).
+
+## Complete Paywall Example
+
+A full paywall with product selection and purchase. Track the selection by slug and resolve the selected product from the list — this avoids having to store the product object in state:
+
+```tsx title="app/paywall.tsx"
+import { useState } from "react";
+import { Button, Text, TouchableOpacity, View } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+export default function PaywallScreen() {
+  const [selectedSlug, setSelectedSlug] = useState<string | null>(null);
+
+  const { data: products, isLoading: areProductsLoading } = voidhash.useProducts();
+  const { purchase, isLoading: isPurchasing } = voidhash.usePurchase();
+
+  if (areProductsLoading) {
+    return <LoadingSpinner />;
+  }
+
+  const selectedProduct = products.toList().find((product) => product.slug === selectedSlug) ?? null;
+
+  const handlePurchase = () => {
+    if (!selectedProduct) {
+      return;
+    }
+    purchase(selectedProduct);
+  };
+
+  return (
+    <View>
+      <Text>Choose a plan to continue</Text>
+
+      <View>
+        {products.toList().map((product) => (
+          <TouchableOpacity key={product.slug} onPress={() => setSelectedSlug(product.slug)}>
+            <View>
+              <Text>{product.name}</Text>
+              <Text>{product.displayPrice}</Text>
+            </View>
+          </TouchableOpacity>
+        ))}
+      </View>
+
+      <Button
+        onPress={handlePurchase}
+        disabled={!selectedProduct || isPurchasing}
+        title={isPurchasing ? "Purchasing..." : "Continue"}
+      />
+    </View>
+  );
+}
+```
+
+See [Making Purchases](/react-native/purchases) for the full purchase flow, including callbacks and error handling.
+
+## Troubleshooting: a Product Is `null`
+
+The products record always contains an entry for every product in your schema, but the value is `null` when the store SDK doesn't know about that product. Since `toList()` filters out `null` entries, this often shows up as a paywall with missing (or no) products.
+
+<Callout type="warn" title="null products almost always mean store misconfiguration">
+  Voidhash asks the store for the product IDs configured in your schema. If the store doesn't
+  return metadata for one, the most common causes are:
+
+  - The store product ID in your schema (`appleAppStore.productId`, or `googlePlay.productId` +
+    `basePlanId`) doesn't exactly match the ID in App Store Connect / Google Play Console.
+  - The product hasn't been created yet, or isn't in a ready/active state in the store console.
+  - The product has no provider configuration for the current platform — a product configured only
+    for `appleAppStore` resolves to `null` on Android, and vice versa.
+  - Store-side prerequisites are missing, such as unsigned paid app agreements in App Store Connect
+    or an app that hasn't been published to a testing track in Google Play Console.
+</Callout>
+
+Fetched store products are cached for up to 24 hours. If you've just fixed the store-side configuration and still see `null`, clear the app's storage or reinstall the development build to force a fresh fetch. Changing the schema itself (for example, correcting a product ID) invalidates the cache automatically.
+
+## Fetching Imperatively
+
+Outside of React, use `client.getProducts()`. It returns the same slug-keyed record (without the `get`/`toList` helpers) and rejects with a `FAILED_TO_GET_PRODUCTS` error if the fetch fails:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+const products = await voidhash.client.getProducts();
+const monthly = products["pro-monthly"];
+```
+
+The client must be initialized first — calling it before the Provider has mounted throws a `VOIDHASH_CLIENT_NOT_INITIALIZED` error. See [Error Handling](/react-native/error-handling) for the error conventions.
+
+## Next Steps
+
+- [Making Purchases](/react-native/purchases) — purchase a product with `usePurchase`.
+- [Subscription Status](/react-native/subscription-status) — check what the user has access to after buying.
+- [Displaying Paywalls](/react-native/displaying-paywalls) — let Voidhash render a remotely configured paywall instead.
diff --git a/apps/www/src/features/docs/content/docs/react-native/error-handling.mdx b/apps/www/src/features/docs/content/docs/react-native/error-handling.mdx
new file mode 100644
index 000000000..7774326df
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/error-handling.mdx
@@ -0,0 +1,260 @@
+---
+title: Error Handling
+description: Understand the errors the Voidhash SDK throws and how to handle them in your app.
+---
+
+Every async method on the Voidhash client rejects with a `VoidhashError` — a plain `Error`
+subclass whose message follows one stable convention:
+
+```
+CODE: original message
+```
+
+The `CODE` prefix tells you *which operation* failed (for example `FAILED_TO_PURCHASE`), and the
+rest of the message tells you *why*. The original error is preserved on `error.cause`, so nothing
+is lost when the SDK wraps a native StoreKit or Play Billing failure.
+
+<Callout type="info" title="Match on the message, not the class">
+  The SDK's error classes are internal and not exported from the package root, so `instanceof`
+  checks against specific subclasses won't work in your app. Matching on the stable `CODE` prefix
+  and message strings is the supported approach. For purchase failures, the wrapped `error.cause`
+  additionally carries a stable `_tag` (for example `UserCancelledError`) you can branch on — see
+  [Purchases](/docs/react-native/purchases).
+</Callout>
+
+## Enable Debug Logging First
+
+Before digging into any error, turn on `debug` in your client options. It logs every HTTP request
+and response the SDK makes (with sensitive headers redacted), which almost always reveals the real
+cause faster than parsing error messages:
+
+```ts title="utils/voidhash/client.ts"
+import { createVoidhashClient } from "@voidhash/react-native";
+
+export const voidhash = createVoidhashClient("vh_pk_...", {
+  debug: __DEV__,
+});
+```
+
+See [Configuration](/docs/react-native/configuration) for the full list of client options.
+
+## Error Codes
+
+Each client method wraps failures with its own code:
+
+| Code | Thrown by |
+| --- | --- |
+| `FAILED_TO_INITIALIZE_VOIDHASH_CLIENT` | `init()` (called by the Provider on mount) |
+| `FAILED_TO_END_VOIDHASH_CLIENT` | `end()` |
+| `FAILED_TO_GET_CURRENT_PERSON` | `getCurrentPerson()` |
+| `FAILED_TO_SET_PERSON_ATTRIBUTES` | `setPersonAttributes()` |
+| `FAILED_TO_SET_PERSON_ATTRIBUTES_SYNC` | `setPersonAttributesSync()` |
+| `FAILED_TO_GET_DISTINCT_ID` | `getDistinctId()` |
+| `FAILED_TO_IDENTIFY` | `identify()` |
+| `FAILED_TO_RESET` | `reset()` |
+| `FAILED_TO_SIGN_OUT` | `signOut()` |
+| `FAILED_TO_GET_FEATURE_FLAGS` | `getFeatureFlags()` |
+| `FAILED_TO_GET_PAYWALL_FOR_LOCATION` | `getPaywallForLocation()` |
+| `FAILED_TO_GET_PRODUCTS` | `getProducts()` |
+| `FAILED_TO_PURCHASE` | `purchase()` |
+| `FAILED_TO_RESTORE_PURCHASES` | `restorePurchases()` |
+| `FAILED_TO_FLUSH_ANALYTICS` | `flush()` |
+| `FAILED_TO_PRESENT_CODE_REDEMPTION_SHEET` | `iosPresentCodeRedemptionSheet()` |
+| `FAILED_TO_SHOW_MANAGE_SUBSCRIPTIONS` | `iosShowManageSubscriptions()` |
+| `VOIDHASH_CLIENT_NOT_INITIALIZED` | Any client method called before initialization completed |
+
+`VOIDHASH_CLIENT_NOT_INITIALIZED` is the one you'll hit most often while wiring things up: it means
+a method ran before the Provider finished `init()`. The built-in hooks gate on initialization
+automatically — if you call `voidhash.client` methods directly, check `isInitialized` first:
+
+```tsx
+const { client, isInitialized } = voidhash.useVoidhash();
+
+if (isInitialized) {
+  await client.restorePurchases();
+}
+```
+
+## Handling Purchase Errors
+
+Purchases are where error handling actually matters for UX: a cancelled purchase is not a failure,
+and a pending purchase is not a success. All three outcomes reject with `FAILED_TO_PURCHASE`, so
+distinguish them by the rest of the message:
+
+| Outcome | Message contains | What to do |
+| --- | --- | --- |
+| User cancelled | `User cancelled` | Nothing — the user changed their mind. Don't show an error. |
+| Purchase pending | `pending` | Payment is deferred (e.g. Ask to Buy / parental approval). Tell the user access unlocks once it's approved. |
+| Product not found | `Product not found` | The store SDK doesn't know the product — check your store configuration and product identifiers. |
+| Anything else | — | Show a generic failure message and offer retry. |
+
+A small helper keeps this out of your components:
+
+```ts title="utils/voidhash/purchase-outcome.ts"
+export type PurchaseFailure = "cancelled" | "pending" | "not-found" | "failed";
+
+/** Classifies a rejected purchase by its stable message parts. */
+export function getPurchaseFailure(error: unknown): PurchaseFailure {
+  if (!(error instanceof Error)) return "failed";
+  if (error.message.includes("User cancelled")) return "cancelled";
+  if (error.message.includes("pending")) return "pending";
+  if (error.message.includes("Product not found")) return "not-found";
+  return "failed";
+}
+```
+
+### With the `usePurchase` Hook
+
+The hook surfaces failures through `onError` and its `error` state:
+
+```tsx title="app/paywall.tsx"
+import { Alert } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+import { getPurchaseFailure } from "utils/voidhash/purchase-outcome";
+
+const { purchase, isLoading } = voidhash.usePurchase({
+  onSuccess: () => {
+    // Entitlements are refreshed automatically — dismiss the paywall
+  },
+  onError: (error) => {
+    switch (getPurchaseFailure(error)) {
+      case "cancelled":
+        return;
+      case "pending":
+        Alert.alert("Almost there", "Your purchase is awaiting approval.");
+        return;
+      default:
+        Alert.alert("Purchase failed", "Please try again.");
+    }
+  },
+});
+```
+
+### With try/catch
+
+Calling the client directly works the same way:
+
+```tsx
+try {
+  await voidhash.client.purchase(product, {});
+} catch (error) {
+  if (getPurchaseFailure(error) === "cancelled") {
+    return;
+  }
+  console.error(error);
+}
+```
+
+<Callout type="info" title="Pending purchases resolve themselves">
+  When a purchase is pending, the SDK's transaction observer picks the transaction up in the
+  background once the store completes it — you don't need to retry. The person's entitlements
+  update on the next sync. See [Purchases](/docs/react-native/purchases).
+</Callout>
+
+If you present paywalls with `usePaywallByLocation`, purchase and restore failures triggered from
+inside the paywall arrive through its `onError(error, { action })` callback instead, where
+`action` is `"purchase"` or `"restore"` — see
+[Displaying Paywalls](/docs/react-native/displaying-paywalls).
+
+## Errors Thrown Outside the Code Convention
+
+A few errors are thrown directly instead of being wrapped with an operation code:
+
+### Scheme Not Set
+
+`createVoidhashClient` throws synchronously — before your app even renders — with the message
+`Scheme is not set in expo.config.ts.` when no deep-link scheme is available. Set `scheme` in your
+Expo app config, or pass the `scheme` option explicitly. See
+[Configuration](/docs/react-native/configuration).
+
+### Read-Only Mode
+
+With `readOnly: true` (observer mode), `purchase()` and `setPersonAttributesSync()` throw
+immediately with:
+
+```
+Read-only mode is enabled. Purchasing is disabled for observer-only operation.
+```
+
+This is by design — in observer mode Voidhash watches transactions made by another billing SDK and
+must never initiate or acknowledge purchases itself. See
+[Observer Mode](/docs/react-native/observer-mode).
+
+### Schema Fetch Failure
+
+On a cold start with no cached schema and an unreachable server, `init()` fails and surfaces as
+`FAILED_TO_INITIALIZE_VOIDHASH_CLIENT` with the schema fetch failure as its cause. Once a schema
+has been fetched successfully, it is cached and revalidated in the background, so this only happens
+on the very first launch without connectivity.
+
+### Unsupported Platform
+
+The iOS-only methods (`iosPresentCodeRedemptionSheet()`, `iosShowManageSubscriptions()`) fail on
+Android with an `Unsupported platform: android` message under their respective codes. Gate them
+behind `Platform.OS === "ios"`.
+
+## Native Error Codes
+
+Failures that originate in the native StoreKit (Swift) or Play Billing (Kotlin) layer carry their
+own `ERROR_CODE: message` convention. The SDK translates the common ones (`USER_CANCELLED`,
+`PURCHASE_PENDING`, product-lookup failures) into the friendly messages shown above; the rest pass
+through on the error's `cause` chain, so you'll mostly see these codes in logs.
+
+iOS (StoreKit):
+
+| Code | Meaning |
+| --- | --- |
+| `STOREKIT_NOT_INITIALIZED` | StoreKit connection not initialized |
+| `USER_CANCELLED` | User cancelled the purchase |
+| `PURCHASE_PENDING` | The payment was deferred |
+| `PURCHASE_FAILED` | Purchase operation failed |
+| `PURCHASE_UNKNOWN_RESULT` | Unknown purchase result |
+| `INVALID_PRODUCT_ID` | Product not found in the store |
+| `TRANSACTION_NOT_FOUND` | Transaction not found |
+| `TRANSACTION_VERIFICATION_FAILED` | Transaction verification failed |
+| `WINDOW_SCENE_NOT_FOUND` | No window scene available for UI presentation |
+| `METHOD_NOT_AVAILABLE_TVOS` | Method is not available on tvOS |
+
+Android (Play Billing):
+
+| Code | Meaning |
+| --- | --- |
+| `GOOGLE_BILLING_NOT_INITIALIZED` | Google Billing connection not initialized |
+| `BILLING_ERROR` | Google Billing operation failed |
+| `SKU_NOT_FOUND` | SKU not found — fetch products first |
+| `SKU_OFFER_MISMATCH` | SKU count doesn't match offer tokens for subscriptions |
+| `EMPTY_SKU_LIST` | No SKUs provided for the product query |
+| `CURRENT_ACTIVITY_NULL` | No current activity to present from |
+
+Both platforms surface `PAYWALL_PRESENTER_NOT_AVAILABLE` when the native paywall presenter can't
+be reached.
+
+To dig a native code out of a wrapped error, walk the `cause` chain:
+
+```ts
+/** Returns the deepest `CODE: message` code found on the error's cause chain. */
+export function getDeepErrorCode(error: unknown): string | null {
+  let code: string | null = null;
+  let current: unknown = error;
+  while (current instanceof Error) {
+    const match = current.message.match(/^([A-Z][A-Z0-9_]+):/);
+    if (match) code = match[1];
+    current = current.cause;
+  }
+  return code;
+}
+```
+
+## Swallowing Side-Effect Errors
+
+If you'd rather not wrap every fire-and-forget call in try/catch during early development, the
+`unstable_swallowErrors` client option converts rejections from side-effect methods (`init`, `end`,
+`identify`, `reset`, `signOut`, `restorePurchases`, `flush`, `setPersonAttributes`, and the
+iOS-only sheet methods) into `console.warn` output instead. Methods that return data your app
+depends on — `getCurrentPerson`, `getProducts`, `getFeatureFlags`, `getPaywallForLocation`,
+`purchase`, `setPersonAttributesSync` — still reject normally.
+
+<Callout type="warn" title="Alpha option">
+  As the `unstable_` prefix suggests, this option's behavior may change between releases. Prefer
+  explicit error handling for production builds.
+</Callout>
diff --git a/apps/www/src/features/docs/content/docs/react-native/feature-flags.mdx b/apps/www/src/features/docs/content/docs/react-native/feature-flags.mdx
new file mode 100644
index 000000000..044ccf03f
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/feature-flags.mdx
@@ -0,0 +1,168 @@
+---
+title: Feature Flags
+description: Evaluate feature flags for the current person and gate features with isEnabled and getVariant.
+---
+
+Voidhash evaluates feature flags on the server for the current person and exposes the results
+through the `useFeatureFlags` hook (or `client.getFeatureFlags()` outside of React). Use flags to
+gate features behind a boolean, roll out variants, or ship remote configuration via flag payloads.
+
+## Evaluating Flags
+
+Call `useFeatureFlags` from your client object. Without arguments it evaluates all flags; pass an
+array of flag keys to evaluate only the flags you need:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+const { data, isEnabled, getVariant, isLoading, error, refetch } = voidhash.useFeatureFlags([
+  "new-onboarding",
+  "paywall-experiment",
+]);
+```
+
+The hook returns:
+
+- `data.flags` — the evaluated flags (empty array while nothing is loaded yet)
+- `isEnabled(key)` — `true` if the flag exists and is enabled, `false` otherwise
+- `getVariant(key)` — `{ enabled, variantKey, payload }` for the flag, or `null` if it wasn't evaluated
+- `isLoading` — `true` while the evaluation request is in flight
+- `error` — a `VoidhashError` if evaluation failed (see [Error Handling](/react-native/error-handling))
+- `refetch()` — re-runs the evaluation (still subject to the cache, see below)
+
+<Callout type="info" title="Keep the flagKeys array stable">
+  The hook re-fetches whenever the `flagKeys` array identity changes. Define the array outside your
+  component (or memoize it with `useMemo`) instead of passing a fresh inline literal on every
+  render.
+</Callout>
+
+## Flag Shape
+
+Each entry in `data.flags` has the following shape:
+
+```ts
+{
+  key: string;
+  enabled: boolean;
+  variantKey: string | null;
+  payload: unknown | null;
+}
+```
+
+- `key` — the flag key you defined in Voidhash
+- `enabled` — whether the flag is on for the current person
+- `variantKey` — the assigned variant for multivariate flags, `null` for plain boolean flags
+- `payload` — an optional JSON payload attached to the flag or variant, `null` if none
+
+## Boolean Gating with isEnabled
+
+The most common case: show or hide a feature based on a flag. `isEnabled` returns `false` for
+flags that are disabled, not evaluated, or still loading — so the gated feature stays hidden until
+the flag comes back enabled:
+
+```tsx title="app/home.tsx"
+import { Text, View } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+const FLAG_KEYS = ["new-onboarding"];
+
+export default function HomeScreen() {
+  const { isEnabled, isLoading } = voidhash.useFeatureFlags(FLAG_KEYS);
+
+  if (isLoading) {
+    return <LoadingSpinner />;
+  }
+
+  return (
+    <View>
+      {isEnabled("new-onboarding") ? <NewOnboarding /> : <ClassicOnboarding />}
+      <Text>Welcome back!</Text>
+    </View>
+  );
+}
+```
+
+## Variants and Payloads with getVariant
+
+For multivariate flags, use `getVariant` to branch on the assigned variant and read its payload.
+`getVariant` returns `null` when the flag hasn't been evaluated, so handle that case explicitly:
+
+```tsx title="app/paywall-entry.tsx"
+import { voidhash } from "utils/voidhash/client";
+
+const FLAG_KEYS = ["paywall-experiment"];
+
+export default function PaywallEntry() {
+  const { getVariant, isLoading } = voidhash.useFeatureFlags(FLAG_KEYS);
+
+  if (isLoading) {
+    return <LoadingSpinner />;
+  }
+
+  const variant = getVariant("paywall-experiment");
+
+  if (!variant?.enabled) {
+    return <DefaultPaywall />;
+  }
+
+  switch (variant.variantKey) {
+    case "discount": {
+      // Payloads are untyped JSON — validate before use.
+      const payload = variant.payload as { discountPercent: number } | null;
+      return <DiscountPaywall discountPercent={payload?.discountPercent ?? 10} />;
+    }
+    case "trial-focus":
+      return <TrialFocusPaywall />;
+    default:
+      return <DefaultPaywall />;
+  }
+}
+```
+
+## Fetching Flags Imperatively
+
+Outside of React — or when you need flag values inside an event handler — call
+`client.getFeatureFlags()` directly. It resolves to the same `{ flags }` result:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+const handleCheckout = async () => {
+  const { flags } = await voidhash.client.getFeatureFlags(["express-checkout"]);
+  const expressCheckout = flags.find((flag) => flag.key === "express-checkout");
+
+  if (expressCheckout?.enabled) {
+    startExpressCheckout();
+  } else {
+    startClassicCheckout();
+  }
+};
+```
+
+Like all client methods, `getFeatureFlags` requires an initialized client (it throws
+`VOIDHASH_CLIENT_NOT_INITIALIZED` before the Provider has finished initializing) and rejects with
+a `VoidhashError` carrying the `FAILED_TO_GET_FEATURE_FLAGS` code if evaluation fails.
+
+## Caching
+
+Flag evaluations are cached for **5 minutes** per requested key set. Repeated calls with the same
+keys — including `refetch()` and re-mounts of the hook — return the cached result until it
+expires, then hit the server again. Two hooks requesting the same keys (in any order) share the
+same underlying state, so they update together.
+
+If you need a flag change to apply mid-session, call `refetch()` after the cache window has
+passed, or design the feature so a fresh evaluation on the next app open is acceptable.
+
+## Flags and Identity
+
+Flag evaluations are scoped to the current person, so the SDK clears flag state whenever the
+identity changes:
+
+- `client.identify(...)` — the previous person's flag state is cleared
+- `client.reset()` / `client.signOut()` — flag state and the evaluation cache are cleared along
+  with the rest of the client cache
+
+After an identity change, `data.flags` is empty, `isEnabled` returns `false`, and `getVariant`
+returns `null` until the next evaluation completes — features gated behind flags default to off
+rather than leaking the previous person's flag state. See
+[Identifying Users](/react-native/identifying-users) for the full identity lifecycle.
diff --git a/apps/www/src/features/docs/content/docs/react-native/identifying-users.mdx b/apps/www/src/features/docs/content/docs/react-native/identifying-users.mdx
new file mode 100644
index 000000000..97a232b41
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/identifying-users.mdx
@@ -0,0 +1,176 @@
+---
+title: Identifying Users
+description: Learn how Voidhash tracks anonymous users and how to link them to your own user accounts.
+---
+
+Every device running your app gets a **distinct id** — the identifier Voidhash uses to attribute
+purchases, subscriptions, entitlements, feature flag evaluations, and analytics events to a person.
+Users start out anonymous; if your app has accounts, you can link the anonymous person to your own
+user id with `identify`.
+
+## Anonymous vs identified users
+
+|  | Anonymous | Identified |
+| --- | --- | --- |
+| Distinct id | Auto-generated, prefixed `vh:anon:` | Your `externalUserId` |
+| Setup required | None — works out of the box | Call `identify()` after sign-in |
+| Persistence | Stored on-device, survives app restarts | Tied to your account system |
+| After reinstall | A new anonymous id is minted | Same person once you `identify()` again |
+| Across devices | Each device is a separate person | Same person on every device |
+| Best for | Apps without accounts, pre-login usage | Apps with authentication |
+
+You don't have to choose one model globally. The common pattern is: let users purchase anonymously,
+then call `identify` when (or if) they sign in — their history moves with them.
+
+## Anonymous users
+
+No setup is needed. On first launch the SDK generates an anonymous distinct id with the `vh:anon:`
+prefix, persists it in on-device storage, and reuses it on every subsequent launch. All events and
+purchases attribute to this id until you identify the user or reset the identity.
+
+If you already have a distinct id from a previous session or another source, you can pass it at
+client creation time with the `distinctId` option — see
+[Configuration](/docs/react-native/configuration).
+
+## Identifying a user
+
+After a user signs in with your authentication system, call `identify` with a unique identifier
+from your backend. You can attach the reserved `email` and `name` attributes in the same call:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+const handleSignIn = async (email: string) => {
+  // Your authentication logic
+  const user = await yourAuthService.signIn(email);
+
+  // Link the current (anonymous) person to your user id
+  await voidhash.client.identify(user.id, {
+    email: user.email,
+    name: user.name,
+  });
+};
+```
+
+The options object is required — pass `{}` if you don't want to set `email` or `name`.
+
+<Callout type="warn" title="Use unique, hard-to-guess identifiers">
+  The identifier should be unique and hard to guess (like a UUID). Never use predictable values like
+  sequential IDs or email addresses as the primary identifier.
+</Callout>
+
+Calling `identify` does a few things, in order:
+
+- **Flushes queued analytics first.** Any events captured before the switch are delivered under the
+  pre-switch distinct id, so your pre-login activity stays attributed to the anonymous person.
+- Calls the Voidhash server to link the anonymous person to your `externalUserId` and returns the
+  updated person.
+- Switches the persisted distinct id to `externalUserId` for all subsequent calls.
+- Clears cached feature flag state, since flag evaluations are identity-scoped. Flags are
+  re-evaluated for the new identity on the next read.
+
+### Migration state: `snapshotContext.mode`
+
+When an anonymous person with existing history is identified, the server merges that history into
+the identified person in the background. While the migration is in flight, person snapshots
+returned by `getCurrentPerson` / `useCurrentPerson` report this through `snapshotContext`:
+
+- `mode: "persisted"` — the normal state; the snapshot reflects a single, fully settled person.
+- `mode: "temporary_pending_transfer"` — an identify migration is still running. The snapshot is a
+  merged view of both persons; `snapshotContext.includedPersonIds` lists them and
+  `snapshotContext.migrationJobId` references the transfer job.
+
+You usually don't need to act on this — entitlements are already merged in the snapshot — but it
+explains why `personId` values can differ between snapshots taken during and after a migration.
+
+## Signing out
+
+When a user signs out of your app, sign them out of Voidhash too:
+
+```tsx
+const handleSignOut = async () => {
+  // Your sign-out logic
+  await yourAuthService.signOut();
+
+  // Sign out from Voidhash
+  await voidhash.client.signOut();
+};
+```
+
+`signOut()` captures the built-in `$sign_out` analytics event, flushes the queue so it (and any
+pending events) attribute to the signing-out identity, and then resets the identity. The next call
+that needs a distinct id mints a fresh anonymous `vh:anon:` id.
+
+### `reset()`
+
+`reset()` is the lower-level primitive: it flushes queued analytics under the current identity,
+clears the on-device cache and person/feature-flag state, and mints a fresh anonymous distinct id —
+without capturing `$sign_out`. Prefer `signOut()` for user-initiated sign-outs; use `reset()` when
+you want to discard the current identity silently.
+
+## Reading the current distinct id
+
+```tsx
+const distinctId = await voidhash.client.getDistinctId();
+```
+
+Returns the active distinct id — either the anonymous `vh:anon:` id or the `externalUserId` you
+identified with. Useful for logging, support tooling, or passing to your backend.
+
+## Person attributes
+
+Beyond `email` and `name` at identify time, you can attach attributes to the current person at any
+point — anonymous or identified. There are two variants:
+
+|  | `setPersonAttributes` | `setPersonAttributesSync` |
+| --- | --- | --- |
+| Delivery | Fire-and-forget via the analytics queue (`$set`) | Immediate network round-trip |
+| Returns | `void` | The updated person snapshot |
+| Read-only mode | Allowed | Blocked (throws) |
+| Use when | You just want the data recorded | You need the updated person right away |
+
+### `setPersonAttributes`
+
+The default choice. The update rides the analytics queue as a `$set` event and is delivered by the
+queue's normal batching — call `flush()` if you need it delivered promptly:
+
+```tsx
+await voidhash.client.setPersonAttributes({
+  email: "ada@example.com",
+  name: "Ada Lovelace",
+  favorite_team: "sharks",
+  onboarding_completed: true,
+});
+```
+
+`email` and `name` are **reserved keys** that map to the dedicated person fields on the server.
+Every other key is stored as a **custom trait**. Values can be strings, numbers, booleans, or
+`null`.
+
+### `setPersonAttributesSync`
+
+Performs the network sync immediately and returns the updated person snapshot:
+
+```tsx
+const person = await voidhash.client.setPersonAttributesSync({
+  email: "ada@example.com",
+});
+
+console.log(person.email);
+```
+
+<Callout type="info" title="Blocked in read-only mode">
+  `setPersonAttributesSync` is a server write, so it is blocked when the client runs with
+  `readOnly: true` — mirroring `purchase`. The queued `setPersonAttributes` variant is the one to
+  use in observer mode.
+</Callout>
+
+## Next steps
+
+- [Subscription Status](/docs/react-native/subscription-status) — read the current person's
+  entitlements and subscriptions.
+- [Analytics](/docs/react-native/analytics) — capture custom events and understand the automatic
+  `$app_*` lifecycle events.
+- [Configuration](/docs/react-native/configuration) — `distinctId`, `readOnly`, and other client
+  options.
+- [Error Handling](/docs/react-native/error-handling) — how identity methods surface failures.
diff --git a/apps/www/src/features/docs/content/docs/react-native/installation.mdx b/apps/www/src/features/docs/content/docs/react-native/installation.mdx
new file mode 100644
index 000000000..efe78d643
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/installation.mdx
@@ -0,0 +1,129 @@
+---
+title: Installation
+description: Add the Voidhash React Native SDK and its native dependencies to your Expo or React Native project.
+---
+
+The Voidhash React Native SDK (`@voidhash/react-native`) ships native modules built with [Nitro Modules](https://nitro.margelo.com) — StoreKit 2 on iOS and Play Billing on Android — so installing it involves a native build step, not just a JavaScript dependency.
+
+<Callout type="info" title="Starting from scratch?">
+  If you're setting up a brand-new project, [`voidhash-cli init`](/cli/init) bootstraps the SDK,
+  configuration, and type generation for you in one command. The steps below cover adding the SDK
+  to an existing app by hand.
+</Callout>
+
+<Steps>
+
+<Step>
+### Install the Package
+
+Install the SDK together with its peer dependencies:
+
+```package-install
+npm i @voidhash/react-native react-native-nitro-modules@0.26.4 @react-native-async-storage/async-storage effect expo-constants expo-linking
+```
+
+What each peer dependency is for:
+
+- `react-native-nitro-modules` — the native module system the SDK is built on. It must be **pinned to exactly `0.26.4`**; other versions are not binary-compatible with the shipped native code.
+- `@react-native-async-storage/async-storage` — backs the SDK's on-device cache (identity, person snapshot, schema, feature flags).
+- `effect` — the SDK's internal runtime.
+- `expo-constants` and `expo-linking` — used to read your app's deep-link scheme and handle purchase callback links.
+
+</Step>
+
+<Step>
+### Configure for iOS
+
+Install the native pods after adding the npm package:
+
+```package-install
+npx pod-install
+```
+
+If you're on Expo, you can skip this — `npx expo prebuild` (or an EAS build) runs pod installation for you.
+
+</Step>
+
+<Step>
+### Configure for Android
+
+No additional setup necessary. The native library is linked automatically.
+
+</Step>
+
+<Step>
+### Create a development build (Expo)
+
+<Callout type="warn" title="Expo Go is not supported">
+  A development build with `expo-dev-client` is **required**. Expo Go cannot load the Nitro native
+  modules the SDK depends on, so the app will fail at startup. After installing the SDK (or
+  changing native dependencies), rebuild your development client — hot reload alone won't pick up
+  native changes.
+</Callout>
+
+```package-install
+npx expo install expo-dev-client
+```
+
+Then build and run the development client:
+
+```package-install
+npx expo run:ios
+```
+
+See the [Expo documentation](https://docs.expo.dev/develop/development-builds/create-a-build/) for building on a device or via EAS.
+
+</Step>
+
+<Step>
+### Set a deep-link scheme
+
+The SDK uses deep links (`yourscheme://voidhash/callback/success` and `.../error`) to hand control back to your app after purchase flows. It resolves the scheme from your Expo config automatically:
+
+```json title="app.json"
+{
+  "expo": {
+    "scheme": "myapp"
+  }
+}
+```
+
+If your app config has no `scheme` (for example in a bare React Native project), pass it explicitly via the `scheme` client option:
+
+```ts
+import { createVoidhashClient } from "@voidhash/react-native";
+
+export const voidhash = createVoidhashClient("vh_pk_...", {
+  scheme: "myapp",
+});
+```
+
+If neither is set, `createVoidhashClient` throws a `SchemeNotSetError` at startup.
+
+</Step>
+
+<Step>
+### Filter callback links in Expo Router
+
+If you use Expo Router, the callback deep links from the previous step would otherwise be treated as routes and open a "not found" screen. The SDK ships a helper that filters them out — add it to your [`+native-intent`](https://docs.expo.dev/router/advanced/native-intent/) file:
+
+```tsx title="app/+native-intent.tsx"
+import { expoRouterWithVoidhashCallback } from "@voidhash/react-native";
+
+export function redirectSystemPath(options: { path: string; initial: boolean }) {
+  return expoRouterWithVoidhashCallback(options);
+}
+```
+
+The helper returns `null` for `voidhash/callback` paths (so the router ignores them) and passes every other path through unchanged.
+
+</Step>
+
+<Step>
+### Thats it! 🎉
+
+The SDK is installed. Continue to the [Quickstart](/react-native/quickstart) to create a client and wrap your app in the Provider, or see [Configuration](/react-native/configuration) for the full list of client options.
+
+</Step>
+
+</Steps>
diff --git a/apps/www/src/features/docs/content/docs/react-native/meta.yaml b/apps/www/src/features/docs/content/docs/react-native/meta.yaml
new file mode 100644
index 000000000..bc9be10d8
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/meta.yaml
@@ -0,0 +1,21 @@
+title: React Native SDK
+icon: Smartphone
+pages:
+  - "---Getting started---"
+  - overview
+  - installation
+  - quickstart
+  - configuration
+  - schema-and-types
+  - "---Paywalls & purchases---"
+  - displaying-paywalls
+  - displaying-products
+  - purchases
+  - subscription-status
+  - "---Users & data---"
+  - identifying-users
+  - feature-flags
+  - analytics
+  - "---Advanced---"
+  - observer-mode
+  - error-handling
diff --git a/apps/www/src/features/docs/content/docs/react-native/observer-mode.mdx b/apps/www/src/features/docs/content/docs/react-native/observer-mode.mdx
new file mode 100644
index 000000000..af94cdfe5
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/observer-mode.mdx
@@ -0,0 +1,141 @@
+---
+title: Observer Mode & Debugging
+description: Run Voidhash alongside another billing SDK with read-only observer mode, and debug integrations with HTTP logging and error swallowing.
+---
+
+Voidhash can run as the SDK that owns your purchases, or as a passive observer next to another
+billing SDK. This page covers the `readOnly` observer mode and the two debug toggles: `debug`
+HTTP logging and the `unstable_swallowErrors` alpha flag.
+
+## Observer Mode
+
+If another billing SDK (or your own StoreKit / Play Billing code) currently owns purchases in
+your app, enable observer mode with `readOnly: true`. Voidhash then watches store transactions
+and syncs them to the server, but never initiates purchases and never acknowledges or finishes
+transactions — that stays the responsibility of whichever SDK made the purchase.
+
+```ts title="utils/voidhash/client.ts"
+import { createVoidhashClient } from "@voidhash/react-native";
+
+export const voidhash = createVoidhashClient("vh_pk_...", {
+  readOnly: true,
+  scheme: "myapp",
+});
+```
+
+| Mode                        | Starts purchases | Syncs transactions to Voidhash | Acknowledges/finishes store transactions |
+| --------------------------- | ---------------- | ------------------------------ | ---------------------------------------- |
+| `readOnly: true`            | No               | Yes                            | No                                       |
+| `readOnly: false` (default) | Yes              | Yes                            | Yes (after successful server sync)       |
+
+Because observed transactions still sync, [person data](/react-native/subscription-status) stays
+accurate: entitlements and subscription status from `useCurrentPerson()` reflect purchases made
+through the other SDK.
+
+### What is blocked
+
+Methods that write on behalf of the user throw `ReadOnlyModePurchaseNotAllowedError` in observer
+mode:
+
+- `client.purchase(...)` — and by extension the `usePurchase` hook.
+- `client.setPersonAttributesSync(...)` — it performs a network write, mirroring `purchase`. The
+  fire-and-forget `setPersonAttributes(...)` is unaffected.
+
+Everything else works normally: `identify`, `getProducts` / `useProducts`, feature flags,
+analytics capture, and `restorePurchases()` (which reconciles observed transactions and refreshes
+the person, without acknowledging anything).
+
+### How observed transactions are synced
+
+- The SDK attaches the native purchase listener first during `init()`, so purchases completed by
+  the other SDK are observed as they happen.
+- A background reconciliation pass also runs after init — it does not block `init()`.
+- Reconciliation sources are pending transactions and active purchase history from the store.
+  Consumable products (`one-time-consumable`) are skipped during reconciliation.
+- The client dedupes by `platform + transactionId + purchaseDate`, and the server sync endpoint is
+  idempotent by store transaction identity, so retries and duplicates are tolerated.
+- Android transactions without a purchase token are skipped.
+
+<Callout type="info" title="Acknowledge-after-sync in normal mode">
+  Outside observer mode, Voidhash acknowledges/finishes a store transaction only after the server
+  has accepted the sync. In observer mode this step is skipped entirely — if nothing in your app
+  finishes the transaction, the store will eventually refund it, so make sure the owning SDK still
+  does its job.
+</Callout>
+
+## HTTP Debug Logging
+
+Enable verbose HTTP logging when debugging request/response flow between the SDK and the Voidhash
+API:
+
+```ts title="utils/voidhash/client.ts"
+export const voidhash = createVoidhashClient("vh_pk_...", {
+  debug: true,
+  scheme: "myapp",
+});
+```
+
+Every request the SDK makes is logged to the console under the `[voidhash:http]` tag:
+
+- **Requests**: method, URL, headers, and a body summary (text-like bodies are previewed, binary
+  payloads are not decoded).
+- **Responses**: status, headers, and request duration in milliseconds.
+- **Errors**: the failure reason and HTTP status when available.
+
+Sensitive header values are redacted before logging — any header whose name matches
+`authorization`, `cookie`, `secret`, `password`, `token`, or `api-key` is replaced with
+`[REDACTED]`. Header values and body previews are also truncated, so large payloads don't flood
+your logs.
+
+<Callout type="warn" title="Development only">
+  Debug logs still include request URLs, non-sensitive headers, and body previews. Keep
+  `debug: true` out of production builds.
+</Callout>
+
+## Swallowing Errors (Alpha)
+
+For early-alpha integrations — typically observer-style setups where Voidhash runs in the
+background and must never crash a flow it doesn't own — you can enable unstable side-effect error
+swallowing:
+
+```ts title="utils/voidhash/client.ts"
+export const voidhash = createVoidhashClient("vh_pk_...", {
+  readOnly: true,
+  scheme: "myapp",
+  unstable_swallowErrors: true,
+});
+```
+
+With `unstable_swallowErrors: true`, side-effect methods log a
+`[voidhash] swallowed error in <operation>` warning instead of rejecting:
+
+- `init()`
+- `end()`
+- `identify(...)`
+- `reset()`
+- `signOut()`
+- `setPersonAttributes(...)`
+- `restorePurchases()`
+- `flush()`
+- `iosPresentCodeRedemptionSheet()`
+- `iosShowManageSubscriptions()`
+
+Methods that return data you act on remain strict and still reject on failure, regardless of the
+flag:
+
+- `getCurrentPerson(...)`
+- `setPersonAttributesSync(...)`
+- `getDistinctId()`
+- `getFeatureFlags(...)`
+- `getPaywallForLocation(...)`
+- `getProducts()`
+- `purchase(...)`
+
+<Callout type="warn" title="Intentionally unstable">
+  The `unstable_` prefix is honest — this behavior may change or disappear in any release. It is
+  meant for background/observer-style alpha integrations, not for apps where Voidhash handles the
+  core purchase flow. If you rely on catching errors, see
+  [Error Handling](/react-native/error-handling) for the error shapes the SDK throws.
+</Callout>
+
+For the full list of client options, see [Configuration](/react-native/configuration).
diff --git a/apps/www/src/features/docs/content/docs/react-native/overview.mdx b/apps/www/src/features/docs/content/docs/react-native/overview.mdx
new file mode 100644
index 000000000..69e267ef7
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/overview.mdx
@@ -0,0 +1,98 @@
+---
+title: Overview
+description: What the Voidhash React Native SDK is, what you need to run it, and where to start.
+---
+
+`@voidhash/react-native` is the Voidhash SDK for in-app purchases and subscriptions in React
+Native apps. It talks to the stores natively — StoreKit 2 on iOS and Play Billing on Android —
+through [Nitro Modules](https://nitro.margelo.com), so purchases run in Swift and Kotlin, not in a
+JavaScript wrapper. On top of the purchase flow it ships a native full-screen paywall presenter
+that preloads and displays the paywalls you build in Voidhash Studio, and built-in product
+analytics so purchase events and your own custom events land in the same place.
+
+Everything is verified server-side: the SDK syncs every transaction to Voidhash, and store
+transactions are only finished/acknowledged after a successful server sync. Your app reads the
+result — active subscriptions and unlocked perks — from the **Person**, not from raw store
+receipts.
+
+## Requirements
+
+- **Expo development build.** The SDK contains native code, so it cannot run in Expo Go. You need
+  a [development build](https://docs.expo.dev/develop/development-builds/create-a-build/)
+  (expo-dev-client) or a bare React Native app.
+- **`react-native-nitro-modules@0.26.4`** — an exact-version peer dependency. Install precisely
+  this version; a range will not resolve correctly against the SDK's generated native bindings.
+- **`effect`** and **`@react-native-async-storage/async-storage`** (`^1.24.0` or `^2.0.0`) as peer
+  dependencies. The SDK is built on Effect internally, and AsyncStorage backs its on-device cache.
+- **Expo modules**: `expo`, `expo-constants`, and `expo-linking` are peers used for configuration
+  and deep-link callbacks.
+- **`voidhash-cli`** (optional) — only needed if you want generated types, so product, perk, and
+  location slugs autocomplete instead of being plain strings.
+
+<Callout type="info" title="Rebuild after installing">
+  Adding the SDK adds native code. After installing, rebuild your development client — a Metro
+  reload is not enough to pick up new native modules.
+</Callout>
+
+## Get Started
+
+The pages in this section are ordered as a path. Follow them in order:
+
+1. **[Install the SDK](/docs/react-native/installation)** — add `@voidhash/react-native` and its
+   peer dependencies, then create a development build.
+2. **[Quickstart](/docs/react-native/quickstart)** — create the client with your publishable key,
+   wrap your app in the `Provider`, and show your first paywall.
+3. **[Check subscription status](/docs/react-native/subscription-status)** — read the current
+   person's entitlements and subscriptions to gate features.
+4. **[Identify users](/docs/react-native/identifying-users)** *(optional)* — link the anonymous
+   person to your own user ID once someone signs in.
+
+From there, the rest of the section covers individual features in depth:
+[displaying paywalls](/docs/react-native/displaying-paywalls),
+[making purchases](/docs/react-native/purchases),
+[feature flags](/docs/react-native/feature-flags),
+[analytics](/docs/react-native/analytics),
+[observer mode](/docs/react-native/observer-mode) for coexisting with another billing SDK, and
+[error handling](/docs/react-native/error-handling).
+
+## Main Concepts
+
+A few terms come up on every page. Learn them once here.
+
+### Product
+
+Something you sell: a `subscription`, a `one-time` purchase, or a `one-time-consumable`. Each
+product has a slug you reference in code and per-store configuration mapping it to an App Store
+product ID and a Google Play product ID (plus base plan for subscriptions). Fetch them with
+`useProducts()` — the SDK merges your Voidhash configuration with live store data like localized
+prices.
+
+### Perk (Entitlement)
+
+What a product unlocks. Instead of checking "did they buy the monthly or the yearly plan?", you
+check "does this person have the `premium` perk?". Perks decouple your feature gates from your
+pricing, so you can restructure products without touching gating code. A person's active perks
+appear as entitlement grants on the [Person](/docs/react-native/subscription-status).
+
+### Paywall Location
+
+A named slot in your app where a paywall can appear — for example `onboarding` or `settings`.
+Your code asks for the paywall at a location; which paywall actually shows is decided in Voidhash,
+so you can swap designs and run experiments without shipping an app update. See
+[Displaying Paywalls](/docs/react-native/displaying-paywalls).
+
+### Person
+
+The user, as Voidhash sees them. Every install starts as an anonymous person with a generated
+distinct ID; calling `identify()` links them to your own user ID. The person snapshot carries
+entitlement grants, the current subscription state, and purchase history — it is the single
+source of truth for "what does this user have access to". See
+[Identifying Users](/docs/react-native/identifying-users).
+
+### Schema
+
+The definition of your products, perks, and paywall locations. The schema lives on the Voidhash
+server and is fetched by the SDK at startup — you do not bundle it into the app. For type-safe
+slugs, `voidhash-cli types generate` writes a `voidhash.gen.d.ts` file that turns slug parameters
+into literal unions; without it everything still works, slugs are just typed as `string`. See
+[Schema & Types](/docs/react-native/schema-and-types).
diff --git a/apps/www/src/features/docs/content/docs/react-native/purchases.mdx b/apps/www/src/features/docs/content/docs/react-native/purchases.mdx
new file mode 100644
index 000000000..13aeba237
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/purchases.mdx
@@ -0,0 +1,213 @@
+---
+title: Making Purchases
+description: Start purchases with the usePurchase hook, restore previous ones, and learn what Voidhash verifies and finishes for you.
+---
+
+Voidhash wraps StoreKit 2 on iOS and Google Play Billing on Android behind a single purchase API. You start a purchase with the `usePurchase` hook (or `client.purchase` outside of components), and the SDK takes care of the rest: presenting the store sheet, verifying the receipt on the server, finishing the transaction with the store, and refreshing the person's entitlements.
+
+## Starting a Purchase
+
+Use the `usePurchase` hook together with [`useProducts`](/react-native/displaying-products):
+
+```tsx title="app/paywall.tsx"
+import { Button, Text, View } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+export default function PaywallScreen() {
+  const { data: products, isLoading: areProductsLoading } = voidhash.useProducts();
+  const { purchase, isLoading: isPurchasing, error } = voidhash.usePurchase();
+
+  if (areProductsLoading) {
+    return <LoadingSpinner />;
+  }
+
+  const monthly = products.get("pro-monthly");
+
+  return (
+    <View>
+      {monthly && (
+        <Button
+          title={isPurchasing ? "Purchasing..." : `Subscribe for ${monthly.displayPrice}`}
+          disabled={isPurchasing}
+          onPress={() => purchase(monthly)}
+        />
+      )}
+      {error && <Text>Something went wrong. Please try again.</Text>}
+    </View>
+  );
+}
+```
+
+The hook returns:
+
+- `purchase(product, options?)` — starts the purchase for a product returned by `useProducts`
+- `isLoading` — `true` while a purchase started by this hook instance is in flight
+- `error` — the last purchase error, or `null` (cleared when a new purchase starts)
+
+<Callout type="info" title="Using native paywalls?">
+  If you present paywalls with `usePaywallByLocation`, the paywall bridge runs this exact purchase
+  flow for you when the user taps a buy button inside the paywall. You only need `usePurchase` when
+  building your own purchase UI. See [Displaying Paywalls](/react-native/displaying-paywalls).
+</Callout>
+
+### Purchase Callbacks
+
+You can attach `onSuccess`, `onError`, and `onSettled` callbacks at the hook level, at the call level, or both — when both are set, both fire:
+
+```tsx
+const { purchase, isLoading } = voidhash.usePurchase({
+  onSuccess: () => {
+    // Fires after the server has verified the receipt and the person was refreshed.
+    router.back();
+  },
+  onError: (error) => {
+    console.warn("Purchase failed", error);
+  },
+  onSettled: () => {
+    // Fires after success or failure — useful for cleanup.
+  },
+});
+
+// Call-level callbacks are merged with the hook-level ones:
+purchase(product, {
+  onSuccess: () => trackConversion(product.slug),
+});
+```
+
+The options also accept `method`. `"native"` (purchasing through the platform store) is the only supported method today, so you can omit it; a call-level `method` takes precedence over the hook-level one.
+
+By the time `onSuccess` fires, the purchase has already been verified by the Voidhash server and the person snapshot has been refreshed — [`useCurrentPerson`](/react-native/subscription-status) re-renders with the new entitlements without any extra work.
+
+### Purchasing Outside Components
+
+The same flow is available on the client instance. Note that the options object is required:
+
+```ts
+await voidhash.client.purchase(product, {});
+```
+
+`client.purchase` resolves once the full flow (store purchase, server sync, store finish, person refresh) has completed, and rejects with the errors described below.
+
+## What Happens During a Purchase
+
+A single `purchase(product)` call runs this pipeline automatically:
+
+1. **Account token derivation.** The SDK derives a deterministic UUIDv5 from the current distinct id and passes it to the store — as `appAccountToken` on StoreKit and `obfuscatedAccountId` on Google Play. The same distinct id always produces the same token on both platforms, which is how server-side events (renewals, transactions observed later) get attributed to the right person. See [Identifying Users](/react-native/identifying-users).
+2. **Native purchase.** The platform store sheet is presented via StoreKit 2 or Play Billing.
+3. **Server receipt verification.** The resulting transaction is synced to the Voidhash server, which verifies it with Apple or Google and grants the resulting entitlements.
+4. **Store acknowledge / finish.** Only after the server accepts the transaction does the SDK finish it with StoreKit or acknowledge it with Play Billing.
+5. **Person refresh.** The current person snapshot is re-fetched, so hooks reading entitlements and subscription state update immediately.
+
+<Callout type="info" title="Why finish only after server sync?">
+  If the app is killed or the network drops between payment and verification, the transaction stays
+  unfinished in the store queue. The background transaction observer picks it up and retries the
+  sync, so a user never pays without eventually receiving their entitlement.
+</Callout>
+
+## Background Transaction Observer
+
+During `client.init()` the SDK attaches a native transaction observer and kicks off a background reconciliation pass (it never blocks init). This catches transactions that complete outside a live `purchase()` call — pending purchases that get approved later, purchases interrupted by a crash, or transactions whose server sync previously failed.
+
+- Reconciliation reads two sources: pending transactions and the store purchase history.
+- Each transaction is deduplicated client-side by `platform + transactionId + purchaseDate`, and the server endpoint is idempotent by store transaction identity — retries and duplicates are safe.
+- Observed transactions go through the same pipeline as a direct purchase: server sync first, store acknowledge/finish only on success, then a person refresh.
+- Consumable products (`one-time-consumable`) are excluded from reconciliation, so a consumed purchase is never re-processed from history.
+- On Android, observed transactions without a purchase token are skipped.
+
+You don't need to wire anything up for this — it is part of `init()`.
+
+## Restoring Purchases
+
+`restorePurchases()` runs the same reconciliation on demand and refreshes the person afterwards:
+
+```tsx
+import { Button } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+export function RestorePurchasesButton() {
+  const { client } = voidhash.useVoidhash();
+
+  return <Button title="Restore Purchases" onPress={() => client.restorePurchases()} />;
+}
+```
+
+Because reconciliation is deduplicated and the server endpoint is idempotent, it is safe to let users tap this as often as they like.
+
+<Callout type="info" title="Apple requires a restore option">
+  Apps offering in-app purchases are expected to provide a visible way to restore them — keep a
+  restore button somewhere reachable, typically on your paywall and in settings.
+</Callout>
+
+## Handling Purchase Errors
+
+A failed purchase rejects the `client.purchase` promise, populates the hook's `error` state, and fires `onError`. The surfaced error is a `VoidhashError` whose message is prefixed with the operation code — `FAILED_TO_PURCHASE: <reason>` — and whose `cause` is the underlying failure. The `cause` carries a stable `_tag` you can branch on:
+
+| `_tag` on `error.cause` | Meaning | What to do |
+| --- | --- | --- |
+| `UserCancelledError` | The user dismissed the store sheet. | Nothing — don't show an error. |
+| `PurchasePendingError` | The purchase needs external approval (for example Ask to Buy) or the payment is still pending. | Tell the user it will complete later; the background observer finishes it once the store approves. |
+| `ProductNotFoundError` | The store doesn't know the product id. | Check your store configuration — the provider product id in your schema must exist in App Store Connect / Play Console. |
+| `NativeAdapterNotInitializedError` | The native store connection isn't ready. | Ensure the purchase runs after the Provider finished initializing. |
+| `FailedToBuyProductError` | Any other store-level failure. | Show a generic retry message. |
+
+```tsx
+import { Alert } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+const { purchase, isLoading } = voidhash.usePurchase({
+  onError: (error) => {
+    const tag = (error.cause as { _tag?: string } | undefined)?._tag;
+
+    if (tag === "UserCancelledError") {
+      return; // The user changed their mind — stay quiet.
+    }
+
+    if (tag === "PurchasePendingError") {
+      Alert.alert(
+        "Purchase pending",
+        "Your purchase is awaiting approval and will activate automatically.",
+      );
+      return;
+    }
+
+    Alert.alert("Purchase failed", "Please try again.");
+  },
+});
+```
+
+For the full list of SDK errors and the `CODE: message` convention, see [Error Handling](/react-native/error-handling).
+
+## Read-Only Mode
+
+When the client is created with `readOnly: true` (observer mode), starting purchases is disabled: `purchase()` rejects immediately with a `ReadOnlyModePurchaseNotAllowedError` — message `Read-only mode is enabled. Purchasing is disabled for observer-only operation.` — before any store interaction happens. This error is thrown directly, without the `FAILED_TO_PURCHASE:` prefix.
+
+In read-only mode the SDK still observes and syncs transactions to Voidhash, but it never acknowledges or finishes them with the store — that stays the responsibility of whichever billing SDK owns the purchase flow. See [Observer Mode](/react-native/observer-mode).
+
+## iOS-Only Helpers
+
+Two StoreKit-specific helpers are available on the client:
+
+- `client.iosPresentCodeRedemptionSheet()` — presents the system sheet for redeeming subscription offer codes
+- `client.iosShowManageSubscriptions()` — presents the system manage-subscriptions sheet
+
+```tsx
+import { Button, Platform, View } from "react-native";
+import { voidhash } from "utils/voidhash/client";
+
+export function SubscriptionSettings() {
+  const { client } = voidhash.useVoidhash();
+
+  if (Platform.OS !== "ios") {
+    return null;
+  }
+
+  return (
+    <View>
+      <Button title="Redeem Code" onPress={() => client.iosPresentCodeRedemptionSheet()} />
+      <Button title="Manage Subscription" onPress={() => client.iosShowManageSubscriptions()} />
+    </View>
+  );
+}
+```
+
+On Android both methods fail with an `UnsupportedPlatformError`, so guard the calls with `Platform.OS === "ios"` as shown above.
diff --git a/apps/www/src/features/docs/content/docs/react-native/quickstart.mdx b/apps/www/src/features/docs/content/docs/react-native/quickstart.mdx
new file mode 100644
index 000000000..dfd62127b
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/quickstart.mdx
@@ -0,0 +1,164 @@
+---
+title: Quickstart
+description: Go from an installed SDK to a live paywall and entitlement check in four steps.
+---
+
+This page is the compressed path through the SDK: create the client, wrap your app, show a paywall, check access. Each step links to a deeper page that covers the full API surface.
+
+## Prerequisites
+
+Before you write any code, make sure you have:
+
+- A Voidhash **project** in the dashboard and its **publishable key** (`vh_pk_...`).
+- At least one **product** configured in your project.
+- A **paywall** published to a **location** (this guide uses `onboarding`).
+- The SDK installed and `voidhash-cli init` run in your app — see [Installation](/react-native/installation) and [voidhash-cli init](/cli/init).
+
+<Callout type="info" title="Typed slugs are optional but recommended">
+  Run `voidhash-cli types generate` to create a `voidhash.gen.d.ts` file that turns product,
+  location, and perk slugs into literal string unions. Without it every slug is a plain `string` —
+  everything still works, you just lose autocomplete. See
+  [Schema & Types](/react-native/schema-and-types).
+</Callout>
+
+<Steps>
+
+<Step>
+### Create the client
+
+`createVoidhashClient` takes your publishable key and returns a bag containing the `Provider` component and every hook, all bound to a single client instance. Create it once in a shared module and export the whole bag:
+
+```ts title="lib/voidhash.ts"
+import { createVoidhashClient } from "@voidhash/react-native";
+
+export const voidhash = createVoidhashClient("vh_pk_...");
+```
+
+There is no schema argument — your schema lives on the server and is fetched when the `Provider` mounts.
+
+<Callout type="warn" title="A deep-link scheme is required">
+  The client needs a deep-link scheme for purchase callbacks. In an Expo app it is read
+  automatically from `scheme` in your app config; in a bare React Native app pass it explicitly via
+  `createVoidhashClient("vh_pk_...", { scheme: "myapp" })`. If no scheme can be resolved, the call
+  throws a `SchemeNotSetError`.
+</Callout>
+
+The options object also accepts `baseUrl`, `debug`, `readOnly`, and more — see [Configuration](/react-native/configuration).
+
+</Step>
+
+<Step>
+### Wrap your app in the Provider
+
+Mount `voidhash.Provider` at the root of your app. On mount it initializes the client: it establishes the person's identity, fetches your schema, and starts observing store transactions. All hooks wait for initialization automatically.
+
+```tsx title="app/_layout.tsx"
+import { Stack } from "expo-router";
+
+import { voidhash } from "../lib/voidhash";
+
+export default function RootLayout() {
+  return (
+    <voidhash.Provider>
+      <Stack />
+    </voidhash.Provider>
+  );
+}
+```
+
+</Step>
+
+<Step>
+### Show a paywall
+
+`usePaywallByLocation` resolves the paywall assigned to a location and preloads it into a native full-screen WebView, so it opens instantly. Call `show()` to present it:
+
+```tsx
+const paywall = voidhash.usePaywallByLocation("onboarding");
+
+await paywall.show();
+```
+
+`show()` resolves to `false` when the location has no published paywall, so you can fall back gracefully. Purchases and restores triggered inside the paywall are handled end to end by the SDK — the paywall dismisses itself after a successful purchase. Hook options (`onPurchase`, `onRestore`, `onError`) let you react to those outcomes; see [Displaying Paywalls](/react-native/displaying-paywalls).
+
+</Step>
+
+<Step>
+### Check access
+
+`useCurrentPerson` returns the current person, including their entitlement grants. A perk is unlocked when a grant for it is `active`:
+
+```tsx
+const { data, isLoading } = voidhash.useCurrentPerson();
+
+const hasPremium = data.entitlements?.grants.some(
+  (grant) => grant.perkId === "premium" && grant.status === "active",
+);
+```
+
+`data` is an empty object until the person has loaded, so keep the optional chaining. The hook is reactive: the SDK refreshes the person after a successful purchase or restore, so `hasPremium` flips without any manual refetching. More in [Subscription Status](/react-native/subscription-status).
+
+</Step>
+
+</Steps>
+
+## Full example
+
+Everything together in one gated screen:
+
+```tsx title="app/paywall-gate.tsx"
+import { Button, Text, View } from "react-native";
+
+import { voidhash } from "../lib/voidhash";
+
+export default function PaywallGate() {
+  const { data, isLoading } = voidhash.useCurrentPerson();
+  const paywall = voidhash.usePaywallByLocation("onboarding", {
+    onPurchase: ({ productId }) => {
+      console.log(`Purchased ${productId}`);
+    },
+    onError: (error, { action }) => {
+      console.warn(`Paywall ${action} failed`, error);
+    },
+  });
+
+  const hasPremium = data.entitlements?.grants.some(
+    (grant) => grant.perkId === "premium" && grant.status === "active",
+  );
+
+  if (isLoading) {
+    return null;
+  }
+
+  if (hasPremium) {
+    return (
+      <View>
+        <Text>Premium is active. Enjoy!</Text>
+      </View>
+    );
+  }
+
+  return (
+    <View>
+      <Text>Unlock premium to continue.</Text>
+      <Button
+        title="See plans"
+        onPress={async () => {
+          const shown = await paywall.show();
+          if (!shown) {
+            console.warn("No published paywall for the onboarding location");
+          }
+        }}
+      />
+    </View>
+  );
+}
+```
+
+## Next steps
+
+- [Displaying Paywalls](/react-native/displaying-paywalls) — preloading behavior, paywall callbacks, and locations in depth.
+- [Purchases](/react-native/purchases) — trigger purchases from your own UI with `usePurchase`.
+- [Subscription Status](/react-native/subscription-status) — grants, the current subscription, and purchase history.
+- [Identifying Users](/react-native/identifying-users) — attach purchases to your own user IDs with `identify`.
+- [Configuration](/react-native/configuration) — every `createVoidhashClient` option, including read-only observer mode.
diff --git a/apps/www/src/features/docs/content/docs/react-native/schema-and-types.mdx b/apps/www/src/features/docs/content/docs/react-native/schema-and-types.mdx
new file mode 100644
index 000000000..4bf829272
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/schema-and-types.mdx
@@ -0,0 +1,206 @@
+---
+title: Schema & Generated Types
+description: How the server-owned schema reaches your app at runtime, and how voidhash-cli turns it into typed slugs.
+---
+
+Your schema — products, paywall locations, and perks — is authored in the Voidhash dashboard. The
+server is the single source of truth; there is no local schema file to write or push. The SDK
+consumes the schema in two ways:
+
+- **At runtime**, the client fetches the schema from the server when the `Provider` mounts and uses
+  it to resolve product slugs to native store product IDs, look up paywall locations, and map perks.
+- **At compile time**, `voidhash-cli types generate` writes a `voidhash.gen.d.ts` declaration file
+  so slugs like `"monthly_sub"` autocomplete and typecheck in your editor.
+
+Both views of the schema carry the same server-computed version hash, which is what keeps them
+honest with each other.
+
+## The runtime schema
+
+`client.init()` (called for you by `<voidhash.Provider>`) fetches the runtime schema with a
+stale-while-revalidate cache:
+
+- **Warm cache**: the cached schema is returned immediately and a background refresh updates the
+  cache for the next launch. The cache lives for 30 days, so long offline gaps are fine.
+- **Cold cache**: the fetch is synchronous, and if the server is unreachable it is fatal — `init()`
+  fails with `FailedToFetchSchemaError`. In practice this only happens on the very first launch (or
+  first launch of a new app version) without connectivity.
+
+The cache is keyed by your app version. A new build may reference products or locations that did
+not exist when an older schema was cached, so the first launch of every new build forces a fresh
+fetch instead of serving a potentially incompatible cached schema.
+
+The fetched schema contains slug-keyed records of products, locations, and perks, plus the version
+hash:
+
+```ts
+interface RuntimeSchema {
+  version: string; // sha256 hash of the schema state on the server
+  products: Record<string, RuntimeProductDefinition>;
+  locations: Record<string, RuntimePaywallLocationDefinition>;
+  perks: Record<string, RuntimePerkDefinition>;
+}
+```
+
+Each product carries its `type` (`"subscription"`, `"one-time"`, or `"one-time-consumable"`), a
+display name, the perks it grants, and its per-store configuration (`appleAppStore.productId`,
+`googlePlay.productId` + optional `basePlanId`).
+
+<Callout type="warn" title="Schema changes ship without an app release">
+  Because the schema is fetched at runtime, renaming or removing a slug in the dashboard affects
+  apps already in production. Slugs referenced by shipped app versions should be treated as a
+  stable contract — add new ones freely, but retire old ones carefully.
+</Callout>
+
+## Generating types
+
+Slug type-safety comes from a generated declaration file, not from the runtime fetch. Run this in
+your project root (it requires being logged in and a `voidhash.config.ts` — see
+[the CLI types command](/docs/cli/types)):
+
+```package-install
+npx voidhash-cli types generate
+```
+
+This fetches the schema from the server and writes `voidhash.gen.d.ts`:
+
+```ts title="voidhash.gen.d.ts"
+// voidhash.gen.d.ts — generated by voidhash-cli, do not edit
+// @voidhash:version 3f6c1a9e2b74d0c8e5a1...
+// @voidhash:fetched-at 2026-07-17T09:30:00.000Z
+
+declare module "@voidhash/react-native" {
+  interface VoidhashRegister {
+    schema: {
+      products: "monthly_sub" | "yearly_sub";
+      locations: "onboarding" | "settings-upsell";
+      perks: "all-access" | "premium-features";
+    };
+  }
+}
+
+export {};
+```
+
+The output path defaults to `voidhash.gen.d.ts` at the project root and can be changed via
+`typesOutput` in your config file:
+
+```ts title="voidhash.config.ts"
+import { defineConfig } from "voidhash-cli";
+
+export default defineConfig({
+  team: "my-team",
+  project: "my-app",
+  typesOutput: "src/voidhash.gen.d.ts", // optional, defaults to voidhash.gen.d.ts
+});
+```
+
+<Callout type="info" title="Commit the generated file">
+  `voidhash.gen.d.ts` belongs in version control. It is what makes types reproducible across your
+  team and in CI — and `voidhash-cli types check` exists precisely to catch a committed file that
+  has fallen behind the server.
+</Callout>
+
+## How the augmentation works
+
+The SDK exports an intentionally empty interface, `VoidhashRegister`, that the generated file
+augments via declaration merging. Three types resolve against it:
+
+- `ProductSlug` — literal union of product slugs
+- `LocationSlug` — literal union of paywall location slugs
+- `PerkSlug` — literal union of perk slugs
+
+Every typed surface of the SDK uses these, so once the `.d.ts` is part of your TypeScript
+compilation, slug arguments autocomplete and invalid slugs are compile errors:
+
+```tsx
+const paywall = voidhash.usePaywallByLocation("onboarding"); // ✓ autocompletes
+const oops = voidhash.usePaywallByLocation("onbaording"); // ✗ compile error
+```
+
+When no augmentation is present — before the first generate, or in isolated tests — the types
+degrade gracefully to `string`. The same applies when the dashboard schema is still empty: the
+generated file declares an empty union, and the SDK falls back to `string` so your code keeps
+compiling. Nothing about the runtime depends on the generated file; it is purely a compile-time
+aid.
+
+## Watch mode during development
+
+When someone edits the schema in the dashboard while you are coding, your generated types drift.
+Watch mode keeps them fresh by polling the server's `GET /schema/version` endpoint and
+regenerating only when the version hash changes:
+
+```package-install
+npx voidhash-cli types generate --watch --poll-interval-ms 5000
+```
+
+Poll failures and regeneration failures are logged as warnings and skipped — the loop keeps
+running, and you keep working against the last-known-good declaration file.
+
+### Metro plugin
+
+Rather than remembering to run the watcher in a second terminal, wire it into Metro so it runs
+alongside `expo start`:
+
+```js title="metro.config.js"
+const { getDefaultConfig } = require("expo/metro-config");
+const { withVoidhash } = require("@voidhash/react-native/metro");
+
+module.exports = withVoidhash(getDefaultConfig(__dirname), {
+  pollIntervalMs: 5000, // optional
+});
+```
+
+`withVoidhash(metroConfig, options?)` spawns `voidhash-cli types generate --watch` as a sibling
+child process when the Metro server starts and tears it down on shutdown. It returns your Metro
+config unchanged — nothing is injected into Metro's transformer or resolver pipeline.
+
+Options:
+
+```ts
+interface WithVoidhashOptions {
+  /** How often to poll the server for schema changes (ms). Default 5000. */
+  pollIntervalMs?: number;
+  /** Path to the voidhash-cli binary. Defaults to picking it up via $PATH. */
+  cliBinary?: string;
+  /** Additional CLI arguments forwarded after `types generate --watch`. */
+  extraArgs?: ReadonlyArray<string>;
+}
+```
+
+`voidhash-cli` is an optional peer dependency of the SDK. If the binary is not installed,
+`withVoidhash` logs a warning and returns the config unchanged instead of crashing Metro. Errors
+from the spawned CLI (for example, being logged out) are also logged without crashing Metro.
+
+## The version hash and CI
+
+Every generated file starts with a `// @voidhash:version <hash>` header — the sha256 hash of the
+schema state on the server, supplied by the server itself so client and server can never disagree
+on it. This header is what watch mode compares against `GET /schema/version`, and what the CI gate
+checks:
+
+```package-install
+npx voidhash-cli types check
+```
+
+- **In sync**: prints `✓ Types are up to date (version ...)` and exits 0.
+- **Stale**: prints `✗ Types are stale.` with the local and server versions plus the remediation
+  (`Run 'voidhash-cli types generate' to refresh, then commit the updated declaration file.`), and
+  exits non-zero.
+
+Add it to your PR pipeline so a schema change in the dashboard cannot silently invalidate the
+committed types: if someone renames a product slug on the server, the next PR fails `types check`
+until the declaration file is regenerated and committed — at which point TypeScript surfaces every
+call site still using the old slug.
+
+The command also fails with distinct messages when the declaration file is missing (run
+`voidhash-cli types generate` first) or when its version header has been stripped by hand-editing.
+
+## Related
+
+- [Configuration](/docs/react-native/configuration) — client options passed to
+  `createVoidhashClient`
+- [CLI: types](/docs/cli/types) — full reference for `types generate` and `types check`
+- [Displaying paywalls](/docs/react-native/displaying-paywalls) — where `LocationSlug` typing pays
+  off
+- [Error handling](/docs/react-native/error-handling) — including `FailedToFetchSchemaError`
diff --git a/apps/www/src/features/docs/content/docs/react-native/subscription-status.mdx b/apps/www/src/features/docs/content/docs/react-native/subscription-status.mdx
new file mode 100644
index 000000000..f814c54ab
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/react-native/subscription-status.mdx
@@ -0,0 +1,214 @@
+---
+title: Checking Subscription Status
+description: Read the current person's entitlements and subscription state to decide what to unlock.
+---
+
+Voidhash exposes everything it knows about the current user as a single **person snapshot**: their
+identity, entitlement grants, current subscription, and purchase history. You read it reactively
+with `useCurrentPerson()` or imperatively with `client.getCurrentPerson()`.
+
+## Reading the Person Reactively
+
+`useCurrentPerson()` returns `{ data, error, isLoading, refetch }`. It fetches the snapshot once the
+`Provider` has initialized and re-renders whenever the client publishes an updated snapshot:
+
+```tsx title="app/account.tsx"
+import { voidhash } from "utils/voidhash/client";
+
+export default function AccountScreen() {
+  const { data: person, error, isLoading, refetch } = voidhash.useCurrentPerson();
+
+  if (isLoading) {
+    return <LoadingSpinner />;
+  }
+
+  if (error) {
+    return <ErrorMessage error={error} onRetry={refetch} />;
+  }
+
+  return (
+    <View>
+      <Text>Person ID: {person.personId}</Text>
+      <Text>Subscription: {person.subscriptions?.current?.status ?? "none"}</Text>
+    </View>
+  );
+}
+```
+
+<Callout type="info" title="data can be empty">
+  While the snapshot is loading — and for a brand-new anonymous user that has no server-side person
+  yet — `data` is an empty object `{}`, not `null`. Always use optional chaining
+  (`person.subscriptions?.current`) when reading nested fields.
+</Callout>
+
+## Reading the Person Imperatively
+
+Outside of React — in event handlers, background logic, or your own state layer — use
+`client.getCurrentPerson(forceFetch?)`. It resolves to the snapshot, or `null` for a brand-new
+person that has not been created on the server yet:
+
+```tsx
+import { voidhash } from "utils/voidhash/client";
+
+const person = await voidhash.client.getCurrentPerson();
+
+// Bypass the cache and always hit the server:
+const fresh = await voidhash.client.getCurrentPerson(true);
+```
+
+If the call fails, it throws a `VoidhashError` with a `FAILED_TO_GET_CURRENT_PERSON` code — see
+[Error Handling](/react-native/error-handling).
+
+## The Person Snapshot
+
+The snapshot has this shape:
+
+```ts
+type SdkPersonSnapshot = {
+  personId: string;
+  distinctId: string;
+  email: string | null;
+  name: string | null;
+
+  entitlements: {
+    grants: Array<{
+      perkId: string;
+      status: "active" | "expired";
+      source: "subscription" | "purchase" | "manual";
+      sourceId: string | null;
+      expiresAt: Date | null;
+    }>;
+  };
+
+  subscriptions: {
+    current: {
+      status: "none" | "active" | "canceled" | "past_due" | "trialing";
+      expiresAt: Date | null;
+      productId: string | null;
+      subscriptionId: string | null;
+    } | null;
+    history: Array<{
+      subscriptionId: string;
+      productId: string | null;
+      status: "active" | "canceled" | "expired" | "trialing" | "past_due";
+      startsAt: Date;
+      expiresAt: Date | null;
+      canceledAt: Date | null;
+      isTrial: boolean;
+    }>;
+  };
+
+  purchases: {
+    history: Array<{
+      purchaseId: string;
+      productId: string | null;
+      type: "one_time" | "subscription";
+      providerKey: string;
+      createdAt: Date;
+    }>;
+  };
+
+  snapshotContext: {
+    mode: "persisted" | "temporary_pending_transfer";
+  };
+};
+```
+
+### Entitlements
+
+`entitlements.grants` is the list of perks the person holds. Each grant names the perk from your
+schema (`perkId`), whether it is currently `active` or `expired`, where it came from (`source`:
+a subscription, a one-time purchase, or a manual grant from the dashboard), and when it expires
+(`expiresAt` is `null` for grants that never expire). **This is the field to gate features on** —
+it already accounts for expiry and for perks granted outside of subscriptions.
+
+### Subscriptions
+
+`subscriptions.current` describes the person's current subscription, or is `null`/`status: "none"`
+when they have never subscribed. Use it for account UI — showing the renewal date, prompting a
+`past_due` user to fix their payment method, or messaging a `trialing` user. `subscriptions.history`
+lists past and present subscriptions, including canceled and expired ones.
+
+### Purchases
+
+`purchases.history` lists completed purchases (both one-time purchases and subscription
+transactions) with the product, the payment provider (`providerKey`), and the purchase date.
+
+### Snapshot context
+
+`snapshotContext` is mostly internal. `mode` is `"temporary_pending_transfer"` while an
+[identify](/react-native/identifying-users) migration is merging two persons; once the migration
+completes it returns to `"persisted"`.
+
+## Gating Access to a Feature
+
+Check for an **active grant** of the perk you defined in your schema. A small wrapper hook keeps
+call sites clean:
+
+```tsx title="hooks/use-has-perk.ts"
+import { voidhash } from "utils/voidhash/client";
+
+export function useHasPerk(perkId: string) {
+  const { data: person, error, isLoading, refetch } = voidhash.useCurrentPerson();
+
+  const hasPerk =
+    person.entitlements?.grants.some(
+      (grant) => grant.perkId === perkId && grant.status === "active",
+    ) ?? false;
+
+  return { hasPerk, error, isLoading, refetch };
+}
+```
+
+```tsx title="app/premium-feature.tsx"
+import { useHasPerk } from "hooks/use-has-perk";
+
+export default function PremiumFeature() {
+  const { hasPerk, error, isLoading } = useHasPerk("pro");
+
+  if (isLoading) {
+    return <LoadingSpinner />;
+  }
+
+  // If the status check failed, fall back to the paywall instead of
+  // guessing — the user can always restore or retry from there.
+  if (error || !hasPerk) {
+    return <PaywallScreen />;
+  }
+
+  return <PremiumContent />;
+}
+```
+
+<Callout type="info" title="Gate on grants, not on subscription status">
+  `subscriptions.current.status === "active"` looks tempting, but it misses perks granted by
+  one-time purchases and manual grants, and it does not tell you *which* features the subscription
+  unlocks. Grants are the entitlement source of truth; use subscription status for account UI only.
+</Callout>
+
+## Caching
+
+Person snapshots are cached on-device per distinct id, so subscription checks are instant and work
+through flaky networks. `getCurrentPerson()` (and the hook) use a **fetch-while-stale** policy:
+
+- A cached snapshot **fresher than 5 minutes** is returned directly, with no network request.
+- A snapshot older than 5 minutes is considered stale and is re-fetched from the server.
+- Cache entries expire entirely after **2 days**; an expired entry is never served.
+- `getCurrentPerson(true)` skips the cache and always fetches from the server.
+
+You rarely need `forceFetch` because the SDK keeps the cache in sync at the moments that matter:
+
+- **On init** the person is prefetched in the background.
+- **After a successful purchase or restore** the SDK re-fetches the snapshot from the server, so
+  new entitlements are reflected immediately — your next `getCurrentPerson()` or `refetch()`
+  returns them without a stale window.
+- **After `identify()`** the cache key changes with the distinct id, so the previous identity's
+  snapshot is never served for the new one. Call `refetch()` (or `getCurrentPerson()`) after
+  identifying to load the new person's data.
+
+## Next Steps
+
+- [Identify users](/react-native/identifying-users) so entitlements follow them across devices.
+- [Make purchases](/react-native/purchases) that grant the perks you gate on.
+- [Generate typed slugs](/react-native/schema-and-types) for your products and perks.
+- [Handle errors](/react-native/error-handling) thrown by the client methods used here.
diff --git a/apps/www/src/features/docs/content/docs/sdks-and-apis.mdx b/apps/www/src/features/docs/content/docs/sdks-and-apis.mdx
new file mode 100644
index 000000000..de52fda39
--- /dev/null
+++ b/apps/www/src/features/docs/content/docs/sdks-and-apis.mdx
@@ -0,0 +1,26 @@
+---
+title: SDKs & APIs
+description: Find the right documentation tree for your task — the React Native SDK, the CLI, or the HTTP API.
+icon: Boxes
+---
+
+Voidhash ships three developer surfaces, each with its own documentation tree. Pick the one that matches what you are building — they are designed to be read independently, and each starts with its own overview page.
+
+## React Native SDK
+
+The [React Native SDK](/react-native/overview) is how your app talks to Voidhash: fetching products, displaying paywalls, making purchases, checking subscription status, and identifying users. If you are building the app itself, start here — the [installation guide](/react-native/installation) and [quickstart](/react-native/quickstart) take you from an empty project to a working purchase flow.
+
+## CLI
+
+The [CLI](/cli/overview) is the tool you run on your machine and in CI. It handles [project setup](/cli/init), [type generation](/cli/types) from your schema so product and perk identifiers are checked at compile time, and [paywall deploys](/cli/deploy). If you are configuring a project, wiring up CI, or pushing schema and paywall changes, this is your tree.
+
+## HTTP API
+
+The [HTTP API](/api/overview) is for everything that runs outside the app: server-side subscription checks, webhooks, event capture, and automation against your organization's data. If you are integrating from a backend, syncing entitlements into your own systems, or scripting against Voidhash, start with the [authentication page](/api/authentication) and go from there.
+
+<Callout type="info" title="Not sure where to start?">
+  Most projects touch all three: the CLI sets up the project and generates types, the React Native
+  SDK powers the app, and the HTTP API backs your server. If this is your first time with Voidhash,
+  follow the [installation guide](/react-native/installation) first — it introduces the CLI and SDK
+  in the order you will actually use them.
+</Callout>
diff --git a/apps/www/src/features/docs/lib/guide-content.tsx b/apps/www/src/features/docs/lib/guide-content.tsx
index 5bdb36617..807b6581f 100644
--- a/apps/www/src/features/docs/lib/guide-content.tsx
+++ b/apps/www/src/features/docs/lib/guide-content.tsx
@@ -1,8 +1,10 @@
 "use client";
 
-import { docs } from "@generated/docs";
+import browserCollections from "@generated/browser";
 import { lazy, Suspense, useMemo } from "react";
 
+const docMap = browserCollections.docs.raw;
+
 import { DocsBody } from "@/features/docs/components/layout/page";
 import { docsMdxComponents } from "@/features/docs/lib/mdx-components";
 
@@ -11,7 +13,7 @@ const normalizeKey = (key: string): string =>
   key.replace(/^\.\//, "").replace(/\.mdx?$/, "");
 
 const guideKeyBySlug = new Map<string, string>(
-  Object.keys(docs.doc).map((key) => [normalizeKey(key), key]),
+  Object.keys(docMap).map((key) => [normalizeKey(key), key]),
 );
 
 /**
@@ -45,7 +47,7 @@ export function GuideBody({ slug }: { slug: string }) {
       return undefined;
     }
 
-    const loader = docs.doc[key];
+    const loader = docMap[key];
     return loader ? lazy(loader) : undefined;
   }, [key]);
 
diff --git a/apps/www/src/features/docs/lib/mdx-components.tsx b/apps/www/src/features/docs/lib/mdx-components.tsx
index 9d383d6de..265ac1495 100644
--- a/apps/www/src/features/docs/lib/mdx-components.tsx
+++ b/apps/www/src/features/docs/lib/mdx-components.tsx
@@ -7,10 +7,14 @@ import { Step, Steps } from "fumadocs-ui/components/steps";
 import { Tab, Tabs } from "fumadocs-ui/components/tabs";
 import { TypeTable } from "fumadocs-ui/components/type-table";
 import defaultMdxComponents from "fumadocs-ui/mdx";
-import type { ComponentProps } from "react";
+import { type ComponentProps, lazy } from "react";
 
 import { DOCS_PATH } from "@/lib/paths";
 
+// Lazy so the OpenAPI reference renderer (Scalar playground, shiki) is only
+// pulled into the bundle for generated API pages, not every doc/guide page.
+const OpenAPIPage = lazy(() => import("./openapi-page"));
+
 /**
  * Renders links authored inside MDX. Root-relative hrefs (e.g. `/foo`) are
  * rewritten under the docs base path so they resolve to `/docs/foo`, while
@@ -48,6 +52,10 @@ export const docsMdxComponents = {
   Tab,
   Tabs,
   TypeTable,
+  // Generated OpenAPI pages render `<OpenAPIPage>`; `APIPage` is the legacy
+  // (v10) alias the generator still emits for backward compatibility.
+  OpenAPIPage,
+  APIPage: OpenAPIPage,
   a: DocsMdxLink,
   iframe: (props: ComponentProps<"iframe">) => (
     <iframe {...props} className="h-[500px] w-full" />
diff --git a/apps/www/src/features/docs/lib/openapi-page.tsx b/apps/www/src/features/docs/lib/openapi-page.tsx
new file mode 100644
index 000000000..879444146
--- /dev/null
+++ b/apps/www/src/features/docs/lib/openapi-page.tsx
@@ -0,0 +1,47 @@
+"use client";
+
+import { type OpenAPIPageProps, createOpenAPIPage } from "fumadocs-openapi/ui";
+
+import { DOCS_PATH } from "@/lib/paths";
+import eventCaptureSpec from "../openapi/event-capture.json";
+import voidhashV1Spec from "../openapi/voidhash-v1.json";
+
+/**
+ * The committed spec snapshots, keyed by the stable `document` id embedded in
+ * generated pages (see `scripts/generate-openapi.ts`). fumadocs-openapi's page
+ * generator writes `<OpenAPIPage document="<id>" .../>`; this map lets the
+ * client component resolve the spec without a server round-trip.
+ */
+const SPECS: Record<string, unknown> = {
+  "voidhash-v1": voidhashV1Spec,
+  "event-capture": eventCaptureSpec,
+};
+
+const OpenAPIPageBase = createOpenAPIPage();
+
+interface GeneratedOpenAPIPageProps {
+  document: string;
+  operations?: unknown[];
+  webhooks?: unknown[];
+}
+
+/**
+ * Renders a generated OpenAPI operation page. fumadocs-openapi's client
+ * component expects the resolved spec via `payload`; because this app renders
+ * MDX on the client (there is no RSC boundary), we supply the committed,
+ * client-bundled spec keyed by the `document` id rather than resolving it
+ * server-side.
+ */
+export default function OpenAPIPage(props: GeneratedOpenAPIPageProps) {
+  const bundled = SPECS[props.document];
+  if (!bundled) {
+    return null;
+  }
+
+  const resolved = {
+    ...props,
+    payload: { bundled, proxyUrl: `${DOCS_PATH}/api/proxy` },
+  } as unknown as OpenAPIPageProps;
+
+  return <OpenAPIPageBase {...resolved} />;
+}
diff --git a/apps/www/src/features/docs/lib/openapi.ts b/apps/www/src/features/docs/lib/openapi.ts
new file mode 100644
index 000000000..9358121fa
--- /dev/null
+++ b/apps/www/src/features/docs/lib/openapi.ts
@@ -0,0 +1,18 @@
+import { createOpenAPI } from "fumadocs-openapi/server";
+
+import { DOCS_PATH } from "@/lib/paths";
+
+/**
+ * OpenAPI server backing the API Reference tab. It reads the committed spec
+ * snapshots (refreshed from the live backend by `scripts/generate-openapi.ts`)
+ * and powers both the build-time page generation and the interactive
+ * playground. `proxyUrl` routes "try it" requests through our own origin to
+ * avoid CORS (see `src/routes/docs/api/proxy.ts`).
+ */
+export const openapi = createOpenAPI({
+  input: [
+    "./src/features/docs/openapi/voidhash-v1.json",
+    "./src/features/docs/openapi/event-capture.json",
+  ],
+  proxyUrl: `${DOCS_PATH}/api/proxy`,
+});
diff --git a/apps/www/src/features/docs/lib/shiki-theme.ts b/apps/www/src/features/docs/lib/shiki-theme.ts
new file mode 100644
index 000000000..06ba3ed80
--- /dev/null
+++ b/apps/www/src/features/docs/lib/shiki-theme.ts
@@ -0,0 +1,161 @@
+import {
+  type SyntaxRoles,
+  darkBase,
+  darkSyntaxRoles,
+  lightBase,
+  lightSyntaxRoles,
+} from "../../../lib/code-theme.ts";
+
+/**
+ * Voidhash Shiki themes for documentation code blocks.
+ *
+ * These mirror the paywall designer's Monaco editor themes: both derive their
+ * palette and per-role mapping from `@/lib/code-theme`, so a snippet in the docs
+ * is colored exactly as it would be in the in-app code editor. This module maps
+ * those roles onto Shiki's TextMate scopes.
+ *
+ * The mapping is deliberately coarse to match Monaco's lexical coloring: types
+ * and other capitalized names are blue, everything else (functions, properties,
+ * parameters, variables) falls back to the default foreground rather than
+ * getting its own hue. Operators and template/brace punctuation are grouped with
+ * delimiters (gray), while `new`/`typeof`/`instanceof` stay keyword-violet —
+ * TextMate resolves these by scope specificity.
+ */
+
+interface ThemeInput {
+  name: string;
+  type: "light" | "dark";
+  roles: SyntaxRoles;
+  base: { background: string; foreground: string };
+}
+
+interface TokenColor {
+  scope: string[];
+  settings: { foreground?: string; fontStyle?: string };
+}
+
+function tokenColors(r: SyntaxRoles): TokenColor[] {
+  return [
+    {
+      scope: ["comment", "punctuation.definition.comment", "string.comment"],
+      settings: { foreground: r.comment, fontStyle: "italic" },
+    },
+    {
+      // Keywords and storage. `constant.language` (true/false/null/undefined)
+      // and `variable.language` (this/super) read as keywords in Monaco too.
+      scope: [
+        "keyword",
+        "keyword.control",
+        "keyword.other",
+        "keyword.operator.new",
+        "keyword.operator.expression",
+        "keyword.operator.logical",
+        "storage",
+        "storage.type",
+        "storage.modifier",
+        "variable.language",
+        "constant.language",
+      ],
+      settings: { foreground: r.keyword },
+    },
+    {
+      scope: ["string", "string.quoted", "string.template", "punctuation.definition.string"],
+      settings: { foreground: r.string },
+    },
+    {
+      scope: ["constant.character.escape", "constant.other.placeholder"],
+      settings: { foreground: r.escape },
+    },
+    {
+      scope: ["constant.numeric"],
+      settings: { foreground: r.number },
+    },
+    {
+      scope: ["string.regexp"],
+      settings: { foreground: r.regexp },
+    },
+    {
+      // Types, classes, enums, interfaces, primitive type annotations and tags
+      // (JSX component + HTML) — any capitalized/type-position name.
+      scope: [
+        "entity.name.type",
+        "entity.name.class",
+        "entity.other.inherited-class",
+        "support.type",
+        "support.class",
+        "entity.name.tag",
+        "support.class.component",
+      ],
+      settings: { foreground: r.type },
+    },
+    {
+      // Delimiters and operators. More specific than the bare `keyword`/`storage`
+      // rules above, so `=>`, `${…}`, braces and arithmetic/assignment operators
+      // resolve to gray while `new`/`typeof` stay keyword-colored.
+      scope: [
+        "punctuation",
+        "meta.brace",
+        "meta.delimiter",
+        "keyword.operator",
+        "storage.type.function.arrow",
+        "punctuation.separator",
+        "punctuation.terminator",
+        "punctuation.accessor",
+        "punctuation.definition.template-expression",
+        "punctuation.definition.tag",
+      ],
+      settings: { foreground: r.punctuation },
+    },
+    {
+      // Identifiers Monaco leaves at the default foreground: variables, function
+      // names, parameters, object/JSON/YAML keys and properties. Kept explicit
+      // (rather than relying on fallback) so `support.type.property-name` does
+      // not inherit the blue `support.type` rule.
+      scope: [
+        "variable",
+        "variable.other",
+        "variable.parameter",
+        "entity.name.function",
+        "support.function",
+        "meta.object-literal.key",
+        "support.variable.property",
+        "variable.other.property",
+        "support.type.property-name",
+      ],
+      settings: { foreground: r.variable },
+    },
+    {
+      scope: ["invalid", "invalid.illegal"],
+      settings: { foreground: r.invalid },
+    },
+  ];
+}
+
+function buildTheme({ name, type, roles, base }: ThemeInput) {
+  return {
+    name,
+    type,
+    colors: {
+      "editor.background": base.background,
+      "editor.foreground": base.foreground,
+    },
+    // Shiki reads these top-level fields for the container fallback color.
+    bg: base.background,
+    fg: base.foreground,
+    tokenColors: tokenColors(roles),
+  };
+}
+
+export const voidhashShikiDark = buildTheme({
+  name: "voidhash-dark",
+  type: "dark",
+  roles: darkSyntaxRoles,
+  base: darkBase,
+});
+
+export const voidhashShikiLight = buildTheme({
+  name: "voidhash-light",
+  type: "light",
+  roles: lightSyntaxRoles,
+  base: lightBase,
+});
diff --git a/apps/www/src/features/docs/lib/source.ts b/apps/www/src/features/docs/lib/source.ts
index 0b1f4ecd3..173ba88db 100644
--- a/apps/www/src/features/docs/lib/source.ts
+++ b/apps/www/src/features/docs/lib/source.ts
@@ -1,8 +1,7 @@
 import { loader } from "fumadocs-core/source";
 import * as icons from "lucide-static";
 
-import { docs } from "@generated/docs";
-import { createViteSource } from "@/lib/create-vite-source";
+import { docs } from "@generated/server";
 import { DOCS_PATH } from "@/lib/paths";
 
 type DocsSource = ReturnType<typeof loader>;
@@ -10,10 +9,12 @@ type DocsSource = ReturnType<typeof loader>;
 let sourcePromise: Promise<DocsSource> | undefined;
 
 /**
- * Returns the loaded documentation source without evaluating MDX imports at module load.
+ * Returns the loaded documentation source. fumadocs-mdx's server runtime builds
+ * the collection eagerly (top-level await in the generated `.source/server.ts`),
+ * so `toFumadocsSource()` is synchronous here; the promise memoizes the loader.
  */
 export const getSource = (): Promise<DocsSource> => {
-  sourcePromise ??= createViteSource(docs.doc, docs.meta).then((docsSource) =>
+  sourcePromise ??= Promise.resolve(
     loader({
       baseUrl: DOCS_PATH,
       icon(icon) {
@@ -25,7 +26,7 @@ export const getSource = (): Promise<DocsSource> => {
           return icons[icon as keyof typeof icons] as unknown as React.ReactElement;
         }
       },
-      source: docsSource,
+      source: docs.toFumadocsSource(),
     }),
   );
 
diff --git a/apps/www/src/features/docs/lib/tabs.test.ts b/apps/www/src/features/docs/lib/tabs.test.ts
new file mode 100644
index 000000000..f8ce72732
--- /dev/null
+++ b/apps/www/src/features/docs/lib/tabs.test.ts
@@ -0,0 +1,70 @@
+import type * as PageTree from "fumadocs-core/page-tree";
+import { describe, expect, it } from "vitest";
+
+import { getSource } from "./source";
+import { DOCS_TABS, activeTabForPathname, tabIdForUrl, tabNodes } from "./tabs";
+
+const pageUrls = (nodes: PageTree.Node[]): string[] =>
+  nodes.flatMap((node) => (node.type === "page" ? [node.url] : []));
+
+const separatorNames = (nodes: PageTree.Node[]): string[] =>
+  nodes.flatMap((node) => (node.type === "separator" ? [String(node.name)] : []));
+
+describe("docs tabs partition", () => {
+  it("maps meta separators into section headings and splits tabs by folder", async () => {
+    const source = await getSource();
+    const tree = source.getPageTree() as PageTree.Root;
+
+    // `"---Get started---"` / `"---Learn---"` become separator nodes.
+    expect(separatorNames(tree.children)).toEqual(
+      expect.arrayContaining(["Get started", "Learn"]),
+    );
+
+    // Documentation tab: leading pages + section separators, but NOT the
+    // api/guides folders (those are their own tabs).
+    const docNodes = tabNodes(tree, DOCS_TABS[0]);
+    expect(pageUrls(docNodes)).toContain("/docs/introduction");
+    expect(separatorNames(docNodes)).toEqual(expect.arrayContaining(["Get started", "Learn"]));
+    expect(
+      docNodes.some(
+        (node) => node.type === "folder" && tabIdForUrl(node.index?.url) !== "documentation",
+      ),
+    ).toBe(false);
+
+    // API tab: conceptual pages, plus the generated tag folders hoisted to the
+    // top level (not buried inside a `reference` container).
+    const apiNodes = tabNodes(tree, DOCS_TABS[2]);
+    expect(pageUrls(apiNodes)).toContain("/docs/api/overview");
+    const apiFolders = apiNodes.filter((node): node is PageTree.Folder => node.type === "folder");
+    // The `reference` container itself is gone; its tag folders (e.g. Persons) surface directly.
+    expect(apiFolders.some((folder) => String(folder.name).toLowerCase() === "reference")).toBe(
+      false,
+    );
+    expect(apiFolders.some((folder) => String(folder.name) === "Persons")).toBe(true);
+
+    // Guides tab: the guides folder has content.
+    expect(tabNodes(tree, DOCS_TABS[1]).length).toBeGreaterThan(0);
+
+    // Folder-level separators (react-native/meta.yaml) also become separator
+    // nodes, so the slide-in submenu can render subgroups within a folder.
+    const reactNative = docNodes.find(
+      (node): node is PageTree.Folder =>
+        node.type === "folder" && String(node.name).includes("React Native"),
+    );
+    expect(reactNative).toBeDefined();
+    expect(separatorNames(reactNative?.children ?? [])).toEqual(
+      expect.arrayContaining(["Getting started", "Advanced"]),
+    );
+  });
+
+  it("routes urls and pathnames to the correct tab", () => {
+    expect(tabIdForUrl("/docs/introduction")).toBe("documentation");
+    expect(tabIdForUrl("/docs/api/persons")).toBe("api");
+    expect(tabIdForUrl("/docs/guides/payment-providers/apple-app-store/bundle-id")).toBe("guides");
+    expect(tabIdForUrl(undefined)).toBe("documentation");
+
+    expect(activeTabForPathname("/docs/api/overview").id).toBe("api");
+    expect(activeTabForPathname("/docs/guides").id).toBe("guides");
+    expect(activeTabForPathname("/docs/introduction").id).toBe("documentation");
+  });
+});
diff --git a/apps/www/src/features/docs/lib/tabs.ts b/apps/www/src/features/docs/lib/tabs.ts
new file mode 100644
index 000000000..2e08899a2
--- /dev/null
+++ b/apps/www/src/features/docs/lib/tabs.ts
@@ -0,0 +1,137 @@
+import type * as PageTree from "fumadocs-core/page-tree";
+import { Book, BookOpen, Code, type LucideIcon } from "lucide-react";
+
+import { DOCS_PATH } from "@/lib/paths";
+
+export type DocsTabId = "documentation" | "guides" | "api";
+
+export interface DocsTab {
+  id: DocsTabId;
+  label: string;
+  icon: LucideIcon;
+  /** URL prefix that identifies pages belonging to this tab. */
+  prefix: string;
+  /** Landing page URL the header tab links to. */
+  home: string;
+}
+
+/**
+ * The three top-level documentation surfaces, rendered as tabs in the docs
+ * header. Tabs are a code-level partition of the single fumadocs page tree
+ * (see {@link tabNodes}) rather than fumadocs "root folders", because the docs
+ * sidebar is fully custom.
+ */
+export const DOCS_TABS: DocsTab[] = [
+  {
+    id: "documentation",
+    label: "Documentation",
+    icon: Book,
+    prefix: DOCS_PATH,
+    home: `${DOCS_PATH}/introduction`,
+  },
+  {
+    id: "guides",
+    label: "Guides",
+    icon: BookOpen,
+    prefix: `${DOCS_PATH}/guides`,
+    home: `${DOCS_PATH}/guides`,
+  },
+  {
+    id: "api",
+    label: "API Reference",
+    icon: Code,
+    prefix: `${DOCS_PATH}/api`,
+    home: `${DOCS_PATH}/api/overview`,
+  },
+];
+
+/** Resolves a folder's first descendant page URL (folders may lack an index). */
+function firstPageUrl(folder: PageTree.Folder): string | undefined {
+  if (folder.index) {
+    return folder.index.url;
+  }
+  for (const child of folder.children) {
+    if (child.type === "page") {
+      return child.url;
+    }
+    if (child.type === "folder") {
+      const url = firstPageUrl(child);
+      if (url) {
+        return url;
+      }
+    }
+  }
+  return undefined;
+}
+
+/** The representative URL for a node (undefined for separators). */
+function nodeUrl(node: PageTree.Node): string | undefined {
+  if (node.type === "page") {
+    return node.url;
+  }
+  if (node.type === "folder") {
+    return firstPageUrl(node);
+  }
+  return undefined;
+}
+
+/** Which tab a URL belongs to. Separators (no URL) fall to "documentation". */
+export function tabIdForUrl(url: string | undefined): DocsTabId {
+  if (url?.startsWith(`${DOCS_PATH}/guides`)) {
+    return "guides";
+  }
+  if (url?.startsWith(`${DOCS_PATH}/api`)) {
+    return "api";
+  }
+  return "documentation";
+}
+
+/** The active tab for the current pathname (guides/api checked before the docs root). */
+export function activeTabForPathname(pathname: string): DocsTab {
+  const guides = DOCS_TABS[1];
+  const api = DOCS_TABS[2];
+  if (pathname.startsWith(guides.prefix)) {
+    return guides;
+  }
+  if (pathname.startsWith(api.prefix)) {
+    return api;
+  }
+  return DOCS_TABS[0];
+}
+
+/**
+ * The top-level tree nodes rendered in the sidebar for a given tab. The
+ * "documentation" tab shows every root node that isn't part of the guides/api
+ * folders (keeping separators for section headings); the guides/api tabs show
+ * the contents of their owning folder directly.
+ */
+export function tabNodes(
+  root: { children: PageTree.Node[] },
+  tab: DocsTab,
+): PageTree.Node[] {
+  if (tab.id === "documentation") {
+    return root.children.filter((node) => tabIdForUrl(nodeUrl(node)) === "documentation");
+  }
+
+  const folder = root.children.find(
+    (node): node is PageTree.Folder =>
+      node.type === "folder" && tabIdForUrl(nodeUrl(node)) === tab.id,
+  );
+  if (!folder) {
+    return [];
+  }
+  const children = folder.index ? [folder.index, ...folder.children] : folder.children;
+
+  if (tab.id === "api") {
+    // The OpenAPI generator nests every tag under a `reference/` container.
+    // Surface those tag folders directly under the "Reference" section so each
+    // tag is its own expandable group rather than one deep slide-in.
+    return children.flatMap((node) =>
+      node.type === "folder" && firstPageUrl(node)?.startsWith(`${DOCS_PATH}/api/reference/`)
+        ? node.children
+        : [node],
+    );
+  }
+
+  return children;
+}
diff --git a/apps/www/src/features/docs/openapi/event-capture.json b/apps/www/src/features/docs/openapi/event-capture.json
new file mode 100644
index 000000000..6b735455d
--- /dev/null
+++ b/apps/www/src/features/docs/openapi/event-capture.json
@@ -0,0 +1,729 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Api",
+    "version": "0.0.1"
+  },
+  "paths": {
+    "/i/v1/capture": {
+      "post": {
+        "tags": [
+          "event_capture"
+        ],
+        "operationId": "event_capture.capture",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "202": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureAcceptedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInvalidRequestError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureUnauthorizedError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CapturePayloadTooLargeError"
+                }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureRateLimitedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInternalServerError"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureDependencyUnavailableError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "uuid": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "event": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "context": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "$ref": "#/components/schemas/Union_"
+                    }
+                  },
+                  "properties": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "$ref": "#/components/schemas/Union_1"
+                    }
+                  },
+                  "distinct_id": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  },
+                  "session_id": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "allOf": [
+                          {
+                            "minLength": 1
+                          }
+                        ]
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "timestamp": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "sent_at": {
+                    "type": "string"
+                  },
+                  "token": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "uuid",
+                  "event",
+                  "context",
+                  "properties",
+                  "distinct_id",
+                  "sent_at",
+                  "token"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/i/v1/batch": {
+      "post": {
+        "tags": [
+          "event_capture"
+        ],
+        "operationId": "event_capture.batch",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "202": {
+            "description": "CaptureAcceptedResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureAcceptedResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "CaptureInvalidRequestError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInvalidRequestError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "CaptureUnauthorizedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureUnauthorizedError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "CapturePayloadTooLargeError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CapturePayloadTooLargeError"
+                }
+              }
+            }
+          },
+          "429": {
+            "description": "CaptureRateLimitedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureRateLimitedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "CaptureInternalServerError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureInternalServerError"
+                }
+              }
+            }
+          },
+          "503": {
+            "description": "CaptureDependencyUnavailableError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CaptureDependencyUnavailableError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "events": {
+                    "type": "array",
+                    "prefixItems": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "uuid": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "event": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "context": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "$ref": "#/components/schemas/Union_"
+                            }
+                          },
+                          "properties": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "$ref": "#/components/schemas/Union_1"
+                            }
+                          },
+                          "distinct_id": {
+                            "type": "string",
+                            "allOf": [
+                              {
+                                "minLength": 1
+                              }
+                            ]
+                          },
+                          "session_id": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "allOf": [
+                                  {
+                                    "minLength": 1
+                                  }
+                                ]
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "timestamp": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          }
+                        },
+                        "required": [
+                          "uuid",
+                          "event",
+                          "context",
+                          "properties",
+                          "distinct_id"
+                        ],
+                        "additionalProperties": false
+                      }
+                    ],
+                    "minItems": 1,
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "uuid": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "event": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "context": {
+                          "type": "object",
+                          "additionalProperties": {
+                            "$ref": "#/components/schemas/Union_"
+                          }
+                        },
+                        "properties": {
+                          "type": "object",
+                          "additionalProperties": {
+                            "$ref": "#/components/schemas/Union_1"
+                          }
+                        },
+                        "distinct_id": {
+                          "type": "string",
+                          "allOf": [
+                            {
+                              "minLength": 1
+                            }
+                          ]
+                        },
+                        "session_id": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "allOf": [
+                                {
+                                  "minLength": 1
+                                }
+                              ]
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        },
+                        "timestamp": {
+                          "anyOf": [
+                            {
+                              "type": "string"
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ]
+                        }
+                      },
+                      "required": [
+                        "uuid",
+                        "event",
+                        "context",
+                        "properties",
+                        "distinct_id"
+                      ],
+                      "additionalProperties": false
+                    }
+                  },
+                  "sent_at": {
+                    "type": "string"
+                  },
+                  "token": {
+                    "type": "string",
+                    "allOf": [
+                      {
+                        "minLength": 1
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "events",
+                  "sent_at",
+                  "token"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "Union_": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "number"
+          },
+          {
+            "type": "boolean"
+          },
+          {
+            "type": "null"
+          },
+          {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Union_"
+            }
+          },
+          {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/Union_"
+            }
+          }
+        ]
+      },
+      "Union_1": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "number"
+          },
+          {
+            "type": "boolean"
+          },
+          {
+            "type": "null"
+          },
+          {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/Union_1"
+            }
+          },
+          {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/Union_1"
+            }
+          }
+        ]
+      },
+      "CaptureAcceptedResponse": {
+        "type": "object",
+        "properties": {
+          "accepted": {
+            "type": "integer"
+          },
+          "rejected": {
+            "type": "integer"
+          }
+        },
+        "required": [
+          "accepted",
+          "rejected"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureInvalidRequestError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureInvalidRequestError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "invalid_request"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureUnauthorizedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureUnauthorizedError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "unauthorized"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CapturePayloadTooLargeError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CapturePayloadTooLargeError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "payload_too_large"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureRateLimitedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureRateLimitedError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "rate_limited"
+            ]
+          },
+          "retry_after_ms": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureDependencyUnavailableError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureDependencyUnavailableError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "dependency_unavailable"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      },
+      "CaptureInternalServerError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "CaptureInternalServerError"
+            ]
+          },
+          "error": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "internal_error"
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "error",
+          "code"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {}
+  },
+  "security": [],
+  "tags": [
+    {
+      "name": "event_capture"
+    }
+  ]
+}
diff --git a/apps/www/src/features/docs/openapi/voidhash-v1.json b/apps/www/src/features/docs/openapi/voidhash-v1.json
new file mode 100644
index 000000000..6985d73ff
--- /dev/null
+++ b/apps/www/src/features/docs/openapi/voidhash-v1.json
@@ -0,0 +1,8193 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Api",
+    "version": "0.0.1"
+  },
+  "paths": {
+    "/api/v1/auth/session": {
+      "get": {
+        "tags": [
+          "auth"
+        ],
+        "operationId": "auth.session",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "method": {
+                      "type": "string",
+                      "enum": [
+                        "api-key",
+                        "publishable-key",
+                        "secret-key"
+                      ]
+                    },
+                    "name": {
+                      "type": "string"
+                    },
+                    "organizations": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "name": {
+                            "type": "string"
+                          },
+                          "slug": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "id",
+                          "name",
+                          "slug"
+                        ],
+                        "additionalProperties": false
+                      }
+                    },
+                    "projects": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string"
+                          },
+                          "name": {
+                            "type": "string"
+                          },
+                          "organizationId": {
+                            "type": "string"
+                          },
+                          "slug": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "id",
+                          "name",
+                          "organizationId",
+                          "slug"
+                        ],
+                        "additionalProperties": false
+                      }
+                    }
+                  },
+                  "required": [
+                    "method",
+                    "name",
+                    "organizations",
+                    "projects"
+                  ],
+                  "additionalProperties": false
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys": {
+      "post": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.createSecretKey",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyWithRawKey"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateSecretKeyBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.listApiKeys",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/ApiKey"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}": {
+      "get": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.getApiKeyById",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ApiKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKey"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.deleteApiKey",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "204": {
+            "description": "<No Content>"
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/api-keys/{apiKeyId}/rotate": {
+      "post": {
+        "tags": [
+          "api_keys"
+        ],
+        "operationId": "api_keys.rotateSecretKey",
+        "parameters": [
+          {
+            "name": "apiKeyId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ApiKeyWithRawKey",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiKeyWithRawKey"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/ApiKeyNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ApiKeyNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ApiKeyServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ApiKeyServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/persons": {
+      "post": {
+        "tags": [
+          "persons"
+        ],
+        "operationId": "persons.createPerson",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Person",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Person"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/PersonInvalidAnonymousIdError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PersonInvalidAnonymousIdError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PersonServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreatePersonBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "persons"
+        ],
+        "operationId": "persons.listPersons",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Person"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PersonServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/persons/{personId}": {
+      "get": {
+        "tags": [
+          "persons"
+        ],
+        "operationId": "persons.getPersonById",
+        "parameters": [
+          {
+            "name": "personId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Person",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Person"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/PersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PersonNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PersonServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/persons/by-distinct-id/{distinctId}": {
+      "get": {
+        "tags": [
+          "persons"
+        ],
+        "operationId": "persons.getPersonByDistinctId",
+        "parameters": [
+          {
+            "name": "distinctId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Person",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Person"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/PersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PersonNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PersonServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PersonServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/organizations": {
+      "post": {
+        "tags": [
+          "organizations"
+        ],
+        "operationId": "organizations.createOrganization",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Organization",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Organization"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/OrganizationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_OrganizationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateOrganizationBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/perks": {
+      "get": {
+        "tags": [
+          "perks"
+        ],
+        "operationId": "perks.listPerks",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Perk"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PerkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/paywall-deploys": {
+      "post": {
+        "tags": [
+          "paywall_deploys"
+        ],
+        "operationId": "paywall_deploys.createDeploy",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "201": {
+            "description": "CreatePaywallDeployResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CreatePaywallDeployResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/PaywallDeployUpgradeRequiredError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PaywallDeployUpgradeRequiredError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "422": {
+            "description": "Api/PaywallDeployValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PaywallDeployValidationError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaywallDeployServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PaywallDeployServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {}
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/paywall-deploys/{deployId}/blobs/{sha256}": {
+      "put": {
+        "tags": [
+          "paywall_deploys"
+        ],
+        "operationId": "paywall_deploys.uploadBlob",
+        "parameters": [
+          {
+            "name": "deployId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "sha256",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "UploadPaywallDeployBlobResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UploadPaywallDeployBlobResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/DeployBlobNotDeclaredError | Api/PaywallDeployNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_DeployBlobNotDeclaredError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_PaywallDeployNotFoundError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Api/PaywallDeployNotPendingError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PaywallDeployNotPendingError"
+                }
+              }
+            }
+          },
+          "422": {
+            "description": "Api/DeployBlobHashMismatchError | Api/PaywallDeployValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_DeployBlobHashMismatchError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_PaywallDeployValidationError"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaywallDeployServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PaywallDeployServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/octet-stream": {
+              "schema": {
+                "type": "string",
+                "format": "binary"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/paywall-deploys/{deployId}/finalize": {
+      "post": {
+        "tags": [
+          "paywall_deploys"
+        ],
+        "operationId": "paywall_deploys.finalizeDeploy",
+        "parameters": [
+          {
+            "name": "deployId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "FinalizePaywallDeployResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/FinalizePaywallDeployResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/PaywallDeployNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PaywallDeployNotFoundError"
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Api/IncompleteDeployError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_IncompleteDeployError"
+                }
+              }
+            }
+          },
+          "422": {
+            "description": "Api/PaywallDeployValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_PaywallDeployValidationError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaywallDeployServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PaywallDeployServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/paywall-locations": {
+      "get": {
+        "tags": [
+          "paywall_locations"
+        ],
+        "operationId": "paywall_locations.listPaywallLocations",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaywallLocation"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaywallLocationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PaywallLocationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/schema": {
+      "get": {
+        "tags": [
+          "schema"
+        ],
+        "operationId": "schema.getSchema",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "ProjectSchemaResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ProjectSchemaResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/SchemaServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_SchemaServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/schema/version": {
+      "get": {
+        "tags": [
+          "schema"
+        ],
+        "operationId": "schema.getSchemaVersion",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SchemaVersion",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SchemaVersion"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/SchemaServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_SchemaServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/projects": {
+      "post": {
+        "tags": [
+          "projects"
+        ],
+        "operationId": "projects.createProject",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Project",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Project"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_ProjectServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateProjectBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/projects/{organizationId}": {
+      "get": {
+        "tags": [
+          "projects"
+        ],
+        "operationId": "projects.listProjects",
+        "parameters": [
+          {
+            "name": "organizationId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Project"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ProjectServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ProjectServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/products": {
+      "get": {
+        "tags": [
+          "products"
+        ],
+        "operationId": "products.listProducts",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/Product"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ProductServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/product-perks/by-product-id/{productId}": {
+      "get": {
+        "tags": [
+          "product_perks"
+        ],
+        "operationId": "product_perks.listProductPerksByProductId",
+        "parameters": [
+          {
+            "name": "productId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/ProductPerk"
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/ProductPerkValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ProductPerkValidationError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/ProductPerkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_ProductPerkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/person": {
+      "get": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.getPerson",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "native",
+                "browser"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "react-native",
+                "web"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkPerson",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkPerson"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkValidationError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/SdkPersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkPersonNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/sdk/identify": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.identifyPerson",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "native",
+                "browser"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "react-native",
+                "web"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkPerson",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkPerson"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkValidationError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/SdkPersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkPersonNotFoundError"
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Api/SdkPersonAlreadyIdentifiedError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkPersonAlreadyIdentifiedError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkIdentifyBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/person/traits": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.syncPersonAttributes",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "native",
+                "browser"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "react-native",
+                "web"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkPerson",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkPerson"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkValidationError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/SdkPersonNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkPersonNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkSyncPersonAttributesBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/sync-transaction": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.syncTransaction",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "native",
+                "browser"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "react-native",
+                "web"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkSyncTransactionResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkSyncTransactionResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkValidationError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "appAccountToken": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "platform": {
+                    "type": "string",
+                    "enum": [
+                      "ios",
+                      "android"
+                    ]
+                  },
+                  "productSlug": {
+                    "type": "string"
+                  },
+                  "purchaseDate": {
+                    "anyOf": [
+                      {
+                        "anyOf": [
+                          {
+                            "type": "number"
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "NaN"
+                            ]
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "Infinity"
+                            ]
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "-Infinity"
+                            ]
+                          }
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity",
+                          "-Infinity",
+                          "NaN"
+                        ]
+                      }
+                    ]
+                  },
+                  "purchaseToken": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "quantity": {
+                    "anyOf": [
+                      {
+                        "anyOf": [
+                          {
+                            "type": "number"
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "NaN"
+                            ]
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "Infinity"
+                            ]
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "-Infinity"
+                            ]
+                          }
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity",
+                          "-Infinity",
+                          "NaN"
+                        ]
+                      }
+                    ]
+                  },
+                  "receipt": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "transactionId": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "platform",
+                  "productSlug",
+                  "purchaseDate",
+                  "quantity",
+                  "transactionId"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/evaluate-flags": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.evaluateFeatureFlags",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "native",
+                "browser"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "react-native",
+                "web"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkFeatureFlagsResponse",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkFeatureFlagsResponse"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/EvaluateFeatureFlagsBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/resolve-paywall": {
+      "post": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.resolvePaywall",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "native",
+                "browser"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "react-native",
+                "web"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/SdkResolvedPaywall"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/SdkValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_SdkValidationError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SdkServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_SdkServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SdkResolvePaywallBody"
+              }
+            }
+          },
+          "required": true
+        }
+      }
+    },
+    "/api/v1/sdk/schema": {
+      "get": {
+        "tags": [
+          "sdk"
+        ],
+        "operationId": "sdk.getSchema",
+        "parameters": [
+          {
+            "name": "x-distinct-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-publishable-key",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-bundle-id",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-client-locale",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-client-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-is-backgrounded",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-is-debug-build",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-nonce",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-observer-mode",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-brand",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-device",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-flavor",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "native",
+                "browser"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-platform-flavor-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-platform-version",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-preferred-locales",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          },
+          {
+            "name": "x-sdk",
+            "in": "header",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "react-native",
+                "web"
+              ]
+            },
+            "required": true
+          },
+          {
+            "name": "x-sdk-version",
+            "in": "header",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          },
+          {
+            "name": "x-storefront",
+            "in": "header",
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "required": false
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "SdkSchema",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SdkSchema"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/SchemaServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_SchemaServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/users/current": {
+      "get": {
+        "tags": [
+          "users"
+        ],
+        "operationId": "users.getUser",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "User",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/AuthenticationError | Api/UserServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_AuthenticationError"
+                    },
+                    {
+                      "$ref": "#/components/schemas/Api_UserServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-configurations": {
+      "get": {
+        "tags": [
+          "payment_provider_configurations"
+        ],
+        "operationId": "payment_provider_configurations.listPaymentProviderConfigurations",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaymentProviderConfiguration"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaymentProviderConfigurationServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PaymentProviderConfigurationServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/payment-provider-products": {
+      "get": {
+        "tags": [
+          "payment_provider_products"
+        ],
+        "operationId": "payment_provider_products.listPaymentProviderProducts",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/PaymentProviderProduct"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/PaymentProviderProductServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_PaymentProviderProductServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.createWebhookEndpoint",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/WebhookValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookValidationError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateWebhookEndpointBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.listWebhookEndpoints",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/WebhookEndpoint"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.getWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      },
+      "patch": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.updateWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/WebhookValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookValidationError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpdateWebhookEndpointBody"
+              }
+            }
+          },
+          "required": true
+        }
+      },
+      "delete": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.deleteWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "204": {
+            "description": "<No Content>"
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/rotate-secret": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.rotateWebhookSecret",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookEndpoint",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookEndpoint"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/endpoints/{endpointId}/test": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.testWebhookEndpoint",
+        "parameters": [
+          {
+            "name": "endpointId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDelivery"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookEndpointNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookEndpointNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.listWebhookDeliveries",
+        "parameters": [],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/WebhookDelivery"
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}": {
+      "get": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.getWebhookDelivery",
+        "parameters": [
+          {
+            "name": "deliveryId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookDeliveryWithAttempts",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDeliveryWithAttempts"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookDeliveryNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/webhooks/deliveries/{deliveryId}/retry": {
+      "post": {
+        "tags": [
+          "webhooks"
+        ],
+        "operationId": "webhooks.retryWebhookDelivery",
+        "parameters": [
+          {
+            "name": "deliveryId",
+            "in": "path",
+            "schema": {
+              "type": "string"
+            },
+            "required": true
+          }
+        ],
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "WebhookDelivery",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/WebhookDelivery"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Api/WebhookValidationError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookValidationError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Api/ActionForbiddenError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_ActionForbiddenError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Api/WebhookDeliveryNotFoundError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Api_WebhookDeliveryNotFoundError"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Api/WebhookServiceError",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/components/schemas/Api_WebhookServiceError"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "$ref": "#/components/schemas/Api_AuthenticationError"
+                        },
+                        {
+                          "$ref": "#/components/schemas/Api_NotAuthenticatedError"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "Api_ActionForbiddenError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/ActionForbiddenError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "Api_AuthenticationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/AuthenticationError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "Api_NotAuthenticatedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/NotAuthenticatedError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CreateSecretKeyBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "projectId"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKeyWithRawKey": {
+        "type": "object",
+        "properties": {
+          "end": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "isPublic": {
+            "type": "boolean"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prefix": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "rawKey": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "end",
+          "id",
+          "isPublic",
+          "name",
+          "prefix",
+          "projectId",
+          "rawKey"
+        ],
+        "additionalProperties": false
+      },
+      "Api_ApiKeyServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/ApiKeyServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ApiKey": {
+        "type": "object",
+        "properties": {
+          "end": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "isPublic": {
+            "type": "boolean"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prefix": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "rawKey": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "end",
+          "id",
+          "isPublic",
+          "name",
+          "prefix",
+          "projectId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_ApiKeyNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/ApiKeyNotFoundError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "CreatePersonBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "Person": {
+        "type": "object",
+        "properties": {
+          "personId": {
+            "type": "string"
+          },
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "personId",
+          "distinctId",
+          "email",
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PersonInvalidAnonymousIdError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PersonInvalidAnonymousIdError"
+            ]
+          },
+          "id": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "id"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PersonServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PersonServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PersonNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PersonNotFoundError"
+            ]
+          },
+          "id": {
+            "type": "string",
+            "allOf": [
+              {
+                "minLength": 1
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "id"
+        ],
+        "additionalProperties": false
+      },
+      "CreateOrganizationBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "additionalProperties": false
+      },
+      "Organization": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "Api_OrganizationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/OrganizationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Perk": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "projectId",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PerkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CreatePaywallDeployResponse": {
+        "type": "object",
+        "properties": {
+          "deployId": {
+            "type": "string"
+          },
+          "missing": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "deployId",
+          "missing"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaywallDeployServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaywallDeployServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaywallDeployUpgradeRequiredError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaywallDeployUpgradeRequiredError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          },
+          "schemaVersion": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity",
+                      "-Infinity",
+                      "NaN"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "_tag",
+          "message",
+          "schemaVersion"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaywallDeployValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaywallDeployValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          },
+          "violations": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "_tag",
+          "message",
+          "violations"
+        ],
+        "additionalProperties": false
+      },
+      "UploadPaywallDeployBlobResponse": {
+        "anyOf": [
+          {
+            "type": "object"
+          },
+          {
+            "type": "array"
+          }
+        ]
+      },
+      "Api_DeployBlobHashMismatchError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/DeployBlobHashMismatchError"
+            ]
+          },
+          "actualSha256": {
+            "type": "string"
+          },
+          "expectedSha256": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "actualSha256",
+          "expectedSha256"
+        ],
+        "additionalProperties": false
+      },
+      "Api_DeployBlobNotDeclaredError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/DeployBlobNotDeclaredError"
+            ]
+          },
+          "sha256": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "sha256"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaywallDeployNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaywallDeployNotFoundError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaywallDeployNotPendingError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaywallDeployNotPendingError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "FinalizedPaywallDeployComponent": {
+        "type": "object",
+        "properties": {
+          "componentId": {
+            "type": "string"
+          },
+          "contentHash": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "version": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          }
+        },
+        "required": [
+          "componentId",
+          "contentHash",
+          "id",
+          "version"
+        ],
+        "additionalProperties": false
+      },
+      "FinalizedPaywallDeployPaywall": {
+        "type": "object",
+        "properties": {
+          "contentHash": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "paywallId": {
+            "type": "string"
+          },
+          "releaseId": {
+            "type": "string"
+          },
+          "url": {
+            "type": "string"
+          },
+          "version": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          }
+        },
+        "required": [
+          "contentHash",
+          "id",
+          "paywallId",
+          "releaseId",
+          "url",
+          "version"
+        ],
+        "additionalProperties": false
+      },
+      "FinalizePaywallDeployResponse": {
+        "type": "object",
+        "properties": {
+          "components": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/FinalizedPaywallDeployComponent"
+            }
+          },
+          "deployId": {
+            "type": "string"
+          },
+          "paywalls": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/FinalizedPaywallDeployPaywall"
+            }
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "ready"
+            ]
+          }
+        },
+        "required": [
+          "components",
+          "deployId",
+          "paywalls",
+          "status"
+        ],
+        "additionalProperties": false
+      },
+      "Api_IncompleteDeployError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/IncompleteDeployError"
+            ]
+          },
+          "missing": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "_tag",
+          "missing"
+        ],
+        "additionalProperties": false
+      },
+      "PaywallLocation": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "description",
+          "id",
+          "name",
+          "projectId",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaywallLocationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaywallLocationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "SchemaLocation": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "description",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "SchemaPerk": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "SchemaProductProvider": {
+        "type": "object",
+        "properties": {
+          "configuration": {
+            "type": "object"
+          },
+          "providerId": {
+            "type": "string",
+            "enum": [
+              "appleAppStore",
+              "googlePlay"
+            ]
+          }
+        },
+        "required": [
+          "configuration",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "SchemaProduct": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "perks": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "providers": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SchemaProductProvider"
+            }
+          },
+          "slug": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "subscription"
+            ]
+          }
+        },
+        "required": [
+          "name",
+          "perks",
+          "providers",
+          "slug",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "ProjectSchemaResponse": {
+        "type": "object",
+        "properties": {
+          "enabledProviders": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "appleAppStore",
+                "googlePlay"
+              ]
+            }
+          },
+          "locations": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SchemaLocation"
+            }
+          },
+          "perks": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SchemaPerk"
+            }
+          },
+          "products": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SchemaProduct"
+            }
+          },
+          "version": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "enabledProviders",
+          "locations",
+          "perks",
+          "products",
+          "version"
+        ],
+        "additionalProperties": false
+      },
+      "Api_SchemaServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/SchemaServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "SchemaVersion": {
+        "type": "object",
+        "properties": {
+          "version": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "version"
+        ],
+        "additionalProperties": false
+      },
+      "CreateProjectBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "organizationId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "organizationId"
+        ],
+        "additionalProperties": false
+      },
+      "Project": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "Api_ProjectServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/ProjectServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Product": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "subscription",
+              "one-time",
+              "one-time-consumable"
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "projectId",
+          "slug",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "Api_ProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/ProductServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "ProductPerk": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "perkId": {
+            "type": "string"
+          },
+          "productId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "perkId",
+          "productId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_ProductPerkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/ProductPerkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Api_ProductPerkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/ProductPerkValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkEntitlementGrant": {
+        "type": "object",
+        "properties": {
+          "expiresAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "perkId": {
+            "type": "string"
+          },
+          "source": {
+            "type": "string",
+            "enum": [
+              "subscription",
+              "purchase",
+              "manual"
+            ]
+          },
+          "sourceId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "sourcePersonId": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "active",
+              "expired"
+            ]
+          }
+        },
+        "required": [
+          "expiresAt",
+          "perkId",
+          "source",
+          "sourceId",
+          "sourcePersonId",
+          "status"
+        ],
+        "additionalProperties": false
+      },
+      "SdkPurchaseHistoryEntry": {
+        "type": "object",
+        "properties": {
+          "createdAt": {
+            "type": "string"
+          },
+          "productId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "providerKey": {
+            "type": "string"
+          },
+          "purchaseId": {
+            "type": "string"
+          },
+          "sourcePersonId": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "one_time",
+              "subscription"
+            ]
+          }
+        },
+        "required": [
+          "createdAt",
+          "productId",
+          "providerKey",
+          "purchaseId",
+          "sourcePersonId",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "SdkCurrentSubscription": {
+        "type": "object",
+        "properties": {
+          "expiresAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "productId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "none",
+              "active",
+              "canceled",
+              "past_due",
+              "trialing"
+            ]
+          },
+          "subscriptionId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "expiresAt",
+          "productId",
+          "status",
+          "subscriptionId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSubscriptionHistoryEntry": {
+        "type": "object",
+        "properties": {
+          "canceledAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "expiresAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "isTrial": {
+            "type": "boolean"
+          },
+          "productId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "sourcePersonId": {
+            "type": "string"
+          },
+          "startsAt": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "active",
+              "canceled",
+              "expired",
+              "trialing",
+              "past_due"
+            ]
+          },
+          "subscriptionId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "canceledAt",
+          "expiresAt",
+          "isTrial",
+          "productId",
+          "sourcePersonId",
+          "startsAt",
+          "status",
+          "subscriptionId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkPerson": {
+        "type": "object",
+        "properties": {
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "entitlements": {
+            "type": "object",
+            "properties": {
+              "grants": {
+                "type": "array",
+                "items": {
+                  "$ref": "#/components/schemas/SdkEntitlementGrant"
+                }
+              }
+            },
+            "required": [
+              "grants"
+            ],
+            "additionalProperties": false
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "personId": {
+            "type": "string"
+          },
+          "purchases": {
+            "type": "object",
+            "properties": {
+              "history": {
+                "type": "array",
+                "items": {
+                  "$ref": "#/components/schemas/SdkPurchaseHistoryEntry"
+                }
+              }
+            },
+            "required": [
+              "history"
+            ],
+            "additionalProperties": false
+          },
+          "snapshotContext": {
+            "type": "object",
+            "properties": {
+              "includedPersonIds": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "migrationJobId": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "mode": {
+                "type": "string",
+                "enum": [
+                  "persisted",
+                  "temporary_pending_transfer"
+                ]
+              }
+            },
+            "required": [
+              "includedPersonIds",
+              "migrationJobId",
+              "mode"
+            ],
+            "additionalProperties": false
+          },
+          "subscriptions": {
+            "type": "object",
+            "properties": {
+              "current": {
+                "anyOf": [
+                  {
+                    "$ref": "#/components/schemas/SdkCurrentSubscription"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "history": {
+                "type": "array",
+                "items": {
+                  "$ref": "#/components/schemas/SdkSubscriptionHistoryEntry"
+                }
+              }
+            },
+            "required": [
+              "current",
+              "history"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "required": [
+          "distinctId",
+          "email",
+          "entitlements",
+          "name",
+          "personId",
+          "purchases",
+          "snapshotContext",
+          "subscriptions"
+        ],
+        "additionalProperties": false
+      },
+      "Api_SdkServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/SdkServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Api_SdkPersonNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/SdkPersonNotFoundError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "Api_SdkValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/SdkValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "SdkIdentifyBody": {
+        "type": "object",
+        "properties": {
+          "distinctId": {
+            "type": "string"
+          },
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "anyOf": [
+                            {
+                              "type": "number"
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "NaN"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "Infinity"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "-Infinity"
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "Infinity",
+                            "-Infinity",
+                            "NaN"
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_SdkPersonAlreadyIdentifiedError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/SdkPersonAlreadyIdentifiedError"
+            ]
+          },
+          "distinctId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "distinctId"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSyncPersonAttributesBody": {
+        "type": "object",
+        "properties": {
+          "email": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "traits": {
+            "anyOf": [
+              {
+                "type": "object",
+                "additionalProperties": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "anyOf": [
+                        {
+                          "anyOf": [
+                            {
+                              "type": "number"
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "NaN"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "Infinity"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "-Infinity"
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "Infinity",
+                            "-Infinity",
+                            "NaN"
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkSyncTransactionResponse": {
+        "type": "object",
+        "properties": {
+          "accepted": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "accepted"
+        ],
+        "additionalProperties": false
+      },
+      "EvaluateFeatureFlagsBody": {
+        "type": "object",
+        "properties": {
+          "flagKeys": {
+            "anyOf": [
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagResult": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean"
+          },
+          "key": {
+            "type": "string"
+          },
+          "payload": {
+            "anyOf": [
+              {},
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "variantKey": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "enabled",
+          "key",
+          "payload",
+          "variantKey"
+        ],
+        "additionalProperties": false
+      },
+      "SdkFeatureFlagsResponse": {
+        "type": "object",
+        "properties": {
+          "flags": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SdkFeatureFlagResult"
+            }
+          }
+        },
+        "required": [
+          "flags"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvePaywallBody": {
+        "type": "object",
+        "properties": {
+          "locationSlug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "locationSlug"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywallShowing": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string"
+          },
+          "paywall": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "id": {
+                    "type": "string"
+                  },
+                  "name": {
+                    "type": "string"
+                  },
+                  "slug": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "id",
+                  "name",
+                  "slug"
+                ],
+                "additionalProperties": false
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallRelease": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "htmlUrl": {
+                    "type": "string"
+                  },
+                  "publishedAt": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "releaseId": {
+                    "type": "string"
+                  },
+                  "runtime": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "contentHash": {
+                            "type": "string"
+                          },
+                          "productSlugs": {
+                            "type": "array",
+                            "items": {
+                              "type": "string"
+                            }
+                          },
+                          "variables": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "anyOf": [
+                                    {
+                                      "anyOf": [
+                                        {
+                                          "type": "number"
+                                        },
+                                        {
+                                          "type": "string",
+                                          "enum": [
+                                            "NaN"
+                                          ]
+                                        },
+                                        {
+                                          "type": "string",
+                                          "enum": [
+                                            "Infinity"
+                                          ]
+                                        },
+                                        {
+                                          "type": "string",
+                                          "enum": [
+                                            "-Infinity"
+                                          ]
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "string",
+                                      "enum": [
+                                        "Infinity",
+                                        "-Infinity",
+                                        "NaN"
+                                      ]
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "boolean"
+                                }
+                              ]
+                            }
+                          }
+                        },
+                        "required": [
+                          "contentHash",
+                          "productSlugs",
+                          "variables"
+                        ],
+                        "additionalProperties": false
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "version": {
+                    "anyOf": [
+                      {
+                        "anyOf": [
+                          {
+                            "type": "number"
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "NaN"
+                            ]
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "Infinity"
+                            ]
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "-Infinity"
+                            ]
+                          }
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity",
+                          "-Infinity",
+                          "NaN"
+                        ]
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "htmlUrl",
+                  "publishedAt",
+                  "releaseId",
+                  "runtime",
+                  "version"
+                ],
+                "additionalProperties": false
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "paywallReleaseId": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "startedAt": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "paywall_release",
+              "feature_flag"
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "paywall",
+          "paywallId",
+          "paywallRelease",
+          "paywallReleaseId",
+          "startedAt",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "SdkResolvedPaywall": {
+        "type": "object",
+        "properties": {
+          "location": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "name": {
+                "type": "string"
+              },
+              "slug": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "id",
+              "name",
+              "slug"
+            ],
+            "additionalProperties": false
+          },
+          "showing": {
+            "$ref": "#/components/schemas/SdkResolvedPaywallShowing"
+          }
+        },
+        "required": [
+          "location",
+          "showing"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSchemaLocation": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "description",
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSchemaPerk": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "slug": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "slug"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSchemaProduct": {
+        "type": "object",
+        "properties": {
+          "configuration": {
+            "type": "object",
+            "properties": {
+              "perks": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "boolean",
+                  "enum": [
+                    true
+                  ]
+                }
+              },
+              "providers": {
+                "type": "object",
+                "properties": {
+                  "appleAppStore": {
+                    "anyOf": [
+                      {
+                        "type": "object"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  },
+                  "googlePlay": {
+                    "anyOf": [
+                      {
+                        "type": "object"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ]
+                  }
+                },
+                "additionalProperties": false
+              }
+            },
+            "required": [
+              "perks",
+              "providers"
+            ],
+            "additionalProperties": false
+          },
+          "properties": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "name"
+            ],
+            "additionalProperties": false
+          },
+          "slug": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "enum": [
+              "subscription"
+            ]
+          }
+        },
+        "required": [
+          "configuration",
+          "properties",
+          "slug",
+          "type"
+        ],
+        "additionalProperties": false
+      },
+      "SdkSchema": {
+        "type": "object",
+        "properties": {
+          "locations": {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/SdkSchemaLocation"
+            }
+          },
+          "perks": {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/SdkSchemaPerk"
+            }
+          },
+          "products": {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/components/schemas/SdkSchemaProduct"
+            }
+          },
+          "version": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "locations",
+          "perks",
+          "products",
+          "version"
+        ],
+        "additionalProperties": false
+      },
+      "User": {
+        "type": "object",
+        "properties": {
+          "createdAt": {
+            "type": "string"
+          },
+          "email": {
+            "type": "string"
+          },
+          "emailVerified": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "image": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "organizations": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "logo": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "slug": {
+                  "type": "string"
+                },
+                "workosOrganizationId": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              "required": [
+                "id",
+                "logo",
+                "name",
+                "slug",
+                "workosOrganizationId"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "projects": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "logo": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "name": {
+                  "type": "string"
+                },
+                "organizationId": {
+                  "type": "string"
+                },
+                "slug": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "id",
+                "logo",
+                "name",
+                "organizationId",
+                "slug"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "updatedAt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "createdAt",
+          "email",
+          "emailVerified",
+          "id",
+          "image",
+          "name",
+          "organizations",
+          "projects",
+          "updatedAt"
+        ],
+        "additionalProperties": false
+      },
+      "Api_UserServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/UserServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderConfiguration": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "providerId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "enabled",
+          "id",
+          "name",
+          "projectId",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaymentProviderConfigurationServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaymentProviderConfigurationServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "PaymentProviderProduct": {
+        "type": "object",
+        "properties": {
+          "configuration": {
+            "type": "object"
+          },
+          "id": {
+            "type": "string"
+          },
+          "paymentProviderConfigurationId": {
+            "type": "string"
+          },
+          "productId": {
+            "type": "string"
+          },
+          "providerId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "configuration",
+          "id",
+          "paymentProviderConfigurationId",
+          "productId",
+          "providerId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_PaymentProviderProductServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/PaymentProviderProductServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "CreateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "name": {
+            "type": "string"
+          },
+          "url": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "events",
+          "name",
+          "url"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookEndpoint": {
+        "type": "object",
+        "properties": {
+          "consecutiveFailures": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "description": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "person.created",
+                "person.updated",
+                "person.deleted",
+                "subscription.created",
+                "subscription.renewed",
+                "subscription.cancelled",
+                "subscription.expired",
+                "purchase.completed",
+                "purchase.refunded"
+              ]
+            }
+          },
+          "id": {
+            "type": "string"
+          },
+          "lastSuccessAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "secret": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "active",
+              "disabled",
+              "failed"
+            ]
+          },
+          "url": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "consecutiveFailures",
+          "createdAt",
+          "description",
+          "events",
+          "id",
+          "lastSuccessAt",
+          "name",
+          "projectId",
+          "secret",
+          "status",
+          "url"
+        ],
+        "additionalProperties": false
+      },
+      "Api_WebhookValidationError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/WebhookValidationError"
+            ]
+          },
+          "message": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "message"
+        ],
+        "additionalProperties": false
+      },
+      "Api_WebhookServiceError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/WebhookServiceError"
+            ]
+          },
+          "cause": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "cause"
+        ],
+        "additionalProperties": false
+      },
+      "Api_WebhookEndpointNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/WebhookEndpointNotFoundError"
+            ]
+          },
+          "endpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "endpointId"
+        ],
+        "additionalProperties": false
+      },
+      "UpdateWebhookEndpointBody": {
+        "type": "object",
+        "properties": {
+          "description": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "events": {
+            "anyOf": [
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "name": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "status": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "active",
+                  "disabled"
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "url": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "additionalProperties": false
+      },
+      "WebhookDelivery": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          },
+          "completedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "eventOccurredAt": {
+            "type": "string"
+          },
+          "eventType": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "maxAttempts": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          },
+          "nextAttemptAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "payload": {},
+          "projectId": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "pending",
+              "in_progress",
+              "succeeded",
+              "failed",
+              "exhausted"
+            ]
+          },
+          "webhookEndpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "attemptCount",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryAttempt": {
+        "type": "object",
+        "properties": {
+          "attemptNumber": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "durationMs": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity",
+                      "-Infinity",
+                      "NaN"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "errorMessage": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "id": {
+            "type": "string"
+          },
+          "responseBody": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "statusCode": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "anyOf": [
+                      {
+                        "type": "number"
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "NaN"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "Infinity"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "-Infinity"
+                        ]
+                      }
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity",
+                      "-Infinity",
+                      "NaN"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "succeeded": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "attemptNumber",
+          "createdAt",
+          "durationMs",
+          "errorMessage",
+          "id",
+          "responseBody",
+          "statusCode",
+          "succeeded"
+        ],
+        "additionalProperties": false
+      },
+      "WebhookDeliveryWithAttempts": {
+        "type": "object",
+        "properties": {
+          "attemptCount": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          },
+          "attempts": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/WebhookDeliveryAttempt"
+            }
+          },
+          "completedAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "createdAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "eventOccurredAt": {
+            "type": "string"
+          },
+          "eventType": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "maxAttempts": {
+            "anyOf": [
+              {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "NaN"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "Infinity"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "-Infinity"
+                    ]
+                  }
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "Infinity",
+                  "-Infinity",
+                  "NaN"
+                ]
+              }
+            ]
+          },
+          "nextAttemptAt": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "payload": {},
+          "projectId": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string",
+            "enum": [
+              "pending",
+              "in_progress",
+              "succeeded",
+              "failed",
+              "exhausted"
+            ]
+          },
+          "webhookEndpointId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "attemptCount",
+          "attempts",
+          "completedAt",
+          "createdAt",
+          "eventOccurredAt",
+          "eventType",
+          "id",
+          "maxAttempts",
+          "nextAttemptAt",
+          "payload",
+          "projectId",
+          "status",
+          "webhookEndpointId"
+        ],
+        "additionalProperties": false
+      },
+      "Api_WebhookDeliveryNotFoundError": {
+        "type": "object",
+        "properties": {
+          "_tag": {
+            "type": "string",
+            "enum": [
+              "Api/WebhookDeliveryNotFoundError"
+            ]
+          },
+          "deliveryId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "_tag",
+          "deliveryId"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "securitySchemes": {}
+  },
+  "security": [],
+  "tags": [
+    {
+      "name": "auth"
+    },
+    {
+      "name": "api_keys"
+    },
+    {
+      "name": "persons"
+    },
+    {
+      "name": "organizations"
+    },
+    {
+      "name": "perks"
+    },
+    {
+      "name": "paywall_deploys"
+    },
+    {
+      "name": "paywall_locations"
+    },
+    {
+      "name": "schema"
+    },
+    {
+      "name": "projects"
+    },
+    {
+      "name": "products"
+    },
+    {
+      "name": "product_perks"
+    },
+    {
+      "name": "sdk"
+    },
+    {
+      "name": "users"
+    },
+    {
+      "name": "payment_provider_configurations"
+    },
+    {
+      "name": "payment_provider_products"
+    },
+    {
+      "name": "webhooks"
+    }
+  ]
+}
diff --git a/apps/www/src/features/docs/source.config.ts b/apps/www/src/features/docs/source.config.ts
index f7eafc90b..5083247dc 100644
--- a/apps/www/src/features/docs/source.config.ts
+++ b/apps/www/src/features/docs/source.config.ts
@@ -4,6 +4,7 @@ import {
   frontmatterSchema,
   metaSchema,
 } from "../fumadocs-config.ts";
+import { voidhashShikiDark, voidhashShikiLight } from "./lib/shiki-theme.ts";
 
 // You can customise Zod schemas for frontmatter and `meta.json` here
 // see https://fumadocs.vercel.app/docs/mdx/collections#define-docs
@@ -26,5 +27,14 @@ export default defineConfig({
       },
     },
     valueToExport: ["elementIds", "toc"],
+    // Highlight code with the Voidhash themes so docs snippets match the paywall
+    // designer's Monaco editor. Keys stay `light`/`dark` so fumadocs' existing
+    // `--shiki-light`/`--shiki-dark` CSS switching keeps working.
+    rehypeCodeOptions: {
+      themes: {
+        light: voidhashShikiLight,
+        dark: voidhashShikiDark,
+      },
+    },
   },
 });
diff --git a/apps/www/src/features/docs/source.generated.ts b/apps/www/src/features/docs/source.generated.ts
deleted file mode 100644
index 7c5e2c6e7..000000000
--- a/apps/www/src/features/docs/source.generated.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-/// <reference types="vite/client" />
-import { fromConfig } from 'fumadocs-mdx/runtime/vite';
-import type * as Config from './source.config';
-
-export const create = fromConfig<typeof Config>();
-
-export const docs = {
-  doc: create.doc("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{mdx,md}"], {
-    "base": "./src/features/docs/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  })),
-  meta: create.meta("docs", "./src/features/docs/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
-    "import": "default",
-    "base": "./src/features/docs/content/docs",
-    "query": {
-      "collection": "docs"
-    }
-  }))
-};
\ No newline at end of file
diff --git a/apps/www/src/features/fumadocs-config.ts b/apps/www/src/features/fumadocs-config.ts
index f0eb1f979..ca4e0850e 100644
--- a/apps/www/src/features/fumadocs-config.ts
+++ b/apps/www/src/features/fumadocs-config.ts
@@ -54,6 +54,18 @@ type FumadocsConfig = {
       };
     };
     valueToExport?: string[];
+    /**
+     * Options forwarded to fumadocs' `rehypeCode` (Shiki) plugin. Only `themes`
+     * is overridden here; the plugin merges the rest of its defaults (notation
+     * transformers, meta parsing). Theme values may be a bundled Shiki theme
+     * name or a full TextMate theme object.
+     */
+    rehypeCodeOptions?: {
+      themes?: {
+        light?: string | Record<string, unknown>;
+        dark?: string | Record<string, unknown>;
+      };
+    };
   };
 };
 
diff --git a/apps/www/src/features/source.config.ts b/apps/www/src/features/source.config.ts
new file mode 100644
index 000000000..081da7c30
--- /dev/null
+++ b/apps/www/src/features/source.config.ts
@@ -0,0 +1,46 @@
+import { defineConfig, defineDocs, frontmatterSchema, metaSchema } from "./fumadocs-config.ts";
+import { voidhashShikiDark, voidhashShikiLight } from "./docs/lib/shiki-theme.ts";
+
+// Both documentation surfaces (product docs + design system) are declared as
+// collections in a single config so fumadocs-mdx emits one `.source` runtime
+// bundle. Keeping them in one config avoids running two `mdx()` plugin
+// instances against the same output directory (which would clobber each other).
+export const docs = defineDocs({
+  dir: "src/features/docs/content/docs",
+  docs: {
+    schema: frontmatterSchema,
+  },
+  meta: {
+    schema: metaSchema,
+  },
+});
+
+export const design = defineDocs({
+  dir: "src/features/design/content/docs",
+  docs: {
+    schema: frontmatterSchema,
+  },
+  meta: {
+    schema: metaSchema,
+  },
+});
+
+export default defineConfig({
+  mdxOptions: {
+    remarkNpmOptions: {
+      persist: {
+        id: "package-manager",
+      },
+    },
+    valueToExport: ["elementIds", "toc"],
+    // Highlight code with the Voidhash themes so docs snippets match the paywall
+    // designer's Monaco editor. Keys stay `light`/`dark` so fumadocs' existing
+    // `--shiki-light`/`--shiki-dark` CSS switching keeps working.
+    rehypeCodeOptions: {
+      themes: {
+        light: voidhashShikiLight,
+        dark: voidhashShikiDark,
+      },
+    },
+  },
+});
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts
index d1f9b2ed4..dc39e3287 100644
--- a/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/monaco-theme.ts
@@ -1,13 +1,19 @@
 import type * as monaco from "monaco-editor";
 
+import {
+  CODE_PALETTE as P,
+  darkSyntaxRoles,
+  lightSyntaxRoles,
+  type SyntaxRoles,
+} from "@/lib/code-theme";
+
 /**
  * Voidhash-branded Monaco themes for the paywall code editor.
  *
- * Colors are the sRGB resolutions of the OKLCH brand palette in
- * `packages/ui/styles/brand-theme.css`. Syntax hues follow a fixed role→family
- * mapping (violet keywords, green strings, amber numbers, blue types, fuchsia
- * regex/escapes, red invalids) so the light and dark variants read as the same
- * theme at different lightness.
+ * The palette and per-role syntax mapping live in `@/lib/code-theme` so the
+ * documentation site's Shiki highlighting stays in visual lockstep with this
+ * editor. This module maps those roles onto Monaco's Monarch token names and
+ * adds the editor-chrome colors (widgets, gutters, scrollbars) Monaco needs.
  *
  * Scope note: monaco-editor's bundled TypeScript mode ships only the Monarch
  * grammar and registers no document-semantic-tokens provider, so identifiers
@@ -19,70 +25,9 @@ import type * as monaco from "monaco-editor";
  * `modifiers = value & 255`); the stock worker proxy does not expose it.
  */
 
-/** Brand palette (subset used by the themes), stored with a leading `#`. */
-const P = {
-  white: "#ffffff",
-  zinc50: "#fafafa",
-  zinc100: "#f4f4f4",
-  zinc200: "#e4e4e4",
-  zinc300: "#d4d4d4",
-  zinc400: "#a0a0a0",
-  zinc500: "#727272",
-  zinc600: "#535353",
-  zinc700: "#404040",
-  zinc800: "#272727",
-  zinc900: "#181818",
-  zinc950: "#101010",
-  blue50: "#edf8ff",
-  blue300: "#83d1ff",
-  blue400: "#48b7ff",
-  blue500: "#1e93ff",
-  blue600: "#0673ff",
-  blue700: "#005eff",
-  blue950: "#0e285d",
-  violet300: "#c0a6ff",
-  violet400: "#a373ff",
-  violet700: "#7000f0",
-  fuchsia300: "#f49cff",
-  fuchsia400: "#ef61ff",
-  fuchsia700: "#ab00cb",
-  red400: "#ff5d78",
-  red500: "#ff244f",
-  red600: "#f00040",
-  orange400: "#ff9d32",
-  orange700: "#cc4902",
-  amber400: "#ffdf1b",
-  amber500: "#ffbf00",
-  amber700: "#bb6802",
-  amber800: "#985008",
-  amber300: "#ffed46",
-  pistachio300: "#dffe58",
-  pistachio400: "#ccf526",
-  pistachio600: "#91bd00",
-  pistachio700: "#658506",
-  pistachio800: "#51690b",
-} as const;
-
 export const VOIDHASH_DARK_THEME = "voidhash-dark";
 export const VOIDHASH_LIGHT_THEME = "voidhash-light";
 
-/**
- * Per-role syntax colors. Only roles that the Monarch TypeScript grammar
- * actually emits are represented. Shades differ per variant; roles do not.
- */
-interface SyntaxRoles {
-  comment: string;
-  keyword: string;
-  string: string;
-  escape: string;
-  number: string;
-  regexp: string;
-  type: string;
-  punctuation: string;
-  variable: string;
-  invalid: string;
-}
-
 /** Monaco token rules expect `RRGGBB` (no leading `#`). */
 const bare = (hex: string): string => hex.replace("#", "");
 
@@ -128,38 +73,10 @@ function tokenRules(r: SyntaxRoles): monaco.editor.ITokenThemeRule[] {
   ];
 }
 
-const darkRoles: SyntaxRoles = {
-  comment: P.zinc500,
-  keyword: P.violet300,
-  string: P.pistachio300,
-  escape: P.fuchsia400,
-  number: P.amber300,
-  regexp: P.fuchsia300,
-  type: P.blue300,
-  punctuation: P.zinc400,
-  variable: P.zinc100,
-  invalid: P.red400,
-};
-
-const lightRoles: SyntaxRoles = {
-  comment: P.zinc500,
-  keyword: P.violet700,
-  string: P.pistachio800,
-  escape: P.fuchsia700,
-  number: P.amber800,
-  regexp: P.fuchsia700,
-  type: P.blue700,
-  // Distinct from `comment` (also a gray) so delimiters and trailing comments
-  // never collapse to one hue in light mode.
-  punctuation: P.zinc600,
-  variable: P.zinc900,
-  invalid: P.red600,
-};
-
 const darkTheme: monaco.editor.IStandaloneThemeData = {
   base: "vs-dark",
   inherit: true,
-  rules: tokenRules(darkRoles),
+  rules: tokenRules(darkSyntaxRoles),
   colors: {
     "editor.background": P.zinc950,
     "editor.foreground": P.zinc200,
@@ -224,7 +141,7 @@ const darkTheme: monaco.editor.IStandaloneThemeData = {
 const lightTheme: monaco.editor.IStandaloneThemeData = {
   base: "vs",
   inherit: true,
-  rules: tokenRules(lightRoles),
+  rules: tokenRules(lightSyntaxRoles),
   colors: {
     "editor.background": P.white,
     "editor.foreground": P.zinc900,
diff --git a/apps/www/src/generated.d.ts b/apps/www/src/generated.d.ts
new file mode 100644
index 000000000..3db4e4b41
--- /dev/null
+++ b/apps/www/src/generated.d.ts
@@ -0,0 +1,53 @@
+/**
+ * Ambient types for the fumadocs-mdx generated runtime bundles.
+ *
+ * The real modules live in `.source/{server,browser}.ts` (emitted by the
+ * `fumadocs-mdx` vite plugin / CLI and resolved at runtime via `resolve.alias`
+ * in `vite.config.ts`). Those generated files carry `// @ts-nocheck` and rely on
+ * Vite-only constructs (`import.meta.glob`, top-level `await`), so we describe
+ * their public shape here instead of having `tsc` type-check the artifacts.
+ */
+
+declare module "@generated/server" {
+  import type { Source } from "fumadocs-core/source";
+
+  interface ServerCollection {
+    /** Builds a fumadocs `Source` consumable by `loader()`. */
+    toFumadocsSource(options?: { baseDir?: string }): Source<{
+      pageData: Record<string, unknown>;
+      metaData: Record<string, unknown>;
+    }>;
+  }
+
+  export const docs: ServerCollection;
+  export const design: ServerCollection;
+}
+
+declare module "@generated/browser" {
+  import type { ComponentType, ReactNode } from "react";
+  import type { TableOfContents } from "fumadocs-core/toc";
+
+  interface MDXModule {
+    default: ComponentType<{ components?: Record<string, unknown> }>;
+    frontmatter: { title: string; description?: string; [key: string]: unknown };
+    toc: TableOfContents;
+  }
+
+  interface ClientLoader {
+    preload(path: string): Promise<MDXModule>;
+    getComponent(path: string): ComponentType;
+    useContent(path: string, props?: Record<string, unknown>): ReactNode;
+  }
+
+  interface BrowserCollection {
+    /** The raw `import.meta.glob` map of `slug -> () => Promise<MDXModule>`. */
+    raw: Record<string, () => Promise<MDXModule>>;
+    createClientLoader(options: {
+      id?: string;
+      component: (doc: MDXModule, props?: Record<string, unknown>) => ReactNode;
+    }): ClientLoader;
+  }
+
+  const collections: { docs: BrowserCollection; design: BrowserCollection };
+  export default collections;
+}
diff --git a/apps/www/src/lib/code-theme.ts b/apps/www/src/lib/code-theme.ts
new file mode 100644
index 000000000..3a2e4d191
--- /dev/null
+++ b/apps/www/src/lib/code-theme.ts
@@ -0,0 +1,116 @@
+/**
+ * Shared source of truth for Voidhash code-syntax coloring.
+ *
+ * Both the paywall designer's Monaco editor themes
+ * (`features/studio/paywalls/designer/code-mode/monaco-theme.ts`) and the
+ * documentation site's Shiki themes (`features/docs/lib/shiki-theme.ts`) derive
+ * their colors from the palette and per-role mapping defined here, so the two
+ * surfaces render code identically.
+ *
+ * Colors are the sRGB resolutions of the OKLCH brand palette in
+ * `packages/ui/styles/brand-theme.css`. Syntax hues follow a fixed role→family
+ * mapping (violet keywords, green strings, amber numbers, blue types, fuchsia
+ * regex/escapes, red invalids) so the light and dark variants read as the same
+ * theme at different lightness.
+ */
+
+/** Brand palette (subset used by the code themes), stored with a leading `#`. */
+export const CODE_PALETTE = {
+  white: "#ffffff",
+  zinc50: "#fafafa",
+  zinc100: "#f4f4f4",
+  zinc200: "#e4e4e4",
+  zinc300: "#d4d4d4",
+  zinc400: "#a0a0a0",
+  zinc500: "#727272",
+  zinc600: "#535353",
+  zinc700: "#404040",
+  zinc800: "#272727",
+  zinc900: "#181818",
+  zinc950: "#101010",
+  blue50: "#edf8ff",
+  blue300: "#83d1ff",
+  blue400: "#48b7ff",
+  blue500: "#1e93ff",
+  blue600: "#0673ff",
+  blue700: "#005eff",
+  blue950: "#0e285d",
+  violet300: "#c0a6ff",
+  violet400: "#a373ff",
+  violet700: "#7000f0",
+  fuchsia300: "#f49cff",
+  fuchsia400: "#ef61ff",
+  fuchsia700: "#ab00cb",
+  red400: "#ff5d78",
+  red500: "#ff244f",
+  red600: "#f00040",
+  orange400: "#ff9d32",
+  orange700: "#cc4902",
+  amber400: "#ffdf1b",
+  amber500: "#ffbf00",
+  amber700: "#bb6802",
+  amber800: "#985008",
+  amber300: "#ffed46",
+  pistachio300: "#dffe58",
+  pistachio400: "#ccf526",
+  pistachio600: "#91bd00",
+  pistachio700: "#658506",
+  pistachio800: "#51690b",
+} as const;
+
+/**
+ * Per-role syntax colors. Roles map onto both Monaco's Monarch token names and
+ * Shiki's TextMate scopes. Shades differ per variant; the role→family mapping
+ * does not.
+ */
+export interface SyntaxRoles {
+  comment: string;
+  keyword: string;
+  string: string;
+  escape: string;
+  number: string;
+  regexp: string;
+  type: string;
+  punctuation: string;
+  variable: string;
+  invalid: string;
+}
+
+export const darkSyntaxRoles: SyntaxRoles = {
+  comment: CODE_PALETTE.zinc500,
+  keyword: CODE_PALETTE.violet300,
+  string: CODE_PALETTE.pistachio300,
+  escape: CODE_PALETTE.fuchsia400,
+  number: CODE_PALETTE.amber300,
+  regexp: CODE_PALETTE.fuchsia300,
+  type: CODE_PALETTE.blue300,
+  punctuation: CODE_PALETTE.zinc400,
+  variable: CODE_PALETTE.zinc100,
+  invalid: CODE_PALETTE.red400,
+};
+
+export const lightSyntaxRoles: SyntaxRoles = {
+  comment: CODE_PALETTE.zinc500,
+  keyword: CODE_PALETTE.violet700,
+  string: CODE_PALETTE.pistachio800,
+  escape: CODE_PALETTE.fuchsia700,
+  number: CODE_PALETTE.amber800,
+  regexp: CODE_PALETTE.fuchsia700,
+  type: CODE_PALETTE.blue700,
+  // Distinct from `comment` (also a gray) so delimiters and trailing comments
+  // never collapse to one hue in light mode.
+  punctuation: CODE_PALETTE.zinc600,
+  variable: CODE_PALETTE.zinc900,
+  invalid: CODE_PALETTE.red600,
+};
+
+/** Editor/canvas base colors (background + default foreground) per variant. */
+export const darkBase = {
+  background: CODE_PALETTE.zinc950,
+  foreground: CODE_PALETTE.zinc200,
+} as const;
+
+export const lightBase = {
+  background: CODE_PALETTE.white,
+  foreground: CODE_PALETTE.zinc900,
+} as const;
diff --git a/apps/www/src/lib/create-vite-source.ts b/apps/www/src/lib/create-vite-source.ts
deleted file mode 100644
index 263ccd62f..000000000
--- a/apps/www/src/lib/create-vite-source.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-import type { MetaData, PageData, Source } from "fumadocs-core/source";
-
-interface DocEntry<Data extends PageData> {
-  readonly base: string;
-  (): Promise<
-    Record<string, unknown> & {
-      readonly default: unknown;
-      readonly extractedReferences?: unknown;
-      readonly lastModified?: Date;
-      readonly _markdown?: string;
-      readonly structuredData?: unknown;
-      readonly toc?: unknown;
-      readonly frontmatter: Data;
-    }
-  >;
-}
-
-interface MetaEntry<Data extends MetaData> {
-  readonly base: string;
-  (): Promise<Data>;
-}
-
-type DocMap<Data extends PageData> = Record<string, DocEntry<Data>>;
-type MetaMap<Data extends MetaData> = Record<string, MetaEntry<Data>>;
-
-const fullPath = (base: string, file: string): string =>
-  `${base.replace(/\/$/, "")}/${file.replace(/^\.\//, "")}`;
-
-/**
- * Builds a Fumadocs loader source from generated Vite doc and meta maps.
- */
-export const createViteSource = async <
-  DocOut extends PageData,
-  MetaOut extends MetaData,
->(
-  doc: DocMap<DocOut>,
-  meta: MetaMap<MetaOut>,
-): Promise<
-  Source<{
-    pageData: DocOut;
-    metaData: MetaOut;
-  }>
-> => {
-  const pageFiles = Object.entries(doc).map(async ([file, content]) => {
-    const entry = await content();
-    const path = fullPath(content.base, file);
-
-    return {
-      absolutePath: path,
-      data: {
-        body: entry.default,
-        extractedReferences: entry.extractedReferences,
-        getText: async () => {
-          if (typeof entry._markdown !== "string") {
-            throw new Error("Processed Markdown is not available for this page");
-          }
-
-          return entry._markdown;
-        },
-        info: {
-          fullPath: path,
-          path: file,
-        },
-        lastModified: entry.lastModified,
-        structuredData: entry.structuredData,
-        toc: entry.toc,
-        _exports: entry,
-        ...entry.frontmatter,
-      } as DocOut,
-      path: file,
-      type: "page" as const,
-    };
-  });
-
-  const metaFiles = Object.entries(meta).map(async ([file, content]) => {
-    const path = fullPath(content.base, file);
-
-    return {
-      absolutePath: path,
-      data: {
-        info: {
-          fullPath: path,
-          path: file,
-        },
-        ...(await content()),
-      },
-      path: file,
-      type: "meta" as const,
-    };
-  });
-
-  return {
-    files: await Promise.all([...pageFiles, ...metaFiles]),
-  };
-};
diff --git a/apps/www/src/routeTree.gen.ts b/apps/www/src/routeTree.gen.ts
index 5d4900532..3615fd862 100644
--- a/apps/www/src/routeTree.gen.ts
+++ b/apps/www/src/routeTree.gen.ts
@@ -30,6 +30,7 @@ import { Route as StudioAuthenticatedRouteRouteImport } from './routes/studio/_a
 import { Route as StudioAuthenticatedIndexRouteImport } from './routes/studio/_authenticated/index'
 import { Route as AuthDevicesIndexRouteImport } from './routes/auth/devices/index'
 import { Route as DocsApiSearchRouteImport } from './routes/docs/api/search'
+import { Route as DocsApiProxyRouteImport } from './routes/docs/api/proxy'
 import { Route as DesignApiSearchRouteImport } from './routes/design/api/search'
 import { Route as ApiAuthCallbackRouteImport } from './routes/api/auth/callback'
 import { Route as StudioAuthenticatedDashboardRouteRouteImport } from './routes/studio/_authenticated/_dashboard/route'
@@ -186,6 +187,11 @@ const DocsApiSearchRoute = DocsApiSearchRouteImport.update({
   path: '/api/search',
   getParentRoute: () => DocsRouteRoute,
 } as any)
+const DocsApiProxyRoute = DocsApiProxyRouteImport.update({
+  id: '/api/proxy',
+  path: '/api/proxy',
+  getParentRoute: () => DocsRouteRoute,
+} as any)
 const DesignApiSearchRoute = DesignApiSearchRouteImport.update({
   id: '/api/search',
   path: '/api/search',
@@ -608,6 +614,7 @@ export interface FileRoutesByFullPath {
   '/docs/': typeof DocsIndexRoute
   '/api/auth/callback': typeof ApiAuthCallbackRoute
   '/design/api/search': typeof DesignApiSearchRoute
+  '/docs/api/proxy': typeof DocsApiProxyRoute
   '/docs/api/search': typeof DocsApiSearchRoute
   '/auth/devices/': typeof AuthDevicesIndexRoute
   '/studio/': typeof StudioAuthenticatedIndexRoute
@@ -675,6 +682,7 @@ export interface FileRoutesByTo {
   '/docs': typeof DocsIndexRoute
   '/api/auth/callback': typeof ApiAuthCallbackRoute
   '/design/api/search': typeof DesignApiSearchRoute
+  '/docs/api/proxy': typeof DocsApiProxyRoute
   '/docs/api/search': typeof DocsApiSearchRoute
   '/auth/devices': typeof AuthDevicesIndexRoute
   '/api/auth/email/resend': typeof ApiAuthEmailResendRoute
@@ -746,6 +754,7 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard': typeof StudioAuthenticatedDashboardRouteRouteWithChildren
   '/api/auth/callback': typeof ApiAuthCallbackRoute
   '/design/api/search': typeof DesignApiSearchRoute
+  '/docs/api/proxy': typeof DocsApiProxyRoute
   '/docs/api/search': typeof DocsApiSearchRoute
   '/auth/devices/': typeof AuthDevicesIndexRoute
   '/studio/_authenticated/': typeof StudioAuthenticatedIndexRoute
@@ -818,6 +827,7 @@ export interface FileRouteTypes {
     | '/docs/'
     | '/api/auth/callback'
     | '/design/api/search'
+    | '/docs/api/proxy'
     | '/docs/api/search'
     | '/auth/devices/'
     | '/studio/'
@@ -885,6 +895,7 @@ export interface FileRouteTypes {
     | '/docs'
     | '/api/auth/callback'
     | '/design/api/search'
+    | '/docs/api/proxy'
     | '/docs/api/search'
     | '/auth/devices'
     | '/api/auth/email/resend'
@@ -955,6 +966,7 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard'
     | '/api/auth/callback'
     | '/design/api/search'
+    | '/docs/api/proxy'
     | '/docs/api/search'
     | '/auth/devices/'
     | '/studio/_authenticated/'
@@ -1173,6 +1185,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof DocsApiSearchRouteImport
       parentRoute: typeof DocsRouteRoute
     }
+    '/docs/api/proxy': {
+      id: '/docs/api/proxy'
+      path: '/api/proxy'
+      fullPath: '/docs/api/proxy'
+      preLoaderRoute: typeof DocsApiProxyRouteImport
+      parentRoute: typeof DocsRouteRoute
+    }
     '/design/api/search': {
       id: '/design/api/search'
       path: '/api/search'
@@ -1583,12 +1602,14 @@ const DesignRouteRouteWithChildren = DesignRouteRoute._addFileChildren(
 interface DocsRouteRouteChildren {
   DocsSplatRoute: typeof DocsSplatRoute
   DocsIndexRoute: typeof DocsIndexRoute
+  DocsApiProxyRoute: typeof DocsApiProxyRoute
   DocsApiSearchRoute: typeof DocsApiSearchRoute
 }
 
 const DocsRouteRouteChildren: DocsRouteRouteChildren = {
   DocsSplatRoute: DocsSplatRoute,
   DocsIndexRoute: DocsIndexRoute,
+  DocsApiProxyRoute: DocsApiProxyRoute,
   DocsApiSearchRoute: DocsApiSearchRoute,
 }
 
diff --git a/apps/www/src/routes/design/$.tsx b/apps/www/src/routes/design/$.tsx
index f247d1eaf..d247ed4ed 100644
--- a/apps/www/src/routes/design/$.tsx
+++ b/apps/www/src/routes/design/$.tsx
@@ -1,8 +1,7 @@
 import { createServerFn } from "@tanstack/react-start";
 import { createFileRoute, notFound, redirect } from "@tanstack/react-router";
-import { docs } from "@generated/design";
-import { createClientLoader } from "fumadocs-mdx/runtime/vite";
-import type { PageTree } from "fumadocs-core/server";
+import browserCollections from "@generated/browser";
+import type * as PageTree from "fumadocs-core/page-tree";
 import {
   Accordion as DocsAccordion,
   Accordions as DocsAccordions,
@@ -97,7 +96,7 @@ const serverLoader = createServerFn({ method: "GET" })
     };
   });
 
-const clientLoader = createClientLoader(docs.doc, {
+const clientLoader = browserCollections.design.createClientLoader({
   component({ default: MDX, frontmatter }) {
     return (
       <DocsPage>
diff --git a/apps/www/src/routes/docs/$.tsx b/apps/www/src/routes/docs/$.tsx
index ecd8ff6c3..6b6c07398 100644
--- a/apps/www/src/routes/docs/$.tsx
+++ b/apps/www/src/routes/docs/$.tsx
@@ -1,8 +1,7 @@
 import { createServerFn } from "@tanstack/react-start";
 import { createFileRoute, notFound, redirect } from "@tanstack/react-router";
-import { docs } from "@generated/docs";
-import { createClientLoader } from "fumadocs-mdx/runtime/vite";
-import type { PageTree } from "fumadocs-core/server";
+import browserCollections from "@generated/browser";
+import type * as PageTree from "fumadocs-core/page-tree";
 import { Suspense, useMemo } from "react";
 
 import { DocsLayout } from "@/features/docs/components/layout/docs";
@@ -97,7 +96,8 @@ const serverLoader = createServerFn({ method: "GET" })
     };
   });
 
-const clientLoader = createClientLoader(docs.doc, {
+const clientLoader = browserCollections.docs.createClientLoader({
+  id: "docs",
   component({ default: MDX, frontmatter, toc }) {
     return (
       <DocsPage toc={toc}>
@@ -109,7 +109,6 @@ const clientLoader = createClientLoader(docs.doc, {
       </DocsPage>
     );
   },
-  id: "docs",
 });
 
 function PageContent({ path }: { path: string }) {
diff --git a/apps/www/src/routes/docs/api/proxy.ts b/apps/www/src/routes/docs/api/proxy.ts
new file mode 100644
index 000000000..af0ee0cb6
--- /dev/null
+++ b/apps/www/src/routes/docs/api/proxy.ts
@@ -0,0 +1,29 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { openapi } from "@/features/docs/lib/openapi";
+
+/**
+ * Proxy for the OpenAPI "try it" playground. Playground requests are routed
+ * through our own origin to avoid CORS; `allowedOrigins` restricts forwarding
+ * to the Voidhash API hosts so this can't be abused as an open proxy.
+ */
+const proxy = openapi.createProxy({
+  allowedOrigins: [
+    "https://api.voidhash.com",
+    "https://api.preview.voidhash.com",
+    "http://localhost:1337",
+  ],
+});
+
+export const Route = createFileRoute("/docs/api/proxy")({
+  server: {
+    handlers: {
+      GET: ({ request }) => proxy.GET(request),
+      POST: ({ request }) => proxy.POST(request),
+      PUT: ({ request }) => proxy.PUT(request),
+      PATCH: ({ request }) => proxy.PATCH(request),
+      DELETE: ({ request }) => proxy.DELETE(request),
+      HEAD: ({ request }) => proxy.HEAD(request),
+    },
+  },
+});
diff --git a/apps/www/src/styles/globals.css b/apps/www/src/styles/globals.css
index 205211d5f..71a0bbf4a 100644
--- a/apps/www/src/styles/globals.css
+++ b/apps/www/src/styles/globals.css
@@ -5,6 +5,7 @@
 @import "tw-animate-css";
 @import "fumadocs-ui/css/shadcn.css";
 @import "fumadocs-ui/css/preset.css";
+@import "fumadocs-openapi/css/preset.css";
 @import "@voidhash/ui/styles/brand-theme.css";
 
 @source "../../../../packages/ui";
diff --git a/apps/www/tsconfig.json b/apps/www/tsconfig.json
index 519ece360..6b5931e14 100644
--- a/apps/www/tsconfig.json
+++ b/apps/www/tsconfig.json
@@ -18,9 +18,7 @@
     "incremental": true,
     "types": ["node", "vite/client"],
     "paths": {
-      "@/*": ["./src/*"],
-      "@generated/design": ["./design.generated.ts"],
-      "@generated/docs": ["./docs.generated.ts"]
+      "@/*": ["./src/*"]
     }
   },
   "include": ["src/**/*.ts", "src/**/*.tsx", "src/**/*.d.ts"],
diff --git a/apps/www/vite.config.ts b/apps/www/vite.config.ts
index dd61ca81e..d4ba80492 100644
--- a/apps/www/vite.config.ts
+++ b/apps/www/vite.config.ts
@@ -3,13 +3,12 @@ import { tanstackStart } from "@tanstack/react-start/plugin/vite";
 import viteReact from "@vitejs/plugin-react";
 import { paywallRuntimeBundlePlugin } from "@voidhash/paywall-renderer-preact/vite-plugin";
 import mdx from "fumadocs-mdx/vite";
-import { defineConfig, type PluginOption } from "vite";
+import { defineConfig } from "vite";
 import { createRequire } from "node:module";
 import { dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 
-import * as designSourceConfig from "./src/features/design/source.config.ts";
-import * as docsSourceConfig from "./src/features/docs/source.config.ts";
+import * as sourceConfig from "./src/features/source.config.ts";
 
 const devPort = process.env.PORT ? Number.parseInt(process.env.PORT, 10) : 3000;
 const devHost = process.env.HOST ?? true;
@@ -93,28 +92,6 @@ function tanstackClientEntryMiddleware() {
   };
 }
 
-function scopedMdxPlugin(plugin: PluginOption, scopeFragment: string) {
-  const vitePlugin = plugin as {
-    transform?: (this: unknown, code: string, id: string) => unknown;
-  };
-
-  if (!vitePlugin.transform) {
-    return plugin;
-  }
-
-  return {
-    ...vitePlugin,
-    async transform(this: unknown, code: string, id: string) {
-      const [file] = id.split("?");
-      if (!file.includes(scopeFragment)) {
-        return null;
-      }
-
-      return vitePlugin.transform?.call(this, code, id);
-    },
-  };
-}
-
 export default defineConfig(() => ({
   root: appRootPath,
   build: {
@@ -124,24 +101,9 @@ export default defineConfig(() => ({
     setupFiles: ["./src/test-setup.ts"],
   },
   plugins: [
-    scopedMdxPlugin(
-      mdx(docsSourceConfig, {
-        configPath: "src/features/docs/source.config.ts",
-        generateIndexFile: {
-          out: "docs.generated.ts",
-        },
-      }),
-      "/src/features/docs/content/docs/",
-    ),
-    scopedMdxPlugin(
-      mdx(designSourceConfig, {
-        configPath: "src/features/design/source.config.ts",
-        generateIndexFile: {
-          out: "design.generated.ts",
-        },
-      }),
-      "/src/features/design/content/docs/",
-    ),
+    ...mdx(sourceConfig, {
+      configPath: "src/features/source.config.ts",
+    }),
     tanstackClientEntryMiddleware(),
     corsMiddleware(),
     paywallRuntimeBundlePlugin(),
@@ -160,8 +122,8 @@ export default defineConfig(() => ({
   resolve: {
     alias: {
       "@": appSrcPath,
-      "@generated/design": fileURLToPath(new URL("./design.generated.ts", import.meta.url)),
-      "@generated/docs": fileURLToPath(new URL("./docs.generated.ts", import.meta.url)),
+      "@generated/browser": fileURLToPath(new URL("./.source/browser.ts", import.meta.url)),
+      "@generated/server": fileURLToPath(new URL("./.source/server.ts", import.meta.url)),
       tslib: tslibPath,
     },
     // TanStack's server-function compiler must transform WorkOS-owned createServerFn calls.
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3d731e9e4..1ba430251 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -71,7 +71,7 @@ catalogs:
       version: 19.1.17
     '@types/react-dom':
       specifier: ^19.1.0
-      version: 19.2.3
+      version: 19.1.9
     '@vitejs/plugin-react':
       specifier: ^5.1.1
       version: 5.2.0
@@ -106,11 +106,11 @@ catalogs:
       specifier: 1.61.1
       version: 1.61.1
     react:
-      specifier: 19.1.0
-      version: 19.1.0
+      specifier: 19.2.7
+      version: 19.2.7
     react-dom:
-      specifier: 19.1.0
-      version: 19.1.0
+      specifier: 19.2.7
+      version: 19.2.7
     react-hook-form:
       specifier: ^7.60.0
       version: 7.81.0
@@ -354,7 +354,7 @@ importers:
     dependencies:
       '@better-auth/api-key':
         specifier: 'catalog:'
-        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))
+        version: 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vue@3.5.40(typescript@5.6.3)))(better-call@1.3.7(zod@4.3.6))
       '@effect/platform-node':
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -369,7 +369,7 @@ importers:
         version: link:../studio
       better-auth:
         specifier: 'catalog:'
-        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vue@3.5.40(typescript@5.6.3))
       effect:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
@@ -561,10 +561,10 @@ importers:
         version: link:../../libraries/paywalls
       react:
         specifier: 'catalog:'
-        version: 19.1.0
+        version: 19.2.7
       react-dom:
         specifier: 'catalog:'
-        version: 19.1.0(react@19.1.0)
+        version: 19.2.7(react@19.2.7)
       tailwindcss:
         specifier: ^4.1.13
         version: 4.3.0
@@ -577,7 +577,7 @@ importers:
         version: 19.1.17
       '@types/react-dom':
         specifier: 'catalog:'
-        version: 19.2.3(@types/react@19.1.17)
+        version: 19.1.9(@types/react@19.1.17)
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
@@ -598,19 +598,19 @@ importers:
         version: 1.8.0
       '@basementstudio/shader-lab':
         specifier: ^1.3.14
-        version: 1.4.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)
+        version: 1.4.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(three@0.178.0)
       '@chronark/zod-bird':
         specifier: ^0.3.10
         version: 0.3.10
       '@dnd-kit/core':
         specifier: ^6.3.1
-        version: 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@dnd-kit/modifiers':
         specifier: ^9.0.0
-        version: 9.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)
+        version: 9.0.0(@dnd-kit/core@6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)
       '@dnd-kit/sortable':
         specifier: ^10.0.0
-        version: 10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)
+        version: 10.0.0(@dnd-kit/core@6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)
       '@effect/platform-node':
         specifier: 'catalog:'
         version: 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
@@ -625,40 +625,43 @@ importers:
         version: 1.7.0
       '@headless-tree/react':
         specifier: ^1.7.0
-        version: 1.7.0(@headless-tree/core@1.7.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.7.0(@headless-tree/core@1.7.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@hookform/resolvers':
         specifier: 'catalog:'
-        version: 5.4.0(react-hook-form@7.81.0(react@19.1.0))
+        version: 5.4.0(react-hook-form@7.81.0(react@19.2.7))
       '@monaco-editor/react':
         specifier: ^4.7.0
-        version: 4.7.0(monaco-editor@0.52.2)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 4.7.0(monaco-editor@0.52.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@paper-design/shaders-react':
         specifier: ^0.0.71
-        version: 0.0.71(@types/react@19.1.17)(react@19.1.0)
+        version: 0.0.71(@types/react@19.1.17)(react@19.2.7)
       '@paralleldrive/cuid2':
         specifier: ^3.3.0
         version: 3.3.0
       '@pixi/layout':
         specifier: ^3.2.0
-        version: 3.2.1(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)(yoga-layout@3.2.1)
+        version: 3.2.1(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.2.7)(yoga-layout@3.2.1)
       '@pixi/react':
         specifier: ^8.0.0-beta.25
-        version: 8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)
+        version: 8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.2.7)
       '@pixi/ui':
         specifier: ^2.3.0
         version: 2.3.2(pixi.js@8.19.0)
       '@radix-ui/react-slot':
         specifier: ^1.2.3
-        version: 1.3.0(@types/react@19.1.17)(react@19.1.0)
+        version: 1.3.0(@types/react@19.1.17)(react@19.2.7)
       '@react-three/drei':
         specifier: ^10.1.2
-        version: 10.7.7(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/react@19.1.17)(@types/three@0.185.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)
+        version: 10.7.7(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0))(@types/react@19.1.17)(@types/three@0.185.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(three@0.178.0)
       '@react-three/fiber':
         specifier: ^9.1.2
-        version: 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)
+        version: 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0)
       '@react-three/postprocessing':
         specifier: ^3.0.4
-        version: 3.0.4(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/three@0.185.1)(react@19.1.0)(three@0.178.0)
+        version: 3.0.4(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0))(@types/three@0.185.1)(react@19.2.7)(three@0.178.0)
+      '@scalar/api-client-react':
+        specifier: ^2.0.36
+        version: 2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3)
       '@t3-oss/env-core':
         specifier: ^0.13.8
         version: 0.13.11(typescript@6.0.3)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
@@ -667,25 +670,25 @@ importers:
         version: 5.100.11
       '@tanstack/react-query':
         specifier: 'catalog:'
-        version: 5.100.11(react@19.1.0)
+        version: 5.100.11(react@19.2.7)
       '@tanstack/react-query-devtools':
         specifier: 'catalog:'
-        version: 5.100.11(@tanstack/react-query@5.100.11(react@19.1.0))(react@19.1.0)
+        version: 5.100.11(@tanstack/react-query@5.100.11(react@19.2.7))(react@19.2.7)
       '@tanstack/react-router':
         specifier: 'catalog:'
-        version: 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-router-ssr-query':
         specifier: 'catalog:'
-        version: 1.167.0(@tanstack/query-core@5.100.11)(@tanstack/react-query@5.100.11(react@19.1.0))(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 1.167.0(@tanstack/query-core@5.100.11)(@tanstack/react-query@5.100.11(react@19.2.7))(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@tanstack/router-core@1.171.14)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-start':
         specifier: 'catalog:'
-        version: 1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        version: 1.168.10(esbuild@0.28.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@tanstack/react-table':
         specifier: 'catalog:'
-        version: 8.21.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 8.21.3(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/zod-adapter':
         specifier: 'catalog:'
-        version: 1.167.0(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(zod@4.3.6)
+        version: 1.167.0(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(zod@4.3.6)
       '@voidhash/agent':
         specifier: workspace:*
         version: link:../../packages/agent
@@ -739,7 +742,7 @@ importers:
         version: 0.5.2(@workos-inc/node@8.13.0)(typescript@6.0.3)
       '@workos/authkit-tanstack-react-start':
         specifier: 0.8.2
-        version: 0.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(@workos-inc/node@8.13.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(typescript@6.0.3)
+        version: 0.8.2(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(@workos-inc/node@8.13.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(typescript@6.0.3)
       class-variance-authority:
         specifier: ^0.7.1
         version: 0.7.1
@@ -754,7 +757,7 @@ importers:
         version: 4.0.0-beta.84
       effect-query:
         specifier: 'catalog:'
-        version: 1.0.0(@tanstack/react-query@5.100.11(react@19.1.0))(effect@4.0.0-beta.84)(react@19.1.0)
+        version: 1.0.0(@tanstack/react-query@5.100.11(react@19.2.7))(effect@4.0.0-beta.84)(react@19.2.7)
       esbuild-wasm:
         specifier: ^0.25.10
         version: 0.25.12
@@ -762,20 +765,23 @@ importers:
         specifier: ^1.0.0
         version: 1.0.0
       fumadocs-core:
-        specifier: 15.8.2
-        version: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        specifier: 16.11.5
+        version: 16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6)
       fumadocs-mdx:
-        specifier: 12.0.1
-        version: 12.0.1(fumadocs-core@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+        specifier: 15.2.0
+        version: 15.2.0(@types/mdast@4.0.4)(@types/mdx@2.0.14)(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react@19.2.7)(rolldown@1.0.1)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      fumadocs-openapi:
+        specifier: ^11.2.2
+        version: 11.2.2(@scalar/api-client-react@2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3))(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       fumadocs-ui:
-        specifier: 15.8.2
-        version: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(tailwindcss@4.3.2)
+        specifier: 16.11.5
+        version: 16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2)
       h3-v2:
         specifier: npm:h3@2.0.1-rc.18
         version: h3@2.0.1-rc.18
       lucide-react:
         specifier: 'catalog:'
-        version: 0.555.0(react@19.1.0)
+        version: 0.555.0(react@19.2.7)
       lucide-static:
         specifier: ^0.555.0
         version: 0.555.0
@@ -784,13 +790,13 @@ importers:
         version: 0.52.2
       motion:
         specifier: ^12.23.12
-        version: 12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 12.42.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       nanoid:
         specifier: ^5.1.6
         version: 5.1.6
       next-themes:
         specifier: ^0.4.6
-        version: 0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 0.4.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       pino:
         specifier: ^9.7.0
         version: 9.14.0
@@ -802,22 +808,22 @@ importers:
         version: 8.19.0
       react:
         specifier: 'catalog:'
-        version: 19.1.0
+        version: 19.2.7
       react-dom:
         specifier: 'catalog:'
-        version: 19.1.0(react@19.1.0)
+        version: 19.2.7(react@19.2.7)
       react-easy-crop:
         specifier: ^6.0.2
-        version: 6.2.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 6.2.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react-hook-form:
         specifier: 'catalog:'
-        version: 7.81.0(react@19.1.0)
+        version: 7.81.0(react@19.2.7)
       recharts:
         specifier: ^2.15.0
-        version: 2.15.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.15.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       resend:
         specifier: ^4.5.1
-        version: 4.8.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 4.8.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       server-only:
         specifier: ^0.0.1
         version: 0.0.1
@@ -826,10 +832,10 @@ importers:
         version: 11.0.1
       sonner:
         specifier: 'catalog:'
-        version: 2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.0.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       streamdown:
         specifier: ^2.0.0
-        version: 2.5.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 2.5.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       stripe:
         specifier: ^18.0.0
         version: 18.5.0(@types/node@20.19.43)
@@ -859,7 +865,7 @@ importers:
         version: 5.4.6(zod@4.3.6)
       zustand:
         specifier: ^5.0.8
-        version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+        version: 5.0.14(@types/react@19.1.17)(react@19.2.7)(use-sync-external-store@1.6.0(react@19.2.7))
     devDependencies:
       '@effect/vitest':
         specifier: 'catalog:'
@@ -878,7 +884,7 @@ importers:
         version: 19.1.17
       '@types/react-dom':
         specifier: 'catalog:'
-        version: 19.2.3(@types/react@19.1.17)
+        version: 19.1.9(@types/react@19.1.17)
       '@vitejs/plugin-react':
         specifier: 'catalog:'
         version: 5.2.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
@@ -897,6 +903,9 @@ importers:
       tailwindcss:
         specifier: 'catalog:'
         version: 4.3.2
+      tsx:
+        specifier: ^4.19.3
+        version: 4.21.0
       tw-animate-css:
         specifier: 'catalog:'
         version: 1.4.0
@@ -1005,10 +1014,10 @@ importers:
     dependencies:
       '@expo/metro-runtime':
         specifier: ~6.1.2
-        version: 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       '@react-native-async-storage/async-storage':
         specifier: ^2.1.2
-        version: 2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+        version: 2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
       '@voidhash/paywalls':
         specifier: workspace:*
         version: link:../../libraries/paywalls
@@ -1017,55 +1026,55 @@ importers:
         version: link:../../libraries/react-native
       expo:
         specifier: ^54.0.33
-        version: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-constants:
         specifier: ~18.0.13
-        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+        version: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
       expo-dev-client:
         specifier: ~6.0.18
         version: 6.0.20(expo@54.0.33)
       expo-linking:
         specifier: ~8.0.9
-        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-localization:
         specifier: ~17.0.7
-        version: 17.0.8(expo@54.0.33)(react@19.1.0)
+        version: 17.0.8(expo@54.0.33)(react@19.2.7)
       expo-router:
         specifier: ~6.0.23
-        version: 6.0.23(dfbe19aec38065222a79f30aa387d0a8)
+        version: 6.0.23(e86ffc3016efab95188bfcde024e6c23)
       expo-splash-screen:
         specifier: ~31.0.11
         version: 31.0.13(expo@54.0.33)
       expo-status-bar:
         specifier: ~3.0.8
-        version: 3.0.9(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 3.0.9(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-system-ui:
         specifier: ~6.0.8
-        version: 6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
+        version: 6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
       fast-text-encoding:
         specifier: ^1.0.6
         version: 1.0.6
       react:
         specifier: 'catalog:'
-        version: 19.1.0
+        version: 19.2.7
       react-native:
         specifier: 0.81.5
-        version: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+        version: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
       react-native-nitro-modules:
         specifier: 0.26.4
-        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       react-native-reanimated:
         specifier: ~4.1.1
-        version: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       react-native-safe-area-context:
         specifier: ~5.6.0
-        version: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       react-native-screens:
         specifier: ~4.16.0
-        version: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       react-native-svg:
         specifier: 15.12.1
-        version: 15.12.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+        version: 15.12.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     devDependencies:
       '@babel/core':
         specifier: 7.29.6
@@ -1124,14 +1133,14 @@ importers:
     dependencies:
       react-reconciler:
         specifier: ^0.32.0
-        version: 0.32.0(react@19.1.0)
+        version: 0.32.0(react@19.2.7)
     devDependencies:
       '@types/react':
         specifier: 'catalog:'
         version: 19.1.17
       '@types/react-dom':
         specifier: 'catalog:'
-        version: 19.2.3(@types/react@19.1.17)
+        version: 19.1.9(@types/react@19.1.17)
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
@@ -1143,10 +1152,10 @@ importers:
         version: 26.1.0
       react:
         specifier: 'catalog:'
-        version: 19.1.0
+        version: 19.2.7
       react-dom:
         specifier: 'catalog:'
-        version: 19.1.0(react@19.1.0)
+        version: 19.2.7(react@19.2.7)
       tsup:
         specifier: ^8.5.1
         version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
@@ -1241,7 +1250,7 @@ importers:
         version: 19.1.17
       '@types/react-dom':
         specifier: 'catalog:'
-        version: 19.2.3(@types/react@19.1.17)
+        version: 19.1.9(@types/react@19.1.17)
       '@voidhash/tsconfig':
         specifier: workspace:*
         version: link:../../packages/tsconfig
@@ -1253,10 +1262,10 @@ importers:
         version: 20.0.3
       react:
         specifier: 'catalog:'
-        version: 19.1.0
+        version: 19.2.7
       react-dom:
         specifier: 'catalog:'
-        version: 19.1.0(react@19.1.0)
+        version: 19.2.7(react@19.2.7)
       tsup:
         specifier: ^8.5.1
         version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
@@ -1592,7 +1601,7 @@ importers:
     devDependencies:
       '@testing-library/react':
         specifier: ^16.3.0
-        version: 16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@types/react':
         specifier: ^19.1.16
         version: 19.1.17
@@ -1604,10 +1613,10 @@ importers:
         version: 26.1.0
       react:
         specifier: 'catalog:'
-        version: 19.1.0
+        version: 19.2.7
       react-dom:
         specifier: 'catalog:'
-        version: 19.1.0(react@19.1.0)
+        version: 19.2.7(react@19.2.7)
       tsdown:
         specifier: ^0.18.2
         version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
@@ -1622,7 +1631,7 @@ importers:
         version: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
       zustand:
         specifier: ^5.0.9
-        version: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+        version: 5.0.14(@types/react@19.1.17)(react@19.2.7)(use-sync-external-store@1.6.0(react@19.2.7))
 
   packages/mimic-core:
     devDependencies:
@@ -2048,10 +2057,10 @@ importers:
         version: 10.29.2
       react:
         specifier: 'catalog:'
-        version: 19.1.0
+        version: 19.2.7
       react-dom:
         specifier: 'catalog:'
-        version: 19.1.0(react@19.1.0)
+        version: 19.2.7(react@19.2.7)
       srvx:
         specifier: 0.11.15
         version: 0.11.15
@@ -3426,6 +3435,42 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@codemirror/autocomplete@6.20.3':
+    resolution: {integrity: sha512-tlosUqb+3BbxCxZdu4tKeRghPFC+QM7q4X5YhKV2eCmPG+1r2F3f4AaSz5sCrFqUtX4Jh20VFTKecl16MgiV9g==}
+
+  '@codemirror/commands@6.10.4':
+    resolution: {integrity: sha512-Ryk9y9T0FFVF0cUGhAknveAyUOl/A1qReTFi+qPKtOh2Z9F4AUBz3XOrYD4ZEgZirdugVzHvd/2/Wcwy5OliTg==}
+
+  '@codemirror/lang-css@6.3.1':
+    resolution: {integrity: sha512-kr5fwBGiGtmz6l0LSJIbno9QrifNMUusivHbnA1H6Dmqy4HZFte3UAICix1VuKo0lMPKQr2rqB+0BkKi/S3Ejg==}
+
+  '@codemirror/lang-html@6.4.11':
+    resolution: {integrity: sha512-9NsXp7Nwp891pQchI7gPdTwBuSuT3K65NGTHWHNJ55HjYcHLllr0rbIZNdOzas9ztc1EUVBlHou85FFZS4BNnw==}
+
+  '@codemirror/lang-javascript@6.2.5':
+    resolution: {integrity: sha512-zD4e5mS+50htS7F+TYjBPsiIFGanfVqg4HyUz6WNFikgOPf2BgKlx+TQedI1w6n/IqRBVBbBWmGFdLB/7uxO4A==}
+
+  '@codemirror/lang-json@6.0.2':
+    resolution: {integrity: sha512-x2OtO+AvwEHrEwR0FyyPtfDUiloG3rnVTSZV1W8UteaLL8/MajQd8DpvUb2YVzC+/T18aSDv0H9mu+xw0EStoQ==}
+
+  '@codemirror/lang-xml@6.1.0':
+    resolution: {integrity: sha512-3z0blhicHLfwi2UgkZYRPioSgVTo9PV5GP5ducFH6FaHy0IAJRg+ixj5gTR1gnT/glAIC8xv4w2VL1LoZfs+Jg==}
+
+  '@codemirror/lang-yaml@6.1.3':
+    resolution: {integrity: sha512-AZ8DJBuXGVHybpBQhmZtgew5//4hv3tdkXnr3vDmOUMJRuB6vn/uuwtmTOTlqEaQFg3hQSVeA90NmvIQyUV6FQ==}
+
+  '@codemirror/language@6.12.4':
+    resolution: {integrity: sha512-1q4PaT+o6PbgpkJt4Q8Fv5XJxTy4FUZ4MWETtyiDw3J0Pyr9E2vqcKL+k9wcvjNTIsauxvE7OfmWj3FRPHQ76A==}
+
+  '@codemirror/lint@6.9.7':
+    resolution: {integrity: sha512-28/+iWLYxKxsvGYhSYL7zaCZqLz5+FFFDq9tVsvGv9kv8RY4fFAchJ5WX9M3YrrRlTIsECjsXPqeNgnSmNP2dg==}
+
+  '@codemirror/state@6.7.1':
+    resolution: {integrity: sha512-9QzNDgE4EYDnAHfrTlR2lwiPciiOymLtwKK+8yHQzCc7GXhAP9xdEbEJFy2IWB1j9UGUl9BsgMmTo/ImA02T7A==}
+
+  '@codemirror/view@6.43.6':
+    resolution: {integrity: sha512-EVunGSYN1wz1p75WY1s3Xg7t3i8Yol0kGZGizNdX9BUFgMFILYVe8/u6EVpo7Ff5PwbZuILb4QAq7IZoKzIEQA==}
+
   '@cspotcode/source-map-support@0.8.1':
     resolution: {integrity: sha512-IchNf6dN4tHoMFIn/7OE8LWZ19Y6q/67Bmf6vnGREv8RSbBVb9LPJxEcnwrcwX6ixSvaiGoomAUvu4YSxXrVgw==}
     engines: {node: '>=12'}
@@ -4276,17 +4321,74 @@ packages:
       react: '>=16.8.0'
       react-dom: '>=16.8.0'
 
+  '@floating-ui/utils@0.2.10':
+    resolution: {integrity: sha512-aGTxbpbg8/b5JfU1HXSrbH3wXZuLPJcNEcZQFMxLs3oSzgtVu6nFPkbbGGUvBcUjKV2YyB9Wxxabo+HEH9tcRQ==}
+
   '@floating-ui/utils@0.2.12':
     resolution: {integrity: sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww==}
 
+  '@floating-ui/vue@1.1.11':
+    resolution: {integrity: sha512-HzHKCNVxnGS35r9fCHBc3+uCnjw9IWIlCPL683cGgM9Kgj2BiAl8x1mS7vtvP6F9S/e/q4O6MApwSHj8hNLGfw==}
+
+  '@floating-ui/vue@1.1.9':
+    resolution: {integrity: sha512-BfNqNW6KA83Nexspgb9DZuz578R7HT8MZw1CfK9I6Ah4QReNWEJsXWHN+SdmOVLNGmTPDi+fDT535Df5PzMLbQ==}
+
   '@fontsource-variable/geist-mono@5.2.8':
     resolution: {integrity: sha512-KI5bj+hkkRiHttYHmccotUZ80ZuZyai+RwI1d7UId0clkx/jXxlo8qYK8j54WzmpBjtMoEMPyllV7faDcj+6RA==}
 
   '@fontsource-variable/geist@5.2.9':
     resolution: {integrity: sha512-TP+QSBG3wxKGPE33CbMy/L0Nu3qvJ6Fy81Yc4LnQ95xH+i+cfEp8fyU8/kfV14YwszxIFPhnoMTbjL71waVpyQ==}
 
-  '@formatjs/intl-localematcher@0.6.2':
-    resolution: {integrity: sha512-XOMO2Hupl0wdd172Y06h6kLpBz6Dv+J4okPLl4LPtzbr8f66WbIoy4ev98EBuZ6ZK4h5ydTN6XneT4QVpD7cdA==}
+  '@fuma-translate/react@1.0.2':
+    resolution: {integrity: sha512-uOiOtBx3nRXR8Nu1GzBf1tApgF1FErDBTHxRIAQeyQdyOoZbrNRN6H4kDCWObY4qyGeGbHydG0DHzgeUgFDMIw==}
+    peerDependencies:
+      '@types/react': '*'
+      react: ^19.2.0
+      react-dom: ^19.2.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+
+  '@fumadocs/api-docs@0.2.1':
+    resolution: {integrity: sha512-kt46+I6/ACScikHpyY5NbR20vo74pLgG2bagl3CHUOdiH3Pg15ecpuHSPbXw2ZhDg68t1XUGZbrGE/JvxhSVBg==}
+    peerDependencies:
+      '@types/react': '*'
+      fumadocs-core: ^16.9.0
+      fumadocs-ui: ^16.9.0
+      json-schema-typed: '*'
+      react: ^19.2.0
+      react-dom: ^19.2.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      json-schema-typed:
+        optional: true
+
+  '@fumadocs/tailwind@0.1.1':
+    resolution: {integrity: sha512-BnPe52UxSaG8yKlHMKBxXw8h6GpK5qO55ci6+Qd5JnquTvIw6SpfbC1P+qAi82PuPWv1KZAWY8bxRk4+x9ctXw==}
+    peerDependencies:
+      tailwindcss: ^4.0.0
+    peerDependenciesMeta:
+      tailwindcss:
+        optional: true
+
+  '@fumari/json-schema-ts@1.0.2':
+    resolution: {integrity: sha512-1NHGl8Oqg50mhpWMvbhqnwFRLBugkGCRubLSH/TrAzTAS99x4z0xFgOVcbJne+yfaZv94ZNdmRWobDvUiZswPg==}
+    peerDependencies:
+      json-schema-typed: '*'
+    peerDependenciesMeta:
+      json-schema-typed:
+        optional: true
+
+  '@fumari/stf@1.1.0':
+    resolution: {integrity: sha512-ta/qVbB03SSQ29185hNkF4E+DcteLTuX6FOjzRpQehk5738VLkfw2mIZuejqrubmoRAeKfxSrtqLwnS9W9XgKQ==}
+    peerDependencies:
+      '@types/react': '*'
+      react: ^19.2.0
+      react-dom: ^19.2.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
 
   '@headless-tree/core@1.7.0':
     resolution: {integrity: sha512-LxcX7LNepwfOPrZcs4PNfDwCzbi326uCAX5jYBfw94jI+pZQA7ANaE/No3LW0XFgcBcQtK/G2bInbVEhLF1C/Q==}
@@ -4298,6 +4400,18 @@ packages:
       react: '*'
       react-dom: '*'
 
+  '@headlessui/tailwindcss@0.2.2':
+    resolution: {integrity: sha512-xNe42KjdyA4kfUKLLPGzME9zkH7Q3rOZ5huFihWNWOQFxnItxPB3/67yBI8/qBfY8nwBRx5GHn4VprsoluVMGw==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      tailwindcss: ^3.0 || ^4.0
+
+  '@headlessui/vue@1.7.23':
+    resolution: {integrity: sha512-JzdCNqurrtuu0YW6QaDtR2PIYCKPUWq28csDyMvN4zmGccmE7lz40Is6hc3LA4HFeCI7sekZ/PQMTNmn9I/4Wg==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      vue: ^3.2.0
+
   '@hookform/resolvers@5.4.0':
     resolution: {integrity: sha512-EIsqr/t/qbinPIhGjMdtvutIN1Kk4uwbROE9/UQ93CAVGR7GkA7Y92+fX80OzXi/OB67jVFYwKGO1WzkxmkFZw==}
     peerDependencies:
@@ -4478,6 +4592,12 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@internationalized/date@3.12.2':
+    resolution: {integrity: sha512-FY1Y+H64NDs+HAF6omlnWxm3mEpfgaCSWtL5l551ZZfImA+kGjPFgrnJrGjH6lfmLL0g8Z/mBu1R3kufeCp6Jw==}
+
+  '@internationalized/number@3.6.7':
+    resolution: {integrity: sha512-3ji1fcrT+FPAK86UqEhB/psHixYo6niWPJtt7+qRaYFynt/BaJG8GhAPimtWUpEiVSTq8ZM8L5psMxGquiB/Vg==}
+
   '@ioredis/commands@1.5.0':
     resolution: {integrity: sha512-eUgLqrMf8nJkZxT24JvVRrQya1vZkQh8BBeYNwGDqa5I0VUi8ACx7uFvAaLxintokpTenkK6DASvo/bvNbBGow==}
 
@@ -4624,6 +4744,33 @@ packages:
     resolution: {integrity: sha512-hloP58zRVCRSpgDxmqCWJNlizAlUgJFqG2ypq79DCvyv9tHjRYMDOcPFjzfl/A1/YxDvRCZz8wvZvmapQnKwFQ==}
     engines: {node: '>=12'}
 
+  '@lezer/common@1.5.2':
+    resolution: {integrity: sha512-sxQE460fPZyU3sdc8lafxiPwJHBzZRy/udNFynGQky1SePYBdhkBl1kOagA9uT3pxR8K09bOrmTUqA9wb/PjSQ==}
+
+  '@lezer/css@1.3.4':
+    resolution: {integrity: sha512-N+tn9tej2hPvyKgHEApMOQfHczDJCwxrRFS3SPn9QjYN+uwHvEDnCgKRrb3mxDYxRS8sKMM8fhC3+lc04Abz5Q==}
+
+  '@lezer/highlight@1.2.3':
+    resolution: {integrity: sha512-qXdH7UqTvGfdVBINrgKhDsVTJTxactNNxLk7+UMwZhU13lMHaOBlJe9Vqp907ya56Y3+ed2tlqzys7jDkTmW0g==}
+
+  '@lezer/html@1.3.13':
+    resolution: {integrity: sha512-oI7n6NJml729m7pjm9lvLvmXbdoMoi2f+1pwSDJkl9d68zGr7a9Btz8NdHTGQZtW2DA25ybeuv/SyDb9D5tseg==}
+
+  '@lezer/javascript@1.5.4':
+    resolution: {integrity: sha512-vvYx3MhWqeZtGPwDStM2dwgljd5smolYD2lR2UyFcHfxbBQebqx8yjmFmxtJ/E6nN6u1D9srOiVWm3Rb4tmcUA==}
+
+  '@lezer/json@1.0.3':
+    resolution: {integrity: sha512-BP9KzdF9Y35PDpv04r0VeSTKDeox5vVr3efE7eBbx3r4s3oNLfunchejZhjArmeieBH+nVOpgIiBJpEAv8ilqQ==}
+
+  '@lezer/lr@1.4.10':
+    resolution: {integrity: sha512-rnCpTIBafOx4mRp43xOxDJbFipJm/c0cia/V5TiGlhmMa+wsSdoGmUN3w5Bqrks/09Q/D4tNAmWaT8p6NRi77A==}
+
+  '@lezer/xml@1.0.6':
+    resolution: {integrity: sha512-CdDwirL0OEaStFue/66ZmFSeppuL6Dwjlk8qk153mSQwiSH/Dlri4GNymrNWnUmPl2Um7QfV1FO9KFUyX3Twww==}
+
+  '@lezer/yaml@1.0.4':
+    resolution: {integrity: sha512-2lrrHqxalACEbxIbsjhqGpSW8kWpUKuY6RHgnSAFZa6qK62wvnPxA8hGOwOoDbwHcOFs5M4o27mjGu+P7TvBmw==}
+
   '@libsql/client@0.17.4':
     resolution: {integrity: sha512-lYayFWasDV78A+TjlEhr6ubb3odBV6OHjb+wdp8VQcyWWAEIjuwbCHaraEUS4m4yWoo0BvZo96It4VdzZRmRWw==}
 
@@ -4681,6 +4828,9 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@marijn/find-cluster-break@1.0.3':
+    resolution: {integrity: sha512-FY+MKLBoTsLNJF/eLWaOsXGdz6uh3Iu1axjPf6TUq92IYumcTcXWHoS747JARLkcdlJ/Waiaxc5wQfFO8jC6NA==}
+
   '@mdx-js/mdx@3.1.1':
     resolution: {integrity: sha512-f6ZO2ifpwAQIpzGWaBQT2TXxPv6z3RBzQKpVftEWN78Vl/YweF1uwussDx8ECAXVtr3Rs89fKyG9YlzUs9DyGQ==}
 
@@ -5241,6 +5391,9 @@ packages:
     resolution: {integrity: sha512-r10lkuy6BNfRmyYdRAfgu6dq0HOmyIV2OLhXWE3gDEPBdX1b8miztJVyX/UxWhLwemNyDP3CLZHpDxDwSY0xaA==}
     engines: {node: '>=20.0.0'}
 
+  '@phosphor-icons/core@2.1.1':
+    resolution: {integrity: sha512-v4ARvrip4qBCImOE5rmPUylOEK4iiED9ZyKjcvzuezqMaiRASCHKcRIuvvxL/twvLpkfnEODCOJp5dM4eZilxQ==}
+
   '@pinojs/redact@0.4.0':
     resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
 
@@ -6381,6 +6534,13 @@ packages:
       react: ^19.0
       three: '>= 0.156.0'
 
+  '@replit/codemirror-css-color-picker@6.3.0':
+    resolution: {integrity: sha512-19biDANghUm7Fz7L1SNMIhK48tagaWuCOHj4oPPxc7hxPGkTVY2lU/jVZ8tsbTKQPVG7BO2CBDzs7CBwb20t4A==}
+    peerDependencies:
+      '@codemirror/language': ^6.0.0
+      '@codemirror/state': ^6.0.0
+      '@codemirror/view': ^6.0.0
+
   '@rolldown/binding-android-arm64@1.0.0-beta.57':
     resolution: {integrity: sha512-GoOVDy8bjw9z1K30Oo803nSzXJS/vWhFijFsW3kzvZCO8IZwFnNa6pGctmbbJstKl3Fv6UBwyjJQN6msejW0IQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -6808,6 +6968,99 @@ packages:
   '@rtsao/scc@1.1.0':
     resolution: {integrity: sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g==}
 
+  '@scalar/api-client-react@2.0.36':
+    resolution: {integrity: sha512-vBL3SSS51Qz98JbIEKPwfy/pk4pLX3RPR/UYbJJPzbrk+3MyHsu4c7cISVn42dlE/FfffTG/r0S5d6ZlemfXqw==}
+    engines: {node: '>=22'}
+    peerDependencies:
+      react: ^18.0.0 || ^19.0.0
+
+  '@scalar/api-client@3.13.7':
+    resolution: {integrity: sha512-bd+2nI27gnfCgzCGEP13u7rd2IlNdAB+Rx+CX0i29UXEu6SVxWpv5hBVrLLTQebfNzcUk9Evr+NkIX/WjSHp0Q==}
+    engines: {node: '>=22'}
+
+  '@scalar/asyncapi-upgrader@0.1.4':
+    resolution: {integrity: sha512-pyAoyuFVlUf+ZThiuHAShV4lyF9LlPab5AJrvoER8JBz00bHF1NWiGveYySRcNcvke5U5nWCr7NxtiMIokP8sA==}
+    engines: {node: '>=22'}
+
+  '@scalar/blocks@0.1.8':
+    resolution: {integrity: sha512-I0bOMnb8+8cjboaRMWz4Vo16rcYu8+4tzLIpPeJHsJs4I5OaIIgaoNHRPaWDip9ZrqbD4m1I2gMDJmpJU/hEmA==}
+    engines: {node: '>=22'}
+
+  '@scalar/code-highlight@0.4.3':
+    resolution: {integrity: sha512-uueW22siajrJUtszH+k/PmABqau2MmJzajpEFTPapK7Zak167xcKUIjcMbFFFgW8SGKLMSVzLkuB/VNDbOHuOg==}
+    engines: {node: '>=22'}
+
+  '@scalar/components@0.27.9':
+    resolution: {integrity: sha512-AoUTHwTfVc44zZbZnridPd7mp8lhe2LgX9KeyKw5keFlhLY1MzQv9OuXD7riLbJPrFFF/7lbqCLEpyG6vWSXQg==}
+    engines: {node: '>=22'}
+
+  '@scalar/helpers@0.9.2':
+    resolution: {integrity: sha512-hjyMpMZjTBZQhyByZmz5oUgRKUQJO5V5AOiJxsVEGbUmgA7sJRQeTrXLB+BEwzaKS5nm2opJeNyMBYLFNK4hiQ==}
+    engines: {node: '>=22'}
+
+  '@scalar/icons@0.7.5':
+    resolution: {integrity: sha512-kWYkjmYlHzrZ+31d8L1uJpVeil6r1xNcyR+MewnxFslpMBCDIeo9udhYzg09v8s6nWKxwuPokhdQPLbKS+SSgg==}
+    engines: {node: '>=22'}
+
+  '@scalar/json-magic@0.12.19':
+    resolution: {integrity: sha512-1T4QoFYZ1nKt25xFeHtghAuZzaLq2X4CpCSLFXG0Fjcz6K2HIZqo+RtywfI0WD8RRRRgS34keo7X4Gv1BQUNoQ==}
+    engines: {node: '>=22'}
+
+  '@scalar/oas-utils@0.19.8':
+    resolution: {integrity: sha512-A/bGTqthxnsgoveQ7Xomxtwk0JQ7V/cweaxz/Dhp9/JmvnAnjBjpcG050gcC1EuVkHhJL1sPH2+IczS9liQQ3A==}
+    engines: {node: '>=22'}
+
+  '@scalar/openapi-types@0.9.3':
+    resolution: {integrity: sha512-34qglt5jSo55iZfH9i7EhjQCdE0Po2xZeh8wytQKolSnXrxsYMSyFDJEBxz1Gaew4on9N3XIWsd0QpwKVA5CSA==}
+    engines: {node: '>=22'}
+
+  '@scalar/openapi-upgrader@0.2.11':
+    resolution: {integrity: sha512-eYEFBO8mZfgXEO/hv8rdL5OA4oOB8orFT5kXNK4I/x9xca2D7A4BteuFXqRaw9lE1CIjtG+StlAUYVz5omTXew==}
+    engines: {node: '>=22'}
+
+  '@scalar/schemas@0.7.4':
+    resolution: {integrity: sha512-Or31zxR+ceGGhkVU5XBO2Zv7oyGDtjsJOjM2Rr0WRZ1/tRsQc2/FsVv+9kPmCA7sqFL8BKWlNfTXcPITI7WRHw==}
+    engines: {node: '>=22'}
+
+  '@scalar/sidebar@0.9.33':
+    resolution: {integrity: sha512-y00qMs6dPu4Te+OuyyGSg0hGWTPsnUrn7juErtF4bOIse2w9BM1rHkYZWSdEL/afYv27x1wMBZJwAReiUeHguA==}
+    engines: {node: '>=22'}
+
+  '@scalar/snippetz@0.9.23':
+    resolution: {integrity: sha512-bjahBX9J7VQsOpDERMPZSPuIKZmz1DEh9NHdCE5dEe6uz1rHicai0Zqjpuduw6DVDVyWrDI0trxPzCqGzpj0oQ==}
+    engines: {node: '>=22'}
+
+  '@scalar/themes@0.17.1':
+    resolution: {integrity: sha512-aqR6o44CpDvgVT6dHlc1/56JRdWUrbNgaLyHKEd1KC/+Gcznix9Ud0fW7cKw2VvNgPgcqlO+MhZIrYHwbkNMew==}
+    engines: {node: '>=22'}
+
+  '@scalar/typebox@0.1.3':
+    resolution: {integrity: sha512-lU055AUccECZMIfGA0z/C1StYmboAYIPJLDFBzOO81yXBi35Pxdq+I4fWX6iUZ8qcoHneiLGk9jAUM1rA93iEg==}
+
+  '@scalar/types@0.16.4':
+    resolution: {integrity: sha512-fLf0ANAC3iQq0sIVdmH6aGM+pFSLyD8GfGBxSWcLpI0jE0iFAzX2A3p0qVZm7vqBT4TQnn0fSwg5U+h+FZ52BA==}
+    engines: {node: '>=22'}
+
+  '@scalar/use-codemirror@0.14.14':
+    resolution: {integrity: sha512-A7Exfctudg7d3DeQFSSrZYc6yhrEsLX3Iq6GJ7m7ruqgev9y8Hbx7g8yvZWYRQuMUdFtLH5euP7a1ZwM8OrHKA==}
+    engines: {node: '>=22'}
+
+  '@scalar/use-hooks@0.4.9':
+    resolution: {integrity: sha512-RnflJ178BPdH7pKY9/YBcRlhyc7uJxtqG4hBbi8IPEM4YkpLHcMmxWKgHAgC3MBc21rpuKKBE+DTJOiYmU+UyA==}
+    engines: {node: '>=22'}
+
+  '@scalar/use-toasts@0.10.4':
+    resolution: {integrity: sha512-OHXkVfFKV0qx2WpKlzUpvIUkoA/PiloBcXe6soX2S/1z/D042QlKO8rNxkuC3Hlamvyvj8ru8XN17XNl+D0OPg==}
+    engines: {node: '>=22'}
+
+  '@scalar/validation@0.6.2':
+    resolution: {integrity: sha512-Sc1TkcwGV6aVCO51AyKeaGiP8gpwAHxEtO5d3tZzPV+KsnlC/YokQxFxwBrbIXw73k9hmcExnJyGu3k5i6n6VA==}
+    engines: {node: '>=20'}
+
+  '@scalar/workspace-store@0.55.6':
+    resolution: {integrity: sha512-l7yuW1XplVRu+bqN7Mt+XtMovuKRBOHSGb00e+nEvjkkL1WIFd6pMJCogYt0ZlLvyLFPbWODWA4oG6LZjr7ijQ==}
+    engines: {node: '>=22'}
+
   '@selderee/plugin-htmlparser2@0.11.0':
     resolution: {integrity: sha512-P33hHGdldxGabLFjPPpaTxVolMrzrcegejx+0GxjrIb9Zv48D8yAIA/QTDR2dFl7Uz7urX8aX6+5bCZslr+gWQ==}
 
@@ -6822,29 +7075,33 @@ packages:
       react:
         optional: true
 
-  '@shikijs/core@3.23.0':
-    resolution: {integrity: sha512-NSWQz0riNb67xthdm5br6lAkvpDJRTgB36fxlo37ZzM2yq0PQFFzbd8psqC2XMPgCzo1fW6cVi18+ArJ44wqgA==}
-
-  '@shikijs/engine-javascript@3.23.0':
-    resolution: {integrity: sha512-aHt9eiGFobmWR5uqJUViySI1bHMqrAgamWE1TYSUoftkAeCCAiGawPMwM+VCadylQtF4V3VNOZ5LmfItH5f3yA==}
+  '@shikijs/core@4.3.1':
+    resolution: {integrity: sha512-ANMDxuaPsNMdDC1m4vfvhlDmJweMwkE5XitTwrq2rWHx5jM+dlm4MmHt2PP6t0uejfR77SuhrhJ0zEijIF/uhA==}
+    engines: {node: '>=20'}
 
-  '@shikijs/engine-oniguruma@3.23.0':
-    resolution: {integrity: sha512-1nWINwKXxKKLqPibT5f4pAFLej9oZzQTsby8942OTlsJzOBZ0MWKiwzMsd+jhzu8YPCHAswGnnN1YtQfirL35g==}
+  '@shikijs/engine-javascript@4.3.1':
+    resolution: {integrity: sha512-JBItcnPuYq7jVJdZo/vMj94r+szT7XEjHFX+mvFDGSEIbVAXAGyHAHzhbWzpGOwYidCZrErJLLgn2PVeiokHnQ==}
+    engines: {node: '>=20'}
 
-  '@shikijs/langs@3.23.0':
-    resolution: {integrity: sha512-2Ep4W3Re5aB1/62RSYQInK9mM3HsLeB91cHqznAJMuylqjzNVAVCMnNWRHFtcNHXsoNRayP9z1qj4Sq3nMqYXg==}
+  '@shikijs/engine-oniguruma@4.3.1':
+    resolution: {integrity: sha512-OXyNMzg0pews+msMj4cHeqT4xiYKKvbnn6VbdAXxfoFl3SSx4fJTc8FadECuc5/H9p3BzhNAoAUXKwAu9rWYhg==}
+    engines: {node: '>=20'}
 
-  '@shikijs/rehype@3.23.0':
-    resolution: {integrity: sha512-GepKJxXHbXFfAkiZZZ+4V7x71Lw3s0ALYmydUxJRdvpKjSx9FOMSaunv6WRLFBXR6qjYerUq1YZQno+2gLEPwA==}
+  '@shikijs/langs@4.3.1':
+    resolution: {integrity: sha512-m0l9nsDqgBHvbZbk7A0/kXz/impK3uB/c6rAn6Gpg/uPtdZRQ+alsN/17MU5thb68XTj/4DxkZAotrM0GGSpDQ==}
+    engines: {node: '>=20'}
 
-  '@shikijs/themes@3.23.0':
-    resolution: {integrity: sha512-5qySYa1ZgAT18HR/ypENL9cUSGOeI2x+4IvYJu4JgVJdizn6kG4ia5Q1jDEOi7gTbN4RbuYtmHh0W3eccOrjMA==}
+  '@shikijs/primitive@4.3.1':
+    resolution: {integrity: sha512-CXQRQOYy1leqQ8ceTeJdmXv/bsUY++6QyLpXJ94LZAAYj5X2SKRdc5ipguv4NPyGVKItB2PPwUpRNe0Sjh5S1A==}
+    engines: {node: '>=20'}
 
-  '@shikijs/transformers@3.23.0':
-    resolution: {integrity: sha512-F9msZVxdF+krQNSdQ4V+Ja5QemeAoTQ2jxt7nJCwhDsdF1JWS3KxIQXA3lQbyKwS3J61oHRUSv4jYWv3CkaKTQ==}
+  '@shikijs/themes@4.3.1':
+    resolution: {integrity: sha512-dgpoJ4WqNi2yTmizQHBJ5zcX6j2lE6icN/0yt4l1kkf16jrY/pwPLoTb1ETsWMz0OBLf9ZNvwmxft+cH+N9qSA==}
+    engines: {node: '>=20'}
 
-  '@shikijs/types@3.23.0':
-    resolution: {integrity: sha512-3JZ5HXOZfYjsYSk0yPwBrkupyYSLpAE26Qc0HLghhZNGTZg/SKxXIIgoxOpmmeQP0RRSDJTk1/vPfw9tbw+jSQ==}
+  '@shikijs/types@4.3.1':
+    resolution: {integrity: sha512-CHFxE0jztBIZRHH6gxXE7DXUCFXjReEGxZ/j0rfSLGKZuwp2xBYycEP14875DSa9KLL/6700oxIq6oO6ef9K2g==}
+    engines: {node: '>=20'}
 
   '@shikijs/vscode-textmate@10.0.2':
     resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==}
@@ -6946,6 +7203,9 @@ packages:
   '@standard-schema/utils@0.3.0':
     resolution: {integrity: sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g==}
 
+  '@swc/helpers@0.5.23':
+    resolution: {integrity: sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==}
+
   '@t3-oss/env-core@0.13.11':
     resolution: {integrity: sha512-sM7GYY+KL7H/Hl0BE0inWfk3nRHZOLhmVn7sHGxaZt9FAR6KqREXAE+6TqKfiavfXmpRxO/OZ2QgKRd+oiBYRQ==}
     peerDependencies:
@@ -7407,6 +7667,9 @@ packages:
     resolution: {integrity: sha512-ldZXEhOBb8Is7xLs01fR3YEc3DERiz5silj8tnGkFZytt1abEvl/GhUmCE0PMLaMPTa3Jk4HbKmRlHmu+gCftg==}
     engines: {node: '>=12'}
 
+  '@tanstack/virtual-core@3.17.4':
+    resolution: {integrity: sha512-nGm5KteqxasUdThLc2izl6dHUqLv0LQj7Nuyo5gYalTPf/U8a9ermvsl7reT+6ioBW1l8WfpP/mcU338nLXpqw==}
+
   '@tanstack/virtual-file-routes@1.161.4':
     resolution: {integrity: sha512-42WoRePf8v690qG8yGRe/YOh+oHni9vUaUUfoqlS91U2scd3a5rkLtVsc6b7z60w3RogH0I00vdrC5AaeiZ18w==}
     engines: {node: '>=20.19'}
@@ -7415,6 +7678,11 @@ packages:
     resolution: {integrity: sha512-uhOeFyxLcU41HzvrxsGpiWdcMbScY1EDgbZ5K7DVRMYInbLYWAC0EA/kx9wXAoSM8q82bUG2hRl8+EAjE6XAbA==}
     engines: {node: '>=20.19'}
 
+  '@tanstack/vue-virtual@3.13.32':
+    resolution: {integrity: sha512-E8OCutx7QnwZdvpJijz0Q2PHsYDWBWjnGr3TvgWiqxTU35jB1kVhtkd93scRV7tTFuId2tg3x2iFiw+IE4evjQ==}
+    peerDependencies:
+      vue: ^2.7.0 || ^3.0.0
+
   '@tanstack/zod-adapter@1.167.0':
     resolution: {integrity: sha512-5Wlm5teSu+pz3KKhfa1ESsiOJXbvV6ITr1vKOQKi9yEdtozp6VefEzxzafLLida97mnL2tmauva/njokQrG5CA==}
     engines: {node: '>=20.19'}
@@ -7653,6 +7921,9 @@ packages:
   '@types/graceful-fs@4.1.9':
     resolution: {integrity: sha512-olP3sd1qOEe5dXTSaFvQG+02VdRXcdytWLAZsAq1PecU8uqQAhkrnbli7DagjtXKW/Bl7YJbUsa8MPcuc8LHEQ==}
 
+  '@types/har-format@1.2.16':
+    resolution: {integrity: sha512-fluxdy7ryD3MV6h8pTfTYpy/xQzCFC7m89nOH9y94cNqJ1mDIDPut7MnRHI3F6qRmh/cT2fUjG1MLdCNb4hE9A==}
+
   '@types/hast@3.0.5':
     resolution: {integrity: sha512-rp/ezSWaD1m44dPKICGhiskI13nVr7qTloFwDa/IYkhhf5nzwP+zIQcIJh3WIFSBOy/H1PzB40jPjMDksN4F+g==}
 
@@ -7755,6 +8026,12 @@ packages:
   '@types/unist@3.0.3':
     resolution: {integrity: sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==}
 
+  '@types/web-bluetooth@0.0.20':
+    resolution: {integrity: sha512-g9gZnnXVq7gM7v3tJCWV/qw7w+KeOlSHAhgF9RytFyifW6AF61hdT2ucrYhPq9hLs5JIryeupHV3qGk95dH9ow==}
+
+  '@types/web-bluetooth@0.0.21':
+    resolution: {integrity: sha512-oIQLCGWtcFZy2JW77j9k8nHzAOpqMHLQejDA48XXMWH6tjCQHz5RCFz1bzsmROyL6PUm+LLnUiI4BCn221inxA==}
+
   '@types/webxr@0.5.24':
     resolution: {integrity: sha512-h8fgEd/DpoS9CBrjEQXR+dIDraopAEfu4wYVNY2tEPwk60stPWhvZMf4Foo5FakuQ7HFZoa8WceaWFervK2Ovg==}
 
@@ -8189,6 +8466,97 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@vue/compiler-core@3.5.40':
+    resolution: {integrity: sha512-39E8IgOhTbVDnoJFMKc2DvYnypcZwUqgUhQkccva/0m6FUwtIKSGV7n1hpVmYcFaoRAwf9pBcwnKlCEsN63ZEQ==}
+
+  '@vue/compiler-dom@3.5.40':
+    resolution: {integrity: sha512-pwkx4vqlqOspFstrcmzwkKLePVMD3PT65imRzLhanU2V1Fj4K13g6OXjanOyzw3aTAuRk84BOmY8f3rEHqPaVA==}
+
+  '@vue/compiler-sfc@3.5.40':
+    resolution: {integrity: sha512-gIf497P4kpuALcvs5n3AEg1Vdn0pSY4XbjASIfHNYF1/MP3T2Mf2STERTubysBxCRxzJGJYtF/O7vwJrxFB3Vw==}
+
+  '@vue/compiler-ssr@3.5.40':
+    resolution: {integrity: sha512-rrE5xiXG663+vHCHa3J9p2z5OcBRjXmoqenprJxAFQxg5pSshzeBiCE6pu46axapRJ2Adk0YDA2BRZVjiHXnhg==}
+
+  '@vue/reactivity@3.5.40':
+    resolution: {integrity: sha512-B7ot9UlUZOi1zbq61/LvE88ZLTV8IlajTdiZTAEiDQgrnIMIZoPr9kGw0Zw46ObW62O9+H/Be3kMbfb7kYPQZA==}
+
+  '@vue/runtime-core@3.5.40':
+    resolution: {integrity: sha512-KAZLweuZ6uUJPK1PMSQPgBU5gCjgrrfjUhSglmU9NhH+Zjepa8cnwSydPWDWHDwOgY4g3VcZ+PljbiHlURNCbw==}
+
+  '@vue/runtime-dom@3.5.40':
+    resolution: {integrity: sha512-ZfrX8ssZQds900L9pr8AuK05ddnMsR4MPMZr8cPN9GoqoPWcXLhjvvbIA2SMv+7a97sJ1vv9pj/zxK0Cq/eEFQ==}
+
+  '@vue/server-renderer@3.5.40':
+    resolution: {integrity: sha512-XNJym9WpevhTVt1HuwOrCRJ5Q+9z4BjTMrDtjTrvx74SmUll8spNTw6whWJa9mEkO4PKn5TihI/bm/8ds2QVJw==}
+
+  '@vue/shared@3.5.40':
+    resolution: {integrity: sha512-WxnBtruIqOoV3rA4jeKDWzrYI5h7Cp4+pjwDi8kWGHz+IslhiN+wguLVVhtv2l8VoU02rzDCVfDjgCl1lNpZVg==}
+
+  '@vueuse/core@10.11.1':
+    resolution: {integrity: sha512-guoy26JQktXPcz+0n3GukWIy/JDNKti9v6VEMu6kV2sYBsWuGiTU8OWdg+ADfUbHg3/3DlqySDe7JmdHrktiww==}
+
+  '@vueuse/core@13.9.0':
+    resolution: {integrity: sha512-ts3regBQyURfCE2BcytLqzm8+MmLlo5Ln/KLoxDVcsZ2gzIwVNnQpQOL/UKV8alUqjSZOlpFZcRNsLRqj+OzyA==}
+    peerDependencies:
+      vue: ^3.5.0
+
+  '@vueuse/integrations@13.9.0':
+    resolution: {integrity: sha512-SDobKBbPIOe0cVL7QxMzGkuUGHvWTdihi9zOrrWaWUgFKe15cwEcwfWmgrcNzjT6kHnNmWuTajPHoIzUjYNYYQ==}
+    peerDependencies:
+      async-validator: ^4
+      axios: ^1
+      change-case: ^5
+      drauu: ^0.4
+      focus-trap: ^7
+      fuse.js: ^7
+      idb-keyval: ^6
+      jwt-decode: ^4
+      nprogress: ^0.2
+      qrcode: ^1.5
+      sortablejs: ^1
+      universal-cookie: ^7 || ^8
+      vue: ^3.5.0
+    peerDependenciesMeta:
+      async-validator:
+        optional: true
+      axios:
+        optional: true
+      change-case:
+        optional: true
+      drauu:
+        optional: true
+      focus-trap:
+        optional: true
+      fuse.js:
+        optional: true
+      idb-keyval:
+        optional: true
+      jwt-decode:
+        optional: true
+      nprogress:
+        optional: true
+      qrcode:
+        optional: true
+      sortablejs:
+        optional: true
+      universal-cookie:
+        optional: true
+
+  '@vueuse/metadata@10.11.1':
+    resolution: {integrity: sha512-IGa5FXd003Ug1qAZmyE8wF3sJ81xGLSqTqtQ6jaVfkeZ4i5kS2mwQF61yhVqojRnenVew5PldLyRgvdl4YYuSw==}
+
+  '@vueuse/metadata@13.9.0':
+    resolution: {integrity: sha512-1AFRvuiGphfF7yWixZa0KwjYH8ulyjDCC0aFgrGRz8+P4kvDFSdXLVfTk5xAN9wEuD1J6z4/myMoYbnHoX07zg==}
+
+  '@vueuse/shared@10.11.1':
+    resolution: {integrity: sha512-LHpC8711VFZlDaYUXEBbFBCQ7GS3dVU9mjOhhMhXP6txTV4EhYQg/KGnQuvt/sPAtoUKq7VVUnL6mVtFoL42sA==}
+
+  '@vueuse/shared@13.9.0':
+    resolution: {integrity: sha512-e89uuTLMh0U5cZ9iDpEI2senqPGfbPRTHM/0AaQkcxnpqjkZqDYP8rpfm7edOz8s+pOCOROEy1PIveSW8+fL5g==}
+    peerDependencies:
+      vue: ^3.5.0
+
   '@webgpu/types@0.1.71':
     resolution: {integrity: sha512-mMy8/ODcKhab808co15eW+yN+HgXoQxRQHTiBV9Mrvl1r0ufnid7YOcI+gi4eUWSWl9ezD6TW2KXccrL8HCh2A==}
 
@@ -8219,6 +8587,73 @@ packages:
     resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
     engines: {node: '>=10.0.0'}
 
+  '@yuku-analyzer/binding-darwin-arm64@0.6.12':
+    resolution: {integrity: sha512-9rpIP7IeybjyvWUf6WnU24h1qo+JdxIHr1o3yb06HoE8tM3S/Jh5RrUw9aw5P9BKSIvSPbLyVlItX7PcD3o5bQ==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@yuku-analyzer/binding-darwin-x64@0.6.12':
+    resolution: {integrity: sha512-ELLhNT4FGnqY8yh0W3cSs9rGMSeUyhib1aYD84RupjlfsrDTrQRoDhWu01Dv6xCfYgASYaj1Abntk91A7njNag==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@yuku-analyzer/binding-freebsd-x64@0.6.12':
+    resolution: {integrity: sha512-s76XocUMlK9liTyipALFb2K64ku35u/wg238A0NW8U5CUDsuIe/8tu5TzdLjJAGxnd0IV+gBneDt9cJJzLeFRQ==}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@yuku-analyzer/binding-linux-arm-gnu@0.6.12':
+    resolution: {integrity: sha512-hm8Tq0umop3RGu6dOMF61q69tYn1bDp1CeYD5ZjuGFQJclp0moVtjzY4z0bzusicKeZ9+k5LRroR0p5HWC2hDw==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@yuku-analyzer/binding-linux-arm-musl@0.6.12':
+    resolution: {integrity: sha512-CxtPKLddogHAB3ZHVWaUl+U8jx0pdriTSbQ1K/orlDqU0GDhg8LuIRyUscP7r2/62fGGMzkc119fE71I4Nl1Fg==}
+    cpu: [arm]
+    os: [linux]
+    libc: [musl]
+
+  '@yuku-analyzer/binding-linux-arm64-gnu@0.6.12':
+    resolution: {integrity: sha512-EOyLcpAmF5qAVDKmKvV7xt8oBGeWQ92CqFI4s7h7TRlrF6TfGRrh8PwawGn92gFploNLAYj/1Z9Q1gVvwGgG9g==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@yuku-analyzer/binding-linux-arm64-musl@0.6.12':
+    resolution: {integrity: sha512-T3eCYy6bMnVRMQEYAbDcpj08/XM93dBTtnn/DDocJN21RARe+KCzWKeL26J3yd3bOW3WVjVLq09BfdpAGB0buQ==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@yuku-analyzer/binding-linux-x64-gnu@0.6.12':
+    resolution: {integrity: sha512-1Y+noIuvnDugIVsoIr5NduZqX7KuFTzICSkvG8RW3OKK9URVeTOicKK217i44ABZSSZJ7A0E7vzifapx0c9VDw==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@yuku-analyzer/binding-linux-x64-musl@0.6.12':
+    resolution: {integrity: sha512-woN/GuG95Fd6bp+ZQfmiFrZnoA2hdu3vfVSc89A8LElnYpzFaJM81sOZp8f3tVOVUJxbt7KAUiCLwSy34MJKqA==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@yuku-analyzer/binding-win32-arm64@0.6.12':
+    resolution: {integrity: sha512-8OVFnKbK+lgsL6MqILPLpzlsa00K4KiKsdbHH94hpGcrqaz1jv+k0Y7ujSaoYTWw5Bb7Lr9GJ3L1n1hT2sXoYA==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@yuku-analyzer/binding-win32-x64@0.6.12':
+    resolution: {integrity: sha512-3w8w1Xc5njwgbGTcn3JfDxWuQnFvtSll1D8gBlk4U8CI5v7ibKOMIdABucCXH8WtsRREG0ME5Vn0i422eX3zLQ==}
+    cpu: [x64]
+    os: [win32]
+
+  '@yuku-toolchain/types@0.6.11':
+    resolution: {integrity: sha512-i1JYFNJaKNCgyJ/nVoR8GK7wvlXF+ShYzFHBauWcvg8IoiXInK7pVziHcgNz/MWLPNr/Mb/CtmXccrJMkKqSHQ==}
+
+  '@yuku-toolchain/types@0.6.8':
+    resolution: {integrity: sha512-AbUd1775RVkOxJkh8hkldIWoU6kRMTCsZFSZq8Ny53q7GkbaVe5UCfleNZ3RWCoz/ZKE8qwfeB7Cj0xqhLWsKA==}
+
   abab@2.0.6:
     resolution: {integrity: sha512-j2afSsaIENvHZN2B8GOpF566vZ5WVk5opAiMTvWgaQT8DkbOqsTfvNAvHoRGU2zzP8cPoqys+xHTRDWW8L+/BA==}
     deprecated: Use your platform's native atob() and btoa() methods instead
@@ -8927,6 +9362,10 @@ packages:
       react: ^18 || ^19 || ^19.0.0-rc
       react-dom: ^18 || ^19 || ^19.0.0-rc
 
+  cnfast@0.0.8:
+    resolution: {integrity: sha512-EjXKMfGfdwtV4AcNSQ6AwQaVzpC1B7IxeiwA3FlhTXz+YFlMKVi4c1JX9tgD2QOlahQXjB8KUXrBaYG+3v871Q==}
+    hasBin: true
+
   co@4.6.0:
     resolution: {integrity: sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==}
     engines: {iojs: '>= 1.0.0', node: '>= 0.12.0'}
@@ -9041,6 +9480,10 @@ packages:
     resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==}
     engines: {node: '>=18'}
 
+  convert-hrtime@5.0.0:
+    resolution: {integrity: sha512-lOETlkIeYSJWcbbcvjRKGxVMXJR+8+OQb/mTPbA4ObPMytYIsUbuOE0Jzy60hjARYszq1id0j8KgVhC+WGZVTg==}
+    engines: {node: '>=12'}
+
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
@@ -9083,6 +9526,9 @@ packages:
     engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
     hasBin: true
 
+  crelt@1.0.7:
+    resolution: {integrity: sha512-aK6BbWfhf4U/wCcLHKPJl/xa6VkVstRaPywWtMKGwuOLc/wZTyQYuoxgvZnNsBvv7Kg3YTBQYYBCggcviQczuA==}
+
   cross-env@7.0.3:
     resolution: {integrity: sha512-+/HKd6EgcQCJGh2PSjZuUitQBQynKor4wrFbRg4DtAgS1aWO+gU52xpH7M9ScGgXSYmAVS9bIJ8EzuaGw0oNAw==}
     engines: {node: '>=10.14', npm: '>=6', yarn: '>=1'}
@@ -9114,11 +9560,6 @@ packages:
     resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
     engines: {node: '>= 6'}
 
-  cssesc@3.0.0:
-    resolution: {integrity: sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==}
-    engines: {node: '>=4'}
-    hasBin: true
-
   cssom@0.3.8:
     resolution: {integrity: sha512-b0tGHbfegbhPJpxpiBPU2sCkigAqtM9O121le6bbOlgyV+NyGyCmVfJ6QW9eRjz8CpNfWEOYBIMIGRYkLwsIYg==}
 
@@ -9136,6 +9577,14 @@ packages:
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
+  cva@1.0.0-beta.4:
+    resolution: {integrity: sha512-F/JS9hScapq4DBVQXcK85l9U91M6ePeXoBMSp7vypzShoefUBxjQTo3g3935PUHgQd+IW77DjbPRIxugy4/GCQ==}
+    peerDependencies:
+      typescript: '>= 4.5.5'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
   cytoscape-cose-bilkent@4.1.0:
     resolution: {integrity: sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ==}
     peerDependencies:
@@ -10080,6 +10529,9 @@ packages:
   estree-util-visit@2.0.0:
     resolution: {integrity: sha512-m5KgiH85xAhhW8Wta0vShLcUvOsh3LLPI2YVwcbio1l7E09NTLL1EyMZFM1OyWowoH0skScNbhOPl4kcBgzTww==}
 
+  estree-walker@2.0.2:
+    resolution: {integrity: sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==}
+
   estree-walker@3.0.3:
     resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==}
 
@@ -10420,6 +10872,9 @@ packages:
     engines: {node: '>=4'}
     hasBin: true
 
+  focus-trap@7.8.0:
+    resolution: {integrity: sha512-/yNdlIkpWbM0ptxno3ONTuf+2g318kh2ez3KSeZN5dZ8YC6AAmgeWz+GasYYiBJPFaYcSAPeu4GfhUaChzIJXA==}
+
   fontfaceobserver@2.3.0:
     resolution: {integrity: sha512-6FPvD/IVyT4ZlNe7Wcn5Fb/4ChigpucKYSvD6a+0iMoLn2inpo711eyIcKjmDtE5XNcgAkSH9uN/nfAeZzHEfg==}
 
@@ -10470,31 +10925,50 @@ packages:
     engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
     os: [darwin]
 
-  fumadocs-core@15.8.2:
-    resolution: {integrity: sha512-8x6nwL9gQyfU94VrX3xOIRb3avG9txEJXd0/XdldxHeH6uIAtSGnZ6YV1LksJfEsSIUL+DRxrxRfvL0rbwBP1g==}
+  fumadocs-core@16.11.5:
+    resolution: {integrity: sha512-YrHjS09+QYYKOSTGyiZbxF/VDs7ciMcjurYBGfmYqtzdj14k7Ho0HX9c6VuvG54YsYHQs5mGWemT1TXm7vDBaA==}
     peerDependencies:
-      '@mixedbread/sdk': ^0.19.0
-      '@oramacloud/client': 1.x.x || 2.x.x
+      '@mdx-js/mdx': '*'
+      '@mixedbread/sdk': 0.x.x
+      '@orama/core': 1.x.x
+      '@oramacloud/client': 2.x.x
       '@tanstack/react-router': 1.x.x
+      '@types/estree-jsx': '*'
+      '@types/hast': '*'
+      '@types/mdast': '*'
       '@types/react': '*'
       algoliasearch: 5.x.x
+      flexsearch: '*'
       lucide-react: '*'
-      next: 14.x.x || 15.x.x
-      react: 18.x.x || 19.x.x
-      react-dom: 18.x.x || 19.x.x
-      react-router: 7.x.x
-      waku: ^0.26.0
+      next: 16.2.6
+      react: ^19.2.0
+      react-dom: ^19.2.0
+      react-router: 7.x.x || 8.x.x
+      waku: '*'
+      zod: 4.x.x
     peerDependenciesMeta:
+      '@mdx-js/mdx':
+        optional: true
       '@mixedbread/sdk':
         optional: true
+      '@orama/core':
+        optional: true
       '@oramacloud/client':
         optional: true
       '@tanstack/react-router':
         optional: true
+      '@types/estree-jsx':
+        optional: true
+      '@types/hast':
+        optional: true
+      '@types/mdast':
+        optional: true
       '@types/react':
         optional: true
       algoliasearch:
         optional: true
+      flexsearch:
+        optional: true
       lucide-react:
         optional: true
       next:
@@ -10507,45 +10981,91 @@ packages:
         optional: true
       waku:
         optional: true
+      zod:
+        optional: true
 
-  fumadocs-mdx@12.0.1:
-    resolution: {integrity: sha512-o0Qf5pY5RGjn0IoiWbJQ+Yx2MKCwg/RTe0MdtLY2ue8OeRnZHCoPedBJFHQ0ep1X2rzAhjcmfTT5hxc3SELJGg==}
+  fumadocs-mdx@15.2.0:
+    resolution: {integrity: sha512-+yBP8QYw5wA9LF5eVdMhwbP7KT1OF4B/YfC6PZoD2jz0amZi1B+6QHTI6XoRRSTmhWrI4cL5LU1DspW0itk+NA==}
     hasBin: true
     peerDependencies:
-      '@fumadocs/mdx-remote': ^1.4.0
-      fumadocs-core: ^14.0.0 || ^15.0.0
-      next: ^15.3.0
-      react: '*'
+      '@fumadocs/satteri': 0.x.x
+      '@types/mdast': '*'
+      '@types/mdx': '*'
+      '@types/react': '*'
+      fumadocs-core: ^16.7.0
+      mdast-util-directive: '*'
+      next: 16.2.6
+      react: ^19.2.0
+      rolldown: '*'
+      satteri: ^0.9.4
       vite: 7.3.5
     peerDependenciesMeta:
-      '@fumadocs/mdx-remote':
+      '@fumadocs/satteri':
+        optional: true
+      '@types/mdast':
+        optional: true
+      '@types/mdx':
+        optional: true
+      '@types/react':
+        optional: true
+      mdast-util-directive:
         optional: true
       next:
         optional: true
       react:
         optional: true
+      rolldown:
+        optional: true
+      satteri:
+        optional: true
       vite:
         optional: true
 
-  fumadocs-ui@15.8.2:
-    resolution: {integrity: sha512-GLMm0a83mVQ2ubQLHbYQ/BcIRKEkA3cMXuVgKK4F/eB6duD6kLPwahoSb0mijwH3UrpJT+zfpKxPlK3JHXXW1A==}
+  fumadocs-openapi@11.2.2:
+    resolution: {integrity: sha512-jec0EOMDtUm9/h1tnPY2YSXAQ0oSv2KJCKae0C78iTCtkZgy6qdZH1otzOPX9eJuE/gFtaYvMszrdXmvvz2oWw==}
+    peerDependencies:
+      '@scalar/api-client-react': ^2.0.20
+      '@types/react': '*'
+      fumadocs-core: ^16.10.0
+      fumadocs-ui: ^16.10.0
+      json-schema-typed: '*'
+      react: ^19.2.0
+      react-dom: ^19.2.0
+    peerDependenciesMeta:
+      '@scalar/api-client-react':
+        optional: true
+      '@types/react':
+        optional: true
+      json-schema-typed:
+        optional: true
+
+  fumadocs-ui@16.11.5:
+    resolution: {integrity: sha512-Eda7x2Hk7E1iIjZ4uES0xxGr25Z72efRM5kP8sbgLSLhWg8TDCyWddvKAkzXIq8bupPOuJkdZa/YVvXbCktIEA==}
     peerDependencies:
+      '@types/mdx': '*'
       '@types/react': '*'
-      next: 14.x.x || 15.x.x
-      react: 18.x.x || 19.x.x
-      react-dom: 18.x.x || 19.x.x
-      tailwindcss: ^3.4.14 || ^4.0.0
+      fumadocs-core: 16.11.5
+      next: 16.2.6
+      react: ^19.2.0
+      react-dom: ^19.2.0
+      takumi-js: '*'
     peerDependenciesMeta:
+      '@types/mdx':
+        optional: true
       '@types/react':
         optional: true
       next:
         optional: true
-      tailwindcss:
+      takumi-js:
         optional: true
 
   function-bind@1.1.2:
     resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
 
+  function-timeout@1.0.2:
+    resolution: {integrity: sha512-939eZS4gJ3htTHAldmyyuzlrD58P03fHG49v2JfFXbV6OhvZKRC9j2yAtdHw/zrp2zXHuv05zMIy40F0ge7spA==}
+    engines: {node: '>=18'}
+
   function.prototype.name@1.1.8:
     resolution: {integrity: sha512-e5iwyodOHhbMr/yNrc7fDYG4qlbIvI5gajyzPnb5TCwyhjApznQh1BMFou9b30SevY43gCJKXycoCBjMbsuW0Q==}
     engines: {node: '>= 0.4'}
@@ -10553,6 +11073,10 @@ packages:
   functions-have-names@1.2.3:
     resolution: {integrity: sha512-xckBUXyTIqT97tq2x2AMb+g163b5JFysYk0x4qxNFwbfQkmNZoiRHb6sPzI9/QV33WeuvVYBUIiD4NzNIyqaRQ==}
 
+  fuse.js@7.5.0:
+    resolution: {integrity: sha512-sQtrEfA+ez/3G0cCZecF70oqpCRttCexYUG4mUrtWL49ULUzUyxokt5kyqwtKzj1270RaKih+hcP3qLcumccow==}
+    engines: {node: '>=10'}
+
   generate-function@2.3.1:
     resolution: {integrity: sha512-eeB5GfMNeevm/GRYq20ShmsaGcmI81kIX2K9XQx5miC8KdHaC6Jm0qQ8ZNeGOi7wYB8OsdxKs+Y2oVuTFuVwKQ==}
 
@@ -10580,6 +11104,10 @@ packages:
     resolution: {integrity: sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q==}
     engines: {node: '>=6'}
 
+  get-own-enumerable-keys@1.0.0:
+    resolution: {integrity: sha512-PKsK2FSrQCyxcGHsGrLDcK0lx+0Ke+6e8KFFozA9/fIQLhQzPaRvJFdcz7+Axg3jUH/Mq+NI4xa5u/UT2tQskA==}
+    engines: {node: '>=14.16'}
+
   get-package-type@0.1.0:
     resolution: {integrity: sha512-pjzuKtY64GYfWizNAJ0fr9VqttZkNiK2iS430LtIHzjBEr6bX8Am2zm4sW4Ro5wjWW5cAlRL1qAMTcXbjNAO2Q==}
     engines: {node: '>=8.0.0'}
@@ -10729,12 +11257,36 @@ packages:
     resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
     engines: {node: '>= 0.4'}
 
+  hast-util-embedded@3.0.0:
+    resolution: {integrity: sha512-naH8sld4Pe2ep03qqULEtvYr7EjrLK2QHY8KJR6RJkTUjPGObe1vnx585uzem2hGra+s1q08DZZpfgDVYRbaXA==}
+
+  hast-util-format@1.1.0:
+    resolution: {integrity: sha512-yY1UDz6bC9rDvCWHpx12aIBGRG7krurX0p0Fm6pT547LwDIZZiNr8a+IHDogorAdreULSEzP82Nlv5SZkHZcjA==}
+
+  hast-util-from-html@2.0.3:
+    resolution: {integrity: sha512-CUSRHXyKjzHov8yKsQjGOElXy/3EKpyX56ELnkHH34vDVw1N1XSQ1ZcAvTyAPtGqLTuKP/uxM+aLkSPqF/EtMw==}
+
   hast-util-from-parse5@8.0.3:
     resolution: {integrity: sha512-3kxEVkEKt0zvcZ3hCRYI8rqrgwtlIOFMWkbclACvjlDw8Li9S2hk/d51OI0nr/gIpdMHNepwgOKqZ/sy0Clpyg==}
 
+  hast-util-has-property@3.0.0:
+    resolution: {integrity: sha512-MNilsvEKLFpV604hwfhVStK0usFY/QmM5zX16bo7EjnAEGofr5YyI37kzopBlZJkHD4t887i+q/C8/tr5Q94cA==}
+
+  hast-util-is-body-ok-link@3.0.1:
+    resolution: {integrity: sha512-0qpnzOBLztXHbHQenVB8uNuxTnm/QBFUOmdOSsEn7GnBtyY07+ENTWVFBAnXd/zEgd9/SUG3lRY7hSIBWRgGpQ==}
+
+  hast-util-is-element@3.0.0:
+    resolution: {integrity: sha512-Val9mnv2IWpLbNPqc/pUem+a7Ipj2aHacCwgNfTiK0vJKl0LF+4Ba4+v1oPHFpf3bLYmreq0/l3Gud9S5OH42g==}
+
+  hast-util-minify-whitespace@1.0.1:
+    resolution: {integrity: sha512-L96fPOVpnclQE0xzdWb/D12VT5FabA7SnZOUMtL1DbXmYiHJMXZvFkIZfiMmTCNJHUeO2K9UYNXoVyfz+QHuOw==}
+
   hast-util-parse-selector@4.0.0:
     resolution: {integrity: sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==}
 
+  hast-util-phrasing@3.0.1:
+    resolution: {integrity: sha512-6h60VfI3uBQUxHqTyMymMZnEbNl1XmEGtOxxKYL7stY2o601COo62AWAYBQR9lZbYXYSBoxag8UpPRXK+9fqSQ==}
+
   hast-util-raw@9.1.0:
     resolution: {integrity: sha512-Y8/SBAHkZGoNkpzqqfCldijcuUKh7/su31kEBp67cFY09Wy0mTRgtsLYsiIxMJxlu0f6AA5SUTbDR8K0rxnbUw==}
 
@@ -10753,8 +11305,8 @@ packages:
   hast-util-to-parse5@8.0.1:
     resolution: {integrity: sha512-MlWT6Pjt4CG9lFCjiz4BH7l9wmrMkfkJYCxFwKQic8+RTZgWPuWxwAfjJElsXkex7DJjfSJsQIt931ilUgmwdA==}
 
-  hast-util-to-string@3.0.1:
-    resolution: {integrity: sha512-XelQVTDWvqcl3axRfI0xSeoVKzyIFPwsAGSLIsKdJKQMXDYJS4WYrBNF/8J7RdhIcFI2BOHgAifggsvsxp/3+A==}
+  hast-util-to-text@4.0.2:
+    resolution: {integrity: sha512-KK6y/BN8lbaq654j7JgBydev7wuNMcID54lkRav1P0CaE1e47P72AWWPiGKXTJU271ooYzcvTAn/Zt0REnvc7A==}
 
   hast-util-whitespace@3.0.0:
     resolution: {integrity: sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==}
@@ -10780,6 +11332,10 @@ packages:
   hermes-parser@0.36.0:
     resolution: {integrity: sha512-GdpwMmH5x6IpC1cijvcvYnlPB60Mh6kTSF/NFdYV/j56gYdi+0RIakYs+eqOV+bbO0SW7mgVVGSsTJxyPQfo3w==}
 
+  highlight.js@11.11.1:
+    resolution: {integrity: sha512-Xwwo44whKBVCYoliBQwaPvtd/2tYFkRQtXDWj1nackaV2JPXx3L0+Jvd8/qCJ2p+ML0/XVkJ2q+Mr+UVdpJK5w==}
+    engines: {node: '>=12.0.0'}
+
   hls.js@1.6.16:
     resolution: {integrity: sha512-VSIRpLfRwlAAdGL4wiTucx2ScRipo0ed1FBatWkyt832jC4CReKstga6yIhYVwGu9LOBjuX9wzmRMeQdBJtzEA==}
 
@@ -10811,6 +11367,9 @@ packages:
   html-void-elements@3.0.0:
     resolution: {integrity: sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==}
 
+  html-whitespace-sensitive-tag-names@3.0.1:
+    resolution: {integrity: sha512-q+310vW8zmymYHALr1da4HyXUQ0zgiIwIicEfotYPWGN0OJVEN/58IJ3A4GBYcEq3LGAZqKb+ugvP0GNB9CEAA==}
+
   html5parser@3.0.0:
     resolution: {integrity: sha512-iNpSopa+4YHX50UOk825tBy7MghmXHo/ZpLskBYN0kAr1xhH8GlIMk5bLRXcZlfP3AnLUcSuFMu8C4MdOUxA8A==}
 
@@ -10852,6 +11411,10 @@ packages:
     resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==}
     engines: {node: '>=0.10.0'}
 
+  identifier-regex@1.1.0:
+    resolution: {integrity: sha512-SLX4H/vtcYlYnL7XqnuJKHU7Z8517TgsW9nmQiGOgMCjQ8V/deLYu6bEmbGoXe7WMMhc9+EUGyFFneHja8KabA==}
+    engines: {node: '>=18'}
+
   ieee754@1.2.1:
     resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
 
@@ -10868,11 +11431,6 @@ packages:
     engines: {node: '>=16.x'}
     hasBin: true
 
-  image-size@2.0.2:
-    resolution: {integrity: sha512-IRqXKlaXwgSMAMtpNzZa1ZAe8m+Sa1770Dhk8VkSsP9LS+iHD62Zd8FQKs8fbPiagBE7BzoFX23cxFnwshpV6w==}
-    engines: {node: '>=16.x'}
-    hasBin: true
-
   immediate@3.0.6:
     resolution: {integrity: sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==}
 
@@ -10968,6 +11526,10 @@ packages:
   iron-webcrypto@2.0.0:
     resolution: {integrity: sha512-rtffZKDUHciZElM8mjFCufBC7nVhCxHYyWHESqs89OioEDz4parOofd8/uhrejh/INhQFfYQfByS22LlezR9sQ==}
 
+  is-absolute-url@4.0.1:
+    resolution: {integrity: sha512-/51/TKE88Lmm7Gc4/8btclNXWS+g50wXhYJq8HWIBAGUBnoAdRu1aXeh364t/O7wXDAcTJDP8PNuNKWUDWie+A==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   is-alphabetical@2.0.1:
     resolution: {integrity: sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==}
 
@@ -11062,6 +11624,10 @@ packages:
   is-hexadecimal@2.0.1:
     resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}
 
+  is-identifier@1.1.0:
+    resolution: {integrity: sha512-NhOds0mDx9lJu+1lBRO0xbwFo5nobA7GCk/0e5xjr6+6XugX985+0OyGX35BNrTkPAsdLcIKg02HUQJOK8D8kw==}
+    engines: {node: '>=18'}
+
   is-in-ci@2.0.0:
     resolution: {integrity: sha512-cFeerHriAnhrQSbpAxL37W1wcJKUUX07HyLWZCW1URJT/ra3GyUTzBgUnh24TMVfNTV2Hij2HLxkPHFZfOZy5w==}
     engines: {node: '>=20'}
@@ -11083,6 +11649,10 @@ packages:
     resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==}
     engines: {node: '>=0.12.0'}
 
+  is-obj@3.0.0:
+    resolution: {integrity: sha512-IlsXEHOjtKhpN8r/tRFj2nDyTmHvcfNeu/nrRIcXE17ROeatXchkojffa1SpdqW4cr/Fj6QkEf/Gn4zf6KKvEQ==}
+    engines: {node: '>=12'}
+
   is-plain-obj@2.1.0:
     resolution: {integrity: sha512-YWnfyRwxL/+SsrWYfOpUtz5b3YD+nyfkHvjbcanzk8zgyO4ASD67uVMRt8k5bM4lLMDnXfriRhOpemw+NfT1eA==}
     engines: {node: '>=8'}
@@ -11104,6 +11674,10 @@ packages:
     resolution: {integrity: sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==}
     engines: {node: '>= 0.4'}
 
+  is-regexp@3.1.0:
+    resolution: {integrity: sha512-rbku49cWloU5bSMI+zaRaXdQHXnthP6DZ/vLnfdSKyL4zUzuWnomtOEiZZOd+ioQ+avFo/qau3KPTc7Fjy1uPA==}
+    engines: {node: '>=12'}
+
   is-set@2.0.3:
     resolution: {integrity: sha512-iPAjerrse27/ygGLxw+EBR9agv9Y6uLeYVJMu+QNCoouJ1/1ri0mGrcWpfCqFZuzzx3WjtwxG098X+n4OuRkPg==}
     engines: {node: '>= 0.4'}
@@ -11729,6 +12303,9 @@ packages:
   loupe@3.2.1:
     resolution: {integrity: sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==}
 
+  lowlight@3.3.0:
+    resolution: {integrity: sha512-0JNhgFoPvP6U6lE/UdVsSq99tn6DhjjpAj5MxG49ewd2mOBVtwWYIT8ClyABhq198aXXODMU6Ox8DrGy/CpTZQ==}
+
   lru-cache@10.4.3:
     resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
 
@@ -11757,6 +12334,11 @@ packages:
     peerDependencies:
       react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  lucide-react@1.25.0:
+    resolution: {integrity: sha512-/mdJTRbiwcLOQ1NZZK1amZF9rIZyvO18D6r9TngE6TG1NmqHgFuT4eE7Xrkm9UsXMbBJD1NlfwHVltCDWHrOTw==}
+    peerDependencies:
+      react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
   lucide-static@0.555.0:
     resolution: {integrity: sha512-FMMaYYsEYsUA6xlEzIMoKEV3oGnxIIvAN+AtLmYXvlTJptJTveJjVBQwvtA/zZLrD6KLEu89G95dQYlhivw5jQ==}
 
@@ -11779,6 +12361,10 @@ packages:
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
+  make-asynchronous@1.1.0:
+    resolution: {integrity: sha512-ayF7iT+44LXdxJLTrTd3TLQpFDDvPCBxXxbv+pMUSuHA5Q8zyAfwkRP6aHHwNVFBUFWtxAHqwNJxF8vMZLAbVg==}
+    engines: {node: '>=18'}
+
   make-dir@2.1.0:
     resolution: {integrity: sha512-LS9X+dc8KLxXCb8dni79fLIIUA5VyZoyjSMCwTluaXA0o27cCK0bhXkpgw+sTXVpPy/lSO57ilRixqk0vDmtRA==}
     engines: {node: '>=6'}
@@ -12225,6 +12811,11 @@ packages:
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
+  nanoid@3.3.16:
+    resolution: {integrity: sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==}
+    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
+    hasBin: true
+
   nanoid@5.1.6:
     resolution: {integrity: sha512-c7+7RQ+dMB5dPwwCp4ee1/iV/q2P6aK1mTZcfr1BTuVlyW9hJYiMPybJCcnBlQtuSmTIWNeazm/zqNoZSSElBg==}
     engines: {node: ^18 || >=20}
@@ -12253,10 +12844,6 @@ packages:
     resolution: {integrity: sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==}
     engines: {node: '>= 0.6'}
 
-  negotiator@1.0.0:
-    resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==}
-    engines: {node: '>= 0.6'}
-
   nested-error-stacks@2.0.1:
     resolution: {integrity: sha512-SrQrok4CATudVzBS7coSz26QRSmlK9TzzoFbeKfcPBUFPjcQM9Rqvr/DlJkOrwI/0KcgvMub1n1g5Jt9EgRn4A==}
 
@@ -12337,10 +12924,6 @@ packages:
     resolution: {integrity: sha512-S48WzZW777zhNIrn7gxOlISNAqi9ZC/uQFnRdbeIHhZhCA6UqpkOT8T1G7BvfdgP4Er8gF4sUbaS0i7QvIfCWw==}
     engines: {node: '>=8'}
 
-  npm-to-yarn@3.0.1:
-    resolution: {integrity: sha512-tt6PvKu4WyzPwWUzy/hvPFqn+uwXO0K1ZHka8az3NnrhWJDmSqI8ncWq0fkL0k/lmmi5tAC11FXwXuh0rFbt1A==}
-    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
-
   nth-check@2.1.1:
     resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
 
@@ -12507,6 +13090,10 @@ packages:
       vite-plus:
         optional: true
 
+  p-event@6.0.1:
+    resolution: {integrity: sha512-Q6Bekk5wpzW5qIyUP4gdMEujObYstZl6DMMOSenwBvV0BlE5LkDwkjs5yHbZmdCEq2o4RJx4tE1vwxFVf2FG1w==}
+    engines: {node: '>=16.17'}
+
   p-limit@2.3.0:
     resolution: {integrity: sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==}
     engines: {node: '>=6'}
@@ -12523,6 +13110,10 @@ packages:
     resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
     engines: {node: '>=10'}
 
+  p-timeout@6.1.4:
+    resolution: {integrity: sha512-MyIV3ZA/PmyBN/ud8vV9XzwTrNtR4jFrObymZYnZqMmW0zA8Z17vnT0rBgFE/TlohB+YCHqXMgZzb3Csp49vqg==}
+    engines: {node: '>=14.16'}
+
   p-try@2.2.0:
     resolution: {integrity: sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==}
     engines: {node: '>=6'}
@@ -12550,6 +13141,10 @@ packages:
     resolution: {integrity: sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==}
     engines: {node: '>=8'}
 
+  parse-ms@4.0.0:
+    resolution: {integrity: sha512-TXfryirbmq34y8QBwgqCVLi+8oA3oWx2eAnSn62ITyEhEYaWRlVZ2DvMM9eZbMs/RfxPu/PK/aBLyGj4IrqMHw==}
+    engines: {node: '>=18'}
+
   parse-png@2.1.0:
     resolution: {integrity: sha512-Nt/a5SfCLiTnQAjx3fHlqp8hRgTL3z7kTQZzvIMS9uCAepnCyjpdEc6M/sz69WqMBdaDBw9sF1F1UaHROYzGkQ==}
     engines: {node: '>=10'}
@@ -12616,9 +13211,6 @@ packages:
   path-to-regexp@6.3.0:
     resolution: {integrity: sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==}
 
-  path-to-regexp@8.4.2:
-    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
-
   pathe@2.0.3:
     resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
 
@@ -12797,10 +13389,6 @@ packages:
       yaml:
         optional: true
 
-  postcss-selector-parser@7.1.4:
-    resolution: {integrity: sha512-HeP7D2wyhkR+XaK6v4W8oRF62Dsz4flyuczALJp61GckGm42u1saSSJ/0auvcBqxs3jMRFEcPK34At/0JBKdOg==}
-    engines: {node: '>=4'}
-
   postcss@8.5.10:
     resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==}
     engines: {node: ^10 || ^12 || >=14}
@@ -12809,6 +13397,10 @@ packages:
     resolution: {integrity: sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==}
     engines: {node: ^10 || ^12 || >=14}
 
+  postcss@8.5.20:
+    resolution: {integrity: sha512-lW616l85ucIQL+FocMmL7pQFPqBmwejrCMg+iPxyImlrANNJG9NHq/RkyCZopDhd8C3LA03PHRJDjkbGu8vvug==}
+    engines: {node: ^10 || ^12 || >=14}
+
   postgres-array@2.0.0:
     resolution: {integrity: sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA==}
     engines: {node: '>=4'}
@@ -12905,6 +13497,10 @@ packages:
     resolution: {integrity: sha512-9uBdv/B4EefsuAL+pWqueZyZS2Ba+LxfFeQ9DN14HU4bN8bhaxKdkpjpB6fs9+pSjIBu+FXQHImEg8j/Lw0+vA==}
     engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
 
+  pretty-ms@9.3.0:
+    resolution: {integrity: sha512-gjVS5hOP+M3wMm5nmNOucbIrqudzs9v/57bWRHQWLYklXqoXKrVfYW2W9+glfGsqtPgpiz5WwyEEB+ksXIx3gQ==}
+    engines: {node: '>=18'}
+
   prismjs@1.30.0:
     resolution: {integrity: sha512-DEvV2ZF2r2/63V+tK8hQvrR2ZGn10srHbXviTlcv7Kpzw8jWiNTqbVgjO3IY8RxrrOUF8VPMQQFysYYYv0YZxw==}
     engines: {node: '>=6'}
@@ -13019,6 +13615,11 @@ packages:
       '@types/react-dom':
         optional: true
 
+  radix-vue@1.9.17:
+    resolution: {integrity: sha512-mVCu7I2vXt1L2IUYHTt0sZMz7s1K2ZtqKeTIxG3yC5mMFfLBG4FtE1FDeRMpDd+Hhg/ybi9+iXmAP1ISREndoQ==}
+    peerDependencies:
+      vue: '>= 3.2.0'
+
   range-parser@1.2.1:
     resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
     engines: {node: '>= 0.6'}
@@ -13042,16 +13643,16 @@ packages:
   react-devtools-core@6.1.5:
     resolution: {integrity: sha512-ePrwPfxAnB+7hgnEr8vpKxL9cmnp7F322t8oqcPshbIQQhDKgFDW4tjhF2wjVbdXF9O/nyuy3sQWd9JGpiLPvA==}
 
-  react-dom@19.1.0:
-    resolution: {integrity: sha512-Xs1hdnE+DyKgeHJeJznQmYMIBG3TKIHJJT95Q58nHLSrElKlGQqDTR2HQ9fx5CN/Gk6Vh/kupBTDLU11/nDk/g==}
-    peerDependencies:
-      react: ^19.1.0
-
   react-dom@19.1.1:
     resolution: {integrity: sha512-Dlq/5LAZgF0Gaz6yiqZCf6VCcZs1ghAJyrsu84Q/GT0gV+mCxbfmKNoGRKBYMJ8IEdGPqu49YWXD02GCknEDkw==}
     peerDependencies:
       react: ^19.1.1
 
+  react-dom@19.2.7:
+    resolution: {integrity: sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ==}
+    peerDependencies:
+      react: ^19.2.7
+
   react-easy-crop@6.2.2:
     resolution: {integrity: sha512-b0HOicSvLYoNk1yvZTwjH8sNjF5uD9xLtWrSDnv+fx1dXTbwd8bNLQaP6gjXw//A+tni9Mw5KDmPNOEjKF55NQ==}
     peerDependencies:
@@ -13093,12 +13694,6 @@ packages:
   react-is@19.2.3:
     resolution: {integrity: sha512-qJNJfu81ByyabuG7hPFEbXqNcWSU3+eVus+KJs+0ncpGfMyYdvSmxiJxbWR65lYi1I+/0HBcliO029gc4F+PnA==}
 
-  react-medium-image-zoom@5.4.8:
-    resolution: {integrity: sha512-72CIldEUaPejjcaDOYIeDsGlWzNKpmxyKgiPi1LBCkWCIGHDLlA2KTeo2uNtmN/m72Y3k/2uWDfon9SDiPbHaA==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
   react-native-is-edge-to-edge@1.2.1:
     resolution: {integrity: sha512-FLbPWl/MyYQWz+KwqOZsSyj2JmLKglHatd3xLZWskXOpRaio4LfEDEz8E/A6uD8QoTHW6Aobw1jbEwK7KMgR7Q==}
     peerDependencies:
@@ -13377,9 +13972,18 @@ packages:
     resolution: {integrity: sha512-NZQZdC5wOE/H3UT28fVGL+ikOZcEzfMGk/c3iN9UGxzWHMa1op7274oyiUVrAG4B2EuFhus8SvkaYnhvW92p9Q==}
     hasBin: true
 
+  rehype-external-links@3.0.0:
+    resolution: {integrity: sha512-yp+e5N9V3C6bwBeAC4n796kc86M4gJCdlVhiMTxIrJG5UHDMh+PJANf9heqORJbt1nrCbDwIlAZKjANIaVBbvw==}
+
+  rehype-format@5.0.1:
+    resolution: {integrity: sha512-zvmVru9uB0josBVpr946OR8ui7nJEdzZobwLOOqHb/OOD88W0Vk2SqLwoVOj0fM6IPCCO6TaV9CvQvJMWwukFQ==}
+
   rehype-harden@1.1.8:
     resolution: {integrity: sha512-Qn7vR1xrf6fZCrkm9TDWi/AB4ylrHy+jqsNm1EHOAmbARYA6gsnVJBq/sdBh6kmT4NEZxH5vgIjrscefJAOXcw==}
 
+  rehype-parse@9.0.1:
+    resolution: {integrity: sha512-ksCzCD0Fgfh7trPDxr2rSylbwq9iYDkSn8TCDmEJ49ljEUBxDVCzCHv7QNzZOfODanX4+bWQ4WZqLCRWYLfhag==}
+
   rehype-raw@7.0.0:
     resolution: {integrity: sha512-/aE8hCfKlQeA8LmyeyQvQF3eBiLRGNlfBJEvWH7ivp9sBqs7TNqBL5X3v157rM4IFETqDnIOO+z5M/biZbo9Ww==}
 
@@ -13389,6 +13993,9 @@ packages:
   rehype-sanitize@6.0.0:
     resolution: {integrity: sha512-CsnhKNsyI8Tub6L4sm5ZFsme4puGfc6pYylvXo1AeqaGbjOYyzNv3qZPwvs0oMJ39eryyeOdmxwUIo94IpEhqg==}
 
+  rehype-stringify@10.0.1:
+    resolution: {integrity: sha512-k9ecfXHmIPuFVI61B9DeLPN0qFHfawM6RsuX48hoqlaKSF61RskNjSm1lI8PhBEM0MRdLxVVm4WmTqJQccH9mA==}
+
   remark-gfm@4.0.1:
     resolution: {integrity: sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==}
 
@@ -13432,6 +14039,10 @@ packages:
     resolution: {integrity: sha512-R8eBOFQDO6dzRTDmaMEdpqrkmgSjPpVXt4nGfWsZdYOet0kqra0xgbvTES6HmCriZEXbmGk3e0DiGIaLFTFSHA==}
     engines: {node: '>=18'}
 
+  reserved-identifiers@1.2.0:
+    resolution: {integrity: sha512-yE7KUfFvaBFzGPs5H3Ops1RevfUEsDc5Iz65rOwWg4lE8HJSYtle77uul3+573457oHvBKuHYDl/xqUkKpEEdw==}
+    engines: {node: '>=18'}
+
   resolve-cwd@3.0.0:
     resolution: {integrity: sha512-OrZaX2Mb+rJCpH/6CpSqt9xFVpN++x01XnN2ie9g6P5/3xelLAkXWVADpdz1IHD/KFfEXyE6V0U01OQ3UO2rEg==}
     engines: {node: '>=8'}
@@ -13667,6 +14278,9 @@ packages:
   server-only@0.0.1:
     resolution: {integrity: sha512-qepMx2JxAa5jjfzxG79yPPq+8BuFToHd1hm7kI+Z4zAq1ftQiP7HcxMhDDItrbtwVeLg/cY2JnKnrcFkmiswNA==}
 
+  set-cookie-parser@3.1.0:
+    resolution: {integrity: sha512-kjnC1DXBHcxaOaOXBHBeRtltsDG2nUiUni+jP92M9gYdW12rsmx92UsfpH7o5tDRs7I1ZZPSQJQGv3UaRfCiuw==}
+
   set-cookie-parser@3.1.2:
     resolution: {integrity: sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==}
 
@@ -13711,8 +14325,9 @@ packages:
     resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==}
     engines: {node: '>= 0.4'}
 
-  shiki@3.23.0:
-    resolution: {integrity: sha512-55Dj73uq9ZXL5zyeRPzHQsK7Nbyt6Y10k5s7OjuFZGMhpp4r/rsLBH0o/0fstIzX1Lep9VxefWljK/SKCzygIA==}
+  shiki@4.3.1:
+    resolution: {integrity: sha512-oR+qDVi2OjX1tmDpyv+3KviX01KzO6Af+0NNnKnsp9491UEGz2YpxTuJboS/6VhYpTdqzmuJBuiTlrAWWJAssw==}
+    engines: {node: '>=20'}
 
   side-channel-list@1.0.0:
     resolution: {integrity: sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==}
@@ -13991,6 +14606,10 @@ packages:
   stringify-entities@4.0.4:
     resolution: {integrity: sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==}
 
+  stringify-object@6.0.0:
+    resolution: {integrity: sha512-6f94vIED6vmJJfh3lyVsVWxCYSfI5uM+16ntED/Ql37XIyV6kj0mRAAiTeMMc/QLYIaizC3bUprQ8pQnDDrKfA==}
+    engines: {node: '>=20'}
+
   strip-ansi@5.2.0:
     resolution: {integrity: sha512-DuRs1gKbBqsMKIZlrffwlug8MHkcnpjs5VPmL1PAh+mA30U0DTotfDZ0d2UUsXpPmPmMMJ6W773MaA3J+lbiWA==}
     engines: {node: '>=6'}
@@ -14055,6 +14674,9 @@ packages:
   stubborn-utils@1.0.2:
     resolution: {integrity: sha512-zOh9jPYI+xrNOyisSelgym4tolKTJCQd5GBhK0+0xJvcYDcwlOoxF/rnFKQ2KRZknXSG9jWAp66fwP6AxN9STg==}
 
+  style-mod@4.1.3:
+    resolution: {integrity: sha512-i/n8VsZydrugj3Iuzll8+x/00GH2vnYsk1eomD8QiRrSAeW6ItbCQDtfXCeJHd0iwiNagqjQkvpvREEPtW3IoQ==}
+
   style-to-js@1.1.21:
     resolution: {integrity: sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ==}
 
@@ -14069,6 +14691,10 @@ packages:
     engines: {node: '>=16 || 14 >=14.17'}
     hasBin: true
 
+  super-regex@1.1.0:
+    resolution: {integrity: sha512-WHkws2ZflZe41zj6AolvvmaTrWds/VuyeYr9iPVv/oQeaIoVxMKaushfFWpOGDT+GuBrM/sVqF8KUCYQlSSTdQ==}
+    engines: {node: '>=18'}
+
   supports-color@10.2.2:
     resolution: {integrity: sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==}
     engines: {node: '>=18'}
@@ -14105,10 +14731,16 @@ packages:
     resolution: {integrity: sha512-MeQTA1r0litLUf0Rp/iisCaL8761lKAZHaimlbGK4j0HysC4PLfqygQj9srcs0m2RdtDYnF8UuYyKpbjHYp7Jw==}
     engines: {node: ^14.18.0 || >=16.0.0}
 
+  tabbable@6.5.0:
+    resolution: {integrity: sha512-wieBHXygIm7OyQOu5hQlkk62/WyCFYGlWg7L6/ZCUZwx0o398Zkn4pVmMyfYhfMG8kGrj/Krt8eIk6UKC6VzwA==}
+
   tagged-tag@1.0.0:
     resolution: {integrity: sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==}
     engines: {node: '>=20'}
 
+  tailwind-merge@3.5.0:
+    resolution: {integrity: sha512-I8K9wewnVDkL1NTGoqWmVEIlUcB9gFriAEkXkfCjX5ib8ezGxtR3xD7iZIxrfArjEsH7F1CHD4RFUtxefdqV/A==}
+
   tailwind-merge@3.6.0:
     resolution: {integrity: sha512-uxL7qAVQriqRQPAyK3pj66VqskWqoZ37PW94jwOTwNfq/z9oyu1V+eqrZqtR2+fCiXdYOZe/Modt8GtvqNzu+w==}
 
@@ -14184,6 +14816,10 @@ packages:
   throat@5.0.0:
     resolution: {integrity: sha512-fcwX4mndzpLQKBS1DVYhGAcYaYt7vsHNIvQV+WXMvnow5cgjPphq5CaayLaGsjRdSCKZFNGt7/GYAuXaNOiYCA==}
 
+  time-span@5.1.0:
+    resolution: {integrity: sha512-75voc/9G4rDIJleOo4jPvN4/YC4GRZrY8yy1uU4lwrB3XEQbWve8zXoO5No4eFrGcTAMYyoY67p8jRQdtA1HbA==}
+    engines: {node: '>=12'}
+
   tiny-invariant@1.3.3:
     resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
 
@@ -14463,6 +15099,10 @@ packages:
     resolution: {integrity: sha512-Ne2YiiGN8bmrmJJEuTWTLJR32nh/JdL1+PSicowtNb0WFpn59GK8/lfD61bVtzguz7b3PBt74nxpv/Pw5po5Rg==}
     engines: {node: '>=8'}
 
+  type-fest@4.41.0:
+    resolution: {integrity: sha512-TeTSQ6H5YHvpqVwBRcnLDCBnDOHWYu7IvGbHT6N8AOymcr9PJGjc1GTtiWZTYg0NCgYwvnYWEkVChQAr9bjfwA==}
+    engines: {node: '>=16'}
+
   type-fest@5.8.0:
     resolution: {integrity: sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==}
     engines: {node: '>=20'}
@@ -14583,6 +15223,9 @@ packages:
     resolution: {integrity: sha512-uNaeirEPvpZWSgzwsPGtU2zVSTrn/8L5q/IexZmH0eH6SA73CmAA5U4GwORTxQAZs95TAXLNqeLoPPNO5gZfWg==}
     engines: {node: '>=8'}
 
+  unist-util-find-after@5.0.0:
+    resolution: {integrity: sha512-amQa0Ep2m6hE2g72AugUItjbuM8X8cGQnFoHk0pGfrFeT9GZhzN5SW8nRsiGKK7Aif4CrACPENkA6P/Lw6fHGQ==}
+
   unist-util-is@6.0.1:
     resolution: {integrity: sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==}
 
@@ -14592,6 +15235,9 @@ packages:
   unist-util-position@5.0.0:
     resolution: {integrity: sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==}
 
+  unist-util-remove-position@5.0.0:
+    resolution: {integrity: sha512-Hp5Kh3wLxv0PHj9m2yZhhLt58KzPtEYKQQ4yxfYFEO7EvHwzyDYnduhHnY1mDxoqr7VUwVuHXk9RXKIiYS1N8Q==}
+
   unist-util-stringify-position@4.0.0:
     resolution: {integrity: sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==}
 
@@ -14870,6 +15516,34 @@ packages:
   voidhash@0.0.1-alpha.4:
     resolution: {integrity: sha512-UYZBKJIMrCjEMNisDE1MU1MLQRJZ1Tn/TsnM3ms6il4jgLS1/81JVXKVbAXLAZDBTwHUbRnz09U7Pr3mvOlWUA==}
 
+  vue-component-type-helpers@3.3.7:
+    resolution: {integrity: sha512-Skkhw9agYSgsWqv7bxSOGJZa9SaiJbZVGdXuFWnrzKaQYHnw9qbjD630rw6RyMqDbp54nfLCLw5SZA55if7JLg==}
+
+  vue-demi@0.14.10:
+    resolution: {integrity: sha512-nMZBOwuzabUO0nLgIcc6rycZEebF6eeUfaiQx9+WSk8e29IbLvPU9feI6tqW4kTo3hvoYAJkMh8n8D0fuISphg==}
+    engines: {node: '>=12'}
+    hasBin: true
+    peerDependencies:
+      '@vue/composition-api': ^1.0.0-rc.1
+      vue: ^3.0.0-0 || ^2.6.0
+    peerDependenciesMeta:
+      '@vue/composition-api':
+        optional: true
+
+  vue-sonner@1.3.2:
+    resolution: {integrity: sha512-UbZ48E9VIya3ToiRHAZUbodKute/z/M1iT8/3fU8zEbwBRE11AKuHikssv18LMk2gTTr6eMQT4qf6JoLHWuj/A==}
+
+  vue@3.5.40:
+    resolution: {integrity: sha512-+8PJ4SJXdn/cHGImF4CKdxlWHIN5Dkt7DoufRREM6h6uVCx2m7QxgcEQmmzyOK8A9mcafg7sFbJFYsdFVubTig==}
+    peerDependencies:
+      typescript: '*'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  w3c-keyname@2.2.8:
+    resolution: {integrity: sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ==}
+
   w3c-xmlserializer@4.0.0:
     resolution: {integrity: sha512-d+BFHzbiCx6zGfz0HyQ6Rg69w9k19nviJspaj4yNscGjrHu94sVP+aRm75yEbCh+r2/yR+7q6hux9LVtbuTGBw==}
     engines: {node: '>=14'}
@@ -14890,6 +15564,9 @@ packages:
   web-namespaces@2.0.1:
     resolution: {integrity: sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==}
 
+  web-worker@1.5.0:
+    resolution: {integrity: sha512-RiMReJrTAiA+mBjGONMnjVDP2u3p9R1vkcGz6gDIrOMT3oGuYwX2WRMYI9ipkphSuE5XKEhydbhNEJh4NY9mlw==}
+
   webgl-constants@1.1.1:
     resolution: {integrity: sha512-LkBXKjU5r9vAW7Gcu3T5u+5cvSvh5WwINdr0C+9jpzVB41cjQAP5ePArDtk/WHYdVj0GefCgM73BA7FlIiNtdg==}
 
@@ -15155,6 +15832,12 @@ packages:
   youch@4.1.0-beta.10:
     resolution: {integrity: sha512-rLfVLB4FgQneDr0dv1oddCVZmKjcJ6yX6mS4pU82Mq/Dt9a3cLZQ62pDBL4AUO+uVrCvtWz3ZFUL2HFAFJ/BXQ==}
 
+  yuku-analyzer@0.6.12:
+    resolution: {integrity: sha512-0zu/gwv6nKA3wm2GMjM1iczw9rbt77ijEyR5tXpPQ8AZcXIpXlll66BXOtMHgYudLn91bJx0ybhpARoJWm5/dw==}
+
+  yuku-ast@0.6.11:
+    resolution: {integrity: sha512-ZfXkFYVsDewS45+kv3WiA/qNB73CRfxFDEQwfnRMUAR4AD5zRI7PRqxmI2U3Jz/oG41GneTVW6mxDOQal0lgeA==}
+
   zod-openapi@5.4.6:
     resolution: {integrity: sha512-P2jsOOBAq/6hCwUsMCjUATZ8szkMsV5VAwZENfyxp2Hc/XPJQpVwAgevWZc65xZauCwWB9LAn7zYeiCJFAEL+A==}
     engines: {node: '>=20'}
@@ -15227,7 +15910,7 @@ snapshots:
   '@antfu/install-pkg@1.1.0':
     dependencies:
       package-manager-detector: 1.6.0
-      tinyexec: 1.0.2
+      tinyexec: 1.2.4
 
   '@antfu/ni@0.23.2': {}
 
@@ -16676,6 +17359,19 @@ snapshots:
       '@types/react': 19.1.17
       date-fns: 4.4.0
 
+  '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@base-ui/utils': 0.3.1(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@floating-ui/utils': 0.2.12
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      use-sync-external-store: 1.6.0(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      date-fns: 4.4.0
+
   '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@babel/runtime': 7.29.7
@@ -16687,20 +17383,31 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@basementstudio/shader-lab@1.4.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)':
+  '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@babel/runtime': 7.29.7
+      '@floating-ui/utils': 0.2.12
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      reselect: 5.2.0
+      use-sync-external-store: 1.6.0(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@basementstudio/shader-lab@1.4.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(three@0.178.0)':
+    dependencies:
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
       three: 0.178.0
       typescript: 5.9.3
 
   '@bcoe/v8-coverage@0.2.3': {}
 
-  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(better-call@1.3.7(zod@4.3.6))':
+  '@better-auth/api-key@1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)(better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vue@3.5.40(typescript@5.6.3)))(better-call@1.3.7(zod@4.3.6))':
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/utils': 0.4.2
-      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      better-auth: 1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vue@3.5.40(typescript@5.6.3))
       better-call: 1.3.7(zod@4.3.6)
       zod: 4.3.6
 
@@ -16855,6 +17562,100 @@ snapshots:
   '@cloudflare/workerd-windows-64@1.20260708.1':
     optional: true
 
+  '@codemirror/autocomplete@6.20.3':
+    dependencies:
+      '@codemirror/language': 6.12.4
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      '@lezer/common': 1.5.2
+
+  '@codemirror/commands@6.10.4':
+    dependencies:
+      '@codemirror/language': 6.12.4
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      '@lezer/common': 1.5.2
+
+  '@codemirror/lang-css@6.3.1':
+    dependencies:
+      '@codemirror/autocomplete': 6.20.3
+      '@codemirror/language': 6.12.4
+      '@codemirror/state': 6.7.1
+      '@lezer/common': 1.5.2
+      '@lezer/css': 1.3.4
+
+  '@codemirror/lang-html@6.4.11':
+    dependencies:
+      '@codemirror/autocomplete': 6.20.3
+      '@codemirror/lang-css': 6.3.1
+      '@codemirror/lang-javascript': 6.2.5
+      '@codemirror/language': 6.12.4
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      '@lezer/common': 1.5.2
+      '@lezer/css': 1.3.4
+      '@lezer/html': 1.3.13
+
+  '@codemirror/lang-javascript@6.2.5':
+    dependencies:
+      '@codemirror/autocomplete': 6.20.3
+      '@codemirror/language': 6.12.4
+      '@codemirror/lint': 6.9.7
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      '@lezer/common': 1.5.2
+      '@lezer/javascript': 1.5.4
+
+  '@codemirror/lang-json@6.0.2':
+    dependencies:
+      '@codemirror/language': 6.12.4
+      '@lezer/json': 1.0.3
+
+  '@codemirror/lang-xml@6.1.0':
+    dependencies:
+      '@codemirror/autocomplete': 6.20.3
+      '@codemirror/language': 6.12.4
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      '@lezer/common': 1.5.2
+      '@lezer/xml': 1.0.6
+
+  '@codemirror/lang-yaml@6.1.3':
+    dependencies:
+      '@codemirror/autocomplete': 6.20.3
+      '@codemirror/language': 6.12.4
+      '@codemirror/state': 6.7.1
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+      '@lezer/yaml': 1.0.4
+
+  '@codemirror/language@6.12.4':
+    dependencies:
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+      style-mod: 4.1.3
+
+  '@codemirror/lint@6.9.7':
+    dependencies:
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      crelt: 1.0.7
+
+  '@codemirror/state@6.7.1':
+    dependencies:
+      '@marijn/find-cluster-break': 1.0.3
+
+  '@codemirror/view@6.43.6':
+    dependencies:
+      '@codemirror/state': 6.7.1
+      crelt: 1.0.7
+      style-mod: 4.1.3
+      w3c-keyname: 2.2.8
+
   '@cspotcode/source-map-support@0.8.1':
     dependencies:
       '@jridgewell/trace-mapping': 0.3.9
@@ -16966,12 +17767,9 @@ snapshots:
       react: 19.1.0
       tslib: 2.8.1
 
-  '@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@dnd-kit/accessibility@3.1.1(react@19.2.7)':
     dependencies:
-      '@dnd-kit/accessibility': 3.1.1(react@19.1.0)
-      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
       tslib: 2.8.1
 
   '@dnd-kit/core@6.3.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
@@ -16982,18 +17780,19 @@ snapshots:
       react-dom: 19.1.1(react@19.1.0)
       tslib: 2.8.1
 
-  '@dnd-kit/modifiers@9.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)':
+  '@dnd-kit/core@6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@dnd-kit/core': 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
-      react: 19.1.0
+      '@dnd-kit/accessibility': 3.1.1(react@19.2.7)
+      '@dnd-kit/utilities': 3.2.2(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
       tslib: 2.8.1
 
-  '@dnd-kit/sortable@10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)':
+  '@dnd-kit/modifiers@9.0.0(@dnd-kit/core@6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@dnd-kit/core': 6.3.1(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@dnd-kit/utilities': 3.2.2(react@19.1.0)
-      react: 19.1.0
+      '@dnd-kit/core': 6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@dnd-kit/utilities': 3.2.2(react@19.2.7)
+      react: 19.2.7
       tslib: 2.8.1
 
   '@dnd-kit/sortable@10.0.0(@dnd-kit/core@6.3.1(react-dom@19.1.1(react@19.1.0))(react@19.1.0))(react@19.1.0)':
@@ -17003,11 +17802,23 @@ snapshots:
       react: 19.1.0
       tslib: 2.8.1
 
+  '@dnd-kit/sortable@10.0.0(@dnd-kit/core@6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@dnd-kit/core': 6.3.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@dnd-kit/utilities': 3.2.2(react@19.2.7)
+      react: 19.2.7
+      tslib: 2.8.1
+
   '@dnd-kit/utilities@3.2.2(react@19.1.0)':
     dependencies:
       react: 19.1.0
       tslib: 2.8.1
 
+  '@dnd-kit/utilities@3.2.2(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+      tslib: 2.8.1
+
   '@drizzle-team/brocli@0.11.0': {}
 
   '@earendil-works/pi-agent-core@0.80.7(ws@8.21.0)(zod@4.4.3)':
@@ -17487,7 +18298,7 @@ snapshots:
       wrap-ansi: 7.0.0
       ws: 8.21.0
     optionalDependencies:
-      expo-router: 6.0.23(c4aa449b816283cc936b8db4e0abcefc)
+      expo-router: 6.0.23(5e9643480c7769096b980fa4cfe3dd62)
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
     transitivePeerDependencies:
       - bufferutil
@@ -17495,6 +18306,81 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  '@expo/cli@54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))':
+    dependencies:
+      '@0no-co/graphql.web': 1.2.0
+      '@expo/code-signing-certificates': 0.0.6
+      '@expo/config': 12.0.13
+      '@expo/config-plugins': 54.0.4
+      '@expo/devcert': 1.2.1
+      '@expo/env': 2.0.8
+      '@expo/image-utils': 0.8.8
+      '@expo/json-file': 10.0.8
+      '@expo/metro': 54.2.0
+      '@expo/metro-config': 54.0.14(expo@54.0.33)
+      '@expo/osascript': 2.3.8
+      '@expo/package-manager': 1.9.10
+      '@expo/plist': 0.4.8
+      '@expo/prebuild-config': 54.0.8(expo@54.0.33)
+      '@expo/schema-utils': 0.1.8
+      '@expo/spawn-async': 1.7.2
+      '@expo/ws-tunnel': 1.0.6
+      '@expo/xcpretty': 4.3.2
+      '@react-native/dev-middleware': 0.81.5
+      '@urql/core': 5.2.0
+      '@urql/exchange-retry': 1.3.2(@urql/core@5.2.0)
+      accepts: 1.3.8
+      arg: 5.0.2
+      better-opn: 3.0.2
+      bplist-creator: 0.1.0
+      bplist-parser: 0.3.2
+      chalk: 4.1.2
+      ci-info: 3.9.0
+      compression: 1.8.1
+      connect: 3.7.0
+      debug: 4.4.3
+      env-editor: 0.4.2
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-server: 1.0.5
+      freeport-async: 2.0.0
+      getenv: 2.0.0
+      glob: 13.0.0
+      lan-network: 0.1.7
+      minimatch: 9.0.7
+      node-forge: 1.4.0
+      npm-package-arg: 11.0.3
+      ora: 3.4.0
+      picomatch: 3.0.2
+      pretty-bytes: 5.6.0
+      pretty-format: 29.7.0
+      progress: 2.0.3
+      prompts: 2.4.2
+      qrcode-terminal: 0.11.0
+      require-from-string: 2.0.2
+      requireg: 0.2.2
+      resolve: 1.22.11
+      resolve-from: 5.0.0
+      resolve.exports: 2.0.3
+      semver: 7.7.4
+      send: 0.19.2
+      slugify: 1.6.6
+      source-map-support: 0.5.21
+      stacktrace-parser: 0.1.11
+      structured-headers: 0.4.1
+      tar: 7.5.19
+      terminal-link: 2.1.1
+      undici: 6.27.0
+      wrap-ansi: 7.0.0
+      ws: 8.21.0
+    optionalDependencies:
+      expo-router: 6.0.23(5acfa0575d93c35972b00a5a5ad460ef)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+    transitivePeerDependencies:
+      - bufferutil
+      - graphql
+      - supports-color
+      - utf-8-validate
+
   '@expo/code-signing-certificates@0.0.6':
     dependencies:
       node-forge: 1.4.0
@@ -17552,6 +18438,13 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
+  '@expo/devtools@0.1.8(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      chalk: 4.1.2
+    optionalDependencies:
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+
   '@expo/env@2.0.8':
     dependencies:
       chalk: 4.1.2
@@ -17620,13 +18513,13 @@ snapshots:
       postcss: 8.5.10
       resolve-from: 5.0.0
     optionalDependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - bufferutil
       - supports-color
       - utf-8-validate
 
-  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       anser: 1.4.10
       expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -17636,20 +18529,20 @@ snapshots:
       stacktrace-parser: 0.1.11
       whatwg-fetch: 3.6.20
     optionalDependencies:
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optional: true
 
-  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
+  '@expo/metro-runtime@6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
     dependencies:
       anser: 1.4.10
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       pretty-format: 29.7.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
       stacktrace-parser: 0.1.11
       whatwg-fetch: 3.6.20
     optionalDependencies:
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.2.7)
 
   '@expo/metro@54.2.0':
     dependencies:
@@ -17705,7 +18598,7 @@ snapshots:
       '@expo/json-file': 10.0.8
       '@react-native/normalize-colors': 0.81.5
       debug: 4.4.3
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       resolve-from: 5.0.0
       semver: 7.7.4
       xml2js: 0.6.0
@@ -17728,6 +18621,12 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
+  '@expo/vector-icons@15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+
   '@expo/ws-tunnel@1.0.6': {}
 
   '@expo/xcpretty@4.3.2':
@@ -17746,12 +18645,6 @@ snapshots:
       '@floating-ui/core': 1.8.0
       '@floating-ui/utils': 0.2.12
 
-  '@floating-ui/react-dom@2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
-    dependencies:
-      '@floating-ui/dom': 1.8.0
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-
   '@floating-ui/react-dom@2.1.9(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@floating-ui/dom': 1.8.0
@@ -17764,28 +18657,97 @@ snapshots:
       react: 19.2.7
       react-dom: 19.1.1(react@19.2.7)
 
+  '@floating-ui/react-dom@2.1.9(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@floating-ui/dom': 1.8.0
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+
+  '@floating-ui/utils@0.2.10': {}
+
   '@floating-ui/utils@0.2.12': {}
 
+  '@floating-ui/vue@1.1.11(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      '@floating-ui/dom': 1.8.0
+      '@floating-ui/utils': 0.2.12
+      vue-demi: 0.14.10(vue@3.5.40(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
+  '@floating-ui/vue@1.1.9(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      '@floating-ui/dom': 1.8.0
+      '@floating-ui/utils': 0.2.12
+      vue-demi: 0.14.10(vue@3.5.40(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
   '@fontsource-variable/geist-mono@5.2.8': {}
 
   '@fontsource-variable/geist@5.2.9': {}
 
-  '@formatjs/intl-localematcher@0.6.2':
+  '@fuma-translate/react@1.0.2(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      tslib: 2.8.1
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+
+  '@fumadocs/api-docs@0.2.1(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@base-ui/react': 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@fuma-translate/react': 1.0.2(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@fumari/stf': 1.1.0(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@scalar/json-magic': 0.12.19
+      class-variance-authority: 0.7.1
+      cnfast: 0.0.8
+      fumadocs-core: 16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6)
+      fumadocs-ui: 16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2)
+      github-slugger: 2.0.0
+      lucide-react: 1.25.0(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      json-schema-typed: 8.0.2
+    transitivePeerDependencies:
+      - '@date-fns/tz'
+      - date-fns
+
+  '@fumadocs/tailwind@0.1.1(tailwindcss@4.3.2)':
+    optionalDependencies:
+      tailwindcss: 4.3.2
+
+  '@fumari/json-schema-ts@1.0.2(json-schema-typed@8.0.2)':
+    optionalDependencies:
+      json-schema-typed: 8.0.2
+
+  '@fumari/stf@1.1.0(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
 
   '@headless-tree/core@1.7.0': {}
 
-  '@headless-tree/react@1.7.0(@headless-tree/core@1.7.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@headless-tree/react@1.7.0(@headless-tree/core@1.7.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@headless-tree/core': 1.7.0
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
-  '@hookform/resolvers@5.4.0(react-hook-form@7.81.0(react@19.1.0))':
+  '@headlessui/tailwindcss@0.2.2(tailwindcss@4.3.2)':
     dependencies:
-      '@standard-schema/utils': 0.3.0
-      react-hook-form: 7.81.0(react@19.1.0)
+      tailwindcss: 4.3.2
+
+  '@headlessui/vue@1.7.23(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      '@tanstack/vue-virtual': 3.13.32(vue@3.5.40(typescript@6.0.3))
+      vue: 3.5.40(typescript@6.0.3)
 
   '@hookform/resolvers@5.4.0(react-hook-form@7.81.0(react@19.2.7))':
     dependencies:
@@ -17907,6 +18869,14 @@ snapshots:
   '@img/sharp-win32-x64@0.34.5':
     optional: true
 
+  '@internationalized/date@3.12.2':
+    dependencies:
+      '@swc/helpers': 0.5.23
+
+  '@internationalized/number@3.6.7':
+    dependencies:
+      '@swc/helpers': 0.5.23
+
   '@ioredis/commands@1.5.0': {}
 
   '@isaacs/fs-minipass@4.0.1':
@@ -18152,6 +19122,52 @@ snapshots:
     dependencies:
       jsbi: 4.3.2
 
+  '@lezer/common@1.5.2': {}
+
+  '@lezer/css@1.3.4':
+    dependencies:
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+
+  '@lezer/highlight@1.2.3':
+    dependencies:
+      '@lezer/common': 1.5.2
+
+  '@lezer/html@1.3.13':
+    dependencies:
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+
+  '@lezer/javascript@1.5.4':
+    dependencies:
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+
+  '@lezer/json@1.0.3':
+    dependencies:
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+
+  '@lezer/lr@1.4.10':
+    dependencies:
+      '@lezer/common': 1.5.2
+
+  '@lezer/xml@1.0.6':
+    dependencies:
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+
+  '@lezer/yaml@1.0.4':
+    dependencies:
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@lezer/lr': 1.4.10
+
   '@libsql/client@0.17.4':
     dependencies:
       '@libsql/core': 0.17.4
@@ -18210,6 +19226,8 @@ snapshots:
   '@libsql/win32-x64-msvc@0.5.29':
     optional: true
 
+  '@marijn/find-cluster-break@1.0.3': {}
+
   '@mdx-js/mdx@3.1.1':
     dependencies:
       '@types/estree': 1.0.8
@@ -18264,12 +19282,12 @@ snapshots:
     dependencies:
       state-local: 1.0.7
 
-  '@monaco-editor/react@4.7.0(monaco-editor@0.52.2)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@monaco-editor/react@4.7.0(monaco-editor@0.52.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@monaco-editor/loader': 1.7.0
       monaco-editor: 0.52.2
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
   '@mongodb-js/zstd@7.0.0':
     dependencies:
@@ -18583,10 +19601,10 @@ snapshots:
 
   '@oxlint/plugins@1.61.0': {}
 
-  '@paper-design/shaders-react@0.0.71(@types/react@19.1.17)(react@19.1.0)':
+  '@paper-design/shaders-react@0.0.71(@types/react@19.1.17)(react@19.2.7)':
     dependencies:
       '@paper-design/shaders': 0.0.71
-      react: 19.1.0
+      react: 19.2.7
     optionalDependencies:
       '@types/react': 19.1.17
 
@@ -18695,26 +19713,28 @@ snapshots:
       tslib: 2.8.1
       tsyringe: 4.10.0
 
+  '@phosphor-icons/core@2.1.1': {}
+
   '@pinojs/redact@0.4.0': {}
 
   '@pixi/colord@2.9.6': {}
 
-  '@pixi/layout@3.2.1(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)(yoga-layout@3.2.1)':
+  '@pixi/layout@3.2.1(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.2.7)(yoga-layout@3.2.1)':
     dependencies:
       pixi.js: 8.19.0
       yoga-layout: 3.2.1
     optionalDependencies:
-      '@pixi/react': 8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)
+      '@pixi/react': 8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - react
 
-  '@pixi/react@8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.1.0)':
+  '@pixi/react@8.0.5(@types/react@19.1.17)(pixi.js@8.19.0)(react@19.2.7)':
     dependencies:
-      its-fine: 2.0.0(@types/react@19.1.17)(react@19.1.0)
+      its-fine: 2.0.0(@types/react@19.1.17)(react@19.2.7)
       pixi.js: 8.19.0
-      react: 19.1.0
-      react-reconciler: 0.31.0(react@19.1.0)
+      react: 19.2.7
+      react-reconciler: 0.31.0(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
 
@@ -18757,22 +19777,22 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -18826,14 +19846,14 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -18882,21 +19902,21 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -18926,38 +19946,51 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -18967,6 +20000,7 @@ snapshots:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
+    optional: true
 
   '@radix-ui/react-compose-refs@1.1.2(@types/react@19.1.17)(react@19.2.7)':
     dependencies:
@@ -19033,67 +20067,90 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       aria-hidden: 1.2.6
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      aria-hidden: 1.2.6
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       aria-hidden: 1.2.6
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       aria-hidden: 1.2.6
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
@@ -19124,41 +20181,55 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19216,35 +20287,47 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19389,27 +20472,27 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -19469,28 +20552,28 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       aria-hidden: 1.2.6
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -19533,23 +20616,23 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.1.0)
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/rect': 1.1.2
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -19579,32 +20662,43 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19618,29 +20712,39 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19663,29 +20767,39 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19737,59 +20851,79 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19811,22 +20945,22 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -19948,6 +21082,14 @@ snapshots:
       react: 19.1.0
     optionalDependencies:
       '@types/react': 19.1.17
+    optional: true
+
+  '@radix-ui/react-slot@1.2.0(@types/react@19.1.17)(react@19.2.7)':
+    dependencies:
+      '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+    optionalDependencies:
+      '@types/react': 19.1.17
 
   '@radix-ui/react-slot@1.2.3(@types/react@19.1.17)(react@19.2.7)':
     dependencies:
@@ -20001,50 +21143,67 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
+
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@radix-ui/primitive': 1.1.5
+      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
+    optional: true
 
-  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20278,14 +21437,14 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
+      '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
   '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -20386,12 +21545,12 @@ snapshots:
     dependencies:
       react: 19.2.7
 
-  '@react-email/render@1.1.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@react-email/render@1.1.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       html-to-text: 9.0.5
       prettier: 3.8.1
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
       react-promise-suspense: 0.3.4
 
   '@react-email/render@2.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
@@ -20444,6 +21603,11 @@ snapshots:
       merge-options: 3.0.4
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
+  '@react-native-async-storage/async-storage@2.2.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))':
+    dependencies:
+      merge-options: 3.0.4
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+
   '@react-native/assets-registry@0.81.5': {}
 
   '@react-native/babel-plugin-codegen@0.81.5(@babel/core@7.29.6)':
@@ -20565,6 +21729,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
+  '@react-native/virtualized-lists@0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      invariant: 2.2.4
+      nullthrows: 1.1.1
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+    optionalDependencies:
+      '@types/react': 19.1.17
+
   '@react-navigation/bottom-tabs@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -20577,6 +21750,20 @@ snapshots:
       sf-symbols-typescript: 2.2.0
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
+    optional: true
+
+  '@react-navigation/bottom-tabs@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      color: 4.2.3
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      sf-symbols-typescript: 2.2.0
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
 
   '@react-navigation/core@7.13.7(react@19.1.0)':
     dependencies:
@@ -20589,6 +21776,19 @@ snapshots:
       react-is: 19.2.3
       use-latest-callback: 0.2.6(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
+    optional: true
+
+  '@react-navigation/core@7.13.7(react@19.2.7)':
+    dependencies:
+      '@react-navigation/routers': 7.5.3
+      escape-string-regexp: 4.0.0
+      fast-deep-equal: 3.1.3
+      nanoid: 3.3.15
+      query-string: 7.1.3
+      react: 19.2.7
+      react-is: 19.2.3
+      use-latest-callback: 0.2.6(react@19.2.7)
+      use-sync-external-store: 1.6.0(react@19.2.7)
 
   '@react-navigation/elements@2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -20599,6 +21799,17 @@ snapshots:
       react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       use-latest-callback: 0.2.6(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
+    optional: true
+
+  '@react-navigation/elements@2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      color: 4.2.3
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      use-latest-callback: 0.2.6(react@19.2.7)
+      use-sync-external-store: 1.6.0(react@19.2.7)
 
   '@react-navigation/native-stack@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -20613,6 +21824,21 @@ snapshots:
       warn-once: 0.1.1
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
+    optional: true
+
+  '@react-navigation/native-stack@7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@react-navigation/elements': 2.9.3(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      color: 4.2.3
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      sf-symbols-typescript: 2.2.0
+      warn-once: 0.1.1
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
 
   '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -20623,18 +21849,29 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       use-latest-callback: 0.2.6(react@19.1.0)
+    optional: true
+
+  '@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)':
+    dependencies:
+      '@react-navigation/core': 7.13.7(react@19.2.7)
+      escape-string-regexp: 4.0.0
+      fast-deep-equal: 3.1.3
+      nanoid: 3.3.15
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      use-latest-callback: 0.2.6(react@19.2.7)
 
   '@react-navigation/routers@7.5.3':
     dependencies:
       nanoid: 3.3.15
 
-  '@react-three/drei@10.7.7(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/react@19.1.17)(@types/three@0.185.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(three@0.178.0)':
+  '@react-three/drei@10.7.7(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0))(@types/react@19.1.17)(@types/three@0.185.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(three@0.178.0)':
     dependencies:
       '@babel/runtime': 7.29.7
       '@mediapipe/tasks-vision': 0.10.17
       '@monogrid/gainmap-js': 3.4.0(three@0.178.0)
-      '@react-three/fiber': 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)
-      '@use-gesture/react': 10.3.1(react@19.1.0)
+      '@react-three/fiber': 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0)
+      '@use-gesture/react': 10.3.1(react@19.2.7)
       camera-controls: 3.1.2(three@0.178.0)
       cross-env: 7.0.3
       detect-gpu: 5.0.70
@@ -20642,60 +21879,66 @@ snapshots:
       hls.js: 1.6.16
       maath: 0.10.8(@types/three@0.185.1)(three@0.178.0)
       meshline: 3.3.1(three@0.178.0)
-      react: 19.1.0
+      react: 19.2.7
       stats-gl: 2.4.2(@types/three@0.185.1)(three@0.178.0)
       stats.js: 0.17.0
-      suspend-react: 0.1.3(react@19.1.0)
+      suspend-react: 0.1.3(react@19.2.7)
       three: 0.178.0
       three-mesh-bvh: 0.8.3(three@0.178.0)
       three-stdlib: 2.36.1(three@0.178.0)
       troika-three-text: 0.52.4(three@0.178.0)
-      tunnel-rat: 0.1.2(@types/react@19.1.17)(react@19.1.0)
-      use-sync-external-store: 1.6.0(react@19.1.0)
+      tunnel-rat: 0.1.2(@types/react@19.1.17)(react@19.2.7)
+      use-sync-external-store: 1.6.0(react@19.2.7)
       utility-types: 3.11.0
-      zustand: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+      zustand: 5.0.14(@types/react@19.1.17)(react@19.2.7)(use-sync-external-store@1.6.0(react@19.2.7))
     optionalDependencies:
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - '@types/three'
       - immer
 
-  '@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)':
+  '@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0)':
     dependencies:
       '@babel/runtime': 7.29.7
       '@types/webxr': 0.5.24
       base64-js: 1.5.1
       buffer: 6.0.3
-      its-fine: 2.0.0(@types/react@19.1.17)(react@19.1.0)
-      react: 19.1.0
-      react-use-measure: 2.1.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      its-fine: 2.0.0(@types/react@19.1.17)(react@19.2.7)
+      react: 19.2.7
+      react-use-measure: 2.1.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       scheduler: 0.27.0
-      suspend-react: 0.1.3(react@19.1.0)
+      suspend-react: 0.1.3(react@19.2.7)
       three: 0.178.0
-      use-sync-external-store: 1.6.0(react@19.1.0)
-      zustand: 5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0))
+      use-sync-external-store: 1.6.0(react@19.2.7)
+      zustand: 5.0.14(@types/react@19.1.17)(react@19.2.7)(use-sync-external-store@1.6.0(react@19.2.7))
     optionalDependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
-      react-dom: 19.1.0(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      react-dom: 19.2.7(react@19.2.7)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - immer
 
-  '@react-three/postprocessing@3.0.4(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0))(@types/three@0.185.1)(react@19.1.0)(three@0.178.0)':
+  '@react-three/postprocessing@3.0.4(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0))(@types/three@0.185.1)(react@19.2.7)(three@0.178.0)':
     dependencies:
-      '@react-three/fiber': 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)))(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)(three@0.178.0)
+      '@react-three/fiber': 9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0)
       maath: 0.6.0(@types/three@0.185.1)(three@0.178.0)
       n8ao: 1.10.3(postprocessing@6.39.2(three@0.178.0))(three@0.178.0)
       postprocessing: 6.39.2(three@0.178.0)
-      react: 19.1.0
+      react: 19.2.7
       three: 0.178.0
     transitivePeerDependencies:
       - '@types/three'
 
+  '@replit/codemirror-css-color-picker@6.3.0(@codemirror/language@6.12.4)(@codemirror/state@6.7.1)(@codemirror/view@6.43.6)':
+    dependencies:
+      '@codemirror/language': 6.12.4
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+
   '@rolldown/binding-android-arm64@1.0.0-beta.57':
     optional: true
 
@@ -20925,6 +22168,274 @@ snapshots:
 
   '@rtsao/scc@1.1.0': {}
 
+  '@scalar/api-client-react@2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3)':
+    dependencies:
+      '@scalar/api-client': 3.13.7(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/blocks': 0.1.8(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/helpers': 0.9.2
+      '@scalar/workspace-store': 0.55.6(typescript@6.0.3)
+      react: 19.2.7
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - async-validator
+      - axios
+      - change-case
+      - drauu
+      - idb-keyval
+      - jwt-decode
+      - nprogress
+      - qrcode
+      - sortablejs
+      - supports-color
+      - tailwindcss
+      - typescript
+      - universal-cookie
+
+  '@scalar/api-client@3.13.7(tailwindcss@4.3.2)(typescript@6.0.3)':
+    dependencies:
+      '@headlessui/tailwindcss': 0.2.2(tailwindcss@4.3.2)
+      '@headlessui/vue': 1.7.23(vue@3.5.40(typescript@6.0.3))
+      '@scalar/blocks': 0.1.8(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/components': 0.27.9(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/helpers': 0.9.2
+      '@scalar/icons': 0.7.5(typescript@6.0.3)
+      '@scalar/oas-utils': 0.19.8(typescript@6.0.3)
+      '@scalar/openapi-types': 0.9.3
+      '@scalar/sidebar': 0.9.33(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/snippetz': 0.9.23
+      '@scalar/themes': 0.17.1
+      '@scalar/typebox': 0.1.3
+      '@scalar/types': 0.16.4
+      '@scalar/use-codemirror': 0.14.14(typescript@6.0.3)
+      '@scalar/use-hooks': 0.4.9(typescript@6.0.3)
+      '@scalar/use-toasts': 0.10.4(typescript@6.0.3)
+      '@scalar/workspace-store': 0.55.6(typescript@6.0.3)
+      '@vueuse/core': 13.9.0(vue@3.5.40(typescript@6.0.3))
+      '@vueuse/integrations': 13.9.0(focus-trap@7.8.0)(fuse.js@7.5.0)(vue@3.5.40(typescript@6.0.3))
+      focus-trap: 7.8.0
+      fuse.js: 7.5.0
+      js-base64: 3.8.1
+      jsonc-parser: 3.3.1
+      nanoid: 5.1.6
+      pretty-ms: 9.3.0
+      radix-vue: 1.9.17(vue@3.5.40(typescript@6.0.3))
+      set-cookie-parser: 3.1.0
+      vue: 3.5.40(typescript@6.0.3)
+      yaml: 2.9.0
+      zod: 4.4.3
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - async-validator
+      - axios
+      - change-case
+      - drauu
+      - idb-keyval
+      - jwt-decode
+      - nprogress
+      - qrcode
+      - sortablejs
+      - supports-color
+      - tailwindcss
+      - typescript
+      - universal-cookie
+
+  '@scalar/asyncapi-upgrader@0.1.4':
+    dependencies:
+      '@scalar/helpers': 0.9.2
+
+  '@scalar/blocks@0.1.8(tailwindcss@4.3.2)(typescript@6.0.3)':
+    dependencies:
+      '@scalar/components': 0.27.9(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/helpers': 0.9.2
+      '@scalar/icons': 0.7.5(typescript@6.0.3)
+      '@scalar/snippetz': 0.9.23
+      '@scalar/themes': 0.17.1
+      '@scalar/types': 0.16.4
+      '@scalar/workspace-store': 0.55.6(typescript@6.0.3)
+      '@types/har-format': 1.2.16
+      js-base64: 3.8.1
+      vue: 3.5.40(typescript@6.0.3)
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - supports-color
+      - tailwindcss
+      - typescript
+
+  '@scalar/code-highlight@0.4.3':
+    dependencies:
+      hast-util-to-text: 4.0.2
+      highlight.js: 11.11.1
+      lowlight: 3.3.0
+      rehype-external-links: 3.0.0
+      rehype-format: 5.0.1
+      rehype-parse: 9.0.1
+      rehype-raw: 7.0.0
+      rehype-sanitize: 6.0.0
+      rehype-stringify: 10.0.1
+      remark-gfm: 4.0.1
+      remark-parse: 11.0.0
+      remark-rehype: 11.1.2
+      remark-stringify: 11.0.0
+      unified: 11.0.5
+      unist-util-visit: 5.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  '@scalar/components@0.27.9(tailwindcss@4.3.2)(typescript@6.0.3)':
+    dependencies:
+      '@floating-ui/utils': 0.2.10
+      '@floating-ui/vue': 1.1.9(vue@3.5.40(typescript@6.0.3))
+      '@headlessui/tailwindcss': 0.2.2(tailwindcss@4.3.2)
+      '@headlessui/vue': 1.7.23(vue@3.5.40(typescript@6.0.3))
+      '@scalar/code-highlight': 0.4.3
+      '@scalar/helpers': 0.9.2
+      '@scalar/icons': 0.7.5(typescript@6.0.3)
+      '@scalar/themes': 0.17.1
+      '@scalar/use-hooks': 0.4.9(typescript@6.0.3)
+      '@vueuse/core': 13.9.0(vue@3.5.40(typescript@6.0.3))
+      cva: 1.0.0-beta.4(typescript@6.0.3)
+      radix-vue: 1.9.17(vue@3.5.40(typescript@6.0.3))
+      vue: 3.5.40(typescript@6.0.3)
+      vue-component-type-helpers: 3.3.7
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - supports-color
+      - tailwindcss
+      - typescript
+
+  '@scalar/helpers@0.9.2': {}
+
+  '@scalar/icons@0.7.5(typescript@6.0.3)':
+    dependencies:
+      '@phosphor-icons/core': 2.1.1
+      '@types/node': 24.10.4
+      chalk: 5.6.2
+      vue: 3.5.40(typescript@6.0.3)
+    transitivePeerDependencies:
+      - typescript
+
+  '@scalar/json-magic@0.12.19':
+    dependencies:
+      '@scalar/helpers': 0.9.2
+      pathe: 2.0.3
+      yaml: 2.9.0
+
+  '@scalar/oas-utils@0.19.8(typescript@6.0.3)':
+    dependencies:
+      '@scalar/helpers': 0.9.2
+      '@scalar/themes': 0.17.1
+      '@scalar/types': 0.16.4
+      '@scalar/workspace-store': 0.55.6(typescript@6.0.3)
+      flatted: 3.4.2
+      vue: 3.5.40(typescript@6.0.3)
+      yaml: 2.9.0
+    transitivePeerDependencies:
+      - typescript
+
+  '@scalar/openapi-types@0.9.3': {}
+
+  '@scalar/openapi-upgrader@0.2.11':
+    dependencies:
+      '@scalar/openapi-types': 0.9.3
+
+  '@scalar/schemas@0.7.4':
+    dependencies:
+      '@scalar/helpers': 0.9.2
+      '@scalar/validation': 0.6.2
+
+  '@scalar/sidebar@0.9.33(tailwindcss@4.3.2)(typescript@6.0.3)':
+    dependencies:
+      '@scalar/components': 0.27.9(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/helpers': 0.9.2
+      '@scalar/icons': 0.7.5(typescript@6.0.3)
+      '@scalar/themes': 0.17.1
+      '@scalar/use-hooks': 0.4.9(typescript@6.0.3)
+      '@scalar/workspace-store': 0.55.6(typescript@6.0.3)
+      vue: 3.5.40(typescript@6.0.3)
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - supports-color
+      - tailwindcss
+      - typescript
+
+  '@scalar/snippetz@0.9.23':
+    dependencies:
+      '@scalar/helpers': 0.9.2
+      '@scalar/types': 0.16.4
+      js-base64: 3.8.1
+      stringify-object: 6.0.0
+
+  '@scalar/themes@0.17.1':
+    dependencies:
+      nanoid: 5.1.6
+
+  '@scalar/typebox@0.1.3': {}
+
+  '@scalar/types@0.16.4':
+    dependencies:
+      '@scalar/helpers': 0.9.2
+      nanoid: 5.1.6
+      type-fest: 5.8.0
+      zod: 4.4.3
+
+  '@scalar/use-codemirror@0.14.14(typescript@6.0.3)':
+    dependencies:
+      '@codemirror/autocomplete': 6.20.3
+      '@codemirror/commands': 6.10.4
+      '@codemirror/lang-css': 6.3.1
+      '@codemirror/lang-html': 6.4.11
+      '@codemirror/lang-json': 6.0.2
+      '@codemirror/lang-xml': 6.1.0
+      '@codemirror/lang-yaml': 6.1.3
+      '@codemirror/language': 6.12.4
+      '@codemirror/lint': 6.9.7
+      '@codemirror/state': 6.7.1
+      '@codemirror/view': 6.43.6
+      '@lezer/common': 1.5.2
+      '@lezer/highlight': 1.2.3
+      '@replit/codemirror-css-color-picker': 6.3.0(@codemirror/language@6.12.4)(@codemirror/state@6.7.1)(@codemirror/view@6.43.6)
+      vue: 3.5.40(typescript@6.0.3)
+    transitivePeerDependencies:
+      - typescript
+
+  '@scalar/use-hooks@0.4.9(typescript@6.0.3)':
+    dependencies:
+      '@scalar/use-toasts': 0.10.4(typescript@6.0.3)
+      '@scalar/validation': 0.6.2
+      '@vueuse/core': 13.9.0(vue@3.5.40(typescript@6.0.3))
+      cva: 1.0.0-beta.4(typescript@6.0.3)
+      tailwind-merge: 3.5.0
+      vue: 3.5.40(typescript@6.0.3)
+    transitivePeerDependencies:
+      - typescript
+
+  '@scalar/use-toasts@0.10.4(typescript@6.0.3)':
+    dependencies:
+      vue: 3.5.40(typescript@6.0.3)
+      vue-sonner: 1.3.2
+    transitivePeerDependencies:
+      - typescript
+
+  '@scalar/validation@0.6.2': {}
+
+  '@scalar/workspace-store@0.55.6(typescript@6.0.3)':
+    dependencies:
+      '@scalar/asyncapi-upgrader': 0.1.4
+      '@scalar/helpers': 0.9.2
+      '@scalar/json-magic': 0.12.19
+      '@scalar/openapi-upgrader': 0.2.11
+      '@scalar/schemas': 0.7.4
+      '@scalar/snippetz': 0.9.23
+      '@scalar/typebox': 0.1.3
+      '@scalar/types': 0.16.4
+      '@scalar/validation': 0.6.2
+      js-base64: 3.8.1
+      type-fest: 5.8.0
+      vue: 3.5.40(typescript@6.0.3)
+      yaml: 2.9.0
+    transitivePeerDependencies:
+      - typescript
+
   '@selderee/plugin-htmlparser2@0.11.0':
     dependencies:
       domhandler: 5.0.3
@@ -20935,47 +22446,40 @@ snapshots:
       '@types/react': 19.1.17
       react: 19.2.7
 
-  '@shikijs/core@3.23.0':
+  '@shikijs/core@4.3.1':
     dependencies:
-      '@shikijs/types': 3.23.0
+      '@shikijs/primitive': 4.3.1
+      '@shikijs/types': 4.3.1
       '@shikijs/vscode-textmate': 10.0.2
       '@types/hast': 3.0.5
       hast-util-to-html: 9.0.5
 
-  '@shikijs/engine-javascript@3.23.0':
+  '@shikijs/engine-javascript@4.3.1':
     dependencies:
-      '@shikijs/types': 3.23.0
+      '@shikijs/types': 4.3.1
       '@shikijs/vscode-textmate': 10.0.2
       oniguruma-to-es: 4.3.6
 
-  '@shikijs/engine-oniguruma@3.23.0':
+  '@shikijs/engine-oniguruma@4.3.1':
     dependencies:
-      '@shikijs/types': 3.23.0
+      '@shikijs/types': 4.3.1
       '@shikijs/vscode-textmate': 10.0.2
 
-  '@shikijs/langs@3.23.0':
+  '@shikijs/langs@4.3.1':
     dependencies:
-      '@shikijs/types': 3.23.0
+      '@shikijs/types': 4.3.1
 
-  '@shikijs/rehype@3.23.0':
+  '@shikijs/primitive@4.3.1':
     dependencies:
-      '@shikijs/types': 3.23.0
+      '@shikijs/types': 4.3.1
+      '@shikijs/vscode-textmate': 10.0.2
       '@types/hast': 3.0.5
-      hast-util-to-string: 3.0.1
-      shiki: 3.23.0
-      unified: 11.0.5
-      unist-util-visit: 5.1.0
-
-  '@shikijs/themes@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
 
-  '@shikijs/transformers@3.23.0':
+  '@shikijs/themes@4.3.1':
     dependencies:
-      '@shikijs/core': 3.23.0
-      '@shikijs/types': 3.23.0
+      '@shikijs/types': 4.3.1
 
-  '@shikijs/types@3.23.0':
+  '@shikijs/types@4.3.1':
     dependencies:
       '@shikijs/vscode-textmate': 10.0.2
       '@types/hast': 3.0.5
@@ -21095,6 +22599,10 @@ snapshots:
 
   '@standard-schema/utils@0.3.0': {}
 
+  '@swc/helpers@0.5.23':
+    dependencies:
+      tslib: 2.8.1
+
   '@t3-oss/env-core@0.13.11(typescript@6.0.3)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)':
     optionalDependencies:
       typescript: 6.0.3
@@ -21255,11 +22763,11 @@ snapshots:
 
   '@tanstack/query-devtools@5.101.2': {}
 
-  '@tanstack/react-query-devtools@5.100.11(@tanstack/react-query@5.100.11(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-query-devtools@5.100.11(@tanstack/react-query@5.100.11(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@tanstack/query-devtools': 5.100.11
-      '@tanstack/react-query': 5.100.11(react@19.1.0)
-      react: 19.1.0
+      '@tanstack/react-query': 5.100.11(react@19.2.7)
+      react: 19.2.7
 
   '@tanstack/react-query-devtools@5.101.2(@tanstack/react-query@5.101.2(react@19.1.0))(react@19.1.0)':
     dependencies:
@@ -21267,10 +22775,10 @@ snapshots:
       '@tanstack/react-query': 5.101.2(react@19.1.0)
       react: 19.1.0
 
-  '@tanstack/react-query@5.100.11(react@19.1.0)':
+  '@tanstack/react-query@5.100.11(react@19.2.7)':
     dependencies:
       '@tanstack/query-core': 5.100.11
-      react: 19.1.0
+      react: 19.2.7
 
   '@tanstack/react-query@5.101.2(react@19.1.0)':
     dependencies:
@@ -21288,14 +22796,14 @@ snapshots:
     transitivePeerDependencies:
       - csstype
 
-  '@tanstack/react-router-ssr-query@1.167.0(@tanstack/query-core@5.100.11)(@tanstack/react-query@5.100.11(react@19.1.0))(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/router-core@1.171.14)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-router-ssr-query@1.167.0(@tanstack/query-core@5.100.11)(@tanstack/react-query@5.100.11(react@19.2.7))(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@tanstack/router-core@1.171.14)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@tanstack/query-core': 5.100.11
-      '@tanstack/react-query': 5.100.11(react@19.1.0)
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-query': 5.100.11(react@19.2.7)
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-ssr-query-core': 1.169.0(@tanstack/query-core@5.100.11)(@tanstack/router-core@1.171.14)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - '@tanstack/router-core'
 
@@ -21310,37 +22818,37 @@ snapshots:
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
 
-  '@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@tanstack/history': 1.162.0
-      '@tanstack/react-store': 0.9.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-store': 0.9.3(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-core': 1.171.5
       isbot: 5.2.0
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
-  '@tanstack/react-start-client@1.168.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-start-client@1.168.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-core': 1.171.5
       '@tanstack/start-client-core': 1.170.2
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
-  '@tanstack/react-start-rsc@0.1.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tanstack/react-start-rsc@0.1.10(esbuild@0.28.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start-server': 1.167.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@tanstack/react-start-server': 1.167.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-core': 1.171.5
       '@tanstack/router-utils': 1.162.1
       '@tanstack/start-client-core': 1.170.2
       '@tanstack/start-fn-stubs': 1.162.0
-      '@tanstack/start-plugin-core': 1.171.3(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/start-plugin-core': 1.171.3(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@tanstack/start-server-core': 1.169.2
       '@tanstack/start-storage-context': 1.167.7
       pathe: 2.0.3
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rsbuild/core'
@@ -21355,31 +22863,31 @@ snapshots:
       - vite-plugin-solid
       - webpack
 
-  '@tanstack/react-start-server@1.167.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-start-server@1.167.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@tanstack/history': 1.162.0
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-core': 1.171.5
       '@tanstack/start-client-core': 1.170.2
       '@tanstack/start-server-core': 1.169.2
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - crossws
 
-  '@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start-client': 1.168.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start-rsc': 0.1.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
-      '@tanstack/react-start-server': 1.167.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@tanstack/react-start-client': 1.168.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@tanstack/react-start-rsc': 0.1.10(esbuild@0.28.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/react-start-server': 1.167.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-utils': 1.162.1
       '@tanstack/start-client-core': 1.170.2
-      '@tanstack/start-plugin-core': 1.171.3(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/start-plugin-core': 1.171.3(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@tanstack/start-server-core': 1.169.2
       pathe: 2.0.3
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
@@ -21396,25 +22904,25 @@ snapshots:
       - vite-plugin-solid
       - webpack
 
-  '@tanstack/react-store@0.9.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-store@0.9.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@tanstack/store': 0.9.3
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.1.1(react@19.1.0)
       use-sync-external-store: 1.6.0(react@19.1.0)
 
-  '@tanstack/react-store@0.9.3(react-dom@19.1.1(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-store@0.9.3(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@tanstack/store': 0.9.3
-      react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
-      use-sync-external-store: 1.6.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      use-sync-external-store: 1.6.0(react@19.2.7)
 
-  '@tanstack/react-table@8.21.3(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@tanstack/react-table@8.21.3(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@tanstack/table-core': 8.21.3
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
   '@tanstack/router-core@1.163.3':
     dependencies:
@@ -21496,7 +23004,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@tanstack/router-plugin@1.168.10(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tanstack/router-plugin@1.168.10(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/core': 7.29.6
       '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.6)
@@ -21512,7 +23020,7 @@ snapshots:
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       zod: 4.4.3
     optionalDependencies:
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - '@farmfe/core'
@@ -21566,7 +23074,7 @@ snapshots:
 
   '@tanstack/start-fn-stubs@1.162.0': {}
 
-  '@tanstack/start-plugin-core@1.171.3(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
+  '@tanstack/start-plugin-core@1.171.3(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
       '@babel/code-frame': 7.27.1
       '@babel/core': 7.29.6
@@ -21574,7 +23082,7 @@ snapshots:
       '@rolldown/pluginutils': 1.0.1
       '@tanstack/router-core': 1.171.5
       '@tanstack/router-generator': 1.167.9
-      '@tanstack/router-plugin': 1.168.10(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/router-plugin': 1.168.10(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@tanstack/router-utils': 1.162.1
       '@tanstack/start-client-core': 1.170.2
       '@tanstack/start-server-core': 1.169.2
@@ -21627,13 +23135,20 @@ snapshots:
 
   '@tanstack/table-core@8.21.3': {}
 
+  '@tanstack/virtual-core@3.17.4': {}
+
   '@tanstack/virtual-file-routes@1.161.4': {}
 
   '@tanstack/virtual-file-routes@1.162.0': {}
 
-  '@tanstack/zod-adapter@1.167.0(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(zod@4.3.6)':
+  '@tanstack/vue-virtual@3.13.32(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      '@tanstack/virtual-core': 3.17.4
+      vue: 3.5.40(typescript@6.0.3)
+
+  '@tanstack/zod-adapter@1.167.0(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(zod@4.3.6)':
     dependencies:
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       zod: 4.3.6
 
   '@testing-library/dom@10.4.1':
@@ -21647,14 +23162,14 @@ snapshots:
       picocolors: 1.1.1
       pretty-format: 27.5.1
 
-  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react-test-renderer@19.1.0(react@19.2.7))(react@19.2.7)':
     dependencies:
       jest-matcher-utils: 30.2.0
       picocolors: 1.1.1
       pretty-format: 30.2.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
-      react-test-renderer: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-test-renderer: 19.1.0(react@19.2.7)
       redent: 3.0.0
     optionalDependencies:
       jest: 29.7.0(@types/node@20.19.43)
@@ -21672,25 +23187,25 @@ snapshots:
     optionalDependencies:
       jest: 29.7.0(@types/node@24.10.4)
 
-  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@26.1.1))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react-native@13.3.3(jest@29.7.0(@types/node@26.1.1))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react-test-renderer@19.1.0(react@19.2.7))(react@19.2.7)':
     dependencies:
       jest-matcher-utils: 30.2.0
       picocolors: 1.1.1
       pretty-format: 30.2.0
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
-      react-test-renderer: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-test-renderer: 19.1.0(react@19.2.7)
       redent: 3.0.0
     optionalDependencies:
       jest: 29.7.0(@types/node@26.1.1)
     optional: true
 
-  '@testing-library/react@16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)':
+  '@testing-library/react@16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@babel/runtime': 7.29.7
       '@testing-library/dom': 10.4.1
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -21921,6 +23436,8 @@ snapshots:
     dependencies:
       '@types/node': 24.10.4
 
+  '@types/har-format@1.2.16': {}
+
   '@types/hast@3.0.5':
     dependencies:
       '@types/unist': 3.0.3
@@ -22036,6 +23553,10 @@ snapshots:
 
   '@types/unist@3.0.3': {}
 
+  '@types/web-bluetooth@0.0.20': {}
+
+  '@types/web-bluetooth@0.0.21': {}
+
   '@types/webxr@0.5.24': {}
 
   '@types/ws@8.18.1':
@@ -22250,10 +23771,10 @@ snapshots:
 
   '@use-gesture/core@10.3.1': {}
 
-  '@use-gesture/react@10.3.1(react@19.1.0)':
+  '@use-gesture/react@10.3.1(react@19.2.7)':
     dependencies:
       '@use-gesture/core': 10.3.1
-      react: 19.1.0
+      react: 19.2.7
 
   '@vitejs/plugin-react@4.7.0(vite@7.3.5(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
     dependencies:
@@ -22860,221 +24381,316 @@ snapshots:
       - utf-8-validate
       - yaml
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 26.1.1
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 26.1.1
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 26.1.1
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 26.1.1
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      '@types/chai': 5.2.3
+      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
+      es-module-lexer: 1.7.0
+      obug: 2.1.3
+      pixelmatch: 7.2.0
+      pngjs: 7.0.0
+      sirv: 3.0.2
+      std-env: 4.2.0
+      tinybench: 2.9.0
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
+      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      ws: 8.21.0
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+      '@types/node': 26.1.1
+      jsdom: 26.1.0
+    transitivePeerDependencies:
+      - '@arethetypeswrong/core'
+      - '@tsdown/css'
+      - '@tsdown/exe'
+      - '@vitejs/devtools'
+      - bufferutil
+      - esbuild
+      - jiti
+      - less
+      - publint
+      - sass
+      - sass-embedded
+      - stylus
+      - sugarss
+      - terser
+      - tsx
+      - typescript
+      - unplugin-unused
+      - unrun
+      - utf-8-validate
+      - yaml
+
+  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.24':
+    optional: true
+
+  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.24':
+    optional: true
+
+  '@vue/compiler-core@3.5.40':
     dependencies:
-      '@standard-schema/spec': 1.1.0
-      '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.25.12)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      es-module-lexer: 1.7.0
-      obug: 2.1.3
-      pixelmatch: 7.2.0
-      pngjs: 7.0.0
-      sirv: 3.0.2
-      std-env: 4.2.0
-      tinybench: 2.9.0
-      tinyexec: 1.2.4
-      tinyglobby: 0.2.17
-      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      ws: 8.21.0
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 26.1.1
-      jsdom: 26.1.0
-    transitivePeerDependencies:
-      - '@arethetypeswrong/core'
-      - '@tsdown/css'
-      - '@tsdown/exe'
-      - '@vitejs/devtools'
-      - bufferutil
-      - esbuild
-      - jiti
-      - less
-      - publint
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - terser
-      - tsx
-      - typescript
-      - unplugin-unused
-      - unrun
-      - utf-8-validate
-      - yaml
+      '@babel/parser': 7.29.7
+      '@vue/shared': 3.5.40
+      entities: 7.0.1
+      estree-walker: 2.0.2
+      source-map-js: 1.2.1
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@vue/compiler-dom@3.5.40':
     dependencies:
-      '@standard-schema/spec': 1.1.0
-      '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.6.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      es-module-lexer: 1.7.0
-      obug: 2.1.3
-      pixelmatch: 7.2.0
-      pngjs: 7.0.0
-      sirv: 3.0.2
-      std-env: 4.2.0
-      tinybench: 2.9.0
-      tinyexec: 1.2.4
-      tinyglobby: 0.2.17
-      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      ws: 8.21.0
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 26.1.1
-      jsdom: 26.1.0
-    transitivePeerDependencies:
-      - '@arethetypeswrong/core'
-      - '@tsdown/css'
-      - '@tsdown/exe'
-      - '@vitejs/devtools'
-      - bufferutil
-      - esbuild
-      - jiti
-      - less
-      - publint
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - terser
-      - tsx
-      - typescript
-      - unplugin-unused
-      - unrun
-      - utf-8-validate
-      - yaml
+      '@vue/compiler-core': 3.5.40
+      '@vue/shared': 3.5.40
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@vue/compiler-sfc@3.5.40':
     dependencies:
-      '@standard-schema/spec': 1.1.0
-      '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.8.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      es-module-lexer: 1.7.0
-      obug: 2.1.3
-      pixelmatch: 7.2.0
-      pngjs: 7.0.0
-      sirv: 3.0.2
-      std-env: 4.2.0
-      tinybench: 2.9.0
-      tinyexec: 1.2.4
-      tinyglobby: 0.2.17
-      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      ws: 8.21.0
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 26.1.1
-      jsdom: 26.1.0
-    transitivePeerDependencies:
-      - '@arethetypeswrong/core'
-      - '@tsdown/css'
-      - '@tsdown/exe'
-      - '@vitejs/devtools'
-      - bufferutil
-      - esbuild
-      - jiti
-      - less
-      - publint
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - terser
-      - tsx
-      - typescript
-      - unplugin-unused
-      - unrun
-      - utf-8-validate
-      - yaml
+      '@babel/parser': 7.29.7
+      '@vue/compiler-core': 3.5.40
+      '@vue/compiler-dom': 3.5.40
+      '@vue/compiler-ssr': 3.5.40
+      '@vue/shared': 3.5.40
+      estree-walker: 2.0.2
+      magic-string: 0.30.21
+      postcss: 8.5.20
+      source-map-js: 1.2.1
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@vue/compiler-ssr@3.5.40':
     dependencies:
-      '@standard-schema/spec': 1.1.0
-      '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@5.9.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      es-module-lexer: 1.7.0
-      obug: 2.1.3
-      pixelmatch: 7.2.0
-      pngjs: 7.0.0
-      sirv: 3.0.2
-      std-env: 4.2.0
-      tinybench: 2.9.0
-      tinyexec: 1.2.4
-      tinyglobby: 0.2.17
-      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      ws: 8.21.0
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 26.1.1
-      jsdom: 26.1.0
+      '@vue/compiler-dom': 3.5.40
+      '@vue/shared': 3.5.40
+
+  '@vue/reactivity@3.5.40':
+    dependencies:
+      '@vue/shared': 3.5.40
+
+  '@vue/runtime-core@3.5.40':
+    dependencies:
+      '@vue/reactivity': 3.5.40
+      '@vue/shared': 3.5.40
+
+  '@vue/runtime-dom@3.5.40':
+    dependencies:
+      '@vue/reactivity': 3.5.40
+      '@vue/runtime-core': 3.5.40
+      '@vue/shared': 3.5.40
+      csstype: 3.2.3
+
+  '@vue/server-renderer@3.5.40':
+    dependencies:
+      '@vue/compiler-ssr': 3.5.40
+      '@vue/runtime-dom': 3.5.40
+      '@vue/shared': 3.5.40
+
+  '@vue/shared@3.5.40': {}
+
+  '@vueuse/core@10.11.1(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      '@types/web-bluetooth': 0.0.20
+      '@vueuse/metadata': 10.11.1
+      '@vueuse/shared': 10.11.1(vue@3.5.40(typescript@6.0.3))
+      vue-demi: 0.14.10(vue@3.5.40(typescript@6.0.3))
     transitivePeerDependencies:
-      - '@arethetypeswrong/core'
-      - '@tsdown/css'
-      - '@tsdown/exe'
-      - '@vitejs/devtools'
-      - bufferutil
-      - esbuild
-      - jiti
-      - less
-      - publint
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - terser
-      - tsx
-      - typescript
-      - unplugin-unused
-      - unrun
-      - utf-8-validate
-      - yaml
+      - '@vue/composition-api'
+      - vue
 
-  '@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)':
+  '@vueuse/core@13.9.0(vue@3.5.40(typescript@6.0.3))':
     dependencies:
-      '@standard-schema/spec': 1.1.0
-      '@types/chai': 5.2.3
-      '@voidzero-dev/vite-plus-core': 0.1.24(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3)
-      es-module-lexer: 1.7.0
-      obug: 2.1.3
-      pixelmatch: 7.2.0
-      pngjs: 7.0.0
-      sirv: 3.0.2
-      std-env: 4.2.0
-      tinybench: 2.9.0
-      tinyexec: 1.2.4
-      tinyglobby: 0.2.17
-      vite: 7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
-      ws: 8.21.0
+      '@types/web-bluetooth': 0.0.21
+      '@vueuse/metadata': 13.9.0
+      '@vueuse/shared': 13.9.0(vue@3.5.40(typescript@6.0.3))
+      vue: 3.5.40(typescript@6.0.3)
+
+  '@vueuse/integrations@13.9.0(focus-trap@7.8.0)(fuse.js@7.5.0)(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      '@vueuse/core': 13.9.0(vue@3.5.40(typescript@6.0.3))
+      '@vueuse/shared': 13.9.0(vue@3.5.40(typescript@6.0.3))
+      vue: 3.5.40(typescript@6.0.3)
     optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-      '@types/node': 26.1.1
-      jsdom: 26.1.0
-    transitivePeerDependencies:
-      - '@arethetypeswrong/core'
-      - '@tsdown/css'
-      - '@tsdown/exe'
-      - '@vitejs/devtools'
-      - bufferutil
-      - esbuild
-      - jiti
-      - less
-      - publint
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - terser
-      - tsx
-      - typescript
-      - unplugin-unused
-      - unrun
-      - utf-8-validate
-      - yaml
+      focus-trap: 7.8.0
+      fuse.js: 7.5.0
 
-  '@voidzero-dev/vite-plus-win32-arm64-msvc@0.1.24':
-    optional: true
+  '@vueuse/metadata@10.11.1': {}
 
-  '@voidzero-dev/vite-plus-win32-x64-msvc@0.1.24':
-    optional: true
+  '@vueuse/metadata@13.9.0': {}
+
+  '@vueuse/shared@10.11.1(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      vue-demi: 0.14.10(vue@3.5.40(typescript@6.0.3))
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+      - vue
+
+  '@vueuse/shared@13.9.0(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      vue: 3.5.40(typescript@6.0.3)
 
   '@webgpu/types@0.1.71': {}
 
@@ -23095,19 +24711,56 @@ snapshots:
     transitivePeerDependencies:
       - typescript
 
-  '@workos/authkit-tanstack-react-start@0.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(@workos-inc/node@8.13.0)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(typescript@6.0.3)':
+  '@workos/authkit-tanstack-react-start@0.8.2(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@tanstack/react-start@1.168.10(esbuild@0.28.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)))(@workos-inc/node@8.13.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(typescript@6.0.3)':
     dependencies:
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@tanstack/react-start': 1.168.10(esbuild@0.28.1)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@tanstack/react-start': 1.168.10(esbuild@0.28.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       '@workos/authkit-session': 0.5.2(@workos-inc/node@8.13.0)(typescript@6.0.3)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - '@workos-inc/node'
       - typescript
 
   '@xmldom/xmldom@0.8.13': {}
 
+  '@yuku-analyzer/binding-darwin-arm64@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-darwin-x64@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-freebsd-x64@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-linux-arm-gnu@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-linux-arm-musl@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-linux-arm64-gnu@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-linux-arm64-musl@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-linux-x64-gnu@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-linux-x64-musl@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-win32-arm64@0.6.12':
+    optional: true
+
+  '@yuku-analyzer/binding-win32-x64@0.6.12':
+    optional: true
+
+  '@yuku-toolchain/types@0.6.11': {}
+
+  '@yuku-toolchain/types@0.6.8': {}
+
   abab@2.0.6: {}
 
   abort-controller@3.0.0:
@@ -23524,7 +25177,7 @@ snapshots:
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
@@ -23556,7 +25209,7 @@ snapshots:
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
@@ -23615,7 +25268,7 @@ snapshots:
 
   before-after-hook@4.0.0: {}
 
-  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  better-auth@1.6.23(@opentelemetry/api@1.9.0)(drizzle-kit@1.0.0-rc.3)(mysql2@3.16.0)(pg@8.22.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(vitest@3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(vue@3.5.40(typescript@5.6.3)):
     dependencies:
       '@better-auth/core': 1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0)
       '@better-auth/drizzle-adapter': 1.6.23(@better-auth/core@1.6.23(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.1)(@opentelemetry/api@1.9.0)(better-call@1.3.7(zod@4.3.6))(jose@6.1.3)(kysely@0.28.17)(nanostores@1.4.0))(@better-auth/utils@0.4.2)
@@ -23639,8 +25292,9 @@ snapshots:
       mysql2: 3.16.0
       pg: 8.22.0
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
       vitest: 3.2.7(@types/debug@4.1.12)(@types/node@26.1.1)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
+      vue: 3.5.40(typescript@5.6.3)
     transitivePeerDependencies:
       - '@cloudflare/workers-types'
       - '@opentelemetry/api'
@@ -23987,6 +25641,8 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
+  cnfast@0.0.8: {}
+
   co@4.6.0: {}
 
   code-block-writer@13.0.3: {}
@@ -24094,6 +25750,8 @@ snapshots:
 
   content-type@2.0.0: {}
 
+  convert-hrtime@5.0.0: {}
+
   convert-source-map@2.0.0: {}
 
   convert-to-spaces@2.0.1: {}
@@ -24172,6 +25830,8 @@ snapshots:
       - ts-node
     optional: true
 
+  crelt@1.0.7: {}
+
   cross-env@7.0.3:
     dependencies:
       cross-spawn: 7.0.6
@@ -24210,8 +25870,6 @@ snapshots:
 
   css-what@6.2.2: {}
 
-  cssesc@3.0.0: {}
-
   cssom@0.3.8: {}
 
   cssom@0.5.0: {}
@@ -24227,6 +25885,12 @@ snapshots:
 
   csstype@3.2.3: {}
 
+  cva@1.0.0-beta.4(typescript@6.0.3):
+    dependencies:
+      clsx: 2.1.1
+    optionalDependencies:
+      typescript: 6.0.3
+
   cytoscape-cose-bilkent@4.1.0(cytoscape@3.34.0):
     dependencies:
       cose-base: 1.0.3
@@ -24676,11 +26340,11 @@ snapshots:
 
   ee-first@1.1.1: {}
 
-  effect-query@1.0.0(@tanstack/react-query@5.100.11(react@19.1.0))(effect@4.0.0-beta.84)(react@19.1.0):
+  effect-query@1.0.0(@tanstack/react-query@5.100.11(react@19.2.7))(effect@4.0.0-beta.84)(react@19.2.7):
     dependencies:
-      '@tanstack/react-query': 5.100.11(react@19.1.0)
+      '@tanstack/react-query': 5.100.11(react@19.2.7)
       effect: 4.0.0-beta.84
-      react: 19.1.0
+      react: 19.2.7
 
   effect@4.0.0-beta.84:
     dependencies:
@@ -25319,6 +26983,8 @@ snapshots:
       '@types/estree-jsx': 1.0.5
       '@types/unist': 3.0.3
 
+  estree-walker@2.0.2: {}
+
   estree-walker@3.0.3:
     dependencies:
       '@types/estree': 1.0.8
@@ -25374,6 +27040,16 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      '@expo/image-utils': 0.8.8
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+    transitivePeerDependencies:
+      - supports-color
+
   expo-constants@18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)):
     dependencies:
       '@expo/config': 12.0.13
@@ -25383,9 +27059,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  expo-constants@18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)):
+    dependencies:
+      '@expo/config': 12.0.13
+      '@expo/env': 2.0.8
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+    transitivePeerDependencies:
+      - supports-color
+
   expo-dev-client@6.0.20(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-dev-launcher: 6.0.20(expo@54.0.33)
       expo-dev-menu: 7.0.18(expo@54.0.33)
       expo-dev-menu-interface: 2.0.0(expo@54.0.33)
@@ -25397,7 +27082,7 @@ snapshots:
   expo-dev-launcher@6.0.20(expo@54.0.33):
     dependencies:
       ajv: 8.18.0
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-dev-menu: 7.0.18(expo@54.0.33)
       expo-manifests: 1.0.10(expo@54.0.33)
     transitivePeerDependencies:
@@ -25405,11 +27090,11 @@ snapshots:
 
   expo-dev-menu-interface@2.0.0(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
 
   expo-dev-menu@7.0.18(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-dev-menu-interface: 2.0.0(expo@54.0.33)
 
   expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)):
@@ -25417,6 +27102,11 @@ snapshots:
       expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
+  expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)):
+    dependencies:
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+
   expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -25424,6 +27114,13 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
+  expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      fontfaceobserver: 2.3.0
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+
   expo-json-utils@0.15.0: {}
 
   expo-keep-awake@15.0.8(expo@54.0.33)(react@19.1.0):
@@ -25431,6 +27128,11 @@ snapshots:
       expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react: 19.1.0
 
+  expo-keep-awake@15.0.8(expo@54.0.33)(react@19.2.7):
+    dependencies:
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+
   expo-linking@8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
@@ -25441,16 +27143,26 @@ snapshots:
       - expo
       - supports-color
 
-  expo-localization@17.0.8(expo@54.0.33)(react@19.1.0):
+  expo-linking@8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
     dependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      invariant: 2.2.4
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+    transitivePeerDependencies:
+      - expo
+      - supports-color
+
+  expo-localization@17.0.8(expo@54.0.33)(react@19.2.7):
+    dependencies:
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
       rtl-detect: 1.1.2
 
   expo-manifests@1.0.10(expo@54.0.33):
     dependencies:
       '@expo/config': 12.0.13
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-json-utils: 0.15.0
     transitivePeerDependencies:
       - supports-color
@@ -25513,42 +27225,48 @@ snapshots:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
-  expo-router@6.0.23(c4aa449b816283cc936b8db4e0abcefc):
+  expo-modules-core@3.0.29(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      invariant: 2.2.4
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+
+  expo-router@6.0.23(5acfa0575d93c35972b00a5a5ad460ef):
+    dependencies:
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       '@expo/schema-utils': 0.1.8
-      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       client-only: 0.0.1
       debug: 4.4.3
       escape-string-regexp: 4.0.0
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))
-      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       expo-server: 1.0.5
       fast-deep-equal: 3.1.3
       invariant: 2.2.4
       nanoid: 3.3.15
       query-string: 7.1.3
-      react: 19.1.0
+      react: 19.2.7
       react-fast-compare: 3.2.2
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
       semver: 7.6.3
       server-only: 0.0.1
       sf-symbols-typescript: 2.2.0
       shallowequal: 1.1.0
-      use-latest-callback: 0.2.6(react@19.1.0)
-      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      use-latest-callback: 0.2.6(react@19.2.7)
+      vaul: 1.1.2(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
     optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
-      react-dom: 19.1.0(react@19.1.0)
-      react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@20.19.43))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react-test-renderer@19.1.0(react@19.2.7))(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
+      react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
       - '@types/react'
@@ -25556,12 +27274,12 @@ snapshots:
       - supports-color
     optional: true
 
-  expo-router@6.0.23(dfbe19aec38065222a79f30aa387d0a8):
+  expo-router@6.0.23(5e9643480c7769096b980fa4cfe3dd62):
     dependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.1(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@expo/schema-utils': 0.1.8
       '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -25587,44 +27305,87 @@ snapshots:
       sf-symbols-typescript: 2.2.0
       shallowequal: 1.1.0
       use-latest-callback: 0.2.6(react@19.1.0)
-      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
     optionalDependencies:
-      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@26.1.1))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
-      react-dom: 19.1.1(react@19.1.0)
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@24.10.4))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
       react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@react-native-masked-view/masked-view'
       - '@types/react'
       - '@types/react-dom'
       - supports-color
+    optional: true
+
+  expo-router@6.0.23(e86ffc3016efab95188bfcde024e6c23):
+    dependencies:
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@expo/schema-utils': 0.1.8
+      '@radix-ui/react-slot': 1.2.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@react-navigation/bottom-tabs': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@react-navigation/native': 7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@react-navigation/native-stack': 7.9.0(@react-navigation/native@7.1.26(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      client-only: 0.0.1
+      debug: 4.4.3
+      escape-string-regexp: 4.0.0
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      expo-linking: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-server: 1.0.5
+      fast-deep-equal: 3.1.3
+      invariant: 2.2.4
+      nanoid: 3.3.15
+      query-string: 7.1.3
+      react: 19.2.7
+      react-fast-compare: 3.2.2
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native-safe-area-context: 5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native-screens: 4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      semver: 7.6.3
+      server-only: 0.0.1
+      sf-symbols-typescript: 2.2.0
+      shallowequal: 1.1.0
+      use-latest-callback: 0.2.6(react@19.2.7)
+      vaul: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+    optionalDependencies:
+      '@testing-library/react-native': 13.3.3(jest@29.7.0(@types/node@26.1.1))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react-test-renderer@19.1.0(react@19.2.7))(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
+      react-native-reanimated: 4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+    transitivePeerDependencies:
+      - '@react-native-masked-view/masked-view'
+      - '@types/react'
+      - '@types/react-dom'
+      - supports-color
 
   expo-server@1.0.5: {}
 
   expo-splash-screen@31.0.13(expo@54.0.33):
     dependencies:
       '@expo/prebuild-config': 54.0.8(expo@54.0.33)
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - supports-color
 
-  expo-status-bar@3.0.9(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  expo-status-bar@3.0.9(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
     dependencies:
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
-      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
 
-  expo-system-ui@6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)):
+  expo-system-ui@6.0.9(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)):
     dependencies:
       '@react-native/normalize-colors': 0.81.5
       debug: 4.4.3
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
     transitivePeerDependencies:
       - supports-color
 
   expo-updates-interface@2.0.0(expo@54.0.33):
     dependencies:
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
 
   expo@54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
@@ -25652,7 +27413,42 @@ snapshots:
       react-refresh: 0.14.2
       whatwg-url-without-unicode: 8.0.0-3
     optionalDependencies:
-      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.1.0(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+    transitivePeerDependencies:
+      - '@babel/core'
+      - bufferutil
+      - expo-router
+      - graphql
+      - supports-color
+      - utf-8-validate
+
+  expo@54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      '@babel/runtime': 7.28.4
+      '@expo/cli': 54.0.23(expo-router@6.0.23)(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      '@expo/config': 12.0.13
+      '@expo/config-plugins': 54.0.4
+      '@expo/devtools': 0.1.8(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@expo/fingerprint': 0.15.4
+      '@expo/metro': 54.2.0
+      '@expo/metro-config': 54.0.14(expo@54.0.33)
+      '@expo/vector-icons': 15.0.3(expo-font@14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      '@ungap/structured-clone': 1.3.0
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.14.2)
+      expo-asset: 12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-constants: 18.0.13(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      expo-file-system: 19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))
+      expo-font: 14.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo-keep-awake: 15.0.8(expo@54.0.33)(react@19.2.7)
+      expo-modules-autolinking: 3.0.24
+      expo-modules-core: 3.0.29(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      pretty-format: 29.7.0
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-refresh: 0.14.2
+      whatwg-url-without-unicode: 8.0.0-3
+    optionalDependencies:
+      '@expo/metro-runtime': 6.1.2(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - '@babel/core'
       - bufferutil
@@ -25797,6 +27593,10 @@ snapshots:
       pirates: 3.0.2
       vlq: 0.2.3
 
+  focus-trap@7.8.0:
+    dependencies:
+      tabbable: 6.5.0
+
   fontfaceobserver@2.3.0: {}
 
   for-each@0.3.5:
@@ -25813,14 +27613,14 @@ snapshots:
 
   fractional-indexing-jittered@1.0.0: {}
 
-  framer-motion@12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  framer-motion@12.42.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       motion-dom: 12.42.2
       motion-utils: 12.39.0
       tslib: 2.8.1
     optionalDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
   freeport-async@2.0.0: {}
 
@@ -25836,98 +27636,140 @@ snapshots:
   fsevents@2.3.3:
     optional: true
 
-  fumadocs-core@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6):
     dependencies:
-      '@formatjs/intl-localematcher': 0.6.2
       '@orama/orama': 3.1.18
-      '@shikijs/rehype': 3.23.0
-      '@shikijs/transformers': 3.23.0
+      estree-util-value-to-estree: 3.5.0
       github-slugger: 2.0.0
       hast-util-to-estree: 3.1.3
       hast-util-to-jsx-runtime: 2.3.6
-      image-size: 2.0.2
-      negotiator: 1.0.0
-      npm-to-yarn: 3.0.1
-      path-to-regexp: 8.4.2
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.1.0)
+      mdast-util-mdx: 3.0.0
+      mdast-util-to-markdown: 2.1.2
       remark: 15.0.1
       remark-gfm: 4.0.1
       remark-rehype: 11.1.2
       scroll-into-view-if-needed: 3.1.0
-      shiki: 3.23.0
+      shiki: 4.3.1
+      tinyglobby: 0.2.17
+      unified: 11.0.5
       unist-util-visit: 5.1.0
+      vfile: 6.0.3
+      yaml: 2.9.0
     optionalDependencies:
-      '@tanstack/react-router': 1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@mdx-js/mdx': 3.1.1
+      '@tanstack/react-router': 1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@types/estree-jsx': 1.0.5
+      '@types/hast': 3.0.5
+      '@types/mdast': 4.0.4
       '@types/react': 19.1.17
-      lucide-react: 0.555.0(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      lucide-react: 0.555.0(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      zod: 4.3.6
     transitivePeerDependencies:
       - supports-color
 
-  fumadocs-mdx@12.0.1(fumadocs-core@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(react@19.1.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
+  fumadocs-mdx@15.2.0(@types/mdast@4.0.4)(@types/mdx@2.0.14)(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react@19.2.7)(rolldown@1.0.1)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@mdx-js/mdx': 3.1.1
       '@standard-schema/spec': 1.1.0
-      chokidar: 4.0.3
-      esbuild: 0.25.12
+      chokidar: 5.0.0
+      esbuild: 0.28.1
       estree-util-value-to-estree: 3.5.0
-      fumadocs-core: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      js-yaml: 4.2.0
-      lru-cache: 11.2.4
-      mdast-util-to-markdown: 2.1.2
+      fumadocs-core: 16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6)
+      github-slugger: 2.0.0
+      magic-string: 0.30.21
+      mdast-util-mdx: 3.0.0
       picocolors: 1.1.1
-      remark-mdx: 3.1.1
-      remark-parse: 11.0.0
-      tinyexec: 1.0.2
-      tinyglobby: 0.2.15
+      picomatch: 4.0.5
+      tinyexec: 1.2.4
+      tinyglobby: 0.2.17
       unified: 11.0.5
+      unist-util-remove-position: 5.0.0
       unist-util-visit: 5.1.0
-      zod: 4.3.6
+      vfile: 6.0.3
+      yaml: 2.9.0
+      yuku-analyzer: 0.6.12
+      zod: 4.4.3
     optionalDependencies:
-      react: 19.1.0
+      '@types/mdast': 4.0.4
+      '@types/mdx': 2.0.14
+      '@types/react': 19.1.17
+      react: 19.2.7
+      rolldown: 1.0.1
       vite: 7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)
     transitivePeerDependencies:
       - supports-color
 
-  fumadocs-ui@15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(tailwindcss@4.3.2):
+  fumadocs-openapi@11.2.2(@scalar/api-client-react@2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3))(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@fuma-translate/react': 1.0.2(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@fumadocs/api-docs': 0.2.1(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@fumari/json-schema-ts': 1.0.2(json-schema-typed@8.0.2)
+      '@fumari/stf': 1.1.0(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@scalar/json-magic': 0.12.19
+      chokidar: 5.0.0
       class-variance-authority: 0.7.1
-      fumadocs-core: 15.8.2(@tanstack/react-router@1.170.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(@types/react@19.1.17)(lucide-react@0.555.0(react@19.1.0))(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      lodash.merge: 4.6.2
-      next-themes: 0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      postcss-selector-parser: 7.1.4
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      react-medium-image-zoom: 5.4.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      cnfast: 0.0.8
+      fumadocs-core: 16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6)
+      fumadocs-ui: 16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2)
+      github-slugger: 2.0.0
+      hast-util-to-jsx-runtime: 2.3.6
+      lucide-react: 1.25.0(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      remark: 15.0.1
+      remark-rehype: 11.1.2
+      shiki: 4.3.1
+      yaml: 2.9.0
+    optionalDependencies:
+      '@scalar/api-client-react': 2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@types/react': 19.1.17
+      json-schema-typed: 8.0.2
+    transitivePeerDependencies:
+      - '@date-fns/tz'
+      - date-fns
+      - supports-color
+
+  fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2):
+    dependencies:
+      '@fuma-translate/react': 1.0.2(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@fumadocs/tailwind': 0.1.1(tailwindcss@4.3.2)
+      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      class-variance-authority: 0.7.1
+      cnfast: 0.0.8
+      fumadocs-core: 16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6)
+      lucide-react: 1.25.0(react@19.2.7)
+      motion: 12.42.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      next-themes: 0.4.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
+      rehype-raw: 7.0.0
       scroll-into-view-if-needed: 3.1.0
-      tailwind-merge: 3.6.0
+      shiki: 4.3.1
+      unist-util-visit: 5.1.0
     optionalDependencies:
+      '@types/mdx': 2.0.14
       '@types/react': 19.1.17
-      tailwindcss: 4.3.2
     transitivePeerDependencies:
-      - '@mixedbread/sdk'
-      - '@oramacloud/client'
-      - '@tanstack/react-router'
+      - '@emotion/is-prop-valid'
       - '@types/react-dom'
-      - algoliasearch
-      - lucide-react
-      - react-router
-      - supports-color
-      - waku
+      - tailwindcss
 
   function-bind@1.1.2: {}
 
+  function-timeout@1.0.2: {}
+
   function.prototype.name@1.1.8:
     dependencies:
       call-bind: 1.0.8
@@ -25939,6 +27781,8 @@ snapshots:
 
   functions-have-names@1.2.3: {}
 
+  fuse.js@7.5.0: {}
+
   generate-function@2.3.1:
     dependencies:
       is-property: 1.0.2
@@ -25966,6 +27810,8 @@ snapshots:
 
   get-nonce@1.0.1: {}
 
+  get-own-enumerable-keys@1.0.0: {}
+
   get-package-type@0.1.0: {}
 
   get-proto@1.0.1:
@@ -26102,6 +27948,30 @@ snapshots:
     dependencies:
       function-bind: 1.1.2
 
+  hast-util-embedded@3.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-is-element: 3.0.0
+
+  hast-util-format@1.1.0:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-embedded: 3.0.0
+      hast-util-minify-whitespace: 1.0.1
+      hast-util-phrasing: 3.0.1
+      hast-util-whitespace: 3.0.0
+      html-whitespace-sensitive-tag-names: 3.0.1
+      unist-util-visit-parents: 6.0.2
+
+  hast-util-from-html@2.0.3:
+    dependencies:
+      '@types/hast': 3.0.5
+      devlop: 1.1.0
+      hast-util-from-parse5: 8.0.3
+      parse5: 7.3.0
+      vfile: 6.0.3
+      vfile-message: 4.0.3
+
   hast-util-from-parse5@8.0.3:
     dependencies:
       '@types/hast': 3.0.5
@@ -26113,10 +27983,38 @@ snapshots:
       vfile-location: 5.0.3
       web-namespaces: 2.0.1
 
+  hast-util-has-property@3.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+
+  hast-util-is-body-ok-link@3.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+
+  hast-util-is-element@3.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+
+  hast-util-minify-whitespace@1.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-embedded: 3.0.0
+      hast-util-is-element: 3.0.0
+      hast-util-whitespace: 3.0.0
+      unist-util-is: 6.0.1
+
   hast-util-parse-selector@4.0.0:
     dependencies:
       '@types/hast': 3.0.5
 
+  hast-util-phrasing@3.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-embedded: 3.0.0
+      hast-util-has-property: 3.0.0
+      hast-util-is-body-ok-link: 3.0.1
+      hast-util-is-element: 3.0.0
+
   hast-util-raw@9.1.0:
     dependencies:
       '@types/hast': 3.0.5
@@ -26204,9 +28102,12 @@ snapshots:
       web-namespaces: 2.0.1
       zwitch: 2.0.4
 
-  hast-util-to-string@3.0.1:
+  hast-util-to-text@4.0.2:
     dependencies:
       '@types/hast': 3.0.5
+      '@types/unist': 3.0.3
+      hast-util-is-element: 3.0.0
+      unist-util-find-after: 5.0.0
 
   hast-util-whitespace@3.0.0:
     dependencies:
@@ -26238,6 +28139,8 @@ snapshots:
     dependencies:
       hermes-estree: 0.36.0
 
+  highlight.js@11.11.1: {}
+
   hls.js@1.6.16: {}
 
   hookable@6.1.1: {}
@@ -26268,6 +28171,8 @@ snapshots:
 
   html-void-elements@3.0.0: {}
 
+  html-whitespace-sensitive-tag-names@3.0.1: {}
+
   html5parser@3.0.0: {}
 
   htmlparser2@10.1.0:
@@ -26331,6 +28236,10 @@ snapshots:
     dependencies:
       safer-buffer: 2.1.2
 
+  identifier-regex@1.1.0:
+    dependencies:
+      reserved-identifiers: 1.2.0
+
   ieee754@1.2.1: {}
 
   ignore@5.3.2: {}
@@ -26341,8 +28250,6 @@ snapshots:
     dependencies:
       queue: 6.0.2
 
-  image-size@2.0.2: {}
-
   immediate@3.0.6: {}
 
   import-fresh@3.3.1:
@@ -26463,6 +28370,8 @@ snapshots:
     dependencies:
       uint8array-extras: 1.5.0
 
+  is-absolute-url@4.0.1: {}
+
   is-alphabetical@2.0.1: {}
 
   is-alphanumerical@2.0.1:
@@ -26558,6 +28467,11 @@ snapshots:
 
   is-hexadecimal@2.0.1: {}
 
+  is-identifier@1.1.0:
+    dependencies:
+      identifier-regex: 1.1.0
+      super-regex: 1.1.0
+
   is-in-ci@2.0.0: {}
 
   is-map@2.0.3: {}
@@ -26571,6 +28485,8 @@ snapshots:
 
   is-number@7.0.0: {}
 
+  is-obj@3.0.0: {}
+
   is-plain-obj@2.1.0: {}
 
   is-plain-obj@4.1.0: {}
@@ -26588,6 +28504,8 @@ snapshots:
       has-tostringtag: 1.0.2
       hasown: 2.0.2
 
+  is-regexp@3.1.0: {}
+
   is-set@2.0.3: {}
 
   is-shared-array-buffer@1.0.4:
@@ -26692,10 +28610,10 @@ snapshots:
       has-symbols: 1.1.0
       set-function-name: 2.0.2
 
-  its-fine@2.0.0(@types/react@19.1.17)(react@19.1.0):
+  its-fine@2.0.0(@types/react@19.1.17)(react@19.2.7):
     dependencies:
       '@types/react-reconciler': 0.28.9(@types/react@19.1.17)
-      react: 19.1.0
+      react: 19.2.7
     transitivePeerDependencies:
       - '@types/react'
 
@@ -27574,6 +29492,12 @@ snapshots:
 
   loupe@3.2.1: {}
 
+  lowlight@3.3.0:
+    dependencies:
+      '@types/hast': 3.0.5
+      devlop: 1.1.0
+      highlight.js: 11.11.1
+
   lru-cache@10.4.3: {}
 
   lru-cache@11.2.4: {}
@@ -27590,11 +29514,11 @@ snapshots:
     dependencies:
       react: 19.1.0
 
-  lucide-react@0.555.0(react@19.1.0):
+  lucide-react@0.555.0(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
-  lucide-react@0.555.0(react@19.2.7):
+  lucide-react@1.25.0(react@19.2.7):
     dependencies:
       react: 19.2.7
 
@@ -27616,6 +29540,12 @@ snapshots:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
 
+  make-asynchronous@1.1.0:
+    dependencies:
+      p-event: 6.0.1
+      type-fest: 4.41.0
+      web-worker: 1.5.0
+
   make-dir@2.1.0:
     dependencies:
       pify: 4.0.1
@@ -28379,13 +30309,13 @@ snapshots:
 
   motion-utils@12.39.0: {}
 
-  motion@12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  motion@12.42.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      framer-motion: 12.42.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      framer-motion: 12.42.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       tslib: 2.8.1
     optionalDependencies:
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
   mrmime@2.0.1: {}
 
@@ -28440,6 +30370,8 @@ snapshots:
 
   nanoid@3.3.15: {}
 
+  nanoid@3.3.16: {}
+
   nanoid@5.1.6: {}
 
   nanostores@1.4.0: {}
@@ -28455,20 +30387,18 @@ snapshots:
 
   negotiator@0.6.4: {}
 
-  negotiator@1.0.0: {}
-
   nested-error-stacks@2.0.1: {}
 
-  next-themes@0.4.6(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-
   next-themes@0.4.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       react: 19.2.7
       react-dom: 19.1.1(react@19.2.7)
 
+  next-themes@0.4.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+
   nitro-codegen@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       chalk: 5.6.2
@@ -28533,8 +30463,6 @@ snapshots:
     dependencies:
       path-key: 3.1.1
 
-  npm-to-yarn@3.0.1: {}
-
   nth-check@2.1.1:
     dependencies:
       boolbase: 1.0.0
@@ -28549,7 +30477,7 @@ snapshots:
       consola: 3.4.2
       pathe: 2.0.3
       pkg-types: 2.3.0
-      tinyexec: 1.0.2
+      tinyexec: 1.2.4
 
   nypm@0.6.6:
     dependencies:
@@ -29286,6 +31214,10 @@ snapshots:
       oxlint-tsgolint: 0.23.0
       vite-plus: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
 
+  p-event@6.0.1:
+    dependencies:
+      p-timeout: 6.1.4
+
   p-limit@2.3.0:
     dependencies:
       p-try: 2.2.0
@@ -29302,6 +31234,8 @@ snapshots:
     dependencies:
       p-limit: 3.1.0
 
+  p-timeout@6.1.4: {}
+
   p-try@2.2.0: {}
 
   package-manager-detector@0.2.11:
@@ -29335,6 +31269,8 @@ snapshots:
       json-parse-even-better-errors: 2.3.1
       lines-and-columns: 1.2.4
 
+  parse-ms@4.0.0: {}
+
   parse-png@2.1.0:
     dependencies:
       pngjs: 3.4.0
@@ -29391,8 +31327,6 @@ snapshots:
 
   path-to-regexp@6.3.0: {}
 
-  path-to-regexp@8.4.2: {}
-
   pathe@2.0.3: {}
 
   pathval@2.0.1: {}
@@ -29566,11 +31500,6 @@ snapshots:
       tsx: 4.21.0
       yaml: 2.8.3
 
-  postcss-selector-parser@7.1.4:
-    dependencies:
-      cssesc: 3.0.0
-      util-deprecate: 1.0.2
-
   postcss@8.5.10:
     dependencies:
       nanoid: 3.3.15
@@ -29583,6 +31512,12 @@ snapshots:
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
+  postcss@8.5.20:
+    dependencies:
+      nanoid: 3.3.16
+      picocolors: 1.1.1
+      source-map-js: 1.2.1
+
   postgres-array@2.0.0: {}
 
   postgres-array@3.0.4: {}
@@ -29665,6 +31600,10 @@ snapshots:
       ansi-styles: 5.2.0
       react-is: 18.3.1
 
+  pretty-ms@9.3.0:
+    dependencies:
+      parse-ms: 4.0.0
+
   prismjs@1.30.0: {}
 
   proc-log@4.2.0: {}
@@ -29826,6 +31765,23 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
+  radix-vue@1.9.17(vue@3.5.40(typescript@6.0.3)):
+    dependencies:
+      '@floating-ui/dom': 1.8.0
+      '@floating-ui/vue': 1.1.11(vue@3.5.40(typescript@6.0.3))
+      '@internationalized/date': 3.12.2
+      '@internationalized/number': 3.6.7
+      '@tanstack/vue-virtual': 3.13.32(vue@3.5.40(typescript@6.0.3))
+      '@vueuse/core': 10.11.1(vue@3.5.40(typescript@6.0.3))
+      '@vueuse/shared': 10.11.1(vue@3.5.40(typescript@6.0.3))
+      aria-hidden: 1.2.6
+      defu: 6.1.7
+      fast-deep-equal: 3.1.3
+      nanoid: 5.1.6
+      vue: 3.5.40(typescript@6.0.3)
+    transitivePeerDependencies:
+      - '@vue/composition-api'
+
   range-parser@1.2.1: {}
 
   rc9@2.1.2:
@@ -29855,11 +31811,6 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
-  react-dom@19.1.0(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      scheduler: 0.26.0
-
   react-dom@19.1.1(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -29870,11 +31821,22 @@ snapshots:
       react: 19.2.7
       scheduler: 0.26.0
 
-  react-easy-crop@6.2.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  react-dom@19.2.7(react@19.1.0):
     dependencies:
-      normalize-wheel: 1.0.1
       react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      scheduler: 0.27.0
+    optional: true
+
+  react-dom@19.2.7(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      scheduler: 0.27.0
+
+  react-easy-crop@6.2.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
+    dependencies:
+      normalize-wheel: 1.0.1
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
 
   react-email@6.7.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
@@ -29912,10 +31874,11 @@ snapshots:
   react-freeze@1.0.4(react@19.1.0):
     dependencies:
       react: 19.1.0
+    optional: true
 
-  react-hook-form@7.81.0(react@19.1.0):
+  react-freeze@1.0.4(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
   react-hook-form@7.81.0(react@19.2.7):
     dependencies:
@@ -29929,21 +31892,27 @@ snapshots:
 
   react-is@19.2.3: {}
 
-  react-medium-image-zoom@5.4.8(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-
   react-native-is-edge-to-edge@1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+    optional: true
+
+  react-native-is-edge-to-edge@1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
 
   react-native-nitro-modules@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
 
+  react-native-nitro-modules@0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+
   react-native-reanimated@4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/core': 7.29.6
@@ -29952,11 +31921,27 @@ snapshots:
       react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       react-native-worklets: 0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       semver: 7.7.2
+    optional: true
+
+  react-native-reanimated@4.1.6(@babel/core@7.29.6)(react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      '@babel/core': 7.29.6
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      react-native-worklets: 0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      semver: 7.7.2
 
   react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+    optional: true
+
+  react-native-safe-area-context@5.6.2(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
 
   react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
     dependencies:
@@ -29965,13 +31950,22 @@ snapshots:
       react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
       react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       warn-once: 0.1.1
+    optional: true
+
+  react-native-screens@4.16.0(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-freeze: 1.0.4(react@19.2.7)
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      react-native-is-edge-to-edge: 1.2.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      warn-once: 0.1.1
 
-  react-native-svg@15.12.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
+  react-native-svg@15.12.1(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
     dependencies:
       css-select: 5.2.2
       css-tree: 1.1.3
-      react: 19.1.0
-      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0)
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
       warn-once: 0.1.1
 
   react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0):
@@ -29992,6 +31986,26 @@ snapshots:
       semver: 7.7.3
     transitivePeerDependencies:
       - supports-color
+    optional: true
+
+  react-native-worklets@0.7.1(@babel/core@7.29.6)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7):
+    dependencies:
+      '@babel/core': 7.29.6
+      '@babel/plugin-transform-arrow-functions': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-class-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-classes': 7.28.4(@babel/core@7.29.6)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-optional-chaining': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-shorthand-properties': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-template-literals': 7.27.1(@babel/core@7.29.6)
+      '@babel/plugin-transform-unicode-regex': 7.27.1(@babel/core@7.29.6)
+      '@babel/preset-typescript': 7.27.1(@babel/core@7.29.6)
+      convert-source-map: 2.0.0
+      react: 19.2.7
+      react-native: 0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)
+      semver: 7.7.3
+    transitivePeerDependencies:
+      - supports-color
 
   react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0):
     dependencies:
@@ -30040,18 +32054,65 @@ snapshots:
       - supports-color
       - utf-8-validate
 
+  react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7):
+    dependencies:
+      '@jest/create-cache-key-function': 29.7.0
+      '@react-native/assets-registry': 0.81.5
+      '@react-native/codegen': 0.81.5(@babel/core@7.29.6)
+      '@react-native/community-cli-plugin': 0.81.5
+      '@react-native/gradle-plugin': 0.81.5
+      '@react-native/js-polyfills': 0.81.5
+      '@react-native/normalize-colors': 0.81.5
+      '@react-native/virtualized-lists': 0.81.5(@types/react@19.1.17)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      abort-controller: 3.0.0
+      anser: 1.4.10
+      ansi-regex: 5.0.1
+      babel-jest: 29.7.0(@babel/core@7.29.6)
+      babel-plugin-syntax-hermes-parser: 0.29.1
+      base64-js: 1.5.1
+      commander: 12.1.0
+      flow-enums-runtime: 0.0.6
+      glob: 7.2.3
+      invariant: 2.2.4
+      jest-environment-node: 29.7.0
+      memoize-one: 5.2.1
+      metro-runtime: 0.83.3
+      metro-source-map: 0.83.3
+      nullthrows: 1.1.1
+      pretty-format: 29.7.0
+      promise: 8.3.0
+      react: 19.2.7
+      react-devtools-core: 6.1.5
+      react-refresh: 0.14.2
+      regenerator-runtime: 0.13.11
+      scheduler: 0.26.0
+      semver: 7.7.3
+      stacktrace-parser: 0.1.11
+      whatwg-fetch: 3.6.20
+      ws: 6.2.4
+      yargs: 17.7.2
+    optionalDependencies:
+      '@types/react': 19.1.17
+    transitivePeerDependencies:
+      - '@babel/core'
+      - '@react-native-community/cli'
+      - '@react-native/metro-config'
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
   react-promise-suspense@0.3.4:
     dependencies:
       fast-deep-equal: 2.0.1
 
-  react-reconciler@0.31.0(react@19.1.0):
+  react-reconciler@0.31.0(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
       scheduler: 0.25.0
 
-  react-reconciler@0.32.0(react@19.1.0):
+  react-reconciler@0.32.0(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
       scheduler: 0.26.0
 
   react-reconciler@0.33.0(react@19.2.7):
@@ -30108,21 +32169,21 @@ snapshots:
       react: 19.2.7
       react-dom: 19.1.1(react@19.2.7)
 
-  react-smooth@4.0.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  react-smooth@4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       fast-equals: 5.4.1
       prop-types: 15.8.1
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-      react-transition-group: 4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+      react-transition-group: 4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
 
-  react-smooth@4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  react-smooth@4.0.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       fast-equals: 5.4.1
       prop-types: 15.8.1
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-      react-transition-group: 4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
+      react-transition-group: 4.4.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
 
   react-style-singleton@2.2.3(@types/react@19.1.17)(react@19.1.0):
     dependencies:
@@ -30146,29 +32207,36 @@ snapshots:
       react-is: 19.2.3
       scheduler: 0.26.0
 
-  react-transition-group@4.4.5(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  react-test-renderer@19.1.0(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-is: 19.2.3
+      scheduler: 0.26.0
+    optional: true
+
+  react-transition-group@4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       '@babel/runtime': 7.29.7
       dom-helpers: 5.2.1
       loose-envify: 1.4.0
       prop-types: 15.8.1
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
 
-  react-transition-group@4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  react-transition-group@4.4.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       '@babel/runtime': 7.29.7
       dom-helpers: 5.2.1
       loose-envify: 1.4.0
       prop-types: 15.8.1
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
 
-  react-use-measure@2.1.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  react-use-measure@2.1.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
     optionalDependencies:
-      react-dom: 19.1.0(react@19.1.0)
+      react-dom: 19.2.7(react@19.2.7)
 
   react@19.1.0: {}
 
@@ -30221,28 +32289,28 @@ snapshots:
     dependencies:
       decimal.js-light: 2.5.1
 
-  recharts@2.15.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  recharts@2.15.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
     dependencies:
       clsx: 2.1.1
       eventemitter3: 4.0.7
       lodash: 4.18.0
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
       react-is: 18.3.1
-      react-smooth: 4.0.4(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      react-smooth: 4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
       recharts-scale: 0.4.5
       tiny-invariant: 1.3.3
       victory-vendor: 36.9.2
 
-  recharts@2.15.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  recharts@2.15.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       clsx: 2.1.1
       eventemitter3: 4.0.7
       lodash: 4.18.0
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
       react-is: 18.3.1
-      react-smooth: 4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react-smooth: 4.0.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       recharts-scale: 0.4.5
       tiny-invariant: 1.3.3
       victory-vendor: 36.9.2
@@ -30348,10 +32416,30 @@ snapshots:
     dependencies:
       jsesc: 3.1.0
 
+  rehype-external-links@3.0.0:
+    dependencies:
+      '@types/hast': 3.0.5
+      '@ungap/structured-clone': 1.3.0
+      hast-util-is-element: 3.0.0
+      is-absolute-url: 4.0.1
+      space-separated-tokens: 2.0.2
+      unist-util-visit: 5.1.0
+
+  rehype-format@5.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-format: 1.1.0
+
   rehype-harden@1.1.8:
     dependencies:
       unist-util-visit: 5.1.0
 
+  rehype-parse@9.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-from-html: 2.0.3
+      unified: 11.0.5
+
   rehype-raw@7.0.0:
     dependencies:
       '@types/hast': 3.0.5
@@ -30371,6 +32459,12 @@ snapshots:
       '@types/hast': 3.0.5
       hast-util-sanitize: 5.0.2
 
+  rehype-stringify@10.0.1:
+    dependencies:
+      '@types/hast': 3.0.5
+      hast-util-to-html: 9.0.5
+      unified: 11.0.5
+
   remark-gfm@4.0.1:
     dependencies:
       '@types/mdast': 4.0.4
@@ -30437,13 +32531,15 @@ snapshots:
 
   reselect@5.2.0: {}
 
-  resend@4.8.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  resend@4.8.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@react-email/render': 1.1.2(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
+      '@react-email/render': 1.1.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - react
       - react-dom
 
+  reserved-identifiers@1.2.0: {}
+
   resolve-cwd@3.0.0:
     dependencies:
       resolve-from: 5.0.0
@@ -30740,6 +32836,8 @@ snapshots:
 
   server-only@0.0.1: {}
 
+  set-cookie-parser@3.1.0: {}
+
   set-cookie-parser@3.1.2: {}
 
   set-function-length@1.2.2:
@@ -30811,14 +32909,14 @@ snapshots:
 
   shell-quote@1.10.0: {}
 
-  shiki@3.23.0:
+  shiki@4.3.1:
     dependencies:
-      '@shikijs/core': 3.23.0
-      '@shikijs/engine-javascript': 3.23.0
-      '@shikijs/engine-oniguruma': 3.23.0
-      '@shikijs/langs': 3.23.0
-      '@shikijs/themes': 3.23.0
-      '@shikijs/types': 3.23.0
+      '@shikijs/core': 4.3.1
+      '@shikijs/engine-javascript': 4.3.1
+      '@shikijs/engine-oniguruma': 4.3.1
+      '@shikijs/langs': 4.3.1
+      '@shikijs/themes': 4.3.1
+      '@shikijs/types': 4.3.1
       '@shikijs/vscode-textmate': 10.0.2
       '@types/hast': 3.0.5
 
@@ -30948,11 +33046,6 @@ snapshots:
     dependencies:
       atomic-sleep: 1.0.0
 
-  sonner@2.0.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
-    dependencies:
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
-
   sonner@2.0.7(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -30963,6 +33056,11 @@ snapshots:
       react: 19.2.7
       react-dom: 19.1.1(react@19.2.7)
 
+  sonner@2.0.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
+    dependencies:
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.13:
@@ -31054,15 +33152,15 @@ snapshots:
 
   stream-buffers@2.2.0: {}
 
-  streamdown@2.5.0(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  streamdown@2.5.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       clsx: 2.1.1
       hast-util-to-jsx-runtime: 2.3.6
       html-url-attributes: 3.0.1
       marked: 17.0.6
       mermaid: 11.16.0
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
       rehype-harden: 1.1.8
       rehype-raw: 7.0.0
       rehype-sanitize: 6.0.0
@@ -31163,6 +33261,13 @@ snapshots:
       character-entities-html4: 2.1.0
       character-entities-legacy: 3.0.0
 
+  stringify-object@6.0.0:
+    dependencies:
+      get-own-enumerable-keys: 1.0.0
+      is-identifier: 1.1.0
+      is-obj: 3.0.0
+      is-regexp: 3.1.0
+
   strip-ansi@5.2.0:
     dependencies:
       ansi-regex: 4.1.1
@@ -31215,6 +33320,8 @@ snapshots:
 
   stubborn-utils@1.0.2: {}
 
+  style-mod@4.1.3: {}
+
   style-to-js@1.1.21:
     dependencies:
       style-to-object: 1.0.14
@@ -31235,6 +33342,12 @@ snapshots:
       tinyglobby: 0.2.15
       ts-interface-checker: 0.1.13
 
+  super-regex@1.1.0:
+    dependencies:
+      function-timeout: 1.0.2
+      make-asynchronous: 1.1.0
+      time-span: 5.1.0
+
   supports-color@10.2.2: {}
 
   supports-color@5.5.0:
@@ -31256,9 +33369,9 @@ snapshots:
 
   supports-preserve-symlinks-flag@1.0.0: {}
 
-  suspend-react@0.1.3(react@19.1.0):
+  suspend-react@0.1.3(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
   symbol-tree@3.2.4: {}
 
@@ -31266,8 +33379,12 @@ snapshots:
     dependencies:
       '@pkgr/core': 0.2.9
 
+  tabbable@6.5.0: {}
+
   tagged-tag@1.0.0: {}
 
+  tailwind-merge@3.5.0: {}
+
   tailwind-merge@3.6.0: {}
 
   tailwindcss@4.3.0: {}
@@ -31365,6 +33482,10 @@ snapshots:
 
   throat@5.0.0: {}
 
+  time-span@5.1.0:
+    dependencies:
+      convert-hrtime: 5.0.0
+
   tiny-invariant@1.3.3: {}
 
   tiny-lru@11.4.7: {}
@@ -31602,9 +33723,9 @@ snapshots:
       safe-buffer: 5.2.1
     optional: true
 
-  tunnel-rat@0.1.2(@types/react@19.1.17)(react@19.1.0):
+  tunnel-rat@0.1.2(@types/react@19.1.17)(react@19.2.7):
     dependencies:
-      zustand: 4.5.7(@types/react@19.1.17)(react@19.1.0)
+      zustand: 4.5.7(@types/react@19.1.17)(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - immer
@@ -31637,6 +33758,8 @@ snapshots:
 
   type-fest@0.7.1: {}
 
+  type-fest@4.41.0: {}
+
   type-fest@5.8.0:
     dependencies:
       tagged-tag: 1.0.0
@@ -31811,6 +33934,11 @@ snapshots:
     dependencies:
       crypto-random-string: 2.0.0
 
+  unist-util-find-after@5.0.0:
+    dependencies:
+      '@types/unist': 3.0.3
+      unist-util-is: 6.0.1
+
   unist-util-is@6.0.1:
     dependencies:
       '@types/unist': 3.0.3
@@ -31823,6 +33951,11 @@ snapshots:
     dependencies:
       '@types/unist': 3.0.3
 
+  unist-util-remove-position@5.0.0:
+    dependencies:
+      '@types/unist': 3.0.3
+      unist-util-visit: 5.1.0
+
   unist-util-stringify-position@4.0.0:
     dependencies:
       '@types/unist': 3.0.3
@@ -31854,7 +33987,7 @@ snapshots:
   unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.0.1)(rollup@4.59.0)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
-      picomatch: 4.0.4
+      picomatch: 4.0.5
       webpack-virtual-modules: 0.6.2
     optionalDependencies:
       esbuild: 0.28.1
@@ -31928,6 +34061,11 @@ snapshots:
   use-latest-callback@0.2.6(react@19.1.0):
     dependencies:
       react: 19.1.0
+    optional: true
+
+  use-latest-callback@0.2.6(react@19.2.7):
+    dependencies:
+      react: 19.2.7
 
   use-sidecar@1.1.3(@types/react@19.1.17)(react@19.1.0):
     dependencies:
@@ -31977,30 +34115,40 @@ snapshots:
 
   vary@1.1.2: {}
 
-  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0):
+  vaul@1.1.2(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)
-      react: 19.1.0
-      react-dom: 19.1.0(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - '@types/react-dom'
     optional: true
 
-  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0):
+  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+    dependencies:
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react: 19.2.7
+      react-dom: 19.1.1(react@19.2.7)
+    transitivePeerDependencies:
+      - '@types/react'
+      - '@types/react-dom'
+
+  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0):
     dependencies:
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.1.0))(react@19.1.0)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
       react: 19.1.0
-      react-dom: 19.1.1(react@19.1.0)
+      react-dom: 19.2.7(react@19.1.0)
     transitivePeerDependencies:
       - '@types/react'
       - '@types/react-dom'
+    optional: true
 
-  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - '@types/react-dom'
@@ -33062,6 +35210,37 @@ snapshots:
     transitivePeerDependencies:
       - encoding
 
+  vue-component-type-helpers@3.3.7: {}
+
+  vue-demi@0.14.10(vue@3.5.40(typescript@6.0.3)):
+    dependencies:
+      vue: 3.5.40(typescript@6.0.3)
+
+  vue-sonner@1.3.2: {}
+
+  vue@3.5.40(typescript@5.6.3):
+    dependencies:
+      '@vue/compiler-dom': 3.5.40
+      '@vue/compiler-sfc': 3.5.40
+      '@vue/runtime-dom': 3.5.40
+      '@vue/server-renderer': 3.5.40
+      '@vue/shared': 3.5.40
+    optionalDependencies:
+      typescript: 5.6.3
+    optional: true
+
+  vue@3.5.40(typescript@6.0.3):
+    dependencies:
+      '@vue/compiler-dom': 3.5.40
+      '@vue/compiler-sfc': 3.5.40
+      '@vue/runtime-dom': 3.5.40
+      '@vue/server-renderer': 3.5.40
+      '@vue/shared': 3.5.40
+    optionalDependencies:
+      typescript: 6.0.3
+
+  w3c-keyname@2.2.8: {}
+
   w3c-xmlserializer@4.0.0:
     dependencies:
       xml-name-validator: 4.0.0
@@ -33082,6 +35261,8 @@ snapshots:
 
   web-namespaces@2.0.1: {}
 
+  web-worker@1.5.0: {}
+
   webgl-constants@1.1.1: {}
 
   webgl-sdf-generator@1.1.1: {}
@@ -33339,6 +35520,27 @@ snapshots:
       cookie: 1.1.1
       youch-core: 0.3.3
 
+  yuku-analyzer@0.6.12:
+    dependencies:
+      '@yuku-toolchain/types': 0.6.11
+      yuku-ast: 0.6.11
+    optionalDependencies:
+      '@yuku-analyzer/binding-darwin-arm64': 0.6.12
+      '@yuku-analyzer/binding-darwin-x64': 0.6.12
+      '@yuku-analyzer/binding-freebsd-x64': 0.6.12
+      '@yuku-analyzer/binding-linux-arm-gnu': 0.6.12
+      '@yuku-analyzer/binding-linux-arm-musl': 0.6.12
+      '@yuku-analyzer/binding-linux-arm64-gnu': 0.6.12
+      '@yuku-analyzer/binding-linux-arm64-musl': 0.6.12
+      '@yuku-analyzer/binding-linux-x64-gnu': 0.6.12
+      '@yuku-analyzer/binding-linux-x64-musl': 0.6.12
+      '@yuku-analyzer/binding-win32-arm64': 0.6.12
+      '@yuku-analyzer/binding-win32-x64': 0.6.12
+
+  yuku-ast@0.6.11:
+    dependencies:
+      '@yuku-toolchain/types': 0.6.8
+
   zod-openapi@5.4.6(zod@4.3.6):
     dependencies:
       zod: 4.3.6
@@ -33353,12 +35555,12 @@ snapshots:
 
   zod@4.4.3: {}
 
-  zustand@4.5.7(@types/react@19.1.17)(react@19.1.0):
+  zustand@4.5.7(@types/react@19.1.17)(react@19.2.7):
     dependencies:
-      use-sync-external-store: 1.6.0(react@19.1.0)
+      use-sync-external-store: 1.6.0(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
-      react: 19.1.0
+      react: 19.2.7
 
   zustand@5.0.14(@types/react@19.1.17)(react@19.1.0)(use-sync-external-store@1.6.0(react@19.1.0)):
     optionalDependencies:
@@ -33366,4 +35568,10 @@ snapshots:
       react: 19.1.0
       use-sync-external-store: 1.6.0(react@19.1.0)
 
+  zustand@5.0.14(@types/react@19.1.17)(react@19.2.7)(use-sync-external-store@1.6.0(react@19.2.7)):
+    optionalDependencies:
+      '@types/react': 19.1.17
+      react: 19.2.7
+      use-sync-external-store: 1.6.0(react@19.2.7)
+
   zwitch@2.0.4: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 22b55374b..269fc43b8 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -46,8 +46,12 @@ catalog:
   "@trpc/tanstack-react-query": ^11.1.0
 
   # React 19 & types
-  react: 19.1.0
-  react-dom: 19.1.0
+  # Runtime bumped to 19.2 (required by fumadocs 16); @types stay on the 19.1
+  # line to avoid a duplicate-@types/react skew with packages pinned to 19.1
+  # (mimic-admin, react-native). fumadocs peers `@types/react: *`, so 19.1 types
+  # against the 19.2 runtime are fine.
+  react: 19.2.7
+  react-dom: 19.2.7
   "@types/react": ^19.1.0
   "@types/react-dom": ^19.1.0
 
@@ -174,3 +178,4 @@ allowBuilds:
   simple-git-hooks: true
   unrs-resolver: true
   workerd: true
+  vue-demi: set this to true or false

From d24fd64b1b3fa16bccce3b4d2466245bc874b4ec Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 20 Jul 2026 09:45:08 +0200
Subject: [PATCH 104/129] fix: allow vue-demi lifecycle script

---
 pnpm-workspace.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 269fc43b8..44e096a0e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -178,4 +178,4 @@ allowBuilds:
   simple-git-hooks: true
   unrs-resolver: true
   workerd: true
-  vue-demi: set this to true or false
+  vue-demi: true

From 004b2f54aaaa719f9103ba80e1726ebed1ae5b2d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 20 Jul 2026 09:51:36 +0200
Subject: [PATCH 105/129] chore: sync generated plugin skills

---
 .../skills/code-component-authoring/SKILL.md      | 15 ++++++++++++---
 .../voidhash/skills/design-paywall/SKILL.md       | 12 +++++++++++-
 .../skills/code-component-authoring/SKILL.md      | 15 ++++++++++++---
 plugins/voidhash/skills/design-paywall/SKILL.md   | 12 +++++++++++-
 4 files changed, 46 insertions(+), 8 deletions(-)

diff --git a/integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md b/integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md
index 166616430..9e509b695 100644
--- a/integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md
+++ b/integrations/claude-code/voidhash/skills/code-component-authoring/SKILL.md
@@ -223,7 +223,8 @@ fields to literals, variables, or action-payload fields and may perform `set-var
 
 Preview names must match `[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}`. With no declarations, an
 implicit `default` preview is rendered. `props` override declared defaults. `data` accepts
-`products` and `variables`; product refs fall back to the first fixture product when unset.
+`products`, `variables`, `platform`, `safeAreaInsets`, and `dimensions`; product refs
+fall back to the first fixture product when unset. Insets and dimensions use logical pixels.
 Exercise meaningful visual branches with named previews and keep fixture data complete.
 
 Use at most one `<Slot />`. It renders document children supplied to the component
@@ -291,13 +292,21 @@ Runtime hooks:
 - `useSelectedProduct()` returns `selectedProduct`, `selectedProductId`, and
   `selectProduct(productId)`.
 - `usePaywallVariables()` returns `Record<string, string | number | boolean>`.
+- `usePlatform()` returns `ios | android | web`.
+- `useSafeAreaInsets()` returns `{ top, right, bottom, left }` in logical pixels.
+- `useDimensions("screen" | "window")` returns `{ width, height, x, y }` in logical
+  pixels; `x` and `y` are screen-space origins.
 - `usePaywallActions()` returns `purchase(productId?)`, `restore()`, `close(reason?)`,
   `openUrl(url)`, `track(name, properties?)`, and `selectProduct(productId)`.
 - `usePaywallStatus()` returns status `idle`, `purchasing`, `purchased`, `restoring`,
   `restored`, `cancelled`, or `failed`, plus optional `productId` and an optional error
   containing `code` and `message`.
-- `usePaywallConfig()` returns products, variables, locale, platform, and optional default
-  selected product id. Platform is `ios | android | web`.
+- `usePaywallConfig()` returns products, variables, locale, platform, optional safe-area
+  insets and dimensions, and the optional default selected product id.
+
+Explicit host or preview environment values take precedence. Browser measurements update on
+resize, orientation, and visual-viewport events. Missing platform defaults to `web`; missing
+or unavailable safe-area and SSR measurements fall back to zero.
 
 The selected product defaults to `defaultSelectedProductId`, then the first product.
 `purchase()` uses that selection when no id is passed and warns/no-ops if no product exists.
diff --git a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
index b49b25e95..68f8bec29 100644
--- a/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
+++ b/integrations/claude-code/voidhash/skills/design-paywall/SKILL.md
@@ -636,6 +636,8 @@ There is **NO `id`** — a component is identified by its FILE PATH
 - `render: ({ props, actions }) => ReactNode` — the template. `props` has
   defaults filled and `.optional()` props typed `T | undefined`; `actions` are
   typed callbacks.
+- Preview-state `data` accepts `products`, `variables`, `platform`,
+  `safeAreaInsets`, and `dimensions` for deterministic runtime-hook branches.
 - The file MUST default-export the `defineComponent({ … })` definition itself —
   `export default defineComponent({ … })`. Do NOT export a `.component` property or
   any other shape — only the `defineComponent(...)` result is valid.
@@ -680,11 +682,19 @@ document (plus text-only `textTransform`/`textDecorationLine`/`fontStyle`/`fontF
   (map over these to render a list).
 - `useSelectedProduct(): { selectedProduct, selectedProductId, selectProduct }`.
 - `usePaywallVariables(): Record<string, string | number | boolean>`.
+- `usePlatform(): "ios" | "android" | "web"`.
+- `useSafeAreaInsets(): { top, right, bottom, left }` in logical pixels.
+- `useDimensions("screen" | "window"): { width, height, x, y }` in logical pixels;
+  `x` and `y` are screen-space origins.
 - `usePaywallActions(): { purchase, restore, close, openUrl, track, selectProduct }`.
 - `usePaywallStatus(): { status, productId?, error? }` —
   `idle`/`purchasing`/`purchased`/`restoring`/`restored`/`failed`.
 - `usePaywallConfig(): PaywallRuntimeConfig` (products, variables, locale,
-  platform).
+  platform, safe-area insets, and dimensions).
+
+Explicit runtime or preview environment values take precedence and late configuration updates
+consumers. Browser measurements react to resize, orientation, and visual-viewport events.
+Missing platform defaults to `web`; unavailable safe-area and SSR measurements use zero.
 
 `PaywallProduct`:
 `{ id, slug, displayName, description?, price?, priceString, currencyCode?, period?, trialPeriod? }`
diff --git a/plugins/voidhash/skills/code-component-authoring/SKILL.md b/plugins/voidhash/skills/code-component-authoring/SKILL.md
index 166616430..9e509b695 100644
--- a/plugins/voidhash/skills/code-component-authoring/SKILL.md
+++ b/plugins/voidhash/skills/code-component-authoring/SKILL.md
@@ -223,7 +223,8 @@ fields to literals, variables, or action-payload fields and may perform `set-var
 
 Preview names must match `[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}`. With no declarations, an
 implicit `default` preview is rendered. `props` override declared defaults. `data` accepts
-`products` and `variables`; product refs fall back to the first fixture product when unset.
+`products`, `variables`, `platform`, `safeAreaInsets`, and `dimensions`; product refs
+fall back to the first fixture product when unset. Insets and dimensions use logical pixels.
 Exercise meaningful visual branches with named previews and keep fixture data complete.
 
 Use at most one `<Slot />`. It renders document children supplied to the component
@@ -291,13 +292,21 @@ Runtime hooks:
 - `useSelectedProduct()` returns `selectedProduct`, `selectedProductId`, and
   `selectProduct(productId)`.
 - `usePaywallVariables()` returns `Record<string, string | number | boolean>`.
+- `usePlatform()` returns `ios | android | web`.
+- `useSafeAreaInsets()` returns `{ top, right, bottom, left }` in logical pixels.
+- `useDimensions("screen" | "window")` returns `{ width, height, x, y }` in logical
+  pixels; `x` and `y` are screen-space origins.
 - `usePaywallActions()` returns `purchase(productId?)`, `restore()`, `close(reason?)`,
   `openUrl(url)`, `track(name, properties?)`, and `selectProduct(productId)`.
 - `usePaywallStatus()` returns status `idle`, `purchasing`, `purchased`, `restoring`,
   `restored`, `cancelled`, or `failed`, plus optional `productId` and an optional error
   containing `code` and `message`.
-- `usePaywallConfig()` returns products, variables, locale, platform, and optional default
-  selected product id. Platform is `ios | android | web`.
+- `usePaywallConfig()` returns products, variables, locale, platform, optional safe-area
+  insets and dimensions, and the optional default selected product id.
+
+Explicit host or preview environment values take precedence. Browser measurements update on
+resize, orientation, and visual-viewport events. Missing platform defaults to `web`; missing
+or unavailable safe-area and SSR measurements fall back to zero.
 
 The selected product defaults to `defaultSelectedProductId`, then the first product.
 `purchase()` uses that selection when no id is passed and warns/no-ops if no product exists.
diff --git a/plugins/voidhash/skills/design-paywall/SKILL.md b/plugins/voidhash/skills/design-paywall/SKILL.md
index b49b25e95..68f8bec29 100644
--- a/plugins/voidhash/skills/design-paywall/SKILL.md
+++ b/plugins/voidhash/skills/design-paywall/SKILL.md
@@ -636,6 +636,8 @@ There is **NO `id`** — a component is identified by its FILE PATH
 - `render: ({ props, actions }) => ReactNode` — the template. `props` has
   defaults filled and `.optional()` props typed `T | undefined`; `actions` are
   typed callbacks.
+- Preview-state `data` accepts `products`, `variables`, `platform`,
+  `safeAreaInsets`, and `dimensions` for deterministic runtime-hook branches.
 - The file MUST default-export the `defineComponent({ … })` definition itself —
   `export default defineComponent({ … })`. Do NOT export a `.component` property or
   any other shape — only the `defineComponent(...)` result is valid.
@@ -680,11 +682,19 @@ document (plus text-only `textTransform`/`textDecorationLine`/`fontStyle`/`fontF
   (map over these to render a list).
 - `useSelectedProduct(): { selectedProduct, selectedProductId, selectProduct }`.
 - `usePaywallVariables(): Record<string, string | number | boolean>`.
+- `usePlatform(): "ios" | "android" | "web"`.
+- `useSafeAreaInsets(): { top, right, bottom, left }` in logical pixels.
+- `useDimensions("screen" | "window"): { width, height, x, y }` in logical pixels;
+  `x` and `y` are screen-space origins.
 - `usePaywallActions(): { purchase, restore, close, openUrl, track, selectProduct }`.
 - `usePaywallStatus(): { status, productId?, error? }` —
   `idle`/`purchasing`/`purchased`/`restoring`/`restored`/`failed`.
 - `usePaywallConfig(): PaywallRuntimeConfig` (products, variables, locale,
-  platform).
+  platform, safe-area insets, and dimensions).
+
+Explicit runtime or preview environment values take precedence and late configuration updates
+consumers. Browser measurements react to resize, orientation, and visual-viewport events.
+Missing platform defaults to `web`; unavailable safe-area and SSR measurements use zero.
 
 `PaywallProduct`:
 `{ id, slug, displayName, description?, price?, priceString, currencyCode?, period?, trialPeriod? }`

From 87273c29b48688c2050426fab858fee9b5fe70b3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 20 Jul 2026 12:46:47 +0200
Subject: [PATCH 106/129] fix: generated source

---
 apps/www/.source/browser.ts | 26 +++++++++++++++++++++++++
 apps/www/.source/dynamic.ts |  9 +++++++++
 apps/www/.source/server.ts  | 39 +++++++++++++++++++++++++++++++++++++
 3 files changed, 74 insertions(+)
 create mode 100644 apps/www/.source/browser.ts
 create mode 100644 apps/www/.source/dynamic.ts
 create mode 100644 apps/www/.source/server.ts

diff --git a/apps/www/.source/browser.ts b/apps/www/.source/browser.ts
new file mode 100644
index 000000000..a20e34d72
--- /dev/null
+++ b/apps/www/.source/browser.ts
@@ -0,0 +1,26 @@
+// @ts-nocheck
+/// <reference types="vite/client" />
+import { browser } from 'fumadocs-mdx/runtime/browser';
+import type * as Config from '../src/features/source.config';
+
+const create = browser<typeof Config, import("fumadocs-mdx/runtime/types").InternalTypeConfig & {
+  DocData: {
+  }
+}>();
+const browserCollections = {
+  docs: create.doc("docs", import.meta.glob(["./**/*.{mdx,md}"], {
+    "base": "./../src/features/docs/content/docs",
+    "query": {
+      "collection": "docs"
+    },
+    "eager": false
+  })),
+  design: create.doc("design", import.meta.glob(["./**/*.{mdx,md}"], {
+    "base": "./../src/features/design/content/docs",
+    "query": {
+      "collection": "design"
+    },
+    "eager": false
+  })),
+};
+export default browserCollections;
\ No newline at end of file
diff --git a/apps/www/.source/dynamic.ts b/apps/www/.source/dynamic.ts
new file mode 100644
index 000000000..7eb1a7f38
--- /dev/null
+++ b/apps/www/.source/dynamic.ts
@@ -0,0 +1,9 @@
+// @ts-nocheck
+/// <reference types="vite/client" />
+import { dynamic } from 'fumadocs-mdx/runtime/dynamic';
+import * as Config from '../src/features/source.config';
+
+const create = await dynamic<typeof Config, import("fumadocs-mdx/runtime/types").InternalTypeConfig & {
+  DocData: {
+  }
+}>(Config, {"environment":"dynamic","root":"","configPath":"src/features/source.config.ts","outDir":".source"});
\ No newline at end of file
diff --git a/apps/www/.source/server.ts b/apps/www/.source/server.ts
new file mode 100644
index 000000000..25501242d
--- /dev/null
+++ b/apps/www/.source/server.ts
@@ -0,0 +1,39 @@
+// @ts-nocheck
+/// <reference types="vite/client" />
+import { server } from 'fumadocs-mdx/runtime/server';
+import type * as Config from '../src/features/source.config';
+
+const create = server<typeof Config, import("fumadocs-mdx/runtime/types").InternalTypeConfig & {
+  DocData: {
+  }
+}>();
+
+export const docs = await create.docs("docs", "src/features/docs/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
+  "base": "./../src/features/docs/content/docs",
+  "query": {
+    "collection": "docs"
+  },
+  "import": "default",
+  "eager": true
+}), import.meta.glob(["./**/*.{mdx,md}"], {
+  "base": "./../src/features/docs/content/docs",
+  "query": {
+    "collection": "docs"
+  },
+  "eager": true
+}));
+
+export const design = await create.docs("design", "src/features/design/content/docs", import.meta.glob(["./**/*.{json,yaml}"], {
+  "base": "./../src/features/design/content/docs",
+  "query": {
+    "collection": "design"
+  },
+  "import": "default",
+  "eager": true
+}), import.meta.glob(["./**/*.{mdx,md}"], {
+  "base": "./../src/features/design/content/docs",
+  "query": {
+    "collection": "design"
+  },
+  "eager": true
+}));
\ No newline at end of file

From 0a86e13ecf3017eab877957e4f57155155ec2f2b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 22 Jul 2026 13:00:20 +0200
Subject: [PATCH 107/129] feat: paywall generation overriding the same paywall
 instead of creating many of them

---
 .../backend/src/routes/public-file-serving.ts |  12 +-
 .../studio/paywalls/paywall-card-skeleton.tsx |  11 +-
 .../features/studio/paywalls/paywall-card.tsx |  36 ++++--
 .../core/src/domain/paywallThumbnail.test.ts  |  10 +-
 packages/core/src/domain/paywallThumbnail.ts  |  22 ++--
 .../PaywallThumbnailService.test.ts           |  56 +++++++--
 .../PaywallThumbnailService.ts                | 114 ++++++++----------
 packages/db/src/schema.ts                     |   6 +-
 8 files changed, 151 insertions(+), 116 deletions(-)

diff --git a/apps/backend/src/routes/public-file-serving.ts b/apps/backend/src/routes/public-file-serving.ts
index a4e76426b..0a865e4fd 100644
--- a/apps/backend/src/routes/public-file-serving.ts
+++ b/apps/backend/src/routes/public-file-serving.ts
@@ -1,12 +1,12 @@
 /**
  * Public asset serving — `GET /files/*`.
  *
- * Stored public files (avatars today, written by the org/project avatar RPCs to
- * `avatars/<entity>/<id>/<sha256>.<ext>`) are content-addressed, immutable, and
- * unauthenticated: the key's sha256 is the capability. These are images served
- * cross-origin as `<img src>`, so — unlike the paywall HTML routes — there is
- * NO CSP sandbox; just the stored `Content-Type`, an immutable cache policy,
- * permissive CORS, and `nosniff`.
+ * Stored public files are unauthenticated images served cross-origin as
+ * `<img src>`. Most use immutable content-addressed keys; mutable paywall
+ * thumbnails append their document sequence to the public URL as a cache
+ * buster. Unlike the paywall HTML routes, there is NO CSP sandbox; just the
+ * stored `Content-Type`, an immutable cache policy, permissive CORS, and
+ * `nosniff`.
  */
 import { PublicFileStore } from "@voidhash/core/services";
 import { Cause, Effect, Layer } from "effect";
diff --git a/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx b/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
index b21df3e90..6f067a699 100644
--- a/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
+++ b/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
@@ -1,12 +1,15 @@
 import { Skeleton } from "@voidhash/ui";
 
+/** Loading placeholder matching the paywall card's thumbnail geometry. */
 export function PaywallCardSkeleton() {
   return (
     <div className="flex flex-col overflow-hidden rounded-xl border bg-card">
-      <Skeleton className="aspect-3/4 w-full rounded-none" />
-      <div className="border-t p-4">
-        <Skeleton className="h-5 w-3/4" />
-        <Skeleton className="mt-2 h-4 w-1/2" />
+      <div className="flex aspect-[246/278] items-center justify-center bg-muted/30">
+        <Skeleton className="aspect-[532/1119] h-[86.34%] rounded-[12px]" />
+      </div>
+      <div className="px-4 py-3.5">
+        <Skeleton className="h-4 w-3/4" />
+        <Skeleton className="mt-1.5 h-3 w-1/2" />
       </div>
     </div>
   );
diff --git a/apps/www/src/features/studio/paywalls/paywall-card.tsx b/apps/www/src/features/studio/paywalls/paywall-card.tsx
index 76bb50bfe..2c412ab76 100644
--- a/apps/www/src/features/studio/paywalls/paywall-card.tsx
+++ b/apps/www/src/features/studio/paywalls/paywall-card.tsx
@@ -102,25 +102,39 @@ export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallC
         to="/studio/$organizationSlug/$projectSlug/design/$id"
       >
         {/* Preview Area */}
-        <div className="relative flex aspect-3/4 items-center justify-center bg-muted/50">
-          {paywall.thumbnailUrl ? (
+        <div className="relative flex aspect-[246/278] items-center justify-center overflow-hidden bg-linear-150 from-blue-ribbon-950 to-electric-violet-950">
+          {paywall.thumbnailUrl && (
             <img
-              alt={paywall.name}
-              className="absolute inset-0 size-full object-cover"
+              alt=""
+              aria-hidden="true"
+              className="pointer-events-none absolute inset-0 size-full scale-125 object-cover blur-[32px]"
               loading="lazy"
               src={paywall.thumbnailUrl}
             />
-          ) : (
-            <div className="flex flex-col items-center gap-2 text-muted-foreground">
-              <Smartphone className="h-12 w-12 opacity-30" />
-            </div>
           )}
+
+          <div className="relative z-10 aspect-[532/1119] h-[86.34%] overflow-hidden rounded-[12px] bg-zinc-950 shadow-[inset_0_0_4px_rgb(255_255_255/0.13)] ring-1 ring-inset ring-zinc-800">
+            <div className="absolute inset-x-[2.26%] inset-y-[1.16%] flex items-center justify-center overflow-hidden rounded-[10px] bg-zinc-950">
+              {paywall.thumbnailUrl ? (
+                <img
+                  alt={paywall.name}
+                  className="size-full object-cover object-top"
+                  loading="lazy"
+                  src={paywall.thumbnailUrl}
+                />
+              ) : (
+                <Smartphone className="h-10 w-10 text-zinc-400 opacity-30" />
+              )}
+            </div>
+          </div>
         </div>
 
         {/* Info Area */}
-        <div className="border-t p-4">
-          <h3 className="truncate font-medium">{paywall.name}</h3>
-          <p className="mt-0.5 truncate text-muted-foreground text-sm">{paywall.slug}</p>
+        <div className="px-4 py-3.5">
+          <h3 className="truncate font-medium text-sm">{paywall.name}</h3>
+          <p className="mt-1 truncate text-muted-foreground text-xs">
+            {paywall.slug}
+          </p>
         </div>
       </Link>
 
diff --git a/packages/core/src/domain/paywallThumbnail.test.ts b/packages/core/src/domain/paywallThumbnail.test.ts
index 4ec63e1dc..694d2d5dc 100644
--- a/packages/core/src/domain/paywallThumbnail.test.ts
+++ b/packages/core/src/domain/paywallThumbnail.test.ts
@@ -7,9 +7,9 @@ import {
 } from "./paywallThumbnail.ts";
 
 describe("derivePaywallThumbnailKey", () => {
-  it("is project- and paywall-scoped and seq-addressed", () => {
-    expect(derivePaywallThumbnailKey("proj_1", "pw_1", 7)).toBe(
-      "paywall-thumbnails/proj_1/pw_1/7.png",
+  it("is a stable project- and paywall-scoped key", () => {
+    expect(derivePaywallThumbnailKey("proj_1", "pw_1")).toBe(
+      "paywall-thumbnails/proj_1/pw_1/thumbnail.png",
     );
   });
 });
@@ -46,9 +46,9 @@ describe("thumbnail ownership guards", () => {
   });
 
   it("extracts the key only for own, project+paywall-scoped URLs", () => {
-    const owned = `${base}/files/paywall-thumbnails/proj_1/pw_1/3.png`;
+    const owned = `${base}/files/paywall-thumbnails/proj_1/pw_1/thumbnail.png?v=3`;
     expect(paywallThumbnailKeyFromUrl(owned, "proj_1", "pw_1", base)).toBe(
-      "paywall-thumbnails/proj_1/pw_1/3.png",
+      "paywall-thumbnails/proj_1/pw_1/thumbnail.png",
     );
     expect(paywallThumbnailKeyFromUrl(owned, "proj_1", "pw_2", base)).toBe(null);
     expect(paywallThumbnailKeyFromUrl(owned, "proj_2", "pw_1", base)).toBe(null);
diff --git a/packages/core/src/domain/paywallThumbnail.ts b/packages/core/src/domain/paywallThumbnail.ts
index c0e61941f..a4f298f08 100644
--- a/packages/core/src/domain/paywallThumbnail.ts
+++ b/packages/core/src/domain/paywallThumbnail.ts
@@ -2,22 +2,16 @@
  * Public URL + object-key helpers for paywall thumbnails, mirroring the
  * ownership guards in {@link file://./paywallAssetImage.ts}. Thumbnails live in
  * the same public file store as paywall assets, under a distinct
- * `paywall-thumbnails/<projectId>/<paywallId>/<seq>.png` layout, and are served
- * at `${publicBaseUrl}/files/<key>` like every other public object.
+ * `paywall-thumbnails/<projectId>/<paywallId>/thumbnail.png` layout, and are
+ * served at `${publicBaseUrl}/files/<key>` like every other public object.
  */
 
 /**
- * Content-addressed-by-seq object key for one rendered thumbnail:
- * `paywall-thumbnails/<projectId>/<paywallId>/<seq>.png`. The `seq` in the key
- * makes each render immutable, so a newer render never overwrites an older
- * object in place — the previous object is deleted best-effort after the row
- * flips to the new URL.
+ * Stable object key for a paywall's rendered thumbnail. New renders overwrite
+ * this object so each paywall owns at most one current thumbnail.
  */
-export const derivePaywallThumbnailKey = (
-  projectId: string,
-  paywallId: string,
-  seq: number,
-): string => `paywall-thumbnails/${projectId}/${paywallId}/${seq}.png`;
+export const derivePaywallThumbnailKey = (projectId: string, paywallId: string): string =>
+  `paywall-thumbnails/${projectId}/${paywallId}/thumbnail.png`;
 
 /**
  * Whether a stored thumbnail URL points at an object owned by the given
@@ -48,6 +42,6 @@ export const paywallThumbnailKeyFromUrl = (
   if (!url.startsWith(prefix)) {
     return null;
   }
-  const key = url.slice(prefix.length);
-  return key.startsWith(`paywall-thumbnails/${projectId}/${paywallId}/`) ? key : null;
+  const key = url.slice(prefix.length).split(/[?#]/, 1)[0];
+  return key?.startsWith(`paywall-thumbnails/${projectId}/${paywallId}/`) ? key : null;
 };
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
index 0cfdee84d..ba2a73210 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
@@ -151,11 +151,20 @@ describe("PaywallThumbnailService local components", () => {
     const paywall = {
       id: paywallId,
       projectId,
-      thumbnailSeq: null,
-      thumbnailUrl: null,
+      thumbnailSeq: 11,
+      thumbnailUrl: "https://files.test/files/paywall-thumbnails/proj_local/pw_local/11.png",
     };
     let rendererInput: unknown;
     let compileCalls = 0;
+    let storedObject:
+      | {
+          readonly body: Uint8Array;
+          readonly contentType: string | undefined;
+          readonly key: string;
+        }
+      | undefined;
+    let thumbnailUpdate: unknown;
+    const storageOperations: string[] = [];
 
     const db = {
       query: {
@@ -163,13 +172,22 @@ describe("PaywallThumbnailService local components", () => {
           findFirst: () => Effect.succeed(paywall),
         },
       },
-      update: () => ({
-        set: () => ({
-          where: () => ({
-            returning: () => Effect.succeed([{ id: paywallId }]),
+      transaction: (run: (tx: unknown) => unknown) =>
+        run({
+          select: () => ({
+            from: () => ({
+              where: () => ({
+                for: () => Effect.succeed([paywall]),
+              }),
+            }),
+          }),
+          update: () => ({
+            set: (value: unknown) => {
+              thumbnailUpdate = value;
+              return { where: () => Effect.void };
+            },
           }),
         }),
-      }),
     };
     const dependencies = Layer.mergeAll(
       Layer.succeed(Db, db as never),
@@ -211,9 +229,16 @@ describe("PaywallThumbnailService local components", () => {
       Layer.succeed(PublicFileStore, {
         publicBaseUrl: "https://files.test",
         publicUrl: (key) => `https://files.test/files/${key}`,
-        putObject: () => Effect.void,
+        putObject: (input) =>
+          Effect.sync(() => {
+            storedObject = input;
+            storageOperations.push(`put:${input.key}`);
+          }),
         getObject: () => Effect.succeed(null),
-        deleteObject: () => Effect.void,
+        deleteObject: (key) =>
+          Effect.sync(() => {
+            storageOperations.push(`delete:${key}`);
+          }),
       }),
       Layer.succeed(SnapshotImageRenderer, {
         render: (input) =>
@@ -237,5 +262,18 @@ describe("PaywallThumbnailService local components", () => {
       localComponentTrees: { [componentPath]: previewTrees },
       snapshot,
     });
+    expect(storedObject).toMatchObject({
+      contentType: "image/png",
+      key: "paywall-thumbnails/proj_local/pw_local/thumbnail.png",
+    });
+    expect(thumbnailUpdate).toEqual({
+      thumbnailSeq: 12,
+      thumbnailUrl:
+        "https://files.test/files/paywall-thumbnails/proj_local/pw_local/thumbnail.png?v=12",
+    });
+    expect(storageOperations).toEqual([
+      "delete:paywall-thumbnails/proj_local/pw_local/11.png",
+      "put:paywall-thumbnails/proj_local/pw_local/thumbnail.png",
+    ]);
   });
 });
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
index 3767d12d4..5005a9dfa 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
@@ -1,11 +1,10 @@
-import { Cause, Context, Effect, Layer, Predicate, Schema } from "effect";
+import { Context, Effect, Layer, Predicate, Schema } from "effect";
 
-import { Db, and, eq, isNull, lt, or, paywalls, type Paywall } from "@voidhash/db";
+import { Db, eq, paywalls, type Paywall } from "@voidhash/db";
 import { hashSource } from "@voidhash/paywall-workspace";
 
 import {
   derivePaywallThumbnailKey,
-  isOwnedPaywallThumbnailUrl,
   paywallThumbnailKeyFromUrl,
 } from "../../domain/paywallThumbnail.ts";
 import { componentServingPreviewKey } from "../paywallDeploys/PaywallDeployManifest.ts";
@@ -94,8 +93,10 @@ export const collectLocalComponentSources = (
 
 /**
  * `PaywallThumbnailService` owns the render vertical of the paywall-thumbnail
- * feature: it renders a mimic document snapshot to a PNG and publishes it,
- * gated by a monotonic `seq` guard so a late render never clobbers a newer one.
+ * feature: it renders a mimic document snapshot to a PNG, overwrites the
+ * paywall's stable object key, and versions the public URL with the document
+ * `seq`. A row lock and monotonic guard keep a late render from clobbering a
+ * newer one.
  * Queue consumers call `handleDocumentIdle`; list-page backfills call
  * `renderCurrent` so paywalls created before idle notifications were available
  * (or whose best-effort queue message was exhausted) can recover.
@@ -226,73 +227,58 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
           width: THUMBNAIL_WIDTH,
         });
 
-        const key = derivePaywallThumbnailKey(paywall.projectId, paywall.id, seq);
-        yield* publicFileStore.putObject({ body: png, contentType: "image/png", key });
-        const url = publicFileStore.publicUrl(key);
+        const key = derivePaywallThumbnailKey(paywall.projectId, paywall.id);
+        const stored = yield* db.transaction((tx) =>
+          Effect.gen(function* () {
+            // Serialize only the final overwrite. Rendering happens before this
+            // transaction, while the lock prevents an older completed render
+            // from replacing a newer thumbnail at the shared object key.
+            const [current] = yield* tx
+              .select()
+              .from(paywalls)
+              .where(eq(paywalls.id, paywall.id))
+              .for("update");
 
-        // Race-guarded write: only advance if no newer render beat us to the
-        // row. A concurrent render for a higher seq wins; we delete the object
-        // we just wrote and stop.
-        const updated = yield* db
-          .update(paywalls)
-          .set({ thumbnailSeq: seq, thumbnailUrl: url })
-          .where(
-            and(
-              eq(paywalls.id, paywall.id),
-              or(
-                isNull(paywalls.thumbnailSeq),
-                lt(paywalls.thumbnailSeq, seq),
-                and(eq(paywalls.thumbnailSeq, seq), isNull(paywalls.thumbnailUrl)),
-              ),
-            ),
-          )
-          .returning({ id: paywalls.id });
+            if (
+              current === undefined ||
+              (current.thumbnailSeq !== null &&
+                (current.thumbnailSeq > seq ||
+                  (current.thumbnailSeq === seq && current.thumbnailUrl !== null)))
+            ) {
+              return false;
+            }
+
+            const previousKey =
+              current.thumbnailUrl === null
+                ? null
+                : paywallThumbnailKeyFromUrl(
+                    current.thumbnailUrl,
+                    paywall.projectId,
+                    paywall.id,
+                    publicFileStore.publicBaseUrl,
+                  );
+            if (previousKey !== null && previousKey !== key) {
+              yield* publicFileStore.deleteObject(previousKey);
+            }
+
+            yield* publicFileStore.putObject({ body: png, contentType: "image/png", key });
+            const url = `${publicFileStore.publicUrl(key)}?v=${seq}`;
+            yield* tx
+              .update(paywalls)
+              .set({ thumbnailSeq: seq, thumbnailUrl: url })
+              .where(eq(paywalls.id, paywall.id));
 
-        if (updated.length === 0) {
+            return true;
+          }),
+        );
+
+        if (!stored) {
           yield* Effect.logDebug(
             `Paywall ${paywall.id} thumbnail seq ${seq} lost the write race; discarding`,
           );
-          yield* publicFileStore
-            .deleteObject(key)
-            .pipe(
-              Effect.catchCause((cause) =>
-                Effect.logWarning(
-                  `Failed to delete superseded thumbnail object ${key}: ${Cause.pretty(cause)}`,
-                ),
-              ),
-            );
           return;
         }
 
-        // Best-effort cleanup of the PREVIOUS thumbnail object, scoped to keys
-        // we own for this project + paywall.
-        if (
-          isOwnedPaywallThumbnailUrl(
-            paywall.thumbnailUrl,
-            paywall.projectId,
-            paywall.id,
-            publicFileStore.publicBaseUrl,
-          )
-        ) {
-          const previousKey = paywallThumbnailKeyFromUrl(
-            paywall.thumbnailUrl!,
-            paywall.projectId,
-            paywall.id,
-            publicFileStore.publicBaseUrl,
-          );
-          if (previousKey !== null && previousKey !== key) {
-            yield* publicFileStore
-              .deleteObject(previousKey)
-              .pipe(
-                Effect.catchCause((cause) =>
-                  Effect.logWarning(
-                    `Failed to delete previous thumbnail object ${previousKey}: ${Cause.pretty(cause)}`,
-                  ),
-                ),
-              );
-          }
-        }
-
         yield* Effect.log(`Rendered thumbnail for paywall ${paywall.id} at seq ${seq}`);
       });
 
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index f1b2c6a98..3156c4676 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -1316,9 +1316,9 @@ export const paywalls = pgTable(
     projectId: varchar("project_id", { length: 255 }).notNull(),
     slug: varchar("slug", { length: 255 }).notNull(),
     source: smallint("source").notNull().default(PaywallSource.editor),
-    // Public URL of the most recently rendered paywall thumbnail (null until the
-    // first idle render lands). `thumbnailSeq` is the mimic document `seq` that
-    // thumbnail was rendered from — the monotonic guard that keeps a late idle
+    // Public URL of the most recently rendered paywall thumbnail, including its
+    // cache-busting `seq` query (null until the first idle render lands).
+    // `thumbnailSeq` also provides the monotonic guard that keeps a late idle
     // render from overwriting a newer one (see PaywallThumbnailService).
     thumbnailUrl: text("thumbnail_url"),
     thumbnailSeq: bigint("thumbnail_seq", { mode: "number" }),

From aeda1bf7e1180735b10906f2b53ad12ec50e0446 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 22 Jul 2026 13:18:00 +0200
Subject: [PATCH 108/129] feat: force thumbnail generation

---
 apps/backend/src/rpcs/paywall-rpcs.ts         |  38 +------
 apps/backend/src/testing/rpc-smoke-cases.ts   |   6 -
 .../studio/lib/tanstack-query/paywalls.ts     |   7 --
 .../designer/dev-mode/dev-mode-view.tsx       |  13 ++-
 .../dev-mode/paywall-thumbnail-admin-slot.tsx |   8 ++
 .../$projectSlug/paywalls.index.tsx           |  26 +----
 .../security/endpoint-authorization-matrix.md |   2 +-
 .../PaywallThumbnailService.test.ts           |  91 +++++++++++++++
 .../PaywallThumbnailService.ts                | 104 ++++++++++--------
 packages/rpc/src/groups/PaywallRpcsDef.ts     |  10 --
 .../tests/ThumbnailQueue.integration.test.ts  |   3 +-
 11 files changed, 177 insertions(+), 131 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywalls/designer/dev-mode/paywall-thumbnail-admin-slot.tsx

diff --git a/apps/backend/src/rpcs/paywall-rpcs.ts b/apps/backend/src/rpcs/paywall-rpcs.ts
index 0d782266a..8b5dc8e17 100644
--- a/apps/backend/src/rpcs/paywall-rpcs.ts
+++ b/apps/backend/src/rpcs/paywall-rpcs.ts
@@ -1,9 +1,4 @@
-import {
-  MimicHost,
-  PaywallReleaseService,
-  PaywallService,
-  PaywallThumbnailService,
-} from "@voidhash/core/services";
+import { MimicHost, PaywallReleaseService, PaywallService } from "@voidhash/core/services";
 import {
   PaywallRpcsDef,
   RpcActionForbiddenError,
@@ -19,40 +14,9 @@ export const PaywallRpcsLive = PaywallRpcsDef.toLayer(
   Effect.gen(function* () {
     const paywallService = yield* PaywallService;
     const releaseService = yield* PaywallReleaseService;
-    const thumbnailService = yield* PaywallThumbnailService;
     const mimicHost = yield* MimicHost;
 
     return {
-      BackfillPaywallThumbnails: ({ projectId }) =>
-        Effect.gen(function* () {
-          const projectPaywalls = yield* paywallService.getPaywalls(projectId, true);
-          const missing = projectPaywalls.filter((paywall) => paywall.thumbnailUrl === null);
-          const results = yield* Effect.forEach(
-            missing,
-            (paywall) =>
-              thumbnailService.renderCurrent(paywall.id).pipe(
-                Effect.as(true),
-                Effect.catchTag("PaywallThumbnailServiceError", (error) =>
-                  Effect.logError("Paywall thumbnail backfill failed", {
-                    paywallId: paywall.id,
-                    message: error.message,
-                  }).pipe(Effect.as(false)),
-                ),
-              ),
-            { concurrency: 1 },
-          );
-          return {
-            attempted: missing.length,
-            rendered: results.filter(Boolean).length,
-          };
-        }).pipe(
-          Effect.catchTags({
-            ActionForbiddenError: (error) =>
-              Effect.fail(new RpcActionForbiddenError({ message: error.message })),
-            PaywallServiceError: (error) =>
-              Effect.fail(new RpcPaywallServiceError({ cause: error.cause })),
-          }),
-        ),
       CreatePaywall: (input) =>
         paywallService.createPaywall(input).pipe(
           Effect.catchTags({
diff --git a/apps/backend/src/testing/rpc-smoke-cases.ts b/apps/backend/src/testing/rpc-smoke-cases.ts
index bf93d43ea..986edb6f8 100644
--- a/apps/backend/src/testing/rpc-smoke-cases.ts
+++ b/apps/backend/src/testing/rpc-smoke-cases.ts
@@ -555,12 +555,6 @@ export const rpcSmokeCases = [
     role: "admin",
     tag: "CreatePaywall",
   },
-  {
-    expected: success,
-    payload: ({ ids }) => ({ projectId: ids.projectId }),
-    role: "admin",
-    tag: "BackfillPaywallThumbnails",
-  },
   {
     expected: success,
     payload: ({ ids }) => ({ includeArchived: true, projectId: ids.projectId }),
diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts b/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
index 535701a83..2b0e7c3cb 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywalls.ts
@@ -8,13 +8,6 @@ export const listPaywallsOptions = (options: { projectId: string; includeArchive
     queryKey: queryKeys.paywall.list(options),
   });
 
-export const backfillPaywallThumbnailsOptions = () =>
-  eq.mutationOptions({
-    mutationFn: (variables: { projectId: string }) =>
-      VoidhashRpc.request((rpc) => rpc.BackfillPaywallThumbnails(variables)),
-    mutationKey: ["backfillPaywallThumbnails"],
-  });
-
 export const createPaywallOptions = () =>
   eq.mutationOptions({
     mutationFn: (variables: { projectId: string; name: string; slug: string }) =>
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx
index 9b4695e69..45ea2ad0e 100644
--- a/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/dev-mode-view.tsx
@@ -1,9 +1,12 @@
 "use client";
 
 import { Button, Tabs, TabsList, TabsTrigger } from "@voidhash/ui";
+import { useParams } from "@tanstack/react-router";
 import { XIcon } from "lucide-react";
 import { useStore } from "zustand/react";
 
+import { PaywallThumbnailAdminSlot } from "@/features/studio/paywalls/designer/dev-mode/paywall-thumbnail-admin-slot";
+
 import { usePaywallDesignerActions, usePaywallDesignerStore } from "../state/designer-store";
 import type { DevModeTab } from "../state/designer-store-state";
 import { setDevModeTab, toggleDevMode } from "../state/actions/dev-mode-actions";
@@ -19,6 +22,7 @@ const DEV_MODE_TABS: { value: DevModeTab; label: string }[] = [
 ];
 
 export function DevModeView() {
+  const { id: paywallId } = useParams({ strict: false });
   const store = usePaywallDesignerStore();
   const dispatch = usePaywallDesignerActions();
   const activeTab = useStore(store, (state) => state.devMode.activeTab);
@@ -46,9 +50,12 @@ export function DevModeView() {
             ))}
           </TabsList>
         </Tabs>
-        <Button variant="ghost" size="icon" onClick={handleClose}>
-          <XIcon className="size-4" />
-        </Button>
+        <div className="flex items-center gap-2">
+          <PaywallThumbnailAdminSlot paywallId={paywallId} />
+          <Button variant="ghost" size="icon" onClick={handleClose}>
+            <XIcon className="size-4" />
+          </Button>
+        </div>
       </div>
       <div className="flex-1 overflow-hidden">
         {activeTab === "snapshot" && <SnapshotInspector />}
diff --git a/apps/www/src/features/studio/paywalls/designer/dev-mode/paywall-thumbnail-admin-slot.tsx b/apps/www/src/features/studio/paywalls/designer/dev-mode/paywall-thumbnail-admin-slot.tsx
new file mode 100644
index 000000000..2687bac72
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/designer/dev-mode/paywall-thumbnail-admin-slot.tsx
@@ -0,0 +1,8 @@
+interface PaywallThumbnailAdminSlotProps {
+  readonly paywallId: string | undefined;
+}
+
+/** Community extension slot reserved for a host-provided thumbnail repair control. */
+export function PaywallThumbnailAdminSlot(_props: PaywallThumbnailAdminSlotProps) {
+  return null;
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
index 6a1be185e..779fbef2d 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -1,18 +1,15 @@
-import { useMutation, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
+import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
 import { Button, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
 import { ArchiveIcon } from "lucide-react";
-import { useEffect, useRef, useState } from "react";
+import { useRef, useState } from "react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { CreatePaywallButton } from "@/features/studio/paywalls/create-paywall-button";
 import { PaywallCard } from "@/features/studio/paywalls/paywall-card";
 import { PaywallCardSkeleton } from "@/features/studio/paywalls/paywall-card-skeleton";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import {
-  backfillPaywallThumbnailsOptions,
-  listPaywallsOptions,
-} from "@/features/studio/lib/tanstack-query/paywalls";
+import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 
 const THUMBNAIL_REFRESH_INTERVAL_MS = 2_000;
@@ -68,16 +65,10 @@ function PaywallsPage() {
 
   const [showArchived, setShowArchived] = useState(false);
   const thumbnailRefreshDeadline = useRef(Date.now() + THUMBNAIL_REFRESH_WINDOW_MS);
-  const thumbnailBackfillProjectId = useRef<string | null>(null);
-  const queryClient = useQueryClient();
   const paywallsQueryOptions = listPaywallsOptions({
     includeArchived: true,
     projectId: project.id,
   });
-  const { mutate: backfillThumbnails } = useMutation({
-    ...backfillPaywallThumbnailsOptions(),
-    onSuccess: () => queryClient.invalidateQueries({ queryKey: paywallsQueryOptions.queryKey }),
-  });
 
   // Fetch archived paywalls alongside active ones so toggling visibility is a
   // client-side filter — no refetch (and no skeleton flash) when flipping it.
@@ -92,17 +83,6 @@ function PaywallsPage() {
         : false,
   });
 
-  useEffect(() => {
-    if (
-      thumbnailBackfillProjectId.current === project.id ||
-      !allPaywalls.some((paywall) => paywall.thumbnailUrl === null)
-    ) {
-      return;
-    }
-    thumbnailBackfillProjectId.current = project.id;
-    backfillThumbnails({ projectId: project.id });
-  }, [allPaywalls, backfillThumbnails, project.id]);
-
   const archivedCount = allPaywalls.filter((paywall) => paywall.archivedAt != null).length;
   const paywalls = showArchived
     ? allPaywalls
diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index e10f47168..dda01d923 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -74,7 +74,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | PaywallComponent | `ListPaywallComponents`, `GetPaywallComponentVersions` |
 | PaywallDeploy | `ListPaywallDeploys`, `SetActivePaywallRelease` |
 | PaywallLocation | `ListPaywallLocations`, `CreatePaywallLocation`, `UpdatePaywallLocation`, `ArchivePaywallLocation`, `AssignPaywallLocationShowing`, `ClearPaywallLocationShowing`, `ListPaywallLocationShowings` |
-| Paywall | `ListPaywalls`, `BackfillPaywallThumbnails`, `CreatePaywall`, `RenamePaywall`, `ArchivePaywall`, `RestorePaywall`, `DeletePaywall`, `RequestPaywallEditToken`, `CreatePaywallRelease`, `PublishPaywallRelease`, `GetPaywallDraftRelease` |
+| Paywall | `ListPaywalls`, `CreatePaywall`, `RenamePaywall`, `ArchivePaywall`, `RestorePaywall`, `DeletePaywall`, `RequestPaywallEditToken`, `CreatePaywallRelease`, `PublishPaywallRelease`, `GetPaywallDraftRelease` |
 | PaywallWorkspace | `ListWorkspacePaywalls`, `ReadPaywallDocument`, `RecordComponentManifest` |
 | Perk | `ListPerks`, `CreatePerk`, `DeletePerk` |
 | ProductPerk | `ListProductPerksByProductId`, `CreateProductPerk`, `DeleteProductPerk` |
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
index ba2a73210..693a84d22 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
@@ -277,3 +277,94 @@ describe("PaywallThumbnailService local components", () => {
     ]);
   });
 });
+
+describe("PaywallThumbnailService forced renders", () => {
+  it("rerenders the current document version with a fresh cache-busting URL", async () => {
+    const paywall = {
+      id: "pw_force",
+      projectId: "proj_force",
+      thumbnailSeq: 7,
+      thumbnailUrl:
+        "https://files.test/files/paywall-thumbnails/proj_force/pw_force/thumbnail.png?v=7",
+    };
+    const snapshot = { children: [], type: "root" };
+    let renderCalls = 0;
+    let thumbnailUpdate: { thumbnailSeq: number; thumbnailUrl: string } | undefined;
+
+    const db = {
+      query: {
+        paywalls: {
+          findFirst: () => Effect.succeed(paywall),
+        },
+      },
+      transaction: (run: (tx: unknown) => unknown) =>
+        run({
+          select: () => ({
+            from: () => ({
+              where: () => ({
+                for: () => Effect.succeed([paywall]),
+              }),
+            }),
+          }),
+          update: () => ({
+            set: (value: typeof thumbnailUpdate) => {
+              thumbnailUpdate = value;
+              return { where: () => Effect.void };
+            },
+          }),
+        }),
+    };
+    const dependencies = Layer.mergeAll(
+      Layer.succeed(Db, db as never),
+      Layer.succeed(MimicHost, {
+        ensurePaywallDocument: () => Effect.void,
+        getPaywallDocument: () => Effect.succeed({ root: snapshot, version: 7 }),
+      } as never),
+      Layer.succeed(PaywallArtifactStore, {
+        bucketName: "test",
+        getObject: () => Effect.succeed(null),
+        head: () => Effect.succeed(null),
+        putObject: () => Effect.void,
+      }),
+      Layer.succeed(ComponentCompiler, {
+        compileAndExtract: () => Effect.succeed({ status: "unavailable" as const }),
+        compileCheck: () => Effect.succeed({ status: "unavailable" as const }),
+      }),
+      Layer.succeed(ComponentManifestCacheService, {
+        getMany: () => Effect.succeed(new Map()),
+        record: () => Effect.succeed(undefined),
+      }),
+      Layer.succeed(PublicFileStore, {
+        deleteObject: () => Effect.void,
+        getObject: () => Effect.succeed(null),
+        publicBaseUrl: "https://files.test",
+        publicUrl: (key) => `https://files.test/files/${key}`,
+        putObject: () => Effect.void,
+      }),
+      Layer.succeed(SnapshotImageRenderer, {
+        render: () =>
+          Effect.sync(() => {
+            renderCalls += 1;
+            return new Uint8Array([1, 2, 3]);
+          }),
+      }),
+    );
+    const layer = PaywallThumbnailService.layer.pipe(Layer.provide(dependencies));
+
+    const result = await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallThumbnailService;
+        const skipped = yield* service.renderCurrent(paywall.id);
+        const forced = yield* service.forceRenderCurrent(paywall.id);
+        return { forced, skipped };
+      }).pipe(Effect.provide(layer)),
+    );
+
+    expect(result).toEqual({ forced: true, skipped: false });
+    expect(renderCalls).toBe(1);
+    expect(thumbnailUpdate).toMatchObject({ thumbnailSeq: 7 });
+    expect(thumbnailUpdate?.thumbnailUrl).toMatch(
+      /^https:\/\/files\.test\/files\/paywall-thumbnails\/proj_force\/pw_force\/thumbnail\.png\?v=7&r=[0-9a-f-]+$/,
+    );
+  });
+});
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
index 5005a9dfa..c44815f75 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
@@ -97,9 +97,9 @@ export const collectLocalComponentSources = (
  * paywall's stable object key, and versions the public URL with the document
  * `seq`. A row lock and monotonic guard keep a late render from clobbering a
  * newer one.
- * Queue consumers call `handleDocumentIdle`; list-page backfills call
- * `renderCurrent` so paywalls created before idle notifications were available
- * (or whose best-effort queue message was exhausted) can recover.
+ * Queue consumers call `handleDocumentIdle` for standard renders. Administrative
+ * repair tools call `forceRenderCurrent` to explicitly replace the current
+ * document's thumbnail.
  *
  * The queue is generic — non-paywall documents may arrive — so a missing
  * paywall row is a silent no-op. `Db`, `MimicHost`, `PaywallArtifactStore`,
@@ -196,14 +196,16 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
         });
 
       const renderPaywall = Effect.fn("renderPaywallThumbnail")(function* (input: {
+        readonly force?: boolean;
         readonly paywall: Paywall;
         readonly seq: number;
         readonly snapshot: unknown;
       }) {
-        const { paywall, seq, snapshot } = input;
+        const { force = false, paywall, seq, snapshot } = input;
 
         // Idempotency guard: a render at or beyond this seq already landed.
         if (
+          !force &&
           paywall.thumbnailSeq !== null &&
           (paywall.thumbnailSeq > seq ||
             (paywall.thumbnailSeq === seq && paywall.thumbnailUrl !== null))
@@ -211,7 +213,7 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
           yield* Effect.logDebug(
             `Paywall ${paywall.id} thumbnail already at seq ${paywall.thumbnailSeq} >= ${seq}; skipping`,
           );
-          return;
+          return false;
         }
 
         const contentHashes = collectDeployedComponentContentHashes(snapshot);
@@ -243,7 +245,7 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
               current === undefined ||
               (current.thumbnailSeq !== null &&
                 (current.thumbnailSeq > seq ||
-                  (current.thumbnailSeq === seq && current.thumbnailUrl !== null)))
+                  (!force && current.thumbnailSeq === seq && current.thumbnailUrl !== null)))
             ) {
               return false;
             }
@@ -262,7 +264,8 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
             }
 
             yield* publicFileStore.putObject({ body: png, contentType: "image/png", key });
-            const url = `${publicFileStore.publicUrl(key)}?v=${seq}`;
+            const cacheVersion = force ? `${seq}&r=${crypto.randomUUID()}` : String(seq);
+            const url = `${publicFileStore.publicUrl(key)}?v=${cacheVersion}`;
             yield* tx
               .update(paywalls)
               .set({ thumbnailSeq: seq, thumbnailUrl: url })
@@ -276,10 +279,11 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
           yield* Effect.logDebug(
             `Paywall ${paywall.id} thumbnail seq ${seq} lost the write race; discarding`,
           );
-          return;
+          return false;
         }
 
         yield* Effect.log(`Rendered thumbnail for paywall ${paywall.id} at seq ${seq}`);
+        return true;
       });
 
       const handleDocumentIdle = Effect.fn("handleDocumentIdle")(
@@ -325,58 +329,72 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
                     message: `${error.message}: ${error.cause}`,
                   }),
                 ),
+              SqlError: (error) =>
+                Effect.fail(new PaywallThumbnailServiceError({ message: String(error.cause) })),
               SnapshotImageRenderError: (error) =>
                 Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
             }),
           ),
       );
 
-      const renderCurrent = Effect.fn("renderCurrentPaywallThumbnail")(
-        function* (paywallId: string) {
+      const renderCurrentPaywall = (paywallId: string, force: boolean) =>
+        Effect.gen(function* () {
           yield* Effect.annotateCurrentSpan("voidhash.paywall.id", paywallId);
           const paywall = yield* db.query.paywalls.findFirst({ where: { id: paywallId } });
           if (!paywall) {
-            return;
+            return false;
           }
           yield* Effect.annotateCurrentSpan("voidhash.project.id", paywall.projectId);
 
           yield* mimicHost.ensurePaywallDocument(paywall.id);
           const document = yield* mimicHost.getPaywallDocument(paywall.id);
           yield* Effect.annotateCurrentSpan("voidhash.paywall_thumbnail.seq", document.version);
-          yield* renderPaywall({ paywall, seq: document.version, snapshot: document.root });
-        },
-        (effect) =>
-          effect.pipe(
-            Effect.catchTags({
-              EffectDrizzleQueryError: (error) =>
-                Effect.fail(new PaywallThumbnailServiceError({ message: String(error.cause) })),
-              ComponentCompilerError: (error) =>
-                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
-              ComponentManifestCacheError: (error) =>
-                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
-              ComponentManifestInvalidError: (error) =>
-                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
-              MimicHostError: (error) =>
-                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
-              PaywallArtifactStoreError: (error) =>
-                Effect.fail(
-                  new PaywallThumbnailServiceError({
-                    message: `${error.message}: ${error.cause}`,
-                  }),
-                ),
-              PublicFileStoreError: (error) =>
-                Effect.fail(
-                  new PaywallThumbnailServiceError({
-                    message: `${error.message}: ${error.cause}`,
-                  }),
-                ),
-              SnapshotImageRenderError: (error) =>
-                Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
-            }),
-          ),
+          return yield* renderPaywall({
+            force,
+            paywall,
+            seq: document.version,
+            snapshot: document.root,
+          });
+        }).pipe(
+          Effect.catchTags({
+            EffectDrizzleQueryError: (error) =>
+              Effect.fail(new PaywallThumbnailServiceError({ message: String(error.cause) })),
+            ComponentCompilerError: (error) =>
+              Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+            ComponentManifestCacheError: (error) =>
+              Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+            ComponentManifestInvalidError: (error) =>
+              Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+            MimicHostError: (error) =>
+              Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+            PaywallArtifactStoreError: (error) =>
+              Effect.fail(
+                new PaywallThumbnailServiceError({
+                  message: `${error.message}: ${error.cause}`,
+                }),
+              ),
+            PublicFileStoreError: (error) =>
+              Effect.fail(
+                new PaywallThumbnailServiceError({
+                  message: `${error.message}: ${error.cause}`,
+                }),
+              ),
+            SqlError: (error) =>
+              Effect.fail(new PaywallThumbnailServiceError({ message: String(error.cause) })),
+            SnapshotImageRenderError: (error) =>
+              Effect.fail(new PaywallThumbnailServiceError({ message: error.message })),
+          }),
+        );
+
+      const renderCurrent = Effect.fn("renderCurrentPaywallThumbnail")((paywallId: string) =>
+        renderCurrentPaywall(paywallId, false),
+      );
+
+      const forceRenderCurrent = Effect.fn("forceRenderCurrentPaywallThumbnail")(
+        (paywallId: string) => renderCurrentPaywall(paywallId, true),
       );
 
-      return { handleDocumentIdle, renderCurrent } as const;
+      return { forceRenderCurrent, handleDocumentIdle, renderCurrent } as const;
     }),
   },
 ) {
diff --git a/packages/rpc/src/groups/PaywallRpcsDef.ts b/packages/rpc/src/groups/PaywallRpcsDef.ts
index b553393f6..b0044f304 100644
--- a/packages/rpc/src/groups/PaywallRpcsDef.ts
+++ b/packages/rpc/src/groups/PaywallRpcsDef.ts
@@ -51,16 +51,6 @@ export class PaywallRpcsDef extends RpcGroup.make(
     }),
     success: Schema.Array(Paywall),
   }),
-  Rpc.make("BackfillPaywallThumbnails", {
-    error: Schema.Union([RpcActionForbiddenError, RpcPaywallServiceError]),
-    payload: Schema.Struct({
-      projectId: Schema.String,
-    }),
-    success: Schema.Struct({
-      attempted: Schema.Number,
-      rendered: Schema.Number,
-    }),
-  }),
   Rpc.make("CreatePaywall", {
     error: Schema.Union([
       RpcActionForbiddenError,
diff --git a/selfhost/entry/tests/ThumbnailQueue.integration.test.ts b/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
index 199ba5e41..8b8f56589 100644
--- a/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
+++ b/selfhost/entry/tests/ThumbnailQueue.integration.test.ts
@@ -29,7 +29,8 @@ describePg("self-host thumbnail queue", () => {
                 Effect.sync(() => {
                   handled.push(input);
                 }),
-              renderCurrent: () => Effect.void,
+              forceRenderCurrent: () => Effect.succeed(false),
+              renderCurrent: () => Effect.succeed(false),
             });
             yield* Effect.forkScoped(
               runSelfhostPaywallThumbnailConsumer.pipe(

From ff9e98a833328a947d83be4f8b942d4363bab4db Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 22 Jul 2026 13:28:17 +0200
Subject: [PATCH 109/129] feat: go to dashboard returns to paywall list

---
 .../src/features/studio/paywalls/designer/panels/top-panel.tsx  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
index dca18bd07..3a846dc03 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
@@ -128,7 +128,7 @@ export function TopPanel() {
         organizationSlug: organizationSlug ?? "",
         projectSlug: projectSlug ?? "",
       },
-      to: "/studio/$organizationSlug/$projectSlug",
+      to: "/studio/$organizationSlug/$projectSlug/paywalls",
     });
   };
 

From a0eb71f460dd049dbd0e078c1600faba14ac69dc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 22 Jul 2026 15:53:44 +0200
Subject: [PATCH 110/129] fix: thumbnail rendering images

---
 .../design/content/docs/components/meta.yaml  |   1 +
 .../content/docs/components/page-bar.mdx      |  57 ++++++++
 .../$projectSlug/paywalls.index.tsx           | 131 ++++++++++++------
 packages/core/package.json                    |   1 +
 .../PaywallThumbnailService.test.ts           |  84 ++++++++++-
 .../PaywallThumbnailService.ts                |  20 ++-
 .../inlinePublicFileImages.test.ts            | 105 ++++++++++++++
 .../inlinePublicFileImages.ts                 | 104 ++++++++++++++
 .../src/services/paywalls/PaywallService.ts   |   1 +
 packages/ui/components/page-bar.tsx           |  70 ++++++++++
 packages/ui/index.ts                          |   1 +
 packages/ui/package.json                      |   3 +-
 selfhost/entry/src/backend/Backend.ts         |  25 +++-
 selfhost/entry/src/backend/Thumbnails.ts      |  24 +++-
 selfhost/entry/tests/Thumbnails.test.ts       |  10 ++
 15 files changed, 582 insertions(+), 55 deletions(-)
 create mode 100644 apps/www/src/features/design/content/docs/components/page-bar.mdx
 create mode 100644 packages/core/src/services/paywallThumbnails/inlinePublicFileImages.test.ts
 create mode 100644 packages/core/src/services/paywallThumbnails/inlinePublicFileImages.ts
 create mode 100644 packages/ui/components/page-bar.tsx

diff --git a/apps/www/src/features/design/content/docs/components/meta.yaml b/apps/www/src/features/design/content/docs/components/meta.yaml
index 59124c47c..a44026bb5 100644
--- a/apps/www/src/features/design/content/docs/components/meta.yaml
+++ b/apps/www/src/features/design/content/docs/components/meta.yaml
@@ -27,6 +27,7 @@ pages:
   - label
   - menubar
   - navigation-menu
+  - page-bar
   - pagination
   - popover
   - progress
diff --git a/apps/www/src/features/design/content/docs/components/page-bar.mdx b/apps/www/src/features/design/content/docs/components/page-bar.mdx
new file mode 100644
index 000000000..c90ca367e
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/page-bar.mdx
@@ -0,0 +1,57 @@
+---
+title: Page Bar
+description: A full-width secondary bar below the page header with tabs and actions on either side.
+---
+
+## Usage
+
+`PageBar` shares the horizontal spacing and bottom border of `PageHeader`, so its underline runs edge to edge. Both sides accept tabs and buttons: the left side via `children`, the right side via `rightActions`.
+
+<Preview centered={false} className="overflow-hidden p-0">
+  <PageTabs defaultValue="all">
+    <PageHeader rightActions={<Button size="sm"><PlusIcon data-icon="inline-start" />New paywall</Button>}>
+      <PageHeaderTitle>Paywalls</PageHeaderTitle>
+    </PageHeader>
+    <PageBar rightActions={<Button size="sm" variant="ghost">Filter</Button>}>
+      <PageBarTabs>
+        <PageBarTab value="all">All</PageBarTab>
+        <PageBarTab value="active">Active</PageBarTab>
+        <PageBarTab value="inactive">Inactive</PageBarTab>
+        <PageBarTab value="archived">Archived</PageBarTab>
+      </PageBarTabs>
+    </PageBar>
+    <div className="p-4 text-muted-foreground text-sm">Page content</div>
+  </PageTabs>
+</Preview>
+
+```tsx
+import { PageBar, PageBarTab, PageBarTabs, PageTabs } from "@voidhash/ui";
+
+<PageTabs defaultValue="all">
+  <PageBar rightActions={<Button size="sm">Action</Button>}>
+    <PageBarTabs>
+      <PageBarTab value="all">All</PageBarTab>
+      <PageBarTab value="archived">Archived</PageBarTab>
+    </PageBarTabs>
+  </PageBar>
+  {/* tab content rendered anywhere below the bar */}
+</PageTabs>;
+```
+
+## Components
+
+### PageTabs
+
+Unstyled tabs root. Wrap it around the `PageBar` and the tab content so `PageBarTab` triggers can control content rendered anywhere below the bar. Omit it when the bar holds no tabs.
+
+### PageBar
+
+The bar itself. `children` render on the left, `rightActions` on the right; both sides vertically center buttons while tabs stretch to the full bar height.
+
+### PageBarTabs
+
+Tab strip for use inside a `PageBar`. The active underline sits on the bar's bottom border.
+
+### PageBarTab
+
+A single tab trigger inside `PageBarTabs`.
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
index 779fbef2d..7faed2efc 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -1,7 +1,14 @@
 import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
-import { Button, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
-import { ArchiveIcon } from "lucide-react";
+import {
+  Page,
+  PageBar,
+  PageBarTab,
+  PageBarTabs,
+  PageHeader,
+  PageHeaderTitle,
+  PageTabs,
+} from "@voidhash/ui";
 import { useRef, useState } from "react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
@@ -15,6 +22,15 @@ import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 const THUMBNAIL_REFRESH_INTERVAL_MS = 2_000;
 const THUMBNAIL_REFRESH_WINDOW_MS = 45_000;
 
+const PAYWALL_TABS = [
+  { value: "all", label: "All" },
+  { value: "active", label: "Active" },
+  { value: "inactive", label: "Inactive" },
+  { value: "archived", label: "Archived" },
+] as const;
+
+type PaywallTab = (typeof PAYWALL_TABS)[number]["value"];
+
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/",
 )({
@@ -40,6 +56,13 @@ function PaywallsPageSkeleton() {
       <PageHeader>
         <PageHeaderTitle>Paywalls</PageHeaderTitle>
       </PageHeader>
+      <PageBar>
+        <div className="flex items-center gap-4">
+          {PAYWALL_TABS.map((tab) => (
+            <div className="h-5 w-14 rounded bg-muted" key={tab.value} />
+          ))}
+        </div>
+      </PageBar>
       <div className="grid w-full grid-cols-2 gap-6 px-4 pt-4 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
         {Array.from({ length: 5 }).map((_, index) => (
           // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
@@ -50,6 +73,23 @@ function PaywallsPageSkeleton() {
   );
 }
 
+function emptyStateMessage(tab: PaywallTab): string {
+  switch (tab) {
+    case "all":
+      return "No paywalls yet. Create one to get started.";
+    case "active":
+      return "No active paywalls. Create one to get started.";
+    case "inactive":
+      return "No inactive paywalls.";
+    case "archived":
+      return "No archived paywalls.";
+    default: {
+      const _exhaustive: never = tab;
+      return _exhaustive;
+    }
+  }
+}
+
 function PaywallsPage() {
   const { organizationSlug, projectSlug } = Route.useParams();
   const { user } = useAuth();
@@ -63,15 +103,15 @@ function PaywallsPage() {
     throw new Error("Project not found");
   }
 
-  const [showArchived, setShowArchived] = useState(false);
+  const [tab, setTab] = useState<PaywallTab>("active");
   const thumbnailRefreshDeadline = useRef(Date.now() + THUMBNAIL_REFRESH_WINDOW_MS);
   const paywallsQueryOptions = listPaywallsOptions({
     includeArchived: true,
     projectId: project.id,
   });
 
-  // Fetch archived paywalls alongside active ones so toggling visibility is a
-  // client-side filter — no refetch (and no skeleton flash) when flipping it.
+  // Fetch archived paywalls alongside active ones so tab switches are a
+  // client-side filter — no refetch (and no skeleton flash) when changing tabs.
   const { data: allPaywalls } = useSuspenseQuery({
     ...paywallsQueryOptions,
     // Thumbnail generation starts after the designer connection becomes idle,
@@ -83,46 +123,59 @@ function PaywallsPage() {
         : false,
   });
 
-  const archivedCount = allPaywalls.filter((paywall) => paywall.archivedAt != null).length;
-  const paywalls = showArchived
-    ? allPaywalls
-    : allPaywalls.filter((paywall) => paywall.archivedAt == null);
+  const paywalls = allPaywalls.filter((paywall) => {
+    const isArchived = paywall.archivedAt != null;
+    switch (tab) {
+      case "all":
+        return true;
+      case "active":
+        return !isArchived;
+      case "inactive":
+        // Paywalls only have archived vs not today; nothing maps to inactive yet.
+        return false;
+      case "archived":
+        return isArchived;
+      default: {
+        const _exhaustive: never = tab;
+        return _exhaustive;
+      }
+    }
+  });
 
   return (
     <Page>
-      <PageHeader
-        rightActions={
-          <div className="flex items-center gap-2">
-            {archivedCount > 0 && (
-              <Button onClick={() => setShowArchived((value) => !value)} size="sm" variant="ghost">
-                <ArchiveIcon />
-                {showArchived ? "Hide archived" : `Show archived (${archivedCount})`}
-              </Button>
-            )}
-            <CreatePaywallButton projectId={project.id} />
-          </div>
-        }
-      >
+      <PageHeader rightActions={<CreatePaywallButton projectId={project.id} />}>
         <PageHeaderTitle>Paywalls</PageHeaderTitle>
       </PageHeader>
-      <div className="w-full px-4 pt-4">
-        {paywalls.length === 0 ? (
-          <div className="py-20 text-center text-muted-foreground text-sm">
-            No paywalls yet. Create one to get started.
-          </div>
-        ) : (
-          <div className="grid grid-cols-2 gap-6 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
-            {paywalls.map((paywall) => (
-              <PaywallCard
-                key={paywall.id}
-                organizationSlug={organizationSlug as string}
-                paywall={paywall}
-                projectSlug={projectSlug as string}
-              />
+      <PageTabs onValueChange={(value) => setTab(value as PaywallTab)} value={tab}>
+        <PageBar>
+          <PageBarTabs>
+            {PAYWALL_TABS.map((item) => (
+              <PageBarTab key={item.value} value={item.value}>
+                {item.label}
+              </PageBarTab>
             ))}
-          </div>
-        )}
-      </div>
+          </PageBarTabs>
+        </PageBar>
+        <div className="w-full px-4 pt-4">
+          {paywalls.length === 0 ? (
+            <div className="py-20 text-center text-muted-foreground text-sm">
+              {emptyStateMessage(tab)}
+            </div>
+          ) : (
+            <div className="grid grid-cols-2 gap-6 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
+              {paywalls.map((paywall) => (
+                <PaywallCard
+                  key={paywall.id}
+                  organizationSlug={organizationSlug as string}
+                  paywall={paywall}
+                  projectSlug={projectSlug as string}
+                />
+              ))}
+            </div>
+          )}
+        </div>
+      </PageTabs>
     </Page>
   );
 }
diff --git a/packages/core/package.json b/packages/core/package.json
index 13bd006e3..6aa1ceed5 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -75,6 +75,7 @@
     "./services/paywallThumbnails/HtmlScreenshot": "./src/services/paywallThumbnails/HtmlScreenshot.ts",
     "./services/paywallThumbnails/PaywallThumbnailService": "./src/services/paywallThumbnails/PaywallThumbnailService.ts",
     "./services/paywallThumbnails/SnapshotImageRenderer": "./src/services/paywallThumbnails/SnapshotImageRenderer.ts",
+    "./services/paywallThumbnails/inlinePublicFileImages": "./src/services/paywallThumbnails/inlinePublicFileImages.ts",
     "./services/paymentProviders/AppStorePaymentProviderService": "./src/services/paymentProviders/AppStorePaymentProviderService.ts",
     "./services/paymentProviders/GooglePlayPaymentProviderService": "./src/services/paymentProviders/GooglePlayPaymentProviderService.ts",
     "./services/paymentProviders/StripePaymentProviderService": "./src/services/paymentProviders/StripePaymentProviderService.ts",
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
index 693a84d22..5894e6d70 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.test.ts
@@ -318,7 +318,9 @@ describe("PaywallThumbnailService forced renders", () => {
       Layer.succeed(Db, db as never),
       Layer.succeed(MimicHost, {
         ensurePaywallDocument: () => Effect.void,
-        getPaywallDocument: () => Effect.succeed({ root: snapshot, version: 7 }),
+        // Version-space is one ahead of the queue's seq-space: version 8 is the
+        // same document state a queue render would have stored as seq 7.
+        getPaywallDocument: () => Effect.succeed({ root: snapshot, version: 8 }),
       } as never),
       Layer.succeed(PaywallArtifactStore, {
         bucketName: "test",
@@ -367,4 +369,84 @@ describe("PaywallThumbnailService forced renders", () => {
       /^https:\/\/files\.test\/files\/paywall-thumbnails\/proj_force\/pw_force\/thumbnail\.png\?v=7&r=[0-9a-f-]+$/,
     );
   });
+
+  it("bypasses a stored thumbnailSeq ahead of the current document (repairs poisoned rows)", async () => {
+    // A row written with a version-space seq (the pre-fix force path) sits one
+    // ahead of anything the queue will ever publish; force must still replace it.
+    const paywall = {
+      id: "pw_repair",
+      projectId: "proj_repair",
+      thumbnailSeq: 8,
+      thumbnailUrl:
+        "https://files.test/files/paywall-thumbnails/proj_repair/pw_repair/thumbnail.png?v=8",
+    };
+    const snapshot = { children: [], type: "root" };
+    let thumbnailUpdate: { thumbnailSeq: number; thumbnailUrl: string } | undefined;
+
+    const db = {
+      query: {
+        paywalls: {
+          findFirst: () => Effect.succeed(paywall),
+        },
+      },
+      transaction: (run: (tx: unknown) => unknown) =>
+        run({
+          select: () => ({
+            from: () => ({
+              where: () => ({
+                for: () => Effect.succeed([paywall]),
+              }),
+            }),
+          }),
+          update: () => ({
+            set: (value: typeof thumbnailUpdate) => {
+              thumbnailUpdate = value;
+              return { where: () => Effect.void };
+            },
+          }),
+        }),
+    };
+    const dependencies = Layer.mergeAll(
+      Layer.succeed(Db, db as never),
+      Layer.succeed(MimicHost, {
+        ensurePaywallDocument: () => Effect.void,
+        getPaywallDocument: () => Effect.succeed({ root: snapshot, version: 8 }),
+      } as never),
+      Layer.succeed(PaywallArtifactStore, {
+        bucketName: "test",
+        getObject: () => Effect.succeed(null),
+        head: () => Effect.succeed(null),
+        putObject: () => Effect.void,
+      }),
+      Layer.succeed(ComponentCompiler, {
+        compileAndExtract: () => Effect.succeed({ status: "unavailable" as const }),
+        compileCheck: () => Effect.succeed({ status: "unavailable" as const }),
+      }),
+      Layer.succeed(ComponentManifestCacheService, {
+        getMany: () => Effect.succeed(new Map()),
+        record: () => Effect.succeed(undefined),
+      }),
+      Layer.succeed(PublicFileStore, {
+        deleteObject: () => Effect.void,
+        getObject: () => Effect.succeed(null),
+        publicBaseUrl: "https://files.test",
+        publicUrl: (key) => `https://files.test/files/${key}`,
+        putObject: () => Effect.void,
+      }),
+      Layer.succeed(SnapshotImageRenderer, {
+        render: () => Effect.succeed(new Uint8Array([1, 2, 3])),
+      }),
+    );
+    const layer = PaywallThumbnailService.layer.pipe(Layer.provide(dependencies));
+
+    const forced = await Effect.runPromise(
+      Effect.gen(function* () {
+        const service = yield* PaywallThumbnailService;
+        return yield* service.forceRenderCurrent(paywall.id);
+      }).pipe(Effect.provide(layer)),
+    );
+
+    expect(forced).toBe(true);
+    expect(thumbnailUpdate).toMatchObject({ thumbnailSeq: 7 });
+  });
 });
diff --git a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
index c44815f75..4f7c3ae1c 100644
--- a/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
+++ b/packages/core/src/services/paywallThumbnails/PaywallThumbnailService.ts
@@ -241,11 +241,16 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
               .where(eq(paywalls.id, paywall.id))
               .for("update");
 
+            // A forced render bypasses the monotonic guard entirely: the operator
+            // explicitly replaces whatever is stored with the document state read
+            // above. If a newer queue render raced ahead, the lower stored seq
+            // self-heals on the next idle notification.
             if (
               current === undefined ||
-              (current.thumbnailSeq !== null &&
+              (!force &&
+                current.thumbnailSeq !== null &&
                 (current.thumbnailSeq > seq ||
-                  (!force && current.thumbnailSeq === seq && current.thumbnailUrl !== null)))
+                  (current.thumbnailSeq === seq && current.thumbnailUrl !== null)))
             ) {
               return false;
             }
@@ -348,11 +353,18 @@ export class PaywallThumbnailService extends Context.Service<PaywallThumbnailSer
 
           yield* mimicHost.ensurePaywallDocument(paywall.id);
           const document = yield* mimicHost.getPaywallDocument(paywall.id);
-          yield* Effect.annotateCurrentSpan("voidhash.paywall_thumbnail.seq", document.version);
+          // The idle queue publishes in seq-space — `version - 1` (see mimic-db's
+          // document-session, where the accepted-transaction hook records
+          // `result.version - 1`). Convert here so current-document renders share
+          // the same monotonic axis as queue-driven renders; passing the raw
+          // version would mark the row one step ahead and silently skip the next
+          // idle render.
+          const seq = Math.max(0, document.version - 1);
+          yield* Effect.annotateCurrentSpan("voidhash.paywall_thumbnail.seq", seq);
           return yield* renderPaywall({
             force,
             paywall,
-            seq: document.version,
+            seq,
             snapshot: document.root,
           });
         }).pipe(
diff --git a/packages/core/src/services/paywallThumbnails/inlinePublicFileImages.test.ts b/packages/core/src/services/paywallThumbnails/inlinePublicFileImages.test.ts
new file mode 100644
index 000000000..0333c37d2
--- /dev/null
+++ b/packages/core/src/services/paywallThumbnails/inlinePublicFileImages.test.ts
@@ -0,0 +1,105 @@
+import { Effect } from "effect";
+import { describe, expect, it } from "vite-plus/test";
+
+import type { PublicFileObject } from "../storage/PublicFileStore.ts";
+
+import { inlinePublicFileImages } from "./inlinePublicFileImages.ts";
+
+const BASE_URL = "http://localhost:1337";
+
+const makeStore = (objects: Record<string, PublicFileObject>) => {
+  const reads: string[] = [];
+  return {
+    reads,
+    store: {
+      publicBaseUrl: BASE_URL,
+      getObject: (key: string) =>
+        Effect.sync(() => {
+          reads.push(key);
+          return objects[key] ?? null;
+        }),
+    },
+  };
+};
+
+describe("inlinePublicFileImages", () => {
+  it("inlines img src and CSS background urls as data URIs", async () => {
+    const { store } = makeStore({
+      "paywall-assets/p1/logo.png": {
+        body: new Uint8Array([1, 2, 3]),
+        contentType: "image/png",
+      },
+      "paywall-assets/p1/bg.jpg": {
+        body: new Uint8Array([4, 5]),
+        contentType: "image/jpeg",
+      },
+    });
+    const html =
+      `<img src="${BASE_URL}/files/paywall-assets/p1/logo.png"/>` +
+      `<div style="background-image:url(&quot;${BASE_URL}/files/paywall-assets/p1/bg.jpg&quot;)"></div>`;
+
+    const result = await Effect.runPromise(inlinePublicFileImages(html, store));
+
+    expect(result).toBe(
+      `<img src="data:image/png;base64,AQID"/>` +
+        `<div style="background-image:url(&quot;data:image/jpeg;base64,BAU=&quot;)"></div>`,
+    );
+  });
+
+  it("fetches each distinct url once and leaves unknown keys untouched", async () => {
+    const { reads, store } = makeStore({
+      "a.png": { body: new Uint8Array([9]), contentType: "image/png" },
+    });
+    const html =
+      `<img src="${BASE_URL}/files/a.png"/><img src="${BASE_URL}/files/a.png"/>` +
+      `<img src="${BASE_URL}/files/missing.png"/>`;
+
+    const result = await Effect.runPromise(inlinePublicFileImages(html, store));
+
+    expect(reads).toEqual(["a.png", "missing.png"]);
+    expect(result).toBe(
+      `<img src="data:image/png;base64,CQ=="/><img src="data:image/png;base64,CQ=="/>` +
+        `<img src="${BASE_URL}/files/missing.png"/>`,
+    );
+  });
+
+  it("strips query fragments when deriving the key and decodes percent-encoding", async () => {
+    const { reads, store } = makeStore({
+      "sprüche/ä.png": { body: new Uint8Array([7]), contentType: null },
+    });
+    const html = `<img src="${BASE_URL}/files/spr%C3%BCche/%C3%A4.png?v=3"/>`;
+
+    const result = await Effect.runPromise(inlinePublicFileImages(html, store));
+
+    expect(reads).toEqual(["sprüche/ä.png"]);
+    expect(result).toBe(`<img src="data:image/png;base64,Bw=="/>`);
+  });
+
+  it("skips urls continued by an html-escaped query separator", async () => {
+    const { reads, store } = makeStore({
+      "a.png": { body: new Uint8Array([1]), contentType: "image/png" },
+    });
+    const html = `<img src="${BASE_URL}/files/a.png?v=1&amp;r=2"/>`;
+
+    const result = await Effect.runPromise(inlinePublicFileImages(html, store));
+
+    expect(reads).toEqual([]);
+    expect(result).toBe(html);
+  });
+
+  it("skips images that would push the document over the byte budget", async () => {
+    const { store } = makeStore({
+      "big.png": { body: new Uint8Array(64).fill(1), contentType: "image/png" },
+      "small.png": { body: new Uint8Array([1]), contentType: "image/png" },
+    });
+    const html =
+      `<img src="${BASE_URL}/files/big.png"/>` + `<img src="${BASE_URL}/files/small.png"/>`;
+
+    const result = await Effect.runPromise(
+      inlinePublicFileImages(html, store, { maxHtmlBytes: html.length + 20 }),
+    );
+
+    expect(result).toContain(`${BASE_URL}/files/big.png`);
+    expect(result).toContain("data:image/png;base64,");
+  });
+});
diff --git a/packages/core/src/services/paywallThumbnails/inlinePublicFileImages.ts b/packages/core/src/services/paywallThumbnails/inlinePublicFileImages.ts
new file mode 100644
index 000000000..9ae8b90d9
--- /dev/null
+++ b/packages/core/src/services/paywallThumbnails/inlinePublicFileImages.ts
@@ -0,0 +1,104 @@
+import { Effect } from "effect";
+
+import type { PublicFileStoreError, PublicFileStoreShape } from "../storage/PublicFileStore.ts";
+
+/**
+ * Keep the inlined document safely under the 4 MiB HTML budget the Cloudflare
+ * Browser Rendering screenshot action enforces.
+ */
+const DEFAULT_MAX_HTML_BYTES = 3_500_000;
+
+const escapeRegExp = (value: string): string => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+
+const toBase64 = (bytes: Uint8Array): string => {
+  let binary = "";
+  const chunkSize = 0x8000;
+  for (let index = 0; index < bytes.length; index += chunkSize) {
+    binary += String.fromCharCode(...bytes.subarray(index, index + chunkSize));
+  }
+  return btoa(binary);
+};
+
+const keyFromUrl = (url: string, prefix: string): string | null => {
+  const raw = url.slice(prefix.length).split(/[?#]/, 1)[0] ?? "";
+  if (raw === "") {
+    return null;
+  }
+  try {
+    // The renderer emits `encodeURI(url)`; recover the raw object key.
+    return decodeURIComponent(raw);
+  } catch {
+    return null;
+  }
+};
+
+/**
+ * Rewrites every public-file-store URL (`${publicBaseUrl}/files/<key>`) inside
+ * a rendered HTML document into a base64 `data:` URI read straight from the
+ * store.
+ *
+ * Screenshot backends do not necessarily share the serving origin's network:
+ * Cloudflare Browser Rendering runs remotely, so a dev worker's
+ * `http://localhost:*` asset URLs are unreachable and images render blank.
+ * Inlining removes the network dependency entirely — the worker reads the same
+ * bytes the `GET /files/*` route would serve.
+ *
+ * Unknown keys are left untouched (the URL stays as-is). An image whose data
+ * URI would push the document past `maxHtmlBytes` is skipped with a warning
+ * rather than failing the render. A URL immediately followed by an HTML-escaped
+ * query continuation (`&amp;`) is skipped too, since the match cannot span the
+ * entity boundary safely.
+ */
+export const inlinePublicFileImages = (
+  html: string,
+  store: Pick<PublicFileStoreShape, "publicBaseUrl" | "getObject">,
+  options?: { readonly maxHtmlBytes?: number },
+): Effect.Effect<string, PublicFileStoreError> =>
+  Effect.gen(function* () {
+    const prefix = `${store.publicBaseUrl}/files/`;
+    const maxHtmlBytes = options?.maxHtmlBytes ?? DEFAULT_MAX_HTML_BYTES;
+    const pattern = new RegExp(`${escapeRegExp(prefix)}[^"'()<>\\s&\\\\]*`, "g");
+
+    const dataUris = new Map<string, string | null>();
+    let out = "";
+    let cursor = 0;
+    let projectedBytes = html.length;
+
+    for (const match of html.matchAll(pattern)) {
+      const url = match[0];
+      const start = match.index;
+      const end = start + url.length;
+      out += html.slice(cursor, start);
+      cursor = start;
+
+      if (html.startsWith("&amp;", end)) {
+        continue;
+      }
+
+      let dataUri = dataUris.get(url);
+      if (dataUri === undefined) {
+        const key = keyFromUrl(url, prefix);
+        const object = key === null ? null : yield* store.getObject(key);
+        dataUri =
+          object === null
+            ? null
+            : `data:${object.contentType ?? "image/png"};base64,${toBase64(object.body)}`;
+        dataUris.set(url, dataUri);
+      }
+      if (dataUri === null) {
+        continue;
+      }
+      if (projectedBytes + dataUri.length - url.length > maxHtmlBytes) {
+        yield* Effect.logWarning(
+          `Skipping thumbnail image inline for ${url}: document would exceed ${maxHtmlBytes} bytes`,
+        );
+        continue;
+      }
+
+      projectedBytes += dataUri.length - url.length;
+      out += dataUri;
+      cursor = end;
+    }
+
+    return out + html.slice(cursor);
+  });
diff --git a/packages/core/src/services/paywalls/PaywallService.ts b/packages/core/src/services/paywalls/PaywallService.ts
index 639db1055..f16c09e17 100644
--- a/packages/core/src/services/paywalls/PaywallService.ts
+++ b/packages/core/src/services/paywalls/PaywallService.ts
@@ -62,6 +62,7 @@ export class PaywallService extends Context.Service<PaywallService>()("PaywallSe
             projectId,
             ...(includeArchived ? {} : { archivedAt: { isNull: true } }),
           },
+          orderBy: { createdAt: "desc" },
         });
       },
       (effect) =>
diff --git a/packages/ui/components/page-bar.tsx b/packages/ui/components/page-bar.tsx
new file mode 100644
index 000000000..b02155147
--- /dev/null
+++ b/packages/ui/components/page-bar.tsx
@@ -0,0 +1,70 @@
+"use client";
+
+import { Tabs as TabsPrimitive } from "radix-ui";
+
+import { cn } from "../lib/utils";
+
+export type PageBarProps = {
+  children?: React.ReactNode;
+  rightActions?: React.ReactNode;
+  className?: string;
+};
+
+/**
+ * Full-width secondary bar rendered below a `PageHeader`. Shares the header's
+ * horizontal spacing and bottom border, with a left side (`children`) and a
+ * right side (`rightActions`) that can both hold tabs and buttons.
+ */
+export function PageBar({ children, rightActions, className }: PageBarProps) {
+  return (
+    <div
+      className={cn(
+        "flex min-h-11 items-center justify-between gap-4 border-b border-border/60 bg-background px-4",
+        className,
+      )}
+    >
+      <div className="flex min-w-0 items-center gap-4 self-stretch">{children}</div>
+      {rightActions && <div className="flex items-center gap-2 self-stretch">{rightActions}</div>}
+    </div>
+  );
+}
+
+/**
+ * Unstyled tabs root connecting `PageBarTabs` triggers to content rendered
+ * anywhere below the bar. Wrap it around the `PageBar` and the tab content.
+ */
+export function PageTabs(props: React.ComponentProps<typeof TabsPrimitive.Root>) {
+  return <TabsPrimitive.Root {...props} />;
+}
+
+/**
+ * Tab strip for use inside a `PageBar`. Triggers stretch to the bar's full
+ * height and the active underline sits on the bar's bottom border.
+ */
+export function PageBarTabs({
+  className,
+  ...props
+}: React.ComponentProps<typeof TabsPrimitive.List>) {
+  return (
+    <TabsPrimitive.List
+      className={cn("-mb-px flex items-stretch gap-4 self-stretch", className)}
+      {...props}
+    />
+  );
+}
+
+/** A single tab trigger inside `PageBarTabs`. */
+export function PageBarTab({
+  className,
+  ...props
+}: React.ComponentProps<typeof TabsPrimitive.Trigger>) {
+  return (
+    <TabsPrimitive.Trigger
+      className={cn(
+        "inline-flex cursor-pointer items-center whitespace-nowrap border-b-2 border-transparent font-medium text-muted-foreground text-sm ring-offset-background transition-colors hover:text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:border-accent-foreground data-[state=active]:text-foreground",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
diff --git a/packages/ui/index.ts b/packages/ui/index.ts
index 83459f79c..2e1cd5487 100644
--- a/packages/ui/index.ts
+++ b/packages/ui/index.ts
@@ -10,6 +10,7 @@ export * from "./components/theme-provider";
 export * from "./components/theme-provider-tanstack";
 export * from "./components/theme-toggle";
 export * from "./components/page";
+export * from "./components/page-bar";
 export * from "./components/ui/accordion";
 export * from "./components/ui/alert";
 export * from "./components/ui/alert-dialog";
diff --git a/packages/ui/package.json b/packages/ui/package.json
index 36a8a2d6c..1142cc16b 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -70,7 +70,8 @@
     "./copy-text": "./components/copy-text.tsx",
     "./error-card": "./components/error-card.tsx",
     "./theme-toggle": "./components/theme-toggle.tsx",
-    "./page": "./components/page.tsx"
+    "./page": "./components/page.tsx",
+    "./page-bar": "./components/page-bar.tsx"
   },
   "scripts": {
     "typecheck": "tsc --noEmit"
diff --git a/selfhost/entry/src/backend/Backend.ts b/selfhost/entry/src/backend/Backend.ts
index df7046c51..dedce604e 100644
--- a/selfhost/entry/src/backend/Backend.ts
+++ b/selfhost/entry/src/backend/Backend.ts
@@ -7,6 +7,7 @@ import {
 import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-web";
 import { Workos } from "@voidhash/core/services/auth/Workos";
 import { SnapshotImageRenderer } from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
+import type { PublicFileStore } from "@voidhash/core/services/storage/PublicFileStore";
 import { PaywallAssetConfig } from "@voidhash/core/services/paywallLocations/PaywallAssetConfig";
 import { Db } from "@voidhash/db";
 import { HostServiceTag } from "@voidhash/mimic-db/app/hostService";
@@ -38,9 +39,18 @@ export const makeBackendInfrastructureLive = (
   config: SelfhostRuntimeConfig,
   workos: Layer.Layer<Workos>,
   clickhouse?: Layer.Layer<ClickhouseWebClient.ClickhouseWebClient>,
-  snapshotImageRenderer: Layer.Layer<SnapshotImageRenderer> = BackendSnapshotImageRendererStubLive,
-): Layer.Layer<InfraServices, never, HostServiceTag> =>
-  Layer.mergeAll(
+  snapshotImageRenderer: Layer.Layer<
+    SnapshotImageRenderer,
+    never,
+    PublicFileStore
+  > = BackendSnapshotImageRendererStubLive,
+): Layer.Layer<InfraServices, never, HostServiceTag> => {
+  const publicFileStore = makePublicFileStoreLive(
+    config.publicObjectStore,
+    config.publicFilesBaseUrl,
+  ).pipe(Layer.provide(NodePlatformRuntimeLive));
+
+  return Layer.mergeAll(
     Db.layer(config.database),
     workos,
     WorkosOrgPortLive.pipe(Layer.provide(workos)),
@@ -51,14 +61,15 @@ export const makeBackendInfrastructureLive = (
     makePaywallArtifactStoreLive(config.artifactObjectStore).pipe(
       Layer.provide(NodePlatformRuntimeLive),
     ),
-    makePublicFileStoreLive(config.publicObjectStore, config.publicFilesBaseUrl).pipe(
-      Layer.provide(NodePlatformRuntimeLive),
-    ),
+    publicFileStore,
     BackendPaymentProviderStubsLive,
     BackendNoopIdentityProjectionPublisherLive,
     makeBackendMimicHostLive(config.publicBaseUrl),
     makeHttpComponentCompilerLive(config.componentCompilerUrl),
-    snapshotImageRenderer,
+    // `mergeAll` does not cross-wire siblings; the renderer's asset inlining
+    // reads the same store instance merged above (memoized by reference).
+    snapshotImageRenderer.pipe(Layer.provide(publicFileStore)),
     MemoryProjectSchemaCacheLive,
     clickhouse ?? Layer.empty,
   );
+};
diff --git a/selfhost/entry/src/backend/Thumbnails.ts b/selfhost/entry/src/backend/Thumbnails.ts
index 6cad029b5..4e9b1ee90 100644
--- a/selfhost/entry/src/backend/Thumbnails.ts
+++ b/selfhost/entry/src/backend/Thumbnails.ts
@@ -3,12 +3,14 @@ import {
   HtmlScreenshot,
   HtmlScreenshotError,
 } from "@voidhash/core/services/paywallThumbnails/HtmlScreenshot";
+import { inlinePublicFileImages } from "@voidhash/core/services/paywallThumbnails/inlinePublicFileImages";
 import { PaywallThumbnailService } from "@voidhash/core/services/paywallThumbnails/PaywallThumbnailService";
 import {
   SnapshotImageRenderer,
   SnapshotImageRenderError,
   type SnapshotImageRendererShape,
 } from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
+import { PublicFileStore } from "@voidhash/core/services/storage/PublicFileStore";
 import type {
   PreviewTree,
   SnapshotNode,
@@ -47,11 +49,17 @@ export const SelfhostHtmlScreenshotLive = Layer.effect(
   }),
 );
 
-/** Renders a Mimic paywall snapshot to static HTML, then to PNG bytes. */
+/**
+ * Renders a Mimic paywall snapshot to static HTML, then to PNG bytes.
+ * Public-file-store asset URLs are inlined as `data:` URIs first so the
+ * screenshot browser never depends on the serving origin being reachable
+ * (e.g. a container that cannot hairpin back to its own public domain).
+ */
 export const SelfhostSnapshotImageRendererLive = Layer.effect(
   SnapshotImageRenderer,
   Effect.gen(function* () {
     const htmlScreenshot = yield* HtmlScreenshot;
+    const publicFileStore = yield* PublicFileStore;
     const { renderPaywallToHtml } = yield* Effect.promise(async () => {
       const preact = await import("preact");
       const runtimeGlobals = globalThis as unknown as {
@@ -96,8 +104,18 @@ export const SelfhostSnapshotImageRendererLive = Layer.effect(
               }),
           });
 
+          const inlined = yield* inlinePublicFileImages(html, publicFileStore).pipe(
+            Effect.mapError(
+              (error) =>
+                new SnapshotImageRenderError({
+                  cause: error.cause,
+                  message: error.message,
+                }),
+            ),
+          );
+
           return yield* htmlScreenshot
-            .screenshot({ deviceScaleFactor, height, html, width })
+            .screenshot({ deviceScaleFactor, height, html: inlined, width })
             .pipe(
               Effect.mapError(
                 (error) =>
@@ -115,7 +133,7 @@ export const SelfhostSnapshotImageRendererLive = Layer.effect(
 /** Builds the Chromium-backed snapshot renderer shared by MCP previews and thumbnails. */
 export const makeSelfhostSnapshotImageRendererLive = (
   screenshotConfig: ChromiumScreenshotConfig,
-): Layer.Layer<SnapshotImageRenderer> =>
+): Layer.Layer<SnapshotImageRenderer, never, PublicFileStore> =>
   SelfhostSnapshotImageRendererLive.pipe(
     Layer.provide(
       SelfhostHtmlScreenshotLive.pipe(
diff --git a/selfhost/entry/tests/Thumbnails.test.ts b/selfhost/entry/tests/Thumbnails.test.ts
index 5dff354f7..ef42c3625 100644
--- a/selfhost/entry/tests/Thumbnails.test.ts
+++ b/selfhost/entry/tests/Thumbnails.test.ts
@@ -1,5 +1,6 @@
 import { HtmlScreenshot } from "@voidhash/core/services/paywallThumbnails/HtmlScreenshot";
 import { SnapshotImageRenderer } from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
+import { PublicFileStore } from "@voidhash/core/services/storage/PublicFileStore";
 import { Effect, Layer } from "effect";
 import { describe, expect, it } from "vitest";
 
@@ -42,6 +43,15 @@ describe("self-host paywall thumbnail renderer", () => {
         Effect.provide(
           SelfhostSnapshotImageRendererLive.pipe(
             Layer.provide(screenshot),
+            Layer.provide(
+              Layer.succeed(PublicFileStore, {
+                publicBaseUrl: "https://files.test",
+                publicUrl: (key) => `https://files.test/files/${key}`,
+                putObject: () => Effect.void,
+                getObject: () => Effect.succeed(null),
+                deleteObject: () => Effect.void,
+              }),
+            ),
           ),
         ),
       ),

From 7998bd39e78c8bc603fcae537acbe76142e23054 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Wed, 22 Jul 2026 22:36:54 +0200
Subject: [PATCH 111/129] feat: remove assets and deployments from paywall

---
 .../paywalls/detail/paywall-detail-stats.tsx  | 347 ++++++++++++++++++
 .../paywalls/detail/paywall-preview-card.tsx  |  62 ++++
 .../features/studio/paywalls/paywall-card.tsx |  19 +-
 .../components/sidebar/project-sidebar.tsx    |  26 --
 .../skeleton/project-layout-skeleton.tsx      |  10 +-
 apps/www/src/routeTree.gen.ts                 |  78 ++--
 .../$projectSlug/assets.index.tsx             |  55 ---
 .../$projectSlug/deploys.tsx                  |  86 -----
 .../$projectSlug/paywalls.$id.tsx             | 186 ++++++++++
 9 files changed, 637 insertions(+), 232 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx
 delete mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx
 delete mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx

diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
new file mode 100644
index 000000000..d30f63859
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
@@ -0,0 +1,347 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import type { AnalyticsFilterType, CustomAnalyticsInsightQueryType } from "@voidhash/rpc";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+  type ChartConfig,
+  ChartContainer,
+  ChartTooltip,
+  ChartTooltipContent,
+  Skeleton,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import { ChartSplineIcon, MapPinOffIcon } from "lucide-react";
+import { useState } from "react";
+import { Area, AreaChart, CartesianGrid, XAxis, YAxis } from "recharts";
+import { customAnalyticsInsightQueryOptions } from "@/features/studio/lib/tanstack-query/analytics";
+
+// Conventional event names emitted by paywall compositions through the SDK
+// bridge. Every bridge event is stamped with the `paywall_location` property
+// of the location that served the paywall, which is what scopes these queries
+// to a single paywall.
+const PAYWALL_VIEWED_EVENT = "paywall_viewed";
+const PURCHASE_COMPLETED_EVENT = "purchase_completed";
+
+const CONVERSION_WINDOW_SECONDS = 7 * 86_400;
+
+const RANGE_OPTIONS = [
+  { label: "7D", value: "last_7d" },
+  { label: "30D", value: "last_30d" },
+  { label: "90D", value: "last_90d" },
+] as const;
+
+type StatsRange = (typeof RANGE_OPTIONS)[number]["value"];
+
+const isStatsRange = (value: string): value is StatsRange =>
+  RANGE_OPTIONS.some((option) => option.value === value);
+
+const locationFilter = (locationSlugs: string[]): AnalyticsFilterType => ({
+  field: "event.properties.paywall_location",
+  op: "in",
+  type: "predicate",
+  value: locationSlugs,
+});
+
+const buildTotalsDefinition = (
+  range: StatsRange,
+  locationSlugs: string[],
+): CustomAnalyticsInsightQueryType => ({
+  display: "number",
+  granularity: "day",
+  kind: "trends",
+  series: [
+    {
+      aggregation: "total_events",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: locationFilter(locationSlugs),
+      key: "views",
+      label: "Views",
+    },
+    {
+      aggregation: "unique_users",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: locationFilter(locationSlugs),
+      key: "viewers",
+      label: "Unique viewers",
+    },
+    {
+      aggregation: "total_events",
+      eventNames: [PURCHASE_COMPLETED_EVENT],
+      filters: locationFilter(locationSlugs),
+      key: "purchases",
+      label: "Purchases",
+    },
+  ],
+  timeRange: { preset: range },
+});
+
+const buildTimeseriesDefinition = (
+  range: StatsRange,
+  locationSlugs: string[],
+): CustomAnalyticsInsightQueryType => ({
+  display: "area",
+  granularity: "day",
+  kind: "trends",
+  series: [
+    {
+      aggregation: "total_events",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: locationFilter(locationSlugs),
+      key: "views",
+      label: "Views",
+    },
+    {
+      aggregation: "total_events",
+      eventNames: [PURCHASE_COMPLETED_EVENT],
+      filters: locationFilter(locationSlugs),
+      key: "purchases",
+      label: "Purchases",
+    },
+  ],
+  timeRange: { preset: range },
+});
+
+// The purchase step is intentionally unfiltered: the funnel is sequential per
+// user, so it measures "viewed this paywall, then purchased" even when the
+// purchase event isn't stamped with the paywall location.
+const buildFunnelDefinition = (
+  range: StatsRange,
+  locationSlugs: string[],
+): CustomAnalyticsInsightQueryType => ({
+  conversionWindowSeconds: CONVERSION_WINDOW_SECONDS,
+  kind: "funnels",
+  order: "sequential",
+  steps: [
+    {
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: locationFilter(locationSlugs),
+      key: "viewed",
+      label: "Viewed paywall",
+    },
+    {
+      eventNames: [PURCHASE_COMPLETED_EVENT],
+      key: "purchased",
+      label: "Purchased",
+    },
+  ],
+  timeRange: { preset: range },
+});
+
+interface StatTileProps {
+  label: string;
+  loading: boolean;
+  value: string;
+}
+
+function StatTile({ label, loading, value }: StatTileProps) {
+  return (
+    <div className="rounded-xl border bg-muted/20 p-5">
+      <p className="truncate text-muted-foreground text-sm">{label}</p>
+      {loading ? (
+        <Skeleton className="mt-2 h-8 w-20" />
+      ) : (
+        <p className="mt-2 font-semibold text-3xl tabular-nums tracking-tight">{value}</p>
+      )}
+    </div>
+  );
+}
+
+interface PaywallDetailStatsProps {
+  locationSlugs: string[];
+  projectId: string;
+}
+
+/**
+ * Performance section of the paywall detail page: KPI tiles (views, unique
+ * viewers, purchases, view→purchase conversion) plus a views/purchases area
+ * chart, scoped to the locations currently showing the paywall.
+ */
+export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailStatsProps) {
+  const [range, setRange] = useState<StatsRange>("last_30d");
+  const isLive = locationSlugs.length > 0;
+
+  const totalsQuery = useQuery({
+    ...customAnalyticsInsightQueryOptions({
+      definition: buildTotalsDefinition(range, locationSlugs),
+      projectId,
+    }),
+    enabled: isLive,
+  });
+  const timeseriesQuery = useQuery({
+    ...customAnalyticsInsightQueryOptions({
+      definition: buildTimeseriesDefinition(range, locationSlugs),
+      projectId,
+    }),
+    enabled: isLive,
+  });
+  const funnelQuery = useQuery({
+    ...customAnalyticsInsightQueryOptions({
+      definition: buildFunnelDefinition(range, locationSlugs),
+      projectId,
+    }),
+    enabled: isLive,
+  });
+
+  const totals = totalsQuery.data?.kind === "trends" ? totalsQuery.data : undefined;
+  const timeseries = timeseriesQuery.data?.kind === "trends" ? timeseriesQuery.data : undefined;
+  const funnel = funnelQuery.data?.kind === "funnels" ? funnelQuery.data : undefined;
+
+  const totalFor = (key: string) =>
+    totals?.series.find((series) => series.key === key)?.points[0]?.value ?? 0;
+
+  const chartRows = (() => {
+    if (!timeseries) {
+      return [];
+    }
+    const rows = new Map<number, { date: string; purchases: number; views: number }>();
+    for (const series of timeseries.series) {
+      for (const point of series.points) {
+        const timestamp = point.timestamp.getTime();
+        const row = rows.get(timestamp) ?? {
+          date: point.timestamp.toISOString(),
+          purchases: 0,
+          views: 0,
+        };
+        if (series.key === "views") {
+          row.views = point.value;
+        }
+        if (series.key === "purchases") {
+          row.purchases = point.value;
+        }
+        rows.set(timestamp, row);
+      }
+    }
+    return [...rows.entries()].sort(([a], [b]) => a - b).map(([, row]) => row);
+  })();
+
+  const chartConfig = {
+    purchases: { color: "var(--chart-2)", label: "Purchases" },
+    views: { color: "var(--chart-1)", label: "Views" },
+  } satisfies ChartConfig;
+
+  return (
+    <section className="space-y-4">
+      <div className="flex items-center justify-between">
+        <h2 className="font-medium text-lg">Performance</h2>
+        <ToggleGroup
+          onValueChange={(value: string) => {
+            if (value && isStatsRange(value)) {
+              setRange(value);
+            }
+          }}
+          type="single"
+          value={range}
+          variant="outline"
+        >
+          {RANGE_OPTIONS.map((option) => (
+            <ToggleGroupItem className="cursor-pointer" key={option.value} value={option.value}>
+              {option.label}
+            </ToggleGroupItem>
+          ))}
+        </ToggleGroup>
+      </div>
+
+      {isLive ? (
+        <>
+          <div className="grid gap-3 sm:grid-cols-2 xl:grid-cols-4">
+            <StatTile
+              label="Views"
+              loading={totalsQuery.isPending}
+              value={totalFor("views").toLocaleString()}
+            />
+            <StatTile
+              label="Unique viewers"
+              loading={totalsQuery.isPending}
+              value={totalFor("viewers").toLocaleString()}
+            />
+            <StatTile
+              label="Purchases"
+              loading={totalsQuery.isPending}
+              value={totalFor("purchases").toLocaleString()}
+            />
+            <StatTile
+              label="Conversion rate"
+              loading={funnelQuery.isPending}
+              value={`${((funnel?.totalConversionRate ?? 0) * 100).toFixed(1)}%`}
+            />
+          </div>
+
+          <Card>
+            <CardHeader>
+              <CardTitle>Views &amp; purchases</CardTitle>
+              <CardDescription>
+                Events captured at locations currently showing this paywall.
+              </CardDescription>
+            </CardHeader>
+            <CardContent>
+              {timeseriesQuery.isPending ? (
+                <Skeleton className="h-[280px] w-full" />
+              ) : chartRows.length > 0 ? (
+                <ChartContainer className="h-[280px] w-full" config={chartConfig}>
+                  <AreaChart accessibilityLayer data={chartRows} margin={{ left: 8, right: 20 }}>
+                    <CartesianGrid vertical={false} />
+                    <XAxis
+                      axisLine={false}
+                      dataKey="date"
+                      tickFormatter={(value: string) =>
+                        new Date(value).toLocaleDateString(undefined, {
+                          day: "numeric",
+                          month: "short",
+                        })
+                      }
+                      tickLine={false}
+                      tickMargin={10}
+                    />
+                    <YAxis axisLine={false} tickLine={false} width={42} />
+                    <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+                    <Area
+                      dataKey="views"
+                      fill="var(--chart-1)"
+                      fillOpacity={0.18}
+                      stroke="var(--chart-1)"
+                      strokeWidth={2}
+                      type="monotone"
+                    />
+                    <Area
+                      dataKey="purchases"
+                      fill="var(--chart-2)"
+                      fillOpacity={0.18}
+                      stroke="var(--chart-2)"
+                      strokeWidth={2}
+                      type="monotone"
+                    />
+                  </AreaChart>
+                </ChartContainer>
+              ) : (
+                <div className="flex h-[280px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+                  <div>
+                    <ChartSplineIcon className="mx-auto text-muted-foreground" />
+                    <p className="mt-3 text-sm">No events in this period yet</p>
+                  </div>
+                </div>
+              )}
+            </CardContent>
+          </Card>
+        </>
+      ) : (
+        <Card>
+          <CardContent className="flex h-[280px] items-center justify-center">
+            <div className="text-center">
+              <MapPinOffIcon className="mx-auto text-muted-foreground" />
+              <p className="mt-3 font-medium text-sm">Not live yet</p>
+              <p className="mt-1 text-muted-foreground text-sm">
+                Assign this paywall to a location to start collecting stats.
+              </p>
+            </div>
+          </CardContent>
+        </Card>
+      )}
+    </section>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx
new file mode 100644
index 000000000..7ad281e7b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx
@@ -0,0 +1,62 @@
+"use client";
+
+import type { Paywall } from "@voidhash/rpc";
+import { Badge, Button, Card, CardContent } from "@voidhash/ui";
+import { ExternalLinkIcon, Smartphone } from "lucide-react";
+
+interface PaywallPreviewCardProps {
+  liveRelease: { htmlUrl: string; version: number } | null;
+  paywall: typeof Paywall.Type;
+}
+
+/**
+ * Phone-frame preview of the paywall's latest rendered thumbnail, with a link
+ * to the live HTML artifact when a released version is currently being shown.
+ */
+export function PaywallPreviewCard({ liveRelease, paywall }: PaywallPreviewCardProps) {
+  return (
+    <Card className="gap-0 overflow-hidden py-0">
+      <div className="relative flex aspect-[246/278] items-center justify-center overflow-hidden bg-linear-150 from-blue-ribbon-950 to-electric-violet-950">
+        {paywall.thumbnailUrl && (
+          <img
+            alt=""
+            aria-hidden="true"
+            className="pointer-events-none absolute inset-0 size-full scale-125 object-cover blur-[32px]"
+            loading="lazy"
+            src={paywall.thumbnailUrl}
+          />
+        )}
+
+        <div className="relative z-10 aspect-[532/1119] h-[86.34%] overflow-hidden rounded-[12px] bg-zinc-950 shadow-[inset_0_0_4px_rgb(255_255_255/0.13)] ring-1 ring-inset ring-zinc-800">
+          <div className="absolute inset-x-[2.26%] inset-y-[1.16%] flex items-center justify-center overflow-hidden rounded-[10px] bg-zinc-950">
+            {paywall.thumbnailUrl ? (
+              <img
+                alt={paywall.name}
+                className="size-full object-cover object-top"
+                loading="lazy"
+                src={paywall.thumbnailUrl}
+              />
+            ) : (
+              <Smartphone className="h-10 w-10 text-zinc-400 opacity-30" />
+            )}
+          </div>
+        </div>
+      </div>
+      <CardContent className="flex items-center justify-between px-4 py-3">
+        {liveRelease ? (
+          <>
+            <Badge variant="secondary">Live · v{liveRelease.version}</Badge>
+            <Button asChild size="sm" variant="ghost">
+              <a href={liveRelease.htmlUrl} rel="noreferrer" target="_blank">
+                View live
+                <ExternalLinkIcon />
+              </a>
+            </Button>
+          </>
+        ) : (
+          <span className="text-muted-foreground text-sm">Not live at any location</span>
+        )}
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/paywall-card.tsx b/apps/www/src/features/studio/paywalls/paywall-card.tsx
index 2c412ab76..d943bb948 100644
--- a/apps/www/src/features/studio/paywalls/paywall-card.tsx
+++ b/apps/www/src/features/studio/paywalls/paywall-card.tsx
@@ -26,6 +26,7 @@ import {
   MoreHorizontalIcon,
   PencilIcon,
   Smartphone,
+  SquarePenIcon,
   Trash2Icon,
 } from "lucide-react";
 import { useState } from "react";
@@ -46,9 +47,10 @@ interface PaywallCardProps {
 }
 
 /**
- * A single paywall tile in the dashboard grid: a link into the designer plus a
- * kebab menu with Rename / Archive (or Restore) / Delete. Archived paywalls are
- * dimmed and badged, and expose Restore in place of Archive.
+ * A single paywall tile in the dashboard grid: a link to the paywall detail
+ * page plus a kebab menu with Edit (straight into the designer) / Rename /
+ * Archive (or Restore) / Delete. Archived paywalls are dimmed and badged, and
+ * expose Restore in place of Archive.
  */
 export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallCardProps) {
   const queryClient = useQueryClient();
@@ -99,7 +101,7 @@ export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallC
           isArchived ? "opacity-60" : ""
         }`}
         params={{ id: paywall.id, organizationSlug, projectSlug }}
-        to="/studio/$organizationSlug/$projectSlug/design/$id"
+        to="/studio/$organizationSlug/$projectSlug/paywalls/$id"
       >
         {/* Preview Area */}
         <div className="relative flex aspect-[246/278] items-center justify-center overflow-hidden bg-linear-150 from-blue-ribbon-950 to-electric-violet-950">
@@ -158,6 +160,15 @@ export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallC
             </Button>
           </DropdownMenuTrigger>
           <DropdownMenuContent align="end">
+            <DropdownMenuItem asChild>
+              <Link
+                params={{ id: paywall.id, organizationSlug, projectSlug }}
+                to="/studio/$organizationSlug/$projectSlug/design/$id"
+              >
+                <SquarePenIcon />
+                Edit
+              </Link>
+            </DropdownMenuItem>
             <DropdownMenuItem onSelect={() => setRenameOpen(true)}>
               <PencilIcon />
               Rename
diff --git a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
index 48bc93530..4b456eee0 100644
--- a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
+++ b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
@@ -8,11 +8,9 @@ import {
   FlaskConical,
   GaugeIcon,
   Gift,
-  ImagesIcon,
   Logs,
   MapPin,
   Package2,
-  Rocket,
   Settings,
   Smartphone,
   ToggleLeft,
@@ -185,12 +183,6 @@ export function ProjectSidebar({
               ) ||
               pathname.startsWith(
                 `/studio/${organizationSlug}/${projectSlug}/settings/paywall-locations`,
-              ) ||
-              pathname.startsWith(
-                `/studio/${organizationSlug}/${projectSlug}/assets`,
-              ) ||
-              pathname.startsWith(
-                `/studio/${organizationSlug}/${projectSlug}/deploys`,
               ),
             title: "Paywalls",
             url: `/studio/${organizationSlug}/${projectSlug}/paywalls`,
@@ -204,15 +196,6 @@ export function ProjectSidebar({
                 title: "Paywalls",
                 url: `/studio/${organizationSlug}/${projectSlug}/paywalls`,
               },
-              {
-                icon: ImagesIcon,
-                isActive: () =>
-                  pathname.startsWith(
-                    `/studio/${organizationSlug}/${projectSlug}/assets`,
-                  ),
-                title: "Assets",
-                url: `/studio/${organizationSlug}/${projectSlug}/assets`,
-              },
               {
                 icon: MapPin,
                 isActive: () =>
@@ -222,15 +205,6 @@ export function ProjectSidebar({
                 title: "Paywall Locations",
                 url: `/studio/${organizationSlug}/${projectSlug}/settings/paywall-locations`,
               },
-              {
-                icon: Rocket,
-                isActive: () =>
-                  pathname.startsWith(
-                    `/studio/${organizationSlug}/${projectSlug}/deploys`,
-                  ),
-                title: "Deploys",
-                url: `/studio/${organizationSlug}/${projectSlug}/deploys`,
-              },
             ],
           },
           // The Experimentation suite (Feature Flags + A/B Tests) is gated behind
diff --git a/apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx b/apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx
index d1730ff15..122082db2 100644
--- a/apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx
+++ b/apps/www/src/features/studio/shell/components/skeleton/project-layout-skeleton.tsx
@@ -22,7 +22,6 @@ import {
   type LucideIcon,
   MapPin,
   Package2,
-  Rocket,
   Settings,
   Smartphone,
   Users,
@@ -121,8 +120,7 @@ export function ProjectLayoutSkeleton({
       icon: Smartphone,
       isActive: () =>
         pathname.startsWith(`${base}/paywalls`) ||
-        pathname.startsWith(`${base}/settings/paywall-locations`) ||
-        pathname.startsWith(`${base}/deploys`),
+        pathname.startsWith(`${base}/settings/paywall-locations`),
       title: "Paywalls",
       url: `${base}/paywalls`,
       items: [
@@ -139,12 +137,6 @@ export function ProjectLayoutSkeleton({
           title: "Paywall Locations",
           url: `${base}/settings/paywall-locations`,
         },
-        {
-          icon: Rocket,
-          isActive: () => pathname.startsWith(`${base}/deploys`),
-          title: "Deploys",
-          url: `${base}/deploys`,
-        },
       ],
     },
     {
diff --git a/apps/www/src/routeTree.gen.ts b/apps/www/src/routeTree.gen.ts
index 3615fd862..bbcab5676 100644
--- a/apps/www/src/routeTree.gen.ts
+++ b/apps/www/src/routeTree.gen.ts
@@ -49,14 +49,12 @@ import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlug
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/index'
 import { Route as StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRouteImport } from './routes/studio/_authenticated/_designer/$organizationSlug.$projectSlug.design.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview'
-import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index'
-import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index'
 import { Route as StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
@@ -64,6 +62,7 @@ import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlug
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.trials'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers'
@@ -306,15 +305,6 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRout
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
-const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute =
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRouteImport.update(
-    {
-      id: '/deploys',
-      path: '/deploys',
-      getParentRoute: () =>
-        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
-    } as any,
-  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRouteImport.update(
     {
@@ -369,15 +359,6 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsI
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
-const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute =
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRouteImport.update(
-    {
-      id: '/assets/',
-      path: '/assets/',
-      getParentRoute: () =>
-        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
-    } as any,
-  )
 const StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute =
   StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRouteImport.update(
     {
@@ -450,6 +431,15 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsI
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport.update(
+    {
+      id: '/paywalls/$id',
+      path: '/paywalls/$id',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRouteImport.update(
     {
@@ -630,7 +620,6 @@ export interface FileRoutesByFullPath {
   '/studio/$organizationSlug': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChildren
   '/studio/$organizationSlug/$projectSlug': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteWithChildren
   '/studio/$organizationSlug/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute
-  '/studio/$organizationSlug/$projectSlug/deploys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
   '/studio/$organizationSlug/$projectSlug/overview': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
   '/studio/$organizationSlug/$projectSlug/design/$id': typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
   '/studio/$organizationSlug/$projectSlug/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
@@ -644,6 +633,7 @@ export interface FileRoutesByFullPath {
   '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   '/studio/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   '/studio/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  '/studio/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
   '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
@@ -651,7 +641,6 @@ export interface FileRoutesByFullPath {
   '/studio/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   '/studio/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
   '/studio/$organizationSlug/~/settings/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
-  '/studio/$organizationSlug/$projectSlug/assets/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
   '/studio/$organizationSlug/$projectSlug/experiments/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
   '/studio/$organizationSlug/$projectSlug/flags/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
   '/studio/$organizationSlug/$projectSlug/paywalls/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
@@ -695,7 +684,6 @@ export interface FileRoutesByTo {
   '/api/auth/password/sign-up': typeof ApiAuthPasswordSignUpRoute
   '/studio/create-organization': typeof StudioAuthenticatedCreateOrganizationIndexRoute
   '/studio/$organizationSlug': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute
-  '/studio/$organizationSlug/$projectSlug/deploys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
   '/studio/$organizationSlug/$projectSlug/overview': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
   '/studio/$organizationSlug/$projectSlug/design/$id': typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
   '/studio/$organizationSlug/$projectSlug': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
@@ -709,6 +697,7 @@ export interface FileRoutesByTo {
   '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   '/studio/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   '/studio/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  '/studio/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
   '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
@@ -716,7 +705,6 @@ export interface FileRoutesByTo {
   '/studio/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   '/studio/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
   '/studio/$organizationSlug/~/settings': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
-  '/studio/$organizationSlug/$projectSlug/assets': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
   '/studio/$organizationSlug/$projectSlug/experiments': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
   '/studio/$organizationSlug/$projectSlug/flags': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
   '/studio/$organizationSlug/$projectSlug/paywalls': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
@@ -770,7 +758,6 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard/_organization/$organizationSlug': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChildren
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteWithChildren
   '/studio/_authenticated/_dashboard/_organization/$organizationSlug/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugIndexRoute
-  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
   '/studio/_authenticated/_designer/$organizationSlug/$projectSlug/design/$id': typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
@@ -784,6 +771,7 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
@@ -791,7 +779,6 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
   '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
-  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
@@ -843,7 +830,6 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug'
     | '/studio/$organizationSlug/$projectSlug'
     | '/studio/$organizationSlug/'
-    | '/studio/$organizationSlug/$projectSlug/deploys'
     | '/studio/$organizationSlug/$projectSlug/overview'
     | '/studio/$organizationSlug/$projectSlug/design/$id'
     | '/studio/$organizationSlug/$projectSlug/'
@@ -857,6 +843,7 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
     | '/studio/$organizationSlug/$projectSlug/analytics/trials'
     | '/studio/$organizationSlug/$projectSlug/experiments/$id'
+    | '/studio/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/$organizationSlug/$projectSlug/flags/$id'
     | '/studio/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/$organizationSlug/$projectSlug/products/$id'
@@ -864,7 +851,6 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
     | '/studio/$organizationSlug/$projectSlug/settings/perks'
     | '/studio/$organizationSlug/~/settings/'
-    | '/studio/$organizationSlug/$projectSlug/assets/'
     | '/studio/$organizationSlug/$projectSlug/experiments/'
     | '/studio/$organizationSlug/$projectSlug/flags/'
     | '/studio/$organizationSlug/$projectSlug/paywalls/'
@@ -908,7 +894,6 @@ export interface FileRouteTypes {
     | '/api/auth/password/sign-up'
     | '/studio/create-organization'
     | '/studio/$organizationSlug'
-    | '/studio/$organizationSlug/$projectSlug/deploys'
     | '/studio/$organizationSlug/$projectSlug/overview'
     | '/studio/$organizationSlug/$projectSlug/design/$id'
     | '/studio/$organizationSlug/$projectSlug'
@@ -922,6 +907,7 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
     | '/studio/$organizationSlug/$projectSlug/analytics/trials'
     | '/studio/$organizationSlug/$projectSlug/experiments/$id'
+    | '/studio/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/$organizationSlug/$projectSlug/flags/$id'
     | '/studio/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/$organizationSlug/$projectSlug/products/$id'
@@ -929,7 +915,6 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
     | '/studio/$organizationSlug/$projectSlug/settings/perks'
     | '/studio/$organizationSlug/~/settings'
-    | '/studio/$organizationSlug/$projectSlug/assets'
     | '/studio/$organizationSlug/$projectSlug/experiments'
     | '/studio/$organizationSlug/$projectSlug/flags'
     | '/studio/$organizationSlug/$projectSlug/paywalls'
@@ -982,7 +967,6 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard/_organization/$organizationSlug'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug'
     | '/studio/_authenticated/_dashboard/_organization/$organizationSlug/'
-    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/overview'
     | '/studio/_authenticated/_designer/$organizationSlug/$projectSlug/design/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/'
@@ -996,6 +980,7 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id'
@@ -1003,7 +988,6 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks'
     | '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/'
-    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/'
@@ -1318,13 +1302,6 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
-    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys': {
-      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys'
-      path: '/deploys'
-      fullPath: '/studio/$organizationSlug/$projectSlug/deploys'
-      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRouteImport
-      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
-    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/'
       path: '/settings'
@@ -1367,13 +1344,6 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
-    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/': {
-      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/'
-      path: '/assets'
-      fullPath: '/studio/$organizationSlug/$projectSlug/assets/'
-      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRouteImport
-      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
-    }
     '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/': {
       id: '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/'
       path: '/~/settings'
@@ -1430,6 +1400,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id'
+      path: '/paywalls/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/paywalls/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials'
       path: '/analytics/trials'
@@ -1636,7 +1613,6 @@ const StudioAuthenticatedDashboardOrganizationOrganizationSlugRouteRouteWithChil
   )
 
 interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteChildren {
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRoute
@@ -1649,13 +1625,13 @@ interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRou
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIndexRoute
@@ -1673,8 +1649,6 @@ interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRou
 
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteChildren: StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteChildren =
   {
-    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute:
-      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugDeploysRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugOverviewRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugIndexRoute:
@@ -1699,6 +1673,8 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteCh
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute:
@@ -1711,8 +1687,6 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteCh
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute,
-    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute:
-      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAssetsIndexRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute:
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx
deleted file mode 100644
index 2c81ee5e9..000000000
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets.index.tsx
+++ /dev/null
@@ -1,55 +0,0 @@
-import { createFileRoute } from "@tanstack/react-router";
-import { Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
-import { useAuth } from "@/features/studio/components/auth-context";
-import { CurrentUser } from "@/features/studio/lib/utils/current-user";
-import { AssetLibrary } from "@/features/studio/paywall-assets/asset-library";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-
-export const Route = createFileRoute(
-  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/assets/",
-)({
-  component: AssetsIndexPage,
-  errorComponent: AssetsIndexPageError,
-});
-
-function AssetsIndexPageError() {
-  return (
-    <VoidhashErrorCard
-      error={{
-        code: "INTERNAL_SERVER_ERROR",
-        message: "An error occurred loading assets",
-      }}
-    />
-  );
-}
-
-/**
- * Organization-scoped image asset library, rendered full-page. Assets live at
- * the organization level but are surfaced under the project's Paywalls group,
- * since they are consumed as paywall backgrounds; the org id is resolved from
- * the current project.
- */
-function AssetsIndexPage() {
-  const { organizationSlug, projectSlug } = Route.useParams();
-  const { user } = useAuth();
-  const project = CurrentUser.getProjectBySlugs(
-    user,
-    organizationSlug as string,
-    projectSlug as string,
-  );
-
-  if (!project) {
-    throw new Error("Project not found");
-  }
-
-  return (
-    <Page>
-      <PageHeader>
-        <PageHeaderTitle>Assets</PageHeaderTitle>
-      </PageHeader>
-      <div className="mx-auto w-full max-w-6xl px-4 pt-4">
-        <AssetLibrary organizationId={project.organizationId} />
-      </div>
-    </Page>
-  );
-}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx
deleted file mode 100644
index a1de5b096..000000000
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys.tsx
+++ /dev/null
@@ -1,86 +0,0 @@
-import { useSuspenseQuery } from "@tanstack/react-query";
-import { createFileRoute } from "@tanstack/react-router";
-import { Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
-import { useAuth } from "@/features/studio/components/auth-context";
-
-import { listPaywallDeploysOptions } from "@/features/studio/lib/tanstack-query";
-import { CurrentUser } from "@/features/studio/lib/utils/current-user";
-import { PaywallDeployRecord } from "@/features/studio/paywall-deploys/paywall-deploy-record";
-import { SettingsCard } from "@/features/studio/settings";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-
-export const Route = createFileRoute(
-  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/deploys",
-)({
-  component: ProjectDeploysPage,
-  errorComponent: ProjectDeploysPageError,
-  pendingComponent: ProjectDeploysPageSkeleton,
-});
-
-function ProjectDeploysPageError() {
-  return (
-    <VoidhashErrorCard
-      error={{
-        code: "INTERNAL_SERVER_ERROR",
-        message: "An error occurred loading deploys",
-      }}
-    />
-  );
-}
-
-function ProjectDeploysPageSkeleton() {
-  return (
-    <Page>
-      <PageHeader>
-        <PageHeaderTitle>Deploys</PageHeaderTitle>
-      </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
-        <SettingsCard>
-          <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
-            Loading deploys...
-          </div>
-        </SettingsCard>
-      </div>
-    </Page>
-  );
-}
-
-function ProjectDeploysPage() {
-  const { organizationSlug, projectSlug } = Route.useParams();
-  const { user } = useAuth();
-  const project = CurrentUser.getProjectBySlugs(
-    user,
-    organizationSlug as string,
-    projectSlug as string,
-  );
-
-  if (!project) {
-    throw new Error("Project not found");
-  }
-
-  const { data: deploys } = useSuspenseQuery(listPaywallDeploysOptions({ projectId: project.id }));
-
-  return (
-    <Page>
-      <PageHeader>
-        <PageHeaderTitle>Deploys</PageHeaderTitle>
-      </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4 pb-16">
-        {deploys.length === 0 ? (
-          <SettingsCard>
-            <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
-              No code deploys yet. Run <span className="font-mono">voidhash deploy</span> from your
-              project to push paywalls built in code.
-            </div>
-          </SettingsCard>
-        ) : (
-          <SettingsCard className="grid gap-0 divide-y">
-            {deploys.map((deploy) => (
-              <PaywallDeployRecord deploy={deploy} key={deploy.id} projectId={project.id} />
-            ))}
-          </SettingsCard>
-        )}
-      </div>
-    </Page>
-  );
-}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
new file mode 100644
index 000000000..1c2d0c455
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
@@ -0,0 +1,186 @@
+import { useQuery, useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute, Link } from "@tanstack/react-router";
+import {
+  Badge,
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  Button,
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+  Page,
+  PageHeader,
+} from "@voidhash/ui";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { PaywallDetailStats } from "@/features/studio/paywalls/detail/paywall-detail-stats";
+import { PaywallPreviewCard } from "@/features/studio/paywalls/detail/paywall-preview-card";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listPaywallLocationsOptions } from "@/features/studio/lib/tanstack-query/paywall-locations";
+import {
+  getPaywallDraftReleaseOptions,
+  listPaywallsOptions,
+} from "@/features/studio/lib/tanstack-query/paywalls";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id",
+)({
+  component: PaywallDetailPage,
+  errorComponent: PaywallDetailPageError,
+});
+
+function PaywallDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the paywall",
+      }}
+    />
+  );
+}
+
+function PaywallDetailPage() {
+  const { id, organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: paywalls } = useSuspenseQuery(
+    listPaywallsOptions({ includeArchived: true, projectId: project.id }),
+  );
+  const { data: locations } = useSuspenseQuery(
+    listPaywallLocationsOptions({ projectId: project.id }),
+  );
+  const { data: draftRelease } = useQuery(
+    getPaywallDraftReleaseOptions({ paywallId: id as string }),
+  );
+
+  const paywall = paywalls.find((item) => item.id === (id as string));
+
+  if (!paywall) {
+    return (
+      <VoidhashErrorCard error={{ code: "NOT_FOUND", message: "This paywall does not exist." }} />
+    );
+  }
+
+  const isArchived = paywall.archivedAt != null;
+  const liveLocations = locations.filter(
+    (location) => location.activeShowing?.paywallId === paywall.id,
+  );
+  const liveRelease = liveLocations.reduce<{ htmlUrl: string; version: number } | null>(
+    (latest, location) => {
+      const release = location.activeShowing?.paywallRelease;
+      if (!release) {
+        return latest;
+      }
+      return latest && latest.version >= release.version
+        ? latest
+        : { htmlUrl: release.htmlUrl, version: release.version };
+    },
+    null,
+  );
+
+  return (
+    <Page>
+      <PageHeader
+        className="px-2"
+        rightActions={
+          <Button asChild className="mr-2">
+            <Link
+              params={{ id: paywall.id, organizationSlug, projectSlug }}
+              to="/studio/$organizationSlug/$projectSlug/design/$id"
+            >
+              Edit paywall
+            </Link>
+          </Button>
+        }
+      >
+        <div className="flex items-center gap-2">
+          <Breadcrumb>
+            <BreadcrumbList>
+              <BreadcrumbItem>
+                <BreadcrumbLink asChild>
+                  <Link
+                    params={{ organizationSlug, projectSlug }}
+                    to="/studio/$organizationSlug/$projectSlug/paywalls"
+                  >
+                    Paywalls
+                  </Link>
+                </BreadcrumbLink>
+              </BreadcrumbItem>
+              <BreadcrumbSeparator />
+              <BreadcrumbItem>
+                <BreadcrumbPage>{paywall.name}</BreadcrumbPage>
+              </BreadcrumbItem>
+            </BreadcrumbList>
+          </Breadcrumb>
+          {isArchived && <Badge variant="secondary">Archived</Badge>}
+        </div>
+      </PageHeader>
+
+      <div className="mx-auto max-w-5xl px-4 py-8">
+        <div className="grid grid-cols-12 gap-6">
+          <div className="col-span-8 space-y-6">
+            <PaywallDetailStats
+              locationSlugs={liveLocations.map((location) => location.slug)}
+              projectId={project.id}
+            />
+          </div>
+          <div className="col-span-4 space-y-6">
+            <PaywallPreviewCard liveRelease={liveRelease} paywall={paywall} />
+            <Card>
+              <CardHeader>
+                <CardTitle className="text-sm">Details</CardTitle>
+              </CardHeader>
+              <CardContent className="space-y-4 text-sm">
+                <div>
+                  <p className="text-muted-foreground">Slug</p>
+                  <p className="font-mono text-xs">{paywall.slug}</p>
+                </div>
+                <div>
+                  <p className="text-muted-foreground">Live version</p>
+                  <p>{liveRelease ? `v${liveRelease.version}` : "Not live"}</p>
+                </div>
+                <div>
+                  <p className="text-muted-foreground">Latest draft</p>
+                  <p>{draftRelease ? `v${draftRelease.version}` : "—"}</p>
+                </div>
+                <div>
+                  <p className="text-muted-foreground">Locations</p>
+                  {liveLocations.length > 0 ? (
+                    <ul className="mt-1 space-y-1">
+                      {liveLocations.map((location) => (
+                        <li key={location.id}>
+                          {location.name}{" "}
+                          <span className="font-mono text-muted-foreground text-xs">
+                            {location.slug}
+                          </span>
+                        </li>
+                      ))}
+                    </ul>
+                  ) : (
+                    <p>None</p>
+                  )}
+                </div>
+              </CardContent>
+            </Card>
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}

From 8f399e2accd85fd1ae5d2abe8ff7ce628142c5b9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 23 Jul 2026 14:09:46 +0200
Subject: [PATCH 112/129] feat: styling improvements + component canvas

---
 apps/www/THIRD_PARTY_NOTICES.md               |  26 ++
 apps/www/package.json                         |   1 +
 .../components/docs/component-overview.tsx    |  14 +
 .../cards/account-access.tsx                  |  86 ++++++
 .../cards/card-overview.tsx                   |  77 +++++
 .../cards/claimable-balance.tsx               |  51 ++++
 .../cards/contribution-history.tsx            |  92 ++++++
 .../component-overview/cards/cover-art.tsx    |  48 +++
 .../cards/dividend-income.tsx                 | 123 ++++++++
 .../cards/empty-connect-bank.tsx              |  40 +++
 .../cards/empty-distribute-track.tsx          |  41 +++
 .../cards/empty-explore-catalog.tsx           |  40 +++
 .../docs/component-overview/cards/faq.tsx     | 103 +++++++
 .../component-overview/cards/front-door.tsx   |  41 +++
 .../cards/index-investing.tsx                 |  22 ++
 .../cards/kitchen-island.tsx                  | 162 ++++++++++
 .../component-overview/cards/loading-card.tsx |  25 ++
 .../cards/new-milestone.tsx                   |  50 +++
 .../cards/notification-settings.tsx           |  98 ++++++
 .../component-overview/cards/payments.tsx     | 169 +++++++++++
 .../cards/payout-threshold.tsx                | 101 +++++++
 .../component-overview/cards/power-usage.tsx  |  81 +++++
 .../component-overview/cards/preferences.tsx  |  92 ++++++
 .../cards/project-actions.tsx                 |  96 ++++++
 .../component-overview/cards/qr-connect.tsx   |  36 +++
 .../cards/receiving-method.tsx                |  90 ++++++
 .../cards/recent-transactions.tsx             | 276 +++++++++++++++++
 .../cards/release-catalog.tsx                 |  99 ++++++
 .../cards/roller-shades.tsx                   |  70 +++++
 .../cards/savings-progress.tsx                |  93 ++++++
 .../cards/savings-targets.tsx                 | 116 +++++++
 .../component-overview/cards/sidebar-nav.tsx  | 285 ++++++++++++++++++
 .../component-overview/cards/social-links.tsx |  85 ++++++
 .../cards/stock-performance.tsx               | 119 ++++++++
 .../cards/syncing-state.tsx                   |  34 +++
 .../cards/transfer-funds.tsx                  | 107 +++++++
 .../cards/upcoming-payments.tsx               |  54 ++++
 .../component-overview/icon-placeholder.tsx   |  31 ++
 .../docs/component-overview/index.tsx         | 100 ++++++
 .../docs/component-overview/preview-config.ts |  10 +
 .../components/docs/component-registry.tsx    |   1 +
 .../design/components/layout/page.tsx         |  10 +-
 .../design/content/docs/components/meta.yaml  |   1 +
 .../content/docs/components/overview.mdx      |   7 +
 .../designer/components/ui/mode-toggle.tsx    |   2 +-
 .../paywalls/designer/panels/action-panel.tsx |   4 +-
 .../studio/paywalls/paywall-actions-menu.tsx  | 185 ++++++++++++
 .../features/studio/paywalls/paywall-card.tsx | 163 +---------
 .../studio/paywalls/paywall-table.tsx         | 109 +++++++
 .../studio/paywalls/paywall-view-settings.tsx |  79 +++++
 apps/www/src/routeTree.gen.ts                 |  52 ++--
 apps/www/src/routes/design/$.tsx              |   2 +-
 apps/www/src/routes/design/index.tsx          |   2 +-
 .../$projectSlug/paywalls.index.tsx           |  20 +-
 packages/ui/components/page.tsx               |   4 +-
 packages/ui/components/theme-toggle.tsx       |  19 +-
 packages/ui/components/ui/breadcrumb.tsx      |   2 +-
 packages/ui/components/ui/button.tsx          |   9 +-
 packages/ui/components/ui/card.tsx            |   4 +-
 packages/ui/components/ui/chart.tsx           |  10 +-
 packages/ui/components/ui/empty.tsx           | 100 ++++++
 packages/ui/components/ui/item.tsx            | 182 +++++++++++
 packages/ui/components/ui/native-select.tsx   |  59 ++++
 packages/ui/components/ui/select.tsx          |  21 +-
 packages/ui/components/ui/slider.tsx          |   2 +-
 packages/ui/components/ui/spinner.tsx         |  17 ++
 packages/ui/components/ui/switch.tsx          |   2 +-
 packages/ui/components/ui/tabs.tsx            |  93 +++++-
 packages/ui/components/ui/toggle-group.tsx    |  81 +----
 packages/ui/index.ts                          |   5 +
 packages/ui/package.json                      |   5 +
 pnpm-lock.yaml                                |  37 ++-
 72 files changed, 4266 insertions(+), 307 deletions(-)
 create mode 100644 apps/www/THIRD_PARTY_NOTICES.md
 create mode 100644 apps/www/src/features/design/components/docs/component-overview.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/account-access.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/card-overview.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/claimable-balance.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/contribution-history.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/dividend-income.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/empty-connect-bank.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/empty-distribute-track.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/empty-explore-catalog.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/faq.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/front-door.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/index-investing.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/loading-card.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/new-milestone.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/notification-settings.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/payments.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/payout-threshold.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/power-usage.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/preferences.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/receiving-method.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/recent-transactions.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/savings-progress.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/savings-targets.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/sidebar-nav.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/stock-performance.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/syncing-state.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/transfer-funds.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/cards/upcoming-payments.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/icon-placeholder.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/index.tsx
 create mode 100644 apps/www/src/features/design/components/docs/component-overview/preview-config.ts
 create mode 100644 apps/www/src/features/design/content/docs/components/overview.mdx
 create mode 100644 apps/www/src/features/studio/paywalls/paywall-actions-menu.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/paywall-table.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/paywall-view-settings.tsx
 create mode 100644 packages/ui/components/ui/empty.tsx
 create mode 100644 packages/ui/components/ui/item.tsx
 create mode 100644 packages/ui/components/ui/native-select.tsx
 create mode 100644 packages/ui/components/ui/spinner.tsx

diff --git a/apps/www/THIRD_PARTY_NOTICES.md b/apps/www/THIRD_PARTY_NOTICES.md
new file mode 100644
index 000000000..900a2e588
--- /dev/null
+++ b/apps/www/THIRD_PARTY_NOTICES.md
@@ -0,0 +1,26 @@
+# Third-party notices
+
+`src/features/design/components/docs/component-overview/` adapts the
+`preview-02` component composition from shadcn/ui.
+
+MIT License
+
+Copyright (c) 2023 shadcn
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/apps/www/package.json b/apps/www/package.json
index 0fe1b9f24..d768653f0 100644
--- a/apps/www/package.json
+++ b/apps/www/package.json
@@ -90,6 +90,7 @@
     "react-dom": "catalog:",
     "react-easy-crop": "^6.0.2",
     "react-hook-form": "catalog:",
+    "react-qr-code": "^2.2.0",
     "recharts": "^2.15.0",
     "resend": "^4.5.1",
     "server-only": "^0.0.1",
diff --git a/apps/www/src/features/design/components/docs/component-overview.tsx b/apps/www/src/features/design/components/docs/component-overview.tsx
new file mode 100644
index 000000000..f2488d0cc
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview.tsx
@@ -0,0 +1,14 @@
+"use client";
+
+import Preview02Example from "./component-overview/index";
+
+/**
+ * Renders shadcn's preview-02 composition using the Voidhash UI primitives.
+ */
+export function ComponentOverview() {
+  return (
+    <div className="not-prose">
+      <Preview02Example />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/account-access.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/account-access.tsx
new file mode 100644
index 000000000..24981f391
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/account-access.tsx
@@ -0,0 +1,86 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Field, FieldGroup, FieldLabel } from "@voidhash/ui";
+import { Input } from "@voidhash/ui";
+import { Item, ItemContent, ItemDescription, ItemMedia, ItemTitle } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function AccountAccess() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Account Access</CardTitle>
+        <CardDescription>Update your credentials or re-authenticate.</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="email-address">Email Address</FieldLabel>
+            <Input id="email-address" type="email" defaultValue="artist@studio.inc" />
+          </Field>
+          <Field>
+            <div className="flex items-center justify-between">
+              <FieldLabel htmlFor="current-password">Current Password</FieldLabel>
+              <a
+                href="#"
+                className="text-xs font-medium tracking-wider text-muted-foreground uppercase hover:text-foreground"
+              >
+                Forgot?
+              </a>
+            </div>
+            <Input id="current-password" type="password" defaultValue="password123" />
+          </Field>
+        </FieldGroup>
+      </CardContent>
+      <CardFooter className="flex-col gap-4">
+        <Button className="w-full">
+          <IconPlaceholder
+            lucide="LockKeyholeIcon"
+            tabler="IconLock"
+            hugeicons="SquareLock02Icon"
+            phosphor="LockKeyIcon"
+            remixicon="RiLockLine"
+          />
+          Update Security
+        </Button>
+        <Item asChild variant="muted">
+          <a href="#">
+            <ItemMedia variant="icon">
+              <IconPlaceholder
+                lucide="AlertCircleIcon"
+                tabler="IconAlertCircle"
+                hugeicons="AlertCircleIcon"
+                phosphor="WarningCircleIcon"
+                remixicon="RiErrorWarningLine"
+                className="text-destructive"
+              />
+            </ItemMedia>
+            <ItemContent>
+              <ItemTitle>Danger Zone</ItemTitle>
+              <ItemDescription className="line-clamp-1">
+                Archive account and remove catalog
+              </ItemDescription>
+            </ItemContent>
+            <IconPlaceholder
+              lucide="ArrowRightIcon"
+              tabler="IconArrowRight"
+              hugeicons="ArrowRight01Icon"
+              phosphor="ArrowRightIcon"
+              remixicon="RiArrowRightLine"
+              className="size-4"
+            />
+          </a>
+        </Item>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/card-overview.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/card-overview.tsx
new file mode 100644
index 000000000..74c81fe07
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/card-overview.tsx
@@ -0,0 +1,77 @@
+"use client";
+
+import { Bar, BarChart, XAxis } from "recharts";
+
+import { Badge } from "@voidhash/ui";
+import { Button } from "@voidhash/ui";
+import { Card, CardContent, CardDescription, CardTitle } from "@voidhash/ui";
+import { ChartContainer, ChartTooltip, ChartTooltipContent, type ChartConfig } from "@voidhash/ui";
+
+const activityData = [
+  { month: "Jan", amount: 40 },
+  { month: "Feb", amount: 55 },
+  { month: "Mar", amount: 35 },
+  { month: "Apr", amount: 60 },
+  { month: "May", amount: 45 },
+  { month: "Jun", amount: 50 },
+  { month: "Jul", amount: 65 },
+  { month: "Aug", amount: 40 },
+  { month: "Sep", amount: 55 },
+  { month: "Oct", amount: 70 },
+  { month: "Nov", amount: 45 },
+  { month: "Dec", amount: 80 },
+];
+
+const chartConfig = {
+  amount: {
+    label: "Activity",
+    color: "var(--chart-2)",
+  },
+} satisfies ChartConfig;
+
+export function CardOverview() {
+  return (
+    <div className="grid grid-cols-2 gap-3">
+      <Card>
+        <CardContent>
+          <CardDescription>Card Balance</CardDescription>
+          <CardTitle className="text-2xl tabular-nums">US$12.94</CardTitle>
+          <CardDescription className="tabular-nums">US$11,337.06 Available</CardDescription>
+        </CardContent>
+      </Card>
+      <Card className="flex flex-col justify-between">
+        <CardContent className="flex flex-1 flex-col justify-between">
+          <div className="flex flex-col gap-1">
+            <CardDescription>Payment Due</CardDescription>
+            <CardTitle className="text-2xl">1 Apr</CardTitle>
+          </div>
+          <Button variant="outline" size="sm" className="mt-3 w-full">
+            Pay Early
+          </Button>
+        </CardContent>
+      </Card>
+      <Card className="col-span-2">
+        <CardContent className="flex flex-col gap-2">
+          <div className="flex items-center justify-between">
+            <CardDescription>Yearly Activity</CardDescription>
+            <Badge variant="secondary">+US$0.25 Daily Cash</Badge>
+          </div>
+          <ChartContainer config={chartConfig} className="h-20 w-full">
+            <BarChart data={activityData} margin={{ top: 4, right: 0, bottom: 0, left: 0 }}>
+              <XAxis
+                dataKey="month"
+                tickLine={false}
+                tickMargin={4}
+                axisLine={false}
+                tickFormatter={(v) => String(v).slice(0, 1)}
+                className="text-[10px]"
+              />
+              <ChartTooltip cursor={false} content={<ChartTooltipContent hideLabel />} />
+              <Bar dataKey="amount" fill="var(--color-amount)" radius={[3, 3, 0, 0]} />
+            </BarChart>
+          </ChartContainer>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/claimable-balance.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/claimable-balance.tsx
new file mode 100644
index 000000000..1c7e3f98f
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/claimable-balance.tsx
@@ -0,0 +1,51 @@
+import { Badge } from "@voidhash/ui";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Item, ItemContent } from "@voidhash/ui";
+import { Separator } from "@voidhash/ui";
+
+export function ClaimableBalance() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardDescription>Claimable Balance</CardDescription>
+        <CardTitle className="text-5xl tabular-nums">$0.00</CardTitle>
+        <Badge variant="outline">
+          <span className="size-2 rounded-full bg-yellow-500" />
+          Pending Setup
+        </Badge>
+      </CardHeader>
+      <CardContent className="flex flex-1 flex-col justify-end">
+        <Item variant="muted" className="flex-col items-stretch">
+          <ItemContent className="gap-3">
+            <div className="flex items-center justify-between">
+              <span className="text-sm text-muted-foreground">Net Royalties</span>
+              <span className="text-sm font-medium tabular-nums">$0.00</span>
+            </div>
+            <div className="flex items-center justify-between">
+              <span className="text-sm text-muted-foreground">Processing Fee</span>
+              <span className="text-sm font-medium tabular-nums">-$0.00</span>
+            </div>
+            <Separator />
+            <div className="flex items-center justify-between">
+              <span className="text-sm text-muted-foreground">Total Ready to Claim</span>
+              <span className="text-sm font-semibold tabular-nums">$0.00 USD</span>
+            </div>
+          </ItemContent>
+        </Item>
+      </CardContent>
+      <CardFooter>
+        <CardDescription>
+          Once your bank is connected, balances over $10.00 are automatically eligible for monthly
+          distribution on the 15th of each month.
+        </CardDescription>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/contribution-history.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/contribution-history.tsx
new file mode 100644
index 000000000..120fb2ecf
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/contribution-history.tsx
@@ -0,0 +1,92 @@
+"use client";
+
+import { Bar, BarChart, XAxis } from "recharts";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { ChartContainer, ChartTooltip, ChartTooltipContent, type ChartConfig } from "@voidhash/ui";
+import { Item, ItemContent, ItemDescription } from "@voidhash/ui";
+import { useDesignSystemSearchParams } from "../preview-config";
+
+const chartData = [
+  { month: "Dec", amount: 800 },
+  { month: "Jan", amount: 1100 },
+  { month: "Feb", amount: 900 },
+  { month: "Mar", amount: 1300 },
+  { month: "Apr", amount: 750 },
+  { month: "May", amount: 1400 },
+];
+
+const chartConfig = {
+  amount: {
+    label: "Contribution",
+    color: "var(--chart-2)",
+  },
+} satisfies ChartConfig;
+
+export function ContributionHistory() {
+  const [params] = useDesignSystemSearchParams();
+  const isRounded = !["lyra", "sera"].includes(params.style);
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Contribution History</CardTitle>
+        <CardDescription>Last 6 months of activity</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <ChartContainer config={chartConfig} className="h-[200px] w-full">
+          <BarChart
+            accessibilityLayer
+            data={chartData}
+            margin={{ left: 0, right: 0, top: 8, bottom: 0 }}
+          >
+            <XAxis dataKey="month" tickLine={false} tickMargin={8} axisLine={false} />
+            <ChartTooltip
+              cursor={false}
+              content={<ChartTooltipContent hideLabel className="min-w-40" />}
+            />
+            <Bar
+              dataKey="amount"
+              fill="var(--color-amount)"
+              radius={isRounded ? [6, 6, 0, 0] : 0}
+              maxBarSize={40}
+            />
+          </BarChart>
+        </ChartContainer>
+      </CardContent>
+      <CardContent>
+        <div className="grid w-full grid-cols-1 gap-3 md:grid-cols-2">
+          <Item variant="muted" className="flex-col items-stretch">
+            <ItemContent className="gap-1">
+              <ItemDescription className="text-xs font-medium tracking-wider text-muted-foreground uppercase">
+                Upcoming
+              </ItemDescription>
+              <span className="cn-font-heading text-lg font-semibold">May 25, 2024</span>
+              <span className="text-sm text-muted-foreground">$1,000 scheduled</span>
+            </ItemContent>
+          </Item>
+          <Item variant="muted" className="flex-col items-stretch">
+            <ItemContent className="gap-1">
+              <ItemDescription className="text-xs font-medium tracking-wider text-muted-foreground uppercase">
+                Auto-Save Plan
+              </ItemDescription>
+              <span className="cn-font-heading text-lg font-semibold">Accelerated</span>
+              <span className="text-sm text-muted-foreground">Recurring weekly</span>
+            </ItemContent>
+          </Item>
+        </div>
+      </CardContent>
+      <CardFooter>
+        <Button className="w-full">View Full Report</Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx
new file mode 100644
index 000000000..7701ac31b
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx
@@ -0,0 +1,48 @@
+import { Button } from "@voidhash/ui";
+import { Card, CardContent, CardDescription, CardFooter } from "@voidhash/ui";
+import { Item } from "@voidhash/ui";
+import { Label } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function CoverArt() {
+  return (
+    <Card>
+      <CardContent className="flex flex-col gap-3">
+        <Label
+          htmlFor="cover-art"
+          className="text-center text-xs font-normal tracking-wider text-muted-foreground uppercase"
+        >
+          Cover Art
+        </Label>
+        <Item className="aspect-square" variant="outline">
+          <label
+            htmlFor="cover-art"
+            className="flex size-full cursor-pointer items-center justify-center"
+          >
+            <IconPlaceholder
+              lucide="ImageIcon"
+              tabler="IconPhoto"
+              hugeicons="Image01Icon"
+              phosphor="ImageIcon"
+              remixicon="RiImageLine"
+              className="size-10 text-muted-foreground/50"
+            />
+          </label>
+        </Item>
+        <input id="cover-art" type="file" accept="image/jpeg,image/png" className="sr-only" />
+      </CardContent>
+      <CardFooter className="flex-col gap-2">
+        <Button variant="secondary" className="w-full" asChild>
+          <label htmlFor="cover-art" className="cursor-pointer">
+            Upload Artwork
+          </label>
+        </Button>
+        <CardDescription className="text-center text-xs">
+          Minimum 3000 × 3000px
+          <br />
+          JPEG or PNG only
+        </CardDescription>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/dividend-income.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/dividend-income.tsx
new file mode 100644
index 000000000..d1c67686c
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/dividend-income.tsx
@@ -0,0 +1,123 @@
+"use client";
+
+import { Bar, BarChart } from "recharts";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { ChartContainer, ChartTooltip, ChartTooltipContent, type ChartConfig } from "@voidhash/ui";
+import { Item, ItemContent, ItemDescription, ItemGroup, ItemTitle } from "@voidhash/ui";
+import { useDesignSystemSearchParams } from "../preview-config";
+import { IconPlaceholder } from "../icon-placeholder";
+
+const HOLDINGS = [
+  {
+    name: "Vanguard VIG",
+    shares: "450 Shares",
+    amount: "$1,842.10",
+    data: [
+      { q: "Q1", value: 380 },
+      { q: "Q2", value: 420 },
+      { q: "Q3", value: 390 },
+      { q: "Q4", value: 652 },
+    ],
+  },
+  {
+    name: "S&P 500 VOO",
+    shares: "112 Shares",
+    amount: "$928.40",
+    data: [
+      { q: "Q1", value: 180 },
+      { q: "Q2", value: 210 },
+      { q: "Q3", value: 320 },
+      { q: "Q4", value: 218 },
+    ],
+  },
+  {
+    name: "Apple AAPL",
+    shares: "85 Shares",
+    amount: "$340.00",
+    data: [
+      { q: "Q1", value: 60 },
+      { q: "Q2", value: 70 },
+      { q: "Q3", value: 120 },
+      { q: "Q4", value: 90 },
+    ],
+  },
+  {
+    name: "Realty Income",
+    shares: "320 Shares",
+    amount: "$1,139.50",
+    data: [
+      { q: "Q1", value: 240 },
+      { q: "Q2", value: 260 },
+      { q: "Q3", value: 280 },
+      { q: "Q4", value: 360 },
+    ],
+  },
+];
+
+const miniChartConfig = {
+  value: {
+    label: "Dividend",
+    color: "var(--chart-2)",
+  },
+} satisfies ChartConfig;
+
+export function DividendIncome() {
+  const [params] = useDesignSystemSearchParams();
+  const isRounded = !["lyra", "sera"].includes(params.style);
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Q2 Dividend Income</CardTitle>
+        <CardDescription>
+          Quarterly dividend payouts across your portfolio holdings.
+        </CardDescription>
+        <CardAction>
+          <Button variant="ghost" size="icon-sm" className="bg-muted">
+            <IconPlaceholder
+              lucide="XIcon"
+              tabler="IconX"
+              hugeicons="Cancel01Icon"
+              phosphor="XIcon"
+              remixicon="RiCloseLine"
+            />
+          </Button>
+        </CardAction>
+      </CardHeader>
+      <CardContent>
+        <ItemGroup>
+          {HOLDINGS.map((holding) => (
+            <Item key={holding.name} variant="muted">
+              <ItemContent>
+                <ItemTitle>{holding.name}</ItemTitle>
+                <ItemDescription>{holding.shares}</ItemDescription>
+              </ItemContent>
+              <ChartContainer config={miniChartConfig} className="hidden h-8 w-24 md:block">
+                <BarChart data={holding.data} margin={{ top: 0, right: 0, bottom: 0, left: 0 }}>
+                  <ChartTooltip cursor={false} content={<ChartTooltipContent hideLabel />} />
+                  <Bar
+                    dataKey="value"
+                    fill="var(--color-value)"
+                    radius={isRounded ? [3, 3, 0, 0] : 0}
+                  />
+                </BarChart>
+              </ChartContainer>
+              <span className="hidden text-sm font-semibold tabular-nums md:block">
+                {holding.amount}
+              </span>
+            </Item>
+          ))}
+        </ItemGroup>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/empty-connect-bank.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/empty-connect-bank.tsx
new file mode 100644
index 000000000..9f37a47ed
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/empty-connect-bank.tsx
@@ -0,0 +1,40 @@
+import { Button } from "@voidhash/ui";
+import { Card, CardContent } from "@voidhash/ui";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function EmptyConnectBank() {
+  return (
+    <Card>
+      <CardContent>
+        <Empty className="p-4">
+          <EmptyMedia variant="icon">
+            <IconPlaceholder
+              lucide="CreditCardIcon"
+              tabler="IconCreditCard"
+              hugeicons="CreditCardIcon"
+              phosphor="CreditCardIcon"
+              remixicon="RiBankCardLine"
+            />
+          </EmptyMedia>
+          <EmptyHeader>
+            <EmptyTitle>Connect Bank</EmptyTitle>
+            <EmptyDescription>
+              Link your payout method to receive monthly royalty distributions automatically.
+            </EmptyDescription>
+          </EmptyHeader>
+          <EmptyContent>
+            <Button>Set Up Payouts</Button>
+          </EmptyContent>
+        </Empty>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/empty-distribute-track.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/empty-distribute-track.tsx
new file mode 100644
index 000000000..7f79c0ed0
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/empty-distribute-track.tsx
@@ -0,0 +1,41 @@
+import { Button } from "@voidhash/ui";
+import { Card, CardContent } from "@voidhash/ui";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function EmptyDistributeTrack() {
+  return (
+    <Card>
+      <CardContent>
+        <Empty className="p-4">
+          <EmptyMedia variant="icon">
+            <IconPlaceholder
+              lucide="PlusIcon"
+              tabler="IconPlus"
+              hugeicons="Add01Icon"
+              phosphor="PlusIcon"
+              remixicon="RiAddLine"
+            />
+          </EmptyMedia>
+          <EmptyHeader>
+            <EmptyTitle>Distribute Track</EmptyTitle>
+            <EmptyDescription>
+              Upload your first master to start reaching listeners on Spotify, Apple Music, and
+              more.
+            </EmptyDescription>
+          </EmptyHeader>
+          <EmptyContent>
+            <Button>Create Release</Button>
+          </EmptyContent>
+        </Empty>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/empty-explore-catalog.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/empty-explore-catalog.tsx
new file mode 100644
index 000000000..7411baae8
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/empty-explore-catalog.tsx
@@ -0,0 +1,40 @@
+import { Button } from "@voidhash/ui";
+import { Card, CardContent } from "@voidhash/ui";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function EmptyExploreCatalog() {
+  return (
+    <Card>
+      <CardContent>
+        <Empty className="p-4">
+          <EmptyMedia variant="icon">
+            <IconPlaceholder
+              lucide="AudioLinesIcon"
+              tabler="IconPlayerRecordFilled"
+              hugeicons="AudioWave01Icon"
+              phosphor="RecordIcon"
+              remixicon="RiRecordCircleLine"
+            />
+          </EmptyMedia>
+          <EmptyHeader>
+            <EmptyTitle>Explore Catalog</EmptyTitle>
+            <EmptyDescription>
+              Check your ISRC codes, metadata, and visual assets before going live.
+            </EmptyDescription>
+          </EmptyHeader>
+          <EmptyContent>
+            <Button>View Catalog</Button>
+          </EmptyContent>
+        </Empty>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/faq.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/faq.tsx
new file mode 100644
index 000000000..6819b81a6
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/faq.tsx
@@ -0,0 +1,103 @@
+"use client";
+
+import { Accordion, AccordionContent, AccordionItem, AccordionTrigger } from "@voidhash/ui";
+import { Button } from "@voidhash/ui";
+import { Card, CardContent, CardFooter } from "@voidhash/ui";
+import { Tabs, TabsContent, TabsList, TabsTrigger } from "@voidhash/ui";
+
+const GENERAL_QUESTIONS = [
+  {
+    q: "How secure is my financial data with Ledger?",
+    a: "We use bank-level AES-256 encryption, SOC 2 Type II certified infrastructure, and never store your credentials. All connections use read-only access tokens. We are a SEC registered investment advisor.",
+  },
+  {
+    q: "How do I connect my bank or investment accounts?",
+    a: "Go to Settings > Linked Accounts and search for your institution. We support over 12,000 banks and brokerages via Plaid and MX.",
+  },
+  {
+    q: "Can I export my data for tax purposes?",
+    a: "Yes. Navigate to Reports > Tax Export to download a CSV or PDF summary of your transactions, dividends, and capital gains for any tax year.",
+  },
+];
+
+const BILLING_QUESTIONS = [
+  {
+    q: "What is the difference between Basic and Pro pricing tiers?",
+    a: "Basic includes budgeting, goal tracking, and up to 3 linked accounts. Pro adds unlimited accounts, dividend tracking, portfolio analysis, and priority support.",
+  },
+  {
+    q: "How do I cancel my subscription?",
+    a: "Go to Settings > Billing > Manage Plan and click Cancel. Your access continues until the end of your current billing period.",
+  },
+  {
+    q: "Do you offer a free trial?",
+    a: "Yes. All new accounts start with a 14-day Pro trial. No credit card required.",
+  },
+];
+
+const GOALS_QUESTIONS = [
+  {
+    q: "How do I set up a custom financial goal?",
+    a: "Click New Goal from the Savings Targets card. Choose a category, set a target amount and date, and we'll calculate the monthly contribution needed.",
+  },
+  {
+    q: "Can I track multiple goals at once?",
+    a: "Yes. Pro accounts can track unlimited goals. Basic accounts support up to 3 active goals.",
+  },
+  {
+    q: "How are monthly contributions calculated?",
+    a: "We divide the remaining amount by the number of months until your target date, adjusted for your current savings rate and any auto-transfer schedules.",
+  },
+];
+
+function QuestionList({ questions }: { questions: { q: string; a: string }[] }) {
+  return (
+    <Accordion type="single" collapsible defaultValue="item-0">
+      {questions.map((item, index) => (
+        <AccordionItem key={index} value={`item-${index}`}>
+          <AccordionTrigger>{item.q}</AccordionTrigger>
+          <AccordionContent>{item.a}</AccordionContent>
+        </AccordionItem>
+      ))}
+    </Accordion>
+  );
+}
+
+export function Faq() {
+  return (
+    <Card>
+      <CardContent>
+        <Tabs defaultValue="general">
+          <TabsList className="w-full">
+            <TabsTrigger value="general" className="flex-1">
+              General
+            </TabsTrigger>
+            <TabsTrigger value="billing" className="flex-1">
+              Billing
+            </TabsTrigger>
+            <TabsTrigger value="goals" className="flex-1">
+              Goals
+            </TabsTrigger>
+          </TabsList>
+          <TabsContent value="general">
+            <QuestionList questions={GENERAL_QUESTIONS} />
+          </TabsContent>
+          <TabsContent value="billing">
+            <QuestionList questions={BILLING_QUESTIONS} />
+          </TabsContent>
+          <TabsContent value="goals">
+            <QuestionList questions={GOALS_QUESTIONS} />
+          </TabsContent>
+        </Tabs>
+      </CardContent>
+      <CardFooter>
+        <Button variant="outline" className="w-full">
+          Contact Support
+        </Button>
+        <Button variant="link" className="w-full">
+          Learn More
+        </Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/front-door.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/front-door.tsx
new file mode 100644
index 000000000..240d3a142
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/front-door.tsx
@@ -0,0 +1,41 @@
+import { Badge } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function FrontDoor() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Front Door</CardTitle>
+        <CardDescription>Smart Lock Pro</CardDescription>
+        <CardAction>
+          <div className="flex items-center gap-1.5 text-sm text-muted-foreground">
+            Locked
+            <IconPlaceholder
+              lucide="LockIcon"
+              tabler="IconLock"
+              hugeicons="SquareLock02Icon"
+              phosphor="LockKeyIcon"
+              remixicon="RiLockLine"
+              className="size-4"
+            />
+          </div>
+        </CardAction>
+      </CardHeader>
+      <CardContent>
+        <div className="relative flex aspect-video items-center justify-center overflow-hidden rounded-lg bg-muted bg-[repeating-linear-gradient(45deg,transparent,transparent_10px,var(--border)_10px,var(--border)_11px)]">
+          <Badge variant="destructive" className="absolute top-2 right-2">
+            Live
+          </Badge>
+        </div>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/index-investing.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/index-investing.tsx
new file mode 100644
index 000000000..d5d5b2cc3
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/index-investing.tsx
@@ -0,0 +1,22 @@
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
+
+export function IndexInvesting() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Dollar-Cost Averaging</CardTitle>
+        <CardDescription>A strategy for building wealth over time.</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <CardDescription className="mt-3 text-sm leading-relaxed style-sera:mt-0">
+          <a href="#" className="underline underline-offset-4 hover:text-primary">
+            Over time
+          </a>
+          , this smooths out the average cost of your investments. When prices drop, your fixed
+          amount buys more shares. When prices rise, you buy fewer. The result is a lower average
+          cost per share compared to lump-sum investing during volatile periods.
+        </CardDescription>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx
new file mode 100644
index 000000000..97845d06a
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx
@@ -0,0 +1,162 @@
+"use client";
+
+import * as React from "react";
+
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Item, ItemActions, ItemContent, ItemGroup, ItemMedia, ItemTitle } from "@voidhash/ui";
+import { Slider } from "@voidhash/ui";
+import { Switch } from "@voidhash/ui";
+import { ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+const SCENES = {
+  cooking: { brightness: [90], colorTemp: [70], volume: [30], fade: [0] },
+  dining: { brightness: [50], colorTemp: [40], volume: [20], fade: [60] },
+  nightlight: { brightness: [15], colorTemp: [20], volume: [0], fade: [80] },
+  focus: { brightness: [100], colorTemp: [85], volume: [0], fade: [0] },
+} as const;
+
+export function KitchenIsland() {
+  const [enabled, setEnabled] = React.useState(true);
+  const [scene, setScene] = React.useState("cooking");
+  const [brightness, setBrightness] = React.useState([90]);
+  const [colorTemp, setColorTemp] = React.useState([70]);
+  const [volume, setVolume] = React.useState([30]);
+  const [fade, setFade] = React.useState([0]);
+
+  const handleSceneChange = (value: string) => {
+    if (!value) return;
+    setScene(value);
+    const preset = SCENES[value as keyof typeof SCENES];
+    setBrightness([...preset.brightness]);
+    setColorTemp([...preset.colorTemp]);
+    setVolume([...preset.volume]);
+    setFade([...preset.fade]);
+  };
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Kitchen Island</CardTitle>
+        <CardDescription>Hue Color Ambient</CardDescription>
+        <CardAction>
+          <Switch checked={enabled} onCheckedChange={setEnabled} />
+        </CardAction>
+      </CardHeader>
+      <CardContent className="flex flex-col gap-4">
+        <div className="flex flex-col gap-2">
+          <span className="sr-only">Scenes</span>
+          <ToggleGroup
+            type="single"
+            value={scene}
+            onValueChange={handleSceneChange}
+            variant="outline"
+            spacing={1}
+            className="flex-wrap"
+          >
+            <ToggleGroupItem value="cooking" disabled={!enabled}>
+              Cooking
+            </ToggleGroupItem>
+            <ToggleGroupItem value="dining" disabled={!enabled}>
+              Dining
+            </ToggleGroupItem>
+            <ToggleGroupItem value="nightlight" disabled={!enabled}>
+              Nightlight
+            </ToggleGroupItem>
+            <ToggleGroupItem value="focus" disabled={!enabled}>
+              Focus
+            </ToggleGroupItem>
+          </ToggleGroup>
+        </div>
+        <ItemGroup>
+          <Item size="sm" variant="outline">
+            <ItemMedia variant="icon">
+              <IconPlaceholder
+                lucide="SunIcon"
+                tabler="IconSun"
+                hugeicons="Sun03Icon"
+                phosphor="SunIcon"
+                remixicon="RiSunLine"
+              />
+            </ItemMedia>
+            <ItemContent className="flex-row items-center gap-3">
+              <ItemTitle className="shrink-0">Brightness</ItemTitle>
+            </ItemContent>
+            <ItemActions className="flex-1">
+              <Slider
+                value={brightness}
+                onValueChange={setBrightness}
+                max={100}
+                disabled={!enabled}
+                className="w-full"
+              />
+            </ItemActions>
+          </Item>
+          <Item size="sm" variant="outline">
+            <ItemMedia variant="icon">
+              <IconPlaceholder
+                lucide="ThermometerIcon"
+                tabler="IconThermometer"
+                hugeicons="ThermometerWarmIcon"
+                phosphor="ThermometerIcon"
+                remixicon="RiThermometerLine"
+              />
+            </ItemMedia>
+            <ItemContent className="flex-row items-center gap-3">
+              <ItemTitle className="shrink-0">Color Temp</ItemTitle>
+            </ItemContent>
+            <ItemActions className="flex-1">
+              <Slider
+                value={colorTemp}
+                onValueChange={setColorTemp}
+                max={100}
+                disabled={!enabled}
+              />
+            </ItemActions>
+          </Item>
+          <Item size="sm" variant="outline">
+            <ItemMedia variant="icon">
+              <IconPlaceholder
+                lucide="Volume2Icon"
+                tabler="IconVolume"
+                hugeicons="VolumeHighIcon"
+                phosphor="SpeakerHighIcon"
+                remixicon="RiVolumeUpLine"
+              />
+            </ItemMedia>
+            <ItemContent className="flex-row items-center gap-3">
+              <ItemTitle className="shrink-0">Volume</ItemTitle>
+            </ItemContent>
+            <ItemActions className="flex-1">
+              <Slider value={volume} onValueChange={setVolume} max={100} disabled={!enabled} />
+            </ItemActions>
+          </Item>
+          <Item size="sm" variant="outline">
+            <ItemMedia variant="icon">
+              <IconPlaceholder
+                lucide="TimerIcon"
+                tabler="IconClock"
+                hugeicons="Clock03Icon"
+                phosphor="TimerIcon"
+                remixicon="RiTimerLine"
+              />
+            </ItemMedia>
+            <ItemContent className="flex-row items-center gap-3">
+              <ItemTitle className="shrink-0">Fade</ItemTitle>
+            </ItemContent>
+            <ItemActions className="flex-1">
+              <Slider value={fade} onValueChange={setFade} max={100} disabled={!enabled} />
+            </ItemActions>
+          </Item>
+        </ItemGroup>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/loading-card.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/loading-card.tsx
new file mode 100644
index 000000000..38dc57158
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/loading-card.tsx
@@ -0,0 +1,25 @@
+import { Card, CardContent, CardHeader } from "@voidhash/ui";
+import { Skeleton } from "@voidhash/ui";
+
+export function LoadingCard() {
+  return (
+    <Card>
+      <CardHeader>
+        <Skeleton className="h-5 w-32" />
+        <Skeleton className="h-4 w-48" />
+      </CardHeader>
+      <CardContent className="flex flex-col gap-4">
+        <Skeleton className="h-32 w-full rounded-lg" />
+        <div className="flex flex-col gap-2">
+          <Skeleton className="h-4 w-full" />
+          <Skeleton className="h-4 w-3/4" />
+          <Skeleton className="h-4 w-1/2" />
+        </div>
+        <div className="flex gap-2">
+          <Skeleton className="h-9 flex-1 rounded-md" />
+          <Skeleton className="h-9 flex-1 rounded-md" />
+        </div>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/new-milestone.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/new-milestone.tsx
new file mode 100644
index 000000000..0bc6c3d2f
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/new-milestone.tsx
@@ -0,0 +1,50 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Field, FieldGroup, FieldLabel } from "@voidhash/ui";
+import { Input } from "@voidhash/ui";
+
+export function NewMilestone() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Set a new milestone</CardTitle>
+        <CardDescription>
+          Define your financial target and we&apos;ll help you pace your savings.
+        </CardDescription>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="goal-name">Goal Name</FieldLabel>
+            <Input id="goal-name" placeholder="e.g. New Car, Home Downpayment" />
+          </Field>
+          <div className="grid grid-cols-2 gap-3">
+            <Field>
+              <FieldLabel htmlFor="target-amount">Target Amount</FieldLabel>
+              <Input id="target-amount" defaultValue="$15,000" />
+            </Field>
+            <Field>
+              <FieldLabel htmlFor="target-date">Target Date</FieldLabel>
+              <Input id="target-date" defaultValue="Dec 2025" />
+            </Field>
+          </div>
+        </FieldGroup>
+      </CardContent>
+      <CardFooter className="flex-col gap-2">
+        <Button className="w-full">Create Goal</Button>
+        <Button variant="outline" className="w-full">
+          Cancel
+        </Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/notification-settings.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/notification-settings.tsx
new file mode 100644
index 000000000..3074bebb6
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/notification-settings.tsx
@@ -0,0 +1,98 @@
+"use client";
+
+import * as React from "react";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Checkbox } from "@voidhash/ui";
+import { Field, FieldContent, FieldDescription, FieldGroup, FieldLabel } from "@voidhash/ui";
+
+const NOTIFICATIONS = [
+  {
+    id: "transactions",
+    label: "Transaction alerts",
+    description: "Deposits, withdrawals, and transfers.",
+    defaultChecked: true,
+  },
+  {
+    id: "security",
+    label: "Security alerts",
+    description: "Login attempts and account changes.",
+    defaultChecked: true,
+  },
+  {
+    id: "goals",
+    label: "Goal milestones",
+    description: "Updates at 25%, 50%, 75%, and 100%.",
+    defaultChecked: false,
+  },
+  {
+    id: "market",
+    label: "Market updates",
+    description: "Daily portfolio summary and price alerts.",
+    defaultChecked: false,
+  },
+];
+
+export function NotificationSettings() {
+  const [checked, setChecked] = React.useState<Record<string, boolean>>(
+    Object.fromEntries(NOTIFICATIONS.map((n) => [n.id, n.defaultChecked])),
+  );
+
+  const allChecked = NOTIFICATIONS.every((n) => checked[n.id]);
+  const someChecked = NOTIFICATIONS.some((n) => checked[n.id]) && !allChecked;
+
+  const handleSelectAll = (value: boolean) => {
+    setChecked(Object.fromEntries(NOTIFICATIONS.map((n) => [n.id, value])));
+  };
+
+  const handleToggle = (id: string, value: boolean) => {
+    setChecked((prev) => ({ ...prev, [id]: value }));
+  };
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Notifications</CardTitle>
+        <CardDescription>Choose what you want to be notified about.</CardDescription>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field orientation="horizontal">
+            <Checkbox
+              id="notify-all"
+              checked={someChecked ? "indeterminate" : allChecked}
+              onCheckedChange={(v) => handleSelectAll(!!v)}
+            />
+            <FieldContent>
+              <FieldLabel htmlFor="notify-all">Select all</FieldLabel>
+            </FieldContent>
+          </Field>
+          {NOTIFICATIONS.map((n) => (
+            <Field key={n.id} orientation="horizontal">
+              <Checkbox
+                id={`notify-${n.id}`}
+                checked={checked[n.id]}
+                onCheckedChange={(v) => handleToggle(n.id, !!v)}
+              />
+              <FieldContent>
+                <FieldLabel htmlFor={`notify-${n.id}`}>{n.label}</FieldLabel>
+                <FieldDescription>{n.description}</FieldDescription>
+              </FieldContent>
+            </Field>
+          ))}
+        </FieldGroup>
+      </CardContent>
+      <CardFooter>
+        <Button className="w-full">Save Preferences</Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/payments.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/payments.tsx
new file mode 100644
index 000000000..0e7be017d
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/payments.tsx
@@ -0,0 +1,169 @@
+"use client";
+
+import {
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+} from "@voidhash/ui";
+import { Button } from "@voidhash/ui";
+import { Card, CardContent, CardHeader } from "@voidhash/ui";
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuGroup,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { Item, ItemContent, ItemDescription, ItemGroup, ItemMedia, ItemTitle } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function Payments() {
+  return (
+    <Card>
+      <CardHeader className="flex flex-col gap-3">
+        <Breadcrumb>
+          <BreadcrumbList>
+            <BreadcrumbItem>
+              <BreadcrumbLink href="#">Home</BreadcrumbLink>
+            </BreadcrumbItem>
+            <BreadcrumbSeparator />
+            <BreadcrumbItem>
+              <DropdownMenu>
+                <DropdownMenuTrigger asChild>
+                  <Button size="icon-sm" variant="ghost">
+                    <IconPlaceholder
+                      lucide="MoreHorizontalIcon"
+                      tabler="IconDots"
+                      hugeicons="MoreHorizontalCircle01Icon"
+                      phosphor="DotsThreeIcon"
+                      remixicon="RiMoreLine"
+                    />
+                    <span className="sr-only">Account options</span>
+                  </Button>
+                </DropdownMenuTrigger>
+                <DropdownMenuContent align="start">
+                  <DropdownMenuGroup>
+                    <DropdownMenuItem>Profile</DropdownMenuItem>
+                    <DropdownMenuItem>Statements</DropdownMenuItem>
+                    <DropdownMenuItem>Documents</DropdownMenuItem>
+                  </DropdownMenuGroup>
+                </DropdownMenuContent>
+              </DropdownMenu>
+            </BreadcrumbItem>
+            <BreadcrumbSeparator />
+            <BreadcrumbItem>
+              <BreadcrumbPage>Payments</BreadcrumbPage>
+            </BreadcrumbItem>
+          </BreadcrumbList>
+        </Breadcrumb>
+      </CardHeader>
+      <CardContent>
+        <ItemGroup>
+          <Item asChild variant="muted">
+            <a href="#">
+              <ItemMedia variant="icon">
+                <IconPlaceholder
+                  lucide="GaugeIcon"
+                  tabler="IconGauge"
+                  hugeicons="Settings01Icon"
+                  phosphor="GaugeIcon"
+                  remixicon="RiDashboardLine"
+                />
+              </ItemMedia>
+              <ItemContent>
+                <ItemTitle>Change transfer limit</ItemTitle>
+                <ItemDescription>Adjust how much you can send from your balance.</ItemDescription>
+              </ItemContent>
+              <IconPlaceholder
+                lucide="ChevronRightIcon"
+                tabler="IconChevronRight"
+                hugeicons="ArrowRight01Icon"
+                phosphor="CaretRightIcon"
+                remixicon="RiArrowRightSLine"
+                className="size-4 shrink-0 text-muted-foreground"
+              />
+            </a>
+          </Item>
+          <Item asChild variant="muted">
+            <a href="#">
+              <ItemMedia variant="icon">
+                <IconPlaceholder
+                  lucide="CalendarIcon"
+                  tabler="IconCalendar"
+                  hugeicons="Calendar03Icon"
+                  phosphor="CalendarIcon"
+                  remixicon="RiCalendarLine"
+                />
+              </ItemMedia>
+              <ItemContent>
+                <ItemTitle>Scheduled transfers</ItemTitle>
+                <ItemDescription>Set up a transfer to send at a later date.</ItemDescription>
+              </ItemContent>
+              <IconPlaceholder
+                lucide="ChevronRightIcon"
+                tabler="IconChevronRight"
+                hugeicons="ArrowRight01Icon"
+                phosphor="CaretRightIcon"
+                remixicon="RiArrowRightSLine"
+                className="size-4 shrink-0 text-muted-foreground"
+              />
+            </a>
+          </Item>
+          <Item asChild variant="muted">
+            <a href="#">
+              <ItemMedia variant="icon">
+                <IconPlaceholder
+                  lucide="RepeatIcon"
+                  tabler="IconRepeat"
+                  hugeicons="RepeatIcon"
+                  phosphor="RepeatIcon"
+                  remixicon="RiRepeatLine"
+                />
+              </ItemMedia>
+              <ItemContent>
+                <ItemTitle>Direct Debits</ItemTitle>
+                <ItemDescription>Set up and manage regular payments.</ItemDescription>
+              </ItemContent>
+              <IconPlaceholder
+                lucide="ChevronRightIcon"
+                tabler="IconChevronRight"
+                hugeicons="ArrowRight01Icon"
+                phosphor="CaretRightIcon"
+                remixicon="RiArrowRightSLine"
+                className="size-4 shrink-0 text-muted-foreground"
+              />
+            </a>
+          </Item>
+          <Item asChild variant="muted">
+            <a href="#">
+              <ItemMedia variant="icon">
+                <IconPlaceholder
+                  lucide="RefreshCwIcon"
+                  tabler="IconRefresh"
+                  hugeicons="RepeatIcon"
+                  phosphor="ArrowsClockwiseIcon"
+                  remixicon="RiRefreshLine"
+                />
+              </ItemMedia>
+              <ItemContent>
+                <ItemTitle>Recurring card payments</ItemTitle>
+                <ItemDescription>Manage your repeated card transactions.</ItemDescription>
+              </ItemContent>
+              <IconPlaceholder
+                lucide="ChevronRightIcon"
+                tabler="IconChevronRight"
+                hugeicons="ArrowRight01Icon"
+                phosphor="CaretRightIcon"
+                remixicon="RiArrowRightSLine"
+                className="size-4 shrink-0 text-muted-foreground"
+              />
+            </a>
+          </Item>
+        </ItemGroup>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/payout-threshold.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/payout-threshold.tsx
new file mode 100644
index 000000000..a8a402735
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/payout-threshold.tsx
@@ -0,0 +1,101 @@
+"use client";
+
+import * as React from "react";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Field, FieldDescription, FieldGroup, FieldLabel } from "@voidhash/ui";
+import {
+  Select,
+  SelectContent,
+  SelectGroup,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { Slider } from "@voidhash/ui";
+import { Textarea } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function PayoutThreshold() {
+  const [amount, setAmount] = React.useState([2500]);
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Payout Threshold</CardTitle>
+        <CardDescription>
+          Set the minimum balance required before a payout is triggered.
+        </CardDescription>
+        <CardAction>
+          <Button variant="ghost" size="icon-sm" className="bg-muted">
+            <IconPlaceholder
+              lucide="XIcon"
+              tabler="IconX"
+              hugeicons="Cancel01Icon"
+              phosphor="XIcon"
+              remixicon="RiCloseLine"
+            />
+          </Button>
+        </CardAction>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="preferred-currency">Preferred Currency</FieldLabel>
+            <Select defaultValue="usd">
+              <SelectTrigger id="preferred-currency" className="w-full">
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectGroup>
+                  <SelectItem value="usd">USD — United States Dollar</SelectItem>
+                  <SelectItem value="eur">EUR — Euro</SelectItem>
+                  <SelectItem value="gbp">GBP — British Pound</SelectItem>
+                  <SelectItem value="jpy">JPY — Japanese Yen</SelectItem>
+                </SelectGroup>
+              </SelectContent>
+            </Select>
+          </Field>
+          <Field>
+            <div className="flex items-baseline justify-between">
+              <FieldLabel htmlFor="min-payout">Minimum Payout Amount</FieldLabel>
+              <span className="text-2xl font-semibold tabular-nums">${amount[0].toFixed(2)}</span>
+            </div>
+            <Slider
+              id="min-payout"
+              value={amount}
+              onValueChange={setAmount}
+              min={50}
+              max={10000}
+              step={50}
+            />
+            <div className="flex items-center justify-between">
+              <FieldDescription>$50 (MIN)</FieldDescription>
+              <FieldDescription>$10,000 (MAX)</FieldDescription>
+            </div>
+          </Field>
+          <Field>
+            <FieldLabel htmlFor="payout-notes">Notes</FieldLabel>
+            <Textarea
+              id="payout-notes"
+              placeholder="Add any notes for this payout configuration..."
+              className="min-h-[100px]"
+            />
+          </Field>
+        </FieldGroup>
+      </CardContent>
+      <CardFooter>
+        <Button className="w-full">Save Threshold</Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/power-usage.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/power-usage.tsx
new file mode 100644
index 000000000..d5cdc2426
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/power-usage.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import { Bar, BarChart, XAxis } from "recharts";
+
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { ChartContainer, ChartTooltip, ChartTooltipContent, type ChartConfig } from "@voidhash/ui";
+import { Progress } from "@voidhash/ui";
+import { Separator } from "@voidhash/ui";
+import { useDesignSystemSearchParams } from "../preview-config";
+
+const chartData = [
+  { hour: "6a", usage: 1.2 },
+  { hour: "8a", usage: 2.8 },
+  { hour: "10a", usage: 3.1 },
+  { hour: "12p", usage: 2.4 },
+  { hour: "2p", usage: 3.4 },
+  { hour: "4p", usage: 2.9 },
+  { hour: "6p", usage: 3.8 },
+  { hour: "8p", usage: 3.2 },
+];
+
+const chartConfig = {
+  usage: {
+    label: "Usage (kW)",
+    color: "var(--chart-2)",
+  },
+} satisfies ChartConfig;
+
+export function PowerUsage() {
+  const [params] = useDesignSystemSearchParams();
+  const isRounded = !["lyra", "sera"].includes(params.style);
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Power Usage</CardTitle>
+        <CardDescription>Whole Home</CardDescription>
+      </CardHeader>
+      <CardContent className="flex flex-col gap-4">
+        <ChartContainer config={chartConfig} className="h-[140px] w-full">
+          <BarChart data={chartData} margin={{ left: 0, right: 0, top: 4, bottom: 0 }}>
+            <XAxis
+              dataKey="hour"
+              tickLine={false}
+              tickMargin={6}
+              axisLine={false}
+              className="text-xs"
+            />
+            <ChartTooltip cursor={false} content={<ChartTooltipContent hideLabel />} />
+            <Bar dataKey="usage" fill="var(--color-usage)" radius={isRounded ? [4, 4, 0, 0] : 0} />
+          </BarChart>
+        </ChartContainer>
+        <Separator />
+        <div className="grid grid-cols-2 gap-4">
+          <div className="flex flex-col gap-0.5">
+            <span className="text-sm text-muted-foreground">Currently Using</span>
+            <span className="text-lg font-semibold tabular-nums">3.4 kW</span>
+          </div>
+          <div className="flex flex-col gap-0.5">
+            <span className="text-sm text-muted-foreground">Solar Gen</span>
+            <span className="text-lg font-semibold text-chart-1 tabular-nums">+1.2 kW</span>
+          </div>
+        </div>
+      </CardContent>
+      <CardFooter className="flex-col items-start gap-1">
+        <span className="text-sm text-muted-foreground">Battery Level</span>
+        <div className="flex w-full items-center gap-2">
+          <Progress value={85} className="flex-1" />
+          <span className="text-sm font-medium tabular-nums">85%</span>
+        </div>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/preferences.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/preferences.tsx
new file mode 100644
index 000000000..b7f37da80
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/preferences.tsx
@@ -0,0 +1,92 @@
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import {
+  Field,
+  FieldContent,
+  FieldDescription,
+  FieldGroup,
+  FieldLabel,
+  FieldSeparator,
+} from "@voidhash/ui";
+import {
+  Select,
+  SelectContent,
+  SelectGroup,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { Switch } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function Preferences() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Preferences</CardTitle>
+        <CardDescription>Manage your account settings and notifications.</CardDescription>
+        <CardAction>
+          <Button variant="ghost" size="icon-sm" className="bg-muted">
+            <IconPlaceholder
+              lucide="XIcon"
+              tabler="IconX"
+              hugeicons="Cancel01Icon"
+              phosphor="XIcon"
+              remixicon="RiCloseLine"
+            />
+          </Button>
+        </CardAction>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="default-currency">Default Currency</FieldLabel>
+            <Select defaultValue="usd">
+              <SelectTrigger id="default-currency" className="w-full">
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectGroup>
+                  <SelectItem value="usd">USD — United States Dollar</SelectItem>
+                  <SelectItem value="eur">EUR — Euro</SelectItem>
+                  <SelectItem value="gbp">GBP — British Pound</SelectItem>
+                  <SelectItem value="jpy">JPY — Japanese Yen</SelectItem>
+                </SelectGroup>
+              </SelectContent>
+            </Select>
+          </Field>
+          <FieldSeparator className="-my-4 style-sera:hidden" />
+          <Field orientation="horizontal">
+            <FieldContent>
+              <FieldLabel htmlFor="public-statistics">Public Statistics</FieldLabel>
+              <FieldDescription>
+                Allow others to see your total stream count and listening activity
+              </FieldDescription>
+            </FieldContent>
+            <Switch id="public-statistics" defaultChecked />
+          </Field>
+          <FieldSeparator className="-my-4 style-sera:hidden" />
+          <Field orientation="horizontal">
+            <FieldContent>
+              <FieldLabel htmlFor="email-notifications">Email Notifications</FieldLabel>
+              <FieldDescription>Monthly royalty reports and distribution updates</FieldDescription>
+            </FieldContent>
+            <Switch id="email-notifications" defaultChecked />
+          </Field>
+        </FieldGroup>
+      </CardContent>
+      <CardFooter>
+        <Button variant="outline">Reset</Button>
+        <Button className="ml-auto">Save Preferences</Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx
new file mode 100644
index 000000000..308ae180b
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx
@@ -0,0 +1,96 @@
+import {
+  Button,
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function ProjectActions() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Project Actions</CardTitle>
+        <CardDescription>Manage and publish your current project.</CardDescription>
+      </CardHeader>
+      <CardContent className="overflow-x-auto">
+        <div className="flex min-w-max items-center gap-2">
+          <Button variant="ghost" size="icon-sm" aria-label="More actions">
+            <IconPlaceholder
+              lucide="MoreHorizontalIcon"
+              tabler="IconDots"
+              hugeicons="MoreHorizontalCircle01Icon"
+              phosphor="DotsThreeIcon"
+              remixicon="RiMoreLine"
+            />
+          </Button>
+          <Button variant="outline" size="icon-sm" aria-label="Filter project">
+            <IconPlaceholder
+              lucide="ListFilterIcon"
+              tabler="IconFilter"
+              hugeicons="FilterHorizontalIcon"
+              phosphor="FunnelIcon"
+              remixicon="RiFilter3Line"
+            />
+          </Button>
+          <Button variant="secondary" size="sm">
+            <IconPlaceholder
+              lucide="PlusIcon"
+              tabler="IconPlus"
+              hugeicons="Add01Icon"
+              phosphor="PlusIcon"
+              remixicon="RiAddLine"
+              data-icon="inline-start"
+            />
+            Add
+          </Button>
+
+          <Button variant="ghost" size="sm">
+            Cancel
+          </Button>
+          <Button variant="outline" size="sm">
+            Preview
+          </Button>
+          <Button variant="secondary" size="sm">
+            Copy
+          </Button>
+          <Button size="sm">Publish</Button>
+
+          <ToggleGroup type="single" defaultValue="grid">
+            <ToggleGroupItem value="list" aria-label="List view">
+              <IconPlaceholder
+                lucide="ListIcon"
+                tabler="IconList"
+                hugeicons="LeftToRightListBulletIcon"
+                phosphor="ListBulletsIcon"
+                remixicon="RiListUnordered"
+              />
+            </ToggleGroupItem>
+            <ToggleGroupItem value="grid" aria-label="Grid view">
+              <IconPlaceholder
+                lucide="LayoutGridIcon"
+                tabler="IconLayoutGrid"
+                hugeicons="GridViewIcon"
+                phosphor="GridFourIcon"
+                remixicon="RiGridFill"
+              />
+            </ToggleGroupItem>
+            <ToggleGroupItem value="columns" aria-label="Columns view">
+              <IconPlaceholder
+                lucide="Columns3Icon"
+                tabler="IconColumns3"
+                hugeicons="Layout3ColumnIcon"
+                phosphor="ColumnsIcon"
+                remixicon="RiLayoutColumnLine"
+              />
+            </ToggleGroupItem>
+          </ToggleGroup>
+        </div>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx
new file mode 100644
index 000000000..e9d825692
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx
@@ -0,0 +1,36 @@
+"use client";
+
+import QRCode from "react-qr-code";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+
+export function QrConnect() {
+  return (
+    <Card>
+      <CardContent className="flex justify-center pt-6">
+        <div className="rounded-xl border bg-white p-4">
+          <QRCode value="https://ledger.app/connect/jd-4829" size={160} level="M" />
+        </div>
+      </CardContent>
+      <CardHeader className="text-center">
+        <CardTitle>Scan to connect your mobile device</CardTitle>
+        <CardDescription>
+          Open the Ledger mobile app and scan this code to link your device.
+        </CardDescription>
+      </CardHeader>
+      <CardFooter>
+        <Button variant="secondary" className="w-full">
+          Got it
+        </Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/receiving-method.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/receiving-method.tsx
new file mode 100644
index 000000000..4c6849ccb
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/receiving-method.tsx
@@ -0,0 +1,90 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import {
+  Field,
+  FieldContent,
+  FieldDescription,
+  FieldGroup,
+  FieldLabel,
+  FieldLegend,
+  FieldSet,
+  FieldTitle,
+} from "@voidhash/ui";
+import { Input } from "@voidhash/ui";
+import { RadioGroup, RadioGroupItem } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function ReceivingMethod() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardDescription>Payout Preferences</CardDescription>
+        <CardTitle>Receiving Method</CardTitle>
+        <CardAction>
+          <Button variant="ghost" size="icon-sm" className="bg-muted">
+            <IconPlaceholder
+              lucide="XIcon"
+              tabler="IconX"
+              hugeicons="Cancel01Icon"
+              phosphor="XIcon"
+              remixicon="RiCloseLine"
+            />
+          </Button>
+        </CardAction>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="account-holder">Account Holder Name</FieldLabel>
+            <Input id="account-holder" defaultValue="Synthetic Horizons Music LLC" />
+          </Field>
+          <FieldSet>
+            <FieldLegend variant="label">Receiving Method</FieldLegend>
+            <RadioGroup
+              defaultValue="bank"
+              className="grid grid-cols-1 items-start gap-3 md:grid-cols-2 style-sera:grid-cols-1"
+            >
+              <FieldLabel htmlFor="method-bank">
+                <Field orientation="horizontal" className="pb-2.5">
+                  <RadioGroupItem value="bank" id="method-bank" />
+                  <FieldContent>
+                    <FieldTitle>Bank Transfer</FieldTitle>
+                    <FieldDescription>SWIFT / IBAN</FieldDescription>
+                  </FieldContent>
+                </Field>
+              </FieldLabel>
+              <FieldLabel htmlFor="method-paypal">
+                <Field orientation="horizontal" className="pb-2.5">
+                  <RadioGroupItem value="paypal" id="method-paypal" />
+                  <FieldContent>
+                    <FieldTitle>PayPal</FieldTitle>
+                    <FieldDescription className="line-clamp-1">Instant Payout</FieldDescription>
+                  </FieldContent>
+                </Field>
+              </FieldLabel>
+            </RadioGroup>
+          </FieldSet>
+          <Field>
+            <FieldLabel htmlFor="iban">IBAN / Account Number</FieldLabel>
+            <Input id="iban" placeholder="DE89 3704 0044 ...." />
+          </Field>
+        </FieldGroup>
+      </CardContent>
+      <CardFooter>
+        <Button className="w-full" disabled>
+          Save Payout Settings
+        </Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/recent-transactions.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/recent-transactions.tsx
new file mode 100644
index 000000000..ce77ee3cb
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/recent-transactions.tsx
@@ -0,0 +1,276 @@
+"use client";
+
+import * as React from "react";
+
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { Table, TableBody, TableCell, TableRow } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function RecentTransactions() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Recent Transactions</CardTitle>
+        <CardDescription>Your latest account activity.</CardDescription>
+        <CardAction>
+          <Button variant="outline" size="sm">
+            View All
+          </Button>
+        </CardAction>
+      </CardHeader>
+      <CardContent>
+        <Table>
+          <TableBody>
+            <TableRow>
+              <TableCell className="w-10">
+                <div className="flex size-10 items-center justify-center rounded-lg bg-muted">
+                  <IconPlaceholder
+                    className="size-4 shrink-0"
+                    lucide="CoffeeIcon"
+                    tabler="IconCoffee"
+                    hugeicons="CoffeeIcon"
+                    phosphor="CoffeeIcon"
+                    remixicon="RiCupLine"
+                  />
+                </div>
+              </TableCell>
+              <TableCell>
+                <div className="flex flex-col">
+                  <span className="font-medium">Blue Bottle Coffee</span>
+                  <span className="text-sm text-muted-foreground">Food & Drink</span>
+                </div>
+              </TableCell>
+              <TableCell className="text-sm text-muted-foreground">Today, 10:24 AM</TableCell>
+              <TableCell className="text-right">
+                <span className="text-sm font-semibold tabular-nums">-$6.50</span>
+              </TableCell>
+              <TableCell className="w-8">
+                <DropdownMenu>
+                  <DropdownMenuTrigger asChild>
+                    <Button variant="ghost" size="icon-sm">
+                      <IconPlaceholder
+                        lucide="MoreHorizontalIcon"
+                        tabler="IconDotsVertical"
+                        hugeicons="MoreVerticalCircle01Icon"
+                        phosphor="DotsThreeIcon"
+                        remixicon="RiMore2Line"
+                      />
+                    </Button>
+                  </DropdownMenuTrigger>
+                  <DropdownMenuContent align="end">
+                    <DropdownMenuItem>View details</DropdownMenuItem>
+                    <DropdownMenuItem>Add note</DropdownMenuItem>
+                    <DropdownMenuItem>Categorize</DropdownMenuItem>
+                    <DropdownMenuSeparator />
+                    <DropdownMenuItem>Dispute</DropdownMenuItem>
+                  </DropdownMenuContent>
+                </DropdownMenu>
+              </TableCell>
+            </TableRow>
+            <TableRow>
+              <TableCell className="w-10">
+                <div className="flex size-10 items-center justify-center rounded-lg bg-muted">
+                  <IconPlaceholder
+                    className="size-4 shrink-0"
+                    lucide="ShoppingCartIcon"
+                    tabler="IconShoppingCart"
+                    hugeicons="ShoppingCart01Icon"
+                    phosphor="ShoppingCartIcon"
+                    remixicon="RiShoppingCartLine"
+                  />
+                </div>
+              </TableCell>
+              <TableCell>
+                <div className="flex flex-col">
+                  <span className="font-medium">Whole Foods Market</span>
+                  <span className="text-sm text-muted-foreground">Groceries</span>
+                </div>
+              </TableCell>
+              <TableCell className="text-sm text-muted-foreground">Yesterday</TableCell>
+              <TableCell className="text-right">
+                <span className="text-sm font-semibold tabular-nums">-$142.30</span>
+              </TableCell>
+              <TableCell className="w-8">
+                <DropdownMenu>
+                  <DropdownMenuTrigger asChild>
+                    <Button variant="ghost" size="icon-sm">
+                      <IconPlaceholder
+                        lucide="MoreHorizontalIcon"
+                        tabler="IconDotsVertical"
+                        hugeicons="MoreVerticalCircle01Icon"
+                        phosphor="DotsThreeIcon"
+                        remixicon="RiMore2Line"
+                      />
+                    </Button>
+                  </DropdownMenuTrigger>
+                  <DropdownMenuContent align="end">
+                    <DropdownMenuItem>View details</DropdownMenuItem>
+                    <DropdownMenuItem>Add note</DropdownMenuItem>
+                    <DropdownMenuItem>Categorize</DropdownMenuItem>
+                    <DropdownMenuSeparator />
+                    <DropdownMenuItem>Dispute</DropdownMenuItem>
+                  </DropdownMenuContent>
+                </DropdownMenu>
+              </TableCell>
+            </TableRow>
+            <TableRow>
+              <TableCell className="w-10">
+                <div className="flex size-10 items-center justify-center rounded-lg bg-muted">
+                  <IconPlaceholder
+                    className="size-4 shrink-0"
+                    lucide="WalletIcon"
+                    tabler="IconWallet"
+                    hugeicons="Wallet01Icon"
+                    phosphor="WalletIcon"
+                    remixicon="RiWalletLine"
+                  />
+                </div>
+              </TableCell>
+              <TableCell>
+                <div className="flex flex-col">
+                  <span className="font-medium">Stripe Payout</span>
+                  <span className="text-sm text-muted-foreground">Income</span>
+                </div>
+              </TableCell>
+              <TableCell className="text-sm text-muted-foreground">Oct 12</TableCell>
+              <TableCell className="text-right">
+                <span className="text-sm font-semibold text-emerald-500 tabular-nums">
+                  +$4,200.00
+                </span>
+              </TableCell>
+              <TableCell className="w-8">
+                <DropdownMenu>
+                  <DropdownMenuTrigger asChild>
+                    <Button variant="ghost" size="icon-sm">
+                      <IconPlaceholder
+                        lucide="MoreHorizontalIcon"
+                        tabler="IconDotsVertical"
+                        hugeicons="MoreVerticalCircle01Icon"
+                        phosphor="DotsThreeIcon"
+                        remixicon="RiMore2Line"
+                      />
+                    </Button>
+                  </DropdownMenuTrigger>
+                  <DropdownMenuContent align="end">
+                    <DropdownMenuItem>View details</DropdownMenuItem>
+                    <DropdownMenuItem>Add note</DropdownMenuItem>
+                    <DropdownMenuItem>Categorize</DropdownMenuItem>
+                    <DropdownMenuSeparator />
+                    <DropdownMenuItem>Dispute</DropdownMenuItem>
+                  </DropdownMenuContent>
+                </DropdownMenu>
+              </TableCell>
+            </TableRow>
+            <TableRow>
+              <TableCell className="w-10">
+                <div className="flex size-10 items-center justify-center rounded-lg bg-muted">
+                  <IconPlaceholder
+                    className="size-4 shrink-0"
+                    lucide="CarIcon"
+                    tabler="IconCar"
+                    hugeicons="Car01Icon"
+                    phosphor="CarIcon"
+                    remixicon="RiCarLine"
+                  />
+                </div>
+              </TableCell>
+              <TableCell>
+                <div className="flex flex-col">
+                  <span className="font-medium">Uber Technologies</span>
+                  <span className="text-sm text-muted-foreground">Transport</span>
+                </div>
+              </TableCell>
+              <TableCell className="text-sm text-muted-foreground">Oct 11</TableCell>
+              <TableCell className="text-right">
+                <span className="text-sm font-semibold tabular-nums">-$24.10</span>
+              </TableCell>
+              <TableCell className="w-8">
+                <DropdownMenu>
+                  <DropdownMenuTrigger asChild>
+                    <Button variant="ghost" size="icon-sm">
+                      <IconPlaceholder
+                        lucide="MoreHorizontalIcon"
+                        tabler="IconDotsVertical"
+                        hugeicons="MoreVerticalCircle01Icon"
+                        phosphor="DotsThreeIcon"
+                        remixicon="RiMore2Line"
+                      />
+                    </Button>
+                  </DropdownMenuTrigger>
+                  <DropdownMenuContent align="end">
+                    <DropdownMenuItem>View details</DropdownMenuItem>
+                    <DropdownMenuItem>Add note</DropdownMenuItem>
+                    <DropdownMenuItem>Categorize</DropdownMenuItem>
+                    <DropdownMenuSeparator />
+                    <DropdownMenuItem>Dispute</DropdownMenuItem>
+                  </DropdownMenuContent>
+                </DropdownMenu>
+              </TableCell>
+            </TableRow>
+            <TableRow>
+              <TableCell className="w-10">
+                <div className="flex size-10 items-center justify-center rounded-lg bg-muted">
+                  <IconPlaceholder
+                    className="size-4 shrink-0"
+                    lucide="TvIcon"
+                    tabler="IconDeviceTv"
+                    hugeicons="Tv01Icon"
+                    phosphor="TelevisionIcon"
+                    remixicon="RiTvLine"
+                  />
+                </div>
+              </TableCell>
+              <TableCell>
+                <div className="flex flex-col">
+                  <span className="font-medium">Netflix Subscription</span>
+                  <span className="text-sm text-muted-foreground">Entertainment</span>
+                </div>
+              </TableCell>
+              <TableCell className="text-sm text-muted-foreground">Oct 10</TableCell>
+              <TableCell className="text-right">
+                <span className="text-sm font-semibold tabular-nums">-$19.99</span>
+              </TableCell>
+              <TableCell className="w-8">
+                <DropdownMenu>
+                  <DropdownMenuTrigger asChild>
+                    <Button variant="ghost" size="icon-sm">
+                      <IconPlaceholder
+                        lucide="MoreHorizontalIcon"
+                        tabler="IconDotsVertical"
+                        hugeicons="MoreVerticalCircle01Icon"
+                        phosphor="DotsThreeIcon"
+                        remixicon="RiMore2Line"
+                      />
+                    </Button>
+                  </DropdownMenuTrigger>
+                  <DropdownMenuContent align="end">
+                    <DropdownMenuItem>View details</DropdownMenuItem>
+                    <DropdownMenuItem>Add note</DropdownMenuItem>
+                    <DropdownMenuItem>Categorize</DropdownMenuItem>
+                    <DropdownMenuSeparator />
+                    <DropdownMenuItem>Dispute</DropdownMenuItem>
+                  </DropdownMenuContent>
+                </DropdownMenu>
+              </TableCell>
+            </TableRow>
+          </TableBody>
+        </Table>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx
new file mode 100644
index 000000000..77bdf8fb6
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx
@@ -0,0 +1,99 @@
+"use client";
+
+import { Badge } from "@voidhash/ui";
+import { Card, CardContent, CardHeader } from "@voidhash/ui";
+import { InputGroup, InputGroupAddon, InputGroupInput } from "@voidhash/ui";
+import { Item, ItemContent, ItemDescription, ItemGroup, ItemMedia, ItemTitle } from "@voidhash/ui";
+import { ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+const HOLDINGS = [
+  {
+    ticker: "VOO",
+    name: "Vanguard S&P 500 ETF",
+    type: "ETF",
+    added: "Jan 2021",
+    shares: "112",
+    value: "$48,230.40",
+  },
+  {
+    ticker: "VIG",
+    name: "Vanguard Dividend Appreciation",
+    type: "ETF",
+    added: "Mar 2022",
+    shares: "450",
+    value: "$26,033.79",
+  },
+  {
+    ticker: "AAPL",
+    name: "Apple Inc.",
+    type: "Stock",
+    added: "Nov 2020",
+    shares: "85",
+    value: "$18,488.90",
+  },
+  {
+    ticker: "O",
+    name: "Realty Income Corp",
+    type: "REIT",
+    added: "Jun 2023",
+    shares: "320",
+    value: "$15,136.59",
+  },
+];
+
+export function ReleaseCatalog() {
+  return (
+    <Card>
+      <CardHeader>
+        <div className="flex items-center justify-between gap-3">
+          <InputGroup className="max-w-sm">
+            <InputGroupAddon>
+              <IconPlaceholder
+                lucide="SearchIcon"
+                tabler="IconSearch"
+                hugeicons="Search01Icon"
+                phosphor="MagnifyingGlassIcon"
+                remixicon="RiSearchLine"
+              />
+            </InputGroupAddon>
+            <InputGroupInput placeholder="Search holdings or tickers..." />
+          </InputGroup>
+          <ToggleGroup type="single" defaultValue="etfs" variant="outline" spacing={1}>
+            <ToggleGroupItem value="stocks">Stocks</ToggleGroupItem>
+            <ToggleGroupItem value="etfs">ETFs</ToggleGroupItem>
+            <ToggleGroupItem value="reits">REITs</ToggleGroupItem>
+          </ToggleGroup>
+        </div>
+      </CardHeader>
+      <CardContent>
+        <ItemGroup>
+          {HOLDINGS.map((holding) => (
+            <Item key={holding.ticker} variant="muted">
+              <ItemMedia>
+                <div className="flex size-12 items-center justify-center rounded-lg border text-sm font-semibold">
+                  {holding.ticker}
+                </div>
+              </ItemMedia>
+              <ItemContent>
+                <ItemTitle>{holding.name}</ItemTitle>
+                <ItemDescription className="text-xs tracking-wider uppercase">
+                  {holding.shares} Shares · {holding.added}
+                </ItemDescription>
+              </ItemContent>
+              <div className="flex shrink-0 items-center gap-6">
+                <Badge variant="outline">{holding.type}</Badge>
+                <div className="flex flex-col items-end gap-0.5">
+                  <span className="text-xs tracking-wider text-muted-foreground uppercase">
+                    Value
+                  </span>
+                  <span className="font-medium tabular-nums">{holding.value}</span>
+                </div>
+              </div>
+            </Item>
+          ))}
+        </ItemGroup>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx
new file mode 100644
index 000000000..4d5edd765
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx
@@ -0,0 +1,70 @@
+"use client";
+
+import * as React from "react";
+
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Slider } from "@voidhash/ui";
+import { ToggleGroup, ToggleGroupItem } from "@voidhash/ui";
+
+export function RollerShades() {
+  const [position, setPosition] = React.useState([50]);
+
+  const preset = position[0] <= 10 ? "open" : position[0] >= 90 ? "closed" : "half";
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Living Room</CardTitle>
+        <CardDescription>Roller Shades</CardDescription>
+      </CardHeader>
+      <CardContent className="flex flex-col gap-4">
+        <div className="flex h-32 flex-col overflow-hidden rounded-lg border bg-muted">
+          <div
+            className="bg-muted-foreground transition-all duration-300"
+            style={{ height: `${position[0]}%` }}
+          />
+        </div>
+        <div className="flex items-center gap-3">
+          <span className="text-xs font-medium tracking-wider text-muted-foreground uppercase">
+            Open
+          </span>
+          <Slider value={position} onValueChange={setPosition} max={100} className="flex-1" />
+          <span className="text-xs font-medium tracking-wider text-muted-foreground uppercase">
+            Close
+          </span>
+        </div>
+      </CardContent>
+      <CardFooter>
+        <ToggleGroup
+          type="single"
+          value={preset}
+          onValueChange={(value) => {
+            if (value === "open") setPosition([0]);
+            if (value === "half") setPosition([50]);
+            if (value === "closed") setPosition([100]);
+          }}
+          variant="outline"
+          spacing={1}
+          className="w-full"
+        >
+          <ToggleGroupItem value="open" className="flex-1">
+            Open
+          </ToggleGroupItem>
+          <ToggleGroupItem value="half" className="flex-1">
+            Half
+          </ToggleGroupItem>
+          <ToggleGroupItem value="closed" className="flex-1">
+            Closed
+          </ToggleGroupItem>
+        </ToggleGroup>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/savings-progress.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/savings-progress.tsx
new file mode 100644
index 000000000..aad759d97
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/savings-progress.tsx
@@ -0,0 +1,93 @@
+"use client";
+
+import { Label, Pie, PieChart } from "recharts";
+
+import { Card, CardContent, CardFooter } from "@voidhash/ui";
+import { ChartContainer, ChartTooltip, ChartTooltipContent, type ChartConfig } from "@voidhash/ui";
+import { Separator } from "@voidhash/ui";
+
+const chartData = [
+  { name: "saved", value: 24000, fill: "var(--color-saved)" },
+  { name: "remaining", value: 6000, fill: "var(--color-remaining)" },
+];
+
+const chartConfig = {
+  saved: {
+    label: "Saved",
+    color: "var(--chart-2)",
+  },
+  remaining: {
+    label: "Remaining",
+    color: "var(--chart-1)",
+  },
+} satisfies ChartConfig;
+
+export function SavingsProgress() {
+  return (
+    <Card>
+      <CardContent>
+        <ChartContainer config={chartConfig} className="mx-auto aspect-square max-h-[220px]">
+          <PieChart>
+            <ChartTooltip cursor={false} content={<ChartTooltipContent hideLabel />} />
+            <Pie
+              data={chartData}
+              dataKey="value"
+              nameKey="name"
+              innerRadius={70}
+              outerRadius={95}
+              strokeWidth={0}
+              startAngle={90}
+              endAngle={-270}
+            >
+              <Label
+                content={({ viewBox }) => {
+                  if (viewBox && "cx" in viewBox && "cy" in viewBox) {
+                    return (
+                      <text
+                        x={viewBox.cx}
+                        y={viewBox.cy}
+                        textAnchor="middle"
+                        dominantBaseline="middle"
+                      >
+                        <tspan
+                          x={viewBox.cx}
+                          y={(viewBox.cy || 0) - 12}
+                          className="fill-foreground text-2xl font-bold"
+                        >
+                          $24,000
+                        </tspan>
+                        <tspan
+                          x={viewBox.cx}
+                          y={(viewBox.cy || 0) + 12}
+                          className="fill-muted-foreground text-xs"
+                        >
+                          80% of $30,000
+                        </tspan>
+                      </text>
+                    );
+                  }
+                }}
+              />
+            </Pie>
+          </PieChart>
+        </ChartContainer>
+      </CardContent>
+      <CardFooter className="flex-col gap-0">
+        <div className="flex w-full items-center justify-between py-3">
+          <span className="text-sm text-muted-foreground">Projected Finish</span>
+          <span className="text-sm font-semibold">October 2024</span>
+        </div>
+        <Separator />
+        <div className="flex w-full items-center justify-between py-3">
+          <span className="text-sm text-muted-foreground">Monthly Average</span>
+          <span className="text-sm font-semibold tabular-nums">$1,250</span>
+        </div>
+        <Separator />
+        <div className="flex w-full items-center justify-between py-3">
+          <span className="text-sm text-muted-foreground">Top Contributor</span>
+          <span className="text-sm font-semibold">Auto-Transfer</span>
+        </div>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/savings-targets.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/savings-targets.tsx
new file mode 100644
index 000000000..5d1ceb7c7
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/savings-targets.tsx
@@ -0,0 +1,116 @@
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Field, FieldDescription, FieldGroup, FieldLabel } from "@voidhash/ui";
+import { InputGroup, InputGroupAddon, InputGroupInput, InputGroupText } from "@voidhash/ui";
+import { Item, ItemContent, ItemDescription, ItemFooter, ItemGroup } from "@voidhash/ui";
+import { NativeSelect, NativeSelectOption } from "@voidhash/ui";
+import { Progress } from "@voidhash/ui";
+
+export function SavingsTargets() {
+  return (
+    <div className="grid grid-cols-2 gap-(--gap)">
+      <Card>
+        <CardHeader>
+          <CardTitle>Savings Targets</CardTitle>
+          <CardDescription>Active milestones for 2024</CardDescription>
+          <CardAction>
+            <Button variant="outline" size="sm">
+              New Goal
+            </Button>
+          </CardAction>
+        </CardHeader>
+        <CardContent>
+          <ItemGroup className="gap-3">
+            <Item variant="muted" className="flex-col items-stretch">
+              <ItemContent className="gap-3">
+                <ItemDescription className="cn-font-heading text-xs font-medium tracking-wider text-muted-foreground uppercase">
+                  Retirement
+                </ItemDescription>
+                <span className="text-3xl font-semibold tabular-nums">$420,000</span>
+                <Progress value={65} />
+              </ItemContent>
+              <ItemFooter>
+                <span className="text-sm text-muted-foreground">65% achieved</span>
+                <span className="text-sm font-medium tabular-nums">$273,000</span>
+              </ItemFooter>
+            </Item>
+            <Item variant="muted" className="flex-col items-stretch">
+              <ItemContent className="gap-3">
+                <ItemDescription className="cn-font-heading text-xs font-medium tracking-wider text-muted-foreground uppercase">
+                  Real Estate
+                </ItemDescription>
+                <span className="text-3xl font-semibold tabular-nums">$85,000</span>
+                <Progress value={32} />
+              </ItemContent>
+              <ItemFooter>
+                <span className="text-sm text-muted-foreground">32% achieved</span>
+                <span className="text-sm font-medium tabular-nums">$27,200</span>
+              </ItemFooter>
+            </Item>
+          </ItemGroup>
+        </CardContent>
+        <CardFooter>
+          <CardDescription className="text-center">
+            You have not met your targets for this year.
+          </CardDescription>
+        </CardFooter>
+      </Card>
+      <Card>
+        <CardHeader>
+          <CardTitle>Buy Investment</CardTitle>
+          <CardAction>
+            <Button variant="outline" size="sm">
+              View Orders
+            </Button>
+          </CardAction>
+        </CardHeader>
+        <CardContent className="flex flex-1 flex-col gap-3">
+          <FieldGroup className="flex-1">
+            <Field>
+              <FieldLabel htmlFor="invest-amount">Amount to Invest</FieldLabel>
+              <InputGroup>
+                <InputGroupAddon>
+                  <InputGroupText>$</InputGroupText>
+                </InputGroupAddon>
+                <InputGroupInput id="invest-amount" defaultValue="1,000.00" />
+              </InputGroup>
+            </Field>
+            <Field>
+              <FieldLabel htmlFor="invest-type">Order Type</FieldLabel>
+              <NativeSelect id="invest-type" defaultValue="market">
+                <NativeSelectOption value="market">Market Order</NativeSelectOption>
+                <NativeSelectOption value="limit">Limit Order</NativeSelectOption>
+                <NativeSelectOption value="stop">Stop Order</NativeSelectOption>
+              </NativeSelect>
+              <FieldDescription>Market orders execute at the current price.</FieldDescription>
+            </Field>
+            <div className="flex flex-col gap-2">
+              <div className="flex items-center justify-between">
+                <span className="text-sm text-muted-foreground">Estimated Shares</span>
+                <span className="text-sm font-semibold tabular-nums">1.95</span>
+              </div>
+              <div className="flex items-center justify-between">
+                <span className="text-sm text-muted-foreground">Buying Power</span>
+                <span className="text-sm font-semibold tabular-nums">$12,450.00</span>
+              </div>
+            </div>
+          </FieldGroup>
+        </CardContent>
+        <CardFooter className="flex-col gap-3">
+          <Button className="w-full">Review Order</Button>
+          <CardDescription className="text-center">
+            Trades are typically executed within minutes during market hours.
+          </CardDescription>
+        </CardFooter>
+      </Card>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/sidebar-nav.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/sidebar-nav.tsx
new file mode 100644
index 000000000..c391f4e38
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/sidebar-nav.tsx
@@ -0,0 +1,285 @@
+"use client";
+
+import { Card } from "@voidhash/ui";
+import {
+  Sidebar,
+  SidebarContent,
+  SidebarGroup,
+  SidebarGroupContent,
+  SidebarGroupLabel,
+  SidebarMenu,
+  SidebarMenuButton,
+  SidebarMenuItem,
+  SidebarProvider,
+  SidebarSeparator,
+} from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function SidebarNav() {
+  return (
+    <div className="grid grid-cols-2 items-start gap-6">
+      <Card className="overflow-hidden py-0">
+        <SidebarProvider className="min-h-0">
+          <Sidebar collapsible="none" className="w-full bg-transparent">
+            <SidebarContent className="gap-0">
+              <SidebarGroup className="pb-1">
+                <SidebarGroupLabel>Overview</SidebarGroupLabel>
+                <SidebarGroupContent>
+                  <SidebarMenu>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton isActive>
+                        <IconPlaceholder
+                          lucide="LayoutDashboardIcon"
+                          tabler="IconLayoutDashboard"
+                          hugeicons="DashboardSquare01Icon"
+                          phosphor="SquaresFourIcon"
+                          remixicon="RiDashboardLine"
+                        />
+                        Dashboard
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="ArrowLeftRightIcon"
+                          tabler="IconArrowsLeftRight"
+                          hugeicons="ArrowDataTransferHorizontalIcon"
+                          phosphor="ArrowsLeftRightIcon"
+                          remixicon="RiArrowLeftRightLine"
+                        />
+                        Transactions
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="TrendingUpIcon"
+                          tabler="IconTrendingUp"
+                          hugeicons="AnalyticsUpIcon"
+                          phosphor="TrendUpIcon"
+                          remixicon="RiLineChartLine"
+                        />
+                        Investments
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="Building2Icon"
+                          tabler="IconBuildingBank"
+                          hugeicons="BankIcon"
+                          phosphor="BankIcon"
+                          remixicon="RiBankLine"
+                        />
+                        Accounts
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="PieChartIcon"
+                          tabler="IconChartPie"
+                          hugeicons="PieChartIcon"
+                          phosphor="ChartPieIcon"
+                          remixicon="RiPieChartLine"
+                        />
+                        Spending
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                  </SidebarMenu>
+                </SidebarGroupContent>
+              </SidebarGroup>
+              <SidebarSeparator className="w-auto!" />
+              <SidebarGroup className="pt-1">
+                <SidebarGroupLabel>Planning</SidebarGroupLabel>
+                <SidebarGroupContent>
+                  <SidebarMenu>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="TargetIcon"
+                          tabler="IconTarget"
+                          hugeicons="Target02Icon"
+                          phosphor="TargetIcon"
+                          remixicon="RiFocus3Line"
+                        />
+                        Goals
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="WalletIcon"
+                          tabler="IconWallet"
+                          hugeicons="Wallet01Icon"
+                          phosphor="WalletIcon"
+                          remixicon="RiWalletLine"
+                        />
+                        Budget
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="FileBarChartIcon"
+                          tabler="IconReportAnalytics"
+                          hugeicons="ChartBarLineIcon"
+                          phosphor="ChartBarIcon"
+                          remixicon="RiBarChartLine"
+                        />
+                        Reports
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="FileTextIcon"
+                          tabler="IconFileText"
+                          hugeicons="File02Icon"
+                          phosphor="FileTextIcon"
+                          remixicon="RiFileTextLine"
+                        />
+                        Documents
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                  </SidebarMenu>
+                </SidebarGroupContent>
+              </SidebarGroup>
+            </SidebarContent>
+          </Sidebar>
+        </SidebarProvider>
+      </Card>
+      <Card className="overflow-hidden py-0">
+        <SidebarProvider className="min-h-0">
+          <Sidebar collapsible="none" className="w-full bg-transparent">
+            <SidebarContent className="gap-0">
+              <SidebarGroup className="pb-1">
+                <SidebarGroupLabel>Account</SidebarGroupLabel>
+                <SidebarGroupContent>
+                  <SidebarMenu>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="UserIcon"
+                          tabler="IconUser"
+                          hugeicons="UserIcon"
+                          phosphor="UserIcon"
+                          remixicon="RiUserLine"
+                        />
+                        Profile
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton isActive>
+                        <IconPlaceholder
+                          lucide="CreditCardIcon"
+                          tabler="IconCreditCard"
+                          hugeicons="CreditCardIcon"
+                          phosphor="CreditCardIcon"
+                          remixicon="RiBankCardLine"
+                        />
+                        Billing
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="BellIcon"
+                          tabler="IconBell"
+                          hugeicons="Notification03Icon"
+                          phosphor="BellIcon"
+                          remixicon="RiBellLine"
+                        />
+                        Notifications
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="ShieldIcon"
+                          tabler="IconShield"
+                          hugeicons="ShieldIcon"
+                          phosphor="ShieldIcon"
+                          remixicon="RiShieldLine"
+                        />
+                        Security
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="PaintbrushIcon"
+                          tabler="IconPalette"
+                          hugeicons="PaintBoardIcon"
+                          phosphor="PaletteIcon"
+                          remixicon="RiPaletteLine"
+                        />
+                        Appearance
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                  </SidebarMenu>
+                </SidebarGroupContent>
+              </SidebarGroup>
+              <SidebarSeparator className="w-auto!" />
+              <SidebarGroup className="pt-1">
+                <SidebarGroupLabel>Support</SidebarGroupLabel>
+                <SidebarGroupContent>
+                  <SidebarMenu>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="CircleHelpIcon"
+                          tabler="IconHelp"
+                          hugeicons="HelpCircleIcon"
+                          phosphor="QuestionIcon"
+                          remixicon="RiQuestionLine"
+                        />
+                        Help Center
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="MessageSquareIcon"
+                          tabler="IconMessage"
+                          hugeicons="Message01Icon"
+                          phosphor="ChatIcon"
+                          remixicon="RiChat1Line"
+                        />
+                        Contact Us
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="BookOpenIcon"
+                          tabler="IconBook"
+                          hugeicons="BookOpen02Icon"
+                          phosphor="BookOpenIcon"
+                          remixicon="RiBookOpenLine"
+                        />
+                        Documentation
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                    <SidebarMenuItem>
+                      <SidebarMenuButton>
+                        <IconPlaceholder
+                          lucide="ActivityIcon"
+                          tabler="IconActivity"
+                          hugeicons="ActivityIcon"
+                          phosphor="ActivityIcon"
+                          remixicon="RiPulseLine"
+                        />
+                        Status
+                      </SidebarMenuButton>
+                    </SidebarMenuItem>
+                  </SidebarMenu>
+                </SidebarGroupContent>
+              </SidebarGroup>
+            </SidebarContent>
+          </Sidebar>
+        </SidebarProvider>
+      </Card>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx
new file mode 100644
index 000000000..2c4c4b36b
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx
@@ -0,0 +1,85 @@
+import { Button } from "@voidhash/ui";
+import { Card, CardContent, CardFooter, CardHeader, CardTitle } from "@voidhash/ui";
+import { Field, FieldGroup, FieldLabel } from "@voidhash/ui";
+import { InputGroup, InputGroupAddon, InputGroupInput } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function SocialLinks() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Social Links</CardTitle>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="spotify-url">Spotify Artist URL</FieldLabel>
+            <InputGroup>
+              <InputGroupAddon>
+                <IconPlaceholder
+                  lucide="CirclePlusIcon"
+                  tabler="IconCirclePlus"
+                  hugeicons="PlusSignCircleIcon"
+                  phosphor="PlusCircleIcon"
+                  remixicon="RiAddCircleLine"
+                />
+              </InputGroupAddon>
+              <InputGroupInput id="spotify-url" defaultValue="spotify.com/artist/3j...2k" />
+            </InputGroup>
+          </Field>
+          <Field>
+            <FieldLabel htmlFor="instagram-handle">Instagram Handle</FieldLabel>
+            <InputGroup>
+              <InputGroupAddon>
+                <IconPlaceholder
+                  lucide="CameraIcon"
+                  tabler="IconCamera"
+                  hugeicons="Camera01Icon"
+                  phosphor="CameraIcon"
+                  remixicon="RiCameraLine"
+                />
+              </InputGroupAddon>
+              <InputGroupInput id="instagram-handle" defaultValue="@julianduryea_music" />
+            </InputGroup>
+          </Field>
+          <Field>
+            <FieldLabel htmlFor="soundcloud-url">SoundCloud URL</FieldLabel>
+            <InputGroup>
+              <InputGroupAddon>
+                <IconPlaceholder
+                  lucide="CloudIcon"
+                  tabler="IconCloud"
+                  hugeicons="CloudUploadIcon"
+                  phosphor="CloudIcon"
+                  remixicon="RiCloudLine"
+                />
+              </InputGroupAddon>
+              <InputGroupInput id="soundcloud-url" placeholder="soundcloud.com/username" />
+            </InputGroup>
+          </Field>
+          <Field>
+            <FieldLabel htmlFor="website-url">Website</FieldLabel>
+            <InputGroup>
+              <InputGroupAddon>
+                <IconPlaceholder
+                  lucide="GlobeIcon"
+                  tabler="IconWorld"
+                  hugeicons="Globe02Icon"
+                  phosphor="GlobeIcon"
+                  remixicon="RiGlobalLine"
+                />
+              </InputGroupAddon>
+              <InputGroupInput id="website-url" placeholder="https://yoursite.com" />
+            </InputGroup>
+          </Field>
+        </FieldGroup>
+      </CardContent>
+      <CardFooter className="justify-end gap-2 style-sera:justify-center">
+        <Button variant="secondary" className="style-sera:flex-1">
+          Discard
+        </Button>
+        <Button className="style-sera:flex-1">Save Changes</Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/stock-performance.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/stock-performance.tsx
new file mode 100644
index 000000000..d02f5cd48
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/stock-performance.tsx
@@ -0,0 +1,119 @@
+"use client";
+
+import * as React from "react";
+import { Area, AreaChart, CartesianGrid } from "recharts";
+
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
+import { ChartContainer, ChartTooltip, ChartTooltipContent, type ChartConfig } from "@voidhash/ui";
+import {
+  Combobox,
+  ComboboxContent,
+  ComboboxEmpty,
+  ComboboxInput,
+  ComboboxItem,
+  ComboboxList,
+} from "@voidhash/ui";
+import { Field, FieldGroup, FieldLabel } from "@voidhash/ui";
+import { Separator } from "@voidhash/ui";
+
+const TICKERS = ["VOO", "VIG", "AAPL", "MSFT", "GOOGL", "AMZN", "TSLA"];
+
+const CHART_DATA: Record<string, { month: string; price: number }[]> = {
+  VOO: [
+    { month: "Jan", price: 412 },
+    { month: "Feb", price: 438 },
+    { month: "Mar", price: 395 },
+    { month: "Apr", price: 450 },
+    { month: "May", price: 420 },
+    { month: "Jun", price: 462 },
+  ],
+  AAPL: [
+    { month: "Jan", price: 185 },
+    { month: "Feb", price: 210 },
+    { month: "Mar", price: 172 },
+    { month: "Apr", price: 198 },
+    { month: "May", price: 178 },
+    { month: "Jun", price: 215 },
+  ],
+};
+
+const DEFAULT_DATA = [
+  { month: "Jan", price: 100 },
+  { month: "Feb", price: 118 },
+  { month: "Mar", price: 95 },
+  { month: "Apr", price: 125 },
+  { month: "May", price: 108 },
+  { month: "Jun", price: 130 },
+];
+
+const chartConfig = {
+  price: {
+    label: "Price",
+    color: "var(--chart-1)",
+  },
+} satisfies ChartConfig;
+
+export function StockPerformance() {
+  const [ticker, setTicker] = React.useState("VOO");
+
+  const data = CHART_DATA[ticker] ?? DEFAULT_DATA;
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Stock Performance</CardTitle>
+        <CardDescription>6-month price history.</CardDescription>
+      </CardHeader>
+      <CardContent className="flex flex-col gap-4">
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="ticker-select">Ticker</FieldLabel>
+            <Combobox
+              items={TICKERS}
+              value={ticker}
+              onValueChange={(value) => {
+                if (value !== null) setTicker(value);
+              }}
+            >
+              <ComboboxInput id="ticker-select" placeholder="Search ticker..." />
+              <ComboboxContent>
+                <ComboboxEmpty>No tickers found.</ComboboxEmpty>
+                <ComboboxList>
+                  {(item) => (
+                    <ComboboxItem key={item} value={item}>
+                      {item}
+                    </ComboboxItem>
+                  )}
+                </ComboboxList>
+              </ComboboxContent>
+            </Combobox>
+          </Field>
+        </FieldGroup>
+        <Separator className="style-sera:hidden" />
+        <ChartContainer config={chartConfig} className="h-[200px] w-full">
+          <AreaChart
+            accessibilityLayer
+            data={data}
+            margin={{ left: 0, right: 0, top: 8, bottom: 0 }}
+          >
+            <defs>
+              <linearGradient id="fillPrice" x1="0" y1="0" x2="0" y2="1">
+                <stop offset="0%" stopColor="var(--color-price)" stopOpacity={0.3} />
+                <stop offset="100%" stopColor="var(--color-price)" stopOpacity={0.05} />
+              </linearGradient>
+            </defs>
+            <CartesianGrid vertical={false} strokeDasharray="3 3" />
+            <ChartTooltip cursor={false} content={<ChartTooltipContent hideLabel />} />
+            <Area
+              type="monotone"
+              dataKey="price"
+              stroke="var(--color-price)"
+              strokeWidth={2}
+              fill="url(#fillPrice)"
+            />
+          </AreaChart>
+        </ChartContainer>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/syncing-state.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/syncing-state.tsx
new file mode 100644
index 000000000..e2de49252
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/syncing-state.tsx
@@ -0,0 +1,34 @@
+import { Button } from "@voidhash/ui";
+import { Card, CardContent } from "@voidhash/ui";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui";
+import { Spinner } from "@voidhash/ui/spinner";
+
+export function SyncingState() {
+  return (
+    <Card>
+      <CardContent className="p-0">
+        <Empty className="p-4">
+          <EmptyHeader>
+            <EmptyMedia variant="icon">
+              <Spinner />
+            </EmptyMedia>
+            <EmptyTitle>Syncing your accounts</EmptyTitle>
+            <EmptyDescription>
+              We&apos;re pulling in your latest transactions. This usually takes a few seconds.
+            </EmptyDescription>
+          </EmptyHeader>
+          <EmptyContent>
+            <Button variant="outline">Cancel</Button>
+          </EmptyContent>
+        </Empty>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/transfer-funds.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/transfer-funds.tsx
new file mode 100644
index 000000000..17ea2f0b5
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/transfer-funds.tsx
@@ -0,0 +1,107 @@
+import { Button } from "@voidhash/ui";
+import {
+  Card,
+  CardAction,
+  CardContent,
+  CardDescription,
+  CardFooter,
+  CardHeader,
+  CardTitle,
+} from "@voidhash/ui";
+import { Field, FieldGroup, FieldLabel } from "@voidhash/ui";
+import { InputGroup, InputGroupAddon, InputGroupInput, InputGroupText } from "@voidhash/ui";
+import { Item, ItemContent } from "@voidhash/ui";
+import {
+  Select,
+  SelectContent,
+  SelectGroup,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { Separator } from "@voidhash/ui";
+import { IconPlaceholder } from "../icon-placeholder";
+
+export function TransferFunds() {
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Transfer Funds</CardTitle>
+        <CardDescription>Move money between your connected accounts.</CardDescription>
+        <CardAction>
+          <Button variant="ghost" size="icon-sm" className="bg-muted">
+            <IconPlaceholder
+              lucide="XIcon"
+              tabler="IconX"
+              hugeicons="Cancel01Icon"
+              phosphor="XIcon"
+              remixicon="RiCloseLine"
+            />
+          </Button>
+        </CardAction>
+      </CardHeader>
+      <CardContent>
+        <FieldGroup>
+          <Field>
+            <FieldLabel htmlFor="transfer-amount">Amount to Transfer</FieldLabel>
+            <InputGroup>
+              <InputGroupAddon>
+                <InputGroupText>$</InputGroupText>
+              </InputGroupAddon>
+              <InputGroupInput id="transfer-amount" defaultValue="1,200.00" />
+            </InputGroup>
+          </Field>
+          <Field>
+            <FieldLabel htmlFor="from-account">From Account</FieldLabel>
+            <Select defaultValue="checking">
+              <SelectTrigger id="from-account" className="w-full">
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectGroup>
+                  <SelectItem value="checking">Main Checking (··8402) — $12,450.00</SelectItem>
+                  <SelectItem value="business">Business (··7731) — $8,920.00</SelectItem>
+                </SelectGroup>
+              </SelectContent>
+            </Select>
+          </Field>
+          <Field>
+            <FieldLabel htmlFor="to-account">To Account</FieldLabel>
+            <Select defaultValue="savings">
+              <SelectTrigger id="to-account" className="w-full">
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectGroup>
+                  <SelectItem value="savings">High Yield Savings (··1192) — $42,100.00</SelectItem>
+                  <SelectItem value="investment">Investment (··3349) — $18,200.00</SelectItem>
+                </SelectGroup>
+              </SelectContent>
+            </Select>
+          </Field>
+          <Item variant="muted" className="flex-col items-stretch">
+            <ItemContent className="gap-3">
+              <div className="flex items-center justify-between">
+                <span className="text-sm text-muted-foreground">Estimated arrival</span>
+                <span className="text-sm font-medium">Today, Apr 14</span>
+              </div>
+              <Separator />
+              <div className="flex items-center justify-between">
+                <span className="text-sm text-muted-foreground">Transaction fee</span>
+                <span className="text-sm font-medium tabular-nums">$0.00</span>
+              </div>
+              <Separator />
+              <div className="flex items-center justify-between">
+                <span className="text-sm font-medium">Total amount</span>
+                <span className="text-sm font-semibold tabular-nums">$1,200.00</span>
+              </div>
+            </ItemContent>
+          </Item>
+        </FieldGroup>
+      </CardContent>
+      <CardFooter>
+        <Button className="w-full">Confirm Transfer</Button>
+      </CardFooter>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/upcoming-payments.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/upcoming-payments.tsx
new file mode 100644
index 000000000..a5d323fb0
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/upcoming-payments.tsx
@@ -0,0 +1,54 @@
+"use client";
+
+import * as React from "react";
+
+import { Badge } from "@voidhash/ui";
+import { Calendar } from "@voidhash/ui";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
+import { Item, ItemContent, ItemDescription, ItemGroup, ItemTitle } from "@voidhash/ui";
+
+export function UpcomingPayments() {
+  const [date, setDate] = React.useState<Date | undefined>(new Date());
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>Upcoming Payments</CardTitle>
+        <CardDescription>Select a date to view scheduled payments.</CardDescription>
+      </CardHeader>
+      <CardContent className="flex flex-col gap-4">
+        <Item variant="outline" className="justify-center">
+          <Calendar
+            mode="single"
+            selected={date}
+            onSelect={setDate}
+            className="w-full [--cell-size:--spacing(8)] md:[--cell-size:--spacing(10)] style-sera:md:[--cell-size:--spacing(9)]"
+          />
+        </Item>
+        <ItemGroup className="w-full">
+          <Item variant="muted">
+            <ItemContent>
+              <ItemTitle>Netflix Subscription</ItemTitle>
+              <ItemDescription>Apr 15, 2024</ItemDescription>
+            </ItemContent>
+            <Badge variant="secondary">$19.99</Badge>
+          </Item>
+          <Item variant="muted">
+            <ItemContent>
+              <ItemTitle>Rent Payment</ItemTitle>
+              <ItemDescription>Apr 1, 2024</ItemDescription>
+            </ItemContent>
+            <Badge variant="secondary">$2,400.00</Badge>
+          </Item>
+          <Item variant="muted">
+            <ItemContent>
+              <ItemTitle>Auto Insurance</ItemTitle>
+              <ItemDescription>Apr 22, 2024</ItemDescription>
+            </ItemContent>
+            <Badge variant="secondary">$186.00</Badge>
+          </Item>
+        </ItemGroup>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/icon-placeholder.tsx b/apps/www/src/features/design/components/docs/component-overview/icon-placeholder.tsx
new file mode 100644
index 000000000..6112a5d76
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/icon-placeholder.tsx
@@ -0,0 +1,31 @@
+"use client";
+
+import type { ComponentProps, ComponentType } from "react";
+import * as LucideIcons from "lucide-react";
+import { SquareIcon } from "lucide-react";
+
+type IconPlaceholderProps = ComponentProps<"svg"> & {
+  lucide: string;
+  tabler?: string;
+  hugeicons?: string;
+  phosphor?: string;
+  remixicon?: string;
+};
+
+/**
+ * Resolves the Lucide icon selected by the Voidhash design system.
+ */
+export function IconPlaceholder({
+  lucide,
+  tabler: _tabler,
+  hugeicons: _hugeicons,
+  phosphor: _phosphor,
+  remixicon: _remixicon,
+  ...props
+}: IconPlaceholderProps) {
+  const Icon = LucideIcons[lucide as keyof typeof LucideIcons] as
+    | ComponentType<ComponentProps<"svg">>
+    | undefined;
+
+  return Icon ? <Icon {...props} /> : <SquareIcon {...props} />;
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/index.tsx b/apps/www/src/features/design/components/docs/component-overview/index.tsx
new file mode 100644
index 000000000..0297eb504
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/index.tsx
@@ -0,0 +1,100 @@
+import { AccountAccess } from "./cards/account-access";
+import { CardOverview } from "./cards/card-overview";
+import { ClaimableBalance } from "./cards/claimable-balance";
+import { ContributionHistory } from "./cards/contribution-history";
+import { CoverArt } from "./cards/cover-art";
+import { DividendIncome } from "./cards/dividend-income";
+import { EmptyConnectBank } from "./cards/empty-connect-bank";
+import { EmptyDistributeTrack } from "./cards/empty-distribute-track";
+import { EmptyExploreCatalog } from "./cards/empty-explore-catalog";
+import { Faq } from "./cards/faq";
+import { FrontDoor } from "./cards/front-door";
+import { IndexInvesting } from "./cards/index-investing";
+import { KitchenIsland } from "./cards/kitchen-island";
+import { LoadingCard } from "./cards/loading-card";
+import { NewMilestone } from "./cards/new-milestone";
+import { NotificationSettings } from "./cards/notification-settings";
+import { Payments } from "./cards/payments";
+import { PayoutThreshold } from "./cards/payout-threshold";
+import { PowerUsage } from "./cards/power-usage";
+import { Preferences } from "./cards/preferences";
+import { ProjectActions } from "./cards/project-actions";
+import { QrConnect } from "./cards/qr-connect";
+import { ReceivingMethod } from "./cards/receiving-method";
+import { RecentTransactions } from "./cards/recent-transactions";
+import { ReleaseCatalog } from "./cards/release-catalog";
+import { RollerShades } from "./cards/roller-shades";
+import { SavingsProgress } from "./cards/savings-progress";
+import { SavingsTargets } from "./cards/savings-targets";
+import { SidebarNav } from "./cards/sidebar-nav";
+import { SocialLinks } from "./cards/social-links";
+import { StockPerformance } from "./cards/stock-performance";
+import { SyncingState } from "./cards/syncing-state";
+import { TransferFunds } from "./cards/transfer-funds";
+import { UpcomingPayments } from "./cards/upcoming-payments";
+
+export default function Preview02Example() {
+  return (
+    <div className="overflow-x-auto overflow-y-hidden bg-muted contain-[paint] [--gap:--spacing(4)] 3xl:[--gap:--spacing(12)] md:[--gap:--spacing(10)] dark:bg-background style-lyra:md:[--gap:--spacing(6)] style-mira:md:[--gap:--spacing(6)]">
+      <div className="flex w-full min-w-max justify-center">
+        <div
+          className="grid w-[2400px] grid-cols-7 items-start gap-(--gap) bg-muted p-(--gap) md:w-[3000px] dark:bg-background style-lyra:md:w-[2600px] style-mira:md:w-[2600px] *:[div]:gap-(--gap)"
+          data-slot="capture-target"
+        >
+          <div className="flex flex-col p-1 [contain-intrinsic-size:380px_1200px] [content-visibility:auto]">
+            <ContributionHistory />
+            <EmptyDistributeTrack />
+            <QrConnect />
+            <DividendIncome />
+            <IndexInvesting />
+            <SyncingState />
+          </div>
+          <div className="flex flex-col p-1 [contain-intrinsic-size:380px_1200px] [content-visibility:auto]">
+            <PayoutThreshold />
+            <ClaimableBalance />
+            <Preferences />
+            <SavingsProgress />
+            <KitchenIsland />
+          </div>
+          <div className="col-span-2 flex flex-col p-1 [contain-intrinsic-size:760px_1200px] [content-visibility:auto]">
+            <SavingsTargets />
+            <ProjectActions />
+            <RecentTransactions />
+            <div className="grid grid-cols-2 items-start gap-(--gap)">
+              <div className="flex flex-col gap-(--gap)">
+                <SidebarNav />
+                <Faq />
+              </div>
+              <div className="flex flex-col gap-(--gap)">
+                <Payments />
+                <FrontDoor />
+              </div>
+            </div>
+            <ReleaseCatalog />
+          </div>
+          <div className="flex flex-col p-1 [contain-intrinsic-size:380px_1200px] [content-visibility:auto]">
+            <AccountAccess />
+            <CardOverview />
+            <TransferFunds />
+            <CoverArt />
+            <LoadingCard />
+          </div>
+          <div className="flex flex-col p-1 [contain-intrinsic-size:380px_1200px] [content-visibility:auto]">
+            <ReceivingMethod />
+            <PowerUsage />
+            <EmptyConnectBank />
+            <UpcomingPayments />
+            <RollerShades />
+          </div>
+          <div className="flex flex-col p-1 [contain-intrinsic-size:380px_1200px] [content-visibility:auto]">
+            <StockPerformance />
+            <EmptyExploreCatalog />
+            <NewMilestone />
+            <SocialLinks />
+            <NotificationSettings />
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/component-overview/preview-config.ts b/apps/www/src/features/design/components/docs/component-overview/preview-config.ts
new file mode 100644
index 000000000..576ec62ae
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/component-overview/preview-config.ts
@@ -0,0 +1,10 @@
+const previewConfig = {
+  style: "nova",
+} as const;
+
+/**
+ * Provides the upstream preview's default style selection.
+ */
+export function useDesignSystemSearchParams() {
+  return [previewConfig] as const;
+}
diff --git a/apps/www/src/features/design/components/docs/component-registry.tsx b/apps/www/src/features/design/components/docs/component-registry.tsx
index 69a0576b4..af8d06f4b 100644
--- a/apps/www/src/features/design/components/docs/component-registry.tsx
+++ b/apps/www/src/features/design/components/docs/component-registry.tsx
@@ -2,6 +2,7 @@
 
 // Re-export all UI components from @voidhash/ui for use in MDX
 export * from "@voidhash/ui";
+export { ComponentOverview } from "./component-overview";
 
 // Export common icons used in examples
 export {
diff --git a/apps/www/src/features/design/components/layout/page.tsx b/apps/www/src/features/design/components/layout/page.tsx
index d40f336f3..68c401e4b 100644
--- a/apps/www/src/features/design/components/layout/page.tsx
+++ b/apps/www/src/features/design/components/layout/page.tsx
@@ -11,12 +11,18 @@ import { cn } from "../../lib/cn";
 
 export interface DocsPageProps {
   children: ReactNode;
+  full?: boolean;
 }
 
-export function DocsPage({ ...props }: DocsPageProps) {
+export function DocsPage({ full = false, ...props }: DocsPageProps) {
   return (
     <main className="flex w-full min-w-0 flex-col">
-      <article className="flex w-full max-w-[860px] flex-1 flex-col gap-6 px-4 py-8 md:mx-auto md:px-6">
+      <article
+        className={cn(
+          "flex w-full flex-1 flex-col gap-6 px-4 py-8 md:mx-auto md:px-6",
+          full ? "max-w-none" : "max-w-[860px]",
+        )}
+      >
         {props.children}
         <Footer />
       </article>
diff --git a/apps/www/src/features/design/content/docs/components/meta.yaml b/apps/www/src/features/design/content/docs/components/meta.yaml
index a44026bb5..19ef4299f 100644
--- a/apps/www/src/features/design/content/docs/components/meta.yaml
+++ b/apps/www/src/features/design/content/docs/components/meta.yaml
@@ -1,6 +1,7 @@
 icon: Component
 title: Components
 pages:
+  - overview
   - accordion
   - alert
   - alert-dialog
diff --git a/apps/www/src/features/design/content/docs/components/overview.mdx b/apps/www/src/features/design/content/docs/components/overview.mdx
new file mode 100644
index 000000000..21322b7ae
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/overview.mdx
@@ -0,0 +1,7 @@
+---
+title: Component Overview
+description: Real product examples composed from the Voidhash design system.
+full: true
+---
+
+<ComponentOverview />
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
index 081d6c167..70348d111 100644
--- a/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
@@ -23,13 +23,13 @@ export function ModeToggle() {
 
   return (
     <ToggleGroup
-      indicatorClassName="duration-150"
       onValueChange={(value) => {
         if (value) {
           dispatch(setMode)({ mode: value as DesignerMode });
         }
       }}
       size="sm"
+      spacing={0}
       type="single"
       value={mode}
       variant="outline"
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
index 2ba9e28f1..a166dfc89 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
@@ -42,9 +42,9 @@ export function ActionPanel() {
         ) : (
           <>
             <ToggleGroup
-              indicatorClassName="bg-primary duration-150"
               onValueChange={(value) => dispatch(setActiveTool)({ tool: value as AvailableTool })}
               size="sm"
+              spacing={0}
               type="single"
               value={activeTool}
               variant="outline"
@@ -52,7 +52,7 @@ export function ActionPanel() {
               {TOOL_ITEMS.map(({ icon: Icon, label, value }) => (
                 <IconButtonTooltip key={value} label={label}>
                   <ToggleGroupItem
-                    className="min-w-7 px-2 text-muted-foreground hover:text-foreground data-[state=on]:text-primary-foreground data-[state=on]:hover:bg-transparent dark:data-[state=on]:hover:bg-transparent"
+                    className="min-w-7 px-2 text-muted-foreground hover:text-foreground data-[state=on]:bg-primary data-[state=on]:text-primary-foreground data-[state=on]:hover:bg-primary data-[state=on]:hover:text-primary-foreground"
                     size="sm"
                     value={value}
                   >
diff --git a/apps/www/src/features/studio/paywalls/paywall-actions-menu.tsx b/apps/www/src/features/studio/paywalls/paywall-actions-menu.tsx
new file mode 100644
index 000000000..adb1ec201
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywall-actions-menu.tsx
@@ -0,0 +1,185 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { Link } from "@tanstack/react-router";
+import type { Paywall } from "@voidhash/rpc";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  Button,
+  cn,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import {
+  ArchiveIcon,
+  ArchiveRestoreIcon,
+  MoreHorizontalIcon,
+  PencilIcon,
+  SquarePenIcon,
+  Trash2Icon,
+} from "lucide-react";
+import { useState } from "react";
+import { toast } from "sonner";
+import {
+  archivePaywallOptions,
+  deletePaywallOptions,
+  queryKeys,
+  restorePaywallOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { RenamePaywallDialog } from "./rename-paywall-dialog";
+
+interface PaywallActionsMenuProps {
+  paywall: typeof Paywall.Type;
+  organizationSlug: string;
+  projectSlug: string;
+  align?: "start" | "center" | "end";
+  triggerClassName?: string;
+  triggerVariant?: React.ComponentProps<typeof Button>["variant"];
+}
+
+/**
+ * Kebab menu of actions for a single paywall — Edit (straight into the
+ * designer) / Rename / Archive (or Restore) / Delete — together with the
+ * rename dialog and delete confirmation it drives. Shared by the dashboard
+ * grid card and table row so both surface identical behaviour.
+ */
+export function PaywallActionsMenu({
+  paywall,
+  organizationSlug,
+  projectSlug,
+  align = "end",
+  triggerClassName,
+  triggerVariant = "ghost",
+}: PaywallActionsMenuProps) {
+  const queryClient = useQueryClient();
+  const [renameOpen, setRenameOpen] = useState(false);
+  const [deleteOpen, setDeleteOpen] = useState(false);
+  const isArchived = paywall.archivedAt != null;
+
+  const invalidate = () =>
+    queryClient.invalidateQueries({
+      queryKey: queryKeys.paywall.list({ projectId: paywall.projectId }),
+    });
+
+  const { mutate: archive, status: archiveStatus } = useMutation({
+    ...archivePaywallOptions(),
+    onError: () => toast.error("Failed to archive paywall"),
+    onSuccess: async () => {
+      toast.success("Paywall archived");
+      await invalidate();
+    },
+  });
+
+  const { mutate: restore, status: restoreStatus } = useMutation({
+    ...restorePaywallOptions(),
+    onError: () => toast.error("Failed to restore paywall"),
+    onSuccess: async () => {
+      toast.success("Paywall restored");
+      await invalidate();
+    },
+  });
+
+  const { mutate: remove, status: deleteStatus } = useMutation({
+    ...deletePaywallOptions(),
+    onError: () => toast.error("Failed to delete paywall"),
+    onSuccess: async () => {
+      toast.success("Paywall deleted");
+      await invalidate();
+      setDeleteOpen(false);
+    },
+  });
+
+  const isDeleting = deleteStatus === "pending";
+  const isMutating = archiveStatus === "pending" || restoreStatus === "pending";
+
+  return (
+    <>
+      <DropdownMenu>
+        <DropdownMenuTrigger asChild>
+          <Button
+            aria-label="Paywall actions"
+            className={cn(triggerClassName)}
+            disabled={isMutating}
+            size="icon-sm"
+            variant={triggerVariant}
+          >
+            <MoreHorizontalIcon />
+          </Button>
+        </DropdownMenuTrigger>
+        <DropdownMenuContent align={align}>
+          <DropdownMenuItem asChild>
+            <Link
+              params={{ id: paywall.id, organizationSlug, projectSlug }}
+              to="/studio/$organizationSlug/$projectSlug/design/$id"
+            >
+              <SquarePenIcon />
+              Edit
+            </Link>
+          </DropdownMenuItem>
+          <DropdownMenuItem onSelect={() => setRenameOpen(true)}>
+            <PencilIcon />
+            Rename
+          </DropdownMenuItem>
+          {isArchived ? (
+            <DropdownMenuItem onSelect={() => restore({ paywallId: paywall.id })}>
+              <ArchiveRestoreIcon />
+              Restore
+            </DropdownMenuItem>
+          ) : (
+            <DropdownMenuItem onSelect={() => archive({ paywallId: paywall.id })}>
+              <ArchiveIcon />
+              Archive
+            </DropdownMenuItem>
+          )}
+          <DropdownMenuSeparator />
+          <DropdownMenuItem onSelect={() => setDeleteOpen(true)} variant="destructive">
+            <Trash2Icon />
+            Delete
+          </DropdownMenuItem>
+        </DropdownMenuContent>
+      </DropdownMenu>
+
+      <RenamePaywallDialog
+        onOpenChange={setRenameOpen}
+        open={renameOpen}
+        paywall={paywall}
+        projectId={paywall.projectId}
+      />
+
+      <AlertDialog onOpenChange={setDeleteOpen} open={deleteOpen}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>Delete paywall</AlertDialogTitle>
+            <AlertDialogDescription>
+              Permanently delete <span className="font-medium">{paywall.name}</span>? This cannot be
+              undone. If this paywall might still be shown to users, archive it instead.
+            </AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel disabled={isDeleting}>Cancel</AlertDialogCancel>
+            <AlertDialogAction
+              disabled={isDeleting}
+              onClick={(event) => {
+                event.preventDefault();
+                remove({ paywallId: paywall.id });
+              }}
+            >
+              {isDeleting ? "Deleting..." : "Delete"}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/paywall-card.tsx b/apps/www/src/features/studio/paywalls/paywall-card.tsx
index d943bb948..3e8672803 100644
--- a/apps/www/src/features/studio/paywalls/paywall-card.tsx
+++ b/apps/www/src/features/studio/paywalls/paywall-card.tsx
@@ -1,44 +1,11 @@
 "use client";
 
-import { useMutation, useQueryClient } from "@tanstack/react-query";
 import { Link } from "@tanstack/react-router";
 import type { Paywall } from "@voidhash/rpc";
-import {
-  AlertDialog,
-  AlertDialogAction,
-  AlertDialogCancel,
-  AlertDialogContent,
-  AlertDialogDescription,
-  AlertDialogFooter,
-  AlertDialogHeader,
-  AlertDialogTitle,
-  Badge,
-  Button,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuSeparator,
-  DropdownMenuTrigger,
-} from "@voidhash/ui";
-import {
-  ArchiveIcon,
-  ArchiveRestoreIcon,
-  MoreHorizontalIcon,
-  PencilIcon,
-  Smartphone,
-  SquarePenIcon,
-  Trash2Icon,
-} from "lucide-react";
-import { useState } from "react";
-import { toast } from "sonner";
-import {
-  archivePaywallOptions,
-  deletePaywallOptions,
-  queryKeys,
-  restorePaywallOptions,
-} from "@/features/studio/lib/tanstack-query";
+import { Badge } from "@voidhash/ui";
+import { Smartphone } from "lucide-react";
 
-import { RenamePaywallDialog } from "./rename-paywall-dialog";
+import { PaywallActionsMenu } from "./paywall-actions-menu";
 
 interface PaywallCardProps {
   paywall: typeof Paywall.Type;
@@ -49,51 +16,11 @@ interface PaywallCardProps {
 /**
  * A single paywall tile in the dashboard grid: a link to the paywall detail
  * page plus a kebab menu with Edit (straight into the designer) / Rename /
- * Archive (or Restore) / Delete. Archived paywalls are dimmed and badged, and
- * expose Restore in place of Archive.
+ * Archive (or Restore) / Delete. Archived paywalls are dimmed and badged.
  */
 export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallCardProps) {
-  const queryClient = useQueryClient();
-  const [renameOpen, setRenameOpen] = useState(false);
-  const [deleteOpen, setDeleteOpen] = useState(false);
   const isArchived = paywall.archivedAt != null;
 
-  const invalidate = () =>
-    queryClient.invalidateQueries({
-      queryKey: queryKeys.paywall.list({ projectId: paywall.projectId }),
-    });
-
-  const { mutate: archive, status: archiveStatus } = useMutation({
-    ...archivePaywallOptions(),
-    onError: () => toast.error("Failed to archive paywall"),
-    onSuccess: async () => {
-      toast.success("Paywall archived");
-      await invalidate();
-    },
-  });
-
-  const { mutate: restore, status: restoreStatus } = useMutation({
-    ...restorePaywallOptions(),
-    onError: () => toast.error("Failed to restore paywall"),
-    onSuccess: async () => {
-      toast.success("Paywall restored");
-      await invalidate();
-    },
-  });
-
-  const { mutate: remove, status: deleteStatus } = useMutation({
-    ...deletePaywallOptions(),
-    onError: () => toast.error("Failed to delete paywall"),
-    onSuccess: async () => {
-      toast.success("Paywall deleted");
-      await invalidate();
-      setDeleteOpen(false);
-    },
-  });
-
-  const isDeleting = deleteStatus === "pending";
-  const isMutating = archiveStatus === "pending" || restoreStatus === "pending";
-
   return (
     <div className="group relative">
       <Link
@@ -147,82 +74,14 @@ export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallC
       )}
 
       <div className="absolute top-2 right-2 opacity-0 transition-opacity focus-within:opacity-100 group-hover:opacity-100">
-        <DropdownMenu>
-          <DropdownMenuTrigger asChild>
-            <Button
-              aria-label="Paywall actions"
-              className="size-7 bg-background/80 backdrop-blur-sm"
-              disabled={isMutating}
-              size="icon-sm"
-              variant="secondary"
-            >
-              <MoreHorizontalIcon />
-            </Button>
-          </DropdownMenuTrigger>
-          <DropdownMenuContent align="end">
-            <DropdownMenuItem asChild>
-              <Link
-                params={{ id: paywall.id, organizationSlug, projectSlug }}
-                to="/studio/$organizationSlug/$projectSlug/design/$id"
-              >
-                <SquarePenIcon />
-                Edit
-              </Link>
-            </DropdownMenuItem>
-            <DropdownMenuItem onSelect={() => setRenameOpen(true)}>
-              <PencilIcon />
-              Rename
-            </DropdownMenuItem>
-            {isArchived ? (
-              <DropdownMenuItem onSelect={() => restore({ paywallId: paywall.id })}>
-                <ArchiveRestoreIcon />
-                Restore
-              </DropdownMenuItem>
-            ) : (
-              <DropdownMenuItem onSelect={() => archive({ paywallId: paywall.id })}>
-                <ArchiveIcon />
-                Archive
-              </DropdownMenuItem>
-            )}
-            <DropdownMenuSeparator />
-            <DropdownMenuItem onSelect={() => setDeleteOpen(true)} variant="destructive">
-              <Trash2Icon />
-              Delete
-            </DropdownMenuItem>
-          </DropdownMenuContent>
-        </DropdownMenu>
+        <PaywallActionsMenu
+          organizationSlug={organizationSlug}
+          paywall={paywall}
+          projectSlug={projectSlug}
+          triggerClassName="size-7 bg-background/80 backdrop-blur-sm"
+          triggerVariant="secondary"
+        />
       </div>
-
-      <RenamePaywallDialog
-        onOpenChange={setRenameOpen}
-        open={renameOpen}
-        paywall={paywall}
-        projectId={paywall.projectId}
-      />
-
-      <AlertDialog onOpenChange={setDeleteOpen} open={deleteOpen}>
-        <AlertDialogContent>
-          <AlertDialogHeader>
-            <AlertDialogTitle>Delete paywall</AlertDialogTitle>
-            <AlertDialogDescription>
-              Permanently delete <span className="font-medium">{paywall.name}</span>? This cannot be
-              undone. If this paywall might still be shown to users, archive it instead.
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel disabled={isDeleting}>Cancel</AlertDialogCancel>
-            <AlertDialogAction
-              disabled={isDeleting}
-              onClick={(event) => {
-                event.preventDefault();
-                remove({ paywallId: paywall.id });
-              }}
-            >
-              {isDeleting ? "Deleting..." : "Delete"}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
     </div>
   );
 }
diff --git a/apps/www/src/features/studio/paywalls/paywall-table.tsx b/apps/www/src/features/studio/paywalls/paywall-table.tsx
new file mode 100644
index 000000000..e033d67e8
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywall-table.tsx
@@ -0,0 +1,109 @@
+"use client";
+
+import { Link } from "@tanstack/react-router";
+import type { Paywall } from "@voidhash/rpc";
+import {
+  Badge,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@voidhash/ui";
+import { Smartphone } from "lucide-react";
+
+import { PaywallActionsMenu } from "./paywall-actions-menu";
+
+interface PaywallTableProps {
+  paywalls: readonly (typeof Paywall.Type)[];
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+/**
+ * Compact table view of the paywall dashboard — an alternative to the card
+ * grid, selectable from the view-settings dropdown. Each row links to the
+ * paywall detail page and carries the same kebab actions as the grid card.
+ */
+export function PaywallTable({ paywalls, organizationSlug, projectSlug }: PaywallTableProps) {
+  return (
+    <Table>
+      <TableHeader>
+        <TableRow>
+          <TableHead className="w-0" />
+          <TableHead>Name</TableHead>
+          <TableHead>Slug</TableHead>
+          <TableHead>Status</TableHead>
+          <TableHead className="w-0" />
+        </TableRow>
+      </TableHeader>
+      <TableBody>
+        {paywalls.map((paywall) => (
+          <PaywallTableRow
+            key={paywall.id}
+            organizationSlug={organizationSlug}
+            paywall={paywall}
+            projectSlug={projectSlug}
+          />
+        ))}
+      </TableBody>
+    </Table>
+  );
+}
+
+interface PaywallTableRowProps {
+  paywall: typeof Paywall.Type;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+function PaywallTableRow({ paywall, organizationSlug, projectSlug }: PaywallTableRowProps) {
+  const isArchived = paywall.archivedAt != null;
+  const detailLink = {
+    params: { id: paywall.id, organizationSlug, projectSlug },
+    to: "/studio/$organizationSlug/$projectSlug/paywalls/$id",
+  } as const;
+
+  return (
+    <TableRow className={isArchived ? "opacity-60" : undefined}>
+      <TableCell className="py-2">
+        <Link
+          className="block h-11 w-8 overflow-hidden rounded-md bg-linear-150 from-blue-ribbon-950 to-electric-violet-950 ring-1 ring-border ring-inset"
+          {...detailLink}
+        >
+          {paywall.thumbnailUrl ? (
+            <img
+              alt=""
+              className="size-full object-cover object-top"
+              loading="lazy"
+              src={paywall.thumbnailUrl}
+            />
+          ) : (
+            <span className="flex size-full items-center justify-center">
+              <Smartphone className="size-4 text-zinc-400 opacity-40" />
+            </span>
+          )}
+        </Link>
+      </TableCell>
+      <TableCell>
+        <Link className="font-medium hover:underline" {...detailLink}>
+          {paywall.name}
+        </Link>
+      </TableCell>
+      <TableCell className="text-muted-foreground">{paywall.slug}</TableCell>
+      <TableCell>
+        <Badge variant={isArchived ? "secondary" : "outline"}>
+          {isArchived ? "Archived" : "Active"}
+        </Badge>
+      </TableCell>
+      <TableCell className="text-right">
+        <PaywallActionsMenu
+          organizationSlug={organizationSlug}
+          paywall={paywall}
+          projectSlug={projectSlug}
+        />
+      </TableCell>
+    </TableRow>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/paywall-view-settings.tsx b/apps/www/src/features/studio/paywalls/paywall-view-settings.tsx
new file mode 100644
index 000000000..d6ec0784e
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywall-view-settings.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuCheckboxItem,
+  DropdownMenuContent,
+  DropdownMenuLabel,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { LayoutGridIcon, Rows3Icon, Settings2Icon } from "lucide-react";
+
+const STORAGE_KEY = "voidhash.paywalls.view";
+
+/** How the paywall dashboard renders its list: a card grid or a compact table. */
+export type PaywallView = "grid" | "table";
+
+/** Load the persisted dashboard view, tolerating missing/corrupt storage. */
+export function loadPaywallView(): PaywallView {
+  if (typeof window === "undefined") {
+    return "grid";
+  }
+  try {
+    return window.localStorage.getItem(STORAGE_KEY) === "table" ? "table" : "grid";
+  } catch {
+    return "grid";
+  }
+}
+
+/** Persist the chosen dashboard view so it survives reloads. */
+export function persistPaywallView(view: PaywallView): void {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    window.localStorage.setItem(STORAGE_KEY, view);
+  } catch {
+    // Storage may be unavailable (private mode, quota) — the choice just won't persist.
+  }
+}
+
+interface PaywallViewSettingsProps {
+  view: PaywallView;
+  onViewChange: (view: PaywallView) => void;
+}
+
+/**
+ * Settings dropdown for the paywall dashboard exposing the layout toggle
+ * (grid vs. table). The active layout is always checked and cannot be
+ * unchecked — picking either option just switches to it.
+ */
+export function PaywallViewSettings({ view, onViewChange }: PaywallViewSettingsProps) {
+  return (
+    <DropdownMenu>
+      <DropdownMenuTrigger asChild>
+        <Button aria-label="View settings" size="icon-sm" variant="ghost">
+          <Settings2Icon />
+        </Button>
+      </DropdownMenuTrigger>
+      <DropdownMenuContent align="end">
+        <DropdownMenuLabel>Layout</DropdownMenuLabel>
+        <DropdownMenuCheckboxItem
+          checked={view === "grid"}
+          onCheckedChange={() => onViewChange("grid")}
+        >
+          <LayoutGridIcon />
+          Grid
+        </DropdownMenuCheckboxItem>
+        <DropdownMenuCheckboxItem
+          checked={view === "table"}
+          onCheckedChange={() => onViewChange("table")}
+        >
+          <Rows3Icon />
+          Table
+        </DropdownMenuCheckboxItem>
+      </DropdownMenuContent>
+    </DropdownMenu>
+  );
+}
diff --git a/apps/www/src/routeTree.gen.ts b/apps/www/src/routeTree.gen.ts
index bbcab5676..5bd69f9ac 100644
--- a/apps/www/src/routeTree.gen.ts
+++ b/apps/www/src/routeTree.gen.ts
@@ -61,8 +61,8 @@ import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlug
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id'
-import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.trials'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics.subscribers'
@@ -413,6 +413,15 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRou
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport.update(
+    {
+      id: '/paywalls/$id',
+      path: '/paywalls/$id',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRouteImport.update(
     {
@@ -431,15 +440,6 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsI
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
-const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute =
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport.update(
-    {
-      id: '/paywalls/$id',
-      path: '/paywalls/$id',
-      getParentRoute: () =>
-        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
-    } as any,
-  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRouteImport.update(
     {
@@ -633,8 +633,8 @@ export interface FileRoutesByFullPath {
   '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   '/studio/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   '/studio/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
-  '/studio/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  '/studio/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
@@ -697,8 +697,8 @@ export interface FileRoutesByTo {
   '/studio/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   '/studio/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   '/studio/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
-  '/studio/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  '/studio/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
@@ -771,8 +771,8 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
-  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
@@ -843,8 +843,8 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
     | '/studio/$organizationSlug/$projectSlug/analytics/trials'
     | '/studio/$organizationSlug/$projectSlug/experiments/$id'
-    | '/studio/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/$organizationSlug/$projectSlug/flags/$id'
+    | '/studio/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/$organizationSlug/$projectSlug/products/$id'
     | '/studio/$organizationSlug/$projectSlug/settings/api-keys'
@@ -907,8 +907,8 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/analytics/subscribers'
     | '/studio/$organizationSlug/$projectSlug/analytics/trials'
     | '/studio/$organizationSlug/$projectSlug/experiments/$id'
-    | '/studio/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/$organizationSlug/$projectSlug/flags/$id'
+    | '/studio/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/$organizationSlug/$projectSlug/products/$id'
     | '/studio/$organizationSlug/$projectSlug/settings/api-keys'
@@ -980,8 +980,8 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/subscribers'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id'
-    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
@@ -1386,6 +1386,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id'
+      path: '/paywalls/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/paywalls/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id'
       path: '/flags/$id'
@@ -1400,13 +1407,6 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
-    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id': {
-      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id'
-      path: '/paywalls/$id'
-      fullPath: '/studio/$organizationSlug/$projectSlug/paywalls/$id'
-      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRouteImport
-      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
-    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/analytics/trials'
       path: '/analytics/trials'
@@ -1625,8 +1625,8 @@ interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRou
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsSubscribersRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
@@ -1673,10 +1673,10 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteCh
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugAnalyticsTrialsRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIdRoute,
-    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute:
-      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPaywallsIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute:
diff --git a/apps/www/src/routes/design/$.tsx b/apps/www/src/routes/design/$.tsx
index d247ed4ed..a2eda62fa 100644
--- a/apps/www/src/routes/design/$.tsx
+++ b/apps/www/src/routes/design/$.tsx
@@ -99,7 +99,7 @@ const serverLoader = createServerFn({ method: "GET" })
 const clientLoader = browserCollections.design.createClientLoader({
   component({ default: MDX, frontmatter }) {
     return (
-      <DocsPage>
+      <DocsPage full={frontmatter.full === true}>
         <DocsTitle>{frontmatter.title}</DocsTitle>
         <DocsDescription>{frontmatter.description}</DocsDescription>
         <DocsBody>
diff --git a/apps/www/src/routes/design/index.tsx b/apps/www/src/routes/design/index.tsx
index ceeccfe87..c36c3bd44 100644
--- a/apps/www/src/routes/design/index.tsx
+++ b/apps/www/src/routes/design/index.tsx
@@ -4,7 +4,7 @@ export const Route = createFileRoute("/design/")({
   beforeLoad: () => {
     throw redirect({
       params: {
-        _splat: "introduction",
+        _splat: "components/overview",
       },
       to: "/design/$",
     });
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
index 7faed2efc..d274ed168 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -15,6 +15,13 @@ import { useAuth } from "@/features/studio/components/auth-context";
 import { CreatePaywallButton } from "@/features/studio/paywalls/create-paywall-button";
 import { PaywallCard } from "@/features/studio/paywalls/paywall-card";
 import { PaywallCardSkeleton } from "@/features/studio/paywalls/paywall-card-skeleton";
+import { PaywallTable } from "@/features/studio/paywalls/paywall-table";
+import {
+  loadPaywallView,
+  type PaywallView,
+  PaywallViewSettings,
+  persistPaywallView,
+} from "@/features/studio/paywalls/paywall-view-settings";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
@@ -104,6 +111,11 @@ function PaywallsPage() {
   }
 
   const [tab, setTab] = useState<PaywallTab>("active");
+  const [view, setView] = useState<PaywallView>(loadPaywallView);
+  const changeView = (next: PaywallView) => {
+    setView(next);
+    persistPaywallView(next);
+  };
   const thumbnailRefreshDeadline = useRef(Date.now() + THUMBNAIL_REFRESH_WINDOW_MS);
   const paywallsQueryOptions = listPaywallsOptions({
     includeArchived: true,
@@ -148,7 +160,7 @@ function PaywallsPage() {
         <PageHeaderTitle>Paywalls</PageHeaderTitle>
       </PageHeader>
       <PageTabs onValueChange={(value) => setTab(value as PaywallTab)} value={tab}>
-        <PageBar>
+        <PageBar rightActions={<PaywallViewSettings onViewChange={changeView} view={view} />}>
           <PageBarTabs>
             {PAYWALL_TABS.map((item) => (
               <PageBarTab key={item.value} value={item.value}>
@@ -162,6 +174,12 @@ function PaywallsPage() {
             <div className="py-20 text-center text-muted-foreground text-sm">
               {emptyStateMessage(tab)}
             </div>
+          ) : view === "table" ? (
+            <PaywallTable
+              organizationSlug={organizationSlug as string}
+              paywalls={paywalls}
+              projectSlug={projectSlug as string}
+            />
           ) : (
             <div className="grid grid-cols-2 gap-6 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
               {paywalls.map((paywall) => (
diff --git a/packages/ui/components/page.tsx b/packages/ui/components/page.tsx
index 515269003..f960996c5 100644
--- a/packages/ui/components/page.tsx
+++ b/packages/ui/components/page.tsx
@@ -28,7 +28,9 @@ export type PageTitleProps = {
   className?: string;
 };
 export function PageHeaderTitle({ children, className }: PageTitleProps) {
-  return <h1 className={cn("text-sm font-medium text-foreground py-2", className)}>{children}</h1>;
+  return (
+    <h1 className={cn("text-[0.8rem] font-medium text-foreground py-2", className)}>{children}</h1>
+  );
 }
 
 export function PageSection() {}
diff --git a/packages/ui/components/theme-toggle.tsx b/packages/ui/components/theme-toggle.tsx
index dd08f9394..f19ee6c9b 100644
--- a/packages/ui/components/theme-toggle.tsx
+++ b/packages/ui/components/theme-toggle.tsx
@@ -16,28 +16,17 @@ export function ThemeToggle({
     <ToggleGroup
       className={cn("divide-x overflow-hidden rounded-full border border-border", className)}
       onValueChange={(value) => setTheme(value)}
+      spacing={0}
       type="single"
       value={theme}
     >
-      <ToggleGroupItem
-        aria-label="Toggle system"
-        className={cn("h-6 p-0 px-2", theme === "system" && "bg-muted")}
-        value="system"
-      >
+      <ToggleGroupItem aria-label="Toggle system" className="h-6 p-0 px-2" value="system">
         <Monitor className="size-4" />
       </ToggleGroupItem>
-      <ToggleGroupItem
-        aria-label="Toggle light"
-        className={cn("h-6 p-0 px-2", theme === "light" && "bg-muted")}
-        value="light"
-      >
+      <ToggleGroupItem aria-label="Toggle light" className="h-6 p-0 px-2" value="light">
         <Sun className="size-4" />
       </ToggleGroupItem>
-      <ToggleGroupItem
-        aria-label="Toggle strikethrough"
-        className={cn("h-6 p-0 px-2", theme === "dark" && "bg-muted")}
-        value="dark"
-      >
+      <ToggleGroupItem aria-label="Toggle strikethrough" className="h-6 p-0 px-2" value="dark">
         <Moon className="size-4" />
       </ToggleGroupItem>
     </ToggleGroup>
diff --git a/packages/ui/components/ui/breadcrumb.tsx b/packages/ui/components/ui/breadcrumb.tsx
index f3f175cb3..641fe10e4 100644
--- a/packages/ui/components/ui/breadcrumb.tsx
+++ b/packages/ui/components/ui/breadcrumb.tsx
@@ -14,7 +14,7 @@ function BreadcrumbList({ className, ...props }: React.ComponentProps<"ol">) {
   return (
     <ol
       className={cn(
-        "flex flex-wrap items-center gap-1 wrap-break-word text-muted-foreground text-sm sm:gap-1",
+        "-ml-1 flex flex-wrap items-center gap-1 wrap-break-word text-muted-foreground text-sm sm:gap-1",
         className,
       )}
       data-slot="breadcrumb-list"
diff --git a/packages/ui/components/ui/button.tsx b/packages/ui/components/ui/button.tsx
index 2d7b48520..0e82fa391 100644
--- a/packages/ui/components/ui/button.tsx
+++ b/packages/ui/components/ui/button.tsx
@@ -9,13 +9,14 @@ const buttonVariants = cva(
   {
     variants: {
       variant: {
-        default: "bg-primary text-primary-foreground hover:bg-blue-ribbon-500",
+        default:
+          "border-blue-ribbon-500 bg-primary text-primary-foreground hover:shadow-[inset_0_0_17px_var(--color-blue-ribbon-400)]",
         outline:
-          "border-border bg-background hover:bg-muted hover:text-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50 aria-expanded:bg-muted aria-expanded:text-foreground",
+          "border-border bg-background hover:shadow-[inset_0_0_17px_var(--bg-muted)] hover:text-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50 aria-expanded:bg-muted aria-expanded:text-foreground",
         secondary:
-          "bg-secondary text-secondary-foreground hover:bg-secondary/80 aria-expanded:bg-secondary aria-expanded:text-secondary-foreground",
+          "bg-secondary border-secondary text-secondary-foreground hover:bg-secondary/80 hover:border-secondary/80 aria-expanded:bg-secondary aria-expanded:text-secondary-foreground",
         ghost:
-          "hover:bg-muted hover:text-foreground dark:hover:bg-muted/50 aria-expanded:bg-muted aria-expanded:text-foreground",
+          "hover:bg-muted hover:text-foreground dark:hover:bg-muted/50 dark:hover:border-muted/50 aria-expanded:bg-muted aria-expanded:text-foreground",
         destructive:
           "bg-destructive/10 hover:bg-destructive/20 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/20 text-destructive focus-visible:border-destructive/40 dark:hover:bg-destructive/30",
         link: "text-primary underline-offset-4 hover:underline",
diff --git a/packages/ui/components/ui/card.tsx b/packages/ui/components/ui/card.tsx
index e322d734e..3e6937aa0 100644
--- a/packages/ui/components/ui/card.tsx
+++ b/packages/ui/components/ui/card.tsx
@@ -31,7 +31,7 @@ function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
     <div
       data-slot="card-header"
       className={cn(
-        "gap-x-1 rounded-t-xl px-2 py-2 pl-4 text-left group-data-[size=sm]/card:px-3 [.border-b]:pb-4 group-data-[size=sm]/card:[.border-b]:pb-3 group/card-header @container/card-header grid auto-rows-min has-data-[slot=card-action]:grid-cols-[1fr_auto] has-data-[slot=card-description]:grid-rows-[auto_auto]",
+        "gap-x-1 rounded-t-xl px-2 py-2 pl-4 text-left group-data-[size=sm]/card:px-3 has-data-[slot=card-description]:pb-3 [.border-b]:pb-4 group-data-[size=sm]/card:[.border-b]:pb-3 group/card-header @container/card-header grid auto-rows-min has-data-[slot=card-action]:grid-cols-[1fr_auto] has-data-[slot=card-description]:grid-rows-[auto_auto]",
         className,
       )}
       {...props}
@@ -90,7 +90,7 @@ function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
     <div
       data-slot="card-footer"
       className={cn(
-        "rounded-b-xl  px-2 pl-4 py-2 group-data-[size=sm]/card:p-3 flex items-center",
+        "flex items-center rounded-b-xl px-2 py-2 group-data-[size=sm]/card:p-3",
         className,
       )}
       {...props}
diff --git a/packages/ui/components/ui/chart.tsx b/packages/ui/components/ui/chart.tsx
index cfa620455..0377fbe90 100644
--- a/packages/ui/components/ui/chart.tsx
+++ b/packages/ui/components/ui/chart.tsx
@@ -6,6 +6,7 @@ import { cn } from "../../lib/utils";
 
 // Format: { THEME_NAME: CSS_SELECTOR }
 const THEMES = { dark: ".dark", light: "" } as const;
+const INITIAL_DIMENSION = { width: 320, height: 200 } as const;
 
 export type ChartConfig = {
   [k in string]: {
@@ -38,10 +39,15 @@ function ChartContainer({
   className,
   children,
   config,
+  initialDimension = INITIAL_DIMENSION,
   ...props
 }: React.ComponentProps<"div"> & {
   config: ChartConfig;
   children: React.ComponentProps<typeof RechartsPrimitive.ResponsiveContainer>["children"];
+  initialDimension?: {
+    width: number;
+    height: number;
+  };
 }) {
   const uniqueId = React.useId();
   const chartId = `chart-${id || uniqueId.replaceAll(":", "")}`;
@@ -58,7 +64,9 @@ function ChartContainer({
         {...props}
       >
         <ChartStyle config={config} id={chartId} />
-        <RechartsPrimitive.ResponsiveContainer>{children}</RechartsPrimitive.ResponsiveContainer>
+        <RechartsPrimitive.ResponsiveContainer initialDimension={initialDimension}>
+          {children}
+        </RechartsPrimitive.ResponsiveContainer>
       </div>
     </ChartContext.Provider>
   );
diff --git a/packages/ui/components/ui/empty.tsx b/packages/ui/components/ui/empty.tsx
new file mode 100644
index 000000000..621c38660
--- /dev/null
+++ b/packages/ui/components/ui/empty.tsx
@@ -0,0 +1,100 @@
+import { cva, type VariantProps } from "class-variance-authority";
+
+import { cn } from "../../lib/utils";
+
+/** Centers an empty-state composition within its available space. */
+function Empty({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="empty"
+      className={cn(
+        "flex min-w-0 flex-1 flex-col items-center justify-center gap-6 rounded-lg border-dashed p-6 text-center text-balance md:p-12",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+/** Groups the media, title, and description of an empty state. */
+function EmptyHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="empty-header"
+      className={cn("flex max-w-sm flex-col items-center gap-2 text-center", className)}
+      {...props}
+    />
+  );
+}
+
+const emptyMediaVariants = cva(
+  "mb-2 flex shrink-0 items-center justify-center [&_svg]:pointer-events-none [&_svg]:shrink-0",
+  {
+    variants: {
+      variant: {
+        default: "bg-transparent",
+        icon: "flex size-10 shrink-0 items-center justify-center rounded-lg bg-muted text-foreground [&_svg:not([class*='size-'])]:size-6",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+    },
+  },
+);
+
+/** Renders optional media for an empty state. */
+function EmptyMedia({
+  className,
+  variant = "default",
+  ...props
+}: React.ComponentProps<"div"> & VariantProps<typeof emptyMediaVariants>) {
+  return (
+    <div
+      data-slot="empty-icon"
+      data-variant={variant}
+      className={cn(emptyMediaVariants({ variant, className }))}
+      {...props}
+    />
+  );
+}
+
+/** Renders an empty-state title. */
+function EmptyTitle({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="empty-title"
+      className={cn("text-lg font-medium tracking-tight", className)}
+      {...props}
+    />
+  );
+}
+
+/** Renders supporting empty-state copy. */
+function EmptyDescription({ className, ...props }: React.ComponentProps<"p">) {
+  return (
+    <div
+      data-slot="empty-description"
+      className={cn(
+        "text-sm/relaxed text-muted-foreground [&>a]:underline [&>a]:underline-offset-4 [&>a:hover]:text-primary",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+/** Groups empty-state actions or additional content. */
+function EmptyContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="empty-content"
+      className={cn(
+        "flex w-full max-w-sm min-w-0 flex-col items-center gap-4 text-sm text-balance",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+export { Empty, EmptyHeader, EmptyTitle, EmptyDescription, EmptyContent, EmptyMedia };
diff --git a/packages/ui/components/ui/item.tsx b/packages/ui/components/ui/item.tsx
new file mode 100644
index 000000000..efbd99476
--- /dev/null
+++ b/packages/ui/components/ui/item.tsx
@@ -0,0 +1,182 @@
+import * as React from "react";
+import { cva, type VariantProps } from "class-variance-authority";
+import { Slot } from "radix-ui";
+
+import { cn } from "../../lib/utils";
+import { Separator } from "./separator";
+
+/** Groups related item rows as a semantic list. */
+function ItemGroup({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      role="list"
+      data-slot="item-group"
+      className={cn("group/item-group flex flex-col gap-4", className)}
+      {...props}
+    />
+  );
+}
+
+/** Separates adjacent item rows. */
+function ItemSeparator({ className, ...props }: React.ComponentProps<typeof Separator>) {
+  return (
+    <Separator
+      data-slot="item-separator"
+      orientation="horizontal"
+      className={cn("my-0", className)}
+      {...props}
+    />
+  );
+}
+
+const itemVariants = cva(
+  "group/item flex flex-wrap items-center rounded-md border border-transparent text-sm transition-colors duration-100 outline-none focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 [a]:transition-colors [a]:hover:bg-muted",
+  {
+    variants: {
+      variant: {
+        default: "bg-transparent",
+        outline: "border-border",
+        muted: "bg-muted/50",
+      },
+      size: {
+        default: "gap-4 p-4",
+        sm: "gap-2.5 px-4 py-3",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+      size: "default",
+    },
+  },
+);
+
+/** Renders a composable item row. */
+function Item({
+  className,
+  variant = "default",
+  size = "default",
+  asChild = false,
+  ...props
+}: React.ComponentProps<"div"> & VariantProps<typeof itemVariants> & { asChild?: boolean }) {
+  const Comp = asChild ? Slot.Root : "div";
+  return (
+    <Comp
+      data-slot="item"
+      data-variant={variant}
+      data-size={size}
+      className={cn(itemVariants({ variant, size, className }))}
+      {...props}
+    />
+  );
+}
+
+const itemMediaVariants = cva(
+  "flex shrink-0 items-center justify-center gap-2 group-has-[[data-slot=item-description]]/item:translate-y-0.5 group-has-[[data-slot=item-description]]/item:self-start [&_svg]:pointer-events-none",
+  {
+    variants: {
+      variant: {
+        default: "bg-transparent",
+        icon: "size-8 rounded-sm border bg-muted [&_svg:not([class*='size-'])]:size-4",
+        image: "size-10 overflow-hidden rounded-sm [&_img]:size-full [&_img]:object-cover",
+      },
+    },
+    defaultVariants: {
+      variant: "default",
+    },
+  },
+);
+
+/** Renders leading media for an item. */
+function ItemMedia({
+  className,
+  variant = "default",
+  ...props
+}: React.ComponentProps<"div"> & VariantProps<typeof itemMediaVariants>) {
+  return (
+    <div
+      data-slot="item-media"
+      data-variant={variant}
+      className={cn(itemMediaVariants({ variant, className }))}
+      {...props}
+    />
+  );
+}
+
+/** Groups an item's title and description. */
+function ItemContent({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="item-content"
+      className={cn("flex flex-1 flex-col gap-1 [&+[data-slot=item-content]]:flex-none", className)}
+      {...props}
+    />
+  );
+}
+
+/** Renders an item's title. */
+function ItemTitle({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="item-title"
+      className={cn("flex w-fit items-center gap-2 text-sm leading-snug font-medium", className)}
+      {...props}
+    />
+  );
+}
+
+/** Renders an item's supporting copy. */
+function ItemDescription({ className, ...props }: React.ComponentProps<"p">) {
+  return (
+    <p
+      data-slot="item-description"
+      className={cn(
+        "line-clamp-2 text-sm leading-normal font-normal text-balance text-muted-foreground",
+        "[&>a]:underline [&>a]:underline-offset-4 [&>a:hover]:text-primary",
+        className,
+      )}
+      {...props}
+    />
+  );
+}
+
+/** Groups trailing actions for an item. */
+function ItemActions({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div data-slot="item-actions" className={cn("flex items-center gap-2", className)} {...props} />
+  );
+}
+
+/** Renders a full-width header inside an item. */
+function ItemHeader({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="item-header"
+      className={cn("flex basis-full items-center justify-between gap-2", className)}
+      {...props}
+    />
+  );
+}
+
+/** Renders a full-width footer inside an item. */
+function ItemFooter({ className, ...props }: React.ComponentProps<"div">) {
+  return (
+    <div
+      data-slot="item-footer"
+      className={cn("flex basis-full items-center justify-between gap-2", className)}
+      {...props}
+    />
+  );
+}
+
+export {
+  Item,
+  ItemMedia,
+  ItemContent,
+  ItemActions,
+  ItemGroup,
+  ItemSeparator,
+  ItemTitle,
+  ItemDescription,
+  ItemHeader,
+  ItemFooter,
+};
diff --git a/packages/ui/components/ui/native-select.tsx b/packages/ui/components/ui/native-select.tsx
new file mode 100644
index 000000000..bc1779a62
--- /dev/null
+++ b/packages/ui/components/ui/native-select.tsx
@@ -0,0 +1,59 @@
+import * as React from "react";
+import { ChevronDownIcon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+/** Renders a styled native select control. */
+function NativeSelect({
+  className,
+  size = "default",
+  ...props
+}: Omit<React.ComponentProps<"select">, "size"> & { size?: "sm" | "default" }) {
+  return (
+    <div
+      className="group/native-select relative w-fit has-[select:disabled]:opacity-50"
+      data-slot="native-select-wrapper"
+    >
+      <select
+        data-slot="native-select"
+        data-size={size}
+        className={cn(
+          "h-9 w-full min-w-0 appearance-none rounded-md border border-input bg-transparent px-3 py-2 pr-9 text-sm shadow-xs transition-[color,box-shadow] outline-none selection:bg-primary selection:text-primary-foreground placeholder:text-muted-foreground disabled:pointer-events-none disabled:cursor-not-allowed data-[size=sm]:h-8 data-[size=sm]:py-1 dark:bg-input/30 dark:hover:bg-input/50",
+          "focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50",
+          "aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40",
+          className,
+        )}
+        {...props}
+      />
+      <ChevronDownIcon
+        className="pointer-events-none absolute top-1/2 right-3.5 size-4 -translate-y-1/2 text-muted-foreground opacity-50 select-none"
+        aria-hidden="true"
+        data-slot="native-select-icon"
+      />
+    </div>
+  );
+}
+
+/** Renders an option inside a native select. */
+function NativeSelectOption({ className, ...props }: React.ComponentProps<"option">) {
+  return (
+    <option
+      data-slot="native-select-option"
+      className={cn("bg-[Canvas] text-[CanvasText]", className)}
+      {...props}
+    />
+  );
+}
+
+/** Groups related native select options. */
+function NativeSelectOptGroup({ className, ...props }: React.ComponentProps<"optgroup">) {
+  return (
+    <optgroup
+      data-slot="native-select-optgroup"
+      className={cn("bg-[Canvas] text-[CanvasText]", className)}
+      {...props}
+    />
+  );
+}
+
+export { NativeSelect, NativeSelectOptGroup, NativeSelectOption };
diff --git a/packages/ui/components/ui/select.tsx b/packages/ui/components/ui/select.tsx
index 8ec184c99..2ed9ad87f 100644
--- a/packages/ui/components/ui/select.tsx
+++ b/packages/ui/components/ui/select.tsx
@@ -14,7 +14,7 @@ function SelectGroup({ className, ...props }: React.ComponentProps<typeof Select
   return (
     <SelectPrimitive.Group
       data-slot="select-group"
-      className={cn("scroll-my-1 p-1", className)}
+      className={cn("scroll-my-1", className)}
       {...props}
     />
   );
@@ -55,6 +55,7 @@ function SelectContent({
   children,
   position = "item-aligned",
   align = "center",
+  sideOffset = 4,
   ...props
 }: React.ComponentProps<typeof SelectPrimitive.Content>) {
   return (
@@ -62,22 +63,18 @@ function SelectContent({
       <SelectPrimitive.Content
         data-slot="select-content"
         className={cn(
-          "bg-popover text-popover-foreground data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 ring-foreground/10 min-w-36 rounded-lg shadow-md ring-1 duration-100 relative z-50 max-h-(--radix-select-content-available-height) origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto",
-          position === "popper" &&
-            "data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1",
+          "bg-popover/70 backdrop-blur-md text-popover-foreground data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 ring-foreground/10 min-w-36 rounded-lg shadow-md ring-1 duration-100 relative z-50 max-h-(--radix-select-content-available-height) origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto data-[state=closed]:overflow-hidden",
           className,
         )}
         position={position}
         align={align}
+        sideOffset={sideOffset}
         {...props}
       >
         <SelectScrollUpButton />
         <SelectPrimitive.Viewport
           data-position={position}
-          className={cn(
-            "data-[position=popper]:h-[var(--radix-select-trigger-height)] data-[position=popper]:w-full data-[position=popper]:min-w-[var(--radix-select-trigger-width)]",
-            position === "popper" && "",
-          )}
+          className="p-1 data-[position=popper]:w-full data-[position=popper]:min-w-[var(--radix-select-trigger-width)]"
         >
           {children}
         </SelectPrimitive.Viewport>
@@ -91,7 +88,7 @@ function SelectLabel({ className, ...props }: React.ComponentProps<typeof Select
   return (
     <SelectPrimitive.Label
       data-slot="select-label"
-      className={cn("text-muted-foreground px-1.5 py-1 text-xs", className)}
+      className={cn("text-muted-foreground px-1.5 py-1 text-xs font-medium", className)}
       {...props}
     />
   );
@@ -106,7 +103,7 @@ function SelectItem({
     <SelectPrimitive.Item
       data-slot="select-item"
       className={cn(
-        "focus:bg-accent focus:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2 relative flex w-full cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        "focus:bg-primary focus:text-accent-foreground focus:**:text-accent-foreground gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2 relative flex w-full cursor-default items-center outline-hidden select-none data-[disabled]:pointer-events-none data-[disabled]:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 transition-none",
         className,
       )}
       {...props}
@@ -142,7 +139,7 @@ function SelectScrollUpButton({
     <SelectPrimitive.ScrollUpButton
       data-slot="select-scroll-up-button"
       className={cn(
-        "bg-popover z-10 flex cursor-default items-center justify-center py-1 [&_svg:not([class*='size-'])]:size-4",
+        "bg-popover/70 text-muted-foreground z-10 flex cursor-default items-center justify-center py-1 backdrop-blur-md [&_svg:not([class*='size-'])]:size-4",
         className,
       )}
       {...props}
@@ -160,7 +157,7 @@ function SelectScrollDownButton({
     <SelectPrimitive.ScrollDownButton
       data-slot="select-scroll-down-button"
       className={cn(
-        "bg-popover z-10 flex cursor-default items-center justify-center py-1 [&_svg:not([class*='size-'])]:size-4",
+        "bg-popover/70 text-muted-foreground z-10 flex cursor-default items-center justify-center py-1 backdrop-blur-md [&_svg:not([class*='size-'])]:size-4",
         className,
       )}
       {...props}
diff --git a/packages/ui/components/ui/slider.tsx b/packages/ui/components/ui/slider.tsx
index f4489718a..dba8d5b51 100644
--- a/packages/ui/components/ui/slider.tsx
+++ b/packages/ui/components/ui/slider.tsx
@@ -46,7 +46,7 @@ function Slider({
       </SliderPrimitive.Track>
       {Array.from({ length: _values.length }, (_, index) => (
         <SliderPrimitive.Thumb
-          className="block size-4 shrink-0 rounded-full border border-primary bg-background shadow-sm ring-ring/50 transition-[color,box-shadow] hover:ring-4 focus-visible:outline-hidden focus-visible:ring-4 disabled:pointer-events-none disabled:opacity-50"
+          className="block size-4 shrink-0 rounded-full bg-white shadow-md ring-ring/50 transition-[color,box-shadow] hover:ring-4 focus-visible:outline-hidden focus-visible:ring-4 disabled:pointer-events-none disabled:opacity-50"
           data-slot="slider-thumb"
           // biome-ignore lint/suspicious/noArrayIndexKey: shadcn
           key={index}
diff --git a/packages/ui/components/ui/spinner.tsx b/packages/ui/components/ui/spinner.tsx
new file mode 100644
index 000000000..c8c1869c8
--- /dev/null
+++ b/packages/ui/components/ui/spinner.tsx
@@ -0,0 +1,17 @@
+import { Loader2Icon } from "lucide-react";
+
+import { cn } from "../../lib/utils";
+
+/** Renders an accessible animated loading indicator. */
+function Spinner({ className, ...props }: React.ComponentProps<"svg">) {
+  return (
+    <Loader2Icon
+      role="status"
+      aria-label="Loading"
+      className={cn("size-4 animate-spin", className)}
+      {...props}
+    />
+  );
+}
+
+export { Spinner };
diff --git a/packages/ui/components/ui/switch.tsx b/packages/ui/components/ui/switch.tsx
index f8e51dab7..39e1f1a4a 100644
--- a/packages/ui/components/ui/switch.tsx
+++ b/packages/ui/components/ui/switch.tsx
@@ -18,7 +18,7 @@ function Switch({ className, ...props }: React.ComponentProps<typeof SwitchPrimi
     >
       <SwitchPrimitive.Thumb
         className={cn(
-          "pointer-events-none block size-4 rounded-full bg-background ring-0 transition-transform data-[state=checked]:translate-x-[calc(100%-2px)] data-[state=unchecked]:translate-x-0 dark:data-[state=checked]:bg-success-foreground dark:data-[state=unchecked]:bg-foreground",
+          "pointer-events-none block size-4 rounded-full bg-background ring-0 transition-transform data-[state=checked]:translate-x-[calc(100%-2px)] data-[state=unchecked]:translate-x-0 dark:data-[state=checked]:bg-white dark:data-[state=unchecked]:bg-foreground",
         )}
         data-slot="switch-thumb"
       />
diff --git a/packages/ui/components/ui/tabs.tsx b/packages/ui/components/ui/tabs.tsx
index 9fc12ca3b..5cd9e41bd 100644
--- a/packages/ui/components/ui/tabs.tsx
+++ b/packages/ui/components/ui/tabs.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import type * as React from "react";
+import * as React from "react";
 
 import { Tabs as TabsPrimitive } from "radix-ui";
 
@@ -16,16 +16,99 @@ function Tabs({ className, ...props }: React.ComponentProps<typeof TabsPrimitive
   );
 }
 
-function TabsList({ className, ...props }: React.ComponentProps<typeof TabsPrimitive.List>) {
+/**
+ * Tab list rendering a sliding indicator that animates between triggers.
+ *
+ * @param indicatorClassName - Classes merged into the sliding active indicator
+ * — e.g. `bg-primary` to recolor it or `duration-150` to retime its slide.
+ */
+function TabsList({
+  className,
+  indicatorClassName,
+  children,
+  ...props
+}: React.ComponentProps<typeof TabsPrimitive.List> & {
+  indicatorClassName?: string;
+}) {
+  const listRef = React.useRef<HTMLDivElement>(null);
+  const [indicator, setIndicator] = React.useState<{
+    height: number;
+    left: number;
+    top: number;
+    width: number;
+  } | null>(null);
+
+  const updateIndicator = React.useCallback(() => {
+    const list = listRef.current;
+    if (!list) return;
+
+    const activeTrigger = list.querySelector<HTMLElement>('[data-state="active"]');
+    if (!activeTrigger) {
+      setIndicator(null);
+      return;
+    }
+
+    const listRect = list.getBoundingClientRect();
+    const triggerRect = activeTrigger.getBoundingClientRect();
+    const listStyle = getComputedStyle(list);
+
+    setIndicator({
+      height: triggerRect.height,
+      left: triggerRect.left - listRect.left - (parseFloat(listStyle.borderLeftWidth) || 0),
+      top: triggerRect.top - listRect.top - (parseFloat(listStyle.borderTopWidth) || 0),
+      width: triggerRect.width,
+    });
+  }, []);
+
+  React.useEffect(() => {
+    updateIndicator();
+
+    const list = listRef.current;
+    if (!list) return;
+
+    const mutationObserver = new MutationObserver(updateIndicator);
+    mutationObserver.observe(list, {
+      attributeFilter: ["data-state"],
+      attributes: true,
+      childList: true,
+      subtree: true,
+    });
+
+    const resizeObserver = new ResizeObserver(updateIndicator);
+    resizeObserver.observe(list);
+
+    return () => {
+      mutationObserver.disconnect();
+      resizeObserver.disconnect();
+    };
+  }, [updateIndicator]);
+
   return (
     <TabsPrimitive.List
       className={cn(
-        "inline-flex h-9 w-fit items-center justify-center rounded-lg bg-surface-muted p-[3px] text-muted-foreground",
+        "relative inline-flex h-9 w-fit items-center justify-center rounded-lg bg-surface-muted p-[3px] text-muted-foreground",
         className,
       )}
       data-slot="tabs-list"
+      ref={listRef}
       {...props}
-    />
+    >
+      {indicator && (
+        <div
+          className={cn(
+            "pointer-events-none absolute rounded-md bg-surface shadow-sm transition-all duration-200 ease-out dark:border dark:border-border",
+            indicatorClassName,
+          )}
+          style={{
+            height: indicator.height,
+            left: indicator.left,
+            top: indicator.top,
+            width: indicator.width,
+          }}
+        />
+      )}
+      {children}
+    </TabsPrimitive.List>
   );
 }
 
@@ -33,7 +116,7 @@ function TabsTrigger({ className, ...props }: React.ComponentProps<typeof TabsPr
   return (
     <TabsPrimitive.Trigger
       className={cn(
-        "inline-flex h-[calc(100%-1px)] flex-1 items-center justify-center gap-1.5 whitespace-nowrap rounded-md border border-transparent px-2 py-1 font-medium text-foreground text-sm transition-[color,box-shadow] focus-visible:border-ring focus-visible:outline-1 focus-visible:outline-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:bg-surface data-[state=active]:shadow-sm dark:text-muted-foreground dark:data-[state=active]:border-border dark:data-[state=active]:bg-surface dark:data-[state=active]:text-foreground [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+        "relative z-10 inline-flex h-[calc(100%-1px)] flex-1 items-center justify-center gap-1.5 whitespace-nowrap rounded-md border border-transparent px-2 py-1 font-medium text-foreground text-sm transition-[color,box-shadow] focus-visible:border-ring focus-visible:outline-1 focus-visible:outline-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 dark:text-muted-foreground dark:data-[state=active]:text-foreground [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
         className,
       )}
       data-slot="tabs-trigger"
diff --git a/packages/ui/components/ui/toggle-group.tsx b/packages/ui/components/ui/toggle-group.tsx
index b7ba12b65..337518a14 100644
--- a/packages/ui/components/ui/toggle-group.tsx
+++ b/packages/ui/components/ui/toggle-group.tsx
@@ -13,75 +13,31 @@ const ToggleGroupContext = React.createContext<
   }
 >({
   size: "default",
-  spacing: 0,
+  spacing: 2,
   variant: "default",
 });
 
+/**
+ * Group of toggles that share a variant and size.
+ *
+ * @param spacing - Gap between items in Tailwind spacing units. Pass `0` to
+ * join the items into a single segmented bar with merged corners and borders.
+ */
 function ToggleGroup({
   className,
-  indicatorClassName,
   variant,
   size,
-  spacing = 0,
+  spacing = 2,
   children,
   ...props
 }: React.ComponentProps<typeof ToggleGroupPrimitive.Root> &
   VariantProps<typeof toggleVariants> & {
     spacing?: number;
-    /**
-     * Classes merged into the sliding active indicator — e.g. `bg-primary` to
-     * recolor it or `duration-150` to retime its slide animation.
-     */
-    indicatorClassName?: string;
   }) {
-  const containerRef = React.useRef<HTMLDivElement>(null);
-  const [indicator, setIndicator] = React.useState<{
-    left: number;
-    width: number;
-  } | null>(null);
-
-  const updateIndicator = React.useCallback(() => {
-    const container = containerRef.current;
-    if (!container) return;
-
-    const activeItem = container.querySelector<HTMLElement>('[data-state="on"]');
-    if (!activeItem) {
-      setIndicator(null);
-      return;
-    }
-
-    const containerRect = container.getBoundingClientRect();
-    const itemRect = activeItem.getBoundingClientRect();
-    const borderWidth = parseFloat(getComputedStyle(container).borderLeftWidth) || 0;
-
-    setIndicator({
-      left: itemRect.left - containerRect.left - borderWidth,
-      width: itemRect.width,
-    });
-  }, []);
-
-  React.useEffect(() => {
-    updateIndicator();
-
-    const container = containerRef.current;
-    if (!container) return;
-
-    const observer = new MutationObserver(updateIndicator);
-    observer.observe(container, {
-      attributes: true,
-      attributeFilter: ["data-state"],
-      subtree: true,
-    });
-
-    return () => observer.disconnect();
-  }, [updateIndicator]);
-
   return (
     <ToggleGroupPrimitive.Root
-      ref={containerRef}
       className={cn(
-        "group/toggle-group relative flex w-fit items-center gap-[--spacing(var(--gap))] rounded-lg",
-        variant === "outline" && "border-input dark:bg-input/30 border bg-transparent shadow-xs",
+        "group/toggle-group flex w-fit items-center gap-[--spacing(var(--gap))] rounded-lg data-[size=sm]:rounded-[min(var(--radius-md),10px)]",
         className,
       )}
       data-size={size}
@@ -91,19 +47,6 @@ function ToggleGroup({
       style={{ "--gap": spacing } as React.CSSProperties}
       {...props}
     >
-      {indicator && (
-        <div
-          className={cn(
-            "bg-accent absolute top-0 rounded-[calc(var(--radius-lg)-1px)] transition-all duration-200 ease-out",
-            indicatorClassName,
-          )}
-          style={{
-            height: "100%",
-            left: indicator.left,
-            width: indicator.width,
-          }}
-        />
-      )}
       <ToggleGroupContext.Provider value={{ size, spacing, variant }}>
         {children}
       </ToggleGroupContext.Provider>
@@ -114,8 +57,8 @@ function ToggleGroup({
 function ToggleGroupItem({
   className,
   children,
-  variant,
-  size,
+  variant = "default",
+  size = "default",
   ...props
 }: React.ComponentProps<typeof ToggleGroupPrimitive.Item> & VariantProps<typeof toggleVariants>) {
   const context = React.useContext(ToggleGroupContext);
@@ -123,11 +66,11 @@ function ToggleGroupItem({
   return (
     <ToggleGroupPrimitive.Item
       className={cn(
+        "shrink-0 focus:z-10 focus-visible:z-10 group-data-[spacing=0]/toggle-group:rounded-none group-data-[spacing=0]/toggle-group:px-2 data-[spacing=0]:first:rounded-l-lg data-[spacing=0]:last:rounded-r-lg data-[spacing=0]:data-[variant=outline]:border-l-0 data-[spacing=0]:data-[variant=outline]:first:border-l",
         toggleVariants({
           size: context.size || size,
           variant: context.variant || variant,
         }),
-        "relative z-10 w-auto min-w-0 shrink-0 rounded-[calc(var(--radius-lg)-1px)] border-none bg-transparent px-3 shadow-none hover:bg-accent dark:hover:bg-input/50 focus:z-20 focus-visible:z-20 data-[state=on]:bg-transparent data-[state=on]:text-accent-foreground",
         className,
       )}
       data-size={context.size || size}
diff --git a/packages/ui/index.ts b/packages/ui/index.ts
index 2e1cd5487..4a30a6427 100644
--- a/packages/ui/index.ts
+++ b/packages/ui/index.ts
@@ -33,16 +33,21 @@ export * from "./components/ui/dialog";
 export * from "./components/ui/drawer";
 export * from "./components/ui/dropdown-menu";
 export * from "./components/ui/dropzone";
+export * from "./components/ui/empty";
+export * from "./components/ui/field";
 export * from "./components/ui/form";
 export * from "./components/ui/hover-card";
 export * from "./components/ui/input";
+export * from "./components/ui/input-group";
 export * from "./components/ui/input-otp";
+export * from "./components/ui/item";
 export * from "./components/ui/label";
 export * from "./components/ui/marker";
 export * from "./components/ui/menubar";
 export * from "./components/ui/message";
 export * from "./components/ui/message-scroller";
 export * from "./components/ui/navigation-menu";
+export * from "./components/ui/native-select";
 export * from "./components/ui/pagination";
 export * from "./components/ui/popover";
 export * from "./components/ui/progress";
diff --git a/packages/ui/package.json b/packages/ui/package.json
index 1142cc16b..fb1ec4b0b 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -20,6 +20,7 @@
     "./gradient-avatar": "./components/gradient-avatar.tsx",
     "./input": "./components/ui/input.tsx",
     "./input-group": "./components/ui/input-group.tsx",
+    "./field": "./components/ui/field.tsx",
     "./label": "./components/ui/label.tsx",
     "./logo": "./components/logo.tsx",
     "./sonner": "./components/ui/sonner.tsx",
@@ -36,11 +37,13 @@
     "./dialog": "./components/ui/dialog.tsx",
     "./drawer": "./components/ui/drawer.tsx",
     "./dropdown-menu": "./components/ui/dropdown-menu.tsx",
+    "./empty": "./components/ui/empty.tsx",
     "./form": "./components/ui/form.tsx",
     "./hover-card": "./components/ui/hover-card.tsx",
     "./chart": "./components/ui/chart.tsx",
     "./checkbox": "./components/ui/checkbox.tsx",
     "./input-otp": "./components/ui/input-otp.tsx",
+    "./item": "./components/ui/item.tsx",
     "./menubar": "./components/ui/menubar.tsx",
     "./attachment": "./components/ui/attachment.tsx",
     "./bubble": "./components/ui/bubble.tsx",
@@ -48,6 +51,7 @@
     "./message": "./components/ui/message.tsx",
     "./message-scroller": "./components/ui/message-scroller.tsx",
     "./navigation-menu": "./components/ui/navigation-menu.tsx",
+    "./native-select": "./components/ui/native-select.tsx",
     "./pagination": "./components/ui/pagination.tsx",
     "./popover": "./components/ui/popover.tsx",
     "./progress": "./components/ui/progress.tsx",
@@ -60,6 +64,7 @@
     "./sidebar": "./components/ui/sidebar.tsx",
     "./skeleton": "./components/ui/skeleton.tsx",
     "./slider": "./components/ui/slider.tsx",
+    "./spinner": "./components/ui/spinner.tsx",
     "./switch": "./components/ui/switch.tsx",
     "./table": "./components/ui/table.tsx",
     "./tabs": "./components/ui/tabs.tsx",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fa080acb4..ad8b36a56 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -808,7 +808,7 @@ importers:
         version: 8.19.0
       qrcode.react:
         specifier: ^4.2.0
-        version: 4.2.0(react@19.1.0)
+        version: 4.2.0(react@19.2.7)
       react:
         specifier: 'catalog:'
         version: 19.2.7
@@ -821,6 +821,9 @@ importers:
       react-hook-form:
         specifier: 'catalog:'
         version: 7.81.0(react@19.2.7)
+      react-qr-code:
+        specifier: ^2.2.0
+        version: 2.2.0(react@19.2.7)
       recharts:
         specifier: ^2.15.0
         version: 2.15.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
@@ -1090,7 +1093,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.7.0)
@@ -1216,7 +1219,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -13568,6 +13571,9 @@ packages:
     resolution: {integrity: sha512-KTqnxsgGiQ6ZAzZCVlJH5eOjSnvlyEgx1m8bkRJfOhmGRqfo5KLvmAlACQkrjEtOQ4B7wF9TdSLIs9O90MX9xA==}
     engines: {node: '>=16.0.0'}
 
+  qrcode-generator@2.0.4:
+    resolution: {integrity: sha512-mZSiP6RnbHl4xL2Ap5HfkjLnmxfKcPWpWe/c+5XxCuetEenqmNFf1FH/ftXPCtFG5/TDobjsjz6sSNL0Sr8Z9g==}
+
   qrcode-terminal@0.11.0:
     resolution: {integrity: sha512-Uu7ii+FQy4Qf82G4xu7ShHhjhGahEpCWc3x8UavY3CTcWV+ufmmCtwkr7ZKsX42jdL0kr1B5FKUeqJvAn51jzQ==}
     hasBin: true
@@ -13761,6 +13767,11 @@ packages:
   react-promise-suspense@0.3.4:
     resolution: {integrity: sha512-I42jl7L3Ze6kZaq+7zXWSunBa3b1on5yfvUW6Eo/3fFOj6dZ5Bqmcd264nJbTK/gn1HjjILAjSwnZbV4RpSaNQ==}
 
+  react-qr-code@2.2.0:
+    resolution: {integrity: sha512-e5nS0UUN22K3Nf8KBRUzemfdJ6OmnN5w+kbnj1lvJaol9RyVRFeGl05bCkxSN2ZegbLxjjYjX1+mmAoX9+fAhw==}
+    peerDependencies:
+      react: '*'
+
   react-reconciler@0.31.0:
     resolution: {integrity: sha512-7Ob7Z+URmesIsIVRjnLoDGwBEG/tVitidU0nMsqX/eeJaLY89RISO/10ERe0MqmzuKUUB1rmY+h1itMbUHg9BQ==}
     engines: {node: '>=0.10.0'}
@@ -25217,7 +25228,7 @@ snapshots:
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
@@ -25249,7 +25260,7 @@ snapshots:
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.29.7
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
@@ -27175,7 +27186,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.6)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
@@ -27186,7 +27197,7 @@ snapshots:
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
       eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.9.5)(typescript@5.9.3)
       glob: 13.0.0
@@ -31670,11 +31681,13 @@ snapshots:
 
   pvutils@1.1.5: {}
 
+  qrcode-generator@2.0.4: {}
+
   qrcode-terminal@0.11.0: {}
 
-  qrcode.react@4.2.0(react@19.1.0):
+  qrcode.react@4.2.0(react@19.2.7):
     dependencies:
-      react: 19.1.0
+      react: 19.2.7
 
   qs@6.15.3:
     dependencies:
@@ -32117,6 +32130,12 @@ snapshots:
     dependencies:
       fast-deep-equal: 2.0.1
 
+  react-qr-code@2.2.0(react@19.2.7):
+    dependencies:
+      prop-types: 15.8.1
+      qrcode-generator: 2.0.4
+      react: 19.2.7
+
   react-reconciler@0.31.0(react@19.2.7):
     dependencies:
       react: 19.2.7

From 9eae2ea5373a3ddd11ced287f46d6d1eef9c18e2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 23 Jul 2026 19:28:35 +0200
Subject: [PATCH 113/129] feat: design improvements

---
 apps/mimic-admin/src/components/ui/button.tsx |   2 -
 apps/studio/src/components/ui/button.tsx      |   3 +-
 .../src/components/default-catch-boundary.tsx |   2 +-
 .../design/components/docs/colors/index.tsx   | 282 +++++++++++
 .../design/components/docs/colors/tokens.ts   | 452 ++++++++++++++++++
 .../component-overview/cards/cover-art.tsx    |   2 +-
 .../cards/kitchen-island.tsx                  |   1 -
 .../cards/project-actions.tsx                 |   4 +-
 .../component-overview/cards/qr-connect.tsx   |   2 +-
 .../cards/release-catalog.tsx                 |   2 +-
 .../cards/roller-shades.tsx                   |   1 -
 .../component-overview/cards/social-links.tsx |   2 +-
 .../components/docs/component-registry.tsx    |   1 +
 .../design/content/docs/components/button.mdx |  10 +-
 .../design/content/docs/components/meta.yaml  |   1 +
 .../design/content/docs/components/phone.mdx  |  57 +++
 .../content/docs/components/toggle-group.mdx  |  18 +-
 .../design/content/docs/components/toggle.mdx |   8 +-
 .../content/docs/foundations/colors.mdx       | 116 +++++
 .../design/content/docs/foundations/meta.yaml |   4 +
 .../features/design/content/docs/meta.yaml    |   1 +
 .../studio/ai/components/prompt-input.tsx     |   2 +-
 .../overview/date-range-filter.tsx            |   1 -
 .../studio/paywall-assets/asset-tile.tsx      |   2 +-
 .../designer/canvas/preview-canvas.tsx        |  34 +-
 .../code-mode/component-preview-pane.tsx      |   1 -
 .../state-manager/conjunction-editor.tsx      |   2 +-
 .../components/state-manager/dnf-editor.tsx   |   2 +-
 .../state-manager/state-manager-sheet.tsx     |   6 +-
 .../designer/components/ui/mode-toggle.tsx    |   1 -
 .../variables/inputs/boolean-input.tsx        |   1 -
 .../designer/panel-kit/alignment-grid.tsx     |   2 +-
 .../designer/panel-kit/dimension-field.tsx    |   4 +-
 .../designer/panel-kit/fill-field.tsx         |   5 +-
 .../designer/panel-kit/popover-header.tsx     |   2 +-
 .../designer/panel-kit/prop-field-row.tsx     |   2 +-
 .../designer/panel-runtime/host-renderer.tsx  |   7 +-
 .../panel-runtime/schema.contract.test.ts     |   2 +-
 .../paywalls/designer/panels/action-panel.tsx |   1 -
 .../definitions/interactions-panel.tsx        |   2 +-
 .../definitions/variables-panel.tsx           |   2 +-
 .../paywalls/designer/panels/top-panel.tsx    |   2 +-
 .../detail/paywall-detail-properties.tsx      | 136 ++++++
 .../paywalls/detail/paywall-detail-stats.tsx  | 162 ++++---
 .../paywalls/detail/paywall-phone-preview.tsx |  57 +++
 .../paywalls/detail/paywall-preview-card.tsx  |  62 ---
 .../studio/paywalls/paywall-card-skeleton.tsx |   4 +-
 .../features/studio/paywalls/paywall-card.tsx |  34 +-
 .../product-detail-add-perk-button.tsx        |   2 +-
 .../product-detail-add-product-button.tsx     |   2 +-
 .../studio/products/product-detail-body.tsx   |   4 +-
 .../studio/products/product-detail-page.tsx   |   4 +-
 apps/www/src/features/www/button.tsx          |   1 -
 .../$projectSlug/paywalls.$id.tsx             | 105 ++--
 .../app/menu/customer.tsx                     |  10 +-
 .../react-native-example/app/menu/paywall.tsx |  10 +-
 libraries/paywalls/tests/panel-tree.test.ts   |   2 +-
 packages/rpc/src/groups/PaywallRpcsDef.ts     |   1 +
 packages/ui/components/phone.tsx              | 103 ++++
 packages/ui/components/ui/button.tsx          |  12 +-
 .../ui/components/ui/message-scroller.tsx     |   2 +-
 packages/ui/components/ui/progress.tsx        |   4 +-
 packages/ui/components/ui/slider.tsx          |   2 +-
 packages/ui/components/ui/switch.tsx          |   2 +-
 packages/ui/components/ui/toggle-group.tsx    |   2 +-
 packages/ui/components/ui/toggle.tsx          |  11 +-
 packages/ui/index.ts                          |   1 +
 packages/ui/package.json                      |   1 +
 68 files changed, 1448 insertions(+), 342 deletions(-)
 create mode 100644 apps/www/src/features/design/components/docs/colors/index.tsx
 create mode 100644 apps/www/src/features/design/components/docs/colors/tokens.ts
 create mode 100644 apps/www/src/features/design/content/docs/components/phone.mdx
 create mode 100644 apps/www/src/features/design/content/docs/foundations/colors.mdx
 create mode 100644 apps/www/src/features/design/content/docs/foundations/meta.yaml
 create mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-phone-preview.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx
 create mode 100644 packages/ui/components/phone.tsx

diff --git a/apps/mimic-admin/src/components/ui/button.tsx b/apps/mimic-admin/src/components/ui/button.tsx
index fe109aff0..8c9fd8eb7 100644
--- a/apps/mimic-admin/src/components/ui/button.tsx
+++ b/apps/mimic-admin/src/components/ui/button.tsx
@@ -15,8 +15,6 @@ const buttonVariants = cva(
 					"bg-destructive text-white shadow-sm hover:bg-destructive/90",
 				outline:
 					"border border-input bg-background shadow-sm hover:bg-accent hover:text-accent-foreground",
-				secondary:
-					"bg-secondary text-secondary-foreground shadow-sm hover:bg-secondary/80",
 				ghost: "hover:bg-accent hover:text-accent-foreground",
 				link: "text-primary underline-offset-4 hover:underline",
 			},
diff --git a/apps/studio/src/components/ui/button.tsx b/apps/studio/src/components/ui/button.tsx
index 9ba4de22f..be9b247d8 100644
--- a/apps/studio/src/components/ui/button.tsx
+++ b/apps/studio/src/components/ui/button.tsx
@@ -2,12 +2,11 @@ import type { ButtonHTMLAttributes, ReactNode } from "react";
 
 import { cn } from "../../lib/cn";
 
-type Variant = "default" | "secondary" | "ghost" | "outline";
+type Variant = "default" | "ghost" | "outline";
 type Size = "sm" | "md" | "icon";
 
 const VARIANTS: Record<Variant, string> = {
   default: "bg-emerald-600 text-white hover:bg-emerald-500",
-  secondary: "bg-neutral-800 text-neutral-100 hover:bg-neutral-700",
   ghost: "bg-transparent text-neutral-300 hover:bg-neutral-800",
   outline: "border border-neutral-700 bg-transparent text-neutral-200 hover:bg-neutral-800",
 };
diff --git a/apps/www/src/components/default-catch-boundary.tsx b/apps/www/src/components/default-catch-boundary.tsx
index c73379adc..1702d6503 100644
--- a/apps/www/src/components/default-catch-boundary.tsx
+++ b/apps/www/src/components/default-catch-boundary.tsx
@@ -17,7 +17,7 @@ export function DefaultCatchBoundary({ error }: ErrorComponentProps) {
           onClick={() => {
             router.invalidate();
           }}
-          variant="secondary"
+          variant="outline"
         >
           Try Again
         </Button>
diff --git a/apps/www/src/features/design/components/docs/colors/index.tsx b/apps/www/src/features/design/components/docs/colors/index.tsx
new file mode 100644
index 000000000..0b50c638b
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/colors/index.tsx
@@ -0,0 +1,282 @@
+"use client";
+
+import { CheckIcon, CopyIcon } from "lucide-react";
+import { useCallback, useState } from "react";
+
+import { cn } from "@/features/design/lib/cn";
+
+import {
+  BRAND_SCALES,
+  isLightColor,
+  resolveToken,
+  scaleSteps,
+  SEMANTIC_GROUPS,
+  type SemanticToken,
+  type ThemeName,
+} from "./tokens";
+
+const THEMES: ThemeName[] = ["light", "dark"];
+
+const useCopyValue = () => {
+  const [copied, setCopied] = useState<string | undefined>(undefined);
+
+  const copy = useCallback((value: string) => {
+    void navigator.clipboard.writeText(value).then(() => {
+      setCopied(value);
+      setTimeout(() => setCopied((current) => (current === value ? undefined : current)), 1200);
+    });
+  }, []);
+
+  return { copied, copy };
+};
+
+interface CopyButtonProps {
+  className?: string;
+  copied: boolean;
+  label: string;
+  onCopy: () => void;
+  value: string;
+}
+
+function CopyButton({ className, copied, label, onCopy, value }: CopyButtonProps) {
+  return (
+    <button
+      className={cn(
+        "group inline-flex items-center gap-1.5 rounded-sm font-mono text-xs transition-colors hover:text-foreground",
+        className,
+      )}
+      onClick={onCopy}
+      title={`Copy ${label}`}
+      type="button"
+    >
+      <span>{value}</span>
+      {copied ? (
+        <CheckIcon className="size-3 text-success" />
+      ) : (
+        <CopyIcon className="size-3 opacity-0 transition-opacity group-hover:opacity-60" />
+      )}
+    </button>
+  );
+}
+
+interface TokenSwatchProps {
+  theme: ThemeName;
+  token: SemanticToken;
+}
+
+function TokenSwatch({ theme, token }: TokenSwatchProps) {
+  const resolved = resolveToken(token.name, theme);
+  if (!resolved) {
+    return null;
+  }
+
+  const on = token.on ? resolveToken(token.on, theme) : undefined;
+  const fallbackText = isLightColor(resolved.value) ? "oklch(0% 0 0)" : "oklch(100% 0 0)";
+
+  return (
+    <div
+      className="flex h-16 flex-1 items-center justify-center"
+      style={{ backgroundColor: resolved.value }}
+    >
+      <span
+        className="font-medium text-sm"
+        style={{ color: on?.value ?? fallbackText, opacity: token.on ? 1 : 0.55 }}
+      >
+        {token.on ? "Aa" : theme === "light" ? "L" : "D"}
+      </span>
+    </div>
+  );
+}
+
+interface TokenValueProps {
+  copiedValue: string | undefined;
+  onCopy: (value: string) => void;
+  theme: ThemeName;
+  token: SemanticToken;
+}
+
+function TokenValue({ copiedValue, onCopy, theme, token }: TokenValueProps) {
+  const resolved = resolveToken(token.name, theme);
+  if (!resolved) {
+    return null;
+  }
+
+  return (
+    <div className="flex flex-wrap items-baseline gap-x-2 gap-y-0.5 text-muted-foreground text-xs">
+      <span className="w-9 shrink-0 uppercase tracking-wide">{theme}</span>
+      <CopyButton
+        copied={copiedValue === resolved.value}
+        label={`${theme} value`}
+        onCopy={() => onCopy(resolved.value)}
+        value={resolved.value}
+      />
+      {resolved.alias ? <span className="opacity-70">via {resolved.alias}</span> : null}
+    </div>
+  );
+}
+
+interface SemanticTokenCardProps {
+  copiedValue: string | undefined;
+  onCopy: (value: string) => void;
+  token: SemanticToken;
+}
+
+function SemanticTokenCard({ copiedValue, onCopy, token }: SemanticTokenCardProps) {
+  const variable = `var(--${token.name})`;
+
+  return (
+    <div className="flex flex-col overflow-hidden rounded-lg border bg-card">
+      <div className="flex">
+        {THEMES.map((theme) => (
+          <TokenSwatch key={theme} theme={theme} token={token} />
+        ))}
+      </div>
+
+      <div className="flex flex-1 flex-col gap-2 border-t p-3">
+        <div className="flex flex-wrap items-center gap-x-2 gap-y-1">
+          <CopyButton
+            className="font-medium text-foreground text-sm"
+            copied={copiedValue === variable}
+            label="variable"
+            onCopy={() => onCopy(variable)}
+            value={`--${token.name}`}
+          />
+          {token.on ? (
+            <span className="text-muted-foreground text-xs">
+              on <span className="font-mono">--{token.on}</span>
+            </span>
+          ) : null}
+        </div>
+
+        <p className="text-muted-foreground text-sm leading-snug">{token.meaning}</p>
+
+        <div className="flex flex-wrap gap-1">
+          {token.utilities.map((utility) => (
+            <code
+              className="rounded-sm bg-muted px-1.5 py-0.5 font-mono text-[11px] text-muted-foreground"
+              key={utility}
+            >
+              {utility}
+            </code>
+          ))}
+        </div>
+
+        <div className="mt-auto flex flex-col gap-0.5 pt-1">
+          {THEMES.map((theme) => (
+            <TokenValue
+              copiedValue={copiedValue}
+              key={theme}
+              onCopy={onCopy}
+              theme={theme}
+              token={token}
+            />
+          ))}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+/**
+ * Renders every semantic theme token grouped by intent, with its light and dark
+ * value, the alias it resolves through, and the Tailwind utilities that map to
+ * it. Values are read from `@voidhash/ui/styles/brand-theme.css`, so this page
+ * cannot drift from the theme.
+ */
+export function SemanticColorTokens() {
+  const { copied, copy } = useCopyValue();
+
+  return (
+    <div className="not-prose flex flex-col gap-10">
+      {SEMANTIC_GROUPS.map((group) => (
+        <section className="flex flex-col gap-4" key={group.title}>
+          <div className="flex flex-col gap-1">
+            <h3 className="font-semibold text-lg tracking-tight">{group.title}</h3>
+            <p className="max-w-[70ch] text-muted-foreground text-sm">{group.description}</p>
+          </div>
+
+          <div className="grid gap-4 sm:grid-cols-2 xl:grid-cols-3">
+            {group.tokens.map((token) => (
+              <SemanticTokenCard
+                copiedValue={copied}
+                key={token.name}
+                onCopy={copy}
+                token={token}
+              />
+            ))}
+          </div>
+        </section>
+      ))}
+    </div>
+  );
+}
+
+/**
+ * Renders the raw brand ramps every semantic token is built from. Scales are
+ * theme-independent — only the semantic tokens above remap between light and
+ * dark.
+ */
+export function BrandColorScales() {
+  const { copied, copy } = useCopyValue();
+
+  return (
+    <div className="not-prose flex flex-col gap-10">
+      {BRAND_SCALES.map((scale) => {
+        const steps = scaleSteps(scale.prefix);
+
+        return (
+          <section className="flex flex-col gap-3" key={scale.prefix}>
+            <div className="flex flex-col gap-1">
+              <h3 className="font-semibold text-lg tracking-tight">{scale.title}</h3>
+              <p className="max-w-[70ch] text-muted-foreground text-sm">{scale.meaning}</p>
+            </div>
+
+            <div className="grid grid-cols-4 gap-2 sm:grid-cols-6 lg:grid-cols-11">
+              {steps.map((step) => {
+                const name = `${scale.prefix}-${step}`;
+                const resolved = resolveToken(name, "light");
+                if (!resolved) {
+                  return null;
+                }
+
+                const variable = `var(--${name})`;
+
+                return (
+                  <button
+                    className="group flex flex-col gap-1.5 text-left"
+                    key={step}
+                    onClick={() => copy(variable)}
+                    title={`Copy ${variable}`}
+                    type="button"
+                  >
+                    <span
+                      className="flex h-14 items-center justify-center rounded-md border border-black/5 transition-transform group-hover:scale-[1.03] dark:border-white/10"
+                      style={{ backgroundColor: resolved.value }}
+                    >
+                      {copied === variable ? (
+                        <CheckIcon
+                          className="size-4"
+                          style={{
+                            color: isLightColor(resolved.value)
+                              ? "oklch(0% 0 0)"
+                              : "oklch(100% 0 0)",
+                          }}
+                        />
+                      ) : null}
+                    </span>
+                    <span className="flex flex-col leading-tight">
+                      <span className="font-medium text-xs">{step}</span>
+                      <span className="break-all font-mono text-[10px] text-muted-foreground">
+                        {resolved.value}
+                      </span>
+                    </span>
+                  </button>
+                );
+              })}
+            </div>
+          </section>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/docs/colors/tokens.ts b/apps/www/src/features/design/components/docs/colors/tokens.ts
new file mode 100644
index 000000000..9f9124708
--- /dev/null
+++ b/apps/www/src/features/design/components/docs/colors/tokens.ts
@@ -0,0 +1,452 @@
+import brandThemeCss from "@voidhash/ui/styles/brand-theme.css?raw";
+
+export type ThemeName = "light" | "dark";
+
+export interface ResolvedToken {
+  /** Final color value with every `var()` indirection followed. */
+  value: string;
+  /** The variable this token points at, when it is defined as an alias. */
+  alias?: string;
+}
+
+export interface SemanticToken {
+  /** Custom property name without the leading dashes, e.g. `primary`. */
+  name: string;
+  /** What the token is for and when to reach for it. */
+  meaning: string;
+  /** Tailwind utilities that map onto this token. */
+  utilities: string[];
+  /** Token used for text/icons placed on top of this one, if there is a pair. */
+  on?: string;
+}
+
+export interface SemanticGroup {
+  title: string;
+  description: string;
+  tokens: SemanticToken[];
+}
+
+export interface BrandScale {
+  /** Custom property prefix, e.g. `blue-ribbon` for `--blue-ribbon-500`. */
+  prefix: string;
+  title: string;
+  meaning: string;
+}
+
+const SELECTOR_LIGHT = ":root";
+const SELECTOR_DARK = ".dark";
+const ALIAS_PATTERN = /^var\((--[\w-]+)\)$/;
+
+/**
+ * Reads the custom properties declared in a single flat rule block. The brand
+ * theme keeps `:root` and `.dark` free of nested rules, so a brace scan is
+ * enough — no CSS parser needed.
+ */
+const readDeclarations = (css: string, selector: string): Record<string, string> => {
+  const selectorStart = css.indexOf(`${selector} {`);
+  if (selectorStart === -1) {
+    return {};
+  }
+
+  const blockStart = css.indexOf("{", selectorStart);
+  const blockEnd = css.indexOf("}", blockStart);
+  const declarations: Record<string, string> = {};
+
+  for (const declaration of css.slice(blockStart + 1, blockEnd).split(";")) {
+    const separator = declaration.indexOf(":");
+    if (separator === -1) {
+      continue;
+    }
+
+    const name = declaration.slice(0, separator).trim();
+    if (name.startsWith("--")) {
+      declarations[name] = declaration.slice(separator + 1).trim();
+    }
+  }
+
+  return declarations;
+};
+
+const LIGHT_DECLARATIONS = readDeclarations(brandThemeCss, SELECTOR_LIGHT);
+const DARK_DECLARATIONS = {
+  ...LIGHT_DECLARATIONS,
+  ...readDeclarations(brandThemeCss, SELECTOR_DARK),
+};
+
+const declarationsFor = (theme: ThemeName) =>
+  theme === "dark" ? DARK_DECLARATIONS : LIGHT_DECLARATIONS;
+
+const follow = (declarations: Record<string, string>, value: string, depth = 0): string => {
+  const alias = ALIAS_PATTERN.exec(value);
+  const target = alias ? declarations[alias[1]] : undefined;
+  if (!target || depth > 10) {
+    return value;
+  }
+
+  return follow(declarations, target, depth + 1);
+};
+
+/**
+ * Resolves a theme token to its literal color, following alias chains such as
+ * `--primary` → `--blue-ribbon-600` → `oklch(…)`. Returns `undefined` when the
+ * token is not declared for the given theme.
+ */
+export const resolveToken = (name: string, theme: ThemeName): ResolvedToken | undefined => {
+  const declarations = declarationsFor(theme);
+  const raw = declarations[`--${name}`];
+  if (!raw) {
+    return undefined;
+  }
+
+  const alias = ALIAS_PATTERN.exec(raw);
+  return {
+    alias: alias?.[1],
+    value: follow(declarations, raw),
+  };
+};
+
+/** Lists the steps declared for a scale prefix, ordered light to dark. */
+export const scaleSteps = (prefix: string): number[] =>
+  Object.keys(LIGHT_DECLARATIONS)
+    .map((name) => {
+      const match = new RegExp(`^--${prefix}-(\\d+)$`).exec(name);
+      return match ? Number(match[1]) : undefined;
+    })
+    .filter((step): step is number => step !== undefined)
+    .sort((a, b) => a - b);
+
+/**
+ * Estimates whether a color is light enough to need dark text on top. Handles
+ * the two literal formats used by the theme: `oklch(L% C H)` and hex.
+ */
+export const isLightColor = (value: string): boolean => {
+  const oklch = /^oklch\(\s*([\d.]+)%/.exec(value);
+  if (oklch) {
+    return Number(oklch[1]) >= 62;
+  }
+
+  const hex = /^#([\da-f]{6})$/i.exec(value);
+  if (hex) {
+    const int = Number.parseInt(hex[1], 16);
+    const luminance =
+      (0.2126 * ((int >> 16) & 0xff) + 0.7152 * ((int >> 8) & 0xff) + 0.0722 * (int & 0xff)) / 255;
+    return luminance >= 0.55;
+  }
+
+  return true;
+};
+
+export const SEMANTIC_GROUPS: SemanticGroup[] = [
+  {
+    description:
+      "The stack of neutral surfaces, from the page canvas up to floating layers. Pick the one that matches how far the element is lifted off the page, not the color you want.",
+    title: "Surfaces",
+    tokens: [
+      {
+        meaning:
+          "The app canvas. Everything else sits on top of it. Set once on `body` — components should not repaint it.",
+        name: "background",
+        on: "foreground",
+        utilities: ["bg-background"],
+      },
+      {
+        meaning:
+          "A neutral surface raised off the canvas: toolbars, inspector rails, list rows that need separation without a card border.",
+        name: "surface",
+        on: "foreground",
+        utilities: ["bg-surface"],
+      },
+      {
+        meaning:
+          "A recessed surface for wells and tracks — slider rails, progress backgrounds, inset code blocks.",
+        name: "surface-muted",
+        on: "foreground",
+        utilities: ["bg-surface-muted"],
+      },
+      {
+        meaning:
+          "Content containers. Use with `--border` for the outline; in dark mode it reads lighter than the canvas so cards float.",
+        name: "card",
+        on: "card-foreground",
+        utilities: ["bg-card"],
+      },
+      {
+        meaning: "Text and icons inside a card.",
+        name: "card-foreground",
+        utilities: ["text-card-foreground"],
+      },
+      {
+        meaning:
+          "App chrome around the workspace — designer and editor panels. Slightly darker than `--card` in dark mode so tooling recedes behind content.",
+        name: "panel",
+        on: "foreground",
+        utilities: ["bg-panel"],
+      },
+      {
+        meaning:
+          "Layers that float above the page: dropdowns, menus, tooltips, comboboxes, date pickers.",
+        name: "popover",
+        on: "popover-foreground",
+        utilities: ["bg-popover"],
+      },
+      {
+        meaning: "Text and icons inside a popover layer.",
+        name: "popover-foreground",
+        utilities: ["text-popover-foreground"],
+      },
+    ],
+  },
+  {
+    description:
+      "Text and icon colors. Body copy is `--foreground`; anything quieter steps down to `--muted-foreground` rather than lowering opacity.",
+    title: "Content",
+    tokens: [
+      {
+        meaning: "Default body text, headings, and icons on the canvas.",
+        name: "foreground",
+        utilities: ["text-foreground"],
+      },
+      {
+        meaning:
+          "Secondary text: labels, helper copy, placeholders, timestamps, inactive icons. The lowest-emphasis text that still meets contrast.",
+        name: "muted-foreground",
+        utilities: ["text-muted-foreground"],
+      },
+      {
+        meaning:
+          "Quiet neutral fill for badges, skeletons, disabled controls, and hovered table rows.",
+        name: "muted",
+        on: "muted-foreground",
+        utilities: ["bg-muted"],
+      },
+    ],
+  },
+  {
+    description:
+      "Interactive intent. One primary action per view; everything competing with it drops to secondary or ghost styling.",
+    title: "Actions",
+    tokens: [
+      {
+        meaning:
+          "The primary action and brand accent — solid buttons, selected states, links, active nav items.",
+        name: "primary",
+        on: "primary-foreground",
+        utilities: ["bg-primary", "text-primary", "border-primary"],
+      },
+      {
+        meaning: "Text and icons on a primary fill. Stays white in both themes.",
+        name: "primary-foreground",
+        utilities: ["text-primary-foreground"],
+      },
+      {
+        meaning: "Neutral, lower-emphasis actions that sit next to a primary button.",
+        name: "secondary",
+        on: "secondary-foreground",
+        utilities: ["bg-secondary"],
+      },
+      {
+        meaning: "Text and icons on a secondary fill.",
+        name: "secondary-foreground",
+        utilities: ["text-secondary-foreground"],
+      },
+      {
+        meaning:
+          "Hover and highlight state for list-like surfaces: menu items, command results, sidebar rows, ghost buttons.",
+        name: "accent",
+        on: "accent-foreground",
+        utilities: ["bg-accent", "hover:bg-accent"],
+      },
+      {
+        meaning: "Text and icons on an accent highlight.",
+        name: "accent-foreground",
+        utilities: ["text-accent-foreground"],
+      },
+    ],
+  },
+  {
+    description:
+      "Status colors. Reserved for outcomes and risk — never used decoratively, so their appearance always carries meaning.",
+    title: "Feedback",
+    tokens: [
+      {
+        meaning:
+          "Destructive and irreversible actions, error states, invalid fields. Pair with a confirmation for anything unrecoverable.",
+        name: "destructive",
+        on: "destructive-foreground",
+        utilities: ["bg-destructive", "text-destructive", "border-destructive"],
+      },
+      {
+        meaning: "Text and icons on a destructive fill.",
+        name: "destructive-foreground",
+        utilities: ["text-destructive-foreground"],
+      },
+      {
+        meaning: "Successful outcomes and healthy status — completed steps, live deployments.",
+        name: "success",
+        on: "success-foreground",
+        utilities: ["bg-success", "text-success"],
+      },
+      {
+        meaning: "Text and icons on a success fill.",
+        name: "success-foreground",
+        utilities: ["text-success-foreground"],
+      },
+    ],
+  },
+  {
+    description:
+      "Hairlines, control outlines, and focus. These are the only tokens allowed to draw structure — do not fake borders with a background color.",
+    title: "Borders and focus",
+    tokens: [
+      {
+        meaning:
+          "Default hairline between surfaces. Applied globally by the base layer, so most elements inherit it without a border utility.",
+        name: "border",
+        utilities: ["border-border"],
+      },
+      {
+        meaning: "Outline of form controls — inputs, textareas, selects, checkboxes.",
+        name: "input",
+        utilities: ["border-input"],
+      },
+      {
+        meaning:
+          "Keyboard focus ring. The base layer renders it at 50% opacity (`outline-ring/50`), so focus reads clearly without shouting.",
+        name: "ring",
+        utilities: ["ring-ring", "outline-ring/50"],
+      },
+    ],
+  },
+  {
+    description:
+      "The sidebar runs its own surface stack so navigation can go darker than the app without dragging the rest of the UI with it.",
+    title: "Sidebar",
+    tokens: [
+      {
+        meaning: "Sidebar background. Pure black in dark mode, pinning navigation to the far edge.",
+        name: "sidebar",
+        on: "sidebar-foreground",
+        utilities: ["bg-sidebar"],
+      },
+      {
+        meaning: "Sidebar labels and icons.",
+        name: "sidebar-foreground",
+        utilities: ["text-sidebar-foreground"],
+      },
+      {
+        meaning:
+          "Active navigation item. Deliberately neutral rather than brand blue so the sidebar does not compete with in-page primary actions.",
+        name: "sidebar-primary",
+        on: "sidebar-primary-foreground",
+        utilities: ["bg-sidebar-primary"],
+      },
+      {
+        meaning: "Text on an active navigation item.",
+        name: "sidebar-primary-foreground",
+        utilities: ["text-sidebar-primary-foreground"],
+      },
+      {
+        meaning: "Hovered navigation item.",
+        name: "sidebar-accent",
+        on: "sidebar-accent-foreground",
+        utilities: ["bg-sidebar-accent"],
+      },
+      {
+        meaning: "Text on a hovered navigation item.",
+        name: "sidebar-accent-foreground",
+        utilities: ["text-sidebar-accent-foreground"],
+      },
+      {
+        meaning: "Dividers inside the sidebar and the seam against the app canvas.",
+        name: "sidebar-border",
+        utilities: ["border-sidebar-border"],
+      },
+      {
+        meaning: "Focus ring for sidebar controls.",
+        name: "sidebar-ring",
+        utilities: ["ring-sidebar-ring"],
+      },
+    ],
+  },
+  {
+    description:
+      "Categorical series colors, ordered by how they should be assigned. Use them in sequence so the same series index keeps the same color across charts.",
+    title: "Data visualization",
+    tokens: [
+      {
+        meaning: "First series — the metric the chart is about.",
+        name: "chart-1",
+        utilities: ["fill-chart-1", "stroke-chart-1"],
+      },
+      {
+        meaning: "Second series.",
+        name: "chart-2",
+        utilities: ["fill-chart-2", "stroke-chart-2"],
+      },
+      {
+        meaning: "Third series.",
+        name: "chart-3",
+        utilities: ["fill-chart-3", "stroke-chart-3"],
+      },
+      {
+        meaning: "Fourth series.",
+        name: "chart-4",
+        utilities: ["fill-chart-4", "stroke-chart-4"],
+      },
+      {
+        meaning: "Fifth series. Beyond five categories, group the tail into an “Other” bucket.",
+        name: "chart-5",
+        utilities: ["fill-chart-5", "stroke-chart-5"],
+      },
+    ],
+  },
+];
+
+export const BRAND_SCALES: BrandScale[] = [
+  {
+    meaning:
+      "The Voidhash brand hue. Step 600 is `--primary`, step 500 is `--ring`. Lighter steps back tinted surfaces; darker steps are for text on tinted backgrounds.",
+    prefix: "blue-ribbon",
+    title: "Blue Ribbon",
+  },
+  {
+    meaning:
+      "Secondary brand hue. Used for the second chart series and for AI/agent surfaces that need to read as distinct from primary actions.",
+    prefix: "electric-violet",
+    title: "Electric Violet",
+  },
+  {
+    meaning: "Third chart series and accent illustrations. Not used for interactive states.",
+    prefix: "fuchsia-pink",
+    title: "Fuchsia Pink",
+  },
+  {
+    meaning:
+      "Danger. Step 600 is `--destructive` in light mode, step 500 in dark mode where the surface is darker.",
+    prefix: "radical-red",
+    title: "Radical Red",
+  },
+  {
+    meaning:
+      "Reserved for high-urgency, non-destructive states. No semantic token maps to it yet, so reference the scale directly and document the usage.",
+    prefix: "blaze-orange",
+    title: "Blaze Orange",
+  },
+  {
+    meaning:
+      "Warnings and pending states — there is no `--warning` token, so use `amber-500`/`amber-600` when you need caution without danger. Also the fourth chart series.",
+    prefix: "amber",
+    title: "Amber",
+  },
+  {
+    meaning: "Success and healthy status. Step 600 is `--success`; step 500 is the fifth series.",
+    prefix: "pistachio",
+    title: "Pistachio",
+  },
+  {
+    meaning:
+      "The neutral ramp every surface, border, and text token is built from. Light mode maps 50–200 to surfaces and 500–900 to text; dark mode inverts that.",
+    prefix: "zinc",
+    title: "Zinc",
+  },
+];
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx
index 7701ac31b..383abf71e 100644
--- a/apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/cover-art.tsx
@@ -32,7 +32,7 @@ export function CoverArt() {
         <input id="cover-art" type="file" accept="image/jpeg,image/png" className="sr-only" />
       </CardContent>
       <CardFooter className="flex-col gap-2">
-        <Button variant="secondary" className="w-full" asChild>
+        <Button variant="outline" className="w-full" asChild>
           <label htmlFor="cover-art" className="cursor-pointer">
             Upload Artwork
           </label>
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx
index 97845d06a..db97fc696 100644
--- a/apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/kitchen-island.tsx
@@ -57,7 +57,6 @@ export function KitchenIsland() {
             type="single"
             value={scene}
             onValueChange={handleSceneChange}
-            variant="outline"
             spacing={1}
             className="flex-wrap"
           >
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx
index 308ae180b..2134d675a 100644
--- a/apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/project-actions.tsx
@@ -37,7 +37,7 @@ export function ProjectActions() {
               remixicon="RiFilter3Line"
             />
           </Button>
-          <Button variant="secondary" size="sm">
+          <Button variant="outline" size="sm">
             <IconPlaceholder
               lucide="PlusIcon"
               tabler="IconPlus"
@@ -55,7 +55,7 @@ export function ProjectActions() {
           <Button variant="outline" size="sm">
             Preview
           </Button>
-          <Button variant="secondary" size="sm">
+          <Button variant="outline" size="sm">
             Copy
           </Button>
           <Button size="sm">Publish</Button>
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx
index e9d825692..da6d2b02b 100644
--- a/apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/qr-connect.tsx
@@ -27,7 +27,7 @@ export function QrConnect() {
         </CardDescription>
       </CardHeader>
       <CardFooter>
-        <Button variant="secondary" className="w-full">
+        <Button variant="outline" className="w-full">
           Got it
         </Button>
       </CardFooter>
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx
index 77bdf8fb6..6be85e158 100644
--- a/apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/release-catalog.tsx
@@ -59,7 +59,7 @@ export function ReleaseCatalog() {
             </InputGroupAddon>
             <InputGroupInput placeholder="Search holdings or tickers..." />
           </InputGroup>
-          <ToggleGroup type="single" defaultValue="etfs" variant="outline" spacing={1}>
+          <ToggleGroup type="single" defaultValue="etfs" spacing={1}>
             <ToggleGroupItem value="stocks">Stocks</ToggleGroupItem>
             <ToggleGroupItem value="etfs">ETFs</ToggleGroupItem>
             <ToggleGroupItem value="reits">REITs</ToggleGroupItem>
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx
index 4d5edd765..9bd1136f2 100644
--- a/apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/roller-shades.tsx
@@ -50,7 +50,6 @@ export function RollerShades() {
             if (value === "half") setPosition([50]);
             if (value === "closed") setPosition([100]);
           }}
-          variant="outline"
           spacing={1}
           className="w-full"
         >
diff --git a/apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx b/apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx
index 2c4c4b36b..178cab282 100644
--- a/apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx
+++ b/apps/www/src/features/design/components/docs/component-overview/cards/social-links.tsx
@@ -75,7 +75,7 @@ export function SocialLinks() {
         </FieldGroup>
       </CardContent>
       <CardFooter className="justify-end gap-2 style-sera:justify-center">
-        <Button variant="secondary" className="style-sera:flex-1">
+        <Button variant="outline" className="style-sera:flex-1">
           Discard
         </Button>
         <Button className="style-sera:flex-1">Save Changes</Button>
diff --git a/apps/www/src/features/design/components/docs/component-registry.tsx b/apps/www/src/features/design/components/docs/component-registry.tsx
index af8d06f4b..678242302 100644
--- a/apps/www/src/features/design/components/docs/component-registry.tsx
+++ b/apps/www/src/features/design/components/docs/component-registry.tsx
@@ -2,6 +2,7 @@
 
 // Re-export all UI components from @voidhash/ui for use in MDX
 export * from "@voidhash/ui";
+export { BrandColorScales, SemanticColorTokens } from "./colors";
 export { ComponentOverview } from "./component-overview";
 
 // Export common icons used in examples
diff --git a/apps/www/src/features/design/content/docs/components/button.mdx b/apps/www/src/features/design/content/docs/components/button.mdx
index 2a7bf9ea9..cf71e6dfc 100644
--- a/apps/www/src/features/design/content/docs/components/button.mdx
+++ b/apps/www/src/features/design/content/docs/components/button.mdx
@@ -23,9 +23,6 @@ The Button component supports the following visual variants:
   <Preview className="p-4">
     <Button variant="default">Default</Button>
   </Preview>
-  <Preview className="p-4">
-    <Button variant="secondary">Secondary</Button>
-  </Preview>
   <Preview className="p-4">
     <Button variant="destructive">Destructive</Button>
   </Preview>
@@ -45,7 +42,6 @@ The Button component supports the following visual variants:
 
 ```tsx
 <Button variant="default">Default</Button>
-<Button variant="secondary">Secondary</Button>
 <Button variant="destructive">Destructive</Button>
 <Button variant="success">Success</Button>
 <Button variant="outline">Outline</Button>
@@ -122,7 +118,7 @@ Use the `loading` prop to show a spinner and disable the button:
     <Button loading>Saving...</Button>
   </Preview>
   <Preview className="p-4">
-    <Button variant="secondary" loading>
+    <Button variant="ghost" loading>
       Processing
     </Button>
   </Preview>
@@ -135,7 +131,7 @@ Use the `loading` prop to show a spinner and disable the button:
 
 ```tsx
 <Button loading>Saving...</Button>
-<Button variant="secondary" loading>Processing</Button>
+<Button variant="ghost" loading>Processing</Button>
 <Button variant="outline" loading>Loading</Button>
 ```
 
@@ -161,7 +157,7 @@ Use the `asChild` prop to render the button as a child element, like a link:
   type={{
     variant: {
       description: "The visual style of the button",
-      type: "'default' | 'destructive' | 'success' | 'outline' | 'secondary' | 'ghost' | 'link'",
+      type: "'default' | 'destructive' | 'success' | 'outline' | 'ghost' | 'link'",
       default: "'default'",
     },
     size: {
diff --git a/apps/www/src/features/design/content/docs/components/meta.yaml b/apps/www/src/features/design/content/docs/components/meta.yaml
index 19ef4299f..6edb3f8b6 100644
--- a/apps/www/src/features/design/content/docs/components/meta.yaml
+++ b/apps/www/src/features/design/content/docs/components/meta.yaml
@@ -30,6 +30,7 @@ pages:
   - navigation-menu
   - page-bar
   - pagination
+  - phone
   - popover
   - progress
   - radio-group
diff --git a/apps/www/src/features/design/content/docs/components/phone.mdx b/apps/www/src/features/design/content/docs/components/phone.mdx
new file mode 100644
index 000000000..cf796e051
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/components/phone.mdx
@@ -0,0 +1,57 @@
+---
+title: Phone
+description: A phone mockup that frames arbitrary screen content and scales to any width.
+---
+
+## Usage
+
+`Phone` renders a black device body with a 9:19.5 screen, dynamic island, home indicator and side buttons. Every dimension is expressed in container-query units against the device's own width, so the same component reads correctly from a dashboard thumbnail up to a full-size preview. Children are clipped to the rounded screen — give them `size-full` to fill it.
+
+<Preview>
+  <Phone className="w-[220px]" screenClassName="bg-linear-150 from-blue-ribbon-700 to-electric-violet-800" />
+</Preview>
+
+```tsx
+import { Phone } from "@voidhash/ui";
+
+<Phone className="w-[220px]">
+  <img alt="" className="size-full object-cover object-top" src={thumbnailUrl} />
+</Phone>;
+```
+
+## Sizing from height
+
+By default the device fills the available width. Pass `fitHeight` to derive the width from the available height instead — pair it with `h-full` or `max-h-*` on `className`.
+
+<Preview className="h-[320px]">
+  <Phone className="h-full" fitHeight screenClassName="bg-zinc-800" />
+</Preview>
+
+```tsx
+<Phone className="h-full max-h-[832px]" fitHeight>
+  <iframe className="size-full" srcDoc={html} title="Preview" />
+</Phone>
+```
+
+## Browser toolbar
+
+Passing `url` floats a Safari-style toolbar over the bottom of the screen, together with a scrim that keeps it legible against light content.
+
+<Preview>
+  <Phone className="w-[220px]" screenClassName="bg-zinc-700" url="voidha.sh" />
+</Preview>
+
+```tsx
+<Phone url="voidha.sh">{content}</Phone>
+```
+
+## Props
+
+| Prop              | Type        | Default | Description                                                             |
+| ----------------- | ----------- | ------- | ----------------------------------------------------------------------- |
+| `children`        | `ReactNode` | —       | Screen content, clipped to the rounded display.                          |
+| `fitHeight`       | `boolean`   | `false` | Derive the device size from the available height instead of the width.   |
+| `screenClassName` | `string`    | —       | Extra classes for the screen surface, e.g. its background colour.        |
+| `url`             | `string`    | —       | Renders the floating browser toolbar showing this URL.                   |
+
+`PHONE_ASPECT_RATIO` is exported alongside the component for layouts that need to reserve the device's footprint themselves.
diff --git a/apps/www/src/features/design/content/docs/components/toggle-group.mdx b/apps/www/src/features/design/content/docs/components/toggle-group.mdx
index 6f09e25bf..442ae0d77 100644
--- a/apps/www/src/features/design/content/docs/components/toggle-group.mdx
+++ b/apps/www/src/features/design/content/docs/components/toggle-group.mdx
@@ -70,22 +70,6 @@ An individual toggle button within the group.
 </ToggleGroup>
 ```
 
-### Outline Variant
-
-<Preview>
-  <ToggleGroup type="single" variant="outline" defaultValue="a">
-    <ToggleGroupItem value="a">A</ToggleGroupItem>
-    <ToggleGroupItem value="b">B</ToggleGroupItem>
-    <ToggleGroupItem value="c">C</ToggleGroupItem>
-  </ToggleGroup>
-</Preview>
-
-```tsx
-<ToggleGroup type="single" variant="outline">
-  ...
-</ToggleGroup>
-```
-
 ### With Spacing
 
 <Preview>
@@ -130,7 +114,7 @@ An individual toggle button within the group.
     },
     variant: {
       description: "Visual variant",
-      type: "'default' | 'outline' | 'primary'",
+      type: "'default' | 'primary'",
       default: "'default'",
     },
     size: {
diff --git a/apps/www/src/features/design/content/docs/components/toggle.mdx b/apps/www/src/features/design/content/docs/components/toggle.mdx
index 721c75e71..78599b86a 100644
--- a/apps/www/src/features/design/content/docs/components/toggle.mdx
+++ b/apps/www/src/features/design/content/docs/components/toggle.mdx
@@ -28,11 +28,6 @@ import { BoldIcon } from "lucide-react";
       <BoldIcon />
     </Toggle>
   </Preview>
-  <Preview className="p-4">
-    <Toggle variant="outline" aria-label="Outline">
-      <ItalicIcon />
-    </Toggle>
-  </Preview>
   <Preview className="p-4">
     <Toggle variant="primary" aria-label="Primary">
       <UnderlineIcon />
@@ -42,7 +37,6 @@ import { BoldIcon } from "lucide-react";
 
 ```tsx
 <Toggle variant="default">...</Toggle>
-<Toggle variant="outline">...</Toggle>
 <Toggle variant="primary">...</Toggle>
 ```
 
@@ -120,7 +114,7 @@ import { BoldIcon } from "lucide-react";
   type={{
     variant: {
       description: "The visual style of the toggle",
-      type: "'default' | 'outline' | 'primary'",
+      type: "'default' | 'primary'",
       default: "'default'",
     },
     size: {
diff --git a/apps/www/src/features/design/content/docs/foundations/colors.mdx b/apps/www/src/features/design/content/docs/foundations/colors.mdx
new file mode 100644
index 000000000..bc5051330
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/foundations/colors.mdx
@@ -0,0 +1,116 @@
+---
+title: Colors
+description: The Voidhash color system — semantic tokens, what each one means, and the brand scales behind them.
+full: true
+---
+
+Colors are exposed as CSS custom properties on `:root`, remapped under `.dark`, and re-exported to Tailwind through `@theme inline` in [`@voidhash/ui/styles/brand-theme.css`](https://github.com/voidhashcom/voidhash/blob/main/packages/ui/styles/brand-theme.css). Every token below therefore exists in three forms:
+
+<DocsTabs items={["CSS variable", "Tailwind utility", "Inline style"]}>
+  <DocsTab value="CSS variable">
+    ```css
+    .thing {
+      background: var(--card);
+      color: var(--card-foreground);
+      border-color: var(--border);
+    }
+    ```
+  </DocsTab>
+  <DocsTab value="Tailwind utility">
+    ```tsx
+    <div className="border bg-card text-card-foreground" />
+    ```
+  </DocsTab>
+  <DocsTab value="Inline style">
+    ```tsx
+    <div style={{ background: "var(--card)" }} />
+    ```
+  </DocsTab>
+</DocsTabs>
+
+There are two layers. **Semantic tokens** (`--primary`, `--muted-foreground`, `--border`) describe a role and swap value between light and dark. **Brand scales** (`--blue-ribbon-600`, `--zinc-200`) are the fixed ramps those roles point at. Product UI uses the semantic layer; the scales exist to build tokens from, and for the rare case where a specific step is genuinely the right answer.
+
+<Callout type="warn">
+  Reaching for a scale step directly in product UI is how dark mode breaks — `bg-zinc-100` stays
+  near-white when the theme flips. If nothing in the semantic layer fits, that is usually a missing
+  token, not a reason to skip it.
+</Callout>
+
+## Semantic tokens
+
+Click any variable or value to copy it. Each card shows the light value on the left and the dark value on the right, with `Aa` rendered in the token's paired foreground so you can see the contrast the pairing produces.
+
+<SemanticColorTokens />
+
+## Brand scales
+
+These are theme-independent — the same value in light and dark. Steps run 50 (lightest) to 950 (darkest); the 500–600 range is where the hue is at full strength and where most semantic tokens land.
+
+Two literals sit outside the ramps: `--white` (`oklch(100% 0 0)`) and `--black` (`oklch(0% 0 0)`). They back the canvas in light mode and the sidebar in dark mode — reference the semantic token rather than the literal, or the surface will not flip with the theme.
+
+<BrandColorScales />
+
+## Choosing a color
+
+<Steps>
+
+<Step>
+
+### Start from the role, not the hue
+
+Ask what the element _is_ — a raised surface, secondary text, a danger action — and take the token for that role. `--destructive` says "this deletes something" in a way `--radical-red-600` does not, and it keeps the meaning if the palette is retuned later.
+
+</Step>
+
+<Step>
+
+### Take the paired foreground
+
+Backgrounds with a `-foreground` partner (`--primary`/`--primary-foreground`, `--card`/`--card-foreground`) are contrast-checked as pairs. Mixing across pairs — `--foreground` on a `--primary` fill — is where contrast quietly fails, usually only in one theme.
+
+</Step>
+
+<Step>
+
+### Step down for emphasis, don't fade out
+
+Quieter text is `--muted-foreground`, not `--foreground` at 60% opacity. Opacity compounds against whatever surface it lands on, so the result is unpredictable across the surface stack; the muted token is tuned per theme.
+
+</Step>
+
+<Step>
+
+### Check both themes
+
+Dark mode is not a filter — `--card` goes _lighter_ than the canvas while `--sidebar` goes to pure black. Anything hardcoded, or built out of opacity over a hardcoded color, will look wrong in exactly one of the two.
+
+</Step>
+
+</Steps>
+
+## Gaps worth knowing
+
+- **No `--warning` token.** Use `--amber-500` (dark surfaces) or `--amber-600` (light surfaces) for caution states, and keep `--destructive` for genuine danger.
+- **No info token.** Informational states use `--primary` or the muted surface stack.
+- **`--blaze-orange-*` is unmapped.** It ships in the theme but no semantic token points at it yet.
+- **Charts don't use the semantic layer.** `--chart-1` through `--chart-5` are assigned in order so a given series index keeps its color across every chart in the product.
+
+## Adding a token
+
+Semantic tokens are added in three places in `brand-theme.css`, and all three are required — a token missing from `@theme inline` exists in CSS but has no Tailwind utility:
+
+```css
+:root {
+  --warning: var(--amber-600);
+}
+
+.dark {
+  --warning: var(--amber-500);
+}
+
+@theme inline {
+  --color-warning: var(--warning);
+}
+```
+
+Point new tokens at a scale step rather than a literal color, so the ramp stays the single source of truth. This page reads the stylesheet directly, so a new token shows up here as soon as it is added to `SEMANTIC_GROUPS` with its meaning.
diff --git a/apps/www/src/features/design/content/docs/foundations/meta.yaml b/apps/www/src/features/design/content/docs/foundations/meta.yaml
new file mode 100644
index 000000000..bea8cd0ff
--- /dev/null
+++ b/apps/www/src/features/design/content/docs/foundations/meta.yaml
@@ -0,0 +1,4 @@
+icon: Palette
+title: Foundations
+pages:
+  - colors
diff --git a/apps/www/src/features/design/content/docs/meta.yaml b/apps/www/src/features/design/content/docs/meta.yaml
index b2c62f6c5..090061631 100644
--- a/apps/www/src/features/design/content/docs/meta.yaml
+++ b/apps/www/src/features/design/content/docs/meta.yaml
@@ -2,4 +2,5 @@ title: guide
 root: true
 pages:
   - introduction
+  - foundations
   - components
diff --git a/apps/www/src/features/studio/ai/components/prompt-input.tsx b/apps/www/src/features/studio/ai/components/prompt-input.tsx
index 7eb687c8a..01731d2a1 100644
--- a/apps/www/src/features/studio/ai/components/prompt-input.tsx
+++ b/apps/www/src/features/studio/ai/components/prompt-input.tsx
@@ -164,7 +164,7 @@ export function PromptInput({
             onClick={onStop}
             size="icon-sm"
             type="button"
-            variant="secondary"
+            variant="outline"
           >
             <Square className="size-3.5" />
           </Button>
diff --git a/apps/www/src/features/studio/organizations/overview/date-range-filter.tsx b/apps/www/src/features/studio/organizations/overview/date-range-filter.tsx
index 3a91c6028..9fff75630 100644
--- a/apps/www/src/features/studio/organizations/overview/date-range-filter.tsx
+++ b/apps/www/src/features/studio/organizations/overview/date-range-filter.tsx
@@ -53,7 +53,6 @@ export const DateRangeFilter = ({
       }}
       type="single"
       value={dateRange}
-      variant="outline"
     >
       {DATE_RANGE_OPTIONS.map((option) => (
         <ToggleGroupItem key={option.value} value={option.value} className="cursor-pointer">
diff --git a/apps/www/src/features/studio/paywall-assets/asset-tile.tsx b/apps/www/src/features/studio/paywall-assets/asset-tile.tsx
index 694fc0321..6ac9acf28 100644
--- a/apps/www/src/features/studio/paywall-assets/asset-tile.tsx
+++ b/apps/www/src/features/studio/paywall-assets/asset-tile.tsx
@@ -104,7 +104,7 @@ export function AssetTile({ organizationId, asset, selectable, onSelect }: Asset
                 aria-label="Image actions"
                 className="size-6 bg-background/80 backdrop-blur-sm"
                 size="icon-sm"
-                variant="secondary"
+                variant="ghost"
               >
                 <MoreHorizontalIcon />
               </Button>
diff --git a/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx b/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx
index 966171a22..e70d3ff1c 100644
--- a/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/canvas/preview-canvas.tsx
@@ -6,6 +6,7 @@ import {
   type ComponentArtifacts,
 } from "@voidhash/paywall-renderer-preact";
 import type { PreviewTree, SnapshotNode } from "@voidhash/paywall-renderer-web-core";
+import { Phone } from "@voidhash/ui";
 import { useCallback, useMemo } from "react";
 import { useStore } from "zustand/react";
 
@@ -200,28 +201,27 @@ export function PreviewCanvas() {
     >
       {/* Phone mockup container - maintains aspect ratio and scales to fit */}
       <div className="relative flex h-full w-full items-center justify-center p-8">
-        <div
-          className="relative h-full max-h-[812px] w-full max-w-[375px]"
+        {/* 832px of device height renders the screen at exactly 375x812 */}
+        <Phone
+          className="max-h-[832px] drop-shadow-2xl"
+          fitHeight
+          screenClassName="bg-white"
           style={{
-            aspectRatio: "375 / 812",
             transform: `scale(${previewScale})`,
             transformOrigin: "center center",
           }}
         >
-          {/* Phone frame */}
-          <div className="h-full w-full overflow-hidden rounded-[40px] border-8 border-zinc-800 bg-zinc-800 shadow-2xl">
-            {/* sandbox without allow-same-origin keeps the srcdoc document on an
-                opaque origin: the hydration runtime only reads its embedded JSON
-                and posts paywall:* messages to the parent, both of which
-                allow-scripts permits. */}
-            <iframe
-              className="h-full w-full bg-white"
-              sandbox="allow-scripts"
-              srcDoc={html}
-              title="Paywall Preview"
-            />
-          </div>
-        </div>
+          {/* sandbox without allow-same-origin keeps the srcdoc document on an
+              opaque origin: the hydration runtime only reads its embedded JSON
+              and posts paywall:* messages to the parent, both of which
+              allow-scripts permits. */}
+          <iframe
+            className="size-full bg-white"
+            sandbox="allow-scripts"
+            srcDoc={html}
+            title="Paywall Preview"
+          />
+        </Phone>
       </div>
     </div>
   );
diff --git a/apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx b/apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx
index 8db0631d6..50692ae1b 100644
--- a/apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/code-mode/component-preview-pane.tsx
@@ -60,7 +60,6 @@ export function ComponentPreviewPane({ definitionId }: { definitionId: string })
               size="sm"
               type="single"
               value={activeState}
-              variant="outline"
             >
               {states.map((state) => (
                 <ToggleGroupItem className="text-xs" key={state} size="sm" value={state}>
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx
index e36362e72..328834fce 100644
--- a/apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/conjunction-editor.tsx
@@ -43,7 +43,7 @@ export function ConjunctionEditor({
             onClick={onAddPredicate}
             size="icon-sm"
             title="Add condition"
-            variant="secondary"
+            variant="outline"
           >
             <PlusIcon />
           </Button>
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx
index 15c1e8162..fadd2290d 100644
--- a/apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/dnf-editor.tsx
@@ -62,7 +62,7 @@ export function DNFEditor({
 
       {/* Add OR group button */}
       <div className="flex items-center justify-center">
-        <Button size="sm" variant="secondary" onClick={() => onAddConjunction(variables)}>
+        <Button size="sm" variant="outline" onClick={() => onAddConjunction(variables)}>
           <PlusIcon />
           OR
         </Button>
diff --git a/apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx b/apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx
index d1ce6202a..66fcbbe64 100644
--- a/apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/components/state-manager/state-manager-sheet.tsx
@@ -204,7 +204,7 @@ export function StateManagerSheet({
                 <PanelSectionHeader>
                   <PanelSectionTitle>States</PanelSectionTitle>
                   <PanelSectionHeaderActions>
-                    <Button onClick={startAdding} size="icon-sm" variant="secondary">
+                    <Button onClick={startAdding} size="icon-sm" variant="outline">
                       <PlusIcon />
                     </Button>
                   </PanelSectionHeaderActions>
@@ -282,7 +282,7 @@ export function StateManagerSheet({
                                 startEditing(selectedState.id, selectedState.value.name)
                               }
                               size="icon-sm"
-                              variant="secondary"
+                              variant="ghost"
                             >
                               <PencilIcon />
                             </Button>
@@ -291,7 +291,7 @@ export function StateManagerSheet({
                                 handleDeleteState(selectedState.id, selectedState.value.name)
                               }
                               size="icon-sm"
-                              variant="secondary"
+                              variant="ghost"
                             >
                               <Trash2Icon />
                             </Button>
diff --git a/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx b/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
index 70348d111..b138d488a 100644
--- a/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/components/ui/mode-toggle.tsx
@@ -32,7 +32,6 @@ export function ModeToggle() {
       spacing={0}
       type="single"
       value={mode}
-      variant="outline"
     >
       {MODES.map(({ icon: Icon, label, value }) => (
         <ToggleGroupItem
diff --git a/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx
index c580a36c4..bd018658a 100644
--- a/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/components/variables/inputs/boolean-input.tsx
@@ -16,7 +16,6 @@ export function BooleanInput({ value, onChange, className }: BooleanInputProps)
       size="sm"
       type="single"
       value={value ? "true" : "false"}
-      variant="outline"
     >
       <ToggleGroupItem className="h-7 px-2 text-xs flex-1" size="sm" value="true">
         True
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx
index c5173fcc2..ffd8b7aa2 100644
--- a/apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/alignment-grid.tsx
@@ -312,7 +312,7 @@ export function FlexAlignmentInput({
       </div>
       <DropdownMenu>
         <DropdownMenuTrigger asChild>
-          <Button size="icon-sm" variant="secondary">
+          <Button size="icon-sm" variant="ghost">
             <Settings2Icon className="size-3.5" />
           </Button>
         </DropdownMenuTrigger>
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx
index 28850f83f..502cec296 100644
--- a/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/dimension-field.tsx
@@ -246,7 +246,7 @@ export function DimensionField({
               <Button
                 className="bg-transparent pr-3 dark:bg-transparent"
                 size="sm"
-                variant="secondary"
+                variant="ghost"
               >
                 {state === "custom" && <ChevronDownIcon className="size-3.5" />}
                 {state === "hug" && <div className="font-bold text-xs">Hug</div>}
@@ -341,7 +341,7 @@ export function DimensionFieldView({
               <Button
                 className="bg-transparent pr-3 dark:bg-transparent"
                 size="sm"
-                variant="secondary"
+                variant="ghost"
               >
                 {mode === "custom" && <ChevronDownIcon className="size-3.5" />}
                 {mode === "hug" && <div className="font-bold text-xs">Hug</div>}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx
index bf3c33299..5d146eb73 100644
--- a/apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/fill-field.tsx
@@ -352,7 +352,6 @@ function FillEditorPopoverContent({
         size="sm"
         type="single"
         value={isTypeMixed ? "" : backgroundType}
-        variant="outline"
       >
         <ToggleGroupItem className="flex-1" size="sm" value="solid">
           Solid
@@ -393,7 +392,7 @@ function FillEditorPopoverContent({
               aria-label="Flip gradient direction"
               onClick={handleFlip}
               size="icon-sm"
-              variant="secondary"
+              variant="outline"
             >
               <FlipHorizontalIcon />
             </Button>
@@ -401,7 +400,7 @@ function FillEditorPopoverContent({
               aria-label="Rotate gradient 90 degrees"
               onClick={handleRotate}
               size="icon-sm"
-              variant="secondary"
+              variant="outline"
             >
               <RotateCwIcon />
             </Button>
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx
index 466031105..c11ddaad7 100644
--- a/apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/popover-header.tsx
@@ -6,7 +6,7 @@ export function PopoverHeader({ title, onClose }: { title: string; onClose?: ()
     <div className="flex flex-row p-2 -mx-2 -mt-3 justify-between items-center">
       <span className="text-sm font-medium">{title}</span>
       {onClose && (
-        <Button variant="secondary" size="icon-sm" onClick={onClose}>
+        <Button variant="ghost" size="icon-sm" onClick={onClose}>
           <XIcon />
         </Button>
       )}
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx b/apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx
index 1a4891d47..0b43178dc 100644
--- a/apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panel-kit/prop-field-row.tsx
@@ -358,7 +358,7 @@ function ArrayPropRow({
               <RotateCcwIcon />
             </Button>
           )}
-          <Button onClick={handleAdd} size="icon-sm" variant="secondary">
+          <Button onClick={handleAdd} size="icon-sm" variant="outline">
             <PlusIcon />
           </Button>
         </div>
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx b/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx
index 47ba6f750..170c6bccf 100644
--- a/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/host-renderer.tsx
@@ -422,7 +422,7 @@ const renderNode = (
             trailingMenu && onTrailingSelect ? (
               <DropdownMenu>
                 <DropdownMenuTrigger asChild>
-                  <Button size="sm" variant="secondary">
+                  <Button size="sm" variant="ghost">
                     {renderPanelIcon("chevronDown", "size-3.5")}
                   </Button>
                 </DropdownMenuTrigger>
@@ -481,7 +481,6 @@ const renderNode = (
           size="sm"
           type="single"
           value={mixed ? "" : (asString(props.value) ?? "")}
-          variant="outline"
         >
           {/* Items stretch to equal width (`flex-1`), matching every designer
               toggle group's segmented-control layout. */}
@@ -512,7 +511,7 @@ const renderNode = (
           disabled={asBool(props.disabled)}
           onClick={onClick ? () => onClick() : undefined}
           size={(asString(props.size) as never) ?? "sm"}
-          variant={(asString(props.variant) as never) ?? "secondary"}
+          variant={(asString(props.variant) as never) ?? "outline"}
         >
           {props.icon ? renderPanelIcon(asIcon(props.icon)!, "size-3.5") : null}
           {asString(props.label)}
@@ -1103,7 +1102,7 @@ function PanelErrorChrome({
     <div className="flex flex-col gap-2 border-border border-b px-4 py-3">
       <p className="text-destructive text-xs">{message}</p>
       {restartable && (
-        <Button className="self-start" onClick={onRestart} size="sm" variant="secondary">
+        <Button className="self-start" onClick={onRestart} size="sm" variant="outline">
           <RotateCwIcon className="size-3.5" />
           Restart
         </Button>
diff --git a/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts b/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts
index 3c0f8c0d6..9b571fe74 100644
--- a/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts
+++ b/apps/www/src/features/studio/paywalls/designer/panel-runtime/schema.contract.test.ts
@@ -285,7 +285,7 @@ const fullTree = () => {
                     {
                       type: "button",
                       id: id(),
-                      props: { label: "Edit fill", icon: "paintbrush", variant: "secondary" },
+                      props: { label: "Edit fill", icon: "paintbrush", variant: "outline" },
                       events: ["onClick"],
                     },
                   ],
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
index a166dfc89..9358fc1f8 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/action-panel.tsx
@@ -47,7 +47,6 @@ export function ActionPanel() {
               spacing={0}
               type="single"
               value={activeTool}
-              variant="outline"
             >
               {TOOL_ITEMS.map(({ icon: Icon, label, value }) => (
                 <IconButtonTooltip key={value} label={label}>
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
index 6695cd0ed..c5836e001 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/interactions-panel.tsx
@@ -173,7 +173,7 @@ export function InteractionsPanel(_ctx: PanelContext) {
                     }
                   >
                     <Panel.PopoverTrigger>
-                      {/* No `variant` → the host defaults to the `secondary` trigger look. */}
+                      {/* No `variant` → the host defaults to the outlined trigger look. */}
                       <Panel.Button
                         label={`${TRIGGER_LABELS[interaction.value.trigger.type]}  ${ACTION_TYPE_LABELS[effectiveAction.type]}`}
                         size="sm"
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
index ed22add4c..8990eb023 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/right-panel/definitions/variables-panel.tsx
@@ -251,7 +251,7 @@ function VariableRow({
     <Panel.Row align="center">
       <Panel.Popover open={isOpen} onOpenChange={onOpenChange}>
         <Panel.PopoverTrigger>
-          {/* No `variant` → the host defaults to the `secondary` trigger look. */}
+          {/* No `variant` → the host defaults to the outlined trigger look. */}
           <Panel.Button label={`${name || "Unnamed"}  ${valueDisplay(value)}`} size="sm" />
         </Panel.PopoverTrigger>
         <Panel.PopoverContent align="start" side="left">
diff --git a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
index 3a846dc03..c70c373f0 100644
--- a/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/panels/top-panel.tsx
@@ -206,7 +206,7 @@ export function TopPanel() {
               Dev
             </Button>
           )}
-          <Button size="sm" variant="secondary">
+          <Button size="sm" variant="outline">
             Share
           </Button>
           <Button size="sm" onClick={handlePublishClick} disabled={isCreatingRelease || !paywallId}>
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx
new file mode 100644
index 000000000..e616fa3df
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx
@@ -0,0 +1,136 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { ExternalLinkIcon } from "lucide-react";
+import type { ReactNode } from "react";
+
+export interface PaywallDetailLocation {
+  id: string;
+  name: string;
+  slug: string;
+}
+
+interface PaywallDetailPropertiesProps {
+  createdAt: Date | null;
+  draftVersion: number | null;
+  isArchived: boolean;
+  liveLocations: readonly PaywallDetailLocation[];
+  liveRelease: { htmlUrl: string; version: number } | null;
+  slug: string;
+}
+
+type PaywallStatus = "archived" | "draft" | "live" | "not-live";
+
+const STATUS_PRESENTATION: Record<PaywallStatus, { dotClassName: string; label: string }> = {
+  archived: { dotClassName: "bg-muted-foreground", label: "Archived" },
+  draft: { dotClassName: "bg-amber-500", label: "Draft" },
+  live: { dotClassName: "bg-emerald-500", label: "Live" },
+  "not-live": { dotClassName: "bg-muted-foreground/50", label: "Not live" },
+};
+
+const resolveStatus = (input: {
+  draftVersion: number | null;
+  isArchived: boolean;
+  isLive: boolean;
+}): PaywallStatus => {
+  if (input.isArchived) {
+    return "archived";
+  }
+  if (input.isLive) {
+    return "live";
+  }
+  return input.draftVersion == null ? "not-live" : "draft";
+};
+
+const formatDate = (date: Date) =>
+  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
+
+function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
+  return (
+    <div className="flex items-baseline gap-4 py-1.5">
+      <dt className="w-28 shrink-0 text-muted-foreground text-sm">{label}</dt>
+      <dd className="min-w-0 flex-1 text-sm">{children}</dd>
+    </div>
+  );
+}
+
+/**
+ * Linear-style property list for the paywall detail screen — status, where the
+ * paywall is live, which versions are live and drafted, and its identifiers.
+ */
+export function PaywallDetailProperties({
+  createdAt,
+  draftVersion,
+  isArchived,
+  liveLocations,
+  liveRelease,
+  slug,
+}: PaywallDetailPropertiesProps) {
+  const status = resolveStatus({
+    draftVersion,
+    isArchived,
+    isLive: liveLocations.length > 0,
+  });
+  const { dotClassName, label } = STATUS_PRESENTATION[status];
+
+  return (
+    <dl className="-my-1.5">
+      <PropertyRow label="Status">
+        <span className="inline-flex items-center gap-2">
+          <span aria-hidden="true" className={cn("size-2 rounded-full", dotClassName)} />
+          {label}
+        </span>
+      </PropertyRow>
+
+      <PropertyRow label="Locations">
+        {liveLocations.length > 0 ? (
+          <span className="flex flex-wrap gap-x-2 gap-y-1">
+            {liveLocations.map((location) => (
+              <span
+                className="inline-flex items-center gap-1.5 rounded-md bg-muted/60 px-2 py-0.5"
+                key={location.id}
+              >
+                {location.name}
+                <span className="font-mono text-muted-foreground text-xs">{location.slug}</span>
+              </span>
+            ))}
+          </span>
+        ) : (
+          <span className="text-muted-foreground">Not assigned</span>
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Live version">
+        {liveRelease ? (
+          <a
+            className="inline-flex items-center gap-1.5 underline-offset-4 hover:underline"
+            href={liveRelease.htmlUrl}
+            rel="noreferrer"
+            target="_blank"
+          >
+            v{liveRelease.version}
+            <ExternalLinkIcon className="size-3.5 text-muted-foreground" />
+          </a>
+        ) : (
+          <span className="text-muted-foreground">None</span>
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Latest draft">
+        {draftVersion == null ? (
+          <span className="text-muted-foreground">None</span>
+        ) : (
+          `v${draftVersion}`
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Created">
+        {createdAt ? formatDate(createdAt) : <span className="text-muted-foreground">Unknown</span>}
+      </PropertyRow>
+
+      <PropertyRow label="Slug">
+        <span className="font-mono text-xs">{slug}</span>
+      </PropertyRow>
+    </dl>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
index d30f63859..9ae8a577d 100644
--- a/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
@@ -3,11 +3,6 @@
 import { useQuery } from "@tanstack/react-query";
 import type { AnalyticsFilterType, CustomAnalyticsInsightQueryType } from "@voidhash/rpc";
 import {
-  Card,
-  CardContent,
-  CardDescription,
-  CardHeader,
-  CardTitle,
   type ChartConfig,
   ChartContainer,
   ChartTooltip,
@@ -141,12 +136,12 @@ interface StatTileProps {
 
 function StatTile({ label, loading, value }: StatTileProps) {
   return (
-    <div className="rounded-xl border bg-muted/20 p-5">
-      <p className="truncate text-muted-foreground text-sm">{label}</p>
+    <div className="sm:border-border/60 sm:border-l sm:pl-4 sm:first:border-l-0 sm:first:pl-0">
+      <p className="truncate text-muted-foreground text-xs">{label}</p>
       {loading ? (
-        <Skeleton className="mt-2 h-8 w-20" />
+        <Skeleton className="mt-2 h-7 w-16" />
       ) : (
-        <p className="mt-2 font-semibold text-3xl tabular-nums tracking-tight">{value}</p>
+        <p className="mt-1 font-semibold text-2xl tabular-nums tracking-tight">{value}</p>
       )}
     </div>
   );
@@ -226,9 +221,14 @@ export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailSt
   } satisfies ChartConfig;
 
   return (
-    <section className="space-y-4">
-      <div className="flex items-center justify-between">
-        <h2 className="font-medium text-lg">Performance</h2>
+    <section className="space-y-5">
+      <div className="flex items-start justify-between gap-4">
+        <div>
+          <h2 className="font-medium text-sm">Performance</h2>
+          <p className="mt-0.5 text-muted-foreground text-xs">
+            Events captured at locations currently showing this paywall.
+          </p>
+        </div>
         <ToggleGroup
           onValueChange={(value: string) => {
             if (value && isStatsRange(value)) {
@@ -237,7 +237,6 @@ export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailSt
           }}
           type="single"
           value={range}
-          variant="outline"
         >
           {RANGE_OPTIONS.map((option) => (
             <ToggleGroupItem className="cursor-pointer" key={option.value} value={option.value}>
@@ -249,7 +248,7 @@ export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailSt
 
       {isLive ? (
         <>
-          <div className="grid gap-3 sm:grid-cols-2 xl:grid-cols-4">
+          <div className="grid grid-cols-2 gap-x-6 gap-y-5 border-border/60 border-y py-5 sm:grid-cols-4 sm:gap-x-0">
             <StatTile
               label="Views"
               loading={totalsQuery.isPending}
@@ -272,75 +271,80 @@ export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailSt
             />
           </div>
 
-          <Card>
-            <CardHeader>
-              <CardTitle>Views &amp; purchases</CardTitle>
-              <CardDescription>
-                Events captured at locations currently showing this paywall.
-              </CardDescription>
-            </CardHeader>
-            <CardContent>
-              {timeseriesQuery.isPending ? (
-                <Skeleton className="h-[280px] w-full" />
-              ) : chartRows.length > 0 ? (
-                <ChartContainer className="h-[280px] w-full" config={chartConfig}>
-                  <AreaChart accessibilityLayer data={chartRows} margin={{ left: 8, right: 20 }}>
-                    <CartesianGrid vertical={false} />
-                    <XAxis
-                      axisLine={false}
-                      dataKey="date"
-                      tickFormatter={(value: string) =>
-                        new Date(value).toLocaleDateString(undefined, {
-                          day: "numeric",
-                          month: "short",
-                        })
-                      }
-                      tickLine={false}
-                      tickMargin={10}
+          <div className="space-y-3">
+            <div className="flex items-center gap-4">
+              <p className="font-medium text-sm">Views &amp; purchases</p>
+              <div className="flex items-center gap-3 text-muted-foreground text-xs">
+                {(["views", "purchases"] as const).map((key) => (
+                  <span className="inline-flex items-center gap-1.5" key={key}>
+                    <span
+                      aria-hidden="true"
+                      className="size-2 rounded-[2px]"
+                      style={{ backgroundColor: chartConfig[key].color }}
                     />
-                    <YAxis axisLine={false} tickLine={false} width={42} />
-                    <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
-                    <Area
-                      dataKey="views"
-                      fill="var(--chart-1)"
-                      fillOpacity={0.18}
-                      stroke="var(--chart-1)"
-                      strokeWidth={2}
-                      type="monotone"
-                    />
-                    <Area
-                      dataKey="purchases"
-                      fill="var(--chart-2)"
-                      fillOpacity={0.18}
-                      stroke="var(--chart-2)"
-                      strokeWidth={2}
-                      type="monotone"
-                    />
-                  </AreaChart>
-                </ChartContainer>
-              ) : (
-                <div className="flex h-[280px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
-                  <div>
-                    <ChartSplineIcon className="mx-auto text-muted-foreground" />
-                    <p className="mt-3 text-sm">No events in this period yet</p>
-                  </div>
+                    {chartConfig[key].label}
+                  </span>
+                ))}
+              </div>
+            </div>
+            {timeseriesQuery.isPending ? (
+              <Skeleton className="h-[240px] w-full" />
+            ) : chartRows.length > 0 ? (
+              <ChartContainer className="h-[240px] w-full" config={chartConfig}>
+                <AreaChart accessibilityLayer data={chartRows} margin={{ left: 8, right: 20 }}>
+                  <CartesianGrid vertical={false} />
+                  <XAxis
+                    axisLine={false}
+                    dataKey="date"
+                    tickFormatter={(value: string) =>
+                      new Date(value).toLocaleDateString(undefined, {
+                        day: "numeric",
+                        month: "short",
+                      })
+                    }
+                    tickLine={false}
+                    tickMargin={10}
+                  />
+                  <YAxis axisLine={false} tickLine={false} width={42} />
+                  <ChartTooltip content={<ChartTooltipContent hideLabel />} cursor={false} />
+                  <Area
+                    dataKey="views"
+                    fill="var(--chart-1)"
+                    fillOpacity={0.18}
+                    stroke="var(--chart-1)"
+                    strokeWidth={2}
+                    type="monotone"
+                  />
+                  <Area
+                    dataKey="purchases"
+                    fill="var(--chart-2)"
+                    fillOpacity={0.18}
+                    stroke="var(--chart-2)"
+                    strokeWidth={2}
+                    type="monotone"
+                  />
+                </AreaChart>
+              </ChartContainer>
+            ) : (
+              <div className="flex h-[240px] items-center justify-center rounded-xl border border-dashed bg-muted/20 text-center">
+                <div>
+                  <ChartSplineIcon className="mx-auto text-muted-foreground" />
+                  <p className="mt-3 text-sm">No events in this period yet</p>
                 </div>
-              )}
-            </CardContent>
-          </Card>
+              </div>
+            )}
+          </div>
         </>
       ) : (
-        <Card>
-          <CardContent className="flex h-[280px] items-center justify-center">
-            <div className="text-center">
-              <MapPinOffIcon className="mx-auto text-muted-foreground" />
-              <p className="mt-3 font-medium text-sm">Not live yet</p>
-              <p className="mt-1 text-muted-foreground text-sm">
-                Assign this paywall to a location to start collecting stats.
-              </p>
-            </div>
-          </CardContent>
-        </Card>
+        <div className="flex h-[240px] items-center justify-center rounded-xl border border-dashed bg-muted/20">
+          <div className="text-center">
+            <MapPinOffIcon className="mx-auto text-muted-foreground" />
+            <p className="mt-3 font-medium text-sm">Not live yet</p>
+            <p className="mt-1 text-muted-foreground text-sm">
+              Assign this paywall to a location to start collecting stats.
+            </p>
+          </div>
+        </div>
       )}
     </section>
   );
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-phone-preview.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-phone-preview.tsx
new file mode 100644
index 000000000..76884761b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-phone-preview.tsx
@@ -0,0 +1,57 @@
+"use client";
+
+import { Link } from "@tanstack/react-router";
+import type { Paywall } from "@voidhash/rpc";
+import { Phone } from "@voidhash/ui";
+import { ExternalLinkIcon, SmartphoneIcon } from "lucide-react";
+
+interface PaywallPhonePreviewProps {
+  organizationSlug: string;
+  paywall: typeof Paywall.Type;
+  projectSlug: string;
+}
+
+/**
+ * Bare phone mockup of the paywall's latest rendered thumbnail — no card and no
+ * backdrop, just the device floating in the page. The whole screen is a link
+ * into the designer; hovering (or focusing) it blurs the thumbnail behind a
+ * centred "Edit paywall" call to action.
+ */
+export function PaywallPhonePreview({
+  organizationSlug,
+  paywall,
+  projectSlug,
+}: PaywallPhonePreviewProps) {
+  return (
+    <Phone
+      className="mx-auto w-full max-w-[300px]"
+      screenClassName="flex items-center justify-center bg-zinc-950"
+    >
+      <Link
+        className="group absolute inset-0 flex items-center justify-center outline-none"
+        params={{ id: paywall.id, organizationSlug, projectSlug }}
+        rel="noreferrer"
+        target="_blank"
+        to="/studio/$organizationSlug/$projectSlug/design/$id"
+      >
+        {paywall.thumbnailUrl ? (
+          <img
+            alt={paywall.name}
+            className="size-full object-cover object-top"
+            loading="lazy"
+            src={paywall.thumbnailUrl}
+          />
+        ) : (
+          <SmartphoneIcon className="size-10 text-zinc-400 opacity-30" />
+        )}
+
+        <span className="absolute inset-0 flex items-center justify-center rounded-[calc(15cqw_-_6px)] bg-black/20 opacity-0 backdrop-blur-sm transition-opacity duration-200 group-focus-visible:opacity-100 group-hover:opacity-100">
+          <span className="inline-flex items-center gap-1.5 rounded-full bg-white/70 hover:bg-white/90 px-4 py-2 font-medium text-black text-sm">
+            Edit paywall
+            <ExternalLinkIcon className="size-4" />
+          </span>
+        </span>
+      </Link>
+    </Phone>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx
deleted file mode 100644
index 7ad281e7b..000000000
--- a/apps/www/src/features/studio/paywalls/detail/paywall-preview-card.tsx
+++ /dev/null
@@ -1,62 +0,0 @@
-"use client";
-
-import type { Paywall } from "@voidhash/rpc";
-import { Badge, Button, Card, CardContent } from "@voidhash/ui";
-import { ExternalLinkIcon, Smartphone } from "lucide-react";
-
-interface PaywallPreviewCardProps {
-  liveRelease: { htmlUrl: string; version: number } | null;
-  paywall: typeof Paywall.Type;
-}
-
-/**
- * Phone-frame preview of the paywall's latest rendered thumbnail, with a link
- * to the live HTML artifact when a released version is currently being shown.
- */
-export function PaywallPreviewCard({ liveRelease, paywall }: PaywallPreviewCardProps) {
-  return (
-    <Card className="gap-0 overflow-hidden py-0">
-      <div className="relative flex aspect-[246/278] items-center justify-center overflow-hidden bg-linear-150 from-blue-ribbon-950 to-electric-violet-950">
-        {paywall.thumbnailUrl && (
-          <img
-            alt=""
-            aria-hidden="true"
-            className="pointer-events-none absolute inset-0 size-full scale-125 object-cover blur-[32px]"
-            loading="lazy"
-            src={paywall.thumbnailUrl}
-          />
-        )}
-
-        <div className="relative z-10 aspect-[532/1119] h-[86.34%] overflow-hidden rounded-[12px] bg-zinc-950 shadow-[inset_0_0_4px_rgb(255_255_255/0.13)] ring-1 ring-inset ring-zinc-800">
-          <div className="absolute inset-x-[2.26%] inset-y-[1.16%] flex items-center justify-center overflow-hidden rounded-[10px] bg-zinc-950">
-            {paywall.thumbnailUrl ? (
-              <img
-                alt={paywall.name}
-                className="size-full object-cover object-top"
-                loading="lazy"
-                src={paywall.thumbnailUrl}
-              />
-            ) : (
-              <Smartphone className="h-10 w-10 text-zinc-400 opacity-30" />
-            )}
-          </div>
-        </div>
-      </div>
-      <CardContent className="flex items-center justify-between px-4 py-3">
-        {liveRelease ? (
-          <>
-            <Badge variant="secondary">Live · v{liveRelease.version}</Badge>
-            <Button asChild size="sm" variant="ghost">
-              <a href={liveRelease.htmlUrl} rel="noreferrer" target="_blank">
-                View live
-                <ExternalLinkIcon />
-              </a>
-            </Button>
-          </>
-        ) : (
-          <span className="text-muted-foreground text-sm">Not live at any location</span>
-        )}
-      </CardContent>
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx b/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
index 6f067a699..846731582 100644
--- a/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
+++ b/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
@@ -1,11 +1,11 @@
-import { Skeleton } from "@voidhash/ui";
+import { Phone, Skeleton } from "@voidhash/ui";
 
 /** Loading placeholder matching the paywall card's thumbnail geometry. */
 export function PaywallCardSkeleton() {
   return (
     <div className="flex flex-col overflow-hidden rounded-xl border bg-card">
       <div className="flex aspect-[246/278] items-center justify-center bg-muted/30">
-        <Skeleton className="aspect-[532/1119] h-[86.34%] rounded-[12px]" />
+        <Phone className="h-[86.34%]" fitHeight screenClassName="animate-pulse bg-muted" />
       </div>
       <div className="px-4 py-3.5">
         <Skeleton className="h-4 w-3/4" />
diff --git a/apps/www/src/features/studio/paywalls/paywall-card.tsx b/apps/www/src/features/studio/paywalls/paywall-card.tsx
index 3e8672803..f82cc0002 100644
--- a/apps/www/src/features/studio/paywalls/paywall-card.tsx
+++ b/apps/www/src/features/studio/paywalls/paywall-card.tsx
@@ -2,7 +2,7 @@
 
 import { Link } from "@tanstack/react-router";
 import type { Paywall } from "@voidhash/rpc";
-import { Badge } from "@voidhash/ui";
+import { Badge, Phone } from "@voidhash/ui";
 import { Smartphone } from "lucide-react";
 
 import { PaywallActionsMenu } from "./paywall-actions-menu";
@@ -42,20 +42,22 @@ export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallC
             />
           )}
 
-          <div className="relative z-10 aspect-[532/1119] h-[86.34%] overflow-hidden rounded-[12px] bg-zinc-950 shadow-[inset_0_0_4px_rgb(255_255_255/0.13)] ring-1 ring-inset ring-zinc-800">
-            <div className="absolute inset-x-[2.26%] inset-y-[1.16%] flex items-center justify-center overflow-hidden rounded-[10px] bg-zinc-950">
-              {paywall.thumbnailUrl ? (
-                <img
-                  alt={paywall.name}
-                  className="size-full object-cover object-top"
-                  loading="lazy"
-                  src={paywall.thumbnailUrl}
-                />
-              ) : (
-                <Smartphone className="h-10 w-10 text-zinc-400 opacity-30" />
-              )}
-            </div>
-          </div>
+          <Phone
+            className="relative z-10 h-[86.34%]"
+            fitHeight
+            screenClassName="flex items-center justify-center bg-zinc-950"
+          >
+            {paywall.thumbnailUrl ? (
+              <img
+                alt={paywall.name}
+                className="size-full object-cover object-top"
+                loading="lazy"
+                src={paywall.thumbnailUrl}
+              />
+            ) : (
+              <Smartphone className="size-10 text-zinc-400 opacity-30" />
+            )}
+          </Phone>
         </div>
 
         {/* Info Area */}
@@ -79,7 +81,7 @@ export function PaywallCard({ paywall, organizationSlug, projectSlug }: PaywallC
           paywall={paywall}
           projectSlug={projectSlug}
           triggerClassName="size-7 bg-background/80 backdrop-blur-sm"
-          triggerVariant="secondary"
+          triggerVariant="ghost"
         />
       </div>
     </div>
diff --git a/apps/www/src/features/studio/products/product-detail-add-perk-button.tsx b/apps/www/src/features/studio/products/product-detail-add-perk-button.tsx
index c5d83132f..3cea8e6a6 100644
--- a/apps/www/src/features/studio/products/product-detail-add-perk-button.tsx
+++ b/apps/www/src/features/studio/products/product-detail-add-perk-button.tsx
@@ -27,7 +27,7 @@ export function ProductDetailAddPerkButton({
 }: {
   productId: string;
   perks: (typeof Perk.Type)[];
-  variant?: "default" | "secondary";
+  variant?: "default" | "outline";
 }) {
   const [open, setOpen] = useState(false);
   const [value, setValue] = useState("");
diff --git a/apps/www/src/features/studio/products/product-detail-add-product-button.tsx b/apps/www/src/features/studio/products/product-detail-add-product-button.tsx
index 5e4678aba..3b251e24c 100644
--- a/apps/www/src/features/studio/products/product-detail-add-product-button.tsx
+++ b/apps/www/src/features/studio/products/product-detail-add-product-button.tsx
@@ -16,7 +16,7 @@ export function ProductDetailAddProductButton({
   paymentProviderConfigurationId: string;
   providerId: string;
   title: string;
-  variant?: "default" | "secondary";
+  variant?: "default" | "outline";
 }) {
   const [open, setOpen] = useState(false);
   return (
diff --git a/apps/www/src/features/studio/products/product-detail-body.tsx b/apps/www/src/features/studio/products/product-detail-body.tsx
index 218a414b9..b1530ca29 100644
--- a/apps/www/src/features/studio/products/product-detail-body.tsx
+++ b/apps/www/src/features/studio/products/product-detail-body.tsx
@@ -104,7 +104,7 @@ export function ProductDetailBody({
                 <ProductDetailAddPerkButton
                   perks={perksWithoutProductPerks}
                   productId={productId}
-                  variant="secondary"
+                  variant="outline"
                 />
               </CardFooter>
             </Card>
@@ -180,7 +180,7 @@ export function ProductDetailBody({
                       productId={productId}
                       providerId={paymentProviderWithConfiguration.paymentProvider.id}
                       title={paymentProviderWithConfiguration.paymentProvider.title}
-                      variant="secondary"
+                      variant="outline"
                     />
                   </CardFooter>
                 )}
diff --git a/apps/www/src/features/studio/products/product-detail-page.tsx b/apps/www/src/features/studio/products/product-detail-page.tsx
index 72362b74a..636c807d4 100644
--- a/apps/www/src/features/studio/products/product-detail-page.tsx
+++ b/apps/www/src/features/studio/products/product-detail-page.tsx
@@ -170,7 +170,7 @@ export const ProductDetailPage = () => {
                   <ProductDetailAddPerkButton
                     perks={perksWithoutProductPerks}
                     productId={product.id}
-                    variant="secondary"
+                    variant="outline"
                   />
                 </CardFooter>
               </Card>
@@ -254,7 +254,7 @@ export const ProductDetailPage = () => {
                       productId={product.id}
                       providerId={paymentProviderWithConfiguration.paymentProvider.id}
                       title={paymentProviderWithConfiguration.paymentProvider.title}
-                      variant="secondary"
+                      variant="outline"
                     />
                   </CardFooter>
                 )}
diff --git a/apps/www/src/features/www/button.tsx b/apps/www/src/features/www/button.tsx
index e1b228b1f..40db04fcc 100644
--- a/apps/www/src/features/www/button.tsx
+++ b/apps/www/src/features/www/button.tsx
@@ -27,7 +27,6 @@ const buttonVariants = cva(
         link: "text-primary underline-offset-4 hover:underline",
         outline:
           "border bg-card shadow-xs hover:bg-accent hover:text-accent-foreground dark:border-border dark:bg-input/30 dark:hover:bg-input/80",
-        secondary: "bg-secondary text-secondary-foreground shadow-xs hover:bg-secondary/80",
         success:
           "bg-success text-success-foreground shadow-xs hover:bg-success/90 focus-visible:ring-success/20 dark:focus-visible:ring-success/40 ",
       },
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
index 1c2d0c455..b86235464 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
@@ -9,17 +9,15 @@ import {
   BreadcrumbPage,
   BreadcrumbSeparator,
   Button,
-  Card,
-  CardContent,
-  CardHeader,
-  CardTitle,
   Page,
   PageHeader,
 } from "@voidhash/ui";
+import { ExternalLinkIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
+import { PaywallDetailProperties } from "@/features/studio/paywalls/detail/paywall-detail-properties";
 import { PaywallDetailStats } from "@/features/studio/paywalls/detail/paywall-detail-stats";
-import { PaywallPreviewCard } from "@/features/studio/paywalls/detail/paywall-preview-card";
+import { PaywallPhonePreview } from "@/features/studio/paywalls/detail/paywall-phone-preview";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import { listPaywallLocationsOptions } from "@/features/studio/lib/tanstack-query/paywall-locations";
 import {
@@ -96,19 +94,7 @@ function PaywallDetailPage() {
 
   return (
     <Page>
-      <PageHeader
-        className="px-2"
-        rightActions={
-          <Button asChild className="mr-2">
-            <Link
-              params={{ id: paywall.id, organizationSlug, projectSlug }}
-              to="/studio/$organizationSlug/$projectSlug/design/$id"
-            >
-              Edit paywall
-            </Link>
-          </Button>
-        }
-      >
+      <PageHeader className="px-2">
         <div className="flex items-center gap-2">
           <Breadcrumb>
             <BreadcrumbList>
@@ -132,52 +118,53 @@ function PaywallDetailPage() {
         </div>
       </PageHeader>
 
-      <div className="mx-auto max-w-5xl px-4 py-8">
-        <div className="grid grid-cols-12 gap-6">
-          <div className="col-span-8 space-y-6">
+      <div className="mx-auto max-w-6xl px-8 py-12">
+        <div className="grid grid-cols-1 gap-12 lg:grid-cols-12">
+          <div className="space-y-10 lg:col-span-7 xl:col-span-8">
+            <div className="space-y-6">
+              <div>
+                <h1 className="font-semibold text-3xl tracking-tight">{paywall.name}</h1>
+                <p className="mt-1 text-muted-foreground text-sm">
+                  {liveLocations.length > 0
+                    ? `Live at ${liveLocations.length} location${liveLocations.length === 1 ? "" : "s"}`
+                    : "Not assigned to a location"}
+                </p>
+              </div>
+              <PaywallDetailProperties
+                createdAt={paywall.createdAt}
+                draftVersion={draftRelease?.version ?? null}
+                isArchived={isArchived}
+                liveLocations={liveLocations}
+                liveRelease={liveRelease}
+                slug={paywall.slug}
+              />
+            </div>
+
             <PaywallDetailStats
               locationSlugs={liveLocations.map((location) => location.slug)}
               projectId={project.id}
             />
           </div>
-          <div className="col-span-4 space-y-6">
-            <PaywallPreviewCard liveRelease={liveRelease} paywall={paywall} />
-            <Card>
-              <CardHeader>
-                <CardTitle className="text-sm">Details</CardTitle>
-              </CardHeader>
-              <CardContent className="space-y-4 text-sm">
-                <div>
-                  <p className="text-muted-foreground">Slug</p>
-                  <p className="font-mono text-xs">{paywall.slug}</p>
-                </div>
-                <div>
-                  <p className="text-muted-foreground">Live version</p>
-                  <p>{liveRelease ? `v${liveRelease.version}` : "Not live"}</p>
-                </div>
-                <div>
-                  <p className="text-muted-foreground">Latest draft</p>
-                  <p>{draftRelease ? `v${draftRelease.version}` : "—"}</p>
-                </div>
-                <div>
-                  <p className="text-muted-foreground">Locations</p>
-                  {liveLocations.length > 0 ? (
-                    <ul className="mt-1 space-y-1">
-                      {liveLocations.map((location) => (
-                        <li key={location.id}>
-                          {location.name}{" "}
-                          <span className="font-mono text-muted-foreground text-xs">
-                            {location.slug}
-                          </span>
-                        </li>
-                      ))}
-                    </ul>
-                  ) : (
-                    <p>None</p>
-                  )}
-                </div>
-              </CardContent>
-            </Card>
+
+          <div className="lg:col-span-5 xl:col-span-4">
+            <div className="mx-auto w-full max-w-[300px] space-y-6 lg:sticky lg:top-24">
+              <PaywallPhonePreview
+                organizationSlug={organizationSlug}
+                paywall={paywall}
+                projectSlug={projectSlug}
+              />
+              <Button asChild className="w-full" variant="outline" size="lg">
+                <Link
+                  params={{ id: paywall.id, organizationSlug, projectSlug }}
+                  rel="noreferrer"
+                  target="_blank"
+                  to="/studio/$organizationSlug/$projectSlug/design/$id"
+                >
+                  Edit paywall
+                  <ExternalLinkIcon />
+                </Link>
+              </Button>
+            </div>
           </div>
         </div>
       </div>
diff --git a/examples/react-native-example/app/menu/customer.tsx b/examples/react-native-example/app/menu/customer.tsx
index b34c28fba..f4b8bb606 100644
--- a/examples/react-native-example/app/menu/customer.tsx
+++ b/examples/react-native-example/app/menu/customer.tsx
@@ -36,12 +36,12 @@ export default function HomeScreen() {
           <View style={styles.actions}>
             <Button
               onPress={() => client.iosPresentCodeRedemptionSheet()}
-              style={styles.secondaryButton}
+              style={styles.outlineButton}
               title="Present code redemption sheet"
             />
             <Button
               onPress={() => client.iosShowManageSubscriptions()}
-              style={styles.secondaryButton}
+              style={styles.outlineButton}
               title="Show manage subscriptions"
             />
           </View>
@@ -71,7 +71,9 @@ const styles = StyleSheet.create({
     gap: 16,
     marginTop: 16,
   },
-  secondaryButton: {
-    backgroundColor: "#27272a",
+  outlineButton: {
+    backgroundColor: "transparent",
+    borderColor: "#3f3f46",
+    borderWidth: 1,
   },
 });
diff --git a/examples/react-native-example/app/menu/paywall.tsx b/examples/react-native-example/app/menu/paywall.tsx
index db5792422..3cc146843 100644
--- a/examples/react-native-example/app/menu/paywall.tsx
+++ b/examples/react-native-example/app/menu/paywall.tsx
@@ -111,7 +111,7 @@ export default function PaywallScreen() {
           onPress={() => {
             void handleRestore();
           }}
-          style={styles.secondaryButton}
+          style={styles.outlineButton}
           title={isReconciling ? "Working..." : "Restore and verify backend"}
         />
         <Button
@@ -119,7 +119,7 @@ export default function PaywallScreen() {
           onPress={() => {
             void handleInspectProducts();
           }}
-          style={styles.secondaryButton}
+          style={styles.outlineButton}
           title="Inspect native products"
         />
       </View>
@@ -162,8 +162,10 @@ const styles = StyleSheet.create({
   actionButton: {
     marginTop: 16,
   },
-  secondaryButton: {
-    backgroundColor: "#27272a",
+  outlineButton: {
+    backgroundColor: "transparent",
+    borderColor: "#3f3f46",
+    borderWidth: 1,
     marginTop: 12,
   },
 });
diff --git a/libraries/paywalls/tests/panel-tree.test.ts b/libraries/paywalls/tests/panel-tree.test.ts
index 96ffb9d7b..fb1b08d1b 100644
--- a/libraries/paywalls/tests/panel-tree.test.ts
+++ b/libraries/paywalls/tests/panel-tree.test.ts
@@ -279,7 +279,7 @@ const fullTree = () => {
                     {
                       type: "button",
                       id: id(),
-                      props: { label: "Edit fill", icon: "paintbrush", variant: "secondary" },
+                      props: { label: "Edit fill", icon: "paintbrush", variant: "outline" },
                       events: ["onClick"],
                     },
                   ],
diff --git a/packages/rpc/src/groups/PaywallRpcsDef.ts b/packages/rpc/src/groups/PaywallRpcsDef.ts
index b0044f304..9f59e07eb 100644
--- a/packages/rpc/src/groups/PaywallRpcsDef.ts
+++ b/packages/rpc/src/groups/PaywallRpcsDef.ts
@@ -35,6 +35,7 @@ const DateFromNumber = Schema.Number.pipe(
 
 export const Paywall = Schema.Struct({
   archivedAt: Schema.NullOr(DateFromNumber),
+  createdAt: Schema.NullOr(DateFromNumber),
   id: Schema.String,
   name: Schema.String,
   projectId: Schema.String,
diff --git a/packages/ui/components/phone.tsx b/packages/ui/components/phone.tsx
new file mode 100644
index 000000000..95b6600ae
--- /dev/null
+++ b/packages/ui/components/phone.tsx
@@ -0,0 +1,103 @@
+import { ChevronLeft, Ellipsis } from "lucide-react";
+import type { ComponentProps, CSSProperties, ReactNode } from "react";
+
+import { cn } from "../lib/utils";
+
+/**
+ * Width-to-height ratio of the whole device: a 9:19.5 screen plus a bezel that
+ * adds 2.5% of the device width on every side (0.95 * 19.5/9 + 0.05 = 2.108…).
+ * Exported so height-constrained layouts can derive the device width.
+ */
+export const PHONE_ASPECT_RATIO = 9 / 18.975;
+
+/** Frosted pill shared by the browser toolbar controls. */
+const TOOLBAR_PILL =
+  "flex items-center justify-center rounded-full bg-[rgba(15,15,15,0.32)] text-white/80 shadow-[0px_0px_1.5px_rgba(0,0,0,0.1),0px_0.65px_5px_rgba(0,0,0,0.12),inset_0.65px_0.65px_1px_-0.65px_rgba(255,255,255,0.8),inset_-0.65px_-0.65px_2px_-0.65px_rgba(255,255,255,0.4)] backdrop-blur-sm";
+
+export interface PhoneProps extends Omit<ComponentProps<"div">, "children"> {
+  /** Screen content. Clipped to the rounded display; use `size-full` to fill it. */
+  children?: ReactNode;
+  /**
+   * Derive the device size from the available height instead of the available
+   * width — pair with `h-full`/`max-h-*` on `className`.
+   */
+  fitHeight?: boolean;
+  /** Extra classes for the screen surface (e.g. its background colour). */
+  screenClassName?: string;
+  /** When set, floats a Safari-style toolbar showing this URL over the screen. */
+  url?: string;
+}
+
+/**
+ * Chrome-less phone mockup: a black body with a rounded 9:19.5 screen, dynamic
+ * island, home indicator and side buttons. Every dimension is expressed in
+ * container-query units against the device's own width, so a single component
+ * renders identically from a tiny dashboard thumbnail up to a full preview.
+ */
+export function Phone({
+  children,
+  className,
+  fitHeight = false,
+  screenClassName,
+  style,
+  url,
+  ...props
+}: PhoneProps) {
+  const sizing: CSSProperties | undefined = fitHeight
+    ? { aspectRatio: PHONE_ASPECT_RATIO, ...style }
+    : style;
+
+  return (
+    <div
+      className={cn(
+        "@container relative flex flex-col justify-center",
+        // In height-driven mode the body's own height comes out of the aspect
+        // ratio, so `justify-center` only matters when a max-width squeezes the
+        // device narrower than its slot — it keeps it centred instead of top-aligned.
+        fitHeight ? "h-full w-auto" : "w-full",
+        className,
+      )}
+      style={sizing}
+      {...props}
+    >
+      <div className="relative w-full rounded-[15cqw] bg-black p-[2.5%] outline-2 outline-[#333]">
+        {/* The screen radius is deliberately not concentric with the body — it
+            matches the reference mockup's slightly rounder display corners. */}
+        <div className="relative aspect-[9/19.5] overflow-hidden rounded-[calc(15cqw_-_6px)]">
+          <div className={cn("absolute inset-0 bg-[#878787]", screenClassName)}>{children}</div>
+          {url !== undefined && (
+            <div className="pointer-events-none absolute bottom-0 left-0 h-[18%] w-full bg-linear-to-b from-transparent via-black/20 to-black/70" />
+          )}
+        </div>
+
+        {/* Dynamic island */}
+        <div className="-translate-x-1/2 pointer-events-none absolute top-[2.5%] left-1/2 h-[4%] w-[30%] rounded-full bg-black" />
+
+        {/* Home indicator */}
+        <div className="-translate-x-1/2 pointer-events-none absolute bottom-[3%] left-1/2 h-[0.6%] w-[34%] rounded-full bg-white" />
+
+        {url !== undefined && (
+          <div className="pointer-events-none absolute bottom-[6%] left-0 flex w-full items-center justify-between gap-2 px-[6%]">
+            <div className={cn(TOOLBAR_PILL, "size-[12cqw]")}>
+              <ChevronLeft className="-ml-[0.5cqw] size-[5cqw]" />
+            </div>
+            <div className={cn(TOOLBAR_PILL, "h-[12cqw] min-w-0 flex-1")}>
+              <span className="block w-full truncate px-4 text-center text-[4.5cqw] text-white">
+                {url}
+              </span>
+            </div>
+            <div className={cn(TOOLBAR_PILL, "size-[12cqw]")}>
+              <Ellipsis className="size-[5cqw]" />
+            </div>
+          </div>
+        )}
+
+        {/* Side buttons — offset by the 2px body outline so they butt against it */}
+        <div className="-left-1 pointer-events-none absolute top-[15%] h-[3.5%] w-0.5 rounded-tl-full rounded-bl-full bg-[#333]" />
+        <div className="-left-1 pointer-events-none absolute top-[23.4%] h-[7.1%] w-0.5 rounded-tl-full rounded-bl-full bg-[#333]" />
+        <div className="-left-1 pointer-events-none absolute top-[32.4%] h-[7.1%] w-0.5 rounded-tl-full rounded-bl-full bg-[#333]" />
+        <div className="-right-1 pointer-events-none absolute top-[28.2%] h-[11%] w-0.5 rounded-tr-full rounded-br-full bg-[#333]" />
+      </div>
+    </div>
+  );
+}
diff --git a/packages/ui/components/ui/button.tsx b/packages/ui/components/ui/button.tsx
index 0e82fa391..0c8485700 100644
--- a/packages/ui/components/ui/button.tsx
+++ b/packages/ui/components/ui/button.tsx
@@ -5,21 +5,19 @@ import { Slot } from "radix-ui";
 import { cn } from "../../lib/utils";
 
 const buttonVariants = cva(
-  "focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 rounded-lg border border-transparent bg-clip-padding text-sm font-medium focus-visible:ring-[3px] aria-invalid:ring-[3px] [&_svg:not([class*='size-'])]:size-4 inline-flex items-center justify-center whitespace-nowrap disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none shrink-0 [&_svg]:shrink-0 outline-none group/button select-none [&_svg]:opacity-70 [&_svg]:transition-opacity hover:[&_svg]:opacity-100",
+  "focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 rounded-lg border border-transparent bg-clip-padding text-sm font-medium focus-visible:ring-[3px] aria-invalid:ring-[3px] [&_svg:not([class*='size-'])]:size-4 inline-flex items-center justify-center whitespace-nowrap transition-[color,box-shadow] disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none shrink-0 [&_svg]:shrink-0 outline-none group/button select-none",
   {
     variants: {
       variant: {
         default:
           "border-blue-ribbon-500 bg-primary text-primary-foreground hover:shadow-[inset_0_0_17px_var(--color-blue-ribbon-400)]",
         outline:
-          "border-border bg-background hover:shadow-[inset_0_0_17px_var(--bg-muted)] hover:text-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50 aria-expanded:bg-muted aria-expanded:text-foreground",
-        secondary:
-          "bg-secondary border-secondary text-secondary-foreground hover:bg-secondary/80 hover:border-secondary/80 aria-expanded:bg-secondary aria-expanded:text-secondary-foreground",
+          "border-border text-muted-foreground hover:text-foreground hover:shadow-[inset_0_0_17px_var(--color-input)] dark:border-input dark:bg-input/30 aria-expanded:bg-muted aria-expanded:text-foreground",
         ghost:
-          "hover:bg-muted hover:text-foreground dark:hover:bg-muted/50 dark:hover:border-muted/50 aria-expanded:bg-muted aria-expanded:text-foreground",
+          "text-muted-foreground hover:bg-muted hover:text-foreground dark:hover:bg-muted/50 dark:hover:border-muted/50 aria-expanded:bg-muted aria-expanded:text-foreground",
         destructive:
-          "bg-destructive/10 hover:bg-destructive/20 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/20 text-destructive focus-visible:border-destructive/40 dark:hover:bg-destructive/30",
-        link: "text-primary underline-offset-4 hover:underline",
+          "bg-destructive/10 text-destructive/70 hover:bg-destructive/20 hover:text-destructive focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/20 focus-visible:border-destructive/40 dark:hover:bg-destructive/30",
+        link: "text-primary/70 underline-offset-4 hover:text-primary hover:underline",
       },
       size: {
         default:
diff --git a/packages/ui/components/ui/message-scroller.tsx b/packages/ui/components/ui/message-scroller.tsx
index 95ac4911e..7b4f4777b 100644
--- a/packages/ui/components/ui/message-scroller.tsx
+++ b/packages/ui/components/ui/message-scroller.tsx
@@ -86,7 +86,7 @@ function MessageScrollerButton({
   className,
   children,
   render,
-  variant = "secondary",
+  variant = "outline",
   size = "icon-sm",
   ...props
 }: React.ComponentProps<typeof MessageScrollerPrimitive.Button> &
diff --git a/packages/ui/components/ui/progress.tsx b/packages/ui/components/ui/progress.tsx
index ec7e633c6..127693279 100644
--- a/packages/ui/components/ui/progress.tsx
+++ b/packages/ui/components/ui/progress.tsx
@@ -11,12 +11,12 @@ function Progress({
 }: React.ComponentProps<typeof ProgressPrimitive.Root>) {
   return (
     <ProgressPrimitive.Root
-      className={cn("relative h-2 w-full overflow-hidden rounded-full bg-primary/20", className)}
+      className={cn("relative h-2 w-full overflow-hidden rounded-full bg-muted", className)}
       data-slot="progress"
       {...props}
     >
       <ProgressPrimitive.Indicator
-        className="h-full w-full flex-1 bg-primary transition-all"
+        className="h-full w-full flex-1 bg-primary transition-all rounded-full shadow-[inset_0_0_4px_var(--color-blue-ribbon-400)]"
         data-slot="progress-indicator"
         style={{ transform: `translateX(-${100 - (value || 0)}%)` }}
       />
diff --git a/packages/ui/components/ui/slider.tsx b/packages/ui/components/ui/slider.tsx
index dba8d5b51..9dc6ab858 100644
--- a/packages/ui/components/ui/slider.tsx
+++ b/packages/ui/components/ui/slider.tsx
@@ -39,7 +39,7 @@ function Slider({
       >
         <SliderPrimitive.Range
           className={cn(
-            "absolute bg-primary data-[orientation=horizontal]:h-full data-[orientation=vertical]:w-full",
+            "absolute bg-primary shadow-[inset_0_0_2px_var(--color-blue-ribbon-400)] data-[orientation=horizontal]:h-full data-[orientation=vertical]:w-full",
           )}
           data-slot="slider-range"
         />
diff --git a/packages/ui/components/ui/switch.tsx b/packages/ui/components/ui/switch.tsx
index 39e1f1a4a..ba2376b22 100644
--- a/packages/ui/components/ui/switch.tsx
+++ b/packages/ui/components/ui/switch.tsx
@@ -10,7 +10,7 @@ function Switch({ className, ...props }: React.ComponentProps<typeof SwitchPrimi
   return (
     <SwitchPrimitive.Root
       className={cn(
-        "peer inline-flex h-[1.15rem] w-8 shrink-0 cursor-pointer items-center rounded-full border border-transparent shadow-xs outline-none transition-all focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 data-[state=checked]:bg-primary data-[state=unchecked]:bg-input dark:data-[state=unchecked]:bg-input/80",
+        "peer inline-flex h-[1.15rem] w-8 shrink-0 cursor-pointer items-center rounded-full border border-transparent shadow-xs outline-none transition-all focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 data-[state=checked]:bg-primary data-[state=checked]:shadow-[inset_0_0_4px_var(--color-blue-ribbon-400)] data-[state=unchecked]:bg-input dark:data-[state=unchecked]:bg-input/80",
         className,
       )}
       data-slot="switch"
diff --git a/packages/ui/components/ui/toggle-group.tsx b/packages/ui/components/ui/toggle-group.tsx
index 337518a14..eb14e6d20 100644
--- a/packages/ui/components/ui/toggle-group.tsx
+++ b/packages/ui/components/ui/toggle-group.tsx
@@ -66,7 +66,7 @@ function ToggleGroupItem({
   return (
     <ToggleGroupPrimitive.Item
       className={cn(
-        "shrink-0 focus:z-10 focus-visible:z-10 group-data-[spacing=0]/toggle-group:rounded-none group-data-[spacing=0]/toggle-group:px-2 data-[spacing=0]:first:rounded-l-lg data-[spacing=0]:last:rounded-r-lg data-[spacing=0]:data-[variant=outline]:border-l-0 data-[spacing=0]:data-[variant=outline]:first:border-l",
+        "shrink-0 focus:z-10 focus-visible:z-10 group-data-[spacing=0]/toggle-group:rounded-none group-data-[spacing=0]/toggle-group:px-2 data-[spacing=0]:border-l-0 data-[spacing=0]:first:rounded-l-lg data-[spacing=0]:first:border-l data-[spacing=0]:last:rounded-r-lg",
         toggleVariants({
           size: context.size || size,
           variant: context.variant || variant,
diff --git a/packages/ui/components/ui/toggle.tsx b/packages/ui/components/ui/toggle.tsx
index 42308536e..df4bd67b6 100644
--- a/packages/ui/components/ui/toggle.tsx
+++ b/packages/ui/components/ui/toggle.tsx
@@ -6,7 +6,7 @@ import { type VariantProps, cva } from "class-variance-authority";
 import { cn } from "../../lib/utils";
 
 const toggleVariants = cva(
-  "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-lg font-medium text-sm outline-none transition-[color,box-shadow] hover:bg-muted hover:text-muted-foreground focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 data-[state=on]:bg-accent data-[state=on]:text-accent-foreground dark:aria-invalid:ring-destructive/40 [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
+  "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-lg border border-transparent bg-clip-padding font-medium text-sm outline-none transition-[color,box-shadow] focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 [&_svg:not([class*='size-'])]:size-4 [&_svg]:pointer-events-none [&_svg]:shrink-0",
   {
     defaultVariants: {
       size: "default",
@@ -15,15 +15,14 @@ const toggleVariants = cva(
     variants: {
       size: {
         default: "h-8 min-w-8 px-2",
-        lg: "h-10 min-w-10 px-2.5",
+        lg: "h-9 min-w-9 px-2.5",
         sm: "h-7 min-w-7 px-1.5",
       },
       variant: {
-        default: "bg-transparent hover:bg-muted",
-        outline:
-          "border border-input bg-transparent shadow-xs hover:bg-accent hover:text-accent-foreground",
+        default:
+          "border-border bg-background text-muted-foreground hover:shadow-[inset_0_0_17px_var(--color-input)] hover:text-foreground data-[state=on]:bg-muted data-[state=on]:text-foreground data-[state=on]:shadow-[inset_0_0_17px_color-mix(in_oklch,var(--muted),var(--foreground)_5%)] data-[state=on]:hover:bg-muted data-[state=on]:hover:shadow-[inset_0_0_17px_color-mix(in_oklch,var(--muted),var(--foreground)_5%)] dark:border-input dark:bg-input/30 dark:hover:bg-input/50 dark:data-[state=on]:bg-input/80 dark:data-[state=on]:hover:bg-input/80",
         primary:
-          "bg-transparent hover:bg-muted data-[state=on]:bg-primary data-[state=on]:text-primary-foreground",
+          "border-blue-ribbon-500 bg-primary text-primary-foreground hover:shadow-[inset_0_0_17px_var(--color-blue-ribbon-400)] data-[state=on]:border-blue-ribbon-400 data-[state=on]:bg-blue-ribbon-500 data-[state=on]:shadow-[inset_0_0_17px_var(--color-blue-ribbon-300)] data-[state=on]:hover:bg-blue-ribbon-500 data-[state=on]:hover:shadow-[inset_0_0_17px_var(--color-blue-ribbon-300)]",
       },
     },
   },
diff --git a/packages/ui/index.ts b/packages/ui/index.ts
index 4a30a6427..7c1d417a4 100644
--- a/packages/ui/index.ts
+++ b/packages/ui/index.ts
@@ -4,6 +4,7 @@ export * from "./components/error-card";
 export * from "./components/gradient-avatar";
 export * from "./components/info-tooltip";
 export * from "./components/logo";
+export * from "./components/phone";
 export * from "./components/settings-card-skeleton";
 export * from "./components/spinner";
 export * from "./components/theme-provider";
diff --git a/packages/ui/package.json b/packages/ui/package.json
index fb1ec4b0b..5b3ac9724 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -23,6 +23,7 @@
     "./field": "./components/ui/field.tsx",
     "./label": "./components/ui/label.tsx",
     "./logo": "./components/logo.tsx",
+    "./phone": "./components/phone.tsx",
     "./sonner": "./components/ui/sonner.tsx",
     "./accordion": "./components/ui/accordion.tsx",
     "./alert-dialog": "./components/ui/alert-dialog.tsx",

From aab9ce3293141e675ee800e1b83d6208f566e0d9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 23 Jul 2026 22:49:09 +0200
Subject: [PATCH 114/129] feat: empty state redesign

---
 .../studio/feedback/feedback-button.tsx       |   7 +-
 .../paywall-locations-page-empty-state.tsx    |  44 +++++++
 .../studio/paywalls/create-paywall-button.tsx |  32 +++--
 .../paywalls/paywalls-page-empty-state.tsx    |  82 +++++++++++++
 .../$projectSlug/paywalls.index.tsx           | 110 +++++++++---------
 .../settings/paywall-locations.tsx            |  29 +++--
 packages/ui/components/page-bar.tsx           |   2 +-
 packages/ui/components/ui/toggle.tsx          |   4 +-
 8 files changed, 229 insertions(+), 81 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywall-locations/paywall-locations-page-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/paywalls-page-empty-state.tsx

diff --git a/apps/www/src/features/studio/feedback/feedback-button.tsx b/apps/www/src/features/studio/feedback/feedback-button.tsx
index 2062b8591..4c4723c0b 100644
--- a/apps/www/src/features/studio/feedback/feedback-button.tsx
+++ b/apps/www/src/features/studio/feedback/feedback-button.tsx
@@ -107,7 +107,7 @@ export function FeedbackButton() {
   return (
     <Popover onOpenChange={setOpen} open={open}>
       <PopoverTrigger asChild>
-        <Button variant="outline">Feedback</Button>
+        <Button variant="ghost">Feedback</Button>
       </PopoverTrigger>
       <PopoverContent align="end" className="w-96 overflow-hidden p-0">
         <form
@@ -117,10 +117,7 @@ export function FeedbackButton() {
           }}
         >
           <div className="flex flex-col gap-2 p-2">
-            <Select
-              onValueChange={(value) => setTopic(value as FeedbackTopicValue)}
-              value={topic}
-            >
+            <Select onValueChange={(value) => setTopic(value as FeedbackTopicValue)} value={topic}>
               <SelectTrigger className="w-full" id="feedback-topic">
                 <SelectValue placeholder="Select a topic…" />
               </SelectTrigger>
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-locations-page-empty-state.tsx b/apps/www/src/features/studio/paywall-locations/paywall-locations-page-empty-state.tsx
new file mode 100644
index 000000000..48b0ab822
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/paywall-locations-page-empty-state.tsx
@@ -0,0 +1,44 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui/empty";
+import { MapPin } from "lucide-react";
+import { useState } from "react";
+
+import { CreatePaywallLocationModal } from "./create-paywall-location-modal";
+
+/** Empty state for the paywall locations settings list. */
+export function PaywallLocationsPageEmptyState({ projectId }: { projectId: string }) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <Empty className="mx-auto w-full max-w-xl">
+      <EmptyMedia variant="icon">
+        <MapPin />
+      </EmptyMedia>
+      <EmptyHeader>
+        <EmptyTitle>Name your first location</EmptyTitle>
+        <EmptyDescription>
+          Locations are the places your app asks for a paywall — onboarding, settings, a locked
+          feature. Point one at a paywall and swap it later without shipping a release.
+        </EmptyDescription>
+      </EmptyHeader>
+      <EmptyContent>
+        <CreatePaywallLocationModal
+          onClose={() => setOpen(false)}
+          onSuccess={() => setOpen(false)}
+          open={open}
+          projectId={projectId}
+          trigger={<Button onClick={() => setOpen(true)}>Add location</Button>}
+        />
+      </EmptyContent>
+    </Empty>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/create-paywall-button.tsx b/apps/www/src/features/studio/paywalls/create-paywall-button.tsx
index 51c8612a9..41d57455a 100644
--- a/apps/www/src/features/studio/paywalls/create-paywall-button.tsx
+++ b/apps/www/src/features/studio/paywalls/create-paywall-button.tsx
@@ -1,6 +1,8 @@
 "use client";
 
 import { Button } from "@voidhash/ui/button";
+import { Tooltip, TooltipContent, TooltipTrigger } from "@voidhash/ui/tooltip";
+import { Plus } from "lucide-react";
 import { useState } from "react";
 
 import { CreatePaywallModal } from "./create-paywall-modal";
@@ -13,12 +15,28 @@ export function CreatePaywallButton({ projectId }: CreatePaywallButtonProps) {
   const [open, setOpen] = useState(false);
 
   return (
-    <CreatePaywallModal
-      onClose={() => setOpen(false)}
-      onSuccess={() => setOpen(false)}
-      open={open}
-      projectId={projectId}
-      trigger={<Button onClick={() => setOpen(true)}>Create Paywall</Button>}
-    />
+    <Tooltip>
+      <CreatePaywallModal
+        onClose={() => setOpen(false)}
+        onSuccess={() => setOpen(false)}
+        open={open}
+        projectId={projectId}
+        trigger={
+          <TooltipTrigger
+            render={
+              <Button
+                aria-label="Create new paywall"
+                onClick={() => setOpen(true)}
+                size="icon"
+                variant="ghost"
+              >
+                <Plus />
+              </Button>
+            }
+          />
+        }
+      />
+      <TooltipContent>Create new paywall</TooltipContent>
+    </Tooltip>
   );
 }
diff --git a/apps/www/src/features/studio/paywalls/paywalls-page-empty-state.tsx b/apps/www/src/features/studio/paywalls/paywalls-page-empty-state.tsx
new file mode 100644
index 000000000..2970b91e6
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/paywalls-page-empty-state.tsx
@@ -0,0 +1,82 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui/empty";
+import { Archive, CirclePause, LayoutTemplate } from "lucide-react";
+import { useState } from "react";
+
+import { CreatePaywallModal } from "./create-paywall-modal";
+
+type PaywallEmptyTab = "all" | "active" | "inactive" | "archived";
+
+interface PaywallsPageEmptyStateProps {
+  projectId: string;
+  tab: PaywallEmptyTab;
+}
+
+const EMPTY_TAB_CONTENT = {
+  all: {
+    icon: LayoutTemplate,
+    title: "Design your first paywall",
+    description:
+      "Paywalls are the screens people see when they hit a purchase. Build one in the designer, then publish it to a location in your app.",
+  },
+  active: {
+    icon: LayoutTemplate,
+    title: "No paywalls live",
+    description:
+      "Nothing is serving right now. Create a paywall to start converting, or check the archived tab for ones you retired.",
+  },
+  inactive: {
+    icon: CirclePause,
+    title: "No inactive paywalls",
+    description:
+      "Paywalls move between live and archived today, so nothing lands here yet.",
+  },
+  archived: {
+    icon: Archive,
+    title: "Nothing archived",
+    description:
+      "Paywalls you archive are kept here. They stop serving but stay editable, and you can restore them at any time.",
+  },
+} as const satisfies Record<
+  PaywallEmptyTab,
+  { icon: typeof LayoutTemplate; title: string; description: string }
+>;
+
+/** Empty state for the paywalls list, tailored to the tab the user is browsing. */
+export function PaywallsPageEmptyState({ projectId, tab }: PaywallsPageEmptyStateProps) {
+  const [open, setOpen] = useState(false);
+  const { icon: Icon, title, description } = EMPTY_TAB_CONTENT[tab];
+  const showCreateAction = tab === "all" || tab === "active";
+
+  return (
+    <Empty className="mx-auto w-full max-w-xl">
+      <EmptyMedia variant="icon">
+        <Icon />
+      </EmptyMedia>
+      <EmptyHeader>
+        <EmptyTitle>{title}</EmptyTitle>
+        <EmptyDescription>{description}</EmptyDescription>
+      </EmptyHeader>
+      {showCreateAction ? (
+        <EmptyContent>
+          <CreatePaywallModal
+            onClose={() => setOpen(false)}
+            onSuccess={() => setOpen(false)}
+            open={open}
+            projectId={projectId}
+            trigger={<Button onClick={() => setOpen(true)}>Create paywall</Button>}
+          />
+        </EmptyContent>
+      ) : null}
+    </Empty>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
index d274ed168..d5ab8473e 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -1,13 +1,13 @@
 import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
 import {
+  cn,
   Page,
   PageBar,
-  PageBarTab,
-  PageBarTabs,
   PageHeader,
   PageHeaderTitle,
-  PageTabs,
+  ToggleGroup,
+  ToggleGroupItem,
 } from "@voidhash/ui";
 import { useRef, useState } from "react";
 import { useAuth } from "@/features/studio/components/auth-context";
@@ -16,6 +16,7 @@ import { CreatePaywallButton } from "@/features/studio/paywalls/create-paywall-b
 import { PaywallCard } from "@/features/studio/paywalls/paywall-card";
 import { PaywallCardSkeleton } from "@/features/studio/paywalls/paywall-card-skeleton";
 import { PaywallTable } from "@/features/studio/paywalls/paywall-table";
+import { PaywallsPageEmptyState } from "@/features/studio/paywalls/paywalls-page-empty-state";
 import {
   loadPaywallView,
   type PaywallView,
@@ -80,23 +81,6 @@ function PaywallsPageSkeleton() {
   );
 }
 
-function emptyStateMessage(tab: PaywallTab): string {
-  switch (tab) {
-    case "all":
-      return "No paywalls yet. Create one to get started.";
-    case "active":
-      return "No active paywalls. Create one to get started.";
-    case "inactive":
-      return "No inactive paywalls.";
-    case "archived":
-      return "No archived paywalls.";
-    default: {
-      const _exhaustive: never = tab;
-      return _exhaustive;
-    }
-  }
-}
-
 function PaywallsPage() {
   const { organizationSlug, projectSlug } = Route.useParams();
   const { user } = useAuth();
@@ -154,46 +138,60 @@ function PaywallsPage() {
     }
   });
 
+  const isEmpty = paywalls.length === 0;
+
   return (
-    <Page>
-      <PageHeader rightActions={<CreatePaywallButton projectId={project.id} />}>
+    // The empty state stretches to fill the inset so it can center vertically;
+    // the populated list keeps the default top-aligned block flow.
+    <Page className={cn(isEmpty && "flex flex-col")}>
+      <PageHeader
+        className="shrink-0"
+        rightActions={<CreatePaywallButton projectId={project.id} />}
+      >
         <PageHeaderTitle>Paywalls</PageHeaderTitle>
       </PageHeader>
-      <PageTabs onValueChange={(value) => setTab(value as PaywallTab)} value={tab}>
-        <PageBar rightActions={<PaywallViewSettings onViewChange={changeView} view={view} />}>
-          <PageBarTabs>
-            {PAYWALL_TABS.map((item) => (
-              <PageBarTab key={item.value} value={item.value}>
-                {item.label}
-              </PageBarTab>
+      <PageBar
+        className="shrink-0 pl-2"
+        rightActions={<PaywallViewSettings onViewChange={changeView} view={view} />}
+      >
+        <ToggleGroup
+          onValueChange={(value: string) => {
+            if (value) {
+              setTab(value as PaywallTab);
+            }
+          }}
+          type="single"
+          value={tab}
+        >
+          {PAYWALL_TABS.map((item) => (
+            <ToggleGroupItem key={item.value} value={item.value}>
+              {item.label}
+            </ToggleGroupItem>
+          ))}
+        </ToggleGroup>
+      </PageBar>
+      <div className={cn("w-full px-4 pt-4", isEmpty && "flex flex-1 flex-col pb-4")}>
+        {isEmpty ? (
+          <PaywallsPageEmptyState projectId={project.id} tab={tab} />
+        ) : view === "table" ? (
+          <PaywallTable
+            organizationSlug={organizationSlug as string}
+            paywalls={paywalls}
+            projectSlug={projectSlug as string}
+          />
+        ) : (
+          <div className="grid grid-cols-2 gap-6 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
+            {paywalls.map((paywall) => (
+              <PaywallCard
+                key={paywall.id}
+                organizationSlug={organizationSlug as string}
+                paywall={paywall}
+                projectSlug={projectSlug as string}
+              />
             ))}
-          </PageBarTabs>
-        </PageBar>
-        <div className="w-full px-4 pt-4">
-          {paywalls.length === 0 ? (
-            <div className="py-20 text-center text-muted-foreground text-sm">
-              {emptyStateMessage(tab)}
-            </div>
-          ) : view === "table" ? (
-            <PaywallTable
-              organizationSlug={organizationSlug as string}
-              paywalls={paywalls}
-              projectSlug={projectSlug as string}
-            />
-          ) : (
-            <div className="grid grid-cols-2 gap-6 sm:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5">
-              {paywalls.map((paywall) => (
-                <PaywallCard
-                  key={paywall.id}
-                  organizationSlug={organizationSlug as string}
-                  paywall={paywall}
-                  projectSlug={projectSlug as string}
-                />
-              ))}
-            </div>
-          )}
-        </div>
-      </PageTabs>
+          </div>
+        )}
+      </div>
     </Page>
   );
 }
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
index d748c43dd..57e937a07 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
@@ -1,9 +1,10 @@
 import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
-import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import { Card, cn, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { CreatePaywallLocationModalButton } from "@/features/studio/paywall-locations/create-paywall-location-modal-button";
+import { PaywallLocationsPageEmptyState } from "@/features/studio/paywall-locations/paywall-locations-page-empty-state";
 import { PaywallLocationRow } from "@/features/studio/paywall-locations/paywall-location-row";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import {
@@ -66,18 +67,26 @@ function ProjectPaywallLocationsPage() {
   );
   const { data: paywalls } = useSuspenseQuery(listPaywallsOptions({ projectId: project.id }));
 
+  const isEmpty = locations.length === 0;
+
   return (
-    <Page>
-      <PageHeader rightActions={<CreatePaywallLocationModalButton projectId={project.id} />}>
+    // The empty state stretches to fill the inset so it can center vertically;
+    // the populated list keeps the default top-aligned block flow.
+    <Page className={cn(isEmpty && "flex flex-col")}>
+      <PageHeader
+        className="shrink-0"
+        rightActions={<CreatePaywallLocationModalButton projectId={project.id} />}
+      >
         <PageHeaderTitle>Paywall Locations</PageHeaderTitle>
       </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
-        {locations.length === 0 ? (
-          <Card className="p-0">
-            <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
-              No paywall locations yet. Create one to start assigning paywalls.
-            </div>
-          </Card>
+      <div
+        className={cn(
+          "mx-auto w-full max-w-4xl px-4 pt-4",
+          isEmpty && "flex flex-1 flex-col pb-4",
+        )}
+      >
+        {isEmpty ? (
+          <PaywallLocationsPageEmptyState projectId={project.id} />
         ) : (
           <Card className="grid gap-0 divide-y p-0">
             {locations.map((location) => (
diff --git a/packages/ui/components/page-bar.tsx b/packages/ui/components/page-bar.tsx
index b02155147..0262b3c85 100644
--- a/packages/ui/components/page-bar.tsx
+++ b/packages/ui/components/page-bar.tsx
@@ -19,7 +19,7 @@ export function PageBar({ children, rightActions, className }: PageBarProps) {
   return (
     <div
       className={cn(
-        "flex min-h-11 items-center justify-between gap-4 border-b border-border/60 bg-background px-4",
+        "flex min-h-11 items-center justify-between gap-4 border-border/60 bg-background px-4",
         className,
       )}
     >
diff --git a/packages/ui/components/ui/toggle.tsx b/packages/ui/components/ui/toggle.tsx
index df4bd67b6..b8ac9d38d 100644
--- a/packages/ui/components/ui/toggle.tsx
+++ b/packages/ui/components/ui/toggle.tsx
@@ -14,13 +14,13 @@ const toggleVariants = cva(
     },
     variants: {
       size: {
-        default: "h-8 min-w-8 px-2",
+        default: "h-8 min-w-8 px-2.5",
         lg: "h-9 min-w-9 px-2.5",
         sm: "h-7 min-w-7 px-1.5",
       },
       variant: {
         default:
-          "border-border bg-background text-muted-foreground hover:shadow-[inset_0_0_17px_var(--color-input)] hover:text-foreground data-[state=on]:bg-muted data-[state=on]:text-foreground data-[state=on]:shadow-[inset_0_0_17px_color-mix(in_oklch,var(--muted),var(--foreground)_5%)] data-[state=on]:hover:bg-muted data-[state=on]:hover:shadow-[inset_0_0_17px_color-mix(in_oklch,var(--muted),var(--foreground)_5%)] dark:border-input dark:bg-input/30 dark:hover:bg-input/50 dark:data-[state=on]:bg-input/80 dark:data-[state=on]:hover:bg-input/80",
+          "border-border bg-background text-muted-foreground hover:shadow-[inset_0_0_17px_var(--color-input)] hover:text-foreground data-[state=on]:bg-muted data-[state=on]:text-foreground data-[state=on]:shadow-[inset_0_0_17px_color-mix(in_oklch,var(--surface-muted),var(--foreground)_5%)] data-[state=on]:hover:bg-muted data-[state=on]:hover:shadow-[inset_0_0_17px_color-mix(in_oklch,var(--surface-muted),var(--foreground)_5%)] dark:border-input dark:bg-input/30 dark:hover:bg-input/50 dark:data-[state=on]:bg-input/80 dark:data-[state=on]:hover:bg-input/80",
         primary:
           "border-blue-ribbon-500 bg-primary text-primary-foreground hover:shadow-[inset_0_0_17px_var(--color-blue-ribbon-400)] data-[state=on]:border-blue-ribbon-400 data-[state=on]:bg-blue-ribbon-500 data-[state=on]:shadow-[inset_0_0_17px_var(--color-blue-ribbon-300)] data-[state=on]:hover:bg-blue-ribbon-500 data-[state=on]:hover:shadow-[inset_0_0_17px_var(--color-blue-ribbon-300)]",
       },

From 89f75958331075cdf02b37e12f9f711344291963 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Thu, 23 Jul 2026 22:59:55 +0200
Subject: [PATCH 115/129] feat: placements

---
 .../lib/tanstack-query/paywall-locations.ts   |   4 +-
 .../detail/paywall-detail-placements.tsx      |  87 ++++++++++++
 .../detail/paywall-detail-properties.tsx      |  38 +----
 .../paywall-placement-picker-dialog.tsx       | 130 ++++++++++++++++++
 .../$projectSlug/paywalls.$id.tsx             |   9 +-
 5 files changed, 233 insertions(+), 35 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx

diff --git a/apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts b/apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts
index c74041bc3..2bf2fa463 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/paywall-locations.ts
@@ -43,6 +43,8 @@ export const archivePaywallLocationOptions = () =>
     mutationKey: ["archivePaywallLocation"],
   });
 
+// `VoidhashRpc.use` (not `.request`) keeps the rpc's typed error union, so
+// consumers can match on the namespaced `Rpc/*` failure tags.
 export const assignPaywallLocationShowingOptions = () =>
   eq.mutationOptions({
     mutationFn: (variables: {
@@ -50,7 +52,7 @@ export const assignPaywallLocationShowingOptions = () =>
       locationId: string;
       paywallId?: string;
       type: "feature_flag" | "paywall_release";
-    }) => VoidhashRpc.request((rpc) => rpc.AssignPaywallLocationShowing(variables)),
+    }) => VoidhashRpc.use((rpc) => rpc.AssignPaywallLocationShowing(variables)),
     mutationKey: ["assignPaywallLocationShowing"],
   });
 
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx
new file mode 100644
index 000000000..7a6f0356b
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx
@@ -0,0 +1,87 @@
+"use client";
+
+import type { RpcPaywallLocation } from "@voidhash/rpc";
+import { Button } from "@voidhash/ui";
+import { MapPinIcon, PlusIcon } from "lucide-react";
+import { useState } from "react";
+
+import { PaywallPlacementPickerDialog } from "./paywall-placement-picker-dialog";
+
+export interface PaywallDetailPlacementsProps {
+  locations: readonly (typeof RpcPaywallLocation.Type)[];
+  paywallId: string;
+  projectId: string;
+}
+
+/**
+ * Placements section of the paywall detail page: the locations currently
+ * showing this paywall, plus an add button that opens the location picker.
+ * With no placements yet the section collapses to a single labelled add
+ * button — a bare "Placements" heading over an empty list says nothing.
+ */
+export function PaywallDetailPlacements({
+  locations,
+  paywallId,
+  projectId,
+}: PaywallDetailPlacementsProps) {
+  const [pickerOpen, setPickerOpen] = useState(false);
+  const placements = locations.filter(
+    (location) => location.activeShowing?.paywallId === paywallId,
+  );
+
+  return (
+    <section className="space-y-3">
+      {placements.length === 0 ? (
+        <Button
+          className="-ml-2.5 text-muted-foreground"
+          onClick={() => setPickerOpen(true)}
+          variant="ghost"
+        >
+          <PlusIcon />
+          Place at a paywall location
+        </Button>
+      ) : (
+        <>
+          <div className="flex items-center justify-between gap-4">
+            <h2 className="font-medium text-sm">Placements</h2>
+            <Button
+              aria-label="Add placement"
+              onClick={() => setPickerOpen(true)}
+              size="icon-sm"
+              variant="ghost"
+            >
+              <PlusIcon />
+            </Button>
+          </div>
+
+          <ul className="divide-y divide-border/60 border-border/60 border-y">
+            {placements.map((location) => (
+              <li className="flex items-center justify-between gap-3 py-2.5" key={location.id}>
+                <span className="flex min-w-0 items-center gap-2">
+                  <MapPinIcon className="size-4 shrink-0 text-muted-foreground" />
+                  <span className="truncate text-sm">{location.name}</span>
+                  <span className="truncate font-mono text-muted-foreground text-xs">
+                    {location.slug}
+                  </span>
+                </span>
+                {location.activeShowing?.paywallRelease && (
+                  <span className="shrink-0 text-muted-foreground text-xs tabular-nums">
+                    v{location.activeShowing.paywallRelease.version}
+                  </span>
+                )}
+              </li>
+            ))}
+          </ul>
+        </>
+      )}
+
+      <PaywallPlacementPickerDialog
+        locations={locations}
+        onOpenChange={setPickerOpen}
+        open={pickerOpen}
+        paywallId={paywallId}
+        projectId={projectId}
+      />
+    </section>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx
index e616fa3df..1873fa0bb 100644
--- a/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx
@@ -4,17 +4,11 @@ import { cn } from "@voidhash/ui";
 import { ExternalLinkIcon } from "lucide-react";
 import type { ReactNode } from "react";
 
-export interface PaywallDetailLocation {
-  id: string;
-  name: string;
-  slug: string;
-}
-
 interface PaywallDetailPropertiesProps {
   createdAt: Date | null;
   draftVersion: number | null;
   isArchived: boolean;
-  liveLocations: readonly PaywallDetailLocation[];
+  isLive: boolean;
   liveRelease: { htmlUrl: string; version: number } | null;
   slug: string;
 }
@@ -55,22 +49,18 @@ function PropertyRow({ children, label }: { children: ReactNode; label: string }
 }
 
 /**
- * Linear-style property list for the paywall detail screen — status, where the
- * paywall is live, which versions are live and drafted, and its identifiers.
+ * Linear-style property list for the paywall detail screen — status, which
+ * versions are live and drafted, and its identifiers.
  */
 export function PaywallDetailProperties({
   createdAt,
   draftVersion,
   isArchived,
-  liveLocations,
+  isLive,
   liveRelease,
   slug,
 }: PaywallDetailPropertiesProps) {
-  const status = resolveStatus({
-    draftVersion,
-    isArchived,
-    isLive: liveLocations.length > 0,
-  });
+  const status = resolveStatus({ draftVersion, isArchived, isLive });
   const { dotClassName, label } = STATUS_PRESENTATION[status];
 
   return (
@@ -82,24 +72,6 @@ export function PaywallDetailProperties({
         </span>
       </PropertyRow>
 
-      <PropertyRow label="Locations">
-        {liveLocations.length > 0 ? (
-          <span className="flex flex-wrap gap-x-2 gap-y-1">
-            {liveLocations.map((location) => (
-              <span
-                className="inline-flex items-center gap-1.5 rounded-md bg-muted/60 px-2 py-0.5"
-                key={location.id}
-              >
-                {location.name}
-                <span className="font-mono text-muted-foreground text-xs">{location.slug}</span>
-              </span>
-            ))}
-          </span>
-        ) : (
-          <span className="text-muted-foreground">Not assigned</span>
-        )}
-      </PropertyRow>
-
       <PropertyRow label="Live version">
         {liveRelease ? (
           <a
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx
new file mode 100644
index 000000000..a553ff406
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx
@@ -0,0 +1,130 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { RpcPaywallLocation } from "@voidhash/rpc";
+import {
+  CommandDialog,
+  CommandEmpty,
+  CommandGroup,
+  CommandInput,
+  CommandItem,
+  CommandList,
+} from "@voidhash/ui";
+import { CheckIcon } from "lucide-react";
+import { toast } from "sonner";
+import {
+  assignPaywallLocationShowingOptions,
+  queryKeys,
+} from "@/features/studio/lib/tanstack-query";
+
+export interface PaywallPlacementPickerDialogProps {
+  locations: readonly (typeof RpcPaywallLocation.Type)[];
+  onOpenChange: (open: boolean) => void;
+  open: boolean;
+  paywallId: string;
+  projectId: string;
+}
+
+/**
+ * Command palette that lists every paywall location in the project. Picking one
+ * points that location at this paywall, replacing whatever it was showing —
+ * a location serves exactly one paywall at a time.
+ */
+export function PaywallPlacementPickerDialog({
+  locations,
+  onOpenChange,
+  open,
+  paywallId,
+  projectId,
+}: PaywallPlacementPickerDialogProps) {
+  const queryClient = useQueryClient();
+
+  const { mutate: assignShowing, status } = useMutation({
+    ...assignPaywallLocationShowingOptions(),
+    onError: (error) => {
+      toast.error(
+        error._tag === "EffectQueryFailure"
+          ? error.match({
+              "Rpc/ActionForbiddenError": (failure) => failure.message,
+              "Rpc/PaywallLocationNotFoundError": (failure) => failure.message,
+              "Rpc/PaywallLocationShowingValidationError": (failure) => failure.message,
+              "Rpc/PaywallNotFoundError": (failure) => failure.message,
+              OrElse: () => "Failed to add placement",
+            })
+          : "Failed to add placement",
+      );
+    },
+    onSuccess: async (_, variables) => {
+      toast.success("Placement added");
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.list({ projectId }),
+      });
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.showings({ locationId: variables.locationId }),
+      });
+      onOpenChange(false);
+    },
+  });
+
+  const isPending = status === "pending";
+
+  return (
+    <CommandDialog
+      description="Pick a location to show this paywall at."
+      onOpenChange={(next) => {
+        if (!isPending) {
+          onOpenChange(next);
+        }
+      }}
+      open={open}
+      title="Add placement"
+    >
+      <CommandInput placeholder="Search locations..." />
+      <CommandList>
+        <CommandEmpty>No locations found.</CommandEmpty>
+        <CommandGroup heading="Locations">
+          {locations.map((location) => {
+            const isCurrent = location.activeShowing?.paywallId === paywallId;
+            const showingName = location.activeShowing?.paywall?.name;
+
+            return (
+              <CommandItem
+                disabled={isPending}
+                key={location.id}
+                onSelect={() => {
+                  if (isCurrent) {
+                    onOpenChange(false);
+                    return;
+                  }
+                  assignShowing({
+                    locationId: location.id,
+                    paywallId,
+                    type: "paywall_release",
+                  });
+                }}
+                value={`${location.name} ${location.slug}`}
+              >
+                <div className="flex min-w-0 flex-1 flex-col">
+                  <span className="flex items-center gap-2">
+                    <span className="truncate">{location.name}</span>
+                    <span className="truncate font-mono text-muted-foreground text-xs">
+                      {location.slug}
+                    </span>
+                  </span>
+                  <span className="truncate text-muted-foreground text-xs">
+                    {isCurrent
+                      ? "Already showing this paywall"
+                      : showingName
+                        ? `Currently showing ${showingName}`
+                        : "Empty"}
+                  </span>
+                </div>
+                {isCurrent && <CheckIcon className="shrink-0" />}
+              </CommandItem>
+            );
+          })}
+        </CommandGroup>
+      </CommandList>
+    </CommandDialog>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
index b86235464..e32e687eb 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
@@ -15,6 +15,7 @@ import {
 import { ExternalLinkIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
+import { PaywallDetailPlacements } from "@/features/studio/paywalls/detail/paywall-detail-placements";
 import { PaywallDetailProperties } from "@/features/studio/paywalls/detail/paywall-detail-properties";
 import { PaywallDetailStats } from "@/features/studio/paywalls/detail/paywall-detail-stats";
 import { PaywallPhonePreview } from "@/features/studio/paywalls/detail/paywall-phone-preview";
@@ -134,12 +135,18 @@ function PaywallDetailPage() {
                 createdAt={paywall.createdAt}
                 draftVersion={draftRelease?.version ?? null}
                 isArchived={isArchived}
-                liveLocations={liveLocations}
+                isLive={liveLocations.length > 0}
                 liveRelease={liveRelease}
                 slug={paywall.slug}
               />
             </div>
 
+            <PaywallDetailPlacements
+              locations={locations}
+              paywallId={paywall.id}
+              projectId={project.id}
+            />
+
             <PaywallDetailStats
               locationSlugs={liveLocations.map((location) => location.slug)}
               projectId={project.id}

From effe7041fc2986c2c01d36bb914ffc37f7b0a0fe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 24 Jul 2026 10:37:48 +0200
Subject: [PATCH 116/129] feat: design improvements

---
 .../analytics/paywall-location-metrics.ts     | 248 ++++++++++++++++
 .../analytics/paywall-location-stats.tsx}     | 172 +++--------
 .../create-paywall-location-modal-button.tsx  |  32 +-
 .../detail/paywall-location-phone-preview.tsx |  65 +++++
 .../detail/paywall-location-properties.tsx    | 106 +++++++
 .../edit-paywall-location-modal.tsx           |   5 +-
 .../paywall-locations/paywall-combobox.tsx    | 142 +++++++++
 .../paywall-location-actions-menu.tsx         | 188 ++++++++++++
 .../paywall-location-paywall-cell.tsx         |  62 ++++
 .../paywall-location-row.tsx                  | 232 ---------------
 .../paywall-locations-table.tsx               | 273 ++++++++++++++++++
 .../detail/paywall-detail-placements.tsx      |  49 ++--
 .../detail/paywall-location-combobox.tsx      | 144 +++++++++
 .../paywall-placement-picker-dialog.tsx       | 130 ---------
 apps/www/src/routeTree.gen.ts                 |  78 +++--
 .../$projectSlug/paywalls.$id.tsx             |   7 +-
 .../$projectSlug/paywalls.index.tsx           |  30 +-
 .../settings/paywall-locations.$id.tsx        | 187 ++++++++++++
 .../settings/paywall-locations.index.tsx      | 226 +++++++++++++++
 .../settings/paywall-locations.tsx            | 105 -------
 .../ui/components/data-table-skeleton.tsx     |  22 +-
 packages/ui/components/ui/combobox.tsx        |  14 +-
 packages/ui/components/ui/table.tsx           |  16 +-
 23 files changed, 1851 insertions(+), 682 deletions(-)
 create mode 100644 apps/www/src/features/studio/paywall-locations/analytics/paywall-location-metrics.ts
 rename apps/www/src/features/studio/{paywalls/detail/paywall-detail-stats.tsx => paywall-locations/analytics/paywall-location-stats.tsx} (62%)
 create mode 100644 apps/www/src/features/studio/paywall-locations/detail/paywall-location-phone-preview.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/detail/paywall-location-properties.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/paywall-combobox.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/paywall-location-actions-menu.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/paywall-location-paywall-cell.tsx
 delete mode 100644 apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx
 create mode 100644 apps/www/src/features/studio/paywall-locations/paywall-locations-table.tsx
 create mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-location-combobox.tsx
 delete mode 100644 apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx
 delete mode 100644 apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx

diff --git a/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-metrics.ts b/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-metrics.ts
new file mode 100644
index 000000000..f03e621f2
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-metrics.ts
@@ -0,0 +1,248 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import type { AnalyticsFilterType, CustomAnalyticsInsightQueryType } from "@voidhash/rpc";
+import { customAnalyticsInsightQueryOptions } from "@/features/studio/lib/tanstack-query/analytics";
+
+// Conventional event names emitted by paywall compositions through the SDK
+// bridge. Every bridge event is stamped with the `paywall_location` property
+// holding the slug of the location that served the paywall, which is what
+// scopes these queries to a single location.
+export const PAYWALL_VIEWED_EVENT = "paywall_viewed";
+export const PURCHASE_COMPLETED_EVENT = "purchase_completed";
+
+export const CONVERSION_WINDOW_SECONDS = 7 * 86_400;
+
+// The trends breakdown caps out at 100 buckets server-side; a project with more
+// paywall locations than that loses metrics for the tail, which the index table
+// renders as "no data" rather than zero.
+const BREAKDOWN_LIMIT = 100;
+
+export const METRIC_RANGE_OPTIONS = [
+  { label: "7D", value: "last_7d" },
+  { label: "30D", value: "last_30d" },
+  { label: "90D", value: "last_90d" },
+] as const;
+
+export type MetricRange = (typeof METRIC_RANGE_OPTIONS)[number]["value"];
+
+export const isMetricRange = (value: string): value is MetricRange =>
+  METRIC_RANGE_OPTIONS.some((option) => option.value === value);
+
+/**
+ * Predicate scoping a series to the events served by a set of paywall
+ * locations. `paywall_location` carries the location slug, not its id.
+ */
+export const paywallLocationFilter = (locationSlugs: readonly string[]): AnalyticsFilterType => ({
+  field: "event.properties.paywall_location",
+  op: "in",
+  type: "predicate",
+  value: [...locationSlugs],
+});
+
+const LOCATION_BREAKDOWN = {
+  field: "event.properties.paywall_location",
+  limit: BREAKDOWN_LIMIT,
+  order: "desc",
+} as const;
+
+export interface PaywallLocationMetrics {
+  /** Share of viewers who purchased within the conversion window, 0–1. */
+  conversion: number;
+  purchases: number;
+  viewers: number;
+  views: number;
+}
+
+const EMPTY_METRICS: PaywallLocationMetrics = {
+  conversion: 0,
+  purchases: 0,
+  viewers: 0,
+  views: 0,
+};
+
+/**
+ * Engagement metrics for every paywall location in the project, split by the
+ * `paywall_location` breakdown so the whole index table is served by two
+ * queries rather than two per row.
+ */
+const buildBreakdownTotalsDefinition = (range: MetricRange): CustomAnalyticsInsightQueryType => ({
+  breakdown: LOCATION_BREAKDOWN,
+  display: "number",
+  granularity: "day",
+  kind: "trends",
+  series: [
+    {
+      aggregation: "total_events",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      key: "views",
+      label: "Views",
+    },
+    {
+      aggregation: "unique_users",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      key: "viewers",
+      label: "Unique viewers",
+    },
+    {
+      aggregation: "total_events",
+      eventNames: [PURCHASE_COMPLETED_EVENT],
+      key: "purchases",
+      label: "Purchases",
+    },
+  ],
+  timeRange: { preset: range },
+});
+
+// The purchase step is intentionally unfiltered and unbroken-down: the funnel is
+// sequential per user, so it measures "viewed a paywall here, then purchased"
+// even though purchase events are not stamped with the location. Attributing the
+// breakdown to step 1 buckets each user by where they entered.
+const buildBreakdownFunnelDefinition = (range: MetricRange): CustomAnalyticsInsightQueryType => ({
+  breakdown: LOCATION_BREAKDOWN,
+  breakdownAttributionStep: 1,
+  conversionWindowSeconds: CONVERSION_WINDOW_SECONDS,
+  kind: "funnels",
+  order: "sequential",
+  steps: [
+    { eventNames: [PAYWALL_VIEWED_EVENT], key: "viewed", label: "Viewed paywall" },
+    { eventNames: [PURCHASE_COMPLETED_EVENT], key: "purchased", label: "Purchased" },
+  ],
+  timeRange: { preset: range },
+});
+
+export interface UsePaywallLocationMetricsResult {
+  isPending: boolean;
+  /** Metrics for one location slug; zeroed when the location saw no traffic. */
+  metricsFor: (locationSlug: string) => PaywallLocationMetrics;
+}
+
+/**
+ * Loads engagement metrics for every paywall location in the project at once.
+ * Breakdown series come back keyed `<seriesKey>:<locationSlug>`, which is what
+ * lets a single response fan out across the index table's rows.
+ */
+export function usePaywallLocationMetrics(options: {
+  projectId: string;
+  range: MetricRange;
+}): UsePaywallLocationMetricsResult {
+  const { projectId, range } = options;
+
+  const totalsQuery = useQuery(
+    customAnalyticsInsightQueryOptions({
+      definition: buildBreakdownTotalsDefinition(range),
+      projectId,
+    }),
+  );
+  const funnelQuery = useQuery(
+    customAnalyticsInsightQueryOptions({
+      definition: buildBreakdownFunnelDefinition(range),
+      projectId,
+    }),
+  );
+
+  const totals = totalsQuery.data?.kind === "trends" ? totalsQuery.data : undefined;
+  const funnel = funnelQuery.data?.kind === "funnels" ? funnelQuery.data : undefined;
+
+  const metricsFor = (locationSlug: string): PaywallLocationMetrics => {
+    if (!(totals || funnel)) {
+      return EMPTY_METRICS;
+    }
+
+    const totalFor = (seriesKey: string) =>
+      totals?.series.find((series) => series.key === `${seriesKey}:${locationSlug}`)?.points[0]
+        ?.value ?? 0;
+
+    return {
+      conversion:
+        funnel?.breakdowns?.find((entry) => entry.breakdownValue === locationSlug)
+          ?.totalConversionRate ?? 0,
+      purchases: totalFor("purchases"),
+      viewers: totalFor("viewers"),
+      views: totalFor("views"),
+    };
+  };
+
+  return {
+    isPending: totalsQuery.isPending || funnelQuery.isPending,
+    metricsFor,
+  };
+}
+
+export const buildLocationTotalsDefinition = (
+  range: MetricRange,
+  locationSlugs: readonly string[],
+): CustomAnalyticsInsightQueryType => ({
+  display: "number",
+  granularity: "day",
+  kind: "trends",
+  series: [
+    {
+      aggregation: "total_events",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: paywallLocationFilter(locationSlugs),
+      key: "views",
+      label: "Views",
+    },
+    {
+      aggregation: "unique_users",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: paywallLocationFilter(locationSlugs),
+      key: "viewers",
+      label: "Unique viewers",
+    },
+    {
+      aggregation: "total_events",
+      eventNames: [PURCHASE_COMPLETED_EVENT],
+      filters: paywallLocationFilter(locationSlugs),
+      key: "purchases",
+      label: "Purchases",
+    },
+  ],
+  timeRange: { preset: range },
+});
+
+export const buildLocationTimeseriesDefinition = (
+  range: MetricRange,
+  locationSlugs: readonly string[],
+): CustomAnalyticsInsightQueryType => ({
+  display: "area",
+  granularity: "day",
+  kind: "trends",
+  series: [
+    {
+      aggregation: "total_events",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: paywallLocationFilter(locationSlugs),
+      key: "views",
+      label: "Views",
+    },
+    {
+      aggregation: "total_events",
+      eventNames: [PURCHASE_COMPLETED_EVENT],
+      filters: paywallLocationFilter(locationSlugs),
+      key: "purchases",
+      label: "Purchases",
+    },
+  ],
+  timeRange: { preset: range },
+});
+
+export const buildLocationFunnelDefinition = (
+  range: MetricRange,
+  locationSlugs: readonly string[],
+): CustomAnalyticsInsightQueryType => ({
+  conversionWindowSeconds: CONVERSION_WINDOW_SECONDS,
+  kind: "funnels",
+  order: "sequential",
+  steps: [
+    {
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      filters: paywallLocationFilter(locationSlugs),
+      key: "viewed",
+      label: "Viewed paywall",
+    },
+    { eventNames: [PURCHASE_COMPLETED_EVENT], key: "purchased", label: "Purchased" },
+  ],
+  timeRange: { preset: range },
+});
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx b/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-stats.tsx
similarity index 62%
rename from apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
rename to apps/www/src/features/studio/paywall-locations/analytics/paywall-location-stats.tsx
index 9ae8a577d..109ea3b34 100644
--- a/apps/www/src/features/studio/paywalls/detail/paywall-detail-stats.tsx
+++ b/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-stats.tsx
@@ -1,7 +1,6 @@
 "use client";
 
 import { useQuery } from "@tanstack/react-query";
-import type { AnalyticsFilterType, CustomAnalyticsInsightQueryType } from "@voidhash/rpc";
 import {
   type ChartConfig,
   ChartContainer,
@@ -16,117 +15,14 @@ import { useState } from "react";
 import { Area, AreaChart, CartesianGrid, XAxis, YAxis } from "recharts";
 import { customAnalyticsInsightQueryOptions } from "@/features/studio/lib/tanstack-query/analytics";
 
-// Conventional event names emitted by paywall compositions through the SDK
-// bridge. Every bridge event is stamped with the `paywall_location` property
-// of the location that served the paywall, which is what scopes these queries
-// to a single paywall.
-const PAYWALL_VIEWED_EVENT = "paywall_viewed";
-const PURCHASE_COMPLETED_EVENT = "purchase_completed";
-
-const CONVERSION_WINDOW_SECONDS = 7 * 86_400;
-
-const RANGE_OPTIONS = [
-  { label: "7D", value: "last_7d" },
-  { label: "30D", value: "last_30d" },
-  { label: "90D", value: "last_90d" },
-] as const;
-
-type StatsRange = (typeof RANGE_OPTIONS)[number]["value"];
-
-const isStatsRange = (value: string): value is StatsRange =>
-  RANGE_OPTIONS.some((option) => option.value === value);
-
-const locationFilter = (locationSlugs: string[]): AnalyticsFilterType => ({
-  field: "event.properties.paywall_location",
-  op: "in",
-  type: "predicate",
-  value: locationSlugs,
-});
-
-const buildTotalsDefinition = (
-  range: StatsRange,
-  locationSlugs: string[],
-): CustomAnalyticsInsightQueryType => ({
-  display: "number",
-  granularity: "day",
-  kind: "trends",
-  series: [
-    {
-      aggregation: "total_events",
-      eventNames: [PAYWALL_VIEWED_EVENT],
-      filters: locationFilter(locationSlugs),
-      key: "views",
-      label: "Views",
-    },
-    {
-      aggregation: "unique_users",
-      eventNames: [PAYWALL_VIEWED_EVENT],
-      filters: locationFilter(locationSlugs),
-      key: "viewers",
-      label: "Unique viewers",
-    },
-    {
-      aggregation: "total_events",
-      eventNames: [PURCHASE_COMPLETED_EVENT],
-      filters: locationFilter(locationSlugs),
-      key: "purchases",
-      label: "Purchases",
-    },
-  ],
-  timeRange: { preset: range },
-});
-
-const buildTimeseriesDefinition = (
-  range: StatsRange,
-  locationSlugs: string[],
-): CustomAnalyticsInsightQueryType => ({
-  display: "area",
-  granularity: "day",
-  kind: "trends",
-  series: [
-    {
-      aggregation: "total_events",
-      eventNames: [PAYWALL_VIEWED_EVENT],
-      filters: locationFilter(locationSlugs),
-      key: "views",
-      label: "Views",
-    },
-    {
-      aggregation: "total_events",
-      eventNames: [PURCHASE_COMPLETED_EVENT],
-      filters: locationFilter(locationSlugs),
-      key: "purchases",
-      label: "Purchases",
-    },
-  ],
-  timeRange: { preset: range },
-});
-
-// The purchase step is intentionally unfiltered: the funnel is sequential per
-// user, so it measures "viewed this paywall, then purchased" even when the
-// purchase event isn't stamped with the paywall location.
-const buildFunnelDefinition = (
-  range: StatsRange,
-  locationSlugs: string[],
-): CustomAnalyticsInsightQueryType => ({
-  conversionWindowSeconds: CONVERSION_WINDOW_SECONDS,
-  kind: "funnels",
-  order: "sequential",
-  steps: [
-    {
-      eventNames: [PAYWALL_VIEWED_EVENT],
-      filters: locationFilter(locationSlugs),
-      key: "viewed",
-      label: "Viewed paywall",
-    },
-    {
-      eventNames: [PURCHASE_COMPLETED_EVENT],
-      key: "purchased",
-      label: "Purchased",
-    },
-  ],
-  timeRange: { preset: range },
-});
+import {
+  buildLocationFunnelDefinition,
+  buildLocationTimeseriesDefinition,
+  buildLocationTotalsDefinition,
+  isMetricRange,
+  METRIC_RANGE_OPTIONS,
+  type MetricRange,
+} from "./paywall-location-metrics";
 
 interface StatTileProps {
   label: string;
@@ -147,40 +43,50 @@ function StatTile({ label, loading, value }: StatTileProps) {
   );
 }
 
-interface PaywallDetailStatsProps {
+export interface PaywallLocationStatsProps {
+  description: string;
+  emptyDescription: string;
+  emptyTitle: string;
   locationSlugs: string[];
   projectId: string;
 }
 
 /**
- * Performance section of the paywall detail page: KPI tiles (views, unique
- * viewers, purchases, view→purchase conversion) plus a views/purchases area
- * chart, scoped to the locations currently showing the paywall.
+ * Performance section shared by the paywall and paywall-location detail
+ * screens: KPI tiles (views, unique viewers, purchases, view→purchase
+ * conversion) plus a views/purchases area chart, scoped to a set of paywall
+ * locations. With no locations to scope to it renders the caller's empty state.
  */
-export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailStatsProps) {
-  const [range, setRange] = useState<StatsRange>("last_30d");
-  const isLive = locationSlugs.length > 0;
+export function PaywallLocationStats({
+  description,
+  emptyDescription,
+  emptyTitle,
+  locationSlugs,
+  projectId,
+}: PaywallLocationStatsProps) {
+  const [range, setRange] = useState<MetricRange>("last_30d");
+  const hasScope = locationSlugs.length > 0;
 
   const totalsQuery = useQuery({
     ...customAnalyticsInsightQueryOptions({
-      definition: buildTotalsDefinition(range, locationSlugs),
+      definition: buildLocationTotalsDefinition(range, locationSlugs),
       projectId,
     }),
-    enabled: isLive,
+    enabled: hasScope,
   });
   const timeseriesQuery = useQuery({
     ...customAnalyticsInsightQueryOptions({
-      definition: buildTimeseriesDefinition(range, locationSlugs),
+      definition: buildLocationTimeseriesDefinition(range, locationSlugs),
       projectId,
     }),
-    enabled: isLive,
+    enabled: hasScope,
   });
   const funnelQuery = useQuery({
     ...customAnalyticsInsightQueryOptions({
-      definition: buildFunnelDefinition(range, locationSlugs),
+      definition: buildLocationFunnelDefinition(range, locationSlugs),
       projectId,
     }),
-    enabled: isLive,
+    enabled: hasScope,
   });
 
   const totals = totalsQuery.data?.kind === "trends" ? totalsQuery.data : undefined;
@@ -225,20 +131,18 @@ export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailSt
       <div className="flex items-start justify-between gap-4">
         <div>
           <h2 className="font-medium text-sm">Performance</h2>
-          <p className="mt-0.5 text-muted-foreground text-xs">
-            Events captured at locations currently showing this paywall.
-          </p>
+          <p className="mt-0.5 text-muted-foreground text-xs">{description}</p>
         </div>
         <ToggleGroup
           onValueChange={(value: string) => {
-            if (value && isStatsRange(value)) {
+            if (value && isMetricRange(value)) {
               setRange(value);
             }
           }}
           type="single"
           value={range}
         >
-          {RANGE_OPTIONS.map((option) => (
+          {METRIC_RANGE_OPTIONS.map((option) => (
             <ToggleGroupItem className="cursor-pointer" key={option.value} value={option.value}>
               {option.label}
             </ToggleGroupItem>
@@ -246,7 +150,7 @@ export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailSt
         </ToggleGroup>
       </div>
 
-      {isLive ? (
+      {hasScope ? (
         <>
           <div className="grid grid-cols-2 gap-x-6 gap-y-5 border-border/60 border-y py-5 sm:grid-cols-4 sm:gap-x-0">
             <StatTile
@@ -339,10 +243,8 @@ export function PaywallDetailStats({ locationSlugs, projectId }: PaywallDetailSt
         <div className="flex h-[240px] items-center justify-center rounded-xl border border-dashed bg-muted/20">
           <div className="text-center">
             <MapPinOffIcon className="mx-auto text-muted-foreground" />
-            <p className="mt-3 font-medium text-sm">Not live yet</p>
-            <p className="mt-1 text-muted-foreground text-sm">
-              Assign this paywall to a location to start collecting stats.
-            </p>
+            <p className="mt-3 font-medium text-sm">{emptyTitle}</p>
+            <p className="mt-1 text-muted-foreground text-sm">{emptyDescription}</p>
           </div>
         </div>
       )}
diff --git a/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx b/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx
index 3d9ecbd46..a1bed1080 100644
--- a/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx
+++ b/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx
@@ -1,6 +1,8 @@
 "use client";
 
 import { Button } from "@voidhash/ui/button";
+import { Tooltip, TooltipContent, TooltipTrigger } from "@voidhash/ui/tooltip";
+import { Plus } from "lucide-react";
 import { useState } from "react";
 
 import { CreatePaywallLocationModal } from "./create-paywall-location-modal";
@@ -9,12 +11,28 @@ export function CreatePaywallLocationModalButton({ projectId }: { projectId: str
   const [open, setOpen] = useState(false);
 
   return (
-    <CreatePaywallLocationModal
-      onClose={() => setOpen(false)}
-      onSuccess={() => setOpen(false)}
-      open={open}
-      projectId={projectId}
-      trigger={<Button onClick={() => setOpen(true)}>Add Location</Button>}
-    />
+    <Tooltip>
+      <CreatePaywallLocationModal
+        onClose={() => setOpen(false)}
+        onSuccess={() => setOpen(false)}
+        open={open}
+        projectId={projectId}
+        trigger={
+          <TooltipTrigger
+            render={
+              <Button
+                aria-label="Add paywall location"
+                onClick={() => setOpen(true)}
+                size="icon"
+                variant="ghost"
+              >
+                <Plus />
+              </Button>
+            }
+          />
+        }
+      />
+      <TooltipContent>Add paywall location</TooltipContent>
+    </Tooltip>
   );
 }
diff --git a/apps/www/src/features/studio/paywall-locations/detail/paywall-location-phone-preview.tsx b/apps/www/src/features/studio/paywall-locations/detail/paywall-location-phone-preview.tsx
new file mode 100644
index 000000000..19990a8b2
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/detail/paywall-location-phone-preview.tsx
@@ -0,0 +1,65 @@
+"use client";
+
+import { Link } from "@tanstack/react-router";
+import type { Paywall } from "@voidhash/rpc";
+import { Phone } from "@voidhash/ui";
+import { ExternalLinkIcon, SmartphoneIcon } from "lucide-react";
+
+interface PaywallLocationPhonePreviewProps {
+  organizationSlug: string;
+  /** The paywall this location currently serves, if any. */
+  paywall: null | (typeof Paywall.Type);
+  projectSlug: string;
+}
+
+/**
+ * Bare phone mockup of whatever this location currently serves — no card and no
+ * backdrop, just the device floating in the page, matching the paywall detail
+ * screen. The screen links into that paywall's designer; with nothing placed it
+ * falls back to an inert empty device.
+ */
+export function PaywallLocationPhonePreview({
+  organizationSlug,
+  paywall,
+  projectSlug,
+}: PaywallLocationPhonePreviewProps) {
+  return (
+    <Phone
+      className="mx-auto w-full max-w-[300px]"
+      screenClassName="flex items-center justify-center bg-zinc-950"
+    >
+      {paywall ? (
+        <Link
+          className="group absolute inset-0 flex items-center justify-center outline-none"
+          params={{ id: paywall.id, organizationSlug, projectSlug }}
+          rel="noreferrer"
+          target="_blank"
+          to="/studio/$organizationSlug/$projectSlug/design/$id"
+        >
+          {paywall.thumbnailUrl ? (
+            <img
+              alt={paywall.name}
+              className="size-full object-cover object-top"
+              loading="lazy"
+              src={paywall.thumbnailUrl}
+            />
+          ) : (
+            <SmartphoneIcon className="size-10 text-zinc-400 opacity-30" />
+          )}
+
+          <span className="absolute inset-0 flex items-center justify-center rounded-[calc(15cqw_-_6px)] bg-black/20 opacity-0 backdrop-blur-sm transition-opacity duration-200 group-focus-visible:opacity-100 group-hover:opacity-100">
+            <span className="inline-flex items-center gap-1.5 rounded-full bg-white/70 px-4 py-2 font-medium text-black text-sm hover:bg-white/90">
+              Edit paywall
+              <ExternalLinkIcon className="size-4" />
+            </span>
+          </span>
+        </Link>
+      ) : (
+        <span className="flex size-full flex-col items-center justify-center gap-3 px-6 text-center">
+          <SmartphoneIcon className="size-10 text-zinc-400 opacity-30" />
+          <span className="text-sm text-zinc-400">Nothing placed here yet</span>
+        </span>
+      )}
+    </Phone>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/detail/paywall-location-properties.tsx b/apps/www/src/features/studio/paywall-locations/detail/paywall-location-properties.tsx
new file mode 100644
index 000000000..be54d5fb4
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/detail/paywall-location-properties.tsx
@@ -0,0 +1,106 @@
+"use client";
+
+import type { RpcPaywallLocation } from "@voidhash/rpc";
+import { cn } from "@voidhash/ui";
+import { ExternalLinkIcon } from "lucide-react";
+import type { ReactNode } from "react";
+
+interface PaywallLocationPropertiesProps {
+  location: typeof RpcPaywallLocation.Type;
+  /**
+   * Combobox trigger for the Paywall row, already bound to this location.
+   * Omitted when the location can't be changed.
+   */
+  paywallCombobox?: ReactNode;
+}
+
+type LocationStatus = "archived" | "empty" | "live";
+
+const STATUS_PRESENTATION: Record<LocationStatus, { dotClassName: string; label: string }> = {
+  archived: { dotClassName: "bg-muted-foreground", label: "Archived" },
+  empty: { dotClassName: "bg-muted-foreground/50", label: "Empty" },
+  live: { dotClassName: "bg-emerald-500", label: "Live" },
+};
+
+const formatDate = (date: Date) =>
+  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
+
+function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
+  return (
+    <div className="flex items-baseline gap-4 py-1.5">
+      <dt className="w-28 shrink-0 text-muted-foreground text-sm">{label}</dt>
+      <dd className="min-w-0 flex-1 text-sm">{children}</dd>
+    </div>
+  );
+}
+
+/**
+ * Linear-style property list for the paywall location detail screen — whether
+ * the location is serving anything, which paywall and release it currently
+ * resolves to, and its identifiers.
+ */
+export function PaywallLocationProperties({
+  location,
+  paywallCombobox,
+}: PaywallLocationPropertiesProps) {
+  const showing = location.activeShowing;
+  const status: LocationStatus =
+    location.archivedAt != null ? "archived" : showing?.paywall ? "live" : "empty";
+  const { dotClassName, label } = STATUS_PRESENTATION[status];
+
+  return (
+    <dl className="-my-1.5">
+      <PropertyRow label="Status">
+        <span className="inline-flex items-center gap-2">
+          <span aria-hidden="true" className={cn("size-2 rounded-full", dotClassName)} />
+          {label}
+        </span>
+      </PropertyRow>
+
+      <PropertyRow label="Paywall">
+        {paywallCombobox ??
+          (showing?.paywall ? (
+            <span className="truncate">{showing.paywall.name}</span>
+          ) : (
+            <span className="text-muted-foreground">None</span>
+          ))}
+      </PropertyRow>
+
+      <PropertyRow label="Live version">
+        {showing?.paywallRelease ? (
+          <a
+            className="inline-flex items-center gap-1.5 underline-offset-4 hover:underline"
+            href={showing.paywallRelease.htmlUrl}
+            rel="noreferrer"
+            target="_blank"
+          >
+            v{showing.paywallRelease.version}
+            <ExternalLinkIcon className="size-3.5 text-muted-foreground" />
+          </a>
+        ) : (
+          <span className="text-muted-foreground">None</span>
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Description">
+        {location.description ? (
+          location.description
+        ) : (
+          <span className="text-muted-foreground">None</span>
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Created">
+        {location.createdAt ? (
+          formatDate(location.createdAt)
+        ) : (
+          <span className="text-muted-foreground">Unknown</span>
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Slug">
+        <span className="font-mono text-xs">{location.slug}</span>
+      </PropertyRow>
+    </dl>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx b/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
index 89ae1fc21..5d2bc22bc 100644
--- a/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
+++ b/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
@@ -43,7 +43,8 @@ interface EditPaywallLocationModalProps {
   onClose: () => void;
   open: boolean;
   projectId: string;
-  trigger: React.ReactNode;
+  /** Optional inline trigger; omit when the dialog is opened from elsewhere. */
+  trigger?: React.ReactNode;
 }
 
 export function EditPaywallLocationModal({
@@ -105,7 +106,7 @@ export function EditPaywallLocationModal({
 
   return (
     <Dialog onOpenChange={handleOpenChange} open={open}>
-      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      {trigger && <DialogTrigger asChild>{trigger}</DialogTrigger>}
       <DialogContent className="max-w-sm" hideCloseButton>
         <DialogHeader>
           <DialogTitle>Edit Paywall Location</DialogTitle>
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-combobox.tsx b/apps/www/src/features/studio/paywall-locations/paywall-combobox.tsx
new file mode 100644
index 000000000..a92096ce5
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/paywall-combobox.tsx
@@ -0,0 +1,142 @@
+"use client";
+
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import {
+  Combobox,
+  ComboboxContent,
+  ComboboxInput,
+  ComboboxItem,
+  ComboboxList,
+  ComboboxTrigger,
+} from "@voidhash/ui";
+import { type ReactElement, type RefObject, useMemo, useState } from "react";
+import { toast } from "sonner";
+import {
+  assignPaywallLocationShowingOptions,
+  listPaywallsOptions,
+  queryKeys,
+} from "@/features/studio/lib/tanstack-query";
+
+export interface PaywallComboboxProps {
+  /**
+   * Anchors the popup when there is no inline trigger to hang it off — used by
+   * the actions menu, which has closed by the time the combobox opens.
+   */
+  anchor?: RefObject<HTMLElement | null>;
+  currentPaywallId?: null | string;
+  locationId: string;
+  onOpenChange?: (open: boolean) => void;
+  open?: boolean;
+  projectId: string;
+  /** Inline element that opens the popup; omit when driving `open` externally. */
+  trigger?: ReactElement;
+}
+
+/**
+ * Combobox listing the project's paywalls. Picking one starts a new placement
+ * at this location, ending whichever placement was active — a location serves
+ * exactly one paywall at a time.
+ */
+export function PaywallCombobox({
+  anchor,
+  currentPaywallId,
+  locationId,
+  onOpenChange,
+  open,
+  projectId,
+  trigger,
+}: PaywallComboboxProps) {
+  const [uncontrolledOpen, setUncontrolledOpen] = useState(false);
+  const [query, setQuery] = useState("");
+  const isOpen = open ?? uncontrolledOpen;
+
+  const setOpen = (next: boolean) => {
+    setUncontrolledOpen(next);
+    onOpenChange?.(next);
+    if (!next) {
+      setQuery("");
+    }
+  };
+
+  const { data: paywalls = [] } = useQuery({
+    ...listPaywallsOptions({ projectId }),
+    enabled: isOpen,
+  });
+
+  const matches = useMemo(() => {
+    const needle = query.trim().toLowerCase();
+    if (needle.length === 0) {
+      return paywalls;
+    }
+    return paywalls.filter((paywall) =>
+      `${paywall.name} ${paywall.slug}`.toLowerCase().includes(needle),
+    );
+  }, [paywalls, query]);
+
+  const queryClient = useQueryClient();
+  const { mutate: assignShowing } = useMutation({
+    ...assignPaywallLocationShowingOptions(),
+    onError: (error) => {
+      toast.error(
+        error._tag === "EffectQueryFailure"
+          ? error.match({
+              "Rpc/ActionForbiddenError": (failure) => failure.message,
+              "Rpc/PaywallLocationNotFoundError": (failure) => failure.message,
+              "Rpc/PaywallLocationShowingValidationError": (failure) => failure.message,
+              "Rpc/PaywallNotFoundError": (failure) => failure.message,
+              OrElse: () => "Failed to change paywall",
+            })
+          : "Failed to change paywall",
+      );
+    },
+    onSuccess: async () => {
+      toast.success("Paywall changed");
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.list({ projectId }),
+      });
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.showings({ locationId }),
+      });
+      setOpen(false);
+    },
+  });
+
+  return (
+    // The search text is driven through the root's `inputValue` rather than the
+    // input element — Base UI owns that input's value, so controlling the
+    // element directly fights it. No `items` prop, so filtering stays ours.
+    <Combobox
+      inputValue={query}
+      onInputValueChange={setQuery}
+      onOpenChange={setOpen}
+      onValueChange={(paywallId: null | string) => {
+        if (paywallId == null || paywallId === currentPaywallId) {
+          setOpen(false);
+          return;
+        }
+        assignShowing({ locationId, paywallId, type: "paywall_release" });
+      }}
+      open={isOpen}
+      value={currentPaywallId ?? null}
+    >
+      {trigger && <ComboboxTrigger render={trigger} showChevron={false} />}
+      <ComboboxContent anchor={anchor}>
+        <ComboboxInput placeholder="Search paywalls..." showTrigger={false} />
+        <ComboboxList>
+          {matches.length === 0 ? (
+            <p className="py-2 text-center text-muted-foreground text-sm">No paywalls found.</p>
+          ) : (
+            matches.map((paywall) => (
+              <ComboboxItem key={paywall.id} value={paywall.id}>
+                <span className="truncate">{paywall.name}</span>
+                <span className="ml-auto truncate font-mono text-muted-foreground text-xs">
+                  {paywall.slug}
+                </span>
+              </ComboboxItem>
+            ))
+          )}
+        </ComboboxList>
+      </ComboboxContent>
+    </Combobox>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-location-actions-menu.tsx b/apps/www/src/features/studio/paywall-locations/paywall-location-actions-menu.tsx
new file mode 100644
index 000000000..92b7438d6
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/paywall-location-actions-menu.tsx
@@ -0,0 +1,188 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { RpcPaywallLocation } from "@voidhash/rpc";
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+  Button,
+  cn,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import {
+  ArchiveIcon,
+  CircleSlashIcon,
+  MoreHorizontalIcon,
+  PencilIcon,
+  RepeatIcon,
+} from "lucide-react";
+import { useRef, useState } from "react";
+import { toast } from "sonner";
+import {
+  archivePaywallLocationOptions,
+  clearPaywallLocationShowingOptions,
+  queryKeys,
+} from "@/features/studio/lib/tanstack-query";
+
+import { EditPaywallLocationModal } from "./edit-paywall-location-modal";
+import { PaywallCombobox } from "./paywall-combobox";
+
+interface PaywallLocationActionsMenuProps {
+  align?: "start" | "center" | "end";
+  location: typeof RpcPaywallLocation.Type;
+  triggerClassName?: string;
+  triggerVariant?: React.ComponentProps<typeof Button>["variant"];
+}
+
+/**
+ * Kebab menu of actions for a single paywall location — change which paywall it
+ * serves, end the current placement, edit its details, or archive it. Shared by
+ * the locations index table and the location detail screen.
+ */
+export function PaywallLocationActionsMenu({
+  align = "end",
+  location,
+  triggerClassName,
+  triggerVariant = "ghost",
+}: PaywallLocationActionsMenuProps) {
+  const queryClient = useQueryClient();
+  const [editOpen, setEditOpen] = useState(false);
+  const [pickerOpen, setPickerOpen] = useState(false);
+  const [archiveOpen, setArchiveOpen] = useState(false);
+  // The menu has closed by the time the combobox opens, so the popup anchors to
+  // the kebab itself — it appears where the click landed.
+  const triggerRef = useRef<HTMLButtonElement>(null);
+  const isArchived = location.archivedAt != null;
+  const projectId = location.projectId;
+
+  const invalidate = async () => {
+    await queryClient.invalidateQueries({
+      queryKey: queryKeys.paywallLocation.list({ projectId }),
+    });
+    await queryClient.invalidateQueries({
+      queryKey: queryKeys.paywallLocation.showings({ locationId: location.id }),
+    });
+  };
+
+  const { mutate: clearShowing, status: clearStatus } = useMutation({
+    ...clearPaywallLocationShowingOptions(),
+    onError: () => toast.error("Failed to end placement"),
+    onSuccess: async () => {
+      toast.success("Placement ended");
+      await invalidate();
+    },
+  });
+
+  const { mutate: archiveLocation, status: archiveStatus } = useMutation({
+    ...archivePaywallLocationOptions(),
+    onError: () => toast.error("Failed to archive location"),
+    onSuccess: async () => {
+      toast.success("Location archived");
+      await invalidate();
+      setArchiveOpen(false);
+    },
+  });
+
+  const isArchiving = archiveStatus === "pending";
+  const isMutating = clearStatus === "pending" || isArchiving;
+
+  return (
+    <>
+      <DropdownMenu>
+        <DropdownMenuTrigger asChild>
+          <Button
+            aria-label="Paywall location actions"
+            className={cn(triggerClassName)}
+            disabled={isMutating}
+            ref={triggerRef}
+            size="icon-sm"
+            variant={triggerVariant}
+          >
+            <MoreHorizontalIcon />
+          </Button>
+        </DropdownMenuTrigger>
+        {/* `DropdownMenuContent` sizes itself to the trigger, so an icon-sized
+            trigger collapses it to the shared `min-w-32` floor. */}
+        <DropdownMenuContent align={align} className="min-w-48">
+          <DropdownMenuItem disabled={isArchived} onSelect={() => setPickerOpen(true)}>
+            <RepeatIcon />
+            Change paywall
+          </DropdownMenuItem>
+          <DropdownMenuItem
+            disabled={isArchived || location.activeShowing == null}
+            onSelect={() => clearShowing({ locationId: location.id })}
+          >
+            <CircleSlashIcon />
+            End placement
+          </DropdownMenuItem>
+          <DropdownMenuItem disabled={isArchived} onSelect={() => setEditOpen(true)}>
+            <PencilIcon />
+            Edit details
+          </DropdownMenuItem>
+          <DropdownMenuSeparator />
+          <DropdownMenuItem
+            disabled={isArchived}
+            onSelect={() => setArchiveOpen(true)}
+            variant="destructive"
+          >
+            <ArchiveIcon />
+            Archive
+          </DropdownMenuItem>
+        </DropdownMenuContent>
+      </DropdownMenu>
+
+      <EditPaywallLocationModal
+        initialDescription={location.description}
+        initialName={location.name}
+        locationId={location.id}
+        onClose={() => setEditOpen(false)}
+        open={editOpen}
+        projectId={projectId}
+      />
+
+      <PaywallCombobox
+        anchor={triggerRef}
+        currentPaywallId={location.activeShowing?.paywallId}
+        locationId={location.id}
+        onOpenChange={setPickerOpen}
+        open={pickerOpen}
+        projectId={projectId}
+      />
+
+      <AlertDialog onOpenChange={setArchiveOpen} open={archiveOpen}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>Archive paywall location</AlertDialogTitle>
+            <AlertDialogDescription>
+              Archive <span className="font-medium">{location.name}</span>? Apps still asking for{" "}
+              <span className="font-mono text-xs">{location.slug}</span> will stop receiving a
+              paywall. Its placement history is kept.
+            </AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel disabled={isArchiving}>Cancel</AlertDialogCancel>
+            <AlertDialogAction
+              disabled={isArchiving}
+              onClick={(event) => {
+                event.preventDefault();
+                archiveLocation({ locationId: location.id });
+              }}
+            >
+              {isArchiving ? "Archiving..." : "Archive"}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+    </>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-location-paywall-cell.tsx b/apps/www/src/features/studio/paywall-locations/paywall-location-paywall-cell.tsx
new file mode 100644
index 000000000..bd748a26d
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/paywall-location-paywall-cell.tsx
@@ -0,0 +1,62 @@
+"use client";
+
+import { Link } from "@tanstack/react-router";
+import type { Paywall } from "@voidhash/rpc";
+import { HoverCard, HoverCardContent, HoverCardTrigger, Phone } from "@voidhash/ui";
+import { SmartphoneIcon } from "lucide-react";
+
+interface PaywallLocationPaywallCellProps {
+  organizationSlug: string;
+  /**
+   * The full paywall record — `activeShowing.paywall` carries only id/name/slug,
+   * so the thumbnail has to come from the project's paywall list.
+   */
+  paywall: typeof Paywall.Type;
+  projectSlug: string;
+  releaseVersion?: null | number;
+}
+
+/**
+ * The paywall a location currently serves, rendered as a link to that paywall's
+ * detail page. Hovering reveals a phone-framed thumbnail so the whole index can
+ * be scanned by name without giving every row the vertical space of a preview.
+ */
+export function PaywallLocationPaywallCell({
+  organizationSlug,
+  paywall,
+  projectSlug,
+  releaseVersion,
+}: PaywallLocationPaywallCellProps) {
+  return (
+    <HoverCard closeDelay={80} openDelay={160}>
+      <HoverCardTrigger asChild>
+        <Link
+          className="inline-flex max-w-56 items-baseline gap-2 truncate hover:underline"
+          params={{ id: paywall.id, organizationSlug, projectSlug }}
+          to="/studio/$organizationSlug/$projectSlug/paywalls/$id"
+        >
+          <span className="truncate">{paywall.name}</span>
+          {releaseVersion != null && (
+            <span className="shrink-0 text-muted-foreground text-xs tabular-nums">
+              v{releaseVersion}
+            </span>
+          )}
+        </Link>
+      </HoverCardTrigger>
+      <HoverCardContent align="start" className="w-52 p-2" side="right">
+        <Phone className="w-full" screenClassName="flex items-center justify-center bg-zinc-950">
+          {paywall.thumbnailUrl ? (
+            <img
+              alt={paywall.name}
+              className="size-full object-cover object-top"
+              loading="lazy"
+              src={paywall.thumbnailUrl}
+            />
+          ) : (
+            <SmartphoneIcon className="size-8 text-zinc-400 opacity-30" />
+          )}
+        </Phone>
+      </HoverCardContent>
+    </HoverCard>
+  );
+}
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx b/apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx
deleted file mode 100644
index 60f7ba433..000000000
--- a/apps/www/src/features/studio/paywall-locations/paywall-location-row.tsx
+++ /dev/null
@@ -1,232 +0,0 @@
-"use client";
-
-import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
-import type { Paywall, RpcPaywallLocation } from "@voidhash/rpc";
-import { Button } from "@voidhash/ui/button";
-import { useEffect, useState } from "react";
-import { toast } from "sonner";
-import {
-  archivePaywallLocationOptions,
-  assignPaywallLocationShowingOptions,
-  clearPaywallLocationShowingOptions,
-  listPaywallLocationShowingsOptions,
-  queryKeys,
-} from "@/features/studio/lib/tanstack-query";
-
-import { EditPaywallLocationModal } from "./edit-paywall-location-modal";
-
-const formatDate = (value: Date | null | undefined) => {
-  if (!value) {
-    return "-";
-  }
-
-  return new Intl.DateTimeFormat(undefined, {
-    dateStyle: "medium",
-    timeStyle: "short",
-  }).format(value);
-};
-
-interface PaywallLocationRowProps {
-  location: typeof RpcPaywallLocation.Type;
-  paywalls: ReadonlyArray<typeof Paywall.Type>;
-  projectId: string;
-}
-
-export function PaywallLocationRow({ location, paywalls, projectId }: PaywallLocationRowProps) {
-  const [editOpen, setEditOpen] = useState(false);
-  const [historyOpen, setHistoryOpen] = useState(false);
-  const [selectedPaywallId, setSelectedPaywallId] = useState(
-    location.activeShowing?.paywallId ?? "",
-  );
-
-  useEffect(() => {
-    setSelectedPaywallId(location.activeShowing?.paywallId ?? "");
-  }, [location.activeShowing?.paywallId]);
-
-  const queryClient = useQueryClient();
-
-  const { data: showings = [], isPending: isLoadingShowings } = useQuery({
-    ...listPaywallLocationShowingsOptions({
-      locationId: location.id,
-    }),
-    enabled: historyOpen,
-  });
-
-  const invalidateLocationQueries = async () => {
-    await queryClient.invalidateQueries({
-      queryKey: queryKeys.paywallLocation.list({ projectId }),
-    });
-    await queryClient.invalidateQueries({
-      queryKey: queryKeys.paywallLocation.showings({ locationId: location.id }),
-    });
-  };
-
-  const { mutate: assignShowing, status: assignStatus } = useMutation({
-    ...assignPaywallLocationShowingOptions(),
-    onError: () => {
-      toast.error("Failed to assign paywall showing");
-    },
-    onSuccess: async () => {
-      toast.success("Paywall showing assigned");
-      await invalidateLocationQueries();
-    },
-  });
-
-  const { mutate: clearShowing, status: clearStatus } = useMutation({
-    ...clearPaywallLocationShowingOptions(),
-    onError: () => {
-      toast.error("Failed to clear paywall showing");
-    },
-    onSuccess: async () => {
-      toast.success("Paywall showing cleared");
-      await invalidateLocationQueries();
-    },
-  });
-
-  const { mutate: archiveLocation, status: archiveStatus } = useMutation({
-    ...archivePaywallLocationOptions(),
-    onError: () => {
-      toast.error("Failed to archive location");
-    },
-    onSuccess: async () => {
-      toast.success("Location archived");
-      await invalidateLocationQueries();
-    },
-  });
-
-  const isMutating =
-    assignStatus === "pending" || clearStatus === "pending" || archiveStatus === "pending";
-
-  const activePaywallLabel =
-    location.activeShowing?.paywall?.name ?? location.activeShowing?.paywallId;
-
-  const activeReleaseLabel = location.activeShowing?.paywallRelease
-    ? `v${location.activeShowing.paywallRelease.version}`
-    : null;
-
-  return (
-    <div className="space-y-3 px-4 py-4">
-      <div className="flex flex-wrap items-start justify-between gap-3">
-        <div>
-          <div className="flex items-center gap-2">
-            <div className="font-medium">{location.name}</div>
-            {location.archivedAt ? (
-              <span className="rounded border px-2 py-0.5 text-xs">Archived</span>
-            ) : null}
-          </div>
-          <div className="mt-0.5 font-mono text-muted-foreground text-sm">{location.slug}</div>
-          {location.description ? (
-            <p className="mt-1 text-muted-foreground text-sm">{location.description}</p>
-          ) : null}
-          <p className="mt-2 text-muted-foreground text-xs">
-            Active: {activePaywallLabel ?? "none"}
-            {activeReleaseLabel ? ` (${activeReleaseLabel})` : ""}
-          </p>
-        </div>
-
-        <div className="flex flex-wrap gap-2">
-          <EditPaywallLocationModal
-            initialDescription={location.description}
-            initialName={location.name}
-            locationId={location.id}
-            onClose={() => setEditOpen(false)}
-            open={editOpen}
-            projectId={projectId}
-            trigger={
-              <Button
-                disabled={location.archivedAt !== null}
-                size="sm"
-                variant="outline"
-                onClick={() => setEditOpen(true)}
-              >
-                Edit
-              </Button>
-            }
-          />
-          <Button size="sm" variant="outline" onClick={() => setHistoryOpen((current) => !current)}>
-            {historyOpen ? "Hide History" : "Show History"}
-          </Button>
-          <Button
-            disabled={isMutating || location.archivedAt !== null}
-            size="sm"
-            variant="outline"
-            onClick={() => archiveLocation({ locationId: location.id })}
-          >
-            Archive
-          </Button>
-        </div>
-      </div>
-
-      <div className="flex flex-wrap items-center gap-2">
-        <select
-          className="h-9 min-w-56 rounded-md border bg-background px-3 text-sm"
-          disabled={location.archivedAt !== null || isMutating}
-          value={selectedPaywallId}
-          onChange={(event) => setSelectedPaywallId(event.target.value)}
-        >
-          <option value="">Select paywall</option>
-          {paywalls.map((paywall) => (
-            <option key={paywall.id} value={paywall.id}>
-              {paywall.name} ({paywall.slug})
-            </option>
-          ))}
-        </select>
-        <Button
-          disabled={location.archivedAt !== null || isMutating || selectedPaywallId.length === 0}
-          size="sm"
-          onClick={() =>
-            assignShowing({
-              locationId: location.id,
-              paywallId: selectedPaywallId,
-              type: "paywall_release",
-            })
-          }
-        >
-          Assign
-        </Button>
-        <Button
-          disabled={location.archivedAt !== null || isMutating || location.activeShowing === null}
-          size="sm"
-          variant="outline"
-          onClick={() => clearShowing({ locationId: location.id })}
-        >
-          Clear
-        </Button>
-      </div>
-
-      {historyOpen ? (
-        <div className="rounded-md border">
-          {isLoadingShowings ? (
-            <div className="px-3 py-2 text-muted-foreground text-sm">Loading history...</div>
-          ) : showings.length === 0 ? (
-            <div className="px-3 py-2 text-muted-foreground text-sm">No showing history yet.</div>
-          ) : (
-            <div className="divide-y">
-              {showings.map((showing) => {
-                const showingPaywallLabel =
-                  showing.paywall?.name ?? showing.paywallId ?? "Unknown paywall";
-                const showingReleaseLabel = showing.paywallRelease
-                  ? `v${showing.paywallRelease.version}`
-                  : "";
-
-                return (
-                  <div className="space-y-1 px-3 py-2 text-sm" key={showing.id}>
-                    <div className="font-medium">
-                      {showingPaywallLabel} {showingReleaseLabel}
-                    </div>
-                    <div className="text-muted-foreground text-xs">
-                      Started: {formatDate(showing.startedAt)}
-                    </div>
-                    <div className="text-muted-foreground text-xs">
-                      Ended: {formatDate(showing.endedAt)}
-                    </div>
-                  </div>
-                );
-              })}
-            </div>
-          )}
-        </div>
-      ) : null}
-    </div>
-  );
-}
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-locations-table.tsx b/apps/www/src/features/studio/paywall-locations/paywall-locations-table.tsx
new file mode 100644
index 000000000..4b3182cf0
--- /dev/null
+++ b/apps/www/src/features/studio/paywall-locations/paywall-locations-table.tsx
@@ -0,0 +1,273 @@
+"use client";
+
+import { Link, useNavigate } from "@tanstack/react-router";
+import type { Paywall, RpcPaywallLocation } from "@voidhash/rpc";
+import {
+  cn,
+  Skeleton,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+  TooltipContent,
+  TooltipProvider,
+  TooltipRoot,
+  TooltipTrigger,
+} from "@voidhash/ui";
+import { CircleHelpIcon } from "lucide-react";
+
+import type { PaywallLocationMetrics } from "./analytics/paywall-location-metrics";
+import { PaywallLocationActionsMenu } from "./paywall-location-actions-menu";
+import { PaywallLocationPaywallCell } from "./paywall-location-paywall-cell";
+
+// Money-carrying events are emitted server-side from provider webhooks and
+// carry no paywall identity, so none of these can be scoped to a location yet.
+// They render as em-dashes until the attribution work in
+// docs/paywall-revenue-attribution.md lands.
+const UNATTRIBUTED_SUFFIX =
+  " Not available yet — revenue events aren't attributed to a paywall location.";
+
+interface MetricColumn {
+  info: string;
+  key: string;
+  label: string;
+  /** Reads a value off the row's metrics; absent while unattributed. */
+  value?: (metrics: PaywallLocationMetrics) => string;
+}
+
+const METRIC_COLUMNS: MetricColumn[] = [
+  {
+    info: `Gross amount charged to customers, before store commission and tax.${UNATTRIBUTED_SUFFIX}`,
+    key: "revenue",
+    label: "Revenue",
+  },
+  {
+    info: `Revenue after the app store's commission.${UNATTRIBUTED_SUFFIX}`,
+    key: "proceeds",
+    label: "Proceeds",
+  },
+  {
+    info: `Proceeds after both store commission and tax.${UNATTRIBUTED_SUFFIX}`,
+    key: "netProceeds",
+    label: "Net proceeds",
+  },
+  {
+    info: "Times a paywall was shown at this location.",
+    key: "views",
+    label: "Views",
+    value: (metrics) => metrics.views.toLocaleString(),
+  },
+  {
+    info: "Distinct users who saw a paywall at this location.",
+    key: "viewers",
+    label: "Unique viewers",
+    value: (metrics) => metrics.viewers.toLocaleString(),
+  },
+  {
+    info: "Purchases completed after seeing a paywall at this location.",
+    key: "purchases",
+    label: "Purchases",
+    value: (metrics) => metrics.purchases.toLocaleString(),
+  },
+  {
+    info: "Share of viewers who went on to purchase within 7 days.",
+    key: "conversion",
+    label: "Conversion",
+    value: (metrics) => `${(metrics.conversion * 100).toFixed(1)}%`,
+  },
+  {
+    info: `Free trials started from this location.${UNATTRIBUTED_SUFFIX}`,
+    key: "trials",
+    label: "Trials",
+  },
+  {
+    info: `Purchases from this location that were later refunded.${UNATTRIBUTED_SUFFIX}`,
+    key: "refunds",
+    label: "Refunds",
+  },
+];
+
+// `TooltipRoot` (not `Tooltip`) because the header mounts one per metric column
+// and they share the single provider wrapping the header row.
+function MetricHead({ column }: { column: MetricColumn }) {
+  return (
+    <TableHead className="text-right">
+      <span className="inline-flex items-center gap-1.5">
+        <TooltipRoot>
+          <TooltipTrigger className="cursor-help">
+            <CircleHelpIcon className="size-3.5 opacity-60" />
+          </TooltipTrigger>
+          <TooltipContent className="max-w-64">{column.info}</TooltipContent>
+        </TooltipRoot>
+        {column.label}
+      </span>
+    </TableHead>
+  );
+}
+
+// The table is wider than its container, so the name and actions columns pin to
+// the edges while the metrics scroll between them. Pinned cells need an opaque
+// background of their own — the table's own `bg-card` sits *below* the cells
+// that scroll underneath, so a transparent pinned cell would show them through.
+// `isolate` + a `-z-10` overlay reproduces the row's translucent hover tint over
+// that opaque base without washing over the cell's text.
+const PINNED_CELL =
+  "sticky isolate z-20 bg-card after:absolute after:inset-0 after:-z-10 after:bg-muted/40 after:opacity-0 group-hover/row:after:opacity-100";
+const PINNED_START = `${PINNED_CELL} left-0 border-border/60 border-r`;
+const PINNED_END = `${PINNED_CELL} right-0 border-border/60 border-l`;
+
+type ActivationState = "archived" | "empty" | "live";
+
+const ACTIVATION_PRESENTATION: Record<ActivationState, { dotClassName: string; label: string }> = {
+  archived: { dotClassName: "bg-muted-foreground/50", label: "Archived" },
+  empty: { dotClassName: "bg-muted-foreground/50", label: "Empty" },
+  live: { dotClassName: "bg-emerald-500", label: "Live" },
+};
+
+export interface PaywallLocationsTableProps {
+  isMetricsPending: boolean;
+  locations: readonly (typeof RpcPaywallLocation.Type)[];
+  metricsFor: (locationSlug: string) => PaywallLocationMetrics;
+  organizationSlug: string;
+  /** Full paywall records by id, for the hover preview's thumbnail. */
+  paywallsById: ReadonlyMap<string, typeof Paywall.Type>;
+  projectSlug: string;
+}
+
+/**
+ * The paywall locations index: one row per location showing what it serves and
+ * how that placement performs. Wide enough to scroll horizontally rather than
+ * squeeze the metric columns.
+ */
+export function PaywallLocationsTable({
+  isMetricsPending,
+  locations,
+  metricsFor,
+  organizationSlug,
+  paywallsById,
+  projectSlug,
+}: PaywallLocationsTableProps) {
+  return (
+    // One provider for the whole header — mounted outside the table so it never
+    // introduces a node between <thead> and <tr>.
+    <TooltipProvider>
+      {/* `overscroll-x-contain` stops the scroll from chaining to the `<main>`
+          element behind it, which is itself an x-scroller — without it, hitting
+          either end rubber-bands the page and the pinned columns jitter. */}
+      <Table containerClassName="overflow-x-auto overscroll-x-contain">
+        <TableHeader>
+          <TableRow>
+            <TableHead className={cn(PINNED_START, "min-w-44")}>Paywall location</TableHead>
+            <TableHead className="min-w-32">Slug</TableHead>
+            <TableHead className="min-w-40">Paywall</TableHead>
+            {METRIC_COLUMNS.map((column) => (
+              <MetricHead column={column} key={column.key} />
+            ))}
+            <TableHead>Activation state</TableHead>
+            <TableHead className={cn(PINNED_END, "w-0")} />
+          </TableRow>
+        </TableHeader>
+        <TableBody>
+          {locations.map((location) => (
+            <PaywallLocationsTableRow
+              isMetricsPending={isMetricsPending}
+              key={location.id}
+              location={location}
+              metrics={metricsFor(location.slug)}
+              organizationSlug={organizationSlug}
+              paywallsById={paywallsById}
+              projectSlug={projectSlug}
+            />
+          ))}
+        </TableBody>
+      </Table>
+    </TooltipProvider>
+  );
+}
+
+interface PaywallLocationsTableRowProps {
+  isMetricsPending: boolean;
+  location: typeof RpcPaywallLocation.Type;
+  metrics: PaywallLocationMetrics;
+  organizationSlug: string;
+  paywallsById: ReadonlyMap<string, typeof Paywall.Type>;
+  projectSlug: string;
+}
+
+function PaywallLocationsTableRow({
+  isMetricsPending,
+  location,
+  metrics,
+  organizationSlug,
+  paywallsById,
+  projectSlug,
+}: PaywallLocationsTableRowProps) {
+  const navigate = useNavigate();
+  const isArchived = location.archivedAt != null;
+  const showingPaywallId = location.activeShowing?.paywallId;
+  const showingPaywall = showingPaywallId == null ? undefined : paywallsById.get(showingPaywallId);
+  const activation: ActivationState = isArchived ? "archived" : showingPaywall ? "live" : "empty";
+  const { dotClassName, label } = ACTIVATION_PRESENTATION[activation];
+  const detailLink = {
+    params: { id: location.id, organizationSlug, projectSlug },
+    to: "/studio/$organizationSlug/$projectSlug/settings/paywall-locations/$id",
+  } as const;
+
+  return (
+    <TableRow
+      className={cn("group/row cursor-pointer", isArchived && "opacity-60")}
+      // The whole row opens the location. The name stays a real link so the row
+      // is still keyboard-reachable and middle-clickable; the paywall link and
+      // the kebab menu own their own clicks, so anything nested opts out here.
+      onClick={(event) => {
+        if ((event.target as HTMLElement).closest("a,button")) {
+          return;
+        }
+        void navigate(detailLink);
+      }}
+    >
+      <TableCell className={PINNED_START}>
+        <Link className="font-medium hover:underline" {...detailLink}>
+          {location.name}
+        </Link>
+      </TableCell>
+      <TableCell className="font-mono text-muted-foreground text-xs">{location.slug}</TableCell>
+      <TableCell>
+        {showingPaywall ? (
+          <PaywallLocationPaywallCell
+            organizationSlug={organizationSlug}
+            paywall={showingPaywall}
+            projectSlug={projectSlug}
+            releaseVersion={location.activeShowing?.paywallRelease?.version}
+          />
+        ) : (
+          <span className="text-muted-foreground">—</span>
+        )}
+      </TableCell>
+
+      {METRIC_COLUMNS.map((column) => (
+        <TableCell className="text-right tabular-nums" key={column.key}>
+          {!column.value ? (
+            <span className="text-muted-foreground">—</span>
+          ) : isMetricsPending ? (
+            <Skeleton className="ml-auto h-4 w-10" />
+          ) : (
+            column.value(metrics)
+          )}
+        </TableCell>
+      ))}
+
+      <TableCell>
+        <span className="inline-flex items-center gap-2">
+          <span aria-hidden="true" className={cn("size-2 rounded-full", dotClassName)} />
+          {label}
+        </span>
+      </TableCell>
+      <TableCell className={cn(PINNED_END, "text-right")}>
+        <PaywallLocationActionsMenu location={location} />
+      </TableCell>
+    </TableRow>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx
index 7a6f0356b..4344db07b 100644
--- a/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx
@@ -3,9 +3,8 @@
 import type { RpcPaywallLocation } from "@voidhash/rpc";
 import { Button } from "@voidhash/ui";
 import { MapPinIcon, PlusIcon } from "lucide-react";
-import { useState } from "react";
 
-import { PaywallPlacementPickerDialog } from "./paywall-placement-picker-dialog";
+import { PaywallLocationCombobox } from "./paywall-location-combobox";
 
 export interface PaywallDetailPlacementsProps {
   locations: readonly (typeof RpcPaywallLocation.Type)[];
@@ -24,7 +23,6 @@ export function PaywallDetailPlacements({
   paywallId,
   projectId,
 }: PaywallDetailPlacementsProps) {
-  const [pickerOpen, setPickerOpen] = useState(false);
   const placements = locations.filter(
     (location) => location.activeShowing?.paywallId === paywallId,
   );
@@ -32,26 +30,31 @@ export function PaywallDetailPlacements({
   return (
     <section className="space-y-3">
       {placements.length === 0 ? (
-        <Button
-          className="-ml-2.5 text-muted-foreground"
-          onClick={() => setPickerOpen(true)}
-          variant="ghost"
-        >
-          <PlusIcon />
-          Place at a paywall location
-        </Button>
+        <PaywallLocationCombobox
+          locations={locations}
+          paywallId={paywallId}
+          projectId={projectId}
+          trigger={
+            <Button className="-ml-2.5 text-muted-foreground" variant="ghost">
+              <PlusIcon />
+              Place at a paywall location
+            </Button>
+          }
+        />
       ) : (
         <>
           <div className="flex items-center justify-between gap-4">
             <h2 className="font-medium text-sm">Placements</h2>
-            <Button
-              aria-label="Add placement"
-              onClick={() => setPickerOpen(true)}
-              size="icon-sm"
-              variant="ghost"
-            >
-              <PlusIcon />
-            </Button>
+            <PaywallLocationCombobox
+              locations={locations}
+              paywallId={paywallId}
+              projectId={projectId}
+              trigger={
+                <Button aria-label="Add placement" size="icon-sm" variant="ghost">
+                  <PlusIcon />
+                </Button>
+              }
+            />
           </div>
 
           <ul className="divide-y divide-border/60 border-border/60 border-y">
@@ -74,14 +77,6 @@ export function PaywallDetailPlacements({
           </ul>
         </>
       )}
-
-      <PaywallPlacementPickerDialog
-        locations={locations}
-        onOpenChange={setPickerOpen}
-        open={pickerOpen}
-        paywallId={paywallId}
-        projectId={projectId}
-      />
     </section>
   );
 }
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-location-combobox.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-location-combobox.tsx
new file mode 100644
index 000000000..343faaa5c
--- /dev/null
+++ b/apps/www/src/features/studio/paywalls/detail/paywall-location-combobox.tsx
@@ -0,0 +1,144 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { RpcPaywallLocation } from "@voidhash/rpc";
+import {
+  Combobox,
+  ComboboxContent,
+  ComboboxInput,
+  ComboboxItem,
+  ComboboxList,
+  ComboboxTrigger,
+} from "@voidhash/ui";
+import { type ReactElement, useMemo, useState } from "react";
+import { toast } from "sonner";
+import {
+  assignPaywallLocationShowingOptions,
+  queryKeys,
+} from "@/features/studio/lib/tanstack-query";
+
+export interface PaywallLocationComboboxProps {
+  locations: readonly (typeof RpcPaywallLocation.Type)[];
+  paywallId: string;
+  projectId: string;
+  /** Inline element that opens the popup. */
+  trigger: ReactElement;
+}
+
+/**
+ * Combobox listing every paywall location in the project. Picking one points
+ * that location at this paywall, replacing whatever it was showing.
+ */
+export function PaywallLocationCombobox({
+  locations,
+  paywallId,
+  projectId,
+  trigger,
+}: PaywallLocationComboboxProps) {
+  const [open, setOpen] = useState(false);
+  const [query, setQuery] = useState("");
+
+  const changeOpen = (next: boolean) => {
+    setOpen(next);
+    if (!next) {
+      setQuery("");
+    }
+  };
+
+  const matches = useMemo(() => {
+    const needle = query.trim().toLowerCase();
+    if (needle.length === 0) {
+      return locations;
+    }
+    return locations.filter((location) =>
+      `${location.name} ${location.slug}`.toLowerCase().includes(needle),
+    );
+  }, [locations, query]);
+
+  const queryClient = useQueryClient();
+  const { mutate: assignShowing } = useMutation({
+    ...assignPaywallLocationShowingOptions(),
+    onError: (error) => {
+      toast.error(
+        error._tag === "EffectQueryFailure"
+          ? error.match({
+              "Rpc/ActionForbiddenError": (failure) => failure.message,
+              "Rpc/PaywallLocationNotFoundError": (failure) => failure.message,
+              "Rpc/PaywallLocationShowingValidationError": (failure) => failure.message,
+              "Rpc/PaywallNotFoundError": (failure) => failure.message,
+              OrElse: () => "Failed to add placement",
+            })
+          : "Failed to add placement",
+      );
+    },
+    onSuccess: async (_, variables) => {
+      toast.success("Placement added");
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.list({ projectId }),
+      });
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.paywallLocation.showings({ locationId: variables.locationId }),
+      });
+      changeOpen(false);
+    },
+  });
+
+  return (
+    // The search text is driven through the root's `inputValue` rather than the
+    // input element — Base UI owns that input's value, so controlling the
+    // element directly fights it. No `items` prop, so filtering stays ours.
+    <Combobox
+      inputValue={query}
+      onInputValueChange={setQuery}
+      onOpenChange={changeOpen}
+      onValueChange={(locationId: null | string) => {
+        if (locationId == null) {
+          return;
+        }
+        const location = locations.find((item) => item.id === locationId);
+        if (location?.activeShowing?.paywallId === paywallId) {
+          changeOpen(false);
+          return;
+        }
+        assignShowing({ locationId, paywallId, type: "paywall_release" });
+      }}
+      open={open}
+      value={null}
+    >
+      <ComboboxTrigger render={trigger} showChevron={false} />
+      <ComboboxContent>
+        <ComboboxInput placeholder="Search locations..." showTrigger={false} />
+        <ComboboxList>
+          {matches.length === 0 ? (
+            <p className="py-2 text-center text-muted-foreground text-sm">No locations found.</p>
+          ) : (
+            matches.map((location) => {
+              const isCurrent = location.activeShowing?.paywallId === paywallId;
+              const showingName = location.activeShowing?.paywall?.name;
+
+              return (
+                <ComboboxItem key={location.id} value={location.id}>
+                  <span className="flex min-w-0 flex-col">
+                    <span className="flex items-center gap-2">
+                      <span className="truncate">{location.name}</span>
+                      <span className="truncate font-mono text-muted-foreground text-xs">
+                        {location.slug}
+                      </span>
+                    </span>
+                    <span className="truncate text-muted-foreground text-xs">
+                      {isCurrent
+                        ? "Already showing this paywall"
+                        : showingName
+                          ? `Currently showing ${showingName}`
+                          : "Empty"}
+                    </span>
+                  </span>
+                </ComboboxItem>
+              );
+            })
+          )}
+        </ComboboxList>
+      </ComboboxContent>
+    </Combobox>
+  );
+}
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx b/apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx
deleted file mode 100644
index a553ff406..000000000
--- a/apps/www/src/features/studio/paywalls/detail/paywall-placement-picker-dialog.tsx
+++ /dev/null
@@ -1,130 +0,0 @@
-"use client";
-
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import type { RpcPaywallLocation } from "@voidhash/rpc";
-import {
-  CommandDialog,
-  CommandEmpty,
-  CommandGroup,
-  CommandInput,
-  CommandItem,
-  CommandList,
-} from "@voidhash/ui";
-import { CheckIcon } from "lucide-react";
-import { toast } from "sonner";
-import {
-  assignPaywallLocationShowingOptions,
-  queryKeys,
-} from "@/features/studio/lib/tanstack-query";
-
-export interface PaywallPlacementPickerDialogProps {
-  locations: readonly (typeof RpcPaywallLocation.Type)[];
-  onOpenChange: (open: boolean) => void;
-  open: boolean;
-  paywallId: string;
-  projectId: string;
-}
-
-/**
- * Command palette that lists every paywall location in the project. Picking one
- * points that location at this paywall, replacing whatever it was showing —
- * a location serves exactly one paywall at a time.
- */
-export function PaywallPlacementPickerDialog({
-  locations,
-  onOpenChange,
-  open,
-  paywallId,
-  projectId,
-}: PaywallPlacementPickerDialogProps) {
-  const queryClient = useQueryClient();
-
-  const { mutate: assignShowing, status } = useMutation({
-    ...assignPaywallLocationShowingOptions(),
-    onError: (error) => {
-      toast.error(
-        error._tag === "EffectQueryFailure"
-          ? error.match({
-              "Rpc/ActionForbiddenError": (failure) => failure.message,
-              "Rpc/PaywallLocationNotFoundError": (failure) => failure.message,
-              "Rpc/PaywallLocationShowingValidationError": (failure) => failure.message,
-              "Rpc/PaywallNotFoundError": (failure) => failure.message,
-              OrElse: () => "Failed to add placement",
-            })
-          : "Failed to add placement",
-      );
-    },
-    onSuccess: async (_, variables) => {
-      toast.success("Placement added");
-      await queryClient.invalidateQueries({
-        queryKey: queryKeys.paywallLocation.list({ projectId }),
-      });
-      await queryClient.invalidateQueries({
-        queryKey: queryKeys.paywallLocation.showings({ locationId: variables.locationId }),
-      });
-      onOpenChange(false);
-    },
-  });
-
-  const isPending = status === "pending";
-
-  return (
-    <CommandDialog
-      description="Pick a location to show this paywall at."
-      onOpenChange={(next) => {
-        if (!isPending) {
-          onOpenChange(next);
-        }
-      }}
-      open={open}
-      title="Add placement"
-    >
-      <CommandInput placeholder="Search locations..." />
-      <CommandList>
-        <CommandEmpty>No locations found.</CommandEmpty>
-        <CommandGroup heading="Locations">
-          {locations.map((location) => {
-            const isCurrent = location.activeShowing?.paywallId === paywallId;
-            const showingName = location.activeShowing?.paywall?.name;
-
-            return (
-              <CommandItem
-                disabled={isPending}
-                key={location.id}
-                onSelect={() => {
-                  if (isCurrent) {
-                    onOpenChange(false);
-                    return;
-                  }
-                  assignShowing({
-                    locationId: location.id,
-                    paywallId,
-                    type: "paywall_release",
-                  });
-                }}
-                value={`${location.name} ${location.slug}`}
-              >
-                <div className="flex min-w-0 flex-1 flex-col">
-                  <span className="flex items-center gap-2">
-                    <span className="truncate">{location.name}</span>
-                    <span className="truncate font-mono text-muted-foreground text-xs">
-                      {location.slug}
-                    </span>
-                  </span>
-                  <span className="truncate text-muted-foreground text-xs">
-                    {isCurrent
-                      ? "Already showing this paywall"
-                      : showingName
-                        ? `Currently showing ${showingName}`
-                        : "Empty"}
-                  </span>
-                </div>
-                {isCurrent && <CheckIcon className="shrink-0" />}
-              </CommandItem>
-            );
-          })}
-        </CommandGroup>
-      </CommandList>
-    </CommandDialog>
-  );
-}
diff --git a/apps/www/src/routeTree.gen.ts b/apps/www/src/routeTree.gen.ts
index 5bd69f9ac..febcd1894 100644
--- a/apps/www/src/routeTree.gen.ts
+++ b/apps/www/src/routeTree.gen.ts
@@ -57,7 +57,6 @@ import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlug
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index'
 import { Route as StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks'
-import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id'
@@ -74,8 +73,10 @@ import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlug
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivitySentNotificationsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.sent-notifications'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugActivityEventsRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/activity.events'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.index'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.index'
+import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers.$paymentProviderConfigurationId'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications.$providerConfigurationId'
 import { Route as StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRouteImport } from './routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks.$endpointId.index'
@@ -377,15 +378,6 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerk
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
-const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute =
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRouteImport.update(
-    {
-      id: '/settings/paywall-locations',
-      path: '/settings/paywall-locations',
-      getParentRoute: () =>
-        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
-    } as any,
-  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRouteImport.update(
     {
@@ -530,6 +522,15 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebh
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRouteImport.update(
+    {
+      id: '/settings/paywall-locations/',
+      path: '/settings/paywall-locations/',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRouteImport.update(
     {
@@ -548,6 +549,15 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNoti
         StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
     } as any,
   )
+const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute =
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRouteImport.update(
+    {
+      id: '/settings/paywall-locations/$id',
+      path: '/settings/paywall-locations/$id',
+      getParentRoute: () =>
+        StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute,
+    } as any,
+  )
 const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute =
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRouteImport.update(
     {
@@ -638,7 +648,6 @@ export interface FileRoutesByFullPath {
   '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
-  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   '/studio/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
   '/studio/$organizationSlug/~/settings/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
   '/studio/$organizationSlug/$projectSlug/experiments/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
@@ -649,8 +658,10 @@ export interface FileRoutesByFullPath {
   '/studio/$organizationSlug/$projectSlug/settings/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/notifications/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/payment-providers/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/webhooks/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
@@ -702,7 +713,6 @@ export interface FileRoutesByTo {
   '/studio/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
-  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   '/studio/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
   '/studio/$organizationSlug/~/settings': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
   '/studio/$organizationSlug/$projectSlug/experiments': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
@@ -713,8 +723,10 @@ export interface FileRoutesByTo {
   '/studio/$organizationSlug/$projectSlug/settings': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/notifications': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/payment-providers': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  '/studio/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/webhooks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
   '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
   '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
@@ -776,7 +788,6 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
-  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
   '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/': typeof StudioAuthenticatedDashboardOrganizationOrganizationSlugChar126SettingsIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
@@ -787,8 +798,10 @@ export interface FileRoutesById {
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/$id': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
   '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/': typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
@@ -848,7 +861,6 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/$organizationSlug/$projectSlug/products/$id'
     | '/studio/$organizationSlug/$projectSlug/settings/api-keys'
-    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
     | '/studio/$organizationSlug/$projectSlug/settings/perks'
     | '/studio/$organizationSlug/~/settings/'
     | '/studio/$organizationSlug/$projectSlug/experiments/'
@@ -859,8 +871,10 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/settings/'
     | '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
     | '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/$id'
     | '/studio/$organizationSlug/$projectSlug/settings/notifications/'
     | '/studio/$organizationSlug/$projectSlug/settings/payment-providers/'
+    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/'
     | '/studio/$organizationSlug/$projectSlug/settings/webhooks/'
     | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
     | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/'
@@ -912,7 +926,6 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/$organizationSlug/$projectSlug/products/$id'
     | '/studio/$organizationSlug/$projectSlug/settings/api-keys'
-    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
     | '/studio/$organizationSlug/$projectSlug/settings/perks'
     | '/studio/$organizationSlug/~/settings'
     | '/studio/$organizationSlug/$projectSlug/experiments'
@@ -923,8 +936,10 @@ export interface FileRouteTypes {
     | '/studio/$organizationSlug/$projectSlug/settings'
     | '/studio/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
     | '/studio/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/$id'
     | '/studio/$organizationSlug/$projectSlug/settings/notifications'
     | '/studio/$organizationSlug/$projectSlug/settings/payment-providers'
+    | '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
     | '/studio/$organizationSlug/$projectSlug/settings/webhooks'
     | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
     | '/studio/$organizationSlug/$projectSlug/settings/webhooks/$endpointId'
@@ -985,7 +1000,6 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/products/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
-    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/perks'
     | '/studio/_authenticated/_dashboard/_organization/$organizationSlug/~/settings/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/'
@@ -996,8 +1010,10 @@ export interface FileRouteTypes {
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/$providerConfigurationId'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/$id'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/notifications/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/'
+    | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/$deliveryId'
     | '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/webhooks/$endpointId/'
@@ -1358,13 +1374,6 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
-    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations': {
-      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations'
-      path: '/settings/paywall-locations'
-      fullPath: '/studio/$organizationSlug/$projectSlug/settings/paywall-locations'
-      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRouteImport
-      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
-    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/api-keys'
       path: '/settings/api-keys'
@@ -1477,6 +1486,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/'
+      path: '/settings/paywall-locations'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/'
       path: '/settings/payment-providers'
@@ -1491,6 +1507,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRouteImport
       parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
     }
+    '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/$id': {
+      id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/$id'
+      path: '/settings/paywall-locations/$id'
+      fullPath: '/studio/$organizationSlug/$projectSlug/settings/paywall-locations/$id'
+      preLoaderRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRouteImport
+      parentRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRoute
+    }
     '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId': {
       id: '/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/payment-providers/$paymentProviderConfigurationId'
       path: '/settings/payment-providers/$paymentProviderConfigurationId'
@@ -1630,7 +1653,6 @@ interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRou
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugPersonsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute
-  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugFlagsIndexRoute
@@ -1640,8 +1662,10 @@ interface StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRou
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute
+  StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute
   StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute: typeof StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdIndexRoute
@@ -1683,8 +1707,6 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteCh
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugProductsIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsApiKeysRoute,
-    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute:
-      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPerksRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugExperimentsIndexRoute:
@@ -1703,10 +1725,14 @@ const StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugRouteRouteCh
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsProviderConfigurationIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersPaymentProviderConfigurationIdRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIdRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsNotificationsIndexRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaymentProvidersIndexRoute,
+    StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute:
+      StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsPaywallLocationsIndexRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute:
       StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksIndexRoute,
     StudioAuthenticatedDashboardProjectOrganizationSlugProjectSlugSettingsWebhooksEndpointIdDeliveryIdRoute:
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
index e32e687eb..ffe87eecf 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
@@ -15,9 +15,9 @@ import {
 import { ExternalLinkIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
+import { PaywallLocationStats } from "@/features/studio/paywall-locations/analytics/paywall-location-stats";
 import { PaywallDetailPlacements } from "@/features/studio/paywalls/detail/paywall-detail-placements";
 import { PaywallDetailProperties } from "@/features/studio/paywalls/detail/paywall-detail-properties";
-import { PaywallDetailStats } from "@/features/studio/paywalls/detail/paywall-detail-stats";
 import { PaywallPhonePreview } from "@/features/studio/paywalls/detail/paywall-phone-preview";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import { listPaywallLocationsOptions } from "@/features/studio/lib/tanstack-query/paywall-locations";
@@ -147,7 +147,10 @@ function PaywallDetailPage() {
               projectId={project.id}
             />
 
-            <PaywallDetailStats
+            <PaywallLocationStats
+              description="Events captured at locations currently showing this paywall."
+              emptyDescription="Assign this paywall to a location to start collecting stats."
+              emptyTitle="Not live yet"
               locationSlugs={liveLocations.map((location) => location.slug)}
               projectId={project.id}
             />
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
index d5ab8473e..652145e34 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -1,5 +1,6 @@
 import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
 import {
   cn,
   Page,
@@ -10,6 +11,7 @@ import {
   ToggleGroupItem,
 } from "@voidhash/ui";
 import { useRef, useState } from "react";
+import { z } from "zod";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { CreatePaywallButton } from "@/features/studio/paywalls/create-paywall-button";
@@ -39,12 +41,28 @@ const PAYWALL_TABS = [
 
 type PaywallTab = (typeof PAYWALL_TABS)[number]["value"];
 
+const DEFAULT_PAYWALL_TAB: PaywallTab = "active";
+
+const isPaywallTab = (value: string): value is PaywallTab =>
+  PAYWALL_TABS.some((item) => item.value === value);
+
+// The status filter lives in the URL so a view can be linked, bookmarked and
+// survive a reload. `.catch` keeps a stale or hand-edited `?tab=` from failing
+// validation and dropping the page into its error boundary.
+const paywallsSearchSchema = z.object({
+  tab: z
+    .enum(PAYWALL_TABS.map((item) => item.value))
+    .default(DEFAULT_PAYWALL_TAB)
+    .catch(DEFAULT_PAYWALL_TAB),
+});
+
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/",
 )({
   component: PaywallsPage,
   errorComponent: PaywallsPageError,
   pendingComponent: PaywallsPageSkeleton,
+  validateSearch: zodValidator(paywallsSearchSchema),
 });
 
 function PaywallsPageError() {
@@ -94,7 +112,13 @@ function PaywallsPage() {
     throw new Error("Project not found");
   }
 
-  const [tab, setTab] = useState<PaywallTab>("active");
+  const { tab } = Route.useSearch();
+  const navigate = Route.useNavigate();
+  // Filter changes replace the current entry so browsing tabs doesn't bury the
+  // page the user arrived from under a stack of history entries.
+  const changeTab = (next: PaywallTab) => {
+    void navigate({ replace: true, search: (prev) => ({ ...prev, tab: next }) });
+  };
   const [view, setView] = useState<PaywallView>(loadPaywallView);
   const changeView = (next: PaywallView) => {
     setView(next);
@@ -156,8 +180,8 @@ function PaywallsPage() {
       >
         <ToggleGroup
           onValueChange={(value: string) => {
-            if (value) {
-              setTab(value as PaywallTab);
+            if (isPaywallTab(value)) {
+              changeTab(value);
             }
           }}
           type="single"
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
new file mode 100644
index 000000000..a30baae07
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
@@ -0,0 +1,187 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute, Link } from "@tanstack/react-router";
+import {
+  Badge,
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  Button,
+  cn,
+  Page,
+  PageHeader,
+} from "@voidhash/ui";
+import { PlusIcon, RepeatIcon } from "lucide-react";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import { PaywallLocationStats } from "@/features/studio/paywall-locations/analytics/paywall-location-stats";
+import { PaywallLocationPhonePreview } from "@/features/studio/paywall-locations/detail/paywall-location-phone-preview";
+import { PaywallLocationProperties } from "@/features/studio/paywall-locations/detail/paywall-location-properties";
+import { PaywallCombobox } from "@/features/studio/paywall-locations/paywall-combobox";
+import { PaywallLocationActionsMenu } from "@/features/studio/paywall-locations/paywall-location-actions-menu";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { listPaywallLocationsOptions } from "@/features/studio/lib/tanstack-query/paywall-locations";
+import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/$id",
+)({
+  component: PaywallLocationDetailPage,
+  errorComponent: PaywallLocationDetailPageError,
+});
+
+function PaywallLocationDetailPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading the paywall location",
+      }}
+    />
+  );
+}
+
+function PaywallLocationDetailPage() {
+  const { id, organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { data: locations } = useSuspenseQuery(
+    listPaywallLocationsOptions({ includeArchived: true, projectId: project.id }),
+  );
+  const { data: paywalls } = useSuspenseQuery(
+    listPaywallsOptions({ includeArchived: true, projectId: project.id }),
+  );
+
+  const location = locations.find((item) => item.id === (id as string));
+
+  if (!location) {
+    return (
+      <VoidhashErrorCard
+        error={{ code: "NOT_FOUND", message: "This paywall location does not exist." }}
+      />
+    );
+  }
+
+  const isArchived = location.archivedAt != null;
+  const showingPaywallId = location.activeShowing?.paywallId;
+  // `activeShowing.paywall` carries only id/name/slug; the full record is what
+  // holds the rendered thumbnail the preview needs.
+  const showingPaywall = paywalls.find((paywall) => paywall.id === showingPaywallId) ?? null;
+
+  return (
+    <Page>
+      <PageHeader className="px-2">
+        <div className="flex items-center gap-2">
+          <Breadcrumb>
+            <BreadcrumbList>
+              <BreadcrumbItem>
+                <BreadcrumbLink asChild>
+                  <Link
+                    params={{ organizationSlug, projectSlug }}
+                    to="/studio/$organizationSlug/$projectSlug/settings/paywall-locations"
+                  >
+                    Paywall Locations
+                  </Link>
+                </BreadcrumbLink>
+              </BreadcrumbItem>
+              <BreadcrumbSeparator />
+              <BreadcrumbItem>
+                <BreadcrumbPage>{location.name}</BreadcrumbPage>
+              </BreadcrumbItem>
+            </BreadcrumbList>
+          </Breadcrumb>
+          {isArchived && <Badge variant="secondary">Archived</Badge>}
+          <PaywallLocationActionsMenu location={location} />
+        </div>
+      </PageHeader>
+
+      <div className="mx-auto max-w-6xl px-8 py-12">
+        <div className="grid grid-cols-1 gap-12 lg:grid-cols-12">
+          <div className="space-y-10 lg:col-span-7 xl:col-span-8">
+            <div className="space-y-6">
+              <div>
+                <h1 className="font-semibold text-3xl tracking-tight">{location.name}</h1>
+                <p className="mt-1 text-muted-foreground text-sm">
+                  {location.activeShowing?.paywall
+                    ? `Serving ${location.activeShowing.paywall.name}`
+                    : "Not serving a paywall"}
+                </p>
+              </div>
+              <PaywallLocationProperties
+                location={location}
+                paywallCombobox={
+                  isArchived ? undefined : (
+                    <PaywallCombobox
+                      currentPaywallId={showingPaywallId}
+                      locationId={location.id}
+                      projectId={project.id}
+                      // `-ml-2.5` cancels the button's own padding so its label
+                      // lines up with the plain-text values in the rows above.
+                      trigger={
+                        <Button
+                          className={cn("-ml-2.5 max-w-full", showingPaywall && "text-foreground")}
+                          size="sm"
+                          variant="ghost"
+                        >
+                          {showingPaywall ? (
+                            <span className="truncate">{showingPaywall.name}</span>
+                          ) : (
+                            <>
+                              <PlusIcon />
+                              Select a paywall...
+                            </>
+                          )}
+                        </Button>
+                      }
+                    />
+                  )
+                }
+              />
+            </div>
+
+            <PaywallLocationStats
+              description="Events captured at this location."
+              emptyDescription="Place a paywall here to start collecting stats."
+              emptyTitle="Nothing placed yet"
+              locationSlugs={location.activeShowing ? [location.slug] : []}
+              projectId={project.id}
+            />
+          </div>
+
+          <div className="lg:col-span-5 xl:col-span-4">
+            <div className="mx-auto w-full max-w-[300px] space-y-6 lg:sticky lg:top-24">
+              <PaywallLocationPhonePreview
+                organizationSlug={organizationSlug as string}
+                paywall={showingPaywall}
+                projectSlug={projectSlug as string}
+              />
+              <PaywallCombobox
+                currentPaywallId={showingPaywallId}
+                locationId={location.id}
+                projectId={project.id}
+                trigger={
+                  <Button className="w-full" disabled={isArchived} size="lg" variant="outline">
+                    <RepeatIcon />
+                    {showingPaywall ? "Change paywall" : "Place a paywall"}
+                  </Button>
+                }
+              />
+            </div>
+          </div>
+        </div>
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx
new file mode 100644
index 000000000..9fada3e3d
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx
@@ -0,0 +1,226 @@
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
+import {
+  cn,
+  DataTableSkeleton,
+  Page,
+  PageBar,
+  PageHeader,
+  PageHeaderTitle,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import { z } from "zod";
+import { useAuth } from "@/features/studio/components/auth-context";
+
+import {
+  isMetricRange,
+  METRIC_RANGE_OPTIONS,
+  type MetricRange,
+  usePaywallLocationMetrics,
+} from "@/features/studio/paywall-locations/analytics/paywall-location-metrics";
+import { CreatePaywallLocationModalButton } from "@/features/studio/paywall-locations/create-paywall-location-modal-button";
+import { PaywallLocationsPageEmptyState } from "@/features/studio/paywall-locations/paywall-locations-page-empty-state";
+import { PaywallLocationsTable } from "@/features/studio/paywall-locations/paywall-locations-table";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import {
+  listPaywallLocationsOptions,
+  listPaywallsOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+
+const LOCATION_TABS = [
+  { value: "all", label: "All" },
+  { value: "live", label: "Live" },
+  { value: "empty", label: "Empty" },
+  { value: "archived", label: "Archived" },
+] as const;
+
+type LocationTab = (typeof LOCATION_TABS)[number]["value"];
+
+const DEFAULT_LOCATION_TAB: LocationTab = "all";
+const DEFAULT_METRIC_RANGE: MetricRange = "last_30d";
+
+const isLocationTab = (value: string): value is LocationTab =>
+  LOCATION_TABS.some((item) => item.value === value);
+
+// Both filters live in the URL so a view can be linked, bookmarked and survive
+// a reload. `.catch` keeps stale or hand-edited params from failing validation
+// and dropping the page into its error boundary.
+const paywallLocationsSearchSchema = z.object({
+  range: z
+    .enum(METRIC_RANGE_OPTIONS.map((option) => option.value))
+    .default(DEFAULT_METRIC_RANGE)
+    .catch(DEFAULT_METRIC_RANGE),
+  tab: z
+    .enum(LOCATION_TABS.map((item) => item.value))
+    .default(DEFAULT_LOCATION_TAB)
+    .catch(DEFAULT_LOCATION_TAB),
+});
+
+export const Route = createFileRoute(
+  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/",
+)({
+  component: ProjectPaywallLocationsPage,
+  errorComponent: ProjectPaywallLocationsPageError,
+  pendingComponent: ProjectPaywallLocationsPageSkeleton,
+  validateSearch: zodValidator(paywallLocationsSearchSchema),
+});
+
+function ProjectPaywallLocationsPageError() {
+  return (
+    <VoidhashErrorCard
+      error={{
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An error occurred loading paywall locations",
+      }}
+    />
+  );
+}
+
+function ProjectPaywallLocationsPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Paywall Locations</PageHeaderTitle>
+      </PageHeader>
+      <PageBar className="pl-2">
+        <div className="flex items-center gap-4">
+          {LOCATION_TABS.map((tab) => (
+            <div className="h-5 w-14 rounded bg-muted" key={tab.value} />
+          ))}
+        </div>
+      </PageBar>
+      <div className="w-full px-4 pt-4">
+        <DataTableSkeleton />
+      </div>
+    </Page>
+  );
+}
+
+function ProjectPaywallLocationsPage() {
+  const { organizationSlug, projectSlug } = Route.useParams();
+  const { user } = useAuth();
+  const project = CurrentUser.getProjectBySlugs(
+    user,
+    organizationSlug as string,
+    projectSlug as string,
+  );
+
+  if (!project) {
+    throw new Error("Project not found");
+  }
+
+  const { range, tab } = Route.useSearch();
+  const navigate = Route.useNavigate();
+  // Filter changes replace the current entry so browsing tabs doesn't bury the
+  // page the user arrived from under a stack of history entries.
+  const changeSearch = (next: Partial<{ range: MetricRange; tab: LocationTab }>) => {
+    void navigate({ replace: true, search: (prev) => ({ ...prev, ...next }) });
+  };
+
+  // Archived locations come down with the rest so tab switches are a
+  // client-side filter — no refetch (and no skeleton flash) when changing tabs.
+  const { data: allLocations } = useSuspenseQuery(
+    listPaywallLocationsOptions({ includeArchived: true, projectId: project.id }),
+  );
+  // A location can keep serving an archived paywall, so the lookup that feeds
+  // the hover preview has to include archived records too.
+  const { data: paywalls } = useSuspenseQuery(
+    listPaywallsOptions({ includeArchived: true, projectId: project.id }),
+  );
+  const { isPending: isMetricsPending, metricsFor } = usePaywallLocationMetrics({
+    projectId: project.id,
+    range,
+  });
+
+  const paywallsById = new Map(paywalls.map((paywall) => [paywall.id, paywall]));
+
+  const locations = allLocations.filter((location) => {
+    const isArchived = location.archivedAt != null;
+    switch (tab) {
+      case "all":
+        return true;
+      case "live":
+        return !isArchived && location.activeShowing != null;
+      case "empty":
+        return !isArchived && location.activeShowing == null;
+      case "archived":
+        return isArchived;
+      default: {
+        const _exhaustive: never = tab;
+        return _exhaustive;
+      }
+    }
+  });
+
+  const hasNoLocations = allLocations.length === 0;
+
+  return (
+    // The empty state stretches to fill the inset so it can center vertically;
+    // the populated table keeps the default top-aligned block flow.
+    <Page className={cn(hasNoLocations && "flex flex-col")}>
+      <PageHeader
+        className="shrink-0"
+        rightActions={<CreatePaywallLocationModalButton projectId={project.id} />}
+      >
+        <PageHeaderTitle>Paywall Locations</PageHeaderTitle>
+      </PageHeader>
+      <PageBar
+        className="shrink-0 pl-2"
+        rightActions={
+          <ToggleGroup
+            onValueChange={(value: string) => {
+              if (isMetricRange(value)) {
+                changeSearch({ range: value });
+              }
+            }}
+            type="single"
+            value={range}
+          >
+            {METRIC_RANGE_OPTIONS.map((option) => (
+              <ToggleGroupItem className="cursor-pointer" key={option.value} value={option.value}>
+                {option.label}
+              </ToggleGroupItem>
+            ))}
+          </ToggleGroup>
+        }
+      >
+        <ToggleGroup
+          onValueChange={(value: string) => {
+            if (isLocationTab(value)) {
+              changeSearch({ tab: value });
+            }
+          }}
+          type="single"
+          value={tab}
+        >
+          {LOCATION_TABS.map((item) => (
+            <ToggleGroupItem key={item.value} value={item.value}>
+              {item.label}
+            </ToggleGroupItem>
+          ))}
+        </ToggleGroup>
+      </PageBar>
+      <div className={cn("w-full px-4 pt-4", hasNoLocations && "flex flex-1 flex-col pb-4")}>
+        {hasNoLocations ? (
+          <PaywallLocationsPageEmptyState projectId={project.id} />
+        ) : locations.length === 0 ? (
+          <p className="py-10 text-center text-muted-foreground text-sm">
+            No locations in this view.
+          </p>
+        ) : (
+          <PaywallLocationsTable
+            isMetricsPending={isMetricsPending}
+            locations={locations}
+            metricsFor={metricsFor}
+            organizationSlug={organizationSlug as string}
+            paywallsById={paywallsById}
+            projectSlug={projectSlug as string}
+          />
+        )}
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
deleted file mode 100644
index 57e937a07..000000000
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.tsx
+++ /dev/null
@@ -1,105 +0,0 @@
-import { useSuspenseQuery } from "@tanstack/react-query";
-import { createFileRoute } from "@tanstack/react-router";
-import { Card, cn, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
-import { useAuth } from "@/features/studio/components/auth-context";
-
-import { CreatePaywallLocationModalButton } from "@/features/studio/paywall-locations/create-paywall-location-modal-button";
-import { PaywallLocationsPageEmptyState } from "@/features/studio/paywall-locations/paywall-locations-page-empty-state";
-import { PaywallLocationRow } from "@/features/studio/paywall-locations/paywall-location-row";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import {
-  listPaywallLocationsOptions,
-  listPaywallsOptions,
-} from "@/features/studio/lib/tanstack-query";
-import { CurrentUser } from "@/features/studio/lib/utils/current-user";
-
-export const Route = createFileRoute(
-  "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations",
-)({
-  component: ProjectPaywallLocationsPage,
-  errorComponent: ProjectPaywallLocationsPageError,
-  pendingComponent: ProjectPaywallLocationsPageSkeleton,
-});
-
-function ProjectPaywallLocationsPageError() {
-  return (
-    <VoidhashErrorCard
-      error={{
-        code: "INTERNAL_SERVER_ERROR",
-        message: "An error occurred loading paywall locations",
-      }}
-    />
-  );
-}
-
-function ProjectPaywallLocationsPageSkeleton() {
-  return (
-    <Page>
-      <PageHeader>
-        <PageHeaderTitle>Paywall Locations</PageHeaderTitle>
-      </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
-        <Card className="p-0">
-          <div className="px-5 py-10 text-center text-[13px] text-muted-foreground">
-            Loading locations...
-          </div>
-        </Card>
-      </div>
-    </Page>
-  );
-}
-
-function ProjectPaywallLocationsPage() {
-  const { organizationSlug, projectSlug } = Route.useParams();
-  const { user } = useAuth();
-  const project = CurrentUser.getProjectBySlugs(
-    user,
-    organizationSlug as string,
-    projectSlug as string,
-  );
-
-  if (!project) {
-    throw new Error("Project not found");
-  }
-
-  const { data: locations } = useSuspenseQuery(
-    listPaywallLocationsOptions({ projectId: project.id }),
-  );
-  const { data: paywalls } = useSuspenseQuery(listPaywallsOptions({ projectId: project.id }));
-
-  const isEmpty = locations.length === 0;
-
-  return (
-    // The empty state stretches to fill the inset so it can center vertically;
-    // the populated list keeps the default top-aligned block flow.
-    <Page className={cn(isEmpty && "flex flex-col")}>
-      <PageHeader
-        className="shrink-0"
-        rightActions={<CreatePaywallLocationModalButton projectId={project.id} />}
-      >
-        <PageHeaderTitle>Paywall Locations</PageHeaderTitle>
-      </PageHeader>
-      <div
-        className={cn(
-          "mx-auto w-full max-w-4xl px-4 pt-4",
-          isEmpty && "flex flex-1 flex-col pb-4",
-        )}
-      >
-        {isEmpty ? (
-          <PaywallLocationsPageEmptyState projectId={project.id} />
-        ) : (
-          <Card className="grid gap-0 divide-y p-0">
-            {locations.map((location) => (
-              <PaywallLocationRow
-                key={location.id}
-                location={location}
-                paywalls={paywalls}
-                projectId={project.id}
-              />
-            ))}
-          </Card>
-        )}
-      </div>
-    </Page>
-  );
-}
diff --git a/packages/ui/components/data-table-skeleton.tsx b/packages/ui/components/data-table-skeleton.tsx
index 9d15e7bcf..2d53bba05 100644
--- a/packages/ui/components/data-table-skeleton.tsx
+++ b/packages/ui/components/data-table-skeleton.tsx
@@ -1,18 +1,22 @@
 import { Skeleton } from "./ui/skeleton";
-import { Table, TableCell, TableRow } from "./ui/table";
+import { Table, TableBody, TableCell, TableRow } from "./ui/table";
 
 export function DataTableSkeleton() {
   return (
     <div className="rounded-md border">
       <Table>
-        {Array.from({ length: 10 }).map((_, index) => (
-          // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
-          <TableRow key={index}>
-            <TableCell>
-              <Skeleton className="h-4 w-full" />
-            </TableCell>
-          </TableRow>
-        ))}
+        {/* Rows must sit inside a <tbody>; the browser injects one otherwise,
+            which desyncs SSR markup from the client tree and breaks hydration. */}
+        <TableBody>
+          {Array.from({ length: 10 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <TableRow key={index}>
+              <TableCell>
+                <Skeleton className="h-4 w-full" />
+              </TableCell>
+            </TableRow>
+          ))}
+        </TableBody>
       </Table>
     </div>
   );
diff --git a/packages/ui/components/ui/combobox.tsx b/packages/ui/components/ui/combobox.tsx
index 11db954ff..51acfc536 100644
--- a/packages/ui/components/ui/combobox.tsx
+++ b/packages/ui/components/ui/combobox.tsx
@@ -14,7 +14,15 @@ function ComboboxValue({ ...props }: ComboboxPrimitive.Value.Props) {
   return <ComboboxPrimitive.Value data-slot="combobox-value" {...props} />;
 }
 
-function ComboboxTrigger({ className, children, ...props }: ComboboxPrimitive.Trigger.Props) {
+function ComboboxTrigger({
+  className,
+  children,
+  showChevron = true,
+  ...props
+}: ComboboxPrimitive.Trigger.Props & {
+  /** Set false when the trigger carries its own affordance (an icon button, a property row). */
+  showChevron?: boolean;
+}) {
   return (
     <ComboboxPrimitive.Trigger
       data-slot="combobox-trigger"
@@ -22,7 +30,9 @@ function ComboboxTrigger({ className, children, ...props }: ComboboxPrimitive.Tr
       {...props}
     >
       {children}
-      <ChevronDownIcon className="text-muted-foreground size-4 pointer-events-none" />
+      {showChevron && (
+        <ChevronDownIcon className="text-muted-foreground size-4 pointer-events-none" />
+      )}
     </ComboboxPrimitive.Trigger>
   );
 }
diff --git a/packages/ui/components/ui/table.tsx b/packages/ui/components/ui/table.tsx
index 4825bdfa2..0e0983181 100644
--- a/packages/ui/components/ui/table.tsx
+++ b/packages/ui/components/ui/table.tsx
@@ -2,10 +2,22 @@ import type * as React from "react";
 
 import { cn } from "../../lib/utils";
 
-function Table({ className, ...props }: React.ComponentProps<"table">) {
+/**
+ * `containerClassName` styles the scroll container wrapping the table — pass
+ * `overflow-x-auto` to let a wide table scroll horizontally instead of being
+ * clipped by the container's default `overflow-hidden`.
+ */
+function Table({
+  className,
+  containerClassName,
+  ...props
+}: React.ComponentProps<"table"> & { containerClassName?: string }) {
   return (
     <div
-      className="ring-border bg-card relative w-full overflow-hidden rounded-lg ring-1"
+      className={cn(
+        "ring-border bg-card relative w-full overflow-hidden rounded-lg ring-1",
+        containerClassName,
+      )}
       data-slot="table-container"
     >
       <table

From ec2e2d3a32b1dee5ad8d24523a34290887f8c95a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 24 Jul 2026 16:12:49 +0200
Subject: [PATCH 117/129] feat: improve organization

---
 apps/backend/src/rpcs/feature-flag-rpcs.ts    |  54 ++-
 apps/backend/src/testing/rpc-smoke-cases.ts   |  12 +-
 .../experiment-detail-properties.tsx          |  94 +++++
 .../experiment-lifecycle-controls.tsx         |  20 +-
 .../experiment-settings-form.tsx              |   0
 .../experiment-setup-panel.tsx                |   0
 .../experiment-treatments-panel.tsx           |   0
 .../create-experiment-button.tsx              |  28 ++
 .../create-experiment-modal.tsx               |  12 +-
 .../experiment-record-skeleton.tsx            |   0
 .../experiments-page/experiment-record.tsx    |  81 ++++
 .../experiments-page-empty-state.tsx          |  83 ++++
 .../experiments-page-skeleton.tsx             |  23 +
 .../shared}/experiment-status-badge.tsx       |   2 +-
 .../studio/experiments/experiment-record.tsx  |  52 ---
 .../experiments-page-empty-state.tsx          |  22 -
 .../experiments/experiments-page-skeleton.tsx |  21 -
 .../{ => lib}/experiment-status.ts            |   0
 .../flag-detail-action-bar.tsx                |  48 +++
 .../flag-detail-actions-menu.tsx              |  79 ++++
 .../flag-detail-page/flag-detail-header.tsx   | 103 +++++
 .../flag-detail-properties.tsx                | 251 +++++++++++
 .../flag-detail-page/flag-draft-context.tsx   | 399 ++++++++++++++++++
 .../flag-detail-page/flag-overrides-panel.tsx | 171 ++++++++
 .../flag-detail-page/flag-targeting-panel.tsx | 164 +++++++
 .../flag-detail-page/flag-variants-panel.tsx  | 110 +++++
 .../flags-page/create-flag-button.tsx         |  28 ++
 .../flags-page/create-flag-modal.tsx          | 303 +++++++++++++
 .../flags-page}/flag-record-skeleton.tsx      |   0
 .../components/flags-page/flag-record.tsx     |  93 ++++
 .../flags-page/flags-page-empty-state.tsx     |  74 ++++
 .../flags-page/flags-page-skeleton.tsx        |  23 +
 .../person-flag-overrides-panel.tsx           |   9 +-
 .../components/shared/flag-type-indicator.tsx |  37 ++
 .../feature-flags/create-flag-modal.tsx       | 107 -----
 .../feature-flags/flag-general-form.tsx       | 171 --------
 .../feature-flags/flag-overrides-panel.tsx    | 161 -------
 .../studio/feature-flags/flag-record.tsx      |  66 ---
 .../feature-flags/flag-targeting-panel.tsx    | 181 --------
 .../studio/feature-flags/flag-type-badge.tsx  |  34 --
 .../studio/feature-flags/flag-type.ts         |  28 --
 .../feature-flags/flag-variants-panel.tsx     | 312 --------------
 .../feature-flags/flags-page-empty-state.tsx  |  22 -
 .../feature-flags/flags-page-skeleton.tsx     |  21 -
 .../studio/feature-flags/lib/flag-type.ts     |  19 +
 .../studio/lib/tanstack-query/experiments.ts  |  11 +-
 .../lib/tanstack-query/feature-flags.ts       |  99 ++++-
 .../studio/lib/tanstack-query/query-keys.ts   |   6 +-
 .../paywall-location-phone-preview.tsx        |   0
 .../paywall-location-properties.tsx           |   0
 .../create-paywall-location-modal-button.tsx  |   0
 .../create-paywall-location-modal.tsx         |   2 +-
 .../paywall-location-paywall-cell.tsx         |   0
 .../paywall-locations-page-empty-state.tsx    |   0
 .../paywall-locations-table.tsx               |   4 +-
 .../shared}/edit-paywall-location-modal.tsx   |   2 +-
 .../shared}/paywall-combobox.tsx              |   0
 .../shared}/paywall-location-actions-menu.tsx |   0
 .../shared}/paywall-location-stats.tsx        |   2 +-
 .../paywall-location-metrics.ts               |   0
 .../paywall-detail-placements.tsx             |   0
 .../paywall-detail-properties.tsx             |   0
 .../paywall-location-combobox.tsx             |   0
 .../paywall-phone-preview.tsx                 |   0
 .../paywalls-page}/create-paywall-button.tsx  |   0
 .../paywalls-page}/create-paywall-card.tsx    |   0
 .../paywalls-page}/create-paywall-modal.tsx   |   2 +-
 .../paywalls-page}/paywall-actions-menu.tsx   |   0
 .../paywalls-page}/paywall-card-skeleton.tsx  |   0
 .../paywalls-page}/paywall-card.tsx           |   0
 .../paywall-record-skeleton.tsx               |   0
 .../paywalls-page}/paywall-record.tsx         |   0
 .../paywalls-page}/paywall-table.tsx          |   0
 .../paywalls-page}/paywall-view-settings.tsx  |   0
 .../paywalls-page-empty-state.tsx             |   0
 .../paywalls-page}/rename-paywall-dialog.tsx  |   0
 .../$projectSlug/experiments.$id.tsx          | 236 +++++------
 .../$projectSlug/experiments.index.tsx        | 150 +++++--
 .../$projectSlug/flags.$id.tsx                | 331 +++++----------
 .../$projectSlug/flags.index.tsx              | 141 +++++--
 .../$projectSlug/paywalls.$id.tsx             |  11 +-
 .../$projectSlug/paywalls.index.tsx           |  17 +-
 .../$projectSlug/persons.$id.tsx              |   6 +-
 .../settings/paywall-locations.$id.tsx        |  13 +-
 .../settings/paywall-locations.index.tsx      |  19 +-
 .../featureFlags/FeatureFlagService.ts        | 238 ++++++++++-
 .../FeatureFlagService.integration.test.ts    | 120 ++++++
 .../migration.sql                             |  52 +++
 packages/db/src/schema.ts                     |  13 +
 packages/rpc/src/groups/FeatureFlagRpcsDef.ts |  36 +-
 90 files changed, 3321 insertions(+), 1708 deletions(-)
 create mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
 rename apps/www/src/features/studio/experiments/{ => components/experiment-detail-page}/experiment-lifecycle-controls.tsx (89%)
 rename apps/www/src/features/studio/experiments/{ => components/experiment-detail-page}/experiment-settings-form.tsx (100%)
 rename apps/www/src/features/studio/experiments/{ => components/experiment-detail-page}/experiment-setup-panel.tsx (100%)
 rename apps/www/src/features/studio/experiments/{ => components/experiment-detail-page}/experiment-treatments-panel.tsx (100%)
 create mode 100644 apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx
 rename apps/www/src/features/studio/experiments/{ => components/experiments-page}/create-experiment-modal.tsx (93%)
 rename apps/www/src/features/studio/experiments/{ => components/experiments-page}/experiment-record-skeleton.tsx (100%)
 create mode 100644 apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx
 create mode 100644 apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-skeleton.tsx
 rename apps/www/src/features/studio/experiments/{ => components/shared}/experiment-status-badge.tsx (84%)
 delete mode 100644 apps/www/src/features/studio/experiments/experiment-record.tsx
 delete mode 100644 apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx
 delete mode 100644 apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx
 rename apps/www/src/features/studio/experiments/{ => lib}/experiment-status.ts (100%)
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-actions-menu.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-header.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-draft-context.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-overrides-panel.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-targeting-panel.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-variants-panel.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-button.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-modal.tsx
 rename apps/www/src/features/studio/feature-flags/{ => components/flags-page}/flag-record-skeleton.tsx (100%)
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flags-page/flag-record.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-empty-state.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-skeleton.tsx
 rename apps/www/src/features/studio/feature-flags/{ => components/person-detail-page}/person-flag-overrides-panel.tsx (95%)
 create mode 100644 apps/www/src/features/studio/feature-flags/components/shared/flag-type-indicator.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/create-flag-modal.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flag-general-form.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flag-record.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flag-type-badge.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flag-type.ts
 delete mode 100644 apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx
 delete mode 100644 apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx
 create mode 100644 apps/www/src/features/studio/feature-flags/lib/flag-type.ts
 rename apps/www/src/features/studio/paywall-locations/{detail => components/paywall-location-detail-page}/paywall-location-phone-preview.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{detail => components/paywall-location-detail-page}/paywall-location-properties.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/paywall-locations-page}/create-paywall-location-modal-button.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/paywall-locations-page}/create-paywall-location-modal.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/paywall-locations-page}/paywall-location-paywall-cell.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/paywall-locations-page}/paywall-locations-page-empty-state.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/paywall-locations-page}/paywall-locations-table.tsx (98%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/shared}/edit-paywall-location-modal.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/shared}/paywall-combobox.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{ => components/shared}/paywall-location-actions-menu.tsx (100%)
 rename apps/www/src/features/studio/paywall-locations/{analytics => components/shared}/paywall-location-stats.tsx (99%)
 rename apps/www/src/features/studio/paywall-locations/{analytics => lib}/paywall-location-metrics.ts (100%)
 rename apps/www/src/features/studio/paywalls/{detail => components/paywall-detail-page}/paywall-detail-placements.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{detail => components/paywall-detail-page}/paywall-detail-properties.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{detail => components/paywall-detail-page}/paywall-location-combobox.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{detail => components/paywall-detail-page}/paywall-phone-preview.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/create-paywall-button.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/create-paywall-card.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/create-paywall-modal.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywall-actions-menu.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywall-card-skeleton.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywall-card.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywall-record-skeleton.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywall-record.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywall-table.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywall-view-settings.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/paywalls-page-empty-state.tsx (100%)
 rename apps/www/src/features/studio/paywalls/{ => components/paywalls-page}/rename-paywall-dialog.tsx (100%)
 create mode 100644 packages/db/src/alchemy-migrations/20260724120000_add_feature_flag_types/migration.sql

diff --git a/apps/backend/src/rpcs/feature-flag-rpcs.ts b/apps/backend/src/rpcs/feature-flag-rpcs.ts
index 559983100..37f66c4e4 100644
--- a/apps/backend/src/rpcs/feature-flag-rpcs.ts
+++ b/apps/backend/src/rpcs/feature-flag-rpcs.ts
@@ -1,4 +1,10 @@
 import { FeatureFlagService } from "@voidhash/core/services";
+import type {
+  FeatureFlag,
+  FeatureFlagOverride,
+  FeatureFlagTarget,
+  FeatureFlagVariant,
+} from "@voidhash/db";
 import {
   FeatureFlagRpcsDef,
   RpcActionForbiddenError,
@@ -11,6 +17,41 @@ import {
 } from "@voidhash/rpc";
 import { Effect } from "effect";
 
+const toRpcFeatureFlagVariant = (variant: FeatureFlagVariant) => ({
+  archivedAt: variant.archivedAt,
+  createdAt: variant.createdAt,
+  featureFlagId: variant.featureFlagId,
+  id: variant.id,
+  label: variant.name || null,
+  updatedAt: variant.updatedAt,
+  value: variant.payload,
+});
+
+const toRpcFeatureFlag = (
+  flag: FeatureFlag & {
+    readonly overrides: ReadonlyArray<FeatureFlagOverride>;
+    readonly targets: ReadonlyArray<FeatureFlagTarget>;
+    readonly variants: ReadonlyArray<FeatureFlagVariant>;
+  },
+) => {
+  const { key, name: _name, variants, ...rest } = flag;
+  return {
+    ...rest,
+    slug: key,
+    variants: variants.map(toRpcFeatureFlagVariant),
+  };
+};
+
+const toRpcFeatureFlagListItem = (
+  flag: FeatureFlag & { readonly variantCount: number; readonly variants?: undefined },
+) => {
+  const { key, name: _name, variants: _variants, ...rest } = flag;
+  return {
+    ...rest,
+    slug: key,
+  };
+};
+
 export const FeatureFlagRpcsLive = FeatureFlagRpcsDef.toLayer(
   Effect.gen(function* FeatureFlagRpcsLive() {
     const service = yield* FeatureFlagService;
@@ -54,8 +95,8 @@ export const FeatureFlagRpcsLive = FeatureFlagRpcsDef.toLayer(
               Effect.fail(new RpcFeatureFlagTargetNotFoundError({ message: error.message })),
           }),
         ),
-      CreateFeatureFlag: (input) =>
-        service.createFlag(input).pipe(
+      CreateFeatureFlag: ({ slug, ...input }) =>
+        service.createFlag({ ...input, key: slug }).pipe(
           Effect.catchTags({
             ActionForbiddenError: (error) =>
               Effect.fail(new RpcActionForbiddenError({ message: error.message })),
@@ -69,6 +110,7 @@ export const FeatureFlagRpcsLive = FeatureFlagRpcsDef.toLayer(
         ),
       GetFeatureFlag: ({ id }) =>
         service.getFlagById({ id }).pipe(
+          Effect.map(toRpcFeatureFlag),
           Effect.catchTags({
             ActionForbiddenError: (error) =>
               Effect.fail(new RpcActionForbiddenError({ message: error.message })),
@@ -100,6 +142,7 @@ export const FeatureFlagRpcsLive = FeatureFlagRpcsDef.toLayer(
         ),
       ListFeatureFlags: (input) =>
         service.listFlags(input).pipe(
+          Effect.map((flags) => flags.map(toRpcFeatureFlagListItem)),
           Effect.catchTags({
             ActionForbiddenError: (error) =>
               Effect.fail(new RpcActionForbiddenError({ message: error.message })),
@@ -120,8 +163,9 @@ export const FeatureFlagRpcsLive = FeatureFlagRpcsDef.toLayer(
               Effect.fail(new RpcFeatureFlagServiceError({ cause: error.cause })),
           }),
         ),
-      UpdateFeatureFlag: (input) =>
-        service.updateFlag(input).pipe(
+      UpdateFeatureFlag: ({ slug, ...input }) =>
+        service.updateFlag({ ...input, key: slug }).pipe(
+          Effect.map(toRpcFeatureFlag),
           Effect.catchTags({
             ActionForbiddenError: (error) =>
               Effect.fail(new RpcActionForbiddenError({ message: error.message })),
@@ -137,7 +181,7 @@ export const FeatureFlagRpcsLive = FeatureFlagRpcsDef.toLayer(
         ),
       UpdateFeatureFlagVariants: (input) =>
         service
-          .updateFlagVariants({
+          .updateCustomerFlagVariants({
             ...input,
             variants: [...input.variants],
           })
diff --git a/apps/backend/src/testing/rpc-smoke-cases.ts b/apps/backend/src/testing/rpc-smoke-cases.ts
index 986edb6f8..bf4bf2637 100644
--- a/apps/backend/src/testing/rpc-smoke-cases.ts
+++ b/apps/backend/src/testing/rpc-smoke-cases.ts
@@ -259,9 +259,10 @@ export const rpcSmokeCases = [
     expected: success,
     payload: ({ ids, runId }) => ({
       description: "Smoke flag",
-      key: `smoke-flag-${runId}`,
-      name: "Smoke Flag",
       projectId: ids.projectId,
+      slug: `smoke-flag-${runId}`,
+      type: "json",
+      variants: [],
     }),
     role: "admin",
     tag: "CreateFeatureFlag",
@@ -277,8 +278,8 @@ export const rpcSmokeCases = [
     payload: ({ featureFlagId, runId }) => ({
       enabled: true,
       id: featureFlagId,
-      name: `Smoke Flag ${runId}`,
       rolloutBps: 5000,
+      slug: `smoke-flag-updated-${runId}`,
     }),
     role: "admin",
     tag: "UpdateFeatureFlag",
@@ -289,10 +290,7 @@ export const rpcSmokeCases = [
       featureFlagId,
       variants: [
         {
-          key: "control",
-          name: "Control",
-          payload: { kind: "control" },
-          weightBps: 10000,
+          value: { kind: "control" },
         },
       ],
     }),
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
new file mode 100644
index 000000000..1c4762c7b
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
@@ -0,0 +1,94 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+import { EXPERIMENT_STATUS, experimentStatusLabel } from "../../lib/experiment-status";
+
+interface ExperimentDetailPropertiesProps {
+  archivedAt: Date | null;
+  createdAt: Date | null;
+  endedAt: Date | null;
+  keyValue: string;
+  primaryMetricEventName: string;
+  startedAt: Date | null;
+  status: number;
+  variantCount: number;
+  version: number;
+}
+
+const formatDate = (date: Date) =>
+  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
+
+function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
+  return (
+    <div className="flex items-baseline gap-4 py-1.5">
+      <dt className="w-28 shrink-0 text-muted-foreground text-sm">{label}</dt>
+      <dd className="min-w-0 flex-1 text-sm">{children}</dd>
+    </div>
+  );
+}
+
+/**
+ * Linear property list for an A/B test's lifecycle, measurement, and stable
+ * identifiers.
+ */
+export function ExperimentDetailProperties({
+  archivedAt,
+  createdAt,
+  endedAt,
+  keyValue,
+  primaryMetricEventName,
+  startedAt,
+  status,
+  variantCount,
+  version,
+}: ExperimentDetailPropertiesProps) {
+  const statusPresentation = archivedAt
+    ? { dotClassName: "bg-muted-foreground", label: "Archived" }
+    : status === EXPERIMENT_STATUS.running
+      ? { dotClassName: "bg-emerald-500", label: experimentStatusLabel(status) }
+      : status === EXPERIMENT_STATUS.paused
+        ? { dotClassName: "bg-amber-500", label: experimentStatusLabel(status) }
+        : { dotClassName: "bg-muted-foreground/50", label: experimentStatusLabel(status) };
+
+  return (
+    <dl className="-my-1.5">
+      <PropertyRow label="Status">
+        <span className="inline-flex items-center gap-2">
+          <span
+            aria-hidden="true"
+            className={cn("size-2 rounded-full", statusPresentation.dotClassName)}
+          />
+          {statusPresentation.label}
+        </span>
+      </PropertyRow>
+
+      <PropertyRow label="Primary metric">
+        <span className="font-mono text-xs">{primaryMetricEventName}</span>
+      </PropertyRow>
+
+      <PropertyRow label="Variants">
+        {variantCount} variant{variantCount === 1 ? "" : "s"}
+      </PropertyRow>
+
+      <PropertyRow label="Started">
+        {startedAt ? formatDate(startedAt) : <span className="text-muted-foreground">Not yet</span>}
+      </PropertyRow>
+
+      <PropertyRow label="Ended">
+        {endedAt ? formatDate(endedAt) : <span className="text-muted-foreground">Not yet</span>}
+      </PropertyRow>
+
+      <PropertyRow label="Created">
+        {createdAt ? formatDate(createdAt) : <span className="text-muted-foreground">Unknown</span>}
+      </PropertyRow>
+
+      <PropertyRow label="Key">
+        <span className="font-mono text-xs">{keyValue}</span>
+      </PropertyRow>
+
+      <PropertyRow label="Version">v{version}</PropertyRow>
+    </dl>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-lifecycle-controls.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
similarity index 89%
rename from apps/www/src/features/studio/experiments/experiment-lifecycle-controls.tsx
rename to apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
index 0e7b6816a..96e6722a9 100644
--- a/apps/www/src/features/studio/experiments/experiment-lifecycle-controls.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
@@ -17,7 +17,6 @@ import {
 import { Pause, Play, Trophy } from "lucide-react";
 import { useState } from "react";
 
-import { EXPERIMENT_STATUS } from "./experiment-status";
 import {
   archiveExperimentOptions,
   concludeExperimentOptions,
@@ -26,6 +25,7 @@ import {
   restoreExperimentOptions,
   startExperimentOptions,
 } from "@/features/studio/lib/tanstack-query";
+import { EXPERIMENT_STATUS } from "../../lib/experiment-status";
 
 function ConcludeExperimentDialog({
   experimentId,
@@ -53,7 +53,7 @@ function ConcludeExperimentDialog({
   return (
     <Dialog onOpenChange={setOpen} open={open}>
       <DialogTrigger asChild>
-        <Button disabled={disabled} variant="outline">
+        <Button disabled={disabled} size="sm" variant="outline">
           <Trophy className="mr-2 h-4 w-4" />
           Conclude
         </Button>
@@ -104,6 +104,7 @@ function ConcludeExperimentDialog({
   );
 }
 
+/** Lifecycle actions shown in the compact A/B-test detail header. */
 export function ExperimentLifecycleControls({
   experimentId,
   status,
@@ -141,15 +142,24 @@ export function ExperimentLifecycleControls({
       {!isArchived && !isConcluded && (
         <>
           {canStart && (
-            <Button disabled={start.isPending} onClick={() => start.mutate({ id: experimentId })}>
+            <Button
+              disabled={start.isPending}
+              onClick={() => start.mutate({ id: experimentId })}
+              size="sm"
+            >
               <Play className="mr-2 h-4 w-4" />
-              {start.isPending ? "Starting..." : status === EXPERIMENT_STATUS.paused ? "Resume" : "Start"}
+              {start.isPending
+                ? "Starting..."
+                : status === EXPERIMENT_STATUS.paused
+                  ? "Resume"
+                  : "Start"}
             </Button>
           )}
           {isRunning && (
             <Button
               disabled={pause.isPending}
               onClick={() => pause.mutate({ id: experimentId })}
+              size="sm"
               variant="outline"
             >
               <Pause className="mr-2 h-4 w-4" />
@@ -169,6 +179,7 @@ export function ExperimentLifecycleControls({
         <Button
           disabled={restore.isPending}
           onClick={() => restore.mutate({ id: experimentId })}
+          size="sm"
           variant="outline"
         >
           {restore.isPending ? "Restoring..." : "Restore"}
@@ -177,6 +188,7 @@ export function ExperimentLifecycleControls({
         <Button
           disabled={archive.isPending}
           onClick={() => archive.mutate({ id: experimentId })}
+          size="sm"
           variant="destructive"
         >
           {archive.isPending ? "Archiving..." : "Archive"}
diff --git a/apps/www/src/features/studio/experiments/experiment-settings-form.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
similarity index 100%
rename from apps/www/src/features/studio/experiments/experiment-settings-form.tsx
rename to apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
diff --git a/apps/www/src/features/studio/experiments/experiment-setup-panel.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
similarity index 100%
rename from apps/www/src/features/studio/experiments/experiment-setup-panel.tsx
rename to apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
diff --git a/apps/www/src/features/studio/experiments/experiment-treatments-panel.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel.tsx
similarity index 100%
rename from apps/www/src/features/studio/experiments/experiment-treatments-panel.tsx
rename to apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel.tsx
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx
new file mode 100644
index 000000000..7dd1cdf11
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx
@@ -0,0 +1,28 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import { Tooltip, TooltipContent, TooltipTrigger } from "@voidhash/ui/tooltip";
+import { Plus } from "lucide-react";
+
+import { CreateExperimentModal } from "./create-experiment-modal";
+
+/** Compact page-header action for creating an A/B test. */
+export function CreateExperimentButton({ projectId }: { projectId: string }) {
+  return (
+    <Tooltip>
+      <CreateExperimentModal
+        projectId={projectId}
+        trigger={
+          <TooltipTrigger
+            render={
+              <Button aria-label="Create A/B test" size="icon" variant="ghost">
+                <Plus />
+              </Button>
+            }
+          />
+        }
+      />
+      <TooltipContent>Create A/B test</TooltipContent>
+    </Tooltip>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/create-experiment-modal.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-modal.tsx
similarity index 93%
rename from apps/www/src/features/studio/experiments/create-experiment-modal.tsx
rename to apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-modal.tsx
index d4ae90e95..a97deb814 100644
--- a/apps/www/src/features/studio/experiments/create-experiment-modal.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-modal.tsx
@@ -29,7 +29,13 @@ const parseEventNames = (value: string): string[] =>
     ),
   );
 
-export function CreateExperimentModal({ projectId }: { projectId: string }) {
+interface CreateExperimentModalProps {
+  projectId: string;
+  trigger?: React.ReactNode;
+}
+
+/** Dialog for creating an A/B test in the current project. */
+export function CreateExperimentModal({ projectId, trigger }: CreateExperimentModalProps) {
   const [open, setOpen] = useState(false);
   const [name, setName] = useState("");
   const [key, setKey] = useState("");
@@ -67,9 +73,7 @@ export function CreateExperimentModal({ projectId }: { projectId: string }) {
 
   return (
     <Dialog onOpenChange={setOpen} open={open}>
-      <DialogTrigger asChild>
-        <Button>Create Experiment</Button>
-      </DialogTrigger>
+      <DialogTrigger asChild>{trigger ?? <Button>Create Experiment</Button>}</DialogTrigger>
       <DialogContent>
         <DialogHeader>
           <DialogTitle>Create Experiment</DialogTitle>
diff --git a/apps/www/src/features/studio/experiments/experiment-record-skeleton.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record-skeleton.tsx
similarity index 100%
rename from apps/www/src/features/studio/experiments/experiment-record-skeleton.tsx
rename to apps/www/src/features/studio/experiments/components/experiments-page/experiment-record-skeleton.tsx
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx
new file mode 100644
index 000000000..ff16be833
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import { Link, useNavigate } from "@tanstack/react-router";
+import type { RpcExperimentListItem } from "@voidhash/rpc";
+import { Badge, cn, TableCell, TableRow } from "@voidhash/ui";
+
+import { ExperimentStatusBadge } from "../shared/experiment-status-badge";
+
+function formatDate(value: Date | null): string {
+  return value
+    ? value.toLocaleDateString("en", {
+        day: "numeric",
+        month: "short",
+        timeZone: "UTC",
+        year: "numeric",
+      })
+    : "—";
+}
+
+/**
+ * An A/B-test table row linking to its detail page and surfacing the primary
+ * metric, variant count, lifecycle status, and last change.
+ */
+export function ExperimentRecord({
+  experiment,
+  organizationSlug,
+  projectSlug,
+}: {
+  experiment: typeof RpcExperimentListItem.Type;
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  const navigate = useNavigate();
+  const detailLink = {
+    params: { id: experiment.id, organizationSlug, projectSlug },
+    to: "/studio/$organizationSlug/$projectSlug/experiments/$id",
+  } as const;
+  const isArchived = experiment.archivedAt != null;
+
+  return (
+    <TableRow
+      className={cn("cursor-pointer", isArchived && "opacity-60")}
+      onClick={(event) => {
+        if ((event.target as HTMLElement).closest("a,button")) {
+          return;
+        }
+        void navigate(detailLink);
+      }}
+    >
+      <TableCell className="min-w-64">
+        <div className="max-w-sm">
+          <Link className="block truncate font-medium hover:underline" {...detailLink}>
+            {experiment.name}
+          </Link>
+          {experiment.description ? (
+            <p className="mt-0.5 truncate text-muted-foreground text-xs">
+              {experiment.description}
+            </p>
+          ) : null}
+        </div>
+      </TableCell>
+      <TableCell className="font-mono text-muted-foreground text-xs">{experiment.key}</TableCell>
+      <TableCell className="font-mono text-muted-foreground text-xs">
+        {experiment.primaryMetricEventName}
+      </TableCell>
+      <TableCell className="text-muted-foreground">
+        {experiment.variantCount} variant{experiment.variantCount === 1 ? "" : "s"}
+      </TableCell>
+      <TableCell>
+        {isArchived ? (
+          <Badge variant="outline">Archived</Badge>
+        ) : (
+          <ExperimentStatusBadge status={experiment.status} />
+        )}
+      </TableCell>
+      <TableCell className="text-right text-muted-foreground">
+        {formatDate(experiment.updatedAt ?? experiment.createdAt)}
+      </TableCell>
+    </TableRow>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx
new file mode 100644
index 000000000..8f5726b88
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx
@@ -0,0 +1,83 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui/empty";
+import { Archive, CirclePause, CirclePlay, FilePenLine, FlaskConical, Trophy } from "lucide-react";
+
+import { CreateExperimentModal } from "./create-experiment-modal";
+
+type ExperimentEmptyTab = "all" | "draft" | "running" | "paused" | "concluded" | "archived";
+
+interface ExperimentsPageEmptyStateProps {
+  projectId: string;
+  tab: ExperimentEmptyTab;
+}
+
+const EMPTY_TAB_CONTENT = {
+  all: {
+    description:
+      "Compare variants against a measurable goal, split traffic consistently, and learn which experience performs best.",
+    icon: FlaskConical,
+    title: "Run your first A/B test",
+  },
+  draft: {
+    description:
+      "Drafts let you define variants, treatments, and success metrics before any traffic is assigned.",
+    icon: FilePenLine,
+    title: "No draft tests",
+  },
+  running: {
+    description:
+      "Tests appear here while they are actively assigning variants and collecting results.",
+    icon: CirclePlay,
+    title: "No tests running",
+  },
+  paused: {
+    description: "Paused tests keep their setup and results without assigning any new traffic.",
+    icon: CirclePause,
+    title: "No paused tests",
+  },
+  concluded: {
+    description: "Completed tests and their selected winning variants will be kept here.",
+    icon: Trophy,
+    title: "No concluded tests",
+  },
+  archived: {
+    description: "Archived tests are removed from day-to-day work but remain available to restore.",
+    icon: Archive,
+    title: "Nothing archived",
+  },
+} as const satisfies Record<
+  ExperimentEmptyTab,
+  { description: string; icon: typeof FlaskConical; title: string }
+>;
+
+/** Empty state for the A/B test list, tailored to the selected lifecycle status. */
+export function ExperimentsPageEmptyState({ projectId, tab }: ExperimentsPageEmptyStateProps) {
+  const { description, icon: Icon, title } = EMPTY_TAB_CONTENT[tab];
+  const showCreateAction = tab === "all" || tab === "draft";
+
+  return (
+    <Empty className="mx-auto w-full max-w-xl">
+      <EmptyMedia variant="icon">
+        <Icon />
+      </EmptyMedia>
+      <EmptyHeader>
+        <EmptyTitle>{title}</EmptyTitle>
+        <EmptyDescription>{description}</EmptyDescription>
+      </EmptyHeader>
+      {showCreateAction ? (
+        <EmptyContent>
+          <CreateExperimentModal projectId={projectId} trigger={<Button>Create A/B test</Button>} />
+        </EmptyContent>
+      ) : null}
+    </Empty>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-skeleton.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-skeleton.tsx
new file mode 100644
index 000000000..2831bc9e3
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-skeleton.tsx
@@ -0,0 +1,23 @@
+import { DataTableSkeleton, Page, PageBar, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+
+/** Loading shell matching the A/B test index layout. */
+export function ExperimentsPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>A/B Tests</PageHeaderTitle>
+      </PageHeader>
+      <PageBar className="pl-2">
+        <div className="flex items-center gap-4">
+          {Array.from({ length: 6 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <div className="h-5 w-14 rounded bg-muted" key={index} />
+          ))}
+        </div>
+      </PageBar>
+      <div className="w-full px-4 pt-4">
+        <DataTableSkeleton />
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/experiment-status-badge.tsx b/apps/www/src/features/studio/experiments/components/shared/experiment-status-badge.tsx
similarity index 84%
rename from apps/www/src/features/studio/experiments/experiment-status-badge.tsx
rename to apps/www/src/features/studio/experiments/components/shared/experiment-status-badge.tsx
index d9dde7318..8441d3696 100644
--- a/apps/www/src/features/studio/experiments/experiment-status-badge.tsx
+++ b/apps/www/src/features/studio/experiments/components/shared/experiment-status-badge.tsx
@@ -1,6 +1,6 @@
 import { Badge } from "@voidhash/ui";
 
-import { EXPERIMENT_STATUS, experimentStatusLabel } from "./experiment-status";
+import { EXPERIMENT_STATUS, experimentStatusLabel } from "../../lib/experiment-status";
 
 const STATUS_VARIANTS: Record<number, "default" | "secondary" | "destructive" | "outline"> = {
   [EXPERIMENT_STATUS.draft]: "secondary",
diff --git a/apps/www/src/features/studio/experiments/experiment-record.tsx b/apps/www/src/features/studio/experiments/experiment-record.tsx
deleted file mode 100644
index 20c83f81d..000000000
--- a/apps/www/src/features/studio/experiments/experiment-record.tsx
+++ /dev/null
@@ -1,52 +0,0 @@
-"use client";
-import { Link } from "@tanstack/react-router";
-import type { RpcExperimentListItem } from "@voidhash/rpc";
-import { Badge } from "@voidhash/ui";
-
-import { ExperimentStatusBadge } from "./experiment-status-badge";
-
-/**
- * A single experiment row in the A/B tests list. Links to the experiment detail
- * page and surfaces the variant count and lifecycle status.
- */
-export function ExperimentRecord({
-  experiment,
-  organizationSlug,
-  projectSlug,
-}: {
-  experiment: typeof RpcExperimentListItem.Type;
-  organizationSlug: string;
-  projectSlug: string;
-}) {
-  return (
-    <Link
-      className="group relative isolate flex items-center justify-between gap-4 px-6 py-4 transition-colors hover:bg-accent/30"
-      params={{ id: experiment.id, organizationSlug, projectSlug }}
-      to="/studio/$organizationSlug/$projectSlug/experiments/$id"
-    >
-      <div className="min-w-0 flex-1">
-        <div className="flex items-center gap-2">
-          <span className="truncate font-medium text-sm">{experiment.name}</span>
-        </div>
-        <div className="mt-0.5 flex items-center gap-2">
-          <code className="text-muted-foreground text-xs">{experiment.key}</code>
-          {experiment.description && (
-            <>
-              <span className="text-muted-foreground text-xs">·</span>
-              <span className="truncate text-muted-foreground text-xs">
-                {experiment.description}
-              </span>
-            </>
-          )}
-        </div>
-      </div>
-      <div className="flex shrink-0 items-center gap-2">
-        <span className="text-muted-foreground text-xs">
-          {experiment.variantCount} variant{experiment.variantCount === 1 ? "" : "s"}
-        </span>
-        <ExperimentStatusBadge status={experiment.status} />
-        {experiment.archivedAt && <Badge variant="outline">Archived</Badge>}
-      </div>
-    </Link>
-  );
-}
diff --git a/apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx b/apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx
deleted file mode 100644
index d3c6725fc..000000000
--- a/apps/www/src/features/studio/experiments/experiments-page-empty-state.tsx
+++ /dev/null
@@ -1,22 +0,0 @@
-"use client";
-
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
-
-import { CreateExperimentModal } from "./create-experiment-modal";
-
-export function ExperimentsPageEmptyState({ projectId }: { projectId: string }) {
-  return (
-    <Card className="mx-auto w-full max-w-5xl text-center">
-      <CardHeader>
-        <CardTitle>No A/B tests yet</CardTitle>
-        <CardDescription className="mx-auto max-w-md text-balance">
-          Run experiments to split traffic across variants and measure the impact of a change on
-          the metrics that matter. Create your first experiment to get started.
-        </CardDescription>
-      </CardHeader>
-      <CardContent>
-        <CreateExperimentModal projectId={projectId} />
-      </CardContent>
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx b/apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx
deleted file mode 100644
index 3534905b6..000000000
--- a/apps/www/src/features/studio/experiments/experiments-page-skeleton.tsx
+++ /dev/null
@@ -1,21 +0,0 @@
-import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
-
-import { ExperimentRecordSkeleton } from "./experiment-record-skeleton";
-
-export function ExperimentsPageSkeleton() {
-  return (
-    <Page>
-      <PageHeader>
-        <PageHeaderTitle>A/B Tests</PageHeaderTitle>
-      </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
-        <Card className="grid gap-0 divide-y p-0">
-          {Array.from({ length: 4 }).map((_, index) => (
-            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
-            <ExperimentRecordSkeleton key={index} />
-          ))}
-        </Card>
-      </div>
-    </Page>
-  );
-}
diff --git a/apps/www/src/features/studio/experiments/experiment-status.ts b/apps/www/src/features/studio/experiments/lib/experiment-status.ts
similarity index 100%
rename from apps/www/src/features/studio/experiments/experiment-status.ts
rename to apps/www/src/features/studio/experiments/lib/experiment-status.ts
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx
new file mode 100644
index 000000000..18214dfbc
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx
@@ -0,0 +1,48 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+
+import { useFlagDraft } from "./flag-draft-context";
+
+/**
+ * Floating, sticky bar pinned to the bottom of the flag detail screen. Nothing
+ * on the screen writes to the server until Save Changes is pressed here.
+ */
+export function FlagDetailActionBar() {
+  const { changeCount, invalidVariantIds, isSaving, readOnly, reset, save } = useFlagDraft();
+
+  if (readOnly) {
+    return null;
+  }
+
+  const hasInvalidVariants = invalidVariantIds.size > 0;
+
+  return (
+    <div className="sticky bottom-0 z-10 flex items-center justify-center bg-background px-6 pt-6 pb-6">
+      <div className="mx-auto flex items-center justify-between gap-2 rounded-2xl border border-border/60 bg-card py-2 pr-2 pl-4 shadow-lg">
+        <p className="min-w-[14rem] text-muted-foreground text-sm">
+          {hasInvalidVariants
+            ? "Fix the invalid variant values to save"
+            : changeCount === 0
+              ? "No unsaved changes"
+              : `${changeCount} unsaved change${changeCount === 1 ? "" : "s"}`}
+        </p>
+        <Button
+          disabled={isSaving || changeCount === 0}
+          onClick={reset}
+          size="lg"
+          variant="ghost"
+        >
+          Discard
+        </Button>
+        <Button
+          disabled={isSaving || changeCount === 0 || hasInvalidVariants}
+          onClick={save}
+          size="lg"
+        >
+          {isSaving ? "Saving..." : "Save Changes"}
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-actions-menu.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-actions-menu.tsx
new file mode 100644
index 000000000..f656536b5
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-actions-menu.tsx
@@ -0,0 +1,79 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+} from "@voidhash/ui";
+import { ArchiveIcon, ArchiveRestoreIcon, MoreHorizontalIcon } from "lucide-react";
+import { toast } from "sonner";
+
+import {
+  archiveFeatureFlagOptions,
+  queryKeys,
+  restoreFeatureFlagOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+interface FlagDetailActionsMenuProps {
+  flagId: string;
+  isArchived: boolean;
+}
+
+/** Kebab menu on the flag detail header — archive a live flag or restore it. */
+export function FlagDetailActionsMenu({ flagId, isArchived }: FlagDetailActionsMenuProps) {
+  const queryClient = useQueryClient();
+
+  const invalidate = async () => {
+    await queryClient.invalidateQueries({ queryKey: queryKeys.featureFlag.getFlag(flagId) });
+    queryClient.invalidateQueries({ queryKey: queryKeys.featureFlag.all });
+  };
+
+  const { isPending: isArchiving, mutate: archive } = useMutation({
+    ...archiveFeatureFlagOptions(),
+    onError: () => toast.error("Failed to archive flag"),
+    onSuccess: async () => {
+      toast.success("Flag archived");
+      await invalidate();
+    },
+  });
+
+  const { isPending: isRestoring, mutate: restore } = useMutation({
+    ...restoreFeatureFlagOptions(),
+    onError: () => toast.error("Failed to restore flag"),
+    onSuccess: async () => {
+      toast.success("Flag restored");
+      await invalidate();
+    },
+  });
+
+  return (
+    <DropdownMenu>
+      <DropdownMenuTrigger asChild>
+        <Button
+          aria-label="Flag actions"
+          disabled={isArchiving || isRestoring}
+          size="icon-sm"
+          variant="ghost"
+        >
+          <MoreHorizontalIcon />
+        </Button>
+      </DropdownMenuTrigger>
+      <DropdownMenuContent align="end" className="w-40">
+        {isArchived ? (
+          <DropdownMenuItem onSelect={() => restore({ id: flagId })}>
+            <ArchiveRestoreIcon />
+            Restore
+          </DropdownMenuItem>
+        ) : (
+          <DropdownMenuItem onSelect={() => archive({ id: flagId })} variant="destructive">
+            <ArchiveIcon />
+            Archive
+          </DropdownMenuItem>
+        )}
+      </DropdownMenuContent>
+    </DropdownMenu>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-header.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-header.tsx
new file mode 100644
index 000000000..062beb8f8
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-header.tsx
@@ -0,0 +1,103 @@
+"use client";
+
+import { cn, Textarea } from "@voidhash/ui";
+import { useRef, useState } from "react";
+
+import type { FlagType } from "../../lib/flag-type";
+import { FlagTypeIndicator } from "../shared/flag-type-indicator";
+import { useFlagDraft } from "./flag-draft-context";
+
+interface FlagDetailHeaderProps {
+  flagType: FlagType;
+  slug: string;
+}
+
+/**
+ * Click-to-edit field state. Escape flips a ref rather than clearing the draft
+ * alone, so the blur that follows the input unmounting can tell a cancel from
+ * a commit — the blur handler still closes over the pre-cancel draft.
+ */
+function useInlineEdit(onCommit: (next: string) => void) {
+  const [draft, setDraft] = useState<null | string>(null);
+  const cancelled = useRef(false);
+
+  return {
+    cancel: () => {
+      cancelled.current = true;
+      setDraft(null);
+    },
+    change: setDraft,
+    commit: (next: string) => {
+      if (cancelled.current) {
+        cancelled.current = false;
+        return;
+      }
+      setDraft(null);
+      onCommit(next);
+    },
+    draft,
+    start: (value: string) => {
+      cancelled.current = false;
+      setDraft(value);
+    },
+  };
+}
+
+/**
+ * Flag title and description. The slug is the flag's identity in customer code,
+ * so it is read-only here; the description is edited in place — click it, type,
+ * and commit with Enter (Escape reverts). Committing only stages the change;
+ * the bottom action bar saves it.
+ */
+export function FlagDetailHeader({ flagType, slug }: FlagDetailHeaderProps) {
+  const { description, readOnly, setDescription } = useFlagDraft();
+
+  const descriptionEdit = useInlineEdit((next) => setDescription(next.trim()));
+
+  return (
+    <div className="space-y-1">
+      <div className="flex items-center gap-3">
+        <h1 className="min-w-0 break-all font-mono font-semibold text-3xl tracking-tight">
+          {slug}
+        </h1>
+        <FlagTypeIndicator className="shrink-0 text-muted-foreground" flagType={flagType} />
+      </div>
+
+      {descriptionEdit.draft === null ? (
+        <button
+          className={cn(
+            "-mx-2 block w-full rounded-md px-2 py-0.5 text-left text-sm",
+            description ? "text-muted-foreground" : "text-muted-foreground/70",
+            readOnly ? "cursor-default" : "hover:bg-muted/60",
+          )}
+          disabled={readOnly}
+          onClick={() => descriptionEdit.start(description)}
+          type="button"
+        >
+          {description || "Add a description..."}
+        </button>
+      ) : (
+        <Textarea
+          // biome-ignore lint/a11y/noAutofocus: the field only exists once the user opts into editing
+          autoFocus
+          aria-label="Flag description"
+          className="-mx-2 min-h-0 w-[calc(100%+1rem)] resize-none border-transparent bg-muted/60 px-2 py-0.5 text-sm shadow-none"
+          onBlur={(event) => descriptionEdit.commit(event.target.value)}
+          onChange={(event) => descriptionEdit.change(event.target.value)}
+          onKeyDown={(event) => {
+            if (event.key === "Enter" && !event.shiftKey) {
+              event.preventDefault();
+              event.currentTarget.blur();
+            }
+            if (event.key === "Escape") {
+              descriptionEdit.cancel();
+            }
+          }}
+          placeholder="Add a description..."
+          rows={1}
+          value={descriptionEdit.draft}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx
new file mode 100644
index 000000000..c7b07ba3b
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx
@@ -0,0 +1,251 @@
+"use client";
+
+import {
+  Button,
+  cn,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Input,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  Slider,
+} from "@voidhash/ui";
+import { CheckIcon } from "lucide-react";
+import { type ReactNode, useState } from "react";
+
+import type { FlagType } from "../../lib/flag-type";
+import { FlagTypeIndicator } from "../shared/flag-type-indicator";
+import { useFlagDraft } from "./flag-draft-context";
+
+interface FlagDetailPropertiesProps {
+  archivedAt: Date | null;
+  createdAt: Date | null;
+  flagType: FlagType;
+  updatedAt: Date | null;
+  version: number;
+}
+
+const STATUS_PRESENTATION = {
+  archived: { dotClassName: "bg-muted-foreground", label: "Archived" },
+  disabled: { dotClassName: "bg-muted-foreground/50", label: "Disabled" },
+  enabled: { dotClassName: "bg-emerald-500", label: "Enabled" },
+} as const;
+
+const formatDate = (date: Date) =>
+  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
+
+const formatRollout = (rolloutBps: number) => `${(rolloutBps / 100).toFixed(0)}%`;
+
+/**
+ * The box every value sits in, static or interactive, so the whole column
+ * shares one height, type scale, weight and inset. The negative margin cancels
+ * the horizontal padding a trigger needs for its hover state, which keeps the
+ * text on the same axis whether or not the row is clickable.
+ */
+const VALUE_CLASS_NAME =
+  "-ml-2.5 flex h-7 items-center gap-2 px-2.5 font-normal text-foreground text-sm";
+
+function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
+  return (
+    <div className="flex min-h-8 items-center gap-3">
+      <dt className="w-24 shrink-0 text-muted-foreground text-sm">{label}</dt>
+      <dd className="min-w-0 flex-1">{children}</dd>
+    </div>
+  );
+}
+
+/**
+ * Static counterpart to a trigger — same box, no interaction. Dimmed a step
+ * below the editable rows so what can be changed reads as the brighter text,
+ * while staying clear of the still-dimmer property labels.
+ */
+function PropertyValue({ children }: { children: ReactNode }) {
+  return <span className={cn(VALUE_CLASS_NAME, "text-foreground/80")}>{children}</span>;
+}
+
+function StatusDot({ className }: { className: string }) {
+  return <span aria-hidden="true" className={cn("size-2 shrink-0 rounded-full", className)} />;
+}
+
+function RolloutEditor({
+  disabled,
+  onChange,
+  rolloutBps,
+}: {
+  disabled?: boolean;
+  onChange: (rolloutBps: number) => void;
+  rolloutBps: number;
+}) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <PopoverTrigger asChild>
+        <Button
+          aria-label="Change rollout"
+          className={VALUE_CLASS_NAME}
+          disabled={disabled}
+          size="sm"
+          variant="ghost"
+        >
+          {formatRollout(rolloutBps)} of users
+        </Button>
+      </PopoverTrigger>
+      <PopoverContent align="start" className="w-64 space-y-3 p-3">
+        <div className="flex items-center justify-between gap-2">
+          <span className="text-muted-foreground text-xs">Rollout</span>
+          <div className="flex items-center gap-1">
+            <Input
+              aria-label="Rollout percentage"
+              className="h-7 w-16 text-right"
+              max={100}
+              min={0}
+              onChange={(event) => {
+                const percent = Number(event.target.value);
+                if (!Number.isFinite(percent)) {
+                  return;
+                }
+                onChange(Math.round(Math.min(100, Math.max(0, percent)) * 100));
+              }}
+              onKeyDown={(event) => {
+                if (event.key === "Enter") {
+                  event.currentTarget.blur();
+                }
+              }}
+              type="number"
+              value={rolloutBps / 100}
+            />
+            <span className="text-muted-foreground text-sm">%</span>
+          </div>
+        </div>
+        <Slider
+          max={10000}
+          min={0}
+          onValueChange={([value]) => onChange(value ?? 0)}
+          step={100}
+          value={[rolloutBps]}
+        />
+        <p className="text-muted-foreground text-xs">
+          Share of users the flag turns on for. Overrides and allow lists are applied first.
+        </p>
+      </PopoverContent>
+    </Popover>
+  );
+}
+
+/**
+ * Right-hand property list for the feature-flag detail screen. Status and
+ * rollout are edited in place through a dropdown and a popover, staged into the
+ * draft; the remaining rows are immutable facts about the flag.
+ */
+export function FlagDetailProperties({
+  archivedAt,
+  createdAt,
+  flagType,
+  updatedAt,
+  version,
+}: FlagDetailPropertiesProps) {
+  const { enabled, isSaving, readOnly, rolloutBps, setEnabled, setRolloutBps, variants } =
+    useFlagDraft();
+
+  const status = archivedAt
+    ? STATUS_PRESENTATION.archived
+    : enabled
+      ? STATUS_PRESENTATION.enabled
+      : STATUS_PRESENTATION.disabled;
+  const isEditable = !readOnly && !isSaving;
+
+  return (
+    <section className="space-y-3">
+      <h2 className="font-medium text-sm">Properties</h2>
+
+      <dl>
+        <PropertyRow label="Status">
+          {readOnly ? (
+            <PropertyValue>
+              <StatusDot className={status.dotClassName} />
+              {status.label}
+            </PropertyValue>
+          ) : (
+            <DropdownMenu>
+              <DropdownMenuTrigger asChild>
+                <Button
+                  aria-label="Change status"
+                  className={VALUE_CLASS_NAME}
+                  disabled={!isEditable}
+                  size="sm"
+                  variant="ghost"
+                >
+                  <StatusDot className={status.dotClassName} />
+                  {status.label}
+                </Button>
+              </DropdownMenuTrigger>
+              <DropdownMenuContent align="start" className="w-44">
+                {([true, false] as const).map((value) => (
+                  <DropdownMenuItem key={String(value)} onSelect={() => setEnabled(value)}>
+                    <StatusDot
+                      className={
+                        value
+                          ? STATUS_PRESENTATION.enabled.dotClassName
+                          : STATUS_PRESENTATION.disabled.dotClassName
+                      }
+                    />
+                    {value ? STATUS_PRESENTATION.enabled.label : STATUS_PRESENTATION.disabled.label}
+                    {value === enabled && <CheckIcon className="ml-auto" />}
+                  </DropdownMenuItem>
+                ))}
+              </DropdownMenuContent>
+            </DropdownMenu>
+          )}
+        </PropertyRow>
+
+        <PropertyRow label="Allocation">
+          {flagType !== "boolean" ? (
+            <PropertyValue>{`${variants.length} variant${variants.length === 1 ? "" : "s"}`}</PropertyValue>
+          ) : readOnly ? (
+            <PropertyValue>{`${formatRollout(rolloutBps)} of users`}</PropertyValue>
+          ) : (
+            <RolloutEditor
+              disabled={!isEditable}
+              onChange={setRolloutBps}
+              rolloutBps={rolloutBps}
+            />
+          )}
+        </PropertyRow>
+
+        <PropertyRow label="Type">
+          <PropertyValue>
+            <FlagTypeIndicator flagType={flagType} />
+          </PropertyValue>
+        </PropertyRow>
+
+        <PropertyRow label="Created">
+          <PropertyValue>
+            {createdAt ? (
+              formatDate(createdAt)
+            ) : (
+              <span className="text-muted-foreground">Unknown</span>
+            )}
+          </PropertyValue>
+        </PropertyRow>
+
+        <PropertyRow label="Updated">
+          <PropertyValue>
+            {updatedAt ? (
+              formatDate(updatedAt)
+            ) : (
+              <span className="text-muted-foreground">Unknown</span>
+            )}
+          </PropertyValue>
+        </PropertyRow>
+
+        <PropertyRow label="Version">
+          <PropertyValue>v{version}</PropertyValue>
+        </PropertyRow>
+      </dl>
+    </section>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-draft-context.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-draft-context.tsx
new file mode 100644
index 000000000..e460e1d26
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-draft-context.tsx
@@ -0,0 +1,399 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { createContext, type ReactNode, useContext, useMemo, useState } from "react";
+import { toast } from "sonner";
+
+import {
+  getFeatureFlagOptions,
+  queryKeys,
+  saveFeatureFlagDraftOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import type { FlagType } from "../../lib/flag-type";
+
+interface SavedVariant {
+  id: string;
+  label: string | null;
+  value: unknown;
+}
+
+interface SavedTarget {
+  id: string;
+  identityType: number;
+  identityValue: string;
+  listType: number;
+}
+
+interface SavedOverride {
+  forcedEnabled: boolean | null;
+  id: string;
+  identityType: number;
+  identityValue: string;
+  note: string | null;
+}
+
+/** The slice of a feature flag the detail screen edits. */
+export interface FeatureFlagDetail {
+  description: string | null;
+  enabled: boolean;
+  id: string;
+  overrides: readonly SavedOverride[];
+  rolloutBps: number;
+  targets: readonly SavedTarget[];
+  type: FlagType;
+  variants: readonly SavedVariant[];
+}
+
+export interface DraftVariant {
+  /** Absent until the variant has been saved for the first time. */
+  id?: string;
+  label: string;
+  localId: number;
+  /** Raw text; parsed against the flag type on save. */
+  value: string;
+}
+
+export interface DraftTarget {
+  id?: string;
+  identityType: number;
+  identityValue: string;
+  listType: number;
+  localId: number;
+}
+
+export interface DraftOverride {
+  forcedEnabled: boolean | null;
+  id?: string;
+  identityType: number;
+  identityValue: string;
+  localId: number;
+  note: string;
+}
+
+interface FlagDraft {
+  description: string;
+  enabled: boolean;
+  overrides: DraftOverride[];
+  rolloutBps: number;
+  targets: DraftTarget[];
+  variants: DraftVariant[];
+}
+
+interface FlagDraftValue extends FlagDraft {
+  addOverride: (override: Omit<DraftOverride, "localId">) => void;
+  addTarget: (target: Omit<DraftTarget, "localId">) => void;
+  addVariant: () => void;
+  /** How many individual edits are waiting to be saved. */
+  changeCount: number;
+  flagType: FlagType;
+  /** Local ids of variants whose value does not parse as the flag's type. */
+  invalidVariantIds: ReadonlySet<number>;
+  isSaving: boolean;
+  patchVariant: (localId: number, patch: Partial<Omit<DraftVariant, "localId">>) => void;
+  /** Internal or archived flags stage nothing — every control renders read-only. */
+  readOnly: boolean;
+  removeOverride: (localId: number) => void;
+  removeTarget: (localId: number) => void;
+  removeVariant: (localId: number) => void;
+  reset: () => void;
+  save: () => void;
+  setDescription: (description: string) => void;
+  setEnabled: (enabled: boolean) => void;
+  setRolloutBps: (rolloutBps: number) => void;
+}
+
+let nextLocalId = 0;
+
+/** Formats a saved variant value for the text input that edits it. */
+const formatVariantValue = (type: FlagType, value: unknown): string =>
+  type === "json" ? (JSON.stringify(value, null, 2) ?? "") : String(value ?? "");
+
+/** Reads an edited variant value back into the flag's type. Throws when invalid. */
+export const parseVariantValue = (type: FlagType, value: string): unknown => {
+  if (type === "string") {
+    return value;
+  }
+  if (type === "number") {
+    const parsed = Number(value);
+    if (value.trim() === "" || !Number.isFinite(parsed)) {
+      throw new Error("Enter a valid number");
+    }
+    return parsed;
+  }
+  return JSON.parse(value);
+};
+
+const targetKey = (target: Pick<DraftTarget, "identityType" | "identityValue" | "listType">) =>
+  `${target.listType}:${target.identityType}:${target.identityValue}`;
+
+const overrideKey = (
+  override: Pick<DraftOverride, "forcedEnabled" | "identityType" | "identityValue" | "note">,
+) =>
+  `${override.identityType}:${override.identityValue}:${override.forcedEnabled}:${override.note}`;
+
+const toDraft = (flag: FeatureFlagDetail): FlagDraft => ({
+  description: flag.description ?? "",
+  enabled: flag.enabled,
+  overrides: flag.overrides.map((override) => ({
+    forcedEnabled: override.forcedEnabled,
+    id: override.id,
+    identityType: override.identityType,
+    identityValue: override.identityValue,
+    localId: nextLocalId++,
+    note: override.note ?? "",
+  })),
+  rolloutBps: flag.rolloutBps,
+  targets: flag.targets.map((target) => ({
+    id: target.id,
+    identityType: target.identityType,
+    identityValue: target.identityValue,
+    listType: target.listType,
+    localId: nextLocalId++,
+  })),
+  variants: flag.variants.map((variant) => ({
+    id: variant.id,
+    label: variant.label ?? "",
+    localId: nextLocalId++,
+    value: formatVariantValue(flag.type, variant.value),
+  })),
+});
+
+const FlagDraftContext = createContext<FlagDraftValue | null>(null);
+
+/**
+ * Every field on the flag detail screen writes here instead of firing its own
+ * mutation, so the whole screen is saved once from the bottom action bar.
+ */
+export function useFlagDraft(): FlagDraftValue {
+  const value = useContext(FlagDraftContext);
+  if (!value) {
+    throw new Error("useFlagDraft must be used inside a FlagDraftProvider");
+  }
+  return value;
+}
+
+export function FlagDraftProvider({
+  children,
+  flag,
+  readOnly = false,
+}: {
+  children: ReactNode;
+  flag: FeatureFlagDetail;
+  readOnly?: boolean;
+}) {
+  const queryClient = useQueryClient();
+  const [draft, setDraft] = useState<FlagDraft>(() => toDraft(flag));
+  const [syncedFlag, setSyncedFlag] = useState(flag);
+
+  const savedVariantRows = useMemo(
+    () =>
+      flag.variants.map((variant) => ({
+        label: variant.label ?? "",
+        value: formatVariantValue(flag.type, variant.value),
+      })),
+    [flag],
+  );
+
+  // Boolean flags have no variants panel, so rows stored against one are not
+  // editable here — flagging them would block saving with nothing to fix.
+  const invalidVariantIds = useMemo(() => {
+    const invalid = new Set<number>();
+    if (flag.type === "boolean") {
+      return invalid;
+    }
+    for (const variant of draft.variants) {
+      try {
+        parseVariantValue(flag.type, variant.value);
+      } catch {
+        invalid.add(variant.localId);
+      }
+    }
+    return invalid;
+  }, [draft.variants, flag.type]);
+
+  const diff = useMemo(() => {
+    const savedOverrideRows = flag.overrides.map((override) => ({
+      ...override,
+      note: override.note ?? "",
+    }));
+    const draftTargetKeys = new Set(draft.targets.map(targetKey));
+    const savedTargetKeys = new Set(flag.targets.map(targetKey));
+    const draftOverrideKeys = new Set(draft.overrides.map(overrideKey));
+    const savedOverrideKeys = new Set(savedOverrideRows.map(overrideKey));
+
+    const sharedVariants = Math.min(draft.variants.length, savedVariantRows.length);
+    let variantChanges = Math.abs(draft.variants.length - savedVariantRows.length);
+    for (let index = 0; index < sharedVariants; index++) {
+      const drafted = draft.variants[index]!;
+      const saved = savedVariantRows[index]!;
+      if (drafted.label !== saved.label || drafted.value !== saved.value) {
+        variantChanges++;
+      }
+    }
+
+    const description = draft.description.trim();
+    const flagPatch = {
+      ...(description === (flag.description ?? "")
+        ? {}
+        : { description: description.length > 0 ? description : null }),
+      ...(draft.enabled === flag.enabled ? {} : { enabled: draft.enabled }),
+      ...(draft.rolloutBps === flag.rolloutBps ? {} : { rolloutBps: draft.rolloutBps }),
+    };
+
+    const archivedTargetIds = flag.targets
+      .filter((target) => !draftTargetKeys.has(targetKey(target)))
+      .map((target) => target.id);
+    const addedTargets = draft.targets.filter((target) => !savedTargetKeys.has(targetKey(target)));
+    const archivedOverrideIds = savedOverrideRows
+      .filter((override) => !draftOverrideKeys.has(overrideKey(override)))
+      .map((override) => override.id);
+    const addedOverrides = draft.overrides.filter(
+      (override) => !savedOverrideKeys.has(overrideKey(override)),
+    );
+
+    const flagChanges = Object.keys(flagPatch).length;
+
+    return {
+      addedOverrides,
+      addedTargets,
+      archivedOverrideIds,
+      archivedTargetIds,
+      changeCount:
+        flagChanges +
+        variantChanges +
+        archivedTargetIds.length +
+        addedTargets.length +
+        archivedOverrideIds.length +
+        addedOverrides.length,
+      flagPatch: flagChanges > 0 ? flagPatch : undefined,
+      variantsChanged: variantChanges > 0,
+    };
+  }, [draft, flag, savedVariantRows]);
+
+  // Track server data that arrives on its own — a background refetch, or another
+  // tab saving this flag. Only adopt it while the draft is clean, so an edit in
+  // progress is never silently replaced. Saving re-seeds explicitly below.
+  if (syncedFlag !== flag && diff.changeCount === 0) {
+    setSyncedFlag(flag);
+    setDraft(toDraft(flag));
+  }
+
+  const { isPending: isSaving, mutate: saveDraft } = useMutation({
+    ...saveFeatureFlagDraftOptions(),
+    onError: (error) =>
+      toast.error(
+        error._tag === "EffectQueryFailure"
+          ? error.match({
+              "Rpc/ActionForbiddenError": (failure) => failure.message,
+              "Rpc/FeatureFlagNotFoundError": (failure) => failure.message,
+              OrElse: () => "Failed to save changes",
+            })
+          : "Failed to save changes",
+      ),
+    // The screen is committed through several RPCs, so the saved flag only comes
+    // back on a refetch. Re-seed from it rather than from what was sent: that
+    // attaches server ids to the rows just created and leaves the bar showing
+    // whatever genuinely still differs.
+    onSuccess: async () => {
+      toast.success("Changes saved");
+      await queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.getFlag(flag.id),
+        refetchType: "none",
+      });
+      const updated = await queryClient.fetchQuery(getFeatureFlagOptions({ id: flag.id }));
+      setSyncedFlag(updated);
+      setDraft(toDraft(updated));
+      queryClient.invalidateQueries({ queryKey: queryKeys.featureFlag.all });
+    },
+  });
+
+  const value: FlagDraftValue = {
+    ...draft,
+    addOverride: (override) =>
+      setDraft((current) => ({
+        ...current,
+        overrides: [...current.overrides, { ...override, localId: nextLocalId++ }],
+      })),
+    addTarget: (target) =>
+      setDraft((current) => ({
+        ...current,
+        targets: [...current.targets, { ...target, localId: nextLocalId++ }],
+      })),
+    addVariant: () =>
+      setDraft((current) => ({
+        ...current,
+        variants: [
+          ...current.variants,
+          { label: "", localId: nextLocalId++, value: flag.type === "json" ? "{}" : "" },
+        ],
+      })),
+    changeCount: diff.changeCount,
+    flagType: flag.type,
+    invalidVariantIds,
+    isSaving,
+    patchVariant: (localId, patch) =>
+      setDraft((current) => ({
+        ...current,
+        variants: current.variants.map((variant) =>
+          variant.localId === localId ? { ...variant, ...patch } : variant,
+        ),
+      })),
+    readOnly,
+    removeOverride: (localId) =>
+      setDraft((current) => ({
+        ...current,
+        overrides: current.overrides.filter((override) => override.localId !== localId),
+      })),
+    removeTarget: (localId) =>
+      setDraft((current) => ({
+        ...current,
+        targets: current.targets.filter((target) => target.localId !== localId),
+      })),
+    removeVariant: (localId) =>
+      setDraft((current) => ({
+        ...current,
+        variants: current.variants.filter((variant) => variant.localId !== localId),
+      })),
+    reset: () => setDraft(toDraft(flag)),
+    save: () => {
+      if (invalidVariantIds.size > 0 || diff.changeCount === 0) {
+        return;
+      }
+
+      saveDraft({
+        addedOverrides: diff.addedOverrides.map((override) => ({
+          forcedEnabled: override.forcedEnabled,
+          identityType: override.identityType,
+          identityValue: override.identityValue,
+          ...(override.note.trim() ? { note: override.note.trim() } : {}),
+        })),
+        addedTargets: diff.addedTargets.map((target) => ({
+          identityType: target.identityType,
+          identityValue: target.identityValue,
+          listType: target.listType,
+        })),
+        archivedOverrideIds: diff.archivedOverrideIds,
+        archivedTargetIds: diff.archivedTargetIds,
+        id: flag.id,
+        ...(diff.flagPatch ? { flag: diff.flagPatch } : {}),
+        ...(diff.variantsChanged
+          ? {
+              variants: draft.variants.map((variant) => ({
+                ...(variant.id ? { id: variant.id } : {}),
+                ...(flag.type !== "json" && variant.label.trim()
+                  ? { label: variant.label.trim() }
+                  : {}),
+                value: parseVariantValue(flag.type, variant.value),
+              })),
+            }
+          : {}),
+      });
+    },
+    setDescription: (description) => setDraft((current) => ({ ...current, description })),
+    setEnabled: (enabled) => setDraft((current) => ({ ...current, enabled })),
+    setRolloutBps: (rolloutBps) => setDraft((current) => ({ ...current, rolloutBps })),
+  };
+
+  return <FlagDraftContext.Provider value={value}>{children}</FlagDraftContext.Provider>;
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-overrides-panel.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-overrides-panel.tsx
new file mode 100644
index 000000000..bc7cda835
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-overrides-panel.tsx
@@ -0,0 +1,171 @@
+import {
+  Badge,
+  Button,
+  Input,
+  Label,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Switch,
+} from "@voidhash/ui";
+import { PlusIcon, Trash2Icon } from "lucide-react";
+import { type ReactElement, useState } from "react";
+
+import { useFlagDraft } from "./flag-draft-context";
+
+const IDENTITY_TYPE_LABELS: Record<number, string> = {
+  1: "Person ID",
+  2: "App User ID",
+};
+
+function AddOverridePopover({ trigger }: { trigger: ReactElement }) {
+  const { addOverride } = useFlagDraft();
+  const [open, setOpen] = useState(false);
+  const [forcedEnabled, setForcedEnabled] = useState(true);
+  const [identityType, setIdentityType] = useState("2");
+  const [identityValue, setIdentityValue] = useState("");
+  const [note, setNote] = useState("");
+
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <PopoverTrigger asChild>{trigger}</PopoverTrigger>
+      <PopoverContent align="end" className="w-72 p-3">
+        <form
+          className="space-y-3"
+          onSubmit={(event) => {
+            event.preventDefault();
+            addOverride({
+              forcedEnabled,
+              identityType: Number.parseInt(identityType, 10),
+              identityValue: identityValue.trim(),
+              note: note.trim(),
+            });
+            setIdentityValue("");
+            setNote("");
+            setOpen(false);
+          }}
+        >
+          <div className="space-y-1">
+            <Label htmlFor="override-identity-type">Identity</Label>
+            <Select onValueChange={setIdentityType} value={identityType}>
+              <SelectTrigger className="w-full" id="override-identity-type">
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectItem value="1">Person ID</SelectItem>
+                <SelectItem value="2">App User ID</SelectItem>
+              </SelectContent>
+            </Select>
+          </div>
+          <div className="space-y-1">
+            <Label htmlFor="override-identity-value">Value</Label>
+            <Input
+              id="override-identity-value"
+              onChange={(event) => setIdentityValue(event.target.value)}
+              placeholder="Enter identifier..."
+              value={identityValue}
+            />
+          </div>
+          <div className="flex items-center justify-between gap-2">
+            <Label htmlFor="override-forced-enabled">Force enabled</Label>
+            <Switch
+              checked={forcedEnabled}
+              id="override-forced-enabled"
+              onCheckedChange={setForcedEnabled}
+            />
+          </div>
+          <div className="space-y-1">
+            <Label htmlFor="override-note">Note (optional)</Label>
+            <Input
+              id="override-note"
+              onChange={(event) => setNote(event.target.value)}
+              placeholder="Reason for override..."
+              value={note}
+            />
+          </div>
+          <Button className="w-full" disabled={!identityValue.trim()} size="sm" type="submit">
+            Add override
+          </Button>
+        </form>
+      </PopoverContent>
+    </Popover>
+  );
+}
+
+/** Manage identity-specific value overrides for a feature flag. */
+export function FlagOverridesPanel() {
+  const { overrides, readOnly, removeOverride } = useFlagDraft();
+
+  return (
+    <section className="space-y-3">
+      <div className="flex items-start justify-between gap-4">
+        <div>
+          <h2 className="font-medium text-sm">Overrides</h2>
+          <p className="mt-0.5 text-muted-foreground text-xs">
+            Pin the flag on or off for a single identity, usually while debugging.
+          </p>
+        </div>
+        {!readOnly && overrides.length > 0 && (
+          <AddOverridePopover
+            trigger={
+              <Button aria-label="Add override" size="icon-sm" variant="ghost">
+                <PlusIcon />
+              </Button>
+            }
+          />
+        )}
+      </div>
+
+      {overrides.length === 0 ? (
+        readOnly ? (
+          <p className="text-muted-foreground text-sm">No overrides.</p>
+        ) : (
+          <AddOverridePopover
+            trigger={
+              <Button className="-ml-2.5 text-muted-foreground" variant="ghost">
+                <PlusIcon />
+                Add an override
+              </Button>
+            }
+          />
+        )
+      ) : (
+        <ul className="divide-y divide-border/60 border-border/60 border-y">
+          {overrides.map((override) => (
+            <li className="flex items-center justify-between gap-3 py-2.5" key={override.localId}>
+              <span className="flex min-w-0 items-center gap-2">
+                {override.forcedEnabled !== null && (
+                  <Badge variant={override.forcedEnabled ? "secondary" : "destructive"}>
+                    {override.forcedEnabled ? "Forced on" : "Forced off"}
+                  </Badge>
+                )}
+                <span className="shrink-0 text-muted-foreground text-xs">
+                  {IDENTITY_TYPE_LABELS[override.identityType]}
+                </span>
+                <span className="truncate font-mono text-sm">{override.identityValue}</span>
+                {override.note && (
+                  <span className="truncate text-muted-foreground text-xs">{override.note}</span>
+                )}
+              </span>
+              <Button
+                aria-label="Remove override"
+                className="shrink-0 text-muted-foreground"
+                disabled={readOnly}
+                onClick={() => removeOverride(override.localId)}
+                size="icon-sm"
+                variant="ghost"
+              >
+                <Trash2Icon />
+              </Button>
+            </li>
+          ))}
+        </ul>
+      )}
+    </section>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-targeting-panel.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-targeting-panel.tsx
new file mode 100644
index 000000000..c9ec85cc8
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-targeting-panel.tsx
@@ -0,0 +1,164 @@
+import {
+  Badge,
+  Button,
+  Input,
+  Label,
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { PlusIcon, Trash2Icon } from "lucide-react";
+import { type ReactElement, useState } from "react";
+
+import { useFlagDraft } from "./flag-draft-context";
+
+const IDENTITY_TYPE_LABELS: Record<number, string> = {
+  1: "Person ID",
+  2: "App User ID",
+};
+
+const ALLOW_LIST_TYPE = 1;
+
+function AddTargetPopover({ trigger }: { trigger: ReactElement }) {
+  const { addTarget } = useFlagDraft();
+  const [open, setOpen] = useState(false);
+  const [identityType, setIdentityType] = useState("2");
+  const [identityValue, setIdentityValue] = useState("");
+  const [listType, setListType] = useState("1");
+
+  return (
+    <Popover onOpenChange={setOpen} open={open}>
+      <PopoverTrigger asChild>{trigger}</PopoverTrigger>
+      <PopoverContent align="end" className="w-72 p-3">
+        <form
+          className="space-y-3"
+          onSubmit={(event) => {
+            event.preventDefault();
+            addTarget({
+              identityType: Number.parseInt(identityType, 10),
+              identityValue: identityValue.trim(),
+              listType: Number.parseInt(listType, 10),
+            });
+            setIdentityValue("");
+            setOpen(false);
+          }}
+        >
+          <div className="grid grid-cols-2 gap-2">
+            <div className="space-y-1">
+              <Label htmlFor="target-list">List</Label>
+              <Select onValueChange={setListType} value={listType}>
+                <SelectTrigger className="w-full" id="target-list">
+                  <SelectValue />
+                </SelectTrigger>
+                <SelectContent>
+                  <SelectItem value="1">Allow</SelectItem>
+                  <SelectItem value="2">Deny</SelectItem>
+                </SelectContent>
+              </Select>
+            </div>
+            <div className="space-y-1">
+              <Label htmlFor="target-identity-type">Identity</Label>
+              <Select onValueChange={setIdentityType} value={identityType}>
+                <SelectTrigger className="w-full" id="target-identity-type">
+                  <SelectValue />
+                </SelectTrigger>
+                <SelectContent>
+                  <SelectItem value="1">Person ID</SelectItem>
+                  <SelectItem value="2">App User ID</SelectItem>
+                </SelectContent>
+              </Select>
+            </div>
+          </div>
+          <div className="space-y-1">
+            <Label htmlFor="target-identity-value">Value</Label>
+            <Input
+              id="target-identity-value"
+              onChange={(event) => setIdentityValue(event.target.value)}
+              placeholder="Enter identifier..."
+              value={identityValue}
+            />
+          </div>
+          <Button className="w-full" disabled={!identityValue.trim()} size="sm" type="submit">
+            Add rule
+          </Button>
+        </form>
+      </PopoverContent>
+    </Popover>
+  );
+}
+
+/** Manage direct allow- and deny-list targeting for a feature flag. */
+export function FlagTargetingPanel() {
+  const { readOnly, removeTarget, targets } = useFlagDraft();
+
+  // Allow rules first: that is the order they are evaluated in.
+  const ordered = [...targets].sort((a, b) => a.listType - b.listType);
+
+  return (
+    <section className="space-y-3">
+      <div className="flex items-start justify-between gap-4">
+        <div>
+          <h2 className="font-medium text-sm">Targeting</h2>
+          <p className="mt-0.5 text-muted-foreground text-xs">
+            Identities that always or never get the flag, whatever the rollout says.
+          </p>
+        </div>
+        {!readOnly && ordered.length > 0 && (
+          <AddTargetPopover
+            trigger={
+              <Button aria-label="Add targeting rule" size="icon-sm" variant="ghost">
+                <PlusIcon />
+              </Button>
+            }
+          />
+        )}
+      </div>
+
+      {ordered.length === 0 ? (
+        readOnly ? (
+          <p className="text-muted-foreground text-sm">No targeting rules.</p>
+        ) : (
+          <AddTargetPopover
+            trigger={
+              <Button className="-ml-2.5 text-muted-foreground" variant="ghost">
+                <PlusIcon />
+                Add a targeting rule
+              </Button>
+            }
+          />
+        )
+      ) : (
+        <ul className="divide-y divide-border/60 border-border/60 border-y">
+          {ordered.map((target) => (
+            <li className="flex items-center justify-between gap-3 py-2.5" key={target.localId}>
+              <span className="flex min-w-0 items-center gap-2">
+                <Badge variant={target.listType === ALLOW_LIST_TYPE ? "secondary" : "destructive"}>
+                  {target.listType === ALLOW_LIST_TYPE ? "Allow" : "Deny"}
+                </Badge>
+                <span className="shrink-0 text-muted-foreground text-xs">
+                  {IDENTITY_TYPE_LABELS[target.identityType]}
+                </span>
+                <span className="truncate font-mono text-sm">{target.identityValue}</span>
+              </span>
+              <Button
+                aria-label="Remove targeting rule"
+                className="shrink-0 text-muted-foreground"
+                disabled={readOnly}
+                onClick={() => removeTarget(target.localId)}
+                size="icon-sm"
+                variant="ghost"
+              >
+                <Trash2Icon />
+              </Button>
+            </li>
+          ))}
+        </ul>
+      )}
+    </section>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-variants-panel.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-variants-panel.tsx
new file mode 100644
index 000000000..176635389
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-variants-panel.tsx
@@ -0,0 +1,110 @@
+import { Button, cn, Input, Textarea } from "@voidhash/ui";
+import { PlusIcon, Trash2Icon } from "lucide-react";
+
+import { FLAG_TYPE_NOUNS, type FlagType } from "../../lib/flag-type";
+import { useFlagDraft } from "./flag-draft-context";
+
+/** Editor for the values allowed by a non-boolean feature flag. */
+export function FlagVariantsPanel({ flagType }: { flagType: Exclude<FlagType, "boolean"> }) {
+  const { addVariant, invalidVariantIds, patchVariant, readOnly, removeVariant, variants } =
+    useFlagDraft();
+
+  const valueGridClassName = cn(
+    "grid min-w-0 flex-1 gap-2",
+    flagType !== "json" && "sm:grid-cols-2",
+  );
+
+  return (
+    <section className="space-y-3">
+      <div className="flex items-start justify-between gap-4">
+        <div>
+          <h2 className="font-medium text-sm">Variants</h2>
+          <p className="mt-0.5 text-muted-foreground text-xs">
+            The values this flag can evaluate to, distributed evenly.
+          </p>
+        </div>
+        {!readOnly && variants.length > 0 && (
+          <Button aria-label="Add variant" onClick={addVariant} size="icon-sm" variant="ghost">
+            <PlusIcon />
+          </Button>
+        )}
+      </div>
+
+      {variants.length === 0 ? (
+        <Button
+          className="-ml-2.5 text-muted-foreground"
+          disabled={readOnly}
+          onClick={addVariant}
+          variant="ghost"
+        >
+          <PlusIcon />
+          Add a variant
+        </Button>
+      ) : (
+        <ul className="divide-y divide-border/60 border-border/60 border-y">
+          {variants.map((variant, index) => (
+            <li className="flex items-start gap-2 py-2.5" key={variant.localId}>
+              <span className="w-6 shrink-0 pt-2 text-muted-foreground text-xs tabular-nums">
+                #{index + 1}
+              </span>
+              <div className={valueGridClassName}>
+                <div className="space-y-1">
+                  {flagType === "json" ? (
+                    <Textarea
+                      aria-label={`Variant ${index + 1} value`}
+                      className="font-mono text-sm"
+                      disabled={readOnly}
+                      onChange={(event) =>
+                        patchVariant(variant.localId, { value: event.target.value })
+                      }
+                      rows={4}
+                      value={variant.value}
+                    />
+                  ) : (
+                    <Input
+                      aria-label={`Variant ${index + 1} value`}
+                      disabled={readOnly}
+                      onChange={(event) =>
+                        patchVariant(variant.localId, { value: event.target.value })
+                      }
+                      placeholder="Value"
+                      step={flagType === "number" ? "any" : undefined}
+                      type={flagType === "number" ? "number" : "text"}
+                      value={variant.value}
+                    />
+                  )}
+                  {invalidVariantIds.has(variant.localId) && (
+                    <p className="text-destructive text-xs">
+                      Enter a valid {FLAG_TYPE_NOUNS[flagType]} value.
+                    </p>
+                  )}
+                </div>
+                {flagType !== "json" && (
+                  <Input
+                    aria-label={`Variant ${index + 1} label`}
+                    disabled={readOnly}
+                    onChange={(event) =>
+                      patchVariant(variant.localId, { label: event.target.value })
+                    }
+                    placeholder="Label (optional)"
+                    value={variant.label}
+                  />
+                )}
+              </div>
+              <Button
+                aria-label={`Remove variant ${index + 1}`}
+                className="text-muted-foreground"
+                disabled={readOnly}
+                onClick={() => removeVariant(variant.localId)}
+                size="icon-sm"
+                variant="ghost"
+              >
+                <Trash2Icon />
+              </Button>
+            </li>
+          ))}
+        </ul>
+      )}
+    </section>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-button.tsx b/apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-button.tsx
new file mode 100644
index 000000000..cdba984a2
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-button.tsx
@@ -0,0 +1,28 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import { Tooltip, TooltipContent, TooltipTrigger } from "@voidhash/ui/tooltip";
+import { Plus } from "lucide-react";
+
+import { CreateFlagModal } from "./create-flag-modal";
+
+/** Compact page-header action for creating a feature flag. */
+export function CreateFlagButton({ projectId }: { projectId: string }) {
+  return (
+    <Tooltip>
+      <CreateFlagModal
+        projectId={projectId}
+        trigger={
+          <TooltipTrigger
+            render={
+              <Button aria-label="Create feature flag" size="icon" variant="ghost">
+                <Plus />
+              </Button>
+            }
+          />
+        }
+      />
+      <TooltipContent>Create feature flag</TooltipContent>
+    </Tooltip>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-modal.tsx b/apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-modal.tsx
new file mode 100644
index 000000000..b5374d94d
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flags-page/create-flag-modal.tsx
@@ -0,0 +1,303 @@
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import {
+  Button,
+  cn,
+  Dialog,
+  DialogContent,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+  Field,
+  FieldDescription,
+  FieldLabel,
+  FieldLegend,
+  FieldSet,
+  FieldTitle,
+  Input,
+  Label,
+  RadioGroup,
+  RadioGroupItem,
+  Textarea,
+} from "@voidhash/ui";
+import { Plus, Trash2 } from "lucide-react";
+import { useState } from "react";
+
+import { createFeatureFlagOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
+
+import { FLAG_TYPE_LABELS, FLAG_TYPE_NOUNS, type FlagType } from "../../lib/flag-type";
+import { FLAG_TYPE_PRESENTATION } from "../shared/flag-type-indicator";
+
+interface CreateFlagModalProps {
+  projectId: string;
+  trigger?: React.ReactNode;
+}
+
+interface DraftVariant {
+  id: number;
+  label: string;
+  value: string;
+}
+
+const FLAG_TYPE_OPTIONS: FlagType[] = ["boolean", "string", "number", "json"];
+
+let nextVariantId = 0;
+
+const createVariant = (type: FlagType): DraftVariant => ({
+  id: nextVariantId++,
+  label: "",
+  value: type === "json" ? "{}" : "",
+});
+
+const parseVariantValue = (type: FlagType, value: string): unknown => {
+  if (type === "string") {
+    return value;
+  }
+  if (type === "number") {
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed)) {
+      throw new Error("Enter a valid number");
+    }
+    return parsed;
+  }
+  return JSON.parse(value);
+};
+
+type VariantState = { state: "empty" } | { state: "invalid" } | { state: "valid"; value: unknown };
+
+/**
+ * An untouched variant reads as `empty` rather than `invalid`: it blocks
+ * submission without showing an error on a field the user has not filled in
+ * yet, which matters because non-boolean flags start with one variant seeded.
+ */
+const readVariantValue = (type: FlagType, raw: string): VariantState => {
+  if (raw.trim() === "") {
+    return { state: "empty" };
+  }
+  try {
+    return { state: "valid", value: parseVariantValue(type, raw) };
+  } catch {
+    return { state: "invalid" };
+  }
+};
+
+/** Dialog for creating a typed feature flag and its initial variants. */
+export function CreateFlagModal({ projectId, trigger }: CreateFlagModalProps) {
+  const [open, setOpen] = useState(false);
+  const [slug, setSlug] = useState("");
+  const [description, setDescription] = useState("");
+  const [type, setType] = useState<FlagType>("boolean");
+  const [variants, setVariants] = useState<DraftVariant[]>([]);
+  const queryClient = useQueryClient();
+
+  const reset = () => {
+    setSlug("");
+    setDescription("");
+    setType("boolean");
+    setVariants([]);
+  };
+
+  const createFlag = useMutation({
+    ...createFeatureFlagOptions(),
+    onSuccess: () => {
+      queryClient.invalidateQueries({
+        queryKey: queryKeys.featureFlag.all,
+      });
+      setOpen(false);
+      reset();
+    },
+  });
+
+  // A typed flag evaluates to one of its variants, so it needs at least one;
+  // boolean flags carry none at all.
+  const changeType = (next: FlagType) => {
+    setType(next);
+    setVariants(next === "boolean" ? [] : [createVariant(next)]);
+  };
+
+  const patchVariant = (id: number, patch: Partial<DraftVariant>) =>
+    setVariants(variants.map((item) => (item.id === id ? { ...item, ...patch } : item)));
+
+  const variantStates = variants.map((variant) => readVariantValue(type, variant.value));
+  const valueGridClassName = cn("grid min-w-0 flex-1 gap-3", type !== "json" && "sm:grid-cols-2");
+  const canSubmit =
+    slug.trim() !== "" &&
+    (type === "boolean" || variants.length > 0) &&
+    variantStates.every((variant) => variant.state === "valid");
+
+  return (
+    <Dialog onOpenChange={setOpen} open={open}>
+      <DialogTrigger asChild>{trigger ?? <Button>Create Flag</Button>}</DialogTrigger>
+      <DialogContent className="max-h-[90vh] overflow-y-auto sm:max-w-xl">
+        <DialogHeader>
+          <DialogTitle>Create Feature Flag</DialogTitle>
+        </DialogHeader>
+        <form
+          className="space-y-5"
+          onSubmit={(event) => {
+            event.preventDefault();
+            if (!canSubmit) {
+              return;
+            }
+            createFlag.mutate({
+              description: description.trim() || undefined,
+              projectId,
+              slug: slug.trim(),
+              type,
+              variants: variants.map((variant, index) => {
+                const parsed = variantStates[index];
+                return {
+                  ...(type !== "json" && variant.label.trim()
+                    ? { label: variant.label.trim() }
+                    : {}),
+                  value: parsed?.state === "valid" ? parsed.value : null,
+                };
+              }),
+            });
+          }}
+        >
+          <div className="space-y-2">
+            <Label htmlFor="flag-slug">Slug</Label>
+            <Input
+              autoFocus
+              id="flag-slug"
+              onChange={(event) => setSlug(event.target.value)}
+              placeholder="new-checkout"
+              value={slug}
+            />
+            <p className="text-muted-foreground text-xs">
+              Used to evaluate this flag in your application.
+            </p>
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="flag-description">Description</Label>
+            <Textarea
+              id="flag-description"
+              onChange={(event) => setDescription(event.target.value)}
+              placeholder="What does this flag control?"
+              value={description}
+            />
+          </div>
+
+          <FieldSet>
+            <FieldLegend variant="label">Type</FieldLegend>
+            <FieldDescription>A flag&apos;s type cannot be changed after creation.</FieldDescription>
+            <RadioGroup
+              className="grid grid-cols-1 items-start gap-3 sm:grid-cols-2"
+              onValueChange={(value: string) => changeType(value as FlagType)}
+              value={type}
+            >
+              {FLAG_TYPE_OPTIONS.map((option) => {
+                const { accentClassName, icon: Icon } = FLAG_TYPE_PRESENTATION[option];
+
+                return (
+                  <FieldLabel htmlFor={`flag-type-${option}`} key={option}>
+                    <Field orientation="horizontal">
+                      <RadioGroupItem id={`flag-type-${option}`} value={option} />
+                      <FieldTitle className="flex items-center gap-1.5">
+                        <Icon className={cn("size-4 shrink-0", accentClassName)} />
+                        {FLAG_TYPE_LABELS[option]}
+                      </FieldTitle>
+                    </Field>
+                  </FieldLabel>
+                );
+              })}
+            </RadioGroup>
+          </FieldSet>
+
+          {type !== "boolean" && (
+            <div className="space-y-2">
+              {/* Column headers, so each row can be inputs only and the remove
+                  button lines up with them rather than with a per-row label. */}
+              <div className="flex items-center gap-2">
+                <div className={valueGridClassName}>
+                  <span className="font-medium text-sm">Value</span>
+                  {type !== "json" && (
+                    <span className="font-medium text-muted-foreground text-sm">
+                      Label (optional)
+                    </span>
+                  )}
+                </div>
+                <span aria-hidden="true" className="size-8 shrink-0" />
+              </div>
+
+              {variants.map((variant, index) => (
+                <div className="flex items-start gap-2" key={variant.id}>
+                  <div className={valueGridClassName}>
+                    <div className="space-y-1">
+                      {type === "json" ? (
+                        <Textarea
+                          aria-label={`Variant ${index + 1} value`}
+                          className="font-mono text-sm"
+                          onChange={(event) =>
+                            patchVariant(variant.id, { value: event.target.value })
+                          }
+                          rows={3}
+                          value={variant.value}
+                        />
+                      ) : (
+                        <Input
+                          aria-label={`Variant ${index + 1} value`}
+                          onChange={(event) =>
+                            patchVariant(variant.id, { value: event.target.value })
+                          }
+                          placeholder={`variant-${index + 1}`}
+                          step={type === "number" ? "any" : undefined}
+                          type={type === "number" ? "number" : "text"}
+                          value={variant.value}
+                        />
+                      )}
+                      {variantStates[index]?.state === "invalid" && (
+                        <p className="text-destructive text-xs">
+                          Enter a valid {FLAG_TYPE_NOUNS[type]} value.
+                        </p>
+                      )}
+                    </div>
+                    {type !== "json" && (
+                      <Input
+                        aria-label={`Variant ${index + 1} label`}
+                        onChange={(event) => patchVariant(variant.id, { label: event.target.value })}
+                        placeholder="Label"
+                        value={variant.label}
+                      />
+                    )}
+                  </div>
+                  <Button
+                    aria-label="Remove variant"
+                    className="text-muted-foreground"
+                    disabled={variants.length === 1}
+                    onClick={() => setVariants(variants.filter((item) => item.id !== variant.id))}
+                    size="icon"
+                    type="button"
+                    variant="ghost"
+                  >
+                    <Trash2 />
+                  </Button>
+                </div>
+              ))}
+
+              <Button
+                className="-ml-2.5 text-muted-foreground"
+                onClick={() => setVariants([...variants, createVariant(type)])}
+                type="button"
+                variant="ghost"
+              >
+                <Plus />
+                Add variant
+              </Button>
+            </div>
+          )}
+
+          <div className="flex justify-end gap-2">
+            <Button onClick={() => setOpen(false)} type="button" variant="outline">
+              Cancel
+            </Button>
+            <Button disabled={!canSubmit || createFlag.isPending} type="submit">
+              {createFlag.isPending ? "Creating..." : "Create flag"}
+            </Button>
+          </div>
+        </form>
+      </DialogContent>
+    </Dialog>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/flag-record-skeleton.tsx b/apps/www/src/features/studio/feature-flags/components/flags-page/flag-record-skeleton.tsx
similarity index 100%
rename from apps/www/src/features/studio/feature-flags/flag-record-skeleton.tsx
rename to apps/www/src/features/studio/feature-flags/components/flags-page/flag-record-skeleton.tsx
diff --git a/apps/www/src/features/studio/feature-flags/components/flags-page/flag-record.tsx b/apps/www/src/features/studio/feature-flags/components/flags-page/flag-record.tsx
new file mode 100644
index 000000000..d3c954f03
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flags-page/flag-record.tsx
@@ -0,0 +1,93 @@
+"use client";
+
+import { Link, useNavigate } from "@tanstack/react-router";
+import type { RpcFeatureFlagListItem } from "@voidhash/rpc";
+import { Badge, cn, TableCell, TableRow } from "@voidhash/ui";
+import { FlaskConical } from "lucide-react";
+
+import { FlagTypeIndicator } from "../shared/flag-type-indicator";
+
+function formatDate(value: Date | null): string {
+  return value
+    ? value.toLocaleDateString("en", {
+        day: "numeric",
+        month: "short",
+        timeZone: "UTC",
+        year: "numeric",
+      })
+    : "—";
+}
+
+/**
+ * A feature-flag table row linking to its detail page and surfacing the flag's
+ * type, allocation, lifecycle state, and last change.
+ */
+export function FlagRecord({
+  flag,
+  organizationSlug,
+  projectSlug,
+}: {
+  flag: typeof RpcFeatureFlagListItem.Type;
+  organizationSlug: string;
+  projectSlug: string;
+}) {
+  const navigate = useNavigate();
+  const detailLink = {
+    params: { id: flag.id, organizationSlug, projectSlug },
+    to: "/studio/$organizationSlug/$projectSlug/flags/$id",
+  } as const;
+  const isArchived = flag.archivedAt != null;
+  const status = isArchived
+    ? { dotClassName: "bg-muted-foreground/50", label: "Archived" }
+    : flag.enabled
+      ? { dotClassName: "bg-emerald-500", label: "Enabled" }
+      : { dotClassName: "bg-muted-foreground/50", label: "Disabled" };
+
+  return (
+    <TableRow
+      className={cn("cursor-pointer", isArchived && "opacity-60")}
+      onClick={(event) => {
+        if ((event.target as HTMLElement).closest("a,button")) {
+          return;
+        }
+        void navigate(detailLink);
+      }}
+    >
+      <TableCell className="min-w-64">
+        <div className="max-w-sm">
+          <div className="flex items-center gap-2">
+            <Link className="truncate font-medium hover:underline" {...detailLink}>
+              {flag.slug}
+            </Link>
+            {flag.internal ? (
+              <Badge variant="outline">
+                <FlaskConical className="mr-1 size-3" />
+                Internal
+              </Badge>
+            ) : null}
+          </div>
+          {flag.description ? (
+            <p className="mt-0.5 truncate text-muted-foreground text-xs">{flag.description}</p>
+          ) : null}
+        </div>
+      </TableCell>
+      <TableCell>
+        <FlagTypeIndicator flagType={flag.type} />
+      </TableCell>
+      <TableCell className="text-muted-foreground">
+        {flag.variantCount === 0
+          ? `${(flag.rolloutBps / 100).toFixed(0)}% rollout`
+          : `${flag.variantCount} variant${flag.variantCount === 1 ? "" : "s"}`}
+      </TableCell>
+      <TableCell>
+        <span className="inline-flex items-center gap-2">
+          <span className={cn("size-2 rounded-full", status.dotClassName)} />
+          {status.label}
+        </span>
+      </TableCell>
+      <TableCell className="text-right text-muted-foreground">
+        {formatDate(flag.updatedAt ?? flag.createdAt)}
+      </TableCell>
+    </TableRow>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-empty-state.tsx b/apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-empty-state.tsx
new file mode 100644
index 000000000..767cf6481
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-empty-state.tsx
@@ -0,0 +1,74 @@
+"use client";
+
+import { Button } from "@voidhash/ui/button";
+import {
+  Empty,
+  EmptyContent,
+  EmptyDescription,
+  EmptyHeader,
+  EmptyMedia,
+  EmptyTitle,
+} from "@voidhash/ui/empty";
+import { Archive, CircleOff, Flag, ToggleRight } from "lucide-react";
+
+import { CreateFlagModal } from "./create-flag-modal";
+
+type FlagEmptyTab = "all" | "enabled" | "disabled" | "archived";
+
+interface FlagsPageEmptyStateProps {
+  projectId: string;
+  tab: FlagEmptyTab;
+}
+
+const EMPTY_TAB_CONTENT = {
+  all: {
+    description:
+      "Release safely, roll changes out in stages, and target the right people without shipping another app build.",
+    icon: Flag,
+    title: "Create your first feature flag",
+  },
+  enabled: {
+    description:
+      "No flags are serving changes right now. Enable a flag when its rollout is ready for users.",
+    icon: ToggleRight,
+    title: "No flags enabled",
+  },
+  disabled: {
+    description:
+      "Disabled flags stay configured but always evaluate to their off state. New flags will appear here.",
+    icon: CircleOff,
+    title: "No disabled flags",
+  },
+  archived: {
+    description:
+      "Flags you archive are kept here. They stop evaluating for users and can be restored at any time.",
+    icon: Archive,
+    title: "Nothing archived",
+  },
+} as const satisfies Record<
+  FlagEmptyTab,
+  { description: string; icon: typeof Flag; title: string }
+>;
+
+/** Empty state for the feature flag list, tailored to the selected status. */
+export function FlagsPageEmptyState({ projectId, tab }: FlagsPageEmptyStateProps) {
+  const { description, icon: Icon, title } = EMPTY_TAB_CONTENT[tab];
+  const showCreateAction = tab === "all" || tab === "disabled";
+
+  return (
+    <Empty className="mx-auto w-full max-w-xl">
+      <EmptyMedia variant="icon">
+        <Icon />
+      </EmptyMedia>
+      <EmptyHeader>
+        <EmptyTitle>{title}</EmptyTitle>
+        <EmptyDescription>{description}</EmptyDescription>
+      </EmptyHeader>
+      {showCreateAction ? (
+        <EmptyContent>
+          <CreateFlagModal projectId={projectId} trigger={<Button>Create feature flag</Button>} />
+        </EmptyContent>
+      ) : null}
+    </Empty>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-skeleton.tsx b/apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-skeleton.tsx
new file mode 100644
index 000000000..1a4edd20b
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/flags-page/flags-page-skeleton.tsx
@@ -0,0 +1,23 @@
+import { DataTableSkeleton, Page, PageBar, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+
+/** Loading shell matching the feature flag index layout. */
+export function FlagsPageSkeleton() {
+  return (
+    <Page>
+      <PageHeader>
+        <PageHeaderTitle>Feature Flags</PageHeaderTitle>
+      </PageHeader>
+      <PageBar className="pl-2">
+        <div className="flex items-center gap-4">
+          {Array.from({ length: 4 }).map((_, index) => (
+            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
+            <div className="h-5 w-14 rounded bg-muted" key={index} />
+          ))}
+        </div>
+      </PageBar>
+      <div className="w-full px-4 pt-4">
+        <DataTableSkeleton />
+      </div>
+    </Page>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/person-flag-overrides-panel.tsx b/apps/www/src/features/studio/feature-flags/components/person-detail-page/person-flag-overrides-panel.tsx
similarity index 95%
rename from apps/www/src/features/studio/feature-flags/person-flag-overrides-panel.tsx
rename to apps/www/src/features/studio/feature-flags/components/person-detail-page/person-flag-overrides-panel.tsx
index a31b82261..9ac64363f 100644
--- a/apps/www/src/features/studio/feature-flags/person-flag-overrides-panel.tsx
+++ b/apps/www/src/features/studio/feature-flags/components/person-detail-page/person-flag-overrides-panel.tsx
@@ -93,10 +93,9 @@ export function PersonFlagOverridesPanel({
                 <div className="flex items-center justify-between px-4 py-2.5" key={override.id}>
                   <div className="min-w-0 flex-1">
                     <div className="flex items-center gap-2">
-                      <span className="font-medium text-sm">{flag?.name ?? "Unknown flag"}</span>
-                      {flag?.key && (
-                        <span className="font-mono text-muted-foreground text-xs">{flag.key}</span>
-                      )}
+                      <span className="font-mono font-medium text-sm">
+                        {flag?.slug ?? "Unknown flag"}
+                      </span>
                       <Badge variant={override.forcedEnabled ? "default" : "secondary"}>
                         {override.forcedEnabled ? "Forced ON" : "Forced OFF"}
                       </Badge>
@@ -156,7 +155,7 @@ export function PersonFlagOverridesPanel({
                   <SelectContent>
                     {availableFlags.map((flag) => (
                       <SelectItem key={flag.id} value={flag.id}>
-                        {flag.name}
+                        {flag.slug}
                       </SelectItem>
                     ))}
                   </SelectContent>
diff --git a/apps/www/src/features/studio/feature-flags/components/shared/flag-type-indicator.tsx b/apps/www/src/features/studio/feature-flags/components/shared/flag-type-indicator.tsx
new file mode 100644
index 000000000..6f3fd218c
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/components/shared/flag-type-indicator.tsx
@@ -0,0 +1,37 @@
+import { cn } from "@voidhash/ui";
+import { Braces, CaseSensitive, Hash, ToggleRight } from "lucide-react";
+
+import { FLAG_TYPE_LABELS, type FlagType } from "../../lib/flag-type";
+
+/**
+ * Icon and accent per value type, so a flag's type is recognisable at a glance
+ * in a list without reading the label. Accents come from the chart palette,
+ * which is where the design system keeps its categorical colors.
+ */
+export const FLAG_TYPE_PRESENTATION: Record<
+  FlagType,
+  { accentClassName: string; icon: React.ElementType }
+> = {
+  boolean: { accentClassName: "text-chart-1", icon: ToggleRight },
+  json: { accentClassName: "text-chart-3", icon: Braces },
+  number: { accentClassName: "text-chart-4", icon: Hash },
+  string: { accentClassName: "text-chart-2", icon: CaseSensitive },
+};
+
+/** A feature flag's immutable value type, as a colored icon and its label. */
+export function FlagTypeIndicator({
+  className,
+  flagType,
+}: {
+  className?: string;
+  flagType: FlagType;
+}) {
+  const { accentClassName, icon: Icon } = FLAG_TYPE_PRESENTATION[flagType];
+
+  return (
+    <span className={cn("inline-flex items-center gap-1.5 text-sm", className)}>
+      <Icon className={cn("size-4 shrink-0", accentClassName)} />
+      {FLAG_TYPE_LABELS[flagType]}
+    </span>
+  );
+}
diff --git a/apps/www/src/features/studio/feature-flags/create-flag-modal.tsx b/apps/www/src/features/studio/feature-flags/create-flag-modal.tsx
deleted file mode 100644
index a7f3df4b9..000000000
--- a/apps/www/src/features/studio/feature-flags/create-flag-modal.tsx
+++ /dev/null
@@ -1,107 +0,0 @@
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogTrigger,
-  Input,
-  Label,
-  Textarea,
-} from "@voidhash/ui";
-import { useState } from "react";
-
-import { createFeatureFlagOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
-
-export function CreateFlagModal({ projectId }: { projectId: string }) {
-  const [open, setOpen] = useState(false);
-  const [name, setName] = useState("");
-  const [key, setKey] = useState("");
-  const [description, setDescription] = useState("");
-  const queryClient = useQueryClient();
-
-  const createFlag = useMutation({
-    ...createFeatureFlagOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.list({ projectId }),
-      });
-      setOpen(false);
-      setName("");
-      setKey("");
-      setDescription("");
-    },
-  });
-
-  const handleNameChange = (value: string) => {
-    setName(value);
-    setKey(
-      value
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, "-")
-        .replace(/^-|-$/g, ""),
-    );
-  };
-
-  return (
-    <Dialog onOpenChange={setOpen} open={open}>
-      <DialogTrigger asChild>
-        <Button>Create Flag</Button>
-      </DialogTrigger>
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>Create Feature Flag</DialogTitle>
-        </DialogHeader>
-        <form
-          className="space-y-4"
-          onSubmit={(e) => {
-            e.preventDefault();
-            createFlag.mutate({
-              description: description || undefined,
-              key,
-              name,
-              projectId,
-            });
-          }}
-        >
-          <div className="space-y-2">
-            <Label htmlFor="flag-name">Name</Label>
-            <Input
-              id="flag-name"
-              onChange={(e) => handleNameChange(e.target.value)}
-              placeholder="My Feature Flag"
-              value={name}
-            />
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="flag-key">Key</Label>
-            <Input
-              id="flag-key"
-              onChange={(e) => setKey(e.target.value)}
-              placeholder="my-feature-flag"
-              value={key}
-            />
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="flag-description">Description (optional)</Label>
-            <Textarea
-              id="flag-description"
-              onChange={(e) => setDescription(e.target.value)}
-              placeholder="What does this flag control?"
-              value={description}
-            />
-          </div>
-          <div className="flex justify-end gap-2">
-            <Button onClick={() => setOpen(false)} type="button" variant="outline">
-              Cancel
-            </Button>
-            <Button disabled={!name || !key || createFlag.isPending} type="submit">
-              {createFlag.isPending ? "Creating..." : "Create"}
-            </Button>
-          </div>
-        </form>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/flag-general-form.tsx b/apps/www/src/features/studio/feature-flags/flag-general-form.tsx
deleted file mode 100644
index 42de096be..000000000
--- a/apps/www/src/features/studio/feature-flags/flag-general-form.tsx
+++ /dev/null
@@ -1,171 +0,0 @@
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import {
-  Button,
-  Card,
-  CardContent,
-  CardFooter,
-  CardHeader,
-  CardTitle,
-  Input,
-  Label,
-  Separator,
-  Slider,
-  Switch,
-  Textarea,
-} from "@voidhash/ui";
-import { Info } from "lucide-react";
-import { useState } from "react";
-
-import { queryKeys, updateFeatureFlagOptions } from "@/features/studio/lib/tanstack-query";
-
-import type { FlagType } from "./flag-type";
-
-type FlagData = {
-  description: string | null;
-  enabled: boolean;
-  id: string;
-  key: string;
-  name: string;
-  rolloutBps: number;
-};
-
-export function FlagGeneralForm({
-  flag,
-  flagType,
-  readOnly,
-}: {
-  flag: FlagData;
-  flagType: FlagType;
-  readOnly?: boolean;
-}) {
-  const [name, setName] = useState(flag.name);
-  const [key, setKey] = useState(flag.key);
-  const [description, setDescription] = useState(flag.description ?? "");
-  const [enabled, setEnabled] = useState(flag.enabled);
-  const [rolloutBps, setRolloutBps] = useState(flag.rolloutBps);
-  const queryClient = useQueryClient();
-
-  const updateFlag = useMutation({
-    ...updateFeatureFlagOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.getFlag(flag.id),
-      });
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.all,
-      });
-    },
-  });
-
-  const hasChanges =
-    name !== flag.name ||
-    key !== flag.key ||
-    description !== (flag.description ?? "") ||
-    enabled !== flag.enabled ||
-    rolloutBps !== flag.rolloutBps;
-
-  return (
-    <Card>
-      <CardHeader>
-        <CardTitle>General</CardTitle>
-      </CardHeader>
-      <CardContent className="space-y-4">
-        <div className="flex items-center justify-between">
-          <div>
-            <Label htmlFor="flag-enabled">Enabled</Label>
-            <p className="text-muted-foreground text-sm">Toggle the flag on or off globally.</p>
-          </div>
-          <Switch
-            checked={enabled}
-            disabled={readOnly}
-            id="flag-enabled"
-            onCheckedChange={setEnabled}
-          />
-        </div>
-
-        {flagType === "multivariant" ? (
-          <div className="flex items-center gap-2 rounded-md bg-muted/50 px-3 py-2 text-muted-foreground text-sm">
-            <Info className="h-4 w-4 shrink-0" />
-            <span>Rollout is managed by variant weights.</span>
-          </div>
-        ) : (
-          <div className="space-y-2">
-            <Label>Rollout Percentage</Label>
-            <div className="flex items-center gap-4">
-              <Slider
-                disabled={readOnly}
-                max={10000}
-                min={0}
-                onValueChange={([v]) => setRolloutBps(v ?? 0)}
-                step={100}
-                value={[rolloutBps]}
-              />
-              <span className="w-16 text-right text-sm">{(rolloutBps / 100).toFixed(0)}%</span>
-            </div>
-          </div>
-        )}
-
-        <Separator />
-
-        <div className="space-y-2">
-          <Label htmlFor="flag-name">Name</Label>
-          <Input
-            disabled={readOnly}
-            id="flag-name"
-            onChange={(e) => setName(e.target.value)}
-            value={name}
-          />
-        </div>
-        <div className="space-y-2">
-          <Label htmlFor="flag-key">Key</Label>
-          <Input
-            disabled={readOnly}
-            id="flag-key"
-            onChange={(e) => setKey(e.target.value)}
-            value={key}
-          />
-        </div>
-        <div className="space-y-2">
-          <Label htmlFor="flag-description">Description</Label>
-          <Textarea
-            disabled={readOnly}
-            id="flag-description"
-            onChange={(e) => setDescription(e.target.value)}
-            value={description}
-          />
-        </div>
-      </CardContent>
-      {hasChanges && !readOnly && (
-        <CardFooter className="flex justify-end gap-2 border-t pt-4">
-          <Button
-            onClick={() => {
-              setName(flag.name);
-              setKey(flag.key);
-              setDescription(flag.description ?? "");
-              setEnabled(flag.enabled);
-              setRolloutBps(flag.rolloutBps);
-            }}
-            variant="outline"
-          >
-            Reset
-          </Button>
-          <Button
-            disabled={updateFlag.isPending}
-            onClick={() =>
-              updateFlag.mutate({
-                description: description || null,
-                enabled,
-                id: flag.id,
-                key,
-                name,
-                rolloutBps,
-              })
-            }
-          >
-            {updateFlag.isPending ? "Saving..." : "Save Changes"}
-          </Button>
-        </CardFooter>
-      )}
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx b/apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx
deleted file mode 100644
index 65385c46d..000000000
--- a/apps/www/src/features/studio/feature-flags/flag-overrides-panel.tsx
+++ /dev/null
@@ -1,161 +0,0 @@
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import {
-  Button,
-  Input,
-  Label,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-  Switch,
-} from "@voidhash/ui";
-import { Plus, Trash2 } from "lucide-react";
-import { useState } from "react";
-
-import {
-  archiveFeatureFlagOverrideOptions,
-  queryKeys,
-  upsertFeatureFlagOverrideOptions,
-} from "@/features/studio/lib/tanstack-query";
-
-type Override = {
-  forcedEnabled: boolean | null;
-  id: string;
-  identityType: number;
-  identityValue: string;
-  note: string | null;
-};
-
-const IDENTITY_TYPE_LABELS: Record<number, string> = {
-  1: "Person ID",
-  2: "App User ID",
-};
-
-export function FlagOverridesPanel({
-  featureFlagId,
-  overrides,
-}: {
-  featureFlagId: string;
-  overrides: Override[];
-}) {
-  const [identityType, setIdentityType] = useState("2");
-  const [identityValue, setIdentityValue] = useState("");
-  const [forcedEnabled, setForcedEnabled] = useState(true);
-  const [note, setNote] = useState("");
-  const queryClient = useQueryClient();
-
-  const invalidate = () => {
-    queryClient.invalidateQueries({
-      queryKey: queryKeys.featureFlag.getFlag(featureFlagId),
-    });
-  };
-
-  const upsertOverride = useMutation({
-    ...upsertFeatureFlagOverrideOptions(),
-    onSuccess: () => {
-      invalidate();
-      setIdentityValue("");
-      setNote("");
-    },
-  });
-
-  const archiveOverride = useMutation({
-    ...archiveFeatureFlagOverrideOptions(),
-    onSuccess: invalidate,
-  });
-
-  return (
-    <div className="space-y-6">
-      <form
-        className="space-y-3 rounded-md border p-3"
-        onSubmit={(e) => {
-          e.preventDefault();
-          upsertOverride.mutate({
-            featureFlagId,
-            forcedEnabled,
-            identityType: Number.parseInt(identityType, 10),
-            identityValue,
-            note: note || undefined,
-          });
-        }}
-      >
-        <div className="flex items-end gap-3">
-          <div className="space-y-1">
-            <Label>Identity Type</Label>
-            <Select onValueChange={setIdentityType} value={identityType}>
-              <SelectTrigger className="w-36">
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value="1">Person ID</SelectItem>
-                <SelectItem value="2">App User ID</SelectItem>
-              </SelectContent>
-            </Select>
-          </div>
-          <div className="flex-1 space-y-1">
-            <Label>Identity Value</Label>
-            <Input
-              onChange={(e) => setIdentityValue(e.target.value)}
-              placeholder="Enter identifier..."
-              value={identityValue}
-            />
-          </div>
-          <div className="flex items-center gap-2">
-            <Label>Force Enabled</Label>
-            <Switch checked={forcedEnabled} onCheckedChange={setForcedEnabled} />
-          </div>
-        </div>
-        <div className="flex items-end gap-3">
-          <div className="flex-1 space-y-1">
-            <Label>Note (optional)</Label>
-            <Input
-              onChange={(e) => setNote(e.target.value)}
-              placeholder="Reason for override..."
-              value={note}
-            />
-          </div>
-          <Button disabled={!identityValue || upsertOverride.isPending} size="sm" type="submit">
-            <Plus className="mr-1 h-4 w-4" />
-            Add Override
-          </Button>
-        </div>
-      </form>
-
-      {overrides.length > 0 ? (
-        <div className="divide-y rounded-md border">
-          {overrides.map((override) => (
-            <div className="flex items-center justify-between px-3 py-2" key={override.id}>
-              <div>
-                <span className="text-sm">
-                  {IDENTITY_TYPE_LABELS[override.identityType]}: {override.identityValue}
-                </span>
-                <span className="ml-3 text-muted-foreground text-xs">
-                  {override.forcedEnabled === true && "Forced ON"}
-                  {override.forcedEnabled === false && "Forced OFF"}
-                </span>
-                {override.note && (
-                  <span className="ml-2 text-muted-foreground text-xs">({override.note})</span>
-                )}
-              </div>
-              <Button
-                disabled={archiveOverride.isPending}
-                onClick={() =>
-                  archiveOverride.mutate({
-                    id: override.id,
-                  })
-                }
-                size="icon"
-                variant="ghost"
-              >
-                <Trash2 className="h-4 w-4" />
-              </Button>
-            </div>
-          ))}
-        </div>
-      ) : (
-        <p className="text-muted-foreground text-sm">No overrides configured.</p>
-      )}
-    </div>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/flag-record.tsx b/apps/www/src/features/studio/feature-flags/flag-record.tsx
deleted file mode 100644
index dfa1befa1..000000000
--- a/apps/www/src/features/studio/feature-flags/flag-record.tsx
+++ /dev/null
@@ -1,66 +0,0 @@
-"use client";
-import { Link } from "@tanstack/react-router";
-import type { RpcFeatureFlagListItem } from "@voidhash/rpc";
-import { Badge } from "@voidhash/ui";
-import { FlaskConical } from "lucide-react";
-
-import { FlagTypeBadgeFromCount } from "./flag-type-badge";
-
-/**
- * A single feature-flag row in the flags list. Links to the flag detail page and
- * surfaces the flag's type, rollout / variant summary, and enabled state.
- */
-export function FlagRecord({
-  flag,
-  organizationSlug,
-  projectSlug,
-}: {
-  flag: typeof RpcFeatureFlagListItem.Type;
-  organizationSlug: string;
-  projectSlug: string;
-}) {
-  return (
-    <Link
-      className="group relative isolate flex items-center justify-between gap-4 px-6 py-4 transition-colors hover:bg-accent/30"
-      params={{ id: flag.id, organizationSlug, projectSlug }}
-      to="/studio/$organizationSlug/$projectSlug/flags/$id"
-    >
-      <div className="min-w-0 flex-1">
-        <div className="flex items-center gap-2">
-          <span className="truncate font-medium text-sm">{flag.name}</span>
-          {flag.internal && (
-            <Badge variant="outline">
-              <FlaskConical className="mr-1 h-3 w-3" />
-              Internal
-            </Badge>
-          )}
-        </div>
-        <div className="mt-0.5 flex items-center gap-2">
-          <code className="text-muted-foreground text-xs">{flag.key}</code>
-          {flag.description && (
-            <>
-              <span className="text-muted-foreground text-xs">·</span>
-              <span className="truncate text-muted-foreground text-xs">{flag.description}</span>
-            </>
-          )}
-        </div>
-      </div>
-      <div className="flex shrink-0 items-center gap-2">
-        <FlagTypeBadgeFromCount variantCount={flag.variantCount} />
-        {flag.variantCount === 0 ? (
-          <span className="text-muted-foreground text-sm">
-            {(flag.rolloutBps / 100).toFixed(0)}%
-          </span>
-        ) : (
-          <span className="text-muted-foreground text-xs">
-            {flag.variantCount} variant{flag.variantCount === 1 ? "" : "s"}
-          </span>
-        )}
-        <Badge variant={flag.enabled ? "default" : "secondary"}>
-          {flag.enabled ? "Enabled" : "Disabled"}
-        </Badge>
-        {flag.archivedAt && <Badge variant="outline">Archived</Badge>}
-      </div>
-    </Link>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx b/apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx
deleted file mode 100644
index 4b585a76c..000000000
--- a/apps/www/src/features/studio/feature-flags/flag-targeting-panel.tsx
+++ /dev/null
@@ -1,181 +0,0 @@
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import {
-  Button,
-  Input,
-  Label,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@voidhash/ui";
-import { Plus, Trash2 } from "lucide-react";
-import { useState } from "react";
-
-import {
-  archiveFeatureFlagTargetOptions,
-  queryKeys,
-  upsertFeatureFlagTargetOptions,
-} from "@/features/studio/lib/tanstack-query";
-
-type Target = {
-  id: string;
-  identityType: number;
-  identityValue: string;
-  listType: number;
-};
-
-const IDENTITY_TYPE_LABELS: Record<number, string> = {
-  1: "Person ID",
-  2: "App User ID",
-};
-
-export function FlagTargetingPanel({
-  featureFlagId,
-  targets,
-}: {
-  featureFlagId: string;
-  targets: Target[];
-}) {
-  const [identityType, setIdentityType] = useState("2");
-  const [identityValue, setIdentityValue] = useState("");
-  const [listType, setListType] = useState("1");
-  const queryClient = useQueryClient();
-
-  const invalidate = () => {
-    queryClient.invalidateQueries({
-      queryKey: queryKeys.featureFlag.getFlag(featureFlagId),
-    });
-  };
-
-  const upsertTarget = useMutation({
-    ...upsertFeatureFlagTargetOptions(),
-    onSuccess: () => {
-      invalidate();
-      setIdentityValue("");
-    },
-  });
-
-  const archiveTarget = useMutation({
-    ...archiveFeatureFlagTargetOptions(),
-    onSuccess: invalidate,
-  });
-
-  const allowTargets = targets.filter((t) => t.listType === 1);
-  const denyTargets = targets.filter((t) => t.listType === 2);
-
-  return (
-    <div className="space-y-6">
-      <form
-        className="flex items-end gap-3"
-        onSubmit={(e) => {
-          e.preventDefault();
-          upsertTarget.mutate({
-            featureFlagId,
-            identityType: Number.parseInt(identityType),
-            identityValue,
-            listType: Number.parseInt(listType),
-          });
-        }}
-      >
-        <div className="space-y-1">
-          <Label>List</Label>
-          <Select onValueChange={setListType} value={listType}>
-            <SelectTrigger className="w-28">
-              <SelectValue />
-            </SelectTrigger>
-            <SelectContent>
-              <SelectItem value="1">Allow</SelectItem>
-              <SelectItem value="2">Deny</SelectItem>
-            </SelectContent>
-          </Select>
-        </div>
-        <div className="space-y-1">
-          <Label>Identity Type</Label>
-          <Select onValueChange={setIdentityType} value={identityType}>
-            <SelectTrigger className="w-36">
-              <SelectValue />
-            </SelectTrigger>
-            <SelectContent>
-              <SelectItem value="1">Person ID</SelectItem>
-              <SelectItem value="2">App User ID</SelectItem>
-            </SelectContent>
-          </Select>
-        </div>
-        <div className="flex-1 space-y-1">
-          <Label>Identity Value</Label>
-          <Input
-            onChange={(e) => setIdentityValue(e.target.value)}
-            placeholder="Enter identifier..."
-            value={identityValue}
-          />
-        </div>
-        <Button disabled={!identityValue || upsertTarget.isPending} size="sm" type="submit">
-          <Plus className="mr-1 h-4 w-4" />
-          Add
-        </Button>
-      </form>
-
-      {allowTargets.length > 0 && (
-        <div>
-          <h4 className="mb-2 font-medium text-sm">Allow List</h4>
-          <div className="divide-y rounded-md border">
-            {allowTargets.map((target) => (
-              <div className="flex items-center justify-between px-3 py-2" key={target.id}>
-                <span className="text-sm">
-                  {IDENTITY_TYPE_LABELS[target.identityType]}: {target.identityValue}
-                </span>
-                <Button
-                  disabled={archiveTarget.isPending}
-                  onClick={() =>
-                    archiveTarget.mutate({
-                      id: target.id,
-                    })
-                  }
-                  size="icon"
-                  variant="ghost"
-                >
-                  <Trash2 className="h-4 w-4" />
-                </Button>
-              </div>
-            ))}
-          </div>
-        </div>
-      )}
-
-      {denyTargets.length > 0 && (
-        <div>
-          <h4 className="mb-2 font-medium text-sm">Deny List</h4>
-          <div className="divide-y rounded-md border">
-            {denyTargets.map((target) => (
-              <div className="flex items-center justify-between px-3 py-2" key={target.id}>
-                <span className="text-sm">
-                  {IDENTITY_TYPE_LABELS[target.identityType]}: {target.identityValue}
-                </span>
-                <Button
-                  disabled={archiveTarget.isPending}
-                  onClick={() =>
-                    archiveTarget.mutate({
-                      id: target.id,
-                    })
-                  }
-                  size="icon"
-                  variant="ghost"
-                >
-                  <Trash2 className="h-4 w-4" />
-                </Button>
-              </div>
-            ))}
-          </div>
-        </div>
-      )}
-
-      {allowTargets.length === 0 && denyTargets.length === 0 && (
-        <p className="text-muted-foreground text-sm">
-          No targeting rules configured. The flag will be evaluated based on rollout percentage
-          only.
-        </p>
-      )}
-    </div>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/flag-type-badge.tsx b/apps/www/src/features/studio/feature-flags/flag-type-badge.tsx
deleted file mode 100644
index b19c5c2b9..000000000
--- a/apps/www/src/features/studio/feature-flags/flag-type-badge.tsx
+++ /dev/null
@@ -1,34 +0,0 @@
-import { Badge } from "@voidhash/ui";
-import { Braces, Layers, ToggleLeft } from "lucide-react";
-
-import {
-  type FlagType,
-  FLAG_TYPE_LABELS,
-  deriveFlagType,
-  deriveFlagTypeFromCount,
-} from "./flag-type";
-
-const FLAG_TYPE_ICONS: Record<FlagType, React.ElementType> = {
-  boolean: ToggleLeft,
-  json: Braces,
-  multivariant: Layers,
-};
-
-export function FlagTypeBadge({ flagType }: { flagType: FlagType }) {
-  const Icon = FLAG_TYPE_ICONS[flagType];
-
-  return (
-    <Badge variant="outline">
-      <Icon className="mr-1 h-3 w-3" />
-      {FLAG_TYPE_LABELS[flagType]}
-    </Badge>
-  );
-}
-
-export function FlagTypeBadgeFromVariants({ variants }: { variants: { payload?: unknown }[] }) {
-  return <FlagTypeBadge flagType={deriveFlagType(variants)} />;
-}
-
-export function FlagTypeBadgeFromCount({ variantCount }: { variantCount: number }) {
-  return <FlagTypeBadge flagType={deriveFlagTypeFromCount(variantCount)} />;
-}
diff --git a/apps/www/src/features/studio/feature-flags/flag-type.ts b/apps/www/src/features/studio/feature-flags/flag-type.ts
deleted file mode 100644
index 157fa1b1c..000000000
--- a/apps/www/src/features/studio/feature-flags/flag-type.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-export type FlagType = "boolean" | "multivariant" | "json";
-
-export function deriveFlagType(variants: readonly { payload?: unknown }[]): FlagType {
-  if (variants.length === 0) {
-    return "boolean";
-  }
-  if (
-    variants.length === 1 &&
-    variants[0]?.payload !== null &&
-    variants[0]?.payload !== undefined
-  ) {
-    return "json";
-  }
-  return "multivariant";
-}
-
-export function deriveFlagTypeFromCount(variantCount: number): FlagType {
-  if (variantCount === 0) {
-    return "boolean";
-  }
-  return "multivariant";
-}
-
-export const FLAG_TYPE_LABELS: Record<FlagType, string> = {
-  boolean: "Boolean",
-  json: "JSON",
-  multivariant: "Multi-variant",
-};
diff --git a/apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx b/apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx
deleted file mode 100644
index e5c50c326..000000000
--- a/apps/www/src/features/studio/feature-flags/flag-variants-panel.tsx
+++ /dev/null
@@ -1,312 +0,0 @@
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import {
-  Button,
-  Card,
-  CardContent,
-  CardFooter,
-  CardHeader,
-  CardTitle,
-  Input,
-  Label,
-  Textarea,
-} from "@voidhash/ui";
-import { Plus, Trash2 } from "lucide-react";
-import { useState } from "react";
-
-import { queryKeys, updateFeatureFlagVariantsOptions } from "@/features/studio/lib/tanstack-query";
-
-import type { FlagType } from "./flag-type";
-
-type Variant = {
-  _id: string;
-  key: string;
-  name: string;
-  payload?: unknown;
-  weightBps: number;
-};
-
-type FeatureFlagVariant = {
-  key: string;
-  name: string;
-  payload: unknown;
-  weightBps: number;
-};
-
-const VARIANT_COLORS = [
-  "bg-blue-500",
-  "bg-emerald-500",
-  "bg-amber-500",
-  "bg-purple-500",
-  "bg-rose-500",
-  "bg-cyan-500",
-  "bg-orange-500",
-  "bg-indigo-500",
-];
-
-let variantCounter = 0;
-
-export function FlagVariantsPanel({
-  featureFlagId,
-  flagType,
-  readOnly,
-  variants,
-}: {
-  featureFlagId: string;
-  flagType: FlagType;
-  readOnly?: boolean;
-  variants: FeatureFlagVariant[];
-}) {
-  const [localVariants, setLocalVariants] = useState<Variant[]>(
-    variants.map((variant) => ({
-      _id: `v-${variantCounter++}`,
-      key: variant.key,
-      name: variant.name,
-      payload: variant.payload,
-      weightBps: variant.weightBps,
-    })),
-  );
-  const queryClient = useQueryClient();
-
-  const updateVariants = useMutation({
-    ...updateFeatureFlagVariantsOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.getFlag(featureFlagId),
-      });
-    },
-  });
-
-  const totalWeight = localVariants.reduce((sum, variant) => sum + variant.weightBps, 0);
-  const isValid = localVariants.length === 0 || totalWeight === 10000;
-  const isJsonMode = flagType === "json";
-
-  const addVariant = () => {
-    setLocalVariants([
-      ...localVariants,
-      { _id: `v-${variantCounter++}`, key: "", name: "", weightBps: 0 },
-    ]);
-  };
-
-  const removeVariant = (index: number) => {
-    setLocalVariants(localVariants.filter((_, variantIndex) => variantIndex !== index));
-  };
-
-  const updateVariant = (index: number, updates: Partial<Variant>) => {
-    setLocalVariants(
-      localVariants.map((variant, variantIndex) =>
-        variantIndex === index ? { ...variant, ...updates } : variant,
-      ),
-    );
-  };
-
-  const distributeEvenly = () => {
-    if (localVariants.length === 0) {
-      return;
-    }
-
-    const baseWeight = Math.floor(10000 / localVariants.length);
-    const remainder = 10000 - baseWeight * localVariants.length;
-    setLocalVariants(
-      localVariants.map((variant, index) => ({
-        ...variant,
-        weightBps: baseWeight + (index < remainder ? 1 : 0),
-      })),
-    );
-  };
-
-  return (
-    <Card>
-      <CardHeader className="flex flex-row items-center justify-between">
-        <CardTitle>Variants</CardTitle>
-        <div className="flex gap-2">
-          {localVariants.length > 1 && (
-            <Button disabled={readOnly} onClick={distributeEvenly} size="sm" variant="outline">
-              Distribute Evenly
-            </Button>
-          )}
-          {!isJsonMode && (
-            <Button disabled={readOnly} onClick={addVariant} size="sm" variant="outline">
-              <Plus className="mr-1 h-4 w-4" />
-              Add Variant
-            </Button>
-          )}
-        </div>
-      </CardHeader>
-      <CardContent>
-        {localVariants.length === 0 ? (
-          <div className="space-y-2">
-            <p className="text-muted-foreground text-sm">
-              No variants configured. The flag behaves as a boolean toggle.
-            </p>
-            {isJsonMode && (
-              <Button
-                disabled={readOnly}
-                onClick={() => {
-                  setLocalVariants([
-                    {
-                      _id: `v-${variantCounter++}`,
-                      key: "value",
-                      name: "Value",
-                      payload: {},
-                      weightBps: 10000,
-                    },
-                  ]);
-                }}
-                size="sm"
-                variant="outline"
-              >
-                <Plus className="mr-1 h-4 w-4" />
-                Add JSON Value
-              </Button>
-            )}
-          </div>
-        ) : (
-          <div className="space-y-4">
-            {isJsonMode && (
-              <p className="text-muted-foreground text-sm">
-                JSON flags return a single value to the SDK.
-              </p>
-            )}
-
-            {localVariants.map((variant, index) => (
-              <div className="space-y-3 rounded-md border p-3" key={variant._id}>
-                <div className="flex items-end gap-3">
-                  <div className="flex-1 space-y-1">
-                    <Label>Name</Label>
-                    <Input
-                      disabled={readOnly}
-                      onChange={(event) =>
-                        updateVariant(index, {
-                          name: event.target.value,
-                        })
-                      }
-                      placeholder="Variant name"
-                      value={variant.name}
-                    />
-                  </div>
-                  <div className="flex-1 space-y-1">
-                    <Label>Key</Label>
-                    <Input
-                      disabled={readOnly}
-                      onChange={(event) =>
-                        updateVariant(index, {
-                          key: event.target.value,
-                        })
-                      }
-                      placeholder="variant-key"
-                      value={variant.key}
-                    />
-                  </div>
-                  {!isJsonMode && (
-                    <div className="w-24 space-y-1">
-                      <Label>Weight</Label>
-                      <div className="relative">
-                        <Input
-                          className="pr-6"
-                          disabled={readOnly}
-                          onChange={(event) => {
-                            const percent = Number.parseFloat(event.target.value) || 0;
-                            updateVariant(index, {
-                              weightBps: Math.round(percent * 100),
-                            });
-                          }}
-                          step="0.1"
-                          type="number"
-                          value={(variant.weightBps / 100).toFixed(1)}
-                        />
-                        <span className="pointer-events-none absolute top-1/2 right-2 -translate-y-1/2 text-muted-foreground text-sm">
-                          %
-                        </span>
-                      </div>
-                    </div>
-                  )}
-                  {!isJsonMode && (
-                    <Button
-                      disabled={readOnly}
-                      onClick={() => removeVariant(index)}
-                      size="icon"
-                      variant="ghost"
-                    >
-                      <Trash2 className="h-4 w-4" />
-                    </Button>
-                  )}
-                </div>
-
-                {isJsonMode && (
-                  <div className="space-y-1">
-                    <Label>Payload (JSON)</Label>
-                    <Textarea
-                      className="font-mono text-sm"
-                      disabled={readOnly}
-                      onChange={(event) => {
-                        try {
-                          const parsed = JSON.parse(event.target.value);
-                          updateVariant(index, {
-                            payload: parsed,
-                          });
-                        } catch {
-                          // Allow typing invalid JSON temporarily
-                        }
-                      }}
-                      placeholder='{ "key": "value" }'
-                      rows={4}
-                      value={
-                        variant.payload !== null && variant.payload !== undefined
-                          ? JSON.stringify(variant.payload, null, 2)
-                          : ""
-                      }
-                    />
-                  </div>
-                )}
-
-                {!isJsonMode && variant.weightBps > 0 && (
-                  <div
-                    className={`h-1 rounded-full ${VARIANT_COLORS[index % VARIANT_COLORS.length]}`}
-                    style={{
-                      width: `${Math.min((variant.weightBps / 10000) * 100, 100)}%`,
-                    }}
-                  />
-                )}
-              </div>
-            ))}
-
-            {!isJsonMode && localVariants.length > 0 && (
-              <div className="space-y-2">
-                <div className="flex h-2 overflow-hidden rounded-full bg-muted">
-                  {localVariants.map((variant, index) => (
-                    <div
-                      className={`${VARIANT_COLORS[index % VARIANT_COLORS.length]} transition-all`}
-                      key={variant._id}
-                      style={{
-                        width: `${(variant.weightBps / 10000) * 100}%`,
-                      }}
-                    />
-                  ))}
-                </div>
-                <div className="text-sm">
-                  <span className={isValid ? "text-muted-foreground" : "text-destructive"}>
-                    Total: {(totalWeight / 100).toFixed(1)}%
-                  </span>
-                  {!isValid && <span className="ml-2 text-destructive">— must sum to 100%</span>}
-                </div>
-              </div>
-            )}
-          </div>
-        )}
-      </CardContent>
-      <CardFooter className="flex justify-end border-t pt-4">
-        <Button
-          disabled={readOnly || !isValid || updateVariants.isPending}
-          onClick={() =>
-            updateVariants.mutate({
-              featureFlagId,
-              variants: localVariants.map(({ _id: _variantId, ...variant }) => variant),
-            })
-          }
-        >
-          {updateVariants.isPending ? "Saving..." : "Save Variants"}
-        </Button>
-      </CardFooter>
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx b/apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx
deleted file mode 100644
index 303ad2362..000000000
--- a/apps/www/src/features/studio/feature-flags/flags-page-empty-state.tsx
+++ /dev/null
@@ -1,22 +0,0 @@
-"use client";
-
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@voidhash/ui";
-
-import { CreateFlagModal } from "./create-flag-modal";
-
-export function FlagsPageEmptyState({ projectId }: { projectId: string }) {
-  return (
-    <Card className="mx-auto w-full max-w-5xl text-center">
-      <CardHeader>
-        <CardTitle>No feature flags yet</CardTitle>
-        <CardDescription className="mx-auto max-w-md text-balance">
-          Feature flags let you roll out changes gradually, target specific people, and serve
-          multiple variants without shipping new code. Create your first flag to get started.
-        </CardDescription>
-      </CardHeader>
-      <CardContent>
-        <CreateFlagModal projectId={projectId} />
-      </CardContent>
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx b/apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx
deleted file mode 100644
index 5923e4142..000000000
--- a/apps/www/src/features/studio/feature-flags/flags-page-skeleton.tsx
+++ /dev/null
@@ -1,21 +0,0 @@
-import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
-
-import { FlagRecordSkeleton } from "./flag-record-skeleton";
-
-export function FlagsPageSkeleton() {
-  return (
-    <Page>
-      <PageHeader>
-        <PageHeaderTitle>Feature Flags</PageHeaderTitle>
-      </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
-        <Card className="grid gap-0 divide-y p-0">
-          {Array.from({ length: 4 }).map((_, index) => (
-            // biome-ignore lint/suspicious/noArrayIndexKey: skeleton
-            <FlagRecordSkeleton key={index} />
-          ))}
-        </Card>
-      </div>
-    </Page>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/lib/flag-type.ts b/apps/www/src/features/studio/feature-flags/lib/flag-type.ts
new file mode 100644
index 000000000..4504f9da7
--- /dev/null
+++ b/apps/www/src/features/studio/feature-flags/lib/flag-type.ts
@@ -0,0 +1,19 @@
+export type FlagType = "boolean" | "string" | "number" | "json";
+
+export const FLAG_TYPE_LABELS: Record<FlagType, string> = {
+  boolean: "Boolean",
+  json: "JSON",
+  number: "Number",
+  string: "String",
+};
+
+/**
+ * Type name as it reads mid-sentence ("Enter a valid JSON value"). Lowercasing
+ * the display label would turn the JSON initialism into "json".
+ */
+export const FLAG_TYPE_NOUNS: Record<FlagType, string> = {
+  boolean: "boolean",
+  json: "JSON",
+  number: "number",
+  string: "string",
+};
diff --git a/apps/www/src/features/studio/lib/tanstack-query/experiments.ts b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
index 30c46567c..e88a1dad0 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
@@ -3,13 +3,14 @@ import { queryKeys } from "@/features/studio/lib/tanstack-query";
 import { VoidhashRpc, eq } from "../effect-query";
 
 // Queries
-export const listExperimentsOptions = (options: {
-  projectId: string;
-  includeArchived?: boolean;
-}) =>
+/** Query options for a project's A/B tests, with archived records opt-in. */
+export const listExperimentsOptions = (options: { projectId: string; includeArchived?: boolean }) =>
   eq.queryOptions({
     queryFn: () => VoidhashRpc.request((rpc) => rpc.ListExperiments(options)),
-    queryKey: queryKeys.experiment.list({ projectId: options.projectId }),
+    queryKey: queryKeys.experiment.list({
+      includeArchived: options.includeArchived ?? false,
+      projectId: options.projectId,
+    }),
   });
 
 export const getExperimentOptions = (options: { id: string }) =>
diff --git a/apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts b/apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts
index 2d909341e..3e45999f4 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/feature-flags.ts
@@ -1,16 +1,21 @@
 import { Effect } from "effect";
+
 import { queryKeys } from "@/features/studio/lib/tanstack-query";
 
 import { VoidhashRpc, eq } from "../effect-query";
 
 // Queries
+/** Query options for a project's feature flags, with archived records opt-in. */
 export const listFeatureFlagsOptions = (options: {
   projectId: string;
   includeArchived?: boolean;
 }) =>
   eq.queryOptions({
     queryFn: () => VoidhashRpc.request((rpc) => rpc.ListFeatureFlags(options)),
-    queryKey: queryKeys.featureFlag.list({ projectId: options.projectId }),
+    queryKey: queryKeys.featureFlag.list({
+      includeArchived: options.includeArchived ?? false,
+      projectId: options.projectId,
+    }),
   });
 
 export const getFeatureFlagOptions = (options: { id: string }) =>
@@ -33,24 +38,29 @@ export const listFeatureFlagOverridesByPersonOptions = (options: {
 export const createFeatureFlagOptions = () =>
   eq.mutationOptions({
     mutationFn: (variables: {
-      projectId: string;
-      key: string;
-      name: string;
       description?: string;
+      projectId: string;
+      slug: string;
+      type: "boolean" | "string" | "number" | "json";
+      variants: Array<{
+        label?: string;
+        value: unknown;
+      }>;
     }) => VoidhashRpc.request((rpc) => rpc.CreateFeatureFlag(variables)),
     mutationKey: ["createFeatureFlag"],
   });
 
+// `use` rather than `request`: it keeps the RPC's error union intact so callers
+// can match on it (a duplicate slug reads very differently to a server error).
 export const updateFeatureFlagOptions = () =>
   eq.mutationOptions({
     mutationFn: (variables: {
       id: string;
-      name?: string;
       description?: string | null;
       enabled?: boolean;
       rolloutBps?: number;
-      key?: string;
-    }) => VoidhashRpc.request((rpc) => rpc.UpdateFeatureFlag(variables)),
+      slug?: string;
+    }) => VoidhashRpc.use((rpc) => rpc.UpdateFeatureFlag(variables)),
     mutationKey: ["updateFeatureFlag"],
   });
 
@@ -110,11 +120,78 @@ export const updateFeatureFlagVariantsOptions = () =>
     mutationFn: (variables: {
       featureFlagId: string;
       variants: Array<{
-        key: string;
-        name: string;
-        payload?: unknown;
-        weightBps: number;
+        id?: string;
+        label?: string;
+        value: unknown;
       }>;
     }) => VoidhashRpc.request((rpc) => rpc.UpdateFeatureFlagVariants(variables)),
     mutationKey: ["updateFeatureFlagVariants"],
   });
+
+/**
+ * Commits everything staged on the flag detail screen in one request: the flag's
+ * own fields, the full variant list, then target and override removals and
+ * additions. Only the parts the caller passes are touched.
+ *
+ * Removals run before additions so re-adding an identity that was removed in the
+ * same batch ends up live rather than archived. `use` rather than `request`
+ * keeps the RPC error union intact for callers that report typed failures.
+ */
+export const saveFeatureFlagDraftOptions = () =>
+  eq.mutationOptions({
+    mutationFn: (variables: {
+      addedOverrides: ReadonlyArray<{
+        forcedEnabled: boolean | null;
+        identityType: number;
+        identityValue: string;
+        note?: string;
+      }>;
+      addedTargets: ReadonlyArray<{
+        identityType: number;
+        identityValue: string;
+        listType: number;
+      }>;
+      archivedOverrideIds: ReadonlyArray<string>;
+      archivedTargetIds: ReadonlyArray<string>;
+      flag?: {
+        description?: string | null;
+        enabled?: boolean;
+        rolloutBps?: number;
+      };
+      id: string;
+      variants?: ReadonlyArray<{
+        id?: string;
+        label?: string;
+        value: unknown;
+      }>;
+    }) =>
+      VoidhashRpc.use((rpc) =>
+        Effect.gen(function* () {
+          if (variables.flag) {
+            yield* rpc.UpdateFeatureFlag({ id: variables.id, ...variables.flag });
+          }
+
+          if (variables.variants) {
+            yield* rpc.UpdateFeatureFlagVariants({
+              featureFlagId: variables.id,
+              variants: variables.variants,
+            });
+          }
+
+          for (const id of variables.archivedTargetIds) {
+            yield* rpc.ArchiveFeatureFlagTarget({ id });
+          }
+          for (const target of variables.addedTargets) {
+            yield* rpc.UpsertFeatureFlagTarget({ featureFlagId: variables.id, ...target });
+          }
+
+          for (const id of variables.archivedOverrideIds) {
+            yield* rpc.ArchiveFeatureFlagOverride({ id });
+          }
+          for (const override of variables.addedOverrides) {
+            yield* rpc.UpsertFeatureFlagOverride({ featureFlagId: variables.id, ...override });
+          }
+        }),
+      ),
+    mutationKey: ["saveFeatureFlagDraft"],
+  });
diff --git a/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
index af3132456..98ad1f1c2 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/query-keys.ts
@@ -137,7 +137,8 @@ const webhookKeys = {
 const featureFlagKeys = {
   all: ["featureFlags"] as const,
   getFlag: (id: string) => [...featureFlagKeys.all, "getFlag", { id }] as const,
-  list: (options: { projectId: string }) => [...featureFlagKeys.all, "list", options] as const,
+  list: (options: { includeArchived?: boolean; projectId: string }) =>
+    [...featureFlagKeys.all, "list", options] as const,
   overridesByPerson: (options: {
     projectId: string;
     identityType: number;
@@ -148,7 +149,8 @@ const featureFlagKeys = {
 const experimentKeys = {
   all: ["experiments"] as const,
   getExperiment: (id: string) => [...experimentKeys.all, "getExperiment", { id }] as const,
-  list: (options: { projectId: string }) => [...experimentKeys.all, "list", options] as const,
+  list: (options: { includeArchived?: boolean; projectId: string }) =>
+    [...experimentKeys.all, "list", options] as const,
 };
 
 const analyticsKeys = {
diff --git a/apps/www/src/features/studio/paywall-locations/detail/paywall-location-phone-preview.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-phone-preview.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/detail/paywall-location-phone-preview.tsx
rename to apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-phone-preview.tsx
diff --git a/apps/www/src/features/studio/paywall-locations/detail/paywall-location-properties.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-properties.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/detail/paywall-location-properties.tsx
rename to apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-properties.tsx
diff --git a/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/create-paywall-location-modal-button.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/create-paywall-location-modal-button.tsx
rename to apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/create-paywall-location-modal-button.tsx
diff --git a/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/create-paywall-location-modal.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/create-paywall-location-modal.tsx
rename to apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/create-paywall-location-modal.tsx
index db6632a93..2097b88a2 100644
--- a/apps/www/src/features/studio/paywall-locations/create-paywall-location-modal.tsx
+++ b/apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/create-paywall-location-modal.tsx
@@ -25,8 +25,8 @@ import { Input } from "@voidhash/ui/input";
 import { useEffect } from "react";
 import { useForm } from "react-hook-form";
 import { toast } from "sonner";
-import { createPaywallLocationOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
 import { z } from "zod/v3";
+import { createPaywallLocationOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
 
 const createPaywallLocationSchema = z.object({
   description: z.string().max(255, "Description must be less than 255 characters").optional(),
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-location-paywall-cell.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/paywall-location-paywall-cell.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/paywall-location-paywall-cell.tsx
rename to apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/paywall-location-paywall-cell.tsx
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-locations-page-empty-state.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/paywall-locations-page-empty-state.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/paywall-locations-page-empty-state.tsx
rename to apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/paywall-locations-page-empty-state.tsx
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-locations-table.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/paywall-locations-table.tsx
similarity index 98%
rename from apps/www/src/features/studio/paywall-locations/paywall-locations-table.tsx
rename to apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/paywall-locations-table.tsx
index 4b3182cf0..ed4067352 100644
--- a/apps/www/src/features/studio/paywall-locations/paywall-locations-table.tsx
+++ b/apps/www/src/features/studio/paywall-locations/components/paywall-locations-page/paywall-locations-table.tsx
@@ -18,8 +18,8 @@ import {
 } from "@voidhash/ui";
 import { CircleHelpIcon } from "lucide-react";
 
-import type { PaywallLocationMetrics } from "./analytics/paywall-location-metrics";
-import { PaywallLocationActionsMenu } from "./paywall-location-actions-menu";
+import type { PaywallLocationMetrics } from "../../lib/paywall-location-metrics";
+import { PaywallLocationActionsMenu } from "../shared/paywall-location-actions-menu";
 import { PaywallLocationPaywallCell } from "./paywall-location-paywall-cell";
 
 // Money-carrying events are emitted server-side from provider webhooks and
diff --git a/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx b/apps/www/src/features/studio/paywall-locations/components/shared/edit-paywall-location-modal.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
rename to apps/www/src/features/studio/paywall-locations/components/shared/edit-paywall-location-modal.tsx
index 5d2bc22bc..253c15486 100644
--- a/apps/www/src/features/studio/paywall-locations/edit-paywall-location-modal.tsx
+++ b/apps/www/src/features/studio/paywall-locations/components/shared/edit-paywall-location-modal.tsx
@@ -23,8 +23,8 @@ import { Input } from "@voidhash/ui/input";
 import { useEffect } from "react";
 import { useForm } from "react-hook-form";
 import { toast } from "sonner";
-import { queryKeys, updatePaywallLocationOptions } from "@/features/studio/lib/tanstack-query";
 import { z } from "zod/v3";
+import { queryKeys, updatePaywallLocationOptions } from "@/features/studio/lib/tanstack-query";
 
 const editPaywallLocationSchema = z.object({
   description: z.string().max(255, "Description must be less than 255 characters").optional(),
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-combobox.tsx b/apps/www/src/features/studio/paywall-locations/components/shared/paywall-combobox.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/paywall-combobox.tsx
rename to apps/www/src/features/studio/paywall-locations/components/shared/paywall-combobox.tsx
diff --git a/apps/www/src/features/studio/paywall-locations/paywall-location-actions-menu.tsx b/apps/www/src/features/studio/paywall-locations/components/shared/paywall-location-actions-menu.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/paywall-location-actions-menu.tsx
rename to apps/www/src/features/studio/paywall-locations/components/shared/paywall-location-actions-menu.tsx
diff --git a/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-stats.tsx b/apps/www/src/features/studio/paywall-locations/components/shared/paywall-location-stats.tsx
similarity index 99%
rename from apps/www/src/features/studio/paywall-locations/analytics/paywall-location-stats.tsx
rename to apps/www/src/features/studio/paywall-locations/components/shared/paywall-location-stats.tsx
index 109ea3b34..330721712 100644
--- a/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-stats.tsx
+++ b/apps/www/src/features/studio/paywall-locations/components/shared/paywall-location-stats.tsx
@@ -22,7 +22,7 @@ import {
   isMetricRange,
   METRIC_RANGE_OPTIONS,
   type MetricRange,
-} from "./paywall-location-metrics";
+} from "../../lib/paywall-location-metrics";
 
 interface StatTileProps {
   label: string;
diff --git a/apps/www/src/features/studio/paywall-locations/analytics/paywall-location-metrics.ts b/apps/www/src/features/studio/paywall-locations/lib/paywall-location-metrics.ts
similarity index 100%
rename from apps/www/src/features/studio/paywall-locations/analytics/paywall-location-metrics.ts
rename to apps/www/src/features/studio/paywall-locations/lib/paywall-location-metrics.ts
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx b/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-placements.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/detail/paywall-detail-placements.tsx
rename to apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-placements.tsx
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx b/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-properties.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/detail/paywall-detail-properties.tsx
rename to apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-properties.tsx
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-location-combobox.tsx b/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-location-combobox.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/detail/paywall-location-combobox.tsx
rename to apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-location-combobox.tsx
diff --git a/apps/www/src/features/studio/paywalls/detail/paywall-phone-preview.tsx b/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-phone-preview.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/detail/paywall-phone-preview.tsx
rename to apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-phone-preview.tsx
diff --git a/apps/www/src/features/studio/paywalls/create-paywall-button.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/create-paywall-button.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/create-paywall-button.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/create-paywall-button.tsx
diff --git a/apps/www/src/features/studio/paywalls/create-paywall-card.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/create-paywall-card.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/create-paywall-card.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/create-paywall-card.tsx
diff --git a/apps/www/src/features/studio/paywalls/create-paywall-modal.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/create-paywall-modal.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/create-paywall-modal.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/create-paywall-modal.tsx
index bae69c017..38f8cca67 100644
--- a/apps/www/src/features/studio/paywalls/create-paywall-modal.tsx
+++ b/apps/www/src/features/studio/paywalls/components/paywalls-page/create-paywall-modal.tsx
@@ -24,8 +24,8 @@ import { Input } from "@voidhash/ui/input";
 import { useEffect } from "react";
 import { useForm } from "react-hook-form";
 import { toast } from "sonner";
-import { createPaywallOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
 import { z } from "zod/v3";
+import { createPaywallOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
 
 const createPaywallSchema = z.object({
   name: z
diff --git a/apps/www/src/features/studio/paywalls/paywall-actions-menu.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-actions-menu.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywall-actions-menu.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-actions-menu.tsx
diff --git a/apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-card-skeleton.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywall-card-skeleton.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-card-skeleton.tsx
diff --git a/apps/www/src/features/studio/paywalls/paywall-card.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-card.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywall-card.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-card.tsx
diff --git a/apps/www/src/features/studio/paywalls/paywall-record-skeleton.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-record-skeleton.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywall-record-skeleton.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-record-skeleton.tsx
diff --git a/apps/www/src/features/studio/paywalls/paywall-record.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-record.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywall-record.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-record.tsx
diff --git a/apps/www/src/features/studio/paywalls/paywall-table.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-table.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywall-table.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-table.tsx
diff --git a/apps/www/src/features/studio/paywalls/paywall-view-settings.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-view-settings.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywall-view-settings.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywall-view-settings.tsx
diff --git a/apps/www/src/features/studio/paywalls/paywalls-page-empty-state.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/paywalls-page-empty-state.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/paywalls-page-empty-state.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/paywalls-page-empty-state.tsx
diff --git a/apps/www/src/features/studio/paywalls/rename-paywall-dialog.tsx b/apps/www/src/features/studio/paywalls/components/paywalls-page/rename-paywall-dialog.tsx
similarity index 100%
rename from apps/www/src/features/studio/paywalls/rename-paywall-dialog.tsx
rename to apps/www/src/features/studio/paywalls/components/paywalls-page/rename-paywall-dialog.tsx
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
index b008ff0d1..288e11f7f 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
@@ -1,30 +1,35 @@
 import { useSuspenseQuery } from "@tanstack/react-query";
-import { createFileRoute } from "@tanstack/react-router";
+import { createFileRoute, Link } from "@tanstack/react-router";
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
 import {
-  Card,
-  CardContent,
-  CardHeader,
-  CardTitle,
-  Tabs,
+  Badge,
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  Page,
+  PageBar,
+  PageBarTab,
+  PageBarTabs,
+  PageHeader,
+  PageTabs,
   TabsContent,
-  TabsList,
-  TabsTrigger,
 } from "@voidhash/ui";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { EnterpriseAuditLogSlot } from "@/features/studio/enterprise/enterprise-audit-log-slot";
-import { ExperimentLifecycleControls } from "@/features/studio/experiments/experiment-lifecycle-controls";
-import { ExperimentSettingsForm } from "@/features/studio/experiments/experiment-settings-form";
-import { ExperimentSetupPanel } from "@/features/studio/experiments/experiment-setup-panel";
-import { EXPERIMENT_STATUS } from "@/features/studio/experiments/experiment-status";
-import { ExperimentStatusBadge } from "@/features/studio/experiments/experiment-status-badge";
-import { ExperimentTreatmentsPanel } from "@/features/studio/experiments/experiment-treatments-panel";
-import { Page } from "@/features/studio/shell";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { ExperimentDetailProperties } from "@/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties";
+import { ExperimentLifecycleControls } from "@/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls";
+import { ExperimentSettingsForm } from "@/features/studio/experiments/components/experiment-detail-page/experiment-settings-form";
+import { ExperimentSetupPanel } from "@/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel";
+import { ExperimentTreatmentsPanel } from "@/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel";
+import { EXPERIMENT_STATUS } from "@/features/studio/experiments/lib/experiment-status";
 import { getExperimentOptions } from "@/features/studio/lib/tanstack-query";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/$id",
@@ -38,9 +43,7 @@ export const Route = createFileRoute(
  * flag, matching the A/B Tests list route.
  */
 function ExperimentDetailRoute() {
-  const experimentationEnabled = useInternalFeatureFlag(
-    INTERNAL_FEATURE_FLAGS.experimentation.key,
-  );
+  const experimentationEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.experimentation.key);
 
   if (!experimentationEnabled) {
     return (
@@ -77,109 +80,106 @@ function ExperimentDetailPage() {
 
   const { data: experiment } = useSuspenseQuery(getExperimentOptions({ id: id as string }));
 
+  const isArchived = experiment.archivedAt !== null;
   const isRunning = experiment.status === EXPERIMENT_STATUS.running;
   const isConcluded = experiment.status === EXPERIMENT_STATUS.concluded;
-  // Variants and weights are frozen while the experiment is actively assigning
-  // (running) or already concluded.
-  const setupLocked = isRunning || isConcluded;
+  // Variants and weights are frozen once archived, while actively assigning,
+  // or after the experiment has concluded.
+  const setupLocked = isArchived || isRunning || isConcluded;
 
   return (
-    <Page
-      breadcrumbs={[
-        {
-          title: "A/B Tests",
-          url: `/${organizationSlug}/${projectSlug}/experiments`,
-        },
-        {
-          title: experiment.name,
-          url: `/${organizationSlug}/${projectSlug}/experiments/${id}`,
-        },
-      ]}
-      className="p-0 py-8"
-    >
-      <div className="mx-auto max-w-5xl">
-        <div className="flex items-center justify-between">
-          <div>
-            <h1 className="font-normal text-3xl tracking-right">{experiment.name}</h1>
-            <div className="mt-1 flex items-center gap-2">
-              <span className="font-mono text-muted-foreground text-sm">{experiment.key}</span>
-              <ExperimentStatusBadge status={experiment.status} />
-            </div>
+    <Page>
+      <PageTabs defaultValue="setup">
+        <PageHeader
+          className="px-2"
+          rightActions={
+            <ExperimentLifecycleControls
+              archivedAt={experiment.archivedAt}
+              experimentId={experiment.id}
+              status={experiment.status}
+              variants={experiment.variants}
+            />
+          }
+        >
+          <div className="flex items-center gap-2">
+            <Breadcrumb>
+              <BreadcrumbList>
+                <BreadcrumbItem>
+                  <BreadcrumbLink asChild>
+                    <Link
+                      params={{ organizationSlug, projectSlug }}
+                      to="/studio/$organizationSlug/$projectSlug/experiments"
+                    >
+                      A/B Tests
+                    </Link>
+                  </BreadcrumbLink>
+                </BreadcrumbItem>
+                <BreadcrumbSeparator />
+                <BreadcrumbItem>
+                  <BreadcrumbPage>{experiment.name}</BreadcrumbPage>
+                </BreadcrumbItem>
+              </BreadcrumbList>
+            </Breadcrumb>
+            {experiment.archivedAt && <Badge variant="secondary">Archived</Badge>}
           </div>
-          <ExperimentLifecycleControls
-            archivedAt={experiment.archivedAt}
-            experimentId={experiment.id}
-            status={experiment.status}
-            variants={experiment.variants}
-          />
-        </div>
+        </PageHeader>
+
+        <PageBar className="border-b pl-4">
+          <PageBarTabs>
+            <PageBarTab value="setup">Setup</PageBarTab>
+            <PageBarTab value="treatments">Treatments</PageBarTab>
+            <PageBarTab value="settings">Settings</PageBarTab>
+          </PageBarTabs>
+        </PageBar>
+
+        <div className="mx-auto max-w-6xl px-4 py-8 sm:px-8 sm:py-12">
+          <div className="max-w-4xl space-y-10">
+            <div className="space-y-6">
+              <div>
+                <h1 className="font-semibold text-3xl tracking-tight">{experiment.name}</h1>
+                <p className="mt-1 text-muted-foreground text-sm">
+                  {experiment.description ||
+                    `Measure ${experiment.primaryMetricEventName} across ${experiment.variants.length} variants.`}
+                </p>
+              </div>
+              <ExperimentDetailProperties
+                archivedAt={experiment.archivedAt}
+                createdAt={experiment.createdAt}
+                endedAt={experiment.endedAt}
+                keyValue={experiment.key}
+                primaryMetricEventName={experiment.primaryMetricEventName}
+                startedAt={experiment.startedAt}
+                status={experiment.status}
+                variantCount={experiment.variants.length}
+                version={experiment.version}
+              />
+            </div>
+
+            <TabsContent value="setup">
+              <ExperimentSetupPanel
+                experimentId={experiment.id}
+                readOnly={setupLocked}
+                variants={[...experiment.variants]}
+              />
+            </TabsContent>
+
+            <TabsContent value="treatments">
+              <ExperimentTreatmentsPanel
+                experimentId={experiment.id}
+                projectId={project.id}
+                readOnly={isArchived || isConcluded}
+                treatments={experiment.treatments}
+                variants={experiment.variants}
+              />
+            </TabsContent>
+
+            <TabsContent value="settings">
+              <ExperimentSettingsForm
+                experiment={experiment}
+                readOnly={isArchived || isConcluded}
+              />
+            </TabsContent>
 
-        <div className="mt-8 grid grid-cols-12 gap-6">
-          <div className="col-span-9 space-y-6">
-            <Tabs defaultValue="setup">
-              <TabsList>
-                <TabsTrigger value="setup">Setup</TabsTrigger>
-                <TabsTrigger value="treatments">Treatments</TabsTrigger>
-                <TabsTrigger value="settings">Settings</TabsTrigger>
-              </TabsList>
-
-              <TabsContent value="setup">
-                <ExperimentSetupPanel
-                  experimentId={experiment.id}
-                  readOnly={setupLocked}
-                  variants={[...experiment.variants]}
-                />
-              </TabsContent>
-
-              <TabsContent value="treatments">
-                <ExperimentTreatmentsPanel
-                  experimentId={experiment.id}
-                  projectId={project.id}
-                  readOnly={isConcluded}
-                  treatments={experiment.treatments}
-                  variants={experiment.variants}
-                />
-              </TabsContent>
-
-              <TabsContent value="settings">
-                <ExperimentSettingsForm experiment={experiment} readOnly={isConcluded} />
-              </TabsContent>
-            </Tabs>
-          </div>
-          <div className="col-span-3 space-y-6">
-            <Card>
-              <CardHeader>
-                <CardTitle className="text-sm">Details</CardTitle>
-              </CardHeader>
-              <CardContent className="space-y-4 text-sm">
-                <div>
-                  <p className="text-muted-foreground">Primary metric</p>
-                  <p className="font-mono text-xs">{experiment.primaryMetricEventName}</p>
-                </div>
-                <div>
-                  <p className="text-muted-foreground">Version</p>
-                  <p>{experiment.version}</p>
-                </div>
-                {experiment.startedAt && (
-                  <div>
-                    <p className="text-muted-foreground">Started</p>
-                    <p>{new Date(experiment.startedAt).toLocaleDateString()}</p>
-                  </div>
-                )}
-                {experiment.endedAt && (
-                  <div>
-                    <p className="text-muted-foreground">Ended</p>
-                    <p>{new Date(experiment.endedAt).toLocaleDateString()}</p>
-                  </div>
-                )}
-                {experiment.createdAt && (
-                  <div>
-                    <p className="text-muted-foreground">Created</p>
-                    <p>{new Date(experiment.createdAt).toLocaleDateString()}</p>
-                  </div>
-                )}
-              </CardContent>
-            </Card>
             <EnterpriseAuditLogSlot
               entityId={experiment.id}
               entityType="experiment"
@@ -187,7 +187,7 @@ function ExperimentDetailPage() {
             />
           </div>
         </div>
-      </div>
+      </PageTabs>
     </Page>
   );
 }
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
index e0d24e7fd..a9cbcac6e 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
@@ -1,17 +1,56 @@
 import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
-import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import {
+  cn,
+  Page,
+  PageBar,
+  PageHeader,
+  PageHeaderTitle,
+  Table,
+  TableBody,
+  TableHead,
+  TableHeader,
+  TableRow,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import { z } from "zod";
 import { useAuth } from "@/features/studio/components/auth-context";
 
-import { CreateExperimentModal } from "@/features/studio/experiments/create-experiment-modal";
-import { ExperimentRecord } from "@/features/studio/experiments/experiment-record";
-import { ExperimentsPageEmptyState } from "@/features/studio/experiments/experiments-page-empty-state";
-import { ExperimentsPageSkeleton } from "@/features/studio/experiments/experiments-page-skeleton";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { CreateExperimentButton } from "@/features/studio/experiments/components/experiments-page/create-experiment-button";
+import { ExperimentRecord } from "@/features/studio/experiments/components/experiments-page/experiment-record";
+import { ExperimentsPageEmptyState } from "@/features/studio/experiments/components/experiments-page/experiments-page-empty-state";
+import { ExperimentsPageSkeleton } from "@/features/studio/experiments/components/experiments-page/experiments-page-skeleton";
+import { EXPERIMENT_STATUS } from "@/features/studio/experiments/lib/experiment-status";
 import { listExperimentsOptions } from "@/features/studio/lib/tanstack-query";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+const EXPERIMENT_TABS = [
+  { label: "All", value: "all" },
+  { label: "Draft", value: "draft" },
+  { label: "Running", value: "running" },
+  { label: "Paused", value: "paused" },
+  { label: "Concluded", value: "concluded" },
+  { label: "Archived", value: "archived" },
+] as const;
+
+type ExperimentTab = (typeof EXPERIMENT_TABS)[number]["value"];
+
+const DEFAULT_EXPERIMENT_TAB: ExperimentTab = "all";
+
+const isExperimentTab = (value: string): value is ExperimentTab =>
+  EXPERIMENT_TABS.some((item) => item.value === value);
+
+const experimentsSearchSchema = z.object({
+  tab: z
+    .enum(EXPERIMENT_TABS.map((item) => item.value))
+    .default(DEFAULT_EXPERIMENT_TAB)
+    .catch(DEFAULT_EXPERIMENT_TAB),
+});
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments/",
@@ -19,6 +58,7 @@ export const Route = createFileRoute(
   component: ExperimentsIndexRoute,
   errorComponent: ExperimentsIndexPageError,
   pendingComponent: ExperimentsPageSkeleton,
+  validateSearch: zodValidator(experimentsSearchSchema),
 });
 
 function ExperimentsIndexPageError() {
@@ -37,9 +77,7 @@ function ExperimentsIndexPageError() {
  * matching the Feature Flags routes in the same suite.
  */
 function ExperimentsIndexRoute() {
-  const experimentationEnabled = useInternalFeatureFlag(
-    INTERNAL_FEATURE_FLAGS.experimentation.key,
-  );
+  const experimentationEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.experimentation.key);
 
   if (!experimentationEnabled) {
     return (
@@ -63,31 +101,87 @@ function ExperimentsIndexPage() {
     throw new Error("Project not found");
   }
 
-  const { data: experiments } = useSuspenseQuery(listExperimentsOptions({ projectId: project.id }));
+  const { tab } = Route.useSearch();
+  const navigate = Route.useNavigate();
+  const { data: allExperiments } = useSuspenseQuery(
+    listExperimentsOptions({ includeArchived: true, projectId: project.id }),
+  );
+
+  const experiments = allExperiments.filter((experiment) => {
+    const isArchived = experiment.archivedAt != null;
+    switch (tab) {
+      case "all":
+        return true;
+      case "draft":
+        return !isArchived && experiment.status === EXPERIMENT_STATUS.draft;
+      case "running":
+        return !isArchived && experiment.status === EXPERIMENT_STATUS.running;
+      case "paused":
+        return !isArchived && experiment.status === EXPERIMENT_STATUS.paused;
+      case "concluded":
+        return !isArchived && experiment.status === EXPERIMENT_STATUS.concluded;
+      case "archived":
+        return isArchived;
+      default: {
+        const _exhaustive: never = tab;
+        return _exhaustive;
+      }
+    }
+  });
+
+  const isEmpty = experiments.length === 0;
 
   return (
-    <Page>
+    <Page className={cn(isEmpty && "flex flex-col")}>
       <PageHeader
-        rightActions={
-          experiments.length > 0 ? <CreateExperimentModal projectId={project.id} /> : null
-        }
+        className="shrink-0"
+        rightActions={<CreateExperimentButton projectId={project.id} />}
       >
         <PageHeaderTitle>A/B Tests</PageHeaderTitle>
       </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
-        {experiments.length === 0 ? (
-          <ExperimentsPageEmptyState projectId={project.id} />
+      <PageBar className="shrink-0 pl-2">
+        <ToggleGroup
+          onValueChange={(value: string) => {
+            if (isExperimentTab(value)) {
+              void navigate({ replace: true, search: (prev) => ({ ...prev, tab: value }) });
+            }
+          }}
+          type="single"
+          value={tab}
+        >
+          {EXPERIMENT_TABS.map((item) => (
+            <ToggleGroupItem key={item.value} value={item.value}>
+              {item.label}
+            </ToggleGroupItem>
+          ))}
+        </ToggleGroup>
+      </PageBar>
+      <div className={cn("w-full px-4 pt-4", isEmpty && "flex flex-1 flex-col pb-4")}>
+        {isEmpty ? (
+          <ExperimentsPageEmptyState projectId={project.id} tab={tab} />
         ) : (
-          <Card className="grid gap-0 divide-y p-0">
-            {experiments.map((experiment) => (
-              <ExperimentRecord
-                experiment={experiment}
-                key={experiment.id}
-                organizationSlug={organizationSlug as string}
-                projectSlug={projectSlug as string}
-              />
-            ))}
-          </Card>
+          <Table containerClassName="overflow-x-auto">
+            <TableHeader>
+              <TableRow>
+                <TableHead>A/B test</TableHead>
+                <TableHead>Key</TableHead>
+                <TableHead>Primary metric</TableHead>
+                <TableHead>Variants</TableHead>
+                <TableHead>Status</TableHead>
+                <TableHead className="text-right">Updated</TableHead>
+              </TableRow>
+            </TableHeader>
+            <TableBody>
+              {experiments.map((experiment) => (
+                <ExperimentRecord
+                  experiment={experiment}
+                  key={experiment.id}
+                  organizationSlug={organizationSlug as string}
+                  projectSlug={projectSlug as string}
+                />
+              ))}
+            </TableBody>
+          </Table>
         )}
       </div>
     </Page>
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx
index 64b9dc4c7..8deedb18b 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.$id.tsx
@@ -1,45 +1,35 @@
-import { useMutation, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
-import { createFileRoute } from "@tanstack/react-router";
+import { useSuspenseQuery } from "@tanstack/react-query";
+import { createFileRoute, Link } from "@tanstack/react-router";
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
 import {
-  Accordion,
-  AccordionContent,
-  AccordionItem,
-  AccordionTrigger,
   Alert,
   AlertDescription,
   Badge,
-  Button,
-  Card,
-  CardContent,
-  CardHeader,
-  CardTitle,
-  Tabs,
-  TabsContent,
-  TabsList,
-  TabsTrigger,
+  Breadcrumb,
+  BreadcrumbItem,
+  BreadcrumbLink,
+  BreadcrumbList,
+  BreadcrumbPage,
+  BreadcrumbSeparator,
+  Page,
+  PageHeader,
 } from "@voidhash/ui";
-import { Info } from "lucide-react";
-import { useState } from "react";
+import { FlaskConicalIcon, InfoIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { EnterpriseAuditLogSlot } from "@/features/studio/enterprise/enterprise-audit-log-slot";
-import { FlagGeneralForm } from "@/features/studio/feature-flags/flag-general-form";
-import { FlagOverridesPanel } from "@/features/studio/feature-flags/flag-overrides-panel";
-import { FlagTargetingPanel } from "@/features/studio/feature-flags/flag-targeting-panel";
-import { type FlagType, deriveFlagType } from "@/features/studio/feature-flags/flag-type";
-import { FlagTypeBadge } from "@/features/studio/feature-flags/flag-type-badge";
-import { FlagVariantsPanel } from "@/features/studio/feature-flags/flag-variants-panel";
-import { Page } from "@/features/studio/shell";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { FlagDetailActionBar } from "@/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar";
+import { FlagDetailActionsMenu } from "@/features/studio/feature-flags/components/flag-detail-page/flag-detail-actions-menu";
+import { FlagDetailHeader } from "@/features/studio/feature-flags/components/flag-detail-page/flag-detail-header";
+import { FlagDetailProperties } from "@/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties";
+import { FlagDraftProvider } from "@/features/studio/feature-flags/components/flag-detail-page/flag-draft-context";
+import { FlagOverridesPanel } from "@/features/studio/feature-flags/components/flag-detail-page/flag-overrides-panel";
+import { FlagTargetingPanel } from "@/features/studio/feature-flags/components/flag-detail-page/flag-targeting-panel";
+import { FlagVariantsPanel } from "@/features/studio/feature-flags/components/flag-detail-page/flag-variants-panel";
+import { getFeatureFlagOptions } from "@/features/studio/lib/tanstack-query";
 import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
-import {
-  archiveFeatureFlagOptions,
-  getFeatureFlagOptions,
-  queryKeys,
-  restoreFeatureFlagOptions,
-} from "@/features/studio/lib/tanstack-query";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/$id",
@@ -53,9 +43,7 @@ export const Route = createFileRoute(
  * feature flag, matching the flags list route.
  */
 function FlagDetailRoute() {
-  const experimentationEnabled = useInternalFeatureFlag(
-    INTERNAL_FEATURE_FLAGS.experimentation.key,
-  );
+  const experimentationEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.experimentation.key);
 
   if (!experimentationEnabled) {
     return (
@@ -85,7 +73,6 @@ function FlagDetailPage() {
     organizationSlug as string,
     projectSlug as string,
   );
-  const queryClient = useQueryClient();
 
   if (!project) {
     throw new Error("Project not found");
@@ -93,214 +80,92 @@ function FlagDetailPage() {
 
   const { data: flag } = useSuspenseQuery(getFeatureFlagOptions({ id: id as string }));
 
-  const derivedType = deriveFlagType(flag.variants ?? []);
-  const [flagType, setFlagType] = useState<FlagType>(derivedType);
-
-  const hasTargets = (flag.targets ?? []).length > 0;
-  const hasOverrides = (flag.overrides ?? []).length > 0;
-
-  const archiveFlag = useMutation({
-    ...archiveFeatureFlagOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.getFlag(flag.id),
-      });
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.all,
-      });
-    },
-  });
-
-  const restoreFlag = useMutation({
-    ...restoreFeatureFlagOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.getFlag(flag.id),
-      });
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.featureFlag.all,
-      });
-    },
-  });
-
-  const defaultAccordionValues = [
-    ...(hasTargets ? ["targeting"] : []),
-    ...(hasOverrides ? ["overrides"] : []),
-  ];
+  const isArchived = flag.archivedAt != null;
+  const isReadOnly = flag.internal || isArchived;
 
   return (
-    <Page
-      breadcrumbs={[
-        {
-          title: "Feature Flags",
-          url: `/${organizationSlug}/${projectSlug}/flags`,
-        },
-        {
-          title: flag.name,
-          url: `/${organizationSlug}/${projectSlug}/flags/${id}`,
-        },
-      ]}
-      className="p-0 py-8"
-    >
-      <div className="mx-auto max-w-5xl">
-        <div className="flex items-center justify-between">
-          <div>
-            <h1 className="font-normal text-3xl tracking-right">{flag.name}</h1>
-            <div className="mt-1 flex items-center gap-2">
-              <span className="font-mono text-muted-foreground text-sm">{flag.key}</span>
-              <FlagTypeBadge flagType={flagType} />
-            </div>
+    <FlagDraftProvider flag={flag} readOnly={isReadOnly}>
+      <Page className="flex min-h-[calc(100svh-var(--header-height))] flex-col">
+        <PageHeader
+          className="px-2"
+          rightActions={
+            flag.internal ? undefined : (
+              <FlagDetailActionsMenu flagId={flag.id} isArchived={isArchived} />
+            )
+          }
+        >
+          <div className="flex items-center gap-2">
+            <Breadcrumb>
+              <BreadcrumbList>
+                <BreadcrumbItem>
+                  <BreadcrumbLink asChild>
+                    <Link
+                      params={{ organizationSlug, projectSlug }}
+                      to="/studio/$organizationSlug/$projectSlug/flags"
+                    >
+                      Feature Flags
+                    </Link>
+                  </BreadcrumbLink>
+                </BreadcrumbItem>
+                <BreadcrumbSeparator />
+                <BreadcrumbItem>
+                  <BreadcrumbPage>{flag.slug}</BreadcrumbPage>
+                </BreadcrumbItem>
+              </BreadcrumbList>
+            </Breadcrumb>
+            {isArchived && <Badge variant="secondary">Archived</Badge>}
+            {flag.internal && (
+              <Badge variant="outline">
+                <FlaskConicalIcon className="mr-1 size-3" />
+                Internal
+              </Badge>
+            )}
           </div>
-          {!flag.internal && (
-            <div className="flex gap-2">
-              {flag.archivedAt ? (
-                <Button
-                  disabled={restoreFlag.isPending}
-                  onClick={() => restoreFlag.mutate({ id: flag.id })}
-                  variant="outline"
-                >
-                  {restoreFlag.isPending ? "Restoring..." : "Restore"}
-                </Button>
-              ) : (
-                <Button
-                  disabled={archiveFlag.isPending}
-                  onClick={() => archiveFlag.mutate({ id: flag.id })}
-                  variant="destructive"
-                >
-                  {archiveFlag.isPending ? "Archiving..." : "Archive"}
-                </Button>
+        </PageHeader>
+
+        <div className="mx-auto w-full max-w-6xl flex-1 px-8 py-12">
+          <div className="grid grid-cols-1 gap-12 lg:grid-cols-12">
+            <div className="space-y-10 lg:col-span-8">
+              <FlagDetailHeader flagType={flag.type} slug={flag.slug} />
+
+              {flag.internal && (
+                <Alert>
+                  <InfoIcon className="size-4" />
+                  <AlertDescription>
+                    This flag is managed internally and cannot be edited directly.
+                  </AlertDescription>
+                </Alert>
               )}
-            </div>
-          )}
-        </div>
-
-        {flag.internal && (
-          <Alert className="mt-4">
-            <Info className="h-4 w-4" />
-            <AlertDescription>
-              This flag is managed internally and cannot be edited directly.
-            </AlertDescription>
-          </Alert>
-        )}
-
-        <div className="mt-8 grid grid-cols-12 gap-6">
-          <div className="col-span-9 space-y-6">
-            <Tabs onValueChange={(value) => setFlagType(value as FlagType)} value={flagType}>
-              <TabsList>
-                <TabsTrigger value="boolean">Boolean</TabsTrigger>
-                <TabsTrigger value="multivariant">Multi-variant</TabsTrigger>
-                <TabsTrigger value="json">JSON</TabsTrigger>
-              </TabsList>
 
-              <TabsContent value="boolean">
-                <div className="space-y-6">
-                  <FlagGeneralForm flag={flag} flagType="boolean" readOnly={flag.internal} />
-                </div>
-              </TabsContent>
+              {flag.type !== "boolean" && <FlagVariantsPanel flagType={flag.type} />}
 
-              <TabsContent value="multivariant">
-                <div className="space-y-6">
-                  <FlagGeneralForm flag={flag} flagType="multivariant" readOnly={flag.internal} />
-                  <FlagVariantsPanel
-                    featureFlagId={flag.id}
-                    flagType="multivariant"
-                    readOnly={flag.internal}
-                    variants={[...(flag.variants ?? [])]}
-                  />
-                </div>
-              </TabsContent>
+              <FlagTargetingPanel />
 
-              <TabsContent value="json">
-                <div className="space-y-6">
-                  <FlagGeneralForm flag={flag} flagType="json" readOnly={flag.internal} />
-                  <FlagVariantsPanel
-                    featureFlagId={flag.id}
-                    flagType="json"
-                    readOnly={flag.internal}
-                    variants={[...(flag.variants ?? [])]}
-                  />
-                </div>
-              </TabsContent>
-            </Tabs>
+              <FlagOverridesPanel />
 
-            <Card>
-              <Accordion defaultValue={defaultAccordionValues} type="multiple">
-                <AccordionItem className="border-b-0" value="targeting">
-                  <CardHeader className="py-0">
-                    <AccordionTrigger className="py-4">
-                      <div className="flex items-center gap-2">
-                        Targeting
-                        {hasTargets && (
-                          <Badge variant="secondary">{(flag.targets ?? []).length}</Badge>
-                        )}
-                      </div>
-                    </AccordionTrigger>
-                  </CardHeader>
-                  <AccordionContent className="px-0">
-                    <CardContent>
-                      <FlagTargetingPanel
-                        featureFlagId={flag.id}
-                        targets={[...(flag.targets ?? [])]}
-                      />
-                    </CardContent>
-                  </AccordionContent>
-                </AccordionItem>
+              <EnterpriseAuditLogSlot
+                entityId={flag.id}
+                entityType="feature_flag"
+                projectId={project.id}
+              />
+            </div>
 
-                <AccordionItem className="border-b-0" value="overrides">
-                  <CardHeader className="py-0">
-                    <AccordionTrigger className="py-4">
-                      <div className="flex items-center gap-2">
-                        Overrides
-                        {hasOverrides && (
-                          <Badge variant="secondary">{(flag.overrides ?? []).length}</Badge>
-                        )}
-                      </div>
-                    </AccordionTrigger>
-                  </CardHeader>
-                  <AccordionContent className="px-0">
-                    <CardContent>
-                      <FlagOverridesPanel
-                        featureFlagId={flag.id}
-                        overrides={[...(flag.overrides ?? [])]}
-                      />
-                    </CardContent>
-                  </AccordionContent>
-                </AccordionItem>
-              </Accordion>
-            </Card>
-          </div>
-          <div className="col-span-3 space-y-6">
-            <Card>
-              <CardHeader>
-                <CardTitle className="text-sm">Details</CardTitle>
-              </CardHeader>
-              <CardContent className="space-y-4 text-sm">
-                <div>
-                  <p className="text-muted-foreground">Version</p>
-                  <p>{flag.version}</p>
-                </div>
-                {flag.createdAt && (
-                  <div>
-                    <p className="text-muted-foreground">Created</p>
-                    <p>{new Date(flag.createdAt).toLocaleDateString()}</p>
-                  </div>
-                )}
-                {flag.updatedAt && (
-                  <div>
-                    <p className="text-muted-foreground">Updated</p>
-                    <p>{new Date(flag.updatedAt).toLocaleDateString()}</p>
-                  </div>
-                )}
-              </CardContent>
-            </Card>
-            <EnterpriseAuditLogSlot
-              entityId={flag.id}
-              entityType="feature_flag"
-              projectId={project.id}
-            />
+            <div className="lg:col-span-4">
+              <div className="lg:sticky lg:top-24">
+                <FlagDetailProperties
+                  archivedAt={flag.archivedAt}
+                  createdAt={flag.createdAt}
+                  flagType={flag.type}
+                  updatedAt={flag.updatedAt}
+                  version={flag.version}
+                />
+              </div>
+            </div>
           </div>
         </div>
-      </div>
-    </Page>
+
+        <FlagDetailActionBar />
+      </Page>
+    </FlagDraftProvider>
   );
 }
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx
index 9329f51fe..99128ee0d 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags.index.tsx
@@ -1,17 +1,53 @@
 import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute } from "@tanstack/react-router";
+import { zodValidator } from "@tanstack/zod-adapter";
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
-import { Card, Page, PageHeader, PageHeaderTitle } from "@voidhash/ui";
+import {
+  cn,
+  Page,
+  PageBar,
+  PageHeader,
+  PageHeaderTitle,
+  Table,
+  TableBody,
+  TableHead,
+  TableHeader,
+  TableRow,
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@voidhash/ui";
+import { z } from "zod";
 import { useAuth } from "@/features/studio/components/auth-context";
 
-import { CreateFlagModal } from "@/features/studio/feature-flags/create-flag-modal";
-import { FlagRecord } from "@/features/studio/feature-flags/flag-record";
-import { FlagsPageEmptyState } from "@/features/studio/feature-flags/flags-page-empty-state";
-import { FlagsPageSkeleton } from "@/features/studio/feature-flags/flags-page-skeleton";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
+import { CreateFlagButton } from "@/features/studio/feature-flags/components/flags-page/create-flag-button";
+import { FlagRecord } from "@/features/studio/feature-flags/components/flags-page/flag-record";
+import { FlagsPageEmptyState } from "@/features/studio/feature-flags/components/flags-page/flags-page-empty-state";
+import { FlagsPageSkeleton } from "@/features/studio/feature-flags/components/flags-page/flags-page-skeleton";
 import { listFeatureFlagsOptions } from "@/features/studio/lib/tanstack-query";
+import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+
+const FLAG_TABS = [
+  { label: "All", value: "all" },
+  { label: "Enabled", value: "enabled" },
+  { label: "Disabled", value: "disabled" },
+  { label: "Archived", value: "archived" },
+] as const;
+
+type FlagTab = (typeof FLAG_TABS)[number]["value"];
+
+const DEFAULT_FLAG_TAB: FlagTab = "all";
+
+const isFlagTab = (value: string): value is FlagTab =>
+  FLAG_TABS.some((item) => item.value === value);
+
+const flagsSearchSchema = z.object({
+  tab: z
+    .enum(FLAG_TABS.map((item) => item.value))
+    .default(DEFAULT_FLAG_TAB)
+    .catch(DEFAULT_FLAG_TAB),
+});
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/flags/",
@@ -19,6 +55,7 @@ export const Route = createFileRoute(
   component: FlagsIndexRoute,
   errorComponent: FlagsIndexPageError,
   pendingComponent: FlagsPageSkeleton,
+  validateSearch: zodValidator(flagsSearchSchema),
 });
 
 /**
@@ -27,9 +64,7 @@ export const Route = createFileRoute(
  * the tester rollout.
  */
 function FlagsIndexRoute() {
-  const experimentationEnabled = useInternalFeatureFlag(
-    INTERNAL_FEATURE_FLAGS.experimentation.key,
-  );
+  const experimentationEnabled = useInternalFeatureFlag(INTERNAL_FEATURE_FLAGS.experimentation.key);
 
   if (!experimentationEnabled) {
     return (
@@ -64,29 +99,79 @@ function FlagsIndexPage() {
     throw new Error("Project not found");
   }
 
-  const { data: flags } = useSuspenseQuery(listFeatureFlagsOptions({ projectId: project.id }));
+  const { tab } = Route.useSearch();
+  const navigate = Route.useNavigate();
+  const { data: allFlags } = useSuspenseQuery(
+    listFeatureFlagsOptions({ includeArchived: true, projectId: project.id }),
+  );
+
+  const flags = allFlags.filter((flag) => {
+    const isArchived = flag.archivedAt != null;
+    switch (tab) {
+      case "all":
+        return true;
+      case "enabled":
+        return !isArchived && flag.enabled;
+      case "disabled":
+        return !isArchived && !flag.enabled;
+      case "archived":
+        return isArchived;
+      default: {
+        const _exhaustive: never = tab;
+        return _exhaustive;
+      }
+    }
+  });
+
+  const isEmpty = flags.length === 0;
 
   return (
-    <Page>
-      <PageHeader
-        rightActions={flags.length > 0 ? <CreateFlagModal projectId={project.id} /> : null}
-      >
+    <Page className={cn(isEmpty && "flex flex-col")}>
+      <PageHeader className="shrink-0" rightActions={<CreateFlagButton projectId={project.id} />}>
         <PageHeaderTitle>Feature Flags</PageHeaderTitle>
       </PageHeader>
-      <div className="mx-auto w-full max-w-4xl px-4 pt-4">
-        {flags.length === 0 ? (
-          <FlagsPageEmptyState projectId={project.id} />
+      <PageBar className="shrink-0 pl-2">
+        <ToggleGroup
+          onValueChange={(value: string) => {
+            if (isFlagTab(value)) {
+              void navigate({ replace: true, search: (prev) => ({ ...prev, tab: value }) });
+            }
+          }}
+          type="single"
+          value={tab}
+        >
+          {FLAG_TABS.map((item) => (
+            <ToggleGroupItem key={item.value} value={item.value}>
+              {item.label}
+            </ToggleGroupItem>
+          ))}
+        </ToggleGroup>
+      </PageBar>
+      <div className={cn("w-full px-4 pt-4", isEmpty && "flex flex-1 flex-col pb-4")}>
+        {isEmpty ? (
+          <FlagsPageEmptyState projectId={project.id} tab={tab} />
         ) : (
-          <Card className="grid gap-0 divide-y p-0">
-            {flags.map((flag) => (
-              <FlagRecord
-                flag={flag}
-                key={flag.id}
-                organizationSlug={organizationSlug as string}
-                projectSlug={projectSlug as string}
-              />
-            ))}
-          </Card>
+          <Table containerClassName="overflow-x-auto">
+            <TableHeader>
+              <TableRow>
+                <TableHead>Slug</TableHead>
+                <TableHead>Type</TableHead>
+                <TableHead>Allocation</TableHead>
+                <TableHead>Status</TableHead>
+                <TableHead className="text-right">Updated</TableHead>
+              </TableRow>
+            </TableHeader>
+            <TableBody>
+              {flags.map((flag) => (
+                <FlagRecord
+                  flag={flag}
+                  key={flag.id}
+                  organizationSlug={organizationSlug as string}
+                  projectSlug={projectSlug as string}
+                />
+              ))}
+            </TableBody>
+          </Table>
         )}
       </div>
     </Page>
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
index ffe87eecf..421948808 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.$id.tsx
@@ -14,18 +14,17 @@ import {
 } from "@voidhash/ui";
 import { ExternalLinkIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
-
-import { PaywallLocationStats } from "@/features/studio/paywall-locations/analytics/paywall-location-stats";
-import { PaywallDetailPlacements } from "@/features/studio/paywalls/detail/paywall-detail-placements";
-import { PaywallDetailProperties } from "@/features/studio/paywalls/detail/paywall-detail-properties";
-import { PaywallPhonePreview } from "@/features/studio/paywalls/detail/paywall-phone-preview";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import { listPaywallLocationsOptions } from "@/features/studio/lib/tanstack-query/paywall-locations";
 import {
   getPaywallDraftReleaseOptions,
   listPaywallsOptions,
 } from "@/features/studio/lib/tanstack-query/paywalls";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { PaywallLocationStats } from "@/features/studio/paywall-locations/components/shared/paywall-location-stats";
+import { PaywallDetailPlacements } from "@/features/studio/paywalls/components/paywall-detail-page/paywall-detail-placements";
+import { PaywallDetailProperties } from "@/features/studio/paywalls/components/paywall-detail-page/paywall-detail-properties";
+import { PaywallPhonePreview } from "@/features/studio/paywalls/components/paywall-detail-page/paywall-phone-preview";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls/$id",
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
index 652145e34..1873b020b 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/paywalls.index.tsx
@@ -13,21 +13,20 @@ import {
 import { useRef, useState } from "react";
 import { z } from "zod";
 import { useAuth } from "@/features/studio/components/auth-context";
-
-import { CreatePaywallButton } from "@/features/studio/paywalls/create-paywall-button";
-import { PaywallCard } from "@/features/studio/paywalls/paywall-card";
-import { PaywallCardSkeleton } from "@/features/studio/paywalls/paywall-card-skeleton";
-import { PaywallTable } from "@/features/studio/paywalls/paywall-table";
-import { PaywallsPageEmptyState } from "@/features/studio/paywalls/paywalls-page-empty-state";
+import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { CreatePaywallButton } from "@/features/studio/paywalls/components/paywalls-page/create-paywall-button";
+import { PaywallCard } from "@/features/studio/paywalls/components/paywalls-page/paywall-card";
+import { PaywallCardSkeleton } from "@/features/studio/paywalls/components/paywalls-page/paywall-card-skeleton";
+import { PaywallTable } from "@/features/studio/paywalls/components/paywalls-page/paywall-table";
 import {
   loadPaywallView,
   type PaywallView,
   PaywallViewSettings,
   persistPaywallView,
-} from "@/features/studio/paywalls/paywall-view-settings";
+} from "@/features/studio/paywalls/components/paywalls-page/paywall-view-settings";
+import { PaywallsPageEmptyState } from "@/features/studio/paywalls/components/paywalls-page/paywalls-page-empty-state";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
-import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 
 const THUMBNAIL_REFRESH_INTERVAL_MS = 2_000;
 const THUMBNAIL_REFRESH_WINDOW_MS = 45_000;
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx
index 2b1e334b9..e7ce00dab 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons.$id.tsx
@@ -5,11 +5,11 @@ import { format } from "date-fns";
 import { Clock4Icon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
-import { PersonFlagOverridesPanel } from "@/features/studio/feature-flags/person-flag-overrides-panel";
-import { Page } from "@/features/studio/shell";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
+import { PersonFlagOverridesPanel } from "@/features/studio/feature-flags/components/person-detail-page/person-flag-overrides-panel";
 import { getPersonByDistinctIdOptions } from "@/features/studio/lib/tanstack-query/persons";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { Page } from "@/features/studio/shell";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/persons/$id",
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
index a30baae07..a62a4f0e8 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
@@ -15,16 +15,15 @@ import {
 } from "@voidhash/ui";
 import { PlusIcon, RepeatIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
-
-import { PaywallLocationStats } from "@/features/studio/paywall-locations/analytics/paywall-location-stats";
-import { PaywallLocationPhonePreview } from "@/features/studio/paywall-locations/detail/paywall-location-phone-preview";
-import { PaywallLocationProperties } from "@/features/studio/paywall-locations/detail/paywall-location-properties";
-import { PaywallCombobox } from "@/features/studio/paywall-locations/paywall-combobox";
-import { PaywallLocationActionsMenu } from "@/features/studio/paywall-locations/paywall-location-actions-menu";
-import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 import { listPaywallLocationsOptions } from "@/features/studio/lib/tanstack-query/paywall-locations";
 import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import { PaywallLocationPhonePreview } from "@/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-phone-preview";
+import { PaywallLocationProperties } from "@/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-properties";
+import { PaywallCombobox } from "@/features/studio/paywall-locations/components/shared/paywall-combobox";
+import { PaywallLocationActionsMenu } from "@/features/studio/paywall-locations/components/shared/paywall-location-actions-menu";
+import { PaywallLocationStats } from "@/features/studio/paywall-locations/components/shared/paywall-location-stats";
+import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 export const Route = createFileRoute(
   "/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations/$id",
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx
index 9fada3e3d..bde3d8f4d 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.index.tsx
@@ -13,22 +13,21 @@ import {
 } from "@voidhash/ui";
 import { z } from "zod";
 import { useAuth } from "@/features/studio/components/auth-context";
-
+import {
+  listPaywallLocationsOptions,
+  listPaywallsOptions,
+} from "@/features/studio/lib/tanstack-query";
+import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 import {
   isMetricRange,
   METRIC_RANGE_OPTIONS,
   type MetricRange,
   usePaywallLocationMetrics,
-} from "@/features/studio/paywall-locations/analytics/paywall-location-metrics";
-import { CreatePaywallLocationModalButton } from "@/features/studio/paywall-locations/create-paywall-location-modal-button";
-import { PaywallLocationsPageEmptyState } from "@/features/studio/paywall-locations/paywall-locations-page-empty-state";
-import { PaywallLocationsTable } from "@/features/studio/paywall-locations/paywall-locations-table";
+} from "@/features/studio/paywall-locations/lib/paywall-location-metrics";
+import { CreatePaywallLocationModalButton } from "@/features/studio/paywall-locations/components/paywall-locations-page/create-paywall-location-modal-button";
+import { PaywallLocationsPageEmptyState } from "@/features/studio/paywall-locations/components/paywall-locations-page/paywall-locations-page-empty-state";
+import { PaywallLocationsTable } from "@/features/studio/paywall-locations/components/paywall-locations-page/paywall-locations-table";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
-import {
-  listPaywallLocationsOptions,
-  listPaywallsOptions,
-} from "@/features/studio/lib/tanstack-query";
-import { CurrentUser } from "@/features/studio/lib/utils/current-user";
 
 const LOCATION_TABS = [
   { value: "all", label: "All" },
diff --git a/packages/core/src/services/featureFlags/FeatureFlagService.ts b/packages/core/src/services/featureFlags/FeatureFlagService.ts
index 05a9dace4..21a52932e 100644
--- a/packages/core/src/services/featureFlags/FeatureFlagService.ts
+++ b/packages/core/src/services/featureFlags/FeatureFlagService.ts
@@ -13,11 +13,13 @@ import {
   type InsertFeatureFlagOverride,
   type InsertFeatureFlagTarget,
   type InsertFeatureFlagVariant,
+  type FeatureFlagTypeValue,
   AuditLogAction,
   AuditLogEntityType,
   Db,
   FeatureFlagIdentityType,
   FeatureFlagTargetListType,
+  FeatureFlagType,
   and,
   eq,
   featureFlagOverrides,
@@ -52,6 +54,78 @@ interface EvaluationResult {
   readonly variantKey: string | null;
 }
 
+interface CustomerFeatureFlagVariantInput {
+  readonly id?: string;
+  readonly label?: string;
+  readonly value: unknown;
+  readonly weightBps?: number;
+}
+
+const isJsonValue = (value: unknown, seen = new WeakSet<object>()): boolean => {
+  if (
+    value === null ||
+    typeof value === "string" ||
+    typeof value === "boolean" ||
+    (typeof value === "number" && Number.isFinite(value))
+  ) {
+    return true;
+  }
+  if (typeof value !== "object") {
+    return false;
+  }
+  if (seen.has(value)) {
+    return false;
+  }
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== Object.prototype && prototype !== null && !Array.isArray(value)) {
+    return false;
+  }
+  seen.add(value);
+  const valid = Array.isArray(value)
+    ? value.every((item) => isJsonValue(item, seen))
+    : Object.values(value).every((item) => isJsonValue(item, seen));
+  seen.delete(value);
+  return valid;
+};
+
+const validateCustomerVariants = (
+  type: FeatureFlagTypeValue,
+  variants: ReadonlyArray<CustomerFeatureFlagVariantInput>,
+): string | undefined => {
+  if (type === FeatureFlagType.Boolean && variants.length > 0) {
+    return "Boolean feature flags cannot have variants";
+  }
+
+  for (const variant of variants) {
+    if (type === FeatureFlagType.String && typeof variant.value !== "string") {
+      return "String feature flag variants must have string values";
+    }
+    if (
+      type === FeatureFlagType.Number &&
+      (typeof variant.value !== "number" || !Number.isFinite(variant.value))
+    ) {
+      return "Number feature flag variants must have finite number values";
+    }
+    if (type === FeatureFlagType.Json && !isJsonValue(variant.value)) {
+      return "JSON feature flag variants must contain valid JSON values";
+    }
+    if (type === FeatureFlagType.Json && variant.label !== undefined) {
+      return "JSON feature flag variants cannot have labels";
+    }
+  }
+
+  return undefined;
+};
+
+const distributeVariantWeights = (count: number): number[] => {
+  if (count === 0) {
+    return [];
+  }
+  const baseWeight = Math.floor(10000 / count);
+  const remainder = 10000 - baseWeight * count;
+  return Array.from({ length: count }, (_, index) => baseWeight + (index < remainder ? 1 : 0));
+};
+
 /**
  * `owner_type` stamped on the internal feature flag that backs an experiment.
  * `setInternalFlagState` refuses to touch any flag that is not both `internal`
@@ -110,10 +184,14 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
         function* (input: {
           readonly projectId: string;
           readonly key: string;
-          readonly name: string;
+          readonly name?: string;
           readonly description?: string;
+          readonly type?: FeatureFlagTypeValue;
+          readonly variants?: ReadonlyArray<CustomerFeatureFlagVariantInput>;
         }) {
           const session = yield* AuthSession;
+          const type = input.type ?? FeatureFlagType.Boolean;
+          const variants = input.variants ?? [];
 
           yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
           yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", input.key);
@@ -126,6 +204,26 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
             `User ${session?.user?.id} is not authorized to create feature flags for project ${input.projectId}`,
           );
 
+          const validationError = validateCustomerVariants(type, variants);
+          if (validationError) {
+            return yield* Effect.fail(new FeatureFlagServiceError({ cause: validationError }));
+          }
+
+          const requestedWeights = variants.map((variant) => variant.weightBps);
+          const weights = requestedWeights.every((weight): weight is number => weight !== undefined)
+            ? requestedWeights
+            : distributeVariantWeights(variants.length);
+          if (weights.length > 0 && weights.reduce((sum, weight) => sum + weight, 0) !== 10000) {
+            return yield* Effect.fail(
+              new FeatureFlagServiceError({
+                cause: `Variant weights must sum to 10000, got ${weights.reduce(
+                  (sum, weight) => sum + weight,
+                  0,
+                )}`,
+              }),
+            );
+          }
+
           const flagId = generateId("featureFlag");
           const salt = createId();
 
@@ -135,8 +233,9 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
             id: flagId,
             projectId: input.projectId,
             key: input.key,
-            name: input.name,
+            name: input.name ?? input.key,
             description: input.description ?? null,
+            type,
             enabled: false,
             rolloutBps: 0,
             salt,
@@ -158,6 +257,17 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
                 return yield* Effect.fail(new FeatureFlagKeyAlreadyExistsError({ key: input.key }));
               }
               yield* tx.insert(featureFlags).values(newFlag);
+              for (const [index, variant] of variants.entries()) {
+                const id = generateId("featureFlagVariant");
+                yield* tx.insert(featureFlagVariants).values({
+                  id,
+                  featureFlagId: flagId,
+                  key: id,
+                  name: variant.label ?? "",
+                  payload: variant.value,
+                  weightBps: weights[index]!,
+                });
+              }
             }),
           );
 
@@ -215,6 +325,7 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
             key: input.key,
             name: input.name,
             description: input.description ?? null,
+            type: FeatureFlagType.Json,
             enabled: false,
             rolloutBps: 10000,
             salt,
@@ -589,6 +700,128 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
           ),
       );
 
+      const updateCustomerFlagVariants = Effect.fn("updateCustomerFlagVariants")(
+        function* (input: {
+          readonly featureFlagId: string;
+          readonly variants: ReadonlyArray<CustomerFeatureFlagVariantInput>;
+        }) {
+          const session = yield* AuthSession;
+
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.id", input.featureFlagId);
+          if (session?.user?.id)
+            yield* Effect.annotateCurrentSpan("voidhash.user.id", session.user.id);
+
+          const existingFlag = yield* db.query.featureFlags.findFirst({
+            where: { id: input.featureFlagId },
+            with: {
+              variants: { where: { archivedAt: { isNull: true } } },
+            },
+          });
+          if (!existingFlag) {
+            return yield* Effect.fail(
+              new FeatureFlagNotFoundError({ featureFlagId: input.featureFlagId }),
+            );
+          }
+          if (existingFlag.internal) {
+            return yield* Effect.fail(
+              new FeatureFlagServiceError({
+                cause: `Feature flag ${input.featureFlagId} is managed internally and cannot be edited directly`,
+              }),
+            );
+          }
+
+          yield* Effect.annotateCurrentSpan("voidhash.project.id", existingFlag.projectId);
+          yield* Effect.annotateCurrentSpan("voidhash.feature_flag.key", existingFlag.key);
+          yield* checkProjectPermission(
+            existingFlag.projectId,
+            "project:all",
+            `User ${session?.user?.id} is not authorized to update variants for feature flag ${input.featureFlagId}`,
+          );
+
+          const validationError = validateCustomerVariants(existingFlag.type, input.variants);
+          if (validationError) {
+            return yield* Effect.fail(new FeatureFlagServiceError({ cause: validationError }));
+          }
+
+          const existingById = new Map(
+            existingFlag.variants.map((variant) => [variant.id, variant] as const),
+          );
+          const seenIds = new Set<string>();
+          for (const variant of input.variants) {
+            if (!variant.id) {
+              continue;
+            }
+            if (seenIds.has(variant.id)) {
+              return yield* Effect.fail(
+                new FeatureFlagServiceError({
+                  cause: `Duplicate variant id '${variant.id}' for flag ${input.featureFlagId}`,
+                }),
+              );
+            }
+            if (!existingById.has(variant.id)) {
+              return yield* Effect.fail(
+                new FeatureFlagServiceError({
+                  cause: `Variant '${variant.id}' does not belong to flag ${input.featureFlagId}`,
+                }),
+              );
+            }
+            seenIds.add(variant.id);
+          }
+
+          const weights = distributeVariantWeights(input.variants.length);
+          yield* db.transaction((tx) =>
+            Effect.gen(function* () {
+              yield* tx
+                .delete(featureFlagVariants)
+                .where(eq(featureFlagVariants.featureFlagId, input.featureFlagId));
+
+              for (const [index, variant] of input.variants.entries()) {
+                const existingVariant = variant.id ? existingById.get(variant.id) : undefined;
+                const id = existingVariant?.id ?? generateId("featureFlagVariant");
+                yield* tx.insert(featureFlagVariants).values({
+                  id,
+                  featureFlagId: input.featureFlagId,
+                  key: existingVariant?.key ?? id,
+                  name: variant.label ?? "",
+                  payload: variant.value,
+                  weightBps: weights[index]!,
+                });
+              }
+
+              yield* tx
+                .update(featureFlags)
+                .set({
+                  updatedByUserId: session?.user?.id ?? null,
+                  version: sql`${featureFlags.version} + 1`,
+                })
+                .where(eq(featureFlags.id, input.featureFlagId));
+            }),
+          );
+
+          yield* auditLog.append({
+            projectId: existingFlag.projectId,
+            entityType: AuditLogEntityType.FeatureFlagVariant,
+            entityId: input.featureFlagId,
+            parentEntityId: input.featureFlagId,
+            action: AuditLogAction.Updated,
+            changes: { snapshot: { variants: input.variants } },
+          });
+
+          yield* Effect.log(
+            `Updated ${input.variants.length} variants for feature flag ${input.featureFlagId}`,
+          );
+        },
+        (effect) =>
+          effect.pipe(
+            Effect.catchTags({
+              EffectDrizzleQueryError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+              SqlError: (error) =>
+                Effect.fail(new FeatureFlagServiceError({ cause: String(error.cause) })),
+            }),
+          ),
+      );
+
       const updateFlagVariants = Effect.fn("updateFlagVariants")(
         function* (input: {
           readonly featureFlagId: string;
@@ -1404,6 +1637,7 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
         listOverridesByPerson,
         restoreFlag,
         setInternalFlagState,
+        updateCustomerFlagVariants,
         updateFlag,
         updateFlagVariants,
         upsertOverride,
diff --git a/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts b/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
index 98a6afd42..428d5ca7c 100644
--- a/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
+++ b/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
@@ -46,6 +46,7 @@ import {
   Db,
   FeatureFlagIdentityType,
   FeatureFlagTargetListType,
+  FeatureFlagType,
   and,
   auditLogs,
   eq,
@@ -429,6 +430,50 @@ describe("FeatureFlagService.createFlag", () => {
     ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
   );
 
+  test(
+    "persists the immutable type and initial typed variants atomically",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("typed-create"),
+          type: FeatureFlagType.String,
+          variants: [{ label: "Control", value: "control" }, { value: "treatment" }],
+        });
+        track(created.id);
+
+        const row = yield* findFlagRow(created.id);
+        expect(row?.type).toBe(FeatureFlagType.String);
+
+        const variants = yield* findVariantRows(created.id);
+        expect(variants).toHaveLength(2);
+        expect(variants.map((variant) => variant.payload).sort()).toEqual(["control", "treatment"]);
+        expect(variants.reduce((sum, variant) => sum + variant.weightBps, 0)).toBe(10000);
+        expect(variants.some((variant) => variant.name === "Control")).toBe(true);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects variants for a boolean flag without writing the flag",
+    Effect.gen(function* () {
+      const svc = yield* FeatureFlagService;
+      const key = uniqueKey("boolean-variant");
+      const error = yield* Effect.flip(
+        svc.createFlag({
+          projectId,
+          key,
+          type: FeatureFlagType.Boolean,
+          variants: [{ value: true }],
+        }),
+      );
+
+      expect(error).toBeInstanceOf(FeatureFlagServiceError);
+      expect(yield* countFlagsWithKey(key, projectId)).toBe(0);
+    }).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
   test(
     "allows the same key in a different project",
     withFlagCleanup((track) =>
@@ -921,6 +966,81 @@ describe("FeatureFlagService.listFlags", () => {
   );
 });
 
+// ===========================================================================
+// updateCustomerFlagVariants
+// ===========================================================================
+
+describe("FeatureFlagService.updateCustomerFlagVariants", () => {
+  test(
+    "replaces typed values, preserves existing technical keys, and distributes weights evenly",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("typed-variants-update"),
+          type: FeatureFlagType.Number,
+          variants: [
+            { label: "Small", value: 1 },
+            { label: "Large", value: 2 },
+          ],
+        });
+        track(created.id);
+
+        const before = yield* findVariantRows(created.id);
+        const preserved = before.find((variant) => variant.payload === 1)!;
+        yield* svc.updateCustomerFlagVariants({
+          featureFlagId: created.id,
+          variants: [
+            { id: preserved.id, label: "One", value: 1 },
+            { label: "Two", value: 2 },
+            { value: 3 },
+          ],
+        });
+
+        const after = yield* findVariantRows(created.id);
+        expect(after).toHaveLength(3);
+        expect(after.find((variant) => variant.id === preserved.id)?.key).toBe(preserved.key);
+        expect(after.find((variant) => variant.payload === 1)?.name).toBe("One");
+        expect(after.reduce((sum, variant) => sum + variant.weightBps, 0)).toBe(10000);
+        expect(Math.max(...after.map((variant) => variant.weightBps))).toBe(3334);
+
+        const flag = yield* findFlagRow(created.id);
+        expect(flag?.type).toBe(FeatureFlagType.Number);
+        expect(flag?.version).toBe(2);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
+  test(
+    "rejects labels for JSON variants and leaves existing values unchanged",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const created = yield* svc.createFlag({
+          projectId,
+          key: uniqueKey("json-label"),
+          type: FeatureFlagType.Json,
+          variants: [{ value: { color: "blue" } }],
+        });
+        track(created.id);
+
+        const error = yield* Effect.flip(
+          svc.updateCustomerFlagVariants({
+            featureFlagId: created.id,
+            variants: [{ label: "Blue", value: { color: "blue" } }],
+          }),
+        );
+        expect(error).toBeInstanceOf(FeatureFlagServiceError);
+
+        const variants = yield* findVariantRows(created.id);
+        expect(variants).toHaveLength(1);
+        expect(variants[0]?.payload).toEqual({ color: "blue" });
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+});
+
 // ===========================================================================
 // updateFlagVariants
 // ===========================================================================
diff --git a/packages/db/src/alchemy-migrations/20260724120000_add_feature_flag_types/migration.sql b/packages/db/src/alchemy-migrations/20260724120000_add_feature_flag_types/migration.sql
new file mode 100644
index 000000000..ffd61476e
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260724120000_add_feature_flag_types/migration.sql
@@ -0,0 +1,52 @@
+ALTER TABLE "feature_flag" ADD COLUMN "type" varchar(20) DEFAULT 'boolean' NOT NULL;
+
+UPDATE "feature_flag_variant" AS "variant"
+SET "payload" = to_jsonb("variant"."key")
+FROM "feature_flag" AS "flag"
+WHERE
+  "variant"."feature_flag_id" = "flag"."id"
+  AND "variant"."archived_at" IS NULL
+  AND "flag"."internal" = false
+  AND EXISTS (
+    SELECT 1
+    FROM "feature_flag_variant" AS "active_variant"
+    WHERE
+      "active_variant"."feature_flag_id" = "flag"."id"
+      AND "active_variant"."archived_at" IS NULL
+  )
+  AND NOT EXISTS (
+    SELECT 1
+    FROM "feature_flag_variant" AS "active_variant"
+    WHERE
+      "active_variant"."feature_flag_id" = "flag"."id"
+      AND "active_variant"."archived_at" IS NULL
+      AND "active_variant"."payload" IS NOT NULL
+  );
+
+UPDATE "feature_flag" AS "flag"
+SET "type" = CASE
+  WHEN NOT EXISTS (
+    SELECT 1
+    FROM "feature_flag_variant" AS "variant"
+    WHERE
+      "variant"."feature_flag_id" = "flag"."id"
+      AND "variant"."archived_at" IS NULL
+  ) THEN 'boolean'
+  WHEN NOT EXISTS (
+    SELECT 1
+    FROM "feature_flag_variant" AS "variant"
+    WHERE
+      "variant"."feature_flag_id" = "flag"."id"
+      AND "variant"."archived_at" IS NULL
+      AND jsonb_typeof("variant"."payload") IS DISTINCT FROM 'string'
+  ) THEN 'string'
+  WHEN NOT EXISTS (
+    SELECT 1
+    FROM "feature_flag_variant" AS "variant"
+    WHERE
+      "variant"."feature_flag_id" = "flag"."id"
+      AND "variant"."archived_at" IS NULL
+      AND jsonb_typeof("variant"."payload") IS DISTINCT FROM 'number'
+  ) THEN 'number'
+  ELSE 'json'
+END;
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index 3156c4676..fe7bfc603 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -2199,6 +2199,15 @@ export const FeatureFlagIdentityType = {
 export type FeatureFlagIdentityTypeValue =
   (typeof FeatureFlagIdentityType)[keyof typeof FeatureFlagIdentityType];
 
+export const FeatureFlagType = {
+  Boolean: "boolean",
+  Json: "json",
+  Number: "number",
+  String: "string",
+} as const;
+
+export type FeatureFlagTypeValue = (typeof FeatureFlagType)[keyof typeof FeatureFlagType];
+
 export const featureFlags = pgTable(
   "feature_flag",
   {
@@ -2207,6 +2216,10 @@ export const featureFlags = pgTable(
     key: varchar("key", { length: 255 }).notNull(),
     name: varchar("name", { length: 255 }).notNull(),
     description: varchar("description", { length: 1000 }),
+    type: varchar("type", { length: 20 })
+      .$type<FeatureFlagTypeValue>()
+      .notNull()
+      .default(FeatureFlagType.Boolean),
     enabled: boolean("enabled").notNull().default(false),
     rolloutBps: integer("rollout_bps").notNull().default(10000),
     salt: varchar("salt", { length: 255 }).notNull(),
diff --git a/packages/rpc/src/groups/FeatureFlagRpcsDef.ts b/packages/rpc/src/groups/FeatureFlagRpcsDef.ts
index 9b178ffdb..d92855192 100644
--- a/packages/rpc/src/groups/FeatureFlagRpcsDef.ts
+++ b/packages/rpc/src/groups/FeatureFlagRpcsDef.ts
@@ -12,6 +12,8 @@ import {
 } from "../errors/FeatureFlag.ts";
 import { AuthMiddleware } from "../middlewares.ts";
 
+export const RpcFeatureFlagType = Schema.Literals(["boolean", "string", "number", "json"]);
+
 export const RpcFeatureFlagTarget = Schema.Struct({
   archivedAt: Schema.NullOr(Schema.Date),
   createdAt: Schema.NullOr(Schema.Date),
@@ -42,11 +44,9 @@ export const RpcFeatureFlagVariant = Schema.Struct({
   createdAt: Schema.NullOr(Schema.Date),
   featureFlagId: Schema.String,
   id: Schema.String,
-  key: Schema.String,
-  name: Schema.String,
-  payload: Schema.NullOr(Schema.Unknown),
+  label: Schema.NullOr(Schema.String),
   updatedAt: Schema.NullOr(Schema.Date),
-  weightBps: Schema.Number,
+  value: Schema.Unknown,
 });
 
 export const RpcFeatureFlag = Schema.Struct({
@@ -57,14 +57,14 @@ export const RpcFeatureFlag = Schema.Struct({
   enabled: Schema.Boolean,
   id: Schema.String,
   internal: Schema.Boolean,
-  key: Schema.String,
-  name: Schema.String,
   overrides: Schema.Array(RpcFeatureFlagOverride),
   ownerId: Schema.NullOr(Schema.String),
   ownerType: Schema.NullOr(Schema.String),
   projectId: Schema.String,
   rolloutBps: Schema.Number,
+  slug: Schema.String,
   targets: Schema.Array(RpcFeatureFlagTarget),
+  type: RpcFeatureFlagType,
   updatedAt: Schema.NullOr(Schema.Date),
   updatedByUserId: Schema.NullOr(Schema.String),
   variants: Schema.Array(RpcFeatureFlagVariant),
@@ -78,12 +78,12 @@ export const RpcFeatureFlagListItem = Schema.Struct({
   enabled: Schema.Boolean,
   id: Schema.String,
   internal: Schema.Boolean,
-  key: Schema.String,
-  name: Schema.String,
   ownerId: Schema.NullOr(Schema.String),
   ownerType: Schema.NullOr(Schema.String),
   projectId: Schema.String,
   rolloutBps: Schema.Number,
+  slug: Schema.String,
+  type: RpcFeatureFlagType,
   updatedAt: Schema.NullOr(Schema.Date),
   variantCount: Schema.Number,
   version: Schema.Number,
@@ -126,9 +126,15 @@ export class FeatureFlagRpcsDef extends RpcGroup.make(
     ]),
     payload: {
       description: Schema.optional(Schema.String),
-      key: Schema.String,
-      name: Schema.String,
       projectId: Schema.String,
+      slug: Schema.String,
+      type: RpcFeatureFlagType,
+      variants: Schema.Array(
+        Schema.Struct({
+          label: Schema.optional(Schema.String),
+          value: Schema.Unknown,
+        }),
+      ),
     },
     success: Schema.Struct({ id: Schema.String }),
   }),
@@ -144,9 +150,8 @@ export class FeatureFlagRpcsDef extends RpcGroup.make(
       description: Schema.optional(Schema.NullOr(Schema.String)),
       enabled: Schema.optional(Schema.Boolean),
       id: Schema.String,
-      key: Schema.optional(Schema.String),
-      name: Schema.optional(Schema.String),
       rolloutBps: Schema.optional(Schema.Number),
+      slug: Schema.optional(Schema.String),
     },
     success: RpcFeatureFlag,
   }),
@@ -246,10 +251,9 @@ export class FeatureFlagRpcsDef extends RpcGroup.make(
       featureFlagId: Schema.String,
       variants: Schema.Array(
         Schema.Struct({
-          key: Schema.String,
-          name: Schema.String,
-          payload: Schema.optional(Schema.Unknown),
-          weightBps: Schema.Number,
+          id: Schema.optional(Schema.String),
+          label: Schema.optional(Schema.String),
+          value: Schema.Unknown,
         }),
       ),
     },

From edc574e249b3d002494c99c5c965610739232a9d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 24 Jul 2026 16:26:22 +0200
Subject: [PATCH 118/129] feat: unified design of attributes / properties

---
 .../studio/components/property-list.tsx       | 124 +++++++++++
 .../flag-detail-properties.tsx                | 205 +++++++-----------
 .../paywall-location-properties.tsx           | 138 +++++++-----
 .../paywall-detail-properties.tsx             |  66 +++---
 .../settings/paywall-locations.$id.tsx        |  32 +--
 5 files changed, 322 insertions(+), 243 deletions(-)
 create mode 100644 apps/www/src/features/studio/components/property-list.tsx

diff --git a/apps/www/src/features/studio/components/property-list.tsx b/apps/www/src/features/studio/components/property-list.tsx
new file mode 100644
index 000000000..0a1f244d3
--- /dev/null
+++ b/apps/www/src/features/studio/components/property-list.tsx
@@ -0,0 +1,124 @@
+"use client";
+
+import { Button, cn } from "@voidhash/ui";
+import { CopyIcon } from "lucide-react";
+import type { ReactNode } from "react";
+import { toast } from "sonner";
+
+const PROPERTY_VALUE_BASE =
+  "-ml-2.5 flex items-center gap-2 px-2.5 font-normal text-foreground text-sm";
+
+/**
+ * The box every value sits in, static or interactive, so the whole column
+ * shares one height, type scale, weight and inset. The negative margin cancels
+ * the horizontal padding a trigger needs for its hover state, which keeps the
+ * text on the same axis whether or not the row is clickable.
+ */
+export const PROPERTY_VALUE_CLASS_NAME = cn(PROPERTY_VALUE_BASE, "h-7");
+
+/**
+ * Dimmed a step below the interactive rows so what can be changed reads as the
+ * brighter text, while staying clear of the still-dimmer property labels.
+ */
+const PROPERTY_VALUE_DIMMED = "text-foreground/80";
+
+/**
+ * Static values swap the trigger's fixed height for `min-h-7` so a value that
+ * wraps grows its row instead of spilling into the next one.
+ */
+const PROPERTY_VALUE_STATIC_CLASS_NAME = cn(
+  PROPERTY_VALUE_BASE,
+  "min-h-7 py-1",
+  PROPERTY_VALUE_DIMMED,
+);
+
+/**
+ * Section wrapper for a detail screen's property list — the heading plus the
+ * definition list the rows live in.
+ */
+export function PropertyList({
+  children,
+  title = "Properties",
+}: {
+  children: ReactNode;
+  title?: string;
+}) {
+  return (
+    <section className="space-y-3">
+      <h2 className="font-medium text-sm">{title}</h2>
+      <dl>{children}</dl>
+    </section>
+  );
+}
+
+/** One labelled row of a {@link PropertyList}. */
+export function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
+  return (
+    <div className="flex min-h-8 items-center gap-3">
+      <dt className="w-24 shrink-0 text-muted-foreground text-sm">{label}</dt>
+      <dd className="min-w-0 flex-1">{children}</dd>
+    </div>
+  );
+}
+
+/** Static counterpart to a trigger — same box, no interaction. */
+export function PropertyValue({
+  children,
+  className,
+}: {
+  children: ReactNode;
+  className?: string;
+}) {
+  return <span className={cn(PROPERTY_VALUE_STATIC_CLASS_NAME, className)}>{children}</span>;
+}
+
+/** Placeholder for a value the record doesn't carry — "None", "Unknown". */
+export function PropertyEmpty({ children }: { children: ReactNode }) {
+  return <span className="text-muted-foreground">{children}</span>;
+}
+
+/** Coloured dot that prefixes a status label. */
+export function PropertyStatusDot({ className }: { className: string }) {
+  return <span aria-hidden="true" className={cn("size-2 shrink-0 rounded-full", className)} />;
+}
+
+/**
+ * Identifier row whose value copies itself — slugs exist to be pasted into
+ * code, so the value doubles as the copy affordance. The icon only shows on
+ * hover to keep the row reading as text until it is reached for.
+ */
+export function PropertyCopyValue({ label, value }: { label: string; value: string }) {
+  return (
+    <Button
+      aria-label={`Copy ${label}`}
+      className={cn(PROPERTY_VALUE_CLASS_NAME, PROPERTY_VALUE_DIMMED, "group max-w-full")}
+      onClick={() => {
+        navigator.clipboard.writeText(value);
+        toast.success(`${label} copied to clipboard`);
+      }}
+      size="sm"
+      variant="ghost"
+    >
+      <span className="min-w-0 truncate font-mono text-xs">{value}</span>
+      <CopyIcon className="size-3 shrink-0 text-muted-foreground opacity-0 transition-opacity group-focus-visible:opacity-100 group-hover:opacity-100" />
+    </Button>
+  );
+}
+
+/**
+ * Outbound link styled as an interactive value, so a row that navigates
+ * somewhere carries the same hover surface as one that opens an editor.
+ */
+export function PropertyLink({ children, href }: { children: ReactNode; href: string }) {
+  return (
+    <Button asChild className={PROPERTY_VALUE_CLASS_NAME} size="sm" variant="ghost">
+      <a href={href} rel="noreferrer" target="_blank">
+        {children}
+      </a>
+    </Button>
+  );
+}
+
+/** Date format shared by every `Created`/`Updated` property row. */
+export const formatPropertyDate = (date: Date) =>
+  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx
index c7b07ba3b..183ad60dc 100644
--- a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-properties.tsx
@@ -2,7 +2,6 @@
 
 import {
   Button,
-  cn,
   DropdownMenu,
   DropdownMenuContent,
   DropdownMenuItem,
@@ -14,7 +13,17 @@ import {
   Slider,
 } from "@voidhash/ui";
 import { CheckIcon } from "lucide-react";
-import { type ReactNode, useState } from "react";
+import { useState } from "react";
+
+import {
+  formatPropertyDate,
+  PROPERTY_VALUE_CLASS_NAME,
+  PropertyEmpty,
+  PropertyList,
+  PropertyRow,
+  PropertyStatusDot,
+  PropertyValue,
+} from "@/features/studio/components/property-list";
 
 import type { FlagType } from "../../lib/flag-type";
 import { FlagTypeIndicator } from "../shared/flag-type-indicator";
@@ -34,42 +43,8 @@ const STATUS_PRESENTATION = {
   enabled: { dotClassName: "bg-emerald-500", label: "Enabled" },
 } as const;
 
-const formatDate = (date: Date) =>
-  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
-
 const formatRollout = (rolloutBps: number) => `${(rolloutBps / 100).toFixed(0)}%`;
 
-/**
- * The box every value sits in, static or interactive, so the whole column
- * shares one height, type scale, weight and inset. The negative margin cancels
- * the horizontal padding a trigger needs for its hover state, which keeps the
- * text on the same axis whether or not the row is clickable.
- */
-const VALUE_CLASS_NAME =
-  "-ml-2.5 flex h-7 items-center gap-2 px-2.5 font-normal text-foreground text-sm";
-
-function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
-  return (
-    <div className="flex min-h-8 items-center gap-3">
-      <dt className="w-24 shrink-0 text-muted-foreground text-sm">{label}</dt>
-      <dd className="min-w-0 flex-1">{children}</dd>
-    </div>
-  );
-}
-
-/**
- * Static counterpart to a trigger — same box, no interaction. Dimmed a step
- * below the editable rows so what can be changed reads as the brighter text,
- * while staying clear of the still-dimmer property labels.
- */
-function PropertyValue({ children }: { children: ReactNode }) {
-  return <span className={cn(VALUE_CLASS_NAME, "text-foreground/80")}>{children}</span>;
-}
-
-function StatusDot({ className }: { className: string }) {
-  return <span aria-hidden="true" className={cn("size-2 shrink-0 rounded-full", className)} />;
-}
-
 function RolloutEditor({
   disabled,
   onChange,
@@ -86,7 +61,7 @@ function RolloutEditor({
       <PopoverTrigger asChild>
         <Button
           aria-label="Change rollout"
-          className={VALUE_CLASS_NAME}
+          className={PROPERTY_VALUE_CLASS_NAME}
           disabled={disabled}
           size="sm"
           variant="ghost"
@@ -159,93 +134,77 @@ export function FlagDetailProperties({
   const isEditable = !readOnly && !isSaving;
 
   return (
-    <section className="space-y-3">
-      <h2 className="font-medium text-sm">Properties</h2>
-
-      <dl>
-        <PropertyRow label="Status">
-          {readOnly ? (
-            <PropertyValue>
-              <StatusDot className={status.dotClassName} />
-              {status.label}
-            </PropertyValue>
-          ) : (
-            <DropdownMenu>
-              <DropdownMenuTrigger asChild>
-                <Button
-                  aria-label="Change status"
-                  className={VALUE_CLASS_NAME}
-                  disabled={!isEditable}
-                  size="sm"
-                  variant="ghost"
-                >
-                  <StatusDot className={status.dotClassName} />
-                  {status.label}
-                </Button>
-              </DropdownMenuTrigger>
-              <DropdownMenuContent align="start" className="w-44">
-                {([true, false] as const).map((value) => (
-                  <DropdownMenuItem key={String(value)} onSelect={() => setEnabled(value)}>
-                    <StatusDot
-                      className={
-                        value
-                          ? STATUS_PRESENTATION.enabled.dotClassName
-                          : STATUS_PRESENTATION.disabled.dotClassName
-                      }
-                    />
-                    {value ? STATUS_PRESENTATION.enabled.label : STATUS_PRESENTATION.disabled.label}
-                    {value === enabled && <CheckIcon className="ml-auto" />}
-                  </DropdownMenuItem>
-                ))}
-              </DropdownMenuContent>
-            </DropdownMenu>
-          )}
-        </PropertyRow>
-
-        <PropertyRow label="Allocation">
-          {flagType !== "boolean" ? (
-            <PropertyValue>{`${variants.length} variant${variants.length === 1 ? "" : "s"}`}</PropertyValue>
-          ) : readOnly ? (
-            <PropertyValue>{`${formatRollout(rolloutBps)} of users`}</PropertyValue>
-          ) : (
-            <RolloutEditor
-              disabled={!isEditable}
-              onChange={setRolloutBps}
-              rolloutBps={rolloutBps}
-            />
-          )}
-        </PropertyRow>
-
-        <PropertyRow label="Type">
-          <PropertyValue>
-            <FlagTypeIndicator flagType={flagType} />
-          </PropertyValue>
-        </PropertyRow>
-
-        <PropertyRow label="Created">
-          <PropertyValue>
-            {createdAt ? (
-              formatDate(createdAt)
-            ) : (
-              <span className="text-muted-foreground">Unknown</span>
-            )}
-          </PropertyValue>
-        </PropertyRow>
-
-        <PropertyRow label="Updated">
+    <PropertyList>
+      <PropertyRow label="Status">
+        {readOnly ? (
           <PropertyValue>
-            {updatedAt ? (
-              formatDate(updatedAt)
-            ) : (
-              <span className="text-muted-foreground">Unknown</span>
-            )}
+            <PropertyStatusDot className={status.dotClassName} />
+            {status.label}
           </PropertyValue>
-        </PropertyRow>
-
-        <PropertyRow label="Version">
-          <PropertyValue>v{version}</PropertyValue>
-        </PropertyRow>
-      </dl>
-    </section>
+        ) : (
+          <DropdownMenu>
+            <DropdownMenuTrigger asChild>
+              <Button
+                aria-label="Change status"
+                className={PROPERTY_VALUE_CLASS_NAME}
+                disabled={!isEditable}
+                size="sm"
+                variant="ghost"
+              >
+                <PropertyStatusDot className={status.dotClassName} />
+                {status.label}
+              </Button>
+            </DropdownMenuTrigger>
+            <DropdownMenuContent align="start" className="w-44">
+              {([true, false] as const).map((value) => (
+                <DropdownMenuItem key={String(value)} onSelect={() => setEnabled(value)}>
+                  <PropertyStatusDot
+                    className={
+                      value
+                        ? STATUS_PRESENTATION.enabled.dotClassName
+                        : STATUS_PRESENTATION.disabled.dotClassName
+                    }
+                  />
+                  {value ? STATUS_PRESENTATION.enabled.label : STATUS_PRESENTATION.disabled.label}
+                  {value === enabled && <CheckIcon className="ml-auto" />}
+                </DropdownMenuItem>
+              ))}
+            </DropdownMenuContent>
+          </DropdownMenu>
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Allocation">
+        {flagType !== "boolean" ? (
+          <PropertyValue>{`${variants.length} variant${variants.length === 1 ? "" : "s"}`}</PropertyValue>
+        ) : readOnly ? (
+          <PropertyValue>{`${formatRollout(rolloutBps)} of users`}</PropertyValue>
+        ) : (
+          <RolloutEditor disabled={!isEditable} onChange={setRolloutBps} rolloutBps={rolloutBps} />
+        )}
+      </PropertyRow>
+
+      <PropertyRow label="Type">
+        <PropertyValue>
+          <FlagTypeIndicator flagType={flagType} />
+        </PropertyValue>
+      </PropertyRow>
+
+      <PropertyRow label="Created">
+        <PropertyValue>
+          {createdAt ? formatPropertyDate(createdAt) : <PropertyEmpty>Unknown</PropertyEmpty>}
+        </PropertyValue>
+      </PropertyRow>
+
+      <PropertyRow label="Updated">
+        <PropertyValue>
+          {updatedAt ? formatPropertyDate(updatedAt) : <PropertyEmpty>Unknown</PropertyEmpty>}
+        </PropertyValue>
+      </PropertyRow>
+
+      <PropertyRow label="Version">
+        <PropertyValue>v{version}</PropertyValue>
+      </PropertyRow>
+    </PropertyList>
   );
 }
diff --git a/apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-properties.tsx b/apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-properties.tsx
index be54d5fb4..9f71e7c51 100644
--- a/apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-properties.tsx
+++ b/apps/www/src/features/studio/paywall-locations/components/paywall-location-detail-page/paywall-location-properties.tsx
@@ -1,17 +1,28 @@
 "use client";
 
 import type { RpcPaywallLocation } from "@voidhash/rpc";
-import { cn } from "@voidhash/ui";
-import { ExternalLinkIcon } from "lucide-react";
-import type { ReactNode } from "react";
+import { Button, cn } from "@voidhash/ui";
+import { ExternalLinkIcon, PlusIcon } from "lucide-react";
+
+import {
+  formatPropertyDate,
+  PROPERTY_VALUE_CLASS_NAME,
+  PropertyCopyValue,
+  PropertyEmpty,
+  PropertyLink,
+  PropertyList,
+  PropertyRow,
+  PropertyStatusDot,
+  PropertyValue,
+} from "@/features/studio/components/property-list";
+
+import { PaywallCombobox } from "../shared/paywall-combobox";
 
 interface PaywallLocationPropertiesProps {
   location: typeof RpcPaywallLocation.Type;
-  /**
-   * Combobox trigger for the Paywall row, already bound to this location.
-   * Omitted when the location can't be changed.
-   */
-  paywallCombobox?: ReactNode;
+  projectId: string;
+  /** Archived locations can't be re-pointed, so the paywall row goes static. */
+  readOnly?: boolean;
 }
 
 type LocationStatus = "archived" | "empty" | "live";
@@ -22,85 +33,102 @@ const STATUS_PRESENTATION: Record<LocationStatus, { dotClassName: string; label:
   live: { dotClassName: "bg-emerald-500", label: "Live" },
 };
 
-const formatDate = (date: Date) =>
-  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
-
-function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
-  return (
-    <div className="flex items-baseline gap-4 py-1.5">
-      <dt className="w-28 shrink-0 text-muted-foreground text-sm">{label}</dt>
-      <dd className="min-w-0 flex-1 text-sm">{children}</dd>
-    </div>
-  );
-}
-
 /**
- * Linear-style property list for the paywall location detail screen — whether
- * the location is serving anything, which paywall and release it currently
- * resolves to, and its identifiers.
+ * Property list for the paywall location detail screen — whether the location
+ * is serving anything, which paywall and release it currently resolves to, and
+ * its identifiers. The paywall row is repointed in place through the combobox.
  */
 export function PaywallLocationProperties({
   location,
-  paywallCombobox,
+  projectId,
+  readOnly,
 }: PaywallLocationPropertiesProps) {
   const showing = location.activeShowing;
+  const paywall = showing?.paywall ?? null;
   const status: LocationStatus =
-    location.archivedAt != null ? "archived" : showing?.paywall ? "live" : "empty";
+    location.archivedAt != null ? "archived" : paywall ? "live" : "empty";
   const { dotClassName, label } = STATUS_PRESENTATION[status];
 
   return (
-    <dl className="-my-1.5">
+    <PropertyList>
       <PropertyRow label="Status">
-        <span className="inline-flex items-center gap-2">
-          <span aria-hidden="true" className={cn("size-2 rounded-full", dotClassName)} />
+        <PropertyValue>
+          <PropertyStatusDot className={dotClassName} />
           {label}
-        </span>
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Paywall">
-        {paywallCombobox ??
-          (showing?.paywall ? (
-            <span className="truncate">{showing.paywall.name}</span>
-          ) : (
-            <span className="text-muted-foreground">None</span>
-          ))}
+        {readOnly ? (
+          <PropertyValue>
+            {paywall ? (
+              <span className="min-w-0 truncate">{paywall.name}</span>
+            ) : (
+              <PropertyEmpty>None</PropertyEmpty>
+            )}
+          </PropertyValue>
+        ) : (
+          <PaywallCombobox
+            currentPaywallId={showing?.paywallId}
+            locationId={location.id}
+            projectId={projectId}
+            trigger={
+              <Button
+                aria-label="Change paywall"
+                className={cn(
+                  PROPERTY_VALUE_CLASS_NAME,
+                  "max-w-full",
+                  !paywall && "text-muted-foreground",
+                )}
+                size="sm"
+                variant="ghost"
+              >
+                {paywall ? (
+                  <span className="min-w-0 truncate">{paywall.name}</span>
+                ) : (
+                  <>
+                    <PlusIcon />
+                    Select a paywall...
+                  </>
+                )}
+              </Button>
+            }
+          />
+        )}
       </PropertyRow>
 
       <PropertyRow label="Live version">
         {showing?.paywallRelease ? (
-          <a
-            className="inline-flex items-center gap-1.5 underline-offset-4 hover:underline"
-            href={showing.paywallRelease.htmlUrl}
-            rel="noreferrer"
-            target="_blank"
-          >
+          <PropertyLink href={showing.paywallRelease.htmlUrl}>
             v{showing.paywallRelease.version}
             <ExternalLinkIcon className="size-3.5 text-muted-foreground" />
-          </a>
+          </PropertyLink>
         ) : (
-          <span className="text-muted-foreground">None</span>
+          <PropertyValue>
+            <PropertyEmpty>None</PropertyEmpty>
+          </PropertyValue>
         )}
       </PropertyRow>
 
       <PropertyRow label="Description">
-        {location.description ? (
-          location.description
-        ) : (
-          <span className="text-muted-foreground">None</span>
-        )}
+        <PropertyValue>
+          {location.description ? location.description : <PropertyEmpty>None</PropertyEmpty>}
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Created">
-        {location.createdAt ? (
-          formatDate(location.createdAt)
-        ) : (
-          <span className="text-muted-foreground">Unknown</span>
-        )}
+        <PropertyValue>
+          {location.createdAt ? (
+            formatPropertyDate(location.createdAt)
+          ) : (
+            <PropertyEmpty>Unknown</PropertyEmpty>
+          )}
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Slug">
-        <span className="font-mono text-xs">{location.slug}</span>
+        <PropertyCopyValue label="Slug" value={location.slug} />
       </PropertyRow>
-    </dl>
+    </PropertyList>
   );
 }
diff --git a/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-properties.tsx b/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-properties.tsx
index 1873fa0bb..06590ea33 100644
--- a/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-properties.tsx
+++ b/apps/www/src/features/studio/paywalls/components/paywall-detail-page/paywall-detail-properties.tsx
@@ -1,8 +1,17 @@
 "use client";
 
-import { cn } from "@voidhash/ui";
 import { ExternalLinkIcon } from "lucide-react";
-import type { ReactNode } from "react";
+
+import {
+  formatPropertyDate,
+  PropertyCopyValue,
+  PropertyEmpty,
+  PropertyLink,
+  PropertyList,
+  PropertyRow,
+  PropertyStatusDot,
+  PropertyValue,
+} from "@/features/studio/components/property-list";
 
 interface PaywallDetailPropertiesProps {
   createdAt: Date | null;
@@ -36,21 +45,9 @@ const resolveStatus = (input: {
   return input.draftVersion == null ? "not-live" : "draft";
 };
 
-const formatDate = (date: Date) =>
-  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
-
-function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
-  return (
-    <div className="flex items-baseline gap-4 py-1.5">
-      <dt className="w-28 shrink-0 text-muted-foreground text-sm">{label}</dt>
-      <dd className="min-w-0 flex-1 text-sm">{children}</dd>
-    </div>
-  );
-}
-
 /**
- * Linear-style property list for the paywall detail screen — status, which
- * versions are live and drafted, and its identifiers.
+ * Property list for the paywall detail screen — status, which versions are
+ * live and drafted, and its identifiers.
  */
 export function PaywallDetailProperties({
   createdAt,
@@ -64,45 +61,42 @@ export function PaywallDetailProperties({
   const { dotClassName, label } = STATUS_PRESENTATION[status];
 
   return (
-    <dl className="-my-1.5">
+    <PropertyList>
       <PropertyRow label="Status">
-        <span className="inline-flex items-center gap-2">
-          <span aria-hidden="true" className={cn("size-2 rounded-full", dotClassName)} />
+        <PropertyValue>
+          <PropertyStatusDot className={dotClassName} />
           {label}
-        </span>
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Live version">
         {liveRelease ? (
-          <a
-            className="inline-flex items-center gap-1.5 underline-offset-4 hover:underline"
-            href={liveRelease.htmlUrl}
-            rel="noreferrer"
-            target="_blank"
-          >
+          <PropertyLink href={liveRelease.htmlUrl}>
             v{liveRelease.version}
             <ExternalLinkIcon className="size-3.5 text-muted-foreground" />
-          </a>
+          </PropertyLink>
         ) : (
-          <span className="text-muted-foreground">None</span>
+          <PropertyValue>
+            <PropertyEmpty>None</PropertyEmpty>
+          </PropertyValue>
         )}
       </PropertyRow>
 
       <PropertyRow label="Latest draft">
-        {draftVersion == null ? (
-          <span className="text-muted-foreground">None</span>
-        ) : (
-          `v${draftVersion}`
-        )}
+        <PropertyValue>
+          {draftVersion == null ? <PropertyEmpty>None</PropertyEmpty> : `v${draftVersion}`}
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Created">
-        {createdAt ? formatDate(createdAt) : <span className="text-muted-foreground">Unknown</span>}
+        <PropertyValue>
+          {createdAt ? formatPropertyDate(createdAt) : <PropertyEmpty>Unknown</PropertyEmpty>}
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Slug">
-        <span className="font-mono text-xs">{slug}</span>
+        <PropertyCopyValue label="Slug" value={slug} />
       </PropertyRow>
-    </dl>
+    </PropertyList>
   );
 }
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
index a62a4f0e8..4c5ba4be9 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/settings/paywall-locations.$id.tsx
@@ -9,11 +9,10 @@ import {
   BreadcrumbPage,
   BreadcrumbSeparator,
   Button,
-  cn,
   Page,
   PageHeader,
 } from "@voidhash/ui";
-import { PlusIcon, RepeatIcon } from "lucide-react";
+import { RepeatIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
 import { listPaywallLocationsOptions } from "@/features/studio/lib/tanstack-query/paywall-locations";
 import { listPaywallsOptions } from "@/features/studio/lib/tanstack-query/paywalls";
@@ -120,33 +119,8 @@ function PaywallLocationDetailPage() {
               </div>
               <PaywallLocationProperties
                 location={location}
-                paywallCombobox={
-                  isArchived ? undefined : (
-                    <PaywallCombobox
-                      currentPaywallId={showingPaywallId}
-                      locationId={location.id}
-                      projectId={project.id}
-                      // `-ml-2.5` cancels the button's own padding so its label
-                      // lines up with the plain-text values in the rows above.
-                      trigger={
-                        <Button
-                          className={cn("-ml-2.5 max-w-full", showingPaywall && "text-foreground")}
-                          size="sm"
-                          variant="ghost"
-                        >
-                          {showingPaywall ? (
-                            <span className="truncate">{showingPaywall.name}</span>
-                          ) : (
-                            <>
-                              <PlusIcon />
-                              Select a paywall...
-                            </>
-                          )}
-                        </Button>
-                      }
-                    />
-                  )
-                }
+                projectId={project.id}
+                readOnly={isArchived}
               />
             </div>
 

From ed8cfdfd079f4482e27c1da489c72882c278968c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Fri, 24 Jul 2026 17:21:48 +0200
Subject: [PATCH 119/129] feat: a/b test redesign

---
 apps/backend/src/routes/v1/sdk.ts             |   2 +-
 apps/backend/src/rpcs/experiment-rpcs.ts      |  26 +-
 .../experiment-detail-properties.tsx          |  14 +-
 .../experiment-lifecycle-controls.tsx         |   2 +-
 .../experiment-settings-form.tsx              |  12 +-
 .../experiment-setup-panel.tsx                |   2 +-
 .../create-experiment-button.tsx              |  12 +-
 .../create-experiment-modal.tsx               | 225 ++++++---------
 .../experiment-record-skeleton.tsx            |  18 --
 .../experiments-page/experiment-record.tsx    |  81 ------
 .../experiments-page-empty-state.tsx          |  16 +-
 .../experiments-page/experiments-table.tsx    | 263 ++++++++++++++++++
 .../shared/experiment-status-badge.tsx        |  14 -
 .../experiments/lib/experiment-metrics.ts     | 153 ++++++++++
 .../studio/lib/tanstack-query/experiments.ts  |  14 +-
 .../components/sidebar/project-sidebar.tsx    |   4 +-
 .../$projectSlug/experiments.$id.tsx          |   9 +-
 .../$projectSlug/experiments.index.tsx        | 118 +++++---
 .../core/src/domain/experiment/Experiment.ts  |   5 -
 .../InternalAnalyticsEvents.ts                |   2 +-
 .../services/analytics/AnalyticsService.ts    |  16 +-
 .../services/analytics/clickhouse-accessor.ts |   4 +-
 .../services/experiments/ExperimentService.ts |  60 ++--
 .../PaywallLocationService.ts                 |   1 -
 .../src/services/paywallLocations/helpers.ts  |   1 -
 ...tService.authorization.integration.test.ts |   9 +-
 .../migration.sql                             |   8 +
 packages/db/src/schema.ts                     |  22 +-
 packages/rpc/src/errors/Experiment.ts         |  11 +-
 packages/rpc/src/groups/ExperimentRpcsDef.ts  |  25 +-
 packages/rpc/src/internalFeatureFlags.ts      |   4 +-
 31 files changed, 733 insertions(+), 420 deletions(-)
 delete mode 100644 apps/www/src/features/studio/experiments/components/experiments-page/experiment-record-skeleton.tsx
 delete mode 100644 apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx
 create mode 100644 apps/www/src/features/studio/experiments/components/experiments-page/experiments-table.tsx
 delete mode 100644 apps/www/src/features/studio/experiments/components/shared/experiment-status-badge.tsx
 create mode 100644 apps/www/src/features/studio/experiments/lib/experiment-metrics.ts
 create mode 100644 packages/db/src/alchemy-migrations/20260724150000_drop_experiment_key/migration.sql

diff --git a/apps/backend/src/routes/v1/sdk.ts b/apps/backend/src/routes/v1/sdk.ts
index 1dabc7bb6..b1f2f15ee 100644
--- a/apps/backend/src/routes/v1/sdk.ts
+++ b/apps/backend/src/routes/v1/sdk.ts
@@ -321,7 +321,7 @@ export const SdkGroupLive = HttpApiBuilder.group(VoidhashV1Api, "sdk", (handlers
               return null;
             }
 
-            // `resolved.exposure` (when non-null) carries { experimentKey,
+            // `resolved.exposure` (when non-null) carries { experimentId,
             // variantKey, personId, distinctId } for the assigned subject.
             // Server-side `$experiment.exposed` emission is wired here once the
             // analytics dispatch producer (`AnalyticsDispatchService` over the
diff --git a/apps/backend/src/rpcs/experiment-rpcs.ts b/apps/backend/src/rpcs/experiment-rpcs.ts
index 661aaef0a..3c00bde9d 100644
--- a/apps/backend/src/rpcs/experiment-rpcs.ts
+++ b/apps/backend/src/rpcs/experiment-rpcs.ts
@@ -7,7 +7,6 @@ import { ClickhouseWebClient } from "@voidhash/clickhouse-db/clickhouse-client-w
 import {
   ExperimentRpcsDef,
   RpcActionForbiddenError,
-  RpcExperimentKeyAlreadyExistsError,
   RpcExperimentNotFoundError,
   RpcExperimentServiceError,
   RpcExperimentTreatmentNotFoundError,
@@ -26,9 +25,8 @@ const toRpcExperiment = (e: {
   readonly featureFlagId: string;
   readonly hypothesis: string | null;
   readonly id: string;
-  readonly key: string;
   readonly name: string;
-  readonly primaryMetricEventName: string;
+  readonly primaryMetricEventName: string | null;
   readonly projectId: string;
   readonly secondaryMetricEventNames: readonly string[] | null;
   readonly startedAt: Date | null;
@@ -81,7 +79,6 @@ const toRpcExperiment = (e: {
   featureFlagId: e.featureFlagId,
   hypothesis: e.hypothesis,
   id: e.id,
-  key: e.key,
   name: e.name,
   primaryMetricEventName: e.primaryMetricEventName,
   projectId: e.projectId,
@@ -142,21 +139,12 @@ export const ExperimentRpcsLive = ExperimentRpcsDef.toLayer(
           }),
         ),
       CreateExperiment: (input) =>
-        service
-          .createExperiment({
-            ...input,
-            secondaryMetricEventNames: input.secondaryMetricEventNames
-              ? [...input.secondaryMetricEventNames]
-              : undefined,
-          })
-          .pipe(
-            Effect.catchTags({
-              ActionForbiddenError: forbidden,
-              ExperimentKeyAlreadyExistsError: (error) =>
-                Effect.fail(new RpcExperimentKeyAlreadyExistsError({ key: error.key })),
-              ExperimentServiceError: serviceError,
-            }),
-          ),
+        service.createExperiment(input).pipe(
+          Effect.catchTags({
+            ActionForbiddenError: forbidden,
+            ExperimentServiceError: serviceError,
+          }),
+        ),
       GetExperiment: (input) =>
         service.getExperiment(input).pipe(
           Effect.map(toRpcExperiment),
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
index 1c4762c7b..b6c746956 100644
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
@@ -9,8 +9,7 @@ interface ExperimentDetailPropertiesProps {
   archivedAt: Date | null;
   createdAt: Date | null;
   endedAt: Date | null;
-  keyValue: string;
-  primaryMetricEventName: string;
+  primaryMetricEventName: string | null;
   startedAt: Date | null;
   status: number;
   variantCount: number;
@@ -37,7 +36,6 @@ export function ExperimentDetailProperties({
   archivedAt,
   createdAt,
   endedAt,
-  keyValue,
   primaryMetricEventName,
   startedAt,
   status,
@@ -65,7 +63,11 @@ export function ExperimentDetailProperties({
       </PropertyRow>
 
       <PropertyRow label="Primary metric">
-        <span className="font-mono text-xs">{primaryMetricEventName}</span>
+        {primaryMetricEventName ? (
+          <span className="font-mono text-xs">{primaryMetricEventName}</span>
+        ) : (
+          <span className="text-muted-foreground">Not set</span>
+        )}
       </PropertyRow>
 
       <PropertyRow label="Variants">
@@ -84,10 +86,6 @@ export function ExperimentDetailProperties({
         {createdAt ? formatDate(createdAt) : <span className="text-muted-foreground">Unknown</span>}
       </PropertyRow>
 
-      <PropertyRow label="Key">
-        <span className="font-mono text-xs">{keyValue}</span>
-      </PropertyRow>
-
       <PropertyRow label="Version">v{version}</PropertyRow>
     </dl>
   );
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
index 96e6722a9..4b46dc41f 100644
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
@@ -60,7 +60,7 @@ function ConcludeExperimentDialog({
       </DialogTrigger>
       <DialogContent>
         <DialogHeader>
-          <DialogTitle>Conclude Experiment</DialogTitle>
+          <DialogTitle>Conclude A/B test</DialogTitle>
         </DialogHeader>
         <div className="space-y-4">
           <p className="text-muted-foreground text-sm">
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
index 283e47a3f..6a8db3555 100644
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
@@ -20,7 +20,7 @@ type ExperimentData = {
   hypothesis: string | null;
   id: string;
   name: string;
-  primaryMetricEventName: string;
+  primaryMetricEventName: string | null;
   secondaryMetricEventNames: readonly string[] | null;
 };
 
@@ -46,7 +46,7 @@ export function ExperimentSettingsForm({
   const [description, setDescription] = useState(experiment.description ?? "");
   const [hypothesis, setHypothesis] = useState(experiment.hypothesis ?? "");
   const [primaryMetricEventName, setPrimaryMetricEventName] = useState(
-    experiment.primaryMetricEventName,
+    experiment.primaryMetricEventName ?? "",
   );
   const [secondaryMetricEventNames, setSecondaryMetricEventNames] = useState(initialSecondary);
   const queryClient = useQueryClient();
@@ -67,14 +67,14 @@ export function ExperimentSettingsForm({
     name !== experiment.name ||
     description !== (experiment.description ?? "") ||
     hypothesis !== (experiment.hypothesis ?? "") ||
-    primaryMetricEventName !== experiment.primaryMetricEventName ||
+    primaryMetricEventName !== (experiment.primaryMetricEventName ?? "") ||
     secondaryMetricEventNames !== initialSecondary;
 
   const reset = () => {
     setName(experiment.name);
     setDescription(experiment.description ?? "");
     setHypothesis(experiment.hypothesis ?? "");
-    setPrimaryMetricEventName(experiment.primaryMetricEventName);
+    setPrimaryMetricEventName(experiment.primaryMetricEventName ?? "");
     setSecondaryMetricEventNames(initialSecondary);
   };
 
@@ -142,7 +142,7 @@ export function ExperimentSettingsForm({
             Reset
           </Button>
           <Button
-            disabled={!name || !primaryMetricEventName || updateExperiment.isPending}
+            disabled={!name || updateExperiment.isPending}
             onClick={() => {
               const secondary = parseEventNames(secondaryMetricEventNames);
               updateExperiment.mutate({
@@ -150,7 +150,7 @@ export function ExperimentSettingsForm({
                 hypothesis: hypothesis || null,
                 id: experiment.id,
                 name,
-                primaryMetricEventName,
+                primaryMetricEventName: primaryMetricEventName || null,
                 secondaryMetricEventNames: secondary.length > 0 ? secondary : null,
               });
             }}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
index 0152c8a41..a96ec6bd4 100644
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
@@ -154,7 +154,7 @@ export function ExperimentSetupPanel({
           <Alert className="mb-4">
             <Info className="h-4 w-4" />
             <AlertDescription>
-              Variants and weights are locked while the experiment is running. Pause it to make
+              Variants and weights are locked while the A/B test is running. Pause it to make
               changes.
             </AlertDescription>
           </Alert>
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx
index 7dd1cdf11..71814b05e 100644
--- a/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-button.tsx
@@ -7,11 +7,21 @@ import { Plus } from "lucide-react";
 import { CreateExperimentModal } from "./create-experiment-modal";
 
 /** Compact page-header action for creating an A/B test. */
-export function CreateExperimentButton({ projectId }: { projectId: string }) {
+export function CreateExperimentButton({
+  organizationSlug,
+  projectId,
+  projectSlug,
+}: {
+  organizationSlug: string;
+  projectId: string;
+  projectSlug: string;
+}) {
   return (
     <Tooltip>
       <CreateExperimentModal
+        organizationSlug={organizationSlug}
         projectId={projectId}
+        projectSlug={projectSlug}
         trigger={
           <TooltipTrigger
             render={
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-modal.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-modal.tsx
index a97deb814..818b202ae 100644
--- a/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-modal.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/create-experiment-modal.tsx
@@ -1,166 +1,125 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
 import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { useNavigate } from "@tanstack/react-router";
+import { Button } from "@voidhash/ui/button";
 import {
-  Button,
   Dialog,
   DialogContent,
+  DialogFooter,
   DialogHeader,
   DialogTitle,
   DialogTrigger,
-  Input,
-  Label,
-  Textarea,
-} from "@voidhash/ui";
+} from "@voidhash/ui/dialog";
+import { Form, FormControl, FormField, FormItem, FormLabel, FormMessage } from "@voidhash/ui/form";
+import { Input } from "@voidhash/ui/input";
 import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { z } from "zod/v3";
 
 import { createExperimentOptions, queryKeys } from "@/features/studio/lib/tanstack-query";
 
-/**
- * Parse a comma / newline separated string of event names into a de-duplicated
- * list, dropping blanks. Mirrors how the treatments/metrics fields accept free
- * text but persist a clean array.
- */
-const parseEventNames = (value: string): string[] =>
-  Array.from(
-    new Set(
-      value
-        .split(/[\n,]/)
-        .map((entry) => entry.trim())
-        .filter((entry) => entry.length > 0),
-    ),
-  );
+const createExperimentSchema = z.object({
+  name: z
+    .string()
+    .min(3, "Name must be at least 3 characters long")
+    .max(64, "Name must be less than 64 characters"),
+});
+
+type CreateExperimentForm = z.infer<typeof createExperimentSchema>;
 
 interface CreateExperimentModalProps {
+  organizationSlug: string;
   projectId: string;
-  trigger?: React.ReactNode;
+  projectSlug: string;
+  trigger: React.ReactNode;
 }
 
-/** Dialog for creating an A/B test in the current project. */
-export function CreateExperimentModal({ projectId, trigger }: CreateExperimentModalProps) {
+/**
+ * Dialog for creating an A/B test. A test starts as an empty draft that assigns
+ * no traffic, so the only thing worth asking for up front is a name — variants,
+ * treatments and metrics are authored on the detail page we land on.
+ */
+export function CreateExperimentModal({
+  organizationSlug,
+  projectId,
+  projectSlug,
+  trigger,
+}: CreateExperimentModalProps) {
   const [open, setOpen] = useState(false);
-  const [name, setName] = useState("");
-  const [key, setKey] = useState("");
-  const [description, setDescription] = useState("");
-  const [hypothesis, setHypothesis] = useState("");
-  const [primaryMetricEventName, setPrimaryMetricEventName] = useState("");
-  const [secondaryMetricEventNames, setSecondaryMetricEventNames] = useState("");
+  const navigate = useNavigate();
   const queryClient = useQueryClient();
+  const form = useForm<CreateExperimentForm>({
+    defaultValues: { name: "" },
+    resolver: zodResolver(createExperimentSchema),
+  });
 
-  const createExperiment = useMutation({
+  const { mutate: createExperiment, status: createExperimentStatus } = useMutation({
     ...createExperimentOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.experiment.list({ projectId }),
+    onError: () => {
+      toast.error("Failed to create A/B test");
+    },
+    onSuccess: (data) => {
+      queryClient.invalidateQueries({ queryKey: queryKeys.experiment.all });
+      handleOpenChange(false);
+      void navigate({
+        params: { id: data.id, organizationSlug, projectSlug },
+        to: "/studio/$organizationSlug/$projectSlug/experiments/$id",
       });
-      setOpen(false);
-      setName("");
-      setKey("");
-      setDescription("");
-      setHypothesis("");
-      setPrimaryMetricEventName("");
-      setSecondaryMetricEventNames("");
     },
   });
 
-  const handleNameChange = (value: string) => {
-    setName(value);
-    setKey(
-      value
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, "-")
-        .replace(/^-|-$/g, ""),
-    );
+  const handleOpenChange = (isOpen: boolean) => {
+    setOpen(isOpen);
+    if (!isOpen) {
+      form.reset();
+    }
   };
 
   return (
-    <Dialog onOpenChange={setOpen} open={open}>
-      <DialogTrigger asChild>{trigger ?? <Button>Create Experiment</Button>}</DialogTrigger>
-      <DialogContent>
+    <Dialog onOpenChange={handleOpenChange} open={open}>
+      <DialogTrigger asChild>{trigger}</DialogTrigger>
+      <DialogContent className="max-w-sm" hideCloseButton>
         <DialogHeader>
-          <DialogTitle>Create Experiment</DialogTitle>
+          <DialogTitle>Create A/B test</DialogTitle>
         </DialogHeader>
-        <form
-          className="space-y-4"
-          onSubmit={(e) => {
-            e.preventDefault();
-            const secondary = parseEventNames(secondaryMetricEventNames);
-            createExperiment.mutate({
-              description: description || undefined,
-              hypothesis: hypothesis || undefined,
-              key,
-              name,
-              primaryMetricEventName,
-              projectId,
-              secondaryMetricEventNames: secondary.length > 0 ? secondary : undefined,
-            });
-          }}
-        >
-          <div className="space-y-2">
-            <Label htmlFor="experiment-name">Name</Label>
-            <Input
-              id="experiment-name"
-              onChange={(e) => handleNameChange(e.target.value)}
-              placeholder="My Experiment"
-              value={name}
-            />
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="experiment-key">Key</Label>
-            <Input
-              id="experiment-key"
-              onChange={(e) => setKey(e.target.value)}
-              placeholder="my-experiment"
-              value={key}
-            />
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="experiment-primary-metric">Primary metric event</Label>
-            <Input
-              id="experiment-primary-metric"
-              onChange={(e) => setPrimaryMetricEventName(e.target.value)}
-              placeholder="purchase_completed"
-              value={primaryMetricEventName}
-            />
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="experiment-secondary-metrics">Secondary metrics (optional)</Label>
-            <Input
-              id="experiment-secondary-metrics"
-              onChange={(e) => setSecondaryMetricEventNames(e.target.value)}
-              placeholder="trial_started, paywall_viewed"
-              value={secondaryMetricEventNames}
+        <Form {...form}>
+          <form
+            className="space-y-4 pt-4"
+            onSubmit={form.handleSubmit((data) => createExperiment({ name: data.name, projectId }))}
+          >
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem className="space-y-1">
+                  <FormLabel>Name</FormLabel>
+                  <FormControl>
+                    <Input placeholder="Onboarding paywall pricing" {...field} />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
             />
-            <p className="text-muted-foreground text-xs">Comma separated event names.</p>
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="experiment-hypothesis">Hypothesis (optional)</Label>
-            <Textarea
-              id="experiment-hypothesis"
-              onChange={(e) => setHypothesis(e.target.value)}
-              placeholder="What do you expect to happen and why?"
-              value={hypothesis}
-            />
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="experiment-description">Description (optional)</Label>
-            <Textarea
-              id="experiment-description"
-              onChange={(e) => setDescription(e.target.value)}
-              placeholder="What does this experiment change?"
-              value={description}
-            />
-          </div>
-          <div className="flex justify-end gap-2">
-            <Button onClick={() => setOpen(false)} type="button" variant="outline">
-              Cancel
-            </Button>
-            <Button
-              disabled={!name || !key || !primaryMetricEventName || createExperiment.isPending}
-              type="submit"
-            >
-              {createExperiment.isPending ? "Creating..." : "Create"}
-            </Button>
-          </div>
-        </form>
+
+            <DialogFooter className="flex gap-2 sm:justify-between">
+              <Button
+                className="hidden md:block"
+                disabled={createExperimentStatus === "pending"}
+                onClick={() => handleOpenChange(false)}
+                type="button"
+                variant="outline"
+              >
+                Cancel
+              </Button>
+              <Button disabled={createExperimentStatus === "pending"} type="submit">
+                {createExperimentStatus === "pending" ? "Creating..." : "Create A/B test"}
+              </Button>
+            </DialogFooter>
+          </form>
+        </Form>
       </DialogContent>
     </Dialog>
   );
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record-skeleton.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record-skeleton.tsx
deleted file mode 100644
index 5e295f8ac..000000000
--- a/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record-skeleton.tsx
+++ /dev/null
@@ -1,18 +0,0 @@
-"use client";
-
-import { Skeleton } from "@voidhash/ui";
-
-export function ExperimentRecordSkeleton() {
-  return (
-    <div className="flex items-center justify-between gap-4 px-6 py-4">
-      <div className="space-y-2">
-        <Skeleton className="h-4 w-40" />
-        <Skeleton className="h-3 w-24" />
-      </div>
-      <div className="flex items-center gap-2">
-        <Skeleton className="h-4 w-16" />
-        <Skeleton className="h-5 w-16 rounded-full" />
-      </div>
-    </div>
-  );
-}
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx
deleted file mode 100644
index ff16be833..000000000
--- a/apps/www/src/features/studio/experiments/components/experiments-page/experiment-record.tsx
+++ /dev/null
@@ -1,81 +0,0 @@
-"use client";
-
-import { Link, useNavigate } from "@tanstack/react-router";
-import type { RpcExperimentListItem } from "@voidhash/rpc";
-import { Badge, cn, TableCell, TableRow } from "@voidhash/ui";
-
-import { ExperimentStatusBadge } from "../shared/experiment-status-badge";
-
-function formatDate(value: Date | null): string {
-  return value
-    ? value.toLocaleDateString("en", {
-        day: "numeric",
-        month: "short",
-        timeZone: "UTC",
-        year: "numeric",
-      })
-    : "—";
-}
-
-/**
- * An A/B-test table row linking to its detail page and surfacing the primary
- * metric, variant count, lifecycle status, and last change.
- */
-export function ExperimentRecord({
-  experiment,
-  organizationSlug,
-  projectSlug,
-}: {
-  experiment: typeof RpcExperimentListItem.Type;
-  organizationSlug: string;
-  projectSlug: string;
-}) {
-  const navigate = useNavigate();
-  const detailLink = {
-    params: { id: experiment.id, organizationSlug, projectSlug },
-    to: "/studio/$organizationSlug/$projectSlug/experiments/$id",
-  } as const;
-  const isArchived = experiment.archivedAt != null;
-
-  return (
-    <TableRow
-      className={cn("cursor-pointer", isArchived && "opacity-60")}
-      onClick={(event) => {
-        if ((event.target as HTMLElement).closest("a,button")) {
-          return;
-        }
-        void navigate(detailLink);
-      }}
-    >
-      <TableCell className="min-w-64">
-        <div className="max-w-sm">
-          <Link className="block truncate font-medium hover:underline" {...detailLink}>
-            {experiment.name}
-          </Link>
-          {experiment.description ? (
-            <p className="mt-0.5 truncate text-muted-foreground text-xs">
-              {experiment.description}
-            </p>
-          ) : null}
-        </div>
-      </TableCell>
-      <TableCell className="font-mono text-muted-foreground text-xs">{experiment.key}</TableCell>
-      <TableCell className="font-mono text-muted-foreground text-xs">
-        {experiment.primaryMetricEventName}
-      </TableCell>
-      <TableCell className="text-muted-foreground">
-        {experiment.variantCount} variant{experiment.variantCount === 1 ? "" : "s"}
-      </TableCell>
-      <TableCell>
-        {isArchived ? (
-          <Badge variant="outline">Archived</Badge>
-        ) : (
-          <ExperimentStatusBadge status={experiment.status} />
-        )}
-      </TableCell>
-      <TableCell className="text-right text-muted-foreground">
-        {formatDate(experiment.updatedAt ?? experiment.createdAt)}
-      </TableCell>
-    </TableRow>
-  );
-}
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx
index 8f5726b88..a4ed171f8 100644
--- a/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-page-empty-state.tsx
@@ -16,7 +16,9 @@ import { CreateExperimentModal } from "./create-experiment-modal";
 type ExperimentEmptyTab = "all" | "draft" | "running" | "paused" | "concluded" | "archived";
 
 interface ExperimentsPageEmptyStateProps {
+  organizationSlug: string;
   projectId: string;
+  projectSlug: string;
   tab: ExperimentEmptyTab;
 }
 
@@ -60,7 +62,12 @@ const EMPTY_TAB_CONTENT = {
 >;
 
 /** Empty state for the A/B test list, tailored to the selected lifecycle status. */
-export function ExperimentsPageEmptyState({ projectId, tab }: ExperimentsPageEmptyStateProps) {
+export function ExperimentsPageEmptyState({
+  organizationSlug,
+  projectId,
+  projectSlug,
+  tab,
+}: ExperimentsPageEmptyStateProps) {
   const { description, icon: Icon, title } = EMPTY_TAB_CONTENT[tab];
   const showCreateAction = tab === "all" || tab === "draft";
 
@@ -75,7 +82,12 @@ export function ExperimentsPageEmptyState({ projectId, tab }: ExperimentsPageEmp
       </EmptyHeader>
       {showCreateAction ? (
         <EmptyContent>
-          <CreateExperimentModal projectId={projectId} trigger={<Button>Create A/B test</Button>} />
+          <CreateExperimentModal
+            organizationSlug={organizationSlug}
+            projectId={projectId}
+            projectSlug={projectSlug}
+            trigger={<Button>Create A/B test</Button>}
+          />
         </EmptyContent>
       ) : null}
     </Empty>
diff --git a/apps/www/src/features/studio/experiments/components/experiments-page/experiments-table.tsx b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-table.tsx
new file mode 100644
index 000000000..6b8735982
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiments-page/experiments-table.tsx
@@ -0,0 +1,263 @@
+"use client";
+
+import { Link, useNavigate } from "@tanstack/react-router";
+import type { RpcExperimentListItem } from "@voidhash/rpc";
+import {
+  cn,
+  Skeleton,
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+  TooltipContent,
+  TooltipProvider,
+  TooltipRoot,
+  TooltipTrigger,
+} from "@voidhash/ui";
+import { CircleHelpIcon } from "lucide-react";
+
+import type { ExperimentMetrics } from "../../lib/experiment-metrics";
+import { EXPERIMENT_STATUS, experimentStatusLabel } from "../../lib/experiment-status";
+
+// Per-variant numbers need `$experiment.exposed` events, which are not emitted
+// yet (see the SDK resolve path). Until they are, anything that has to be split
+// by arm renders as an em-dash rather than a misleading zero.
+const UNSPLIT_SUFFIX =
+  " Not available yet — exposures aren't recorded per variant, so results can't be split by arm.";
+
+interface MetricColumn {
+  info: string;
+  key: string;
+  label: string;
+  /** Reads a value off the row's metrics; absent while the metric is unavailable. */
+  value?: (metrics: ExperimentMetrics) => string;
+}
+
+const METRIC_COLUMNS: MetricColumn[] = [
+  {
+    info: "Times a paywall was shown at the locations this test targets.",
+    key: "views",
+    label: "Views",
+    value: (metrics) => metrics.views.toLocaleString(),
+  },
+  {
+    info: "Distinct users who saw a paywall at the locations this test targets.",
+    key: "viewers",
+    label: "Unique viewers",
+    value: (metrics) => metrics.viewers.toLocaleString(),
+  },
+  {
+    info: "Purchases completed after seeing a paywall at the locations this test targets.",
+    key: "purchases",
+    label: "Purchases",
+    value: (metrics) => metrics.purchases.toLocaleString(),
+  },
+  {
+    info: "Share of viewers who went on to purchase within 7 days, across the test's locations.",
+    key: "conversion",
+    label: "Conversion",
+    value: (metrics) => `${(metrics.conversion * 100).toFixed(1)}%`,
+  },
+  {
+    info: `Conversion lift of the winning arm over control.${UNSPLIT_SUFFIX}`,
+    key: "uplift",
+    label: "Uplift",
+  },
+  {
+    info: `Confidence that the observed difference between arms is real.${UNSPLIT_SUFFIX}`,
+    key: "significance",
+    label: "Significance",
+  },
+];
+
+// The table is wider than its container, so the name column pins to the left
+// edge while the metrics scroll past it. A pinned cell needs an opaque
+// background of its own — the table's `bg-card` sits *below* the cells sliding
+// underneath — and `isolate` + a `-z-10` overlay reproduces the row's
+// translucent hover tint over that base without washing over the text.
+const PINNED_START =
+  "sticky isolate z-20 left-0 bg-card border-border/60 border-r after:absolute after:inset-0 after:-z-10 after:bg-muted/40 after:opacity-0 group-hover/row:after:opacity-100";
+
+const STATUS_PRESENTATION: Record<number, { dotClassName: string }> = {
+  [EXPERIMENT_STATUS.draft]: { dotClassName: "bg-muted-foreground/50" },
+  [EXPERIMENT_STATUS.running]: { dotClassName: "bg-emerald-500" },
+  [EXPERIMENT_STATUS.paused]: { dotClassName: "bg-amber-500" },
+  [EXPERIMENT_STATUS.concluded]: { dotClassName: "bg-sky-500" },
+};
+
+function MetricHead({ column }: { column: MetricColumn }) {
+  return (
+    <TableHead className="text-right">
+      <span className="inline-flex items-center gap-1.5">
+        <TooltipRoot>
+          <TooltipTrigger className="cursor-help">
+            <CircleHelpIcon className="size-3.5 opacity-60" />
+          </TooltipTrigger>
+          <TooltipContent className="max-w-64">{column.info}</TooltipContent>
+        </TooltipRoot>
+        {column.label}
+      </span>
+    </TableHead>
+  );
+}
+
+export interface ExperimentsTableProps {
+  experiments: readonly (typeof RpcExperimentListItem.Type)[];
+  isMetricsPending: boolean;
+  /** Metrics for a test's target locations, addressed by their slugs. */
+  metricsFor: (locationSlugs: readonly string[]) => ExperimentMetrics;
+  organizationSlug: string;
+  /** Paywall-location slugs by id, for turning treatment targets into metric keys. */
+  locationSlugsById: ReadonlyMap<string, string>;
+  projectSlug: string;
+}
+
+/**
+ * The A/B tests index: one row per test showing its lifecycle state, its setup,
+ * and how the traffic it splits performs. Wide enough to scroll horizontally
+ * rather than squeeze the metric columns.
+ */
+export function ExperimentsTable({
+  experiments,
+  isMetricsPending,
+  locationSlugsById,
+  metricsFor,
+  organizationSlug,
+  projectSlug,
+}: ExperimentsTableProps) {
+  return (
+    <TooltipProvider>
+      {/* `overscroll-x-contain` stops the scroll from chaining to the `<main>`
+          element behind it, which is itself an x-scroller — without it, hitting
+          either end rubber-bands the page and the pinned column jitters. */}
+      <Table containerClassName="overflow-x-auto overscroll-x-contain">
+        <TableHeader>
+          <TableRow>
+            <TableHead className={cn(PINNED_START, "min-w-56")}>A/B test</TableHead>
+            <TableHead className="min-w-28">Status</TableHead>
+            <TableHead className="min-w-24">Variants</TableHead>
+            <TableHead className="min-w-24">Locations</TableHead>
+            {METRIC_COLUMNS.map((column) => (
+              <MetricHead column={column} key={column.key} />
+            ))}
+            <TableHead className="min-w-28 text-right">Started</TableHead>
+          </TableRow>
+        </TableHeader>
+        <TableBody>
+          {experiments.map((experiment) => (
+            <ExperimentsTableRow
+              experiment={experiment}
+              isMetricsPending={isMetricsPending}
+              key={experiment.id}
+              locationSlugsById={locationSlugsById}
+              metricsFor={metricsFor}
+              organizationSlug={organizationSlug}
+              projectSlug={projectSlug}
+            />
+          ))}
+        </TableBody>
+      </Table>
+    </TooltipProvider>
+  );
+}
+
+interface ExperimentsTableRowProps {
+  experiment: typeof RpcExperimentListItem.Type;
+  isMetricsPending: boolean;
+  locationSlugsById: ReadonlyMap<string, string>;
+  metricsFor: (locationSlugs: readonly string[]) => ExperimentMetrics;
+  organizationSlug: string;
+  projectSlug: string;
+}
+
+const formatDate = (value: Date) =>
+  value.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
+
+function ExperimentsTableRow({
+  experiment,
+  isMetricsPending,
+  locationSlugsById,
+  metricsFor,
+  organizationSlug,
+  projectSlug,
+}: ExperimentsTableRowProps) {
+  const navigate = useNavigate();
+  const isArchived = experiment.archivedAt != null;
+  const detailLink = {
+    params: { id: experiment.id, organizationSlug, projectSlug },
+    to: "/studio/$organizationSlug/$projectSlug/experiments/$id",
+  } as const;
+
+  const locationSlugs = experiment.paywallLocationIds
+    .map((id) => locationSlugsById.get(id))
+    .filter((slug): slug is string => slug !== undefined);
+  const metrics = metricsFor(locationSlugs);
+
+  const status = isArchived
+    ? { dotClassName: "bg-muted-foreground/50", label: "Archived" }
+    : {
+        dotClassName:
+          STATUS_PRESENTATION[experiment.status]?.dotClassName ?? "bg-muted-foreground/50",
+        label: experimentStatusLabel(experiment.status),
+      };
+  // A test that hasn't been pointed at a location yet has no traffic to report,
+  // which is different from a test whose locations simply saw none.
+  const hasTargets = locationSlugs.length > 0;
+
+  return (
+    <TableRow
+      className={cn("group/row cursor-pointer", isArchived && "opacity-60")}
+      // The whole row opens the test. The name stays a real link so the row is
+      // still keyboard-reachable and middle-clickable.
+      onClick={(event) => {
+        if ((event.target as HTMLElement).closest("a,button")) {
+          return;
+        }
+        void navigate(detailLink);
+      }}
+    >
+      <TableCell className={PINNED_START}>
+        <div className="max-w-xs">
+          <Link className="block truncate font-medium hover:underline" {...detailLink}>
+            {experiment.name}
+          </Link>
+          {experiment.description ? (
+            <p className="mt-0.5 truncate text-muted-foreground text-xs">
+              {experiment.description}
+            </p>
+          ) : null}
+        </div>
+      </TableCell>
+      <TableCell>
+        <span className="inline-flex items-center gap-2">
+          <span aria-hidden="true" className={cn("size-2 rounded-full", status.dotClassName)} />
+          {status.label}
+        </span>
+      </TableCell>
+      <TableCell className="text-muted-foreground tabular-nums">
+        {experiment.variantCount}
+      </TableCell>
+      <TableCell className="text-muted-foreground tabular-nums">
+        {hasTargets ? locationSlugs.length : "—"}
+      </TableCell>
+
+      {METRIC_COLUMNS.map((column) => (
+        <TableCell className="text-right tabular-nums" key={column.key}>
+          {!(column.value && hasTargets) ? (
+            <span className="text-muted-foreground">—</span>
+          ) : isMetricsPending ? (
+            <Skeleton className="ml-auto h-4 w-10" />
+          ) : (
+            column.value(metrics)
+          )}
+        </TableCell>
+      ))}
+
+      <TableCell className="text-right text-muted-foreground">
+        {experiment.startedAt ? formatDate(experiment.startedAt) : "—"}
+      </TableCell>
+    </TableRow>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/components/shared/experiment-status-badge.tsx b/apps/www/src/features/studio/experiments/components/shared/experiment-status-badge.tsx
deleted file mode 100644
index 8441d3696..000000000
--- a/apps/www/src/features/studio/experiments/components/shared/experiment-status-badge.tsx
+++ /dev/null
@@ -1,14 +0,0 @@
-import { Badge } from "@voidhash/ui";
-
-import { EXPERIMENT_STATUS, experimentStatusLabel } from "../../lib/experiment-status";
-
-const STATUS_VARIANTS: Record<number, "default" | "secondary" | "destructive" | "outline"> = {
-  [EXPERIMENT_STATUS.draft]: "secondary",
-  [EXPERIMENT_STATUS.running]: "default",
-  [EXPERIMENT_STATUS.paused]: "outline",
-  [EXPERIMENT_STATUS.concluded]: "secondary",
-};
-
-export function ExperimentStatusBadge({ status }: { status: number }) {
-  return <Badge variant={STATUS_VARIANTS[status] ?? "secondary"}>{experimentStatusLabel(status)}</Badge>;
-}
diff --git a/apps/www/src/features/studio/experiments/lib/experiment-metrics.ts b/apps/www/src/features/studio/experiments/lib/experiment-metrics.ts
new file mode 100644
index 000000000..8b582edb1
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/lib/experiment-metrics.ts
@@ -0,0 +1,153 @@
+"use client";
+
+import { useQuery } from "@tanstack/react-query";
+import type { CustomAnalyticsInsightQueryType } from "@voidhash/rpc";
+import { customAnalyticsInsightQueryOptions } from "@/features/studio/lib/tanstack-query/analytics";
+import {
+  CONVERSION_WINDOW_SECONDS,
+  PAYWALL_VIEWED_EVENT,
+  PURCHASE_COMPLETED_EVENT,
+  type MetricRange,
+} from "@/features/studio/paywall-locations/lib/paywall-location-metrics";
+
+// A/B tests change what a paywall location serves, so a test's traffic is the
+// traffic at the locations its treatments target. Events carry the location
+// slug in `paywall_location` and nothing that identifies the test, so the index
+// table breaks down by location and sums an experiment's locations together —
+// the same two queries that feed the Paywall Locations table.
+const LOCATION_BREAKDOWN = {
+  field: "event.properties.paywall_location",
+  limit: 100,
+  order: "desc",
+} as const;
+
+export interface ExperimentMetrics {
+  /** Share of viewers who purchased within the conversion window, 0–1. */
+  conversion: number;
+  purchases: number;
+  viewers: number;
+  views: number;
+}
+
+const EMPTY_METRICS: ExperimentMetrics = {
+  conversion: 0,
+  purchases: 0,
+  viewers: 0,
+  views: 0,
+};
+
+const buildBreakdownTotalsDefinition = (range: MetricRange): CustomAnalyticsInsightQueryType => ({
+  breakdown: LOCATION_BREAKDOWN,
+  display: "number",
+  granularity: "day",
+  kind: "trends",
+  series: [
+    {
+      aggregation: "total_events",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      key: "views",
+      label: "Views",
+    },
+    {
+      aggregation: "unique_users",
+      eventNames: [PAYWALL_VIEWED_EVENT],
+      key: "viewers",
+      label: "Unique viewers",
+    },
+    {
+      aggregation: "total_events",
+      eventNames: [PURCHASE_COMPLETED_EVENT],
+      key: "purchases",
+      label: "Purchases",
+    },
+  ],
+  timeRange: { preset: range },
+});
+
+const buildBreakdownFunnelDefinition = (range: MetricRange): CustomAnalyticsInsightQueryType => ({
+  breakdown: LOCATION_BREAKDOWN,
+  breakdownAttributionStep: 1,
+  conversionWindowSeconds: CONVERSION_WINDOW_SECONDS,
+  kind: "funnels",
+  order: "sequential",
+  steps: [
+    { eventNames: [PAYWALL_VIEWED_EVENT], key: "viewed", label: "Viewed paywall" },
+    { eventNames: [PURCHASE_COMPLETED_EVENT], key: "purchased", label: "Purchased" },
+  ],
+  timeRange: { preset: range },
+});
+
+export interface UseExperimentMetricsResult {
+  isPending: boolean;
+  /** Metrics summed across a test's target locations; zeroed when it targets none. */
+  metricsFor: (locationSlugs: readonly string[]) => ExperimentMetrics;
+}
+
+/**
+ * Loads engagement metrics for every A/B test in the project at once. Breakdown
+ * series come back keyed `<seriesKey>:<locationSlug>`, so one response fans out
+ * across the index table's rows.
+ *
+ * Counts are summed across a test's locations; conversion is recomputed from
+ * the summed viewer/converter counts rather than averaged, so a test spanning
+ * locations of very different sizes isn't skewed by the smallest one.
+ */
+export function useExperimentMetrics(options: {
+  projectId: string;
+  range: MetricRange;
+}): UseExperimentMetricsResult {
+  const { projectId, range } = options;
+
+  const totalsQuery = useQuery(
+    customAnalyticsInsightQueryOptions({
+      definition: buildBreakdownTotalsDefinition(range),
+      projectId,
+    }),
+  );
+  const funnelQuery = useQuery(
+    customAnalyticsInsightQueryOptions({
+      definition: buildBreakdownFunnelDefinition(range),
+      projectId,
+    }),
+  );
+
+  const totals = totalsQuery.data?.kind === "trends" ? totalsQuery.data : undefined;
+  const funnel = funnelQuery.data?.kind === "funnels" ? funnelQuery.data : undefined;
+
+  const metricsFor = (locationSlugs: readonly string[]): ExperimentMetrics => {
+    if (locationSlugs.length === 0 || !(totals || funnel)) {
+      return EMPTY_METRICS;
+    }
+
+    const sumFor = (seriesKey: string) =>
+      locationSlugs.reduce(
+        (total, slug) =>
+          total +
+          (totals?.series.find((series) => series.key === `${seriesKey}:${slug}`)?.points[0]
+            ?.value ?? 0),
+        0,
+      );
+
+    const viewers = sumFor("viewers");
+    // The funnel reports a rate per location; multiplying it back out by that
+    // location's viewers recovers converter counts we can add up.
+    const converters = locationSlugs.reduce((total, slug) => {
+      const entry = funnel?.breakdowns?.find((breakdown) => breakdown.breakdownValue === slug);
+      const locationViewers =
+        totals?.series.find((series) => series.key === `viewers:${slug}`)?.points[0]?.value ?? 0;
+      return total + (entry?.totalConversionRate ?? 0) * locationViewers;
+    }, 0);
+
+    return {
+      conversion: viewers > 0 ? converters / viewers : 0,
+      purchases: sumFor("purchases"),
+      viewers,
+      views: sumFor("views"),
+    };
+  };
+
+  return {
+    isPending: totalsQuery.isPending || funnelQuery.isPending,
+    metricsFor,
+  };
+}
diff --git a/apps/www/src/features/studio/lib/tanstack-query/experiments.ts b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
index e88a1dad0..72d3518ae 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
@@ -20,17 +20,11 @@ export const getExperimentOptions = (options: { id: string }) =>
   });
 
 // Mutations
+/** Creates a draft A/B test; everything but the name is authored afterwards. */
 export const createExperimentOptions = () =>
   eq.mutationOptions({
-    mutationFn: (variables: {
-      projectId: string;
-      key: string;
-      name: string;
-      description?: string;
-      hypothesis?: string;
-      primaryMetricEventName: string;
-      secondaryMetricEventNames?: string[];
-    }) => VoidhashRpc.request((rpc) => rpc.CreateExperiment(variables)),
+    mutationFn: (variables: { projectId: string; name: string }) =>
+      VoidhashRpc.request((rpc) => rpc.CreateExperiment(variables)),
     mutationKey: ["createExperiment"],
   });
 
@@ -41,7 +35,7 @@ export const updateExperimentOptions = () =>
       name?: string;
       description?: string | null;
       hypothesis?: string | null;
-      primaryMetricEventName?: string;
+      primaryMetricEventName?: string | null;
       secondaryMetricEventNames?: string[] | null;
     }) => VoidhashRpc.request((rpc) => rpc.UpdateExperiment(variables)),
     mutationKey: ["updateExperiment"],
diff --git a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
index 4b456eee0..efd32fd32 100644
--- a/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
+++ b/apps/www/src/features/studio/shell/components/sidebar/project-sidebar.tsx
@@ -207,7 +207,7 @@ export function ProjectSidebar({
               },
             ],
           },
-          // The Experimentation suite (Feature Flags + A/B Tests) is gated behind
+          // The A/B Testing suite (Feature Flags + A/B Tests) is gated behind
           // the `experimentation` internal feature flag so it can be rolled out
           // to a subset of testers from overwatch before a public launch.
           ...(experimentationEnabled
@@ -221,7 +221,7 @@ export function ProjectSidebar({
                     pathname.startsWith(
                       `/studio/${organizationSlug}/${projectSlug}/experiments`,
                     ),
-                  title: "Experimentation",
+                  title: "A/B Testing",
                   url: `/studio/${organizationSlug}/${projectSlug}/flags`,
                   items: [
                     {
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
index 288e11f7f..108af65b9 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
@@ -39,7 +39,7 @@ export const Route = createFileRoute(
 });
 
 /**
- * Gate the experiment detail page behind the `experimentation` internal feature
+ * Gate the A/B test detail page behind the `experimentation` internal feature
  * flag, matching the A/B Tests list route.
  */
 function ExperimentDetailRoute() {
@@ -59,7 +59,7 @@ function ExperimentDetailPageError() {
     <VoidhashErrorCard
       error={{
         code: "INTERNAL_SERVER_ERROR",
-        message: "An error occurred loading the experiment",
+        message: "An error occurred loading the A/B test",
       }}
     />
   );
@@ -139,14 +139,15 @@ function ExperimentDetailPage() {
                 <h1 className="font-semibold text-3xl tracking-tight">{experiment.name}</h1>
                 <p className="mt-1 text-muted-foreground text-sm">
                   {experiment.description ||
-                    `Measure ${experiment.primaryMetricEventName} across ${experiment.variants.length} variants.`}
+                    (experiment.primaryMetricEventName
+                      ? `Measure ${experiment.primaryMetricEventName} across ${experiment.variants.length} variants.`
+                      : `Compare ${experiment.variants.length} variants against each other.`)}
                 </p>
               </div>
               <ExperimentDetailProperties
                 archivedAt={experiment.archivedAt}
                 createdAt={experiment.createdAt}
                 endedAt={experiment.endedAt}
-                keyValue={experiment.key}
                 primaryMetricEventName={experiment.primaryMetricEventName}
                 startedAt={experiment.startedAt}
                 status={experiment.status}
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
index a9cbcac6e..97f325215 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.index.tsx
@@ -8,11 +8,6 @@ import {
   PageBar,
   PageHeader,
   PageHeaderTitle,
-  Table,
-  TableBody,
-  TableHead,
-  TableHeader,
-  TableRow,
   ToggleGroup,
   ToggleGroupItem,
 } from "@voidhash/ui";
@@ -20,13 +15,22 @@ import { z } from "zod";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { CreateExperimentButton } from "@/features/studio/experiments/components/experiments-page/create-experiment-button";
-import { ExperimentRecord } from "@/features/studio/experiments/components/experiments-page/experiment-record";
 import { ExperimentsPageEmptyState } from "@/features/studio/experiments/components/experiments-page/experiments-page-empty-state";
 import { ExperimentsPageSkeleton } from "@/features/studio/experiments/components/experiments-page/experiments-page-skeleton";
+import { ExperimentsTable } from "@/features/studio/experiments/components/experiments-page/experiments-table";
+import { useExperimentMetrics } from "@/features/studio/experiments/lib/experiment-metrics";
 import { EXPERIMENT_STATUS } from "@/features/studio/experiments/lib/experiment-status";
-import { listExperimentsOptions } from "@/features/studio/lib/tanstack-query";
+import {
+  listExperimentsOptions,
+  listPaywallLocationsOptions,
+} from "@/features/studio/lib/tanstack-query";
 import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
 import { CurrentUser } from "@/features/studio/lib/utils/current-user";
+import {
+  isMetricRange,
+  METRIC_RANGE_OPTIONS,
+  type MetricRange,
+} from "@/features/studio/paywall-locations/lib/paywall-location-metrics";
 import { VoidhashErrorCard } from "@/features/studio/shell/components/voidhash-error-card";
 
 const EXPERIMENT_TABS = [
@@ -41,11 +45,19 @@ const EXPERIMENT_TABS = [
 type ExperimentTab = (typeof EXPERIMENT_TABS)[number]["value"];
 
 const DEFAULT_EXPERIMENT_TAB: ExperimentTab = "all";
+const DEFAULT_METRIC_RANGE: MetricRange = "last_30d";
 
 const isExperimentTab = (value: string): value is ExperimentTab =>
   EXPERIMENT_TABS.some((item) => item.value === value);
 
+// Both filters live in the URL so a view can be linked, bookmarked and survive
+// a reload. `.catch` keeps stale or hand-edited params from failing validation
+// and dropping the page into its error boundary.
 const experimentsSearchSchema = z.object({
+  range: z
+    .enum(METRIC_RANGE_OPTIONS.map((option) => option.value))
+    .default(DEFAULT_METRIC_RANGE)
+    .catch(DEFAULT_METRIC_RANGE),
   tab: z
     .enum(EXPERIMENT_TABS.map((item) => item.value))
     .default(DEFAULT_EXPERIMENT_TAB)
@@ -101,11 +113,31 @@ function ExperimentsIndexPage() {
     throw new Error("Project not found");
   }
 
-  const { tab } = Route.useSearch();
+  const { range, tab } = Route.useSearch();
   const navigate = Route.useNavigate();
+  // Filter changes replace the current entry so browsing tabs doesn't bury the
+  // page the user arrived from under a stack of history entries.
+  const changeSearch = (next: Partial<{ range: MetricRange; tab: ExperimentTab }>) => {
+    void navigate({ replace: true, search: (prev) => ({ ...prev, ...next }) });
+  };
+
+  // Archived tests come down with the rest so tab switches are a client-side
+  // filter — no refetch (and no skeleton flash) when changing tabs.
   const { data: allExperiments } = useSuspenseQuery(
     listExperimentsOptions({ includeArchived: true, projectId: project.id }),
   );
+  // Treatments name locations by id, but analytics events carry their slug, so
+  // the table needs the mapping to scope a test's metrics. Archived locations
+  // are included because a concluded test can still reference one.
+  const { data: locations } = useSuspenseQuery(
+    listPaywallLocationsOptions({ includeArchived: true, projectId: project.id }),
+  );
+  const { isPending: isMetricsPending, metricsFor } = useExperimentMetrics({
+    projectId: project.id,
+    range,
+  });
+
+  const locationSlugsById = new Map(locations.map((location) => [location.id, location.slug]));
 
   const experiments = allExperiments.filter((experiment) => {
     const isArchived = experiment.archivedAt != null;
@@ -132,18 +164,45 @@ function ExperimentsIndexPage() {
   const isEmpty = experiments.length === 0;
 
   return (
+    // The empty state stretches to fill the inset so it can center vertically;
+    // the populated table keeps the default top-aligned block flow.
     <Page className={cn(isEmpty && "flex flex-col")}>
       <PageHeader
         className="shrink-0"
-        rightActions={<CreateExperimentButton projectId={project.id} />}
+        rightActions={
+          <CreateExperimentButton
+            organizationSlug={organizationSlug as string}
+            projectId={project.id}
+            projectSlug={projectSlug as string}
+          />
+        }
       >
         <PageHeaderTitle>A/B Tests</PageHeaderTitle>
       </PageHeader>
-      <PageBar className="shrink-0 pl-2">
+      <PageBar
+        className="shrink-0 pl-2"
+        rightActions={
+          <ToggleGroup
+            onValueChange={(value: string) => {
+              if (isMetricRange(value)) {
+                changeSearch({ range: value });
+              }
+            }}
+            type="single"
+            value={range}
+          >
+            {METRIC_RANGE_OPTIONS.map((option) => (
+              <ToggleGroupItem className="cursor-pointer" key={option.value} value={option.value}>
+                {option.label}
+              </ToggleGroupItem>
+            ))}
+          </ToggleGroup>
+        }
+      >
         <ToggleGroup
           onValueChange={(value: string) => {
             if (isExperimentTab(value)) {
-              void navigate({ replace: true, search: (prev) => ({ ...prev, tab: value }) });
+              changeSearch({ tab: value });
             }
           }}
           type="single"
@@ -158,30 +217,21 @@ function ExperimentsIndexPage() {
       </PageBar>
       <div className={cn("w-full px-4 pt-4", isEmpty && "flex flex-1 flex-col pb-4")}>
         {isEmpty ? (
-          <ExperimentsPageEmptyState projectId={project.id} tab={tab} />
+          <ExperimentsPageEmptyState
+            organizationSlug={organizationSlug as string}
+            projectId={project.id}
+            projectSlug={projectSlug as string}
+            tab={tab}
+          />
         ) : (
-          <Table containerClassName="overflow-x-auto">
-            <TableHeader>
-              <TableRow>
-                <TableHead>A/B test</TableHead>
-                <TableHead>Key</TableHead>
-                <TableHead>Primary metric</TableHead>
-                <TableHead>Variants</TableHead>
-                <TableHead>Status</TableHead>
-                <TableHead className="text-right">Updated</TableHead>
-              </TableRow>
-            </TableHeader>
-            <TableBody>
-              {experiments.map((experiment) => (
-                <ExperimentRecord
-                  experiment={experiment}
-                  key={experiment.id}
-                  organizationSlug={organizationSlug as string}
-                  projectSlug={projectSlug as string}
-                />
-              ))}
-            </TableBody>
-          </Table>
+          <ExperimentsTable
+            experiments={experiments}
+            isMetricsPending={isMetricsPending}
+            locationSlugsById={locationSlugsById}
+            metricsFor={metricsFor}
+            organizationSlug={organizationSlug as string}
+            projectSlug={projectSlug as string}
+          />
         )}
       </div>
     </Page>
diff --git a/packages/core/src/domain/experiment/Experiment.ts b/packages/core/src/domain/experiment/Experiment.ts
index 7b3dd96a6..b43a0cc3f 100644
--- a/packages/core/src/domain/experiment/Experiment.ts
+++ b/packages/core/src/domain/experiment/Experiment.ts
@@ -12,11 +12,6 @@ export class ExperimentNotFoundError extends Schema.TaggedErrorClass<ExperimentN
   "ExperimentNotFoundError",
 )("ExperimentNotFoundError", { experimentId: Schema.String }) {}
 
-/** Experiment key uniqueness invariant violated within a project. */
-export class ExperimentKeyAlreadyExistsError extends Schema.TaggedErrorClass<ExperimentKeyAlreadyExistsError>(
-  "ExperimentKeyAlreadyExistsError",
-)("ExperimentKeyAlreadyExistsError", { key: Schema.String }) {}
-
 /** Experiment variant row not found. */
 export class ExperimentVariantNotFoundError extends Schema.TaggedErrorClass<ExperimentVariantNotFoundError>(
   "ExperimentVariantNotFoundError",
diff --git a/packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts b/packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts
index 9139450c0..cc374435c 100644
--- a/packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts
+++ b/packages/core/src/domain/internalAnalytics/InternalAnalyticsEvents.ts
@@ -469,7 +469,7 @@ export const ExperimentExposedSchema = Schema.Struct({
   personId: Schema.NullOr(Schema.String),
   projectId: Schema.String,
   properties: Schema.Struct({
-    experimentKey: Schema.String,
+    experimentId: Schema.String,
     variantKey: Schema.String,
   }),
   token: Schema.String,
diff --git a/packages/core/src/services/analytics/AnalyticsService.ts b/packages/core/src/services/analytics/AnalyticsService.ts
index 816163e6b..877cf05ed 100644
--- a/packages/core/src/services/analytics/AnalyticsService.ts
+++ b/packages/core/src/services/analytics/AnalyticsService.ts
@@ -43,6 +43,13 @@ import {
 import { buildSeriesResolver } from "./series-resolver.ts";
 
 const DEFAULT_LIMIT = 100;
+
+/**
+ * Conversion event assumed for an experiment that has not picked a primary
+ * metric — the conventional purchase event the paywall SDK bridge emits, which
+ * is the metric virtually every paywall test is measuring anyway.
+ */
+const DEFAULT_PRIMARY_METRIC_EVENT_NAME = "purchase_completed";
 const MAX_LIMIT = 500;
 
 /**
@@ -347,7 +354,8 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()("Analy
      * metric fired after first exposure), conversion rate, and post-exposure
      * revenue. Delegates the ClickHouse funnel to the accessor
      * ({@link getExperimentResultsQuery}); resolves the experiment's project +
-     * organization (for the row policy) and its metric names here. Reads
+     * organization (for the row policy) and its metric names here, falling back
+     * to {@link DEFAULT_PRIMARY_METRIC_EVENT_NAME} when none was chosen. Reads
      * server-emitted `$experiment.exposed` events — returns zeroed variants until
      * exposure emission is live.
      */
@@ -392,8 +400,10 @@ export class AnalyticsService extends Context.Service<AnalyticsService>()("Analy
         const rows = yield* getExperimentResultsQuery({
           organizationId: project.organizationId,
           projectId: experiment.projectId,
-          experimentKey: experiment.key,
-          primaryMetricEventNames: [experiment.primaryMetricEventName],
+          experimentId: experiment.id,
+          primaryMetricEventNames: [
+            experiment.primaryMetricEventName ?? DEFAULT_PRIMARY_METRIC_EVENT_NAME,
+          ],
           revenueEventNames: [...RESERVED_REVENUE_EVENT_NAMES],
           startDate,
           endDate,
diff --git a/packages/core/src/services/analytics/clickhouse-accessor.ts b/packages/core/src/services/analytics/clickhouse-accessor.ts
index b50d46df9..6d61d511f 100644
--- a/packages/core/src/services/analytics/clickhouse-accessor.ts
+++ b/packages/core/src/services/analytics/clickhouse-accessor.ts
@@ -1615,7 +1615,7 @@ export interface ExperimentVariantResultRow {
 export const getExperimentResults = (input: {
   readonly organizationId: string;
   readonly projectId: string;
-  readonly experimentKey: string;
+  readonly experimentId: string;
   readonly primaryMetricEventNames: readonly string[];
   readonly revenueEventNames: readonly string[];
   readonly startDate: Date;
@@ -1637,7 +1637,7 @@ export const getExperimentResults = (input: {
           AND event_ts >= ${ch.param("DateTime", startTs)}
           AND event_ts <= ${ch.param("DateTime", endTs)}
           AND event_name = ${ch.param("String", "$experiment.exposed")}
-          AND JSONExtractString(event_properties, 'experimentKey') = ${ch.param("String", input.experimentKey)}`,
+          AND JSONExtractString(event_properties, 'experimentId') = ${ch.param("String", input.experimentId)}`,
     );
     const conversionsFrom = resolvedEventsFrom(
       ch,
diff --git a/packages/core/src/services/experiments/ExperimentService.ts b/packages/core/src/services/experiments/ExperimentService.ts
index ce208bb9e..9756c67a2 100644
--- a/packages/core/src/services/experiments/ExperimentService.ts
+++ b/packages/core/src/services/experiments/ExperimentService.ts
@@ -25,7 +25,6 @@ import {
 
 import { AuthSession } from "../../domain/auth/Auth.ts";
 import {
-  ExperimentKeyAlreadyExistsError,
   ExperimentNotFoundError,
   ExperimentTreatmentNotFoundError,
   ExperimentValidationError,
@@ -176,19 +175,15 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
       return [...ids];
     };
 
+    /**
+     * Create a draft experiment. Deliberately takes nothing but a name: a draft
+     * assigns no traffic, so variants, treatments and the metric definition are
+     * all authored afterwards on the detail page.
+     */
     const createExperiment = Effect.fn("createExperiment")(
-      function* (input: {
-        readonly projectId: string;
-        readonly key: string;
-        readonly name: string;
-        readonly description?: string;
-        readonly hypothesis?: string;
-        readonly primaryMetricEventName: string;
-        readonly secondaryMetricEventNames?: ReadonlyArray<string>;
-      }) {
+      function* (input: { readonly projectId: string; readonly name: string }) {
         const session = yield* AuthSession;
         yield* Effect.annotateCurrentSpan("voidhash.project.id", input.projectId);
-        yield* Effect.annotateCurrentSpan("voidhash.experiment.key", input.key);
 
         yield* checkProjectPermission(
           input.projectId,
@@ -196,13 +191,6 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
           `User ${session?.user?.id} is not authorized to create experiments for project ${input.projectId}`,
         );
 
-        const existing = yield* db.query.experiments.findFirst({
-          where: { key: input.key, projectId: input.projectId, archivedAt: { isNull: true } },
-        });
-        if (existing) {
-          return yield* Effect.fail(new ExperimentKeyAlreadyExistsError({ key: input.key }));
-        }
-
         const experimentId = generateId("experiment");
         yield* Effect.annotateCurrentSpan("voidhash.experiment.id", experimentId);
 
@@ -212,7 +200,7 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
           .createInternalFlag({
             projectId: input.projectId,
             key: `__exp_${experimentId}`,
-            name: `Experiment: ${input.name}`,
+            name: `A/B Test: ${input.name}`,
             ownerType: EXPERIMENT_FLAG_OWNER_TYPE,
             ownerId: experimentId,
           })
@@ -222,15 +210,12 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
           id: experimentId,
           projectId: input.projectId,
           featureFlagId,
-          key: input.key,
           name: input.name,
-          description: input.description ?? null,
-          hypothesis: input.hypothesis ?? null,
+          description: null,
+          hypothesis: null,
           status: ExperimentStatus.draft,
-          primaryMetricEventName: input.primaryMetricEventName,
-          secondaryMetricEventNames: input.secondaryMetricEventNames
-            ? [...input.secondaryMetricEventNames]
-            : null,
+          primaryMetricEventName: null,
+          secondaryMetricEventNames: null,
           createdByUserId: session?.user?.id ?? null,
           updatedByUserId: session?.user?.id ?? null,
           version: 1,
@@ -298,6 +283,11 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
       (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
     );
 
+    /**
+     * List a project's experiments with the two facts the index table needs
+     * beyond the scalars: how many arms each has, and which paywall locations
+     * it targets (which is what scopes its engagement metrics).
+     */
     const listExperiments = Effect.fn("listExperiments")(
       function* (input: { readonly projectId: string; readonly includeArchived?: boolean }) {
         yield* checkProjectPermission(
@@ -310,11 +300,18 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
             projectId: input.projectId,
             ...(input.includeArchived ? {} : { archivedAt: { isNull: true } }),
           },
-          with: { variants: { where: { archivedAt: { isNull: true } } } },
+          with: {
+            treatments: { where: { archivedAt: { isNull: true } } },
+            variants: { where: { archivedAt: { isNull: true } } },
+          },
         });
         return rows.map((r) => {
-          const { variants, ...rest } = r;
-          return { ...rest, variantCount: variants.length };
+          const { treatments, variants, ...rest } = r;
+          return {
+            ...rest,
+            paywallLocationIds: targetLocationIds(treatments),
+            variantCount: variants.length,
+          };
         });
       },
       (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
@@ -326,7 +323,7 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
         readonly name?: string;
         readonly description?: string | null;
         readonly hypothesis?: string | null;
-        readonly primaryMetricEventName?: string;
+        readonly primaryMetricEventName?: string | null;
         readonly secondaryMetricEventNames?: ReadonlyArray<string> | null;
       }) {
         const session = yield* AuthSession;
@@ -943,7 +940,6 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
       function* (input: {
         readonly projectId: string;
         readonly experimentId?: string;
-        readonly experimentKey?: string;
         readonly featureFlagId?: string;
         readonly personId?: string;
         readonly distinctId?: string;
@@ -953,7 +949,6 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
             projectId: input.projectId,
             archivedAt: { isNull: true },
             ...(input.experimentId ? { id: input.experimentId } : {}),
-            ...(input.experimentKey ? { key: input.experimentKey } : {}),
             ...(input.featureFlagId ? { featureFlagId: input.featureFlagId } : {}),
           },
           with: {
@@ -984,7 +979,6 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
         const result = results[0];
         return {
           experimentId: experiment.id,
-          experimentKey: experiment.key,
           assigned: result?.enabled ?? false,
           variantKey: result?.variantKey ?? null,
           payload: result?.payload ?? null,
diff --git a/packages/core/src/services/paywallLocations/PaywallLocationService.ts b/packages/core/src/services/paywallLocations/PaywallLocationService.ts
index 1ad9fa89a..f97493701 100644
--- a/packages/core/src/services/paywallLocations/PaywallLocationService.ts
+++ b/packages/core/src/services/paywallLocations/PaywallLocationService.ts
@@ -717,7 +717,6 @@ export class PaywallLocationService extends Context.Service<PaywallLocationServi
               releaseId && enrolled
                 ? {
                     experimentId: assignment.experimentId,
-                    experimentKey: assignment.experimentKey,
                     variantKey: assignment.variantKey as string,
                     personId: input.personId ?? null,
                     distinctId: input.distinctId ?? null,
diff --git a/packages/core/src/services/paywallLocations/helpers.ts b/packages/core/src/services/paywallLocations/helpers.ts
index 4087a824e..5a82c713d 100644
--- a/packages/core/src/services/paywallLocations/helpers.ts
+++ b/packages/core/src/services/paywallLocations/helpers.ts
@@ -109,7 +109,6 @@ export interface ResolvedLocationShowingForSdk {
  */
 export interface ExperimentExposureContext {
   readonly experimentId: string;
-  readonly experimentKey: string;
   readonly variantKey: string;
   readonly personId: string | null;
   readonly distinctId: string | null;
diff --git a/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts b/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
index e185f04d3..b55841e7b 100644
--- a/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
+++ b/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
@@ -22,7 +22,7 @@ const suffix = `${Date.now()}-${crypto.randomUUID()}`;
 const experimentId = `it_experiment_auth_${suffix}`;
 const controlId = `it_experiment_variant_control_${suffix}`;
 const treatmentId = `it_experiment_treatment_${suffix}`;
-const unauthorizedCreateKey = `it-experiment-create-forbidden-${suffix}`;
+const unauthorizedCreateName = `it experiment create forbidden ${suffix}`;
 
 const sessionWithoutProjectAccess = (): UserSession => ({
   cookie: null,
@@ -56,7 +56,6 @@ test(
     yield* db.insert(experiments).values({
       featureFlagId: `it_feature_flag_auth_${suffix}`,
       id: experimentId,
-      key: `it-experiment-auth-${suffix}`,
       name: "Original experiment",
       primaryMetricEventName: "purchase",
       projectId: CoreTestFixture.projectId,
@@ -101,9 +100,7 @@ test(
 
     yield* expectForbidden(
       service.createExperiment({
-        key: unauthorizedCreateKey,
-        name: "Forbidden create",
-        primaryMetricEventName: "purchase",
+        name: unauthorizedCreateName,
         projectId: CoreTestFixture.projectId,
       }),
     );
@@ -141,7 +138,7 @@ test(
       where: { id: treatmentId },
     });
     const forbiddenCreate = yield* db.query.experiments.findFirst({
-      where: { key: unauthorizedCreateKey, projectId: CoreTestFixture.projectId },
+      where: { name: unauthorizedCreateName, projectId: CoreTestFixture.projectId },
     });
     expect(experiment).toMatchObject({
       archivedAt: null,
diff --git a/packages/db/src/alchemy-migrations/20260724150000_drop_experiment_key/migration.sql b/packages/db/src/alchemy-migrations/20260724150000_drop_experiment_key/migration.sql
new file mode 100644
index 000000000..36b5ffc27
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260724150000_drop_experiment_key/migration.sql
@@ -0,0 +1,8 @@
+-- Experiments ("A/B tests") are identified by their id alone; the
+-- customer-authored key never fed a lookup and blocked name-only creation.
+DROP INDEX IF EXISTS "experiment_key_project_id_idx";
+
+ALTER TABLE "experiment" DROP COLUMN IF EXISTS "key";
+
+-- A draft has no primary metric until one is picked on the detail page.
+ALTER TABLE "experiment" ALTER COLUMN "primary_metric_event_name" DROP NOT NULL;
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index fe7bfc603..4a98627cf 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -2507,12 +2507,17 @@ export const ExperimentStatus = {
 export type ExperimentStatusValue = (typeof ExperimentStatus)[keyof typeof ExperimentStatus];
 
 /**
- * An experiment is an authoring + analysis layer that compiles down to a
- * backing customer feature flag (the runtime assignment artifact). The backing
- * flag is linked both ways: `experiment.featureFlagId` here, and, on the flag,
- * `feature_flag.ownerType='experiment'` / `ownerId=<experimentId>` /
- * `internal=true` (which hides it from the customer Feature Flags list and
- * blocks direct customer edits).
+ * An experiment ("A/B test" in the UI) is an authoring + analysis layer that
+ * compiles down to a backing customer feature flag (the runtime assignment
+ * artifact). The backing flag is linked both ways: `experiment.featureFlagId`
+ * here, and, on the flag, `feature_flag.ownerType='experiment'` /
+ * `ownerId=<experimentId>` / `internal=true` (which hides it from the customer
+ * Feature Flags list and blocks direct customer edits).
+ *
+ * An experiment is identified only by its (globally unique) `id` — there is no
+ * customer-authored key. Everything that used to join on one (the backing flag
+ * key, exposure events) is keyed by `id` instead, which is what lets creation
+ * ask for nothing but a name.
  */
 export const experiments = pgTable(
   "experiment",
@@ -2520,12 +2525,12 @@ export const experiments = pgTable(
     id: varchar("id", { length: 255 }).primaryKey(),
     projectId: varchar("project_id", { length: 255 }).notNull(),
     featureFlagId: varchar("feature_flag_id", { length: 255 }).notNull(),
-    key: varchar("key", { length: 255 }).notNull(),
     name: varchar("name", { length: 255 }).notNull(),
     description: varchar("description", { length: 1000 }),
     hypothesis: varchar("hypothesis", { length: 2000 }),
     status: smallint("status").notNull().default(ExperimentStatus.draft),
-    primaryMetricEventName: varchar("primary_metric_event_name", { length: 255 }).notNull(),
+    // Chosen after creation, on the detail page — a draft has no metric yet.
+    primaryMetricEventName: varchar("primary_metric_event_name", { length: 255 }),
     secondaryMetricEventNames: jsonb("secondary_metric_event_names").$type<string[]>(),
     startedAt: timestamp("started_at", { withTimezone: true, precision: 3 }),
     endedAt: timestamp("ended_at", { withTimezone: true, precision: 3 }),
@@ -2540,7 +2545,6 @@ export const experiments = pgTable(
     version: integer("version").notNull().default(1),
   },
   (table) => [
-    uniqueIndex("experiment_key_project_id_idx").on(table.key, table.projectId),
     // 1:1 backing flag.
     uniqueIndex("experiment_feature_flag_id_idx").on(table.featureFlagId),
     index("experiment_project_id_idx").on(table.projectId),
diff --git a/packages/rpc/src/errors/Experiment.ts b/packages/rpc/src/errors/Experiment.ts
index 160fa2d85..b6f0fc20e 100644
--- a/packages/rpc/src/errors/Experiment.ts
+++ b/packages/rpc/src/errors/Experiment.ts
@@ -1,8 +1,8 @@
 /**
  * Experiment (A/B testing) errors — typed errors returned by experiment RPCs
- * (experiment / variant / treatment not found, key conflicts, domain-invariant
- * violations) plus the catch-all service error. Class names and `_tag` values
- * are namespaced with `Rpc` / `Rpc/`.
+ * (experiment / variant / treatment not found, domain-invariant violations)
+ * plus the catch-all service error. Class names and `_tag` values are
+ * namespaced with `Rpc` / `Rpc/`.
  */
 import { Schema } from "effect";
 
@@ -11,11 +11,6 @@ export class RpcExperimentNotFoundError extends Schema.TaggedErrorClass<RpcExper
   "RpcExperimentNotFoundError",
 )("Rpc/ExperimentNotFoundError", { message: Schema.String }) {}
 
-/** Experiment key uniqueness invariant violated within a project. */
-export class RpcExperimentKeyAlreadyExistsError extends Schema.TaggedErrorClass<RpcExperimentKeyAlreadyExistsError>(
-  "RpcExperimentKeyAlreadyExistsError",
-)("Rpc/ExperimentKeyAlreadyExistsError", { key: Schema.String }) {}
-
 /** Experiment variant row not found. */
 export class RpcExperimentVariantNotFoundError extends Schema.TaggedErrorClass<RpcExperimentVariantNotFoundError>(
   "RpcExperimentVariantNotFoundError",
diff --git a/packages/rpc/src/groups/ExperimentRpcsDef.ts b/packages/rpc/src/groups/ExperimentRpcsDef.ts
index 22db532d6..f8553d067 100644
--- a/packages/rpc/src/groups/ExperimentRpcsDef.ts
+++ b/packages/rpc/src/groups/ExperimentRpcsDef.ts
@@ -3,7 +3,6 @@ import { Schema } from "effect";
 
 import { RpcActionForbiddenError } from "../errors/common.ts";
 import {
-  RpcExperimentKeyAlreadyExistsError,
   RpcExperimentNotFoundError,
   RpcExperimentServiceError,
   RpcExperimentTreatmentNotFoundError,
@@ -52,9 +51,8 @@ const experimentScalarFields = {
   featureFlagId: Schema.String,
   hypothesis: Schema.NullOr(Schema.String),
   id: Schema.String,
-  key: Schema.String,
   name: Schema.String,
-  primaryMetricEventName: Schema.String,
+  primaryMetricEventName: Schema.NullOr(Schema.String),
   projectId: Schema.String,
   secondaryMetricEventNames: Schema.NullOr(Schema.Array(Schema.String)),
   startedAt: Schema.NullOr(Schema.Date),
@@ -74,6 +72,12 @@ export const RpcExperiment = Schema.Struct({
 
 export const RpcExperimentListItem = Schema.Struct({
   ...experimentScalarFields,
+  /**
+   * Distinct paywall locations targeted by any of the test's treatments. The
+   * index table scopes its engagement metrics to these, since that is the
+   * traffic the test actually splits.
+   */
+  paywallLocationIds: Schema.Array(Schema.String),
   variantCount: Schema.Number,
 });
 
@@ -124,20 +128,13 @@ export class ExperimentRpcsDef extends RpcGroup.make(
     payload: { id: Schema.String },
     success: RpcExperiment,
   }),
+  // Creation asks for a name and nothing else: the test lands in `draft`, and
+  // variants, treatments and metrics are all authored on the detail page.
   Rpc.make("CreateExperiment", {
-    error: Schema.Union([
-      RpcExperimentServiceError,
-      RpcExperimentKeyAlreadyExistsError,
-      RpcActionForbiddenError,
-    ]),
+    error: commonError,
     payload: {
-      description: Schema.optional(Schema.String),
-      hypothesis: Schema.optional(Schema.String),
-      key: Schema.String,
       name: Schema.String,
-      primaryMetricEventName: Schema.String,
       projectId: Schema.String,
-      secondaryMetricEventNames: Schema.optional(Schema.Array(Schema.String)),
     },
     success: Schema.Struct({ id: Schema.String }),
   }),
@@ -153,7 +150,7 @@ export class ExperimentRpcsDef extends RpcGroup.make(
       hypothesis: Schema.optional(Schema.NullOr(Schema.String)),
       id: Schema.String,
       name: Schema.optional(Schema.String),
-      primaryMetricEventName: Schema.optional(Schema.String),
+      primaryMetricEventName: Schema.optional(Schema.NullOr(Schema.String)),
       secondaryMetricEventNames: Schema.optional(Schema.NullOr(Schema.Array(Schema.String))),
     },
     success: RpcExperiment,
diff --git a/packages/rpc/src/internalFeatureFlags.ts b/packages/rpc/src/internalFeatureFlags.ts
index ef3a35ca7..4c44a0b10 100644
--- a/packages/rpc/src/internalFeatureFlags.ts
+++ b/packages/rpc/src/internalFeatureFlags.ts
@@ -60,9 +60,9 @@ export const INTERNAL_FEATURE_FLAGS = {
   },
   experimentation: {
     key: "experimentation",
-    name: "Experimentation",
+    name: "A/B Testing",
     description:
-      "The Experimentation suite in the studio sidebar: the Feature Flags product and A/B Tests.",
+      "The A/B Testing suite in the studio sidebar: the Feature Flags product and A/B Tests.",
     defaultEnabled: false,
   },
   voidhashAiPi: {

From 40ab79737fa1da64f0c30bb19f53d5600c7eddbe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 26 Jul 2026 16:14:19 +0200
Subject: [PATCH 120/129] feat: a/b test redesign

---
 apps/backend/src/rpcs/experiment-rpcs.ts      |  52 +-
 apps/backend/src/testing/rpc-smoke-cases.ts   |   5 +-
 .../experiment-detail-action-bar.tsx          |  45 ++
 .../experiment-detail-header.tsx              | 167 ++++++
 .../experiment-detail-properties.tsx          | 237 ++++++--
 .../experiment-draft-context.tsx              | 505 ++++++++++++++++
 .../experiment-lifecycle-controls.tsx         |   2 +-
 .../experiment-matrix.tsx                     | 557 ++++++++++++++++++
 .../experiment-settings-form.tsx              | 164 ------
 .../experiment-setup-panel.tsx                | 294 ---------
 .../experiment-treatments-panel.tsx           | 312 ----------
 .../flag-detail-action-bar.tsx                |  13 +-
 .../studio/lib/tanstack-query/experiments.ts  |  45 +-
 .../$projectSlug/experiments.$id.tsx          | 195 +++---
 .../core/src/domain/experiment/Experiment.ts  |   5 -
 .../services/experiments/ExperimentService.ts | 427 ++++++--------
 .../PaywallLocationService.ts                 |  46 +-
 ...tService.authorization.integration.test.ts |  39 +-
 .../migration.sql                             |   5 +
 packages/db/src/schema.ts                     |  20 +-
 packages/rpc/src/errors/Experiment.ts         |   5 -
 packages/rpc/src/experimentTreatmentTypes.ts  |  25 +-
 packages/rpc/src/groups/ExperimentRpcsDef.ts  |  64 +-
 23 files changed, 1852 insertions(+), 1377 deletions(-)
 create mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-action-bar.tsx
 create mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-header.tsx
 create mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-draft-context.tsx
 create mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-matrix.tsx
 delete mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
 delete mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
 delete mode 100644 apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel.tsx
 create mode 100644 packages/db/src/alchemy-migrations/20260724180000_drop_experiment_variant_key/migration.sql

diff --git a/apps/backend/src/rpcs/experiment-rpcs.ts b/apps/backend/src/rpcs/experiment-rpcs.ts
index 3c00bde9d..9b46c2253 100644
--- a/apps/backend/src/rpcs/experiment-rpcs.ts
+++ b/apps/backend/src/rpcs/experiment-rpcs.ts
@@ -9,7 +9,6 @@ import {
   RpcActionForbiddenError,
   RpcExperimentNotFoundError,
   RpcExperimentServiceError,
-  RpcExperimentTreatmentNotFoundError,
   RpcExperimentValidationError,
   RpcExperimentVariantNotFoundError,
 } from "@voidhash/rpc";
@@ -41,7 +40,6 @@ const toRpcExperiment = (e: {
     readonly experimentId: string;
     readonly id: string;
     readonly isControl: boolean;
-    readonly key: string;
     readonly name: string;
     readonly updatedAt: Date | null;
     readonly weightBps: number;
@@ -113,12 +111,6 @@ export const ExperimentRpcsLive = ExperimentRpcsDef.toLayer(
       Effect.fail(
         new RpcExperimentVariantNotFoundError({ message: `Variant not found: ${error.variantId}` }),
       );
-    const treatmentNotFound = (error: { readonly treatmentId: string }) =>
-      Effect.fail(
-        new RpcExperimentTreatmentNotFoundError({
-          message: `Treatment not found: ${error.treatmentId}`,
-        }),
-      );
 
     return {
       ArchiveExperiment: (input) =>
@@ -178,25 +170,6 @@ export const ExperimentRpcsLive = ExperimentRpcsDef.toLayer(
             ExperimentValidationError: validation,
           }),
         ),
-      RemoveExperimentTreatment: (input) =>
-        service.removeTreatment(input).pipe(
-          Effect.catchTags({
-            ActionForbiddenError: forbidden,
-            ExperimentNotFoundError: notFound,
-            ExperimentServiceError: serviceError,
-            ExperimentTreatmentNotFoundError: treatmentNotFound,
-            ExperimentValidationError: validation,
-          }),
-        ),
-      ReplaceExperimentVariants: (input) =>
-        service.replaceVariants({ ...input, variants: [...input.variants] }).pipe(
-          Effect.catchTags({
-            ActionForbiddenError: forbidden,
-            ExperimentNotFoundError: notFound,
-            ExperimentServiceError: serviceError,
-            ExperimentValidationError: validation,
-          }),
-        ),
       RestoreExperiment: (input) =>
         service.restoreExperiment(input).pipe(
           Effect.catchTags({
@@ -214,28 +187,9 @@ export const ExperimentRpcsLive = ExperimentRpcsDef.toLayer(
             ExperimentValidationError: validation,
           }),
         ),
-      UpdateExperiment: (input) =>
-        service
-          .updateExperiment({
-            ...input,
-            secondaryMetricEventNames:
-              input.secondaryMetricEventNames === undefined
-                ? undefined
-                : input.secondaryMetricEventNames
-                  ? [...input.secondaryMetricEventNames]
-                  : null,
-          })
-          .pipe(
-            Effect.map(toRpcExperiment),
-            Effect.catchTags({
-              ActionForbiddenError: forbidden,
-              ExperimentNotFoundError: notFound,
-              ExperimentServiceError: serviceError,
-              ExperimentValidationError: validation,
-            }),
-          ),
-      UpsertExperimentTreatment: (input) =>
-        service.upsertTreatment(input).pipe(
+      SaveExperimentSetup: (input) =>
+        service.saveSetup(input).pipe(
+          Effect.map(toRpcExperiment),
           Effect.catchTags({
             ActionForbiddenError: forbidden,
             ExperimentNotFoundError: notFound,
diff --git a/apps/backend/src/testing/rpc-smoke-cases.ts b/apps/backend/src/testing/rpc-smoke-cases.ts
index bf4bf2637..238b24146 100644
--- a/apps/backend/src/testing/rpc-smoke-cases.ts
+++ b/apps/backend/src/testing/rpc-smoke-cases.ts
@@ -784,10 +784,7 @@ const knownMissingRpcSmokeTags = new Set([
   "ListExperiments",
   "GetExperiment",
   "CreateExperiment",
-  "UpdateExperiment",
-  "ReplaceExperimentVariants",
-  "UpsertExperimentTreatment",
-  "RemoveExperimentTreatment",
+  "SaveExperimentSetup",
   "StartExperiment",
   "PauseExperiment",
   "ConcludeExperiment",
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-action-bar.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-action-bar.tsx
new file mode 100644
index 000000000..5b041a605
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-action-bar.tsx
@@ -0,0 +1,45 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+
+import { useExperimentDraft } from "./experiment-draft-context";
+
+/**
+ * Floating bar pinned to the bottom of the A/B-test detail screen. Nothing on
+ * the screen writes to the server until Save Changes is pressed here.
+ *
+ * `mt-auto` parks it at the bottom of the page's flex column when the content
+ * is short, so it never floats mid-screen. The wrapper is transparent and
+ * click-through — only the pill itself takes pointer events — so the content
+ * scrolling underneath stays visible instead of being masked by a band.
+ */
+export function ExperimentDetailActionBar() {
+  const { blocker, changeCount, isSaving, readOnly, reset, save } = useExperimentDraft();
+
+  if (readOnly) {
+    return null;
+  }
+
+  return (
+    <div className="pointer-events-none sticky bottom-0 z-20 mt-auto flex items-center justify-center p-6">
+      <div className="pointer-events-auto mx-auto flex items-center justify-between gap-2 rounded-2xl border border-border/60 bg-card/80 py-2 pr-2 pl-4 shadow-lg backdrop-blur-md">
+        <p className="min-w-[14rem] text-muted-foreground text-sm">
+          {blocker ??
+            (changeCount === 0
+              ? "No unsaved changes"
+              : `${changeCount} unsaved change${changeCount === 1 ? "" : "s"}`)}
+        </p>
+        <Button disabled={isSaving || changeCount === 0} onClick={reset} size="lg" variant="ghost">
+          Discard
+        </Button>
+        <Button
+          disabled={isSaving || changeCount === 0 || blocker !== null}
+          onClick={save}
+          size="lg"
+        >
+          {isSaving ? "Saving..." : "Save Changes"}
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-header.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-header.tsx
new file mode 100644
index 000000000..39c2e8a5b
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-header.tsx
@@ -0,0 +1,167 @@
+"use client";
+
+import { cn, Input, Textarea } from "@voidhash/ui";
+import { useRef, useState } from "react";
+
+import { useExperimentDraft } from "./experiment-draft-context";
+
+/**
+ * Click-to-edit field state. Escape flips a ref rather than clearing the draft
+ * alone, so the blur that follows the input unmounting can tell a cancel from
+ * a commit — the blur handler still closes over the pre-cancel draft.
+ */
+function useInlineEdit(onCommit: (next: string) => void) {
+  const [draft, setDraft] = useState<null | string>(null);
+  const cancelled = useRef(false);
+
+  return {
+    cancel: () => {
+      cancelled.current = true;
+      setDraft(null);
+    },
+    change: setDraft,
+    commit: (next: string) => {
+      if (cancelled.current) {
+        cancelled.current = false;
+        return;
+      }
+      setDraft(null);
+      onCommit(next);
+    },
+    draft,
+    start: (value: string) => {
+      cancelled.current = false;
+      setDraft(value);
+    },
+  };
+}
+
+function InlineTextarea({
+  ariaLabel,
+  edit,
+  emptyLabel,
+  readOnly,
+  value,
+}: {
+  ariaLabel: string;
+  edit: ReturnType<typeof useInlineEdit>;
+  emptyLabel: string;
+  readOnly: boolean;
+  value: string;
+}) {
+  if (edit.draft === null) {
+    return (
+      <button
+        className={cn(
+          "-mx-2 block w-full rounded-md px-2 py-0.5 text-left text-sm",
+          value ? "text-muted-foreground" : "text-muted-foreground/70",
+          readOnly ? "cursor-default" : "hover:bg-muted/60",
+        )}
+        disabled={readOnly}
+        onClick={() => edit.start(value)}
+        type="button"
+      >
+        {value || emptyLabel}
+      </button>
+    );
+  }
+  return (
+    <Textarea
+      // biome-ignore lint/a11y/noAutofocus: the field only exists once the user opts into editing
+      autoFocus
+      aria-label={ariaLabel}
+      className="-mx-2 min-h-0 w-[calc(100%+1rem)] resize-none border-transparent bg-muted/60 px-2 py-0.5 text-sm shadow-none"
+      onBlur={(event) => edit.commit(event.target.value)}
+      onChange={(event) => edit.change(event.target.value)}
+      onKeyDown={(event) => {
+        if (event.key === "Enter" && !event.shiftKey) {
+          event.preventDefault();
+          event.currentTarget.blur();
+        }
+        if (event.key === "Escape") {
+          edit.cancel();
+        }
+      }}
+      placeholder={emptyLabel}
+      rows={1}
+      value={edit.draft}
+    />
+  );
+}
+
+/**
+ * A/B-test title, description, and hypothesis, all edited in place — click,
+ * type, commit with Enter (Escape reverts). Committing only stages the change;
+ * the bottom action bar saves it.
+ */
+export function ExperimentDetailHeader() {
+  const { description, hypothesis, name, readOnly, setDescription, setHypothesis, setName } =
+    useExperimentDraft();
+
+  const nameEdit = useInlineEdit((next) => {
+    if (next.trim().length > 0) {
+      setName(next.trim());
+    }
+  });
+  const descriptionEdit = useInlineEdit((next) => setDescription(next.trim()));
+  const hypothesisEdit = useInlineEdit((next) => setHypothesis(next.trim()));
+
+  return (
+    <div className="space-y-4">
+      <div className="space-y-1">
+        {nameEdit.draft === null ? (
+          <button
+            className={cn(
+              "-mx-2 block w-full truncate rounded-md px-2 py-0.5 text-left font-semibold text-3xl tracking-tight",
+              readOnly ? "cursor-default" : "hover:bg-muted/60",
+            )}
+            disabled={readOnly}
+            onClick={() => nameEdit.start(name)}
+            type="button"
+          >
+            {name}
+          </button>
+        ) : (
+          <Input
+            // biome-ignore lint/a11y/noAutofocus: the field only exists once the user opts into editing
+            autoFocus
+            aria-label="A/B test name"
+            className="-mx-2 h-auto w-[calc(100%+1rem)] border-transparent bg-muted/60 px-2 py-0.5 font-semibold text-3xl tracking-tight shadow-none md:text-3xl"
+            onBlur={(event) => nameEdit.commit(event.target.value)}
+            onChange={(event) => nameEdit.change(event.target.value)}
+            onKeyDown={(event) => {
+              if (event.key === "Enter") {
+                event.preventDefault();
+                event.currentTarget.blur();
+              }
+              if (event.key === "Escape") {
+                nameEdit.cancel();
+              }
+            }}
+            value={nameEdit.draft}
+          />
+        )}
+        <InlineTextarea
+          ariaLabel="A/B test description"
+          edit={descriptionEdit}
+          emptyLabel="Add a description..."
+          readOnly={readOnly}
+          value={description}
+        />
+      </div>
+
+      <div className="space-y-1">
+        <h2 className="font-medium text-muted-foreground text-xs uppercase tracking-wide">
+          Hypothesis
+        </h2>
+        <InlineTextarea
+          ariaLabel="A/B test hypothesis"
+          edit={hypothesisEdit}
+          emptyLabel="What do you expect to happen, and why?"
+          readOnly={readOnly}
+          value={hypothesis}
+        />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
index b6c746956..99545da49 100644
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties.tsx
@@ -1,92 +1,217 @@
 "use client";
 
-import { cn } from "@voidhash/ui";
-import type { ReactNode } from "react";
+import { Button, Input, Popover, PopoverContent, PopoverTrigger } from "@voidhash/ui";
+import { useState } from "react";
+
+import {
+  formatPropertyDate,
+  PROPERTY_VALUE_CLASS_NAME,
+  PropertyEmpty,
+  PropertyList,
+  PropertyRow,
+  PropertyStatusDot,
+  PropertyValue,
+} from "@/features/studio/components/property-list";
 
 import { EXPERIMENT_STATUS, experimentStatusLabel } from "../../lib/experiment-status";
+import { parseEventNames, useExperimentDraft } from "./experiment-draft-context";
 
-interface ExperimentDetailPropertiesProps {
-  archivedAt: Date | null;
-  createdAt: Date | null;
-  endedAt: Date | null;
-  primaryMetricEventName: string | null;
-  startedAt: Date | null;
-  status: number;
-  variantCount: number;
-  version: number;
-}
+const STATUS_DOTS: Record<number, string> = {
+  [EXPERIMENT_STATUS.draft]: "bg-muted-foreground/50",
+  [EXPERIMENT_STATUS.running]: "bg-emerald-500",
+  [EXPERIMENT_STATUS.paused]: "bg-amber-500",
+  [EXPERIMENT_STATUS.concluded]: "bg-sky-500",
+};
 
-const formatDate = (date: Date) =>
-  date.toLocaleDateString(undefined, { day: "numeric", month: "short", year: "numeric" });
+/**
+ * A metric event edited in place through a popover, styled to sit in the
+ * property column like every other value. Edits stage into the draft; the
+ * bottom action bar saves them.
+ */
+function MetricEditor({
+  ariaLabel,
+  disabled,
+  displayValue,
+  hint,
+  onChange,
+  placeholder,
+  value,
+}: {
+  ariaLabel: string;
+  disabled: boolean;
+  displayValue: string | null;
+  hint: string;
+  onChange: (value: string) => void;
+  placeholder: string;
+  value: string;
+}) {
+  const [open, setOpen] = useState(false);
 
-function PropertyRow({ children, label }: { children: ReactNode; label: string }) {
   return (
-    <div className="flex items-baseline gap-4 py-1.5">
-      <dt className="w-28 shrink-0 text-muted-foreground text-sm">{label}</dt>
-      <dd className="min-w-0 flex-1 text-sm">{children}</dd>
-    </div>
+    <Popover onOpenChange={setOpen} open={open}>
+      <PopoverTrigger asChild>
+        <Button
+          aria-label={ariaLabel}
+          className={PROPERTY_VALUE_CLASS_NAME}
+          disabled={disabled}
+          size="sm"
+          variant="ghost"
+        >
+          {displayValue ? (
+            <span className="min-w-0 truncate font-mono text-xs">{displayValue}</span>
+          ) : (
+            <PropertyEmpty>Not set</PropertyEmpty>
+          )}
+        </Button>
+      </PopoverTrigger>
+      <PopoverContent align="start" className="w-72 space-y-2 p-3">
+        <Input
+          aria-label={ariaLabel}
+          onChange={(event) => onChange(event.target.value)}
+          onKeyDown={(event) => {
+            if (event.key === "Enter") {
+              event.preventDefault();
+              setOpen(false);
+            }
+          }}
+          placeholder={placeholder}
+          value={value}
+        />
+        <p className="text-muted-foreground text-xs">{hint}</p>
+      </PopoverContent>
+    </Popover>
   );
 }
 
 /**
- * Linear property list for an A/B test's lifecycle, measurement, and stable
- * identifiers.
+ * Right-hand property list for the A/B-test detail screen. The goal and
+ * secondary metric events are edited in place through popovers (staged into
+ * the draft, frozen once the test leaves draft so results stay comparable);
+ * the remaining rows are immutable facts about the test.
  */
-export function ExperimentDetailProperties({
-  archivedAt,
-  createdAt,
-  endedAt,
-  primaryMetricEventName,
-  startedAt,
-  status,
-  variantCount,
-  version,
-}: ExperimentDetailPropertiesProps) {
-  const statusPresentation = archivedAt
+export function ExperimentDetailProperties() {
+  const {
+    experiment,
+    locationIds,
+    metricsLocked,
+    primaryMetric,
+    secondaryMetrics,
+    setPrimaryMetric,
+    setSecondaryMetrics,
+    variants,
+  } = useExperimentDraft();
+
+  const isArchived = experiment.archivedAt != null;
+  const status = isArchived
     ? { dotClassName: "bg-muted-foreground", label: "Archived" }
-    : status === EXPERIMENT_STATUS.running
-      ? { dotClassName: "bg-emerald-500", label: experimentStatusLabel(status) }
-      : status === EXPERIMENT_STATUS.paused
-        ? { dotClassName: "bg-amber-500", label: experimentStatusLabel(status) }
-        : { dotClassName: "bg-muted-foreground/50", label: experimentStatusLabel(status) };
+    : {
+        dotClassName: STATUS_DOTS[experiment.status] ?? "bg-muted-foreground/50",
+        label: experimentStatusLabel(experiment.status),
+      };
+  const secondaryList = parseEventNames(secondaryMetrics);
 
   return (
-    <dl className="-my-1.5">
+    <PropertyList>
       <PropertyRow label="Status">
-        <span className="inline-flex items-center gap-2">
-          <span
-            aria-hidden="true"
-            className={cn("size-2 rounded-full", statusPresentation.dotClassName)}
-          />
-          {statusPresentation.label}
-        </span>
+        <PropertyValue>
+          <PropertyStatusDot className={status.dotClassName} />
+          {status.label}
+        </PropertyValue>
+      </PropertyRow>
+
+      <PropertyRow label="Variants">
+        <PropertyValue>{`${variants.length} variant${variants.length === 1 ? "" : "s"}`}</PropertyValue>
       </PropertyRow>
 
-      <PropertyRow label="Primary metric">
-        {primaryMetricEventName ? (
-          <span className="font-mono text-xs">{primaryMetricEventName}</span>
+      <PropertyRow label="Locations">
+        <PropertyValue>
+          {locationIds.length > 0 ? (
+            `${locationIds.length} location${locationIds.length === 1 ? "" : "s"}`
+          ) : (
+            <PropertyEmpty>None yet</PropertyEmpty>
+          )}
+        </PropertyValue>
+      </PropertyRow>
+
+      <PropertyRow label="Goal event">
+        {metricsLocked ? (
+          <PropertyValue>
+            {primaryMetric ? (
+              <span className="font-mono text-xs">{primaryMetric}</span>
+            ) : (
+              <PropertyEmpty>Not set</PropertyEmpty>
+            )}
+          </PropertyValue>
         ) : (
-          <span className="text-muted-foreground">Not set</span>
+          <MetricEditor
+            ariaLabel="Goal event"
+            disabled={metricsLocked}
+            displayValue={primaryMetric || null}
+            hint="The event that counts as success. Left empty, purchases are used. Locked once the test starts."
+            onChange={setPrimaryMetric}
+            placeholder="purchase_completed"
+            value={primaryMetric}
+          />
         )}
       </PropertyRow>
 
-      <PropertyRow label="Variants">
-        {variantCount} variant{variantCount === 1 ? "" : "s"}
+      <PropertyRow label="Secondary">
+        {metricsLocked ? (
+          <PropertyValue>
+            {secondaryList.length > 0 ? (
+              <span className="min-w-0 truncate font-mono text-xs">
+                {secondaryList.join(", ")}
+              </span>
+            ) : (
+              <PropertyEmpty>None</PropertyEmpty>
+            )}
+          </PropertyValue>
+        ) : (
+          <MetricEditor
+            ariaLabel="Secondary events"
+            disabled={metricsLocked}
+            displayValue={secondaryList.length > 0 ? secondaryList.join(", ") : null}
+            hint="Extra events to track alongside the goal, comma separated."
+            onChange={setSecondaryMetrics}
+            placeholder="trial_started, paywall_viewed"
+            value={secondaryMetrics}
+          />
+        )}
       </PropertyRow>
 
       <PropertyRow label="Started">
-        {startedAt ? formatDate(startedAt) : <span className="text-muted-foreground">Not yet</span>}
+        <PropertyValue>
+          {experiment.startedAt ? (
+            formatPropertyDate(experiment.startedAt)
+          ) : (
+            <PropertyEmpty>Not yet</PropertyEmpty>
+          )}
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Ended">
-        {endedAt ? formatDate(endedAt) : <span className="text-muted-foreground">Not yet</span>}
+        <PropertyValue>
+          {experiment.endedAt ? (
+            formatPropertyDate(experiment.endedAt)
+          ) : (
+            <PropertyEmpty>Not yet</PropertyEmpty>
+          )}
+        </PropertyValue>
       </PropertyRow>
 
       <PropertyRow label="Created">
-        {createdAt ? formatDate(createdAt) : <span className="text-muted-foreground">Unknown</span>}
+        <PropertyValue>
+          {experiment.createdAt ? (
+            formatPropertyDate(experiment.createdAt)
+          ) : (
+            <PropertyEmpty>Unknown</PropertyEmpty>
+          )}
+        </PropertyValue>
       </PropertyRow>
 
-      <PropertyRow label="Version">v{version}</PropertyRow>
-    </dl>
+      <PropertyRow label="Version">
+        <PropertyValue>v{experiment.version}</PropertyValue>
+      </PropertyRow>
+    </PropertyList>
   );
 }
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-draft-context.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-draft-context.tsx
new file mode 100644
index 000000000..6d066298f
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-draft-context.tsx
@@ -0,0 +1,505 @@
+"use client";
+
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import type { PaywallLocationTreatmentConfig, RpcExperiment } from "@voidhash/rpc";
+import { createContext, type ReactNode, useContext, useMemo, useRef, useState } from "react";
+import { toast } from "sonner";
+
+import { queryKeys, saveExperimentSetupOptions } from "@/features/studio/lib/tanstack-query";
+
+import { EXPERIMENT_STATUS } from "../../lib/experiment-status";
+
+type Experiment = typeof RpcExperiment.Type;
+
+export interface DraftVariant {
+  /** Server id; null for a variant added in this draft. */
+  id: string | null;
+  /** Stable client-side identity, used to key matrix cells across renames. */
+  localId: number;
+  name: string;
+  weightPercent: number;
+}
+
+/**
+ * One matrix cell: the paywall a variant serves at a location. No release —
+ * a cell always follows the paywall's latest published version.
+ */
+export interface DraftCell {
+  paywallId: string;
+}
+
+/** Key of one matrix cell: which variant row × which location column. */
+export const cellKey = (variantLocalId: number, locationId: string) =>
+  `${variantLocalId}:${locationId}`;
+
+interface DraftState {
+  cells: Record<string, DraftCell>;
+  description: string;
+  hypothesis: string;
+  /** Matrix columns, in display order. */
+  locationIds: string[];
+  name: string;
+  primaryMetric: string;
+  /** Comma-joined, mirroring how the field is edited. */
+  secondaryMetrics: string;
+  variants: DraftVariant[];
+}
+
+const asPaywallLocationConfig = (config: unknown): PaywallLocationTreatmentConfig | null => {
+  if (
+    typeof config === "object" &&
+    config !== null &&
+    "paywallLocationId" in config &&
+    "paywallId" in config
+  ) {
+    return config as PaywallLocationTreatmentConfig;
+  }
+  return null;
+};
+
+/**
+ * Even percentage split for `count` arms that always sums to exactly 100 —
+ * the leftover points from integer division land on the first rows.
+ */
+const evenSplit = (count: number): number[] => {
+  if (count === 0) {
+    return [];
+  }
+  const base = Math.floor(100 / count);
+  const remainder = 100 - base * count;
+  return Array.from({ length: count }, (_, index) => base + (index < remainder ? 1 : 0));
+};
+
+const toDraft = (experiment: Experiment, nextLocalId: () => number): DraftState => {
+  // Control first, so "row 0 is the control" holds from the first render.
+  const ordered = [...experiment.variants].sort(
+    (a, b) => Number(b.isControl) - Number(a.isControl),
+  );
+  const variants = ordered.map((variant) => ({
+    id: variant.id,
+    localId: nextLocalId(),
+    name: variant.name,
+    weightPercent: Math.round(variant.weightBps / 100),
+  }));
+  const localIdByVariantId = new Map(variants.map((v) => [v.id, v.localId]));
+
+  const cells: Record<string, DraftCell> = {};
+  const locationIds: string[] = [];
+  for (const treatment of experiment.treatments) {
+    if (treatment.treatmentType !== "paywall_location") {
+      continue;
+    }
+    const config = asPaywallLocationConfig(treatment.config);
+    const localId = localIdByVariantId.get(treatment.variantId);
+    if (!config || localId === undefined) {
+      continue;
+    }
+    if (!locationIds.includes(config.paywallLocationId)) {
+      locationIds.push(config.paywallLocationId);
+    }
+    cells[cellKey(localId, config.paywallLocationId)] = { paywallId: config.paywallId };
+  }
+
+  return {
+    cells,
+    description: experiment.description ?? "",
+    hypothesis: experiment.hypothesis ?? "",
+    locationIds,
+    name: experiment.name,
+    primaryMetric: experiment.primaryMetricEventName ?? "",
+    secondaryMetrics: (experiment.secondaryMetricEventNames ?? []).join(", "),
+    variants,
+  };
+};
+
+/** Parse the comma/newline separated secondary-metrics field into a clean list. */
+export const parseEventNames = (value: string): string[] =>
+  Array.from(
+    new Set(
+      value
+        .split(/[\n,]/)
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0),
+    ),
+  );
+
+interface ExperimentDraftContextValue {
+  addLocation: (locationId: string) => void;
+  addVariant: () => void;
+  /** Human-readable reason Save is blocked, or null when the draft is valid. */
+  blocker: string | null;
+  cells: Record<string, DraftCell>;
+  changeCount: number;
+  clearCell: (variantLocalId: number, locationId: string) => void;
+  description: string;
+  experiment: Experiment;
+  hypothesis: string;
+  isSaving: boolean;
+  locationIds: string[];
+  /** Variants and placements are frozen: archived, concluded, or running. */
+  matrixLocked: boolean;
+  /** Metrics are frozen once the test leaves draft. */
+  metricsLocked: boolean;
+  name: string;
+  primaryMetric: string;
+  /** Whole page is read-only: archived or concluded. */
+  readOnly: boolean;
+  removeLocation: (locationId: string) => void;
+  removeVariant: (localId: number) => void;
+  /** Swap a column to a different location, carrying its cells along. */
+  replaceLocation: (oldLocationId: string, newLocationId: string) => void;
+  renameVariant: (localId: number, name: string) => void;
+  reset: () => void;
+  save: () => void;
+  secondaryMetrics: string;
+  setCell: (variantLocalId: number, locationId: string, cell: DraftCell) => void;
+  setDescription: (value: string) => void;
+  setHypothesis: (value: string) => void;
+  setName: (value: string) => void;
+  setPrimaryMetric: (value: string) => void;
+  setSecondaryMetrics: (value: string) => void;
+  setVariantWeight: (localId: number, weightPercent: number) => void;
+  splitWeightsEvenly: () => void;
+  variants: DraftVariant[];
+}
+
+const ExperimentDraftContext = createContext<ExperimentDraftContextValue | null>(null);
+
+/** Read the staged A/B-test draft; must be used under {@link ExperimentDraftProvider}. */
+export function useExperimentDraft(): ExperimentDraftContextValue {
+  const value = useContext(ExperimentDraftContext);
+  if (!value) {
+    throw new Error("useExperimentDraft must be used within ExperimentDraftProvider");
+  }
+  return value;
+}
+
+/**
+ * Holds everything the A/B-test detail page edits — title, description,
+ * hypothesis, metrics, and the variants × placements matrix — as one staged
+ * draft. Nothing writes to the server until the bottom action bar saves, which
+ * lands the whole draft in a single `SaveExperimentSetup` request.
+ */
+export function ExperimentDraftProvider({
+  children,
+  experiment,
+}: {
+  children: ReactNode;
+  experiment: Experiment;
+}) {
+  const localIdCounter = useRef(0);
+  const nextLocalId = () => ++localIdCounter.current;
+
+  const [syncedExperiment, setSyncedExperiment] = useState(experiment);
+  const [draft, setDraft] = useState<DraftState>(() => toDraft(experiment, nextLocalId));
+
+  const isArchived = experiment.archivedAt != null;
+  const readOnly = isArchived || experiment.status === EXPERIMENT_STATUS.concluded;
+  const matrixLocked = readOnly || experiment.status === EXPERIMENT_STATUS.running;
+  const metricsLocked = readOnly || experiment.status !== EXPERIMENT_STATUS.draft;
+
+  const queryClient = useQueryClient();
+  const { isPending: isSaving, mutate: saveSetup } = useMutation({
+    ...saveExperimentSetupOptions(),
+    onError: () => {
+      toast.error("Failed to save changes");
+    },
+    onSuccess: (saved) => {
+      toast.success("Changes saved");
+      // Reseed from the response so newly added variants pick up server ids.
+      setSyncedExperiment(saved);
+      setDraft(toDraft(saved, nextLocalId));
+      queryClient.setQueryData(queryKeys.experiment.getExperiment(saved.id), saved);
+      queryClient.invalidateQueries({ queryKey: queryKeys.experiment.all });
+    },
+  });
+
+  const diff = useMemo(() => {
+    const saved = syncedExperiment;
+    const scalars = {
+      description: draft.description !== (saved.description ?? ""),
+      hypothesis: draft.hypothesis !== (saved.hypothesis ?? ""),
+      name: draft.name !== saved.name,
+      primaryMetric: draft.primaryMetric !== (saved.primaryMetricEventName ?? ""),
+      secondaryMetrics:
+        parseEventNames(draft.secondaryMetrics).join(",") !==
+        (saved.secondaryMetricEventNames ?? []).join(","),
+    };
+
+    const savedVariantsById = new Map(saved.variants.map((variant) => [variant.id, variant]));
+    const draftIds = new Set(draft.variants.flatMap((v) => (v.id ? [v.id] : [])));
+    let variantChanges = 0;
+    for (const variant of saved.variants) {
+      if (!draftIds.has(variant.id)) {
+        variantChanges += 1;
+      }
+    }
+    draft.variants.forEach((variant, index) => {
+      const savedVariant = variant.id ? savedVariantsById.get(variant.id) : undefined;
+      if (!savedVariant) {
+        variantChanges += 1;
+        return;
+      }
+      if (
+        savedVariant.name !== variant.name ||
+        Math.round(savedVariant.weightBps / 100) !== variant.weightPercent ||
+        savedVariant.isControl !== (index === 0)
+      ) {
+        variantChanges += 1;
+      }
+    });
+
+    // Cells compare on `${variantId}:${locationId}`; cells on brand-new
+    // variants have no saved counterpart and always count as additions.
+    const savedCells = new Map<string, PaywallLocationTreatmentConfig>();
+    for (const treatment of saved.treatments) {
+      const config = asPaywallLocationConfig(treatment.config);
+      if (treatment.treatmentType === "paywall_location" && config) {
+        savedCells.set(`${treatment.variantId}:${config.paywallLocationId}`, config);
+      }
+    }
+    const localIdToVariantId = new Map(
+      draft.variants.flatMap((v) => (v.id ? [[v.localId, v.id] as const] : [])),
+    );
+    let cellChanges = 0;
+    const seenSavedKeys = new Set<string>();
+    for (const [key, cell] of Object.entries(draft.cells)) {
+      const [localIdRaw, locationId] = key.split(":");
+      if (locationId === undefined || !draft.locationIds.includes(locationId)) {
+        continue;
+      }
+      const variantId = localIdToVariantId.get(Number(localIdRaw));
+      const savedCell = variantId ? savedCells.get(`${variantId}:${locationId}`) : undefined;
+      if (variantId) {
+        seenSavedKeys.add(`${variantId}:${locationId}`);
+      }
+      if (!savedCell || savedCell.paywallId !== cell.paywallId) {
+        cellChanges += 1;
+      }
+    }
+    for (const key of savedCells.keys()) {
+      if (!seenSavedKeys.has(key)) {
+        cellChanges += 1;
+      }
+    }
+
+    const scalarChangeCount = Object.values(scalars).filter(Boolean).length;
+    return {
+      cellChanges,
+      changeCount: scalarChangeCount + variantChanges + cellChanges,
+      scalars,
+      variantChanges,
+    };
+  }, [draft, syncedExperiment]);
+
+  // Adopt background refetches only while the draft is clean, so a save from
+  // another tab doesn't clobber in-progress edits here.
+  if (syncedExperiment !== experiment && diff.changeCount === 0 && !isSaving) {
+    setSyncedExperiment(experiment);
+    setDraft(toDraft(experiment, nextLocalId));
+  }
+
+  const weightSum = draft.variants.reduce((sum, variant) => sum + variant.weightPercent, 0);
+  const blocker =
+    draft.name.trim().length === 0
+      ? "The A/B test needs a name"
+      : draft.variants.some((variant) => variant.name.trim().length === 0)
+        ? "Every variant needs a name"
+        : draft.variants.length > 0 && weightSum !== 100
+          ? `Variant weights must add up to 100% (now ${weightSum}%)`
+          : null;
+
+  const save = () => {
+    if (diff.changeCount === 0 || blocker !== null) {
+      return;
+    }
+    const includeMatrix = diff.variantChanges + diff.cellChanges > 0;
+    saveSetup({
+      id: experiment.id,
+      ...(diff.scalars.name ? { name: draft.name.trim() } : {}),
+      ...(diff.scalars.description ? { description: draft.description || null } : {}),
+      ...(diff.scalars.hypothesis ? { hypothesis: draft.hypothesis || null } : {}),
+      ...(diff.scalars.primaryMetric
+        ? { primaryMetricEventName: draft.primaryMetric.trim() || null }
+        : {}),
+      ...(diff.scalars.secondaryMetrics
+        ? {
+            secondaryMetricEventNames: (() => {
+              const parsed = parseEventNames(draft.secondaryMetrics);
+              return parsed.length > 0 ? parsed : null;
+            })(),
+          }
+        : {}),
+      ...(includeMatrix
+        ? {
+            variants: draft.variants.map((variant, index) => ({
+              ...(variant.id ? { id: variant.id } : {}),
+              isControl: index === 0,
+              name: variant.name.trim(),
+              treatments: draft.locationIds.flatMap((locationId) => {
+                const cell = draft.cells[cellKey(variant.localId, locationId)];
+                return cell ? [{ paywallId: cell.paywallId, paywallLocationId: locationId }] : [];
+              }),
+              weightBps: variant.weightPercent * 100,
+            })),
+          }
+        : {}),
+    });
+  };
+
+  const value: ExperimentDraftContextValue = {
+    addLocation: (locationId) => {
+      setDraft((prev) =>
+        prev.locationIds.includes(locationId)
+          ? prev
+          : { ...prev, locationIds: [...prev.locationIds, locationId] },
+      );
+    },
+    addVariant: () => {
+      setDraft((prev) => {
+        const letter =
+          prev.variants.length < 26
+            ? `Variant ${String.fromCharCode(65 + prev.variants.length)}`
+            : `Variant ${prev.variants.length + 1}`;
+        const variants = [
+          ...prev.variants,
+          { id: null, localId: nextLocalId(), name: letter, weightPercent: 0 },
+        ];
+        const split = evenSplit(variants.length);
+        return {
+          ...prev,
+          variants: variants.map((variant, index) => ({
+            ...variant,
+            weightPercent: split[index] ?? 0,
+          })),
+        };
+      });
+    },
+    blocker,
+    cells: draft.cells,
+    changeCount: diff.changeCount,
+    clearCell: (variantLocalId, locationId) => {
+      setDraft((prev) => {
+        const cells = { ...prev.cells };
+        delete cells[cellKey(variantLocalId, locationId)];
+        return { ...prev, cells };
+      });
+    },
+    description: draft.description,
+    experiment,
+    hypothesis: draft.hypothesis,
+    isSaving,
+    locationIds: draft.locationIds,
+    matrixLocked,
+    metricsLocked,
+    name: draft.name,
+    primaryMetric: draft.primaryMetric,
+    readOnly,
+    removeLocation: (locationId) => {
+      setDraft((prev) => {
+        const cells = Object.fromEntries(
+          Object.entries(prev.cells).filter(([key]) => !key.endsWith(`:${locationId}`)),
+        );
+        return {
+          ...prev,
+          cells,
+          locationIds: prev.locationIds.filter((id) => id !== locationId),
+        };
+      });
+    },
+    replaceLocation: (oldLocationId, newLocationId) => {
+      setDraft((prev) => {
+        if (
+          oldLocationId === newLocationId ||
+          !prev.locationIds.includes(oldLocationId) ||
+          prev.locationIds.includes(newLocationId)
+        ) {
+          return prev;
+        }
+        const cells = Object.fromEntries(
+          Object.entries(prev.cells).map(([key, cell]) => [
+            key.endsWith(`:${oldLocationId}`)
+              ? `${key.slice(0, key.length - oldLocationId.length)}${newLocationId}`
+              : key,
+            cell,
+          ]),
+        );
+        return {
+          ...prev,
+          cells,
+          locationIds: prev.locationIds.map((id) => (id === oldLocationId ? newLocationId : id)),
+        };
+      });
+    },
+    removeVariant: (localId) => {
+      setDraft((prev) => {
+        if (prev.variants.length <= 1) {
+          return prev;
+        }
+        const variants = prev.variants.filter((variant) => variant.localId !== localId);
+        const split = evenSplit(variants.length);
+        const cells = Object.fromEntries(
+          Object.entries(prev.cells).filter(([key]) => !key.startsWith(`${localId}:`)),
+        );
+        return {
+          ...prev,
+          cells,
+          variants: variants.map((variant, index) => ({
+            ...variant,
+            weightPercent: split[index] ?? 0,
+          })),
+        };
+      });
+    },
+    renameVariant: (localId, name) => {
+      setDraft((prev) => ({
+        ...prev,
+        variants: prev.variants.map((variant) =>
+          variant.localId === localId ? { ...variant, name } : variant,
+        ),
+      }));
+    },
+    reset: () => {
+      setDraft(toDraft(syncedExperiment, nextLocalId));
+    },
+    save,
+    secondaryMetrics: draft.secondaryMetrics,
+    setCell: (variantLocalId, locationId, cell) => {
+      setDraft((prev) => ({
+        ...prev,
+        cells: { ...prev.cells, [cellKey(variantLocalId, locationId)]: cell },
+      }));
+    },
+    setDescription: (description) => setDraft((prev) => ({ ...prev, description })),
+    setHypothesis: (hypothesis) => setDraft((prev) => ({ ...prev, hypothesis })),
+    setName: (name) => setDraft((prev) => ({ ...prev, name })),
+    setPrimaryMetric: (primaryMetric) => setDraft((prev) => ({ ...prev, primaryMetric })),
+    setSecondaryMetrics: (secondaryMetrics) => setDraft((prev) => ({ ...prev, secondaryMetrics })),
+    setVariantWeight: (localId, weightPercent) => {
+      const clamped = Math.min(100, Math.max(0, Math.round(weightPercent)));
+      setDraft((prev) => ({
+        ...prev,
+        variants: prev.variants.map((variant) =>
+          variant.localId === localId ? { ...variant, weightPercent: clamped } : variant,
+        ),
+      }));
+    },
+    splitWeightsEvenly: () => {
+      setDraft((prev) => {
+        const split = evenSplit(prev.variants.length);
+        return {
+          ...prev,
+          variants: prev.variants.map((variant, index) => ({
+            ...variant,
+            weightPercent: split[index] ?? 0,
+          })),
+        };
+      });
+    },
+    variants: draft.variants,
+  };
+
+  return (
+    <ExperimentDraftContext.Provider value={value}>{children}</ExperimentDraftContext.Provider>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
index 4b46dc41f..382b2a3c5 100644
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls.tsx
@@ -75,7 +75,7 @@ function ConcludeExperimentDialog({
               <SelectContent>
                 {variants.map((variant) => (
                   <SelectItem key={variant.id} value={variant.id}>
-                    {variant.name || variant.key}
+                    {variant.name}
                     {variant.isControl ? " (control)" : ""}
                   </SelectItem>
                 ))}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-matrix.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-matrix.tsx
new file mode 100644
index 000000000..9a434ff34
--- /dev/null
+++ b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-matrix.tsx
@@ -0,0 +1,557 @@
+"use client";
+
+import { useQuery, useSuspenseQuery } from "@tanstack/react-query";
+import type { Paywall, RpcPaywallLocation } from "@voidhash/rpc";
+import {
+  Button,
+  cn,
+  Combobox,
+  ComboboxContent,
+  ComboboxInput,
+  ComboboxItem,
+  ComboboxList,
+  ComboboxTrigger,
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+  Input,
+  InputGroup,
+  InputGroupAddon,
+  InputGroupInput,
+  InputGroupText,
+  Phone,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@voidhash/ui";
+import { MapPinIcon, PlusIcon, SmartphoneIcon, XIcon } from "lucide-react";
+import { Fragment, type ReactElement, useMemo, useState } from "react";
+
+import {
+  listPaywallDeploysOptions,
+  listPaywallLocationsOptions,
+  listPaywallsOptions,
+} from "@/features/studio/lib/tanstack-query";
+
+import { cellKey, type DraftCell, useExperimentDraft } from "./experiment-draft-context";
+
+type PaywallRecord = typeof Paywall.Type;
+type LocationRecord = typeof RpcPaywallLocation.Type;
+
+// Fills carry the grouping — a tinted band for the header and footer, a
+// lighter rail for the variant column — and rules are spent only where
+// something genuinely divides: under the header, beside the rail, and between
+// rows. Paywall columns lean on the header's pickers and their own spacing
+// instead, which keeps a wide matrix from turning into a mesh of lines.
+const HEADER_BAND = "bg-muted/50 border-border/60 border-b";
+const VARIANT_RAIL = "bg-muted/30 border-border/60 border-r";
+const ROW_DIVIDER = "border-border/60 border-t";
+
+/** Sentinel option that empties a cell — the combobox's own "none" choice. */
+const NO_PAYWALL = "__no_paywall__";
+
+function PaywallThumbnail({
+  className,
+  paywall,
+}: {
+  className?: string;
+  paywall: PaywallRecord | undefined;
+}) {
+  return (
+    <Phone className={className} screenClassName="flex items-center justify-center bg-zinc-950">
+      {paywall?.thumbnailUrl ? (
+        <img
+          alt={paywall.name}
+          className="size-full object-cover object-top"
+          loading="lazy"
+          src={paywall.thumbnailUrl}
+        />
+      ) : (
+        <SmartphoneIcon className="size-4 text-zinc-400 opacity-30" />
+      )}
+    </Phone>
+  );
+}
+
+/** What a cell says under the paywall name about the version it will serve. */
+interface LatestVersionLookup {
+  isPending: boolean;
+  versionForSlug: (slug: string) => number | undefined;
+}
+
+/**
+ * Searchable paywall list for a cell. Hangs off a compact `trigger` rather than
+ * the cell itself, so the popup anchors next to the button that opened it
+ * instead of dropping out of the bottom of a tall cell.
+ */
+function PaywallPicker({
+  currentPaywallId,
+  onClear,
+  onOpenChange,
+  onSelect,
+  paywalls,
+  trigger,
+}: {
+  currentPaywallId: string | undefined;
+  onClear: () => void;
+  onOpenChange?: (open: boolean) => void;
+  onSelect: (paywallId: string) => void;
+  paywalls: readonly PaywallRecord[];
+  trigger: ReactElement;
+}) {
+  const [open, setOpen] = useState(false);
+  const [query, setQuery] = useState("");
+
+  const matches = useMemo(() => {
+    const needle = query.trim().toLowerCase();
+    if (needle.length === 0) {
+      return paywalls;
+    }
+    return paywalls.filter((paywall) =>
+      `${paywall.name} ${paywall.slug}`.toLowerCase().includes(needle),
+    );
+  }, [paywalls, query]);
+
+  return (
+    // The search text is driven through the root's `inputValue` rather than the
+    // input element — Base UI owns that input's value, so controlling the
+    // element directly fights it. No `items` prop, so filtering stays ours.
+    <Combobox
+      inputValue={query}
+      onInputValueChange={setQuery}
+      onOpenChange={(next: boolean) => {
+        setOpen(next);
+        onOpenChange?.(next);
+        if (!next) {
+          setQuery("");
+        }
+      }}
+      onValueChange={(paywallId: null | string) => {
+        if (paywallId === NO_PAYWALL) {
+          onClear();
+        } else if (paywallId != null) {
+          onSelect(paywallId);
+        }
+        setOpen(false);
+        onOpenChange?.(false);
+      }}
+      open={open}
+      value={currentPaywallId ?? null}
+    >
+      <ComboboxTrigger render={trigger} showChevron={false} />
+      {/* The trigger is a compact button, and the popup defaults to the
+          anchor's width — give the list a readable one of its own. */}
+      <ComboboxContent className="w-72">
+        <ComboboxInput placeholder="Search paywalls..." showTrigger={false} />
+        <ComboboxList>
+          {currentPaywallId && <ComboboxItem value={NO_PAYWALL}>No paywall</ComboboxItem>}
+          {matches.length === 0 ? (
+            <p className="py-2 text-center text-muted-foreground text-sm">No paywalls found.</p>
+          ) : (
+            matches.map((paywall) => (
+              <ComboboxItem key={paywall.id} value={paywall.id}>
+                <span className="flex h-8 w-5 shrink-0 items-center justify-center overflow-hidden rounded-[3px] bg-zinc-950">
+                  {paywall.thumbnailUrl ? (
+                    <img
+                      alt={paywall.name}
+                      className="size-full object-cover object-top"
+                      loading="lazy"
+                      src={paywall.thumbnailUrl}
+                    />
+                  ) : (
+                    <SmartphoneIcon className="size-3 text-zinc-400 opacity-30" />
+                  )}
+                </span>
+                <span className="truncate">{paywall.name}</span>
+              </ComboboxItem>
+            ))
+          )}
+        </ComboboxList>
+      </ComboboxContent>
+    </Combobox>
+  );
+}
+
+/**
+ * One matrix cell: which paywall a variant serves at a location. A cell always
+ * follows the paywall's latest published version, so the picker is just a
+ * searchable paywall list — no version to manage. The cell itself is inert; the
+ * button inside it is what opens the picker.
+ */
+function MatrixCell({
+  disabled,
+  latestVersions,
+  locationId,
+  paywalls,
+  paywallsById,
+  variantLocalId,
+}: {
+  disabled: boolean;
+  latestVersions: LatestVersionLookup;
+  locationId: string;
+  paywalls: readonly PaywallRecord[];
+  paywallsById: ReadonlyMap<string, PaywallRecord>;
+  variantLocalId: number;
+}) {
+  const { cells, clearCell, setCell } = useExperimentDraft();
+  // The Replace button only appears on hover, so it has to stay visible while
+  // its own popup is open — otherwise moving the pointer into the list would
+  // pull the anchor out from under it.
+  const [pickerOpen, setPickerOpen] = useState(false);
+
+  const cell: DraftCell | undefined = cells[cellKey(variantLocalId, locationId)];
+  const selectedPaywall = cell ? paywallsById.get(cell.paywallId) : undefined;
+  const latestVersion = selectedPaywall
+    ? latestVersions.versionForSlug(selectedPaywall.slug)
+    : undefined;
+
+  const picker = (trigger: ReactElement) => (
+    <PaywallPicker
+      currentPaywallId={cell?.paywallId}
+      onClear={() => clearCell(variantLocalId, locationId)}
+      onOpenChange={setPickerOpen}
+      onSelect={(paywallId) => setCell(variantLocalId, locationId, { paywallId })}
+      paywalls={paywalls}
+      trigger={trigger}
+    />
+  );
+
+  if (!(cell && selectedPaywall)) {
+    return (
+      <div className="flex min-h-36 items-center justify-center p-3">
+        {disabled ? (
+          <span className="text-muted-foreground/70 text-sm">No paywall</span>
+        ) : (
+          picker(
+            <Button variant="ghost">
+              <PlusIcon />
+              Select paywall
+            </Button>,
+          )
+        )}
+      </div>
+    );
+  }
+
+  return (
+    <div className="group/cell flex min-h-36 items-center gap-3 p-3">
+      <PaywallThumbnail className="w-12 shrink-0" paywall={selectedPaywall} />
+      <div className="relative min-w-0 flex-1">
+        <div
+          className={cn(
+            "transition-opacity",
+            !disabled &&
+              "group-focus-within/cell:opacity-0 group-hover/cell:opacity-0",
+            pickerOpen && "opacity-0",
+          )}
+        >
+          <p className="truncate font-medium text-sm">{selectedPaywall.name}</p>
+          <p
+            className={cn(
+              "text-xs",
+              latestVersions.isPending || latestVersion !== undefined
+                ? "text-muted-foreground"
+                : "text-amber-500",
+            )}
+          >
+            {latestVersions.isPending
+              ? "Latest version"
+              : latestVersion !== undefined
+                ? `Latest version (v${latestVersion})`
+                : "Not published yet"}
+          </p>
+        </div>
+        {!disabled && (
+          <div
+            className={cn(
+              "absolute inset-0 flex items-center opacity-0 transition-opacity",
+              "pointer-events-none group-hover/cell:pointer-events-auto group-focus-within/cell:pointer-events-auto",
+              "group-focus-within/cell:opacity-100 group-hover/cell:opacity-100",
+              pickerOpen && "pointer-events-auto opacity-100",
+            )}
+          >
+            {picker(<Button variant="outline">Replace</Button>)}
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
+
+/**
+ * A column's location picker. Options are the locations no other column uses;
+ * picking one on the placeholder column adds it, picking on an existing column
+ * switches it (its cells carry over).
+ */
+function LocationColumnSelect({
+  availableLocations,
+  disabled,
+  locationId,
+  locationsById,
+  onSelect,
+}: {
+  availableLocations: readonly LocationRecord[];
+  disabled: boolean;
+  locationId: string | null;
+  locationsById: ReadonlyMap<string, LocationRecord>;
+  onSelect: (nextLocationId: string) => void;
+}) {
+  const current = locationId ? locationsById.get(locationId) : undefined;
+
+  return (
+    <Select disabled={disabled} onValueChange={onSelect} value={locationId ?? ""}>
+      <SelectTrigger className="h-8 min-w-0 flex-1 border-transparent bg-transparent font-medium shadow-none hover:bg-background/60">
+        <span className="flex min-w-0 items-center gap-2">
+          <MapPinIcon className="size-4 shrink-0 text-muted-foreground" />
+          <SelectValue placeholder="Select location" />
+        </span>
+      </SelectTrigger>
+      <SelectContent>
+        {locationId && (
+          <SelectItem value={locationId}>{current?.name ?? "Unknown location"}</SelectItem>
+        )}
+        {availableLocations.map((location) => (
+          <SelectItem key={location.id} value={location.id}>
+            {location.name}
+          </SelectItem>
+        ))}
+      </SelectContent>
+    </Select>
+  );
+}
+
+/**
+ * The setup matrix: one column per paywall location the test runs at, one row
+ * per variant, and in each cell the paywall that variant serves there — the
+ * whole "who sees what where" of the test on a single surface. There is always
+ * at least one column; before a location is chosen it renders as a placeholder
+ * with its picker open for business. Edits stage into the draft; the bottom
+ * action bar saves them.
+ */
+export function ExperimentMatrix({ projectId }: { projectId: string }) {
+  const {
+    addLocation,
+    addVariant,
+    locationIds,
+    matrixLocked,
+    removeLocation,
+    removeVariant,
+    renameVariant,
+    replaceLocation,
+    setVariantWeight,
+    splitWeightsEvenly,
+    variants,
+  } = useExperimentDraft();
+
+  const { data: locations } = useSuspenseQuery(
+    listPaywallLocationsOptions({ includeArchived: true, projectId }),
+  );
+  const { data: paywalls } = useSuspenseQuery(listPaywallsOptions({ projectId }));
+  // Display-only: the version number each "Latest version" cell currently
+  // resolves to, reconstructed from the deploy history (there is no
+  // list-releases RPC).
+  const { data: deploys, isPending: isDeploysPending } = useQuery(
+    listPaywallDeploysOptions({ projectId }),
+  );
+
+  const latestVersionBySlug = new Map<string, number>();
+  for (const deploy of deploys ?? []) {
+    for (const paywall of deploy.paywalls) {
+      if (paywall.releaseId && paywall.version !== null) {
+        latestVersionBySlug.set(
+          paywall.slug,
+          Math.max(latestVersionBySlug.get(paywall.slug) ?? 0, paywall.version),
+        );
+      }
+    }
+  }
+  const latestVersions: LatestVersionLookup = {
+    isPending: isDeploysPending,
+    versionForSlug: (slug) => latestVersionBySlug.get(slug),
+  };
+
+  const locationsById = new Map<string, LocationRecord>(
+    locations.map((location) => [location.id, location]),
+  );
+  const paywallsById = new Map<string, PaywallRecord>(
+    paywalls.map((paywall) => [paywall.id, paywall]),
+  );
+  const availableLocations = locations.filter(
+    (location) => location.archivedAt == null && !locationIds.includes(location.id),
+  );
+
+  // The matrix never renders columnless: with no locations chosen yet, one
+  // placeholder column stands in so the location picker is right where the
+  // first real column will be.
+  const columns: (string | null)[] = locationIds.length > 0 ? locationIds : [null];
+  // Fixed column widths rather than `1fr`: a single placement shouldn't stretch
+  // across the whole page, and every column stays the same size as locations
+  // are added — the matrix scrolls instead of reflowing.
+  const gridTemplateColumns = `15rem repeat(${columns.length}, 17rem) 3.5rem`;
+  const weightSum = variants.reduce((sum, variant) => sum + variant.weightPercent, 0);
+
+  return (
+    // Scrolls on both axes so many variants or many placements stay usable
+    // without the matrix pushing the page around.
+    <div className="max-h-[70svh] w-fit max-w-full overflow-auto overscroll-contain rounded-xl border border-border/60 bg-card">
+      <div className="min-w-max">
+        <div className="grid" style={{ gridTemplateColumns }}>
+          <div className={cn(HEADER_BAND, "flex items-center justify-between gap-2 border-r p-3")}>
+            <span className="font-medium text-muted-foreground text-xs uppercase tracking-wide">
+              Variants
+            </span>
+            {!matrixLocked && weightSum !== 100 && variants.length > 0 && (
+              <Button onClick={splitWeightsEvenly} size="xs" variant="ghost">
+                Split evenly
+              </Button>
+            )}
+          </div>
+
+          {columns.map((locationId) => (
+            <div
+              className={cn(HEADER_BAND, "group flex items-center gap-1 p-2")}
+              key={locationId ?? "placeholder"}
+            >
+              <LocationColumnSelect
+                availableLocations={availableLocations}
+                disabled={matrixLocked}
+                locationId={locationId}
+                locationsById={locationsById}
+                onSelect={(nextLocationId) => {
+                  if (locationId) {
+                    replaceLocation(locationId, nextLocationId);
+                  } else {
+                    addLocation(nextLocationId);
+                  }
+                }}
+              />
+              {!matrixLocked && locationId && (
+                <Button
+                  aria-label="Remove location"
+                  className="shrink-0 opacity-0 transition-opacity group-focus-within:opacity-100 group-hover:opacity-100"
+                  onClick={() => removeLocation(locationId)}
+                  size="icon-sm"
+                  variant="ghost"
+                >
+                  <XIcon />
+                </Button>
+              )}
+            </div>
+          ))}
+
+          <div className={cn(HEADER_BAND, "flex items-center justify-center p-2")}>
+            <DropdownMenu>
+              <DropdownMenuTrigger asChild>
+                <Button
+                  aria-label="Add paywall location"
+                  disabled={
+                    matrixLocked || availableLocations.length === 0 || locationIds.length === 0
+                  }
+                  size="icon"
+                  variant="ghost"
+                >
+                  <PlusIcon />
+                </Button>
+              </DropdownMenuTrigger>
+              <DropdownMenuContent align="end" className="w-56">
+                {availableLocations.map((location) => (
+                  <DropdownMenuItem key={location.id} onSelect={() => addLocation(location.id)}>
+                    <MapPinIcon className="size-4 text-muted-foreground" />
+                    {location.name}
+                  </DropdownMenuItem>
+                ))}
+              </DropdownMenuContent>
+            </DropdownMenu>
+          </div>
+
+          {variants.map((variant, index) => (
+            <Fragment key={variant.localId}>
+              <div className={cn(VARIANT_RAIL, index > 0 && ROW_DIVIDER, "p-3")}>
+                <div className="flex items-center gap-2">
+                  <Input
+                    aria-label="Variant name"
+                    className="min-w-0 flex-1"
+                    disabled={matrixLocked}
+                    onChange={(event) => renameVariant(variant.localId, event.target.value)}
+                    value={variant.name}
+                  />
+                  <InputGroup className="w-20 shrink-0">
+                    <InputGroupInput
+                      aria-label="Weight percent"
+                      className="text-right tabular-nums"
+                      disabled={matrixLocked}
+                      // `inputMode` over `type="number"` — the spinner arrows
+                      // crowd a field this narrow and add nothing here.
+                      inputMode="numeric"
+                      onChange={(event) => {
+                        const percent = Number(event.target.value);
+                        if (Number.isFinite(percent)) {
+                          setVariantWeight(variant.localId, percent);
+                        }
+                      }}
+                      value={variant.weightPercent}
+                    />
+                    <InputGroupAddon align="inline-end">
+                      <InputGroupText>%</InputGroupText>
+                    </InputGroupAddon>
+                  </InputGroup>
+                </div>
+              </div>
+
+              {columns.map((locationId) => (
+                <div className={cn(index > 0 && ROW_DIVIDER)} key={locationId ?? "placeholder"}>
+                  {locationId ? (
+                    <MatrixCell
+                      disabled={matrixLocked}
+                      latestVersions={latestVersions}
+                      locationId={locationId}
+                      paywalls={paywalls}
+                      paywallsById={paywallsById}
+                      variantLocalId={variant.localId}
+                    />
+                  ) : (
+                    // No location picked for this column yet, so there is
+                    // nothing a paywall could be bound to.
+                    <div className="flex min-h-36 items-center justify-center p-3 text-muted-foreground/70 text-sm">
+                      Pick a location first
+                    </div>
+                  )}
+                </div>
+              ))}
+
+              {/* Aligned to the top of the row so it sits on the same line as
+                  the variant name, matching the header's + button. */}
+              <div
+                className={cn("flex items-start justify-center p-2", index > 0 && ROW_DIVIDER)}
+              >
+                {!matrixLocked && variants.length > 1 && (
+                  <Button
+                    aria-label="Remove variant"
+                    onClick={() => removeVariant(variant.localId)}
+                    size="icon"
+                    variant="ghost"
+                  >
+                    <XIcon />
+                  </Button>
+                )}
+              </div>
+            </Fragment>
+          ))}
+        </div>
+
+        <Button
+          className="h-auto w-full rounded-none border-border/60 border-t bg-muted/50 py-3 font-normal"
+          disabled={matrixLocked}
+          onClick={addVariant}
+          variant="ghost"
+        >
+          <PlusIcon />
+          Add variant
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
deleted file mode 100644
index 6a8db3555..000000000
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-settings-form.tsx
+++ /dev/null
@@ -1,164 +0,0 @@
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import {
-  Button,
-  Card,
-  CardContent,
-  CardFooter,
-  CardHeader,
-  CardTitle,
-  Input,
-  Label,
-  Separator,
-  Textarea,
-} from "@voidhash/ui";
-import { useState } from "react";
-
-import { queryKeys, updateExperimentOptions } from "@/features/studio/lib/tanstack-query";
-
-type ExperimentData = {
-  description: string | null;
-  hypothesis: string | null;
-  id: string;
-  name: string;
-  primaryMetricEventName: string | null;
-  secondaryMetricEventNames: readonly string[] | null;
-};
-
-const parseEventNames = (value: string): string[] =>
-  Array.from(
-    new Set(
-      value
-        .split(/[\n,]/)
-        .map((entry) => entry.trim())
-        .filter((entry) => entry.length > 0),
-    ),
-  );
-
-export function ExperimentSettingsForm({
-  experiment,
-  readOnly,
-}: {
-  experiment: ExperimentData;
-  readOnly?: boolean;
-}) {
-  const initialSecondary = (experiment.secondaryMetricEventNames ?? []).join(", ");
-  const [name, setName] = useState(experiment.name);
-  const [description, setDescription] = useState(experiment.description ?? "");
-  const [hypothesis, setHypothesis] = useState(experiment.hypothesis ?? "");
-  const [primaryMetricEventName, setPrimaryMetricEventName] = useState(
-    experiment.primaryMetricEventName ?? "",
-  );
-  const [secondaryMetricEventNames, setSecondaryMetricEventNames] = useState(initialSecondary);
-  const queryClient = useQueryClient();
-
-  const updateExperiment = useMutation({
-    ...updateExperimentOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.experiment.getExperiment(experiment.id),
-      });
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.experiment.all,
-      });
-    },
-  });
-
-  const hasChanges =
-    name !== experiment.name ||
-    description !== (experiment.description ?? "") ||
-    hypothesis !== (experiment.hypothesis ?? "") ||
-    primaryMetricEventName !== (experiment.primaryMetricEventName ?? "") ||
-    secondaryMetricEventNames !== initialSecondary;
-
-  const reset = () => {
-    setName(experiment.name);
-    setDescription(experiment.description ?? "");
-    setHypothesis(experiment.hypothesis ?? "");
-    setPrimaryMetricEventName(experiment.primaryMetricEventName ?? "");
-    setSecondaryMetricEventNames(initialSecondary);
-  };
-
-  return (
-    <Card>
-      <CardHeader>
-        <CardTitle>Settings</CardTitle>
-      </CardHeader>
-      <CardContent className="space-y-4">
-        <div className="space-y-2">
-          <Label htmlFor="experiment-name">Name</Label>
-          <Input
-            disabled={readOnly}
-            id="experiment-name"
-            onChange={(e) => setName(e.target.value)}
-            value={name}
-          />
-        </div>
-        <div className="space-y-2">
-          <Label htmlFor="experiment-description">Description</Label>
-          <Textarea
-            disabled={readOnly}
-            id="experiment-description"
-            onChange={(e) => setDescription(e.target.value)}
-            value={description}
-          />
-        </div>
-        <div className="space-y-2">
-          <Label htmlFor="experiment-hypothesis">Hypothesis</Label>
-          <Textarea
-            disabled={readOnly}
-            id="experiment-hypothesis"
-            onChange={(e) => setHypothesis(e.target.value)}
-            value={hypothesis}
-          />
-        </div>
-
-        <Separator />
-
-        <div className="space-y-2">
-          <Label htmlFor="experiment-primary-metric">Primary metric event</Label>
-          <Input
-            disabled={readOnly}
-            id="experiment-primary-metric"
-            onChange={(e) => setPrimaryMetricEventName(e.target.value)}
-            placeholder="purchase_completed"
-            value={primaryMetricEventName}
-          />
-        </div>
-        <div className="space-y-2">
-          <Label htmlFor="experiment-secondary-metrics">Secondary metrics</Label>
-          <Input
-            disabled={readOnly}
-            id="experiment-secondary-metrics"
-            onChange={(e) => setSecondaryMetricEventNames(e.target.value)}
-            placeholder="trial_started, paywall_viewed"
-            value={secondaryMetricEventNames}
-          />
-          <p className="text-muted-foreground text-xs">Comma separated event names.</p>
-        </div>
-      </CardContent>
-      {hasChanges && !readOnly && (
-        <CardFooter className="flex justify-end gap-2 border-t pt-4">
-          <Button onClick={reset} variant="outline">
-            Reset
-          </Button>
-          <Button
-            disabled={!name || updateExperiment.isPending}
-            onClick={() => {
-              const secondary = parseEventNames(secondaryMetricEventNames);
-              updateExperiment.mutate({
-                description: description || null,
-                hypothesis: hypothesis || null,
-                id: experiment.id,
-                name,
-                primaryMetricEventName: primaryMetricEventName || null,
-                secondaryMetricEventNames: secondary.length > 0 ? secondary : null,
-              });
-            }}
-          >
-            {updateExperiment.isPending ? "Saving..." : "Save Changes"}
-          </Button>
-        </CardFooter>
-      )}
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
deleted file mode 100644
index a96ec6bd4..000000000
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel.tsx
+++ /dev/null
@@ -1,294 +0,0 @@
-import { useMutation, useQueryClient } from "@tanstack/react-query";
-import {
-  Alert,
-  AlertDescription,
-  Button,
-  Card,
-  CardContent,
-  CardFooter,
-  CardHeader,
-  CardTitle,
-  Input,
-  Label,
-  Switch,
-} from "@voidhash/ui";
-import { Info, Plus, Trash2 } from "lucide-react";
-import { useState } from "react";
-
-import { queryKeys, replaceExperimentVariantsOptions } from "@/features/studio/lib/tanstack-query";
-
-type LocalVariant = {
-  _id: string;
-  key: string;
-  name: string;
-  isControl: boolean;
-  weightBps: number;
-};
-
-type ExperimentVariant = {
-  key: string;
-  name: string;
-  isControl: boolean;
-  weightBps: number;
-};
-
-const VARIANT_COLORS = [
-  "bg-blue-500",
-  "bg-emerald-500",
-  "bg-amber-500",
-  "bg-purple-500",
-  "bg-rose-500",
-  "bg-cyan-500",
-  "bg-orange-500",
-  "bg-indigo-500",
-];
-
-let variantCounter = 0;
-
-export function ExperimentSetupPanel({
-  experimentId,
-  readOnly,
-  variants,
-}: {
-  experimentId: string;
-  readOnly?: boolean;
-  variants: ExperimentVariant[];
-}) {
-  const [localVariants, setLocalVariants] = useState<LocalVariant[]>(
-    variants.map((variant) => ({
-      _id: `v-${variantCounter++}`,
-      key: variant.key,
-      name: variant.name,
-      isControl: variant.isControl,
-      weightBps: variant.weightBps,
-    })),
-  );
-  const queryClient = useQueryClient();
-
-  const replaceVariants = useMutation({
-    ...replaceExperimentVariantsOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.experiment.getExperiment(experimentId),
-      });
-    },
-  });
-
-  const totalWeight = localVariants.reduce((sum, variant) => sum + variant.weightBps, 0);
-  const controlCount = localVariants.filter((variant) => variant.isControl).length;
-  const hasBlankKey = localVariants.some((variant) => variant.key.trim().length === 0);
-  const isValid =
-    localVariants.length >= 2 &&
-    totalWeight === 10000 &&
-    controlCount === 1 &&
-    !hasBlankKey;
-
-  const addVariant = () => {
-    setLocalVariants([
-      ...localVariants,
-      {
-        _id: `v-${variantCounter++}`,
-        key: "",
-        name: "",
-        isControl: localVariants.length === 0,
-        weightBps: 0,
-      },
-    ]);
-  };
-
-  const removeVariant = (index: number) => {
-    setLocalVariants(localVariants.filter((_, variantIndex) => variantIndex !== index));
-  };
-
-  const updateVariant = (index: number, updates: Partial<LocalVariant>) => {
-    setLocalVariants(
-      localVariants.map((variant, variantIndex) =>
-        variantIndex === index ? { ...variant, ...updates } : variant,
-      ),
-    );
-  };
-
-  // Only one variant may be the control; setting a new one clears the rest.
-  const setControl = (index: number) => {
-    setLocalVariants(
-      localVariants.map((variant, variantIndex) => ({
-        ...variant,
-        isControl: variantIndex === index,
-      })),
-    );
-  };
-
-  const distributeEvenly = () => {
-    if (localVariants.length === 0) {
-      return;
-    }
-
-    const baseWeight = Math.floor(10000 / localVariants.length);
-    const remainder = 10000 - baseWeight * localVariants.length;
-    setLocalVariants(
-      localVariants.map((variant, index) => ({
-        ...variant,
-        weightBps: baseWeight + (index < remainder ? 1 : 0),
-      })),
-    );
-  };
-
-  return (
-    <Card>
-      <CardHeader className="flex flex-row items-center justify-between">
-        <CardTitle>Variants</CardTitle>
-        <div className="flex gap-2">
-          {localVariants.length > 1 && (
-            <Button disabled={readOnly} onClick={distributeEvenly} size="sm" variant="outline">
-              Distribute Evenly
-            </Button>
-          )}
-          <Button disabled={readOnly} onClick={addVariant} size="sm" variant="outline">
-            <Plus className="mr-1 h-4 w-4" />
-            Add Variant
-          </Button>
-        </div>
-      </CardHeader>
-      <CardContent>
-        {readOnly && (
-          <Alert className="mb-4">
-            <Info className="h-4 w-4" />
-            <AlertDescription>
-              Variants and weights are locked while the A/B test is running. Pause it to make
-              changes.
-            </AlertDescription>
-          </Alert>
-        )}
-
-        {localVariants.length === 0 ? (
-          <p className="text-muted-foreground text-sm">
-            No variants yet. Add at least a control and one treatment variant.
-          </p>
-        ) : (
-          <div className="space-y-4">
-            {localVariants.map((variant, index) => (
-              <div className="space-y-3 rounded-md border p-3" key={variant._id}>
-                <div className="flex items-end gap-3">
-                  <div className="flex-1 space-y-1">
-                    <Label>Name</Label>
-                    <Input
-                      disabled={readOnly}
-                      onChange={(event) =>
-                        updateVariant(index, {
-                          name: event.target.value,
-                        })
-                      }
-                      placeholder="Variant name"
-                      value={variant.name}
-                    />
-                  </div>
-                  <div className="flex-1 space-y-1">
-                    <Label>Key</Label>
-                    <Input
-                      disabled={readOnly}
-                      onChange={(event) =>
-                        updateVariant(index, {
-                          key: event.target.value,
-                        })
-                      }
-                      placeholder="variant-key"
-                      value={variant.key}
-                    />
-                  </div>
-                  <div className="w-24 space-y-1">
-                    <Label>Weight</Label>
-                    <div className="relative">
-                      <Input
-                        className="pr-6"
-                        disabled={readOnly}
-                        onChange={(event) => {
-                          const percent = Number.parseFloat(event.target.value) || 0;
-                          updateVariant(index, {
-                            weightBps: Math.round(percent * 100),
-                          });
-                        }}
-                        step="0.1"
-                        type="number"
-                        value={(variant.weightBps / 100).toFixed(1)}
-                      />
-                      <span className="pointer-events-none absolute top-1/2 right-2 -translate-y-1/2 text-muted-foreground text-sm">
-                        %
-                      </span>
-                    </div>
-                  </div>
-                  <Button
-                    disabled={readOnly}
-                    onClick={() => removeVariant(index)}
-                    size="icon"
-                    variant="ghost"
-                  >
-                    <Trash2 className="h-4 w-4" />
-                  </Button>
-                </div>
-
-                <div className="flex items-center gap-2">
-                  <Switch
-                    checked={variant.isControl}
-                    disabled={readOnly || variant.isControl}
-                    id={`control-${variant._id}`}
-                    onCheckedChange={() => setControl(index)}
-                  />
-                  <Label className="text-muted-foreground text-sm" htmlFor={`control-${variant._id}`}>
-                    Control
-                  </Label>
-                </div>
-
-                {variant.weightBps > 0 && (
-                  <div
-                    className={`h-1 rounded-full ${VARIANT_COLORS[index % VARIANT_COLORS.length]}`}
-                    style={{
-                      width: `${Math.min((variant.weightBps / 10000) * 100, 100)}%`,
-                    }}
-                  />
-                )}
-              </div>
-            ))}
-
-            <div className="space-y-2">
-              <div className="flex h-2 overflow-hidden rounded-full bg-muted">
-                {localVariants.map((variant, index) => (
-                  <div
-                    className={`${VARIANT_COLORS[index % VARIANT_COLORS.length]} transition-all`}
-                    key={variant._id}
-                    style={{
-                      width: `${(variant.weightBps / 10000) * 100}%`,
-                    }}
-                  />
-                ))}
-              </div>
-              <div className="text-sm">
-                <span className={totalWeight === 10000 ? "text-muted-foreground" : "text-destructive"}>
-                  Total: {(totalWeight / 100).toFixed(1)}%
-                </span>
-                {totalWeight !== 10000 && (
-                  <span className="ml-2 text-destructive">— must sum to 100%</span>
-                )}
-                {controlCount !== 1 && (
-                  <span className="ml-2 text-destructive">— exactly one control required</span>
-                )}
-              </div>
-            </div>
-          </div>
-        )}
-      </CardContent>
-      <CardFooter className="flex justify-end border-t pt-4">
-        <Button
-          disabled={readOnly || !isValid || replaceVariants.isPending}
-          onClick={() =>
-            replaceVariants.mutate({
-              experimentId,
-              variants: localVariants.map(({ _id: _variantId, ...variant }) => variant),
-            })
-          }
-        >
-          {replaceVariants.isPending ? "Saving..." : "Save Variants"}
-        </Button>
-      </CardFooter>
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel.tsx b/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel.tsx
deleted file mode 100644
index 0c797ddc3..000000000
--- a/apps/www/src/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel.tsx
+++ /dev/null
@@ -1,312 +0,0 @@
-import { useMutation, useQuery, useQueryClient, useSuspenseQuery } from "@tanstack/react-query";
-import type {
-  PaywallLocationTreatmentConfig,
-  RpcExperimentTreatment,
-  RpcExperimentVariant,
-} from "@voidhash/rpc";
-import { EXPERIMENT_TREATMENT_TYPES } from "@voidhash/rpc";
-import {
-  Alert,
-  AlertDescription,
-  Badge,
-  Button,
-  Card,
-  CardContent,
-  CardHeader,
-  CardTitle,
-  Label,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@voidhash/ui";
-import { Info, Trash2 } from "lucide-react";
-import { useMemo, useState } from "react";
-
-import {
-  getPaywallDraftReleaseOptions,
-  listPaywallDeploysOptions,
-  listPaywallLocationsOptions,
-  listPaywallsOptions,
-  queryKeys,
-  removeExperimentTreatmentOptions,
-  upsertExperimentTreatmentOptions,
-} from "@/features/studio/lib/tanstack-query";
-
-const TREATMENT_TYPE = "paywall_location" as const;
-
-/** Narrow an unknown treatment config to the paywall_location shape. */
-const asPaywallLocationConfig = (
-  config: unknown,
-): PaywallLocationTreatmentConfig | null => {
-  if (
-    typeof config === "object" &&
-    config !== null &&
-    "paywallLocationId" in config &&
-    "paywallId" in config &&
-    "paywallReleaseId" in config
-  ) {
-    return config as PaywallLocationTreatmentConfig;
-  }
-  return null;
-};
-
-/**
- * Resolve the set of releases a user can bind for a given paywall. The backend
- * exposes no dedicated "list releases" RPC, so we reuse the existing paywall
- * surface: published/deployed releases come from `ListPaywallDeploys` (matched
- * by the paywall's slug) and the current draft comes from
- * `GetPaywallDraftRelease`. Deduplicated by release id, newest version first.
- */
-function useReleaseOptions(projectId: string, paywallId: string, paywallSlug: string | undefined) {
-  const { data: deploys = [] } = useQuery({
-    ...listPaywallDeploysOptions({ projectId }),
-    enabled: paywallId.length > 0,
-  });
-  const { data: draft } = useQuery({
-    ...getPaywallDraftReleaseOptions({ paywallId }),
-    enabled: paywallId.length > 0,
-  });
-
-  return useMemo(() => {
-    const byReleaseId = new Map<string, { releaseId: string; version: number | null }>();
-    if (paywallSlug) {
-      for (const deploy of deploys) {
-        for (const paywall of deploy.paywalls) {
-          if (paywall.slug === paywallSlug && paywall.releaseId) {
-            byReleaseId.set(paywall.releaseId, {
-              releaseId: paywall.releaseId,
-              version: paywall.version,
-            });
-          }
-        }
-      }
-    }
-    if (draft) {
-      byReleaseId.set(draft.releaseId, {
-        releaseId: draft.releaseId,
-        version: draft.version,
-      });
-    }
-    return Array.from(byReleaseId.values()).sort((a, b) => (b.version ?? 0) - (a.version ?? 0));
-  }, [deploys, draft, paywallSlug]);
-}
-
-function VariantTreatmentEditor({
-  experimentId,
-  projectId,
-  readOnly,
-  variant,
-  treatment,
-}: {
-  experimentId: string;
-  projectId: string;
-  readOnly?: boolean;
-  variant: typeof RpcExperimentVariant.Type;
-  treatment: typeof RpcExperimentTreatment.Type | undefined;
-}) {
-  const existingConfig = treatment ? asPaywallLocationConfig(treatment.config) : null;
-
-  const [paywallLocationId, setPaywallLocationId] = useState(
-    existingConfig?.paywallLocationId ?? "",
-  );
-  const [paywallId, setPaywallId] = useState(existingConfig?.paywallId ?? "");
-  const [paywallReleaseId, setPaywallReleaseId] = useState(
-    existingConfig?.paywallReleaseId ?? "",
-  );
-
-  const queryClient = useQueryClient();
-
-  const { data: locations } = useSuspenseQuery(listPaywallLocationsOptions({ projectId }));
-  const { data: paywalls } = useSuspenseQuery(listPaywallsOptions({ projectId }));
-
-  const selectedPaywall = paywalls.find((paywall) => paywall.id === paywallId);
-  const releaseOptions = useReleaseOptions(projectId, paywallId, selectedPaywall?.slug);
-
-  const upsertTreatment = useMutation({
-    ...upsertExperimentTreatmentOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.experiment.getExperiment(experimentId),
-      });
-    },
-  });
-
-  const removeTreatment = useMutation({
-    ...removeExperimentTreatmentOptions(),
-    onSuccess: () => {
-      queryClient.invalidateQueries({
-        queryKey: queryKeys.experiment.getExperiment(experimentId),
-      });
-    },
-  });
-
-  const canSave =
-    paywallLocationId.length > 0 && paywallId.length > 0 && paywallReleaseId.length > 0;
-
-  return (
-    <div className="space-y-3 rounded-md border p-3">
-      <div className="flex items-center justify-between">
-        <div className="flex items-center gap-2">
-          <span className="font-medium">{variant.name || variant.key}</span>
-          {variant.isControl && <Badge variant="outline">Control</Badge>}
-          <span className="font-mono text-muted-foreground text-xs">{variant.key}</span>
-        </div>
-        {treatment && (
-          <Button
-            disabled={readOnly || removeTreatment.isPending}
-            onClick={() => removeTreatment.mutate({ id: treatment.id })}
-            size="icon"
-            variant="ghost"
-          >
-            <Trash2 className="h-4 w-4" />
-          </Button>
-        )}
-      </div>
-
-      <div className="grid grid-cols-3 gap-3">
-        <div className="space-y-1">
-          <Label>Location</Label>
-          <Select
-            disabled={readOnly}
-            onValueChange={setPaywallLocationId}
-            value={paywallLocationId}
-          >
-            <SelectTrigger>
-              <SelectValue placeholder="Select location" />
-            </SelectTrigger>
-            <SelectContent>
-              {locations.map((location) => (
-                <SelectItem key={location.id} value={location.id}>
-                  {location.name} ({location.slug})
-                </SelectItem>
-              ))}
-            </SelectContent>
-          </Select>
-        </div>
-
-        <div className="space-y-1">
-          <Label>Paywall</Label>
-          <Select
-            disabled={readOnly}
-            onValueChange={(value) => {
-              setPaywallId(value);
-              setPaywallReleaseId("");
-            }}
-            value={paywallId}
-          >
-            <SelectTrigger>
-              <SelectValue placeholder="Select paywall" />
-            </SelectTrigger>
-            <SelectContent>
-              {paywalls.map((paywall) => (
-                <SelectItem key={paywall.id} value={paywall.id}>
-                  {paywall.name} ({paywall.slug})
-                </SelectItem>
-              ))}
-            </SelectContent>
-          </Select>
-        </div>
-
-        <div className="space-y-1">
-          <Label>Release</Label>
-          <Select
-            disabled={readOnly || paywallId.length === 0}
-            onValueChange={setPaywallReleaseId}
-            value={paywallReleaseId}
-          >
-            <SelectTrigger>
-              <SelectValue placeholder="Select release" />
-            </SelectTrigger>
-            <SelectContent>
-              {releaseOptions.map((release) => (
-                <SelectItem key={release.releaseId} value={release.releaseId}>
-                  {release.version !== null ? `v${release.version}` : release.releaseId}
-                </SelectItem>
-              ))}
-            </SelectContent>
-          </Select>
-        </div>
-      </div>
-
-      <div className="flex justify-end">
-        <Button
-          disabled={readOnly || !canSave || upsertTreatment.isPending}
-          onClick={() =>
-            upsertTreatment.mutate({
-              config: { paywallId, paywallLocationId, paywallReleaseId },
-              experimentId,
-              treatmentType: TREATMENT_TYPE,
-              variantId: variant.id,
-            })
-          }
-          size="sm"
-        >
-          {upsertTreatment.isPending ? "Saving..." : treatment ? "Update Treatment" : "Add Treatment"}
-        </Button>
-      </div>
-    </div>
-  );
-}
-
-export function ExperimentTreatmentsPanel({
-  experimentId,
-  projectId,
-  readOnly,
-  treatments,
-  variants,
-}: {
-  experimentId: string;
-  projectId: string;
-  readOnly?: boolean;
-  treatments: readonly (typeof RpcExperimentTreatment.Type)[];
-  variants: readonly (typeof RpcExperimentVariant.Type)[];
-}) {
-  const treatmentByVariant = useMemo(() => {
-    const map = new Map<string, typeof RpcExperimentTreatment.Type>();
-    for (const treatment of treatments) {
-      if (treatment.treatmentType === TREATMENT_TYPE) {
-        map.set(treatment.variantId, treatment);
-      }
-    }
-    return map;
-  }, [treatments]);
-
-  return (
-    <Card>
-      <CardHeader>
-        <CardTitle>Treatments</CardTitle>
-      </CardHeader>
-      <CardContent className="space-y-4">
-        <p className="text-muted-foreground text-sm">
-          Bind each variant to a{" "}
-          <span className="font-medium">{EXPERIMENT_TREATMENT_TYPES.paywall_location.name}</span>:
-          which paywall release to serve at a location for users assigned to that variant.
-        </p>
-
-        {variants.length === 0 ? (
-          <Alert>
-            <Info className="h-4 w-4" />
-            <AlertDescription>
-              Add variants in the Setup tab before configuring treatments.
-            </AlertDescription>
-          </Alert>
-        ) : (
-          <div className="space-y-4">
-            {variants.map((variant) => (
-              <VariantTreatmentEditor
-                experimentId={experimentId}
-                key={variant.id}
-                projectId={projectId}
-                readOnly={readOnly}
-                treatment={treatmentByVariant.get(variant.id)}
-                variant={variant}
-              />
-            ))}
-          </div>
-        )}
-      </CardContent>
-    </Card>
-  );
-}
diff --git a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx
index 18214dfbc..46f90dcc4 100644
--- a/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx
+++ b/apps/www/src/features/studio/feature-flags/components/flag-detail-page/flag-detail-action-bar.tsx
@@ -5,8 +5,13 @@ import { Button } from "@voidhash/ui";
 import { useFlagDraft } from "./flag-draft-context";
 
 /**
- * Floating, sticky bar pinned to the bottom of the flag detail screen. Nothing
- * on the screen writes to the server until Save Changes is pressed here.
+ * Floating bar pinned to the bottom of the flag detail screen. Nothing on the
+ * screen writes to the server until Save Changes is pressed here.
+ *
+ * `mt-auto` parks it at the bottom of the page's flex column when the content
+ * is short, so it never floats mid-screen. The wrapper is transparent and
+ * click-through — only the pill itself takes pointer events — so the content
+ * scrolling underneath stays visible instead of being masked by a band.
  */
 export function FlagDetailActionBar() {
   const { changeCount, invalidVariantIds, isSaving, readOnly, reset, save } = useFlagDraft();
@@ -18,8 +23,8 @@ export function FlagDetailActionBar() {
   const hasInvalidVariants = invalidVariantIds.size > 0;
 
   return (
-    <div className="sticky bottom-0 z-10 flex items-center justify-center bg-background px-6 pt-6 pb-6">
-      <div className="mx-auto flex items-center justify-between gap-2 rounded-2xl border border-border/60 bg-card py-2 pr-2 pl-4 shadow-lg">
+    <div className="pointer-events-none sticky bottom-0 z-20 mt-auto flex items-center justify-center p-6">
+      <div className="pointer-events-auto mx-auto flex items-center justify-between gap-2 rounded-2xl border border-border/60 bg-card/80 py-2 pr-2 pl-4 shadow-lg backdrop-blur-md">
         <p className="min-w-[14rem] text-muted-foreground text-sm">
           {hasInvalidVariants
             ? "Fix the invalid variant values to save"
diff --git a/apps/www/src/features/studio/lib/tanstack-query/experiments.ts b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
index 72d3518ae..5ebe23be5 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/experiments.ts
@@ -28,7 +28,12 @@ export const createExperimentOptions = () =>
     mutationKey: ["createExperiment"],
   });
 
-export const updateExperimentOptions = () =>
+/**
+ * Saves everything the detail page stages — scalars, variants, and each
+ * variant's paywall placements — in one request. Sections left `undefined`
+ * are untouched.
+ */
+export const saveExperimentSetupOptions = () =>
   eq.mutationOptions({
     mutationFn: (variables: {
       id: string;
@@ -37,40 +42,18 @@ export const updateExperimentOptions = () =>
       hypothesis?: string | null;
       primaryMetricEventName?: string | null;
       secondaryMetricEventNames?: string[] | null;
-    }) => VoidhashRpc.request((rpc) => rpc.UpdateExperiment(variables)),
-    mutationKey: ["updateExperiment"],
-  });
-
-export const replaceExperimentVariantsOptions = () =>
-  eq.mutationOptions({
-    mutationFn: (variables: {
-      experimentId: string;
-      variants: Array<{
-        key: string;
+      variants?: Array<{
+        id?: string;
         name: string;
         isControl: boolean;
         weightBps: number;
+        treatments: Array<{
+          paywallLocationId: string;
+          paywallId: string;
+        }>;
       }>;
-    }) => VoidhashRpc.request((rpc) => rpc.ReplaceExperimentVariants(variables)),
-    mutationKey: ["replaceExperimentVariants"],
-  });
-
-export const upsertExperimentTreatmentOptions = () =>
-  eq.mutationOptions({
-    mutationFn: (variables: {
-      experimentId: string;
-      variantId: string;
-      treatmentType: string;
-      config: unknown;
-    }) => VoidhashRpc.request((rpc) => rpc.UpsertExperimentTreatment(variables)),
-    mutationKey: ["upsertExperimentTreatment"],
-  });
-
-export const removeExperimentTreatmentOptions = () =>
-  eq.mutationOptions({
-    mutationFn: (variables: { id: string }) =>
-      VoidhashRpc.request((rpc) => rpc.RemoveExperimentTreatment(variables)),
-    mutationKey: ["removeExperimentTreatment"],
+    }) => VoidhashRpc.request((rpc) => rpc.SaveExperimentSetup(variables)),
+    mutationKey: ["saveExperimentSetup"],
   });
 
 export const startExperimentOptions = () =>
diff --git a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
index 108af65b9..1a252a4d9 100644
--- a/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
+++ b/apps/www/src/routes/studio/_authenticated/_dashboard/_project/$organizationSlug/$projectSlug/experiments.$id.tsx
@@ -2,6 +2,8 @@ import { useSuspenseQuery } from "@tanstack/react-query";
 import { createFileRoute, Link } from "@tanstack/react-router";
 import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
 import {
+  Alert,
+  AlertDescription,
   Badge,
   Breadcrumb,
   BreadcrumbItem,
@@ -17,14 +19,16 @@ import {
   PageTabs,
   TabsContent,
 } from "@voidhash/ui";
+import { InfoIcon } from "lucide-react";
 import { useAuth } from "@/features/studio/components/auth-context";
 
 import { EnterpriseAuditLogSlot } from "@/features/studio/enterprise/enterprise-audit-log-slot";
+import { ExperimentDetailActionBar } from "@/features/studio/experiments/components/experiment-detail-page/experiment-detail-action-bar";
+import { ExperimentDetailHeader } from "@/features/studio/experiments/components/experiment-detail-page/experiment-detail-header";
 import { ExperimentDetailProperties } from "@/features/studio/experiments/components/experiment-detail-page/experiment-detail-properties";
+import { ExperimentDraftProvider } from "@/features/studio/experiments/components/experiment-detail-page/experiment-draft-context";
 import { ExperimentLifecycleControls } from "@/features/studio/experiments/components/experiment-detail-page/experiment-lifecycle-controls";
-import { ExperimentSettingsForm } from "@/features/studio/experiments/components/experiment-detail-page/experiment-settings-form";
-import { ExperimentSetupPanel } from "@/features/studio/experiments/components/experiment-detail-page/experiment-setup-panel";
-import { ExperimentTreatmentsPanel } from "@/features/studio/experiments/components/experiment-detail-page/experiment-treatments-panel";
+import { ExperimentMatrix } from "@/features/studio/experiments/components/experiment-detail-page/experiment-matrix";
 import { EXPERIMENT_STATUS } from "@/features/studio/experiments/lib/experiment-status";
 import { getExperimentOptions } from "@/features/studio/lib/tanstack-query";
 import { useInternalFeatureFlag } from "@/features/studio/lib/useInternalFeatureFlag";
@@ -80,115 +84,98 @@ function ExperimentDetailPage() {
 
   const { data: experiment } = useSuspenseQuery(getExperimentOptions({ id: id as string }));
 
-  const isArchived = experiment.archivedAt !== null;
   const isRunning = experiment.status === EXPERIMENT_STATUS.running;
-  const isConcluded = experiment.status === EXPERIMENT_STATUS.concluded;
-  // Variants and weights are frozen once archived, while actively assigning,
-  // or after the experiment has concluded.
-  const setupLocked = isArchived || isRunning || isConcluded;
 
   return (
-    <Page>
-      <PageTabs defaultValue="setup">
-        <PageHeader
-          className="px-2"
-          rightActions={
-            <ExperimentLifecycleControls
-              archivedAt={experiment.archivedAt}
-              experimentId={experiment.id}
-              status={experiment.status}
-              variants={experiment.variants}
-            />
-          }
-        >
-          <div className="flex items-center gap-2">
-            <Breadcrumb>
-              <BreadcrumbList>
-                <BreadcrumbItem>
-                  <BreadcrumbLink asChild>
-                    <Link
-                      params={{ organizationSlug, projectSlug }}
-                      to="/studio/$organizationSlug/$projectSlug/experiments"
-                    >
-                      A/B Tests
-                    </Link>
-                  </BreadcrumbLink>
-                </BreadcrumbItem>
-                <BreadcrumbSeparator />
-                <BreadcrumbItem>
-                  <BreadcrumbPage>{experiment.name}</BreadcrumbPage>
-                </BreadcrumbItem>
-              </BreadcrumbList>
-            </Breadcrumb>
-            {experiment.archivedAt && <Badge variant="secondary">Archived</Badge>}
-          </div>
-        </PageHeader>
-
-        <PageBar className="border-b pl-4">
-          <PageBarTabs>
-            <PageBarTab value="setup">Setup</PageBarTab>
-            <PageBarTab value="treatments">Treatments</PageBarTab>
-            <PageBarTab value="settings">Settings</PageBarTab>
-          </PageBarTabs>
-        </PageBar>
-
-        <div className="mx-auto max-w-6xl px-4 py-8 sm:px-8 sm:py-12">
-          <div className="max-w-4xl space-y-10">
-            <div className="space-y-6">
-              <div>
-                <h1 className="font-semibold text-3xl tracking-tight">{experiment.name}</h1>
-                <p className="mt-1 text-muted-foreground text-sm">
-                  {experiment.description ||
-                    (experiment.primaryMetricEventName
-                      ? `Measure ${experiment.primaryMetricEventName} across ${experiment.variants.length} variants.`
-                      : `Compare ${experiment.variants.length} variants against each other.`)}
-                </p>
-              </div>
-              <ExperimentDetailProperties
+    <ExperimentDraftProvider experiment={experiment}>
+      <Page className="flex min-h-[calc(100svh-var(--header-height))] flex-col">
+        {/* The tabs root sits between the page and the action bar, so it has to
+            carry the flex column through for the bar's `mt-auto` to reach the
+            bottom of the screen. */}
+        <PageTabs className="flex flex-1 flex-col" defaultValue="overview">
+          <PageHeader
+            className="px-2"
+            rightActions={
+              <ExperimentLifecycleControls
                 archivedAt={experiment.archivedAt}
-                createdAt={experiment.createdAt}
-                endedAt={experiment.endedAt}
-                primaryMetricEventName={experiment.primaryMetricEventName}
-                startedAt={experiment.startedAt}
-                status={experiment.status}
-                variantCount={experiment.variants.length}
-                version={experiment.version}
-              />
-            </div>
-
-            <TabsContent value="setup">
-              <ExperimentSetupPanel
-                experimentId={experiment.id}
-                readOnly={setupLocked}
-                variants={[...experiment.variants]}
-              />
-            </TabsContent>
-
-            <TabsContent value="treatments">
-              <ExperimentTreatmentsPanel
                 experimentId={experiment.id}
-                projectId={project.id}
-                readOnly={isArchived || isConcluded}
-                treatments={experiment.treatments}
+                status={experiment.status}
                 variants={experiment.variants}
               />
-            </TabsContent>
-
-            <TabsContent value="settings">
-              <ExperimentSettingsForm
-                experiment={experiment}
-                readOnly={isArchived || isConcluded}
-              />
-            </TabsContent>
+            }
+          >
+            <div className="flex items-center gap-2">
+              <Breadcrumb>
+                <BreadcrumbList>
+                  <BreadcrumbItem>
+                    <BreadcrumbLink asChild>
+                      <Link
+                        params={{ organizationSlug, projectSlug }}
+                        to="/studio/$organizationSlug/$projectSlug/experiments"
+                      >
+                        A/B Tests
+                      </Link>
+                    </BreadcrumbLink>
+                  </BreadcrumbItem>
+                  <BreadcrumbSeparator />
+                  <BreadcrumbItem>
+                    <BreadcrumbPage>{experiment.name}</BreadcrumbPage>
+                  </BreadcrumbItem>
+                </BreadcrumbList>
+              </Breadcrumb>
+              {experiment.archivedAt && <Badge variant="secondary">Archived</Badge>}
+            </div>
+          </PageHeader>
+
+          {/* A single tab for now — the bar stays so Results and friends can
+              slot in beside Overview later. */}
+          <PageBar className="border-b pl-4">
+            <PageBarTabs>
+              <PageBarTab value="overview">Overview</PageBarTab>
+            </PageBarTabs>
+          </PageBar>
+
+          {/* Full-width container (unlike the max-w-6xl flag page): the matrix
+              grows a column per location, so the main column takes all the
+              room it can get while the properties rail stays fixed. */}
+          <div className="w-full flex-1 px-8 py-12">
+            <div className="grid grid-cols-1 gap-12 lg:grid-cols-[minmax(0,1fr)_19rem]">
+              <div className="min-w-0 space-y-10">
+                <ExperimentDetailHeader />
+
+                <TabsContent value="overview">
+                  <div className="space-y-4">
+                    {isRunning && (
+                      <Alert>
+                        <InfoIcon className="size-4" />
+                        <AlertDescription>
+                          Variants and placements are locked while the A/B test is running. Pause
+                          it to make changes.
+                        </AlertDescription>
+                      </Alert>
+                    )}
+                    <ExperimentMatrix projectId={project.id} />
+                  </div>
+                </TabsContent>
+
+                <EnterpriseAuditLogSlot
+                  entityId={experiment.id}
+                  entityType="experiment"
+                  projectId={project.id}
+                />
+              </div>
 
-            <EnterpriseAuditLogSlot
-              entityId={experiment.id}
-              entityType="experiment"
-              projectId={project.id}
-            />
+              <div>
+                <div className="lg:sticky lg:top-24">
+                  <ExperimentDetailProperties />
+                </div>
+              </div>
+            </div>
           </div>
-        </div>
-      </PageTabs>
-    </Page>
+
+          <ExperimentDetailActionBar />
+        </PageTabs>
+      </Page>
+    </ExperimentDraftProvider>
   );
 }
diff --git a/packages/core/src/domain/experiment/Experiment.ts b/packages/core/src/domain/experiment/Experiment.ts
index b43a0cc3f..62d67fb08 100644
--- a/packages/core/src/domain/experiment/Experiment.ts
+++ b/packages/core/src/domain/experiment/Experiment.ts
@@ -17,11 +17,6 @@ export class ExperimentVariantNotFoundError extends Schema.TaggedErrorClass<Expe
   "ExperimentVariantNotFoundError",
 )("ExperimentVariantNotFoundError", { variantId: Schema.String }) {}
 
-/** Experiment treatment row not found. */
-export class ExperimentTreatmentNotFoundError extends Schema.TaggedErrorClass<ExperimentTreatmentNotFoundError>(
-  "ExperimentTreatmentNotFoundError",
-)("ExperimentTreatmentNotFoundError", { treatmentId: Schema.String }) {}
-
 /**
  * A domain invariant was violated — bad variant weights, editing a locked
  * running experiment, a target-location conflict with another experiment, an
diff --git a/packages/core/src/services/experiments/ExperimentService.ts b/packages/core/src/services/experiments/ExperimentService.ts
index 9756c67a2..df47a10fe 100644
--- a/packages/core/src/services/experiments/ExperimentService.ts
+++ b/packages/core/src/services/experiments/ExperimentService.ts
@@ -2,6 +2,7 @@ import { Context, Effect, Layer, Schema } from "effect";
 
 import {
   type InsertExperiment,
+  type PaywallLocationTreatmentConfig,
   AuditLogAction,
   AuditLogEntityType,
   Db,
@@ -14,19 +15,13 @@ import {
   isNull,
   paywallLocationShowings,
   PaywallLocationShowingType,
+  ReleaseStatus,
 } from "@voidhash/db";
-import {
-  type PaywallLocationTreatmentConfig,
-  type TreatmentType,
-  compileVariantPayload,
-  decodeTreatmentConfig,
-  isTreatmentType,
-} from "@voidhash/rpc";
+import { compileVariantPayload } from "@voidhash/rpc";
 
 import { AuthSession } from "../../domain/auth/Auth.ts";
 import {
   ExperimentNotFoundError,
-  ExperimentTreatmentNotFoundError,
   ExperimentValidationError,
   ExperimentVariantNotFoundError,
 } from "../../domain/experiment/Experiment.ts";
@@ -47,12 +42,17 @@ export class ExperimentServiceError extends Schema.TaggedErrorClass<ExperimentSe
   "ExperimentServiceError",
 )("ExperimentServiceError", { cause: Schema.String }) {}
 
-/** A variant as supplied to `replaceVariants` (the arms + their weights). */
-interface VariantInput {
-  readonly key: string;
+/**
+ * A variant as supplied to `saveSetup`: the arm, its weight, and the paywall
+ * placements it serves. `id` is present for variants that already exist and
+ * absent for newly added ones.
+ */
+interface SaveVariantInput {
+  readonly id?: string;
   readonly name: string;
   readonly isControl: boolean;
   readonly weightBps: number;
+  readonly treatments: ReadonlyArray<PaywallLocationTreatmentConfig>;
 }
 
 const paywallLocationConfig = (config: unknown): PaywallLocationTreatmentConfig =>
@@ -117,8 +117,11 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
           arr.push({ treatmentType: t.treatmentType, config: t.config });
           treatmentsByVariant.set(t.variantId, arr);
         }
+        // Flag variants are keyed by the experiment variant's id — the one
+        // identifier that is stable across renames, so bucketed subjects stay
+        // in their arm no matter how the arm is relabelled.
         const variants = experiment.variants.map((v) => ({
-          key: v.key,
+          key: v.id,
           name: v.name,
           weightBps: v.weightBps,
           payload: compileVariantPayload(treatmentsByVariant.get(v.id) ?? []),
@@ -229,16 +232,14 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
               {
                 id: generateId("experimentVariant"),
                 experimentId,
-                key: "control",
-                name: "Control",
+                name: "Variant A",
                 isControl: true,
                 weightBps: 5000,
               },
               {
                 id: generateId("experimentVariant"),
                 experimentId,
-                key: "treatment",
-                name: "Treatment",
+                name: "Variant B",
                 isControl: false,
                 weightBps: 5000,
               },
@@ -317,7 +318,15 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
       (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
     );
 
-    const updateExperiment = Effect.fn("updateExperiment")(
+    /**
+     * The single write behind the detail page's Save Changes bar. Applies the
+     * staged scalar edits and — when `variants` is provided — replaces the
+     * whole setup matrix (arms, weights, and each arm's paywall placements) in
+     * one transaction, so a half-edited matrix can never be persisted.
+     * Omitted sections are left untouched. Field-level locks: metrics only
+     * change while the test is a draft; variants are frozen while it runs.
+     */
+    const saveSetup = Effect.fn("saveExperimentSetup")(
       function* (input: {
         readonly id: string;
         readonly name?: string;
@@ -325,6 +334,7 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
         readonly hypothesis?: string | null;
         readonly primaryMetricEventName?: string | null;
         readonly secondaryMetricEventNames?: ReadonlyArray<string> | null;
+        readonly variants?: ReadonlyArray<SaveVariantInput>;
       }) {
         const session = yield* AuthSession;
         const experiment = yield* loadExperiment(input.id);
@@ -342,10 +352,51 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
         if (changingMetrics && experiment.status !== ExperimentStatus.draft) {
           return yield* Effect.fail(
             new ExperimentValidationError({
-              message: "Metric definition can only be changed while the experiment is a draft",
+              message: "Metrics can only be changed while the A/B test is a draft",
             }),
           );
         }
+        if (input.variants && experiment.status === ExperimentStatus.running) {
+          return yield* Effect.fail(
+            new ExperimentValidationError({
+              message: "Variants and placements are locked while the A/B test is running",
+            }),
+          );
+        }
+        if (input.variants) {
+          const controls = input.variants.filter((v) => v.isControl);
+          if (controls.length !== 1) {
+            return yield* Effect.fail(
+              new ExperimentValidationError({ message: "Exactly one variant must be the control" }),
+            );
+          }
+          const totalWeight = input.variants.reduce((sum, v) => sum + v.weightBps, 0);
+          if (totalWeight !== 10000) {
+            return yield* Effect.fail(
+              new ExperimentValidationError({
+                message: `Variant weights must sum to 10000, got ${totalWeight}`,
+              }),
+            );
+          }
+          for (const v of input.variants) {
+            if (v.name.trim().length === 0) {
+              return yield* Effect.fail(
+                new ExperimentValidationError({ message: "Every variant needs a name" }),
+              );
+            }
+            const locationIds = new Set<string>();
+            for (const t of v.treatments) {
+              if (locationIds.has(t.paywallLocationId)) {
+                return yield* Effect.fail(
+                  new ExperimentValidationError({
+                    message: `Variant '${v.name}' has two paywalls for the same location`,
+                  }),
+                );
+              }
+              locationIds.add(t.paywallLocationId);
+            }
+          }
+        }
 
         const updates: Record<string, unknown> = { updatedByUserId: session?.user?.id ?? null };
         if (input.name !== undefined) updates.name = input.name;
@@ -358,118 +409,85 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
             ? [...input.secondaryMetricEventNames]
             : null;
 
-        yield* db.update(experiments).set(updates).where(eq(experiments.id, input.id));
-
-        yield* auditLog
-          .append({
-            projectId: experiment.projectId,
-            entityType: AuditLogEntityType.Experiment,
-            entityId: input.id,
-            action: AuditLogAction.Updated,
-            changes: { before: experiment, after: input },
-          })
-          .pipe(Effect.ignore);
-
-        return yield* loadExperimentWithRelations(input.id);
-      },
-      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
-    );
-
-    const replaceVariants = Effect.fn("replaceVariants")(
-      function* (input: {
-        readonly experimentId: string;
-        readonly variants: ReadonlyArray<VariantInput>;
-      }) {
-        const experiment = yield* loadExperiment(input.experimentId);
-        yield* checkProjectPermission(
-          experiment.projectId,
-          "project:all",
-          `Not authorized to edit experiment ${input.experimentId}`,
-        );
-        if (experiment.status === ExperimentStatus.running) {
-          return yield* Effect.fail(
-            new ExperimentValidationError({
-              message: "Variants and weights are locked while an experiment is running",
-            }),
-          );
-        }
-
-        const controls = input.variants.filter((v) => v.isControl);
-        if (controls.length !== 1) {
-          return yield* Effect.fail(
-            new ExperimentValidationError({ message: "Exactly one variant must be the control" }),
-          );
-        }
-        const totalWeight = input.variants.reduce((sum, v) => sum + v.weightBps, 0);
-        if (totalWeight !== 10000) {
-          return yield* Effect.fail(
-            new ExperimentValidationError({
-              message: `Variant weights must sum to 10000, got ${totalWeight}`,
-            }),
-          );
-        }
-        const keys = new Set<string>();
-        for (const v of input.variants) {
-          if (keys.has(v.key)) {
-            return yield* Effect.fail(
-              new ExperimentValidationError({ message: `Duplicate variant key '${v.key}'` }),
-            );
-          }
-          keys.add(v.key);
-        }
-
-        // Upsert by key so surviving variants keep their id (and their
-        // treatments' variantId FK stays valid); removed variants drop their
-        // treatments too.
         yield* db.transaction((tx) =>
           Effect.gen(function* () {
+            yield* tx.update(experiments).set(updates).where(eq(experiments.id, input.id));
+
+            if (!input.variants) {
+              return;
+            }
             const existing = yield* tx.query.experimentVariants.findMany({
-              where: { experimentId: input.experimentId, archivedAt: { isNull: true } },
+              where: { experimentId: input.id, archivedAt: { isNull: true } },
             });
-            const byKey = new Map(existing.map((v) => [v.key, v]));
-            const inputKeys = new Set(input.variants.map((v) => v.key));
+            const existingIds = new Set(existing.map((v) => v.id));
+            for (const v of input.variants) {
+              if (v.id && !existingIds.has(v.id)) {
+                return yield* Effect.fail(new ExperimentVariantNotFoundError({ variantId: v.id }));
+              }
+            }
 
+            // Upsert by id so surviving variants keep their identity (and the
+            // traffic already bucketed into them); removed variants disappear
+            // together with their placements.
+            const keptIds = new Set(
+              input.variants.flatMap((v) => (v.id !== undefined ? [v.id] : [])),
+            );
             for (const ex of existing) {
-              if (!inputKeys.has(ex.key)) {
-                yield* tx
-                  .delete(experimentTreatments)
-                  .where(eq(experimentTreatments.variantId, ex.id));
+              if (!keptIds.has(ex.id)) {
                 yield* tx.delete(experimentVariants).where(eq(experimentVariants.id, ex.id));
               }
             }
+            // Placements are replaced wholesale — the matrix is the full
+            // picture, so diffing row-by-row buys nothing.
+            yield* tx
+              .delete(experimentTreatments)
+              .where(eq(experimentTreatments.experimentId, input.id));
+
             for (const v of input.variants) {
-              const ex = byKey.get(v.key);
-              if (ex) {
+              let variantId = v.id;
+              if (variantId) {
                 yield* tx
                   .update(experimentVariants)
                   .set({ name: v.name, isControl: v.isControl, weightBps: v.weightBps })
-                  .where(eq(experimentVariants.id, ex.id));
+                  .where(eq(experimentVariants.id, variantId));
               } else {
+                variantId = generateId("experimentVariant");
                 yield* tx.insert(experimentVariants).values({
-                  id: generateId("experimentVariant"),
-                  experimentId: input.experimentId,
-                  key: v.key,
+                  id: variantId,
+                  experimentId: input.id,
                   name: v.name,
                   isControl: v.isControl,
                   weightBps: v.weightBps,
                 });
               }
+              for (const treatment of v.treatments) {
+                yield* tx.insert(experimentTreatments).values({
+                  id: generateId("experimentTreatment"),
+                  experimentId: input.id,
+                  variantId,
+                  treatmentType: "paywall_location",
+                  config: { ...treatment },
+                });
+              }
             }
           }),
         );
 
-        yield* syncVariantsToFlag(input.experimentId);
+        if (input.variants) {
+          yield* syncVariantsToFlag(input.id);
+        }
 
         yield* auditLog
           .append({
             projectId: experiment.projectId,
-            entityType: AuditLogEntityType.ExperimentVariant,
-            entityId: input.experimentId,
-            parentEntityId: input.experimentId,
+            entityType: AuditLogEntityType.Experiment,
+            entityId: input.id,
             action: AuditLogAction.Updated,
-            changes: { snapshot: { variants: input.variants } },
+            changes: { before: experiment, after: input },
           })
           .pipe(Effect.ignore);
+
+        return yield* loadExperimentWithRelations(input.id);
       },
       (effect) =>
         effect.pipe(
@@ -480,146 +498,6 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
         ),
     );
 
-    const upsertTreatment = Effect.fn("upsertTreatment")(
-      function* (input: {
-        readonly experimentId: string;
-        readonly variantId: string;
-        readonly treatmentType: string;
-        readonly config: unknown;
-      }) {
-        const experiment = yield* loadExperiment(input.experimentId);
-        yield* checkProjectPermission(
-          experiment.projectId,
-          "project:all",
-          `Not authorized to edit experiment ${input.experimentId}`,
-        );
-        if (experiment.status === ExperimentStatus.running) {
-          return yield* Effect.fail(
-            new ExperimentValidationError({
-              message: "Treatments are locked while an experiment is running",
-            }),
-          );
-        }
-        if (!isTreatmentType(input.treatmentType)) {
-          return yield* Effect.fail(
-            new ExperimentValidationError({
-              message: `Unknown treatment type '${input.treatmentType}'`,
-            }),
-          );
-        }
-        const variant = yield* db.query.experimentVariants.findFirst({
-          where: { id: input.variantId, experimentId: input.experimentId },
-        });
-        if (!variant) {
-          return yield* Effect.fail(
-            new ExperimentVariantNotFoundError({ variantId: input.variantId }),
-          );
-        }
-
-        const treatmentType: TreatmentType = input.treatmentType;
-        const decoded = yield* decodeTreatmentConfig(treatmentType, input.config).pipe(
-          Effect.mapError(
-            (e) => new ExperimentValidationError({ message: `Invalid treatment config: ${e}` }),
-          ),
-        );
-
-        // One treatment of each (variant, type, target) — for paywall_location
-        // the target is the location. Enforced here since the target lives in
-        // the jsonb config.
-        const targetKey =
-          treatmentType === "paywall_location"
-            ? paywallLocationConfig(decoded).paywallLocationId
-            : null;
-
-        const existingTreatments = yield* db.query.experimentTreatments.findMany({
-          where: {
-            experimentId: input.experimentId,
-            variantId: input.variantId,
-            treatmentType,
-            archivedAt: { isNull: true },
-          },
-        });
-        const match = existingTreatments.find(
-          (t) =>
-            targetKey === null || paywallLocationConfig(t.config).paywallLocationId === targetKey,
-        );
-
-        let treatmentId: string;
-        if (match) {
-          treatmentId = match.id;
-          yield* db
-            .update(experimentTreatments)
-            .set({ config: decoded })
-            .where(eq(experimentTreatments.id, match.id));
-        } else {
-          treatmentId = generateId("experimentTreatment");
-          yield* db.insert(experimentTreatments).values({
-            id: treatmentId,
-            experimentId: input.experimentId,
-            variantId: input.variantId,
-            treatmentType,
-            config: decoded,
-          });
-        }
-
-        yield* syncVariantsToFlag(input.experimentId);
-
-        yield* auditLog
-          .append({
-            projectId: experiment.projectId,
-            entityType: AuditLogEntityType.ExperimentTreatment,
-            entityId: treatmentId,
-            parentEntityId: input.experimentId,
-            action: AuditLogAction.Updated,
-            changes: { snapshot: { treatmentType, config: decoded } },
-          })
-          .pipe(Effect.ignore);
-
-        return { id: treatmentId };
-      },
-      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
-    );
-
-    const removeTreatment = Effect.fn("removeTreatment")(
-      function* (input: { readonly id: string }) {
-        const treatment = yield* db.query.experimentTreatments.findFirst({
-          where: { id: input.id },
-        });
-        if (!treatment) {
-          return yield* Effect.fail(
-            new ExperimentTreatmentNotFoundError({ treatmentId: input.id }),
-          );
-        }
-        const experiment = yield* loadExperiment(treatment.experimentId);
-        yield* checkProjectPermission(
-          experiment.projectId,
-          "project:all",
-          `Not authorized to edit experiment ${treatment.experimentId}`,
-        );
-        if (experiment.status === ExperimentStatus.running) {
-          return yield* Effect.fail(
-            new ExperimentValidationError({
-              message: "Treatments are locked while an experiment is running",
-            }),
-          );
-        }
-
-        yield* db.delete(experimentTreatments).where(eq(experimentTreatments.id, input.id));
-        yield* syncVariantsToFlag(treatment.experimentId);
-
-        yield* auditLog
-          .append({
-            projectId: experiment.projectId,
-            entityType: AuditLogEntityType.ExperimentTreatment,
-            entityId: input.id,
-            parentEntityId: treatment.experimentId,
-            action: AuditLogAction.Archived,
-          })
-          .pipe(Effect.ignore);
-      },
-      (effect) => effect.pipe(Effect.catchTags({ EffectDrizzleQueryError: toServiceError })),
-    );
-
     const startExperiment = Effect.fn("startExperiment")(
       function* (input: { readonly id: string }) {
         const session = yield* AuthSession;
@@ -639,6 +517,29 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
 
         const locationIds = targetLocationIds(experiment.treatments);
 
+        // Treatments follow a paywall's active published release, so a paywall
+        // that was never published would leave its cell dark — refuse to start
+        // until everything placed in the matrix is actually servable.
+        const paywallIds = new Set<string>();
+        for (const treatment of experiment.treatments) {
+          if (treatment.treatmentType === "paywall_location") {
+            paywallIds.add(paywallLocationConfig(treatment.config).paywallId);
+          }
+        }
+        for (const paywallId of paywallIds) {
+          const release = yield* db.query.paywallReleases.findFirst({
+            where: { paywallId, isActive: true, status: ReleaseStatus.released },
+          });
+          if (!release) {
+            const paywall = yield* db.query.paywalls.findFirst({ where: { id: paywallId } });
+            return yield* Effect.fail(
+              new ExperimentValidationError({
+                message: `Paywall "${paywall?.name ?? paywallId}" has no published version yet`,
+              }),
+            );
+          }
+        }
+
         // Mutual exclusion: refuse to start if any target location is already
         // running a DIFFERENT experiment. A plain paywall_release showing is
         // clobbered (this is the "launch experiment here" action).
@@ -789,7 +690,7 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
         // replace the experiment's featureFlag showing with a normal
         // paywall_release showing so no location is ever left dangling.
         const locationIds = targetLocationIds(experiment.treatments);
-        const releaseForLocation = (locationId: string) => {
+        const configForLocation = (locationId: string) => {
           const pick = (variantId: string | undefined) =>
             experiment.treatments.find(
               (t) =>
@@ -824,18 +725,33 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
                     isNull(paywallLocationShowings.endedAt),
                   ),
                 );
-              const release = releaseForLocation(locationId);
-              if (release) {
-                yield* tx.insert(paywallLocationShowings).values({
-                  id: generateId("paywallLocationShowing"),
-                  projectId: experiment.projectId,
-                  paywallLocationId: locationId,
-                  type: PaywallLocationShowingType.paywallRelease,
-                  paywallId: release.paywallId,
-                  paywallReleaseId: release.paywallReleaseId,
-                  featureFlagId: null,
-                  startedAt: now,
-                });
+              const config = configForLocation(locationId);
+              if (config) {
+                // Treatments name a paywall, not a release (legacy rows still
+                // pin one) — promote whatever its active published version is
+                // right now, or leave the location empty rather than pin
+                // something unpublished.
+                const releaseId =
+                  config.paywallReleaseId ??
+                  (yield* tx.query.paywallReleases.findFirst({
+                    where: {
+                      paywallId: config.paywallId,
+                      isActive: true,
+                      status: ReleaseStatus.released,
+                    },
+                  }))?.id;
+                if (releaseId) {
+                  yield* tx.insert(paywallLocationShowings).values({
+                    id: generateId("paywallLocationShowing"),
+                    projectId: experiment.projectId,
+                    paywallLocationId: locationId,
+                    type: PaywallLocationShowingType.paywallRelease,
+                    paywallId: config.paywallId,
+                    paywallReleaseId: releaseId,
+                    featureFlagId: null,
+                    startedAt: now,
+                  });
+                }
               }
             }
             yield* tx
@@ -982,7 +898,7 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
           assigned: result?.enabled ?? false,
           variantKey: result?.variantKey ?? null,
           payload: result?.payload ?? null,
-          controlVariantKey: control?.key ?? null,
+          controlVariantKey: control?.id ?? null,
           controlPayload,
         };
       },
@@ -997,12 +913,9 @@ export class ExperimentService extends Context.Service<ExperimentService>()("Exp
       getExperiment,
       listExperiments,
       pauseExperiment,
-      removeTreatment,
-      replaceVariants,
       restoreExperiment,
+      saveSetup,
       startExperiment,
-      updateExperiment,
-      upsertTreatment,
     } as const;
   }),
 }) {
diff --git a/packages/core/src/services/paywallLocations/PaywallLocationService.ts b/packages/core/src/services/paywallLocations/PaywallLocationService.ts
index f97493701..72f3406f8 100644
--- a/packages/core/src/services/paywallLocations/PaywallLocationService.ts
+++ b/packages/core/src/services/paywallLocations/PaywallLocationService.ts
@@ -699,22 +699,29 @@ export class PaywallLocationService extends Context.Service<PaywallLocationServi
             if (!assignment) {
               return null;
             }
-            const releaseIdFrom = (payload: unknown): string | undefined => {
+            const entryFrom = (
+              payload: unknown,
+            ): { readonly paywallId?: string; readonly paywallReleaseId?: string } | undefined => {
               const byLocation = (
                 payload as
-                  | { readonly byLocation?: Record<string, { readonly paywallReleaseId?: string }> }
+                  | {
+                      readonly byLocation?: Record<
+                        string,
+                        { readonly paywallId?: string; readonly paywallReleaseId?: string }
+                      >;
+                    }
                   | null
                   | undefined
               )?.byLocation;
-              return byLocation?.[location.id]?.paywallReleaseId;
+              return byLocation?.[location.id];
             };
 
             const enrolled = assignment.assigned && assignment.variantKey !== null;
-            let releaseId = enrolled ? releaseIdFrom(assignment.payload) : undefined;
+            let entry = enrolled ? entryFrom(assignment.payload) : undefined;
             // Only count a real assignment (control or treatment) as an exposure;
             // an unenrolled subject served the control fallback is NOT exposed.
             const exposure =
-              releaseId && enrolled
+              entry && enrolled
                 ? {
                     experimentId: assignment.experimentId,
                     variantKey: assignment.variantKey as string,
@@ -722,17 +729,32 @@ export class PaywallLocationService extends Context.Service<PaywallLocationServi
                     distinctId: input.distinctId ?? null,
                   }
                 : null;
-            if (!releaseId) {
-              releaseId = releaseIdFrom(assignment.controlPayload);
+            if (!entry) {
+              entry = entryFrom(assignment.controlPayload);
             }
-            if (!releaseId) {
+            if (!entry) {
               return null;
             }
 
-            const release = yield* db.query.paywallReleases.findFirst({
-              where: { id: releaseId },
-              with: { paywall: true },
-            });
+            // Treatments name a paywall and the serve path follows its active
+            // published release, so shipping a new version updates a running
+            // test too. `paywallReleaseId` appears only in payloads compiled
+            // before that change and stays pinned.
+            const release = entry.paywallReleaseId
+              ? yield* db.query.paywallReleases.findFirst({
+                  where: { id: entry.paywallReleaseId },
+                  with: { paywall: true },
+                })
+              : entry.paywallId
+                ? yield* db.query.paywallReleases.findFirst({
+                    where: {
+                      paywallId: entry.paywallId,
+                      isActive: true,
+                      status: ReleaseStatus.released,
+                    },
+                    with: { paywall: true },
+                  })
+                : undefined;
             if (!release || !release.paywall || release.paywall.projectId !== input.projectId) {
               return null;
             }
diff --git a/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts b/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
index b55841e7b..7fca520f9 100644
--- a/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
+++ b/packages/core/test/services/experiments/ExperimentService.authorization.integration.test.ts
@@ -67,16 +67,14 @@ test(
         experimentId,
         id: controlId,
         isControl: true,
-        key: "control",
-        name: "Control",
+        name: "Variant A",
         weightBps: 5_000,
       },
       {
         experimentId,
         id: `it_experiment_variant_treatment_${suffix}`,
         isControl: false,
-        key: "treatment",
-        name: "Treatment",
+        name: "Variant B",
         weightBps: 5_000,
       },
     ]);
@@ -106,26 +104,25 @@ test(
     );
     yield* expectForbidden(service.listExperiments({ projectId: CoreTestFixture.projectId }));
     yield* expectForbidden(service.getExperiment({ id: experimentId }));
-    yield* expectForbidden(service.updateExperiment({ id: experimentId, name: "Compromised" }));
+    yield* expectForbidden(service.saveSetup({ id: experimentId, name: "Compromised" }));
     yield* expectForbidden(
-      service.replaceVariants({
-        experimentId,
-        variants: [{ isControl: true, key: "control", name: "Control", weightBps: 10_000 }],
-      }),
-    );
-    yield* expectForbidden(
-      service.upsertTreatment({
-        config: {
-          paywallId: "attacker-paywall",
-          paywallLocationId: "attacker-location",
-          paywallReleaseId: "attacker-release",
-        },
-        experimentId,
-        treatmentType: "paywall_location",
-        variantId: controlId,
+      service.saveSetup({
+        id: experimentId,
+        variants: [
+          {
+            isControl: true,
+            name: "Variant A",
+            treatments: [
+              {
+                paywallId: "attacker-paywall",
+                paywallLocationId: "attacker-location",
+              },
+            ],
+            weightBps: 10_000,
+          },
+        ],
       }),
     );
-    yield* expectForbidden(service.removeTreatment({ id: treatmentId }));
     yield* expectForbidden(service.startExperiment({ id: experimentId }));
     yield* expectForbidden(service.pauseExperiment({ id: experimentId }));
     yield* expectForbidden(service.concludeExperiment({ id: experimentId }));
diff --git a/packages/db/src/alchemy-migrations/20260724180000_drop_experiment_variant_key/migration.sql b/packages/db/src/alchemy-migrations/20260724180000_drop_experiment_variant_key/migration.sql
new file mode 100644
index 000000000..953a50af7
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260724180000_drop_experiment_variant_key/migration.sql
@@ -0,0 +1,5 @@
+-- Variant keys were never customer-facing; the backing flag's variant rows
+-- are keyed by the experiment variant's id instead.
+DROP INDEX IF EXISTS "experiment_variant_experiment_key_idx";
+
+ALTER TABLE "experiment_variant" DROP COLUMN IF EXISTS "key";
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index 4a98627cf..002c94df7 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -2553,15 +2553,15 @@ export const experiments = pgTable(
 
 /**
  * The arms of an experiment. This is the source of truth for variant identity
- * and weights; it is synced 1:1 (by `key`) into `feature_flag_variant` rows on
- * the backing flag so the existing deterministic bucketing engine assigns them.
+ * and weights; it is synced into `feature_flag_variant` rows on the backing
+ * flag (keyed by this row's id) so the existing deterministic bucketing engine
+ * assigns them.
  */
 export const experimentVariants = pgTable(
   "experiment_variant",
   {
     id: varchar("id", { length: 255 }).primaryKey(),
     experimentId: varchar("experiment_id", { length: 255 }).notNull(),
-    key: varchar("key", { length: 255 }).notNull(),
     name: varchar("name", { length: 255 }).notNull(),
     isControl: boolean("is_control").notNull().default(false),
     weightBps: integer("weight_bps").notNull().default(0),
@@ -2571,18 +2571,18 @@ export const experimentVariants = pgTable(
       () => new Date(),
     ),
   },
-  (table) => [
-    uniqueIndex("experiment_variant_experiment_key_idx").on(table.experimentId, table.key),
-    index("experiment_variant_experiment_id_idx").on(table.experimentId),
-  ],
+  (table) => [index("experiment_variant_experiment_id_idx").on(table.experimentId)],
 );
 
-/** Config for a `paywall_location` treatment: which paywall release to serve at
- * a given location for the owning variant. */
+/** Config for a `paywall_location` treatment: which paywall to serve at a
+ * given location for the owning variant. The paywall's active published
+ * version is resolved at serve time — a treatment is never pinned to one
+ * release. `paywallReleaseId` survives only on rows written before that
+ * change. */
 export interface PaywallLocationTreatmentConfig {
   readonly paywallLocationId: string;
   readonly paywallId: string;
-  readonly paywallReleaseId: string;
+  readonly paywallReleaseId?: string;
 }
 
 /**
diff --git a/packages/rpc/src/errors/Experiment.ts b/packages/rpc/src/errors/Experiment.ts
index b6f0fc20e..b61942318 100644
--- a/packages/rpc/src/errors/Experiment.ts
+++ b/packages/rpc/src/errors/Experiment.ts
@@ -16,11 +16,6 @@ export class RpcExperimentVariantNotFoundError extends Schema.TaggedErrorClass<R
   "RpcExperimentVariantNotFoundError",
 )("Rpc/ExperimentVariantNotFoundError", { message: Schema.String }) {}
 
-/** Experiment treatment row not found. */
-export class RpcExperimentTreatmentNotFoundError extends Schema.TaggedErrorClass<RpcExperimentTreatmentNotFoundError>(
-  "RpcExperimentTreatmentNotFoundError",
-)("Rpc/ExperimentTreatmentNotFoundError", { message: Schema.String }) {}
-
 /** A domain invariant was violated (weights, locked running experiment, target conflict, …). */
 export class RpcExperimentValidationError extends Schema.TaggedErrorClass<RpcExperimentValidationError>(
   "RpcExperimentValidationError",
diff --git a/packages/rpc/src/experimentTreatmentTypes.ts b/packages/rpc/src/experimentTreatmentTypes.ts
index 9c31dc613..be4ca7eb0 100644
--- a/packages/rpc/src/experimentTreatmentTypes.ts
+++ b/packages/rpc/src/experimentTreatmentTypes.ts
@@ -20,24 +20,33 @@ import { Schema } from "effect";
 /** Platform surfaces an experiment treatment can bind to. Grows over time. */
 export type ExperimentSurface = "paywall_location" | "notification_flow" | "automation";
 
-/** Config for a `paywall_location` treatment: which paywall release to serve at
- * a given location for the owning variant. */
+/**
+ * Config for a `paywall_location` treatment: which paywall to serve at a given
+ * location for the owning variant. Deliberately names the paywall, not a
+ * release — the treatment follows the paywall's active published version, so
+ * shipping a new version updates the running test like it updates every other
+ * placement.
+ */
 export const PaywallLocationTreatmentConfigSchema = Schema.Struct({
   paywallLocationId: Schema.String,
   paywallId: Schema.String,
-  paywallReleaseId: Schema.String,
 });
 export type PaywallLocationTreatmentConfig = typeof PaywallLocationTreatmentConfigSchema.Type;
 
 /**
  * The runtime payload compiled onto a backing feature-flag variant and returned
  * verbatim by `evaluateFlagsBatch`. Keyed by location so ONE variant assignment
- * can serve a different paywall release per location (cross-location
- * consistency for a multi-location experiment). Future surfaces add sibling
- * keys (e.g. `notificationFlowId`).
+ * can serve a different paywall per location (cross-location consistency for a
+ * multi-location experiment). Future surfaces add sibling keys (e.g.
+ * `notificationFlowId`). `paywallReleaseId` only appears in payloads compiled
+ * before treatments switched to tracking the active release — the serve path
+ * still honours it there.
  */
 export interface ExperimentVariantPayload {
-  readonly byLocation?: Record<string, { readonly paywallReleaseId: string }>;
+  readonly byLocation?: Record<
+    string,
+    { readonly paywallId?: string; readonly paywallReleaseId?: string }
+  >;
 }
 
 const paywallLocationTreatment = {
@@ -49,7 +58,7 @@ const paywallLocationTreatment = {
     configs: readonly PaywallLocationTreatmentConfig[],
   ): Partial<ExperimentVariantPayload> => ({
     byLocation: Object.fromEntries(
-      configs.map((c) => [c.paywallLocationId, { paywallReleaseId: c.paywallReleaseId }]),
+      configs.map((c) => [c.paywallLocationId, { paywallId: c.paywallId }]),
     ),
   }),
 } as const;
diff --git a/packages/rpc/src/groups/ExperimentRpcsDef.ts b/packages/rpc/src/groups/ExperimentRpcsDef.ts
index f8553d067..cdc594b1e 100644
--- a/packages/rpc/src/groups/ExperimentRpcsDef.ts
+++ b/packages/rpc/src/groups/ExperimentRpcsDef.ts
@@ -5,7 +5,6 @@ import { RpcActionForbiddenError } from "../errors/common.ts";
 import {
   RpcExperimentNotFoundError,
   RpcExperimentServiceError,
-  RpcExperimentTreatmentNotFoundError,
   RpcExperimentValidationError,
   RpcExperimentVariantNotFoundError,
 } from "../errors/Experiment.ts";
@@ -17,7 +16,6 @@ export const RpcExperimentVariant = Schema.Struct({
   experimentId: Schema.String,
   id: Schema.String,
   isControl: Schema.Boolean,
-  key: Schema.String,
   name: Schema.String,
   updatedAt: Schema.NullOr(Schema.Date),
   weightBps: Schema.Number,
@@ -93,10 +91,26 @@ export const RpcExperimentResults = Schema.Struct({
   variants: Schema.Array(RpcExperimentVariantResult),
 });
 
-const RpcVariantInput = Schema.Struct({
+/**
+ * One paywall-location treatment for a variant: what to show where. Only the
+ * paywall is named — the serve path always follows its active published
+ * version.
+ */
+const RpcVariantTreatmentInput = Schema.Struct({
+  paywallId: Schema.String,
+  paywallLocationId: Schema.String,
+});
+
+/**
+ * A variant as edited in the setup matrix. `id` is present for variants that
+ * already exist (so they keep their identity — and their share of bucketed
+ * traffic — across saves) and absent for newly added ones.
+ */
+const RpcSaveVariantInput = Schema.Struct({
+  id: Schema.optional(Schema.String),
   isControl: Schema.Boolean,
-  key: Schema.String,
   name: Schema.String,
+  treatments: Schema.Array(RpcVariantTreatmentInput),
   weightBps: Schema.Number,
 });
 
@@ -138,13 +152,11 @@ export class ExperimentRpcsDef extends RpcGroup.make(
     },
     success: Schema.Struct({ id: Schema.String }),
   }),
-  Rpc.make("UpdateExperiment", {
-    error: Schema.Union([
-      RpcExperimentServiceError,
-      RpcExperimentNotFoundError,
-      RpcExperimentValidationError,
-      RpcActionForbiddenError,
-    ]),
+  // The one write behind the detail page's Save Changes bar: scalars, variants
+  // and their placements land together, so a half-edited matrix can never be
+  // persisted. Omitted sections are left untouched.
+  Rpc.make("SaveExperimentSetup", {
+    error: editError,
     payload: {
       description: Schema.optional(Schema.NullOr(Schema.String)),
       hypothesis: Schema.optional(Schema.NullOr(Schema.String)),
@@ -152,38 +164,10 @@ export class ExperimentRpcsDef extends RpcGroup.make(
       name: Schema.optional(Schema.String),
       primaryMetricEventName: Schema.optional(Schema.NullOr(Schema.String)),
       secondaryMetricEventNames: Schema.optional(Schema.NullOr(Schema.Array(Schema.String))),
+      variants: Schema.optional(Schema.Array(RpcSaveVariantInput)),
     },
     success: RpcExperiment,
   }),
-  Rpc.make("ReplaceExperimentVariants", {
-    error: editError,
-    payload: {
-      experimentId: Schema.String,
-      variants: Schema.Array(RpcVariantInput),
-    },
-    success: Schema.Void,
-  }),
-  Rpc.make("UpsertExperimentTreatment", {
-    error: editError,
-    payload: {
-      config: Schema.Unknown,
-      experimentId: Schema.String,
-      treatmentType: Schema.String,
-      variantId: Schema.String,
-    },
-    success: Schema.Struct({ id: Schema.String }),
-  }),
-  Rpc.make("RemoveExperimentTreatment", {
-    error: Schema.Union([
-      RpcExperimentServiceError,
-      RpcExperimentTreatmentNotFoundError,
-      RpcExperimentValidationError,
-      RpcExperimentNotFoundError,
-      RpcActionForbiddenError,
-    ]),
-    payload: { id: Schema.String },
-    success: Schema.Void,
-  }),
   Rpc.make("StartExperiment", {
     error: Schema.Union([
       RpcExperimentServiceError,

From e3b0915630a54a1daeb8ab23e9ef868073b38f7a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Sun, 26 Jul 2026 16:25:48 +0200
Subject: [PATCH 121/129] feat: filter out internal feature flags

---
 .../featureFlags/FeatureFlagService.ts        |  1 +
 .../FeatureFlagService.integration.test.ts    | 26 +++++++++++++++++++
 2 files changed, 27 insertions(+)

diff --git a/packages/core/src/services/featureFlags/FeatureFlagService.ts b/packages/core/src/services/featureFlags/FeatureFlagService.ts
index 21a52932e..072d5ea1a 100644
--- a/packages/core/src/services/featureFlags/FeatureFlagService.ts
+++ b/packages/core/src/services/featureFlags/FeatureFlagService.ts
@@ -673,6 +673,7 @@ export class FeatureFlagService extends Context.Service<FeatureFlagService>()(
           const results = yield* db.query.featureFlags.findMany({
             where: {
               projectId: input.projectId,
+              internal: false,
               ...(includeArchived ? {} : { archivedAt: { isNull: true } }),
             },
             with: {
diff --git a/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts b/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
index 428d5ca7c..0d829295f 100644
--- a/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
+++ b/packages/core/test/services/featureFlags/FeatureFlagService.integration.test.ts
@@ -931,6 +931,32 @@ describe("FeatureFlagService.listFlags", () => {
     ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
   );
 
+  test(
+    "excludes internal flags, which back A/B tests rather than the flags product",
+    withFlagCleanup((track) =>
+      Effect.gen(function* () {
+        const svc = yield* FeatureFlagService;
+        const customerKey = uniqueKey("list-customer");
+        const internalKey = uniqueKey("list-internal");
+
+        const customer = yield* svc.createFlag({ projectId, key: customerKey, name: "Customer" });
+        track(customer.id);
+        const internal = yield* svc.createInternalFlag({
+          projectId,
+          key: internalKey,
+          name: "Internal",
+          ownerType: "experiment",
+          ownerId: `it_experiment_${internalKey}`,
+        });
+        track(internal.id);
+
+        const list = yield* svc.listFlags({ projectId, includeArchived: true });
+        expect(list.some((f) => f.key === customerKey)).toBe(true);
+        expect(list.some((f) => f.key === internalKey)).toBe(false);
+      }),
+    ).pipe(Effect.provide(FeatureFlagService.layer), CoreAuthSession.authenticate()),
+  );
+
   test(
     "returns each flag with a variantCount of its unarchived variants",
     withFlagCleanup((track) =>

From 09691926800104f692e3feae51c0d856cdb4b4ef Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 16:11:20 +0200
Subject: [PATCH 122/129] feat: landing page redesign

---
 apps/www/scripts/docs-preview/index.html      |   12 +
 apps/www/scripts/docs-preview/main.tsx        |  207 ++++
 apps/www/scripts/docs-preview/vite.config.ts  |   16 +
 apps/www/scripts/landing-preview/index.html   |   12 +
 apps/www/scripts/landing-preview/main.tsx     |    6 +
 .../scripts/landing-preview/vite.config.ts    |   16 +
 apps/www/scripts/pricing-preview/index.html   |   12 +
 apps/www/scripts/pricing-preview/main.tsx     |    6 +
 .../scripts/pricing-preview/vite.config.ts    |   16 +
 .../components/lenticular-refraction-pass.tsx |  136 +++
 .../features/auth/components/auth-layout.tsx  |   20 +-
 .../components/auth-lenticular-background.tsx |   13 +
 .../features/design/components/nav-bar.tsx    |    2 +-
 .../docs/components/navigation-menu.mdx       |    5 +-
 .../src/features/design/styles/globals.css    |    2 +-
 .../features/docs/components/layout/docs.tsx  |  309 +++--
 .../features/docs/components/layout/page.tsx  |  100 +-
 .../src/features/docs/components/nav-bar.tsx  |   87 +-
 .../features/docs/components/theme-toggle.tsx |    2 +-
 apps/www/src/features/docs/styles/globals.css |  140 ++-
 .../lib/tanstack-query/organizations.ts       |   17 +-
 .../translation-mode/context-preview.tsx      |    4 +-
 .../studio/waitlist/waitlist-gate.tsx         |   56 +
 .../www/src/features/www/hero/hero-shader.tsx |  368 ++++++
 .../features/www/landing/asteroids/engine.ts  | 1088 +++++++++++++++++
 .../features/www/landing/asteroids/frame.ts   |    7 +
 .../features/www/landing/asteroids/game.tsx   |  384 ++++++
 .../features/www/landing/asteroids/post.ts    |  209 ++++
 .../src/features/www/landing/landing-page.tsx |   44 +
 apps/www/src/features/www/landing/motion.tsx  |  236 ++++
 .../paywall-build/agent-transcript.tsx        |  162 +++
 .../landing/paywall-build/lenscal-paywall.tsx |  356 ++++++
 .../landing/paywall-build/paywall-build.tsx   |   51 +
 .../www/landing/paywall-build/transcript.ts   |  125 ++
 .../paywall-build/use-transcript-playback.ts  |  114 ++
 .../paywall-build/working-indicator.tsx       |  147 +++
 .../www/landing/sections/analytics.tsx        |  531 ++++++++
 .../www/landing/sections/asteroids.tsx        |  146 +++
 .../src/features/www/landing/sections/crm.tsx |  331 +++++
 .../www/landing/sections/developers.tsx       |  168 +++
 .../features/www/landing/sections/divider.tsx |    8 +
 .../www/landing/sections/experimentation.tsx  |  199 +++
 .../features/www/landing/sections/footer.tsx  |  132 ++
 .../www/landing/sections/get-started.tsx      |  116 ++
 .../features/www/landing/sections/hero.tsx    |   52 +
 .../features/www/landing/sections/navbar.tsx  |  213 ++++
 .../www/landing/sections/paywalls.tsx         |  577 +++++++++
 .../features/www/landing/sections/problem.tsx |   19 +
 apps/www/src/features/www/landing/shared.tsx  |  111 ++
 .../src/features/www/navbar/navigation.tsx    |    2 +-
 apps/www/src/features/www/pricing/plans.ts    |  237 ++++
 .../src/features/www/pricing/pricing-model.ts |  138 +++
 .../src/features/www/pricing/pricing-page.tsx |   35 +
 .../www/pricing/sections/calculator.tsx       |  259 ++++
 .../src/features/www/pricing/sections/faq.tsx |   34 +
 .../features/www/pricing/sections/hero.tsx    |   24 +
 .../features/www/pricing/sections/matrix.tsx  |  111 ++
 .../features/www/pricing/sections/plans.tsx   |   83 ++
 .../www/pricing/sections/self-host.tsx        |   26 +
 apps/www/src/lib/code-theme.ts                |   20 +-
 apps/www/src/lib/waitlist.ts                  |   37 +
 apps/www/src/routeTree.gen.ts                 |   43 +
 apps/www/src/routes/_marketing/index.tsx      |   12 +-
 apps/www/src/routes/_marketing/pricing.tsx    |   11 +
 apps/www/src/routes/_marketing/route.tsx      |    5 +-
 apps/www/src/routes/auth/login.tsx            |   21 +-
 apps/www/src/routes/auth/logout.tsx           |    8 +-
 apps/www/src/routes/auth/sign-up.tsx          |   29 +-
 .../routes/studio/_authenticated/index.tsx    |    8 +-
 .../routes/studio/_authenticated/route.tsx    |    5 +-
 .../routes/studio/_authenticated/waitlist.tsx |   76 ++
 apps/www/src/start.ts                         |   32 +
 apps/www/src/styles/globals.css               |    3 +-
 .../migration.sql                             |   16 +
 packages/rpc/src/internalFeatureFlags.ts      |   12 +
 packages/ui/components/ui/navigation-menu.tsx |  169 ++-
 packages/ui/styles/brand-theme.css            |   24 +-
 77 files changed, 8193 insertions(+), 377 deletions(-)
 create mode 100644 apps/www/scripts/docs-preview/index.html
 create mode 100644 apps/www/scripts/docs-preview/main.tsx
 create mode 100644 apps/www/scripts/docs-preview/vite.config.ts
 create mode 100644 apps/www/scripts/landing-preview/index.html
 create mode 100644 apps/www/scripts/landing-preview/main.tsx
 create mode 100644 apps/www/scripts/landing-preview/vite.config.ts
 create mode 100644 apps/www/scripts/pricing-preview/index.html
 create mode 100644 apps/www/scripts/pricing-preview/main.tsx
 create mode 100644 apps/www/scripts/pricing-preview/vite.config.ts
 create mode 100644 apps/www/src/components/lenticular-refraction-pass.tsx
 create mode 100644 apps/www/src/features/auth/components/auth-lenticular-background.tsx
 create mode 100644 apps/www/src/features/studio/waitlist/waitlist-gate.tsx
 create mode 100644 apps/www/src/features/www/hero/hero-shader.tsx
 create mode 100644 apps/www/src/features/www/landing/asteroids/engine.ts
 create mode 100644 apps/www/src/features/www/landing/asteroids/frame.ts
 create mode 100644 apps/www/src/features/www/landing/asteroids/game.tsx
 create mode 100644 apps/www/src/features/www/landing/asteroids/post.ts
 create mode 100644 apps/www/src/features/www/landing/landing-page.tsx
 create mode 100644 apps/www/src/features/www/landing/motion.tsx
 create mode 100644 apps/www/src/features/www/landing/paywall-build/agent-transcript.tsx
 create mode 100644 apps/www/src/features/www/landing/paywall-build/lenscal-paywall.tsx
 create mode 100644 apps/www/src/features/www/landing/paywall-build/paywall-build.tsx
 create mode 100644 apps/www/src/features/www/landing/paywall-build/transcript.ts
 create mode 100644 apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts
 create mode 100644 apps/www/src/features/www/landing/paywall-build/working-indicator.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/analytics.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/asteroids.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/crm.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/developers.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/divider.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/experimentation.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/footer.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/get-started.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/hero.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/navbar.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/paywalls.tsx
 create mode 100644 apps/www/src/features/www/landing/sections/problem.tsx
 create mode 100644 apps/www/src/features/www/landing/shared.tsx
 create mode 100644 apps/www/src/features/www/pricing/plans.ts
 create mode 100644 apps/www/src/features/www/pricing/pricing-model.ts
 create mode 100644 apps/www/src/features/www/pricing/pricing-page.tsx
 create mode 100644 apps/www/src/features/www/pricing/sections/calculator.tsx
 create mode 100644 apps/www/src/features/www/pricing/sections/faq.tsx
 create mode 100644 apps/www/src/features/www/pricing/sections/hero.tsx
 create mode 100644 apps/www/src/features/www/pricing/sections/matrix.tsx
 create mode 100644 apps/www/src/features/www/pricing/sections/plans.tsx
 create mode 100644 apps/www/src/features/www/pricing/sections/self-host.tsx
 create mode 100644 apps/www/src/lib/waitlist.ts
 create mode 100644 apps/www/src/routes/_marketing/pricing.tsx
 create mode 100644 apps/www/src/routes/studio/_authenticated/waitlist.tsx
 create mode 100644 packages/db/src/alchemy-migrations/20260727120000_grandfather_waitlist_organizations/migration.sql

diff --git a/apps/www/scripts/docs-preview/index.html b/apps/www/scripts/docs-preview/index.html
new file mode 100644
index 000000000..4114aea95
--- /dev/null
+++ b/apps/www/scripts/docs-preview/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Docs preview</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/www/scripts/docs-preview/main.tsx b/apps/www/scripts/docs-preview/main.tsx
new file mode 100644
index 000000000..a813747e7
--- /dev/null
+++ b/apps/www/scripts/docs-preview/main.tsx
@@ -0,0 +1,207 @@
+import type * as PageTree from "fumadocs-core/page-tree";
+import { FrameworkProvider } from "fumadocs-core/framework";
+import { Callout } from "fumadocs-ui/components/callout";
+import { CodeBlock, Pre } from "fumadocs-ui/components/codeblock";
+import { Step, Steps } from "fumadocs-ui/components/steps";
+import { Tab, Tabs } from "fumadocs-ui/components/tabs";
+import { RootProvider } from "fumadocs-ui/provider/base";
+import { type ReactNode, useState } from "react";
+import { createRoot } from "react-dom/client";
+
+import "../../src/styles/globals.css";
+import { DocsLayout } from "../../src/features/docs/components/layout/docs";
+import {
+  DocsBody,
+  DocsDescription,
+  DocsPage,
+  DocsTitle,
+} from "../../src/features/docs/components/layout/page";
+
+const page = (name: string, url: string): PageTree.Item => ({ name, type: "page", url });
+const separator = (name: string): PageTree.Separator => ({ name, type: "separator" });
+
+/** Stand-in for the generated fumadocs tree, shaped like the real docs content. */
+const TREE: PageTree.Root = {
+  name: "Docs",
+  type: "root",
+  children: [
+    page("Introduction", "/docs/introduction"),
+    page("Installation", "/docs/installation"),
+    page("Basic usage", "/docs/basic-usage"),
+    separator("Platform"),
+    {
+      name: "React Native",
+      type: "folder",
+      index: page("Overview", "/docs/react-native"),
+      children: [
+        page("Quickstart", "/docs/react-native/quickstart"),
+        separator("Paywalls"),
+        page("Rendering a paywall", "/docs/react-native/paywalls/rendering"),
+        page("Placements", "/docs/react-native/paywalls/placements"),
+      ],
+    },
+    page("CLI", "/docs/cli"),
+    page("MCP server", "/docs/mcp"),
+    separator("Reference"),
+    page("SDKs and APIs", "/docs/sdks-and-apis"),
+    {
+      name: "Guides",
+      type: "folder",
+      index: page("All guides", "/docs/guides"),
+      children: [page("App Store Connect", "/docs/guides/app-store-connect")],
+    },
+    {
+      name: "API",
+      type: "folder",
+      index: page("Overview", "/docs/api/overview"),
+      children: [
+        page("Authentication", "/docs/api/authentication"),
+        page("Persons", "/docs/api/persons"),
+        page("Webhooks", "/docs/api/webhooks"),
+      ],
+    },
+  ],
+};
+
+const TOC = [
+  { depth: 2, title: "Install the SDK", url: "#install-the-sdk" },
+  { depth: 2, title: "Configure your project", url: "#configure-your-project" },
+  { depth: 3, title: "Environment variables", url: "#environment-variables" },
+  { depth: 3, title: "Native modules", url: "#native-modules" },
+  { depth: 2, title: "Render your first paywall", url: "#render-your-first-paywall" },
+  { depth: 2, title: "Next steps", url: "#next-steps" },
+];
+
+function Sample() {
+  return (
+    <DocsPage toc={TOC}>
+      <DocsTitle>Installation</DocsTitle>
+      <DocsDescription>
+        Add the Voidhash SDK to your React Native app and connect it to a project.
+      </DocsDescription>
+      <DocsBody>
+        <p>
+          Voidhash ships a single universal SDK for React Native. It bundles paywall rendering,
+          entitlement checks, analytics capture and remote configuration, so you only install one
+          package regardless of which parts of the platform you use.
+        </p>
+        <h2 id="install-the-sdk">Install the SDK</h2>
+        <p>
+          Install the package with your package manager of choice. The SDK requires React Native
+          0.76 or newer and Expo SDK 52 or newer.
+        </p>
+        <pre>
+          <code>pnpm add @voidhash/react-native</code>
+        </pre>
+        <h2 id="configure-your-project">Configure your project</h2>
+        <p>
+          Wrap your application in the provider and pass the publishable key for the project you
+          want to target. Keys are scoped per project and per environment.
+        </p>
+        <h3 id="environment-variables">Environment variables</h3>
+        <table>
+          <thead>
+            <tr>
+              <th>Variable</th>
+              <th>Required</th>
+              <th>Description</th>
+            </tr>
+          </thead>
+          <tbody>
+            <tr>
+              <td>
+                <code>VOIDHASH_PUBLISHABLE_KEY</code>
+              </td>
+              <td>Yes</td>
+              <td>Identifies the project the client talks to.</td>
+            </tr>
+            <tr>
+              <td>
+                <code>VOIDHASH_HOST</code>
+              </td>
+              <td>No</td>
+              <td>Override for self-hosted deployments.</td>
+            </tr>
+          </tbody>
+        </table>
+        <h3 id="native-modules">Native modules</h3>
+        <ul>
+          <li>Run a native rebuild after installing — the SDK links StoreKit and Billing.</li>
+          <li>Expo Go is not supported; use a development build.</li>
+          <li>
+            See the <a href="#next-steps">development build guide</a> for the full setup.
+          </li>
+        </ul>
+        <h2 id="render-your-first-paywall">Render your first paywall</h2>
+        <p>
+          Paywalls are addressed by placement, not by id, so you can swap the paywall shown at a
+          placement from the dashboard without shipping an app update.
+        </p>
+        <blockquote>
+          Placements are resolved server-side and cached locally, so the first render after a cold
+          start is instant.
+        </blockquote>
+        <Callout title="Development builds">
+          Expo Go cannot load the native module. Create a development build before continuing.
+        </Callout>
+        <CodeBlock lang="ts">
+          <Pre>{`import { VoidhashProvider } from "@voidhash/react-native";\n\nexport default function App() {\n  return <VoidhashProvider publishableKey={KEY}>{children}</VoidhashProvider>;\n}`}</Pre>
+        </CodeBlock>
+        <Tabs items={["npm", "pnpm", "bun"]}>
+          <Tab value="npm">npm install @voidhash/react-native</Tab>
+          <Tab value="pnpm">pnpm add @voidhash/react-native</Tab>
+          <Tab value="bun">bun add @voidhash/react-native</Tab>
+        </Tabs>
+        <h2 id="next-steps">Next steps</h2>
+        <Steps>
+          <Step>
+            <h3>Create a paywall</h3>
+            <p>Design it in the dashboard, then publish it to a placement.</p>
+          </Step>
+          <Step>
+            <h3>Wire up the placement</h3>
+            <p>Point your app at the placement key and ship.</p>
+          </Step>
+        </Steps>
+        <p>Once the SDK is installed, continue with the quickstart to publish your first paywall.</p>
+      </DocsBody>
+    </DocsPage>
+  );
+}
+
+function Preview() {
+  const [pathname, setPathname] = useState("/docs/installation");
+
+  return (
+    <FrameworkProvider
+      Link={({ href, children, ...props }: { href?: string; children?: ReactNode }) => (
+        <a
+          {...props}
+          href={href ?? "#"}
+          onClick={(event) => {
+            event.preventDefault();
+            if (href) {
+              setPathname(href);
+            }
+          }}
+        >
+          {children}
+        </a>
+      )}
+      usePathname={() => pathname}
+      useParams={() => ({})}
+      useRouter={() => ({
+        push: setPathname,
+        refresh: () => {},
+      })}
+    >
+      <RootProvider theme={{ defaultTheme: "dark" }}>
+        <DocsLayout tree={TREE}>
+          <Sample />
+        </DocsLayout>
+      </RootProvider>
+    </FrameworkProvider>
+  );
+}
+
+createRoot(document.getElementById("root")!).render(<Preview />);
diff --git a/apps/www/scripts/docs-preview/vite.config.ts b/apps/www/scripts/docs-preview/vite.config.ts
new file mode 100644
index 000000000..653db6090
--- /dev/null
+++ b/apps/www/scripts/docs-preview/vite.config.ts
@@ -0,0 +1,16 @@
+import tailwindcss from "@tailwindcss/vite";
+import viteReact from "@vitejs/plugin-react";
+import { fileURLToPath } from "node:url";
+import { defineConfig } from "vite";
+
+export default defineConfig({
+  root: fileURLToPath(new URL(".", import.meta.url)),
+  plugins: [tailwindcss(), viteReact()],
+  resolve: {
+    alias: {
+      "@": fileURLToPath(new URL("../../src", import.meta.url)),
+    },
+    dedupe: ["react", "react-dom"],
+  },
+  server: { port: 5198 },
+});
diff --git a/apps/www/scripts/landing-preview/index.html b/apps/www/scripts/landing-preview/index.html
new file mode 100644
index 000000000..5bc25a487
--- /dev/null
+++ b/apps/www/scripts/landing-preview/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Landing preview</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/www/scripts/landing-preview/main.tsx b/apps/www/scripts/landing-preview/main.tsx
new file mode 100644
index 000000000..64da5171e
--- /dev/null
+++ b/apps/www/scripts/landing-preview/main.tsx
@@ -0,0 +1,6 @@
+import { createRoot } from "react-dom/client";
+
+import "../../src/styles/globals.css";
+import { LandingPage } from "../../src/features/www/landing/landing-page";
+
+createRoot(document.getElementById("root")!).render(<LandingPage />);
diff --git a/apps/www/scripts/landing-preview/vite.config.ts b/apps/www/scripts/landing-preview/vite.config.ts
new file mode 100644
index 000000000..419d79a6d
--- /dev/null
+++ b/apps/www/scripts/landing-preview/vite.config.ts
@@ -0,0 +1,16 @@
+import tailwindcss from "@tailwindcss/vite";
+import viteReact from "@vitejs/plugin-react";
+import { fileURLToPath } from "node:url";
+import { defineConfig } from "vite";
+
+export default defineConfig({
+  root: fileURLToPath(new URL(".", import.meta.url)),
+  plugins: [tailwindcss(), viteReact()],
+  resolve: {
+    alias: {
+      "@": fileURLToPath(new URL("../../src", import.meta.url)),
+    },
+    dedupe: ["react", "react-dom"],
+  },
+  server: { port: 5199 },
+});
diff --git a/apps/www/scripts/pricing-preview/index.html b/apps/www/scripts/pricing-preview/index.html
new file mode 100644
index 000000000..612641f4f
--- /dev/null
+++ b/apps/www/scripts/pricing-preview/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Pricing preview</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/www/scripts/pricing-preview/main.tsx b/apps/www/scripts/pricing-preview/main.tsx
new file mode 100644
index 000000000..2bdb30894
--- /dev/null
+++ b/apps/www/scripts/pricing-preview/main.tsx
@@ -0,0 +1,6 @@
+import { createRoot } from "react-dom/client";
+
+import "../../src/styles/globals.css";
+import { PricingPage } from "../../src/features/www/pricing/pricing-page";
+
+createRoot(document.getElementById("root")!).render(<PricingPage />);
diff --git a/apps/www/scripts/pricing-preview/vite.config.ts b/apps/www/scripts/pricing-preview/vite.config.ts
new file mode 100644
index 000000000..3ff532e40
--- /dev/null
+++ b/apps/www/scripts/pricing-preview/vite.config.ts
@@ -0,0 +1,16 @@
+import tailwindcss from "@tailwindcss/vite";
+import viteReact from "@vitejs/plugin-react";
+import { fileURLToPath } from "node:url";
+import { defineConfig } from "vite";
+
+export default defineConfig({
+  root: fileURLToPath(new URL(".", import.meta.url)),
+  plugins: [tailwindcss(), viteReact()],
+  resolve: {
+    alias: {
+      "@": fileURLToPath(new URL("../../src", import.meta.url)),
+    },
+    dedupe: ["react", "react-dom"],
+  },
+  server: { port: 5200 },
+});
diff --git a/apps/www/src/components/lenticular-refraction-pass.tsx b/apps/www/src/components/lenticular-refraction-pass.tsx
new file mode 100644
index 000000000..65ca92b66
--- /dev/null
+++ b/apps/www/src/components/lenticular-refraction-pass.tsx
@@ -0,0 +1,136 @@
+"use client";
+
+import { useFrame, useThree } from "@react-three/fiber";
+import { useEffect, useMemo } from "react";
+import * as THREE from "three";
+import { EffectComposer as ThreeEffectComposer } from "three/examples/jsm/postprocessing/EffectComposer.js";
+import { RenderPass } from "three/examples/jsm/postprocessing/RenderPass.js";
+import { ShaderPass } from "three/examples/jsm/postprocessing/ShaderPass.js";
+
+const DEFAULT_ANGLE_DEGREES = 45.08;
+const DEFAULT_CENTER_X = 0.5;
+const DEFAULT_CENTER_Y = 0.6386;
+const DEFAULT_PERIOD_RATIO = 0.0394;
+const DEFAULT_STRENGTH = -100;
+
+const fragmentShader = `
+uniform sampler2D tDiffuse;
+uniform vec2 uResolution;
+uniform float uAngle;
+uniform vec2 uCenter;
+uniform float uPeriodRatio;
+uniform float uStrength;
+
+varying vec2 vUv;
+
+void main() {
+  vec2 resolution = max(uResolution, vec2(1.0));
+  vec2 screenUv = vec2(vUv.x, 1.0 - vUv.y);
+  vec2 px = screenUv * resolution;
+  vec2 centerPx = uCenter * resolution;
+  vec2 normal = normalize(vec2(sin(uAngle), cos(uAngle)));
+  float period = max(resolution.x * uPeriodRatio, 1.0);
+  float signedStrength = clamp(uStrength, -100.0, 100.0) / 100.0;
+  float strength = abs(signedStrength);
+  float stripeAxis = dot(px - centerPx, normal);
+  float cell = fract(stripeAxis / period + 0.115);
+  float opticalPhase = mix(cell, 1.0 - cell, step(0.0, signedStrength));
+
+  float edgePosition = opticalPhase * 2.0 - 1.0;
+  float edgeProximity = pow(abs(edgePosition), 1.3);
+  float refractionAmount = strength * edgeProximity * 0.7;
+  float targetY = 1.0 - step(0.0, edgePosition);
+  vec2 leftUv = mix(screenUv, vec2(0.0, targetY), refractionAmount);
+  vec2 rightUv = mix(screenUv, vec2(1.0, targetY), refractionAmount);
+  vec2 leftTextureUv = vec2(leftUv.x, 1.0 - leftUv.y);
+  vec2 rightTextureUv = vec2(rightUv.x, 1.0 - rightUv.y);
+  float sideMix = smoothstep(uCenter.x - 0.1, uCenter.x + 0.1, screenUv.x);
+
+  gl_FragColor = mix(
+    texture2D(tDiffuse, leftTextureUv),
+    texture2D(tDiffuse, rightTextureUv),
+    sideMix
+  );
+}
+`;
+
+const vertexShader = `
+varying vec2 vUv;
+
+void main() {
+  vUv = uv;
+  gl_Position = projectionMatrix * modelViewMatrix * vec4(position, 1.0);
+}
+`;
+
+export type LenticularRefractionSettings = {
+  angleDegrees?: number;
+  centerX?: number;
+  centerY?: number;
+  periodRatio?: number;
+  strength?: number;
+};
+
+/** Applies the lenticular refraction transform to the current Three.js scene. */
+export function LenticularRefractionPass({
+  settings = {},
+}: {
+  settings?: LenticularRefractionSettings;
+}) {
+  const { camera, gl, scene, size } = useThree();
+  const angleDegrees = settings.angleDegrees ?? DEFAULT_ANGLE_DEGREES;
+  const centerX = settings.centerX ?? DEFAULT_CENTER_X;
+  const centerY = settings.centerY ?? DEFAULT_CENTER_Y;
+  const periodRatio = settings.periodRatio ?? DEFAULT_PERIOD_RATIO;
+  const strength = settings.strength ?? DEFAULT_STRENGTH;
+  const { composer, shaderPass } = useMemo(() => {
+    const nextComposer = new ThreeEffectComposer(gl);
+    const nextShaderPass = new ShaderPass({
+      fragmentShader,
+      uniforms: {
+        tDiffuse: { value: null },
+        uAngle: { value: THREE.MathUtils.degToRad(angleDegrees) },
+        uCenter: { value: new THREE.Vector2(centerX, centerY) },
+        uPeriodRatio: { value: periodRatio },
+        uResolution: { value: new THREE.Vector2(1, 1) },
+        uStrength: { value: strength },
+      },
+      vertexShader,
+    });
+
+    nextComposer.addPass(new RenderPass(scene, camera));
+    nextComposer.addPass(nextShaderPass);
+
+    return {
+      composer: nextComposer,
+      shaderPass: nextShaderPass,
+    };
+  }, [angleDegrees, camera, centerX, centerY, gl, periodRatio, scene, strength]);
+
+  useEffect(() => {
+    composer.setPixelRatio(gl.getPixelRatio());
+    composer.setSize(size.width, size.height);
+    gl.getDrawingBufferSize(shaderPass.uniforms.uResolution.value);
+  }, [composer, gl, shaderPass, size.height, size.width]);
+
+  useEffect(() => {
+    shaderPass.uniforms.uAngle.value = THREE.MathUtils.degToRad(angleDegrees);
+    shaderPass.uniforms.uCenter.value.set(centerX, centerY);
+    shaderPass.uniforms.uPeriodRatio.value = periodRatio;
+    shaderPass.uniforms.uStrength.value = strength;
+  }, [angleDegrees, centerX, centerY, periodRatio, shaderPass, strength]);
+
+  useEffect(
+    () => () => {
+      shaderPass.dispose();
+      composer.dispose();
+    },
+    [composer, shaderPass],
+  );
+
+  useFrame((_, delta) => {
+    composer.render(delta);
+  }, 1);
+
+  return null;
+}
diff --git a/apps/www/src/features/auth/components/auth-layout.tsx b/apps/www/src/features/auth/components/auth-layout.tsx
index cf97eee44..39d64a7d0 100644
--- a/apps/www/src/features/auth/components/auth-layout.tsx
+++ b/apps/www/src/features/auth/components/auth-layout.tsx
@@ -2,34 +2,22 @@ import { Link } from "@tanstack/react-router";
 import { Logo } from "@voidhash/ui";
 import type { ReactNode } from "react";
 
-import { VoidhashGradientBackground } from "@/components/voidhash-gradient-background";
-
-const authGradientSettings = {
-  topEnabled: false,
-  effectHeight: 70,
-} as const;
+import { AuthLenticularBackground } from "./auth-lenticular-background";
 
 export type AuthLayoutProps = {
   children: ReactNode;
 };
 
 /**
- * Shared shell for the auth surfaces. Renders the blurred Voidhash gradient
+ * Shared shell for the auth surfaces. Renders the lenticular Voidhash gradient
  * behind a backdrop-blurred form column with the logo (linking home), matching
  * the sign-in / sign-up layout. Page content is centred in a `max-w-sm` column.
  */
 export function AuthLayout({ children }: AuthLayoutProps) {
   return (
     <div className="relative grid min-h-svh overflow-hidden bg-background lg:grid-cols-12">
-      <VoidhashGradientBackground
-        className="absolute inset-0"
-        controlsQueryParam="authGradientControls"
-        controlsStorageKey="voidhash:auth-gradient-controls"
-        controlsTitle="Auth FX"
-        settings={authGradientSettings}
-        settingsStorageKey="voidhash:auth-gradient-settings"
-      />
-      <div className="relative z-10 col-span-6 flex flex-col gap-4 bg-background/95 p-6 backdrop-blur-xl md:p-10 lg:border-r lg:border-border/50">
+      <AuthLenticularBackground className="absolute inset-0" />
+      <div className="relative z-10 col-span-8 flex flex-col gap-4 p-6 md:p-10 bg-linear-to-r from-background to-transparent">
         <div className="flex justify-center gap-2 md:justify-start">
           <Link className="flex gap-2 font-medium" to="/">
             <Logo />
diff --git a/apps/www/src/features/auth/components/auth-lenticular-background.tsx b/apps/www/src/features/auth/components/auth-lenticular-background.tsx
new file mode 100644
index 000000000..6ace73fe9
--- /dev/null
+++ b/apps/www/src/features/auth/components/auth-lenticular-background.tsx
@@ -0,0 +1,13 @@
+"use client";
+
+import { HeroShader } from "@/features/www/hero/hero-shader";
+import { cn } from "@/lib/utils";
+
+/** Renders the landing lenticular composition with the animated Perlin surface as its source. */
+export function AuthLenticularBackground({ className }: { className?: string }) {
+  return (
+    <div aria-hidden className={cn("pointer-events-none overflow-hidden", className)}>
+      <HeroShader source="perlin" />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/design/components/nav-bar.tsx b/apps/www/src/features/design/components/nav-bar.tsx
index 463815de1..8160e1b29 100644
--- a/apps/www/src/features/design/components/nav-bar.tsx
+++ b/apps/www/src/features/design/components/nav-bar.tsx
@@ -34,7 +34,7 @@ export function NavBar() {
     <div className="fixed z-10 flex h-[var(--header-height)] w-full flex-row items-center justify-between border-border border-b bg-background transition-all duration-75">
       <div className="flex flex-1 items-center justify-between px-4 py-2">
         <div className="mr-7 flex items-center">
-          <a className="flex items-center gap-3" href="https://voidhash.com">
+          <a className="flex items-center gap-3" href="/">
             <Logo className="ml-2 h-4" color="mono" variant="symbol" />
             <span className="rounded-md border-border bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
               Design System
diff --git a/apps/www/src/features/design/content/docs/components/navigation-menu.mdx b/apps/www/src/features/design/content/docs/components/navigation-menu.mdx
index 323c64429..51a914de6 100644
--- a/apps/www/src/features/design/content/docs/components/navigation-menu.mdx
+++ b/apps/www/src/features/design/content/docs/components/navigation-menu.mdx
@@ -121,9 +121,10 @@ A navigation link.
 
 Visual indicator for the active item.
 
-### NavigationMenuViewport
+### NavigationMenuPositioner
 
-The viewport for dropdown content.
+The portaled popup that dropdown content animates through. `NavigationMenu` renders one
+automatically; render it yourself only when you need custom positioning.
 
 ## Props
 
diff --git a/apps/www/src/features/design/styles/globals.css b/apps/www/src/features/design/styles/globals.css
index bfe24c965..f3ca99483 100644
--- a/apps/www/src/features/design/styles/globals.css
+++ b/apps/www/src/features/design/styles/globals.css
@@ -10,7 +10,7 @@
 @custom-variant dark (&:is(.dark *));
 
 ::selection {
-  background: #0673ff;
+  background: var(--blue-ribbon-600);
   color: #fff;
 }
 
diff --git a/apps/www/src/features/docs/components/layout/docs.tsx b/apps/www/src/features/docs/components/layout/docs.tsx
index 9dd96b56f..dac008cc1 100644
--- a/apps/www/src/features/docs/components/layout/docs.tsx
+++ b/apps/www/src/features/docs/components/layout/docs.tsx
@@ -1,18 +1,6 @@
 "use client";
 
-import {
-  Sidebar,
-  SidebarContent,
-  SidebarGroup,
-  SidebarGroupLabel,
-  SidebarInset,
-  SidebarMenu,
-  SidebarMenuAction,
-  SidebarMenuButton,
-  SidebarMenuItem,
-  SidebarProvider,
-  Logo,
-} from "@voidhash/ui";
+import { Sheet, SheetContent, SheetTitle, cn } from "@voidhash/ui";
 import { Link as FrameworkLink, usePathname } from "fumadocs-core/framework";
 import type * as PageTree from "fumadocs-core/page-tree";
 import { TreeContextProvider, useTreeContext } from "fumadocs-ui/contexts/tree";
@@ -26,7 +14,9 @@ import {
   useState,
 } from "react";
 
-import { activeTabForPathname, tabNodes } from "../../lib/tabs";
+import { STUDIO_PATH } from "@/lib/paths";
+
+import { DOCS_TABS, activeTabForPathname, tabNodes } from "../../lib/tabs";
 import { NavBar } from "../nav-bar";
 import { DocsThemeToggle } from "../theme-toggle";
 
@@ -35,22 +25,75 @@ export interface DocsLayoutProps {
   children: ReactNode;
 }
 
+/**
+ * The public documentation shell: a hairline-ruled header over a fixed
+ * navigation column, themed from the marketing palette rather than the app's
+ * (see `features/docs/styles/globals.css` for the `.docs-shell` theme).
+ */
 export function DocsLayout({ tree, children }: DocsLayoutProps) {
+  const [mobileNavOpen, setMobileNavOpen] = useState(false);
+
   return (
-    <div className="flex flex-col [--header-height:calc(theme(spacing.12))]">
-      <SidebarProvider className="flex flex-col">
-        <TreeContextProvider tree={tree}>
-          <NavBar />
+    <div className="docs-shell min-h-screen bg-background text-foreground [--docs-header-height:3.5rem] [--docs-sidebar-width:16.5rem]">
+      <TreeContextProvider tree={tree}>
+        <NavBar onOpenNav={() => setMobileNavOpen(true)} />
 
-          <div className="flex min-h-0 flex-1 pt-[var(--header-height)]">
-            <DocsSidebar />
+        <aside className="fixed inset-y-0 top-(--docs-header-height) left-0 z-30 hidden w-(--docs-sidebar-width) overflow-y-auto border-border border-r px-3 pt-6 pb-16 lg:block">
+          <DocsNav />
+        </aside>
 
-            <SidebarInset className="mt-0! transition-all duration-75">
-              <div className="flex w-full">{children}</div>
-            </SidebarInset>
-          </div>
-        </TreeContextProvider>
-      </SidebarProvider>
+        <Sheet onOpenChange={setMobileNavOpen} open={mobileNavOpen}>
+          <SheetContent
+            className="w-[19rem] border-border bg-background p-0 lg:hidden"
+            side="left"
+          >
+            <SheetTitle className="sr-only">Documentation navigation</SheetTitle>
+            <div className="flex h-full flex-col overflow-y-auto px-3 pt-14 pb-6">
+              <MobileTabs onNavigate={() => setMobileNavOpen(false)} />
+              <DocsNav onNavigate={() => setMobileNavOpen(false)} />
+              <div className="mt-8 flex items-center justify-between gap-3 px-3">
+                <DocsThemeToggle className="flex" />
+                <a
+                  className="text-muted-foreground text-sm tracking-[-0.01em] transition-colors hover:text-foreground"
+                  href={STUDIO_PATH}
+                >
+                  Dashboard
+                </a>
+              </div>
+            </div>
+          </SheetContent>
+        </Sheet>
+
+        <div className="flex w-full pt-(--docs-header-height) lg:pl-(--docs-sidebar-width)">
+          {children}
+        </div>
+      </TreeContextProvider>
+    </div>
+  );
+}
+
+/** The header's tab row, folded into the drawer where the header can't show it. */
+function MobileTabs({ onNavigate }: { onNavigate: () => void }) {
+  const pathname = usePathname();
+  const active = activeTabForPathname(pathname);
+
+  return (
+    <div className="mb-5 flex flex-col gap-1 border-border border-b pb-5">
+      {DOCS_TABS.map((tab) => (
+        <FrameworkLink
+          className={cn(
+            "rounded-md px-3 py-1.5 text-[13.5px] tracking-[-0.01em] transition-colors",
+            tab.id === active.id
+              ? "bg-accent font-medium text-foreground"
+              : "text-foreground/65 hover:text-foreground",
+          )}
+          href={tab.home}
+          key={tab.id}
+          onClick={onNavigate}
+        >
+          {tab.label}
+        </FrameworkLink>
+      ))}
     </div>
   );
 }
@@ -171,7 +214,7 @@ function useDocsNav(): { groups: DocsNavGroup[]; items: DocsNavItem[] } {
   }, [root, pathname]);
 }
 
-function DocsSidebar() {
+function DocsNav({ onNavigate }: { onNavigate?: () => void }) {
   const { groups, items } = useDocsNav();
 
   const activeParent = items.find((item) => item.isActive && item.subGroups?.length);
@@ -186,103 +229,125 @@ function DocsSidebar() {
   const showSubmenu = submenuOpen && !!activeParent;
 
   return (
-    <Sidebar className="transition-all duration-75" collapsible="offcanvas" variant="inset">
-      <SidebarContent className="gap-0">
-        <div className="flex h-[var(--header-height)] w-full shrink-0 items-center px-3 py-2">
-          <a className="flex items-center gap-2" href="https://voidhash.com">
-            <Logo className="h-5" color="mono" variant="default" />
-            <span className="rounded-md bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
-              Docs
-            </span>
-          </a>
-        </div>
+    <div className="relative">
+      {/* Main menu — titled section groups; folders open the slide-in submenu */}
+      <div
+        className={cn(
+          "flex flex-col gap-5 transition-all duration-150",
+          showSubmenu
+            ? "-translate-x-3 pointer-events-none opacity-0"
+            : "translate-x-0 opacity-100",
+        )}
+      >
+        {groups.map((group, groupIndex) => (
+          <NavGroup
+            group={group}
+            key={group.title ?? `group-${groupIndex}`}
+            onNavigate={onNavigate}
+            onOpenSubmenu={() => setSubmenuOpen(true)}
+          />
+        ))}
+      </div>
 
-        <SidebarGroup className="pt-0">
-          <div className="relative">
-            {/* Main Menu — titled section groups; folders open the slide-in submenu */}
-            <div
-              className={`flex flex-col gap-4 transition-all duration-150 ${showSubmenu ? "-translate-x-3 pointer-events-none opacity-0" : "translate-x-0 opacity-100"}`}
+      {/* Sub menu — the opened folder's titled section groups */}
+      <div
+        className={cn(
+          "absolute inset-0 flex flex-col gap-5 transition-all duration-150",
+          showSubmenu
+            ? "translate-x-0 opacity-100"
+            : "pointer-events-none translate-x-10 opacity-0",
+        )}
+      >
+        {activeParent ? (
+          <div className="flex flex-col gap-5">
+            <button
+              className="flex items-center gap-2 rounded-md px-3 py-1.5 font-medium text-[13.5px] text-foreground tracking-[-0.01em] transition-colors hover:bg-accent"
+              onClick={() => setSubmenuOpen(false)}
+              type="button"
             >
-              {groups.map((group, groupIndex) => (
-                <div key={group.title ?? `group-${groupIndex}`}>
-                  {group.title ? <SidebarGroupLabel>{group.title}</SidebarGroupLabel> : null}
-                  <SidebarMenu>
-                    {group.items.map((item) => (
-                      <SidebarMenuItem key={item.url}>
-                        <SidebarMenuButton
-                          asChild
-                          isActive={!item.subGroups?.length && item.isActive}
-                        >
-                          <SidebarLink
-                            href={item.url}
-                            onClick={() => {
-                              if (item.subGroups?.length) {
-                                setSubmenuOpen(true);
-                              }
-                            }}
-                          >
-                            <NodeIcon icon={item.icon} />
-                            <span>{item.title}</span>
-                          </SidebarLink>
-                        </SidebarMenuButton>
-                        {item.subGroups?.length ? (
-                          <SidebarMenuAction onClick={() => setSubmenuOpen(true)}>
-                            <ChevronRight />
-                            <span className="sr-only">Toggle</span>
-                          </SidebarMenuAction>
-                        ) : null}
-                      </SidebarMenuItem>
-                    ))}
-                  </SidebarMenu>
-                </div>
-              ))}
-            </div>
-
-            {/* Sub Menu — the opened folder's titled section groups */}
-            <div
-              className={`absolute inset-0 flex flex-col gap-4 transition-all duration-150 ${showSubmenu ? "translate-x-0 opacity-100" : "pointer-events-none translate-x-10 opacity-0"}`}
-            >
-              {activeParent && (
-                <>
-                  <SidebarMenu>
-                    <SidebarMenuItem>
-                      <SidebarMenuButton
-                        className="relative cursor-pointer"
-                        onClick={() => setSubmenuOpen(false)}
-                      >
-                        <ChevronLeft />
-                        <span className="-translate-x-[50%] absolute left-[50%] transform text-center">
-                          {activeParent.title}
-                        </span>
-                      </SidebarMenuButton>
-                    </SidebarMenuItem>
-                  </SidebarMenu>
-                  {activeParent.subGroups?.map((group, groupIndex) => (
-                    <div key={group.title ?? `subgroup-${groupIndex}`}>
-                      {group.title ? <SidebarGroupLabel>{group.title}</SidebarGroupLabel> : null}
-                      <SidebarMenu>
-                        {group.items.map((subItem) => (
-                          <SidebarMenuItem key={subItem.url}>
-                            <SidebarMenuButton asChild isActive={subItem.isActive}>
-                              <SidebarLink href={subItem.url}>
-                                <NodeIcon icon={subItem.icon} />
-                                <span>{subItem.title}</span>
-                              </SidebarLink>
-                            </SidebarMenuButton>
-                          </SidebarMenuItem>
-                        ))}
-                      </SidebarMenu>
-                    </div>
-                  ))}
-                </>
-              )}
-            </div>
+              <ChevronLeft className="size-3.5 text-muted-foreground" />
+              <span>{activeParent.title}</span>
+            </button>
+            {activeParent.subGroups?.map((group, groupIndex) => (
+              <NavGroup
+                group={group}
+                key={group.title ?? `subgroup-${groupIndex}`}
+                onNavigate={onNavigate}
+              />
+            ))}
           </div>
-        </SidebarGroup>
+        ) : null}
+      </div>
+    </div>
+  );
+}
 
-        <DocsThemeToggle className="mt-auto mb-2 ml-4 block md:hidden" />
-      </SidebarContent>
-    </Sidebar>
+function NavGroup({
+  group,
+  onNavigate,
+  onOpenSubmenu,
+}: {
+  group: DocsNavGroup;
+  onNavigate?: () => void;
+  onOpenSubmenu?: () => void;
+}) {
+  return (
+    <div className="flex flex-col gap-0.5">
+      {group.title ? (
+        <div className="px-3 pb-1 font-medium text-[12.5px] text-muted-foreground/70 tracking-[-0.005em]">
+          {group.title}
+        </div>
+      ) : null}
+      {group.items.map((item) => (
+        <NavItem item={item} key={item.url} onNavigate={onNavigate} onOpenSubmenu={onOpenSubmenu} />
+      ))}
+    </div>
+  );
+}
+
+function NavItem({
+  item,
+  onNavigate,
+  onOpenSubmenu,
+}: {
+  item: DocsNavItem;
+  onNavigate?: () => void;
+  onOpenSubmenu?: () => void;
+}) {
+  const isFolder = !!item.subGroups?.length;
+
+  return (
+    <div className="relative flex items-center">
+      <NavLink
+        className={cn(
+          "flex min-w-0 flex-1 items-center gap-2 rounded-md px-3 py-1.5 text-[13.5px] tracking-[-0.01em] transition-colors",
+          !isFolder && item.isActive
+            ? "bg-accent font-medium text-foreground"
+            : "text-foreground/65 hover:bg-accent/60 hover:text-foreground",
+          isFolder && "pr-9",
+        )}
+        href={item.url}
+        onClick={() => {
+          if (isFolder) {
+            onOpenSubmenu?.();
+          }
+          onNavigate?.();
+        }}
+      >
+        <NodeIcon icon={item.icon} />
+        <span className="truncate">{item.title}</span>
+      </NavLink>
+      {isFolder ? (
+        <button
+          aria-label={`Open ${item.title}`}
+          className="absolute right-1 flex size-6 items-center justify-center rounded-md text-muted-foreground transition-colors hover:text-foreground"
+          onClick={onOpenSubmenu}
+          type="button"
+        >
+          <ChevronRight className="size-3.5" />
+        </button>
+      ) : null}
+    </div>
   );
 }
 
@@ -298,7 +363,7 @@ function NodeIcon({ icon }: { icon?: ReactElement }) {
   if (typeof icon === "string") {
     return (
       <span
-        className="*:size-4 text-muted-foreground"
+        className="*:size-4 shrink-0 text-muted-foreground"
         // biome-ignore lint/security/noDangerouslySetInnerHtml: It is safe - static icon markup
         dangerouslySetInnerHTML={{ __html: icon }}
       />
@@ -308,7 +373,7 @@ function NodeIcon({ icon }: { icon?: ReactElement }) {
   return icon;
 }
 
-function SidebarLink(props: ComponentProps<typeof FrameworkLink>) {
+function NavLink(props: ComponentProps<typeof FrameworkLink>) {
   const href = props.href ?? "#";
   return <FrameworkLink {...props} href={href} />;
 }
diff --git a/apps/www/src/features/docs/components/layout/page.tsx b/apps/www/src/features/docs/components/layout/page.tsx
index 2ae1eb507..b13c42cf3 100644
--- a/apps/www/src/features/docs/components/layout/page.tsx
+++ b/apps/www/src/features/docs/components/layout/page.tsx
@@ -1,5 +1,4 @@
 "use client";
-import { Card, CardContent, CardDescription, CardTitle } from "@voidhash/ui";
 import { Link, usePathname } from "fumadocs-core/framework";
 import type * as PageTree from "fumadocs-core/page-tree";
 import type { TableOfContents, TOCItemType } from "fumadocs-core/toc";
@@ -20,15 +19,17 @@ export function DocsPage({ toc = [], ...props }: DocsPageProps) {
   return (
     <AnchorProvider toc={toc}>
       <main className="flex w-full min-w-0 flex-col">
-        <article className="flex w-full max-w-[860px] flex-1 flex-col gap-6 px-4 py-8 md:mx-auto md:px-6">
+        <article className="flex w-full max-w-[46rem] flex-1 flex-col px-5 py-12 md:mx-auto md:px-10 md:py-16">
           {props.children}
           <Footer />
         </article>
       </main>
       {toc.length > 0 && (
-        <div className="sticky top-(--header-height) h-[calc(100dvh-var(--header-height))] w-[286px] shrink-0 overflow-auto p-4 max-xl:hidden">
-          <p className="mb-2 text-fd-muted-foreground text-sm">On this page</p>
-          <div className="flex flex-col">
+        <div className="sticky top-(--docs-header-height) h-[calc(100dvh-var(--docs-header-height))] w-[16rem] shrink-0 overflow-auto py-16 pr-6 max-xl:hidden">
+          <p className="pb-3 pl-3 text-muted-foreground text-[13px] tracking-[-0.01em]">
+            On this page
+          </p>
+          <div className="flex flex-col border-border border-l">
             {toc.map((item) => (
               <TocItem item={item} key={item.url} />
             ))}
@@ -54,7 +55,13 @@ export function DocsDescription(props: ComponentProps<"p">) {
   }
 
   return (
-    <p {...props} className={cn("mt-1 text-muted-foreground", props.className)}>
+    <p
+      {...props}
+      className={cn(
+        "mt-3 text-base text-muted-foreground leading-7 tracking-[-0.015em]",
+        props.className,
+      )}
+    >
       {props.children}
     </p>
   );
@@ -62,7 +69,13 @@ export function DocsDescription(props: ComponentProps<"p">) {
 
 export function DocsTitle(props: ComponentProps<"h1">) {
   return (
-    <h1 {...props} className={cn("mt-8 font-semibold text-3xl tracking-right", props.className)}>
+    <h1
+      {...props}
+      className={cn(
+        "font-semibold text-[2rem] leading-[1.15] tracking-[-0.03em]",
+        props.className,
+      )}
+    >
       {props.children}
     </h1>
   );
@@ -73,10 +86,15 @@ function TocItem({ item }: { item: TOCItemType }) {
 
   return (
     <a
-      className={cn("py-1 text-fd-foreground/80 text-sm", isActive && "text-fd-primary")}
+      className={cn(
+        "-ml-px border-transparent border-l py-1.5 pr-2 text-[13px] leading-5 tracking-[-0.01em] transition-colors",
+        isActive
+          ? "border-foreground text-foreground"
+          : "text-muted-foreground hover:text-foreground",
+      )}
       href={item.url}
       style={{
-        paddingLeft: Math.max(0, item.depth - 2) * 16,
+        paddingLeft: 12 + Math.max(0, item.depth - 2) * 12,
       }}
     >
       {item.title}
@@ -119,33 +137,47 @@ function Footer() {
     };
   }, [flatten, pathname]);
 
+  if (!previous && !next) {
+    return null;
+  }
+
   return (
-    <div className="flex flex-row items-center justify-between gap-8">
+    <div className="mt-20 grid grid-cols-1 border-border border-t sm:grid-cols-2">
       {previous ? (
-        <Link className="flex-1" href={previous.url}>
-          <Card className="rounded-none hover:bg-card">
-            <CardContent>
-              <CardDescription className="mt-1 flex items-center">
-                <ChevronLeftIcon className="-ml-1 mr-1 size-4" /> <span>Previous Page</span>
-              </CardDescription>
-              <CardTitle className="mt-2 font-normal text-md">{previous.name}</CardTitle>
-            </CardContent>
-          </Card>
-        </Link>
-      ) : null}
-      {next ? (
-        <Link className="flex-1" href={next.url}>
-          <Card className="rounded-none hover:bg-card">
-            <CardContent className="flex w-full flex-col items-end">
-              <CardDescription className="mt-1 flex items-center">
-                <span>Next Page</span>
-                <ChevronRightIcon className="-mr-1 ml-1 size-4" />{" "}
-              </CardDescription>
-              <CardTitle className="mt-2 font-normal text-md">{next.name}</CardTitle>
-            </CardContent>
-          </Card>
-        </Link>
-      ) : null}
+        <FooterLink direction="previous" page={previous} />
+      ) : (
+        <div className="max-sm:hidden" />
+      )}
+      {next ? <FooterLink direction="next" page={next} /> : null}
     </div>
   );
 }
+
+/** Sibling-page link. A ruled pair rather than cards, so it reads as the page's own footer. */
+function FooterLink({
+  direction,
+  page,
+}: {
+  direction: "previous" | "next";
+  page: PageTree.Item;
+}) {
+  const isNext = direction === "next";
+  const Chevron = isNext ? ChevronRightIcon : ChevronLeftIcon;
+
+  return (
+    <Link
+      className={cn(
+        "flex flex-col gap-1.5 border-border px-4 py-5 transition-colors hover:bg-accent/50",
+        isNext ? "items-end text-right sm:border-l" : "items-start border-b sm:border-b-0",
+      )}
+      href={page.url}
+    >
+      <span className="flex items-center gap-1 text-[13px] text-muted-foreground tracking-[-0.01em]">
+        {isNext ? null : <Chevron className="size-3.5" />}
+        {isNext ? "Next" : "Previous"}
+        {isNext ? <Chevron className="size-3.5" /> : null}
+      </span>
+      <span className="font-medium text-[15px] tracking-[-0.015em]">{page.name}</span>
+    </Link>
+  );
+}
diff --git a/apps/www/src/features/docs/components/nav-bar.tsx b/apps/www/src/features/docs/components/nav-bar.tsx
index a0d1ef558..3bafbc411 100644
--- a/apps/www/src/features/docs/components/nav-bar.tsx
+++ b/apps/www/src/features/docs/components/nav-bar.tsx
@@ -1,15 +1,17 @@
 "use client";
 
-import { Button, CommandShortcut, Logo, cn, useSidebar } from "@voidhash/ui";
+import { Button, CommandShortcut, Logo, cn } from "@voidhash/ui";
 import { Link as FrameworkLink, usePathname } from "fumadocs-core/framework";
 import { useSearchContext } from "fumadocs-ui/contexts/search";
 import { MenuIcon, SearchIcon } from "lucide-react";
 import type { ComponentProps } from "react";
 
+import { STUDIO_PATH } from "@/lib/paths";
+
 import { DOCS_TABS, activeTabForPathname } from "../lib/tabs";
 import { DocsThemeToggle } from "./theme-toggle";
 
-function SearchToggle(props: ComponentProps<"button">) {
+function SearchToggle({ className, ...props }: ComponentProps<"button">) {
   const { enabled, setOpenSearch } = useSearchContext();
   if (!enabled) {
     return;
@@ -18,41 +20,44 @@ function SearchToggle(props: ComponentProps<"button">) {
   return (
     <button
       {...props}
-      className={cn("flex items-center gap-2 bg-transparent text-sm md:bg-muted ", props.className)}
+      className={cn(
+        "flex cursor-pointer items-center gap-2 text-muted-foreground text-sm transition-colors hover:text-foreground md:rounded-lg md:border md:border-border md:px-2.5 md:py-1.5 md:hover:bg-accent",
+        className,
+      )}
       onClick={() => setOpenSearch(true)}
+      type="button"
     >
-      <SearchIcon className="size-4 cursor-pointer text-muted-foreground " />
-      <span className="mr-4 hidden flex-1 text-left text-muted-foreground md:block">
-        Search documentation...
-      </span>
+      <SearchIcon className="size-4" />
+      <span className="hidden flex-1 text-left tracking-[-0.01em] md:block">Search docs</span>
       <CommandShortcut className="hidden md:block">⌘K</CommandShortcut>
     </button>
   );
 }
 
-/** The Documentation / Guides / API Reference tabs shown in the docs header. */
+/**
+ * The Documentation / Guides / API Reference tabs. They run the full height of
+ * the header so the active tab's underline sits on the header's own hairline.
+ */
 function DocsTabs() {
   const pathname = usePathname();
   const active = activeTabForPathname(pathname);
 
   return (
-    <nav className="hidden items-center gap-1 md:flex">
+    <nav className="hidden h-full items-center gap-6 md:flex">
       {DOCS_TABS.map((tab) => {
-        const Icon = tab.icon;
         const isActive = tab.id === active.id;
         return (
           <FrameworkLink
             className={cn(
-              "flex items-center gap-2 rounded-md px-3 py-1.5 font-medium text-sm transition-colors",
+              "-mb-px flex h-full items-center border-transparent border-b text-sm tracking-[-0.01em] transition-colors",
               isActive
-                ? "bg-muted text-foreground"
+                ? "border-foreground text-foreground"
                 : "text-muted-foreground hover:text-foreground",
             )}
             href={tab.home}
             key={tab.id}
           >
-            <Icon className="size-4" />
-            <span>{tab.label}</span>
+            {tab.label}
           </FrameworkLink>
         );
       })}
@@ -60,42 +65,34 @@ function DocsTabs() {
   );
 }
 
-export function NavBar() {
+export function NavBar({ onOpenNav }: { onOpenNav: () => void }) {
   return (
-    <div className="fixed z-50 flex h-[var(--header-height)] w-full items-center justify-between gap-4 bg-sidebar px-4 transition-all duration-75 md:left-[var(--sidebar-width)] md:w-[calc(100vw-var(--sidebar-width))]">
-      <div className="flex items-center gap-1">
-        <a className="flex items-center gap-2 md:hidden" href="https://voidhash.com">
-          <Logo className="h-5" color="mono" variant="default" />
-          <span className="rounded-md bg-muted p-1 px-2 font-semibold text-foreground text-xs uppercase">
-            Docs
-          </span>
+    <header className="fixed inset-x-0 top-0 z-40 flex h-(--docs-header-height) items-center border-border border-b bg-background/85 backdrop-blur-md">
+      <div className="flex h-full w-(--docs-sidebar-width) shrink-0 items-center gap-2.5 border-border px-3 lg:border-r">
+        <button
+          aria-label="Open navigation"
+          className="-ml-1 flex size-8 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent hover:text-foreground lg:hidden"
+          onClick={onOpenNav}
+          type="button"
+        >
+          <MenuIcon className="size-4" />
+        </button>
+        <a className="flex items-center gap-2.5" href="/">
+          <Logo className="h-4 w-auto" color="mono" variant="default" />
+          <span className="text-muted-foreground text-sm tracking-[-0.01em]">Docs</span>
         </a>
-        <DocsTabs />
       </div>
 
-      <div className="flex items-center gap-2">
-        <SearchToggle className="hidden cursor-pointer rounded-lg bg-muted p-1.5 px-3 hover:bg-accent md:flex" />
-        <SearchToggle className="md:hidden" />
-        <DocsThemeToggle />
-        <SidebarToggle />
-        <a className="hidden md:block" href="https://app.voidhash.com">
-          <Button size="sm" variant="outline">
-            Dashboard
+      <div className="flex h-full min-w-0 flex-1 items-center justify-between gap-4 px-4 md:px-6">
+        <DocsTabs />
+        <div className="ml-auto flex items-center gap-3">
+          <SearchToggle className="md:min-w-56" />
+          <DocsThemeToggle />
+          <Button asChild className="hidden md:inline-flex" size="sm" variant="outline">
+            <a href={STUDIO_PATH}>Dashboard</a>
           </Button>
-        </a>
+        </div>
       </div>
-    </div>
-  );
-}
-
-function SidebarToggle() {
-  const { openMobile, setOpenMobile } = useSidebar();
-  const handleToggle = () => {
-    setOpenMobile(!openMobile);
-  };
-  return (
-    <Button className={cn("md:hidden")} onClick={handleToggle} variant="ghost">
-      <MenuIcon className="size-4" />
-    </Button>
+    </header>
   );
 }
diff --git a/apps/www/src/features/docs/components/theme-toggle.tsx b/apps/www/src/features/docs/components/theme-toggle.tsx
index 87c810b14..f8a959c7b 100644
--- a/apps/www/src/features/docs/components/theme-toggle.tsx
+++ b/apps/www/src/features/docs/components/theme-toggle.tsx
@@ -7,7 +7,7 @@ export function DocsThemeToggle({ className }: { className?: string }) {
 
   return (
     <ThemeToggle
-      className={cn("hidden md:block", className)}
+      className={cn("hidden md:flex", className)}
       setTheme={setTheme}
       theme={theme ?? "system"}
     />
diff --git a/apps/www/src/features/docs/styles/globals.css b/apps/www/src/features/docs/styles/globals.css
index 67c9e116b..e22251b72 100644
--- a/apps/www/src/features/docs/styles/globals.css
+++ b/apps/www/src/features/docs/styles/globals.css
@@ -1,33 +1,129 @@
 /** biome-ignore-all lint/nursery/noUnknownAtRule: tailwind */
-@import "@fontsource-variable/geist";
-@import "tailwindcss";
-@import "fumadocs-ui/css/shadcn.css";
-@import "fumadocs-ui/css/preset.css";
-@import "@voidhash/ui/styles/brand-theme.css";
 
-@source "../../../../packages/ui";
-@source "../../src";
+/*
+ * Docs-site theme.
+ *
+ * Scoped to `.docs-shell` rather than `:root` because `DocsBody` is also
+ * rendered inside the studio's in-app guide sheets, which must keep the app
+ * theme. Everything under the shell adopts the marketing palette instead: the
+ * landing page's near-black canvas and its single zinc-800 hairline. Radii,
+ * component chrome and the fumadocs content blocks stay on the shared design
+ * system — only the colours and the reading type scale change here.
+ *
+ * Every colour resolves to a step on the brand gray ramp (`--zinc-*` in
+ * packages/ui/styles/brand-theme.css). Do not reintroduce off-ramp hexes.
+ *
+ * The shadcn tokens are restated alongside their `--color-fd-*` twins because
+ * fumadocs declares the twins on `:root`, where they resolve against the root
+ * palette and are then inherited as already-computed colours.
+ */
 
-@custom-variant dark (&:is(.dark *));
+.docs-shell {
+  --background: var(--white);
+  --foreground: var(--zinc-950);
+  --card: var(--zinc-50);
+  --card-foreground: var(--zinc-950);
+  --popover: var(--white);
+  --popover-foreground: var(--zinc-950);
+  --muted: var(--zinc-100);
+  --muted-foreground: var(--zinc-500);
+  --accent: var(--zinc-100);
+  --accent-foreground: var(--zinc-950);
+  --border: var(--zinc-200);
+  --input: var(--zinc-200);
+  --sidebar: var(--white);
+  --sidebar-foreground: var(--zinc-950);
+  --sidebar-accent: var(--zinc-100);
+  --sidebar-accent-foreground: var(--zinc-950);
+  --sidebar-border: var(--zinc-200);
 
-::selection {
-  background: #0673ff;
-  color: #fff;
+  --color-fd-background: var(--background);
+  --color-fd-foreground: var(--foreground);
+  --color-fd-muted: var(--muted);
+  --color-fd-muted-foreground: var(--muted-foreground);
+  --color-fd-popover: var(--popover);
+  --color-fd-popover-foreground: var(--popover-foreground);
+  --color-fd-card: var(--card);
+  --color-fd-card-foreground: var(--card-foreground);
+  --color-fd-border: var(--border);
+  --color-fd-accent: var(--accent);
+  --color-fd-accent-foreground: var(--accent-foreground);
+  --color-fd-secondary: var(--muted);
+  --color-fd-secondary-foreground: var(--foreground);
+  --color-fd-primary: var(--primary);
 }
 
-:root {
-  --color-fd-primary: var(--primary);
+.dark .docs-shell {
+  --background: var(--zinc-950);
+  --foreground: var(--zinc-50);
+  --card: var(--zinc-900);
+  --card-foreground: var(--zinc-50);
+  --popover: var(--zinc-950);
+  --popover-foreground: var(--zinc-50);
+  --muted: var(--zinc-900);
+  --muted-foreground: var(--zinc-400);
+  --accent: var(--zinc-900);
+  --accent-foreground: var(--zinc-50);
+  --border: var(--zinc-800);
+  --input: var(--zinc-800);
+  --sidebar: var(--zinc-950);
+  --sidebar-foreground: var(--zinc-50);
+  --sidebar-accent: var(--zinc-900);
+  --sidebar-accent-foreground: var(--zinc-50);
+  --sidebar-border: var(--zinc-800);
 }
 
-.dark {
-  --color-fd-primary: var(--primary);
+/*
+ * Reading type scale. fumadocs' preset ships app-sized type; the docs site
+ * wants the landing's tighter tracking and a longer measure. Only the scale
+ * and colour are restated — every block element keeps its shared styling.
+ */
+
+.docs-shell .prose {
+  font-size: 0.9375rem;
+  line-height: 1.75;
+  letter-spacing: -0.011em;
+  color: color-mix(in oklab, var(--foreground) 76%, transparent);
+}
+
+.docs-shell .prose :is(h1, h2, h3, h4, h5, h6) {
+  color: var(--foreground);
+  letter-spacing: -0.025em;
+  scroll-margin-top: 7rem;
+}
+
+.docs-shell .prose h2 {
+  margin-top: 3.5rem;
+  margin-bottom: 1rem;
+  font-size: 1.375rem;
+  font-weight: 600;
+  line-height: 1.3;
+}
+
+.docs-shell .prose h3 {
+  margin-top: 2.5rem;
+  margin-bottom: 0.75rem;
+  font-size: 1.0625rem;
+  font-weight: 600;
+  line-height: 1.4;
+}
+
+.docs-shell .prose h4 {
+  margin-top: 2rem;
+  margin-bottom: 0.5rem;
+  font-size: 0.9375rem;
+  font-weight: 600;
+}
+
+.docs-shell .prose :is(p, ul, ol) {
+  margin-block: 1rem;
+}
+
+.docs-shell .prose li {
+  margin-block: 0.375rem;
 }
 
-@layer base {
-  * {
-    @apply border-border outline-ring/50;
-  }
-  body {
-    @apply bg-background text-foreground;
-  }
+.docs-shell .prose strong {
+  color: var(--foreground);
+  font-weight: 600;
 }
diff --git a/apps/www/src/features/studio/lib/tanstack-query/organizations.ts b/apps/www/src/features/studio/lib/tanstack-query/organizations.ts
index 3e93fe2e4..e672e84df 100644
--- a/apps/www/src/features/studio/lib/tanstack-query/organizations.ts
+++ b/apps/www/src/features/studio/lib/tanstack-query/organizations.ts
@@ -1,5 +1,5 @@
 import type { QueryClient } from "@tanstack/react-query";
-import type { User } from "@voidhash/rpc";
+import { INTERNAL_FEATURE_FLAG_LIST, type User } from "@voidhash/rpc";
 
 import { VoidhashRpc, eq } from "../effect-query";
 import { queryKeys } from "./query-keys";
@@ -10,6 +10,17 @@ interface CreatedOrganization {
   readonly slug: string;
 }
 
+/**
+ * The flags a brand-new organization resolves to: it has no overrides yet, so
+ * the server will report exactly the flags whose code default is on. Seeding
+ * these keeps the optimistic entry honest for gates that must not be bypassed
+ * — notably the waitlist, which would otherwise let a new organization into
+ * Studio until the next `CurrentUser` refetch.
+ */
+const DEFAULT_ENABLED_INTERNAL_FEATURE_FLAGS = INTERNAL_FEATURE_FLAG_LIST.filter(
+  (flag) => flag.defaultEnabled,
+).map((flag) => flag.key);
+
 /** Adds a newly created organization to the cached current-user session. */
 export const addCreatedOrganizationToCurrentUserCache = (
   queryClient: QueryClient,
@@ -40,9 +51,7 @@ export const addCreatedOrganizationToCurrentUserCache = (
           name: createdOrganization.name,
           slug: createdOrganization.slug,
           workosOrganizationId: null,
-          // Optimistic entry; the real resolved flags arrive on the next
-          // CurrentUser refetch.
-          internalFeatureFlags: [],
+          internalFeatureFlags: DEFAULT_ENABLED_INTERNAL_FEATURE_FLAGS,
         },
       ],
     };
diff --git a/apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx b/apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx
index 2b632ed17..cd10af0b2 100644
--- a/apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx
+++ b/apps/www/src/features/studio/paywalls/designer/translation-mode/context-preview.tsx
@@ -39,7 +39,9 @@ function withHighlight(html: string, nodeId: string | null): string {
   }
   const selector = `[data-node-id="${id}"]`;
   const injection =
-    `<style>${selector}{outline:2px solid #3b82f6;outline-offset:2px;border-radius:2px;}</style>` +
+    // blue-ribbon-600 as a literal: this style is injected into the preview
+    // document, which does not inherit the studio's custom properties.
+    `<style>${selector}{outline:2px solid #0673ff;outline-offset:2px;border-radius:2px;}</style>` +
     `<script>document.querySelector('${selector}')` +
     `?.scrollIntoView({block:"center",inline:"center"});</script>`;
   return html.includes("</body>") ? html.replace("</body>", `${injection}</body>`) : html + injection;
diff --git a/apps/www/src/features/studio/waitlist/waitlist-gate.tsx b/apps/www/src/features/studio/waitlist/waitlist-gate.tsx
new file mode 100644
index 000000000..9f41ce490
--- /dev/null
+++ b/apps/www/src/features/studio/waitlist/waitlist-gate.tsx
@@ -0,0 +1,56 @@
+"use client";
+
+import { Navigate, useLocation, useRouterState } from "@tanstack/react-router";
+import type { ReactNode } from "react";
+
+import { useAuth } from "@/features/studio/components/auth-context";
+import { isOrganizationWaitlisted } from "@/lib/waitlist";
+
+/** The holding screen waitlisted organizations are redirected to. */
+export const WAITLIST_PATH = "/studio/waitlist";
+
+/**
+ * Blocks Studio for organizations that are still on the waitlist, redirecting
+ * to {@link WAITLIST_PATH} instead of rendering the dashboard.
+ *
+ * Wraps the whole `/studio/_authenticated` subtree so deep links are covered
+ * too, and resolves the organization from the active `$organizationSlug` route
+ * param. Routes with no slug (`/studio`, `/studio/create-organization`) are
+ * only blocked when *every* one of the user's organizations is waitlisted, so
+ * a member of one approved and one waitlisted organization is not held out of
+ * the approved one.
+ *
+ * Users with no organization yet are let through so they can still reach
+ * `/studio/create-organization`; the gate picks the organization up on the
+ * next render once it exists.
+ *
+ * The slug is read off the leaf match rather than with
+ * `useParams({ strict: false })`: this component renders at the
+ * `/studio/_authenticated` layout, and `useParams` resolves against the
+ * *nearest* match, which at a layout does not yet carry the child's params.
+ */
+export function WaitlistGate({ children }: { readonly children: ReactNode }) {
+  const { user } = useAuth();
+  const pathname = useLocation({ select: (location) => location.pathname });
+  const organizationSlug = useRouterState({
+    select: (state) =>
+      (state.matches.at(-1)?.params as { organizationSlug?: string } | undefined)
+        ?.organizationSlug,
+  });
+
+  const organizationInContext = organizationSlug
+    ? user.organizations.find((organization) => organization.slug === organizationSlug)
+    : (user.organizations.find((organization) => !isOrganizationWaitlisted(organization)) ??
+      user.organizations[0]);
+
+  const blocked =
+    pathname !== WAITLIST_PATH &&
+    organizationInContext !== undefined &&
+    isOrganizationWaitlisted(organizationInContext);
+
+  if (blocked) {
+    return <Navigate replace to={WAITLIST_PATH} />;
+  }
+
+  return <>{children}</>;
+}
diff --git a/apps/www/src/features/www/hero/hero-shader.tsx b/apps/www/src/features/www/hero/hero-shader.tsx
new file mode 100644
index 000000000..e03849fea
--- /dev/null
+++ b/apps/www/src/features/www/hero/hero-shader.tsx
@@ -0,0 +1,368 @@
+"use client";
+
+import { Canvas, useFrame, useThree } from "@react-three/fiber";
+import { useReducedMotion } from "motion/react";
+import { useEffect, useMemo, useRef } from "react";
+import * as THREE from "three";
+
+const SVG_WIDTH = 1654;
+const SVG_HEIGHT = 1053;
+const DEFAULT_ANGLE_DEGREES = 45.08;
+const DEFAULT_CENTER_X = 0.5;
+const DEFAULT_CENTER_Y = 0.6386;
+const DEFAULT_PERIOD_RATIO = 0.0394;
+const DEFAULT_STRENGTH = -100;
+
+/** Seconds the gradient takes to fade up from the page background once the first frame is drawn. */
+const REVEAL_SECONDS = 1.5;
+
+/** How far the slats are magnified at the start of the reveal before settling back to 1. */
+const REVEAL_SETTLE = 0.045;
+
+/** The landing page's own background, so the hero reads as part of the page rather than a black box. */
+const BACKGROUND_HEX = 0x09090b;
+
+const vertexShader = `
+void main() {
+  gl_Position = vec4(position.xy, 0.0, 1.0);
+}
+`;
+
+const fragmentShader = `
+uniform vec2 uResolution;
+uniform float uAngle;
+uniform vec2 uCenter;
+uniform float uPeriodRatio;
+uniform float uStrength;
+uniform float uTime;
+uniform float uReveal;
+uniform float uSettle;
+uniform float uUsePerlinSource;
+
+const vec2 SVG_SIZE = vec2(${SVG_WIDTH.toFixed(1)}, ${SVG_HEIGHT.toFixed(1)});
+const float SVG_BLUR = 83.45;
+
+// Written straight out as sRGB — this material bypasses three's colour-space conversion, which is
+// why the gradient's own stops are authored as plain sRGB fractions too.
+const vec3 BACKGROUND = vec3(
+  ${(((BACKGROUND_HEX >> 16) & 0xff) / 255).toFixed(4)},
+  ${(((BACKGROUND_HEX >> 8) & 0xff) / 255).toFixed(4)},
+  ${((BACKGROUND_HEX & 0xff) / 255).toFixed(4)}
+);
+
+float ellipseMask(vec2 point, vec2 center, vec2 radius) {
+  float normalizedDistance = length((point - center) / radius);
+  float signedDistance = (normalizedDistance - 1.0) * min(radius.x, radius.y);
+
+  return 1.0 - smoothstep(0.0, SVG_BLUR * 2.0, signedDistance);
+}
+
+vec3 composite(vec3 base, vec3 layer, float alpha) {
+  return layer * alpha + base * (1.0 - alpha);
+}
+
+float insideView(vec2 uv) {
+  return step(0.0, uv.x) * step(0.0, uv.y) * step(uv.x, 1.0) * step(uv.y, 1.0);
+}
+
+vec4 mod289(vec4 x) {
+  return x - floor(x * (1.0 / 289.0)) * 289.0;
+}
+
+vec3 mod289(vec3 x) {
+  return x - floor(x * (1.0 / 289.0)) * 289.0;
+}
+
+vec4 permute(vec4 x) {
+  return mod289(((x * 34.0) + 10.0) * x);
+}
+
+vec4 taylorInvSqrt(vec4 r) {
+  return 1.79284291400159 - 0.85373472095314 * r;
+}
+
+float snoise(vec3 v) {
+  const vec2 c = vec2(1.0 / 6.0, 1.0 / 3.0);
+  const vec4 d = vec4(0.0, 0.5, 1.0, 2.0);
+
+  vec3 i = floor(v + dot(v, c.yyy));
+  vec3 x0 = v - i + dot(i, c.xxx);
+
+  vec3 g = step(x0.yzx, x0.xyz);
+  vec3 l = 1.0 - g;
+  vec3 i1 = min(g.xyz, l.zxy);
+  vec3 i2 = max(g.xyz, l.zxy);
+
+  vec3 x1 = x0 - i1 + c.xxx;
+  vec3 x2 = x0 - i2 + c.yyy;
+  vec3 x3 = x0 - d.yyy;
+
+  i = mod289(i);
+  vec4 p = permute(permute(permute(
+    i.z + vec4(0.0, i1.z, i2.z, 1.0))
+    + i.y + vec4(0.0, i1.y, i2.y, 1.0))
+    + i.x + vec4(0.0, i1.x, i2.x, 1.0));
+
+  float n_ = 0.142857142857;
+  vec3 ns = n_ * d.wyz - d.xzx;
+  vec4 j = p - 49.0 * floor(p * ns.z * ns.z);
+  vec4 x_ = floor(j * ns.z);
+  vec4 y_ = floor(j - 7.0 * x_);
+  vec4 x = x_ * ns.x + ns.yyyy;
+  vec4 y = y_ * ns.x + ns.yyyy;
+  vec4 h = 1.0 - abs(x) - abs(y);
+  vec4 b0 = vec4(x.xy, y.xy);
+  vec4 b1 = vec4(x.zw, y.zw);
+  vec4 s0 = floor(b0) * 2.0 + 1.0;
+  vec4 s1 = floor(b1) * 2.0 + 1.0;
+  vec4 sh = -step(h, vec4(0.0));
+  vec4 a0 = b0.xzyw + s0.xzyw * sh.xxyy;
+  vec4 a1 = b1.xzyw + s1.xzyw * sh.zzww;
+  vec3 p0 = vec3(a0.xy, h.x);
+  vec3 p1 = vec3(a0.zw, h.y);
+  vec3 p2 = vec3(a1.xy, h.z);
+  vec3 p3 = vec3(a1.zw, h.w);
+  vec4 norm = taylorInvSqrt(vec4(dot(p0, p0), dot(p1, p1), dot(p2, p2), dot(p3, p3)));
+  p0 *= norm.x;
+  p1 *= norm.y;
+  p2 *= norm.z;
+  p3 *= norm.w;
+  vec4 m = max(0.6 - vec4(dot(x0, x0), dot(x1, x1), dot(x2, x2), dot(x3, x3)), 0.0);
+  m = m * m;
+
+  return 42.0 * dot(m * m, vec4(dot(p0, x0), dot(p1, x1), dot(p2, x2), dot(p3, x3)));
+}
+
+float perlinSurface(vec2 uv, float time) {
+  vec2 p = (uv - 0.5) * vec2(3.4, 5.2);
+  float low = snoise(vec3(p * 0.19, time * 0.072));
+  float mid = snoise(vec3(p * 0.8 + vec2(7.4, -3.2), time * 0.1188));
+  float high = snoise(vec3(p * 1.5 + vec2(-2.0, 5.7), time * 0.1728));
+
+  return (low * 0.62 + mid * 0.28 + high * 0.1) * 1.42;
+}
+
+vec3 sampleGradient(vec2 screenUv, vec2 resolution, vec2 drift) {
+  vec2 perlinWarp = vec2(0.0);
+
+  if (uUsePerlinSource > 0.5) {
+    float epsilon = 0.012;
+    float height = perlinSurface(screenUv, uTime);
+    vec2 slope = vec2(
+      perlinSurface(screenUv + vec2(epsilon, 0.0), uTime) - height,
+      perlinSurface(screenUv + vec2(0.0, epsilon), uTime) - height
+    ) / epsilon;
+    perlinWarp = slope * vec2(0.012, 0.008) + height * vec2(0.006, -0.004);
+  }
+
+  float canvasAspect = resolution.x / resolution.y;
+  float svgAspect = SVG_SIZE.x / SVG_SIZE.y;
+  vec2 viewSize = canvasAspect > svgAspect
+    ? vec2(SVG_SIZE.x, SVG_SIZE.x / canvasAspect)
+    : vec2(SVG_SIZE.y * canvasAspect, SVG_SIZE.y);
+  // Drift is applied here, in the gradient's own coordinate space, so it moves the image behind
+  // the slats without touching insideView() below — offsetting screenUv instead would push samples
+  // outside [0,1] and paint a black sliver along the edges.
+  vec2 svgPoint = (screenUv - 0.5 + perlinWarp) * viewSize + SVG_SIZE * 0.5 + drift;
+
+  vec3 color = vec3(0.035, 0.451, 1.0);
+
+  color = composite(
+    color,
+    vec3(0.118, 0.576, 1.0),
+    ellipseMask(svgPoint, vec2(827.0, 200.5), vec2(1674.0, 1674.5))
+  );
+  color = composite(
+    color,
+    vec3(0.024, 0.451, 1.0),
+    ellipseMask(svgPoint, vec2(827.0, 200.5), vec2(1271.0, 1270.5))
+  );
+  color = composite(
+    color,
+    vec3(0.439, 0.0, 0.941),
+    ellipseMask(svgPoint, vec2(739.5, -116.499), vec2(1248.5, 1248.5))
+  );
+  color = composite(
+    color,
+    BACKGROUND,
+    ellipseMask(svgPoint, vec2(820.5, -380.0), vec2(1374.5, 1375.0))
+  );
+
+  return mix(BACKGROUND, color, insideView(screenUv));
+}
+
+void main() {
+  vec2 resolution = max(uResolution, vec2(1.0));
+  vec2 screenUv = vec2(
+    gl_FragCoord.x / resolution.x,
+    1.0 - gl_FragCoord.y / resolution.y
+  );
+
+  // The slats pull back into place over the reveal and are then pinned for good: past uReveal = 1
+  // this collapses to a no-op, so the lattice never drifts while the page is just sitting there.
+  float settle = 1.0 + uSettle * (1.0 - uReveal);
+  screenUv = (screenUv - 0.5) / settle + 0.5;
+
+  vec2 px = screenUv * resolution;
+  vec2 centerPx = uCenter * resolution;
+  vec2 normal = normalize(vec2(sin(uAngle), cos(uAngle)));
+  float period = max(resolution.x * uPeriodRatio, 1.0);
+  float signedStrength = clamp(uStrength, -100.0, 100.0) / 100.0;
+  float strength = abs(signedStrength);
+  float stripeAxis = dot(px - centerPx, normal);
+  float cell = fract(stripeAxis / period + 0.115);
+  float opticalPhase = mix(cell, 1.0 - cell, step(0.0, signedStrength));
+
+  // Two mismatched periods keep the wander from visibly looping.
+  vec2 drift = vec2(sin(uTime * 0.27) * 104.0, cos(uTime * 0.19) * 76.0);
+
+  float edgePosition = opticalPhase * 2.0 - 1.0;
+  float edgeProximity = pow(abs(edgePosition), 1.3);
+  float refractionAmount = strength * edgeProximity * 0.7;
+  float targetY = 1.0 - step(0.0, edgePosition);
+  vec2 leftUv = mix(screenUv, vec2(0.0, targetY), refractionAmount);
+  vec2 rightUv = mix(screenUv, vec2(1.0, targetY), refractionAmount);
+  float sideMix = smoothstep(uCenter.x - 0.1, uCenter.x + 0.1, screenUv.x);
+  vec3 color = mix(
+    sampleGradient(leftUv, resolution, drift),
+    sampleGradient(rightUv, resolution, drift),
+    sideMix
+  );
+
+  gl_FragColor = vec4(mix(BACKGROUND, color, uReveal), 1.0);
+}
+`;
+
+export type LenticularShaderSettings = {
+  angleDegrees?: number;
+  centerX?: number;
+  centerY?: number;
+  periodRatio?: number;
+  strength?: number;
+};
+
+function HeroShaderPlane({
+  animateIdle,
+  settings,
+  usePerlinSource,
+}: {
+  animateIdle: boolean;
+  settings: Required<LenticularShaderSettings>;
+  usePerlinSource: boolean;
+}) {
+  const { gl, size } = useThree();
+  const materialRef = useRef<THREE.ShaderMaterial>(null);
+  const elapsedRef = useRef(0);
+
+  // Seed values only. R3F clones the `uniforms` prop onto the material, so writing back to this
+  // object would be a no-op for scalars — every runtime update below goes through the material.
+  const initialUniforms = useMemo(
+    () => ({
+      uAngle: { value: 0 },
+      uCenter: { value: new THREE.Vector2() },
+      uPeriodRatio: { value: 0 },
+      uResolution: { value: new THREE.Vector2(1, 1) },
+      uReveal: { value: 0 },
+      uSettle: { value: 0 },
+      uStrength: { value: 0 },
+      uTime: { value: 0 },
+      uUsePerlinSource: { value: 0 },
+    }),
+    [],
+  );
+
+  useEffect(() => {
+    const material = materialRef.current;
+    if (material) {
+      gl.getDrawingBufferSize(material.uniforms.uResolution.value);
+    }
+  }, [gl, size.height, size.width]);
+
+  useEffect(() => {
+    const material = materialRef.current;
+    if (!material) {
+      return;
+    }
+    material.uniforms.uAngle.value = THREE.MathUtils.degToRad(settings.angleDegrees);
+    material.uniforms.uCenter.value.set(settings.centerX, settings.centerY);
+    material.uniforms.uPeriodRatio.value = settings.periodRatio;
+    material.uniforms.uStrength.value = settings.strength;
+    material.uniforms.uSettle.value = animateIdle ? REVEAL_SETTLE : 0;
+    material.uniforms.uUsePerlinSource.value = usePerlinSource ? 1 : 0;
+  }, [
+    animateIdle,
+    settings.angleDegrees,
+    settings.centerX,
+    settings.centerY,
+    settings.periodRatio,
+    settings.strength,
+    usePerlinSource,
+  ]);
+
+  // Driving the reveal from the render loop rather than React guarantees the first painted frame is
+  // the bare background — a CSS transition would race the canvas' first draw and flash the gradient.
+  useFrame((_, delta) => {
+    const material = materialRef.current;
+    if (!material) {
+      return;
+    }
+    elapsedRef.current += delta;
+    const progress = Math.min(1, elapsedRef.current / REVEAL_SECONDS);
+    material.uniforms.uReveal.value = 1 - (1 - progress) ** 3;
+    if (animateIdle) {
+      material.uniforms.uTime.value = elapsedRef.current;
+    }
+  });
+
+  return (
+    <mesh>
+      <planeGeometry args={[2, 2]} />
+      <shaderMaterial
+        fragmentShader={fragmentShader}
+        ref={materialRef}
+        uniforms={initialUniforms}
+        vertexShader={vertexShader}
+      />
+    </mesh>
+  );
+}
+
+export type HeroShaderSource = "landing" | "perlin";
+
+/** Renders a gradient source through the landing page's lenticular shader. */
+export function HeroShader({
+  settings = {},
+  source = "landing",
+}: {
+  settings?: LenticularShaderSettings;
+  source?: HeroShaderSource;
+}) {
+  const prefersReducedMotion = useReducedMotion();
+  const resolvedSettings = {
+    angleDegrees: settings.angleDegrees ?? DEFAULT_ANGLE_DEGREES,
+    centerX: settings.centerX ?? DEFAULT_CENTER_X,
+    centerY: settings.centerY ?? DEFAULT_CENTER_Y,
+    periodRatio: settings.periodRatio ?? DEFAULT_PERIOD_RATIO,
+    strength: settings.strength ?? DEFAULT_STRENGTH,
+  };
+
+  return (
+    <div aria-hidden className="pointer-events-none h-full w-full overflow-hidden bg-zinc-950">
+      <Canvas
+        className="h-full w-full"
+        dpr={[1, 2]}
+        gl={{ alpha: false, antialias: true, powerPreference: "high-performance" }}
+        onCreated={({ gl }) => {
+          gl.outputColorSpace = THREE.SRGBColorSpace;
+          gl.setClearColor(BACKGROUND_HEX, 1);
+        }}
+      >
+        <HeroShaderPlane
+          animateIdle={!prefersReducedMotion}
+          settings={resolvedSettings}
+          usePerlinSource={source === "perlin"}
+        />
+      </Canvas>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/asteroids/engine.ts b/apps/www/src/features/www/landing/asteroids/engine.ts
new file mode 100644
index 000000000..b2cb52b04
--- /dev/null
+++ b/apps/www/src/features/www/landing/asteroids/engine.ts
@@ -0,0 +1,1088 @@
+/**
+ * Vector-arcade engine behind the landing page's Asteroids easter egg.
+ *
+ * Deliberately framework-free and allocation-free: every entity lives in a pre-sized typed array,
+ * the loop only runs while the board is on screen and being played, and `destroy()` hands the
+ * canvas' backing store back to the browser. Nothing here touches React, so the whole module can
+ * be code-split away from the landing bundle.
+ */
+
+const TAU = Math.PI * 2;
+
+/** Fixed simulation step. Decoupling it from the display refresh keeps a 120Hz screen fair. */
+const STEP_SECONDS = 1 / 60;
+
+/** Clamp on a single frame's delta, so a backgrounded tab does not resume with a huge catch-up. */
+const MAX_FRAME_SECONDS = 0.1;
+
+const MAX_BULLETS = 16;
+const MAX_ASTEROIDS = 48;
+const MAX_PARTICLES = 320;
+const STAR_COUNT = 70;
+
+/** Radius per asteroid tier: large, medium, small. */
+const TIER_RADII = [44, 25, 13];
+const TIER_SCORES = [20, 50, 100];
+const TIER_SPEEDS = [46, 68, 96];
+const SHAPE_VARIANTS = 4;
+
+const SHIP_TURN = 3.4;
+const SHIP_THRUST = 330;
+const SHIP_DRAG = 0.35;
+const SHIP_MAX_SPEED = 400;
+const SHIP_RADIUS = 11;
+
+const BULLET_SPEED = 520;
+const BULLET_LIFE = 1.05;
+const FIRE_INTERVAL = 0.2;
+
+const START_LIVES = 3;
+const RESPAWN_DELAY = 1.1;
+const INVULNERABLE_SECONDS = 2.4;
+const WAVE_DELAY = 1.4;
+
+/** Radius around the spawn point that must be clear of rocks before the ship comes back. */
+const SPAWN_CLEARANCE = 90;
+
+/**
+ * Cap on the backing store so a wide monitor at dpr 3 does not allocate a 30MB canvas. Kept modest
+ * because the CRT pass doubles the buffers (2D scene + WebGL target) and uploads the scene as a
+ * texture every frame; the shader's softness hides the reduced sampling anyway.
+ */
+const MAX_DEVICE_PIXELS = 2_600_000;
+
+const BACKDROP = "#000000";
+const STAR_DIM = "#27272a";
+const STAR_BRIGHT = "#3f3f46";
+const SHIP_COLOR = "#fafafa";
+const BULLET_COLOR = "#1e93ff";
+const BULLET_HALO = "rgba(30, 147, 255, 0.3)";
+const THRUST_COLOR = "#e4e4e7";
+
+/** Grayscale per tier — large rocks read as background, small ones as threats. */
+const TIER_COLORS = ["#52525c", "#71717b", "#a1a1aa"];
+
+/** Monochrome sparks: the missiles stay the only colour on the board. */
+const PARTICLE_COLORS = ["#fafafa", "#a1a1aa", "#52525c"];
+
+/**
+ * Distance of the virtual camera from a rock's centre, in radii. Governs how hard the wireframe's
+ * near side is magnified against its far side — lower reads more 3D, higher more orthographic.
+ */
+const ROCK_FOCAL_RADII = 6;
+
+export type AsteroidsStatus = "idle" | "playing" | "paused" | "over";
+
+export type AsteroidsHud = {
+  score: number;
+  lives: number;
+  wave: number;
+};
+
+export type AsteroidsAction = "left" | "right" | "thrust" | "fire";
+
+/**
+ * Optional post-processing stage: the engine renders the scene into its own 2D canvas and hands
+ * every finished frame over instead of showing that canvas directly.
+ */
+export type AsteroidsCompositor = {
+  resize: (width: number, height: number, scale: number) => void;
+  draw: (scene: HTMLCanvasElement, timeSeconds: number) => void;
+};
+
+export type AsteroidsEngineOptions = {
+  canvas: HTMLCanvasElement;
+  compositor?: AsteroidsCompositor | null;
+  reducedMotion: boolean;
+  onHud: (hud: AsteroidsHud) => void;
+  onStatus: (status: AsteroidsStatus) => void;
+};
+
+/** Small deterministic PRNG, used so the rock silhouettes are identical on every visit. */
+function mulberry32(seed: number): () => number {
+  let state = seed >>> 0;
+  return () => {
+    state = (state + 0x6d_2b_79_f5) | 0;
+    let t = Math.imul(state ^ (state >>> 15), 1 | state);
+    t = (t + Math.imul(t ^ (t >>> 7), 61 | t)) ^ t;
+    return ((t ^ (t >>> 14)) >>> 0) / 4_294_967_296;
+  };
+}
+
+const GOLDEN = (1 + Math.sqrt(5)) / 2;
+
+/** Unit icosahedron vertices; every rock mesh is a radially deformed copy of these 12 points. */
+const ICO_VERTICES = [
+  [-1, GOLDEN, 0],
+  [1, GOLDEN, 0],
+  [-1, -GOLDEN, 0],
+  [1, -GOLDEN, 0],
+  [0, -1, GOLDEN],
+  [0, 1, GOLDEN],
+  [0, -1, -GOLDEN],
+  [0, 1, -GOLDEN],
+  [GOLDEN, 0, -1],
+  [GOLDEN, 0, 1],
+  [-GOLDEN, 0, -1],
+  [-GOLDEN, 0, 1],
+] as const;
+
+const ROCK_VERTEX_COUNT = ICO_VERTICES.length;
+
+/**
+ * The icosahedron's 30 edges as flat index pairs. Radial deformation moves vertices along their own
+ * axis only, so the connectivity is shared by every variant.
+ */
+let sharedRockEdges: Uint8Array | null = null;
+
+function rockEdges(): Uint8Array {
+  if (sharedRockEdges) {
+    return sharedRockEdges;
+  }
+
+  const pairs: number[] = [];
+  for (let a = 0; a < ROCK_VERTEX_COUNT; a += 1) {
+    for (let b = a + 1; b < ROCK_VERTEX_COUNT; b += 1) {
+      const dx = ICO_VERTICES[a][0] - ICO_VERTICES[b][0];
+      const dy = ICO_VERTICES[a][1] - ICO_VERTICES[b][1];
+      const dz = ICO_VERTICES[a][2] - ICO_VERTICES[b][2];
+      // Adjacent icosahedron vertices sit exactly 2 apart at this scale.
+      if (dx * dx + dy * dy + dz * dz < 4.1) {
+        pairs.push(a, b);
+      }
+    }
+  }
+
+  sharedRockEdges = new Uint8Array(pairs);
+  return sharedRockEdges;
+}
+
+/**
+ * Deformed rock meshes per tier and variant, as flat `x, y, z` vertex triples.
+ *
+ * Built lazily so the module stays importable during server rendering, and seeded so every visit
+ * tumbles the same rocks.
+ */
+let sharedRockMeshes: Float32Array[][] | null = null;
+
+function rockMeshes(): Float32Array[][] {
+  if (sharedRockMeshes) {
+    return sharedRockMeshes;
+  }
+
+  const random = mulberry32(0x5e_ed_10_23);
+  const norm = Math.hypot(1, GOLDEN);
+
+  sharedRockMeshes = TIER_RADII.map((radius) => {
+    const variants: Float32Array[] = [];
+    for (let variant = 0; variant < SHAPE_VARIANTS; variant += 1) {
+      const mesh = new Float32Array(ROCK_VERTEX_COUNT * 3);
+      for (let vertex = 0; vertex < ROCK_VERTEX_COUNT; vertex += 1) {
+        const reach = (radius * (0.74 + random() * 0.38)) / norm;
+        mesh[vertex * 3] = ICO_VERTICES[vertex][0] * reach;
+        mesh[vertex * 3 + 1] = ICO_VERTICES[vertex][1] * reach;
+        mesh[vertex * 3 + 2] = ICO_VERTICES[vertex][2] * reach;
+      }
+      variants.push(mesh);
+    }
+    return variants;
+  });
+
+  return sharedRockMeshes;
+}
+
+let sharedShipPath: Path2D | null = null;
+let sharedFlamePath: Path2D | null = null;
+
+function shipPath(): Path2D {
+  if (!sharedShipPath) {
+    const path = new Path2D();
+    path.moveTo(15, 0);
+    path.lineTo(-10, 9);
+    path.lineTo(-6, 0);
+    path.lineTo(-10, -9);
+    path.closePath();
+    sharedShipPath = path;
+  }
+  return sharedShipPath;
+}
+
+function flamePath(): Path2D {
+  if (!sharedFlamePath) {
+    const path = new Path2D();
+    path.moveTo(-7, 5);
+    path.lineTo(-17, 0);
+    path.lineTo(-7, -5);
+    sharedFlamePath = path;
+  }
+  return sharedFlamePath;
+}
+
+/** Shortest signed distance between two coordinates on a wrapping axis. */
+function wrapDelta(delta: number, size: number): number {
+  if (delta > size * 0.5) {
+    return delta - size;
+  }
+  if (delta < -size * 0.5) {
+    return delta + size;
+  }
+  return delta;
+}
+
+export class AsteroidsEngine {
+  private readonly canvas: HTMLCanvasElement;
+  private readonly ctx: CanvasRenderingContext2D;
+  private readonly compositor: AsteroidsCompositor | null;
+  private readonly reducedMotion: boolean;
+  private readonly onHud: (hud: AsteroidsHud) => void;
+  private readonly onStatus: (status: AsteroidsStatus) => void;
+
+  private width = 0;
+  private height = 0;
+  private scale = 1;
+
+  private status: AsteroidsStatus = "idle";
+  private destroyed = false;
+  private frameHandle = 0;
+  private lastFrameTime = 0;
+  private accumulator = 0;
+  private elapsed = 0;
+
+  private score = 0;
+  private lives = START_LIVES;
+  private wave = 0;
+
+  private readonly input = { left: false, right: false, thrust: false, fire: false };
+
+  private shipX = 0;
+  private shipY = 0;
+  private shipVx = 0;
+  private shipVy = 0;
+  private shipAngle = -Math.PI / 2;
+  private shipAlive = false;
+  private respawnTimer = 0;
+  private invulnerableTimer = 0;
+  private fireTimer = 0;
+  private waveTimer = 0;
+  private shake = 0;
+
+  private readonly bulletX = new Float32Array(MAX_BULLETS);
+  private readonly bulletY = new Float32Array(MAX_BULLETS);
+  private readonly bulletVx = new Float32Array(MAX_BULLETS);
+  private readonly bulletVy = new Float32Array(MAX_BULLETS);
+  private readonly bulletLife = new Float32Array(MAX_BULLETS);
+  private bulletCount = 0;
+
+  private readonly rockX = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockY = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockVx = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockVy = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockPitch = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockYaw = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockPitchSpin = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockYawSpin = new Float32Array(MAX_ASTEROIDS);
+  private readonly rockTier = new Uint8Array(MAX_ASTEROIDS);
+  private readonly rockVariant = new Uint8Array(MAX_ASTEROIDS);
+  private rockCount = 0;
+
+  /** Scratch for a single rock's projected vertices during rendering. */
+  private readonly projectedX = new Float32Array(ROCK_VERTEX_COUNT);
+  private readonly projectedY = new Float32Array(ROCK_VERTEX_COUNT);
+
+  private readonly particleX = new Float32Array(MAX_PARTICLES);
+  private readonly particleY = new Float32Array(MAX_PARTICLES);
+  private readonly particleVx = new Float32Array(MAX_PARTICLES);
+  private readonly particleVy = new Float32Array(MAX_PARTICLES);
+  private readonly particleLife = new Float32Array(MAX_PARTICLES);
+  private readonly particleSpan = new Float32Array(MAX_PARTICLES);
+  private readonly particleColor = new Uint8Array(MAX_PARTICLES);
+  private particleCount = 0;
+
+  /** Star field as flat `x, y, size` triples — cheaper to keep than an offscreen canvas. */
+  private readonly stars = new Float32Array(STAR_COUNT * 3);
+
+  /** Scratch buffers for `spreadWrapped`, at most one copy per screen corner. */
+  private readonly wrapSpreadX = new Float32Array(4);
+  private readonly wrapSpreadY = new Float32Array(4);
+
+  constructor({ canvas, compositor, reducedMotion, onHud, onStatus }: AsteroidsEngineOptions) {
+    const ctx = canvas.getContext("2d", { alpha: false });
+    if (!ctx) {
+      throw new Error("Asteroids needs a 2D canvas context");
+    }
+
+    this.canvas = canvas;
+    this.ctx = ctx;
+    this.compositor = compositor ?? null;
+    this.reducedMotion = reducedMotion;
+    this.onHud = onHud;
+    this.onStatus = onStatus;
+  }
+
+  /** Resizes the backing store to `width` x `height` CSS pixels and repaints once. */
+  resize(width: number, height: number): void {
+    if (this.destroyed || width <= 0 || height <= 0) {
+      return;
+    }
+
+    const requested = Math.min(window.devicePixelRatio || 1, 2);
+    const budget = Math.sqrt(MAX_DEVICE_PIXELS / (width * height));
+    const scale = Math.max(1, Math.min(requested, budget));
+    const sizeChanged = width !== this.width || height !== this.height;
+
+    this.width = width;
+    this.height = height;
+    this.scale = scale;
+    this.canvas.width = Math.round(width * scale);
+    this.canvas.height = Math.round(height * scale);
+    this.ctx.setTransform(scale, 0, 0, scale, 0, 0);
+    this.compositor?.resize(width, height, scale);
+
+    if (sizeChanged) {
+      this.seedStars();
+      if (this.status === "idle") {
+        this.layoutAttractField();
+      } else {
+        this.containEntities();
+      }
+    }
+
+    this.render();
+  }
+
+  /** Starts a fresh run from wave one. */
+  start(): void {
+    if (this.destroyed) {
+      return;
+    }
+
+    this.score = 0;
+    this.lives = START_LIVES;
+    this.wave = 0;
+    this.elapsed = 0;
+    this.accumulator = 0;
+    this.shake = 0;
+    this.bulletCount = 0;
+    this.rockCount = 0;
+    this.particleCount = 0;
+    this.input.left = false;
+    this.input.right = false;
+    this.input.thrust = false;
+    this.input.fire = false;
+
+    this.spawnShip();
+    this.startWave();
+    this.emitHud();
+    this.setStatus("playing");
+    this.runLoop();
+  }
+
+  /** Suspends the loop, keeping the board exactly as it stands. */
+  pause(): void {
+    if (this.status !== "playing") {
+      return;
+    }
+    this.setStatus("paused");
+    this.stopLoop();
+    this.render();
+  }
+
+  /** Resumes a paused run. */
+  resume(): void {
+    if (this.status !== "paused" || this.destroyed) {
+      return;
+    }
+    this.setStatus("playing");
+    this.runLoop();
+  }
+
+  /**
+   * Gates the render loop on the board being worth animating — on screen, in a visible tab.
+   *
+   * Separate from `pause()`: that is the player's own pause and shows an overlay, whereas this is
+   * the page telling the engine nobody can see it, which should cost nothing at all.
+   */
+  setActive(active: boolean): void {
+    if (this.destroyed) {
+      return;
+    }
+
+    if (!active) {
+      this.stopLoop();
+      return;
+    }
+    if (this.status === "idle" || this.status === "playing") {
+      this.runLoop();
+    }
+  }
+
+  setInput(action: AsteroidsAction, pressed: boolean): void {
+    this.input[action] = pressed;
+  }
+
+  /** Cancels the loop, drops listeners' last frame and releases the canvas' backing store. */
+  destroy(): void {
+    this.destroyed = true;
+    this.stopLoop();
+    this.canvas.width = 0;
+    this.canvas.height = 0;
+  }
+
+  private setStatus(status: AsteroidsStatus): void {
+    if (this.status !== status) {
+      this.status = status;
+      this.onStatus(status);
+    }
+  }
+
+  private emitHud(): void {
+    this.onHud({ lives: this.lives, score: this.score, wave: this.wave });
+  }
+
+  private runLoop(): void {
+    if (this.frameHandle !== 0 || this.destroyed) {
+      return;
+    }
+    this.lastFrameTime = performance.now();
+    this.frameHandle = requestAnimationFrame(this.frame);
+  }
+
+  private stopLoop(): void {
+    if (this.frameHandle !== 0) {
+      cancelAnimationFrame(this.frameHandle);
+      this.frameHandle = 0;
+    }
+  }
+
+  private readonly frame = (time: number): void => {
+    this.frameHandle = requestAnimationFrame(this.frame);
+
+    const delta = Math.min((time - this.lastFrameTime) / 1000, MAX_FRAME_SECONDS);
+    this.lastFrameTime = time;
+    this.accumulator += delta;
+
+    while (this.accumulator >= STEP_SECONDS) {
+      this.step(STEP_SECONDS);
+      this.accumulator -= STEP_SECONDS;
+    }
+
+    this.render();
+
+    // Once the wreckage has settled there is nothing left to animate on the game-over board, so the
+    // loop retires itself instead of burning a frame budget behind the overlay.
+    if (this.status === "over" && this.particleCount === 0 && this.shake === 0) {
+      this.stopLoop();
+    }
+  };
+
+  private step(delta: number): void {
+    this.elapsed += delta;
+    this.shake = Math.max(0, this.shake - delta * 26);
+
+    if (this.status === "playing") {
+      this.stepShip(delta);
+      this.stepBullets(delta);
+    }
+
+    this.stepRocks(delta);
+    this.stepParticles(delta);
+
+    if (this.status !== "playing") {
+      return;
+    }
+
+    this.resolveBulletHits();
+    this.resolveShipHits();
+
+    if (this.rockCount === 0) {
+      this.waveTimer -= delta;
+      if (this.waveTimer <= 0) {
+        this.startWave();
+      }
+    }
+
+    if (!this.shipAlive && this.lives > 0) {
+      this.respawnTimer -= delta;
+      if (this.respawnTimer <= 0 && this.spawnPointIsClear()) {
+        this.spawnShip();
+      }
+    }
+  }
+
+  private stepShip(delta: number): void {
+    this.invulnerableTimer = Math.max(0, this.invulnerableTimer - delta);
+    this.fireTimer = Math.max(0, this.fireTimer - delta);
+
+    if (!this.shipAlive) {
+      return;
+    }
+
+    if (this.input.left) {
+      this.shipAngle -= SHIP_TURN * delta;
+    }
+    if (this.input.right) {
+      this.shipAngle += SHIP_TURN * delta;
+    }
+
+    if (this.input.thrust) {
+      this.shipVx += Math.cos(this.shipAngle) * SHIP_THRUST * delta;
+      this.shipVy += Math.sin(this.shipAngle) * SHIP_THRUST * delta;
+
+      const speed = Math.hypot(this.shipVx, this.shipVy);
+      if (speed > SHIP_MAX_SPEED) {
+        const clamp = SHIP_MAX_SPEED / speed;
+        this.shipVx *= clamp;
+        this.shipVy *= clamp;
+      }
+      if (!this.reducedMotion) {
+        this.emitThrustSpark();
+      }
+    }
+
+    const drag = Math.max(0, 1 - SHIP_DRAG * delta);
+    this.shipVx *= drag;
+    this.shipVy *= drag;
+    this.shipX = this.wrapX(this.shipX + this.shipVx * delta);
+    this.shipY = this.wrapY(this.shipY + this.shipVy * delta);
+
+    if (this.input.fire && this.fireTimer === 0) {
+      this.fireBullet();
+    }
+  }
+
+  private stepBullets(delta: number): void {
+    for (let index = this.bulletCount - 1; index >= 0; index -= 1) {
+      this.bulletLife[index] -= delta;
+      if (this.bulletLife[index] <= 0) {
+        this.removeBullet(index);
+        continue;
+      }
+      this.bulletX[index] = this.wrapX(this.bulletX[index] + this.bulletVx[index] * delta);
+      this.bulletY[index] = this.wrapY(this.bulletY[index] + this.bulletVy[index] * delta);
+    }
+  }
+
+  private stepRocks(delta: number): void {
+    for (let index = 0; index < this.rockCount; index += 1) {
+      this.rockX[index] = this.wrapX(this.rockX[index] + this.rockVx[index] * delta);
+      this.rockY[index] = this.wrapY(this.rockY[index] + this.rockVy[index] * delta);
+      this.rockPitch[index] += this.rockPitchSpin[index] * delta;
+      this.rockYaw[index] += this.rockYawSpin[index] * delta;
+    }
+  }
+
+  private stepParticles(delta: number): void {
+    for (let index = this.particleCount - 1; index >= 0; index -= 1) {
+      this.particleLife[index] -= delta;
+      if (this.particleLife[index] <= 0) {
+        this.removeParticle(index);
+        continue;
+      }
+      this.particleX[index] += this.particleVx[index] * delta;
+      this.particleY[index] += this.particleVy[index] * delta;
+      this.particleVx[index] *= 0.98;
+      this.particleVy[index] *= 0.98;
+    }
+  }
+
+  private resolveBulletHits(): void {
+    for (let bullet = this.bulletCount - 1; bullet >= 0; bullet -= 1) {
+      for (let rock = this.rockCount - 1; rock >= 0; rock -= 1) {
+        const radius = TIER_RADII[this.rockTier[rock]];
+        const dx = wrapDelta(this.bulletX[bullet] - this.rockX[rock], this.width);
+        const dy = wrapDelta(this.bulletY[bullet] - this.rockY[rock], this.height);
+        if (dx * dx + dy * dy > radius * radius) {
+          continue;
+        }
+
+        this.removeBullet(bullet);
+        this.breakRock(rock);
+        break;
+      }
+    }
+  }
+
+  private resolveShipHits(): void {
+    if (!this.shipAlive || this.invulnerableTimer > 0) {
+      return;
+    }
+
+    for (let rock = this.rockCount - 1; rock >= 0; rock -= 1) {
+      const radius = TIER_RADII[this.rockTier[rock]] + SHIP_RADIUS * 0.7;
+      const dx = wrapDelta(this.shipX - this.rockX[rock], this.width);
+      const dy = wrapDelta(this.shipY - this.rockY[rock], this.height);
+      if (dx * dx + dy * dy > radius * radius) {
+        continue;
+      }
+
+      this.breakRock(rock);
+      this.destroyShip();
+      return;
+    }
+  }
+
+  private breakRock(index: number): void {
+    const tier = this.rockTier[index];
+    const x = this.rockX[index];
+    const y = this.rockY[index];
+
+    this.score += TIER_SCORES[tier];
+    this.shake = Math.min(this.shake + (tier === 0 ? 6 : 3), 12);
+    this.emitBurst(x, y, tier === 0 ? 16 : 10, 130 + tier * 40);
+    this.removeRock(index);
+
+    if (tier < TIER_RADII.length - 1) {
+      const childTier = tier + 1;
+      const base = Math.random() * TAU;
+      for (let child = 0; child < 2; child += 1) {
+        this.addRock(x, y, childTier, base + child * Math.PI + (Math.random() - 0.5));
+      }
+    }
+
+    this.emitHud();
+    if (this.rockCount === 0) {
+      this.waveTimer = WAVE_DELAY;
+    }
+  }
+
+  private destroyShip(): void {
+    this.shipAlive = false;
+    this.lives -= 1;
+    this.shake = 14;
+    this.emitBurst(this.shipX, this.shipY, 26, 190);
+    this.emitHud();
+
+    if (this.lives <= 0) {
+      this.setStatus("over");
+      return;
+    }
+    this.respawnTimer = RESPAWN_DELAY;
+  }
+
+  private spawnShip(): void {
+    this.shipX = this.width * 0.5;
+    this.shipY = this.height * 0.5;
+    this.shipVx = 0;
+    this.shipVy = 0;
+    this.shipAngle = -Math.PI / 2;
+    this.shipAlive = true;
+    this.invulnerableTimer = INVULNERABLE_SECONDS;
+  }
+
+  private spawnPointIsClear(): boolean {
+    const centerX = this.width * 0.5;
+    const centerY = this.height * 0.5;
+
+    for (let rock = 0; rock < this.rockCount; rock += 1) {
+      const reach = SPAWN_CLEARANCE + TIER_RADII[this.rockTier[rock]];
+      const dx = wrapDelta(centerX - this.rockX[rock], this.width);
+      const dy = wrapDelta(centerY - this.rockY[rock], this.height);
+      if (dx * dx + dy * dy < reach * reach) {
+        return false;
+      }
+    }
+    return true;
+  }
+
+  private startWave(): void {
+    this.wave += 1;
+    const count = Math.min(3 + this.wave, 9);
+
+    for (let index = 0; index < count; index += 1) {
+      // Rocks enter from the rim so a wave never materialises on top of the ship.
+      const alongEdge = Math.random();
+      const onVerticalEdge = Math.random() < 0.5;
+      const x = onVerticalEdge ? (Math.random() < 0.5 ? 0 : this.width) : alongEdge * this.width;
+      const y = onVerticalEdge ? alongEdge * this.height : Math.random() < 0.5 ? 0 : this.height;
+      this.addRock(x, y, 0, Math.random() * TAU);
+    }
+
+    this.emitHud();
+  }
+
+  private addRock(x: number, y: number, tier: number, heading: number): void {
+    if (this.rockCount >= MAX_ASTEROIDS) {
+      return;
+    }
+
+    const index = this.rockCount;
+    this.rockCount += 1;
+
+    const speed = TIER_SPEEDS[tier] * (0.7 + Math.random() * 0.6) * (1 + this.wave * 0.04);
+    this.rockX[index] = x;
+    this.rockY[index] = y;
+    this.rockVx[index] = Math.cos(heading) * speed;
+    this.rockVy[index] = Math.sin(heading) * speed;
+    this.rockPitch[index] = Math.random() * TAU;
+    this.rockYaw[index] = Math.random() * TAU;
+    this.rockPitchSpin[index] = (Math.random() - 0.5) * 1.4;
+    this.rockYawSpin[index] = (Math.random() - 0.5) * 1.4;
+    this.rockTier[index] = tier;
+    this.rockVariant[index] = Math.floor(Math.random() * SHAPE_VARIANTS);
+  }
+
+  private fireBullet(): void {
+    if (this.bulletCount >= MAX_BULLETS) {
+      return;
+    }
+
+    const index = this.bulletCount;
+    this.bulletCount += 1;
+    this.fireTimer = FIRE_INTERVAL;
+
+    const cos = Math.cos(this.shipAngle);
+    const sin = Math.sin(this.shipAngle);
+    this.bulletX[index] = this.shipX + cos * SHIP_RADIUS;
+    this.bulletY[index] = this.shipY + sin * SHIP_RADIUS;
+    this.bulletVx[index] = this.shipVx + cos * BULLET_SPEED;
+    this.bulletVy[index] = this.shipVy + sin * BULLET_SPEED;
+    this.bulletLife[index] = BULLET_LIFE;
+  }
+
+  private emitBurst(x: number, y: number, count: number, speed: number): void {
+    for (let index = 0; index < count; index += 1) {
+      const heading = Math.random() * TAU;
+      const reach = speed * (0.3 + Math.random() * 0.7);
+      this.addParticle(
+        x,
+        y,
+        Math.cos(heading) * reach,
+        Math.sin(heading) * reach,
+        0.4 + Math.random() * 0.5,
+        index % PARTICLE_COLORS.length,
+      );
+    }
+  }
+
+  private emitThrustSpark(): void {
+    const heading = this.shipAngle + Math.PI + (Math.random() - 0.5) * 0.6;
+    this.addParticle(
+      this.shipX + Math.cos(heading) * 9,
+      this.shipY + Math.sin(heading) * 9,
+      this.shipVx * 0.4 + Math.cos(heading) * 110,
+      this.shipVy * 0.4 + Math.sin(heading) * 110,
+      0.22,
+      1,
+    );
+  }
+
+  private addParticle(
+    x: number,
+    y: number,
+    vx: number,
+    vy: number,
+    span: number,
+    color: number,
+  ): void {
+    // The pool is a hard cap rather than a growable list: past it the newest spark is simply
+    // dropped, which is invisible in a burst and keeps the frame's memory ceiling fixed.
+    if (this.particleCount >= MAX_PARTICLES) {
+      return;
+    }
+
+    const index = this.particleCount;
+    this.particleCount += 1;
+    this.particleX[index] = x;
+    this.particleY[index] = y;
+    this.particleVx[index] = vx;
+    this.particleVy[index] = vy;
+    this.particleLife[index] = span;
+    this.particleSpan[index] = span;
+    this.particleColor[index] = color;
+  }
+
+  private removeBullet(index: number): void {
+    this.bulletCount -= 1;
+    const last = this.bulletCount;
+    if (index === last) {
+      return;
+    }
+    this.bulletX[index] = this.bulletX[last];
+    this.bulletY[index] = this.bulletY[last];
+    this.bulletVx[index] = this.bulletVx[last];
+    this.bulletVy[index] = this.bulletVy[last];
+    this.bulletLife[index] = this.bulletLife[last];
+  }
+
+  private removeRock(index: number): void {
+    this.rockCount -= 1;
+    const last = this.rockCount;
+    if (index === last) {
+      return;
+    }
+    this.rockX[index] = this.rockX[last];
+    this.rockY[index] = this.rockY[last];
+    this.rockVx[index] = this.rockVx[last];
+    this.rockVy[index] = this.rockVy[last];
+    this.rockPitch[index] = this.rockPitch[last];
+    this.rockYaw[index] = this.rockYaw[last];
+    this.rockPitchSpin[index] = this.rockPitchSpin[last];
+    this.rockYawSpin[index] = this.rockYawSpin[last];
+    this.rockTier[index] = this.rockTier[last];
+    this.rockVariant[index] = this.rockVariant[last];
+  }
+
+  private removeParticle(index: number): void {
+    this.particleCount -= 1;
+    const last = this.particleCount;
+    if (index === last) {
+      return;
+    }
+    this.particleX[index] = this.particleX[last];
+    this.particleY[index] = this.particleY[last];
+    this.particleVx[index] = this.particleVx[last];
+    this.particleVy[index] = this.particleVy[last];
+    this.particleLife[index] = this.particleLife[last];
+    this.particleSpan[index] = this.particleSpan[last];
+    this.particleColor[index] = this.particleColor[last];
+  }
+
+  private wrapX(value: number): number {
+    if (value < 0) {
+      return value + this.width;
+    }
+    if (value >= this.width) {
+      return value - this.width;
+    }
+    return value;
+  }
+
+  private wrapY(value: number): number {
+    if (value < 0) {
+      return value + this.height;
+    }
+    if (value >= this.height) {
+      return value - this.height;
+    }
+    return value;
+  }
+
+  private containEntities(): void {
+    this.shipX = Math.min(this.shipX, this.width);
+    this.shipY = Math.min(this.shipY, this.height);
+    for (let rock = 0; rock < this.rockCount; rock += 1) {
+      this.rockX[rock] = Math.min(this.rockX[rock], this.width);
+      this.rockY[rock] = Math.min(this.rockY[rock], this.height);
+    }
+  }
+
+  private seedStars(): void {
+    for (let index = 0; index < STAR_COUNT; index += 1) {
+      const offset = index * 3;
+      this.stars[offset] = Math.random() * this.width;
+      this.stars[offset + 1] = Math.random() * this.height;
+      this.stars[offset + 2] = Math.random() < 0.2 ? 2 : 1;
+    }
+  }
+
+  /** Drifting rocks behind the idle overlay, so the board is never an empty rectangle. */
+  private layoutAttractField(): void {
+    this.rockCount = 0;
+    this.bulletCount = 0;
+    this.particleCount = 0;
+    this.shipAlive = false;
+
+    for (let index = 0; index < 5; index += 1) {
+      this.addRock(
+        Math.random() * this.width,
+        Math.random() * this.height,
+        index % 2,
+        Math.random() * TAU,
+      );
+    }
+  }
+
+  private render(): void {
+    const ctx = this.ctx;
+    ctx.fillStyle = BACKDROP;
+    ctx.fillRect(0, 0, this.width, this.height);
+
+    this.renderStars();
+
+    const shakeX = this.shake === 0 ? 0 : (Math.random() - 0.5) * this.shake;
+    const shakeY = this.shake === 0 ? 0 : (Math.random() - 0.5) * this.shake;
+    ctx.save();
+    ctx.translate(shakeX, shakeY);
+
+    ctx.lineJoin = "round";
+    this.renderRocks();
+    this.renderBullets();
+    this.renderParticles();
+    if (this.shipAlive) {
+      this.renderShip();
+    }
+
+    ctx.restore();
+
+    this.compositor?.draw(this.canvas, this.elapsed);
+  }
+
+  private renderStars(): void {
+    const ctx = this.ctx;
+    ctx.fillStyle = STAR_DIM;
+    for (let index = 0; index < STAR_COUNT; index += 1) {
+      const offset = index * 3;
+      const size = this.stars[offset + 2];
+      if (size > 1) {
+        continue;
+      }
+      ctx.fillRect(this.stars[offset], this.stars[offset + 1], 1, 1);
+    }
+
+    ctx.fillStyle = STAR_BRIGHT;
+    for (let index = 0; index < STAR_COUNT; index += 1) {
+      const offset = index * 3;
+      if (this.stars[offset + 2] <= 1) {
+        continue;
+      }
+      ctx.fillRect(this.stars[offset], this.stars[offset + 1], 2, 2);
+    }
+  }
+
+  /**
+   * Draws each rock as a tumbling 3D wireframe: the mesh is rotated around two axes, projected
+   * with a mild perspective, and its 30 edges stroked in a single path per rock.
+   */
+  private renderRocks(): void {
+    const ctx = this.ctx;
+    const meshes = rockMeshes();
+    const edges = rockEdges();
+    ctx.lineWidth = 1.25;
+
+    for (let index = 0; index < this.rockCount; index += 1) {
+      const tier = this.rockTier[index];
+      const mesh = meshes[tier][this.rockVariant[index]];
+      const radius = TIER_RADII[tier];
+      const focal = radius * ROCK_FOCAL_RADII;
+
+      const cosPitch = Math.cos(this.rockPitch[index]);
+      const sinPitch = Math.sin(this.rockPitch[index]);
+      const cosYaw = Math.cos(this.rockYaw[index]);
+      const sinYaw = Math.sin(this.rockYaw[index]);
+
+      for (let vertex = 0; vertex < ROCK_VERTEX_COUNT; vertex += 1) {
+        const x = mesh[vertex * 3];
+        const y = mesh[vertex * 3 + 1];
+        const z = mesh[vertex * 3 + 2];
+        const rotatedY = y * cosPitch - z * sinPitch;
+        const pitchedZ = y * sinPitch + z * cosPitch;
+        const rotatedX = x * cosYaw + pitchedZ * sinYaw;
+        const rotatedZ = -x * sinYaw + pitchedZ * cosYaw;
+        const perspective = focal / (focal - rotatedZ);
+        this.projectedX[vertex] = rotatedX * perspective;
+        this.projectedY[vertex] = rotatedY * perspective;
+      }
+
+      const copies = this.spreadWrapped(this.rockX[index], this.rockY[index], radius * 1.4);
+      ctx.strokeStyle = TIER_COLORS[tier];
+      ctx.beginPath();
+      for (let copy = 0; copy < copies; copy += 1) {
+        const offsetX = this.wrapSpreadX[copy];
+        const offsetY = this.wrapSpreadY[copy];
+        for (let edge = 0; edge < edges.length; edge += 2) {
+          const a = edges[edge];
+          const b = edges[edge + 1];
+          ctx.moveTo(offsetX + this.projectedX[a], offsetY + this.projectedY[a]);
+          ctx.lineTo(offsetX + this.projectedX[b], offsetY + this.projectedY[b]);
+        }
+      }
+      ctx.stroke();
+    }
+  }
+
+  private renderBullets(): void {
+    const ctx = this.ctx;
+
+    ctx.fillStyle = BULLET_HALO;
+    for (let index = 0; index < this.bulletCount; index += 1) {
+      ctx.beginPath();
+      ctx.arc(this.bulletX[index], this.bulletY[index], 6, 0, TAU);
+      ctx.fill();
+    }
+
+    ctx.fillStyle = BULLET_COLOR;
+    for (let index = 0; index < this.bulletCount; index += 1) {
+      ctx.beginPath();
+      ctx.arc(this.bulletX[index], this.bulletY[index], 2.4, 0, TAU);
+      ctx.fill();
+    }
+  }
+
+  private renderParticles(): void {
+    const ctx = this.ctx;
+
+    // Grouped by colour so a 300-spark burst costs three `fillStyle` writes instead of three
+    // hundred.
+    for (let color = 0; color < PARTICLE_COLORS.length; color += 1) {
+      ctx.fillStyle = PARTICLE_COLORS[color];
+      for (let index = 0; index < this.particleCount; index += 1) {
+        if (this.particleColor[index] !== color) {
+          continue;
+        }
+        ctx.globalAlpha = this.particleLife[index] / this.particleSpan[index];
+        ctx.fillRect(this.particleX[index] - 1, this.particleY[index] - 1, 2, 2);
+      }
+    }
+
+    ctx.globalAlpha = 1;
+  }
+
+  private renderShip(): void {
+    // Blink through the grace period so the player can see they are not yet solid.
+    if (this.invulnerableTimer > 0 && Math.floor(this.elapsed * 10) % 2 === 0) {
+      return;
+    }
+
+    const ctx = this.ctx;
+    const flaming = this.input.thrust && Math.floor(this.elapsed * 30) % 2 === 0;
+    ctx.lineWidth = 2;
+
+    const copies = this.spreadWrapped(this.shipX, this.shipY, SHIP_RADIUS + 6);
+    for (let copy = 0; copy < copies; copy += 1) {
+      ctx.save();
+      ctx.translate(this.wrapSpreadX[copy], this.wrapSpreadY[copy]);
+      ctx.rotate(this.shipAngle);
+      if (flaming) {
+        ctx.strokeStyle = THRUST_COLOR;
+        ctx.stroke(flamePath());
+      }
+      ctx.strokeStyle = SHIP_COLOR;
+      ctx.stroke(shipPath());
+      ctx.restore();
+    }
+  }
+
+  /**
+   * Fills `wrapSpreadX/Y` with the entity's position plus a mirrored copy for every board edge it
+   * currently straddles, so shapes cross the seam whole instead of popping to the other side.
+   *
+   * Returns the number of copies to draw. Writing into shared buffers rather than returning a list
+   * — or taking a draw callback — keeps the render pass free of per-entity allocations.
+   */
+  private spreadWrapped(x: number, y: number, radius: number): number {
+    this.wrapSpreadX[0] = x;
+    this.wrapSpreadY[0] = y;
+    let count = 1;
+
+    const offsetX = x < radius ? this.width : x > this.width - radius ? -this.width : 0;
+    const offsetY = y < radius ? this.height : y > this.height - radius ? -this.height : 0;
+
+    if (offsetX !== 0) {
+      this.wrapSpreadX[count] = x + offsetX;
+      this.wrapSpreadY[count] = y;
+      count += 1;
+    }
+    if (offsetY !== 0) {
+      this.wrapSpreadX[count] = x;
+      this.wrapSpreadY[count] = y + offsetY;
+      count += 1;
+    }
+    if (offsetX !== 0 && offsetY !== 0) {
+      this.wrapSpreadX[count] = x + offsetX;
+      this.wrapSpreadY[count] = y + offsetY;
+      count += 1;
+    }
+
+    return count;
+  }
+}
diff --git a/apps/www/src/features/www/landing/asteroids/frame.ts b/apps/www/src/features/www/landing/asteroids/frame.ts
new file mode 100644
index 000000000..b7ea49fa0
--- /dev/null
+++ b/apps/www/src/features/www/landing/asteroids/frame.ts
@@ -0,0 +1,7 @@
+/**
+ * Stage shared by the board and the placeholder that stands in for it.
+ *
+ * Kept in its own module so the section can reserve the board's exact full-screen footprint
+ * without importing — and therefore eagerly bundling — the game itself.
+ */
+export const ASTEROIDS_STAGE_CLASS = "relative h-svh w-full overflow-hidden bg-black";
diff --git a/apps/www/src/features/www/landing/asteroids/game.tsx b/apps/www/src/features/www/landing/asteroids/game.tsx
new file mode 100644
index 000000000..f92466083
--- /dev/null
+++ b/apps/www/src/features/www/landing/asteroids/game.tsx
@@ -0,0 +1,384 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { useReducedMotion } from "motion/react";
+import { useCallback, useEffect, useRef, useState } from "react";
+
+import { type AsteroidsAction, AsteroidsEngine, type AsteroidsStatus } from "./engine";
+import { ASTEROIDS_STAGE_CLASS } from "./frame";
+import { createCrtCompositor } from "./post";
+
+/** Keyed by `KeyboardEvent.code`, so the layout works the same on QWERTZ and AZERTY. */
+const KEY_ACTIONS: Record<string, AsteroidsAction> = {
+  ArrowLeft: "left",
+  ArrowRight: "right",
+  ArrowUp: "thrust",
+  KeyA: "left",
+  KeyD: "right",
+  KeyW: "thrust",
+  Space: "fire",
+};
+
+const BEST_SCORE_KEY = "voidhash.asteroids.best";
+
+function readBestScore(): number {
+  try {
+    return Number(window.localStorage.getItem(BEST_SCORE_KEY)) || 0;
+  } catch {
+    // Private-mode Safari and blocked-storage setups throw on access; a missing high score is not
+    // worth breaking the game over.
+    return 0;
+  }
+}
+
+function writeBestScore(score: number): void {
+  try {
+    window.localStorage.setItem(BEST_SCORE_KEY, String(score));
+  } catch {
+    // Ignored for the same reason as above.
+  }
+}
+
+function pad(value: number, digits: number): string {
+  return String(value).padStart(digits, "0");
+}
+
+function ShipGlyph({ className }: { className?: string }) {
+  return (
+    <svg aria-hidden="true" className={className} fill="none" viewBox="0 0 12 14" width="11">
+      <path d="M6 1 11 13 6 10.2 1 13Z" stroke="currentColor" strokeLinejoin="round" />
+    </svg>
+  );
+}
+
+const HUD_ALIGN = {
+  center: "items-center",
+  end: "items-end",
+  start: "items-start",
+} as const;
+
+function HudStat({
+  align = "start",
+  label,
+  children,
+}: {
+  align?: keyof typeof HUD_ALIGN;
+  label: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <div className={cn("flex flex-col gap-1", HUD_ALIGN[align])}>
+      <div className="text-[11px]/3.5 text-zinc-600 tracking-[0.06em]">{label}</div>
+      <div className="text-white text-xl/6 tabular-nums">{children}</div>
+    </div>
+  );
+}
+
+function TouchButton({
+  className,
+  label,
+  onHold,
+  children,
+}: {
+  className?: string;
+  label: string;
+  onHold: (pressed: boolean) => void;
+  children: React.ReactNode;
+}) {
+  return (
+    <button
+      aria-label={label}
+      className={cn(
+        "flex size-14 items-center justify-center rounded-full border border-zinc-700 bg-black/50 font-mono text-zinc-300 active:border-zinc-400 active:text-white",
+        className,
+      )}
+      onContextMenu={(event) => event.preventDefault()}
+      onPointerCancel={() => onHold(false)}
+      onPointerDown={(event) => {
+        event.preventDefault();
+        event.currentTarget.setPointerCapture(event.pointerId);
+        onHold(true);
+      }}
+      onPointerUp={() => onHold(false)}
+      type="button"
+    >
+      {children}
+    </button>
+  );
+}
+
+/**
+ * Full-screen playable board for the landing page's unexplained finale.
+ *
+ * Owns the canvases and the arcade chrome; all simulation lives in {@link AsteroidsEngine} and the
+ * CRT look in the `post` shader pass. The loop is gated on the board being on screen in a visible
+ * tab, and a run that scrolls out of view pauses itself so the page never quietly holds the arrow
+ * keys hostage. With `autoStart` the run begins the moment the board has a size — the section only
+ * mounts this component once the player has already pressed play.
+ */
+export function AsteroidsGame({ autoStart = false }: { autoStart?: boolean }) {
+  const frameRef = useRef<HTMLDivElement>(null);
+  const canvasRef = useRef<HTMLCanvasElement>(null);
+  const engineRef = useRef<AsteroidsEngine | null>(null);
+  const prefersReducedMotion = useReducedMotion();
+
+  const [status, setStatus] = useState<AsteroidsStatus>("idle");
+  const [hud, setHud] = useState({ lives: 3, score: 0, wave: 1 });
+  const [bestScore, setBestScore] = useState(0);
+  const [showTouchControls, setShowTouchControls] = useState(false);
+
+  useEffect(() => {
+    setBestScore(readBestScore());
+    setShowTouchControls(window.matchMedia("(pointer: coarse)").matches);
+  }, []);
+
+  useEffect(() => {
+    const frame = frameRef.current;
+    const canvas = canvasRef.current;
+    if (!(frame && canvas)) {
+      return;
+    }
+
+    // With the CRT pass the visible canvas is WebGL and the engine draws into an offscreen scene;
+    // without it the engine draws straight onto the visible canvas.
+    const compositor = createCrtCompositor(canvas, prefersReducedMotion === true);
+    const engine = new AsteroidsEngine({
+      canvas: compositor ? document.createElement("canvas") : canvas,
+      compositor,
+      onHud: setHud,
+      onStatus: setStatus,
+      reducedMotion: prefersReducedMotion === true,
+    });
+    engineRef.current = engine;
+
+    let onScreen = false;
+    const syncActive = () => engine.setActive(onScreen && !document.hidden);
+
+    let started = false;
+    const resizeObserver = new ResizeObserver(([entry]) => {
+      const box = entry.contentRect;
+      engine.resize(Math.round(box.width), Math.round(box.height));
+      if (autoStart && !started && box.width > 0) {
+        started = true;
+        engine.start();
+      }
+    });
+    resizeObserver.observe(frame);
+
+    // A run that leaves the viewport pauses rather than merely freezing, so the overlay tells the
+    // player why the ship stopped — and so the key handler unbinds with it.
+    const intersectionObserver = new IntersectionObserver(
+      ([entry]) => {
+        onScreen = entry.isIntersecting;
+        if (!onScreen) {
+          engine.pause();
+        }
+        syncActive();
+      },
+      { threshold: 0.35 },
+    );
+    intersectionObserver.observe(frame);
+
+    const onVisibilityChange = () => {
+      if (document.hidden) {
+        engine.pause();
+      }
+      syncActive();
+    };
+    const onBlur = () => engine.pause();
+
+    document.addEventListener("visibilitychange", onVisibilityChange);
+    window.addEventListener("blur", onBlur);
+
+    return () => {
+      resizeObserver.disconnect();
+      intersectionObserver.disconnect();
+      document.removeEventListener("visibilitychange", onVisibilityChange);
+      window.removeEventListener("blur", onBlur);
+      engine.destroy();
+      compositor?.destroy();
+      engineRef.current = null;
+    };
+  }, [autoStart, prefersReducedMotion]);
+
+  // Bound only while a run is live: the arrow keys and space belong to the page the rest of the
+  // time, and an unbound handler cannot swallow a scroll.
+  useEffect(() => {
+    if (status !== "playing") {
+      return;
+    }
+
+    const onKeyDown = (event: KeyboardEvent) => {
+      if (event.metaKey || event.ctrlKey || event.altKey) {
+        return;
+      }
+      if (event.code === "Escape") {
+        engineRef.current?.pause();
+        return;
+      }
+      // ArrowDown/S do nothing but must not scroll the page away from a live game.
+      if (event.code === "ArrowDown" || event.code === "KeyS") {
+        event.preventDefault();
+        return;
+      }
+      const action = KEY_ACTIONS[event.code];
+      if (!action) {
+        return;
+      }
+      event.preventDefault();
+      engineRef.current?.setInput(action, true);
+    };
+
+    const onKeyUp = (event: KeyboardEvent) => {
+      const action = KEY_ACTIONS[event.code];
+      if (action) {
+        event.preventDefault();
+        engineRef.current?.setInput(action, false);
+      }
+    };
+
+    window.addEventListener("keydown", onKeyDown);
+    window.addEventListener("keyup", onKeyUp);
+
+    return () => {
+      window.removeEventListener("keydown", onKeyDown);
+      window.removeEventListener("keyup", onKeyUp);
+      for (const action of ["left", "right", "thrust", "fire"] as const) {
+        engineRef.current?.setInput(action, false);
+      }
+    };
+  }, [status]);
+
+  // Space/Enter starts or resumes a run, but only while the board fills the view — half a screen
+  // up the page those keys still belong to scrolling.
+  useEffect(() => {
+    if (status === "playing") {
+      return;
+    }
+
+    const onKeyDown = (event: KeyboardEvent) => {
+      if (
+        (event.code !== "Space" && event.code !== "Enter") ||
+        event.metaKey ||
+        event.ctrlKey ||
+        event.altKey
+      ) {
+        return;
+      }
+      const rect = frameRef.current?.getBoundingClientRect();
+      const midscreen = window.innerHeight * 0.5;
+      if (!rect || rect.top > midscreen || rect.bottom < midscreen) {
+        return;
+      }
+      event.preventDefault();
+      if (status === "paused") {
+        engineRef.current?.resume();
+      } else {
+        engineRef.current?.start();
+      }
+    };
+
+    window.addEventListener("keydown", onKeyDown);
+    return () => window.removeEventListener("keydown", onKeyDown);
+  }, [status]);
+
+  useEffect(() => {
+    if (status === "over" && hud.score > bestScore) {
+      setBestScore(hud.score);
+      writeBestScore(hud.score);
+    }
+  }, [bestScore, hud.score, status]);
+
+  const hold = useCallback((action: AsteroidsAction, pressed: boolean) => {
+    engineRef.current?.setInput(action, pressed);
+  }, []);
+
+  const primaryAction = useCallback(() => {
+    if (status === "paused") {
+      engineRef.current?.resume();
+    } else {
+      engineRef.current?.start();
+    }
+  }, [status]);
+
+  return (
+    <div className={cn(ASTEROIDS_STAGE_CLASS, "select-none font-mono")} ref={frameRef}>
+      <canvas className="block size-full" ref={canvasRef} />
+
+      {/* The landing navbar stays sticky over the stage, so the HUD starts below it. */}
+      <div className="pointer-events-none absolute inset-x-0 top-20 flex items-start justify-between px-6 md:px-10">
+        <HudStat label="SCORE">{pad(hud.score, 6)}</HudStat>
+        <HudStat align="center" label="WAVE">
+          {pad(hud.wave, 2)}
+        </HudStat>
+        <HudStat align="end" label="SHIPS">
+          <div className="flex h-6 items-center gap-1.5">
+            {hud.lives > 0 ? (
+              Array.from({ length: hud.lives }, (_, index) => <ShipGlyph key={index} />)
+            ) : (
+              <span className="text-zinc-600">—</span>
+            )}
+          </div>
+        </HudStat>
+      </div>
+
+      <div className="pointer-events-none absolute bottom-5 left-6 text-[11px]/3.5 text-zinc-700 tracking-[0.06em] md:left-10">
+        HI {pad(Math.max(bestScore, hud.score), 6)}
+      </div>
+
+      {showTouchControls && status === "playing" ? (
+        <>
+          <div className="absolute bottom-8 left-6 flex gap-3">
+            <TouchButton label="Rotate left" onHold={(down) => hold("left", down)}>
+              <span aria-hidden="true">◀</span>
+            </TouchButton>
+            <TouchButton label="Rotate right" onHold={(down) => hold("right", down)}>
+              <span aria-hidden="true">▶</span>
+            </TouchButton>
+          </div>
+          <div className="absolute right-6 bottom-8 flex gap-3">
+            <TouchButton label="Thrust" onHold={(down) => hold("thrust", down)}>
+              <span aria-hidden="true">▲</span>
+            </TouchButton>
+            <TouchButton
+              className="border-blue-ribbon-600/70 text-blue-ribbon-400"
+              label="Fire"
+              onHold={(down) => hold("fire", down)}
+            >
+              <span aria-hidden="true">●</span>
+            </TouchButton>
+          </div>
+        </>
+      ) : null}
+
+      {/* No idle overlay: with autoStart the run begins before a frame of idle is ever visible. */}
+      {status === "paused" || status === "over" ? (
+        <div className="absolute inset-0 flex flex-col items-center justify-center gap-10 bg-black/55 px-6 text-center">
+          <div className="flex flex-col items-center gap-4">
+            <div className="text-4xl text-white tracking-[0.3em] md:text-6xl">
+              {status === "paused" ? "PAUSED" : "GAME OVER"}
+            </div>
+            {status === "over" ? (
+              <div className="text-[15px] text-zinc-400 tabular-nums tracking-[0.1em]">
+                SCORE {pad(hud.score, 6)}
+                {hud.score > 0 && hud.score >= bestScore ? " · NEW RECORD" : ""}
+              </div>
+            ) : null}
+          </div>
+          <button
+            className="border border-zinc-500 px-10 py-3.5 text-sm text-white tracking-[0.25em] transition-colors hover:border-white hover:bg-white hover:text-black"
+            onClick={primaryAction}
+            type="button"
+          >
+            {status === "paused" ? "RESUME" : "PLAY AGAIN"}
+          </button>
+          {showTouchControls ? null : (
+            <div className="animate-pulse text-[12px] text-zinc-500 tracking-[0.25em]">
+              {status === "paused" ? "PRESS SPACE TO RESUME" : "PRESS SPACE TO PLAY AGAIN"}
+            </div>
+          )}
+        </div>
+      ) : null}
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/asteroids/post.ts b/apps/www/src/features/www/landing/asteroids/post.ts
new file mode 100644
index 000000000..cb3e2286d
--- /dev/null
+++ b/apps/www/src/features/www/landing/asteroids/post.ts
@@ -0,0 +1,209 @@
+/**
+ * CRT-style WebGL post-processing pass for the Asteroids board.
+ *
+ * The engine renders the scene into an offscreen 2D canvas; every finished frame is uploaded here
+ * as a texture and redrawn onto the visible canvas with barrel curvature, bloom, chromatic
+ * aberration, scanlines and a vignette. Kept dependency-free (raw WebGL1, one program, one
+ * texture, a single fullscreen triangle) so the whole pass costs one draw call per frame and no
+ * per-frame allocations.
+ */
+
+const VERTEX_SOURCE = `
+attribute vec2 aPosition;
+varying vec2 vUv;
+
+void main() {
+  vUv = aPosition * 0.5 + 0.5;
+  gl_Position = vec4(aPosition, 0.0, 1.0);
+}
+`;
+
+const FRAGMENT_SOURCE = `
+precision mediump float;
+
+uniform sampler2D uScene;
+uniform vec2 uResolution;
+uniform float uTime;
+uniform float uMotion;
+
+varying vec2 vUv;
+
+void main() {
+  vec2 centered = vUv - 0.5;
+  float r2 = dot(centered, centered);
+
+  // Barrel curvature: samples pull outward towards the edges, leaving a thin curved black rim.
+  vec2 uv = 0.5 + centered * (1.0 + 0.06 * r2);
+  if (uv.x < 0.0 || uv.x > 1.0 || uv.y < 0.0 || uv.y > 1.0) {
+    gl_FragColor = vec4(0.0, 0.0, 0.0, 1.0);
+    return;
+  }
+
+  // Chromatic aberration grows with distance from the centre; frozen under reduced motion. Kept
+  // subtle so the monochrome wireframes fringe rather than visibly split into colours.
+  vec2 fringe = centered * r2 * 0.015 * uMotion;
+  vec3 color = vec3(
+    texture2D(uScene, uv + fringe).r,
+    texture2D(uScene, uv).g,
+    texture2D(uScene, uv - fringe).b
+  );
+
+  // Cheap bloom: eight taps, squared so only bright strokes glow and the void stays black.
+  vec2 px = 1.0 / uResolution;
+  vec3 glow = texture2D(uScene, uv + px * vec2(2.0, 2.0)).rgb
+    + texture2D(uScene, uv + px * vec2(-2.0, 2.0)).rgb
+    + texture2D(uScene, uv + px * vec2(2.0, -2.0)).rgb
+    + texture2D(uScene, uv + px * vec2(-2.0, -2.0)).rgb
+    + texture2D(uScene, uv + px * vec2(5.0, 0.0)).rgb
+    + texture2D(uScene, uv + px * vec2(-5.0, 0.0)).rgb
+    + texture2D(uScene, uv + px * vec2(0.0, 5.0)).rgb
+    + texture2D(uScene, uv + px * vec2(0.0, -5.0)).rgb;
+  glow *= 0.125;
+  color += glow * glow * 1.2;
+
+  float scanline = 0.92 + 0.08 * sin(uv.y * uResolution.y * 3.14159);
+  float flicker = 1.0 + 0.012 * uMotion * sin(uTime * 82.0);
+  float vignette = 1.0 - 0.55 * r2 * 1.6;
+
+  gl_FragColor = vec4(color * scanline * flicker * vignette, 1.0);
+}
+`;
+
+function compileShader(gl: WebGLRenderingContext, type: number, source: string): WebGLShader {
+  const shader = gl.createShader(type);
+  if (!shader) {
+    throw new Error("CRT pass: shader allocation failed");
+  }
+  gl.shaderSource(shader, source);
+  gl.compileShader(shader);
+  if (!gl.getShaderParameter(shader, gl.COMPILE_STATUS)) {
+    const info = gl.getShaderInfoLog(shader);
+    gl.deleteShader(shader);
+    throw new Error(`CRT pass: shader compile failed: ${info}`);
+  }
+  return shader;
+}
+
+/** Implements the engine's `AsteroidsCompositor` contract on a WebGL canvas. */
+export class CrtCompositor {
+  private readonly canvas: HTMLCanvasElement;
+  private readonly gl: WebGLRenderingContext;
+  private readonly texture: WebGLTexture;
+  private readonly timeUniform: WebGLUniformLocation | null;
+  private readonly resolutionUniform: WebGLUniformLocation | null;
+
+  private textureWidth = 0;
+  private textureHeight = 0;
+  private destroyed = false;
+
+  constructor(canvas: HTMLCanvasElement, reducedMotion: boolean) {
+    const gl = canvas.getContext("webgl", {
+      alpha: false,
+      antialias: false,
+      depth: false,
+      powerPreference: "high-performance",
+      stencil: false,
+    });
+    if (!gl) {
+      throw new Error("CRT pass: WebGL unavailable");
+    }
+
+    const program = gl.createProgram();
+    if (!program) {
+      throw new Error("CRT pass: program allocation failed");
+    }
+    gl.attachShader(program, compileShader(gl, gl.VERTEX_SHADER, VERTEX_SOURCE));
+    gl.attachShader(program, compileShader(gl, gl.FRAGMENT_SHADER, FRAGMENT_SOURCE));
+    gl.linkProgram(program);
+    if (!gl.getProgramParameter(program, gl.LINK_STATUS)) {
+      throw new Error(`CRT pass: program link failed: ${gl.getProgramInfoLog(program)}`);
+    }
+    gl.useProgram(program);
+
+    // One triangle overshooting the viewport beats a quad: no index buffer, no diagonal seam.
+    const buffer = gl.createBuffer();
+    gl.bindBuffer(gl.ARRAY_BUFFER, buffer);
+    gl.bufferData(gl.ARRAY_BUFFER, new Float32Array([-1, -1, 3, -1, -1, 3]), gl.STATIC_DRAW);
+    const position = gl.getAttribLocation(program, "aPosition");
+    gl.enableVertexAttribArray(position);
+    gl.vertexAttribPointer(position, 2, gl.FLOAT, false, 0, 0);
+
+    const texture = gl.createTexture();
+    if (!texture) {
+      throw new Error("CRT pass: texture allocation failed");
+    }
+    gl.bindTexture(gl.TEXTURE_2D, texture);
+    gl.texParameteri(gl.TEXTURE_2D, gl.TEXTURE_MIN_FILTER, gl.LINEAR);
+    gl.texParameteri(gl.TEXTURE_2D, gl.TEXTURE_MAG_FILTER, gl.LINEAR);
+    gl.texParameteri(gl.TEXTURE_2D, gl.TEXTURE_WRAP_S, gl.CLAMP_TO_EDGE);
+    gl.texParameteri(gl.TEXTURE_2D, gl.TEXTURE_WRAP_T, gl.CLAMP_TO_EDGE);
+    gl.pixelStorei(gl.UNPACK_FLIP_Y_WEBGL, true);
+
+    gl.uniform1i(gl.getUniformLocation(program, "uScene"), 0);
+    gl.uniform1f(gl.getUniformLocation(program, "uMotion"), reducedMotion ? 0 : 1);
+    this.timeUniform = gl.getUniformLocation(program, "uTime");
+    this.resolutionUniform = gl.getUniformLocation(program, "uResolution");
+
+    this.canvas = canvas;
+    this.gl = gl;
+    this.texture = texture;
+  }
+
+  /** Matches the visible canvas to the scene canvas' device-pixel size. */
+  resize(width: number, height: number, scale: number): void {
+    if (this.destroyed) {
+      return;
+    }
+    this.canvas.width = Math.round(width * scale);
+    this.canvas.height = Math.round(height * scale);
+    this.gl.viewport(0, 0, this.gl.drawingBufferWidth, this.gl.drawingBufferHeight);
+    this.gl.uniform2f(this.resolutionUniform, this.canvas.width, this.canvas.height);
+  }
+
+  /** Uploads the finished scene frame and redraws it through the CRT shader. */
+  draw(scene: HTMLCanvasElement, timeSeconds: number): void {
+    if (this.destroyed || scene.width === 0 || scene.height === 0) {
+      return;
+    }
+    const gl = this.gl;
+
+    // texSubImage2D skips the driver-side reallocation that texImage2D does per call, so the full
+    // upload only happens when the scene canvas actually changed size.
+    if (scene.width === this.textureWidth && scene.height === this.textureHeight) {
+      gl.texSubImage2D(gl.TEXTURE_2D, 0, 0, 0, gl.RGBA, gl.UNSIGNED_BYTE, scene);
+    } else {
+      gl.texImage2D(gl.TEXTURE_2D, 0, gl.RGBA, gl.RGBA, gl.UNSIGNED_BYTE, scene);
+      this.textureWidth = scene.width;
+      this.textureHeight = scene.height;
+    }
+
+    gl.uniform1f(this.timeUniform, timeSeconds);
+    gl.drawArrays(gl.TRIANGLES, 0, 3);
+  }
+
+  /** Releases the GL context and the canvas' backing store. */
+  destroy(): void {
+    if (this.destroyed) {
+      return;
+    }
+    this.destroyed = true;
+    this.gl.getExtension("WEBGL_lose_context")?.loseContext();
+    this.canvas.width = 0;
+    this.canvas.height = 0;
+  }
+}
+
+/**
+ * Builds the CRT pass, or returns `null` where WebGL is unavailable so the caller can fall back to
+ * showing the engine's own canvas — the game is fully playable without the shader.
+ */
+export function createCrtCompositor(
+  canvas: HTMLCanvasElement,
+  reducedMotion: boolean,
+): CrtCompositor | null {
+  try {
+    return new CrtCompositor(canvas, reducedMotion);
+  } catch {
+    return null;
+  }
+}
diff --git a/apps/www/src/features/www/landing/landing-page.tsx b/apps/www/src/features/www/landing/landing-page.tsx
new file mode 100644
index 000000000..849883aad
--- /dev/null
+++ b/apps/www/src/features/www/landing/landing-page.tsx
@@ -0,0 +1,44 @@
+"use client";
+
+import { LandingAnalytics } from "./sections/analytics";
+import { LandingAsteroids } from "./sections/asteroids";
+import { LandingCrm } from "./sections/crm";
+import { LandingDevelopers } from "./sections/developers";
+import { LandingDivider } from "./sections/divider";
+import { LandingExperimentation } from "./sections/experimentation";
+import { LandingFooter } from "./sections/footer";
+import { LandingGetStarted } from "./sections/get-started";
+import { LandingHero } from "./sections/hero";
+import { LandingNavbar } from "./sections/navbar";
+import { LandingPaywalls } from "./sections/paywalls";
+import { LandingProblem } from "./sections/problem";
+
+/** Renders the Voidhash marketing landing page. */
+export function LandingPage() {
+  return (
+    <div className="dark w-full overflow-x-clip bg-zinc-950 text-xs/4 antialiased [font-synthesis:none]">
+      <LandingNavbar />
+      <div className="flex w-full flex-col items-start gap-px">
+        <LandingHero />
+        <LandingDivider />
+        <LandingProblem />
+        <LandingDivider />
+        <LandingPaywalls />
+        <LandingDivider />
+        <LandingAnalytics />
+        <LandingDivider />
+        <LandingExperimentation />
+        <LandingDivider />
+        <LandingCrm />
+        <LandingDivider />
+        <LandingDevelopers />
+        <LandingDivider />
+        <LandingGetStarted />
+        <LandingDivider />
+        <LandingFooter />
+        <LandingDivider />
+        <LandingAsteroids />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/motion.tsx b/apps/www/src/features/www/landing/motion.tsx
new file mode 100644
index 000000000..e700a5c36
--- /dev/null
+++ b/apps/www/src/features/www/landing/motion.tsx
@@ -0,0 +1,236 @@
+"use client";
+
+import {
+  animate,
+  type MotionValue,
+  motion,
+  useInView,
+  useReducedMotion,
+  useScroll,
+  useTransform,
+} from "motion/react";
+import {
+  createContext,
+  type CSSProperties,
+  type ReactNode,
+  useContext,
+  useEffect,
+  useMemo,
+  useRef,
+} from "react";
+
+/** Long, soft deceleration — reads well on data that is counting or growing towards a value. */
+const EASE_OUT = [0.16, 1, 0.3, 1] as const;
+
+/**
+ * Whether the surrounding illustration has scrolled into view, or `null` outside one.
+ *
+ * The illustration owns the single observer and every animated part reads from it, so a mock's
+ * charts, bars and figures all start together instead of tripping one by one. The `null` default
+ * makes the parts render as plain static values when used outside an `Illustration`.
+ */
+const IllustrationInViewContext = createContext<boolean | null>(null);
+
+/**
+ * Marks a product mock whose contents animate in once it scrolls into view.
+ *
+ * Takes over an existing wrapper's `className` rather than adding a node of its own, because the
+ * mocks are pixel-faithful exports whose layout is sensitive to extra boxes.
+ */
+export function Illustration({
+  children,
+  className,
+  style,
+}: {
+  children: ReactNode;
+  className?: string;
+  style?: CSSProperties;
+}) {
+  const ref = useRef<HTMLDivElement>(null);
+  const inView = useInView(ref, { amount: 0.2, once: true });
+
+  return (
+    <div className={className} ref={ref} style={style}>
+      <IllustrationInViewContext.Provider value={inView}>
+        {children}
+      </IllustrationInViewContext.Provider>
+    </div>
+  );
+}
+
+type ParsedValue = { amount: number; format: (value: number) => string };
+
+/** Splits "−$2,130" or "+25.9%" into prefix, number and suffix so the count-up can reformat it. */
+function parseValue(value: string): ParsedValue | null {
+  const match = /^([^\d]*)(\d[\d,]*(?:\.\d+)?)(.*)$/.exec(value);
+  if (!match) {
+    return null;
+  }
+
+  const [, prefix, digits, suffix] = match;
+  const decimals = digits.includes(".") ? digits.split(".")[1].length : 0;
+  const useGrouping = digits.includes(",");
+
+  return {
+    amount: Number(digits.replace(/,/g, "")),
+    format: (current) =>
+      prefix +
+      current.toLocaleString("en-US", {
+        maximumFractionDigits: decimals,
+        minimumFractionDigits: decimals,
+        useGrouping,
+      }) +
+      suffix,
+  };
+}
+
+/**
+ * Counts a figure up to its final value when its illustration scrolls into view.
+ *
+ * Renders the real value on the server and writes to the DOM node directly while animating, so a
+ * mock full of figures neither breaks hydration nor re-renders React on every frame.
+ */
+export function CountUp({
+  className,
+  delay = 0,
+  value,
+}: {
+  className?: string;
+  delay?: number;
+  value: string;
+}) {
+  const ref = useRef<HTMLSpanElement>(null);
+  const inView = useContext(IllustrationInViewContext);
+  const prefersReducedMotion = useReducedMotion();
+  const parsed = useMemo(() => parseValue(value), [value]);
+
+  useEffect(() => {
+    const node = ref.current;
+    if (!node || !parsed || inView === null || prefersReducedMotion) {
+      return;
+    }
+
+    if (!inView) {
+      node.textContent = parsed.format(0);
+      return;
+    }
+
+    const controls = animate(0, parsed.amount, {
+      delay,
+      duration: 1.2,
+      ease: EASE_OUT,
+      onUpdate: (current) => {
+        node.textContent = parsed.format(current);
+      },
+    });
+
+    return () => controls.stop();
+  }, [delay, inView, parsed, prefersReducedMotion]);
+
+  return (
+    <span className={className} ref={ref}>
+      {value}
+    </span>
+  );
+}
+
+/** Wipes a chart in from the left once its illustration scrolls into view. */
+export function ChartWipe({
+  children,
+  className,
+  delay = 0,
+}: {
+  children: ReactNode;
+  className?: string;
+  delay?: number;
+}) {
+  const inView = useContext(IllustrationInViewContext);
+  const prefersReducedMotion = useReducedMotion();
+  const drawn = inView !== false || prefersReducedMotion;
+
+  return (
+    <motion.div
+      animate={{ clipPath: drawn ? "inset(0 0% 0 0)" : "inset(0 100% 0 0)" }}
+      className={className}
+      initial={false}
+      transition={{ delay, duration: 1.3, ease: [0.33, 1, 0.68, 1] }}
+    >
+      {children}
+    </motion.div>
+  );
+}
+
+/** Grows a fixed-width bar out from its left edge once its illustration scrolls into view. */
+export function GrowBar({ className, delay = 0 }: { className?: string; delay?: number }) {
+  const inView = useContext(IllustrationInViewContext);
+  const prefersReducedMotion = useReducedMotion();
+  const grown = inView !== false || prefersReducedMotion;
+
+  return (
+    <motion.div
+      animate={{ scaleX: grown ? 1 : 0 }}
+      className={className}
+      initial={false}
+      style={{ transformOrigin: "left" }}
+      transition={{ delay, duration: 1, ease: EASE_OUT }}
+    />
+  );
+}
+
+// zinc-600 and white. Kept as literal hex rather than `var(--zinc-600)` because
+// these are motion tween endpoints — the interpolator needs a concrete colour.
+// Keep in sync with the ramp in packages/ui/styles/brand-theme.css.
+const WORD_DIM = "#52525C";
+const WORD_BRIGHT = "#FFFFFF";
+
+/** How many word slots a single word takes to go from dim to bright; >1 overlaps neighbours. */
+const WORD_WINDOW_SLOTS = 1.8;
+
+/**
+ * Brightens copy word by word as the block scrolls through the viewport.
+ *
+ * Each word owns a slice of the block's scroll progress and neighbouring slices overlap, so the
+ * sweep reads as a continuous wipe rather than a row of words flipping one at a time.
+ */
+export function ScrollBrightenText({ className, text }: { className?: string; text: string }) {
+  const ref = useRef<HTMLParagraphElement>(null);
+  const { scrollYProgress } = useScroll({
+    offset: ["start 0.9", "end 0.3"],
+    target: ref,
+  });
+  const words = useMemo(() => text.split(" "), [text]);
+
+  const windowSize = Math.min(1, WORD_WINDOW_SLOTS / words.length);
+  const step = words.length > 1 ? (1 - windowSize) / (words.length - 1) : 0;
+
+  return (
+    <p className={className} ref={ref}>
+      {words.map((word, index) => (
+        <BrightenedWord
+          end={index * step + windowSize}
+          key={`${index}-${word}`}
+          progress={scrollYProgress}
+          start={index * step}
+        >
+          {index === words.length - 1 ? word : `${word} `}
+        </BrightenedWord>
+      ))}
+    </p>
+  );
+}
+
+function BrightenedWord({
+  children,
+  end,
+  progress,
+  start,
+}: {
+  children: string;
+  end: number;
+  progress: MotionValue<number>;
+  start: number;
+}) {
+  const color = useTransform(progress, [start, end], [WORD_DIM, WORD_BRIGHT]);
+
+  return <motion.span style={{ color }}>{children}</motion.span>;
+}
diff --git a/apps/www/src/features/www/landing/paywall-build/agent-transcript.tsx b/apps/www/src/features/www/landing/paywall-build/agent-transcript.tsx
new file mode 100644
index 000000000..2ee8ad777
--- /dev/null
+++ b/apps/www/src/features/www/landing/paywall-build/agent-transcript.tsx
@@ -0,0 +1,162 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { useEffect, useRef, useState } from "react";
+
+import { AGENT_INTRO, AGENT_OUTRO, AGENT_PROMPT, TRANSCRIPT_STEPS } from "./transcript";
+import { PROMPT_CHAR_MS, type TranscriptPlayback } from "./use-transcript-playback";
+
+const TERMINAL_BACKGROUND =
+  "radial-gradient(ellipse 156.12% 100% at 100% -0.86% in oklab, var(--color-zinc-900) 0%, var(--color-zinc-950) 100%)";
+
+/** Types a string out one character at a time; renders it whole when `typing` is false. */
+function TypedText({ typing, text }: { typing: boolean; text: string }) {
+  const [count, setCount] = useState(typing ? 0 : text.length);
+
+  useEffect(() => {
+    if (!typing) {
+      setCount(text.length);
+      return;
+    }
+
+    setCount(0);
+    let typed = 0;
+    const interval = setInterval(() => {
+      typed += 1;
+      setCount(typed);
+      if (typed >= text.length) {
+        clearInterval(interval);
+      }
+    }, PROMPT_CHAR_MS);
+
+    return () => clearInterval(interval);
+  }, [typing, text]);
+
+  return <>{text.slice(0, count)}</>;
+}
+
+/** Renders a `key: value` argument line with the value picked out; free-form lines stay dim. */
+function ArgumentLine({ argument }: { argument: string }) {
+  const [, key, value] = /^([A-Za-z]+):\s(.*)$/.exec(argument) ?? [];
+
+  return (
+    <div className="pl-4 text-zinc-500">
+      {key ? (
+        <>
+          {key}: <span className="text-blue-ribbon-300">{value}</span>
+        </>
+      ) : (
+        argument
+      )}
+    </div>
+  );
+}
+
+/** One `⏺ voidhash – tool (MCP)` block with its arguments and result line. */
+function ToolCallBlock({
+  index,
+  playback,
+}: {
+  index: number;
+  playback: TranscriptPlayback;
+}) {
+  const step = TRANSCRIPT_STEPS[index];
+  const settled = index < playback.index || playback.phase !== "running";
+
+  return (
+    <div className="pt-3">
+      <div className="text-zinc-400">
+        {/* The marker goes green the moment the call comes back, as it does in Claude Code. */}
+        <span className={settled ? "text-pistachio-600" : "text-blue-ribbon-500"}>⏺</span> voidhash –{" "}
+        <span className="font-medium text-zinc-100">{step.tool}</span>{" "}
+        <span className="text-zinc-600">(MCP)</span>
+      </div>
+      {step.args.map((argument) => (
+        <ArgumentLine argument={argument} key={argument} />
+      ))}
+      <div className="text-zinc-400">
+        <span className="pl-1.5 text-zinc-700">⎿</span>
+        {"  "}
+        {settled ? (
+          step.result
+        ) : (
+          <span className="shimmer shimmer-duration-1600 text-zinc-500">Running…</span>
+        )}
+      </div>
+    </div>
+  );
+}
+
+/**
+ * The Claude Code pane of the illustration: one user prompt followed by the Voidhash
+ * MCP calls that compose the paywall. Scrolls itself so the newest call stays in view.
+ */
+export function AgentTranscript({ playback }: { playback: TranscriptPlayback }) {
+  const scrollerRef = useRef<HTMLDivElement>(null);
+  const [scrolled, setScrolled] = useState(false);
+  const started = playback.phase !== "idle";
+
+  useEffect(() => {
+    const scroller = scrollerRef.current;
+    if (scroller) {
+      scroller.scrollTo({ behavior: "smooth", top: scroller.scrollHeight });
+    }
+  }, [playback.index, playback.phase]);
+
+  return (
+    <div
+      className="absolute top-0 left-0 h-129.25 w-99.75 rounded-[16px] border border-zinc-800 border-solid bg-origin-border bg-zinc-950 [box-shadow:#00000040_0px_2px_16px]"
+      style={{ backgroundImage: TERMINAL_BACKGROUND }}
+    >
+      <div className="absolute top-3 left-3.25 size-3.25 rounded-full bg-zinc-700" />
+      <div className="absolute top-3 left-8.5 size-3.25 rounded-full bg-zinc-700" />
+      <div className="absolute top-3 left-13.75 size-3.25 rounded-full bg-zinc-700" />
+      <div className="absolute top-2.5 left-38.75 font-sans text-xs text-zinc-600 leading-[142.857%]">
+        Claude Code
+      </div>
+
+      <div
+        className="absolute top-9.75 left-6 h-114.5 w-88.75 overflow-hidden font-mono text-xs text-zinc-400 leading-[142.857%]"
+        onScroll={(event) => setScrolled(event.currentTarget.scrollTop > 4)}
+        ref={scrollerRef}
+      >
+        {started ? (
+          <>
+            <div className="text-zinc-100">
+              <span className="text-blue-ribbon-500">&gt;</span>{" "}
+              <TypedText text={AGENT_PROMPT} typing={playback.phase === "prompt"} />
+            </div>
+            {playback.phase === "prompt" ? null : (
+              <div className="pt-3 text-zinc-400">
+                <span className="text-pistachio-600">⏺</span> {AGENT_INTRO}
+              </div>
+            )}
+            {TRANSCRIPT_STEPS.slice(0, playback.index + 1).map((step, index) => (
+              <ToolCallBlock index={index} key={step.tool + String(index)} playback={playback} />
+            ))}
+            {playback.phase === "done" ? (
+              <div className="pt-3 text-zinc-300">
+                <span className="text-pistachio-600">⏺</span> {AGENT_OUTRO}
+              </div>
+            ) : null}
+          </>
+        ) : null}
+      </div>
+
+      {/* Fades transcript lines out as they scroll past the top of the pane. Held back until
+          the pane actually scrolls so it never sits over the prompt as it types. Spans the whole
+          window (`-inset-px` covers the border box) so it repaints the window's own gradient in
+          the same coordinate space; the mask keeps only the fading band at the pane's top edge. */}
+      <div
+        className={cn(
+          "pointer-events-none absolute -inset-px rounded-[16px] transition-opacity duration-500",
+          scrolled ? "opacity-100" : "opacity-0",
+        )}
+        style={{
+          backgroundImage: TERMINAL_BACKGROUND,
+          maskImage: "linear-gradient(to bottom, transparent 39px, black 39px, transparent 63px)",
+        }}
+      />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/paywall-build/lenscal-paywall.tsx b/apps/www/src/features/www/landing/paywall-build/lenscal-paywall.tsx
new file mode 100644
index 000000000..8e2429c59
--- /dev/null
+++ b/apps/www/src/features/www/landing/paywall-build/lenscal-paywall.tsx
@@ -0,0 +1,356 @@
+import { cn } from "@voidhash/ui";
+import type { ReactNode } from "react";
+
+import type { PaywallPart } from "./transcript";
+
+export const PAYWALL_WIDTH = 402;
+export const PAYWALL_HEIGHT = 874;
+
+interface PartProps {
+  children?: ReactNode;
+  className?: string;
+  /** Stagger within a group that lands on the same call, in milliseconds. */
+  delay?: number;
+  part: PaywallPart;
+  revealed: ReadonlySet<PaywallPart>;
+}
+
+/** Settles a paywall fragment onto the canvas once the edit that inserts it comes back. */
+function Part({ children, className, delay = 0, part, revealed }: PartProps) {
+  const shown = revealed.has(part);
+
+  return (
+    <div
+      className={cn(
+        "transition-[opacity,filter,translate] duration-700 ease-out",
+        shown ? "translate-y-0 opacity-100 blur-none" : "translate-y-1 opacity-0 blur-[6px]",
+        className,
+      )}
+      style={{ transitionDelay: shown ? `${delay}ms` : "0ms" }}
+    >
+      {children}
+    </div>
+  );
+}
+
+/** The concentric scan rings behind the app icon, widest to tightest. */
+const SCAN_RINGS = [
+  "left-32.25 top-32.75 size-36 [border-width:1.5px] border-[#6E9BFFB3]",
+  "left-24.25 top-24.75 size-52 border border-[#5A8AFF73]",
+  "left-14.75 top-15.25 h-71 w-71 border border-[#5A8AFF45]",
+  "left-3.25 top-3.75 h-94 w-94 border border-[#5A8AFF30]",
+  "-left-10.25 -top-9.75 h-121 w-121 border border-[#5A8AFF21]",
+  "-left-25.75 -top-25.25 h-152 w-152 border border-[#5A8AFF17]",
+  "-left-43.25 -top-42.75 h-187 w-187 border border-[#5A8AFF0F]",
+  "-left-62.75 -top-62.25 h-226 w-226 border border-[#5A8AFF0A]",
+];
+
+/** The camera-detection chips floating over the hero. */
+const DETECTION_CHIPS = [
+  { className: "left-5.5 top-27.5", delay: 0, label: "Avocado toast · 412 kcal" },
+  { className: "left-41.5 top-80.5", delay: 140, label: "Protein 32 g · Carbs 41 g" },
+];
+
+/** The laurel that brackets each award badge; `flipped` mirrors it for the right side. */
+function Laurel({ flipped }: { flipped?: boolean }) {
+  return (
+    <svg
+      aria-hidden="true"
+      height="44"
+      style={{ flexShrink: 0, transform: flipped ? "scaleX(-1)" : undefined }}
+      viewBox="0 0 14 44"
+      width="14"
+      xmlns="http://www.w3.org/2000/svg"
+    >
+      <path d="M11 4 C3 13, 2 27, 8 41" fill="none" stroke="#6B6B72" strokeWidth="1.3" />
+      <circle cx="9.2" cy="8" fill="#6B6B72" r="2" />
+      <circle cx="6" cy="12.5" fill="#6B6B72" r="2" />
+      <circle cx="4" cy="18" fill="#6B6B72" r="2" />
+      <circle cx="3.2" cy="24" fill="#6B6B72" r="2" />
+      <circle cx="3.6" cy="30" fill="#6B6B72" r="2" />
+      <circle cx="5" cy="35.5" fill="#6B6B72" r="2" />
+    </svg>
+  );
+}
+
+function AwardBadge({ children }: { children: ReactNode }) {
+  return (
+    <div className="flex h-18 grow basis-[0%] items-center justify-center gap-1 rounded-[12px] border border-[#1B2133] border-solid bg-[#0A0D15] px-2">
+      <Laurel />
+      {children}
+      <Laurel flipped />
+    </div>
+  );
+}
+
+function AppleMark() {
+  return (
+    <svg
+      aria-hidden="true"
+      height="18"
+      style={{ flexShrink: 0 }}
+      viewBox="0 0 15 18"
+      width="15"
+      xmlns="http://www.w3.org/2000/svg"
+    >
+      <path
+        d="M12.4 9.5c0-2 1.6-3 1.7-3.1-.9-1.4-2.4-1.5-2.9-1.6-1.2-.1-2.4.7-3 .7s-1.6-.7-2.6-.7c-1.3 0-2.6.8-3.2 2-1.4 2.4-.4 6 1 8 .7 1 1.5 2.1 2.5 2 1 0 1.4-.6 2.6-.6s1.5.6 2.6.6c1.1 0 1.8-1 2.4-2 .8-1.1 1.1-2.3 1.1-2.3s-2.2-.9-2.2-3zM10.4 3.3c.5-.7.9-1.6.8-2.5-.8 0-1.8.5-2.4 1.2-.5.6-1 1.6-.8 2.5.9.1 1.8-.4 2.4-1.2z"
+        fill="#E4E4E7"
+      />
+    </svg>
+  );
+}
+
+/**
+ * The Lenscal Pro paywall the landing-page agent builds, rendered at its native
+ * 402×874 so the fragments can settle in one by one as the MCP calls land.
+ */
+export function LenscalPaywall({ revealed }: { revealed: ReadonlySet<PaywallPart> }) {
+  return (
+    <div className="flex h-218.5 w-100.5 flex-col overflow-clip bg-black">
+      <div className="relative h-106 w-100.5 shrink-0 overflow-clip">
+        <Part className="absolute top-0 left-0 h-106 w-100.5" part="backdrop" revealed={revealed}>
+          <div
+            className="size-full"
+            style={{
+              backgroundImage:
+                "radial-gradient(ellipse 114.99999999999999% 80% at 50% 48% in oklab, oklab(29.5% -0.007 -0.103) 0%, oklab(20.6% -0.004 -0.061) 32%, oklab(11.7% -0.004 -0.027) 62%, oklab(0% 0 0) 82%)",
+            }}
+          />
+        </Part>
+
+        <div className="absolute top-0 left-0 h-106 w-100.5">
+          {SCAN_RINGS.map((ring, index) => (
+            <Part
+              className={cn("absolute rounded-[999px] border-solid", ring)}
+              delay={index * 70}
+              key={ring}
+              part="rings"
+              revealed={revealed}
+            />
+          ))}
+        </div>
+
+        <Part
+          className="absolute top-39.5 left-39 flex size-22.5 items-center justify-center rounded-[24px] border border-[#23325E] border-solid bg-[#0B1020] [box-shadow:#3A6EFF61_0px_0px_84px_24px,#000000B3_0px_18px_44px]"
+          part="appIcon"
+          revealed={revealed}
+        >
+          <svg
+            aria-hidden="true"
+            height="54"
+            style={{ flexShrink: 0 }}
+            viewBox="0 0 54 54"
+            width="54"
+            xmlns="http://www.w3.org/2000/svg"
+          >
+            <circle cx="27" cy="27" fill="none" r="22" stroke="#22304F" strokeWidth="5" />
+            <path
+              d="M27 5 A22 22 0 1 1 6.33 34.52"
+              fill="none"
+              stroke="var(--color-brand-primary)"
+              strokeLinecap="round"
+              strokeWidth="5"
+            />
+            <circle cx="27" cy="27" fill="none" r="9" stroke="#F4F4F5" strokeWidth="4" />
+          </svg>
+        </Part>
+
+        <Part className="absolute top-75 left-0 h-31 w-100.5" part="backdrop" revealed={revealed}>
+          <div
+            className="size-full"
+            style={{
+              backgroundImage:
+                "linear-gradient(in oklab 180deg, oklab(0% 0 0 / 0%) 0%, oklab(0% 0 0 / 55%) 46%, oklab(0% 0 0 / 92%) 78%, oklab(0% 0 0) 100%)",
+            }}
+          />
+        </Part>
+
+        <Part
+          className="absolute top-0 left-0 flex w-100.5 items-center gap-38.5 px-6 pt-5.25 pb-4.75"
+          part="statusBar"
+          revealed={revealed}
+        >
+          <div className="flex grow basis-[0%] flex-col items-center justify-center">
+            <div className="flex w-fit flex-wrap justify-center text-center font-sans font-semibold text-[17px]/5.5 text-white">
+              9:41
+            </div>
+          </div>
+          <div className="flex grow basis-[0%] flex-col items-center justify-center">
+            <svg
+              aria-hidden="true"
+              height="22"
+              style={{ flexShrink: 0 }}
+              viewBox="0 0 82 22"
+              width="82"
+              xmlns="http://www.w3.org/2000/svg"
+            >
+              <path
+                d="M3.7 13H2.5a1 1 0 0 0-1 1v2.5a1 1 0 0 0 1 1h1.2a1 1 0 0 0 1-1V14a1 1 0 0 0-1-1m5.2-2.5H7.7a1 1 0 0 0-1 1v5a1 1 0 0 0 1 1h1.2a1 1 0 0 0 1-1v-5a1 1 0 0 0-1-1M14.1 8h-1.2a1 1 0 0 0-1 1v7.5a1 1 0 0 0 1 1h1.2a1 1 0 0 0 1-1V9a1 1 0 0 0-1-1m5.2-2.5h-1.2a1 1 0 0 0-1 1v10a1 1 0 0 0 1 1h1.2a1 1 0 0 0 1-1v-10a1 1 0 0 0-1-1"
+                fill="#FFFFFF"
+              />
+              <path
+                clipRule="evenodd"
+                d="M36.57 7.8c2.49 0 4.88.92 6.68 2.58.14.13.36.12.49 0l1.3-1.27a.34.34 0 0 0 0-.5 12.55 12.55 0 0 0-16.93 0 .34.34 0 0 0 0 .5l1.3 1.26c.13.13.34.14.48 0a10 10 0 0 1 6.68-2.57m0 4.22a5.4 5.4 0 0 1 3.67 1.44c.14.13.35.13.48 0l1.3-1.33a.37.37 0 0 0-.01-.52 7.9 7.9 0 0 0-10.88 0 .37.37 0 0 0 0 .52l1.29 1.32c.13.14.34.14.48 0 1-.92 2.31-1.43 3.67-1.43m2.52 2.8q0 .15-.1.28l-2.18 2.45a.3.3 0 0 1-.24.11.3.3 0 0 1-.24-.1l-2.18-2.46a.43.43 0 0 1 .01-.56 3.44 3.44 0 0 1 4.82 0 .4.4 0 0 1 .11.28"
+                fill="#FFFFFF"
+                fillRule="evenodd"
+              />
+              <path
+                clipRule="evenodd"
+                d="M70.5 5c2.05 0 3.08 0 3.88.34a4.3 4.3 0 0 1 2.28 2.28c.34.8.34 1.83.34 3.88s0 3.08-.34 3.88a4.3 4.3 0 0 1-2.28 2.28c-.8.34-1.83.34-3.88.34h-12c-2.05 0-3.08 0-3.88-.34a4.3 4.3 0 0 1-2.28-2.28c-.34-.8-.34-1.83-.34-3.88s0-3.08.34-3.88a4.3 4.3 0 0 1 2.28-2.28C55.42 5 56.45 5 58.5 5zM58.28 6c-1.85 0-2.77 0-3.48.36a3.3 3.3 0 0 0-1.44 1.44C53 8.5 53 9.43 53 11.28v.44c0 1.85 0 2.77.36 3.48a3.3 3.3 0 0 0 1.44 1.44c.7.36 1.63.36 3.48.36h12.44c1.85 0 2.77 0 3.48-.36a3.3 3.3 0 0 0 1.44-1.44c.36-.7.36-1.63.36-3.48v-.44c0-1.85 0-2.77-.36-3.48a3.3 3.3 0 0 0-1.44-1.44C73.5 6 72.57 6 70.72 6z"
+                fill="#FFFFFF"
+                fillRule="evenodd"
+                style={{ opacity: "0.35" }}
+              />
+              <path
+                d="M54 11c0-1.4 0-2.1.27-2.63a2.5 2.5 0 0 1 1.1-1.1C55.9 7 56.6 7 58 7h13c1.4 0 2.1 0 2.64.27q.72.37 1.09 1.1C75 8.9 75 9.6 75 11v1c0 1.4 0 2.1-.27 2.64a2.5 2.5 0 0 1-1.1 1.09C73.1 16 72.4 16 71 16H58c-1.4 0-2.1 0-2.63-.27a2.5 2.5 0 0 1-1.1-1.1C54 14.1 54 13.4 54 12z"
+                fill="#FFFFFF"
+              />
+              <path
+                d="M78 9.5v4.08a2.2 2.2 0 0 0 1.33-2.04A2.2 2.2 0 0 0 78 9.5"
+                fill="#FFFFFF"
+                style={{ opacity: "0.35" }}
+              />
+            </svg>
+          </div>
+        </Part>
+
+        {DETECTION_CHIPS.map((chip) => (
+          <Part
+            className={cn(
+              "absolute flex items-center gap-2 rounded-[999px] border border-[#5A8AFF3D] border-solid bg-[#090F21C7] py-1.75 pr-3.25 pl-2.75",
+              chip.className,
+            )}
+            delay={chip.delay}
+            key={chip.label}
+            part="chips"
+            revealed={revealed}
+          >
+            <div className="size-1.5 shrink-0 rounded-[999px] [background-color:var(--color-brand-primary)]" />
+            <div className="font-medium font-sans text-[#D3DCF0] text-xs/4 tracking-[-0.005em]">
+              {chip.label}
+            </div>
+          </Part>
+        ))}
+      </div>
+
+      {/* Vertical rhythm is tuned so the whole column clears the 450px left under the hero —
+          the artboard's own spacing overflowed and clipped the pricing terms. */}
+      <div className="flex w-100.5 grow basis-[0%] flex-col bg-black px-5 pt-2 pb-4">
+        <Part className="flex gap-2.5" part="badges" revealed={revealed}>
+          <AwardBadge>
+            <div className="flex grow basis-[0%] flex-col items-center gap-1.25">
+              <AppleMark />
+              <div className="flex flex-wrap justify-center whitespace-pre-wrap text-center font-sans font-semibold text-[#E4E4E7] text-xs/4 tracking-[-0.01em]">
+                Editors'
+                <br />
+                Choice
+              </div>
+            </div>
+          </AwardBadge>
+          <AwardBadge>
+            <div className="flex grow basis-[0%] flex-col items-center gap-1.25">
+              <AppleMark />
+              <div className="flex flex-wrap justify-center whitespace-pre-wrap text-center font-sans font-semibold text-[#E4E4E7] text-xs/4 tracking-[-0.01em]">
+                App of
+                <br />
+                the Day
+              </div>
+            </div>
+          </AwardBadge>
+          <AwardBadge>
+            <div className="flex grow basis-[0%] flex-col items-center gap-0.5">
+              <div className="font-medium font-sans text-[#8F8F96] text-[10px]/3">80k Ratings</div>
+              <div className="font-sans font-semibold text-[#F4F4F5] text-xl/normal tracking-[-0.02em]">
+                4.9
+              </div>
+              <svg
+                aria-hidden="true"
+                height="11"
+                style={{ flexShrink: 0 }}
+                viewBox="0 0 62 11"
+                width="62"
+                xmlns="http://www.w3.org/2000/svg"
+              >
+                {[0, 13, 26, 39, 52].map((offset) => (
+                  <path
+                    d={`M${5.5 + offset} 0.5 L${6.9 + offset} 3.9 L${10.5 + offset} 4.2 L${7.8 + offset} 6.6 L${8.6 + offset} 10.2 L${5.5 + offset} 8.3 L${2.4 + offset} 10.2 L${3.2 + offset} 6.6 L${0.5 + offset} 4.2 L${4.1 + offset} 3.9 Z`}
+                    fill="#6F9DFF"
+                    key={offset}
+                  />
+                ))}
+              </svg>
+            </div>
+          </AwardBadge>
+        </Part>
+
+        <Part className="flex flex-col items-center pt-6" part="title" revealed={revealed}>
+          <div className="flex flex-wrap justify-center whitespace-pre-wrap text-center font-bold font-sans text-[#FAFAFA] text-[27px]/8.5 [letter-spacing:-0.025em]">
+            Lenscal Pro
+            <br />
+            7-Day Free Trial
+          </div>
+        </Part>
+
+        <Part
+          className="flex flex-col items-center gap-0.75 pt-3"
+          delay={120}
+          part="offer"
+          revealed={revealed}
+        >
+          <div className="font-sans text-[#A1A1AA] text-[15px]/5.5">
+            Subscribe to Pro for just $29.99/year for a
+          </div>
+          <div className="flex items-baseline">
+            <div className="font-sans text-[#A1A1AA] text-[15px]/5.5">limited time</div>
+            <div className="font-sans text-[#71717A] text-[15px]/5.5 [text-decoration:line-through_1px] [text-underline-position:from-font]">
+              ($49.99/year)
+            </div>
+            <div className="font-sans text-[#A1A1AA] text-[15px]/5.5">and unlock</div>
+          </div>
+          <div className="flex items-baseline gap-1.25">
+            <div className="font-sans text-[#A1A1AA] text-[15px]/5.5">unlimited scans.</div>
+            <div className="font-medium font-sans text-[#6F9DFF] text-[15px]/5.5">View More &gt;</div>
+          </div>
+        </Part>
+
+        <Part className="flex items-center gap-3.5 pt-5" part="toggle" revealed={revealed}>
+          <div className="flex h-7.75 w-12.75 shrink-0 items-center rounded-[999px] border border-[#2C3450] border-solid bg-[#0F121C] p-0.5">
+            <div className="size-6.25 shrink-0 rounded-[999px] bg-[#FAFAFA] [box-shadow:#00000080_0px_1px_3px]" />
+          </div>
+          <div className="font-sans text-[#E4E4E7] text-[15px]/5">
+            Remind me before free trial ends
+          </div>
+        </Part>
+
+        <Part className="flex pt-4" delay={120} part="cta" revealed={revealed}>
+          <div className="flex h-14 grow basis-[0%] items-center justify-center rounded-[999px] [background-color:var(--color-brand-primary)]">
+            <div className="font-sans font-semibold text-[17px]/5.5 [color:var(--color-primary-foreground)] tracking-[-0.01em]">
+              Try It Free
+            </div>
+          </div>
+        </Part>
+
+        <Part className="flex items-start gap-1.75 pt-3.5" part="finePrint" revealed={revealed}>
+          <div className="size-3.25 shrink-0 rounded-[999px] border border-[#4B5570] border-solid" />
+          <div className="flex grow basis-[0%] flex-col gap-0.5">
+            <div className="flex flex-wrap items-baseline">
+              <div className="font-sans text-[#8B8B93] text-[11px]/3.75">
+                I have read and accept
+              </div>
+              <div className="font-sans text-[#C4C4CB] text-[11px]/3.75 [text-decoration:underline_1px] [text-underline-position:from-font]">
+                Pricing Terms.
+              </div>
+              <div className="font-sans text-[#8B8B93] text-[11px]/3.75">
+                Auto renew plans, cancel
+              </div>
+            </div>
+            <div className="font-sans text-[#8B8B93] text-[11px]/3.75">
+              anytime. Auto renew at $29.99 / Y after the trial, cancel anytime.
+            </div>
+          </div>
+        </Part>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/paywall-build/paywall-build.tsx b/apps/www/src/features/www/landing/paywall-build/paywall-build.tsx
new file mode 100644
index 000000000..cf9a271df
--- /dev/null
+++ b/apps/www/src/features/www/landing/paywall-build/paywall-build.tsx
@@ -0,0 +1,51 @@
+"use client";
+
+import { useInView } from "motion/react";
+import { useRef } from "react";
+
+import { AgentTranscript } from "./agent-transcript";
+import { LenscalPaywall, PAYWALL_HEIGHT, PAYWALL_WIDTH } from "./lenscal-paywall";
+import { useTranscriptPlayback } from "./use-transcript-playback";
+import { WorkingIndicator } from "./working-indicator";
+
+/**
+ * How far down the paywall is displayed inside the designer mock. Matches the 242×525
+ * slot the exported artboard occupied, so the surrounding chrome stays pixel-faithful.
+ */
+const PAYWALL_SCALE = 0.6015;
+
+/**
+ * The designer illustration's live half: a Claude Code session driving the Voidhash MCP,
+ * and the paywall assembling itself on the canvas as each call comes back.
+ */
+export function PaywallBuild() {
+  const ref = useRef<HTMLDivElement>(null);
+  const inView = useInView(ref, { amount: 0.35, once: true });
+  const playback = useTranscriptPlayback(inView);
+
+  return (
+    <div className="absolute inset-0" ref={ref}>
+      <div className="absolute top-48.25 left-15.75 h-129.25 w-99.75">
+        <AgentTranscript playback={playback} />
+      </div>
+
+      <div
+        className="absolute top-37.75 left-140.75"
+        style={{ height: PAYWALL_HEIGHT * PAYWALL_SCALE, width: PAYWALL_WIDTH * PAYWALL_SCALE }}
+      >
+        <div
+          className="origin-top-left"
+          style={{ transform: `scale(${PAYWALL_SCALE})`, width: PAYWALL_WIDTH }}
+        >
+          <LenscalPaywall revealed={playback.revealed} />
+        </div>
+        <WorkingIndicator
+          active={playback.working}
+          height={PAYWALL_HEIGHT}
+          scale={PAYWALL_SCALE}
+          width={PAYWALL_WIDTH}
+        />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/paywall-build/transcript.ts b/apps/www/src/features/www/landing/paywall-build/transcript.ts
new file mode 100644
index 000000000..0c40a68c7
--- /dev/null
+++ b/apps/www/src/features/www/landing/paywall-build/transcript.ts
@@ -0,0 +1,125 @@
+/**
+ * One fragment of the Lenscal paywall, revealed when the `edit_paywall` call that
+ * inserts it comes back. Ordered the way the agent builds the screen.
+ */
+export type PaywallPart =
+  | "backdrop"
+  | "statusBar"
+  | "rings"
+  | "appIcon"
+  | "chips"
+  | "badges"
+  | "title"
+  | "offer"
+  | "toggle"
+  | "cta"
+  | "finePrint";
+
+/** A single Voidhash MCP call as it appears in the agent transcript. */
+export interface TranscriptStep {
+  /** MCP tool name, as advertised by `apps/backend/src/mcp/tool-manifest.ts`. */
+  readonly tool: string;
+  /** Argument lines shown under the call header. */
+  readonly args: readonly string[];
+  /** The `⎿` result line shown once the call returns. */
+  readonly result: string;
+  /** Paywall fragments that appear on the canvas when this call returns. */
+  readonly reveals?: readonly PaywallPart[];
+  /** How long the call spends in flight before its result lands. */
+  readonly runningMs: number;
+}
+
+export const AGENT_PROMPT =
+  "Build the Lenscal Pro paywall: dark scan-ring hero, App Store awards, 7-day free trial at $29.99/year.";
+
+export const AGENT_INTRO = "I'll compose it on the live document, then preview before publishing.";
+
+export const AGENT_OUTRO = "Lenscal Pro is live at 402×874 — trial toggle wired, pricing terms in place.";
+
+export const TRANSCRIPT_STEPS: readonly TranscriptStep[] = [
+  {
+    args: [],
+    result: "3 paywalls · lenscal-pro → pw_9f2a41",
+    runningMs: 900,
+    tool: "list_paywalls",
+  },
+  {
+    args: ['paywallId: "pw_9f2a41"'],
+    result: "editSessionId edit_7c31 · baseline v0",
+    runningMs: 900,
+    tool: "begin_paywall_edit",
+  },
+  {
+    args: ['editSessionId: "edit_7c31"', "depth: 3"],
+    result: 'screen "Paywall" 402×874 · 0 children',
+    runningMs: 850,
+    tool: "get_paywall",
+  },
+  {
+    args: ['editSessionId: "edit_7c31"'],
+    result: "9 builtin · 4 catalog · 0 local",
+    runningMs: 850,
+    tool: "get_components",
+  },
+  {
+    args: ["insert · column + radial backdrop, status bar"],
+    result: "ok · 6 nodes minted · v1",
+    reveals: ["backdrop", "statusBar"],
+    runningMs: 1500,
+    tool: "edit_paywall",
+  },
+  {
+    args: ["insert · scan rings ×8, app icon"],
+    result: "ok · 11 nodes minted · v2",
+    reveals: ["rings", "appIcon"],
+    runningMs: 1500,
+    tool: "edit_paywall",
+  },
+  {
+    args: ["insert · detection chips ×2"],
+    result: "ok · 6 nodes minted · v3",
+    reveals: ["chips"],
+    runningMs: 1250,
+    tool: "edit_paywall",
+  },
+  {
+    args: ["insert · award badges ×3"],
+    result: "ok · 9 nodes minted · v4",
+    reveals: ["badges"],
+    runningMs: 1400,
+    tool: "edit_paywall",
+  },
+  {
+    args: ["insert · headline, offer copy"],
+    result: "ok · 8 nodes minted · v5",
+    reveals: ["title", "offer"],
+    runningMs: 1400,
+    tool: "edit_paywall",
+  },
+  {
+    args: ['insert · reminder toggle, "Try It Free"'],
+    result: "ok · 7 nodes minted · v6",
+    reveals: ["toggle", "cta"],
+    runningMs: 1400,
+    tool: "edit_paywall",
+  },
+  {
+    args: ["insert · pricing terms"],
+    result: "ok · 5 nodes minted · v7",
+    reveals: ["finePrint"],
+    runningMs: 1200,
+    tool: "edit_paywall",
+  },
+  {
+    args: ['editSessionId: "edit_7c31"'],
+    result: "PNG 402×874 · sig 4b91c0",
+    runningMs: 1900,
+    tool: "get_paywall_preview",
+  },
+  {
+    args: ['verdict: "matches the brief"', "unresolvedIssues: []"],
+    result: "session closed · published v7",
+    runningMs: 1100,
+    tool: "finish_paywall_edit",
+  },
+];
diff --git a/apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts b/apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts
new file mode 100644
index 000000000..268d0c98c
--- /dev/null
+++ b/apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts
@@ -0,0 +1,114 @@
+"use client";
+
+import { useReducedMotion } from "motion/react";
+import { useEffect, useMemo, useState } from "react";
+
+import { AGENT_PROMPT, type PaywallPart, TRANSCRIPT_STEPS } from "./transcript";
+
+/** Milliseconds each character of the user prompt takes to type. */
+export const PROMPT_CHAR_MS = 22;
+
+/** Beat between the prompt landing and the first tool call going out. */
+const INTRO_MS = 900;
+
+/** Beat between one call's result and the next call going out. */
+const SETTLE_GAP_MS = 240;
+
+/** How long the finished paywall is held before the session replays. */
+const LOOP_HOLD_MS = 5000;
+
+type Phase = "idle" | "prompt" | "running" | "settled" | "done";
+
+export interface TranscriptPlayback {
+  /** Index of the call currently on screen; `-1` while the prompt is still typing. */
+  readonly index: number;
+  readonly phase: Phase;
+  /** Paywall fragments whose insert has already come back. */
+  readonly revealed: ReadonlySet<PaywallPart>;
+  /** Whether the agent holds an open edit session — drives the canvas working indicator. */
+  readonly working: boolean;
+}
+
+const ALL_PARTS: ReadonlySet<PaywallPart> = new Set(
+  TRANSCRIPT_STEPS.flatMap((step) => step.reveals ?? []),
+);
+
+const FINISHED: TranscriptPlayback = {
+  index: TRANSCRIPT_STEPS.length - 1,
+  phase: "done",
+  revealed: ALL_PARTS,
+  working: false,
+};
+
+/**
+ * Loops the scripted agent session once `active` turns true: the prompt types out, each
+ * Voidhash MCP call goes out, hangs for its `runningMs`, and returns; the finished paywall
+ * is held for a beat, then the whole session starts over.
+ *
+ * Under `prefers-reduced-motion` the session is presented already finished and never loops,
+ * so the transcript and the paywall still read as a complete story without any movement.
+ */
+export function useTranscriptPlayback(active: boolean): TranscriptPlayback {
+  const prefersReducedMotion = useReducedMotion();
+  const [cursor, setCursor] = useState<{ index: number; phase: Phase }>({
+    index: -1,
+    phase: "idle",
+  });
+
+  useEffect(() => {
+    if (!active) {
+      return;
+    }
+
+    if (prefersReducedMotion) {
+      setCursor({ index: FINISHED.index, phase: "done" });
+      return;
+    }
+
+    let timer: ReturnType<typeof setTimeout>;
+
+    const runStep = (index: number) => {
+      const step = TRANSCRIPT_STEPS[index];
+      if (!step) {
+        setCursor({ index: TRANSCRIPT_STEPS.length - 1, phase: "done" });
+        timer = setTimeout(startSession, LOOP_HOLD_MS);
+        return;
+      }
+
+      setCursor({ index, phase: "running" });
+      timer = setTimeout(() => {
+        setCursor({ index, phase: "settled" });
+        timer = setTimeout(() => runStep(index + 1), SETTLE_GAP_MS);
+      }, step.runningMs);
+    };
+
+    // Named so the last step can schedule the next run; the transcript and every
+    // revealed fragment fall back to their empty state while the prompt retypes.
+    function startSession() {
+      setCursor({ index: -1, phase: "prompt" });
+      timer = setTimeout(() => runStep(0), AGENT_PROMPT.length * PROMPT_CHAR_MS + INTRO_MS);
+    }
+
+    startSession();
+
+    return () => clearTimeout(timer);
+  }, [active, prefersReducedMotion]);
+
+  return useMemo(() => {
+    if (cursor.phase === "idle") {
+      return { index: -1, phase: "idle", revealed: new Set<PaywallPart>(), working: false };
+    }
+    if (cursor.phase === "done") {
+      return FINISHED;
+    }
+
+    // An insert only shows on the canvas once its call has come back.
+    const landed = cursor.phase === "settled" ? cursor.index : cursor.index - 1;
+    return {
+      index: cursor.index,
+      phase: cursor.phase,
+      revealed: new Set(TRANSCRIPT_STEPS.slice(0, landed + 1).flatMap((step) => step.reveals ?? [])),
+      working: cursor.phase !== "prompt",
+    };
+  }, [cursor]);
+}
diff --git a/apps/www/src/features/www/landing/paywall-build/working-indicator.tsx b/apps/www/src/features/www/landing/paywall-build/working-indicator.tsx
new file mode 100644
index 000000000..7d7d100ed
--- /dev/null
+++ b/apps/www/src/features/www/landing/paywall-build/working-indicator.tsx
@@ -0,0 +1,147 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+
+import {
+  advanceWorkingIndicator,
+  createWorkingIndicatorAnimation,
+  forEachWorkingIndicatorDot,
+  getWorkingIndicatorDotRadius,
+  setWorkingIndicatorActive,
+  syncWorkingIndicatorScreens,
+} from "@/features/studio/paywalls/designer/canvas/overlay/working-indicator-animation";
+
+const BLUE_RIBBON_600 = 0x06_73_ff;
+
+/** Room around the screen for the three dot rows that sit outside it. */
+const PADDING = 44;
+
+interface WorkingIndicatorProps {
+  /** Whether the agent is mid-session; drives the entry and exit sweeps. */
+  active: boolean;
+  /** Screen size in paywall coordinates. */
+  height: number;
+  width: number;
+  /** Factor the paywall is displayed at, so dot size tracks the canvas zoom. */
+  scale: number;
+}
+
+/**
+ * The designer's "agent is working" indicator, rendered over the landing page's paywall.
+ *
+ * Shares the exact animation module the real canvas overlay uses, so the marketing
+ * illustration and the product stay in step. Pixi is imported on demand to keep it out
+ * of the marketing bundle.
+ */
+export function WorkingIndicator({ active, height, scale, width }: WorkingIndicatorProps) {
+  const hostRef = useRef<HTMLDivElement>(null);
+  const activeRef = useRef(active);
+  const startRef = useRef<(() => void) | null>(null);
+
+  activeRef.current = active;
+
+  useEffect(() => {
+    const host = hostRef.current;
+    if (!host) {
+      return;
+    }
+
+    let disposed = false;
+    let dispose: (() => void) | null = null;
+
+    const initialize = async () => {
+      const { Application, Graphics } = await import("pixi.js");
+      if (disposed) {
+        return;
+      }
+
+      const app = new Application();
+      await app.init({
+        antialias: true,
+        autoDensity: true,
+        backgroundAlpha: 0,
+        height: height * scale + PADDING * 2,
+        resolution: window.devicePixelRatio || 1,
+        width: width * scale + PADDING * 2,
+      });
+
+      if (disposed) {
+        app.destroy(true, { children: true });
+        return;
+      }
+
+      app.canvas.style.display = "block";
+      host.append(app.canvas);
+
+      const graphics = new Graphics();
+      graphics.eventMode = "none";
+      app.stage.addChild(graphics);
+
+      const animation = createWorkingIndicatorAnimation({ scale, x: PADDING, y: PADDING });
+      syncWorkingIndicatorScreens(animation, [{ height, id: "paywall", width, x: 0, y: 0 }]);
+
+      const tick = (ticker: { deltaMS: number }) => {
+        const now = performance.now();
+        setWorkingIndicatorActive(animation, activeRef.current, now);
+        advanceWorkingIndicator(animation, now, ticker.deltaMS);
+
+        graphics.clear();
+        forEachWorkingIndicatorDot(animation, (dot, viewport) => {
+          if (dot.alpha <= 0.001) {
+            return;
+          }
+
+          const radius = getWorkingIndicatorDotRadius(dot, viewport.scale);
+          graphics.circle(dot.x, dot.y, radius);
+          graphics.fill({ alpha: dot.alpha * 0.24, color: 0xff_ff_ff });
+          if (dot.proximity > 0.001) {
+            graphics.circle(dot.x, dot.y, radius);
+            graphics.fill({ alpha: dot.alpha * dot.proximity * 0.96, color: BLUE_RIBBON_600 });
+          }
+        });
+
+        if (animation.phase === "idle" && !activeRef.current) {
+          app.stop();
+          app.render();
+        }
+      };
+
+      app.ticker.add(tick);
+      startRef.current = () => app.start();
+      if (activeRef.current) {
+        app.start();
+      } else {
+        app.stop();
+        app.render();
+      }
+
+      dispose = () => {
+        startRef.current = null;
+        app.ticker.remove(tick);
+        app.destroy(true, { children: true });
+      };
+    };
+
+    void initialize();
+
+    return () => {
+      disposed = true;
+      dispose?.();
+    };
+  }, [height, scale, width]);
+
+  useEffect(() => {
+    if (active) {
+      startRef.current?.();
+    }
+  }, [active]);
+
+  return (
+    <div
+      aria-hidden="true"
+      className="pointer-events-none absolute"
+      ref={hostRef}
+      style={{ left: -PADDING, top: -PADDING }}
+    />
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/analytics.tsx b/apps/www/src/features/www/landing/sections/analytics.tsx
new file mode 100644
index 000000000..1b258bb15
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/analytics.tsx
@@ -0,0 +1,531 @@
+import { ChartWipe, CountUp, Illustration } from "../motion";
+import { LandingSection, ScaledMock, SectionHeader } from "../shared";
+
+/** Renders the analytics product section. */
+export function LandingAnalytics() {
+  return (
+    <LandingSection id="analytics">
+      <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
+        <SectionHeader
+          description="Installs, trials, conversion, retention and MRR — computed from the same subscription state that powers your app. No SDK gymnastics, no nightly exports."
+          eyebrow="Analytics"
+          title="Know exactly where your revenue comes from, and where it leaks."
+        />
+        <div className="flex flex-col items-start gap-10 self-stretch xl:flex-row xl:gap-14">
+          <Illustration className="flex flex-col w-full max-w-98 shrink-0 rounded-xl overflow-clip bg-origin-border border border-solid border-[#FFFFFF12]" style={{ backgroundImage: 'radial-gradient(ellipse 156.12% 100% at 100% -0.8599999999999941% in oklab, var(--color-zinc-900) 0%, var(--color-zinc-950) 100%)' }}>
+            <div className="flex items-center justify-between self-stretch pt-5.5 pb-4.75 px-5.5 border-b border-b-solid border-b-[#FFFFFF0F]">
+              <div className="tracking-[-0.02em] font-sans font-medium text-[#FFFFFFED] text-base/tight">
+                Metrics
+              </div>
+            </div>
+            <div className="flex flex-col self-stretch pt-2.5 pb-4">
+              <div className="flex items-center self-stretch py-2.75 px-5.5 gap-3">
+                <svg aria-hidden="true" width="18" height="18" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <circle cx="9" cy="9" r="8.25" fill="rgb(6 115 255 / 18%)" stroke="rgb(6 115 255 / 55%)" />
+                  <path d="M5.2 11.2 L8 8.2 L10 10 L12.9 6.6" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                </svg>
+                <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFED] text-[15px]/5">
+                  Revenue
+                </div>
+                <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF80] text-xs/tight">
+                  <CountUp value="$248,190" />
+                </div>
+              </div>
+              <div className="flex flex-col self-stretch pl-8">
+                <div className="flex flex-col self-stretch pl-3.5 border-l border-l-solid border-l-[#FFFFFF17]">
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <path d="M12 7a5 5 0 1 1-1.6-3.7" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.3" strokeLinecap="round" />
+                      <path d="M12.2 1.6v2.6h-2.6" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                    </svg>
+                    <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFE0] text-[15px]/5">
+                      Subscriptions
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.05} value="$214,730" />
+                    </div>
+                  </div>
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <rect x="1.4" y="3.4" width="11.2" height="8" rx="1.6" fill="none" stroke="var(--color-amber-500)" strokeWidth="1.3" />
+                      <path d="M1.4 6.4h11.2" fill="none" stroke="var(--color-amber-500)" strokeWidth="1.3" />
+                    </svg>
+                    <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFE0] text-[15px]/5">
+                      One-time purchases
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.1} value="$35,590" />
+                    </div>
+                  </div>
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <path d="M2 7a5 5 0 1 0 1.6-3.7" fill="none" stroke="var(--color-radical-red-400)" strokeWidth="1.3" strokeLinecap="round" />
+                      <path d="M1.8 1.6v2.6h2.6" fill="none" stroke="var(--color-radical-red-400)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                    </svg>
+                    <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFE0] text-[15px]/5">
+                      Refunds
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.15} value="−$2,130" />
+                    </div>
+                  </div>
+                </div>
+              </div>
+            </div>
+            <div className="self-stretch h-px shrink-0 bg-[#FFFFFF0F]" />
+            <div className="flex flex-col self-stretch pt-2.5 pb-4">
+              <div className="flex items-center self-stretch py-2.75 px-5.5 gap-3">
+                <svg aria-hidden="true" width="18" height="18" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <circle cx="9" cy="9" r="8.25" fill="rgb(139 92 246 / 18%)" stroke="rgb(139 92 246 / 50%)" />
+                  <circle cx="9" cy="7.1" r="2" fill="none" stroke="var(--color-electric-violet-300)" strokeWidth="1.3" />
+                  <path d="M5.3 12.9c0-1.7 1.7-2.7 3.7-2.7s3.7 1 3.7 2.7" fill="none" stroke="var(--color-electric-violet-300)" strokeWidth="1.3" strokeLinecap="round" />
+                </svg>
+                <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFED] text-[15px]/5">
+                  Subscribers
+                </div>
+                <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF80] text-xs/tight">
+                  <CountUp delay={0.15} value="41,208" />
+                </div>
+              </div>
+              <div className="flex flex-col self-stretch pl-8">
+                <div className="flex flex-col self-stretch pl-3.5 border-l border-l-solid border-l-[#FFFFFF17]">
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <path d="M7 1.8v7.4" fill="none" stroke="var(--color-pistachio-600)" strokeWidth="1.3" strokeLinecap="round" />
+                      <path d="M4.3 6.6 7 9.3l2.7-2.7" fill="none" stroke="var(--color-pistachio-600)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                      <path d="M2 11.9h10" fill="none" stroke="var(--color-pistachio-600)" strokeWidth="1.3" strokeLinecap="round" />
+                    </svg>
+                    <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFE0] text-[15px]/5">
+                      Installs
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.2} value="412,806" />
+                    </div>
+                  </div>
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <path d="M7 1.6 8.5 5l3.6.4-2.7 2.5.8 3.5L7 9.7l-3.2 1.7.8-3.5L1.9 5.4 5.5 5 7 1.6Z" fill="none" stroke="var(--color-amber-500)" strokeWidth="1.2" strokeLinejoin="round" />
+                    </svg>
+                    <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFE0] text-[15px]/5">
+                      Trial → paid
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.25} value="38.2%" />
+                    </div>
+                  </div>
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <path d="M2.2 4.6 7 9.4l4.8-4.8" fill="none" stroke="var(--color-radical-red-400)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                      <path d="M11.8 8.2V4.6H8.2" fill="none" stroke="var(--color-radical-red-400)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                    </svg>
+                    <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFE0] text-[15px]/5">
+                      Churn
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.3} value="4.6%" />
+                    </div>
+                  </div>
+                </div>
+              </div>
+            </div>
+            <div className="self-stretch h-px shrink-0 bg-[#FFFFFF0F]" />
+            <div className="flex flex-col self-stretch pt-2.5 pb-4">
+              <div className="flex items-center self-stretch py-2.75 px-5.5 gap-3">
+                <svg aria-hidden="true" width="18" height="18" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <circle cx="9" cy="9" r="8.25" fill="rgb(232 86 203 / 16%)" stroke="rgb(232 86 203 / 45%)" />
+                  <path d="M4.6 9.4h2.1l1.4-3.2 1.8 6 1.3-2.8h2.2" fill="none" stroke="var(--color-fuchsia-pink-300)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                </svg>
+                <div className="grow tracking-[-0.015em] w-max font-sans text-[#FFFFFFED] text-[15px]/5">
+                  Events
+                </div>
+                <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF80] text-xs/tight">
+                  <CountUp delay={0.35} value="6,342,428" />
+                </div>
+              </div>
+              <div className="flex flex-col self-stretch pl-8">
+                <div className="flex flex-col self-stretch pl-3.5 border-l border-l-solid border-l-[#FFFFFF17]">
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <rect x="3.6" y="1.6" width="6.8" height="10.8" rx="1.6" fill="none" stroke="var(--color-electric-violet-300)" strokeWidth="1.3" />
+                      <path d="M6.2 10.6h1.6" fill="none" stroke="var(--color-electric-violet-300)" strokeWidth="1.3" strokeLinecap="round" />
+                    </svg>
+                    <div className="grow tracking-[0.005em] w-max font-mono text-[#FFFFFFCC] text-[13px]/5">
+                      app_open
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.4} value="6,204,880" />
+                    </div>
+                  </div>
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <path d="M1.2 7S3.3 3.2 7 3.2 12.8 7 12.8 7 10.7 10.8 7 10.8 1.2 7 1.2 7Z" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.3" strokeLinejoin="round" />
+                      <circle cx="7" cy="7" r="1.6" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.3" />
+                    </svg>
+                    <div className="grow tracking-[0.005em] w-max font-mono text-[#FFFFFFCC] text-[13px]/5">
+                      paywall_view
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.45} value="96,340" />
+                    </div>
+                  </div>
+                  <div className="flex items-center self-stretch pr-5.5 gap-2.5 py-2.25">
+                    <svg aria-hidden="true" width="14" height="14" viewBox="0 0 14 14" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                      <path d="M2 3.2h1.9l1.5 6.6h5.2l1.4-4.7H4.4" fill="none" stroke="var(--color-pistachio-600)" strokeWidth="1.3" strokeLinecap="round" strokeLinejoin="round" />
+                      <circle cx="6.2" cy="11.6" r="0.9" fill="var(--color-pistachio-600)" />
+                      <circle cx="10.2" cy="11.6" r="0.9" fill="var(--color-pistachio-600)" />
+                    </svg>
+                    <div className="grow tracking-[0.005em] w-max font-mono text-[#FFFFFFCC] text-[13px]/5">
+                      purchase
+                    </div>
+                    <div className="shrink-0 w-22.5 text-right tracking-[0.01em] font-mono flex justify-end flex-wrap text-[#FFFFFF73] text-xs/tight">
+                      <CountUp delay={0.5} value="41,208" />
+                    </div>
+                  </div>
+                </div>
+              </div>
+            </div>
+          </Illustration>
+          <ScaledMock className="min-w-0 flex-1" designWidth={952}>
+          <Illustration className="flex flex-col self-stretch relative">
+            <svg aria-hidden="true" width="952" height="664" viewBox="0 0 952 664" xmlns="http://www.w3.org/2000/svg" style={{ position: 'absolute', left: '0px', top: '0px' }}>
+              <defs><linearGradient id="_cbl8kr0" x1="0" y1="0" x2="0" y2="1"><stop offset="0%" stopColor="#FFFFFF" stopOpacity="0.008"/><stop offset="16%" stopColor="#FFFFFF" stopOpacity="0.038"/><stop offset="88%" stopColor="#FFFFFF" stopOpacity="0.03"/><stop offset="100%" stopColor="#FFFFFF" stopOpacity="0"/></linearGradient><linearGradient id="_cbl8kr1" x1="0" y1="0" x2="0" y2="1"><stop offset="0%" stopColor="#FFFFFF" stopOpacity="0.02"/><stop offset="16%" stopColor="#FFFFFF" stopOpacity="0.085"/><stop offset="88%" stopColor="#FFFFFF" stopOpacity="0.07"/><stop offset="100%" stopColor="#FFFFFF" stopOpacity="0"/></linearGradient><linearGradient id="_cbl8kr2" x1="0" y1="0" x2="0" y2="1"><stop offset="0%" stopColor="#FFFFFF" stopOpacity="0"/><stop offset="18%" stopColor="#FFFFFF" stopOpacity="0.115"/><stop offset="88%" stopColor="#FFFFFF" stopOpacity="0.085"/><stop offset="100%" stopColor="#FFFFFF" stopOpacity="0"/></linearGradient></defs>
+              <rect x="816" y="0" width="136" height="664" fill="rgb(255 255 255 / 1.4%)" />
+              <path d="M68 0V664 M204 0V664 M340 0V664 M476 0V664 M612 0V664 M748 0V664 M884 0V664" fill="none" stroke="url(#_cbl8kr0)" strokeDasharray="2 6" />
+              <path d="M136 0V664 M272 0V664 M408 0V664 M544 0V664 M680 0V664" fill="none" stroke="url(#_cbl8kr1)" strokeDasharray="2 6" />
+              <path d="M816 0V664" fill="none" stroke="url(#_cbl8kr2)" />
+            </svg>
+            <div className="flex self-stretch pb-6 relative">
+              <div className="flex flex-col w-34 shrink-0 gap-2.25">
+                <div className="w-max font-sans font-medium text-[#FFFFFF80] text-xs/4">
+                  Feb
+                </div>
+                <div className="flex">
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF1F] text-[11px]/3.25">
+                    2
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF1F] text-[11px]/3.25">
+                    9
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF1F] text-[11px]/3.25">
+                    16
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF1F] text-[11px]/3.25">
+                    23
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-col w-34 shrink-0 gap-2.25">
+                <div className="w-max font-sans font-medium text-[#FFFFFF80] text-xs/4">
+                  Mar
+                </div>
+                <div className="flex">
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    2
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    9
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    16
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    23
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-col w-34 shrink-0 gap-2.25">
+                <div className="w-max font-sans font-medium text-[#FFFFFF80] text-xs/4">
+                  Apr
+                </div>
+                <div className="flex">
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    6
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    13
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    20
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    27
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-col w-34 shrink-0 gap-2.25">
+                <div className="w-max font-sans font-medium text-[#FFFFFF80] text-xs/4">
+                  May
+                </div>
+                <div className="flex">
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    4
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    11
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    18
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    25
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-col w-34 shrink-0 gap-2.25">
+                <div className="w-max font-sans font-medium text-[#FFFFFF80] text-xs/4">
+                  Jun
+                </div>
+                <div className="flex">
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    1
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    8
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    15
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    22
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-col w-34 shrink-0 gap-2.25">
+                <div className="w-max font-sans font-medium text-[#FFFFFF80] text-xs/4">
+                  Jul
+                </div>
+                <div className="flex">
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    6
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    13
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    20
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF3D] text-[11px]/3.25">
+                    27
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-col w-34 shrink-0 gap-2.25">
+                <div className="w-max font-sans font-medium text-[#FFFFFF80] text-xs/4">
+                  Aug
+                </div>
+                <div className="flex">
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF21] text-[11px]/3.25">
+                    3
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF21] text-[11px]/3.25">
+                    10
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF21] text-[11px]/3.25">
+                    17
+                  </div>
+                  <div className="w-8.5 shrink-0 tracking-[0.04em] font-mono text-[#FFFFFF21] text-[11px]/3.25">
+                    24
+                  </div>
+                </div>
+              </div>
+            </div>
+            <div className="flex items-end justify-between self-stretch pb-6.5 relative">
+              <div className="flex flex-col gap-3">
+                <div className="tracking-[-0.01em] w-max font-sans font-medium text-[#FFFFFFB2] text-[13px]/4">
+                  Monthly recurring revenue
+                </div>
+                <div className="flex items-end gap-3.5">
+                  <div className="tracking-[-0.04em] w-max shrink-0 font-sans font-semibold text-zinc-300 text-[46px]/11.5">
+                    <CountUp value="$48,190" />
+                  </div>
+                  <div className="pb-1.25">
+                    <div className="tracking-[-0.01em] w-max font-sans font-medium [color:var(--color-pistachio-600)] text-[13px]/4">
+                      <CountUp delay={0.15} value="+12.4%" />
+                    </div>
+                  </div>
+                </div>
+              </div>
+            </div>
+            <ChartWipe className="relative shrink-0">
+            <svg aria-hidden="true" width="952" height="220" viewBox="0 0 952 220" xmlns="http://www.w3.org/2000/svg" style={{ display: 'block' }}>
+              <defs><linearGradient id="_7gznpr0" x1="0" y1="0" x2="0" y2="1"><stop offset="0%" stopColor="var(--blue-ribbon-600)" stopOpacity="0.2"/><stop offset="72%" stopColor="var(--blue-ribbon-600)" stopOpacity="0.02"/><stop offset="100%" stopColor="var(--blue-ribbon-600)" stopOpacity="0"/></linearGradient><linearGradient id="_7gznpr1" x1="0" y1="0" x2="1" y2="0"><stop offset="0%" stopColor="var(--blue-ribbon-600)" stopOpacity="0"/><stop offset="14%" stopColor="var(--blue-ribbon-600)"/><stop offset="100%" stopColor="var(--blue-ribbon-600)"/></linearGradient><linearGradient id="_7gznpr2" x1="0" y1="0" x2="1" y2="0"><stop offset="0%" stopColor="#FFFFFF" stopOpacity="0"/><stop offset="16%" stopColor="#FFFFFF" stopOpacity="0.22"/><stop offset="100%" stopColor="#FFFFFF" stopOpacity="0.22"/></linearGradient></defs>
+              <path d="M0 188 L68 180 L136 184 L204 166 L272 158 L340 164 L408 142 L476 130 L544 136 L612 112 L680 96 L748 100 L816 66 L816 220 L0 220 Z" fill="url(#_7gznpr0)" />
+              <path d="M0 206 L68 202 L136 205 L204 196 L272 192 L340 195 L408 186 L476 180 L544 183 L612 174 L680 168 L748 170 L816 158" fill="none" stroke="url(#_7gznpr2)" strokeWidth="1.3" strokeLinecap="round" strokeDasharray="3 4" />
+              <path d="M0 188 L68 180 L136 184 L204 166 L272 158 L340 164 L408 142 L476 130 L544 136 L612 112 L680 96 L748 100 L816 66" fill="none" stroke="url(#_7gznpr1)" strokeWidth="1.75" strokeLinecap="round" strokeLinejoin="round" />
+              <path d="M816 66 L884 52 L952 36" fill="none" stroke="#0673FF6B" strokeWidth="1.5" strokeLinecap="round" strokeDasharray="4 5" />
+              <path d="M816 59.5 L822.5 66 L816 72.5 L809.5 66 Z" fill="var(--zinc-950)" stroke="var(--blue-ribbon-600)" strokeWidth="1.3" />
+            </svg>
+            </ChartWipe>
+            <div className="flex items-center justify-between self-stretch pt-4 relative">
+              <div className="flex items-center gap-5.5">
+                <div className="flex items-center gap-2">
+                  <div className="w-1.75 h-1.75 shrink-0 rounded-[999px] [background-color:var(--color-blue-ribbon-500)]" />
+                  <div className="w-max shrink-0 font-sans text-[#FFFFFF8A] text-xs/4">
+                    Subscription revenue
+                  </div>
+                </div>
+                <div className="flex items-center gap-2">
+                  <svg aria-hidden="true" width="14" height="7" viewBox="0 0 14 7" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                    <path d="M0 3.5h14" fill="none" stroke="rgb(255 255 255 / 26%)" strokeWidth="1.4" strokeDasharray="3 3" />
+                  </svg>
+                  <div className="w-max shrink-0 font-sans text-[#FFFFFF8A] text-xs/4">
+                    Previous period
+                  </div>
+                </div>
+              </div>
+              <div className="flex items-center gap-2">
+                <svg aria-hidden="true" width="14" height="7" viewBox="0 0 14 7" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <path d="M0 3.5h14" fill="none" stroke="rgb(6 115 255 / 50%)" strokeWidth="1.4" strokeDasharray="3 3" />
+                </svg>
+                <div className="w-max shrink-0 font-sans text-[#0673FFCC] text-xs/4">
+                  Projected
+                </div>
+              </div>
+            </div>
+            <div className="flex flex-col self-stretch pt-9.5 gap-5 relative">
+              <div className="flex flex-col self-stretch gap-1.75">
+                <div className="tracking-[-0.01em] w-max font-sans font-medium text-[#FFFFFFB2] text-[13px]/4">
+                  Retention by cohort
+                </div>
+              </div>
+              <div className="flex flex-col self-stretch gap-1.5">
+                <div className="flex self-stretch h-7 shrink-0">
+                  <div className="w-34 shrink-0 flex items-center justify-end pr-3">
+                    <div className="w-max shrink-0 font-sans text-[#FFFFFF8A] text-xs/4">
+                      Mar · 3,180
+                    </div>
+                  </div>
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF33] border border-solid border-[#0673FF4D]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFD1] text-[11px]/3.25">
+                      <CountUp delay={0.3} value="100" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF29] border border-solid border-[#0673FF47]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFB3] text-[11px]/3.25">
+                      <CountUp delay={0.335} value="82" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF24] border border-solid border-[#0673FF42]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFA8] text-[11px]/3.25">
+                      <CountUp delay={0.37} value="71" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF1F] border border-solid border-[#0673FF3D]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFA1] text-[11px]/3.25">
+                      <CountUp delay={0.405} value="64" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF1A] border border-solid border-[#0673FF38]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFF99] text-[11px]/3.25">
+                      <CountUp delay={0.44} value="59" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 h-7 rounded-[5px] bg-[#0673FF08] border border-dashed border-[#0673FF52]" />
+                </div>
+                <div className="flex self-stretch h-7 shrink-0">
+                  <div className="w-68 shrink-0 flex items-center justify-end pr-3">
+                    <div className="w-max shrink-0 font-sans text-[#FFFFFF8A] text-xs/4">
+                      Apr · 3,940
+                    </div>
+                  </div>
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF33] border border-solid border-[#0673FF4D]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFD1] text-[11px]/3.25">
+                      <CountUp delay={0.475} value="100" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF2A] border border-solid border-[#0673FF47]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFB3] text-[11px]/3.25">
+                      <CountUp delay={0.51} value="84" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF25] border border-solid border-[#0673FF42]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFA8] text-[11px]/3.25">
+                      <CountUp delay={0.545} value="74" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF21] border border-solid border-[#0673FF3D]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFA1] text-[11px]/3.25">
+                      <CountUp delay={0.58} value="68" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 h-7 rounded-[5px] bg-[#0673FF08] border border-dashed border-[#0673FF52]" />
+                </div>
+                <div className="flex self-stretch h-7 shrink-0">
+                  <div className="w-102 shrink-0 flex items-center justify-end pr-3">
+                    <div className="w-max shrink-0 font-sans text-[#FFFFFF8A] text-xs/4">
+                      May · 4,610
+                    </div>
+                  </div>
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF33] border border-solid border-[#0673FF4D]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFD1] text-[11px]/3.25">
+                      <CountUp delay={0.615} value="100" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF2B] border border-solid border-[#0673FF47]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFB3] text-[11px]/3.25">
+                      <CountUp delay={0.65} value="86" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF26] border border-solid border-[#0673FF42]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFA8] text-[11px]/3.25">
+                      <CountUp delay={0.685} value="77" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 h-7 rounded-[5px] bg-[#0673FF08] border border-dashed border-[#0673FF52]" />
+                </div>
+                <div className="flex self-stretch h-7 shrink-0">
+                  <div className="w-136 shrink-0 flex items-center justify-end pr-3">
+                    <div className="w-max shrink-0 font-sans text-[#FFFFFF8A] text-xs/4">
+                      Jun · 5,120
+                    </div>
+                  </div>
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF33] border border-solid border-[#0673FF4D]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFD1] text-[11px]/3.25">
+                      <CountUp delay={0.72} value="100" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF2B] border border-solid border-[#0673FF47]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFB3] text-[11px]/3.25">
+                      <CountUp delay={0.755} value="88" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 h-7 rounded-[5px] bg-[#0673FF08] border border-dashed border-[#0673FF52]" />
+                </div>
+                <div className="flex self-stretch h-7 shrink-0">
+                  <div className="w-170 shrink-0 flex items-center justify-end pr-3">
+                    <div className="w-max shrink-0 font-sans text-[#FFFFFF8A] text-xs/4">
+                      Jul · 5,860
+                    </div>
+                  </div>
+                  <div className="w-33 shrink-0 flex items-center justify-center h-7 rounded-[5px] bg-[#0673FF33] border border-solid border-[#0673FF4D]">
+                    <div className="tracking-[0.02em] font-mono text-[#FFFFFFD1] text-[11px]/3.25">
+                      <CountUp delay={0.79} value="100" />
+                    </div>
+                  </div>
+                  <div className="w-1 shrink-0" />
+                  <div className="w-33 shrink-0 h-7 rounded-[5px] bg-[#0673FF08] border border-dashed border-[#0673FF52]" />
+                </div>
+              </div>
+            </div>
+            <div className="absolute inset-0" style={{ backgroundImage: 'radial-gradient(ellipse 78.55% 116.835% at 22.040000000000003% 0% in oklab, oklab(17.1% 0 0 / 0%) 30.12%, oklab(14.1% 0.001 -0.004) 100%)' }} />
+          </Illustration>
+          </ScaledMock>
+        </div>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/asteroids.tsx b/apps/www/src/features/www/landing/sections/asteroids.tsx
new file mode 100644
index 000000000..11e4f2bd4
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/asteroids.tsx
@@ -0,0 +1,146 @@
+"use client";
+
+import { cn, Logo } from "@voidhash/ui";
+import { motion, useMotionValue, useMotionValueEvent, useTransform } from "motion/react";
+import { lazy, Suspense, useEffect, useRef, useState } from "react";
+
+import { ASTEROIDS_STAGE_CLASS } from "../asteroids/frame";
+
+/**
+ * The game must cost nothing until someone actually plays it: the engine, the CRT shader and the
+ * chrome live in their own chunk, and nothing mounts — no canvas, no loop — until the play button
+ * is pressed. The chunk itself is only prefetched once the finale scrolls near.
+ */
+const AsteroidsGame = lazy(async () => ({
+  default: (await import("../asteroids/game")).AsteroidsGame,
+}));
+
+/** How far ahead of the viewport the chunk starts downloading. */
+const PREFETCH_MARGIN = "600px";
+
+/** Scroll progress past which the play button is interactive and armed for the keyboard. */
+const REVEAL_PROGRESS = 0.6;
+
+/**
+ * The section is one viewport taller than the sticky stage inside it, so the last stretch of the
+ * page scrubs the logo-to-play transition instead of flipping it: the giant wordmark dissolves as
+ * the extra viewport scrolls by, and the unexplained play button condenses out of the same scroll.
+ * Once pressed, the stage swaps to the live game.
+ */
+export function LandingAsteroids() {
+  const sectionRef = useRef<HTMLElement>(null);
+  const [stage, setStage] = useState<"scroll" | "game">("scroll");
+  const [revealed, setRevealed] = useState(false);
+
+  // Progress through the runway, computed by hand: how far the extra viewport of section has been
+  // scrolled past the point where the sticky stage pins.
+  const scrollProgress = useMotionValue(0);
+  const logoOpacity = useTransform(scrollProgress, [0, 0.5], [1, 0]);
+  const logoScale = useTransform(scrollProgress, [0, 0.5], [1, 0.96]);
+  const logoLift = useTransform(scrollProgress, [0, 0.5], [0, -48]);
+  const buttonOpacity = useTransform(scrollProgress, [0.45, 0.85], [0, 1]);
+
+  useEffect(() => {
+    const section = sectionRef.current;
+    if (!section || stage !== "scroll") {
+      return;
+    }
+
+    const update = () => {
+      const runway = section.offsetHeight - window.innerHeight;
+      const raw = runway > 0 ? (window.scrollY - section.offsetTop) / runway : 1;
+      scrollProgress.set(Math.min(1, Math.max(0, raw)));
+    };
+
+    update();
+    window.addEventListener("scroll", update, { passive: true });
+    window.addEventListener("resize", update);
+
+    return () => {
+      window.removeEventListener("scroll", update);
+      window.removeEventListener("resize", update);
+    };
+  }, [scrollProgress, stage]);
+
+  // Interactivity needs a boolean, not a motion value: the button must ignore clicks and focus
+  // while it is still invisible mid-scrub.
+  useMotionValueEvent(scrollProgress, "change", (progress) => {
+    setRevealed(progress >= REVEAL_PROGRESS);
+  });
+
+  // Warm the chunk once the finale approaches, so pressing play starts the game instantly.
+  useEffect(() => {
+    const section = sectionRef.current;
+    if (!section) {
+      return;
+    }
+
+    const observer = new IntersectionObserver(
+      ([entry]) => {
+        if (entry.isIntersecting) {
+          import("../asteroids/game");
+          observer.disconnect();
+        }
+      },
+      { rootMargin: PREFETCH_MARGIN },
+    );
+    observer.observe(section);
+
+    return () => observer.disconnect();
+  }, []);
+
+  // Once the button has condensed in, the keys that scrolled here also press it.
+  useEffect(() => {
+    if (stage !== "scroll" || !revealed) {
+      return;
+    }
+
+    const onKeyDown = (event: KeyboardEvent) => {
+      if (event.code === "Space" || event.code === "Enter") {
+        event.preventDefault();
+        setStage("game");
+      }
+    };
+
+    window.addEventListener("keydown", onKeyDown);
+    return () => window.removeEventListener("keydown", onKeyDown);
+  }, [revealed, stage]);
+
+  return (
+    <section className="relative h-[200svh] w-full self-stretch bg-zinc-950" ref={sectionRef}>
+      <div className="sticky top-0 h-svh w-full overflow-hidden">
+        {stage === "game" ? (
+          <Suspense fallback={<div className={ASTEROIDS_STAGE_CLASS} />}>
+            <AsteroidsGame autoStart />
+          </Suspense>
+        ) : (
+          <>
+            <motion.div
+              className="absolute inset-x-0 top-0 flex justify-center px-6 pt-16 md:px-12 md:pt-20 xl:px-32"
+              style={{ opacity: logoOpacity, scale: logoScale, y: logoLift }}
+            >
+              {/* The Logo default carries `dark:text-white`, so the dark override must be explicit. */}
+              <Logo className="h-auto w-full max-w-[1656px] text-zinc-800 dark:text-zinc-800" />
+            </motion.div>
+            <motion.div
+              className={cn(
+                "absolute inset-0 flex items-center justify-center",
+                !revealed && "pointer-events-none",
+              )}
+              style={{ opacity: buttonOpacity }}
+            >
+              <button
+                className="border border-zinc-500 px-10 py-3.5 font-mono text-sm text-white tracking-[0.25em] transition-colors hover:border-white hover:bg-white hover:text-black"
+                onClick={() => setStage("game")}
+                tabIndex={revealed ? 0 : -1}
+                type="button"
+              >
+                PLAY
+              </button>
+            </motion.div>
+          </>
+        )}
+      </div>
+    </section>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/crm.tsx b/apps/www/src/features/www/landing/sections/crm.tsx
new file mode 100644
index 000000000..1b0c717de
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/crm.tsx
@@ -0,0 +1,331 @@
+import { LandingSection, ScaledMock, SectionHeader } from "../shared";
+
+/** Renders the CRM product section. */
+export function LandingCrm() {
+  return (
+    <LandingSection id="crm">
+      <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
+        <SectionHeader
+          description="Every install, purchase, trial and refund resolves to one person — across devices, stores and anonymous sessions."
+          eyebrow="CRM"
+          title="See the actual people behind the numbers."
+        />
+        <ScaledMock designWidth={1400}>
+          <div className="w-350 h-125 mt-6 shrink-0 relative">
+          <div className="left-97.5 top-0 w-252.5 flex flex-col items-start rounded-lg overflow-clip absolute">
+            <div className="self-stretch flex items-center py-3.5 px-6 gap-4 border-b border-b-solid [border-bottom-color:var(--color-zinc-900)]">
+              <div className="w-75 shrink-0 font-sans text-zinc-400 text-xs/4">
+                Person
+              </div>
+              <div className="w-40 shrink-0 font-sans text-zinc-400 text-xs/4">
+                Product
+              </div>
+              <div className="w-30 shrink-0 font-sans text-zinc-400 text-xs/4">
+                Status
+              </div>
+              <div className="w-25 shrink-0 text-right font-sans flex justify-end flex-wrap text-zinc-400 text-xs/4">
+                LTV
+              </div>
+              <div className="grow basis-[0%] text-right font-sans flex justify-end flex-wrap text-zinc-400 text-xs/4">
+                Last seen
+              </div>
+            </div>
+            <div className="self-stretch flex items-center py-3.75 px-6 gap-4 border-b border-b-solid [border-bottom-color:var(--color-zinc-900)]">
+              <div className="w-75 shrink-0 flex items-center gap-3">
+                <div className="w-7.5 h-7.5 shrink-0 rounded-[999px]" style={{ backgroundImage: 'linear-gradient(in oklab 135deg, oklab(85.7% 0.018 0.147) 0%, oklab(88% -0.200 0.140) 100%)' }} />
+                <div className="flex flex-col gap-0.5">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Mara Keller
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-500 text-xs/4">
+                    mara.keller@hey.com
+                  </div>
+                </div>
+              </div>
+              <div className="w-40 shrink-0 font-sans text-[#FFFFFFB8] text-[13px]/4">
+                Pro Annual
+              </div>
+              <div className="w-30 shrink-0 flex">
+                <div className="flex items-center py-1 px-2.5 rounded-[999px] gap-1.5 bg-[#14532D33] border border-solid border-[#16653D]">
+                  <div className="font-sans font-medium [color:var(--color-pistachio-600)] text-xs/4">
+                    Active
+                  </div>
+                </div>
+              </div>
+              <div className="w-25 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-[13px]/4">
+                $149.97
+              </div>
+              <div className="grow basis-[0%] text-right font-sans flex justify-end flex-wrap text-zinc-400 text-[13px]/4">
+                2 min ago
+              </div>
+            </div>
+            <div className="self-stretch flex items-center py-3.75 px-6 gap-4 border-b border-b-solid [border-bottom-color:var(--color-zinc-900)]">
+              <div className="w-75 shrink-0 flex items-center gap-3">
+                <div className="w-7.5 h-7.5 shrink-0 rounded-[999px]" style={{ backgroundImage: 'linear-gradient(in oklab 135deg, oklab(87.3% -0.210 0.125) 0%, oklab(46.2% -0.031 -0.305) 100%)' }} />
+                <div className="flex flex-col gap-0.5">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Jonas Ortega
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-500 text-xs/4">
+                    j.ortega@fastmail.com
+                  </div>
+                </div>
+              </div>
+              <div className="w-40 shrink-0 font-sans text-[#FFFFFFB8] text-[13px]/4">
+                Pro Monthly
+              </div>
+              <div className="w-30 shrink-0 flex">
+                <div className="flex items-center py-1 px-2.5 rounded-[999px] gap-1.5 bg-[#1E3A8A40] border border-solid border-blue-ribbon-800">
+                  <div className="font-sans font-medium text-blue-ribbon-400 text-xs/4">
+                    In trial
+                  </div>
+                </div>
+              </div>
+              <div className="w-25 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-[13px]/4">
+                $0.00
+              </div>
+              <div className="grow basis-[0%] text-right font-sans flex justify-end flex-wrap text-zinc-400 text-[13px]/4">
+                18 min ago
+              </div>
+            </div>
+            <div className="self-stretch flex items-center py-3.75 px-6 gap-4 relative bg-[#FFFFFF0A] border-b border-b-solid [border-bottom-color:var(--color-zinc-900)]">
+              <div className="w-75 shrink-0 flex items-center gap-3">
+                <div className="w-7.5 h-7.5 shrink-0 rounded-[999px]" style={{ backgroundImage: 'linear-gradient(in oklab 135deg, oklab(68.1% -0.134 0.027) 0%, oklab(36.1% 0.011 -0.231) 100%)' }} />
+                <div className="flex flex-col gap-0.5">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Amara Lindqvist
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-500 text-xs/4">
+                    amara@lindqvist.se
+                  </div>
+                </div>
+              </div>
+              <div className="w-40 shrink-0 font-sans text-[#FFFFFFB8] text-[13px]/4">
+                Pro Annual
+              </div>
+              <div className="w-30 shrink-0 flex">
+                <div className="flex items-center py-1 px-2.5 rounded-[999px] gap-1.5 bg-[#14532D33] border border-solid border-[#16653D]">
+                  <div className="font-sans font-medium [color:var(--color-pistachio-600)] text-xs/4">
+                    Active
+                  </div>
+                </div>
+              </div>
+              <div className="w-25 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-[13px]/4">
+                $299.94
+              </div>
+              <div className="grow basis-[0%] text-right font-sans flex justify-end flex-wrap text-zinc-400 text-[13px]/4">
+                1 hr ago
+              </div>
+              <div className="absolute left-0 top-0 w-0.5 h-16.75" style={{ backgroundImage: 'linear-gradient(in oklab 180deg, oklab(68.1% -0.134 0.027) 0%, oklab(36.1% 0.011 -0.231) 100%)' }} />
+            </div>
+            <div className="self-stretch flex items-center py-3.75 px-6 gap-4 border-b border-b-solid [border-bottom-color:var(--color-zinc-900)]">
+              <div className="w-75 shrink-0 flex items-center gap-3">
+                <div className="w-7.5 h-7.5 shrink-0 rounded-[999px]" style={{ backgroundImage: 'linear-gradient(in oklab 135deg, oklab(48.1% -0.041 -0.151) 0%, oklab(51.9% 0.198 -0.141) 100%)' }} />
+                <div className="flex flex-col gap-0.5">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Diego Tran
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-500 text-xs/4">
+                    dtran@proton.me
+                  </div>
+                </div>
+              </div>
+              <div className="w-40 shrink-0 font-sans text-[#FFFFFFB8] text-[13px]/4">
+                Pro Monthly
+              </div>
+              <div className="w-30 shrink-0 flex">
+                <div className="flex items-center py-1 px-2.5 rounded-[999px] gap-1.5 bg-[#78350F40] border border-solid border-[#A16207]">
+                  <div className="font-sans font-medium text-[#FBBF24] text-xs/4">
+                    Grace period
+                  </div>
+                </div>
+              </div>
+              <div className="w-25 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-[13px]/4">
+                $59.88
+              </div>
+              <div className="grow basis-[0%] text-right font-sans flex justify-end flex-wrap text-zinc-400 text-[13px]/4">
+                4 hrs ago
+              </div>
+            </div>
+            <div className="self-stretch flex items-center py-3.75 px-6 gap-4 border-b border-b-solid [border-bottom-color:var(--color-zinc-900)]">
+              <div className="w-75 shrink-0 flex items-center gap-3">
+                <div className="w-7.5 h-7.5 shrink-0 rounded-[999px]" style={{ backgroundImage: 'linear-gradient(in oklab 135deg, oklab(63.1% 0.235 0.099) 0%, oklab(92.5% -0.134 0.190) 100%)' }} />
+                <div className="flex flex-col gap-0.5">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Sofia Baumann
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-500 text-xs/4">
+                    sofia.b@icloud.com
+                  </div>
+                </div>
+              </div>
+              <div className="w-40 shrink-0 font-sans text-[#FFFFFFB8] text-[13px]/4">
+                Lifetime
+              </div>
+              <div className="w-30 shrink-0 flex">
+                <div className="flex items-center py-1 px-2.5 rounded-[999px] gap-1.5 bg-[#14532D33] border border-solid border-[#16653D]">
+                  <div className="font-sans font-medium [color:var(--color-pistachio-600)] text-xs/4">
+                    Active
+                  </div>
+                </div>
+              </div>
+              <div className="w-25 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-[13px]/4">
+                $199.00
+              </div>
+              <div className="grow basis-[0%] text-right font-sans flex justify-end flex-wrap text-zinc-400 text-[13px]/4">
+                Yesterday
+              </div>
+            </div>
+            <div className="self-stretch flex items-center py-3.75 px-6 gap-4">
+              <div className="w-75 shrink-0 flex items-center gap-3">
+                <div className="w-7.5 h-7.5 shrink-0 rounded-[999px]" style={{ backgroundImage: 'linear-gradient(in oklab 135deg, oklab(54.9% -0.036 -0.247) 0%, oklab(69% 0.276 -0.140) 100%)' }} />
+                <div className="flex flex-col gap-0.5">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Ravi Nandakumar
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-500 text-xs/4">
+                    ravi.n@gmail.com
+                  </div>
+                </div>
+              </div>
+              <div className="w-40 shrink-0 font-sans text-[#FFFFFFB8] text-[13px]/4">
+                Pro Annual
+              </div>
+              <div className="w-30 shrink-0 flex">
+                <div className="flex items-center py-1 px-2.5 rounded-[999px] gap-1.5 border border-solid border-zinc-700">
+                  <div className="font-sans font-medium text-zinc-400 text-xs/4">
+                    Churned
+                  </div>
+                </div>
+              </div>
+              <div className="w-25 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-[13px]/4">
+                $49.99
+              </div>
+              <div className="grow basis-[0%] text-right font-sans flex justify-end flex-wrap text-zinc-400 text-[13px]/4">
+                6 days ago
+              </div>
+            </div>
+            <div className="absolute top-px -bottom-2 inset-x-px" style={{ backgroundImage: 'radial-gradient(ellipse 67.23% 100% at 21.92% 0% in oklab, oklab(17.1% 0 0 / 0%) 17.44%, oklab(16.1% .0004 -0.001 / 33.8%) 45.31%, oklab(14.1% 0.001 -0.004) 100%)' }} />
+          </div>
+          <div className="absolute left-0 -top-6 w-126 flex flex-col items-start rounded-2xl overflow-clip [box-shadow:#000000B8_0px_28px_90px] bg-origin-border border border-solid [border-color:var(--color-zinc-800)]" style={{ backgroundImage: 'radial-gradient(ellipse 87.36% 97.41499999999999% at 100% 0% in oklab, var(--color-zinc-900) 0%, var(--color-zinc-950) 100%)' }}>
+            <div className="self-stretch flex items-center pt-6 pb-4 overflow-clip gap-4.5 px-7">
+              <div className="shrink-0 rounded-[999px] size-14" style={{ backgroundImage: 'linear-gradient(in oklab 135deg, oklab(68.1% -0.134 0.027) 0%, oklab(36.1% 0.011 -0.231) 100%)' }} />
+              <div className="flex flex-col grow basis-[0%] gap-1">
+                <div className="flex items-center gap-2.5">
+                  <div className="tracking-[-0.03em] font-sans font-semibold text-white text-xl/relaxed">
+                    Amara Lindqvist
+                  </div>
+                </div>
+                <div className="flex items-center gap-2">
+                  <div className="font-sans text-zinc-400 text-[13px]/4.25">
+                    Stockholm, Sweden
+                  </div>
+                  <div className="w-0.75 h-0.75 shrink-0 rounded-[999px] bg-zinc-700" />
+                  <div className="font-sans text-zinc-400 text-[13px]/4.25">
+                    iPhone 16 Pro · iOS 18.4
+                  </div>
+                </div>
+              </div>
+            </div>
+            <div className="self-stretch flex">
+              <div className="flex flex-col w-40.25 shrink-0 py-4 px-7">
+                <div className="font-sans text-zinc-400 text-[13px]/4">
+                  Lifetime value
+                </div>
+                <div className="flex items-baseline gap-2">
+                  <div className="tracking-[-0.035em] font-sans font-semibold text-white text-xl/8">
+                    $299.94
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-col grow basis-[0%] py-4 px-6">
+                <div className="font-sans text-zinc-400 text-[13px]/4">
+                  Subscribed
+                </div>
+                <div className="tracking-[-0.02em] font-sans font-medium text-white text-xl/8">
+                  3 yrs
+                </div>
+              </div>
+              <div className="flex flex-col grow basis-[0%] items-end py-4 px-6">
+                <div className="self-stretch text-right font-sans flex justify-end flex-wrap text-zinc-400 text-[13px]/4">
+                  Renews
+                </div>
+                <div className="tracking-[-0.02em] self-stretch text-right font-sans font-medium flex justify-end flex-wrap text-white text-xl/8">
+                  Mar 4
+                </div>
+              </div>
+            </div>
+            <div className="self-stretch flex flex-col pb-6 gap-4.5 pt-4 relative px-7">
+              <div className="absolute left-8 top-16 w-px h-41.25" style={{ backgroundImage: 'linear-gradient(in oklab 180deg, oklab(37% 0.003 -0.011) 0%, oklab(27.4% 0.002 -0.005) 70%, oklab(27.4% 0.002 -0.005 / 0%) 100%)' }} />
+              <div className="flex items-center gap-3 justify-between relative">
+                <div className="shrink-0 [letter-spacing:var(--tracking-normal)] font-sans font-medium [color:var(--color-white)] text-base/3.5">
+                  Activity
+                </div>
+                <div className="shrink-0 font-sans text-zinc-400 text-xs/3.5">
+                  Since Feb 2023
+                </div>
+              </div>
+              <div className="flex items-start gap-4 relative">
+                <div className="w-2.25 h-2.25 mt-1.25 shrink-0 rounded-[999px] [background-color:var(--color-pistachio-600)]" />
+                <div className="flex flex-col grow basis-[0%] gap-0.75">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Renewed Pro Annual
+                  </div>
+                  <div className="font-sans text-zinc-400 text-xs/4">
+                    App Store · Mar 4, 2026
+                  </div>
+                </div>
+                <div className="shrink-0 mt-px font-sans font-medium [color:var(--color-pistachio-600)] text-sm/4.5">
+                  +$99.99
+                </div>
+              </div>
+              <div className="flex items-start gap-4 relative">
+                <div className="w-2.25 h-2.25 mt-1.25 shrink-0 rounded-[999px] [background-color:var(--color-blue-ribbon-500)]" />
+                <div className="flex flex-col grow basis-[0%] gap-0.75">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Saw paywall · Onboarding, Variant C
+                  </div>
+                  <div className="font-sans text-zinc-400 text-xs/4">
+                    iOS app · Mar 2, 2026
+                  </div>
+                </div>
+                <div className="shrink-0 mt-px font-sans font-medium text-blue-ribbon-400 text-[13px]/4.5">
+                  Converted
+                </div>
+              </div>
+              <div className="flex items-start gap-4 relative">
+                <div className="w-2.25 h-2.25 mt-1.25 shrink-0 rounded-[999px] bg-electric-violet-400" />
+                <div className="flex flex-col grow basis-[0%] gap-0.75">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Switched Monthly → Annual
+                  </div>
+                  <div className="font-sans text-zinc-400 text-xs/4">
+                    App Store · Nov 18, 2025
+                  </div>
+                </div>
+                <div className="shrink-0 mt-px font-sans font-medium [color:var(--color-pistachio-600)] text-sm/4.5">
+                  +$39.99
+                </div>
+              </div>
+              <div className="flex items-start gap-4 relative">
+                <div className="w-2.25 h-2.25 mt-1.25 shrink-0 rounded-[999px] bg-zinc-600" />
+                <div className="flex flex-col grow basis-[0%] gap-0.75">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                    Started 7-day free trial
+                  </div>
+                  <div className="font-sans text-zinc-400 text-xs/4">
+                    App Store · Feb 26, 2023
+                  </div>
+                </div>
+                <div className="shrink-0 mt-px font-sans text-zinc-400 text-[13px]/4.5">
+                  First touch
+                </div>
+              </div>
+            </div>
+          </div>
+          </div>
+        </ScaledMock>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/developers.tsx b/apps/www/src/features/www/landing/sections/developers.tsx
new file mode 100644
index 000000000..81c49a336
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/developers.tsx
@@ -0,0 +1,168 @@
+"use client";
+
+import { Button } from "@voidhash/ui";
+import { CheckIcon, CopyIcon } from "lucide-react";
+import { useState } from "react";
+
+import { LandingSection, SectionHeader } from "../shared";
+
+const INSTALL_COMMAND = "npx voidhash-cli init";
+
+function CopyCommandButton() {
+  const [copied, setCopied] = useState(false);
+
+  return (
+    <Button
+      aria-label="Copy install command"
+      onClick={() => {
+        navigator.clipboard.writeText(INSTALL_COMMAND);
+        setCopied(true);
+        setTimeout(() => setCopied(false), 1500);
+      }}
+      size="icon-sm"
+      variant="outline"
+    >
+      {copied ? <CheckIcon className="text-blue-ribbon-400" /> : <CopyIcon />}
+    </Button>
+  );
+}
+
+/** Renders the developer platform section. */
+export function LandingDevelopers() {
+  return (
+    <LandingSection id="developers">
+      <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
+        <SectionHeader
+          description="One install and one provider. Paywalls, experiments, entitlements and analytics all arrive wired together — no bridge code, no event plumbing."
+          eyebrow="Developers"
+          title="Install the SDK before your coffee gets cold."
+        />
+        <div className="w-full max-w-[1400px] flex flex-col items-start gap-5">
+          <div className="self-stretch min-w-0 flex gap-12">
+            <div className="flex flex-col rounded-[16px] overflow-clip flex-1 min-w-0 h-fit grow basis-[0%] self-stretch [box-shadow:#00000059_0px_2px_24px] bg-zinc-950 border border-solid border-zinc-800">
+              <div className="self-stretch flex items-center py-2.5 px-3.5 gap-1.5 overflow-x-auto border-b border-b-solid border-b-zinc-900">
+                <div className="flex items-center py-2 px-3.25 rounded-md gap-2.25 bg-zinc-900">
+                  <svg aria-hidden="true" width="15" height="15" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                    <circle cx="12" cy="12" r="2.1" fill="var(--color-blue-ribbon-400)" />
+                    <ellipse cx="12" cy="12" rx="10" ry="3.9" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.4" />
+                    <ellipse cx="12" cy="12" rx="10" ry="3.9" transform="rotate(60 12 12)" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.4" />
+                    <ellipse cx="12" cy="12" rx="10" ry="3.9" transform="rotate(120 12 12)" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="1.4" />
+                  </svg>
+                  <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans font-medium text-zinc-50">
+                    React Native
+                  </div>
+                </div>
+                <div className="flex items-center py-2 px-3.25 gap-2.25">
+                  <svg aria-hidden="true" width="15" height="15" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                    <path d="M17.05 12.54c-.03-2.91 2.38-4.31 2.49-4.38-1.36-1.99-3.47-2.26-4.22-2.29-1.8-.18-3.51 1.06-4.42 1.06-.91 0-2.32-1.03-3.81-1-1.96.03-3.77 1.14-4.78 2.89-2.04 3.54-.52 8.78 1.46 11.65.97 1.4 2.12 2.98 3.63 2.92 1.46-.06 2.01-.94 3.77-.94 1.76 0 2.26.94 3.8.91 1.57-.03 2.56-1.43 3.52-2.84 1.11-1.63 1.57-3.21 1.6-3.29-.04-.02-3.07-1.18-3.04-4.69Z" fill="var(--zinc-500)" />
+                    <path d="M14.13 4.06c.8-.98 1.35-2.33 1.2-3.68-1.16.05-2.57.78-3.4 1.75-.74.86-1.4 2.24-1.22 3.56 1.3.1 2.62-.66 3.42-1.63Z" fill="var(--zinc-500)" />
+                  </svg>
+                  <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-400">
+                    Swift
+                  </div>
+                  <div className="text-[13px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-500">
+                    Soon
+                  </div>
+                </div>
+                <div className="flex items-center py-2 px-3.25 gap-2.25">
+                  <svg aria-hidden="true" width="13" height="13" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                    <path d="M24 24H0V0h24L12 12l12 12Z" fill="var(--zinc-500)" />
+                  </svg>
+                  <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-400">
+                    Kotlin
+                  </div>
+                  <div className="text-[13px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-500">
+                    Soon
+                  </div>
+                </div>
+                <div className="grow basis-[0%] h-px" />
+                <CopyCommandButton />
+              </div>
+              <div className="self-stretch flex flex-col py-8 md:py-11.5">
+                <div className="self-stretch flex items-center px-5 md:px-7 gap-3.5">
+                  <div className="w-max inline-block shrink-0 font-mono text-zinc-600 text-base/6 md:text-xl/7.5">
+                    $
+                  </div>
+                  <div className="flex flex-wrap items-center gap-x-2">
+                    <div className="w-max inline-block shrink-0 font-mono text-zinc-400 text-base/6 md:text-xl/7.5">
+                      npx
+                    </div>
+                    <div className="w-max inline-block shrink-0 font-mono font-medium text-zinc-50 text-base/6 md:text-xl/7.5">
+                      voidhash-cli
+                    </div>
+                    <div className="w-max inline-block shrink-0 font-mono font-medium text-blue-ribbon-400 text-base/6 md:text-xl/7.5">
+                      init
+                    </div>
+                  </div>
+                </div>
+              </div>
+              <div className="self-stretch flex flex-wrap items-center py-4 px-5 md:px-7 gap-x-7 gap-y-2 border-t border-t-solid border-t-zinc-900">
+                <a className="flex items-center gap-2.25 transition-opacity hover:opacity-80" href="/docs">
+                  <svg aria-hidden="true" width="15" height="15" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                    <path d="M4 4.5A1.5 1.5 0 0 1 5.5 3H10a2 2 0 0 1 2 2v15a2 2 0 0 0-2-2H5.5A1.5 1.5 0 0 1 4 16.5v-12Z" fill="none" stroke="var(--zinc-400)" strokeWidth="1.7" strokeLinejoin="round" />
+                    <path d="M20 4.5A1.5 1.5 0 0 0 18.5 3H14a2 2 0 0 0-2 2v15a2 2 0 0 1 2-2h4.5a1.5 1.5 0 0 0 1.5-1.5v-12Z" fill="none" stroke="var(--zinc-400)" strokeWidth="1.7" strokeLinejoin="round" />
+                  </svg>
+                  <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-300">
+                    Read the docs
+                  </div>
+                </a>
+                <div className="grow basis-[0%] h-px" />
+                <div className="text-[13px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-mono text-zinc-500">
+                  Expo SDK 52+ · New Architecture ready
+                </div>
+              </div>
+            </div>
+          </div>
+          <div className="self-stretch flex flex-wrap items-center gap-y-3 pt-5 px-0.5">
+            <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-400">
+              Wired automatically, zero config
+            </div>
+            <div className="grow basis-[0%] h-px" />
+            <div className="flex flex-wrap items-center gap-x-7.5 gap-y-3">
+              <div className="flex items-center gap-2">
+                <svg aria-hidden="true" width="14" height="14" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <path d="M4.5 12.5 9.5 17.5 19.5 6.5" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="2.4" strokeLinecap="round" strokeLinejoin="round" />
+                </svg>
+                <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-300">
+                  Paywalls
+                </div>
+              </div>
+              <div className="flex items-center gap-2">
+                <svg aria-hidden="true" width="14" height="14" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <path d="M4.5 12.5 9.5 17.5 19.5 6.5" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="2.4" strokeLinecap="round" strokeLinejoin="round" />
+                </svg>
+                <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-300">
+                  Purchases
+                </div>
+              </div>
+              <div className="flex items-center gap-2">
+                <svg aria-hidden="true" width="14" height="14" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <path d="M4.5 12.5 9.5 17.5 19.5 6.5" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="2.4" strokeLinecap="round" strokeLinejoin="round" />
+                </svg>
+                <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-300">
+                  Entitlements
+                </div>
+              </div>
+              <div className="flex items-center gap-2">
+                <svg aria-hidden="true" width="14" height="14" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <path d="M4.5 12.5 9.5 17.5 19.5 6.5" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="2.4" strokeLinecap="round" strokeLinejoin="round" />
+                </svg>
+                <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-300">
+                  Experiments
+                </div>
+              </div>
+              <div className="flex items-center gap-2">
+                <svg aria-hidden="true" width="14" height="14" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+                  <path d="M4.5 12.5 9.5 17.5 19.5 6.5" fill="none" stroke="var(--color-blue-ribbon-400)" strokeWidth="2.4" strokeLinecap="round" strokeLinejoin="round" />
+                </svg>
+                <div className="text-[15px] tracking-[-0.01em] leading-[120%] w-max shrink-0 font-sans text-zinc-300">
+                  Analytics
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/divider.tsx b/apps/www/src/features/www/landing/sections/divider.tsx
new file mode 100644
index 000000000..61d75750e
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/divider.tsx
@@ -0,0 +1,8 @@
+/** Renders the hairline band that separates two landing page sections. */
+export function LandingDivider() {
+  return (
+    <div className="flex flex-col items-center gap-2.5 self-stretch border-zinc-800 border-b py-2.5">
+      <div className="flex h-3 shrink-0 items-center self-stretch border-zinc-800 border-t border-b" />
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/experimentation.tsx b/apps/www/src/features/www/landing/sections/experimentation.tsx
new file mode 100644
index 000000000..c6faaa001
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/experimentation.tsx
@@ -0,0 +1,199 @@
+import { Button, Switch } from "@voidhash/ui";
+
+import { CountUp, GrowBar, Illustration } from "../motion";
+import { LandingSection, ScaledMock, SectionHeader } from "../shared";
+
+/** Renders the experimentation product section. */
+export function LandingExperimentation() {
+  return (
+    <LandingSection id="experimentation">
+      <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
+        <SectionHeader
+          description="Paywall A/B tests and feature flags share one targeting engine — so an experiment is just a flag with results attached."
+          eyebrow="Experimentation"
+          title="Test every price, every screen, every rollout."
+        />
+        <div className="flex flex-col items-start gap-6 self-stretch xl:flex-row">
+          <ScaledMock className="min-w-0 flex-1" designWidth={944}>
+            <Illustration className="w-236 flex flex-col items-start rounded-lg overflow-clip relative shrink-0">
+              <div className="self-stretch flex items-center justify-between py-5 px-6">
+                <div className="flex flex-col gap-2">
+                  <div className="tracking-[-0.02em] font-sans font-medium text-white text-[15px]/4.5">
+                    Onboarding paywall — annual price
+                  </div>
+                  <div className="font-sans text-zinc-400 text-xs/4">
+                    Running · 14 days · 48,204 exposures
+                  </div>
+                </div>
+              </div>
+              <div className="self-stretch flex flex-col py-6.5 px-6 gap-5.5 grow items-start">
+                <div className="flex items-center gap-5 self-stretch">
+                  <div className="w-50 shrink-0 font-sans text-zinc-400 text-xs/4">
+                    Variant
+                  </div>
+                  <div className="grow basis-[0%] font-sans text-zinc-400 text-xs/4">
+                    Trial start rate
+                  </div>
+                  <div className="w-24 shrink-0 text-right font-sans flex justify-end flex-wrap text-zinc-400 text-xs/4">
+                    ARPU
+                  </div>
+                  <div className="w-21 shrink-0 text-right font-sans flex justify-end flex-wrap text-zinc-400 text-xs/4">
+                    Lift
+                  </div>
+                </div>
+                <div className="flex items-center gap-5 self-stretch">
+                  <div className="w-50 shrink-0 flex flex-col gap-0.75">
+                    <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                      Control
+                    </div>
+                    <div className="tracking-[-0.01em] font-sans text-zinc-400 text-[13px]/4">
+                      $49.99 / year · 33%
+                    </div>
+                  </div>
+                  <div className="grow basis-[0%] flex items-center gap-3">
+                    <GrowBar className="h-6.5 w-56 shrink-0 rounded-lg [background-color:var(--color-zinc-800)]" />
+                    <div className="font-sans font-medium text-[#FFFFFFB8] text-sm/4.5">
+                      <CountUp value="21.4%" />
+                    </div>
+                  </div>
+                  <div className="w-24 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-sm/4.5">
+                    <CountUp value="$1.62" />
+                  </div>
+                  <div className="w-21 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-zinc-500 text-sm/4.5">
+                    —
+                  </div>
+                </div>
+                <div className="flex items-center gap-5 self-stretch">
+                  <div className="w-50 shrink-0 flex flex-col gap-0.75">
+                    <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                      Variant B
+                    </div>
+                    <div className="tracking-[-0.01em] font-sans text-zinc-400 text-[13px]/4">
+                      $59.99 / year · 33%
+                    </div>
+                  </div>
+                  <div className="grow basis-[0%] flex items-center gap-3">
+                    <GrowBar className="h-6.5 w-51.75 shrink-0 rounded-lg [background-color:var(--color-zinc-800)]" delay={0.08} />
+                    <div className="font-sans font-medium text-[#FFFFFFB8] text-sm/4.5">
+                      <CountUp delay={0.08} value="19.8%" />
+                    </div>
+                  </div>
+                  <div className="w-24 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-sm/4.5">
+                    <CountUp delay={0.08} value="$1.71" />
+                  </div>
+                  <div className="w-21 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap [color:var(--color-pistachio-600)] text-sm/4.5">
+                    <CountUp delay={0.08} value="+5.6%" />
+                  </div>
+                </div>
+                <div className="flex items-center gap-5 self-stretch">
+                  <div className="w-50 shrink-0 flex flex-col gap-0.75">
+                    <div className="tracking-[-0.02em] font-sans font-medium text-white text-sm/4.5">
+                      Variant C
+                    </div>
+                    <div className="tracking-[-0.01em] font-sans text-zinc-400 text-[13px]/4">
+                      $39.99 / year + 7d trial · 34%
+                    </div>
+                  </div>
+                  <div className="grow basis-[0%] flex items-center gap-3">
+                    <GrowBar className="h-6.5 w-73 shrink-0 rounded-lg [box-shadow:var(--color-blue-ribbon-300)_0px_0px_6px_inset] [background-color:var(--color-blue-ribbon-600)]" delay={0.16} />
+                    <div className="font-sans font-medium text-white text-sm/4.5">
+                      <CountUp delay={0.16} value="27.9%" />
+                    </div>
+                  </div>
+                  <div className="w-24 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-white text-sm/4.5">
+                    <CountUp delay={0.16} value="$2.04" />
+                  </div>
+                  <div className="w-21 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap [color:var(--color-pistachio-600)] text-sm/4.5">
+                    <CountUp delay={0.16} value="+25.9%" />
+                  </div>
+                </div>
+              </div>
+              <div className="flex items-center justify-between py-6.5 px-6 rounded-lg overflow-clip gap-12 w-236 [background-color:var(--color-zinc-950)]">
+                <div className="w-179 flex flex-col gap-2.25 shrink-0">
+                  <div className="self-stretch h-6.5 flex rounded-lg shrink-0 [background-color:var(--color-zinc-800)]">
+                    <GrowBar className="w-55.75 rounded-lg shrink-0 [box-shadow:var(--color-blue-ribbon-300)_0px_0px_6px_inset] [background-color:var(--color-blue-ribbon-600)]" delay={0.24} />
+                  </div>
+                  <div className="self-stretch flex items-center justify-between">
+                    <div className="font-sans text-zinc-400 text-xs/4">
+                      Rollout <CountUp delay={0.24} value="34%" />
+                    </div>
+                    <div className="font-sans text-zinc-400 text-xs/4">
+                      Target 100%
+                    </div>
+                  </div>
+                </div>
+                <Button className="relative shrink-0">Ship Variant C</Button>
+              </div>
+              <div className="absolute top-0 -bottom-2.25 inset-x-0 pointer-events-none" style={{ backgroundImage: 'radial-gradient(ellipse 114.14500000000001% 169.79% at 37.84% 1.6199999999999992% in oklab, oklab(17.1% 0 0 / 0%) 17.64%, oklab(14.1% 0.001 -0.004) 100%)' }} />
+            </Illustration>
+          </ScaledMock>
+          <div className="w-full max-w-107.25 flex flex-col items-start rounded-lg overflow-clip shrink-0 bg-origin-border border border-solid [border-color:var(--color-zinc-800)]" style={{ backgroundImage: 'radial-gradient(ellipse 100.22999999999999% 100% at 0% 0% in oklab, var(--color-zinc-900) 0%, var(--color-zinc-950) 100%)' }}>
+              <div className="self-stretch flex items-center justify-between py-5 px-6 border-b border-b-solid [border-bottom-color:var(--color-zinc-800)]">
+                <div className="tracking-[-0.02em] font-sans font-medium text-white text-[15px]/4.5">
+                  Feature flags
+                </div>
+                <div className="font-sans text-zinc-400 text-xs/4">
+                  Production
+                </div>
+              </div>
+              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
+                <div className="grow basis-[0%] flex flex-col gap-1">
+                  <div className="font-mono font-medium text-white text-[13px]/4">
+                    new_onboarding_flow
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
+                    iOS · 25% rollout
+                  </div>
+                </div>
+                <Switch defaultChecked />
+              </div>
+              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
+                <div className="grow basis-[0%] flex flex-col gap-1">
+                  <div className="font-mono font-medium text-white text-[13px]/4">
+                    annual_price_test
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
+                    Backing flag · experiment · 100%
+                  </div>
+                </div>
+                <Switch defaultChecked />
+              </div>
+              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
+                <div className="grow basis-[0%] flex flex-col gap-1">
+                  <div className="font-mono font-medium text-white text-[13px]/4">
+                    winback_offer_v2
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
+                    Churned subscribers · 50% rollout
+                  </div>
+                </div>
+                <Switch defaultChecked />
+              </div>
+              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
+                <div className="grow basis-[0%] flex flex-col gap-1">
+                  <div className="font-mono font-medium text-zinc-400 text-[13px]/4">
+                    family_sharing
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
+                    Internal testers only · off
+                  </div>
+                </div>
+                <Switch />
+              </div>
+              <div className="self-stretch flex items-center py-4.5 px-6 gap-4">
+                <div className="grow basis-[0%] flex flex-col gap-1">
+                  <div className="font-mono font-medium text-zinc-400 text-[13px]/4">
+                    paywall_v4_layout
+                  </div>
+                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
+                    All platforms · draft
+                  </div>
+                </div>
+                <Switch />
+              </div>
+            </div>
+        </div>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/footer.tsx b/apps/www/src/features/www/landing/sections/footer.tsx
new file mode 100644
index 000000000..c926bd510
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/footer.tsx
@@ -0,0 +1,132 @@
+import { Logo } from "@voidhash/ui";
+
+const GITHUB_REPO = "https://github.com/voidhashcom/voidhash";
+
+const LINK_COLUMNS: {
+  title: string;
+  links: { label: string; href?: string }[];
+}[] = [
+  {
+    title: "PRODUCT",
+    links: [
+      { label: "Paywalls", href: "/#paywalls" },
+      { label: "Analytics", href: "/#analytics" },
+      { label: "Experiments", href: "/#experimentation" },
+      { label: "Feature flags", href: "/#experimentation" },
+      { label: "CRM", href: "/#crm" },
+    ],
+  },
+  {
+    title: "DEVELOPERS",
+    links: [
+      { label: "Documentation", href: "/docs" },
+      { label: "React Native SDK", href: "/docs/react-native" },
+      { label: "MCP server", href: "/docs/mcp" },
+      { label: "CLI", href: "/docs/cli" },
+      { label: "API reference", href: "/docs/api" },
+    ],
+  },
+  {
+    title: "OPEN SOURCE",
+    links: [
+      { label: "GitHub", href: GITHUB_REPO },
+      { label: "Self-hosting", href: GITHUB_REPO },
+      { label: "Licensing", href: `${GITHUB_REPO}/blob/main/LICENSE.md` },
+      { label: "Contributing", href: `${GITHUB_REPO}/blob/main/CONTRIBUTING.md` },
+      { label: "Changelog", href: `${GITHUB_REPO}/releases` },
+    ],
+  },
+  {
+    title: "COMPANY",
+    links: [
+      { label: "Pricing", href: "/pricing" },
+      { label: "Blog" },
+      { label: "Security" },
+      { label: "Privacy" },
+      { label: "Contact" },
+    ],
+  },
+];
+
+const BOTTOM_LINKS: { label: string; href?: string }[] = [
+  { label: "Status" },
+  { label: "Terms" },
+  { label: "X", href: "https://x.com/voidhashcom" },
+  { label: "Discord", href: "https://discord.gg/voidhash" },
+  { label: "GitHub", href: GITHUB_REPO },
+];
+
+function FooterLink({
+  label,
+  href,
+  className,
+}: {
+  label: string;
+  href?: string;
+  className: string;
+}) {
+  if (!href) {
+    return <div className={className}>{label}</div>;
+  }
+  const external = href.startsWith("http");
+  return (
+    <a
+      className={`${className} transition-colors hover:text-white`}
+      href={href}
+      rel={external ? "noreferrer" : undefined}
+      target={external ? "_blank" : undefined}
+    >
+      {label}
+    </a>
+  );
+}
+
+/** Renders the landing page footer. */
+export function LandingFooter() {
+  return (
+    <footer className="flex min-w-0 flex-col items-center self-stretch">
+      <div className="flex w-full max-w-[1656px] flex-col gap-14 px-6 pt-16 pb-16 md:px-12 md:pt-24 lg:flex-row lg:items-start lg:justify-between lg:gap-20 xl:px-32">
+        <div className="flex w-full max-w-85 shrink-0 flex-col gap-5.5">
+          <a aria-label="Voidhash home" href="/">
+            <Logo className="h-[17px] w-auto text-white" />
+          </a>
+          <div className="font-sans text-zinc-400 text-sm/normal tracking-[-0.01em]">
+            The open-source growth platform for mobile apps.
+          </div>
+        </div>
+        <div className="grid grow grid-cols-2 gap-x-8 gap-y-12 sm:grid-cols-4 lg:flex lg:items-start lg:justify-end lg:gap-20">
+          {LINK_COLUMNS.map((column) => (
+            <div className="flex flex-col gap-3.5 lg:w-42.5 lg:shrink-0" key={column.title}>
+              <div className="font-mono text-zinc-500 text-[11px]/3.5 tracking-[0.06em]">
+                {column.title}
+              </div>
+              {column.links.map((link) => (
+                <FooterLink
+                  className="w-max font-sans text-zinc-200 text-sm/4.5 tracking-[-0.01em]"
+                  href={link.href}
+                  key={link.label}
+                  label={link.label}
+                />
+              ))}
+            </div>
+          ))}
+        </div>
+      </div>
+      <div className="flex w-full max-w-[1656px] flex-col gap-4 px-6 pt-6.5 pb-10 sm:flex-row sm:items-center sm:justify-between sm:gap-10 md:px-12 xl:px-32">
+        <div className="font-sans text-zinc-500 text-[13px]/4 tracking-[-0.01em]">
+          © 2026 Voidhash s.r.o.
+        </div>
+        <div className="flex flex-wrap items-center gap-7">
+          {BOTTOM_LINKS.map((link) => (
+            <FooterLink
+              className="font-sans text-zinc-500 text-[13px]/4 tracking-[-0.01em]"
+              href={link.href}
+              key={link.label}
+              label={link.label}
+            />
+          ))}
+        </div>
+      </div>
+    </footer>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/get-started.tsx b/apps/www/src/features/www/landing/sections/get-started.tsx
new file mode 100644
index 000000000..5a864f08d
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/get-started.tsx
@@ -0,0 +1,116 @@
+import { Button } from "@voidhash/ui";
+import { ArrowUpRightIcon, ChevronRightIcon } from "lucide-react";
+import type { ReactNode } from "react";
+
+import { HeroShader } from "@/features/www/hero/hero-shader";
+import { signUpCtaLabel } from "@/lib/waitlist";
+
+import { LandingSection } from "../shared";
+
+const COMMUNITY_CARDS: {
+  title: string;
+  description: string;
+  action: string;
+  href: string;
+  icon: ReactNode;
+}[] = [
+  {
+    title: "GitHub",
+    description: "The full platform, SDKs and paywall examples in one repo.",
+    action: "Star the repo",
+    href: "https://github.com/voidhashcom/voidhash",
+    icon: (
+      <svg aria-hidden="true" width="26" height="26" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+        <path d="M12 2C6.48 2 2 6.58 2 12.24c0 4.53 2.87 8.37 6.84 9.72.5.1.68-.22.68-.49v-1.7c-2.78.62-3.37-1.37-3.37-1.37-.46-1.18-1.11-1.5-1.11-1.5-.91-.64.07-.63.07-.63 1 .07 1.53 1.06 1.53 1.06.89 1.57 2.34 1.12 2.91.85.09-.66.35-1.11.63-1.37-2.22-.26-4.56-1.14-4.56-5.05 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.71 0 0 .84-.28 2.75 1.05a9.3 9.3 0 0 1 5 0c1.91-1.33 2.75-1.05 2.75-1.05.55 1.41.2 2.45.1 2.71.64.72 1.03 1.63 1.03 2.75 0 3.92-2.34 4.79-4.57 5.04.36.32.68.94.68 1.9v2.82c0 .27.18.6.69.49A10.06 10.06 0 0 0 22 12.24C22 6.58 17.52 2 12 2Z" fill="var(--zinc-400)" />
+      </svg>
+    ),
+  },
+  {
+    title: "Discord",
+    description: "Ask questions, share paywalls and get support straight from the team.",
+    action: "Join the server",
+    href: "https://discord.gg/voidhash",
+    icon: (
+      <svg aria-hidden="true" width="26" height="26" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+        <path d="M20.317 4.37a19.79 19.79 0 0 0-4.885-1.515.074.074 0 0 0-.79.037c-.21.375-.444.865-.608 1.25a18.27 18.27 0 0 0-5.487 0 12.64 12.64 0 0 0-.617-1.25.077.077 0 0 0-.079-.037A19.74 19.74 0 0 0 3.677 4.37a.07.07 0 0 0-.32.027C.533 9.046-.32 13.58.099 18.057a.082.082 0 0 0 .31.057 19.9 19.9 0 0 0 5.993 3.03.078.078 0 0 0 .084-.028c.462-.63.874-1.295 1.226-1.994a.076.076 0 0 0-.041-.106 13.1 13.1 0 0 1-1.872-.892.077.077 0 0 1-.008-.128c.126-.94.252-.192.372-.291a.074.074 0 0 1 .077-.01c3.928 1.793 8.18 1.793 12.062 0a.074.074 0 0 1 .78.009c.12.099.246.198.373.292a.077.077 0 0 1-.6.127 12.3 12.3 0 0 1-1.873.891.077.077 0 0 0-.41.107c.36.698.772 1.362 1.225 1.993a.076.076 0 0 0 .84.028 19.84 19.84 0 0 0 6.002-3.03.077.077 0 0 0 .032-.054c.5-5.177-.838-9.674-3.549-13.66a.061.061 0 0 0-.031-.028ZM8.02 15.331c-1.183 0-2.157-1.085-2.157-2.419 0-1.333.955-2.419 2.157-2.419 1.21 0 2.176 1.096 2.157 2.42 0 1.333-.956 2.418-2.157 2.418Zm7.975 0c-1.183 0-2.157-1.085-2.157-2.419 0-1.333.955-2.419 2.157-2.419 1.21 0 2.176 1.096 2.157 2.42 0 1.333-.946 2.418-2.157 2.418Z" fill="var(--zinc-400)" />
+      </svg>
+    ),
+  },
+  {
+    title: "Docs",
+    description: "Guides, API reference and a hello-world integration for every SDK.",
+    action: "Browse docs",
+    href: "/docs",
+    icon: (
+      <svg aria-hidden="true" width="26" height="26" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" style={{ flexShrink: '0' }}>
+        <path d="M4 4.5A1.5 1.5 0 0 1 5.5 3H10a2 2 0 0 1 2 2v15a2 2 0 0 0-2-2H5.5A1.5 1.5 0 0 1 4 16.5v-12Z" fill="none" stroke="var(--zinc-400)" strokeWidth="1.6" strokeLinejoin="round" />
+        <path d="M20 4.5A1.5 1.5 0 0 0 18.5 3H14a2 2 0 0 0-2 2v15a2 2 0 0 1 2-2h4.5a1.5 1.5 0 0 0 1.5-1.5v-12Z" fill="none" stroke="var(--zinc-400)" strokeWidth="1.6" strokeLinejoin="round" />
+      </svg>
+    ),
+  },
+];
+
+/** Renders the closing call to action, backed by the lenticular gradient shader. */
+export function LandingGetStarted() {
+  return (
+    <LandingSection>
+      <div className="relative flex flex-col items-center justify-center overflow-clip px-6 py-24 md:py-36 xl:py-44">
+        <div className="absolute inset-0">
+          <HeroShader />
+        </div>
+        <div className="relative flex flex-col items-center gap-8 md:gap-11">
+          <div className="flex flex-col items-center gap-6">
+            <h2 className="text-balance text-center font-medium font-sans text-[36px] text-white leading-[110%] tracking-[-0.03em] md:text-[48px] xl:text-[56px]">
+              Get started today
+            </h2>
+            <p className="max-w-[500px] text-center font-sans text-zinc-400 text-base/6.5 tracking-[-0.03em] md:text-xl/8">
+              Create a project, drop in the SDK, ship your first paywall. All in an afternoon.
+            </p>
+          </div>
+          <div className="flex flex-col items-center gap-3 pt-1 sm:flex-row">
+            <Button asChild size="lg">
+              <a href="/auth/sign-up">
+                {signUpCtaLabel("Get started for free")}
+                <ChevronRightIcon data-icon="inline-end" />
+              </a>
+            </Button>
+            <Button asChild size="lg" variant="ghost">
+              <a href="/docs">
+                View docs
+                <ChevronRightIcon data-icon="inline-end" />
+              </a>
+            </Button>
+          </div>
+        </div>
+      </div>
+      <div className="grid grid-cols-1 divide-y divide-zinc-800 border-zinc-800 border-t md:grid-cols-3 md:divide-x md:divide-y-0">
+        {COMMUNITY_CARDS.map((card) => (
+          <div
+            className="flex flex-col items-center gap-5 px-8 py-12 md:px-14 md:py-18"
+            key={card.title}
+          >
+            {card.icon}
+            <div className="flex flex-col items-center gap-2.5">
+              <div className="font-medium font-sans text-zinc-50 text-xl leading-[120%] tracking-[-0.02em]">
+                {card.title}
+              </div>
+              <p className="max-w-[340px] text-center font-sans text-zinc-400 text-base/6.5 tracking-[-0.01em]">
+                {card.description}
+              </p>
+            </div>
+            <Button asChild variant="outline">
+              <a
+                href={card.href}
+                rel={card.href.startsWith("http") ? "noreferrer" : undefined}
+                target={card.href.startsWith("http") ? "_blank" : undefined}
+              >
+                {card.action}
+                <ArrowUpRightIcon data-icon="inline-end" />
+              </a>
+            </Button>
+          </div>
+        ))}
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/hero.tsx b/apps/www/src/features/www/landing/sections/hero.tsx
new file mode 100644
index 000000000..d98712fa0
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/hero.tsx
@@ -0,0 +1,52 @@
+import { Button } from "@voidhash/ui";
+import { ChevronRightIcon } from "lucide-react";
+
+import { HeroShader } from "@/features/www/hero/hero-shader";
+import { signUpCtaLabel } from "@/lib/waitlist";
+
+import { LandingSection } from "../shared";
+
+/** Renders the landing page hero, backed by the lenticular gradient shader. */
+export function LandingHero() {
+  return (
+    <LandingSection>
+      <div className="relative flex flex-col items-center overflow-clip px-6 py-24 md:py-40 xl:py-56">
+        <div className="absolute inset-0">
+          <HeroShader />
+        </div>
+        <div className="relative flex w-full max-w-[826px] flex-col items-center gap-8 md:gap-11.5">
+          <div className="flex items-center justify-center rounded-[23px] bg-zinc-900 px-4 py-1.75 [outline:1px_solid_var(--zinc-800)] -outline-offset-1">
+            <div className="font-sans font-semibold text-zinc-400 text-sm/normal tracking-[-0.03em]">
+              Currently available in Alpha preview
+            </div>
+          </div>
+          <div className="flex flex-col items-center gap-10 md:gap-12">
+            <div className="flex flex-col items-center gap-6">
+              <h1 className="text-balance text-center font-medium font-sans text-[40px] text-white leading-[110%] tracking-[-0.03em] md:text-[56px] xl:text-[64px]">
+                The AI-native growth platform for mobile apps
+              </h1>
+              <p className="max-w-[628px] text-center font-sans text-zinc-400 text-base/6.5 tracking-[-0.03em] md:text-xl/8">
+                Build paywalls, manage customers, analyze data, A/B test and much more – all in a
+                single integrated platform.
+              </p>
+            </div>
+            <div className="flex flex-col items-center gap-3 sm:flex-row">
+              <Button asChild size="lg">
+                <a href="/auth/sign-up">
+                  {signUpCtaLabel("Get Started")}
+                  <ChevronRightIcon data-icon="inline-end" />
+                </a>
+              </Button>
+              <Button asChild size="lg" variant="ghost">
+                <a href="/docs">
+                  Documentation
+                  <ChevronRightIcon data-icon="inline-end" />
+                </a>
+              </Button>
+            </div>
+          </div>
+        </div>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/navbar.tsx b/apps/www/src/features/www/landing/sections/navbar.tsx
new file mode 100644
index 000000000..3e52edfaa
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/navbar.tsx
@@ -0,0 +1,213 @@
+"use client";
+
+import {
+  Button,
+  Logo,
+  NavigationMenu,
+  NavigationMenuContent,
+  NavigationMenuItem,
+  NavigationMenuLink,
+  NavigationMenuList,
+  NavigationMenuTrigger,
+  Sheet,
+  SheetClose,
+  SheetContent,
+  SheetTitle,
+  SheetTrigger,
+  navigationMenuTriggerStyle,
+} from "@voidhash/ui";
+import {
+  BookOpenIcon,
+  BracesIcon,
+  ChartColumnIcon,
+  FlaskConicalIcon,
+  LayoutTemplateIcon,
+  type LucideIcon,
+  MenuIcon,
+  TagIcon,
+  UsersIcon,
+} from "lucide-react";
+
+import { signUpCtaLabel } from "@/lib/waitlist";
+
+type NavLink = {
+  label: string;
+  href: string;
+  description?: string;
+  icon: LucideIcon;
+};
+
+/**
+ * Product links point at landing page sections, so they stay root-relative: from `/pricing` a
+ * bare `#paywalls` fragment resolves against a page that has no such section and goes nowhere.
+ */
+const PRODUCT_LINKS: NavLink[] = [
+  {
+    label: "Paywalls",
+    href: "/#paywalls",
+    description: "No-code designer with AI, shipped without a release.",
+    icon: LayoutTemplateIcon,
+  },
+  {
+    label: "Analytics",
+    href: "/#analytics",
+    description: "Revenue, trials and retention from live subscription state.",
+    icon: ChartColumnIcon,
+  },
+  {
+    label: "Experimentation",
+    href: "/#experimentation",
+    description: "A/B tests and feature flags on one targeting engine.",
+    icon: FlaskConicalIcon,
+  },
+  {
+    label: "CRM",
+    href: "/#crm",
+    description: "Every purchase, trial and session resolved to one person.",
+    icon: UsersIcon,
+  },
+];
+
+const DEVELOPER_LINKS: NavLink[] = [
+  { label: "Documentation", href: "/docs", icon: BookOpenIcon },
+  { label: "API reference", href: "/docs/api", icon: BracesIcon },
+];
+
+const PRICING_LINK: NavLink = { label: "Pricing", href: "/pricing", icon: TagIcon };
+
+/** Shared look for the top-level triggers and links. */
+const NAV_ITEM_CLASS =
+  "h-auto rounded-lg px-3 py-2 font-normal font-sans text-zinc-400 text-sm/4.5 tracking-[-0.03em] transition-colors hover:bg-white/5 hover:text-white focus:bg-white/5 focus:text-white data-pressed:bg-white/10 data-popup-open:bg-white/5 data-popup-open:text-white data-popup-open:hover:bg-white/5";
+
+/** Shared look for the links inside a menu panel. */
+const PANEL_ITEM_CLASS =
+  "items-start gap-3 p-3 transition-colors hover:bg-zinc-900 focus:bg-zinc-900";
+
+function ProductItem({ link }: { link: NavLink }) {
+  const Icon = link.icon;
+  return (
+    <li>
+      <NavigationMenuLink className={PANEL_ITEM_CLASS} render={<a href={link.href} />}>
+        <Icon className="mt-0.5 size-4 shrink-0 text-zinc-500" />
+        <div className="flex flex-col gap-1">
+          <div className="font-medium font-sans text-white text-sm/4.5 tracking-[-0.02em]">
+            {link.label}
+          </div>
+          <div className="font-sans text-zinc-400 text-xs/4 tracking-[-0.01em]">
+            {link.description}
+          </div>
+        </div>
+      </NavigationMenuLink>
+    </li>
+  );
+}
+
+function DeveloperItem({ link }: { link: NavLink }) {
+  const Icon = link.icon;
+  return (
+    <li>
+      <NavigationMenuLink
+        className={`${PANEL_ITEM_CLASS} items-center gap-2.5 p-2.5`}
+        render={<a href={link.href} />}
+      >
+        <Icon className="size-4 shrink-0 text-zinc-500" />
+        <div className="font-sans text-zinc-200 text-sm/4.5 tracking-[-0.02em]">{link.label}</div>
+      </NavigationMenuLink>
+    </li>
+  );
+}
+
+/** Renders the landing page navigation bar. */
+export function LandingNavbar() {
+  return (
+    <div className="sticky top-0 z-50 flex min-w-0 flex-col items-center self-stretch border-zinc-800 border-b bg-zinc-950/85 backdrop-blur-md">
+      <div className="flex w-full max-w-[1656px] items-center justify-between gap-4 border-zinc-800 p-4 md:p-6 xl:border-x">
+        <a aria-label="Voidhash home" href="/">
+          <Logo className="h-[17px] w-auto text-white" />
+        </a>
+        <NavigationMenu className="hidden lg:flex" popupClassName="dark">
+          <NavigationMenuList className="-mx-3 gap-1">
+            <NavigationMenuItem>
+              <NavigationMenuTrigger className={NAV_ITEM_CLASS}>Product</NavigationMenuTrigger>
+              <NavigationMenuContent>
+                <ul className="grid w-[540px] grid-cols-2 gap-1">
+                  {PRODUCT_LINKS.map((link) => (
+                    <ProductItem key={link.href} link={link} />
+                  ))}
+                </ul>
+              </NavigationMenuContent>
+            </NavigationMenuItem>
+            <NavigationMenuItem>
+              <NavigationMenuTrigger className={NAV_ITEM_CLASS}>Developers</NavigationMenuTrigger>
+              <NavigationMenuContent>
+                <ul className="grid w-[240px] gap-1">
+                  {DEVELOPER_LINKS.map((link) => (
+                    <DeveloperItem key={link.href} link={link} />
+                  ))}
+                </ul>
+              </NavigationMenuContent>
+            </NavigationMenuItem>
+            <NavigationMenuItem>
+              <NavigationMenuLink
+                className={`${navigationMenuTriggerStyle()} ${NAV_ITEM_CLASS}`}
+                render={<a href={PRICING_LINK.href} />}
+              >
+                {PRICING_LINK.label}
+              </NavigationMenuLink>
+            </NavigationMenuItem>
+          </NavigationMenuList>
+        </NavigationMenu>
+        <div className="hidden items-center gap-4 lg:flex">
+          <Button asChild variant="outline">
+            <a href="/auth/login">Log in</a>
+          </Button>
+          <Button asChild>
+            <a href="/auth/sign-up">{signUpCtaLabel("Sign up")}</a>
+          </Button>
+        </div>
+        <Sheet>
+          <SheetTrigger asChild className="lg:hidden">
+            <Button aria-label="Open menu" size="icon" variant="ghost">
+              <MenuIcon />
+            </Button>
+          </SheetTrigger>
+          <SheetContent className="dark flex flex-col border-zinc-800 bg-zinc-950" side="right">
+            <SheetTitle className="sr-only">Menu</SheetTitle>
+            <nav className="flex flex-1 flex-col gap-8 overflow-y-auto px-6 pt-12">
+              {[
+                { title: "Product", links: PRODUCT_LINKS },
+                { title: "Developers", links: DEVELOPER_LINKS },
+                { title: "Company", links: [PRICING_LINK] },
+              ].map((group) => (
+                <div className="flex flex-col gap-4" key={group.title}>
+                  <div className="font-sans text-zinc-500 text-xs/4 tracking-[-0.01em]">
+                    {group.title}
+                  </div>
+                  {group.links.map((link) => (
+                    <SheetClose asChild key={link.href}>
+                      <a
+                        className="flex items-center gap-3 font-sans text-zinc-200 text-base tracking-[-0.02em] transition-colors hover:text-white"
+                        href={link.href}
+                      >
+                        <link.icon className="size-4 shrink-0 text-zinc-500" />
+                        {link.label}
+                      </a>
+                    </SheetClose>
+                  ))}
+                </div>
+              ))}
+            </nav>
+            <div className="mt-auto flex flex-col gap-3 px-6 pb-8">
+              <Button asChild size="lg" variant="outline">
+                <a href="/auth/login">Log in</a>
+              </Button>
+              <Button asChild size="lg">
+                <a href="/auth/sign-up">{signUpCtaLabel("Sign up")}</a>
+              </Button>
+            </div>
+          </SheetContent>
+        </Sheet>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/paywalls.tsx b/apps/www/src/features/www/landing/sections/paywalls.tsx
new file mode 100644
index 000000000..849711791
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/paywalls.tsx
@@ -0,0 +1,577 @@
+import { PaywallBuild } from "../paywall-build/paywall-build";
+import { LandingSection, ScaledMock, SectionHeader } from "../shared";
+
+/** Renders the paywalls product section. */
+export function LandingPaywalls() {
+  return (
+    <LandingSection id="paywalls">
+      <div className="flex flex-col items-start justify-center gap-12 px-6 pt-16 pb-10 md:gap-23 md:px-12 md:pt-24 md:pb-14 xl:px-32 xl:pt-32 xl:pb-16">
+        <SectionHeader
+          description="Maximize your revenue by quickly testing your paywall designs and pricing with familiar no-code paywall builder."
+          eyebrow="Paywalls"
+          title="Ship paywalls in minutes with our no-code designer and full AI integration."
+        />
+        <ScaledMock designWidth={1368}>
+          <div className="h-195.5 w-342 relative shrink-0">
+          <div className="flex absolute w-342 left-0 top-0 flex-col items-start rounded-lg overflow-clip [background-color:var(--color-zinc-950)] border border-solid [border-color:var(--zinc-800)]">
+            <div className="flex items-start gap-6.5 self-stretch p-3 border-b border-b-solid border-b-zinc-800/50">
+              <div className="flex w-3.25 items-start gap-2.5 shrink-0">
+                <div className="h-3.25 rounded-full self-stretch w-3.25 shrink-0 bg-zinc-700" />
+                <div className="h-3.25 rounded-full self-stretch w-3.25 shrink-0 bg-zinc-700" />
+                <div className="h-3.25 rounded-full self-stretch w-3.25 shrink-0 bg-zinc-700" />
+              </div>
+            </div>
+            <div className="h-186 w-342 relative shrink-0 border border-solid border-zinc-800/50">
+              <div className="w-342 h-186 top-[50%] left-[50%] absolute bg-zinc-900" style={{ translate: '-50% -50%' }} />
+              <div className="items-center h-13.5 flex top-0 justify-between absolute px-3 bg-zinc-900 border-b border-b-solid border-b-zinc-800 -inset-x-px">
+                <div className="items-center flex justify-center absolute gap-2 inset-0">
+                  <div className="text-sm leading-[142.857%] font-sans text-zinc-50">
+                    Example
+                  </div>
+                </div>
+                <div className="items-center flex gap-2 relative">
+                  <div className="items-center flex py-3 px-2 rounded-lg">
+                    <svg aria-hidden="true" viewBox="0 0 120 61" xmlns="http://www.w3.org/2000/svg" fontSize="16px" width="120" height="61" style={{ height: '16px', width: '31.4688px', overflow: 'clip', flexShrink: '0' }}>
+                      <path d="M60 30.5L90 0L120 0L120 30.5L90 30.5V61H60L60 30.5ZM0 30.5L30 30.5L30 0L60 0V30.5L30 61H0V30.5Z" fontSize="16px" fill="#FFFFFF" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                    </svg>
+                    <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '16px', width: '16px', marginLeft: '8px', overflow: 'clip', flexShrink: '0' }}>
+                      <path d="m6 9 6 6 6-6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                    </svg>
+                  </div>
+                  <div className="items-center flex w-fit rounded-lg relative [box-shadow:#0000000D_0px_1px_2px] bg-[#27272A4D] border border-solid border-zinc-800">
+                    <div className="h-full w-[91.5px] top-0 left-0 absolute rounded-[9px] bg-zinc-800" />
+                    <div className="items-center h-7 flex shrink-0 justify-center min-w-0 px-3 rounded-[9px] gap-1.5 relative">
+                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '16px', flexShrink: '0', width: '16px', overflow: 'clip' }}>
+                        <path d="m14.622 17.897-10.68-2.913" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="M18.376 2.622a1 1 0 1 1 3.002 3.002L17.36 9.643a.5.5 0 0 0 0 .707l.944.944a2.41 2.41 0 0 1 0 3.408l-.944.944a.5.5 0 0 1-.707 0L8.354 7.348a.5.5 0 0 1 0-.707l.944-.944a2.41 2.41 0 0 1 3.408 0l.944.944a.5.5 0 0 0 .707 0z" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="M9 8c-1.804 2.71-3.97 3.46-6.583 3.948a.507.507 0 0 0-.302.819l7.32 8.883a1 1 0 0 0 1.185.204C12.735 20.405 16 16.792 16 15" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                      </svg>
+                      <div className="inline-block text-sm leading-[142.857%] text-center w-max shrink-0 font-sans font-medium text-zinc-50">
+                        Design
+                      </div>
+                    </div>
+                    <div className="items-center h-7 flex shrink-0 justify-center min-w-0 px-3 rounded-[9px] gap-1.5 relative">
+                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '16px', flexShrink: '0', width: '16px', overflow: 'clip' }}>
+                        <path d="M2.062 12.348a1 1 0 0 1 0-.696 10.75 10.75 0 0 1 19.876 0 1 1 0 0 1 0 .696 10.75 10.75 0 0 1-19.876 0" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <circle cx="12" cy="12" r="3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                      </svg>
+                      <div className="inline-block text-sm leading-[142.857%] text-center w-max shrink-0 font-sans font-medium text-zinc-400">
+                        Preview
+                      </div>
+                    </div>
+                    <div className="items-center h-7 flex shrink-0 justify-center min-w-0 px-3 rounded-[9px] gap-1.5 relative">
+                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '16px', flexShrink: '0', width: '16px', overflow: 'clip' }}>
+                        <path d="m18 16 4-4-4-4" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="m6 8-4 4 4 4" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="m14.5 4-5 16" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                      </svg>
+                      <div className="inline-block text-sm leading-[142.857%] text-center w-max shrink-0 font-sans font-medium text-zinc-400">
+                        Code
+                      </div>
+                    </div>
+                    <div className="items-center h-7 flex shrink-0 justify-center min-w-0 px-3 rounded-[9px] gap-1.5 relative">
+                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '16px', flexShrink: '0', width: '16px', overflow: 'clip' }}>
+                        <path d="m5 8 6 6" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="m4 14 6-6 2-3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="M2 5h12" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="M7 2h1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="m22 22-5-10-5 10" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                        <path d="M14 18h6" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                      </svg>
+                      <div className="inline-block text-sm leading-[142.857%] text-center w-max shrink-0 font-sans font-medium text-zinc-400">
+                        Translate
+                      </div>
+                    </div>
+                  </div>
+                </div>
+                <div className="items-center flex gap-2 relative">
+                  <div className="items-center h-7 flex shrink-0 justify-center px-2.5 rounded-md gap-1 border border-solid border-[#00000000]">
+                    <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="12.8px" fontWeight="500" style={{ height: '16px', flexShrink: '0', width: '16px', marginRight: '4px', opacity: '0.7', overflow: 'clip' }}>
+                      <path d="m16 18 6-6-6-6" fontSize="12.8px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                      <path d="m8 6-6 6 6 6" fontSize="12.8px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                    </svg>
+                    <div className="inline-block text-[12.8px] leading-[150%] text-center w-max shrink-0 font-sans font-medium text-zinc-50">
+                      Dev
+                    </div>
+                  </div>
+                  <div className="items-center h-7 flex shrink-0 justify-center px-2.5 rounded-md gap-1 bg-zinc-800 border border-solid border-[#00000000]">
+                    <div className="flex text-[12.8px] leading-[150%] text-center w-max shrink-0 font-sans font-medium text-zinc-50">
+                      Share
+                    </div>
+                  </div>
+                  <div className="items-center h-7 flex shrink-0 justify-center px-2.5 rounded-md gap-1 bg-blue-ribbon-600 border border-solid border-[#00000000]">
+                    <div className="flex text-[12.8px] leading-[150%] text-center w-max shrink-0 font-sans font-medium text-white">
+                      Publish
+                    </div>
+                  </div>
+                </div>
+              </div>
+              <div className="-bottom-0.5 flex flex-col w-69 top-13.5 -right-px absolute bg-zinc-900 border-l border-l-solid border-l-zinc-800">
+                <div className="flex basis-[0%] flex-col grow overflow-clip relative">
+                  <div className="absolute inset-0">
+                    <div className="h-full">
+                      <div className="overflow-clip size-full">
+                        <div className="table min-w-full">
+                          <div className="">
+                            <div className="border-b border-b-solid border-b-zinc-800">
+                              <div className="items-center h-7 flex justify-between px-4 my-2">
+                                <div className="text-sm leading-[142.857%] font-sans font-medium text-zinc-50">
+                                  Variables
+                                </div>
+                                <div className="items-center flex justify-end gap-2">
+                                  <div className="items-center flex shrink-0 justify-center rounded-md border border-solid border-[#00000000] size-7">
+                                    <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', flexShrink: '0', width: '14px', opacity: '0.7', overflow: 'clip' }}>
+                                      <path d="m6 9 6 6 6-6" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                    </svg>
+                                  </div>
+                                </div>
+                              </div>
+                            </div>
+                            <div className="border-b border-b-solid border-b-zinc-800">
+                              <div className="items-center h-7 flex justify-between px-4 my-2">
+                                <div className="text-sm leading-[142.857%] font-sans font-medium text-zinc-50">
+                                  States
+                                </div>
+                                <div className="items-center flex justify-end gap-2">
+                                  <div className="items-center flex shrink-0 justify-center rounded-md bg-zinc-800 border border-solid border-[#00000000] size-7">
+                                    <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', flexShrink: '0', width: '14px', opacity: '0.7', overflow: 'clip' }}>
+                                      <path d="M9.671 4.136a2.34 2.34 0 0 1 4.659 0 2.34 2.34 0 0 0 3.319 1.915 2.34 2.34 0 0 1 2.33 4.033 2.34 2.34 0 0 0 0 3.831 2.34 2.34 0 0 1-2.33 4.033 2.34 2.34 0 0 0-3.319 1.915 2.34 2.34 0 0 1-4.659 0 2.34 2.34 0 0 0-3.32-1.915 2.34 2.34 0 0 1-2.33-4.033 2.34 2.34 0 0 0 0-3.831A2.34 2.34 0 0 1 6.35 6.051a2.34 2.34 0 0 0 3.319-1.915" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      <circle cx="12" cy="12" r="3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                    </svg>
+                                  </div>
+                                </div>
+                              </div>
+                            </div>
+                            <div className="border-b border-b-solid border-b-zinc-800">
+                              <div className="items-center h-7 flex justify-between px-4 my-2">
+                                <div className="text-sm leading-[142.857%] font-sans font-medium text-zinc-50">
+                                  Layout
+                                </div>
+                              </div>
+                              <div className="pb-4 px-4">
+                                <div className="mb-4">
+                                  <div className="pt-2">
+                                    <div className="flex gap-2">
+                                      <div className="flex flex-col gap-2">
+                                        <div className="">
+                                          <div className="items-center flex w-fit rounded-lg relative [box-shadow:#0000000D_0px_1px_2px] bg-[#27272A4D] border border-solid border-zinc-800">
+                                            <div className="h-full w-9.5 top-0 left-0 absolute rounded-[9px] bg-zinc-800" />
+                                            <div className="items-center h-7 flex basis-[0%] grow justify-center min-w-0 px-3 rounded-[9px] gap-2 relative">
+                                              <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', flexShrink: '0', width: '14px', overflow: 'clip' }}>
+                                                <path d="M12 5v14" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                <path d="m19 12-7 7-7-7" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                              </svg>
+                                            </div>
+                                            <div className="items-center h-7 flex basis-[0%] grow justify-center min-w-0 px-3 rounded-[9px] gap-2 relative">
+                                              <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', flexShrink: '0', width: '14px', overflow: 'clip' }}>
+                                                <path d="M5 12h14" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                <path d="m12 5 7 7-7 7" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                              </svg>
+                                            </div>
+                                          </div>
+                                        </div>
+                                        <div className="">
+                                          <div className="items-center h-7 flex w-full rounded-sm bg-[#27272A99]">
+                                            <div className="h-7 flex basis-[0%] grow w-full min-w-0 items-center pr-1 pl-1.5 overflow-clip [box-shadow:#FAFAFA_0px_0px_0px]">
+                                              <div className="h-fit w-full overflow-clip">
+                                                <div className="text-sm leading-[142.857%] font-sans text-zinc-50 line-clamp-1">
+                                                  0
+                                                </div>
+                                              </div>
+                                            </div>
+                                            <div className="items-center flex justify-center order-first pr-0.5 pl-2 gap-2 py-1">
+                                              <div className="items-center flex justify-center shrink-0 size-3.5">
+                                                <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                                  <rect width="13" height="7" x="8" y="3" rx="1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '7px', boxSizing: 'border-box', width: '13px', transformOrigin: '0px 0px' }} />
+                                                  <path d="m2 9 3 3-3 3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                  <rect width="13" height="7" x="8" y="14" rx="1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '7px', boxSizing: 'border-box', width: '13px', transformOrigin: '0px 0px' }} />
+                                                </svg>
+                                              </div>
+                                            </div>
+                                          </div>
+                                        </div>
+                                      </div>
+                                      <div className="">
+                                        <div className="flex rounded-sm bg-[#27272A99]">
+                                          <div className="flex basis-[0%] flex-col grow">
+                                            <div className="items-center flex basis-[0%] grow w-21 justify-center py-1 bg-[#27272ACC]">
+                                              <div className="flex basis-[0%] flex-col grow justify-around">
+                                                <div className="h-0.5 w-2 rounded-md shrink-0 bg-white" />
+                                                <div className="h-0.5 w-2 rounded-md shrink-0 bg-white" />
+                                                <div className="h-0.5 w-2 rounded-md shrink-0 bg-white" />
+                                              </div>
+                                            </div>
+                                            <div className="items-center flex basis-[0%] grow w-21 justify-center py-1 relative">
+                                              <div className="top-[50%] left-[50%] absolute" style={{ translate: '-50% -50%' }}>
+                                                <div className="-bottom-0.5 top-0 -right-0.5 left-0 rounded-full absolute bg-zinc-400 size-0.5" style={{ translate: '-50% -50%' }} />
+                                              </div>
+                                            </div>
+                                            <div className="items-center flex basis-[0%] grow w-21 justify-center py-1 relative">
+                                              <div className="top-[50%] left-[50%] absolute" style={{ translate: '-50% -50%' }}>
+                                                <div className="-bottom-0.5 top-0 -right-0.5 left-0 rounded-full absolute bg-zinc-400 size-0.5" style={{ translate: '-50% -50%' }} />
+                                              </div>
+                                            </div>
+                                          </div>
+                                        </div>
+                                        <div className="items-center inline-flex justify-center rounded-md bg-zinc-800 border border-solid border-[#00000000] size-7">
+                                          <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', flexShrink: '0', width: '14px', opacity: '0.7', overflow: 'clip' }}>
+                                            <path d="M14 17H5" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                            <path d="M19 7h-9" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                            <circle cx="17" cy="17" r="3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                            <circle cx="7" cy="7" r="3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                          </svg>
+                                        </div>
+                                      </div>
+                                    </div>
+                                  </div>
+                                </div>
+                                <div className="mb-4">
+                                  <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-400">
+                                    Dimensions
+                                  </div>
+                                  <div className="pt-2">
+                                    <div className="flex gap-2">
+                                      <div className="">
+                                        <div className="items-center h-7 flex w-full opacity-[0.5] rounded-sm bg-[#27272ACC]">
+                                          <div className="h-7 flex basis-[0%] grow w-full min-w-0 opacity-[0.5] items-center pr-1 pl-1.5 overflow-clip [box-shadow:#FAFAFA_0px_0px_0px]">
+                                            <div className="h-fit w-full overflow-clip">
+                                              <div className="text-sm leading-[142.857%] font-sans text-zinc-50 line-clamp-1">
+                                                375
+                                              </div>
+                                            </div>
+                                          </div>
+                                          <div className="items-center flex justify-center order-first pr-0.5 pl-2 gap-2 py-1">
+                                            <div className="items-center flex justify-center opacity-[0.5] shrink-0 size-3.5">
+                                              <div className="text-xs leading-[133.333%] font-sans font-bold text-zinc-400">
+                                                W
+                                              </div>
+                                            </div>
+                                          </div>
+                                        </div>
+                                      </div>
+                                      <div className="">
+                                        <div className="items-center h-7 flex w-full opacity-[0.5] rounded-sm bg-[#27272ACC]">
+                                          <div className="h-7 flex basis-[0%] grow w-full min-w-0 opacity-[0.5] items-center pr-1 pl-1.5 overflow-clip [box-shadow:#FAFAFA_0px_0px_0px]">
+                                            <div className="h-fit w-full overflow-clip">
+                                              <div className="text-sm leading-[142.857%] font-sans text-zinc-50 line-clamp-1">
+                                                812
+                                              </div>
+                                            </div>
+                                          </div>
+                                          <div className="items-center flex justify-center order-first pr-0.5 pl-2 gap-2 py-1">
+                                            <div className="items-center flex justify-center opacity-[0.5] shrink-0 size-3.5">
+                                              <div className="text-xs leading-[133.333%] font-sans font-bold text-zinc-400">
+                                                H
+                                              </div>
+                                            </div>
+                                          </div>
+                                        </div>
+                                      </div>
+                                    </div>
+                                  </div>
+                                </div>
+                                <div className="">
+                                  <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-400">
+                                    Padding
+                                  </div>
+                                  <div className="pt-2">
+                                    <div className="flex gap-2">
+                                      <div className="flex flex-col gap-2">
+                                        <div className="flex gap-2">
+                                          <div className="">
+                                            <div className="items-center h-7 flex w-full rounded-sm bg-[#27272A99]">
+                                              <div className="h-7 flex basis-[0%] grow w-full min-w-0 items-center pr-1 pl-1.5 overflow-clip [box-shadow:#FAFAFA_0px_0px_0px]">
+                                                <div className="h-fit w-full overflow-clip">
+                                                  <div className="text-sm leading-[142.857%] font-sans text-zinc-50 line-clamp-1">
+                                                    0
+                                                  </div>
+                                                </div>
+                                              </div>
+                                              <div className="items-center flex justify-center order-first pr-0.5 pl-2 gap-2 py-1">
+                                                <div className="items-center flex justify-center shrink-0 size-3.5">
+                                                  <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                                    <path d="M15 10V9" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M15 15v-1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M15 21v-2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M15 5V3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M9 10V9" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M9 15v-1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M9 21v-2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M9 5V3" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <rect x="3" y="3" width="18" height="18" rx="2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '18px', boxSizing: 'border-box', width: '18px', transformOrigin: '0px 0px' }} />
+                                                  </svg>
+                                                </div>
+                                              </div>
+                                            </div>
+                                          </div>
+                                          <div className="">
+                                            <div className="items-center h-7 flex w-full rounded-sm bg-[#27272A99]">
+                                              <div className="h-7 flex basis-[0%] grow w-full min-w-0 items-center pr-1 pl-1.5 overflow-clip [box-shadow:#FAFAFA_0px_0px_0px]">
+                                                <div className="h-fit w-full overflow-clip">
+                                                  <div className="text-sm leading-[142.857%] font-sans text-zinc-50 line-clamp-1">
+                                                    0
+                                                  </div>
+                                                </div>
+                                              </div>
+                                              <div className="items-center flex justify-center order-first pr-0.5 pl-2 gap-2 py-1">
+                                                <div className="items-center flex justify-center shrink-0 size-3.5">
+                                                  <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                                    <path d="M14 15h1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M14 9h1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M19 15h2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M19 9h2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M3 15h2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M3 9h2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M9 15h1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <path d="M9 9h1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                                    <rect x="3" y="3" width="18" height="18" rx="2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '18px', boxSizing: 'border-box', width: '18px', transformOrigin: '0px 0px' }} />
+                                                  </svg>
+                                                </div>
+                                              </div>
+                                            </div>
+                                          </div>
+                                        </div>
+                                      </div>
+                                      <div className="items-center flex shrink-0 justify-center rounded-md bg-zinc-800 border border-solid border-[#00000000] size-7">
+                                        <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', flexShrink: '0', width: '14px', opacity: '0.7', overflow: 'clip' }}>
+                                          <path d="M3 7V5a2 2 0 0 1 2-2h2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                          <path d="M17 3h2a2 2 0 0 1 2 2v2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                          <path d="M21 17v2a2 2 0 0 1-2 2h-2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                          <path d="M7 21H5a2 2 0 0 1-2-2v-2" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                          <rect width="10" height="8" x="7" y="8" rx="1" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '8px', boxSizing: 'border-box', width: '10px', transformOrigin: '0px 0px' }} />
+                                        </svg>
+                                      </div>
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                            </div>
+                            <div className="border-b border-b-solid border-b-zinc-800">
+                              <div className="items-center h-7 flex justify-between px-4 my-2">
+                                <div className="text-sm leading-[142.857%] font-sans font-medium text-zinc-50">
+                                  Fill
+                                </div>
+                              </div>
+                              <div className="pb-4 px-4">
+                                <div className="">
+                                  <div className="items-center flex gap-2">
+                                    <div className="items-center h-7 flex basis-[0%] grow px-1.5 rounded-sm gap-2 bg-[#27272A99]">
+                                      <div className="shrink-0 rounded-[3px] overflow-clip relative size-5">
+                                        <div className="absolute inset-0" style={{ backgroundImage: 'linear-gradient(in oklab 45deg, oklab(60% 0 0) 25%, oklab(0% 0 0 / 0%) 25%), linear-gradient(in oklab 315deg, oklab(60% 0 0) 25%, oklab(0% 0 0 / 0%) 25%), linear-gradient(in oklab 45deg, oklab(0% 0 0 / 0%) 75%, oklab(60% 0 0) 75%), linear-gradient(in oklab 315deg, oklab(0% 0 0 / 0%) 75%, oklab(60% 0 0) 75%)' }} />
+                                        <div className="absolute bg-white inset-0" />
+                                        <div className="rounded-[3px] absolute [box-shadow:#FFFFFF33_0px_0px_0px_1px_inset] inset-0" />
+                                      </div>
+                                      <div className="text-xs leading-[133.333%] text-center font-sans flex [-webkit-box-orient:vertical] [-webkit-line-clamp:1] overflow-hidden justify-center flex-wrap text-zinc-50">
+                                        #FFFFFF
+                                      </div>
+                                    </div>
+                                    <div className="items-center flex shrink-0 justify-center rounded-md bg-zinc-800 border border-solid border-[#00000000] size-7">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="14px" fontWeight="500" style={{ height: '14px', flexShrink: '0', width: '14px', opacity: '0.7', overflow: 'clip' }}>
+                                        <path d="M5 12h14" fontSize="14px" fontWeight="500" fill="none" stroke="var(--zinc-50)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                            </div>
+                          </div>
+                        </div>
+                      </div>
+                    </div>
+                  </div>
+                </div>
+                <div className="w-2 -left-1 absolute inset-y-0">
+                  <div className="h-full w-px mx-auto" />
+                </div>
+              </div>
+              <div className="-bottom-0.75 flex flex-col w-60.75 top-13.5 left-0 absolute bg-zinc-900 border-r border-r-solid border-r-zinc-800">
+                <div className="flex basis-[0%] flex-col grow overflow-clip relative">
+                  <div className="absolute inset-0">
+                    <div className="h-full">
+                      <div className="overflow-clip size-full">
+                        <div className="table min-w-full">
+                          <div className="p-2">
+                            <div className="">
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 gap-1 rounded-t-sm">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="items-center flex justify-center shrink-0 size-3">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '12px', width: '12px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="m6 9 6 6 6-6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <rect width="14" height="20" x="5" y="2" rx="2" ry="2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '20px', boxSizing: 'border-box', width: '14px', transformOrigin: '0px 0px' }} />
+                                        <path d="M12 18h.01" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      Screen
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 pl-4 gap-1 rounded-t-sm">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="items-center flex justify-center shrink-0 size-3">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '12px', width: '12px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="m6 9 6 6 6-6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <rect width="18" height="18" x="3" y="3" rx="2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '18px', boxSizing: 'border-box', width: '18px', transformOrigin: '0px 0px' }} />
+                                        <path d="M3 12h18" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      Column
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 pl-8 gap-1 rounded-t-sm">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="shrink-0 size-3" />
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="M12 4v16" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M4 7V5a1 1 0 0 1 1-1h14a1 1 0 0 1 1 1v2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M9 20h6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      Text
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 pl-4 gap-1 rounded-t-sm">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="items-center flex justify-center shrink-0 size-3">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '12px', width: '12px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="m6 9 6 6 6-6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="M3 2h18" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <rect width="18" height="12" x="3" y="6" rx="2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '12px', boxSizing: 'border-box', width: '18px', transformOrigin: '0px 0px' }} />
+                                        <path d="M3 22h18" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      ScrollView
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 pl-8 gap-1 rounded-t-sm">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="shrink-0 size-3" />
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="M12 4v16" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M4 7V5a1 1 0 0 1 1-1h14a1 1 0 0 1 1 1v2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M9 20h6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      Text
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 pl-8 gap-1 rounded-t-sm">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="shrink-0 size-3" />
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="M12 4v16" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M4 7V5a1 1 0 0 1 1-1h14a1 1 0 0 1 1 1v2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M9 20h6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      Text
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 pl-8 gap-1 rounded-t-sm">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="shrink-0 size-3" />
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="M10 22V7a1 1 0 0 0-1-1H4a2 2 0 0 0-2 2v12a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2v-5a1 1 0 0 0-1-1H2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <rect x="14" y="2" width="8" height="8" rx="1" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ height: '8px', boxSizing: 'border-box', width: '8px', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      Sample Badge
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                              <div className="">
+                                <div className="items-center h-7 flex pr-1 pl-4 rounded-sm gap-1">
+                                  <div className="items-center flex shrink-0 p-0.5 rounded-sm">
+                                    <div className="shrink-0 size-3" />
+                                  </div>
+                                  <div className="items-center flex basis-[0%] grow overflow-clip gap-1.5">
+                                    <div className="items-center flex shrink-0 justify-center size-3.5">
+                                      <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" aria-hidden="true" fontSize="16px" style={{ height: '14px', width: '14px', overflow: 'clip', flexShrink: '0' }}>
+                                        <path d="M12 4v16" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M4 7V5a1 1 0 0 1 1-1h14a1 1 0 0 1 1 1v2" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                        <path d="M9 20h6" fontSize="16px" fill="none" stroke="var(--zinc-400)" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" style={{ boxSizing: 'border-box', transformOrigin: '0px 0px' }} />
+                                      </svg>
+                                    </div>
+                                    <div className="text-xs leading-[133.333%] font-sans font-medium text-zinc-50 line-clamp-1">
+                                      Text
+                                    </div>
+                                  </div>
+                                </div>
+                              </div>
+                            </div>
+                          </div>
+                        </div>
+                      </div>
+                    </div>
+                  </div>
+                </div>
+                <div className="w-2 -right-1 absolute inset-y-0">
+                  <div className="h-full w-px mx-auto" />
+                </div>
+              </div>
+              <div className="w-342 h-186 top-0 left-0 absolute" style={{ backgroundImage: 'radial-gradient(ellipse 50.4% 92.66499999999999% at 50% -5.790000000000006% in oklab, oklab(18.2% 0 0 / 0%) 0.14%, oklab(14.1% 0.001 -0.004) 100%)' }} />
+            </div>
+          </div>
+          <PaywallBuild />
+          </div>
+        </ScaledMock>
+      </div>
+      <div className="h-20 border-zinc-800 border-t md:h-35.25" />
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/problem.tsx b/apps/www/src/features/www/landing/sections/problem.tsx
new file mode 100644
index 000000000..b8dc0ec79
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/problem.tsx
@@ -0,0 +1,19 @@
+import { ScrollBrightenText } from "../motion";
+import { LandingSection } from "../shared";
+
+const PROBLEM_COPY =
+  "Building apps is easy now. Growing them has never been harder. Voidhash brings all the tools you need to build, test, iterate and grow quickly.";
+
+/** Renders the landing page positioning statement. */
+export function LandingProblem() {
+  return (
+    <LandingSection>
+      <div className="flex items-center px-6 py-24 md:px-12 md:py-32 xl:px-32 xl:py-48">
+        <ScrollBrightenText
+          className="max-w-[899px] font-medium font-sans text-[28px] leading-[130%] tracking-[-0.03em] md:text-[34px] xl:text-[40px]"
+          text={PROBLEM_COPY}
+        />
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/landing/shared.tsx b/apps/www/src/features/www/landing/shared.tsx
new file mode 100644
index 000000000..bb08a883e
--- /dev/null
+++ b/apps/www/src/features/www/landing/shared.tsx
@@ -0,0 +1,111 @@
+"use client";
+
+import { cn } from "@voidhash/ui";
+import { type ReactNode, useEffect, useRef } from "react";
+
+/** Full-bleed landing section: bottom hairline plus a centered, side-bordered content column. */
+export function LandingSection({
+  id,
+  className,
+  innerClassName,
+  children,
+}: {
+  id?: string;
+  className?: string;
+  innerClassName?: string;
+  children: ReactNode;
+}) {
+  return (
+    <section
+      className={cn(
+        "flex min-w-0 scroll-mt-24 flex-col items-center self-stretch border-zinc-800 border-b",
+        className,
+      )}
+      id={id}
+    >
+      <div className={cn("w-full max-w-[1656px] border-zinc-800 xl:border-x", innerClassName)}>
+        {children}
+      </div>
+    </section>
+  );
+}
+
+/**
+ * Eyebrow + headline + optional supporting copy header shared by the product sections.
+ *
+ * The eyebrow and headline are top-aligned so their gap stays identical in every section — the
+ * description hangs off the same top edge instead of bottom-aligning to the headline, which used
+ * to push the headline down by however many lines the description happened to wrap to.
+ */
+export function SectionHeader({
+  eyebrow,
+  title,
+  description,
+}: {
+  eyebrow: string;
+  title: string;
+  description?: string;
+}) {
+  return (
+    <div className="flex flex-col items-start gap-4 self-stretch">
+      <div className="font-medium font-sans text-zinc-400 text-base leading-[120%] tracking-[-0.01em]">
+        {eyebrow}
+      </div>
+      <div className="flex flex-col gap-6 self-stretch lg:flex-row lg:items-start lg:justify-between lg:gap-12">
+        <h2 className="max-w-[627px] font-sans font-semibold text-[28px] text-white leading-[120%] tracking-[-0.03em] md:text-[36px]">
+          {title}
+        </h2>
+        {description ? (
+          <p className="max-w-[465px] font-sans text-[#FFFFFFB8] text-base/6.5 tracking-[-0.03em] md:text-xl/8">
+            {description}
+          </p>
+        ) : null}
+      </div>
+    </div>
+  );
+}
+
+/**
+ * Scales a fixed-width design fragment down to fit its container.
+ *
+ * The product mockups are pixel-faithful exports from the 1810px artboard, so instead of
+ * re-flowing their internals we shrink each one with `zoom` — unlike `transform: scale`
+ * it keeps the layout height in sync with the scaled content.
+ */
+export function ScaledMock({
+  designWidth,
+  className,
+  children,
+}: {
+  designWidth: number;
+  className?: string;
+  children: ReactNode;
+}) {
+  const frameRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    const frame = frameRef.current;
+    const viewport = frame?.parentElement;
+    if (!frame || !viewport) {
+      return;
+    }
+
+    const applyZoom = () => {
+      frame.style.zoom = `${Math.min(1, viewport.clientWidth / designWidth)}`;
+    };
+
+    applyZoom();
+
+    const observer = new ResizeObserver(applyZoom);
+    observer.observe(viewport);
+    return () => observer.disconnect();
+  }, [designWidth]);
+
+  return (
+    <div className={cn("w-full min-w-0", className)}>
+      <div ref={frameRef} style={{ width: designWidth }}>
+        {children}
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/navbar/navigation.tsx b/apps/www/src/features/www/navbar/navigation.tsx
index 113c91a51..109d598d3 100644
--- a/apps/www/src/features/www/navbar/navigation.tsx
+++ b/apps/www/src/features/www/navbar/navigation.tsx
@@ -28,7 +28,7 @@ export function Navigation() {
         )}
       >
         <div className="mx-auto flex w-full max-w-7xl items-center px-4 py-4">
-          <a href="https://voidhash.com">
+          <a href="/">
             <Logo className="h-6" />
           </a>
           <div className="flex-1" />
diff --git a/apps/www/src/features/www/pricing/plans.ts b/apps/www/src/features/www/pricing/plans.ts
new file mode 100644
index 000000000..971b056bf
--- /dev/null
+++ b/apps/www/src/features/www/pricing/plans.ts
@@ -0,0 +1,237 @@
+import { signUpCtaLabel } from "@/lib/waitlist";
+
+import {
+  EVENTS_METER,
+  formatRate,
+  formatUsd,
+  GROW_BASE_PRICE,
+  TRACKED_REVENUE_METER,
+} from "./pricing-model";
+
+export type PlanId = "free" | "grow" | "enterprise";
+
+export type Plan = {
+  readonly id: PlanId;
+  readonly name: string;
+  /** Headline figure, already formatted — `$0`, `$29.99`, `Custom`. */
+  readonly price: string;
+  /** Qualifier printed next to the figure, e.g. `/ month`. */
+  readonly priceSuffix?: string;
+  /** Small line above the figure that sets expectations before the number lands. */
+  readonly priceNote: string;
+  readonly description: string;
+  readonly cta: { readonly label: string; readonly href: string };
+  readonly highlights: readonly string[];
+};
+
+export const PLANS: readonly Plan[] = [
+  {
+    cta: { href: "/auth/sign-up", label: signUpCtaLabel("Start for free") },
+    description:
+      "Everything in the platform, metered small. Enough to ship a paywall and watch it convert.",
+    highlights: [
+      `${TRACKED_REVENUE_METER.formatVolume(TRACKED_REVENUE_METER.freeAllowance)} tracked revenue per month`,
+      `${EVENTS_METER.formatVolume(EVENTS_METER.freeAllowance)} events per month`,
+      "Unlimited paywalls, flags and experiments",
+      "Unlimited team members and API calls",
+      "Community support on Discord",
+    ],
+    id: "free",
+    name: "Free",
+    price: "$0",
+    priceNote: "No credit card, ever",
+    priceSuffix: "/ month",
+  },
+  {
+    cta: { href: "/auth/sign-up", label: signUpCtaLabel("Start with Grow") },
+    description:
+      "For apps with real revenue. A generous allowance, then you only pay for what you use.",
+    highlights: [
+      `${TRACKED_REVENUE_METER.formatVolume(TRACKED_REVENUE_METER.growAllowance)} tracked revenue included, then ${formatRate(TRACKED_REVENUE_METER.rate)} per ${TRACKED_REVENUE_METER.unitLabel}`,
+      `${EVENTS_METER.formatVolume(EVENTS_METER.growAllowance)} events included, then ${formatRate(EVENTS_METER.rate)} per ${EVENTS_METER.unitLabel}`,
+      "One flat rate per meter — no tiers to work out",
+      "5+ years of data retention",
+      "Email support with a 1 business day reply",
+    ],
+    id: "grow",
+    name: "Grow",
+    price: formatUsd(GROW_BASE_PRICE),
+    priceNote: "Starting from",
+    priceSuffix: "/ month",
+  },
+  {
+    cta: { href: "mailto:sales@voidhash.com?subject=Voidhash%20Enterprise", label: "Talk to us" },
+    description:
+      "For teams that need volume pricing, a contract, and someone to call when it matters.",
+    highlights: [
+      "Committed-use discounts on both meters",
+      "SSO/SAML, SCIM and audit logs",
+      "Supported self-hosting and BYOC deployments",
+      "99.9% uptime SLA and priority routing",
+      "Shared Slack channel and migration help",
+    ],
+    id: "enterprise",
+    name: "Enterprise",
+    price: "Custom",
+    priceNote: "Annual contract",
+  },
+];
+
+/** A matrix cell: `true`/`false` render as a mark, a string renders verbatim. */
+export type MatrixValue = boolean | string;
+
+export type MatrixRow = {
+  readonly label: string;
+  /** Optional clarifier shown under the label for rows whose wording is load-bearing. */
+  readonly detail?: string;
+  /**
+   * Keeps a row out of the rendered matrix without deleting it.
+   *
+   * Used for capabilities that are planned but not shipped — drop the flag to publish the row
+   * once the feature is real.
+   */
+  readonly hidden?: boolean;
+  readonly free: MatrixValue;
+  readonly grow: MatrixValue;
+  readonly enterprise: MatrixValue;
+};
+
+export type MatrixGroup = {
+  readonly title: string;
+  readonly rows: readonly MatrixRow[];
+};
+
+export const MATRIX: readonly MatrixGroup[] = [
+  {
+    rows: [
+      {
+        detail: "Revenue Voidhash validates and attributes for you.",
+        enterprise: "Custom",
+        free: "$1,000 / month",
+        grow: "$10,000 / month, then $8 per $1,000",
+        label: "Tracked revenue",
+      },
+      {
+        detail: "Screen views, impressions, purchases — anything the SDK sends.",
+        enterprise: "Custom",
+        free: "50K / month",
+        grow: "1M / month, then $6 per 100K",
+        label: "Events",
+      },
+      { enterprise: "Unlimited", free: "Unlimited", grow: "Unlimited", label: "Active persons" },
+      {
+        enterprise: "Unlimited",
+        free: "Unlimited",
+        grow: "Unlimited",
+        label: "Paywall conversions",
+      },
+      { enterprise: "Unlimited", free: "Unlimited", grow: "Unlimited", label: "API calls" },
+      {
+        detail: "Tool calls made by AI agents through the Voidhash MCP server.",
+        enterprise: "Custom",
+        free: "400 / month",
+        grow: "8M / month",
+        label: "MCP tool calls",
+      },
+      { enterprise: "Unlimited", free: "Unlimited", grow: "Unlimited", label: "Apps and projects" },
+      { enterprise: "Unlimited", free: "Unlimited", grow: "Unlimited", label: "Team members" },
+      { enterprise: "Custom", free: "3 years", grow: "5+ years", label: "Data retention" },
+    ],
+    title: "Usage",
+  },
+  {
+    rows: [
+      { enterprise: true, free: true, grow: true, label: "No-code paywall designer" },
+      { enterprise: true, free: true, grow: true, label: "AI paywall generation" },
+      {
+        detail: "Publish a new paywall without shipping a build.",
+        enterprise: true,
+        free: true,
+        grow: true,
+        label: "Remote updates",
+      },
+      { enterprise: true, free: true, grow: true, label: "Templates and component library" },
+      { enterprise: true, free: true, grow: true, label: "Custom fonts and image assets" },
+      { enterprise: true, free: true, grow: true, label: "Localization" },
+      { enterprise: true, free: true, grow: true, label: "Placements and targeting" },
+    ],
+    title: "Paywalls",
+  },
+  {
+    rows: [
+      { enterprise: true, free: true, grow: true, label: "Revenue, trial and churn dashboards" },
+      { enterprise: true, free: true, grow: true, label: "Funnels, cohorts and retention" },
+      { enterprise: true, free: true, grow: true, label: "Store and network attribution" },
+      { enterprise: true, free: false, grow: true, label: "SQL access to your raw events" },
+    ],
+    title: "Analytics",
+  },
+  {
+    rows: [
+      { enterprise: true, free: true, grow: true, label: "Feature flags" },
+      { enterprise: true, free: true, grow: true, label: "Paywall and price A/B tests" },
+      { enterprise: true, free: true, grow: true, label: "Audience targeting and rollouts" },
+      {
+        enterprise: true,
+        free: false,
+        grow: true,
+        hidden: true,
+        label: "Statistical significance reporting",
+      },
+    ],
+    title: "Experimentation",
+  },
+  {
+    rows: [
+      { enterprise: true, free: true, grow: true, label: "Unified person profiles" },
+      { enterprise: true, free: true, grow: true, label: "Cross-device identity resolution" },
+      { enterprise: true, free: true, grow: true, label: "Segments and saved views" },
+      { enterprise: true, free: true, grow: true, label: "Webhooks" },
+    ],
+    title: "CRM",
+  },
+  {
+    rows: [
+      { enterprise: true, free: true, grow: true, label: "React Native, iOS and Android SDKs" },
+      { enterprise: true, free: true, grow: true, label: "REST API, CLI and MCP server" },
+      { enterprise: true, free: true, grow: true, label: "Self-hosting (open source)" },
+      { enterprise: true, free: false, grow: false, label: "SSO/SAML, SCIM and audit log" },
+      { enterprise: "99.9% SLA", free: false, grow: false, label: "Uptime SLA" },
+      { enterprise: "Shared Slack", free: "Community", grow: "Email", label: "Support" },
+    ],
+    title: "Platform",
+  },
+];
+
+export const FAQ: readonly { readonly question: string; readonly answer: string }[] = [
+  {
+    answer:
+      "No. The Free plan needs no card and never converts into a paid one on its own. If you outgrow the included allowance we pause ingestion until the next month rather than billing you by surprise.",
+    question: "Do I need a credit card to start?",
+  },
+  {
+    answer:
+      "Tracked revenue is the subscription and one-off revenue Voidhash validates, attributes and reports on in a given month — not your app's total revenue. Purchases that never touch Voidhash are never metered.",
+    question: "What counts as tracked revenue?",
+  },
+  {
+    answer:
+      "One flat rate per meter, charged only on what you use past the allowance included in your plan. There are no tiers, no bands and no minimums to work out — $8 per $1,000 of tracked revenue and $6 per 100,000 events, whatever your scale.",
+    question: "How does the usage pricing work?",
+  },
+  {
+    answer:
+      "Your allowance resets on the first of each month and unused volume does not roll over. Usage is billed in arrears, so the invoice at the end of a month reflects exactly what you sent.",
+    question: "When does my allowance reset?",
+  },
+  {
+    answer:
+      "Yes. Voidhash is open source and you can run the whole platform yourself — no meters, no invoices. Enterprise adds support, migration help and an SLA on top of a self-hosted deployment.",
+    question: "Can I self-host instead?",
+  },
+  {
+    answer:
+      "Set a spend cap in the billing settings and we will alert you as you approach it, then stop ingesting once it is reached. You will never receive an invoice larger than the cap you set.",
+    question: "Can I cap my spend?",
+  },
+];
diff --git a/apps/www/src/features/www/pricing/pricing-model.ts b/apps/www/src/features/www/pricing/pricing-model.ts
new file mode 100644
index 000000000..f1817c827
--- /dev/null
+++ b/apps/www/src/features/www/pricing/pricing-model.ts
@@ -0,0 +1,138 @@
+/**
+ * Single source of truth for everything the pricing page quotes.
+ *
+ * The two metered features mirror the billing catalog (`tracked_revenue` and `events`); every
+ * other entitlement is unlimited on all plans and is therefore only ever rendered as copy.
+ */
+
+/** Monthly base fee of the Grow plan, before any usage. */
+export const GROW_BASE_PRICE = 29.99;
+
+export type Meter = {
+  readonly id: "trackedRevenue" | "events";
+  readonly label: string;
+  /** Short sentence explaining what the meter actually counts. */
+  readonly description: string;
+  /** How many meter units one `rate` charge covers. */
+  readonly billingUnit: number;
+  /** Renders one billing unit for the rate line, e.g. `100K events`. */
+  readonly unitLabel: string;
+  /** Flat price per `billingUnit` once the Grow allowance is used up. */
+  readonly rate: number;
+  /** Volume included on Free. Going past it is what moves you onto Grow. */
+  readonly freeAllowance: number;
+  /** Volume included in the Grow base fee. */
+  readonly growAllowance: number;
+  /**
+   * Smallest non-zero volume the slider can land on.
+   *
+   * The track is logarithmic and so cannot express zero, which is where every slider starts —
+   * the calculator reserves its first step for a literal 0 and scales from this floor upwards.
+   */
+  readonly sliderFloor: number;
+  readonly sliderMax: number;
+  /** Renders a raw volume for display, e.g. `1.2M` or `$25K`. */
+  readonly formatVolume: (value: number) => string;
+};
+
+const compact = new Intl.NumberFormat("en-US", {
+  maximumFractionDigits: 1,
+  notation: "compact",
+});
+
+/** Formats an invoice figure. Always two decimals, so a column of them lines up. */
+export function formatUsd(value: number): string {
+  return value.toLocaleString("en-US", {
+    currency: "USD",
+    maximumFractionDigits: 2,
+    minimumFractionDigits: 2,
+    style: "currency",
+  });
+}
+
+/** Formats a per-unit rate the way a price list reads it — `$6`, `$4.50` — never `$6.00`. */
+export function formatRate(value: number): string {
+  const cents = value % 1 === 0 ? 0 : 2;
+  return value.toLocaleString("en-US", {
+    currency: "USD",
+    maximumFractionDigits: cents,
+    minimumFractionDigits: cents,
+    style: "currency",
+  });
+}
+
+/** Compact dollars, but spelled out below the point where `$1K` starts reading as a rounding. */
+function formatDollarVolume(value: number): string {
+  return value < 10_000 ? `$${value.toLocaleString("en-US")}` : `$${compact.format(value)}`;
+}
+
+export const TRACKED_REVENUE_METER: Meter = {
+  billingUnit: 1_000,
+  description:
+    "Subscription and one-off revenue Voidhash validates, attributes and reports on each month.",
+  formatVolume: formatDollarVolume,
+  freeAllowance: 1_000,
+  growAllowance: 10_000,
+  id: "trackedRevenue",
+  label: "Tracked revenue",
+  rate: 8,
+  sliderFloor: 100,
+  sliderMax: 10_000_000,
+  unitLabel: "$1,000 tracked",
+};
+
+export const EVENTS_METER: Meter = {
+  billingUnit: 100_000,
+  description: "Anything your SDK sends us — screen views, paywall impressions, purchases, taps.",
+  formatVolume: (value) => compact.format(value),
+  freeAllowance: 50_000,
+  growAllowance: 1_000_000,
+  id: "events",
+  label: "Events",
+  rate: 6,
+  sliderFloor: 10_000,
+  sliderMax: 500_000_000,
+  unitLabel: "100K events",
+};
+
+/** Prices a monthly volume: everything past the Grow allowance at one flat rate. */
+export function meterCost(meter: Meter, volume: number): number {
+  const billable = Math.max(0, volume - meter.growAllowance);
+  return (billable / meter.billingUnit) * meter.rate;
+}
+
+export type Estimate = {
+  /** Which plan the quoted volumes actually land you on. */
+  readonly plan: "free" | "grow";
+  readonly base: number;
+  readonly trackedRevenue: number;
+  readonly events: number;
+  readonly total: number;
+};
+
+/**
+ * Prices a month at the given volumes.
+ *
+ * Volumes that fit inside the Free allowances cost nothing at all — the base fee only applies
+ * once you have outgrown Free on at least one meter.
+ */
+export function estimate(revenueVolume: number, eventVolume: number): Estimate {
+  const fitsOnFree =
+    revenueVolume <= TRACKED_REVENUE_METER.freeAllowance &&
+    eventVolume <= EVENTS_METER.freeAllowance;
+
+  if (fitsOnFree) {
+    return { base: 0, events: 0, plan: "free", total: 0, trackedRevenue: 0 };
+  }
+
+  const trackedRevenue = meterCost(TRACKED_REVENUE_METER, revenueVolume);
+  const events = meterCost(EVENTS_METER, eventVolume);
+
+  return {
+    base: GROW_BASE_PRICE,
+    events,
+    plan: "grow",
+    total: GROW_BASE_PRICE + trackedRevenue + events,
+    trackedRevenue,
+  };
+}
diff --git a/apps/www/src/features/www/pricing/pricing-page.tsx b/apps/www/src/features/www/pricing/pricing-page.tsx
new file mode 100644
index 000000000..80e75db20
--- /dev/null
+++ b/apps/www/src/features/www/pricing/pricing-page.tsx
@@ -0,0 +1,35 @@
+"use client";
+
+import { LandingDivider } from "@/features/www/landing/sections/divider";
+import { LandingFooter } from "@/features/www/landing/sections/footer";
+import { LandingGetStarted } from "@/features/www/landing/sections/get-started";
+import { LandingNavbar } from "@/features/www/landing/sections/navbar";
+
+import { PricingCalculator } from "./sections/calculator";
+import { PricingFaq } from "./sections/faq";
+import { PricingHero } from "./sections/hero";
+import { PricingMatrix } from "./sections/matrix";
+import { PricingPlans } from "./sections/plans";
+
+/** Renders the Voidhash pricing page. */
+export function PricingPage() {
+  return (
+    <div className="dark w-full overflow-x-clip bg-zinc-950 text-xs/4 antialiased [font-synthesis:none]">
+      <LandingNavbar />
+      <div className="flex w-full flex-col items-start gap-px">
+        <PricingHero />
+        <PricingPlans />
+        <LandingDivider />
+        <PricingCalculator />
+        <LandingDivider />
+        <PricingMatrix />
+        <LandingDivider />
+        <PricingFaq />
+        <LandingDivider />
+        <LandingGetStarted />
+        <LandingDivider />
+        <LandingFooter />
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/pricing/sections/calculator.tsx b/apps/www/src/features/www/pricing/sections/calculator.tsx
new file mode 100644
index 000000000..3a2e3ae31
--- /dev/null
+++ b/apps/www/src/features/www/pricing/sections/calculator.tsx
@@ -0,0 +1,259 @@
+"use client";
+
+import { Button, cn, Slider } from "@voidhash/ui";
+import { useMemo, useState } from "react";
+
+import { LandingSection, SectionHeader } from "@/features/www/landing/shared";
+import { signUpCtaLabel } from "@/lib/waitlist";
+
+import {
+  estimate,
+  EVENTS_METER,
+  formatRate,
+  formatUsd,
+  type Meter,
+  TRACKED_REVENUE_METER,
+} from "../pricing-model";
+
+/** Same panel treatment as the landing product cards. */
+const PANEL_BACKGROUND =
+  "radial-gradient(ellipse 100% 100% at 0% 0% in oklab, var(--color-zinc-900) 0%, var(--color-zinc-950) 100%)";
+
+/**
+ * Slider resolution. Step 0 is reserved for a volume of zero and the remaining steps carry the
+ * logarithmic ramp, so every slider has a real "nothing yet" position at its left edge.
+ */
+const SLIDER_STEPS = 1000;
+
+/** Rounds to two significant figures so dragging lands on 3.2M rather than 3,184,721. */
+function roundToTwoSignificantFigures(value: number): number {
+  const magnitude = 10 ** Math.max(0, Math.floor(Math.log10(value)) - 1);
+  return Math.round(value / magnitude) * magnitude;
+}
+
+function positionToVolume(meter: Meter, position: number): number {
+  if (position <= 0) {
+    return 0;
+  }
+  const ratio = meter.sliderMax / meter.sliderFloor;
+  const progress = (position - 1) / (SLIDER_STEPS - 1);
+  return roundToTwoSignificantFigures(meter.sliderFloor * ratio ** progress);
+}
+
+function volumeToPosition(meter: Meter, volume: number): number {
+  if (volume <= 0) {
+    return 0;
+  }
+  const ratio = meter.sliderMax / meter.sliderFloor;
+  const clamped = Math.min(meter.sliderMax, Math.max(meter.sliderFloor, volume));
+  return 1 + (Math.log(clamped / meter.sliderFloor) / Math.log(ratio)) * (SLIDER_STEPS - 1);
+}
+
+function RateRow({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="flex items-center justify-between gap-4 border-zinc-900 border-b py-2.5 last:border-b-0">
+      <div className="font-sans text-[13px]/4 text-zinc-400 tracking-[-0.01em]">{label}</div>
+      <div className="font-mono text-[13px]/4 text-white">{value}</div>
+    </div>
+  );
+}
+
+function VolumeInput({
+  meter,
+  onChange,
+  value,
+}: {
+  meter: Meter;
+  onChange: (value: number) => void;
+  value: number;
+}) {
+  const [draft, setDraft] = useState<string | null>(null);
+  const dollars = meter.id === "trackedRevenue";
+
+  const commit = () => {
+    const cleaned = (draft ?? "").replace(/[^\d]/g, "");
+    if (cleaned !== "") {
+      onChange(Math.min(meter.sliderMax, Number(cleaned)));
+    }
+    setDraft(null);
+  };
+
+  return (
+    <div className="flex items-baseline gap-1">
+      {dollars ? (
+        <span className="font-medium font-sans text-[28px] text-white leading-none tracking-[-0.03em]">
+          $
+        </span>
+      ) : null}
+      <input
+        aria-label={`Monthly ${meter.label.toLowerCase()}`}
+        className="w-full min-w-0 bg-transparent font-medium font-sans text-[28px] text-white leading-none tracking-[-0.03em] outline-none focus:text-blue-ribbon-300"
+        inputMode="numeric"
+        onBlur={commit}
+        onChange={(event) => setDraft(event.target.value)}
+        onKeyDown={(event) => {
+          if (event.key === "Enter") {
+            event.currentTarget.blur();
+          }
+        }}
+        value={draft ?? value.toLocaleString("en-US")}
+      />
+    </div>
+  );
+}
+
+function MeterControl({
+  meter,
+  onChange,
+  value,
+}: {
+  meter: Meter;
+  onChange: (value: number) => void;
+  value: number;
+}) {
+  return (
+    <div className="flex flex-col gap-6">
+      <div className="flex flex-col gap-2">
+        <div className="font-medium font-sans text-white text-[15px]/4.5 tracking-[-0.02em]">
+          {meter.label}
+        </div>
+        <p className="max-w-[420px] font-sans text-[13px]/4.5 text-zinc-400 tracking-[-0.01em]">
+          {meter.description}
+        </p>
+      </div>
+      <div className="flex flex-col gap-4">
+        <VolumeInput meter={meter} onChange={onChange} value={value} />
+        <Slider
+          aria-label={`Monthly ${meter.label.toLowerCase()} slider`}
+          max={SLIDER_STEPS}
+          min={0}
+          onValueChange={([position]) => onChange(positionToVolume(meter, position))}
+          step={1}
+          value={[volumeToPosition(meter, value)]}
+        />
+        <div className="flex items-center justify-between font-sans text-xs/4 text-zinc-500">
+          <span>{meter.formatVolume(0)}</span>
+          <span>{meter.formatVolume(meter.sliderMax)}</span>
+        </div>
+      </div>
+      <div className="flex flex-col">
+        <RateRow label="Included on Free" value={meter.formatVolume(meter.freeAllowance)} />
+        <RateRow label="Included on Grow" value={meter.formatVolume(meter.growAllowance)} />
+        <RateRow
+          label="Every unit after that"
+          value={`${formatRate(meter.rate)} / ${meter.unitLabel}`}
+        />
+      </div>
+    </div>
+  );
+}
+
+function SummaryRow({
+  amount,
+  detail,
+  label,
+  muted,
+}: {
+  amount: string;
+  detail?: string;
+  label: string;
+  muted: boolean;
+}) {
+  return (
+    <div className="flex items-start justify-between gap-6 border-zinc-900 border-b px-6 py-4.5">
+      <div className="flex flex-col gap-1">
+        <div className="font-sans text-[15px]/4.5 text-zinc-200 tracking-[-0.02em]">{label}</div>
+        {detail ? (
+          <div className="font-sans text-xs/4 text-zinc-500 tracking-[-0.01em]">{detail}</div>
+        ) : null}
+      </div>
+      <div
+        className={cn(
+          "shrink-0 font-medium font-mono text-[15px]/4.5",
+          muted ? "text-zinc-500" : "text-white",
+        )}
+      >
+        {amount}
+      </div>
+    </div>
+  );
+}
+
+/** Renders the interactive monthly bill estimator. */
+export function PricingCalculator() {
+  // Both meters start at zero, so the first thing anyone sees is a $0 bill.
+  const [revenue, setRevenue] = useState(0);
+  const [events, setEvents] = useState(0);
+
+  const bill = useMemo(() => estimate(revenue, events), [revenue, events]);
+  const onFree = bill.plan === "free";
+
+  return (
+    <LandingSection id="calculator">
+      <div className="flex flex-col items-start gap-12 px-6 py-16 md:gap-16 md:px-12 md:py-24 xl:p-32">
+        <SectionHeader
+          description="Drag the two meters to your own numbers. No sales call needed to find out what Voidhash costs."
+          eyebrow="Estimate"
+          title="Work out your bill before you commit."
+        />
+        <div className="flex w-full flex-col items-start gap-10 xl:flex-row xl:gap-16">
+          <div className="flex w-full min-w-0 flex-col gap-12 xl:flex-1">
+            <MeterControl meter={TRACKED_REVENUE_METER} onChange={setRevenue} value={revenue} />
+            <MeterControl meter={EVENTS_METER} onChange={setEvents} value={events} />
+          </div>
+          <div
+            className="flex w-full flex-col overflow-clip rounded-lg border border-zinc-800 border-solid xl:w-107.25 xl:shrink-0"
+            style={{ backgroundImage: PANEL_BACKGROUND }}
+          >
+            <div className="flex items-center justify-between border-zinc-800 border-b px-6 py-5">
+              <div className="font-medium font-sans text-[15px]/4.5 text-white tracking-[-0.02em]">
+                Your monthly bill
+              </div>
+              <div className="font-sans text-xs/4 text-zinc-400">
+                {onFree ? "Free plan" : "Grow plan"}
+              </div>
+            </div>
+            <SummaryRow
+              amount={formatUsd(bill.base)}
+              detail="Platform access"
+              label="Base"
+              muted={onFree}
+            />
+            <SummaryRow
+              amount={formatUsd(bill.trackedRevenue)}
+              detail={`${TRACKED_REVENUE_METER.formatVolume(revenue)} tracked`}
+              label="Tracked revenue"
+              muted={bill.trackedRevenue === 0}
+            />
+            <SummaryRow
+              amount={formatUsd(bill.events)}
+              detail={`${EVENTS_METER.formatVolume(events)} events`}
+              label="Events"
+              muted={bill.events === 0}
+            />
+            <div className="flex flex-col gap-5 px-6 py-6.5">
+              <div className="flex items-end justify-between gap-4">
+                <div className="font-sans text-[15px]/4.5 text-zinc-200 tracking-[-0.02em]">
+                  Estimated total
+                </div>
+                <div className="font-medium font-sans text-[32px] text-white leading-none tracking-[-0.03em]">
+                  {formatUsd(bill.total)}
+                </div>
+              </div>
+              <p className="font-sans text-[13px]/4.5 text-zinc-400 tracking-[-0.01em]">
+                {onFree
+                  ? "At this volume you fit inside the Free plan — no card, nothing to pay."
+                  : revenue > 0
+                    ? `That works out to ${((bill.total / revenue) * 100).toFixed(2)}% of the revenue we track for you.`
+                    : "Billed monthly in arrears. Change plan or cancel at any time."}
+              </p>
+              <Button asChild className="w-full" size="lg">
+                <a href="/auth/sign-up">{signUpCtaLabel("Start for free")}</a>
+              </Button>
+            </div>
+          </div>
+        </div>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/pricing/sections/faq.tsx b/apps/www/src/features/www/pricing/sections/faq.tsx
new file mode 100644
index 000000000..2068f2543
--- /dev/null
+++ b/apps/www/src/features/www/pricing/sections/faq.tsx
@@ -0,0 +1,34 @@
+import { Accordion, AccordionContent, AccordionItem, AccordionTrigger } from "@voidhash/ui";
+
+import { LandingSection, SectionHeader } from "@/features/www/landing/shared";
+
+import { FAQ } from "../plans";
+
+/** Renders the pricing FAQ. */
+export function PricingFaq() {
+  return (
+    <LandingSection>
+      <div className="flex flex-col gap-12 px-6 py-16 md:px-12 md:py-24 lg:flex-row lg:gap-24 xl:p-32">
+        <div className="w-full lg:w-90 lg:shrink-0">
+          <SectionHeader eyebrow="Questions" title="The things people ask us first." />
+        </div>
+        <Accordion className="min-w-0 flex-1 border-zinc-800 border-t" collapsible type="single">
+          {FAQ.map((entry) => (
+            <AccordionItem
+              className="border-zinc-800 last:border-b"
+              key={entry.question}
+              value={entry.question}
+            >
+              <AccordionTrigger className="py-5 font-medium font-sans text-[17px]/6 text-white tracking-[-0.02em] hover:no-underline">
+                {entry.question}
+              </AccordionTrigger>
+              <AccordionContent className="max-w-[720px] pb-5 font-sans text-[15px]/6.5 text-zinc-400 tracking-[-0.01em]">
+                {entry.answer}
+              </AccordionContent>
+            </AccordionItem>
+          ))}
+        </Accordion>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/pricing/sections/hero.tsx b/apps/www/src/features/www/pricing/sections/hero.tsx
new file mode 100644
index 000000000..d9b995423
--- /dev/null
+++ b/apps/www/src/features/www/pricing/sections/hero.tsx
@@ -0,0 +1,24 @@
+import { HeroShader } from "@/features/www/hero/hero-shader";
+import { LandingSection } from "@/features/www/landing/shared";
+
+/** Renders the pricing page hero, backed by the same lenticular shader as the landing hero. */
+export function PricingHero() {
+  return (
+    <LandingSection>
+      <div className="relative flex flex-col items-center overflow-clip px-6 py-24 md:py-32 xl:py-40">
+        <div className="absolute inset-0">
+          <HeroShader />
+        </div>
+        <div className="relative flex w-full max-w-[826px] flex-col items-center gap-6">
+          <h1 className="text-balance text-center font-medium font-sans text-[40px] text-white leading-[110%] tracking-[-0.03em] md:text-[56px]">
+            Pricing that starts at zero and scales with you
+          </h1>
+          <p className="max-w-[600px] text-center font-sans text-zinc-400 text-base/6.5 tracking-[-0.03em] md:text-xl/8">
+            Every plan includes the whole platform. You only ever pay for the revenue we track and
+            the events we ingest for you.
+          </p>
+        </div>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/pricing/sections/matrix.tsx b/apps/www/src/features/www/pricing/sections/matrix.tsx
new file mode 100644
index 000000000..bc5938621
--- /dev/null
+++ b/apps/www/src/features/www/pricing/sections/matrix.tsx
@@ -0,0 +1,111 @@
+import { cn } from "@voidhash/ui";
+import { CheckIcon, MinusIcon } from "lucide-react";
+
+import { LandingSection, SectionHeader } from "@/features/www/landing/shared";
+
+import { MATRIX, type MatrixValue, PLANS } from "../plans";
+
+/**
+ * Height of the sticky navbar the header row has to clear: 32px of controls plus its padding
+ * (`p-4` on mobile, `p-6` from `md`) and the hairline underneath.
+ */
+const HEADER_OFFSET = "top-[65px] md:top-[81px]";
+
+/** Shared column geometry, so the header row and every body row land in the same lanes. */
+const ROW = "flex items-stretch gap-4 px-6 md:px-12 xl:px-32";
+
+/** The matrix minus rows for capabilities we have not shipped, and any group left empty by that. */
+const VISIBLE_MATRIX = MATRIX.map((group) => ({
+  ...group,
+  rows: group.rows.filter((row) => !row.hidden),
+})).filter((group) => group.rows.length > 0);
+const LABEL_CELL = "flex-1 min-w-0 py-4";
+const VALUE_CELL = "w-32 shrink-0 py-4 md:w-40";
+
+function Cell({ value }: { value: MatrixValue }) {
+  if (value === true) {
+    return <CheckIcon className="size-4 text-zinc-200" />;
+  }
+  if (value === false) {
+    return <MinusIcon className="size-4 text-zinc-700" />;
+  }
+  return (
+    <div className="font-sans text-[13px]/4.5 text-zinc-200 tracking-[-0.01em]">{value}</div>
+  );
+}
+
+/** Renders the plan comparison matrix. */
+export function PricingMatrix() {
+  return (
+    <LandingSection id="compare">
+      <div className="flex flex-col items-start gap-12 px-6 pt-16 md:gap-16 md:px-12 md:pt-24 xl:px-32 xl:pt-32">
+        <SectionHeader
+          description="Every plan ships the whole product. What changes is how much you can send us, and how much help you get."
+          eyebrow="Compare"
+          title="One platform, three ways to buy it."
+        />
+      </div>
+      <div className="mt-12 overflow-x-auto md:mt-16 lg:overflow-x-visible">
+        <div className="min-w-[840px] lg:min-w-0">
+          <div
+            className={cn(
+              ROW,
+              HEADER_OFFSET,
+              "sticky z-10 items-end border-zinc-800 border-y bg-zinc-950/95 backdrop-blur-md",
+            )}
+          >
+            <div className={cn(LABEL_CELL, "font-sans text-xs/4 text-zinc-500")}>Feature</div>
+            {PLANS.map((plan) => (
+              <div
+                className={cn(
+                  VALUE_CELL,
+                  "font-medium font-sans text-sm/4.5 tracking-[-0.02em]",
+                  plan.id === "grow" ? "text-white" : "text-zinc-300",
+                )}
+                key={plan.id}
+              >
+                {plan.name}
+              </div>
+            ))}
+          </div>
+          {VISIBLE_MATRIX.map((group) => (
+            <div key={group.title}>
+              <div
+                className={cn(
+                  ROW,
+                  "border-zinc-800 border-b bg-zinc-900/30 py-3",
+                  "font-medium font-sans text-[13px]/4.5 text-zinc-400 tracking-[-0.01em]",
+                )}
+              >
+                {group.title}
+              </div>
+              {group.rows.map((row) => (
+                <div className={cn(ROW, "border-zinc-900 border-b")} key={row.label}>
+                  <div className={cn(LABEL_CELL, "flex flex-col gap-1")}>
+                    <div className="font-sans text-sm/4.5 text-zinc-200 tracking-[-0.01em]">
+                      {row.label}
+                    </div>
+                    {row.detail ? (
+                      <div className="max-w-[420px] font-sans text-xs/4 text-zinc-500 tracking-[-0.01em]">
+                        {row.detail}
+                      </div>
+                    ) : null}
+                  </div>
+                  <div className={VALUE_CELL}>
+                    <Cell value={row.free} />
+                  </div>
+                  <div className={VALUE_CELL}>
+                    <Cell value={row.grow} />
+                  </div>
+                  <div className={VALUE_CELL}>
+                    <Cell value={row.enterprise} />
+                  </div>
+                </div>
+              ))}
+            </div>
+          ))}
+        </div>
+      </div>
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/pricing/sections/plans.tsx b/apps/www/src/features/www/pricing/sections/plans.tsx
new file mode 100644
index 000000000..6ce139396
--- /dev/null
+++ b/apps/www/src/features/www/pricing/sections/plans.tsx
@@ -0,0 +1,83 @@
+import { Button, cn } from "@voidhash/ui";
+import { CheckIcon } from "lucide-react";
+
+import { LandingSection } from "@/features/www/landing/shared";
+
+import { type Plan, PLANS } from "../plans";
+import { PricingSelfHost } from "./self-host";
+
+/** Lifts the recommended column off the flat surface without boxing it in a card. */
+const HIGHLIGHT_BACKGROUND =
+  "radial-gradient(ellipse 100% 100% at 50% 0% in oklab, var(--color-zinc-900) 0%, var(--color-zinc-950) 100%)";
+
+function PlanColumn({ plan }: { plan: Plan }) {
+  const recommended = plan.id === "grow";
+
+  return (
+    <div
+      className="flex flex-col gap-8 px-6 py-12 md:px-10 md:py-14"
+      style={recommended ? { backgroundImage: HIGHLIGHT_BACKGROUND } : undefined}
+    >
+      <div className="flex flex-col gap-6">
+        <div className="font-medium font-sans text-white text-xl leading-[120%] tracking-[-0.02em]">
+          {plan.name}
+        </div>
+        <div className="flex flex-col gap-2">
+          <div className="font-sans text-zinc-500 text-[13px]/4 tracking-[-0.01em]">
+            {plan.priceNote}
+          </div>
+          <div className="flex items-baseline gap-2">
+            <div className="font-medium font-sans text-[44px] text-white leading-[110%] tracking-[-0.03em]">
+              {plan.price}
+            </div>
+            {plan.priceSuffix ? (
+              <div className="font-sans text-[15px]/5 text-zinc-400 tracking-[-0.01em]">
+                {plan.priceSuffix}
+              </div>
+            ) : null}
+          </div>
+        </div>
+        <p className="min-h-16 max-w-[360px] font-sans text-[15px]/6 text-zinc-400 tracking-[-0.01em]">
+          {plan.description}
+        </p>
+        <Button
+          asChild
+          className="w-full"
+          size="lg"
+          variant={recommended ? "default" : "outline"}
+        >
+          <a href={plan.cta.href}>{plan.cta.label}</a>
+        </Button>
+      </div>
+      <div className="flex flex-col gap-3.5 border-zinc-800 border-t pt-8">
+        {plan.highlights.map((highlight) => (
+          <div className="flex items-start gap-3" key={highlight}>
+            <CheckIcon
+              className={cn(
+                "mt-0.5 size-4 shrink-0",
+                recommended ? "text-blue-ribbon-400" : "text-zinc-500",
+              )}
+            />
+            <div className="font-sans text-[15px]/5.5 text-zinc-200 tracking-[-0.01em]">
+              {highlight}
+            </div>
+          </div>
+        ))}
+      </div>
+    </div>
+  );
+}
+
+/** Renders the three plan columns. */
+export function PricingPlans() {
+  return (
+    <LandingSection>
+      <div className="grid grid-cols-1 divide-y divide-zinc-800 lg:grid-cols-3 lg:divide-x lg:divide-y-0">
+        {PLANS.map((plan) => (
+          <PlanColumn key={plan.id} plan={plan} />
+        ))}
+      </div>
+      <PricingSelfHost />
+    </LandingSection>
+  );
+}
diff --git a/apps/www/src/features/www/pricing/sections/self-host.tsx b/apps/www/src/features/www/pricing/sections/self-host.tsx
new file mode 100644
index 000000000..28e338b66
--- /dev/null
+++ b/apps/www/src/features/www/pricing/sections/self-host.tsx
@@ -0,0 +1,26 @@
+import { ArrowUpRightIcon } from "lucide-react";
+
+/**
+ * Renders the one-line self-hosting note under the plan columns.
+ *
+ * Sits inside the plans section rather than its own one, so the free-forever alternative reads
+ * as a footnote to the tiers rather than an unrelated pitch further down the page.
+ */
+export function PricingSelfHost() {
+  return (
+    <div className="flex flex-col gap-3 border-zinc-800 border-t px-6 py-6 md:flex-row md:items-center md:justify-between md:px-10">
+      <div className="font-sans text-[15px]/6 text-zinc-400 tracking-[-0.01em]">
+        Voidhash is open source — you can also run the whole platform yourself, for free.
+      </div>
+      <a
+        className="flex w-max items-center gap-1.5 font-sans text-[15px]/6 text-zinc-200 tracking-[-0.01em] transition-opacity hover:opacity-80"
+        href="https://github.com/voidhashcom/voidhash/tree/main/selfhost"
+        rel="noreferrer"
+        target="_blank"
+      >
+        Self-hosting guide
+        <ArrowUpRightIcon className="size-4 shrink-0" />
+      </a>
+    </div>
+  );
+}
diff --git a/apps/www/src/lib/code-theme.ts b/apps/www/src/lib/code-theme.ts
index 3a2e4d191..d94e9c093 100644
--- a/apps/www/src/lib/code-theme.ts
+++ b/apps/www/src/lib/code-theme.ts
@@ -18,16 +18,16 @@
 export const CODE_PALETTE = {
   white: "#ffffff",
   zinc50: "#fafafa",
-  zinc100: "#f4f4f4",
-  zinc200: "#e4e4e4",
-  zinc300: "#d4d4d4",
-  zinc400: "#a0a0a0",
-  zinc500: "#727272",
-  zinc600: "#535353",
-  zinc700: "#404040",
-  zinc800: "#272727",
-  zinc900: "#181818",
-  zinc950: "#101010",
+  zinc100: "#f4f4f5",
+  zinc200: "#e4e4e7",
+  zinc300: "#d4d4d8",
+  zinc400: "#a1a1aa",
+  zinc500: "#71717b",
+  zinc600: "#52525c",
+  zinc700: "#3f3f46",
+  zinc800: "#27272a",
+  zinc900: "#18181b",
+  zinc950: "#09090b",
   blue50: "#edf8ff",
   blue300: "#83d1ff",
   blue400: "#48b7ff",
diff --git a/apps/www/src/lib/waitlist.ts b/apps/www/src/lib/waitlist.ts
new file mode 100644
index 000000000..0e124f89a
--- /dev/null
+++ b/apps/www/src/lib/waitlist.ts
@@ -0,0 +1,37 @@
+import { INTERNAL_FEATURE_FLAGS } from "@voidhash/rpc";
+
+/**
+ * Whether Voidhash is currently in waitlist mode.
+ *
+ * Read from the `waitlist` internal feature flag's *code default* rather than
+ * from a resolved per-org value, because the marketing pages and the auth
+ * screens run before there is any organization (or even a user) to scope a
+ * flag lookup to. Per-organization access is still decided by the resolved
+ * flag — see {@link isOrganizationWaitlisted}.
+ *
+ * Flipping `waitlist.defaultEnabled` to `false` in the flag registry turns the
+ * whole system off: the CTAs revert to their normal copy and every
+ * organization without an explicit override is let straight into Studio.
+ */
+export const WAITLIST_MODE = INTERNAL_FEATURE_FLAGS.waitlist.defaultEnabled;
+
+/** The CTA label shown in place of a sign-up call to action while in waitlist mode. */
+export const WAITLIST_CTA_LABEL = "Join the waitlist";
+
+/**
+ * The label for a call to action that leads to sign-up: the waitlist label
+ * while in waitlist mode, otherwise the page's own copy.
+ *
+ * @example
+ * <a href="/auth/sign-up">{signUpCtaLabel("Start for free")}</a>
+ */
+export const signUpCtaLabel = (defaultLabel: string) =>
+  WAITLIST_MODE ? WAITLIST_CTA_LABEL : defaultLabel;
+
+/**
+ * Whether an organization is being held on the waitlist and must not be let
+ * into Studio. Reads the flags resolved onto the `CurrentUser` bootstrap.
+ */
+export const isOrganizationWaitlisted = (organization: {
+  readonly internalFeatureFlags: readonly string[];
+}) => organization.internalFeatureFlags.includes(INTERNAL_FEATURE_FLAGS.waitlist.key);
diff --git a/apps/www/src/routeTree.gen.ts b/apps/www/src/routeTree.gen.ts
index febcd1894..377daac8c 100644
--- a/apps/www/src/routeTree.gen.ts
+++ b/apps/www/src/routeTree.gen.ts
@@ -26,9 +26,11 @@ import { Route as AuthResetPasswordRouteImport } from './routes/auth/reset-passw
 import { Route as AuthLogoutRouteImport } from './routes/auth/logout'
 import { Route as AuthLoginRouteImport } from './routes/auth/login'
 import { Route as AuthForgotPasswordRouteImport } from './routes/auth/forgot-password'
+import { Route as MarketingPricingRouteImport } from './routes/_marketing/pricing'
 import { Route as StudioAuthenticatedRouteRouteImport } from './routes/studio/_authenticated/route'
 import { Route as StudioAuthenticatedIndexRouteImport } from './routes/studio/_authenticated/index'
 import { Route as AuthDevicesIndexRouteImport } from './routes/auth/devices/index'
+import { Route as StudioAuthenticatedWaitlistRouteImport } from './routes/studio/_authenticated/waitlist'
 import { Route as DocsApiSearchRouteImport } from './routes/docs/api/search'
 import { Route as DocsApiProxyRouteImport } from './routes/docs/api/proxy'
 import { Route as DesignApiSearchRouteImport } from './routes/design/api/search'
@@ -166,6 +168,11 @@ const AuthForgotPasswordRoute = AuthForgotPasswordRouteImport.update({
   path: '/forgot-password',
   getParentRoute: () => AuthRouteRoute,
 } as any)
+const MarketingPricingRoute = MarketingPricingRouteImport.update({
+  id: '/pricing',
+  path: '/pricing',
+  getParentRoute: () => MarketingRouteRoute,
+} as any)
 const StudioAuthenticatedRouteRoute =
   StudioAuthenticatedRouteRouteImport.update({
     id: '/_authenticated',
@@ -182,6 +189,12 @@ const AuthDevicesIndexRoute = AuthDevicesIndexRouteImport.update({
   path: '/devices/',
   getParentRoute: () => AuthRouteRoute,
 } as any)
+const StudioAuthenticatedWaitlistRoute =
+  StudioAuthenticatedWaitlistRouteImport.update({
+    id: '/waitlist',
+    path: '/waitlist',
+    getParentRoute: () => StudioAuthenticatedRouteRoute,
+  } as any)
 const DocsApiSearchRoute = DocsApiSearchRouteImport.update({
   id: '/api/search',
   path: '/api/search',
@@ -601,6 +614,7 @@ export interface FileRoutesByFullPath {
   '/design': typeof DesignRouteRouteWithChildren
   '/docs': typeof DocsRouteRouteWithChildren
   '/studio': typeof StudioRouteRouteWithChildren
+  '/pricing': typeof MarketingPricingRoute
   '/auth/forgot-password': typeof AuthForgotPasswordRoute
   '/auth/login': typeof AuthLoginRoute
   '/auth/logout': typeof AuthLogoutRoute
@@ -616,6 +630,7 @@ export interface FileRoutesByFullPath {
   '/design/api/search': typeof DesignApiSearchRoute
   '/docs/api/proxy': typeof DocsApiProxyRoute
   '/docs/api/search': typeof DocsApiSearchRoute
+  '/studio/waitlist': typeof StudioAuthenticatedWaitlistRoute
   '/auth/devices/': typeof AuthDevicesIndexRoute
   '/studio/': typeof StudioAuthenticatedIndexRoute
   '/api/auth/email/resend': typeof ApiAuthEmailResendRoute
@@ -668,6 +683,7 @@ export interface FileRoutesByFullPath {
 }
 export interface FileRoutesByTo {
   '/studio': typeof StudioAuthenticatedIndexRoute
+  '/pricing': typeof MarketingPricingRoute
   '/auth/forgot-password': typeof AuthForgotPasswordRoute
   '/auth/login': typeof AuthLoginRoute
   '/auth/logout': typeof AuthLogoutRoute
@@ -684,6 +700,7 @@ export interface FileRoutesByTo {
   '/design/api/search': typeof DesignApiSearchRoute
   '/docs/api/proxy': typeof DocsApiProxyRoute
   '/docs/api/search': typeof DocsApiSearchRoute
+  '/studio/waitlist': typeof StudioAuthenticatedWaitlistRoute
   '/auth/devices': typeof AuthDevicesIndexRoute
   '/api/auth/email/resend': typeof ApiAuthEmailResendRoute
   '/api/auth/email/verify': typeof ApiAuthEmailVerifyRoute
@@ -739,6 +756,7 @@ export interface FileRoutesById {
   '/docs': typeof DocsRouteRouteWithChildren
   '/studio': typeof StudioRouteRouteWithChildren
   '/studio/_authenticated': typeof StudioAuthenticatedRouteRouteWithChildren
+  '/_marketing/pricing': typeof MarketingPricingRoute
   '/auth/forgot-password': typeof AuthForgotPasswordRoute
   '/auth/login': typeof AuthLoginRoute
   '/auth/logout': typeof AuthLogoutRoute
@@ -756,6 +774,7 @@ export interface FileRoutesById {
   '/design/api/search': typeof DesignApiSearchRoute
   '/docs/api/proxy': typeof DocsApiProxyRoute
   '/docs/api/search': typeof DocsApiSearchRoute
+  '/studio/_authenticated/waitlist': typeof StudioAuthenticatedWaitlistRoute
   '/auth/devices/': typeof AuthDevicesIndexRoute
   '/studio/_authenticated/': typeof StudioAuthenticatedIndexRoute
   '/api/auth/email/resend': typeof ApiAuthEmailResendRoute
@@ -814,6 +833,7 @@ export interface FileRouteTypes {
     | '/design'
     | '/docs'
     | '/studio'
+    | '/pricing'
     | '/auth/forgot-password'
     | '/auth/login'
     | '/auth/logout'
@@ -829,6 +849,7 @@ export interface FileRouteTypes {
     | '/design/api/search'
     | '/docs/api/proxy'
     | '/docs/api/search'
+    | '/studio/waitlist'
     | '/auth/devices/'
     | '/studio/'
     | '/api/auth/email/resend'
@@ -881,6 +902,7 @@ export interface FileRouteTypes {
   fileRoutesByTo: FileRoutesByTo
   to:
     | '/studio'
+    | '/pricing'
     | '/auth/forgot-password'
     | '/auth/login'
     | '/auth/logout'
@@ -897,6 +919,7 @@ export interface FileRouteTypes {
     | '/design/api/search'
     | '/docs/api/proxy'
     | '/docs/api/search'
+    | '/studio/waitlist'
     | '/auth/devices'
     | '/api/auth/email/resend'
     | '/api/auth/email/verify'
@@ -951,6 +974,7 @@ export interface FileRouteTypes {
     | '/docs'
     | '/studio'
     | '/studio/_authenticated'
+    | '/_marketing/pricing'
     | '/auth/forgot-password'
     | '/auth/login'
     | '/auth/logout'
@@ -968,6 +992,7 @@ export interface FileRouteTypes {
     | '/design/api/search'
     | '/docs/api/proxy'
     | '/docs/api/search'
+    | '/studio/_authenticated/waitlist'
     | '/auth/devices/'
     | '/studio/_authenticated/'
     | '/api/auth/email/resend'
@@ -1157,6 +1182,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof AuthForgotPasswordRouteImport
       parentRoute: typeof AuthRouteRoute
     }
+    '/_marketing/pricing': {
+      id: '/_marketing/pricing'
+      path: '/pricing'
+      fullPath: '/pricing'
+      preLoaderRoute: typeof MarketingPricingRouteImport
+      parentRoute: typeof MarketingRouteRoute
+    }
     '/studio/_authenticated': {
       id: '/studio/_authenticated'
       path: ''
@@ -1178,6 +1210,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof AuthDevicesIndexRouteImport
       parentRoute: typeof AuthRouteRoute
     }
+    '/studio/_authenticated/waitlist': {
+      id: '/studio/_authenticated/waitlist'
+      path: '/waitlist'
+      fullPath: '/studio/waitlist'
+      preLoaderRoute: typeof StudioAuthenticatedWaitlistRouteImport
+      parentRoute: typeof StudioAuthenticatedRouteRoute
+    }
     '/docs/api/search': {
       id: '/docs/api/search'
       path: '/api/search'
@@ -1546,10 +1585,12 @@ declare module '@tanstack/react-router' {
 }
 
 interface MarketingRouteRouteChildren {
+  MarketingPricingRoute: typeof MarketingPricingRoute
   MarketingIndexRoute: typeof MarketingIndexRoute
 }
 
 const MarketingRouteRouteChildren: MarketingRouteRouteChildren = {
+  MarketingPricingRoute: MarketingPricingRoute,
   MarketingIndexRoute: MarketingIndexRoute,
 }
 
@@ -1766,6 +1807,7 @@ const StudioAuthenticatedDashboardRouteRouteWithChildren =
 
 interface StudioAuthenticatedRouteRouteChildren {
   StudioAuthenticatedDashboardRouteRoute: typeof StudioAuthenticatedDashboardRouteRouteWithChildren
+  StudioAuthenticatedWaitlistRoute: typeof StudioAuthenticatedWaitlistRoute
   StudioAuthenticatedIndexRoute: typeof StudioAuthenticatedIndexRoute
   StudioAuthenticatedCreateOrganizationIndexRoute: typeof StudioAuthenticatedCreateOrganizationIndexRoute
   StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute: typeof StudioAuthenticatedDesignerOrganizationSlugProjectSlugDesignIdRoute
@@ -1775,6 +1817,7 @@ const StudioAuthenticatedRouteRouteChildren: StudioAuthenticatedRouteRouteChildr
   {
     StudioAuthenticatedDashboardRouteRoute:
       StudioAuthenticatedDashboardRouteRouteWithChildren,
+    StudioAuthenticatedWaitlistRoute: StudioAuthenticatedWaitlistRoute,
     StudioAuthenticatedIndexRoute: StudioAuthenticatedIndexRoute,
     StudioAuthenticatedCreateOrganizationIndexRoute:
       StudioAuthenticatedCreateOrganizationIndexRoute,
diff --git a/apps/www/src/routes/_marketing/index.tsx b/apps/www/src/routes/_marketing/index.tsx
index 87300f236..83bea3033 100644
--- a/apps/www/src/routes/_marketing/index.tsx
+++ b/apps/www/src/routes/_marketing/index.tsx
@@ -1,8 +1,7 @@
 import { createFileRoute, redirect } from "@tanstack/react-router";
 import { getAuth } from "@workos/authkit-tanstack-react-start";
 
-import { Footer } from "@/features/www/hero/footer";
-import { Hero } from "@/features/www/hero/hero";
+import { LandingPage } from "@/features/www/landing/landing-page";
 import { STUDIO_PATH } from "@/lib/paths";
 
 export const Route = createFileRoute("/_marketing/")({
@@ -16,12 +15,5 @@ export const Route = createFileRoute("/_marketing/")({
 });
 
 function MarketingHome() {
-  return (
-    <>
-      <main className="flex w-full max-w-7xl flex-col md:mx-auto">
-        <Hero />
-      </main>
-      <Footer />
-    </>
-  );
+  return <LandingPage />;
 }
diff --git a/apps/www/src/routes/_marketing/pricing.tsx b/apps/www/src/routes/_marketing/pricing.tsx
new file mode 100644
index 000000000..86acb098b
--- /dev/null
+++ b/apps/www/src/routes/_marketing/pricing.tsx
@@ -0,0 +1,11 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { PricingPage } from "@/features/www/pricing/pricing-page";
+
+export const Route = createFileRoute("/_marketing/pricing")({
+  component: MarketingPricing,
+});
+
+function MarketingPricing() {
+  return <PricingPage />;
+}
diff --git a/apps/www/src/routes/_marketing/route.tsx b/apps/www/src/routes/_marketing/route.tsx
index 7f5b9ad1d..195ad4b88 100644
--- a/apps/www/src/routes/_marketing/route.tsx
+++ b/apps/www/src/routes/_marketing/route.tsx
@@ -1,15 +1,12 @@
 import { Outlet, createFileRoute } from "@tanstack/react-router";
 
-import { Navigation } from "@/features/www/navbar/navigation";
-
 export const Route = createFileRoute("/_marketing")({
   component: MarketingLayout,
 });
 
 function MarketingLayout() {
   return (
-    <div className="min-w-screen md:min-h-screen">
-      <Navigation />
+    <div className="min-h-screen bg-[#09090B]">
       <Outlet />
     </div>
   );
diff --git a/apps/www/src/routes/auth/login.tsx b/apps/www/src/routes/auth/login.tsx
index 04468ddbe..a37a45cfb 100644
--- a/apps/www/src/routes/auth/login.tsx
+++ b/apps/www/src/routes/auth/login.tsx
@@ -6,9 +6,10 @@ import { AlertCircle, CheckCircle, Loader2 } from "lucide-react";
 import { type FormEvent, useState } from "react";
 import { z } from "zod";
 
-import { VoidhashGradientBackground } from "@/components/voidhash-gradient-background";
+import { AuthLenticularBackground } from "@/features/auth/components/auth-lenticular-background";
 import { signInWithPassword } from "@/features/auth/lib/auth-api";
 import { saveEmailVerificationState } from "@/features/auth/lib/email-verification-storage";
+import { signUpCtaLabel } from "@/lib/waitlist";
 
 const loginSearchSchema = z.object({
   email: z.string().default(""),
@@ -18,11 +19,6 @@ const loginSearchSchema = z.object({
   signup: z.boolean().default(false),
 });
 
-const loginGradientSettings = {
-  topEnabled: false,
-  effectHeight: 70,
-} as const;
-
 export const Route = createFileRoute("/auth/login")({
   component: LoginPage,
   validateSearch: zodValidator(loginSearchSchema),
@@ -76,15 +72,8 @@ function LoginPage() {
 
   return (
     <div className="relative grid min-h-svh overflow-hidden bg-background lg:grid-cols-12">
-      <VoidhashGradientBackground
-        className="absolute inset-0"
-        controlsQueryParam="loginGradientControls"
-        controlsStorageKey="voidhash:login-gradient-controls"
-        controlsTitle="Login FX"
-        settings={loginGradientSettings}
-        settingsStorageKey="voidhash:login-gradient-settings"
-      />
-      <div className="relative z-10 col-span-6 flex flex-col gap-4 bg-background/95 p-6 backdrop-blur-xl md:p-10 lg:border-r lg:border-border/50">
+      <AuthLenticularBackground className="absolute inset-0" />
+      <div className="relative z-10 col-span-8 flex flex-col gap-4 p-6 md:p-10 bg-linear-to-r from-background to-transparent">
         <div className="flex justify-center gap-2 md:justify-start">
           <Link className="flex gap-2 font-medium" to="/">
             <Logo />
@@ -213,7 +202,7 @@ function LoginPage() {
                 search={{ next: searchParams.next }}
                 to="/auth/sign-up"
               >
-                Sign up
+                {signUpCtaLabel("Sign up")}
               </Link>
             </div>
 
diff --git a/apps/www/src/routes/auth/logout.tsx b/apps/www/src/routes/auth/logout.tsx
index 2827e4a89..99611c49b 100644
--- a/apps/www/src/routes/auth/logout.tsx
+++ b/apps/www/src/routes/auth/logout.tsx
@@ -2,6 +2,7 @@ import { createFileRoute } from "@tanstack/react-router";
 import { signOut } from "@workos/authkit-tanstack-react-start";
 import { Spinner } from "@voidhash/ui";
 
+import { AuthLenticularBackground } from "@/features/auth/components/auth-lenticular-background";
 import { toSafeReturnPathname } from "@/features/auth/lib/validation";
 
 export const Route = createFileRoute("/auth/logout")({
@@ -19,8 +20,11 @@ export const Route = createFileRoute("/auth/logout")({
 
 function LogoutPage() {
   return (
-    <div className="flex min-h-svh items-center justify-center bg-background">
-      <Spinner />
+    <div className="relative min-h-svh overflow-hidden bg-background">
+      <AuthLenticularBackground className="absolute inset-0" />
+      <div className="relative z-10 flex min-h-svh items-center justify-center">
+        <Spinner />
+      </div>
     </div>
   );
 }
diff --git a/apps/www/src/routes/auth/sign-up.tsx b/apps/www/src/routes/auth/sign-up.tsx
index 86a091922..eff922362 100644
--- a/apps/www/src/routes/auth/sign-up.tsx
+++ b/apps/www/src/routes/auth/sign-up.tsx
@@ -21,21 +21,17 @@ import { useState } from "react";
 import { useForm } from "react-hook-form";
 import { z } from "zod/v3";
 
-import { VoidhashGradientBackground } from "@/components/voidhash-gradient-background";
+import { AuthLenticularBackground } from "@/features/auth/components/auth-lenticular-background";
 import { signUpWithPassword } from "@/features/auth/lib/auth-api";
 import { saveEmailVerificationState } from "@/features/auth/lib/email-verification-storage";
 import { provisionCurrentUser } from "@/features/auth/lib/provision-user";
+import { WAITLIST_MODE } from "@/lib/waitlist";
 
 const signUpSearchSchema = z.object({
   email: z.string().optional(),
   next: z.string().optional(),
 });
 
-const signUpGradientSettings = {
-  topEnabled: false,
-  effectHeight: 70,
-} as const;
-
 export const Route = createFileRoute("/auth/sign-up")({
   component: SignUpPage,
   validateSearch: zodValidator(signUpSearchSchema),
@@ -127,15 +123,8 @@ function SignUpPage() {
 
   return (
     <div className="relative grid min-h-svh overflow-hidden bg-background lg:grid-cols-12">
-      <VoidhashGradientBackground
-        className="absolute inset-0"
-        controlsQueryParam="signUpGradientControls"
-        controlsStorageKey="voidhash:sign-up-gradient-controls"
-        controlsTitle="Sign Up FX"
-        settings={signUpGradientSettings}
-        settingsStorageKey="voidhash:sign-up-gradient-settings"
-      />
-      <div className="relative z-10 col-span-6 flex flex-col gap-4 bg-background/95 p-6 backdrop-blur-xl  md:p-10 lg:border-r lg:border-border/50">
+      <AuthLenticularBackground className="absolute inset-0" />
+      <div className="relative z-10 col-span-8 flex flex-col gap-4 p-6 md:p-10 bg-linear-to-r from-background to-transparent">
         <div className="flex justify-center gap-2 md:justify-start">
           <Link className="flex gap-2 font-medium" to="/">
             <Logo />
@@ -144,7 +133,15 @@ function SignUpPage() {
         <div className="flex flex-1 items-center justify-center">
           <div className="w-full max-w-sm">
             <div className="flex flex-col items-start gap-2 text-left">
-              <h1 className=" text-3xl">Create your account</h1>
+              <h1 className=" text-3xl">
+                {WAITLIST_MODE ? "Join the waitlist" : "Create your account"}
+              </h1>
+              {WAITLIST_MODE && (
+                <p className="text-muted-foreground">
+                  Create your account to claim your spot. We're onboarding new teams in batches and
+                  will email you as soon as it's your turn.
+                </p>
+              )}
             </div>
             <Form {...form}>
               <form className="flex flex-col gap-6 mt-10" onSubmit={form.handleSubmit(onSubmit)}>
diff --git a/apps/www/src/routes/studio/_authenticated/index.tsx b/apps/www/src/routes/studio/_authenticated/index.tsx
index 6789360aa..5aa8fdda9 100644
--- a/apps/www/src/routes/studio/_authenticated/index.tsx
+++ b/apps/www/src/routes/studio/_authenticated/index.tsx
@@ -2,6 +2,7 @@ import { createFileRoute } from "@tanstack/react-router";
 import { Spinner } from "@voidhash/ui";
 import { useEffect } from "react";
 import { useAuth } from "@/features/studio/components/auth-context";
+import { isOrganizationWaitlisted } from "@/lib/waitlist";
 
 export const Route = createFileRoute("/studio/_authenticated/")({
   ssr: false,
@@ -13,7 +14,12 @@ function RouteComponent() {
   const navigate = Route.useNavigate();
 
   useEffect(() => {
-    const organizationToGoTo = user.organizations[0];
+    // Skip waitlisted organizations so the user lands directly in one they can
+    // actually use. When every organization is waitlisted the surrounding
+    // `WaitlistGate` renders the waitlist screen instead of this route.
+    const organizationToGoTo = user.organizations.find(
+      (organization) => !isOrganizationWaitlisted(organization),
+    );
 
     if (!organizationToGoTo) {
       void navigate({
diff --git a/apps/www/src/routes/studio/_authenticated/route.tsx b/apps/www/src/routes/studio/_authenticated/route.tsx
index fc3e5825d..300b89cb6 100644
--- a/apps/www/src/routes/studio/_authenticated/route.tsx
+++ b/apps/www/src/routes/studio/_authenticated/route.tsx
@@ -8,6 +8,7 @@ import { Spinner } from "@voidhash/ui";
 import { AuthProvider } from "@/features/studio/components/auth-context";
 import { DefaultCatchBoundary } from "@/features/studio/components/default-cache-boundary";
 import { DashboardShellSkeleton } from "@/features/studio/shell/components/skeleton";
+import { WaitlistGate } from "@/features/studio/waitlist/waitlist-gate";
 import { queryKeys } from "@/features/studio/lib/tanstack-query";
 import { getCurrentUser } from "@/features/studio/lib/tanstack-query/users";
 
@@ -143,7 +144,9 @@ function RouteComponent() {
 
   return (
     <AuthProvider user={userQuery.data}>
-      <Outlet />
+      <WaitlistGate>
+        <Outlet />
+      </WaitlistGate>
     </AuthProvider>
   );
 }
diff --git a/apps/www/src/routes/studio/_authenticated/waitlist.tsx b/apps/www/src/routes/studio/_authenticated/waitlist.tsx
new file mode 100644
index 000000000..3f777dc25
--- /dev/null
+++ b/apps/www/src/routes/studio/_authenticated/waitlist.tsx
@@ -0,0 +1,76 @@
+"use client";
+
+import { Link, Navigate, createFileRoute } from "@tanstack/react-router";
+import { Card, CardContent, Logo } from "@voidhash/ui";
+import { Check } from "lucide-react";
+
+import { redirectToSignOut } from "@/features/auth/lib/workos";
+import { useAuth } from "@/features/studio/components/auth-context";
+import { isOrganizationWaitlisted } from "@/lib/waitlist";
+
+export const Route = createFileRoute("/studio/_authenticated/waitlist")({
+  ssr: false,
+  component: WaitlistPage,
+});
+
+/**
+ * The holding screen shown to a signed-in user whose organization is still on
+ * the waitlist. Reached via the gate in the `/studio/_authenticated` layout,
+ * which redirects here instead of rendering Studio.
+ */
+function WaitlistPage() {
+  const { user } = useAuth();
+  const waitlistedOrganization = user.organizations.find(isOrganizationWaitlisted);
+
+  const signOut = () => {
+    redirectToSignOut("/");
+  };
+
+  // Approved (or org-less) users have no business here — `/studio` sends them
+  // on to their organization or to organization creation.
+  if (!waitlistedOrganization) {
+    return <Navigate replace to="/studio" />;
+  }
+
+  return (
+    <div className="flex min-h-svh w-full items-center justify-center p-6 md:p-10">
+      <div className="w-full max-w-sm">
+        <div className="flex flex-col gap-6">
+          <div className="flex justify-center">
+            <Link to="/">
+              <Logo />
+            </Link>
+          </div>
+          <Card className="mt-4 rounded-2xl text-center">
+            <CardContent>
+              <div className="flex flex-col items-center pt-4 pb-6">
+                <div className="flex size-10 items-center justify-center rounded-full bg-muted">
+                  <Check className="size-5 text-muted-foreground" />
+                </div>
+                <h1 className="mt-4 font-medium text-2xl tracking-tight">You're on the list</h1>
+                <p className="mt-2 text-muted-foreground">
+                  {waitlistedOrganization.name} is on the waitlist. We're onboarding new teams in
+                  batches and will email {user.email} as soon as it's your turn.
+                </p>
+              </div>
+              <div className="rounded-lg border border-dashed p-4 text-muted-foreground text-sm">
+                Nothing else to do for now — your account and organization are already set up and
+                waiting for you.
+              </div>
+            </CardContent>
+          </Card>
+          <div className="text-center text-muted-foreground text-sm">
+            Signed in to a wrong account?{" "}
+            <button
+              className="cursor-pointer text-foreground underline underline-offset-4"
+              onClick={signOut}
+              type="button"
+            >
+              Logout
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/www/src/start.ts b/apps/www/src/start.ts
index 3118b0d2f..fb50cc38d 100644
--- a/apps/www/src/start.ts
+++ b/apps/www/src/start.ts
@@ -1,8 +1,40 @@
 import { createCsrfMiddleware, createStart } from "@tanstack/react-start";
 import { authkitMiddleware } from "@workos/authkit-tanstack-react-start";
 
+const localHostnames = new Set(["0.0.0.0", "127.0.0.1", "[::1]", "localhost"]);
+
+const requestOrigin = (request: Request): string => {
+  const internalUrl = new URL(request.url);
+  if (!localHostnames.has(internalUrl.hostname)) {
+    return internalUrl.origin;
+  }
+
+  const forwardedHost = request.headers.get("X-Forwarded-Host");
+  const forwardedProtocol = request.headers.get("X-Forwarded-Proto");
+  if (!(forwardedHost && forwardedProtocol)) {
+    return internalUrl.origin;
+  }
+
+  try {
+    const forwardedUrl = new URL(`${forwardedProtocol}://${forwardedHost}`);
+    return localHostnames.has(forwardedUrl.hostname) ? forwardedUrl.origin : internalUrl.origin;
+  } catch {
+    return internalUrl.origin;
+  }
+};
+
+const isAllowedOrigin = (origin: string, request: Request): boolean => {
+  try {
+    return new URL(origin).origin === requestOrigin(request);
+  } catch {
+    return false;
+  }
+};
+
 const csrfMiddleware = createCsrfMiddleware({
   filter: (ctx) => ctx.handlerType === "serverFn",
+  // Local Cloudflare workers replace the public loopback host in request.url.
+  origin: (origin, ctx) => isAllowedOrigin(origin, ctx.request),
 });
 
 export const startInstance = createStart(() => ({
diff --git a/apps/www/src/styles/globals.css b/apps/www/src/styles/globals.css
index 71a0bbf4a..822e680b2 100644
--- a/apps/www/src/styles/globals.css
+++ b/apps/www/src/styles/globals.css
@@ -7,6 +7,7 @@
 @import "fumadocs-ui/css/preset.css";
 @import "fumadocs-openapi/css/preset.css";
 @import "@voidhash/ui/styles/brand-theme.css";
+@import "../features/docs/styles/globals.css";
 
 @source "../../../../packages/ui";
 @source "../../../../packages/features";
@@ -16,7 +17,7 @@
 @custom-variant dark (&:is(.dark *));
 
 ::selection {
-  background: #0673ff;
+  background: var(--blue-ribbon-600);
   color: #fff;
 }
 
diff --git a/packages/db/src/alchemy-migrations/20260727120000_grandfather_waitlist_organizations/migration.sql b/packages/db/src/alchemy-migrations/20260727120000_grandfather_waitlist_organizations/migration.sql
new file mode 100644
index 000000000..8e76b69db
--- /dev/null
+++ b/packages/db/src/alchemy-migrations/20260727120000_grandfather_waitlist_organizations/migration.sql
@@ -0,0 +1,16 @@
+-- The `waitlist` internal feature flag defaults to ON so that every newly
+-- created organization is held on the waitlist. Grandfather every organization
+-- that already exists at the time of this migration by writing an explicit
+-- `false` override, so the flag never locks out current customers.
+--
+-- The id mirrors `generateId("internalFeatureFlagOverride")`: the `iff_ovr_`
+-- prefix plus 24 characters, which fits the varchar(36) primary key.
+INSERT INTO "internal_feature_flag_override" ("id", "organization_id", "flag_key", "enabled", "created_at")
+SELECT
+	'iff_ovr_' || substr(replace(gen_random_uuid()::text, '-', ''), 1, 24),
+	"organization"."id",
+	'waitlist',
+	false,
+	now()
+FROM "organization"
+ON CONFLICT DO NOTHING;
diff --git a/packages/rpc/src/internalFeatureFlags.ts b/packages/rpc/src/internalFeatureFlags.ts
index 4c44a0b10..fc12974ac 100644
--- a/packages/rpc/src/internalFeatureFlags.ts
+++ b/packages/rpc/src/internalFeatureFlags.ts
@@ -72,6 +72,18 @@ export const INTERNAL_FEATURE_FLAGS = {
       "The durable Pi agent session in the paywall designer with server-executed workspace tools.",
     defaultEnabled: true,
   },
+  // Inverted polarity: enabled means *blocked*. Defaults to on so every newly
+  // created organization lands on the waitlist; overwatch grants access by
+  // setting the override to `false`. Existing organizations were grandfathered
+  // in by the `20260727120000_grandfather_waitlist_organizations` migration.
+  // Flip `defaultEnabled` to `false` to open signups to everyone.
+  waitlist: {
+    key: "waitlist",
+    name: "Waitlist",
+    description:
+      "Hold this organization on the waitlist: members can sign up and create the org but land on the waitlist screen instead of Studio. Turn OFF to grant access.",
+    defaultEnabled: true,
+  },
 } as const satisfies Record<string, InternalFeatureFlagDefinition>;
 
 /** All internal feature flag definitions as a list (e.g. for admin listings). */
diff --git a/packages/ui/components/ui/navigation-menu.tsx b/packages/ui/components/ui/navigation-menu.tsx
index e6e360f26..cea094243 100644
--- a/packages/ui/components/ui/navigation-menu.tsx
+++ b/packages/ui/components/ui/navigation-menu.tsx
@@ -1,19 +1,32 @@
-import type * as React from "react";
-
-import { NavigationMenu as NavigationMenuPrimitive } from "radix-ui";
+import { NavigationMenu as NavigationMenuPrimitive } from "@base-ui/react/navigation-menu";
 import { cva } from "class-variance-authority";
 import { ChevronDownIcon } from "lucide-react";
+import { isValidElement, type ReactElement } from "react";
 
 import { cn } from "../../lib/utils";
 
+type NavigationMenuProps = NavigationMenuPrimitive.Root.Props &
+  Pick<NavigationMenuPrimitive.Positioner.Props, "align" | "side" | "sideOffset"> & {
+    /**
+     * Class applied to the portaled popup. The popup renders outside the
+     * trigger's subtree, so pass `dark` here to theme it independently.
+     */
+    popupClassName?: string;
+  };
+
+/**
+ * Navigation menu root. Renders its own portaled positioner, so consumers only
+ * compose `NavigationMenuList` and `NavigationMenuItem` as children.
+ */
 function NavigationMenu({
+  align = "start",
+  side,
+  sideOffset,
   className,
   children,
-  viewport = true,
+  popupClassName,
   ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.Root> & {
-  viewport?: boolean;
-}) {
+}: NavigationMenuProps) {
   return (
     <NavigationMenuPrimitive.Root
       className={cn(
@@ -21,32 +34,30 @@ function NavigationMenu({
         className,
       )}
       data-slot="navigation-menu"
-      data-viewport={viewport}
       {...props}
     >
       {children}
-      {viewport && <NavigationMenuViewport />}
+      <NavigationMenuPositioner
+        align={align}
+        popupClassName={popupClassName}
+        side={side}
+        sideOffset={sideOffset}
+      />
     </NavigationMenuPrimitive.Root>
   );
 }
 
-function NavigationMenuList({
-  className,
-  ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.List>) {
+function NavigationMenuList({ className, ...props }: NavigationMenuPrimitive.List.Props) {
   return (
     <NavigationMenuPrimitive.List
-      className={cn("group flex flex-1 list-none items-center justify-center gap-1", className)}
+      className={cn("group flex flex-1 list-none items-center justify-center", className)}
       data-slot="navigation-menu-list"
       {...props}
     />
   );
 }
 
-function NavigationMenuItem({
-  className,
-  ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.Item>) {
+function NavigationMenuItem({ className, ...props }: NavigationMenuPrimitive.Item.Props) {
   return (
     <NavigationMenuPrimitive.Item
       className={cn("relative", className)}
@@ -57,38 +68,36 @@ function NavigationMenuItem({
 }
 
 const navigationMenuTriggerStyle = cva(
-  "group inline-flex h-9 w-max items-center justify-center rounded-md bg-background px-4 py-2 font-medium text-sm outline-ring/50 ring-ring/10 transition-[color,box-shadow] hover:bg-accent hover:text-accent-foreground focus:bg-accent focus:text-accent-foreground focus-visible:outline-1 focus-visible:ring-4 disabled:pointer-events-none disabled:opacity-50 data-[state=open]:bg-accent/50 data-[state=open]:text-accent-foreground data-[state=open]:focus:bg-accent data-[state=open]:hover:bg-accent dark:outline-ring/40 dark:ring-ring/20",
+  "group/navigation-menu-trigger inline-flex h-9 w-max items-center justify-center rounded-lg px-2.5 py-1.5 font-medium text-sm outline-none ring-ring/50 transition-all hover:bg-muted focus:bg-muted focus-visible:outline-1 focus-visible:ring-3 disabled:pointer-events-none disabled:opacity-50 data-popup-open:bg-muted/50 data-popup-open:hover:bg-muted",
 );
 
 function NavigationMenuTrigger({
   className,
   children,
   ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.Trigger>) {
+}: NavigationMenuPrimitive.Trigger.Props) {
   return (
     <NavigationMenuPrimitive.Trigger
-      className={cn(navigationMenuTriggerStyle(), "group", className)}
+      className={cn(navigationMenuTriggerStyle(), className)}
       data-slot="navigation-menu-trigger"
       {...props}
     >
       {children}{" "}
       <ChevronDownIcon
         aria-hidden="true"
-        className="relative top-[1px] ml-1 size-3 transition duration-75 group-data-[state=open]:rotate-180"
+        className="relative top-px ml-1 size-3 transition duration-300 group-data-popup-open/navigation-menu-trigger:rotate-180"
       />
     </NavigationMenuPrimitive.Trigger>
   );
 }
 
-function NavigationMenuContent({
-  className,
-  ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.Content>) {
+function NavigationMenuContent({ className, ...props }: NavigationMenuPrimitive.Content.Props) {
   return (
     <NavigationMenuPrimitive.Content
       className={cn(
-        "data-[motion^=from-]:fade-in data-[motion^=to-]:fade-out data-[motion=from-end]:slide-in-from-right-52 data-[motion=from-start]:slide-in-from-left-52 data-[motion=to-end]:slide-out-to-right-52 data-[motion=to-start]:slide-out-to-left-52 top-0 left-0 w-full p-2 pr-2.5 data-[motion^=from-]:animate-in data-[motion^=to-]:animate-out md:absolute md:w-auto",
-        "group-data-[viewport=false]/navigation-menu:data-[state=closed]:zoom-out-95 group-data-[viewport=false]/navigation-menu:data-[state=open]:zoom-in-95 group-data-[viewport=false]/navigation-menu:data-[state=open]:fade-in-0 group-data-[viewport=false]/navigation-menu:data-[state=closed]:fade-out-0 **:data-[slot=navigation-menu-link]:focus:outline-none **:data-[slot=navigation-menu-link]:focus:ring-0 group-data-[viewport=false]/navigation-menu:top-full group-data-[viewport=false]/navigation-menu:mt-1.5 group-data-[viewport=false]/navigation-menu:overflow-hidden group-data-[viewport=false]/navigation-menu:rounded-md group-data-[viewport=false]/navigation-menu:border group-data-[viewport=false]/navigation-menu:bg-popover group-data-[viewport=false]/navigation-menu:text-popover-foreground group-data-[viewport=false]/navigation-menu:shadow group-data-[viewport=false]/navigation-menu:duration-200 group-data-[viewport=false]/navigation-menu:data-[state=closed]:animate-out group-data-[viewport=false]/navigation-menu:data-[state=open]:animate-in",
+        "h-full w-auto p-1 ease-[cubic-bezier(0.22,1,0.36,1)] **:data-[slot=navigation-menu-link]:focus:outline-none **:data-[slot=navigation-menu-link]:focus:ring-0",
+        "transition-[opacity,transform,translate] duration-[0.35s] data-ending-style:opacity-0 data-starting-style:opacity-0",
+        "data-starting-style:data-[activation-direction=left]:-translate-x-1/2 data-ending-style:data-[activation-direction=right]:-translate-x-1/2 data-ending-style:data-[activation-direction=left]:translate-x-1/2 data-starting-style:data-[activation-direction=right]:translate-x-1/2",
         className,
       )}
       data-slot="navigation-menu-content"
@@ -97,66 +106,118 @@ function NavigationMenuContent({
   );
 }
 
-function NavigationMenuViewport({
+type NavigationMenuPositionerProps = NavigationMenuPrimitive.Positioner.Props & {
+  /** Class applied to the popup rendered inside the positioner. */
+  popupClassName?: string;
+};
+
+/**
+ * Portals and positions the shared popup that every `NavigationMenuContent`
+ * animates through. Rendered automatically by {@link NavigationMenu}.
+ */
+function NavigationMenuPositioner({
   className,
+  popupClassName,
+  side = "bottom",
+  sideOffset = 8,
+  align = "start",
+  alignOffset = 0,
   ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.Viewport>) {
+}: NavigationMenuPositionerProps) {
   return (
-    <div className={cn("absolute top-full left-0 isolate z-50 flex justify-center")}>
-      <NavigationMenuPrimitive.Viewport
+    <NavigationMenuPrimitive.Portal>
+      <NavigationMenuPrimitive.Positioner
+        align={align}
+        alignOffset={alignOffset}
         className={cn(
-          "data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-90 relative mt-1.5 h-[var(--radix-navigation-menu-viewport-height)] w-full origin-top-center overflow-hidden rounded-md border bg-popover text-popover-foreground shadow data-[state=closed]:animate-out data-[state=open]:animate-in md:w-[var(--radix-navigation-menu-viewport-width)]",
+          "isolate z-50 h-(--positioner-height) w-(--positioner-width) max-w-(--available-width) transition-[top,left,right,bottom] duration-300 ease-[cubic-bezier(0.22,1,0.36,1)] data-instant:transition-none",
           className,
         )}
-        data-slot="navigation-menu-viewport"
+        data-slot="navigation-menu-positioner"
+        side={side}
+        sideOffset={sideOffset}
         {...props}
-      />
-    </div>
+      >
+        <NavigationMenuPrimitive.Popup
+          className={cn(
+            "data-ending-style:scale-90 data-starting-style:scale-90 relative h-(--popup-height) w-(--popup-width) origin-(--transform-origin) rounded-lg bg-popover/70 text-popover-foreground shadow-md outline-none ring-1 ring-foreground/10 backdrop-blur-md transition-[opacity,transform,width,height,scale,translate] duration-[0.35s] ease-[cubic-bezier(0.22,1,0.36,1)] data-ending-style:opacity-0 data-starting-style:opacity-0 data-ending-style:duration-150",
+            popupClassName,
+          )}
+          data-slot="navigation-menu-popup"
+        >
+          <NavigationMenuPrimitive.Viewport
+            className="relative size-full overflow-hidden"
+            data-slot="navigation-menu-viewport"
+          />
+        </NavigationMenuPrimitive.Popup>
+      </NavigationMenuPrimitive.Positioner>
+    </NavigationMenuPrimitive.Portal>
   );
 }
 
+type NavigationMenuLinkProps = NavigationMenuPrimitive.Link.Props & {
+  /** Backwards-compat alias for `render` — composes the link with its child. */
+  asChild?: boolean;
+};
+
+const navigationMenuLinkStyle = cva(
+  "flex items-center gap-2 rounded-lg p-2 text-sm outline-none ring-ring/50 transition-all hover:bg-muted focus:bg-muted focus-visible:outline-1 focus-visible:ring-3 data-active:bg-muted/50 data-active:focus:bg-muted data-active:hover:bg-muted in-data-[slot=navigation-menu-content]:rounded-md [&_svg:not([class*='size-'])]:size-4",
+);
+
 function NavigationMenuLink({
+  asChild,
   className,
+  children,
+  render,
   ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.Link>) {
+}: NavigationMenuLinkProps) {
+  if (asChild && isValidElement(children)) {
+    return (
+      <NavigationMenuPrimitive.Link
+        className={cn(navigationMenuLinkStyle(), className)}
+        data-slot="navigation-menu-link"
+        render={children as ReactElement<Record<string, unknown>>}
+        {...props}
+      />
+    );
+  }
   return (
     <NavigationMenuPrimitive.Link
-      className={cn(
-        "flex flex-col gap-1 rounded-sm p-2 text-sm outline-ring/50 ring-ring/10 transition-[color,box-shadow] hover:bg-accent hover:text-accent-foreground focus:bg-accent focus:text-accent-foreground focus-visible:outline-1 focus-visible:ring-4 data-[active=true]:bg-accent/50 data-[active=true]:text-accent-foreground data-[active=true]:focus:bg-accent data-[active=true]:hover:bg-accent dark:outline-ring/40 dark:ring-ring/20 [&_svg:not([class*='size-'])]:size-4 [&_svg:not([class*='text-'])]:text-muted-foreground",
-        className,
-      )}
+      className={cn(navigationMenuLinkStyle(), className)}
       data-slot="navigation-menu-link"
+      render={render}
       {...props}
-    />
+    >
+      {children}
+    </NavigationMenuPrimitive.Link>
   );
 }
 
-function NavigationMenuIndicator({
-  className,
-  ...props
-}: React.ComponentProps<typeof NavigationMenuPrimitive.Indicator>) {
+function NavigationMenuIndicator({ className, ...props }: NavigationMenuPrimitive.Icon.Props) {
   return (
-    <NavigationMenuPrimitive.Indicator
+    <NavigationMenuPrimitive.Icon
       className={cn(
-        "data-[state=hidden]:fade-out data-[state=visible]:fade-in top-full z-[1] flex h-1.5 items-end justify-center overflow-hidden data-[state=hidden]:animate-out data-[state=visible]:animate-in",
+        "top-full z-1 flex h-1.5 items-end justify-center overflow-hidden",
+        "data-ending-style:opacity-0 data-starting-style:opacity-0 transition-opacity",
         className,
       )}
       data-slot="navigation-menu-indicator"
       {...props}
     >
       <div className="relative top-[60%] h-2 w-2 rotate-45 rounded-tl-sm bg-border shadow-md" />
-    </NavigationMenuPrimitive.Indicator>
+    </NavigationMenuPrimitive.Icon>
   );
 }
 
 export {
   NavigationMenu,
-  NavigationMenuList,
-  NavigationMenuItem,
   NavigationMenuContent,
-  NavigationMenuTrigger,
-  NavigationMenuLink,
   NavigationMenuIndicator,
-  NavigationMenuViewport,
+  NavigationMenuItem,
+  NavigationMenuLink,
+  NavigationMenuList,
+  NavigationMenuPositioner,
+  NavigationMenuTrigger,
+  navigationMenuLinkStyle,
   navigationMenuTriggerStyle,
 };
diff --git a/packages/ui/styles/brand-theme.css b/packages/ui/styles/brand-theme.css
index c43762d05..95c5d6729 100644
--- a/packages/ui/styles/brand-theme.css
+++ b/packages/ui/styles/brand-theme.css
@@ -76,17 +76,17 @@
   --pistachio-800: oklch(48.406% 0.1156 124.206);
   --pistachio-900: oklch(42.799% 0.0987 124.914);
   --pistachio-950: oklch(29.285% 0.0732 125.867);
-  --zinc-50: oklch(98.51% 0 89.876);
-  --zinc-100: oklch(96.743% 0 286.375);
-  --zinc-200: oklch(91.973% 0 286.32);
-  --zinc-300: oklch(87.111% 0 286.286);
-  --zinc-400: oklch(70.566% 0 286.025);
-  --zinc-500: oklch(55.237% 0 285.834);
-  --zinc-600: oklch(44.263% 0 285.647);
-  --zinc-700: oklch(37.072% 0 285.719);
-  --zinc-800: oklch(27.394% 0 286.033);
-  --zinc-900: oklch(21.033% 0 285.885);
-  --zinc-950: oklch(17.077% 0 285.823);
+  --zinc-50: oklch(98.5% 0 0);
+  --zinc-100: oklch(96.7% 0.001 286.375);
+  --zinc-200: oklch(92% 0.004 286.32);
+  --zinc-300: oklch(87.1% 0.006 286.286);
+  --zinc-400: oklch(71.2% 0.013 286.1);
+  --zinc-500: oklch(55.2% 0.016 285.938);
+  --zinc-600: oklch(44.2% 0.017 285.786);
+  --zinc-700: oklch(37.03% 0.0119 285.81);
+  --zinc-800: oklch(27.4% 0.006 286.033);
+  --zinc-900: oklch(21% 0.006 285.885);
+  --zinc-950: oklch(14.1% 0.005 285.823);
   --black: oklch(0% 0 0);
   --white: oklch(100% 0 0);
   --background: var(--white);
@@ -136,7 +136,7 @@
   --surface-muted: var(--zinc-800);
   --card: var(--zinc-900);
   --card-foreground: var(--zinc-50);
-  --panel: #141414;
+  --panel: var(--zinc-900);
   --popover: var(--zinc-950);
   --popover-foreground: var(--zinc-50);
   --primary: var(--blue-ribbon-600);

From d1425842adb846761f852d2cb0ce9226f5ad0179 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 18:09:21 +0200
Subject: [PATCH 123/129] feat: small perf and visual improvements

---
 .../www/src/features/www/hero/hero-shader.tsx |  43 +++++-
 .../assets/agent-icons/antigravity.png        | Bin 0 -> 9026 bytes
 .../assets/agent-icons/claude-code.png        | Bin 0 -> 21744 bytes
 .../www/landing/assets/agent-icons/codex.png  | Bin 0 -> 17775 bytes
 .../www/landing/assets/agent-icons/cursor.png | Bin 0 -> 6164 bytes
 .../landing/assets/agent-icons/opencode.png   | Bin 0 -> 10326 bytes
 .../features/www/landing/asteroids/game.tsx   | 118 +++++++++++----
 .../src/features/www/landing/landing-page.tsx |   1 -
 .../landing/paywall-build/paywall-build.tsx   |   8 +-
 .../paywall-build/use-transcript-playback.ts  |   6 +-
 .../landing/sections/agent-compatibility.tsx  |  57 +++++++
 .../www/landing/sections/analytics.tsx        |   4 +-
 .../www/landing/sections/asteroids.tsx        |  25 ++-
 .../src/features/www/landing/sections/crm.tsx |   4 +-
 .../www/landing/sections/developers.tsx       |   4 +-
 .../www/landing/sections/experimentation.tsx  | 142 ++++++++++--------
 .../www/landing/sections/get-started.tsx      |   5 +-
 .../features/www/landing/sections/navbar.tsx  |   6 +-
 .../www/landing/sections/paywalls.tsx         |   5 +-
 .../features/www/landing/sections/problem.tsx |   2 +-
 .../src/features/www/pricing/pricing-page.tsx |   2 +
 21 files changed, 316 insertions(+), 116 deletions(-)
 create mode 100644 apps/www/src/features/www/landing/assets/agent-icons/antigravity.png
 create mode 100644 apps/www/src/features/www/landing/assets/agent-icons/claude-code.png
 create mode 100644 apps/www/src/features/www/landing/assets/agent-icons/codex.png
 create mode 100644 apps/www/src/features/www/landing/assets/agent-icons/cursor.png
 create mode 100644 apps/www/src/features/www/landing/assets/agent-icons/opencode.png
 create mode 100644 apps/www/src/features/www/landing/sections/agent-compatibility.tsx

diff --git a/apps/www/src/features/www/hero/hero-shader.tsx b/apps/www/src/features/www/hero/hero-shader.tsx
index e03849fea..00d78544c 100644
--- a/apps/www/src/features/www/hero/hero-shader.tsx
+++ b/apps/www/src/features/www/hero/hero-shader.tsx
@@ -2,7 +2,7 @@
 
 import { Canvas, useFrame, useThree } from "@react-three/fiber";
 import { useReducedMotion } from "motion/react";
-import { useEffect, useMemo, useRef } from "react";
+import { useEffect, useMemo, useRef, useState } from "react";
 import * as THREE from "three";
 
 const SVG_WIDTH = 1654;
@@ -243,16 +243,19 @@ export type LenticularShaderSettings = {
 
 function HeroShaderPlane({
   animateIdle,
+  onRevealed,
   settings,
   usePerlinSource,
 }: {
   animateIdle: boolean;
+  onRevealed: () => void;
   settings: Required<LenticularShaderSettings>;
   usePerlinSource: boolean;
 }) {
   const { gl, size } = useThree();
   const materialRef = useRef<THREE.ShaderMaterial>(null);
   const elapsedRef = useRef(0);
+  const revealedRef = useRef(false);
 
   // Seed values only. R3F clones the `uniforms` prop onto the material, so writing back to this
   // object would be a no-op for scalars — every runtime update below goes through the material.
@@ -306,9 +309,14 @@ function HeroShaderPlane({
     if (!material) {
       return;
     }
-    elapsedRef.current += delta;
+    // Clamped so resuming a paused frameloop (or a long first frame) can't jump the drift.
+    elapsedRef.current += Math.min(delta, 1 / 30);
     const progress = Math.min(1, elapsedRef.current / REVEAL_SECONDS);
     material.uniforms.uReveal.value = 1 - (1 - progress) ** 3;
+    if (progress >= 1 && !revealedRef.current) {
+      revealedRef.current = true;
+      onRevealed();
+    }
     if (animateIdle) {
       material.uniforms.uTime.value = elapsedRef.current;
     }
@@ -338,6 +346,9 @@ export function HeroShader({
   source?: HeroShaderSource;
 }) {
   const prefersReducedMotion = useReducedMotion();
+  const containerRef = useRef<HTMLDivElement>(null);
+  const [visible, setVisible] = useState(true);
+  const [revealed, setRevealed] = useState(false);
   const resolvedSettings = {
     angleDegrees: settings.angleDegrees ?? DEFAULT_ANGLE_DEGREES,
     centerX: settings.centerX ?? DEFAULT_CENTER_X,
@@ -346,12 +357,35 @@ export function HeroShader({
     strength: settings.strength ?? DEFAULT_STRENGTH,
   };
 
+  useEffect(() => {
+    const container = containerRef.current;
+    if (!container) {
+      return;
+    }
+
+    const observer = new IntersectionObserver(([entry]) => setVisible(entry.isIntersecting), {
+      rootMargin: "160px",
+    });
+    observer.observe(container);
+    return () => observer.disconnect();
+  }, []);
+
   return (
-    <div aria-hidden className="pointer-events-none h-full w-full overflow-hidden bg-zinc-950">
+    <div
+      aria-hidden
+      className="pointer-events-none h-full w-full overflow-hidden bg-zinc-950"
+      ref={containerRef}
+    >
       <Canvas
         className="h-full w-full"
         dpr={[1, 2]}
-        gl={{ alpha: false, antialias: true, powerPreference: "high-performance" }}
+        // The drift is invisible while the canvas is offscreen, so the render loop only runs in
+        // view — pages with two of these shaders would otherwise pay for both on every frame of
+        // the whole scroll. The reveal still runs to completion so a paused canvas never resumes
+        // mid-fade. Antialiasing is off because the scene is a single full-viewport quad — MSAA
+        // only touches geometry edges and there are none to smooth.
+        frameloop={visible || !revealed ? "always" : "never"}
+        gl={{ alpha: false, antialias: false, powerPreference: "high-performance" }}
         onCreated={({ gl }) => {
           gl.outputColorSpace = THREE.SRGBColorSpace;
           gl.setClearColor(BACKGROUND_HEX, 1);
@@ -359,6 +393,7 @@ export function HeroShader({
       >
         <HeroShaderPlane
           animateIdle={!prefersReducedMotion}
+          onRevealed={() => setRevealed(true)}
           settings={resolvedSettings}
           usePerlinSource={source === "perlin"}
         />
diff --git a/apps/www/src/features/www/landing/assets/agent-icons/antigravity.png b/apps/www/src/features/www/landing/assets/agent-icons/antigravity.png
new file mode 100644
index 0000000000000000000000000000000000000000..83e7e53703ec1b7df74484eb4cf16009d91325b2
GIT binary patch
literal 9026
zcmZ{K2UJttw)IH?LJv(kL^`NcrIXO4Hz|Vj-g}YILI6b&kR~9afC^Hjh@jL2K|_(E
zpeP80j?#OFhxhw#`QLxv8DnRyGuNDJt(~(^GIDkjjSMuYDcC3g0HD^^Qa3)g*gpeC
zdj8shbm%=dP&XBQ6#%GBr95^ZIX_1@X&LJSK)Ap;?+ySQ{^2hIK!`X1{I&-G`9}c2
z?Ej?chT?eu?P8(rs;>`-ock~U3StBPWB{EHB#8ZAz6MALfcygo1He5G0Qxt_;N1Q>
zw9dyL&0iK$2>P3SjunFc#l{vw{_X#fMS#SW&kec1)~z4_pk(+nK)~ZCEC2w0>|tsV
zY@x3w@8str>fr3>=pu^t@&BU&6w&hMu8&Kw0|M>i?HeSIR^s^wL;l?V1B>w>{y_=$
zQsS}DH$tfS1-c-lMa4zMd5{zc1VS;;*;U?HUE^>0`I!=rdvLJ7yqH*MXsBqYl&D{z
zo0x>0oSc}rq?n}Sm2<|GpfKNH2lN%+Al|={{4<ZbOOR8bhkvk#pD*H1UI$0NkYFVq
zo<D{Db^O(5u!rlvEBOZfJ+1Qziv5X*Nr;Mz{WqBl+T;I_{fYb~`^UWgDyR4-nY@Lu
zOOT&;$e*^5GLnk_sPO-Q|L*TE!L9!$_)qYE3;xYF^YsWu{<Fsag8xJHr(1a=544N-
zEp-nc7vG>iy<L+y7yj4Ce^pxipUVG;{BNb2pSNG2iNAxB3sU0mV*dgC%~llqbM^k?
zYW}rU{(+va6(ohC*uT~tk^=5zbAA(WKhRcJF-3z`Y{=6%%)?HbBOW{*|M8jYi_WNx
zcD8f(=0$FMygfVQ<DH>9QrI%MmZ~VEj1g*`#dz@<f-Eg9j;D+#o`;DeBNpz|Bf;Vg
z`N+cEPDX@Kb~g=tUGDE+{uCVAwibQjs`>s~|8oE8Zr923+v<{%)RD8jlgXpW&%Eh;
z{1>z?r&%Csl^tU`!HFdFlze{!c&RS10agArnh*;EsXM)4Tg6vTyZ7V|wgN{l((EB~
zVS>@N59LLrVY`QYE?c`9inGrxs_K}F^((JfNc(LW>`J{=cx=qsI=cMfvC4cy(x-dt
zFTSYdiZW8jO|EIrToR;Gi=b(fKgpbtt+~e#Zd-iw@`YaXw20)2n!+IRGGx|uJ@4(t
z*Y_qRDZbT&jKaEEweFs*OXhBYCu2(HqPIErBF&#%LqDeD_?)WwW?^H{%^+}n_L<)F
z6fG(JDs2Z5gi4DjpX(;0<wiy#B%$5P#Jui737+6D>n#_gV%!AQb8Bm<bBcz_-V!S+
z)>kydxtk63I3pf2h_N3T;=IWbobTD5E#nLPzIpDj?=JrcW9GW^TbU;fnhoQW7&G|_
z+H=43!^?uWGyD1Tj(L&PFI1q-o(MMeC8_g52fv2_C5zy*TOHwW=wzjtSHWm==*Wt`
zpe2w0NNloayI0d~t31U?SIJ>+Ha5;a=D_Ib##KLJkN}ADriJo-#=75R?F%LM=Tf<p
znnJ}yOByt^*M0IwY%Zt*l!{6POy#Mm1p#3qS%;d0kb&zF($y6Ff=cxya2ahDDDBA7
zj#uc~>4(q&MhIHEj?$AJ_A}C0YQIuTylFLArtsC-^BMUihU$V;?FD(V^w&$th1yX*
ze$fsD=YVNJ*|-KfBZe9{c-`7%YJWdorex^XfJ)UN!}<a^&|$LUqukZ%>Yjz80-+13
zC`JeIHCKBiv~bU4_v_Y3aw_g>X1{If{W*qpW>Vh@w~lWfLhZT{o2`5LOi3t0SZ9E(
z&Y&o$a+@L24UI;d*!i83zA>y|Shu=cEk%fd{&=`#Gat4p(=)dT-B9+;gKp2>&ZIt+
zJUGS^I0<8E*vTq#W{jeb!59O?`bwOhn=kvoZAK#W7dN}rnTA-_DO`(iqHTGBG7Y+V
zD=O-sK;M8X8g7OFjT*<?WOXXGYsFPp`@!NAx$%Xz;M3OtD#FB3`EmmJt|e0qx{quB
zs?{rcY{}O1mKdC)|6E0T%Sz(*(B<AdJrkm@pg<`(fh6HZ?}HySAoS%RKl!Y1g&w{S
zU0^za*3yg*WyPcQs=y_|p7Qkc^g6m2q|C-?_Hr{H87q^2zOMIk_I&J*GLg>|AT&~}
z%PCIp<$`2a^aF)VMs7+tgJT?9fcqnhvW|YUj@#sEw_Ap{#;C3?l&ft<X<o*1#W?a>
z*bm(TTgU|jHCnfaJgJj6o@B9ho|q|-C_OSUi}?=cjdWwOH(+u%18vI=^inI|(rBtb
zA$YQv4W})^a%z2EnUXPxV1%Spg!XZlGTS>@C0Ks(zPWSdUhsm>O%UJHt@yz;=b|5G
zWe@u4VmLJo52kl`m><Z#7F}?>!scxnQY<^y)jz|t$F)0`?-cR_#h}GT`@8QKYC{rI
zdr?D@U*Sd_sc%WS%O$A$lY*TVOyr`+@?vZXEBZK|F5M2NI$K`HaVrm0BUPi%y0zqD
z_=Mu7VAXo3)m(S;N6xU<EIlblo||`-T;z;)_?K=oQHJv*TWY*C0}JK7AN;Cam|fkL
zOcuDqs&sZOr)e{PL{>7JxvYJtq=!X*%O(H<a1(1)y?KM!tzJtnbVZD~&CbOsZGPr7
z*<5kT^5p^DG?x+gOl-VT&!8{c5d8V&Opc4mh*>Ov+lhZ@z1RPckvK)D@DRQyTqf^P
z=8)*f)JSUe^~N_F!^m0ro8zYGC58FyK^_O6a^nK~v<g0w_HH7!nmw#o>dS#j9V_O1
zyK!br_Reu=i|{4CX89{aL-w(TYtky*tsJNQ+Kd6|N?MA#ImNzt4Y=46eO}mp*CB|!
zkmd}7)(LMak#lFQxDBiE56&i1)LROfw-#yI?u{aaZ+?~`J$+KgvltIOR!;-9k%sdD
zDBc->Sq?hL24p~eg`%5$m3K{-0yS$Z9>--@j#GdvT}^aDtvlm>1JOhCZ(8P7E+O{N
zOR+Xe5BWg4{2;7A7wl~K$mH-xI^(WH#3LPYI)ytxKErrq&<nDoQ!1N;w<wGe&2Xf4
zNXqr~w4kD!FmVF^^v1PfR0`~jdW1^n<sdJ=7H%Wt^l4UfIMV+nt>F|q3D+tY;Qxkk
z@e~voTm1w6EH=rn-(@b!i*&Y0kalKSZiS8Z#T%ofp?KioX>XNCS1vPSk;O+W&8UyY
z?&Du4>0mV0u9aJP=;&9U$1EdYSg}W@LyDoXX{ov10FBX8Bezu;7L(C`IQyXcwR6Dg
zuQUTnu+eWyh;Z1H*Ug?c1=;fW`R122pPg7kHWK&~?PJW>YZ+Qq`LVS4GH6UTv><nd
zteV*odih~!Dpk+83DeU6IZh#eOL(Cz<?M52nqFcPMhgXybp3An-G;z=oa~61>lW3Z
zNW@?5xfPN=#7tfUf#E!9$+3pueI0Pyq9o^jU_i8OmC$zgnSox&&^~_XzS#%^)+c)M
z{zL2aFLc6RzZjG3g8-VT9S3E7nGMueyi>d|%f?o_@Cg)GRZL5KwZ{-_2d0Gri{;SE
z0bCIzel~JKZ<%xpjrKGlHikg>Sy&FOu0sogzs1FlR_W>w1fb(e5BT=UY}Bue2p~L3
z7k3^pOHR<@e;o)wBI%V|C(|wl2k<q~4keI@F0bXd%|*;rb<@L!$Ej6D7!XebT*i`a
z>hf##Qej^mv3!kN7&?OR1KQZZRGmT!JQA4)0JPjyAUstOj;3ab4=Y890S47*p|Bg%
zY%eQyzv*^Y#K+H8O*8T#E&_Uuiroao)zMccuLFD2^hU(rP^Ogv$oNQzt2Ahos<6Y2
zT$$bo1ZOP;12{HSdF5oLEItsqQECf!1gAHz2}qTS`JPb>{o^=Yia5!9CB#v=nU8Tc
z0ZfVWGQR{&WM`%1Bx|Luqz87#EW|;Lz#_`n3}_+!9fwgkpbuh?eR!MX8Q|V2ajTR9
z4-As+w}E}Nm3a^m*Q_C|FVsz$7UQX$O#*-2S2_67enJkq(BH9JjrYA(m6l$c^sQ@K
zkAgvZ9djF`65C|BCJ3S;haPdbqH&Z!8Su$k;e)y7Z)iauFgqzo9HoLsy2p_X+<WYw
zk-{hLj7W@ZjC9Y6oLg_Nq9JX*2?BSWm0yYb68E`L5@wXtGMQnY4PaRVVluEqH4+xu
zA{MbiRwELl4Knief>_!?NW&2yRtMFJqbSq{I}3r`dGn6$NqBv~lxmn0?ENf?P3(--
zMi)R_^b)g7LR67Wtd(z%#8EL~MeJK9HCZJgXfix2z52L{2rvV}v*C}f)twO3mElGt
z2GD{p1Mhg$0TwI_RBGZs6u5y;P&7W2g8>;K4!?E4MyGXmE2*B=U6@F1L-FA>4yxUZ
zVxiw@(xc!!cO;FdIXF715OqlsU>fp~bQPv!W@_+_L*9dtLc_5rcnp^J0c^uc|I@MF
zwMX$f)>p5JoYk)}+rV1O0z>J6O;k;QmLyABnf>~`!b>1iP$`&|WSoGZSApe=05JG9
z5C@~9A$H9;9ngVbxji2|$E=*v1?O{L15se!a1J|H)>wWFJbCSP`0ln?a|-#mHbB)&
zQy?P{Qf*!?W${6c_;pKaT2luuM6L{AxrNACV1asgXe_9On=%F@csm_nVdU921!hi`
z&!i3o_me@%BVHU>GxcW>er)-61go5zf6B5Dr!K69Z&}d2F}YIK%UZ-@-t0QoyuvLH
z2GGMJQIt&f<Rr>caPZ|q_i(T~AZz{UhKjUc${C#UPS^V?L>y{G5Qq$KZP=hA*8-Ne
zRAL#s(7Wrbfm`{S*|Qr8QJGaH!0ySG*FC=0aCKK@fcFflRFS(`4Nbt0AmC60IkXRO
z0t}ey1OfR{C2b%wW{n)lMpDT>{LF5JoTaAm&Yf^Ncx0Ney2ry}ffsR0&f<AFiMbh7
zqQ9?dC55%F@&Xf!Lf)($y7y0vpK2h;49y2`J!iFV_8Y~JVwb5|@Uk>`S!^HRMkZ&&
zA>PsSNrR*mNQS&4dl^GvK|GLCAHd?hNXfy{kaxa*b{gMkE3<fyxIv(%-lB0cEBuuG
zlr3h7)wsgN^fU_adz}aY!|`v<)*ZWWzevAqX#?RKmqD_IS_`SC_7<q;5FKjTi$^r^
z(LWXz!bl^tUGpg5P41+HTy9nJCaaTsQnr;9#^!X0&LySXm=@=c1hdm?#3WcD-fA60
z)r`?Nz44k%dHvUk4w%{2@IaFai~D^t%Eod9t7k9v7#wRj?JtTgbc$4FQZd7NVkZDI
z5+^dJiUu9SCNj^?DgL21MB?|7RUYh`?m$!hv^}&ces@v}8LO0rg$`m+__rs~Lnlcv
z>?*gmJ?Y(dmI)JvrLYSlw1JWd4}twhOs3Ble;X~&H6r35Jj8psJjUueg|p?_82i@B
zW$yG=!fmHoVY3$s=Q98nwb$nL;j^~tr;8sy&yXV_NNCJM=bgyqkyUmGY959*15{H0
zqqDHsOqjArA#cJ=8SOAB*dq&=FyygU6;eM#74rCF5cjVf8q1l*jBAEYSKa}hmY~-C
zBVK2WzhjMxM$5&D^8<KVUJ~~%OcyYSees368}|{QkjJV&pB$64r^P06^^<}N^m7I)
zdGX_BB<qj~Ab(*-);337xjRQkW5k<z?Xy)_R+YBR3&8qu*7cDA8#&RC<kQb%tjBkC
z0EUfw)B`e6XQb!%2?<qxH3eK7l?UQmrL56{YH2(K7Trnx1Mmjd5a;je<|Gso2V8YR
zKzPTBnEeKGE?wv7otZ9ZiU*XfCE2B)AITt)6N@f+hU<6x0B!uI8wyX4pDjy4{5elv
zm@~kEszRq`5K@{+Fag;%Un9P^FPn`B6u?GosF=kRXMje&y(H;;4)(7%Y7iIM-!T2L
zGu!GeOb;%-rLar(I`0R%VV`AZYlHOOPNevIZwT5!V10C#VH<{yy-rK|-uo;Iwyzs4
z_#_^9`38#UN9K{FVV9s<0x4wMR1EOP0whO2sED?r({W#4Fn9Ocpx)Pxr#GpAfIB&2
zTAtoX``40Z1NcNYPvI-A7ePw-6u_Wx-;H^mw6qDsbtXk{Vya+_-|mLk5$N~=D=`!C
z33+(9A99sHT?CvuxXM$VI!L!SwbAinAmeIN-29|2F?YkjMg<EW#|=N;;W_at1h)Od
z75ED#{6-^sP%k1Gb{PD5`$SGe_5d~A@XL4}TH+yfLQP*7Xgm=sS~J#Z=u%J%JeY65
zkeLBy$?;g|XOf6}Z?!NV-f^IsATbWdee7p!^Z<)u>xMPdGb&*pMBi#BrSkUV_*V5u
z1B&91suRkQs<T`!MQ^~(h)WJV{>}6}Df+XJpzWGSz|qa5yy=j2)I3KiWM1r&$~7Wa
zGTm>ji*KnwvbmKa5dOt(>fZHHN|)(%Ct3c}`IKmCP<&?h{kNEAXh^th-A4G(w;8&t
zM72ar6DSt(<-@O93o3B+EAB|6^3+M8dL>j^;XAAMmgIzvqyX5N{w2XoX1@=l-Brzc
z;SJVTeoaZKNUK3VaZa%Sh64*lbeY-CjJP7Ub<87&&ieRoc07iP$4rqAqVJ<X;%|Oe
zjbc|P1+W@vxhV^EeIpW>v{>FyHe&6{h%`6X(z9mtv373T!VqxAPXDPe;-wDONoekq
zp0a$Uo|eyH&G7ETl_A<ll|VP#jl+TyvgvJ_XG`4rOdE_G{aNa=<YNM&gRMF+New>S
zyy~xCR>D$4ngNvG1ltk~>6bcBqdm`mfJwzIu7aF(+Bj#Y7KFZ=44}x5NBb3u_Uqs3
z%spcV9L<VtYaR?hfjh5-r9|=5G}2@aAv!vHn41qGSJ=w9&~UI*XMXG&B=P}k4IkZp
zon#2sy5lyrRQ$W7qC-Ma&0*yF{UEXpgIYnL_50X12Z_yC1j*#p^KZf-7F-XKFL%L|
z`>aWC;<(ueJMK=h-rMkP%&I-kS<C6&!C*(=_RCOhmpxhuc5fa)8i<D_lTeXs#oto3
z4{OTFe3oL)f~gP0xhM)uK(Twx7QS;;a%7vd0IaQH@1dFV4raB(2|!bSHn!k?w{<(W
zX(x5#8=36|DC>M42dxv03EABDD{EP~aj5J2biyDDWqN-l5LvS9S&1jSOf@U%=EnlT
zUtGsk0t9-;C)4_XR%!E;YWh!|E@7}D=d1+20C6I&*jhlp${l5`GkJi(0Q75#p$Li*
zFN4+0M5{?L<Y@3I22Pex21S~Fkft<+RKTw7T9Qg%ydcXRATW6`!SB8ds0KbX7U{vb
z-#(Pbq})1zMz-1!CYD@s+h#hZnfEStZ5hV*YP--;9$VZG#c*Jkz>+(dF^)k(8C1|Y
zEx>*#Yd>D|gUp8<K;&#@Iwjxl!Yux%k3%U7--D_!q(^j&T|%|lmcx#pm@Y(rdN^|V
zWE)j{yqMzpCRZOwTQD3fr%>;U`3U}A<<P=|o4TH{YQwtZifDskgPZb1+i8cYV(*e~
zdUp;?*{np5(XX^bFP0cLt`*d?T5v==rK%L|cNl8<(62$Jd7WtZ0WEwwa4MPjz~lz?
z;BE=2G~xo9<}v7WW^zMsgAX9HmSlN4w&{qa)eTxFgVt1|^V|!}1cihoZW^^6nb1E>
zbsU*i%7_znKKagI+_WZTNuq<x!18A)Ct|T_{N325%I}AsLyA+6WM6)$`=*+o9f$H7
zp!4esOPF=&gPni))b+sjVaVj<Xg(EB!=IPyIVWSc-IxPMvin^I3b)s(CF}N(uMDKf
z-zkmpVWDYvCqi;`Z?98zifwQ(BnX0JkKV4#Ek-ODu7}$Ym_gO~10LTu1Im7G(S9T`
zqqBS;a7xx*p|&ml60;o&=W0<_9ZXjl`q<z>S_)2}2`4L#?!BafMemYMYXZ>de*B{%
zX}cKaU>0+$15ND#x8`a-yxrxdM`4Re#sqAi>fzBld#mnt3pJM!PGiim0I!a+-K50e
z7kK+eh-u9GZzI|wFP*>}yg)2&xWSH221UXA{FBKl^<qi}9m{jf*>{>UMgJ2XQj8&i
z(g#}vog;rKcvbHiSe$DxLmltNDWsa0X4`1C$zI)Qp>Z7Bj;6zA<l6C<1w}JWq^`gs
ztsW2N#c&^;JTP575hT|k6CyFZH$1(fscfOJDW%6@Q~io=3=`{@cSj@fsW&~vShYkD
zUHI^{S;hDzLK3i^HvFR+?&qIrnX);V7TJT0S%{`OMznv`#Ko`l?;TiOdro?XHj*od
zG*wzlx!Nt&zQG);34%y^iDkE?h`lcw)~m>|%b1x~1N6G(59qY**1cHvpFMiLlKL2E
zI9jIJl!Bl>eargHZLaO(mQgY!a9z2pYGHW10Q+-`nbhdIGYyr89)94vLpbRoz3skl
zfK-&LTgj5-z|x0%fcw$V0`At&m_D==CA9F^i(zo~;P(mam}}p>Yz@b4O*B-z;x`R*
zm`k)O+U$y6Ix1=qM$oyo%ZQ|L-KFquW$T>NDMA;a;n)`#3zLFIqL0Alf>AXorj)C-
zAfH<shg&-npWYLz1twLyTs?l@i{?G;T-B&9d<K=(O2lT&3Mn30UiQC^?VZz*(CRe=
zEXjPr=SkM+$m%c}n!Iao@g4YtLes+%+!?b_(tgXanIDnBMV_6je?oLBMMb+n_osC;
z<(%9bAf4a|V)(6%Ctglc;%|;`cE10#y({DJc_E8sr{j~n<_YYbD}BtEkOZ|=<B?xT
zceediQD5!6SVEiV92ri0j1ddsQ*lZL#^4ISl=fbs2^(`TSgox??$9PZKvye+sdX+m
z<Jvj?k&ZO2Xgne4jOS{$-AA4+Ts+x;OgeTo#tK7AzS@KelbeF}$v7HXAqIjo1;r2F
zyKrX@6X#vH*)5RZnsGY`fyPT`9O)ZyOzz!uTsme49gdW2j@)V8(>aLXZg;Z?l6!$k
z+8)Z{5UA4coef1|wO`m3del+Cv(TzYaP$KHN^&<|_tf&|<<qiBmnVW2Twr2M<EZrB
zYaC-Jn!PECW7EY<88~IGKS`!Oevzv4%PKlS;>>CPal1ncgBiZyyKv@Yc)@<Lnt+gc
zmKpV%s}i8-Ust7e71M~-%8c8t*}_8B;b8wtoZH>)w&~2YGv>na>T7tJ&&UdAMU-Nj
zuFhM0ns_Oj@Wgi+Pr|M4(YB)^bZ<S2pscE`*JJ*ei_qv5#fbS!E+3Lm51eX#aypUg
zKF!VsZgdtzbl>}6wfFwky4fo4LCJDS@`B;`v4Sz`cs)aJ>-Ok66@^#xT4&GfBq6fB
zT_Z@DK8<+01$&7Q(a>tUnbQ(|>v1eUKcKlPxzKv+i<|8ggOp2)0TI-@Fyv^YGzh>w
z$dP*Kd#L|(E-7fR#3Fy1R@;b#{C;Hii_}^{_8p2Ykd&pCs{cpv&<O>8rPE`6S_-R+
z*o!N|TyKi25q_dYs5sHIFWl>1X>MZ?T7_{V6&0uhN&J~l)Qgh5_P5eE_+=AFie=i=
z$`yRg_>Crp%CCZS%ua(XUt8IwK7A??8hj=v_KgCxTz9#$GgH1%MQ`iDuT=kQuKW9|
zwiI4_pKoUSHXG<no+3!Y1sqBbsu%1mt}8@KCvxbmWKQ?t1cyQ$XkI+vUowi*kZi;5
zF&wp%i%fkfZh&F!+Dn0t2d{ioq1^USQJhIa2#`@kOZ;7ou?3P(iZ=R|zy`(0r?|8D
zlZ5RYr|{5PpMC@_Xni{sdF8`dqlPP2^NrXZ2Tms98s+eYbie_jAWo>i0O*WosoxTM
z^)n?(tiQ>bqN8Iho+9q8J^Ry<FuvcMhdmQrjZH+}&fdrEwFH&q)+QW-Sm37@H+7>a
z?m-;F-bOQyPknuda-~mQ8)i1$8UJuFQi^_qUUvDwYf*|dcX}S#qkYfyqWo8%AK9{5
zxw$;zPu@FH!R`C!=W?n`mOtV?)vjSa?N2z}?ENz1Bwn%Cn`P6fbYts+-U>lJD6Jsz
zHlF4EF#}oddtt{rUW2t(;L=wDh4R-z6sb<0QW^=H$gp7B)4|d5Jy8`xn?JNk=Sd8F
z=@=Z<k}X@6QoZg1&KZ47$H6^u@%Ae}1>|mTT*3SD*V26iE>z2z6*7TqRym%3aVXFA
zTrt?PlK=U%=$!@j5j?LHN!>DEZg&Y<<LxLurDtgH^PU}kRBGgI=334-aOa)#r|Zs+
zE&&QI*DWssV)&$VGlw$M(Y2$Uyd58FOlFbGTc8#p&`Fx*VgFU<!ze%Y0Z1=L;0%)7
z;jWP}Z4Yu((R<zm=MDLG^Y{5`seD*t>LC}ty{Hy4dFJ^X{OS=pAoU_?XY3=Q0d?|o
z9}LpP^DeLpc4qqVA?Ii83_$=%InOyu$);_|MLD?JiM4<;I6FEq6&C9RJgm-gzTw)v
zY*vw#m_LzkET7d_o<+$=2%Z4*DZ98H@@l4XG*O$E$Omov-GE`2^3$|pw})qEc@H8T
z>KBR|*mvZn9?f>}SYp4}ReWuG6FQI?ojL}O+&wD;uIvH+m(5@GDWpSvizTB%?d;Zm
z?A!cIAt#^r>1{B$dLw#gjBIzUwSO;)bOwt1akSulv_d_`52&~~ma#IGj(C1mhzM--
z$<LGLy$I^7Lw7@?>c>(!<o8c?ieq<NQ?$ANJO+C;EDCxo=6h>i^}a~f=C)63<HWW6
zg{MC6K1aI0ZuO_MF9t><(PQRQ2i(y8{d%vg$fXk>ZQQE?RhTkK4WEA@wB9jbde_=-
z(z$0#RM};w89RxL%6SOodMVm(>V|A|+p98s|II?;MZRCV8*SlSTlALGKn~DH%sk)B
zn;LfBz}z7XeL3{YtZK<ueJ;#9W8NXAD|ml_{@5yski;z?>3$~T&)TpPNqCYwwtd`C
z%)Q`l36oXK$#o*<qo2Qe*ETiG_T-6Gz2}ZgqxG8Ax?!31{d?UGxT=`EIm$ggk8j|I
zVO!*x3Ul~9oSmrQr2pbz%$kGPBrosac6h8GFJ|fB8~KLWlE+0T(dII_g(ZC&%vwcV
z(m#5DNF;u<t~%Q^71;r|%)Dhfiho9vet7u}#XC!L!8j|pee0txx|VC(?ya`CI_v!7
z)mkS4*9RoHKdzF%fTl$5jV1T(ng~|<RjcsVc;d4(_&`$R4w@W6S{+?ZWu~tDTH>*j
zLu-V$E%B{1(gk$dXV2&^Pd|e0lP&H1o(gPiA<Io~jq)0PuzKTnu1}HQSR`AIc!JfI
z*3+v^B<cLEdAaJca#oVW3XR{+N^Hz4u_-0sR3iOiW}VN{D+20kqYo;ugxar~@I@rn
zjD-HZ@7NmpNuQ7T=~dZhta?jdp^wKd_%|06lZ<CmO2?3Rw=>KC0`E3mum<=0Se<Vq
zn?@+UEzs@;cYgu@Y#DD!y<JNP{iKoPgN`_ve;qc4Oc-}Vp-g&Ql~<&D=Y2-sV^-hU
zWPe#NX&NbOTiRD6EXJ0AcTFchEYf9^|8sBq|J&?VX1+x{1KsE-M=Ms(`~LZti1u{@
K^(s~S*#7}Hl_Jmp

literal 0
HcmV?d00001

diff --git a/apps/www/src/features/www/landing/assets/agent-icons/claude-code.png b/apps/www/src/features/www/landing/assets/agent-icons/claude-code.png
new file mode 100644
index 0000000000000000000000000000000000000000..a551af3de7adc9b36ad3e35abb62e0fe44c02198
GIT binary patch
literal 21744
zcmagF1yCi;vM!3t!W{-@U~p&9g}b}EySuwHxWnM??hb>yySux~n}6^9&N=VKx$!!p
zI<qtL%gpMkj?S*A4wsV=MF4yQfPjD?h>Hm+{H1>XG#IGA=YAgjvA+bulwX=31f(_w
z?p+`9?=_L3n1VD2h{un=c0nK@um9K|gMc_QfPkFpfq-zPf`DMzWwyx!|0>*!)x=Gt
zr9r6v@-QF}px;3L@c{a_@qps~7cT-z0RsLnIT#2?s5uD4e{5v_(tnQFzwIB)zbSYQ
z=zpyL%5uQ|%i1po{J;5sVCmo;i+>5MotU~K2nZ(GKMhn|f%F;#1T4#3NzF-3T8h)q
z)|yV=$kxD^&du8H9~21Cjq@*SZS15^<YsMU<H+g8P4X`b&cFOWVtNvyf0;O0a+9b@
z%Ml6MIv5kN(lO96knjMAh=_m=MkbsJLL&cx|GnZSF>`XV<D{o|b#<k4Wu~)rFr{bY
z;NYNVV4`PYqWx<@>*#Ldr0+&+<M{pGPX1p%LdK4U4(4`F=C(FO|M=B6uyuCgCL#GJ
z(0?8O&eO@<<i8`?IR2+we>+J3kA|L+j)DGvgBiP-|6gGLX#NfRSHJ!p4)~8VPBjH%
zM_ViBf70S%WMKjRE5!dt`riru8=?NcBL1iJ|3v&ZK-tFJiHGSwLH-Z%|3LkdFQ=Tj
zo3WL;kh!(7jpM(vV_^E5-v6rlU!iLMcj*66{hv@lTPs@!MLT^%V;;u;MEf72|5yX*
z{~5vmF{1yTF8`ALoi989ApL*MJstpic*Z>l2p@>J5WkWe=tU=VqP4pFmiuMp`{}{_
zhYlNl4rIeO1{@(|oNutmy|j9Ad;*JN%*jSHnu}&E8hW^)aR)f+I${JPOk#Dh<_6z`
zhB<zc2!iALMbjUtK2U9Pb#M7zIhO0pu{aYVRjSupsBU;puI#MoZf<RwW;<q>a929&
z{RTh7Q#<P6gkI#Rne=x?toZ*EU4NM(I(>EvtoyzunaXN$blW@h9~Ooeu51dq8aP?i
zE#Yfk{`{VwKOt7Ubmk-?!ZkLbpqe@KOtUD<LHIo;^X8;TJ+*d}sL^>1zS^|(_p9|G
zH-Rcq%I4~oXNA<E8uRSE=f|Z&_fphj@>}QTutNR1lV{|Z<VWy9_-Ehw$jr;1@Ht1`
zN9e2cFB`c}p1ZG2jO~rD^WtLqa~hyt!JO~4*__sj6X%om<<nD?3+LMFhl%0beKDT}
zo_&l%Q1*w-+=&a<_YIkDX!<v4yUUTnPbw8>0407jK1iXR5&R`vL$17SY3;AZ_j}Qy
z3=?yI=4vh{LCS{{Xv&m#C$fqe#(`CEI%f&ClYSkr$ovIPGpbOZ`VJWN-#XpQeJ={t
zCoU<(`lad`8pp0&rX`-~Q!_HIM!fUhj^_3^XCFmxg|_4OHt!=#I-VMtpIr)MN6?$v
zN0Qy239@*E7ab5HKm^PUTL&kjg1O+Eu`v`Wq{#<8J90dlXFG{oT$c9l*vmq5<5LRR
zF8k4Pgu*)#xli$?KG|(;ut~Yy9Rto--=jujHPPIE3E*d2c}Th;CXVqSOU%)zLV~El
z(MJhbJXQp(gi6dEJ_UxRuIBxaEhQq5#&T}%E(`g7&&wpBi<h#~yW7`?x?sC==f6_;
zsmuNTwD~NrQ4O{T#@#)%?d!vzg>Vts{ZKEPaXR${2l3VrK4asGk{$hL$iPSxTOt9p
z5CE!wUo!V6k3E;BNsMgGo=(tGp#reR`AN-p2NfW(BEhTmqZm(<z3*V%cYBVXk`<iz
z#9gU|K;S-AA+fewt+Qox312WdaiF~60xp#TdQ&)^(<2lGC_Jewb8M}j2ahe{XreBC
z(q(!$zV7Sx?CUl6M$N<<+rN^UHAJ_07n9xmG<&i3b#Q#UJ0_a3IlLY}nOcx}-WX^a
zYS*e$QCwZ2Z;)b1)6aw>`%BHeVyJ08)cuw-oVAGH0wU-9x;YvjgC}^AI6Kp8R)yaY
zvS43?sBfoizRa7_DI`XX`@ot?rLtMAtj6DvP}!fqj*5i#T+&!Yxs-5<l;{{ul>&-q
zso|=GVm>WBl`rKG7T=?q7s&kN3*6z=bxo0;bj=&P%jUT|TLK!MnLRb4?HQ_$)6$6O
z>9gTc(djg$6v&}N<PwBhXfuIIp7v$794=6B643WLt-(}Rf~Oj@NcLj!FYy>r2_%-v
zvz$_I!w3^EoWZE6X#kyn;a+CFCYHv3zk#{WA5bke1L=elg+zQOLN>Ot$8gBz+`tAo
z(y9(og753_VfNo0r>EcY+8yuvx-HrAJ@Zs`b>*4V<j6!)^S=pJ?K;M4{`ITFyJ4->
zz{Q7HMb95%uv3CADn9N{S0rE{zUDS6fl2^^C;=`){~H5d^>@C>2TXmIqsM7Lw-&~r
z=whEVg2e(4x=fHCLwlRiE2RyNta9+yW2rLr5AVQQq25ZRdW$88U_vC)E~6#}2my7R
zrWUg)Wur;u7Xd?M&>JFITZ*vO1E2n3_dky#H_g5~OS<=wd|cHhUX*+_UwzcN*P{~&
zhQ2VTif~a60E=xZ{xu07)Fj8Kj6<_o&euJ~Ed3o11euRnl7z7o(F*m!#y`>J!f^m_
zMFWnMMMj*8aOuerX`ayp;^ATKE09b;(g;Xz(Wr6)qxf}%DaELfywJ~(=35f6S!i#p
zeMyy?;@=mF$!%`M`|`!g*8v1LQs3_3_puQ3Afzx}zvnAv3=MtC5y0(w6*jG1L1!_%
zW`8tdeNL^hMs+7Y2Xn+=f(GJnX_~-uhW)e`-p5TFh=`OUT^`;nI7jPr+%OfhqX_F!
zLU&IC6#niY9Dr!Tu!A^tKPfV?S5|QK3efZA>6h|HWdd8Wto*nXS39v(=8risg4U1F
z)M~yD*Gx1~{-a#%kH%M+QbJ%IF$(!MfO>+!LsrCJtMsEo=j!+z*x#%92}cAsTds%X
z`TAQ45t<mr>s>YLYaFhad@}^37+y~r=ZdCsiHZEVuY{#e!TGmFDyCW8cmoq$Y;BFm
zAG0&1!W+&$Fd3SbWGoo3GuUA`sj151gPAT|NGnfjS_QNiLtPXEH}|4KUsI;5^T$BW
zzSzqM*}Sjm?y}%#nB2;QL1AKva2#QbO00vNUy7m~r)eMLrdeOlyl!ir6sX~z0<q^;
zzg6DXpQ=1%f4<s2x0-I6zU?m)>ia87qV{)aj0Mjv00w@^LX=P+peN#g<D8%IP$*hM
z;FbKihI3P|2@j}{TMcYgZ$SyU5aWiLh*~JrU%#z8xUZA|C<oUp6I1kuVF4l)#?<pm
z*d4F6fZQ4~+PnZoA`dbwAB|<mv)jstp)&BLj;2rz8{0lil}WgB_>}$P>iv|i!d_CD
zDxBdn{Ok9L?(6eNI6w64xfJe9OR$BaH@}Mv9cFGGkCy-iGUrs>Yy>3(N=Hs(_plvY
z0|R>x|Aq|erPeZChPn|g+@+y+HTI@kv>&-jwPtsjIt=?15@WN*G}s{)KMgD1<rf*B
z6>utxLGB?83SDb>@8lSc&eX9Tu)nvu<X$)S5IE-t0l+y6D982K?NoXxbP~B}{|I+T
zMzGaS4!ga&u41*7`5RH(XjMa>XZ4%M*Mhd(sH>@&?Z0?8Tl*jg2hfevV}!oi+<YsO
zuUz-NqW^eiZi@QVG0)LO0~5e7<<3<S!l1f}I;$e0v0Z18O2dz$;lC^sIXmwGAk)*!
zi<s^EIR$p2G7OLk=Sm_iCD~AODLt}l7@x1*yQQ~2SBb`;frNNu!Vf7XTH0UY`vr*V
z4xXcmaf=R%w0;(%YdEP7!V`xP?TrW1USH*z3xP|?2u3L^XBckkYA|jBW5G&!w^TE$
zt7e^G;#!`!)_DXql501Q4B^Zw2Xo5u{)2&rB_;a~W%-;xHmR;5aNPC1zEG%H>*)MX
zXVQ$)4`JASt@u0&Li)z-kmFU>Ha(kamJdi^(4s`fIO;V#Q%Co3ls``B3yzEtmSE(E
zORWpPv(|6H)J~4%xboQ5D&bDM-!Ae}%mXzAnEeCP8l(tL{QzDG^9&7cW~7^%sKb-~
zGbfPEO!Ju=;H)uL(~%H=kmx++kO27;QUwO*s=iF7=XQ^GWZcGFLifx57+wG9tnn%0
z-NI{%{%XPHRrhtA>;^OU!&>WwJOx6sK0CT_7?UoTbZLKMRf`9BTEW;kmDx&QPaaDf
z@0tYZg(fk~NZZ_#uUY*~Z;Z8wtIl$ijID{yBzIq$A{i76p%PfD(whvSmg9ITB7CQ0
zfb8kmHEUQDd2IjgfT)l`9H4PFhsZI@a<bHziiPWqUmnG78_e**I}A)7hV&*}8Oul5
zIw<@}L0c)Vf^pdY{-BmZwW$9(^dVW2pvCk|^y}7<ZG&W3U-2fbzY%bWC2i|=^Ze}g
zH14I2L@yOv3xi}icM$?wiMtTopX#46FRXA_vm;Gpv4@Gp>=o3i(HH>AR?R(EZ{_}8
zpK&4UohwY4z&J)8^D}hwVJl-Lqbt+dMH0{QJMx;!k29Rv;T?WRz04Rmc&};04}GKl
zL6iOiB&*4F7sYy@<F~2EK8ZkxBAvA8(&Pvo{$Q7F$mBk@nI94dHRwi?3>t^eB-M7-
zo$*1K-5><JOZgfmiWCm&OnFsKD+9R+cj7AHbnEP&s1BQ^tmZ$5;~nX@j&?!Yc%N#h
zU3hkUJazl88zy>6?qQmuRhc4(wIro;jE<CXoP0GJ-YFK9)--thzyuGF+%@cIl(AcG
zO2?|LTzKA$(c`Oe5BJ<%9oo`5_CwPZ+1|D1vU$;Zp>-fc2#HFVK$7!y?`H-{wbBb6
zWV9c9OrGF;a#vozPg$|@T<cHl&IC@p_j2u~DIHFKw=q{7Af!hL>ZOdrwi7Io@9F|&
z2uAtcVrP8-M!ry?jy^0IRDD|_m;1fNlENsb!&raR;+Eo}Df2w4b4Rk7kX`Us00_CI
zxcq9Pl9qC@>qAnC7RTa+R(fqLnC)f|v>h9mpxVX9of|0bS@efkRGgc(PtuEqaCo#i
zJ(jUd5S+aX2FC57^~9uU7yDk@fy4xl^dy8x^Q9Rpa65N+hOr*AL`bKwidD$r6)I4A
z!DVjgxhgW9oBnfXVt;dNw{WoO!p7z6S@!21JoAkfKxmyK8hhDd1(x$q^Szoi^Kl{g
zY4H?9n^Kv0%u;=&Q#@8NV%3e>BIp+DZp>JUtqR1|fXa!i4rn$IY*Vtj>%0#dD)Ayz
zte=XHz1?$fKhU20dtBhKTVJ<f?a|B#jNG@@*?4{lsKWK0iJctbL^ROm{*aXuF(?I-
z95(kGjEU#V$XOer7m^i)G@d5l{msPifD(FHR3hex^e_a{TT}QE83qP&iZqhD)p|E*
z(a7F%llFv5NapwlN;)M#8YJC3&mAxcmQ)54s9&-f9}N}~PhxZyCqiUVK-FRm_r(IX
zYA%H6OFAa>Q*{viv9~7alV*E;WrDPKJ4@OSN#eUW0SQ7ONUhB9Is?z6-vUCT+?d9h
zvSlDJEb*op8K+zoyTFCY3>iDooKOG(f+G}RA6L|lQqWXJgu*<tdcjEnmssY!wP3|=
zi;ymoY<@<WszZlM5*d4x)QdZMaUb5$>F&|wbyO7diXXrHr8a9cVW;R;IT*bf`FO?)
zV((h7E?jynad{;G0htqF7avZqS|I;n7UN>?qQo+CHsbpSa~+f&=49DXjYtS;m3Cw*
z!Nn;kl|W`C<BHxy>D{Sn<mj?maqE0=98ugNGAQcBXzI%jgedO*DljC3$>&7oAR|%`
znWQ4hnnC_5mQ~3tkX4V1fIgd3CO>&lfm+$Rx0}Fdu0IPqq$J2X&D)4my)5Z7ui(Q3
zmh5ErQndM;LJ<8IVDUbt1{3Kj#*~^)J+rp2Y};NIo?|xAVRCP!!G<ET4n}re4%Iz(
zyO6jS|GJ)N@HI#v5ef0zOq`xP11#Q&z1to(&mL``V25A-=JN4zp&w!UVY=nH$%Hut
zq?yhGmA`C_<Xu42iq-%v@$h(LD=Q&tf(pZqRG#X==_8X){tIk@U8_7q3B4~<nb7p2
zHm7q%+M2It_$?$l-2v%ECky7X-4=C5xa1X*)zS@y;0ptLQbJe`h4!dkNnE#-_HP03
z54s$;UBvs>9h${SXC&J^O-#8$&dYViY}rKZUVkklGI<US*Y0t5mcV34U|&&HX8|Ig
z;SN=b`|Z?nsmC{rKaaN=t%-1oSaR08tCrOVHIFQrV17e^bX(j%SFM|xKqG@5X9VI{
zZH3B}zujoklEezPmRcXRdV*E9k5er%^{N-eB3t+sT#og4Rg6Et%lp6$oxO*?_#BXW
zzO(Y~+Xu&)7f-Bo2l#2dS_W4JVEaYeu4@$#ZTd*zZ6ww?oy!Gl)%`*sfwwC_mB`V%
z@P8$)Uy8a|pNm3KioR-Xz}aXaW6r-Wt|97h5MwB0lhq_s%mr)Tm6mri@v%^BrIK~a
zc3cGK{HR1)?QCC{Ek4wkTe0X4Q9)Ya<Q{Qrw&&=LhtEf0caPOS--u31*6gigCnag#
zos39ci;h9zux_*JqcLRi(+jduaW{s+J}^N793~#kv+-<6`R>6@6hZR<B}5Sv{I>|u
zr|-cDSEGE-`%G?zKdICZHQ-w)X_nBSQdbHIK*TbW(S`M1p2y8GQ^UB?!$#2#LS%yJ
zvYK*j!pV|}O)FL&=dsu_2tR{*X1FFdUMfw#e80N;a9!ES*fDq@24C49cla|<nK@Jo
zW!UPWcjk0A6jWQxE-($zAvaMatvkMi=Mr>#^$`*R`WX;htT%eQ{!9w7XgH88msQRv
z+^#E^oBU8$!B(DRXM^t3b~_>7RzrU<Ok)xiju_g;+p&B=t$O2n%{^1g;ZTQA@GRM|
z%i(brWwWwj{R$jPVyxdkY<J!em;*D;H8=85<WPU8bk*Q-CZUe%qY)It+069$(<v$X
zO4C1liS?mSe_=mG1%+I=(}W)>p_wL*T}cjFeqG^$d5G?lnr{GLVuS-I0!@0AzN3IA
z6(qdqm5G4D2$IufY--v30vP@>H-lUTE)Wil4xu%Kd!@>GIDRW(HKA!1(vL?C3U6@t
zI-hsU-@M$#Gu6t-Rb`x3hh)~?Pwzp2)MR(_bi7x*qOIl2nICMV2jy6_@fnUmUbbG+
zGIV~-+Gx2a*gQe-D<+Gvk^`kEwthj&jx#xVMhQ?T@=CO5SHD+KSzL6WWW2OnZGPk6
zU9;-A-3fxMidvMo4e&(LBzTij!KyBxyDz$HD993@5<;TG%w<6or&8T^$V%$JH~aYt
z?liTd5MxwFeN0q>H^la}jiF~%%8TfbznLnhDLhP?5HAFOs7{2YDI}~~ryMePu)wf}
zxla-VHfYP^FF!iY2=CyvV2RD0{oIa(ioDsh%UD4LMvKZ|XZ2QPvZovqAz)larr3!>
z+IL@xtI83?Rt8q_gB0w96)yC$K<37%&G9A$aZ0Mn!lT({$x%0}3u<hgvH=kWw3(~*
z?;Ad~cm_}?Kb;wjXJOQw@bCx8ZLyi=z3km`q|R3q+7|f_I0g$<^hX>5TI&&Q!{1lY
zQ~J4SB_$s@_VKik>yH5vZVbbhBT;H;C8YVNH_95o#NY2ou0!z(d7jmEF6PLbh$peG
z@fv*VS#u1pR|U6u-pAT*N_>s{_hOgRyMqd&vF};)PI^8j6x(Sx-=u<QckBz*Y?p|8
zLI7Qv5RdOW-sXZPgXS3G*f&-^q02PVwm#2jW9(Uvi-?$b1-<jOm`EEK>5jZ4{5m63
z0r3p2;~D|>@&}~=!d%7UE`JL8qjX7qS#wjidv>N(LPE|WToKTL792uF+8d);3bbb>
zhe*-sGUOcBav|BiKDE>&50?3bkq!vg^NF>f99Hgo*ohEA4>9Jxcw3T-S^jOKI%KhX
z(JrJY_V4V{e5smUjFFgdF<w1}22;lBJ7_wB$SVN3#Q1@YH%vvKtQtnuc0~NnC>GMD
zdQjZxf~R|xp54b<*7e@Rq9`wS7MU`jF?Vj2w)4^VFc~)oa?za2-ZW7%|J(^X_iG-@
z#m?Um4__sL0l71Xt(Zy4%<P&WpoRx4KS5EDx@Q{U2PgOb%+>wIOdf+Cx&c3Rq$k8#
z0K>eQY4qKpo8=O^R_Pf)FI1bSJ?mq(mnt*8!|7GXaUa~)T*mw0m7!#An-*+V2c1@;
z5Nu-Vrzp?u(!~8o6<Bn6DCX$2(jF?*+{z-MyNcsCwXt*ZVT~?pG*b}RSdmK`WNEBM
z+HtF7SwaN5i^PgBw343lTD8W98QFuXeK?YiJRl?&6~tJ)C^c|=cLsdo-G8ldhRLdc
zx$EAKmab448+|JLPs;E9`F!o$iYo$`o#o$lMkVz{2Rfz(?)qkd1a1Czj7omUD=)l+
zNklDS($aQ|!PvA~Pt>=)3$|0WFjwC$-ClXESl7SwrDM3<qAj7sCo|~XHm82JXMN@|
z&@WoHNA*H>CGT|wyl~kN6FkeU7!rxzQj(tvs1tN0F7%Q!JoLk*Iuvvgz^=EUC8#YF
zoC@S_O)Ca3a!sH!{9@n%`C$g}We!}JH2snd#<X0<DV?W1YQz!VINX0A)LTv$_q|D_
z5Z@(uF%(`a#!&^Nd^&#$jI(V@1&(xVwWYBtfFZHK8A6{1y4jk!SGDrnOKy+gg|#{r
zt9iQ-!SWBhErGN4l(d*?Cm9ut?^=wgZTu}w_sZ4;%oDIjHeXxH9bIj#hO(l5Y2548
zgfEmlZyYX@e>SPx)j|y-C_pH1qHn6?UDM%;*5yO7Uux-qg~)d@`(3j0Q<e_UHJn|u
zOn!3J+;f~Dh=&i#&(>aGv9xDDIjq(kg3*5KP@a^~frI)c>+_jEaU<JFF7S&@Jy^3h
zwhcs#S6<?qAq-XV2&eqKM12Q*7Cba}Q{!7lo*S}@t6CPJpVZz@uS#`Ls2VwKt}&gT
zVdi_Tw@ia3&`2-2ise6acQ6zH=(Hmj>XAc8GbMR^N!QY6e#CUqRz00pAEl~;6Hi!^
z=s(oq0vc@y*K|1T3phS!Tn7=rDjvZZP_FxtS?qiNOdN{7o2i%dwe|J*`P)~`x58JD
zmS!P&k28Ooz9kdA*YmDkdQ48$j5arGX|}#Q((sU?rw_e$Wk?`)pV5P})DxrA6HH4`
zwShsql)F)#F$FYrFN{#%MKC4Td2#(ZRD8X>1A32*FH~NAcufH0VrkAtn!mx$tngIA
zn)x$n3H9bneG#b*rj?0!TI^E`V#N>^*_a!4U6}t?q+?Qwvd`XnyI=FUZ<S}YO<L97
zrLfF{Am@GBF}YmKkf0$##0UxvgN$5#Of_XS)O4+Dj&=9`yA~tDW(^75DO!q;mwZ^i
zxjmR%F{D^#=fZPFHZcedv?4o(>ul^6D{zSlps$rY*<Sm!R6*;<6&CAWIas?D_b<lB
zpD*CYfD3iqfri9$oD!bXJUE%vG`l&s@ze0z+G{a^Gz;|u1;+7*wZfU0KxpHD=nHQ@
zXzW@F?vR2Me3a6AGx@8uYc>b}HdisWVGWUUJ(~N}ckGq@te${zy@=w57wniQ&wGG@
ziSc>njDvy6NIrawA@Ps#gl*z^H4oe&je;s?yaEI3_js9JVtRu+iXn*ZYsIsiZho1W
zGHc@gJasDq18UC{G~MZ;VhV8FFZnKxU$y_NhvyCz*K!<F{hT*K)^LN234n&&CPG?0
zlYrE=hsr+C4*_<jE#{y$z|#daY<C~o{~Z!;zLO9c<1&>BGE7S$NwgdAS*Eth&}xjO
zgWv}~?0qb~>E1J)P*gm6f2~Nm1(guyuqNK1%f4vAzJ2eiFxTl<v=ub?-|w$S>1nv#
zYLC~#soTW;ecVaLtt+>~#Wjv*rm5Kbde0?ulMeh>@a7D@Hxz<%=i-y{XuuG`8A#s8
zI*HiEAnNUO2aT%Vad;oYTxoy2IN6HuF5!U(!JiX`$<yeWOV)O$jRbftw@um|qjq9(
z-xImgY3qw2wwZK%0OXpRl-NvvpA@R~`Vvgaz<f7*ZjdFt)Ut4NV1hjHcon-X7E4Ef
zI^ZID=_7k$e2FJi#SozqLoD&)%ym+)XCU~=obENvS4QtCs)N=Dmhd!jURzX@=edc2
zl7WP1=3o!BV|}ynKwg#~N5U!(wGBt;2U6Mh8pt7EbdjBQ+3h~8&+jUCFt5koF{p=U
z#l|H<__zK>S;Kpq*33ZUN;p?JND3m6Tcb9j(NdN1fsm38?W!8h@#|Gy)kGqKZ!JSH
z8I{yrLvYc99U^|go2>yb9OqTYr%1*z=iHPiG_lDDEvNYn{5draStN2kyx|sjVd~xf
zWc!eJeCGDWz|yo?l29&HO{GiFPaMl(aAi~c1BZh;$SPHj;=~%sQ4gU_-hF*@3OOrm
zZlTMvWYJVh%GFiq=1-?$h^$5`f4W@k=<+s$pnLtUn&XsGVBKp9Ssb9#wHJ@2&H;4V
z@TGPx%@mzuTA&`qt7AlG>pN~$K_&CZaPdmvrx2&X4Ia6#|0d!>-Uv_tg<0Bu)0*X=
z^aDd+ye|<P)fMKm-F{AQr3yOUWzv#kGfX+%UM^(7KeL(uuD3qj#B`UpMrsxVa>fQF
zcV2Z1)sFMED?)1B;UsIGUPQa`u{JV{;n+U#zlOOS;FkCrYFhegezJ4^8f)ut#S8y5
zTuEN=Q9^YEYah}dO7P8Fx!)$Fd_pGiQ?9X6^bETWLqqJ^bDjXQ#nzb;z8fU%me(Xv
z5>|3nbvS<rfL^VGfOWIG**!fr&&^}UNr3Z+C&G@Aj^0ky4@jFJrcH{2YAk*mPb2Nw
zPnxk%9}{`rf1BCQr%>~ZcV<U<aYNcj5hA%~Zr)g5e|g<9_CEp_me(jR2?{x%#qO<9
zPu#xT&HngRF-m#Q{AOdkIk6$I8&Dq#R-=e~f3U&f`cW44s6JgRwNs<Vj1(n}<RMjm
zhqIK^vCt?GGVwC$>!~FE;2_HL{zxO;-cZp=&WhsNA$1crU9Pa2=65Xl`WrIwbEL1%
z5buzAy>uEKjYTzZk8|u?N0W#`CJ3D;ax?aCH6M!~_+rV4HX<R62(#wa<ME(bjl3CW
zo8{>B1Xi+eSS_WSma@0`2D3B0_ND2#J@HkjZj^PktU-*<u7hEoNDK;kZUFbRnf+oq
zF%S)h9k?|)k>agyqVEz35@i_mZLKS#IP#NU%ii4#-H%Vj{daow#roQL>tRYHDsf_f
zQ6-vyLT7_M%E^5S?*`u6HP<l`Wayw9+b{6QM`4971rh%_cRk8Um)DFojmCo?=ncwk
z*8psJ_$2-qb&|^g?H%B=Twr(K1(?yrR^w75o86!mtGOR@P-!6(M{<Q_v(}E;0RyR-
z`j9=GLA-61^D|)!-Dw7`JV01K(*W4LC#w_4_H1XK0*T9IrsyB1LXoKAIYR$6W)g)l
zD0t<IcCDJAdgf5m#g^rjLn`~3Iwbl&sP5h|HT7lN`a6@-485{RdhT>~#1+PVo%eZ?
zH*&UJy#JJTqH^1+$iRr#AGp28i~*QX8>Q493myN~2fYe1z96#$Q4}$dwn%U#*{V4L
z-p?~hTzNR%$=WT71-|Pp2xTLShzZK<11sLgWD_UL?QVsiBx11(;CN*n-dEl=SfPm5
zDeArTB#&W%cE=g~Wcxfa3D2NvTZU)!SJi9U^1vK=e(QK=OP^TRb^_9u-t(}BzVJZq
zul4{cB8Y8|PG#)j(l`TOt?wSyu6Qgq-nJf#t+=_6QwX_ZpmJauZ811)2=xA(sFncK
zWBi{+sfv?j<7DxvpRqAP>cJ?tD5y8`S-yQ6tu#2+-jFQ?ZJJLeSbW3})R9~`bx`LN
zOob60=+mnlPtliviF0g~2UQ_59|g~f%~I`jzi1I#1O6CXtZkv^FvTHE1F#fB3;SO~
zP|csv`{bo{Kj2P8o4%8JUS_fM<k}4;AAFbD++G=06aa_JDXEFI_(A(Sl*fgunH(oG
zjbzEA3K=S}z6O#$i-SaJ@Ufrp<LvN$iI;HInm$GXsB|V=05iv$87j3Tfvi;|IZc(l
z3yOXB;PFiZUSzLS@{LxaL^+Y7Jgo<wa~AjbWFR_3!cxT#(730~6<p*dEX8&#lX|{~
z>m(hH`O5@#avwM+0^?Mvxm59ZsFtr8?&wyt0n;4r9M?7up?E*fUlO@a#dE#LYc9jQ
zwE18~ux235SFTIUjSX2#;w5pbYe_M$JTlZ95u7GY*yvtm)U_}{t&2DD9XywoL6QCS
zrW^8Lv0Yu(HWc~yi=Sr*NTM`-j^)*Er$`Is&%xb<Cp3{2Zr};pByMvZ!ENv%J6rTC
zd5lQht%}krU8xd8yA2uKs}p?(=}RFdseZ<TRce20L%7_k%-G!-25hH)KoW}As%DL`
zDB^e^(T3h>(6?KwGF5-%H9bU#FpHm%jcUS7>=Hdf$W9SCmY0jT8TdfzmIp>z`b{Fb
z45%W!(U+dvs~_(@P}vIVq$Rd!IH#1^6(Ur2kqIXp$olX4k2EyQq|UG!f255e?J-fX
z*W@GQUB1OwudPH89gpB+vF@$MIvnnd=4%dUO;c`Q*fQAP9H<v?UMKU~nA|uShb8K&
zb<!2&5ywPn?k9_oWXBhqa)+{5QBV5~FIwmag-M7hG;E#4iyq{V+cu<IjYJ>x%P<AD
z{lXC15t#&!sm7GBEF2XeJMQ%}endVuO=cLA$a6jZfj#wG7mE)MXc<i4XF}TUW6#)9
zMNXnY+Fdq&nk)%nN^u51Hc8I=mfQ0L*-d96%}}4(lSlrjlPpVvH+Fd_j1>mkR!@*;
zn&@Iji~RB!#MdibG0Qmi=xWM?gW8At+smBX$K5K^de>vYpH1ZlVy|G)Pij6b4Q$TQ
zK)jCbjbOxB#pS@Dasaq;RPqa|-}S~<_2Sc?ETCaPUMCAIu~wYwwmn1zQG-AlIoxU@
z=i@I185G>i)(?{+f8L3{>6oI3D4TXd7!IaMRXCFavnHcNMChTWF9ov)g&TCi=>cO^
zR$MpIjpA@}x`DRl%Lrqx3Ss@77(h0Lu)pX|u)fBh`re;`WOG~0Tb~|_h!r!Y{uLux
z5N<HC!DLg*(+muW{9gV?z!XNk2>=5!MJIOdV55Xm2VYu|5W_w{2h*Wiq28L=mzKMW
z?!>R`*zDvHHL}aXDjERjL?Y$>`7VkLmE6)=^C0S@v{lV`OY0Z?*VO=2`wi4y%X)8Q
zreyx?BiE#*3!JB%&Rbb1$rFhe;q>wZ7hty!C;i@_&BqjB({P*YhHUD+snhO2_?1yn
z4Mv_$qS{Gd?4(*}3Zc%{kU=W&AhP;Tu5|JYe1mlnB`F^SUcW4SBu_oPo*T3sB4_;o
z9nQMiRuZdr)zPjnz<d^G#}h$6`3`=A#nEYFk7=#K18AS$)Q(XxRjIYnTBC(Gs-$4M
z(^B@d9U_ITn)Jg<Y0daY)*ti4m}K|0#{pBGFi7w3f_*AY{v#dpa4tJKlO$0NDm7Iz
zP1soa3EGe*<rHQm^(ZU{m~;k=5waF<{Az{#6TEM+kn}qwRxeFJt~r{T=<UU(7q0G=
zaeq&@LmEkAFyG!6afztHQ$KL1{A)6KEkVml)^X4WT&7>U$>$7)sWw{DI!RQ_!c3BB
zEtQqBUNZH+oSm1(`8(z2H6j234`OzCrVX2KS5%=9JGi{Srz~G2q}jVCFgZYq)tyex
zilUWNFv>ZD!)c4%cJ$#S??>|l4VyRJ_Cg!oV@1JgGY+llpQSsyy2`Yu$G$#|p$e7d
z%%%nOzSDx(m&Bh?;D*P7>d7*{tuWP?r$>*ln>vna-Od^Oze9msPEz0r+`9$XD8g;7
z&AG4PI6Italg+?X(0=wyI$lVt82AMwUs6Qtp3kerXjG(|V=%@4Il&&QZ)1O2hE&Hf
zs$>8d3~D8qGL{;r3pE;3Nqfp<<mvJ)j`e^njqeG&X-NgEW$oD05qw{odxlYW9S!BV
zEGpnfMwiNpH1lMk$Kg<ashi~f0f2I&#tvW!_P%wiAE*z%1NJa=Up1Nd@9owG%I}_o
zB9lX0B2VA6LL9?P+@n~!B>M$t2uTOtZi<>f7!6-xr`>>jU{xVigIe0m41(k%2nbE1
zK!^=vg%4}e)+wV;upJAs|5(E}?KQfMr(TY#jcodvu063&0e1m1nmi})TS>BEl>l-&
zZ`g`Aaito?E%euKDs^BKW@2xAQ*_d!X@-9M0vV0D-K+^j7N9a1H|O#2uqD*4CT-2t
za&NKW?;^-x<CSglwVFC1=+ppXLtGY3dg-!^b`q%$Q!NM!q^@TlTtg|u5M*f`*Rm<@
z3}Ky>P6*%zj|WDr9!$x|tA<sER~F=?iPFw^)E;5+h*Ne-K#D{qvG>7&P1MGBHL?zR
z3KAtaX@wsGiuqkoP92S{8snR&_!Fn8P7u~&bC!2N@MbZUNqU5u%&Z0sHKkVh%OZ2*
zP*OsC_bHb^-o@?u3C-8!=I4aTXA^ElD_2)|<JDMAB2L)o&Nm+tM+34qMR^X7rGYeQ
zbr?(g=?M8~e=G)HKe<{b4Jhjk9~ZC`DtW{*G^knV{<~Q72|$ep3=FYImy?P(MaLkm
z=Wo9*%mT!*qIx#p!ZgGFkhf27)FEknbz#HeUx2u`ul022$fkb&#rHG&fegV-@Yry=
zZyd}-V6vW-k|v=i$*o;FT9!MI*bw0hF!Cg9Yl(C1x+#79bff#=KWrX2`$-aeGq^Iw
z>fFMo>jR++S=^L+HhgM#jqSm;XfW9w!k;V;eMB$s=6=`^re~6wn#y%hIeNpxEQm#s
zPSuI2Ea?x_P$XFdqwa)<NdK({T6A;AyizMXlQ=dTZdzSohfQQ*QkKoSkC-&Bwp%8#
zn+9;%oHDEdfu)9>WMPZ6-_(lIrXDyF%~l@2D+XC3waIOpgeOTt?ljVutH63~Ugf2H
zB)kUMdE^>%bNYlAloH8JPQBWkH6^{C3wP*-q@%`8qW;O2;cFZJ<ll>RQG>tjgMK1A
zW#2ntzB{>-%9q?}x|(8y8;xhAU|2kpcWh?hGouDq!hFvCj+S`_axtBbgRGp#PNgZC
zaf}$ZSOJ1z;;VFKLC;R@S~;p#qz7e;JWtFw(umF{XC|nQhZm2ohM)iNtre|^h}tW#
z*=k(MvrM7;Y`)mz+dRq7dYwzk2W^CV;#h0m`|XZbvfjK08Y~%w&MMWdw58-VGqPVb
z!Cp>ttW3kuD)0DCkQMjp%Do2#2BtNulTN1|{=Hf;M|gOg%Fzkg?!GoIN$Mc%efjlv
zv>?o1wv>Dc8u+C!h!Up{tB8N^H7A5qvK_NX?V$PzQ-HErlt7DBG1tr}jY>-pKX*e{
z3%7+ZqeTsvp;EAeY33u$mfo!DK*6uQHkBzBi65S}#2xt48bRBxKuG6i;O)o+;^UR9
zj+6WKIDC#+36*~o4#;&LOl9VNyVI;m@sLCA?e2&Jc>`df4aFOs2+K$b3Cmb*g8;m=
zKS6V*j*c(p(jja2p?PTYZLs5E{sXzzCAH!c9+)*~puq2Uq2V|E(ZXs^Ckyp=Vc`@R
z*`iODtI*QA!`L)!Q!e-`k@EaoDx^7V7?YZg0*HW=mjGmDyBQ?RVqhKVaW1*)CVZk;
zp{@oTQiyD=v**xU^$tQd5|Z5#V0H*Zy@~|can5o(v08cQp<&gLQiL%jwYq)D*J|j}
z<g`oGINywbN}jku#9UE7{}vC5h{Js9Vr$?3j>f}&r|=C+1m_m9V~1Dx88*cE>(f}p
zus^+rT*nxL-Ieh!ihshK+UII79b>!Q-{G9n6C8y@EVaY=<m2-;K#b)lL_g_hpHI-P
zE~|IWM4Pjs=M%#~A(WTI20Hi_Bx(+fP?00IPcPXDQcLhse=7|h89amKC=fCzzGiv$
z_o~>4>yCV#YEt78;8#~i{gET=o7dKq=Vof7uPQ4!eU~lsh~`K~<N5Ed=qnZl*nlm-
zM4r=>c6q8B_w}80aYpvFp%r~QqOmB;woU$Z6emH#eHC_~4P(21{_?w8rD6l|90!G8
zcf5R&8`*LHFH;c^COx&-g3QSE>$sP!z*OV51`31$SW_Vbi*GgEOuUXJ++rHdNj2Dm
z(<lTuce%1#-3g&w*YK6DVzT!q=Y0#T#W`zw6-aJIC1zY5p@xjJ5hEbP1AcsL%pL6G
z8!sWe+i3&+FXQXiY4D2pyU~=F7qVJj-6p5Aga*}p#;|;M+mv>@#D2Lok{13*1Ax^H
zw`7-6?lbsVdf(E`E-Z?R8}=rem@155T%GrUJB$osM4`NS%+~k1BZuj*!BF(Z9{Y?N
zPDRpC&@j5T^A=(EmT`j+;I#E($Kzo9u+eC!Lxa`qH-{<wr{)KFV8++}5u0KAlTePx
zf^isF(^s4E>oqM&=yG-Qo;m$EGRhTSYf?i^eWL&C!eY-9XJA$*%;aX~%JcRR3l`(p
z^3X&vnF?;Z6|rPTAJsmN3Xy5o%g>(tWhqy0WaD^g>gbz2Pr9-CaAVvyI=oy?t7+S0
z$DJdvEB<?P19_Ua_wt2EK-wQSp%5jE(mBJD{7S`%@o9;Z^zNk!ke@K{+Z~5Os-|)(
zd5J`ovAcC6gat5~occARv0!03_;3x*HOS7y9Wjk|W#!Cup<M__Zf^CzLxtG39ndse
zK#U{6?2RhsPmdnGx%M7L=ykWw_sI~~vS0I(a`{bAl_q`eLOQ%N%ay|g#y%`!lsO~`
zy25z8`JArCKFuAEbU*m#?q;0O1t6WMRSj_X87?$ierEu!9H&?x!VxA0n(*a=#5)Ec
z_{-W8@RPL^+1<U<U}1QB8}66Tmv50SU#xFyuiyJL%3(}CKj1-~_Pu0ws4;w|wO@p7
z%<{&SiPDxx_DSq&^M^g4Sj@WmMVrFovYS+DXq+Vu)&+Dj&5LSstkvFGY<HL<TsAXR
zSgj!U@j0>W?gMSD5xuu7Cr~A8yZ-b~kf@_pNgT>9<LxOs!gbV}f@}8IM^Hl1;-Qo{
z`|C_e5^S}qh+R^3O;P(qu1$Au(OlE<EfF?I$TLyW@SCit(!+LRBCfBD-*7y<#QgDm
z4Y{kWY;V=Iv#bw$s<G)P@^S(fi$q(xmCiTcc_SFKN@G?bnxlM5ujIf^uGU{m{QO83
zH#3Kw#V%I6pytPWAyU?Q9xX9Sxb2rQhF5w%Z2V60tv`T(K<H|RYGpTV(ETZz{6i?~
z;;BkU%cVn7ptlbm19m67cNOttLboR4FcM{8-WX|kqlZCWRq~c{pM&O>=z-1yr@K3~
zgj-mBaN$;=+vo;APLOIBqC0BD8FSak)nJNjVl(^WXu`(;thq$E6-6UR)^dr~tFSFn
zYfz9bC&?MD^ze_oDB|HBa;)puGQIOJwtFL39sIM4H8l{8M((K*{m)?+mJqTT^dSrz
zI5TVW?b<HY2d2SAjbQp5B75Z^HRHo87~bmGJCQJ<ND2tIODf%tkgUK&A_WSI4j~FH
zSnX76*6Tn7Pv6gGx0~Gs<BpIW4Q!|Q_g!#7<Jq03&eqn8uNTz`_&!%e?mmNw;H7s3
z_sf{u`9h@c7vR9a<5;FkNdl*Okoj^v_o*+v>Yd^|(!UD`@6C9it?y@!06OsurUFn=
zwyscU1y-#QPw<{j1uaNOzk4J&Kk$NvpL~x%LtgK(d<9e+V!i9#y|ysw5~xlcayk$r
z@t*!Y$fA}kLydYcF}n=l7=~`zuDTu+7<wrLJL<{%@5F5c)He;kpaE;*SQvDHpvrA?
z+t`M?A)m6=YqIXX$t<`!gQD#@|Azo*`2N$Qu7?L8yTkFuS728-n%|W@*45R`lJF=&
z@2rvu;maD^bv=`=lv7r7VAH7NR^<9P$L(eJs7X>@3!vh@T+ch=nc)M^`zzzd4$)iK
z=u#UyZF5=cc~;kwl~HmSu7+|+)9F>1uWs-)+HRIuN!AcPH}o4u)=vW~is*Maab>J^
zkf(**nAb9OwcOtMc`7;2&c(g-P`^`9fyfH`lOOF00pi3I$&){MgTdpEi&m>2sI`8Q
zIcrz_bO<Ka$zUHv_boRas@GYKYA$!H&8mq|i0+YdZ`j`hzBp!5_{MF~IQ-qfEB~sZ
zv(OeiK@>e_R3xe0K85j&3cL0;?3$886G5hNUmrE(V7qf8+flwUs6A#y3FqOJ+i-cj
z@sOEqbNO0bJ#ueL?um?+w(C}J5lVJ-D87q=zO1^~FxED!e0l=96FMqeH}z<0sR0lK
z_u@F?Y$V3V6B0H4`^;rQ6|gzW@<~`85dTxc02J3P3d+M4BsP_d_a%I^(1(a3_yTCK
zs9Y%(QG_xrV{Ng_og6jYjy5raQef0}3gh_9EApoO1F|{~#wO%xW*C=heH%1_;kXl`
z-aKNMI;mWWJayUKRCSi(b5PajPE)VOD*eArE$kge5$sdQV#(g6t3zffi&+RUP+Z(2
z@#d`nvP8FBtzB-<O@`vKNCi{+VOuWu^%D?pMj21pU5-T3@c8}2<t@rbp@T-^W*H_N
z^}|eWFoRR5<ZN=x#n6r3n+e_^wBN1~^Jq9z3f4np+U{F?ZiHi_mASF05OJnB6cP)z
z(a2NvKLl*Lyt`wQ<(i_n30Lv2YA8zMI5?(LBnE#s^k2P49#$=V*fc33fU%~8ma?^l
zFO7A^((0{SOfD15C5Qu?J{EZ=RcJ7zi{AJ|V1|+Xo_ZZ=_D1inN5b<b7)?;xt_5N-
zk0^b6RwvKSez;eh&tvf-(tYu0PTxl0#!XAe2jNR`D+l@8jig-mpx6W<GUsevZ0)H3
zqV1#SC}xU9moosP@9SUX0f@T0ahBLr=Eh%#O0`r)Xys`RJ81jq(hG7Ci$#&3tUH|Y
zH!bC6Rk355$jKJvZ&YQGsVNY7gha?!K%|`TcxhKpeXgaz$uTWaaLNDO!^881m8z+W
z87Zc_8|;85oJ!u+XYqTEC7!`MK#dxW{_VEOW=r?GzI1<DScasj%^~^mx#&9NF-noE
zJ6fyGAYodn>2OQrN2saIi-mW<N|_p2L|*aoM@Ke&R*1_kRlzlMx<i4h>#`B26z+?9
zJRVh^e9RwW0>#f3hxCQHM2I45D|@;VJoFr=xz*rHai#YUzjwYoLtHId6)RXT1drO>
z9LlxIy?DFzg1Kt`JU@X-i}0-ruKVaEHt0;tw^=Awq09q)J*f&*lQ+S5<Mn1)o|e0`
zYTqUff$2jAlpkYamsl+}Q;}eb(n0Hb8a`isaIY@!yyI8Mbj&n<R2ax*-ttyymX8^3
z;H68FK$*+3?Gt)0nk)bWS(clTf8ky+OS{i52F~Joi-p8_K~3Yf8$1{{<XFdMl?2!n
zJPzK22BPB@8RfGhMi)`2ieI4*mW>{jMs^%s5Xa;}CALF-k^kB*C(Njtc1L_O!DioY
zU|Fyyls9wAwbs79;F0+zk;_u{myYA@+!caQAX~Al^>zuQs~T8V*J&Jtbw`~t)R@}=
zk_}*RslmKaqqA=o;Qcy?C45r$U8&5}wHAW}EE=Ap3Y}n2xnU4rIBf*U?v-!E6?o!a
zv9?8if4`FEwf(EwI{Gadq(kJ4SleiI;0jag*<jP=@a!0!Dgg0gC&@b*{XKrDk#m55
zCi(AXlM!1gV_E@%TlJfyQg}%(ME4dJD`d4Cw9m6P<^y8#%Mo(#1C#)5^>d28Nj76@
z3P=7o8Ql-fQM9JW4prNroA#q<oork=Vlnqe8CQH4yI42u9Y_1UcKXTkRWzwV1Arm=
zW$u}ds?Os%_8P08ogt9LfEN~hBxPl+qj0=(rJQzx)&h~^Q|bc3_5Gej94wz+|G91X
z!}o@;oayI;{^ikIKq>x|2czJ?Aw|6e!vyN%up}$%n;NIiVRH=AF9@k9{#*xwI*4B=
zE#Ij`@~0`~?C()U-VxE{%}xz?!EWHl{~T4c3ma7v!x~6as_;q2jx=muNVN?{X)+0?
zX&{1Dd5Ei!(HisP?K?Z!@3qWghA0+sJl=67n^fat7P3uCLNpw4_=}|yF%Q}uV0COC
z8P1>})<|n?!|D)n1wx-Z1JrH<;con7r=+yp#35=77AQa%{V0*29g1st(XPgKueaXa
z*L_O)az7~Gfzgs98Lf;59)VyD=liBS)9W|IU(tLIKhQ^$gzI3L$kiq{?`CxmYMnY{
z(K(UfeqT@yy&o#P#&&jy2{_ku5w<5|`G~<PaUf;uGw=!(7Q!b13VyPfZ>&00XB5BX
z<u(Q4SXl3XEVXIH(t?RPmSYxEt@DMNgO7?_wX8mR``HUKblLk%$`SMCYq7G(W2UMx
zdYLsD8h7pII)BKE1Qns;dv9ehxquPdF@4U-v~&q{A%HML_(gVe(^#d&ZO{Ip88T0a
zUK#h;ox7Tnn+E7Qm4pW~2i{cu-F$*97k=N#)zY*2`P=uA5W8zrFdIfpSVa5>eXDPM
zIF`&IhST<LK-B=c=MZmGK+@m8sjR-kho=cN8&kA^*1K1d7^f12b`WNQiPf3w+Y^6M
z0O;*&)SyDsN>RLn{Js^Axs5U(?6mrx#ICgFDzYg6#?bw_*qSrXAf!f$xxr>`l{;uV
zZstI!`3ap9^pXRB<L$w>iLvkl^)P=}FV(MIPL}D4{AgvGAWcI2B7)FYe#qggm^nsa
z8)xD2sJAr=y#qmpoc**_yPa}!206Zqyqsh6j59c;vJXt;q{+)|4GnCJ@8rp4c|+*n
zFo9yTAwspG@woR#Kq=jXr{rpnow+gEv-D;L|9Q+asyxsvB&3?CU&7gqEE<8)P<1(=
zi69mlC6$_rJNX8gmMzGaAz&K3?Ux*eg+wv{mX!bC|6NcE?MXDx(R0b8@vA3){THF*
zTi0(QnM}MRO=`5DvDPXuD5R?V)E>rTnl6&qvUW&UAOQbJRWjxkQ810rxh@Oj*@a?z
za{Eve*jhoxAgs8PdAPDkyi?Wv%$<ebLS{b@^@OV=Vhj)b#cIg4bnq0kPej?9$H~u2
zRWAa;UF(5kT1O+IpEOxlM+s^9MZgMkj>jDc78Olr%u_{RHrvAFE1oE?SYa>{?aM>7
z%Z{=Cok1edt8}l^XAE7XNO%&S%DNU6L*sR%euJXgdF3TD<!Dkp$V?lqHr|lX1D8Jh
zU8uGEN4?OW+%Q49VceltNjddxjS})(Q}bX$<c!zMq0wFW85gsRgShLx4iuxagscq4
zPDtEim|0W8za?R#NgTe|i!>=DwKhcVr_(x5NRYh=;b-D+MR{(G>%4v!aW%C~UJ7<k
z<uUAt06aHzSKZNDgh?EOw(n!bvA?8Ml6<D-^tt)I_Rssk_?PlJNl#P6Vag!rA5~vd
zzEb&M@A)#n3h;zhv3r`5g~L@w^GR9dVv~*EkE}N;s(#guiAWYOFgV|l^SoTH@5MmN
z6VIxfZ)wDSL|?XH+iCoyluT1H#?$>lqzoEykXJKl6jTki#<s9=ZlBm3K(YV08OXjL
z=)g7MD3K15`sg0nwsDQa2t|a<!iwA+b&@2T+$_$suaOnTql#klGiw&#c(F`-O+^b<
z2upS%%cZtA{%5g1I$zIk!*y?ByNm>N7cCgGHwX?$Jvyn2>(vJa6_KK<egT{zG@5wT
zqF*rSi5tQkxoL~la(2PqdH2#$FSx1kBg3P=*WuVl=)>Hp+4wW*GFV}O;I%%bVg)0e
zDXZc@!G;vz73g!Si@d;fkuHWJs1TW+Pk<Qu5P1Sp_uW)l(WC;*8A+i8*TracPykzR
z3qj36G#-w<h@O<fTa4aFGtJ1Sz#UZ_2=9}0#XzfXp$)gJ;hEjW)dW8KM(7TxI(72t
z(_?2@vuAme!s9`^$sx)})HvhHoJB}z7^eKF5^BP@8ID4-usl>yp)<OOMky*@0BHn}
zre;jG-NtCiwsl1Dj4|-~^8@7)iPQ}ppIZ>9fWpo}y2AjhO+UOa4vj_?!szIzUnWwk
zmDD~FSYFA95lGSqF0Vouzr)k>%qQQT6TayG^Zx{|5>V|P$9|@p9oH39M&9y~{tRwW
znw*ngAX45c(picd)hjs3gfL=7vW1h>VQ7%2UPIx`mygV-07IoA72vAo#v@1OnZ}$5
z4RjSR5FyIGN|?m(@v22$Mv7>gY!_xg9KS#VAlxp(7Rum5neM*JaFM%iUQ?=d&9cnv
zVo#<-=2a$DUqVhvxh>17zcb*|$>lAaK&kcf*p~MsD!$^FA8XQ6Y5iOe=%9@^lumu_
zBh8FIYE`W~IH5EO(>)MQ=bW+VP4f7cLe@LA!%sLN+!9U8D?LJ)+M%F9U7oO0$ScaE
zD|i&L_=XpHS&rU}V*+p-*~~RpT{Wn&mXo0r;1Q3Q6u0?>esj=Hqv7_#INHa;2%|!1
zmTj??j{EQ{qg&*|EL|Nb0iYI1VF}k1uuzKfL?|#Jk57I2eR<yBaen5;&u5v}W$1Fl
zMqsqz)4pi2C<1^L1WGi@{NMKnwys~kYLNzjC8p9i!D9db5iChWK~xZ<k}S$PfI_QD
zL1ZYv^SGnP%_VcZ%`5u`pl6<ipOY*=Id#(uO0RTeR}VO3ql|NU@nl$Q_XcF9q+*3n
z>6um@`KTCy#A(SvAy%a*97@7emES=+M9IP<CL^O&mG1p?s9C_KO`F7QX>qA{TedZU
zU=c9c2r_8G>;#7#TVaTT3@l_7QdYjv8A}}NZ3wBBMF}E21PF87WHIyA&tx6nr;HOt
zyC{+Xu|(9ck&a}rlRsc_?!4S#VUlHI85+h`cFJCFIK^7~Fp^@eSH)CN8B$O{cP>S6
zmW!%UId3rC$4jld+*@$}-ZH;3>dPvk{Pbc9UAlf!+jEqHi;UagRfH{yMQI#PjX`Yd
z%&Of}&}n#{5L)z_p@Bn81?zDobZ%kkb_$lNjO=nvX($EQwQE;;KXGR9rv7FS2GNQR
zIB9b*U#1fTsnM(FtnOQPJ6N72&|{>fP2dJV)budfcA_pLWIP|4;?k^77W>wXMDlo`
z1Z(UFqG{?U{wU5RFx+2|mnh+#e4AI|0~r`5rrW0HeE<OD7Bh@2&X%ksB~|dsr3*Z)
z?T?BxIH`n-;534=M^NA>DjC;p2feK)^7ZfKMve+;tRnwFR#+reL7|r!Lcz_KOozYL
zBW0L_?vzRc_{6i2bL7kdR?+mTj5u9eI?JQ1tx3~-?db8Z&#``@wyVMI$8ii!fEdK`
zm$zL4)EW|Fy+r?nwvsKgvwG=zKnNojhQvyAlL}vWCJ2s#=$2EbW~Z-GUS=RAzjz^5
z4=aP?=7A9ll6ihmU?1)XUeW?=atEVC7>%-uM--g%41Ly-0{%z!IJTpofE5*?M0h9`
z*TRo?i<g9s(7Mu(<?iuUS!|p7oTq=TLpus5E3&vHk`6`mDaP|lz2#eupT2?I&Q(`k
zW$Btz<?h<*zwwQ4jG4drhW$73JDhhE#?Y27GhM+FGIj<92vO*8B?KunDNy^}EXuhI
z8-?(^3kRksVC(3<RS-XdvY-6?y28&!Q=Ppf9Ah2SH}Y0c$t`8+04T1#pZd}#Qf8Y3
zpI+G??-VjE;l34GlCllMRpbJz1evrIZz{QxpR(E}%1McN!5<h3(<GD2Pv|J<%-QLy
zxOtCyIEN9aD?IR6m833Lm_v_1qMkIn-@rGhjc~(jzTdgy+OO`r*-Ec^)vHRUT&yJx
zr2rCn#T8fdK6%HX!>5*dAD>`tKfOWJGK}%9)wu>i7hn{c*AWcmg^938$x}xGCpyOZ
zGTwU0Cjk+4te<!7!wkn~+3Q$YI#FRj-wx`hRST6w0p?i+m4b~VJ};0raAG+Ij&3QN
zz3EFV?A%bsZD=cSfI`1oT81#dm;N{+tl&v`Vgc}Ro{%JcfdQ6I&%^<K0Ho53C*jYP
z$MAvjR+$9mhLrG%^OSR>8<+td)RmtxC>O0v!sRdyV@{q~__#7rHYpq8Yp58&ZntdN
zVkb+V{pMZQ?S9bZFX=E%&se7Q*SnDl%6~1v-?~q^uC!za`2mj30;26OM+Vb|YO4}3
zfIEWFeDGw2Ldcf`tCDV5r)z{Q46j|8^X7~TJ_q0Qht1ZfyrA)^UIWV0d>UW#f>nuQ
z3(liLP(XoW32@r{B53r1j6uvG{myz=Q-~LYmJAJg66vzB*hi|>D9mh!QTSs(TjCz*
zpkt@US&g)*87hJ2q=Fad&(HThch`}(leJW3lb%v(4PQff0O39NxzEJ}cQwEB(HlQ`
z;^c|zS@Fj(G9nIyBdbKvPo5k`TV+P9owB0&;#od@pZY-wC?Tt8w&xkY(f%kBF50}7
z0WzaR#5Ac2WSOm74&;uT^%RP;0Sb=3_uA$FJB?29EMDHvM;om=i%iv{tnR}`#o3o!
zan~x9hyJgvYrb2{f>*WT+^-Nm$(LM6Tj7m#s&M?#cWw_Sct#22r9e4Gxu7k5NQZ#*
zmZ7)b=z&?4`PA=x<i<}D{8ialY3)gmJ5>76hd#tGu(xy9!Gpc4c5OL%#n$QPL0uHd
zFOiLF=4j;aJB9Nzv${jww`4$!$$DCJyRA$iMdJYyqCLV5hY(u`pBquQ=(H+z$P-@1
zOg#|Haf@2qbvRl2O2lmc!lOL(D;z=Chb~(IIh@(lb6Xc&@GaI4KIGeH{-Dzuu2@nY
zr4$E)Gy_?bp}j94uwWC|0xrTW{Rpk3c4aj~fj9(-S}qP`gcqRt{@V}#_FHeb{VRL-
z?wx<jTizmrhf2a3HuWF&u!o_l+k3zE?k|4e_S5s%O^qr@(3e1wRckrwR(rniSVDE-
z@f48Dbu1EQ=AO8XblWVVh)@(LLkGk%MCc0RcIiNddZ(}?1*9PC%sQT%IAR?^#=fu`
zV+aM5@(8jPyZT7~KtNvH8ANFl#A#*Lw}E(qfAFSm5e&rzSUf?OvDqQavP_RzT?|l~
zXV0Wq$_HIOon?K3GJvBz#3i(qPx*+C8)a+V7y&gyUG0Ag`u3eVbKO6A=jT4Sef#!a
zkxAQQ0I%t5Xb&LNuYUEb&Ff$PN1fxxk9TM07r*h?i?%;&dURy-63B&P5j0w=RlqpM
z#5}qzHysKPYQ|Uzt!T>2!MSi`7{VxSGn_`K#uLQ~2X$dupvaiO;M+dE8h9Mq*iP47
zdudTEby7QD@dN`n;LmvkAq^z^5JrR;0eQ|x1ss%H6RgCIOoKu-FwaJ!RAp$xOMsuS
z68l8c3O_UoKbbMLybz?YIE*v(JvF~{$G`u?O|QJ+@TmhAU3AfzkA3W880GLO^bOk#
zV*8JJ)T0&|cjmAC`klAD=bHzAXR+6xAJNPzBLdU0)tfC4QC8a!g24`T1_BI$6$33K
zR02l}L{UtsO;*+n+Od>&B44IgwktJN82czIYo!;<@|<E6DisS%iqnpxXeiXe5Hsp(
zqC!&m6;FMLrz)rT=#ZlHS}%#-x#m2|VQuQWX74JYies@nTE&BSoT^MhiQ>yUhO~g^
z+d9rpT!fO>?}q2{UKyOL^^58`c>o*UaKjDFl~-QbpPii@z3ywb-TIhIFPOb(<HVD&
zh9V0qtxg#hBnJl6{Bq=5OMy6vG#R;TnU>441d!AzbAIxy-$HR+!6egx5ts^3CL<&l
zV9d)3CC3Z{WTc*TEc3daB%eHM#9}#9sL6N12Y4z|8M=y+h_$^G%7s}hS(ur=QEo~X
zev7LD<~(p~nNWmLror~gHN%}juAV8wSa+m<{k{|b`WN5%xoe5~=P$qf@-y#y-}{Ch
z`^Cqk!kugCJ0m~?XPZr%7GCzIPrUB4`;PrCEMj=$1`bFUHo%^6xClAt5>&bFD^>HW
z8q{u+E>+IRf`p0HRfZuHEGbkNveKelx6HJ0fdTB)0+SkJsA$DCm*FMmY{%x81E&R^
z{jFY@Dy|u;Q4-=Lp472lcN}Mo_kxf32@`&BSzuc?f0kJ<6aoW&xOysY^eEzLs}`;^
zDc>?mjsD;5KmNNfeaoj_2hZo_eVLU}{T$OddjR`mM$rG&U;Wko%{Sc8JK5`X-}J?A
zeep4Sx1HR(Y4Wk-Bc0LwXax0?b(m_SOa~duWrBpmNEu}%8I`1haH;}?Q?xIEpx32N
z^k<wGBygR%vuDYaQ^jI3?$`VXhjSxxYS5iRuCNjaiUxV&VV&wx#LGVXRyeUv1d<%<
zR(vQ9yr6(PZ)1yMz2I2k#Y<QTSVhD(EbEG`l?%Jfk0>I3@Tc|gB=euX^XR{M$y-13
z$IZr#XD;5l_4LbM{_=%az3NqkO(Jj(>HAUu`%?*?^{i+0k25Vih4H`n%eQ{zk}Xp=
zUcP0+LpP0&Zs93{LOcuzD-nDah8**B-!NS{D7*+z)>gr|?k=0WlxMn5%StZSQ69%x
zYt=-X7-;D&QMU{QMDWNI5NmDwu$5!2sjTzcf4TPC@z{kTmC1gElLSJmVVF0-fpe8*
zHC|9j3~CT+MR0@;vC6dsS|)EiCrOnaX9J3QYGL{Ix7~c;H-GtEUw9Kmb9;C0JpH)G
zJ#OK(uYK+JC4Bq&z7;?q!~^}SufDpc5@1E0cYgiOZ{K!$_M=zr*t~Vq#Mu2Opd`0c
zsT(3~6t`X&8mlwHH|S%0wNCCEz@5U75+B53!uWFIq-Ai9j`vOvWqgziAzL@oNjH@+
zZliEfzN(C(5q7IF2q4qAl4H?8IBBDBYMK3I^NKSI^2E-(l_aJ`kmb924)9Tv6Wk3N
zpakZVTE$b*CK(b?qTa11XRdqIhrjWgfB4yNUcV8`--+-a|M<txUwiGf=REGGv-)*j
z6hK%5B{+V3iO04&U%u<;$v^$lZ6DsVaq24<Oi%2b8XLWM!_*Y_Y>b?>vdS8T;i3sQ
zHu9T$ur3TopqhRZMyAn6Tr*71+qe)|JOF}CpywLDLei@+hNc1D!12^@(*9Zo4}>FJ
z6~rUl?u_BOD{hL`dihjbqfip-wXiu=Q3r52cdFUCf2%6mh?lZZtb#*>a5DsQ2yS{V
z>Q1tzLX6WtI=6WJJ8nAguYc<8pZ$}Yj-B4WdGqGk9Xoc+yy6wFm_HwuFK(uR9+u1R
z|C=$Xi*}Cg+qZA>=-k|NGdt_5&6a=lqgOuqiI?oSdgt`yqbEB3iy)L(ssud>C{sL`
zQhCi0<~ugyDU9=t2~1gyllfY_jD&)C4hwPBdYZg$-RqhhT4b^yRuddAqi5i`#`LQ&
ztySw<JJ+;JTi}-f4Ln$D$V;EWB{!@Bpmrb#PsNR6Qj`Pu_CZ~P#_Se?4so8FU+kUf
z_3t<`yKwy{?mY7D|NTQ>yPkF@n(68J?GqETd-m*^yXKl}mcHLHzhW~u4DcJ|oQD&K
zfu}s>DI+)EeDm0;Q>P|REG}|8E{ZUIzulX5z39FdT>is5Hr@ZiO_P@sC+wY=oZ30s
zTiA?kOu<;WJO*NHC}I&AF2Qt+Pd_a~OQhg=u}{9WE*R<Bzj+2w5rCDr_T^Q1raso$
zPTdOWeybX3=aw;c9V<)QCy#F9k#fzKB28256~UPt??<YJa&A-VM2kGvw-6$Cm)X4G
zLpAe@-R>;+@K3Rm`|!+i|IYoV=e~Wzp%XX0`Njj^y5;DpZ0+KOIg4AijGbYJ&m4F8
z7KycV`31J{&r>Q~I8VUt4n}YAj(5Cc<iLRgqo+@wo>*L5oS2!J(IYtY=<z&yJ+Wi+
z)WqKDiHRMXHjHm<dgB|%#zsd+x?>wqfYC1Z8aVRqp%{>hweXb>x1jlUH1Ma^ma$|r
zymT*4smHk$j4wEj)Ws#LoRtFStQ;@s!xu|<@1672b#faRup?xy&R@u~9<_;nnYk=;
zy*#(nTRPqAE}fp4TR3uNe&OKh`S}B9&Ujzfk4ub#kf7!1>FLF>v9b9L8#XLp^@~pP
z&bQUm&mjFk6`=OwCWQ_f+`Z$DJ4WybqYDcQqr?d#xcyPQMR%sx<Ec*V>Wq?Y(>>v4
z-o07D-OIn%b=%kZI<`2A<K6pi@%Gqnrl$JScm-S=&Y`=+mbc~c@p1R`EnR%^#mi5A
z@{@Z%NWr%Rw+Oe_Kj@?Vbr{P!hYlU`)5RlnmzI|Bkv)d;<s2PCM8v#%L&$ohma(bY
z<{dqHwBaVny*2-ivbODa6nvMAd#Zm=dGTGq5LeF;c8>h`MjwlJA7A$Jxt$B47X|q)
zeV*^^du8zX?(Dn33l1=@dG)JbopYGb_~EA0z2Zl(*`Q1Vuy?;66nvMH?^gew^6x3{
z?qKh!&gwmS(o_@VI-V8M+syUjItSJ{u+D*X4y<!vodfF}Sm(ex2i7^T&Vh9ftaD(U
l1M3`E=fFA#eqbE<e*tD1DChgWOFaMp002ovPDHLkV1lFm*DU}5

literal 0
HcmV?d00001

diff --git a/apps/www/src/features/www/landing/assets/agent-icons/codex.png b/apps/www/src/features/www/landing/assets/agent-icons/codex.png
new file mode 100644
index 0000000000000000000000000000000000000000..8eb519927020f892d4434682385f75a47ea2990a
GIT binary patch
literal 17775
zcmZ_01C(UXvM*e1+qR8q+qP{?+qR8qyQgj2wr$%pZNC1WbH01;_tt%Tt*p!)8NZCk
zwKJ=BAS*&aP8<#z8yWxrz)4DoD1F!d{}f2@@6Q1~!-?+-)Lc+j5CEu)gLyXu`@SbM
zmQa!f06fXR`GNs}*MIm=0RR_90N~sJ0N_dk05I&c+7)@eJKRk*B+X=H0o31ZNB}4h
zHsGHTfW8YK5YB(K#egUQApfER0{~%`0MP&N$bHxUT=C!KAI!gNkUXIOaDUVCfd7lz
zKM&-;+yB5aKsuMdD=2#jO(y^Vo$Q|iB&kGt3jhG;SgL3^YskuQ8Qa;=8=BY|nbN!4
z*#Cn9@VIk*H*HLv4GG<CtZkjR+<A%r#liL6{)fy!O!zMrXDeP}4Os<3VLL}tLN<Cv
zdPZVCXhK3l9!C>1E+rAM|G>ZRc!@2Xo$a|87~I_4=-pW8?HtV+m^e8(85o%vn3?Im
zIp~}`Y@H3=>1>@y{yoV5H;#y@ld+?vy|bmAE#W`o8XDQTIP(${|0C$Xu7B(4Y-#r2
zl5Cy+Gp+9lGW^rSz(mi;@V~)K-7Wtguzz~~4g1%;{w<E@pTW2^luVuMtX=+5i;szw
zmFHg~{(sc}R`A~l&HokgKdJvW;=ci^wwBI(%>NPcf06$O>K}c%6fE6Mtu;j~ZA@*Q
z{-qrw^S65cYuEn@)%bry|3}yV4HdStwsTarH#9coWBQM@|3Uf>HxI)<Pw;;{(SI+O
ze^I~J3m-HO!+)(kK4^}J%zFSp03azMsNxQEl?~yqK6Ez{b}=#+s|S`8YjmSgi&07V
zyL2^%shM;bTbfo;`HH-bh8i+35L-~Na<zjvkGM<v#GmHt#(dlEX8WTx=nXH7{A;tn
z!>8w|d2)Jk`un<Oseo(3EFBV{1OLgS5EY;WyJ(b$4)XsX^?v!mF24B959U_jk$qh~
zzqKKzMz?U_?(q?_4~}_!YWs#g26JrZJb%p0=S1fgsWte+8pSKXBiU>;Pqpm^!Z@}&
zpCu~S=yhcc$KaSRRcW&q6c&<_(9zN9s%zne^!N93VPWyBqYzI*fuq0zR}~g=K#Te}
zdp?}^lS!vkYPUI>_9am%LtnR@<OFIqn4yt2B|k#oDj0C`+!{!S353(>A{>Rahex5H
z6?eU!S5&pTUaeOd4utZCjM}!ZM|IQPcPAifsyoD1%jllHW|Q-9-=TSVcowVk>m%ao
zwe8MU`Ijq~XdqqD%s1(&2l&>gb*j8G>BIgFsvet2p?mw2Y1f_Zy&C{Az0{%Peagou
z82(@}5t0k+wTMI?Z=~<{;gb4zwLy@Pp6=o9>G>)rgbn(Y3u6@hA}T6MP^I7VSw!Ib
zymxfH)gdoQNTkaIi&#w;nn^bWNXjjS=`Wed=62g5m(9p3(DQ8#-?oTqI`649U>Z=8
z3{6F6(0i{@tJ3Piw=c##s~sxrOEL1FJ&1@po=k6$ZZMmwR<Yw33l8g0h8K!IQS^-)
zxJiOp2gdTJ>O~1-*ep>h8c$H5^t9dU5An0!YJY$jfBPjFq_VrIp+$Kp(tXvuabBa@
za10*fL$g>b6|`L-@G+yCOf16Ci`5De24xbo5dOv<`hmK$<Qx$295V0S;dVN^#~1VW
zO%?Rly2jkW*P3~<B+MBEN{M`~Z?~C<J`AUf2d11AtjCWrK=gx7NXGU39LHmL<4e_j
zhfXP(H>b1pZ2_@ZJZl=!$C<Ni90etajK3bD89Yu>!Z-+|8VZn@<9?KO9O|7oDGEXV
z3bNlqX*Hz$E^=0&cCtcRuS<;cb_QiIGiEMyiEO5;z(_1!7|gEs$0K4m{{C%e@qVPI
zjBHX@(XK2Q+d8^kE@@xfj^CHhms~bij5_BJW?buPP)Ob$_xVCeUJ>s>U(S8?!MQR*
zLu1Q>QAs(B_?9vbPW|Vux_aRZIy{O4_{~6L`>J*<;Jh6(7o(MB_5vb6yzj@u%F4}7
z&(|-d=VlmFG7y5C6%pL<3>`IhxlWTYrMK%hg3Ad8ij9(7U&~yd&t%z8v+}7d&XE*)
z-Qxkpt@gI!va+Z8NJ#u~>FSe{XS`kIO$FuiD^qEY$EFoMV-5kL%4Vfj&P`!G4B>i@
zowVFsKUIOr6ms9vFb=}dH!9_xrj~8r8NRoBtIQsQI<!hO-$7U{zS>4E%l^bqG>oX{
zA!2VltHshBm$SvW$8{%+4a<@%Itq$Rqw=DP*<(7a#Pqun0>4gCE7BhIY`%A3SC{h|
zdXV^;FocK#UAGOJ7Ijbqe84;Ipx@sq$;Zpm)XNP!b1gBo*rl2sfx&3cmXsJ!)z0(;
zX6lBZD*cw}?=@;!p<Yw#%`_kg@z`AOivJT1TSWQh9J#6erFUmoC<{tur2J{y>n4x)
zarNLs1V1!5DV;DjJ!UEU9e#h|ZK3h}2Q54M6D2a}{t7Gbepi+!D?0KT`;JV*+t*8}
zY|fvcAGVt^!Bz%m_pT8S(f6=%lG+&r_oYKh#m;D&iuu+1LR+aCf_>Q9jTZSwOH;Li
z6nN(1_ztxzb!W{YA-2?8#oJz{na?PggpJ~%zvr~b@bat?bNBo?iWKm`2@#A+4u8q>
zaoWFKwfG4>F$R$|lVeM15(N*3?jWKj@xL6}<NP_4sMx8EI67f>4Kz0~`)QdHB23qZ
zhFWS~)97NgqNRw`8Ug&m!qPz7Vw<zHR8+SJ4YRVrB?*#lkd1Uaoo>o)yEEkLbH-3*
zxiDNLEW}KkFSGC7aqyH}6u~clgpVl%q0rqg&;M~his!nzr@AGaniM0lWavNpM#iTO
zhXnCh0(4(Kjy?T$9?CIq`HYS9*t~JGsPR>2)1)dsF+Jw++uYQY6A6Psk8-YC4LLud
zX{$WD>F3%wHrr1FP0h9K3$TW<Y1;;~>3R>Rla1GYBPInD0ygL&$_o@&7QauPiE-NI
zi|UUmmz(9GKK%~Y>?)16`Q=KzgUQ649J54U^4t)m528jC9hK0y@tm;E%*X>7LMR>{
z1_nC?V)=2UJT6#)8+jZyYmFA)kJm1;--`$_TbrR|>^$ku6(P?RetuCtydLdM8|6Ws
zj>V?tCmesLa@j}FI<j52=UlgJ)U8&kV?5ofNrR5(sWtFQtSM)IJvbg})VoLcJg%KQ
zz7DonPj7-P{}#2X$W)(MuBNN)f4I0DDdJyW|1nXBb7|~!JlWFr7h~;Q)helFGy=vO
zYZ`QIxl<G6VzDjgs?nI?Vyz$(6NEjq-f+%u@Y5Q;dLK3~w#8^L9LWm-lhL3)(i~C%
zT7|Q498f5}i7~<IVfp<d@FgOv-Tt(&D@62>v9n{H>&>>b-g0Asg?zBKw$|+Z!mQnC
z(S6nQl;ir06jnaMo{FzPe1oJ*%qNw{BasCH*fs~o7A7vzy(y$2RNYP_=JX!?d%kwI
z+$zaJfNlUB)6o3$fm$-2)||r(wfDfZ4AH|+qb@YoCC9a?P(I+tw4FiM)AkbDIGc@D
z0P#q|4(YezAPOQ`P>t)Jnwe}ipT#2*=7oR)lVsp42{HwsAnQ<(Gs=jspwY?Iwl=um
zS%?-okooy;+Yj<MFPj`2#mX2F$FxYKBj~hgG$N>LyDZ>dGZPXFbuwcm(b23Fo+3~6
z_4}q=q4yBL(Ag<vJo>Vq)AT+2o>mL4Rs_tEq-6Fl^IS#d$qX6tR2R>a#74x$N!2RQ
z5ctw<Iy62;WrgAy77n9CZ)=t%u(L@GhMeT#2Q<C}2Ae9A_NURMVm~q6MF)E8#zF4x
zgv#rg!#U*1dI6T~+wR62d_J!_WPm?_ZZ5de%K6Cfuh)y4)vYI9BRp<b$A0s2_UUYH
zZDYIUkK>k9sl)TO@Z9WVHL`tWc59#@6N_QO1OFHg!^#;-=7#g1r={wVI<TUYsb`6(
zqVrD6mhP1CDjF4<Ano8H^3oIbp<|OuTw4Q_Z7vsDW@^<w#3YLo3_V74+N=%mc+KUt
zYj<qwX?clZ0YIR}K5$_(GHHy4>52Vw(>uu~G*9jW*NWFJZ3KlOhUcAc*BxO$ufKSn
zkXF>w_r}rE-brG^XIs%|)Yj9@^{vTV>Z>FViepcQqA(<JQ&*GKb!~05*p+J-B8ELF
zGa&EksXftI&*J!A7xCRsCEp%9(w7S@VPrvmupsua{Ky1E(Wuiu8G>iACHdqj`gSi>
z=+ErbtXvuv?fz06PGQjA!^_v}0ymm`ZD&X!)wmEID^I4(ak@MV7+Lc;fp<Lyw!4c(
z=|Q-)r7nhxa7`K|x4*ycxcRLA18_|?2jTPCP!X+rlJH0NC^v|5wN{6?)$k~4Nk+0h
ztyOHcpHsS6EUSpphh?u&qifpv`joO-DQ<(*w{}F66DXh@2F<^HZV-6ZY&cmRh~p_*
z8w^WHT^ZGCv_4SoFKsE22GTLAP^+G`pI!I7X$W(<SeBJCVo|>){#%Dgbf#XYIe7j9
zEYKmrhs7h(=lK(Y&3M>3SyR6u&RY`x3>KCt{pu=$Xl6YyB<ix9hW_rP7vmNpdXKL+
zTS$jO5Cs!}t*VJ669Poos-N-r+-boAptsS^;@BgaX+@vN;Xi*#)!|MRu8kXNF#j+p
zf#;Jn>S>6pv)Ch2QA58GPOng_YBrpSR%$a2xrMb_u1rP=vLt>C_+h0MmG-yD!qzkh
z9IiHJ!!=c9R85zRx<I5oWPF|gF~FEvJ!jD8*Zbpglao02Y2L?GMNM}dQ^Ck;%R+a<
z@s#$93>fCR<@)QN36wF56`c>9FiR(U2|fDtlsrj+&>->bOz1L3fT^N=DC@p!{w_e|
zS$By8k%pD<5N0Mq-{av&#LkkC5jTd5H0dk1v$eT6u4^rzkAT0CeOy;l^WO7tzg1nY
zVFcfA7@b~^UbZXZ$vqtYt`2B2hedgCvMzuk+u-fGp=GHil_U^Ddb2{C$Tph^q|nqw
z$u*)fLbRQ^5ahCb!gaa9oZagv`HpQr9ciBGT>AqYE?YxJU*FxbbA55r*J1mtC<KU`
zXt0Q(+?@mukdc>H0I9}V*bhMLk^6Xka3WpKP!@IxfD<W>j=Uada5x~B^0Jj7rkIVB
zMqk%7&%PYj&rXCZ(iz1VhuhCV>x01e?C*Yd%oubuwwf<23yp=nNp}%h{oWX>p0Wpz
z8+HV;WC(TWQ$x5Jx)Nyi3yz&S<FOFi9&RWM%ts=``Lx9=W3|SyT$|0;t8>@we{E$|
zG1~hg>UwN89v^QD<hA4Qb%!jxUTLY5Bt6P@lN%2cL>o98HS3IqsFT4YRH2VL6wvA~
zzwL=OA?pEZ(kezt-1M=h?FkXYoSwIBaW<Rvr)mW#5~b!8?FqFhn-yKRMbeVd1iTtT
zJvB=6zQ7RIx7?e0eSO!Ul+Y8&&6ZkRtXM{TQ>!|QqjEGh^G5{cU27Y4od<62tHyxk
zau1S;F-kS;WfWqvsCt_A#EZCj#s&#xUS>{n)V0U1cFUh0>AQ5xi}n%Hc$XM2FS1uN
zer@8=hs>$;4$lWiY7h7s0-5E-2xm&k0P+pLSZd=DIjJnES9g+wCrYW{q58=#9@oy8
z+}q-*j2}DLqtkJ1$$AYYV@4NVhkf&de@SiA&(&}#D+G==&2#Yz>OMWTFuZEa6CfRC
zP?0;n0$-e}WHXmt$IC!$%;~^bLQL2a(({K%!97DbqS2Pnw@19J-Nk0cQxt)fomS}a
zE)%60>N9OShp_yKN(=|Y*nD1FuoH8dqZqhqe(zV@(=Niv=1r~E8IP%(LMf<%Q_?Bm
zaMwDBxyo&U0!m$si3mek_w?|jN99&HdirxbJ%f4qUrn{Ujbc1~K+;VvU^Fu#EiFvE
z^;%qGY<dQoe_|P%QgIZif|F-ZHe3tOUz<;B<?WH^(*$GjnNBFxKrDmR-<=$rY4@PS
zw($8pHi^NVOHE>EtBINX0Br{7Q)cZ*B)j)MqXFOix<efA?JWdfl?(Kl%?o(k1&Pzj
zbiFE)DE>Br=&TP*F{*a%#G|mZQ*fY#)^MWASQZPMIic2rX$h&6X#0Ob@0T+RSgNTe
z7D-JUMX~c?VKD)^qHj0QsEPKPR<;|tO^z~qcEyn@6PAzuqD-{ji%{8R$S)YPEM>0S
zEvd;;s})RO#{H3KQCO(h_;OC|`szEWwja|JnkT_NiAWt|{(fuH+Rz@?-RTzBxKNv7
zotExf;D}?Q>_yw3-R;%Tw~Bn)k2-jF*dalvtJdXy^DzMZGjxY|9e_q|aFuVjGjMs;
zvZFYYd-N($9ZH1xr)`d54eTTrtNgx|)=#qysQI}gUh;-HPxkwprWKcnJz=aPyBG(n
ze6m9rK$=tY+x+fnlVrK>YR6;b<8g6T@w_Oe(Nn!RnPsX!C=8tBb7fpjzeX=-&@2cv
z@fTJ{Y`9-Z*UPf_a=DAu42JAQ{f{bbQ<_G-S>c7YgINCMc9$#Cz|_(aV;*Xhr(QHf
z+-t*1QS21Ng|FrNszTB&ud}H6{kU_l+U(-JAXRaL!mUGuD}*NrM&KwVk2Xy<`&}s4
zsUPgENyepuQeA(>MR2^=B~vngsb=txs}7&O!<&xmgqW8zz^#*Rb5;qp#|#k-49_Qd
zQ54o<WMsF0@&FX*75Bv@P_`4m_G|QX^Fp#St@{Vv3LRSR9k2q4{xIF6qE@0apKImN
z{v=e-B&k#!Xjht~HoH~TBFmyZi4RRAOzNX1a?j=Wi*2&q>X%D)Y`LiBmS*~8R1)%g
za+0x#W<c3L8MD7eIeR7!w;<m#2|>E8?Lp^Nq(B~T4QY5yB)wFgx2Ok?&W4}|xKNN1
zqBGcQU4Fx(=dWBBDKFO;yF(5p*NzWzny>H6lF5cHG`$tV64Wf{dSOP(d#_r^=1)}Q
zJXj~yiGwoCn-$c`rV08UwaD#_<xWxQ+#qxF6KKvMsG-UbUH7>cqexcvqQFt3GXP_3
z&AF-qfd>l<iLl%uqS6RDU6#2xflu0&`$ALmPPbR-lO)SbC5b7+md!&x)ZiSLli0vC
z_pj|182abzEvK)8z<d#_4^BOPInuT^59BkfWdU1r$~3>XHxSqDm!7%GBjFi>&}ao)
z+)dU(fi2pLhOch=<Xfr0wOLEP_uF6Y^GP?V1VpCb5}Y7SknQJ;u_9?}vg{vgdVUAG
zR!ikEgN#}p&6ig+iye`d_bhTvB&-PHtbC872irK9(DrNPGV`+wR2a2^`DRTic9}n{
ztSNH61JC^(O!|UaCB1QekP-7>e)+y4JnjYwUuH`ZXcs4m(R%mxH!|spjC4Rk0S4-$
zb;PB6B(e$2CL1PvpCC5ObGI%x8{~hX)nyMv-9x)5@EJw8UUvS4r<PX|Yllk&`4X)R
z!%Qs4QK`;IUF@YsO<@KJACQh92p5vs+H=E=wU?i9zr4$z_tdXlwpnjW8@~QLh>J2!
z8*9=3I!4}TF1h?*HfD(_s5E-GM2=aa3^XMYQYvNPQKv478ocD9>u0sjYwH&2;tnR=
zBkL8BL0B||dkof@6pO>6DE`Go7Z@L67-3bltJ!T`X0v5!b(S~e$oDaQg~Ewl%t#0X
zlXw!t&R_eq{idPyk-&C(`1yx9GPIVt6H=?lh9;&bU1v(IQm4xCJR-mT$evk#U<bQ`
zhL<RKb~rxwq!-sW%r*GLVLh0c4XtDnklzasam3wD9U`O{7&+~@ehpLG%!qo{{Jb0?
zNY$7~nJPrkvC(d_+H3Y1K5@BNl=v9<eSC3c<S+FWsuzzw*zOeihcPxWZhHdF0JPYj
z6*H0PrR_w&QJjE)9B0rmW<;ysRE=<h;S>DcfYzN(o9rIa1G^7!)A_eL2Kyz8PN!C&
zIZ_N8{haGpd@eJAk9TlPvXR>|7RAP17~Y{U$V`F4?~va*Rd%c^83QUu$xroZ_AilW
ziNO_vfHin8Vh7Gu4|F@2r#<L1<(P^gfCK%ebBIfD5^_xP(>fQHC^n2HrYYi^hX-eO
zVTbAly3%xGImI3_mRf<5C9a48q=K|`1+)YqJm^sqOVqIHu-dkuw~)jDZ!m@TZQsb_
zj2|yKMZBFZl5ig>UKfF`X}TxRActYE!?#@yAq}N!mqPzr>vA{fsR7SzQ*fc*Z=<#D
zV6gULX#>Y|t@YPjMJlbPp<nA+O})+g#x(y8?1o{O#SH8fQ04o3=yeJ{97+axdGyjB
zmhdDQ2&N+bJGSCPCR6Y{_7Y@?uUDL#)o-UGNl{Hx`~<2(Omef|+D&zGl@1Iq?Imfr
zs#Y^3CYu9jU}|^8E;tpSAP<q*S%5MPN)ew)n6)bFhgI{(Mc;@`f3O=XytyYrVXMV@
z+7U~v%Z1u%_uI84Mb7HXx+Q08t3}s1lJK4_sThsQ%T(rai?ST&obFr>9@G4`*AuS?
zwP^>5M7|kft)8bAZxz2xlm6$qBlms$$JJ$neDasjA#n=X2~uaWAs|fm3hXi5G=TCU
zp4z6A=*Q1ufby;c_79U$7Ny7A?U-_H(wVJ-Sg!uZZ6|eU8bek2sZb^SeO})44@RLQ
zq6EHS#=ej!;sB810i5Tve3Gm5y@I2ImgNy$Ob`;J1u;^PZl8%%x|EteG}l=mFH7oC
zM3vLftX>HPO65q)c5A3K4{p1KW%{;5^~XDk+>KlF(2d5jg-r}X@kDstU@k&t8h__t
z<wBgSLaPtY(6UoJ8xXO@iuz^s?fnez22EH25FyB?fLk7jHtQA7ub?=SOUu(i4HETo
z@Q1&fg#Eyh?VfxdqXaV-qjL>Pc!c>7NlTbNV~uiz-ES1{sgK}Z&sQA|uJXf7@s~Go
z*c~e)!#$jl<_W1RpkEs5FV;!oc!&}@#kw8=MFk}(9zbDQNE)lJbu@(&zgyp`H?-rf
zbxqg22Xb&8vYf+){@|A1ydhwsJF50+*{F70<b+)wIiQ&2QQw{w4OF<TB|=_H!V*dn
zVYS@t?D0`aC;O>o0tpQfZRd$K1u;GUSUZMceX>i+JtOu^R~vkN;+K=sw=(qB1%5G&
zq3>9*LSiN?ZF~m}EM370!!Vh@5qJ+rioA5Pf&5qjiCcpp@Yx#_y98EtRm(BLDm;7_
z#BwaX-yf4VWHFnpyRduy)pgrH;kxZnvf;Y14<MV%Wt`_IP%23SBm<j`#}`Uh<dQkv
z5H&|d%NdLH7}P}LP>4}4wu|Msg*Iu;^s0V@5gfNx2P_8kQME`OgsREYpDA{9a_X7m
z_S|{trR)<1z|6$&=l*2rCBHy&yv@xeEr5<h3#cOi#&w<r>dzkLZdarY1{Vaq7K|Oa
zw~$Zm^`w<=g_~3&1&hy_TJIN4)u9uf_WVHKJFC0*UBgdXX7bq()#4qPf4k{o04{o~
z_0JVBeDyp7)qLy=(_bxNhQ#w26m%Uv3)&>3T|Agf72p{FS$0?t^_^`OCE@-%seB~W
z+!7js^cXM>L7vN2T!kV7hK&!s*_0h>cy7BOmLr~lmt;|q;iUF^C_iU*IwQ6P69n-5
zdx(GiY5jK$8JtjcLO`)@hwF0N-{s$R#iB=NJ%Ssz^@0UYIc4u?A*JD<4Wy*tuqu`5
z5U&u*w3q<0IL8#a6>r~*s;lSEkq&bC^xVho2{BlLy#w}*A#bgcyG+0)iTKCHRCkcv
zwfV;zUcsZuTkS3svZX~$d7>|&w6PHX>2_0ruIpOS<MtcD8jEn)np-`=E}cx6zz(Dg
zoUm<!EJTZ@#MQIp0J;&N*uc_uQ={41;}D+g&^Z61*hcN)VhIg+S#?vv5bOi*@Yz{T
z22m3DxhUFLfP?53Eco}+uax$+d&!&Ple+tMrN5W&!!KIk*CnRAAKqA)1t^AbTdwx4
zdOj|JF&@5+bjiQOa*7=f!#I-KykDq04yGYCecmxn;F~|5c1HdZcMCI+fjgRmM=Mkl
z6s~o5xi#o*JS6e&a^P_8Yv%s_HnKo?n&FG{zFpo~c;2(V^Ca!hGQs@^NAuluNK#dv
zWvKZ6P)r^ZJ0RW}Q<-rU$%uu1luF@SRV~-Mza0-A`oQKGd)=>1Q|I_neh`v*N+O8=
z?4`b5r`s=ZCbmW3yhQBS8^*azD?n&@2VYa#H91(>SCESp>51llsmH~4v)1ppJH|<V
zG>F-<@(H5qLW}6NPbM-?I9o8cqB{WZc%G-Z%%oDzmc-=CdS)b(iEq8tG`S+uUY>jp
zZDZRFKDbQT_@vD2h41FMx>Dj+Ou?YjGD`h?g~kd)f3p|C8q4R2EocriCz6|PDBD>w
z0zk*8Ypn57I8YXqm`+P`Wf2_&nD0gA2)~zl(|XAO`8>s5i>ik}GTm{Z#HqkfBEP`Y
zZblET8HVX8omMwEO>+*cH`@{$p>}krnGnZH9pGcoZ#P+OEl%@3(RN%Ttc(E_rFMiW
z|A_Wy1>#8RX5V@3o#we9ew)z0N#XP=V-X_k6iz23^aP5IKfo6kZFUJ;c76DvzN$Ea
zdqr==NN2e!&1gFArq$V=eawxb2v4-V{HJyO*5|(P+^=E^kRNHXE0ud;R@LYiIC^@(
z5Mx@7;?AA3vJh}KpXY_?FZ}|E6j%VNh@dDr=O>Qcl}oH)BKhmN>+;Wz#nlJ&Mzy*5
zgX2<mh@bCJMI<fi9lf}vW0EWP6<ho9`NUNV_COsN;dugeH)A0_L&lh#f<+txmSIWO
zBg_?z_w>eSEt02QcmO7`dD*))T>Hbh**b%-Lo=S!B-1n~YoIqr9S_68J&dv5<Bp>A
z1dFh{SXOk;b4U5M9UF*>8d9(USS%oqJ_n5i>J%4=$>kTS0T5>ByWsmm1(f2s#NaE4
zpP1n|2{{p-Cx~`S#?JuDua8Hi8SuNwH4-|X0c>GO#g_nuLn6CezOJM8rNJLAO7rBX
zQl!8%$&~3Z&bU*u>|ayUTqnet_ty||JgD+Qo!OfWhCiZAExY*SWolRSyxP||SIIDK
zuUr4}F%3I1$(nTC2R6^<()9zjtwdpS^(*EAI8K2mH5dhofX3haJbi^6pBp6Fpglm0
zUSeVeA!P=f7s7yLf1J7Wt*TgNOEP3B+-pSG7FYD{nMRJ4LXn$>CKQC=qC5Em_4|Il
zm~`x__bj{)!_A|aN&Gf&TSXk|{Y7<Qu4fyn>wZ`BjtDJBDVQq2nZ<R*Z4->AEC&rB
zwqJ5yMQlg?DS<ACv?nNUGH5v;{EM5>b+&+{e>#oHxZsC~2q~Qh=GW4jOPn#K6y_>D
ziLbMK%~85z{9+ND%KQPSl|nE+Ww3jJ0I6P}-M9jM4S@#q(BLU7Z{r<^q;Q!vx#>gv
zy+k_`L#I)Y9Pi9^_gijvf0!&0rvkk%^!K~zQAegG4iFov5Ult>C|^ZqLOwMoLys`G
zkd9(TIZp)}$RN!z-)Cl|pvboifAh}}FOe?j`=5%MuBYdq)!cgK-}Qkgkn=$~tX9i9
zIQ*Y3=9I$|^@vFN01j9(sEz>NWHQNi7#CI4U#x9(Idb-`q_aZu&4*7eEBeMgA6qrL
zWk>ITcOVWO;MLQ6+N*7+uL0M6N%Pb2c7}<EV}<U@S)oNw?)zPkO6is9ZapB9l_kdS
zO~Z=yo3D&ff0Q62`JJ1mMoPy995RGLecG-^B-~6k^Cw+b5sgA&3B~RUv)i^ehFd;G
zSbaDV&P&kr?$&tjQbOoE#@mOBpYt8`?}9URA=Yy7<mGHaK3>NL;oq=flE{RWyF~p6
z-1h=+3%Pa+`_qy}^RT&W`*gt~vtc%*#|vFuew`0BKjnvDBS;Nugm(&Jogvf;@s<43
zXP%*II!vNkfH;K0cf!oehBK!C$*Pc9X>2W9%_TLFg4V;rY<``euN!im?%Uy5_aaz#
z@s=CS*(|X%T0)Rc9?Pft-gm0pC!P8mA7AdPt6XyF*XKpA#Ja+;Y4IFMV}uHLeBpoM
z+1s6tk&#F!&>jKhyjsJy>#aH2^elHae(g)}9C>k*I|%_a;?cd)Kokite=&Z7CC-4^
zU;^qi#45JA_CRaQ%@|c85?|)Tb1k0cGaO|Qn=A($%im03nEXrk+-Y3tRsz(dNsOgJ
z;RyJYZ1rW9i0N7?6-|Vc<rdNb<{BsTx?Sq|9>(Gnm3mz|T2H`qe_-oarrT%r+#M?U
zOTJ^B{QyOV{LOHPa6H1efi82I_lWtFA|et^p>+vjQ5LxKJ-l`RwvU-szRP-hcC-J-
zFn!NEvn14&juLPv*iI<9n7y`GXTReU*&jVyDijZj^a*t@?)a33rVzYiN%uXk*o@PM
zyK?p@pu_;E9ulgdq?*z1bO+1t_{MC$^hHsOIV9B?SK1kk*IAJRUpLqwgb0WZUPRyZ
zR&#>*)C1e?;jb<XCIs`y!EUd?+j7+j>++P0nyyb*x>p^dGep_U(+@$1;4H<LBrUN?
zdws(#xo2iEfj-!PN3b*GI?PC1Y@ZDIA1qCsQ;i8MU>t&=<dkH3!Ki3xN3gAq8ut|9
zo}zAa6c`p~X)eHAK%Rq_oK9T@pqN6qe<()wd{hs9GWnDIZWJ^%W=Kxyb|O+B&h+wW
zQ^7m`9pkW}KDFpH8_!8gWGe<YXe3os<Z88D*!_MDu{zbVX$^tvZ17u_c4rxd<?v;;
z-f>9j1;?9Kvd_0K_%k7#NC1@>3K25Ly;Tr(J4^#r1xY7CNqfCnWEzy}1H(H|&)*0_
znQ**LGO2G6?|Dz^P-ZY`rYSkLDGI&k_YY{U*?zF7->DH?5kjB0lrL`XddaO?u!sz;
z_2VA+L~>f!`4AgwT=oHa(G~|=(di9W$C+Q3kP!%AgjqZH)NIy94L77UnbJ*de=;tr
zm+mV{Y8VLh)`Y{u>5{haH+cIn;#tMbA;+g9D;)#!h~%mnco3M5><O?!h`IS0!zKdA
z6HtC-QqJmO0%2NMmB|6;=X;1e#q&@tdkS`U7Zf$FVvY*Uy4uA_Up(s15#-p|u3Cey
zq5>wTGubQ)bz6gQsVrK3KVwsZMq<5Wo4>Oqpj*vj86o$f1~FwA4-ImLv@^bq0n>t>
z-F}#(r=3alsnz>*nyO6Q9);|>lrwVM<)k=%{)JJ2&GCJcVnT#@%ga@$KcpE~Pljg1
zYWA2kuLC%z`@%@dBaR~FJOow6ax)Cz&@Z*zgTn6ke$AXu+DSlwWhiR8C&Ve2H{98g
z<aS!i7aoR1Gg-OI)}uH-#Tvs2HIY&iqg}eoil2$#G3Tb1G|Ty}7gsGmEuTPFU>K1N
zr5@UmUG|Ornx@e@@8>J-v-|BjFQ4sy>4+P^&I3l&*UMe@MC;FWeSTTp-jcP0$@HpX
zAqYsUUs)#e5o;U;BMcgkVGktAvn1#G^`erRNvJP4Z2nGkTpQcekh&F-oU@A%t;6Dd
zQSaf}DfZ*nl_TDH+wM{2$}^nGNPaw2Ch1DmbvddzVw_(l6J=&h+ItN`_kf0xu9U49
z)@tG&c)V%o*-Pd=yK3=n!x9r1M;+aQfk;x<^U(!QmT!XfPAj&em|&Y5OkUuq+{4E+
z&A(3!Bk-6P<9$k`Nx4|TV9Xf3)MiIM!?`~<k$9Q1M`D69z4#IX2{t>`sI@nwvNqZ0
zgfM^@Lt!B8#r0Fme)}o?od-$u)8w9eb7W`1%Rb9`tGtXYK<5lyh$Bmx3zI?daFyOQ
zG(|lZlX-FEnGjBB29_y`VXn4UuLt>JyD8}7u?3@|M9*fc{pl8kTXKSrFEsEwG-Z*y
z3v9ED`LhI$ZzmKU=S(6NRY?LTLJzgN#MGD9<(7dgd6lwW0k*OK0Vxy<6Q=(acEIVb
zq;kr%=l2K_{`W>30Xq|dw1Ms^881jPq%|VEGFYx%?)3O8v46Xm4i#FC`IMifvj3Aw
zfEl1#h8Pm*<m0-TUjj@1W|{3%Bo9)TMf7PulEdj#94p&4GtKv8l*w@?i!sFE2re>o
zke8QFus9{TAWq<#GBD!e`pMwZ-*OL<#App6gG01_t~x>HQEVl4$Ig8)slSF}Co)Wl
z8NdrudARjH(las6v9&NSW`?r{<>q=0e$zLM7_MJ^)wu$amg$VtN6g~h<}ArinTfZM
zr9C;U3>-;V5@jT3u63GBaZ~}1ml(O~_y#N_3XlYWlDV<>eE$w9C7f)N^JfY21%+UH
zt(>~MJ^uB3ztdV<v%A&pI>}<u5U+IpqbJP}0}*Mev1`36^a5Z@S($?Rh^yP~dP<7h
zk?=Yj!q8O=hI-~0#J1r+DV#yze^qG?qB#m|>dCYoiOr@&*i-d|hDs4Hgy=%BBlmt*
zIOTvzQy>TW%?9Sae|3l@gSgB>+zd$-z&S2G35MeP@UX(B`smkOG)JyR!0miWND$z?
zM`iSzqi;fLqqF0ur2n~^q%o(r$1nm5sgj`3q3(eQD)PDI#E%mIgZ^iMPT}#I^cTL}
zNtRbxb8;PD_hf`p!k^)W(R5*}hwG(<N&2>D@3%KRzdE1Ct1DtuD`GwNNp$E!Hv={N
z0u=slr(?w%8S`f4Bb8}Raf)q}I>L6x)Ar*^&xdBFruH~{ylh_nQ4#x|Ah8^e`r)8b
zXuP<ro6$%F0W-)~8WY3#Wyg3J?mS`NciIL<lSjj1qk?GBomp}>RjkZ4nos~PF{hSG
z8GF)`#cfrSZe+m*-`ge23Jf7~_54H%y<<Pm{q3*E^Jn(U`#y?SL)dNZqib0P7(pM&
zb#hoVNp#PjHCOFxHZ7lmuS438&&Kkv*8W6cT@jb-noUaGP}Kf(=k6dZ(?QSQ*#H}3
zC9w5;Z%?kkdBKJU;tWIrD(A(Ia1MxFdmheYp#Tm-q<tBIo7{?mbMaVQI`GASq-v|$
z*u)Y;8-xfyZ)*0+uzF$6{LS;hB{P5bfrBSBAS8b<h^&{H6&^s&$@A62?91!Q_$Z6@
zYJ(O8f!W{VGeQa^P=Zcin_^0hdI4Vh7&VZu;wfxnm+kAb<`Mk$G8$r%V(Fl9SPR!=
z*&CLlAeTc!pG_{eqvRE8gbqK4#aU;0XiEFpgLL1ci?j^mIPU2g#GlJ5nY=}<<Jn6W
zR4H*p52EWnfp<cv6k>yDQV<~jcxh_k$x&#_xpgnF<66fsd>}&oITQG@x$5wA2lRd`
zqU~{(QvgX&5tsY^Vg_jqfuSWA5)}w>8|*|FB*y?X7LDnJ^{-2R2zY&P+`8;=yXm?t
zD+yh1P1S#N=*bzjL+n4%hh~-QVX=&1(~+Bd?yAA%m2Zf}TleD1&GagpBN(K1^5k*4
z{t9b09?MgPY=BJXF%OL|X7R(cD*K8bfNubzfUk|c+K>{m|746MSZ63LFzD;)$a+IX
zOr%cACoE@t3|E)Kj4N3A{RIx|PwI71<>qrdFkk0)A`uPc8OQy}0T*Uu{6d0E-S5<E
zV|v4TK>k@c3CN_hJE&Qz4QHHN^Fxfu85zU**#qCs(D-<z)xOpup9^9=iXwbDfUvC|
zH&y@2{82w*`|^h@k+9<3y{To#L%(`?<n*}-rLlOscZeM@8^xH<_c^HGbzfIvf|f-C
zyYH8KV5?&fG%4Qsm%d}n(m2nIVgqUq8-8BY9q7Q;WKsti8Mj=7HSSXkE@nquUg|4x
zyQUOypVbO#z>&^r6|3uX6;q9okYZj*H2e0n>Z2avN0*n+aiOaUoXxUy`->THz}yjB
z|FH<ytP@2a=zf<-R$XfNRRc1dY+HioH7<SZDGRYvYbeiOrTb&SJ7zNstg11epi;YI
z{kr=}Fx{JCb<I3`A08VqnQY(d#;2Dbdu-00EW?+XY!G<N>yhGiFXEHpJ~gqFCBOxf
zwJYcKfZX!c*B^<4B#<1EW;A~Sd{9tFz}=6aXby#``==agXfeOM9217VV_R`Ci}U_7
z7n50zeAvawQd7e;m$Vh3wE-RfMSfNWJQa(;A4CN-f2jo0srH<t%+QRTdhe(gn2278
ztTen@(sN#UHDOoym9k9Ru!#$^lWey?Qz-?xIAkDG#BN=I;kH-59zTy#v$$L<c)9<G
z-mG1Ui?sAEPX1Pui(Q6Z>{z8y(1&2bb=th+5-6`(Msd#KHV1}*;lo1<AXHi-LmUE)
z-ciKKb6?yqRVMd6MY`e5o%fPp3_Cf<X8CmwhlIXxkLHN`u^&}aba?K>nkWMc(d+h#
zWqz7>Mo%5Mje8ywxw)!;{vt{0Pfcy((hBEb3g9}qAd^z8b{%Q{PQ&|lh<kA=Nu14b
za9b_Ya`I0$(PwkFlM;62q7&<&|3vVG!5e0Dza@NF_92A}T_0Q-?r;dUBpHApH%;4{
zVpsR{bp`{D5;2s|D>e3MEcC8_hgr=WjUY|WU{>nEDMJpX&^G`S$2Km@U(fz!tSRYA
z$S;Y$J%kC^CRl^Xg2^i|W51N8tuxQ@ST0)LY;*EK2lj@Q&0?N^IxX-yVLjlZh*Slu
zA&MD5^#v6uM=YTQGKn@+I1rlKCXGLuha98i=Jk54T_Nv0)`<f((0Z<RoqasrZcB=?
zls>f1k4y^99?ovIy@*YF2Iu)<67KUFA@>&<c<y`-LGA1UA2H6-<glosPH(s%XXBw>
zuq4Z<<EptKl;H7Fbe~V|S-^SsC<nhyYMT>*msKRR;zqZ|ALl*S2om>J_VQ&67ueDT
z33G+>^%KjdWOvJrKk3XXou;YPXHP5EvHj-L=dvG$0nyvYw~{5IQ%``*PpE6KzaZnh
zv5eGZC{EcFaHyR?O`8mihM_&CY%2V+?ofh<*H_pN8x3-FdZIsjh6RF~kZ+ieO6Ks^
z!&R7;FEY{3{quZPSFaz%`gt~g-Hv}t9qa?tIJGx{s7Q9BdHxdOd_WeLx$31S%B$Gt
zNOunSE&_|1@K38c`6~bCOSl?XNvlc#7H=us_B$zTJbUL!RADDMo=mfV9A2uvZ`TcQ
z|9Y9&D{Ja@+$#U=uJHX;f&PStSZ<q>E)jKkxnG&Ki=t`an%a+o`J!<EVSxf#KPZ)o
zGCB3!tAo$ao&2C;iv>}Imp4h!?vF=Oucr?L7wbve^Qi<UaYwL8)Obu>uBB4nVzuX3
zg_`Xt`9t@!5T*<wi5f&5kB2|b*Ix<CHGce6*lek!2_%th7R)<ggrM>0^u8=k2A<DD
z82W2nPyB}?ZMAxRm@)VXWlI9@@S3?dO<jDfRXH&5dE7^c;Y?WK_K>K>F|Q-#he~*1
zBT2u&81=tqTLs!E;J8Fb7IS~XHBL?;H3RW6Foy7#Yd2V}ttrD&vGk57)4(j<TG;+F
zGR@JEup+%#0U;Z{>ACp~evsA&O-6QK(S2IGMqWVV^w5*nL%aq@i;1I*LM)J-@TP;w
zEfdauTmqiK$+6S-dCo848{Qr1KcDn1cFAFgI7N(ZKYjSy^y{TB3_q3lB~b49b#7{i
zk){CxK1E?kD$`J$z^PLXj#GLT6jfvpg0FCmnQ8C$P*isOwxkL~G}xZggO81yUNU{H
z?8&sFH}6P~_#noNf{1hxY)BDi9#o?wllD2X!QKAQg$kBZUL(Do#aWH)j{Wx6-gmem
zjCxM{)W_S=rvEwO@qS^z6cJma3^iOTZg`Vc5&_;=KykDAgzXcLsGSs@Cr6ym)AX;M
zL9BlC->fATm5E*iUS<*DG1{9u%pAm-?`%q`bcYQaFAuvdpE%u0+vZR@a{%}Sr2>6u
z*4cvJtc+>hJ02;~ecTY499nV##$P~o{Q5dPe|^m((EZYi*x#W-(K&Qhaf$(HN{0mp
zWH{*jsbZ&O`Gj)NQj*lmCSvyhYP&S%y(KPxF;>^hS-Gw=Os~@b2v)f9dR8i_A>vH}
zyN{^wHQ^Gs`*lzh5xBk|IF^JffR)LIm55MuJWo^?a1*43gR>V}&K(l3zL8w-Ju7%z
zrI_OxX2xNPVe@X@O}}1&CoAh!1wQZyOJg0Cu=+W=Z4dLrfvFt9fc*eF6u0a7p~qDx
z`3<L<E)_GDzR7!**Zp*X^-6({#5Ay3F|Z;PEo#`^sh9V^GcYP^*q(G~CF7utD%t%Q
zoN~Av0u2FB=N|m63E*Is5wXc_r~5mSZ`~tYZtKGdSm*il)&92%>^)r!QsR&|`wp$*
zs31?MoO%Y7{pRrwIb;^4N9KUi6PBR?u#a1kS253EHIRiOagl{#X0SxZ0WjgcP&Ty^
z|Jq{t8F65R6Bl+JyYGDUs=`P>k|H%T3(I?<2#tceVV><2U|AqjB#?R{;h(IXfL9Ar
z*xG2R3KU?Vy5}Z~?NvOUn)ZEYhgy;REQVFGw`^SYY2F*7w+(&UI}m*DmS}2_wE(D6
zZbUY$*jpaNur$4y)z8ra;ln_-{%@Q6RwHKcEU1km!1b!`X`9dHa6;cV&@z;*xZF*c
zQ39QTeUl}tlg**i=k@G_Z$Oa1z_Vq`b>ju;?vzC1u@e?^#Hu2l9|~Lp+{TD3WuErY
zI%wk`HO25+Tje&J^V(qr1QC&rN0z&CW$J?D`3F89;@*5VLy$CTa@nr9xt}mn*NalK
z7%1Y5yH3bigs2qia3F;sg9C0gMmc%|u1u`S_dsT{7DH|XyLg5@(0w9Z<P_ZKKrWma
z=p>GgE!6zG2od#$$W!so3C$8Nw!OZNq$s;`Dg-`*A@ICw36N&eC7jc#6^FDH9{y1i
zU{jt$Bb5#f0^nZpw7hJ<W}|(x*FYR9Q-Pny>_~6RVtYn?7!BbPuxyo2C=G6UU2BNC
zL}35a9BJ<^GhP8-qkm=PA=ZICRd?)~-OiQ{_KpYM)08&g<Cg@-biEKc@Xo0Dax%eX
zi8yv7;@%rXxf<;j*E$e;5T$JXZS2&$!0~fwIDCfd^FW^G$|Zls9+a*jjjd{9H2~uJ
zCYpZjXjD3s6D^CZ1dj0zH-j?Lb)>M@{5!kyK_GL#NIF$+q2%C2_X-iQZ<9}5>tQHW
z=g>69+ch}K1eL=XI6M^XY9Nk(AuQDsD*vrr!lp=f#JV$DnmE3i!E&OJM;p{nzr-=-
zi9|;eYw#e9OEX$%U?in?f3|LZR36{CzFT}ztZHGt){{4qa8!17dk=c_@uX8)hm-n%
zX6@0g{lyjIMgk=b72&sW9KW8HAIupl7ou`V2%9>NCC(V6?0rTX6>GVpL<kUN8ja2O
z*&cnj^Tjfe(Wf|Z^|oec<Uq_c!W!F9xv_SUkumnB5dxpVm7TjIVG0f6Cq|yIR9Y<)
zTA%}p6)EtX6fQ@+5lLLC=iy#tpP#PPY{9p>27ITJuK?*03E*LOSVje*pM?+0v)?fy
z^ELR5Cu9|wxkdtp<%5GfH4*Rag}*1`zV>?|J#*;QA=A;YG#bDm1Q#ne9B1AaDz=@C
z8C~)c?Z_6t6Zh7V(g;<-^KK`ZjE7~ewmP1SVw_}=MhGpOT5)^`r5D&1zRiOik9NMp
z)uB(1ovznM`jazp_zVq*)b~~a0vA0}_8U$uv1E`U5e{B>^50L!tyD>5w%KYx4y;6Z
zAd9M4uiI5|6Ntx`4Ks_4*Mw&PSPHH#6|luQpt$4^4v_fogBgCulbU~ox>c&J_0Oqn
zH?`E%Zp2;R{{+G`LJ;Y@NgPcLAh?i+0Z`gQyUQ9eGbrII#X?k5fQ59EK`ae17mqH#
zkC?$Om~X$1z8;S5;DQ5yF&JJOe7j-|6H2B#J)&%a;Z?oQLgqd#e}qp`Y87tF#D%UV
zl>Io29dtBtk8lQr3)X;3ChchC`ubhog;lLI>mCx(f+y^Yw-Ko<hWcB~+skW)KeudW
z6lROFuOE)>ta3?Gq35M>)t9@yrkk&eV(8}W1+NKL1}Z4R4fYD%oNRz1f1x<{uL97b
z@ch#O=zY{of=AXh$ceyodw~;?;0XA%TV-oN-g7jB^n;Qw<?jnHBmN{*YAv?0SB-zC
zn@_&egAT~2yd_<eaitPCTAdu&_<7+64-EQI=l!HXgD{H?F9oAFD+};P8SiqOK~f4k
zoY%w>iMR$ZTLmpz0jm=dJO}ua{Xg8Uc{(nx{Z^}5KDM5iYVUEwXIg*|c;6x6OflYk
z#lmZdrS62=76l<&_uX1gUW$FgSPMbuN$2j*76>{|a=f<Zxk*`Jgj9+7OpE#fg$S_m
zbLFZP$sIS{ZxO)6ICnU9pimV!oxm|r=N8kDSs8Uf-P3jY1e~Fl^&PHQZuc`)hT37f
z*T+R(_aX1^!^^G}k6JdHqE>KWqfOrVJYgxGHKv|zTDB_<<};6)U?XjPow9}U3J`zY
zJzYgH1`y<M<M<vM<$&9iUv}bS>qcE*_2*STB#J;(PLkF2E#WRKBe0*BVl(=sadQKn
z84I}vBOwU9ZxIeg;#T+^Z(bMy(F#R~b;ikwp2YJLPSarllP`Zy_)Dv#NAgS;SghLX
z&eQbBGx=Hzb1&F;?hjCBf7EwYxk~3tgE_#4ar_OCj5UGa{3Y7BVb`(L{rLxmN$@_I
zK1-Uj5*WO^WTvxmDbc|#TYs}k+x$w}`ap_IrWYG%q-9@)>m{?y(IEXgv`}^3uu%)1
z5*CaWH36ODdpaDNj12RM)pDe6`|5aQWyQfjrMYoRWAAS|QRsBjN?6e!;a_ycAOH&3
zyko3s7pwxY7_QxLl2~^!@C;{90Ib4-Or9rC?N#Ov3BIaO^O#TRX(-%a-RKxa$~Jde
z;mWB5dWV}Ww~2}8opB5%suQ?9f&LQHH0a~QL$VahAJG<&hR=j_$iOQst|*4|W(kzY
z9p28w6E3;$<g(5tmz=Jho$gLWgQ3F2#HCiB41*_9u#%z--Ou|_BlupI?n{HMaq#i;
zh={_v$pNAe0?>^9X423+)KvDTDT%;nf=AKAFr`_j!8jqMnv7Af&dr`x)5Mr>k-Yh5
z-yUzDiv#8|LPo252~bp-Xo-Y2b?|Z}v)G&tdH+JGMk~mZWt|myg=daEoDc?Y|BU(;
z70CTu-GTEDhKeTyHC;qK^Lh81n)+u5F;6EKV9dugn^byTv+-@8PQZi+MtE2&E8sTf
zBlcutmG?-%#7M|Q`@}7Y#uMK`EFQe@Y`!UKvl@PJcn;lhT7$Y|(bV>{hytucW{?v!
zmenVTk1Fjuy~1_ai4-I^V#Dgj=PDIL?=VcS(RNLQnE&;)bpQ;reN99AmjjYu_g#--
zN5OVn_wPUI2zXrg^K%8_GYWE^{OTUS)}0c5nF88qN-6Td2cWuyK7S6!R-CWa9}-(p
z!%6bImvcWcj9Iw`J@3O4Vb_q=M*p6`c-hU9dZ79l{ym;t4v?YI-ArY!3qL*R#LP=5
zj>F@!B{6lTxLVne72j@2#rTCelp30VEqH9*)(i#?Y5c{$<Nf!^cB_4>5F6>m@bZMO
zNI@5zP=6N8@p0X%Mr?-v>m6}Q)GZ9EzjBv90;(6<2oI$e)}=jlsHZiSV5Hq*&IoUs
zkmQ#dOgdGb%5NOjSs-=U4AzGQ0nQ$X7MC?XQFp#jD)0mos6+~~%91n=M1l{HA$hfF
zw>YlzQbD_(@8CHa*qt)|8wli*Dc}zaDCmH~F<r~%{K0+{gRj<p*^kHPFBNitJ!Zfh
zG+sc3$VN{iUm1J2Z5*;z@US2L?UaD-<$S<t!clx;vv)X3ZW994rqgxnL2Q7!uFH~o
zIj_a%67rWo4=1dEUM)Im|NZyr;48oTIdOi%Je+!<d;WANi%u(OVn$XowLTPcfGwK0
z%nAWE_Vve*{5^%-`=DEDisXC_uR*W>3MlYCU-h#Gj1riQ6Q+Or=!`;qQIw`&27u=>
zUKqYj+E{hKL=uqz*#fsmxUv)9H+BaNiH|Xm1oE7MNgQ~SS~T;gawp<^sQ>6mf0s<Q
z<=S_mJcA0vTg!IArJy%Dk3sNHB>k6iUKm2V@4r(}A6Ay<eb{Q=uzk}!na+Ni$A1Es
zY5FO=!~_7b2is>kmcE?v{XQ8@f4Wk$Q$Y>I15tz^R?2o4P~N^E@Ml;U5Xj;4e7nce
zC~+qy|Ds~qS89U^EfmU;8fN}=;lR9?eqJ|A5@I)>?Y8X^&=1j%1d1@YQ<+0>t4nUz
z|Lc4xDTog-6r=_9@qDQw;Xd&1x0~9&`FO*_yN8_-WS<`vil|y|>8q<vNF0)>E5{PQ
zB&c+yW}bKk1pDS@VT{V+jndO$-_G?0!s!PY(Epi6cLNK@bhGF)`k>8H_b;Vg*nWF^
z{{0Bv*DF5i=o&a?RM<ST`}0lczx*H0+^*vSv+p}zNuJR3fy*^2OMZ1<@y~_ra=&^C
zI4(-Qp83jf-XV^q7T5l!wa%Kvz{qjxanr^bN{eKacqj1P1nr=l_Z!%3I4LFeO<36^
zVV|zw_o-V}d9Yk+*ix~k$hPJA)W3Y^>sLusOad<cIMe!6FwlSfbpQKBYhU|cdACfR
zoloXR-zTSnDoaBihKJ2J+8MJ{ayU|ZMP9S;J2PE&(VNluYm-U)T{o_?b-#Mv{7Y(?
z=j0N6ZL6ZrCB|b4e3P1<f1L2g`ro_fd-z%S3|O4n<M<XjpHJ_M<j&}J`Jw;x+}B$j
zg34;ArhQub$tg$5$EW{!(+30Q@ZL7vqYMn5Hw_$(&M0~TPo`j84LS=z`2dg2;)y$f
z+mNyrin``beSJsO-o9SC^Pt%)QQy`zY);ekEi}&w7&%8C;oB~8@Ug|C#J>5j$`f3!
zid#&%!MU{jQT+WiJHtLo8GbGD-0ga)In8_H?=oNuGkD9S?{6n4IzQ9q54O7HbkE^S
z%At0vDNCL;DQ|ezb$h{*fI5XZ2`LG=9Y4<Q7T9rqiphz0z_P0EOWT`ezO&P^pK5zc
zZR}$_;qyF5O7iiOqs!$)XEgktZ=|r4LtuXO!G}k#Z`t1Aoz2~P>-&zpi@;5rTR&&M
z4Uex?ZC5G%-ErXKyfe0~ijNLYz4LfG$H&n4E0cHJJft{N@DY#T422_0c*AAZ1h`d*
zO_=n@X3zhXk4`<{IL|Eehc8^As^c-sb4hW<ojorydH?;joFLxe&7<6Mzftqhdx6U_
z@0>x)7yf$|&dGRaCt!D^@dR+8<h&p1-1g>1&VP?gz1!UL;hnm(4{xYQhh)F@?)3|`
zg0-L73vQHd&P;wEl>Kv>uWUz5pssXvc;K&F={QbCKsi6b&EP}*?#`!7nX6Zy0Uasg
M>FVdQ&MBb@07I-O?*IS*

literal 0
HcmV?d00001

diff --git a/apps/www/src/features/www/landing/assets/agent-icons/cursor.png b/apps/www/src/features/www/landing/assets/agent-icons/cursor.png
new file mode 100644
index 0000000000000000000000000000000000000000..22b3da450712aa34c250d920fa3daa9efa8e804e
GIT binary patch
literal 6164
zcma)A2Q-}9xBo^bx<rXKjNV2NZAML$DA9$89)mF2jGh=o5H*Ps#3+#<qJ|)dHljvJ
zlqk`O-i1N%xHs?K`~K^`x8Aqb`S$*P`}f;>pLNdq);j00{!I-kipvxL08rh~yl!}A
zgU<&U$=MsHXxnvWh#XaPRREwY{=zR?;<InCy{4fq00i)z@xlP$@SML00N&yNuxtYW
z@+kno<dI%u06z=(Ihfr*=;{JOXFeG~1iB2IX8@fIMG)&>zB)(%Ap8R-0DuT*fao{p
z=9xWzo}7(y&7YPq3-p_PhGh}_#SYFQ{M$d5r4iN*of&cuO>-0gF!G)c&<#VLO#mQB
zcQ!Udo9XJv+q)yhZ11|;If(foJ<e4C+)w_@MLM8u!G1_rH<Y}e0{0&b`7{3<hH``d
zprBn8xXpC+!Pnfq9Kh0I;$q_5iWFcl818i!A#ZqH{kQz=OM%-7jrNd-LVbOG#e5~j
z+`Sy3SLEd6pyCox2?^0NhA7J44Q=Zu>V|^+ndHCoTz5d(dpUcco!#BQ=Xq`I+`Z8X
z+}!7d{(AoG6YY%nyOJB~_q5I?2tAKLuZW35|4ruL=ls9O&Le-y{+QRF<>2SZ<jo8n
zQ0}hY=WQuok&=S{QR07~e>eE2!u($q|3v>&@wdRl%^9sI@w>=>!2eL4_badO?C0QW
ze%%@A;D$Qy?&_5@;lD=yRcZFWD*qArPvtdtS9dQX4_kW&#Vfyy{R8^VhC|QS?;q>=
z=Vti>J=-mc6maNYJ5P~<0A;uh02i%pTvsvn1Fcy)d$4I-3Mzk#8%+|?79NS?ne?%<
zh$~?u@}g^|3nllw$q=P~(d1XQkcs{i?rFS=3K*nnA{)iYCa6l6B~TDEE9=R25Q&m~
zCOTGjx9zEDN3y7S)m@icUpa6`0fU|DPv67J%V7#HmV}%Uj*d0f4f{U>ORO7~c)g;#
zK+g%qNbgWrvw6r(c{R=l|DV8<F19|`^>oJruTD;OUOg+0CF%ZWgFhg2UlH9e&9pDX
zqHvWz72W~@!os&x^88D_T|JiPM)EEl!q<Pfp6no!j+Uhuzi6^@M`7dX*uTMdr4xqw
z##mQBGd^Y^Rd#T2DB~bUeuW?2LSx<LNV+sDJFBax4o7A@p7{_7^WmF*ap~r`Av!rM
zzh%C-b?N)a0FTu5XSY9NMAdBT!@HDHtywlPk6=6OjQGK7Dt5HC7qvJUQHdF>u4AEL
zdA)Xba!xO`76JiMEPhzC?)3HFIan+1>n11BQ;}tsyu5VE65q<fe)%%;lecj6e5J2j
z<Ecrd<LTYGp_=9@b>p<$qCKaK?i2Ha4H6BU=+MCBl23*}X(uM;(Fx_Pwen}0Rbovc
zhTS>iE6~mj%JAk`)2$W>z?kH|l8wVpNj?z>;!^=NtS$qN*x(~ki7)||UN=jcKPf3M
zIxH9dwb~fn?GlN77#MJ<VWm~|sRE>LFkKsNcblCd^q|h-U0X<;rbs~l)Ra@8yl%i(
z|LWZEs0!xeIJzYYC3f{Rzhr-_gpDnDcYH1{u7ZQ(!X?Z@2$M|pL_Ilq?g5!!vCF8!
z4gs&VPM%OdkpCvtvgb>|MoqI`#PO2Cg(LPs`}myzt?ZFB9YPzl)E@9QTMfbLlc}9a
z$b4Vq;R@-ImZE*7bUD!8Z(kOHg&&#+8i+75U=XQ!ov1X%<23WzIv|?~_^D9bO{COV
z{&=rijzQ<_&xOv;4^oajY#eH7_94M4`3ZX+om!{&CGXEShHlY6c9IFygw9p6n~2YF
ztqK?CzvR_^{<L=?C%Z|d#&3(;+Z&rVJ#G7i^ZV?p<~h?+^;uq@QADDf5wO{^8~<A7
zKwJwEu&?c{lvfy&ENXc(B#NS}oqoQMGPrqTzyF<su#=6AGQf3_f;>x>oGgRcfePTT
z%y~;h+Ml4^nwcC5725tX!>j$KpdhNwY9nGmVf~sQ6q+|u?r7xhPUG!so#i2`!x1ki
zoVr!7i&W;<TN`kBb6>g;B-@0`(|Cw7dh@*}&}Lz0XUBQES*^lpi$3ks!L90WI?RXA
z4e;i{PKnKAR*cx4#aAaML0d6jl_O`XqK=5i9NHyVNrH2Uj|)Lju~$)Y$rcz(3crcE
zgXW&+$;lKTRs0*q0RuBL&1gnZ+ai4xEOsF*6G+H<X&$M4C)3hG`#@bXl9CY2*sqY*
zLvHoPOHzCPhBr+J)Pc0bODr*wPyHhcy*}rOmX_AAM)kAfhe3NZ^3E4o3OOjH=Gi{g
zJ*At?NVNr0Y!SJcO^e}C5d|gF#8Gv1zsQ^NXpG(%5QI?d(P)jxEFw6wUvRG~3n3W|
z@7Cmiz{ov<%AII)e9Dko&XxY0Aij)j(H820w{IVnM><0gR02Y2k5Uhx;js{qxSWu`
ze1tQ5u5UG>rH5aFYY^qkn1xK<EaawTMx0K;Eo;ynp8e`0jv654(F426uF@TkUGYN+
zQNIom{}{p$2JkQs{+JhTv^dXljVU%ZR<1`xmIR=cfTQw{h%Yc2s;Gp}!ozHDg$&vL
zdi=!8d5Mh<rc4Q{kpHBl&jHv-q?lV;;`(b|!)Kz(U#`anQ%G_D&^Ibq#*<>PSScwf
zfdc(;C4ENV>qK%=5-P<<F3B^I`rEsrbtB@?S4;*PDf|GSOh%%SxJQ#n2rxgUo1ewQ
z*+fOYD-%woF;FaOsPL4%nmaDt#^bA>Ayfnb8}zj#JFO~@FLt&&p521YdPD+F;fE19
zmuZB34Xmw87NfOJLg;}fpH(S?mfkto%}u2hEGruHb@Y6pku5Y!5P;GMRIR$gfJQJ~
zy#vhJz(5e6dLdMgD14V@s<HJsc9KSTY>j7>0w8NBC`dCcDxPnbZ&+(w*(6~qr$2DT
zv#miYp=*`X6qHJhA7HMGQ^VZheM3HJ*iT#*4+t$l!SDTt0}{8D<sQtmzEF!%upm%@
zW!vaiWX57>PsmD!SI25Ch+=>AU}aJtCC2XMx!_EJU@nhHFquekp_%8UaSvQuUXG+=
z@!4v4E&8SGt&iXy>{G<rI4-yn2d~O12R};U$7~tht_mVlz)xMPxHow3!22c})QT-v
zF^-;Fv2SQpNFw2h=Ura|0>FkqIk*8A8?oqzVi@-sTdO$8IP$;z2pN`c(K_6=xb&g1
zAV^ckWq)m47|?IOpe1zC0RX3l2r{IXv%{>iswRV?*AKrUYG&hL{vR7OCuSlcI=8K@
zX{dJhA1{f_u(qH5Ws;r?#`l^CY9ZjwG6Ev$yz1T7r`!AizsfY0x@D|yJ#v)%3c`?#
zTtgO#4vgWB6t*0lq@iO+OjYhoxzw2^f}PI6*IOHJ2#M@&qu(S29Srm?)vOffkq#?0
zjs{0LgzXSyt!t>y9Doe_n2$Fy;7#D5YebKXUs^f?n(AB(r1Om-Rf~%-jU~y<6Or+c
z2Uc|E3H!tTYzy$<46Di=c;0h})mK6!<KyejW2co-Qm9~+*E3{*W_XiQWa&bk_X=jI
zsA?js`^84i7z<^!n}$luyUf`mO|qwQp|pN>9lg*j8LLUX?(S|oEMyCIsb}ztx}ev!
zL(&Hi9_+R$on!><;x_uTA5sY_A_tN34TjR-)%(7_-yE3yYzV}*R}f=W?hHY}CPfzJ
z@v{IJ7B9dp5q2}<{__mK8UEcBYlRz*Jr!Lgl0GemL4kq7SeUQ0GX?X&@mud&`~=Ew
zBJ;}2uld6Ud^R;fp&g~QM|*48t*sByZ3_*`zT@6ik?-|<8%A7gt$H=&@!<ITmTiU`
zpY7Yag0wX>NC!XGbV)NLX<4(=0B8v}Mv70(Jq@Qn>q<ZDPwWHZ0V_!EB-kbOJL?=R
zJmSyW(yi)+Q*`k8UAX$jy)|g0Ow{VOf!MdamK8Y=Fv2x_=auU$wtiA^hjq04$b`<+
z3ib20e{?qFrEf}CgsKWiLas>Ll)S=_p&@5b|FrUJ4(D;ZAfVag_tD=K^*D|lrp14g
zEziR3fM+~#^5M*yjeoCBn}Jnw>wS)`z(ix>_`vMgCnt}bIT0iUx<|_Pb{#i>c4|8c
zl2e;+#n=Il(hO;2P4s%*PPCm8;IB7xg`Pb67LHWzS%hE)T~k*;*1GRTF+<Or&I0SN
zFZuyx{@0jbf$_=Az+|gHBy=2e%2>0MYtiCcP3jZmQEFW{)G?<k+1w^+Hu!yO#>e4f
z(5_6`92~go$i-F&MW-uh>zy777R)Y<;Ak+|eS#D{%U=P{bta`Dej_9U$30kRIgOW!
zj={WlQamRMpveU;q%8NC^MELH-3#hUhDP@;k#TtESQVPDj+a~bx9M%G_F?f{-+E^~
z1EBobGuTr*TLRkKJ&v`p8(&4oDv#r@-smG%u8FBQ^e1Dg2g2eg@8&Oee4Z673zS6S
zMqubgTK;k=c`f{+OWX@!bz7x*@7kuC+SV(2Vf9)fir`1CKbR_!@2^L<2b6n%HV2g3
zOS?21#Khv>1_~2HiFtA#c$XLoFC56(j`A-hx1|#TVU!Wn8}qhZG9s6!Z}Wx4`vk}u
z;<vk?ui3ql2|D(!IG!CH?Rh5_b}qo;zoZB@X>+OI>MHC>OBi<L5TpFgXM5)Ch-;~@
z-ww5H?rFo62r)pcB&amV8eY#Uj5c5zASMl~(K#T1>l&^8e(8>WM=E38UAEDtdy|V!
z?PWQf4^sUNEcQ&xASpB(tf6fy-%5Yt(?zEV(Ruh=nYii5VUvri(`!4IW)1Jn$!Za5
zg6!oZ6#SpiwV1W1O*I(;RM5mB8L7zE3!k+8WWE3md)?D_SLNe2wiXg+m;q(H$Lb6W
zbwG^a1;6WXjX6=L#@k2=5G9sAA)+E;80dWrvBVCGQr13}zxF|h1|VZGlFJWt9ZS=N
zDP1yiVtxBSBc9`+v4RGy+;l=>S0!#mxojJ30}B`o$r1s;e))zmBI1`IG~ZU4f6|lD
z{%E>Js#eFjt0M{!6yMtMc|SZ*5H0gqm6|K605OgGm@@iS1d~jlevgSL9uifT;o!yh
z;vu7|&qg4>UXabM-h{X(w+e+4@!06J1KlcL)B}+5E=?i<kV0A;RjoiEZ<8_}`kbJ3
zv3P+^NrW3j*%9@sHW8CR276)mF#m$3CAXyxZ+R9G&?rL2O3kr)pAT2nK_oN2ufNh3
zFB2`bv1ELT?rnDgs1L)(mHB)xti*0G@@<suI0*xD0wLIlgorQkF55NOn5W2Ver9Vp
zFL!weld|$@X}74)1>8h)yL9r@^EHPfr<FUz=H)5!(+guWsKea^i9!TeA|{?qt{J_T
zM-224+Y*wcNQ+JDia&*i_WCedTm_7eYtt*)?~*#>T3uMklA2o!UV_ADY-{7$10B`d
zpeCS~im@2v-1iUELjqKG$xot`p58k~te0N`z|2C7AJ7ZEnK?<qx4xvkU&&9YvWZuR
zRK6hS^Lb(oSDWk2U(>rtvK+$4a`|!=E<M^Wis`ALHy^`FN6UvbKsm4RjyMsBk;k;q
zqAJ7mj{o4?PaQPe9Gms#<45dGtb9`Pra|xGV#=ZgLqk5n`*;_h`1>Q6v-=J^ajiz?
z)#5VDsbWCMJP-1_hv=Y)nYc5I_e-i`C}SO|nYA_4wSvWVn&l)!lte$;&-r~Oio}EJ
zf$^JsH7XQ|4?Sj_?dJFgRD?(Jko&Lz+|lW=E1s10qBOd(B#h-!$}7$d5~+7srNF(<
zJk=)jb+6Rq0L|vP{A*v;G}_F|u&ZfTZ$*dEeCCia5kK5wRgSH*WDiTd_tb}DgMmZA
zE5(`$#x+5ec&zz8!*w!G1mJ;)6J*D+%8^V49A0$i`C#BmPu!{sF|*X)n8rnXqISR^
zd@!bPY7utmu4|ZvY0z8%vN;AH#n%hc0JMU~guiO`>lM5QwkK|6NL%5Q_zb%FxDX?E
zZl`dZSSpjzTLr$OpIlCA5g`H8LIuLy23&bu_!B1iHyrpZWX!7cI|`GpI9%sJj%;75
z2pT65nzvpky*E1Crw>)%(NT?g8(7j#-q@3y(%LMOy2SF(vU_wbjv#n0%D9M(8$16X
z<ep1O?%-P&^0AV%pEO{&&cW#DsF<*3&rdG*j9Z1P?12lBW}LyxzAvYEq3q<rH)hP8
z@J029hlJ=u^o1g83{~&tWRHq&`*x+qNDfX;NX$uBw**i_Mw)k1I&-SeBWL)>xbw2r
zw&>QP6OaY@s-&EI({fzcu8jBu^h}M;QIB_sT7`RJvcG>P`wM0HLuq<kRrQZKgG@#M
z|Gd1(Xx<bVhG|s5nR;qAR&RGERU|{A%pB4?lp0a^LFzE4*UnEHLm{%_ef&P+O5KvQ
z=sUJe8s=P=lcQ~^Xdhn;hf7H}>lA2Se<rj*OG`93fHszObn!<{3t8DKt1h8WKw)um
zN)kS=JUm<IJy88BWg`q;r=Fs8;DTM>XVkG`+(r+!QBnLIMi#loEisSr_laq?<_iR^
z1$XF#SdA(){nC3pc-FrkP;Vi`=_N`(v97{TN{M3c5Df>xA;d9L3_(N0o}~4t?HUR8
zbXBs19yJ&<Wvr6Y{M%QYRD{7U0}s@QGiTJl@f3~!V4YFkq}?M86@MBiPAYi&6K|-5
z-)2z}@;*mqGuLjkLRj2Z_<#pR*$8A=|D(>6>Z{BY8xmS?Z5hPBC@XMQF(W@0AI-PB
zAr(aFVOuDvVHj-=XBwagzypa=jLmbeb_(mptMG+K3;NwM#uvX%+2gB1Fe-<Wzh4HC
zv8k$`oSpWf1zH!@){qQ}z{Qt>$!2O9BLU$QyThY9gxQkn!s6e?ZVTlv?s87G4zVKj
zlaA<A<J4!D%=&0=>i_KDqF&Cta%|^*+Rk?}u_*%nIbYl|^uj6q#bE^DXM65JPT2@a
zvR)3%%}e#Gv>F1Ztqb9g;upF>fL_4Q22=u*$1>xQY-3KtNCIYwxcp*DDsg0GXwxRI
zwLuVFe8$*k>2<~D9Hdzx2OELo3bsbn;M+0_ggSlQMg?;I8R9`b!c{@@o-Z*%oMCJH
zqy1wt+j6<6?;=G%bb%__cC~MdbbN@<BA|8D581{7Oe1TK2Hv^9S)(ggH<$-@k)n$6
zfTB5l{lwY7TLF<ycx7**exzT?PIgl=>0JdVn1Y4K9sl4FXo%>W9<uS+Rg^UA@L+?q
z@bJ_|tveY2!aUdxFEv0L(y^*cM5daELwU4rKW3nx>Au}zNv!pIO5i&>#{LWJSAD2~
z`eHYwahn=>Y&jIBXEU%<&H013*u88N)7oiTL=>DAt+E;5X#jc|#+tJE!Ib{UpirC4
z`kNKM-YS>r(OA)ska++Ifn;wkg{q$JaEM->6ByK5zkdIq``$9DLXph!*HfP~y`Vdb
zwYzJ@#ha-*=vxBMb&N$;D2bv9-lr^Z#nrh@zv;TYo+3_le?6I;y5;IG9$2ev^<-oA
zGG_Dpawa<tcbqVJcZz2g(9HS(rrj*+N3ZeK`>;o3C8Gpb_?l@N`M>W!m78a#c(x+u
z8Bv=G;vWuC%=)x@%tWG|hQDnpO<kI>m9f3OJyTa##vSxnq9{1gi0<JpEzA8_4+$Z|
s)jQZlW0e|o?f>hB?)M$uBe_kCy&CO_8+CTZ`MviIwVT(ARc%853pH5lYXATM

literal 0
HcmV?d00001

diff --git a/apps/www/src/features/www/landing/assets/agent-icons/opencode.png b/apps/www/src/features/www/landing/assets/agent-icons/opencode.png
new file mode 100644
index 0000000000000000000000000000000000000000..b70bcbe2176ebb3090dd23d85a3a6564d68fcb55
GIT binary patch
literal 10326
zcma)i2UJt-(rzfyt4Qytp!6cWi4hTzE(WAZ5rKrzrGzF5(m_Rf6OmqmbVDc!ARVPe
zI)oxYN+3Y!7r*bj=bZbm^RIRHT5o3d%=665yY^)5oym?iGSH!?;i3Tm0Q9=|@0wi5
zus@56;^Gsf@wD$kkUMMXYXJc8MB0<5moCl)9PXRw0|0@-7r0jdz|kN4F95(-8UVoA
z0RSp#006s3R<p6%g~Q*;T=$v2K0x$Brvi|ZZ~^{AAh}o?B;5bf?~&X9ko{#R1puO4
z0ObE*3@+rKBk5xO;ruPh@<{$cU)b_U|Ah|ABm1}hhn7Kx7{3tI9``N00RXn^e-??Z
z$+c|&fHcSDk-3k#{zDZ9C`9t9Bh=nW(jVgShXqjcSGiCjPCics{2^d>Zxw%ap}!C+
z7y2Kwl#sw*5Fa;nA#;5r0U*@NNkBnTT2fj_gGN9=K+VhXnTpBXd;icc&eVmT`}laM
zNJ+hT@j~*2oFvrCSxQD(Sy@V2R!UY@;sPPz9pLWs)L+8g`|968{%@SSPTme)E*?HE
zP<Mepai7{leSOr0g#IM@*YS6qJ}%Gxoypz%pKV=iQ0k9IN=8yz>c7#P{9XPR+8@u~
zw7>TCcRIB{!BosmoV=l6-#=w($lSW6_E(Dk$NKLA|7KYHSH^!@|0m<$1T%LR9}U@m
zlKc<zf3W`4t77Eh?*z8E>jH6d_x`IoY1xbN{;TW1QqBK&>VLTYClv?<L%mEro;o;b
z$o!M-KTQ9i)ujGh!T-3Tf49qD){B18piz_hSMO=iC`D%y0Dx;bx_7l6`IBs9TNXR5
znQgt;DBW!Kc{1Wxr|Ty25>(r=^6{Q}6xrLmf;Xr>YIG^uUP+z@GJQ1ExPRrPG1DB3
zYB4<GE|5HBgpwipM<j;pddA~hK5;X;Dr;_LdzBl+_`}l`uJtMJ%9fQ<Yo{U$+XE}?
zK7T3{Hisy$o0#?WsOCRr_^n#K)rKVd|5dghY_>I}_AMnOCJwdiW^W;g)80eY2)~WV
zLL~<1EFxgD<27xRj*iaie8t}8*DV9i8S57_zM_nh_B^;&diBt=lK~V8<&em&=$_Tv
zN?eSkoR8<Pn}MwrrpgX>#<J&6+<CFF5XFz&&pAM>er`NBP*K=3V8ib>w4Sz`Cq+4Y
zZ<S+P&5Q_{Y4Tp>qdF6du%S78FbaeS=BToJwfc|89}4`Ac48>ufSKAZ5vawbJuvTt
z`q%?`(wMIL4@ZVKw@pTqfL}3L3KBEF4G*_4HL^!&uynu6KW<1mzo{_Q?O=L76Qx1O
zH^jaWiHb*TD9`PDXn;W;61$b`@pD%Qt~@`9=EVNFjI?H?0K5g68cpIilGf3`_Qv}O
zLcggrUP=D3h$ipO92(z_VLD$;*5Nx$#RYvO4rHrDltW=y?p8rbtR{c#iJVLm<?~zJ
zqj`d0ieHkz)+VB9EJ80wnSbY?smN!nb)39@;U`__m2PMVp@9GNZfCB1t7TC`vCtr~
z&-3%S{ljf`2O*GpUxSA_t4XG?|AQh(jC%wn%FcKbU3|D05I#UC{B}ImejW%WC(7|R
zI6Z>~j$|U$GxooFo(Ry|W^P<dr;azP)PJlfZyAi{w#+S6)QKO#mO*H$W{9k&4i>5Y
z%TE%UHM-uHC&V+UpO`NlHR<pN6AHRC#RAXDNjX>Pq5de<kH5}&cN)gOAPsDOSNfQi
z>(>_^4$6+ZG!=Q}7esv@qC}mG@WZy-Ly!BNHFhyB@DG?FA2M|M`G_%r|1L>YrE~w=
zm+m6t8P9)j@T`<5yI&W<cbuE>Xr4_@Aost(srf44(ASz@=-blyFVzrJk11-Yvx-ey
z2;_M;j?#jG4bkC-Th276Vx0<6Tc_^}<x^#jFm^$iXC^S7@a2u|L=D0)Fi{haW^wkq
zuJq0{JSgPKQL6Fu*b|SNFvLVbW+vf%l?-8B27O1Qg4k>Lv&iQt>lvA|gnhmlW0eH`
zOkb9MOKq1Hd$%0^F&=`qBPL5O+2cPb-bM^yftjsuJ|e4TciBNEJXXUWCo$h*f|PfC
zwV;Itd~^jmxs4&GM~v$G7zf+NLi2{jX;|o*ID2l|ty2CRh*_dROYP)>;fUeShJm?N
z75$uE-;AO6*(?&SC-p@0L(u2ndOjkmEp4is$8#LptqIt%W@X(BD$TKn@L|3JtDB7)
z26b-0)nC57llk%#vK$T%@uo7{>pJn4Sb`EZy2@|8Sj8VJKetMDK*oQJ>DHLV)~6f~
zVH);Wx}(&vETIxl_*8tE>}W>T^&R78-GOmt`0WbgqH!baW8{$P_1G;4E<fRkb0Vmc
z<1{VGTbokY(Y>`*{26=mF6;aNG-P*uQN)@*QD`$$)IZgJ1vcrp+Al)T!;6q+g?Dh_
zJ`TKQRdohwzK$ghb>q8;Nx%3zCGy!ngo!C^0yUW#uO8^D6ZKh3p><|9$B)#&cByfN
z#1f3@p8mp$kE#4NV0Cy?IDC*EZUWb;dbL^9u?1R%DXy)`x$mebDa9S1=U!ThlDMz3
z{0xq1)9=AmSvAQ{jx9tbDwiU6<_GOLOkE#3-m3^596x^P;N802LEC&yekG%ZdgbRU
zmo2I@m0yfqX7gQ-vh<s?D*^b|kx?Iu6~UtAY;)Mpjv3xtEeCvvt>7)aNe2b}#lCj7
zttm#0y%IxS#JcsC3OpRQ;wNdU0!jJNU=GuWS_nVkFNJW26wxz5HIY|o`hzrSm+dEB
zeHFKZt*^}E#>yzGf@aoTi$Qefqo#(uXvJ&>N$ciXzw24Jl;)<h@y~b94|~=RUb*8b
z%x98Z(WXR<=iDX7N+kl{;(M_Q7fcV{D1eEj1P8h@bfUyV=rBGOvW0A$&F#X4=OjX?
zXI#kc?m+Va_iW$vlv(rE+DHW2Dv)%G`ARD)DDBoW)={1!HUt9$PSH4iLgtu6{?}<z
zV$BLLSWq}ythPanyL;t!yx>Y-wye&|a{I}!C&7D6L4H+P4YPfmA@HKxlQ&=rPNdn+
zm_V#}UGb_j95y6BR#1_VR3ki&l40+>nToAA`LKBPhOeg*XgMQMyRu-gaL0c7%G0ms
zdsU&Q>bQo&*eU@26sac@UL_5`1Qm6sDdT^==w|wfTjcgG<k51h>3Bp1ePh3JgrRx+
zdPDMKSiIQWZ~Wdu1lH@4T>?VP1EU)B(kf_tsw}s0*gCoqCfoQc3K*++TMcX#_lez&
zc}Kl&JLje8DtVInbEegH*TbW4oOX}8Qfm|)xPN3NKPRZ0e(oHY)MHr66qJ*S+;!aa
zjoXu_tG_w(-Voh<*;c}tOq}Z?-pNbUavIf~fpYR2`yzr!SU$k{>T^2E8lRra672?K
zUgOOrfmv>a&dI6%6{%64W)_H?Sl-2(Y`MF>B-!7l7fr7fOpcXItWeyKI=T}Vtq&4Z
z-Bs<XKP+0l1X2vhRz;e6j+)VoYiLE6@O(!3#|E&cU3b7!ym?8K=ScXeHu=Ca+N`R;
zkHCjX!zfv0<&d^jk;JD6VWPv?vV4~cxp>VLQk9eX0Gjr9Y?rObeLSyGXgc&zE_3E3
z#C>;#@53ce93I6X?MtUue4Hx*G7G31LSk8>T^)HXEt9pX0gi{$0EnmVQb*??Kp_FX
zR*_tgFMU*2D!(vvf0C_fGRo<>p9eTefk5qaR3$D%ks;H3<jP}|=?I2|Pmr#5#WwDX
zdt~(^=&f$~HIXh+<VnZMIY^bw-Nmm_zRUb^pycRrxF$Hjab>-Fc(piSSkTS#z<faO
zVPSaPqQA~)K#t^ifSHY<kEH8Zk6tH7L3UbM0~@Jfeynp_#Jy|0nwr&N8ATI&ok9_7
zdtG)~-cbb}@Rx=7qsFikpA8iM*>-y>(#JByGm=JF2c~{JUjYqXH%jDoysUhq!ZL;}
zM}u&RLlIg^Wzh9XkcKk#Y{^+b^2w&s;1H|z9-EEt`%mI#MZYPkVb06xMQ7FW(nyie
z?b!q5fdKMa)1-jJ(4#Mexz{x^{QmRd5ieSgXDAg9o3zW?%|~6c(=!K{ueuNGrWfp%
z!?>ns17V%{IoLgvP3U0W*{x=OGW06og*J;MxjOSyhkU<$Yxkc2Z=N`G$6cV89e3j|
z*AUhHu=wqh-68(%<3m`RJ<NeBYCm3E#3pEr6R4@MT4u8+8bY4AwSnUFPvD|dHx#$<
z9qo2zMOTZsVODIT1A?;8%ozEJFr}@%qMnOx&2mzM1e!d9iHxup@fj@#Wof@;7PI9}
zmm$}YOEzVXW!C)2=gnk$-dkk_^7E<VJN-<USL(w!g2Q6u{l?nmu4Z(mpq}d6=hsnq
znryHZRH--x*B8br0_dgFM;*;_L?5cw=YWLS5K*e}hCk-JcO@Jv0d$LS0lY5e$<+Zl
zv)GW~49nm#P95&1QU-9v0F0R<75>Zv{0glz;DTx(kY%5Z=VdYAP4;$%RlR7d-{d@b
zb7Ye<Vz@9|Vu(~;{dpJL!Dsy-Ci~JtIbnFBOAs{sWO&aUViMe$Ts8+7MXjDHzZ@EH
z4bDf~XFbtbrd(YZv%&=iJkX3{R@Gs*C84@oW6h$nhRiD!*`K`5;^F48La(Z?6BQ>#
z3GIu!y0Lp>y$HrNfFOC<Oi~=KpAP3Tw1Iam0rQAtz?(UbQ#JIS=R%{m47l6+IHHfJ
z^;sQEMHMpH2D~0|p54tF)~<QwhFwV1vPuZ_%jj$T;d4W(OSF{5yMrPD)x?r3r~V!#
zOhwlmM=6<5F6raTL1}GITlWk<ncR(u-;!Z1gK#&GP)Kk8_~h+R;6qo!3=nJnZxakY
zW!J~-#x1c)`?3Ni5|R1p_f+3Ml~e$zY#iO3P-~)oGGOx^9f8tm3Bi0n0JdfnEmqGZ
zI|JUD`$&YnG!#3#^%dXd8Ap~*^u%P;?mF@+oGAIt0333<MpbGp-euDF-e%NTckz9E
z4qvI3sckPZEO3bXNGT_e##O1kR@ZMBVQoVPZ>uPS=SwShCi8LeeH0_?$VpQ}@X03#
z*~1x9QZL~M#Hfk)-Q<U|ZoKPS?0ZY$@xO-~RmK)hN*VanQOZS3Qn-{tochf%sNRc7
z0J)-!TBj(8j~h58P_b=b^0lTB=I?qYzlr(%Y!{4XwBn~!k5KcjCxLemFdCAwsYFEo
zmw5>!ZKe32a%t4K@dlAlqq1JQ-#d{uwXF&XD|uDdmf=rRW*}<Anc=KKk=eJb(d7|x
zD_GgGw5skC@Ia`tR1CReU*rQ;*)U3&rhquS5;A@CFh0Uq)9rg@;?ansL$vK3c4*iU
zo!v*|?L8y#L$GV{!A@b8c?ONcRm(8+bGLo@)?v=7rgG-$;FfW!ih8~>`j+~B?RZFn
z{P>ea;rR(h2hP^Xc#yBDTBGU?({r!bI)8#e<>c^$?jwz%ogWWRhmRFp)v(l8fDffn
zLa!1K?2CMT-R=04I<29P?~T{RamiygtHbNXvALJ>CZ4H_i*aVZ3lGXVnxrI(MyxrV
ze!_5~oo^IX&pY8+?M!QsR3aqVH5RMy>3K857Op{RRIv7~Jgtw8#%xb-y8~wF2{H~n
zLPn8&sg9Prva?J+m#792q88K6IRU~6&W2!s^b)#g<wGi$9zvtH#X6Y3p<BPRDoy$9
zgJPRYbe$^6nw1uA4;bm({#et%LY`aoz+rsnM`7$?&<ijiidM5S7+@$K;!dtG<?#%w
zYWLW9J|TfPR+su&@%HHbS5F#dQ|z~7TIi7bB|9zpwk`v8^r6DsVWdTo+Ix%-S;ao%
zlty+`ebDid@Mct9-p5Go4$WOkKyIeu)b)((Xx<^Z?`#_Kz-jnqzYJP|?{EkDit-j2
z+HKrd4Gd)0Mu5bI={6#210{_$<)QFl*D6?D`d8e1YFsCG7$yB>%l9l94@%>^#=>Wf
z9ZDi<0N*`TbQP0!${$wt=sdmpc%|nxuhHG1E9uX^rS$QaU%3WU#*69GCdEAI$a@1)
z+ykE)W0QVv$Thy)TGgbW7he4#%}T2&UwW3HPCouAWs5eeMp>(R+icvnwVAqY&pDmj
z!931yy!PJ0)LCz+q%eq-%@K1O=)OZAxH**%WHyNI*S@c<_b#U$I3<)(W;~49&3v$?
zqQ;o#ZD5~wTHL}UwE^!v%8F!}8|egvakVYsZjjDQV_sFU%*QNDRLFjyr{kjjwbS0T
zZ!Eqq=#1f#T&FtSo>`96q2P(2k+YR9%NVY_r}r)<oS%(ZbMcey@EI<0X5D(_x!?jG
zUtCXNF?9`>SH?9F0Pb2_Z>t}`xR51{qP=yiO_dy2{CXn?8^T2vqa+-<gnNF$nIETO
z7p^*<9B%Qb+98rxYmD`IesSv|%D+f}<>+uEqb4hAHQyI%dUe(8Ih~&&CGL-p`yT<-
zj&Hr<T-0AH<vkPc8su(UIwcjFSnM<_9lGL<=-0^_pKMS0tc{Y@$mq%)dI3OP=b7?U
z`{Y^OffBwiZ6Eih{d__7H?8zjSGX1(Z8}feisI4$rD^qo_6AU6=_!-*^%8onz?Ef-
zQvTWmQIJiXa`N$P_^MR7IIk)M@Gfceqc~M|r(2bOK=FRe(9n5w_{<lz41JbPI1x)`
zKd;0MAF*R=%`t1jFiZ3|r5z6Il*jd$U1NLe%eTpndb!%12L&;o$Wibc(X$i#IR&ZJ
zBps%%6mQVNgeg<C=@gFT(<n1lf(tndf@D76Y#xVlStCd=POyVPV-^r!kkq=Ib|*tD
z2mMo-qA+=PH&>ek>%47MHJ(bq8Xv7{C1eL)?80GF&`WHU@asxQy|w(9+6|>G$);IF
zN+KvymjEg!SeyNZ-N{CY0gh%V+B%~qB(=MLEo-SF+-uCNhNNZz6ax9Gk4g>bYT3pO
zYmV0B+ySf-U5~(mO(f>sVD~0cG$*GXcO*&rHQ$IVb`rL<bCz*7RWnqVO9oy0V$h{(
zKb+HOleXZE8#iwHE<bZI-`?*GxXJDOU_A2NB0gIoOxqIuzPzHye%(=2(;bk(4n!bo
zkLXgd<4fDIq4%Ya`DYBDz)>L_A5!E=-&G|&@)+!1e5c`q@&%CNv5FrO8V72p7@q7D
zvi7?^C2^X~vs0QDUyO`b?U&1*qBYkUsv0Pq7c-cH{92?RMuzf>ke&0)4y#?Z2=ftb
zQn<-se*-uJz?AYeF+k=IUtCE_OvExu!|#h*S&c_wni4jgzB%)Rbjv$md|M8zQ6l~y
zc!A{+eQppiY3(d&hs>q`ryYh0g7?^hGWwDcc5TLLpTK;*%{PpWjeV!KFCK$ns|jwi
zJ)(LFG5OE$Nj$U;Pw?|JN`PD3s_iTdNzqi}QTRTPiLy{x;*?ydL<oBIME#JxYd-~!
z^yP^on=^@0FYO%?F7Nxo4pOVxG`SMEdTTOWk8?6s)M9U6kMrtD)>#7VGDlBA<WnKG
z0`OBK$W9%RFHt|Mm0c<8C#3KjJEg^!^w*dBEN|zW257&@r3?daa;oOif}9b_8N!`7
zpuXGH9lAQa^Xxd3WKai|(ld|($j+qXsqwxSSp~E#9JBGx+ggs9K}#V??^dTVN^nG$
zvlw;JR3Y0Ze7yH#UN=x*<7Mg7Nmu~$Xr%PTkFaT4PI9SkmwS8ApcAgzF8WE=Bs)!W
zl<=;+9ReH*u#eaG{JhdcQo!KqjofcnzEeW~1d{%x)3xO7qt?<~Y`n5_?#M;sd8S8O
z+JwZtm4TqGNK6AooQ=Qn-RdFxitoI`G6g1i&Mm;z?+k!FB{M>lOMKj^9;BC}(ofMq
zT)(S<7ry1%FLoQPsnjUFa*cIQ>9fC&q{i-ool*nNf#><y5T3P_w$-1E&R1Jm=B9{r
zY9pJ(c#qq=kE<Sdx0Bv?vHQzo0<LW<oZlAt>!NP$0tWr22wD%88@1>#&lfEjc9!j!
zv0niw;5;rB_$35KHJm0#Ea&Y0M!SVDDr9`9_@ijSP5kN6o`Pa(<8>cA#XJp@ZR0ly
zsMfXG8@}Io3?9VQjM^tFr_lj_&Yc+>SR&FGmFF&zJK-%p5$Q=r-O`?3tt~99C%*>9
z=+9?T;j`|sI~6`dklytV;c(Ko*HZowDXmmAsh?-txv$2dlU=4#%yDc5ncBH%IPw+F
z`MW1JpyghW4&ijki>#K2*{yg_8;OL7E@FmvSEqE^Jukh{d|HcaJfc7jIY~5q!(_hv
zX*OfT018`B4TtT(l#qKofm&cisC805C&>=*Q+?9_ZJpxL{UT``!FYT%0YUpF@ns^m
zVE&zIo9oNw>L2zG*jf}0A0&P>&Vu|zJO}&uoiMv8?JsnFN$%VI&fE&eUS0{&h2`v4
zRx`U6yNU&lSuOnpED4Z7)dQw<XXsp5BGLU{e!@hOyj@iSV1(3<>y!$?fg$f~`HOnL
zT9F8W65<@RsPfhG^|XV&+xYHu;l=MT=8#$LnXzTswozGW6!OCz#lL&d#@ry|ufn>}
z=Q>p1+<SjNT`_$j2GxaNk_p%hYp5*G4a5r?m2uNVq5@^)Mp3GvK0Ee-s$RVE24hgv
zRx?Q#rp}I5XSEoiasz{-9nyLi$j=SJ#)dOM$pRiEN<q3NcNNPoudnGLtxlhM3hf%v
z+>N{L-RZK2l@oWF?=aw9vP=3h{(yJzCdmw~-|F{t1ER8`=b)v<Bz9CP|KjIMLm2Va
zuwQ)Bk-dUESy4<CLSNtdR)z3oN_h>n&@gI8B&{788ko1P!iJIKRI)MOR*2l9x|J_H
zC^}dd)xW@B`|Smv3Pqg_Rxk*#uK3WC*MeQeA%1ethINl?>bRU!k?Nue&@oo1C7e(a
zin`5`$>)Ks?>sLUpr}ReQUM*WF<;Dw-6R)qUR@BZqu;t_l5QD32ByuXwFI#TkET_9
ze4J_jhPjJldN)d}Z9DT@|9~^=Y7dIf8(Xa2*4n!`<_4@RSX?34t(=q%U1?pX;F!d)
zH5gV-D}I!0=7_zMqf))P^L=>S$_Fb<ozt4!|2San*S%XIdp%ZEkW*Pwcc(_`z_=q)
z$Zt<~0MhqM^M>8W%@Fs|jKe*8I(a$tWJHcVh!WWalIk*__v8Eu4y#+d?<&Kl2>O;a
zLw&i(hU6aXmXyH;OTYkXstrc#vl}=~K}-;!=P3`6L<N}?J-tF_OcFm)aw!Hd>U}!7
zeZYLO%;NT<y*tAVz3pvttvs#Q;Y+Hz)Zir$#YE(5QK<Hdp8&ULVH!>rXia=xSJ?8l
z_`(kyiuY*2`2-~tRuaF+{Qy*@!E`P>w|jV&m1M=tmWb=%bCG4g{9?FsSCL_}_1yLB
z`enA6Cp9^hl`5fdoR<M`zE1YL8w;)7gQ8i0TBgLQxLqoJ(xLdbC6idcqSCFBGgd}J
z;Fwm>Y@-XUI7>pP=<>Yb*^(hkUq(Pk?zd<m0823AoXcr6NBCEd1z3oLq~<3f$FeDX
zi<{vkB_Ry+Sx1;&w=;>5Y(*s}|3$%F>v+{VlC+UDb3WWJ5et#ADMI+?3b$gz;jUr+
z^j4-LA~umRmQPkCV^cI@??FeGo#18DcWivHx&ztz=}+)O;z;c_T0}%2u5jnG#tja4
zPIq@~Y|4J1z4UObu>tBx@3So^TXMte(tJ_4MN)jBQf#iCg^0lCBbOrG9Eo53;fV)7
zaYG4Ptqc|Xjh^9L(Ck4$2ko4++wMZm7{=f?ZrOID@5plKSA>U!`9uwPWj_1EzI$^}
zf_cZP))KKa9;4?YwPVgPwg{5NkiG)&eu>nbfXe4IOb#;NaCsrk&*(BgAb|jD!&}{5
zW;lvFt1_=RKTJ*=qy5K<_hl@ezCneV<f1G|Wdj|6$z=?5fehGuhexeiU(TLv5ETv!
z=RxP9%gue|wHLz>r!9<T$FNRz#{HWfkdLM;B7A|2PP+t+#r}NW-n<3u*4k@vzDy01
z;Od^Q0ZHu@^teaNFl*S@k0zd9$Bn_2Ho~8q2M?ZE(L>KE-gG9~_NpJe)xIr3^CY$u
z*4cJ|Qp&k*Ma?5l9*B(|tBm92A>$1>vC|Fpu?x&1KDf9yoc5>Gb~@nO-*$7XJk&-!
zTpm@>9*D>V@_H?2_BZ(ai5hxBd;)&SeoXo~=8;HeQ7)5Ly!KTHBBXa7eCx^_&KBEt
zeA9Yw%OPQpJVdR4>=x?;(P+ceH>qH#CvrHnpHs=F3zaBXxjKTeDK$jR#g*;i%1h?y
zPZlk2qnnwjm20TE?WGi$M<VNWv)>3(keNH4sXT`?(s!-g>4`!Sla!sxs4Fh<p7G@T
zTnXE6Y{n2Xx>vaur9X9<fR@Q~cJ5>qFTD0I!gt&pW?8XTXp3cD=DfQ1F70iRF!^8?
z2kiqn<>~`?^{zqK*1|;EtmMjKVXnT;oA2Eq1&Y`klIi<*AUHgnfuIgOb)gk;Ivp@8
zfeA;mFF$|_sy>-!U*zw%gRosZA>O`r0?Ur${BB`h2Q3hxP-5VE%spVwp_m3wUXe!D
z!1IWlWw_`yi94ayoL5~vOczX}e3?e%f(f*Fh&qm`)mL14HgOubd>s0@={R5DSr2Bl
z?qV$P6L7LVYB&tgWEA0i{odYSDfi1>;38M-v&rE}j}4KxKEA&g2h~g#Ik`*4KkW87
zzl<5t+<**D!h3-6*T-HYd<G&obXvK}8p2)Fj}z@K#yyeiJjV6>I>u<M!N+Ec8_lj!
z2gUV#5%E19593QX7OU4Rv94Q?uD35)$c7fVon!X*bswg`h|k8OR*Hj7oe{3UsPc;5
z{PWap>k~@SiwUMtn@HO5BSC{awuHeBiRQ&O*O3jNEDi_VV`A^ooeB4=f|jZ>YHh}}
zWV|3HkMV0`?lW}^5F<P$<@;E^_~%K2v2)G?xUtT3&6x&fZ(hYc?_zdwe?MBup9wKR
zO;8RDPFcwI81tSB-sut9-90VcatKxK1-BLDhN$Q{Zw}6NmhV=m1QjL#SZVo#zp`b{
z!>x~G!2`=Vw!Y`52j^?*2h+R3!7>I9TXw8yM7pBPhcu3VPcE&%qAP6U#cWjTdqKbJ
z_c#lV#-~@x{Q|rN)=`$@zoz`POVjl02A8$?gO9%sg`Vv~V{hfk9Mt<1iQOh&{e8ZB
z!+#oZ#Xi}9rfKI&A)S;>&X-rYo64e(AJ(nedg9P~qZ!-DRUD^5Q$Kjn1U8aH&0V)v
zn?zThaeH?<-251bH;|%P=?q$(tJm3)YOUC248sxf^-?8IVOI`By-e=&Ds0y-?zQJq
z;FlS=qQG>AT(p{wGT#>GS1C9mL%OaN1^RZeWQO@0SJ7qvIF!`o_KJ^3^4lM$*#`xE
zo4~Sdx3@{1T}k5k>K=wA7W9PjpTAtm?YzDrBAyV&;A=uiX<#-pj8Foa$2AKO^%wBj
zKR~>&0ZWGxc3ViD<i;-!b%q(20L*m%kiK#7XI$Ihu)=+mTT#%pvza9wl<etviHgCt
zDm3iP9t^fkIQG;$PM)vg2r5;c{A7pzsZ=~r!hJipnM&cdt#k`-y3%k=8NNQ+0lYqD
z8xu14xoT8D4{BJU)8bpEQ+ai1-LvncWf(8zoQueMv`u$$zZRH|mx3+OhWZ}vEHk1z
zPRrw^6Sc)uIhT4POe4L9Z`=R|(P&rtfqS=)n7UP}4>*1^1P3-9*~#T7ITTYu%S&0J
za%JF#Pxr{gpjJL~i=7d>{N1RztAdheH|;2*Q!Rf2th{pK8x*!$w~)tYI#-DL6xkmQ
z9N)$3%F4ih+{`T{b2cptiLre-GZrdJxfek2TvrpD!@iGZ0W}zQkDNnaZ^nB5_Bj`s
zJ(9mPP!oO*>Z0)PP7wozh!9}{R+nG)jOu#-y!SXNc;we<`(hdLs7x_OIY|uJ9bHv>
zFgAYtIGx9ay1yv*QOl#yn~l}hL7PphA%c}{p&UZoc16dU@W<yhq(9uTH*zj%aBorN
z#8P&ga|$xJ!R42-a(Yze*R@dZ+aFn+Ub&?BdgjxJ@byaN{BM(iuJpJvFrBYa;6jp)
zrXnGl*o{w#n<GxIY8+68FTX3ymO5WjiKTDbRE>#B?#9LnO<)7&j|(u<<kzY_o-f0d
z@gWXx3e)M9l|?J<7siGTOV~xsq~t&B@KhYGO8-i)@@9{cB1?a2_?~-H2?;npBi0g5
zNdjaOIyFxO{dk?>ByYOaf87JWH0%=gS5aus1lpXcTQEVSnMD$NsUOew6ue7yFOYkj
zThs+GrBuKN$Iq7<AjfSSKp~<!du98|NXSEE++HS}IPI#*-Hl`UqTDS(aIPb{-&y#k
z;rcnxrE^p8D`<Rl$QYYE_>!k50Av#|^?4sT7TOyboC?3mR^JpD#2w2&q<zlU@Y6Q7
z?~L*zTgdNYFi%;~H_1y1xnHIMua>@&PB;{4FsGI#qKg7wbdw_mg@ZtS4fXzY)V_-;
z6O7=h30qM%D^2wMi@yXP*#zZ&!7cB}RC$&{m*JqMoi10I%5KXR#x6?rR<7>zSlBsd
zx3_0jR$iz0r(Hu{S~6b`$@7Cw&%N28t<zaz^{*oPI|wsG2Rh9|)0L&#j83CPlGPGH
zK(18PCRRWs5q>w74j&vhF6Pm#iu2Z%w6ZlPqNM_0^Rc!ki|35$v_py^mC?##fnOB>
zdwB8}hCEdXSXYFezmhxcxfmB3xH!?BvLKtP$ko-J^x4R!ZH)fAV)^X}%+2X6cTvjr
z71s_0Rz3AAw$i@Ez@dey*}Rkc2e!Zi5Z?PkYn<NMT;!aoXZ3d0o@(m^<J?bARmCvf
z!|LdG52)&9VidY6_8!cXXO4p<<i;;DtyZDmsrG`Bmz;LdTRuyJ^9u6FGAgTa9v_Hj
zsny{&Z+Cs5hcBH|dF6v%)~o#W-<ADm1v@85cBLM-Q3mycaLVrviTfq<n!JsMorP!b
z1kc5qm5454lm|zaftl=Q+}+t209)G~n>ehOs`+!r=Qw)@t3@i#->)%ry4WIXBP5Zj
z^|}GSEiyt(w_i|E%V=;i_2bH?_HJ9aa$xdRe`Lo-d*uA>l{LPz`Yb&23&?a2y%CFd
zq_@-jJPC8Jkhc+wpWC}gT%VV}cG!xUz>V1T&+|dBtYw}Tuotb<8E)!7e)WjCjt*?c
nWMD#M|G(ez@!D()C1Jh)#Q7cR=Dj~}&gp6!+^xK0_wxS$&nN7G

literal 0
HcmV?d00001

diff --git a/apps/www/src/features/www/landing/asteroids/game.tsx b/apps/www/src/features/www/landing/asteroids/game.tsx
index f92466083..202f3a48c 100644
--- a/apps/www/src/features/www/landing/asteroids/game.tsx
+++ b/apps/www/src/features/www/landing/asteroids/game.tsx
@@ -19,6 +19,8 @@ const KEY_ACTIONS: Record<string, AsteroidsAction> = {
   Space: "fire",
 };
 
+const ALL_ACTIONS = ["left", "right", "thrust", "fire"] as const;
+
 const BEST_SCORE_KEY = "voidhash.asteroids.best";
 
 function readBestScore(): number {
@@ -74,6 +76,12 @@ function HudStat({
   );
 }
 
+/**
+ * One button of the on-screen pad, held for as long as the finger stays down.
+ *
+ * Pointer capture keeps the hold alive when the thumb drifts off the circle, which it always does
+ * during a long burn.
+ */
 function TouchButton({
   className,
   label,
@@ -89,15 +97,24 @@ function TouchButton({
     <button
       aria-label={label}
       className={cn(
-        "flex size-14 items-center justify-center rounded-full border border-zinc-700 bg-black/50 font-mono text-zinc-300 active:border-zinc-400 active:text-white",
+        // `touch-none` is what makes the pad playable rather than merely present: without it a
+        // thumb that drifts while held pans the page, and panning scrolls the board out of view,
+        // which pauses the run mid-press.
+        "flex size-16 touch-none select-none items-center justify-center rounded-full border border-zinc-700 bg-black/40 text-[15px] text-zinc-300 backdrop-blur-sm transition-colors active:border-zinc-300 active:bg-zinc-300/15 active:text-white",
         className,
       )}
       onContextMenu={(event) => event.preventDefault()}
       onPointerCancel={() => onHold(false)}
       onPointerDown={(event) => {
         event.preventDefault();
-        event.currentTarget.setPointerCapture(event.pointerId);
         onHold(true);
+        // Capture is an optimisation for the drifting thumb, not a precondition for the press:
+        // it throws NotFoundError when the pointer is already gone, which must not cost the hold.
+        try {
+          event.currentTarget.setPointerCapture(event.pointerId);
+        } catch {
+          // Without capture the button still gets its own pointerup; only drift stops working.
+        }
       }}
       onPointerUp={() => onHold(false)}
       type="button"
@@ -118,27 +135,51 @@ function TouchButton({
  */
 export function AsteroidsGame({ autoStart = false }: { autoStart?: boolean }) {
   const frameRef = useRef<HTMLDivElement>(null);
-  const canvasRef = useRef<HTMLCanvasElement>(null);
   const engineRef = useRef<AsteroidsEngine | null>(null);
   const prefersReducedMotion = useReducedMotion();
 
   const [status, setStatus] = useState<AsteroidsStatus>("idle");
   const [hud, setHud] = useState({ lives: 3, score: 0, wave: 1 });
   const [bestScore, setBestScore] = useState(0);
-  const [showTouchControls, setShowTouchControls] = useState(false);
+  const [isTouch, setIsTouch] = useState(false);
 
   useEffect(() => {
     setBestScore(readBestScore());
-    setShowTouchControls(window.matchMedia("(pointer: coarse)").matches);
+    setIsTouch(window.matchMedia("(pointer: coarse)").matches);
   }, []);
 
+  // Hybrids (touch laptops, tablets with a trackpad) report a fine pointer until a finger actually
+  // lands, so the first touch anywhere on the page arms the pad as well.
+  useEffect(() => {
+    if (isTouch) {
+      return;
+    }
+
+    const onPointerDown = (event: PointerEvent) => {
+      if (event.pointerType === "touch") {
+        setIsTouch(true);
+      }
+    };
+
+    window.addEventListener("pointerdown", onPointerDown, { passive: true });
+    return () => window.removeEventListener("pointerdown", onPointerDown);
+  }, [isTouch]);
+
   useEffect(() => {
     const frame = frameRef.current;
-    const canvas = canvasRef.current;
-    if (!(frame && canvas)) {
+    if (!frame) {
       return;
     }
 
+    // The visible canvas is created per effect run rather than rendered once and held in a ref: a
+    // canvas keeps its context type for life, so a board that reruns this effect (reduced-motion
+    // resolving after mount, a remount in dev) would hand a canvas whose WebGL context the previous
+    // compositor already lost to a fresh compositor that cannot use it — and then to the engine,
+    // whose `getContext("2d")` on a WebGL canvas returns null. A new element sidesteps all of it.
+    const canvas = document.createElement("canvas");
+    canvas.className = "block size-full";
+    frame.prepend(canvas);
+
     // With the CRT pass the visible canvas is WebGL and the engine draws into an offscreen scene;
     // without it the engine draws straight onto the visible canvas.
     const compositor = createCrtCompositor(canvas, prefersReducedMotion === true);
@@ -197,6 +238,7 @@ export function AsteroidsGame({ autoStart = false }: { autoStart?: boolean }) {
       window.removeEventListener("blur", onBlur);
       engine.destroy();
       compositor?.destroy();
+      canvas.remove();
       engineRef.current = null;
     };
   }, [autoStart, prefersReducedMotion]);
@@ -243,12 +285,21 @@ export function AsteroidsGame({ autoStart = false }: { autoStart?: boolean }) {
     return () => {
       window.removeEventListener("keydown", onKeyDown);
       window.removeEventListener("keyup", onKeyUp);
-      for (const action of ["left", "right", "thrust", "fire"] as const) {
-        engineRef.current?.setInput(action, false);
-      }
     };
   }, [status]);
 
+  // A pad button that unmounts mid-press — a scroll pauses the run while thrust is held — never
+  // sees its own pointerup, so without this the action stays latched into the resumed run. Same
+  // for a key still down when the window blurs.
+  useEffect(() => {
+    if (status === "playing") {
+      return;
+    }
+    for (const action of ALL_ACTIONS) {
+      engineRef.current?.setInput(action, false);
+    }
+  }, [status]);
+
   // Space/Enter starts or resumes a run, but only while the board fills the view — half a screen
   // up the page those keys still belong to scrolling.
   useEffect(() => {
@@ -301,9 +352,11 @@ export function AsteroidsGame({ autoStart = false }: { autoStart?: boolean }) {
     }
   }, [status]);
 
+  const showPad = isTouch && status === "playing";
+
   return (
     <div className={cn(ASTEROIDS_STAGE_CLASS, "select-none font-mono")} ref={frameRef}>
-      <canvas className="block size-full" ref={canvasRef} />
+      {/* The board's canvas is prepended here by the engine effect above. */}
 
       {/* The landing navbar stays sticky over the stage, so the HUD starts below it. */}
       <div className="pointer-events-none absolute inset-x-0 top-20 flex items-start justify-between px-6 md:px-10">
@@ -322,34 +375,41 @@ export function AsteroidsGame({ autoStart = false }: { autoStart?: boolean }) {
         </HudStat>
       </div>
 
-      <div className="pointer-events-none absolute bottom-5 left-6 text-[11px]/3.5 text-zinc-700 tracking-[0.06em] md:left-10">
-        HI {pad(Math.max(bestScore, hud.score), 6)}
-      </div>
-
-      {showTouchControls && status === "playing" ? (
-        <>
-          <div className="absolute bottom-8 left-6 flex gap-3">
-            <TouchButton label="Rotate left" onHold={(down) => hold("left", down)}>
-              <span aria-hidden="true">◀</span>
-            </TouchButton>
-            <TouchButton label="Rotate right" onHold={(down) => hold("right", down)}>
-              <span aria-hidden="true">▶</span>
-            </TouchButton>
+      {/* One bar, so the pad, the high score and the home indicator never fight for the same
+          corner. Each pointer captures its own button, so steering while thrusting and firing is
+          just three fingers. */}
+      <div className="pointer-events-none absolute inset-x-0 bottom-0 flex items-end justify-between gap-4 px-6 pb-[max(1.25rem,env(safe-area-inset-bottom))] md:px-10">
+        {/* High score above the steering pad, so both clusters still bottom-align on the bar. */}
+        <div className="flex flex-col items-start gap-4">
+          <div className="text-[11px]/3.5 text-zinc-700 tracking-[0.06em]">
+            HI {pad(Math.max(bestScore, hud.score), 6)}
           </div>
-          <div className="absolute right-6 bottom-8 flex gap-3">
+          {showPad ? (
+            <div className="pointer-events-auto flex gap-3">
+              <TouchButton label="Rotate left" onHold={(down) => hold("left", down)}>
+                <span aria-hidden="true">◀</span>
+              </TouchButton>
+              <TouchButton label="Rotate right" onHold={(down) => hold("right", down)}>
+                <span aria-hidden="true">▶</span>
+              </TouchButton>
+            </div>
+          ) : null}
+        </div>
+        {showPad ? (
+          <div className="pointer-events-auto flex gap-3">
             <TouchButton label="Thrust" onHold={(down) => hold("thrust", down)}>
               <span aria-hidden="true">▲</span>
             </TouchButton>
             <TouchButton
-              className="border-blue-ribbon-600/70 text-blue-ribbon-400"
+              className="border-blue-ribbon-600/70 text-blue-ribbon-400 active:border-blue-ribbon-400 active:bg-blue-ribbon-500/20 active:text-blue-ribbon-200"
               label="Fire"
               onHold={(down) => hold("fire", down)}
             >
               <span aria-hidden="true">●</span>
             </TouchButton>
           </div>
-        </>
-      ) : null}
+        ) : null}
+      </div>
 
       {/* No idle overlay: with autoStart the run begins before a frame of idle is ever visible. */}
       {status === "paused" || status === "over" ? (
@@ -372,7 +432,7 @@ export function AsteroidsGame({ autoStart = false }: { autoStart?: boolean }) {
           >
             {status === "paused" ? "RESUME" : "PLAY AGAIN"}
           </button>
-          {showTouchControls ? null : (
+          {isTouch ? null : (
             <div className="animate-pulse text-[12px] text-zinc-500 tracking-[0.25em]">
               {status === "paused" ? "PRESS SPACE TO RESUME" : "PRESS SPACE TO PLAY AGAIN"}
             </div>
diff --git a/apps/www/src/features/www/landing/landing-page.tsx b/apps/www/src/features/www/landing/landing-page.tsx
index 849883aad..b498c284f 100644
--- a/apps/www/src/features/www/landing/landing-page.tsx
+++ b/apps/www/src/features/www/landing/landing-page.tsx
@@ -36,7 +36,6 @@ export function LandingPage() {
         <LandingGetStarted />
         <LandingDivider />
         <LandingFooter />
-        <LandingDivider />
         <LandingAsteroids />
       </div>
     </div>
diff --git a/apps/www/src/features/www/landing/paywall-build/paywall-build.tsx b/apps/www/src/features/www/landing/paywall-build/paywall-build.tsx
index cf9a271df..15ae64de8 100644
--- a/apps/www/src/features/www/landing/paywall-build/paywall-build.tsx
+++ b/apps/www/src/features/www/landing/paywall-build/paywall-build.tsx
@@ -20,8 +20,12 @@ const PAYWALL_SCALE = 0.6015;
  */
 export function PaywallBuild() {
   const ref = useRef<HTMLDivElement>(null);
-  const inView = useInView(ref, { amount: 0.35, once: true });
-  const playback = useTranscriptPlayback(inView);
+  const started = useInView(ref, { amount: 0.35, once: true });
+  // The session would otherwise loop (timers, typing interval, pixi ticker) for the rest of the
+  // page's life once seen — pausing offscreen costs nothing visually because the loop replays
+  // from the prompt anyway.
+  const visible = useInView(ref);
+  const playback = useTranscriptPlayback(started && visible);
 
   return (
     <div className="absolute inset-0" ref={ref}>
diff --git a/apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts b/apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts
index 268d0c98c..a6becf831 100644
--- a/apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts
+++ b/apps/www/src/features/www/landing/paywall-build/use-transcript-playback.ts
@@ -43,7 +43,8 @@ const FINISHED: TranscriptPlayback = {
 /**
  * Loops the scripted agent session once `active` turns true: the prompt types out, each
  * Voidhash MCP call goes out, hangs for its `runningMs`, and returns; the finished paywall
- * is held for a beat, then the whole session starts over.
+ * is held for a beat, then the whole session starts over. Turning `active` off rewinds to
+ * the blank state, so a paused illustration schedules no timers and drives no animation.
  *
  * Under `prefers-reduced-motion` the session is presented already finished and never loops,
  * so the transcript and the paywall still read as a complete story without any movement.
@@ -57,6 +58,9 @@ export function useTranscriptPlayback(active: boolean): TranscriptPlayback {
 
   useEffect(() => {
     if (!active) {
+      setCursor((current) =>
+        current.phase === "idle" ? current : { index: -1, phase: "idle" },
+      );
       return;
     }
 
diff --git a/apps/www/src/features/www/landing/sections/agent-compatibility.tsx b/apps/www/src/features/www/landing/sections/agent-compatibility.tsx
new file mode 100644
index 000000000..6906d5e68
--- /dev/null
+++ b/apps/www/src/features/www/landing/sections/agent-compatibility.tsx
@@ -0,0 +1,57 @@
+import { TooltipContent, TooltipProvider, TooltipRoot, TooltipTrigger } from "@voidhash/ui";
+
+import antigravityIcon from "../assets/agent-icons/antigravity.png";
+import claudeCodeIcon from "../assets/agent-icons/claude-code.png";
+import codexIcon from "../assets/agent-icons/codex.png";
+import cursorIcon from "../assets/agent-icons/cursor.png";
+import openCodeIcon from "../assets/agent-icons/opencode.png";
+
+const agents = [
+  { name: "Claude Code", src: claudeCodeIcon },
+  { name: "Codex", src: codexIcon },
+  { name: "Cursor", src: cursorIcon },
+  { name: "Antigravity", src: antigravityIcon },
+  { name: "OpenCode", src: openCodeIcon },
+] as const;
+
+/** Renders the AI agent compatibility band below the paywall designer. */
+export function LandingAgentCompatibility() {
+  return (
+    <div className="flex min-h-20 items-center gap-3 border-zinc-800 border-t px-6 py-3 md:h-35.25 md:gap-4 md:px-12 md:py-0 xl:px-32">
+      <TooltipProvider>
+        <ul aria-label="Supported AI agent examples" className="flex shrink-0 items-start">
+          {agents.map((agent, index) => (
+            <li
+              className={index === 0 ? undefined : "-ml-[17px] md:-ml-[27px]"}
+              key={agent.name}
+            >
+              <TooltipRoot>
+                <TooltipTrigger asChild>
+                  <span className="block size-10 shrink-0 -rotate-[10deg] md:size-16" tabIndex={0}>
+                    <img
+                      alt={agent.name}
+                      className="size-full max-w-none object-contain"
+                      height={64}
+                      src={agent.src}
+                      width={64}
+                    />
+                  </span>
+                </TooltipTrigger>
+                <TooltipContent
+                  className="border-zinc-800 bg-zinc-900 text-zinc-50"
+                  side="top"
+                  sideOffset={8}
+                >
+                  {agent.name}
+                </TooltipContent>
+              </TooltipRoot>
+            </li>
+          ))}
+        </ul>
+      </TooltipProvider>
+      <p className="min-w-0 max-w-[421px] flex-1 font-sans text-xs/4 text-zinc-400 md:w-[421px] md:flex-none md:text-base/5">
+        Works with any AI agent or model. You can even use your Claude Code or Codex subscription.
+      </p>
+    </div>
+  );
+}
diff --git a/apps/www/src/features/www/landing/sections/analytics.tsx b/apps/www/src/features/www/landing/sections/analytics.tsx
index 1b258bb15..0de7f7e95 100644
--- a/apps/www/src/features/www/landing/sections/analytics.tsx
+++ b/apps/www/src/features/www/landing/sections/analytics.tsx
@@ -7,9 +7,9 @@ export function LandingAnalytics() {
     <LandingSection id="analytics">
       <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
         <SectionHeader
-          description="Installs, trials, conversion, retention and MRR — computed from the same subscription state that powers your app. No SDK gymnastics, no nightly exports."
+          description="See how people move from download to trial to paying customer. Find what is working, where people drop off and where your next opportunity is."
           eyebrow="Analytics"
-          title="Know exactly where your revenue comes from, and where it leaks."
+          title="Understand what drives your revenue."
         />
         <div className="flex flex-col items-start gap-10 self-stretch xl:flex-row xl:gap-14">
           <Illustration className="flex flex-col w-full max-w-98 shrink-0 rounded-xl overflow-clip bg-origin-border border border-solid border-[#FFFFFF12]" style={{ backgroundImage: 'radial-gradient(ellipse 156.12% 100% at 100% -0.8599999999999941% in oklab, var(--color-zinc-900) 0%, var(--color-zinc-950) 100%)' }}>
diff --git a/apps/www/src/features/www/landing/sections/asteroids.tsx b/apps/www/src/features/www/landing/sections/asteroids.tsx
index 11e4f2bd4..f97c47f36 100644
--- a/apps/www/src/features/www/landing/sections/asteroids.tsx
+++ b/apps/www/src/features/www/landing/sections/asteroids.tsx
@@ -46,19 +46,34 @@ export function LandingAsteroids() {
       return;
     }
 
+    // Geometry is cached outside the scroll handler: reading offsets on every scroll event can
+    // force a reflow mid-scroll, janking the very scrub the handler drives.
+    let runway = 0;
+    let sectionTop = 0;
+
     const update = () => {
-      const runway = section.offsetHeight - window.innerHeight;
-      const raw = runway > 0 ? (window.scrollY - section.offsetTop) / runway : 1;
+      const raw = runway > 0 ? (window.scrollY - sectionTop) / runway : 1;
       scrollProgress.set(Math.min(1, Math.max(0, raw)));
     };
 
-    update();
+    const measure = () => {
+      runway = section.offsetHeight - window.innerHeight;
+      sectionTop = section.offsetTop;
+      update();
+    };
+
+    measure();
+    // The section sits at the very bottom of the page, so anything above it resizing (images
+    // loading, fonts swapping) moves its offset.
+    const resizeObserver = new ResizeObserver(measure);
+    resizeObserver.observe(document.body);
     window.addEventListener("scroll", update, { passive: true });
-    window.addEventListener("resize", update);
+    window.addEventListener("resize", measure);
 
     return () => {
+      resizeObserver.disconnect();
       window.removeEventListener("scroll", update);
-      window.removeEventListener("resize", update);
+      window.removeEventListener("resize", measure);
     };
   }, [scrollProgress, stage]);
 
diff --git a/apps/www/src/features/www/landing/sections/crm.tsx b/apps/www/src/features/www/landing/sections/crm.tsx
index 1b0c717de..d310f092a 100644
--- a/apps/www/src/features/www/landing/sections/crm.tsx
+++ b/apps/www/src/features/www/landing/sections/crm.tsx
@@ -6,9 +6,9 @@ export function LandingCrm() {
     <LandingSection id="crm">
       <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
         <SectionHeader
-          description="Every install, purchase, trial and refund resolves to one person — across devices, stores and anonymous sessions."
+          description="See each customer's journey in one place, from their first visit to purchases, renewals and refunds, even when they switch devices."
           eyebrow="CRM"
-          title="See the actual people behind the numbers."
+          title="Know the people behind your growth."
         />
         <ScaledMock designWidth={1400}>
           <div className="w-350 h-125 mt-6 shrink-0 relative">
diff --git a/apps/www/src/features/www/landing/sections/developers.tsx b/apps/www/src/features/www/landing/sections/developers.tsx
index 81c49a336..a0192af7c 100644
--- a/apps/www/src/features/www/landing/sections/developers.tsx
+++ b/apps/www/src/features/www/landing/sections/developers.tsx
@@ -33,9 +33,9 @@ export function LandingDevelopers() {
     <LandingSection id="developers">
       <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
         <SectionHeader
-          description="One install and one provider. Paywalls, experiments, entitlements and analytics all arrive wired together — no bridge code, no event plumbing."
+          description="Connect your app in minutes, then build it yourself or ask your AI coding agent to create, preview and publish it for you."
           eyebrow="Developers"
-          title="Install the SDK before your coffee gets cold."
+          title="Your first paywall is one command away."
         />
         <div className="w-full max-w-[1400px] flex flex-col items-start gap-5">
           <div className="self-stretch min-w-0 flex gap-12">
diff --git a/apps/www/src/features/www/landing/sections/experimentation.tsx b/apps/www/src/features/www/landing/sections/experimentation.tsx
index c6faaa001..e25d21cd0 100644
--- a/apps/www/src/features/www/landing/sections/experimentation.tsx
+++ b/apps/www/src/features/www/landing/sections/experimentation.tsx
@@ -1,17 +1,87 @@
-import { Button, Switch } from "@voidhash/ui";
+"use client";
+
+import { Button, cn, Switch } from "@voidhash/ui";
+import { useState } from "react";
 
 import { CountUp, GrowBar, Illustration } from "../motion";
 import { LandingSection, ScaledMock, SectionHeader } from "../shared";
 
+const FEATURE_FLAGS = [
+  {
+    name: "new_onboarding_flow",
+    enabledDetail: "iOS · 25% rollout",
+    disabledDetail: "iOS · off",
+    defaultEnabled: true,
+  },
+  {
+    name: "annual_price_test",
+    enabledDetail: "Backing flag · experiment · 100%",
+    disabledDetail: "Backing flag · experiment paused",
+    defaultEnabled: true,
+  },
+  {
+    name: "winback_offer_v2",
+    enabledDetail: "Churned subscribers · 50% rollout",
+    disabledDetail: "Churned subscribers · off",
+    defaultEnabled: true,
+  },
+  {
+    name: "family_sharing",
+    enabledDetail: "Internal testers only · on",
+    disabledDetail: "Internal testers only · off",
+    defaultEnabled: false,
+  },
+  {
+    name: "paywall_v4_layout",
+    enabledDetail: "All platforms · live",
+    disabledDetail: "All platforms · draft",
+    defaultEnabled: false,
+  },
+];
+
+function FlagRow({
+  flag,
+  withBorder,
+}: {
+  flag: (typeof FEATURE_FLAGS)[number];
+  withBorder: boolean;
+}) {
+  const [enabled, setEnabled] = useState(flag.defaultEnabled);
+
+  return (
+    <div
+      className={cn(
+        "self-stretch flex items-center py-4.5 px-6 gap-4",
+        withBorder && "border-b border-b-solid border-b-zinc-900",
+      )}
+    >
+      <div className="grow basis-[0%] flex flex-col gap-1">
+        <div
+          className={cn(
+            "font-mono font-medium text-[13px]/4 transition-colors duration-300",
+            enabled ? "text-white" : "text-zinc-400",
+          )}
+        >
+          {flag.name}
+        </div>
+        <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
+          {enabled ? flag.enabledDetail : flag.disabledDetail}
+        </div>
+      </div>
+      <Switch checked={enabled} onCheckedChange={setEnabled} />
+    </div>
+  );
+}
+
 /** Renders the experimentation product section. */
 export function LandingExperimentation() {
   return (
     <LandingSection id="experimentation">
       <div className="flex flex-col items-start justify-center gap-12 px-6 py-16 md:gap-23 md:px-12 md:py-24 xl:p-32">
         <SectionHeader
-          description="Paywall A/B tests and feature flags share one targeting engine — so an experiment is just a flag with results attached."
+          description="Try different paywalls, prices and product experiences with real customers. Compare the results, choose the winner and launch it with confidence."
           eyebrow="Experimentation"
-          title="Test every price, every screen, every rollout."
+          title="Learn what works before you roll it out."
         />
         <div className="flex flex-col items-start gap-6 self-stretch xl:flex-row">
           <ScaledMock className="min-w-0 flex-1" designWidth={944}>
@@ -19,7 +89,7 @@ export function LandingExperimentation() {
               <div className="self-stretch flex items-center justify-between py-5 px-6">
                 <div className="flex flex-col gap-2">
                   <div className="tracking-[-0.02em] font-sans font-medium text-white text-[15px]/4.5">
-                    Onboarding paywall — annual price
+                    Onboarding paywall: annual price
                   </div>
                   <div className="font-sans text-zinc-400 text-xs/4">
                     Running · 14 days · 48,204 exposures
@@ -60,7 +130,7 @@ export function LandingExperimentation() {
                     <CountUp value="$1.62" />
                   </div>
                   <div className="w-21 shrink-0 text-right font-sans font-medium flex justify-end flex-wrap text-zinc-500 text-sm/4.5">
-                    —
+                    0%
                   </div>
                 </div>
                 <div className="flex items-center gap-5 self-stretch">
@@ -136,61 +206,13 @@ export function LandingExperimentation() {
                   Production
                 </div>
               </div>
-              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
-                <div className="grow basis-[0%] flex flex-col gap-1">
-                  <div className="font-mono font-medium text-white text-[13px]/4">
-                    new_onboarding_flow
-                  </div>
-                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
-                    iOS · 25% rollout
-                  </div>
-                </div>
-                <Switch defaultChecked />
-              </div>
-              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
-                <div className="grow basis-[0%] flex flex-col gap-1">
-                  <div className="font-mono font-medium text-white text-[13px]/4">
-                    annual_price_test
-                  </div>
-                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
-                    Backing flag · experiment · 100%
-                  </div>
-                </div>
-                <Switch defaultChecked />
-              </div>
-              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
-                <div className="grow basis-[0%] flex flex-col gap-1">
-                  <div className="font-mono font-medium text-white text-[13px]/4">
-                    winback_offer_v2
-                  </div>
-                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
-                    Churned subscribers · 50% rollout
-                  </div>
-                </div>
-                <Switch defaultChecked />
-              </div>
-              <div className="self-stretch flex items-center py-4.5 px-6 gap-4 border-b border-b-solid border-b-zinc-900">
-                <div className="grow basis-[0%] flex flex-col gap-1">
-                  <div className="font-mono font-medium text-zinc-400 text-[13px]/4">
-                    family_sharing
-                  </div>
-                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
-                    Internal testers only · off
-                  </div>
-                </div>
-                <Switch />
-              </div>
-              <div className="self-stretch flex items-center py-4.5 px-6 gap-4">
-                <div className="grow basis-[0%] flex flex-col gap-1">
-                  <div className="font-mono font-medium text-zinc-400 text-[13px]/4">
-                    paywall_v4_layout
-                  </div>
-                  <div className="tracking-[-0.01em] font-sans text-zinc-400 text-xs/4">
-                    All platforms · draft
-                  </div>
-                </div>
-                <Switch />
-              </div>
+              {FEATURE_FLAGS.map((flag, index) => (
+                <FlagRow
+                  flag={flag}
+                  key={flag.name}
+                  withBorder={index < FEATURE_FLAGS.length - 1}
+                />
+              ))}
             </div>
         </div>
       </div>
diff --git a/apps/www/src/features/www/landing/sections/get-started.tsx b/apps/www/src/features/www/landing/sections/get-started.tsx
index 5a864f08d..94a3fadd4 100644
--- a/apps/www/src/features/www/landing/sections/get-started.tsx
+++ b/apps/www/src/features/www/landing/sections/get-started.tsx
@@ -61,10 +61,11 @@ export function LandingGetStarted() {
         <div className="relative flex flex-col items-center gap-8 md:gap-11">
           <div className="flex flex-col items-center gap-6">
             <h2 className="text-balance text-center font-medium font-sans text-[36px] text-white leading-[110%] tracking-[-0.03em] md:text-[48px] xl:text-[56px]">
-              Get started today
+              Start selling in an afternoon
             </h2>
             <p className="max-w-[500px] text-center font-sans text-zinc-400 text-base/6.5 tracking-[-0.03em] md:text-xl/8">
-              Create a project, drop in the SDK, ship your first paywall. All in an afternoon.
+              Connect your app, publish your first paywall and start turning your product into a
+              business.
             </p>
           </div>
           <div className="flex flex-col items-center gap-3 pt-1 sm:flex-row">
diff --git a/apps/www/src/features/www/landing/sections/navbar.tsx b/apps/www/src/features/www/landing/sections/navbar.tsx
index 3e52edfaa..5c4f4e485 100644
--- a/apps/www/src/features/www/landing/sections/navbar.tsx
+++ b/apps/www/src/features/www/landing/sections/navbar.tsx
@@ -51,19 +51,19 @@ const PRODUCT_LINKS: NavLink[] = [
   {
     label: "Analytics",
     href: "/#analytics",
-    description: "Revenue, trials and retention from live subscription state.",
+    description: "See what drives conversion and revenue.",
     icon: ChartColumnIcon,
   },
   {
     label: "Experimentation",
     href: "/#experimentation",
-    description: "A/B tests and feature flags on one targeting engine.",
+    description: "Try ideas, compare results and launch what works.",
     icon: FlaskConicalIcon,
   },
   {
     label: "CRM",
     href: "/#crm",
-    description: "Every purchase, trial and session resolved to one person.",
+    description: "See the full journey behind every customer.",
     icon: UsersIcon,
   },
 ];
diff --git a/apps/www/src/features/www/landing/sections/paywalls.tsx b/apps/www/src/features/www/landing/sections/paywalls.tsx
index 849711791..d688d9819 100644
--- a/apps/www/src/features/www/landing/sections/paywalls.tsx
+++ b/apps/www/src/features/www/landing/sections/paywalls.tsx
@@ -1,5 +1,6 @@
 import { PaywallBuild } from "../paywall-build/paywall-build";
 import { LandingSection, ScaledMock, SectionHeader } from "../shared";
+import { LandingAgentCompatibility } from "./agent-compatibility";
 
 /** Renders the paywalls product section. */
 export function LandingPaywalls() {
@@ -7,7 +8,7 @@ export function LandingPaywalls() {
     <LandingSection id="paywalls">
       <div className="flex flex-col items-start justify-center gap-12 px-6 pt-16 pb-10 md:gap-23 md:px-12 md:pt-24 md:pb-14 xl:px-32 xl:pt-32 xl:pb-16">
         <SectionHeader
-          description="Maximize your revenue by quickly testing your paywall designs and pricing with familiar no-code paywall builder."
+          description="Maximize your revenue by quickly testing your paywall designs and pricing with a familiar no-code paywall builder."
           eyebrow="Paywalls"
           title="Ship paywalls in minutes with our no-code designer and full AI integration."
         />
@@ -571,7 +572,7 @@ export function LandingPaywalls() {
           </div>
         </ScaledMock>
       </div>
-      <div className="h-20 border-zinc-800 border-t md:h-35.25" />
+      <LandingAgentCompatibility />
     </LandingSection>
   );
 }
diff --git a/apps/www/src/features/www/landing/sections/problem.tsx b/apps/www/src/features/www/landing/sections/problem.tsx
index b8dc0ec79..d3fcad4cd 100644
--- a/apps/www/src/features/www/landing/sections/problem.tsx
+++ b/apps/www/src/features/www/landing/sections/problem.tsx
@@ -2,7 +2,7 @@ import { ScrollBrightenText } from "../motion";
 import { LandingSection } from "../shared";
 
 const PROBLEM_COPY =
-  "Building apps is easy now. Growing them has never been harder. Voidhash brings all the tools you need to build, test, iterate and grow quickly.";
+  "Building apps is easier than ever. Growing them has never been harder. Voidhash helps you test what works, understand your customers and turn more users into paying customers.";
 
 /** Renders the landing page positioning statement. */
 export function LandingProblem() {
diff --git a/apps/www/src/features/www/pricing/pricing-page.tsx b/apps/www/src/features/www/pricing/pricing-page.tsx
index 80e75db20..c20cb6f78 100644
--- a/apps/www/src/features/www/pricing/pricing-page.tsx
+++ b/apps/www/src/features/www/pricing/pricing-page.tsx
@@ -1,5 +1,6 @@
 "use client";
 
+import { LandingAsteroids } from "@/features/www/landing/sections/asteroids";
 import { LandingDivider } from "@/features/www/landing/sections/divider";
 import { LandingFooter } from "@/features/www/landing/sections/footer";
 import { LandingGetStarted } from "@/features/www/landing/sections/get-started";
@@ -29,6 +30,7 @@ export function PricingPage() {
         <LandingGetStarted />
         <LandingDivider />
         <LandingFooter />
+        <LandingAsteroids />
       </div>
     </div>
   );

From 78d76ab1d413fe237739604e5ab44432f81c796f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 18:47:36 +0200
Subject: [PATCH 124/129] docs: align endpoint authorization matrix

---
 docs/security/endpoint-authorization-matrix.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/security/endpoint-authorization-matrix.md b/docs/security/endpoint-authorization-matrix.md
index dda01d923..74c84c456 100644
--- a/docs/security/endpoint-authorization-matrix.md
+++ b/docs/security/endpoint-authorization-matrix.md
@@ -62,7 +62,7 @@ database-backed cross-tenant case. “Gap” is a publication blocker.
 | Analytics | `ListRecentAnalyticsEvents`, `QueryAnalyticsInsights`, `QueryCustomAnalyticsInsight`, `QueryCustomAnalyticsPersons`, `ListAnalyticsInsights`, `CreateAnalyticsInsight`, `UpdateAnalyticsInsight`, `DeleteAnalyticsInsight`, `ListAnalyticsCohorts`, `CreateAnalyticsCohort`, `UpdateAnalyticsCohort`, `DeleteAnalyticsCohort`, `ListAnalyticsDashboards`, `CreateAnalyticsDashboard`, `DuplicateAnalyticsDashboard`, `UpdateAnalyticsDashboard`, `DeleteAnalyticsDashboard`, `PutAnalyticsDashboardItem`, `ReorderAnalyticsDashboardItems`, `RemoveAnalyticsDashboardItem` |
 | ApiKey | `CreateSecretKey`, `ListApiKeys`, `GetApiKeyById`, `RotateSecretKey`, `DeleteApiKey`, `CreateUserApiKey`, `ListUserApiKeys`, `RevokeUserApiKey` |
 | Person | `CreatePerson`, `ListPersons`, `GetPersonById`, `GetPersonByDistinctId` |
-| Experiment | `ListExperiments`, `GetExperiment`, `CreateExperiment`, `UpdateExperiment`, `ReplaceExperimentVariants`, `UpsertExperimentTreatment`, `RemoveExperimentTreatment`, `StartExperiment`, `PauseExperiment`, `ConcludeExperiment`, `ArchiveExperiment`, `RestoreExperiment`, `GetExperimentResults` |
+| Experiment | `ListExperiments`, `GetExperiment`, `CreateExperiment`, `SaveExperimentSetup`, `StartExperiment`, `PauseExperiment`, `ConcludeExperiment`, `ArchiveExperiment`, `RestoreExperiment`, `GetExperimentResults` |
 | FeatureFlag | `ListFeatureFlags`, `GetFeatureFlag`, `CreateFeatureFlag`, `UpdateFeatureFlag`, `ArchiveFeatureFlag`, `RestoreFeatureFlag`, `UpsertFeatureFlagOverride`, `ArchiveFeatureFlagOverride`, `ListFeatureFlagOverridesByFlag`, `ListFeatureFlagOverridesByPerson`, `UpsertFeatureFlagTarget`, `ArchiveFeatureFlagTarget`, `UpdateFeatureFlagVariants` |
 | Feedback | `SubmitFeedback` |
 | Organization | `CreateOrganization`, `UpdateOrganization`, `DeleteOrganization`, `SetOrganizationAvatar`, `RemoveOrganizationAvatar` |

From e563641e580b24509b43b7defd6bfb6a659af645 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 18:47:36 +0200
Subject: [PATCH 125/129] fix: update vulnerable dependency resolutions

---
 examples/mimic-example/package.json |    2 +-
 packages/agent/package.json         |    2 +-
 patches/brace-expansion@5.0.8.patch |   12 +
 pnpm-lock.yaml                      | 1301 ++++++++++++---------------
 pnpm-workspace.yaml                 |   13 +-
 5 files changed, 582 insertions(+), 748 deletions(-)
 create mode 100644 patches/brace-expansion@5.0.8.patch

diff --git a/examples/mimic-example/package.json b/examples/mimic-example/package.json
index 9eabd669c..dcfd4ad72 100644
--- a/examples/mimic-example/package.json
+++ b/examples/mimic-example/package.json
@@ -32,7 +32,7 @@
     "@voidhash/mimic-core": "workspace:*",
     "@voidhash/mimic-server": "workspace:*",
     "effect": "4.0.0-beta.84",
-    "postcss": "^8.5.1",
+    "postcss": "^8.5.18",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "redaxios": "^0.5.1",
diff --git a/packages/agent/package.json b/packages/agent/package.json
index a7e5529bd..b5fc78d9a 100644
--- a/packages/agent/package.json
+++ b/packages/agent/package.json
@@ -40,6 +40,6 @@
     "@voidhash/tsconfig": "workspace:*",
     "typescript": "catalog:",
     "vite-plus": "catalog:",
-    "wrangler": "^4.0.0"
+    "wrangler": "^4.114.0"
   }
 }
diff --git a/patches/brace-expansion@5.0.8.patch b/patches/brace-expansion@5.0.8.patch
new file mode 100644
index 000000000..907b3ff61
--- /dev/null
+++ b/patches/brace-expansion@5.0.8.patch
@@ -0,0 +1,12 @@
+diff --git a/dist/commonjs/index.js b/dist/commonjs/index.js
+--- a/dist/commonjs/index.js
++++ b/dist/commonjs/index.js
+@@ -259,5 +259,8 @@
+         str = m.post;
+     }
+     return acc;
+ }
++// Preserve the callable CommonJS API expected by brace-expansion 1.x consumers.
++Object.assign(expand, exports);
++module.exports = expand;
+ //# sourceMappingURL=index.js.map
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ad8b36a56..d6acc5f7e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -148,7 +148,8 @@ overrides:
   '@babel/plugin-transform-modules-systemjs@<=7.29.3': 7.29.4
   '@babel/core@<=7.29.0': 7.29.6
   '@esbuild-kit/core-utils>esbuild': 0.25.0
-  '@expo/metro-config>postcss': 8.5.10
+  '@expo/cli>tar': 7.5.21
+  '@expo/metro-config>postcss': 8.5.18
   '@isaacs/brace-expansion@<=5.0.0': 5.0.1
   '@tanstack/react-start@>=1.0.0 <1.167.30': 1.167.30
   '@tootallnate/once@<2.0.1': 2.0.1
@@ -156,19 +157,20 @@ overrides:
   '@srsholmes/vitest-react-native>esbuild': 0.28.1
   ajv@<7: 6.14.0
   ajv@>=7.0.0-alpha.0 <8.18.0: 8.18.0
-  brace-expansion@<1.1.13: 1.1.13
-  brace-expansion@>=2.0.0 <2.0.3: 2.0.3
+  brace-expansion@<=5.0.7: 5.0.8
   bundle-require>esbuild: 0.28.1
   defu@<=6.1.4: 6.1.7
   drizzle-orm@<0.45.2: 0.45.2
   effect: 4.0.0-beta.84
-  fast-uri@<=3.1.1: 3.1.3
+  fast-uri@<=3.1.3: 3.1.4
+  fast-xml-parser@>=5.9.3 <5.10.1: 5.10.1
   fdir>picomatch: 4.0.4
   flatted@<=3.4.1: 3.4.2
   form-data@>=4.0.0 <4.0.6: 4.0.6
   h3-v2: npm:h3@2.0.1-rc.18
   js-yaml@<3.15.0: 3.15.0
-  js-yaml@>=4.0.0 <=4.1.1: 4.2.0
+  js-yaml@>=4.0.0 <4.3.0: 4.3.0
+  postcss@>=8.0.0 <8.5.18: 8.5.18
   kysely: 0.28.17
   lodash@>=4.0.0 <=4.17.23: 4.18.0
   minimatch@<3.1.4: 3.1.4
@@ -198,6 +200,7 @@ pnpmfileChecksum: sha256-FmQ3RWUsIKZQg8qJsKhZOw8G3ylUwk93HvwW4x5Nr5A=
 
 patchedDependencies:
   '@earendil-works/pi-ai@0.80.7': 3fbb9897213abf111acd834b26232ea390b59077e07751ef66a6e45bd00a4bd3
+  brace-expansion@5.0.8: ca2c07b933974ca774e3e37039d8c563bb28f04710ba4c7162a31a96faff77b9
 
 importers:
 
@@ -339,7 +342,7 @@ importers:
         version: link:../../packages/tsconfig
       alchemy:
         specifier: 'catalog:'
-        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0)
+        version: 2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260722.1)(ws@8.21.0)
       typescript:
         specifier: 'catalog:'
         version: 6.0.3
@@ -400,7 +403,7 @@ importers:
         version: 10.0.0
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -967,8 +970,8 @@ importers:
         specifier: 4.0.0-beta.84
         version: 4.0.0-beta.84
       postcss:
-        specifier: 8.5.10
-        version: 8.5.10
+        specifier: ^8.5.18
+        version: 8.5.23
       react:
         specifier: ^19.0.0
         version: 19.1.0
@@ -1093,7 +1096,7 @@ importers:
         version: 8.50.0(eslint@9.39.2(jiti@2.7.0))(typescript@5.9.3)
       babel-preset-expo:
         specifier: ^54.0.10
-        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
+        version: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
       eslint:
         specifier: ^9.25.1
         version: 9.39.2(jiti@2.7.0)
@@ -1121,7 +1124,7 @@ importers:
         version: 4.0.0-beta.84
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -1164,7 +1167,7 @@ importers:
         version: 19.2.7(react@19.2.7)
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -1219,7 +1222,7 @@ importers:
         version: 8.0.11(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
       expo-module-scripts:
         specifier: ^5.0.8
-        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
+        version: 5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0)
       nitro-codegen:
         specifier: 0.26.4
         version: 0.26.4(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
@@ -1274,7 +1277,7 @@ importers:
         version: 19.2.7(react@19.2.7)
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
+        version: 8.5.1(jiti@2.7.0)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3)
       tsx:
         specifier: ^4.19.3
         version: 4.21.0
@@ -1319,8 +1322,8 @@ importers:
         specifier: 'catalog:'
         version: 0.1.24(@opentelemetry/api@1.9.0)(@types/node@26.1.1)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(vite@7.3.5(@types/node@26.1.1)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3)
       wrangler:
-        specifier: ^4.0.0
-        version: 4.110.0
+        specifier: ^4.114.0
+        version: 4.114.0
 
   packages/ai-shared:
     dependencies:
@@ -1530,13 +1533,13 @@ importers:
     dependencies:
       '@react-email/components':
         specifier: 1.0.12
-        version: 1.0.12(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 1.0.12(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react:
         specifier: ^19.1.0
         version: 19.2.7
       react-dom:
         specifier: ^19.1.0
-        version: 19.1.1(react@19.2.7)
+        version: 19.2.7(react@19.2.7)
     devDependencies:
       '@types/react':
         specifier: ^19.1.5
@@ -1546,7 +1549,7 @@ importers:
         version: 19.1.9(@types/react@19.1.17)
       react-email:
         specifier: 6.7.0
-        version: 6.7.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 6.7.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       typescript:
         specifier: 'catalog:'
         version: 6.0.3
@@ -1625,7 +1628,7 @@ importers:
         version: 19.2.7(react@19.2.7)
       tsdown:
         specifier: ^0.18.2
-        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
+        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
       typescript:
         specifier: 5.8.3
         version: 5.8.3
@@ -1643,7 +1646,7 @@ importers:
     devDependencies:
       tsdown:
         specifier: ^0.18.2
-        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
+        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
       typescript:
         specifier: 5.8.3
         version: 5.8.3
@@ -1696,7 +1699,7 @@ importers:
     devDependencies:
       tsdown:
         specifier: ^0.18.2
-        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
+        version: 0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3)
       typescript:
         specifier: 5.8.3
         version: 5.8.3
@@ -1909,7 +1912,7 @@ importers:
     dependencies:
       '@base-ui/react':
         specifier: ^1.1.0
-        version: 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@hookform/resolvers':
         specifier: ^5.1.1
         version: 5.4.0(react-hook-form@7.81.0(react@19.2.7))
@@ -1924,7 +1927,7 @@ importers:
         version: 2.1.1
       cmdk:
         specifier: 1.1.1
-        version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       color-hash:
         specifier: ^2.0.2
         version: 2.0.2
@@ -1936,16 +1939,16 @@ importers:
         version: 8.6.0(react@19.2.7)
       input-otp:
         specifier: ^1.4.2
-        version: 1.4.2(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 1.4.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       lucide-react:
         specifier: ^0.555.0
         version: 0.555.0(react@19.2.7)
       next-themes:
         specifier: ^0.4.6
-        version: 0.4.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 0.4.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       radix-ui:
         specifier: ^1.4.2
-        version: 1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react:
         specifier: ^19.1.0
         version: 19.2.7
@@ -1954,19 +1957,19 @@ importers:
         version: 8.10.1(date-fns@4.4.0)(react@19.2.7)
       react-dom:
         specifier: ^19.1.0
-        version: 19.1.1(react@19.2.7)
+        version: 19.2.7(react@19.2.7)
       react-hook-form:
         specifier: ^7.60.0
         version: 7.81.0(react@19.2.7)
       react-resizable-panels:
         specifier: ^3.0.3
-        version: 3.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 3.0.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       recharts:
         specifier: ^2.15.4
-        version: 2.15.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 2.15.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       sonner:
         specifier: ^2.0.1
-        version: 2.0.7(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 2.0.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       tailwind-merge:
         specifier: ^3.0.2
         version: 3.6.0
@@ -1978,7 +1981,7 @@ importers:
         version: 10.1.1(react@19.2.7)
       vaul:
         specifier: ^1.1.2
-        version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+        version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       zod:
         specifier: ^4.1.13
         version: 4.3.6
@@ -3387,8 +3390,8 @@ packages:
     cpu: [x64]
     os: [darwin]
 
-  '@cloudflare/workerd-darwin-64@1.20260708.1':
-    resolution: {integrity: sha512-HXFCvhS1wpg3uXO0CLUwmwC41i2loM5FSK69EUchOBpmYBAXxT1oHLm6EOA5lqhTk5Mu9kjRiQYxa1GwKPwfJg==}
+  '@cloudflare/workerd-darwin-64@1.20260722.1':
+    resolution: {integrity: sha512-vZOP8vIS3NwnuaO+gz0FZ7kIGeiO3bZmxV35Ph9zOXKSREhDFlH7wQ7mkCdhW3O4jnXsew+XT7b+DNEI2CcJGQ==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [darwin]
@@ -3399,8 +3402,8 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
-  '@cloudflare/workerd-darwin-arm64@1.20260708.1':
-    resolution: {integrity: sha512-JVlJaKDoRTVKSroHIlf8g3UCPjKj4iDbMZE2CNYht5qQ+2rL0FAUiVlV82G3BqKnnw9kHYnnsMzC08b9zVtdzA==}
+  '@cloudflare/workerd-darwin-arm64@1.20260722.1':
+    resolution: {integrity: sha512-EmIQymihDq6WNdER4+LF8Qn80yqayBUpJ+tkOO7wmY8pmgfyXjIUFNXotl21AHovTeu2seR7HdVUgeN/BilCWw==}
     engines: {node: '>=16'}
     cpu: [arm64]
     os: [darwin]
@@ -3411,8 +3414,8 @@ packages:
     cpu: [x64]
     os: [linux]
 
-  '@cloudflare/workerd-linux-64@1.20260708.1':
-    resolution: {integrity: sha512-3daE60YdD7YX0Jtuzc9DE/r/qMkmx8ZvHTkF8Mzmp3F5tbzlV0DAzmu5PFUPF2WuvtKbAhZKbvC2cHmWpQYxnA==}
+  '@cloudflare/workerd-linux-64@1.20260722.1':
+    resolution: {integrity: sha512-jvZ3k9fxcnEn04s80CgIYxQfpOyAiz/8qC42DP8EBa9tR27qWyg9wmm31zIobVlrgBZn/+8NfdP73avRGcQOjQ==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [linux]
@@ -3423,8 +3426,8 @@ packages:
     cpu: [arm64]
     os: [linux]
 
-  '@cloudflare/workerd-linux-arm64@1.20260708.1':
-    resolution: {integrity: sha512-VLdNYOx5Hj+9C6isy0ACWZsbMtSxex2DIJWEe7cZxUdlphZ58ZT8zxNXK8yunFiowd34hn3VwGMopdvdj8lvmA==}
+  '@cloudflare/workerd-linux-arm64@1.20260722.1':
+    resolution: {integrity: sha512-BOSB55SMNdy+DA5uj2WirgiNanpHGis5PVvXH1wSfvjRKr4JGgWK+EZzxz0RFUo6QjjQQC/NimEzNZ7va7jmKg==}
     engines: {node: '>=16'}
     cpu: [arm64]
     os: [linux]
@@ -3435,8 +3438,8 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@cloudflare/workerd-windows-64@1.20260708.1':
-    resolution: {integrity: sha512-bC/aSAwLy16Vjo24i9XU3aWH+eRgz7NeR5xPKavGbembO18ZywYTQbXh14eXtY6fAqN3RzRG8psijTdhX4xydA==}
+  '@cloudflare/workerd-windows-64@1.20260722.1':
+    resolution: {integrity: sha512-sYM8YgUpKnRz2xjvdJLX1Ojzoi4MlA4gk8WTTExhGydjYB2UTs5NIbv0ZmpKgMoK9io3ixgmiW56ZnTbcWOdiA==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [win32]
@@ -3686,6 +3689,9 @@ packages:
   '@emnapi/runtime@1.10.0':
     resolution: {integrity: sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==}
 
+  '@emnapi/runtime@1.11.3':
+    resolution: {integrity: sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==}
+
   '@emnapi/wasi-threads@1.2.1':
     resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
 
@@ -4449,152 +4455,161 @@ packages:
     resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
     engines: {node: '>=18'}
 
-  '@img/sharp-darwin-arm64@0.34.5':
-    resolution: {integrity: sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-darwin-arm64@0.35.2':
+    resolution: {integrity: sha512-eEieHsMksAW4IiO5NzauESRl2D2qz3J/kwUxUrSfV06A93eEaRfMpHXyUb1mAqrR7i8U9A0GRqE9pjn6u1Jjpg==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [darwin]
 
-  '@img/sharp-darwin-x64@0.34.5':
-    resolution: {integrity: sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-darwin-x64@0.35.2':
+    resolution: {integrity: sha512-BaktuGPCeHJMARpodR8jK4uKiZrPAy9WrfQW0sdI37clracq8Bp01AYS3SZgi5FS/y5twa9t4+LIuuxQjqRrWw==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [darwin]
 
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
-    resolution: {integrity: sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==}
+  '@img/sharp-freebsd-wasm32@0.35.2':
+    resolution: {integrity: sha512-YoAxdnd8hPUkvLHd3bWY+YA8nw3xM/RyRopYucNsWHVSan8NLVM3X2volsfoRDcXdUJPg6tXahSd7HXPK7lRnw==}
+    engines: {node: '>=20.9.0'}
+    os: [freebsd]
+
+  '@img/sharp-libvips-darwin-arm64@1.3.1':
+    resolution: {integrity: sha512-4V/M3roRMTYjiwZY9IOVQOE8OyeCxFAkYmyZDrZl51uOKjibm3oeEJ4WAmLxutAfzFbC9jqUiPs2gbnGflH+7g==}
     cpu: [arm64]
     os: [darwin]
 
-  '@img/sharp-libvips-darwin-x64@1.2.4':
-    resolution: {integrity: sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==}
+  '@img/sharp-libvips-darwin-x64@1.3.1':
+    resolution: {integrity: sha512-c0/DxItpJv2+dGhgycJBBgotdqruGYDvA79drdh0MD1dFpy7JzJ/PlXwi1H4rFf0eTy8tgbI91aHDnZIceY3jQ==}
     cpu: [x64]
     os: [darwin]
 
-  '@img/sharp-libvips-linux-arm64@1.2.4':
-    resolution: {integrity: sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==}
+  '@img/sharp-libvips-linux-arm64@1.3.1':
+    resolution: {integrity: sha512-JznefmcK9j1JKPz8AkQDh89kjojubyfOasWBPKfzMIhPwsgDy9evpE/naJTXXXmghS1iFwR8u/kTwh/I2/+GCw==}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-arm@1.2.4':
-    resolution: {integrity: sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==}
+  '@img/sharp-libvips-linux-arm@1.3.1':
+    resolution: {integrity: sha512-aGGy9aWzXgHBG7HNyQPWorZthlp7+x6fDRoPAQbGO3ThcttuTyKIx3NuSHb6zb4gBNq6/yNn9f1cy9nFKS/Vmg==}
     cpu: [arm]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
-    resolution: {integrity: sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==}
+  '@img/sharp-libvips-linux-ppc64@1.3.1':
+    resolution: {integrity: sha512-1EkwGNCZk6iWNCMWqrvdJ+r1j0PT1zIz60CNPhYnJlK/zyeWqlsPZIe+ocBVqPF8k/Ssee/NCk+tE9Ryrko6ng==}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
-    resolution: {integrity: sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==}
+  '@img/sharp-libvips-linux-riscv64@1.3.1':
+    resolution: {integrity: sha512-Ilays+w2bXdnxzxtQdmXR62u8o8GYa3eL4+Gr+1KiE4xperMZUslRaVPJwwPkzlHEjGfXAfRVAa/7CYCtSqsBw==}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-s390x@1.2.4':
-    resolution: {integrity: sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==}
+  '@img/sharp-libvips-linux-s390x@1.3.1':
+    resolution: {integrity: sha512-VfBwVHQTbRoj4XlpA/KLZ7ltgMpz+4WSejFzQ+GnoImjo1PtEJ59QB2qR1xQEeRPYIkNrPIm2L4cICMvz4C2ew==}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-x64@1.2.4':
-    resolution: {integrity: sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==}
+  '@img/sharp-libvips-linux-x64@1.3.1':
+    resolution: {integrity: sha512-+c8ukgwU62DS54nCAjw7keOfHUkmr0B5QHEdcOqRnodF/MNXJbVI8Eopoj4B/0H8Asr65I+A4Amrn7a85/md6A==}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
-    resolution: {integrity: sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==}
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.1':
+    resolution: {integrity: sha512-qlKb/pwbkAi1WMsJrYHk7CuDrd12s27U2QnRhFYUoJNrRCmkosMTttuRFat/DDB3IlDm5qE1TJgZ4JDnHX8Ldw==}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
-    resolution: {integrity: sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==}
+  '@img/sharp-libvips-linuxmusl-x64@1.3.1':
+    resolution: {integrity: sha512-yO21HwoUVLN8Qa+/SBjQLMYwBWAVJjeGPNe+hc0OUeMeifEtJqu5a1c4HayE1nNpDih9y3/KkoltfkDodmKAlg==}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-linux-arm64@0.34.5':
-    resolution: {integrity: sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-arm64@0.35.2':
+    resolution: {integrity: sha512-af12Pnd0ZGu2HfP8NayB0kk6eC/lrfbQE6HlR4jD+34wdJ1Vw9TF6TMn6ZvffT+WgqVsl0hRbmNvz2u/23VmwA==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-arm@0.34.5':
-    resolution: {integrity: sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-arm@0.35.2':
+    resolution: {integrity: sha512-SE4kzF2mepn6z+6E7L6lsV8FzuLL6IPQdyX8ZiwROAG/G8td+hP/m7FsFPwidtrF19gvajuC9l6TxAVcsA4S7A==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-ppc64@0.34.5':
-    resolution: {integrity: sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-ppc64@0.35.2':
+    resolution: {integrity: sha512-hYSBm7zcNtDCozCxQHYZJiu63b/bXsgRZuOxCIBZsStMM9Vap47iFHdbX4kCvQsblPB/k+clhELpdQJHQLSHvg==}
+    engines: {node: '>=20.9.0'}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-riscv64@0.34.5':
-    resolution: {integrity: sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-riscv64@0.35.2':
+    resolution: {integrity: sha512-qQt0Kc13+Hoan/Awq/qMSQw3L+RI1NCRPgD5cUJ/1WSSmIoysLOc72jlRM3E0OHN9Yr313jgeQ2T+zW+F03QFA==}
+    engines: {node: '>=20.9.0'}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-s390x@0.34.5':
-    resolution: {integrity: sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-s390x@0.35.2':
+    resolution: {integrity: sha512-E4fLLfRPzDLlEeDaTzI98OFLcv++WL5ChLLMwPoVd0CIoZQqupBSNbOisPL5am9XsbQ9T84+iiMpUvbFtkunbA==}
+    engines: {node: '>=20.9.0'}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-x64@0.34.5':
-    resolution: {integrity: sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-x64@0.35.2':
+    resolution: {integrity: sha512-gi0zFJJRLswfCZmHtJdikXPOc5u7qamSOS3NHedLqLd4W8Q0NqjdBr6TTRIgsfFjqfTsHFgdfvJ9LwqSgcHiAA==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linuxmusl-arm64@0.34.5':
-    resolution: {integrity: sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linuxmusl-arm64@0.35.2':
+    resolution: {integrity: sha512-siWbOW1u6HFnFLrp0waKyW7VEf7jYvcDWdrXEFa8AkdAQgEvuu5Fz8/Y70w9EeqAdwDtfU012BhEHHaDqvQNzg==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-linuxmusl-x64@0.34.5':
-    resolution: {integrity: sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linuxmusl-x64@0.35.2':
+    resolution: {integrity: sha512-YBqMMcjDi4QGYiSn4vNOYBhmlC4z5AXqkOUUqI2e0AFA4urNv4ESgOgwNl3K+4etQhha0twXlzeF20bbULm9Yg==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-wasm32@0.34.5':
-    resolution: {integrity: sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-wasm32@0.35.2':
+    resolution: {integrity: sha512-Mrv4JQNYVQ94xH+jzZ9r+gowleN8mv2FTgKT+PI6bx5C0G8TdNYndu161pg2i7uoBwxy2ImPMHrJOM2LZef7Bw==}
+    engines: {node: '>=20.9.0'}
+
+  '@img/sharp-webcontainers-wasm32@0.35.2':
+    resolution: {integrity: sha512-QNV27pxs9wpApEiCfvHM1RDoP1w1+2KrUWWDPEhEwg+latvOrfuhWrHWZKwdSFwU6jh3myjw/yOCRsUIuOft3g==}
+    engines: {node: '>=20.9.0'}
     cpu: [wasm32]
 
-  '@img/sharp-win32-arm64@0.34.5':
-    resolution: {integrity: sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-win32-arm64@0.35.2':
+    resolution: {integrity: sha512-BiVRYc/t6/Vl3e1hBx0hugG4oN9Pydf4fgMSpxTQJmwGUg/YoXTWHiFeRymHfCZzifxu4F4rpk/I67D0LQ20wQ==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [win32]
 
-  '@img/sharp-win32-ia32@0.34.5':
-    resolution: {integrity: sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-win32-ia32@0.35.2':
+    resolution: {integrity: sha512-YYEhx9PImCC7T0tI8JDMi4DB9LwLCXCU5OWNYEXAxh5Q1ShKkyC6byxzoBJ3gEFDnH2lQckWuDe70G7mB2XJog==}
+    engines: {node: ^20.9.0}
     cpu: [ia32]
     os: [win32]
 
-  '@img/sharp-win32-x64@0.34.5':
-    resolution: {integrity: sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-win32-x64@0.35.2':
+    resolution: {integrity: sha512-imoOyBcoM/iiUr4J6VPpCNjPnjvP/Gks95898yB8YqoGGYmHYbOyCuNv9FMhFgtaiHFGbHW8bxKqRV6VjtXThQ==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [win32]
 
@@ -4937,8 +4952,8 @@ packages:
     resolution: {integrity: sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==}
     engines: {node: '>= 20.19.0'}
 
-  '@nodable/entities@2.2.0':
-    resolution: {integrity: sha512-9uGyhaQavEUMC8AIddIjau4NsnsXhou+j5sBAGojCM1oxmQpVKTWR/9JxABD6UAv12vpIms55fPZKFQEhG6uBg==}
+  '@nodable/entities@3.0.0':
+    resolution: {integrity: sha512-8L9xFeTYKhm49xfIypoe2W5wV1m/3Z58kT+7kR9A8OyFxcPduI4VmxaUMQyKYrRjUoLLSXv6EKKID5Tvj9cUVw==}
 
   '@nodelib/fs.scandir@2.1.5':
     resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
@@ -8983,9 +8998,6 @@ packages:
   bail@2.0.2:
     resolution: {integrity: sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==}
 
-  balanced-match@1.0.2:
-    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
-
   balanced-match@4.0.4:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
     engines: {node: 18 || 20 || >=22}
@@ -9122,12 +9134,9 @@ packages:
     resolution: {integrity: sha512-apC2+fspHGI3mMKj+dGevkGo/tCqVB8jMb6i+OX+E29p0Iposz07fABkRIfVUPNd5A5VbuOz1bZbnmkKLYF+wQ==}
     engines: {node: '>= 5.10.0'}
 
-  brace-expansion@1.1.13:
-    resolution: {integrity: sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==}
-
-  brace-expansion@5.0.7:
-    resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
-    engines: {node: 18 || 20 || >=22}
+  brace-expansion@5.0.8:
+    resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
+    engines: {node: 20 || >=22}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -9461,9 +9470,6 @@ packages:
   compute-scroll-into-view@3.1.1:
     resolution: {integrity: sha512-VRhuHOLoKYOy4UbilLbUzbYg93XLjv2PncJC50EuTWPA3gaja1UjBsUP/D/9/juV3vQFr6XBEzn9KCAHdUvOHw==}
 
-  concat-map@0.0.1:
-    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
-
   conf@15.1.0:
     resolution: {integrity: sha512-Uy5YN9KEu0WWDaZAVJ5FAmZoaJt9rdK6kH+utItPyGsCqCgaTKkrmZx3zoE0/3q6S3bcp3Ihkk+ZqPxWxFK5og==}
     engines: {node: '>=20'}
@@ -10792,14 +10798,14 @@ packages:
   fast-text-encoding@1.0.6:
     resolution: {integrity: sha512-VhXlQgj9ioXCqGstD37E/HBeqEGV/qOD/kmbVG8h5xKBYvM1L3lR1Zn4555cQ8GkYbJa8aJSipLPndE1k6zK2w==}
 
-  fast-uri@3.1.3:
-    resolution: {integrity: sha512-i70LwGWUduXqzicKXWshooq+sWL1K3WUU5rKZNG/0i3a1OSoX3HqhH5WbWwTmqWfor4urUakGPiRQcleRZTwOg==}
+  fast-uri@3.1.4:
+    resolution: {integrity: sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==}
 
   fast-xml-builder@1.3.0:
     resolution: {integrity: sha512-F74cZEdCvuw9P41GAC3rod4X04jjWGM1JPEv/GWSqFTWLsdyMSBMBMlm9Hk3GLBgLBbdBNY8yee0pQh2RBVESQ==}
 
-  fast-xml-parser@5.10.0:
-    resolution: {integrity: sha512-SLhnTEqE5QpJHq/6zl9bsmImEP2adv+y6Wy+cJa7nVTRzQh1OZfCe9k29M5xN74LWnu0xa1zrUrq3KnOKl92Fg==}
+  fast-xml-parser@5.10.1:
+    resolution: {integrity: sha512-IEMIf7298kXuZSRFoGfMYrl7is8LpavODgbNz1cwIudv7KwVFnuU+UsMporfq6PD6aXSlawZlARiA3UywCTfMw==}
     hasBin: true
 
   fastq@1.19.1:
@@ -11987,8 +11993,8 @@ packages:
     resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==}
     hasBin: true
 
-  js-yaml@4.2.0:
-    resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
+  js-yaml@4.3.0:
+    resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
     hasBin: true
 
   jsbi@4.3.2:
@@ -12706,8 +12712,8 @@ packages:
     resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
     engines: {node: '>=4'}
 
-  miniflare@4.20260708.1:
-    resolution: {integrity: sha512-c94O9zRDISdqO18EHt6l0iF/fWgWt8p18PJvRsA/L/NJZ9Cfke3s/F5Blg1XXF7WDutVRzWVWy8Vy4LaT5ifsA==}
+  miniflare@4.20260722.0:
+    resolution: {integrity: sha512-LW6ABMhCx/yIEFBLC/DO4yAhdm2T/G7jp7pr5T2kj895+CCIaHZqpMXdW9O6YE48LcYcCJChwWc8aEs1vpbTXw==}
     engines: {node: '>=22.0.0'}
     hasBin: true
 
@@ -13395,16 +13401,12 @@ packages:
       yaml:
         optional: true
 
-  postcss@8.5.10:
-    resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==}
-    engines: {node: ^10 || ^12 || >=14}
-
-  postcss@8.5.16:
-    resolution: {integrity: sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==}
+  postcss@8.5.18:
+    resolution: {integrity: sha512-xdB1oSLHbz1vRWgCDalrCqEFTWzFlhqFC5tIHLMOSUIjhm3XXQ1qrFy8S/ESr1JYRRXqM3c1QFiMZUJdUTqyMQ==}
     engines: {node: ^10 || ^12 || >=14}
 
-  postcss@8.5.20:
-    resolution: {integrity: sha512-lW616l85ucIQL+FocMmL7pQFPqBmwejrCMg+iPxyImlrANNJG9NHq/RkyCZopDhd8C3LA03PHRJDjkbGu8vvug==}
+  postcss@8.5.23:
+    resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==}
     engines: {node: ^10 || ^12 || >=14}
 
   postgres-array@2.0.0:
@@ -14286,10 +14288,20 @@ packages:
     peerDependencies:
       seroval: ^1.0
 
+  seroval-plugins@1.5.6:
+    resolution: {integrity: sha512-HXuLAX2pu/UByPpaeo/TaMfvMIi+1QqIoPJYCcAtU8QkVNwgR6MPlGuCQTErV1JwraaMbYaWVIBX7mppzGLATQ==}
+    engines: {node: '>=10'}
+    peerDependencies:
+      seroval: ^1.0
+
   seroval@1.5.5:
     resolution: {integrity: sha512-bSjOuPcwPKLSJNhr9+bZxA20nQxVle5J5MNsYRVE6cIg7KpRLXGupymePavu0jrxlPiPsr4xGZSB8yUY2sH2sw==}
     engines: {node: '>=10'}
 
+  seroval@1.5.6:
+    resolution: {integrity: sha512-rVQVWjjSvlINzaQPZH5JFqsqEsIWdTxY3iJZCnTL/5gQbXIRooVZKI60tVCkOVfzcRPejboxO2t0P89dg5mQaA==}
+    engines: {node: '>=10'}
+
   serve-static@1.16.3:
     resolution: {integrity: sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==}
     engines: {node: '>= 0.8.0'}
@@ -14328,9 +14340,9 @@ packages:
   shallowequal@1.1.0:
     resolution: {integrity: sha512-y0m1JoUZSlPAjXVtPPW70aZWfIL/dSP7AFkRnniLCrK/8MDKog3TySTBmckD+RObVxH0v4Tox67+F14PdED2oQ==}
 
-  sharp@0.34.5:
-    resolution: {integrity: sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  sharp@0.35.2:
+    resolution: {integrity: sha512-FVtFjtBCMiJS6yb5CX7Sop45WFMpeGw6oRKuJnXYgf/f1ms/D7LE/ZUSNxnW7rZ/dbslQWYkoqFHGPaDBtaK4w==}
+    engines: {node: '>=20.9.0'}
 
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
@@ -14780,8 +14792,8 @@ packages:
     resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
     engines: {node: '>=6'}
 
-  tar@7.5.19:
-    resolution: {integrity: sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==}
+  tar@7.5.21:
+    resolution: {integrity: sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==}
     engines: {node: '>=18'}
 
   taze@0.18.0:
@@ -15687,17 +15699,17 @@ packages:
     engines: {node: '>=16'}
     hasBin: true
 
-  workerd@1.20260708.1:
-    resolution: {integrity: sha512-WAK+Kt/VVCSldH2qSr8lx46XCJ4Q+bdlHNaFqUtOHthBEIB8C1N8HVW+VOLrxDoTCk0NGNv0zajnBeQK4JOB9w==}
+  workerd@1.20260722.1:
+    resolution: {integrity: sha512-NycKuc1x2onvsRfGGpM093vRlLFU2zHDAM0+APpccfg4+gZxDGCH27RmdDvkeBuoZyYqgLo3oAfF6re4mvC3vQ==}
     engines: {node: '>=16'}
     hasBin: true
 
-  wrangler@4.110.0:
-    resolution: {integrity: sha512-xZeXKYi7hxQRF5anL+v77RkufJNpF9f3Eqeyqq2QBsETpLZgh0Agj0jJ6JPtkbgn6ukZdh8OK5egsGPWIditgg==}
+  wrangler@4.114.0:
+    resolution: {integrity: sha512-M65P25t5UHA1TIJfgZXDcj+YzVobgKdRguM2QPz0xnxLFuOcuE3ErgllDht0iaho7MS4o0g/Bb4YK2+GT+bibg==}
     engines: {node: '>=22.0.0'}
     hasBin: true
     peerDependencies:
-      '@cloudflare/workers-types': ^5.20260708.1
+      '@cloudflare/workers-types': ^5.20260722.1
     peerDependenciesMeta:
       '@cloudflare/workers-types':
         optional: true
@@ -17365,19 +17377,6 @@ snapshots:
       '@babel/helper-string-parser': 7.29.7
       '@babel/helper-validator-identifier': 7.29.7
 
-  '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@babel/runtime': 7.29.7
-      '@base-ui/utils': 0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@floating-ui/utils': 0.2.12
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-      use-sync-external-store: 1.6.0(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      date-fns: 4.4.0
-
   '@base-ui/react@1.6.0(@types/react@19.1.17)(date-fns@4.4.0)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@babel/runtime': 7.29.7
@@ -17391,17 +17390,6 @@ snapshots:
       '@types/react': 19.1.17
       date-fns: 4.4.0
 
-  '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@babel/runtime': 7.29.7
-      '@floating-ui/utils': 0.2.12
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-      reselect: 5.2.0
-      use-sync-external-store: 1.6.0(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-
   '@base-ui/utils@0.3.1(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@babel/runtime': 7.29.7
@@ -17545,40 +17533,40 @@ snapshots:
 
   '@cloudflare/kv-asset-handler@0.5.0': {}
 
-  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260708.1)':
+  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260722.1)':
     dependencies:
       unenv: 2.0.0-rc.24
     optionalDependencies:
-      workerd: 1.20260708.1
+      workerd: 1.20260722.1
 
   '@cloudflare/workerd-darwin-64@1.20260526.1':
     optional: true
 
-  '@cloudflare/workerd-darwin-64@1.20260708.1':
+  '@cloudflare/workerd-darwin-64@1.20260722.1':
     optional: true
 
   '@cloudflare/workerd-darwin-arm64@1.20260526.1':
     optional: true
 
-  '@cloudflare/workerd-darwin-arm64@1.20260708.1':
+  '@cloudflare/workerd-darwin-arm64@1.20260722.1':
     optional: true
 
   '@cloudflare/workerd-linux-64@1.20260526.1':
     optional: true
 
-  '@cloudflare/workerd-linux-64@1.20260708.1':
+  '@cloudflare/workerd-linux-64@1.20260722.1':
     optional: true
 
   '@cloudflare/workerd-linux-arm64@1.20260526.1':
     optional: true
 
-  '@cloudflare/workerd-linux-arm64@1.20260708.1':
+  '@cloudflare/workerd-linux-arm64@1.20260722.1':
     optional: true
 
   '@cloudflare/workerd-windows-64@1.20260526.1':
     optional: true
 
-  '@cloudflare/workerd-windows-64@1.20260708.1':
+  '@cloudflare/workerd-windows-64@1.20260722.1':
     optional: true
 
   '@codemirror/autocomplete@6.20.3':
@@ -17713,16 +17701,16 @@ snapshots:
       '@smithy/util-base64': 4.5.8
       aws4fetch: 1.0.20
       effect: 4.0.0-beta.84
-      fast-xml-parser: 5.10.0
+      fast-xml-parser: 5.10.1
 
   '@distilled.cloud/axiom@0.26.1(effect@4.0.0-beta.84)':
     dependencies:
       '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
       effect: 4.0.0-beta.84
 
-  '@distilled.cloud/cloudflare-rolldown-plugin@0.11.2(rolldown@1.0.1)(workerd@1.20260708.1)':
+  '@distilled.cloud/cloudflare-rolldown-plugin@0.11.2(rolldown@1.0.1)(workerd@1.20260722.1)':
     dependencies:
-      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260708.1)
+      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260722.1)
       magic-string: 0.30.21
       unenv: 2.0.0-rc.24
     optionalDependencies:
@@ -17740,10 +17728,10 @@ snapshots:
       '@effect/platform-bun': 4.0.0-beta.84(effect@4.0.0-beta.84)
       '@effect/platform-node': 4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1)
 
-  '@distilled.cloud/cloudflare-vite-plugin@0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260708.1)':
+  '@distilled.cloud/cloudflare-vite-plugin@0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260722.1)':
     dependencies:
       '@distilled.cloud/cloudflare': 0.26.1(effect@4.0.0-beta.84)
-      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260708.1)
+      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260722.1)
       '@distilled.cloud/cloudflare-runtime': 0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)
       effect: 4.0.0-beta.84
     optionalDependencies:
@@ -17965,6 +17953,11 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
+  '@emnapi/runtime@1.11.3':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@emnapi/wasi-threads@1.2.1':
     dependencies:
       tslib: 2.8.1
@@ -18235,7 +18228,7 @@ snapshots:
       globals: 14.0.0
       ignore: 5.3.2
       import-fresh: 3.3.1
-      js-yaml: 4.2.0
+      js-yaml: 4.3.0
       minimatch: 3.1.4
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -18311,7 +18304,7 @@ snapshots:
       source-map-support: 0.5.21
       stacktrace-parser: 0.1.11
       structured-headers: 0.4.1
-      tar: 7.5.19
+      tar: 7.5.21
       terminal-link: 2.1.1
       undici: 6.27.0
       wrap-ansi: 7.0.0
@@ -18386,7 +18379,7 @@ snapshots:
       source-map-support: 0.5.21
       stacktrace-parser: 0.1.11
       structured-headers: 0.4.1
-      tar: 7.5.19
+      tar: 7.5.21
       terminal-link: 2.1.1
       undici: 6.27.0
       wrap-ansi: 7.0.0
@@ -18529,7 +18522,7 @@ snapshots:
       jsc-safe-url: 0.2.4
       lightningcss: 1.32.0
       minimatch: 9.0.7
-      postcss: 8.5.10
+      postcss: 8.5.18
       resolve-from: 5.0.0
     optionalDependencies:
       expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
@@ -18653,7 +18646,7 @@ snapshots:
       '@babel/code-frame': 7.10.4
       chalk: 4.1.2
       find-up: 5.0.0
-      js-yaml: 4.2.0
+      js-yaml: 4.3.0
 
   '@floating-ui/core@1.8.0':
     dependencies:
@@ -18670,12 +18663,6 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
 
-  '@floating-ui/react-dom@2.1.9(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@floating-ui/dom': 1.8.0
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-
   '@floating-ui/react-dom@2.1.9(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@floating-ui/dom': 1.8.0
@@ -18794,98 +18781,108 @@ snapshots:
 
   '@img/colour@1.1.0': {}
 
-  '@img/sharp-darwin-arm64@0.34.5':
+  '@img/sharp-darwin-arm64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
+      '@img/sharp-libvips-darwin-arm64': 1.3.1
     optional: true
 
-  '@img/sharp-darwin-x64@0.34.5':
+  '@img/sharp-darwin-x64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.2.4
+      '@img/sharp-libvips-darwin-x64': 1.3.1
+    optional: true
+
+  '@img/sharp-freebsd-wasm32@0.35.2':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.2
     optional: true
 
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
+  '@img/sharp-libvips-darwin-arm64@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-darwin-x64@1.2.4':
+  '@img/sharp-libvips-darwin-x64@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linux-arm64@1.2.4':
+  '@img/sharp-libvips-linux-arm64@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linux-arm@1.2.4':
+  '@img/sharp-libvips-linux-arm@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
+  '@img/sharp-libvips-linux-ppc64@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
+  '@img/sharp-libvips-linux-riscv64@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linux-s390x@1.2.4':
+  '@img/sharp-libvips-linux-s390x@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linux-x64@1.2.4':
+  '@img/sharp-libvips-linux-x64@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.1':
     optional: true
 
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
+  '@img/sharp-libvips-linuxmusl-x64@1.3.1':
     optional: true
 
-  '@img/sharp-linux-arm64@0.34.5':
+  '@img/sharp-linux-arm64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.2.4
+      '@img/sharp-libvips-linux-arm64': 1.3.1
     optional: true
 
-  '@img/sharp-linux-arm@0.34.5':
+  '@img/sharp-linux-arm@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.2.4
+      '@img/sharp-libvips-linux-arm': 1.3.1
     optional: true
 
-  '@img/sharp-linux-ppc64@0.34.5':
+  '@img/sharp-linux-ppc64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
+      '@img/sharp-libvips-linux-ppc64': 1.3.1
     optional: true
 
-  '@img/sharp-linux-riscv64@0.34.5':
+  '@img/sharp-linux-riscv64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
+      '@img/sharp-libvips-linux-riscv64': 1.3.1
     optional: true
 
-  '@img/sharp-linux-s390x@0.34.5':
+  '@img/sharp-linux-s390x@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.2.4
+      '@img/sharp-libvips-linux-s390x': 1.3.1
     optional: true
 
-  '@img/sharp-linux-x64@0.34.5':
+  '@img/sharp-linux-x64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.2.4
+      '@img/sharp-libvips-linux-x64': 1.3.1
     optional: true
 
-  '@img/sharp-linuxmusl-arm64@0.34.5':
+  '@img/sharp-linuxmusl-arm64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.1
     optional: true
 
-  '@img/sharp-linuxmusl-x64@0.34.5':
+  '@img/sharp-linuxmusl-x64@0.35.2':
     optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.1
     optional: true
 
-  '@img/sharp-wasm32@0.34.5':
+  '@img/sharp-wasm32@0.35.2':
     dependencies:
-      '@emnapi/runtime': 1.10.0
+      '@emnapi/runtime': 1.11.3
+    optional: true
+
+  '@img/sharp-webcontainers-wasm32@0.35.2':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.2
     optional: true
 
-  '@img/sharp-win32-arm64@0.34.5':
+  '@img/sharp-win32-arm64@0.35.2':
     optional: true
 
-  '@img/sharp-win32-ia32@0.34.5':
+  '@img/sharp-win32-ia32@0.35.2':
     optional: true
 
-  '@img/sharp-win32-x64@0.34.5':
+  '@img/sharp-win32-x64@0.35.2':
     optional: true
 
   '@internationalized/date@3.12.2':
@@ -18900,7 +18897,7 @@ snapshots:
 
   '@isaacs/fs-minipass@4.0.1':
     dependencies:
-      minipass: 7.1.2
+      minipass: 7.1.3
 
   '@isaacs/ttlcache@1.4.1': {}
 
@@ -19351,6 +19348,13 @@ snapshots:
       '@tybys/wasm-util': 0.10.3
     optional: true
 
+  '@napi-rs/wasm-runtime@1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)':
+    dependencies:
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.11.3
+      '@tybys/wasm-util': 0.10.3
+    optional: true
+
   '@neon-rs/load@0.0.4': {}
 
   '@nicolo-ribaudo/chokidar-2@2.1.8-no-fsevents.3':
@@ -19364,7 +19368,7 @@ snapshots:
 
   '@noble/hashes@2.2.0': {}
 
-  '@nodable/entities@2.2.0': {}
+  '@nodable/entities@3.0.0': {}
 
   '@nodelib/fs.scandir@2.1.5':
     dependencies:
@@ -19787,11 +19791,11 @@ snapshots:
 
   '@radix-ui/primitive@1.1.5': {}
 
-  '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-accessible-icon@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19813,19 +19817,19 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-accordion@1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19843,15 +19847,15 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-alert-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19874,49 +19878,49 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-aspect-ratio@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-aspect-ratio@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-avatar@1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-avatar@1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-checkbox@1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-checkbox@1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19937,18 +19941,18 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-collapsible@1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -19977,18 +19981,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-collection@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
@@ -20039,15 +20031,15 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-context-menu@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-context-menu@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20108,28 +20100,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
-      aria-hidden: 1.2.6
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-      react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-dialog@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -20213,19 +20183,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-dismissable-layer@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -20268,17 +20225,17 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-dropdown-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20317,17 +20274,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-focus-scope@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.1.0)
@@ -20351,33 +20297,33 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-form@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-form@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-hover-card@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-hover-card@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20412,11 +20358,11 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20447,46 +20393,46 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-menu@2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       aria-hidden: 1.2.6
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-menubar@1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-menubar@1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20513,60 +20459,60 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-navigation-menu@1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-one-time-password-field@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-one-time-password-field@0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-password-toggle-field@0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-password-toggle-field@0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20594,24 +20540,24 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-popover@1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       aria-hidden: 1.2.6
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
@@ -20653,20 +20599,20 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-popper@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@floating-ui/react-dom': 2.1.9(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@floating-ui/react-dom': 2.1.9(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-rect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/rect': 1.1.2
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20691,16 +20637,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
@@ -20740,15 +20676,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-presence@1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.1.0)
@@ -20768,11 +20695,11 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-primitive@2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/react-slot': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20795,15 +20722,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.1.0)
@@ -20823,30 +20741,30 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-progress@1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-radio-group@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-radio-group@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -20889,25 +20807,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-roving-focus@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -20981,19 +20880,19 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-scroll-area@1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -21028,31 +20927,31 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-select@2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       aria-hidden: 1.2.6
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
       react-remove-scroll: 2.7.2(@types/react@19.1.17)(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
@@ -21067,30 +20966,30 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-slider@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-slider@1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/number': 1.1.2
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -21131,17 +21030,17 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  '@radix-ui/react-switch@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-switch@1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-previous': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -21178,22 +21077,6 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.1.17
-      '@types/react-dom': 19.2.3(@types/react@19.1.17)
-
   '@radix-ui/react-tabs@1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
@@ -21227,63 +21110,63 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-toast@1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toggle-group@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-toggle-group@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toggle@1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-toggle@1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
 
-  '@radix-ui/react-toolbar@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-toolbar@1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -21308,22 +21191,22 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-tooltip@1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@radix-ui/primitive': 1.1.5
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-id': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -21465,11 +21348,11 @@ snapshots:
       '@types/react': 19.1.17
       '@types/react-dom': 19.1.9(@types/react@19.1.17)
 
-  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -21497,7 +21380,7 @@ snapshots:
     dependencies:
       react: 19.2.7
 
-  '@react-email/components@1.0.12(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@react-email/components@1.0.12(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@react-email/body': 0.3.0(react@19.2.7)
       '@react-email/button': 0.2.1(react@19.2.7)
@@ -21514,7 +21397,7 @@ snapshots:
       '@react-email/link': 0.0.13(react@19.2.7)
       '@react-email/markdown': 0.0.18(react@19.2.7)
       '@react-email/preview': 0.0.14(react@19.2.7)
-      '@react-email/render': 2.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@react-email/render': 2.0.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@react-email/row': 0.0.13(react@19.2.7)
       '@react-email/section': 0.0.17(react@19.2.7)
       '@react-email/tailwind': 2.0.7(@react-email/body@0.3.0(react@19.2.7))(@react-email/button@0.2.1(react@19.2.7))(@react-email/code-block@0.2.1(react@19.2.7))(@react-email/code-inline@0.0.6(react@19.2.7))(@react-email/container@0.0.16(react@19.2.7))(@react-email/heading@0.0.16(react@19.2.7))(@react-email/hr@0.0.12(react@19.2.7))(@react-email/img@0.0.12(react@19.2.7))(@react-email/link@0.0.13(react@19.2.7))(@react-email/preview@0.0.14(react@19.2.7))(@react-email/text@0.1.6(react@19.2.7))(react@19.2.7)
@@ -21572,21 +21455,21 @@ snapshots:
       react-dom: 19.2.7(react@19.2.7)
       react-promise-suspense: 0.3.4
 
-  '@react-email/render@2.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@react-email/render@2.0.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       html-to-text: 9.0.5
       prettier: 3.9.5
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
 
-  '@react-email/render@2.1.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7)':
+  '@react-email/render@2.1.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       entities: 4.5.0
       html-to-text: 9.0.5
       html5parser: 3.0.0
       prettier: 3.9.5
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
 
   '@react-email/row@0.0.13(react@19.2.7)':
     dependencies:
@@ -21789,7 +21672,7 @@ snapshots:
       '@react-navigation/routers': 7.5.3
       escape-string-regexp: 4.0.0
       fast-deep-equal: 3.1.3
-      nanoid: 3.3.15
+      nanoid: 3.3.16
       query-string: 7.1.3
       react: 19.1.0
       react-is: 19.2.3
@@ -21802,7 +21685,7 @@ snapshots:
       '@react-navigation/routers': 7.5.3
       escape-string-regexp: 4.0.0
       fast-deep-equal: 3.1.3
-      nanoid: 3.3.15
+      nanoid: 3.3.16
       query-string: 7.1.3
       react: 19.2.7
       react-is: 19.2.3
@@ -21882,7 +21765,7 @@ snapshots:
 
   '@react-navigation/routers@7.5.3':
     dependencies:
-      nanoid: 3.3.15
+      nanoid: 3.3.16
 
   '@react-three/drei@10.7.7(@react-three/fiber@9.6.1(@types/react@19.1.17)(expo-asset@12.0.12(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7))(expo-file-system@19.0.21(expo@54.0.33)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7)))(expo@54.0.33)(react-dom@19.2.7(react@19.2.7))(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)(three@0.178.0))(@types/react@19.1.17)(@types/three@0.185.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(three@0.178.0)':
     dependencies:
@@ -22060,9 +21943,9 @@ snapshots:
   '@rolldown/binding-openharmony-arm64@1.0.1':
     optional: true
 
-  '@rolldown/binding-wasm32-wasi@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
+  '@rolldown/binding-wasm32-wasi@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)':
     dependencies:
-      '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
     transitivePeerDependencies:
       - '@emnapi/core'
       - '@emnapi/runtime'
@@ -22755,7 +22638,7 @@ snapshots:
       '@alloc/quick-lru': 5.2.0
       '@tailwindcss/node': 4.3.2
       '@tailwindcss/oxide': 4.3.2
-      postcss: 8.5.16
+      postcss: 8.5.18
       tailwindcss: 4.3.2
 
   '@tailwindcss/vite@4.3.0(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))':
@@ -22957,8 +22840,8 @@ snapshots:
     dependencies:
       '@tanstack/history': 1.162.0
       cookie-es: 3.1.1
-      seroval: 1.5.5
-      seroval-plugins: 1.5.5(seroval@1.5.5)
+      seroval: 1.5.6
+      seroval-plugins: 1.5.6(seroval@1.5.6)
 
   '@tanstack/router-core@1.171.5':
     dependencies:
@@ -23947,7 +23830,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 20.19.43
       esbuild: 0.25.12
@@ -23964,7 +23847,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 20.19.43
       esbuild: 0.28.1
@@ -23981,7 +23864,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 22.20.1
       esbuild: 0.28.1
@@ -23998,7 +23881,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 24.10.4
       esbuild: 0.25.12
@@ -24015,7 +23898,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 24.10.4
       esbuild: 0.28.1
@@ -24032,7 +23915,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 24.10.4
       esbuild: 0.28.1
@@ -24049,7 +23932,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 26.1.1
       esbuild: 0.25.12
@@ -24066,7 +23949,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 26.1.1
       esbuild: 0.28.1
@@ -24083,7 +23966,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 26.1.1
       esbuild: 0.28.1
@@ -24100,7 +23983,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 26.1.1
       esbuild: 0.28.1
@@ -24117,7 +24000,7 @@ snapshots:
       '@oxc-project/runtime': 0.133.0
       '@oxc-project/types': 0.133.0
       lightningcss: 1.32.0
-      postcss: 8.5.10
+      postcss: 8.5.18
     optionalDependencies:
       '@types/node': 26.1.1
       esbuild: 0.28.1
@@ -24638,7 +24521,7 @@ snapshots:
       '@vue/shared': 3.5.40
       estree-walker: 2.0.2
       magic-string: 0.30.21
-      postcss: 8.5.20
+      postcss: 8.5.23
       source-map-js: 1.2.1
 
   '@vue/compiler-ssr@3.5.40':
@@ -24834,11 +24717,11 @@ snapshots:
   ajv@8.18.0:
     dependencies:
       fast-deep-equal: 3.1.3
-      fast-uri: 3.1.3
+      fast-uri: 3.1.4
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2
 
-  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260708.1)(ws@8.21.0):
+  alchemy@2.0.0-beta.57(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@types/react@19.1.17)(@voidzero-dev/vite-plus-test@0.1.24(@opentelemetry/api@1.9.0)(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@26.1.0)(terser@5.44.1)(tsx@4.21.0)(typescript@6.0.3)(unrun@0.2.39(synckit@0.11.11))(yaml@2.8.3))(drizzle-kit@1.0.0-rc.3)(drizzle-orm@1.0.0-rc.3(@effect/sql-pg@4.0.0-beta.84(effect@4.0.0-beta.84))(@libsql/client@0.17.4)(@opentelemetry/api@1.9.0)(@sinclair/typebox@0.34.41)(@types/pg@8.20.0)(bun-types@1.3.14)(effect@4.0.0-beta.84)(mysql2@3.16.0)(pg@8.22.0)(sql.js@1.14.1)(typebox@1.1.38)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6))(effect@4.0.0-beta.84)(react-devtools-core@6.1.5)(workerd@1.20260722.1)(ws@8.21.0):
     dependencies:
       '@alchemy.run/node-utils': 0.0.5
       '@aws-sdk/credential-providers': 3.1081.0
@@ -24846,9 +24729,9 @@ snapshots:
       '@distilled.cloud/aws': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/axiom': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/cloudflare': 0.26.1(effect@4.0.0-beta.84)
-      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260708.1)
+      '@distilled.cloud/cloudflare-rolldown-plugin': 0.11.2(rolldown@1.0.1)(workerd@1.20260722.1)
       '@distilled.cloud/cloudflare-runtime': 0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)
-      '@distilled.cloud/cloudflare-vite-plugin': 0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260708.1)
+      '@distilled.cloud/cloudflare-vite-plugin': 0.11.2(@distilled.cloud/cloudflare-runtime@0.11.2(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84))(@distilled.cloud/cloudflare@0.26.1(effect@4.0.0-beta.84))(@effect/platform-bun@4.0.0-beta.84(effect@4.0.0-beta.84))(@effect/platform-node@4.0.0-beta.84(effect@4.0.0-beta.84)(ioredis@5.9.1))(effect@4.0.0-beta.84)(rolldown@1.0.1)(workerd@1.20260722.1)
       '@distilled.cloud/core': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/neon': 0.26.1(effect@4.0.0-beta.84)
       '@distilled.cloud/planetscale': 0.26.1(effect@4.0.0-beta.84)
@@ -24864,7 +24747,7 @@ snapshots:
       capnweb: 0.6.1
       effect: 4.0.0-beta.84
       fast-glob: 3.3.3
-      fast-xml-parser: 5.10.0
+      fast-xml-parser: 5.10.1
       ink: 6.8.0(@types/react@19.1.17)(react-devtools-core@6.1.5)(react@19.2.7)
       jszip: 3.10.1
       libsodium-wrappers: 0.8.4
@@ -25228,7 +25111,7 @@ snapshots:
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.28.4
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
@@ -25260,7 +25143,7 @@ snapshots:
       resolve-from: 5.0.0
     optionalDependencies:
       '@babel/runtime': 7.29.7
-      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.2.7))(react@19.2.7)
+      expo: 54.0.33(@babel/core@7.29.6)(@expo/metro-runtime@6.1.2)(expo-router@6.0.23)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react@19.1.0)
     transitivePeerDependencies:
       - '@babel/core'
       - supports-color
@@ -25273,8 +25156,6 @@ snapshots:
 
   bail@2.0.2: {}
 
-  balanced-match@1.0.2: {}
-
   balanced-match@4.0.4: {}
 
   base64-js@1.5.1: {}
@@ -25368,12 +25249,7 @@ snapshots:
     dependencies:
       big-integer: 1.6.52
 
-  brace-expansion@1.1.13:
-    dependencies:
-      balanced-match: 1.0.2
-      concat-map: 0.0.1
-
-  brace-expansion@5.0.7:
+  brace-expansion@5.0.8(patch_hash=ca2c07b933974ca774e3e37039d8c563bb28f04710ba4c7162a31a96faff77b9):
     dependencies:
       balanced-match: 4.0.4
 
@@ -25648,14 +25524,14 @@ snapshots:
 
   cluster-key-slot@1.1.2: {}
 
-  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-id': 1.1.1(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     transitivePeerDependencies:
       - '@types/react'
       - '@types/react-dom'
@@ -25738,8 +25614,6 @@ snapshots:
 
   compute-scroll-into-view@3.1.1: {}
 
-  concat-map@0.0.1: {}
-
   conf@15.1.0:
     dependencies:
       ajv: 8.18.0
@@ -27186,7 +27060,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.28.4)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
+  expo-module-scripts@5.0.8(@babel/core@7.29.6)(@babel/runtime@7.29.7)(@jest/types@29.6.3)(babel-jest@29.7.0(@babel/core@7.29.6))(esbuild@0.28.1)(eslint@9.39.2(jiti@2.7.0))(expo@54.0.33)(jest@29.7.0(@types/node@24.10.4))(prettier@3.9.5)(react-native@0.81.5(@babel/core@7.29.6)(@types/react@19.1.17)(react@19.1.0))(react-refresh@0.18.0)(react-test-renderer@19.1.0(react@19.1.0))(react@19.1.0):
     dependencies:
       '@babel/cli': 7.28.3(@babel/core@7.29.6)
       '@babel/plugin-transform-export-namespace-from': 7.27.1(@babel/core@7.29.6)
@@ -27197,7 +27071,7 @@ snapshots:
       '@tsconfig/node18': 18.2.6
       '@types/jest': 29.5.14
       babel-plugin-dynamic-import-node: 2.3.3
-      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.28.4)(expo@54.0.33)(react-refresh@0.18.0)
+      babel-preset-expo: 54.0.10(@babel/core@7.29.6)(@babel/runtime@7.29.7)(expo@54.0.33)(react-refresh@0.18.0)
       commander: 12.1.0
       eslint-config-universe: 15.0.3(eslint@9.39.2(jiti@2.7.0))(prettier@3.9.5)(typescript@5.9.3)
       glob: 13.0.0
@@ -27508,16 +27382,16 @@ snapshots:
 
   fast-text-encoding@1.0.6: {}
 
-  fast-uri@3.1.3: {}
+  fast-uri@3.1.4: {}
 
   fast-xml-builder@1.3.0:
     dependencies:
       path-expression-matcher: 1.6.2
       xml-naming: 0.3.0
 
-  fast-xml-parser@5.10.0:
+  fast-xml-parser@5.10.1:
     dependencies:
-      '@nodable/entities': 2.2.0
+      '@nodable/entities': 3.0.0
       fast-xml-builder: 1.3.0
       is-unsafe: 2.0.0
       path-expression-matcher: 1.6.2
@@ -28352,10 +28226,10 @@ snapshots:
 
   inline-style-parser@0.2.7: {}
 
-  input-otp@1.4.2(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  input-otp@1.4.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
 
   internal-slot@1.1.0:
     dependencies:
@@ -29170,7 +29044,7 @@ snapshots:
       argparse: 1.0.10
       esprima: 4.0.1
 
-  js-yaml@4.2.0:
+  js-yaml@4.3.0:
     dependencies:
       argparse: 2.0.1
 
@@ -29299,7 +29173,7 @@ snapshots:
   just-bash@3.1.0:
     dependencies:
       diff: 8.0.4
-      fast-xml-parser: 5.10.0
+      fast-xml-parser: 5.10.1
       file-type: 21.3.4
       ini: 6.0.0
       minimatch: 10.2.3
@@ -30272,12 +30146,12 @@ snapshots:
 
   min-indent@1.0.1: {}
 
-  miniflare@4.20260708.1:
+  miniflare@4.20260722.0:
     dependencies:
       '@cspotcode/source-map-support': 0.8.1
-      sharp: 0.34.5
+      sharp: 0.35.2
       undici: 7.28.0
-      workerd: 1.20260708.1
+      workerd: 1.20260722.1
       ws: 8.21.0
       youch: 4.1.0-beta.10
     transitivePeerDependencies:
@@ -30286,15 +30160,15 @@ snapshots:
 
   minimatch@10.2.3:
     dependencies:
-      brace-expansion: 5.0.7
+      brace-expansion: 5.0.8(patch_hash=ca2c07b933974ca774e3e37039d8c563bb28f04710ba4c7162a31a96faff77b9)
 
   minimatch@3.1.4:
     dependencies:
-      brace-expansion: 1.1.13
+      brace-expansion: 5.0.8(patch_hash=ca2c07b933974ca774e3e37039d8c563bb28f04710ba4c7162a31a96faff77b9)
 
   minimatch@9.0.7:
     dependencies:
-      brace-expansion: 5.0.7
+      brace-expansion: 5.0.8(patch_hash=ca2c07b933974ca774e3e37039d8c563bb28f04710ba4c7162a31a96faff77b9)
 
   minimist@1.2.8: {}
 
@@ -30304,7 +30178,7 @@ snapshots:
 
   minizlib@3.1.0:
     dependencies:
-      minipass: 7.1.2
+      minipass: 7.1.3
 
   mkdirp-classic@0.5.3:
     optional: true
@@ -30408,11 +30282,6 @@ snapshots:
 
   nested-error-stacks@2.0.1: {}
 
-  next-themes@0.4.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-
   next-themes@0.4.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       react: 19.2.7
@@ -31510,28 +31379,21 @@ snapshots:
 
   possible-typed-array-names@1.1.0: {}
 
-  postcss-load-config@6.0.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3):
+  postcss-load-config@6.0.1(jiti@2.7.0)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       lilconfig: 3.1.3
     optionalDependencies:
       jiti: 2.7.0
-      postcss: 8.5.10
       tsx: 4.21.0
       yaml: 2.8.3
 
-  postcss@8.5.10:
-    dependencies:
-      nanoid: 3.3.15
-      picocolors: 1.1.1
-      source-map-js: 1.2.1
-
-  postcss@8.5.16:
+  postcss@8.5.18:
     dependencies:
-      nanoid: 3.3.15
+      nanoid: 3.3.16
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
-  postcss@8.5.20:
+  postcss@8.5.23:
     dependencies:
       nanoid: 3.3.16
       picocolors: 1.1.1
@@ -31727,55 +31589,55 @@ snapshots:
       '@jitl/quickjs-wasmfile-release-sync': 0.32.0
       quickjs-emscripten-core: 0.32.0
 
-  radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  radix-ui@1.6.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       '@radix-ui/primitive': 1.1.5
-      '@radix-ui/react-accessible-icon': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-alert-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-aspect-ratio': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-avatar': 1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-checkbox': 1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-accessible-icon': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-accordion': 1.2.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-alert-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-aspect-ratio': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-avatar': 1.2.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-checkbox': 1.3.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collapsible': 1.1.16(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-collection': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-context': 1.2.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-context-menu': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-context-menu': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-direction': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-dropdown-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dismissable-layer': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-dropdown-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-form': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-hover-card': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-menubar': 1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-one-time-password-field': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-password-toggle-field': 0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-progress': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-radio-group': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-select': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slider': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-focus-scope': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-form': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-hover-card': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-menu': 2.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-menubar': 1.1.20(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-navigation-menu': 1.2.18(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-one-time-password-field': 0.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-password-toggle-field': 0.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popover': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-popper': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-presence': 1.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-progress': 1.1.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-radio-group': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-roving-focus': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-scroll-area': 1.2.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-select': 2.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-slider': 1.4.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-slot': 1.3.0(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-switch': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toast': 1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toolbar': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-tooltip': 1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-switch': 1.3.3(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-tabs': 1.1.17(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toast': 1.2.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle': 1.1.14(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toggle-group': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-toolbar': 1.1.15(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-tooltip': 1.2.12(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.1.17)(react@19.2.7)
@@ -31783,9 +31645,9 @@ snapshots:
       '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.1.17)(react@19.2.7)
       '@radix-ui/react-use-size': 1.1.2(@types/react@19.1.17)(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
       '@types/react': 19.1.17
       '@types/react-dom': 19.2.3(@types/react@19.1.17)
@@ -31841,11 +31703,6 @@ snapshots:
       react: 19.1.0
       scheduler: 0.26.0
 
-  react-dom@19.1.1(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      scheduler: 0.26.0
-
   react-dom@19.2.7(react@19.1.0):
     dependencies:
       react: 19.1.0
@@ -31863,11 +31720,11 @@ snapshots:
       react: 19.2.7
       react-dom: 19.2.7(react@19.2.7)
 
-  react-email@6.7.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  react-email@6.7.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       '@babel/parser': 7.27.0
       '@babel/traverse': 7.27.0
-      '@react-email/render': 2.1.0(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      '@react-email/render': 2.1.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       chokidar: 4.0.3
       commander: 13.1.0
       conf: 15.1.0
@@ -31885,7 +31742,7 @@ snapshots:
       prismjs: 1.30.0
       prompts: 2.4.2
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
       socket.io: 4.8.3
       tailwindcss: 4.3.2
       tsconfig-paths: 4.2.0
@@ -32195,18 +32052,10 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.1.17
 
-  react-resizable-panels@3.0.6(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-
-  react-smooth@4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
+  react-resizable-panels@3.0.6(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      fast-equals: 5.4.1
-      prop-types: 15.8.1
       react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-      react-transition-group: 4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
+      react-dom: 19.2.7(react@19.2.7)
 
   react-smooth@4.0.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
@@ -32245,15 +32094,6 @@ snapshots:
       scheduler: 0.26.0
     optional: true
 
-  react-transition-group@4.4.5(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
-    dependencies:
-      '@babel/runtime': 7.29.7
-      dom-helpers: 5.2.1
-      loose-envify: 1.4.0
-      prop-types: 15.8.1
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-
   react-transition-group@4.4.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       '@babel/runtime': 7.29.7
@@ -32320,19 +32160,6 @@ snapshots:
     dependencies:
       decimal.js-light: 2.5.1
 
-  recharts@2.15.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
-    dependencies:
-      clsx: 2.1.1
-      eventemitter3: 4.0.7
-      lodash: 4.18.0
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-      react-is: 18.3.1
-      react-smooth: 4.0.4(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      recharts-scale: 0.4.5
-      tiny-invariant: 1.3.3
-      victory-vendor: 36.9.2
-
   recharts@2.15.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       clsx: 2.1.1
@@ -32630,7 +32457,7 @@ snapshots:
 
   robust-predicates@3.0.3: {}
 
-  rolldown-plugin-dts@0.20.0(@typescript/native-preview@7.0.0-dev.20260210.1)(rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0))(typescript@5.8.3):
+  rolldown-plugin-dts@0.20.0(@typescript/native-preview@7.0.0-dev.20260210.1)(rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3))(typescript@5.8.3):
     dependencies:
       '@babel/generator': 7.29.7
       '@babel/parser': 7.29.7
@@ -32640,14 +32467,14 @@ snapshots:
       dts-resolver: 2.1.3
       get-tsconfig: 4.13.0
       obug: 2.1.1
-      rolldown: 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      rolldown: 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
     optionalDependencies:
       '@typescript/native-preview': 7.0.0-dev.20260210.1
       typescript: 5.8.3
     transitivePeerDependencies:
       - oxc-resolver
 
-  rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0):
+  rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3):
     dependencies:
       '@oxc-project/types': 0.103.0
       '@rolldown/pluginutils': 1.0.0-beta.57
@@ -32662,7 +32489,7 @@ snapshots:
       '@rolldown/binding-linux-x64-gnu': 1.0.0-beta.57
       '@rolldown/binding-linux-x64-musl': 1.0.0-beta.57
       '@rolldown/binding-openharmony-arm64': 1.0.0-beta.57
-      '@rolldown/binding-wasm32-wasi': 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      '@rolldown/binding-wasm32-wasi': 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
       '@rolldown/binding-win32-arm64-msvc': 1.0.0-beta.57
       '@rolldown/binding-win32-x64-msvc': 1.0.0-beta.57
     transitivePeerDependencies:
@@ -32854,8 +32681,14 @@ snapshots:
     dependencies:
       seroval: 1.5.5
 
+  seroval-plugins@1.5.6(seroval@1.5.6):
+    dependencies:
+      seroval: 1.5.6
+
   seroval@1.5.5: {}
 
+  seroval@1.5.6: {}
+
   serve-static@1.16.3:
     dependencies:
       encodeurl: 2.0.0
@@ -32901,36 +32734,37 @@ snapshots:
 
   shallowequal@1.1.0: {}
 
-  sharp@0.34.5:
+  sharp@0.35.2:
     dependencies:
       '@img/colour': 1.1.0
       detect-libc: 2.1.2
       semver: 7.8.5
     optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.34.5
-      '@img/sharp-darwin-x64': 0.34.5
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
-      '@img/sharp-libvips-darwin-x64': 1.2.4
-      '@img/sharp-libvips-linux-arm': 1.2.4
-      '@img/sharp-libvips-linux-arm64': 1.2.4
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
-      '@img/sharp-libvips-linux-s390x': 1.2.4
-      '@img/sharp-libvips-linux-x64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
-      '@img/sharp-linux-arm': 0.34.5
-      '@img/sharp-linux-arm64': 0.34.5
-      '@img/sharp-linux-ppc64': 0.34.5
-      '@img/sharp-linux-riscv64': 0.34.5
-      '@img/sharp-linux-s390x': 0.34.5
-      '@img/sharp-linux-x64': 0.34.5
-      '@img/sharp-linuxmusl-arm64': 0.34.5
-      '@img/sharp-linuxmusl-x64': 0.34.5
-      '@img/sharp-wasm32': 0.34.5
-      '@img/sharp-win32-arm64': 0.34.5
-      '@img/sharp-win32-ia32': 0.34.5
-      '@img/sharp-win32-x64': 0.34.5
+      '@img/sharp-darwin-arm64': 0.35.2
+      '@img/sharp-darwin-x64': 0.35.2
+      '@img/sharp-freebsd-wasm32': 0.35.2
+      '@img/sharp-libvips-darwin-arm64': 1.3.1
+      '@img/sharp-libvips-darwin-x64': 1.3.1
+      '@img/sharp-libvips-linux-arm': 1.3.1
+      '@img/sharp-libvips-linux-arm64': 1.3.1
+      '@img/sharp-libvips-linux-ppc64': 1.3.1
+      '@img/sharp-libvips-linux-riscv64': 1.3.1
+      '@img/sharp-libvips-linux-s390x': 1.3.1
+      '@img/sharp-libvips-linux-x64': 1.3.1
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.1
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.1
+      '@img/sharp-linux-arm': 0.35.2
+      '@img/sharp-linux-arm64': 0.35.2
+      '@img/sharp-linux-ppc64': 0.35.2
+      '@img/sharp-linux-riscv64': 0.35.2
+      '@img/sharp-linux-s390x': 0.35.2
+      '@img/sharp-linux-x64': 0.35.2
+      '@img/sharp-linuxmusl-arm64': 0.35.2
+      '@img/sharp-linuxmusl-x64': 0.35.2
+      '@img/sharp-webcontainers-wasm32': 0.35.2
+      '@img/sharp-win32-arm64': 0.35.2
+      '@img/sharp-win32-ia32': 0.35.2
+      '@img/sharp-win32-x64': 0.35.2
 
   shebang-command@2.0.0:
     dependencies:
@@ -33082,11 +32916,6 @@ snapshots:
       react: 19.1.0
       react-dom: 19.1.1(react@19.1.0)
 
-  sonner@2.0.7(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-
   sonner@2.0.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
       react: 19.2.7
@@ -33441,18 +33270,18 @@ snapshots:
       readable-stream: 3.6.2
     optional: true
 
-  tar@7.5.19:
+  tar@7.5.21:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
-      minipass: 7.1.2
+      minipass: 7.1.3
       minizlib: 3.1.0
       yallist: 5.0.0
 
   taze@0.18.0:
     dependencies:
       '@antfu/ni': 0.23.2
-      js-yaml: 4.2.0
+      js-yaml: 4.3.0
       ofetch: 1.5.1
       package-manager-detector: 0.2.11
       tinyexec: 0.3.2
@@ -33679,7 +33508,7 @@ snapshots:
       minimist: 1.2.8
       strip-bom: 3.0.0
 
-  tsdown@0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3):
+  tsdown@0.18.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)(@typescript/native-preview@7.0.0-dev.20260210.1)(synckit@0.11.11)(typescript@5.8.3):
     dependencies:
       ansis: 4.2.0
       cac: 6.7.14
@@ -33689,8 +33518,8 @@ snapshots:
       import-without-cache: 0.2.5
       obug: 2.1.1
       picomatch: 4.0.4
-      rolldown: 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
-      rolldown-plugin-dts: 0.20.0(@typescript/native-preview@7.0.0-dev.20260210.1)(rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0))(typescript@5.8.3)
+      rolldown: 1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
+      rolldown-plugin-dts: 0.20.0(@typescript/native-preview@7.0.0-dev.20260210.1)(rolldown@1.0.0-beta.57(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3))(typescript@5.8.3)
       semver: 7.7.4
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
@@ -33710,7 +33539,7 @@ snapshots:
 
   tslib@2.8.1: {}
 
-  tsup@8.5.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
+  tsup@8.5.1(jiti@2.7.0)(tsx@4.21.0)(typescript@5.6.3)(yaml@2.8.3):
     dependencies:
       bundle-require: 5.1.0(esbuild@0.28.1)
       cac: 6.7.14
@@ -33721,7 +33550,7 @@ snapshots:
       fix-dts-default-cjs-exports: 1.0.1
       joycon: 3.1.1
       picocolors: 1.1.1
-      postcss-load-config: 6.0.1(jiti@2.7.0)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3)
+      postcss-load-config: 6.0.1(jiti@2.7.0)(tsx@4.21.0)(yaml@2.8.3)
       resolve-from: 5.0.0
       rollup: 4.59.0
       source-map: 0.7.6
@@ -33730,7 +33559,6 @@ snapshots:
       tinyglobby: 0.2.15
       tree-kill: 1.2.2
     optionalDependencies:
-      postcss: 8.5.10
       typescript: 5.6.3
     transitivePeerDependencies:
       - jiti
@@ -34156,15 +33984,6 @@ snapshots:
       - '@types/react-dom'
     optional: true
 
-  vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7):
-    dependencies:
-      '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.1.1(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.1.1(react@19.2.7)
-    transitivePeerDependencies:
-      - '@types/react'
-      - '@types/react-dom'
-
   vaul@1.1.2(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0):
     dependencies:
       '@radix-ui/react-dialog': 1.1.19(@types/react-dom@19.2.3(@types/react@19.1.17))(@types/react@19.1.17)(react-dom@19.2.7(react@19.1.0))(react@19.1.0)
@@ -34949,7 +34768,7 @@ snapshots:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
-      postcss: 8.5.10
+      postcss: 8.5.18
       rollup: 4.59.0
       tinyglobby: 0.2.15
     optionalDependencies:
@@ -34966,7 +34785,7 @@ snapshots:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
-      postcss: 8.5.10
+      postcss: 8.5.18
       rollup: 4.59.0
       tinyglobby: 0.2.15
     optionalDependencies:
@@ -34983,7 +34802,7 @@ snapshots:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
-      postcss: 8.5.10
+      postcss: 8.5.18
       rollup: 4.59.0
       tinyglobby: 0.2.15
     optionalDependencies:
@@ -35000,7 +34819,7 @@ snapshots:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
-      postcss: 8.5.10
+      postcss: 8.5.18
       rollup: 4.59.0
       tinyglobby: 0.2.15
     optionalDependencies:
@@ -35409,24 +35228,24 @@ snapshots:
       '@cloudflare/workerd-linux-arm64': 1.20260526.1
       '@cloudflare/workerd-windows-64': 1.20260526.1
 
-  workerd@1.20260708.1:
+  workerd@1.20260722.1:
     optionalDependencies:
-      '@cloudflare/workerd-darwin-64': 1.20260708.1
-      '@cloudflare/workerd-darwin-arm64': 1.20260708.1
-      '@cloudflare/workerd-linux-64': 1.20260708.1
-      '@cloudflare/workerd-linux-arm64': 1.20260708.1
-      '@cloudflare/workerd-windows-64': 1.20260708.1
+      '@cloudflare/workerd-darwin-64': 1.20260722.1
+      '@cloudflare/workerd-darwin-arm64': 1.20260722.1
+      '@cloudflare/workerd-linux-64': 1.20260722.1
+      '@cloudflare/workerd-linux-arm64': 1.20260722.1
+      '@cloudflare/workerd-windows-64': 1.20260722.1
 
-  wrangler@4.110.0:
+  wrangler@4.114.0:
     dependencies:
       '@cloudflare/kv-asset-handler': 0.5.0
-      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260708.1)
+      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260722.1)
       blake3-wasm: 2.1.5
       esbuild: 0.28.1
-      miniflare: 4.20260708.1
+      miniflare: 4.20260722.0
       path-to-regexp: 6.3.0
       unenv: 2.0.0-rc.24
-      workerd: 1.20260708.1
+      workerd: 1.20260722.1
     optionalDependencies:
       fsevents: 2.3.3
     transitivePeerDependencies:
@@ -35481,7 +35300,7 @@ snapshots:
       '@oozcitak/dom': 2.0.2
       '@oozcitak/infra': 2.0.2
       '@oozcitak/util': 10.0.0
-      js-yaml: 4.2.0
+      js-yaml: 4.3.0
 
   xmlbuilder@11.0.1: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 44e096a0e..e7df9201b 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -11,6 +11,7 @@ ignoredBuiltDependencies:
   - node-liblzma
 patchedDependencies:
   "@earendil-works/pi-ai@0.80.7": patches/@earendil-works__pi-ai@0.80.7.patch
+  "brace-expansion@5.0.8": patches/brace-expansion@5.0.8.patch
 catalog:
   # Effect ecosystem (v4)
   effect: 4.0.0-beta.84
@@ -97,7 +98,8 @@ overrides:
   "@babel/plugin-transform-modules-systemjs@<=7.29.3": 7.29.4
   "@babel/core@<=7.29.0": 7.29.6
   "@esbuild-kit/core-utils>esbuild": 0.25.0
-  "@expo/metro-config>postcss": 8.5.10
+  "@expo/cli>tar": 7.5.21
+  "@expo/metro-config>postcss": 8.5.18
   "@isaacs/brace-expansion@<=5.0.0": 5.0.1
   "@tanstack/react-start@>=1.0.0 <1.167.30": 1.167.30
   "@tootallnate/once@<2.0.1": 2.0.1
@@ -105,19 +107,20 @@ overrides:
   "@srsholmes/vitest-react-native>esbuild": 0.28.1
   "ajv@<7": 6.14.0
   "ajv@>=7.0.0-alpha.0 <8.18.0": 8.18.0
-  "brace-expansion@<1.1.13": 1.1.13
-  "brace-expansion@>=2.0.0 <2.0.3": 2.0.3
+  "brace-expansion@<=5.0.7": 5.0.8
   "bundle-require>esbuild": 0.28.1
   "defu@<=6.1.4": 6.1.7
   "drizzle-orm@<0.45.2": 0.45.2
   effect: 4.0.0-beta.84
-  "fast-uri@<=3.1.1": 3.1.3
+  "fast-uri@<=3.1.3": 3.1.4
+  "fast-xml-parser@>=5.9.3 <5.10.1": 5.10.1
   "fdir>picomatch": 4.0.4
   "flatted@<=3.4.1": 3.4.2
   "form-data@>=4.0.0 <4.0.6": 4.0.6
   h3-v2: npm:h3@2.0.1-rc.18
   "js-yaml@<3.15.0": 3.15.0
-  "js-yaml@>=4.0.0 <=4.1.1": 4.2.0
+  "js-yaml@>=4.0.0 <4.3.0": 4.3.0
+  "postcss@>=8.0.0 <8.5.18": 8.5.18
   kysely: 0.28.17
   "lodash@>=4.0.0 <=4.17.23": 4.18.0
   "minimatch@<3.1.4": 3.1.4

From a988d98856f8568bdebf6fc3fe29063e390436e6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 18:54:58 +0200
Subject: [PATCH 126/129] fix: allow filtered deploy without workspace patch

---
 selfhost/entry/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/selfhost/entry/Dockerfile b/selfhost/entry/Dockerfile
index c43338ad9..e565251dd 100644
--- a/selfhost/entry/Dockerfile
+++ b/selfhost/entry/Dockerfile
@@ -12,7 +12,7 @@ COPY . .
 RUN corepack pnpm@11.1.3 install --frozen-lockfile --filter @voidhash/selfhost-entry... --filter @voidhash/www... --ignore-scripts
 RUN VITE_APP_API_URL= VITE_APP_ENV=production VOIDHASH_SELFHOST_BUNDLE=true corepack pnpm@11.1.3 exec turbo build --filter @voidhash/www
 RUN rm -rf /out && corepack pnpm@11.1.3 --config.ignore-scripts=true --config.node-linker=isolated --filter @voidhash/selfhost-entry deploy --prod --legacy /out
-RUN rm -rf /www && corepack pnpm@11.1.3 --config.ignore-scripts=true --config.node-linker=hoisted --filter @voidhash/www deploy --prod --legacy /www
+RUN rm -rf /www && corepack pnpm@11.1.3 --config.ignore-scripts=true --config.node-linker=hoisted --config.allow-unused-patches=true --filter @voidhash/www deploy --prod --legacy /www
 
 FROM node:22-bookworm-slim AS runtime
 

From 1d3195fdb361c6289cf1b7b8033e02868ec84569 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 19:08:59 +0200
Subject: [PATCH 127/129] fix: provide manifest cache to thumbnail service

---
 selfhost/entry/src/backend/Thumbnails.ts |  9 ++++--
 selfhost/entry/tests/Thumbnails.test.ts  | 35 ++++++++++++++++++++++--
 2 files changed, 40 insertions(+), 4 deletions(-)

diff --git a/selfhost/entry/src/backend/Thumbnails.ts b/selfhost/entry/src/backend/Thumbnails.ts
index 4e9b1ee90..8ac83debb 100644
--- a/selfhost/entry/src/backend/Thumbnails.ts
+++ b/selfhost/entry/src/backend/Thumbnails.ts
@@ -11,6 +11,7 @@ import {
   type SnapshotImageRendererShape,
 } from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
 import { PublicFileStore } from "@voidhash/core/services/storage/PublicFileStore";
+import { ComponentManifestCacheService } from "@voidhash/core/services/paywallWorkspace/ComponentManifestCacheService";
 import type {
   PreviewTree,
   SnapshotNode,
@@ -151,9 +152,13 @@ export const makeSelfhostSnapshotImageRendererLive = (
 /** Builds the Chromium-backed thumbnail service for the self-host runtime. */
 export const makeSelfhostPaywallThumbnailServiceLive = (
   screenshotConfig: ChromiumScreenshotConfig,
+  renderer: Layer.Layer<SnapshotImageRenderer, never, PublicFileStore> =
+    makeSelfhostSnapshotImageRendererLive(screenshotConfig),
 ) => {
-  const renderer = makeSelfhostSnapshotImageRendererLive(screenshotConfig);
-  return PaywallThumbnailService.layer.pipe(Layer.provide(renderer));
+  return PaywallThumbnailService.layer.pipe(
+    Layer.provide(renderer),
+    Layer.provide(ComponentManifestCacheService.layer),
+  );
 };
 
 /** Runs the best-effort paywall-thumbnail queue consumer until interrupted. */
diff --git a/selfhost/entry/tests/Thumbnails.test.ts b/selfhost/entry/tests/Thumbnails.test.ts
index ef42c3625..765212ea9 100644
--- a/selfhost/entry/tests/Thumbnails.test.ts
+++ b/selfhost/entry/tests/Thumbnails.test.ts
@@ -1,12 +1,43 @@
+import { PaywallArtifactStore } from "@voidhash/core/services/paywallDeploys/PaywallArtifactStore";
+import { MimicHost } from "@voidhash/core/services/paywalls/MimicHost";
 import { HtmlScreenshot } from "@voidhash/core/services/paywallThumbnails/HtmlScreenshot";
+import { PaywallThumbnailService } from "@voidhash/core/services/paywallThumbnails/PaywallThumbnailService";
 import { SnapshotImageRenderer } from "@voidhash/core/services/paywallThumbnails/SnapshotImageRenderer";
 import { PublicFileStore } from "@voidhash/core/services/storage/PublicFileStore";
-import { Effect, Layer } from "effect";
+import { ComponentCompiler } from "@voidhash/core/services/paywallWorkspace/ComponentCompiler";
+import { Db } from "@voidhash/db";
+import { Context, Effect, Layer } from "effect";
 import { describe, expect, it } from "vitest";
 
-import { SelfhostSnapshotImageRendererLive } from "../src/backend/Thumbnails.ts";
+import {
+  makeSelfhostPaywallThumbnailServiceLive,
+  SelfhostSnapshotImageRendererLive,
+} from "../src/backend/Thumbnails.ts";
 
 describe("self-host paywall thumbnail renderer", () => {
+  it("provides the manifest cache required by the thumbnail service", async () => {
+    const renderer = Layer.succeed(SnapshotImageRenderer, {
+      render: () => Effect.succeed(new Uint8Array()),
+    });
+    const dependencies = Layer.mergeAll(
+      Layer.succeed(Db, {} as never),
+      Layer.succeed(MimicHost, {} as never),
+      Layer.succeed(PaywallArtifactStore, {} as never),
+      Layer.succeed(ComponentCompiler, {} as never),
+      Layer.succeed(PublicFileStore, {} as never),
+    );
+
+    const context = await Effect.runPromise(
+      Effect.scoped(
+        Layer.build(makeSelfhostPaywallThumbnailServiceLive({}, renderer)).pipe(
+          Effect.provide(dependencies),
+        ),
+      ),
+    );
+
+    expect(Context.get(context, PaywallThumbnailService)).toBeDefined();
+  });
+
   it("renders static paywall HTML through the screenshot port", async () => {
     const screenshots: string[] = [];
     const png = new Uint8Array([137, 80, 78, 71]);

From 9db19925cee4b2759fd96d761ec02dfb8023e3fc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 19:29:38 +0200
Subject: [PATCH 128/129] fix: use public OpenAPI upgrader entrypoint

---
 apps/www/package.json                 |  1 +
 patches/fumadocs-openapi@11.2.2.patch | 10 ++++++++++
 pnpm-lock.yaml                        | 10 +++++++---
 pnpm-workspace.yaml                   |  1 +
 4 files changed, 19 insertions(+), 3 deletions(-)
 create mode 100644 patches/fumadocs-openapi@11.2.2.patch

diff --git a/apps/www/package.json b/apps/www/package.json
index d768653f0..0dd05f644 100644
--- a/apps/www/package.json
+++ b/apps/www/package.json
@@ -37,6 +37,7 @@
     "@react-three/fiber": "^9.1.2",
     "@react-three/postprocessing": "^3.0.4",
     "@scalar/api-client-react": "^2.0.36",
+    "@scalar/openapi-upgrader": "0.2.11",
     "@t3-oss/env-core": "^0.13.8",
     "@tanstack/query-core": "5.100.11",
     "@tanstack/react-query": "catalog:",
diff --git a/patches/fumadocs-openapi@11.2.2.patch b/patches/fumadocs-openapi@11.2.2.patch
new file mode 100644
index 000000000..6af24b215
--- /dev/null
+++ b/patches/fumadocs-openapi@11.2.2.patch
@@ -0,0 +1,10 @@
+diff --git a/dist/utils/document/load.js b/dist/utils/document/load.js
+index 8fa1a94fcac5409483b05b4091781d8ff9d833a8..725337ae3d97bcd1b15a9ed65d2d92c8b00b60d8 100644
+--- a/dist/utils/document/load.js
++++ b/dist/utils/document/load.js
+@@ -1,4 +1,4 @@
+-import { upgrade } from "../../node_modules/.pnpm/@scalar_openapi-upgrader@0.2.9/node_modules/@scalar/openapi-upgrader/dist/upgrade.js";
++import { upgrade } from "@scalar/openapi-upgrader";
+ import { bundle } from "@fumadocs/api-docs/schema/bundle";
+ //#region src/utils/document/load.ts
+ /**
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d6acc5f7e..b9f60b729 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -201,6 +201,7 @@ pnpmfileChecksum: sha256-FmQ3RWUsIKZQg8qJsKhZOw8G3ylUwk93HvwW4x5Nr5A=
 patchedDependencies:
   '@earendil-works/pi-ai@0.80.7': 3fbb9897213abf111acd834b26232ea390b59077e07751ef66a6e45bd00a4bd3
   brace-expansion@5.0.8: ca2c07b933974ca774e3e37039d8c563bb28f04710ba4c7162a31a96faff77b9
+  fumadocs-openapi@11.2.2: c83454a6fabd7750546f414aed1bf257afa0bee4b25e2e9dc6c858e1dda4fa29
 
 importers:
 
@@ -665,6 +666,9 @@ importers:
       '@scalar/api-client-react':
         specifier: ^2.0.36
         version: 2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3)
+      '@scalar/openapi-upgrader':
+        specifier: 0.2.11
+        version: 0.2.11
       '@t3-oss/env-core':
         specifier: ^0.13.8
         version: 0.13.11(typescript@6.0.3)(valibot@1.4.2(typescript@6.0.3))(zod@4.3.6)
@@ -775,7 +779,7 @@ importers:
         version: 15.2.0(@types/mdast@4.0.4)(@types/mdx@2.0.14)(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react@19.2.7)(rolldown@1.0.1)(vite@7.3.5(@types/node@20.19.43)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.44.1)(tsx@4.21.0)(yaml@2.8.3))
       fumadocs-openapi:
         specifier: ^11.2.2
-        version: 11.2.2(@scalar/api-client-react@2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3))(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        version: 11.2.2(patch_hash=c83454a6fabd7750546f414aed1bf257afa0bee4b25e2e9dc6c858e1dda4fa29)(@scalar/api-client-react@2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3))(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       fumadocs-ui:
         specifier: 16.11.5
         version: 16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2)
@@ -27594,8 +27598,8 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  fumadocs-openapi@11.2.2(@scalar/api-client-react@2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3))(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
+  ? fumadocs-openapi@11.2.2(patch_hash=c83454a6fabd7750546f414aed1bf257afa0bee4b25e2e9dc6c858e1dda4fa29)(@scalar/api-client-react@2.0.36(react@19.2.7)(tailwindcss@4.3.2)(typescript@6.0.3))(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+  : dependencies:
       '@fuma-translate/react': 1.0.2(@types/react@19.1.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@fumadocs/api-docs': 0.2.1(@types/react@19.1.17)(date-fns@4.4.0)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(fumadocs-ui@16.11.5(@types/mdx@2.0.14)(@types/react-dom@19.1.9(@types/react@19.1.17))(@types/react@19.1.17)(fumadocs-core@16.11.5(@mdx-js/mdx@3.1.1)(@tanstack/react-router@1.170.7(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@types/estree-jsx@1.0.5)(@types/hast@3.0.5)(@types/mdast@4.0.4)(@types/react@19.1.17)(lucide-react@0.555.0(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(zod@4.3.6))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@4.3.2))(json-schema-typed@8.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@fumari/json-schema-ts': 1.0.2(json-schema-typed@8.0.2)
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index e7df9201b..d859884a3 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -12,6 +12,7 @@ ignoredBuiltDependencies:
 patchedDependencies:
   "@earendil-works/pi-ai@0.80.7": patches/@earendil-works__pi-ai@0.80.7.patch
   "brace-expansion@5.0.8": patches/brace-expansion@5.0.8.patch
+  fumadocs-openapi@11.2.2: patches/fumadocs-openapi@11.2.2.patch
 catalog:
   # Effect ecosystem (v4)
   effect: 4.0.0-beta.84

From fe93f80a1937316c6bb0dd7c04549444b52f5b62 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dominik=20V=C3=ADt?= <slipiklp@gmail.com>
Date: Mon, 27 Jul 2026 19:56:20 +0200
Subject: [PATCH 129/129] fix: refresh durable alarm dispatch time

---
 selfhost/entry/src/DurableEntityAlarms.ts     | 31 +++++++++++-------
 .../entry/tests/MimicDocumentIdle.test.ts     | 32 ++++++++++++++++++-
 2 files changed, 50 insertions(+), 13 deletions(-)

diff --git a/selfhost/entry/src/DurableEntityAlarms.ts b/selfhost/entry/src/DurableEntityAlarms.ts
index 82bd285a4..77131bab7 100644
--- a/selfhost/entry/src/DurableEntityAlarms.ts
+++ b/selfhost/entry/src/DurableEntityAlarms.ts
@@ -8,20 +8,27 @@ export type DurableEntityAlarmHandler = (
   now: number,
 ) => Effect.Effect<void, unknown>;
 
-/** Dispatches one bounded page of due alarms through the registered type handlers. */
+/**
+ * Dispatches one bounded page of due alarms through the registered type handlers.
+ * When `now` is omitted, the clock is sampled each time the returned effect runs.
+ */
 export const dispatchDurableEntityAlarms = (
   control: NodeDurableEntityControlShape,
   handlers: Readonly<Record<string, DurableEntityAlarmHandler>>,
-  now = Date.now(),
+  now?: number,
 ): Effect.Effect<void, unknown> =>
-  control
-    .listDueAlarms(now, 100)
-    .pipe(
-      Effect.flatMap((due) =>
-        Effect.forEach(
-          due,
-          ({ address }) => handlers[address.type]?.(address, now) ?? Effect.void,
-          { discard: true },
+  Effect.suspend(() => {
+    const dispatchTime = now ?? Date.now();
+    return control
+      .listDueAlarms(dispatchTime, 100)
+      .pipe(
+        Effect.flatMap((due) =>
+          Effect.forEach(
+            due,
+            ({ address }) =>
+              handlers[address.type]?.(address, dispatchTime) ?? Effect.void,
+            { discard: true },
+          ),
         ),
-      ),
-    );
+      );
+  });
diff --git a/selfhost/entry/tests/MimicDocumentIdle.test.ts b/selfhost/entry/tests/MimicDocumentIdle.test.ts
index 7acda3ceb..4685f765d 100644
--- a/selfhost/entry/tests/MimicDocumentIdle.test.ts
+++ b/selfhost/entry/tests/MimicDocumentIdle.test.ts
@@ -7,7 +7,7 @@ import { makeDurableEntityAddress } from "@voidhash/platform/DurableEntity";
 import type { NodeDurableEntityControlShape } from "@voidhash/platform-node/DurableEntity";
 import { makeMemoryDurableEntityHost } from "@voidhash/platform-node/MemoryDurableEntity";
 import { Effect } from "effect";
-import { describe, expect, it } from "vitest";
+import { describe, expect, it, vi } from "vitest";
 
 import { dispatchMimicDocumentIdleAlarms } from "../src/mimic/MimicNodeWebSocket.ts";
 
@@ -21,6 +21,36 @@ const control: NodeDurableEntityControlShape = {
 };
 
 describe("Mimic Node idle alarm dispatch", () => {
+  it("samples the current time whenever a reused dispatch effect runs", async () => {
+    const observed: number[] = [];
+    const clock = vi.spyOn(Date, "now").mockReturnValue(100);
+    const dispatch = dispatchMimicDocumentIdleAlarms(
+      makeMemoryDurableEntityHost(),
+      {
+        control: {
+          listDueAlarms: (now) =>
+            Effect.sync(() => {
+              observed.push(now);
+              return [];
+            }),
+        },
+        debounceMs: 1,
+        publish: () => Effect.void,
+      },
+      () => 0,
+    );
+
+    try {
+      await Effect.runPromise(dispatch);
+      clock.mockReturnValue(200);
+      await Effect.runPromise(dispatch);
+    } finally {
+      clock.mockRestore();
+    }
+
+    expect(observed).toEqual([100, 200]);
+  });
+
   it("publishes and records a persisted dirty revision", async () => {
     const entities = makeMemoryDurableEntityHost();
     const published: MimicDocumentIdleMessageType[] = [];